# Flog Txt Version 1 # Analyzer Version: 3.2.1 # Analyzer Build Date: Jan 15 2020 08:26:44 # Log Creation Date: 30.01.2020 16:21:13.246 Process: id = "1" image_name = "mr.teslabrain@protonmail.com - copy.exe.txt.exe" filename = "c:\\users\\fd1hvy\\desktop\\mr.teslabrain@protonmail.com - copy.exe.txt.exe" page_root = "0x1125a000" os_pid = "0x13d4" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "analysis_target" parent_id = "0" os_parent_pid = "0x740" cmd_line = "\"C:\\Users\\FD1HVy\\Desktop\\Mr.TeslaBrain@protonmail.com - Copy.exe.txt.exe\" " cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000faa5" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 1 os_tid = 0xeb0 [0074.326] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0074.326] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x77180000 [0074.327] GetProcAddress (hModule=0x77180000, lpProcName=0xe5e350) returned 0x77277060 [0074.328] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x77180000 [0074.328] GetProcAddress (hModule=0x77180000, lpProcName="FlsAlloc") returned 0x7727bea0 [0074.328] GetProcAddress (hModule=0x77180000, lpProcName="FlsSetValue") returned 0x77272550 [0074.331] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x77180000 [0074.332] GetProcAddress (hModule=0x77180000, lpProcName="InitializeCriticalSectionEx") returned 0x77277060 [0074.333] GetProcessHeap () returned 0x1f0000 [0074.333] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x77180000 [0074.333] GetProcAddress (hModule=0x77180000, lpProcName="FlsAlloc") returned 0x7727bea0 [0074.333] GetLastError () returned 0x0 [0074.333] GetProcAddress (hModule=0x77180000, lpProcName="FlsGetValue") returned 0x772670c0 [0074.333] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x364) returned 0x202aa8 [0074.334] GetProcAddress (hModule=0x77180000, lpProcName="FlsSetValue") returned 0x77272550 [0074.334] SetLastError (dwErrCode=0x0) [0074.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0xc00) returned 0x203f58 [0074.469] GetStartupInfoW (in: lpStartupInfo=0x117fda8 | out: lpStartupInfo=0x117fda8*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\FD1HVy\\Desktop\\Mr.TeslaBrain@protonmail.com - Copy.exe.txt.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xe224a0, hStdOutput=0x1629af22, hStdError=0xfffffffe)) [0074.469] GetStdHandle (nStdHandle=0xfffffff6) returned 0x8c [0074.469] GetFileType (hFile=0x8c) returned 0x2 [0074.469] GetStdHandle (nStdHandle=0xfffffff5) returned 0x90 [0074.469] GetFileType (hFile=0x90) returned 0x2 [0074.469] GetStdHandle (nStdHandle=0xfffffff4) returned 0x94 [0074.469] GetFileType (hFile=0x94) returned 0x2 [0074.469] GetCommandLineA () returned="\"C:\\Users\\FD1HVy\\Desktop\\Mr.TeslaBrain@protonmail.com - Copy.exe.txt.exe\" " [0074.469] GetCommandLineW () returned="\"C:\\Users\\FD1HVy\\Desktop\\Mr.TeslaBrain@protonmail.com - Copy.exe.txt.exe\" " [0074.469] GetLastError () returned 0x0 [0074.469] SetLastError (dwErrCode=0x0) [0074.469] GetLastError () returned 0x0 [0074.469] SetLastError (dwErrCode=0x0) [0074.470] GetACP () returned 0x4e4 [0074.470] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x220) returned 0x2016a0 [0074.470] IsValidCodePage (CodePage=0x4e4) returned 1 [0074.470] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x117fdd8 | out: lpCPInfo=0x117fdd8) returned 1 [0074.470] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x117f6a0 | out: lpCPInfo=0x117f6a0) returned 1 [0074.470] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x117fcb4, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0074.470] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x117fcb4, cbMultiByte=256, lpWideCharStr=0x117f438, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0074.470] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpCharType=0x117f6b4 | out: lpCharType=0x117f6b4) returned 1 [0074.470] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x117fcb4, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0074.470] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x117fcb4, cbMultiByte=256, lpWideCharStr=0x117f3e8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0074.470] LoadLibraryExW (lpLibFileName="api-ms-win-core-localization-l1-2-1", hFile=0x0, dwFlags=0x800) returned 0x77180000 [0074.470] GetProcAddress (hModule=0x77180000, lpProcName="LCMapStringEx") returned 0x7725ed00 [0074.470] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0074.470] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x117f1d8, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ") returned 256 [0074.470] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ", cchWideChar=256, lpMultiByteStr=0x117fbb4, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ\x12kÖ\x17ðý\x17\x01²\x01ä", lpUsedDefaultChar=0x0) returned 256 [0074.471] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x117fcb4, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0074.471] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x117fcb4, cbMultiByte=256, lpWideCharStr=0x117f408, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ") returned 256 [0074.471] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0074.471] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ", cchSrc=256, lpDestStr=0x117f1f8, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȈ") returned 256 [0074.471] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȈ", cchWideChar=256, lpMultiByteStr=0x117fab4, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞ\x9f \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ\x12kÖ\x17ðý\x17\x01²\x01ä", lpUsedDefaultChar=0x0) returned 256 [0074.471] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x1f6860 [0074.471] GetModuleFileNameA (in: hModule=0x0, lpFilename=0xe8dfe8, nSize=0x104 | out: lpFilename="C:\\Users\\FD1HVy\\Desktop\\Mr.TeslaBrain@protonmail.com - Copy.exe.txt.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\mr.teslabrain@protonmail.com - copy.exe.txt.exe")) returned 0x47 [0074.471] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x50) returned 0x1fe2d8 [0074.471] RtlInitializeSListHead (in: ListHead=0xe8d968 | out: ListHead=0xe8d968) [0074.471] GetLastError () returned 0x0 [0074.471] SetLastError (dwErrCode=0x0) [0074.471] GetEnvironmentStringsW () returned 0x204b60* [0074.472] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1381 [0074.472] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x565) returned 0x205638 [0074.472] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x205638, cbMultiByte=1381, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ALLUSERSPROFILE=C:\\ProgramData", lpUsedDefaultChar=0x0) returned 1381 [0074.472] FreeEnvironmentStringsW (penv=0x204b60) returned 1 [0074.472] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x94) returned 0x1fe350 [0074.472] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x1f) returned 0x1fae90 [0074.472] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x28) returned 0x1fe910 [0074.472] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x37) returned 0x1fe990 [0074.472] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x3c) returned 0x1ff3d8 [0074.472] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x31) returned 0x1ff550 [0074.472] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x14) returned 0x1fa788 [0074.472] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x24) returned 0x1ff420 [0074.472] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0xd) returned 0x2028b0 [0074.472] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x17) returned 0x1fa5e8 [0074.472] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x2b) returned 0x1fee98 [0074.472] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x15) returned 0x1fa7a8 [0074.472] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x17) returned 0x1fa608 [0074.472] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x22) returned 0x1fe9d0 [0074.472] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0xe) returned 0x202790 [0074.472] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0xc1) returned 0x2018c8 [0074.472] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x3e) returned 0x1fea20 [0074.473] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x1b) returned 0x1faeb8 [0074.473] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x1d) returned 0x1faf08 [0074.473] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x48) returned 0x1febf0 [0074.473] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x12) returned 0x1fa7e8 [0074.473] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x18) returned 0x1fa808 [0074.473] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x1b) returned 0x1fb110 [0074.473] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x24) returned 0x1fea68 [0074.473] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x29) returned 0x1ff100 [0074.473] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x1e) returned 0x1fafd0 [0074.473] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x6b) returned 0x2021b8 [0074.473] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x17) returned 0x1fa828 [0074.473] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0xf) returned 0x2027a8 [0074.473] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x16) returned 0x1fa868 [0074.473] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x28) returned 0x1fe6d0 [0074.473] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x27) returned 0x1fec40 [0074.473] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x12) returned 0x205110 [0074.473] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x21) returned 0x1ff590 [0074.473] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x10) returned 0x202970 [0074.473] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x1c) returned 0x1faf58 [0074.473] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x12) returned 0x205190 [0074.473] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205638 | out: hHeap=0x1f0000) returned 1 [0074.474] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x74030000 [0074.474] GetProcAddress (hModule=0x74030000, lpProcName="FlsAlloc") returned 0x74044ae0 [0074.474] GetProcAddress (hModule=0x74030000, lpProcName="FlsFree") returned 0x74044b00 [0074.474] GetProcAddress (hModule=0x74030000, lpProcName="FlsGetValue") returned 0x74044b20 [0074.474] GetProcAddress (hModule=0x74030000, lpProcName="FlsSetValue") returned 0x74044b40 [0074.474] GetProcAddress (hModule=0x74030000, lpProcName="InitializeCriticalSectionEx") returned 0x7409ebc0 [0074.474] GetProcAddress (hModule=0x74030000, lpProcName="InitOnceExecuteOnce") returned 0x77275550 [0074.474] GetProcAddress (hModule=0x74030000, lpProcName="CreateEventExW") returned 0x7409eb20 [0074.474] GetProcAddress (hModule=0x74030000, lpProcName="CreateSemaphoreW") returned 0x7409eb90 [0074.475] GetProcAddress (hModule=0x74030000, lpProcName="CreateSemaphoreExW") returned 0x7409eb80 [0074.475] GetProcAddress (hModule=0x74030000, lpProcName="CreateThreadpoolTimer") returned 0x74046d30 [0074.475] GetProcAddress (hModule=0x74030000, lpProcName="SetThreadpoolTimer") returned 0x773dd7c0 [0074.475] GetProcAddress (hModule=0x74030000, lpProcName="WaitForThreadpoolTimerCallbacks") returned 0x773db840 [0074.475] GetProcAddress (hModule=0x74030000, lpProcName="CloseThreadpoolTimer") returned 0x773db740 [0074.475] GetProcAddress (hModule=0x74030000, lpProcName="CreateThreadpoolWait") returned 0x74046d70 [0074.475] GetProcAddress (hModule=0x74030000, lpProcName="SetThreadpoolWait") returned 0x773dc0b0 [0074.475] GetProcAddress (hModule=0x74030000, lpProcName="CloseThreadpoolWait") returned 0x773dbe10 [0074.475] GetProcAddress (hModule=0x74030000, lpProcName="FlushProcessWriteBuffers") returned 0x77402b20 [0074.475] GetProcAddress (hModule=0x74030000, lpProcName="FreeLibraryWhenCallbackReturns") returned 0x773f8e50 [0074.476] GetProcAddress (hModule=0x74030000, lpProcName="GetCurrentProcessorNumber") returned 0x773f52f0 [0074.476] GetProcAddress (hModule=0x74030000, lpProcName="CreateSymbolicLinkW") returned 0x74044510 [0074.476] GetProcAddress (hModule=0x74030000, lpProcName="GetCurrentPackageId") returned 0x7727e260 [0074.476] GetProcAddress (hModule=0x74030000, lpProcName="GetTickCount64") returned 0x74040db0 [0074.476] GetProcAddress (hModule=0x74030000, lpProcName="GetFileInformationByHandleEx") returned 0x740443d0 [0074.476] GetProcAddress (hModule=0x74030000, lpProcName="SetFileInformationByHandle") returned 0x7409f110 [0074.476] GetProcAddress (hModule=0x74030000, lpProcName="GetSystemTimePreciseAsFileTime") returned 0x7409f1e0 [0074.476] GetProcAddress (hModule=0x74030000, lpProcName="InitializeConditionVariable") returned 0x773f3a00 [0074.476] GetProcAddress (hModule=0x74030000, lpProcName="WakeConditionVariable") returned 0x77468c50 [0074.476] GetProcAddress (hModule=0x74030000, lpProcName="WakeAllConditionVariable") returned 0x773f8a90 [0074.476] GetProcAddress (hModule=0x74030000, lpProcName="SleepConditionVariableCS") returned 0x772efca0 [0074.477] GetProcAddress (hModule=0x74030000, lpProcName="InitializeSRWLock") returned 0x773f3a00 [0074.477] GetProcAddress (hModule=0x74030000, lpProcName="AcquireSRWLockExclusive") returned 0x773d58e0 [0074.477] GetProcAddress (hModule=0x74030000, lpProcName="TryAcquireSRWLockExclusive") returned 0x77452ce0 [0074.477] GetProcAddress (hModule=0x74030000, lpProcName="ReleaseSRWLockExclusive") returned 0x773d83a0 [0074.477] GetProcAddress (hModule=0x74030000, lpProcName="SleepConditionVariableSRW") returned 0x772efcf0 [0074.477] GetProcAddress (hModule=0x74030000, lpProcName="CreateThreadpoolWork") returned 0x74046db0 [0074.477] GetProcAddress (hModule=0x74030000, lpProcName="SubmitThreadpoolWork") returned 0x773deb00 [0074.477] GetProcAddress (hModule=0x74030000, lpProcName="CloseThreadpoolWork") returned 0x773ded50 [0074.477] GetProcAddress (hModule=0x74030000, lpProcName="CompareStringEx") returned 0x74047050 [0074.477] GetProcAddress (hModule=0x74030000, lpProcName="GetLocaleInfoEx") returned 0x74047190 [0074.478] GetProcAddress (hModule=0x74030000, lpProcName="LCMapStringEx") returned 0x74047480 [0074.478] GetModuleHandleW (lpModuleName="api-ms-win-core-synch-l1-2-0.dll") returned 0x77180000 [0074.478] GetProcAddress (hModule=0x77180000, lpProcName="InitializeConditionVariable") returned 0x773f3a00 [0074.478] GetProcAddress (hModule=0x77180000, lpProcName="SleepConditionVariableCS") returned 0x772efca0 [0074.478] GetProcAddress (hModule=0x77180000, lpProcName="WakeAllConditionVariable") returned 0x773f8a90 [0074.478] RtlInitializeConditionVariable (in: ConditionVariable=0xe8d954 | out: ConditionVariable=0xe8d954) [0074.478] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x800) returned 0x205368 [0074.478] QueryPerformanceFrequency (in: lpFrequency=0x117fe30 | out: lpFrequency=0x117fe30*=100000000) returned 1 [0074.478] QueryPerformanceCounter (in: lpPerformanceCount=0x117fe28 | out: lpPerformanceCount=0x117fe28*=23184814925) returned 1 [0074.479] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0074.479] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0xe0ae19) returned 0x0 [0074.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x1ff5c0 [0074.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x1faee0 [0074.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2) returned 0x1fec70 [0074.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fec70 | out: hHeap=0x1f0000) returned 1 [0074.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2) returned 0x1fec70 [0074.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x201998 [0074.481] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204f90 [0074.481] GetLastError () returned 0x0 [0074.481] SetLastError (dwErrCode=0x0) [0074.481] GetLastError () returned 0x0 [0074.481] SetLastError (dwErrCode=0x0) [0074.481] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0xb8) returned 0x1f7040 [0074.481] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x6a6) returned 0x205fb8 [0074.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205fb8 | out: hHeap=0x1f0000) returned 1 [0074.481] GetLastError () returned 0x0 [0074.489] SetLastError (dwErrCode=0x0) [0074.489] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x6) returned 0x1f7168 [0074.489] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2) returned 0x1f2c98 [0074.489] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x4) returned 0x1f0538 [0074.489] GetLastError () returned 0x0 [0074.489] SetLastError (dwErrCode=0x0) [0074.489] GetLastError () returned 0x0 [0074.489] SetLastError (dwErrCode=0x0) [0074.489] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0xb8) returned 0x1fe528 [0074.489] GetLastError () returned 0x0 [0074.489] SetLastError (dwErrCode=0x0) [0074.489] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x6a6) returned 0x205fb8 [0074.489] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205fb8 | out: hHeap=0x1f0000) returned 1 [0074.489] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1f7168 | out: hHeap=0x1f0000) returned 1 [0074.490] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1f7040 | out: hHeap=0x1f0000) returned 1 [0074.490] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1f0538 | out: hHeap=0x1f0000) returned 1 [0074.490] GetLastError () returned 0x0 [0074.490] SetLastError (dwErrCode=0x0) [0074.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x6) returned 0x1f7168 [0074.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2) returned 0x1f0538 [0074.490] GetLastError () returned 0x0 [0074.490] SetLastError (dwErrCode=0x0) [0074.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x200) returned 0x205fb8 [0074.490] GetLastError () returned 0x0 [0074.490] SetLastError (dwErrCode=0x0) [0074.490] GetLastError () returned 0x0 [0074.490] SetLastError (dwErrCode=0x0) [0074.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x4) returned 0x1f0548 [0074.490] GetLastError () returned 0x0 [0074.490] SetLastError (dwErrCode=0x0) [0074.490] GetLastError () returned 0x0 [0074.490] SetLastError (dwErrCode=0x0) [0074.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0xb8) returned 0x1f7040 [0074.490] GetLastError () returned 0x0 [0074.490] SetLastError (dwErrCode=0x0) [0074.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x6a6) returned 0x2061c0 [0074.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2061c0 | out: hHeap=0x1f0000) returned 1 [0074.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1f7168 | out: hHeap=0x1f0000) returned 1 [0074.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fe528 | out: hHeap=0x1f0000) returned 1 [0074.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1f0548 | out: hHeap=0x1f0000) returned 1 [0074.491] GetLastError () returned 0x0 [0074.491] SetLastError (dwErrCode=0x0) [0074.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x6) returned 0x1f0548 [0074.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1f0538 | out: hHeap=0x1f0000) returned 1 [0074.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1f2c98 | out: hHeap=0x1f0000) returned 1 [0074.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x1f2c98 [0074.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x1f0538 [0074.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x1f7168 [0074.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x1f7100 [0074.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x1f7110 [0074.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x44) returned 0x202230 [0074.492] GetLastError () returned 0x0 [0074.492] SetLastError (dwErrCode=0x0) [0074.492] GetLastError () returned 0x0 [0074.492] SetLastError (dwErrCode=0x0) [0074.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0xb8) returned 0x1fe528 [0074.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x6a6) returned 0x2061c0 [0074.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2061c0 | out: hHeap=0x1f0000) returned 1 [0074.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1f0548 | out: hHeap=0x1f0000) returned 1 [0074.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1f7040 | out: hHeap=0x1f0000) returned 1 [0074.492] GetLastError () returned 0x0 [0074.492] SetLastError (dwErrCode=0x0) [0074.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x6) returned 0x1f0548 [0074.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2) returned 0x1f7120 [0074.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x4) returned 0x202280 [0074.492] GetLastError () returned 0x0 [0074.492] SetLastError (dwErrCode=0x0) [0074.492] GetLastError () returned 0x0 [0074.492] SetLastError (dwErrCode=0x0) [0074.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0xb8) returned 0x1f7040 [0074.492] GetLastError () returned 0x0 [0074.493] SetLastError (dwErrCode=0x0) [0074.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x6a6) returned 0x2061c0 [0074.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2061c0 | out: hHeap=0x1f0000) returned 1 [0074.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1f0548 | out: hHeap=0x1f0000) returned 1 [0074.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fe528 | out: hHeap=0x1f0000) returned 1 [0074.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x202280 | out: hHeap=0x1f0000) returned 1 [0074.493] GetLastError () returned 0x0 [0074.493] SetLastError (dwErrCode=0x0) [0074.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x6) returned 0x1f0548 [0074.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2) returned 0x202280 [0074.493] GetLastError () returned 0x0 [0074.493] SetLastError (dwErrCode=0x0) [0074.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x200) returned 0x2061c0 [0074.493] GetLastError () returned 0x0 [0074.493] SetLastError (dwErrCode=0x0) [0074.493] GetLastError () returned 0x0 [0074.493] SetLastError (dwErrCode=0x0) [0074.493] GetLastError () returned 0x0 [0074.493] SetLastError (dwErrCode=0x0) [0074.493] GetLastError () returned 0x0 [0074.493] SetLastError (dwErrCode=0x0) [0074.493] GetLastError () returned 0x0 [0074.493] SetLastError (dwErrCode=0x0) [0074.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x4) returned 0x2064b0 [0074.493] GetLastError () returned 0x0 [0074.493] SetLastError (dwErrCode=0x0) [0074.493] GetLastError () returned 0x0 [0074.493] SetLastError (dwErrCode=0x0) [0074.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0xb8) returned 0x1fe528 [0074.494] GetLastError () returned 0x0 [0074.494] SetLastError (dwErrCode=0x0) [0074.494] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x6a6) returned 0x2065d0 [0074.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2065d0 | out: hHeap=0x1f0000) returned 1 [0074.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1f0548 | out: hHeap=0x1f0000) returned 1 [0074.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1f7040 | out: hHeap=0x1f0000) returned 1 [0074.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2064b0 | out: hHeap=0x1f0000) returned 1 [0074.494] GetLastError () returned 0x0 [0074.494] SetLastError (dwErrCode=0x0) [0074.494] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x6) returned 0x206450 [0074.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x202280 | out: hHeap=0x1f0000) returned 1 [0074.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1f7120 | out: hHeap=0x1f0000) returned 1 [0074.494] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x206580 [0074.494] GetCurrentThread () returned 0xfffffffe [0074.494] GetThreadTimes (in: hThread=0xfffffffe, lpCreationTime=0x117fe1c, lpExitTime=0x117fe24, lpKernelTime=0x117fe24, lpUserTime=0x117fe24 | out: lpCreationTime=0x117fe1c, lpExitTime=0x117fe24, lpKernelTime=0x117fe24, lpUserTime=0x117fe24) returned 1 [0074.494] RtlInitializeSListHead (in: ListHead=0xe8dd38 | out: ListHead=0xe8dd38) [0074.495] htonl (hostlong=0x0) returned 0x0 [0074.496] htonl (hostlong=0x7f000001) returned 0x100007f [0074.496] htonl (hostlong=0xffffffff) returned 0xffffffff [0074.496] WSAStartup (in: wVersionRequired=0x202, lpWSAData=0x117fc9c | out: lpWSAData=0x117fc9c) returned 0 [0074.502] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x1faf80 [0074.502] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x1fafa8 [0074.502] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x1faff8 [0074.502] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x2065c0 [0074.502] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x1fb098 [0074.502] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x1fb020 [0074.502] GetLastError () returned 0x0 [0074.502] SetLastError (dwErrCode=0x0) [0074.502] FreeConsole () returned 1 [0074.559] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x1fb048 [0074.559] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x20b1e8 [0074.559] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x1c) returned 0x1fb070 [0074.559] GetLastError () returned 0x6 [0074.559] SetLastError (dwErrCode=0x6) [0074.563] GetLastError () returned 0x6 [0074.563] SetLastError (dwErrCode=0x6) [0074.563] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x800) returned 0x74030000 [0074.563] GetProcAddress (hModule=0x74030000, lpProcName="AreFileApisANSI") returned 0x74044280 [0074.563] AreFileApisANSI () returned 1 [0074.564] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1fb070, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 28 [0074.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x38) returned 0x20b260 [0074.564] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1fb070, cbMultiByte=-1, lpWideCharStr=0x20b260, cchWideChar=28 | out: lpWideCharStr="C:\\WINDOWS\\system32\\cmd.exe") returned 28 [0074.564] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x117fabc | out: lpFileInformation=0x117fabc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x708dd01f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x708dd01f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x708dd01f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x38a00)) returned 1 [0074.565] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b260 | out: hHeap=0x1f0000) returned 1 [0074.565] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x32) returned 0x20b260 [0074.565] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x144) returned 0x20b2a0 [0074.565] GetLastError () returned 0x6 [0074.565] SetLastError (dwErrCode=0x6) [0074.565] CreateProcessA (in: lpApplicationName="C:\\WINDOWS\\system32\\cmd.exe", lpCommandLine="C:\\WINDOWS\\system32\\cmd.exe /c net stop SQLWriter", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x0, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x117fa78*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x144, lpReserved2=0x20b2a0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x117fabc | out: lpCommandLine="C:\\WINDOWS\\system32\\cmd.exe /c net stop SQLWriter", lpProcessInformation=0x117fabc*(hProcess=0x90, hThread=0x94, dwProcessId=0x1128, dwThreadId=0x10c0)) returned 1 [0075.618] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0 [0079.914] GetExitCodeProcess (in: hProcess=0x90, lpExitCode=0x117fadc | out: lpExitCode=0x117fadc*=0x2) returned 1 [0079.914] CloseHandle (hObject=0x94) returned 1 [0079.915] CloseHandle (hObject=0x90) returned 1 [0079.915] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b2a0 | out: hHeap=0x1f0000) returned 1 [0079.915] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b260 | out: hHeap=0x1f0000) returned 1 [0079.915] GetLastError () returned 0x6 [0079.915] SetLastError (dwErrCode=0x6) [0079.915] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fb070 | out: hHeap=0x1f0000) returned 1 [0079.915] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x1c) returned 0x1fb070 [0079.915] GetLastError () returned 0x6 [0079.915] SetLastError (dwErrCode=0x6) [0079.915] GetLastError () returned 0x6 [0079.915] SetLastError (dwErrCode=0x6) [0079.916] AreFileApisANSI () returned 1 [0079.916] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1fb070, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 28 [0079.916] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x38) returned 0x20b260 [0079.916] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1fb070, cbMultiByte=-1, lpWideCharStr=0x20b260, cchWideChar=28 | out: lpWideCharStr="C:\\WINDOWS\\system32\\cmd.exe") returned 28 [0079.916] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x117fab8 | out: lpFileInformation=0x117fab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x708dd01f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x708dd01f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x708dd01f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x38a00)) returned 1 [0079.916] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b260 | out: hHeap=0x1f0000) returned 1 [0079.916] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x33) returned 0x20b260 [0079.916] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x144) returned 0x20b2a0 [0079.916] GetLastError () returned 0x6 [0079.916] SetLastError (dwErrCode=0x6) [0079.916] CreateProcessA (in: lpApplicationName="C:\\WINDOWS\\system32\\cmd.exe", lpCommandLine="C:\\WINDOWS\\system32\\cmd.exe /c net stop SQLBrowser", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x0, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x117fa74*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x144, lpReserved2=0x20b2a0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x117fab8 | out: lpCommandLine="C:\\WINDOWS\\system32\\cmd.exe /c net stop SQLBrowser", lpProcessInformation=0x117fab8*(hProcess=0x94, hThread=0x90, dwProcessId=0xd6c, dwThreadId=0x500)) returned 1 [0079.959] WaitForSingleObject (hHandle=0x94, dwMilliseconds=0xffffffff) returned 0x0 [0082.307] GetExitCodeProcess (in: hProcess=0x94, lpExitCode=0x117fad8 | out: lpExitCode=0x117fad8*=0x2) returned 1 [0082.308] CloseHandle (hObject=0x90) returned 1 [0082.308] CloseHandle (hObject=0x94) returned 1 [0082.308] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b2a0 | out: hHeap=0x1f0000) returned 1 [0082.308] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b260 | out: hHeap=0x1f0000) returned 1 [0082.308] GetLastError () returned 0x6 [0082.308] SetLastError (dwErrCode=0x6) [0082.308] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fb070 | out: hHeap=0x1f0000) returned 1 [0082.308] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x1c) returned 0x1fb070 [0082.309] GetLastError () returned 0x6 [0082.309] SetLastError (dwErrCode=0x6) [0082.309] GetLastError () returned 0x6 [0082.309] SetLastError (dwErrCode=0x6) [0082.309] AreFileApisANSI () returned 1 [0082.309] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1fb070, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 28 [0082.315] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x38) returned 0x20b260 [0082.316] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1fb070, cbMultiByte=-1, lpWideCharStr=0x20b260, cchWideChar=28 | out: lpWideCharStr="C:\\WINDOWS\\system32\\cmd.exe") returned 28 [0082.316] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x117fab4 | out: lpFileInformation=0x117fab4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x708dd01f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x708dd01f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x708dd01f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x38a00)) returned 1 [0082.316] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b260 | out: hHeap=0x1f0000) returned 1 [0082.316] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x34) returned 0x20b260 [0082.316] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x144) returned 0x20b2a0 [0082.316] GetLastError () returned 0x6 [0082.316] SetLastError (dwErrCode=0x6) [0082.316] CreateProcessA (in: lpApplicationName="C:\\WINDOWS\\system32\\cmd.exe", lpCommandLine="C:\\WINDOWS\\system32\\cmd.exe /c net stop MSSQLSERVER", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x0, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x117fa70*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x144, lpReserved2=0x20b2a0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x117fab4 | out: lpCommandLine="C:\\WINDOWS\\system32\\cmd.exe /c net stop MSSQLSERVER", lpProcessInformation=0x117fab4*(hProcess=0x90, hThread=0x94, dwProcessId=0x884, dwThreadId=0x608)) returned 1 [0082.416] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0 [0085.292] GetExitCodeProcess (in: hProcess=0x90, lpExitCode=0x117fad4 | out: lpExitCode=0x117fad4*=0x2) returned 1 [0085.292] CloseHandle (hObject=0x94) returned 1 [0085.292] CloseHandle (hObject=0x90) returned 1 [0085.293] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b2a0 | out: hHeap=0x1f0000) returned 1 [0085.293] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b260 | out: hHeap=0x1f0000) returned 1 [0085.293] GetLastError () returned 0x6 [0085.293] SetLastError (dwErrCode=0x6) [0085.293] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fb070 | out: hHeap=0x1f0000) returned 1 [0085.305] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x1c) returned 0x1fb070 [0085.305] GetLastError () returned 0x6 [0085.305] SetLastError (dwErrCode=0x6) [0085.305] GetLastError () returned 0x6 [0085.305] SetLastError (dwErrCode=0x6) [0085.306] AreFileApisANSI () returned 1 [0085.306] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1fb070, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 28 [0085.306] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x38) returned 0x20b260 [0085.306] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1fb070, cbMultiByte=-1, lpWideCharStr=0x20b260, cchWideChar=28 | out: lpWideCharStr="C:\\WINDOWS\\system32\\cmd.exe") returned 28 [0085.306] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x117fab0 | out: lpFileInformation=0x117fab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x708dd01f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x708dd01f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x708dd01f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x38a00)) returned 1 [0085.306] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b260 | out: hHeap=0x1f0000) returned 1 [0085.307] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x37) returned 0x20b260 [0085.307] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x144) returned 0x20b2a0 [0085.307] GetLastError () returned 0x6 [0085.307] SetLastError (dwErrCode=0x6) [0085.307] CreateProcessA (in: lpApplicationName="C:\\WINDOWS\\system32\\cmd.exe", lpCommandLine="C:\\WINDOWS\\system32\\cmd.exe /c net stop MSSQL$CONTOSO1", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x0, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x117fa6c*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x144, lpReserved2=0x20b2a0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x117fab0 | out: lpCommandLine="C:\\WINDOWS\\system32\\cmd.exe /c net stop MSSQL$CONTOSO1", lpProcessInformation=0x117fab0*(hProcess=0x94, hThread=0x90, dwProcessId=0x1138, dwThreadId=0x114c)) returned 1 [0085.351] WaitForSingleObject (hHandle=0x94, dwMilliseconds=0xffffffff) returned 0x0 [0088.415] GetExitCodeProcess (in: hProcess=0x94, lpExitCode=0x117fad0 | out: lpExitCode=0x117fad0*=0x2) returned 1 [0088.415] CloseHandle (hObject=0x90) returned 1 [0088.415] CloseHandle (hObject=0x94) returned 1 [0088.416] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b2a0 | out: hHeap=0x1f0000) returned 1 [0088.416] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b260 | out: hHeap=0x1f0000) returned 1 [0088.416] GetLastError () returned 0x6 [0088.416] SetLastError (dwErrCode=0x6) [0088.416] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fb070 | out: hHeap=0x1f0000) returned 1 [0088.416] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x1c) returned 0x1fb070 [0088.416] GetLastError () returned 0x6 [0088.416] SetLastError (dwErrCode=0x6) [0088.416] GetLastError () returned 0x6 [0088.416] SetLastError (dwErrCode=0x6) [0088.416] AreFileApisANSI () returned 1 [0088.416] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1fb070, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 28 [0088.416] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x38) returned 0x20b260 [0088.416] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1fb070, cbMultiByte=-1, lpWideCharStr=0x20b260, cchWideChar=28 | out: lpWideCharStr="C:\\WINDOWS\\system32\\cmd.exe") returned 28 [0088.416] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x117faac | out: lpFileInformation=0x117faac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x708dd01f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x708dd01f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x708dd01f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x38a00)) returned 1 [0088.417] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b260 | out: hHeap=0x1f0000) returned 1 [0088.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x2e) returned 0x1fef40 [0088.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x144) returned 0x20b260 [0088.417] GetLastError () returned 0x6 [0088.417] SetLastError (dwErrCode=0x6) [0088.417] CreateProcessA (in: lpApplicationName="C:\\WINDOWS\\system32\\cmd.exe", lpCommandLine="C:\\WINDOWS\\system32\\cmd.exe /c net stop MSDTC", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x0, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x117fa68*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x144, lpReserved2=0x20b260, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x117faac | out: lpCommandLine="C:\\WINDOWS\\system32\\cmd.exe /c net stop MSDTC", lpProcessInformation=0x117faac*(hProcess=0x90, hThread=0x94, dwProcessId=0x128c, dwThreadId=0x1290)) returned 1 [0088.440] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0 [0091.213] GetExitCodeProcess (in: hProcess=0x90, lpExitCode=0x117facc | out: lpExitCode=0x117facc*=0x2) returned 1 [0091.213] CloseHandle (hObject=0x94) returned 1 [0091.213] CloseHandle (hObject=0x90) returned 1 [0091.213] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b260 | out: hHeap=0x1f0000) returned 1 [0091.213] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef40 | out: hHeap=0x1f0000) returned 1 [0091.213] GetLastError () returned 0x6 [0091.213] SetLastError (dwErrCode=0x6) [0091.213] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fb070 | out: hHeap=0x1f0000) returned 1 [0091.214] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x1c) returned 0x1fb070 [0091.214] GetLastError () returned 0x6 [0091.214] SetLastError (dwErrCode=0x6) [0091.214] GetLastError () returned 0x6 [0091.214] SetLastError (dwErrCode=0x6) [0091.214] AreFileApisANSI () returned 1 [0091.214] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1fb070, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 28 [0091.214] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x38) returned 0x20b260 [0091.214] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1fb070, cbMultiByte=-1, lpWideCharStr=0x20b260, cchWideChar=28 | out: lpWideCharStr="C:\\WINDOWS\\system32\\cmd.exe") returned 28 [0091.214] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x117faa8 | out: lpFileInformation=0x117faa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x708dd01f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x708dd01f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x708dd01f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x38a00)) returned 1 [0091.214] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b260 | out: hHeap=0x1f0000) returned 1 [0091.214] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x59) returned 0x20b260 [0091.214] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x144) returned 0x20b2c8 [0091.215] GetLastError () returned 0x6 [0091.215] SetLastError (dwErrCode=0x6) [0091.215] CreateProcessA (in: lpApplicationName="C:\\WINDOWS\\system32\\cmd.exe", lpCommandLine="C:\\WINDOWS\\system32\\cmd.exe /c bcdedit /set {default} bootstatuspolicy ignoreallfailures", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x0, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x117fa64*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x144, lpReserved2=0x20b2c8, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x117faa8 | out: lpCommandLine="C:\\WINDOWS\\system32\\cmd.exe /c bcdedit /set {default} bootstatuspolicy ignoreallfailures", lpProcessInformation=0x117faa8*(hProcess=0x94, hThread=0x90, dwProcessId=0x110c, dwThreadId=0xaf8)) returned 1 [0091.279] WaitForSingleObject (hHandle=0x94, dwMilliseconds=0xffffffff) returned 0x0 [0093.071] GetExitCodeProcess (in: hProcess=0x94, lpExitCode=0x117fac8 | out: lpExitCode=0x117fac8*=0x1) returned 1 [0093.072] CloseHandle (hObject=0x90) returned 1 [0093.072] CloseHandle (hObject=0x94) returned 1 [0093.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b2c8 | out: hHeap=0x1f0000) returned 1 [0093.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b260 | out: hHeap=0x1f0000) returned 1 [0093.072] GetLastError () returned 0x6 [0093.072] SetLastError (dwErrCode=0x6) [0093.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fb070 | out: hHeap=0x1f0000) returned 1 [0093.072] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x1c) returned 0x1fb070 [0093.072] GetLastError () returned 0x6 [0093.073] SetLastError (dwErrCode=0x6) [0093.073] GetLastError () returned 0x6 [0093.073] SetLastError (dwErrCode=0x6) [0093.073] AreFileApisANSI () returned 1 [0093.073] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1fb070, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 28 [0093.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x38) returned 0x20b260 [0093.073] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1fb070, cbMultiByte=-1, lpWideCharStr=0x20b260, cchWideChar=28 | out: lpWideCharStr="C:\\WINDOWS\\system32\\cmd.exe") returned 28 [0093.073] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x117faa4 | out: lpFileInformation=0x117faa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x708dd01f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x708dd01f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x708dd01f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x38a00)) returned 1 [0093.073] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b260 | out: hHeap=0x1f0000) returned 1 [0093.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x49) returned 0x20b260 [0093.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x144) returned 0x20b2b8 [0093.073] GetLastError () returned 0x6 [0093.073] SetLastError (dwErrCode=0x6) [0093.073] CreateProcessA (in: lpApplicationName="C:\\WINDOWS\\system32\\cmd.exe", lpCommandLine="C:\\WINDOWS\\system32\\cmd.exe /c bcdedit /set {default} recoveryenabled no", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x0, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x117fa60*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x144, lpReserved2=0x20b2b8, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x117faa4 | out: lpCommandLine="C:\\WINDOWS\\system32\\cmd.exe /c bcdedit /set {default} recoveryenabled no", lpProcessInformation=0x117faa4*(hProcess=0x90, hThread=0x94, dwProcessId=0xecc, dwThreadId=0x12d4)) returned 1 [0093.125] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0 [0096.887] GetExitCodeProcess (in: hProcess=0x90, lpExitCode=0x117fac4 | out: lpExitCode=0x117fac4*=0x1) returned 1 [0096.887] CloseHandle (hObject=0x94) returned 1 [0096.887] CloseHandle (hObject=0x90) returned 1 [0096.888] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b2b8 | out: hHeap=0x1f0000) returned 1 [0096.888] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b260 | out: hHeap=0x1f0000) returned 1 [0096.888] GetLastError () returned 0x6 [0096.888] SetLastError (dwErrCode=0x6) [0096.888] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fb070 | out: hHeap=0x1f0000) returned 1 [0096.888] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x1c) returned 0x1fb070 [0096.888] GetLastError () returned 0x6 [0096.888] SetLastError (dwErrCode=0x6) [0096.888] GetLastError () returned 0x6 [0096.889] SetLastError (dwErrCode=0x6) [0096.889] AreFileApisANSI () returned 1 [0096.889] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1fb070, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 28 [0096.889] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x38) returned 0x20b260 [0096.889] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1fb070, cbMultiByte=-1, lpWideCharStr=0x20b260, cchWideChar=28 | out: lpWideCharStr="C:\\WINDOWS\\system32\\cmd.exe") returned 28 [0096.889] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x117faa0 | out: lpFileInformation=0x117faa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x708dd01f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x708dd01f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x708dd01f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x38a00)) returned 1 [0096.889] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b260 | out: hHeap=0x1f0000) returned 1 [0096.889] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x3d) returned 0x20b260 [0096.889] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x144) returned 0x20b2a8 [0096.889] GetLastError () returned 0x6 [0096.889] SetLastError (dwErrCode=0x6) [0096.889] CreateProcessA (in: lpApplicationName="C:\\WINDOWS\\system32\\cmd.exe", lpCommandLine="C:\\WINDOWS\\system32\\cmd.exe /c wbadmin delete catalog -quiet", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x0, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x117fa5c*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x144, lpReserved2=0x20b2a8, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x117faa0 | out: lpCommandLine="C:\\WINDOWS\\system32\\cmd.exe /c wbadmin delete catalog -quiet", lpProcessInformation=0x117faa0*(hProcess=0x94, hThread=0x90, dwProcessId=0x1308, dwThreadId=0x12dc)) returned 1 [0096.916] WaitForSingleObject (hHandle=0x94, dwMilliseconds=0xffffffff) returned 0x0 [0099.257] GetExitCodeProcess (in: hProcess=0x94, lpExitCode=0x117fac0 | out: lpExitCode=0x117fac0*=0x1) returned 1 [0099.257] CloseHandle (hObject=0x90) returned 1 [0099.257] CloseHandle (hObject=0x94) returned 1 [0099.258] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b2a8 | out: hHeap=0x1f0000) returned 1 [0099.258] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b260 | out: hHeap=0x1f0000) returned 1 [0099.258] GetLastError () returned 0x6 [0099.258] SetLastError (dwErrCode=0x6) [0099.258] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fb070 | out: hHeap=0x1f0000) returned 1 [0099.258] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x1c) returned 0x1fb070 [0099.258] GetLastError () returned 0x6 [0099.258] SetLastError (dwErrCode=0x6) [0099.258] GetLastError () returned 0x6 [0099.258] SetLastError (dwErrCode=0x6) [0099.258] AreFileApisANSI () returned 1 [0099.258] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1fb070, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 28 [0099.258] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x38) returned 0x20b260 [0099.258] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1fb070, cbMultiByte=-1, lpWideCharStr=0x20b260, cchWideChar=28 | out: lpWideCharStr="C:\\WINDOWS\\system32\\cmd.exe") returned 28 [0099.258] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x117fa9c | out: lpFileInformation=0x117fa9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x708dd01f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x708dd01f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x708dd01f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x38a00)) returned 1 [0099.259] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b260 | out: hHeap=0x1f0000) returned 1 [0099.259] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x37) returned 0x20b260 [0099.259] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x144) returned 0x20b2a0 [0099.259] GetLastError () returned 0x6 [0099.259] SetLastError (dwErrCode=0x6) [0099.259] CreateProcessA (in: lpApplicationName="C:\\WINDOWS\\system32\\cmd.exe", lpCommandLine="C:\\WINDOWS\\system32\\cmd.exe /c net stop SQLSERVERAGENT", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x0, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x117fa58*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x144, lpReserved2=0x20b2a0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x117fa9c | out: lpCommandLine="C:\\WINDOWS\\system32\\cmd.exe /c net stop SQLSERVERAGENT", lpProcessInformation=0x117fa9c*(hProcess=0x90, hThread=0x94, dwProcessId=0xee8, dwThreadId=0x3cc)) returned 1 [0099.307] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0 [0102.952] GetExitCodeProcess (in: hProcess=0x90, lpExitCode=0x117fabc | out: lpExitCode=0x117fabc*=0x2) returned 1 [0102.953] CloseHandle (hObject=0x94) returned 1 [0102.953] CloseHandle (hObject=0x90) returned 1 [0102.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b2a0 | out: hHeap=0x1f0000) returned 1 [0102.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b260 | out: hHeap=0x1f0000) returned 1 [0102.953] GetLastError () returned 0x6 [0102.954] SetLastError (dwErrCode=0x6) [0102.954] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fb070 | out: hHeap=0x1f0000) returned 1 [0102.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x1c) returned 0x1fb070 [0102.954] GetLastError () returned 0x6 [0102.954] SetLastError (dwErrCode=0x6) [0102.954] GetLastError () returned 0x6 [0102.964] SetLastError (dwErrCode=0x6) [0102.964] AreFileApisANSI () returned 1 [0102.965] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1fb070, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 28 [0102.965] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x38) returned 0x20b260 [0102.965] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1fb070, cbMultiByte=-1, lpWideCharStr=0x20b260, cchWideChar=28 | out: lpWideCharStr="C:\\WINDOWS\\system32\\cmd.exe") returned 28 [0102.965] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x117fa98 | out: lpFileInformation=0x117fa98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x708dd01f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x708dd01f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x708dd01f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x38a00)) returned 1 [0102.965] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b260 | out: hHeap=0x1f0000) returned 1 [0102.965] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x34) returned 0x20b260 [0102.965] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x144) returned 0x20b2a0 [0102.966] GetLastError () returned 0x6 [0102.966] SetLastError (dwErrCode=0x6) [0102.966] CreateProcessA (in: lpApplicationName="C:\\WINDOWS\\system32\\cmd.exe", lpCommandLine="C:\\WINDOWS\\system32\\cmd.exe /c net stop MSSQLSERVER", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x0, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x117fa54*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x144, lpReserved2=0x20b2a0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x117fa98 | out: lpCommandLine="C:\\WINDOWS\\system32\\cmd.exe /c net stop MSSQLSERVER", lpProcessInformation=0x117fa98*(hProcess=0x94, hThread=0x90, dwProcessId=0x1294, dwThreadId=0x1298)) returned 1 [0103.076] WaitForSingleObject (hHandle=0x94, dwMilliseconds=0xffffffff) returned 0x0 [0105.764] GetExitCodeProcess (in: hProcess=0x94, lpExitCode=0x117fab8 | out: lpExitCode=0x117fab8*=0x2) returned 1 [0105.765] CloseHandle (hObject=0x90) returned 1 [0105.765] CloseHandle (hObject=0x94) returned 1 [0105.765] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b2a0 | out: hHeap=0x1f0000) returned 1 [0105.765] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b260 | out: hHeap=0x1f0000) returned 1 [0105.765] GetLastError () returned 0x6 [0105.765] SetLastError (dwErrCode=0x6) [0105.765] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fb070 | out: hHeap=0x1f0000) returned 1 [0105.766] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x1c) returned 0x1fb070 [0105.766] GetLastError () returned 0x6 [0105.766] SetLastError (dwErrCode=0x6) [0105.766] GetLastError () returned 0x6 [0105.766] SetLastError (dwErrCode=0x6) [0105.766] AreFileApisANSI () returned 1 [0105.766] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1fb070, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 28 [0105.766] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x38) returned 0x20b260 [0105.766] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1fb070, cbMultiByte=-1, lpWideCharStr=0x20b260, cchWideChar=28 | out: lpWideCharStr="C:\\WINDOWS\\system32\\cmd.exe") returned 28 [0105.766] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x117fa94 | out: lpFileInformation=0x117fa94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x708dd01f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x708dd01f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x708dd01f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x38a00)) returned 1 [0105.767] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b260 | out: hHeap=0x1f0000) returned 1 [0105.767] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x2c) returned 0x1fef78 [0105.767] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x144) returned 0x20b260 [0105.782] GetLastError () returned 0x6 [0105.783] SetLastError (dwErrCode=0x6) [0105.783] CreateProcessA (in: lpApplicationName="C:\\WINDOWS\\system32\\cmd.exe", lpCommandLine="C:\\WINDOWS\\system32\\cmd.exe /c net stop vds", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x0, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x117fa50*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x144, lpReserved2=0x20b260, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x117fa94 | out: lpCommandLine="C:\\WINDOWS\\system32\\cmd.exe /c net stop vds", lpProcessInformation=0x117fa94*(hProcess=0x90, hThread=0x94, dwProcessId=0x118c, dwThreadId=0x10c4)) returned 1 [0105.843] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0 [0109.114] GetExitCodeProcess (in: hProcess=0x90, lpExitCode=0x117fab4 | out: lpExitCode=0x117fab4*=0x2) returned 1 [0109.114] CloseHandle (hObject=0x94) returned 1 [0109.114] CloseHandle (hObject=0x90) returned 1 [0109.114] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b260 | out: hHeap=0x1f0000) returned 1 [0109.114] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0109.114] GetLastError () returned 0x6 [0109.115] SetLastError (dwErrCode=0x6) [0109.115] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fb070 | out: hHeap=0x1f0000) returned 1 [0109.115] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x1c) returned 0x1fb070 [0109.115] GetLastError () returned 0x6 [0109.115] SetLastError (dwErrCode=0x6) [0109.115] GetLastError () returned 0x6 [0109.116] SetLastError (dwErrCode=0x6) [0109.116] AreFileApisANSI () returned 1 [0109.116] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1fb070, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 28 [0109.116] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x38) returned 0x20b260 [0109.116] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1fb070, cbMultiByte=-1, lpWideCharStr=0x20b260, cchWideChar=28 | out: lpWideCharStr="C:\\WINDOWS\\system32\\cmd.exe") returned 28 [0109.116] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x117fa90 | out: lpFileInformation=0x117fa90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x708dd01f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x708dd01f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x708dd01f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x38a00)) returned 1 [0109.117] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b260 | out: hHeap=0x1f0000) returned 1 [0109.117] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x4f) returned 0x20b260 [0109.117] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x144) returned 0x20b2b8 [0109.117] GetLastError () returned 0x6 [0109.117] SetLastError (dwErrCode=0x6) [0109.117] CreateProcessA (in: lpApplicationName="C:\\WINDOWS\\system32\\cmd.exe", lpCommandLine="C:\\WINDOWS\\system32\\cmd.exe /c netsh advfirewall set currentprofile state off", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x0, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x117fa4c*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x144, lpReserved2=0x20b2b8, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x117fa90 | out: lpCommandLine="C:\\WINDOWS\\system32\\cmd.exe /c netsh advfirewall set currentprofile state off", lpProcessInformation=0x117fa90*(hProcess=0x94, hThread=0x90, dwProcessId=0xa58, dwThreadId=0x1364)) returned 1 [0109.145] WaitForSingleObject (hHandle=0x94, dwMilliseconds=0xffffffff) returned 0x0 [0170.935] GetExitCodeProcess (in: hProcess=0x94, lpExitCode=0x117fab0 | out: lpExitCode=0x117fab0*=0x0) returned 1 [0170.935] CloseHandle (hObject=0x90) returned 1 [0170.936] CloseHandle (hObject=0x94) returned 1 [0170.947] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b2b8 | out: hHeap=0x1f0000) returned 1 [0170.947] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b260 | out: hHeap=0x1f0000) returned 1 [0170.947] GetLastError () returned 0x6 [0170.947] SetLastError (dwErrCode=0x6) [0170.947] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fb070 | out: hHeap=0x1f0000) returned 1 [0170.948] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x1c) returned 0x1fb070 [0170.948] GetLastError () returned 0x6 [0170.948] SetLastError (dwErrCode=0x6) [0170.948] GetLastError () returned 0x6 [0170.948] SetLastError (dwErrCode=0x6) [0170.948] AreFileApisANSI () returned 1 [0170.948] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1fb070, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 28 [0170.948] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x38) returned 0x1ff5d0 [0170.948] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1fb070, cbMultiByte=-1, lpWideCharStr=0x1ff5d0, cchWideChar=28 | out: lpWideCharStr="C:\\WINDOWS\\system32\\cmd.exe") returned 28 [0170.949] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x117fa8c | out: lpFileInformation=0x117fa8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x708dd01f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x708dd01f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x708dd01f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x38a00)) returned 1 [0170.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1ff5d0 | out: hHeap=0x1f0000) returned 1 [0170.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x46) returned 0x1ff5d0 [0170.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x144) returned 0x1ff620 [0170.949] GetLastError () returned 0x6 [0170.949] SetLastError (dwErrCode=0x6) [0170.949] CreateProcessA (in: lpApplicationName="C:\\WINDOWS\\system32\\cmd.exe", lpCommandLine="C:\\WINDOWS\\system32\\cmd.exe /c netsh firewall set opmode mode=disable", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x0, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x117fa48*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x144, lpReserved2=0x1ff620, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x117fa8c | out: lpCommandLine="C:\\WINDOWS\\system32\\cmd.exe /c netsh firewall set opmode mode=disable", lpProcessInformation=0x117fa8c*(hProcess=0x90, hThread=0x94, dwProcessId=0x11e8, dwThreadId=0x1204)) returned 1 [0170.997] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0 [0183.833] GetExitCodeProcess (in: hProcess=0x90, lpExitCode=0x117faac | out: lpExitCode=0x117faac*=0x0) returned 1 [0183.834] CloseHandle (hObject=0x94) returned 1 [0183.834] CloseHandle (hObject=0x90) returned 1 [0183.834] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1ff620 | out: hHeap=0x1f0000) returned 1 [0183.834] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1ff5d0 | out: hHeap=0x1f0000) returned 1 [0183.835] GetLastError () returned 0x6 [0183.835] SetLastError (dwErrCode=0x6) [0183.835] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fb070 | out: hHeap=0x1f0000) returned 1 [0183.836] CreateToolhelp32Snapshot (dwFlags=0xf, th32ProcessID=0x0) returned 0x84 [0183.956] Process32First (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0183.958] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6a, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0183.962] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0183.963] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0183.964] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0183.965] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0183.967] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0183.969] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0183.971] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0183.973] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x2bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0183.974] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x2c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x230, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0183.976] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1ec, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0183.977] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x31c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0184.165] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x230, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0184.167] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0184.168] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x3e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6e, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0184.176] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xf8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0184.178] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x16c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0184.179] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x27, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0184.180] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x47c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0184.181] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x538, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0184.182] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x5b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0184.183] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x5e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0184.184] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x5ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0184.185] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x61c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0184.186] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x640, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0184.187] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x6c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x5b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0184.188] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x70c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0184.188] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x71c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0184.190] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x3e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0184.191] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x740, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3e, th32ParentProcessID=0x6a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0184.192] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x894, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0184.193] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x8cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0184.194] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x964, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0184.196] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x51c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2bc, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0184.198] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x524, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x2bc, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0184.200] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x698, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2bc, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0184.202] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x56c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2bc, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0184.204] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xd78, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0184.206] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xdec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0184.208] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x2bc, pcPriClassBase=8, dwFlags=0x0, szExeFile="SppExtComObj.Exe")) returned 1 [0184.211] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xd88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="shootworkforcecosts.exe")) returned 1 [0184.222] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xee0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="searched-hdtv.exe")) returned 1 [0184.228] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xe48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="delta-gratuit.exe")) returned 1 [0184.230] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xf0c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="dresses representations super.exe")) returned 1 [0184.233] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="bush.exe")) returned 1 [0184.236] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x778, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="douglas.exe")) returned 1 [0184.238] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x488, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="faced-flying-ghz.exe")) returned 1 [0184.241] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xdf8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="appears.exe")) returned 1 [0184.243] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x840, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="illustrationswagescorporation.exe")) returned 1 [0184.245] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xa5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="windowsmorrisonsalt.exe")) returned 1 [0184.248] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="henry.exe")) returned 1 [0184.252] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xe34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="exhibition.exe")) returned 1 [0184.256] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x52c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="aj shaved dental.exe")) returned 1 [0184.258] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xf30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="croatia afternoon diagnostic.exe")) returned 1 [0184.261] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xa90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="definitely-vpn.exe")) returned 1 [0184.263] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xf60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="hoping-announcement-conjunction.exe")) returned 1 [0184.266] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xf24, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="paper.exe")) returned 1 [0184.309] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xe74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="resistant.exe")) returned 1 [0184.311] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xb08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="helps-integration-aging.exe")) returned 1 [0184.313] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xde0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0184.315] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xc2c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0184.319] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xfac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0184.321] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x4b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0184.322] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xef8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0184.324] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xfa4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0184.326] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xd4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0184.329] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xe28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0184.331] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xc6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0184.334] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xedc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0184.336] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x8f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0184.338] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xb24, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0184.340] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xfe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0184.342] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xe30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0184.345] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xaf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0184.412] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x100c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0184.415] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1020, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0184.419] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1034, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0184.422] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x104c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0184.424] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1060, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0184.428] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1074, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0184.446] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1088, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0184.448] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x109c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0184.451] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x10b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="totalcmd.exe")) returned 1 [0184.453] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x10c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0184.456] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0184.459] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x10f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0184.461] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0184.463] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1118, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0184.465] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x112c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0184.488] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0184.490] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0184.493] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1168, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0184.496] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x117c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0184.498] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1190, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0184.500] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x11a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0184.502] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0184.504] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x11cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0184.507] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x11e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0184.508] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x11fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0184.511] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1210, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0184.514] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0184.516] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1238, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0184.519] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0184.524] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="regardless-live-involvement.exe")) returned 1 [0184.527] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1274, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="preliminary.exe")) returned 1 [0184.546] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1358, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x3e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0184.548] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x3e8, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1 [0184.551] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x13d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1380, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0184.552] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x13d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="Mr.TeslaBrain@protonmail.com - Copy.exe.txt.exe")) returned 1 [0184.555] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xc04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0184.557] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x7b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0184.560] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2bc, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0184.563] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2bc, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0 [0184.564] CloseHandle (hObject=0x84) returned 1 [0184.564] CreateToolhelp32Snapshot (dwFlags=0xf, th32ProcessID=0x0) returned 0x90 [0184.626] Process32First (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0184.627] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6a, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0184.628] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0184.629] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0184.630] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0184.631] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0184.632] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0184.634] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0184.635] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0184.636] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x2bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0184.637] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x2c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x230, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0184.638] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1ec, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0184.639] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x31c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0184.644] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x230, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0184.646] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0184.647] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x3e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6e, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0184.649] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xf8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0184.650] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x16c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0184.651] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x27, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0184.652] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x47c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0184.653] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x538, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0184.654] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x5b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0184.656] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x5e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0184.657] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x5ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0184.659] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x61c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0184.660] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x640, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0184.661] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x6c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x5b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0184.662] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x70c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0184.663] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x71c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0184.664] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x3e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0184.665] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x740, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3e, th32ParentProcessID=0x6a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0184.667] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x894, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0184.668] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x8cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0184.669] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x964, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0184.672] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x51c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2bc, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0184.674] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x524, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x2bc, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0184.675] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x698, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2bc, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0184.677] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x56c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2bc, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0184.680] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xd78, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0184.682] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xdec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0184.690] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x2bc, pcPriClassBase=8, dwFlags=0x0, szExeFile="SppExtComObj.Exe")) returned 1 [0184.692] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xd88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="shootworkforcecosts.exe")) returned 1 [0184.694] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xee0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="searched-hdtv.exe")) returned 1 [0184.696] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xe48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="delta-gratuit.exe")) returned 1 [0184.699] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xf0c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="dresses representations super.exe")) returned 1 [0184.701] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="bush.exe")) returned 1 [0184.703] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x778, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="douglas.exe")) returned 1 [0184.704] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x488, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="faced-flying-ghz.exe")) returned 1 [0184.706] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xdf8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="appears.exe")) returned 1 [0184.707] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x840, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="illustrationswagescorporation.exe")) returned 1 [0184.709] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xa5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="windowsmorrisonsalt.exe")) returned 1 [0184.711] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="henry.exe")) returned 1 [0184.712] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xe34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="exhibition.exe")) returned 1 [0184.714] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x52c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="aj shaved dental.exe")) returned 1 [0184.716] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xf30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="croatia afternoon diagnostic.exe")) returned 1 [0184.718] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xa90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="definitely-vpn.exe")) returned 1 [0184.720] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xf60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="hoping-announcement-conjunction.exe")) returned 1 [0184.723] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xf24, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="paper.exe")) returned 1 [0184.725] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xe74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="resistant.exe")) returned 1 [0184.726] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xb08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="helps-integration-aging.exe")) returned 1 [0184.728] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xde0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0184.730] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xc2c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0184.732] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xfac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0184.733] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x4b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0184.746] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xef8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0184.749] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xfa4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0184.752] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xd4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0184.755] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xe28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0184.758] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xc6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0184.761] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xedc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0184.764] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x8f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0184.767] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xb24, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0184.771] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xfe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0184.773] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xe30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0184.776] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xaf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0184.778] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x100c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0184.783] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1020, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0184.786] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1034, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0184.789] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x104c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0184.844] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1060, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0184.846] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1074, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0184.848] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1088, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0184.850] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x109c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0184.853] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x10b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="totalcmd.exe")) returned 1 [0184.856] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x10c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0184.859] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0184.863] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x10f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0184.866] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0184.871] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1118, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0184.875] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x112c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0184.877] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0184.880] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0184.883] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1168, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0184.886] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x117c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0184.910] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1190, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0184.912] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x11a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0184.914] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0184.918] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x11cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0184.921] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x11e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0184.924] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x11fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0184.927] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1210, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0184.930] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0184.934] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1238, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0184.936] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0184.939] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="regardless-live-involvement.exe")) returned 1 [0184.944] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1274, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="preliminary.exe")) returned 1 [0184.947] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1358, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x3e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0184.959] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x3e8, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1 [0184.962] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x13d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1380, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0184.966] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x13d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="Mr.TeslaBrain@protonmail.com - Copy.exe.txt.exe")) returned 1 [0184.982] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xc04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0184.985] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x7b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0184.988] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2bc, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0184.991] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2bc, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0 [0184.993] CloseHandle (hObject=0x90) returned 1 [0184.995] CreateToolhelp32Snapshot (dwFlags=0xf, th32ProcessID=0x0) returned 0x84 [0185.174] Process32First (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0185.175] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6a, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0185.177] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0185.178] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0185.186] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0185.187] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0185.189] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0185.192] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0185.193] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0185.196] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x2bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0185.197] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x2c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x230, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0185.199] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1ec, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0185.201] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x31c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0185.202] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x230, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0185.204] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0185.264] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x3e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6e, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0185.265] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xf8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0185.267] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x16c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0185.268] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x27, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0185.269] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x47c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0185.270] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x538, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0185.272] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x5b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0185.273] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x5e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0185.274] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x5ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0185.275] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x61c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0185.276] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x640, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0185.278] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x6c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x5b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0185.279] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x70c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0185.281] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x71c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0185.282] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x3e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0185.283] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x740, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3e, th32ParentProcessID=0x6a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0185.285] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x894, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0185.286] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x8cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0185.288] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x964, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0185.290] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x51c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2bc, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0185.292] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x524, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x2bc, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0185.293] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x698, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2bc, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0185.296] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x56c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2bc, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0185.298] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xd78, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0185.300] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xdec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0185.390] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x2bc, pcPriClassBase=8, dwFlags=0x0, szExeFile="SppExtComObj.Exe")) returned 1 [0185.393] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xd88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="shootworkforcecosts.exe")) returned 1 [0185.395] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xee0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="searched-hdtv.exe")) returned 1 [0185.398] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xe48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="delta-gratuit.exe")) returned 1 [0185.401] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xf0c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="dresses representations super.exe")) returned 1 [0185.403] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="bush.exe")) returned 1 [0185.406] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x778, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="douglas.exe")) returned 1 [0185.409] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x488, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="faced-flying-ghz.exe")) returned 1 [0185.411] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xdf8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="appears.exe")) returned 1 [0185.413] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x840, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="illustrationswagescorporation.exe")) returned 1 [0185.415] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xa5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="windowsmorrisonsalt.exe")) returned 1 [0185.417] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="henry.exe")) returned 1 [0185.420] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xe34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="exhibition.exe")) returned 1 [0185.421] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x52c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="aj shaved dental.exe")) returned 1 [0185.423] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xf30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="croatia afternoon diagnostic.exe")) returned 1 [0185.424] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xa90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="definitely-vpn.exe")) returned 1 [0185.426] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xf60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="hoping-announcement-conjunction.exe")) returned 1 [0185.457] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xf24, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="paper.exe")) returned 1 [0185.461] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xe74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="resistant.exe")) returned 1 [0185.463] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xb08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="helps-integration-aging.exe")) returned 1 [0185.466] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xde0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0185.468] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xc2c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0185.470] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xfac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0185.471] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x4b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0185.472] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xef8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0185.474] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xfa4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0185.476] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xd4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0185.477] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xe28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0185.479] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xc6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0185.480] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xedc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0185.481] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x8f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0185.483] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xb24, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0185.485] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xfe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0185.487] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xe30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0185.489] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xaf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0185.491] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x100c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0185.493] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1020, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0185.519] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1034, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0185.521] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x104c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0185.522] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1060, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0185.523] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1074, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0185.524] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1088, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0185.527] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x109c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0185.529] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x10b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="totalcmd.exe")) returned 1 [0185.531] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x10c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0185.532] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0185.534] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x10f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0185.535] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0185.537] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1118, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0185.538] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x112c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0185.539] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0185.542] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0185.543] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1168, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0185.545] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x117c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0185.546] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1190, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0185.548] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x11a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0185.550] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0185.552] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x11cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0185.554] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x11e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0185.555] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x11fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0185.698] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1210, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0185.701] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0185.704] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1238, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0185.707] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0185.710] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="regardless-live-involvement.exe")) returned 1 [0185.713] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1274, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="preliminary.exe")) returned 1 [0185.715] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1358, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x3e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0185.717] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x3e8, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1 [0185.719] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x13d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1380, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0185.722] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x13d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="Mr.TeslaBrain@protonmail.com - Copy.exe.txt.exe")) returned 1 [0185.724] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xc04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0185.726] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x7b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0185.729] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2bc, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0185.731] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2bc, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0 [0185.732] CloseHandle (hObject=0x84) returned 1 [0185.733] CreateToolhelp32Snapshot (dwFlags=0xf, th32ProcessID=0x0) returned 0x90 [0185.769] Process32First (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0185.770] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6a, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0185.771] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0185.772] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0185.773] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0185.775] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0185.776] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0185.777] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0185.778] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0185.778] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x2bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0185.779] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x2c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x230, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0185.780] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1ec, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0185.781] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x31c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0185.782] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x230, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0185.835] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0185.836] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x3e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6e, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0185.837] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xf8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0185.838] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x16c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0185.839] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x27, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0185.840] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x47c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0185.841] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x538, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0185.842] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x5b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0185.843] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x5e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0185.844] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x5ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0185.845] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x61c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0185.846] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x640, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0185.847] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x6c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x5b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0185.848] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x70c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0185.849] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x71c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0185.851] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x3e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0185.852] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x740, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3e, th32ParentProcessID=0x6a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0185.854] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x894, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0185.855] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x8cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0185.856] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x964, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0185.858] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x51c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2bc, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0185.860] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x524, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x2bc, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0185.862] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x698, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x2bc, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0185.866] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x56c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2bc, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0185.868] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xd78, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0185.869] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xdec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0185.871] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x2bc, pcPriClassBase=8, dwFlags=0x0, szExeFile="SppExtComObj.Exe")) returned 1 [0185.938] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xd88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="shootworkforcecosts.exe")) returned 1 [0185.940] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xee0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="searched-hdtv.exe")) returned 1 [0185.942] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xe48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="delta-gratuit.exe")) returned 1 [0185.944] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xf0c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="dresses representations super.exe")) returned 1 [0185.945] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="bush.exe")) returned 1 [0185.951] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x778, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="douglas.exe")) returned 1 [0185.953] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x488, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="faced-flying-ghz.exe")) returned 1 [0185.956] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xdf8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="appears.exe")) returned 1 [0185.960] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x840, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="illustrationswagescorporation.exe")) returned 1 [0185.963] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xa5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="windowsmorrisonsalt.exe")) returned 1 [0185.965] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="henry.exe")) returned 1 [0185.968] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xe34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="exhibition.exe")) returned 1 [0185.970] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x52c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="aj shaved dental.exe")) returned 1 [0185.973] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xf30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="croatia afternoon diagnostic.exe")) returned 1 [0185.975] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xa90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="definitely-vpn.exe")) returned 1 [0185.977] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xf60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="hoping-announcement-conjunction.exe")) returned 1 [0186.141] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xf24, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="paper.exe")) returned 1 [0186.179] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xe74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="resistant.exe")) returned 1 [0186.180] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xb08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="helps-integration-aging.exe")) returned 1 [0186.183] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xde0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0186.186] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xc2c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0186.188] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xfac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0186.189] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x4b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0186.191] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xef8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0186.192] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xfa4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0186.194] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xd4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0186.195] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xe28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0186.197] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xc6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0186.200] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xedc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0186.201] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x8f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0186.203] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xb24, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0186.205] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xfe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0186.207] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xe30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0186.209] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xaf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0186.214] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x100c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0186.216] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1020, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0186.230] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1034, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0186.232] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x104c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0186.233] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1060, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0186.235] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1074, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0186.237] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1088, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0186.239] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x109c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0186.240] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x10b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="totalcmd.exe")) returned 1 [0186.241] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x10c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0186.245] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0186.246] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x10f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0186.248] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0186.249] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1118, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0186.251] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x112c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0186.252] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0186.254] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0186.255] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1168, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0186.257] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x117c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0186.258] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1190, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0186.259] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x11a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0186.261] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0186.262] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x11cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0186.264] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x11e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0186.266] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x11fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0186.279] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1210, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0186.281] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0186.282] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1238, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0186.284] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0186.286] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="regardless-live-involvement.exe")) returned 1 [0186.288] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1274, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="preliminary.exe")) returned 1 [0186.291] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1358, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x3e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0186.293] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x3e8, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1 [0186.295] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x13d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1380, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0186.297] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x13d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="Mr.TeslaBrain@protonmail.com - Copy.exe.txt.exe")) returned 1 [0186.300] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xc04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0186.301] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x7b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0186.303] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2bc, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0186.305] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x13fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x1a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="slui.exe")) returned 1 [0186.307] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x13fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x1a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="slui.exe")) returned 0 [0186.309] CloseHandle (hObject=0x90) returned 1 [0186.309] CreateToolhelp32Snapshot (dwFlags=0xf, th32ProcessID=0x0) returned 0x84 [0186.379] Process32First (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0186.379] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6a, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0186.380] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0186.381] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0186.382] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0186.383] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0186.384] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0186.385] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0186.386] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0186.387] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x2bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0186.388] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x2c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x230, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0186.389] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1ec, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0186.390] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x31c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0186.391] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x230, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0186.392] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0186.392] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x3e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6e, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0186.446] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xf8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0186.447] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x16c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0186.448] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x27, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0186.450] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x47c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0186.451] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x538, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0186.452] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x5b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0186.453] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x5e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0186.454] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x5ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0186.455] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x61c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0186.457] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x640, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0186.458] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x6c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x5b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0186.459] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x70c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0186.460] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x71c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0186.461] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x3e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0186.462] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x740, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3e, th32ParentProcessID=0x6a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0186.463] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x894, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0186.464] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x8cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0186.465] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x964, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0186.468] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x51c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2bc, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0186.469] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x524, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x2bc, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0186.471] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x698, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x2bc, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0186.473] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x56c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2bc, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0186.474] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xd78, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0186.476] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xdec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0186.478] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x2bc, pcPriClassBase=8, dwFlags=0x0, szExeFile="SppExtComObj.Exe")) returned 1 [0186.480] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xd88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="shootworkforcecosts.exe")) returned 1 [0186.481] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xee0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="searched-hdtv.exe")) returned 1 [0186.555] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xe48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="delta-gratuit.exe")) returned 1 [0186.557] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xf0c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="dresses representations super.exe")) returned 1 [0186.559] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="bush.exe")) returned 1 [0186.561] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x778, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="douglas.exe")) returned 1 [0186.563] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x488, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="faced-flying-ghz.exe")) returned 1 [0186.564] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xdf8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="appears.exe")) returned 1 [0186.566] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x840, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="illustrationswagescorporation.exe")) returned 1 [0186.567] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xa5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="windowsmorrisonsalt.exe")) returned 1 [0186.568] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="henry.exe")) returned 1 [0186.570] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xe34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="exhibition.exe")) returned 1 [0186.571] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x52c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="aj shaved dental.exe")) returned 1 [0186.573] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xf30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="croatia afternoon diagnostic.exe")) returned 1 [0186.574] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xa90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="definitely-vpn.exe")) returned 1 [0186.576] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xf60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="hoping-announcement-conjunction.exe")) returned 1 [0186.577] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xf24, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="paper.exe")) returned 1 [0186.578] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xe74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="resistant.exe")) returned 1 [0186.580] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xb08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="helps-integration-aging.exe")) returned 1 [0186.581] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xde0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0186.582] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xc2c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0186.584] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xfac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0186.586] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x4b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0186.587] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xef8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0186.590] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xfa4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0186.625] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xd4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0186.626] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xe28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0186.628] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xc6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0186.630] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xedc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0186.631] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x8f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0186.633] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xb24, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0186.636] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xfe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0186.637] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xe30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0186.639] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xaf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0186.641] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x100c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0186.643] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1020, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0186.645] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1034, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0186.647] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x104c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0186.648] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1060, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0186.650] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1074, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0186.652] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1088, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0186.654] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x109c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0186.656] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x10b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="totalcmd.exe")) returned 1 [0186.658] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x10c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0186.661] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0186.663] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x10f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0186.664] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0186.667] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1118, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0186.669] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x112c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0186.671] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0186.672] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0186.674] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1168, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0186.675] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x117c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0186.677] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1190, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0186.679] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x11a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0186.681] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0186.683] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x11cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0186.684] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x11e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0186.686] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x11fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0186.687] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1210, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0186.688] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0186.690] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1238, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0186.691] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0186.693] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="regardless-live-involvement.exe")) returned 1 [0186.694] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1274, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="preliminary.exe")) returned 1 [0186.696] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1358, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x3e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0186.700] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x3e8, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1 [0186.702] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x13d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1380, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0186.703] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x13d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="Mr.TeslaBrain@protonmail.com - Copy.exe.txt.exe")) returned 1 [0186.704] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xc04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0186.705] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x7b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0186.706] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2bc, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0186.708] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x13fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x1a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="slui.exe")) returned 1 [0186.709] Process32Next (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x13fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x1a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="slui.exe")) returned 0 [0186.710] CloseHandle (hObject=0x84) returned 1 [0186.710] CreateToolhelp32Snapshot (dwFlags=0xf, th32ProcessID=0x0) returned 0x90 [0186.731] Process32First (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0186.732] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6a, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0186.733] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0186.734] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0186.735] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0186.736] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0186.739] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0186.741] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0186.742] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0186.745] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x2bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0186.745] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x2c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x230, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0186.746] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1ec, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0186.747] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x31c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0186.748] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x230, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0186.749] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0186.750] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x3e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6e, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0186.751] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xf8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0186.752] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x16c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0186.753] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x27, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0186.754] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x47c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0186.755] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x538, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0186.756] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x5b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0186.757] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x5e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0186.757] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x5ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0186.758] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x61c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0186.759] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x640, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0186.759] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x6c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x5b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0186.760] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x70c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0186.761] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x71c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0186.762] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x3e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0186.763] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x740, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3f, th32ParentProcessID=0x6a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0186.765] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x894, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0186.766] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x8cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0186.767] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x964, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0186.768] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x51c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2bc, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0186.769] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x524, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x2bc, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0186.771] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x698, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x2bc, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0186.772] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x56c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2bc, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0186.773] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xd78, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0186.774] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xdec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0186.776] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x2bc, pcPriClassBase=8, dwFlags=0x0, szExeFile="SppExtComObj.Exe")) returned 1 [0186.781] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xd88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="shootworkforcecosts.exe")) returned 1 [0186.782] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xee0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="searched-hdtv.exe")) returned 1 [0186.783] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xe48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="delta-gratuit.exe")) returned 1 [0186.784] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xf0c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="dresses representations super.exe")) returned 1 [0186.786] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="bush.exe")) returned 1 [0186.787] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x778, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="douglas.exe")) returned 1 [0186.789] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x488, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="faced-flying-ghz.exe")) returned 1 [0186.790] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xdf8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="appears.exe")) returned 1 [0186.791] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x840, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="illustrationswagescorporation.exe")) returned 1 [0186.793] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xa5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="windowsmorrisonsalt.exe")) returned 1 [0186.820] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="henry.exe")) returned 1 [0186.823] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xe34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="exhibition.exe")) returned 1 [0186.824] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x52c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="aj shaved dental.exe")) returned 1 [0186.826] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xf30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="croatia afternoon diagnostic.exe")) returned 1 [0186.827] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xa90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="definitely-vpn.exe")) returned 1 [0186.828] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xf60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="hoping-announcement-conjunction.exe")) returned 1 [0186.830] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xf24, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="paper.exe")) returned 1 [0186.832] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xe74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="resistant.exe")) returned 1 [0186.833] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xb08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="helps-integration-aging.exe")) returned 1 [0186.834] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xde0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0186.835] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xc2c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0186.837] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xfac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0186.838] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x4b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0186.840] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xef8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0186.841] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xfa4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0186.844] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xd4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0186.846] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xe28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0186.848] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xc6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0186.850] Process32Next (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xedc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0186.915] CloseHandle (hObject=0x90) returned 1 [0186.916] CreateToolhelp32Snapshot (dwFlags=0xf, th32ProcessID=0x0) returned 0x84 [0186.939] Process32First (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0187.150] CloseHandle (hObject=0x84) returned 1 [0187.150] CreateToolhelp32Snapshot (dwFlags=0xf, th32ProcessID=0x0) returned 0x90 [0187.174] Process32First (in: hSnapshot=0x90, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0187.489] CloseHandle (hObject=0x90) returned 1 [0187.489] CreateToolhelp32Snapshot (dwFlags=0xf, th32ProcessID=0x0) returned 0x84 [0187.507] Process32First (in: hSnapshot=0x84, lppe=0x117f960 | out: lppe=0x117f960*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0187.689] CloseHandle (hObject=0x84) returned 1 [0187.689] GetLogicalDrives () returned 0x4 [0187.690] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1e0) returned 0x1ff5d0 [0187.690] GetDriveTypeA (lpRootPathName="C:\\") returned 0x3 [0187.691] GetLastError () returned 0x12 [0187.691] SetLastError (dwErrCode=0x12) [0187.691] AreFileApisANSI () returned 1 [0187.691] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x117fde4, cbMultiByte=3, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 3 [0187.691] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x117fde4, cbMultiByte=3, lpWideCharStr=0x117fc24, cchWideChar=3 | out: lpWideCharStr="C:\\") returned 3 [0187.691] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x117fbd4, lpTotalNumberOfBytes=0x117fbc4, lpTotalNumberOfFreeBytes=0x117fbcc | out: lpFreeBytesAvailableToCaller=0x117fbd4, lpTotalNumberOfBytes=0x117fbc4, lpTotalNumberOfFreeBytes=0x117fbcc) returned 1 [0187.694] GetDriveTypeA (lpRootPathName="") returned 0x1 [0187.694] GetDriveTypeA (lpRootPathName="") returned 0x1 [0187.694] GetDriveTypeA (lpRootPathName="") returned 0x1 [0187.694] GetDriveTypeA (lpRootPathName="") returned 0x1 [0187.694] GetDriveTypeA (lpRootPathName="") returned 0x1 [0187.694] GetDriveTypeA (lpRootPathName="") returned 0x1 [0187.695] GetDriveTypeA (lpRootPathName="") returned 0x1 [0187.695] GetDriveTypeA (lpRootPathName="") returned 0x1 [0187.695] GetDriveTypeA (lpRootPathName="") returned 0x1 [0187.695] GetDriveTypeA (lpRootPathName="") returned 0x1 [0187.695] GetDriveTypeA (lpRootPathName="") returned 0x1 [0187.695] GetDriveTypeA (lpRootPathName="") returned 0x1 [0187.695] GetDriveTypeA (lpRootPathName="") returned 0x1 [0187.697] GetDriveTypeA (lpRootPathName="") returned 0x1 [0187.697] GetDriveTypeA (lpRootPathName="") returned 0x1 [0187.697] GetDriveTypeA (lpRootPathName="") returned 0x1 [0187.697] GetDriveTypeA (lpRootPathName="") returned 0x1 [0187.697] GetDriveTypeA (lpRootPathName="") returned 0x1 [0187.697] GetDriveTypeA (lpRootPathName="") returned 0x1 [0187.697] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x1fb070 [0187.697] GetLastError () returned 0x12 [0187.698] SetLastError (dwErrCode=0x12) [0187.698] AreFileApisANSI () returned 1 [0187.698] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58668, cbMultiByte=22, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 22 [0187.698] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1feed0 [0187.698] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58668, cbMultiByte=22, lpWideCharStr=0x1feed0, cchWideChar=22 | out: lpWideCharStr="C:\\ProgramData\\ids.txt") returned 22 [0187.698] InitOnceExecuteOnce (in: InitOnce=0xe8be48, InitFn=0xdabb80, Parameter=0xe8be4c, Context=0x0 | out: InitOnce=0xe8be48, Parameter=0xe8be4c, Context=0x0) returned 1 [0187.703] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\ids.txt" (normalized: "c:\\programdata\\ids.txt"), fInfoLevelId=0x0, lpFileInformation=0x117e1dc | out: lpFileInformation=0x117e1dc*(dwFileAttributes=0x117e1f4, ftCreationTime.dwLowDateTime=0x77275567, ftCreationTime.dwHighDateTime=0xe8be48, ftLastAccessTime.dwLowDateTime=0xdabb80, ftLastAccessTime.dwHighDateTime=0xe8be4c, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x117e210, nFileSizeHigh=0xe093ee, nFileSizeLow=0xe8be48)) returned 0 [0187.703] GetLastError () returned 0x2 [0187.703] InitOnceExecuteOnce (in: InitOnce=0xe8be48, InitFn=0xdabb80, Parameter=0xe8be4c, Context=0x0 | out: InitOnce=0xe8be48, Parameter=0xe8be4c, Context=0x0) returned 1 [0187.703] InitOnceExecuteOnce (in: InitOnce=0xe8be48, InitFn=0xdabb80, Parameter=0xe8be4c, Context=0x0 | out: InitOnce=0xe8be48, Parameter=0xe8be4c, Context=0x0) returned 1 [0187.704] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1feed0 | out: hHeap=0x1f0000) returned 1 [0187.704] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1ff138 [0187.704] LoadLibraryExW (lpLibFileName="api-ms-win-security-systemfunctions-l1-1-0", hFile=0x0, dwFlags=0x800) returned 0x745c0000 [0187.705] GetProcAddress (hModule=0x745c0000, lpProcName="SystemFunction036") returned 0x73e529e0 [0187.706] SystemFunction036 (in: RandomBuffer=0x117e284, RandomBufferLength=0x4 | out: RandomBuffer=0x117e284) returned 1 [0187.706] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1ff138 | out: hHeap=0x1f0000) returned 1 [0187.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x206440 [0187.707] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x206470 [0187.707] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x38) returned 0x1ff7b8 [0187.708] AreFileApisANSI () returned 1 [0187.708] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xe58668, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 23 [0187.708] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2e) returned 0x1ff138 [0187.708] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xe58668, cbMultiByte=-1, lpWideCharStr=0x1ff138, cchWideChar=23 | out: lpWideCharStr="C:\\ProgramData\\ids.txt") returned 23 [0187.708] CreateFileW (lpFileName="C:\\ProgramData\\ids.txt" (normalized: "c:\\programdata\\ids.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x117e0a0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x84 [0187.737] GetFileType (hFile=0x84) returned 0x1 [0187.741] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1ff138 | out: hHeap=0x1f0000) returned 1 [0187.741] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x206420 [0187.741] GetLastError () returned 0x0 [0187.742] SetLastError (dwErrCode=0x0) [0187.742] GetLastError () returned 0x0 [0187.744] SetLastError (dwErrCode=0x0) [0187.744] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0xb8) returned 0x20b3f0 [0187.744] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x6a6) returned 0x20b578 [0187.745] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b578 | out: hHeap=0x1f0000) returned 1 [0187.745] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206450 | out: hHeap=0x1f0000) returned 1 [0187.745] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fe528 | out: hHeap=0x1f0000) returned 1 [0187.745] GetLastError () returned 0x0 [0187.745] SetLastError (dwErrCode=0x0) [0187.745] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x6) returned 0x206560 [0187.745] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2) returned 0x206510 [0187.745] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x4) returned 0x2063f0 [0187.745] GetLastError () returned 0x0 [0187.745] SetLastError (dwErrCode=0x0) [0187.745] GetLastError () returned 0x0 [0187.745] SetLastError (dwErrCode=0x0) [0187.745] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0xb8) returned 0x1fe528 [0187.746] GetLastError () returned 0x0 [0187.746] SetLastError (dwErrCode=0x0) [0187.746] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x6a6) returned 0x20b578 [0187.746] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b578 | out: hHeap=0x1f0000) returned 1 [0187.746] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206560 | out: hHeap=0x1f0000) returned 1 [0187.746] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b3f0 | out: hHeap=0x1f0000) returned 1 [0187.746] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2063f0 | out: hHeap=0x1f0000) returned 1 [0187.746] GetLastError () returned 0x0 [0187.746] SetLastError (dwErrCode=0x0) [0187.746] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x6) returned 0x2064f0 [0187.746] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2) returned 0x206500 [0187.746] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x4) returned 0x2065b0 [0187.746] GetLastError () returned 0x0 [0187.747] SetLastError (dwErrCode=0x0) [0187.747] GetLastError () returned 0x0 [0187.747] SetLastError (dwErrCode=0x0) [0187.749] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0xb8) returned 0x20b3f0 [0187.749] GetLastError () returned 0x0 [0187.749] SetLastError (dwErrCode=0x0) [0187.749] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x6a6) returned 0x20b578 [0187.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b578 | out: hHeap=0x1f0000) returned 1 [0187.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2064f0 | out: hHeap=0x1f0000) returned 1 [0187.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fe528 | out: hHeap=0x1f0000) returned 1 [0187.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2065b0 | out: hHeap=0x1f0000) returned 1 [0187.749] GetLastError () returned 0x0 [0187.749] SetLastError (dwErrCode=0x0) [0187.749] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x6) returned 0x206560 [0187.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206500 | out: hHeap=0x1f0000) returned 1 [0187.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206510 | out: hHeap=0x1f0000) returned 1 [0187.749] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2064f0 [0187.750] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x20b578 [0187.750] GetLastError () returned 0x0 [0187.750] GetProcAddress (hModule=0x77180000, lpProcName="FlsGetValue") returned 0x772670c0 [0187.750] SetLastError (dwErrCode=0x0) [0187.751] WriteFile (in: hFile=0x84, lpBuffer=0x117cd68*, nNumberOfBytesToWrite=0xf, lpNumberOfBytesWritten=0x117cd60, lpOverlapped=0x0 | out: lpBuffer=0x117cd68*, lpNumberOfBytesWritten=0x117cd60*=0xf, lpOverlapped=0x0) returned 1 [0187.752] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b578 | out: hHeap=0x1f0000) returned 1 [0187.753] CloseHandle (hObject=0x84) returned 1 [0187.758] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1feed0 [0187.758] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b6c0 [0187.759] CryptAcquireContextA (in: phProv=0x117e228, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x117e228*=0x20be70) returned 1 [0190.344] RtlWakeAllConditionVariable (in: ConditionVariable=0xe8d954 | out: ConditionVariable=0xe8d954) [0190.344] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x2064d0 [0190.344] CryptAcquireContextA (in: phProv=0x2064d0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2064d0*=0x20c500) returned 1 [0190.348] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x20b6c0 | out: pbBuffer=0x20b6c0) returned 1 [0190.348] CryptReleaseContext (hProv=0x20be70, dwFlags=0x0) returned 1 [0190.348] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b6c0 | out: hHeap=0x1f0000) returned 1 [0190.348] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b968 [0190.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20ba08 [0190.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x20b7b0 [0190.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x20c7c8 [0190.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b6e8 [0190.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b8f0 [0190.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b9e0 [0190.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b6c0 [0190.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b990 [0190.350] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b7d8 [0190.350] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b698 [0190.350] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20ba30 [0190.350] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20ba58 [0190.350] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205130 [0190.350] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x28) returned 0x206928 [0190.351] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b800 [0190.351] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b828 [0190.351] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b648 [0190.351] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b738 [0190.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b648 | out: hHeap=0x1f0000) returned 1 [0190.352] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b828 | out: hHeap=0x1f0000) returned 1 [0190.352] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b738 | out: hHeap=0x1f0000) returned 1 [0190.352] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20ba80 [0190.352] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ba80 | out: hHeap=0x1f0000) returned 1 [0190.352] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b8a0 [0190.352] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b918 [0190.352] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b670 [0190.352] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b620 [0190.353] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b828 [0190.353] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x20cc98 [0190.353] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b828 | out: hHeap=0x1f0000) returned 1 [0190.353] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x20be70 [0190.353] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20cc98 | out: hHeap=0x1f0000) returned 1 [0190.353] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b918 | out: hHeap=0x1f0000) returned 1 [0190.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x20c8d0 [0190.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20be70 | out: hHeap=0x1f0000) returned 1 [0190.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b620 | out: hHeap=0x1f0000) returned 1 [0190.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b710 [0190.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x20cc98 [0190.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x20cdb8 [0190.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b670 | out: hHeap=0x1f0000) returned 1 [0190.374] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x20be70 [0190.374] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20cdb8 | out: hHeap=0x1f0000) returned 1 [0190.374] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20cc98 | out: hHeap=0x1f0000) returned 1 [0190.374] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b710 | out: hHeap=0x1f0000) returned 1 [0190.374] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205170 [0190.374] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x28) returned 0x206808 [0190.374] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x20cc98 [0190.374] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x28) returned 0x2066b8 [0190.374] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x20cd38 [0190.375] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20be70 | out: hHeap=0x1f0000) returned 1 [0190.375] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20c8d0 | out: hHeap=0x1f0000) returned 1 [0190.375] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x2051d0 [0190.375] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b9b8 [0190.375] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20ba80 [0190.375] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ba80 | out: hHeap=0x1f0000) returned 1 [0190.375] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x20be70 [0190.375] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x20c8d0 [0190.375] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20be70 | out: hHeap=0x1f0000) returned 1 [0190.376] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b9b8 | out: hHeap=0x1f0000) returned 1 [0190.376] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20ba80 [0190.376] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ba80 | out: hHeap=0x1f0000) returned 1 [0190.376] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x20be70 [0190.376] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b918 [0190.376] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20ba80 [0190.376] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b5d0 [0190.376] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ba80 | out: hHeap=0x1f0000) returned 1 [0190.377] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b918 | out: hHeap=0x1f0000) returned 1 [0190.377] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b710 [0190.377] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b8c8 [0190.377] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b828 [0190.377] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b8c8 | out: hHeap=0x1f0000) returned 1 [0190.377] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b710 | out: hHeap=0x1f0000) returned 1 [0190.377] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x20cdd8 [0190.378] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x20ce78 [0190.378] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x20cf00 [0190.379] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x20e118 [0190.379] QueryPerformanceCounter (in: lpPerformanceCount=0x117dab8 | out: lpPerformanceCount=0x117dab8*=34774773991) returned 1 [0190.379] LoadLibraryExW (lpLibFileName="api-ms-win-core-sysinfo-l1-2-1", hFile=0x0, dwFlags=0x800) returned 0x77180000 [0190.380] GetProcAddress (hModule=0x77180000, lpProcName="GetSystemTimePreciseAsFileTime") returned 0x7724b830 [0190.380] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x117daf8 | out: lpSystemTimeAsFileTime=0x117daf8) [0190.381] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x1fef08 [0190.383] GetLastError () returned 0x0 [0190.384] SetLastError (dwErrCode=0x0) [0190.385] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef08 | out: hHeap=0x1f0000) returned 1 [0190.386] RtlWakeAllConditionVariable (in: ConditionVariable=0xe8d954 | out: ConditionVariable=0xe8d954) [0190.386] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b8f0 | out: hHeap=0x1f0000) returned 1 [0190.386] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x20e228 [0190.386] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ce78 | out: hHeap=0x1f0000) returned 1 [0190.386] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20cdd8 | out: hHeap=0x1f0000) returned 1 [0190.387] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b878 [0190.387] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b850 [0190.387] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b850 | out: hHeap=0x1f0000) returned 1 [0190.387] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206898 [0190.387] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206748 [0190.387] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206748 | out: hHeap=0x1f0000) returned 1 [0190.387] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x20cdd8 [0190.387] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b710 [0190.388] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b8c8 [0190.388] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b9b8 [0190.388] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20ba80 [0190.388] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b5a8 [0190.388] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b5a8 | out: hHeap=0x1f0000) returned 1 [0190.388] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ba80 | out: hHeap=0x1f0000) returned 1 [0190.388] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b9b8 | out: hHeap=0x1f0000) returned 1 [0190.388] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b850 [0190.388] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b8c8 | out: hHeap=0x1f0000) returned 1 [0190.388] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b710 | out: hHeap=0x1f0000) returned 1 [0190.389] RtlWakeAllConditionVariable (in: ConditionVariable=0xe8d954 | out: ConditionVariable=0xe8d954) [0190.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x202748 [0190.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b91) returned 0x20e2c8 [0190.390] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b760 [0190.391] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b760 | out: hHeap=0x1f0000) returned 1 [0190.391] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b5a8 [0190.391] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b710 [0190.391] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20ba80 [0190.391] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b8c8 [0190.391] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b5f8 [0190.391] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b8c8 | out: hHeap=0x1f0000) returned 1 [0190.391] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b9b8 [0190.391] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b738 [0190.391] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b738 | out: hHeap=0x1f0000) returned 1 [0190.391] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2067a8 [0190.391] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206838 [0190.392] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206838 | out: hHeap=0x1f0000) returned 1 [0190.392] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b620 [0190.392] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b648 [0190.392] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4b) returned 0x1fe528 [0190.392] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fe528 | out: hHeap=0x1f0000) returned 1 [0190.392] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b648 | out: hHeap=0x1f0000) returned 1 [0190.392] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b670 [0190.392] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b670 | out: hHeap=0x1f0000) returned 1 [0190.392] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2068c8 [0190.392] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2067d8 [0190.392] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2067d8 | out: hHeap=0x1f0000) returned 1 [0190.392] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206958 [0190.393] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2068c8 | out: hHeap=0x1f0000) returned 1 [0190.393] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b620 | out: hHeap=0x1f0000) returned 1 [0190.393] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2067a8 | out: hHeap=0x1f0000) returned 1 [0190.393] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b9b8 | out: hHeap=0x1f0000) returned 1 [0190.393] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b788 [0190.393] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b8f0 [0190.393] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b620 [0190.393] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b738 [0190.393] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b9b8 [0190.394] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b648 [0190.394] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b760 [0190.394] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4b) returned 0x1fe528 [0190.394] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fe528 | out: hHeap=0x1f0000) returned 1 [0190.394] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b760 | out: hHeap=0x1f0000) returned 1 [0190.394] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b648 | out: hHeap=0x1f0000) returned 1 [0190.394] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b9b8 | out: hHeap=0x1f0000) returned 1 [0190.394] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b738 | out: hHeap=0x1f0000) returned 1 [0190.394] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b620 | out: hHeap=0x1f0000) returned 1 [0190.394] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b8c8 [0190.395] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b8f0 | out: hHeap=0x1f0000) returned 1 [0190.395] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b788 | out: hHeap=0x1f0000) returned 1 [0190.395] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b9b8 [0190.395] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b9b8 | out: hHeap=0x1f0000) returned 1 [0190.395] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x20fe68 [0190.395] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b620 [0190.395] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b9b8 [0190.395] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b9b8 | out: hHeap=0x1f0000) returned 1 [0190.395] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x20ff08 [0190.395] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x20ffa8 [0190.396] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffa8 | out: hHeap=0x1f0000) returned 1 [0190.396] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff08 | out: hHeap=0x1f0000) returned 1 [0190.396] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b620 | out: hHeap=0x1f0000) returned 1 [0190.396] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20fe68 | out: hHeap=0x1f0000) returned 1 [0190.396] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x20fe68 [0190.396] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x20ff08 [0190.396] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b620 [0190.397] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b9b8 [0190.397] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x20ffa8 [0190.397] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b648 [0190.397] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b8f0 [0190.397] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4b) returned 0x1fe528 [0190.397] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fe528 | out: hHeap=0x1f0000) returned 1 [0190.397] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b648 | out: hHeap=0x1f0000) returned 1 [0190.397] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b738 [0190.397] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b760 [0190.397] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b760 | out: hHeap=0x1f0000) returned 1 [0190.397] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b738 | out: hHeap=0x1f0000) returned 1 [0190.397] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b8f0 | out: hHeap=0x1f0000) returned 1 [0190.398] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffa8 | out: hHeap=0x1f0000) returned 1 [0190.398] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b9b8 | out: hHeap=0x1f0000) returned 1 [0190.398] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x44) returned 0x20c588 [0190.401] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b738 [0190.401] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b648 [0190.401] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b648 | out: hHeap=0x1f0000) returned 1 [0190.401] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2068c8 [0190.401] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206688 [0190.401] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206688 | out: hHeap=0x1f0000) returned 1 [0190.401] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x20ffa8 [0190.401] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffa8 | out: hHeap=0x1f0000) returned 1 [0190.401] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2068c8 | out: hHeap=0x1f0000) returned 1 [0190.401] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b738 | out: hHeap=0x1f0000) returned 1 [0190.402] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x20ffa8 [0190.402] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b648 [0190.402] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b738 [0190.402] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x210048 [0190.402] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b670 [0190.402] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b760 [0190.402] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b788 [0190.402] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b8f0 [0190.402] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b8f0 | out: hHeap=0x1f0000) returned 1 [0190.402] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x2100e8 [0190.403] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x210188 [0190.403] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210188 | out: hHeap=0x1f0000) returned 1 [0190.403] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2100e8 | out: hHeap=0x1f0000) returned 1 [0190.403] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b788 | out: hHeap=0x1f0000) returned 1 [0190.403] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b9b8 [0190.404] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b788 [0190.404] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4b) returned 0x1fe528 [0190.404] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fe528 | out: hHeap=0x1f0000) returned 1 [0190.404] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b788 | out: hHeap=0x1f0000) returned 1 [0190.404] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b9b8 | out: hHeap=0x1f0000) returned 1 [0190.404] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210048 | out: hHeap=0x1f0000) returned 1 [0190.404] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b788 [0190.404] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b8f0 [0190.404] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b918 [0190.404] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4b) returned 0x1fe528 [0190.405] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fe528 | out: hHeap=0x1f0000) returned 1 [0190.405] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b918 | out: hHeap=0x1f0000) returned 1 [0190.405] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b8f0 | out: hHeap=0x1f0000) returned 1 [0190.405] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b8f0 [0190.405] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b918 [0190.405] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4b) returned 0x1fe528 [0190.405] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fe528 | out: hHeap=0x1f0000) returned 1 [0190.405] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b918 | out: hHeap=0x1f0000) returned 1 [0190.405] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b8f0 | out: hHeap=0x1f0000) returned 1 [0190.405] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b760 | out: hHeap=0x1f0000) returned 1 [0190.405] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b670 | out: hHeap=0x1f0000) returned 1 [0190.405] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b788 | out: hHeap=0x1f0000) returned 1 [0190.405] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b9b8 [0190.405] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b738 | out: hHeap=0x1f0000) returned 1 [0190.405] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b648 | out: hHeap=0x1f0000) returned 1 [0190.406] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b9b8 | out: hHeap=0x1f0000) returned 1 [0190.406] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffa8 | out: hHeap=0x1f0000) returned 1 [0190.406] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b738 [0190.406] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b940 [0190.406] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b940 | out: hHeap=0x1f0000) returned 1 [0190.406] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b760 [0190.406] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b9b8 [0190.406] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b8f0 [0190.406] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x20ffa8 [0190.406] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b788 [0190.406] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b648 [0190.406] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b918 [0190.406] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b670 [0190.406] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b670 | out: hHeap=0x1f0000) returned 1 [0190.406] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x210048 [0190.406] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x2100e8 [0190.406] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2100e8 | out: hHeap=0x1f0000) returned 1 [0190.407] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210048 | out: hHeap=0x1f0000) returned 1 [0190.407] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b918 | out: hHeap=0x1f0000) returned 1 [0190.407] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b670 [0190.407] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b918 [0190.407] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4b) returned 0x1fe528 [0190.407] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fe528 | out: hHeap=0x1f0000) returned 1 [0190.407] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b918 | out: hHeap=0x1f0000) returned 1 [0190.407] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b670 | out: hHeap=0x1f0000) returned 1 [0190.407] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffa8 | out: hHeap=0x1f0000) returned 1 [0190.408] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b670 [0190.408] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b648 | out: hHeap=0x1f0000) returned 1 [0190.408] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b788 | out: hHeap=0x1f0000) returned 1 [0190.408] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b670 | out: hHeap=0x1f0000) returned 1 [0190.408] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b648 [0190.408] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b8f0 | out: hHeap=0x1f0000) returned 1 [0190.408] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b9b8 | out: hHeap=0x1f0000) returned 1 [0190.408] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b648 | out: hHeap=0x1f0000) returned 1 [0190.408] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b760 | out: hHeap=0x1f0000) returned 1 [0190.408] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b760 [0190.408] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x20ffa8 [0190.408] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b760 | out: hHeap=0x1f0000) returned 1 [0190.408] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x210048 [0190.408] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x2100e8 [0190.408] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210048 | out: hHeap=0x1f0000) returned 1 [0190.408] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x210048 [0190.409] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x210188 [0190.409] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b648 [0190.409] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b8f0 [0190.409] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x210228 [0190.409] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x2102c8 [0190.409] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b788 [0190.409] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x210c50 [0190.410] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x293) returned 0x211370 [0190.410] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b670 [0190.410] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211610 [0190.410] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b670 | out: hHeap=0x1f0000) returned 1 [0190.410] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211730 [0190.410] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211610 | out: hHeap=0x1f0000) returned 1 [0190.410] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b918 [0190.410] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b670 [0190.410] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b918 | out: hHeap=0x1f0000) returned 1 [0190.411] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x210ed0 [0190.411] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b670 | out: hHeap=0x1f0000) returned 1 [0190.411] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206658 [0190.411] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x233) returned 0x211850 [0190.411] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211850 | out: hHeap=0x1f0000) returned 1 [0190.411] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206658 | out: hHeap=0x1f0000) returned 1 [0190.411] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211730 | out: hHeap=0x1f0000) returned 1 [0190.411] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2026d0 [0190.411] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x1fe528 [0190.411] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x211290 [0190.411] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b760 [0190.411] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x210cf0 [0190.411] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b918 [0190.411] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b760 | out: hHeap=0x1f0000) returned 1 [0190.412] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211290 | out: hHeap=0x1f0000) returned 1 [0190.412] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211610 [0190.412] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b760 [0190.412] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b940 [0190.412] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b760 | out: hHeap=0x1f0000) returned 1 [0190.412] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x210f70 [0190.412] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b940 | out: hHeap=0x1f0000) returned 1 [0190.412] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2065f8 [0190.412] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x233) returned 0x211730 [0190.412] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211730 | out: hHeap=0x1f0000) returned 1 [0190.412] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2065f8 | out: hHeap=0x1f0000) returned 1 [0190.412] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b788 | out: hHeap=0x1f0000) returned 1 [0190.412] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x210d90 [0190.412] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210f70 | out: hHeap=0x1f0000) returned 1 [0190.412] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211610 | out: hHeap=0x1f0000) returned 1 [0190.412] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x300) returned 0x211610 [0190.413] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x210890 [0190.413] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x211290 [0190.413] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x210570 [0190.413] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x210b10 [0190.413] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x210bb0 [0190.413] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x2111f0 [0190.413] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x210f70 [0190.413] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x210390 [0190.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x211150 [0190.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x2104d0 [0190.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x211010 [0190.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x2110b0 [0190.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x210610 [0190.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x2109d0 [0190.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x2107f0 [0190.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x210e30 [0190.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x210430 [0190.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x2106b0 [0190.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x210930 [0190.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x210750 [0190.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x210a70 [0190.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x211bc8 [0190.430] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x2125c8 [0190.430] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x211f88 [0190.430] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x212028 [0190.430] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x211c68 [0190.430] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x2120c8 [0190.430] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x212208 [0190.430] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x212168 [0190.430] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x211d08 [0190.430] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x212988 [0190.430] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x2119e8 [0190.430] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x212668 [0190.432] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b8f0 | out: hHeap=0x1f0000) returned 1 [0190.432] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x2123e8 [0190.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212668 | out: hHeap=0x1f0000) returned 1 [0190.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b918 | out: hHeap=0x1f0000) returned 1 [0190.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cf0 | out: hHeap=0x1f0000) returned 1 [0190.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fe528 | out: hHeap=0x1f0000) returned 1 [0190.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210890 | out: hHeap=0x1f0000) returned 1 [0190.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211290 | out: hHeap=0x1f0000) returned 1 [0190.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210570 | out: hHeap=0x1f0000) returned 1 [0190.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210b10 | out: hHeap=0x1f0000) returned 1 [0190.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210bb0 | out: hHeap=0x1f0000) returned 1 [0190.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2111f0 | out: hHeap=0x1f0000) returned 1 [0190.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210f70 | out: hHeap=0x1f0000) returned 1 [0190.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0190.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211150 | out: hHeap=0x1f0000) returned 1 [0190.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104d0 | out: hHeap=0x1f0000) returned 1 [0190.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211010 | out: hHeap=0x1f0000) returned 1 [0190.434] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2110b0 | out: hHeap=0x1f0000) returned 1 [0190.434] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210610 | out: hHeap=0x1f0000) returned 1 [0190.434] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2109d0 | out: hHeap=0x1f0000) returned 1 [0190.434] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2107f0 | out: hHeap=0x1f0000) returned 1 [0190.434] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210e30 | out: hHeap=0x1f0000) returned 1 [0190.434] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210430 | out: hHeap=0x1f0000) returned 1 [0190.434] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2106b0 | out: hHeap=0x1f0000) returned 1 [0190.434] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210930 | out: hHeap=0x1f0000) returned 1 [0190.434] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210750 | out: hHeap=0x1f0000) returned 1 [0190.434] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a70 | out: hHeap=0x1f0000) returned 1 [0190.434] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211bc8 | out: hHeap=0x1f0000) returned 1 [0190.434] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2125c8 | out: hHeap=0x1f0000) returned 1 [0190.435] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211f88 | out: hHeap=0x1f0000) returned 1 [0190.435] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212028 | out: hHeap=0x1f0000) returned 1 [0190.435] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211c68 | out: hHeap=0x1f0000) returned 1 [0190.435] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2120c8 | out: hHeap=0x1f0000) returned 1 [0190.435] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212208 | out: hHeap=0x1f0000) returned 1 [0190.435] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212168 | out: hHeap=0x1f0000) returned 1 [0190.435] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d08 | out: hHeap=0x1f0000) returned 1 [0190.435] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212988 | out: hHeap=0x1f0000) returned 1 [0190.435] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2119e8 | out: hHeap=0x1f0000) returned 1 [0190.435] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211610 | out: hHeap=0x1f0000) returned 1 [0190.435] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2026d0 | out: hHeap=0x1f0000) returned 1 [0190.435] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ed0 | out: hHeap=0x1f0000) returned 1 [0190.435] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x2122a8 [0190.435] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2122a8 | out: hHeap=0x1f0000) returned 1 [0190.435] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211370 | out: hHeap=0x1f0000) returned 1 [0190.435] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210c50 | out: hHeap=0x1f0000) returned 1 [0190.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210d90 | out: hHeap=0x1f0000) returned 1 [0190.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2102c8 | out: hHeap=0x1f0000) returned 1 [0190.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210228 | out: hHeap=0x1f0000) returned 1 [0190.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b648 | out: hHeap=0x1f0000) returned 1 [0190.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210188 | out: hHeap=0x1f0000) returned 1 [0190.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210048 | out: hHeap=0x1f0000) returned 1 [0190.436] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b648 [0190.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b648 | out: hHeap=0x1f0000) returned 1 [0190.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2123e8 | out: hHeap=0x1f0000) returned 1 [0190.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2100e8 | out: hHeap=0x1f0000) returned 1 [0190.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffa8 | out: hHeap=0x1f0000) returned 1 [0190.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b738 | out: hHeap=0x1f0000) returned 1 [0190.436] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b648 [0190.437] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b918 [0190.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b918 | out: hHeap=0x1f0000) returned 1 [0190.437] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206838 [0190.437] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206718 [0190.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206718 | out: hHeap=0x1f0000) returned 1 [0190.437] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x212988 [0190.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212988 | out: hHeap=0x1f0000) returned 1 [0190.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206838 | out: hHeap=0x1f0000) returned 1 [0190.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b648 | out: hHeap=0x1f0000) returned 1 [0190.437] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x212a28 [0190.438] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b670 [0190.438] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b738 [0190.438] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x212ac8 [0190.438] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b760 [0190.438] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b788 [0190.439] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b648 [0190.439] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b8f0 [0190.439] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b8f0 | out: hHeap=0x1f0000) returned 1 [0190.439] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x2128e8 [0190.439] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x20ffa8 [0190.439] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffa8 | out: hHeap=0x1f0000) returned 1 [0190.439] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2128e8 | out: hHeap=0x1f0000) returned 1 [0190.439] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b648 | out: hHeap=0x1f0000) returned 1 [0190.439] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b8f0 [0190.439] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b648 [0190.439] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4b) returned 0x1fe528 [0190.439] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fe528 | out: hHeap=0x1f0000) returned 1 [0190.440] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b648 | out: hHeap=0x1f0000) returned 1 [0190.440] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b8f0 | out: hHeap=0x1f0000) returned 1 [0190.440] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ac8 | out: hHeap=0x1f0000) returned 1 [0190.440] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b8f0 [0190.440] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b918 [0190.440] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b648 [0190.440] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4b) returned 0x1fe528 [0190.440] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fe528 | out: hHeap=0x1f0000) returned 1 [0190.441] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b648 | out: hHeap=0x1f0000) returned 1 [0190.441] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b918 | out: hHeap=0x1f0000) returned 1 [0190.441] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b788 | out: hHeap=0x1f0000) returned 1 [0190.441] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b760 | out: hHeap=0x1f0000) returned 1 [0190.441] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b8f0 | out: hHeap=0x1f0000) returned 1 [0190.441] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b9b8 [0190.441] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b738 | out: hHeap=0x1f0000) returned 1 [0190.441] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b670 | out: hHeap=0x1f0000) returned 1 [0190.441] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b9b8 | out: hHeap=0x1f0000) returned 1 [0190.441] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212a28 | out: hHeap=0x1f0000) returned 1 [0190.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b8f0 [0190.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b738 [0190.442] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b738 | out: hHeap=0x1f0000) returned 1 [0190.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b738 [0190.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b940 [0190.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b760 [0190.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x2128e8 [0190.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b788 [0190.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b918 [0190.443] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b9b8 [0190.443] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b648 [0190.443] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b648 | out: hHeap=0x1f0000) returned 1 [0190.443] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x2123e8 [0190.443] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x20ffa8 [0190.443] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffa8 | out: hHeap=0x1f0000) returned 1 [0190.443] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2123e8 | out: hHeap=0x1f0000) returned 1 [0190.443] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b9b8 | out: hHeap=0x1f0000) returned 1 [0190.443] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b9b8 [0190.443] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b648 [0190.444] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4b) returned 0x1fe528 [0190.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fe528 | out: hHeap=0x1f0000) returned 1 [0190.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b648 | out: hHeap=0x1f0000) returned 1 [0190.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b9b8 | out: hHeap=0x1f0000) returned 1 [0190.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2128e8 | out: hHeap=0x1f0000) returned 1 [0190.444] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b648 [0190.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b918 | out: hHeap=0x1f0000) returned 1 [0190.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b788 | out: hHeap=0x1f0000) returned 1 [0190.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b648 | out: hHeap=0x1f0000) returned 1 [0190.444] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b918 [0190.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b760 | out: hHeap=0x1f0000) returned 1 [0190.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b940 | out: hHeap=0x1f0000) returned 1 [0190.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b918 | out: hHeap=0x1f0000) returned 1 [0190.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b738 | out: hHeap=0x1f0000) returned 1 [0190.445] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b940 [0190.445] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x2119e8 [0190.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b940 | out: hHeap=0x1f0000) returned 1 [0190.445] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x211da8 [0190.445] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x211948 [0190.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211da8 | out: hHeap=0x1f0000) returned 1 [0190.446] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x212528 [0190.446] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x211e48 [0190.446] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b648 [0190.446] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b670 [0190.446] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x212668 [0190.446] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x2122a8 [0190.446] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b918 [0190.446] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x2127a8 [0190.447] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x293) returned 0x20ffa8 [0190.447] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b940 [0190.447] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210248 [0190.447] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b940 | out: hHeap=0x1f0000) returned 1 [0190.447] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211370 [0190.447] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210248 | out: hHeap=0x1f0000) returned 1 [0190.447] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b9b8 [0190.447] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b940 [0190.447] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b9b8 | out: hHeap=0x1f0000) returned 1 [0190.447] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x211d08 [0190.447] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b940 | out: hHeap=0x1f0000) returned 1 [0190.447] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206988 [0190.447] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x233) returned 0x211490 [0190.448] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211490 | out: hHeap=0x1f0000) returned 1 [0190.448] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206988 | out: hHeap=0x1f0000) returned 1 [0190.448] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211370 | out: hHeap=0x1f0000) returned 1 [0190.448] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2026d0 [0190.448] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x213e10 [0190.448] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x211a88 [0190.448] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b738 [0190.448] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x211da8 [0190.448] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b9b8 [0190.448] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b738 | out: hHeap=0x1f0000) returned 1 [0190.448] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211a88 | out: hHeap=0x1f0000) returned 1 [0190.449] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210248 [0190.449] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b738 [0190.449] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b940 [0190.449] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b738 | out: hHeap=0x1f0000) returned 1 [0190.449] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x212ca8 [0190.449] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b940 | out: hHeap=0x1f0000) returned 1 [0190.449] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206778 [0190.449] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x233) returned 0x211370 [0190.449] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211370 | out: hHeap=0x1f0000) returned 1 [0190.449] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206778 | out: hHeap=0x1f0000) returned 1 [0190.449] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b918 | out: hHeap=0x1f0000) returned 1 [0190.449] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x2125c8 [0190.449] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ca8 | out: hHeap=0x1f0000) returned 1 [0190.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210248 | out: hHeap=0x1f0000) returned 1 [0190.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x300) returned 0x211370 [0190.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x2128e8 [0190.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x211ee8 [0190.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x2120c8 [0190.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x212988 [0190.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x211f88 [0190.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x212c08 [0190.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x211a88 [0190.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x212ac8 [0190.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x212a28 [0190.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x212708 [0190.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x212b68 [0190.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x212028 [0190.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x212ca8 [0190.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x212168 [0190.451] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x212848 [0190.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b670 | out: hHeap=0x1f0000) returned 1 [0190.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213248 | out: hHeap=0x1f0000) returned 1 [0190.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b9b8 | out: hHeap=0x1f0000) returned 1 [0190.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211da8 | out: hHeap=0x1f0000) returned 1 [0190.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213e10 | out: hHeap=0x1f0000) returned 1 [0190.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2128e8 | out: hHeap=0x1f0000) returned 1 [0190.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211ee8 | out: hHeap=0x1f0000) returned 1 [0190.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2120c8 | out: hHeap=0x1f0000) returned 1 [0190.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212988 | out: hHeap=0x1f0000) returned 1 [0190.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211f88 | out: hHeap=0x1f0000) returned 1 [0190.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212c08 | out: hHeap=0x1f0000) returned 1 [0190.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211a88 | out: hHeap=0x1f0000) returned 1 [0190.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ac8 | out: hHeap=0x1f0000) returned 1 [0190.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212a28 | out: hHeap=0x1f0000) returned 1 [0190.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212708 | out: hHeap=0x1f0000) returned 1 [0190.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b68 | out: hHeap=0x1f0000) returned 1 [0190.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212028 | out: hHeap=0x1f0000) returned 1 [0190.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ca8 | out: hHeap=0x1f0000) returned 1 [0190.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212168 | out: hHeap=0x1f0000) returned 1 [0190.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212848 | out: hHeap=0x1f0000) returned 1 [0190.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2123e8 | out: hHeap=0x1f0000) returned 1 [0190.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b28 | out: hHeap=0x1f0000) returned 1 [0190.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211bc8 | out: hHeap=0x1f0000) returned 1 [0190.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211c68 | out: hHeap=0x1f0000) returned 1 [0190.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212208 | out: hHeap=0x1f0000) returned 1 [0190.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212348 | out: hHeap=0x1f0000) returned 1 [0190.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212488 | out: hHeap=0x1f0000) returned 1 [0190.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2136a8 | out: hHeap=0x1f0000) returned 1 [0190.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212fc8 | out: hHeap=0x1f0000) returned 1 [0190.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213568 | out: hHeap=0x1f0000) returned 1 [0190.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131a8 | out: hHeap=0x1f0000) returned 1 [0190.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f28 | out: hHeap=0x1f0000) returned 1 [0190.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213748 | out: hHeap=0x1f0000) returned 1 [0190.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2137e8 | out: hHeap=0x1f0000) returned 1 [0190.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213108 | out: hHeap=0x1f0000) returned 1 [0190.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d48 | out: hHeap=0x1f0000) returned 1 [0190.456] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2132e8 | out: hHeap=0x1f0000) returned 1 [0190.456] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211370 | out: hHeap=0x1f0000) returned 1 [0190.456] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2026d0 | out: hHeap=0x1f0000) returned 1 [0190.456] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d08 | out: hHeap=0x1f0000) returned 1 [0190.456] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211f88 | out: hHeap=0x1f0000) returned 1 [0190.456] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffa8 | out: hHeap=0x1f0000) returned 1 [0190.456] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2127a8 | out: hHeap=0x1f0000) returned 1 [0190.456] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2125c8 | out: hHeap=0x1f0000) returned 1 [0190.456] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2122a8 | out: hHeap=0x1f0000) returned 1 [0190.463] RtlWakeAllConditionVariable (in: ConditionVariable=0xe8d954 | out: ConditionVariable=0xe8d954) [0190.463] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x205090 [0190.463] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b648 [0190.463] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b670 [0190.463] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b670 | out: hHeap=0x1f0000) returned 1 [0190.463] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206988 [0190.463] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2065f8 [0190.463] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2065f8 | out: hHeap=0x1f0000) returned 1 [0190.463] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b648 | out: hHeap=0x1f0000) returned 1 [0190.466] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b8f0 [0190.466] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b9b8 [0190.466] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b9b8 | out: hHeap=0x1f0000) returned 1 [0190.466] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b738 [0190.466] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b9b8 [0190.466] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b760 [0190.466] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x212708 [0190.467] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b918 [0190.467] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b648 [0190.467] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b670 [0190.467] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b788 [0190.467] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b788 | out: hHeap=0x1f0000) returned 1 [0190.467] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x212168 [0190.467] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x20ffa8 [0190.467] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffa8 | out: hHeap=0x1f0000) returned 1 [0190.467] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212168 | out: hHeap=0x1f0000) returned 1 [0190.467] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b670 | out: hHeap=0x1f0000) returned 1 [0190.467] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b788 [0190.467] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b940 [0190.467] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4b) returned 0x1fe528 [0190.467] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fe528 | out: hHeap=0x1f0000) returned 1 [0190.467] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b940 | out: hHeap=0x1f0000) returned 1 [0190.467] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b788 | out: hHeap=0x1f0000) returned 1 [0190.467] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212708 | out: hHeap=0x1f0000) returned 1 [0190.467] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b670 [0190.469] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b788 [0190.469] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b940 [0190.469] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4b) returned 0x1fe528 [0190.469] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fe528 | out: hHeap=0x1f0000) returned 1 [0190.469] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b940 | out: hHeap=0x1f0000) returned 1 [0190.469] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b788 | out: hHeap=0x1f0000) returned 1 [0190.470] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b648 | out: hHeap=0x1f0000) returned 1 [0190.470] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b918 | out: hHeap=0x1f0000) returned 1 [0190.470] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b670 | out: hHeap=0x1f0000) returned 1 [0190.470] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b918 [0190.470] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b760 | out: hHeap=0x1f0000) returned 1 [0190.470] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b9b8 | out: hHeap=0x1f0000) returned 1 [0190.470] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b918 | out: hHeap=0x1f0000) returned 1 [0190.470] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b738 | out: hHeap=0x1f0000) returned 1 [0190.470] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b738 [0190.470] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x212a28 [0190.470] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b738 | out: hHeap=0x1f0000) returned 1 [0190.470] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x212c08 [0190.470] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x2120c8 [0190.471] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212c08 | out: hHeap=0x1f0000) returned 1 [0190.471] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x212ac8 [0190.471] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x2122a8 [0190.471] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b918 [0190.471] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b648 [0190.471] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x211f88 [0190.471] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x212b68 [0190.471] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b940 [0190.471] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x212668 [0190.471] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x293) returned 0x20ffa8 [0190.471] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b670 [0190.471] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210248 [0190.471] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b670 | out: hHeap=0x1f0000) returned 1 [0190.471] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211370 [0190.471] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210248 | out: hHeap=0x1f0000) returned 1 [0190.471] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b670 [0190.471] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b9b8 [0190.471] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b670 | out: hHeap=0x1f0000) returned 1 [0190.472] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x211c68 [0190.472] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b9b8 | out: hHeap=0x1f0000) returned 1 [0190.472] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2067a8 [0190.472] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x233) returned 0x211490 [0190.472] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211490 | out: hHeap=0x1f0000) returned 1 [0190.472] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2067a8 | out: hHeap=0x1f0000) returned 1 [0190.472] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211370 | out: hHeap=0x1f0000) returned 1 [0190.472] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2026d0 [0190.472] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x213af8 [0190.472] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x212488 [0190.472] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b9b8 [0190.472] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x2128e8 [0190.472] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b670 [0190.472] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b9b8 | out: hHeap=0x1f0000) returned 1 [0190.472] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212488 | out: hHeap=0x1f0000) returned 1 [0190.473] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210248 [0190.473] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b9b8 [0190.473] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b738 [0190.473] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b9b8 | out: hHeap=0x1f0000) returned 1 [0190.473] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x2119e8 [0190.473] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b738 | out: hHeap=0x1f0000) returned 1 [0190.473] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206718 [0190.473] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x233) returned 0x211370 [0190.473] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211370 | out: hHeap=0x1f0000) returned 1 [0190.473] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206718 | out: hHeap=0x1f0000) returned 1 [0190.473] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b940 | out: hHeap=0x1f0000) returned 1 [0190.473] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x2125c8 [0190.473] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2119e8 | out: hHeap=0x1f0000) returned 1 [0190.473] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210248 | out: hHeap=0x1f0000) returned 1 [0190.473] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x300) returned 0x211370 [0190.473] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x212348 [0190.473] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x211e48 [0190.474] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x212488 [0190.474] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x2123e8 [0190.474] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x2127a8 [0190.474] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x212168 [0190.474] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x211ee8 [0190.474] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x212528 [0190.474] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x212988 [0190.474] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x212c08 [0190.474] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x212848 [0190.474] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x212708 [0190.474] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x211bc8 [0190.474] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x212028 [0190.474] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x211948 [0190.474] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x211d08 [0190.474] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x212ca8 [0190.474] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x2119e8 [0190.474] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x211a88 [0190.474] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x211b28 [0190.474] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x212208 [0190.475] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x211da8 [0190.475] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x213428 [0190.475] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x212d48 [0190.475] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x212de8 [0190.475] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x213068 [0190.475] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x2136a8 [0190.475] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x213388 [0190.475] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x212e88 [0190.475] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x2132e8 [0190.475] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x213608 [0190.475] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x212f28 [0190.475] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x2131a8 [0190.477] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b648 | out: hHeap=0x1f0000) returned 1 [0190.477] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x212fc8 [0190.477] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131a8 | out: hHeap=0x1f0000) returned 1 [0190.477] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b670 | out: hHeap=0x1f0000) returned 1 [0190.477] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2128e8 | out: hHeap=0x1f0000) returned 1 [0190.477] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213af8 | out: hHeap=0x1f0000) returned 1 [0190.478] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212348 | out: hHeap=0x1f0000) returned 1 [0190.478] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e48 | out: hHeap=0x1f0000) returned 1 [0190.478] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212488 | out: hHeap=0x1f0000) returned 1 [0190.478] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2123e8 | out: hHeap=0x1f0000) returned 1 [0190.478] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2127a8 | out: hHeap=0x1f0000) returned 1 [0190.478] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212168 | out: hHeap=0x1f0000) returned 1 [0190.478] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211ee8 | out: hHeap=0x1f0000) returned 1 [0190.478] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212528 | out: hHeap=0x1f0000) returned 1 [0190.478] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212988 | out: hHeap=0x1f0000) returned 1 [0190.478] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212c08 | out: hHeap=0x1f0000) returned 1 [0190.478] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212848 | out: hHeap=0x1f0000) returned 1 [0190.478] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212708 | out: hHeap=0x1f0000) returned 1 [0190.478] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211bc8 | out: hHeap=0x1f0000) returned 1 [0190.478] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212028 | out: hHeap=0x1f0000) returned 1 [0190.478] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211948 | out: hHeap=0x1f0000) returned 1 [0190.479] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d08 | out: hHeap=0x1f0000) returned 1 [0190.479] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ca8 | out: hHeap=0x1f0000) returned 1 [0190.479] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2119e8 | out: hHeap=0x1f0000) returned 1 [0190.479] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211a88 | out: hHeap=0x1f0000) returned 1 [0190.479] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b28 | out: hHeap=0x1f0000) returned 1 [0190.479] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212208 | out: hHeap=0x1f0000) returned 1 [0190.479] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211da8 | out: hHeap=0x1f0000) returned 1 [0190.479] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213428 | out: hHeap=0x1f0000) returned 1 [0190.479] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d48 | out: hHeap=0x1f0000) returned 1 [0190.479] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212de8 | out: hHeap=0x1f0000) returned 1 [0190.479] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213068 | out: hHeap=0x1f0000) returned 1 [0190.479] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2136a8 | out: hHeap=0x1f0000) returned 1 [0190.479] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213388 | out: hHeap=0x1f0000) returned 1 [0190.479] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e88 | out: hHeap=0x1f0000) returned 1 [0190.479] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2132e8 | out: hHeap=0x1f0000) returned 1 [0190.479] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213608 | out: hHeap=0x1f0000) returned 1 [0190.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f28 | out: hHeap=0x1f0000) returned 1 [0190.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211370 | out: hHeap=0x1f0000) returned 1 [0190.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2026d0 | out: hHeap=0x1f0000) returned 1 [0190.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211c68 | out: hHeap=0x1f0000) returned 1 [0190.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x212c08 [0190.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212c08 | out: hHeap=0x1f0000) returned 1 [0190.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffa8 | out: hHeap=0x1f0000) returned 1 [0190.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212668 | out: hHeap=0x1f0000) returned 1 [0190.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2125c8 | out: hHeap=0x1f0000) returned 1 [0190.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b68 | out: hHeap=0x1f0000) returned 1 [0190.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211f88 | out: hHeap=0x1f0000) returned 1 [0190.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b918 | out: hHeap=0x1f0000) returned 1 [0190.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2122a8 | out: hHeap=0x1f0000) returned 1 [0190.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ac8 | out: hHeap=0x1f0000) returned 1 [0190.481] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b738 [0190.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b738 | out: hHeap=0x1f0000) returned 1 [0190.481] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b918 [0190.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b918 | out: hHeap=0x1f0000) returned 1 [0190.481] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x20ffa8 [0190.481] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2100c8 [0190.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2100c8 | out: hHeap=0x1f0000) returned 1 [0190.481] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b9b8 [0190.481] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b648 [0190.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b9b8 | out: hHeap=0x1f0000) returned 1 [0190.481] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x2128e8 [0190.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b648 | out: hHeap=0x1f0000) returned 1 [0190.481] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2100c8 [0190.481] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2ab) returned 0x211370 [0190.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211370 | out: hHeap=0x1f0000) returned 1 [0190.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2100c8 | out: hHeap=0x1f0000) returned 1 [0190.482] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2128e8 | out: hHeap=0x1f0000) returned 1 [0190.482] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffa8 | out: hHeap=0x1f0000) returned 1 [0190.482] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b648 [0190.482] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b648 | out: hHeap=0x1f0000) returned 1 [0190.482] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b9b8 [0190.482] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b9b8 | out: hHeap=0x1f0000) returned 1 [0190.482] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x20ffa8 [0190.482] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2100c8 [0190.482] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2100c8 | out: hHeap=0x1f0000) returned 1 [0190.482] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b9b8 [0190.482] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b918 [0190.482] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b9b8 | out: hHeap=0x1f0000) returned 1 [0190.482] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x211f88 [0190.482] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b918 | out: hHeap=0x1f0000) returned 1 [0190.482] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2100c8 [0190.483] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2ab) returned 0x211370 [0190.483] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211370 | out: hHeap=0x1f0000) returned 1 [0190.483] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2100c8 | out: hHeap=0x1f0000) returned 1 [0190.483] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211f88 | out: hHeap=0x1f0000) returned 1 [0190.483] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffa8 | out: hHeap=0x1f0000) returned 1 [0190.483] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b738 [0190.483] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b738 | out: hHeap=0x1f0000) returned 1 [0190.483] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b738 [0190.483] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b738 | out: hHeap=0x1f0000) returned 1 [0190.483] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x20ffa8 [0190.483] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2100c8 [0190.483] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2100c8 | out: hHeap=0x1f0000) returned 1 [0190.483] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b648 [0190.483] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b9b8 [0190.483] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b648 | out: hHeap=0x1f0000) returned 1 [0190.483] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x211c68 [0190.483] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b9b8 | out: hHeap=0x1f0000) returned 1 [0190.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2100c8 [0190.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2ab) returned 0x211370 [0190.484] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211370 | out: hHeap=0x1f0000) returned 1 [0190.484] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2100c8 | out: hHeap=0x1f0000) returned 1 [0190.484] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211c68 | out: hHeap=0x1f0000) returned 1 [0190.484] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffa8 | out: hHeap=0x1f0000) returned 1 [0190.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b648 [0190.484] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b648 | out: hHeap=0x1f0000) returned 1 [0190.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b738 [0190.484] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b738 | out: hHeap=0x1f0000) returned 1 [0190.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x20ffa8 [0190.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2100c8 [0190.484] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2100c8 | out: hHeap=0x1f0000) returned 1 [0190.485] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b648 [0190.485] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b670 [0190.485] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b648 | out: hHeap=0x1f0000) returned 1 [0190.485] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x212168 [0190.485] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b670 | out: hHeap=0x1f0000) returned 1 [0190.485] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2100c8 [0190.485] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2ab) returned 0x211370 [0190.485] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211370 | out: hHeap=0x1f0000) returned 1 [0190.485] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2100c8 | out: hHeap=0x1f0000) returned 1 [0190.485] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212168 | out: hHeap=0x1f0000) returned 1 [0190.485] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffa8 | out: hHeap=0x1f0000) returned 1 [0190.485] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b738 [0190.485] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b738 | out: hHeap=0x1f0000) returned 1 [0190.485] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b9b8 [0190.486] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b9b8 | out: hHeap=0x1f0000) returned 1 [0190.486] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x20ffa8 [0190.486] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2100c8 [0190.486] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2100c8 | out: hHeap=0x1f0000) returned 1 [0190.486] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b648 [0190.486] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b738 [0190.486] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b648 | out: hHeap=0x1f0000) returned 1 [0190.486] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x212ca8 [0190.486] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b738 | out: hHeap=0x1f0000) returned 1 [0190.486] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2100c8 [0190.486] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2ab) returned 0x211370 [0190.486] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211370 | out: hHeap=0x1f0000) returned 1 [0190.486] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2100c8 | out: hHeap=0x1f0000) returned 1 [0190.486] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ca8 | out: hHeap=0x1f0000) returned 1 [0190.487] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffa8 | out: hHeap=0x1f0000) returned 1 [0190.487] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212fc8 | out: hHeap=0x1f0000) returned 1 [0190.487] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2120c8 | out: hHeap=0x1f0000) returned 1 [0190.487] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212a28 | out: hHeap=0x1f0000) returned 1 [0190.487] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b648 [0190.487] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b648 | out: hHeap=0x1f0000) returned 1 [0190.487] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b648 [0190.487] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b670 [0190.487] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b9b8 [0190.487] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b9b8 | out: hHeap=0x1f0000) returned 1 [0190.487] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206718 [0190.487] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2068c8 [0190.487] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2068c8 | out: hHeap=0x1f0000) returned 1 [0190.487] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206688 [0190.488] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x212988 [0190.488] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b918 [0190.488] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b738 [0190.488] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b738 | out: hHeap=0x1f0000) returned 1 [0190.488] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b738 [0190.488] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b940 [0190.488] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b940 | out: hHeap=0x1f0000) returned 1 [0190.488] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x211c68 [0190.488] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x20ffa8 [0190.488] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffa8 | out: hHeap=0x1f0000) returned 1 [0190.488] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211c68 | out: hHeap=0x1f0000) returned 1 [0190.488] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212988 | out: hHeap=0x1f0000) returned 1 [0190.488] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b760 [0190.489] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b738 | out: hHeap=0x1f0000) returned 1 [0190.489] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b738 [0190.489] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b788 [0190.489] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4b) returned 0x1fe528 [0190.489] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fe528 | out: hHeap=0x1f0000) returned 1 [0190.489] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b788 | out: hHeap=0x1f0000) returned 1 [0190.489] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b738 | out: hHeap=0x1f0000) returned 1 [0190.489] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b738 [0190.489] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b738 | out: hHeap=0x1f0000) returned 1 [0190.489] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b918 | out: hHeap=0x1f0000) returned 1 [0190.489] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b760 | out: hHeap=0x1f0000) returned 1 [0190.489] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206688 | out: hHeap=0x1f0000) returned 1 [0190.489] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206718 | out: hHeap=0x1f0000) returned 1 [0190.489] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b670 | out: hHeap=0x1f0000) returned 1 [0190.489] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b738 [0190.489] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b670 [0190.489] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b670 | out: hHeap=0x1f0000) returned 1 [0190.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2067a8 [0190.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206838 [0190.490] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206838 | out: hHeap=0x1f0000) returned 1 [0190.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206718 [0190.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x212668 [0190.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b918 [0190.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b670 [0190.490] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b670 | out: hHeap=0x1f0000) returned 1 [0190.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b788 [0190.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b670 [0190.490] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b670 | out: hHeap=0x1f0000) returned 1 [0190.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x2127a8 [0190.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x20ffa8 [0190.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffa8 | out: hHeap=0x1f0000) returned 1 [0190.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2127a8 | out: hHeap=0x1f0000) returned 1 [0190.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212668 | out: hHeap=0x1f0000) returned 1 [0190.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b670 [0190.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b788 | out: hHeap=0x1f0000) returned 1 [0190.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b940 [0190.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b760 [0190.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4b) returned 0x1fe528 [0190.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fe528 | out: hHeap=0x1f0000) returned 1 [0190.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b760 | out: hHeap=0x1f0000) returned 1 [0190.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b940 | out: hHeap=0x1f0000) returned 1 [0190.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b760 [0190.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b940 [0190.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4b) returned 0x1fe528 [0190.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fe528 | out: hHeap=0x1f0000) returned 1 [0190.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b940 | out: hHeap=0x1f0000) returned 1 [0190.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b760 | out: hHeap=0x1f0000) returned 1 [0190.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b940 [0190.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b940 | out: hHeap=0x1f0000) returned 1 [0190.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b670 | out: hHeap=0x1f0000) returned 1 [0190.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b918 | out: hHeap=0x1f0000) returned 1 [0190.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206718 | out: hHeap=0x1f0000) returned 1 [0190.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2067a8 | out: hHeap=0x1f0000) returned 1 [0190.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b738 | out: hHeap=0x1f0000) returned 1 [0190.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b760 [0190.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b738 [0190.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b738 | out: hHeap=0x1f0000) returned 1 [0190.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2068c8 [0190.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2065f8 [0190.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2065f8 | out: hHeap=0x1f0000) returned 1 [0190.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206838 [0190.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x212028 [0190.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b670 [0190.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b738 [0190.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b738 | out: hHeap=0x1f0000) returned 1 [0190.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b918 [0190.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b940 [0190.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b940 | out: hHeap=0x1f0000) returned 1 [0190.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x212b68 [0190.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x20ffa8 [0190.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffa8 | out: hHeap=0x1f0000) returned 1 [0190.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b68 | out: hHeap=0x1f0000) returned 1 [0190.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212028 | out: hHeap=0x1f0000) returned 1 [0190.494] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b9b8 [0190.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b918 | out: hHeap=0x1f0000) returned 1 [0190.494] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b738 [0190.494] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b788 [0190.494] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4b) returned 0x1fe528 [0190.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fe528 | out: hHeap=0x1f0000) returned 1 [0190.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b788 | out: hHeap=0x1f0000) returned 1 [0190.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b738 | out: hHeap=0x1f0000) returned 1 [0190.494] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b738 [0190.494] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b788 [0190.494] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4b) returned 0x1fe528 [0190.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fe528 | out: hHeap=0x1f0000) returned 1 [0190.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b788 | out: hHeap=0x1f0000) returned 1 [0190.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b738 | out: hHeap=0x1f0000) returned 1 [0190.495] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b738 [0190.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b738 | out: hHeap=0x1f0000) returned 1 [0190.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b9b8 | out: hHeap=0x1f0000) returned 1 [0190.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b670 | out: hHeap=0x1f0000) returned 1 [0190.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206838 | out: hHeap=0x1f0000) returned 1 [0190.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2068c8 | out: hHeap=0x1f0000) returned 1 [0190.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b760 | out: hHeap=0x1f0000) returned 1 [0190.495] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b670 [0190.495] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b788 [0190.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b788 | out: hHeap=0x1f0000) returned 1 [0190.495] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206718 [0190.496] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206868 [0190.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206868 | out: hHeap=0x1f0000) returned 1 [0190.496] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206838 [0190.496] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x2122a8 [0190.496] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b738 [0190.496] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b760 [0190.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b760 | out: hHeap=0x1f0000) returned 1 [0190.496] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b760 [0190.496] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b9b8 [0190.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b9b8 | out: hHeap=0x1f0000) returned 1 [0190.497] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x211b28 [0190.497] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x20ffa8 [0190.497] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffa8 | out: hHeap=0x1f0000) returned 1 [0190.497] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b28 | out: hHeap=0x1f0000) returned 1 [0190.497] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2122a8 | out: hHeap=0x1f0000) returned 1 [0190.497] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b788 [0190.497] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b760 | out: hHeap=0x1f0000) returned 1 [0190.497] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b918 [0190.497] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b760 [0190.497] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4b) returned 0x1fe528 [0190.497] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fe528 | out: hHeap=0x1f0000) returned 1 [0190.497] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b760 | out: hHeap=0x1f0000) returned 1 [0190.497] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b918 | out: hHeap=0x1f0000) returned 1 [0190.497] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b760 [0190.497] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b918 [0190.497] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4b) returned 0x1fe528 [0190.498] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fe528 | out: hHeap=0x1f0000) returned 1 [0190.498] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b918 | out: hHeap=0x1f0000) returned 1 [0190.498] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b760 | out: hHeap=0x1f0000) returned 1 [0190.498] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b918 [0190.498] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b940 [0190.498] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4b) returned 0x1fe528 [0190.498] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fe528 | out: hHeap=0x1f0000) returned 1 [0190.498] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b940 | out: hHeap=0x1f0000) returned 1 [0190.498] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b918 | out: hHeap=0x1f0000) returned 1 [0190.498] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b760 [0190.498] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b760 | out: hHeap=0x1f0000) returned 1 [0190.498] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b738 | out: hHeap=0x1f0000) returned 1 [0190.498] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b788 | out: hHeap=0x1f0000) returned 1 [0190.499] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206838 | out: hHeap=0x1f0000) returned 1 [0190.499] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206718 | out: hHeap=0x1f0000) returned 1 [0190.499] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b670 | out: hHeap=0x1f0000) returned 1 [0190.499] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b670 [0190.502] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b9b8 [0190.502] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b9b8 | out: hHeap=0x1f0000) returned 1 [0190.502] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2065f8 [0190.502] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2068c8 [0190.502] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2068c8 | out: hHeap=0x1f0000) returned 1 [0190.502] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206838 [0190.502] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x2122a8 [0190.502] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b738 [0190.502] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b760 [0190.503] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b760 | out: hHeap=0x1f0000) returned 1 [0190.503] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b918 [0190.503] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b940 [0190.503] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b940 | out: hHeap=0x1f0000) returned 1 [0190.503] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x211da8 [0190.503] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x20ffa8 [0190.503] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffa8 | out: hHeap=0x1f0000) returned 1 [0190.503] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211da8 | out: hHeap=0x1f0000) returned 1 [0190.503] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2122a8 | out: hHeap=0x1f0000) returned 1 [0190.504] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b9b8 [0190.504] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b918 | out: hHeap=0x1f0000) returned 1 [0190.504] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b760 [0190.504] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b788 [0190.504] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4b) returned 0x1fe528 [0190.504] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fe528 | out: hHeap=0x1f0000) returned 1 [0190.504] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b788 | out: hHeap=0x1f0000) returned 1 [0190.504] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b760 | out: hHeap=0x1f0000) returned 1 [0190.504] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b760 [0190.504] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b788 [0190.504] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4b) returned 0x1fe528 [0190.504] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fe528 | out: hHeap=0x1f0000) returned 1 [0190.504] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b788 | out: hHeap=0x1f0000) returned 1 [0190.505] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b760 | out: hHeap=0x1f0000) returned 1 [0190.505] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b760 [0190.505] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b788 [0190.505] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4b) returned 0x1fe528 [0190.505] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fe528 | out: hHeap=0x1f0000) returned 1 [0190.505] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b788 | out: hHeap=0x1f0000) returned 1 [0190.505] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b760 | out: hHeap=0x1f0000) returned 1 [0190.505] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b760 [0190.505] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b760 | out: hHeap=0x1f0000) returned 1 [0190.505] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b738 | out: hHeap=0x1f0000) returned 1 [0190.505] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b9b8 | out: hHeap=0x1f0000) returned 1 [0190.505] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206838 | out: hHeap=0x1f0000) returned 1 [0190.506] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2065f8 | out: hHeap=0x1f0000) returned 1 [0190.506] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b670 | out: hHeap=0x1f0000) returned 1 [0190.506] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b670 [0190.506] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x2128e8 [0190.506] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b670 | out: hHeap=0x1f0000) returned 1 [0190.506] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x212528 [0190.506] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x93) returned 0x212ca8 [0190.506] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212528 | out: hHeap=0x1f0000) returned 1 [0190.507] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b738 | out: hHeap=0x1f0000) returned 1 [0190.507] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b738 | out: hHeap=0x1f0000) returned 1 [0190.507] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210248 | out: hHeap=0x1f0000) returned 1 [0190.507] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b940 | out: hHeap=0x1f0000) returned 1 [0190.507] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b738 | out: hHeap=0x1f0000) returned 1 [0190.507] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211490 | out: hHeap=0x1f0000) returned 1 [0190.528] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x117daf8 | out: lpSystemTimeAsFileTime=0x117daf8) [0190.528] SetLastError (dwErrCode=0x0) [0190.528] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x117daf8 | out: lpSystemTimeAsFileTime=0x117daf8) [0190.529] SetLastError (dwErrCode=0x0) [0190.559] SetLastError (dwErrCode=0x0) [0190.559] SetLastError (dwErrCode=0x0) [0190.559] SetLastError (dwErrCode=0x0) [0190.559] GetLastError () returned 0x0 [0190.559] SetLastError (dwErrCode=0x0) [0190.559] SetLastError (dwErrCode=0x0) [0190.559] GetLastError () returned 0x0 [0190.559] SetLastError (dwErrCode=0x0) [0190.560] SetLastError (dwErrCode=0x0) [0190.560] GetLastError () returned 0x0 [0190.560] SetLastError (dwErrCode=0x0) [0190.560] GetLastError () returned 0x0 [0190.560] SetLastError (dwErrCode=0x0) [0190.560] GetLastError () returned 0x0 [0190.560] SetLastError (dwErrCode=0x0) [0190.560] GetLastError () returned 0x0 [0190.561] SetLastError (dwErrCode=0x0) [0190.561] GetLastError () returned 0x0 [0190.561] SetLastError (dwErrCode=0x0) [0190.561] SetLastError (dwErrCode=0x0) [0190.561] GetLastError () returned 0x0 [0190.561] SetLastError (dwErrCode=0x0) [0190.564] SetLastError (dwErrCode=0x0) [0190.564] GetLastError () returned 0x0 [0190.564] SetLastError (dwErrCode=0x0) [0190.564] GetLastError () returned 0x0 [0190.565] SetLastError (dwErrCode=0x0) [0190.565] GetLastError () returned 0x0 [0190.565] SetLastError (dwErrCode=0x0) [0190.565] GetLastError () returned 0x0 [0190.565] SetLastError (dwErrCode=0x0) [0190.565] GetLastError () returned 0x0 [0190.565] SetLastError (dwErrCode=0x0) [0190.566] SetLastError (dwErrCode=0x0) [0190.566] GetLastError () returned 0x0 [0190.566] SetLastError (dwErrCode=0x0) [0190.566] AreFileApisANSI () returned 1 [0190.566] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xe58680, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 24 [0190.566] CreateFileW (lpFileName="C:\\ProgramData\\Pkey.txt" (normalized: "c:\\programdata\\pkey.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x117e02c, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0190.567] GetFileType (hFile=0x90) returned 0x1 [0190.568] GetLastError () returned 0x0 [0190.568] SetLastError (dwErrCode=0x0) [0190.568] GetLastError () returned 0x0 [0190.568] SetLastError (dwErrCode=0x0) [0190.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ff0 | out: hHeap=0x1f0000) returned 1 [0190.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2052b0 | out: hHeap=0x1f0000) returned 1 [0190.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x213bd0 [0190.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x213b88 [0190.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x2050f0 [0190.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x1fe528 [0190.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x20ba80 [0190.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x20cc98 [0190.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x206410 [0190.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b670 [0190.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2027f0 [0190.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x206530 [0190.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20ba58 [0190.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x202808 [0190.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x202808 | out: hHeap=0x1f0000) returned 1 [0190.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ba58 | out: hHeap=0x1f0000) returned 1 [0190.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206530 | out: hHeap=0x1f0000) returned 1 [0190.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2027f0 | out: hHeap=0x1f0000) returned 1 [0190.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b670 | out: hHeap=0x1f0000) returned 1 [0190.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206410 | out: hHeap=0x1f0000) returned 1 [0190.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20cc98 | out: hHeap=0x1f0000) returned 1 [0190.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ba80 | out: hHeap=0x1f0000) returned 1 [0190.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fe528 | out: hHeap=0x1f0000) returned 1 [0190.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205130 [0190.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x2050b0 [0190.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x2052b0 [0190.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205030 [0190.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x2050d0 [0190.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x1ff170 [0190.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x1fedf0 [0190.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204fd0 [0190.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x206410 [0190.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1) returned 0x206450 [0190.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1) returned 0x206530 [0190.571] GetLastError () returned 0x0 [0190.571] SetLastError (dwErrCode=0x0) [0190.571] GetLastError () returned 0x0 [0190.571] SetLastError (dwErrCode=0x0) [0190.571] GetLastError () returned 0x0 [0190.572] SetLastError (dwErrCode=0x0) [0190.572] GetLastError () returned 0x0 [0190.572] SetLastError (dwErrCode=0x0) [0190.572] GetLastError () returned 0x0 [0190.572] SetLastError (dwErrCode=0x0) [0190.572] GetLastError () returned 0x0 [0190.572] SetLastError (dwErrCode=0x0) [0190.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2052b0 | out: hHeap=0x1f0000) returned 1 [0190.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205030 | out: hHeap=0x1f0000) returned 1 [0190.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2050d0 | out: hHeap=0x1f0000) returned 1 [0190.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1ff170 | out: hHeap=0x1f0000) returned 1 [0190.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fedf0 | out: hHeap=0x1f0000) returned 1 [0190.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204fd0 | out: hHeap=0x1f0000) returned 1 [0190.572] GetLastError () returned 0x0 [0190.572] SetLastError (dwErrCode=0x0) [0190.573] GetLastError () returned 0x0 [0190.573] SetLastError (dwErrCode=0x0) [0190.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205130 | out: hHeap=0x1f0000) returned 1 [0190.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2050b0 | out: hHeap=0x1f0000) returned 1 [0190.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x20b940 [0190.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x20cc98 [0190.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x20b698 [0190.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x20cda0 [0190.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x206490 [0190.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x206540 [0190.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x206550 [0190.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206540 | out: hHeap=0x1f0000) returned 1 [0190.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x206540 [0190.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206550 | out: hHeap=0x1f0000) returned 1 [0190.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206490 | out: hHeap=0x1f0000) returned 1 [0190.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x206490 [0190.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2027f0 [0190.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206490 | out: hHeap=0x1f0000) returned 1 [0190.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x202808 [0190.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2027f0 | out: hHeap=0x1f0000) returned 1 [0190.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206540 | out: hHeap=0x1f0000) returned 1 [0190.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2027f0 [0190.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210120 [0190.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2027f0 | out: hHeap=0x1f0000) returned 1 [0190.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210018 [0190.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210120 | out: hHeap=0x1f0000) returned 1 [0190.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x202808 | out: hHeap=0x1f0000) returned 1 [0190.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210000 [0190.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x2051d0 [0190.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210000 | out: hHeap=0x1f0000) returned 1 [0190.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205130 [0190.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2051d0 | out: hHeap=0x1f0000) returned 1 [0190.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210018 | out: hHeap=0x1f0000) returned 1 [0190.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205250 [0190.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x20b8a0 [0190.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205250 | out: hHeap=0x1f0000) returned 1 [0190.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204fd0 [0190.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b8a0 | out: hHeap=0x1f0000) returned 1 [0190.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205130 | out: hHeap=0x1f0000) returned 1 [0190.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x205150 [0190.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x2065f8 [0190.576] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205150 | out: hHeap=0x1f0000) returned 1 [0190.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x20b968 [0190.576] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2065f8 | out: hHeap=0x1f0000) returned 1 [0190.576] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204fd0 | out: hHeap=0x1f0000) returned 1 [0190.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x20b620 [0190.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x211580 [0190.576] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211580 | out: hHeap=0x1f0000) returned 1 [0190.576] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b620 | out: hHeap=0x1f0000) returned 1 [0190.576] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b968 | out: hHeap=0x1f0000) returned 1 [0190.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x20b7d8 [0190.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x211580 [0190.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x20ba80 [0190.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x211688 [0190.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x20b6c0 [0190.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x211790 [0190.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x20b8a0 [0190.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x200) returned 0x215138 [0190.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x20b800 [0190.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x200) returned 0x215340 [0190.578] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211790 | out: hHeap=0x1f0000) returned 1 [0190.578] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b6c0 | out: hHeap=0x1f0000) returned 1 [0190.578] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215138 | out: hHeap=0x1f0000) returned 1 [0190.578] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b8a0 | out: hHeap=0x1f0000) returned 1 [0190.578] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x20b760 [0190.578] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x211790 [0190.578] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211790 | out: hHeap=0x1f0000) returned 1 [0190.578] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b760 | out: hHeap=0x1f0000) returned 1 [0190.578] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x20b6c0 [0190.578] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x200) returned 0x215138 [0190.578] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211688 | out: hHeap=0x1f0000) returned 1 [0190.579] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ba80 | out: hHeap=0x1f0000) returned 1 [0190.579] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215340 | out: hHeap=0x1f0000) returned 1 [0190.579] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b800 | out: hHeap=0x1f0000) returned 1 [0190.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x20b990 [0190.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x200) returned 0x211688 [0190.579] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211580 | out: hHeap=0x1f0000) returned 1 [0190.579] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b7d8 | out: hHeap=0x1f0000) returned 1 [0190.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x216150 [0190.580] GetLastError () returned 0x0 [0190.581] SetLastError (dwErrCode=0x0) [0190.581] GetLastError () returned 0x0 [0190.581] SetLastError (dwErrCode=0x0) [0190.581] GetLastError () returned 0x0 [0190.581] SetLastError (dwErrCode=0x0) [0190.582] GetLastError () returned 0x0 [0190.582] SetLastError (dwErrCode=0x0) [0190.582] GetLastError () returned 0x0 [0190.582] SetLastError (dwErrCode=0x0) [0190.583] GetLastError () returned 0x0 [0190.583] SetLastError (dwErrCode=0x0) [0190.583] GetLastError () returned 0x0 [0190.583] SetLastError (dwErrCode=0x0) [0190.583] GetLastError () returned 0x0 [0190.584] SetLastError (dwErrCode=0x0) [0190.584] GetLastError () returned 0x0 [0190.584] SetLastError (dwErrCode=0x0) [0190.584] GetLastError () returned 0x0 [0190.584] SetLastError (dwErrCode=0x0) [0190.585] GetLastError () returned 0x0 [0190.585] SetLastError (dwErrCode=0x0) [0190.585] GetLastError () returned 0x0 [0190.585] SetLastError (dwErrCode=0x0) [0190.585] GetLastError () returned 0x0 [0190.585] SetLastError (dwErrCode=0x0) [0190.586] GetLastError () returned 0x0 [0190.586] SetLastError (dwErrCode=0x0) [0190.586] GetLastError () returned 0x0 [0190.586] SetLastError (dwErrCode=0x0) [0190.586] GetLastError () returned 0x0 [0190.586] SetLastError (dwErrCode=0x0) [0190.587] GetLastError () returned 0x0 [0190.587] SetLastError (dwErrCode=0x0) [0190.587] GetLastError () returned 0x0 [0190.587] SetLastError (dwErrCode=0x0) [0190.587] GetLastError () returned 0x0 [0190.588] SetLastError (dwErrCode=0x0) [0190.588] GetLastError () returned 0x0 [0190.588] SetLastError (dwErrCode=0x0) [0190.588] GetLastError () returned 0x0 [0190.588] SetLastError (dwErrCode=0x0) [0190.588] GetLastError () returned 0x0 [0190.589] SetLastError (dwErrCode=0x0) [0190.589] GetLastError () returned 0x0 [0190.589] SetLastError (dwErrCode=0x0) [0190.590] GetLastError () returned 0x0 [0190.590] SetLastError (dwErrCode=0x0) [0190.590] GetLastError () returned 0x0 [0190.590] SetLastError (dwErrCode=0x0) [0190.590] GetLastError () returned 0x0 [0190.591] SetLastError (dwErrCode=0x0) [0190.591] GetLastError () returned 0x0 [0190.591] SetLastError (dwErrCode=0x0) [0190.591] GetLastError () returned 0x0 [0190.591] SetLastError (dwErrCode=0x0) [0190.591] GetLastError () returned 0x0 [0190.592] SetLastError (dwErrCode=0x0) [0190.592] GetLastError () returned 0x0 [0190.592] SetLastError (dwErrCode=0x0) [0190.592] GetLastError () returned 0x0 [0190.592] SetLastError (dwErrCode=0x0) [0190.592] GetLastError () returned 0x0 [0190.593] SetLastError (dwErrCode=0x0) [0190.593] GetLastError () returned 0x0 [0190.593] SetLastError (dwErrCode=0x0) [0190.593] GetLastError () returned 0x0 [0190.593] SetLastError (dwErrCode=0x0) [0190.593] GetLastError () returned 0x0 [0190.593] SetLastError (dwErrCode=0x0) [0190.593] GetLastError () returned 0x0 [0190.594] SetLastError (dwErrCode=0x0) [0190.594] GetLastError () returned 0x0 [0190.594] SetLastError (dwErrCode=0x0) [0190.594] GetLastError () returned 0x0 [0190.594] SetLastError (dwErrCode=0x0) [0190.594] GetLastError () returned 0x0 [0190.594] SetLastError (dwErrCode=0x0) [0190.594] GetLastError () returned 0x0 [0190.594] SetLastError (dwErrCode=0x0) [0190.595] GetLastError () returned 0x0 [0190.595] SetLastError (dwErrCode=0x0) [0190.595] GetLastError () returned 0x0 [0190.595] SetLastError (dwErrCode=0x0) [0190.595] GetLastError () returned 0x0 [0190.595] SetLastError (dwErrCode=0x0) [0190.595] GetLastError () returned 0x0 [0190.595] SetLastError (dwErrCode=0x0) [0190.595] GetLastError () returned 0x0 [0190.596] SetLastError (dwErrCode=0x0) [0190.596] GetLastError () returned 0x0 [0190.596] SetLastError (dwErrCode=0x0) [0190.596] GetLastError () returned 0x0 [0190.596] SetLastError (dwErrCode=0x0) [0190.596] GetLastError () returned 0x0 [0190.596] SetLastError (dwErrCode=0x0) [0190.596] GetLastError () returned 0x0 [0190.596] SetLastError (dwErrCode=0x0) [0190.597] GetLastError () returned 0x0 [0190.597] SetLastError (dwErrCode=0x0) [0190.597] GetLastError () returned 0x0 [0190.597] SetLastError (dwErrCode=0x0) [0190.597] GetLastError () returned 0x0 [0190.597] SetLastError (dwErrCode=0x0) [0190.597] GetLastError () returned 0x0 [0190.597] SetLastError (dwErrCode=0x0) [0190.597] GetLastError () returned 0x0 [0190.598] SetLastError (dwErrCode=0x0) [0190.598] GetLastError () returned 0x0 [0190.598] SetLastError (dwErrCode=0x0) [0190.601] GetLastError () returned 0x0 [0190.601] SetLastError (dwErrCode=0x0) [0190.601] GetLastError () returned 0x0 [0190.602] SetLastError (dwErrCode=0x0) [0190.602] GetLastError () returned 0x0 [0190.602] SetLastError (dwErrCode=0x0) [0190.602] GetLastError () returned 0x0 [0190.602] SetLastError (dwErrCode=0x0) [0190.602] GetLastError () returned 0x0 [0190.602] SetLastError (dwErrCode=0x0) [0190.603] GetLastError () returned 0x0 [0190.603] SetLastError (dwErrCode=0x0) [0190.603] GetLastError () returned 0x0 [0190.603] SetLastError (dwErrCode=0x0) [0190.603] GetLastError () returned 0x0 [0190.603] SetLastError (dwErrCode=0x0) [0190.603] GetLastError () returned 0x0 [0190.603] SetLastError (dwErrCode=0x0) [0190.603] GetLastError () returned 0x0 [0190.604] SetLastError (dwErrCode=0x0) [0190.604] GetLastError () returned 0x0 [0190.604] SetLastError (dwErrCode=0x0) [0190.604] GetLastError () returned 0x0 [0190.604] SetLastError (dwErrCode=0x0) [0190.604] GetLastError () returned 0x0 [0190.604] SetLastError (dwErrCode=0x0) [0190.604] GetLastError () returned 0x0 [0190.605] SetLastError (dwErrCode=0x0) [0190.605] GetLastError () returned 0x0 [0190.605] SetLastError (dwErrCode=0x0) [0190.605] GetLastError () returned 0x0 [0190.605] SetLastError (dwErrCode=0x0) [0190.605] GetLastError () returned 0x0 [0190.605] SetLastError (dwErrCode=0x0) [0190.605] GetLastError () returned 0x0 [0190.605] SetLastError (dwErrCode=0x0) [0190.606] GetLastError () returned 0x0 [0190.606] SetLastError (dwErrCode=0x0) [0190.606] GetLastError () returned 0x0 [0190.606] SetLastError (dwErrCode=0x0) [0190.606] GetLastError () returned 0x0 [0190.606] SetLastError (dwErrCode=0x0) [0190.606] GetLastError () returned 0x0 [0190.606] SetLastError (dwErrCode=0x0) [0190.607] GetLastError () returned 0x0 [0190.607] SetLastError (dwErrCode=0x0) [0190.607] GetLastError () returned 0x0 [0190.607] SetLastError (dwErrCode=0x0) [0190.607] GetLastError () returned 0x0 [0190.608] SetLastError (dwErrCode=0x0) [0190.608] GetLastError () returned 0x0 [0190.608] SetLastError (dwErrCode=0x0) [0190.608] GetLastError () returned 0x0 [0190.608] SetLastError (dwErrCode=0x0) [0190.608] GetLastError () returned 0x0 [0190.608] SetLastError (dwErrCode=0x0) [0190.609] GetLastError () returned 0x0 [0190.609] SetLastError (dwErrCode=0x0) [0190.609] GetLastError () returned 0x0 [0190.609] SetLastError (dwErrCode=0x0) [0190.610] GetLastError () returned 0x0 [0190.610] SetLastError (dwErrCode=0x0) [0190.610] GetLastError () returned 0x0 [0190.610] SetLastError (dwErrCode=0x0) [0190.610] GetLastError () returned 0x0 [0190.610] SetLastError (dwErrCode=0x0) [0190.610] GetLastError () returned 0x0 [0190.610] SetLastError (dwErrCode=0x0) [0190.611] GetLastError () returned 0x0 [0190.611] SetLastError (dwErrCode=0x0) [0190.611] GetLastError () returned 0x0 [0190.611] SetLastError (dwErrCode=0x0) [0190.611] GetLastError () returned 0x0 [0190.611] SetLastError (dwErrCode=0x0) [0190.611] GetLastError () returned 0x0 [0190.611] SetLastError (dwErrCode=0x0) [0190.612] GetLastError () returned 0x0 [0190.612] SetLastError (dwErrCode=0x0) [0190.612] GetLastError () returned 0x0 [0190.612] SetLastError (dwErrCode=0x0) [0190.612] GetLastError () returned 0x0 [0190.613] SetLastError (dwErrCode=0x0) [0190.613] GetLastError () returned 0x0 [0190.613] SetLastError (dwErrCode=0x0) [0190.613] GetLastError () returned 0x0 [0190.613] SetLastError (dwErrCode=0x0) [0190.614] GetLastError () returned 0x0 [0190.614] SetLastError (dwErrCode=0x0) [0190.614] GetLastError () returned 0x0 [0190.614] SetLastError (dwErrCode=0x0) [0190.614] GetLastError () returned 0x0 [0190.614] SetLastError (dwErrCode=0x0) [0190.614] GetLastError () returned 0x0 [0190.615] SetLastError (dwErrCode=0x0) [0190.615] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20cc98 | out: hHeap=0x1f0000) returned 1 [0190.615] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b940 | out: hHeap=0x1f0000) returned 1 [0190.615] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215138 | out: hHeap=0x1f0000) returned 1 [0190.615] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b6c0 | out: hHeap=0x1f0000) returned 1 [0190.615] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20cda0 | out: hHeap=0x1f0000) returned 1 [0190.615] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b698 | out: hHeap=0x1f0000) returned 1 [0190.615] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211688 | out: hHeap=0x1f0000) returned 1 [0190.615] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b990 | out: hHeap=0x1f0000) returned 1 [0190.615] GetLastError () returned 0x0 [0190.616] SetLastError (dwErrCode=0x0) [0190.616] GetLastError () returned 0x0 [0190.616] SetLastError (dwErrCode=0x0) [0190.616] WriteFile (in: hFile=0x90, lpBuffer=0x216150*, nNumberOfBytesToWrite=0x18e, lpNumberOfBytesWritten=0x117dfe0, lpOverlapped=0x0 | out: lpBuffer=0x216150*, lpNumberOfBytesWritten=0x117dfe0*=0x18e, lpOverlapped=0x0) returned 1 [0190.618] GetLastError () returned 0x0 [0190.618] SetLastError (dwErrCode=0x0) [0190.618] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b5a8 [0190.618] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x670) returned 0x215138 [0190.618] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b878 [0190.618] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b760 [0190.619] inet_addr (cp="www.sfml-dev.org") returned 0xffffffff [0190.619] getaddrinfo (in: pNodeName="www.sfml-dev.org", pServiceName=0x0, pHints=0x117de20*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x117de48 | out: ppResult=0x117de48*=0x20b9e0*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname=0x0, ai_addr=0x20ff70*(sa_family=2, sin_port=0x0, sin_addr="148.251.247.174"), ai_next=0x0)) returned 0 [0191.729] FreeAddrInfoW (pAddrInfo=0x20b9e0*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname=0x0, ai_addr=0x20ff70*(sa_family=2, sin_port=0x0, sin_addr="148.251.247.174"), ai_next=0x0)) [0191.729] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b878 | out: hHeap=0x1f0000) returned 1 [0191.729] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b9b8 [0191.729] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2140e0 [0191.729] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b698 [0191.729] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b9b8 | out: hHeap=0x1f0000) returned 1 [0191.730] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x213ea0 [0191.730] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b968 [0191.730] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b5f8 [0191.730] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x214050 [0191.730] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20ba30 [0191.730] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b5f8 | out: hHeap=0x1f0000) returned 1 [0191.730] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b990 [0191.730] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x214098 [0191.730] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b8c8 [0191.730] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b990 | out: hHeap=0x1f0000) returned 1 [0191.730] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x213d38 [0191.730] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b710 [0191.731] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c450 [0191.731] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c500 [0191.731] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c400 [0191.731] GetLastError () returned 0x0 [0191.732] SetLastError (dwErrCode=0x0) [0191.732] GetLastError () returned 0x0 [0191.732] SetLastError (dwErrCode=0x0) [0191.732] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0xb8) returned 0x21ac28 [0191.732] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x6a6) returned 0x21d570 [0191.732] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d570 | out: hHeap=0x1f0000) returned 1 [0191.733] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206560 | out: hHeap=0x1f0000) returned 1 [0191.733] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b3f0 | out: hHeap=0x1f0000) returned 1 [0191.733] GetLastError () returned 0x0 [0191.733] SetLastError (dwErrCode=0x0) [0191.733] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x6) returned 0x21c470 [0191.736] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2) returned 0x21c4b0 [0191.736] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x4) returned 0x21c410 [0191.736] GetLastError () returned 0x0 [0191.737] SetLastError (dwErrCode=0x0) [0191.737] GetLastError () returned 0x0 [0191.737] SetLastError (dwErrCode=0x0) [0191.737] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0xb8) returned 0x20b3f0 [0191.737] GetLastError () returned 0x0 [0191.737] SetLastError (dwErrCode=0x0) [0191.738] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x6a6) returned 0x21d570 [0191.738] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d570 | out: hHeap=0x1f0000) returned 1 [0191.738] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c470 | out: hHeap=0x1f0000) returned 1 [0191.738] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ac28 | out: hHeap=0x1f0000) returned 1 [0191.738] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c410 | out: hHeap=0x1f0000) returned 1 [0191.738] GetLastError () returned 0x0 [0191.738] SetLastError (dwErrCode=0x0) [0191.738] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x6) returned 0x21c3c0 [0191.739] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2) returned 0x21c3e0 [0191.739] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x4) returned 0x21c4e0 [0191.739] GetLastError () returned 0x0 [0191.739] SetLastError (dwErrCode=0x0) [0191.739] GetLastError () returned 0x0 [0191.739] SetLastError (dwErrCode=0x0) [0191.739] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0xb8) returned 0x21ac28 [0191.739] GetLastError () returned 0x0 [0191.739] SetLastError (dwErrCode=0x0) [0191.740] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x6a6) returned 0x21d570 [0191.740] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d570 | out: hHeap=0x1f0000) returned 1 [0191.740] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c3c0 | out: hHeap=0x1f0000) returned 1 [0191.740] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b3f0 | out: hHeap=0x1f0000) returned 1 [0191.740] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c4e0 | out: hHeap=0x1f0000) returned 1 [0191.740] GetLastError () returned 0x0 [0191.740] SetLastError (dwErrCode=0x0) [0191.740] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x6) returned 0x21c390 [0191.740] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c3e0 | out: hHeap=0x1f0000) returned 1 [0191.740] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c4b0 | out: hHeap=0x1f0000) returned 1 [0191.740] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c3e0 [0191.741] GetLastError () returned 0x0 [0191.741] SetLastError (dwErrCode=0x0) [0191.741] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204fd0 [0191.741] GetLastError () returned 0x0 [0191.741] SetLastError (dwErrCode=0x0) [0191.741] GetLastError () returned 0x0 [0191.742] SetLastError (dwErrCode=0x0) [0191.742] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0xb8) returned 0x20b3f0 [0191.742] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x6a6) returned 0x21d570 [0191.742] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d570 | out: hHeap=0x1f0000) returned 1 [0191.742] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c390 | out: hHeap=0x1f0000) returned 1 [0191.742] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ac28 | out: hHeap=0x1f0000) returned 1 [0191.743] GetLastError () returned 0x0 [0191.743] SetLastError (dwErrCode=0x0) [0191.743] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x6) returned 0x21c520 [0191.743] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2) returned 0x21c360 [0191.743] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x4) returned 0x21c530 [0191.743] GetLastError () returned 0x0 [0191.743] SetLastError (dwErrCode=0x0) [0191.744] GetLastError () returned 0x0 [0191.744] SetLastError (dwErrCode=0x0) [0191.744] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0xb8) returned 0x21ac28 [0191.744] GetLastError () returned 0x0 [0191.744] SetLastError (dwErrCode=0x0) [0191.745] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x6a6) returned 0x21d570 [0191.745] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d570 | out: hHeap=0x1f0000) returned 1 [0191.745] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c520 | out: hHeap=0x1f0000) returned 1 [0191.745] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b3f0 | out: hHeap=0x1f0000) returned 1 [0191.745] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c530 | out: hHeap=0x1f0000) returned 1 [0191.745] GetLastError () returned 0x0 [0191.745] SetLastError (dwErrCode=0x0) [0191.746] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x6) returned 0x21c4f0 [0191.746] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2) returned 0x21c3f0 [0191.746] GetLastError () returned 0x0 [0191.746] SetLastError (dwErrCode=0x0) [0191.747] GetLastError () returned 0x0 [0191.747] SetLastError (dwErrCode=0x0) [0191.747] GetLastError () returned 0x0 [0191.747] SetLastError (dwErrCode=0x0) [0191.747] GetLastError () returned 0x0 [0191.747] SetLastError (dwErrCode=0x0) [0191.747] GetLastError () returned 0x0 [0191.747] SetLastError (dwErrCode=0x0) [0191.748] GetLastError () returned 0x0 [0191.748] SetLastError (dwErrCode=0x0) [0191.748] GetLastError () returned 0x0 [0191.748] SetLastError (dwErrCode=0x0) [0191.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x1) returned 0x21c4d0 [0191.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x6) returned 0x21c3c0 [0191.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x5) returned 0x21c510 [0191.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x4) returned 0x21c470 [0191.748] GetLastError () returned 0x0 [0191.748] SetLastError (dwErrCode=0x0) [0191.748] GetLastError () returned 0x0 [0191.749] SetLastError (dwErrCode=0x0) [0191.749] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0xb8) returned 0x20b3f0 [0191.749] GetLastError () returned 0x0 [0191.749] SetLastError (dwErrCode=0x0) [0191.749] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x6a6) returned 0x21d570 [0191.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d570 | out: hHeap=0x1f0000) returned 1 [0191.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c4f0 | out: hHeap=0x1f0000) returned 1 [0191.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ac28 | out: hHeap=0x1f0000) returned 1 [0191.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c470 | out: hHeap=0x1f0000) returned 1 [0191.749] GetLastError () returned 0x0 [0191.749] SetLastError (dwErrCode=0x0) [0191.749] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x6) returned 0x21c410 [0191.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c3f0 | out: hHeap=0x1f0000) returned 1 [0191.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c360 | out: hHeap=0x1f0000) returned 1 [0191.750] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c390 [0191.750] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b800 [0191.750] GetLastError () returned 0x0 [0191.750] SetLastError (dwErrCode=0x0) [0191.750] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x213ee8 [0191.750] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b800 | out: hHeap=0x1f0000) returned 1 [0191.750] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c500 | out: hHeap=0x1f0000) returned 1 [0191.750] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c450 | out: hHeap=0x1f0000) returned 1 [0191.750] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x213a68 [0191.750] socket (af=2, type=1, protocol=0) returned 0x1a0 [0191.765] ioctlsocket (in: s=0x1a0, cmd=-2147195266, argp=0x117d890 | out: argp=0x117d890) returned 0 [0191.765] setsockopt (s=0x1a0, level=6, optname=1, optval="\x01", optlen=4) returned 0 [0191.765] htonl (hostlong=0xaef7fb94) returned 0x94fbf7ae [0191.765] htonl (hostlong=0x94fbf7ae) returned 0xaef7fb94 [0191.765] htons (hostshort=0x50) returned 0x5000 [0191.765] connect (s=0x1a0, name=0x117d9d0*(sa_family=2, sin_port=0x50, sin_addr="148.251.247.174"), namelen=16) returned 0 [0191.795] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c550 [0191.795] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c420 [0191.795] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20ba80 [0191.796] GetLastError () returned 0x0 [0191.796] SetLastError (dwErrCode=0x0) [0191.796] GetLastError () returned 0x0 [0191.796] SetLastError (dwErrCode=0x0) [0191.796] GetLastError () returned 0x0 [0191.796] SetLastError (dwErrCode=0x0) [0191.796] GetLastError () returned 0x0 [0191.796] SetLastError (dwErrCode=0x0) [0191.796] GetLastError () returned 0x0 [0191.796] SetLastError (dwErrCode=0x0) [0191.797] GetLastError () returned 0x0 [0191.797] SetLastError (dwErrCode=0x0) [0191.797] GetLastError () returned 0x0 [0191.797] SetLastError (dwErrCode=0x0) [0191.797] GetLastError () returned 0x0 [0191.798] SetLastError (dwErrCode=0x0) [0191.798] GetLastError () returned 0x0 [0191.798] SetLastError (dwErrCode=0x0) [0191.798] GetLastError () returned 0x0 [0191.799] SetLastError (dwErrCode=0x0) [0191.799] GetLastError () returned 0x0 [0191.799] SetLastError (dwErrCode=0x0) [0191.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x213fc0 [0191.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ba80 | out: hHeap=0x1f0000) returned 1 [0191.799] GetLastError () returned 0x0 [0191.799] SetLastError (dwErrCode=0x0) [0191.799] GetLastError () returned 0x0 [0191.799] SetLastError (dwErrCode=0x0) [0191.800] GetLastError () returned 0x0 [0191.800] SetLastError (dwErrCode=0x0) [0191.800] GetLastError () returned 0x0 [0191.800] SetLastError (dwErrCode=0x0) [0191.800] GetLastError () returned 0x0 [0191.800] SetLastError (dwErrCode=0x0) [0191.800] GetLastError () returned 0x0 [0191.800] SetLastError (dwErrCode=0x0) [0191.800] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x21c738 [0191.800] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213fc0 | out: hHeap=0x1f0000) returned 1 [0191.800] GetLastError () returned 0x0 [0191.801] SetLastError (dwErrCode=0x0) [0191.801] GetLastError () returned 0x0 [0191.801] SetLastError (dwErrCode=0x0) [0191.801] GetLastError () returned 0x0 [0191.801] SetLastError (dwErrCode=0x0) [0191.801] GetLastError () returned 0x0 [0191.801] SetLastError (dwErrCode=0x0) [0191.801] GetLastError () returned 0x0 [0191.801] SetLastError (dwErrCode=0x0) [0191.801] GetLastError () returned 0x0 [0191.801] SetLastError (dwErrCode=0x0) [0191.801] GetLastError () returned 0x0 [0191.801] SetLastError (dwErrCode=0x0) [0191.801] GetLastError () returned 0x0 [0191.801] SetLastError (dwErrCode=0x0) [0191.801] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x21c7c0 [0191.801] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c738 | out: hHeap=0x1f0000) returned 1 [0191.801] GetLastError () returned 0x0 [0191.802] SetLastError (dwErrCode=0x0) [0191.802] GetLastError () returned 0x0 [0191.802] SetLastError (dwErrCode=0x0) [0191.802] GetLastError () returned 0x0 [0191.802] SetLastError (dwErrCode=0x0) [0191.802] GetLastError () returned 0x0 [0191.802] SetLastError (dwErrCode=0x0) [0191.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x21c8c8 [0191.802] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c7c0 | out: hHeap=0x1f0000) returned 1 [0191.802] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c420 | out: hHeap=0x1f0000) returned 1 [0191.803] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c550 | out: hHeap=0x1f0000) returned 1 [0191.803] send (s=0x1a0, buf=0x21c8c8*, len=134, flags=0) returned 134 [0191.805] recv (in: s=0x1a0, buf=0x117dab4, len=1024, flags=0 | out: buf=0x117dab4*) returned 217 [0191.845] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x21c960 [0191.845] recv (in: s=0x1a0, buf=0x117dab4, len=1024, flags=0 | out: buf=0x117dab4) returned 0 [0191.845] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c3a0 [0191.846] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c440 [0191.846] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd9) returned 0x21c738 [0191.846] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c550 [0191.846] GetLastError () returned 0x0 [0191.847] SetLastError (dwErrCode=0x0) [0191.847] GetLastError () returned 0x0 [0191.847] SetLastError (dwErrCode=0x0) [0191.847] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0xb8) returned 0x21d570 [0191.847] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x6a6) returned 0x21d630 [0191.847] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d630 | out: hHeap=0x1f0000) returned 1 [0191.847] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c410 | out: hHeap=0x1f0000) returned 1 [0191.847] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b3f0 | out: hHeap=0x1f0000) returned 1 [0191.847] GetLastError () returned 0x0 [0191.847] SetLastError (dwErrCode=0x0) [0191.847] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x6) returned 0x21c3d0 [0191.847] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2) returned 0x21c490 [0191.847] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x4) returned 0x21c450 [0191.847] GetLastError () returned 0x0 [0191.847] SetLastError (dwErrCode=0x0) [0191.847] GetLastError () returned 0x0 [0191.847] SetLastError (dwErrCode=0x0) [0191.848] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0xb8) returned 0x20b3f0 [0191.848] GetLastError () returned 0x0 [0191.848] SetLastError (dwErrCode=0x0) [0191.848] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x6a6) returned 0x21d630 [0191.848] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d630 | out: hHeap=0x1f0000) returned 1 [0191.848] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c3d0 | out: hHeap=0x1f0000) returned 1 [0191.848] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d570 | out: hHeap=0x1f0000) returned 1 [0191.848] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c450 | out: hHeap=0x1f0000) returned 1 [0191.848] GetLastError () returned 0x0 [0191.848] SetLastError (dwErrCode=0x0) [0191.848] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x6) returned 0x21c410 [0191.848] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2) returned 0x21c3d0 [0191.848] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x4) returned 0x21c4f0 [0191.848] GetLastError () returned 0x0 [0191.848] SetLastError (dwErrCode=0x0) [0191.848] GetLastError () returned 0x0 [0191.848] SetLastError (dwErrCode=0x0) [0191.848] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0xb8) returned 0x21d570 [0191.848] GetLastError () returned 0x0 [0191.848] SetLastError (dwErrCode=0x0) [0191.849] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x6a6) returned 0x21d630 [0191.849] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d630 | out: hHeap=0x1f0000) returned 1 [0191.849] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c410 | out: hHeap=0x1f0000) returned 1 [0191.849] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b3f0 | out: hHeap=0x1f0000) returned 1 [0191.849] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c4f0 | out: hHeap=0x1f0000) returned 1 [0191.849] GetLastError () returned 0x0 [0191.849] SetLastError (dwErrCode=0x0) [0191.849] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x6) returned 0x21c360 [0191.849] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c3d0 | out: hHeap=0x1f0000) returned 1 [0191.849] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c490 | out: hHeap=0x1f0000) returned 1 [0191.849] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c480 [0191.849] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x213d80 [0191.849] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20ba80 [0191.849] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cd08 [0191.849] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ba80 | out: hHeap=0x1f0000) returned 1 [0191.849] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b800 [0191.849] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x213dc8 [0191.849] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b648 [0191.849] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b800 | out: hHeap=0x1f0000) returned 1 [0191.850] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b990 [0191.850] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x213f30 [0191.850] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b828 [0191.850] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b990 | out: hHeap=0x1f0000) returned 1 [0191.850] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x213fc0 [0191.850] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x213c18 [0191.850] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b9b8 [0191.850] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x214008 [0191.850] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b9b8 | out: hHeap=0x1f0000) returned 1 [0191.850] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cd08 | out: hHeap=0x1f0000) returned 1 [0191.850] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b8a0 [0191.850] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20ba58 [0191.850] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ba58 | out: hHeap=0x1f0000) returned 1 [0191.850] RtlSizeHeap (HeapHandle=0x1f0000, Flags=0x0, MemoryPointer=0x1f6860) returned 0x80 [0191.850] RtlReAllocateHeap (Heap=0x1f0000, Flags=0x0, Ptr=0x1f6860, Size=0x100) returned 0x21d630 [0191.851] RtlWakeAllConditionVariable (in: ConditionVariable=0xe8d954 | out: ConditionVariable=0xe8d954) [0191.851] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b8a0 | out: hHeap=0x1f0000) returned 1 [0191.851] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c738 | out: hHeap=0x1f0000) returned 1 [0191.851] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c440 | out: hHeap=0x1f0000) returned 1 [0191.851] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c3a0 | out: hHeap=0x1f0000) returned 1 [0191.851] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c960 | out: hHeap=0x1f0000) returned 1 [0191.851] closesocket (s=0x1a0) returned 0 [0191.852] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c8c8 | out: hHeap=0x1f0000) returned 1 [0191.852] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b968 | out: hHeap=0x1f0000) returned 1 [0191.852] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b8c8 | out: hHeap=0x1f0000) returned 1 [0191.852] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214098 | out: hHeap=0x1f0000) returned 1 [0191.852] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b710 | out: hHeap=0x1f0000) returned 1 [0191.852] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213d38 | out: hHeap=0x1f0000) returned 1 [0191.852] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ba30 | out: hHeap=0x1f0000) returned 1 [0191.852] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214050 | out: hHeap=0x1f0000) returned 1 [0191.852] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213ee8 | out: hHeap=0x1f0000) returned 1 [0191.852] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213ea0 | out: hHeap=0x1f0000) returned 1 [0191.852] inet_addr (cp="95.222.165.118") returned 0x76a5de5f [0191.853] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213c18 | out: hHeap=0x1f0000) returned 1 [0191.853] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214008 | out: hHeap=0x1f0000) returned 1 [0191.853] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213d80 | out: hHeap=0x1f0000) returned 1 [0191.853] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b648 | out: hHeap=0x1f0000) returned 1 [0191.853] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213dc8 | out: hHeap=0x1f0000) returned 1 [0191.853] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b828 | out: hHeap=0x1f0000) returned 1 [0191.853] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213f30 | out: hHeap=0x1f0000) returned 1 [0191.853] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213fc0 | out: hHeap=0x1f0000) returned 1 [0191.853] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213a68 | out: hHeap=0x1f0000) returned 1 [0191.853] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b698 | out: hHeap=0x1f0000) returned 1 [0191.853] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2140e0 | out: hHeap=0x1f0000) returned 1 [0191.853] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b760 | out: hHeap=0x1f0000) returned 1 [0191.853] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x213c60 [0191.853] inet_addr (cp="80.82.69.52") returned 0x34455250 [0191.853] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x219bc8 [0191.853] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x215860 [0191.853] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219bc8 | out: hHeap=0x1f0000) returned 1 [0191.853] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x213ee8 [0191.853] inet_ntoa (in=0x76a5de5f) returned="95.222.165.118" [0191.854] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b8f0 [0191.854] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x690) returned 0x21d738 [0191.854] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b8f0 | out: hHeap=0x1f0000) returned 1 [0191.854] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x9d7) returned 0x21ddd0 [0191.854] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d738 | out: hHeap=0x1f0000) returned 1 [0191.854] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x6c0) returned 0x21e7b0 [0191.854] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ddd0 | out: hHeap=0x1f0000) returned 1 [0191.854] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x214050 [0191.854] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x213d38 [0191.854] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x219bc8 [0191.854] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x6c0) returned 0x21d738 [0191.854] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b5f8 [0191.854] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x214008 [0191.854] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b620 [0191.854] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b5f8 | out: hHeap=0x1f0000) returned 1 [0191.854] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x213c18 [0191.855] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c4a0 [0191.855] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c410 [0191.855] GetLastError () returned 0x0 [0191.855] SetLastError (dwErrCode=0x0) [0191.855] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b760 [0191.855] GetLastError () returned 0x0 [0191.855] SetLastError (dwErrCode=0x0) [0191.855] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x213d80 [0191.855] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b760 | out: hHeap=0x1f0000) returned 1 [0191.855] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c410 | out: hHeap=0x1f0000) returned 1 [0191.855] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c4a0 | out: hHeap=0x1f0000) returned 1 [0191.855] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0191.855] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x213dc8 [0191.856] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf38 [0191.856] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0191.856] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x213ea0 [0191.856] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x214098 [0191.856] socket (af=2, type=1, protocol=0) returned 0x1a0 [0191.856] ioctlsocket (in: s=0x1a0, cmd=-2147195266, argp=0x117d9bc | out: argp=0x117d9bc) returned 0 [0191.856] setsockopt (s=0x1a0, level=6, optname=1, optval="\x01", optlen=4) returned 0 [0191.856] htonl (hostlong=0x34455250) returned 0x50524534 [0191.856] htonl (hostlong=0x50524534) returned 0x34455250 [0191.856] htons (hostshort=0x1f90) returned 0x901f [0191.856] connect (s=0x1a0, name=0x117dafc*(sa_family=2, sin_port=0x1f90, sin_addr="80.82.69.52"), namelen=16) returned 0 [0191.886] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c4b0 [0191.886] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c470 [0191.886] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b800 [0191.886] GetLastError () returned 0x0 [0191.887] SetLastError (dwErrCode=0x0) [0191.887] GetLastError () returned 0x0 [0191.887] SetLastError (dwErrCode=0x0) [0191.887] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x213a20 [0191.887] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b800 | out: hHeap=0x1f0000) returned 1 [0191.887] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x1f6860 [0191.887] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213a20 | out: hHeap=0x1f0000) returned 1 [0191.887] GetLastError () returned 0x0 [0191.887] SetLastError (dwErrCode=0x0) [0191.887] GetLastError () returned 0x0 [0191.887] SetLastError (dwErrCode=0x0) [0191.887] GetLastError () returned 0x0 [0191.887] SetLastError (dwErrCode=0x0) [0191.887] GetLastError () returned 0x0 [0191.887] SetLastError (dwErrCode=0x0) [0191.888] GetLastError () returned 0x0 [0191.888] SetLastError (dwErrCode=0x0) [0191.888] GetLastError () returned 0x0 [0191.888] SetLastError (dwErrCode=0x0) [0191.888] GetLastError () returned 0x0 [0191.888] SetLastError (dwErrCode=0x0) [0191.888] GetLastError () returned 0x0 [0191.888] SetLastError (dwErrCode=0x0) [0191.888] GetLastError () returned 0x0 [0191.888] SetLastError (dwErrCode=0x0) [0191.888] GetLastError () returned 0x0 [0191.889] SetLastError (dwErrCode=0x0) [0191.889] GetLastError () returned 0x0 [0191.889] SetLastError (dwErrCode=0x0) [0191.889] GetLastError () returned 0x0 [0191.889] SetLastError (dwErrCode=0x0) [0191.889] GetLastError () returned 0x0 [0191.889] SetLastError (dwErrCode=0x0) [0191.889] GetLastError () returned 0x0 [0191.889] SetLastError (dwErrCode=0x0) [0191.889] GetLastError () returned 0x0 [0191.889] SetLastError (dwErrCode=0x0) [0191.889] GetLastError () returned 0x0 [0191.889] SetLastError (dwErrCode=0x0) [0191.889] GetLastError () returned 0x0 [0191.890] SetLastError (dwErrCode=0x0) [0191.890] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x21ae50 [0191.890] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1f6860 | out: hHeap=0x1f0000) returned 1 [0191.890] GetLastError () returned 0x0 [0191.890] SetLastError (dwErrCode=0x0) [0191.890] GetLastError () returned 0x0 [0191.890] SetLastError (dwErrCode=0x0) [0191.890] GetLastError () returned 0x0 [0191.890] SetLastError (dwErrCode=0x0) [0191.890] GetLastError () returned 0x0 [0191.890] SetLastError (dwErrCode=0x0) [0191.890] GetLastError () returned 0x0 [0191.890] SetLastError (dwErrCode=0x0) [0191.890] GetLastError () returned 0x0 [0191.890] SetLastError (dwErrCode=0x0) [0191.890] GetLastError () returned 0x0 [0191.890] SetLastError (dwErrCode=0x0) [0191.890] GetLastError () returned 0x0 [0191.890] SetLastError (dwErrCode=0x0) [0191.890] GetLastError () returned 0x0 [0191.891] SetLastError (dwErrCode=0x0) [0191.891] GetLastError () returned 0x0 [0191.891] SetLastError (dwErrCode=0x0) [0191.891] GetLastError () returned 0x0 [0191.891] SetLastError (dwErrCode=0x0) [0191.891] GetLastError () returned 0x0 [0191.891] SetLastError (dwErrCode=0x0) [0191.891] GetLastError () returned 0x0 [0191.891] SetLastError (dwErrCode=0x0) [0191.891] GetLastError () returned 0x0 [0191.892] SetLastError (dwErrCode=0x0) [0191.892] GetLastError () returned 0x0 [0191.892] SetLastError (dwErrCode=0x0) [0191.892] GetLastError () returned 0x0 [0191.892] SetLastError (dwErrCode=0x0) [0191.892] GetLastError () returned 0x0 [0191.892] SetLastError (dwErrCode=0x0) [0191.892] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x200) returned 0x21c738 [0191.892] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ae50 | out: hHeap=0x1f0000) returned 1 [0191.892] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x21de00 [0191.892] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c738 | out: hHeap=0x1f0000) returned 1 [0191.892] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x800) returned 0x21ee78 [0191.894] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21de00 | out: hHeap=0x1f0000) returned 1 [0191.894] GetLastError () returned 0x0 [0191.894] SetLastError (dwErrCode=0x0) [0191.894] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x7b0) returned 0x21f680 [0191.894] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ee78 | out: hHeap=0x1f0000) returned 1 [0191.894] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c470 | out: hHeap=0x1f0000) returned 1 [0191.894] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c4b0 | out: hHeap=0x1f0000) returned 1 [0191.894] send (s=0x1a0, buf=0x21f680*, len=1962, flags=0) returned 1962 [0191.895] recv (in: s=0x1a0, buf=0x117dbe0, len=1024, flags=0 | out: buf=0x117dbe0*) returned 123 [0191.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x1f6860 [0191.939] recv (in: s=0x1a0, buf=0x117dbe0, len=1024, flags=0 | out: buf=0x117dbe0) returned 0 [0191.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c520 [0191.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c4c0 [0191.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x7b) returned 0x21ae50 [0191.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b8c8 [0191.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x213f30 [0191.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d1d8 [0191.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b8c8 | out: hHeap=0x1f0000) returned 1 [0191.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b9e0 [0191.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x213fc0 [0191.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b6c0 [0191.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b9e0 | out: hHeap=0x1f0000) returned 1 [0191.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2140e0 [0191.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x213a20 [0191.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d1d8 | out: hHeap=0x1f0000) returned 1 [0191.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b968 [0191.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b990 [0191.943] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b990 | out: hHeap=0x1f0000) returned 1 [0191.943] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b968 | out: hHeap=0x1f0000) returned 1 [0191.943] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ae50 | out: hHeap=0x1f0000) returned 1 [0191.943] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c4c0 | out: hHeap=0x1f0000) returned 1 [0191.943] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c520 | out: hHeap=0x1f0000) returned 1 [0191.943] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1f6860 | out: hHeap=0x1f0000) returned 1 [0191.943] closesocket (s=0x1a0) returned 0 [0191.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f680 | out: hHeap=0x1f0000) returned 1 [0191.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d738 | out: hHeap=0x1f0000) returned 1 [0191.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219bc8 | out: hHeap=0x1f0000) returned 1 [0191.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b620 | out: hHeap=0x1f0000) returned 1 [0191.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214008 | out: hHeap=0x1f0000) returned 1 [0191.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213c18 | out: hHeap=0x1f0000) returned 1 [0191.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213d38 | out: hHeap=0x1f0000) returned 1 [0191.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf38 | out: hHeap=0x1f0000) returned 1 [0191.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213dc8 | out: hHeap=0x1f0000) returned 1 [0191.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213d80 | out: hHeap=0x1f0000) returned 1 [0191.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213ea0 | out: hHeap=0x1f0000) returned 1 [0191.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214050 | out: hHeap=0x1f0000) returned 1 [0191.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213f30 | out: hHeap=0x1f0000) returned 1 [0191.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b6c0 | out: hHeap=0x1f0000) returned 1 [0191.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213fc0 | out: hHeap=0x1f0000) returned 1 [0191.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213a20 | out: hHeap=0x1f0000) returned 1 [0191.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2140e0 | out: hHeap=0x1f0000) returned 1 [0191.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214098 | out: hHeap=0x1f0000) returned 1 [0191.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21e7b0 | out: hHeap=0x1f0000) returned 1 [0191.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215860 | out: hHeap=0x1f0000) returned 1 [0191.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213ee8 | out: hHeap=0x1f0000) returned 1 [0191.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213c60 | out: hHeap=0x1f0000) returned 1 [0191.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215138 | out: hHeap=0x1f0000) returned 1 [0191.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b5a8 | out: hHeap=0x1f0000) returned 1 [0191.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206410 | out: hHeap=0x1f0000) returned 1 [0191.954] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206530 | out: hHeap=0x1f0000) returned 1 [0191.954] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206450 | out: hHeap=0x1f0000) returned 1 [0191.954] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2050f0 | out: hHeap=0x1f0000) returned 1 [0191.954] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213b88 | out: hHeap=0x1f0000) returned 1 [0191.954] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213bd0 | out: hHeap=0x1f0000) returned 1 [0191.954] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216150 | out: hHeap=0x1f0000) returned 1 [0191.954] CloseHandle (hObject=0x90) returned 1 [0191.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206400 | out: hHeap=0x1f0000) returned 1 [0191.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2063f0 | out: hHeap=0x1f0000) returned 1 [0191.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20c8d0 | out: hHeap=0x1f0000) returned 1 [0191.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205290 | out: hHeap=0x1f0000) returned 1 [0191.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206510 | out: hHeap=0x1f0000) returned 1 [0191.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206520 | out: hHeap=0x1f0000) returned 1 [0191.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206460 | out: hHeap=0x1f0000) returned 1 [0191.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205070 | out: hHeap=0x1f0000) returned 1 [0191.957] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213e58 | out: hHeap=0x1f0000) returned 1 [0191.957] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213e10 | out: hHeap=0x1f0000) returned 1 [0191.957] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2026e8 | out: hHeap=0x1f0000) returned 1 [0191.957] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b738 | out: hHeap=0x1f0000) returned 1 [0191.957] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0191.957] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2064e0 | out: hHeap=0x1f0000) returned 1 [0191.957] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206500 | out: hHeap=0x1f0000) returned 1 [0191.957] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206430 | out: hHeap=0x1f0000) returned 1 [0191.957] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204fb0 | out: hHeap=0x1f0000) returned 1 [0191.957] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213af8 | out: hHeap=0x1f0000) returned 1 [0191.957] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213990 | out: hHeap=0x1f0000) returned 1 [0191.957] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2026d0 | out: hHeap=0x1f0000) returned 1 [0191.957] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215948 | out: hHeap=0x1f0000) returned 1 [0191.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212708 | out: hHeap=0x1f0000) returned 1 [0191.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211da8 | out: hHeap=0x1f0000) returned 1 [0191.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212488 | out: hHeap=0x1f0000) returned 1 [0191.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2128e8 | out: hHeap=0x1f0000) returned 1 [0191.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20e228 | out: hHeap=0x1f0000) returned 1 [0191.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0191.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20c7c8 | out: hHeap=0x1f0000) returned 1 [0191.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b7b0 | out: hHeap=0x1f0000) returned 1 [0191.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ba08 | out: hHeap=0x1f0000) returned 1 [0191.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0191.959] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20cf00 | out: hHeap=0x1f0000) returned 1 [0191.959] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20e118 | out: hHeap=0x1f0000) returned 1 [0191.959] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1feed0 | out: hHeap=0x1f0000) returned 1 [0191.959] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206470 | out: hHeap=0x1f0000) returned 1 [0191.959] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206440 | out: hHeap=0x1f0000) returned 1 [0191.959] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x20c7c8 [0191.959] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d130 [0191.959] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x21c738 [0191.959] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20c7c8 | out: hHeap=0x1f0000) returned 1 [0191.959] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211370 | out: hHeap=0x1f0000) returned 1 [0191.959] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fb070 | out: hHeap=0x1f0000) returned 1 [0191.959] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x215860 [0191.960] SystemFunction036 (in: RandomBuffer=0x117e770, RandomBufferLength=0x4 | out: RandomBuffer=0x117e770) returned 1 [0191.960] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215860 | out: hHeap=0x1f0000) returned 1 [0191.960] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x213ee8 [0191.960] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b8a0 [0191.960] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x490) returned 0x215138 [0191.960] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x6d6) returned 0x20cf00 [0191.960] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215138 | out: hHeap=0x1f0000) returned 1 [0191.961] GetDriveTypeA (lpRootPathName="C:\\") returned 0x3 [0191.961] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x1f6860 [0191.961] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x213dc8 [0191.961] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b878 [0191.961] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x21c8d0 [0191.961] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x28) returned 0x206928 [0191.962] RtlInitializeConditionVariable (in: ConditionVariable=0x20692c | out: ConditionVariable=0x20692c) [0191.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x30) returned 0x21d1a0 [0191.962] RtlInitializeConditionVariable (in: ConditionVariable=0x21d1a8 | out: ConditionVariable=0x21d1a8) [0191.962] GetCurrentThreadId () returned 0xeb0 [0191.962] GetCurrentThreadId () returned 0xeb0 [0191.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x14) returned 0x2051b0 [0191.963] GetModuleHandleExW (in: dwFlags=0x4, lpModuleName=0xdb99e0, phModule=0x2051bc | out: phModule=0x2051bc*=0xda0000) returned 1 [0191.963] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0xe335ce, lpParameter=0x2051b0, dwCreationFlags=0x0, lpThreadId=0x117fac0 | out: lpThreadId=0x117fac0*=0x11c0) returned 0x90 [0191.964] SleepConditionVariableSRW (in: ConditionVariable=0x20692c, SRWLock=0x21d1a8, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x20692c, SRWLock=0x21d1a8) returned 1 [0192.057] GetCurrentThreadId () returned 0xeb0 [0192.057] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d1a0 | out: hHeap=0x1f0000) returned 1 [0192.057] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206928 | out: hHeap=0x1f0000) returned 1 [0192.057] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c3d0 [0192.057] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x20b3f0 [0192.057] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x213b88 [0192.057] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b968 [0192.057] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x20c7c8 [0192.057] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x28) returned 0x2066b8 [0192.058] RtlInitializeConditionVariable (in: ConditionVariable=0x2066bc | out: ConditionVariable=0x2066bc) [0192.058] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x30) returned 0x21d1a0 [0192.058] RtlInitializeConditionVariable (in: ConditionVariable=0x21d1a8 | out: ConditionVariable=0x21d1a8) [0192.058] GetCurrentThreadId () returned 0xeb0 [0192.058] GetCurrentThreadId () returned 0xeb0 [0192.058] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x14) returned 0x2050d0 [0192.058] GetModuleHandleExW (in: dwFlags=0x4, lpModuleName=0xdb99e0, phModule=0x2050dc | out: phModule=0x2050dc*=0xda0000) returned 1 [0192.058] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0xe335ce, lpParameter=0x2050d0, dwCreationFlags=0x0, lpThreadId=0x117fac0 | out: lpThreadId=0x117fac0*=0x1170) returned 0x1a0 [0192.060] SleepConditionVariableSRW (in: ConditionVariable=0x2066bc, SRWLock=0x21d1a8, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x2066bc, SRWLock=0x21d1a8) returned 1 [0192.183] GetCurrentThreadId () returned 0xeb0 [0192.183] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d1a0 | out: hHeap=0x1f0000) returned 1 [0192.183] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2066b8 | out: hHeap=0x1f0000) returned 1 [0192.183] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff70 [0192.183] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c3d0 | out: hHeap=0x1f0000) returned 1 [0192.183] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x21aed8 [0192.183] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x213e10 [0192.183] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b788 [0192.183] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x216ea0 [0192.183] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x28) returned 0x2067d8 [0192.183] RtlInitializeConditionVariable (in: ConditionVariable=0x2067dc | out: ConditionVariable=0x2067dc) [0192.183] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x30) returned 0x21d1a0 [0192.183] RtlInitializeConditionVariable (in: ConditionVariable=0x21d1a8 | out: ConditionVariable=0x21d1a8) [0192.183] GetCurrentThreadId () returned 0xeb0 [0192.184] GetCurrentThreadId () returned 0xeb0 [0192.184] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x14) returned 0x205010 [0192.184] GetModuleHandleExW (in: dwFlags=0x4, lpModuleName=0xdb99e0, phModule=0x20501c | out: phModule=0x20501c*=0xda0000) returned 1 [0192.184] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0xe335ce, lpParameter=0x205010, dwCreationFlags=0x0, lpThreadId=0x117fac0 | out: lpThreadId=0x117fac0*=0x110c) returned 0x1a8 [0192.185] SleepConditionVariableSRW (in: ConditionVariable=0x2067dc, SRWLock=0x21d1a8, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x2067dc, SRWLock=0x21d1a8) returned 1 [0192.261] GetCurrentThreadId () returned 0xeb0 [0192.261] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d1a0 | out: hHeap=0x1f0000) returned 1 [0192.261] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2067d8 | out: hHeap=0x1f0000) returned 1 [0192.261] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204ff0 [0192.261] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff70 | out: hHeap=0x1f0000) returned 1 [0192.261] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x223998 [0192.261] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2140e0 [0192.261] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20ba30 [0192.262] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x223a20 [0192.262] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x28) returned 0x2065f8 [0192.262] RtlInitializeConditionVariable (in: ConditionVariable=0x2065fc | out: ConditionVariable=0x2065fc) [0192.262] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x30) returned 0x21d050 [0192.262] RtlInitializeConditionVariable (in: ConditionVariable=0x21d058 | out: ConditionVariable=0x21d058) [0192.262] GetCurrentThreadId () returned 0xeb0 [0192.262] GetCurrentThreadId () returned 0xeb0 [0192.262] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x14) returned 0x205030 [0192.262] GetModuleHandleExW (in: dwFlags=0x4, lpModuleName=0xdb99e0, phModule=0x20503c | out: phModule=0x20503c*=0xda0000) returned 1 [0192.262] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0xe335ce, lpParameter=0x205030, dwCreationFlags=0x0, lpThreadId=0x117fac0 | out: lpThreadId=0x117fac0*=0xe64) returned 0x1c4 [0192.263] SleepConditionVariableSRW (in: ConditionVariable=0x2065fc, SRWLock=0x21d058, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x2065fc, SRWLock=0x21d058) returned 1 [0192.463] GetCurrentThreadId () returned 0xeb0 [0192.463] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0192.463] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2065f8 | out: hHeap=0x1f0000) returned 1 [0192.463] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b8f0 [0192.463] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ff0 | out: hHeap=0x1f0000) returned 1 [0192.464] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x224de0 [0192.464] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x213c18 [0192.464] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20bb48 [0192.464] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2269d0 [0192.464] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x28) returned 0x206688 [0192.464] RtlInitializeConditionVariable (in: ConditionVariable=0x20668c | out: ConditionVariable=0x20668c) [0192.464] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x30) returned 0x21d280 [0192.464] RtlInitializeConditionVariable (in: ConditionVariable=0x21d288 | out: ConditionVariable=0x21d288) [0192.464] GetCurrentThreadId () returned 0xeb0 [0192.465] GetCurrentThreadId () returned 0xeb0 [0192.465] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x14) returned 0x2051d0 [0192.465] GetModuleHandleExW (in: dwFlags=0x4, lpModuleName=0xdb99e0, phModule=0x2051dc | out: phModule=0x2051dc*=0xda0000) returned 1 [0192.465] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0xe335ce, lpParameter=0x2051d0, dwCreationFlags=0x0, lpThreadId=0x117fac0 | out: lpThreadId=0x117fac0*=0x13cc) returned 0x1b4 [0192.466] SleepConditionVariableSRW (in: ConditionVariable=0x20668c, SRWLock=0x21d288, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x20668c, SRWLock=0x21d288) returned 1 [0192.618] GetCurrentThreadId () returned 0xeb0 [0192.618] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d280 | out: hHeap=0x1f0000) returned 1 [0192.619] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206688 | out: hHeap=0x1f0000) returned 1 [0192.619] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227f20 [0192.619] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b8f0 | out: hHeap=0x1f0000) returned 1 [0192.619] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a358 [0192.619] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2290a0 [0192.619] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b9d0 [0192.619] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d1d0 [0192.619] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x28) returned 0x2065f8 [0192.619] RtlInitializeConditionVariable (in: ConditionVariable=0x2065fc | out: ConditionVariable=0x2065fc) [0192.619] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x30) returned 0x2280e0 [0192.619] RtlInitializeConditionVariable (in: ConditionVariable=0x2280e8 | out: ConditionVariable=0x2280e8) [0192.619] GetCurrentThreadId () returned 0xeb0 [0192.619] GetCurrentThreadId () returned 0xeb0 [0192.620] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x14) returned 0x205070 [0192.620] GetModuleHandleExW (in: dwFlags=0x4, lpModuleName=0xdb99e0, phModule=0x20507c | out: phModule=0x20507c*=0xda0000) returned 1 [0192.620] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0xe335ce, lpParameter=0x205070, dwCreationFlags=0x0, lpThreadId=0x117fac0 | out: lpThreadId=0x117fac0*=0x13d0) returned 0x1d0 [0192.622] SleepConditionVariableSRW (in: ConditionVariable=0x2065fc, SRWLock=0x2280e8, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x2065fc, SRWLock=0x2280e8) returned 1 [0192.764] GetCurrentThreadId () returned 0xeb0 [0192.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2280e0 | out: hHeap=0x1f0000) returned 1 [0192.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2065f8 | out: hHeap=0x1f0000) returned 1 [0192.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2298b8 [0192.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2341e8 [0192.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b9a8 [0192.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x226b90 [0192.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x28) returned 0x2067d8 [0192.765] RtlInitializeConditionVariable (in: ConditionVariable=0x2067dc | out: ConditionVariable=0x2067dc) [0192.765] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x30) returned 0x2280e0 [0192.765] RtlInitializeConditionVariable (in: ConditionVariable=0x2280e8 | out: ConditionVariable=0x2280e8) [0192.765] GetCurrentThreadId () returned 0xeb0 [0192.765] GetCurrentThreadId () returned 0xeb0 [0192.765] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x14) returned 0x2050f0 [0192.765] GetModuleHandleExW (in: dwFlags=0x4, lpModuleName=0xdb99e0, phModule=0x2050fc | out: phModule=0x2050fc*=0xda0000) returned 1 [0192.765] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0xe335ce, lpParameter=0x2050f0, dwCreationFlags=0x0, lpThreadId=0x117fac0 | out: lpThreadId=0x117fac0*=0x1314) returned 0x1b8 [0192.766] SleepConditionVariableSRW (in: ConditionVariable=0x2067dc, SRWLock=0x2280e8, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x2067dc, SRWLock=0x2280e8) returned 1 [0193.327] GetCurrentThreadId () returned 0xeb0 [0193.328] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2280e0 | out: hHeap=0x1f0000) returned 1 [0193.328] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2067d8 | out: hHeap=0x1f0000) returned 1 [0193.328] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x48) returned 0x226198 [0193.328] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227f20 | out: hHeap=0x1f0000) returned 1 [0193.328] GetDriveTypeA (lpRootPathName="") returned 0x1 [0193.328] GetDriveTypeA (lpRootPathName="") returned 0x1 [0193.328] GetDriveTypeA (lpRootPathName="") returned 0x1 [0193.328] GetDriveTypeA (lpRootPathName="") returned 0x1 [0193.328] GetDriveTypeA (lpRootPathName="") returned 0x1 [0193.329] GetDriveTypeA (lpRootPathName="") returned 0x1 [0193.329] GetDriveTypeA (lpRootPathName="") returned 0x1 [0193.329] GetDriveTypeA (lpRootPathName="") returned 0x1 [0193.329] GetDriveTypeA (lpRootPathName="") returned 0x1 [0193.329] GetDriveTypeA (lpRootPathName="") returned 0x1 [0193.329] GetDriveTypeA (lpRootPathName="") returned 0x1 [0193.329] GetDriveTypeA (lpRootPathName="") returned 0x1 [0193.329] GetDriveTypeA (lpRootPathName="") returned 0x1 [0193.329] GetDriveTypeA (lpRootPathName="") returned 0x1 [0193.329] GetDriveTypeA (lpRootPathName="") returned 0x1 [0193.330] GetDriveTypeA (lpRootPathName="") returned 0x1 [0193.330] GetDriveTypeA (lpRootPathName="") returned 0x1 [0193.330] GetDriveTypeA (lpRootPathName="") returned 0x1 [0193.330] GetDriveTypeA (lpRootPathName="") returned 0x1 [0193.330] GetCurrentThreadId () returned 0xeb0 [0193.330] WaitForSingleObjectEx (hHandle=0x90, dwMilliseconds=0xffffffff, bAlertable=0) Thread: id = 7 os_tid = 0x1114 Thread: id = 145 os_tid = 0xfa0 Thread: id = 146 os_tid = 0x11c0 [0191.978] GetLastError () returned 0x57 [0191.990] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x364) returned 0x215138 [0191.990] SetLastError (dwErrCode=0x57) [0191.990] LoadLibraryExW (lpLibFileName="api-ms-win-appmodel-runtime-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x77380000 [0192.055] GetProcAddress (hModule=0x77380000, lpProcName="GetCurrentPackageId") returned 0x77383510 [0192.055] GetCurrentPackageId () returned 0x3d54 [0192.055] GetCurrentThreadId () returned 0x11c0 [0192.055] GetCurrentThreadId () returned 0x11c0 [0192.056] RtlWakeConditionVariable (in: ConditionVariable=0x20692c | out: ConditionVariable=0x20692c) [0192.060] FindFirstFileW (in: lpFileName="C:\\\\*", lpFindFileData=0x173f54c | out: lpFindFileData=0x173f54c*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x10, dwReserved1=0x1, cFileName="$GetCurrent", cAlternateFileName="$GETCU~1")) returned 0x214490 [0192.061] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b760 [0192.061] lstrcmpW (lpString1="$GetCurrent", lpString2=".") returned -1 [0192.066] lstrcmpW (lpString1="$GetCurrent", lpString2="..") returned -1 [0192.066] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x2052d0 [0192.066] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b5d0 [0192.066] FindNextFileW (in: hFindFile=0x214490, lpFindFileData=0x173f54c | out: lpFindFileData=0x173f54c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x10, dwReserved1=0x1, cFileName="$Recycle.Bin", cAlternateFileName="")) returned 1 [0192.066] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b8f0 [0192.066] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cfe0 [0192.066] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b760 | out: hHeap=0x1f0000) returned 1 [0192.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b8f0 | out: hHeap=0x1f0000) returned 1 [0192.067] lstrcmpW (lpString1="$Recycle.Bin", lpString2=".") returned -1 [0192.067] lstrcmpW (lpString1="$Recycle.Bin", lpString2="..") returned -1 [0192.067] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf70 [0192.067] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cc28 [0192.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2052d0 | out: hHeap=0x1f0000) returned 1 [0192.067] FindNextFileW (in: hFindFile=0x214490, lpFindFileData=0x173f54c | out: lpFindFileData=0x173f54c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x85776261, ftCreationTime.dwHighDateTime=0x1d3276f, ftLastAccessTime.dwLowDateTime=0x85776261, ftLastAccessTime.dwHighDateTime=0x1d3276f, ftLastWriteTime.dwLowDateTime=0x85776261, ftLastWriteTime.dwHighDateTime=0x1d3276f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x10, dwReserved1=0x1, cFileName="$WINRE_BACKUP_PARTITION.MARKER", cAlternateFileName="$WINRE~1.MAR")) returned 1 [0192.067] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x214050 [0192.067] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x215860 [0192.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cfe0 | out: hHeap=0x1f0000) returned 1 [0192.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214050 | out: hHeap=0x1f0000) returned 1 [0192.067] CreateFileW (lpFileName="C:\\\\$WINRE_BACKUP_PARTITION.MARKER" (normalized: "c:\\$winre_backup_partition.marker"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173f314, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1a8 [0192.075] GetFileType (hFile=0x1a8) returned 0x1 [0192.075] CloseHandle (hObject=0x1a8) returned 1 [0192.075] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x20b478 [0192.075] GetFileAttributesExW (in: lpFileName="C:\\\\$WINRE_BACKUP_PARTITION.MARKER" (normalized: "c:\\$winre_backup_partition.marker"), fInfoLevelId=0x0, lpFileInformation=0x173f3a4 | out: lpFileInformation=0x173f3a4*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x85776261, ftCreationTime.dwHighDateTime=0x1d3276f, ftLastAccessTime.dwLowDateTime=0x85776261, ftLastAccessTime.dwHighDateTime=0x1d3276f, ftLastWriteTime.dwLowDateTime=0x85776261, ftLastWriteTime.dwHighDateTime=0x1d3276f, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0192.076] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b478 | out: hHeap=0x1f0000) returned 1 [0192.076] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x20b478 [0192.076] GetFileAttributesExW (in: lpFileName="C:\\\\$WINRE_BACKUP_PARTITION.MARKER" (normalized: "c:\\$winre_backup_partition.marker"), fInfoLevelId=0x0, lpFileInformation=0x173f3b4 | out: lpFileInformation=0x173f3b4*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x85776261, ftCreationTime.dwHighDateTime=0x1d3276f, ftLastAccessTime.dwLowDateTime=0x85776261, ftLastAccessTime.dwHighDateTime=0x1d3276f, ftLastWriteTime.dwLowDateTime=0x85776261, ftLastWriteTime.dwHighDateTime=0x1d3276f, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0192.076] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b478 | out: hHeap=0x1f0000) returned 1 [0192.076] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x20b478 [0192.076] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b478 | out: hHeap=0x1f0000) returned 1 [0192.076] FindNextFileW (in: hFindFile=0x214490, lpFindFileData=0x173f54c | out: lpFindFileData=0x173f54c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf39a4e7e, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf74cd515, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x10, dwReserved1=0x1, cFileName="588bce7c90097ed212", cAlternateFileName="588BCE~1")) returned 1 [0192.076] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d0f8 [0192.076] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215860 | out: hHeap=0x1f0000) returned 1 [0192.076] lstrcmpW (lpString1="588bce7c90097ed212", lpString2=".") returned 1 [0192.076] lstrcmpW (lpString1="588bce7c90097ed212", lpString2="..") returned 1 [0192.076] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x48) returned 0x215860 [0192.076] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d088 [0192.076] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf70 | out: hHeap=0x1f0000) returned 1 [0192.076] FindNextFileW (in: hFindFile=0x214490, lpFindFileData=0x173f54c | out: lpFindFileData=0x173f54c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6fa258, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6fa258, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x10, dwReserved1=0x1, cFileName="Boot", cAlternateFileName="")) returned 1 [0192.076] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b6c0 [0192.076] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d0f8 | out: hHeap=0x1f0000) returned 1 [0192.076] lstrcmpW (lpString1="Boot", lpString2=".") returned 1 [0192.076] lstrcmpW (lpString1="Boot", lpString2="..") returned 1 [0192.076] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x20b478 [0192.077] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b9b8 [0192.077] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215860 | out: hHeap=0x1f0000) returned 1 [0192.077] FindNextFileW (in: hFindFile=0x214490, lpFindFileData=0x173f54c | out: lpFindFileData=0x173f54c*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xe47a48a8, ftCreationTime.dwHighDateTime=0x1d112ea, ftLastAccessTime.dwLowDateTime=0xef6fa258, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfb90936b, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0x607da, dwReserved0=0x10, dwReserved1=0x1, cFileName="bootmgr", cAlternateFileName="")) returned 1 [0192.077] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b9e0 [0192.077] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b6c0 | out: hHeap=0x1f0000) returned 1 [0192.077] CreateFileW (lpFileName="C:\\\\bootmgr" (normalized: "c:\\bootmgr"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173f314, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0192.079] GetLastError () returned 0x5 [0192.079] GetLastError () returned 0x5 [0192.079] SetLastError (dwErrCode=0x5) [0192.080] GetLastError () returned 0x5 [0192.080] SetLastError (dwErrCode=0x5) [0192.080] GetLastError () returned 0x5 [0192.080] SetLastError (dwErrCode=0x5) [0192.080] FindNextFileW (in: hFindFile=0x214490, lpFindFileData=0x173f54c | out: lpFindFileData=0x173f54c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xe5533ee0, ftCreationTime.dwHighDateTime=0x1d112ea, ftLastAccessTime.dwLowDateTime=0xef9d0a0c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x1, dwReserved0=0x10, dwReserved1=0x1, cFileName="BOOTNXT", cAlternateFileName="")) returned 1 [0192.080] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b6c0 [0192.080] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b9e0 | out: hHeap=0x1f0000) returned 1 [0192.081] CreateFileW (lpFileName="C:\\\\BOOTNXT" (normalized: "c:\\bootnxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173f314, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1a8 [0192.085] GetFileType (hFile=0x1a8) returned 0x1 [0192.086] CloseHandle (hObject=0x1a8) returned 1 [0192.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b7d8 [0192.086] GetFileAttributesExW (in: lpFileName="C:\\\\BOOTNXT" (normalized: "c:\\bootnxt"), fInfoLevelId=0x0, lpFileInformation=0x173f3a4 | out: lpFileInformation=0x173f3a4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xe5533ee0, ftCreationTime.dwHighDateTime=0x1d112ea, ftLastAccessTime.dwLowDateTime=0xef9d0a0c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x1)) returned 1 [0192.088] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b7d8 | out: hHeap=0x1f0000) returned 1 [0192.088] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b990 [0192.088] GetFileAttributesExW (in: lpFileName="C:\\\\BOOTNXT" (normalized: "c:\\bootnxt"), fInfoLevelId=0x0, lpFileInformation=0x173f3b4 | out: lpFileInformation=0x173f3b4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xe5533ee0, ftCreationTime.dwHighDateTime=0x1d112ea, ftLastAccessTime.dwLowDateTime=0xef9d0a0c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x1)) returned 1 [0192.088] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b990 | out: hHeap=0x1f0000) returned 1 [0192.088] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b918 [0192.088] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b918 | out: hHeap=0x1f0000) returned 1 [0192.088] FindNextFileW (in: hFindFile=0x214490, lpFindFileData=0x173f54c | out: lpFindFileData=0x173f54c*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xc4ee267e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4ee267e, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xf1c63cdd, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x10, dwReserved1=0x1, cFileName="BOOTSECT.BAK", cAlternateFileName="")) returned 1 [0192.088] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b8c8 [0192.088] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2f0 [0192.088] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b6c0 | out: hHeap=0x1f0000) returned 1 [0192.088] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b8c8 | out: hHeap=0x1f0000) returned 1 [0192.088] CreateFileW (lpFileName="C:\\\\BOOTSECT.BAK" (normalized: "c:\\bootsect.bak"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173f314, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0192.090] GetLastError () returned 0x5 [0192.090] GetLastError () returned 0x5 [0192.150] SetLastError (dwErrCode=0x5) [0192.150] GetLastError () returned 0x5 [0192.150] SetLastError (dwErrCode=0x5) [0192.151] GetLastError () returned 0x5 [0192.151] SetLastError (dwErrCode=0x5) [0192.151] FindNextFileW (in: hFindFile=0x214490, lpFindFileData=0x173f54c | out: lpFindFileData=0x173f54c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xe99f01ae, ftCreationTime.dwHighDateTime=0x1d32708, ftLastAccessTime.dwLowDateTime=0xe99f01ae, ftLastAccessTime.dwHighDateTime=0x1d32708, ftLastWriteTime.dwLowDateTime=0xe99f01ae, ftLastWriteTime.dwHighDateTime=0x1d32708, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x1, cFileName="Documents and Settings", cAlternateFileName="DOCUME~1")) returned 1 [0192.151] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d018 [0192.151] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x214050 [0192.151] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0192.151] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d018 | out: hHeap=0x1f0000) returned 1 [0192.151] lstrcmpW (lpString1="Documents and Settings", lpString2=".") returned 1 [0192.151] lstrcmpW (lpString1="Documents and Settings", lpString2="..") returned 1 [0192.151] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x21ae50 [0192.151] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x213fc0 [0192.151] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b478 | out: hHeap=0x1f0000) returned 1 [0192.151] FindNextFileW (in: hFindFile=0x214490, lpFindFileData=0x173f54c | out: lpFindFileData=0x173f54c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc1969407, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x1, cFileName="ESD", cAlternateFileName="")) returned 1 [0192.151] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214050 | out: hHeap=0x1f0000) returned 1 [0192.151] lstrcmpW (lpString1="ESD", lpString2=".") returned 1 [0192.151] lstrcmpW (lpString1="ESD", lpString2="..") returned 1 [0192.151] FindNextFileW (in: hFindFile=0x214490, lpFindFileData=0x173f54c | out: lpFindFileData=0x173f54c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x7ef2dddf, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x7ef2dddf, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x96715303, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x332fe000, dwReserved0=0xa0000003, dwReserved1=0x1, cFileName="hiberfil.sys", cAlternateFileName="")) returned 1 [0192.152] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b8c8 [0192.152] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cd78 [0192.152] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b8c8 | out: hHeap=0x1f0000) returned 1 [0192.152] CreateFileW (lpFileName="C:\\\\hiberfil.sys" (normalized: "c:\\hiberfil.sys"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173f314, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0192.152] GetLastError () returned 0x20 [0192.152] GetLastError () returned 0x20 [0192.152] SetLastError (dwErrCode=0x20) [0192.152] GetLastError () returned 0x20 [0192.152] SetLastError (dwErrCode=0x20) [0192.152] GetLastError () returned 0x20 [0192.152] SetLastError (dwErrCode=0x20) [0192.153] FindNextFileW (in: hFindFile=0x214490, lpFindFileData=0x173f54c | out: lpFindFileData=0x173f54c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf1d773, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xa03727f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xfd9ec80, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x1, cFileName="Logs", cAlternateFileName="")) returned 1 [0192.153] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b990 [0192.153] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cd78 | out: hHeap=0x1f0000) returned 1 [0192.153] lstrcmpW (lpString1="Logs", lpString2=".") returned 1 [0192.153] lstrcmpW (lpString1="Logs", lpString2="..") returned 1 [0192.153] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd8) returned 0x2155d8 [0192.153] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b6c0 [0192.153] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ae50 | out: hHeap=0x1f0000) returned 1 [0192.153] FindNextFileW (in: hFindFile=0x214490, lpFindFileData=0x173f54c | out: lpFindFileData=0x173f54c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6e97b025, ftCreationTime.dwHighDateTime=0x1d3275c, ftLastAccessTime.dwLowDateTime=0x6e97b025, ftLastAccessTime.dwHighDateTime=0x1d3275c, ftLastWriteTime.dwLowDateTime=0x98f4eb01, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x28000000, dwReserved0=0xa0000003, dwReserved1=0x1, cFileName="pagefile.sys", cAlternateFileName="")) returned 1 [0192.153] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b9e0 [0192.153] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cde8 [0192.153] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b990 | out: hHeap=0x1f0000) returned 1 [0192.153] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b9e0 | out: hHeap=0x1f0000) returned 1 [0192.153] CreateFileW (lpFileName="C:\\\\pagefile.sys" (normalized: "c:\\pagefile.sys"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173f314, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0192.154] GetLastError () returned 0x20 [0192.154] GetLastError () returned 0x20 [0192.154] SetLastError (dwErrCode=0x20) [0192.154] GetLastError () returned 0x20 [0192.154] SetLastError (dwErrCode=0x20) [0192.154] GetLastError () returned 0x20 [0192.154] SetLastError (dwErrCode=0x20) [0192.154] FindNextFileW (in: hFindFile=0x214490, lpFindFileData=0x173f54c | out: lpFindFileData=0x173f54c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa03748ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17b3dd09, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x1, cFileName="PerfLogs", cAlternateFileName="")) returned 1 [0192.154] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b850 [0192.154] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cde8 | out: hHeap=0x1f0000) returned 1 [0192.154] lstrcmpW (lpString1="PerfLogs", lpString2=".") returned 1 [0192.154] lstrcmpW (lpString1="PerfLogs", lpString2="..") returned 1 [0192.154] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b760 [0192.154] FindNextFileW (in: hFindFile=0x214490, lpFindFileData=0x173f54c | out: lpFindFileData=0x173f54c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3ac6234, ftLastAccessTime.dwHighDateTime=0x1d5c65b, ftLastWriteTime.dwLowDateTime=0x3ac6234, ftLastWriteTime.dwHighDateTime=0x1d5c65b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x1, cFileName="Program Files", cAlternateFileName="PROGRA~1")) returned 1 [0192.154] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b8c8 [0192.154] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d168 [0192.154] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b850 | out: hHeap=0x1f0000) returned 1 [0192.154] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b8c8 | out: hHeap=0x1f0000) returned 1 [0192.154] lstrcmpW (lpString1="Program Files", lpString2=".") returned 1 [0192.154] lstrcmpW (lpString1="Program Files", lpString2="..") returned 1 [0192.154] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21ccd0 [0192.155] FindNextFileW (in: hFindFile=0x214490, lpFindFileData=0x173f54c | out: lpFindFileData=0x173f54c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe7511354, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe7511354, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x1, cFileName="Program Files (x86)", cAlternateFileName="PROGRA~2")) returned 1 [0192.155] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cc60 [0192.155] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d168 | out: hHeap=0x1f0000) returned 1 [0192.155] lstrcmpW (lpString1="Program Files (x86)", lpString2=".") returned 1 [0192.155] lstrcmpW (lpString1="Program Files (x86)", lpString2="..") returned 1 [0192.155] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x138) returned 0x216920 [0192.155] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d0f8 [0192.155] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2155d8 | out: hHeap=0x1f0000) returned 1 [0192.155] FindNextFileW (in: hFindFile=0x214490, lpFindFileData=0x173f54c | out: lpFindFileData=0x173f54c*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x450f4738, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x450f4738, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x1, cFileName="ProgramData", cAlternateFileName="PROGRA~3")) returned 1 [0192.155] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b990 [0192.155] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cc60 | out: hHeap=0x1f0000) returned 1 [0192.155] lstrcmpW (lpString1="ProgramData", lpString2=".") returned 1 [0192.155] lstrcmpW (lpString1="ProgramData", lpString2="..") returned 1 [0192.155] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b5f8 [0192.155] FindNextFileW (in: hFindFile=0x214490, lpFindFileData=0x173f54c | out: lpFindFileData=0x173f54c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28e9c3a2, ftCreationTime.dwHighDateTime=0x1d32795, ftLastAccessTime.dwLowDateTime=0x1044dfc5, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x1044dfc5, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x1, cFileName="Recovery", cAlternateFileName="")) returned 1 [0192.155] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b710 [0192.155] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b990 | out: hHeap=0x1f0000) returned 1 [0192.155] lstrcmpW (lpString1="Recovery", lpString2=".") returned 1 [0192.155] lstrcmpW (lpString1="Recovery", lpString2="..") returned 1 [0192.156] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b5a8 [0192.156] FindNextFileW (in: hFindFile=0x214490, lpFindFileData=0x173f54c | out: lpFindFileData=0x173f54c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6ead2556, ftCreationTime.dwHighDateTime=0x1d3275c, ftLastAccessTime.dwLowDateTime=0x6ead2556, ftLastAccessTime.dwHighDateTime=0x1d3275c, ftLastWriteTime.dwLowDateTime=0x98f74cd7, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x10000000, dwReserved0=0xa0000003, dwReserved1=0x1, cFileName="swapfile.sys", cAlternateFileName="")) returned 1 [0192.156] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b8c8 [0192.156] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cde8 [0192.156] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b710 | out: hHeap=0x1f0000) returned 1 [0192.156] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b8c8 | out: hHeap=0x1f0000) returned 1 [0192.156] CreateFileW (lpFileName="C:\\\\swapfile.sys" (normalized: "c:\\swapfile.sys"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173f314, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0192.156] GetLastError () returned 0x20 [0192.156] GetLastError () returned 0x20 [0192.156] SetLastError (dwErrCode=0x20) [0192.156] GetLastError () returned 0x20 [0192.156] SetLastError (dwErrCode=0x20) [0192.156] GetLastError () returned 0x20 [0192.156] SetLastError (dwErrCode=0x20) [0192.157] FindNextFileW (in: hFindFile=0x214490, lpFindFileData=0x173f54c | out: lpFindFileData=0x173f54c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x6e16f135, ftCreationTime.dwHighDateTime=0x1d3275c, ftLastAccessTime.dwLowDateTime=0xb1ff7ba5, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xb1ff7ba5, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x1, cFileName="System Volume Information", cAlternateFileName="SYSTEM~1")) returned 1 [0192.157] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x213af8 [0192.157] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cde8 | out: hHeap=0x1f0000) returned 1 [0192.157] lstrcmpW (lpString1="System Volume Information", lpString2=".") returned 1 [0192.157] lstrcmpW (lpString1="System Volume Information", lpString2="..") returned 1 [0192.157] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x213ea0 [0192.157] FindNextFileW (in: hFindFile=0x214490, lpFindFileData=0x173f54c | out: lpFindFileData=0x173f54c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x475bb883, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x475bb883, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x1, cFileName="Users", cAlternateFileName="")) returned 1 [0192.157] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b800 [0192.157] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213af8 | out: hHeap=0x1f0000) returned 1 [0192.157] lstrcmpW (lpString1="Users", lpString2=".") returned 1 [0192.157] lstrcmpW (lpString1="Users", lpString2="..") returned 1 [0192.157] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c8) returned 0x2155d8 [0192.157] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b828 [0192.157] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216920 | out: hHeap=0x1f0000) returned 1 [0192.157] FindNextFileW (in: hFindFile=0x214490, lpFindFileData=0x173f54c | out: lpFindFileData=0x173f54c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0xc838b81d, ftLastAccessTime.dwHighDateTime=0x1d41dc3, ftLastWriteTime.dwLowDateTime=0xc838b81d, ftLastWriteTime.dwHighDateTime=0x1d41dc3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x1, cFileName="Windows", cAlternateFileName="")) returned 1 [0192.157] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b990 [0192.157] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b800 | out: hHeap=0x1f0000) returned 1 [0192.158] lstrcmpW (lpString1="Windows", lpString2=".") returned 1 [0192.158] lstrcmpW (lpString1="Windows", lpString2="..") returned 1 [0192.158] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b850 [0192.158] FindNextFileW (in: hFindFile=0x214490, lpFindFileData=0x173f54c | out: lpFindFileData=0x173f54c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea34fa37, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xccdc86a8, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xccdc86a8, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x1, cFileName="Windows10Upgrade", cAlternateFileName="WINDOW~1")) returned 1 [0192.158] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d168 [0192.158] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b990 | out: hHeap=0x1f0000) returned 1 [0192.158] lstrcmpW (lpString1="Windows10Upgrade", lpString2=".") returned 1 [0192.158] lstrcmpW (lpString1="Windows10Upgrade", lpString2="..") returned 1 [0192.158] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cc60 [0192.158] FindNextFileW (in: hFindFile=0x214490, lpFindFileData=0x173f54c | out: lpFindFileData=0x173f54c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea34fa37, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xccdc86a8, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xccdc86a8, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x1, cFileName="Windows10Upgrade", cAlternateFileName="WINDOW~1")) returned 0 [0192.158] FindClose (in: hFindFile=0x214490 | out: hFindFile=0x214490) returned 1 [0192.158] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x213f30 [0192.158] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b620 [0192.158] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x20d5e0 [0192.158] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cd40 [0192.158] FindFirstFileW (in: lpFileName="C:\\\\$GetCurrent\\*", lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x214490 [0192.160] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cd78 [0192.160] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cd40 | out: hHeap=0x1f0000) returned 1 [0192.160] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0192.160] FindNextFileW (in: hFindFile=0x214490, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0192.160] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0192.160] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cd78 | out: hHeap=0x1f0000) returned 1 [0192.160] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0192.160] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0192.161] FindNextFileW (in: hFindFile=0x214490, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9c5a0a89, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Logs", cAlternateFileName="")) returned 1 [0192.161] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d1d8 [0192.161] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0192.161] lstrcmpW (lpString1="Logs", lpString2=".") returned 1 [0192.161] lstrcmpW (lpString1="Logs", lpString2="..") returned 1 [0192.161] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x2050f0 [0192.161] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d210 [0192.161] FindNextFileW (in: hFindFile=0x214490, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SafeOS", cAlternateFileName="")) returned 1 [0192.161] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0192.161] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d1d8 | out: hHeap=0x1f0000) returned 1 [0192.161] lstrcmpW (lpString1="SafeOS", lpString2=".") returned 1 [0192.161] lstrcmpW (lpString1="SafeOS", lpString2="..") returned 1 [0192.161] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf70 [0192.161] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2f0 [0192.161] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2050f0 | out: hHeap=0x1f0000) returned 1 [0192.161] FindNextFileW (in: hFindFile=0x214490, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SafeOS", cAlternateFileName="")) returned 0 [0192.161] FindClose (in: hFindFile=0x214490 | out: hFindFile=0x214490) returned 1 [0192.162] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x213d38 [0192.162] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b8c8 [0192.162] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x20d778 [0192.162] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d1d8 [0192.162] FindFirstFileW (in: lpFileName="C:\\\\$GetCurrent\\Logs\\*", lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9c5a0a89, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x21d1fe, dwReserved1=0x240022, cFileName=".", cAlternateFileName="")) returned 0x214450 [0192.165] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d248 [0192.165] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d1d8 | out: hHeap=0x1f0000) returned 1 [0192.165] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0192.165] FindNextFileW (in: hFindFile=0x214450, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9c5a0a89, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x21d1fe, dwReserved1=0x240022, cFileName="..", cAlternateFileName="")) returned 1 [0192.165] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cde8 [0192.165] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d248 | out: hHeap=0x1f0000) returned 1 [0192.165] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0192.165] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0192.165] FindNextFileW (in: hFindFile=0x214450, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x542c8aac, ftLastAccessTime.dwHighDateTime=0x1d3273a, ftLastWriteTime.dwLowDateTime=0xafe5f7a, ftLastWriteTime.dwHighDateTime=0x1d3273e, nFileSizeHigh=0x0, nFileSizeLow=0xa6b2, dwReserved0=0x21d1fe, dwReserved1=0x240022, cFileName="downlevel_2017_09_07_02_02_39_766.log", cAlternateFileName="DOWNLE~1.LOG")) returned 1 [0192.166] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x215860 [0192.166] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2b8 [0192.166] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x21ae50 [0192.166] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2b8 | out: hHeap=0x1f0000) returned 1 [0192.166] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cde8 | out: hHeap=0x1f0000) returned 1 [0192.166] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215860 | out: hHeap=0x1f0000) returned 1 [0192.217] CreateFileW (lpFileName="C:\\\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log" (normalized: "c:\\$getcurrent\\logs\\downlevel_2017_09_07_02_02_39_766.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0192.217] GetFileType (hFile=0x1b0) returned 0x1 [0192.217] CloseHandle (hObject=0x1b0) returned 1 [0192.218] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x20daa8 [0192.218] GetFileAttributesExW (in: lpFileName="C:\\\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log" (normalized: "c:\\$getcurrent\\logs\\downlevel_2017_09_07_02_02_39_766.log"), fInfoLevelId=0x0, lpFileInformation=0x173eb6c | out: lpFileInformation=0x173eb6c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x542c8aac, ftLastAccessTime.dwHighDateTime=0x1d3273a, ftLastWriteTime.dwLowDateTime=0xafe5f7a, ftLastWriteTime.dwHighDateTime=0x1d3273e, nFileSizeHigh=0x0, nFileSizeLow=0xa6b2)) returned 1 [0192.218] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20daa8 | out: hHeap=0x1f0000) returned 1 [0192.218] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x20daa8 [0192.218] GetFileAttributesExW (in: lpFileName="C:\\\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log" (normalized: "c:\\$getcurrent\\logs\\downlevel_2017_09_07_02_02_39_766.log"), fInfoLevelId=0x0, lpFileInformation=0x173eb7c | out: lpFileInformation=0x173eb7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x542c8aac, ftLastAccessTime.dwHighDateTime=0x1d3273a, ftLastWriteTime.dwLowDateTime=0xafe5f7a, ftLastWriteTime.dwHighDateTime=0x1d3273e, nFileSizeHigh=0x0, nFileSizeLow=0xa6b2)) returned 1 [0192.218] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20daa8 | out: hHeap=0x1f0000) returned 1 [0192.218] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x20daa8 [0192.218] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20daa8 | out: hHeap=0x1f0000) returned 1 [0192.218] GetLastError () returned 0x0 [0192.218] SetLastError (dwErrCode=0x0) [0192.219] AreFileApisANSI () returned 1 [0192.219] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58420, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0192.219] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58420, cbMultiByte=4, lpWideCharStr=0x173eca8, cchWideChar=4 | out: lpWideCharStr=".exe") returned 4 [0192.219] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b670 [0192.219] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x214098 [0192.219] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x20de98 [0192.219] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x20daa8 [0192.219] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d248 [0192.219] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b8f0 [0192.219] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x217038) returned 1 [0192.223] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x20b8f0 | out: pbBuffer=0x20b8f0) returned 1 [0192.223] CryptReleaseContext (hProv=0x217038, dwFlags=0x0) returned 1 [0192.223] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b8f0 | out: hHeap=0x1f0000) returned 1 [0192.223] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x21e740 [0192.223] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x217038 [0192.223] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=34959191969) returned 1 [0192.223] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0192.223] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=34959206506) returned 1 [0192.223] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0192.223] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x21d2b8 [0192.223] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x21f958 [0192.224] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x20e030 [0192.224] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x20e140 [0192.224] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210000 [0192.224] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206808 [0192.224] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20fef8 [0192.224] GetLastError () returned 0x0 [0192.224] SetLastError (dwErrCode=0x0) [0192.225] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2b8 | out: hHeap=0x1f0000) returned 1 [0192.225] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x20e210 [0192.225] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x220b70 [0192.225] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20e210 | out: hHeap=0x1f0000) returned 1 [0192.225] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x140) returned 0x220c50 [0192.225] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220b70 | out: hHeap=0x1f0000) returned 1 [0192.225] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c410 [0192.225] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c520 [0192.226] CreateFileW (lpFileName="C:\\\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\$getcurrent\\logs\\downlevel_2017_09_07_02_02_39_766.log.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e230, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0192.226] GetFileType (hFile=0x1b0) returned 0x1 [0192.227] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x34) returned 0x2145d0 [0192.227] GetLastError () returned 0x0 [0192.227] SetLastError (dwErrCode=0x0) [0192.227] GetLastError () returned 0x0 [0192.227] SetLastError (dwErrCode=0x0) [0192.227] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0xb8) returned 0x220b70 [0192.227] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x6a6) returned 0x220d98 [0192.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d98 | out: hHeap=0x1f0000) returned 1 [0192.227] GetLastError () returned 0x0 [0192.227] SetLastError (dwErrCode=0x0) [0192.227] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x6) returned 0x21c490 [0192.227] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2) returned 0x21c4f0 [0192.227] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x4) returned 0x21c420 [0192.227] GetLastError () returned 0x0 [0192.228] SetLastError (dwErrCode=0x0) [0192.228] GetLastError () returned 0x0 [0192.228] SetLastError (dwErrCode=0x0) [0192.228] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0xb8) returned 0x220d98 [0192.228] GetLastError () returned 0x0 [0192.228] SetLastError (dwErrCode=0x0) [0192.228] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x6a6) returned 0x220e58 [0192.228] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e58 | out: hHeap=0x1f0000) returned 1 [0192.228] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c490 | out: hHeap=0x1f0000) returned 1 [0192.228] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220b70 | out: hHeap=0x1f0000) returned 1 [0192.228] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c420 | out: hHeap=0x1f0000) returned 1 [0192.228] GetLastError () returned 0x0 [0192.228] SetLastError (dwErrCode=0x0) [0192.228] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x6) returned 0x21c3d0 [0192.229] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2) returned 0x21c370 [0192.229] GetLastError () returned 0x0 [0192.229] SetLastError (dwErrCode=0x0) [0192.229] GetLastError () returned 0x0 [0192.229] SetLastError (dwErrCode=0x0) [0192.229] GetLastError () returned 0x0 [0192.229] SetLastError (dwErrCode=0x0) [0192.229] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x4) returned 0x21c3f0 [0192.229] GetLastError () returned 0x0 [0192.229] SetLastError (dwErrCode=0x0) [0192.229] GetLastError () returned 0x0 [0192.229] SetLastError (dwErrCode=0x0) [0192.229] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0xb8) returned 0x220b70 [0192.229] GetLastError () returned 0x0 [0192.229] SetLastError (dwErrCode=0x0) [0192.230] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x6a6) returned 0x220e58 [0192.230] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e58 | out: hHeap=0x1f0000) returned 1 [0192.230] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c3d0 | out: hHeap=0x1f0000) returned 1 [0192.230] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d98 | out: hHeap=0x1f0000) returned 1 [0192.230] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c3f0 | out: hHeap=0x1f0000) returned 1 [0192.230] GetLastError () returned 0x0 [0192.230] SetLastError (dwErrCode=0x0) [0192.230] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x6) returned 0x21c500 [0192.230] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c370 | out: hHeap=0x1f0000) returned 1 [0192.230] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c4f0 | out: hHeap=0x1f0000) returned 1 [0192.230] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c4a0 [0192.230] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c490 [0192.231] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c4f0 [0192.231] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x38) returned 0x214750 [0192.231] CreateFileW (lpFileName="C:\\\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log" (normalized: "c:\\$getcurrent\\logs\\downlevel_2017_09_07_02_02_39_766.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4 [0192.232] GetFileType (hFile=0x1b4) returned 0x1 [0192.232] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204fb0 [0192.232] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205290 [0192.232] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x20e210 [0192.232] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c530 [0192.232] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c370 [0192.232] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x38) returned 0x214310 [0192.233] CreateFileW (lpFileName="C:\\\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\$getcurrent\\logs\\downlevel_2017_09_07_02_02_39_766.log.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b8 [0192.233] GetFileType (hFile=0x1b8) returned 0x1 [0192.233] GetLastError () returned 0xb7 [0192.233] SetLastError (dwErrCode=0xb7) [0192.234] GetLastError () returned 0xb7 [0192.234] SetLastError (dwErrCode=0xb7) [0192.234] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204fb0 | out: hHeap=0x1f0000) returned 1 [0192.234] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205290 | out: hHeap=0x1f0000) returned 1 [0192.234] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe4) returned 0x220d98 [0192.234] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205210 [0192.234] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x2051d0 [0192.234] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x2050f0 [0192.234] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x220e88 [0192.234] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c4b0 [0192.234] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c460 [0192.234] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x38) returned 0x2146d0 [0192.235] CreateFileW (lpFileName="C:\\\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\$getcurrent\\logs\\downlevel_2017_09_07_02_02_39_766.log.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1bc [0192.235] GetFileType (hFile=0x1bc) returned 0x1 [0192.235] GetLastError () returned 0xb7 [0192.235] SetLastError (dwErrCode=0xb7) [0192.235] GetLastError () returned 0xb7 [0192.235] SetLastError (dwErrCode=0xb7) [0192.235] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2051d0 | out: hHeap=0x1f0000) returned 1 [0192.235] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2050f0 | out: hHeap=0x1f0000) returned 1 [0192.236] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205130 [0192.236] GetLastError () returned 0xb7 [0192.236] SetLastError (dwErrCode=0xb7) [0192.236] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205130 | out: hHeap=0x1f0000) returned 1 [0192.236] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x2050f0 [0192.236] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204fb0 [0192.236] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x2051d0 [0192.236] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb8) returned 0x220f40 [0192.236] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c440 [0192.236] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c4c0 [0192.237] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x38) returned 0x214850 [0192.237] CreateFileW (lpFileName="C:\\\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log" (normalized: "c:\\$getcurrent\\logs\\downlevel_2017_09_07_02_02_39_766.log"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1a4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0192.237] GetFileType (hFile=0x1c0) returned 0x1 [0192.238] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x221000 [0192.238] ReadFile (in: hFile=0x1c0, lpBuffer=0x221000, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e100, lpOverlapped=0x0 | out: lpBuffer=0x221000*, lpNumberOfBytesRead=0x173e100*=0x1000, lpOverlapped=0x0) returned 1 [0192.242] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x222008 [0192.243] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x222410 [0192.243] GetLastError () returned 0x0 [0192.243] SetLastError (dwErrCode=0x0) [0192.243] GetLastError () returned 0x0 [0192.244] SetLastError (dwErrCode=0x0) [0192.244] GetLastError () returned 0x0 [0192.244] SetLastError (dwErrCode=0x0) [0192.244] GetLastError () returned 0x0 [0192.244] SetLastError (dwErrCode=0x0) [0192.245] ReadFile (in: hFile=0x1c0, lpBuffer=0x221000, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e190, lpOverlapped=0x0 | out: lpBuffer=0x221000*, lpNumberOfBytesRead=0x173e190*=0x1000, lpOverlapped=0x0) returned 1 [0192.246] WriteFile (in: hFile=0x1bc, lpBuffer=0x222410*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x173dfd4, lpOverlapped=0x0 | out: lpBuffer=0x222410*, lpNumberOfBytesWritten=0x173dfd4*=0x1000, lpOverlapped=0x0) returned 1 [0192.247] GetLastError () returned 0x0 [0192.247] SetLastError (dwErrCode=0x0) [0192.248] GetLastError () returned 0x0 [0192.248] SetLastError (dwErrCode=0x0) [0192.248] GetLastError () returned 0x0 [0192.248] SetLastError (dwErrCode=0x0) [0192.249] GetLastError () returned 0x0 [0192.249] SetLastError (dwErrCode=0x0) [0192.249] ReadFile (in: hFile=0x1c0, lpBuffer=0x221000, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e190, lpOverlapped=0x0 | out: lpBuffer=0x221000*, lpNumberOfBytesRead=0x173e190*=0x1000, lpOverlapped=0x0) returned 1 [0192.249] WriteFile (in: hFile=0x1bc, lpBuffer=0x222410*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x173dfd4, lpOverlapped=0x0 | out: lpBuffer=0x222410*, lpNumberOfBytesWritten=0x173dfd4*=0x1000, lpOverlapped=0x0) returned 1 [0192.250] GetLastError () returned 0x0 [0192.250] SetLastError (dwErrCode=0x0) [0192.251] GetLastError () returned 0x0 [0192.251] SetLastError (dwErrCode=0x0) [0192.251] GetLastError () returned 0x0 [0192.252] SetLastError (dwErrCode=0x0) [0192.252] GetLastError () returned 0x0 [0192.252] SetLastError (dwErrCode=0x0) [0192.253] ReadFile (in: hFile=0x1c0, lpBuffer=0x221000, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e190, lpOverlapped=0x0 | out: lpBuffer=0x221000*, lpNumberOfBytesRead=0x173e190*=0x1000, lpOverlapped=0x0) returned 1 [0192.253] WriteFile (in: hFile=0x1bc, lpBuffer=0x222410*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x173dfd4, lpOverlapped=0x0 | out: lpBuffer=0x222410*, lpNumberOfBytesWritten=0x173dfd4*=0x1000, lpOverlapped=0x0) returned 1 [0192.254] GetLastError () returned 0x0 [0192.254] SetLastError (dwErrCode=0x0) [0192.254] GetLastError () returned 0x0 [0192.254] SetLastError (dwErrCode=0x0) [0192.353] GetLastError () returned 0x0 [0192.353] SetLastError (dwErrCode=0x0) [0192.362] GetLastError () returned 0x0 [0192.365] SetLastError (dwErrCode=0x0) [0192.376] ReadFile (in: hFile=0x1c0, lpBuffer=0x221000, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e190, lpOverlapped=0x0 | out: lpBuffer=0x221000*, lpNumberOfBytesRead=0x173e190*=0x1000, lpOverlapped=0x0) returned 1 [0192.376] WriteFile (in: hFile=0x1bc, lpBuffer=0x222410*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x173dfd4, lpOverlapped=0x0 | out: lpBuffer=0x222410*, lpNumberOfBytesWritten=0x173dfd4*=0x1000, lpOverlapped=0x0) returned 1 [0192.376] GetLastError () returned 0x0 [0192.376] SetLastError (dwErrCode=0x0) [0192.377] GetLastError () returned 0x0 [0192.377] SetLastError (dwErrCode=0x0) [0192.377] GetLastError () returned 0x0 [0192.377] SetLastError (dwErrCode=0x0) [0192.377] GetLastError () returned 0x0 [0192.377] SetLastError (dwErrCode=0x0) [0192.377] ReadFile (in: hFile=0x1c0, lpBuffer=0x221000, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e190, lpOverlapped=0x0 | out: lpBuffer=0x221000*, lpNumberOfBytesRead=0x173e190*=0x1000, lpOverlapped=0x0) returned 1 [0192.378] WriteFile (in: hFile=0x1bc, lpBuffer=0x222410*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x173dfd4, lpOverlapped=0x0 | out: lpBuffer=0x222410*, lpNumberOfBytesWritten=0x173dfd4*=0x1000, lpOverlapped=0x0) returned 1 [0192.378] GetLastError () returned 0x0 [0192.378] SetLastError (dwErrCode=0x0) [0192.378] GetLastError () returned 0x0 [0192.378] SetLastError (dwErrCode=0x0) [0192.379] GetLastError () returned 0x0 [0192.379] SetLastError (dwErrCode=0x0) [0192.379] GetLastError () returned 0x0 [0192.379] SetLastError (dwErrCode=0x0) [0192.379] ReadFile (in: hFile=0x1c0, lpBuffer=0x221000, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e190, lpOverlapped=0x0 | out: lpBuffer=0x221000*, lpNumberOfBytesRead=0x173e190*=0x1000, lpOverlapped=0x0) returned 1 [0192.379] WriteFile (in: hFile=0x1bc, lpBuffer=0x222410*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x173dfd4, lpOverlapped=0x0 | out: lpBuffer=0x222410*, lpNumberOfBytesWritten=0x173dfd4*=0x1000, lpOverlapped=0x0) returned 1 [0192.380] GetLastError () returned 0x0 [0192.380] SetLastError (dwErrCode=0x0) [0192.380] GetLastError () returned 0x0 [0192.380] SetLastError (dwErrCode=0x0) [0192.380] GetLastError () returned 0x0 [0192.380] SetLastError (dwErrCode=0x0) [0192.381] GetLastError () returned 0x0 [0192.381] SetLastError (dwErrCode=0x0) [0192.381] ReadFile (in: hFile=0x1c0, lpBuffer=0x221000, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e190, lpOverlapped=0x0 | out: lpBuffer=0x221000*, lpNumberOfBytesRead=0x173e190*=0x1000, lpOverlapped=0x0) returned 1 [0192.381] WriteFile (in: hFile=0x1bc, lpBuffer=0x222410*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x173dfd4, lpOverlapped=0x0 | out: lpBuffer=0x222410*, lpNumberOfBytesWritten=0x173dfd4*=0x1000, lpOverlapped=0x0) returned 1 [0192.381] GetLastError () returned 0x0 [0192.381] SetLastError (dwErrCode=0x0) [0192.381] GetLastError () returned 0x0 [0192.382] SetLastError (dwErrCode=0x0) [0192.382] GetLastError () returned 0x0 [0192.382] SetLastError (dwErrCode=0x0) [0192.382] GetLastError () returned 0x0 [0192.382] SetLastError (dwErrCode=0x0) [0192.383] ReadFile (in: hFile=0x1c0, lpBuffer=0x221000, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e190, lpOverlapped=0x0 | out: lpBuffer=0x221000*, lpNumberOfBytesRead=0x173e190*=0x1000, lpOverlapped=0x0) returned 1 [0192.383] WriteFile (in: hFile=0x1bc, lpBuffer=0x222410*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x173dfd4, lpOverlapped=0x0 | out: lpBuffer=0x222410*, lpNumberOfBytesWritten=0x173dfd4*=0x1000, lpOverlapped=0x0) returned 1 [0192.383] GetLastError () returned 0x0 [0192.383] SetLastError (dwErrCode=0x0) [0192.384] GetLastError () returned 0x0 [0192.384] SetLastError (dwErrCode=0x0) [0192.384] GetLastError () returned 0x0 [0192.384] SetLastError (dwErrCode=0x0) [0192.384] GetLastError () returned 0x0 [0192.384] SetLastError (dwErrCode=0x0) [0192.384] ReadFile (in: hFile=0x1c0, lpBuffer=0x221000, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e190, lpOverlapped=0x0 | out: lpBuffer=0x221000*, lpNumberOfBytesRead=0x173e190*=0x1000, lpOverlapped=0x0) returned 1 [0192.385] WriteFile (in: hFile=0x1bc, lpBuffer=0x222410*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x173dfd4, lpOverlapped=0x0 | out: lpBuffer=0x222410*, lpNumberOfBytesWritten=0x173dfd4*=0x1000, lpOverlapped=0x0) returned 1 [0192.385] GetLastError () returned 0x0 [0192.385] SetLastError (dwErrCode=0x0) [0192.385] GetLastError () returned 0x0 [0192.385] SetLastError (dwErrCode=0x0) [0192.386] GetLastError () returned 0x0 [0192.386] SetLastError (dwErrCode=0x0) [0192.386] GetLastError () returned 0x0 [0192.386] SetLastError (dwErrCode=0x0) [0192.386] ReadFile (in: hFile=0x1c0, lpBuffer=0x221000, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e190, lpOverlapped=0x0 | out: lpBuffer=0x221000*, lpNumberOfBytesRead=0x173e190*=0x6b2, lpOverlapped=0x0) returned 1 [0192.386] WriteFile (in: hFile=0x1bc, lpBuffer=0x222410*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x173dfd4, lpOverlapped=0x0 | out: lpBuffer=0x222410*, lpNumberOfBytesWritten=0x173dfd4*=0x1000, lpOverlapped=0x0) returned 1 [0192.387] GetLastError () returned 0x0 [0192.387] SetLastError (dwErrCode=0x0) [0192.387] ReadFile (in: hFile=0x1c0, lpBuffer=0x221000, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e190, lpOverlapped=0x0 | out: lpBuffer=0x221000*, lpNumberOfBytesRead=0x173e190*=0x0, lpOverlapped=0x0) returned 1 [0192.387] GetLastError () returned 0x0 [0192.388] SetLastError (dwErrCode=0x0) [0192.388] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff70 [0192.388] GetLastError () returned 0x0 [0192.388] SetLastError (dwErrCode=0x0) [0192.388] WriteFile (in: hFile=0x1bc, lpBuffer=0x222410*, nNumberOfBytesToWrite=0x6c2, lpNumberOfBytesWritten=0x173e084, lpOverlapped=0x0 | out: lpBuffer=0x222410*, lpNumberOfBytesWritten=0x173e084*=0x6c2, lpOverlapped=0x0) returned 1 [0192.388] GetLastError () returned 0x0 [0192.389] SetLastError (dwErrCode=0x0) [0192.389] GetLastError () returned 0x0 [0192.389] SetLastError (dwErrCode=0x0) [0192.389] GetLastError () returned 0x0 [0192.389] SetLastError (dwErrCode=0x0) [0192.389] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204fb0 | out: hHeap=0x1f0000) returned 1 [0192.389] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2051d0 | out: hHeap=0x1f0000) returned 1 [0192.389] CloseHandle (hObject=0x1b0) returned 1 [0192.407] CloseHandle (hObject=0x1b4) returned 1 [0192.407] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c4e0 [0192.407] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c3a0 [0192.408] CreateFileW (lpFileName="C:\\\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log" (normalized: "c:\\$getcurrent\\logs\\downlevel_2017_09_07_02_02_39_766.log"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc [0192.579] GetFileType (hFile=0x1cc) returned 0x1 [0192.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c540 [0192.580] GetLastError () returned 0xb7 [0192.580] SetLastError (dwErrCode=0xb7) [0192.580] GetLastError () returned 0xb7 [0192.580] SetLastError (dwErrCode=0xb7) [0192.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0xb8) returned 0x20dd00 [0192.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x6a6) returned 0x22b2c0 [0192.581] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b2c0 | out: hHeap=0x1f0000) returned 1 [0192.581] GetLastError () returned 0xb7 [0192.581] SetLastError (dwErrCode=0xb7) [0192.581] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x6) returned 0x21c420 [0192.581] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2) returned 0x21c380 [0192.581] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x4) returned 0x21c430 [0192.581] GetLastError () returned 0xb7 [0192.581] SetLastError (dwErrCode=0xb7) [0192.581] GetLastError () returned 0xb7 [0192.581] SetLastError (dwErrCode=0xb7) [0192.581] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0xb8) returned 0x20ddc0 [0192.581] GetLastError () returned 0xb7 [0192.582] SetLastError (dwErrCode=0xb7) [0192.582] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x6a6) returned 0x22b2c0 [0192.582] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b2c0 | out: hHeap=0x1f0000) returned 1 [0192.582] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c420 | out: hHeap=0x1f0000) returned 1 [0192.582] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20dd00 | out: hHeap=0x1f0000) returned 1 [0192.582] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c430 | out: hHeap=0x1f0000) returned 1 [0192.582] GetLastError () returned 0xb7 [0192.582] SetLastError (dwErrCode=0xb7) [0192.582] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x6) returned 0x21c3b0 [0192.582] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2) returned 0x21c3d0 [0192.582] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x4) returned 0x21c3f0 [0192.582] GetLastError () returned 0xb7 [0192.582] SetLastError (dwErrCode=0xb7) [0192.582] GetLastError () returned 0xb7 [0192.582] SetLastError (dwErrCode=0xb7) [0192.583] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0xb8) returned 0x20dd00 [0192.583] GetLastError () returned 0xb7 [0192.583] SetLastError (dwErrCode=0xb7) [0192.583] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x6a6) returned 0x22b2c0 [0192.583] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b2c0 | out: hHeap=0x1f0000) returned 1 [0192.583] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c3b0 | out: hHeap=0x1f0000) returned 1 [0192.583] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ddc0 | out: hHeap=0x1f0000) returned 1 [0192.583] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c3f0 | out: hHeap=0x1f0000) returned 1 [0192.583] GetLastError () returned 0xb7 [0192.583] SetLastError (dwErrCode=0xb7) [0192.583] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x6) returned 0x21c430 [0192.583] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c3d0 | out: hHeap=0x1f0000) returned 1 [0192.583] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c380 | out: hHeap=0x1f0000) returned 1 [0192.583] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c3b0 [0192.583] GetLastError () returned 0xb7 [0192.584] SetLastError (dwErrCode=0xb7) [0192.584] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x205310 [0192.584] GetLastError () returned 0xb7 [0192.584] SetLastError (dwErrCode=0xb7) [0192.584] GetLastError () returned 0xb7 [0192.584] SetLastError (dwErrCode=0xb7) [0192.584] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0xb8) returned 0x20ddc0 [0192.584] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x6a6) returned 0x22b2c0 [0192.584] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b2c0 | out: hHeap=0x1f0000) returned 1 [0192.584] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c430 | out: hHeap=0x1f0000) returned 1 [0192.584] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20dd00 | out: hHeap=0x1f0000) returned 1 [0192.584] GetLastError () returned 0xb7 [0192.585] SetLastError (dwErrCode=0xb7) [0192.585] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x6) returned 0x21c380 [0192.585] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2) returned 0x21c3d0 [0192.585] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x4) returned 0x21c3f0 [0192.585] GetLastError () returned 0xb7 [0192.585] SetLastError (dwErrCode=0xb7) [0192.585] GetLastError () returned 0xb7 [0192.585] SetLastError (dwErrCode=0xb7) [0192.585] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0xb8) returned 0x20dd00 [0192.585] GetLastError () returned 0xb7 [0192.585] SetLastError (dwErrCode=0xb7) [0192.585] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x6a6) returned 0x22b2c0 [0192.585] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b2c0 | out: hHeap=0x1f0000) returned 1 [0192.585] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c380 | out: hHeap=0x1f0000) returned 1 [0192.585] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ddc0 | out: hHeap=0x1f0000) returned 1 [0192.585] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c3f0 | out: hHeap=0x1f0000) returned 1 [0192.585] GetLastError () returned 0xb7 [0192.585] SetLastError (dwErrCode=0xb7) [0192.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x6) returned 0x21c3f0 [0192.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2) returned 0x21c420 [0192.586] GetLastError () returned 0xb7 [0192.586] SetLastError (dwErrCode=0xb7) [0192.586] GetLastError () returned 0xb7 [0192.586] SetLastError (dwErrCode=0xb7) [0192.586] GetLastError () returned 0xb7 [0192.586] SetLastError (dwErrCode=0xb7) [0192.586] GetLastError () returned 0xb7 [0192.586] SetLastError (dwErrCode=0xb7) [0192.586] GetLastError () returned 0xb7 [0192.586] SetLastError (dwErrCode=0xb7) [0192.586] GetLastError () returned 0xb7 [0192.586] SetLastError (dwErrCode=0xb7) [0192.586] GetLastError () returned 0xb7 [0192.586] SetLastError (dwErrCode=0xb7) [0192.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x1) returned 0x21c380 [0192.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0xc) returned 0x210180 [0192.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0xa) returned 0x20ff58 [0192.587] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x4) returned 0x21c430 [0192.587] GetLastError () returned 0xb7 [0192.587] SetLastError (dwErrCode=0xb7) [0192.587] GetLastError () returned 0xb7 [0192.587] SetLastError (dwErrCode=0xb7) [0192.587] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0xb8) returned 0x20ddc0 [0192.587] GetLastError () returned 0xb7 [0192.587] SetLastError (dwErrCode=0xb7) [0192.587] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x6a6) returned 0x22b2c0 [0192.587] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b2c0 | out: hHeap=0x1f0000) returned 1 [0192.587] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c3f0 | out: hHeap=0x1f0000) returned 1 [0192.587] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20dd00 | out: hHeap=0x1f0000) returned 1 [0192.587] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c430 | out: hHeap=0x1f0000) returned 1 [0192.588] GetLastError () returned 0xb7 [0192.588] SetLastError (dwErrCode=0xb7) [0192.588] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x6) returned 0x21c3f0 [0192.588] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c420 | out: hHeap=0x1f0000) returned 1 [0192.588] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c3d0 | out: hHeap=0x1f0000) returned 1 [0192.588] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c3d0 [0192.588] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x22b2c0 [0192.589] GetLastError () returned 0xb7 [0192.589] SetLastError (dwErrCode=0xb7) [0192.589] WriteFile (in: hFile=0x1cc, lpBuffer=0x173cef4*, nNumberOfBytesToWrite=0x1, lpNumberOfBytesWritten=0x173ceec, lpOverlapped=0x0 | out: lpBuffer=0x173cef4*, lpNumberOfBytesWritten=0x173ceec*=0x1, lpOverlapped=0x0) returned 1 [0192.591] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b2c0 | out: hHeap=0x1f0000) returned 1 [0192.591] CloseHandle (hObject=0x1cc) returned 1 [0192.592] DeleteFileW (lpFileName="C:\\\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log" (normalized: "c:\\$getcurrent\\logs\\downlevel_2017_09_07_02_02_39_766.log")) returned 0 [0192.592] GetLastError () returned 0x20 [0192.592] GetLastError () returned 0x20 [0192.592] SetLastError (dwErrCode=0x20) [0192.592] GetLastError () returned 0x20 [0192.592] SetLastError (dwErrCode=0x20) [0192.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229250 [0192.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20bc38 [0192.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20bb98 [0192.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x229328 [0192.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x2052d0 [0192.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x2052f0 [0192.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x21c420 [0192.592] GetLastError () returned 0x20 [0192.593] SetLastError (dwErrCode=0x20) [0192.593] GetLastError () returned 0x20 [0192.593] SetLastError (dwErrCode=0x20) [0192.593] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2052d0 | out: hHeap=0x1f0000) returned 1 [0192.593] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2052f0 | out: hHeap=0x1f0000) returned 1 [0192.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x227dd0 [0192.593] GetLastError () returned 0x20 [0192.593] SetLastError (dwErrCode=0x20) [0192.593] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0192.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x227d98 [0192.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22aaa8 [0192.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x20b9e0 [0192.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2251e0 [0192.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c450 [0192.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x1fb070 [0192.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff88 [0192.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c470 [0192.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22ba48 [0192.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffa0 [0192.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x22b9f8 [0192.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x224bc0 [0192.594] GetLastError () returned 0x20 [0192.594] SetLastError (dwErrCode=0x20) [0192.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227d98 | out: hHeap=0x1f0000) returned 1 [0192.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x21c430 [0192.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x21c5d0 [0192.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c720 [0192.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5d0 | out: hHeap=0x1f0000) returned 1 [0192.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c6f0 [0192.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c720 | out: hHeap=0x1f0000) returned 1 [0192.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c430 | out: hHeap=0x1f0000) returned 1 [0192.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c430 [0192.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x20fec8 [0192.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c430 | out: hHeap=0x1f0000) returned 1 [0192.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x20ff10 [0192.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20fec8 | out: hHeap=0x1f0000) returned 1 [0192.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c6f0 | out: hHeap=0x1f0000) returned 1 [0192.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x20ffb8 [0192.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20fec8 [0192.595] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffb8 | out: hHeap=0x1f0000) returned 1 [0192.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff28 [0192.595] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20fec8 | out: hHeap=0x1f0000) returned 1 [0192.595] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff10 | out: hHeap=0x1f0000) returned 1 [0192.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20fec8 [0192.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x2051f0 [0192.595] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20fec8 | out: hHeap=0x1f0000) returned 1 [0192.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205130 [0192.595] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2051f0 | out: hHeap=0x1f0000) returned 1 [0192.595] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff28 | out: hHeap=0x1f0000) returned 1 [0192.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205070 [0192.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x22b930 [0192.595] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205070 | out: hHeap=0x1f0000) returned 1 [0192.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x2051f0 [0192.595] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b930 | out: hHeap=0x1f0000) returned 1 [0192.595] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205130 | out: hHeap=0x1f0000) returned 1 [0192.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204ff0 [0192.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x2068f8 [0192.595] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ff0 | out: hHeap=0x1f0000) returned 1 [0192.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x22b980 [0192.595] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2068f8 | out: hHeap=0x1f0000) returned 1 [0192.596] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2051f0 | out: hHeap=0x1f0000) returned 1 [0192.596] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c6b0 [0192.596] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x20fec8 [0192.596] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c6b0 | out: hHeap=0x1f0000) returned 1 [0192.596] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210018 [0192.596] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20fec8 | out: hHeap=0x1f0000) returned 1 [0192.596] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x2051f0 [0192.596] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210018 | out: hHeap=0x1f0000) returned 1 [0192.596] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206838 [0192.596] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2051f0 | out: hHeap=0x1f0000) returned 1 [0192.596] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206838 | out: hHeap=0x1f0000) returned 1 [0192.596] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b980 | out: hHeap=0x1f0000) returned 1 [0192.596] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20bc38 | out: hHeap=0x1f0000) returned 1 [0192.596] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0192.596] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2251e0 | out: hHeap=0x1f0000) returned 1 [0192.596] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b9e0 | out: hHeap=0x1f0000) returned 1 [0192.596] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228038 [0192.596] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b980 [0192.596] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x22a028) returned 1 [0192.599] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x22b980 | out: pbBuffer=0x22b980) returned 1 [0192.599] CryptReleaseContext (hProv=0x22a028, dwFlags=0x0) returned 1 [0192.599] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b980 | out: hHeap=0x1f0000) returned 1 [0192.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b980 [0192.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b9a8 [0192.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1008) returned 0x22bac8 [0192.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22ba70 [0192.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22bac8 | out: hHeap=0x1f0000) returned 1 [0192.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b8b8 [0192.600] RtlInterlockedPushEntrySList (in: ListHead=0xe8d968, ListEntry=0x22b8b8 | out: ListHead=0xe8d968, ListEntry=0x22b8b8) returned 0x0 [0192.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ba70 | out: hHeap=0x1f0000) returned 1 [0192.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227fc8 [0192.601] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b980 | out: hHeap=0x1f0000) returned 1 [0192.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0192.601] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227fc8 | out: hHeap=0x1f0000) returned 1 [0192.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2295b0 [0192.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20fec8 [0192.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x22ab10 [0192.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x22b818 [0192.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x224cc8 [0192.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205290 [0192.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a908 [0192.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x22b840 [0192.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2251e0 [0192.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c680 [0192.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b8e0 [0192.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffb8 [0192.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c5b0 [0192.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b908 [0192.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffe8 [0192.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffe8 | out: hHeap=0x1f0000) returned 1 [0192.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b908 | out: hHeap=0x1f0000) returned 1 [0192.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5b0 | out: hHeap=0x1f0000) returned 1 [0192.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffb8 | out: hHeap=0x1f0000) returned 1 [0192.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b8e0 | out: hHeap=0x1f0000) returned 1 [0192.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c680 | out: hHeap=0x1f0000) returned 1 [0192.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2251e0 | out: hHeap=0x1f0000) returned 1 [0192.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b840 | out: hHeap=0x1f0000) returned 1 [0192.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a908 | out: hHeap=0x1f0000) returned 1 [0192.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x227e08 [0192.602] GetLastError () returned 0x0 [0192.602] SetLastError (dwErrCode=0x0) [0192.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227e08 | out: hHeap=0x1f0000) returned 1 [0192.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x227cb8 [0192.602] RtlInitializeConditionVariable (in: ConditionVariable=0xe8be60 | out: ConditionVariable=0xe8be60) [0192.602] RtlWakeAllConditionVariable (in: ConditionVariable=0xe8d954 | out: ConditionVariable=0xe8d954) [0192.602] GetCurrentThreadId () returned 0x11c0 [0192.603] GetCurrentThreadId () returned 0x11c0 [0192.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x21c6e0 [0192.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0192.603] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0192.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0192.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0192.603] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0192.603] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0192.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x214610 [0192.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2251e0 [0192.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0192.603] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0192.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0192.603] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0192.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x22bac8 [0192.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0192.603] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0192.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22bbd0 [0192.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x22bc98 [0192.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x22ceb0 [0192.603] QueryPerformanceCounter (in: lpPerformanceCount=0x173dee0 | out: lpPerformanceCount=0x173dee0*=34997241266) returned 1 [0192.604] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173df20 | out: lpSystemTimeAsFileTime=0x173df20) [0192.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x21c710 [0192.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22ba70 [0192.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x2051f0 [0192.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2051f0 | out: hHeap=0x1f0000) returned 1 [0192.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ba70 | out: hHeap=0x1f0000) returned 1 [0192.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22ba20 [0192.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205150 [0192.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205150 | out: hHeap=0x1f0000) returned 1 [0192.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ba20 | out: hHeap=0x1f0000) returned 1 [0192.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c710 | out: hHeap=0x1f0000) returned 1 [0192.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22bbd0 | out: hHeap=0x1f0000) returned 1 [0192.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x227d28 [0192.604] GetLastError () returned 0x0 [0192.604] SetLastError (dwErrCode=0x0) [0192.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227d28 | out: hHeap=0x1f0000) returned 1 [0192.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0192.605] RtlWakeAllConditionVariable (in: ConditionVariable=0xe8d954 | out: ConditionVariable=0xe8d954) [0192.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0192.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0192.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22ba20 [0192.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b9d0 [0192.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0192.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0192.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22ba70 [0192.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0192.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x22cfc0 [0192.606] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0192.606] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x22d4e0 [0192.606] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0192.606] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x22d700 [0192.606] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d4e0 | out: hHeap=0x1f0000) returned 1 [0192.606] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22ba98 [0192.606] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b958 [0192.606] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ba98 | out: hHeap=0x1f0000) returned 1 [0192.606] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0192.606] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b958 | out: hHeap=0x1f0000) returned 1 [0192.606] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x22d4e0 [0192.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x22d920 [0192.607] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d920 | out: hHeap=0x1f0000) returned 1 [0192.607] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d4e0 | out: hHeap=0x1f0000) returned 1 [0192.607] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d700 | out: hHeap=0x1f0000) returned 1 [0192.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210078 [0192.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228ef0 [0192.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22ba98 [0192.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b890 [0192.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b7f0 [0192.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b8e0 [0192.607] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b890 | out: hHeap=0x1f0000) returned 1 [0192.607] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ba98 | out: hHeap=0x1f0000) returned 1 [0192.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x22d4e0 [0192.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b908 [0192.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22ba98 [0192.608] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b908 | out: hHeap=0x1f0000) returned 1 [0192.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0192.608] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ba98 | out: hHeap=0x1f0000) returned 1 [0192.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2067d8 [0192.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x22d700 [0192.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d700 | out: hHeap=0x1f0000) returned 1 [0192.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2067d8 | out: hHeap=0x1f0000) returned 1 [0192.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ba70 | out: hHeap=0x1f0000) returned 1 [0192.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0192.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0192.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d4e0 | out: hHeap=0x1f0000) returned 1 [0192.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x205070 [0192.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0192.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0192.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b9d0 | out: hHeap=0x1f0000) returned 1 [0192.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x22df70 [0192.610] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0192.610] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b8e0 | out: hHeap=0x1f0000) returned 1 [0192.610] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b7f0 | out: hHeap=0x1f0000) returned 1 [0192.610] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228ef0 | out: hHeap=0x1f0000) returned 1 [0192.610] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0192.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205070 | out: hHeap=0x1f0000) returned 1 [0192.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210078 | out: hHeap=0x1f0000) returned 1 [0192.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0192.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x22d508 [0192.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d508 | out: hHeap=0x1f0000) returned 1 [0192.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22cfc0 | out: hHeap=0x1f0000) returned 1 [0192.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0192.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0192.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0192.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0192.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ba20 | out: hHeap=0x1f0000) returned 1 [0192.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0192.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0192.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x22e788 [0192.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x22dd20 [0192.612] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e788 | out: hHeap=0x1f0000) returned 1 [0192.612] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22dd20 | out: hHeap=0x1f0000) returned 1 [0192.612] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22df70 | out: hHeap=0x1f0000) returned 1 [0192.612] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0192.612] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22bac8 | out: hHeap=0x1f0000) returned 1 [0192.612] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214610 | out: hHeap=0x1f0000) returned 1 [0192.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x22bac8 [0192.612] GetLastError () returned 0x0 [0192.612] SetLastError (dwErrCode=0x0) [0192.612] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227cb8 | out: hHeap=0x1f0000) returned 1 [0192.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c5a0 [0192.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c5b0 [0192.614] CreateFileW (lpFileName="C:\\\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\$getcurrent\\logs\\downlevel_2017_09_07_02_02_39_766.log.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e290, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc [0192.614] GetFileType (hFile=0x1cc) returned 0x1 [0192.615] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x22f4e8 [0192.615] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e218 | out: lpNewFilePointer=0x0) returned 1 [0192.743] GetLastError () returned 0xb7 [0192.743] SetLastError (dwErrCode=0xb7) [0192.744] GetLastError () returned 0xb7 [0192.744] SetLastError (dwErrCode=0xb7) [0192.744] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e2dc | out: lpNewFilePointer=0x0) returned 1 [0192.744] WriteFile (in: hFile=0x1cc, lpBuffer=0x22f4e8*, nNumberOfBytesToWrite=0x103, lpNumberOfBytesWritten=0x173e340, lpOverlapped=0x0 | out: lpBuffer=0x22f4e8*, lpNumberOfBytesWritten=0x173e340*=0x103, lpOverlapped=0x0) returned 1 [0192.745] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f4e8 | out: hHeap=0x1f0000) returned 1 [0192.745] CloseHandle (hObject=0x1cc) returned 1 [0192.747] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5b0 | out: hHeap=0x1f0000) returned 1 [0192.747] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5a0 | out: hHeap=0x1f0000) returned 1 [0192.747] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2251e0 | out: hHeap=0x1f0000) returned 1 [0192.747] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224cc8 | out: hHeap=0x1f0000) returned 1 [0192.747] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b818 | out: hHeap=0x1f0000) returned 1 [0192.748] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205290 | out: hHeap=0x1f0000) returned 1 [0192.748] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab10 | out: hHeap=0x1f0000) returned 1 [0192.748] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20fec8 | out: hHeap=0x1f0000) returned 1 [0192.748] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2295b0 | out: hHeap=0x1f0000) returned 1 [0192.748] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22bac8 | out: hHeap=0x1f0000) returned 1 [0192.748] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b9a8 | out: hHeap=0x1f0000) returned 1 [0192.748] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0192.748] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22bc98 | out: hHeap=0x1f0000) returned 1 [0192.748] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ceb0 | out: hHeap=0x1f0000) returned 1 [0192.748] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228038 | out: hHeap=0x1f0000) returned 1 [0192.748] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c420 | out: hHeap=0x1f0000) returned 1 [0192.748] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffa0 | out: hHeap=0x1f0000) returned 1 [0192.748] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ba48 | out: hHeap=0x1f0000) returned 1 [0192.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c470 | out: hHeap=0x1f0000) returned 1 [0192.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff88 | out: hHeap=0x1f0000) returned 1 [0192.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fb070 | out: hHeap=0x1f0000) returned 1 [0192.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c450 | out: hHeap=0x1f0000) returned 1 [0192.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224bc0 | out: hHeap=0x1f0000) returned 1 [0192.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b9f8 | out: hHeap=0x1f0000) returned 1 [0192.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aaa8 | out: hHeap=0x1f0000) returned 1 [0192.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229328 | out: hHeap=0x1f0000) returned 1 [0192.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20bb98 | out: hHeap=0x1f0000) returned 1 [0192.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0192.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229250 | out: hHeap=0x1f0000) returned 1 [0192.750] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c3a0 | out: hHeap=0x1f0000) returned 1 [0192.750] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c4e0 | out: hHeap=0x1f0000) returned 1 [0192.750] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221000 | out: hHeap=0x1f0000) returned 1 [0192.750] CloseHandle (hObject=0x1c0) returned 1 [0192.750] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c4c0 | out: hHeap=0x1f0000) returned 1 [0192.751] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c440 | out: hHeap=0x1f0000) returned 1 [0192.751] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f40 | out: hHeap=0x1f0000) returned 1 [0192.751] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222008 | out: hHeap=0x1f0000) returned 1 [0192.751] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff70 | out: hHeap=0x1f0000) returned 1 [0192.751] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2050f0 | out: hHeap=0x1f0000) returned 1 [0192.752] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222410 | out: hHeap=0x1f0000) returned 1 [0192.752] CloseHandle (hObject=0x1bc) returned 1 [0192.752] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c460 | out: hHeap=0x1f0000) returned 1 [0192.752] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c4b0 | out: hHeap=0x1f0000) returned 1 [0192.752] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e88 | out: hHeap=0x1f0000) returned 1 [0192.752] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205210 | out: hHeap=0x1f0000) returned 1 [0192.752] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d98 | out: hHeap=0x1f0000) returned 1 [0192.753] CloseHandle (hObject=0x1b8) returned 1 [0192.753] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c370 | out: hHeap=0x1f0000) returned 1 [0192.753] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c530 | out: hHeap=0x1f0000) returned 1 [0192.753] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20e210 | out: hHeap=0x1f0000) returned 1 [0192.753] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c4f0 | out: hHeap=0x1f0000) returned 1 [0192.753] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c490 | out: hHeap=0x1f0000) returned 1 [0192.753] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c520 | out: hHeap=0x1f0000) returned 1 [0192.754] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c410 | out: hHeap=0x1f0000) returned 1 [0192.754] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c50 | out: hHeap=0x1f0000) returned 1 [0192.754] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f958 | out: hHeap=0x1f0000) returned 1 [0192.754] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20e030 | out: hHeap=0x1f0000) returned 1 [0192.754] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206808 | out: hHeap=0x1f0000) returned 1 [0192.754] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20fef8 | out: hHeap=0x1f0000) returned 1 [0192.754] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210000 | out: hHeap=0x1f0000) returned 1 [0192.754] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20e140 | out: hHeap=0x1f0000) returned 1 [0192.754] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21e740 | out: hHeap=0x1f0000) returned 1 [0192.754] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0192.754] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d248 | out: hHeap=0x1f0000) returned 1 [0192.754] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20daa8 | out: hHeap=0x1f0000) returned 1 [0192.754] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20de98 | out: hHeap=0x1f0000) returned 1 [0192.754] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214098 | out: hHeap=0x1f0000) returned 1 [0192.754] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b670 | out: hHeap=0x1f0000) returned 1 [0192.755] DeleteFileW (lpFileName="C:\\\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log" (normalized: "c:\\$getcurrent\\logs\\downlevel_2017_09_07_02_02_39_766.log")) returned 1 [0192.756] FindNextFileW (in: hFindFile=0x214450, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x973abb0f, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x980eecb6, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1774, dwReserved0=0x21d1fe, dwReserved1=0x240022, cFileName="oobe_2017_09_07_03_08_57_737.log", cAlternateFileName="OOBE_2~1.LOG")) returned 1 [0192.756] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x20b478 [0192.757] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0192.757] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x214d18 [0192.757] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0192.757] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ae50 | out: hHeap=0x1f0000) returned 1 [0192.757] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b478 | out: hHeap=0x1f0000) returned 1 [0192.933] CreateFileW (lpFileName="C:\\\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log" (normalized: "c:\\$getcurrent\\logs\\oobe_2017_09_07_03_08_57_737.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0192.933] GetFileType (hFile=0x1e4) returned 0x1 [0192.933] CloseHandle (hObject=0x1e4) returned 1 [0192.934] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x214d90 [0192.934] GetFileAttributesExW (in: lpFileName="C:\\\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log" (normalized: "c:\\$getcurrent\\logs\\oobe_2017_09_07_03_08_57_737.log"), fInfoLevelId=0x0, lpFileInformation=0x173eb6c | out: lpFileInformation=0x173eb6c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x973abb0f, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x980eecb6, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1774)) returned 1 [0192.935] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d90 | out: hHeap=0x1f0000) returned 1 [0192.935] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x214958 [0192.935] GetFileAttributesExW (in: lpFileName="C:\\\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log" (normalized: "c:\\$getcurrent\\logs\\oobe_2017_09_07_03_08_57_737.log"), fInfoLevelId=0x0, lpFileInformation=0x173eb7c | out: lpFileInformation=0x173eb7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x973abb0f, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x980eecb6, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1774)) returned 1 [0192.935] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214958 | out: hHeap=0x1f0000) returned 1 [0192.935] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2149d0 [0192.935] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2149d0 | out: hHeap=0x1f0000) returned 1 [0192.935] GetLastError () returned 0x0 [0192.935] SetLastError (dwErrCode=0x0) [0192.935] AreFileApisANSI () returned 1 [0192.936] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58420, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0192.936] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58420, cbMultiByte=4, lpWideCharStr=0x173eca8, cchWideChar=4 | out: lpWideCharStr=".exe") returned 4 [0192.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b340 [0192.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2229e8 [0192.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x226ec0 [0192.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2149d0 [0192.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228230 [0192.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b6d8 [0192.936] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x229be8) returned 1 [0192.941] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x22b6d8 | out: pbBuffer=0x22b6d8) returned 1 [0192.941] CryptReleaseContext (hProv=0x229be8, dwFlags=0x0) returned 1 [0192.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b6d8 | out: hHeap=0x1f0000) returned 1 [0192.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x235fa0 [0192.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x225048 [0192.942] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=35031053001) returned 1 [0192.942] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0192.942] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=35031086562) returned 1 [0192.942] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0192.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x228268 [0192.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x2371b8 [0192.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x225158 [0192.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x225268 [0192.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff70 [0192.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206808 [0192.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff28 [0192.943] GetLastError () returned 0x0 [0192.943] SetLastError (dwErrCode=0x0) [0192.943] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228268 | out: hHeap=0x1f0000) returned 1 [0192.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a3e0 [0192.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x222c40 [0192.943] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a3e0 | out: hHeap=0x1f0000) returned 1 [0192.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x11e) returned 0x210cd0 [0192.943] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222c40 | out: hHeap=0x1f0000) returned 1 [0192.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c4f0 [0192.944] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c420 [0192.944] CreateFileW (lpFileName="C:\\\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\$getcurrent\\logs\\oobe_2017_09_07_03_08_57_737.log.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e230, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0192.946] GetFileType (hFile=0x1e4) returned 0x1 [0192.946] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c430 [0192.946] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c4c0 [0192.947] CreateFileW (lpFileName="C:\\\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log" (normalized: "c:\\$getcurrent\\logs\\oobe_2017_09_07_03_08_57_737.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0192.947] GetFileType (hFile=0x1e8) returned 0x1 [0192.947] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x2052d0 [0192.947] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205130 [0192.947] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x222c40 [0192.947] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c440 [0192.948] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c450 [0192.949] CreateFileW (lpFileName="C:\\\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\$getcurrent\\logs\\oobe_2017_09_07_03_08_57_737.log.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0192.963] GetFileType (hFile=0x1ec) returned 0x1 [0192.964] GetLastError () returned 0xb7 [0192.964] SetLastError (dwErrCode=0xb7) [0192.964] GetLastError () returned 0xb7 [0192.964] SetLastError (dwErrCode=0xb7) [0192.964] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2052d0 | out: hHeap=0x1f0000) returned 1 [0192.964] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205130 | out: hHeap=0x1f0000) returned 1 [0192.964] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe4) returned 0x222cf8 [0192.964] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x2052d0 [0192.964] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x2052f0 [0192.964] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205130 [0192.965] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x222de8 [0192.965] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c710 [0192.965] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c5b0 [0192.966] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x38) returned 0x2142d0 [0192.966] CreateFileW (lpFileName="C:\\\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\$getcurrent\\logs\\oobe_2017_09_07_03_08_57_737.log.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0192.967] GetFileType (hFile=0x1f0) returned 0x1 [0192.967] GetLastError () returned 0xb7 [0192.967] SetLastError (dwErrCode=0xb7) [0192.967] GetLastError () returned 0xb7 [0192.968] SetLastError (dwErrCode=0xb7) [0192.968] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2052f0 | out: hHeap=0x1f0000) returned 1 [0192.968] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205130 | out: hHeap=0x1f0000) returned 1 [0192.968] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205130 [0192.968] GetLastError () returned 0xb7 [0192.968] SetLastError (dwErrCode=0xb7) [0192.968] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205130 | out: hHeap=0x1f0000) returned 1 [0192.968] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204fb0 [0192.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x2052f0 [0192.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205330 [0192.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb8) returned 0x222ea0 [0192.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c5a0 [0192.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c5d0 [0192.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x38) returned 0x214390 [0192.970] CreateFileW (lpFileName="C:\\\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log" (normalized: "c:\\$getcurrent\\logs\\oobe_2017_09_07_03_08_57_737.log"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1a4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0192.971] GetFileType (hFile=0x1f4) returned 0x1 [0192.971] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x22f4e8 [0192.971] ReadFile (in: hFile=0x1f4, lpBuffer=0x22f4e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e100, lpOverlapped=0x0 | out: lpBuffer=0x22f4e8*, lpNumberOfBytesRead=0x173e100*=0x1000, lpOverlapped=0x0) returned 1 [0192.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x222f60 [0192.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x2383d0 [0193.330] GetLastError () returned 0x0 [0193.331] SetLastError (dwErrCode=0x0) [0193.331] GetLastError () returned 0x0 [0193.331] SetLastError (dwErrCode=0x0) [0193.331] GetLastError () returned 0x0 [0193.332] SetLastError (dwErrCode=0x0) [0193.332] GetLastError () returned 0x0 [0193.332] SetLastError (dwErrCode=0x0) [0193.333] ReadFile (in: hFile=0x1f4, lpBuffer=0x22f4e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e190, lpOverlapped=0x0 | out: lpBuffer=0x22f4e8*, lpNumberOfBytesRead=0x173e190*=0x774, lpOverlapped=0x0) returned 1 [0193.333] WriteFile (in: hFile=0x1f0, lpBuffer=0x2383d0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x173dfd4, lpOverlapped=0x0 | out: lpBuffer=0x2383d0*, lpNumberOfBytesWritten=0x173dfd4*=0x1000, lpOverlapped=0x0) returned 1 [0193.335] GetLastError () returned 0x0 [0193.335] SetLastError (dwErrCode=0x0) [0193.336] ReadFile (in: hFile=0x1f4, lpBuffer=0x22f4e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e190, lpOverlapped=0x0 | out: lpBuffer=0x22f4e8*, lpNumberOfBytesRead=0x173e190*=0x0, lpOverlapped=0x0) returned 1 [0193.336] GetLastError () returned 0x0 [0193.336] SetLastError (dwErrCode=0x0) [0193.337] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffe8 [0193.337] GetLastError () returned 0x0 [0193.337] SetLastError (dwErrCode=0x0) [0193.337] WriteFile (in: hFile=0x1f0, lpBuffer=0x2383d0*, nNumberOfBytesToWrite=0x784, lpNumberOfBytesWritten=0x173e084, lpOverlapped=0x0 | out: lpBuffer=0x2383d0*, lpNumberOfBytesWritten=0x173e084*=0x784, lpOverlapped=0x0) returned 1 [0193.338] GetLastError () returned 0x0 [0193.338] SetLastError (dwErrCode=0x0) [0193.338] GetLastError () returned 0x0 [0193.339] SetLastError (dwErrCode=0x0) [0193.339] GetLastError () returned 0x0 [0193.339] SetLastError (dwErrCode=0x0) [0193.339] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2052f0 | out: hHeap=0x1f0000) returned 1 [0193.339] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205330 | out: hHeap=0x1f0000) returned 1 [0193.339] CloseHandle (hObject=0x1e4) returned 1 [0193.344] CloseHandle (hObject=0x1e8) returned 1 [0193.344] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c640 [0193.344] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c650 [0193.434] CreateFileW (lpFileName="C:\\\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log" (normalized: "c:\\$getcurrent\\logs\\oobe_2017_09_07_03_08_57_737.log"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0193.435] GetFileType (hFile=0x1f8) returned 0x1 [0193.436] GetLastError () returned 0xb7 [0193.436] SetLastError (dwErrCode=0xb7) [0193.437] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x240de0 [0193.437] GetLastError () returned 0xb7 [0193.437] SetLastError (dwErrCode=0xb7) [0193.438] WriteFile (in: hFile=0x1f8, lpBuffer=0x173cef4*, nNumberOfBytesToWrite=0x1, lpNumberOfBytesWritten=0x173ceec, lpOverlapped=0x0 | out: lpBuffer=0x173cef4*, lpNumberOfBytesWritten=0x173ceec*=0x1, lpOverlapped=0x0) returned 1 [0193.439] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x240de0 | out: hHeap=0x1f0000) returned 1 [0193.439] CloseHandle (hObject=0x1f8) returned 1 [0193.440] DeleteFileW (lpFileName="C:\\\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log" (normalized: "c:\\$getcurrent\\logs\\oobe_2017_09_07_03_08_57_737.log")) returned 0 [0193.440] GetLastError () returned 0x20 [0193.440] GetLastError () returned 0x20 [0193.440] SetLastError (dwErrCode=0x20) [0193.440] GetLastError () returned 0x20 [0193.440] SetLastError (dwErrCode=0x20) [0193.440] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2222e0 [0193.440] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b3b8 [0193.441] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b5e8 [0193.441] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x222208 [0193.441] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x2052f0 [0193.441] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205330 [0193.441] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x21c560 [0193.441] GetLastError () returned 0x20 [0193.441] SetLastError (dwErrCode=0x20) [0193.441] GetLastError () returned 0x20 [0193.441] SetLastError (dwErrCode=0x20) [0193.441] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2052f0 | out: hHeap=0x1f0000) returned 1 [0193.441] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205330 | out: hHeap=0x1f0000) returned 1 [0193.441] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x227ee8 [0193.442] GetLastError () returned 0x20 [0193.442] SetLastError (dwErrCode=0x20) [0193.442] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0193.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x227ee8 [0193.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22acb0 [0193.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x22b778 [0193.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x24afb0 [0193.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c660 [0193.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b638 [0193.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210018 [0193.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c670 [0193.443] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b4d0 [0193.443] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210078 [0193.443] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x22b4f8 [0193.443] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x24fa20 [0193.443] GetLastError () returned 0x20 [0193.443] SetLastError (dwErrCode=0x20) [0193.443] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0193.443] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x21c6b0 [0193.443] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x21c6f0 [0193.443] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c5c0 [0193.443] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c6f0 | out: hHeap=0x1f0000) returned 1 [0193.444] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c680 [0193.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5c0 | out: hHeap=0x1f0000) returned 1 [0193.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c6b0 | out: hHeap=0x1f0000) returned 1 [0193.444] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c5c0 [0193.444] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2100a8 [0193.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5c0 | out: hHeap=0x1f0000) returned 1 [0193.444] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210198 [0193.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2100a8 | out: hHeap=0x1f0000) returned 1 [0193.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c680 | out: hHeap=0x1f0000) returned 1 [0193.444] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2100a8 [0193.444] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0193.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2100a8 | out: hHeap=0x1f0000) returned 1 [0193.445] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2100a8 [0193.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0193.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0193.445] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101b0 [0193.445] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x205150 [0193.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0193.445] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x2052f0 [0193.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205150 | out: hHeap=0x1f0000) returned 1 [0193.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2100a8 | out: hHeap=0x1f0000) returned 1 [0193.445] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205150 [0193.445] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x22b548 [0193.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205150 | out: hHeap=0x1f0000) returned 1 [0193.445] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x205330 [0193.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b548 | out: hHeap=0x1f0000) returned 1 [0193.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2052f0 | out: hHeap=0x1f0000) returned 1 [0193.445] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x2052f0 [0193.445] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206868 [0193.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2052f0 | out: hHeap=0x1f0000) returned 1 [0193.446] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x22b6b0 [0193.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206868 | out: hHeap=0x1f0000) returned 1 [0193.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205330 | out: hHeap=0x1f0000) returned 1 [0193.446] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c570 [0193.446] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2100a8 [0193.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c570 | out: hHeap=0x1f0000) returned 1 [0193.446] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210258 [0193.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2100a8 | out: hHeap=0x1f0000) returned 1 [0193.446] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x205150 [0193.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0193.446] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206928 [0193.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205150 | out: hHeap=0x1f0000) returned 1 [0193.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206928 | out: hHeap=0x1f0000) returned 1 [0193.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b6b0 | out: hHeap=0x1f0000) returned 1 [0193.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b3b8 | out: hHeap=0x1f0000) returned 1 [0193.446] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0193.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24afb0 | out: hHeap=0x1f0000) returned 1 [0193.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b778 | out: hHeap=0x1f0000) returned 1 [0193.446] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0193.446] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b458 [0193.447] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x229ad8) returned 1 [0193.449] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x22b458 | out: pbBuffer=0x22b458) returned 1 [0193.449] CryptReleaseContext (hProv=0x229ad8, dwFlags=0x0) returned 1 [0193.449] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b458 | out: hHeap=0x1f0000) returned 1 [0193.449] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b548 [0193.449] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b6b0 [0193.449] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227f20 [0193.449] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b548 | out: hHeap=0x1f0000) returned 1 [0193.449] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0193.449] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227f20 | out: hHeap=0x1f0000) returned 1 [0193.449] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x239878 [0193.449] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210258 [0193.449] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x22abe0 [0193.449] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x22b7c8 [0193.449] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x24afb0 [0193.449] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205150 [0193.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a908 [0193.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x22b548 [0193.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x24fb28 [0193.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c570 [0193.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b430 [0193.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210210 [0193.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c680 [0193.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b6d8 [0193.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0193.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0193.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b6d8 | out: hHeap=0x1f0000) returned 1 [0193.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c680 | out: hHeap=0x1f0000) returned 1 [0193.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0193.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b430 | out: hHeap=0x1f0000) returned 1 [0193.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c570 | out: hHeap=0x1f0000) returned 1 [0193.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24fb28 | out: hHeap=0x1f0000) returned 1 [0193.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b548 | out: hHeap=0x1f0000) returned 1 [0193.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a908 | out: hHeap=0x1f0000) returned 1 [0193.451] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x227ba0 [0193.451] GetLastError () returned 0x0 [0193.451] SetLastError (dwErrCode=0x0) [0193.451] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ba0 | out: hHeap=0x1f0000) returned 1 [0193.451] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x227ba0 [0193.451] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0193.451] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0193.451] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0193.451] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0193.451] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0193.451] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0193.451] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x214550 [0193.451] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x24fb28 [0193.452] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0193.452] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0193.452] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0193.452] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0193.452] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x24fc30 [0193.452] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0193.452] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0193.452] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x24b0b8 [0193.452] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x24fd60 [0193.453] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x25fd40 [0193.453] QueryPerformanceCounter (in: lpPerformanceCount=0x173dee0 | out: lpPerformanceCount=0x173dee0*=35082235978) returned 1 [0193.454] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173df20 | out: lpSystemTimeAsFileTime=0x173df20) [0193.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x21c6f0 [0193.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b6d8 [0193.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x2052f0 [0193.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2052f0 | out: hHeap=0x1f0000) returned 1 [0193.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b6d8 | out: hHeap=0x1f0000) returned 1 [0193.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b6d8 [0193.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x2052f0 [0193.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2052f0 | out: hHeap=0x1f0000) returned 1 [0193.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b6d8 | out: hHeap=0x1f0000) returned 1 [0193.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c6f0 | out: hHeap=0x1f0000) returned 1 [0193.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24b0b8 | out: hHeap=0x1f0000) returned 1 [0193.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x227bd8 [0193.454] GetLastError () returned 0x0 [0193.455] SetLastError (dwErrCode=0x0) [0193.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227bd8 | out: hHeap=0x1f0000) returned 1 [0193.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0193.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0193.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0193.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b6d8 [0193.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b548 [0193.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0193.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0193.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b390 [0193.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0193.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x25fe50 [0193.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0193.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x260370 [0193.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0193.456] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x260590 [0193.456] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260370 | out: hHeap=0x1f0000) returned 1 [0193.456] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b480 [0193.456] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b728 [0193.456] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b480 | out: hHeap=0x1f0000) returned 1 [0193.456] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0193.456] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b728 | out: hHeap=0x1f0000) returned 1 [0193.456] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x260370 [0193.456] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x2607b0 [0193.456] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607b0 | out: hHeap=0x1f0000) returned 1 [0193.456] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260370 | out: hHeap=0x1f0000) returned 1 [0193.456] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0193.456] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101e0 [0193.456] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222058 [0193.456] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b728 [0193.456] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b3b8 [0193.456] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b750 [0193.456] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b318 [0193.456] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b3b8 | out: hHeap=0x1f0000) returned 1 [0193.456] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b728 | out: hHeap=0x1f0000) returned 1 [0193.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x260370 [0193.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b728 [0193.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b778 [0193.457] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b728 | out: hHeap=0x1f0000) returned 1 [0193.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0193.457] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b778 | out: hHeap=0x1f0000) returned 1 [0193.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206868 [0193.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x260590 [0193.457] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0193.457] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206868 | out: hHeap=0x1f0000) returned 1 [0193.457] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b390 | out: hHeap=0x1f0000) returned 1 [0193.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0193.457] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0193.457] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260370 | out: hHeap=0x1f0000) returned 1 [0193.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x2052f0 [0193.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0193.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x22e788 [0193.457] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b548 | out: hHeap=0x1f0000) returned 1 [0193.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x22e1c0 [0193.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e788 | out: hHeap=0x1f0000) returned 1 [0193.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b318 | out: hHeap=0x1f0000) returned 1 [0193.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b750 | out: hHeap=0x1f0000) returned 1 [0193.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222058 | out: hHeap=0x1f0000) returned 1 [0193.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0193.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2052f0 | out: hHeap=0x1f0000) returned 1 [0193.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0193.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0193.458] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x22dbf8 [0193.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22dbf8 | out: hHeap=0x1f0000) returned 1 [0193.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25fe50 | out: hHeap=0x1f0000) returned 1 [0193.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0193.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0193.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0193.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0193.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b6d8 | out: hHeap=0x1f0000) returned 1 [0193.459] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0193.459] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0193.459] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x22ee78 [0193.459] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x22e2e8 [0193.459] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ee78 | out: hHeap=0x1f0000) returned 1 [0193.459] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e2e8 | out: hHeap=0x1f0000) returned 1 [0193.459] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e1c0 | out: hHeap=0x1f0000) returned 1 [0193.459] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0193.459] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24fc30 | out: hHeap=0x1f0000) returned 1 [0193.459] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214550 | out: hHeap=0x1f0000) returned 1 [0193.459] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x25fe50 [0193.459] GetLastError () returned 0x0 [0193.459] SetLastError (dwErrCode=0x0) [0193.459] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ba0 | out: hHeap=0x1f0000) returned 1 [0193.459] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c6c0 [0193.459] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c6d0 [0193.460] CreateFileW (lpFileName="C:\\\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\$getcurrent\\logs\\oobe_2017_09_07_03_08_57_737.log.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e290, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0193.460] GetFileType (hFile=0x1f8) returned 0x1 [0193.461] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x23edd0 [0193.461] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e218 | out: lpNewFilePointer=0x0) returned 1 [0193.461] GetLastError () returned 0xb7 [0193.461] SetLastError (dwErrCode=0xb7) [0193.461] GetLastError () returned 0xb7 [0193.462] SetLastError (dwErrCode=0xb7) [0193.462] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e2dc | out: lpNewFilePointer=0x0) returned 1 [0193.462] WriteFile (in: hFile=0x1f8, lpBuffer=0x23edd0*, nNumberOfBytesToWrite=0x103, lpNumberOfBytesWritten=0x173e340, lpOverlapped=0x0 | out: lpBuffer=0x23edd0*, lpNumberOfBytesWritten=0x173e340*=0x103, lpOverlapped=0x0) returned 1 [0193.462] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x23edd0 | out: hHeap=0x1f0000) returned 1 [0193.462] CloseHandle (hObject=0x1f8) returned 1 [0193.781] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c6d0 | out: hHeap=0x1f0000) returned 1 [0193.781] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c6c0 | out: hHeap=0x1f0000) returned 1 [0193.781] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24fb28 | out: hHeap=0x1f0000) returned 1 [0193.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24afb0 | out: hHeap=0x1f0000) returned 1 [0193.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b7c8 | out: hHeap=0x1f0000) returned 1 [0193.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205150 | out: hHeap=0x1f0000) returned 1 [0193.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22abe0 | out: hHeap=0x1f0000) returned 1 [0193.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0193.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239878 | out: hHeap=0x1f0000) returned 1 [0193.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25fe50 | out: hHeap=0x1f0000) returned 1 [0193.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b6b0 | out: hHeap=0x1f0000) returned 1 [0193.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0193.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24fd60 | out: hHeap=0x1f0000) returned 1 [0193.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25fd40 | out: hHeap=0x1f0000) returned 1 [0193.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0193.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c560 | out: hHeap=0x1f0000) returned 1 [0193.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210078 | out: hHeap=0x1f0000) returned 1 [0193.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b4d0 | out: hHeap=0x1f0000) returned 1 [0193.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c670 | out: hHeap=0x1f0000) returned 1 [0193.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210018 | out: hHeap=0x1f0000) returned 1 [0193.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b638 | out: hHeap=0x1f0000) returned 1 [0193.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c660 | out: hHeap=0x1f0000) returned 1 [0193.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24fa20 | out: hHeap=0x1f0000) returned 1 [0193.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b4f8 | out: hHeap=0x1f0000) returned 1 [0193.783] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22acb0 | out: hHeap=0x1f0000) returned 1 [0193.783] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222208 | out: hHeap=0x1f0000) returned 1 [0193.783] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b5e8 | out: hHeap=0x1f0000) returned 1 [0193.783] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0193.783] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2222e0 | out: hHeap=0x1f0000) returned 1 [0193.783] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c650 | out: hHeap=0x1f0000) returned 1 [0193.783] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c640 | out: hHeap=0x1f0000) returned 1 [0193.783] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f4e8 | out: hHeap=0x1f0000) returned 1 [0193.783] CloseHandle (hObject=0x1f4) returned 1 [0193.783] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5d0 | out: hHeap=0x1f0000) returned 1 [0193.783] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5a0 | out: hHeap=0x1f0000) returned 1 [0193.783] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ea0 | out: hHeap=0x1f0000) returned 1 [0193.783] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222f60 | out: hHeap=0x1f0000) returned 1 [0193.783] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffe8 | out: hHeap=0x1f0000) returned 1 [0193.783] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204fb0 | out: hHeap=0x1f0000) returned 1 [0193.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383d0 | out: hHeap=0x1f0000) returned 1 [0193.784] CloseHandle (hObject=0x1f0) returned 1 [0193.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5b0 | out: hHeap=0x1f0000) returned 1 [0193.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c710 | out: hHeap=0x1f0000) returned 1 [0193.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222de8 | out: hHeap=0x1f0000) returned 1 [0193.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2052d0 | out: hHeap=0x1f0000) returned 1 [0193.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222cf8 | out: hHeap=0x1f0000) returned 1 [0193.784] CloseHandle (hObject=0x1ec) returned 1 [0193.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c450 | out: hHeap=0x1f0000) returned 1 [0193.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c440 | out: hHeap=0x1f0000) returned 1 [0193.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222c40 | out: hHeap=0x1f0000) returned 1 [0193.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c4c0 | out: hHeap=0x1f0000) returned 1 [0193.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c430 | out: hHeap=0x1f0000) returned 1 [0193.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c420 | out: hHeap=0x1f0000) returned 1 [0193.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c4f0 | out: hHeap=0x1f0000) returned 1 [0193.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0193.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2371b8 | out: hHeap=0x1f0000) returned 1 [0193.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225158 | out: hHeap=0x1f0000) returned 1 [0193.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206808 | out: hHeap=0x1f0000) returned 1 [0193.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff28 | out: hHeap=0x1f0000) returned 1 [0193.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff70 | out: hHeap=0x1f0000) returned 1 [0193.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225268 | out: hHeap=0x1f0000) returned 1 [0193.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235fa0 | out: hHeap=0x1f0000) returned 1 [0193.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225048 | out: hHeap=0x1f0000) returned 1 [0193.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228230 | out: hHeap=0x1f0000) returned 1 [0193.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2149d0 | out: hHeap=0x1f0000) returned 1 [0193.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226ec0 | out: hHeap=0x1f0000) returned 1 [0193.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2229e8 | out: hHeap=0x1f0000) returned 1 [0193.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b340 | out: hHeap=0x1f0000) returned 1 [0193.786] DeleteFileW (lpFileName="C:\\\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log" (normalized: "c:\\$getcurrent\\logs\\oobe_2017_09_07_03_08_57_737.log")) returned 1 [0193.788] FindNextFileW (in: hFindFile=0x214450, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c5a0a89, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x9c5a0a89, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xbb3747bd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x21d1fe, dwReserved1=0x240022, cFileName="PartnerSetupCompleteResult.log", cAlternateFileName="PARTNE~1.LOG")) returned 1 [0193.788] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2229e8 [0193.788] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d248 [0193.788] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2149d0 [0193.788] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d248 | out: hHeap=0x1f0000) returned 1 [0193.788] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d18 | out: hHeap=0x1f0000) returned 1 [0193.788] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2229e8 | out: hHeap=0x1f0000) returned 1 [0193.789] CreateFileW (lpFileName="C:\\\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log" (normalized: "c:\\$getcurrent\\logs\\partnersetupcompleteresult.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0193.789] GetFileType (hFile=0x1ec) returned 0x1 [0193.789] CloseHandle (hObject=0x1ec) returned 1 [0193.789] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x214ef8 [0193.789] GetFileAttributesExW (in: lpFileName="C:\\\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log" (normalized: "c:\\$getcurrent\\logs\\partnersetupcompleteresult.log"), fInfoLevelId=0x0, lpFileInformation=0x173eb6c | out: lpFileInformation=0x173eb6c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c5a0a89, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x9c5a0a89, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xbb3747bd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x28)) returned 1 [0193.789] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214ef8 | out: hHeap=0x1f0000) returned 1 [0193.789] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x214fe8 [0193.789] GetFileAttributesExW (in: lpFileName="C:\\\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log" (normalized: "c:\\$getcurrent\\logs\\partnersetupcompleteresult.log"), fInfoLevelId=0x0, lpFileInformation=0x173eb7c | out: lpFileInformation=0x173eb7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c5a0a89, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x9c5a0a89, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xbb3747bd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x28)) returned 1 [0193.790] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214fe8 | out: hHeap=0x1f0000) returned 1 [0193.790] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x214b38 [0193.790] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214b38 | out: hHeap=0x1f0000) returned 1 [0193.790] GetLastError () returned 0x0 [0193.790] SetLastError (dwErrCode=0x0) [0193.790] AreFileApisANSI () returned 1 [0193.790] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58420, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0193.790] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58420, cbMultiByte=4, lpWideCharStr=0x173eca8, cchWideChar=4 | out: lpWideCharStr=".exe") returned 4 [0193.790] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b7c8 [0193.790] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2229e8 [0193.790] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e690 [0193.790] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x214c28 [0193.790] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cfa8 [0193.790] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b4f8 [0193.790] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x229830) returned 1 [0193.792] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x22b4f8 | out: pbBuffer=0x22b4f8) returned 1 [0193.792] CryptReleaseContext (hProv=0x229830, dwFlags=0x0) returned 1 [0193.792] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b4f8 | out: hHeap=0x1f0000) returned 1 [0193.792] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x256f90 [0193.793] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x260188 [0193.793] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=35116152384) returned 1 [0193.793] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0193.793] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=35116170771) returned 1 [0193.793] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0193.793] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x21d050 [0193.793] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x251068 [0193.793] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x24afb0 [0193.793] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x25fd40 [0193.793] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff28 [0193.793] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2065f8 [0193.793] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210078 [0193.793] GetLastError () returned 0x0 [0193.794] SetLastError (dwErrCode=0x0) [0193.794] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0193.794] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a468 [0193.794] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x25fe10 [0193.794] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a468 | out: hHeap=0x1f0000) returned 1 [0193.794] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x11c) returned 0x2105e0 [0193.794] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25fe10 | out: hHeap=0x1f0000) returned 1 [0193.794] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c420 [0193.794] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c430 [0193.795] CreateFileW (lpFileName="C:\\\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\$getcurrent\\logs\\partnersetupcompleteresult.log.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e230, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0193.795] GetFileType (hFile=0x1ec) returned 0x1 [0193.795] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c440 [0193.796] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c450 [0193.796] CreateFileW (lpFileName="C:\\\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log" (normalized: "c:\\$getcurrent\\logs\\partnersetupcompleteresult.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0193.796] GetFileType (hFile=0x1f0) returned 0x1 [0193.796] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x2052d0 [0193.796] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205150 [0193.796] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x24b0c0 [0193.797] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c4f0 [0193.797] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c4c0 [0193.797] CreateFileW (lpFileName="C:\\\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\$getcurrent\\logs\\partnersetupcompleteresult.log.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0193.797] GetFileType (hFile=0x1f4) returned 0x1 [0193.798] GetLastError () returned 0xb7 [0193.798] SetLastError (dwErrCode=0xb7) [0193.798] GetLastError () returned 0xb7 [0193.798] SetLastError (dwErrCode=0xb7) [0193.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2052d0 | out: hHeap=0x1f0000) returned 1 [0193.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205150 | out: hHeap=0x1f0000) returned 1 [0193.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe4) returned 0x25fe10 [0193.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x2052d0 [0193.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205150 [0193.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x2052f0 [0193.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x24fa20 [0193.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c640 [0193.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c650 [0193.799] CreateFileW (lpFileName="C:\\\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\$getcurrent\\logs\\partnersetupcompleteresult.log.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0193.799] GetFileType (hFile=0x1f8) returned 0x1 [0193.799] GetLastError () returned 0xb7 [0193.800] SetLastError (dwErrCode=0xb7) [0193.800] GetLastError () returned 0xb7 [0193.800] SetLastError (dwErrCode=0xb7) [0193.800] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205150 | out: hHeap=0x1f0000) returned 1 [0193.800] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2052f0 | out: hHeap=0x1f0000) returned 1 [0193.800] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205150 [0193.800] GetLastError () returned 0xb7 [0193.800] SetLastError (dwErrCode=0xb7) [0193.800] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205150 | out: hHeap=0x1f0000) returned 1 [0193.800] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x2052f0 [0193.800] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205150 [0193.800] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205330 [0193.801] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb8) returned 0x24fad8 [0193.801] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c6f0 [0193.801] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c6b0 [0193.801] CreateFileW (lpFileName="C:\\\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log" (normalized: "c:\\$getcurrent\\logs\\partnersetupcompleteresult.log"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1a4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8 [0193.801] GetFileType (hFile=0x1c8) returned 0x1 [0193.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x240de0 [0193.802] ReadFile (in: hFile=0x1c8, lpBuffer=0x240de0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e100, lpOverlapped=0x0 | out: lpBuffer=0x240de0*, lpNumberOfBytesRead=0x173e100*=0x28, lpOverlapped=0x0) returned 1 [0193.803] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x222c40 [0193.803] ReadFile (in: hFile=0x1c8, lpBuffer=0x240de0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e190, lpOverlapped=0x0 | out: lpBuffer=0x240de0*, lpNumberOfBytesRead=0x173e190*=0x0, lpOverlapped=0x0) returned 1 [0193.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x23fdd8 [0193.804] GetLastError () returned 0x0 [0193.804] SetLastError (dwErrCode=0x0) [0193.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff70 [0193.804] GetLastError () returned 0x0 [0193.804] SetLastError (dwErrCode=0x0) [0193.804] WriteFile (in: hFile=0x1f8, lpBuffer=0x23fdd8*, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0x173e084, lpOverlapped=0x0 | out: lpBuffer=0x23fdd8*, lpNumberOfBytesWritten=0x173e084*=0x38, lpOverlapped=0x0) returned 1 [0193.806] GetLastError () returned 0x0 [0193.806] SetLastError (dwErrCode=0x0) [0193.806] GetLastError () returned 0x0 [0193.807] SetLastError (dwErrCode=0x0) [0193.807] GetLastError () returned 0x0 [0193.807] SetLastError (dwErrCode=0x0) [0193.807] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205150 | out: hHeap=0x1f0000) returned 1 [0193.807] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205330 | out: hHeap=0x1f0000) returned 1 [0193.807] CloseHandle (hObject=0x1ec) returned 1 [0193.811] CloseHandle (hObject=0x1f0) returned 1 [0193.811] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c680 [0193.812] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c570 [0193.812] CreateFileW (lpFileName="C:\\\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log" (normalized: "c:\\$getcurrent\\logs\\partnersetupcompleteresult.log"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0193.813] GetFileType (hFile=0x1f0) returned 0x1 [0193.814] GetLastError () returned 0xb7 [0193.814] SetLastError (dwErrCode=0xb7) [0193.814] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x23adb0 [0193.814] GetLastError () returned 0xb7 [0193.814] SetLastError (dwErrCode=0xb7) [0193.814] WriteFile (in: hFile=0x1f0, lpBuffer=0x173cef4*, nNumberOfBytesToWrite=0x1, lpNumberOfBytesWritten=0x173ceec, lpOverlapped=0x0 | out: lpBuffer=0x173cef4*, lpNumberOfBytesWritten=0x173ceec*=0x1, lpOverlapped=0x0) returned 1 [0193.817] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x23adb0 | out: hHeap=0x1f0000) returned 1 [0193.817] CloseHandle (hObject=0x1f0) returned 1 [0193.818] DeleteFileW (lpFileName="C:\\\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log" (normalized: "c:\\$getcurrent\\logs\\partnersetupcompleteresult.log")) returned 0 [0193.818] GetLastError () returned 0x20 [0193.818] GetLastError () returned 0x20 [0193.818] SetLastError (dwErrCode=0x20) [0193.818] GetLastError () returned 0x20 [0193.818] SetLastError (dwErrCode=0x20) [0193.818] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222208 [0193.818] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b5e8 [0193.818] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b6b0 [0193.818] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x221fc8 [0193.818] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205330 [0193.818] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205150 [0193.818] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x21c5b0 [0193.818] GetLastError () returned 0x20 [0193.818] SetLastError (dwErrCode=0x20) [0193.819] GetLastError () returned 0x20 [0193.819] SetLastError (dwErrCode=0x20) [0193.819] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205330 | out: hHeap=0x1f0000) returned 1 [0193.819] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205150 | out: hHeap=0x1f0000) returned 1 [0193.819] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x21d050 [0193.819] GetLastError () returned 0x20 [0193.819] SetLastError (dwErrCode=0x20) [0193.819] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0193.819] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x21d050 [0193.819] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22aaa8 [0193.819] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x22b3e0 [0193.819] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x24fb98 [0193.819] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c5a0 [0193.819] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b458 [0193.819] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffe8 [0193.819] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c580 [0193.819] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b2f0 [0193.819] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210018 [0193.819] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x22b4d0 [0193.819] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x225048 [0193.819] GetLastError () returned 0x20 [0193.819] SetLastError (dwErrCode=0x20) [0193.820] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0193.820] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x21c560 [0193.820] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x21c5c0 [0193.820] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c660 [0193.820] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5c0 | out: hHeap=0x1f0000) returned 1 [0193.820] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c710 [0193.820] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c660 | out: hHeap=0x1f0000) returned 1 [0193.820] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c560 | out: hHeap=0x1f0000) returned 1 [0193.820] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c5c0 [0193.820] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2100a8 [0193.820] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5c0 | out: hHeap=0x1f0000) returned 1 [0193.820] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210240 [0193.820] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2100a8 | out: hHeap=0x1f0000) returned 1 [0193.820] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c710 | out: hHeap=0x1f0000) returned 1 [0193.820] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2100a8 [0193.820] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210210 [0193.820] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2100a8 | out: hHeap=0x1f0000) returned 1 [0193.820] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2100a8 [0193.820] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0193.820] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210240 | out: hHeap=0x1f0000) returned 1 [0193.820] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210228 [0193.820] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x205150 [0193.821] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210228 | out: hHeap=0x1f0000) returned 1 [0193.821] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205330 [0193.821] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205150 | out: hHeap=0x1f0000) returned 1 [0193.821] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2100a8 | out: hHeap=0x1f0000) returned 1 [0193.821] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204fb0 [0193.821] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x22b4f8 [0193.821] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204fb0 | out: hHeap=0x1f0000) returned 1 [0193.821] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204fb0 [0193.821] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b4f8 | out: hHeap=0x1f0000) returned 1 [0193.821] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205330 | out: hHeap=0x1f0000) returned 1 [0193.821] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x205330 [0193.821] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206868 [0193.821] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205330 | out: hHeap=0x1f0000) returned 1 [0193.821] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x22b4f8 [0193.821] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206868 | out: hHeap=0x1f0000) returned 1 [0193.821] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204fb0 | out: hHeap=0x1f0000) returned 1 [0193.821] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c690 [0193.821] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2100a8 [0193.821] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c690 | out: hHeap=0x1f0000) returned 1 [0193.821] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210258 [0193.821] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2100a8 | out: hHeap=0x1f0000) returned 1 [0193.821] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x205330 [0193.821] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0193.822] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x2066b8 [0193.822] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205330 | out: hHeap=0x1f0000) returned 1 [0193.822] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2066b8 | out: hHeap=0x1f0000) returned 1 [0193.822] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b4f8 | out: hHeap=0x1f0000) returned 1 [0193.822] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b5e8 | out: hHeap=0x1f0000) returned 1 [0193.822] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0193.822] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24fb98 | out: hHeap=0x1f0000) returned 1 [0193.822] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b3e0 | out: hHeap=0x1f0000) returned 1 [0193.822] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0193.822] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b318 [0193.822] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x229c70) returned 1 [0193.824] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x22b318 | out: pbBuffer=0x22b318) returned 1 [0193.824] CryptReleaseContext (hProv=0x229c70, dwFlags=0x0) returned 1 [0193.824] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b318 | out: hHeap=0x1f0000) returned 1 [0193.824] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b4f8 [0193.824] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b318 [0193.824] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d248 [0193.824] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b4f8 | out: hHeap=0x1f0000) returned 1 [0193.824] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0193.824] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d248 | out: hHeap=0x1f0000) returned 1 [0193.824] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x239ae0 [0193.824] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0193.825] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x22aa40 [0193.825] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x22b340 [0193.825] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x24fb98 [0193.825] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205150 [0193.825] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22aeb8 [0193.825] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x22b5e8 [0193.825] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x225150 [0193.825] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c660 [0193.825] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b3e0 [0193.825] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210240 [0193.825] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c670 [0193.825] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b4f8 [0193.825] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0193.825] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0193.825] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b4f8 | out: hHeap=0x1f0000) returned 1 [0193.825] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c670 | out: hHeap=0x1f0000) returned 1 [0193.825] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210240 | out: hHeap=0x1f0000) returned 1 [0193.825] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b3e0 | out: hHeap=0x1f0000) returned 1 [0193.825] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c660 | out: hHeap=0x1f0000) returned 1 [0193.825] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225150 | out: hHeap=0x1f0000) returned 1 [0193.825] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b5e8 | out: hHeap=0x1f0000) returned 1 [0193.825] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aeb8 | out: hHeap=0x1f0000) returned 1 [0193.825] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x21d248 [0193.826] GetLastError () returned 0x0 [0193.826] SetLastError (dwErrCode=0x0) [0193.826] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d248 | out: hHeap=0x1f0000) returned 1 [0193.826] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x21d248 [0193.826] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0193.826] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0193.826] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0193.826] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0193.826] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0193.826] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0193.826] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x214690 [0193.826] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x225150 [0193.826] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0193.826] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0193.826] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0193.826] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0193.826] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x225258 [0193.826] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0193.826] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0193.826] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x2300c8 [0193.826] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x258298 [0193.826] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x223048 [0193.827] QueryPerformanceCounter (in: lpPerformanceCount=0x173dee0 | out: lpPerformanceCount=0x173dee0*=35119544295) returned 1 [0193.827] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173df20 | out: lpSystemTimeAsFileTime=0x173df20) [0193.827] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x21c5c0 [0193.827] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b5e8 [0193.827] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204fb0 [0193.827] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204fb0 | out: hHeap=0x1f0000) returned 1 [0193.827] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b5e8 | out: hHeap=0x1f0000) returned 1 [0193.827] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b4f8 [0193.827] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205330 [0193.827] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205330 | out: hHeap=0x1f0000) returned 1 [0193.827] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b4f8 | out: hHeap=0x1f0000) returned 1 [0193.827] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5c0 | out: hHeap=0x1f0000) returned 1 [0194.140] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0194.140] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x1ff058 [0194.140] GetLastError () returned 0x0 [0194.141] SetLastError (dwErrCode=0x0) [0194.141] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1ff058 | out: hHeap=0x1f0000) returned 1 [0194.141] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0194.141] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0194.141] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0194.141] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b3e0 [0194.141] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b5e8 [0194.141] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0194.141] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0194.141] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b638 [0194.141] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0194.141] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x260498 [0194.141] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0194.141] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x223158 [0194.141] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0194.141] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2609b8 [0194.141] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223158 | out: hHeap=0x1f0000) returned 1 [0194.142] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b750 [0194.142] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b778 [0194.142] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b750 | out: hHeap=0x1f0000) returned 1 [0194.142] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0194.142] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b778 | out: hHeap=0x1f0000) returned 1 [0194.142] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x223158 [0194.142] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x223bb8 [0194.142] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223bb8 | out: hHeap=0x1f0000) returned 1 [0194.142] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223158 | out: hHeap=0x1f0000) returned 1 [0194.142] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609b8 | out: hHeap=0x1f0000) returned 1 [0194.142] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101f8 [0194.142] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221d40 [0194.142] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b750 [0194.142] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b778 [0194.142] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b840 [0194.142] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b8f0 [0194.142] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b778 | out: hHeap=0x1f0000) returned 1 [0194.143] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b750 | out: hHeap=0x1f0000) returned 1 [0194.143] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x223158 [0194.143] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b670 [0194.143] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b9e0 [0194.143] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b670 | out: hHeap=0x1f0000) returned 1 [0194.143] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0194.143] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b9e0 | out: hHeap=0x1f0000) returned 1 [0194.143] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2068c8 [0194.143] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x2609b8 [0194.143] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609b8 | out: hHeap=0x1f0000) returned 1 [0194.143] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2068c8 | out: hHeap=0x1f0000) returned 1 [0194.143] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b638 | out: hHeap=0x1f0000) returned 1 [0194.143] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0194.143] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0194.143] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223158 | out: hHeap=0x1f0000) returned 1 [0194.143] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x205290 [0194.143] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0194.143] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x237810 [0194.144] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b5e8 | out: hHeap=0x1f0000) returned 1 [0194.144] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x236da8 [0194.144] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237810 | out: hHeap=0x1f0000) returned 1 [0194.144] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b8f0 | out: hHeap=0x1f0000) returned 1 [0194.144] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b840 | out: hHeap=0x1f0000) returned 1 [0194.144] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221d40 | out: hHeap=0x1f0000) returned 1 [0194.144] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0194.144] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205290 | out: hHeap=0x1f0000) returned 1 [0194.144] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101f8 | out: hHeap=0x1f0000) returned 1 [0194.144] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0194.144] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x237370 [0194.144] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237370 | out: hHeap=0x1f0000) returned 1 [0194.144] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260498 | out: hHeap=0x1f0000) returned 1 [0194.144] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0194.144] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0194.144] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0194.144] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0194.145] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b3e0 | out: hHeap=0x1f0000) returned 1 [0194.145] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0194.145] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0194.145] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2360f0 [0194.145] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x237370 [0194.145] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2360f0 | out: hHeap=0x1f0000) returned 1 [0194.145] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237370 | out: hHeap=0x1f0000) returned 1 [0194.145] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236da8 | out: hHeap=0x1f0000) returned 1 [0194.145] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0194.145] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225258 | out: hHeap=0x1f0000) returned 1 [0194.145] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214690 | out: hHeap=0x1f0000) returned 1 [0194.145] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x225258 [0194.145] GetLastError () returned 0x0 [0194.146] SetLastError (dwErrCode=0x0) [0194.146] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d248 | out: hHeap=0x1f0000) returned 1 [0194.146] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c660 [0194.146] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c670 [0194.147] CreateFileW (lpFileName="C:\\\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\$getcurrent\\logs\\partnersetupcompleteresult.log.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e290, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0194.147] GetFileType (hFile=0x214) returned 0x1 [0194.147] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x23edd0 [0194.147] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e218 | out: lpNewFilePointer=0x0) returned 1 [0194.148] GetLastError () returned 0xb7 [0194.148] SetLastError (dwErrCode=0xb7) [0194.148] GetLastError () returned 0xb7 [0194.148] SetLastError (dwErrCode=0xb7) [0194.148] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e2dc | out: lpNewFilePointer=0x0) returned 1 [0194.148] WriteFile (in: hFile=0x214, lpBuffer=0x23edd0*, nNumberOfBytesToWrite=0x103, lpNumberOfBytesWritten=0x173e340, lpOverlapped=0x0 | out: lpBuffer=0x23edd0*, lpNumberOfBytesWritten=0x173e340*=0x103, lpOverlapped=0x0) returned 1 [0194.149] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x23edd0 | out: hHeap=0x1f0000) returned 1 [0194.149] CloseHandle (hObject=0x214) returned 1 [0194.151] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c670 | out: hHeap=0x1f0000) returned 1 [0194.151] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c660 | out: hHeap=0x1f0000) returned 1 [0194.151] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225150 | out: hHeap=0x1f0000) returned 1 [0194.152] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24fb98 | out: hHeap=0x1f0000) returned 1 [0194.152] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b340 | out: hHeap=0x1f0000) returned 1 [0194.152] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205150 | out: hHeap=0x1f0000) returned 1 [0194.152] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aa40 | out: hHeap=0x1f0000) returned 1 [0194.152] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0194.152] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239ae0 | out: hHeap=0x1f0000) returned 1 [0194.152] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225258 | out: hHeap=0x1f0000) returned 1 [0194.152] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b318 | out: hHeap=0x1f0000) returned 1 [0194.152] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0194.152] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x258298 | out: hHeap=0x1f0000) returned 1 [0194.152] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223048 | out: hHeap=0x1f0000) returned 1 [0194.152] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0194.152] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5b0 | out: hHeap=0x1f0000) returned 1 [0194.152] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210018 | out: hHeap=0x1f0000) returned 1 [0194.152] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b2f0 | out: hHeap=0x1f0000) returned 1 [0194.152] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c580 | out: hHeap=0x1f0000) returned 1 [0194.152] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffe8 | out: hHeap=0x1f0000) returned 1 [0194.152] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b458 | out: hHeap=0x1f0000) returned 1 [0194.153] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5a0 | out: hHeap=0x1f0000) returned 1 [0194.153] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225048 | out: hHeap=0x1f0000) returned 1 [0194.153] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b4d0 | out: hHeap=0x1f0000) returned 1 [0194.153] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aaa8 | out: hHeap=0x1f0000) returned 1 [0194.153] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221fc8 | out: hHeap=0x1f0000) returned 1 [0194.153] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b6b0 | out: hHeap=0x1f0000) returned 1 [0194.153] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0194.153] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222208 | out: hHeap=0x1f0000) returned 1 [0194.153] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c570 | out: hHeap=0x1f0000) returned 1 [0194.153] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c680 | out: hHeap=0x1f0000) returned 1 [0194.153] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x240de0 | out: hHeap=0x1f0000) returned 1 [0194.153] CloseHandle (hObject=0x1c8) returned 1 [0194.154] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c6b0 | out: hHeap=0x1f0000) returned 1 [0194.154] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c6f0 | out: hHeap=0x1f0000) returned 1 [0194.154] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24fad8 | out: hHeap=0x1f0000) returned 1 [0194.154] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222c40 | out: hHeap=0x1f0000) returned 1 [0194.154] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff70 | out: hHeap=0x1f0000) returned 1 [0194.154] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2052f0 | out: hHeap=0x1f0000) returned 1 [0194.154] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x23fdd8 | out: hHeap=0x1f0000) returned 1 [0194.154] CloseHandle (hObject=0x1f8) returned 1 [0194.155] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c650 | out: hHeap=0x1f0000) returned 1 [0194.155] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c640 | out: hHeap=0x1f0000) returned 1 [0194.155] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24fa20 | out: hHeap=0x1f0000) returned 1 [0194.155] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2052d0 | out: hHeap=0x1f0000) returned 1 [0194.155] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25fe10 | out: hHeap=0x1f0000) returned 1 [0194.155] CloseHandle (hObject=0x1f4) returned 1 [0194.157] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c4c0 | out: hHeap=0x1f0000) returned 1 [0194.157] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c4f0 | out: hHeap=0x1f0000) returned 1 [0194.157] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24b0c0 | out: hHeap=0x1f0000) returned 1 [0194.157] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c450 | out: hHeap=0x1f0000) returned 1 [0194.157] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c440 | out: hHeap=0x1f0000) returned 1 [0194.157] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c430 | out: hHeap=0x1f0000) returned 1 [0194.157] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c420 | out: hHeap=0x1f0000) returned 1 [0194.157] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0194.158] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x251068 | out: hHeap=0x1f0000) returned 1 [0194.158] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24afb0 | out: hHeap=0x1f0000) returned 1 [0194.158] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2065f8 | out: hHeap=0x1f0000) returned 1 [0194.158] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210078 | out: hHeap=0x1f0000) returned 1 [0194.158] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff28 | out: hHeap=0x1f0000) returned 1 [0194.158] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25fd40 | out: hHeap=0x1f0000) returned 1 [0194.158] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x256f90 | out: hHeap=0x1f0000) returned 1 [0194.158] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260188 | out: hHeap=0x1f0000) returned 1 [0194.158] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cfa8 | out: hHeap=0x1f0000) returned 1 [0194.158] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c28 | out: hHeap=0x1f0000) returned 1 [0194.158] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e690 | out: hHeap=0x1f0000) returned 1 [0194.158] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2229e8 | out: hHeap=0x1f0000) returned 1 [0194.159] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b7c8 | out: hHeap=0x1f0000) returned 1 [0194.159] DeleteFileW (lpFileName="C:\\\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log" (normalized: "c:\\$getcurrent\\logs\\partnersetupcompleteresult.log")) returned 1 [0194.160] FindNextFileW (in: hFindFile=0x214450, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c5a0a89, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x9c5a0a89, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xbb3747bd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x21d1fe, dwReserved1=0x240022, cFileName="PartnerSetupCompleteResult.log", cAlternateFileName="PARTNE~1.LOG")) returned 0 [0194.160] FindClose (in: hFindFile=0x214450 | out: hFindFile=0x214450) returned 1 [0194.161] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2149d0 | out: hHeap=0x1f0000) returned 1 [0194.161] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20d778 | out: hHeap=0x1f0000) returned 1 [0194.161] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b8c8 | out: hHeap=0x1f0000) returned 1 [0194.161] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213d38 | out: hHeap=0x1f0000) returned 1 [0194.161] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2229e8 [0194.161] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b670 [0194.161] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e9c0 [0194.161] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222208 [0194.161] FindFirstFileW (in: lpFileName="C:\\\\$GetCurrent\\SafeOS\\*", lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x21d1fe, dwReserved1=0x240022, cFileName=".", cAlternateFileName="")) returned 0x214450 [0194.161] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1feed0 [0194.161] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x226058 [0194.162] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1feed0 | out: hHeap=0x1f0000) returned 1 [0194.162] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222208 | out: hHeap=0x1f0000) returned 1 [0194.162] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0194.162] FindNextFileW (in: hFindFile=0x214450, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x21d1fe, dwReserved1=0x240022, cFileName="..", cAlternateFileName="")) returned 1 [0194.162] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1feed0 [0194.162] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x2260f8 [0194.162] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1feed0 | out: hHeap=0x1f0000) returned 1 [0194.162] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226058 | out: hHeap=0x1f0000) returned 1 [0194.162] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0194.162] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0194.162] FindNextFileW (in: hFindFile=0x214450, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9568f13f, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x9568f13f, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0xfb529700, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x232c8, dwReserved0=0x21d1fe, dwReserved1=0x240022, cFileName="GetCurrentOOBE.dll", cAlternateFileName="GETCUR~1.DLL")) returned 1 [0194.162] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1feed0 [0194.162] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0194.162] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a9d8 [0194.162] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0194.163] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2260f8 | out: hHeap=0x1f0000) returned 1 [0194.163] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1feed0 | out: hHeap=0x1f0000) returned 1 [0194.163] CreateFileW (lpFileName="C:\\\\$GetCurrent\\SafeOS\\GetCurrentOOBE.dll" (normalized: "c:\\$getcurrent\\safeos\\getcurrentoobe.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0194.163] GetFileType (hFile=0x1f4) returned 0x1 [0194.163] CloseHandle (hObject=0x1f4) returned 1 [0194.164] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22abe0 [0194.164] GetFileAttributesExW (in: lpFileName="C:\\\\$GetCurrent\\SafeOS\\GetCurrentOOBE.dll" (normalized: "c:\\$getcurrent\\safeos\\getcurrentoobe.dll"), fInfoLevelId=0x0, lpFileInformation=0x173eb6c | out: lpFileInformation=0x173eb6c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9568f13f, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x9568f13f, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0xfb529700, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x232c8)) returned 1 [0194.164] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22abe0 | out: hHeap=0x1f0000) returned 1 [0194.164] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ae50 [0194.164] GetFileAttributesExW (in: lpFileName="C:\\\\$GetCurrent\\SafeOS\\GetCurrentOOBE.dll" (normalized: "c:\\$getcurrent\\safeos\\getcurrentoobe.dll"), fInfoLevelId=0x0, lpFileInformation=0x173eb7c | out: lpFileInformation=0x173eb7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9568f13f, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x9568f13f, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0xfb529700, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x232c8)) returned 1 [0194.164] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ae50 | out: hHeap=0x1f0000) returned 1 [0194.164] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ae50 [0194.164] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ae50 | out: hHeap=0x1f0000) returned 1 [0194.164] GetLastError () returned 0x0 [0194.165] SetLastError (dwErrCode=0x0) [0194.165] AreFileApisANSI () returned 1 [0194.165] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58420, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0194.165] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58420, cbMultiByte=4, lpWideCharStr=0x173eca8, cchWideChar=4 | out: lpWideCharStr=".exe") returned 4 [0194.165] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b8c8 [0194.165] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221d40 [0194.165] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d6a0 [0194.165] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a838 [0194.165] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1feed0 [0194.165] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b8f0 [0194.165] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x22a1c0) returned 1 [0194.168] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x20b8f0 | out: pbBuffer=0x20b8f0) returned 1 [0194.168] CryptReleaseContext (hProv=0x22a1c0, dwFlags=0x0) returned 1 [0194.168] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b8f0 | out: hHeap=0x1f0000) returned 1 [0194.168] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x256f90 [0194.168] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x260188 [0194.168] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=35153774376) returned 1 [0194.169] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0194.169] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=35153812173) returned 1 [0194.169] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0194.170] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x1fef78 [0194.170] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x24fd60 [0194.170] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x20d778 [0194.170] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x24afb0 [0194.170] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffe8 [0194.170] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206868 [0194.170] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210018 [0194.170] GetLastError () returned 0x0 [0194.170] SetLastError (dwErrCode=0x0) [0194.170] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0194.171] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x214f70 [0194.171] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219058 [0194.171] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f70 | out: hHeap=0x1f0000) returned 1 [0194.171] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf8) returned 0x24b080 [0194.171] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219058 | out: hHeap=0x1f0000) returned 1 [0194.171] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c450 [0194.172] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c420 [0194.172] CreateFileW (lpFileName="C:\\\\$GetCurrent\\SafeOS\\GetCurrentOOBE.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\$getcurrent\\safeos\\getcurrentoobe.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e230, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0194.173] GetFileType (hFile=0x1f4) returned 0x1 [0194.173] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c430 [0194.174] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c440 [0194.174] CreateFileW (lpFileName="C:\\\\$GetCurrent\\SafeOS\\GetCurrentOOBE.dll" (normalized: "c:\\$getcurrent\\safeos\\getcurrentoobe.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0194.174] GetFileType (hFile=0x1f8) returned 0x1 [0194.175] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x2052d0 [0194.175] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205150 [0194.175] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x25fd40 [0194.175] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c4c0 [0194.175] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c4f0 [0194.176] CreateFileW (lpFileName="C:\\\\$GetCurrent\\SafeOS\\GetCurrentOOBE.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\$getcurrent\\safeos\\getcurrentoobe.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8 [0194.176] GetFileType (hFile=0x1c8) returned 0x1 [0194.176] GetLastError () returned 0xb7 [0194.176] SetLastError (dwErrCode=0xb7) [0194.176] GetLastError () returned 0xb7 [0194.176] SetLastError (dwErrCode=0xb7) [0194.176] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2052d0 | out: hHeap=0x1f0000) returned 1 [0194.176] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205150 | out: hHeap=0x1f0000) returned 1 [0194.176] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe4) returned 0x25fdf8 [0194.177] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x2052f0 [0194.177] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205330 [0194.177] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205290 [0194.177] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x24fa20 [0194.177] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c6d0 [0194.177] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c5d0 [0194.178] CreateFileW (lpFileName="C:\\\\$GetCurrent\\SafeOS\\GetCurrentOOBE.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\$getcurrent\\safeos\\getcurrentoobe.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0194.178] GetFileType (hFile=0x214) returned 0x1 [0194.178] GetLastError () returned 0xb7 [0194.178] SetLastError (dwErrCode=0xb7) [0194.178] GetLastError () returned 0xb7 [0194.178] SetLastError (dwErrCode=0xb7) [0194.178] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205330 | out: hHeap=0x1f0000) returned 1 [0194.178] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205290 | out: hHeap=0x1f0000) returned 1 [0194.178] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x2052d0 [0194.178] GetLastError () returned 0xb7 [0194.179] SetLastError (dwErrCode=0xb7) [0194.179] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2052d0 | out: hHeap=0x1f0000) returned 1 [0194.179] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205330 [0194.179] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205290 [0194.179] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205150 [0194.179] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb8) returned 0x24fad8 [0194.179] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c640 [0194.179] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c650 [0194.179] CreateFileW (lpFileName="C:\\\\$GetCurrent\\SafeOS\\GetCurrentOOBE.dll" (normalized: "c:\\$getcurrent\\safeos\\getcurrentoobe.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1a4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0194.180] GetFileType (hFile=0x1f0) returned 0x1 [0194.180] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x239da8 [0194.180] ReadFile (in: hFile=0x1f0, lpBuffer=0x239da8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e100, lpOverlapped=0x0 | out: lpBuffer=0x239da8*, lpNumberOfBytesRead=0x173e100*=0x1000, lpOverlapped=0x0) returned 1 [0194.517] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x222ee8 [0194.517] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x240de0 [0194.518] GetLastError () returned 0x0 [0194.518] SetLastError (dwErrCode=0x0) [0194.518] GetLastError () returned 0x0 [0194.519] SetLastError (dwErrCode=0x0) [0194.519] GetLastError () returned 0x0 [0194.519] SetLastError (dwErrCode=0x0) [0194.519] GetLastError () returned 0x0 [0194.519] SetLastError (dwErrCode=0x0) [0194.519] ReadFile (in: hFile=0x1f0, lpBuffer=0x239da8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e190, lpOverlapped=0x0 | out: lpBuffer=0x239da8*, lpNumberOfBytesRead=0x173e190*=0x1000, lpOverlapped=0x0) returned 1 [0194.521] WriteFile (in: hFile=0x214, lpBuffer=0x240de0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x173dfd4, lpOverlapped=0x0 | out: lpBuffer=0x240de0*, lpNumberOfBytesWritten=0x173dfd4*=0x1000, lpOverlapped=0x0) returned 1 [0194.523] GetLastError () returned 0x0 [0194.523] SetLastError (dwErrCode=0x0) [0194.523] GetLastError () returned 0x0 [0194.523] SetLastError (dwErrCode=0x0) [0194.523] GetLastError () returned 0x0 [0194.523] SetLastError (dwErrCode=0x0) [0194.524] GetLastError () returned 0x0 [0194.524] SetLastError (dwErrCode=0x0) [0194.524] ReadFile (in: hFile=0x1f0, lpBuffer=0x239da8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e190, lpOverlapped=0x0 | out: lpBuffer=0x239da8*, lpNumberOfBytesRead=0x173e190*=0x1000, lpOverlapped=0x0) returned 1 [0194.524] WriteFile (in: hFile=0x214, lpBuffer=0x240de0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x173dfd4, lpOverlapped=0x0 | out: lpBuffer=0x240de0*, lpNumberOfBytesWritten=0x173dfd4*=0x1000, lpOverlapped=0x0) returned 1 [0194.525] GetLastError () returned 0x0 [0194.525] SetLastError (dwErrCode=0x0) [0194.525] GetLastError () returned 0x0 [0194.525] SetLastError (dwErrCode=0x0) [0194.525] GetLastError () returned 0x0 [0194.525] SetLastError (dwErrCode=0x0) [0194.526] GetLastError () returned 0x0 [0194.526] SetLastError (dwErrCode=0x0) [0194.526] ReadFile (in: hFile=0x1f0, lpBuffer=0x239da8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e190, lpOverlapped=0x0 | out: lpBuffer=0x239da8*, lpNumberOfBytesRead=0x173e190*=0x1000, lpOverlapped=0x0) returned 1 [0194.526] WriteFile (in: hFile=0x214, lpBuffer=0x240de0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x173dfd4, lpOverlapped=0x0 | out: lpBuffer=0x240de0*, lpNumberOfBytesWritten=0x173dfd4*=0x1000, lpOverlapped=0x0) returned 1 [0194.527] GetLastError () returned 0x0 [0194.527] SetLastError (dwErrCode=0x0) [0194.527] GetLastError () returned 0x0 [0194.527] SetLastError (dwErrCode=0x0) [0194.527] GetLastError () returned 0x0 [0194.527] SetLastError (dwErrCode=0x0) [0194.528] GetLastError () returned 0x0 [0194.528] SetLastError (dwErrCode=0x0) [0194.528] ReadFile (in: hFile=0x1f0, lpBuffer=0x239da8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e190, lpOverlapped=0x0 | out: lpBuffer=0x239da8*, lpNumberOfBytesRead=0x173e190*=0x1000, lpOverlapped=0x0) returned 1 [0194.528] WriteFile (in: hFile=0x214, lpBuffer=0x240de0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x173dfd4, lpOverlapped=0x0 | out: lpBuffer=0x240de0*, lpNumberOfBytesWritten=0x173dfd4*=0x1000, lpOverlapped=0x0) returned 1 [0194.529] GetLastError () returned 0x0 [0194.529] SetLastError (dwErrCode=0x0) [0194.529] GetLastError () returned 0x0 [0194.529] SetLastError (dwErrCode=0x0) [0194.529] GetLastError () returned 0x0 [0194.529] SetLastError (dwErrCode=0x0) [0194.530] GetLastError () returned 0x0 [0194.530] SetLastError (dwErrCode=0x0) [0194.530] ReadFile (in: hFile=0x1f0, lpBuffer=0x239da8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e190, lpOverlapped=0x0 | out: lpBuffer=0x239da8*, lpNumberOfBytesRead=0x173e190*=0x1000, lpOverlapped=0x0) returned 1 [0194.531] WriteFile (in: hFile=0x214, lpBuffer=0x240de0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x173dfd4, lpOverlapped=0x0 | out: lpBuffer=0x240de0*, lpNumberOfBytesWritten=0x173dfd4*=0x1000, lpOverlapped=0x0) returned 1 [0194.531] GetLastError () returned 0x0 [0194.531] SetLastError (dwErrCode=0x0) [0194.532] GetLastError () returned 0x0 [0194.532] SetLastError (dwErrCode=0x0) [0194.532] GetLastError () returned 0x0 [0194.532] SetLastError (dwErrCode=0x0) [0194.532] GetLastError () returned 0x0 [0194.532] SetLastError (dwErrCode=0x0) [0194.533] ReadFile (in: hFile=0x1f0, lpBuffer=0x239da8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e190, lpOverlapped=0x0 | out: lpBuffer=0x239da8*, lpNumberOfBytesRead=0x173e190*=0x1000, lpOverlapped=0x0) returned 1 [0194.533] WriteFile (in: hFile=0x214, lpBuffer=0x240de0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x173dfd4, lpOverlapped=0x0 | out: lpBuffer=0x240de0*, lpNumberOfBytesWritten=0x173dfd4*=0x1000, lpOverlapped=0x0) returned 1 [0194.533] GetLastError () returned 0x0 [0194.533] SetLastError (dwErrCode=0x0) [0194.534] GetLastError () returned 0x0 [0194.534] SetLastError (dwErrCode=0x0) [0194.534] GetLastError () returned 0x0 [0194.534] SetLastError (dwErrCode=0x0) [0194.534] GetLastError () returned 0x0 [0194.534] SetLastError (dwErrCode=0x0) [0194.535] ReadFile (in: hFile=0x1f0, lpBuffer=0x239da8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e190, lpOverlapped=0x0 | out: lpBuffer=0x239da8*, lpNumberOfBytesRead=0x173e190*=0x1000, lpOverlapped=0x0) returned 1 [0194.535] WriteFile (in: hFile=0x214, lpBuffer=0x240de0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x173dfd4, lpOverlapped=0x0 | out: lpBuffer=0x240de0*, lpNumberOfBytesWritten=0x173dfd4*=0x1000, lpOverlapped=0x0) returned 1 [0194.535] GetLastError () returned 0x0 [0194.535] SetLastError (dwErrCode=0x0) [0194.536] GetLastError () returned 0x0 [0194.536] SetLastError (dwErrCode=0x0) [0194.536] GetLastError () returned 0x0 [0194.536] SetLastError (dwErrCode=0x0) [0194.536] GetLastError () returned 0x0 [0194.536] SetLastError (dwErrCode=0x0) [0194.537] ReadFile (in: hFile=0x1f0, lpBuffer=0x239da8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e190, lpOverlapped=0x0 | out: lpBuffer=0x239da8*, lpNumberOfBytesRead=0x173e190*=0x1000, lpOverlapped=0x0) returned 1 [0194.537] WriteFile (in: hFile=0x214, lpBuffer=0x240de0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x173dfd4, lpOverlapped=0x0 | out: lpBuffer=0x240de0*, lpNumberOfBytesWritten=0x173dfd4*=0x1000, lpOverlapped=0x0) returned 1 [0194.537] GetLastError () returned 0x0 [0194.537] SetLastError (dwErrCode=0x0) [0194.538] GetLastError () returned 0x0 [0194.538] SetLastError (dwErrCode=0x0) [0194.538] GetLastError () returned 0x0 [0194.538] SetLastError (dwErrCode=0x0) [0194.538] GetLastError () returned 0x0 [0194.539] SetLastError (dwErrCode=0x0) [0194.539] ReadFile (in: hFile=0x1f0, lpBuffer=0x239da8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e190, lpOverlapped=0x0 | out: lpBuffer=0x239da8*, lpNumberOfBytesRead=0x173e190*=0x1000, lpOverlapped=0x0) returned 1 [0194.540] WriteFile (in: hFile=0x214, lpBuffer=0x240de0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x173dfd4, lpOverlapped=0x0 | out: lpBuffer=0x240de0*, lpNumberOfBytesWritten=0x173dfd4*=0x1000, lpOverlapped=0x0) returned 1 [0194.540] GetLastError () returned 0x0 [0194.540] SetLastError (dwErrCode=0x0) [0194.541] GetLastError () returned 0x0 [0194.541] SetLastError (dwErrCode=0x0) [0194.541] GetLastError () returned 0x0 [0194.541] SetLastError (dwErrCode=0x0) [0194.542] GetLastError () returned 0x0 [0194.542] SetLastError (dwErrCode=0x0) [0194.542] ReadFile (in: hFile=0x1f0, lpBuffer=0x239da8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e190, lpOverlapped=0x0 | out: lpBuffer=0x239da8*, lpNumberOfBytesRead=0x173e190*=0x1000, lpOverlapped=0x0) returned 1 [0194.543] WriteFile (in: hFile=0x214, lpBuffer=0x240de0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x173dfd4, lpOverlapped=0x0 | out: lpBuffer=0x240de0*, lpNumberOfBytesWritten=0x173dfd4*=0x1000, lpOverlapped=0x0) returned 1 [0194.543] GetLastError () returned 0x0 [0194.543] SetLastError (dwErrCode=0x0) [0194.544] GetLastError () returned 0x0 [0194.544] SetLastError (dwErrCode=0x0) [0194.544] GetLastError () returned 0x0 [0194.544] SetLastError (dwErrCode=0x0) [0194.545] GetLastError () returned 0x0 [0194.545] SetLastError (dwErrCode=0x0) [0194.545] ReadFile (in: hFile=0x1f0, lpBuffer=0x239da8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e190, lpOverlapped=0x0 | out: lpBuffer=0x239da8*, lpNumberOfBytesRead=0x173e190*=0x1000, lpOverlapped=0x0) returned 1 [0194.545] WriteFile (in: hFile=0x214, lpBuffer=0x240de0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x173dfd4, lpOverlapped=0x0 | out: lpBuffer=0x240de0*, lpNumberOfBytesWritten=0x173dfd4*=0x1000, lpOverlapped=0x0) returned 1 [0194.546] GetLastError () returned 0x0 [0194.546] SetLastError (dwErrCode=0x0) [0194.547] GetLastError () returned 0x0 [0194.547] SetLastError (dwErrCode=0x0) [0194.547] GetLastError () returned 0x0 [0194.547] SetLastError (dwErrCode=0x0) [0194.547] GetLastError () returned 0x0 [0194.548] SetLastError (dwErrCode=0x0) [0194.548] ReadFile (in: hFile=0x1f0, lpBuffer=0x239da8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e190, lpOverlapped=0x0 | out: lpBuffer=0x239da8*, lpNumberOfBytesRead=0x173e190*=0x1000, lpOverlapped=0x0) returned 1 [0194.549] WriteFile (in: hFile=0x214, lpBuffer=0x240de0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x173dfd4, lpOverlapped=0x0 | out: lpBuffer=0x240de0*, lpNumberOfBytesWritten=0x173dfd4*=0x1000, lpOverlapped=0x0) returned 1 [0194.549] GetLastError () returned 0x0 [0194.549] SetLastError (dwErrCode=0x0) [0194.549] GetLastError () returned 0x0 [0194.549] SetLastError (dwErrCode=0x0) [0194.550] GetLastError () returned 0x0 [0194.550] SetLastError (dwErrCode=0x0) [0194.550] GetLastError () returned 0x0 [0194.550] SetLastError (dwErrCode=0x0) [0194.550] ReadFile (in: hFile=0x1f0, lpBuffer=0x239da8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e190, lpOverlapped=0x0 | out: lpBuffer=0x239da8*, lpNumberOfBytesRead=0x173e190*=0x1000, lpOverlapped=0x0) returned 1 [0194.551] WriteFile (in: hFile=0x214, lpBuffer=0x240de0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x173dfd4, lpOverlapped=0x0 | out: lpBuffer=0x240de0*, lpNumberOfBytesWritten=0x173dfd4*=0x1000, lpOverlapped=0x0) returned 1 [0194.551] GetLastError () returned 0x0 [0194.551] SetLastError (dwErrCode=0x0) [0194.551] GetLastError () returned 0x0 [0194.551] SetLastError (dwErrCode=0x0) [0194.551] GetLastError () returned 0x0 [0194.551] SetLastError (dwErrCode=0x0) [0194.551] GetLastError () returned 0x0 [0194.552] SetLastError (dwErrCode=0x0) [0194.552] ReadFile (in: hFile=0x1f0, lpBuffer=0x239da8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e190, lpOverlapped=0x0 | out: lpBuffer=0x239da8*, lpNumberOfBytesRead=0x173e190*=0x1000, lpOverlapped=0x0) returned 1 [0194.822] WriteFile (in: hFile=0x214, lpBuffer=0x240de0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x173dfd4, lpOverlapped=0x0 | out: lpBuffer=0x240de0*, lpNumberOfBytesWritten=0x173dfd4*=0x1000, lpOverlapped=0x0) returned 1 [0194.822] GetLastError () returned 0x0 [0194.822] SetLastError (dwErrCode=0x0) [0194.823] GetLastError () returned 0x0 [0194.823] SetLastError (dwErrCode=0x0) [0194.823] GetLastError () returned 0x0 [0194.823] SetLastError (dwErrCode=0x0) [0194.823] GetLastError () returned 0x0 [0194.823] SetLastError (dwErrCode=0x0) [0194.823] ReadFile (in: hFile=0x1f0, lpBuffer=0x239da8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e190, lpOverlapped=0x0 | out: lpBuffer=0x239da8*, lpNumberOfBytesRead=0x173e190*=0x1000, lpOverlapped=0x0) returned 1 [0194.824] WriteFile (in: hFile=0x214, lpBuffer=0x240de0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x173dfd4, lpOverlapped=0x0 | out: lpBuffer=0x240de0*, lpNumberOfBytesWritten=0x173dfd4*=0x1000, lpOverlapped=0x0) returned 1 [0194.824] GetLastError () returned 0x0 [0194.824] SetLastError (dwErrCode=0x0) [0194.824] GetLastError () returned 0x0 [0194.825] SetLastError (dwErrCode=0x0) [0194.825] GetLastError () returned 0x0 [0194.825] SetLastError (dwErrCode=0x0) [0194.825] GetLastError () returned 0x0 [0194.825] SetLastError (dwErrCode=0x0) [0194.825] ReadFile (in: hFile=0x1f0, lpBuffer=0x239da8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e190, lpOverlapped=0x0 | out: lpBuffer=0x239da8*, lpNumberOfBytesRead=0x173e190*=0x1000, lpOverlapped=0x0) returned 1 [0194.826] WriteFile (in: hFile=0x214, lpBuffer=0x240de0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x173dfd4, lpOverlapped=0x0 | out: lpBuffer=0x240de0*, lpNumberOfBytesWritten=0x173dfd4*=0x1000, lpOverlapped=0x0) returned 1 [0194.826] GetLastError () returned 0x0 [0194.826] SetLastError (dwErrCode=0x0) [0194.826] GetLastError () returned 0x0 [0194.826] SetLastError (dwErrCode=0x0) [0194.826] GetLastError () returned 0x0 [0194.826] SetLastError (dwErrCode=0x0) [0194.827] GetLastError () returned 0x0 [0194.827] SetLastError (dwErrCode=0x0) [0194.827] ReadFile (in: hFile=0x1f0, lpBuffer=0x239da8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e190, lpOverlapped=0x0 | out: lpBuffer=0x239da8*, lpNumberOfBytesRead=0x173e190*=0x1000, lpOverlapped=0x0) returned 1 [0194.827] WriteFile (in: hFile=0x214, lpBuffer=0x240de0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x173dfd4, lpOverlapped=0x0 | out: lpBuffer=0x240de0*, lpNumberOfBytesWritten=0x173dfd4*=0x1000, lpOverlapped=0x0) returned 1 [0194.828] GetLastError () returned 0x0 [0194.828] SetLastError (dwErrCode=0x0) [0194.828] GetLastError () returned 0x0 [0194.828] SetLastError (dwErrCode=0x0) [0194.828] GetLastError () returned 0x0 [0194.828] SetLastError (dwErrCode=0x0) [0194.828] GetLastError () returned 0x0 [0194.828] SetLastError (dwErrCode=0x0) [0194.829] ReadFile (in: hFile=0x1f0, lpBuffer=0x239da8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e190, lpOverlapped=0x0 | out: lpBuffer=0x239da8*, lpNumberOfBytesRead=0x173e190*=0x1000, lpOverlapped=0x0) returned 1 [0194.829] WriteFile (in: hFile=0x214, lpBuffer=0x240de0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x173dfd4, lpOverlapped=0x0 | out: lpBuffer=0x240de0*, lpNumberOfBytesWritten=0x173dfd4*=0x1000, lpOverlapped=0x0) returned 1 [0194.829] GetLastError () returned 0x0 [0194.829] SetLastError (dwErrCode=0x0) [0194.830] GetLastError () returned 0x0 [0194.830] SetLastError (dwErrCode=0x0) [0194.830] GetLastError () returned 0x0 [0194.830] SetLastError (dwErrCode=0x0) [0194.830] GetLastError () returned 0x0 [0194.830] SetLastError (dwErrCode=0x0) [0194.830] ReadFile (in: hFile=0x1f0, lpBuffer=0x239da8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e190, lpOverlapped=0x0 | out: lpBuffer=0x239da8*, lpNumberOfBytesRead=0x173e190*=0x1000, lpOverlapped=0x0) returned 1 [0194.831] WriteFile (in: hFile=0x214, lpBuffer=0x240de0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x173dfd4, lpOverlapped=0x0 | out: lpBuffer=0x240de0*, lpNumberOfBytesWritten=0x173dfd4*=0x1000, lpOverlapped=0x0) returned 1 [0194.831] GetLastError () returned 0x0 [0194.831] SetLastError (dwErrCode=0x0) [0194.831] GetLastError () returned 0x0 [0194.831] SetLastError (dwErrCode=0x0) [0194.832] GetLastError () returned 0x0 [0194.832] SetLastError (dwErrCode=0x0) [0194.832] GetLastError () returned 0x0 [0194.832] SetLastError (dwErrCode=0x0) [0194.832] ReadFile (in: hFile=0x1f0, lpBuffer=0x239da8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e190, lpOverlapped=0x0 | out: lpBuffer=0x239da8*, lpNumberOfBytesRead=0x173e190*=0x1000, lpOverlapped=0x0) returned 1 [0194.833] WriteFile (in: hFile=0x214, lpBuffer=0x240de0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x173dfd4, lpOverlapped=0x0 | out: lpBuffer=0x240de0*, lpNumberOfBytesWritten=0x173dfd4*=0x1000, lpOverlapped=0x0) returned 1 [0194.833] GetLastError () returned 0x0 [0194.833] SetLastError (dwErrCode=0x0) [0194.833] GetLastError () returned 0x0 [0194.834] SetLastError (dwErrCode=0x0) [0194.834] GetLastError () returned 0x0 [0194.834] SetLastError (dwErrCode=0x0) [0194.835] GetLastError () returned 0x0 [0194.835] SetLastError (dwErrCode=0x0) [0194.836] ReadFile (in: hFile=0x1f0, lpBuffer=0x239da8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e190, lpOverlapped=0x0 | out: lpBuffer=0x239da8*, lpNumberOfBytesRead=0x173e190*=0x1000, lpOverlapped=0x0) returned 1 [0194.836] WriteFile (in: hFile=0x214, lpBuffer=0x240de0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x173dfd4, lpOverlapped=0x0 | out: lpBuffer=0x240de0*, lpNumberOfBytesWritten=0x173dfd4*=0x1000, lpOverlapped=0x0) returned 1 [0194.837] GetLastError () returned 0x0 [0194.837] SetLastError (dwErrCode=0x0) [0194.837] GetLastError () returned 0x0 [0194.837] SetLastError (dwErrCode=0x0) [0194.837] GetLastError () returned 0x0 [0194.837] SetLastError (dwErrCode=0x0) [0194.838] GetLastError () returned 0x0 [0194.838] SetLastError (dwErrCode=0x0) [0194.838] ReadFile (in: hFile=0x1f0, lpBuffer=0x239da8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e190, lpOverlapped=0x0 | out: lpBuffer=0x239da8*, lpNumberOfBytesRead=0x173e190*=0x1000, lpOverlapped=0x0) returned 1 [0194.838] WriteFile (in: hFile=0x214, lpBuffer=0x240de0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x173dfd4, lpOverlapped=0x0 | out: lpBuffer=0x240de0*, lpNumberOfBytesWritten=0x173dfd4*=0x1000, lpOverlapped=0x0) returned 1 [0194.839] GetLastError () returned 0x0 [0194.839] SetLastError (dwErrCode=0x0) [0194.839] GetLastError () returned 0x0 [0194.839] SetLastError (dwErrCode=0x0) [0194.839] GetLastError () returned 0x0 [0194.839] SetLastError (dwErrCode=0x0) [0194.840] GetLastError () returned 0x0 [0194.840] SetLastError (dwErrCode=0x0) [0194.840] ReadFile (in: hFile=0x1f0, lpBuffer=0x239da8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e190, lpOverlapped=0x0 | out: lpBuffer=0x239da8*, lpNumberOfBytesRead=0x173e190*=0x1000, lpOverlapped=0x0) returned 1 [0194.840] WriteFile (in: hFile=0x214, lpBuffer=0x240de0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x173dfd4, lpOverlapped=0x0 | out: lpBuffer=0x240de0*, lpNumberOfBytesWritten=0x173dfd4*=0x1000, lpOverlapped=0x0) returned 1 [0194.841] GetLastError () returned 0x0 [0194.841] SetLastError (dwErrCode=0x0) [0194.841] GetLastError () returned 0x0 [0194.841] SetLastError (dwErrCode=0x0) [0194.841] GetLastError () returned 0x0 [0194.841] SetLastError (dwErrCode=0x0) [0194.842] GetLastError () returned 0x0 [0194.842] SetLastError (dwErrCode=0x0) [0194.842] ReadFile (in: hFile=0x1f0, lpBuffer=0x239da8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e190, lpOverlapped=0x0 | out: lpBuffer=0x239da8*, lpNumberOfBytesRead=0x173e190*=0x1000, lpOverlapped=0x0) returned 1 [0194.843] WriteFile (in: hFile=0x214, lpBuffer=0x240de0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x173dfd4, lpOverlapped=0x0 | out: lpBuffer=0x240de0*, lpNumberOfBytesWritten=0x173dfd4*=0x1000, lpOverlapped=0x0) returned 1 [0194.843] GetLastError () returned 0x0 [0194.843] SetLastError (dwErrCode=0x0) [0194.843] GetLastError () returned 0x0 [0194.844] SetLastError (dwErrCode=0x0) [0194.844] GetLastError () returned 0x0 [0194.844] SetLastError (dwErrCode=0x0) [0194.844] GetLastError () returned 0x0 [0194.844] SetLastError (dwErrCode=0x0) [0194.844] ReadFile (in: hFile=0x1f0, lpBuffer=0x239da8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e190, lpOverlapped=0x0 | out: lpBuffer=0x239da8*, lpNumberOfBytesRead=0x173e190*=0x1000, lpOverlapped=0x0) returned 1 [0194.844] WriteFile (in: hFile=0x214, lpBuffer=0x240de0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x173dfd4, lpOverlapped=0x0 | out: lpBuffer=0x240de0*, lpNumberOfBytesWritten=0x173dfd4*=0x1000, lpOverlapped=0x0) returned 1 [0194.845] GetLastError () returned 0x0 [0194.845] SetLastError (dwErrCode=0x0) [0194.845] GetLastError () returned 0x0 [0194.845] SetLastError (dwErrCode=0x0) [0194.845] GetLastError () returned 0x0 [0194.845] SetLastError (dwErrCode=0x0) [0194.845] GetLastError () returned 0x0 [0194.845] SetLastError (dwErrCode=0x0) [0194.845] ReadFile (in: hFile=0x1f0, lpBuffer=0x239da8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e190, lpOverlapped=0x0 | out: lpBuffer=0x239da8*, lpNumberOfBytesRead=0x173e190*=0x1000, lpOverlapped=0x0) returned 1 [0194.845] WriteFile (in: hFile=0x214, lpBuffer=0x240de0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x173dfd4, lpOverlapped=0x0 | out: lpBuffer=0x240de0*, lpNumberOfBytesWritten=0x173dfd4*=0x1000, lpOverlapped=0x0) returned 1 [0194.845] GetLastError () returned 0x0 [0194.846] SetLastError (dwErrCode=0x0) [0194.846] GetLastError () returned 0x0 [0194.846] SetLastError (dwErrCode=0x0) [0194.846] GetLastError () returned 0x0 [0194.846] SetLastError (dwErrCode=0x0) [0194.846] GetLastError () returned 0x0 [0194.846] SetLastError (dwErrCode=0x0) [0194.846] ReadFile (in: hFile=0x1f0, lpBuffer=0x239da8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e190, lpOverlapped=0x0 | out: lpBuffer=0x239da8*, lpNumberOfBytesRead=0x173e190*=0x1000, lpOverlapped=0x0) returned 1 [0194.846] WriteFile (in: hFile=0x214, lpBuffer=0x240de0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x173dfd4, lpOverlapped=0x0 | out: lpBuffer=0x240de0*, lpNumberOfBytesWritten=0x173dfd4*=0x1000, lpOverlapped=0x0) returned 1 [0194.846] GetLastError () returned 0x0 [0194.846] SetLastError (dwErrCode=0x0) [0194.847] GetLastError () returned 0x0 [0194.847] SetLastError (dwErrCode=0x0) [0194.847] GetLastError () returned 0x0 [0194.847] SetLastError (dwErrCode=0x0) [0194.847] GetLastError () returned 0x0 [0194.847] SetLastError (dwErrCode=0x0) [0194.847] ReadFile (in: hFile=0x1f0, lpBuffer=0x239da8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e190, lpOverlapped=0x0 | out: lpBuffer=0x239da8*, lpNumberOfBytesRead=0x173e190*=0x1000, lpOverlapped=0x0) returned 1 [0194.847] WriteFile (in: hFile=0x214, lpBuffer=0x240de0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x173dfd4, lpOverlapped=0x0 | out: lpBuffer=0x240de0*, lpNumberOfBytesWritten=0x173dfd4*=0x1000, lpOverlapped=0x0) returned 1 [0194.848] GetLastError () returned 0x0 [0194.848] SetLastError (dwErrCode=0x0) [0194.848] GetLastError () returned 0x0 [0194.848] SetLastError (dwErrCode=0x0) [0194.848] GetLastError () returned 0x0 [0194.848] SetLastError (dwErrCode=0x0) [0194.848] GetLastError () returned 0x0 [0194.848] SetLastError (dwErrCode=0x0) [0194.848] ReadFile (in: hFile=0x1f0, lpBuffer=0x239da8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e190, lpOverlapped=0x0 | out: lpBuffer=0x239da8*, lpNumberOfBytesRead=0x173e190*=0x1000, lpOverlapped=0x0) returned 1 [0194.848] WriteFile (in: hFile=0x214, lpBuffer=0x240de0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x173dfd4, lpOverlapped=0x0 | out: lpBuffer=0x240de0*, lpNumberOfBytesWritten=0x173dfd4*=0x1000, lpOverlapped=0x0) returned 1 [0194.849] GetLastError () returned 0x0 [0194.849] SetLastError (dwErrCode=0x0) [0194.849] GetLastError () returned 0x0 [0194.849] SetLastError (dwErrCode=0x0) [0194.849] GetLastError () returned 0x0 [0194.849] SetLastError (dwErrCode=0x0) [0194.849] GetLastError () returned 0x0 [0194.849] SetLastError (dwErrCode=0x0) [0194.849] ReadFile (in: hFile=0x1f0, lpBuffer=0x239da8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e190, lpOverlapped=0x0 | out: lpBuffer=0x239da8*, lpNumberOfBytesRead=0x173e190*=0x1000, lpOverlapped=0x0) returned 1 [0194.850] WriteFile (in: hFile=0x214, lpBuffer=0x240de0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x173dfd4, lpOverlapped=0x0 | out: lpBuffer=0x240de0*, lpNumberOfBytesWritten=0x173dfd4*=0x1000, lpOverlapped=0x0) returned 1 [0194.850] GetLastError () returned 0x0 [0194.850] SetLastError (dwErrCode=0x0) [0194.850] GetLastError () returned 0x0 [0194.850] SetLastError (dwErrCode=0x0) [0194.850] GetLastError () returned 0x0 [0194.850] SetLastError (dwErrCode=0x0) [0194.850] GetLastError () returned 0x0 [0194.850] SetLastError (dwErrCode=0x0) [0194.851] ReadFile (in: hFile=0x1f0, lpBuffer=0x239da8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e190, lpOverlapped=0x0 | out: lpBuffer=0x239da8*, lpNumberOfBytesRead=0x173e190*=0x1000, lpOverlapped=0x0) returned 1 [0194.851] WriteFile (in: hFile=0x214, lpBuffer=0x240de0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x173dfd4, lpOverlapped=0x0 | out: lpBuffer=0x240de0*, lpNumberOfBytesWritten=0x173dfd4*=0x1000, lpOverlapped=0x0) returned 1 [0194.851] GetLastError () returned 0x0 [0194.851] SetLastError (dwErrCode=0x0) [0194.851] GetLastError () returned 0x0 [0194.851] SetLastError (dwErrCode=0x0) [0194.851] GetLastError () returned 0x0 [0194.851] SetLastError (dwErrCode=0x0) [0194.851] GetLastError () returned 0x0 [0194.852] SetLastError (dwErrCode=0x0) [0194.852] ReadFile (in: hFile=0x1f0, lpBuffer=0x239da8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e190, lpOverlapped=0x0 | out: lpBuffer=0x239da8*, lpNumberOfBytesRead=0x173e190*=0x1000, lpOverlapped=0x0) returned 1 [0194.852] WriteFile (in: hFile=0x214, lpBuffer=0x240de0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x173dfd4, lpOverlapped=0x0 | out: lpBuffer=0x240de0*, lpNumberOfBytesWritten=0x173dfd4*=0x1000, lpOverlapped=0x0) returned 1 [0194.852] GetLastError () returned 0x0 [0194.852] SetLastError (dwErrCode=0x0) [0194.852] GetLastError () returned 0x0 [0194.852] SetLastError (dwErrCode=0x0) [0194.853] GetLastError () returned 0x0 [0194.853] SetLastError (dwErrCode=0x0) [0194.853] GetLastError () returned 0x0 [0194.853] SetLastError (dwErrCode=0x0) [0194.853] ReadFile (in: hFile=0x1f0, lpBuffer=0x239da8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e190, lpOverlapped=0x0 | out: lpBuffer=0x239da8*, lpNumberOfBytesRead=0x173e190*=0x1000, lpOverlapped=0x0) returned 1 [0194.853] WriteFile (in: hFile=0x214, lpBuffer=0x240de0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x173dfd4, lpOverlapped=0x0 | out: lpBuffer=0x240de0*, lpNumberOfBytesWritten=0x173dfd4*=0x1000, lpOverlapped=0x0) returned 1 [0194.854] GetLastError () returned 0x0 [0194.854] SetLastError (dwErrCode=0x0) [0194.854] GetLastError () returned 0x0 [0194.854] SetLastError (dwErrCode=0x0) [0194.854] GetLastError () returned 0x0 [0194.854] SetLastError (dwErrCode=0x0) [0194.854] GetLastError () returned 0x0 [0194.854] SetLastError (dwErrCode=0x0) [0194.854] ReadFile (in: hFile=0x1f0, lpBuffer=0x239da8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e190, lpOverlapped=0x0 | out: lpBuffer=0x239da8*, lpNumberOfBytesRead=0x173e190*=0x1000, lpOverlapped=0x0) returned 1 [0194.854] WriteFile (in: hFile=0x214, lpBuffer=0x240de0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x173dfd4, lpOverlapped=0x0 | out: lpBuffer=0x240de0*, lpNumberOfBytesWritten=0x173dfd4*=0x1000, lpOverlapped=0x0) returned 1 [0194.855] GetLastError () returned 0x0 [0194.855] SetLastError (dwErrCode=0x0) [0194.855] GetLastError () returned 0x0 [0194.855] SetLastError (dwErrCode=0x0) [0194.855] GetLastError () returned 0x0 [0194.855] SetLastError (dwErrCode=0x0) [0194.855] GetLastError () returned 0x0 [0194.855] SetLastError (dwErrCode=0x0) [0194.855] ReadFile (in: hFile=0x1f0, lpBuffer=0x239da8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e190, lpOverlapped=0x0 | out: lpBuffer=0x239da8*, lpNumberOfBytesRead=0x173e190*=0x2c8, lpOverlapped=0x0) returned 1 [0194.855] ReadFile (in: hFile=0x1f0, lpBuffer=0x239da8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e190, lpOverlapped=0x0 | out: lpBuffer=0x239da8*, lpNumberOfBytesRead=0x173e190*=0x0, lpOverlapped=0x0) returned 1 [0194.856] WriteFile (in: hFile=0x214, lpBuffer=0x240de0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x173dfd4, lpOverlapped=0x0 | out: lpBuffer=0x240de0*, lpNumberOfBytesWritten=0x173dfd4*=0x1000, lpOverlapped=0x0) returned 1 [0194.856] GetLastError () returned 0x0 [0194.856] SetLastError (dwErrCode=0x0) [0194.856] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101f8 [0194.856] GetLastError () returned 0x0 [0194.856] SetLastError (dwErrCode=0x0) [0194.857] WriteFile (in: hFile=0x214, lpBuffer=0x240de0*, nNumberOfBytesToWrite=0x2d8, lpNumberOfBytesWritten=0x173e084, lpOverlapped=0x0 | out: lpBuffer=0x240de0*, lpNumberOfBytesWritten=0x173e084*=0x2d8, lpOverlapped=0x0) returned 1 [0194.857] GetLastError () returned 0x0 [0194.857] SetLastError (dwErrCode=0x0) [0194.857] GetLastError () returned 0x0 [0194.857] SetLastError (dwErrCode=0x0) [0194.857] GetLastError () returned 0x0 [0194.857] SetLastError (dwErrCode=0x0) [0194.858] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205290 | out: hHeap=0x1f0000) returned 1 [0194.858] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205150 | out: hHeap=0x1f0000) returned 1 [0194.858] CloseHandle (hObject=0x1f4) returned 1 [0195.292] CloseHandle (hObject=0x1f8) returned 1 [0195.292] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c660 [0195.293] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c560 [0195.294] CreateFileW (lpFileName="C:\\\\$GetCurrent\\SafeOS\\GetCurrentOOBE.dll" (normalized: "c:\\$getcurrent\\safeos\\getcurrentoobe.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0195.296] GetFileType (hFile=0x1f8) returned 0x1 [0195.297] GetLastError () returned 0xb7 [0195.297] SetLastError (dwErrCode=0xb7) [0195.297] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x246e10 [0195.298] GetLastError () returned 0xb7 [0195.298] SetLastError (dwErrCode=0xb7) [0195.298] WriteFile (in: hFile=0x1f8, lpBuffer=0x173cef4*, nNumberOfBytesToWrite=0x1, lpNumberOfBytesWritten=0x173ceec, lpOverlapped=0x0 | out: lpBuffer=0x173cef4*, lpNumberOfBytesWritten=0x173ceec*=0x1, lpOverlapped=0x0) returned 1 [0195.300] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x246e10 | out: hHeap=0x1f0000) returned 1 [0195.300] CloseHandle (hObject=0x1f8) returned 1 [0195.300] DeleteFileW (lpFileName="C:\\\\$GetCurrent\\SafeOS\\GetCurrentOOBE.dll" (normalized: "c:\\$getcurrent\\safeos\\getcurrentoobe.dll")) returned 0 [0195.301] GetLastError () returned 0x20 [0195.301] GetLastError () returned 0x20 [0195.301] SetLastError (dwErrCode=0x20) [0195.301] GetLastError () returned 0x20 [0195.301] SetLastError (dwErrCode=0x20) [0195.301] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215ca8 [0195.301] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20bb98 [0195.301] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20bd50 [0195.302] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x215b40 [0195.302] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205210 [0195.302] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x2052d0 [0195.302] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x21c670 [0195.302] GetLastError () returned 0x20 [0195.302] SetLastError (dwErrCode=0x20) [0195.302] GetLastError () returned 0x20 [0195.302] SetLastError (dwErrCode=0x20) [0195.302] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205210 | out: hHeap=0x1f0000) returned 1 [0195.302] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2052d0 | out: hHeap=0x1f0000) returned 1 [0195.303] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x227fc8 [0195.303] GetLastError () returned 0x20 [0195.303] SetLastError (dwErrCode=0x20) [0195.303] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227fc8 | out: hHeap=0x1f0000) returned 1 [0195.303] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x227fc8 [0195.303] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a8a0 [0195.303] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x20b8f0 [0195.303] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x225258 [0195.303] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c580 [0195.304] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b9e0 [0195.304] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210078 [0195.304] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c690 [0195.304] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b2f0 [0195.304] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210090 [0195.304] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x22b458 [0195.304] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2232f0 [0195.304] GetLastError () returned 0x20 [0195.304] SetLastError (dwErrCode=0x20) [0195.304] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227fc8 | out: hHeap=0x1f0000) returned 1 [0195.305] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x21c6b0 [0195.305] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x21c5a0 [0195.305] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c5b0 [0195.305] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5a0 | out: hHeap=0x1f0000) returned 1 [0195.305] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c5c0 [0195.305] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5b0 | out: hHeap=0x1f0000) returned 1 [0195.305] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c6b0 | out: hHeap=0x1f0000) returned 1 [0195.305] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c5a0 [0195.305] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210228 [0195.305] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5a0 | out: hHeap=0x1f0000) returned 1 [0195.305] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210240 [0195.306] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210228 | out: hHeap=0x1f0000) returned 1 [0195.306] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5c0 | out: hHeap=0x1f0000) returned 1 [0195.306] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101c8 [0195.306] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0195.306] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0195.306] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210228 [0195.306] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0195.306] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210240 | out: hHeap=0x1f0000) returned 1 [0195.306] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0195.307] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x2052d0 [0195.307] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0195.307] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205210 [0195.307] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2052d0 | out: hHeap=0x1f0000) returned 1 [0195.307] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210228 | out: hHeap=0x1f0000) returned 1 [0195.307] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x2052d0 [0195.307] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x22b5e8 [0195.307] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2052d0 | out: hHeap=0x1f0000) returned 1 [0195.307] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x2052d0 [0195.307] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b5e8 | out: hHeap=0x1f0000) returned 1 [0195.308] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205210 | out: hHeap=0x1f0000) returned 1 [0195.308] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x205210 [0195.308] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206808 [0195.308] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205210 | out: hHeap=0x1f0000) returned 1 [0195.308] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x22b5e8 [0195.308] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206808 | out: hHeap=0x1f0000) returned 1 [0195.308] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2052d0 | out: hHeap=0x1f0000) returned 1 [0195.308] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c6b0 [0195.308] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101c8 [0195.308] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c6b0 | out: hHeap=0x1f0000) returned 1 [0195.309] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210228 [0195.309] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0195.309] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x205210 [0195.309] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210228 | out: hHeap=0x1f0000) returned 1 [0195.309] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206628 [0195.309] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205210 | out: hHeap=0x1f0000) returned 1 [0195.309] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206628 | out: hHeap=0x1f0000) returned 1 [0195.309] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b5e8 | out: hHeap=0x1f0000) returned 1 [0195.309] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20bb98 | out: hHeap=0x1f0000) returned 1 [0195.309] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0195.310] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225258 | out: hHeap=0x1f0000) returned 1 [0195.310] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b8f0 | out: hHeap=0x1f0000) returned 1 [0195.310] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0195.310] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b638 [0195.310] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x22a3e0) returned 1 [0195.314] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x22b638 | out: pbBuffer=0x22b638) returned 1 [0195.314] CryptReleaseContext (hProv=0x22a3e0, dwFlags=0x0) returned 1 [0195.314] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b638 | out: hHeap=0x1f0000) returned 1 [0195.314] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b340 [0195.314] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b5e8 [0195.314] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227fc8 [0195.314] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b340 | out: hHeap=0x1f0000) returned 1 [0195.315] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0195.315] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227fc8 | out: hHeap=0x1f0000) returned 1 [0195.315] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2399d8 [0195.315] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0195.315] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x22aaa8 [0195.315] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x22b340 [0195.315] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x225258 [0195.315] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205210 [0195.316] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a908 [0195.316] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x22b750 [0195.316] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x22d368 [0195.316] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c5a0 [0195.316] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b638 [0195.316] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0195.316] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c6b0 [0195.316] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b778 [0195.316] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210228 [0195.316] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210228 | out: hHeap=0x1f0000) returned 1 [0195.316] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b778 | out: hHeap=0x1f0000) returned 1 [0195.317] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c6b0 | out: hHeap=0x1f0000) returned 1 [0195.317] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0195.317] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b638 | out: hHeap=0x1f0000) returned 1 [0195.317] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5a0 | out: hHeap=0x1f0000) returned 1 [0195.317] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d368 | out: hHeap=0x1f0000) returned 1 [0195.317] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b750 | out: hHeap=0x1f0000) returned 1 [0195.317] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a908 | out: hHeap=0x1f0000) returned 1 [0195.317] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x227fc8 [0195.317] GetLastError () returned 0x0 [0195.318] SetLastError (dwErrCode=0x0) [0195.318] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227fc8 | out: hHeap=0x1f0000) returned 1 [0195.318] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x227fc8 [0195.318] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0195.318] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0195.318] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0195.318] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0195.318] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0195.319] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0195.319] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x221220 [0195.319] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x22d368 [0195.319] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0195.319] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0195.319] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0195.319] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0195.319] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x24fb98 [0195.319] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0195.320] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0195.320] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fc18 [0195.320] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x253678 [0195.320] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x229418 [0195.320] QueryPerformanceCounter (in: lpPerformanceCount=0x173dee0 | out: lpPerformanceCount=0x173dee0*=35268897100) returned 1 [0195.320] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173df20 | out: lpSystemTimeAsFileTime=0x173df20) [0195.320] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x21c5a0 [0195.321] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b638 [0195.321] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x2052d0 [0195.321] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2052d0 | out: hHeap=0x1f0000) returned 1 [0195.321] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b638 | out: hHeap=0x1f0000) returned 1 [0195.321] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b638 [0195.321] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x2052d0 [0195.321] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2052d0 | out: hHeap=0x1f0000) returned 1 [0195.321] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b638 | out: hHeap=0x1f0000) returned 1 [0195.321] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5a0 | out: hHeap=0x1f0000) returned 1 [0195.322] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0195.322] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x228310 [0195.322] GetLastError () returned 0x0 [0195.322] SetLastError (dwErrCode=0x0) [0195.322] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228310 | out: hHeap=0x1f0000) returned 1 [0195.322] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0195.322] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0195.322] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0195.323] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b638 [0195.323] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b750 [0195.323] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0195.323] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0195.323] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b778 [0195.323] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0195.323] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x234b90 [0195.323] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0195.324] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2350b0 [0195.324] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0195.324] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2352d0 [0195.324] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2350b0 | out: hHeap=0x1f0000) returned 1 [0195.324] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b840 [0195.324] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b868 [0195.324] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b840 | out: hHeap=0x1f0000) returned 1 [0195.324] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0195.324] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b868 | out: hHeap=0x1f0000) returned 1 [0195.324] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2350b0 [0195.324] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x2354f0 [0195.324] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2354f0 | out: hHeap=0x1f0000) returned 1 [0195.325] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2350b0 | out: hHeap=0x1f0000) returned 1 [0195.325] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2352d0 | out: hHeap=0x1f0000) returned 1 [0195.325] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210228 [0195.325] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215d80 [0195.325] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b840 [0195.325] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b868 [0195.325] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b8f0 [0195.325] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20bb98 [0195.325] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b868 | out: hHeap=0x1f0000) returned 1 [0195.325] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b840 | out: hHeap=0x1f0000) returned 1 [0195.326] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2350b0 [0195.326] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b868 [0195.326] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b840 [0195.326] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b868 | out: hHeap=0x1f0000) returned 1 [0195.326] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0195.326] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b840 | out: hHeap=0x1f0000) returned 1 [0195.326] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206928 [0195.326] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x2352d0 [0195.326] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2352d0 | out: hHeap=0x1f0000) returned 1 [0195.327] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206928 | out: hHeap=0x1f0000) returned 1 [0195.327] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b778 | out: hHeap=0x1f0000) returned 1 [0195.327] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x236590 [0195.327] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0195.327] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2350b0 | out: hHeap=0x1f0000) returned 1 [0195.327] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x2052d0 [0195.327] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2366b8 [0195.327] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x236218 [0195.327] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b750 | out: hHeap=0x1f0000) returned 1 [0195.327] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x237498 [0195.328] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236218 | out: hHeap=0x1f0000) returned 1 [0195.328] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20bb98 | out: hHeap=0x1f0000) returned 1 [0195.328] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b8f0 | out: hHeap=0x1f0000) returned 1 [0195.328] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215d80 | out: hHeap=0x1f0000) returned 1 [0195.328] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366b8 | out: hHeap=0x1f0000) returned 1 [0195.328] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2052d0 | out: hHeap=0x1f0000) returned 1 [0195.328] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210228 | out: hHeap=0x1f0000) returned 1 [0195.328] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0195.328] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x236b58 [0195.328] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236b58 | out: hHeap=0x1f0000) returned 1 [0195.328] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b90 | out: hHeap=0x1f0000) returned 1 [0195.329] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0195.329] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236590 | out: hHeap=0x1f0000) returned 1 [0195.329] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0195.329] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0195.329] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b638 | out: hHeap=0x1f0000) returned 1 [0195.329] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0195.329] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0195.329] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x236590 [0195.330] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x236b58 [0195.330] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236590 | out: hHeap=0x1f0000) returned 1 [0195.330] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236b58 | out: hHeap=0x1f0000) returned 1 [0195.330] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237498 | out: hHeap=0x1f0000) returned 1 [0195.586] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0195.586] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24fb98 | out: hHeap=0x1f0000) returned 1 [0195.586] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221220 | out: hHeap=0x1f0000) returned 1 [0195.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x24fb98 [0195.587] GetLastError () returned 0x0 [0195.587] SetLastError (dwErrCode=0x0) [0195.587] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227fc8 | out: hHeap=0x1f0000) returned 1 [0195.587] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c5c0 [0195.587] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c6f0 [0195.588] CreateFileW (lpFileName="C:\\\\$GetCurrent\\SafeOS\\GetCurrentOOBE.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\$getcurrent\\safeos\\getcurrentoobe.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e290, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0195.588] GetFileType (hFile=0x204) returned 0x1 [0195.588] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x244e00 [0195.588] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e218 | out: lpNewFilePointer=0x0) returned 1 [0195.589] GetLastError () returned 0xb7 [0195.589] SetLastError (dwErrCode=0xb7) [0195.589] GetLastError () returned 0xb7 [0195.589] SetLastError (dwErrCode=0xb7) [0195.589] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e2dc | out: lpNewFilePointer=0x0) returned 1 [0195.589] WriteFile (in: hFile=0x204, lpBuffer=0x244e00*, nNumberOfBytesToWrite=0x103, lpNumberOfBytesWritten=0x173e340, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesWritten=0x173e340*=0x103, lpOverlapped=0x0) returned 1 [0195.589] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x244e00 | out: hHeap=0x1f0000) returned 1 [0195.589] CloseHandle (hObject=0x204) returned 1 [0195.610] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c6f0 | out: hHeap=0x1f0000) returned 1 [0195.610] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5c0 | out: hHeap=0x1f0000) returned 1 [0195.610] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d368 | out: hHeap=0x1f0000) returned 1 [0195.610] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225258 | out: hHeap=0x1f0000) returned 1 [0195.610] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b340 | out: hHeap=0x1f0000) returned 1 [0195.610] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205210 | out: hHeap=0x1f0000) returned 1 [0195.610] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aaa8 | out: hHeap=0x1f0000) returned 1 [0195.610] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0195.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2399d8 | out: hHeap=0x1f0000) returned 1 [0195.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24fb98 | out: hHeap=0x1f0000) returned 1 [0195.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b5e8 | out: hHeap=0x1f0000) returned 1 [0195.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0195.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x253678 | out: hHeap=0x1f0000) returned 1 [0195.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0195.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0195.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c670 | out: hHeap=0x1f0000) returned 1 [0195.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210090 | out: hHeap=0x1f0000) returned 1 [0195.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b2f0 | out: hHeap=0x1f0000) returned 1 [0195.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c690 | out: hHeap=0x1f0000) returned 1 [0195.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210078 | out: hHeap=0x1f0000) returned 1 [0195.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b9e0 | out: hHeap=0x1f0000) returned 1 [0195.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c580 | out: hHeap=0x1f0000) returned 1 [0195.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2232f0 | out: hHeap=0x1f0000) returned 1 [0195.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b458 | out: hHeap=0x1f0000) returned 1 [0195.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a8a0 | out: hHeap=0x1f0000) returned 1 [0195.612] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215b40 | out: hHeap=0x1f0000) returned 1 [0195.612] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20bd50 | out: hHeap=0x1f0000) returned 1 [0195.612] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0195.612] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215ca8 | out: hHeap=0x1f0000) returned 1 [0195.612] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c560 | out: hHeap=0x1f0000) returned 1 [0195.612] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c660 | out: hHeap=0x1f0000) returned 1 [0195.612] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239da8 | out: hHeap=0x1f0000) returned 1 [0195.612] CloseHandle (hObject=0x1f0) returned 1 [0195.613] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c650 | out: hHeap=0x1f0000) returned 1 [0195.613] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c640 | out: hHeap=0x1f0000) returned 1 [0195.613] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24fad8 | out: hHeap=0x1f0000) returned 1 [0195.613] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ee8 | out: hHeap=0x1f0000) returned 1 [0195.613] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101f8 | out: hHeap=0x1f0000) returned 1 [0195.613] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205330 | out: hHeap=0x1f0000) returned 1 [0195.613] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x240de0 | out: hHeap=0x1f0000) returned 1 [0195.614] CloseHandle (hObject=0x214) returned 1 [0195.614] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5d0 | out: hHeap=0x1f0000) returned 1 [0195.614] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c6d0 | out: hHeap=0x1f0000) returned 1 [0195.614] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24fa20 | out: hHeap=0x1f0000) returned 1 [0195.614] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2052f0 | out: hHeap=0x1f0000) returned 1 [0195.615] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25fdf8 | out: hHeap=0x1f0000) returned 1 [0195.615] CloseHandle (hObject=0x1c8) returned 1 [0195.615] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c4f0 | out: hHeap=0x1f0000) returned 1 [0195.615] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c4c0 | out: hHeap=0x1f0000) returned 1 [0195.615] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25fd40 | out: hHeap=0x1f0000) returned 1 [0195.616] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c440 | out: hHeap=0x1f0000) returned 1 [0195.616] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c430 | out: hHeap=0x1f0000) returned 1 [0195.616] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c420 | out: hHeap=0x1f0000) returned 1 [0195.616] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c450 | out: hHeap=0x1f0000) returned 1 [0195.616] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24b080 | out: hHeap=0x1f0000) returned 1 [0195.616] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24fd60 | out: hHeap=0x1f0000) returned 1 [0195.616] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20d778 | out: hHeap=0x1f0000) returned 1 [0195.616] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206868 | out: hHeap=0x1f0000) returned 1 [0195.616] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210018 | out: hHeap=0x1f0000) returned 1 [0195.616] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffe8 | out: hHeap=0x1f0000) returned 1 [0195.616] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24afb0 | out: hHeap=0x1f0000) returned 1 [0195.616] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x256f90 | out: hHeap=0x1f0000) returned 1 [0195.616] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260188 | out: hHeap=0x1f0000) returned 1 [0195.617] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1feed0 | out: hHeap=0x1f0000) returned 1 [0195.617] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a838 | out: hHeap=0x1f0000) returned 1 [0195.617] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d6a0 | out: hHeap=0x1f0000) returned 1 [0195.617] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221d40 | out: hHeap=0x1f0000) returned 1 [0195.617] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b8c8 | out: hHeap=0x1f0000) returned 1 [0195.617] DeleteFileW (lpFileName="C:\\\\$GetCurrent\\SafeOS\\GetCurrentOOBE.dll" (normalized: "c:\\$getcurrent\\safeos\\getcurrentoobe.dll")) returned 1 [0195.619] FindNextFileW (in: hFindFile=0x214450, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956819aa, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x956819aa, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x980eecb6, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x9c, dwReserved0=0x21d1fe, dwReserved1=0x240022, cFileName="GetCurrentRollback.ini", cAlternateFileName="GETCUR~1.INI")) returned 1 [0195.619] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0195.619] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227fc8 [0195.619] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22aeb8 [0195.619] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227fc8 | out: hHeap=0x1f0000) returned 1 [0195.619] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a9d8 | out: hHeap=0x1f0000) returned 1 [0195.619] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0195.620] CreateFileW (lpFileName="C:\\\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini" (normalized: "c:\\$getcurrent\\safeos\\getcurrentrollback.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8 [0195.620] GetFileType (hFile=0x1c8) returned 0x1 [0195.621] CloseHandle (hObject=0x1c8) returned 1 [0195.621] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a838 [0195.621] GetFileAttributesExW (in: lpFileName="C:\\\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini" (normalized: "c:\\$getcurrent\\safeos\\getcurrentrollback.ini"), fInfoLevelId=0x0, lpFileInformation=0x173eb6c | out: lpFileInformation=0x173eb6c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956819aa, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x956819aa, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x980eecb6, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x9c)) returned 1 [0195.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a838 | out: hHeap=0x1f0000) returned 1 [0195.621] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a838 [0195.621] GetFileAttributesExW (in: lpFileName="C:\\\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini" (normalized: "c:\\$getcurrent\\safeos\\getcurrentrollback.ini"), fInfoLevelId=0x0, lpFileInformation=0x173eb7c | out: lpFileInformation=0x173eb7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956819aa, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x956819aa, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x980eecb6, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x9c)) returned 1 [0195.622] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a838 | out: hHeap=0x1f0000) returned 1 [0195.622] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ad18 [0195.622] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ad18 | out: hHeap=0x1f0000) returned 1 [0195.622] GetLastError () returned 0x0 [0195.622] SetLastError (dwErrCode=0x0) [0195.622] AreFileApisANSI () returned 1 [0195.622] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58420, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0195.622] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58420, cbMultiByte=4, lpWideCharStr=0x173eca8, cchWideChar=4 | out: lpWideCharStr=".exe") returned 4 [0195.622] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b458 [0195.622] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215b40 [0195.622] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f1b8 [0195.623] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ad18 [0195.623] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227fc8 [0195.623] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b778 [0195.623] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x22a688) returned 1 [0195.627] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x22b778 | out: pbBuffer=0x22b778) returned 1 [0195.627] CryptReleaseContext (hProv=0x22a688, dwFlags=0x0) returned 1 [0195.627] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b778 | out: hHeap=0x1f0000) returned 1 [0195.627] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x253678 [0195.627] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x229418 [0195.627] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=35299604229) returned 1 [0195.627] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0195.627] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=35299629236) returned 1 [0195.627] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0195.628] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x227ee8 [0195.628] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x256f90 [0195.628] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x260188 [0195.628] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x2606c0 [0195.628] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210078 [0195.628] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206868 [0195.628] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffe8 [0195.628] GetLastError () returned 0x0 [0195.628] SetLastError (dwErrCode=0x0) [0195.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0195.867] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2149d0 [0195.867] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x25fe48 [0195.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2149d0 | out: hHeap=0x1f0000) returned 1 [0195.867] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x106) returned 0x2608b0 [0195.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25fe48 | out: hHeap=0x1f0000) returned 1 [0195.867] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c450 [0195.868] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c650 [0195.868] CreateFileW (lpFileName="C:\\\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\$getcurrent\\safeos\\getcurrentrollback.ini.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e230, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0195.869] GetFileType (hFile=0x214) returned 0x1 [0195.869] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c6b0 [0195.870] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c660 [0195.870] CreateFileW (lpFileName="C:\\\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini" (normalized: "c:\\$getcurrent\\safeos\\getcurrentrollback.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0195.870] GetFileType (hFile=0x1f0) returned 0x1 [0195.870] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204fb0 [0195.870] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205150 [0195.870] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x25fe48 [0195.870] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c5c0 [0195.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c570 [0195.871] CreateFileW (lpFileName="C:\\\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\$getcurrent\\safeos\\getcurrentrollback.ini.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0195.871] GetFileType (hFile=0x204) returned 0x1 [0195.871] GetLastError () returned 0xb7 [0195.871] SetLastError (dwErrCode=0xb7) [0195.871] GetLastError () returned 0xb7 [0195.872] SetLastError (dwErrCode=0xb7) [0195.872] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204fb0 | out: hHeap=0x1f0000) returned 1 [0195.872] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205150 | out: hHeap=0x1f0000) returned 1 [0195.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe4) returned 0x2609c0 [0195.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x2052f0 [0195.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205330 [0195.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204fb0 [0195.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x24fa20 [0195.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c6c0 [0195.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c5d0 [0195.872] CreateFileW (lpFileName="C:\\\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\$getcurrent\\safeos\\getcurrentrollback.ini.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0195.873] GetFileType (hFile=0x200) returned 0x1 [0195.873] GetLastError () returned 0xb7 [0195.873] SetLastError (dwErrCode=0xb7) [0195.873] GetLastError () returned 0xb7 [0195.873] SetLastError (dwErrCode=0xb7) [0195.873] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205330 | out: hHeap=0x1f0000) returned 1 [0195.873] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204fb0 | out: hHeap=0x1f0000) returned 1 [0195.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205150 [0195.873] GetLastError () returned 0xb7 [0195.873] SetLastError (dwErrCode=0xb7) [0195.873] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205150 | out: hHeap=0x1f0000) returned 1 [0195.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x2051f0 [0195.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205330 [0195.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204fb0 [0195.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb8) returned 0x24fad8 [0195.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c6d0 [0195.874] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c640 [0195.874] CreateFileW (lpFileName="C:\\\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini" (normalized: "c:\\$getcurrent\\safeos\\getcurrentrollback.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1a4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0195.874] GetFileType (hFile=0x1f8) returned 0x1 [0195.874] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x239da8 [0195.874] ReadFile (in: hFile=0x1f8, lpBuffer=0x239da8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e100, lpOverlapped=0x0 | out: lpBuffer=0x239da8*, lpNumberOfBytesRead=0x173e100*=0x9c, lpOverlapped=0x0) returned 1 [0195.876] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x222ee8 [0195.876] ReadFile (in: hFile=0x1f8, lpBuffer=0x239da8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e190, lpOverlapped=0x0 | out: lpBuffer=0x239da8*, lpNumberOfBytesRead=0x173e190*=0x0, lpOverlapped=0x0) returned 1 [0195.876] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x241de8 [0195.876] GetLastError () returned 0x0 [0195.876] SetLastError (dwErrCode=0x0) [0195.877] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210240 [0195.877] GetLastError () returned 0x0 [0195.877] SetLastError (dwErrCode=0x0) [0195.877] WriteFile (in: hFile=0x200, lpBuffer=0x241de8*, nNumberOfBytesToWrite=0xac, lpNumberOfBytesWritten=0x173e084, lpOverlapped=0x0 | out: lpBuffer=0x241de8*, lpNumberOfBytesWritten=0x173e084*=0xac, lpOverlapped=0x0) returned 1 [0195.878] GetLastError () returned 0x0 [0195.878] SetLastError (dwErrCode=0x0) [0195.878] GetLastError () returned 0x0 [0195.878] SetLastError (dwErrCode=0x0) [0195.879] GetLastError () returned 0x0 [0195.879] SetLastError (dwErrCode=0x0) [0195.879] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205330 | out: hHeap=0x1f0000) returned 1 [0195.879] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204fb0 | out: hHeap=0x1f0000) returned 1 [0195.879] CloseHandle (hObject=0x214) returned 1 [0195.883] CloseHandle (hObject=0x1f0) returned 1 [0195.884] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c6f0 [0195.884] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c670 [0195.884] CreateFileW (lpFileName="C:\\\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini" (normalized: "c:\\$getcurrent\\safeos\\getcurrentrollback.ini"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0195.886] GetFileType (hFile=0x1f0) returned 0x1 [0195.886] GetLastError () returned 0xb7 [0195.886] SetLastError (dwErrCode=0xb7) [0195.886] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x242df0 [0195.886] GetLastError () returned 0xb7 [0195.886] SetLastError (dwErrCode=0xb7) [0195.887] WriteFile (in: hFile=0x1f0, lpBuffer=0x173cef4*, nNumberOfBytesToWrite=0x1, lpNumberOfBytesWritten=0x173ceec, lpOverlapped=0x0 | out: lpBuffer=0x173cef4*, lpNumberOfBytesWritten=0x173ceec*=0x1, lpOverlapped=0x0) returned 1 [0195.888] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x242df0 | out: hHeap=0x1f0000) returned 1 [0195.888] CloseHandle (hObject=0x1f0) returned 1 [0195.888] DeleteFileW (lpFileName="C:\\\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini" (normalized: "c:\\$getcurrent\\safeos\\getcurrentrollback.ini")) returned 0 [0195.888] GetLastError () returned 0x20 [0195.888] GetLastError () returned 0x20 [0195.889] SetLastError (dwErrCode=0x20) [0195.889] GetLastError () returned 0x20 [0195.889] SetLastError (dwErrCode=0x20) [0195.889] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2160e0 [0195.889] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b5e8 [0195.889] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b7c8 [0195.889] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x215d38 [0195.889] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205330 [0195.889] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204fb0 [0195.889] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x21c680 [0195.889] GetLastError () returned 0x20 [0195.889] SetLastError (dwErrCode=0x20) [0195.889] GetLastError () returned 0x20 [0195.889] SetLastError (dwErrCode=0x20) [0195.889] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205330 | out: hHeap=0x1f0000) returned 1 [0195.889] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204fb0 | out: hHeap=0x1f0000) returned 1 [0195.889] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x227ee8 [0195.889] GetLastError () returned 0x20 [0195.889] SetLastError (dwErrCode=0x20) [0195.889] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0195.889] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x227ee8 [0195.889] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ab10 [0195.890] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x22b638 [0195.890] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2232f0 [0195.890] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c580 [0195.890] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b6b0 [0195.890] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0195.890] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c690 [0195.890] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b340 [0195.890] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210258 [0195.890] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x22b840 [0195.890] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x24fb98 [0195.890] GetLastError () returned 0x20 [0195.890] SetLastError (dwErrCode=0x20) [0195.890] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0195.890] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x21c710 [0195.890] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x21c560 [0195.890] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2063f0 [0195.890] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c560 | out: hHeap=0x1f0000) returned 1 [0195.890] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x206520 [0195.890] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2063f0 | out: hHeap=0x1f0000) returned 1 [0195.890] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c710 | out: hHeap=0x1f0000) returned 1 [0195.891] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x206400 [0195.891] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210228 [0195.891] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206400 | out: hHeap=0x1f0000) returned 1 [0195.891] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101c8 [0195.891] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210228 | out: hHeap=0x1f0000) returned 1 [0195.891] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206520 | out: hHeap=0x1f0000) returned 1 [0195.891] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101f8 [0195.891] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210228 [0195.891] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101f8 | out: hHeap=0x1f0000) returned 1 [0195.891] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101f8 [0195.891] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210228 | out: hHeap=0x1f0000) returned 1 [0195.891] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0195.891] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0195.891] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x205150 [0195.891] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0195.891] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205330 [0195.891] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205150 | out: hHeap=0x1f0000) returned 1 [0195.891] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101f8 | out: hHeap=0x1f0000) returned 1 [0195.891] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205150 [0195.891] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x22b868 [0195.891] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205150 | out: hHeap=0x1f0000) returned 1 [0195.891] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x205150 [0195.891] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b868 | out: hHeap=0x1f0000) returned 1 [0195.892] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205330 | out: hHeap=0x1f0000) returned 1 [0195.892] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204fb0 [0195.892] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206898 [0195.892] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204fb0 | out: hHeap=0x1f0000) returned 1 [0195.892] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x22b868 [0195.892] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206898 | out: hHeap=0x1f0000) returned 1 [0195.892] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205150 | out: hHeap=0x1f0000) returned 1 [0195.892] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x206430 [0195.892] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101f8 [0195.892] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206430 | out: hHeap=0x1f0000) returned 1 [0195.892] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210228 [0195.892] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101f8 | out: hHeap=0x1f0000) returned 1 [0195.892] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x205150 [0195.892] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210228 | out: hHeap=0x1f0000) returned 1 [0195.892] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x2065f8 [0195.892] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205150 | out: hHeap=0x1f0000) returned 1 [0195.892] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2065f8 | out: hHeap=0x1f0000) returned 1 [0195.892] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b868 | out: hHeap=0x1f0000) returned 1 [0195.892] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b5e8 | out: hHeap=0x1f0000) returned 1 [0195.893] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0195.893] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2232f0 | out: hHeap=0x1f0000) returned 1 [0195.893] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b638 | out: hHeap=0x1f0000) returned 1 [0195.893] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0195.893] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b5e8 [0195.893] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x22a4f0) returned 1 [0195.896] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x22b5e8 | out: pbBuffer=0x22b5e8) returned 1 [0195.896] CryptReleaseContext (hProv=0x22a4f0, dwFlags=0x0) returned 1 [0195.896] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b5e8 | out: hHeap=0x1f0000) returned 1 [0195.896] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b5e8 [0195.896] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b638 [0195.896] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228310 [0195.896] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b5e8 | out: hHeap=0x1f0000) returned 1 [0195.896] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0195.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228310 | out: hHeap=0x1f0000) returned 1 [0195.897] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x239878 [0195.897] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0195.897] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x22a8a0 [0195.897] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x22b5e8 [0195.897] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2232f0 [0195.897] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205330 [0195.897] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a970 [0195.897] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x22b868 [0195.897] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x234b90 [0195.897] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2064e0 [0195.897] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b8c8 [0195.897] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210228 [0195.897] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2063f0 [0195.897] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b8f0 [0195.897] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101f8 [0195.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101f8 | out: hHeap=0x1f0000) returned 1 [0195.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b8f0 | out: hHeap=0x1f0000) returned 1 [0195.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2063f0 | out: hHeap=0x1f0000) returned 1 [0195.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210228 | out: hHeap=0x1f0000) returned 1 [0195.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b8c8 | out: hHeap=0x1f0000) returned 1 [0195.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2064e0 | out: hHeap=0x1f0000) returned 1 [0195.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b90 | out: hHeap=0x1f0000) returned 1 [0195.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b868 | out: hHeap=0x1f0000) returned 1 [0195.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a970 | out: hHeap=0x1f0000) returned 1 [0195.898] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x2282a0 [0195.898] GetLastError () returned 0x0 [0195.898] SetLastError (dwErrCode=0x0) [0195.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0195.898] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x228310 [0195.898] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0195.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0195.898] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0195.898] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0195.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0195.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0195.898] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x221460 [0195.898] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x234b90 [0195.898] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0195.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0195.898] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0195.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0195.898] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x234c98 [0195.898] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0195.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0195.899] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fc18 [0195.899] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x25bbb0 [0195.899] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x234da0 [0195.899] QueryPerformanceCounter (in: lpPerformanceCount=0x173dee0 | out: lpPerformanceCount=0x173dee0*=35326762766) returned 1 [0195.899] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173df20 | out: lpSystemTimeAsFileTime=0x173df20) [0195.899] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x206560 [0195.899] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b8c8 [0195.899] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204fb0 [0195.899] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204fb0 | out: hHeap=0x1f0000) returned 1 [0195.899] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b8c8 | out: hHeap=0x1f0000) returned 1 [0195.899] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b8c8 [0195.899] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204fb0 [0195.899] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204fb0 | out: hHeap=0x1f0000) returned 1 [0195.899] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b8c8 | out: hHeap=0x1f0000) returned 1 [0195.899] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206560 | out: hHeap=0x1f0000) returned 1 [0195.899] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0195.899] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x2282a0 [0195.899] GetLastError () returned 0x0 [0195.899] SetLastError (dwErrCode=0x0) [0195.899] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0195.900] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0195.900] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0195.900] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0195.900] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b8c8 [0195.900] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b8f0 [0195.900] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0195.900] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0195.900] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b9e0 [0195.900] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0195.900] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x2356d0 [0195.900] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0195.900] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x235bf0 [0195.900] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0195.900] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x234eb0 [0195.900] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235bf0 | out: hHeap=0x1f0000) returned 1 [0195.900] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20bd50 [0195.900] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20bb98 [0195.900] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20bd50 | out: hHeap=0x1f0000) returned 1 [0195.900] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0195.900] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20bb98 | out: hHeap=0x1f0000) returned 1 [0195.900] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x235bf0 [0195.900] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x237fa8 [0195.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fa8 | out: hHeap=0x1f0000) returned 1 [0195.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235bf0 | out: hHeap=0x1f0000) returned 1 [0195.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234eb0 | out: hHeap=0x1f0000) returned 1 [0195.901] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101f8 [0195.901] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215d80 [0195.901] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20bb98 [0195.901] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20bc38 [0195.901] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20bd50 [0195.901] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b868 [0195.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20bc38 | out: hHeap=0x1f0000) returned 1 [0195.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20bb98 | out: hHeap=0x1f0000) returned 1 [0195.901] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x235bf0 [0195.901] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20bc38 [0195.901] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20bb98 [0195.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20bc38 | out: hHeap=0x1f0000) returned 1 [0195.901] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0195.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20bb98 | out: hHeap=0x1f0000) returned 1 [0195.901] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2066b8 [0195.901] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x237fa8 [0195.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fa8 | out: hHeap=0x1f0000) returned 1 [0195.902] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2066b8 | out: hHeap=0x1f0000) returned 1 [0195.902] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b9e0 | out: hHeap=0x1f0000) returned 1 [0195.902] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2367e0 [0195.902] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0195.902] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235bf0 | out: hHeap=0x1f0000) returned 1 [0195.902] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x205150 [0195.902] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x237810 [0195.902] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x235fc8 [0195.902] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b8f0 | out: hHeap=0x1f0000) returned 1 [0195.902] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x237248 [0195.902] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235fc8 | out: hHeap=0x1f0000) returned 1 [0195.902] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b868 | out: hHeap=0x1f0000) returned 1 [0195.902] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20bd50 | out: hHeap=0x1f0000) returned 1 [0195.902] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215d80 | out: hHeap=0x1f0000) returned 1 [0195.902] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237810 | out: hHeap=0x1f0000) returned 1 [0195.902] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205150 | out: hHeap=0x1f0000) returned 1 [0195.902] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101f8 | out: hHeap=0x1f0000) returned 1 [0195.902] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0195.902] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x236a30 [0195.902] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236a30 | out: hHeap=0x1f0000) returned 1 [0195.902] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2356d0 | out: hHeap=0x1f0000) returned 1 [0195.903] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0195.903] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2367e0 | out: hHeap=0x1f0000) returned 1 [0195.903] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0195.903] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0195.903] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b8c8 | out: hHeap=0x1f0000) returned 1 [0195.903] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0195.903] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0195.903] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x237dd8 [0195.903] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x236340 [0195.903] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237dd8 | out: hHeap=0x1f0000) returned 1 [0195.903] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236340 | out: hHeap=0x1f0000) returned 1 [0195.903] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237248 | out: hHeap=0x1f0000) returned 1 [0195.903] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0195.903] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234c98 | out: hHeap=0x1f0000) returned 1 [0195.903] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221460 | out: hHeap=0x1f0000) returned 1 [0195.903] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x234eb0 [0195.903] GetLastError () returned 0x0 [0195.903] SetLastError (dwErrCode=0x0) [0195.903] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228310 | out: hHeap=0x1f0000) returned 1 [0195.903] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2064e0 [0195.904] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x206500 [0195.904] CreateFileW (lpFileName="C:\\\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\$getcurrent\\safeos\\getcurrentrollback.ini.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e290, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0195.904] GetFileType (hFile=0x1f0) returned 0x1 [0195.905] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x242df0 [0195.905] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e218 | out: lpNewFilePointer=0x0) returned 1 [0195.905] GetLastError () returned 0xb7 [0195.905] SetLastError (dwErrCode=0xb7) [0195.905] GetLastError () returned 0xb7 [0195.905] SetLastError (dwErrCode=0xb7) [0195.905] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e2dc | out: lpNewFilePointer=0x0) returned 1 [0195.906] WriteFile (in: hFile=0x1f0, lpBuffer=0x242df0*, nNumberOfBytesToWrite=0x103, lpNumberOfBytesWritten=0x173e340, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesWritten=0x173e340*=0x103, lpOverlapped=0x0) returned 1 [0195.906] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x242df0 | out: hHeap=0x1f0000) returned 1 [0195.906] CloseHandle (hObject=0x1f0) returned 1 [0196.310] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206500 | out: hHeap=0x1f0000) returned 1 [0196.310] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2064e0 | out: hHeap=0x1f0000) returned 1 [0196.310] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b90 | out: hHeap=0x1f0000) returned 1 [0196.310] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2232f0 | out: hHeap=0x1f0000) returned 1 [0196.310] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b5e8 | out: hHeap=0x1f0000) returned 1 [0196.310] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205330 | out: hHeap=0x1f0000) returned 1 [0196.310] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a8a0 | out: hHeap=0x1f0000) returned 1 [0196.310] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0196.310] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239878 | out: hHeap=0x1f0000) returned 1 [0196.311] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234eb0 | out: hHeap=0x1f0000) returned 1 [0196.311] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b638 | out: hHeap=0x1f0000) returned 1 [0196.311] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0196.311] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25bbb0 | out: hHeap=0x1f0000) returned 1 [0196.311] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234da0 | out: hHeap=0x1f0000) returned 1 [0196.311] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0196.311] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c680 | out: hHeap=0x1f0000) returned 1 [0196.311] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0196.311] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b340 | out: hHeap=0x1f0000) returned 1 [0196.311] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c690 | out: hHeap=0x1f0000) returned 1 [0196.311] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0196.311] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b6b0 | out: hHeap=0x1f0000) returned 1 [0196.311] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c580 | out: hHeap=0x1f0000) returned 1 [0196.312] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24fb98 | out: hHeap=0x1f0000) returned 1 [0196.312] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b840 | out: hHeap=0x1f0000) returned 1 [0196.312] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab10 | out: hHeap=0x1f0000) returned 1 [0196.312] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215d38 | out: hHeap=0x1f0000) returned 1 [0196.312] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b7c8 | out: hHeap=0x1f0000) returned 1 [0196.312] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0196.312] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2160e0 | out: hHeap=0x1f0000) returned 1 [0196.312] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c670 | out: hHeap=0x1f0000) returned 1 [0196.312] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c6f0 | out: hHeap=0x1f0000) returned 1 [0196.312] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239da8 | out: hHeap=0x1f0000) returned 1 [0196.312] CloseHandle (hObject=0x1f8) returned 1 [0196.313] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c640 | out: hHeap=0x1f0000) returned 1 [0196.313] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c6d0 | out: hHeap=0x1f0000) returned 1 [0196.313] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24fad8 | out: hHeap=0x1f0000) returned 1 [0196.313] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ee8 | out: hHeap=0x1f0000) returned 1 [0196.313] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210240 | out: hHeap=0x1f0000) returned 1 [0196.313] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2051f0 | out: hHeap=0x1f0000) returned 1 [0196.313] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x241de8 | out: hHeap=0x1f0000) returned 1 [0196.313] CloseHandle (hObject=0x200) returned 1 [0196.313] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5d0 | out: hHeap=0x1f0000) returned 1 [0196.313] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c6c0 | out: hHeap=0x1f0000) returned 1 [0196.313] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24fa20 | out: hHeap=0x1f0000) returned 1 [0196.313] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2052f0 | out: hHeap=0x1f0000) returned 1 [0196.313] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609c0 | out: hHeap=0x1f0000) returned 1 [0196.314] CloseHandle (hObject=0x204) returned 1 [0196.314] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c570 | out: hHeap=0x1f0000) returned 1 [0196.314] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5c0 | out: hHeap=0x1f0000) returned 1 [0196.314] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25fe48 | out: hHeap=0x1f0000) returned 1 [0196.314] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c660 | out: hHeap=0x1f0000) returned 1 [0196.314] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c6b0 | out: hHeap=0x1f0000) returned 1 [0196.314] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c650 | out: hHeap=0x1f0000) returned 1 [0196.315] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c450 | out: hHeap=0x1f0000) returned 1 [0196.315] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608b0 | out: hHeap=0x1f0000) returned 1 [0196.315] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x256f90 | out: hHeap=0x1f0000) returned 1 [0196.315] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260188 | out: hHeap=0x1f0000) returned 1 [0196.315] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206868 | out: hHeap=0x1f0000) returned 1 [0196.315] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffe8 | out: hHeap=0x1f0000) returned 1 [0196.315] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210078 | out: hHeap=0x1f0000) returned 1 [0196.315] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606c0 | out: hHeap=0x1f0000) returned 1 [0196.315] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x253678 | out: hHeap=0x1f0000) returned 1 [0196.315] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0196.315] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227fc8 | out: hHeap=0x1f0000) returned 1 [0196.315] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ad18 | out: hHeap=0x1f0000) returned 1 [0196.315] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f1b8 | out: hHeap=0x1f0000) returned 1 [0196.315] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215b40 | out: hHeap=0x1f0000) returned 1 [0196.315] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b458 | out: hHeap=0x1f0000) returned 1 [0196.315] DeleteFileW (lpFileName="C:\\\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini" (normalized: "c:\\$getcurrent\\safeos\\getcurrentrollback.ini")) returned 1 [0196.319] FindNextFileW (in: hFindFile=0x214450, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x54acc791, ftLastAccessTime.dwHighDateTime=0x1d3273a, ftLastWriteTime.dwLowDateTime=0x54acc791, ftLastWriteTime.dwHighDateTime=0x1d3273a, nFileSizeHigh=0x0, nFileSizeLow=0x241, dwReserved0=0x21d1fe, dwReserved1=0x240022, cFileName="PartnerSetupComplete.cmd", cAlternateFileName="PARTNE~1.CMD")) returned 1 [0196.319] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215b40 [0196.319] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cfa8 [0196.319] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22af20 [0196.319] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cfa8 | out: hHeap=0x1f0000) returned 1 [0196.319] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aeb8 | out: hHeap=0x1f0000) returned 1 [0196.319] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215b40 | out: hHeap=0x1f0000) returned 1 [0196.320] CreateFileW (lpFileName="C:\\\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\partnersetupcomplete.cmd"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0196.320] GetFileType (hFile=0x204) returned 0x1 [0196.320] CloseHandle (hObject=0x204) returned 1 [0196.321] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ad18 [0196.321] GetFileAttributesExW (in: lpFileName="C:\\\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\partnersetupcomplete.cmd"), fInfoLevelId=0x0, lpFileInformation=0x173eb6c | out: lpFileInformation=0x173eb6c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x54acc791, ftLastAccessTime.dwHighDateTime=0x1d3273a, ftLastWriteTime.dwLowDateTime=0x54acc791, ftLastWriteTime.dwHighDateTime=0x1d3273a, nFileSizeHigh=0x0, nFileSizeLow=0x241)) returned 1 [0196.321] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ad18 | out: hHeap=0x1f0000) returned 1 [0196.321] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22aeb8 [0196.321] GetFileAttributesExW (in: lpFileName="C:\\\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\partnersetupcomplete.cmd"), fInfoLevelId=0x0, lpFileInformation=0x173eb7c | out: lpFileInformation=0x173eb7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x54acc791, ftLastAccessTime.dwHighDateTime=0x1d3273a, ftLastWriteTime.dwLowDateTime=0x54acc791, ftLastWriteTime.dwHighDateTime=0x1d3273a, nFileSizeHigh=0x0, nFileSizeLow=0x241)) returned 1 [0196.321] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aeb8 | out: hHeap=0x1f0000) returned 1 [0196.321] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ab78 [0196.321] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab78 | out: hHeap=0x1f0000) returned 1 [0196.321] GetLastError () returned 0x0 [0196.321] SetLastError (dwErrCode=0x0) [0196.321] AreFileApisANSI () returned 1 [0196.321] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58420, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0196.321] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58420, cbMultiByte=4, lpWideCharStr=0x173eca8, cchWideChar=4 | out: lpWideCharStr=".exe") returned 4 [0196.321] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0196.321] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215b40 [0196.322] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22eb58 [0196.322] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ab10 [0196.322] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cfa8 [0196.322] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0196.322] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x22a138) returned 1 [0196.326] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2381e0 | out: pbBuffer=0x2381e0) returned 1 [0196.326] CryptReleaseContext (hProv=0x22a138, dwFlags=0x0) returned 1 [0196.326] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0196.326] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x256f90 [0196.326] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x229418 [0196.326] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=35369500505) returned 1 [0196.326] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0196.326] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=35369543343) returned 1 [0196.327] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0196.327] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x21d050 [0196.327] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x253678 [0196.327] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x217038 [0196.327] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x2351d8 [0196.327] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffb8 [0196.327] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206838 [0196.327] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20fef8 [0196.327] GetLastError () returned 0x0 [0196.328] SetLastError (dwErrCode=0x0) [0196.328] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0196.328] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x215060 [0196.328] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x239be0 [0196.328] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215060 | out: hHeap=0x1f0000) returned 1 [0196.328] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x106) returned 0x260188 [0196.328] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239be0 | out: hHeap=0x1f0000) returned 1 [0196.328] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x206500 [0196.329] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2064e0 [0196.329] CreateFileW (lpFileName="C:\\\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\$getcurrent\\safeos\\partnersetupcomplete.cmd.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e230, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0196.330] GetFileType (hFile=0x204) returned 0x1 [0196.330] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x206470 [0196.331] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x206520 [0196.331] CreateFileW (lpFileName="C:\\\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\partnersetupcomplete.cmd"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0196.332] GetFileType (hFile=0x200) returned 0x1 [0196.333] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205130 [0196.333] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x2051f0 [0196.333] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x239be0 [0196.333] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2063f0 [0196.333] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x206560 [0196.334] CreateFileW (lpFileName="C:\\\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\$getcurrent\\safeos\\partnersetupcomplete.cmd.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0196.334] GetFileType (hFile=0x1f8) returned 0x1 [0196.335] GetLastError () returned 0xb7 [0196.335] SetLastError (dwErrCode=0xb7) [0196.335] GetLastError () returned 0xb7 [0196.335] SetLastError (dwErrCode=0xb7) [0196.335] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205130 | out: hHeap=0x1f0000) returned 1 [0196.335] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2051f0 | out: hHeap=0x1f0000) returned 1 [0196.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe4) returned 0x2606c0 [0196.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205130 [0196.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x2052d0 [0196.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x2051f0 [0196.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x234b90 [0196.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x206410 [0196.336] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x206400 [0196.336] CreateFileW (lpFileName="C:\\\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\$getcurrent\\safeos\\partnersetupcomplete.cmd.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0196.336] GetFileType (hFile=0x1f0) returned 0x1 [0196.337] GetLastError () returned 0xb7 [0196.337] SetLastError (dwErrCode=0xb7) [0196.337] GetLastError () returned 0xb7 [0196.337] SetLastError (dwErrCode=0xb7) [0196.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2052d0 | out: hHeap=0x1f0000) returned 1 [0196.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2051f0 | out: hHeap=0x1f0000) returned 1 [0196.337] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x2051f0 [0196.337] GetLastError () returned 0xb7 [0196.337] SetLastError (dwErrCode=0xb7) [0196.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2051f0 | out: hHeap=0x1f0000) returned 1 [0196.337] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x2052d0 [0196.337] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205150 [0196.337] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x2051f0 [0196.338] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb8) returned 0x22d368 [0196.338] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x206450 [0196.338] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x206440 [0196.338] CreateFileW (lpFileName="C:\\\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\partnersetupcomplete.cmd"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1a4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0196.338] GetFileType (hFile=0x208) returned 0x1 [0196.339] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x240de0 [0196.339] ReadFile (in: hFile=0x208, lpBuffer=0x240de0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e100, lpOverlapped=0x0 | out: lpBuffer=0x240de0*, lpNumberOfBytesRead=0x173e100*=0x241, lpOverlapped=0x0) returned 1 [0196.342] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24f370 [0196.342] ReadFile (in: hFile=0x208, lpBuffer=0x240de0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e190, lpOverlapped=0x0 | out: lpBuffer=0x240de0*, lpNumberOfBytesRead=0x173e190*=0x0, lpOverlapped=0x0) returned 1 [0196.342] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x239da8 [0196.342] GetLastError () returned 0x0 [0196.342] SetLastError (dwErrCode=0x0) [0196.342] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffd0 [0196.343] GetLastError () returned 0x0 [0196.343] SetLastError (dwErrCode=0x0) [0196.343] WriteFile (in: hFile=0x1f0, lpBuffer=0x239da8*, nNumberOfBytesToWrite=0x251, lpNumberOfBytesWritten=0x173e084, lpOverlapped=0x0 | out: lpBuffer=0x239da8*, lpNumberOfBytesWritten=0x173e084*=0x251, lpOverlapped=0x0) returned 1 [0196.345] GetLastError () returned 0x0 [0196.345] SetLastError (dwErrCode=0x0) [0196.345] GetLastError () returned 0x0 [0196.345] SetLastError (dwErrCode=0x0) [0196.345] GetLastError () returned 0x0 [0196.345] SetLastError (dwErrCode=0x0) [0196.345] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205150 | out: hHeap=0x1f0000) returned 1 [0196.345] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2051f0 | out: hHeap=0x1f0000) returned 1 [0196.345] CloseHandle (hObject=0x204) returned 1 [0196.346] CloseHandle (hObject=0x200) returned 1 [0196.346] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x206460 [0196.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c4c0 [0196.347] CreateFileW (lpFileName="C:\\\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\partnersetupcomplete.cmd"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0196.595] GetFileType (hFile=0x214) returned 0x1 [0196.595] GetLastError () returned 0xb7 [0196.595] SetLastError (dwErrCode=0xb7) [0196.596] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x243df8 [0196.596] GetLastError () returned 0xb7 [0196.596] SetLastError (dwErrCode=0xb7) [0196.596] WriteFile (in: hFile=0x214, lpBuffer=0x173cef4*, nNumberOfBytesToWrite=0x1, lpNumberOfBytesWritten=0x173ceec, lpOverlapped=0x0 | out: lpBuffer=0x173cef4*, lpNumberOfBytesWritten=0x173ceec*=0x1, lpOverlapped=0x0) returned 1 [0196.599] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x243df8 | out: hHeap=0x1f0000) returned 1 [0196.599] CloseHandle (hObject=0x214) returned 1 [0196.599] DeleteFileW (lpFileName="C:\\\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\partnersetupcomplete.cmd")) returned 0 [0196.599] GetLastError () returned 0x20 [0196.599] GetLastError () returned 0x20 [0196.599] SetLastError (dwErrCode=0x20) [0196.600] GetLastError () returned 0x20 [0196.600] SetLastError (dwErrCode=0x20) [0196.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216050 [0196.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238438 [0196.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238348 [0196.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x215af8 [0196.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c30 [0196.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0196.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x21c720 [0196.600] GetLastError () returned 0x20 [0196.600] SetLastError (dwErrCode=0x20) [0196.600] GetLastError () returned 0x20 [0196.600] SetLastError (dwErrCode=0x20) [0196.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c30 | out: hHeap=0x1f0000) returned 1 [0196.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d70 | out: hHeap=0x1f0000) returned 1 [0196.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x21cf38 [0196.601] GetLastError () returned 0x20 [0196.601] SetLastError (dwErrCode=0x20) [0196.601] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf38 | out: hHeap=0x1f0000) returned 1 [0196.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x21cf38 [0196.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22abe0 [0196.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238078 [0196.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x225048 [0196.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c560 [0196.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0196.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210258 [0196.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c700 [0196.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380c8 [0196.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210240 [0196.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2380f0 [0196.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x225150 [0196.602] GetLastError () returned 0x20 [0196.602] SetLastError (dwErrCode=0x20) [0196.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf38 | out: hHeap=0x1f0000) returned 1 [0196.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x21c680 [0196.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x21c5f0 [0196.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c570 [0196.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5f0 | out: hHeap=0x1f0000) returned 1 [0196.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c580 [0196.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c570 | out: hHeap=0x1f0000) returned 1 [0196.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c680 | out: hHeap=0x1f0000) returned 1 [0196.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c5e0 [0196.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101f8 [0196.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5e0 | out: hHeap=0x1f0000) returned 1 [0196.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101e0 [0196.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101f8 | out: hHeap=0x1f0000) returned 1 [0196.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c580 | out: hHeap=0x1f0000) returned 1 [0196.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101f8 [0196.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffe8 [0196.603] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101f8 | out: hHeap=0x1f0000) returned 1 [0196.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101f8 [0196.603] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffe8 | out: hHeap=0x1f0000) returned 1 [0196.603] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0196.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0196.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204d50 [0196.603] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0196.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bf0 [0196.603] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d50 | out: hHeap=0x1f0000) returned 1 [0196.603] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101f8 | out: hHeap=0x1f0000) returned 1 [0196.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e70 [0196.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238140 [0196.603] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e70 | out: hHeap=0x1f0000) returned 1 [0196.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204d70 [0196.603] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0196.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bf0 | out: hHeap=0x1f0000) returned 1 [0196.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204ed0 [0196.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x2068f8 [0196.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ed0 | out: hHeap=0x1f0000) returned 1 [0196.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238320 [0196.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2068f8 | out: hHeap=0x1f0000) returned 1 [0196.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d70 | out: hHeap=0x1f0000) returned 1 [0196.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c570 [0196.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101e0 [0196.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c570 | out: hHeap=0x1f0000) returned 1 [0196.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101f8 [0196.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0196.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204e10 [0196.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101f8 | out: hHeap=0x1f0000) returned 1 [0196.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206628 [0196.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e10 | out: hHeap=0x1f0000) returned 1 [0196.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206628 | out: hHeap=0x1f0000) returned 1 [0196.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0196.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238438 | out: hHeap=0x1f0000) returned 1 [0196.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0196.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225048 | out: hHeap=0x1f0000) returned 1 [0196.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0196.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf38 [0196.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238258 [0196.605] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x22a4f0) returned 1 [0196.607] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238258 | out: pbBuffer=0x238258) returned 1 [0196.607] CryptReleaseContext (hProv=0x22a4f0, dwFlags=0x0) returned 1 [0196.607] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238258 | out: hHeap=0x1f0000) returned 1 [0196.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238050 [0196.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2382a8 [0196.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0196.608] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238050 | out: hHeap=0x1f0000) returned 1 [0196.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0196.608] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0196.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x239718 [0196.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0196.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x22aeb8 [0196.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238140 [0196.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x225048 [0196.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d30 [0196.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22aaa8 [0196.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2383e8 [0196.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x225258 [0196.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c6c0 [0196.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0196.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101f8 [0196.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c5d0 [0196.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238050 [0196.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210078 [0196.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210078 | out: hHeap=0x1f0000) returned 1 [0196.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238050 | out: hHeap=0x1f0000) returned 1 [0196.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5d0 | out: hHeap=0x1f0000) returned 1 [0196.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101f8 | out: hHeap=0x1f0000) returned 1 [0196.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0196.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c6c0 | out: hHeap=0x1f0000) returned 1 [0196.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225258 | out: hHeap=0x1f0000) returned 1 [0196.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0196.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aaa8 | out: hHeap=0x1f0000) returned 1 [0196.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x228230 [0196.609] GetLastError () returned 0x0 [0196.609] SetLastError (dwErrCode=0x0) [0196.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228230 | out: hHeap=0x1f0000) returned 1 [0196.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x227ee8 [0196.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0196.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0196.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0196.610] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0196.610] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0196.610] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0196.610] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x2211a0 [0196.610] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x225258 [0196.610] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0196.610] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0196.610] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0196.610] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0196.610] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2358e8 [0196.610] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0196.610] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0196.610] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x230258 [0196.610] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x25bbb0 [0196.610] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2359f0 [0196.610] QueryPerformanceCounter (in: lpPerformanceCount=0x173dee0 | out: lpPerformanceCount=0x173dee0*=35397935822) returned 1 [0196.611] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173df20 | out: lpSystemTimeAsFileTime=0x173df20) [0196.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x21c570 [0196.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0196.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cd0 [0196.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cd0 | out: hHeap=0x1f0000) returned 1 [0196.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0196.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0196.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cd0 [0196.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cd0 | out: hHeap=0x1f0000) returned 1 [0196.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0196.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c570 | out: hHeap=0x1f0000) returned 1 [0196.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0196.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x227fc8 [0196.611] GetLastError () returned 0x0 [0196.611] SetLastError (dwErrCode=0x0) [0196.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227fc8 | out: hHeap=0x1f0000) returned 1 [0196.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0196.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0196.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0196.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238050 [0196.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238168 [0196.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0196.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0196.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238208 [0196.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0196.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x222ee8 [0196.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0196.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x235b00 [0196.612] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0196.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2607b0 [0196.612] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b00 | out: hHeap=0x1f0000) returned 1 [0196.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238078 [0196.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x237fd8 [0196.612] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0196.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0196.612] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0196.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x235b00 [0196.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x2387b0 [0196.613] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387b0 | out: hHeap=0x1f0000) returned 1 [0196.613] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b00 | out: hHeap=0x1f0000) returned 1 [0196.613] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607b0 | out: hHeap=0x1f0000) returned 1 [0196.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101f8 [0196.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216200 [0196.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238230 [0196.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238488 [0196.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238190 [0196.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381b8 [0196.613] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238488 | out: hHeap=0x1f0000) returned 1 [0196.613] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0196.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x235b00 [0196.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238230 [0196.614] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238488 [0196.614] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0196.614] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0196.614] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238488 | out: hHeap=0x1f0000) returned 1 [0196.614] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2068f8 [0196.614] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x2607b0 [0196.614] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607b0 | out: hHeap=0x1f0000) returned 1 [0196.614] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2068f8 | out: hHeap=0x1f0000) returned 1 [0196.614] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0196.614] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x236590 [0196.614] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0196.614] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b00 | out: hHeap=0x1f0000) returned 1 [0196.614] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204e30 [0196.614] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2375c0 [0196.614] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x235fc8 [0196.614] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0196.614] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x237370 [0196.614] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235fc8 | out: hHeap=0x1f0000) returned 1 [0196.614] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0196.615] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0196.615] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216200 | out: hHeap=0x1f0000) returned 1 [0196.615] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2375c0 | out: hHeap=0x1f0000) returned 1 [0196.615] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e30 | out: hHeap=0x1f0000) returned 1 [0196.615] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101f8 | out: hHeap=0x1f0000) returned 1 [0196.615] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0196.615] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x236c80 [0196.615] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236c80 | out: hHeap=0x1f0000) returned 1 [0196.615] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ee8 | out: hHeap=0x1f0000) returned 1 [0196.615] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0196.615] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236590 | out: hHeap=0x1f0000) returned 1 [0196.615] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0196.615] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0196.615] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238050 | out: hHeap=0x1f0000) returned 1 [0196.615] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0196.615] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0196.615] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x236218 [0196.615] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x236da8 [0196.615] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236218 | out: hHeap=0x1f0000) returned 1 [0196.615] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236da8 | out: hHeap=0x1f0000) returned 1 [0196.615] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237370 | out: hHeap=0x1f0000) returned 1 [0196.616] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0196.616] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2358e8 | out: hHeap=0x1f0000) returned 1 [0196.616] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211a0 | out: hHeap=0x1f0000) returned 1 [0196.616] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x235b00 [0196.616] GetLastError () returned 0x0 [0196.616] SetLastError (dwErrCode=0x0) [0196.616] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0196.616] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c5d0 [0196.616] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c6c0 [0196.616] CreateFileW (lpFileName="C:\\\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\$getcurrent\\safeos\\partnersetupcomplete.cmd.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e290, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0196.617] GetFileType (hFile=0x214) returned 0x1 [0196.617] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x243df8 [0196.617] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e218 | out: lpNewFilePointer=0x0) returned 1 [0196.617] GetLastError () returned 0xb7 [0196.617] SetLastError (dwErrCode=0xb7) [0196.617] GetLastError () returned 0xb7 [0196.617] SetLastError (dwErrCode=0xb7) [0196.617] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e2dc | out: lpNewFilePointer=0x0) returned 1 [0196.618] WriteFile (in: hFile=0x214, lpBuffer=0x243df8*, nNumberOfBytesToWrite=0x103, lpNumberOfBytesWritten=0x173e340, lpOverlapped=0x0 | out: lpBuffer=0x243df8*, lpNumberOfBytesWritten=0x173e340*=0x103, lpOverlapped=0x0) returned 1 [0196.618] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x243df8 | out: hHeap=0x1f0000) returned 1 [0196.618] CloseHandle (hObject=0x214) returned 1 [0196.619] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c6c0 | out: hHeap=0x1f0000) returned 1 [0196.619] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5d0 | out: hHeap=0x1f0000) returned 1 [0196.619] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225258 | out: hHeap=0x1f0000) returned 1 [0196.619] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225048 | out: hHeap=0x1f0000) returned 1 [0196.619] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0196.619] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d30 | out: hHeap=0x1f0000) returned 1 [0196.619] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aeb8 | out: hHeap=0x1f0000) returned 1 [0196.619] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0196.619] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239718 | out: hHeap=0x1f0000) returned 1 [0196.619] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b00 | out: hHeap=0x1f0000) returned 1 [0196.620] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0196.620] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0196.620] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25bbb0 | out: hHeap=0x1f0000) returned 1 [0196.620] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2359f0 | out: hHeap=0x1f0000) returned 1 [0196.620] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf38 | out: hHeap=0x1f0000) returned 1 [0196.620] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c720 | out: hHeap=0x1f0000) returned 1 [0196.620] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210240 | out: hHeap=0x1f0000) returned 1 [0196.620] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380c8 | out: hHeap=0x1f0000) returned 1 [0196.620] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c700 | out: hHeap=0x1f0000) returned 1 [0196.620] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0196.620] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0196.620] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c560 | out: hHeap=0x1f0000) returned 1 [0196.620] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225150 | out: hHeap=0x1f0000) returned 1 [0196.620] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380f0 | out: hHeap=0x1f0000) returned 1 [0196.620] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22abe0 | out: hHeap=0x1f0000) returned 1 [0196.620] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215af8 | out: hHeap=0x1f0000) returned 1 [0196.620] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238348 | out: hHeap=0x1f0000) returned 1 [0196.620] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0196.620] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216050 | out: hHeap=0x1f0000) returned 1 [0196.620] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c4c0 | out: hHeap=0x1f0000) returned 1 [0196.620] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206460 | out: hHeap=0x1f0000) returned 1 [0196.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x240de0 | out: hHeap=0x1f0000) returned 1 [0196.621] CloseHandle (hObject=0x208) returned 1 [0196.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206440 | out: hHeap=0x1f0000) returned 1 [0196.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206450 | out: hHeap=0x1f0000) returned 1 [0196.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d368 | out: hHeap=0x1f0000) returned 1 [0196.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f370 | out: hHeap=0x1f0000) returned 1 [0196.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffd0 | out: hHeap=0x1f0000) returned 1 [0196.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2052d0 | out: hHeap=0x1f0000) returned 1 [0196.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239da8 | out: hHeap=0x1f0000) returned 1 [0196.621] CloseHandle (hObject=0x1f0) returned 1 [0196.622] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206400 | out: hHeap=0x1f0000) returned 1 [0196.622] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206410 | out: hHeap=0x1f0000) returned 1 [0196.622] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b90 | out: hHeap=0x1f0000) returned 1 [0196.622] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205130 | out: hHeap=0x1f0000) returned 1 [0196.622] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606c0 | out: hHeap=0x1f0000) returned 1 [0196.622] CloseHandle (hObject=0x1f8) returned 1 [0196.622] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206560 | out: hHeap=0x1f0000) returned 1 [0196.622] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2063f0 | out: hHeap=0x1f0000) returned 1 [0196.622] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239be0 | out: hHeap=0x1f0000) returned 1 [0196.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206520 | out: hHeap=0x1f0000) returned 1 [0196.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206470 | out: hHeap=0x1f0000) returned 1 [0196.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2064e0 | out: hHeap=0x1f0000) returned 1 [0196.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206500 | out: hHeap=0x1f0000) returned 1 [0196.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260188 | out: hHeap=0x1f0000) returned 1 [0196.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x253678 | out: hHeap=0x1f0000) returned 1 [0196.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0196.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206838 | out: hHeap=0x1f0000) returned 1 [0196.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20fef8 | out: hHeap=0x1f0000) returned 1 [0196.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffb8 | out: hHeap=0x1f0000) returned 1 [0196.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2351d8 | out: hHeap=0x1f0000) returned 1 [0196.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x256f90 | out: hHeap=0x1f0000) returned 1 [0196.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0196.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cfa8 | out: hHeap=0x1f0000) returned 1 [0196.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab10 | out: hHeap=0x1f0000) returned 1 [0196.624] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22eb58 | out: hHeap=0x1f0000) returned 1 [0196.624] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215b40 | out: hHeap=0x1f0000) returned 1 [0196.624] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0196.624] DeleteFileW (lpFileName="C:\\\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\partnersetupcomplete.cmd")) returned 1 [0196.626] FindNextFileW (in: hFindFile=0x214450, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9575af11, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9577d1ec, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x4a, dwReserved0=0x21d1fe, dwReserved1=0x240022, cFileName="preoobe.cmd", cAlternateFileName="")) returned 1 [0196.626] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0196.626] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228230 [0196.626] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239718 [0196.626] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228230 | out: hHeap=0x1f0000) returned 1 [0196.626] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22af20 | out: hHeap=0x1f0000) returned 1 [0196.626] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0196.626] CreateFileW (lpFileName="C:\\\\$GetCurrent\\SafeOS\\preoobe.cmd" (normalized: "c:\\$getcurrent\\safeos\\preoobe.cmd"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0196.627] GetFileType (hFile=0x1f8) returned 0x1 [0196.627] CloseHandle (hObject=0x1f8) returned 1 [0196.627] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239b38 [0196.627] GetFileAttributesExW (in: lpFileName="C:\\\\$GetCurrent\\SafeOS\\preoobe.cmd" (normalized: "c:\\$getcurrent\\safeos\\preoobe.cmd"), fInfoLevelId=0x0, lpFileInformation=0x173eb6c | out: lpFileInformation=0x173eb6c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9575af11, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9577d1ec, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x4a)) returned 1 [0196.627] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239b38 | out: hHeap=0x1f0000) returned 1 [0196.627] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2399d8 [0196.627] GetFileAttributesExW (in: lpFileName="C:\\\\$GetCurrent\\SafeOS\\preoobe.cmd" (normalized: "c:\\$getcurrent\\safeos\\preoobe.cmd"), fInfoLevelId=0x0, lpFileInformation=0x173eb7c | out: lpFileInformation=0x173eb7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9575af11, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9577d1ec, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x4a)) returned 1 [0196.628] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2399d8 | out: hHeap=0x1f0000) returned 1 [0196.628] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239878 [0196.628] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239878 | out: hHeap=0x1f0000) returned 1 [0196.628] GetLastError () returned 0x0 [0196.628] SetLastError (dwErrCode=0x0) [0196.628] AreFileApisANSI () returned 1 [0196.628] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58420, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0196.628] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58420, cbMultiByte=4, lpWideCharStr=0x173eca8, cchWideChar=4 | out: lpWideCharStr=".exe") returned 4 [0196.628] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0196.628] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216050 [0196.628] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d9d0 [0196.628] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239a30 [0196.628] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0196.628] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0196.628] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x229e90) returned 1 [0196.900] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238230 | out: pbBuffer=0x238230) returned 1 [0196.900] CryptReleaseContext (hProv=0x229e90, dwFlags=0x0) returned 1 [0196.900] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0196.900] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x251068 [0196.900] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x217038 [0196.900] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=35426901292) returned 1 [0196.900] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0196.900] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=35426928334) returned 1 [0196.900] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0196.901] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x228230 [0196.901] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x25a8a8 [0196.901] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x25fe30 [0196.901] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x260188 [0196.901] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20fef8 [0196.901] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206808 [0196.901] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2100a8 [0196.901] GetLastError () returned 0x0 [0196.901] SetLastError (dwErrCode=0x0) [0196.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228230 | out: hHeap=0x1f0000) returned 1 [0196.901] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214dd0 [0196.902] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0196.902] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214dd0 | out: hHeap=0x1f0000) returned 1 [0196.902] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x234b90 [0196.902] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0196.902] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c4c0 [0196.902] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c530 [0196.903] CreateFileW (lpFileName="C:\\\\$GetCurrent\\SafeOS\\preoobe.cmd.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\$getcurrent\\safeos\\preoobe.cmd.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e230, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0196.903] GetFileType (hFile=0x1f8) returned 0x1 [0196.904] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c4f0 [0196.904] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c640 [0196.905] CreateFileW (lpFileName="C:\\\\$GetCurrent\\SafeOS\\preoobe.cmd" (normalized: "c:\\$getcurrent\\safeos\\preoobe.cmd"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0196.905] GetFileType (hFile=0x1f0) returned 0x1 [0196.905] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x2052d0 [0196.906] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205210 [0196.906] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x239be0 [0196.906] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c700 [0196.906] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c5c0 [0196.906] CreateFileW (lpFileName="C:\\\\$GetCurrent\\SafeOS\\preoobe.cmd.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\$getcurrent\\safeos\\preoobe.cmd.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0196.907] GetFileType (hFile=0x208) returned 0x1 [0196.907] GetLastError () returned 0xb7 [0196.907] SetLastError (dwErrCode=0xb7) [0196.907] GetLastError () returned 0xb7 [0196.907] SetLastError (dwErrCode=0xb7) [0196.907] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2052d0 | out: hHeap=0x1f0000) returned 1 [0196.907] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205210 | out: hHeap=0x1f0000) returned 1 [0196.907] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe4) returned 0x234c70 [0196.908] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205130 [0196.908] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205210 [0196.908] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x2052d0 [0196.908] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x22d368 [0196.908] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c5e0 [0196.908] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c5d0 [0196.909] CreateFileW (lpFileName="C:\\\\$GetCurrent\\SafeOS\\preoobe.cmd.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\$getcurrent\\safeos\\preoobe.cmd.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0196.909] GetFileType (hFile=0x214) returned 0x1 [0196.909] GetLastError () returned 0xb7 [0196.910] SetLastError (dwErrCode=0xb7) [0196.910] GetLastError () returned 0xb7 [0196.910] SetLastError (dwErrCode=0xb7) [0196.910] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205210 | out: hHeap=0x1f0000) returned 1 [0196.910] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2052d0 | out: hHeap=0x1f0000) returned 1 [0196.910] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205210 [0196.910] GetLastError () returned 0xb7 [0196.910] SetLastError (dwErrCode=0xb7) [0196.910] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205210 | out: hHeap=0x1f0000) returned 1 [0196.911] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205210 [0196.911] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x2052d0 [0196.911] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cb0 [0196.911] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb8) returned 0x229418 [0196.911] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c620 [0196.911] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c5f0 [0196.912] CreateFileW (lpFileName="C:\\\\$GetCurrent\\SafeOS\\preoobe.cmd" (normalized: "c:\\$getcurrent\\safeos\\preoobe.cmd"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1a4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0196.912] GetFileType (hFile=0x1f4) returned 0x1 [0196.912] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x239da8 [0196.912] ReadFile (in: hFile=0x1f4, lpBuffer=0x239da8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e100, lpOverlapped=0x0 | out: lpBuffer=0x239da8*, lpNumberOfBytesRead=0x173e100*=0x4a, lpOverlapped=0x0) returned 1 [0196.914] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24ce10 [0196.915] ReadFile (in: hFile=0x1f4, lpBuffer=0x239da8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e190, lpOverlapped=0x0 | out: lpBuffer=0x239da8*, lpNumberOfBytesRead=0x173e190*=0x0, lpOverlapped=0x0) returned 1 [0196.915] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x243df8 [0196.915] GetLastError () returned 0x0 [0196.915] SetLastError (dwErrCode=0x0) [0196.915] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff70 [0196.915] GetLastError () returned 0x0 [0196.915] SetLastError (dwErrCode=0x0) [0196.916] WriteFile (in: hFile=0x214, lpBuffer=0x243df8*, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0x173e084, lpOverlapped=0x0 | out: lpBuffer=0x243df8*, lpNumberOfBytesWritten=0x173e084*=0x5a, lpOverlapped=0x0) returned 1 [0196.918] GetLastError () returned 0x0 [0196.918] SetLastError (dwErrCode=0x0) [0196.918] GetLastError () returned 0x0 [0196.918] SetLastError (dwErrCode=0x0) [0196.918] GetLastError () returned 0x0 [0196.919] SetLastError (dwErrCode=0x0) [0196.919] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2052d0 | out: hHeap=0x1f0000) returned 1 [0196.919] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cb0 | out: hHeap=0x1f0000) returned 1 [0196.919] CloseHandle (hObject=0x1f8) returned 1 [0196.920] CloseHandle (hObject=0x1f0) returned 1 [0196.920] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c6b0 [0196.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c660 [0196.921] CreateFileW (lpFileName="C:\\\\$GetCurrent\\SafeOS\\preoobe.cmd" (normalized: "c:\\$getcurrent\\safeos\\preoobe.cmd"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0196.923] GetFileType (hFile=0x1f0) returned 0x1 [0196.923] GetLastError () returned 0xb7 [0196.924] SetLastError (dwErrCode=0xb7) [0196.924] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x244e00 [0196.924] GetLastError () returned 0xb7 [0196.924] SetLastError (dwErrCode=0xb7) [0196.924] WriteFile (in: hFile=0x1f0, lpBuffer=0x173cef4*, nNumberOfBytesToWrite=0x1, lpNumberOfBytesWritten=0x173ceec, lpOverlapped=0x0 | out: lpBuffer=0x173cef4*, lpNumberOfBytesWritten=0x173ceec*=0x1, lpOverlapped=0x0) returned 1 [0196.926] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x244e00 | out: hHeap=0x1f0000) returned 1 [0196.926] CloseHandle (hObject=0x1f0) returned 1 [0196.927] DeleteFileW (lpFileName="C:\\\\$GetCurrent\\SafeOS\\preoobe.cmd" (normalized: "c:\\$getcurrent\\safeos\\preoobe.cmd")) returned 0 [0196.927] GetLastError () returned 0x20 [0196.927] GetLastError () returned 0x20 [0196.927] SetLastError (dwErrCode=0x20) [0196.927] GetLastError () returned 0x20 [0196.927] SetLastError (dwErrCode=0x20) [0196.927] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215f30 [0196.927] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238230 [0196.927] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2383c0 [0196.927] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x215af8 [0196.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c30 [0196.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204db0 [0196.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x21c720 [0196.928] GetLastError () returned 0x20 [0196.928] SetLastError (dwErrCode=0x20) [0196.928] GetLastError () returned 0x20 [0196.928] SetLastError (dwErrCode=0x20) [0196.928] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c30 | out: hHeap=0x1f0000) returned 1 [0196.928] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204db0 | out: hHeap=0x1f0000) returned 1 [0196.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x228230 [0196.928] GetLastError () returned 0x20 [0196.928] SetLastError (dwErrCode=0x20) [0196.928] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228230 | out: hHeap=0x1f0000) returned 1 [0196.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x228230 [0196.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2150a8 [0196.929] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x237fd8 [0196.929] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2294d8 [0196.929] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c600 [0196.929] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238028 [0196.929] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffb8 [0196.929] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c6c0 [0196.929] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238050 [0196.929] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffd0 [0196.929] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2380a0 [0196.929] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x230ef0 [0196.929] GetLastError () returned 0x20 [0196.929] SetLastError (dwErrCode=0x20) [0196.929] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228230 | out: hHeap=0x1f0000) returned 1 [0196.929] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x21c5a0 [0196.929] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x21c680 [0196.929] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c560 [0196.929] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c680 | out: hHeap=0x1f0000) returned 1 [0196.929] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c570 [0196.930] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c560 | out: hHeap=0x1f0000) returned 1 [0196.930] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5a0 | out: hHeap=0x1f0000) returned 1 [0196.930] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c560 [0196.930] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210000 [0196.930] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c560 | out: hHeap=0x1f0000) returned 1 [0196.930] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x20ffe8 [0196.930] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210000 | out: hHeap=0x1f0000) returned 1 [0196.930] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c570 | out: hHeap=0x1f0000) returned 1 [0196.930] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210000 [0196.930] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210018 [0196.930] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210000 | out: hHeap=0x1f0000) returned 1 [0196.930] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210078 [0196.930] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210018 | out: hHeap=0x1f0000) returned 1 [0196.930] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffe8 | out: hHeap=0x1f0000) returned 1 [0196.930] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffe8 [0196.930] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204c50 [0196.931] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffe8 | out: hHeap=0x1f0000) returned 1 [0196.931] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cf0 [0196.931] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c50 | out: hHeap=0x1f0000) returned 1 [0196.931] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210078 | out: hHeap=0x1f0000) returned 1 [0196.931] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c70 [0196.931] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2381b8 [0196.931] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c70 | out: hHeap=0x1f0000) returned 1 [0196.931] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204cb0 [0196.931] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0196.931] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cf0 | out: hHeap=0x1f0000) returned 1 [0196.931] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204b90 [0196.931] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x2065f8 [0196.931] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204b90 | out: hHeap=0x1f0000) returned 1 [0196.931] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2381b8 [0196.931] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2065f8 | out: hHeap=0x1f0000) returned 1 [0196.931] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cb0 | out: hHeap=0x1f0000) returned 1 [0196.931] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c5a0 [0196.931] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x20ffe8 [0196.932] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5a0 | out: hHeap=0x1f0000) returned 1 [0196.932] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210000 [0196.932] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffe8 | out: hHeap=0x1f0000) returned 1 [0196.932] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204c70 [0196.932] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210000 | out: hHeap=0x1f0000) returned 1 [0196.932] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206838 [0196.932] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c70 | out: hHeap=0x1f0000) returned 1 [0196.932] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206838 | out: hHeap=0x1f0000) returned 1 [0196.932] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0196.932] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0196.932] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0196.932] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2294d8 | out: hHeap=0x1f0000) returned 1 [0196.932] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0196.932] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228230 [0196.932] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0196.932] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x22a3e0) returned 1 [0196.935] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2381b8 | out: pbBuffer=0x2381b8) returned 1 [0196.935] CryptReleaseContext (hProv=0x22a3e0, dwFlags=0x0) returned 1 [0196.935] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0196.935] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x237fd8 [0196.935] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381b8 [0196.935] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0196.935] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0196.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0196.936] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0196.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x239ae0 [0196.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210000 [0196.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x2149c0 [0196.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x237fd8 [0196.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2294d8 [0196.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0196.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c98 [0196.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238230 [0196.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x230ff8 [0196.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c560 [0196.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385a0 [0196.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210090 [0196.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c590 [0196.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385f0 [0196.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffe8 [0196.937] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffe8 | out: hHeap=0x1f0000) returned 1 [0196.937] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385f0 | out: hHeap=0x1f0000) returned 1 [0196.937] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c590 | out: hHeap=0x1f0000) returned 1 [0196.937] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210090 | out: hHeap=0x1f0000) returned 1 [0196.937] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385a0 | out: hHeap=0x1f0000) returned 1 [0196.937] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c560 | out: hHeap=0x1f0000) returned 1 [0196.937] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230ff8 | out: hHeap=0x1f0000) returned 1 [0196.937] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0196.937] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c98 | out: hHeap=0x1f0000) returned 1 [0196.937] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x227dd0 [0196.937] GetLastError () returned 0x0 [0196.937] SetLastError (dwErrCode=0x0) [0196.937] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0196.937] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x227dd0 [0196.937] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0196.937] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0196.937] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0196.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0196.938] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0196.938] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0196.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x24ec40 [0196.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x230ff8 [0196.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0196.938] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0196.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0196.938] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0196.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x234fc8 [0196.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0196.938] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0196.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fb50 [0196.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x253678 [0196.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2350d0 [0196.938] QueryPerformanceCounter (in: lpPerformanceCount=0x173dee0 | out: lpPerformanceCount=0x173dee0*=35430744417) returned 1 [0196.939] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173df20 | out: lpSystemTimeAsFileTime=0x173df20) [0196.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x21c680 [0196.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0196.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f70 [0196.939] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f70 | out: hHeap=0x1f0000) returned 1 [0196.939] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0196.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0196.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c10 [0196.939] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c10 | out: hHeap=0x1f0000) returned 1 [0196.939] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0196.939] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c680 | out: hHeap=0x1f0000) returned 1 [0196.939] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0196.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x2282d8 [0196.939] GetLastError () returned 0x0 [0196.939] SetLastError (dwErrCode=0x0) [0196.940] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282d8 | out: hHeap=0x1f0000) returned 1 [0196.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0196.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0196.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0196.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238230 [0196.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238758 [0196.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0196.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0196.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238690 [0196.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0196.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x222ee8 [0196.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0196.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x24f370 [0196.940] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0196.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2357a0 [0196.940] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f370 | out: hHeap=0x1f0000) returned 1 [0196.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2385a0 [0196.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238668 [0196.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385a0 | out: hHeap=0x1f0000) returned 1 [0196.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0196.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238668 | out: hHeap=0x1f0000) returned 1 [0196.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x24f370 [0196.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x22a810 [0196.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a810 | out: hHeap=0x1f0000) returned 1 [0197.150] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f370 | out: hHeap=0x1f0000) returned 1 [0197.150] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2357a0 | out: hHeap=0x1f0000) returned 1 [0197.150] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x20ffe8 [0197.151] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215b40 [0197.151] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b368 [0197.151] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b458 [0197.151] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b750 [0197.151] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b3e0 [0197.151] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b458 | out: hHeap=0x1f0000) returned 1 [0197.151] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b368 | out: hHeap=0x1f0000) returned 1 [0197.151] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2357a0 [0197.151] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b5c0 [0197.152] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b458 [0197.152] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b5c0 | out: hHeap=0x1f0000) returned 1 [0197.152] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0197.152] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b458 | out: hHeap=0x1f0000) returned 1 [0197.152] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206658 [0197.152] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x22a810 [0197.152] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a810 | out: hHeap=0x1f0000) returned 1 [0197.152] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206658 | out: hHeap=0x1f0000) returned 1 [0197.152] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238690 | out: hHeap=0x1f0000) returned 1 [0197.152] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0197.153] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0197.153] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2357a0 | out: hHeap=0x1f0000) returned 1 [0197.153] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204cf0 [0197.153] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0197.153] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0197.153] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238758 | out: hHeap=0x1f0000) returned 1 [0197.153] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2360f0 [0197.153] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0197.154] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b3e0 | out: hHeap=0x1f0000) returned 1 [0197.154] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b750 | out: hHeap=0x1f0000) returned 1 [0197.154] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215b40 | out: hHeap=0x1f0000) returned 1 [0197.154] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0197.154] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cf0 | out: hHeap=0x1f0000) returned 1 [0197.154] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffe8 | out: hHeap=0x1f0000) returned 1 [0197.154] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0197.154] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x236218 [0197.155] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236218 | out: hHeap=0x1f0000) returned 1 [0197.155] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ee8 | out: hHeap=0x1f0000) returned 1 [0197.155] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0197.155] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0197.155] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0197.155] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0197.155] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0197.155] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0197.155] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0197.155] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2376e8 [0197.156] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x236468 [0197.156] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2376e8 | out: hHeap=0x1f0000) returned 1 [0197.156] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0197.156] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2360f0 | out: hHeap=0x1f0000) returned 1 [0197.156] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0197.156] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234fc8 | out: hHeap=0x1f0000) returned 1 [0197.156] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24ec40 | out: hHeap=0x1f0000) returned 1 [0197.156] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x2357a0 [0197.156] GetLastError () returned 0x0 [0197.156] SetLastError (dwErrCode=0x0) [0197.156] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0197.157] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c560 [0197.157] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c6a0 [0197.157] CreateFileW (lpFileName="C:\\\\$GetCurrent\\SafeOS\\preoobe.cmd.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\$getcurrent\\safeos\\preoobe.cmd.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e290, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x20c [0197.158] GetFileType (hFile=0x20c) returned 0x1 [0197.159] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x245e08 [0197.159] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e218 | out: lpNewFilePointer=0x0) returned 1 [0197.159] GetLastError () returned 0xb7 [0197.159] SetLastError (dwErrCode=0xb7) [0197.160] GetLastError () returned 0xb7 [0197.160] SetLastError (dwErrCode=0xb7) [0197.163] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e2dc | out: lpNewFilePointer=0x0) returned 1 [0197.163] WriteFile (in: hFile=0x20c, lpBuffer=0x245e08*, nNumberOfBytesToWrite=0x103, lpNumberOfBytesWritten=0x173e340, lpOverlapped=0x0 | out: lpBuffer=0x245e08*, lpNumberOfBytesWritten=0x173e340*=0x103, lpOverlapped=0x0) returned 1 [0197.164] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x245e08 | out: hHeap=0x1f0000) returned 1 [0197.164] CloseHandle (hObject=0x20c) returned 1 [0197.165] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c6a0 | out: hHeap=0x1f0000) returned 1 [0197.165] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c560 | out: hHeap=0x1f0000) returned 1 [0197.166] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230ff8 | out: hHeap=0x1f0000) returned 1 [0197.166] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2294d8 | out: hHeap=0x1f0000) returned 1 [0197.166] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0197.166] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d70 | out: hHeap=0x1f0000) returned 1 [0197.166] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2149c0 | out: hHeap=0x1f0000) returned 1 [0197.166] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210000 | out: hHeap=0x1f0000) returned 1 [0197.166] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239ae0 | out: hHeap=0x1f0000) returned 1 [0197.166] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2357a0 | out: hHeap=0x1f0000) returned 1 [0197.166] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0197.167] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0197.167] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x253678 | out: hHeap=0x1f0000) returned 1 [0197.167] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2350d0 | out: hHeap=0x1f0000) returned 1 [0197.167] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228230 | out: hHeap=0x1f0000) returned 1 [0197.167] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c720 | out: hHeap=0x1f0000) returned 1 [0197.167] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffd0 | out: hHeap=0x1f0000) returned 1 [0197.167] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238050 | out: hHeap=0x1f0000) returned 1 [0197.167] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c6c0 | out: hHeap=0x1f0000) returned 1 [0197.167] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffb8 | out: hHeap=0x1f0000) returned 1 [0197.168] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238028 | out: hHeap=0x1f0000) returned 1 [0197.168] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c600 | out: hHeap=0x1f0000) returned 1 [0197.168] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230ef0 | out: hHeap=0x1f0000) returned 1 [0197.168] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0197.168] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2150a8 | out: hHeap=0x1f0000) returned 1 [0197.168] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215af8 | out: hHeap=0x1f0000) returned 1 [0197.168] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383c0 | out: hHeap=0x1f0000) returned 1 [0197.168] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0197.168] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215f30 | out: hHeap=0x1f0000) returned 1 [0197.169] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c660 | out: hHeap=0x1f0000) returned 1 [0197.169] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c6b0 | out: hHeap=0x1f0000) returned 1 [0197.169] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239da8 | out: hHeap=0x1f0000) returned 1 [0197.169] CloseHandle (hObject=0x1f4) returned 1 [0197.170] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5f0 | out: hHeap=0x1f0000) returned 1 [0197.170] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c620 | out: hHeap=0x1f0000) returned 1 [0197.170] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0197.170] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24ce10 | out: hHeap=0x1f0000) returned 1 [0197.170] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff70 | out: hHeap=0x1f0000) returned 1 [0197.171] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205210 | out: hHeap=0x1f0000) returned 1 [0197.171] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x243df8 | out: hHeap=0x1f0000) returned 1 [0197.171] CloseHandle (hObject=0x214) returned 1 [0197.171] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5d0 | out: hHeap=0x1f0000) returned 1 [0197.172] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5e0 | out: hHeap=0x1f0000) returned 1 [0197.172] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d368 | out: hHeap=0x1f0000) returned 1 [0197.172] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205130 | out: hHeap=0x1f0000) returned 1 [0197.172] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234c70 | out: hHeap=0x1f0000) returned 1 [0197.172] CloseHandle (hObject=0x208) returned 1 [0197.173] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5c0 | out: hHeap=0x1f0000) returned 1 [0197.173] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c700 | out: hHeap=0x1f0000) returned 1 [0197.173] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239be0 | out: hHeap=0x1f0000) returned 1 [0197.173] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c640 | out: hHeap=0x1f0000) returned 1 [0197.173] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c4f0 | out: hHeap=0x1f0000) returned 1 [0197.173] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c530 | out: hHeap=0x1f0000) returned 1 [0197.173] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c4c0 | out: hHeap=0x1f0000) returned 1 [0197.173] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b90 | out: hHeap=0x1f0000) returned 1 [0197.173] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25a8a8 | out: hHeap=0x1f0000) returned 1 [0197.174] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25fe30 | out: hHeap=0x1f0000) returned 1 [0197.174] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206808 | out: hHeap=0x1f0000) returned 1 [0197.174] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2100a8 | out: hHeap=0x1f0000) returned 1 [0197.174] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20fef8 | out: hHeap=0x1f0000) returned 1 [0197.174] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260188 | out: hHeap=0x1f0000) returned 1 [0197.174] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x251068 | out: hHeap=0x1f0000) returned 1 [0197.174] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0197.174] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0197.174] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239a30 | out: hHeap=0x1f0000) returned 1 [0197.174] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d9d0 | out: hHeap=0x1f0000) returned 1 [0197.175] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216050 | out: hHeap=0x1f0000) returned 1 [0197.175] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0197.175] DeleteFileW (lpFileName="C:\\\\$GetCurrent\\SafeOS\\preoobe.cmd" (normalized: "c:\\$getcurrent\\safeos\\preoobe.cmd")) returned 1 [0197.178] FindNextFileW (in: hFindFile=0x214450, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x957833a7, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x957833a7, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9578472e, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x133, dwReserved0=0x21d1fe, dwReserved1=0x240022, cFileName="SetupComplete.cmd", cAlternateFileName="SETUPC~1.CMD")) returned 1 [0197.178] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1feed0 [0197.178] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0197.178] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214958 [0197.178] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0197.178] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239718 | out: hHeap=0x1f0000) returned 1 [0197.179] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1feed0 | out: hHeap=0x1f0000) returned 1 [0197.179] CreateFileW (lpFileName="C:\\\\$GetCurrent\\SafeOS\\SetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\setupcomplete.cmd"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0197.179] GetFileType (hFile=0x208) returned 0x1 [0197.180] CloseHandle (hObject=0x208) returned 1 [0197.180] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d00 [0197.180] GetFileAttributesExW (in: lpFileName="C:\\\\$GetCurrent\\SafeOS\\SetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\setupcomplete.cmd"), fInfoLevelId=0x0, lpFileInformation=0x173eb6c | out: lpFileInformation=0x173eb6c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x957833a7, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x957833a7, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9578472e, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x133)) returned 1 [0197.180] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d00 | out: hHeap=0x1f0000) returned 1 [0197.180] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d00 [0197.180] GetFileAttributesExW (in: lpFileName="C:\\\\$GetCurrent\\SafeOS\\SetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\setupcomplete.cmd"), fInfoLevelId=0x0, lpFileInformation=0x173eb7c | out: lpFileInformation=0x173eb7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x957833a7, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x957833a7, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9578472e, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x133)) returned 1 [0197.180] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d00 | out: hHeap=0x1f0000) returned 1 [0197.180] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214f08 [0197.181] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f08 | out: hHeap=0x1f0000) returned 1 [0197.181] GetLastError () returned 0x0 [0197.181] SetLastError (dwErrCode=0x0) [0197.181] AreFileApisANSI () returned 1 [0197.181] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58420, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0197.181] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58420, cbMultiByte=4, lpWideCharStr=0x173eca8, cchWideChar=4 | out: lpWideCharStr=".exe") returned 4 [0197.181] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b638 [0197.181] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215d80 [0197.181] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e360 [0197.181] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x215040 [0197.181] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1ff058 [0197.182] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b6b0 [0197.182] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x229ad8) returned 1 [0197.185] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x22b6b0 | out: pbBuffer=0x22b6b0) returned 1 [0197.185] CryptReleaseContext (hProv=0x229ad8, dwFlags=0x0) returned 1 [0197.185] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b6b0 | out: hHeap=0x1f0000) returned 1 [0197.185] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x254980 [0197.185] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x217038 [0197.186] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=35455447661) returned 1 [0197.186] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0197.186] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=35455477784) returned 1 [0197.186] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0197.186] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x1feed0 [0197.186] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x251068 [0197.186] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x25fe30 [0197.186] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x260188 [0197.186] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210090 [0197.187] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206838 [0197.187] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210078 [0197.187] GetLastError () returned 0x0 [0197.187] SetLastError (dwErrCode=0x0) [0197.187] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1feed0 | out: hHeap=0x1f0000) returned 1 [0197.187] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22aec8 [0197.187] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218558 [0197.187] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aec8 | out: hHeap=0x1f0000) returned 1 [0197.187] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf8) returned 0x234b90 [0197.187] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218558 | out: hHeap=0x1f0000) returned 1 [0197.187] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c4c0 [0197.188] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c4f0 [0197.188] CreateFileW (lpFileName="C:\\\\$GetCurrent\\SafeOS\\SetupComplete.cmd.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\$getcurrent\\safeos\\setupcomplete.cmd.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e230, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0197.496] GetFileType (hFile=0x208) returned 0x1 [0197.496] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c530 [0197.497] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c6b0 [0197.497] CreateFileW (lpFileName="C:\\\\$GetCurrent\\SafeOS\\SetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\setupcomplete.cmd"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0197.497] GetFileType (hFile=0x214) returned 0x1 [0197.497] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205130 [0197.497] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205210 [0197.498] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x239be0 [0197.498] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c660 [0197.500] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c6a0 [0197.501] CreateFileW (lpFileName="C:\\\\$GetCurrent\\SafeOS\\SetupComplete.cmd.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\$getcurrent\\safeos\\setupcomplete.cmd.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0197.501] GetFileType (hFile=0x1f4) returned 0x1 [0197.501] GetLastError () returned 0xb7 [0197.501] SetLastError (dwErrCode=0xb7) [0197.501] GetLastError () returned 0xb7 [0197.501] SetLastError (dwErrCode=0xb7) [0197.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205130 | out: hHeap=0x1f0000) returned 1 [0197.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205210 | out: hHeap=0x1f0000) returned 1 [0197.501] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe4) returned 0x234c90 [0197.501] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205130 [0197.502] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205210 [0197.502] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x2052d0 [0197.502] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x22d368 [0197.502] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c700 [0197.502] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c680 [0197.502] CreateFileW (lpFileName="C:\\\\$GetCurrent\\SafeOS\\SetupComplete.cmd.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\$getcurrent\\safeos\\setupcomplete.cmd.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x20c [0197.502] GetFileType (hFile=0x20c) returned 0x1 [0197.502] GetLastError () returned 0xb7 [0197.502] SetLastError (dwErrCode=0xb7) [0197.502] GetLastError () returned 0xb7 [0197.503] SetLastError (dwErrCode=0xb7) [0197.503] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205210 | out: hHeap=0x1f0000) returned 1 [0197.503] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2052d0 | out: hHeap=0x1f0000) returned 1 [0197.503] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205210 [0197.503] GetLastError () returned 0xb7 [0197.503] SetLastError (dwErrCode=0xb7) [0197.503] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205210 | out: hHeap=0x1f0000) returned 1 [0197.503] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205210 [0197.503] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x2052d0 [0197.503] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cb0 [0197.503] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb8) returned 0x229418 [0197.503] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c5c0 [0197.503] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c720 [0197.503] CreateFileW (lpFileName="C:\\\\$GetCurrent\\SafeOS\\SetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\setupcomplete.cmd"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1a4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0197.503] GetFileType (hFile=0x1f0) returned 0x1 [0197.504] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x246e10 [0197.504] ReadFile (in: hFile=0x1f0, lpBuffer=0x246e10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e100, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesRead=0x173e100*=0x133, lpOverlapped=0x0) returned 1 [0197.505] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24ca08 [0197.505] ReadFile (in: hFile=0x1f0, lpBuffer=0x246e10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e190, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesRead=0x173e190*=0x0, lpOverlapped=0x0) returned 1 [0197.505] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x244e00 [0197.505] GetLastError () returned 0x0 [0197.505] SetLastError (dwErrCode=0x0) [0197.506] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff70 [0197.506] GetLastError () returned 0x0 [0197.506] SetLastError (dwErrCode=0x0) [0197.506] WriteFile (in: hFile=0x20c, lpBuffer=0x244e00*, nNumberOfBytesToWrite=0x143, lpNumberOfBytesWritten=0x173e084, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesWritten=0x173e084*=0x143, lpOverlapped=0x0) returned 1 [0197.507] GetLastError () returned 0x0 [0197.507] SetLastError (dwErrCode=0x0) [0197.507] GetLastError () returned 0x0 [0197.507] SetLastError (dwErrCode=0x0) [0197.507] GetLastError () returned 0x0 [0197.507] SetLastError (dwErrCode=0x0) [0197.507] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2052d0 | out: hHeap=0x1f0000) returned 1 [0197.507] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cb0 | out: hHeap=0x1f0000) returned 1 [0197.507] CloseHandle (hObject=0x208) returned 1 [0197.563] CloseHandle (hObject=0x214) returned 1 [0197.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c5e0 [0197.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c5d0 [0197.564] CreateFileW (lpFileName="C:\\\\$GetCurrent\\SafeOS\\SetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\setupcomplete.cmd"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0197.565] GetFileType (hFile=0x214) returned 0x1 [0197.566] GetLastError () returned 0xb7 [0197.566] SetLastError (dwErrCode=0xb7) [0197.566] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x241de8 [0197.566] GetLastError () returned 0xb7 [0197.566] SetLastError (dwErrCode=0xb7) [0197.566] WriteFile (in: hFile=0x214, lpBuffer=0x173cef4*, nNumberOfBytesToWrite=0x1, lpNumberOfBytesWritten=0x173ceec, lpOverlapped=0x0 | out: lpBuffer=0x173cef4*, lpNumberOfBytesWritten=0x173ceec*=0x1, lpOverlapped=0x0) returned 1 [0197.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x241de8 | out: hHeap=0x1f0000) returned 1 [0197.568] CloseHandle (hObject=0x214) returned 1 [0197.568] DeleteFileW (lpFileName="C:\\\\$GetCurrent\\SafeOS\\SetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\setupcomplete.cmd")) returned 0 [0197.568] GetLastError () returned 0x20 [0197.568] GetLastError () returned 0x20 [0197.568] SetLastError (dwErrCode=0x20) [0197.569] GetLastError () returned 0x20 [0197.569] SetLastError (dwErrCode=0x20) [0197.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215e10 [0197.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b458 [0197.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b5c0 [0197.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x215c18 [0197.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c30 [0197.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204dd0 [0197.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x21c560 [0197.569] GetLastError () returned 0x20 [0197.569] SetLastError (dwErrCode=0x20) [0197.569] GetLastError () returned 0x20 [0197.569] SetLastError (dwErrCode=0x20) [0197.569] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c30 | out: hHeap=0x1f0000) returned 1 [0197.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204dd0 | out: hHeap=0x1f0000) returned 1 [0197.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x1fefe8 [0197.570] GetLastError () returned 0x20 [0197.570] SetLastError (dwErrCode=0x20) [0197.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fefe8 | out: hHeap=0x1f0000) returned 1 [0197.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x1fef78 [0197.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214f70 [0197.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x22b5e8 [0197.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2294d8 [0197.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c580 [0197.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b750 [0197.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210000 [0197.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c6c0 [0197.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b7c8 [0197.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffd0 [0197.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x22b340 [0197.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2357a0 [0197.571] GetLastError () returned 0x20 [0197.571] SetLastError (dwErrCode=0x20) [0197.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0197.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x21c5b0 [0197.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x21c570 [0197.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c590 [0197.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c570 | out: hHeap=0x1f0000) returned 1 [0197.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c570 [0197.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c590 | out: hHeap=0x1f0000) returned 1 [0197.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5b0 | out: hHeap=0x1f0000) returned 1 [0197.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c640 [0197.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x20fef8 [0197.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c640 | out: hHeap=0x1f0000) returned 1 [0197.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2100a8 [0197.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20fef8 | out: hHeap=0x1f0000) returned 1 [0197.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c570 | out: hHeap=0x1f0000) returned 1 [0197.572] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x20ffb8 [0197.572] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20fef8 [0197.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffb8 | out: hHeap=0x1f0000) returned 1 [0197.572] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffb8 [0197.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20fef8 | out: hHeap=0x1f0000) returned 1 [0197.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2100a8 | out: hHeap=0x1f0000) returned 1 [0197.572] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20fef8 [0197.572] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204f30 [0197.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20fef8 | out: hHeap=0x1f0000) returned 1 [0197.572] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e50 [0197.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f30 | out: hHeap=0x1f0000) returned 1 [0197.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffb8 | out: hHeap=0x1f0000) returned 1 [0197.572] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c10 [0197.572] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x22b3e0 [0197.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c10 | out: hHeap=0x1f0000) returned 1 [0197.572] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204d70 [0197.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b3e0 | out: hHeap=0x1f0000) returned 1 [0197.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e50 | out: hHeap=0x1f0000) returned 1 [0197.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204f50 [0197.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x2068f8 [0197.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f50 | out: hHeap=0x1f0000) returned 1 [0197.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x22b2f0 [0197.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2068f8 | out: hHeap=0x1f0000) returned 1 [0197.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d70 | out: hHeap=0x1f0000) returned 1 [0197.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c570 [0197.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x20fef8 [0197.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c570 | out: hHeap=0x1f0000) returned 1 [0197.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffb8 [0197.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20fef8 | out: hHeap=0x1f0000) returned 1 [0197.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204f70 [0197.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffb8 | out: hHeap=0x1f0000) returned 1 [0197.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206808 [0197.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f70 | out: hHeap=0x1f0000) returned 1 [0197.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206808 | out: hHeap=0x1f0000) returned 1 [0197.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b2f0 | out: hHeap=0x1f0000) returned 1 [0197.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b458 | out: hHeap=0x1f0000) returned 1 [0197.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0197.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2294d8 | out: hHeap=0x1f0000) returned 1 [0197.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b5e8 | out: hHeap=0x1f0000) returned 1 [0197.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0197.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b4d0 [0197.574] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x22a1c0) returned 1 [0197.823] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x22b4d0 | out: pbBuffer=0x22b4d0) returned 1 [0197.823] CryptReleaseContext (hProv=0x22a1c0, dwFlags=0x0) returned 1 [0197.823] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b4d0 | out: hHeap=0x1f0000) returned 1 [0197.823] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b778 [0197.823] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b480 [0197.824] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228230 [0197.824] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b778 | out: hHeap=0x1f0000) returned 1 [0197.824] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0197.824] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228230 | out: hHeap=0x1f0000) returned 1 [0197.824] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x239928 [0197.824] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffb8 [0197.824] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x214d68 [0197.824] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x22b4d0 [0197.824] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2358a8 [0197.824] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205290 [0197.824] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a28 [0197.824] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x22b5e8 [0197.824] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2294d8 [0197.824] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c590 [0197.825] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b6b0 [0197.825] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffe8 [0197.825] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c570 [0197.825] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b778 [0197.825] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210018 [0197.825] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210018 | out: hHeap=0x1f0000) returned 1 [0197.825] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b778 | out: hHeap=0x1f0000) returned 1 [0197.825] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c570 | out: hHeap=0x1f0000) returned 1 [0197.825] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffe8 | out: hHeap=0x1f0000) returned 1 [0197.825] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b6b0 | out: hHeap=0x1f0000) returned 1 [0197.825] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c590 | out: hHeap=0x1f0000) returned 1 [0197.825] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2294d8 | out: hHeap=0x1f0000) returned 1 [0197.826] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b5e8 | out: hHeap=0x1f0000) returned 1 [0197.826] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a28 | out: hHeap=0x1f0000) returned 1 [0197.826] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x227ee8 [0197.826] GetLastError () returned 0x0 [0197.826] SetLastError (dwErrCode=0x0) [0197.826] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0197.826] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x227dd0 [0197.826] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0197.826] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0197.827] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0197.827] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0197.827] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0197.827] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0197.827] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x24ea40 [0197.827] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2294d8 [0197.827] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0197.828] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0197.828] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0197.828] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0197.828] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x230ef0 [0197.828] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0197.828] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0197.828] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x230258 [0197.828] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x253678 [0197.828] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x230ff8 [0197.828] QueryPerformanceCounter (in: lpPerformanceCount=0x173dee0 | out: lpPerformanceCount=0x173dee0*=35519722791) returned 1 [0197.828] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173df20 | out: lpSystemTimeAsFileTime=0x173df20) [0197.829] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x21c570 [0197.829] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b5e8 [0197.829] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x2052d0 [0197.829] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2052d0 | out: hHeap=0x1f0000) returned 1 [0197.829] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b5e8 | out: hHeap=0x1f0000) returned 1 [0197.829] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b5e8 [0197.829] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205150 [0197.829] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205150 | out: hHeap=0x1f0000) returned 1 [0197.829] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b5e8 | out: hHeap=0x1f0000) returned 1 [0197.829] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c570 | out: hHeap=0x1f0000) returned 1 [0197.829] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0197.829] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x228230 [0197.829] GetLastError () returned 0x0 [0197.829] SetLastError (dwErrCode=0x0) [0197.829] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228230 | out: hHeap=0x1f0000) returned 1 [0197.830] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0197.830] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0197.830] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0197.830] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b5e8 [0197.830] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b6b0 [0197.830] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0197.830] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0197.830] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b318 [0197.830] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0197.830] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x222ee8 [0197.830] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0197.830] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x234fc8 [0197.830] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0197.830] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x225048 [0197.830] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234fc8 | out: hHeap=0x1f0000) returned 1 [0197.830] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b778 [0197.831] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b368 [0197.831] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b778 | out: hHeap=0x1f0000) returned 1 [0197.831] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0197.831] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b368 | out: hHeap=0x1f0000) returned 1 [0197.831] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x234fc8 [0197.831] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x2605b0 [0197.831] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b0 | out: hHeap=0x1f0000) returned 1 [0197.831] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234fc8 | out: hHeap=0x1f0000) returned 1 [0197.831] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225048 | out: hHeap=0x1f0000) returned 1 [0197.831] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2100a8 [0197.831] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216170 [0197.831] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b778 [0197.831] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b368 [0197.832] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b818 [0197.832] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b840 [0197.832] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b368 | out: hHeap=0x1f0000) returned 1 [0197.832] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b778 | out: hHeap=0x1f0000) returned 1 [0197.832] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x234fc8 [0197.832] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b778 [0197.832] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b368 [0197.832] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b778 | out: hHeap=0x1f0000) returned 1 [0197.832] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0197.832] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b368 | out: hHeap=0x1f0000) returned 1 [0197.832] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206808 [0197.832] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x2605b0 [0197.832] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b0 | out: hHeap=0x1f0000) returned 1 [0197.832] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206808 | out: hHeap=0x1f0000) returned 1 [0197.832] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b318 | out: hHeap=0x1f0000) returned 1 [0197.832] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0197.833] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0197.833] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234fc8 | out: hHeap=0x1f0000) returned 1 [0197.833] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x205150 [0197.833] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0197.833] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0197.833] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b6b0 | out: hHeap=0x1f0000) returned 1 [0197.833] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2375c0 [0197.833] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0197.833] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b840 | out: hHeap=0x1f0000) returned 1 [0197.833] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b818 | out: hHeap=0x1f0000) returned 1 [0197.833] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216170 | out: hHeap=0x1f0000) returned 1 [0197.833] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0197.834] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205150 | out: hHeap=0x1f0000) returned 1 [0197.834] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2100a8 | out: hHeap=0x1f0000) returned 1 [0197.834] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0197.834] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x237938 [0197.834] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237938 | out: hHeap=0x1f0000) returned 1 [0197.834] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ee8 | out: hHeap=0x1f0000) returned 1 [0197.834] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0197.834] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0197.834] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0197.834] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0197.834] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b5e8 | out: hHeap=0x1f0000) returned 1 [0197.834] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0197.835] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0197.835] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x236da8 [0197.835] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2367e0 [0197.835] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236da8 | out: hHeap=0x1f0000) returned 1 [0197.835] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2367e0 | out: hHeap=0x1f0000) returned 1 [0197.835] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2375c0 | out: hHeap=0x1f0000) returned 1 [0197.835] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0197.835] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230ef0 | out: hHeap=0x1f0000) returned 1 [0197.835] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24ea40 | out: hHeap=0x1f0000) returned 1 [0197.835] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x234fc8 [0197.835] GetLastError () returned 0x0 [0197.835] SetLastError (dwErrCode=0x0) [0197.835] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0197.835] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c570 [0197.836] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c5b0 [0197.836] CreateFileW (lpFileName="C:\\\\$GetCurrent\\SafeOS\\SetupComplete.cmd.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\$getcurrent\\safeos\\setupcomplete.cmd.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e290, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0197.837] GetFileType (hFile=0x214) returned 0x1 [0197.837] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x239da8 [0197.837] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e218 | out: lpNewFilePointer=0x0) returned 1 [0197.838] GetLastError () returned 0xb7 [0197.838] SetLastError (dwErrCode=0xb7) [0197.838] GetLastError () returned 0xb7 [0197.838] SetLastError (dwErrCode=0xb7) [0197.838] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e2dc | out: lpNewFilePointer=0x0) returned 1 [0197.839] WriteFile (in: hFile=0x214, lpBuffer=0x239da8*, nNumberOfBytesToWrite=0x103, lpNumberOfBytesWritten=0x173e340, lpOverlapped=0x0 | out: lpBuffer=0x239da8*, lpNumberOfBytesWritten=0x173e340*=0x103, lpOverlapped=0x0) returned 1 [0197.840] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239da8 | out: hHeap=0x1f0000) returned 1 [0197.841] CloseHandle (hObject=0x214) returned 1 [0198.211] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5b0 | out: hHeap=0x1f0000) returned 1 [0198.211] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c570 | out: hHeap=0x1f0000) returned 1 [0198.211] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2294d8 | out: hHeap=0x1f0000) returned 1 [0198.211] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2358a8 | out: hHeap=0x1f0000) returned 1 [0198.211] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b4d0 | out: hHeap=0x1f0000) returned 1 [0198.211] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205290 | out: hHeap=0x1f0000) returned 1 [0198.211] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d68 | out: hHeap=0x1f0000) returned 1 [0198.211] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffb8 | out: hHeap=0x1f0000) returned 1 [0198.212] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239928 | out: hHeap=0x1f0000) returned 1 [0198.212] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234fc8 | out: hHeap=0x1f0000) returned 1 [0198.212] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b480 | out: hHeap=0x1f0000) returned 1 [0198.212] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0198.212] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x253678 | out: hHeap=0x1f0000) returned 1 [0198.212] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230ff8 | out: hHeap=0x1f0000) returned 1 [0198.212] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0198.212] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c560 | out: hHeap=0x1f0000) returned 1 [0198.212] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffd0 | out: hHeap=0x1f0000) returned 1 [0198.212] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b7c8 | out: hHeap=0x1f0000) returned 1 [0198.212] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c6c0 | out: hHeap=0x1f0000) returned 1 [0198.212] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210000 | out: hHeap=0x1f0000) returned 1 [0198.212] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b750 | out: hHeap=0x1f0000) returned 1 [0198.212] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c580 | out: hHeap=0x1f0000) returned 1 [0198.212] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2357a0 | out: hHeap=0x1f0000) returned 1 [0198.212] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b340 | out: hHeap=0x1f0000) returned 1 [0198.212] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f70 | out: hHeap=0x1f0000) returned 1 [0198.213] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215c18 | out: hHeap=0x1f0000) returned 1 [0198.213] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b5c0 | out: hHeap=0x1f0000) returned 1 [0198.213] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0198.213] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215e10 | out: hHeap=0x1f0000) returned 1 [0198.213] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5d0 | out: hHeap=0x1f0000) returned 1 [0198.213] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5e0 | out: hHeap=0x1f0000) returned 1 [0198.213] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x246e10 | out: hHeap=0x1f0000) returned 1 [0198.213] CloseHandle (hObject=0x1f0) returned 1 [0198.214] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c720 | out: hHeap=0x1f0000) returned 1 [0198.214] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5c0 | out: hHeap=0x1f0000) returned 1 [0198.214] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0198.214] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24ca08 | out: hHeap=0x1f0000) returned 1 [0198.214] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff70 | out: hHeap=0x1f0000) returned 1 [0198.214] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205210 | out: hHeap=0x1f0000) returned 1 [0198.214] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x244e00 | out: hHeap=0x1f0000) returned 1 [0198.214] CloseHandle (hObject=0x20c) returned 1 [0198.215] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c680 | out: hHeap=0x1f0000) returned 1 [0198.215] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c700 | out: hHeap=0x1f0000) returned 1 [0198.215] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d368 | out: hHeap=0x1f0000) returned 1 [0198.215] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205130 | out: hHeap=0x1f0000) returned 1 [0198.215] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234c90 | out: hHeap=0x1f0000) returned 1 [0198.215] CloseHandle (hObject=0x1f4) returned 1 [0198.216] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c6a0 | out: hHeap=0x1f0000) returned 1 [0198.216] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c660 | out: hHeap=0x1f0000) returned 1 [0198.216] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239be0 | out: hHeap=0x1f0000) returned 1 [0198.216] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c6b0 | out: hHeap=0x1f0000) returned 1 [0198.216] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c530 | out: hHeap=0x1f0000) returned 1 [0198.216] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c4f0 | out: hHeap=0x1f0000) returned 1 [0198.216] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c4c0 | out: hHeap=0x1f0000) returned 1 [0198.216] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b90 | out: hHeap=0x1f0000) returned 1 [0198.216] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x251068 | out: hHeap=0x1f0000) returned 1 [0198.216] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25fe30 | out: hHeap=0x1f0000) returned 1 [0198.216] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206838 | out: hHeap=0x1f0000) returned 1 [0198.217] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210078 | out: hHeap=0x1f0000) returned 1 [0198.217] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210090 | out: hHeap=0x1f0000) returned 1 [0198.217] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260188 | out: hHeap=0x1f0000) returned 1 [0198.217] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x254980 | out: hHeap=0x1f0000) returned 1 [0198.217] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0198.217] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1ff058 | out: hHeap=0x1f0000) returned 1 [0198.217] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215040 | out: hHeap=0x1f0000) returned 1 [0198.217] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e360 | out: hHeap=0x1f0000) returned 1 [0198.217] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215d80 | out: hHeap=0x1f0000) returned 1 [0198.217] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b638 | out: hHeap=0x1f0000) returned 1 [0198.218] DeleteFileW (lpFileName="C:\\\\$GetCurrent\\SafeOS\\SetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\setupcomplete.cmd")) returned 1 [0198.220] FindNextFileW (in: hFindFile=0x214450, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x957833a7, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x957833a7, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9578472e, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x133, dwReserved0=0x21d1fe, dwReserved1=0x240022, cFileName="SetupComplete.cmd", cAlternateFileName="SETUPC~1.CMD")) returned 0 [0198.220] FindClose (in: hFindFile=0x214450 | out: hFindFile=0x214450) returned 1 [0198.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214958 | out: hHeap=0x1f0000) returned 1 [0198.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e9c0 | out: hHeap=0x1f0000) returned 1 [0198.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b670 | out: hHeap=0x1f0000) returned 1 [0198.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2229e8 | out: hHeap=0x1f0000) returned 1 [0198.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0198.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d210 | out: hHeap=0x1f0000) returned 1 [0198.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0198.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf70 | out: hHeap=0x1f0000) returned 1 [0198.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20d5e0 | out: hHeap=0x1f0000) returned 1 [0198.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b620 | out: hHeap=0x1f0000) returned 1 [0198.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213f30 | out: hHeap=0x1f0000) returned 1 [0198.228] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215af8 [0198.228] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b7c8 [0198.228] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d9d0 [0198.228] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0198.228] FindFirstFileW (in: lpFileName="C:\\\\$Recycle.Bin\\*", lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e600 [0198.228] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228230 [0198.229] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0198.229] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0198.229] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0198.229] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0198.229] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228230 | out: hHeap=0x1f0000) returned 1 [0198.229] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0198.229] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0198.229] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18", cAlternateFileName="")) returned 1 [0198.229] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b638 [0198.229] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228230 [0198.229] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x2260f8 [0198.230] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228230 | out: hHeap=0x1f0000) returned 1 [0198.230] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0198.230] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b638 | out: hHeap=0x1f0000) returned 1 [0198.230] lstrcmpW (lpString1="S-1-5-18", lpString2=".") returned 1 [0198.230] lstrcmpW (lpString1="S-1-5-18", lpString2="..") returned 1 [0198.230] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x205210 [0198.230] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216008 [0198.230] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x11a5eef8, ftLastAccessTime.dwHighDateTime=0x1d3375b, ftLastWriteTime.dwLowDateTime=0x11a5eef8, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-1051304884-625712362-2192934891-1000", cAlternateFileName="S-1-5-~1")) returned 1 [0198.230] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214ea0 [0198.231] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0198.231] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a138 [0198.231] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0198.231] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2260f8 | out: hHeap=0x1f0000) returned 1 [0198.231] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214ea0 | out: hHeap=0x1f0000) returned 1 [0198.231] lstrcmpW (lpString1="S-1-5-21-1051304884-625712362-2192934891-1000", lpString2=".") returned 1 [0198.231] lstrcmpW (lpString1="S-1-5-21-1051304884-625712362-2192934891-1000", lpString2="..") returned 1 [0198.231] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0198.231] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2299c8 [0198.231] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205210 | out: hHeap=0x1f0000) returned 1 [0198.231] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x11a5eef8, ftLastAccessTime.dwHighDateTime=0x1d3375b, ftLastWriteTime.dwLowDateTime=0x11a5eef8, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-1051304884-625712362-2192934891-1000", cAlternateFileName="S-1-5-~1")) returned 0 [0198.232] FindClose (in: hFindFile=0x24e600 | out: hFindFile=0x24e600) returned 1 [0198.232] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215d80 [0198.232] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b480 [0198.232] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f020 [0198.233] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216050 [0198.233] FindFirstFileW (in: lpFileName="C:\\\\$Recycle.Bin\\S-1-5-18\\*", lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x227f10, dwReserved1=0x260024, cFileName=".", cAlternateFileName="")) returned 0x24e980 [0198.233] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2160e0 [0198.233] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216050 | out: hHeap=0x1f0000) returned 1 [0198.233] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0198.233] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x227f10, dwReserved1=0x260024, cFileName="..", cAlternateFileName="")) returned 1 [0198.233] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216050 [0198.234] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2160e0 | out: hHeap=0x1f0000) returned 1 [0198.234] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0198.234] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0198.234] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x227f10, dwReserved1=0x260024, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0198.234] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b750 [0198.234] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215e10 [0198.234] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x214f08 [0198.234] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215e10 | out: hHeap=0x1f0000) returned 1 [0198.234] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216050 | out: hHeap=0x1f0000) returned 1 [0198.234] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b750 | out: hHeap=0x1f0000) returned 1 [0198.282] CreateFileW (lpFileName="C:\\\\$Recycle.Bin\\S-1-5-18\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-18\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x20c [0198.282] GetFileType (hFile=0x20c) returned 0x1 [0198.282] CloseHandle (hObject=0x20c) returned 1 [0198.283] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239878 [0198.283] GetFileAttributesExW (in: lpFileName="C:\\\\$Recycle.Bin\\S-1-5-18\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-18\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x173eb6c | out: lpFileInformation=0x173eb6c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x81)) returned 1 [0198.283] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239878 | out: hHeap=0x1f0000) returned 1 [0198.283] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2399d8 [0198.283] GetFileAttributesExW (in: lpFileName="C:\\\\$Recycle.Bin\\S-1-5-18\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-18\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x173eb7c | out: lpFileInformation=0x173eb7c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x81)) returned 1 [0198.283] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2399d8 | out: hHeap=0x1f0000) returned 1 [0198.284] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239a30 [0198.284] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239a30 | out: hHeap=0x1f0000) returned 1 [0198.284] GetLastError () returned 0x0 [0198.284] SetLastError (dwErrCode=0x0) [0198.284] AreFileApisANSI () returned 1 [0198.284] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58420, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0198.284] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58420, cbMultiByte=4, lpWideCharStr=0x173eca8, cchWideChar=4 | out: lpWideCharStr=".exe") returned 4 [0198.284] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b318 [0198.284] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216050 [0198.284] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22dd00 [0198.285] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239560 [0198.285] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0198.285] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b340 [0198.285] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x229a50) returned 1 [0198.288] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x22b340 | out: pbBuffer=0x22b340) returned 1 [0198.288] CryptReleaseContext (hProv=0x229a50, dwFlags=0x0) returned 1 [0198.288] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b340 | out: hHeap=0x1f0000) returned 1 [0198.288] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x25a8a8 [0198.288] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2357a0 [0198.289] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=35565752359) returned 1 [0198.289] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0198.289] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=35565777556) returned 1 [0198.289] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0198.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x2282a0 [0198.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x25bbb0 [0198.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2358b0 [0198.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x234ca0 [0198.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff70 [0198.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206838 [0198.290] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210018 [0198.290] GetLastError () returned 0x0 [0198.290] SetLastError (dwErrCode=0x0) [0198.290] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0198.290] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214fd8 [0198.290] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a4d0 [0198.290] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214fd8 | out: hHeap=0x1f0000) returned 1 [0198.290] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xee) returned 0x229418 [0198.290] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a4d0 | out: hHeap=0x1f0000) returned 1 [0198.290] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c660 [0198.290] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c720 [0198.291] CreateFileW (lpFileName="C:\\\\$Recycle.Bin\\S-1-5-18\\desktop.ini.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\$recycle.bin\\s-1-5-18\\desktop.ini.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e230, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x20c [0198.298] GetFileType (hFile=0x20c) returned 0x1 [0198.298] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c560 [0198.298] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c680 [0198.299] CreateFileW (lpFileName="C:\\\\$Recycle.Bin\\S-1-5-18\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-18\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0198.299] GetFileType (hFile=0x1f0) returned 0x1 [0198.299] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205210 [0198.299] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205150 [0198.299] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x239be0 [0198.300] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c5d0 [0198.300] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c6b0 [0198.300] CreateFileW (lpFileName="C:\\\\$Recycle.Bin\\S-1-5-18\\desktop.ini.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\$recycle.bin\\s-1-5-18\\desktop.ini.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0198.300] GetFileType (hFile=0x214) returned 0x1 [0198.301] GetLastError () returned 0xb7 [0198.301] SetLastError (dwErrCode=0xb7) [0198.301] GetLastError () returned 0xb7 [0198.301] SetLastError (dwErrCode=0xb7) [0198.301] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205210 | out: hHeap=0x1f0000) returned 1 [0198.301] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205150 | out: hHeap=0x1f0000) returned 1 [0198.301] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe4) returned 0x229510 [0198.301] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205150 [0198.301] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205210 [0198.301] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205290 [0198.301] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x22d368 [0198.301] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c5f0 [0198.302] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c5e0 [0198.302] CreateFileW (lpFileName="C:\\\\$Recycle.Bin\\S-1-5-18\\desktop.ini.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\$recycle.bin\\s-1-5-18\\desktop.ini.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0198.302] GetFileType (hFile=0x1c0) returned 0x1 [0198.303] GetLastError () returned 0xb7 [0198.303] SetLastError (dwErrCode=0xb7) [0198.303] GetLastError () returned 0xb7 [0198.303] SetLastError (dwErrCode=0xb7) [0198.303] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205210 | out: hHeap=0x1f0000) returned 1 [0198.303] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205290 | out: hHeap=0x1f0000) returned 1 [0198.303] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205210 [0198.303] GetLastError () returned 0xb7 [0198.303] SetLastError (dwErrCode=0xb7) [0198.303] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205210 | out: hHeap=0x1f0000) returned 1 [0198.303] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205210 [0198.303] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205290 [0198.303] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x2052d0 [0198.303] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb8) returned 0x230ef0 [0198.304] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c600 [0198.304] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c640 [0198.304] CreateFileW (lpFileName="C:\\\\$Recycle.Bin\\S-1-5-18\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-18\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1a4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0198.305] GetFileType (hFile=0x1e0) returned 0x1 [0198.305] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x241de8 [0198.305] ReadFile (in: hFile=0x1e0, lpBuffer=0x241de8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e100, lpOverlapped=0x0 | out: lpBuffer=0x241de8*, lpNumberOfBytesRead=0x173e100*=0x81, lpOverlapped=0x0) returned 1 [0198.307] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24bdf0 [0198.307] ReadFile (in: hFile=0x1e0, lpBuffer=0x241de8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e190, lpOverlapped=0x0 | out: lpBuffer=0x241de8*, lpNumberOfBytesRead=0x173e190*=0x0, lpOverlapped=0x0) returned 1 [0198.308] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x245e08 [0198.308] GetLastError () returned 0x0 [0198.308] SetLastError (dwErrCode=0x0) [0198.308] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffb8 [0198.309] GetLastError () returned 0x0 [0198.309] SetLastError (dwErrCode=0x0) [0198.309] WriteFile (in: hFile=0x1c0, lpBuffer=0x245e08*, nNumberOfBytesToWrite=0x91, lpNumberOfBytesWritten=0x173e084, lpOverlapped=0x0 | out: lpBuffer=0x245e08*, lpNumberOfBytesWritten=0x173e084*=0x91, lpOverlapped=0x0) returned 1 [0198.311] GetLastError () returned 0x0 [0198.311] SetLastError (dwErrCode=0x0) [0198.312] GetLastError () returned 0x0 [0198.312] SetLastError (dwErrCode=0x0) [0198.312] GetLastError () returned 0x0 [0198.312] SetLastError (dwErrCode=0x0) [0198.312] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205290 | out: hHeap=0x1f0000) returned 1 [0198.312] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2052d0 | out: hHeap=0x1f0000) returned 1 [0198.312] CloseHandle (hObject=0x20c) returned 1 [0198.313] CloseHandle (hObject=0x1f0) returned 1 [0198.314] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c5b0 [0198.314] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c6c0 [0198.314] CreateFileW (lpFileName="C:\\\\$Recycle.Bin\\S-1-5-18\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-18\\desktop.ini"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0198.315] GetLastError () returned 0x5 [0198.315] GetLastError () returned 0x5 [0198.315] SetLastError (dwErrCode=0x5) [0198.315] GetLastError () returned 0x5 [0198.315] SetLastError (dwErrCode=0x5) [0198.315] GetLastError () returned 0x5 [0198.315] SetLastError (dwErrCode=0x5) [0198.315] GetLastError () returned 0x5 [0198.315] SetLastError (dwErrCode=0x5) [0198.315] DeleteFileW (lpFileName="C:\\\\$Recycle.Bin\\S-1-5-18\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-18\\desktop.ini")) returned 0 [0198.316] GetLastError () returned 0x20 [0198.316] GetLastError () returned 0x20 [0198.316] SetLastError (dwErrCode=0x20) [0198.316] GetLastError () returned 0x20 [0198.316] SetLastError (dwErrCode=0x20) [0198.316] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216098 [0198.316] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b340 [0198.316] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b368 [0198.316] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x2160e0 [0198.316] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205290 [0198.316] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x2052d0 [0198.316] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x21c610 [0198.316] GetLastError () returned 0x20 [0198.316] SetLastError (dwErrCode=0x20) [0198.317] GetLastError () returned 0x20 [0198.317] SetLastError (dwErrCode=0x20) [0198.317] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205290 | out: hHeap=0x1f0000) returned 1 [0198.317] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2052d0 | out: hHeap=0x1f0000) returned 1 [0198.317] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x2282a0 [0198.317] GetLastError () returned 0x20 [0198.317] SetLastError (dwErrCode=0x20) [0198.317] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0198.317] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x2282a0 [0198.317] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214fd8 [0198.317] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x22b3e0 [0198.317] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x230fb0 [0198.317] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c570 [0198.317] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b818 [0198.317] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffe8 [0198.317] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c580 [0198.318] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b840 [0198.318] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210078 [0198.318] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x22b868 [0198.318] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x234fc8 [0198.318] GetLastError () returned 0x20 [0198.318] SetLastError (dwErrCode=0x20) [0198.318] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0198.318] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x21c620 [0198.318] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x21c6a0 [0198.318] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x206430 [0198.318] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c6a0 | out: hHeap=0x1f0000) returned 1 [0198.318] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2064e0 [0198.318] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206430 | out: hHeap=0x1f0000) returned 1 [0198.318] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c620 | out: hHeap=0x1f0000) returned 1 [0198.318] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2063f0 [0198.319] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210090 [0198.319] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2063f0 | out: hHeap=0x1f0000) returned 1 [0198.319] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101e0 [0198.319] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210090 | out: hHeap=0x1f0000) returned 1 [0198.319] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2064e0 | out: hHeap=0x1f0000) returned 1 [0198.319] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210090 [0198.319] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210228 [0198.319] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210090 | out: hHeap=0x1f0000) returned 1 [0198.319] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210090 [0198.319] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210228 | out: hHeap=0x1f0000) returned 1 [0198.319] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0198.319] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0198.319] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x205290 [0198.319] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0198.319] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x2052d0 [0198.320] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205290 | out: hHeap=0x1f0000) returned 1 [0198.320] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210090 | out: hHeap=0x1f0000) returned 1 [0198.320] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205290 [0198.320] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x237fd8 [0198.320] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205290 | out: hHeap=0x1f0000) returned 1 [0198.320] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x205290 [0198.320] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0198.320] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2052d0 | out: hHeap=0x1f0000) returned 1 [0198.320] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x2052d0 [0198.320] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206808 [0198.320] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2052d0 | out: hHeap=0x1f0000) returned 1 [0198.320] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238230 [0198.320] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206808 | out: hHeap=0x1f0000) returned 1 [0198.320] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205290 | out: hHeap=0x1f0000) returned 1 [0198.320] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x206560 [0198.320] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210090 [0198.321] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206560 | out: hHeap=0x1f0000) returned 1 [0198.321] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101f8 [0198.321] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210090 | out: hHeap=0x1f0000) returned 1 [0198.321] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x205290 [0198.321] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101f8 | out: hHeap=0x1f0000) returned 1 [0198.321] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206808 [0198.321] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205290 | out: hHeap=0x1f0000) returned 1 [0198.321] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206808 | out: hHeap=0x1f0000) returned 1 [0198.321] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0198.321] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b340 | out: hHeap=0x1f0000) returned 1 [0198.321] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0198.321] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230fb0 | out: hHeap=0x1f0000) returned 1 [0198.321] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b3e0 | out: hHeap=0x1f0000) returned 1 [0198.321] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282a0 [0198.321] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0198.322] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x22a2d0) returned 1 [0198.324] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2381b8 | out: pbBuffer=0x2381b8) returned 1 [0198.324] CryptReleaseContext (hProv=0x22a2d0, dwFlags=0x0) returned 1 [0198.324] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0198.324] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238230 [0198.324] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238050 [0198.324] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d210 [0198.324] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0198.324] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0198.325] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d210 | out: hHeap=0x1f0000) returned 1 [0198.325] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x239878 [0198.325] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0198.325] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x215040 [0198.325] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238230 [0198.325] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x230fb0 [0198.325] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x2052d0 [0198.325] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214958 [0198.325] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2383c0 [0198.325] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2350d0 [0198.325] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2064e0 [0198.325] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0198.325] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101f8 [0198.325] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x206470 [0198.325] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238028 [0198.325] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210228 [0198.326] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210228 | out: hHeap=0x1f0000) returned 1 [0198.326] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238028 | out: hHeap=0x1f0000) returned 1 [0198.326] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206470 | out: hHeap=0x1f0000) returned 1 [0198.326] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101f8 | out: hHeap=0x1f0000) returned 1 [0198.326] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0198.326] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2064e0 | out: hHeap=0x1f0000) returned 1 [0198.655] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2350d0 | out: hHeap=0x1f0000) returned 1 [0198.655] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383c0 | out: hHeap=0x1f0000) returned 1 [0198.655] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214958 | out: hHeap=0x1f0000) returned 1 [0198.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x21cf00 [0198.655] GetLastError () returned 0x0 [0198.655] SetLastError (dwErrCode=0x0) [0198.655] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0198.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x21d2f0 [0198.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0198.655] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0198.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0198.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0198.655] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0198.655] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0198.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x24e740 [0198.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2350d0 [0198.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0198.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0198.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0198.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0198.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x234b90 [0198.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0198.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0198.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x230258 [0198.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x258298 [0198.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x217038 [0198.656] QueryPerformanceCounter (in: lpPerformanceCount=0x173dee0 | out: lpPerformanceCount=0x173dee0*=35602501599) returned 1 [0198.656] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173df20 | out: lpSystemTimeAsFileTime=0x173df20) [0198.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x206450 [0198.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0198.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205130 [0198.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205130 | out: hHeap=0x1f0000) returned 1 [0198.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0198.657] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0198.657] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x2051f0 [0198.657] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2051f0 | out: hHeap=0x1f0000) returned 1 [0198.657] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0198.657] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206450 | out: hHeap=0x1f0000) returned 1 [0198.657] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0198.657] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x21cf00 [0198.657] GetLastError () returned 0x0 [0198.657] SetLastError (dwErrCode=0x0) [0198.657] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0198.657] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0198.657] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0198.657] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0198.657] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2383c0 [0198.657] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381b8 [0198.657] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0198.657] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0198.657] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381e0 [0198.657] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0198.657] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x222ee8 [0198.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0198.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x25fd40 [0198.658] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0198.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x20d5e0 [0198.658] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25fd40 | out: hHeap=0x1f0000) returned 1 [0198.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238690 [0198.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238758 [0198.658] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238690 | out: hHeap=0x1f0000) returned 1 [0198.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0198.658] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238758 | out: hHeap=0x1f0000) returned 1 [0198.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x25fd40 [0198.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x260498 [0198.658] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260498 | out: hHeap=0x1f0000) returned 1 [0198.658] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25fd40 | out: hHeap=0x1f0000) returned 1 [0198.658] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20d5e0 | out: hHeap=0x1f0000) returned 1 [0198.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x20ffa0 [0198.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215d38 [0198.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238690 [0198.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238758 [0198.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b5c0 [0198.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b458 [0198.659] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238758 | out: hHeap=0x1f0000) returned 1 [0198.659] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238690 | out: hHeap=0x1f0000) returned 1 [0198.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x25fd40 [0198.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b5e8 [0198.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b638 [0198.659] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b5e8 | out: hHeap=0x1f0000) returned 1 [0198.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0198.659] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b638 | out: hHeap=0x1f0000) returned 1 [0198.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206928 [0198.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x260498 [0198.659] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260498 | out: hHeap=0x1f0000) returned 1 [0198.659] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206928 | out: hHeap=0x1f0000) returned 1 [0198.659] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0198.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0198.659] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0198.659] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25fd40 | out: hHeap=0x1f0000) returned 1 [0198.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x205130 [0198.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0198.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0198.660] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0198.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x237938 [0198.660] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0198.660] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b458 | out: hHeap=0x1f0000) returned 1 [0198.660] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b5c0 | out: hHeap=0x1f0000) returned 1 [0198.660] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215d38 | out: hHeap=0x1f0000) returned 1 [0198.660] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0198.660] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205130 | out: hHeap=0x1f0000) returned 1 [0198.660] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffa0 | out: hHeap=0x1f0000) returned 1 [0198.660] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0198.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x237498 [0198.660] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237498 | out: hHeap=0x1f0000) returned 1 [0198.660] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ee8 | out: hHeap=0x1f0000) returned 1 [0198.660] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0198.660] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0198.660] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0198.660] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0198.660] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383c0 | out: hHeap=0x1f0000) returned 1 [0198.660] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0198.661] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0198.661] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x236218 [0198.661] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x236908 [0198.661] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236218 | out: hHeap=0x1f0000) returned 1 [0198.661] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236908 | out: hHeap=0x1f0000) returned 1 [0198.661] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237938 | out: hHeap=0x1f0000) returned 1 [0198.661] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0198.661] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b90 | out: hHeap=0x1f0000) returned 1 [0198.661] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24e740 | out: hHeap=0x1f0000) returned 1 [0198.661] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x260188 [0198.661] GetLastError () returned 0x0 [0198.661] SetLastError (dwErrCode=0x0) [0198.661] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0198.661] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x206460 [0198.661] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x206470 [0198.662] CreateFileW (lpFileName="C:\\\\$Recycle.Bin\\S-1-5-18\\desktop.ini.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\$recycle.bin\\s-1-5-18\\desktop.ini.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e290, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0198.662] GetFileType (hFile=0x218) returned 0x1 [0198.662] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x23ddc8 [0198.663] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e218 | out: lpNewFilePointer=0x0) returned 1 [0198.663] GetLastError () returned 0xb7 [0198.663] SetLastError (dwErrCode=0xb7) [0198.663] GetLastError () returned 0xb7 [0198.663] SetLastError (dwErrCode=0xb7) [0198.663] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e2dc | out: lpNewFilePointer=0x0) returned 1 [0198.664] WriteFile (in: hFile=0x218, lpBuffer=0x23ddc8*, nNumberOfBytesToWrite=0x103, lpNumberOfBytesWritten=0x173e340, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesWritten=0x173e340*=0x103, lpOverlapped=0x0) returned 1 [0198.664] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x23ddc8 | out: hHeap=0x1f0000) returned 1 [0198.664] CloseHandle (hObject=0x218) returned 1 [0198.665] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206470 | out: hHeap=0x1f0000) returned 1 [0198.665] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206460 | out: hHeap=0x1f0000) returned 1 [0198.665] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2350d0 | out: hHeap=0x1f0000) returned 1 [0198.665] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230fb0 | out: hHeap=0x1f0000) returned 1 [0198.665] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0198.665] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2052d0 | out: hHeap=0x1f0000) returned 1 [0198.665] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215040 | out: hHeap=0x1f0000) returned 1 [0198.665] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0198.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239878 | out: hHeap=0x1f0000) returned 1 [0198.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260188 | out: hHeap=0x1f0000) returned 1 [0198.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238050 | out: hHeap=0x1f0000) returned 1 [0198.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0198.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x258298 | out: hHeap=0x1f0000) returned 1 [0198.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0198.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0198.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c610 | out: hHeap=0x1f0000) returned 1 [0198.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210078 | out: hHeap=0x1f0000) returned 1 [0198.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b840 | out: hHeap=0x1f0000) returned 1 [0198.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c580 | out: hHeap=0x1f0000) returned 1 [0198.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffe8 | out: hHeap=0x1f0000) returned 1 [0198.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b818 | out: hHeap=0x1f0000) returned 1 [0198.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c570 | out: hHeap=0x1f0000) returned 1 [0198.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234fc8 | out: hHeap=0x1f0000) returned 1 [0198.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b868 | out: hHeap=0x1f0000) returned 1 [0198.667] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214fd8 | out: hHeap=0x1f0000) returned 1 [0198.667] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2160e0 | out: hHeap=0x1f0000) returned 1 [0198.667] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b368 | out: hHeap=0x1f0000) returned 1 [0198.667] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0198.667] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216098 | out: hHeap=0x1f0000) returned 1 [0198.667] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c6c0 | out: hHeap=0x1f0000) returned 1 [0198.667] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5b0 | out: hHeap=0x1f0000) returned 1 [0198.667] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x241de8 | out: hHeap=0x1f0000) returned 1 [0198.667] CloseHandle (hObject=0x1e0) returned 1 [0198.667] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c640 | out: hHeap=0x1f0000) returned 1 [0198.667] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c600 | out: hHeap=0x1f0000) returned 1 [0198.667] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230ef0 | out: hHeap=0x1f0000) returned 1 [0198.667] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24bdf0 | out: hHeap=0x1f0000) returned 1 [0198.668] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffb8 | out: hHeap=0x1f0000) returned 1 [0198.668] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205210 | out: hHeap=0x1f0000) returned 1 [0198.668] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x245e08 | out: hHeap=0x1f0000) returned 1 [0198.668] CloseHandle (hObject=0x1c0) returned 1 [0198.668] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5e0 | out: hHeap=0x1f0000) returned 1 [0198.668] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5f0 | out: hHeap=0x1f0000) returned 1 [0198.668] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d368 | out: hHeap=0x1f0000) returned 1 [0198.668] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205150 | out: hHeap=0x1f0000) returned 1 [0198.668] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229510 | out: hHeap=0x1f0000) returned 1 [0198.669] CloseHandle (hObject=0x214) returned 1 [0198.669] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c6b0 | out: hHeap=0x1f0000) returned 1 [0198.669] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5d0 | out: hHeap=0x1f0000) returned 1 [0198.669] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239be0 | out: hHeap=0x1f0000) returned 1 [0198.669] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c680 | out: hHeap=0x1f0000) returned 1 [0198.669] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c560 | out: hHeap=0x1f0000) returned 1 [0198.669] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c720 | out: hHeap=0x1f0000) returned 1 [0198.669] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c660 | out: hHeap=0x1f0000) returned 1 [0198.669] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0198.669] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25bbb0 | out: hHeap=0x1f0000) returned 1 [0198.669] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2358b0 | out: hHeap=0x1f0000) returned 1 [0198.669] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206838 | out: hHeap=0x1f0000) returned 1 [0198.670] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210018 | out: hHeap=0x1f0000) returned 1 [0198.670] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff70 | out: hHeap=0x1f0000) returned 1 [0198.670] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234ca0 | out: hHeap=0x1f0000) returned 1 [0198.670] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25a8a8 | out: hHeap=0x1f0000) returned 1 [0198.670] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2357a0 | out: hHeap=0x1f0000) returned 1 [0198.670] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0198.670] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239560 | out: hHeap=0x1f0000) returned 1 [0198.670] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22dd00 | out: hHeap=0x1f0000) returned 1 [0198.670] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216050 | out: hHeap=0x1f0000) returned 1 [0198.670] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b318 | out: hHeap=0x1f0000) returned 1 [0198.670] DeleteFileW (lpFileName="C:\\\\$Recycle.Bin\\S-1-5-18\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-18\\desktop.ini")) returned 1 [0198.671] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x227f10, dwReserved1=0x260024, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0198.671] FindClose (in: hFindFile=0x24e980 | out: hFindFile=0x24e980) returned 1 [0198.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f08 | out: hHeap=0x1f0000) returned 1 [0198.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f020 | out: hHeap=0x1f0000) returned 1 [0198.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b480 | out: hHeap=0x1f0000) returned 1 [0198.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215d80 | out: hHeap=0x1f0000) returned 1 [0198.672] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215d38 [0198.672] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b638 [0198.672] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f020 [0198.672] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0198.672] FindFirstFileW (in: lpFileName="C:\\\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\*", lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x11a5eef8, ftLastAccessTime.dwHighDateTime=0x1d3375b, ftLastWriteTime.dwLowDateTime=0x11a5eef8, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x227f10, dwReserved1=0x260024, cFileName=".", cAlternateFileName="")) returned 0x24eb00 [0198.672] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a3e0 [0198.673] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0198.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a3e0 | out: hHeap=0x1f0000) returned 1 [0198.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0198.673] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0198.673] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x11a5eef8, ftLastAccessTime.dwHighDateTime=0x1d3375b, ftLastWriteTime.dwLowDateTime=0x11a5eef8, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x227f10, dwReserved1=0x260024, cFileName="..", cAlternateFileName="")) returned 1 [0198.673] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229e90 [0198.673] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0198.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229e90 | out: hHeap=0x1f0000) returned 1 [0198.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0198.673] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0198.673] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0198.673] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcb9438a8, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xcb9438a8, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x227f10, dwReserved1=0x260024, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0198.673] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b5c0 [0198.673] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229b60 [0198.673] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0198.674] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229b60 | out: hHeap=0x1f0000) returned 1 [0198.674] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0198.674] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b5c0 | out: hHeap=0x1f0000) returned 1 [0198.674] CreateFileW (lpFileName="C:\\\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0198.674] GetFileType (hFile=0x214) returned 0x1 [0198.675] CloseHandle (hObject=0x214) returned 1 [0198.675] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a380 [0198.675] GetFileAttributesExW (in: lpFileName="C:\\\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x173eb6c | out: lpFileInformation=0x173eb6c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcb9438a8, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xcb9438a8, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x81)) returned 1 [0198.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a380 | out: hHeap=0x1f0000) returned 1 [0198.675] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a968 [0198.675] GetFileAttributesExW (in: lpFileName="C:\\\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x173eb7c | out: lpFileInformation=0x173eb7c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcb9438a8, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xcb9438a8, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x81)) returned 1 [0198.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a968 | out: hHeap=0x1f0000) returned 1 [0198.676] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a620 [0198.676] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a620 | out: hHeap=0x1f0000) returned 1 [0198.676] GetLastError () returned 0x0 [0198.676] SetLastError (dwErrCode=0x0) [0198.676] AreFileApisANSI () returned 1 [0198.676] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58420, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0198.676] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58420, cbMultiByte=4, lpWideCharStr=0x173eca8, cchWideChar=4 | out: lpWideCharStr=".exe") returned 4 [0198.676] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b750 [0198.676] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215d80 [0198.676] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f1b8 [0198.676] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a818 [0198.676] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0198.677] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b458 [0198.677] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x229a50) returned 1 [0198.679] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x22b458 | out: pbBuffer=0x22b458) returned 1 [0198.679] CryptReleaseContext (hProv=0x229a50, dwFlags=0x0) returned 1 [0198.679] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b458 | out: hHeap=0x1f0000) returned 1 [0198.679] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x24fd60 [0198.679] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x217038 [0198.679] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=35604834065) returned 1 [0198.680] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0198.680] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=35604856947) returned 1 [0198.680] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0198.680] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x21d2f0 [0198.680] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x251068 [0198.680] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x260188 [0198.680] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x20e1f0 [0198.680] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20fef8 [0198.680] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206658 [0198.680] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffa0 [0198.680] GetLastError () returned 0x0 [0198.680] SetLastError (dwErrCode=0x0) [0198.681] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0198.681] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x239be0 [0198.681] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x106) returned 0x24f5d8 [0198.681] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239be0 | out: hHeap=0x1f0000) returned 1 [0198.681] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x188) returned 0x235db8 [0198.681] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f5d8 | out: hHeap=0x1f0000) returned 1 [0198.681] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2064e0 [0198.681] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x206450 [0198.682] CreateFileW (lpFileName="C:\\\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\$recycle.bin\\s-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e230, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0198.684] GetFileType (hFile=0x214) returned 0x1 [0198.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x206460 [0198.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x206470 [0198.685] CreateFileW (lpFileName="C:\\\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0198.685] GetFileType (hFile=0x1c0) returned 0x1 [0198.686] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205290 [0198.686] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x2051f0 [0198.686] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x239be0 [0198.686] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c660 [0198.686] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c700 [0198.688] CreateFileW (lpFileName="C:\\\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\$recycle.bin\\s-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0198.688] GetFileType (hFile=0x1e0) returned 0x1 [0198.688] GetLastError () returned 0xb7 [0198.689] SetLastError (dwErrCode=0xb7) [0198.689] GetLastError () returned 0xb7 [0198.689] SetLastError (dwErrCode=0xb7) [0198.689] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205290 | out: hHeap=0x1f0000) returned 1 [0198.689] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2051f0 | out: hHeap=0x1f0000) returned 1 [0198.689] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe4) returned 0x24f5d8 [0198.689] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x2051f0 [0198.689] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204fb0 [0198.689] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205130 [0198.689] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x22d368 [0198.689] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c680 [0198.690] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c6a0 [0198.690] CreateFileW (lpFileName="C:\\\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\$recycle.bin\\s-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0198.690] GetFileType (hFile=0x218) returned 0x1 [0198.691] GetLastError () returned 0xb7 [0198.691] SetLastError (dwErrCode=0xb7) [0198.691] GetLastError () returned 0xb7 [0198.691] SetLastError (dwErrCode=0xb7) [0198.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204fb0 | out: hHeap=0x1f0000) returned 1 [0198.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205130 | out: hHeap=0x1f0000) returned 1 [0198.691] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204fb0 [0198.691] GetLastError () returned 0xb7 [0198.691] SetLastError (dwErrCode=0xb7) [0198.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204fb0 | out: hHeap=0x1f0000) returned 1 [0198.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205130 [0198.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205290 [0198.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x2052d0 [0198.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb8) returned 0x20dd00 [0198.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c620 [0198.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c5c0 [0198.692] CreateFileW (lpFileName="C:\\\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1a4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0198.693] GetFileType (hFile=0x200) returned 0x1 [0198.693] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x240de0 [0198.693] ReadFile (in: hFile=0x200, lpBuffer=0x240de0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e100, lpOverlapped=0x0 | out: lpBuffer=0x240de0*, lpNumberOfBytesRead=0x173e100*=0x81, lpOverlapped=0x0) returned 1 [0198.693] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24ca08 [0198.694] ReadFile (in: hFile=0x200, lpBuffer=0x240de0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e190, lpOverlapped=0x0 | out: lpBuffer=0x240de0*, lpNumberOfBytesRead=0x173e190*=0x0, lpOverlapped=0x0) returned 1 [0198.694] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x23ddc8 [0198.694] GetLastError () returned 0x0 [0198.694] SetLastError (dwErrCode=0x0) [0198.694] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210078 [0198.694] GetLastError () returned 0x0 [0198.694] SetLastError (dwErrCode=0x0) [0198.695] WriteFile (in: hFile=0x218, lpBuffer=0x23ddc8*, nNumberOfBytesToWrite=0x91, lpNumberOfBytesWritten=0x173e084, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesWritten=0x173e084*=0x91, lpOverlapped=0x0) returned 1 [0198.696] GetLastError () returned 0x0 [0198.696] SetLastError (dwErrCode=0x0) [0198.696] GetLastError () returned 0x0 [0198.696] SetLastError (dwErrCode=0x0) [0198.696] GetLastError () returned 0x0 [0198.696] SetLastError (dwErrCode=0x0) [0198.696] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205290 | out: hHeap=0x1f0000) returned 1 [0198.696] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2052d0 | out: hHeap=0x1f0000) returned 1 [0198.696] CloseHandle (hObject=0x214) returned 1 [0198.698] CloseHandle (hObject=0x1c0) returned 1 [0198.698] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c640 [0198.698] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c5e0 [0198.698] CreateFileW (lpFileName="C:\\\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0198.699] GetLastError () returned 0x5 [0198.699] GetLastError () returned 0x5 [0198.699] SetLastError (dwErrCode=0x5) [0198.699] GetLastError () returned 0x5 [0198.699] SetLastError (dwErrCode=0x5) [0198.699] GetLastError () returned 0x5 [0198.699] SetLastError (dwErrCode=0x5) [0198.699] GetLastError () returned 0x5 [0198.699] SetLastError (dwErrCode=0x5) [0198.699] DeleteFileW (lpFileName="C:\\\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini")) returned 0 [0198.699] GetLastError () returned 0x20 [0198.699] GetLastError () returned 0x20 [0198.699] SetLastError (dwErrCode=0x20) [0198.699] GetLastError () returned 0x20 [0198.699] SetLastError (dwErrCode=0x20) [0198.699] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215e10 [0198.699] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b5c0 [0198.699] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b778 [0198.699] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x216050 [0198.700] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205150 [0198.700] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205290 [0198.700] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x21c6b0 [0198.700] GetLastError () returned 0x20 [0198.700] SetLastError (dwErrCode=0x20) [0198.700] GetLastError () returned 0x20 [0198.700] SetLastError (dwErrCode=0x20) [0198.700] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205150 | out: hHeap=0x1f0000) returned 1 [0198.700] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205290 | out: hHeap=0x1f0000) returned 1 [0198.700] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x21cf00 [0198.700] GetLastError () returned 0x20 [0198.700] SetLastError (dwErrCode=0x20) [0198.700] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0198.700] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x21cf00 [0198.700] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c98 [0198.700] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x22b2f0 [0198.700] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x234b90 [0198.700] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c610 [0198.700] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b5e8 [0198.700] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff28 [0198.700] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c5a0 [0198.700] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b318 [0198.700] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff70 [0198.700] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x22b340 [0198.701] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x234c98 [0198.701] GetLastError () returned 0x20 [0198.701] SetLastError (dwErrCode=0x20) [0198.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0198.701] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x21c600 [0198.701] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x21c720 [0198.701] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c6c0 [0198.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c720 | out: hHeap=0x1f0000) returned 1 [0198.701] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c5d0 [0198.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c6c0 | out: hHeap=0x1f0000) returned 1 [0198.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c600 | out: hHeap=0x1f0000) returned 1 [0198.701] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c720 [0198.701] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x20ffb8 [0198.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c720 | out: hHeap=0x1f0000) returned 1 [0198.701] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x20ffd0 [0198.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffb8 | out: hHeap=0x1f0000) returned 1 [0198.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5d0 | out: hHeap=0x1f0000) returned 1 [0198.701] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x20ffb8 [0198.701] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2100a8 [0198.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffb8 | out: hHeap=0x1f0000) returned 1 [0198.701] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffb8 [0198.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2100a8 | out: hHeap=0x1f0000) returned 1 [0198.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffd0 | out: hHeap=0x1f0000) returned 1 [0198.701] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffd0 [0198.701] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x205210 [0198.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffd0 | out: hHeap=0x1f0000) returned 1 [0198.701] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204fb0 [0198.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205210 | out: hHeap=0x1f0000) returned 1 [0198.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffb8 | out: hHeap=0x1f0000) returned 1 [0198.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205150 [0198.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x22b368 [0198.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205150 | out: hHeap=0x1f0000) returned 1 [0198.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x205150 [0198.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b368 | out: hHeap=0x1f0000) returned 1 [0198.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204fb0 | out: hHeap=0x1f0000) returned 1 [0198.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x205210 [0198.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x2065f8 [0198.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205210 | out: hHeap=0x1f0000) returned 1 [0198.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x22b368 [0198.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2065f8 | out: hHeap=0x1f0000) returned 1 [0198.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205150 | out: hHeap=0x1f0000) returned 1 [0198.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c6c0 [0198.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x20ffb8 [0198.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c6c0 | out: hHeap=0x1f0000) returned 1 [0198.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffd0 [0198.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffb8 | out: hHeap=0x1f0000) returned 1 [0198.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x2052d0 [0198.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffd0 | out: hHeap=0x1f0000) returned 1 [0198.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206808 [0199.015] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2052d0 | out: hHeap=0x1f0000) returned 1 [0199.015] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206808 | out: hHeap=0x1f0000) returned 1 [0199.015] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b368 | out: hHeap=0x1f0000) returned 1 [0199.015] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b5c0 | out: hHeap=0x1f0000) returned 1 [0199.015] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0199.015] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b90 | out: hHeap=0x1f0000) returned 1 [0199.015] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b2f0 | out: hHeap=0x1f0000) returned 1 [0199.015] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2f0 [0199.016] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20bd00 [0199.016] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x22a028) returned 1 [0199.019] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x20bd00 | out: pbBuffer=0x20bd00) returned 1 [0199.019] CryptReleaseContext (hProv=0x22a028, dwFlags=0x0) returned 1 [0199.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20bd00 | out: hHeap=0x1f0000) returned 1 [0199.019] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20bb98 [0199.020] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20bd00 [0199.020] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0199.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20bb98 | out: hHeap=0x1f0000) returned 1 [0199.020] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0199.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0199.020] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2397c8 [0199.020] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210000 [0199.020] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x214a90 [0199.021] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x20bc38 [0199.021] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x234b90 [0199.021] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205150 [0199.021] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2149c0 [0199.021] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x20bd50 [0199.021] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x229528 [0199.021] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c580 [0199.021] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20bb98 [0199.021] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210018 [0199.022] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c590 [0199.022] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0199.022] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210090 [0199.022] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210090 | out: hHeap=0x1f0000) returned 1 [0199.022] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0199.022] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c590 | out: hHeap=0x1f0000) returned 1 [0199.022] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210018 | out: hHeap=0x1f0000) returned 1 [0199.022] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20bb98 | out: hHeap=0x1f0000) returned 1 [0199.022] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c580 | out: hHeap=0x1f0000) returned 1 [0199.023] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229528 | out: hHeap=0x1f0000) returned 1 [0199.023] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20bd50 | out: hHeap=0x1f0000) returned 1 [0199.023] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2149c0 | out: hHeap=0x1f0000) returned 1 [0199.023] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x21cf00 [0199.023] GetLastError () returned 0x0 [0199.023] SetLastError (dwErrCode=0x0) [0199.023] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0199.023] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x21cf70 [0199.023] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0199.023] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0199.023] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0199.023] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0199.023] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0199.024] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0199.024] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x24e7c0 [0199.024] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x229528 [0199.024] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0199.024] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0199.024] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0199.024] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0199.024] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x25fd40 [0199.024] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0199.024] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0199.024] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x230258 [0199.024] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x258298 [0199.024] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x25fe48 [0199.025] QueryPerformanceCounter (in: lpPerformanceCount=0x173dee0 | out: lpPerformanceCount=0x173dee0*=35639349179) returned 1 [0199.025] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173df20 | out: lpSystemTimeAsFileTime=0x173df20) [0199.025] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x21c580 [0199.025] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0199.025] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x2052d0 [0199.025] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2052d0 | out: hHeap=0x1f0000) returned 1 [0199.025] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0199.026] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0199.026] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205210 [0199.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205210 | out: hHeap=0x1f0000) returned 1 [0199.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0199.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c580 | out: hHeap=0x1f0000) returned 1 [0199.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0199.026] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x21cf00 [0199.026] GetLastError () returned 0x0 [0199.026] SetLastError (dwErrCode=0x0) [0199.027] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0199.027] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0199.027] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0199.027] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0199.027] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381b8 [0199.027] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381e0 [0199.027] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0199.027] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0199.027] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x237fd8 [0199.027] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0199.028] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x222ee8 [0199.028] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0199.028] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x230e38 [0199.028] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0199.028] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x20d5e0 [0199.028] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230e38 | out: hHeap=0x1f0000) returned 1 [0199.028] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2380a0 [0199.028] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238230 [0199.028] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0199.028] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0199.028] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0199.028] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x230e38 [0199.029] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x260498 [0199.029] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260498 | out: hHeap=0x1f0000) returned 1 [0199.029] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230e38 | out: hHeap=0x1f0000) returned 1 [0199.029] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20d5e0 | out: hHeap=0x1f0000) returned 1 [0199.029] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210090 [0199.029] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216830 [0199.029] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2383c0 [0199.029] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238050 [0199.029] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2380a0 [0199.029] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238140 [0199.030] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238050 | out: hHeap=0x1f0000) returned 1 [0199.030] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383c0 | out: hHeap=0x1f0000) returned 1 [0199.030] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x230e38 [0199.030] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2383c0 [0199.030] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238230 [0199.030] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383c0 | out: hHeap=0x1f0000) returned 1 [0199.030] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0199.030] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0199.030] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206808 [0199.030] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x260498 [0199.030] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260498 | out: hHeap=0x1f0000) returned 1 [0199.030] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206808 | out: hHeap=0x1f0000) returned 1 [0199.031] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0199.031] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x237dd8 [0199.031] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0199.031] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230e38 | out: hHeap=0x1f0000) returned 1 [0199.031] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x205210 [0199.031] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x236ed0 [0199.031] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x236ff8 [0199.031] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0199.031] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2375c0 [0199.031] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236ff8 | out: hHeap=0x1f0000) returned 1 [0199.031] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0199.031] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0199.031] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216830 | out: hHeap=0x1f0000) returned 1 [0199.031] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236ed0 | out: hHeap=0x1f0000) returned 1 [0199.031] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205210 | out: hHeap=0x1f0000) returned 1 [0199.031] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210090 | out: hHeap=0x1f0000) returned 1 [0199.031] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0199.032] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x237248 [0199.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237248 | out: hHeap=0x1f0000) returned 1 [0199.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ee8 | out: hHeap=0x1f0000) returned 1 [0199.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0199.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237dd8 | out: hHeap=0x1f0000) returned 1 [0199.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0199.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0199.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0199.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0199.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0199.032] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x236ff8 [0199.032] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x237120 [0199.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236ff8 | out: hHeap=0x1f0000) returned 1 [0199.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237120 | out: hHeap=0x1f0000) returned 1 [0199.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2375c0 | out: hHeap=0x1f0000) returned 1 [0199.033] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0199.033] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25fd40 | out: hHeap=0x1f0000) returned 1 [0199.033] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24e7c0 | out: hHeap=0x1f0000) returned 1 [0199.033] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x230e38 [0199.033] GetLastError () returned 0x0 [0199.033] SetLastError (dwErrCode=0x0) [0199.033] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf70 | out: hHeap=0x1f0000) returned 1 [0199.033] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c5b0 [0199.033] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c580 [0199.034] CreateFileW (lpFileName="C:\\\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\$recycle.bin\\s-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e290, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0199.034] GetFileType (hFile=0x204) returned 0x1 [0199.035] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x23adb0 [0199.035] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e218 | out: lpNewFilePointer=0x0) returned 1 [0199.035] GetLastError () returned 0xb7 [0199.035] SetLastError (dwErrCode=0xb7) [0199.035] GetLastError () returned 0xb7 [0199.035] SetLastError (dwErrCode=0xb7) [0199.035] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e2dc | out: lpNewFilePointer=0x0) returned 1 [0199.035] WriteFile (in: hFile=0x204, lpBuffer=0x23adb0*, nNumberOfBytesToWrite=0x103, lpNumberOfBytesWritten=0x173e340, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesWritten=0x173e340*=0x103, lpOverlapped=0x0) returned 1 [0199.036] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x23adb0 | out: hHeap=0x1f0000) returned 1 [0199.036] CloseHandle (hObject=0x204) returned 1 [0199.037] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c580 | out: hHeap=0x1f0000) returned 1 [0199.037] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5b0 | out: hHeap=0x1f0000) returned 1 [0199.037] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229528 | out: hHeap=0x1f0000) returned 1 [0199.037] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b90 | out: hHeap=0x1f0000) returned 1 [0199.037] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20bc38 | out: hHeap=0x1f0000) returned 1 [0199.038] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205150 | out: hHeap=0x1f0000) returned 1 [0199.038] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a90 | out: hHeap=0x1f0000) returned 1 [0199.038] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210000 | out: hHeap=0x1f0000) returned 1 [0199.038] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2397c8 | out: hHeap=0x1f0000) returned 1 [0199.038] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230e38 | out: hHeap=0x1f0000) returned 1 [0199.038] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20bd00 | out: hHeap=0x1f0000) returned 1 [0199.038] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0199.038] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x258298 | out: hHeap=0x1f0000) returned 1 [0199.038] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25fe48 | out: hHeap=0x1f0000) returned 1 [0199.038] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0199.038] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c6b0 | out: hHeap=0x1f0000) returned 1 [0199.038] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff70 | out: hHeap=0x1f0000) returned 1 [0199.038] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b318 | out: hHeap=0x1f0000) returned 1 [0199.038] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5a0 | out: hHeap=0x1f0000) returned 1 [0199.038] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff28 | out: hHeap=0x1f0000) returned 1 [0199.038] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b5e8 | out: hHeap=0x1f0000) returned 1 [0199.038] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c610 | out: hHeap=0x1f0000) returned 1 [0199.038] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234c98 | out: hHeap=0x1f0000) returned 1 [0199.039] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b340 | out: hHeap=0x1f0000) returned 1 [0199.039] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c98 | out: hHeap=0x1f0000) returned 1 [0199.039] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216050 | out: hHeap=0x1f0000) returned 1 [0199.039] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b778 | out: hHeap=0x1f0000) returned 1 [0199.039] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0199.039] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215e10 | out: hHeap=0x1f0000) returned 1 [0199.039] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5e0 | out: hHeap=0x1f0000) returned 1 [0199.039] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c640 | out: hHeap=0x1f0000) returned 1 [0199.039] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x240de0 | out: hHeap=0x1f0000) returned 1 [0199.039] CloseHandle (hObject=0x200) returned 1 [0199.039] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5c0 | out: hHeap=0x1f0000) returned 1 [0199.039] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c620 | out: hHeap=0x1f0000) returned 1 [0199.039] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20dd00 | out: hHeap=0x1f0000) returned 1 [0199.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24ca08 | out: hHeap=0x1f0000) returned 1 [0199.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210078 | out: hHeap=0x1f0000) returned 1 [0199.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205130 | out: hHeap=0x1f0000) returned 1 [0199.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x23ddc8 | out: hHeap=0x1f0000) returned 1 [0199.040] CloseHandle (hObject=0x218) returned 1 [0199.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c6a0 | out: hHeap=0x1f0000) returned 1 [0199.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c680 | out: hHeap=0x1f0000) returned 1 [0199.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d368 | out: hHeap=0x1f0000) returned 1 [0199.041] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2051f0 | out: hHeap=0x1f0000) returned 1 [0199.041] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f5d8 | out: hHeap=0x1f0000) returned 1 [0199.041] CloseHandle (hObject=0x1e0) returned 1 [0199.041] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c700 | out: hHeap=0x1f0000) returned 1 [0199.041] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c660 | out: hHeap=0x1f0000) returned 1 [0199.041] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239be0 | out: hHeap=0x1f0000) returned 1 [0199.041] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206470 | out: hHeap=0x1f0000) returned 1 [0199.042] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206460 | out: hHeap=0x1f0000) returned 1 [0199.042] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206450 | out: hHeap=0x1f0000) returned 1 [0199.042] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2064e0 | out: hHeap=0x1f0000) returned 1 [0199.042] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235db8 | out: hHeap=0x1f0000) returned 1 [0199.042] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x251068 | out: hHeap=0x1f0000) returned 1 [0199.042] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260188 | out: hHeap=0x1f0000) returned 1 [0199.042] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206658 | out: hHeap=0x1f0000) returned 1 [0199.042] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffa0 | out: hHeap=0x1f0000) returned 1 [0199.042] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20fef8 | out: hHeap=0x1f0000) returned 1 [0199.042] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20e1f0 | out: hHeap=0x1f0000) returned 1 [0199.042] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24fd60 | out: hHeap=0x1f0000) returned 1 [0199.042] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0199.042] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0199.042] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a818 | out: hHeap=0x1f0000) returned 1 [0199.042] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f1b8 | out: hHeap=0x1f0000) returned 1 [0199.042] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215d80 | out: hHeap=0x1f0000) returned 1 [0199.042] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b750 | out: hHeap=0x1f0000) returned 1 [0199.042] DeleteFileW (lpFileName="C:\\\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini")) returned 1 [0199.044] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcb9438a8, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xcb9438a8, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x227f10, dwReserved1=0x260024, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0199.044] FindClose (in: hFindFile=0x24eb00 | out: hFindFile=0x24eb00) returned 1 [0199.044] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0199.044] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f020 | out: hHeap=0x1f0000) returned 1 [0199.044] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b638 | out: hHeap=0x1f0000) returned 1 [0199.045] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215d38 | out: hHeap=0x1f0000) returned 1 [0199.045] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a138 | out: hHeap=0x1f0000) returned 1 [0199.045] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216008 | out: hHeap=0x1f0000) returned 1 [0199.045] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2299c8 | out: hHeap=0x1f0000) returned 1 [0199.045] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0199.045] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d9d0 | out: hHeap=0x1f0000) returned 1 [0199.046] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b7c8 | out: hHeap=0x1f0000) returned 1 [0199.046] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215af8 | out: hHeap=0x1f0000) returned 1 [0199.046] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216008 [0199.046] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238050 [0199.046] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22de98 [0199.046] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215af8 [0199.046] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\*", lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xbfe75145, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xbfe75145, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24eb80 [0199.046] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0199.046] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x2262d8 [0199.046] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0199.046] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215af8 | out: hHeap=0x1f0000) returned 1 [0199.046] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0199.046] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xbfe75145, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xbfe75145, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.046] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2f0 [0199.047] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x2260f8 [0199.047] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0199.047] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2262d8 | out: hHeap=0x1f0000) returned 1 [0199.047] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0199.047] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0199.047] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1025", cAlternateFileName="")) returned 1 [0199.047] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0199.047] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x2260a8 [0199.047] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0199.047] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2260f8 | out: hHeap=0x1f0000) returned 1 [0199.047] lstrcmpW (lpString1="1025", lpString2=".") returned 1 [0199.047] lstrcmpW (lpString1="1025", lpString2="..") returned 1 [0199.047] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x205130 [0199.047] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215af8 [0199.047] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1028", cAlternateFileName="")) returned 1 [0199.047] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0199.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225ec8 [0199.048] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0199.048] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2260a8 | out: hHeap=0x1f0000) returned 1 [0199.048] lstrcmpW (lpString1="1028", lpString2=".") returned 1 [0199.048] lstrcmpW (lpString1="1028", lpString2="..") returned 1 [0199.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0199.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215d38 [0199.048] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205130 | out: hHeap=0x1f0000) returned 1 [0199.048] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1029", cAlternateFileName="")) returned 1 [0199.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf38 [0199.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x226148 [0199.048] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf38 | out: hHeap=0x1f0000) returned 1 [0199.048] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225ec8 | out: hHeap=0x1f0000) returned 1 [0199.048] lstrcmpW (lpString1="1029", lpString2=".") returned 1 [0199.048] lstrcmpW (lpString1="1029", lpString2="..") returned 1 [0199.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x48) returned 0x2260a8 [0199.049] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215d80 [0199.049] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0199.049] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1030", cAlternateFileName="")) returned 1 [0199.049] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf70 [0199.049] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x226238 [0199.049] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf70 | out: hHeap=0x1f0000) returned 1 [0199.049] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226148 | out: hHeap=0x1f0000) returned 1 [0199.049] lstrcmpW (lpString1="1030", lpString2=".") returned 1 [0199.049] lstrcmpW (lpString1="1030", lpString2="..") returned 1 [0199.049] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c98 [0199.049] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216050 [0199.049] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2260a8 | out: hHeap=0x1f0000) returned 1 [0199.049] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1031", cAlternateFileName="")) returned 1 [0199.049] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2f0 [0199.049] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225ec8 [0199.049] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0199.049] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226238 | out: hHeap=0x1f0000) returned 1 [0199.049] lstrcmpW (lpString1="1031", lpString2=".") returned 1 [0199.050] lstrcmpW (lpString1="1031", lpString2="..") returned 1 [0199.050] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0199.050] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215e10 [0199.050] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c98 | out: hHeap=0x1f0000) returned 1 [0199.050] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1032", cAlternateFileName="")) returned 1 [0199.050] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0199.050] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225dd8 [0199.050] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0199.050] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225ec8 | out: hHeap=0x1f0000) returned 1 [0199.050] lstrcmpW (lpString1="1032", lpString2=".") returned 1 [0199.050] lstrcmpW (lpString1="1032", lpString2="..") returned 1 [0199.050] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216758 [0199.050] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0199.050] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0199.050] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x226238 [0199.051] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0199.051] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225dd8 | out: hHeap=0x1f0000) returned 1 [0199.051] lstrcmpW (lpString1="1033", lpString2=".") returned 1 [0199.051] lstrcmpW (lpString1="1033", lpString2="..") returned 1 [0199.051] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd8) returned 0x229528 [0199.051] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2163f8 [0199.051] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0199.051] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1035", cAlternateFileName="")) returned 1 [0199.051] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf70 [0199.051] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225d88 [0199.051] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf70 | out: hHeap=0x1f0000) returned 1 [0199.051] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226238 | out: hHeap=0x1f0000) returned 1 [0199.051] lstrcmpW (lpString1="1035", lpString2=".") returned 1 [0199.051] lstrcmpW (lpString1="1035", lpString2="..") returned 1 [0199.051] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2163b0 [0199.051] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1036", cAlternateFileName="")) returned 1 [0199.051] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0199.051] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x2261e8 [0199.051] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0199.051] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225d88 | out: hHeap=0x1f0000) returned 1 [0199.052] lstrcmpW (lpString1="1036", lpString2=".") returned 1 [0199.052] lstrcmpW (lpString1="1036", lpString2="..") returned 1 [0199.052] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2164d0 [0199.052] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1037", cAlternateFileName="")) returned 1 [0199.052] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0199.052] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x2260a8 [0199.052] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0199.052] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2261e8 | out: hHeap=0x1f0000) returned 1 [0199.052] lstrcmpW (lpString1="1037", lpString2=".") returned 1 [0199.052] lstrcmpW (lpString1="1037", lpString2="..") returned 1 [0199.052] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x138) returned 0x260188 [0199.052] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216638 [0199.052] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229528 | out: hHeap=0x1f0000) returned 1 [0199.052] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1038", cAlternateFileName="")) returned 1 [0199.052] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0199.052] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x226008 [0199.052] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0199.053] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2260a8 | out: hHeap=0x1f0000) returned 1 [0199.053] lstrcmpW (lpString1="1038", lpString2=".") returned 1 [0199.053] lstrcmpW (lpString1="1038", lpString2="..") returned 1 [0199.053] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216368 [0199.053] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1040", cAlternateFileName="")) returned 1 [0199.053] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0199.053] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x2261e8 [0199.053] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0199.053] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226008 | out: hHeap=0x1f0000) returned 1 [0199.053] lstrcmpW (lpString1="1040", lpString2=".") returned 1 [0199.053] lstrcmpW (lpString1="1040", lpString2="..") returned 1 [0199.053] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216440 [0199.053] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1041", cAlternateFileName="")) returned 1 [0199.054] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0199.054] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225ce8 [0199.054] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0199.054] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2261e8 | out: hHeap=0x1f0000) returned 1 [0199.054] lstrcmpW (lpString1="1041", lpString2=".") returned 1 [0199.054] lstrcmpW (lpString1="1041", lpString2="..") returned 1 [0199.054] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2162d8 [0199.054] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1042", cAlternateFileName="")) returned 1 [0199.054] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2f0 [0199.054] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225ec8 [0199.054] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0199.054] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225ce8 | out: hHeap=0x1f0000) returned 1 [0199.054] lstrcmpW (lpString1="1042", lpString2=".") returned 1 [0199.054] lstrcmpW (lpString1="1042", lpString2="..") returned 1 [0199.054] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c8) returned 0x235db8 [0199.054] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216488 [0199.055] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260188 | out: hHeap=0x1f0000) returned 1 [0199.055] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1043", cAlternateFileName="")) returned 1 [0199.055] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0199.055] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225bf8 [0199.055] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0199.055] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225ec8 | out: hHeap=0x1f0000) returned 1 [0199.055] lstrcmpW (lpString1="1043", lpString2=".") returned 1 [0199.055] lstrcmpW (lpString1="1043", lpString2="..") returned 1 [0199.055] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2167a0 [0199.055] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1044", cAlternateFileName="")) returned 1 [0199.055] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf38 [0199.055] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x226058 [0199.055] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf38 | out: hHeap=0x1f0000) returned 1 [0199.055] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225bf8 | out: hHeap=0x1f0000) returned 1 [0199.055] lstrcmpW (lpString1="1044", lpString2=".") returned 1 [0199.055] lstrcmpW (lpString1="1044", lpString2="..") returned 1 [0199.055] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216290 [0199.056] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1045", cAlternateFileName="")) returned 1 [0199.056] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2f0 [0199.056] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225f68 [0199.056] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0199.056] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226058 | out: hHeap=0x1f0000) returned 1 [0199.056] lstrcmpW (lpString1="1045", lpString2=".") returned 1 [0199.056] lstrcmpW (lpString1="1045", lpString2="..") returned 1 [0199.056] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216518 [0199.056] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1046", cAlternateFileName="")) returned 1 [0199.056] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0199.056] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x226288 [0199.056] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0199.056] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225f68 | out: hHeap=0x1f0000) returned 1 [0199.056] lstrcmpW (lpString1="1046", lpString2=".") returned 1 [0199.056] lstrcmpW (lpString1="1046", lpString2="..") returned 1 [0199.056] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216878 [0199.056] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1049", cAlternateFileName="")) returned 1 [0199.056] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0199.057] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225c48 [0199.057] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0199.057] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226288 | out: hHeap=0x1f0000) returned 1 [0199.057] lstrcmpW (lpString1="1049", lpString2=".") returned 1 [0199.057] lstrcmpW (lpString1="1049", lpString2="..") returned 1 [0199.057] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216560 [0199.057] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1053", cAlternateFileName="")) returned 1 [0199.057] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0199.057] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x226148 [0199.057] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0199.057] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225c48 | out: hHeap=0x1f0000) returned 1 [0199.057] lstrcmpW (lpString1="1053", lpString2=".") returned 1 [0199.057] lstrcmpW (lpString1="1053", lpString2="..") returned 1 [0199.057] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2a0) returned 0x20d5e0 [0199.057] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216680 [0199.058] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235db8 | out: hHeap=0x1f0000) returned 1 [0199.058] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1055", cAlternateFileName="")) returned 1 [0199.058] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0199.058] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x226238 [0199.058] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0199.058] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226148 | out: hHeap=0x1f0000) returned 1 [0199.058] lstrcmpW (lpString1="1055", lpString2=".") returned 1 [0199.058] lstrcmpW (lpString1="1055", lpString2="..") returned 1 [0199.058] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2165a8 [0199.058] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2052", cAlternateFileName="")) returned 1 [0199.058] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2f0 [0199.058] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x226058 [0199.058] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0199.058] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226238 | out: hHeap=0x1f0000) returned 1 [0199.058] lstrcmpW (lpString1="2052", lpString2=".") returned 1 [0199.058] lstrcmpW (lpString1="2052", lpString2="..") returned 1 [0199.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2165f0 [0199.059] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2070", cAlternateFileName="")) returned 1 [0199.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2f0 [0199.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225f68 [0199.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0199.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226058 | out: hHeap=0x1f0000) returned 1 [0199.059] lstrcmpW (lpString1="2070", lpString2=".") returned 1 [0199.059] lstrcmpW (lpString1="2070", lpString2="..") returned 1 [0199.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216710 [0199.059] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3076", cAlternateFileName="")) returned 1 [0199.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2f0 [0199.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x226288 [0199.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0199.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225f68 | out: hHeap=0x1f0000) returned 1 [0199.059] lstrcmpW (lpString1="3076", lpString2=".") returned 1 [0199.059] lstrcmpW (lpString1="3076", lpString2="..") returned 1 [0199.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2167e8 [0199.059] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3082", cAlternateFileName="")) returned 1 [0199.060] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0199.060] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225ce8 [0199.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0199.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226288 | out: hHeap=0x1f0000) returned 1 [0199.060] lstrcmpW (lpString1="3082", lpString2=".") returned 1 [0199.060] lstrcmpW (lpString1="3082", lpString2="..") returned 1 [0199.060] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216830 [0199.060] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Client", cAlternateFileName="")) returned 1 [0199.060] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0199.060] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x2260f8 [0199.405] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0199.405] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225ce8 | out: hHeap=0x1f0000) returned 1 [0199.405] lstrcmpW (lpString1="Client", lpString2=".") returned 1 [0199.405] lstrcmpW (lpString1="Client", lpString2="..") returned 1 [0199.405] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216170 [0199.405] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbc518d00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbc518d00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbc518d00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x3ef6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DHtmlHeader.html", cAlternateFileName="DHTMLH~1.HTM")) returned 1 [0199.405] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0199.405] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf70 [0199.405] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239560 [0199.405] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf70 | out: hHeap=0x1f0000) returned 1 [0199.405] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2260f8 | out: hHeap=0x1f0000) returned 1 [0199.405] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0199.406] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\DHtmlHeader.html" (normalized: "c:\\588bce7c90097ed212\\dhtmlheader.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0199.406] GetFileType (hFile=0x1c0) returned 0x1 [0199.406] CloseHandle (hObject=0x1c0) returned 1 [0199.406] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2399d8 [0199.407] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\DHtmlHeader.html" (normalized: "c:\\588bce7c90097ed212\\dhtmlheader.html"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbc518d00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbc518d00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbc518d00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x3ef6)) returned 1 [0199.407] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2399d8 | out: hHeap=0x1f0000) returned 1 [0199.407] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239928 [0199.407] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\DHtmlHeader.html" (normalized: "c:\\588bce7c90097ed212\\dhtmlheader.html"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbc518d00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbc518d00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbc518d00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x3ef6)) returned 1 [0199.407] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239928 | out: hHeap=0x1f0000) returned 1 [0199.407] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239610 [0199.407] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239610 | out: hHeap=0x1f0000) returned 1 [0199.407] GetLastError () returned 0x0 [0199.407] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0199.407] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215c18 [0199.407] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d9d0 [0199.408] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239928 [0199.408] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2f0 [0199.408] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0199.408] CryptAcquireContextA (in: phProv=0x173e7b0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e7b0*=0x22a578) returned 1 [0199.410] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238140 | out: pbBuffer=0x238140) returned 1 [0199.411] CryptReleaseContext (hProv=0x22a578, dwFlags=0x0) returned 1 [0199.411] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0199.411] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x258298 [0199.411] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x229528 [0199.411] QueryPerformanceCounter (in: lpPerformanceCount=0x173e744 | out: lpPerformanceCount=0x173e744*=35677969554) returned 1 [0199.411] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e784 | out: lpSystemTimeAsFileTime=0x173e784) [0199.411] QueryPerformanceCounter (in: lpPerformanceCount=0x173e744 | out: lpPerformanceCount=0x173e744*=35677992271) returned 1 [0199.411] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e784 | out: lpSystemTimeAsFileTime=0x173e784) [0199.411] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x21cf00 [0199.411] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x24fd60 [0199.411] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x217038 [0199.411] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x20e1f0 [0199.411] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210078 [0199.412] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206838 [0199.412] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210090 [0199.412] GetLastError () returned 0x0 [0199.412] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c98 [0199.412] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a770 [0199.412] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c98 | out: hHeap=0x1f0000) returned 1 [0199.412] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xee) returned 0x260188 [0199.412] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a770 | out: hHeap=0x1f0000) returned 1 [0199.412] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c610 [0199.412] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c5c0 [0199.413] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\DHtmlHeader.html.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\dhtmlheader.html.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e650, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0199.414] GetFileType (hFile=0x1c0) returned 0x1 [0199.414] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c580 [0199.414] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c660 [0199.415] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\DHtmlHeader.html" (normalized: "c:\\588bce7c90097ed212\\dhtmlheader.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e680, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0199.415] GetFileType (hFile=0x1e0) returned 0x1 [0199.415] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cd0 [0199.415] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cf0 [0199.415] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x239be0 [0199.416] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c680 [0199.416] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c5b0 [0199.416] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\DHtmlHeader.html.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\dhtmlheader.html.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e5cc, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0199.416] GetFileType (hFile=0x218) returned 0x1 [0199.416] GetLastError () returned 0xb7 [0199.416] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe4) returned 0x24f5d8 [0199.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e70 [0199.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c70 [0199.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0199.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x22d368 [0199.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c590 [0199.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c700 [0199.417] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\DHtmlHeader.html.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\dhtmlheader.html.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e5cc, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0199.417] GetFileType (hFile=0x200) returned 0x1 [0199.418] GetLastError () returned 0xb7 [0199.418] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e30 [0199.418] GetLastError () returned 0xb7 [0199.418] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e90 [0199.418] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d10 [0199.418] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ef0 [0199.418] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb8) returned 0x20dd00 [0199.418] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c5a0 [0199.418] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c5f0 [0199.418] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\DHtmlHeader.html" (normalized: "c:\\588bce7c90097ed212\\dhtmlheader.html"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e5c4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0199.419] GetFileType (hFile=0x204) returned 0x1 [0199.419] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x23adb0 [0199.419] ReadFile (in: hFile=0x204, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e520, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x173e520*=0x1000, lpOverlapped=0x0) returned 1 [0199.431] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24b9e8 [0199.431] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x243df8 [0199.432] GetLastError () returned 0x0 [0199.432] ReadFile (in: hFile=0x204, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e5b0, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x173e5b0*=0x1000, lpOverlapped=0x0) returned 1 [0199.449] WriteFile (in: hFile=0x200, lpBuffer=0x243df8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x173e3f4, lpOverlapped=0x0 | out: lpBuffer=0x243df8*, lpNumberOfBytesWritten=0x173e3f4*=0x1000, lpOverlapped=0x0) returned 1 [0199.450] GetLastError () returned 0x0 [0199.450] ReadFile (in: hFile=0x204, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e5b0, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x173e5b0*=0x1000, lpOverlapped=0x0) returned 1 [0199.451] WriteFile (in: hFile=0x200, lpBuffer=0x243df8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x173e3f4, lpOverlapped=0x0 | out: lpBuffer=0x243df8*, lpNumberOfBytesWritten=0x173e3f4*=0x1000, lpOverlapped=0x0) returned 1 [0199.451] GetLastError () returned 0x0 [0199.452] ReadFile (in: hFile=0x204, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e5b0, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x173e5b0*=0xef6, lpOverlapped=0x0) returned 1 [0199.452] WriteFile (in: hFile=0x200, lpBuffer=0x243df8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x173e3f4, lpOverlapped=0x0 | out: lpBuffer=0x243df8*, lpNumberOfBytesWritten=0x173e3f4*=0x1000, lpOverlapped=0x0) returned 1 [0199.452] GetLastError () returned 0x0 [0199.453] ReadFile (in: hFile=0x204, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e5b0, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x173e5b0*=0x0, lpOverlapped=0x0) returned 1 [0199.453] GetLastError () returned 0x0 [0199.453] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2100a8 [0199.453] GetLastError () returned 0x0 [0199.453] WriteFile (in: hFile=0x200, lpBuffer=0x243df8*, nNumberOfBytesToWrite=0xf06, lpNumberOfBytesWritten=0x173e4a4, lpOverlapped=0x0 | out: lpBuffer=0x243df8*, lpNumberOfBytesWritten=0x173e4a4*=0xf06, lpOverlapped=0x0) returned 1 [0199.454] GetLastError () returned 0x0 [0199.454] CloseHandle (hObject=0x1c0) returned 1 [0199.463] CloseHandle (hObject=0x1e0) returned 1 [0199.463] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c5e0 [0199.464] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c600 [0199.464] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\DHtmlHeader.html" (normalized: "c:\\588bce7c90097ed212\\dhtmlheader.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e680, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0199.749] GetFileType (hFile=0x1ac) returned 0x1 [0199.750] GetLastError () returned 0xb7 [0199.750] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x245e08 [0199.750] GetLastError () returned 0xb7 [0199.750] WriteFile (in: hFile=0x1ac, lpBuffer=0x173d314*, nNumberOfBytesToWrite=0x1, lpNumberOfBytesWritten=0x173d30c, lpOverlapped=0x0 | out: lpBuffer=0x173d314*, lpNumberOfBytesWritten=0x173d30c*=0x1, lpOverlapped=0x0) returned 1 [0199.752] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x245e08 | out: hHeap=0x1f0000) returned 1 [0199.752] CloseHandle (hObject=0x1ac) returned 1 [0199.752] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\DHtmlHeader.html" (normalized: "c:\\588bce7c90097ed212\\dhtmlheader.html")) returned 0 [0199.753] GetLastError () returned 0x20 [0199.753] GetLastError () returned 0x20 [0199.753] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234a58 [0199.753] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2604c8 [0199.753] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260680 [0199.753] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x234aa0 [0199.753] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c90 [0199.753] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e50 [0199.753] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x21c370 [0199.753] GetLastError () returned 0x20 [0199.753] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x1fef78 [0199.754] GetLastError () returned 0x20 [0199.754] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x1fef78 [0199.754] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a90 [0199.754] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260540 [0199.754] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x25fd40 [0199.754] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c440 [0199.754] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0199.754] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffa0 [0199.754] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c520 [0199.754] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0199.755] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210018 [0199.755] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2605b8 [0199.755] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x230f50 [0199.755] GetLastError () returned 0x20 [0199.755] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x21c4b0 [0199.755] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x21c3a0 [0199.755] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c410 [0199.755] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c3a0 | out: hHeap=0x1f0000) returned 1 [0199.755] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c4c0 [0199.756] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c410 | out: hHeap=0x1f0000) returned 1 [0199.756] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c4b0 | out: hHeap=0x1f0000) returned 1 [0199.756] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c4b0 [0199.756] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210258 [0199.756] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c4b0 | out: hHeap=0x1f0000) returned 1 [0199.756] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101e0 [0199.756] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0199.756] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c4c0 | out: hHeap=0x1f0000) returned 1 [0199.756] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210240 [0199.756] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210258 [0199.756] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210240 | out: hHeap=0x1f0000) returned 1 [0199.757] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210240 [0199.757] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0199.757] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0199.757] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210258 [0199.757] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204ef0 [0199.757] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0199.757] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bd0 [0199.757] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ef0 | out: hHeap=0x1f0000) returned 1 [0199.757] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210240 | out: hHeap=0x1f0000) returned 1 [0199.757] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204dd0 [0199.757] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260748 [0199.757] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204dd0 | out: hHeap=0x1f0000) returned 1 [0199.757] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204c70 [0199.758] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0199.758] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bd0 | out: hHeap=0x1f0000) returned 1 [0199.758] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204c90 [0199.758] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206898 [0199.758] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c90 | out: hHeap=0x1f0000) returned 1 [0199.758] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2605e0 [0199.758] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206898 | out: hHeap=0x1f0000) returned 1 [0199.758] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c70 | out: hHeap=0x1f0000) returned 1 [0199.758] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c530 [0199.758] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101e0 [0199.758] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c530 | out: hHeap=0x1f0000) returned 1 [0199.758] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210240 [0199.758] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0199.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204cd0 [0199.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210240 | out: hHeap=0x1f0000) returned 1 [0199.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206808 [0199.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cd0 | out: hHeap=0x1f0000) returned 1 [0199.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206808 | out: hHeap=0x1f0000) returned 1 [0199.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605e0 | out: hHeap=0x1f0000) returned 1 [0199.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604c8 | out: hHeap=0x1f0000) returned 1 [0199.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0199.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25fd40 | out: hHeap=0x1f0000) returned 1 [0199.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0199.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0199.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604c8 [0199.759] CryptAcquireContextA (in: phProv=0x173e7b0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e7b0*=0x22a2d0) returned 1 [0199.763] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2604c8 | out: pbBuffer=0x2604c8) returned 1 [0199.763] CryptReleaseContext (hProv=0x22a2d0, dwFlags=0x0) returned 1 [0199.763] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604c8 | out: hHeap=0x1f0000) returned 1 [0199.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260540 [0199.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2604c8 [0199.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1ff058 [0199.763] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0199.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0199.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1ff058 | out: hHeap=0x1f0000) returned 1 [0199.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x239a30 [0199.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0199.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x214ea0 [0199.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2605e0 [0199.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x25fd40 [0199.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e30 [0199.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214f70 [0199.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260540 [0199.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x230860 [0199.800] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c4b0 [0199.800] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0199.800] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210240 [0199.800] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c4c0 [0199.800] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0199.800] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210258 [0199.800] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0199.800] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0199.800] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c4c0 | out: hHeap=0x1f0000) returned 1 [0199.800] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210240 | out: hHeap=0x1f0000) returned 1 [0199.800] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0199.800] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c4b0 | out: hHeap=0x1f0000) returned 1 [0199.800] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230860 | out: hHeap=0x1f0000) returned 1 [0199.801] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0199.801] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f70 | out: hHeap=0x1f0000) returned 1 [0199.801] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x1ff058 [0199.801] GetLastError () returned 0x0 [0199.801] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x1ff058 [0199.801] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0199.801] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0199.801] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0199.801] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0199.802] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0199.802] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0199.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x24ea80 [0199.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x230860 [0199.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0199.802] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0199.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0199.802] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0199.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x230968 [0199.803] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0199.803] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0199.803] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x2300c8 [0199.803] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x25a8a8 [0199.803] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x230a70 [0199.803] QueryPerformanceCounter (in: lpPerformanceCount=0x173e300 | out: lpPerformanceCount=0x173e300*=35717210274) returned 1 [0199.803] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e340 | out: lpSystemTimeAsFileTime=0x173e340) [0199.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x21c410 [0199.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260540 [0199.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c10 [0199.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c10 | out: hHeap=0x1f0000) returned 1 [0199.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0199.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260540 [0199.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c90 [0199.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c90 | out: hHeap=0x1f0000) returned 1 [0199.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0199.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c410 | out: hHeap=0x1f0000) returned 1 [0199.805] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0199.805] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x227ee8 [0199.805] GetLastError () returned 0x0 [0199.805] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0199.805] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0199.805] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0199.805] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260540 [0199.805] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2606a8 [0199.805] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0199.805] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0199.805] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260608 [0199.805] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0199.805] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x222ee8 [0199.806] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x237498 [0199.806] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x260ca0 [0199.806] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237498 | out: hHeap=0x1f0000) returned 1 [0199.806] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x238ba8 [0199.806] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ca0 | out: hHeap=0x1f0000) returned 1 [0199.806] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260630 [0199.806] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2606d0 [0199.806] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260630 | out: hHeap=0x1f0000) returned 1 [0199.806] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x237248 [0199.806] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0199.806] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x260ca0 [0199.807] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x238dc8 [0199.807] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238dc8 | out: hHeap=0x1f0000) returned 1 [0199.807] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ca0 | out: hHeap=0x1f0000) returned 1 [0199.807] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ba8 | out: hHeap=0x1f0000) returned 1 [0199.807] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210240 [0199.807] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2348a8 [0199.807] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260630 [0199.807] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2606d0 [0199.807] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260748 [0199.807] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260bf8 [0199.807] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0199.808] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260630 | out: hHeap=0x1f0000) returned 1 [0199.808] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x260ca0 [0199.808] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260630 [0199.808] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2606d0 [0199.808] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260630 | out: hHeap=0x1f0000) returned 1 [0199.808] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2360f0 [0199.808] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0199.808] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206868 [0199.808] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x238ba8 [0199.808] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ba8 | out: hHeap=0x1f0000) returned 1 [0199.809] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206868 | out: hHeap=0x1f0000) returned 1 [0199.809] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0199.809] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x236ed0 [0199.809] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2360f0 | out: hHeap=0x1f0000) returned 1 [0199.809] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ca0 | out: hHeap=0x1f0000) returned 1 [0199.809] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204c70 [0199.809] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x235fc8 [0199.809] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x237cb0 [0199.809] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0199.809] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x237dd8 [0199.810] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237cb0 | out: hHeap=0x1f0000) returned 1 [0199.810] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0199.810] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0199.810] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2348a8 | out: hHeap=0x1f0000) returned 1 [0199.810] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235fc8 | out: hHeap=0x1f0000) returned 1 [0199.810] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c70 | out: hHeap=0x1f0000) returned 1 [0199.810] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210240 | out: hHeap=0x1f0000) returned 1 [0199.810] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237248 | out: hHeap=0x1f0000) returned 1 [0199.811] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x235fc8 [0199.811] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235fc8 | out: hHeap=0x1f0000) returned 1 [0199.811] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ee8 | out: hHeap=0x1f0000) returned 1 [0199.811] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0199.811] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236ed0 | out: hHeap=0x1f0000) returned 1 [0199.811] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0199.811] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0199.811] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0199.812] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0199.812] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0199.812] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x236340 [0199.812] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x236a30 [0199.812] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236340 | out: hHeap=0x1f0000) returned 1 [0199.812] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236a30 | out: hHeap=0x1f0000) returned 1 [0199.812] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237dd8 | out: hHeap=0x1f0000) returned 1 [0199.812] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0199.812] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230968 | out: hHeap=0x1f0000) returned 1 [0199.813] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24ea80 | out: hHeap=0x1f0000) returned 1 [0199.813] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x260ca0 [0199.813] GetLastError () returned 0x0 [0199.813] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\DHtmlHeader.html.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\dhtmlheader.html.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e6b0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0199.813] GetFileType (hFile=0x1ac) returned 0x1 [0199.814] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x245e08 [0199.814] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e638 | out: lpNewFilePointer=0x0) returned 1 [0199.814] GetLastError () returned 0xb7 [0199.814] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e6fc | out: lpNewFilePointer=0x0) returned 1 [0199.815] WriteFile (in: hFile=0x1ac, lpBuffer=0x245e08*, nNumberOfBytesToWrite=0x103, lpNumberOfBytesWritten=0x173e760, lpOverlapped=0x0 | out: lpBuffer=0x245e08*, lpNumberOfBytesWritten=0x173e760*=0x103, lpOverlapped=0x0) returned 1 [0199.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x245e08 | out: hHeap=0x1f0000) returned 1 [0199.815] CloseHandle (hObject=0x1ac) returned 1 [0200.061] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c530 | out: hHeap=0x1f0000) returned 1 [0200.061] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c3a0 | out: hHeap=0x1f0000) returned 1 [0200.061] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230860 | out: hHeap=0x1f0000) returned 1 [0200.061] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25fd40 | out: hHeap=0x1f0000) returned 1 [0200.061] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605e0 | out: hHeap=0x1f0000) returned 1 [0200.061] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e30 | out: hHeap=0x1f0000) returned 1 [0200.061] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214ea0 | out: hHeap=0x1f0000) returned 1 [0200.061] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0200.061] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239a30 | out: hHeap=0x1f0000) returned 1 [0200.062] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ca0 | out: hHeap=0x1f0000) returned 1 [0200.062] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604c8 | out: hHeap=0x1f0000) returned 1 [0200.062] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0200.062] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25a8a8 | out: hHeap=0x1f0000) returned 1 [0200.062] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230a70 | out: hHeap=0x1f0000) returned 1 [0200.062] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0200.062] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c370 | out: hHeap=0x1f0000) returned 1 [0200.062] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210018 | out: hHeap=0x1f0000) returned 1 [0200.062] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0200.063] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c520 | out: hHeap=0x1f0000) returned 1 [0200.063] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffa0 | out: hHeap=0x1f0000) returned 1 [0200.063] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0200.063] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c440 | out: hHeap=0x1f0000) returned 1 [0200.063] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230f50 | out: hHeap=0x1f0000) returned 1 [0200.063] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0200.063] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a90 | out: hHeap=0x1f0000) returned 1 [0200.063] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234aa0 | out: hHeap=0x1f0000) returned 1 [0200.063] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260680 | out: hHeap=0x1f0000) returned 1 [0200.063] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0200.064] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234a58 | out: hHeap=0x1f0000) returned 1 [0200.064] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c600 | out: hHeap=0x1f0000) returned 1 [0200.064] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5e0 | out: hHeap=0x1f0000) returned 1 [0200.064] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x23adb0 | out: hHeap=0x1f0000) returned 1 [0200.064] CloseHandle (hObject=0x204) returned 1 [0200.065] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5f0 | out: hHeap=0x1f0000) returned 1 [0200.065] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5a0 | out: hHeap=0x1f0000) returned 1 [0200.065] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20dd00 | out: hHeap=0x1f0000) returned 1 [0200.065] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24b9e8 | out: hHeap=0x1f0000) returned 1 [0200.065] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2100a8 | out: hHeap=0x1f0000) returned 1 [0200.065] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e90 | out: hHeap=0x1f0000) returned 1 [0200.065] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x243df8 | out: hHeap=0x1f0000) returned 1 [0200.065] CloseHandle (hObject=0x200) returned 1 [0200.066] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c700 | out: hHeap=0x1f0000) returned 1 [0200.066] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c590 | out: hHeap=0x1f0000) returned 1 [0200.066] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d368 | out: hHeap=0x1f0000) returned 1 [0200.066] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e70 | out: hHeap=0x1f0000) returned 1 [0200.066] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f5d8 | out: hHeap=0x1f0000) returned 1 [0200.067] CloseHandle (hObject=0x218) returned 1 [0200.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5b0 | out: hHeap=0x1f0000) returned 1 [0200.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c680 | out: hHeap=0x1f0000) returned 1 [0200.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239be0 | out: hHeap=0x1f0000) returned 1 [0200.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c660 | out: hHeap=0x1f0000) returned 1 [0200.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c580 | out: hHeap=0x1f0000) returned 1 [0200.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5c0 | out: hHeap=0x1f0000) returned 1 [0200.068] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c610 | out: hHeap=0x1f0000) returned 1 [0200.068] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260188 | out: hHeap=0x1f0000) returned 1 [0200.068] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24fd60 | out: hHeap=0x1f0000) returned 1 [0200.068] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0200.068] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206838 | out: hHeap=0x1f0000) returned 1 [0200.068] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210090 | out: hHeap=0x1f0000) returned 1 [0200.068] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210078 | out: hHeap=0x1f0000) returned 1 [0200.068] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20e1f0 | out: hHeap=0x1f0000) returned 1 [0200.068] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x258298 | out: hHeap=0x1f0000) returned 1 [0200.068] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229528 | out: hHeap=0x1f0000) returned 1 [0200.068] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0200.069] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239928 | out: hHeap=0x1f0000) returned 1 [0200.069] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d9d0 | out: hHeap=0x1f0000) returned 1 [0200.069] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215c18 | out: hHeap=0x1f0000) returned 1 [0200.069] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0200.069] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\DHtmlHeader.html" (normalized: "c:\\588bce7c90097ed212\\dhtmlheader.html")) returned 1 [0200.071] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x159d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayIcon.ico", cAlternateFileName="DISPLA~1.ICO")) returned 1 [0200.071] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604c8 [0200.071] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282d8 [0200.071] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239928 [0200.071] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282d8 | out: hHeap=0x1f0000) returned 1 [0200.071] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239560 | out: hHeap=0x1f0000) returned 1 [0200.071] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604c8 | out: hHeap=0x1f0000) returned 1 [0200.072] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\DisplayIcon.ico" (normalized: "c:\\588bce7c90097ed212\\displayicon.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0200.072] GetFileType (hFile=0x218) returned 0x1 [0200.072] CloseHandle (hObject=0x218) returned 1 [0200.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2397c8 [0200.073] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\DisplayIcon.ico" (normalized: "c:\\588bce7c90097ed212\\displayicon.ico"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x159d5)) returned 1 [0200.073] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2397c8 | out: hHeap=0x1f0000) returned 1 [0200.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2397c8 [0200.073] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\DisplayIcon.ico" (normalized: "c:\\588bce7c90097ed212\\displayicon.ico"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x159d5)) returned 1 [0200.073] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2397c8 | out: hHeap=0x1f0000) returned 1 [0200.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239b38 [0200.073] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239b38 | out: hHeap=0x1f0000) returned 1 [0200.074] GetLastError () returned 0x0 [0200.074] CryptAcquireContextA (in: phProv=0x173e7b0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e7b0*=0x229e90) returned 1 [0200.078] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x260590 | out: pbBuffer=0x260590) returned 1 [0200.078] CryptReleaseContext (hProv=0x229e90, dwFlags=0x0) returned 1 [0200.079] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0200.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x258298 [0200.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x229528 [0200.079] QueryPerformanceCounter (in: lpPerformanceCount=0x173e744 | out: lpPerformanceCount=0x173e744*=35744777093) returned 1 [0200.079] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e784 | out: lpSystemTimeAsFileTime=0x173e784) [0200.079] QueryPerformanceCounter (in: lpPerformanceCount=0x173e744 | out: lpPerformanceCount=0x173e744*=35744806220) returned 1 [0200.079] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e784 | out: lpSystemTimeAsFileTime=0x173e784) [0200.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x2282d8 [0200.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x24fd60 [0200.080] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x217038 [0200.080] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x2356d0 [0200.080] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20fef8 [0200.080] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206898 [0200.080] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff28 [0200.080] GetLastError () returned 0x0 [0200.080] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\DisplayIcon.ico.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\displayicon.ico.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e650, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0200.081] GetFileType (hFile=0x218) returned 0x1 [0200.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c6f0 [0200.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c660 [0200.082] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\DisplayIcon.ico" (normalized: "c:\\588bce7c90097ed212\\displayicon.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e680, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0200.082] GetFileType (hFile=0x200) returned 0x1 [0200.083] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204df0 [0200.083] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c10 [0200.083] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x239be0 [0200.083] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c670 [0200.083] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c590 [0200.084] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\DisplayIcon.ico.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\displayicon.ico.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e5cc, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0200.084] GetFileType (hFile=0x204) returned 0x1 [0200.084] GetLastError () returned 0xb7 [0200.084] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\DisplayIcon.ico.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\displayicon.ico.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e5cc, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0200.084] GetFileType (hFile=0x1ac) returned 0x1 [0200.085] GetLastError () returned 0xb7 [0200.085] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\DisplayIcon.ico" (normalized: "c:\\588bce7c90097ed212\\displayicon.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e5c4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1dc [0200.085] GetFileType (hFile=0x1dc) returned 0x1 [0200.085] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x23bdb8 [0200.085] ReadFile (in: hFile=0x1dc, lpBuffer=0x23bdb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e520, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesRead=0x173e520*=0x1000, lpOverlapped=0x0) returned 1 [0200.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24add0 [0200.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x23ddc8 [0200.090] GetLastError () returned 0x0 [0200.090] ReadFile (in: hFile=0x1dc, lpBuffer=0x23bdb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e5b0, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesRead=0x173e5b0*=0x1000, lpOverlapped=0x0) returned 1 [0200.091] WriteFile (in: hFile=0x1ac, lpBuffer=0x23ddc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x173e3f4, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesWritten=0x173e3f4*=0x1000, lpOverlapped=0x0) returned 1 [0200.092] GetLastError () returned 0x0 [0200.093] ReadFile (in: hFile=0x1dc, lpBuffer=0x23bdb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e5b0, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesRead=0x173e5b0*=0x1000, lpOverlapped=0x0) returned 1 [0200.093] WriteFile (in: hFile=0x1ac, lpBuffer=0x23ddc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x173e3f4, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesWritten=0x173e3f4*=0x1000, lpOverlapped=0x0) returned 1 [0200.093] GetLastError () returned 0x0 [0200.093] ReadFile (in: hFile=0x1dc, lpBuffer=0x23bdb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e5b0, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesRead=0x173e5b0*=0x1000, lpOverlapped=0x0) returned 1 [0200.094] WriteFile (in: hFile=0x1ac, lpBuffer=0x23ddc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x173e3f4, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesWritten=0x173e3f4*=0x1000, lpOverlapped=0x0) returned 1 [0200.094] GetLastError () returned 0x0 [0200.094] ReadFile (in: hFile=0x1dc, lpBuffer=0x23bdb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e5b0, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesRead=0x173e5b0*=0x1000, lpOverlapped=0x0) returned 1 [0200.095] WriteFile (in: hFile=0x1ac, lpBuffer=0x23ddc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x173e3f4, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesWritten=0x173e3f4*=0x1000, lpOverlapped=0x0) returned 1 [0200.095] GetLastError () returned 0x0 [0200.095] ReadFile (in: hFile=0x1dc, lpBuffer=0x23bdb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e5b0, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesRead=0x173e5b0*=0x1000, lpOverlapped=0x0) returned 1 [0200.095] WriteFile (in: hFile=0x1ac, lpBuffer=0x23ddc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x173e3f4, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesWritten=0x173e3f4*=0x1000, lpOverlapped=0x0) returned 1 [0200.096] GetLastError () returned 0x0 [0200.096] ReadFile (in: hFile=0x1dc, lpBuffer=0x23bdb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e5b0, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesRead=0x173e5b0*=0x1000, lpOverlapped=0x0) returned 1 [0200.097] WriteFile (in: hFile=0x1ac, lpBuffer=0x23ddc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x173e3f4, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesWritten=0x173e3f4*=0x1000, lpOverlapped=0x0) returned 1 [0200.097] GetLastError () returned 0x0 [0200.097] ReadFile (in: hFile=0x1dc, lpBuffer=0x23bdb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e5b0, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesRead=0x173e5b0*=0x1000, lpOverlapped=0x0) returned 1 [0200.097] WriteFile (in: hFile=0x1ac, lpBuffer=0x23ddc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x173e3f4, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesWritten=0x173e3f4*=0x1000, lpOverlapped=0x0) returned 1 [0200.098] GetLastError () returned 0x0 [0200.098] ReadFile (in: hFile=0x1dc, lpBuffer=0x23bdb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e5b0, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesRead=0x173e5b0*=0x1000, lpOverlapped=0x0) returned 1 [0200.098] WriteFile (in: hFile=0x1ac, lpBuffer=0x23ddc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x173e3f4, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesWritten=0x173e3f4*=0x1000, lpOverlapped=0x0) returned 1 [0200.098] GetLastError () returned 0x0 [0200.098] ReadFile (in: hFile=0x1dc, lpBuffer=0x23bdb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e5b0, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesRead=0x173e5b0*=0x1000, lpOverlapped=0x0) returned 1 [0200.098] WriteFile (in: hFile=0x1ac, lpBuffer=0x23ddc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x173e3f4, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesWritten=0x173e3f4*=0x1000, lpOverlapped=0x0) returned 1 [0200.099] GetLastError () returned 0x0 [0200.099] ReadFile (in: hFile=0x1dc, lpBuffer=0x23bdb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e5b0, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesRead=0x173e5b0*=0x1000, lpOverlapped=0x0) returned 1 [0200.099] WriteFile (in: hFile=0x1ac, lpBuffer=0x23ddc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x173e3f4, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesWritten=0x173e3f4*=0x1000, lpOverlapped=0x0) returned 1 [0200.099] GetLastError () returned 0x0 [0200.100] ReadFile (in: hFile=0x1dc, lpBuffer=0x23bdb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e5b0, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesRead=0x173e5b0*=0x1000, lpOverlapped=0x0) returned 1 [0200.100] WriteFile (in: hFile=0x1ac, lpBuffer=0x23ddc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x173e3f4, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesWritten=0x173e3f4*=0x1000, lpOverlapped=0x0) returned 1 [0200.100] GetLastError () returned 0x0 [0200.100] ReadFile (in: hFile=0x1dc, lpBuffer=0x23bdb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e5b0, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesRead=0x173e5b0*=0x1000, lpOverlapped=0x0) returned 1 [0200.100] WriteFile (in: hFile=0x1ac, lpBuffer=0x23ddc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x173e3f4, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesWritten=0x173e3f4*=0x1000, lpOverlapped=0x0) returned 1 [0200.101] GetLastError () returned 0x0 [0200.101] ReadFile (in: hFile=0x1dc, lpBuffer=0x23bdb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e5b0, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesRead=0x173e5b0*=0x1000, lpOverlapped=0x0) returned 1 [0200.101] WriteFile (in: hFile=0x1ac, lpBuffer=0x23ddc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x173e3f4, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesWritten=0x173e3f4*=0x1000, lpOverlapped=0x0) returned 1 [0200.101] GetLastError () returned 0x0 [0200.101] ReadFile (in: hFile=0x1dc, lpBuffer=0x23bdb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e5b0, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesRead=0x173e5b0*=0x1000, lpOverlapped=0x0) returned 1 [0200.102] WriteFile (in: hFile=0x1ac, lpBuffer=0x23ddc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x173e3f4, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesWritten=0x173e3f4*=0x1000, lpOverlapped=0x0) returned 1 [0200.102] GetLastError () returned 0x0 [0200.102] ReadFile (in: hFile=0x1dc, lpBuffer=0x23bdb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e5b0, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesRead=0x173e5b0*=0x1000, lpOverlapped=0x0) returned 1 [0200.102] WriteFile (in: hFile=0x1ac, lpBuffer=0x23ddc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x173e3f4, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesWritten=0x173e3f4*=0x1000, lpOverlapped=0x0) returned 1 [0200.103] GetLastError () returned 0x0 [0200.103] ReadFile (in: hFile=0x1dc, lpBuffer=0x23bdb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e5b0, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesRead=0x173e5b0*=0x1000, lpOverlapped=0x0) returned 1 [0200.103] WriteFile (in: hFile=0x1ac, lpBuffer=0x23ddc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x173e3f4, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesWritten=0x173e3f4*=0x1000, lpOverlapped=0x0) returned 1 [0200.103] GetLastError () returned 0x0 [0200.103] ReadFile (in: hFile=0x1dc, lpBuffer=0x23bdb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e5b0, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesRead=0x173e5b0*=0x1000, lpOverlapped=0x0) returned 1 [0200.104] WriteFile (in: hFile=0x1ac, lpBuffer=0x23ddc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x173e3f4, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesWritten=0x173e3f4*=0x1000, lpOverlapped=0x0) returned 1 [0200.104] GetLastError () returned 0x0 [0200.104] ReadFile (in: hFile=0x1dc, lpBuffer=0x23bdb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e5b0, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesRead=0x173e5b0*=0x1000, lpOverlapped=0x0) returned 1 [0200.104] WriteFile (in: hFile=0x1ac, lpBuffer=0x23ddc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x173e3f4, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesWritten=0x173e3f4*=0x1000, lpOverlapped=0x0) returned 1 [0200.105] GetLastError () returned 0x0 [0200.105] ReadFile (in: hFile=0x1dc, lpBuffer=0x23bdb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e5b0, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesRead=0x173e5b0*=0x1000, lpOverlapped=0x0) returned 1 [0200.105] WriteFile (in: hFile=0x1ac, lpBuffer=0x23ddc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x173e3f4, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesWritten=0x173e3f4*=0x1000, lpOverlapped=0x0) returned 1 [0200.105] GetLastError () returned 0x0 [0200.105] ReadFile (in: hFile=0x1dc, lpBuffer=0x23bdb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e5b0, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesRead=0x173e5b0*=0x1000, lpOverlapped=0x0) returned 1 [0200.105] WriteFile (in: hFile=0x1ac, lpBuffer=0x23ddc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x173e3f4, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesWritten=0x173e3f4*=0x1000, lpOverlapped=0x0) returned 1 [0200.106] GetLastError () returned 0x0 [0200.106] ReadFile (in: hFile=0x1dc, lpBuffer=0x23bdb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e5b0, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesRead=0x173e5b0*=0x9d5, lpOverlapped=0x0) returned 1 [0200.106] WriteFile (in: hFile=0x1ac, lpBuffer=0x23ddc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x173e3f4, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesWritten=0x173e3f4*=0x1000, lpOverlapped=0x0) returned 1 [0200.106] GetLastError () returned 0x0 [0200.107] ReadFile (in: hFile=0x1dc, lpBuffer=0x23bdb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e5b0, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesRead=0x173e5b0*=0x0, lpOverlapped=0x0) returned 1 [0200.107] GetLastError () returned 0x0 [0200.107] WriteFile (in: hFile=0x1ac, lpBuffer=0x23ddc8*, nNumberOfBytesToWrite=0x9e5, lpNumberOfBytesWritten=0x173e4a4, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesWritten=0x173e4a4*=0x9e5, lpOverlapped=0x0) returned 1 [0200.300] GetLastError () returned 0x0 [0200.300] CloseHandle (hObject=0x218) returned 1 [0200.312] CloseHandle (hObject=0x200) returned 1 [0200.313] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c5f0 [0200.313] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c700 [0200.501] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\DisplayIcon.ico" (normalized: "c:\\588bce7c90097ed212\\displayicon.ico"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e680, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0200.503] GetFileType (hFile=0x1e0) returned 0x1 [0200.503] GetLastError () returned 0xb7 [0200.503] WriteFile (in: hFile=0x1e0, lpBuffer=0x173d314*, nNumberOfBytesToWrite=0x1, lpNumberOfBytesWritten=0x173d30c, lpOverlapped=0x0 | out: lpBuffer=0x173d314*, lpNumberOfBytesWritten=0x173d30c*=0x1, lpOverlapped=0x0) returned 1 [0200.505] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239da8 | out: hHeap=0x1f0000) returned 1 [0200.505] CloseHandle (hObject=0x1e0) returned 1 [0200.505] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\DisplayIcon.ico" (normalized: "c:\\588bce7c90097ed212\\displayicon.ico")) returned 0 [0200.506] GetLastError () returned 0x20 [0200.506] GetLastError () returned 0x20 [0200.506] CryptAcquireContextA (in: phProv=0x173e7b0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e7b0*=0x22a248) returned 1 [0200.508] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238078 | out: pbBuffer=0x238078) returned 1 [0200.508] CryptReleaseContext (hProv=0x22a248, dwFlags=0x0) returned 1 [0200.508] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0200.508] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238000 [0200.508] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238168 [0200.508] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0200.508] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0200.508] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0200.508] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0200.508] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x239a30 [0200.508] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210078 [0200.508] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x214dd0 [0200.508] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2382a8 [0200.508] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x224a88 [0200.508] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c70 [0200.508] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x215040 [0200.508] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2383e8 [0200.508] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x238d90 [0200.508] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c6d0 [0200.508] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238438 [0200.509] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210090 [0200.509] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c610 [0200.509] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0200.509] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210018 [0200.509] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210018 | out: hHeap=0x1f0000) returned 1 [0200.509] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0200.509] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c610 | out: hHeap=0x1f0000) returned 1 [0200.509] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210090 | out: hHeap=0x1f0000) returned 1 [0200.509] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238438 | out: hHeap=0x1f0000) returned 1 [0200.509] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c6d0 | out: hHeap=0x1f0000) returned 1 [0200.509] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238d90 | out: hHeap=0x1f0000) returned 1 [0200.509] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0200.509] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215040 | out: hHeap=0x1f0000) returned 1 [0200.509] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x227dd0 [0200.509] GetLastError () returned 0x0 [0200.509] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e340 | out: lpSystemTimeAsFileTime=0x173e340) [0200.509] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x21c6d0 [0200.509] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0200.510] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cb0 [0200.510] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cb0 | out: hHeap=0x1f0000) returned 1 [0200.510] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0200.510] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0200.510] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cb0 [0200.510] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cb0 | out: hHeap=0x1f0000) returned 1 [0200.510] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0200.510] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c6d0 | out: hHeap=0x1f0000) returned 1 [0200.510] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0200.510] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x227dd0 [0200.510] GetLastError () returned 0x0 [0200.510] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\DisplayIcon.ico.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\displayicon.ico.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e6b0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0200.510] GetFileType (hFile=0x1e0) returned 0x1 [0200.510] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x239da8 [0200.511] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e638 | out: lpNewFilePointer=0x0) returned 1 [0200.511] GetLastError () returned 0xb7 [0200.511] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e6fc | out: lpNewFilePointer=0x0) returned 1 [0200.511] WriteFile (in: hFile=0x1e0, lpBuffer=0x239da8*, nNumberOfBytesToWrite=0x103, lpNumberOfBytesWritten=0x173e760, lpOverlapped=0x0 | out: lpBuffer=0x239da8*, lpNumberOfBytesWritten=0x173e760*=0x103, lpOverlapped=0x0) returned 1 [0200.511] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239da8 | out: hHeap=0x1f0000) returned 1 [0200.511] CloseHandle (hObject=0x1e0) returned 1 [0200.515] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c610 | out: hHeap=0x1f0000) returned 1 [0200.515] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c6d0 | out: hHeap=0x1f0000) returned 1 [0200.515] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238d90 | out: hHeap=0x1f0000) returned 1 [0200.515] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224a88 | out: hHeap=0x1f0000) returned 1 [0200.515] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0200.515] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c70 | out: hHeap=0x1f0000) returned 1 [0200.516] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214dd0 | out: hHeap=0x1f0000) returned 1 [0200.516] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210078 | out: hHeap=0x1f0000) returned 1 [0200.516] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239a30 | out: hHeap=0x1f0000) returned 1 [0200.516] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239260 | out: hHeap=0x1f0000) returned 1 [0200.516] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0200.516] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0200.516] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x251068 | out: hHeap=0x1f0000) returned 1 [0200.516] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232d98 | out: hHeap=0x1f0000) returned 1 [0200.516] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228150 | out: hHeap=0x1f0000) returned 1 [0200.516] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c680 | out: hHeap=0x1f0000) returned 1 [0200.516] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffa0 | out: hHeap=0x1f0000) returned 1 [0200.516] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238348 | out: hHeap=0x1f0000) returned 1 [0200.516] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c6a0 | out: hHeap=0x1f0000) returned 1 [0200.516] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff70 | out: hHeap=0x1f0000) returned 1 [0200.516] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0200.517] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c600 | out: hHeap=0x1f0000) returned 1 [0200.517] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223088 | out: hHeap=0x1f0000) returned 1 [0200.517] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0200.517] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f70 | out: hHeap=0x1f0000) returned 1 [0200.517] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229058 | out: hHeap=0x1f0000) returned 1 [0200.517] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0200.517] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0200.517] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228d88 | out: hHeap=0x1f0000) returned 1 [0200.517] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c700 | out: hHeap=0x1f0000) returned 1 [0200.517] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5f0 | out: hHeap=0x1f0000) returned 1 [0200.517] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x23bdb8 | out: hHeap=0x1f0000) returned 1 [0200.517] CloseHandle (hObject=0x1dc) returned 1 [0200.518] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5a0 | out: hHeap=0x1f0000) returned 1 [0200.518] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5e0 | out: hHeap=0x1f0000) returned 1 [0200.518] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20dd00 | out: hHeap=0x1f0000) returned 1 [0200.518] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24add0 | out: hHeap=0x1f0000) returned 1 [0200.518] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210000 | out: hHeap=0x1f0000) returned 1 [0200.518] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d70 | out: hHeap=0x1f0000) returned 1 [0200.518] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x23ddc8 | out: hHeap=0x1f0000) returned 1 [0200.518] CloseHandle (hObject=0x1ac) returned 1 [0200.519] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c6b0 | out: hHeap=0x1f0000) returned 1 [0200.519] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c690 | out: hHeap=0x1f0000) returned 1 [0200.519] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d368 | out: hHeap=0x1f0000) returned 1 [0200.519] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d90 | out: hHeap=0x1f0000) returned 1 [0200.519] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230860 | out: hHeap=0x1f0000) returned 1 [0200.519] CloseHandle (hObject=0x204) returned 1 [0200.519] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c590 | out: hHeap=0x1f0000) returned 1 [0200.520] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c670 | out: hHeap=0x1f0000) returned 1 [0200.520] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239be0 | out: hHeap=0x1f0000) returned 1 [0200.520] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c660 | out: hHeap=0x1f0000) returned 1 [0200.520] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c6f0 | out: hHeap=0x1f0000) returned 1 [0200.520] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c580 | out: hHeap=0x1f0000) returned 1 [0200.520] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5c0 | out: hHeap=0x1f0000) returned 1 [0200.520] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25fd40 | out: hHeap=0x1f0000) returned 1 [0200.520] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24fd60 | out: hHeap=0x1f0000) returned 1 [0200.520] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0200.520] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206898 | out: hHeap=0x1f0000) returned 1 [0200.520] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff28 | out: hHeap=0x1f0000) returned 1 [0200.520] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20fef8 | out: hHeap=0x1f0000) returned 1 [0200.520] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2356d0 | out: hHeap=0x1f0000) returned 1 [0200.520] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x258298 | out: hHeap=0x1f0000) returned 1 [0200.521] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229528 | out: hHeap=0x1f0000) returned 1 [0200.521] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0200.521] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239560 | out: hHeap=0x1f0000) returned 1 [0200.521] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22eb58 | out: hHeap=0x1f0000) returned 1 [0200.521] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234a58 | out: hHeap=0x1f0000) returned 1 [0200.521] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604c8 | out: hHeap=0x1f0000) returned 1 [0200.521] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\DisplayIcon.ico" (normalized: "c:\\588bce7c90097ed212\\displayicon.ico")) returned 1 [0200.522] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Extended", cAlternateFileName="")) returned 1 [0200.522] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0200.522] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282a0 [0200.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x226058 [0200.523] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0200.523] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239928 | out: hHeap=0x1f0000) returned 1 [0200.523] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0200.523] lstrcmpW (lpString1="Extended", lpString2=".") returned 1 [0200.523] lstrcmpW (lpString1="Extended", lpString2="..") returned 1 [0200.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228dd0 [0200.523] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Graphics", cAlternateFileName="")) returned 1 [0200.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0200.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282a0 [0200.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225d38 [0200.523] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0200.523] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226058 | out: hHeap=0x1f0000) returned 1 [0200.523] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0200.523] lstrcmpW (lpString1="Graphics", lpString2=".") returned 1 [0200.523] lstrcmpW (lpString1="Graphics", lpString2="..") returned 1 [0200.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228d88 [0200.523] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x87910600, ftCreationTime.dwHighDateTime=0x1ca2a27, ftLastAccessTime.dwLowDateTime=0x87910600, ftLastAccessTime.dwHighDateTime=0x1ca2a27, ftLastWriteTime.dwLowDateTime=0x87910600, ftLastWriteTime.dwHighDateTime=0x1ca2a27, nFileSizeHigh=0x0, nFileSizeLow=0xe2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="header.bmp", cAlternateFileName="")) returned 1 [0200.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238438 [0200.524] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282a0 [0200.524] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239400 [0200.524] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0200.524] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225d38 | out: hHeap=0x1f0000) returned 1 [0200.524] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238438 | out: hHeap=0x1f0000) returned 1 [0200.524] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\header.bmp" (normalized: "c:\\588bce7c90097ed212\\header.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0200.524] GetFileType (hFile=0x204) returned 0x1 [0200.525] CloseHandle (hObject=0x204) returned 1 [0200.525] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239718 [0200.525] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\header.bmp" (normalized: "c:\\588bce7c90097ed212\\header.bmp"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x87910600, ftCreationTime.dwHighDateTime=0x1ca2a27, ftLastAccessTime.dwLowDateTime=0x87910600, ftLastAccessTime.dwHighDateTime=0x1ca2a27, ftLastWriteTime.dwLowDateTime=0x87910600, ftLastWriteTime.dwHighDateTime=0x1ca2a27, nFileSizeHigh=0x0, nFileSizeLow=0xe2c)) returned 1 [0200.525] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239718 | out: hHeap=0x1f0000) returned 1 [0200.525] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239a30 [0200.525] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\header.bmp" (normalized: "c:\\588bce7c90097ed212\\header.bmp"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x87910600, ftCreationTime.dwHighDateTime=0x1ca2a27, ftLastAccessTime.dwLowDateTime=0x87910600, ftLastAccessTime.dwHighDateTime=0x1ca2a27, ftLastWriteTime.dwLowDateTime=0x87910600, ftLastWriteTime.dwHighDateTime=0x1ca2a27, nFileSizeHigh=0x0, nFileSizeLow=0xe2c)) returned 1 [0200.525] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239a30 | out: hHeap=0x1f0000) returned 1 [0200.525] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239928 [0200.525] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239928 | out: hHeap=0x1f0000) returned 1 [0200.525] GetLastError () returned 0x0 [0200.525] CryptAcquireContextA (in: phProv=0x173e7b0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e7b0*=0x229cf8) returned 1 [0200.528] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238460 | out: pbBuffer=0x238460) returned 1 [0200.528] CryptReleaseContext (hProv=0x229cf8, dwFlags=0x0) returned 1 [0200.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238460 | out: hHeap=0x1f0000) returned 1 [0200.528] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x258298 [0200.528] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x229528 [0200.528] QueryPerformanceCounter (in: lpPerformanceCount=0x173e744 | out: lpPerformanceCount=0x173e744*=35789669657) returned 1 [0200.528] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e784 | out: lpSystemTimeAsFileTime=0x173e784) [0200.528] QueryPerformanceCounter (in: lpPerformanceCount=0x173e744 | out: lpPerformanceCount=0x173e744*=35789689990) returned 1 [0200.528] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e784 | out: lpSystemTimeAsFileTime=0x173e784) [0200.528] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x227dd0 [0200.528] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x251068 [0200.528] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x217038 [0200.528] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x2356d0 [0200.528] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210078 [0200.529] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2065f8 [0200.529] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20fef8 [0200.529] GetLastError () returned 0x0 [0200.529] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\header.bmp.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\header.bmp.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e650, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0200.530] GetFileType (hFile=0x204) returned 0x1 [0200.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c580 [0200.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c5a0 [0200.531] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\header.bmp" (normalized: "c:\\588bce7c90097ed212\\header.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e680, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0200.531] GetFileType (hFile=0x1ac) returned 0x1 [0200.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c70 [0200.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e70 [0200.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x239be0 [0200.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c6f0 [0200.532] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c5e0 [0200.532] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\header.bmp.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\header.bmp.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e5cc, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1dc [0200.532] GetFileType (hFile=0x1dc) returned 0x1 [0200.532] GetLastError () returned 0xb7 [0200.532] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\header.bmp.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\header.bmp.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e5cc, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0200.533] GetFileType (hFile=0x1e0) returned 0x1 [0200.533] GetLastError () returned 0xb7 [0200.533] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\header.bmp" (normalized: "c:\\588bce7c90097ed212\\header.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e5c4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0200.533] GetFileType (hFile=0x200) returned 0x1 [0200.534] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x23ddc8 [0200.534] ReadFile (in: hFile=0x200, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e520, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x173e520*=0xe2c, lpOverlapped=0x0) returned 1 [0200.691] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24ca08 [0200.691] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x242df0 [0200.691] GetLastError () returned 0x0 [0200.691] ReadFile (in: hFile=0x200, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e5b0, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x173e5b0*=0x0, lpOverlapped=0x0) returned 1 [0200.692] GetLastError () returned 0x0 [0200.692] WriteFile (in: hFile=0x1e0, lpBuffer=0x242df0*, nNumberOfBytesToWrite=0xe3c, lpNumberOfBytesWritten=0x173e4a4, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesWritten=0x173e4a4*=0xe3c, lpOverlapped=0x0) returned 1 [0200.693] GetLastError () returned 0x0 [0200.693] CloseHandle (hObject=0x204) returned 1 [0200.695] CloseHandle (hObject=0x1ac) returned 1 [0200.695] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c590 [0200.696] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c690 [0200.720] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\header.bmp" (normalized: "c:\\588bce7c90097ed212\\header.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e680, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0200.765] GetFileType (hFile=0x1ac) returned 0x1 [0200.766] GetLastError () returned 0xb7 [0200.766] WriteFile (in: hFile=0x1ac, lpBuffer=0x173d314*, nNumberOfBytesToWrite=0x1, lpNumberOfBytesWritten=0x173d30c, lpOverlapped=0x0 | out: lpBuffer=0x173d314*, lpNumberOfBytesWritten=0x173d30c*=0x1, lpOverlapped=0x0) returned 1 [0200.767] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x23bdb8 | out: hHeap=0x1f0000) returned 1 [0200.768] CloseHandle (hObject=0x1ac) returned 1 [0200.768] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\header.bmp" (normalized: "c:\\588bce7c90097ed212\\header.bmp")) returned 0 [0200.768] GetLastError () returned 0x20 [0200.768] GetLastError () returned 0x20 [0200.768] CryptAcquireContextA (in: phProv=0x173e7b0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e7b0*=0x22a248) returned 1 [0200.771] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238258 | out: pbBuffer=0x238258) returned 1 [0200.771] CryptReleaseContext (hProv=0x22a248, dwFlags=0x0) returned 1 [0200.771] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238258 | out: hHeap=0x1f0000) returned 1 [0200.771] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2382f8 [0200.771] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238168 [0200.771] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228310 [0200.771] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0200.771] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0200.771] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228310 | out: hHeap=0x1f0000) returned 1 [0200.771] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2395b8 [0200.771] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff70 [0200.771] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x214d68 [0200.771] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238078 [0200.771] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x260188 [0200.771] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205130 [0200.771] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214f70 [0200.771] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2380a0 [0200.771] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x24f5d8 [0200.772] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c710 [0200.772] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0200.772] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210090 [0200.772] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c620 [0200.772] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238460 [0200.772] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210018 [0200.772] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210018 | out: hHeap=0x1f0000) returned 1 [0200.772] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238460 | out: hHeap=0x1f0000) returned 1 [0200.772] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c620 | out: hHeap=0x1f0000) returned 1 [0200.772] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210090 | out: hHeap=0x1f0000) returned 1 [0200.772] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0200.772] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c710 | out: hHeap=0x1f0000) returned 1 [0200.772] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f5d8 | out: hHeap=0x1f0000) returned 1 [0200.772] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0200.772] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f70 | out: hHeap=0x1f0000) returned 1 [0200.772] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x228310 [0200.772] GetLastError () returned 0x0 [0200.772] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e340 | out: lpSystemTimeAsFileTime=0x173e340) [0200.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x21c5b0 [0200.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238460 [0200.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205150 [0200.773] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205150 | out: hHeap=0x1f0000) returned 1 [0200.773] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238460 | out: hHeap=0x1f0000) returned 1 [0200.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238348 [0200.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205290 [0200.773] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205290 | out: hHeap=0x1f0000) returned 1 [0200.773] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238348 | out: hHeap=0x1f0000) returned 1 [0200.773] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5b0 | out: hHeap=0x1f0000) returned 1 [0200.773] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0200.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x227dd0 [0200.773] GetLastError () returned 0x0 [0200.774] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\header.bmp.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\header.bmp.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e6b0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0200.774] GetFileType (hFile=0x1ac) returned 0x1 [0200.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x23bdb8 [0200.775] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e638 | out: lpNewFilePointer=0x0) returned 1 [0200.775] GetLastError () returned 0xb7 [0200.775] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e6fc | out: lpNewFilePointer=0x0) returned 1 [0200.775] WriteFile (in: hFile=0x1ac, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x103, lpNumberOfBytesWritten=0x173e760, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x173e760*=0x103, lpOverlapped=0x0) returned 1 [0200.775] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x23bdb8 | out: hHeap=0x1f0000) returned 1 [0200.776] CloseHandle (hObject=0x1ac) returned 1 [0200.795] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c630 | out: hHeap=0x1f0000) returned 1 [0200.795] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c620 | out: hHeap=0x1f0000) returned 1 [0200.795] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f5d8 | out: hHeap=0x1f0000) returned 1 [0200.795] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260188 | out: hHeap=0x1f0000) returned 1 [0200.795] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0200.795] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205130 | out: hHeap=0x1f0000) returned 1 [0200.795] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d68 | out: hHeap=0x1f0000) returned 1 [0200.796] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff70 | out: hHeap=0x1f0000) returned 1 [0200.796] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2395b8 | out: hHeap=0x1f0000) returned 1 [0200.796] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230e38 | out: hHeap=0x1f0000) returned 1 [0200.796] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0200.796] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0200.796] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24fd60 | out: hHeap=0x1f0000) returned 1 [0200.796] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230a58 | out: hHeap=0x1f0000) returned 1 [0200.796] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282d8 | out: hHeap=0x1f0000) returned 1 [0200.796] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c700 | out: hHeap=0x1f0000) returned 1 [0200.796] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210000 | out: hHeap=0x1f0000) returned 1 [0200.796] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0200.796] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c600 | out: hHeap=0x1f0000) returned 1 [0200.796] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffa0 | out: hHeap=0x1f0000) returned 1 [0200.796] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0200.796] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c610 | out: hHeap=0x1f0000) returned 1 [0200.796] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25fe20 | out: hHeap=0x1f0000) returned 1 [0200.796] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0200.796] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214ea0 | out: hHeap=0x1f0000) returned 1 [0200.796] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221ef0 | out: hHeap=0x1f0000) returned 1 [0200.796] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0200.796] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0200.796] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222178 | out: hHeap=0x1f0000) returned 1 [0200.797] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c690 | out: hHeap=0x1f0000) returned 1 [0200.797] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c590 | out: hHeap=0x1f0000) returned 1 [0200.797] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x23ddc8 | out: hHeap=0x1f0000) returned 1 [0200.797] CloseHandle (hObject=0x200) returned 1 [0200.797] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c6b0 | out: hHeap=0x1f0000) returned 1 [0200.797] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c680 | out: hHeap=0x1f0000) returned 1 [0200.797] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20dd00 | out: hHeap=0x1f0000) returned 1 [0200.797] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24ca08 | out: hHeap=0x1f0000) returned 1 [0200.797] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff28 | out: hHeap=0x1f0000) returned 1 [0200.797] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d90 | out: hHeap=0x1f0000) returned 1 [0200.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x242df0 | out: hHeap=0x1f0000) returned 1 [0200.798] CloseHandle (hObject=0x1e0) returned 1 [0200.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5c0 | out: hHeap=0x1f0000) returned 1 [0200.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c6a0 | out: hHeap=0x1f0000) returned 1 [0200.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d368 | out: hHeap=0x1f0000) returned 1 [0200.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e70 | out: hHeap=0x1f0000) returned 1 [0200.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230860 | out: hHeap=0x1f0000) returned 1 [0200.798] CloseHandle (hObject=0x1dc) returned 1 [0200.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5e0 | out: hHeap=0x1f0000) returned 1 [0200.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c6f0 | out: hHeap=0x1f0000) returned 1 [0200.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239be0 | out: hHeap=0x1f0000) returned 1 [0200.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5a0 | out: hHeap=0x1f0000) returned 1 [0200.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c580 | out: hHeap=0x1f0000) returned 1 [0200.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5f0 | out: hHeap=0x1f0000) returned 1 [0200.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c6d0 | out: hHeap=0x1f0000) returned 1 [0200.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25fd40 | out: hHeap=0x1f0000) returned 1 [0200.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x251068 | out: hHeap=0x1f0000) returned 1 [0200.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0200.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2065f8 | out: hHeap=0x1f0000) returned 1 [0200.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20fef8 | out: hHeap=0x1f0000) returned 1 [0200.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210078 | out: hHeap=0x1f0000) returned 1 [0200.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2356d0 | out: hHeap=0x1f0000) returned 1 [0200.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x258298 | out: hHeap=0x1f0000) returned 1 [0200.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229528 | out: hHeap=0x1f0000) returned 1 [0200.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0200.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239928 | out: hHeap=0x1f0000) returned 1 [0200.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237ae0 | out: hHeap=0x1f0000) returned 1 [0200.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2291c0 | out: hHeap=0x1f0000) returned 1 [0200.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238438 | out: hHeap=0x1f0000) returned 1 [0200.799] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\header.bmp" (normalized: "c:\\588bce7c90097ed212\\header.bmp")) returned 1 [0200.801] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66ea7e00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0x66ea7e00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0xc003ee9d, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xad1384b, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfx_Core.mzz", cAlternateFileName="NETFX_~1.MZZ")) returned 1 [0200.801] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0200.801] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282d8 [0200.801] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2399d8 [0200.801] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282d8 | out: hHeap=0x1f0000) returned 1 [0200.801] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239400 | out: hHeap=0x1f0000) returned 1 [0200.801] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0200.801] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\netfx_Core.mzz" (normalized: "c:\\588bce7c90097ed212\\netfx_core.mzz"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1dc [0200.802] GetFileType (hFile=0x1dc) returned 0x1 [0200.802] CloseHandle (hObject=0x1dc) returned 1 [0203.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239668 [0203.580] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\netfx_Core.mzz" (normalized: "c:\\588bce7c90097ed212\\netfx_core.mzz"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66ea7e00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0x66ea7e00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0xc26e41cc, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xad1394e)) returned 1 [0203.580] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239668 | out: hHeap=0x1f0000) returned 1 [0203.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239668 [0203.580] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\netfx_Core.mzz" (normalized: "c:\\588bce7c90097ed212\\netfx_core.mzz"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66ea7e00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0x66ea7e00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0xc26e41cc, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xad1394e)) returned 1 [0203.580] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239668 | out: hHeap=0x1f0000) returned 1 [0203.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239508 [0203.580] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239508 | out: hHeap=0x1f0000) returned 1 [0203.581] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfc12ba3, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xbfc12ba3, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xbfc12ba3, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfx_Core.mzz.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="NE110D~1.ODV")) returned 1 [0203.581] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a620 [0203.581] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0203.581] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x2007c8 [0203.581] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0203.581] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2399d8 | out: hHeap=0x1f0000) returned 1 [0203.581] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a620 | out: hHeap=0x1f0000) returned 1 [0203.581] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\netfx_Core.mzz.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\netfx_core.mzz.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1dc [0203.582] GetFileType (hFile=0x1dc) returned 0x1 [0203.582] CloseHandle (hObject=0x1dc) returned 1 [0204.236] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x2008a0 [0204.236] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\netfx_Core.mzz.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\netfx_core.mzz.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfc12ba3, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xbfc12ba3, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xbfc12ba3, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x25a000)) returned 1 [0204.237] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2008a0 | out: hHeap=0x1f0000) returned 1 [0204.237] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x2008a0 [0204.237] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\netfx_Core.mzz.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\netfx_core.mzz.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfc12ba3, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xbfc12ba3, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xbfc12ba3, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x25a000)) returned 1 [0204.237] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2008a0 | out: hHeap=0x1f0000) returned 1 [0204.237] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x200978 [0204.237] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x200978 | out: hHeap=0x1f0000) returned 1 [0204.237] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc183da00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0xc183da00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0xbe14e744, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x1d0303, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfx_Core_x64.msi.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="NETFX_~3.ODV")) returned 1 [0204.237] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261160 [0204.237] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0204.237] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x22d368 [0204.237] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0204.237] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2007c8 | out: hHeap=0x1f0000) returned 1 [0204.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261160 | out: hHeap=0x1f0000) returned 1 [0204.238] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\netfx_Core_x64.msi.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x64.msi.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1dc [0204.238] GetFileType (hFile=0x1dc) returned 0x1 [0204.238] CloseHandle (hObject=0x1dc) returned 1 [0204.239] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x239be0 [0204.239] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\netfx_Core_x64.msi.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x64.msi.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc183da00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0xc183da00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0xbe14e744, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x1d0303)) returned 1 [0204.239] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239be0 | out: hHeap=0x1f0000) returned 1 [0204.239] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x239be0 [0204.239] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\netfx_Core_x64.msi.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x64.msi.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc183da00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0xc183da00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0xbe14e744, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x1d0303)) returned 1 [0204.239] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239be0 | out: hHeap=0x1f0000) returned 1 [0204.239] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x239be0 [0204.239] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239be0 | out: hHeap=0x1f0000) returned 1 [0204.239] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c130c00, ftCreationTime.dwHighDateTime=0x1cac6d9, ftLastAccessTime.dwLowDateTime=0x4c130c00, ftLastAccessTime.dwHighDateTime=0x1cac6d9, ftLastWriteTime.dwLowDateTime=0xbecc7deb, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x11c103, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfx_Core_x86.msi.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="NETFX_~4.ODV")) returned 1 [0204.239] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2614f8 [0204.239] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0204.240] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x239be0 [0204.240] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0204.240] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d368 | out: hHeap=0x1f0000) returned 1 [0204.240] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2614f8 | out: hHeap=0x1f0000) returned 1 [0204.240] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\netfx_Core_x86.msi.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x86.msi.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1dc [0204.240] GetFileType (hFile=0x1dc) returned 0x1 [0204.240] CloseHandle (hObject=0x1dc) returned 1 [0204.240] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x22d368 [0204.241] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\netfx_Core_x86.msi.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x86.msi.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c130c00, ftCreationTime.dwHighDateTime=0x1cac6d9, ftLastAccessTime.dwLowDateTime=0x4c130c00, ftLastAccessTime.dwHighDateTime=0x1cac6d9, ftLastWriteTime.dwLowDateTime=0xbecc7deb, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x11c103)) returned 1 [0204.241] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d368 | out: hHeap=0x1f0000) returned 1 [0204.241] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x22d368 [0204.241] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\netfx_Core_x86.msi.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x86.msi.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c130c00, ftCreationTime.dwHighDateTime=0x1cac6d9, ftLastAccessTime.dwLowDateTime=0x4c130c00, ftLastAccessTime.dwHighDateTime=0x1cac6d9, ftLastWriteTime.dwLowDateTime=0xbecc7deb, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x11c103)) returned 1 [0204.241] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d368 | out: hHeap=0x1f0000) returned 1 [0204.241] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x22d368 [0204.241] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d368 | out: hHeap=0x1f0000) returned 1 [0204.241] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf74cd515, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf74cd515, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf7cd9415, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x29222c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfx_Extended.mzz", cAlternateFileName="NETFX_~2.MZZ")) returned 1 [0204.241] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228230 [0204.241] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0204.241] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214fd8 [0204.241] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0204.241] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239be0 | out: hHeap=0x1f0000) returned 1 [0204.241] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228230 | out: hHeap=0x1f0000) returned 1 [0204.241] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\netfx_Extended.mzz" (normalized: "c:\\588bce7c90097ed212\\netfx_extended.mzz"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1dc [0204.242] GetFileType (hFile=0x1dc) returned 0x1 [0204.242] CloseHandle (hObject=0x1dc) returned 1 [0206.934] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235eb8 [0206.935] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\netfx_Extended.mzz" (normalized: "c:\\588bce7c90097ed212\\netfx_extended.mzz"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf74cd515, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf74cd515, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf7cd9415, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x29222c7)) returned 1 [0206.935] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235eb8 | out: hHeap=0x1f0000) returned 1 [0206.935] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235d80 [0206.935] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\netfx_Extended.mzz" (normalized: "c:\\588bce7c90097ed212\\netfx_extended.mzz"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf74cd515, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf74cd515, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf7cd9415, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x29222c7)) returned 1 [0206.935] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235d80 | out: hHeap=0x1f0000) returned 1 [0206.935] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235eb8 [0206.935] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235eb8 | out: hHeap=0x1f0000) returned 1 [0206.935] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcaa8ec8, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xbcaa8ec8, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xbe776a5f, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xd5113, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfx_Extended_x64.msi.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="NETFX_~2.ODV")) returned 1 [0206.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2614f8 [0206.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2f0 [0206.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x22b018 [0206.936] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0206.936] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214fd8 | out: hHeap=0x1f0000) returned 1 [0206.936] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2614f8 | out: hHeap=0x1f0000) returned 1 [0206.936] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\netfx_Extended_x64.msi.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x64.msi.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1dc [0206.937] GetFileType (hFile=0x1dc) returned 0x1 [0206.937] CloseHandle (hObject=0x1dc) returned 1 [0206.937] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x220a58 [0206.937] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\netfx_Extended_x64.msi.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x64.msi.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcaa8ec8, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xbcaa8ec8, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xbe776a5f, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xd5113)) returned 1 [0206.938] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220a58 | out: hHeap=0x1f0000) returned 1 [0206.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x220a58 [0206.938] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\netfx_Extended_x64.msi.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x64.msi.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcaa8ec8, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xbcaa8ec8, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xbe776a5f, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xd5113)) returned 1 [0206.938] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220a58 | out: hHeap=0x1f0000) returned 1 [0206.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x220a58 [0206.938] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220a58 | out: hHeap=0x1f0000) returned 1 [0206.938] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc749eed, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xbc749eed, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xbda8efca, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x79113, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfx_Extended_x86.msi.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="NETFX_~1.ODV")) returned 1 [0206.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2614f8 [0206.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0206.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x220a58 [0206.938] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0206.938] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b018 | out: hHeap=0x1f0000) returned 1 [0206.938] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2614f8 | out: hHeap=0x1f0000) returned 1 [0206.939] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\netfx_Extended_x86.msi.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x86.msi.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1dc [0206.939] GetFileType (hFile=0x1dc) returned 0x1 [0206.940] CloseHandle (hObject=0x1dc) returned 1 [0206.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x22b018 [0206.940] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\netfx_Extended_x86.msi.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x86.msi.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc749eed, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xbc749eed, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xbda8efca, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x79113)) returned 1 [0206.940] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b018 | out: hHeap=0x1f0000) returned 1 [0206.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x22b018 [0206.940] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\netfx_Extended_x86.msi.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x86.msi.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc749eed, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xbc749eed, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xbda8efca, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x79113)) returned 1 [0206.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b018 | out: hHeap=0x1f0000) returned 1 [0206.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x22b018 [0206.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b018 | out: hHeap=0x1f0000) returned 1 [0206.941] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbda8efca, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xbda8efca, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xbe8c1c64, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x427c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="ParameterInfo.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="PARAME~1.ODV")) returned 1 [0206.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261160 [0206.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2f0 [0206.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x22b018 [0206.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0206.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220a58 | out: hHeap=0x1f0000) returned 1 [0206.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261160 | out: hHeap=0x1f0000) returned 1 [0206.942] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\ParameterInfo.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\parameterinfo.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1dc [0206.942] GetFileType (hFile=0x1dc) returned 0x1 [0206.942] CloseHandle (hObject=0x1dc) returned 1 [0206.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x220a58 [0206.943] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\ParameterInfo.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\parameterinfo.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbda8efca, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xbda8efca, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xbe8c1c64, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x427c1)) returned 1 [0206.943] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220a58 | out: hHeap=0x1f0000) returned 1 [0206.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x220a58 [0206.943] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\ParameterInfo.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\parameterinfo.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbda8efca, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xbda8efca, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xbe8c1c64, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x427c1)) returned 1 [0206.943] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220a58 | out: hHeap=0x1f0000) returned 1 [0206.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x220a58 [0206.943] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220a58 | out: hHeap=0x1f0000) returned 1 [0206.943] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x19dedd00, ftCreationTime.dwHighDateTime=0x1ca2a1b, ftLastAccessTime.dwLowDateTime=0x19dedd00, ftLastAccessTime.dwHighDateTime=0x1ca2a1b, ftLastWriteTime.dwLowDateTime=0x19dedd00, ftLastWriteTime.dwHighDateTime=0x1ca2a1b, nFileSizeHigh=0x0, nFileSizeLow=0x2d200, dwReserved0=0x0, dwReserved1=0x0, cFileName="RGB9RAST_x64.msi", cAlternateFileName="RGB9RA~1.MSI")) returned 1 [0206.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0206.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2f0 [0206.944] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c8b8 [0206.944] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0206.944] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b018 | out: hHeap=0x1f0000) returned 1 [0206.944] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0206.944] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\RGB9RAST_x64.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1dc [0206.945] GetFileType (hFile=0x1dc) returned 0x1 [0206.945] CloseHandle (hObject=0x1dc) returned 1 [0206.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239508 [0206.946] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\RGB9RAST_x64.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x64.msi"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x19dedd00, ftCreationTime.dwHighDateTime=0x1ca2a1b, ftLastAccessTime.dwLowDateTime=0x19dedd00, ftLastAccessTime.dwHighDateTime=0x1ca2a1b, ftLastWriteTime.dwLowDateTime=0x19dedd00, ftLastWriteTime.dwHighDateTime=0x1ca2a1b, nFileSizeHigh=0x0, nFileSizeLow=0x2d200)) returned 1 [0206.946] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239508 | out: hHeap=0x1f0000) returned 1 [0206.946] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239508 [0206.946] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\RGB9RAST_x64.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x64.msi"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x19dedd00, ftCreationTime.dwHighDateTime=0x1ca2a1b, ftLastAccessTime.dwLowDateTime=0x19dedd00, ftLastAccessTime.dwHighDateTime=0x1ca2a1b, ftLastWriteTime.dwLowDateTime=0x19dedd00, ftLastWriteTime.dwHighDateTime=0x1ca2a1b, nFileSizeHigh=0x0, nFileSizeLow=0x2d200)) returned 1 [0206.946] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239508 | out: hHeap=0x1f0000) returned 1 [0206.946] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239508 [0206.946] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239508 | out: hHeap=0x1f0000) returned 1 [0206.946] GetLastError () returned 0x0 [0206.947] CryptAcquireContextA (in: phProv=0x173e7b0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e7b0*=0x211c78) returned 1 [0206.950] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x260590 | out: pbBuffer=0x260590) returned 1 [0206.950] CryptReleaseContext (hProv=0x211c78, dwFlags=0x0) returned 1 [0206.950] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0206.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x255c88 [0206.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x22b018 [0206.950] QueryPerformanceCounter (in: lpPerformanceCount=0x173e744 | out: lpPerformanceCount=0x173e744*=36431884798) returned 1 [0206.950] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e784 | out: lpSystemTimeAsFileTime=0x173e784) [0206.950] QueryPerformanceCounter (in: lpPerformanceCount=0x173e744 | out: lpPerformanceCount=0x173e744*=36431910743) returned 1 [0206.950] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e784 | out: lpSystemTimeAsFileTime=0x173e784) [0206.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x21cf70 [0206.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x24fd60 [0206.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x220a58 [0206.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x24f5d8 [0206.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff28 [0206.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206808 [0206.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff70 [0206.951] GetLastError () returned 0x0 [0206.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c570 [0206.952] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\RGB9RAST_x64.msi.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x64.msi.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e650, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1dc [0206.954] GetFileType (hFile=0x1dc) returned 0x1 [0206.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c580 [0206.955] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c590 [0206.955] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\RGB9RAST_x64.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e680, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0206.955] GetFileType (hFile=0x210) returned 0x1 [0206.955] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205130 [0206.955] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x2051f0 [0206.956] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261160 [0206.956] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c700 [0206.956] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c5a0 [0206.956] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\RGB9RAST_x64.msi.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x64.msi.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e5cc, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0206.957] GetFileType (hFile=0x204) returned 0x1 [0206.957] GetLastError () returned 0xb7 [0206.957] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c670 [0206.958] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\RGB9RAST_x64.msi.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x64.msi.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e5cc, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0207.209] GetFileType (hFile=0x1ac) returned 0x1 [0207.209] GetLastError () returned 0xb7 [0207.209] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\RGB9RAST_x64.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x64.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e5c4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc [0207.209] GetFileType (hFile=0x1cc) returned 0x1 [0207.210] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x23bdb8 [0207.210] ReadFile (in: hFile=0x1cc, lpBuffer=0x23bdb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e520, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesRead=0x173e520*=0x1000, lpOverlapped=0x0) returned 1 [0207.214] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24add0 [0207.214] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x23adb0 [0207.214] GetLastError () returned 0x0 [0207.336] CloseHandle (hObject=0x1dc) returned 1 [0207.343] CloseHandle (hObject=0x210) returned 1 [0207.343] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c6d0 [0207.343] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c710 [0207.344] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\RGB9RAST_x64.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x64.msi"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e680, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0207.348] GetFileType (hFile=0x210) returned 0x1 [0207.349] GetLastError () returned 0xb7 [0207.351] CloseHandle (hObject=0x210) returned 1 [0207.352] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\RGB9RAST_x64.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x64.msi")) returned 0 [0207.352] GetLastError () returned 0x20 [0207.352] GetLastError () returned 0x20 [0207.352] CryptAcquireContextA (in: phProv=0x173e7b0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e7b0*=0x2119d0) returned 1 [0207.355] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x260950 | out: pbBuffer=0x260950) returned 1 [0207.355] CryptReleaseContext (hProv=0x2119d0, dwFlags=0x0) returned 1 [0207.355] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0207.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260518 [0207.356] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260860 [0207.356] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0207.356] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0207.356] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0207.356] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0207.356] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x263910 [0207.356] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210000 [0207.356] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x235eb8 [0207.356] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2609a0 [0207.356] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x20d998 [0207.356] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x2052f0 [0207.356] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235838 [0207.356] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260590 [0207.357] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2600f0 [0207.357] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c5d0 [0207.357] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0207.357] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210018 [0207.357] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c5e0 [0207.357] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2607e8 [0207.357] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2100a8 [0207.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2100a8 | out: hHeap=0x1f0000) returned 1 [0207.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607e8 | out: hHeap=0x1f0000) returned 1 [0207.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5e0 | out: hHeap=0x1f0000) returned 1 [0207.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210018 | out: hHeap=0x1f0000) returned 1 [0207.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0207.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5d0 | out: hHeap=0x1f0000) returned 1 [0207.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2600f0 | out: hHeap=0x1f0000) returned 1 [0207.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0207.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235838 | out: hHeap=0x1f0000) returned 1 [0207.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x227ee8 [0207.358] GetLastError () returned 0x0 [0207.358] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e340 | out: lpSystemTimeAsFileTime=0x173e340) [0207.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x21c640 [0207.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0207.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205130 [0207.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205130 | out: hHeap=0x1f0000) returned 1 [0207.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0207.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606f8 [0207.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ff0 [0207.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ff0 | out: hHeap=0x1f0000) returned 1 [0207.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606f8 | out: hHeap=0x1f0000) returned 1 [0207.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c640 | out: hHeap=0x1f0000) returned 1 [0207.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0207.359] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x21cf70 [0207.359] GetLastError () returned 0x0 [0207.359] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\RGB9RAST_x64.msi.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x64.msi.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e6b0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0207.359] GetFileType (hFile=0x210) returned 0x1 [0207.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x245e08 [0207.360] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e638 | out: lpNewFilePointer=0x0) returned 1 [0207.360] GetLastError () returned 0xb7 [0207.360] CloseHandle (hObject=0x210) returned 1 [0207.626] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c640 | out: hHeap=0x1f0000) returned 1 [0207.626] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5e0 | out: hHeap=0x1f0000) returned 1 [0207.626] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2600f0 | out: hHeap=0x1f0000) returned 1 [0207.627] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20d998 | out: hHeap=0x1f0000) returned 1 [0207.627] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0207.627] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2052f0 | out: hHeap=0x1f0000) returned 1 [0207.627] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235eb8 | out: hHeap=0x1f0000) returned 1 [0207.627] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210000 | out: hHeap=0x1f0000) returned 1 [0207.627] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263910 | out: hHeap=0x1f0000) returned 1 [0207.627] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224388 | out: hHeap=0x1f0000) returned 1 [0207.627] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0207.627] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0207.627] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25e1c0 | out: hHeap=0x1f0000) returned 1 [0207.627] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2648e8 | out: hHeap=0x1f0000) returned 1 [0207.627] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0207.627] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5c0 | out: hHeap=0x1f0000) returned 1 [0207.627] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffe8 | out: hHeap=0x1f0000) returned 1 [0207.627] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0207.628] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c560 | out: hHeap=0x1f0000) returned 1 [0207.628] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210090 | out: hHeap=0x1f0000) returned 1 [0207.628] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0207.628] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c720 | out: hHeap=0x1f0000) returned 1 [0207.628] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25ffe8 | out: hHeap=0x1f0000) returned 1 [0207.628] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0207.628] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235768 | out: hHeap=0x1f0000) returned 1 [0207.628] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234a58 | out: hHeap=0x1f0000) returned 1 [0207.628] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260798 | out: hHeap=0x1f0000) returned 1 [0207.628] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0207.628] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234980 | out: hHeap=0x1f0000) returned 1 [0207.628] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c710 | out: hHeap=0x1f0000) returned 1 [0207.628] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c6d0 | out: hHeap=0x1f0000) returned 1 [0207.629] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x23bdb8 | out: hHeap=0x1f0000) returned 1 [0207.629] CloseHandle (hObject=0x1cc) returned 1 [0207.629] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c630 | out: hHeap=0x1f0000) returned 1 [0207.629] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c6c0 | out: hHeap=0x1f0000) returned 1 [0207.630] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20dd00 | out: hHeap=0x1f0000) returned 1 [0207.630] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24add0 | out: hHeap=0x1f0000) returned 1 [0207.630] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffd0 | out: hHeap=0x1f0000) returned 1 [0207.630] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205290 | out: hHeap=0x1f0000) returned 1 [0207.630] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x23adb0 | out: hHeap=0x1f0000) returned 1 [0207.630] CloseHandle (hObject=0x1ac) returned 1 [0207.631] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c670 | out: hHeap=0x1f0000) returned 1 [0207.631] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c6b0 | out: hHeap=0x1f0000) returned 1 [0207.631] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2614f8 | out: hHeap=0x1f0000) returned 1 [0207.631] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2051f0 | out: hHeap=0x1f0000) returned 1 [0207.631] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2231b8 | out: hHeap=0x1f0000) returned 1 [0207.631] CloseHandle (hObject=0x204) returned 1 [0207.631] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5a0 | out: hHeap=0x1f0000) returned 1 [0207.631] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c700 | out: hHeap=0x1f0000) returned 1 [0207.631] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261160 | out: hHeap=0x1f0000) returned 1 [0207.631] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c590 | out: hHeap=0x1f0000) returned 1 [0207.631] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c580 | out: hHeap=0x1f0000) returned 1 [0207.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c570 | out: hHeap=0x1f0000) returned 1 [0207.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c620 | out: hHeap=0x1f0000) returned 1 [0207.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0207.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24fd60 | out: hHeap=0x1f0000) returned 1 [0207.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220a58 | out: hHeap=0x1f0000) returned 1 [0207.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206808 | out: hHeap=0x1f0000) returned 1 [0207.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff70 | out: hHeap=0x1f0000) returned 1 [0207.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff28 | out: hHeap=0x1f0000) returned 1 [0207.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f5d8 | out: hHeap=0x1f0000) returned 1 [0207.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x255c88 | out: hHeap=0x1f0000) returned 1 [0207.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b018 | out: hHeap=0x1f0000) returned 1 [0207.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0207.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239508 | out: hHeap=0x1f0000) returned 1 [0207.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226ec0 | out: hHeap=0x1f0000) returned 1 [0207.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346b0 | out: hHeap=0x1f0000) returned 1 [0207.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0207.633] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\RGB9RAST_x64.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x64.msi")) returned 1 [0207.636] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x177c8300, ftCreationTime.dwHighDateTime=0x1ca2a1b, ftLastAccessTime.dwLowDateTime=0x177c8300, ftLastAccessTime.dwHighDateTime=0x1ca2a1b, ftLastWriteTime.dwLowDateTime=0x177c8300, ftLastWriteTime.dwHighDateTime=0x1ca2a1b, nFileSizeHigh=0x0, nFileSizeLow=0x17200, dwReserved0=0x0, dwReserved1=0x0, cFileName="RGB9Rast_x86.msi", cAlternateFileName="RGB9RA~2.MSI")) returned 1 [0207.636] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282a0 [0207.636] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0207.636] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x263910 [0207.636] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0207.636] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0207.636] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0207.636] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\RGB9Rast_x86.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x86.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0207.637] GetFileType (hFile=0x204) returned 0x1 [0207.637] CloseHandle (hObject=0x204) returned 1 [0207.637] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x263ac8 [0207.637] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\RGB9Rast_x86.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x86.msi"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x177c8300, ftCreationTime.dwHighDateTime=0x1ca2a1b, ftLastAccessTime.dwLowDateTime=0x177c8300, ftLastAccessTime.dwHighDateTime=0x1ca2a1b, ftLastWriteTime.dwLowDateTime=0x177c8300, ftLastWriteTime.dwHighDateTime=0x1ca2a1b, nFileSizeHigh=0x0, nFileSizeLow=0x17200)) returned 1 [0207.638] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263ac8 | out: hHeap=0x1f0000) returned 1 [0207.638] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x263d30 [0207.638] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\RGB9Rast_x86.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x86.msi"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x177c8300, ftCreationTime.dwHighDateTime=0x1ca2a1b, ftLastAccessTime.dwLowDateTime=0x177c8300, ftLastAccessTime.dwHighDateTime=0x1ca2a1b, ftLastWriteTime.dwLowDateTime=0x177c8300, ftLastWriteTime.dwHighDateTime=0x1ca2a1b, nFileSizeHigh=0x0, nFileSizeLow=0x17200)) returned 1 [0207.638] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263d30 | out: hHeap=0x1f0000) returned 1 [0207.638] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x263cd8 [0207.638] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263cd8 | out: hHeap=0x1f0000) returned 1 [0207.638] GetLastError () returned 0x0 [0207.638] SetLastError (dwErrCode=0x0) [0207.638] AreFileApisANSI () returned 1 [0207.638] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58420, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0207.639] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58420, cbMultiByte=4, lpWideCharStr=0x173f0c4, cchWideChar=4 | out: lpWideCharStr=".exe") returned 4 [0207.639] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604c8 [0207.639] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234980 [0207.639] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x226ec0 [0207.639] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x263968 [0207.639] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282a0 [0207.639] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0207.639] CryptAcquireContextA (in: phProv=0x173e7b0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e7b0*=0x2124f8) returned 1 [0207.642] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x260928 | out: pbBuffer=0x260928) returned 1 [0207.643] CryptReleaseContext (hProv=0x2124f8, dwFlags=0x0) returned 1 [0207.643] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0207.643] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x26aeb0 [0207.643] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x224158 [0207.643] QueryPerformanceCounter (in: lpPerformanceCount=0x173e744 | out: lpPerformanceCount=0x173e744*=36501192288) returned 1 [0207.643] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e784 | out: lpSystemTimeAsFileTime=0x173e784) [0207.643] QueryPerformanceCounter (in: lpPerformanceCount=0x173e744 | out: lpPerformanceCount=0x173e744*=36501219657) returned 1 [0207.643] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e784 | out: lpSystemTimeAsFileTime=0x173e784) [0207.643] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x227ee8 [0207.644] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x26fad0 [0207.644] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2244a0 [0207.644] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x24f5d8 [0207.644] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20fef8 [0207.644] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206958 [0207.644] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210090 [0207.644] GetLastError () returned 0x0 [0207.644] SetLastError (dwErrCode=0x0) [0207.644] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0207.644] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235c48 [0207.644] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219cf0 [0207.644] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235c48 | out: hHeap=0x1f0000) returned 1 [0207.644] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xee) returned 0x2648e8 [0207.644] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219cf0 | out: hHeap=0x1f0000) returned 1 [0207.645] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c720 [0207.645] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c710 [0207.645] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\RGB9Rast_x86.msi.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x86.msi.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e650, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0207.646] GetFileType (hFile=0x204) returned 0x1 [0207.646] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c5e0 [0207.646] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c670 [0207.647] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\RGB9Rast_x86.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x86.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e680, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0207.647] GetFileType (hFile=0x1ac) returned 0x1 [0207.647] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x2051f0 [0207.647] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205290 [0207.647] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261f30 [0207.647] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c6d0 [0207.648] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c6b0 [0207.648] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\RGB9Rast_x86.msi.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x86.msi.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e5cc, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc [0207.649] GetFileType (hFile=0x1cc) returned 0x1 [0207.649] GetLastError () returned 0xb7 [0207.649] SetLastError (dwErrCode=0xb7) [0207.649] GetLastError () returned 0xb7 [0207.649] SetLastError (dwErrCode=0xb7) [0207.649] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2051f0 | out: hHeap=0x1f0000) returned 1 [0207.650] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205290 | out: hHeap=0x1f0000) returned 1 [0207.650] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe4) returned 0x22b018 [0207.650] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205290 [0207.650] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205150 [0207.650] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x2051f0 [0207.650] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2624f0 [0207.650] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c570 [0207.650] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c580 [0207.651] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\RGB9Rast_x86.msi.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x86.msi.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e5cc, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0207.651] GetFileType (hFile=0x210) returned 0x1 [0207.651] GetLastError () returned 0xb7 [0207.651] SetLastError (dwErrCode=0xb7) [0207.651] GetLastError () returned 0xb7 [0207.651] SetLastError (dwErrCode=0xb7) [0207.651] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205150 | out: hHeap=0x1f0000) returned 1 [0207.651] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2051f0 | out: hHeap=0x1f0000) returned 1 [0207.651] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205150 [0207.652] GetLastError () returned 0xb7 [0207.652] SetLastError (dwErrCode=0xb7) [0207.652] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205150 | out: hHeap=0x1f0000) returned 1 [0207.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x2052f0 [0207.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x2051f0 [0207.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205150 [0207.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb8) returned 0x20dd00 [0207.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c700 [0207.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c590 [0207.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x38) returned 0x24e800 [0207.653] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\RGB9Rast_x86.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x86.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e5c4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x228 [0207.653] GetFileType (hFile=0x228) returned 0x1 [0207.653] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x23adb0 [0207.653] ReadFile (in: hFile=0x228, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e520, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x173e520*=0x1000, lpOverlapped=0x0) returned 1 [0207.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24ce10 [0207.657] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x23bdb8 [0207.658] GetLastError () returned 0x0 [0207.658] SetLastError (dwErrCode=0x0) [0207.658] GetLastError () returned 0x0 [0207.658] SetLastError (dwErrCode=0x0) [0207.658] GetLastError () returned 0x0 [0207.658] SetLastError (dwErrCode=0x0) [0207.658] GetLastError () returned 0x0 [0207.658] SetLastError (dwErrCode=0x0) [0207.659] ReadFile (in: hFile=0x228, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e5b0, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x173e5b0*=0x1000, lpOverlapped=0x0) returned 1 [0207.929] WriteFile (in: hFile=0x210, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x173e3f4, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x173e3f4*=0x1000, lpOverlapped=0x0) returned 1 [0207.932] GetLastError () returned 0x0 [0207.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff70 [0207.936] GetLastError () returned 0x0 [0207.936] CloseHandle (hObject=0x204) returned 1 [0207.941] CloseHandle (hObject=0x1ac) returned 1 [0207.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c6c0 [0207.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c560 [0207.942] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\RGB9Rast_x86.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x86.msi"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e680, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0207.945] GetFileType (hFile=0x1ac) returned 0x1 [0207.946] GetLastError () returned 0xb7 [0207.947] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x288fa8 [0207.947] GetLastError () returned 0xb7 [0207.948] CloseHandle (hObject=0x1ac) returned 1 [0207.948] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\RGB9Rast_x86.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x86.msi")) returned 0 [0207.949] GetLastError () returned 0x20 [0207.949] GetLastError () returned 0x20 [0207.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234860 [0207.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260860 [0207.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260928 [0207.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x234b30 [0207.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205130 [0207.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205210 [0207.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x21c5a0 [0207.949] GetLastError () returned 0x20 [0207.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x227ee8 [0207.950] GetLastError () returned 0x20 [0207.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x227ee8 [0207.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235700 [0207.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2606d0 [0207.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x217038 [0207.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c5c0 [0207.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608b0 [0207.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffb8 [0207.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c620 [0207.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0207.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffd0 [0207.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260590 [0207.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2231b8 [0207.951] GetLastError () returned 0x20 [0207.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x21c630 [0207.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x21c640 [0207.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c4c0 [0207.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c640 | out: hHeap=0x1f0000) returned 1 [0207.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c640 [0207.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c4c0 | out: hHeap=0x1f0000) returned 1 [0207.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c630 | out: hHeap=0x1f0000) returned 1 [0207.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c630 [0207.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x20ffe8 [0207.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c630 | out: hHeap=0x1f0000) returned 1 [0207.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210000 [0207.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffe8 | out: hHeap=0x1f0000) returned 1 [0207.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c640 | out: hHeap=0x1f0000) returned 1 [0207.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x20ffe8 [0207.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0207.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffe8 | out: hHeap=0x1f0000) returned 1 [0207.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffe8 [0207.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0207.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210000 | out: hHeap=0x1f0000) returned 1 [0207.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210000 [0207.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x2051f0 [0207.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210000 | out: hHeap=0x1f0000) returned 1 [0207.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205130 [0207.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2051f0 | out: hHeap=0x1f0000) returned 1 [0207.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffe8 | out: hHeap=0x1f0000) returned 1 [0207.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205150 [0207.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2609a0 [0207.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205150 | out: hHeap=0x1f0000) returned 1 [0207.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x205150 [0207.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0207.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205130 | out: hHeap=0x1f0000) returned 1 [0207.953] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x205130 [0207.953] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x2065f8 [0207.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205130 | out: hHeap=0x1f0000) returned 1 [0207.953] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2609a0 [0207.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2065f8 | out: hHeap=0x1f0000) returned 1 [0207.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205150 | out: hHeap=0x1f0000) returned 1 [0207.953] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c630 [0207.953] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x20ffe8 [0207.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c630 | out: hHeap=0x1f0000) returned 1 [0207.953] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210000 [0207.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffe8 | out: hHeap=0x1f0000) returned 1 [0207.953] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x205130 [0207.954] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210000 | out: hHeap=0x1f0000) returned 1 [0207.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206808 [0207.954] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205130 | out: hHeap=0x1f0000) returned 1 [0207.954] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206808 | out: hHeap=0x1f0000) returned 1 [0207.954] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0207.954] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0207.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0207.954] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0207.954] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0207.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0207.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605b8 [0207.954] CryptAcquireContextA (in: phProv=0x173e7b0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e7b0*=0x211ae0) returned 1 [0207.958] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2605b8 | out: pbBuffer=0x2605b8) returned 1 [0207.958] CryptReleaseContext (hProv=0x211ae0, dwFlags=0x0) returned 1 [0207.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0207.958] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2609a0 [0207.958] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2606a8 [0207.958] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2f0 [0207.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0207.958] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0207.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0207.958] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x263bd0 [0207.958] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffe8 [0207.958] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x2359d8 [0207.959] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2609a0 [0207.959] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x217038 [0207.959] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205130 [0207.959] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235c48 [0207.959] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2604f0 [0207.959] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x234b90 [0207.959] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c630 [0207.959] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0207.959] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210000 [0207.959] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c640 [0207.959] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260518 [0207.959] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0207.959] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0207.960] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0207.960] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c640 | out: hHeap=0x1f0000) returned 1 [0207.960] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210000 | out: hHeap=0x1f0000) returned 1 [0207.960] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0207.960] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c630 | out: hHeap=0x1f0000) returned 1 [0207.960] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b90 | out: hHeap=0x1f0000) returned 1 [0207.960] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0207.960] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235c48 | out: hHeap=0x1f0000) returned 1 [0207.960] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x21d2f0 [0207.960] GetLastError () returned 0x0 [0207.960] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x21d2f0 [0207.960] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0207.960] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0207.961] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0207.961] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0207.961] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0207.961] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0208.416] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x24ea00 [0208.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x264c08 [0208.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0208.417] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0208.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0208.418] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0208.418] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x220a58 [0208.418] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0208.418] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0208.419] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fa88 [0208.419] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x267598 [0208.419] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x223f28 [0208.420] QueryPerformanceCounter (in: lpPerformanceCount=0x173e300 | out: lpPerformanceCount=0x173e300*=36578872761) returned 1 [0208.420] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e340 | out: lpSystemTimeAsFileTime=0x173e340) [0208.421] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x21c4c0 [0208.421] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0208.421] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e30 [0208.422] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e30 | out: hHeap=0x1f0000) returned 1 [0208.422] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0208.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0208.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d90 [0208.423] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d90 | out: hHeap=0x1f0000) returned 1 [0208.423] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0208.423] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c4c0 | out: hHeap=0x1f0000) returned 1 [0208.424] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0208.424] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x1ff058 [0208.424] GetLastError () returned 0x0 [0208.424] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0208.424] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0208.424] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0208.425] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2604f0 [0208.425] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260860 [0208.425] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0208.425] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0208.426] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260518 [0208.426] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0208.426] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x238bb8 [0208.427] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0208.427] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0208.428] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0208.428] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x20d888 [0208.428] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0208.428] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260540 [0208.428] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2605b8 [0208.429] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0208.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0208.429] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0208.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0208.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x236cf8 [0208.429] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236cf8 | out: hHeap=0x1f0000) returned 1 [0208.429] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0208.429] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20d888 | out: hHeap=0x1f0000) returned 1 [0208.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101e0 [0208.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2349c8 [0208.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260748 [0208.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260798 [0208.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260540 [0208.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260568 [0208.430] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260798 | out: hHeap=0x1f0000) returned 1 [0208.430] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0208.430] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0208.430] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2605b8 [0208.430] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2605e0 [0208.430] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0208.430] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0208.430] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605e0 | out: hHeap=0x1f0000) returned 1 [0208.430] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206808 [0208.430] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x230c10 [0208.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230c10 | out: hHeap=0x1f0000) returned 1 [0208.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206808 | out: hHeap=0x1f0000) returned 1 [0208.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0208.431] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2850b8 [0208.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0208.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0208.431] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204cb0 [0208.432] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x285b20 [0208.432] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x286900 [0208.432] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0208.432] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x285308 [0208.432] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286900 | out: hHeap=0x1f0000) returned 1 [0208.432] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0208.432] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0208.432] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2349c8 | out: hHeap=0x1f0000) returned 1 [0208.432] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285b20 | out: hHeap=0x1f0000) returned 1 [0208.432] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cb0 | out: hHeap=0x1f0000) returned 1 [0208.432] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0208.432] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0208.432] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x285430 [0208.432] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285430 | out: hHeap=0x1f0000) returned 1 [0208.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238bb8 | out: hHeap=0x1f0000) returned 1 [0208.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0208.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2850b8 | out: hHeap=0x1f0000) returned 1 [0208.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0208.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0208.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0208.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0208.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0208.433] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x286460 [0208.433] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x285fc0 [0208.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286460 | out: hHeap=0x1f0000) returned 1 [0208.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285fc0 | out: hHeap=0x1f0000) returned 1 [0208.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285308 | out: hHeap=0x1f0000) returned 1 [0208.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0208.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220a58 | out: hHeap=0x1f0000) returned 1 [0208.434] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24ea00 | out: hHeap=0x1f0000) returned 1 [0208.434] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x224040 [0208.434] GetLastError () returned 0x0 [0208.434] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\RGB9Rast_x86.msi.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x86.msi.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e6b0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8 [0208.434] GetFileType (hFile=0x1c8) returned 0x1 [0208.435] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28efd8 [0208.435] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e638 | out: lpNewFilePointer=0x0) returned 1 [0208.435] GetLastError () returned 0xb7 [0208.435] CloseHandle (hObject=0x1c8) returned 1 [0208.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c4e0 | out: hHeap=0x1f0000) returned 1 [0208.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c4c0 | out: hHeap=0x1f0000) returned 1 [0208.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x264c08 | out: hHeap=0x1f0000) returned 1 [0208.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0208.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0208.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205130 | out: hHeap=0x1f0000) returned 1 [0208.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2359d8 | out: hHeap=0x1f0000) returned 1 [0208.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffe8 | out: hHeap=0x1f0000) returned 1 [0208.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263bd0 | out: hHeap=0x1f0000) returned 1 [0208.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224040 | out: hHeap=0x1f0000) returned 1 [0208.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0208.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0208.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x267598 | out: hHeap=0x1f0000) returned 1 [0208.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223f28 | out: hHeap=0x1f0000) returned 1 [0208.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0208.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5a0 | out: hHeap=0x1f0000) returned 1 [0208.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffd0 | out: hHeap=0x1f0000) returned 1 [0208.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0208.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c620 | out: hHeap=0x1f0000) returned 1 [0208.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffb8 | out: hHeap=0x1f0000) returned 1 [0208.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608b0 | out: hHeap=0x1f0000) returned 1 [0208.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5c0 | out: hHeap=0x1f0000) returned 1 [0208.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2231b8 | out: hHeap=0x1f0000) returned 1 [0208.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0208.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0208.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b30 | out: hHeap=0x1f0000) returned 1 [0208.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0208.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0208.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234860 | out: hHeap=0x1f0000) returned 1 [0208.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c560 | out: hHeap=0x1f0000) returned 1 [0208.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c6c0 | out: hHeap=0x1f0000) returned 1 [0208.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x23adb0 | out: hHeap=0x1f0000) returned 1 [0208.437] CloseHandle (hObject=0x228) returned 1 [0208.438] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c590 | out: hHeap=0x1f0000) returned 1 [0208.438] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c700 | out: hHeap=0x1f0000) returned 1 [0208.438] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20dd00 | out: hHeap=0x1f0000) returned 1 [0208.438] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24ce10 | out: hHeap=0x1f0000) returned 1 [0208.438] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff70 | out: hHeap=0x1f0000) returned 1 [0208.438] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2052f0 | out: hHeap=0x1f0000) returned 1 [0208.438] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x23bdb8 | out: hHeap=0x1f0000) returned 1 [0208.438] CloseHandle (hObject=0x210) returned 1 [0208.438] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c580 | out: hHeap=0x1f0000) returned 1 [0208.439] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c570 | out: hHeap=0x1f0000) returned 1 [0208.439] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2624f0 | out: hHeap=0x1f0000) returned 1 [0208.439] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205290 | out: hHeap=0x1f0000) returned 1 [0208.439] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b018 | out: hHeap=0x1f0000) returned 1 [0208.439] CloseHandle (hObject=0x1cc) returned 1 [0208.439] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c6b0 | out: hHeap=0x1f0000) returned 1 [0208.439] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c6d0 | out: hHeap=0x1f0000) returned 1 [0208.439] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261f30 | out: hHeap=0x1f0000) returned 1 [0208.439] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c670 | out: hHeap=0x1f0000) returned 1 [0208.439] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5e0 | out: hHeap=0x1f0000) returned 1 [0208.439] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c710 | out: hHeap=0x1f0000) returned 1 [0208.439] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c720 | out: hHeap=0x1f0000) returned 1 [0208.439] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2648e8 | out: hHeap=0x1f0000) returned 1 [0208.439] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x26fad0 | out: hHeap=0x1f0000) returned 1 [0208.440] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2244a0 | out: hHeap=0x1f0000) returned 1 [0208.440] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206958 | out: hHeap=0x1f0000) returned 1 [0208.440] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210090 | out: hHeap=0x1f0000) returned 1 [0208.440] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20fef8 | out: hHeap=0x1f0000) returned 1 [0208.440] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f5d8 | out: hHeap=0x1f0000) returned 1 [0208.440] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x26aeb0 | out: hHeap=0x1f0000) returned 1 [0208.440] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224158 | out: hHeap=0x1f0000) returned 1 [0208.440] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0208.440] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263968 | out: hHeap=0x1f0000) returned 1 [0208.440] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226ec0 | out: hHeap=0x1f0000) returned 1 [0208.440] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234980 | out: hHeap=0x1f0000) returned 1 [0208.440] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604c8 | out: hHeap=0x1f0000) returned 1 [0208.440] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\RGB9Rast_x86.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x86.msi")) returned 1 [0208.442] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x13148, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.exe", cAlternateFileName="")) returned 1 [0208.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260798 [0208.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1ff058 [0208.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x263b78 [0208.442] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1ff058 | out: hHeap=0x1f0000) returned 1 [0208.442] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263910 | out: hHeap=0x1f0000) returned 1 [0208.442] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260798 | out: hHeap=0x1f0000) returned 1 [0208.442] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Setup.exe" (normalized: "c:\\588bce7c90097ed212\\setup.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc [0208.443] GetFileType (hFile=0x1cc) returned 0x1 [0208.443] CloseHandle (hObject=0x1cc) returned 1 [0208.443] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2640f8 [0208.443] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Setup.exe" (normalized: "c:\\588bce7c90097ed212\\setup.exe"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x13148)) returned 1 [0208.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2640f8 | out: hHeap=0x1f0000) returned 1 [0208.444] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x263bd0 [0208.444] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Setup.exe" (normalized: "c:\\588bce7c90097ed212\\setup.exe"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x13148)) returned 1 [0208.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263bd0 | out: hHeap=0x1f0000) returned 1 [0208.444] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2638b8 [0208.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2638b8 | out: hHeap=0x1f0000) returned 1 [0208.444] GetLastError () returned 0x0 [0208.444] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbea8c20d, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xbea8c20d, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xc0a8e991, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xc526b, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupEngine.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="SETUPE~1.ODV")) returned 1 [0208.444] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219f90 [0208.444] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1ff058 [0208.444] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x2007c8 [0208.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1ff058 | out: hHeap=0x1f0000) returned 1 [0208.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263b78 | out: hHeap=0x1f0000) returned 1 [0208.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219f90 | out: hHeap=0x1f0000) returned 1 [0208.445] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\SetupEngine.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\setupengine.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc [0208.445] GetFileType (hFile=0x1cc) returned 0x1 [0208.445] CloseHandle (hObject=0x1cc) returned 1 [0208.446] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x2008a0 [0208.446] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\SetupEngine.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\setupengine.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbea8c20d, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xbea8c20d, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xc0a8e991, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xc526b)) returned 1 [0208.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2008a0 | out: hHeap=0x1f0000) returned 1 [0208.446] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x2008a0 [0208.446] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\SetupEngine.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\setupengine.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbea8c20d, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xbea8c20d, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xc0a8e991, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xc526b)) returned 1 [0208.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2008a0 | out: hHeap=0x1f0000) returned 1 [0208.446] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x200978 [0208.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x200978 | out: hHeap=0x1f0000) returned 1 [0208.446] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe8e80a8, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xbe8e80a8, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xbfe75145, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x48263, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupUi.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="SETUPU~1.ODV")) returned 1 [0208.447] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a818 [0208.447] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1ff058 [0208.447] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x2008a0 [0208.447] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1ff058 | out: hHeap=0x1f0000) returned 1 [0208.447] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2007c8 | out: hHeap=0x1f0000) returned 1 [0208.447] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a818 | out: hHeap=0x1f0000) returned 1 [0208.447] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\SetupUi.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\setupui.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc [0208.447] GetFileType (hFile=0x1cc) returned 0x1 [0208.448] CloseHandle (hObject=0x1cc) returned 1 [0208.448] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x2007c8 [0208.448] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\SetupUi.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\setupui.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe8e80a8, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xbe8e80a8, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xbfe75145, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x48263)) returned 1 [0208.448] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2007c8 | out: hHeap=0x1f0000) returned 1 [0208.448] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x2007c8 [0208.448] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\SetupUi.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\setupui.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe8e80a8, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xbe8e80a8, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xbfe75145, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x48263)) returned 1 [0208.449] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2007c8 | out: hHeap=0x1f0000) returned 1 [0208.449] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x2007c8 [0208.449] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2007c8 | out: hHeap=0x1f0000) returned 1 [0208.449] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5381000, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x5381000, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x5381000, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x75a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupUi.xsd", cAlternateFileName="")) returned 1 [0208.449] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0208.449] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1ff058 [0208.449] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2640f8 [0208.449] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1ff058 | out: hHeap=0x1f0000) returned 1 [0208.449] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2008a0 | out: hHeap=0x1f0000) returned 1 [0208.449] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0208.449] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\SetupUi.xsd" (normalized: "c:\\588bce7c90097ed212\\setupui.xsd"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc [0208.450] GetFileType (hFile=0x1cc) returned 0x1 [0208.450] CloseHandle (hObject=0x1cc) returned 1 [0208.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x264258 [0208.450] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\SetupUi.xsd" (normalized: "c:\\588bce7c90097ed212\\setupui.xsd"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5381000, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x5381000, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x5381000, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x75a8)) returned 1 [0208.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x264258 | out: hHeap=0x1f0000) returned 1 [0208.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x263808 [0208.451] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\SetupUi.xsd" (normalized: "c:\\588bce7c90097ed212\\setupui.xsd"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5381000, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x5381000, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x5381000, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x75a8)) returned 1 [0208.451] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263808 | out: hHeap=0x1f0000) returned 1 [0208.451] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x264200 [0208.451] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x264200 | out: hHeap=0x1f0000) returned 1 [0208.451] GetLastError () returned 0x0 [0208.451] CryptAcquireContextA (in: phProv=0x173e7b0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e7b0*=0x2129c0) returned 1 [0208.453] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x260540 | out: pbBuffer=0x260540) returned 1 [0208.453] CryptReleaseContext (hProv=0x2129c0, dwFlags=0x0) returned 1 [0208.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0208.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x269ba8 [0208.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2246d0 [0208.454] QueryPerformanceCounter (in: lpPerformanceCount=0x173e744 | out: lpPerformanceCount=0x173e744*=36582266971) returned 1 [0208.454] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e784 | out: lpSystemTimeAsFileTime=0x173e784) [0208.454] QueryPerformanceCounter (in: lpPerformanceCount=0x173e744 | out: lpPerformanceCount=0x173e744*=36582289419) returned 1 [0208.454] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e784 | out: lpSystemTimeAsFileTime=0x173e784) [0208.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x2282a0 [0208.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x2688a0 [0208.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x224388 [0208.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x24f5d8 [0208.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffb8 [0208.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2068c8 [0208.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210090 [0208.455] GetLastError () returned 0x0 [0208.455] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\SetupUi.xsd.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\setupui.xsd.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e650, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc [0208.455] GetFileType (hFile=0x1cc) returned 0x1 [0208.456] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c580 [0208.456] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c700 [0208.456] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\SetupUi.xsd" (normalized: "c:\\588bce7c90097ed212\\setupui.xsd"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e680, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0208.456] GetFileType (hFile=0x210) returned 0x1 [0208.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x2051f0 [0208.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205210 [0208.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x262b68 [0208.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c590 [0208.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c5e0 [0208.458] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\SetupUi.xsd.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\setupui.xsd.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e5cc, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x228 [0208.458] GetFileType (hFile=0x228) returned 0x1 [0208.458] GetLastError () returned 0xb7 [0208.458] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\SetupUi.xsd.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\setupui.xsd.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e5cc, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8 [0208.458] GetFileType (hFile=0x1c8) returned 0x1 [0208.459] GetLastError () returned 0xb7 [0208.459] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\SetupUi.xsd" (normalized: "c:\\588bce7c90097ed212\\setupui.xsd"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e5c4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0208.459] GetFileType (hFile=0x1ac) returned 0x1 [0208.459] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x288fa8 [0208.459] ReadFile (in: hFile=0x1ac, lpBuffer=0x288fa8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e520, lpOverlapped=0x0 | out: lpBuffer=0x288fa8*, lpNumberOfBytesRead=0x173e520*=0x1000, lpOverlapped=0x0) returned 1 [0208.721] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24d620 [0208.722] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28cfc8 [0208.723] GetLastError () returned 0x0 [0208.725] CloseHandle (hObject=0x1cc) returned 1 [0208.727] CloseHandle (hObject=0x210) returned 1 [0208.728] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c3a0 [0208.728] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c430 [0208.728] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\SetupUi.xsd" (normalized: "c:\\588bce7c90097ed212\\setupui.xsd"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e680, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0208.730] GetFileType (hFile=0x210) returned 0x1 [0208.731] GetLastError () returned 0xb7 [0208.732] CloseHandle (hObject=0x210) returned 1 [0208.732] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\SetupUi.xsd" (normalized: "c:\\588bce7c90097ed212\\setupui.xsd")) returned 0 [0208.733] GetLastError () returned 0x20 [0208.733] GetLastError () returned 0x20 [0208.733] CryptAcquireContextA (in: phProv=0x173e7b0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e7b0*=0x212470) returned 1 [0209.293] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x260798 | out: pbBuffer=0x260798) returned 1 [0209.293] CryptReleaseContext (hProv=0x212470, dwFlags=0x0) returned 1 [0209.293] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260798 | out: hHeap=0x1f0000) returned 1 [0209.293] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260748 [0209.293] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260978 [0209.293] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238a78 [0209.293] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0209.293] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0209.293] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a78 | out: hHeap=0x1f0000) returned 1 [0209.293] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2642b0 [0209.293] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffd0 [0209.293] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x235970 [0209.293] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260748 [0209.294] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x229528 [0209.294] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x2052f0 [0209.294] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2360c0 [0209.294] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260540 [0209.294] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x22b018 [0209.294] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c570 [0209.294] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260798 [0209.294] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210078 [0209.294] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c690 [0209.294] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0209.294] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffe8 [0209.294] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffe8 | out: hHeap=0x1f0000) returned 1 [0209.294] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0209.294] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c690 | out: hHeap=0x1f0000) returned 1 [0209.294] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210078 | out: hHeap=0x1f0000) returned 1 [0209.294] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260798 | out: hHeap=0x1f0000) returned 1 [0209.295] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c570 | out: hHeap=0x1f0000) returned 1 [0209.295] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b018 | out: hHeap=0x1f0000) returned 1 [0209.295] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0209.295] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2360c0 | out: hHeap=0x1f0000) returned 1 [0209.295] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238928 [0209.295] GetLastError () returned 0x0 [0209.295] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e340 | out: lpSystemTimeAsFileTime=0x173e340) [0209.295] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x21c570 [0209.295] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260798 [0209.296] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205150 [0209.296] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205150 | out: hHeap=0x1f0000) returned 1 [0209.296] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260798 | out: hHeap=0x1f0000) returned 1 [0209.296] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260798 [0209.296] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205150 [0209.296] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205150 | out: hHeap=0x1f0000) returned 1 [0209.296] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260798 | out: hHeap=0x1f0000) returned 1 [0209.296] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c570 | out: hHeap=0x1f0000) returned 1 [0209.296] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0209.296] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238810 [0209.296] GetLastError () returned 0x0 [0209.296] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\SetupUi.xsd.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\setupui.xsd.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e6b0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0209.297] GetFileType (hFile=0x220) returned 0x1 [0209.297] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x286f98 [0209.297] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e638 | out: lpNewFilePointer=0x0) returned 1 [0209.297] GetLastError () returned 0xb7 [0209.297] CloseHandle (hObject=0x220) returned 1 [0209.298] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c650 | out: hHeap=0x1f0000) returned 1 [0209.298] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c570 | out: hHeap=0x1f0000) returned 1 [0209.298] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237b90 | out: hHeap=0x1f0000) returned 1 [0209.298] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229528 | out: hHeap=0x1f0000) returned 1 [0209.298] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0209.298] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2052f0 | out: hHeap=0x1f0000) returned 1 [0209.298] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235970 | out: hHeap=0x1f0000) returned 1 [0209.298] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffd0 | out: hHeap=0x1f0000) returned 1 [0209.298] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2642b0 | out: hHeap=0x1f0000) returned 1 [0209.298] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223e10 | out: hHeap=0x1f0000) returned 1 [0209.298] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0209.298] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0209.299] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x26aeb0 | out: hHeap=0x1f0000) returned 1 [0209.299] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224900 | out: hHeap=0x1f0000) returned 1 [0209.299] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0209.299] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c420 | out: hHeap=0x1f0000) returned 1 [0209.299] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20fef8 | out: hHeap=0x1f0000) returned 1 [0209.299] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605e0 | out: hHeap=0x1f0000) returned 1 [0209.299] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c4b0 | out: hHeap=0x1f0000) returned 1 [0209.299] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0209.299] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604c8 | out: hHeap=0x1f0000) returned 1 [0209.299] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c460 | out: hHeap=0x1f0000) returned 1 [0209.299] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220a58 | out: hHeap=0x1f0000) returned 1 [0209.299] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0209.299] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235d80 | out: hHeap=0x1f0000) returned 1 [0209.299] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234740 | out: hHeap=0x1f0000) returned 1 [0209.299] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0209.300] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0209.300] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346f8 | out: hHeap=0x1f0000) returned 1 [0209.300] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c430 | out: hHeap=0x1f0000) returned 1 [0209.300] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c3a0 | out: hHeap=0x1f0000) returned 1 [0209.300] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x288fa8 | out: hHeap=0x1f0000) returned 1 [0209.300] CloseHandle (hObject=0x1ac) returned 1 [0209.300] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c720 | out: hHeap=0x1f0000) returned 1 [0209.301] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c710 | out: hHeap=0x1f0000) returned 1 [0209.301] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20dd00 | out: hHeap=0x1f0000) returned 1 [0209.301] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24d620 | out: hHeap=0x1f0000) returned 1 [0209.301] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0209.301] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205130 | out: hHeap=0x1f0000) returned 1 [0209.301] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28cfc8 | out: hHeap=0x1f0000) returned 1 [0209.301] CloseHandle (hObject=0x1c8) returned 1 [0209.301] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c6d0 | out: hHeap=0x1f0000) returned 1 [0209.301] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c6c0 | out: hHeap=0x1f0000) returned 1 [0209.301] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261a28 | out: hHeap=0x1f0000) returned 1 [0209.301] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205290 | out: hHeap=0x1f0000) returned 1 [0209.301] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x264c08 | out: hHeap=0x1f0000) returned 1 [0209.302] CloseHandle (hObject=0x228) returned 1 [0209.302] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5e0 | out: hHeap=0x1f0000) returned 1 [0209.302] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c590 | out: hHeap=0x1f0000) returned 1 [0209.302] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262b68 | out: hHeap=0x1f0000) returned 1 [0209.302] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c700 | out: hHeap=0x1f0000) returned 1 [0209.302] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c580 | out: hHeap=0x1f0000) returned 1 [0209.302] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c6b0 | out: hHeap=0x1f0000) returned 1 [0209.302] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c670 | out: hHeap=0x1f0000) returned 1 [0209.303] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2350f8 | out: hHeap=0x1f0000) returned 1 [0209.303] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2688a0 | out: hHeap=0x1f0000) returned 1 [0209.303] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224388 | out: hHeap=0x1f0000) returned 1 [0209.303] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2068c8 | out: hHeap=0x1f0000) returned 1 [0209.303] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210090 | out: hHeap=0x1f0000) returned 1 [0209.303] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffb8 | out: hHeap=0x1f0000) returned 1 [0209.303] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f5d8 | out: hHeap=0x1f0000) returned 1 [0209.303] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x269ba8 | out: hHeap=0x1f0000) returned 1 [0209.303] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2246d0 | out: hHeap=0x1f0000) returned 1 [0209.303] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1ff058 | out: hHeap=0x1f0000) returned 1 [0209.303] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2639c0 | out: hHeap=0x1f0000) returned 1 [0209.303] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2271f0 | out: hHeap=0x1f0000) returned 1 [0209.304] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234980 | out: hHeap=0x1f0000) returned 1 [0209.304] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0209.304] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\SetupUi.xsd" (normalized: "c:\\588bce7c90097ed212\\setupui.xsd")) returned 1 [0209.306] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x6519be00, ftCreationTime.dwHighDateTime=0x1cac6d5, ftLastAccessTime.dwLowDateTime=0x6519be00, ftLastAccessTime.dwHighDateTime=0x1cac6d5, ftLastWriteTime.dwLowDateTime=0x6519be00, ftLastWriteTime.dwHighDateTime=0x1cac6d5, nFileSizeHigh=0x0, nFileSizeLow=0x17758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupUtility.exe", cAlternateFileName="SETUPU~1.EXE")) returned 1 [0209.306] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0209.306] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1ff058 [0209.306] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x263ac8 [0209.306] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1ff058 | out: hHeap=0x1f0000) returned 1 [0209.306] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2640f8 | out: hHeap=0x1f0000) returned 1 [0209.307] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0209.307] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\SetupUtility.exe" (normalized: "c:\\588bce7c90097ed212\\setuputility.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x228 [0209.308] GetFileType (hFile=0x228) returned 0x1 [0209.308] CloseHandle (hObject=0x228) returned 1 [0209.309] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x263a70 [0209.309] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\SetupUtility.exe" (normalized: "c:\\588bce7c90097ed212\\setuputility.exe"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x6519be00, ftCreationTime.dwHighDateTime=0x1cac6d5, ftLastAccessTime.dwLowDateTime=0x6519be00, ftLastAccessTime.dwHighDateTime=0x1cac6d5, ftLastWriteTime.dwLowDateTime=0x6519be00, ftLastWriteTime.dwHighDateTime=0x1cac6d5, nFileSizeHigh=0x0, nFileSizeLow=0x17758)) returned 1 [0209.309] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263a70 | out: hHeap=0x1f0000) returned 1 [0209.309] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2641a8 [0209.309] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\SetupUtility.exe" (normalized: "c:\\588bce7c90097ed212\\setuputility.exe"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x6519be00, ftCreationTime.dwHighDateTime=0x1cac6d5, ftLastAccessTime.dwLowDateTime=0x6519be00, ftLastAccessTime.dwHighDateTime=0x1cac6d5, ftLastWriteTime.dwLowDateTime=0x6519be00, ftLastWriteTime.dwHighDateTime=0x1cac6d5, nFileSizeHigh=0x0, nFileSizeLow=0x17758)) returned 1 [0209.309] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2641a8 | out: hHeap=0x1f0000) returned 1 [0209.310] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2641a8 [0209.310] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2641a8 | out: hHeap=0x1f0000) returned 1 [0209.310] GetLastError () returned 0x0 [0209.310] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0xa078, dwReserved0=0x0, dwReserved1=0x0, cFileName="SplashScreen.bmp", cAlternateFileName="SPLASH~1.BMP")) returned 1 [0209.310] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0209.310] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1ff058 [0209.310] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x264150 [0209.310] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1ff058 | out: hHeap=0x1f0000) returned 1 [0209.311] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263ac8 | out: hHeap=0x1f0000) returned 1 [0209.311] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0209.311] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\SplashScreen.bmp" (normalized: "c:\\588bce7c90097ed212\\splashscreen.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x228 [0209.312] GetFileType (hFile=0x228) returned 0x1 [0209.312] CloseHandle (hObject=0x228) returned 1 [0209.313] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x263a18 [0209.313] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\SplashScreen.bmp" (normalized: "c:\\588bce7c90097ed212\\splashscreen.bmp"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0xa078)) returned 1 [0209.313] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263a18 | out: hHeap=0x1f0000) returned 1 [0209.313] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x263c28 [0209.313] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\SplashScreen.bmp" (normalized: "c:\\588bce7c90097ed212\\splashscreen.bmp"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0xa078)) returned 1 [0209.314] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263c28 | out: hHeap=0x1f0000) returned 1 [0209.314] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2642b0 [0209.314] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2642b0 | out: hHeap=0x1f0000) returned 1 [0209.314] GetLastError () returned 0x0 [0209.314] CryptAcquireContextA (in: phProv=0x173e7b0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e7b0*=0x212250) returned 1 [0209.318] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2605b8 | out: pbBuffer=0x2605b8) returned 1 [0209.319] CryptReleaseContext (hProv=0x212250, dwFlags=0x0) returned 1 [0209.319] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0209.319] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x264f88 [0209.319] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x224388 [0209.319] QueryPerformanceCounter (in: lpPerformanceCount=0x173e744 | out: lpPerformanceCount=0x173e744*=36668809558) returned 1 [0209.319] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e784 | out: lpSystemTimeAsFileTime=0x173e784) [0209.320] QueryPerformanceCounter (in: lpPerformanceCount=0x173e744 | out: lpPerformanceCount=0x173e744*=36668852547) returned 1 [0209.320] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e784 | out: lpSystemTimeAsFileTime=0x173e784) [0209.320] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x1ff058 [0209.320] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x26e7c8 [0209.321] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x223e10 [0209.321] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x24f5d8 [0209.321] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210078 [0209.321] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206658 [0209.321] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20fef8 [0209.321] GetLastError () returned 0x0 [0209.322] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\SplashScreen.bmp.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\splashscreen.bmp.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e650, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x228 [0209.322] GetFileType (hFile=0x228) returned 0x1 [0209.323] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c670 [0209.323] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c580 [0209.324] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\SplashScreen.bmp" (normalized: "c:\\588bce7c90097ed212\\splashscreen.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e680, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8 [0209.324] GetFileType (hFile=0x1c8) returned 0x1 [0209.324] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205290 [0209.324] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205130 [0209.325] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x262b68 [0209.325] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c620 [0209.325] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c700 [0209.325] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\SplashScreen.bmp.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\splashscreen.bmp.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e5cc, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0209.326] GetFileType (hFile=0x1ac) returned 0x1 [0209.326] GetLastError () returned 0xb7 [0209.326] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\SplashScreen.bmp.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\splashscreen.bmp.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e5cc, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0209.326] GetFileType (hFile=0x220) returned 0x1 [0209.326] GetLastError () returned 0xb7 [0209.327] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\SplashScreen.bmp" (normalized: "c:\\588bce7c90097ed212\\splashscreen.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e5c4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0209.327] GetFileType (hFile=0x224) returned 0x1 [0209.327] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x287fa0 [0209.327] ReadFile (in: hFile=0x224, lpBuffer=0x287fa0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e520, lpOverlapped=0x0 | out: lpBuffer=0x287fa0*, lpNumberOfBytesRead=0x173e520*=0x1000, lpOverlapped=0x0) returned 1 [0209.698] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24a5c0 [0209.698] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28ffe0 [0209.698] GetLastError () returned 0x0 [0209.702] CloseHandle (hObject=0x228) returned 1 [0209.707] CloseHandle (hObject=0x1c8) returned 1 [0209.708] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x206460 [0209.708] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x206450 [0209.708] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\SplashScreen.bmp" (normalized: "c:\\588bce7c90097ed212\\splashscreen.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e680, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8 [0209.710] GetFileType (hFile=0x1c8) returned 0x1 [0209.711] GetLastError () returned 0xb7 [0209.713] CloseHandle (hObject=0x1c8) returned 1 [0209.714] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\SplashScreen.bmp" (normalized: "c:\\588bce7c90097ed212\\splashscreen.bmp")) returned 0 [0209.714] GetLastError () returned 0x20 [0209.714] GetLastError () returned 0x20 [0209.714] CryptAcquireContextA (in: phProv=0x173e7b0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e7b0*=0x211fa8) returned 1 [0209.723] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x260ab8 | out: pbBuffer=0x260ab8) returned 1 [0209.723] CryptReleaseContext (hProv=0x211fa8, dwFlags=0x0) returned 1 [0209.723] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ab8 | out: hHeap=0x1f0000) returned 1 [0209.723] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260a40 [0209.723] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260ab8 [0209.723] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282a0 [0209.723] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0209.723] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0209.723] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0209.723] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x263ff0 [0209.723] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2026d0 [0209.723] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x2357d0 [0209.723] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260a40 [0209.723] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x237560 [0209.723] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x2051f0 [0209.724] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2359d8 [0209.724] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260798 [0209.724] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x237770 [0209.724] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a20 [0209.724] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608b0 [0209.724] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2026e8 [0209.724] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ba0 [0209.724] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0209.724] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x234cc8 [0209.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234cc8 | out: hHeap=0x1f0000) returned 1 [0209.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0209.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ba0 | out: hHeap=0x1f0000) returned 1 [0209.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2026e8 | out: hHeap=0x1f0000) returned 1 [0209.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608b0 | out: hHeap=0x1f0000) returned 1 [0209.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a20 | out: hHeap=0x1f0000) returned 1 [0209.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237770 | out: hHeap=0x1f0000) returned 1 [0209.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260798 | out: hHeap=0x1f0000) returned 1 [0209.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2359d8 | out: hHeap=0x1f0000) returned 1 [0209.725] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x2282a0 [0209.725] GetLastError () returned 0x0 [0210.040] GetSystemTimePreciseAsFileTime (lpSystemTimeAsFileTime=0x173e340) [0210.040] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e340 | out: lpSystemTimeAsFileTime=0x173e340) [0210.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238b20 [0210.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0210.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0210.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d70 | out: hHeap=0x1f0000) returned 1 [0210.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0210.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608b0 [0210.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e50 [0210.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e50 | out: hHeap=0x1f0000) returned 1 [0210.041] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608b0 | out: hHeap=0x1f0000) returned 1 [0210.041] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b20 | out: hHeap=0x1f0000) returned 1 [0210.041] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0210.041] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x234de8 [0210.041] GetLastError () returned 0x0 [0210.041] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\SplashScreen.bmp.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\splashscreen.bmp.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e6b0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0210.041] GetFileType (hFile=0x1c0) returned 0x1 [0210.042] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x290fe8 [0210.042] SetFilePointerEx (in: hFile=0x1c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e638 | out: lpNewFilePointer=0x0) returned 1 [0210.042] GetLastError () returned 0xb7 [0210.042] CloseHandle (hObject=0x1c0) returned 1 [0210.043] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b60 | out: hHeap=0x1f0000) returned 1 [0210.043] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b70 | out: hHeap=0x1f0000) returned 1 [0210.043] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236e28 | out: hHeap=0x1f0000) returned 1 [0210.043] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237560 | out: hHeap=0x1f0000) returned 1 [0210.043] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0210.043] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2051f0 | out: hHeap=0x1f0000) returned 1 [0210.043] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2357d0 | out: hHeap=0x1f0000) returned 1 [0210.043] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2026d0 | out: hHeap=0x1f0000) returned 1 [0210.043] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263ff0 | out: hHeap=0x1f0000) returned 1 [0210.043] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223f28 | out: hHeap=0x1f0000) returned 1 [0210.043] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ab8 | out: hHeap=0x1f0000) returned 1 [0210.043] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0210.044] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x269ba8 | out: hHeap=0x1f0000) returned 1 [0210.044] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224a18 | out: hHeap=0x1f0000) returned 1 [0210.044] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1ff058 | out: hHeap=0x1f0000) returned 1 [0210.044] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206470 | out: hHeap=0x1f0000) returned 1 [0210.044] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0210.044] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0210.044] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a10 | out: hHeap=0x1f0000) returned 1 [0210.044] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0210.044] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0210.044] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2064e0 | out: hHeap=0x1f0000) returned 1 [0210.044] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237980 | out: hHeap=0x1f0000) returned 1 [0210.044] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0210.044] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235d80 | out: hHeap=0x1f0000) returned 1 [0210.044] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2349c8 | out: hHeap=0x1f0000) returned 1 [0210.044] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a68 | out: hHeap=0x1f0000) returned 1 [0210.044] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0210.044] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346f8 | out: hHeap=0x1f0000) returned 1 [0210.044] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206450 | out: hHeap=0x1f0000) returned 1 [0210.045] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206460 | out: hHeap=0x1f0000) returned 1 [0210.045] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x287fa0 | out: hHeap=0x1f0000) returned 1 [0210.045] CloseHandle (hObject=0x224) returned 1 [0210.045] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c630 | out: hHeap=0x1f0000) returned 1 [0210.045] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c710 | out: hHeap=0x1f0000) returned 1 [0210.045] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20dd00 | out: hHeap=0x1f0000) returned 1 [0210.045] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24a5c0 | out: hHeap=0x1f0000) returned 1 [0210.045] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0210.045] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205130 | out: hHeap=0x1f0000) returned 1 [0210.046] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28ffe0 | out: hHeap=0x1f0000) returned 1 [0210.046] CloseHandle (hObject=0x220) returned 1 [0210.046] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c570 | out: hHeap=0x1f0000) returned 1 [0210.046] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c6d0 | out: hHeap=0x1f0000) returned 1 [0210.046] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262e48 | out: hHeap=0x1f0000) returned 1 [0210.046] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205290 | out: hHeap=0x1f0000) returned 1 [0210.046] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229528 | out: hHeap=0x1f0000) returned 1 [0210.046] CloseHandle (hObject=0x1ac) returned 1 [0210.047] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c700 | out: hHeap=0x1f0000) returned 1 [0210.047] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c620 | out: hHeap=0x1f0000) returned 1 [0210.047] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262b68 | out: hHeap=0x1f0000) returned 1 [0210.047] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c580 | out: hHeap=0x1f0000) returned 1 [0210.047] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c670 | out: hHeap=0x1f0000) returned 1 [0210.047] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5e0 | out: hHeap=0x1f0000) returned 1 [0210.047] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c6c0 | out: hHeap=0x1f0000) returned 1 [0210.047] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x264c08 | out: hHeap=0x1f0000) returned 1 [0210.047] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x26e7c8 | out: hHeap=0x1f0000) returned 1 [0210.048] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223e10 | out: hHeap=0x1f0000) returned 1 [0210.048] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206658 | out: hHeap=0x1f0000) returned 1 [0210.048] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20fef8 | out: hHeap=0x1f0000) returned 1 [0210.048] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210078 | out: hHeap=0x1f0000) returned 1 [0210.048] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f5d8 | out: hHeap=0x1f0000) returned 1 [0210.048] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x264f88 | out: hHeap=0x1f0000) returned 1 [0210.048] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224388 | out: hHeap=0x1f0000) returned 1 [0210.048] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0210.048] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2642b0 | out: hHeap=0x1f0000) returned 1 [0210.048] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2271f0 | out: hHeap=0x1f0000) returned 1 [0210.048] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234ae8 | out: hHeap=0x1f0000) returned 1 [0210.048] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605e0 | out: hHeap=0x1f0000) returned 1 [0210.048] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\SplashScreen.bmp" (normalized: "c:\\588bce7c90097ed212\\splashscreen.bmp")) returned 1 [0210.050] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x143bc400, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0x143bc400, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0x143bc400, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x23420, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1 [0210.050] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606f8 [0210.050] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x234f00 [0210.050] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x263ff0 [0210.050] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234f00 | out: hHeap=0x1f0000) returned 1 [0210.050] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x264150 | out: hHeap=0x1f0000) returned 1 [0210.050] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606f8 | out: hHeap=0x1f0000) returned 1 [0210.051] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\sqmapi.dll" (normalized: "c:\\588bce7c90097ed212\\sqmapi.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0210.051] GetFileType (hFile=0x1ac) returned 0x1 [0210.051] CloseHandle (hObject=0x1ac) returned 1 [0210.052] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x263bd0 [0210.052] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\sqmapi.dll" (normalized: "c:\\588bce7c90097ed212\\sqmapi.dll"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x143bc400, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0x143bc400, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0x143bc400, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x23420)) returned 1 [0210.052] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263bd0 | out: hHeap=0x1f0000) returned 1 [0210.052] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x263c28 [0210.052] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\sqmapi.dll" (normalized: "c:\\588bce7c90097ed212\\sqmapi.dll"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x143bc400, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0x143bc400, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0x143bc400, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x23420)) returned 1 [0210.052] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263c28 | out: hHeap=0x1f0000) returned 1 [0210.052] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x263a70 [0210.052] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263a70 | out: hHeap=0x1f0000) returned 1 [0210.052] GetLastError () returned 0x0 [0210.053] CryptAcquireContextA (in: phProv=0x173e7b0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e7b0*=0x211ae0) returned 1 [0210.060] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2604f0 | out: pbBuffer=0x2604f0) returned 1 [0210.061] CryptReleaseContext (hProv=0x211ae0, dwFlags=0x0) returned 1 [0210.061] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0210.061] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x264f88 [0210.061] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x223e10 [0210.061] QueryPerformanceCounter (in: lpPerformanceCount=0x173e744 | out: lpPerformanceCount=0x173e744*=36742982824) returned 1 [0210.061] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e784 | out: lpSystemTimeAsFileTime=0x173e784) [0210.061] QueryPerformanceCounter (in: lpPerformanceCount=0x173e744 | out: lpPerformanceCount=0x173e744*=36743008700) returned 1 [0210.061] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e784 | out: lpSystemTimeAsFileTime=0x173e784) [0210.061] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x234db0 [0210.062] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x2688a0 [0210.062] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x223f28 [0210.062] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x24f5d8 [0210.062] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20fef8 [0210.062] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206838 [0210.062] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210078 [0210.062] GetLastError () returned 0x0 [0210.062] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\sqmapi.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\sqmapi.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e650, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0210.063] GetFileType (hFile=0x1ac) returned 0x1 [0210.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238aa0 [0210.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b60 [0210.065] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\sqmapi.dll" (normalized: "c:\\588bce7c90097ed212\\sqmapi.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e680, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0210.065] GetFileType (hFile=0x220) returned 0x1 [0210.066] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205130 [0210.066] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205150 [0210.066] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x262380 [0210.066] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ae0 [0210.066] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a50 [0210.067] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\sqmapi.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\sqmapi.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e5cc, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0210.067] GetFileType (hFile=0x224) returned 0x1 [0210.067] GetLastError () returned 0xb7 [0210.068] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\sqmapi.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\sqmapi.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e5cc, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0210.068] GetFileType (hFile=0x1c0) returned 0x1 [0210.068] GetLastError () returned 0xb7 [0210.068] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\sqmapi.dll" (normalized: "c:\\588bce7c90097ed212\\sqmapi.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e5c4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0210.069] GetFileType (hFile=0x21c) returned 0x1 [0210.069] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x287fa0 [0210.069] ReadFile (in: hFile=0x21c, lpBuffer=0x287fa0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e520, lpOverlapped=0x0 | out: lpBuffer=0x287fa0*, lpNumberOfBytesRead=0x173e520*=0x1000, lpOverlapped=0x0) returned 1 [0210.416] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24b1d8 [0210.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28afb8 [0210.417] GetLastError () returned 0x0 [0210.640] CloseHandle (hObject=0x1ac) returned 1 [0210.644] CloseHandle (hObject=0x220) returned 1 [0210.645] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389b0 [0210.645] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238830 [0210.646] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\sqmapi.dll" (normalized: "c:\\588bce7c90097ed212\\sqmapi.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e680, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0210.648] GetFileType (hFile=0x220) returned 0x1 [0210.649] GetLastError () returned 0xb7 [0210.650] CloseHandle (hObject=0x220) returned 1 [0210.651] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\sqmapi.dll" (normalized: "c:\\588bce7c90097ed212\\sqmapi.dll")) returned 0 [0210.651] GetLastError () returned 0x20 [0210.651] GetLastError () returned 0x20 [0210.651] CryptAcquireContextA (in: phProv=0x173e7b0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e7b0*=0x212360) returned 1 [0210.657] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x260bf8 | out: pbBuffer=0x260bf8) returned 1 [0210.657] CryptReleaseContext (hProv=0x212360, dwFlags=0x0) returned 1 [0210.657] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0210.657] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2609f0 [0210.657] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260bf8 [0210.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x234bb8 [0210.658] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609f0 | out: hHeap=0x1f0000) returned 1 [0210.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0210.658] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234bb8 | out: hHeap=0x1f0000) returned 1 [0210.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2640f8 [0210.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210258 [0210.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x235b78 [0210.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2609f0 [0210.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x237140 [0210.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ff0 [0210.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235e50 [0210.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2606f8 [0210.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x237038 [0210.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389d0 [0210.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0210.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0210.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238850 [0210.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0210.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0210.659] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0210.659] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0210.659] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238850 | out: hHeap=0x1f0000) returned 1 [0210.659] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0210.660] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0210.660] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389d0 | out: hHeap=0x1f0000) returned 1 [0210.660] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237038 | out: hHeap=0x1f0000) returned 1 [0210.660] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606f8 | out: hHeap=0x1f0000) returned 1 [0210.660] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235e50 | out: hHeap=0x1f0000) returned 1 [0210.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x234c28 [0210.660] GetLastError () returned 0x0 [0210.660] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e340 | out: lpSystemTimeAsFileTime=0x173e340) [0210.661] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x2389d0 [0210.661] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604c8 [0210.661] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205150 [0210.661] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205150 | out: hHeap=0x1f0000) returned 1 [0210.661] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604c8 | out: hHeap=0x1f0000) returned 1 [0210.661] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604c8 [0210.661] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205150 [0210.661] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205150 | out: hHeap=0x1f0000) returned 1 [0210.661] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604c8 | out: hHeap=0x1f0000) returned 1 [0210.662] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389d0 | out: hHeap=0x1f0000) returned 1 [0210.662] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0210.662] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x234ec8 [0210.662] GetLastError () returned 0x0 [0210.662] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\sqmapi.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\sqmapi.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e6b0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0210.662] GetFileType (hFile=0x220) returned 0x1 [0210.663] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28cfc8 [0210.663] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e638 | out: lpNewFilePointer=0x0) returned 1 [0210.663] GetLastError () returned 0xb7 [0210.664] CloseHandle (hObject=0x220) returned 1 [0210.664] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387f0 | out: hHeap=0x1f0000) returned 1 [0210.664] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388b0 | out: hHeap=0x1f0000) returned 1 [0210.664] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237248 | out: hHeap=0x1f0000) returned 1 [0210.664] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237140 | out: hHeap=0x1f0000) returned 1 [0210.665] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609f0 | out: hHeap=0x1f0000) returned 1 [0210.665] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ff0 | out: hHeap=0x1f0000) returned 1 [0210.665] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0210.665] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0210.665] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2640f8 | out: hHeap=0x1f0000) returned 1 [0210.665] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2247e8 | out: hHeap=0x1f0000) returned 1 [0210.665] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0210.665] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0210.665] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x266290 | out: hHeap=0x1f0000) returned 1 [0210.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224040 | out: hHeap=0x1f0000) returned 1 [0210.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234cd0 | out: hHeap=0x1f0000) returned 1 [0210.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388a0 | out: hHeap=0x1f0000) returned 1 [0210.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffe8 | out: hHeap=0x1f0000) returned 1 [0210.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ab8 | out: hHeap=0x1f0000) returned 1 [0210.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389c0 | out: hHeap=0x1f0000) returned 1 [0210.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffd0 | out: hHeap=0x1f0000) returned 1 [0210.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a68 | out: hHeap=0x1f0000) returned 1 [0210.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389a0 | out: hHeap=0x1f0000) returned 1 [0210.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236f30 | out: hHeap=0x1f0000) returned 1 [0210.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0210.667] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0210.667] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234818 | out: hHeap=0x1f0000) returned 1 [0210.667] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0210.667] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0210.667] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234110 | out: hHeap=0x1f0000) returned 1 [0210.667] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238830 | out: hHeap=0x1f0000) returned 1 [0210.667] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389b0 | out: hHeap=0x1f0000) returned 1 [0210.667] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x287fa0 | out: hHeap=0x1f0000) returned 1 [0210.667] CloseHandle (hObject=0x21c) returned 1 [0210.668] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a20 | out: hHeap=0x1f0000) returned 1 [0210.668] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a40 | out: hHeap=0x1f0000) returned 1 [0210.668] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20dd00 | out: hHeap=0x1f0000) returned 1 [0210.668] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24b1d8 | out: hHeap=0x1f0000) returned 1 [0210.668] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffb8 | out: hHeap=0x1f0000) returned 1 [0210.668] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205130 | out: hHeap=0x1f0000) returned 1 [0210.669] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28afb8 | out: hHeap=0x1f0000) returned 1 [0210.669] CloseHandle (hObject=0x1c0) returned 1 [0210.669] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b10 | out: hHeap=0x1f0000) returned 1 [0210.669] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238af0 | out: hHeap=0x1f0000) returned 1 [0210.669] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262718 | out: hHeap=0x1f0000) returned 1 [0210.670] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2052f0 | out: hHeap=0x1f0000) returned 1 [0210.670] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x264c08 | out: hHeap=0x1f0000) returned 1 [0210.670] CloseHandle (hObject=0x224) returned 1 [0210.670] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a50 | out: hHeap=0x1f0000) returned 1 [0210.671] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ae0 | out: hHeap=0x1f0000) returned 1 [0210.671] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262380 | out: hHeap=0x1f0000) returned 1 [0210.671] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b60 | out: hHeap=0x1f0000) returned 1 [0210.671] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238aa0 | out: hHeap=0x1f0000) returned 1 [0210.671] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ac0 | out: hHeap=0x1f0000) returned 1 [0210.671] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a10 | out: hHeap=0x1f0000) returned 1 [0210.671] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220a58 | out: hHeap=0x1f0000) returned 1 [0210.671] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2688a0 | out: hHeap=0x1f0000) returned 1 [0210.671] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223f28 | out: hHeap=0x1f0000) returned 1 [0210.671] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206838 | out: hHeap=0x1f0000) returned 1 [0210.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210078 | out: hHeap=0x1f0000) returned 1 [0210.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20fef8 | out: hHeap=0x1f0000) returned 1 [0210.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f5d8 | out: hHeap=0x1f0000) returned 1 [0210.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x264f88 | out: hHeap=0x1f0000) returned 1 [0210.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223e10 | out: hHeap=0x1f0000) returned 1 [0210.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234c60 | out: hHeap=0x1f0000) returned 1 [0210.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x264150 | out: hHeap=0x1f0000) returned 1 [0210.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f350 | out: hHeap=0x1f0000) returned 1 [0210.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2349c8 | out: hHeap=0x1f0000) returned 1 [0210.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0210.673] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\sqmapi.dll" (normalized: "c:\\588bce7c90097ed212\\sqmapi.dll")) returned 1 [0210.675] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x3704, dwReserved0=0x0, dwReserved1=0x0, cFileName="Strings.xml", cAlternateFileName="")) returned 1 [0210.675] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0210.675] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x234c60 [0210.675] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2639c0 [0210.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234c60 | out: hHeap=0x1f0000) returned 1 [0210.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263ff0 | out: hHeap=0x1f0000) returned 1 [0210.676] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0210.676] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Strings.xml" (normalized: "c:\\588bce7c90097ed212\\strings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0210.677] GetFileType (hFile=0x224) returned 0x1 [0210.678] CloseHandle (hObject=0x224) returned 1 [0210.678] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x263bd0 [0210.678] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Strings.xml" (normalized: "c:\\588bce7c90097ed212\\strings.xml"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x3704)) returned 1 [0210.679] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263bd0 | out: hHeap=0x1f0000) returned 1 [0210.679] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x263c28 [0210.679] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Strings.xml" (normalized: "c:\\588bce7c90097ed212\\strings.xml"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x3704)) returned 1 [0210.679] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263c28 | out: hHeap=0x1f0000) returned 1 [0210.679] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x263a70 [0210.679] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263a70 | out: hHeap=0x1f0000) returned 1 [0210.679] GetLastError () returned 0x0 [0210.791] CryptAcquireContextA (in: phProv=0x173e7b0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e7b0*=0x211ae0) returned 1 [0210.801] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x260860 | out: pbBuffer=0x260860) returned 1 [0210.801] CryptReleaseContext (hProv=0x211ae0, dwFlags=0x0) returned 1 [0210.801] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0210.801] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x264f88 [0210.801] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2247e8 [0210.801] QueryPerformanceCounter (in: lpPerformanceCount=0x173e744 | out: lpPerformanceCount=0x173e744*=36817012451) returned 1 [0210.801] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e784 | out: lpSystemTimeAsFileTime=0x173e784) [0210.802] QueryPerformanceCounter (in: lpPerformanceCount=0x173e744 | out: lpPerformanceCount=0x173e744*=36817051957) returned 1 [0210.802] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e784 | out: lpSystemTimeAsFileTime=0x173e784) [0210.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x234e20 [0210.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x26aeb0 [0210.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2245b8 [0210.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x24f5d8 [0210.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20fef8 [0210.803] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206928 [0210.803] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffb8 [0210.803] GetLastError () returned 0x0 [0210.803] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Strings.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\strings.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e650, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0210.804] GetFileType (hFile=0x224) returned 0x1 [0210.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b60 [0210.805] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ae0 [0210.806] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Strings.xml" (normalized: "c:\\588bce7c90097ed212\\strings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e680, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0210.806] GetFileType (hFile=0x1c0) returned 0x1 [0210.807] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205130 [0210.807] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205150 [0210.807] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261970 [0210.807] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238af0 [0210.808] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a10 [0210.809] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Strings.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\strings.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e5cc, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0210.809] GetFileType (hFile=0x21c) returned 0x1 [0210.809] GetLastError () returned 0xb7 [0210.810] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Strings.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\strings.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e5cc, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0210.810] GetFileType (hFile=0x220) returned 0x1 [0210.811] GetLastError () returned 0xb7 [0210.811] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Strings.xml" (normalized: "c:\\588bce7c90097ed212\\strings.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e5c4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0210.811] GetFileType (hFile=0x1ac) returned 0x1 [0210.812] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x286f98 [0210.812] ReadFile (in: hFile=0x1ac, lpBuffer=0x286f98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e520, lpOverlapped=0x0 | out: lpBuffer=0x286f98*, lpNumberOfBytesRead=0x173e520*=0x1000, lpOverlapped=0x0) returned 1 [0211.662] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24b1d8 [0211.662] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28cfc8 [0211.662] GetLastError () returned 0x0 [0211.738] CloseHandle (hObject=0x224) returned 1 [0211.741] CloseHandle (hObject=0x1c0) returned 1 [0211.742] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389b0 [0211.743] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238830 [0211.743] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Strings.xml" (normalized: "c:\\588bce7c90097ed212\\strings.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e680, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0211.745] GetFileType (hFile=0x1c0) returned 0x1 [0211.746] GetLastError () returned 0xb7 [0211.751] CloseHandle (hObject=0x1c0) returned 1 [0211.751] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\Strings.xml" (normalized: "c:\\588bce7c90097ed212\\strings.xml")) returned 0 [0211.751] GetLastError () returned 0x20 [0211.751] GetLastError () returned 0x20 [0211.752] CryptAcquireContextA (in: phProv=0x173e7b0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e7b0*=0x212360) returned 1 [0211.758] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x260bf8 | out: pbBuffer=0x260bf8) returned 1 [0211.758] CryptReleaseContext (hProv=0x212360, dwFlags=0x0) returned 1 [0211.758] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0211.758] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2609f0 [0211.758] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260bf8 [0211.758] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x234bb8 [0211.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609f0 | out: hHeap=0x1f0000) returned 1 [0211.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0211.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234bb8 | out: hHeap=0x1f0000) returned 1 [0211.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2640f8 [0211.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210258 [0211.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x235b78 [0211.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2609f0 [0211.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x237140 [0211.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x2052d0 [0211.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235e50 [0211.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2606d0 [0211.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x237038 [0211.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389d0 [0211.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0211.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0211.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238850 [0211.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606f8 [0211.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101b0 [0211.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0211.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606f8 | out: hHeap=0x1f0000) returned 1 [0211.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238850 | out: hHeap=0x1f0000) returned 1 [0211.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0211.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0211.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389d0 | out: hHeap=0x1f0000) returned 1 [0211.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237038 | out: hHeap=0x1f0000) returned 1 [0211.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0211.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235e50 | out: hHeap=0x1f0000) returned 1 [0211.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x234c28 [0211.760] GetLastError () returned 0x0 [0211.760] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e340 | out: lpSystemTimeAsFileTime=0x173e340) [0211.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x2389d0 [0211.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604c8 [0211.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ff0 [0211.760] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ff0 | out: hHeap=0x1f0000) returned 1 [0211.760] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604c8 | out: hHeap=0x1f0000) returned 1 [0211.761] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604c8 [0211.761] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ff0 [0211.762] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ff0 | out: hHeap=0x1f0000) returned 1 [0211.762] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604c8 | out: hHeap=0x1f0000) returned 1 [0211.762] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389d0 | out: hHeap=0x1f0000) returned 1 [0211.762] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0211.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x234ec8 [0211.762] GetLastError () returned 0x0 [0211.762] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Strings.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\strings.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e6b0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0211.762] GetFileType (hFile=0x1c0) returned 0x1 [0211.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x287fa0 [0211.763] SetFilePointerEx (in: hFile=0x1c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e638 | out: lpNewFilePointer=0x0) returned 1 [0211.763] GetLastError () returned 0xb7 [0211.763] CloseHandle (hObject=0x1c0) returned 1 [0211.763] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387f0 | out: hHeap=0x1f0000) returned 1 [0211.763] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388b0 | out: hHeap=0x1f0000) returned 1 [0211.763] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237248 | out: hHeap=0x1f0000) returned 1 [0211.763] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237140 | out: hHeap=0x1f0000) returned 1 [0211.763] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609f0 | out: hHeap=0x1f0000) returned 1 [0211.763] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2052d0 | out: hHeap=0x1f0000) returned 1 [0211.763] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0211.763] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0211.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2640f8 | out: hHeap=0x1f0000) returned 1 [0211.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223be0 | out: hHeap=0x1f0000) returned 1 [0211.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0211.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0211.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x266290 | out: hHeap=0x1f0000) returned 1 [0211.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224900 | out: hHeap=0x1f0000) returned 1 [0211.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234cd0 | out: hHeap=0x1f0000) returned 1 [0211.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388a0 | out: hHeap=0x1f0000) returned 1 [0211.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0211.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a68 | out: hHeap=0x1f0000) returned 1 [0211.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389c0 | out: hHeap=0x1f0000) returned 1 [0211.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0211.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0211.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389a0 | out: hHeap=0x1f0000) returned 1 [0211.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236f30 | out: hHeap=0x1f0000) returned 1 [0211.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ab8 | out: hHeap=0x1f0000) returned 1 [0211.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0211.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233d20 | out: hHeap=0x1f0000) returned 1 [0211.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a18 | out: hHeap=0x1f0000) returned 1 [0211.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0211.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234110 | out: hHeap=0x1f0000) returned 1 [0211.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238830 | out: hHeap=0x1f0000) returned 1 [0211.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389b0 | out: hHeap=0x1f0000) returned 1 [0211.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286f98 | out: hHeap=0x1f0000) returned 1 [0211.764] CloseHandle (hObject=0x1ac) returned 1 [0211.765] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ac0 | out: hHeap=0x1f0000) returned 1 [0211.765] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238aa0 | out: hHeap=0x1f0000) returned 1 [0211.765] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a7ba0 | out: hHeap=0x1f0000) returned 1 [0211.765] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24b1d8 | out: hHeap=0x1f0000) returned 1 [0211.765] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210240 | out: hHeap=0x1f0000) returned 1 [0211.765] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2051f0 | out: hHeap=0x1f0000) returned 1 [0211.765] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28cfc8 | out: hHeap=0x1f0000) returned 1 [0211.765] CloseHandle (hObject=0x220) returned 1 [0211.765] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a50 | out: hHeap=0x1f0000) returned 1 [0211.765] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a40 | out: hHeap=0x1f0000) returned 1 [0211.765] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262210 | out: hHeap=0x1f0000) returned 1 [0211.765] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2052f0 | out: hHeap=0x1f0000) returned 1 [0211.765] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x264c08 | out: hHeap=0x1f0000) returned 1 [0211.766] CloseHandle (hObject=0x21c) returned 1 [0211.766] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a10 | out: hHeap=0x1f0000) returned 1 [0211.766] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238af0 | out: hHeap=0x1f0000) returned 1 [0211.766] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261970 | out: hHeap=0x1f0000) returned 1 [0211.766] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ae0 | out: hHeap=0x1f0000) returned 1 [0211.766] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b60 | out: hHeap=0x1f0000) returned 1 [0211.766] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a20 | out: hHeap=0x1f0000) returned 1 [0211.766] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b10 | out: hHeap=0x1f0000) returned 1 [0211.766] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220a58 | out: hHeap=0x1f0000) returned 1 [0211.766] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x26aeb0 | out: hHeap=0x1f0000) returned 1 [0211.766] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2245b8 | out: hHeap=0x1f0000) returned 1 [0211.766] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206928 | out: hHeap=0x1f0000) returned 1 [0211.766] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffb8 | out: hHeap=0x1f0000) returned 1 [0211.766] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20fef8 | out: hHeap=0x1f0000) returned 1 [0211.766] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f5d8 | out: hHeap=0x1f0000) returned 1 [0211.766] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x264f88 | out: hHeap=0x1f0000) returned 1 [0211.766] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2247e8 | out: hHeap=0x1f0000) returned 1 [0211.767] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234c60 | out: hHeap=0x1f0000) returned 1 [0211.767] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x264258 | out: hHeap=0x1f0000) returned 1 [0211.767] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2271f0 | out: hHeap=0x1f0000) returned 1 [0211.767] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2348f0 | out: hHeap=0x1f0000) returned 1 [0211.767] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0211.767] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\Strings.xml" (normalized: "c:\\588bce7c90097ed212\\strings.xml")) returned 1 [0211.771] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x97f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 1 [0211.771] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0211.771] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x234c60 [0211.772] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x263a18 [0211.772] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234c60 | out: hHeap=0x1f0000) returned 1 [0211.772] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2639c0 | out: hHeap=0x1f0000) returned 1 [0211.772] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0211.772] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\uiinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0211.772] GetFileType (hFile=0x21c) returned 0x1 [0211.773] CloseHandle (hObject=0x21c) returned 1 [0211.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x263bd0 [0211.773] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\uiinfo.xml"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x97f2)) returned 1 [0211.773] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263bd0 | out: hHeap=0x1f0000) returned 1 [0211.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x263c28 [0211.773] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\uiinfo.xml"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x97f2)) returned 1 [0211.773] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263c28 | out: hHeap=0x1f0000) returned 1 [0211.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x263a70 [0211.774] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263a70 | out: hHeap=0x1f0000) returned 1 [0211.774] GetLastError () returned 0x0 [0211.774] CryptAcquireContextA (in: phProv=0x173e7b0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e7b0*=0x211ae0) returned 1 [0211.781] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2607c0 | out: pbBuffer=0x2607c0) returned 1 [0211.781] CryptReleaseContext (hProv=0x211ae0, dwFlags=0x0) returned 1 [0211.781] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607c0 | out: hHeap=0x1f0000) returned 1 [0211.781] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x264f88 [0211.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2245b8 [0211.782] QueryPerformanceCounter (in: lpPerformanceCount=0x173e744 | out: lpPerformanceCount=0x173e744*=36915061249) returned 1 [0211.782] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e784 | out: lpSystemTimeAsFileTime=0x173e784) [0211.782] QueryPerformanceCounter (in: lpPerformanceCount=0x173e744 | out: lpPerformanceCount=0x173e744*=36915092585) returned 1 [0211.782] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e784 | out: lpSystemTimeAsFileTime=0x173e784) [0211.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x234e20 [0211.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x26aeb0 [0211.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2244a0 [0211.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x24f5d8 [0211.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20fef8 [0211.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206928 [0211.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffb8 [0211.783] GetLastError () returned 0x0 [0211.783] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\UiInfo.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\uiinfo.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e650, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0211.783] GetFileType (hFile=0x21c) returned 0x1 [0211.783] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b60 [0211.784] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ae0 [0211.784] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\uiinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e680, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0211.784] GetFileType (hFile=0x220) returned 0x1 [0211.784] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205130 [0211.785] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205150 [0211.785] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261970 [0211.785] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238af0 [0211.785] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a10 [0211.785] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\UiInfo.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\uiinfo.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e5cc, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0211.785] GetFileType (hFile=0x1ac) returned 0x1 [0211.786] GetLastError () returned 0xb7 [0211.786] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\UiInfo.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\uiinfo.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e5cc, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0211.786] GetFileType (hFile=0x1c0) returned 0x1 [0211.786] GetLastError () returned 0xb7 [0211.786] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\uiinfo.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e5c4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0211.787] GetFileType (hFile=0x224) returned 0x1 [0211.787] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x286f98 [0211.787] ReadFile (in: hFile=0x224, lpBuffer=0x286f98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e520, lpOverlapped=0x0 | out: lpBuffer=0x286f98*, lpNumberOfBytesRead=0x173e520*=0x1000, lpOverlapped=0x0) returned 1 [0211.924] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24b1d8 [0211.924] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28cfc8 [0211.924] GetLastError () returned 0x0 [0212.377] CloseHandle (hObject=0x21c) returned 1 [0212.379] CloseHandle (hObject=0x220) returned 1 [0212.443] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389b0 [0212.443] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238830 [0212.443] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\uiinfo.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e680, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0212.448] GetFileType (hFile=0x220) returned 0x1 [0212.448] GetLastError () returned 0xb7 [0212.450] CloseHandle (hObject=0x220) returned 1 [0212.450] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\uiinfo.xml")) returned 0 [0212.450] GetLastError () returned 0x20 [0212.450] GetLastError () returned 0x20 [0212.450] CryptAcquireContextA (in: phProv=0x173e7b0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e7b0*=0x212360) returned 1 [0212.460] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x260860 | out: pbBuffer=0x260860) returned 1 [0212.460] CryptReleaseContext (hProv=0x212360, dwFlags=0x0) returned 1 [0212.460] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0212.460] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2604c8 [0212.460] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260590 [0212.460] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x234bb8 [0212.460] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604c8 | out: hHeap=0x1f0000) returned 1 [0212.460] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0212.460] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234bb8 | out: hHeap=0x1f0000) returned 1 [0212.461] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2640f8 [0212.461] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210078 [0212.461] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x235b78 [0212.461] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2609a0 [0212.461] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x237140 [0212.461] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205290 [0212.461] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235e50 [0212.461] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260748 [0212.462] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x237038 [0212.462] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389d0 [0212.462] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0212.462] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210018 [0212.462] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238850 [0212.462] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260770 [0212.462] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210210 [0212.462] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0212.462] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0212.462] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238850 | out: hHeap=0x1f0000) returned 1 [0212.462] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210018 | out: hHeap=0x1f0000) returned 1 [0212.462] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0212.462] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389d0 | out: hHeap=0x1f0000) returned 1 [0212.463] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237038 | out: hHeap=0x1f0000) returned 1 [0212.463] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0212.463] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235e50 | out: hHeap=0x1f0000) returned 1 [0212.463] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x234c28 [0212.463] GetLastError () returned 0x0 [0212.463] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e340 | out: lpSystemTimeAsFileTime=0x173e340) [0212.464] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x2389d0 [0212.464] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604c8 [0212.464] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x2052f0 [0212.464] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2052f0 | out: hHeap=0x1f0000) returned 1 [0212.464] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604c8 | out: hHeap=0x1f0000) returned 1 [0212.464] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604c8 [0212.464] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204fb0 [0212.464] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204fb0 | out: hHeap=0x1f0000) returned 1 [0212.464] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604c8 | out: hHeap=0x1f0000) returned 1 [0212.464] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389d0 | out: hHeap=0x1f0000) returned 1 [0212.464] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0212.464] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x234ec8 [0212.464] GetLastError () returned 0x0 [0212.465] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\UiInfo.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\uiinfo.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e6b0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0212.465] GetFileType (hFile=0x220) returned 0x1 [0212.465] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x287fa0 [0212.465] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e638 | out: lpNewFilePointer=0x0) returned 1 [0212.467] GetLastError () returned 0xb7 [0212.468] CloseHandle (hObject=0x220) returned 1 [0212.468] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387f0 | out: hHeap=0x1f0000) returned 1 [0212.468] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388b0 | out: hHeap=0x1f0000) returned 1 [0212.468] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237248 | out: hHeap=0x1f0000) returned 1 [0212.468] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237140 | out: hHeap=0x1f0000) returned 1 [0212.468] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0212.468] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205290 | out: hHeap=0x1f0000) returned 1 [0212.468] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0212.468] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210078 | out: hHeap=0x1f0000) returned 1 [0212.468] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2640f8 | out: hHeap=0x1f0000) returned 1 [0212.468] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224900 | out: hHeap=0x1f0000) returned 1 [0212.468] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0212.468] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0212.469] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x266290 | out: hHeap=0x1f0000) returned 1 [0212.469] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2247e8 | out: hHeap=0x1f0000) returned 1 [0212.469] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234cd0 | out: hHeap=0x1f0000) returned 1 [0212.469] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388a0 | out: hHeap=0x1f0000) returned 1 [0212.469] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210000 | out: hHeap=0x1f0000) returned 1 [0212.469] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0212.469] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389c0 | out: hHeap=0x1f0000) returned 1 [0212.471] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffe8 | out: hHeap=0x1f0000) returned 1 [0212.471] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0212.471] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389a0 | out: hHeap=0x1f0000) returned 1 [0212.471] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236f30 | out: hHeap=0x1f0000) returned 1 [0212.471] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606f8 | out: hHeap=0x1f0000) returned 1 [0212.471] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0212.471] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234860 | out: hHeap=0x1f0000) returned 1 [0212.471] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0212.472] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0212.472] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234818 | out: hHeap=0x1f0000) returned 1 [0212.472] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238830 | out: hHeap=0x1f0000) returned 1 [0212.472] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389b0 | out: hHeap=0x1f0000) returned 1 [0212.472] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286f98 | out: hHeap=0x1f0000) returned 1 [0212.472] CloseHandle (hObject=0x224) returned 1 [0212.472] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ac0 | out: hHeap=0x1f0000) returned 1 [0212.473] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238aa0 | out: hHeap=0x1f0000) returned 1 [0212.473] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a7ba0 | out: hHeap=0x1f0000) returned 1 [0212.473] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24b1d8 | out: hHeap=0x1f0000) returned 1 [0212.473] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2100a8 | out: hHeap=0x1f0000) returned 1 [0212.473] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2051f0 | out: hHeap=0x1f0000) returned 1 [0212.473] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28cfc8 | out: hHeap=0x1f0000) returned 1 [0212.473] CloseHandle (hObject=0x1c0) returned 1 [0212.473] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a50 | out: hHeap=0x1f0000) returned 1 [0212.473] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a40 | out: hHeap=0x1f0000) returned 1 [0212.473] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262210 | out: hHeap=0x1f0000) returned 1 [0212.473] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2052d0 | out: hHeap=0x1f0000) returned 1 [0212.474] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2647e0 | out: hHeap=0x1f0000) returned 1 [0212.474] CloseHandle (hObject=0x1ac) returned 1 [0212.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a10 | out: hHeap=0x1f0000) returned 1 [0212.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238af0 | out: hHeap=0x1f0000) returned 1 [0212.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261970 | out: hHeap=0x1f0000) returned 1 [0212.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ae0 | out: hHeap=0x1f0000) returned 1 [0212.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b60 | out: hHeap=0x1f0000) returned 1 [0212.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a20 | out: hHeap=0x1f0000) returned 1 [0212.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b10 | out: hHeap=0x1f0000) returned 1 [0212.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220a58 | out: hHeap=0x1f0000) returned 1 [0212.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x26aeb0 | out: hHeap=0x1f0000) returned 1 [0212.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2244a0 | out: hHeap=0x1f0000) returned 1 [0212.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206928 | out: hHeap=0x1f0000) returned 1 [0212.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffb8 | out: hHeap=0x1f0000) returned 1 [0212.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20fef8 | out: hHeap=0x1f0000) returned 1 [0212.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f5d8 | out: hHeap=0x1f0000) returned 1 [0212.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x264f88 | out: hHeap=0x1f0000) returned 1 [0212.482] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2245b8 | out: hHeap=0x1f0000) returned 1 [0212.482] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234c60 | out: hHeap=0x1f0000) returned 1 [0212.482] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x264258 | out: hHeap=0x1f0000) returned 1 [0212.482] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2271f0 | out: hHeap=0x1f0000) returned 1 [0212.482] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2348f0 | out: hHeap=0x1f0000) returned 1 [0212.482] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260900 | out: hHeap=0x1f0000) returned 1 [0212.482] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\uiinfo.xml")) returned 1 [0212.483] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x87910600, ftCreationTime.dwHighDateTime=0x1ca2a27, ftLastAccessTime.dwLowDateTime=0x87910600, ftLastAccessTime.dwHighDateTime=0x1ca2a27, ftLastWriteTime.dwLowDateTime=0x87910600, ftLastWriteTime.dwHighDateTime=0x1ca2a27, nFileSizeHigh=0x0, nFileSizeLow=0x19688, dwReserved0=0x0, dwReserved1=0x0, cFileName="watermark.bmp", cAlternateFileName="WATERM~1.BMP")) returned 1 [0212.483] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0212.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x234c60 [0212.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2639c0 [0212.484] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234c60 | out: hHeap=0x1f0000) returned 1 [0212.484] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263a18 | out: hHeap=0x1f0000) returned 1 [0212.484] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0212.484] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\watermark.bmp" (normalized: "c:\\588bce7c90097ed212\\watermark.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0212.484] GetFileType (hFile=0x1ac) returned 0x1 [0212.485] CloseHandle (hObject=0x1ac) returned 1 [0212.485] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x263bd0 [0212.485] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\watermark.bmp" (normalized: "c:\\588bce7c90097ed212\\watermark.bmp"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x87910600, ftCreationTime.dwHighDateTime=0x1ca2a27, ftLastAccessTime.dwLowDateTime=0x87910600, ftLastAccessTime.dwHighDateTime=0x1ca2a27, ftLastWriteTime.dwLowDateTime=0x87910600, ftLastWriteTime.dwHighDateTime=0x1ca2a27, nFileSizeHigh=0x0, nFileSizeLow=0x19688)) returned 1 [0212.485] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263bd0 | out: hHeap=0x1f0000) returned 1 [0212.485] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x263c28 [0212.485] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\watermark.bmp" (normalized: "c:\\588bce7c90097ed212\\watermark.bmp"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x87910600, ftCreationTime.dwHighDateTime=0x1ca2a27, ftLastAccessTime.dwLowDateTime=0x87910600, ftLastAccessTime.dwHighDateTime=0x1ca2a27, ftLastWriteTime.dwLowDateTime=0x87910600, ftLastWriteTime.dwHighDateTime=0x1ca2a27, nFileSizeHigh=0x0, nFileSizeLow=0x19688)) returned 1 [0212.485] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263c28 | out: hHeap=0x1f0000) returned 1 [0212.485] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x263a70 [0212.485] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263a70 | out: hHeap=0x1f0000) returned 1 [0212.485] GetLastError () returned 0x0 [0212.486] CryptAcquireContextA (in: phProv=0x173e7b0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e7b0*=0x211ae0) returned 1 [0212.491] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2607c0 | out: pbBuffer=0x2607c0) returned 1 [0212.491] CryptReleaseContext (hProv=0x211ae0, dwFlags=0x0) returned 1 [0212.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607c0 | out: hHeap=0x1f0000) returned 1 [0212.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x264f88 [0212.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2245b8 [0212.491] QueryPerformanceCounter (in: lpPerformanceCount=0x173e744 | out: lpPerformanceCount=0x173e744*=36986023111) returned 1 [0212.491] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e784 | out: lpSystemTimeAsFileTime=0x173e784) [0212.492] QueryPerformanceCounter (in: lpPerformanceCount=0x173e744 | out: lpPerformanceCount=0x173e744*=36986050886) returned 1 [0212.492] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e784 | out: lpSystemTimeAsFileTime=0x173e784) [0212.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x234e20 [0212.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x26aeb0 [0212.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2244a0 [0212.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x24f5d8 [0212.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20fef8 [0212.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206928 [0212.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffb8 [0212.492] GetLastError () returned 0x0 [0212.492] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\watermark.bmp.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\watermark.bmp.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e650, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0212.493] GetFileType (hFile=0x1ac) returned 0x1 [0212.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b60 [0212.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ae0 [0212.494] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\watermark.bmp" (normalized: "c:\\588bce7c90097ed212\\watermark.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e680, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0212.494] GetFileType (hFile=0x1c0) returned 0x1 [0212.494] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205130 [0212.494] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205150 [0212.494] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261970 [0212.494] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238af0 [0212.494] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a10 [0212.495] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\watermark.bmp.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\watermark.bmp.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e5cc, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0212.495] GetFileType (hFile=0x224) returned 0x1 [0212.495] GetLastError () returned 0xb7 [0212.495] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\watermark.bmp.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\watermark.bmp.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e5cc, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0212.495] GetFileType (hFile=0x220) returned 0x1 [0212.496] GetLastError () returned 0xb7 [0212.496] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\watermark.bmp" (normalized: "c:\\588bce7c90097ed212\\watermark.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e5c4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0212.496] GetFileType (hFile=0x21c) returned 0x1 [0212.496] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x286f98 [0212.496] ReadFile (in: hFile=0x21c, lpBuffer=0x286f98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e520, lpOverlapped=0x0 | out: lpBuffer=0x286f98*, lpNumberOfBytesRead=0x173e520*=0x1000, lpOverlapped=0x0) returned 1 [0212.622] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24b1d8 [0212.623] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x287fa0 [0212.623] GetLastError () returned 0x0 [0212.639] CloseHandle (hObject=0x1ac) returned 1 [0212.651] CloseHandle (hObject=0x1c0) returned 1 [0212.651] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389b0 [0212.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238830 [0212.652] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\watermark.bmp" (normalized: "c:\\588bce7c90097ed212\\watermark.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e680, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0212.654] GetFileType (hFile=0x1c0) returned 0x1 [0212.655] GetLastError () returned 0xb7 [0212.656] CloseHandle (hObject=0x1c0) returned 1 [0212.656] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\watermark.bmp" (normalized: "c:\\588bce7c90097ed212\\watermark.bmp")) returned 0 [0212.657] GetLastError () returned 0x20 [0212.657] GetLastError () returned 0x20 [0212.657] CryptAcquireContextA (in: phProv=0x173e7b0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e7b0*=0x212580) returned 1 [0212.666] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x260a18 | out: pbBuffer=0x260a18) returned 1 [0212.667] CryptReleaseContext (hProv=0x212580, dwFlags=0x0) returned 1 [0212.667] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a18 | out: hHeap=0x1f0000) returned 1 [0212.667] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260a18 [0212.667] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260a68 [0212.667] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x234e90 [0212.667] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a18 | out: hHeap=0x1f0000) returned 1 [0212.667] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0212.667] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234e90 | out: hHeap=0x1f0000) returned 1 [0212.667] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x263b78 [0212.667] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210258 [0212.667] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x235b78 [0212.667] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260a18 [0212.667] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x237560 [0212.667] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205150 [0212.667] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235908 [0212.668] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260928 [0212.668] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x237770 [0212.668] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238820 [0212.668] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605e0 [0212.668] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0212.668] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238920 [0212.668] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0212.668] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210210 [0212.668] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0212.668] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0212.668] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238920 | out: hHeap=0x1f0000) returned 1 [0212.668] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0212.668] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605e0 | out: hHeap=0x1f0000) returned 1 [0212.669] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238820 | out: hHeap=0x1f0000) returned 1 [0212.669] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237770 | out: hHeap=0x1f0000) returned 1 [0212.669] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0212.872] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235908 | out: hHeap=0x1f0000) returned 1 [0212.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x234db0 [0212.872] GetLastError () returned 0x0 [0212.872] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e340 | out: lpSystemTimeAsFileTime=0x173e340) [0212.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238950 [0212.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604c8 [0212.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204fb0 [0212.873] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204fb0 | out: hHeap=0x1f0000) returned 1 [0212.873] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604c8 | out: hHeap=0x1f0000) returned 1 [0212.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0212.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204fb0 [0212.874] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204fb0 | out: hHeap=0x1f0000) returned 1 [0212.874] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0212.874] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238950 | out: hHeap=0x1f0000) returned 1 [0212.874] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0212.874] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x234cd0 [0212.874] GetLastError () returned 0x0 [0213.013] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\watermark.bmp.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\watermark.bmp.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e6b0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0213.014] GetFileType (hFile=0x204) returned 0x1 [0213.014] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28bfc0 [0213.014] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e638 | out: lpNewFilePointer=0x0) returned 1 [0213.014] GetLastError () returned 0xb7 [0213.014] CloseHandle (hObject=0x204) returned 1 [0213.015] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238920 | out: hHeap=0x1f0000) returned 1 [0213.015] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389c0 | out: hHeap=0x1f0000) returned 1 [0213.015] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237140 | out: hHeap=0x1f0000) returned 1 [0213.015] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237560 | out: hHeap=0x1f0000) returned 1 [0213.015] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a18 | out: hHeap=0x1f0000) returned 1 [0213.015] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205150 | out: hHeap=0x1f0000) returned 1 [0213.015] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0213.015] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0213.015] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263b78 | out: hHeap=0x1f0000) returned 1 [0213.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223e10 | out: hHeap=0x1f0000) returned 1 [0213.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a68 | out: hHeap=0x1f0000) returned 1 [0213.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0213.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x26e7c8 | out: hHeap=0x1f0000) returned 1 [0213.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223be0 | out: hHeap=0x1f0000) returned 1 [0213.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234d40 | out: hHeap=0x1f0000) returned 1 [0213.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388a0 | out: hHeap=0x1f0000) returned 1 [0213.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210018 | out: hHeap=0x1f0000) returned 1 [0213.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260658 | out: hHeap=0x1f0000) returned 1 [0213.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238940 | out: hHeap=0x1f0000) returned 1 [0213.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210000 | out: hHeap=0x1f0000) returned 1 [0213.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ab8 | out: hHeap=0x1f0000) returned 1 [0213.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388b0 | out: hHeap=0x1f0000) returned 1 [0213.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236e28 | out: hHeap=0x1f0000) returned 1 [0213.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0213.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0213.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234818 | out: hHeap=0x1f0000) returned 1 [0213.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0213.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0213.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234110 | out: hHeap=0x1f0000) returned 1 [0213.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238830 | out: hHeap=0x1f0000) returned 1 [0213.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389b0 | out: hHeap=0x1f0000) returned 1 [0213.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286f98 | out: hHeap=0x1f0000) returned 1 [0213.017] CloseHandle (hObject=0x21c) returned 1 [0213.018] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ac0 | out: hHeap=0x1f0000) returned 1 [0213.018] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238aa0 | out: hHeap=0x1f0000) returned 1 [0213.018] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a7ba0 | out: hHeap=0x1f0000) returned 1 [0213.018] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24b1d8 | out: hHeap=0x1f0000) returned 1 [0213.018] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2100a8 | out: hHeap=0x1f0000) returned 1 [0213.018] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205130 | out: hHeap=0x1f0000) returned 1 [0213.018] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x287fa0 | out: hHeap=0x1f0000) returned 1 [0213.018] CloseHandle (hObject=0x220) returned 1 [0213.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a50 | out: hHeap=0x1f0000) returned 1 [0213.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a40 | out: hHeap=0x1f0000) returned 1 [0213.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262210 | out: hHeap=0x1f0000) returned 1 [0213.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205290 | out: hHeap=0x1f0000) returned 1 [0213.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0213.019] CloseHandle (hObject=0x224) returned 1 [0213.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a10 | out: hHeap=0x1f0000) returned 1 [0213.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238af0 | out: hHeap=0x1f0000) returned 1 [0213.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261970 | out: hHeap=0x1f0000) returned 1 [0213.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ae0 | out: hHeap=0x1f0000) returned 1 [0213.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b60 | out: hHeap=0x1f0000) returned 1 [0213.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a20 | out: hHeap=0x1f0000) returned 1 [0213.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b10 | out: hHeap=0x1f0000) returned 1 [0213.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2647e0 | out: hHeap=0x1f0000) returned 1 [0213.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x26aeb0 | out: hHeap=0x1f0000) returned 1 [0213.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2244a0 | out: hHeap=0x1f0000) returned 1 [0213.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206928 | out: hHeap=0x1f0000) returned 1 [0213.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffb8 | out: hHeap=0x1f0000) returned 1 [0213.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20fef8 | out: hHeap=0x1f0000) returned 1 [0213.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f5d8 | out: hHeap=0x1f0000) returned 1 [0213.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x264f88 | out: hHeap=0x1f0000) returned 1 [0213.021] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2245b8 | out: hHeap=0x1f0000) returned 1 [0213.021] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234c60 | out: hHeap=0x1f0000) returned 1 [0213.021] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x264258 | out: hHeap=0x1f0000) returned 1 [0213.021] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2271f0 | out: hHeap=0x1f0000) returned 1 [0213.021] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2348f0 | out: hHeap=0x1f0000) returned 1 [0213.021] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260900 | out: hHeap=0x1f0000) returned 1 [0213.021] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\watermark.bmp" (normalized: "c:\\588bce7c90097ed212\\watermark.bmp")) returned 1 [0213.022] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2120bc00, ftCreationTime.dwHighDateTime=0x1cac6c9, ftLastAccessTime.dwLowDateTime=0x2120bc00, ftLastAccessTime.dwHighDateTime=0x1cac6c9, ftLastWriteTime.dwLowDateTime=0x2120bc00, ftLastWriteTime.dwHighDateTime=0x1cac6c9, nFileSizeHigh=0x0, nFileSizeLow=0x4f5113, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.0-KB956250-v6001-x64.msu", cAlternateFileName="WINDOW~1.MSU")) returned 1 [0213.022] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x263a18 [0213.022] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x234c60 [0213.022] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212140 [0213.022] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234c60 | out: hHeap=0x1f0000) returned 1 [0213.022] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2639c0 | out: hHeap=0x1f0000) returned 1 [0213.022] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263a18 | out: hHeap=0x1f0000) returned 1 [0213.023] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x64.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x64.msu"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0213.023] GetFileType (hFile=0x224) returned 0x1 [0213.023] CloseHandle (hObject=0x224) returned 1 [0213.024] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212938 [0213.024] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x64.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x64.msu"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2120bc00, ftCreationTime.dwHighDateTime=0x1cac6c9, ftLastAccessTime.dwLowDateTime=0x2120bc00, ftLastAccessTime.dwHighDateTime=0x1cac6c9, ftLastWriteTime.dwLowDateTime=0x2120bc00, ftLastWriteTime.dwHighDateTime=0x1cac6c9, nFileSizeHigh=0x0, nFileSizeLow=0x4f5113)) returned 1 [0213.024] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212938 | out: hHeap=0x1f0000) returned 1 [0213.024] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212938 [0213.024] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x64.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x64.msu"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2120bc00, ftCreationTime.dwHighDateTime=0x1cac6c9, ftLastAccessTime.dwLowDateTime=0x2120bc00, ftLastAccessTime.dwHighDateTime=0x1cac6c9, ftLastWriteTime.dwLowDateTime=0x2120bc00, ftLastWriteTime.dwHighDateTime=0x1cac6c9, nFileSizeHigh=0x0, nFileSizeLow=0x4f5113)) returned 1 [0213.024] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212938 | out: hHeap=0x1f0000) returned 1 [0213.024] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212938 [0213.024] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212938 | out: hHeap=0x1f0000) returned 1 [0213.024] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x1bbe7400, ftCreationTime.dwHighDateTime=0x1cac6bf, ftLastAccessTime.dwLowDateTime=0x1bbe7400, ftLastAccessTime.dwHighDateTime=0x1cac6bf, ftLastWriteTime.dwLowDateTime=0x1bbe7400, ftLastWriteTime.dwHighDateTime=0x1cac6bf, nFileSizeHigh=0x0, nFileSizeLow=0x217520, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.0-KB956250-v6001-x86.msu", cAlternateFileName="WINDOW~2.MSU")) returned 1 [0213.024] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239508 [0213.025] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x234f38 [0213.025] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212938 [0213.025] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234f38 | out: hHeap=0x1f0000) returned 1 [0213.025] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212140 | out: hHeap=0x1f0000) returned 1 [0213.025] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239508 | out: hHeap=0x1f0000) returned 1 [0213.025] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x86.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x86.msu"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0213.025] GetFileType (hFile=0x224) returned 0x1 [0213.026] CloseHandle (hObject=0x224) returned 1 [0213.026] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212140 [0213.026] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x86.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x86.msu"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x1bbe7400, ftCreationTime.dwHighDateTime=0x1cac6bf, ftLastAccessTime.dwLowDateTime=0x1bbe7400, ftLastAccessTime.dwHighDateTime=0x1cac6bf, ftLastWriteTime.dwLowDateTime=0x1bbe7400, ftLastWriteTime.dwHighDateTime=0x1cac6bf, nFileSizeHigh=0x0, nFileSizeLow=0x217520)) returned 1 [0213.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212140 | out: hHeap=0x1f0000) returned 1 [0213.027] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212140 [0213.027] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x86.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x86.msu"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x1bbe7400, ftCreationTime.dwHighDateTime=0x1cac6bf, ftLastAccessTime.dwLowDateTime=0x1bbe7400, ftLastAccessTime.dwHighDateTime=0x1cac6bf, ftLastWriteTime.dwLowDateTime=0x1bbe7400, ftLastWriteTime.dwHighDateTime=0x1cac6bf, nFileSizeHigh=0x0, nFileSizeLow=0x217520)) returned 1 [0213.027] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212140 | out: hHeap=0x1f0000) returned 1 [0213.027] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212140 [0213.027] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212140 | out: hHeap=0x1f0000) returned 1 [0213.027] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5b8e5700, ftCreationTime.dwHighDateTime=0x1cac6d1, ftLastAccessTime.dwLowDateTime=0x5b8e5700, ftLastAccessTime.dwHighDateTime=0x1cac6d1, ftLastWriteTime.dwLowDateTime=0x5b8e5700, ftLastWriteTime.dwHighDateTime=0x1cac6d1, nFileSizeHigh=0x0, nFileSizeLow=0x4db1ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB958488-v6001-x64.msu", cAlternateFileName="WINDOW~3.MSU")) returned 1 [0213.027] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239508 [0213.027] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x234d08 [0213.027] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2129c0 [0213.027] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234d08 | out: hHeap=0x1f0000) returned 1 [0213.027] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212938 | out: hHeap=0x1f0000) returned 1 [0213.028] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239508 | out: hHeap=0x1f0000) returned 1 [0213.028] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x64.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x64.msu"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0213.028] GetFileType (hFile=0x224) returned 0x1 [0213.029] CloseHandle (hObject=0x224) returned 1 [0213.029] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212938 [0213.029] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x64.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x64.msu"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5b8e5700, ftCreationTime.dwHighDateTime=0x1cac6d1, ftLastAccessTime.dwLowDateTime=0x5b8e5700, ftLastAccessTime.dwHighDateTime=0x1cac6d1, ftLastWriteTime.dwLowDateTime=0x5b8e5700, ftLastWriteTime.dwHighDateTime=0x1cac6d1, nFileSizeHigh=0x0, nFileSizeLow=0x4db1ce)) returned 1 [0213.029] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212938 | out: hHeap=0x1f0000) returned 1 [0213.029] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212938 [0213.029] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x64.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x64.msu"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5b8e5700, ftCreationTime.dwHighDateTime=0x1cac6d1, ftLastAccessTime.dwLowDateTime=0x5b8e5700, ftLastAccessTime.dwHighDateTime=0x1cac6d1, ftLastWriteTime.dwLowDateTime=0x5b8e5700, ftLastWriteTime.dwHighDateTime=0x1cac6d1, nFileSizeHigh=0x0, nFileSizeLow=0x4db1ce)) returned 1 [0213.030] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212938 | out: hHeap=0x1f0000) returned 1 [0213.030] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212938 [0213.030] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212938 | out: hHeap=0x1f0000) returned 1 [0213.030] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd0ac5d00, ftCreationTime.dwHighDateTime=0x1cac6ce, ftLastAccessTime.dwLowDateTime=0xd0ac5d00, ftLastAccessTime.dwHighDateTime=0x1cac6ce, ftLastWriteTime.dwLowDateTime=0xd0ac5d00, ftLastWriteTime.dwHighDateTime=0x1cac6ce, nFileSizeHigh=0x0, nFileSizeLow=0x20acf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB958488-v6001-x86.msu", cAlternateFileName="WINDOW~4.MSU")) returned 1 [0213.030] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239508 [0213.030] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x234d08 [0213.030] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211948 [0213.030] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234d08 | out: hHeap=0x1f0000) returned 1 [0213.030] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2129c0 | out: hHeap=0x1f0000) returned 1 [0213.030] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239508 | out: hHeap=0x1f0000) returned 1 [0213.031] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x86.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x86.msu"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0213.031] GetFileType (hFile=0x224) returned 0x1 [0213.031] CloseHandle (hObject=0x224) returned 1 [0213.031] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212938 [0213.032] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x86.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x86.msu"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd0ac5d00, ftCreationTime.dwHighDateTime=0x1cac6ce, ftLastAccessTime.dwLowDateTime=0xd0ac5d00, ftLastAccessTime.dwHighDateTime=0x1cac6ce, ftLastWriteTime.dwLowDateTime=0xd0ac5d00, ftLastWriteTime.dwHighDateTime=0x1cac6ce, nFileSizeHigh=0x0, nFileSizeLow=0x20acf9)) returned 1 [0213.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212938 | out: hHeap=0x1f0000) returned 1 [0213.032] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212140 [0213.032] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x86.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x86.msu"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd0ac5d00, ftCreationTime.dwHighDateTime=0x1cac6ce, ftLastAccessTime.dwLowDateTime=0xd0ac5d00, ftLastAccessTime.dwHighDateTime=0x1cac6ce, ftLastWriteTime.dwLowDateTime=0xd0ac5d00, ftLastWriteTime.dwHighDateTime=0x1cac6ce, nFileSizeHigh=0x0, nFileSizeLow=0x20acf9)) returned 1 [0213.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212140 | out: hHeap=0x1f0000) returned 1 [0213.032] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212140 [0213.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212140 | out: hHeap=0x1f0000) returned 1 [0213.032] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd0ac5d00, ftCreationTime.dwHighDateTime=0x1cac6ce, ftLastAccessTime.dwLowDateTime=0xd0ac5d00, ftLastAccessTime.dwHighDateTime=0x1cac6ce, ftLastWriteTime.dwLowDateTime=0xd0ac5d00, ftLastWriteTime.dwHighDateTime=0x1cac6ce, nFileSizeHigh=0x0, nFileSizeLow=0x20acf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB958488-v6001-x86.msu", cAlternateFileName="WINDOW~4.MSU")) returned 0 [0213.032] FindClose (in: hFindFile=0x24eb80 | out: hFindFile=0x24eb80) returned 1 [0213.033] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234548 [0213.033] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0213.033] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2271f0 [0213.033] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234aa0 [0213.033] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1025\\*", lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ea00 [0213.033] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2348f0 [0213.034] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234aa0 | out: hHeap=0x1f0000) returned 1 [0213.034] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0213.034] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0213.034] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234740 [0213.034] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2348f0 | out: hHeap=0x1f0000) returned 1 [0213.034] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0213.034] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0213.034] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x1d8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0213.034] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609a0 [0213.034] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2349c8 [0213.034] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x235be0 [0213.035] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2349c8 | out: hHeap=0x1f0000) returned 1 [0213.035] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234740 | out: hHeap=0x1f0000) returned 1 [0213.035] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0213.035] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1025\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1025\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0213.035] GetFileType (hFile=0x224) returned 0x1 [0213.036] CloseHandle (hObject=0x224) returned 1 [0213.036] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239508 [0213.036] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1025\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1025\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x173eb6c | out: lpFileInformation=0x173eb6c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x1d8f)) returned 1 [0213.036] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239508 | out: hHeap=0x1f0000) returned 1 [0213.037] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c8b8 [0213.037] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1025\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1025\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x173eb7c | out: lpFileInformation=0x173eb7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x1d8f)) returned 1 [0213.037] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0213.037] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239508 [0213.037] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239508 | out: hHeap=0x1f0000) returned 1 [0213.037] GetLastError () returned 0x0 [0213.037] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x212938) returned 1 [0213.044] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x260518 | out: pbBuffer=0x260518) returned 1 [0213.044] CryptReleaseContext (hProv=0x212938, dwFlags=0x0) returned 1 [0213.044] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0213.044] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x24fd60 [0213.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x223be0 [0213.045] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=37041355350) returned 1 [0213.045] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0213.045] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=37041380249) returned 1 [0213.045] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0213.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x234d78 [0213.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x2595a0 [0213.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2244a0 [0213.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x20e1f0 [0213.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffb8 [0213.046] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2068c8 [0213.046] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210078 [0213.046] GetLastError () returned 0x0 [0213.046] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1025\\eula.rtf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1025\\eula.rtf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e230, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0213.457] GetFileType (hFile=0x224) returned 0x1 [0213.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ac0 [0213.458] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b00 [0213.458] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1025\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1025\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0213.459] GetFileType (hFile=0x220) returned 0x1 [0213.459] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x2052d0 [0213.459] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x2051f0 [0213.459] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x260ff0 [0213.459] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a20 [0213.459] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a00 [0213.460] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1025\\eula.rtf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1025\\eula.rtf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0213.464] GetFileType (hFile=0x21c) returned 0x1 [0213.465] GetLastError () returned 0xb7 [0213.465] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1025\\eula.rtf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1025\\eula.rtf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0213.465] GetFileType (hFile=0x204) returned 0x1 [0213.465] GetLastError () returned 0xb7 [0213.465] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1025\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1025\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1a4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0213.465] GetFileType (hFile=0x210) returned 0x1 [0213.466] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x288fa8 [0213.466] ReadFile (in: hFile=0x210, lpBuffer=0x288fa8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e100, lpOverlapped=0x0 | out: lpBuffer=0x288fa8*, lpNumberOfBytesRead=0x173e100*=0x1000, lpOverlapped=0x0) returned 1 [0213.468] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24b1d8 [0213.468] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28bfc0 [0213.468] GetLastError () returned 0x0 [0213.470] CloseHandle (hObject=0x224) returned 1 [0213.479] CloseHandle (hObject=0x220) returned 1 [0213.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a60 [0213.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389f0 [0213.480] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1025\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1025\\eula.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0213.481] GetFileType (hFile=0x220) returned 0x1 [0213.482] GetLastError () returned 0xb7 [0213.483] CloseHandle (hObject=0x220) returned 1 [0213.483] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1025\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1025\\eula.rtf")) returned 0 [0213.483] GetLastError () returned 0x20 [0213.483] GetLastError () returned 0x20 [0213.484] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x22a138) returned 1 [0213.490] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x260a18 | out: pbBuffer=0x260a18) returned 1 [0213.490] CryptReleaseContext (hProv=0x22a138, dwFlags=0x0) returned 1 [0213.490] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a18 | out: hHeap=0x1f0000) returned 1 [0213.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260a40 [0213.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260a18 [0213.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x234de8 [0213.490] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0213.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0213.490] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234de8 | out: hHeap=0x1f0000) returned 1 [0213.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x22c8b8 [0213.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffa0 [0213.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x235d80 [0213.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260a40 [0213.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x236e28 [0213.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ff0 [0213.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235c48 [0213.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260658 [0213.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x237038 [0213.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a50 [0213.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260540 [0213.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffd0 [0213.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a30 [0213.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606f8 [0213.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210018 [0213.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210018 | out: hHeap=0x1f0000) returned 1 [0213.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606f8 | out: hHeap=0x1f0000) returned 1 [0213.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a30 | out: hHeap=0x1f0000) returned 1 [0213.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffd0 | out: hHeap=0x1f0000) returned 1 [0213.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0213.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a50 | out: hHeap=0x1f0000) returned 1 [0213.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237038 | out: hHeap=0x1f0000) returned 1 [0213.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260658 | out: hHeap=0x1f0000) returned 1 [0213.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235c48 | out: hHeap=0x1f0000) returned 1 [0213.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x234ec8 [0213.492] GetLastError () returned 0x0 [0213.492] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173df20 | out: lpSystemTimeAsFileTime=0x173df20) [0213.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238a80 [0213.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605b8 [0213.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205150 [0213.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205150 | out: hHeap=0x1f0000) returned 1 [0213.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0213.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0213.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205150 [0213.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205150 | out: hHeap=0x1f0000) returned 1 [0213.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0213.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a80 | out: hHeap=0x1f0000) returned 1 [0213.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0213.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x234f38 [0213.493] GetLastError () returned 0x0 [0213.493] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1025\\eula.rtf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1025\\eula.rtf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e290, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0213.494] GetFileType (hFile=0x220) returned 0x1 [0213.494] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x290fe8 [0213.494] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e218 | out: lpNewFilePointer=0x0) returned 1 [0213.495] GetLastError () returned 0xb7 [0213.495] CloseHandle (hObject=0x220) returned 1 [0213.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b40 | out: hHeap=0x1f0000) returned 1 [0213.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a30 | out: hHeap=0x1f0000) returned 1 [0213.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236f30 | out: hHeap=0x1f0000) returned 1 [0213.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236e28 | out: hHeap=0x1f0000) returned 1 [0213.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0213.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ff0 | out: hHeap=0x1f0000) returned 1 [0213.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235d80 | out: hHeap=0x1f0000) returned 1 [0213.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffa0 | out: hHeap=0x1f0000) returned 1 [0213.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0213.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2247e8 | out: hHeap=0x1f0000) returned 1 [0213.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a18 | out: hHeap=0x1f0000) returned 1 [0213.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0213.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x252370 | out: hHeap=0x1f0000) returned 1 [0213.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224040 | out: hHeap=0x1f0000) returned 1 [0213.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234d08 | out: hHeap=0x1f0000) returned 1 [0213.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b20 | out: hHeap=0x1f0000) returned 1 [0213.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff70 | out: hHeap=0x1f0000) returned 1 [0213.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0213.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ab0 | out: hHeap=0x1f0000) returned 1 [0213.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff28 | out: hHeap=0x1f0000) returned 1 [0213.497] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ab8 | out: hHeap=0x1f0000) returned 1 [0213.497] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a10 | out: hHeap=0x1f0000) returned 1 [0213.497] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237b90 | out: hHeap=0x1f0000) returned 1 [0213.497] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0213.497] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0213.497] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2343e0 | out: hHeap=0x1f0000) returned 1 [0213.497] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0213.497] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0213.497] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234110 | out: hHeap=0x1f0000) returned 1 [0213.497] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389f0 | out: hHeap=0x1f0000) returned 1 [0213.497] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a60 | out: hHeap=0x1f0000) returned 1 [0213.497] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x288fa8 | out: hHeap=0x1f0000) returned 1 [0213.497] CloseHandle (hObject=0x210) returned 1 [0213.498] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a90 | out: hHeap=0x1f0000) returned 1 [0213.498] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389e0 | out: hHeap=0x1f0000) returned 1 [0213.498] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a7a20 | out: hHeap=0x1f0000) returned 1 [0213.498] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24b1d8 | out: hHeap=0x1f0000) returned 1 [0213.498] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20fef8 | out: hHeap=0x1f0000) returned 1 [0213.498] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205290 | out: hHeap=0x1f0000) returned 1 [0213.498] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28bfc0 | out: hHeap=0x1f0000) returned 1 [0213.498] CloseHandle (hObject=0x204) returned 1 [0213.498] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ae0 | out: hHeap=0x1f0000) returned 1 [0213.498] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ad0 | out: hHeap=0x1f0000) returned 1 [0213.498] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261388 | out: hHeap=0x1f0000) returned 1 [0213.498] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205130 | out: hHeap=0x1f0000) returned 1 [0213.498] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f5d8 | out: hHeap=0x1f0000) returned 1 [0213.499] CloseHandle (hObject=0x21c) returned 1 [0213.499] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a00 | out: hHeap=0x1f0000) returned 1 [0213.499] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a20 | out: hHeap=0x1f0000) returned 1 [0213.499] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ff0 | out: hHeap=0x1f0000) returned 1 [0213.499] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b00 | out: hHeap=0x1f0000) returned 1 [0213.499] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ac0 | out: hHeap=0x1f0000) returned 1 [0213.499] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b60 | out: hHeap=0x1f0000) returned 1 [0213.499] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a70 | out: hHeap=0x1f0000) returned 1 [0213.499] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0213.499] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2595a0 | out: hHeap=0x1f0000) returned 1 [0213.499] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2244a0 | out: hHeap=0x1f0000) returned 1 [0213.499] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2068c8 | out: hHeap=0x1f0000) returned 1 [0213.500] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210078 | out: hHeap=0x1f0000) returned 1 [0213.500] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffb8 | out: hHeap=0x1f0000) returned 1 [0213.500] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20e1f0 | out: hHeap=0x1f0000) returned 1 [0213.500] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24fd60 | out: hHeap=0x1f0000) returned 1 [0213.500] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223be0 | out: hHeap=0x1f0000) returned 1 [0213.500] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234db0 | out: hHeap=0x1f0000) returned 1 [0213.500] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239508 | out: hHeap=0x1f0000) returned 1 [0213.500] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2276b8 | out: hHeap=0x1f0000) returned 1 [0213.500] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234500 | out: hHeap=0x1f0000) returned 1 [0213.500] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0213.500] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1025\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1025\\eula.rtf")) returned 1 [0213.501] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x121e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0213.501] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2f0 [0213.502] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2349c8 [0213.502] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235c48 [0213.502] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2349c8 | out: hHeap=0x1f0000) returned 1 [0213.502] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235be0 | out: hHeap=0x1f0000) returned 1 [0213.502] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0213.502] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1025\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1025\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0213.739] GetFileType (hFile=0x21c) returned 0x1 [0213.740] CloseHandle (hObject=0x21c) returned 1 [0213.740] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235700 [0213.740] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1025\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1025\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x173eb6c | out: lpFileInformation=0x173eb6c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x121e6)) returned 1 [0213.740] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0213.740] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235700 [0213.740] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1025\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1025\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x173eb7c | out: lpFileInformation=0x173eb7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x121e6)) returned 1 [0213.740] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0213.740] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236128 [0213.740] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236128 | out: hHeap=0x1f0000) returned 1 [0213.740] GetLastError () returned 0x0 [0213.741] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x2859b0) returned 1 [0213.746] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x260770 | out: pbBuffer=0x260770) returned 1 [0213.746] CryptReleaseContext (hProv=0x2859b0, dwFlags=0x0) returned 1 [0213.746] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0213.746] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x24fd60 [0213.746] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x223be0 [0213.746] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=37111505500) returned 1 [0213.746] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0213.746] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=37111526580) returned 1 [0213.746] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0213.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x21cf00 [0213.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x258298 [0213.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x223cf8 [0213.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x20e1f0 [0213.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210090 [0213.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2067d8 [0213.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20fef8 [0213.747] GetLastError () returned 0x0 [0213.862] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1025\\LocalizedData.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1025\\localizeddata.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e230, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0213.863] GetFileType (hFile=0x21c) returned 0x1 [0213.863] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ad0 [0213.863] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b60 [0213.864] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1025\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1025\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0213.864] GetFileType (hFile=0x204) returned 0x1 [0213.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ff0 [0213.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205130 [0213.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x260ff0 [0213.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b50 [0213.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a30 [0213.865] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1025\\LocalizedData.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1025\\localizeddata.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0213.865] GetFileType (hFile=0x210) returned 0x1 [0213.865] GetLastError () returned 0xb7 [0213.865] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1025\\LocalizedData.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1025\\localizeddata.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0213.865] GetFileType (hFile=0x220) returned 0x1 [0213.865] GetLastError () returned 0xb7 [0213.866] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1025\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1025\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1a4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0213.866] GetFileType (hFile=0x224) returned 0x1 [0213.866] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28ffe0 [0213.866] ReadFile (in: hFile=0x224, lpBuffer=0x28ffe0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e100, lpOverlapped=0x0 | out: lpBuffer=0x28ffe0*, lpNumberOfBytesRead=0x173e100*=0x1000, lpOverlapped=0x0) returned 1 [0213.958] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24b1d8 [0213.958] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28bfc0 [0213.958] GetLastError () returned 0x0 [0213.962] CloseHandle (hObject=0x21c) returned 1 [0213.965] CloseHandle (hObject=0x204) returned 1 [0213.965] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a60 [0213.965] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389f0 [0213.966] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1025\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1025\\localizeddata.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0213.968] GetFileType (hFile=0x204) returned 0x1 [0213.968] GetLastError () returned 0xb7 [0213.970] CloseHandle (hObject=0x204) returned 1 [0213.970] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1025\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1025\\localizeddata.xml")) returned 0 [0213.970] GetLastError () returned 0x20 [0213.970] GetLastError () returned 0x20 [0213.970] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x286098) returned 1 [0213.978] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x260658 | out: pbBuffer=0x260658) returned 1 [0213.978] CryptReleaseContext (hProv=0x286098, dwFlags=0x0) returned 1 [0213.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260658 | out: hHeap=0x1f0000) returned 1 [0213.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260518 [0213.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2605b8 [0213.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0213.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0213.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0213.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0213.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x22c8b8 [0213.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffb8 [0213.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x235d80 [0213.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260770 [0213.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x236e28 [0213.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ff0 [0213.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235cb0 [0213.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260658 [0213.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x237038 [0213.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a20 [0213.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260540 [0213.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffd0 [0213.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b80 [0213.980] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606f8 [0213.980] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210018 [0213.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210018 | out: hHeap=0x1f0000) returned 1 [0213.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606f8 | out: hHeap=0x1f0000) returned 1 [0213.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b80 | out: hHeap=0x1f0000) returned 1 [0213.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffd0 | out: hHeap=0x1f0000) returned 1 [0213.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0213.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a20 | out: hHeap=0x1f0000) returned 1 [0213.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237038 | out: hHeap=0x1f0000) returned 1 [0213.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260658 | out: hHeap=0x1f0000) returned 1 [0213.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235cb0 | out: hHeap=0x1f0000) returned 1 [0213.981] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x21cf70 [0213.981] GetLastError () returned 0x0 [0213.981] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173df20 | out: lpSystemTimeAsFileTime=0x173df20) [0213.981] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238a40 [0213.981] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605e0 [0213.981] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205130 [0213.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205130 | out: hHeap=0x1f0000) returned 1 [0213.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605e0 | out: hHeap=0x1f0000) returned 1 [0213.981] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0213.982] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205130 [0213.982] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205130 | out: hHeap=0x1f0000) returned 1 [0213.982] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0213.982] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a40 | out: hHeap=0x1f0000) returned 1 [0213.982] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0213.982] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x21d050 [0213.982] GetLastError () returned 0x0 [0213.982] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1025\\LocalizedData.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1025\\localizeddata.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e290, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0213.983] GetFileType (hFile=0x204) returned 0x1 [0213.983] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28efd8 [0213.983] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e218 | out: lpNewFilePointer=0x0) returned 1 [0213.983] GetLastError () returned 0xb7 [0213.984] CloseHandle (hObject=0x204) returned 1 [0213.984] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b20 | out: hHeap=0x1f0000) returned 1 [0213.984] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b30 | out: hHeap=0x1f0000) returned 1 [0213.984] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236f30 | out: hHeap=0x1f0000) returned 1 [0213.984] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236e28 | out: hHeap=0x1f0000) returned 1 [0213.984] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0213.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ff0 | out: hHeap=0x1f0000) returned 1 [0213.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235d80 | out: hHeap=0x1f0000) returned 1 [0213.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffb8 | out: hHeap=0x1f0000) returned 1 [0213.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0213.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223e10 | out: hHeap=0x1f0000) returned 1 [0213.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0213.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0213.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x252370 | out: hHeap=0x1f0000) returned 1 [0213.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224158 | out: hHeap=0x1f0000) returned 1 [0213.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0213.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b10 | out: hHeap=0x1f0000) returned 1 [0213.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffa0 | out: hHeap=0x1f0000) returned 1 [0213.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0213.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b70 | out: hHeap=0x1f0000) returned 1 [0213.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff70 | out: hHeap=0x1f0000) returned 1 [0213.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0213.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ab0 | out: hHeap=0x1f0000) returned 1 [0213.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237248 | out: hHeap=0x1f0000) returned 1 [0213.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260838 | out: hHeap=0x1f0000) returned 1 [0213.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235be0 | out: hHeap=0x1f0000) returned 1 [0213.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234aa0 | out: hHeap=0x1f0000) returned 1 [0213.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0213.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0213.987] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234788 | out: hHeap=0x1f0000) returned 1 [0213.987] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389f0 | out: hHeap=0x1f0000) returned 1 [0213.987] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a60 | out: hHeap=0x1f0000) returned 1 [0213.987] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28ffe0 | out: hHeap=0x1f0000) returned 1 [0214.347] CloseHandle (hObject=0x224) returned 1 [0214.347] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a90 | out: hHeap=0x1f0000) returned 1 [0214.347] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389e0 | out: hHeap=0x1f0000) returned 1 [0214.347] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a7a20 | out: hHeap=0x1f0000) returned 1 [0214.347] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24b1d8 | out: hHeap=0x1f0000) returned 1 [0214.347] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff28 | out: hHeap=0x1f0000) returned 1 [0214.347] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205290 | out: hHeap=0x1f0000) returned 1 [0214.347] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28bfc0 | out: hHeap=0x1f0000) returned 1 [0214.347] CloseHandle (hObject=0x220) returned 1 [0214.348] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a10 | out: hHeap=0x1f0000) returned 1 [0214.348] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ae0 | out: hHeap=0x1f0000) returned 1 [0214.348] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2614f8 | out: hHeap=0x1f0000) returned 1 [0214.348] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205210 | out: hHeap=0x1f0000) returned 1 [0214.348] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0214.348] CloseHandle (hObject=0x210) returned 1 [0214.349] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a30 | out: hHeap=0x1f0000) returned 1 [0214.349] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b50 | out: hHeap=0x1f0000) returned 1 [0214.349] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ff0 | out: hHeap=0x1f0000) returned 1 [0214.349] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b60 | out: hHeap=0x1f0000) returned 1 [0214.349] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ad0 | out: hHeap=0x1f0000) returned 1 [0214.349] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b00 | out: hHeap=0x1f0000) returned 1 [0214.349] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ac0 | out: hHeap=0x1f0000) returned 1 [0214.349] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224a18 | out: hHeap=0x1f0000) returned 1 [0214.349] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x258298 | out: hHeap=0x1f0000) returned 1 [0214.349] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223cf8 | out: hHeap=0x1f0000) returned 1 [0214.349] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2067d8 | out: hHeap=0x1f0000) returned 1 [0214.349] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20fef8 | out: hHeap=0x1f0000) returned 1 [0214.349] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210090 | out: hHeap=0x1f0000) returned 1 [0214.350] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20e1f0 | out: hHeap=0x1f0000) returned 1 [0214.350] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24fd60 | out: hHeap=0x1f0000) returned 1 [0214.350] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223be0 | out: hHeap=0x1f0000) returned 1 [0214.350] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0214.350] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0214.350] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e360 | out: hHeap=0x1f0000) returned 1 [0214.350] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234500 | out: hHeap=0x1f0000) returned 1 [0214.350] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bd0 | out: hHeap=0x1f0000) returned 1 [0214.350] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1025\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1025\\localizeddata.xml")) returned 1 [0214.352] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0214.352] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0214.352] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234500 [0214.352] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236128 [0214.352] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234500 | out: hHeap=0x1f0000) returned 1 [0214.352] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235c48 | out: hHeap=0x1f0000) returned 1 [0214.352] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0214.352] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1025\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1025\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0214.353] GetFileType (hFile=0x210) returned 0x1 [0214.353] CloseHandle (hObject=0x210) returned 1 [0214.353] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236190 [0214.353] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1025\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1025\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x173eb6c | out: lpFileInformation=0x173eb6c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358)) returned 1 [0214.353] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236190 | out: hHeap=0x1f0000) returned 1 [0214.353] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2362c8 [0214.353] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1025\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1025\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x173eb7c | out: lpFileInformation=0x173eb7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358)) returned 1 [0214.353] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2362c8 | out: hHeap=0x1f0000) returned 1 [0214.353] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235eb8 [0214.353] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235eb8 | out: hHeap=0x1f0000) returned 1 [0214.354] GetLastError () returned 0x0 [0214.354] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x286d58) returned 1 [0214.361] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2609a0 | out: pbBuffer=0x2609a0) returned 1 [0214.361] CryptReleaseContext (hProv=0x286d58, dwFlags=0x0) returned 1 [0214.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0214.361] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x254980 [0214.361] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x223be0 [0214.361] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=37173020065) returned 1 [0214.361] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0214.362] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=37173057131) returned 1 [0214.362] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0214.362] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x21cf70 [0214.362] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x258298 [0214.362] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x223cf8 [0214.362] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x20e1f0 [0214.362] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20fef8 [0214.362] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206928 [0214.362] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff28 [0214.363] GetLastError () returned 0x0 [0214.363] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1025\\SetupResources.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1025\\setupresources.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e230, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0214.363] GetFileType (hFile=0x210) returned 0x1 [0214.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b60 [0214.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ac0 [0214.364] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1025\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1025\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0214.365] GetFileType (hFile=0x220) returned 0x1 [0214.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x2051f0 [0214.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205330 [0214.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261388 [0214.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a00 [0214.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a30 [0214.366] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1025\\SetupResources.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1025\\setupresources.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0214.367] GetFileType (hFile=0x224) returned 0x1 [0214.367] GetLastError () returned 0xb7 [0214.367] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1025\\SetupResources.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1025\\setupresources.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1bc [0214.368] GetFileType (hFile=0x1bc) returned 0x1 [0214.368] GetLastError () returned 0xb7 [0214.368] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1025\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1025\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1a4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0214.368] GetFileType (hFile=0x1fc) returned 0x1 [0214.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x287fa0 [0214.369] ReadFile (in: hFile=0x1fc, lpBuffer=0x287fa0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e100, lpOverlapped=0x0 | out: lpBuffer=0x287fa0*, lpNumberOfBytesRead=0x173e100*=0x1000, lpOverlapped=0x0) returned 1 [0214.371] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24b1d8 [0214.372] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28dfd0 [0214.372] GetLastError () returned 0x0 [0214.374] CloseHandle (hObject=0x210) returned 1 [0214.375] CloseHandle (hObject=0x220) returned 1 [0214.376] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238aa0 [0214.376] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a40 [0214.377] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1025\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1025\\setupresources.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0214.379] GetFileType (hFile=0x220) returned 0x1 [0214.379] GetLastError () returned 0xb7 [0214.380] CloseHandle (hObject=0x220) returned 1 [0214.381] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1025\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1025\\setupresources.dll")) returned 0 [0214.381] GetLastError () returned 0x20 [0214.381] GetLastError () returned 0x20 [0214.381] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x2863c8) returned 1 [0214.388] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2607e8 | out: pbBuffer=0x2607e8) returned 1 [0214.388] CryptReleaseContext (hProv=0x2863c8, dwFlags=0x0) returned 1 [0214.388] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607e8 | out: hHeap=0x1f0000) returned 1 [0214.388] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260770 [0214.388] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260658 [0214.388] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0214.388] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0214.388] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0214.388] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0214.388] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x22c8b8 [0214.388] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210078 [0214.388] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x235d80 [0214.388] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2607e8 [0214.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x237140 [0214.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205210 [0214.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235de8 [0214.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260518 [0214.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x236e28 [0214.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ae0 [0214.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0214.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffd0 [0214.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a10 [0214.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260540 [0214.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210000 [0214.389] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210000 | out: hHeap=0x1f0000) returned 1 [0214.390] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0214.390] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a10 | out: hHeap=0x1f0000) returned 1 [0214.390] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffd0 | out: hHeap=0x1f0000) returned 1 [0214.390] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0214.390] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ae0 | out: hHeap=0x1f0000) returned 1 [0214.390] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236e28 | out: hHeap=0x1f0000) returned 1 [0214.390] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0214.390] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235de8 | out: hHeap=0x1f0000) returned 1 [0214.390] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x21d2f0 [0214.390] GetLastError () returned 0x0 [0214.390] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173df20 | out: lpSystemTimeAsFileTime=0x173df20) [0214.391] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238ae0 [0214.391] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0214.391] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205150 [0214.391] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205150 | out: hHeap=0x1f0000) returned 1 [0214.391] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0214.391] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0214.391] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205150 [0214.391] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205150 | out: hHeap=0x1f0000) returned 1 [0214.391] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0214.391] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ae0 | out: hHeap=0x1f0000) returned 1 [0214.391] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0214.391] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x21d2f0 [0214.391] GetLastError () returned 0x0 [0214.392] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1025\\SetupResources.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1025\\setupresources.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e290, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0214.392] GetFileType (hFile=0x220) returned 0x1 [0214.392] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28ffe0 [0214.392] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e218 | out: lpNewFilePointer=0x0) returned 1 [0214.393] GetLastError () returned 0xb7 [0214.393] CloseHandle (hObject=0x220) returned 1 [0214.722] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b10 | out: hHeap=0x1f0000) returned 1 [0214.722] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b90 | out: hHeap=0x1f0000) returned 1 [0214.723] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236f30 | out: hHeap=0x1f0000) returned 1 [0214.723] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237140 | out: hHeap=0x1f0000) returned 1 [0214.723] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607e8 | out: hHeap=0x1f0000) returned 1 [0214.723] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205210 | out: hHeap=0x1f0000) returned 1 [0214.723] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235d80 | out: hHeap=0x1f0000) returned 1 [0214.723] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210078 | out: hHeap=0x1f0000) returned 1 [0214.723] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0214.723] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223e10 | out: hHeap=0x1f0000) returned 1 [0214.723] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260658 | out: hHeap=0x1f0000) returned 1 [0214.723] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0214.723] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24fd60 | out: hHeap=0x1f0000) returned 1 [0214.723] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2246d0 | out: hHeap=0x1f0000) returned 1 [0214.723] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf70 | out: hHeap=0x1f0000) returned 1 [0214.723] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b80 | out: hHeap=0x1f0000) returned 1 [0214.723] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffb8 | out: hHeap=0x1f0000) returned 1 [0214.723] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0214.723] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ad0 | out: hHeap=0x1f0000) returned 1 [0214.723] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffa0 | out: hHeap=0x1f0000) returned 1 [0214.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0214.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ab0 | out: hHeap=0x1f0000) returned 1 [0214.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236d20 | out: hHeap=0x1f0000) returned 1 [0214.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608b0 | out: hHeap=0x1f0000) returned 1 [0214.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235eb8 | out: hHeap=0x1f0000) returned 1 [0214.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2347d0 | out: hHeap=0x1f0000) returned 1 [0214.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260838 | out: hHeap=0x1f0000) returned 1 [0214.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0214.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346f8 | out: hHeap=0x1f0000) returned 1 [0214.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a40 | out: hHeap=0x1f0000) returned 1 [0214.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238aa0 | out: hHeap=0x1f0000) returned 1 [0214.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x287fa0 | out: hHeap=0x1f0000) returned 1 [0214.724] CloseHandle (hObject=0x1fc) returned 1 [0214.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b70 | out: hHeap=0x1f0000) returned 1 [0214.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a90 | out: hHeap=0x1f0000) returned 1 [0214.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a7ae0 | out: hHeap=0x1f0000) returned 1 [0214.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24b1d8 | out: hHeap=0x1f0000) returned 1 [0214.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff70 | out: hHeap=0x1f0000) returned 1 [0214.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2051f0 | out: hHeap=0x1f0000) returned 1 [0214.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28dfd0 | out: hHeap=0x1f0000) returned 1 [0214.725] CloseHandle (hObject=0x1bc) returned 1 [0214.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a80 | out: hHeap=0x1f0000) returned 1 [0214.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b00 | out: hHeap=0x1f0000) returned 1 [0214.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2614f8 | out: hHeap=0x1f0000) returned 1 [0214.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205130 | out: hHeap=0x1f0000) returned 1 [0214.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0214.725] CloseHandle (hObject=0x224) returned 1 [0214.726] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a30 | out: hHeap=0x1f0000) returned 1 [0214.726] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a00 | out: hHeap=0x1f0000) returned 1 [0214.726] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261388 | out: hHeap=0x1f0000) returned 1 [0214.726] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ac0 | out: hHeap=0x1f0000) returned 1 [0214.726] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b60 | out: hHeap=0x1f0000) returned 1 [0214.726] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a20 | out: hHeap=0x1f0000) returned 1 [0214.726] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238af0 | out: hHeap=0x1f0000) returned 1 [0214.726] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223f28 | out: hHeap=0x1f0000) returned 1 [0214.726] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x258298 | out: hHeap=0x1f0000) returned 1 [0214.726] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223cf8 | out: hHeap=0x1f0000) returned 1 [0214.726] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206928 | out: hHeap=0x1f0000) returned 1 [0214.726] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff28 | out: hHeap=0x1f0000) returned 1 [0214.726] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20fef8 | out: hHeap=0x1f0000) returned 1 [0214.726] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20e1f0 | out: hHeap=0x1f0000) returned 1 [0214.726] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x254980 | out: hHeap=0x1f0000) returned 1 [0214.726] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223be0 | out: hHeap=0x1f0000) returned 1 [0214.726] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0214.727] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235768 | out: hHeap=0x1f0000) returned 1 [0214.727] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e360 | out: hHeap=0x1f0000) returned 1 [0214.727] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2349c8 | out: hHeap=0x1f0000) returned 1 [0214.727] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bd0 | out: hHeap=0x1f0000) returned 1 [0214.727] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1025\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1025\\setupresources.dll")) returned 1 [0214.728] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0214.728] FindClose (in: hFindFile=0x24ea00 | out: hFindFile=0x24ea00) returned 1 [0214.728] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236128 | out: hHeap=0x1f0000) returned 1 [0214.728] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2271f0 | out: hHeap=0x1f0000) returned 1 [0214.728] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0214.728] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234548 | out: hHeap=0x1f0000) returned 1 [0214.728] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234860 [0214.728] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2607e8 [0214.729] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x263640 [0214.729] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234788 [0214.729] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1028\\*", lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ec00 [0214.729] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2347d0 [0214.729] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234788 | out: hHeap=0x1f0000) returned 1 [0214.729] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0214.729] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.729] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2344b8 [0214.729] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2347d0 | out: hHeap=0x1f0000) returned 1 [0214.729] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0214.729] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0214.729] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x18a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0214.729] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0214.729] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234500 [0214.729] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x235eb8 [0214.730] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234500 | out: hHeap=0x1f0000) returned 1 [0214.730] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2344b8 | out: hHeap=0x1f0000) returned 1 [0214.730] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0214.730] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1028\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1028\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0214.730] GetFileType (hFile=0x224) returned 0x1 [0214.730] CloseHandle (hObject=0x224) returned 1 [0214.730] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239508 [0214.731] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1028\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1028\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x173eb6c | out: lpFileInformation=0x173eb6c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x18a5)) returned 1 [0214.731] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239508 | out: hHeap=0x1f0000) returned 1 [0214.731] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c8b8 [0214.731] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1028\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1028\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x173eb7c | out: lpFileInformation=0x173eb7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x18a5)) returned 1 [0214.731] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0214.731] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239508 [0214.731] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239508 | out: hHeap=0x1f0000) returned 1 [0214.731] GetLastError () returned 0x0 [0214.731] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x2861a8) returned 1 [0214.738] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x260590 | out: pbBuffer=0x260590) returned 1 [0214.738] CryptReleaseContext (hProv=0x2861a8, dwFlags=0x0) returned 1 [0214.738] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0214.738] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x255c88 [0214.738] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x224040 [0214.738] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=37210671835) returned 1 [0214.738] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0214.738] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=37210692273) returned 1 [0214.738] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0214.738] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x21cf70 [0214.738] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x254980 [0214.738] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x223e10 [0214.738] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x20e1f0 [0214.738] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20fef8 [0214.738] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206808 [0214.739] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210078 [0214.739] GetLastError () returned 0x0 [0214.739] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1028\\eula.rtf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1028\\eula.rtf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e230, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0214.741] GetFileType (hFile=0x224) returned 0x1 [0214.741] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a10 [0214.742] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b50 [0214.742] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1028\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1028\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1bc [0214.742] GetFileType (hFile=0x1bc) returned 0x1 [0214.742] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x2051f0 [0214.743] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205290 [0214.743] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261218 [0214.743] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ad0 [0214.743] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238af0 [0214.743] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1028\\eula.rtf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1028\\eula.rtf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0214.744] GetFileType (hFile=0x1fc) returned 0x1 [0214.744] GetLastError () returned 0xb7 [0214.744] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1028\\eula.rtf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1028\\eula.rtf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0214.744] GetFileType (hFile=0x210) returned 0x1 [0214.745] GetLastError () returned 0xb7 [0214.745] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1028\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1028\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1a4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0214.745] GetFileType (hFile=0x1b0) returned 0x1 [0214.745] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x289fb0 [0214.745] ReadFile (in: hFile=0x1b0, lpBuffer=0x289fb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e100, lpOverlapped=0x0 | out: lpBuffer=0x289fb0*, lpNumberOfBytesRead=0x173e100*=0x1000, lpOverlapped=0x0) returned 1 [0214.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24c600 [0214.749] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28afb8 [0214.749] GetLastError () returned 0x0 [0214.751] CloseHandle (hObject=0x224) returned 1 [0215.239] CloseHandle (hObject=0x1bc) returned 1 [0215.239] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ac0 [0215.239] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a20 [0215.240] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1028\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1028\\eula.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1bc [0215.241] GetFileType (hFile=0x1bc) returned 0x1 [0215.241] GetLastError () returned 0xb7 [0215.243] CloseHandle (hObject=0x1bc) returned 1 [0215.243] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1028\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1028\\eula.rtf")) returned 0 [0215.243] GetLastError () returned 0x20 [0215.244] GetLastError () returned 0x20 [0215.244] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x286d58) returned 1 [0215.251] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238118 | out: pbBuffer=0x238118) returned 1 [0215.251] CryptReleaseContext (hProv=0x286d58, dwFlags=0x0) returned 1 [0215.251] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0215.251] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238348 [0215.251] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2380a0 [0215.251] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0215.251] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238348 | out: hHeap=0x1f0000) returned 1 [0215.251] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0215.251] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0215.252] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x239458 [0215.252] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffb8 [0215.252] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x235cb0 [0215.252] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238208 [0215.252] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x237b90 [0215.252] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x2051f0 [0215.252] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2361f8 [0215.252] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238398 [0215.252] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x237a88 [0215.252] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a70 [0215.252] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238438 [0215.252] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffd0 [0215.252] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a80 [0215.253] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0215.254] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210000 [0215.254] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210000 | out: hHeap=0x1f0000) returned 1 [0215.254] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0215.254] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a80 | out: hHeap=0x1f0000) returned 1 [0215.254] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffd0 | out: hHeap=0x1f0000) returned 1 [0215.254] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238438 | out: hHeap=0x1f0000) returned 1 [0215.254] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a70 | out: hHeap=0x1f0000) returned 1 [0215.254] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237a88 | out: hHeap=0x1f0000) returned 1 [0215.255] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0215.255] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2361f8 | out: hHeap=0x1f0000) returned 1 [0215.255] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x227dd0 [0215.255] GetLastError () returned 0x0 [0215.255] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173df20 | out: lpSystemTimeAsFileTime=0x173df20) [0215.255] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238b70 [0215.255] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380c8 [0215.255] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x2052d0 [0215.256] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2052d0 | out: hHeap=0x1f0000) returned 1 [0215.256] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380c8 | out: hHeap=0x1f0000) returned 1 [0215.256] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0215.256] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205210 [0215.256] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205210 | out: hHeap=0x1f0000) returned 1 [0215.256] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0215.256] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b70 | out: hHeap=0x1f0000) returned 1 [0215.256] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0215.256] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x2282a0 [0215.256] GetLastError () returned 0x0 [0215.257] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1028\\eula.rtf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1028\\eula.rtf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e290, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1bc [0215.257] GetFileType (hFile=0x1bc) returned 0x1 [0215.257] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28bfc0 [0215.257] SetFilePointerEx (in: hFile=0x1bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e218 | out: lpNewFilePointer=0x0) returned 1 [0215.258] GetLastError () returned 0xb7 [0215.258] CloseHandle (hObject=0x1bc) returned 1 [0215.258] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a40 | out: hHeap=0x1f0000) returned 1 [0215.258] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a30 | out: hHeap=0x1f0000) returned 1 [0215.258] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236f30 | out: hHeap=0x1f0000) returned 1 [0215.258] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237b90 | out: hHeap=0x1f0000) returned 1 [0215.258] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0215.259] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2051f0 | out: hHeap=0x1f0000) returned 1 [0215.259] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235cb0 | out: hHeap=0x1f0000) returned 1 [0215.259] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffb8 | out: hHeap=0x1f0000) returned 1 [0215.259] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239458 | out: hHeap=0x1f0000) returned 1 [0215.259] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2247e8 | out: hHeap=0x1f0000) returned 1 [0215.259] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0215.259] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0215.259] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x258298 | out: hHeap=0x1f0000) returned 1 [0215.259] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2244a0 | out: hHeap=0x1f0000) returned 1 [0215.259] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0215.259] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238aa0 | out: hHeap=0x1f0000) returned 1 [0215.259] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffa0 | out: hHeap=0x1f0000) returned 1 [0215.259] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0215.259] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b40 | out: hHeap=0x1f0000) returned 1 [0215.259] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff70 | out: hHeap=0x1f0000) returned 1 [0215.260] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0215.260] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b00 | out: hHeap=0x1f0000) returned 1 [0215.260] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237980 | out: hHeap=0x1f0000) returned 1 [0215.260] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0215.260] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235768 | out: hHeap=0x1f0000) returned 1 [0215.260] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234788 | out: hHeap=0x1f0000) returned 1 [0215.260] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0215.260] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0215.260] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234ae8 | out: hHeap=0x1f0000) returned 1 [0215.260] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a20 | out: hHeap=0x1f0000) returned 1 [0215.260] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ac0 | out: hHeap=0x1f0000) returned 1 [0215.260] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x289fb0 | out: hHeap=0x1f0000) returned 1 [0215.260] CloseHandle (hObject=0x1b0) returned 1 [0215.261] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389f0 | out: hHeap=0x1f0000) returned 1 [0215.261] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a60 | out: hHeap=0x1f0000) returned 1 [0215.261] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x231ba0 | out: hHeap=0x1f0000) returned 1 [0215.261] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24c600 | out: hHeap=0x1f0000) returned 1 [0215.261] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff28 | out: hHeap=0x1f0000) returned 1 [0215.261] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205130 | out: hHeap=0x1f0000) returned 1 [0215.261] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28afb8 | out: hHeap=0x1f0000) returned 1 [0215.261] CloseHandle (hObject=0x210) returned 1 [0215.262] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389e0 | out: hHeap=0x1f0000) returned 1 [0215.262] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b10 | out: hHeap=0x1f0000) returned 1 [0215.262] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261668 | out: hHeap=0x1f0000) returned 1 [0215.262] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ff0 | out: hHeap=0x1f0000) returned 1 [0215.262] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220828 | out: hHeap=0x1f0000) returned 1 [0215.262] CloseHandle (hObject=0x1fc) returned 1 [0215.263] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238af0 | out: hHeap=0x1f0000) returned 1 [0215.263] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ad0 | out: hHeap=0x1f0000) returned 1 [0215.263] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261218 | out: hHeap=0x1f0000) returned 1 [0215.263] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b50 | out: hHeap=0x1f0000) returned 1 [0215.263] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a10 | out: hHeap=0x1f0000) returned 1 [0215.263] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a00 | out: hHeap=0x1f0000) returned 1 [0215.263] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ae0 | out: hHeap=0x1f0000) returned 1 [0215.263] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0215.263] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x254980 | out: hHeap=0x1f0000) returned 1 [0215.264] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223e10 | out: hHeap=0x1f0000) returned 1 [0215.264] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206808 | out: hHeap=0x1f0000) returned 1 [0215.264] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210078 | out: hHeap=0x1f0000) returned 1 [0215.264] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20fef8 | out: hHeap=0x1f0000) returned 1 [0215.264] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20e1f0 | out: hHeap=0x1f0000) returned 1 [0215.264] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x255c88 | out: hHeap=0x1f0000) returned 1 [0215.264] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224040 | out: hHeap=0x1f0000) returned 1 [0215.264] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0215.264] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239508 | out: hHeap=0x1f0000) returned 1 [0215.264] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2617f8 | out: hHeap=0x1f0000) returned 1 [0215.264] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346b0 | out: hHeap=0x1f0000) returned 1 [0215.264] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260798 | out: hHeap=0x1f0000) returned 1 [0215.265] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1028\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1028\\eula.rtf")) returned 1 [0215.266] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed90, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0215.266] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0215.266] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234980 [0215.266] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236128 [0215.266] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234980 | out: hHeap=0x1f0000) returned 1 [0215.267] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235eb8 | out: hHeap=0x1f0000) returned 1 [0215.267] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0215.267] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1028\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1028\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0215.268] GetFileType (hFile=0x1fc) returned 0x1 [0215.268] CloseHandle (hObject=0x1fc) returned 1 [0215.269] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235700 [0215.269] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1028\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1028\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x173eb6c | out: lpFileInformation=0x173eb6c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed90)) returned 1 [0215.269] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0215.269] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2360c0 [0215.269] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1028\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1028\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x173eb7c | out: lpFileInformation=0x173eb7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed90)) returned 1 [0215.269] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2360c0 | out: hHeap=0x1f0000) returned 1 [0215.269] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235eb8 [0215.270] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235eb8 | out: hHeap=0x1f0000) returned 1 [0215.270] GetLastError () returned 0x0 [0215.270] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x286450) returned 1 [0215.277] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238078 | out: pbBuffer=0x238078) returned 1 [0215.277] CryptReleaseContext (hProv=0x286450, dwFlags=0x0) returned 1 [0215.277] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0215.277] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x251068 [0215.277] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2247e8 [0215.277] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=37264576278) returned 1 [0215.277] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0215.277] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=37264592816) returned 1 [0215.277] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0215.277] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x227ee8 [0215.277] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x255c88 [0215.277] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x224388 [0215.277] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x20e1f0 [0215.277] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20fef8 [0215.277] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206838 [0215.277] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff28 [0215.278] GetLastError () returned 0x0 [0215.278] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1028\\LocalizedData.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1028\\localizeddata.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e230, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0215.278] GetFileType (hFile=0x1fc) returned 0x1 [0215.278] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238af0 [0215.279] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a80 [0215.279] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1028\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1028\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0215.279] GetFileType (hFile=0x210) returned 0x1 [0215.279] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x2051f0 [0215.279] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205130 [0215.279] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261668 [0215.279] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b30 [0215.280] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a90 [0215.280] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1028\\LocalizedData.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1028\\localizeddata.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0215.280] GetFileType (hFile=0x1b0) returned 0x1 [0215.280] GetLastError () returned 0xb7 [0215.280] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1028\\LocalizedData.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1028\\localizeddata.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1bc [0215.281] GetFileType (hFile=0x1bc) returned 0x1 [0215.281] GetLastError () returned 0xb7 [0215.281] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1028\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1028\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1a4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0215.281] GetFileType (hFile=0x224) returned 0x1 [0215.281] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28bfc0 [0215.281] ReadFile (in: hFile=0x224, lpBuffer=0x28bfc0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e100, lpOverlapped=0x0 | out: lpBuffer=0x28bfc0*, lpNumberOfBytesRead=0x173e100*=0x1000, lpOverlapped=0x0) returned 1 [0215.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24ce10 [0215.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28dfd0 [0215.586] GetLastError () returned 0x0 [0215.590] CloseHandle (hObject=0x1fc) returned 1 [0215.595] CloseHandle (hObject=0x210) returned 1 [0215.596] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ac0 [0215.596] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a20 [0215.597] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1028\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1028\\localizeddata.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0215.598] GetFileType (hFile=0x210) returned 0x1 [0215.599] GetLastError () returned 0xb7 [0215.600] CloseHandle (hObject=0x210) returned 1 [0215.601] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1028\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1028\\localizeddata.xml")) returned 0 [0215.601] GetLastError () returned 0x20 [0215.601] GetLastError () returned 0x20 [0215.601] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x2865e8) returned 1 [0215.607] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2381b8 | out: pbBuffer=0x2381b8) returned 1 [0215.607] CryptReleaseContext (hProv=0x2865e8, dwFlags=0x0) returned 1 [0215.607] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0215.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381b8 [0215.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2382d0 [0215.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2f0 [0215.608] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0215.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0215.608] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0215.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x22c8b8 [0215.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210000 [0215.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x235700 [0215.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2381b8 [0215.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x233910 [0215.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205290 [0215.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236190 [0215.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238500 [0215.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x233a18 [0215.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b70 [0215.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238550 [0215.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffd0 [0215.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389f0 [0215.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238780 [0215.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210078 [0215.608] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210078 | out: hHeap=0x1f0000) returned 1 [0215.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238780 | out: hHeap=0x1f0000) returned 1 [0215.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389f0 | out: hHeap=0x1f0000) returned 1 [0215.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffd0 | out: hHeap=0x1f0000) returned 1 [0215.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238550 | out: hHeap=0x1f0000) returned 1 [0215.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b70 | out: hHeap=0x1f0000) returned 1 [0215.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233a18 | out: hHeap=0x1f0000) returned 1 [0215.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238500 | out: hHeap=0x1f0000) returned 1 [0215.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236190 | out: hHeap=0x1f0000) returned 1 [0215.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x21d2f0 [0215.609] GetLastError () returned 0x0 [0215.609] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173df20 | out: lpSystemTimeAsFileTime=0x173df20) [0215.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238b70 [0215.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2386e0 [0215.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x2051f0 [0215.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2051f0 | out: hHeap=0x1f0000) returned 1 [0215.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2386e0 | out: hHeap=0x1f0000) returned 1 [0215.610] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238618 [0215.610] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x2051f0 [0215.610] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2051f0 | out: hHeap=0x1f0000) returned 1 [0215.610] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238618 | out: hHeap=0x1f0000) returned 1 [0215.610] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b70 | out: hHeap=0x1f0000) returned 1 [0215.610] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0215.610] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238cc8 [0215.610] GetLastError () returned 0x0 [0215.610] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1028\\LocalizedData.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1028\\localizeddata.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e290, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0215.610] GetFileType (hFile=0x210) returned 0x1 [0215.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28efd8 [0215.611] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e218 | out: lpNewFilePointer=0x0) returned 1 [0215.611] GetLastError () returned 0xb7 [0215.611] CloseHandle (hObject=0x210) returned 1 [0215.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a60 | out: hHeap=0x1f0000) returned 1 [0215.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ae0 | out: hHeap=0x1f0000) returned 1 [0215.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2331d8 | out: hHeap=0x1f0000) returned 1 [0215.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233910 | out: hHeap=0x1f0000) returned 1 [0215.612] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0215.612] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205290 | out: hHeap=0x1f0000) returned 1 [0215.612] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0215.612] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210000 | out: hHeap=0x1f0000) returned 1 [0215.612] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0215.612] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224158 | out: hHeap=0x1f0000) returned 1 [0215.612] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0215.612] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0215.612] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x258298 | out: hHeap=0x1f0000) returned 1 [0215.612] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223cf8 | out: hHeap=0x1f0000) returned 1 [0215.612] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0215.613] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b60 | out: hHeap=0x1f0000) returned 1 [0215.613] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffb8 | out: hHeap=0x1f0000) returned 1 [0215.613] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2386b8 | out: hHeap=0x1f0000) returned 1 [0215.613] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ad0 | out: hHeap=0x1f0000) returned 1 [0215.613] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffa0 | out: hHeap=0x1f0000) returned 1 [0215.613] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0215.613] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b00 | out: hHeap=0x1f0000) returned 1 [0215.613] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232ba8 | out: hHeap=0x1f0000) returned 1 [0215.613] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238528 | out: hHeap=0x1f0000) returned 1 [0215.613] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235ff0 | out: hHeap=0x1f0000) returned 1 [0215.613] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234788 | out: hHeap=0x1f0000) returned 1 [0215.613] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0215.613] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0215.613] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346f8 | out: hHeap=0x1f0000) returned 1 [0215.613] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a20 | out: hHeap=0x1f0000) returned 1 [0215.613] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ac0 | out: hHeap=0x1f0000) returned 1 [0215.613] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28bfc0 | out: hHeap=0x1f0000) returned 1 [0215.613] CloseHandle (hObject=0x224) returned 1 [0215.614] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a70 | out: hHeap=0x1f0000) returned 1 [0215.614] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a00 | out: hHeap=0x1f0000) returned 1 [0215.614] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x231ba0 | out: hHeap=0x1f0000) returned 1 [0215.614] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24ce10 | out: hHeap=0x1f0000) returned 1 [0215.614] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff70 | out: hHeap=0x1f0000) returned 1 [0215.614] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205130 | out: hHeap=0x1f0000) returned 1 [0215.614] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28dfd0 | out: hHeap=0x1f0000) returned 1 [0215.614] CloseHandle (hObject=0x1bc) returned 1 [0215.614] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b50 | out: hHeap=0x1f0000) returned 1 [0215.614] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b40 | out: hHeap=0x1f0000) returned 1 [0215.614] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261218 | out: hHeap=0x1f0000) returned 1 [0215.614] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2052d0 | out: hHeap=0x1f0000) returned 1 [0215.614] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220828 | out: hHeap=0x1f0000) returned 1 [0215.615] CloseHandle (hObject=0x1b0) returned 1 [0215.615] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a90 | out: hHeap=0x1f0000) returned 1 [0215.615] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b30 | out: hHeap=0x1f0000) returned 1 [0215.615] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261668 | out: hHeap=0x1f0000) returned 1 [0215.615] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a80 | out: hHeap=0x1f0000) returned 1 [0215.615] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238af0 | out: hHeap=0x1f0000) returned 1 [0215.615] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ab0 | out: hHeap=0x1f0000) returned 1 [0215.615] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a30 | out: hHeap=0x1f0000) returned 1 [0215.615] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224900 | out: hHeap=0x1f0000) returned 1 [0215.615] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x255c88 | out: hHeap=0x1f0000) returned 1 [0215.615] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224388 | out: hHeap=0x1f0000) returned 1 [0215.615] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206838 | out: hHeap=0x1f0000) returned 1 [0215.615] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff28 | out: hHeap=0x1f0000) returned 1 [0215.615] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20fef8 | out: hHeap=0x1f0000) returned 1 [0215.616] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20e1f0 | out: hHeap=0x1f0000) returned 1 [0215.616] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x251068 | out: hHeap=0x1f0000) returned 1 [0215.616] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2247e8 | out: hHeap=0x1f0000) returned 1 [0215.616] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0215.616] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0215.616] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262188 | out: hHeap=0x1f0000) returned 1 [0215.616] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234ae8 | out: hHeap=0x1f0000) returned 1 [0215.616] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0215.616] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1028\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1028\\localizeddata.xml")) returned 1 [0215.617] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0215.617] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2f0 [0215.617] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234788 [0215.618] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235c48 [0215.618] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234788 | out: hHeap=0x1f0000) returned 1 [0215.618] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236128 | out: hHeap=0x1f0000) returned 1 [0215.618] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0215.618] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1028\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1028\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0215.618] GetFileType (hFile=0x1b0) returned 0x1 [0215.618] CloseHandle (hObject=0x1b0) returned 1 [0215.619] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235b78 [0215.619] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1028\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1028\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x173eb6c | out: lpFileInformation=0x173eb6c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758)) returned 1 [0215.619] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0215.619] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235b78 [0215.619] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1028\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1028\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x173eb7c | out: lpFileInformation=0x173eb7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758)) returned 1 [0215.619] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0215.619] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235b78 [0215.619] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0215.619] GetLastError () returned 0x0 [0215.619] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x2863c8) returned 1 [0215.626] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238230 | out: pbBuffer=0x238230) returned 1 [0215.626] CryptReleaseContext (hProv=0x2863c8, dwFlags=0x0) returned 1 [0215.626] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0215.626] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x258298 [0215.626] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x224388 [0215.626] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=37299536707) returned 1 [0215.627] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0215.627] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=37299557137) returned 1 [0215.627] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0215.627] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x1fef78 [0215.627] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x254980 [0215.627] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x224900 [0215.627] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x20e1f0 [0215.627] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210078 [0215.627] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206658 [0215.627] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff28 [0215.627] GetLastError () returned 0x0 [0215.627] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1028\\SetupResources.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1028\\setupresources.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e230, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0215.925] GetFileType (hFile=0x21c) returned 0x1 [0215.926] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238aa0 [0215.926] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ad0 [0216.041] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1028\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1028\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0216.041] GetFileType (hFile=0x1b0) returned 0x1 [0216.041] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ff0 [0216.041] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205130 [0216.041] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261388 [0216.041] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b60 [0216.042] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b70 [0216.042] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1028\\SetupResources.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1028\\setupresources.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0216.043] GetFileType (hFile=0x23c) returned 0x1 [0216.043] GetLastError () returned 0xb7 [0216.043] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1028\\SetupResources.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1028\\setupresources.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0216.043] GetFileType (hFile=0x230) returned 0x1 [0216.043] GetLastError () returned 0xb7 [0216.044] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1028\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1028\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1a4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0216.044] GetFileType (hFile=0x22c) returned 0x1 [0216.044] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28bfc0 [0216.044] ReadFile (in: hFile=0x22c, lpBuffer=0x28bfc0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e100, lpOverlapped=0x0 | out: lpBuffer=0x28bfc0*, lpNumberOfBytesRead=0x173e100*=0x1000, lpOverlapped=0x0) returned 1 [0216.127] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24d218 [0216.127] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28dfd0 [0216.128] GetLastError () returned 0x0 [0216.130] CloseHandle (hObject=0x21c) returned 1 [0216.416] CloseHandle (hObject=0x1b0) returned 1 [0216.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a20 [0216.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a30 [0216.423] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1028\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1028\\setupresources.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0216.425] GetFileType (hFile=0x1b0) returned 0x1 [0216.426] GetLastError () returned 0xb7 [0216.427] CloseHandle (hObject=0x1b0) returned 1 [0216.428] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1028\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1028\\setupresources.dll")) returned 0 [0216.428] GetLastError () returned 0x20 [0216.428] GetLastError () returned 0x20 [0216.428] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x212c68) returned 1 [0216.435] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2385f0 | out: pbBuffer=0x2385f0) returned 1 [0216.435] CryptReleaseContext (hProv=0x212c68, dwFlags=0x0) returned 1 [0216.435] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385f0 | out: hHeap=0x1f0000) returned 1 [0216.436] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2386b8 [0216.436] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2385f0 [0216.436] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x230cf0 [0216.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2386b8 | out: hHeap=0x1f0000) returned 1 [0216.436] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0216.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230cf0 | out: hHeap=0x1f0000) returned 1 [0216.436] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a7cb8 [0216.436] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101b0 [0216.436] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x235838 [0216.436] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2386b8 [0216.437] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x232fc8 [0216.437] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204b90 [0216.437] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236058 [0216.437] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238708 [0216.437] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x232ec0 [0216.437] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238950 [0216.437] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238758 [0216.437] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210240 [0216.437] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238910 [0216.437] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238500 [0216.438] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0216.438] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0216.438] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238500 | out: hHeap=0x1f0000) returned 1 [0216.438] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238910 | out: hHeap=0x1f0000) returned 1 [0216.438] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210240 | out: hHeap=0x1f0000) returned 1 [0216.438] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238758 | out: hHeap=0x1f0000) returned 1 [0216.438] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238950 | out: hHeap=0x1f0000) returned 1 [0216.438] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232ec0 | out: hHeap=0x1f0000) returned 1 [0216.438] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238708 | out: hHeap=0x1f0000) returned 1 [0216.438] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236058 | out: hHeap=0x1f0000) returned 1 [0216.439] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x230d60 [0216.439] GetLastError () returned 0x0 [0216.439] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173df20 | out: lpSystemTimeAsFileTime=0x173df20) [0216.439] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238950 [0216.439] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238708 [0216.439] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204dd0 [0216.440] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204dd0 | out: hHeap=0x1f0000) returned 1 [0216.440] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238708 | out: hHeap=0x1f0000) returned 1 [0216.440] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238708 [0216.440] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0216.440] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d70 | out: hHeap=0x1f0000) returned 1 [0216.440] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238708 | out: hHeap=0x1f0000) returned 1 [0216.441] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238950 | out: hHeap=0x1f0000) returned 1 [0216.441] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0216.441] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x230d60 [0216.441] GetLastError () returned 0x0 [0216.441] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1028\\SetupResources.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1028\\setupresources.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e290, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0216.442] GetFileType (hFile=0x1b0) returned 0x1 [0216.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x295008 [0216.442] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e218 | out: lpNewFilePointer=0x0) returned 1 [0216.443] GetLastError () returned 0xb7 [0216.443] CloseHandle (hObject=0x1b0) returned 1 [0216.443] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238830 | out: hHeap=0x1f0000) returned 1 [0216.443] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238820 | out: hHeap=0x1f0000) returned 1 [0216.443] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2334f0 | out: hHeap=0x1f0000) returned 1 [0216.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232fc8 | out: hHeap=0x1f0000) returned 1 [0216.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2386b8 | out: hHeap=0x1f0000) returned 1 [0216.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204b90 | out: hHeap=0x1f0000) returned 1 [0216.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235838 | out: hHeap=0x1f0000) returned 1 [0216.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0216.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a7cb8 | out: hHeap=0x1f0000) returned 1 [0216.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223be0 | out: hHeap=0x1f0000) returned 1 [0216.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385f0 | out: hHeap=0x1f0000) returned 1 [0216.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0216.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x251068 | out: hHeap=0x1f0000) returned 1 [0216.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2247e8 | out: hHeap=0x1f0000) returned 1 [0216.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230c80 | out: hHeap=0x1f0000) returned 1 [0216.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238980 | out: hHeap=0x1f0000) returned 1 [0216.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0216.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385c8 | out: hHeap=0x1f0000) returned 1 [0216.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387f0 | out: hHeap=0x1f0000) returned 1 [0216.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0216.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238550 | out: hHeap=0x1f0000) returned 1 [0216.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238920 | out: hHeap=0x1f0000) returned 1 [0216.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2330d0 | out: hHeap=0x1f0000) returned 1 [0216.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238640 | out: hHeap=0x1f0000) returned 1 [0216.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235908 | out: hHeap=0x1f0000) returned 1 [0216.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234980 | out: hHeap=0x1f0000) returned 1 [0216.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238578 | out: hHeap=0x1f0000) returned 1 [0216.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0216.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234818 | out: hHeap=0x1f0000) returned 1 [0216.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a30 | out: hHeap=0x1f0000) returned 1 [0216.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a20 | out: hHeap=0x1f0000) returned 1 [0216.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28bfc0 | out: hHeap=0x1f0000) returned 1 [0216.446] CloseHandle (hObject=0x22c) returned 1 [0216.447] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ae0 | out: hHeap=0x1f0000) returned 1 [0216.447] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b80 | out: hHeap=0x1f0000) returned 1 [0216.447] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232020 | out: hHeap=0x1f0000) returned 1 [0216.447] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24d218 | out: hHeap=0x1f0000) returned 1 [0216.447] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffd0 | out: hHeap=0x1f0000) returned 1 [0216.447] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205130 | out: hHeap=0x1f0000) returned 1 [0216.448] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28dfd0 | out: hHeap=0x1f0000) returned 1 [0216.448] CloseHandle (hObject=0x230) returned 1 [0216.448] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b00 | out: hHeap=0x1f0000) returned 1 [0216.448] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ac0 | out: hHeap=0x1f0000) returned 1 [0216.448] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261160 | out: hHeap=0x1f0000) returned 1 [0216.449] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2051f0 | out: hHeap=0x1f0000) returned 1 [0216.449] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0216.449] CloseHandle (hObject=0x23c) returned 1 [0216.449] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b70 | out: hHeap=0x1f0000) returned 1 [0216.449] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b60 | out: hHeap=0x1f0000) returned 1 [0216.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261388 | out: hHeap=0x1f0000) returned 1 [0216.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ad0 | out: hHeap=0x1f0000) returned 1 [0216.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238aa0 | out: hHeap=0x1f0000) returned 1 [0216.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238af0 | out: hHeap=0x1f0000) returned 1 [0216.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ab0 | out: hHeap=0x1f0000) returned 1 [0216.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223e10 | out: hHeap=0x1f0000) returned 1 [0216.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x254980 | out: hHeap=0x1f0000) returned 1 [0216.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224900 | out: hHeap=0x1f0000) returned 1 [0216.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206658 | out: hHeap=0x1f0000) returned 1 [0216.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff28 | out: hHeap=0x1f0000) returned 1 [0216.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210078 | out: hHeap=0x1f0000) returned 1 [0216.451] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20e1f0 | out: hHeap=0x1f0000) returned 1 [0216.451] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x258298 | out: hHeap=0x1f0000) returned 1 [0216.451] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224388 | out: hHeap=0x1f0000) returned 1 [0216.451] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0216.451] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0216.451] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2627e8 | out: hHeap=0x1f0000) returned 1 [0216.451] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346f8 | out: hHeap=0x1f0000) returned 1 [0216.451] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0216.451] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1028\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1028\\setupresources.dll")) returned 1 [0216.453] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0216.453] FindClose (in: hFindFile=0x24ec00 | out: hFindFile=0x24ec00) returned 1 [0216.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235c48 | out: hHeap=0x1f0000) returned 1 [0216.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263640 | out: hHeap=0x1f0000) returned 1 [0216.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607e8 | out: hHeap=0x1f0000) returned 1 [0216.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234860 | out: hHeap=0x1f0000) returned 1 [0216.453] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2344b8 [0216.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b3e0 [0216.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x261cc0 [0216.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346f8 [0216.454] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1029\\*", lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ec00 [0216.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234818 [0216.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346f8 | out: hHeap=0x1f0000) returned 1 [0216.454] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0216.454] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0216.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234860 [0216.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234818 | out: hHeap=0x1f0000) returned 1 [0216.455] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0216.455] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0216.455] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0216.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b7c8 [0216.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234980 [0216.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x235aa8 [0216.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234980 | out: hHeap=0x1f0000) returned 1 [0216.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234860 | out: hHeap=0x1f0000) returned 1 [0216.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b7c8 | out: hHeap=0x1f0000) returned 1 [0216.769] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1029\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1029\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0216.769] GetFileType (hFile=0x1f4) returned 0x1 [0216.769] CloseHandle (hObject=0x1f4) returned 1 [0216.770] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c8b8 [0216.770] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1029\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1029\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x173eb6c | out: lpFileInformation=0x173eb6c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe8e)) returned 1 [0216.770] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0216.770] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c8b8 [0216.770] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1029\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1029\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x173eb7c | out: lpFileInformation=0x173eb7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe8e)) returned 1 [0216.771] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0216.771] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c8b8 [0216.771] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0216.771] GetLastError () returned 0x0 [0216.771] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x213570) returned 1 [0216.779] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x22b2f0 | out: pbBuffer=0x22b2f0) returned 1 [0216.779] CryptReleaseContext (hProv=0x213570, dwFlags=0x0) returned 1 [0216.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b2f0 | out: hHeap=0x1f0000) returned 1 [0216.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x252370 [0216.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x224388 [0216.780] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=37414868901) returned 1 [0216.780] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0216.780] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=37414905144) returned 1 [0216.780] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0216.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x1fef78 [0216.781] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x258298 [0216.781] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x223cf8 [0216.781] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x236df0 [0216.781] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff70 [0216.781] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206658 [0216.781] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210078 [0216.781] GetLastError () returned 0x0 [0216.781] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1029\\eula.rtf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1029\\eula.rtf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e230, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0216.790] GetFileType (hFile=0x22c) returned 0x1 [0216.790] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389e0 [0216.791] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238af0 [0216.791] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1029\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1029\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0216.792] GetFileType (hFile=0x1b0) returned 0x1 [0216.792] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205290 [0216.792] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x2052d0 [0216.792] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261668 [0216.792] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a40 [0216.793] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ad0 [0216.794] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1029\\eula.rtf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1029\\eula.rtf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0216.794] GetFileType (hFile=0x21c) returned 0x1 [0216.795] GetLastError () returned 0xb7 [0216.795] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1029\\eula.rtf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1029\\eula.rtf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0216.795] GetFileType (hFile=0x210) returned 0x1 [0216.796] GetLastError () returned 0xb7 [0216.796] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1029\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1029\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1a4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1bc [0216.796] GetFileType (hFile=0x1bc) returned 0x1 [0216.797] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28bfc0 [0216.797] ReadFile (in: hFile=0x1bc, lpBuffer=0x28bfc0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e100, lpOverlapped=0x0 | out: lpBuffer=0x28bfc0*, lpNumberOfBytesRead=0x173e100*=0xe8e, lpOverlapped=0x0) returned 1 [0216.887] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24d218 [0216.888] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28cfc8 [0216.888] GetLastError () returned 0x0 [0216.890] CloseHandle (hObject=0x22c) returned 1 [0216.900] CloseHandle (hObject=0x1b0) returned 1 [0216.900] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b20 [0216.901] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a60 [0216.901] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1029\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1029\\eula.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0216.903] GetFileType (hFile=0x1b0) returned 0x1 [0216.904] GetLastError () returned 0xb7 [0216.905] CloseHandle (hObject=0x1b0) returned 1 [0216.905] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1029\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1029\\eula.rtf")) returned 0 [0216.905] GetLastError () returned 0x20 [0216.905] GetLastError () returned 0x20 [0216.906] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x213680) returned 1 [0216.912] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x22b480 | out: pbBuffer=0x22b480) returned 1 [0216.912] CryptReleaseContext (hProv=0x213680, dwFlags=0x0) returned 1 [0216.912] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b480 | out: hHeap=0x1f0000) returned 1 [0216.912] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b638 [0216.913] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b340 [0216.913] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x231928 [0216.913] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b638 | out: hHeap=0x1f0000) returned 1 [0216.913] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0216.913] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x231928 | out: hHeap=0x1f0000) returned 1 [0216.913] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8110 [0216.914] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210000 [0216.914] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x235be0 [0216.914] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x22b480 [0216.914] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2a74c8 [0216.914] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204db0 [0216.914] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235b78 [0216.914] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x22b4d0 [0216.914] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2a71b0 [0216.914] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a80 [0216.914] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b638 [0216.914] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210018 [0216.914] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238aa0 [0216.914] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b868 [0216.915] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0216.915] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0216.915] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b868 | out: hHeap=0x1f0000) returned 1 [0216.915] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238aa0 | out: hHeap=0x1f0000) returned 1 [0216.915] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210018 | out: hHeap=0x1f0000) returned 1 [0216.915] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b638 | out: hHeap=0x1f0000) returned 1 [0216.915] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a80 | out: hHeap=0x1f0000) returned 1 [0216.915] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a71b0 | out: hHeap=0x1f0000) returned 1 [0216.915] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b4d0 | out: hHeap=0x1f0000) returned 1 [0216.915] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0216.915] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x2316f8 [0216.915] GetLastError () returned 0x0 [0216.915] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173df20 | out: lpSystemTimeAsFileTime=0x173df20) [0216.915] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238a80 [0216.915] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b4d0 [0216.915] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ef0 [0216.916] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ef0 | out: hHeap=0x1f0000) returned 1 [0216.916] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b4d0 | out: hHeap=0x1f0000) returned 1 [0216.916] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b4d0 [0216.916] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d90 [0216.916] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d90 | out: hHeap=0x1f0000) returned 1 [0216.916] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b4d0 | out: hHeap=0x1f0000) returned 1 [0216.916] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a80 | out: hHeap=0x1f0000) returned 1 [0216.916] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0216.916] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x231308 [0216.916] GetLastError () returned 0x0 [0216.916] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1029\\eula.rtf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1029\\eula.rtf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e290, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0216.916] GetFileType (hFile=0x1b0) returned 0x1 [0216.917] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28ffe0 [0216.917] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e218 | out: lpNewFilePointer=0x0) returned 1 [0216.917] GetLastError () returned 0xb7 [0216.917] CloseHandle (hObject=0x1b0) returned 1 [0216.918] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238aa0 | out: hHeap=0x1f0000) returned 1 [0216.918] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a80 | out: hHeap=0x1f0000) returned 1 [0216.918] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a73c0 | out: hHeap=0x1f0000) returned 1 [0216.918] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a74c8 | out: hHeap=0x1f0000) returned 1 [0216.918] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b480 | out: hHeap=0x1f0000) returned 1 [0216.918] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204db0 | out: hHeap=0x1f0000) returned 1 [0216.918] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235be0 | out: hHeap=0x1f0000) returned 1 [0216.918] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210000 | out: hHeap=0x1f0000) returned 1 [0216.918] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8110 | out: hHeap=0x1f0000) returned 1 [0216.918] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223e10 | out: hHeap=0x1f0000) returned 1 [0216.918] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b340 | out: hHeap=0x1f0000) returned 1 [0216.918] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0216.918] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x251068 | out: hHeap=0x1f0000) returned 1 [0216.918] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224a18 | out: hHeap=0x1f0000) returned 1 [0216.918] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0216.918] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b50 | out: hHeap=0x1f0000) returned 1 [0216.918] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffd0 | out: hHeap=0x1f0000) returned 1 [0216.919] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b318 | out: hHeap=0x1f0000) returned 1 [0216.919] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a70 | out: hHeap=0x1f0000) returned 1 [0216.919] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffb8 | out: hHeap=0x1f0000) returned 1 [0216.919] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b5e8 | out: hHeap=0x1f0000) returned 1 [0216.919] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b70 | out: hHeap=0x1f0000) returned 1 [0216.919] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a72b8 | out: hHeap=0x1f0000) returned 1 [0216.919] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b368 | out: hHeap=0x1f0000) returned 1 [0216.919] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2359d8 | out: hHeap=0x1f0000) returned 1 [0216.919] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234500 | out: hHeap=0x1f0000) returned 1 [0216.919] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b2f0 | out: hHeap=0x1f0000) returned 1 [0216.919] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0216.919] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233cd8 | out: hHeap=0x1f0000) returned 1 [0216.919] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a60 | out: hHeap=0x1f0000) returned 1 [0216.919] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b20 | out: hHeap=0x1f0000) returned 1 [0216.919] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28bfc0 | out: hHeap=0x1f0000) returned 1 [0216.920] CloseHandle (hObject=0x1bc) returned 1 [0216.920] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a30 | out: hHeap=0x1f0000) returned 1 [0216.920] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a10 | out: hHeap=0x1f0000) returned 1 [0216.920] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232de8 | out: hHeap=0x1f0000) returned 1 [0216.920] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24d218 | out: hHeap=0x1f0000) returned 1 [0216.920] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210090 | out: hHeap=0x1f0000) returned 1 [0216.920] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e30 | out: hHeap=0x1f0000) returned 1 [0216.920] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28cfc8 | out: hHeap=0x1f0000) returned 1 [0216.920] CloseHandle (hObject=0x210) returned 1 [0216.921] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b60 | out: hHeap=0x1f0000) returned 1 [0216.921] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b40 | out: hHeap=0x1f0000) returned 1 [0216.921] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261388 | out: hHeap=0x1f0000) returned 1 [0216.921] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205290 | out: hHeap=0x1f0000) returned 1 [0216.921] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0216.921] CloseHandle (hObject=0x21c) returned 1 [0216.921] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ad0 | out: hHeap=0x1f0000) returned 1 [0216.921] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a40 | out: hHeap=0x1f0000) returned 1 [0216.922] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261668 | out: hHeap=0x1f0000) returned 1 [0216.922] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238af0 | out: hHeap=0x1f0000) returned 1 [0216.922] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389e0 | out: hHeap=0x1f0000) returned 1 [0216.922] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ba0 | out: hHeap=0x1f0000) returned 1 [0216.922] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b90 | out: hHeap=0x1f0000) returned 1 [0216.922] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0216.922] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x258298 | out: hHeap=0x1f0000) returned 1 [0216.922] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223cf8 | out: hHeap=0x1f0000) returned 1 [0216.922] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206658 | out: hHeap=0x1f0000) returned 1 [0216.922] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210078 | out: hHeap=0x1f0000) returned 1 [0216.922] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff70 | out: hHeap=0x1f0000) returned 1 [0216.922] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236df0 | out: hHeap=0x1f0000) returned 1 [0216.922] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x252370 | out: hHeap=0x1f0000) returned 1 [0216.922] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224388 | out: hHeap=0x1f0000) returned 1 [0216.923] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0216.923] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0216.923] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2617f8 | out: hHeap=0x1f0000) returned 1 [0216.923] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b30 | out: hHeap=0x1f0000) returned 1 [0216.923] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b598 | out: hHeap=0x1f0000) returned 1 [0216.923] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1029\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1029\\eula.rtf")) returned 1 [0216.925] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13c4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0216.925] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0216.925] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234ae8 [0216.925] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235d80 [0216.925] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234ae8 | out: hHeap=0x1f0000) returned 1 [0216.925] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235aa8 | out: hHeap=0x1f0000) returned 1 [0216.925] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0216.925] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1029\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1029\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0217.287] GetFileType (hFile=0x1ac) returned 0x1 [0217.287] CloseHandle (hObject=0x1ac) returned 1 [0217.288] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235eb8 [0217.288] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1029\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1029\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x173eb6c | out: lpFileInformation=0x173eb6c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13c4a)) returned 1 [0217.288] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235eb8 | out: hHeap=0x1f0000) returned 1 [0217.288] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235aa8 [0217.288] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1029\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1029\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x173eb7c | out: lpFileInformation=0x173eb7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13c4a)) returned 1 [0217.288] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235aa8 | out: hHeap=0x1f0000) returned 1 [0217.288] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2357d0 [0217.288] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2357d0 | out: hHeap=0x1f0000) returned 1 [0217.289] GetLastError () returned 0x0 [0217.289] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x2135f8) returned 1 [0217.296] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x22b5c0 | out: pbBuffer=0x22b5c0) returned 1 [0217.296] CryptReleaseContext (hProv=0x2135f8, dwFlags=0x0) returned 1 [0217.296] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b5c0 | out: hHeap=0x1f0000) returned 1 [0217.296] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x25a8a8 [0217.296] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x223cf8 [0217.296] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=37466488196) returned 1 [0217.296] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0217.296] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=37466512239) returned 1 [0217.296] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0217.296] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x230af8 [0217.297] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x252370 [0217.297] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x224040 [0217.297] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x237880 [0217.297] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffb8 [0217.297] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206928 [0217.297] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210090 [0217.297] GetLastError () returned 0x0 [0217.297] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1029\\LocalizedData.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1029\\localizeddata.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e230, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0217.298] GetFileType (hFile=0x1ac) returned 0x1 [0217.298] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238910 [0217.299] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238800 [0217.299] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1029\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1029\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0217.300] GetFileType (hFile=0x1d4) returned 0x1 [0217.300] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f30 [0217.300] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cb0 [0217.300] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261160 [0217.300] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388e0 [0217.301] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238820 [0217.301] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1029\\LocalizedData.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1029\\localizeddata.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0217.301] GetFileType (hFile=0x218) returned 0x1 [0217.302] GetLastError () returned 0xb7 [0217.302] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1029\\LocalizedData.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1029\\localizeddata.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc [0217.302] GetFileType (hFile=0x1cc) returned 0x1 [0217.303] GetLastError () returned 0xb7 [0217.303] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1029\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1029\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1a4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0217.303] GetFileType (hFile=0x1e8) returned 0x1 [0217.303] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x295008 [0217.303] ReadFile (in: hFile=0x1e8, lpBuffer=0x295008, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e100, lpOverlapped=0x0 | out: lpBuffer=0x295008*, lpNumberOfBytesRead=0x173e100*=0x1000, lpOverlapped=0x0) returned 1 [0217.312] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24b5e0 [0217.312] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x297018 [0217.312] GetLastError () returned 0x0 [0217.327] CloseHandle (hObject=0x1ac) returned 1 [0217.481] CloseHandle (hObject=0x1d4) returned 1 [0217.481] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a50 [0217.482] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a90 [0217.482] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1029\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1029\\localizeddata.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0217.489] GetFileType (hFile=0x1d4) returned 0x1 [0217.489] GetLastError () returned 0xb7 [0217.491] CloseHandle (hObject=0x1d4) returned 1 [0217.494] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1029\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1029\\localizeddata.xml")) returned 0 [0217.494] GetLastError () returned 0x20 [0217.494] GetLastError () returned 0x20 [0217.494] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x2132c8) returned 1 [0217.502] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238078 | out: pbBuffer=0x238078) returned 1 [0217.502] CryptReleaseContext (hProv=0x2132c8, dwFlags=0x0) returned 1 [0217.502] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0217.502] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238190 [0217.503] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238488 [0217.503] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf70 [0217.503] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0217.503] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0217.503] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf70 | out: hHeap=0x1f0000) returned 1 [0217.503] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x22c8b8 [0217.503] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffd0 [0217.503] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x2359d8 [0217.503] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2384b0 [0217.503] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2315d0 [0217.503] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ef0 [0217.504] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235a40 [0217.504] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x237fd8 [0217.504] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2312b8 [0217.504] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b80 [0217.504] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0217.504] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210000 [0217.504] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a00 [0217.504] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0217.504] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210018 [0217.504] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210018 | out: hHeap=0x1f0000) returned 1 [0217.505] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0217.505] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a00 | out: hHeap=0x1f0000) returned 1 [0217.505] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210000 | out: hHeap=0x1f0000) returned 1 [0217.505] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0217.505] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b80 | out: hHeap=0x1f0000) returned 1 [0217.505] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2312b8 | out: hHeap=0x1f0000) returned 1 [0217.505] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0217.505] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235a40 | out: hHeap=0x1f0000) returned 1 [0217.505] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x21d2f0 [0217.505] GetLastError () returned 0x0 [0217.506] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173df20 | out: lpSystemTimeAsFileTime=0x173df20) [0217.506] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238b10 [0217.506] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0217.506] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d30 [0217.506] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d30 | out: hHeap=0x1f0000) returned 1 [0217.506] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0217.506] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238438 [0217.507] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204db0 [0217.507] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204db0 | out: hHeap=0x1f0000) returned 1 [0217.507] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238438 | out: hHeap=0x1f0000) returned 1 [0217.507] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b10 | out: hHeap=0x1f0000) returned 1 [0217.507] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0217.507] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x21cf70 [0217.507] GetLastError () returned 0x0 [0217.507] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1029\\LocalizedData.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1029\\localizeddata.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e290, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0217.508] GetFileType (hFile=0x1d4) returned 0x1 [0217.508] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x291ff0 [0217.511] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e218 | out: lpNewFilePointer=0x0) returned 1 [0217.512] GetLastError () returned 0xb7 [0217.512] CloseHandle (hObject=0x1d4) returned 1 [0217.512] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b80 | out: hHeap=0x1f0000) returned 1 [0217.513] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b10 | out: hHeap=0x1f0000) returned 1 [0217.513] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2311b0 | out: hHeap=0x1f0000) returned 1 [0217.513] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2315d0 | out: hHeap=0x1f0000) returned 1 [0217.513] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0217.513] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ef0 | out: hHeap=0x1f0000) returned 1 [0217.513] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2359d8 | out: hHeap=0x1f0000) returned 1 [0217.513] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffd0 | out: hHeap=0x1f0000) returned 1 [0217.513] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0217.513] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2246d0 | out: hHeap=0x1f0000) returned 1 [0217.513] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238488 | out: hHeap=0x1f0000) returned 1 [0217.513] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0217.514] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x254980 | out: hHeap=0x1f0000) returned 1 [0217.514] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223be0 | out: hHeap=0x1f0000) returned 1 [0217.514] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0217.514] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b30 | out: hHeap=0x1f0000) returned 1 [0217.514] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff28 | out: hHeap=0x1f0000) returned 1 [0217.514] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0217.514] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ac0 | out: hHeap=0x1f0000) returned 1 [0217.514] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2100a8 | out: hHeap=0x1f0000) returned 1 [0217.514] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0217.514] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b00 | out: hHeap=0x1f0000) returned 1 [0217.514] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2317e0 | out: hHeap=0x1f0000) returned 1 [0217.514] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0217.515] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235be0 | out: hHeap=0x1f0000) returned 1 [0217.515] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234818 | out: hHeap=0x1f0000) returned 1 [0217.515] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0217.515] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0217.515] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2349c8 | out: hHeap=0x1f0000) returned 1 [0217.515] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a90 | out: hHeap=0x1f0000) returned 1 [0217.515] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a50 | out: hHeap=0x1f0000) returned 1 [0217.515] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x295008 | out: hHeap=0x1f0000) returned 1 [0217.515] CloseHandle (hObject=0x1e8) returned 1 [0217.516] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238890 | out: hHeap=0x1f0000) returned 1 [0217.516] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238970 | out: hHeap=0x1f0000) returned 1 [0217.516] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2333e8 | out: hHeap=0x1f0000) returned 1 [0217.516] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24b5e0 | out: hHeap=0x1f0000) returned 1 [0217.516] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0217.516] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c30 | out: hHeap=0x1f0000) returned 1 [0217.516] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x297018 | out: hHeap=0x1f0000) returned 1 [0217.517] CloseHandle (hObject=0x1cc) returned 1 [0217.517] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238840 | out: hHeap=0x1f0000) returned 1 [0217.517] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389b0 | out: hHeap=0x1f0000) returned 1 [0217.517] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2853e8 | out: hHeap=0x1f0000) returned 1 [0217.517] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cf0 | out: hHeap=0x1f0000) returned 1 [0217.517] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237df0 | out: hHeap=0x1f0000) returned 1 [0217.518] CloseHandle (hObject=0x218) returned 1 [0217.518] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238820 | out: hHeap=0x1f0000) returned 1 [0217.518] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388e0 | out: hHeap=0x1f0000) returned 1 [0217.518] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261160 | out: hHeap=0x1f0000) returned 1 [0217.519] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238800 | out: hHeap=0x1f0000) returned 1 [0217.519] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238910 | out: hHeap=0x1f0000) returned 1 [0217.519] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238960 | out: hHeap=0x1f0000) returned 1 [0217.519] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238af0 | out: hHeap=0x1f0000) returned 1 [0217.519] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2245b8 | out: hHeap=0x1f0000) returned 1 [0217.519] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x252370 | out: hHeap=0x1f0000) returned 1 [0217.519] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224040 | out: hHeap=0x1f0000) returned 1 [0217.519] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206928 | out: hHeap=0x1f0000) returned 1 [0217.519] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210090 | out: hHeap=0x1f0000) returned 1 [0217.519] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffb8 | out: hHeap=0x1f0000) returned 1 [0217.519] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237880 | out: hHeap=0x1f0000) returned 1 [0217.520] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25a8a8 | out: hHeap=0x1f0000) returned 1 [0217.520] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223cf8 | out: hHeap=0x1f0000) returned 1 [0217.520] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0217.520] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2357d0 | out: hHeap=0x1f0000) returned 1 [0217.520] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2634a8 | out: hHeap=0x1f0000) returned 1 [0217.520] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234548 | out: hHeap=0x1f0000) returned 1 [0217.520] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b318 | out: hHeap=0x1f0000) returned 1 [0217.520] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1029\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1029\\localizeddata.xml")) returned 1 [0217.599] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0217.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0217.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234a10 [0217.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2357d0 [0217.599] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234a10 | out: hHeap=0x1f0000) returned 1 [0217.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235d80 | out: hHeap=0x1f0000) returned 1 [0217.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0217.601] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1029\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1029\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0217.601] GetFileType (hFile=0x218) returned 0x1 [0217.602] CloseHandle (hObject=0x218) returned 1 [0217.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235700 [0217.602] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1029\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1029\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x173eb6c | out: lpFileInformation=0x173eb6c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758)) returned 1 [0217.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0217.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235838 [0217.603] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1029\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1029\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x173eb7c | out: lpFileInformation=0x173eb7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758)) returned 1 [0217.603] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235838 | out: hHeap=0x1f0000) returned 1 [0217.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2359d8 [0217.603] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2359d8 | out: hHeap=0x1f0000) returned 1 [0217.603] GetLastError () returned 0x0 [0217.603] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x2135f8) returned 1 [0217.611] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238078 | out: pbBuffer=0x238078) returned 1 [0217.611] CryptReleaseContext (hProv=0x2135f8, dwFlags=0x0) returned 1 [0217.612] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0217.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x252370 [0217.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2244a0 [0217.612] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=37498085593) returned 1 [0217.612] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0217.612] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=37498123239) returned 1 [0217.612] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0217.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x21cf70 [0217.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x24fd60 [0217.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x224040 [0217.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x237880 [0217.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210090 [0217.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2068c8 [0217.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffb8 [0217.613] GetLastError () returned 0x0 [0217.614] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1029\\SetupResources.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1029\\setupresources.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e230, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0217.614] GetFileType (hFile=0x218) returned 0x1 [0217.615] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b80 [0217.616] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a00 [0217.617] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1029\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1029\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc [0217.617] GetFileType (hFile=0x1cc) returned 0x1 [0217.617] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0217.617] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d90 [0217.618] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261218 [0217.618] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b30 [0217.618] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238af0 [0217.619] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1029\\SetupResources.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1029\\setupresources.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0217.619] GetFileType (hFile=0x1e8) returned 0x1 [0217.620] GetLastError () returned 0xb7 [0217.620] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1029\\SetupResources.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1029\\setupresources.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0217.620] GetFileType (hFile=0x1d4) returned 0x1 [0217.621] GetLastError () returned 0xb7 [0217.621] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1029\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1029\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1a4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0217.621] GetFileType (hFile=0x1ac) returned 0x1 [0217.622] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28efd8 [0217.622] ReadFile (in: hFile=0x1ac, lpBuffer=0x28efd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e100, lpOverlapped=0x0 | out: lpBuffer=0x28efd8*, lpNumberOfBytesRead=0x173e100*=0x1000, lpOverlapped=0x0) returned 1 [0217.628] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24ca08 [0217.628] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x291ff0 [0217.629] GetLastError () returned 0x0 [0217.631] CloseHandle (hObject=0x218) returned 1 [0217.635] CloseHandle (hObject=0x1cc) returned 1 [0217.636] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238820 [0217.636] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387f0 [0217.637] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1029\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1029\\setupresources.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc [0217.639] GetFileType (hFile=0x1cc) returned 0x1 [0217.640] GetLastError () returned 0xb7 [0217.641] CloseHandle (hObject=0x1cc) returned 1 [0217.642] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1029\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1029\\setupresources.dll")) returned 0 [0217.642] GetLastError () returned 0x20 [0217.642] GetLastError () returned 0x20 [0217.642] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x213350) returned 1 [0217.913] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238078 | out: pbBuffer=0x238078) returned 1 [0217.913] CryptReleaseContext (hProv=0x213350, dwFlags=0x0) returned 1 [0217.913] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0217.913] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238078 [0217.913] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2382a8 [0217.913] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1ff058 [0217.913] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0217.914] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0217.914] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1ff058 | out: hHeap=0x1f0000) returned 1 [0217.914] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x22c8b8 [0217.914] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101b0 [0217.914] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x235f88 [0217.914] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238398 [0217.914] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2312b8 [0217.914] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f50 [0217.914] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235a40 [0217.914] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238370 [0217.915] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2311b0 [0217.915] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238810 [0217.915] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0217.915] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210240 [0217.915] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388c0 [0217.915] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0217.915] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0217.915] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0217.916] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0217.916] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388c0 | out: hHeap=0x1f0000) returned 1 [0217.916] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210240 | out: hHeap=0x1f0000) returned 1 [0217.916] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0217.916] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238810 | out: hHeap=0x1f0000) returned 1 [0217.916] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2311b0 | out: hHeap=0x1f0000) returned 1 [0217.916] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0217.916] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235a40 | out: hHeap=0x1f0000) returned 1 [0217.917] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x1fef78 [0217.917] GetLastError () returned 0x0 [0217.917] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173df20 | out: lpSystemTimeAsFileTime=0x173df20) [0217.917] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x2388b0 [0217.918] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238438 [0217.918] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204dd0 [0217.918] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204dd0 | out: hHeap=0x1f0000) returned 1 [0217.918] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238438 | out: hHeap=0x1f0000) returned 1 [0217.918] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0217.918] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e30 [0217.918] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e30 | out: hHeap=0x1f0000) returned 1 [0217.918] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0217.919] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388b0 | out: hHeap=0x1f0000) returned 1 [0217.919] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0217.919] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x1ff058 [0217.919] GetLastError () returned 0x0 [0217.919] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1029\\SetupResources.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1029\\setupresources.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e290, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0217.920] GetFileType (hFile=0x218) returned 0x1 [0217.920] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x297018 [0217.921] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e218 | out: lpNewFilePointer=0x0) returned 1 [0217.921] GetLastError () returned 0xb7 [0217.921] CloseHandle (hObject=0x218) returned 1 [0217.922] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388b0 | out: hHeap=0x1f0000) returned 1 [0217.922] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238970 | out: hHeap=0x1f0000) returned 1 [0217.922] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2313c0 | out: hHeap=0x1f0000) returned 1 [0217.922] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2312b8 | out: hHeap=0x1f0000) returned 1 [0217.922] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0217.922] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f50 | out: hHeap=0x1f0000) returned 1 [0217.922] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235f88 | out: hHeap=0x1f0000) returned 1 [0217.922] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0217.923] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0217.923] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2245b8 | out: hHeap=0x1f0000) returned 1 [0217.923] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0217.923] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0217.923] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x254980 | out: hHeap=0x1f0000) returned 1 [0217.923] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2247e8 | out: hHeap=0x1f0000) returned 1 [0217.923] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf70 | out: hHeap=0x1f0000) returned 1 [0217.923] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238920 | out: hHeap=0x1f0000) returned 1 [0217.924] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffd0 | out: hHeap=0x1f0000) returned 1 [0217.924] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0217.924] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388a0 | out: hHeap=0x1f0000) returned 1 [0217.924] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2100a8 | out: hHeap=0x1f0000) returned 1 [0217.924] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0217.924] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238900 | out: hHeap=0x1f0000) returned 1 [0217.924] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2317e0 | out: hHeap=0x1f0000) returned 1 [0217.924] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0217.924] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235be0 | out: hHeap=0x1f0000) returned 1 [0217.924] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234818 | out: hHeap=0x1f0000) returned 1 [0217.924] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0217.925] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0217.925] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2349c8 | out: hHeap=0x1f0000) returned 1 [0217.925] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387f0 | out: hHeap=0x1f0000) returned 1 [0217.925] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238820 | out: hHeap=0x1f0000) returned 1 [0217.925] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28efd8 | out: hHeap=0x1f0000) returned 1 [0217.925] CloseHandle (hObject=0x1ac) returned 1 [0217.926] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238980 | out: hHeap=0x1f0000) returned 1 [0217.926] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b00 | out: hHeap=0x1f0000) returned 1 [0217.926] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232ea8 | out: hHeap=0x1f0000) returned 1 [0217.926] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24ca08 | out: hHeap=0x1f0000) returned 1 [0217.926] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff28 | out: hHeap=0x1f0000) returned 1 [0217.926] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d90 | out: hHeap=0x1f0000) returned 1 [0217.927] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x291ff0 | out: hHeap=0x1f0000) returned 1 [0217.927] CloseHandle (hObject=0x1d4) returned 1 [0217.928] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ac0 | out: hHeap=0x1f0000) returned 1 [0217.928] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a90 | out: hHeap=0x1f0000) returned 1 [0217.928] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2614f8 | out: hHeap=0x1f0000) returned 1 [0217.928] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bb0 | out: hHeap=0x1f0000) returned 1 [0217.928] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237df0 | out: hHeap=0x1f0000) returned 1 [0217.928] CloseHandle (hObject=0x1e8) returned 1 [0217.929] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238af0 | out: hHeap=0x1f0000) returned 1 [0217.929] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b30 | out: hHeap=0x1f0000) returned 1 [0217.929] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261218 | out: hHeap=0x1f0000) returned 1 [0217.929] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a00 | out: hHeap=0x1f0000) returned 1 [0217.929] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b80 | out: hHeap=0x1f0000) returned 1 [0217.929] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a50 | out: hHeap=0x1f0000) returned 1 [0217.930] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b10 | out: hHeap=0x1f0000) returned 1 [0217.930] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2246d0 | out: hHeap=0x1f0000) returned 1 [0217.930] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24fd60 | out: hHeap=0x1f0000) returned 1 [0217.930] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224040 | out: hHeap=0x1f0000) returned 1 [0217.930] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2068c8 | out: hHeap=0x1f0000) returned 1 [0217.930] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffb8 | out: hHeap=0x1f0000) returned 1 [0217.930] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210090 | out: hHeap=0x1f0000) returned 1 [0217.930] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237880 | out: hHeap=0x1f0000) returned 1 [0217.930] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x252370 | out: hHeap=0x1f0000) returned 1 [0217.931] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2244a0 | out: hHeap=0x1f0000) returned 1 [0217.931] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0217.931] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2362c8 | out: hHeap=0x1f0000) returned 1 [0217.931] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263178 | out: hHeap=0x1f0000) returned 1 [0217.931] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234980 | out: hHeap=0x1f0000) returned 1 [0217.931] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0217.931] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1029\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1029\\setupresources.dll")) returned 1 [0217.933] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0217.933] FindClose (in: hFindFile=0x24ec00 | out: hFindFile=0x24ec00) returned 1 [0217.933] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2357d0 | out: hHeap=0x1f0000) returned 1 [0217.933] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261cc0 | out: hHeap=0x1f0000) returned 1 [0217.934] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b3e0 | out: hHeap=0x1f0000) returned 1 [0217.934] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2344b8 | out: hHeap=0x1f0000) returned 1 [0217.934] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234500 [0217.934] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0217.934] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x263640 [0217.934] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234aa0 [0217.934] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1030\\*", lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ec80 [0217.935] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234788 [0217.935] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234aa0 | out: hHeap=0x1f0000) returned 1 [0217.935] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0217.935] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.935] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234980 [0217.935] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234788 | out: hHeap=0x1f0000) returned 1 [0217.935] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0217.935] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0217.936] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xcf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0217.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0217.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234ae8 [0217.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x2357d0 [0217.936] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234ae8 | out: hHeap=0x1f0000) returned 1 [0217.936] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234980 | out: hHeap=0x1f0000) returned 1 [0217.936] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0217.937] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1030\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1030\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0217.937] GetFileType (hFile=0x1e8) returned 0x1 [0217.938] CloseHandle (hObject=0x1e8) returned 1 [0217.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c8b8 [0217.938] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1030\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1030\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x173eb6c | out: lpFileInformation=0x173eb6c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xcf2)) returned 1 [0217.939] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0217.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c8b8 [0217.939] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1030\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1030\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x173eb7c | out: lpFileInformation=0x173eb7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xcf2)) returned 1 [0217.939] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0217.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c8b8 [0217.939] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0217.939] GetLastError () returned 0x0 [0217.940] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x2135f8) returned 1 [0217.941] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238190 | out: pbBuffer=0x238190) returned 1 [0217.941] CryptReleaseContext (hProv=0x2135f8, dwFlags=0x0) returned 1 [0217.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0217.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x252370 [0217.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2244a0 [0217.941] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=37531013459) returned 1 [0217.941] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0217.942] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=37531045394) returned 1 [0217.942] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0217.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x1ff058 [0217.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x254980 [0217.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x224040 [0217.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x237060 [0217.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff28 [0217.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206658 [0217.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffb8 [0217.943] GetLastError () returned 0x0 [0217.943] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1030\\eula.rtf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1030\\eula.rtf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e230, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0218.104] GetFileType (hFile=0x200) returned 0x1 [0218.104] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238810 [0218.104] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238820 [0218.182] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1030\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1030\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0218.182] GetFileType (hFile=0x1d4) returned 0x1 [0218.182] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bb0 [0218.182] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e30 [0218.183] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x286978 [0218.183] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a80 [0218.183] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b90 [0218.183] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1030\\eula.rtf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1030\\eula.rtf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0218.184] GetFileType (hFile=0x1ac) returned 0x1 [0218.184] GetLastError () returned 0xb7 [0218.184] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1030\\eula.rtf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1030\\eula.rtf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0218.184] GetFileType (hFile=0x218) returned 0x1 [0218.185] GetLastError () returned 0xb7 [0218.185] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1030\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1030\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1a4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0218.185] GetFileType (hFile=0x23c) returned 0x1 [0218.185] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28dfd0 [0218.186] ReadFile (in: hFile=0x23c, lpBuffer=0x28dfd0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e100, lpOverlapped=0x0 | out: lpBuffer=0x28dfd0*, lpNumberOfBytesRead=0x173e100*=0xcf2, lpOverlapped=0x0) returned 1 [0218.275] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24a1b8 [0218.276] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28cfc8 [0218.276] GetLastError () returned 0x0 [0218.277] CloseHandle (hObject=0x200) returned 1 [0218.279] CloseHandle (hObject=0x1d4) returned 1 [0218.279] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238960 [0218.280] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238970 [0218.280] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1030\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1030\\eula.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0218.282] GetFileType (hFile=0x1d4) returned 0x1 [0218.282] GetLastError () returned 0xb7 [0218.285] CloseHandle (hObject=0x1d4) returned 1 [0218.286] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1030\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1030\\eula.rtf")) returned 0 [0218.286] GetLastError () returned 0x20 [0218.286] GetLastError () returned 0x20 [0218.286] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x212cf0) returned 1 [0218.288] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2380a0 | out: pbBuffer=0x2380a0) returned 1 [0218.288] CryptReleaseContext (hProv=0x212cf0, dwFlags=0x0) returned 1 [0218.288] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0218.288] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2382a8 [0218.288] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2382f8 [0218.288] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2f0 [0218.288] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0218.288] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0218.288] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0218.288] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2aa9b0 [0218.288] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210240 [0218.288] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x235768 [0218.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2380c8 [0218.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2314c8 [0218.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c50 [0218.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2361f8 [0218.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238208 [0218.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2315d0 [0218.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238980 [0218.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0218.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101b0 [0218.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238890 [0218.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0218.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0218.289] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0218.289] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0218.289] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238890 | out: hHeap=0x1f0000) returned 1 [0218.289] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0218.289] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0218.290] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238980 | out: hHeap=0x1f0000) returned 1 [0218.290] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2315d0 | out: hHeap=0x1f0000) returned 1 [0218.290] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0218.290] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2361f8 | out: hHeap=0x1f0000) returned 1 [0218.290] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x21d2f0 [0218.290] GetLastError () returned 0x0 [0218.290] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173df20 | out: lpSystemTimeAsFileTime=0x173df20) [0218.290] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x2388c0 [0218.290] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0218.290] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c30 [0218.290] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c30 | out: hHeap=0x1f0000) returned 1 [0218.290] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0218.290] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0218.291] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204dd0 [0218.291] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204dd0 | out: hHeap=0x1f0000) returned 1 [0218.291] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0218.291] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388c0 | out: hHeap=0x1f0000) returned 1 [0218.291] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0218.291] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x1ff058 [0218.291] GetLastError () returned 0x0 [0218.291] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1030\\eula.rtf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1030\\eula.rtf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e290, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0218.292] GetFileType (hFile=0x1d4) returned 0x1 [0218.293] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x299028 [0218.293] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e218 | out: lpNewFilePointer=0x0) returned 1 [0218.294] GetLastError () returned 0xb7 [0218.294] CloseHandle (hObject=0x1d4) returned 1 [0218.294] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238990 | out: hHeap=0x1f0000) returned 1 [0218.294] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238980 | out: hHeap=0x1f0000) returned 1 [0218.294] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2316d8 | out: hHeap=0x1f0000) returned 1 [0218.295] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2314c8 | out: hHeap=0x1f0000) returned 1 [0218.295] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380c8 | out: hHeap=0x1f0000) returned 1 [0218.295] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c50 | out: hHeap=0x1f0000) returned 1 [0218.295] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235768 | out: hHeap=0x1f0000) returned 1 [0218.295] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210240 | out: hHeap=0x1f0000) returned 1 [0218.295] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aa9b0 | out: hHeap=0x1f0000) returned 1 [0218.295] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223e10 | out: hHeap=0x1f0000) returned 1 [0218.295] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0218.295] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0218.296] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25e1c0 | out: hHeap=0x1f0000) returned 1 [0218.296] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2247e8 | out: hHeap=0x1f0000) returned 1 [0218.296] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf70 | out: hHeap=0x1f0000) returned 1 [0218.296] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238850 | out: hHeap=0x1f0000) returned 1 [0218.296] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210090 | out: hHeap=0x1f0000) returned 1 [0218.296] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0218.296] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238860 | out: hHeap=0x1f0000) returned 1 [0218.296] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20fef8 | out: hHeap=0x1f0000) returned 1 [0218.296] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0218.296] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389c0 | out: hHeap=0x1f0000) returned 1 [0218.297] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2313c0 | out: hHeap=0x1f0000) returned 1 [0218.297] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238438 | out: hHeap=0x1f0000) returned 1 [0218.297] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235cb0 | out: hHeap=0x1f0000) returned 1 [0218.297] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346b0 | out: hHeap=0x1f0000) returned 1 [0218.297] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0218.297] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0218.297] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234a10 | out: hHeap=0x1f0000) returned 1 [0218.297] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238970 | out: hHeap=0x1f0000) returned 1 [0218.297] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238960 | out: hHeap=0x1f0000) returned 1 [0218.298] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28dfd0 | out: hHeap=0x1f0000) returned 1 [0218.298] CloseHandle (hObject=0x23c) returned 1 [0218.298] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238840 | out: hHeap=0x1f0000) returned 1 [0218.298] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ac0 | out: hHeap=0x1f0000) returned 1 [0218.298] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2331a8 | out: hHeap=0x1f0000) returned 1 [0218.299] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24a1b8 | out: hHeap=0x1f0000) returned 1 [0218.299] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210000 | out: hHeap=0x1f0000) returned 1 [0218.299] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d10 | out: hHeap=0x1f0000) returned 1 [0218.299] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28cfc8 | out: hHeap=0x1f0000) returned 1 [0218.299] CloseHandle (hObject=0x218) returned 1 [0218.300] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a00 | out: hHeap=0x1f0000) returned 1 [0218.300] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ba0 | out: hHeap=0x1f0000) returned 1 [0218.300] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2868c0 | out: hHeap=0x1f0000) returned 1 [0218.300] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bf0 | out: hHeap=0x1f0000) returned 1 [0218.300] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0218.300] CloseHandle (hObject=0x1ac) returned 1 [0218.301] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b90 | out: hHeap=0x1f0000) returned 1 [0218.301] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a80 | out: hHeap=0x1f0000) returned 1 [0218.301] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286978 | out: hHeap=0x1f0000) returned 1 [0218.301] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238820 | out: hHeap=0x1f0000) returned 1 [0218.301] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238810 | out: hHeap=0x1f0000) returned 1 [0218.301] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a90 | out: hHeap=0x1f0000) returned 1 [0218.301] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a50 | out: hHeap=0x1f0000) returned 1 [0218.301] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237df0 | out: hHeap=0x1f0000) returned 1 [0218.302] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x254980 | out: hHeap=0x1f0000) returned 1 [0218.302] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224040 | out: hHeap=0x1f0000) returned 1 [0218.302] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206658 | out: hHeap=0x1f0000) returned 1 [0218.302] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffb8 | out: hHeap=0x1f0000) returned 1 [0218.302] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff28 | out: hHeap=0x1f0000) returned 1 [0218.302] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237060 | out: hHeap=0x1f0000) returned 1 [0218.302] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x252370 | out: hHeap=0x1f0000) returned 1 [0218.569] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2244a0 | out: hHeap=0x1f0000) returned 1 [0218.569] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0218.569] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0218.569] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263178 | out: hHeap=0x1f0000) returned 1 [0218.569] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2344b8 | out: hHeap=0x1f0000) returned 1 [0218.569] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0218.569] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1030\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1030\\eula.rtf")) returned 1 [0218.572] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12fb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0218.572] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf70 [0218.572] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234818 [0218.572] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235768 [0218.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234818 | out: hHeap=0x1f0000) returned 1 [0218.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2357d0 | out: hHeap=0x1f0000) returned 1 [0218.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf70 | out: hHeap=0x1f0000) returned 1 [0218.709] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1030\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1030\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x234 [0218.710] GetFileType (hFile=0x234) returned 0x1 [0218.710] CloseHandle (hObject=0x234) returned 1 [0218.710] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235f20 [0218.711] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1030\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1030\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x173eb6c | out: lpFileInformation=0x173eb6c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12fb4)) returned 1 [0218.711] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235f20 | out: hHeap=0x1f0000) returned 1 [0218.711] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235b78 [0218.711] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1030\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1030\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x173eb7c | out: lpFileInformation=0x173eb7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12fb4)) returned 1 [0218.711] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0218.711] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2357d0 [0218.711] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2357d0 | out: hHeap=0x1f0000) returned 1 [0218.711] GetLastError () returned 0x0 [0218.712] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x212ad0) returned 1 [0218.713] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238208 | out: pbBuffer=0x238208) returned 1 [0218.713] CryptReleaseContext (hProv=0x212ad0, dwFlags=0x0) returned 1 [0218.713] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0218.713] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x254980 [0218.713] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x224388 [0218.713] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=37608222645) returned 1 [0218.713] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0218.714] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=37608254448) returned 1 [0218.714] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0218.714] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x21cf70 [0218.714] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x258298 [0218.714] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x224158 [0218.714] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x237470 [0218.714] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff28 [0218.714] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206808 [0218.715] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210090 [0218.715] GetLastError () returned 0x0 [0218.715] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1030\\LocalizedData.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1030\\localizeddata.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e230, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x234 [0218.715] GetFileType (hFile=0x234) returned 0x1 [0218.716] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a00 [0218.716] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a20 [0218.717] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1030\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1030\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0218.717] GetFileType (hFile=0x1c0) returned 0x1 [0218.718] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e90 [0218.718] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ef0 [0218.718] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x286ba0 [0218.718] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b10 [0218.719] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ad0 [0218.720] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1030\\LocalizedData.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1030\\localizeddata.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0218.720] GetFileType (hFile=0x1f4) returned 0x1 [0218.721] GetLastError () returned 0xb7 [0218.721] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1030\\LocalizedData.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1030\\localizeddata.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0218.721] GetFileType (hFile=0x21c) returned 0x1 [0218.722] GetLastError () returned 0xb7 [0218.722] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1030\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1030\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1a4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc [0218.722] GetFileType (hFile=0x1cc) returned 0x1 [0218.723] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28efd8 [0218.723] ReadFile (in: hFile=0x1cc, lpBuffer=0x28efd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e100, lpOverlapped=0x0 | out: lpBuffer=0x28efd8*, lpNumberOfBytesRead=0x173e100*=0x1000, lpOverlapped=0x0) returned 1 [0218.727] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24b1d8 [0218.728] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28bfc0 [0218.729] GetLastError () returned 0x0 [0218.733] CloseHandle (hObject=0x234) returned 1 [0218.738] CloseHandle (hObject=0x1c0) returned 1 [0218.738] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238aa0 [0218.738] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ac0 [0218.739] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1030\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1030\\localizeddata.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0218.742] GetFileType (hFile=0x1c0) returned 0x1 [0218.742] GetLastError () returned 0xb7 [0218.744] CloseHandle (hObject=0x1c0) returned 1 [0218.744] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1030\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1030\\localizeddata.xml")) returned 0 [0218.745] GetLastError () returned 0x20 [0218.745] GetLastError () returned 0x20 [0218.745] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x2133d8) returned 1 [0218.746] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2380c8 | out: pbBuffer=0x2380c8) returned 1 [0218.746] CryptReleaseContext (hProv=0x2133d8, dwFlags=0x0) returned 1 [0218.746] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380c8 | out: hHeap=0x1f0000) returned 1 [0218.746] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238370 [0218.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238118 [0218.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf70 [0218.747] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0218.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0218.747] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf70 | out: hHeap=0x1f0000) returned 1 [0218.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x22c8b8 [0218.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffa0 [0218.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x2358a0 [0218.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238140 [0218.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2317e0 [0218.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204db0 [0218.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235908 [0218.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2384b0 [0218.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2311b0 [0218.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b60 [0218.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380c8 [0218.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210018 [0218.749] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389f0 [0218.749] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0218.749] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffb8 [0218.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffb8 | out: hHeap=0x1f0000) returned 1 [0218.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0218.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389f0 | out: hHeap=0x1f0000) returned 1 [0218.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210018 | out: hHeap=0x1f0000) returned 1 [0218.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380c8 | out: hHeap=0x1f0000) returned 1 [0218.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b60 | out: hHeap=0x1f0000) returned 1 [0218.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2311b0 | out: hHeap=0x1f0000) returned 1 [0218.750] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0218.750] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235908 | out: hHeap=0x1f0000) returned 1 [0218.750] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x21cf70 [0218.750] GetLastError () returned 0x0 [0218.750] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173df20 | out: lpSystemTimeAsFileTime=0x173df20) [0218.750] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238ba0 [0218.750] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0218.751] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f10 [0218.751] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f10 | out: hHeap=0x1f0000) returned 1 [0218.751] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0218.751] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380c8 [0218.751] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204dd0 [0218.751] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204dd0 | out: hHeap=0x1f0000) returned 1 [0218.751] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380c8 | out: hHeap=0x1f0000) returned 1 [0218.751] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ba0 | out: hHeap=0x1f0000) returned 1 [0218.751] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0218.751] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x1fef78 [0218.752] GetLastError () returned 0x0 [0218.752] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1030\\LocalizedData.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1030\\localizeddata.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e290, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0218.752] GetFileType (hFile=0x1c0) returned 0x1 [0218.753] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x287fa0 [0218.753] SetFilePointerEx (in: hFile=0x1c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e218 | out: lpNewFilePointer=0x0) returned 1 [0218.753] GetLastError () returned 0xb7 [0218.754] CloseHandle (hObject=0x1c0) returned 1 [0218.754] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b60 | out: hHeap=0x1f0000) returned 1 [0218.754] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ba0 | out: hHeap=0x1f0000) returned 1 [0218.754] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2313c0 | out: hHeap=0x1f0000) returned 1 [0218.754] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2317e0 | out: hHeap=0x1f0000) returned 1 [0218.754] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0218.754] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204db0 | out: hHeap=0x1f0000) returned 1 [0218.755] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2358a0 | out: hHeap=0x1f0000) returned 1 [0218.755] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffa0 | out: hHeap=0x1f0000) returned 1 [0218.755] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0218.755] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223cf8 | out: hHeap=0x1f0000) returned 1 [0218.755] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0218.755] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0218.755] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2595a0 | out: hHeap=0x1f0000) returned 1 [0218.755] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2244a0 | out: hHeap=0x1f0000) returned 1 [0218.755] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0218.755] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b20 | out: hHeap=0x1f0000) returned 1 [0218.755] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff70 | out: hHeap=0x1f0000) returned 1 [0218.756] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0219.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b90 | out: hHeap=0x1f0000) returned 1 [0219.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210000 | out: hHeap=0x1f0000) returned 1 [0219.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0219.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b30 | out: hHeap=0x1f0000) returned 1 [0219.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2315d0 | out: hHeap=0x1f0000) returned 1 [0219.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238438 | out: hHeap=0x1f0000) returned 1 [0219.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2357d0 | out: hHeap=0x1f0000) returned 1 [0219.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233cd8 | out: hHeap=0x1f0000) returned 1 [0219.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0219.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0219.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233c90 | out: hHeap=0x1f0000) returned 1 [0219.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ac0 | out: hHeap=0x1f0000) returned 1 [0219.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238aa0 | out: hHeap=0x1f0000) returned 1 [0219.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28efd8 | out: hHeap=0x1f0000) returned 1 [0219.021] CloseHandle (hObject=0x1cc) returned 1 [0219.021] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a90 | out: hHeap=0x1f0000) returned 1 [0219.022] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a80 | out: hHeap=0x1f0000) returned 1 [0219.022] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232f68 | out: hHeap=0x1f0000) returned 1 [0219.022] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24b1d8 | out: hHeap=0x1f0000) returned 1 [0219.022] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20fef8 | out: hHeap=0x1f0000) returned 1 [0219.022] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d90 | out: hHeap=0x1f0000) returned 1 [0219.022] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28bfc0 | out: hHeap=0x1f0000) returned 1 [0219.023] CloseHandle (hObject=0x21c) returned 1 [0219.023] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ae0 | out: hHeap=0x1f0000) returned 1 [0219.023] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b50 | out: hHeap=0x1f0000) returned 1 [0219.023] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286dc8 | out: hHeap=0x1f0000) returned 1 [0219.024] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ef0 | out: hHeap=0x1f0000) returned 1 [0219.024] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d368 | out: hHeap=0x1f0000) returned 1 [0219.024] CloseHandle (hObject=0x1f4) returned 1 [0219.025] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ad0 | out: hHeap=0x1f0000) returned 1 [0219.025] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b10 | out: hHeap=0x1f0000) returned 1 [0219.025] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286ba0 | out: hHeap=0x1f0000) returned 1 [0219.027] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a20 | out: hHeap=0x1f0000) returned 1 [0219.027] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a00 | out: hHeap=0x1f0000) returned 1 [0219.027] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a70 | out: hHeap=0x1f0000) returned 1 [0219.027] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a50 | out: hHeap=0x1f0000) returned 1 [0219.027] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223e10 | out: hHeap=0x1f0000) returned 1 [0219.028] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x258298 | out: hHeap=0x1f0000) returned 1 [0219.028] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224158 | out: hHeap=0x1f0000) returned 1 [0219.028] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206808 | out: hHeap=0x1f0000) returned 1 [0219.028] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210090 | out: hHeap=0x1f0000) returned 1 [0219.028] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff28 | out: hHeap=0x1f0000) returned 1 [0219.028] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237470 | out: hHeap=0x1f0000) returned 1 [0219.028] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x254980 | out: hHeap=0x1f0000) returned 1 [0219.028] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224388 | out: hHeap=0x1f0000) returned 1 [0219.028] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0219.028] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235d80 | out: hHeap=0x1f0000) returned 1 [0219.029] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262e48 | out: hHeap=0x1f0000) returned 1 [0219.029] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2343e0 | out: hHeap=0x1f0000) returned 1 [0219.029] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0219.029] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1030\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1030\\localizeddata.xml")) returned 1 [0219.030] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0219.031] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2f0 [0219.031] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2343e0 [0219.031] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235f20 [0219.031] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2343e0 | out: hHeap=0x1f0000) returned 1 [0219.031] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235768 | out: hHeap=0x1f0000) returned 1 [0219.031] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0219.032] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1030\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1030\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0219.032] GetFileType (hFile=0x1f4) returned 0x1 [0219.033] CloseHandle (hObject=0x1f4) returned 1 [0219.033] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235be0 [0219.033] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1030\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1030\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x173eb6c | out: lpFileInformation=0x173eb6c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758)) returned 1 [0219.034] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235be0 | out: hHeap=0x1f0000) returned 1 [0219.034] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235768 [0219.034] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1030\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1030\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x173eb7c | out: lpFileInformation=0x173eb7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758)) returned 1 [0219.034] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235768 | out: hHeap=0x1f0000) returned 1 [0219.034] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235eb8 [0219.034] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235eb8 | out: hHeap=0x1f0000) returned 1 [0219.034] GetLastError () returned 0x0 [0219.035] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x212ad0) returned 1 [0219.036] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238168 | out: pbBuffer=0x238168) returned 1 [0219.036] CryptReleaseContext (hProv=0x212ad0, dwFlags=0x0) returned 1 [0219.036] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0219.036] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x254980 [0219.036] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x232cc0 [0219.036] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=37640526696) returned 1 [0219.037] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0219.037] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=37640608197) returned 1 [0219.037] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0219.038] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x21cf00 [0219.038] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x258298 [0219.038] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x233468 [0219.038] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x2376e0 [0219.038] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffa0 [0219.038] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2067d8 [0219.038] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20fef8 [0219.038] GetLastError () returned 0x0 [0219.039] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1030\\SetupResources.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1030\\setupresources.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e230, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0219.039] GetFileType (hFile=0x1f4) returned 0x1 [0219.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b60 [0219.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b70 [0219.041] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1030\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1030\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0219.041] GetFileType (hFile=0x21c) returned 0x1 [0219.042] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e90 [0219.042] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e70 [0219.042] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2612d0 [0219.042] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a70 [0219.043] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b90 [0219.044] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1030\\SetupResources.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1030\\setupresources.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc [0219.044] GetFileType (hFile=0x1cc) returned 0x1 [0219.045] GetLastError () returned 0xb7 [0219.045] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1030\\SetupResources.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1030\\setupresources.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0219.045] GetFileType (hFile=0x210) returned 0x1 [0219.046] GetLastError () returned 0xb7 [0219.046] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1030\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1030\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1a4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0219.046] GetFileType (hFile=0x22c) returned 0x1 [0219.047] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28dfd0 [0219.047] ReadFile (in: hFile=0x22c, lpBuffer=0x28dfd0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e100, lpOverlapped=0x0 | out: lpBuffer=0x28dfd0*, lpNumberOfBytesRead=0x173e100*=0x1000, lpOverlapped=0x0) returned 1 [0219.050] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24d620 [0219.050] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28efd8 [0219.050] GetLastError () returned 0x0 [0219.387] CloseHandle (hObject=0x1f4) returned 1 [0219.391] CloseHandle (hObject=0x21c) returned 1 [0219.392] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b10 [0219.393] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b20 [0219.393] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1030\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1030\\setupresources.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0219.395] GetFileType (hFile=0x21c) returned 0x1 [0219.396] GetLastError () returned 0xb7 [0219.397] CloseHandle (hObject=0x21c) returned 1 [0219.398] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1030\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1030\\setupresources.dll")) returned 0 [0219.398] GetLastError () returned 0x20 [0219.398] GetLastError () returned 0x20 [0219.399] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x213020) returned 1 [0219.400] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238168 | out: pbBuffer=0x238168) returned 1 [0219.400] CryptReleaseContext (hProv=0x213020, dwFlags=0x0) returned 1 [0219.400] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0219.400] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2384b0 [0219.400] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238488 [0219.400] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0219.400] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0219.400] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0219.400] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0219.400] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x22bba8 [0219.401] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210018 [0219.401] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x235700 [0219.401] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238230 [0219.401] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2852a8 [0219.401] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d10 [0219.401] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235be0 [0219.401] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238168 [0219.401] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2854b8 [0219.401] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b50 [0219.401] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0219.402] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210078 [0219.402] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a20 [0219.402] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0219.402] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210090 [0219.402] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210090 | out: hHeap=0x1f0000) returned 1 [0219.402] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0219.402] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a20 | out: hHeap=0x1f0000) returned 1 [0219.402] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210078 | out: hHeap=0x1f0000) returned 1 [0219.402] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0219.402] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b50 | out: hHeap=0x1f0000) returned 1 [0219.402] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2854b8 | out: hHeap=0x1f0000) returned 1 [0219.402] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0219.403] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235be0 | out: hHeap=0x1f0000) returned 1 [0219.403] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x21d050 [0219.403] GetLastError () returned 0x0 [0219.403] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173df20 | out: lpSystemTimeAsFileTime=0x173df20) [0219.403] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238b50 [0219.403] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0219.403] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f30 [0219.403] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f30 | out: hHeap=0x1f0000) returned 1 [0219.403] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0219.403] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0219.404] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0219.404] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d70 | out: hHeap=0x1f0000) returned 1 [0219.404] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0219.404] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b50 | out: hHeap=0x1f0000) returned 1 [0219.404] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0219.404] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x1fef78 [0219.404] GetLastError () returned 0x0 [0219.404] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1030\\SetupResources.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1030\\setupresources.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e290, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0219.404] GetFileType (hFile=0x21c) returned 0x1 [0219.405] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28afb8 [0219.405] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e218 | out: lpNewFilePointer=0x0) returned 1 [0219.405] GetLastError () returned 0xb7 [0219.405] CloseHandle (hObject=0x21c) returned 1 [0219.406] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a20 | out: hHeap=0x1f0000) returned 1 [0219.406] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b50 | out: hHeap=0x1f0000) returned 1 [0219.406] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285cf8 | out: hHeap=0x1f0000) returned 1 [0219.406] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2852a8 | out: hHeap=0x1f0000) returned 1 [0219.406] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0219.406] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d10 | out: hHeap=0x1f0000) returned 1 [0219.406] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0219.406] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210018 | out: hHeap=0x1f0000) returned 1 [0219.406] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22bba8 | out: hHeap=0x1f0000) returned 1 [0219.406] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233580 | out: hHeap=0x1f0000) returned 1 [0219.406] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238488 | out: hHeap=0x1f0000) returned 1 [0219.406] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0219.406] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x251068 | out: hHeap=0x1f0000) returned 1 [0219.406] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232ba8 | out: hHeap=0x1f0000) returned 1 [0219.406] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0219.407] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b30 | out: hHeap=0x1f0000) returned 1 [0219.407] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff70 | out: hHeap=0x1f0000) returned 1 [0219.407] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238438 | out: hHeap=0x1f0000) returned 1 [0219.407] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b40 | out: hHeap=0x1f0000) returned 1 [0219.407] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210000 | out: hHeap=0x1f0000) returned 1 [0219.407] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0219.407] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a10 | out: hHeap=0x1f0000) returned 1 [0219.407] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285098 | out: hHeap=0x1f0000) returned 1 [0219.407] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0219.407] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235aa8 | out: hHeap=0x1f0000) returned 1 [0219.407] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233cd8 | out: hHeap=0x1f0000) returned 1 [0219.407] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0219.407] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0219.407] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233c90 | out: hHeap=0x1f0000) returned 1 [0219.407] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b20 | out: hHeap=0x1f0000) returned 1 [0219.407] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b10 | out: hHeap=0x1f0000) returned 1 [0219.407] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28dfd0 | out: hHeap=0x1f0000) returned 1 [0219.407] CloseHandle (hObject=0x22c) returned 1 [0219.408] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a50 | out: hHeap=0x1f0000) returned 1 [0219.408] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ab0 | out: hHeap=0x1f0000) returned 1 [0219.408] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223e20 | out: hHeap=0x1f0000) returned 1 [0219.408] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24d620 | out: hHeap=0x1f0000) returned 1 [0219.408] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffd0 | out: hHeap=0x1f0000) returned 1 [0219.408] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cb0 | out: hHeap=0x1f0000) returned 1 [0219.408] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28efd8 | out: hHeap=0x1f0000) returned 1 [0219.408] CloseHandle (hObject=0x210) returned 1 [0219.408] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ad0 | out: hHeap=0x1f0000) returned 1 [0219.408] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a60 | out: hHeap=0x1f0000) returned 1 [0219.408] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2615b0 | out: hHeap=0x1f0000) returned 1 [0219.408] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c50 | out: hHeap=0x1f0000) returned 1 [0219.408] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0219.409] CloseHandle (hObject=0x1cc) returned 1 [0219.409] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b90 | out: hHeap=0x1f0000) returned 1 [0219.409] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a70 | out: hHeap=0x1f0000) returned 1 [0219.409] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2612d0 | out: hHeap=0x1f0000) returned 1 [0219.409] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b70 | out: hHeap=0x1f0000) returned 1 [0219.409] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b60 | out: hHeap=0x1f0000) returned 1 [0219.409] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ac0 | out: hHeap=0x1f0000) returned 1 [0219.409] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b80 | out: hHeap=0x1f0000) returned 1 [0219.409] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2338c8 | out: hHeap=0x1f0000) returned 1 [0219.409] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x258298 | out: hHeap=0x1f0000) returned 1 [0219.409] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233468 | out: hHeap=0x1f0000) returned 1 [0219.409] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2067d8 | out: hHeap=0x1f0000) returned 1 [0219.409] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20fef8 | out: hHeap=0x1f0000) returned 1 [0219.410] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffa0 | out: hHeap=0x1f0000) returned 1 [0219.410] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2376e0 | out: hHeap=0x1f0000) returned 1 [0219.410] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x254980 | out: hHeap=0x1f0000) returned 1 [0219.410] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232cc0 | out: hHeap=0x1f0000) returned 1 [0219.410] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0219.410] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235cb0 | out: hHeap=0x1f0000) returned 1 [0219.410] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263310 | out: hHeap=0x1f0000) returned 1 [0219.410] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2343e0 | out: hHeap=0x1f0000) returned 1 [0219.410] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0219.410] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1030\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1030\\setupresources.dll")) returned 1 [0219.412] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0219.412] FindClose (in: hFindFile=0x24ec80 | out: hFindFile=0x24ec80) returned 1 [0219.412] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235f20 | out: hHeap=0x1f0000) returned 1 [0219.412] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263640 | out: hHeap=0x1f0000) returned 1 [0219.412] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0219.412] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234500 | out: hHeap=0x1f0000) returned 1 [0219.412] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2348f0 [0219.412] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0219.412] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2627e8 [0219.412] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234aa0 [0219.412] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1031\\*", lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24eb80 [0219.413] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346b0 [0219.413] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234aa0 | out: hHeap=0x1f0000) returned 1 [0219.413] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0219.413] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.413] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2345d8 [0219.413] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346b0 | out: hHeap=0x1f0000) returned 1 [0219.413] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0219.413] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0219.413] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xd5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0219.413] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0219.413] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234980 [0219.413] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x235cb0 [0219.413] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234980 | out: hHeap=0x1f0000) returned 1 [0219.413] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2345d8 | out: hHeap=0x1f0000) returned 1 [0219.413] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0219.414] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1031\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1031\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc [0219.414] GetFileType (hFile=0x1cc) returned 0x1 [0219.414] CloseHandle (hObject=0x1cc) returned 1 [0219.414] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22bba8 [0219.414] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1031\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1031\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x173eb6c | out: lpFileInformation=0x173eb6c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xd5b)) returned 1 [0219.414] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22bba8 | out: hHeap=0x1f0000) returned 1 [0219.414] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22bba8 [0219.415] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1031\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1031\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x173eb7c | out: lpFileInformation=0x173eb7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xd5b)) returned 1 [0219.415] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22bba8 | out: hHeap=0x1f0000) returned 1 [0219.415] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22bba8 [0219.415] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22bba8 | out: hHeap=0x1f0000) returned 1 [0219.415] GetLastError () returned 0x0 [0219.415] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x213350) returned 1 [0219.416] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238078 | out: pbBuffer=0x238078) returned 1 [0219.417] CryptReleaseContext (hProv=0x213350, dwFlags=0x0) returned 1 [0219.417] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0219.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x254980 [0219.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x233120 [0219.417] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=37678568600) returned 1 [0219.417] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0219.417] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=37678585905) returned 1 [0219.417] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0219.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x1ff058 [0219.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x252370 [0219.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x233238 [0219.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x237130 [0219.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210078 [0219.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206868 [0219.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20fef8 [0219.417] GetLastError () returned 0x0 [0219.418] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1031\\eula.rtf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1031\\eula.rtf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e230, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0219.710] GetFileType (hFile=0x1e8) returned 0x1 [0219.711] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b70 [0219.711] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b80 [0219.809] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1031\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1031\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0219.809] GetFileType (hFile=0x214) returned 0x1 [0219.810] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f70 [0219.810] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e70 [0219.810] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2615b0 [0219.810] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a20 [0219.810] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b90 [0219.811] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1031\\eula.rtf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1031\\eula.rtf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0219.811] GetFileType (hFile=0x210) returned 0x1 [0219.811] GetLastError () returned 0xb7 [0219.811] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1031\\eula.rtf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1031\\eula.rtf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0219.812] GetFileType (hFile=0x22c) returned 0x1 [0219.812] GetLastError () returned 0xb7 [0219.812] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1031\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1031\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1a4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0219.812] GetFileType (hFile=0x21c) returned 0x1 [0219.812] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x290fe8 [0219.812] ReadFile (in: hFile=0x21c, lpBuffer=0x290fe8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e100, lpOverlapped=0x0 | out: lpBuffer=0x290fe8*, lpNumberOfBytesRead=0x173e100*=0xd5b, lpOverlapped=0x0) returned 1 [0219.899] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24b9e8 [0219.899] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x289fb0 [0219.899] GetLastError () returned 0x0 [0219.901] CloseHandle (hObject=0x1e8) returned 1 [0219.902] CloseHandle (hObject=0x214) returned 1 [0219.903] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a60 [0219.903] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a70 [0219.904] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1031\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1031\\eula.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0219.905] GetFileType (hFile=0x214) returned 0x1 [0219.906] GetLastError () returned 0xb7 [0219.907] CloseHandle (hObject=0x214) returned 1 [0219.908] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1031\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1031\\eula.rtf")) returned 0 [0219.908] GetLastError () returned 0x20 [0219.908] GetLastError () returned 0x20 [0219.908] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x212f98) returned 1 [0219.909] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238488 | out: pbBuffer=0x238488) returned 1 [0219.909] CryptReleaseContext (hProv=0x212f98, dwFlags=0x0) returned 1 [0219.909] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238488 | out: hHeap=0x1f0000) returned 1 [0219.909] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238488 [0219.910] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238000 [0219.910] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0219.910] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238488 | out: hHeap=0x1f0000) returned 1 [0219.910] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0219.910] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0219.910] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8bb8 [0219.910] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210240 [0219.910] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x2362c8 [0219.910] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2380a0 [0219.910] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2857d0 [0219.911] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f50 [0219.911] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235eb8 [0219.911] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238488 [0219.911] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2854b8 [0219.911] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238920 [0219.911] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238528 [0219.911] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210198 [0219.911] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389c0 [0219.911] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238640 [0219.911] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101b0 [0219.912] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0219.912] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238640 | out: hHeap=0x1f0000) returned 1 [0219.912] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389c0 | out: hHeap=0x1f0000) returned 1 [0219.912] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0219.912] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238528 | out: hHeap=0x1f0000) returned 1 [0219.912] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238920 | out: hHeap=0x1f0000) returned 1 [0219.913] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2854b8 | out: hHeap=0x1f0000) returned 1 [0219.913] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238488 | out: hHeap=0x1f0000) returned 1 [0219.913] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235eb8 | out: hHeap=0x1f0000) returned 1 [0219.913] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x21d050 [0219.913] GetLastError () returned 0x0 [0219.913] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173df20 | out: lpSystemTimeAsFileTime=0x173df20) [0219.913] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x2389b0 [0219.913] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238488 [0219.913] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e30 [0219.914] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e30 | out: hHeap=0x1f0000) returned 1 [0219.914] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238488 | out: hHeap=0x1f0000) returned 1 [0219.914] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238488 [0219.914] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d30 [0219.914] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d30 | out: hHeap=0x1f0000) returned 1 [0219.914] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238488 | out: hHeap=0x1f0000) returned 1 [0219.914] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389b0 | out: hHeap=0x1f0000) returned 1 [0219.914] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0219.914] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238be8 [0219.915] GetLastError () returned 0x0 [0219.915] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1031\\eula.rtf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1031\\eula.rtf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e290, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0219.915] GetFileType (hFile=0x214) returned 0x1 [0219.916] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28ffe0 [0219.916] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e218 | out: lpNewFilePointer=0x0) returned 1 [0219.916] GetLastError () returned 0xb7 [0219.916] CloseHandle (hObject=0x214) returned 1 [0219.917] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238910 | out: hHeap=0x1f0000) returned 1 [0219.917] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238800 | out: hHeap=0x1f0000) returned 1 [0219.917] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2852a8 | out: hHeap=0x1f0000) returned 1 [0219.917] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2857d0 | out: hHeap=0x1f0000) returned 1 [0219.917] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0219.917] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f50 | out: hHeap=0x1f0000) returned 1 [0219.917] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2362c8 | out: hHeap=0x1f0000) returned 1 [0219.917] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210240 | out: hHeap=0x1f0000) returned 1 [0219.917] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8bb8 | out: hHeap=0x1f0000) returned 1 [0219.917] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232cc0 | out: hHeap=0x1f0000) returned 1 [0219.918] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0219.918] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0219.918] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25a8a8 | out: hHeap=0x1f0000) returned 1 [0219.918] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233580 | out: hHeap=0x1f0000) returned 1 [0219.918] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0219.918] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238900 | out: hHeap=0x1f0000) returned 1 [0219.918] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0219.918] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0219.918] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238940 | out: hHeap=0x1f0000) returned 1 [0219.918] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0219.918] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0219.918] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238880 | out: hHeap=0x1f0000) returned 1 [0219.918] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2853b0 | out: hHeap=0x1f0000) returned 1 [0219.919] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0219.919] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235c48 | out: hHeap=0x1f0000) returned 1 [0219.919] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234788 | out: hHeap=0x1f0000) returned 1 [0219.919] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0219.919] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0219.919] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234980 | out: hHeap=0x1f0000) returned 1 [0219.919] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a70 | out: hHeap=0x1f0000) returned 1 [0219.919] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a60 | out: hHeap=0x1f0000) returned 1 [0219.919] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x290fe8 | out: hHeap=0x1f0000) returned 1 [0219.919] CloseHandle (hObject=0x21c) returned 1 [0219.920] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a50 | out: hHeap=0x1f0000) returned 1 [0219.920] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a40 | out: hHeap=0x1f0000) returned 1 [0219.920] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224960 | out: hHeap=0x1f0000) returned 1 [0219.920] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24b9e8 | out: hHeap=0x1f0000) returned 1 [0219.920] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2100a8 | out: hHeap=0x1f0000) returned 1 [0219.920] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d10 | out: hHeap=0x1f0000) returned 1 [0219.921] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x289fb0 | out: hHeap=0x1f0000) returned 1 [0219.921] CloseHandle (hObject=0x22c) returned 1 [0219.921] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a30 | out: hHeap=0x1f0000) returned 1 [0219.921] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a10 | out: hHeap=0x1f0000) returned 1 [0219.921] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2612d0 | out: hHeap=0x1f0000) returned 1 [0219.921] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f30 | out: hHeap=0x1f0000) returned 1 [0219.921] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239be0 | out: hHeap=0x1f0000) returned 1 [0219.922] CloseHandle (hObject=0x210) returned 1 [0219.922] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b90 | out: hHeap=0x1f0000) returned 1 [0219.922] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a20 | out: hHeap=0x1f0000) returned 1 [0219.922] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2615b0 | out: hHeap=0x1f0000) returned 1 [0219.922] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b80 | out: hHeap=0x1f0000) returned 1 [0219.922] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b70 | out: hHeap=0x1f0000) returned 1 [0219.922] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ac0 | out: hHeap=0x1f0000) returned 1 [0219.923] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b10 | out: hHeap=0x1f0000) returned 1 [0219.923] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0219.923] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x252370 | out: hHeap=0x1f0000) returned 1 [0219.923] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233238 | out: hHeap=0x1f0000) returned 1 [0219.923] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206868 | out: hHeap=0x1f0000) returned 1 [0219.923] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20fef8 | out: hHeap=0x1f0000) returned 1 [0219.923] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210078 | out: hHeap=0x1f0000) returned 1 [0219.923] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237130 | out: hHeap=0x1f0000) returned 1 [0219.923] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x254980 | out: hHeap=0x1f0000) returned 1 [0219.923] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233120 | out: hHeap=0x1f0000) returned 1 [0219.923] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0219.924] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22bba8 | out: hHeap=0x1f0000) returned 1 [0219.924] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261cc0 | out: hHeap=0x1f0000) returned 1 [0219.924] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2345d8 | out: hHeap=0x1f0000) returned 1 [0219.924] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0219.924] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1031\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1031\\eula.rtf")) returned 1 [0219.925] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x141aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0219.925] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282a0 [0219.926] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2345d8 [0219.926] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2361f8 [0219.926] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2345d8 | out: hHeap=0x1f0000) returned 1 [0219.926] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235cb0 | out: hHeap=0x1f0000) returned 1 [0219.926] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0219.926] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1031\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1031\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0219.926] GetFileType (hFile=0x210) returned 0x1 [0219.927] CloseHandle (hObject=0x210) returned 1 [0219.927] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2360c0 [0219.927] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1031\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1031\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x173eb6c | out: lpFileInformation=0x173eb6c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x141aa)) returned 1 [0219.927] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2360c0 | out: hHeap=0x1f0000) returned 1 [0219.927] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2360c0 [0220.178] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1031\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1031\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x173eb7c | out: lpFileInformation=0x173eb7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x141aa)) returned 1 [0220.178] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2360c0 | out: hHeap=0x1f0000) returned 1 [0220.178] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235f20 [0220.178] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235f20 | out: hHeap=0x1f0000) returned 1 [0220.178] GetLastError () returned 0x0 [0220.179] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x212d78) returned 1 [0220.180] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238320 | out: pbBuffer=0x238320) returned 1 [0220.180] CryptReleaseContext (hProv=0x212d78, dwFlags=0x0) returned 1 [0220.180] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0220.180] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x252370 [0220.180] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x232ef0 [0220.180] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=37754911524) returned 1 [0220.180] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0220.181] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=37754945772) returned 1 [0220.181] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0220.181] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x2390f0 [0220.181] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x25bbb0 [0220.181] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x233008 [0220.181] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x237af0 [0220.181] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffd0 [0220.181] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2068c8 [0220.182] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210000 [0220.182] GetLastError () returned 0x0 [0220.182] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1031\\LocalizedData.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1031\\localizeddata.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e230, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0220.182] GetFileType (hFile=0x218) returned 0x1 [0220.183] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b90 [0220.183] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a20 [0220.184] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1031\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1031\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0220.185] GetFileType (hFile=0x23c) returned 0x1 [0220.185] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d30 [0220.185] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f30 [0220.185] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x260ff0 [0220.185] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389e0 [0220.186] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a30 [0220.187] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1031\\LocalizedData.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1031\\localizeddata.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0220.187] GetFileType (hFile=0x1d4) returned 0x1 [0220.188] GetLastError () returned 0xb7 [0220.188] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1031\\LocalizedData.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1031\\localizeddata.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0220.188] GetFileType (hFile=0x200) returned 0x1 [0220.188] GetLastError () returned 0xb7 [0220.189] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1031\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1031\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1a4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0220.189] GetFileType (hFile=0x230) returned 0x1 [0220.190] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28dfd0 [0220.190] ReadFile (in: hFile=0x230, lpBuffer=0x28dfd0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e100, lpOverlapped=0x0 | out: lpBuffer=0x28dfd0*, lpNumberOfBytesRead=0x173e100*=0x1000, lpOverlapped=0x0) returned 1 [0220.235] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24a5c0 [0220.237] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x287fa0 [0220.237] GetLastError () returned 0x0 [0220.241] CloseHandle (hObject=0x218) returned 1 [0220.245] CloseHandle (hObject=0x23c) returned 1 [0220.245] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387e0 [0220.246] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388c0 [0220.247] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1031\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1031\\localizeddata.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0220.249] GetFileType (hFile=0x23c) returned 0x1 [0220.249] GetLastError () returned 0xb7 [0220.251] CloseHandle (hObject=0x23c) returned 1 [0220.251] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1031\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1031\\localizeddata.xml")) returned 0 [0220.251] GetLastError () returned 0x20 [0220.251] GetLastError () returned 0x20 [0220.252] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x212f98) returned 1 [0220.252] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238320 | out: pbBuffer=0x238320) returned 1 [0220.253] CryptReleaseContext (hProv=0x212f98, dwFlags=0x0) returned 1 [0220.253] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0220.253] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238438 [0220.253] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238118 [0220.253] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239128 [0220.253] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238438 | out: hHeap=0x1f0000) returned 1 [0220.253] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0220.253] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239128 | out: hHeap=0x1f0000) returned 1 [0220.253] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8008 [0220.253] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0220.253] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x236330 [0220.253] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238320 [0220.254] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2852a8 [0220.254] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c90 [0220.254] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235f20 [0220.254] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238230 [0220.254] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285ae8 [0220.254] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389c0 [0220.254] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0220.254] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210198 [0220.254] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238930 [0220.254] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238438 [0220.255] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210240 [0220.255] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210240 | out: hHeap=0x1f0000) returned 1 [0220.255] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238438 | out: hHeap=0x1f0000) returned 1 [0220.255] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238930 | out: hHeap=0x1f0000) returned 1 [0220.255] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0220.255] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0220.255] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389c0 | out: hHeap=0x1f0000) returned 1 [0220.255] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285ae8 | out: hHeap=0x1f0000) returned 1 [0220.255] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0220.255] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235f20 | out: hHeap=0x1f0000) returned 1 [0220.255] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238c90 [0220.255] GetLastError () returned 0x0 [0220.255] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173df20 | out: lpSystemTimeAsFileTime=0x173df20) [0220.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x2387f0 [0220.550] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238618 [0220.550] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f10 [0220.550] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f10 | out: hHeap=0x1f0000) returned 1 [0220.550] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238618 | out: hHeap=0x1f0000) returned 1 [0220.550] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238550 [0220.550] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c50 [0220.550] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c50 | out: hHeap=0x1f0000) returned 1 [0220.550] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238550 | out: hHeap=0x1f0000) returned 1 [0220.551] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387f0 | out: hHeap=0x1f0000) returned 1 [0220.551] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0220.551] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238e50 [0220.551] GetLastError () returned 0x0 [0220.551] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1031\\LocalizedData.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1031\\localizeddata.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e290, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0220.552] GetFileType (hFile=0x224) returned 0x1 [0220.553] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x292ff8 [0220.553] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e218 | out: lpNewFilePointer=0x0) returned 1 [0220.553] GetLastError () returned 0xb7 [0220.553] CloseHandle (hObject=0x224) returned 1 [0220.554] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238930 | out: hHeap=0x1f0000) returned 1 [0220.554] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238910 | out: hHeap=0x1f0000) returned 1 [0220.554] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2853b0 | out: hHeap=0x1f0000) returned 1 [0220.554] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2852a8 | out: hHeap=0x1f0000) returned 1 [0220.555] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0220.555] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c90 | out: hHeap=0x1f0000) returned 1 [0220.555] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236330 | out: hHeap=0x1f0000) returned 1 [0220.555] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0220.555] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8008 | out: hHeap=0x1f0000) returned 1 [0220.555] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232ba8 | out: hHeap=0x1f0000) returned 1 [0220.555] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0220.556] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0220.556] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x254980 | out: hHeap=0x1f0000) returned 1 [0220.556] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233120 | out: hHeap=0x1f0000) returned 1 [0220.556] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2390b8 | out: hHeap=0x1f0000) returned 1 [0220.556] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388d0 | out: hHeap=0x1f0000) returned 1 [0220.556] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2100a8 | out: hHeap=0x1f0000) returned 1 [0220.556] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0220.556] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238810 | out: hHeap=0x1f0000) returned 1 [0220.556] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210090 | out: hHeap=0x1f0000) returned 1 [0220.557] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0220.557] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238940 | out: hHeap=0x1f0000) returned 1 [0220.557] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2859e0 | out: hHeap=0x1f0000) returned 1 [0220.557] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0220.557] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0220.557] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234aa0 | out: hHeap=0x1f0000) returned 1 [0220.557] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0220.558] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0220.558] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234818 | out: hHeap=0x1f0000) returned 1 [0220.558] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388c0 | out: hHeap=0x1f0000) returned 1 [0220.558] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387e0 | out: hHeap=0x1f0000) returned 1 [0220.558] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28dfd0 | out: hHeap=0x1f0000) returned 1 [0220.558] CloseHandle (hObject=0x230) returned 1 [0220.559] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388b0 | out: hHeap=0x1f0000) returned 1 [0220.559] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238aa0 | out: hHeap=0x1f0000) returned 1 [0220.559] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223ca0 | out: hHeap=0x1f0000) returned 1 [0220.559] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24a5c0 | out: hHeap=0x1f0000) returned 1 [0220.560] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210078 | out: hHeap=0x1f0000) returned 1 [0220.560] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f30 | out: hHeap=0x1f0000) returned 1 [0220.560] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x287fa0 | out: hHeap=0x1f0000) returned 1 [0220.560] CloseHandle (hObject=0x200) returned 1 [0220.561] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a60 | out: hHeap=0x1f0000) returned 1 [0220.561] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a50 | out: hHeap=0x1f0000) returned 1 [0220.561] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261160 | out: hHeap=0x1f0000) returned 1 [0220.561] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c70 | out: hHeap=0x1f0000) returned 1 [0220.561] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0220.562] CloseHandle (hObject=0x1d4) returned 1 [0220.562] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a30 | out: hHeap=0x1f0000) returned 1 [0220.562] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389e0 | out: hHeap=0x1f0000) returned 1 [0220.562] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ff0 | out: hHeap=0x1f0000) returned 1 [0220.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a20 | out: hHeap=0x1f0000) returned 1 [0220.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b90 | out: hHeap=0x1f0000) returned 1 [0220.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b80 | out: hHeap=0x1f0000) returned 1 [0220.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ba0 | out: hHeap=0x1f0000) returned 1 [0220.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2338c8 | out: hHeap=0x1f0000) returned 1 [0220.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25bbb0 | out: hHeap=0x1f0000) returned 1 [0220.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233008 | out: hHeap=0x1f0000) returned 1 [0220.564] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2068c8 | out: hHeap=0x1f0000) returned 1 [0220.564] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210000 | out: hHeap=0x1f0000) returned 1 [0220.564] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffd0 | out: hHeap=0x1f0000) returned 1 [0220.564] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237af0 | out: hHeap=0x1f0000) returned 1 [0220.564] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x252370 | out: hHeap=0x1f0000) returned 1 [0220.564] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232ef0 | out: hHeap=0x1f0000) returned 1 [0220.564] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238cc8 | out: hHeap=0x1f0000) returned 1 [0220.564] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236260 | out: hHeap=0x1f0000) returned 1 [0220.564] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262e48 | out: hHeap=0x1f0000) returned 1 [0220.565] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234788 | out: hHeap=0x1f0000) returned 1 [0220.565] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0220.565] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1031\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1031\\localizeddata.xml")) returned 1 [0220.567] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0220.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2391d0 [0220.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234788 [0220.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2360c0 [0220.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234788 | out: hHeap=0x1f0000) returned 1 [0220.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2361f8 | out: hHeap=0x1f0000) returned 1 [0220.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2391d0 | out: hHeap=0x1f0000) returned 1 [0220.569] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1031\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1031\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0220.569] GetFileType (hFile=0x1d4) returned 0x1 [0220.569] CloseHandle (hObject=0x1d4) returned 1 [0220.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236128 [0220.570] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1031\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1031\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x173eb6c | out: lpFileInformation=0x173eb6c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958)) returned 1 [0220.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236128 | out: hHeap=0x1f0000) returned 1 [0220.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235f20 [0220.571] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1031\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1031\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x173eb7c | out: lpFileInformation=0x173eb7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958)) returned 1 [0220.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235f20 | out: hHeap=0x1f0000) returned 1 [0220.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235aa8 [0220.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235aa8 | out: hHeap=0x1f0000) returned 1 [0220.571] GetLastError () returned 0x0 [0220.571] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x213680) returned 1 [0220.572] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238140 | out: pbBuffer=0x238140) returned 1 [0220.573] CryptReleaseContext (hProv=0x213680, dwFlags=0x0) returned 1 [0220.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0220.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x258298 [0220.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x233468 [0220.573] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=37794198659) returned 1 [0220.573] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0220.573] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=37794236953) returned 1 [0220.574] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0220.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238c20 [0220.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x252370 [0220.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x232ba8 [0220.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x2377b0 [0220.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffd0 [0220.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2066b8 [0220.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210000 [0220.575] GetLastError () returned 0x0 [0220.575] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1031\\SetupResources.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1031\\setupresources.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e230, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0220.576] GetFileType (hFile=0x1d4) returned 0x1 [0220.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b90 [0220.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238aa0 [0220.577] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1031\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1031\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0220.577] GetFileType (hFile=0x200) returned 0x1 [0220.578] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204b90 [0220.578] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204db0 [0220.578] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261440 [0220.578] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a50 [0220.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ba0 [0220.579] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1031\\SetupResources.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1031\\setupresources.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0220.580] GetFileType (hFile=0x230) returned 0x1 [0220.580] GetLastError () returned 0xb7 [0220.580] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1031\\SetupResources.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1031\\setupresources.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0220.581] GetFileType (hFile=0x224) returned 0x1 [0220.581] GetLastError () returned 0xb7 [0220.581] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1031\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1031\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1a4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0220.582] GetFileType (hFile=0x210) returned 0x1 [0220.582] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28dfd0 [0220.582] ReadFile (in: hFile=0x210, lpBuffer=0x28dfd0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e100, lpOverlapped=0x0 | out: lpBuffer=0x28dfd0*, lpNumberOfBytesRead=0x173e100*=0x1000, lpOverlapped=0x0) returned 1 [0220.885] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24a5c0 [0220.886] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x290fe8 [0220.886] GetLastError () returned 0x0 [0220.889] CloseHandle (hObject=0x1d4) returned 1 [0220.891] CloseHandle (hObject=0x200) returned 1 [0220.892] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238900 [0220.892] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238830 [0220.892] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1031\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1031\\setupresources.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0220.894] GetFileType (hFile=0x200) returned 0x1 [0220.895] GetLastError () returned 0xb7 [0220.897] CloseHandle (hObject=0x200) returned 1 [0220.897] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1031\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1031\\setupresources.dll")) returned 0 [0220.897] GetLastError () returned 0x20 [0220.897] GetLastError () returned 0x20 [0220.898] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x212d78) returned 1 [0220.899] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2381b8 | out: pbBuffer=0x2381b8) returned 1 [0220.899] CryptReleaseContext (hProv=0x212d78, dwFlags=0x0) returned 1 [0220.899] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0220.899] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381b8 [0220.899] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238230 [0220.899] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c58 [0220.899] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0220.899] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0220.899] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c58 | out: hHeap=0x1f0000) returned 1 [0220.899] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8a58 [0220.899] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210210 [0220.899] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x235a40 [0220.900] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2381b8 [0220.900] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2858d8 [0220.900] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bf0 [0220.900] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236128 [0220.900] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2382d0 [0220.900] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2856c8 [0220.900] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238810 [0220.900] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0220.900] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101b0 [0220.900] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238920 [0220.900] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0220.900] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0220.900] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0220.900] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0220.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238920 | out: hHeap=0x1f0000) returned 1 [0220.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0220.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0220.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238810 | out: hHeap=0x1f0000) returned 1 [0220.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2856c8 | out: hHeap=0x1f0000) returned 1 [0220.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0220.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236128 | out: hHeap=0x1f0000) returned 1 [0220.901] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239278 [0220.901] GetLastError () returned 0x0 [0220.901] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173df20 | out: lpSystemTimeAsFileTime=0x173df20) [0220.901] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x2389b0 [0220.901] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0220.901] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c70 [0220.902] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c70 | out: hHeap=0x1f0000) returned 1 [0220.902] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0220.902] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0220.902] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bb0 [0220.902] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bb0 | out: hHeap=0x1f0000) returned 1 [0220.902] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0220.902] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389b0 | out: hHeap=0x1f0000) returned 1 [0220.902] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0220.902] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239208 [0220.902] GetLastError () returned 0x0 [0220.903] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1031\\SetupResources.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1031\\setupresources.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e290, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0220.903] GetFileType (hFile=0x200) returned 0x1 [0220.903] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x292ff8 [0220.903] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e218 | out: lpNewFilePointer=0x0) returned 1 [0220.904] GetLastError () returned 0xb7 [0220.904] CloseHandle (hObject=0x200) returned 1 [0220.904] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238920 | out: hHeap=0x1f0000) returned 1 [0220.904] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238910 | out: hHeap=0x1f0000) returned 1 [0220.904] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285cf8 | out: hHeap=0x1f0000) returned 1 [0220.905] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2858d8 | out: hHeap=0x1f0000) returned 1 [0220.905] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0220.905] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bf0 | out: hHeap=0x1f0000) returned 1 [0220.905] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235a40 | out: hHeap=0x1f0000) returned 1 [0220.905] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0220.905] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8a58 | out: hHeap=0x1f0000) returned 1 [0220.905] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232dd8 | out: hHeap=0x1f0000) returned 1 [0220.905] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0220.905] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0220.905] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25ceb8 | out: hHeap=0x1f0000) returned 1 [0220.905] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233350 | out: hHeap=0x1f0000) returned 1 [0220.905] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c20 | out: hHeap=0x1f0000) returned 1 [0220.905] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238980 | out: hHeap=0x1f0000) returned 1 [0220.905] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2100a8 | out: hHeap=0x1f0000) returned 1 [0220.905] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238438 | out: hHeap=0x1f0000) returned 1 [0220.905] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238800 | out: hHeap=0x1f0000) returned 1 [0220.905] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffb8 | out: hHeap=0x1f0000) returned 1 [0220.906] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0220.906] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238880 | out: hHeap=0x1f0000) returned 1 [0220.906] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2853b0 | out: hHeap=0x1f0000) returned 1 [0220.906] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0220.906] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236330 | out: hHeap=0x1f0000) returned 1 [0220.906] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234788 | out: hHeap=0x1f0000) returned 1 [0220.906] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0220.906] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0220.906] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234860 | out: hHeap=0x1f0000) returned 1 [0220.906] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238830 | out: hHeap=0x1f0000) returned 1 [0220.906] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238900 | out: hHeap=0x1f0000) returned 1 [0220.906] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28dfd0 | out: hHeap=0x1f0000) returned 1 [0220.906] CloseHandle (hObject=0x210) returned 1 [0220.907] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238970 | out: hHeap=0x1f0000) returned 1 [0220.907] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a60 | out: hHeap=0x1f0000) returned 1 [0220.907] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224360 | out: hHeap=0x1f0000) returned 1 [0220.907] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24a5c0 | out: hHeap=0x1f0000) returned 1 [0220.907] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210018 | out: hHeap=0x1f0000) returned 1 [0220.907] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c50 | out: hHeap=0x1f0000) returned 1 [0220.907] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x290fe8 | out: hHeap=0x1f0000) returned 1 [0220.907] CloseHandle (hObject=0x224) returned 1 [0220.908] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389e0 | out: hHeap=0x1f0000) returned 1 [0220.908] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a30 | out: hHeap=0x1f0000) returned 1 [0220.908] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2614f8 | out: hHeap=0x1f0000) returned 1 [0220.908] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e70 | out: hHeap=0x1f0000) returned 1 [0220.908] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0220.908] CloseHandle (hObject=0x230) returned 1 [0220.908] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ba0 | out: hHeap=0x1f0000) returned 1 [0220.908] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a50 | out: hHeap=0x1f0000) returned 1 [0220.908] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261440 | out: hHeap=0x1f0000) returned 1 [0220.908] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238aa0 | out: hHeap=0x1f0000) returned 1 [0220.908] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b90 | out: hHeap=0x1f0000) returned 1 [0220.909] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a20 | out: hHeap=0x1f0000) returned 1 [0220.909] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b80 | out: hHeap=0x1f0000) returned 1 [0220.909] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232ef0 | out: hHeap=0x1f0000) returned 1 [0220.909] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x252370 | out: hHeap=0x1f0000) returned 1 [0220.909] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232ba8 | out: hHeap=0x1f0000) returned 1 [0220.909] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2066b8 | out: hHeap=0x1f0000) returned 1 [0220.909] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210000 | out: hHeap=0x1f0000) returned 1 [0220.909] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffd0 | out: hHeap=0x1f0000) returned 1 [0220.909] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2377b0 | out: hHeap=0x1f0000) returned 1 [0220.909] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x258298 | out: hHeap=0x1f0000) returned 1 [0220.909] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233468 | out: hHeap=0x1f0000) returned 1 [0220.909] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238e50 | out: hHeap=0x1f0000) returned 1 [0220.909] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235eb8 | out: hHeap=0x1f0000) returned 1 [0220.909] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262e48 | out: hHeap=0x1f0000) returned 1 [0220.909] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234500 | out: hHeap=0x1f0000) returned 1 [0220.909] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0220.910] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1031\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1031\\setupresources.dll")) returned 1 [0220.911] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0220.911] FindClose (in: hFindFile=0x24eb80 | out: hFindFile=0x24eb80) returned 1 [0220.912] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2360c0 | out: hHeap=0x1f0000) returned 1 [0220.912] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2627e8 | out: hHeap=0x1f0000) returned 1 [0220.912] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0220.912] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2348f0 | out: hHeap=0x1f0000) returned 1 [0220.912] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234aa0 [0220.913] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0220.913] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2627e8 [0220.913] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234860 [0220.913] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1032\\*", lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e900 [0220.913] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234ae8 [0220.913] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234860 | out: hHeap=0x1f0000) returned 1 [0220.913] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0220.914] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.914] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234788 [0220.914] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234ae8 | out: hHeap=0x1f0000) returned 1 [0220.914] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0220.914] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0220.914] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x22ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0220.914] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0220.914] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234ae8 [0220.914] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x2358a0 [0220.914] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234ae8 | out: hHeap=0x1f0000) returned 1 [0220.915] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234788 | out: hHeap=0x1f0000) returned 1 [0220.915] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0220.915] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1032\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1032\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0220.916] GetFileType (hFile=0x230) returned 0x1 [0220.916] CloseHandle (hObject=0x230) returned 1 [0220.916] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8480 [0220.917] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1032\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1032\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x173eb6c | out: lpFileInformation=0x173eb6c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x22ac)) returned 1 [0220.917] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8480 | out: hHeap=0x1f0000) returned 1 [0220.917] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8008 [0220.917] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1032\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1032\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x173eb7c | out: lpFileInformation=0x173eb7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x22ac)) returned 1 [0220.917] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8008 | out: hHeap=0x1f0000) returned 1 [0220.917] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8690 [0220.917] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8690 | out: hHeap=0x1f0000) returned 1 [0220.917] GetLastError () returned 0x0 [0220.918] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x212d78) returned 1 [0220.919] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238140 | out: pbBuffer=0x238140) returned 1 [0220.919] CryptReleaseContext (hProv=0x212d78, dwFlags=0x0) returned 1 [0220.919] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0220.919] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x258298 [0220.919] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x232ba8 [0220.919] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=37828804232) returned 1 [0220.919] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0220.919] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=37828835219) returned 1 [0220.920] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0220.920] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239128 [0220.920] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x25a8a8 [0220.920] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x232dd8 [0220.920] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x2376e0 [0220.920] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffd0 [0220.920] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206658 [0220.920] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffb8 [0220.920] GetLastError () returned 0x0 [0220.921] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1032\\eula.rtf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1032\\eula.rtf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e230, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0221.040] GetFileType (hFile=0x174) returned 0x1 [0221.041] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389e0 [0221.041] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a20 [0221.085] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1032\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1032\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0221.085] GetFileType (hFile=0x1c0) returned 0x1 [0221.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c30 [0221.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f10 [0221.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x260ff0 [0221.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a40 [0221.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a30 [0221.087] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1032\\eula.rtf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1032\\eula.rtf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0221.088] GetFileType (hFile=0x22c) returned 0x1 [0221.088] GetLastError () returned 0xb7 [0221.088] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1032\\eula.rtf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1032\\eula.rtf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0221.089] GetFileType (hFile=0x21c) returned 0x1 [0221.089] GetLastError () returned 0xb7 [0221.089] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1032\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1032\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1a4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0221.090] GetFileType (hFile=0x1f4) returned 0x1 [0221.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28afb8 [0221.091] ReadFile (in: hFile=0x1f4, lpBuffer=0x28afb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e100, lpOverlapped=0x0 | out: lpBuffer=0x28afb8*, lpNumberOfBytesRead=0x173e100*=0x1000, lpOverlapped=0x0) returned 1 [0221.132] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24a9c8 [0221.132] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x291ff0 [0221.132] GetLastError () returned 0x0 [0221.135] CloseHandle (hObject=0x174) returned 1 [0221.136] CloseHandle (hObject=0x1c0) returned 1 [0221.137] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b60 [0221.137] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ae0 [0221.138] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1032\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1032\\eula.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0221.139] GetFileType (hFile=0x1c0) returned 0x1 [0221.140] GetLastError () returned 0xb7 [0221.141] CloseHandle (hObject=0x1c0) returned 1 [0221.142] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1032\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1032\\eula.rtf")) returned 0 [0221.142] GetLastError () returned 0x20 [0221.142] GetLastError () returned 0x20 [0221.142] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x213680) returned 1 [0221.143] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238168 | out: pbBuffer=0x238168) returned 1 [0221.143] CryptReleaseContext (hProv=0x213680, dwFlags=0x0) returned 1 [0221.143] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0221.143] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238168 [0221.143] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2382d0 [0221.143] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c90 [0221.144] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0221.144] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0221.144] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c90 | out: hHeap=0x1f0000) returned 1 [0221.144] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a81c0 [0221.144] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210078 [0221.144] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x236330 [0221.144] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238168 [0221.144] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285e00 [0221.144] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204b90 [0221.144] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235d80 [0221.144] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2381b8 [0221.144] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x284f90 [0221.144] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389f0 [0221.144] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0221.144] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210018 [0221.144] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a00 [0221.144] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0221.145] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0221.145] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0221.145] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0221.145] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a00 | out: hHeap=0x1f0000) returned 1 [0221.145] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210018 | out: hHeap=0x1f0000) returned 1 [0221.145] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0221.145] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389f0 | out: hHeap=0x1f0000) returned 1 [0221.145] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x284f90 | out: hHeap=0x1f0000) returned 1 [0221.145] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0221.145] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235d80 | out: hHeap=0x1f0000) returned 1 [0221.145] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238c20 [0221.145] GetLastError () returned 0x0 [0221.145] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173df20 | out: lpSystemTimeAsFileTime=0x173df20) [0221.146] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x2389f0 [0221.146] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0221.146] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0221.146] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d70 | out: hHeap=0x1f0000) returned 1 [0221.146] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0221.146] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0221.146] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0221.147] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d70 | out: hHeap=0x1f0000) returned 1 [0221.147] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0221.147] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389f0 | out: hHeap=0x1f0000) returned 1 [0221.147] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0221.147] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238f68 [0221.147] GetLastError () returned 0x0 [0221.147] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1032\\eula.rtf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1032\\eula.rtf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e290, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0221.147] GetFileType (hFile=0x1c0) returned 0x1 [0221.148] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x294000 [0221.148] SetFilePointerEx (in: hFile=0x1c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e218 | out: lpNewFilePointer=0x0) returned 1 [0221.148] GetLastError () returned 0xb7 [0221.148] CloseHandle (hObject=0x1c0) returned 1 [0221.148] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a00 | out: hHeap=0x1f0000) returned 1 [0221.149] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389f0 | out: hHeap=0x1f0000) returned 1 [0221.149] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2854b8 | out: hHeap=0x1f0000) returned 1 [0221.149] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285e00 | out: hHeap=0x1f0000) returned 1 [0221.149] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0221.149] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204b90 | out: hHeap=0x1f0000) returned 1 [0221.149] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236330 | out: hHeap=0x1f0000) returned 1 [0221.149] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210078 | out: hHeap=0x1f0000) returned 1 [0221.149] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a81c0 | out: hHeap=0x1f0000) returned 1 [0221.149] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2337b0 | out: hHeap=0x1f0000) returned 1 [0221.149] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0221.149] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0221.149] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24fd60 | out: hHeap=0x1f0000) returned 1 [0221.149] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232cc0 | out: hHeap=0x1f0000) returned 1 [0221.150] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238f30 | out: hHeap=0x1f0000) returned 1 [0221.150] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b90 | out: hHeap=0x1f0000) returned 1 [0221.150] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff28 | out: hHeap=0x1f0000) returned 1 [0221.150] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0221.150] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b00 | out: hHeap=0x1f0000) returned 1 [0221.150] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2100a8 | out: hHeap=0x1f0000) returned 1 [0221.150] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0221.150] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238af0 | out: hHeap=0x1f0000) returned 1 [0221.150] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2851a0 | out: hHeap=0x1f0000) returned 1 [0221.150] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0221.150] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235f88 | out: hHeap=0x1f0000) returned 1 [0221.150] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234500 | out: hHeap=0x1f0000) returned 1 [0221.150] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0221.150] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0221.150] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233df8 | out: hHeap=0x1f0000) returned 1 [0221.150] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ae0 | out: hHeap=0x1f0000) returned 1 [0221.151] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b60 | out: hHeap=0x1f0000) returned 1 [0221.151] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28afb8 | out: hHeap=0x1f0000) returned 1 [0221.151] CloseHandle (hObject=0x1f4) returned 1 [0221.151] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ac0 | out: hHeap=0x1f0000) returned 1 [0221.151] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a80 | out: hHeap=0x1f0000) returned 1 [0221.151] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224120 | out: hHeap=0x1f0000) returned 1 [0221.151] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24a9c8 | out: hHeap=0x1f0000) returned 1 [0221.151] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20fef8 | out: hHeap=0x1f0000) returned 1 [0221.151] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204dd0 | out: hHeap=0x1f0000) returned 1 [0221.151] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x291ff0 | out: hHeap=0x1f0000) returned 1 [0221.152] CloseHandle (hObject=0x21c) returned 1 [0221.152] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a60 | out: hHeap=0x1f0000) returned 1 [0221.152] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ab0 | out: hHeap=0x1f0000) returned 1 [0221.152] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261218 | out: hHeap=0x1f0000) returned 1 [0221.152] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d30 | out: hHeap=0x1f0000) returned 1 [0221.152] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0221.152] CloseHandle (hObject=0x22c) returned 1 [0221.153] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a30 | out: hHeap=0x1f0000) returned 1 [0221.153] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a40 | out: hHeap=0x1f0000) returned 1 [0221.153] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ff0 | out: hHeap=0x1f0000) returned 1 [0221.153] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a20 | out: hHeap=0x1f0000) returned 1 [0221.153] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389e0 | out: hHeap=0x1f0000) returned 1 [0221.153] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b80 | out: hHeap=0x1f0000) returned 1 [0221.153] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a50 | out: hHeap=0x1f0000) returned 1 [0221.153] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0221.153] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25a8a8 | out: hHeap=0x1f0000) returned 1 [0221.153] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232dd8 | out: hHeap=0x1f0000) returned 1 [0221.153] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206658 | out: hHeap=0x1f0000) returned 1 [0221.153] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffb8 | out: hHeap=0x1f0000) returned 1 [0221.153] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffd0 | out: hHeap=0x1f0000) returned 1 [0221.153] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2376e0 | out: hHeap=0x1f0000) returned 1 [0221.153] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x258298 | out: hHeap=0x1f0000) returned 1 [0221.154] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232ba8 | out: hHeap=0x1f0000) returned 1 [0221.154] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238d38 | out: hHeap=0x1f0000) returned 1 [0221.154] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8008 | out: hHeap=0x1f0000) returned 1 [0221.154] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262e48 | out: hHeap=0x1f0000) returned 1 [0221.154] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234ae8 | out: hHeap=0x1f0000) returned 1 [0221.154] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238438 | out: hHeap=0x1f0000) returned 1 [0221.154] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1032\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1032\\eula.rtf")) returned 1 [0221.156] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1510c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0221.156] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239010 [0221.156] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234788 [0221.156] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235838 [0221.156] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234788 | out: hHeap=0x1f0000) returned 1 [0221.156] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2358a0 | out: hHeap=0x1f0000) returned 1 [0221.156] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239010 | out: hHeap=0x1f0000) returned 1 [0221.157] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1032\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1032\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0221.157] GetFileType (hFile=0x22c) returned 0x1 [0221.157] CloseHandle (hObject=0x22c) returned 1 [0221.157] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236330 [0221.157] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1032\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1032\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x173eb6c | out: lpFileInformation=0x173eb6c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1510c)) returned 1 [0221.158] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236330 | out: hHeap=0x1f0000) returned 1 [0221.158] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236128 [0221.158] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1032\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1032\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x173eb7c | out: lpFileInformation=0x173eb7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1510c)) returned 1 [0221.158] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236128 | out: hHeap=0x1f0000) returned 1 [0221.158] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2360c0 [0221.158] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2360c0 | out: hHeap=0x1f0000) returned 1 [0221.158] GetLastError () returned 0x0 [0221.158] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x2130a8) returned 1 [0221.159] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238398 | out: pbBuffer=0x238398) returned 1 [0221.159] CryptReleaseContext (hProv=0x2130a8, dwFlags=0x0) returned 1 [0221.159] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0221.159] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x258298 [0221.160] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x232ba8 [0221.160] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=37852855531) returned 1 [0221.160] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0221.160] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=37852884268) returned 1 [0221.160] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0221.160] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239080 [0221.160] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x254980 [0221.160] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2339e0 [0221.160] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x237af0 [0221.161] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210018 [0221.161] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2067d8 [0221.161] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffb8 [0221.161] GetLastError () returned 0x0 [0221.161] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1032\\LocalizedData.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1032\\localizeddata.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e230, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0221.161] GetFileType (hFile=0x22c) returned 0x1 [0221.459] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a20 [0221.460] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389e0 [0221.461] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1032\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1032\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0221.461] GetFileType (hFile=0x1b0) returned 0x1 [0221.462] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ff0 [0221.462] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205170 [0221.462] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261388 [0221.462] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a50 [0221.462] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b30 [0221.463] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1032\\LocalizedData.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1032\\localizeddata.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0221.464] GetFileType (hFile=0x21c) returned 0x1 [0221.464] GetLastError () returned 0xb7 [0221.464] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1032\\LocalizedData.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1032\\localizeddata.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0221.465] GetFileType (hFile=0x1f4) returned 0x1 [0221.465] GetLastError () returned 0xb7 [0221.466] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1032\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1032\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1a4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0221.466] GetFileType (hFile=0x1c0) returned 0x1 [0221.467] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28afb8 [0221.467] ReadFile (in: hFile=0x1c0, lpBuffer=0x28afb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e100, lpOverlapped=0x0 | out: lpBuffer=0x28afb8*, lpNumberOfBytesRead=0x173e100*=0x1000, lpOverlapped=0x0) returned 1 [0221.470] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24d218 [0221.471] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28dfd0 [0221.471] GetLastError () returned 0x0 [0221.476] CloseHandle (hObject=0x22c) returned 1 [0221.480] CloseHandle (hObject=0x1b0) returned 1 [0221.481] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b40 [0221.482] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ba0 [0221.483] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1032\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1032\\localizeddata.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0221.485] GetFileType (hFile=0x1b0) returned 0x1 [0221.485] GetLastError () returned 0xb7 [0221.487] CloseHandle (hObject=0x1b0) returned 1 [0221.487] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1032\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1032\\localizeddata.xml")) returned 0 [0221.487] GetLastError () returned 0x20 [0221.487] GetLastError () returned 0x20 [0221.488] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x213680) returned 1 [0221.488] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238208 | out: pbBuffer=0x238208) returned 1 [0221.489] CryptReleaseContext (hProv=0x213680, dwFlags=0x0) returned 1 [0221.489] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0221.489] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238208 [0221.489] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238320 [0221.489] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238d00 [0221.489] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0221.489] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0221.489] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238d00 | out: hHeap=0x1f0000) returned 1 [0221.489] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a87f0 [0221.489] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2100a8 [0221.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x235de8 [0221.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238410 [0221.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285bf0 [0221.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x2051f0 [0221.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235eb8 [0221.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238208 [0221.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2856c8 [0221.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238aa0 [0221.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238488 [0221.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210078 [0221.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ae0 [0221.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0221.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210210 [0221.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0221.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0221.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ae0 | out: hHeap=0x1f0000) returned 1 [0221.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210078 | out: hHeap=0x1f0000) returned 1 [0221.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238488 | out: hHeap=0x1f0000) returned 1 [0221.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238aa0 | out: hHeap=0x1f0000) returned 1 [0221.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2856c8 | out: hHeap=0x1f0000) returned 1 [0221.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0221.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235eb8 | out: hHeap=0x1f0000) returned 1 [0221.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238da8 [0221.492] GetLastError () returned 0x0 [0221.492] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173df20 | out: lpSystemTimeAsFileTime=0x173df20) [0221.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238ae0 [0221.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0221.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205170 [0221.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205170 | out: hHeap=0x1f0000) returned 1 [0221.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0221.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0221.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204fb0 [0221.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204fb0 | out: hHeap=0x1f0000) returned 1 [0221.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0221.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ae0 | out: hHeap=0x1f0000) returned 1 [0221.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0221.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238ec0 [0221.492] GetLastError () returned 0x0 [0221.493] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1032\\LocalizedData.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1032\\localizeddata.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e290, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0221.493] GetFileType (hFile=0x1b0) returned 0x1 [0221.494] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28efd8 [0221.494] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e218 | out: lpNewFilePointer=0x0) returned 1 [0221.494] GetLastError () returned 0xb7 [0221.494] CloseHandle (hObject=0x1b0) returned 1 [0221.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238aa0 | out: hHeap=0x1f0000) returned 1 [0221.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b10 | out: hHeap=0x1f0000) returned 1 [0221.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285cf8 | out: hHeap=0x1f0000) returned 1 [0221.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285bf0 | out: hHeap=0x1f0000) returned 1 [0221.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0221.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2051f0 | out: hHeap=0x1f0000) returned 1 [0221.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235de8 | out: hHeap=0x1f0000) returned 1 [0221.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2100a8 | out: hHeap=0x1f0000) returned 1 [0221.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a87f0 | out: hHeap=0x1f0000) returned 1 [0221.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2337b0 | out: hHeap=0x1f0000) returned 1 [0221.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0221.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0221.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2595a0 | out: hHeap=0x1f0000) returned 1 [0221.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232dd8 | out: hHeap=0x1f0000) returned 1 [0221.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238e88 | out: hHeap=0x1f0000) returned 1 [0221.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a90 | out: hHeap=0x1f0000) returned 1 [0221.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffd0 | out: hHeap=0x1f0000) returned 1 [0221.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0221.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b80 | out: hHeap=0x1f0000) returned 1 [0221.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff70 | out: hHeap=0x1f0000) returned 1 [0221.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0221.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b70 | out: hHeap=0x1f0000) returned 1 [0221.497] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285ae8 | out: hHeap=0x1f0000) returned 1 [0221.497] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0221.497] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2358a0 | out: hHeap=0x1f0000) returned 1 [0221.497] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234ae8 | out: hHeap=0x1f0000) returned 1 [0221.497] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0221.497] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0221.497] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234590 | out: hHeap=0x1f0000) returned 1 [0221.497] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ba0 | out: hHeap=0x1f0000) returned 1 [0221.497] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b40 | out: hHeap=0x1f0000) returned 1 [0221.498] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28afb8 | out: hHeap=0x1f0000) returned 1 [0221.498] CloseHandle (hObject=0x1c0) returned 1 [0221.498] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a00 | out: hHeap=0x1f0000) returned 1 [0221.498] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b00 | out: hHeap=0x1f0000) returned 1 [0221.498] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2242a0 | out: hHeap=0x1f0000) returned 1 [0221.498] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24d218 | out: hHeap=0x1f0000) returned 1 [0221.498] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffa0 | out: hHeap=0x1f0000) returned 1 [0221.499] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2052d0 | out: hHeap=0x1f0000) returned 1 [0221.499] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28dfd0 | out: hHeap=0x1f0000) returned 1 [0221.499] CloseHandle (hObject=0x1f4) returned 1 [0221.499] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238af0 | out: hHeap=0x1f0000) returned 1 [0221.499] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ad0 | out: hHeap=0x1f0000) returned 1 [0221.500] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261668 | out: hHeap=0x1f0000) returned 1 [0221.500] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205130 | out: hHeap=0x1f0000) returned 1 [0221.500] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0221.500] CloseHandle (hObject=0x21c) returned 1 [0221.500] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b30 | out: hHeap=0x1f0000) returned 1 [0221.500] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a50 | out: hHeap=0x1f0000) returned 1 [0221.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261388 | out: hHeap=0x1f0000) returned 1 [0221.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389e0 | out: hHeap=0x1f0000) returned 1 [0221.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a20 | out: hHeap=0x1f0000) returned 1 [0221.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ab0 | out: hHeap=0x1f0000) returned 1 [0221.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a80 | out: hHeap=0x1f0000) returned 1 [0221.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232cc0 | out: hHeap=0x1f0000) returned 1 [0221.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x254980 | out: hHeap=0x1f0000) returned 1 [0221.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2339e0 | out: hHeap=0x1f0000) returned 1 [0221.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2067d8 | out: hHeap=0x1f0000) returned 1 [0221.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffb8 | out: hHeap=0x1f0000) returned 1 [0221.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210018 | out: hHeap=0x1f0000) returned 1 [0221.502] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237af0 | out: hHeap=0x1f0000) returned 1 [0221.502] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x258298 | out: hHeap=0x1f0000) returned 1 [0221.502] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232ba8 | out: hHeap=0x1f0000) returned 1 [0221.502] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238e18 | out: hHeap=0x1f0000) returned 1 [0221.502] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235d80 | out: hHeap=0x1f0000) returned 1 [0221.502] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262e48 | out: hHeap=0x1f0000) returned 1 [0221.502] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234788 | out: hHeap=0x1f0000) returned 1 [0221.502] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0221.502] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1032\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1032\\localizeddata.xml")) returned 1 [0221.504] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0221.504] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c90 [0221.504] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234500 [0221.504] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236330 [0221.505] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234500 | out: hHeap=0x1f0000) returned 1 [0221.505] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235838 | out: hHeap=0x1f0000) returned 1 [0221.505] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c90 | out: hHeap=0x1f0000) returned 1 [0221.505] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1032\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1032\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0221.756] GetFileType (hFile=0x1b0) returned 0x1 [0221.757] CloseHandle (hObject=0x1b0) returned 1 [0221.757] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236190 [0221.757] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1032\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1032\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x173eb6c | out: lpFileInformation=0x173eb6c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58)) returned 1 [0221.758] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236190 | out: hHeap=0x1f0000) returned 1 [0221.758] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2360c0 [0221.758] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1032\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1032\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x173eb7c | out: lpFileInformation=0x173eb7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58)) returned 1 [0221.758] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2360c0 | out: hHeap=0x1f0000) returned 1 [0221.758] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235a40 [0221.758] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235a40 | out: hHeap=0x1f0000) returned 1 [0221.759] GetLastError () returned 0x0 [0221.759] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x212f10) returned 1 [0221.760] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2382a8 | out: pbBuffer=0x2382a8) returned 1 [0221.760] CryptReleaseContext (hProv=0x212f10, dwFlags=0x0) returned 1 [0221.760] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0221.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x254980 [0221.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x233350 [0221.760] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=37912935526) returned 1 [0221.761] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0221.761] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=37912978719) returned 1 [0221.761] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0221.761] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238c58 [0221.761] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x2595a0 [0221.761] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x233468 [0221.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x237470 [0221.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff70 [0221.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206868 [0221.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2100a8 [0221.762] GetLastError () returned 0x0 [0221.762] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1032\\SetupResources.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1032\\setupresources.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e230, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0221.763] GetFileType (hFile=0x1b0) returned 0x1 [0221.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389e0 [0221.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a50 [0221.765] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1032\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1032\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0221.765] GetFileType (hFile=0x1e8) returned 0x1 [0221.765] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0221.765] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d30 [0221.765] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261388 [0221.765] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b40 [0221.766] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a60 [0221.766] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1032\\SetupResources.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1032\\setupresources.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0221.766] GetFileType (hFile=0x1ac) returned 0x1 [0221.767] GetLastError () returned 0xb7 [0221.767] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1032\\SetupResources.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1032\\setupresources.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0221.767] GetFileType (hFile=0x22c) returned 0x1 [0221.767] GetLastError () returned 0xb7 [0221.768] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1032\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1032\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1a4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0221.768] GetFileType (hFile=0x174) returned 0x1 [0221.768] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28efd8 [0221.768] ReadFile (in: hFile=0x174, lpBuffer=0x28efd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e100, lpOverlapped=0x0 | out: lpBuffer=0x28efd8*, lpNumberOfBytesRead=0x173e100*=0x1000, lpOverlapped=0x0) returned 1 [0221.781] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24ce10 [0221.781] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x287fa0 [0221.782] GetLastError () returned 0x0 [0221.792] CloseHandle (hObject=0x1b0) returned 1 [0221.795] CloseHandle (hObject=0x1e8) returned 1 [0221.796] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a00 [0221.796] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ba0 [0221.797] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1032\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1032\\setupresources.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0221.799] GetFileType (hFile=0x1e8) returned 0x1 [0221.799] GetLastError () returned 0xb7 [0221.801] CloseHandle (hObject=0x1e8) returned 1 [0221.801] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1032\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1032\\setupresources.dll")) returned 0 [0221.802] GetLastError () returned 0x20 [0221.802] GetLastError () returned 0x20 [0221.802] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x212f10) returned 1 [0221.803] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2380a0 | out: pbBuffer=0x2380a0) returned 1 [0221.803] CryptReleaseContext (hProv=0x212f10, dwFlags=0x0) returned 1 [0221.803] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0221.803] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238320 [0221.803] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2380a0 [0221.803] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239048 [0221.803] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0221.803] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0221.803] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239048 | out: hHeap=0x1f0000) returned 1 [0221.803] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a86e8 [0221.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210210 [0221.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x236260 [0221.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238140 [0221.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2857d0 [0221.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204dd0 [0221.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235908 [0221.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2382d0 [0221.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2854b8 [0221.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b10 [0221.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0221.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0221.805] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b20 [0221.805] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238690 [0221.805] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0221.805] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0221.805] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238690 | out: hHeap=0x1f0000) returned 1 [0221.805] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b20 | out: hHeap=0x1f0000) returned 1 [0221.805] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0221.805] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0221.805] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b10 | out: hHeap=0x1f0000) returned 1 [0221.805] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2854b8 | out: hHeap=0x1f0000) returned 1 [0221.805] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0221.805] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235908 | out: hHeap=0x1f0000) returned 1 [0221.805] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239208 [0221.806] GetLastError () returned 0x0 [0221.806] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173df20 | out: lpSystemTimeAsFileTime=0x173df20) [0221.806] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238b20 [0221.806] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0221.806] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0221.806] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d70 | out: hHeap=0x1f0000) returned 1 [0221.806] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0221.806] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0221.806] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d30 [0221.806] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d30 | out: hHeap=0x1f0000) returned 1 [0221.806] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0221.806] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b20 | out: hHeap=0x1f0000) returned 1 [0221.807] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0221.807] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239198 [0221.807] GetLastError () returned 0x0 [0221.807] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1032\\SetupResources.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1032\\setupresources.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e290, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0221.807] GetFileType (hFile=0x1e8) returned 0x1 [0221.807] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x291ff0 [0221.808] SetFilePointerEx (in: hFile=0x1e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e218 | out: lpNewFilePointer=0x0) returned 1 [0221.808] GetLastError () returned 0xb7 [0221.808] CloseHandle (hObject=0x1e8) returned 1 [0221.808] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b20 | out: hHeap=0x1f0000) returned 1 [0221.808] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b10 | out: hHeap=0x1f0000) returned 1 [0221.809] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2852a8 | out: hHeap=0x1f0000) returned 1 [0221.809] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2857d0 | out: hHeap=0x1f0000) returned 1 [0221.809] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0221.809] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204dd0 | out: hHeap=0x1f0000) returned 1 [0221.809] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236260 | out: hHeap=0x1f0000) returned 1 [0221.809] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0221.809] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a86e8 | out: hHeap=0x1f0000) returned 1 [0221.809] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232dd8 | out: hHeap=0x1f0000) returned 1 [0221.809] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0221.809] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0221.809] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x251068 | out: hHeap=0x1f0000) returned 1 [0221.810] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233580 | out: hHeap=0x1f0000) returned 1 [0221.810] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238da8 | out: hHeap=0x1f0000) returned 1 [0221.810] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a30 | out: hHeap=0x1f0000) returned 1 [0221.810] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffd0 | out: hHeap=0x1f0000) returned 1 [0221.810] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0221.810] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238af0 | out: hHeap=0x1f0000) returned 1 [0221.810] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffb8 | out: hHeap=0x1f0000) returned 1 [0221.810] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0221.810] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ab0 | out: hHeap=0x1f0000) returned 1 [0221.810] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2853b0 | out: hHeap=0x1f0000) returned 1 [0221.810] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0221.810] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2358a0 | out: hHeap=0x1f0000) returned 1 [0221.811] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234500 | out: hHeap=0x1f0000) returned 1 [0221.811] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238488 | out: hHeap=0x1f0000) returned 1 [0221.811] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0221.811] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234ae8 | out: hHeap=0x1f0000) returned 1 [0221.811] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ba0 | out: hHeap=0x1f0000) returned 1 [0221.811] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a00 | out: hHeap=0x1f0000) returned 1 [0221.811] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28efd8 | out: hHeap=0x1f0000) returned 1 [0221.811] CloseHandle (hObject=0x174) returned 1 [0221.812] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238aa0 | out: hHeap=0x1f0000) returned 1 [0221.812] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a10 | out: hHeap=0x1f0000) returned 1 [0221.812] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2244e0 | out: hHeap=0x1f0000) returned 1 [0221.812] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24ce10 | out: hHeap=0x1f0000) returned 1 [0221.812] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffa0 | out: hHeap=0x1f0000) returned 1 [0221.812] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cf0 | out: hHeap=0x1f0000) returned 1 [0221.813] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x287fa0 | out: hHeap=0x1f0000) returned 1 [0221.813] CloseHandle (hObject=0x22c) returned 1 [0221.813] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a80 | out: hHeap=0x1f0000) returned 1 [0221.813] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b00 | out: hHeap=0x1f0000) returned 1 [0221.813] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261440 | out: hHeap=0x1f0000) returned 1 [0221.813] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d10 | out: hHeap=0x1f0000) returned 1 [0221.813] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d368 | out: hHeap=0x1f0000) returned 1 [0221.814] CloseHandle (hObject=0x1ac) returned 1 [0221.814] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a60 | out: hHeap=0x1f0000) returned 1 [0221.814] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b40 | out: hHeap=0x1f0000) returned 1 [0221.814] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261388 | out: hHeap=0x1f0000) returned 1 [0221.814] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a50 | out: hHeap=0x1f0000) returned 1 [0221.814] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389e0 | out: hHeap=0x1f0000) returned 1 [0221.814] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b80 | out: hHeap=0x1f0000) returned 1 [0221.814] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a20 | out: hHeap=0x1f0000) returned 1 [0221.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233238 | out: hHeap=0x1f0000) returned 1 [0221.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2595a0 | out: hHeap=0x1f0000) returned 1 [0221.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233468 | out: hHeap=0x1f0000) returned 1 [0221.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206868 | out: hHeap=0x1f0000) returned 1 [0221.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2100a8 | out: hHeap=0x1f0000) returned 1 [0221.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff70 | out: hHeap=0x1f0000) returned 1 [0221.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237470 | out: hHeap=0x1f0000) returned 1 [0221.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x254980 | out: hHeap=0x1f0000) returned 1 [0221.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233350 | out: hHeap=0x1f0000) returned 1 [0221.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c90 | out: hHeap=0x1f0000) returned 1 [0221.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235ff0 | out: hHeap=0x1f0000) returned 1 [0221.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262e48 | out: hHeap=0x1f0000) returned 1 [0221.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234818 | out: hHeap=0x1f0000) returned 1 [0221.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0221.815] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1032\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1032\\setupresources.dll")) returned 1 [0221.817] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0221.817] FindClose (in: hFindFile=0x24e900 | out: hFindFile=0x24e900) returned 1 [0221.818] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236330 | out: hHeap=0x1f0000) returned 1 [0221.818] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2627e8 | out: hHeap=0x1f0000) returned 1 [0221.818] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0221.818] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234aa0 | out: hHeap=0x1f0000) returned 1 [0221.818] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234500 [0221.818] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238488 [0222.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2627e8 [0222.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233df8 [0222.001] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1033\\*", lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24eb80 [0222.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234740 [0222.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233df8 | out: hHeap=0x1f0000) returned 1 [0222.001] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0222.001] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0222.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233df8 [0222.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234740 | out: hHeap=0x1f0000) returned 1 [0222.001] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0222.002] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0222.002] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd723cc00, ftCreationTime.dwHighDateTime=0x1cabb47, ftLastAccessTime.dwLowDateTime=0xd723cc00, ftLastAccessTime.dwHighDateTime=0x1cabb47, ftLastWriteTime.dwLowDateTime=0xd723cc00, ftLastWriteTime.dwHighDateTime=0x1cabb47, nFileSizeHigh=0x0, nFileSizeLow=0xc74, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0222.002] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0222.002] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234818 [0222.002] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x235ff0 [0222.002] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234818 | out: hHeap=0x1f0000) returned 1 [0222.002] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233df8 | out: hHeap=0x1f0000) returned 1 [0222.002] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0222.003] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1033\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1033\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0222.003] GetFileType (hFile=0x1f4) returned 0x1 [0222.003] CloseHandle (hObject=0x1f4) returned 1 [0222.003] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8690 [0222.003] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1033\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1033\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x173eb6c | out: lpFileInformation=0x173eb6c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd723cc00, ftCreationTime.dwHighDateTime=0x1cabb47, ftLastAccessTime.dwLowDateTime=0xd723cc00, ftLastAccessTime.dwHighDateTime=0x1cabb47, ftLastWriteTime.dwLowDateTime=0xd723cc00, ftLastWriteTime.dwHighDateTime=0x1cabb47, nFileSizeHigh=0x0, nFileSizeLow=0xc74)) returned 1 [0222.003] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8690 | out: hHeap=0x1f0000) returned 1 [0222.004] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a88a0 [0222.004] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1033\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1033\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x173eb7c | out: lpFileInformation=0x173eb7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd723cc00, ftCreationTime.dwHighDateTime=0x1cabb47, ftLastAccessTime.dwLowDateTime=0xd723cc00, ftLastAccessTime.dwHighDateTime=0x1cabb47, ftLastWriteTime.dwLowDateTime=0xd723cc00, ftLastWriteTime.dwHighDateTime=0x1cabb47, nFileSizeHigh=0x0, nFileSizeLow=0xc74)) returned 1 [0222.004] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a88a0 | out: hHeap=0x1f0000) returned 1 [0222.004] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8740 [0222.004] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8740 | out: hHeap=0x1f0000) returned 1 [0222.004] GetLastError () returned 0x0 [0222.004] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x2119d0) returned 1 [0222.005] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238320 | out: pbBuffer=0x238320) returned 1 [0222.005] CryptReleaseContext (hProv=0x2119d0, dwFlags=0x0) returned 1 [0222.005] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0222.005] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x252370 [0222.005] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2373b0 [0222.005] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=37937408794) returned 1 [0222.005] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0222.005] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=37937423420) returned 1 [0222.005] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0222.006] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238d00 [0222.006] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x258298 [0222.006] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x236d20 [0222.006] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x232e18 [0222.006] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff28 [0222.006] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206808 [0222.006] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffd0 [0222.006] GetLastError () returned 0x0 [0222.006] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1033\\eula.rtf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1033\\eula.rtf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e230, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0222.010] GetFileType (hFile=0x1f4) returned 0x1 [0222.010] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ba0 [0222.010] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238aa0 [0222.011] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1033\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1033\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0222.011] GetFileType (hFile=0x1c0) returned 0x1 [0222.011] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c30 [0222.011] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ef0 [0222.011] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261218 [0222.011] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a50 [0222.011] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ab0 [0222.011] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1033\\eula.rtf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1033\\eula.rtf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1a4 [0222.012] GetFileType (hFile=0x1a4) returned 0x1 [0222.012] GetLastError () returned 0xb7 [0222.012] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1033\\eula.rtf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1033\\eula.rtf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0222.012] GetFileType (hFile=0x1ac) returned 0x1 [0222.012] GetLastError () returned 0xb7 [0222.012] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1033\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1033\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1a4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0222.012] GetFileType (hFile=0x22c) returned 0x1 [0222.013] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28dfd0 [0222.013] ReadFile (in: hFile=0x22c, lpBuffer=0x28dfd0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e100, lpOverlapped=0x0 | out: lpBuffer=0x28dfd0*, lpNumberOfBytesRead=0x173e100*=0xc74, lpOverlapped=0x0) returned 1 [0222.015] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24b5e0 [0222.015] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28efd8 [0222.015] GetLastError () returned 0x0 [0222.016] CloseHandle (hObject=0x1f4) returned 1 [0222.017] CloseHandle (hObject=0x1c0) returned 1 [0222.017] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b70 [0222.018] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a10 [0222.018] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1033\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1033\\eula.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0222.020] GetFileType (hFile=0x1c0) returned 0x1 [0222.020] GetLastError () returned 0xb7 [0222.022] CloseHandle (hObject=0x1c0) returned 1 [0222.022] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1033\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1033\\eula.rtf")) returned 0 [0222.022] GetLastError () returned 0x20 [0222.022] GetLastError () returned 0x20 [0222.023] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x212250) returned 1 [0222.023] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238118 | out: pbBuffer=0x238118) returned 1 [0222.023] CryptReleaseContext (hProv=0x212250, dwFlags=0x0) returned 1 [0222.023] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0222.023] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238118 [0222.024] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238230 [0222.024] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238d00 [0222.024] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0222.024] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0222.024] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238d00 | out: hHeap=0x1f0000) returned 1 [0222.024] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8480 [0222.024] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffa0 [0222.024] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x235768 [0222.024] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238118 [0222.024] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2851a0 [0222.024] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c50 [0222.024] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235b78 [0222.024] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238140 [0222.024] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285cf8 [0222.025] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a60 [0222.025] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0222.025] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffb8 [0222.025] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b90 [0222.025] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0222.025] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210210 [0222.025] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0222.025] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0222.025] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b90 | out: hHeap=0x1f0000) returned 1 [0222.025] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffb8 | out: hHeap=0x1f0000) returned 1 [0222.025] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0222.025] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a60 | out: hHeap=0x1f0000) returned 1 [0222.025] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285cf8 | out: hHeap=0x1f0000) returned 1 [0222.025] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0222.025] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0222.025] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238c20 [0222.025] GetLastError () returned 0x0 [0222.026] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173df20 | out: lpSystemTimeAsFileTime=0x173df20) [0222.026] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238a60 [0222.026] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0222.026] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f10 [0222.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f10 | out: hHeap=0x1f0000) returned 1 [0222.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0222.026] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0222.026] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c70 [0222.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c70 | out: hHeap=0x1f0000) returned 1 [0222.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0222.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a60 | out: hHeap=0x1f0000) returned 1 [0222.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0222.026] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238c90 [0222.026] GetLastError () returned 0x0 [0222.027] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1033\\eula.rtf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1033\\eula.rtf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e290, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0222.027] GetFileType (hFile=0x1c0) returned 0x1 [0222.027] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x287fa0 [0222.027] SetFilePointerEx (in: hFile=0x1c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e218 | out: lpNewFilePointer=0x0) returned 1 [0222.028] GetLastError () returned 0xb7 [0222.028] CloseHandle (hObject=0x1c0) returned 1 [0222.028] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ac0 | out: hHeap=0x1f0000) returned 1 [0222.028] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b60 | out: hHeap=0x1f0000) returned 1 [0222.029] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2854b8 | out: hHeap=0x1f0000) returned 1 [0222.029] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2851a0 | out: hHeap=0x1f0000) returned 1 [0222.029] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0222.029] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c50 | out: hHeap=0x1f0000) returned 1 [0222.029] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235768 | out: hHeap=0x1f0000) returned 1 [0222.029] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffa0 | out: hHeap=0x1f0000) returned 1 [0222.029] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8480 | out: hHeap=0x1f0000) returned 1 [0222.029] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237180 | out: hHeap=0x1f0000) returned 1 [0222.029] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0222.029] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0222.030] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24fd60 | out: hHeap=0x1f0000) returned 1 [0222.030] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236e38 | out: hHeap=0x1f0000) returned 1 [0222.030] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238fd8 | out: hHeap=0x1f0000) returned 1 [0222.030] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b40 | out: hHeap=0x1f0000) returned 1 [0222.030] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210078 | out: hHeap=0x1f0000) returned 1 [0222.030] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0222.030] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389f0 | out: hHeap=0x1f0000) returned 1 [0222.030] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210018 | out: hHeap=0x1f0000) returned 1 [0222.030] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0222.030] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a80 | out: hHeap=0x1f0000) returned 1 [0222.030] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285098 | out: hHeap=0x1f0000) returned 1 [0222.030] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0222.030] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235de8 | out: hHeap=0x1f0000) returned 1 [0222.030] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234590 | out: hHeap=0x1f0000) returned 1 [0222.031] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0222.031] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0222.031] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234818 | out: hHeap=0x1f0000) returned 1 [0222.031] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a10 | out: hHeap=0x1f0000) returned 1 [0222.031] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b70 | out: hHeap=0x1f0000) returned 1 [0222.031] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28dfd0 | out: hHeap=0x1f0000) returned 1 [0222.031] CloseHandle (hObject=0x22c) returned 1 [0222.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a00 | out: hHeap=0x1f0000) returned 1 [0222.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b80 | out: hHeap=0x1f0000) returned 1 [0222.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223d60 | out: hHeap=0x1f0000) returned 1 [0222.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24b5e0 | out: hHeap=0x1f0000) returned 1 [0222.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2100a8 | out: hHeap=0x1f0000) returned 1 [0222.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e70 | out: hHeap=0x1f0000) returned 1 [0222.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28efd8 | out: hHeap=0x1f0000) returned 1 [0222.032] CloseHandle (hObject=0x1ac) returned 1 [0222.033] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a70 | out: hHeap=0x1f0000) returned 1 [0222.033] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b50 | out: hHeap=0x1f0000) returned 1 [0222.033] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261668 | out: hHeap=0x1f0000) returned 1 [0222.033] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bb0 | out: hHeap=0x1f0000) returned 1 [0222.033] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0222.033] CloseHandle (hObject=0x1a4) returned 1 [0222.034] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ab0 | out: hHeap=0x1f0000) returned 1 [0222.034] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a50 | out: hHeap=0x1f0000) returned 1 [0222.034] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261218 | out: hHeap=0x1f0000) returned 1 [0222.034] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238aa0 | out: hHeap=0x1f0000) returned 1 [0222.034] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ba0 | out: hHeap=0x1f0000) returned 1 [0222.034] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a90 | out: hHeap=0x1f0000) returned 1 [0222.034] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a40 | out: hHeap=0x1f0000) returned 1 [0222.034] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d368 | out: hHeap=0x1f0000) returned 1 [0222.034] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x258298 | out: hHeap=0x1f0000) returned 1 [0222.034] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236d20 | out: hHeap=0x1f0000) returned 1 [0222.035] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206808 | out: hHeap=0x1f0000) returned 1 [0222.035] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffd0 | out: hHeap=0x1f0000) returned 1 [0222.035] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff28 | out: hHeap=0x1f0000) returned 1 [0222.035] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232e18 | out: hHeap=0x1f0000) returned 1 [0222.035] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x252370 | out: hHeap=0x1f0000) returned 1 [0222.035] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2373b0 | out: hHeap=0x1f0000) returned 1 [0222.035] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239198 | out: hHeap=0x1f0000) returned 1 [0222.035] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8008 | out: hHeap=0x1f0000) returned 1 [0222.035] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262e48 | out: hHeap=0x1f0000) returned 1 [0222.035] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233df8 | out: hHeap=0x1f0000) returned 1 [0222.035] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0222.035] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1033\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1033\\eula.rtf")) returned 1 [0222.036] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x47ad1a00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x47ad1a00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x47ad1a00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12db0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0222.036] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238fd8 [0222.037] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233df8 [0222.037] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236190 [0222.037] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233df8 | out: hHeap=0x1f0000) returned 1 [0222.365] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235ff0 | out: hHeap=0x1f0000) returned 1 [0222.365] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238fd8 | out: hHeap=0x1f0000) returned 1 [0222.366] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1033\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1033\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0222.366] GetFileType (hFile=0x210) returned 0x1 [0222.366] CloseHandle (hObject=0x210) returned 1 [0222.367] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235ff0 [0222.367] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1033\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1033\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x173eb6c | out: lpFileInformation=0x173eb6c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x47ad1a00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x47ad1a00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x47ad1a00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12db0)) returned 1 [0222.367] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235ff0 | out: hHeap=0x1f0000) returned 1 [0222.367] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235768 [0222.367] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1033\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1033\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x173eb7c | out: lpFileInformation=0x173eb7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x47ad1a00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x47ad1a00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x47ad1a00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12db0)) returned 1 [0222.367] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235768 | out: hHeap=0x1f0000) returned 1 [0222.367] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235768 [0222.367] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235768 | out: hHeap=0x1f0000) returned 1 [0222.367] GetLastError () returned 0x0 [0222.368] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x211fa8) returned 1 [0222.368] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2382a8 | out: pbBuffer=0x2382a8) returned 1 [0222.369] CryptReleaseContext (hProv=0x211fa8, dwFlags=0x0) returned 1 [0222.369] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0222.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x24fd60 [0222.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x237180 [0222.369] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=37973787269) returned 1 [0222.369] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0222.369] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=37973818169) returned 1 [0222.369] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0222.370] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238c58 [0222.370] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x2595a0 [0222.370] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2374c8 [0222.370] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x232ee8 [0222.370] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff28 [0222.370] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206688 [0222.370] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffb8 [0222.370] GetLastError () returned 0x0 [0222.370] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1033\\LocalizedData.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1033\\localizeddata.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e230, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0222.371] GetFileType (hFile=0x210) returned 0x1 [0222.371] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b80 [0222.372] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ab0 [0222.372] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1033\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1033\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0222.373] GetFileType (hFile=0x200) returned 0x1 [0222.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0222.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204df0 [0222.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x260ff0 [0222.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a60 [0222.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a00 [0222.374] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1033\\LocalizedData.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1033\\localizeddata.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0222.374] GetFileType (hFile=0x1d4) returned 0x1 [0222.375] GetLastError () returned 0xb7 [0222.375] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1033\\LocalizedData.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1033\\localizeddata.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0222.375] GetFileType (hFile=0x23c) returned 0x1 [0222.375] GetLastError () returned 0xb7 [0222.376] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1033\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1033\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1a4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0222.376] GetFileType (hFile=0x218) returned 0x1 [0222.376] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x291ff0 [0222.376] ReadFile (in: hFile=0x218, lpBuffer=0x291ff0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e100, lpOverlapped=0x0 | out: lpBuffer=0x291ff0*, lpNumberOfBytesRead=0x173e100*=0x1000, lpOverlapped=0x0) returned 1 [0222.401] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24c600 [0222.402] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28ffe0 [0222.402] GetLastError () returned 0x0 [0222.421] CloseHandle (hObject=0x210) returned 1 [0222.427] CloseHandle (hObject=0x200) returned 1 [0222.428] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238820 [0222.428] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238990 [0222.428] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1033\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1033\\localizeddata.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0222.430] GetFileType (hFile=0x200) returned 0x1 [0222.431] GetLastError () returned 0xb7 [0222.432] CloseHandle (hObject=0x200) returned 1 [0222.432] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1033\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1033\\localizeddata.xml")) returned 0 [0222.433] GetLastError () returned 0x20 [0222.433] GetLastError () returned 0x20 [0222.433] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x212690) returned 1 [0222.434] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238230 | out: pbBuffer=0x238230) returned 1 [0222.434] CryptReleaseContext (hProv=0x212690, dwFlags=0x0) returned 1 [0222.434] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0222.434] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238230 [0222.434] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2382d0 [0222.434] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238e18 [0222.434] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0222.435] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0222.435] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238e18 | out: hHeap=0x1f0000) returned 1 [0222.435] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8008 [0222.435] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210258 [0222.435] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x2358a0 [0222.435] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238230 [0222.435] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2854b8 [0222.435] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bb0 [0222.435] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236260 [0222.435] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238578 [0222.435] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2858d8 [0222.435] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388e0 [0222.435] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238730 [0222.435] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210198 [0222.436] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238900 [0222.436] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384d8 [0222.436] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210210 [0222.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0222.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384d8 | out: hHeap=0x1f0000) returned 1 [0222.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238900 | out: hHeap=0x1f0000) returned 1 [0222.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0222.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238730 | out: hHeap=0x1f0000) returned 1 [0222.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388e0 | out: hHeap=0x1f0000) returned 1 [0222.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2858d8 | out: hHeap=0x1f0000) returned 1 [0222.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238578 | out: hHeap=0x1f0000) returned 1 [0222.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236260 | out: hHeap=0x1f0000) returned 1 [0222.436] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238c20 [0222.436] GetLastError () returned 0x0 [0222.437] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173df20 | out: lpSystemTimeAsFileTime=0x173df20) [0222.437] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238890 [0222.437] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238780 [0222.437] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204df0 [0222.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204df0 | out: hHeap=0x1f0000) returned 1 [0222.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238780 | out: hHeap=0x1f0000) returned 1 [0222.437] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238640 [0222.437] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204df0 [0222.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204df0 | out: hHeap=0x1f0000) returned 1 [0222.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238640 | out: hHeap=0x1f0000) returned 1 [0222.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238890 | out: hHeap=0x1f0000) returned 1 [0222.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0222.437] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238d00 [0222.437] GetLastError () returned 0x0 [0222.445] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1033\\LocalizedData.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1033\\localizeddata.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e290, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0222.447] GetFileType (hFile=0x200) returned 0x1 [0222.447] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x290fe8 [0222.447] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e218 | out: lpNewFilePointer=0x0) returned 1 [0222.448] GetLastError () returned 0xb7 [0222.448] CloseHandle (hObject=0x200) returned 1 [0222.449] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238950 | out: hHeap=0x1f0000) returned 1 [0222.814] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238880 | out: hHeap=0x1f0000) returned 1 [0222.814] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2858d8 | out: hHeap=0x1f0000) returned 1 [0222.814] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2854b8 | out: hHeap=0x1f0000) returned 1 [0222.814] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0222.814] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bb0 | out: hHeap=0x1f0000) returned 1 [0222.814] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2358a0 | out: hHeap=0x1f0000) returned 1 [0222.814] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0222.814] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8008 | out: hHeap=0x1f0000) returned 1 [0222.814] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2375e0 | out: hHeap=0x1f0000) returned 1 [0222.814] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0222.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0222.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x251068 | out: hHeap=0x1f0000) returned 1 [0222.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236d20 | out: hHeap=0x1f0000) returned 1 [0222.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239160 | out: hHeap=0x1f0000) returned 1 [0222.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388b0 | out: hHeap=0x1f0000) returned 1 [0222.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2100a8 | out: hHeap=0x1f0000) returned 1 [0222.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0222.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388d0 | out: hHeap=0x1f0000) returned 1 [0222.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210078 | out: hHeap=0x1f0000) returned 1 [0222.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0222.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388c0 | out: hHeap=0x1f0000) returned 1 [0222.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2857d0 | out: hHeap=0x1f0000) returned 1 [0222.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238500 | out: hHeap=0x1f0000) returned 1 [0222.816] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235768 | out: hHeap=0x1f0000) returned 1 [0222.816] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234818 | out: hHeap=0x1f0000) returned 1 [0222.816] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0222.816] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0222.816] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234590 | out: hHeap=0x1f0000) returned 1 [0222.816] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238990 | out: hHeap=0x1f0000) returned 1 [0222.816] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238820 | out: hHeap=0x1f0000) returned 1 [0222.816] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x291ff0 | out: hHeap=0x1f0000) returned 1 [0222.816] CloseHandle (hObject=0x218) returned 1 [0222.816] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238940 | out: hHeap=0x1f0000) returned 1 [0222.817] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a80 | out: hHeap=0x1f0000) returned 1 [0222.817] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223ca0 | out: hHeap=0x1f0000) returned 1 [0222.817] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24c600 | out: hHeap=0x1f0000) returned 1 [0222.817] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210018 | out: hHeap=0x1f0000) returned 1 [0222.817] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d10 | out: hHeap=0x1f0000) returned 1 [0222.817] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28ffe0 | out: hHeap=0x1f0000) returned 1 [0222.817] CloseHandle (hObject=0x23c) returned 1 [0222.818] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a70 | out: hHeap=0x1f0000) returned 1 [0222.818] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a10 | out: hHeap=0x1f0000) returned 1 [0222.818] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2610a8 | out: hHeap=0x1f0000) returned 1 [0222.818] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f70 | out: hHeap=0x1f0000) returned 1 [0222.818] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0222.818] CloseHandle (hObject=0x1d4) returned 1 [0222.819] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a00 | out: hHeap=0x1f0000) returned 1 [0222.819] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a60 | out: hHeap=0x1f0000) returned 1 [0222.819] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ff0 | out: hHeap=0x1f0000) returned 1 [0222.819] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ab0 | out: hHeap=0x1f0000) returned 1 [0222.819] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b80 | out: hHeap=0x1f0000) returned 1 [0222.819] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a50 | out: hHeap=0x1f0000) returned 1 [0222.819] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b70 | out: hHeap=0x1f0000) returned 1 [0222.819] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237298 | out: hHeap=0x1f0000) returned 1 [0222.819] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2595a0 | out: hHeap=0x1f0000) returned 1 [0222.819] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2374c8 | out: hHeap=0x1f0000) returned 1 [0222.820] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206688 | out: hHeap=0x1f0000) returned 1 [0222.820] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffb8 | out: hHeap=0x1f0000) returned 1 [0222.820] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff28 | out: hHeap=0x1f0000) returned 1 [0222.820] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232ee8 | out: hHeap=0x1f0000) returned 1 [0222.820] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24fd60 | out: hHeap=0x1f0000) returned 1 [0222.820] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237180 | out: hHeap=0x1f0000) returned 1 [0222.820] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239010 | out: hHeap=0x1f0000) returned 1 [0222.820] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235be0 | out: hHeap=0x1f0000) returned 1 [0222.820] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22db68 | out: hHeap=0x1f0000) returned 1 [0222.820] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233df8 | out: hHeap=0x1f0000) returned 1 [0222.820] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0222.821] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1033\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1033\\localizeddata.xml")) returned 1 [0222.822] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0222.822] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238e50 [0222.822] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233df8 [0222.822] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235d80 [0222.823] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233df8 | out: hHeap=0x1f0000) returned 1 [0222.823] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236190 | out: hHeap=0x1f0000) returned 1 [0222.823] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238e50 | out: hHeap=0x1f0000) returned 1 [0222.823] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1033\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1033\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0222.823] GetFileType (hFile=0x1d4) returned 0x1 [0222.824] CloseHandle (hObject=0x1d4) returned 1 [0222.824] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236058 [0222.824] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1033\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1033\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x173eb6c | out: lpFileInformation=0x173eb6c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358)) returned 1 [0222.824] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236058 | out: hHeap=0x1f0000) returned 1 [0222.824] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235be0 [0222.825] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1033\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1033\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x173eb7c | out: lpFileInformation=0x173eb7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358)) returned 1 [0222.825] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235be0 | out: hHeap=0x1f0000) returned 1 [0222.825] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236190 [0222.825] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236190 | out: hHeap=0x1f0000) returned 1 [0222.825] GetLastError () returned 0x0 [0222.825] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x212690) returned 1 [0222.826] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238230 | out: pbBuffer=0x238230) returned 1 [0222.826] CryptReleaseContext (hProv=0x212690, dwFlags=0x0) returned 1 [0222.827] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0222.827] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x251068 [0222.827] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x236d20 [0222.827] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=38019580906) returned 1 [0222.827] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0222.827] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=38019614874) returned 1 [0222.827] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0222.828] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238f30 [0222.828] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x24fd60 [0222.828] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2374c8 [0222.828] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x233708 [0222.828] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff28 [0222.828] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206868 [0222.828] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffb8 [0222.828] GetLastError () returned 0x0 [0222.828] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1033\\SetupResources.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1033\\setupresources.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e230, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0222.829] GetFileType (hFile=0x1d4) returned 0x1 [0222.830] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ab0 [0222.830] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a60 [0222.831] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1033\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1033\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0222.831] GetFileType (hFile=0x23c) returned 0x1 [0222.832] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204dd0 [0222.832] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bb0 [0222.832] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261160 [0222.832] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b70 [0222.832] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a00 [0222.833] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1033\\SetupResources.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1033\\setupresources.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0222.833] GetFileType (hFile=0x218) returned 0x1 [0222.834] GetLastError () returned 0xb7 [0222.834] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1033\\SetupResources.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1033\\setupresources.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0222.834] GetFileType (hFile=0x174) returned 0x1 [0222.835] GetLastError () returned 0xb7 [0222.835] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1033\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1033\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1a4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0222.835] GetFileType (hFile=0x1ac) returned 0x1 [0222.836] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x295008 [0222.836] ReadFile (in: hFile=0x1ac, lpBuffer=0x295008, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e100, lpOverlapped=0x0 | out: lpBuffer=0x295008*, lpNumberOfBytesRead=0x173e100*=0x1000, lpOverlapped=0x0) returned 1 [0222.839] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24d218 [0222.840] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28ffe0 [0222.840] GetLastError () returned 0x0 [0222.842] CloseHandle (hObject=0x1d4) returned 1 [0223.080] CloseHandle (hObject=0x23c) returned 1 [0223.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238990 [0223.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238960 [0223.082] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1033\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1033\\setupresources.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0223.084] GetFileType (hFile=0x23c) returned 0x1 [0223.084] GetLastError () returned 0xb7 [0223.085] CloseHandle (hObject=0x23c) returned 1 [0223.086] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1033\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1033\\setupresources.dll")) returned 0 [0223.086] GetLastError () returned 0x20 [0223.086] GetLastError () returned 0x20 [0223.086] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x2121c8) returned 1 [0223.087] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2382d0 | out: pbBuffer=0x2382d0) returned 1 [0223.087] CryptReleaseContext (hProv=0x2121c8, dwFlags=0x0) returned 1 [0223.088] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0223.088] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238208 [0223.088] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2382d0 [0223.088] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2392b0 [0223.088] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0223.088] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0223.088] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2392b0 | out: hHeap=0x1f0000) returned 1 [0223.088] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8950 [0223.088] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0223.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x235a40 [0223.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238208 [0223.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x284f90 [0223.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f70 [0223.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235aa8 [0223.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238668 [0223.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2856c8 [0223.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389b0 [0223.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384d8 [0223.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210240 [0223.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238800 [0223.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238690 [0223.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0223.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0223.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238690 | out: hHeap=0x1f0000) returned 1 [0223.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238800 | out: hHeap=0x1f0000) returned 1 [0223.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210240 | out: hHeap=0x1f0000) returned 1 [0223.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384d8 | out: hHeap=0x1f0000) returned 1 [0223.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389b0 | out: hHeap=0x1f0000) returned 1 [0223.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2856c8 | out: hHeap=0x1f0000) returned 1 [0223.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238668 | out: hHeap=0x1f0000) returned 1 [0223.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235aa8 | out: hHeap=0x1f0000) returned 1 [0223.091] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238f30 [0223.091] GetLastError () returned 0x0 [0223.091] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173df20 | out: lpSystemTimeAsFileTime=0x173df20) [0223.091] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x2387e0 [0223.091] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238668 [0223.091] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d90 [0223.091] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d90 | out: hHeap=0x1f0000) returned 1 [0223.091] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238668 | out: hHeap=0x1f0000) returned 1 [0223.091] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238690 [0223.092] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c50 [0223.092] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c50 | out: hHeap=0x1f0000) returned 1 [0223.092] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238690 | out: hHeap=0x1f0000) returned 1 [0223.092] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387e0 | out: hHeap=0x1f0000) returned 1 [0223.092] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0223.092] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238d00 [0223.092] GetLastError () returned 0x0 [0223.092] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1033\\SetupResources.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1033\\setupresources.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e290, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0223.093] GetFileType (hFile=0x23c) returned 0x1 [0223.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x296010 [0223.093] SetFilePointerEx (in: hFile=0x23c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e218 | out: lpNewFilePointer=0x0) returned 1 [0223.093] GetLastError () returned 0xb7 [0223.094] CloseHandle (hObject=0x23c) returned 1 [0223.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238810 | out: hHeap=0x1f0000) returned 1 [0223.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238970 | out: hHeap=0x1f0000) returned 1 [0223.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2854b8 | out: hHeap=0x1f0000) returned 1 [0223.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x284f90 | out: hHeap=0x1f0000) returned 1 [0223.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0223.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f70 | out: hHeap=0x1f0000) returned 1 [0223.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235a40 | out: hHeap=0x1f0000) returned 1 [0223.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0223.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8950 | out: hHeap=0x1f0000) returned 1 [0223.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237810 | out: hHeap=0x1f0000) returned 1 [0223.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0223.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0223.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x255c88 | out: hHeap=0x1f0000) returned 1 [0223.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2375e0 | out: hHeap=0x1f0000) returned 1 [0223.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238d70 | out: hHeap=0x1f0000) returned 1 [0223.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388c0 | out: hHeap=0x1f0000) returned 1 [0223.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0223.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0223.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388e0 | out: hHeap=0x1f0000) returned 1 [0223.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffa0 | out: hHeap=0x1f0000) returned 1 [0223.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0223.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387f0 | out: hHeap=0x1f0000) returned 1 [0223.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285e00 | out: hHeap=0x1f0000) returned 1 [0223.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238640 | out: hHeap=0x1f0000) returned 1 [0223.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0223.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234ae8 | out: hHeap=0x1f0000) returned 1 [0223.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0223.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0223.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234590 | out: hHeap=0x1f0000) returned 1 [0223.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238960 | out: hHeap=0x1f0000) returned 1 [0223.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238990 | out: hHeap=0x1f0000) returned 1 [0223.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x295008 | out: hHeap=0x1f0000) returned 1 [0223.097] CloseHandle (hObject=0x1ac) returned 1 [0223.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388b0 | out: hHeap=0x1f0000) returned 1 [0223.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a80 | out: hHeap=0x1f0000) returned 1 [0223.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224960 | out: hHeap=0x1f0000) returned 1 [0223.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24d218 | out: hHeap=0x1f0000) returned 1 [0223.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210018 | out: hHeap=0x1f0000) returned 1 [0223.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bf0 | out: hHeap=0x1f0000) returned 1 [0223.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28ffe0 | out: hHeap=0x1f0000) returned 1 [0223.098] CloseHandle (hObject=0x174) returned 1 [0223.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a70 | out: hHeap=0x1f0000) returned 1 [0223.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a10 | out: hHeap=0x1f0000) returned 1 [0223.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ff0 | out: hHeap=0x1f0000) returned 1 [0223.099] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ef0 | out: hHeap=0x1f0000) returned 1 [0223.099] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0223.099] CloseHandle (hObject=0x218) returned 1 [0223.099] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a00 | out: hHeap=0x1f0000) returned 1 [0223.099] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b70 | out: hHeap=0x1f0000) returned 1 [0223.099] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261160 | out: hHeap=0x1f0000) returned 1 [0223.100] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a60 | out: hHeap=0x1f0000) returned 1 [0223.100] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ab0 | out: hHeap=0x1f0000) returned 1 [0223.100] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b80 | out: hHeap=0x1f0000) returned 1 [0223.100] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a50 | out: hHeap=0x1f0000) returned 1 [0223.100] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237b58 | out: hHeap=0x1f0000) returned 1 [0223.100] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24fd60 | out: hHeap=0x1f0000) returned 1 [0223.100] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2374c8 | out: hHeap=0x1f0000) returned 1 [0223.100] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206868 | out: hHeap=0x1f0000) returned 1 [0223.100] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffb8 | out: hHeap=0x1f0000) returned 1 [0223.100] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff28 | out: hHeap=0x1f0000) returned 1 [0223.100] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233708 | out: hHeap=0x1f0000) returned 1 [0223.101] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x251068 | out: hHeap=0x1f0000) returned 1 [0223.101] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236d20 | out: hHeap=0x1f0000) returned 1 [0223.101] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238fd8 | out: hHeap=0x1f0000) returned 1 [0223.101] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235eb8 | out: hHeap=0x1f0000) returned 1 [0223.101] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e1c8 | out: hHeap=0x1f0000) returned 1 [0223.101] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233df8 | out: hHeap=0x1f0000) returned 1 [0223.101] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0223.101] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1033\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1033\\setupresources.dll")) returned 1 [0223.103] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0223.103] FindClose (in: hFindFile=0x24eb80 | out: hFindFile=0x24eb80) returned 1 [0223.103] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235d80 | out: hHeap=0x1f0000) returned 1 [0223.103] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2627e8 | out: hHeap=0x1f0000) returned 1 [0223.103] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238488 | out: hHeap=0x1f0000) returned 1 [0223.103] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234500 | out: hHeap=0x1f0000) returned 1 [0223.104] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228b90 [0223.104] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0223.104] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f020 [0223.104] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228ab8 [0223.104] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1035\\*", lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e7c0 [0223.104] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228488 [0223.104] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228ab8 | out: hHeap=0x1f0000) returned 1 [0223.104] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0223.104] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0223.105] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228a28 [0223.105] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228488 | out: hHeap=0x1f0000) returned 1 [0223.105] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0223.105] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0223.105] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe76, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0223.105] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0223.105] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2287a0 [0223.105] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x235eb8 [0223.105] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2287a0 | out: hHeap=0x1f0000) returned 1 [0223.105] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228a28 | out: hHeap=0x1f0000) returned 1 [0223.105] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0223.106] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1035\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1035\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0223.106] GetFileType (hFile=0x218) returned 0x1 [0223.107] CloseHandle (hObject=0x218) returned 1 [0223.107] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8480 [0223.107] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1035\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1035\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x173eb6c | out: lpFileInformation=0x173eb6c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe76)) returned 1 [0223.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8480 | out: hHeap=0x1f0000) returned 1 [0223.108] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a87f0 [0223.108] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1035\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1035\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x173eb7c | out: lpFileInformation=0x173eb7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe76)) returned 1 [0223.108] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a87f0 | out: hHeap=0x1f0000) returned 1 [0223.108] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a87f0 [0223.108] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a87f0 | out: hHeap=0x1f0000) returned 1 [0223.108] GetLastError () returned 0x0 [0223.108] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x2121c8) returned 1 [0223.109] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238208 | out: pbBuffer=0x238208) returned 1 [0223.109] CryptReleaseContext (hProv=0x2121c8, dwFlags=0x0) returned 1 [0223.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0223.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x255c88 [0223.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2375e0 [0223.110] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=38047934597) returned 1 [0223.111] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0223.111] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=38047968920) returned 1 [0223.111] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0223.111] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238c20 [0223.111] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x24fd60 [0223.111] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x237180 [0223.111] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x232ee8 [0223.111] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210018 [0223.112] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206688 [0223.112] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff28 [0223.112] GetLastError () returned 0x0 [0223.112] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1035\\eula.rtf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1035\\eula.rtf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e230, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0223.435] GetFileType (hFile=0x200) returned 0x1 [0223.436] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b70 [0223.436] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b90 [0223.530] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1035\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1035\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0223.531] GetFileType (hFile=0x224) returned 0x1 [0223.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e90 [0223.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cf0 [0223.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2610a8 [0223.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389e0 [0223.532] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a50 [0223.532] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1035\\eula.rtf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1035\\eula.rtf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0223.533] GetFileType (hFile=0x1d8) returned 0x1 [0223.533] GetLastError () returned 0xb7 [0223.534] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1035\\eula.rtf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1035\\eula.rtf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0223.534] GetFileType (hFile=0x1b0) returned 0x1 [0223.534] GetLastError () returned 0xb7 [0223.534] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1035\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1035\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1a4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0223.535] GetFileType (hFile=0x210) returned 0x1 [0223.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28efd8 [0223.536] ReadFile (in: hFile=0x210, lpBuffer=0x28efd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e100, lpOverlapped=0x0 | out: lpBuffer=0x28efd8*, lpNumberOfBytesRead=0x173e100*=0xe76, lpOverlapped=0x0) returned 1 [0223.582] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24b1d8 [0223.583] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28afb8 [0223.583] GetLastError () returned 0x0 [0223.585] CloseHandle (hObject=0x200) returned 1 [0223.587] CloseHandle (hObject=0x224) returned 1 [0223.588] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a70 [0223.589] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a80 [0223.589] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1035\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1035\\eula.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0223.592] GetFileType (hFile=0x224) returned 0x1 [0223.592] GetLastError () returned 0xb7 [0223.594] CloseHandle (hObject=0x224) returned 1 [0223.595] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1035\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1035\\eula.rtf")) returned 0 [0223.595] GetLastError () returned 0x20 [0223.595] GetLastError () returned 0x20 [0223.595] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x211e98) returned 1 [0223.596] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2385a0 | out: pbBuffer=0x2385a0) returned 1 [0223.596] CryptReleaseContext (hProv=0x211e98, dwFlags=0x0) returned 1 [0223.596] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385a0 | out: hHeap=0x1f0000) returned 1 [0223.597] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238668 [0223.597] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238730 [0223.597] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c20 [0223.597] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238668 | out: hHeap=0x1f0000) returned 1 [0223.597] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0223.597] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c20 | out: hHeap=0x1f0000) returned 1 [0223.597] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8060 [0223.597] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210258 [0223.597] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x2358a0 [0223.598] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238668 [0223.598] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2857d0 [0223.598] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f10 [0223.598] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235be0 [0223.598] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238708 [0223.598] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2859e0 [0223.598] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238870 [0223.598] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384d8 [0223.598] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0223.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238980 [0223.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238690 [0223.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0223.599] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0223.599] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238690 | out: hHeap=0x1f0000) returned 1 [0223.599] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238980 | out: hHeap=0x1f0000) returned 1 [0223.599] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0223.599] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384d8 | out: hHeap=0x1f0000) returned 1 [0223.599] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238870 | out: hHeap=0x1f0000) returned 1 [0223.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2859e0 | out: hHeap=0x1f0000) returned 1 [0223.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238708 | out: hHeap=0x1f0000) returned 1 [0223.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235be0 | out: hHeap=0x1f0000) returned 1 [0223.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238c20 [0223.600] GetLastError () returned 0x0 [0223.600] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173df20 | out: lpSystemTimeAsFileTime=0x173df20) [0223.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238930 [0223.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238690 [0223.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204b90 [0223.601] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204b90 | out: hHeap=0x1f0000) returned 1 [0223.601] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238690 | out: hHeap=0x1f0000) returned 1 [0223.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238690 [0223.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cb0 [0223.601] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cb0 | out: hHeap=0x1f0000) returned 1 [0223.601] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238690 | out: hHeap=0x1f0000) returned 1 [0223.601] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238930 | out: hHeap=0x1f0000) returned 1 [0223.601] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0223.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238e88 [0223.601] GetLastError () returned 0x0 [0223.602] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1035\\eula.rtf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1035\\eula.rtf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e290, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0223.602] GetFileType (hFile=0x224) returned 0x1 [0223.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x287fa0 [0223.603] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e218 | out: lpNewFilePointer=0x0) returned 1 [0223.603] GetLastError () returned 0xb7 [0223.603] CloseHandle (hObject=0x224) returned 1 [0223.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238910 | out: hHeap=0x1f0000) returned 1 [0223.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388a0 | out: hHeap=0x1f0000) returned 1 [0223.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2853b0 | out: hHeap=0x1f0000) returned 1 [0223.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2857d0 | out: hHeap=0x1f0000) returned 1 [0223.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238668 | out: hHeap=0x1f0000) returned 1 [0223.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f10 | out: hHeap=0x1f0000) returned 1 [0223.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2358a0 | out: hHeap=0x1f0000) returned 1 [0223.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0223.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8060 | out: hHeap=0x1f0000) returned 1 [0223.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236f50 | out: hHeap=0x1f0000) returned 1 [0223.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238730 | out: hHeap=0x1f0000) returned 1 [0223.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0223.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2595a0 | out: hHeap=0x1f0000) returned 1 [0223.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237b58 | out: hHeap=0x1f0000) returned 1 [0223.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c58 | out: hHeap=0x1f0000) returned 1 [0223.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b00 | out: hHeap=0x1f0000) returned 1 [0223.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210240 | out: hHeap=0x1f0000) returned 1 [0223.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238550 | out: hHeap=0x1f0000) returned 1 [0223.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388d0 | out: hHeap=0x1f0000) returned 1 [0223.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0223.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238640 | out: hHeap=0x1f0000) returned 1 [0223.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b10 | out: hHeap=0x1f0000) returned 1 [0223.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2852a8 | out: hHeap=0x1f0000) returned 1 [0223.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238578 | out: hHeap=0x1f0000) returned 1 [0223.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235f20 | out: hHeap=0x1f0000) returned 1 [0223.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228908 | out: hHeap=0x1f0000) returned 1 [0223.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238618 | out: hHeap=0x1f0000) returned 1 [0223.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0223.606] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228488 | out: hHeap=0x1f0000) returned 1 [0223.606] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a80 | out: hHeap=0x1f0000) returned 1 [0223.606] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a70 | out: hHeap=0x1f0000) returned 1 [0223.606] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28efd8 | out: hHeap=0x1f0000) returned 1 [0223.606] CloseHandle (hObject=0x210) returned 1 [0223.606] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238af0 | out: hHeap=0x1f0000) returned 1 [0223.606] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a60 | out: hHeap=0x1f0000) returned 1 [0223.606] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2247e0 | out: hHeap=0x1f0000) returned 1 [0223.606] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24b1d8 | out: hHeap=0x1f0000) returned 1 [0223.607] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2100a8 | out: hHeap=0x1f0000) returned 1 [0223.607] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e90 | out: hHeap=0x1f0000) returned 1 [0223.607] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28afb8 | out: hHeap=0x1f0000) returned 1 [0223.607] CloseHandle (hObject=0x1b0) returned 1 [0223.607] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ae0 | out: hHeap=0x1f0000) returned 1 [0223.607] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a10 | out: hHeap=0x1f0000) returned 1 [0223.607] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261440 | out: hHeap=0x1f0000) returned 1 [0223.607] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e70 | out: hHeap=0x1f0000) returned 1 [0223.607] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d368 | out: hHeap=0x1f0000) returned 1 [0223.607] CloseHandle (hObject=0x1d8) returned 1 [0223.608] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a50 | out: hHeap=0x1f0000) returned 1 [0223.608] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389e0 | out: hHeap=0x1f0000) returned 1 [0223.608] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2610a8 | out: hHeap=0x1f0000) returned 1 [0223.608] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b90 | out: hHeap=0x1f0000) returned 1 [0223.608] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b70 | out: hHeap=0x1f0000) returned 1 [0223.608] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b80 | out: hHeap=0x1f0000) returned 1 [0223.608] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a00 | out: hHeap=0x1f0000) returned 1 [0223.608] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b018 | out: hHeap=0x1f0000) returned 1 [0223.608] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24fd60 | out: hHeap=0x1f0000) returned 1 [0223.608] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237180 | out: hHeap=0x1f0000) returned 1 [0223.608] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206688 | out: hHeap=0x1f0000) returned 1 [0223.608] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff28 | out: hHeap=0x1f0000) returned 1 [0223.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210018 | out: hHeap=0x1f0000) returned 1 [0223.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232ee8 | out: hHeap=0x1f0000) returned 1 [0223.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x255c88 | out: hHeap=0x1f0000) returned 1 [0223.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2375e0 | out: hHeap=0x1f0000) returned 1 [0223.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238f30 | out: hHeap=0x1f0000) returned 1 [0223.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a87f0 | out: hHeap=0x1f0000) returned 1 [0223.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d6a0 | out: hHeap=0x1f0000) returned 1 [0223.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228878 | out: hHeap=0x1f0000) returned 1 [0223.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0223.609] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1035\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1035\\eula.rtf")) returned 1 [0223.611] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12cde, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0223.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239160 [0223.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2285f0 [0223.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2360c0 [0223.612] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2285f0 | out: hHeap=0x1f0000) returned 1 [0223.612] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235eb8 | out: hHeap=0x1f0000) returned 1 [0223.612] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239160 | out: hHeap=0x1f0000) returned 1 [0223.612] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1035\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1035\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0223.612] GetFileType (hFile=0x1d8) returned 0x1 [0223.613] CloseHandle (hObject=0x1d8) returned 1 [0223.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235d80 [0223.613] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1035\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1035\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x173eb6c | out: lpFileInformation=0x173eb6c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12cde)) returned 1 [0223.613] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235d80 | out: hHeap=0x1f0000) returned 1 [0223.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236058 [0223.613] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1035\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1035\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x173eb7c | out: lpFileInformation=0x173eb7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12cde)) returned 1 [0223.614] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236058 | out: hHeap=0x1f0000) returned 1 [0223.614] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2358a0 [0223.614] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2358a0 | out: hHeap=0x1f0000) returned 1 [0223.614] GetLastError () returned 0x0 [0223.614] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x2121c8) returned 1 [0223.615] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2382d0 | out: pbBuffer=0x2382d0) returned 1 [0223.615] CryptReleaseContext (hProv=0x2121c8, dwFlags=0x0) returned 1 [0223.615] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0223.615] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x255c88 [0223.615] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x237b58 [0223.615] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=38098386678) returned 1 [0223.615] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0223.615] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=38098413028) returned 1 [0223.615] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0223.615] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238f68 [0223.616] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x251068 [0223.616] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2374c8 [0223.616] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x233978 [0223.616] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff28 [0223.616] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2067d8 [0223.616] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210018 [0223.616] GetLastError () returned 0x0 [0223.616] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1035\\LocalizedData.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1035\\localizeddata.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e230, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0223.616] GetFileType (hFile=0x1d8) returned 0x1 [0223.617] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b80 [0223.617] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a10 [0223.618] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1035\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1035\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0223.618] GetFileType (hFile=0x1b0) returned 0x1 [0223.618] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e70 [0223.618] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d30 [0223.618] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261160 [0223.618] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b10 [0223.619] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b70 [0223.619] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1035\\LocalizedData.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1035\\localizeddata.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0223.619] GetFileType (hFile=0x210) returned 0x1 [0223.620] GetLastError () returned 0xb7 [0223.620] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1035\\LocalizedData.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1035\\localizeddata.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0223.620] GetFileType (hFile=0x224) returned 0x1 [0223.620] GetLastError () returned 0xb7 [0223.620] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1035\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1035\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1a4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0223.621] GetFileType (hFile=0x200) returned 0x1 [0223.621] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x287fa0 [0223.621] ReadFile (in: hFile=0x200, lpBuffer=0x287fa0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e100, lpOverlapped=0x0 | out: lpBuffer=0x287fa0*, lpNumberOfBytesRead=0x173e100*=0x1000, lpOverlapped=0x0) returned 1 [0223.892] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x249db0 [0223.892] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28dfd0 [0223.892] GetLastError () returned 0x0 [0224.209] CloseHandle (hObject=0x1d8) returned 1 [0224.212] CloseHandle (hObject=0x1b0) returned 1 [0224.213] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a90 [0224.213] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389f0 [0224.436] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1035\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1035\\localizeddata.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0224.437] GetFileType (hFile=0x1d8) returned 0x1 [0224.438] GetLastError () returned 0xb7 [0224.439] CloseHandle (hObject=0x1d8) returned 1 [0224.440] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1035\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1035\\localizeddata.xml")) returned 0 [0224.440] GetLastError () returned 0x20 [0224.440] GetLastError () returned 0x20 [0224.440] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x2128b0) returned 1 [0224.441] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238410 | out: pbBuffer=0x238410) returned 1 [0224.441] CryptReleaseContext (hProv=0x2128b0, dwFlags=0x0) returned 1 [0224.441] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0224.441] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238168 [0224.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238410 [0224.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c20 [0224.442] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0224.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0224.442] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c20 | out: hHeap=0x1f0000) returned 1 [0224.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a84d8 [0224.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffa0 [0224.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x235be0 [0224.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238168 [0224.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2858d8 [0224.443] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cb0 [0224.443] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235768 [0224.443] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2381b8 [0224.443] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285bf0 [0224.443] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ac0 [0224.443] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2386b8 [0224.443] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffb8 [0224.443] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ab0 [0224.443] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238780 [0224.443] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2100a8 [0224.443] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2100a8 | out: hHeap=0x1f0000) returned 1 [0224.443] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238780 | out: hHeap=0x1f0000) returned 1 [0224.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ab0 | out: hHeap=0x1f0000) returned 1 [0224.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffb8 | out: hHeap=0x1f0000) returned 1 [0224.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2386b8 | out: hHeap=0x1f0000) returned 1 [0224.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ac0 | out: hHeap=0x1f0000) returned 1 [0224.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285bf0 | out: hHeap=0x1f0000) returned 1 [0224.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0224.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235768 | out: hHeap=0x1f0000) returned 1 [0224.444] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238f68 [0224.444] GetLastError () returned 0x0 [0224.444] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173df20 | out: lpSystemTimeAsFileTime=0x173df20) [0224.445] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238a60 [0224.445] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0224.445] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e70 [0224.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e70 | out: hHeap=0x1f0000) returned 1 [0224.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0224.445] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0224.445] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c70 [0224.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c70 | out: hHeap=0x1f0000) returned 1 [0224.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0224.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a60 | out: hHeap=0x1f0000) returned 1 [0224.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0224.446] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239208 [0224.446] GetLastError () returned 0x0 [0224.446] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1035\\LocalizedData.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1035\\localizeddata.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e290, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0224.446] GetFileType (hFile=0x1d8) returned 0x1 [0224.447] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28ffe0 [0224.447] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e218 | out: lpNewFilePointer=0x0) returned 1 [0224.447] GetLastError () returned 0xb7 [0224.448] CloseHandle (hObject=0x1d8) returned 1 [0224.448] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a30 | out: hHeap=0x1f0000) returned 1 [0224.448] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a60 | out: hHeap=0x1f0000) returned 1 [0224.448] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x284f90 | out: hHeap=0x1f0000) returned 1 [0224.448] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2858d8 | out: hHeap=0x1f0000) returned 1 [0224.448] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0224.449] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cb0 | out: hHeap=0x1f0000) returned 1 [0224.449] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235be0 | out: hHeap=0x1f0000) returned 1 [0224.449] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffa0 | out: hHeap=0x1f0000) returned 1 [0224.449] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a84d8 | out: hHeap=0x1f0000) returned 1 [0224.449] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237810 | out: hHeap=0x1f0000) returned 1 [0224.449] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0224.449] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0224.449] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25a8a8 | out: hHeap=0x1f0000) returned 1 [0224.449] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2376f8 | out: hHeap=0x1f0000) returned 1 [0224.449] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2392b0 | out: hHeap=0x1f0000) returned 1 [0224.449] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238aa0 | out: hHeap=0x1f0000) returned 1 [0224.449] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210078 | out: hHeap=0x1f0000) returned 1 [0224.449] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0224.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a20 | out: hHeap=0x1f0000) returned 1 [0224.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff70 | out: hHeap=0x1f0000) returned 1 [0224.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0224.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a40 | out: hHeap=0x1f0000) returned 1 [0224.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2854b8 | out: hHeap=0x1f0000) returned 1 [0224.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0224.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235de8 | out: hHeap=0x1f0000) returned 1 [0224.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228cb0 | out: hHeap=0x1f0000) returned 1 [0224.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0224.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0224.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2284d0 | out: hHeap=0x1f0000) returned 1 [0224.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389f0 | out: hHeap=0x1f0000) returned 1 [0224.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a90 | out: hHeap=0x1f0000) returned 1 [0224.451] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x287fa0 | out: hHeap=0x1f0000) returned 1 [0224.451] CloseHandle (hObject=0x200) returned 1 [0224.451] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238af0 | out: hHeap=0x1f0000) returned 1 [0224.451] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ae0 | out: hHeap=0x1f0000) returned 1 [0224.451] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2247e0 | out: hHeap=0x1f0000) returned 1 [0224.451] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x249db0 | out: hHeap=0x1f0000) returned 1 [0224.451] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20fef8 | out: hHeap=0x1f0000) returned 1 [0224.451] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204b90 | out: hHeap=0x1f0000) returned 1 [0224.451] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28dfd0 | out: hHeap=0x1f0000) returned 1 [0224.451] CloseHandle (hObject=0x224) returned 1 [0224.452] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b90 | out: hHeap=0x1f0000) returned 1 [0224.452] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a80 | out: hHeap=0x1f0000) returned 1 [0224.452] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2614f8 | out: hHeap=0x1f0000) returned 1 [0224.452] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bf0 | out: hHeap=0x1f0000) returned 1 [0224.452] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b018 | out: hHeap=0x1f0000) returned 1 [0224.452] CloseHandle (hObject=0x210) returned 1 [0224.452] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b70 | out: hHeap=0x1f0000) returned 1 [0224.452] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b10 | out: hHeap=0x1f0000) returned 1 [0224.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261160 | out: hHeap=0x1f0000) returned 1 [0224.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a10 | out: hHeap=0x1f0000) returned 1 [0224.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b80 | out: hHeap=0x1f0000) returned 1 [0224.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a00 | out: hHeap=0x1f0000) returned 1 [0224.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a70 | out: hHeap=0x1f0000) returned 1 [0224.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236d20 | out: hHeap=0x1f0000) returned 1 [0224.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x251068 | out: hHeap=0x1f0000) returned 1 [0224.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2374c8 | out: hHeap=0x1f0000) returned 1 [0224.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2067d8 | out: hHeap=0x1f0000) returned 1 [0224.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210018 | out: hHeap=0x1f0000) returned 1 [0224.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff28 | out: hHeap=0x1f0000) returned 1 [0224.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233978 | out: hHeap=0x1f0000) returned 1 [0224.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x255c88 | out: hHeap=0x1f0000) returned 1 [0224.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237b58 | out: hHeap=0x1f0000) returned 1 [0224.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238d00 | out: hHeap=0x1f0000) returned 1 [0224.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2358a0 | out: hHeap=0x1f0000) returned 1 [0224.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f1b8 | out: hHeap=0x1f0000) returned 1 [0224.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228440 | out: hHeap=0x1f0000) returned 1 [0224.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238488 | out: hHeap=0x1f0000) returned 1 [0224.454] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1035\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1035\\localizeddata.xml")) returned 1 [0224.455] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0224.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238cc8 [0224.456] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228b00 [0224.456] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235de8 [0224.456] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228b00 | out: hHeap=0x1f0000) returned 1 [0224.456] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2360c0 | out: hHeap=0x1f0000) returned 1 [0224.456] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238cc8 | out: hHeap=0x1f0000) returned 1 [0224.456] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1035\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1035\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0224.456] GetFileType (hFile=0x210) returned 0x1 [0224.457] CloseHandle (hObject=0x210) returned 1 [0224.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235768 [0224.457] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1035\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1035\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x173eb6c | out: lpFileInformation=0x173eb6c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758)) returned 1 [0224.457] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235768 | out: hHeap=0x1f0000) returned 1 [0224.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235eb8 [0224.457] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1035\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1035\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x173eb7c | out: lpFileInformation=0x173eb7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758)) returned 1 [0224.457] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235eb8 | out: hHeap=0x1f0000) returned 1 [0224.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235768 [0224.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235768 | out: hHeap=0x1f0000) returned 1 [0224.458] GetLastError () returned 0x0 [0224.458] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x2120b8) returned 1 [0224.459] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2381b8 | out: pbBuffer=0x2381b8) returned 1 [0224.459] CryptReleaseContext (hProv=0x2120b8, dwFlags=0x0) returned 1 [0224.459] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0224.459] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x258298 [0224.459] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2374c8 [0224.459] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=38182766647) returned 1 [0224.459] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0224.459] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=38182787045) returned 1 [0224.459] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0224.459] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238d38 [0224.459] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x255c88 [0224.459] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x237b58 [0224.459] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x2337d8 [0224.459] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffa0 [0224.460] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2068c8 [0224.460] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20fef8 [0224.460] GetLastError () returned 0x0 [0224.460] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1035\\SetupResources.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1035\\setupresources.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e230, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0224.460] GetFileType (hFile=0x210) returned 0x1 [0224.461] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a10 [0224.461] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b40 [0224.462] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1035\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1035\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0224.462] GetFileType (hFile=0x224) returned 0x1 [0224.463] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d30 [0224.463] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cb0 [0224.463] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261440 [0224.463] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b70 [0224.463] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a20 [0224.464] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1035\\SetupResources.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1035\\setupresources.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0224.464] GetFileType (hFile=0x200) returned 0x1 [0224.465] GetLastError () returned 0xb7 [0224.465] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1035\\SetupResources.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1035\\setupresources.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0224.465] GetFileType (hFile=0x1d8) returned 0x1 [0224.466] GetLastError () returned 0xb7 [0224.466] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1035\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1035\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1a4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0224.466] GetFileType (hFile=0x204) returned 0x1 [0224.467] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x287fa0 [0224.467] ReadFile (in: hFile=0x204, lpBuffer=0x287fa0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e100, lpOverlapped=0x0 | out: lpBuffer=0x287fa0*, lpNumberOfBytesRead=0x173e100*=0x1000, lpOverlapped=0x0) returned 1 [0224.817] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24b1d8 [0224.818] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x288fa8 [0224.818] GetLastError () returned 0x0 [0224.821] CloseHandle (hObject=0x210) returned 1 [0224.823] CloseHandle (hObject=0x224) returned 1 [0224.824] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a80 [0224.824] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a60 [0224.825] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1035\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1035\\setupresources.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0224.826] GetFileType (hFile=0x224) returned 0x1 [0224.827] GetLastError () returned 0xb7 [0224.828] CloseHandle (hObject=0x224) returned 1 [0224.828] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1035\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1035\\setupresources.dll")) returned 0 [0224.828] GetLastError () returned 0x20 [0224.828] GetLastError () returned 0x20 [0224.829] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x2119d0) returned 1 [0224.829] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238320 | out: pbBuffer=0x238320) returned 1 [0224.829] CryptReleaseContext (hProv=0x2119d0, dwFlags=0x0) returned 1 [0224.830] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0224.830] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238320 [0224.830] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238398 [0224.830] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238f30 [0224.830] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0224.831] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0224.831] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238f30 | out: hHeap=0x1f0000) returned 1 [0224.831] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8950 [0224.831] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210078 [0224.831] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x236190 [0224.831] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238320 [0224.831] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2853b0 [0224.831] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204b90 [0224.831] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235eb8 [0224.831] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238708 [0224.831] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2856c8 [0224.831] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b00 [0224.832] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384d8 [0224.832] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2100a8 [0224.832] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b20 [0224.832] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238690 [0224.832] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210258 [0224.832] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0224.832] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238690 | out: hHeap=0x1f0000) returned 1 [0224.832] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b20 | out: hHeap=0x1f0000) returned 1 [0224.832] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2100a8 | out: hHeap=0x1f0000) returned 1 [0224.832] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384d8 | out: hHeap=0x1f0000) returned 1 [0224.832] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b00 | out: hHeap=0x1f0000) returned 1 [0224.832] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2856c8 | out: hHeap=0x1f0000) returned 1 [0224.832] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238708 | out: hHeap=0x1f0000) returned 1 [0224.832] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235eb8 | out: hHeap=0x1f0000) returned 1 [0224.832] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239010 [0224.833] GetLastError () returned 0x0 [0224.833] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173df20 | out: lpSystemTimeAsFileTime=0x173df20) [0224.833] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238b00 [0224.836] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2386b8 [0224.836] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cb0 [0224.836] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cb0 | out: hHeap=0x1f0000) returned 1 [0224.836] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2386b8 | out: hHeap=0x1f0000) returned 1 [0224.836] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238578 [0224.836] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f10 [0224.836] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f10 | out: hHeap=0x1f0000) returned 1 [0224.836] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238578 | out: hHeap=0x1f0000) returned 1 [0224.836] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b00 | out: hHeap=0x1f0000) returned 1 [0224.836] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0224.836] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238c58 [0224.837] GetLastError () returned 0x0 [0224.837] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1035\\SetupResources.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1035\\setupresources.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e290, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0224.837] GetFileType (hFile=0x224) returned 0x1 [0224.838] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28ffe0 [0224.838] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e218 | out: lpNewFilePointer=0x0) returned 1 [0224.838] GetLastError () returned 0xb7 [0224.841] CloseHandle (hObject=0x224) returned 1 [0224.841] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b20 | out: hHeap=0x1f0000) returned 1 [0224.841] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b00 | out: hHeap=0x1f0000) returned 1 [0224.841] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2857d0 | out: hHeap=0x1f0000) returned 1 [0224.841] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2853b0 | out: hHeap=0x1f0000) returned 1 [0224.842] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0224.842] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204b90 | out: hHeap=0x1f0000) returned 1 [0224.842] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236190 | out: hHeap=0x1f0000) returned 1 [0224.842] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210078 | out: hHeap=0x1f0000) returned 1 [0224.842] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8950 | out: hHeap=0x1f0000) returned 1 [0224.842] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2373b0 | out: hHeap=0x1f0000) returned 1 [0224.842] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0224.842] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0224.842] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25a8a8 | out: hHeap=0x1f0000) returned 1 [0224.842] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237068 | out: hHeap=0x1f0000) returned 1 [0224.842] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238fd8 | out: hHeap=0x1f0000) returned 1 [0224.842] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a90 | out: hHeap=0x1f0000) returned 1 [0224.843] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210018 | out: hHeap=0x1f0000) returned 1 [0224.843] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238618 | out: hHeap=0x1f0000) returned 1 [0224.843] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238af0 | out: hHeap=0x1f0000) returned 1 [0224.843] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffb8 | out: hHeap=0x1f0000) returned 1 [0224.843] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0224.843] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ae0 | out: hHeap=0x1f0000) returned 1 [0224.843] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2858d8 | out: hHeap=0x1f0000) returned 1 [0224.843] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238640 | out: hHeap=0x1f0000) returned 1 [0224.843] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0224.843] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2285a8 | out: hHeap=0x1f0000) returned 1 [0224.843] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238488 | out: hHeap=0x1f0000) returned 1 [0224.843] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0224.843] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2284d0 | out: hHeap=0x1f0000) returned 1 [0224.843] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a60 | out: hHeap=0x1f0000) returned 1 [0224.844] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a80 | out: hHeap=0x1f0000) returned 1 [0224.844] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x287fa0 | out: hHeap=0x1f0000) returned 1 [0224.844] CloseHandle (hObject=0x204) returned 1 [0224.844] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ab0 | out: hHeap=0x1f0000) returned 1 [0224.844] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238aa0 | out: hHeap=0x1f0000) returned 1 [0224.844] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224060 | out: hHeap=0x1f0000) returned 1 [0224.844] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24b1d8 | out: hHeap=0x1f0000) returned 1 [0224.845] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffd0 | out: hHeap=0x1f0000) returned 1 [0224.845] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c30 | out: hHeap=0x1f0000) returned 1 [0224.845] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x288fa8 | out: hHeap=0x1f0000) returned 1 [0224.845] CloseHandle (hObject=0x1d8) returned 1 [0224.845] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b50 | out: hHeap=0x1f0000) returned 1 [0224.845] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b90 | out: hHeap=0x1f0000) returned 1 [0224.845] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261218 | out: hHeap=0x1f0000) returned 1 [0224.846] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c10 | out: hHeap=0x1f0000) returned 1 [0224.846] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0224.846] CloseHandle (hObject=0x200) returned 1 [0224.847] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a20 | out: hHeap=0x1f0000) returned 1 [0224.847] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b70 | out: hHeap=0x1f0000) returned 1 [0224.847] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261440 | out: hHeap=0x1f0000) returned 1 [0224.847] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b40 | out: hHeap=0x1f0000) returned 1 [0224.847] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a10 | out: hHeap=0x1f0000) returned 1 [0224.847] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b80 | out: hHeap=0x1f0000) returned 1 [0224.847] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a00 | out: hHeap=0x1f0000) returned 1 [0224.847] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237180 | out: hHeap=0x1f0000) returned 1 [0224.847] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x255c88 | out: hHeap=0x1f0000) returned 1 [0224.847] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237b58 | out: hHeap=0x1f0000) returned 1 [0224.847] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2068c8 | out: hHeap=0x1f0000) returned 1 [0224.847] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20fef8 | out: hHeap=0x1f0000) returned 1 [0224.847] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffa0 | out: hHeap=0x1f0000) returned 1 [0224.847] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2337d8 | out: hHeap=0x1f0000) returned 1 [0224.847] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x258298 | out: hHeap=0x1f0000) returned 1 [0224.847] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2374c8 | out: hHeap=0x1f0000) returned 1 [0224.847] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238e18 | out: hHeap=0x1f0000) returned 1 [0224.848] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235aa8 | out: hHeap=0x1f0000) returned 1 [0224.848] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f1b8 | out: hHeap=0x1f0000) returned 1 [0224.848] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228a70 | out: hHeap=0x1f0000) returned 1 [0224.848] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0224.848] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1035\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1035\\setupresources.dll")) returned 1 [0224.849] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0224.849] FindClose (in: hFindFile=0x24e7c0 | out: hFindFile=0x24e7c0) returned 1 [0224.849] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235de8 | out: hHeap=0x1f0000) returned 1 [0224.850] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f020 | out: hHeap=0x1f0000) returned 1 [0224.850] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0224.850] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228b90 | out: hHeap=0x1f0000) returned 1 [0224.850] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228b00 [0224.850] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0224.850] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e4f8 [0224.850] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228cb0 [0224.850] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1036\\*", lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ea00 [0224.851] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228cf8 [0224.851] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228cb0 | out: hHeap=0x1f0000) returned 1 [0224.851] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0224.851] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0224.851] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2284d0 [0224.851] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228cf8 | out: hHeap=0x1f0000) returned 1 [0224.851] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0224.851] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0224.851] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xdc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0224.851] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0224.851] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228cb0 [0224.852] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x235aa8 [0224.852] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228cb0 | out: hHeap=0x1f0000) returned 1 [0224.852] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2284d0 | out: hHeap=0x1f0000) returned 1 [0224.852] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0224.852] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1036\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1036\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0224.853] GetFileType (hFile=0x200) returned 0x1 [0224.853] CloseHandle (hObject=0x200) returned 1 [0224.853] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8008 [0224.853] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1036\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1036\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x173eb6c | out: lpFileInformation=0x173eb6c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xdc6)) returned 1 [0224.854] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8008 | out: hHeap=0x1f0000) returned 1 [0224.854] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a81c0 [0224.854] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1036\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1036\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x173eb7c | out: lpFileInformation=0x173eb7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xdc6)) returned 1 [0224.854] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a81c0 | out: hHeap=0x1f0000) returned 1 [0224.854] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8848 [0224.854] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8848 | out: hHeap=0x1f0000) returned 1 [0224.854] GetLastError () returned 0x0 [0224.855] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x212608) returned 1 [0224.855] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238398 | out: pbBuffer=0x238398) returned 1 [0224.856] CryptReleaseContext (hProv=0x212608, dwFlags=0x0) returned 1 [0224.856] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0224.856] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x25a8a8 [0224.856] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x237180 [0224.856] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=38222487500) returned 1 [0224.856] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0224.856] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=38222523208) returned 1 [0224.856] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0224.857] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238c90 [0224.857] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x252370 [0224.857] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x236e38 [0224.857] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x233708 [0224.857] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2100a8 [0224.857] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2067d8 [0224.857] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffa0 [0224.857] GetLastError () returned 0x0 [0224.858] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1036\\eula.rtf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1036\\eula.rtf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e230, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0225.211] GetFileType (hFile=0x1d8) returned 0x1 [0225.212] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238aa0 [0225.212] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a00 [0225.212] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1036\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1036\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0225.213] GetFileType (hFile=0x204) returned 0x1 [0225.213] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f50 [0225.213] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c30 [0225.213] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261218 [0225.213] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b70 [0225.214] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ab0 [0225.214] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1036\\eula.rtf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1036\\eula.rtf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0225.215] GetFileType (hFile=0x224) returned 0x1 [0225.215] GetLastError () returned 0xb7 [0225.215] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1036\\eula.rtf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1036\\eula.rtf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0225.216] GetFileType (hFile=0x210) returned 0x1 [0225.216] GetLastError () returned 0xb7 [0225.216] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1036\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1036\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1a4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0225.216] GetFileType (hFile=0x1ac) returned 0x1 [0225.217] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x288fa8 [0225.217] ReadFile (in: hFile=0x1ac, lpBuffer=0x288fa8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e100, lpOverlapped=0x0 | out: lpBuffer=0x288fa8*, lpNumberOfBytesRead=0x173e100*=0xdc6, lpOverlapped=0x0) returned 1 [0225.220] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24add0 [0225.220] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x289fb0 [0225.220] GetLastError () returned 0x0 [0225.222] CloseHandle (hObject=0x1d8) returned 1 [0225.660] CloseHandle (hObject=0x204) returned 1 [0225.661] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ac0 [0225.661] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389e0 [0225.662] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1036\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1036\\eula.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0225.663] GetFileType (hFile=0x204) returned 0x1 [0225.664] GetLastError () returned 0xb7 [0225.666] CloseHandle (hObject=0x204) returned 1 [0225.666] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1036\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1036\\eula.rtf")) returned 0 [0225.666] GetLastError () returned 0x20 [0225.666] GetLastError () returned 0x20 [0225.667] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x2119d0) returned 1 [0225.667] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238208 | out: pbBuffer=0x238208) returned 1 [0225.668] CryptReleaseContext (hProv=0x2119d0, dwFlags=0x0) returned 1 [0225.668] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0225.668] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238168 [0225.668] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238208 [0225.668] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238e50 [0225.668] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0225.668] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0225.668] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238e50 | out: hHeap=0x1f0000) returned 1 [0225.668] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a86e8 [0225.668] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210018 [0225.668] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x235eb8 [0225.668] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238168 [0225.668] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2851a0 [0225.669] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c10 [0225.669] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2358a0 [0225.669] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238500 [0225.669] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2857d0 [0225.669] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b90 [0225.669] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238780 [0225.669] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffb8 [0225.669] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ad0 [0225.669] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384d8 [0225.669] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210078 [0225.669] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210078 | out: hHeap=0x1f0000) returned 1 [0225.669] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384d8 | out: hHeap=0x1f0000) returned 1 [0225.669] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ad0 | out: hHeap=0x1f0000) returned 1 [0225.669] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffb8 | out: hHeap=0x1f0000) returned 1 [0225.670] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238780 | out: hHeap=0x1f0000) returned 1 [0225.670] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b90 | out: hHeap=0x1f0000) returned 1 [0225.670] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2857d0 | out: hHeap=0x1f0000) returned 1 [0225.670] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238500 | out: hHeap=0x1f0000) returned 1 [0225.670] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2358a0 | out: hHeap=0x1f0000) returned 1 [0225.670] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238de0 [0225.670] GetLastError () returned 0x0 [0225.670] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173df20 | out: lpSystemTimeAsFileTime=0x173df20) [0225.670] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238ad0 [0225.670] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238500 [0225.671] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f70 [0225.671] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f70 | out: hHeap=0x1f0000) returned 1 [0225.671] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238500 | out: hHeap=0x1f0000) returned 1 [0225.671] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238578 [0225.671] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f10 [0225.671] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f10 | out: hHeap=0x1f0000) returned 1 [0225.671] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238578 | out: hHeap=0x1f0000) returned 1 [0225.671] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ad0 | out: hHeap=0x1f0000) returned 1 [0225.671] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0225.671] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239160 [0225.671] GetLastError () returned 0x0 [0225.671] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1036\\eula.rtf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1036\\eula.rtf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e290, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0225.672] GetFileType (hFile=0x204) returned 0x1 [0225.672] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28ffe0 [0225.672] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e218 | out: lpNewFilePointer=0x0) returned 1 [0225.673] GetLastError () returned 0xb7 [0225.673] CloseHandle (hObject=0x204) returned 1 [0225.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b90 | out: hHeap=0x1f0000) returned 1 [0225.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b30 | out: hHeap=0x1f0000) returned 1 [0225.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285098 | out: hHeap=0x1f0000) returned 1 [0225.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2851a0 | out: hHeap=0x1f0000) returned 1 [0225.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0225.674] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c10 | out: hHeap=0x1f0000) returned 1 [0225.674] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235eb8 | out: hHeap=0x1f0000) returned 1 [0225.674] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210018 | out: hHeap=0x1f0000) returned 1 [0225.674] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a86e8 | out: hHeap=0x1f0000) returned 1 [0225.674] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236d20 | out: hHeap=0x1f0000) returned 1 [0225.674] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0225.674] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0225.674] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x255c88 | out: hHeap=0x1f0000) returned 1 [0225.674] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237810 | out: hHeap=0x1f0000) returned 1 [0225.674] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239010 | out: hHeap=0x1f0000) returned 1 [0225.674] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b10 | out: hHeap=0x1f0000) returned 1 [0225.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff70 | out: hHeap=0x1f0000) returned 1 [0225.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0225.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a50 | out: hHeap=0x1f0000) returned 1 [0225.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff28 | out: hHeap=0x1f0000) returned 1 [0225.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0225.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238af0 | out: hHeap=0x1f0000) returned 1 [0225.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285cf8 | out: hHeap=0x1f0000) returned 1 [0225.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238488 | out: hHeap=0x1f0000) returned 1 [0225.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0225.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228878 | out: hHeap=0x1f0000) returned 1 [0225.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0225.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0225.676] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228680 | out: hHeap=0x1f0000) returned 1 [0225.676] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389e0 | out: hHeap=0x1f0000) returned 1 [0225.676] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ac0 | out: hHeap=0x1f0000) returned 1 [0225.676] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x288fa8 | out: hHeap=0x1f0000) returned 1 [0225.676] CloseHandle (hObject=0x1ac) returned 1 [0225.677] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a20 | out: hHeap=0x1f0000) returned 1 [0225.677] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b20 | out: hHeap=0x1f0000) returned 1 [0225.677] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223ca0 | out: hHeap=0x1f0000) returned 1 [0225.677] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24add0 | out: hHeap=0x1f0000) returned 1 [0225.677] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20fef8 | out: hHeap=0x1f0000) returned 1 [0225.677] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d90 | out: hHeap=0x1f0000) returned 1 [0225.677] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x289fb0 | out: hHeap=0x1f0000) returned 1 [0225.678] CloseHandle (hObject=0x210) returned 1 [0225.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ae0 | out: hHeap=0x1f0000) returned 1 [0225.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a10 | out: hHeap=0x1f0000) returned 1 [0225.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261388 | out: hHeap=0x1f0000) returned 1 [0225.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d70 | out: hHeap=0x1f0000) returned 1 [0225.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0225.678] CloseHandle (hObject=0x224) returned 1 [0225.679] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ab0 | out: hHeap=0x1f0000) returned 1 [0225.679] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b70 | out: hHeap=0x1f0000) returned 1 [0225.679] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261218 | out: hHeap=0x1f0000) returned 1 [0225.679] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a00 | out: hHeap=0x1f0000) returned 1 [0225.679] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238aa0 | out: hHeap=0x1f0000) returned 1 [0225.679] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b80 | out: hHeap=0x1f0000) returned 1 [0225.679] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a60 | out: hHeap=0x1f0000) returned 1 [0225.679] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21b080 | out: hHeap=0x1f0000) returned 1 [0225.679] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x252370 | out: hHeap=0x1f0000) returned 1 [0225.680] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236e38 | out: hHeap=0x1f0000) returned 1 [0225.680] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2067d8 | out: hHeap=0x1f0000) returned 1 [0225.680] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffa0 | out: hHeap=0x1f0000) returned 1 [0225.680] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2100a8 | out: hHeap=0x1f0000) returned 1 [0225.680] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233708 | out: hHeap=0x1f0000) returned 1 [0225.680] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25a8a8 | out: hHeap=0x1f0000) returned 1 [0225.680] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237180 | out: hHeap=0x1f0000) returned 1 [0225.680] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2391d0 | out: hHeap=0x1f0000) returned 1 [0225.680] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8690 | out: hHeap=0x1f0000) returned 1 [0225.680] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d6a0 | out: hHeap=0x1f0000) returned 1 [0225.680] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228908 | out: hHeap=0x1f0000) returned 1 [0225.680] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0225.680] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1036\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1036\\eula.rtf")) returned 1 [0225.682] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x14412, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0225.682] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c20 [0225.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2285f0 [0225.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235de8 [0225.683] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2285f0 | out: hHeap=0x1f0000) returned 1 [0225.683] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235aa8 | out: hHeap=0x1f0000) returned 1 [0225.683] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c20 | out: hHeap=0x1f0000) returned 1 [0225.683] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1036\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1036\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0225.684] GetFileType (hFile=0x224) returned 0x1 [0225.684] CloseHandle (hObject=0x224) returned 1 [0225.685] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2358a0 [0225.685] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1036\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1036\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x173eb6c | out: lpFileInformation=0x173eb6c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x14412)) returned 1 [0225.685] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2358a0 | out: hHeap=0x1f0000) returned 1 [0225.685] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2358a0 [0225.685] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1036\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1036\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x173eb7c | out: lpFileInformation=0x173eb7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x14412)) returned 1 [0225.685] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2358a0 | out: hHeap=0x1f0000) returned 1 [0225.685] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236058 [0225.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236058 | out: hHeap=0x1f0000) returned 1 [0225.686] GetLastError () returned 0x0 [0225.686] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x212030) returned 1 [0225.687] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2381b8 | out: pbBuffer=0x2381b8) returned 1 [0225.687] CryptReleaseContext (hProv=0x212030, dwFlags=0x0) returned 1 [0225.687] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0225.687] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x255c88 [0225.687] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x237068 [0225.687] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=38305631991) returned 1 [0225.688] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0225.688] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=38305658738) returned 1 [0225.688] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0225.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239080 [0225.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x2595a0 [0225.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x236e38 [0225.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x232e18 [0225.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20fef8 [0225.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2068c8 [0225.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffa0 [0225.689] GetLastError () returned 0x0 [0225.689] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1036\\LocalizedData.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1036\\localizeddata.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e230, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0225.689] GetFileType (hFile=0x224) returned 0x1 [0225.690] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b40 [0225.691] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a70 [0225.691] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1036\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1036\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0225.691] GetFileType (hFile=0x210) returned 0x1 [0225.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0225.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bb0 [0225.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x260ff0 [0225.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a80 [0225.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389e0 [0225.693] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1036\\LocalizedData.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1036\\localizeddata.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0225.693] GetFileType (hFile=0x1ac) returned 0x1 [0225.694] GetLastError () returned 0xb7 [0225.694] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1036\\LocalizedData.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1036\\localizeddata.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0225.694] GetFileType (hFile=0x204) returned 0x1 [0225.695] GetLastError () returned 0xb7 [0225.695] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1036\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1036\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1a4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0225.695] GetFileType (hFile=0x1d8) returned 0x1 [0225.696] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28bfc0 [0225.696] ReadFile (in: hFile=0x1d8, lpBuffer=0x28bfc0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e100, lpOverlapped=0x0 | out: lpBuffer=0x28bfc0*, lpNumberOfBytesRead=0x173e100*=0x1000, lpOverlapped=0x0) returned 1 [0226.029] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x249db0 [0226.030] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x290fe8 [0226.030] GetLastError () returned 0x0 [0226.035] CloseHandle (hObject=0x224) returned 1 [0226.039] CloseHandle (hObject=0x210) returned 1 [0226.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b00 [0226.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ae0 [0226.041] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1036\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1036\\localizeddata.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0226.043] GetFileType (hFile=0x210) returned 0x1 [0226.044] GetLastError () returned 0xb7 [0226.045] CloseHandle (hObject=0x210) returned 1 [0226.046] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1036\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1036\\localizeddata.xml")) returned 0 [0226.046] GetLastError () returned 0x20 [0226.046] GetLastError () returned 0x20 [0226.046] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x2130a8) returned 1 [0226.047] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2381b8 | out: pbBuffer=0x2381b8) returned 1 [0226.047] CryptReleaseContext (hProv=0x2130a8, dwFlags=0x0) returned 1 [0226.047] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0226.047] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238398 [0226.047] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381b8 [0226.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239010 [0226.048] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0226.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0226.048] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239010 | out: hHeap=0x1f0000) returned 1 [0226.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a81c0 [0226.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210078 [0226.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x2358a0 [0226.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238398 [0226.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2857d0 [0226.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f10 [0226.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235b78 [0226.049] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2386b8 [0226.049] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2855c0 [0226.049] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a90 [0226.049] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238640 [0226.049] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2100a8 [0226.049] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238af0 [0226.049] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2386e0 [0226.049] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0226.049] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0226.049] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2386e0 | out: hHeap=0x1f0000) returned 1 [0226.049] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238af0 | out: hHeap=0x1f0000) returned 1 [0226.050] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2100a8 | out: hHeap=0x1f0000) returned 1 [0226.050] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238640 | out: hHeap=0x1f0000) returned 1 [0226.050] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a90 | out: hHeap=0x1f0000) returned 1 [0226.050] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2855c0 | out: hHeap=0x1f0000) returned 1 [0226.050] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2386b8 | out: hHeap=0x1f0000) returned 1 [0226.050] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0226.050] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238d70 [0226.050] GetLastError () returned 0x0 [0226.050] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173df20 | out: lpSystemTimeAsFileTime=0x173df20) [0226.050] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238a90 [0226.051] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2386e0 [0226.051] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bb0 [0226.051] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bb0 | out: hHeap=0x1f0000) returned 1 [0226.051] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2386e0 | out: hHeap=0x1f0000) returned 1 [0226.051] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238550 [0226.051] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f30 [0226.051] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f30 | out: hHeap=0x1f0000) returned 1 [0226.051] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238550 | out: hHeap=0x1f0000) returned 1 [0226.051] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a90 | out: hHeap=0x1f0000) returned 1 [0226.051] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0226.051] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238f68 [0226.051] GetLastError () returned 0x0 [0226.052] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1036\\LocalizedData.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1036\\localizeddata.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e290, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0226.052] GetFileType (hFile=0x210) returned 0x1 [0226.053] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28afb8 [0226.053] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e218 | out: lpNewFilePointer=0x0) returned 1 [0226.053] GetLastError () returned 0xb7 [0226.053] CloseHandle (hObject=0x210) returned 1 [0226.054] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238af0 | out: hHeap=0x1f0000) returned 1 [0226.054] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a90 | out: hHeap=0x1f0000) returned 1 [0226.054] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2851a0 | out: hHeap=0x1f0000) returned 1 [0226.054] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2857d0 | out: hHeap=0x1f0000) returned 1 [0226.054] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0226.054] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f10 | out: hHeap=0x1f0000) returned 1 [0226.055] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2358a0 | out: hHeap=0x1f0000) returned 1 [0226.055] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210078 | out: hHeap=0x1f0000) returned 1 [0226.055] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a81c0 | out: hHeap=0x1f0000) returned 1 [0226.055] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236d20 | out: hHeap=0x1f0000) returned 1 [0226.055] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0226.055] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0226.055] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25a8a8 | out: hHeap=0x1f0000) returned 1 [0226.055] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237298 | out: hHeap=0x1f0000) returned 1 [0226.055] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239208 | out: hHeap=0x1f0000) returned 1 [0226.055] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ac0 | out: hHeap=0x1f0000) returned 1 [0226.055] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffd0 | out: hHeap=0x1f0000) returned 1 [0226.055] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0226.056] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a60 | out: hHeap=0x1f0000) returned 1 [0226.056] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffb8 | out: hHeap=0x1f0000) returned 1 [0226.056] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0226.056] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b60 | out: hHeap=0x1f0000) returned 1 [0226.056] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285ae8 | out: hHeap=0x1f0000) returned 1 [0226.056] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238618 | out: hHeap=0x1f0000) returned 1 [0226.056] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235aa8 | out: hHeap=0x1f0000) returned 1 [0226.056] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228bd8 | out: hHeap=0x1f0000) returned 1 [0226.056] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0226.056] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0226.056] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2286c8 | out: hHeap=0x1f0000) returned 1 [0226.056] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ae0 | out: hHeap=0x1f0000) returned 1 [0226.056] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b00 | out: hHeap=0x1f0000) returned 1 [0226.056] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28bfc0 | out: hHeap=0x1f0000) returned 1 [0226.057] CloseHandle (hObject=0x1d8) returned 1 [0226.057] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b10 | out: hHeap=0x1f0000) returned 1 [0226.057] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238aa0 | out: hHeap=0x1f0000) returned 1 [0226.057] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2244e0 | out: hHeap=0x1f0000) returned 1 [0226.057] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x249db0 | out: hHeap=0x1f0000) returned 1 [0226.057] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff28 | out: hHeap=0x1f0000) returned 1 [0226.057] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204db0 | out: hHeap=0x1f0000) returned 1 [0226.057] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x290fe8 | out: hHeap=0x1f0000) returned 1 [0226.057] CloseHandle (hObject=0x204) returned 1 [0226.058] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389f0 | out: hHeap=0x1f0000) returned 1 [0226.058] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ad0 | out: hHeap=0x1f0000) returned 1 [0226.058] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261388 | out: hHeap=0x1f0000) returned 1 [0226.058] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d30 | out: hHeap=0x1f0000) returned 1 [0226.058] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0226.058] CloseHandle (hObject=0x1ac) returned 1 [0226.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389e0 | out: hHeap=0x1f0000) returned 1 [0226.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a80 | out: hHeap=0x1f0000) returned 1 [0226.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ff0 | out: hHeap=0x1f0000) returned 1 [0226.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a70 | out: hHeap=0x1f0000) returned 1 [0226.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b40 | out: hHeap=0x1f0000) returned 1 [0226.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a00 | out: hHeap=0x1f0000) returned 1 [0226.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a20 | out: hHeap=0x1f0000) returned 1 [0226.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237b58 | out: hHeap=0x1f0000) returned 1 [0226.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2595a0 | out: hHeap=0x1f0000) returned 1 [0226.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236e38 | out: hHeap=0x1f0000) returned 1 [0226.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2068c8 | out: hHeap=0x1f0000) returned 1 [0226.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffa0 | out: hHeap=0x1f0000) returned 1 [0226.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20fef8 | out: hHeap=0x1f0000) returned 1 [0226.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232e18 | out: hHeap=0x1f0000) returned 1 [0226.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x255c88 | out: hHeap=0x1f0000) returned 1 [0226.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237068 | out: hHeap=0x1f0000) returned 1 [0226.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ef8 | out: hHeap=0x1f0000) returned 1 [0226.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2360c0 | out: hHeap=0x1f0000) returned 1 [0226.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e828 | out: hHeap=0x1f0000) returned 1 [0226.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228cf8 | out: hHeap=0x1f0000) returned 1 [0226.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0226.060] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1036\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1036\\localizeddata.xml")) returned 1 [0226.062] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0226.062] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238d38 [0226.062] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2285a8 [0226.063] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235aa8 [0226.063] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2285a8 | out: hHeap=0x1f0000) returned 1 [0226.063] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235de8 | out: hHeap=0x1f0000) returned 1 [0226.063] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238d38 | out: hHeap=0x1f0000) returned 1 [0226.064] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1036\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1036\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0226.064] GetFileType (hFile=0x1ac) returned 0x1 [0226.401] CloseHandle (hObject=0x1ac) returned 1 [0226.401] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235eb8 [0226.402] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1036\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1036\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x173eb6c | out: lpFileInformation=0x173eb6c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958)) returned 1 [0226.402] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235eb8 | out: hHeap=0x1f0000) returned 1 [0226.402] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235eb8 [0226.402] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1036\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1036\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x173eb7c | out: lpFileInformation=0x173eb7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958)) returned 1 [0226.402] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235eb8 | out: hHeap=0x1f0000) returned 1 [0226.402] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235c48 [0226.402] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235c48 | out: hHeap=0x1f0000) returned 1 [0226.402] GetLastError () returned 0x0 [0226.403] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x213708) returned 1 [0226.404] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2381b8 | out: pbBuffer=0x2381b8) returned 1 [0226.404] CryptReleaseContext (hProv=0x213708, dwFlags=0x0) returned 1 [0226.404] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0226.404] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x255c88 [0226.404] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2376f8 [0226.404] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=38377305184) returned 1 [0226.404] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0226.404] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=38377328583) returned 1 [0226.404] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0226.405] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239208 [0226.405] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x252370 [0226.405] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x237068 [0226.405] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x2338a8 [0226.405] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2100a8 [0226.405] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2067d8 [0226.405] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff28 [0226.405] GetLastError () returned 0x0 [0226.411] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1036\\SetupResources.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1036\\setupresources.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e230, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0226.412] GetFileType (hFile=0x1ac) returned 0x1 [0226.412] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a80 [0226.412] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ac0 [0226.412] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1036\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1036\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0226.413] GetFileType (hFile=0x1e0) returned 0x1 [0226.413] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bb0 [0226.413] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204b90 [0226.413] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261218 [0226.413] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389f0 [0226.413] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ad0 [0226.414] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1036\\SetupResources.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1036\\setupresources.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1bc [0226.414] GetFileType (hFile=0x1bc) returned 0x1 [0226.414] GetLastError () returned 0xb7 [0226.414] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1036\\SetupResources.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1036\\setupresources.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0226.414] GetFileType (hFile=0x1f4) returned 0x1 [0226.415] GetLastError () returned 0xb7 [0226.415] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1036\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1036\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1a4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0226.415] GetFileType (hFile=0x1d8) returned 0x1 [0226.415] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x289fb0 [0226.415] ReadFile (in: hFile=0x1d8, lpBuffer=0x289fb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e100, lpOverlapped=0x0 | out: lpBuffer=0x289fb0*, lpNumberOfBytesRead=0x173e100*=0x1000, lpOverlapped=0x0) returned 1 [0226.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24bdf0 [0226.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28bfc0 [0226.457] GetLastError () returned 0x0 [0226.459] CloseHandle (hObject=0x1ac) returned 1 [0226.463] CloseHandle (hObject=0x1e0) returned 1 [0226.464] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ae0 [0226.464] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b30 [0226.465] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1036\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1036\\setupresources.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0226.466] GetFileType (hFile=0x1e0) returned 0x1 [0226.467] GetLastError () returned 0xb7 [0226.468] CloseHandle (hObject=0x1e0) returned 1 [0226.469] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1036\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1036\\setupresources.dll")) returned 0 [0226.469] GetLastError () returned 0x20 [0226.469] GetLastError () returned 0x20 [0226.469] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x213680) returned 1 [0226.470] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238320 | out: pbBuffer=0x238320) returned 1 [0226.470] CryptReleaseContext (hProv=0x213680, dwFlags=0x0) returned 1 [0226.470] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0226.470] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238320 [0226.470] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238398 [0226.470] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238d38 [0226.470] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0226.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0226.490] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238d38 | out: hHeap=0x1f0000) returned 1 [0226.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8110 [0226.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210198 [0226.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x235de8 [0226.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238320 [0226.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285bf0 [0226.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f70 [0226.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235f88 [0226.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238618 [0226.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x284f90 [0226.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b20 [0226.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385a0 [0226.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210258 [0226.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b40 [0226.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238578 [0226.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0226.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0226.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238578 | out: hHeap=0x1f0000) returned 1 [0226.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b40 | out: hHeap=0x1f0000) returned 1 [0226.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0226.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385a0 | out: hHeap=0x1f0000) returned 1 [0226.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b20 | out: hHeap=0x1f0000) returned 1 [0226.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x284f90 | out: hHeap=0x1f0000) returned 1 [0226.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238618 | out: hHeap=0x1f0000) returned 1 [0226.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235f88 | out: hHeap=0x1f0000) returned 1 [0226.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239278 [0226.492] GetLastError () returned 0x0 [0226.493] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173df20 | out: lpSystemTimeAsFileTime=0x173df20) [0226.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238b20 [0226.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384d8 [0226.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c50 [0226.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c50 | out: hHeap=0x1f0000) returned 1 [0226.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384d8 | out: hHeap=0x1f0000) returned 1 [0226.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238708 [0226.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0226.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d70 | out: hHeap=0x1f0000) returned 1 [0226.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238708 | out: hHeap=0x1f0000) returned 1 [0226.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b20 | out: hHeap=0x1f0000) returned 1 [0226.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0226.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238e18 [0226.493] GetLastError () returned 0x0 [0226.494] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1036\\SetupResources.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1036\\setupresources.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e290, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0226.496] GetFileType (hFile=0x1e0) returned 0x1 [0226.496] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x290fe8 [0226.497] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e218 | out: lpNewFilePointer=0x0) returned 1 [0226.497] GetLastError () returned 0xb7 [0226.498] CloseHandle (hObject=0x1e0) returned 1 [0226.499] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b40 | out: hHeap=0x1f0000) returned 1 [0226.499] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b20 | out: hHeap=0x1f0000) returned 1 [0226.499] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285ae8 | out: hHeap=0x1f0000) returned 1 [0226.500] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285bf0 | out: hHeap=0x1f0000) returned 1 [0226.500] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0226.500] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f70 | out: hHeap=0x1f0000) returned 1 [0226.500] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235de8 | out: hHeap=0x1f0000) returned 1 [0226.500] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0226.500] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8110 | out: hHeap=0x1f0000) returned 1 [0226.500] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236d20 | out: hHeap=0x1f0000) returned 1 [0226.500] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0226.500] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0226.500] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25a8a8 | out: hHeap=0x1f0000) returned 1 [0226.500] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237b58 | out: hHeap=0x1f0000) returned 1 [0226.500] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239208 | out: hHeap=0x1f0000) returned 1 [0226.500] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238af0 | out: hHeap=0x1f0000) returned 1 [0226.500] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210078 | out: hHeap=0x1f0000) returned 1 [0226.500] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238730 | out: hHeap=0x1f0000) returned 1 [0226.500] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b00 | out: hHeap=0x1f0000) returned 1 [0226.500] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffa0 | out: hHeap=0x1f0000) returned 1 [0226.500] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238550 | out: hHeap=0x1f0000) returned 1 [0226.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b10 | out: hHeap=0x1f0000) returned 1 [0226.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285e00 | out: hHeap=0x1f0000) returned 1 [0226.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2386e0 | out: hHeap=0x1f0000) returned 1 [0226.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235c48 | out: hHeap=0x1f0000) returned 1 [0226.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2287e8 | out: hHeap=0x1f0000) returned 1 [0226.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0226.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0226.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2287a0 | out: hHeap=0x1f0000) returned 1 [0226.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b30 | out: hHeap=0x1f0000) returned 1 [0226.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ae0 | out: hHeap=0x1f0000) returned 1 [0226.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x289fb0 | out: hHeap=0x1f0000) returned 1 [0226.501] CloseHandle (hObject=0x1d8) returned 1 [0226.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238aa0 | out: hHeap=0x1f0000) returned 1 [0226.502] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a70 | out: hHeap=0x1f0000) returned 1 [0226.502] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224060 | out: hHeap=0x1f0000) returned 1 [0226.502] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24bdf0 | out: hHeap=0x1f0000) returned 1 [0226.502] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffb8 | out: hHeap=0x1f0000) returned 1 [0226.502] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f50 | out: hHeap=0x1f0000) returned 1 [0227.008] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28bfc0 | out: hHeap=0x1f0000) returned 1 [0227.009] CloseHandle (hObject=0x1f4) returned 1 [0227.009] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a90 | out: hHeap=0x1f0000) returned 1 [0227.009] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a00 | out: hHeap=0x1f0000) returned 1 [0227.009] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261388 | out: hHeap=0x1f0000) returned 1 [0227.009] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bb0 | out: hHeap=0x1f0000) returned 1 [0227.010] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0227.010] CloseHandle (hObject=0x1bc) returned 1 [0227.010] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ad0 | out: hHeap=0x1f0000) returned 1 [0227.010] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389f0 | out: hHeap=0x1f0000) returned 1 [0227.011] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261218 | out: hHeap=0x1f0000) returned 1 [0227.011] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ac0 | out: hHeap=0x1f0000) returned 1 [0227.011] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a80 | out: hHeap=0x1f0000) returned 1 [0227.011] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b60 | out: hHeap=0x1f0000) returned 1 [0227.011] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a20 | out: hHeap=0x1f0000) returned 1 [0227.011] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237298 | out: hHeap=0x1f0000) returned 1 [0227.011] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x252370 | out: hHeap=0x1f0000) returned 1 [0227.011] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237068 | out: hHeap=0x1f0000) returned 1 [0227.011] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2067d8 | out: hHeap=0x1f0000) returned 1 [0227.011] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff28 | out: hHeap=0x1f0000) returned 1 [0227.011] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2100a8 | out: hHeap=0x1f0000) returned 1 [0227.011] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2338a8 | out: hHeap=0x1f0000) returned 1 [0227.012] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x255c88 | out: hHeap=0x1f0000) returned 1 [0227.012] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2376f8 | out: hHeap=0x1f0000) returned 1 [0227.012] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238d00 | out: hHeap=0x1f0000) returned 1 [0227.012] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235eb8 | out: hHeap=0x1f0000) returned 1 [0227.012] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f350 | out: hHeap=0x1f0000) returned 1 [0227.012] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228908 | out: hHeap=0x1f0000) returned 1 [0227.012] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0227.012] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1036\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1036\\setupresources.dll")) returned 1 [0227.014] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0227.014] FindClose (in: hFindFile=0x24ea00 | out: hFindFile=0x24ea00) returned 1 [0227.015] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235aa8 | out: hHeap=0x1f0000) returned 1 [0227.015] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e4f8 | out: hHeap=0x1f0000) returned 1 [0227.015] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0227.015] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228b00 | out: hHeap=0x1f0000) returned 1 [0227.015] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2285f0 [0227.015] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0227.015] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22dd00 [0227.015] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228998 [0227.015] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1037\\*", lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e940 [0227.016] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228ab8 [0227.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228998 | out: hHeap=0x1f0000) returned 1 [0227.016] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0227.016] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0227.016] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228cf8 [0227.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228ab8 | out: hHeap=0x1f0000) returned 1 [0227.016] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0227.016] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0227.016] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x1ac3, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0227.016] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0227.016] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228b00 [0227.016] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x235eb8 [0227.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228b00 | out: hHeap=0x1f0000) returned 1 [0227.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228cf8 | out: hHeap=0x1f0000) returned 1 [0227.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0227.017] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1037\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1037\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1bc [0227.018] GetFileType (hFile=0x1bc) returned 0x1 [0227.018] CloseHandle (hObject=0x1bc) returned 1 [0227.019] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8950 [0227.019] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1037\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1037\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x173eb6c | out: lpFileInformation=0x173eb6c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x1ac3)) returned 1 [0227.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8950 | out: hHeap=0x1f0000) returned 1 [0227.019] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a81c0 [0227.019] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1037\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1037\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x173eb7c | out: lpFileInformation=0x173eb7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x1ac3)) returned 1 [0227.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a81c0 | out: hHeap=0x1f0000) returned 1 [0227.019] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a84d8 [0227.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a84d8 | out: hHeap=0x1f0000) returned 1 [0227.020] GetLastError () returned 0x0 [0227.020] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x212b58) returned 1 [0227.021] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238168 | out: pbBuffer=0x238168) returned 1 [0227.021] CryptReleaseContext (hProv=0x212b58, dwFlags=0x0) returned 1 [0227.021] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0227.021] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x258298 [0227.021] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x236f50 [0227.021] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=38439000917) returned 1 [0227.021] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0227.021] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=38439031706) returned 1 [0227.022] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0227.022] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238c90 [0227.022] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x24fd60 [0227.022] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x237180 [0227.022] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x233158 [0227.022] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210018 [0227.022] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206628 [0227.022] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20fef8 [0227.022] GetLastError () returned 0x0 [0227.023] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1037\\eula.rtf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1037\\eula.rtf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e230, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0227.636] GetFileType (hFile=0x1e0) returned 0x1 [0227.637] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ad0 [0227.637] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389e0 [0227.638] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1037\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1037\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0227.638] GetFileType (hFile=0x1ac) returned 0x1 [0227.638] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204db0 [0227.638] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f50 [0227.638] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad130 [0227.638] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b10 [0227.639] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238aa0 [0227.639] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1037\\eula.rtf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1037\\eula.rtf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0227.639] GetFileType (hFile=0x210) returned 0x1 [0227.639] GetLastError () returned 0xb7 [0227.640] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1037\\eula.rtf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1037\\eula.rtf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0227.640] GetFileType (hFile=0x224) returned 0x1 [0227.640] GetLastError () returned 0xb7 [0227.640] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1037\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1037\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1a4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0227.640] GetFileType (hFile=0x1b0) returned 0x1 [0227.641] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28efd8 [0227.641] ReadFile (in: hFile=0x1b0, lpBuffer=0x28efd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e100, lpOverlapped=0x0 | out: lpBuffer=0x28efd8*, lpNumberOfBytesRead=0x173e100*=0x1000, lpOverlapped=0x0) returned 1 [0227.654] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24a9c8 [0227.654] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28ffe0 [0227.654] GetLastError () returned 0x0 [0227.658] CloseHandle (hObject=0x1e0) returned 1 [0227.664] CloseHandle (hObject=0x1ac) returned 1 [0227.664] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a60 [0227.664] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b80 [0227.665] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1037\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1037\\eula.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0227.667] GetFileType (hFile=0x1ac) returned 0x1 [0227.667] GetLastError () returned 0xb7 [0227.669] CloseHandle (hObject=0x1ac) returned 1 [0227.669] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1037\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1037\\eula.rtf")) returned 0 [0227.669] GetLastError () returned 0x20 [0227.669] GetLastError () returned 0x20 [0227.670] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x2132c8) returned 1 [0227.670] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238208 | out: pbBuffer=0x238208) returned 1 [0227.670] CryptReleaseContext (hProv=0x2132c8, dwFlags=0x0) returned 1 [0227.671] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0227.671] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2383e8 [0227.671] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238208 [0227.671] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238e50 [0227.671] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0227.671] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0227.671] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238e50 | out: hHeap=0x1f0000) returned 1 [0227.671] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8270 [0227.671] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0227.671] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x236260 [0227.671] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238078 [0227.671] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2851a0 [0227.671] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f50 [0227.672] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2359d8 [0227.672] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2383e8 [0227.672] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285ae8 [0227.672] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b20 [0227.672] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0227.672] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210210 [0227.672] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a80 [0227.672] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238780 [0227.672] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0227.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0227.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238780 | out: hHeap=0x1f0000) returned 1 [0227.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a80 | out: hHeap=0x1f0000) returned 1 [0227.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0227.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0227.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b20 | out: hHeap=0x1f0000) returned 1 [0227.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285ae8 | out: hHeap=0x1f0000) returned 1 [0227.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0227.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2359d8 | out: hHeap=0x1f0000) returned 1 [0227.673] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239208 [0227.673] GetLastError () returned 0x0 [0227.673] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173df20 | out: lpSystemTimeAsFileTime=0x173df20) [0227.674] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238a50 [0227.674] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0227.674] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c90 [0227.674] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c90 | out: hHeap=0x1f0000) returned 1 [0227.674] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0227.674] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0227.674] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f70 [0227.674] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f70 | out: hHeap=0x1f0000) returned 1 [0227.674] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0227.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a50 | out: hHeap=0x1f0000) returned 1 [0227.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0227.675] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238c90 [0227.675] GetLastError () returned 0x0 [0227.675] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1037\\eula.rtf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1037\\eula.rtf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e290, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0227.675] GetFileType (hFile=0x1ac) returned 0x1 [0227.676] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x288fa8 [0227.676] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e218 | out: lpNewFilePointer=0x0) returned 1 [0227.676] GetLastError () returned 0xb7 [0227.677] CloseHandle (hObject=0x1ac) returned 1 [0227.677] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a50 | out: hHeap=0x1f0000) returned 1 [0227.677] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b20 | out: hHeap=0x1f0000) returned 1 [0227.677] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2854b8 | out: hHeap=0x1f0000) returned 1 [0227.677] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2851a0 | out: hHeap=0x1f0000) returned 1 [0227.677] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0227.677] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f50 | out: hHeap=0x1f0000) returned 1 [0227.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236260 | out: hHeap=0x1f0000) returned 1 [0227.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0227.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8270 | out: hHeap=0x1f0000) returned 1 [0227.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2373b0 | out: hHeap=0x1f0000) returned 1 [0227.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0227.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0227.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x251068 | out: hHeap=0x1f0000) returned 1 [0227.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237810 | out: hHeap=0x1f0000) returned 1 [0227.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239278 | out: hHeap=0x1f0000) returned 1 [0227.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a20 | out: hHeap=0x1f0000) returned 1 [0227.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffb8 | out: hHeap=0x1f0000) returned 1 [0227.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0227.679] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a30 | out: hHeap=0x1f0000) returned 1 [0227.679] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2100a8 | out: hHeap=0x1f0000) returned 1 [0227.679] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0227.679] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b50 | out: hHeap=0x1f0000) returned 1 [0227.679] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285098 | out: hHeap=0x1f0000) returned 1 [0227.679] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0227.680] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235e50 | out: hHeap=0x1f0000) returned 1 [0227.680] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228bd8 | out: hHeap=0x1f0000) returned 1 [0227.680] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0227.680] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0227.680] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228638 | out: hHeap=0x1f0000) returned 1 [0227.680] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b80 | out: hHeap=0x1f0000) returned 1 [0227.680] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a60 | out: hHeap=0x1f0000) returned 1 [0227.680] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28efd8 | out: hHeap=0x1f0000) returned 1 [0227.680] CloseHandle (hObject=0x1b0) returned 1 [0227.681] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a10 | out: hHeap=0x1f0000) returned 1 [0227.681] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b40 | out: hHeap=0x1f0000) returned 1 [0227.681] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2242a0 | out: hHeap=0x1f0000) returned 1 [0227.681] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24a9c8 | out: hHeap=0x1f0000) returned 1 [0227.681] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210078 | out: hHeap=0x1f0000) returned 1 [0227.681] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cf0 | out: hHeap=0x1f0000) returned 1 [0227.681] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28ffe0 | out: hHeap=0x1f0000) returned 1 [0227.682] CloseHandle (hObject=0x224) returned 1 [0227.682] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ab0 | out: hHeap=0x1f0000) returned 1 [0227.682] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a70 | out: hHeap=0x1f0000) returned 1 [0227.682] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad6f0 | out: hHeap=0x1f0000) returned 1 [0227.682] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f30 | out: hHeap=0x1f0000) returned 1 [0227.682] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239be0 | out: hHeap=0x1f0000) returned 1 [0227.682] CloseHandle (hObject=0x210) returned 1 [0227.683] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238aa0 | out: hHeap=0x1f0000) returned 1 [0227.683] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b10 | out: hHeap=0x1f0000) returned 1 [0227.683] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad130 | out: hHeap=0x1f0000) returned 1 [0227.683] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389e0 | out: hHeap=0x1f0000) returned 1 [0227.683] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ad0 | out: hHeap=0x1f0000) returned 1 [0227.683] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ba0 | out: hHeap=0x1f0000) returned 1 [0227.683] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389f0 | out: hHeap=0x1f0000) returned 1 [0227.683] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21b558 | out: hHeap=0x1f0000) returned 1 [0227.683] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24fd60 | out: hHeap=0x1f0000) returned 1 [0227.683] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237180 | out: hHeap=0x1f0000) returned 1 [0227.683] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206628 | out: hHeap=0x1f0000) returned 1 [0227.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20fef8 | out: hHeap=0x1f0000) returned 1 [0227.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210018 | out: hHeap=0x1f0000) returned 1 [0227.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233158 | out: hHeap=0x1f0000) returned 1 [0227.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x258298 | out: hHeap=0x1f0000) returned 1 [0227.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236f50 | out: hHeap=0x1f0000) returned 1 [0227.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238e88 | out: hHeap=0x1f0000) returned 1 [0227.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8110 | out: hHeap=0x1f0000) returned 1 [0227.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e360 | out: hHeap=0x1f0000) returned 1 [0227.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228680 | out: hHeap=0x1f0000) returned 1 [0227.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0227.684] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1037\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1037\\eula.rtf")) returned 1 [0227.686] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1198c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0227.686] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c20 [0227.686] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228638 [0227.686] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2357d0 [0227.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228638 | out: hHeap=0x1f0000) returned 1 [0227.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235eb8 | out: hHeap=0x1f0000) returned 1 [0227.687] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c20 | out: hHeap=0x1f0000) returned 1 [0227.687] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1037\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1037\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0227.687] GetFileType (hFile=0x210) returned 0x1 [0227.688] CloseHandle (hObject=0x210) returned 1 [0227.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235e50 [0227.688] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1037\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1037\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x173eb6c | out: lpFileInformation=0x173eb6c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1198c)) returned 1 [0227.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235e50 | out: hHeap=0x1f0000) returned 1 [0227.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236330 [0227.689] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1037\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1037\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x173eb7c | out: lpFileInformation=0x173eb7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1198c)) returned 1 [0227.689] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236330 | out: hHeap=0x1f0000) returned 1 [0227.689] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235ff0 [0227.689] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235ff0 | out: hHeap=0x1f0000) returned 1 [0227.689] GetLastError () returned 0x0 [0227.689] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x213350) returned 1 [0227.690] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238398 | out: pbBuffer=0x238398) returned 1 [0227.690] CryptReleaseContext (hProv=0x213350, dwFlags=0x0) returned 1 [0227.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0227.691] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x258298 [0227.691] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2374c8 [0227.691] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=38505991860) returned 1 [0227.691] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0227.691] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=38506025005) returned 1 [0227.691] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0227.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238c58 [0227.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x24fd60 [0227.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2373b0 [0227.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x232ba8 [0227.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210018 [0227.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206628 [0227.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20fef8 [0227.692] GetLastError () returned 0x0 [0227.985] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1037\\LocalizedData.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1037\\localizeddata.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e230, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0227.986] GetFileType (hFile=0x210) returned 0x1 [0227.986] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ba0 [0227.986] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a20 [0227.987] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1037\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1037\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0227.987] GetFileType (hFile=0x224) returned 0x1 [0227.987] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cf0 [0227.987] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204dd0 [0227.987] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2adcb0 [0227.987] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238aa0 [0227.988] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389e0 [0227.988] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1037\\LocalizedData.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1037\\localizeddata.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0227.988] GetFileType (hFile=0x1b0) returned 0x1 [0227.988] GetLastError () returned 0xb7 [0227.989] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1037\\LocalizedData.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1037\\localizeddata.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0227.989] GetFileType (hFile=0x1ac) returned 0x1 [0227.989] GetLastError () returned 0xb7 [0227.990] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1037\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1037\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1a4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0227.990] GetFileType (hFile=0x1e0) returned 0x1 [0227.990] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28ffe0 [0227.990] ReadFile (in: hFile=0x1e0, lpBuffer=0x28ffe0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e100, lpOverlapped=0x0 | out: lpBuffer=0x28ffe0*, lpNumberOfBytesRead=0x173e100*=0x1000, lpOverlapped=0x0) returned 1 [0227.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24c600 [0227.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x288fa8 [0227.994] GetLastError () returned 0x0 [0227.997] CloseHandle (hObject=0x210) returned 1 [0228.003] CloseHandle (hObject=0x224) returned 1 [0228.004] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a50 [0228.004] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b10 [0228.005] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1037\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1037\\localizeddata.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0228.008] GetFileType (hFile=0x224) returned 0x1 [0228.009] GetLastError () returned 0xb7 [0228.010] CloseHandle (hObject=0x224) returned 1 [0228.011] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1037\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1037\\localizeddata.xml")) returned 0 [0228.011] GetLastError () returned 0x20 [0228.011] GetLastError () returned 0x20 [0228.011] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x212c68) returned 1 [0228.012] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2382f8 | out: pbBuffer=0x2382f8) returned 1 [0228.012] CryptReleaseContext (hProv=0x212c68, dwFlags=0x0) returned 1 [0228.012] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0228.012] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2382f8 [0228.012] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238398 [0228.012] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239208 [0228.013] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0228.013] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0228.013] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239208 | out: hHeap=0x1f0000) returned 1 [0228.013] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8270 [0228.013] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210258 [0228.013] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x235e50 [0228.013] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2382f8 [0228.013] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285ae8 [0228.013] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c90 [0228.013] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236190 [0228.014] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238410 [0228.014] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285098 [0228.014] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389f0 [0228.014] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238578 [0228.014] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210240 [0228.014] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a60 [0228.014] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384d8 [0228.014] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101b0 [0228.014] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0228.014] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384d8 | out: hHeap=0x1f0000) returned 1 [0228.014] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a60 | out: hHeap=0x1f0000) returned 1 [0228.015] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210240 | out: hHeap=0x1f0000) returned 1 [0228.015] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238578 | out: hHeap=0x1f0000) returned 1 [0228.015] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389f0 | out: hHeap=0x1f0000) returned 1 [0228.015] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285098 | out: hHeap=0x1f0000) returned 1 [0228.015] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0228.015] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236190 | out: hHeap=0x1f0000) returned 1 [0228.015] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239198 [0228.015] GetLastError () returned 0x0 [0228.015] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173df20 | out: lpSystemTimeAsFileTime=0x173df20) [0228.016] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x2389f0 [0228.016] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0228.016] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e30 [0228.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e30 | out: hHeap=0x1f0000) returned 1 [0228.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0228.016] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0228.016] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e30 [0228.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e30 | out: hHeap=0x1f0000) returned 1 [0228.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0228.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389f0 | out: hHeap=0x1f0000) returned 1 [0228.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0228.016] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238f68 [0228.016] GetLastError () returned 0x0 [0228.017] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1037\\LocalizedData.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1037\\localizeddata.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e290, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0228.017] GetFileType (hFile=0x224) returned 0x1 [0228.018] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x291ff0 [0228.018] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e218 | out: lpNewFilePointer=0x0) returned 1 [0228.018] GetLastError () returned 0xb7 [0228.018] CloseHandle (hObject=0x224) returned 1 [0228.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a60 | out: hHeap=0x1f0000) returned 1 [0228.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389f0 | out: hHeap=0x1f0000) returned 1 [0228.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2855c0 | out: hHeap=0x1f0000) returned 1 [0228.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285ae8 | out: hHeap=0x1f0000) returned 1 [0228.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0228.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c90 | out: hHeap=0x1f0000) returned 1 [0228.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235e50 | out: hHeap=0x1f0000) returned 1 [0228.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0228.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8270 | out: hHeap=0x1f0000) returned 1 [0228.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2375e0 | out: hHeap=0x1f0000) returned 1 [0228.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0228.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0228.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x251068 | out: hHeap=0x1f0000) returned 1 [0228.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237180 | out: hHeap=0x1f0000) returned 1 [0228.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c58 | out: hHeap=0x1f0000) returned 1 [0228.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b80 | out: hHeap=0x1f0000) returned 1 [0228.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2100a8 | out: hHeap=0x1f0000) returned 1 [0228.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0228.381] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b40 | out: hHeap=0x1f0000) returned 1 [0228.381] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210078 | out: hHeap=0x1f0000) returned 1 [0228.381] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0228.381] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b20 | out: hHeap=0x1f0000) returned 1 [0228.381] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2854b8 | out: hHeap=0x1f0000) returned 1 [0228.381] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0228.381] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0228.382] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228ab8 | out: hHeap=0x1f0000) returned 1 [0228.382] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0228.382] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0228.382] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228950 | out: hHeap=0x1f0000) returned 1 [0228.382] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b10 | out: hHeap=0x1f0000) returned 1 [0228.382] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a50 | out: hHeap=0x1f0000) returned 1 [0228.382] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28ffe0 | out: hHeap=0x1f0000) returned 1 [0228.383] CloseHandle (hObject=0x1e0) returned 1 [0228.383] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a70 | out: hHeap=0x1f0000) returned 1 [0228.383] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ab0 | out: hHeap=0x1f0000) returned 1 [0228.384] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2248a0 | out: hHeap=0x1f0000) returned 1 [0228.384] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24c600 | out: hHeap=0x1f0000) returned 1 [0228.384] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffb8 | out: hHeap=0x1f0000) returned 1 [0228.384] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cb0 | out: hHeap=0x1f0000) returned 1 [0228.384] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x288fa8 | out: hHeap=0x1f0000) returned 1 [0228.384] CloseHandle (hObject=0x1ac) returned 1 [0228.385] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a90 | out: hHeap=0x1f0000) returned 1 [0228.385] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a30 | out: hHeap=0x1f0000) returned 1 [0228.385] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad358 | out: hHeap=0x1f0000) returned 1 [0228.385] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204dd0 | out: hHeap=0x1f0000) returned 1 [0228.385] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239be0 | out: hHeap=0x1f0000) returned 1 [0228.385] CloseHandle (hObject=0x1b0) returned 1 [0228.386] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389e0 | out: hHeap=0x1f0000) returned 1 [0228.386] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238aa0 | out: hHeap=0x1f0000) returned 1 [0228.386] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2adcb0 | out: hHeap=0x1f0000) returned 1 [0228.386] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a20 | out: hHeap=0x1f0000) returned 1 [0228.386] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ba0 | out: hHeap=0x1f0000) returned 1 [0228.386] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ad0 | out: hHeap=0x1f0000) returned 1 [0228.386] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a10 | out: hHeap=0x1f0000) returned 1 [0228.387] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236e38 | out: hHeap=0x1f0000) returned 1 [0228.387] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24fd60 | out: hHeap=0x1f0000) returned 1 [0228.387] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2373b0 | out: hHeap=0x1f0000) returned 1 [0228.387] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206628 | out: hHeap=0x1f0000) returned 1 [0228.387] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20fef8 | out: hHeap=0x1f0000) returned 1 [0228.387] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210018 | out: hHeap=0x1f0000) returned 1 [0228.387] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232ba8 | out: hHeap=0x1f0000) returned 1 [0228.387] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x258298 | out: hHeap=0x1f0000) returned 1 [0228.387] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2374c8 | out: hHeap=0x1f0000) returned 1 [0228.387] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c20 | out: hHeap=0x1f0000) returned 1 [0228.387] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2359d8 | out: hHeap=0x1f0000) returned 1 [0228.387] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d9d0 | out: hHeap=0x1f0000) returned 1 [0228.387] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228a70 | out: hHeap=0x1f0000) returned 1 [0228.387] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0228.388] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1037\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1037\\localizeddata.xml")) returned 1 [0228.390] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4158, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0228.390] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238f30 [0228.390] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2287e8 [0228.390] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236190 [0228.390] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2287e8 | out: hHeap=0x1f0000) returned 1 [0228.390] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2357d0 | out: hHeap=0x1f0000) returned 1 [0228.390] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238f30 | out: hHeap=0x1f0000) returned 1 [0228.390] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1037\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1037\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0228.391] GetFileType (hFile=0x1b0) returned 0x1 [0228.391] CloseHandle (hObject=0x1b0) returned 1 [0228.391] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235700 [0228.391] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1037\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1037\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x173eb6c | out: lpFileInformation=0x173eb6c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4158)) returned 1 [0228.391] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0228.392] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2357d0 [0228.392] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1037\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1037\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x173eb7c | out: lpFileInformation=0x173eb7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4158)) returned 1 [0228.392] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2357d0 | out: hHeap=0x1f0000) returned 1 [0228.392] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2359d8 [0228.392] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2359d8 | out: hHeap=0x1f0000) returned 1 [0228.392] GetLastError () returned 0x0 [0228.392] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x212c68) returned 1 [0228.393] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2382a8 | out: pbBuffer=0x2382a8) returned 1 [0228.393] CryptReleaseContext (hProv=0x212c68, dwFlags=0x0) returned 1 [0228.393] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0228.393] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x24fd60 [0228.393] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2373b0 [0228.394] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=38576300743) returned 1 [0228.394] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0228.394] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=38576333028) returned 1 [0228.395] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0228.395] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238c20 [0228.395] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x258298 [0228.395] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x236e38 [0228.395] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x233a48 [0228.395] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210018 [0228.395] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206808 [0228.395] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20fef8 [0228.395] GetLastError () returned 0x0 [0228.396] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1037\\SetupResources.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1037\\setupresources.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e230, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0228.397] GetFileType (hFile=0x1b0) returned 0x1 [0228.397] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a70 [0228.398] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b20 [0228.399] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1037\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1037\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0228.399] GetFileType (hFile=0x1ac) returned 0x1 [0228.400] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204dd0 [0228.400] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204b90 [0228.400] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad6f0 [0228.400] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a50 [0228.400] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a80 [0228.401] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1037\\SetupResources.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1037\\setupresources.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0228.401] GetFileType (hFile=0x1e0) returned 0x1 [0228.402] GetLastError () returned 0xb7 [0228.402] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1037\\SetupResources.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1037\\setupresources.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0228.402] GetFileType (hFile=0x224) returned 0x1 [0228.403] GetLastError () returned 0xb7 [0228.403] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1037\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1037\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1a4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0228.403] GetFileType (hFile=0x210) returned 0x1 [0228.404] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28ffe0 [0228.404] ReadFile (in: hFile=0x210, lpBuffer=0x28ffe0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e100, lpOverlapped=0x0 | out: lpBuffer=0x28ffe0*, lpNumberOfBytesRead=0x173e100*=0x1000, lpOverlapped=0x0) returned 1 [0228.407] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24a9c8 [0228.408] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28dfd0 [0228.408] GetLastError () returned 0x0 [0228.410] CloseHandle (hObject=0x1b0) returned 1 [0228.800] CloseHandle (hObject=0x1ac) returned 1 [0228.800] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a30 [0228.801] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b80 [0228.807] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1037\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1037\\setupresources.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0228.809] GetFileType (hFile=0x1ac) returned 0x1 [0228.810] GetLastError () returned 0xb7 [0228.811] CloseHandle (hObject=0x1ac) returned 1 [0228.812] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1037\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1037\\setupresources.dll")) returned 0 [0228.812] GetLastError () returned 0x20 [0228.812] GetLastError () returned 0x20 [0228.813] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x212be0) returned 1 [0228.814] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2382a8 | out: pbBuffer=0x2382a8) returned 1 [0228.814] CryptReleaseContext (hProv=0x212be0, dwFlags=0x0) returned 1 [0228.814] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0228.814] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2382a8 [0228.814] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2384b0 [0228.814] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c58 [0228.814] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0228.814] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0228.814] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c58 | out: hHeap=0x1f0000) returned 1 [0228.815] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a89a8 [0228.815] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101b0 [0228.815] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x2359d8 [0228.815] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238398 [0228.815] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2853b0 [0228.815] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e90 [0228.815] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236058 [0228.815] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2382a8 [0228.815] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285e00 [0228.815] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ad0 [0228.815] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0228.816] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210240 [0228.816] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a20 [0228.816] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238550 [0228.816] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210198 [0228.816] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0228.816] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238550 | out: hHeap=0x1f0000) returned 1 [0228.816] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a20 | out: hHeap=0x1f0000) returned 1 [0228.816] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210240 | out: hHeap=0x1f0000) returned 1 [0228.816] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0228.816] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ad0 | out: hHeap=0x1f0000) returned 1 [0228.816] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285e00 | out: hHeap=0x1f0000) returned 1 [0228.816] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0228.816] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236058 | out: hHeap=0x1f0000) returned 1 [0228.817] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238f30 [0228.817] GetLastError () returned 0x0 [0228.817] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173df20 | out: lpSystemTimeAsFileTime=0x173df20) [0228.817] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238a20 [0228.817] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0228.817] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204dd0 [0228.817] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204dd0 | out: hHeap=0x1f0000) returned 1 [0228.817] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0228.818] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0228.818] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d90 [0228.818] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d90 | out: hHeap=0x1f0000) returned 1 [0228.818] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0228.818] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a20 | out: hHeap=0x1f0000) returned 1 [0228.818] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0228.818] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238e50 [0228.818] GetLastError () returned 0x0 [0228.819] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1037\\SetupResources.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1037\\setupresources.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e290, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0228.819] GetFileType (hFile=0x1ac) returned 0x1 [0228.819] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x290fe8 [0228.820] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e218 | out: lpNewFilePointer=0x0) returned 1 [0228.820] GetLastError () returned 0xb7 [0228.820] CloseHandle (hObject=0x1ac) returned 1 [0228.820] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ad0 | out: hHeap=0x1f0000) returned 1 [0228.820] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389e0 | out: hHeap=0x1f0000) returned 1 [0228.821] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285bf0 | out: hHeap=0x1f0000) returned 1 [0228.821] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2853b0 | out: hHeap=0x1f0000) returned 1 [0228.821] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0228.821] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e90 | out: hHeap=0x1f0000) returned 1 [0228.821] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2359d8 | out: hHeap=0x1f0000) returned 1 [0228.821] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0228.821] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a89a8 | out: hHeap=0x1f0000) returned 1 [0228.821] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237180 | out: hHeap=0x1f0000) returned 1 [0228.821] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0228.822] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0228.822] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x251068 | out: hHeap=0x1f0000) returned 1 [0228.822] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237068 | out: hHeap=0x1f0000) returned 1 [0228.822] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239010 | out: hHeap=0x1f0000) returned 1 [0228.822] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ab0 | out: hHeap=0x1f0000) returned 1 [0228.822] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0228.822] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0228.822] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389f0 | out: hHeap=0x1f0000) returned 1 [0228.822] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff70 | out: hHeap=0x1f0000) returned 1 [0228.822] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0228.822] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ba0 | out: hHeap=0x1f0000) returned 1 [0228.822] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2852a8 | out: hHeap=0x1f0000) returned 1 [0228.822] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0228.822] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235ff0 | out: hHeap=0x1f0000) returned 1 [0228.823] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228bd8 | out: hHeap=0x1f0000) returned 1 [0228.823] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0228.823] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0228.823] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228ab8 | out: hHeap=0x1f0000) returned 1 [0228.823] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b80 | out: hHeap=0x1f0000) returned 1 [0228.823] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a30 | out: hHeap=0x1f0000) returned 1 [0228.823] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28ffe0 | out: hHeap=0x1f0000) returned 1 [0228.823] CloseHandle (hObject=0x210) returned 1 [0228.824] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b40 | out: hHeap=0x1f0000) returned 1 [0228.824] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238aa0 | out: hHeap=0x1f0000) returned 1 [0228.824] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223ee0 | out: hHeap=0x1f0000) returned 1 [0228.824] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24a9c8 | out: hHeap=0x1f0000) returned 1 [0228.824] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffb8 | out: hHeap=0x1f0000) returned 1 [0228.824] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f30 | out: hHeap=0x1f0000) returned 1 [0228.824] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28dfd0 | out: hHeap=0x1f0000) returned 1 [0228.825] CloseHandle (hObject=0x224) returned 1 [0228.825] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a90 | out: hHeap=0x1f0000) returned 1 [0228.825] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a60 | out: hHeap=0x1f0000) returned 1 [0228.825] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad7a8 | out: hHeap=0x1f0000) returned 1 [0228.825] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c90 | out: hHeap=0x1f0000) returned 1 [0228.826] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239be0 | out: hHeap=0x1f0000) returned 1 [0228.826] CloseHandle (hObject=0x1e0) returned 1 [0228.826] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a80 | out: hHeap=0x1f0000) returned 1 [0228.827] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a50 | out: hHeap=0x1f0000) returned 1 [0228.827] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad6f0 | out: hHeap=0x1f0000) returned 1 [0228.827] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b20 | out: hHeap=0x1f0000) returned 1 [0228.827] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a70 | out: hHeap=0x1f0000) returned 1 [0228.827] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b10 | out: hHeap=0x1f0000) returned 1 [0228.827] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a10 | out: hHeap=0x1f0000) returned 1 [0228.827] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236f50 | out: hHeap=0x1f0000) returned 1 [0228.827] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x258298 | out: hHeap=0x1f0000) returned 1 [0228.827] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236e38 | out: hHeap=0x1f0000) returned 1 [0228.828] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206808 | out: hHeap=0x1f0000) returned 1 [0228.828] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20fef8 | out: hHeap=0x1f0000) returned 1 [0228.828] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210018 | out: hHeap=0x1f0000) returned 1 [0228.828] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233a48 | out: hHeap=0x1f0000) returned 1 [0228.828] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24fd60 | out: hHeap=0x1f0000) returned 1 [0228.828] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2373b0 | out: hHeap=0x1f0000) returned 1 [0228.828] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238d70 | out: hHeap=0x1f0000) returned 1 [0228.828] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0228.828] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d6a0 | out: hHeap=0x1f0000) returned 1 [0228.829] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2284d0 | out: hHeap=0x1f0000) returned 1 [0228.829] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0228.829] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1037\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1037\\setupresources.dll")) returned 1 [0228.831] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4158, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0228.831] FindClose (in: hFindFile=0x24e940 | out: hFindFile=0x24e940) returned 1 [0228.831] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236190 | out: hHeap=0x1f0000) returned 1 [0228.832] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22dd00 | out: hHeap=0x1f0000) returned 1 [0228.832] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0228.832] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2285f0 | out: hHeap=0x1f0000) returned 1 [0228.832] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2287e8 [0228.832] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0228.832] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d6a0 [0228.832] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228440 [0228.832] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1038\\*", lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e6c0 [0228.833] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228a70 [0228.833] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228440 | out: hHeap=0x1f0000) returned 1 [0228.833] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0228.833] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0228.834] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2284d0 [0228.834] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228a70 | out: hHeap=0x1f0000) returned 1 [0228.834] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0228.834] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0228.834] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x109e, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0228.834] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0228.834] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228b00 [0228.834] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x235b78 [0228.834] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228b00 | out: hHeap=0x1f0000) returned 1 [0228.834] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2284d0 | out: hHeap=0x1f0000) returned 1 [0228.834] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0228.835] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1038\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1038\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0228.835] GetFileType (hFile=0x1e0) returned 0x1 [0228.836] CloseHandle (hObject=0x1e0) returned 1 [0228.836] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8530 [0228.836] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1038\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1038\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x173eb6c | out: lpFileInformation=0x173eb6c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x109e)) returned 1 [0228.837] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8530 | out: hHeap=0x1f0000) returned 1 [0228.837] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8530 [0228.837] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1038\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1038\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x173eb7c | out: lpFileInformation=0x173eb7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x109e)) returned 1 [0228.837] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8530 | out: hHeap=0x1f0000) returned 1 [0228.837] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8428 [0228.837] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8428 | out: hHeap=0x1f0000) returned 1 [0228.837] GetLastError () returned 0x0 [0228.838] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x212e88) returned 1 [0228.839] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238370 | out: pbBuffer=0x238370) returned 1 [0228.839] CryptReleaseContext (hProv=0x212e88, dwFlags=0x0) returned 1 [0228.839] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0228.839] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x258298 [0228.839] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x236e38 [0228.839] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=38620813568) returned 1 [0228.839] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0228.840] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=38620849645) returned 1 [0228.840] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0228.840] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238cc8 [0228.840] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x24fd60 [0228.840] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2373b0 [0228.840] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x233498 [0228.840] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20fef8 [0228.840] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206808 [0228.840] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff70 [0228.841] GetLastError () returned 0x0 [0228.841] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1038\\eula.rtf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1038\\eula.rtf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e230, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0229.254] GetFileType (hFile=0x230) returned 0x1 [0229.254] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ab0 [0229.255] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a60 [0229.256] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1038\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1038\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0229.256] GetFileType (hFile=0x1d8) returned 0x1 [0229.256] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e30 [0229.257] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f10 [0229.257] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad580 [0229.257] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a70 [0229.257] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a40 [0229.258] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1038\\eula.rtf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1038\\eula.rtf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0229.258] GetFileType (hFile=0x174) returned 0x1 [0229.259] GetLastError () returned 0xb7 [0229.259] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1038\\eula.rtf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1038\\eula.rtf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0229.259] GetFileType (hFile=0x1f4) returned 0x1 [0229.260] GetLastError () returned 0xb7 [0229.260] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1038\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1038\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1a4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0229.260] GetFileType (hFile=0x1e0) returned 0x1 [0229.261] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28efd8 [0229.261] ReadFile (in: hFile=0x1e0, lpBuffer=0x28efd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e100, lpOverlapped=0x0 | out: lpBuffer=0x28efd8*, lpNumberOfBytesRead=0x173e100*=0x1000, lpOverlapped=0x0) returned 1 [0229.263] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24d620 [0229.263] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28bfc0 [0229.263] GetLastError () returned 0x0 [0229.266] CloseHandle (hObject=0x230) returned 1 [0229.289] CloseHandle (hObject=0x1d8) returned 1 [0229.290] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a10 [0229.290] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238aa0 [0229.291] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1038\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1038\\eula.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0229.293] GetFileType (hFile=0x1d8) returned 0x1 [0229.293] GetLastError () returned 0xb7 [0229.294] CloseHandle (hObject=0x1d8) returned 1 [0229.295] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1038\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1038\\eula.rtf")) returned 0 [0229.295] GetLastError () returned 0x20 [0229.295] GetLastError () returned 0x20 [0229.295] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x212e00) returned 1 [0229.296] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2382f8 | out: pbBuffer=0x2382f8) returned 1 [0229.296] CryptReleaseContext (hProv=0x212e00, dwFlags=0x0) returned 1 [0229.296] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0229.296] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2382f8 [0229.297] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238320 [0229.297] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239160 [0229.297] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0229.297] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0229.297] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239160 | out: hHeap=0x1f0000) returned 1 [0229.297] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8270 [0229.297] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210240 [0229.297] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x236260 [0229.297] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2382f8 [0229.298] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2859e0 [0229.298] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bf0 [0229.298] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236330 [0229.298] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238398 [0229.298] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285bf0 [0229.298] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ae0 [0229.298] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0229.298] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210258 [0229.299] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a00 [0229.299] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238578 [0229.299] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101b0 [0229.299] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0229.299] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238578 | out: hHeap=0x1f0000) returned 1 [0229.299] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a00 | out: hHeap=0x1f0000) returned 1 [0229.299] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0229.299] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0229.299] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ae0 | out: hHeap=0x1f0000) returned 1 [0229.300] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285bf0 | out: hHeap=0x1f0000) returned 1 [0229.300] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0229.300] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236330 | out: hHeap=0x1f0000) returned 1 [0229.300] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239208 [0229.300] GetLastError () returned 0x0 [0229.301] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173df20 | out: lpSystemTimeAsFileTime=0x173df20) [0229.301] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238a90 [0229.301] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0229.301] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c30 [0229.301] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c30 | out: hHeap=0x1f0000) returned 1 [0229.301] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0229.302] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0229.302] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d30 [0229.628] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d30 | out: hHeap=0x1f0000) returned 1 [0229.628] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0229.629] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a90 | out: hHeap=0x1f0000) returned 1 [0229.629] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0229.629] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238de0 [0229.629] GetLastError () returned 0x0 [0229.629] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1038\\eula.rtf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1038\\eula.rtf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e290, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0229.630] GetFileType (hFile=0x1d8) returned 0x1 [0229.631] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x289fb0 [0229.631] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e218 | out: lpNewFilePointer=0x0) returned 1 [0229.631] GetLastError () returned 0xb7 [0229.631] CloseHandle (hObject=0x1d8) returned 1 [0229.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b50 | out: hHeap=0x1f0000) returned 1 [0229.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a30 | out: hHeap=0x1f0000) returned 1 [0229.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2854b8 | out: hHeap=0x1f0000) returned 1 [0229.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2859e0 | out: hHeap=0x1f0000) returned 1 [0229.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0229.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bf0 | out: hHeap=0x1f0000) returned 1 [0229.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236260 | out: hHeap=0x1f0000) returned 1 [0229.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210240 | out: hHeap=0x1f0000) returned 1 [0229.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8270 | out: hHeap=0x1f0000) returned 1 [0229.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237298 | out: hHeap=0x1f0000) returned 1 [0229.633] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0229.633] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0229.633] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x251068 | out: hHeap=0x1f0000) returned 1 [0229.633] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237180 | out: hHeap=0x1f0000) returned 1 [0229.633] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2391d0 | out: hHeap=0x1f0000) returned 1 [0229.633] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a80 | out: hHeap=0x1f0000) returned 1 [0229.633] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210018 | out: hHeap=0x1f0000) returned 1 [0229.633] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0229.633] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389e0 | out: hHeap=0x1f0000) returned 1 [0229.633] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffd0 | out: hHeap=0x1f0000) returned 1 [0229.633] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0229.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ac0 | out: hHeap=0x1f0000) returned 1 [0229.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2858d8 | out: hHeap=0x1f0000) returned 1 [0229.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0229.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236058 | out: hHeap=0x1f0000) returned 1 [0229.668] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228950 | out: hHeap=0x1f0000) returned 1 [0229.668] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0229.669] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0229.669] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2285f0 | out: hHeap=0x1f0000) returned 1 [0229.669] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238aa0 | out: hHeap=0x1f0000) returned 1 [0229.669] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a10 | out: hHeap=0x1f0000) returned 1 [0229.669] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28efd8 | out: hHeap=0x1f0000) returned 1 [0229.669] CloseHandle (hObject=0x1e0) returned 1 [0229.670] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b60 | out: hHeap=0x1f0000) returned 1 [0229.670] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b90 | out: hHeap=0x1f0000) returned 1 [0229.670] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224720 | out: hHeap=0x1f0000) returned 1 [0229.670] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24d620 | out: hHeap=0x1f0000) returned 1 [0229.670] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210078 | out: hHeap=0x1f0000) returned 1 [0229.670] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d90 | out: hHeap=0x1f0000) returned 1 [0229.670] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28bfc0 | out: hHeap=0x1f0000) returned 1 [0229.671] CloseHandle (hObject=0x1f4) returned 1 [0229.671] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389f0 | out: hHeap=0x1f0000) returned 1 [0229.671] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ad0 | out: hHeap=0x1f0000) returned 1 [0229.671] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad2a0 | out: hHeap=0x1f0000) returned 1 [0229.671] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204dd0 | out: hHeap=0x1f0000) returned 1 [0229.671] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d368 | out: hHeap=0x1f0000) returned 1 [0229.671] CloseHandle (hObject=0x174) returned 1 [0229.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a40 | out: hHeap=0x1f0000) returned 1 [0229.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a70 | out: hHeap=0x1f0000) returned 1 [0229.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad580 | out: hHeap=0x1f0000) returned 1 [0229.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a60 | out: hHeap=0x1f0000) returned 1 [0229.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ab0 | out: hHeap=0x1f0000) returned 1 [0229.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a20 | out: hHeap=0x1f0000) returned 1 [0229.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a50 | out: hHeap=0x1f0000) returned 1 [0229.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21b558 | out: hHeap=0x1f0000) returned 1 [0229.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24fd60 | out: hHeap=0x1f0000) returned 1 [0229.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2373b0 | out: hHeap=0x1f0000) returned 1 [0229.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206808 | out: hHeap=0x1f0000) returned 1 [0229.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff70 | out: hHeap=0x1f0000) returned 1 [0229.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20fef8 | out: hHeap=0x1f0000) returned 1 [0229.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233498 | out: hHeap=0x1f0000) returned 1 [0229.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x258298 | out: hHeap=0x1f0000) returned 1 [0229.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236e38 | out: hHeap=0x1f0000) returned 1 [0229.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239278 | out: hHeap=0x1f0000) returned 1 [0229.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a87f0 | out: hHeap=0x1f0000) returned 1 [0229.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f020 | out: hHeap=0x1f0000) returned 1 [0229.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228b90 | out: hHeap=0x1f0000) returned 1 [0229.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0229.673] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1038\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1038\\eula.rtf")) returned 1 [0229.675] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x151aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0229.676] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239160 [0229.676] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228950 [0229.676] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236058 [0229.676] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228950 | out: hHeap=0x1f0000) returned 1 [0229.676] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0229.676] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239160 | out: hHeap=0x1f0000) returned 1 [0229.676] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1038\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1038\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0229.677] GetFileType (hFile=0x174) returned 0x1 [0229.677] CloseHandle (hObject=0x174) returned 1 [0229.677] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236330 [0229.677] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1038\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1038\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x173eb6c | out: lpFileInformation=0x173eb6c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x151aa)) returned 1 [0229.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236330 | out: hHeap=0x1f0000) returned 1 [0229.678] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235b78 [0229.678] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1038\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1038\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x173eb7c | out: lpFileInformation=0x173eb7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x151aa)) returned 1 [0229.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0229.678] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236330 [0229.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236330 | out: hHeap=0x1f0000) returned 1 [0229.678] GetLastError () returned 0x0 [0229.678] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58420, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0229.679] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58420, cbMultiByte=4, lpWideCharStr=0x173eca8, cchWideChar=4 | out: lpWideCharStr=".exe") returned 4 [0229.679] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0229.679] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228b00 [0229.679] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f020 [0229.679] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235b78 [0229.679] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239278 [0229.679] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0229.679] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x213680) returned 1 [0229.681] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238078 | out: pbBuffer=0x238078) returned 1 [0229.681] CryptReleaseContext (hProv=0x213680, dwFlags=0x0) returned 1 [0229.681] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0229.681] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x258298 [0229.681] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x237a40 [0229.681] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=38705024808) returned 1 [0229.681] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0229.682] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=38705055843) returned 1 [0229.682] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0229.682] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238ef8 [0229.682] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x24fd60 [0229.682] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2373b0 [0229.682] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x232fb8 [0229.682] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffd0 [0229.682] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206808 [0229.682] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff70 [0229.682] GetLastError () returned 0x0 [0229.683] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ef8 | out: hHeap=0x1f0000) returned 1 [0229.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fc98 [0229.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad6f0 [0229.683] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fc98 | out: hHeap=0x1f0000) returned 1 [0229.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x106) returned 0x237180 [0229.683] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad6f0 | out: hHeap=0x1f0000) returned 1 [0229.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a90 [0229.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b00 [0229.684] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1038\\LocalizedData.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1038\\localizeddata.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e230, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0229.685] GetFileType (hFile=0x174) returned 0x1 [0229.685] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b60 [0229.685] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238aa0 [0229.686] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1038\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1038\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0229.686] GetFileType (hFile=0x1f4) returned 0x1 [0229.686] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c70 [0229.686] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d30 [0229.686] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad860 [0229.687] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a20 [0229.687] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b30 [0229.687] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1038\\LocalizedData.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1038\\localizeddata.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0229.688] GetFileType (hFile=0x1e0) returned 0x1 [0229.688] GetLastError () returned 0xb7 [0229.688] GetLastError () returned 0xb7 [0229.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c70 | out: hHeap=0x1f0000) returned 1 [0229.689] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d30 | out: hHeap=0x1f0000) returned 1 [0229.689] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe4) returned 0x217038 [0229.689] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c70 [0229.689] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204dd0 [0229.689] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bb0 [0229.689] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad2a0 [0229.689] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b70 [0229.689] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ac0 [0229.690] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1038\\LocalizedData.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1038\\localizeddata.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0229.690] GetFileType (hFile=0x1d8) returned 0x1 [0229.691] GetLastError () returned 0xb7 [0229.691] GetLastError () returned 0xb7 [0229.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204dd0 | out: hHeap=0x1f0000) returned 1 [0229.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bb0 | out: hHeap=0x1f0000) returned 1 [0229.691] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f10 [0229.691] GetLastError () returned 0xb7 [0229.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f10 | out: hHeap=0x1f0000) returned 1 [0229.691] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0229.691] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e70 [0229.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f50 [0229.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb8) returned 0x224960 [0229.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b80 [0229.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ad0 [0229.693] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1038\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1038\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1a4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0229.694] GetFileType (hFile=0x230) returned 0x1 [0229.694] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28bfc0 [0229.694] ReadFile (in: hFile=0x230, lpBuffer=0x28bfc0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e100, lpOverlapped=0x0 | out: lpBuffer=0x28bfc0*, lpNumberOfBytesRead=0x173e100*=0x1000, lpOverlapped=0x0) returned 1 [0230.055] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24c600 [0230.056] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x288fa8 [0230.056] GetLastError () returned 0x0 [0230.061] CloseHandle (hObject=0x174) returned 1 [0230.067] CloseHandle (hObject=0x1f4) returned 1 [0230.068] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a50 [0230.068] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ae0 [0230.069] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1038\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1038\\localizeddata.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0230.072] GetFileType (hFile=0x1f4) returned 0x1 [0230.073] GetLastError () returned 0xb7 [0230.075] CloseHandle (hObject=0x1f4) returned 1 [0230.075] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1038\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1038\\localizeddata.xml")) returned 0 [0230.076] GetLastError () returned 0x20 [0230.076] GetLastError () returned 0x20 [0230.076] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x213708) returned 1 [0230.077] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238118 | out: pbBuffer=0x238118) returned 1 [0230.077] CryptReleaseContext (hProv=0x213708, dwFlags=0x0) returned 1 [0230.077] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0230.078] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238118 [0230.078] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2382f8 [0230.078] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238d70 [0230.078] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0230.078] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0230.078] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238d70 | out: hHeap=0x1f0000) returned 1 [0230.078] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a84d8 [0230.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0230.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x236330 [0230.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238118 [0230.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2857d0 [0230.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cf0 [0230.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236608 [0230.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238320 [0230.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2859e0 [0230.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b40 [0230.080] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238780 [0230.080] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0230.080] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a30 [0230.080] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238730 [0230.080] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101b0 [0230.080] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0230.080] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238730 | out: hHeap=0x1f0000) returned 1 [0230.080] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a30 | out: hHeap=0x1f0000) returned 1 [0230.080] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0230.080] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238780 | out: hHeap=0x1f0000) returned 1 [0230.081] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b40 | out: hHeap=0x1f0000) returned 1 [0230.081] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2859e0 | out: hHeap=0x1f0000) returned 1 [0230.081] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0230.081] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236608 | out: hHeap=0x1f0000) returned 1 [0230.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239080 [0230.081] GetLastError () returned 0x0 [0230.081] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173df20 | out: lpSystemTimeAsFileTime=0x173df20) [0230.082] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238a30 [0230.082] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0230.082] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d30 [0230.082] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d30 | out: hHeap=0x1f0000) returned 1 [0230.082] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0230.082] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0230.082] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c30 [0230.082] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c30 | out: hHeap=0x1f0000) returned 1 [0230.082] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0230.083] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a30 | out: hHeap=0x1f0000) returned 1 [0230.083] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0230.083] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238d70 [0230.083] GetLastError () returned 0x0 [0230.083] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1038\\LocalizedData.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1038\\localizeddata.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e290, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0230.084] GetFileType (hFile=0x1f4) returned 0x1 [0230.084] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28efd8 [0230.084] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e218 | out: lpNewFilePointer=0x0) returned 1 [0230.085] GetLastError () returned 0xb7 [0230.085] CloseHandle (hObject=0x1f4) returned 1 [0230.085] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a40 | out: hHeap=0x1f0000) returned 1 [0230.085] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a70 | out: hHeap=0x1f0000) returned 1 [0230.085] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2856c8 | out: hHeap=0x1f0000) returned 1 [0230.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2857d0 | out: hHeap=0x1f0000) returned 1 [0230.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0230.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cf0 | out: hHeap=0x1f0000) returned 1 [0230.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236330 | out: hHeap=0x1f0000) returned 1 [0230.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0230.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a84d8 | out: hHeap=0x1f0000) returned 1 [0230.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237810 | out: hHeap=0x1f0000) returned 1 [0230.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0230.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0230.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x251068 | out: hHeap=0x1f0000) returned 1 [0230.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236f50 | out: hHeap=0x1f0000) returned 1 [0230.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2390b8 | out: hHeap=0x1f0000) returned 1 [0230.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a00 | out: hHeap=0x1f0000) returned 1 [0230.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210078 | out: hHeap=0x1f0000) returned 1 [0230.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0230.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a60 | out: hHeap=0x1f0000) returned 1 [0230.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20fef8 | out: hHeap=0x1f0000) returned 1 [0230.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0230.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a10 | out: hHeap=0x1f0000) returned 1 [0230.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2854b8 | out: hHeap=0x1f0000) returned 1 [0230.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0230.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236260 | out: hHeap=0x1f0000) returned 1 [0230.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2287a0 | out: hHeap=0x1f0000) returned 1 [0230.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0230.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0230.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2284d0 | out: hHeap=0x1f0000) returned 1 [0230.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ae0 | out: hHeap=0x1f0000) returned 1 [0230.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a50 | out: hHeap=0x1f0000) returned 1 [0230.088] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28bfc0 | out: hHeap=0x1f0000) returned 1 [0230.088] CloseHandle (hObject=0x230) returned 1 [0230.088] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ad0 | out: hHeap=0x1f0000) returned 1 [0230.088] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b80 | out: hHeap=0x1f0000) returned 1 [0230.088] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224960 | out: hHeap=0x1f0000) returned 1 [0230.089] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24c600 | out: hHeap=0x1f0000) returned 1 [0230.089] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210018 | out: hHeap=0x1f0000) returned 1 [0230.089] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d70 | out: hHeap=0x1f0000) returned 1 [0230.089] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x288fa8 | out: hHeap=0x1f0000) returned 1 [0230.089] CloseHandle (hObject=0x1d8) returned 1 [0230.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ac0 | out: hHeap=0x1f0000) returned 1 [0230.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b70 | out: hHeap=0x1f0000) returned 1 [0230.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad2a0 | out: hHeap=0x1f0000) returned 1 [0230.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c70 | out: hHeap=0x1f0000) returned 1 [0230.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0230.090] CloseHandle (hObject=0x1e0) returned 1 [0230.091] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b30 | out: hHeap=0x1f0000) returned 1 [0230.091] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a20 | out: hHeap=0x1f0000) returned 1 [0230.091] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad860 | out: hHeap=0x1f0000) returned 1 [0230.091] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238aa0 | out: hHeap=0x1f0000) returned 1 [0230.092] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b60 | out: hHeap=0x1f0000) returned 1 [0230.092] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b00 | out: hHeap=0x1f0000) returned 1 [0230.092] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a90 | out: hHeap=0x1f0000) returned 1 [0230.092] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237180 | out: hHeap=0x1f0000) returned 1 [0230.092] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24fd60 | out: hHeap=0x1f0000) returned 1 [0230.092] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2373b0 | out: hHeap=0x1f0000) returned 1 [0230.092] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206808 | out: hHeap=0x1f0000) returned 1 [0230.092] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff70 | out: hHeap=0x1f0000) returned 1 [0230.092] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffd0 | out: hHeap=0x1f0000) returned 1 [0230.092] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232fb8 | out: hHeap=0x1f0000) returned 1 [0230.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x258298 | out: hHeap=0x1f0000) returned 1 [0230.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237a40 | out: hHeap=0x1f0000) returned 1 [0230.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239278 | out: hHeap=0x1f0000) returned 1 [0230.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0230.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f020 | out: hHeap=0x1f0000) returned 1 [0230.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228b00 | out: hHeap=0x1f0000) returned 1 [0230.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0230.093] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1038\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1038\\localizeddata.xml")) returned 1 [0230.095] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0230.095] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238f68 [0230.096] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2285f0 [0230.096] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236260 [0230.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2285f0 | out: hHeap=0x1f0000) returned 1 [0230.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236058 | out: hHeap=0x1f0000) returned 1 [0230.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238f68 | out: hHeap=0x1f0000) returned 1 [0230.097] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1038\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1038\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0230.097] GetFileType (hFile=0x1e0) returned 0x1 [0230.098] CloseHandle (hObject=0x1e0) returned 1 [0230.098] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236330 [0230.098] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1038\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1038\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x173eb6c | out: lpFileInformation=0x173eb6c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958)) returned 1 [0230.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236330 | out: hHeap=0x1f0000) returned 1 [0230.098] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236058 [0230.098] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1038\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1038\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x173eb7c | out: lpFileInformation=0x173eb7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958)) returned 1 [0230.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236058 | out: hHeap=0x1f0000) returned 1 [0230.099] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236058 [0230.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236058 | out: hHeap=0x1f0000) returned 1 [0230.600] GetLastError () returned 0x0 [0230.600] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x213680) returned 1 [0230.601] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2384b0 | out: pbBuffer=0x2384b0) returned 1 [0230.601] CryptReleaseContext (hProv=0x213680, dwFlags=0x0) returned 1 [0230.601] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0230.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x258298 [0230.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2373b0 [0230.602] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=38797077903) returned 1 [0230.602] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0230.602] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=38797118082) returned 1 [0230.602] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0230.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238c20 [0230.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x24fd60 [0230.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x236f50 [0230.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x233228 [0230.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff70 [0230.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2066b8 [0230.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffd0 [0230.603] GetLastError () returned 0x0 [0230.604] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1038\\SetupResources.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1038\\setupresources.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e230, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0230.604] GetFileType (hFile=0x1e0) returned 0x1 [0230.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a90 [0230.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b90 [0230.606] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1038\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1038\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0230.606] GetFileType (hFile=0x1d8) returned 0x1 [0230.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cb0 [0230.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cf0 [0230.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ada88 [0230.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b70 [0230.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b80 [0230.608] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1038\\SetupResources.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1038\\setupresources.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0230.608] GetFileType (hFile=0x230) returned 0x1 [0230.609] GetLastError () returned 0xb7 [0230.609] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1038\\SetupResources.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1038\\setupresources.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0230.609] GetFileType (hFile=0x1f4) returned 0x1 [0230.610] GetLastError () returned 0xb7 [0230.610] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1038\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1038\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1a4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0230.610] GetFileType (hFile=0x174) returned 0x1 [0230.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28efd8 [0230.611] ReadFile (in: hFile=0x174, lpBuffer=0x28efd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e100, lpOverlapped=0x0 | out: lpBuffer=0x28efd8*, lpNumberOfBytesRead=0x173e100*=0x1000, lpOverlapped=0x0) returned 1 [0230.614] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24a1b8 [0230.615] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28bfc0 [0230.615] GetLastError () returned 0x0 [0230.617] CloseHandle (hObject=0x1e0) returned 1 [0230.619] CloseHandle (hObject=0x1d8) returned 1 [0230.619] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238af0 [0230.620] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389f0 [0230.620] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1038\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1038\\setupresources.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0230.623] GetFileType (hFile=0x1d8) returned 0x1 [0230.623] GetLastError () returned 0xb7 [0230.625] CloseHandle (hObject=0x1d8) returned 1 [0230.626] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1038\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1038\\setupresources.dll")) returned 0 [0230.626] GetLastError () returned 0x20 [0230.626] GetLastError () returned 0x20 [0230.626] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x212b58) returned 1 [0230.627] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238370 | out: pbBuffer=0x238370) returned 1 [0230.628] CryptReleaseContext (hProv=0x212b58, dwFlags=0x0) returned 1 [0230.628] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0230.628] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238118 [0230.628] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238370 [0230.628] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239160 [0230.628] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0230.628] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0230.628] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239160 | out: hHeap=0x1f0000) returned 1 [0230.628] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8428 [0230.628] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210240 [0230.628] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x235b78 [0230.628] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2384b0 [0230.628] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2855c0 [0230.629] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f10 [0230.629] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236538 [0230.629] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238118 [0230.629] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285ae8 [0230.629] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a20 [0230.629] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238578 [0230.629] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101b0 [0230.629] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a30 [0230.629] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238528 [0230.629] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210258 [0230.629] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0230.629] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238528 | out: hHeap=0x1f0000) returned 1 [0230.629] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a30 | out: hHeap=0x1f0000) returned 1 [0230.629] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0230.629] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238578 | out: hHeap=0x1f0000) returned 1 [0230.630] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a20 | out: hHeap=0x1f0000) returned 1 [0230.630] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285ae8 | out: hHeap=0x1f0000) returned 1 [0230.630] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0230.630] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236538 | out: hHeap=0x1f0000) returned 1 [0230.630] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239010 [0230.631] GetLastError () returned 0x0 [0230.631] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173df20 | out: lpSystemTimeAsFileTime=0x173df20) [0230.631] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238a20 [0230.632] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0230.632] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cb0 [0230.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cb0 | out: hHeap=0x1f0000) returned 1 [0230.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0230.632] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0230.632] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c50 [0230.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c50 | out: hHeap=0x1f0000) returned 1 [0230.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0230.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a20 | out: hHeap=0x1f0000) returned 1 [0230.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0230.632] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239278 [0230.632] GetLastError () returned 0x0 [0230.633] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1038\\SetupResources.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1038\\setupresources.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e290, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0230.633] GetFileType (hFile=0x1d8) returned 0x1 [0230.633] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28ffe0 [0230.633] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e218 | out: lpNewFilePointer=0x0) returned 1 [0230.633] GetLastError () returned 0xb7 [0230.634] CloseHandle (hObject=0x1d8) returned 1 [0230.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b20 | out: hHeap=0x1f0000) returned 1 [0230.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a80 | out: hHeap=0x1f0000) returned 1 [0230.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2851a0 | out: hHeap=0x1f0000) returned 1 [0230.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2855c0 | out: hHeap=0x1f0000) returned 1 [0230.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0230.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f10 | out: hHeap=0x1f0000) returned 1 [0230.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0230.635] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210240 | out: hHeap=0x1f0000) returned 1 [0230.635] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8428 | out: hHeap=0x1f0000) returned 1 [0230.635] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237810 | out: hHeap=0x1f0000) returned 1 [0230.635] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0230.635] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0230.635] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x251068 | out: hHeap=0x1f0000) returned 1 [0230.635] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237180 | out: hHeap=0x1f0000) returned 1 [0230.635] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c20 | out: hHeap=0x1f0000) returned 1 [0230.635] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b10 | out: hHeap=0x1f0000) returned 1 [0230.635] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20fef8 | out: hHeap=0x1f0000) returned 1 [0230.635] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0230.635] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a10 | out: hHeap=0x1f0000) returned 1 [0230.635] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210078 | out: hHeap=0x1f0000) returned 1 [0230.635] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0230.635] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a00 | out: hHeap=0x1f0000) returned 1 [0230.635] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x284f90 | out: hHeap=0x1f0000) returned 1 [0230.635] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0230.635] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236058 | out: hHeap=0x1f0000) returned 1 [0230.636] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228680 | out: hHeap=0x1f0000) returned 1 [0230.636] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0230.636] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0230.636] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228950 | out: hHeap=0x1f0000) returned 1 [0230.636] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389f0 | out: hHeap=0x1f0000) returned 1 [0230.636] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238af0 | out: hHeap=0x1f0000) returned 1 [0230.636] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28efd8 | out: hHeap=0x1f0000) returned 1 [0230.636] CloseHandle (hObject=0x174) returned 1 [0230.637] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389e0 | out: hHeap=0x1f0000) returned 1 [0230.637] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ad0 | out: hHeap=0x1f0000) returned 1 [0230.637] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2248a0 | out: hHeap=0x1f0000) returned 1 [0230.637] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24a1b8 | out: hHeap=0x1f0000) returned 1 [0230.637] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210018 | out: hHeap=0x1f0000) returned 1 [0230.637] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e70 | out: hHeap=0x1f0000) returned 1 [0230.637] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28bfc0 | out: hHeap=0x1f0000) returned 1 [0230.637] CloseHandle (hObject=0x1f4) returned 1 [0230.638] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ba0 | out: hHeap=0x1f0000) returned 1 [0230.638] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ac0 | out: hHeap=0x1f0000) returned 1 [0230.638] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2add68 | out: hHeap=0x1f0000) returned 1 [0230.638] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c70 | out: hHeap=0x1f0000) returned 1 [0230.638] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0230.638] CloseHandle (hObject=0x230) returned 1 [0230.638] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b80 | out: hHeap=0x1f0000) returned 1 [0230.638] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b70 | out: hHeap=0x1f0000) returned 1 [0230.638] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ada88 | out: hHeap=0x1f0000) returned 1 [0230.639] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b90 | out: hHeap=0x1f0000) returned 1 [0230.639] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a90 | out: hHeap=0x1f0000) returned 1 [0230.639] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b60 | out: hHeap=0x1f0000) returned 1 [0230.639] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b00 | out: hHeap=0x1f0000) returned 1 [0230.639] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237298 | out: hHeap=0x1f0000) returned 1 [0230.639] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24fd60 | out: hHeap=0x1f0000) returned 1 [0230.639] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236f50 | out: hHeap=0x1f0000) returned 1 [0230.639] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2066b8 | out: hHeap=0x1f0000) returned 1 [0230.639] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffd0 | out: hHeap=0x1f0000) returned 1 [0230.639] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff70 | out: hHeap=0x1f0000) returned 1 [0230.639] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233228 | out: hHeap=0x1f0000) returned 1 [0230.639] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x258298 | out: hHeap=0x1f0000) returned 1 [0230.639] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2373b0 | out: hHeap=0x1f0000) returned 1 [0230.639] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c58 | out: hHeap=0x1f0000) returned 1 [0230.639] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236330 | out: hHeap=0x1f0000) returned 1 [0230.639] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f020 | out: hHeap=0x1f0000) returned 1 [0230.639] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228710 | out: hHeap=0x1f0000) returned 1 [0230.640] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0230.640] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1038\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1038\\setupresources.dll")) returned 1 [0230.642] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0230.642] FindClose (in: hFindFile=0x24e6c0 | out: hFindFile=0x24e6c0) returned 1 [0230.642] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236260 | out: hHeap=0x1f0000) returned 1 [0230.642] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d6a0 | out: hHeap=0x1f0000) returned 1 [0230.642] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0230.642] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2287e8 | out: hHeap=0x1f0000) returned 1 [0230.642] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2285f0 [0230.643] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0230.643] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d6a0 [0230.643] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228b90 [0230.643] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1040\\*", lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24eb40 [0230.643] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228440 [0230.643] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228b90 | out: hHeap=0x1f0000) returned 1 [0230.643] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0230.643] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0230.643] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228b00 [0230.643] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228440 | out: hHeap=0x1f0000) returned 1 [0230.644] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0230.644] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0230.644] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0230.644] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0230.644] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228518 [0230.644] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x236330 [0230.644] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228518 | out: hHeap=0x1f0000) returned 1 [0230.644] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228b00 | out: hHeap=0x1f0000) returned 1 [0230.644] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0230.644] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1040\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1040\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0230.645] GetFileType (hFile=0x230) returned 0x1 [0230.645] CloseHandle (hObject=0x230) returned 1 [0230.645] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8848 [0230.645] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1040\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1040\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x173eb6c | out: lpFileInformation=0x173eb6c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe3b)) returned 1 [0231.185] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8848 | out: hHeap=0x1f0000) returned 1 [0231.185] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8428 [0231.186] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1040\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1040\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x173eb7c | out: lpFileInformation=0x173eb7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe3b)) returned 1 [0231.186] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8428 | out: hHeap=0x1f0000) returned 1 [0231.186] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a86e8 [0231.186] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a86e8 | out: hHeap=0x1f0000) returned 1 [0231.186] GetLastError () returned 0x0 [0231.186] SetLastError (dwErrCode=0x0) [0231.187] AreFileApisANSI () returned 1 [0231.187] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58420, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0231.187] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58420, cbMultiByte=4, lpWideCharStr=0x173eca8, cchWideChar=4 | out: lpWideCharStr=".exe") returned 4 [0231.187] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0231.187] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228518 [0231.187] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f020 [0231.187] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8950 [0231.187] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2390b8 [0231.188] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0231.188] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x212be0) returned 1 [0231.190] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238320 | out: pbBuffer=0x238320) returned 1 [0231.190] CryptReleaseContext (hProv=0x212be0, dwFlags=0x0) returned 1 [0231.190] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0231.191] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x258298 [0231.191] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x237298 [0231.191] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=38855968738) returned 1 [0231.191] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0231.191] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=38856004932) returned 1 [0231.191] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0231.191] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239048 [0231.191] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x24fd60 [0231.192] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2373b0 [0231.192] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x233a48 [0231.192] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff70 [0231.192] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206808 [0231.192] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffd0 [0231.192] GetLastError () returned 0x0 [0231.192] SetLastError (dwErrCode=0x0) [0231.193] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239048 | out: hHeap=0x1f0000) returned 1 [0231.193] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236058 [0231.193] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a968 [0231.193] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236058 | out: hHeap=0x1f0000) returned 1 [0231.193] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xee) returned 0x21bd18 [0231.193] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a968 | out: hHeap=0x1f0000) returned 1 [0231.193] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a40 [0231.193] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389f0 [0231.194] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1040\\eula.rtf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1040\\eula.rtf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e230, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0231.204] GetFileType (hFile=0x230) returned 0x1 [0231.204] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b70 [0231.204] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ac0 [0231.205] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1040\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1040\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0231.205] GetFileType (hFile=0x1f4) returned 0x1 [0231.206] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0231.206] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e70 [0231.206] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ade20 [0231.206] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b60 [0231.206] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b80 [0231.207] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1040\\eula.rtf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1040\\eula.rtf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0231.207] GetFileType (hFile=0x174) returned 0x1 [0231.207] GetLastError () returned 0xb7 [0231.208] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe4) returned 0x217038 [0231.208] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f50 [0231.208] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cf0 [0231.208] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204df0 [0231.208] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad130 [0231.208] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238aa0 [0231.208] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a50 [0231.209] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1040\\eula.rtf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1040\\eula.rtf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0231.209] GetFileType (hFile=0x1d8) returned 0x1 [0231.209] GetLastError () returned 0xb7 [0231.210] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f10 [0231.210] GetLastError () returned 0xb7 [0231.210] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c10 [0231.223] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cf0 [0231.223] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bf0 [0231.223] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb8) returned 0x224360 [0231.223] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b90 [0231.224] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ab0 [0232.063] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1040\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1040\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1a4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0232.063] GetFileType (hFile=0x200) returned 0x1 [0232.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28bfc0 [0232.064] ReadFile (in: hFile=0x200, lpBuffer=0x28bfc0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e100, lpOverlapped=0x0 | out: lpBuffer=0x28bfc0*, lpNumberOfBytesRead=0x173e100*=0xe3b, lpOverlapped=0x0) returned 1 [0232.076] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24a1b8 [0232.076] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x287fa0 [0232.076] GetLastError () returned 0x0 [0232.076] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0232.076] GetLastError () returned 0x0 [0232.078] CloseHandle (hObject=0x230) returned 1 [0232.078] CloseHandle (hObject=0x1f4) returned 1 [0232.078] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ad0 [0232.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ae0 [0232.079] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1040\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1040\\eula.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0232.080] GetFileType (hFile=0x1f4) returned 0x1 [0232.081] GetLastError () returned 0xb7 [0232.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x288fa8 [0232.081] GetLastError () returned 0xb7 [0232.082] CloseHandle (hObject=0x1f4) returned 1 [0232.083] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1040\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1040\\eula.rtf")) returned 0 [0232.083] GetLastError () returned 0x20 [0232.083] GetLastError () returned 0x20 [0232.084] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228cf8 [0232.084] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238578 [0232.084] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238780 [0232.084] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x228a70 [0232.084] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cf0 [0232.084] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204df0 [0232.084] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x238a00 [0232.084] GetLastError () returned 0x20 [0232.084] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238e88 [0232.084] GetLastError () returned 0x20 [0232.084] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238e18 [0232.084] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214f08 [0232.084] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238758 [0232.084] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2851a0 [0232.085] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a10 [0232.085] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238618 [0232.085] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210198 [0232.085] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a30 [0232.085] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238668 [0232.085] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101b0 [0232.085] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238640 [0232.085] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2852a8 [0232.085] GetLastError () returned 0x20 [0232.085] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238b10 [0232.085] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238b20 [0232.085] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a20 [0232.085] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b20 | out: hHeap=0x1f0000) returned 1 [0232.085] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b20 [0232.085] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a20 | out: hHeap=0x1f0000) returned 1 [0232.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b10 | out: hHeap=0x1f0000) returned 1 [0232.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a20 [0232.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101c8 [0232.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a20 | out: hHeap=0x1f0000) returned 1 [0232.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x20fef8 [0232.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0232.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b20 | out: hHeap=0x1f0000) returned 1 [0232.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101c8 [0232.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2026d0 [0232.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0232.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2026e8 [0232.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2026d0 | out: hHeap=0x1f0000) returned 1 [0232.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20fef8 | out: hHeap=0x1f0000) returned 1 [0232.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2026d0 [0232.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204e70 [0232.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2026d0 | out: hHeap=0x1f0000) returned 1 [0232.087] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bb0 [0232.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e70 | out: hHeap=0x1f0000) returned 1 [0232.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2026e8 | out: hHeap=0x1f0000) returned 1 [0232.087] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cf0 [0232.087] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2384d8 [0232.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cf0 | out: hHeap=0x1f0000) returned 1 [0232.087] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204dd0 [0232.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384d8 | out: hHeap=0x1f0000) returned 1 [0232.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bb0 | out: hHeap=0x1f0000) returned 1 [0232.087] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204d90 [0232.087] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x2068c8 [0232.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d90 | out: hHeap=0x1f0000) returned 1 [0232.087] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238550 [0232.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2068c8 | out: hHeap=0x1f0000) returned 1 [0232.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204dd0 | out: hHeap=0x1f0000) returned 1 [0232.087] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b10 [0232.087] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2026d0 [0232.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b10 | out: hHeap=0x1f0000) returned 1 [0232.088] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2026e8 [0232.088] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2026d0 | out: hHeap=0x1f0000) returned 1 [0232.088] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204bf0 [0232.088] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2026e8 | out: hHeap=0x1f0000) returned 1 [0232.088] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206868 [0232.088] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bf0 | out: hHeap=0x1f0000) returned 1 [0232.088] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206868 | out: hHeap=0x1f0000) returned 1 [0232.088] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238550 | out: hHeap=0x1f0000) returned 1 [0232.088] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238578 | out: hHeap=0x1f0000) returned 1 [0232.088] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0232.088] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2851a0 | out: hHeap=0x1f0000) returned 1 [0232.088] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238758 | out: hHeap=0x1f0000) returned 1 [0232.088] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2392b0 [0232.088] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2386b8 [0232.088] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x2134e8) returned 1 [0232.089] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2386b8 | out: pbBuffer=0x2386b8) returned 1 [0232.089] CryptReleaseContext (hProv=0x2134e8, dwFlags=0x0) returned 1 [0232.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2386b8 | out: hHeap=0x1f0000) returned 1 [0232.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2384d8 [0232.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2385a0 [0232.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238d70 [0232.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384d8 | out: hHeap=0x1f0000) returned 1 [0232.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0232.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238d70 | out: hHeap=0x1f0000) returned 1 [0232.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a80b8 [0232.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2026d0 [0232.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x214e38 [0232.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238690 [0232.091] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2858d8 [0232.091] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cf0 [0232.091] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d68 [0232.091] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2386b8 [0232.091] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2853b0 [0232.091] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a20 [0232.091] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384d8 [0232.091] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2026e8 [0232.091] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b10 [0232.091] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385c8 [0232.091] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20fef8 [0232.091] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20fef8 | out: hHeap=0x1f0000) returned 1 [0232.091] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385c8 | out: hHeap=0x1f0000) returned 1 [0232.091] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b10 | out: hHeap=0x1f0000) returned 1 [0232.091] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2026e8 | out: hHeap=0x1f0000) returned 1 [0232.092] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384d8 | out: hHeap=0x1f0000) returned 1 [0232.092] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a20 | out: hHeap=0x1f0000) returned 1 [0232.092] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2853b0 | out: hHeap=0x1f0000) returned 1 [0232.092] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2386b8 | out: hHeap=0x1f0000) returned 1 [0232.092] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d68 | out: hHeap=0x1f0000) returned 1 [0232.092] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238d70 [0232.092] GetLastError () returned 0x0 [0232.092] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238c20 [0232.092] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0232.092] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0232.092] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0232.092] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0232.092] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0232.092] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0232.092] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x24e780 [0232.092] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2851a0 [0232.092] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0232.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0232.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0232.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0232.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2854b8 [0232.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0232.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0232.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f768 [0232.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x25e1c0 [0232.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x237180 [0232.093] QueryPerformanceCounter (in: lpPerformanceCount=0x173dee0 | out: lpPerformanceCount=0x173dee0*=38946210797) returned 1 [0232.093] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173df20 | out: lpSystemTimeAsFileTime=0x173df20) [0232.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238a20 [0232.094] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2386e0 [0232.094] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d10 [0232.094] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d10 | out: hHeap=0x1f0000) returned 1 [0232.094] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2386e0 | out: hHeap=0x1f0000) returned 1 [0232.094] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2386b8 [0232.094] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bf0 [0232.094] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bf0 | out: hHeap=0x1f0000) returned 1 [0232.094] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2386b8 | out: hHeap=0x1f0000) returned 1 [0232.094] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a20 | out: hHeap=0x1f0000) returned 1 [0232.094] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0232.094] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239010 [0232.094] GetLastError () returned 0x0 [0232.094] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0232.094] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0232.095] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0232.095] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2386b8 [0232.095] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238550 [0232.095] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0232.095] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0232.095] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238578 [0232.095] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0232.095] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x222ee8 [0232.095] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0232.095] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0232.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0232.095] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0232.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0232.095] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2386e0 [0232.095] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238708 [0232.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2386e0 | out: hHeap=0x1f0000) returned 1 [0232.096] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0232.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238708 | out: hHeap=0x1f0000) returned 1 [0232.096] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0232.096] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x234b90 [0232.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b90 | out: hHeap=0x1f0000) returned 1 [0232.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0232.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0232.096] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x20fef8 [0232.096] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2284d0 [0232.096] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238500 [0232.096] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2385c8 [0232.096] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2386e0 [0232.096] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238528 [0232.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385c8 | out: hHeap=0x1f0000) returned 1 [0232.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238500 | out: hHeap=0x1f0000) returned 1 [0232.096] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0232.097] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2384d8 [0232.097] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238708 [0232.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384d8 | out: hHeap=0x1f0000) returned 1 [0232.097] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0232.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238708 | out: hHeap=0x1f0000) returned 1 [0232.097] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206868 [0232.097] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x2a9c88 [0232.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a9c88 | out: hHeap=0x1f0000) returned 1 [0232.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206868 | out: hHeap=0x1f0000) returned 1 [0232.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238578 | out: hHeap=0x1f0000) returned 1 [0232.097] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac110 [0232.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0232.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0232.097] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204d30 [0232.097] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2acb78 [0232.097] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac800 [0232.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238550 | out: hHeap=0x1f0000) returned 1 [0232.098] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab8f8 [0232.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac800 | out: hHeap=0x1f0000) returned 1 [0232.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238528 | out: hHeap=0x1f0000) returned 1 [0232.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2386e0 | out: hHeap=0x1f0000) returned 1 [0232.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2284d0 | out: hHeap=0x1f0000) returned 1 [0232.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2acb78 | out: hHeap=0x1f0000) returned 1 [0232.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d30 | out: hHeap=0x1f0000) returned 1 [0232.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20fef8 | out: hHeap=0x1f0000) returned 1 [0232.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0232.098] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac5b0 [0232.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac5b0 | out: hHeap=0x1f0000) returned 1 [0232.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ee8 | out: hHeap=0x1f0000) returned 1 [0232.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0232.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac110 | out: hHeap=0x1f0000) returned 1 [0232.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0232.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0232.099] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2386b8 | out: hHeap=0x1f0000) returned 1 [0232.099] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0232.103] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0232.103] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2acca0 [0232.103] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac5b0 [0232.103] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2acca0 | out: hHeap=0x1f0000) returned 1 [0232.103] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac5b0 | out: hHeap=0x1f0000) returned 1 [0232.103] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab8f8 | out: hHeap=0x1f0000) returned 1 [0232.103] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0232.103] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2854b8 | out: hHeap=0x1f0000) returned 1 [0232.103] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24e780 | out: hHeap=0x1f0000) returned 1 [0232.103] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x237b58 [0232.103] GetLastError () returned 0x0 [0232.104] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b10 [0232.104] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b20 [0232.105] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1040\\eula.rtf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1040\\eula.rtf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e290, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0232.105] GetFileType (hFile=0x1f4) returned 0x1 [0232.106] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x288fa8 [0232.106] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e218 | out: lpNewFilePointer=0x0) returned 1 [0232.106] GetLastError () returned 0xb7 [0232.107] CloseHandle (hObject=0x1f4) returned 1 [0232.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b20 | out: hHeap=0x1f0000) returned 1 [0232.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b10 | out: hHeap=0x1f0000) returned 1 [0232.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2851a0 | out: hHeap=0x1f0000) returned 1 [0232.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2858d8 | out: hHeap=0x1f0000) returned 1 [0232.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238690 | out: hHeap=0x1f0000) returned 1 [0232.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cf0 | out: hHeap=0x1f0000) returned 1 [0232.108] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214e38 | out: hHeap=0x1f0000) returned 1 [0232.108] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2026d0 | out: hHeap=0x1f0000) returned 1 [0232.108] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a80b8 | out: hHeap=0x1f0000) returned 1 [0232.108] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237b58 | out: hHeap=0x1f0000) returned 1 [0232.108] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385a0 | out: hHeap=0x1f0000) returned 1 [0232.108] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0232.108] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25e1c0 | out: hHeap=0x1f0000) returned 1 [0232.108] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237180 | out: hHeap=0x1f0000) returned 1 [0232.108] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2392b0 | out: hHeap=0x1f0000) returned 1 [0232.108] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a00 | out: hHeap=0x1f0000) returned 1 [0232.109] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0232.109] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238668 | out: hHeap=0x1f0000) returned 1 [0232.109] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a30 | out: hHeap=0x1f0000) returned 1 [0232.109] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0232.109] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238618 | out: hHeap=0x1f0000) returned 1 [0232.109] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a10 | out: hHeap=0x1f0000) returned 1 [0232.109] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2852a8 | out: hHeap=0x1f0000) returned 1 [0232.109] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238640 | out: hHeap=0x1f0000) returned 1 [0232.109] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f08 | out: hHeap=0x1f0000) returned 1 [0232.109] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228a70 | out: hHeap=0x1f0000) returned 1 [0232.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238780 | out: hHeap=0x1f0000) returned 1 [0232.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0232.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228cf8 | out: hHeap=0x1f0000) returned 1 [0232.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ae0 | out: hHeap=0x1f0000) returned 1 [0232.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ad0 | out: hHeap=0x1f0000) returned 1 [0232.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28bfc0 | out: hHeap=0x1f0000) returned 1 [0232.110] CloseHandle (hObject=0x200) returned 1 [0232.111] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ab0 | out: hHeap=0x1f0000) returned 1 [0232.111] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b90 | out: hHeap=0x1f0000) returned 1 [0232.111] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224360 | out: hHeap=0x1f0000) returned 1 [0232.111] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24a1b8 | out: hHeap=0x1f0000) returned 1 [0232.111] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0232.111] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c10 | out: hHeap=0x1f0000) returned 1 [0232.111] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x287fa0 | out: hHeap=0x1f0000) returned 1 [0232.111] CloseHandle (hObject=0x1d8) returned 1 [0232.112] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a50 | out: hHeap=0x1f0000) returned 1 [0232.112] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238aa0 | out: hHeap=0x1f0000) returned 1 [0232.112] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad130 | out: hHeap=0x1f0000) returned 1 [0232.112] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f50 | out: hHeap=0x1f0000) returned 1 [0232.112] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0232.112] CloseHandle (hObject=0x174) returned 1 [0232.113] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b80 | out: hHeap=0x1f0000) returned 1 [0232.113] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b60 | out: hHeap=0x1f0000) returned 1 [0232.113] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ade20 | out: hHeap=0x1f0000) returned 1 [0232.113] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ac0 | out: hHeap=0x1f0000) returned 1 [0232.113] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b70 | out: hHeap=0x1f0000) returned 1 [0232.113] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389f0 | out: hHeap=0x1f0000) returned 1 [0232.113] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a40 | out: hHeap=0x1f0000) returned 1 [0232.113] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21bd18 | out: hHeap=0x1f0000) returned 1 [0232.113] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24fd60 | out: hHeap=0x1f0000) returned 1 [0232.113] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2373b0 | out: hHeap=0x1f0000) returned 1 [0232.113] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206808 | out: hHeap=0x1f0000) returned 1 [0232.113] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffd0 | out: hHeap=0x1f0000) returned 1 [0232.113] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff70 | out: hHeap=0x1f0000) returned 1 [0232.113] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233a48 | out: hHeap=0x1f0000) returned 1 [0232.114] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x258298 | out: hHeap=0x1f0000) returned 1 [0232.114] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237298 | out: hHeap=0x1f0000) returned 1 [0232.114] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2390b8 | out: hHeap=0x1f0000) returned 1 [0232.114] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8950 | out: hHeap=0x1f0000) returned 1 [0232.114] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f020 | out: hHeap=0x1f0000) returned 1 [0232.114] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228518 | out: hHeap=0x1f0000) returned 1 [0232.114] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0232.114] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1040\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1040\\eula.rtf")) returned 1 [0232.547] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x138bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0232.547] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2390b8 [0232.547] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2287e8 [0232.547] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d00 [0232.547] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2287e8 | out: hHeap=0x1f0000) returned 1 [0232.547] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236330 | out: hHeap=0x1f0000) returned 1 [0232.549] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2390b8 | out: hHeap=0x1f0000) returned 1 [0232.550] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1040\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1040\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0232.551] GetFileType (hFile=0x200) returned 0x1 [0232.551] CloseHandle (hObject=0x200) returned 1 [0232.553] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a90 [0232.553] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1040\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1040\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x173eb6c | out: lpFileInformation=0x173eb6c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x138bc)) returned 1 [0232.554] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a90 | out: hHeap=0x1f0000) returned 1 [0232.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214b60 [0232.554] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1040\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1040\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x173eb7c | out: lpFileInformation=0x173eb7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x138bc)) returned 1 [0232.554] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214b60 | out: hHeap=0x1f0000) returned 1 [0232.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a90 [0232.554] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a90 | out: hHeap=0x1f0000) returned 1 [0232.555] GetLastError () returned 0x0 [0232.555] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0232.555] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228c68 [0232.555] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d9d0 [0232.556] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a90 [0232.556] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238d00 [0232.556] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0232.556] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x213020) returned 1 [0232.583] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238078 | out: pbBuffer=0x238078) returned 1 [0232.584] CryptReleaseContext (hProv=0x213020, dwFlags=0x0) returned 1 [0232.584] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0232.584] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x258298 [0232.584] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x237180 [0232.584] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=38995319008) returned 1 [0232.584] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0232.585] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=38995349073) returned 1 [0232.585] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0232.585] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238de0 [0232.585] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x252370 [0232.585] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x237928 [0232.585] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x2338a8 [0232.585] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20fef8 [0232.585] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2067d8 [0232.585] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff28 [0232.586] GetLastError () returned 0x0 [0232.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fa40 [0232.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2add68 [0232.586] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fa40 | out: hHeap=0x1f0000) returned 1 [0232.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x106) returned 0x2375e0 [0232.586] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2add68 | out: hHeap=0x1f0000) returned 1 [0232.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b70 [0232.587] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238aa0 [0232.587] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1040\\LocalizedData.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1040\\localizeddata.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e230, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0232.588] GetFileType (hFile=0x200) returned 0x1 [0232.588] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b30 [0232.589] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b90 [0232.589] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1040\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1040\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0232.589] GetFileType (hFile=0x1f4) returned 0x1 [0232.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f30 [0232.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204dd0 [0232.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ade20 [0232.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ab0 [0232.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238af0 [0232.591] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1040\\LocalizedData.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1040\\localizeddata.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0232.591] GetFileType (hFile=0x230) returned 0x1 [0232.592] GetLastError () returned 0xb7 [0232.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe4) returned 0x22d368 [0232.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c10 [0232.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d30 [0232.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c90 [0232.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad860 [0232.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b60 [0232.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a30 [0232.593] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1040\\LocalizedData.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1040\\localizeddata.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0232.593] GetFileType (hFile=0x1e0) returned 0x1 [0232.593] GetLastError () returned 0xb7 [0232.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cf0 [0232.594] GetLastError () returned 0xb7 [0232.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bf0 [0232.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d90 [0232.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f50 [0232.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb8) returned 0x2241e0 [0232.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a50 [0232.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ad0 [0232.595] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1040\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1040\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1a4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0232.595] GetFileType (hFile=0x224) returned 0x1 [0232.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28ffe0 [0232.595] ReadFile (in: hFile=0x224, lpBuffer=0x28ffe0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e100, lpOverlapped=0x0 | out: lpBuffer=0x28ffe0*, lpNumberOfBytesRead=0x173e100*=0x1000, lpOverlapped=0x0) returned 1 [0232.606] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24b5e0 [0232.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28efd8 [0232.608] GetLastError () returned 0x0 [0232.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210018 [0232.762] GetLastError () returned 0x0 [0232.762] CloseHandle (hObject=0x200) returned 1 [0232.763] CloseHandle (hObject=0x1f4) returned 1 [0232.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389e0 [0232.765] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a60 [0232.765] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1040\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1040\\localizeddata.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0232.768] GetFileType (hFile=0x1f4) returned 0x1 [0232.768] GetLastError () returned 0xb7 [0232.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x299028 [0232.769] GetLastError () returned 0xb7 [0232.771] CloseHandle (hObject=0x1f4) returned 1 [0232.771] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1040\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1040\\localizeddata.xml")) returned 0 [0232.771] GetLastError () returned 0x20 [0232.771] GetLastError () returned 0x20 [0232.772] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228cf8 [0232.772] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238398 [0232.772] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2383e8 [0232.772] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x228a28 [0232.772] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f30 [0232.772] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d10 [0232.772] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x238ae0 [0232.772] GetLastError () returned 0x20 [0232.772] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239048 [0232.772] GetLastError () returned 0x20 [0232.772] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239278 [0232.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214b60 [0232.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238078 [0232.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2855c0 [0232.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389f0 [0232.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0232.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210078 [0232.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b00 [0232.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238618 [0232.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2100a8 [0232.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238640 [0232.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2856c8 [0232.773] GetLastError () returned 0x20 [0232.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238a00 [0232.774] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238b10 [0232.774] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238980 [0232.774] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b10 | out: hHeap=0x1f0000) returned 1 [0232.774] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b10 [0232.774] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238980 | out: hHeap=0x1f0000) returned 1 [0232.774] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a00 | out: hHeap=0x1f0000) returned 1 [0232.774] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a00 [0232.774] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210198 [0232.774] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a00 | out: hHeap=0x1f0000) returned 1 [0232.774] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210210 [0232.774] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0232.774] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b10 | out: hHeap=0x1f0000) returned 1 [0232.774] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210198 [0232.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101b0 [0232.775] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0232.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210198 [0232.775] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0232.775] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0232.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101b0 [0232.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204cf0 [0232.775] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0232.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f70 [0232.775] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cf0 | out: hHeap=0x1f0000) returned 1 [0232.775] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0232.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204dd0 [0232.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238668 [0232.776] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204dd0 | out: hHeap=0x1f0000) returned 1 [0232.776] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204df0 [0232.776] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238668 | out: hHeap=0x1f0000) returned 1 [0232.776] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f70 | out: hHeap=0x1f0000) returned 1 [0232.776] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204c50 [0232.776] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206808 [0232.776] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c50 | out: hHeap=0x1f0000) returned 1 [0232.776] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238528 [0232.776] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206808 | out: hHeap=0x1f0000) returned 1 [0232.776] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204df0 | out: hHeap=0x1f0000) returned 1 [0232.776] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b10 [0232.776] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210198 [0232.776] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b10 | out: hHeap=0x1f0000) returned 1 [0232.777] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101b0 [0232.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0232.777] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204f30 [0232.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0232.777] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206658 [0232.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f30 | out: hHeap=0x1f0000) returned 1 [0232.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206658 | out: hHeap=0x1f0000) returned 1 [0232.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238528 | out: hHeap=0x1f0000) returned 1 [0232.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0232.777] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0232.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2855c0 | out: hHeap=0x1f0000) returned 1 [0232.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0232.777] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238ec0 [0232.777] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0232.778] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x212cf0) returned 1 [0232.779] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238078 | out: pbBuffer=0x238078) returned 1 [0232.779] CryptReleaseContext (hProv=0x212cf0, dwFlags=0x0) returned 1 [0232.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0232.779] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238398 [0232.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238078 [0232.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c90 [0232.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0232.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0232.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c90 | out: hHeap=0x1f0000) returned 1 [0232.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8690 [0232.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210210 [0232.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x214d68 [0232.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238398 [0232.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2855c0 [0232.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d90 [0232.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214f08 [0232.781] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238708 [0232.781] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285e00 [0232.781] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b10 [0232.781] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238578 [0232.781] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0232.781] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a00 [0232.781] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238550 [0232.781] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210198 [0232.781] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0232.781] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238550 | out: hHeap=0x1f0000) returned 1 [0232.781] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a00 | out: hHeap=0x1f0000) returned 1 [0232.781] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0232.781] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238578 | out: hHeap=0x1f0000) returned 1 [0232.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b10 | out: hHeap=0x1f0000) returned 1 [0232.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285e00 | out: hHeap=0x1f0000) returned 1 [0232.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238708 | out: hHeap=0x1f0000) returned 1 [0232.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f08 | out: hHeap=0x1f0000) returned 1 [0232.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238ef8 [0232.782] GetLastError () returned 0x0 [0232.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238de0 [0232.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0232.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0232.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0232.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0232.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0232.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0232.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x24e5c0 [0232.783] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2852a8 [0232.783] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0232.783] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0232.783] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0232.783] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0232.783] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2851a0 [0232.783] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0232.783] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0232.783] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f8f8 [0232.783] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x2595a0 [0232.783] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x237b58 [0232.783] QueryPerformanceCounter (in: lpPerformanceCount=0x173dee0 | out: lpPerformanceCount=0x173dee0*=39015223058) returned 1 [0232.783] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173df20 | out: lpSystemTimeAsFileTime=0x173df20) [0232.784] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238b10 [0232.784] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238690 [0232.784] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f50 [0232.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f50 | out: hHeap=0x1f0000) returned 1 [0232.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238690 | out: hHeap=0x1f0000) returned 1 [0232.784] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2386e0 [0232.784] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c50 [0232.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c50 | out: hHeap=0x1f0000) returned 1 [0232.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2386e0 | out: hHeap=0x1f0000) returned 1 [0232.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b10 | out: hHeap=0x1f0000) returned 1 [0232.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0232.784] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238cc8 [0232.784] GetLastError () returned 0x0 [0232.784] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0232.784] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0232.785] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0232.785] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238730 [0232.785] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2384d8 [0232.785] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0232.785] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0232.785] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238668 [0232.785] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0232.785] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x222ee8 [0232.785] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0232.785] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0232.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0232.785] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x20c2c0 [0232.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0232.785] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238550 [0232.785] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238690 [0232.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238550 | out: hHeap=0x1f0000) returned 1 [0232.786] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0232.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238690 | out: hHeap=0x1f0000) returned 1 [0232.786] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0232.786] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x234b90 [0232.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b90 | out: hHeap=0x1f0000) returned 1 [0232.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0232.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20c2c0 | out: hHeap=0x1f0000) returned 1 [0232.786] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210198 [0232.786] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2286c8 [0232.786] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2386b8 [0232.786] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238550 [0232.786] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238528 [0232.786] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238780 [0232.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238550 | out: hHeap=0x1f0000) returned 1 [0232.787] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2386b8 | out: hHeap=0x1f0000) returned 1 [0232.787] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0232.787] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2385a0 [0232.787] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238758 [0232.787] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385a0 | out: hHeap=0x1f0000) returned 1 [0232.787] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0232.787] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238758 | out: hHeap=0x1f0000) returned 1 [0232.787] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206928 [0232.787] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x2aa0d0 [0232.787] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aa0d0 | out: hHeap=0x1f0000) returned 1 [0232.787] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206928 | out: hHeap=0x1f0000) returned 1 [0232.787] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238668 | out: hHeap=0x1f0000) returned 1 [0232.787] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0232.787] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0232.787] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0232.787] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204d30 [0232.788] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0232.788] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abec0 [0232.788] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384d8 | out: hHeap=0x1f0000) returned 1 [0232.788] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aca50 [0232.788] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abec0 | out: hHeap=0x1f0000) returned 1 [0232.788] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238780 | out: hHeap=0x1f0000) returned 1 [0232.788] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238528 | out: hHeap=0x1f0000) returned 1 [0232.788] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2286c8 | out: hHeap=0x1f0000) returned 1 [0232.788] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0232.788] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d30 | out: hHeap=0x1f0000) returned 1 [0232.788] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0232.788] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0232.789] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab330 [0232.789] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab330 | out: hHeap=0x1f0000) returned 1 [0232.789] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ee8 | out: hHeap=0x1f0000) returned 1 [0232.789] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0232.789] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0232.789] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0232.789] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0232.789] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238730 | out: hHeap=0x1f0000) returned 1 [0232.789] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0232.789] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0232.789] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac110 [0232.789] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab8f8 [0232.789] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac110 | out: hHeap=0x1f0000) returned 1 [0232.790] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab8f8 | out: hHeap=0x1f0000) returned 1 [0232.790] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aca50 | out: hHeap=0x1f0000) returned 1 [0232.790] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0232.790] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2851a0 | out: hHeap=0x1f0000) returned 1 [0232.790] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24e5c0 | out: hHeap=0x1f0000) returned 1 [0232.790] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x2373b0 [0232.790] GetLastError () returned 0x0 [0232.790] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a00 [0232.790] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b10 [0232.791] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1040\\LocalizedData.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1040\\localizeddata.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e290, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0232.791] GetFileType (hFile=0x1f4) returned 0x1 [0232.792] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x298020 [0232.792] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e218 | out: lpNewFilePointer=0x0) returned 1 [0232.792] GetLastError () returned 0xb7 [0232.792] CloseHandle (hObject=0x1f4) returned 1 [0232.793] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b10 | out: hHeap=0x1f0000) returned 1 [0232.793] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a00 | out: hHeap=0x1f0000) returned 1 [0232.793] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2852a8 | out: hHeap=0x1f0000) returned 1 [0232.793] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2855c0 | out: hHeap=0x1f0000) returned 1 [0232.793] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0232.793] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d90 | out: hHeap=0x1f0000) returned 1 [0232.793] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d68 | out: hHeap=0x1f0000) returned 1 [0232.793] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0232.793] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8690 | out: hHeap=0x1f0000) returned 1 [0232.793] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2373b0 | out: hHeap=0x1f0000) returned 1 [0232.793] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0232.793] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0232.794] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2595a0 | out: hHeap=0x1f0000) returned 1 [0232.794] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237b58 | out: hHeap=0x1f0000) returned 1 [0232.794] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ec0 | out: hHeap=0x1f0000) returned 1 [0232.794] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ae0 | out: hHeap=0x1f0000) returned 1 [0232.794] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2100a8 | out: hHeap=0x1f0000) returned 1 [0232.794] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238618 | out: hHeap=0x1f0000) returned 1 [0232.794] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b00 | out: hHeap=0x1f0000) returned 1 [0232.794] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210078 | out: hHeap=0x1f0000) returned 1 [0232.794] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0233.119] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389f0 | out: hHeap=0x1f0000) returned 1 [0233.119] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2856c8 | out: hHeap=0x1f0000) returned 1 [0233.119] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238640 | out: hHeap=0x1f0000) returned 1 [0233.119] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214b60 | out: hHeap=0x1f0000) returned 1 [0233.119] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228a28 | out: hHeap=0x1f0000) returned 1 [0233.119] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0233.120] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0233.120] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228cf8 | out: hHeap=0x1f0000) returned 1 [0233.120] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a60 | out: hHeap=0x1f0000) returned 1 [0233.120] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389e0 | out: hHeap=0x1f0000) returned 1 [0233.120] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28ffe0 | out: hHeap=0x1f0000) returned 1 [0233.120] CloseHandle (hObject=0x224) returned 1 [0233.121] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ad0 | out: hHeap=0x1f0000) returned 1 [0233.122] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a50 | out: hHeap=0x1f0000) returned 1 [0233.122] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2241e0 | out: hHeap=0x1f0000) returned 1 [0233.122] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24b5e0 | out: hHeap=0x1f0000) returned 1 [0233.122] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210018 | out: hHeap=0x1f0000) returned 1 [0233.122] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bf0 | out: hHeap=0x1f0000) returned 1 [0233.126] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28efd8 | out: hHeap=0x1f0000) returned 1 [0233.126] CloseHandle (hObject=0x1e0) returned 1 [0233.127] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a30 | out: hHeap=0x1f0000) returned 1 [0233.127] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b60 | out: hHeap=0x1f0000) returned 1 [0233.127] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad860 | out: hHeap=0x1f0000) returned 1 [0233.127] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c10 | out: hHeap=0x1f0000) returned 1 [0233.128] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d368 | out: hHeap=0x1f0000) returned 1 [0233.128] CloseHandle (hObject=0x230) returned 1 [0233.128] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238af0 | out: hHeap=0x1f0000) returned 1 [0233.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ab0 | out: hHeap=0x1f0000) returned 1 [0233.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ade20 | out: hHeap=0x1f0000) returned 1 [0233.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b90 | out: hHeap=0x1f0000) returned 1 [0233.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b30 | out: hHeap=0x1f0000) returned 1 [0233.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238aa0 | out: hHeap=0x1f0000) returned 1 [0233.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b70 | out: hHeap=0x1f0000) returned 1 [0233.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2375e0 | out: hHeap=0x1f0000) returned 1 [0233.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x252370 | out: hHeap=0x1f0000) returned 1 [0233.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237928 | out: hHeap=0x1f0000) returned 1 [0233.130] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2067d8 | out: hHeap=0x1f0000) returned 1 [0233.130] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff28 | out: hHeap=0x1f0000) returned 1 [0233.130] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20fef8 | out: hHeap=0x1f0000) returned 1 [0233.130] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2338a8 | out: hHeap=0x1f0000) returned 1 [0233.130] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x258298 | out: hHeap=0x1f0000) returned 1 [0233.130] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237180 | out: hHeap=0x1f0000) returned 1 [0233.130] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238d00 | out: hHeap=0x1f0000) returned 1 [0233.130] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a90 | out: hHeap=0x1f0000) returned 1 [0233.131] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d9d0 | out: hHeap=0x1f0000) returned 1 [0233.131] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228c68 | out: hHeap=0x1f0000) returned 1 [0233.131] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0233.131] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1040\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1040\\localizeddata.xml")) returned 1 [0233.550] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0233.550] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c20 [0233.550] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2285a8 [0233.550] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214dd0 [0233.550] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2285a8 | out: hHeap=0x1f0000) returned 1 [0233.550] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d00 | out: hHeap=0x1f0000) returned 1 [0233.550] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c20 | out: hHeap=0x1f0000) returned 1 [0233.551] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1040\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1040\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1bc [0233.551] GetFileType (hFile=0x1bc) returned 0x1 [0233.552] CloseHandle (hObject=0x1bc) returned 1 [0233.552] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214e38 [0233.552] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1040\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1040\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x173eb6c | out: lpFileInformation=0x173eb6c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758)) returned 1 [0233.552] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214e38 | out: hHeap=0x1f0000) returned 1 [0233.553] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d00 [0233.553] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1040\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1040\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x173eb7c | out: lpFileInformation=0x173eb7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758)) returned 1 [0233.553] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d00 | out: hHeap=0x1f0000) returned 1 [0233.553] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d00 [0233.553] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d00 | out: hHeap=0x1f0000) returned 1 [0233.553] GetLastError () returned 0x0 [0233.553] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0233.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228b48 [0233.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x261e58 [0233.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214e38 [0233.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c90 [0233.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2386e0 [0233.554] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x212a48) returned 1 [0233.556] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2386e0 | out: pbBuffer=0x2386e0) returned 1 [0233.556] CryptReleaseContext (hProv=0x212a48, dwFlags=0x0) returned 1 [0233.556] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2386e0 | out: hHeap=0x1f0000) returned 1 [0233.556] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x258298 [0233.556] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2375e0 [0233.556] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=39092517141) returned 1 [0233.556] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0233.557] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=39092549941) returned 1 [0233.557] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0233.557] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238e88 [0233.557] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x2595a0 [0233.557] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x237180 [0233.557] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x233978 [0233.557] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0233.557] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2066b8 [0233.557] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210198 [0233.558] GetLastError () returned 0x0 [0233.558] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220490 [0233.558] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad860 [0233.558] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220490 | out: hHeap=0x1f0000) returned 1 [0233.558] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x106) returned 0x2373b0 [0233.558] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad860 | out: hHeap=0x1f0000) returned 1 [0233.558] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388c0 [0233.559] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238950 [0233.559] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1040\\SetupResources.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1040\\setupresources.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e230, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1bc [0233.560] GetFileType (hFile=0x1bc) returned 0x1 [0233.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387e0 [0233.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238990 [0233.583] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1040\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1040\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc [0233.583] GetFileType (hFile=0x1cc) returned 0x1 [0233.583] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204db0 [0233.583] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f50 [0233.583] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad580 [0233.583] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238910 [0233.584] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238820 [0233.584] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1040\\SetupResources.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1040\\setupresources.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0233.585] GetFileType (hFile=0x23c) returned 0x1 [0233.585] GetLastError () returned 0xb7 [0233.585] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe4) returned 0x229418 [0233.585] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d30 [0233.585] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c90 [0233.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204dd0 [0233.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2add68 [0233.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238830 [0233.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238890 [0233.587] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1040\\SetupResources.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1040\\setupresources.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0233.587] GetFileType (hFile=0x1ac) returned 0x1 [0233.588] GetLastError () returned 0xb7 [0233.588] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bf0 [0233.588] GetLastError () returned 0xb7 [0233.588] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d90 [0233.588] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f50 [0233.588] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d10 [0233.588] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb8) returned 0x224060 [0233.588] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388f0 [0233.589] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238810 [0233.589] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1040\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1040\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1a4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0233.590] GetFileType (hFile=0x1b0) returned 0x1 [0233.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28ffe0 [0233.590] ReadFile (in: hFile=0x1b0, lpBuffer=0x28ffe0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e100, lpOverlapped=0x0 | out: lpBuffer=0x28ffe0*, lpNumberOfBytesRead=0x173e100*=0x1000, lpOverlapped=0x0) returned 1 [0233.618] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24b5e0 [0233.620] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x290fe8 [0233.620] GetLastError () returned 0x0 [0233.648] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2026d0 [0233.649] GetLastError () returned 0x0 [0233.650] CloseHandle (hObject=0x1bc) returned 1 [0233.651] CloseHandle (hObject=0x1cc) returned 1 [0233.651] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238800 [0233.651] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387f0 [0233.652] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1040\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1040\\setupresources.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc [0233.654] GetFileType (hFile=0x1cc) returned 0x1 [0233.655] GetLastError () returned 0xb7 [0233.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x289fb0 [0233.655] GetLastError () returned 0xb7 [0233.657] CloseHandle (hObject=0x1cc) returned 1 [0233.658] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1040\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1040\\setupresources.dll")) returned 0 [0233.658] GetLastError () returned 0x20 [0233.658] GetLastError () returned 0x20 [0233.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228b00 [0233.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2385a0 [0233.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2386b8 [0233.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x228b90 [0233.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d10 [0233.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0233.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x238920 [0233.659] GetLastError () returned 0x20 [0233.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239278 [0233.659] GetLastError () returned 0x20 [0233.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238c20 [0233.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235700 [0233.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238640 [0233.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285cf8 [0233.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238840 [0233.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2386e0 [0233.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2026e8 [0233.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388d0 [0233.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384d8 [0233.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f968 [0233.661] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238500 [0233.661] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2857d0 [0233.661] GetLastError () returned 0x20 [0233.661] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x2388e0 [0233.661] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238860 [0233.661] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238870 [0233.661] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238860 | out: hHeap=0x1f0000) returned 1 [0233.661] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238860 [0233.662] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238870 | out: hHeap=0x1f0000) returned 1 [0233.662] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388e0 | out: hHeap=0x1f0000) returned 1 [0233.662] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238980 [0233.662] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f980 [0233.662] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238980 | out: hHeap=0x1f0000) returned 1 [0233.662] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f998 [0233.662] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f980 | out: hHeap=0x1f0000) returned 1 [0233.662] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238860 | out: hHeap=0x1f0000) returned 1 [0233.663] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f908 [0233.663] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f980 [0233.663] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f908 | out: hHeap=0x1f0000) returned 1 [0233.663] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f9c8 [0233.663] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f980 | out: hHeap=0x1f0000) returned 1 [0233.663] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f998 | out: hHeap=0x1f0000) returned 1 [0233.663] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f980 [0233.663] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204db0 [0233.664] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f980 | out: hHeap=0x1f0000) returned 1 [0233.664] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204df0 [0233.664] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204db0 | out: hHeap=0x1f0000) returned 1 [0233.664] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f9c8 | out: hHeap=0x1f0000) returned 1 [0233.664] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c90 [0233.664] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2385c8 [0233.664] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c90 | out: hHeap=0x1f0000) returned 1 [0233.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204bb0 [0233.962] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385c8 | out: hHeap=0x1f0000) returned 1 [0233.963] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204df0 | out: hHeap=0x1f0000) returned 1 [0233.963] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204c90 [0233.963] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206658 [0233.963] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c90 | out: hHeap=0x1f0000) returned 1 [0233.963] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260748 [0233.963] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206658 | out: hHeap=0x1f0000) returned 1 [0233.963] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bb0 | out: hHeap=0x1f0000) returned 1 [0233.963] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238930 [0233.963] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f908 [0233.963] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238930 | out: hHeap=0x1f0000) returned 1 [0233.963] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f920 [0233.963] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f908 | out: hHeap=0x1f0000) returned 1 [0233.964] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204f70 [0233.964] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f920 | out: hHeap=0x1f0000) returned 1 [0233.964] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206658 [0233.964] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f70 | out: hHeap=0x1f0000) returned 1 [0233.964] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206658 | out: hHeap=0x1f0000) returned 1 [0233.964] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0233.964] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385a0 | out: hHeap=0x1f0000) returned 1 [0233.964] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac6d8 [0233.964] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285cf8 | out: hHeap=0x1f0000) returned 1 [0233.964] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238640 | out: hHeap=0x1f0000) returned 1 [0233.964] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238e88 [0233.964] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260518 [0233.965] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x212b58) returned 1 [0233.966] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x260518 | out: pbBuffer=0x260518) returned 1 [0233.966] CryptReleaseContext (hProv=0x212b58, dwFlags=0x0) returned 1 [0233.966] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0233.966] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2608b0 [0233.966] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260518 [0233.966] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239080 [0233.966] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608b0 | out: hHeap=0x1f0000) returned 1 [0233.966] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab580 [0233.966] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239080 | out: hHeap=0x1f0000) returned 1 [0233.966] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8950 [0233.966] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f908 [0233.967] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x2b03e8 [0233.967] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2604f0 [0233.967] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285ae8 [0233.967] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d10 [0233.967] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0790 [0233.967] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2606d0 [0233.967] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285bf0 [0233.967] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238930 [0233.967] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2607c0 [0233.967] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f920 [0233.968] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389b0 [0233.968] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260540 [0233.968] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f950 [0233.968] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f950 | out: hHeap=0x1f0000) returned 1 [0233.968] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0233.968] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389b0 | out: hHeap=0x1f0000) returned 1 [0233.968] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f920 | out: hHeap=0x1f0000) returned 1 [0233.968] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607c0 | out: hHeap=0x1f0000) returned 1 [0233.968] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238930 | out: hHeap=0x1f0000) returned 1 [0233.968] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285bf0 | out: hHeap=0x1f0000) returned 1 [0233.968] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0233.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0790 | out: hHeap=0x1f0000) returned 1 [0233.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238cc8 [0233.969] GetLastError () returned 0x0 [0233.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238f68 [0233.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab6a8 [0233.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab6a8 | out: hHeap=0x1f0000) returned 1 [0233.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab458 [0233.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab6a8 [0233.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab458 | out: hHeap=0x1f0000) returned 1 [0233.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab6a8 | out: hHeap=0x1f0000) returned 1 [0233.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x24ed40 [0233.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285bf0 [0233.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab8f8 [0233.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab8f8 | out: hHeap=0x1f0000) returned 1 [0233.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac488 [0233.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac488 | out: hHeap=0x1f0000) returned 1 [0233.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285cf8 [0233.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac5b0 [0233.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac5b0 | out: hHeap=0x1f0000) returned 1 [0233.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f6a0 [0233.971] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x267598 [0233.971] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2af260 [0233.971] QueryPerformanceCounter (in: lpPerformanceCount=0x173dee0 | out: lpPerformanceCount=0x173dee0*=39134016126) returned 1 [0233.971] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173df20 | out: lpSystemTimeAsFileTime=0x173df20) [0233.972] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238960 [0233.972] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260838 [0233.972] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f50 [0233.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f50 | out: hHeap=0x1f0000) returned 1 [0233.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260838 | out: hHeap=0x1f0000) returned 1 [0233.972] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0233.972] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bf0 [0233.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bf0 | out: hHeap=0x1f0000) returned 1 [0233.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0233.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238960 | out: hHeap=0x1f0000) returned 1 [0233.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0233.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238f30 [0233.973] GetLastError () returned 0x0 [0233.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abd98 [0233.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab458 [0233.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abec0 [0233.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260540 [0233.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260568 [0233.974] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab8f8 [0233.974] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac488 [0233.974] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2606a8 [0233.974] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab208 [0233.974] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x234b90 [0233.974] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2acb78 [0233.974] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x20c2c0 [0233.974] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2acb78 | out: hHeap=0x1f0000) returned 1 [0233.974] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x22b018 [0233.974] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20c2c0 | out: hHeap=0x1f0000) returned 1 [0233.974] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2606d0 [0233.975] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260928 [0233.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0233.975] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2acca0 [0233.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0233.975] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x20c2c0 [0233.975] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x2647e0 [0233.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2647e0 | out: hHeap=0x1f0000) returned 1 [0233.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20c2c0 | out: hHeap=0x1f0000) returned 1 [0233.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b018 | out: hHeap=0x1f0000) returned 1 [0233.975] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f920 [0233.975] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2284d0 [0233.975] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2607c0 [0233.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2607e8 [0233.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260928 [0233.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2606d0 [0233.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607e8 | out: hHeap=0x1f0000) returned 1 [0233.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607c0 | out: hHeap=0x1f0000) returned 1 [0233.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x20c2c0 [0233.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260748 [0233.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260770 [0233.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0233.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aca50 [0233.977] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0233.977] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2067d8 [0233.977] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x2a9c88 [0233.977] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a9c88 | out: hHeap=0x1f0000) returned 1 [0233.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2067d8 | out: hHeap=0x1f0000) returned 1 [0233.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0233.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abfe8 [0233.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aca50 | out: hHeap=0x1f0000) returned 1 [0233.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20c2c0 | out: hHeap=0x1f0000) returned 1 [0233.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204db0 [0233.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abb48 [0233.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abc70 [0233.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0233.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac110 [0233.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abc70 | out: hHeap=0x1f0000) returned 1 [0233.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0233.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0233.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2284d0 | out: hHeap=0x1f0000) returned 1 [0233.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abb48 | out: hHeap=0x1f0000) returned 1 [0233.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204db0 | out: hHeap=0x1f0000) returned 1 [0233.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f920 | out: hHeap=0x1f0000) returned 1 [0233.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2acca0 | out: hHeap=0x1f0000) returned 1 [0233.980] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac238 [0233.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac238 | out: hHeap=0x1f0000) returned 1 [0233.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b90 | out: hHeap=0x1f0000) returned 1 [0233.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab208 | out: hHeap=0x1f0000) returned 1 [0233.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abfe8 | out: hHeap=0x1f0000) returned 1 [0233.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac488 | out: hHeap=0x1f0000) returned 1 [0233.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab8f8 | out: hHeap=0x1f0000) returned 1 [0233.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0233.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abec0 | out: hHeap=0x1f0000) returned 1 [0233.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab458 | out: hHeap=0x1f0000) returned 1 [0233.980] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aafb8 [0233.981] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab458 [0233.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aafb8 | out: hHeap=0x1f0000) returned 1 [0233.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab458 | out: hHeap=0x1f0000) returned 1 [0233.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac110 | out: hHeap=0x1f0000) returned 1 [0233.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abd98 | out: hHeap=0x1f0000) returned 1 [0233.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285cf8 | out: hHeap=0x1f0000) returned 1 [0233.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24ed40 | out: hHeap=0x1f0000) returned 1 [0233.981] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x2af490 [0233.981] GetLastError () returned 0x0 [0233.982] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389b0 [0233.982] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238930 [0233.983] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1040\\SetupResources.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1040\\setupresources.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e290, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0233.983] GetFileType (hFile=0x204) returned 0x1 [0233.984] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x291ff0 [0233.984] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e218 | out: lpNewFilePointer=0x0) returned 1 [0233.984] GetLastError () returned 0xb7 [0233.984] CloseHandle (hObject=0x204) returned 1 [0233.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238930 | out: hHeap=0x1f0000) returned 1 [0233.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389b0 | out: hHeap=0x1f0000) returned 1 [0233.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285bf0 | out: hHeap=0x1f0000) returned 1 [0233.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285ae8 | out: hHeap=0x1f0000) returned 1 [0233.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0233.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d10 | out: hHeap=0x1f0000) returned 1 [0233.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b03e8 | out: hHeap=0x1f0000) returned 1 [0233.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f908 | out: hHeap=0x1f0000) returned 1 [0233.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8950 | out: hHeap=0x1f0000) returned 1 [0233.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2af490 | out: hHeap=0x1f0000) returned 1 [0233.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0233.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab580 | out: hHeap=0x1f0000) returned 1 [0233.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x267598 | out: hHeap=0x1f0000) returned 1 [0233.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2af260 | out: hHeap=0x1f0000) returned 1 [0233.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238e88 | out: hHeap=0x1f0000) returned 1 [0233.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238920 | out: hHeap=0x1f0000) returned 1 [0233.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f968 | out: hHeap=0x1f0000) returned 1 [0233.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384d8 | out: hHeap=0x1f0000) returned 1 [0233.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388d0 | out: hHeap=0x1f0000) returned 1 [0233.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2026e8 | out: hHeap=0x1f0000) returned 1 [0233.987] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2386e0 | out: hHeap=0x1f0000) returned 1 [0233.987] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238840 | out: hHeap=0x1f0000) returned 1 [0233.987] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2857d0 | out: hHeap=0x1f0000) returned 1 [0233.987] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238500 | out: hHeap=0x1f0000) returned 1 [0233.987] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0233.987] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228b90 | out: hHeap=0x1f0000) returned 1 [0233.987] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2386b8 | out: hHeap=0x1f0000) returned 1 [0233.987] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac6d8 | out: hHeap=0x1f0000) returned 1 [0233.987] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228b00 | out: hHeap=0x1f0000) returned 1 [0233.987] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387f0 | out: hHeap=0x1f0000) returned 1 [0233.987] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238800 | out: hHeap=0x1f0000) returned 1 [0233.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28ffe0 | out: hHeap=0x1f0000) returned 1 [0233.988] CloseHandle (hObject=0x1b0) returned 1 [0233.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238810 | out: hHeap=0x1f0000) returned 1 [0233.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388f0 | out: hHeap=0x1f0000) returned 1 [0233.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224060 | out: hHeap=0x1f0000) returned 1 [0233.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24b5e0 | out: hHeap=0x1f0000) returned 1 [0233.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2026d0 | out: hHeap=0x1f0000) returned 1 [0233.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d90 | out: hHeap=0x1f0000) returned 1 [0233.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x290fe8 | out: hHeap=0x1f0000) returned 1 [0233.989] CloseHandle (hObject=0x1ac) returned 1 [0233.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238890 | out: hHeap=0x1f0000) returned 1 [0233.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238830 | out: hHeap=0x1f0000) returned 1 [0233.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2add68 | out: hHeap=0x1f0000) returned 1 [0233.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d30 | out: hHeap=0x1f0000) returned 1 [0233.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0233.990] CloseHandle (hObject=0x23c) returned 1 [0233.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238820 | out: hHeap=0x1f0000) returned 1 [0233.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238910 | out: hHeap=0x1f0000) returned 1 [0233.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad580 | out: hHeap=0x1f0000) returned 1 [0233.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238990 | out: hHeap=0x1f0000) returned 1 [0233.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387e0 | out: hHeap=0x1f0000) returned 1 [0233.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238950 | out: hHeap=0x1f0000) returned 1 [0233.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388c0 | out: hHeap=0x1f0000) returned 1 [0233.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2373b0 | out: hHeap=0x1f0000) returned 1 [0233.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2595a0 | out: hHeap=0x1f0000) returned 1 [0233.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237180 | out: hHeap=0x1f0000) returned 1 [0233.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2066b8 | out: hHeap=0x1f0000) returned 1 [0233.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0233.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0233.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233978 | out: hHeap=0x1f0000) returned 1 [0233.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x258298 | out: hHeap=0x1f0000) returned 1 [0233.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2375e0 | out: hHeap=0x1f0000) returned 1 [0233.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c90 | out: hHeap=0x1f0000) returned 1 [0233.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214e38 | out: hHeap=0x1f0000) returned 1 [0233.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261e58 | out: hHeap=0x1f0000) returned 1 [0233.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228b48 | out: hHeap=0x1f0000) returned 1 [0233.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0233.993] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1040\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1040\\setupresources.dll")) returned 1 [0233.996] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0233.996] FindClose (in: hFindFile=0x24eb40 | out: hFindFile=0x24eb40) returned 1 [0233.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214dd0 | out: hHeap=0x1f0000) returned 1 [0233.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d6a0 | out: hHeap=0x1f0000) returned 1 [0233.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0233.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2285f0 | out: hHeap=0x1f0000) returned 1 [0233.996] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228b00 [0233.996] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0233.996] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x261cc0 [0233.997] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228b48 [0233.997] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1041\\*", lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e6c0 [0233.997] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228518 [0233.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228b48 | out: hHeap=0x1f0000) returned 1 [0233.997] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0233.997] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0233.997] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2287a0 [0233.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228518 | out: hHeap=0x1f0000) returned 1 [0233.997] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0233.997] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0233.998] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x278d, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0233.998] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0233.998] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228b48 [0233.998] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x214dd0 [0233.998] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228b48 | out: hHeap=0x1f0000) returned 1 [0233.998] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2287a0 | out: hHeap=0x1f0000) returned 1 [0233.998] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0233.998] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1041\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1041\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0233.999] GetFileType (hFile=0x23c) returned 0x1 [0233.999] CloseHandle (hObject=0x23c) returned 1 [0233.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8950 [0233.999] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1041\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1041\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x173eb6c | out: lpFileInformation=0x173eb6c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x278d)) returned 1 [0233.999] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8950 | out: hHeap=0x1f0000) returned 1 [0234.000] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8a58 [0234.000] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1041\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1041\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x173eb7c | out: lpFileInformation=0x173eb7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x278d)) returned 1 [0234.000] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8a58 | out: hHeap=0x1f0000) returned 1 [0234.000] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a82c8 [0234.000] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a82c8 | out: hHeap=0x1f0000) returned 1 [0234.000] GetLastError () returned 0x0 [0234.000] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0234.000] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228b48 [0234.000] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x261e58 [0234.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8110 [0234.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239010 [0234.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0234.001] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x212f10) returned 1 [0234.002] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x260978 | out: pbBuffer=0x260978) returned 1 [0234.002] CryptReleaseContext (hProv=0x212f10, dwFlags=0x0) returned 1 [0234.002] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0234.002] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x2595a0 [0234.002] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2aebd0 [0234.002] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=39137119328) returned 1 [0234.002] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0234.003] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=39137155660) returned 1 [0234.003] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0234.003] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238d70 [0234.003] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x258298 [0234.003] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2aee00 [0234.003] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x2333c8 [0234.003] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f908 [0234.004] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206658 [0234.004] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f920 [0234.004] GetLastError () returned 0x0 [0234.004] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214e38 [0234.004] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a038 [0234.004] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214e38 | out: hHeap=0x1f0000) returned 1 [0234.004] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xee) returned 0x21b650 [0234.004] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a038 | out: hHeap=0x1f0000) returned 1 [0234.004] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387e0 [0234.005] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238820 [0234.006] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1041\\eula.rtf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1041\\eula.rtf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e230, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x238 [0234.067] GetFileType (hFile=0x238) returned 0x1 [0234.067] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238af0 [0234.068] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b10 [0234.068] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1041\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1041\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0234.069] GetFileType (hFile=0x224) returned 0x1 [0234.069] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bf0 [0234.069] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204df0 [0234.070] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad638 [0234.070] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b20 [0234.070] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b30 [0234.071] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1041\\eula.rtf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1041\\eula.rtf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0234.071] GetFileType (hFile=0x1f4) returned 0x1 [0234.072] GetLastError () returned 0xb7 [0234.072] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe4) returned 0x22d368 [0234.072] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bf0 [0234.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204b90 [0234.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f10 [0234.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad358 [0234.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389f0 [0234.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b60 [0234.074] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1041\\eula.rtf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1041\\eula.rtf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0234.075] GetFileType (hFile=0x200) returned 0x1 [0234.075] GetLastError () returned 0xb7 [0234.076] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204df0 [0234.076] GetLastError () returned 0xb7 [0234.076] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f10 [0234.076] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d10 [0234.076] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cf0 [0234.077] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb8) returned 0x224660 [0234.077] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a30 [0234.077] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a50 [0234.078] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1041\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1041\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1a4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0234.079] GetFileType (hFile=0x23c) returned 0x1 [0234.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28cfc8 [0234.080] ReadFile (in: hFile=0x23c, lpBuffer=0x28cfc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e100, lpOverlapped=0x0 | out: lpBuffer=0x28cfc8*, lpNumberOfBytesRead=0x173e100*=0x1000, lpOverlapped=0x0) returned 1 [0234.196] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24d218 [0234.197] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x289fb0 [0234.197] GetLastError () returned 0x0 [0234.325] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f9b0 [0234.325] GetLastError () returned 0x0 [0234.326] CloseHandle (hObject=0x238) returned 1 [0234.327] CloseHandle (hObject=0x224) returned 1 [0234.327] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b90 [0234.327] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b70 [0234.328] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1041\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1041\\eula.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0234.330] GetFileType (hFile=0x224) returned 0x1 [0234.330] GetLastError () returned 0xb7 [0234.330] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x290fe8 [0234.331] GetLastError () returned 0xb7 [0234.332] CloseHandle (hObject=0x224) returned 1 [0234.332] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1041\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1041\\eula.rtf")) returned 0 [0234.332] GetLastError () returned 0x20 [0234.332] GetLastError () returned 0x20 [0234.332] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228b90 [0234.333] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2604f0 [0234.333] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260770 [0234.333] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x228cb0 [0234.333] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f50 [0234.333] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c90 [0234.333] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x238ba0 [0234.333] GetLastError () returned 0x20 [0234.333] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239198 [0234.333] GetLastError () returned 0x20 [0234.333] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238f68 [0234.333] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214e38 [0234.333] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260518 [0234.333] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2854b8 [0234.334] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387f0 [0234.334] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260798 [0234.334] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f998 [0234.334] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388b0 [0234.334] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0234.334] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f938 [0234.334] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260540 [0234.334] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2855c0 [0234.334] GetLastError () returned 0x20 [0234.334] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x2389b0 [0234.334] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x2388d0 [0234.334] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238800 [0234.335] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388d0 | out: hHeap=0x1f0000) returned 1 [0234.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238910 [0234.335] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238800 | out: hHeap=0x1f0000) returned 1 [0234.335] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389b0 | out: hHeap=0x1f0000) returned 1 [0234.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238980 [0234.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f950 [0234.335] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238980 | out: hHeap=0x1f0000) returned 1 [0234.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f968 [0234.335] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f950 | out: hHeap=0x1f0000) returned 1 [0234.335] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238910 | out: hHeap=0x1f0000) returned 1 [0234.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f950 [0234.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f980 [0234.335] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f950 | out: hHeap=0x1f0000) returned 1 [0234.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f950 [0234.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f980 | out: hHeap=0x1f0000) returned 1 [0234.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f968 | out: hHeap=0x1f0000) returned 1 [0234.336] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f968 [0234.336] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204cf0 [0234.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f968 | out: hHeap=0x1f0000) returned 1 [0234.336] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0234.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cf0 | out: hHeap=0x1f0000) returned 1 [0234.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f950 | out: hHeap=0x1f0000) returned 1 [0234.337] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d90 [0234.337] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260608 [0234.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d90 | out: hHeap=0x1f0000) returned 1 [0234.338] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204df0 [0234.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0234.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d70 | out: hHeap=0x1f0000) returned 1 [0234.338] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204d10 [0234.338] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206688 [0234.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d10 | out: hHeap=0x1f0000) returned 1 [0234.338] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2604c8 [0234.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206688 | out: hHeap=0x1f0000) returned 1 [0234.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204df0 | out: hHeap=0x1f0000) returned 1 [0234.338] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238960 [0234.339] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f980 [0234.339] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238960 | out: hHeap=0x1f0000) returned 1 [0234.339] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f950 [0234.339] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f980 | out: hHeap=0x1f0000) returned 1 [0234.339] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204d90 [0234.339] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f950 | out: hHeap=0x1f0000) returned 1 [0234.339] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x2067d8 [0234.339] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d90 | out: hHeap=0x1f0000) returned 1 [0234.339] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2067d8 | out: hHeap=0x1f0000) returned 1 [0234.339] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604c8 | out: hHeap=0x1f0000) returned 1 [0234.340] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0234.340] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2acdc8 [0234.340] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2854b8 | out: hHeap=0x1f0000) returned 1 [0234.340] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0234.340] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238d70 [0234.340] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0234.340] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x212b58) returned 1 [0234.341] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x260928 | out: pbBuffer=0x260928) returned 1 [0234.341] CryptReleaseContext (hProv=0x212b58, dwFlags=0x0) returned 1 [0234.342] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0234.342] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2609a0 [0234.342] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2607c0 [0234.342] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238e88 [0234.342] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0234.342] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aca50 [0234.342] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238e88 | out: hHeap=0x1f0000) returned 1 [0234.342] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a80b8 [0234.342] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f980 [0234.343] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x235e50 [0234.343] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260748 [0234.343] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2854b8 [0234.343] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c90 [0234.343] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236330 [0234.343] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2609a0 [0234.343] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285cf8 [0234.343] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238880 [0234.343] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2607e8 [0234.343] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f950 [0234.343] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238950 [0234.343] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0234.344] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f968 [0234.344] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f968 | out: hHeap=0x1f0000) returned 1 [0234.344] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0234.344] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238950 | out: hHeap=0x1f0000) returned 1 [0234.344] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f950 | out: hHeap=0x1f0000) returned 1 [0234.344] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607e8 | out: hHeap=0x1f0000) returned 1 [0234.344] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238880 | out: hHeap=0x1f0000) returned 1 [0234.344] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285cf8 | out: hHeap=0x1f0000) returned 1 [0234.344] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0234.344] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236330 | out: hHeap=0x1f0000) returned 1 [0234.344] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x2391d0 [0234.345] GetLastError () returned 0x0 [0234.345] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238de0 [0234.345] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac238 [0234.345] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac238 | out: hHeap=0x1f0000) returned 1 [0234.345] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac6d8 [0234.345] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac488 [0234.345] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac6d8 | out: hHeap=0x1f0000) returned 1 [0234.345] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac488 | out: hHeap=0x1f0000) returned 1 [0234.346] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x24ed00 [0234.346] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285cf8 [0234.346] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab208 [0234.346] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab208 | out: hHeap=0x1f0000) returned 1 [0234.346] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abec0 [0234.346] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abec0 | out: hHeap=0x1f0000) returned 1 [0234.346] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2857d0 [0234.346] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab458 [0234.346] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab458 | out: hHeap=0x1f0000) returned 1 [0234.346] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fda8 [0234.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x251068 [0234.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2ae9a0 [0234.347] QueryPerformanceCounter (in: lpPerformanceCount=0x173dee0 | out: lpPerformanceCount=0x173dee0*=39171583588) returned 1 [0234.347] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173df20 | out: lpSystemTimeAsFileTime=0x173df20) [0234.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x2388c0 [0234.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0234.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f30 [0234.347] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f30 | out: hHeap=0x1f0000) returned 1 [0234.348] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0234.348] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605e0 [0234.348] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f30 [0234.348] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f30 | out: hHeap=0x1f0000) returned 1 [0234.348] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605e0 | out: hHeap=0x1f0000) returned 1 [0234.348] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388c0 | out: hHeap=0x1f0000) returned 1 [0234.348] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0234.348] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239278 [0234.348] GetLastError () returned 0x0 [0234.348] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac800 [0234.348] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac5b0 [0234.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac110 [0234.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2607e8 [0234.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260928 [0234.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab580 [0234.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abc70 [0234.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260810 [0234.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2acb78 [0234.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x222ee8 [0234.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab330 [0234.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0234.349] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab330 | out: hHeap=0x1f0000) returned 1 [0234.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x20c2c0 [0234.349] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0234.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260838 [0234.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2606f8 [0234.349] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260838 | out: hHeap=0x1f0000) returned 1 [0234.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abec0 [0234.350] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606f8 | out: hHeap=0x1f0000) returned 1 [0234.350] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0234.350] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x234b90 [0234.350] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b90 | out: hHeap=0x1f0000) returned 1 [0234.350] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0234.350] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20c2c0 | out: hHeap=0x1f0000) returned 1 [0234.350] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f950 [0234.350] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2287a0 [0234.350] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260838 [0234.350] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2606f8 [0234.350] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2604c8 [0234.350] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260568 [0234.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606f8 | out: hHeap=0x1f0000) returned 1 [0234.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260838 | out: hHeap=0x1f0000) returned 1 [0234.351] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0234.351] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260838 [0234.351] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2609a0 [0234.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260838 | out: hHeap=0x1f0000) returned 1 [0234.351] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab208 [0234.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0234.351] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2067d8 [0234.351] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x2aa518 [0234.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aa518 | out: hHeap=0x1f0000) returned 1 [0234.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2067d8 | out: hHeap=0x1f0000) returned 1 [0234.352] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0234.352] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac488 [0234.352] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab208 | out: hHeap=0x1f0000) returned 1 [0234.352] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0234.352] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204cf0 [0234.352] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2acca0 [0234.352] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac928 [0234.352] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0234.352] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aafb8 [0234.352] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac928 | out: hHeap=0x1f0000) returned 1 [0234.353] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0234.353] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604c8 | out: hHeap=0x1f0000) returned 1 [0234.353] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2287a0 | out: hHeap=0x1f0000) returned 1 [0234.353] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2acca0 | out: hHeap=0x1f0000) returned 1 [0234.353] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cf0 | out: hHeap=0x1f0000) returned 1 [0234.353] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f950 | out: hHeap=0x1f0000) returned 1 [0234.353] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abec0 | out: hHeap=0x1f0000) returned 1 [0234.353] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab6a8 [0234.353] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab6a8 | out: hHeap=0x1f0000) returned 1 [0234.353] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ee8 | out: hHeap=0x1f0000) returned 1 [0234.353] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2acb78 | out: hHeap=0x1f0000) returned 1 [0234.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac488 | out: hHeap=0x1f0000) returned 1 [0234.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abc70 | out: hHeap=0x1f0000) returned 1 [0234.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab580 | out: hHeap=0x1f0000) returned 1 [0234.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607e8 | out: hHeap=0x1f0000) returned 1 [0234.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac110 | out: hHeap=0x1f0000) returned 1 [0234.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac5b0 | out: hHeap=0x1f0000) returned 1 [0234.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab330 [0234.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac928 [0234.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab330 | out: hHeap=0x1f0000) returned 1 [0234.658] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac928 | out: hHeap=0x1f0000) returned 1 [0234.681] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aafb8 | out: hHeap=0x1f0000) returned 1 [0234.681] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac800 | out: hHeap=0x1f0000) returned 1 [0234.681] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2857d0 | out: hHeap=0x1f0000) returned 1 [0234.681] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24ed00 | out: hHeap=0x1f0000) returned 1 [0234.681] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x2aeab8 [0234.681] GetLastError () returned 0x0 [0234.681] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b50 [0234.682] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b80 [0234.683] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1041\\eula.rtf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1041\\eula.rtf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e290, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0234.683] GetFileType (hFile=0x210) returned 0x1 [0234.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x288fa8 [0234.684] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e218 | out: lpNewFilePointer=0x0) returned 1 [0234.684] GetLastError () returned 0xb7 [0234.685] CloseHandle (hObject=0x210) returned 1 [0234.685] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b80 | out: hHeap=0x1f0000) returned 1 [0234.685] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b50 | out: hHeap=0x1f0000) returned 1 [0234.685] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285cf8 | out: hHeap=0x1f0000) returned 1 [0234.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2854b8 | out: hHeap=0x1f0000) returned 1 [0234.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0234.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c90 | out: hHeap=0x1f0000) returned 1 [0234.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235e50 | out: hHeap=0x1f0000) returned 1 [0234.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f980 | out: hHeap=0x1f0000) returned 1 [0234.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a80b8 | out: hHeap=0x1f0000) returned 1 [0234.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aeab8 | out: hHeap=0x1f0000) returned 1 [0234.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607c0 | out: hHeap=0x1f0000) returned 1 [0234.687] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aca50 | out: hHeap=0x1f0000) returned 1 [0234.687] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x251068 | out: hHeap=0x1f0000) returned 1 [0234.687] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae9a0 | out: hHeap=0x1f0000) returned 1 [0234.687] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238d70 | out: hHeap=0x1f0000) returned 1 [0234.687] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ba0 | out: hHeap=0x1f0000) returned 1 [0234.687] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f938 | out: hHeap=0x1f0000) returned 1 [0234.687] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0234.687] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388b0 | out: hHeap=0x1f0000) returned 1 [0234.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f998 | out: hHeap=0x1f0000) returned 1 [0234.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260798 | out: hHeap=0x1f0000) returned 1 [0234.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387f0 | out: hHeap=0x1f0000) returned 1 [0234.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2855c0 | out: hHeap=0x1f0000) returned 1 [0234.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0234.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214e38 | out: hHeap=0x1f0000) returned 1 [0234.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228cb0 | out: hHeap=0x1f0000) returned 1 [0234.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0234.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2acdc8 | out: hHeap=0x1f0000) returned 1 [0234.689] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228b90 | out: hHeap=0x1f0000) returned 1 [0234.689] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b70 | out: hHeap=0x1f0000) returned 1 [0234.689] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b90 | out: hHeap=0x1f0000) returned 1 [0234.689] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28cfc8 | out: hHeap=0x1f0000) returned 1 [0234.689] CloseHandle (hObject=0x23c) returned 1 [0234.690] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a50 | out: hHeap=0x1f0000) returned 1 [0234.690] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a30 | out: hHeap=0x1f0000) returned 1 [0234.690] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224660 | out: hHeap=0x1f0000) returned 1 [0234.690] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24d218 | out: hHeap=0x1f0000) returned 1 [0234.690] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f9b0 | out: hHeap=0x1f0000) returned 1 [0234.690] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f10 | out: hHeap=0x1f0000) returned 1 [0234.690] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x289fb0 | out: hHeap=0x1f0000) returned 1 [0234.691] CloseHandle (hObject=0x200) returned 1 [0234.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b60 | out: hHeap=0x1f0000) returned 1 [0234.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389f0 | out: hHeap=0x1f0000) returned 1 [0234.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad358 | out: hHeap=0x1f0000) returned 1 [0234.692] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bf0 | out: hHeap=0x1f0000) returned 1 [0234.692] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d368 | out: hHeap=0x1f0000) returned 1 [0234.692] CloseHandle (hObject=0x1f4) returned 1 [0234.692] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b30 | out: hHeap=0x1f0000) returned 1 [0234.693] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b20 | out: hHeap=0x1f0000) returned 1 [0234.693] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad638 | out: hHeap=0x1f0000) returned 1 [0234.693] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b10 | out: hHeap=0x1f0000) returned 1 [0234.693] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238af0 | out: hHeap=0x1f0000) returned 1 [0234.693] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238820 | out: hHeap=0x1f0000) returned 1 [0234.693] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387e0 | out: hHeap=0x1f0000) returned 1 [0234.693] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21b650 | out: hHeap=0x1f0000) returned 1 [0234.693] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x258298 | out: hHeap=0x1f0000) returned 1 [0234.694] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aee00 | out: hHeap=0x1f0000) returned 1 [0234.694] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206658 | out: hHeap=0x1f0000) returned 1 [0234.694] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f920 | out: hHeap=0x1f0000) returned 1 [0234.694] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f908 | out: hHeap=0x1f0000) returned 1 [0234.694] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2333c8 | out: hHeap=0x1f0000) returned 1 [0234.694] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2595a0 | out: hHeap=0x1f0000) returned 1 [0234.694] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aebd0 | out: hHeap=0x1f0000) returned 1 [0234.694] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239010 | out: hHeap=0x1f0000) returned 1 [0234.694] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8110 | out: hHeap=0x1f0000) returned 1 [0234.694] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261e58 | out: hHeap=0x1f0000) returned 1 [0234.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228b48 | out: hHeap=0x1f0000) returned 1 [0234.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0234.695] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1041\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1041\\eula.rtf")) returned 1 [0234.697] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x10a82, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0234.697] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2391d0 [0234.697] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228cf8 [0234.697] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0110 [0234.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228cf8 | out: hHeap=0x1f0000) returned 1 [0234.698] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214dd0 | out: hHeap=0x1f0000) returned 1 [0234.698] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2391d0 | out: hHeap=0x1f0000) returned 1 [0234.698] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1041\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1041\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0234.699] GetFileType (hFile=0x1f4) returned 0x1 [0234.699] CloseHandle (hObject=0x1f4) returned 1 [0234.700] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b03e8 [0234.700] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1041\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1041\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x173eb6c | out: lpFileInformation=0x173eb6c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x10a82)) returned 1 [0234.700] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b03e8 | out: hHeap=0x1f0000) returned 1 [0234.700] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b00a8 [0234.700] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1041\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1041\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x173eb7c | out: lpFileInformation=0x173eb7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x10a82)) returned 1 [0234.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b00a8 | out: hHeap=0x1f0000) returned 1 [0234.701] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b06c0 [0234.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b06c0 | out: hHeap=0x1f0000) returned 1 [0234.701] GetLastError () returned 0x0 [0234.701] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0234.701] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2285a8 [0234.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262fe0 [0234.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b03e8 [0234.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239010 [0234.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260900 [0234.702] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x2133d8) returned 1 [0234.703] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x260900 | out: pbBuffer=0x260900) returned 1 [0234.703] CryptReleaseContext (hProv=0x2133d8, dwFlags=0x0) returned 1 [0234.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260900 | out: hHeap=0x1f0000) returned 1 [0234.703] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x254980 [0234.704] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2af490 [0234.704] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=39207258619) returned 1 [0234.704] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0234.704] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=39207295895) returned 1 [0234.704] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0234.704] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x2391d0 [0234.705] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x258298 [0234.705] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2ae770 [0234.705] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x232fb8 [0234.705] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f980 [0234.705] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206628 [0234.705] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f920 [0234.705] GetLastError () returned 0x0 [0234.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fef0 [0234.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad4c8 [0234.706] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fef0 | out: hHeap=0x1f0000) returned 1 [0234.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x106) returned 0x2ae888 [0234.706] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad4c8 | out: hHeap=0x1f0000) returned 1 [0234.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388f0 [0234.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238810 [0234.707] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1041\\LocalizedData.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1041\\localizeddata.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e230, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0234.708] GetFileType (hFile=0x1f4) returned 0x1 [0234.708] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238910 [0234.709] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388b0 [0234.709] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1041\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1041\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0234.710] GetFileType (hFile=0x200) returned 0x1 [0234.710] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0234.710] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e90 [0234.710] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad078 [0234.710] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387e0 [0234.710] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389b0 [0234.711] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1041\\LocalizedData.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1041\\localizeddata.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0234.711] GetFileType (hFile=0x23c) returned 0x1 [0234.712] GetLastError () returned 0xb7 [0234.712] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe4) returned 0x22d368 [0234.712] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c70 [0234.712] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f70 [0234.713] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e30 [0234.713] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad410 [0234.713] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238920 [0234.713] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238980 [0234.713] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1041\\LocalizedData.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1041\\localizeddata.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0234.714] GetFileType (hFile=0x210) returned 0x1 [0234.714] GetLastError () returned 0xb7 [0234.714] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d10 [0234.714] GetLastError () returned 0xb7 [0234.715] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cf0 [0234.715] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e30 [0234.715] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f70 [0234.715] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb8) returned 0x223be0 [0234.715] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238990 [0234.715] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388c0 [0234.716] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1041\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1041\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1a4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0234.716] GetFileType (hFile=0x1e0) returned 0x1 [0234.717] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x288fa8 [0234.717] ReadFile (in: hFile=0x1e0, lpBuffer=0x288fa8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e100, lpOverlapped=0x0 | out: lpBuffer=0x288fa8*, lpNumberOfBytesRead=0x173e100*=0x1000, lpOverlapped=0x0) returned 1 [0234.784] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24bdf0 [0234.784] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x289fb0 [0234.784] GetLastError () returned 0x0 [0234.792] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f998 [0234.792] GetLastError () returned 0x0 [0234.792] CloseHandle (hObject=0x1f4) returned 1 [0234.793] CloseHandle (hObject=0x200) returned 1 [0234.793] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387f0 [0234.793] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388d0 [0234.794] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1041\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1041\\localizeddata.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0234.797] GetFileType (hFile=0x200) returned 0x1 [0234.797] GetLastError () returned 0xb7 [0234.797] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x290fe8 [0234.797] GetLastError () returned 0xb7 [0234.799] CloseHandle (hObject=0x200) returned 1 [0234.800] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1041\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1041\\localizeddata.xml")) returned 0 [0234.800] GetLastError () returned 0x20 [0234.800] GetLastError () returned 0x20 [0234.800] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228950 [0234.800] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260748 [0234.800] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2604c8 [0234.800] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x2285f0 [0234.800] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bf0 [0234.800] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f10 [0234.800] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x2388e0 [0234.801] GetLastError () returned 0x20 [0234.801] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x2390b8 [0234.801] GetLastError () returned 0x20 [0234.801] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238c20 [0234.801] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0450 [0234.801] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2604f0 [0234.801] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2857d0 [0234.801] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238900 [0234.801] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0234.801] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f908 [0234.801] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389c0 [0234.801] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260540 [0234.801] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f9b0 [0234.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260928 [0234.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2856c8 [0234.802] GetLastError () returned 0x20 [0234.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238800 [0234.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238930 [0234.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238820 [0234.802] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238930 | out: hHeap=0x1f0000) returned 1 [0234.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238830 [0234.802] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238820 | out: hHeap=0x1f0000) returned 1 [0234.802] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238800 | out: hHeap=0x1f0000) returned 1 [0234.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238800 [0234.803] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f938 [0234.803] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238800 | out: hHeap=0x1f0000) returned 1 [0234.803] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f710 [0234.803] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f938 | out: hHeap=0x1f0000) returned 1 [0234.803] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238830 | out: hHeap=0x1f0000) returned 1 [0234.803] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f938 [0234.803] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f800 [0234.803] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f938 | out: hHeap=0x1f0000) returned 1 [0234.803] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f938 [0234.803] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f800 | out: hHeap=0x1f0000) returned 1 [0234.803] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f710 | out: hHeap=0x1f0000) returned 1 [0234.803] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f770 [0234.803] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204db0 [0234.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f770 | out: hHeap=0x1f0000) returned 1 [0234.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c90 [0234.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204db0 | out: hHeap=0x1f0000) returned 1 [0234.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f938 | out: hHeap=0x1f0000) returned 1 [0234.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204df0 [0234.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2606f8 [0234.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204df0 | out: hHeap=0x1f0000) returned 1 [0234.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204f70 [0234.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606f8 | out: hHeap=0x1f0000) returned 1 [0234.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c90 | out: hHeap=0x1f0000) returned 1 [0234.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204b90 [0234.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206928 [0234.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204b90 | out: hHeap=0x1f0000) returned 1 [0234.805] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260608 [0234.805] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206928 | out: hHeap=0x1f0000) returned 1 [0234.805] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f70 | out: hHeap=0x1f0000) returned 1 [0234.805] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238960 [0234.805] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f938 [0234.805] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238960 | out: hHeap=0x1f0000) returned 1 [0234.806] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f650 [0234.806] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f938 | out: hHeap=0x1f0000) returned 1 [0234.806] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204f70 [0234.806] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f650 | out: hHeap=0x1f0000) returned 1 [0234.806] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206808 [0234.806] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f70 | out: hHeap=0x1f0000) returned 1 [0234.806] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206808 | out: hHeap=0x1f0000) returned 1 [0234.806] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0234.806] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0234.806] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aca50 [0234.806] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2857d0 | out: hHeap=0x1f0000) returned 1 [0234.806] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0234.806] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239160 [0234.807] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0234.807] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x213350) returned 1 [0234.808] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2604f0 | out: pbBuffer=0x2604f0) returned 1 [0234.808] CryptReleaseContext (hProv=0x213350, dwFlags=0x0) returned 1 [0234.808] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0234.808] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2606f8 [0234.808] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2604f0 [0234.808] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c20 [0234.809] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606f8 | out: hHeap=0x1f0000) returned 1 [0234.809] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab6a8 [0234.809] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c20 | out: hHeap=0x1f0000) returned 1 [0234.809] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8110 [0234.809] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f788 [0234.809] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x2b0248 [0234.809] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260590 [0234.809] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2852a8 [0234.809] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f70 [0234.809] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0b38 [0234.810] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260630 [0234.810] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2858d8 [0234.810] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238800 [0234.810] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0234.810] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f668 [0234.810] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238820 [0234.810] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260900 [0234.810] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f6e0 [0234.810] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f6e0 | out: hHeap=0x1f0000) returned 1 [0234.811] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260900 | out: hHeap=0x1f0000) returned 1 [0234.811] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238820 | out: hHeap=0x1f0000) returned 1 [0234.811] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f668 | out: hHeap=0x1f0000) returned 1 [0234.811] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0234.811] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238800 | out: hHeap=0x1f0000) returned 1 [0234.811] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2858d8 | out: hHeap=0x1f0000) returned 1 [0234.811] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260630 | out: hHeap=0x1f0000) returned 1 [0234.811] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0b38 | out: hHeap=0x1f0000) returned 1 [0234.811] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239048 [0234.811] GetLastError () returned 0x0 [0234.812] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x2391d0 [0234.812] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac488 [0234.812] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac488 | out: hHeap=0x1f0000) returned 1 [0234.812] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2acca0 [0234.812] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2acdc8 [0234.812] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2acca0 | out: hHeap=0x1f0000) returned 1 [0234.812] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2acdc8 | out: hHeap=0x1f0000) returned 1 [0234.812] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x24e7c0 [0234.812] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2857d0 [0234.813] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abd98 [0234.813] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abd98 | out: hHeap=0x1f0000) returned 1 [0234.813] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab458 [0234.813] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab458 | out: hHeap=0x1f0000) returned 1 [0234.813] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2855c0 [0234.813] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abec0 [0234.813] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abec0 | out: hHeap=0x1f0000) returned 1 [0234.813] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fda8 [0234.813] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x2595a0 [0234.813] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2ae9a0 [0234.813] QueryPerformanceCounter (in: lpPerformanceCount=0x173dee0 | out: lpPerformanceCount=0x173dee0*=39218245668) returned 1 [0234.814] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173df20 | out: lpSystemTimeAsFileTime=0x173df20) [0234.814] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238930 [0234.814] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605b8 [0234.814] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f10 [0234.814] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f10 | out: hHeap=0x1f0000) returned 1 [0234.814] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0234.814] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0234.814] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f10 [0234.814] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f10 | out: hHeap=0x1f0000) returned 1 [0234.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0234.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238930 | out: hHeap=0x1f0000) returned 1 [0234.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0234.815] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239278 [0234.815] GetLastError () returned 0x0 [0234.815] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac800 [0234.815] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac5b0 [0234.815] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac110 [0234.815] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2607e8 [0234.815] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2605b8 [0234.816] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab580 [0234.816] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abc70 [0234.816] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260748 [0234.816] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2acca0 [0234.816] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x222ee8 [0234.816] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab330 [0234.816] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0234.816] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab330 | out: hHeap=0x1f0000) returned 1 [0234.816] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x20c2c0 [0234.816] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0234.817] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260798 [0234.817] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2606f8 [0234.817] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260798 | out: hHeap=0x1f0000) returned 1 [0234.817] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abec0 [0234.817] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606f8 | out: hHeap=0x1f0000) returned 1 [0234.817] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0234.817] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x234b90 [0234.817] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b90 | out: hHeap=0x1f0000) returned 1 [0234.817] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0234.817] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20c2c0 | out: hHeap=0x1f0000) returned 1 [0234.817] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f740 [0234.817] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2287a0 [0234.818] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260770 [0234.818] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2606f8 [0234.818] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260608 [0234.818] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260630 [0234.818] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606f8 | out: hHeap=0x1f0000) returned 1 [0234.818] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0234.818] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0234.818] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260810 [0234.818] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2606f8 [0234.818] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0234.818] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab208 [0234.819] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606f8 | out: hHeap=0x1f0000) returned 1 [0234.819] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2066b8 [0234.819] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x2aa518 [0234.819] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aa518 | out: hHeap=0x1f0000) returned 1 [0234.819] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2066b8 | out: hHeap=0x1f0000) returned 1 [0234.819] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0234.819] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac488 [0234.819] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab208 | out: hHeap=0x1f0000) returned 1 [0234.819] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0234.819] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204d10 [0234.819] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2acdc8 [0234.820] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac928 [0234.820] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0234.820] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aafb8 [0234.820] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac928 | out: hHeap=0x1f0000) returned 1 [0234.820] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260630 | out: hHeap=0x1f0000) returned 1 [0234.820] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0234.820] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2287a0 | out: hHeap=0x1f0000) returned 1 [0234.820] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2acdc8 | out: hHeap=0x1f0000) returned 1 [0234.821] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d10 | out: hHeap=0x1f0000) returned 1 [0234.821] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f740 | out: hHeap=0x1f0000) returned 1 [0235.308] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abec0 | out: hHeap=0x1f0000) returned 1 [0235.309] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab7d0 [0235.309] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab7d0 | out: hHeap=0x1f0000) returned 1 [0235.368] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ee8 | out: hHeap=0x1f0000) returned 1 [0235.368] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2acca0 | out: hHeap=0x1f0000) returned 1 [0235.368] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac488 | out: hHeap=0x1f0000) returned 1 [0235.369] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abc70 | out: hHeap=0x1f0000) returned 1 [0235.369] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab580 | out: hHeap=0x1f0000) returned 1 [0235.369] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607e8 | out: hHeap=0x1f0000) returned 1 [0235.369] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac110 | out: hHeap=0x1f0000) returned 1 [0235.369] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac5b0 | out: hHeap=0x1f0000) returned 1 [0235.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab330 [0235.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac928 [0235.370] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab330 | out: hHeap=0x1f0000) returned 1 [0235.370] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac928 | out: hHeap=0x1f0000) returned 1 [0235.370] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aafb8 | out: hHeap=0x1f0000) returned 1 [0235.370] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac800 | out: hHeap=0x1f0000) returned 1 [0235.370] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2855c0 | out: hHeap=0x1f0000) returned 1 [0235.370] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24e7c0 | out: hHeap=0x1f0000) returned 1 [0235.370] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x2aeab8 [0235.371] GetLastError () returned 0x0 [0235.371] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238930 [0235.372] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238940 [0235.373] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1041\\LocalizedData.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1041\\localizeddata.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e290, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0235.373] GetFileType (hFile=0x22c) returned 0x1 [0235.374] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28dfd0 [0235.374] SetFilePointerEx (in: hFile=0x22c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e218 | out: lpNewFilePointer=0x0) returned 1 [0235.375] GetLastError () returned 0xb7 [0235.375] CloseHandle (hObject=0x22c) returned 1 [0235.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238940 | out: hHeap=0x1f0000) returned 1 [0235.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238930 | out: hHeap=0x1f0000) returned 1 [0235.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2857d0 | out: hHeap=0x1f0000) returned 1 [0235.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2852a8 | out: hHeap=0x1f0000) returned 1 [0235.635] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0235.635] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f70 | out: hHeap=0x1f0000) returned 1 [0235.635] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0248 | out: hHeap=0x1f0000) returned 1 [0235.635] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f788 | out: hHeap=0x1f0000) returned 1 [0235.635] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8110 | out: hHeap=0x1f0000) returned 1 [0235.635] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aeab8 | out: hHeap=0x1f0000) returned 1 [0235.635] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0235.635] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab6a8 | out: hHeap=0x1f0000) returned 1 [0235.635] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2595a0 | out: hHeap=0x1f0000) returned 1 [0235.636] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae9a0 | out: hHeap=0x1f0000) returned 1 [0235.636] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239160 | out: hHeap=0x1f0000) returned 1 [0235.636] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388e0 | out: hHeap=0x1f0000) returned 1 [0235.636] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f9b0 | out: hHeap=0x1f0000) returned 1 [0235.636] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0235.636] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389c0 | out: hHeap=0x1f0000) returned 1 [0235.636] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f908 | out: hHeap=0x1f0000) returned 1 [0235.636] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0235.636] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238900 | out: hHeap=0x1f0000) returned 1 [0235.637] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2856c8 | out: hHeap=0x1f0000) returned 1 [0235.637] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0235.637] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0450 | out: hHeap=0x1f0000) returned 1 [0235.637] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2285f0 | out: hHeap=0x1f0000) returned 1 [0235.637] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604c8 | out: hHeap=0x1f0000) returned 1 [0235.637] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aca50 | out: hHeap=0x1f0000) returned 1 [0235.637] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228950 | out: hHeap=0x1f0000) returned 1 [0235.637] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388d0 | out: hHeap=0x1f0000) returned 1 [0235.637] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387f0 | out: hHeap=0x1f0000) returned 1 [0235.638] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x288fa8 | out: hHeap=0x1f0000) returned 1 [0235.638] CloseHandle (hObject=0x1e0) returned 1 [0235.638] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388c0 | out: hHeap=0x1f0000) returned 1 [0235.639] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238990 | out: hHeap=0x1f0000) returned 1 [0235.639] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223be0 | out: hHeap=0x1f0000) returned 1 [0235.639] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24bdf0 | out: hHeap=0x1f0000) returned 1 [0235.639] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f998 | out: hHeap=0x1f0000) returned 1 [0235.639] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cf0 | out: hHeap=0x1f0000) returned 1 [0235.639] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x289fb0 | out: hHeap=0x1f0000) returned 1 [0235.639] CloseHandle (hObject=0x210) returned 1 [0235.640] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238980 | out: hHeap=0x1f0000) returned 1 [0235.640] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238920 | out: hHeap=0x1f0000) returned 1 [0235.640] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad410 | out: hHeap=0x1f0000) returned 1 [0235.640] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c70 | out: hHeap=0x1f0000) returned 1 [0235.640] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d368 | out: hHeap=0x1f0000) returned 1 [0235.641] CloseHandle (hObject=0x23c) returned 1 [0235.641] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389b0 | out: hHeap=0x1f0000) returned 1 [0235.641] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387e0 | out: hHeap=0x1f0000) returned 1 [0235.641] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad078 | out: hHeap=0x1f0000) returned 1 [0235.641] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388b0 | out: hHeap=0x1f0000) returned 1 [0235.641] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238910 | out: hHeap=0x1f0000) returned 1 [0235.641] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238810 | out: hHeap=0x1f0000) returned 1 [0235.642] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388f0 | out: hHeap=0x1f0000) returned 1 [0235.642] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae888 | out: hHeap=0x1f0000) returned 1 [0235.642] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x258298 | out: hHeap=0x1f0000) returned 1 [0235.642] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae770 | out: hHeap=0x1f0000) returned 1 [0235.642] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206628 | out: hHeap=0x1f0000) returned 1 [0235.642] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f920 | out: hHeap=0x1f0000) returned 1 [0235.642] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f980 | out: hHeap=0x1f0000) returned 1 [0235.642] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232fb8 | out: hHeap=0x1f0000) returned 1 [0235.642] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x254980 | out: hHeap=0x1f0000) returned 1 [0235.643] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2af490 | out: hHeap=0x1f0000) returned 1 [0235.643] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239010 | out: hHeap=0x1f0000) returned 1 [0235.643] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b03e8 | out: hHeap=0x1f0000) returned 1 [0235.643] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262fe0 | out: hHeap=0x1f0000) returned 1 [0235.643] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2285a8 | out: hHeap=0x1f0000) returned 1 [0235.643] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0235.643] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1041\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1041\\localizeddata.xml")) returned 1 [0235.645] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0235.645] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239208 [0235.645] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228bd8 [0235.645] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0c70 [0235.646] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228bd8 | out: hHeap=0x1f0000) returned 1 [0235.646] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0110 | out: hHeap=0x1f0000) returned 1 [0235.646] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239208 | out: hHeap=0x1f0000) returned 1 [0235.647] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1041\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1041\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0235.647] GetFileType (hFile=0x23c) returned 0x1 [0235.647] CloseHandle (hObject=0x23c) returned 1 [0235.648] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b03e8 [0235.648] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1041\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1041\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x173eb6c | out: lpFileInformation=0x173eb6c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3d58)) returned 1 [0235.648] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b03e8 | out: hHeap=0x1f0000) returned 1 [0235.648] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0658 [0235.648] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1041\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1041\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x173eb7c | out: lpFileInformation=0x173eb7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3d58)) returned 1 [0235.648] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0658 | out: hHeap=0x1f0000) returned 1 [0235.649] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b00a8 [0235.649] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b00a8 | out: hHeap=0x1f0000) returned 1 [0235.649] GetLastError () returned 0x0 [0235.650] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260900 [0235.650] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2285a8 [0235.650] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262fe0 [0235.650] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0728 [0235.650] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238e18 [0235.650] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0235.650] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x212d78) returned 1 [0235.651] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x260928 | out: pbBuffer=0x260928) returned 1 [0235.651] CryptReleaseContext (hProv=0x212d78, dwFlags=0x0) returned 1 [0235.652] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0235.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x258298 [0235.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2af260 [0235.652] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=39302080734) returned 1 [0235.652] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0235.652] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=39302114969) returned 1 [0235.652] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0235.653] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x2390b8 [0235.653] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x254980 [0235.653] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2af5a8 [0235.653] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x232fb8 [0235.653] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f938 [0235.653] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2067d8 [0235.653] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f908 [0235.653] GetLastError () returned 0x0 [0235.653] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0235.653] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad7a8 [0235.654] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0235.654] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x106) returned 0x2aeab8 [0235.654] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad7a8 | out: hHeap=0x1f0000) returned 1 [0235.654] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388b0 [0235.931] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ae0 [0235.932] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1041\\SetupResources.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1041\\setupresources.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e230, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0235.933] GetFileType (hFile=0x22c) returned 0x1 [0235.933] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a20 [0235.934] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b00 [0235.935] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1041\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1041\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0235.935] GetFileType (hFile=0x1f4) returned 0x1 [0235.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d90 [0235.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204db0 [0235.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ada88 [0235.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a50 [0235.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389f0 [0235.937] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1041\\SetupResources.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1041\\setupresources.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0235.938] GetFileType (hFile=0x230) returned 0x1 [0235.938] GetLastError () returned 0xb7 [0235.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe4) returned 0x22b108 [0235.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f10 [0235.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d90 [0235.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f70 [0235.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad9d0 [0235.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a90 [0235.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b10 [0235.940] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1041\\SetupResources.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1041\\setupresources.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc [0235.941] GetFileType (hFile=0x1cc) returned 0x1 [0235.941] GetLastError () returned 0xb7 [0235.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f30 [0235.942] GetLastError () returned 0xb7 [0235.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d90 [0235.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204db0 [0235.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e30 [0235.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb8) returned 0x223d60 [0235.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a00 [0235.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a60 [0235.944] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1041\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1041\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1a4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1bc [0235.944] GetFileType (hFile=0x1bc) returned 0x1 [0235.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x297018 [0235.945] ReadFile (in: hFile=0x1bc, lpBuffer=0x297018, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e100, lpOverlapped=0x0 | out: lpBuffer=0x297018*, lpNumberOfBytesRead=0x173e100*=0x1000, lpOverlapped=0x0) returned 1 [0235.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x249db0 [0235.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x295008 [0235.950] GetLastError () returned 0x0 [0235.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f980 [0235.953] GetLastError () returned 0x0 [0235.953] CloseHandle (hObject=0x22c) returned 1 [0235.954] CloseHandle (hObject=0x1f4) returned 1 [0235.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b30 [0235.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a80 [0235.955] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1041\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1041\\setupresources.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0235.957] GetFileType (hFile=0x1f4) returned 0x1 [0235.957] GetLastError () returned 0xb7 [0235.958] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x290fe8 [0235.958] GetLastError () returned 0xb7 [0235.959] CloseHandle (hObject=0x1f4) returned 1 [0235.960] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1041\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1041\\setupresources.dll")) returned 0 [0235.960] GetLastError () returned 0x20 [0235.960] GetLastError () returned 0x20 [0235.960] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2285f0 [0235.960] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260770 [0235.960] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260748 [0235.960] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x228cb0 [0235.960] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c30 [0235.961] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bf0 [0235.961] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x238a70 [0235.961] GetLastError () returned 0x20 [0235.961] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238f68 [0235.961] GetLastError () returned 0x20 [0235.961] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x2390b8 [0235.961] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b00a8 [0235.961] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2607c0 [0235.961] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285e00 [0235.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238af0 [0235.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0235.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f998 [0235.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b40 [0235.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609a0 [0235.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f9b0 [0235.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260590 [0235.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285cf8 [0235.962] GetLastError () returned 0x20 [0235.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238b50 [0235.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238b80 [0235.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b90 [0235.962] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b80 | out: hHeap=0x1f0000) returned 1 [0235.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b80 [0235.963] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b90 | out: hHeap=0x1f0000) returned 1 [0235.963] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b50 | out: hHeap=0x1f0000) returned 1 [0235.963] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b50 [0235.963] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f9c8 [0235.963] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b50 | out: hHeap=0x1f0000) returned 1 [0235.963] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f848 [0235.963] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f9c8 | out: hHeap=0x1f0000) returned 1 [0235.963] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b80 | out: hHeap=0x1f0000) returned 1 [0235.963] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f9c8 [0235.963] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f638 [0235.963] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f9c8 | out: hHeap=0x1f0000) returned 1 [0235.963] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f9c8 [0235.963] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f638 | out: hHeap=0x1f0000) returned 1 [0235.963] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f848 | out: hHeap=0x1f0000) returned 1 [0235.963] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f710 [0235.964] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204db0 [0235.964] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f710 | out: hHeap=0x1f0000) returned 1 [0235.964] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204dd0 [0235.964] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204db0 | out: hHeap=0x1f0000) returned 1 [0235.964] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f9c8 | out: hHeap=0x1f0000) returned 1 [0235.964] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204db0 [0235.964] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2604c8 [0235.964] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204db0 | out: hHeap=0x1f0000) returned 1 [0235.964] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204db0 [0235.964] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604c8 | out: hHeap=0x1f0000) returned 1 [0235.964] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204dd0 | out: hHeap=0x1f0000) returned 1 [0235.964] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204f50 [0235.964] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206658 [0235.964] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f50 | out: hHeap=0x1f0000) returned 1 [0235.965] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2604c8 [0235.965] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206658 | out: hHeap=0x1f0000) returned 1 [0235.965] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204db0 | out: hHeap=0x1f0000) returned 1 [0235.965] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b50 [0235.965] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f9c8 [0235.965] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b50 | out: hHeap=0x1f0000) returned 1 [0235.965] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f788 [0235.965] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f9c8 | out: hHeap=0x1f0000) returned 1 [0235.965] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204bf0 [0235.965] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f788 | out: hHeap=0x1f0000) returned 1 [0235.965] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206658 [0235.965] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bf0 | out: hHeap=0x1f0000) returned 1 [0235.965] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206658 | out: hHeap=0x1f0000) returned 1 [0235.965] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604c8 | out: hHeap=0x1f0000) returned 1 [0235.966] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0235.966] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab6a8 [0235.966] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285e00 | out: hHeap=0x1f0000) returned 1 [0235.966] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607c0 | out: hHeap=0x1f0000) returned 1 [0235.966] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239208 [0235.966] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260770 [0235.966] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x2133d8) returned 1 [0235.967] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x260770 | out: pbBuffer=0x260770) returned 1 [0235.967] CryptReleaseContext (hProv=0x2133d8, dwFlags=0x0) returned 1 [0235.967] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0235.967] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2607c0 [0235.967] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260770 [0235.967] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239278 [0235.967] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607c0 | out: hHeap=0x1f0000) returned 1 [0235.967] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aafb8 [0235.967] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239278 | out: hHeap=0x1f0000) returned 1 [0235.968] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8270 [0235.968] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f668 [0235.968] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x2b0658 [0235.968] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2605b8 [0235.968] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2851a0 [0235.968] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204db0 [0235.968] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0110 [0235.968] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2604c8 [0235.968] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2854b8 [0235.968] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b50 [0235.968] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0235.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f848 [0235.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b80 [0235.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0235.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f890 [0235.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f890 | out: hHeap=0x1f0000) returned 1 [0235.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0235.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b80 | out: hHeap=0x1f0000) returned 1 [0235.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f848 | out: hHeap=0x1f0000) returned 1 [0235.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0235.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b50 | out: hHeap=0x1f0000) returned 1 [0235.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2854b8 | out: hHeap=0x1f0000) returned 1 [0235.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604c8 | out: hHeap=0x1f0000) returned 1 [0235.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0110 | out: hHeap=0x1f0000) returned 1 [0235.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238de0 [0235.970] GetLastError () returned 0x0 [0235.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239010 [0235.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac800 [0235.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac800 | out: hHeap=0x1f0000) returned 1 [0235.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac5b0 [0235.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2acdc8 [0235.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac5b0 | out: hHeap=0x1f0000) returned 1 [0235.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2acdc8 | out: hHeap=0x1f0000) returned 1 [0235.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x24ecc0 [0235.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285098 [0235.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abfe8 [0235.971] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abfe8 | out: hHeap=0x1f0000) returned 1 [0235.971] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abec0 [0235.971] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abec0 | out: hHeap=0x1f0000) returned 1 [0235.971] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2852a8 [0235.971] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abd98 [0235.971] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abd98 | out: hHeap=0x1f0000) returned 1 [0235.971] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fc18 [0235.971] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x269ba8 [0235.971] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2afc38 [0235.971] QueryPerformanceCounter (in: lpPerformanceCount=0x173dee0 | out: lpPerformanceCount=0x173dee0*=39334006915) returned 1 [0235.971] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173df20 | out: lpSystemTimeAsFileTime=0x173df20) [0235.971] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238b50 [0235.971] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2607c0 [0235.972] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bf0 [0235.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bf0 | out: hHeap=0x1f0000) returned 1 [0235.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607c0 | out: hHeap=0x1f0000) returned 1 [0235.972] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604c8 [0235.972] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204dd0 [0235.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204dd0 | out: hHeap=0x1f0000) returned 1 [0235.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604c8 | out: hHeap=0x1f0000) returned 1 [0235.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b50 | out: hHeap=0x1f0000) returned 1 [0235.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0235.972] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x2391d0 [0235.972] GetLastError () returned 0x0 [0235.972] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2acdc8 [0235.972] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac928 [0235.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac6d8 [0235.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2607c0 [0235.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2604c8 [0235.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2acb78 [0235.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab7d0 [0235.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2604f0 [0235.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abfe8 [0235.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x222ee8 [0235.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2acca0 [0235.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x20d888 [0235.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2acca0 | out: hHeap=0x1f0000) returned 1 [0235.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x25ffe8 [0235.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20d888 | out: hHeap=0x1f0000) returned 1 [0235.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260540 [0235.974] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260568 [0235.974] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0235.974] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abec0 [0235.974] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0235.974] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x20d888 [0235.974] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x234b90 [0235.974] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b90 | out: hHeap=0x1f0000) returned 1 [0235.974] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20d888 | out: hHeap=0x1f0000) returned 1 [0235.974] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25ffe8 | out: hHeap=0x1f0000) returned 1 [0235.974] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f788 [0235.974] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2287a0 [0235.974] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260540 [0235.974] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260568 [0235.974] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260630 [0235.975] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260658 [0235.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0235.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0235.975] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x20d888 [0235.975] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260568 [0235.975] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260540 [0235.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0235.975] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2acca0 [0235.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0235.975] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206838 [0235.975] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x2a93f8 [0235.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a93f8 | out: hHeap=0x1f0000) returned 1 [0235.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206838 | out: hHeap=0x1f0000) returned 1 [0235.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0235.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aca50 [0235.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2acca0 | out: hHeap=0x1f0000) returned 1 [0235.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20d888 | out: hHeap=0x1f0000) returned 1 [0235.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204e70 [0235.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abc70 [0235.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2acca0 [0235.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604c8 | out: hHeap=0x1f0000) returned 1 [0235.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab0e0 [0235.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2acca0 | out: hHeap=0x1f0000) returned 1 [0235.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260658 | out: hHeap=0x1f0000) returned 1 [0235.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260630 | out: hHeap=0x1f0000) returned 1 [0235.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2287a0 | out: hHeap=0x1f0000) returned 1 [0235.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abc70 | out: hHeap=0x1f0000) returned 1 [0235.977] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e70 | out: hHeap=0x1f0000) returned 1 [0235.977] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f788 | out: hHeap=0x1f0000) returned 1 [0235.977] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abec0 | out: hHeap=0x1f0000) returned 1 [0235.977] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab208 [0235.977] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab208 | out: hHeap=0x1f0000) returned 1 [0235.977] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ee8 | out: hHeap=0x1f0000) returned 1 [0236.331] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abfe8 | out: hHeap=0x1f0000) returned 1 [0236.331] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aca50 | out: hHeap=0x1f0000) returned 1 [0236.331] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab7d0 | out: hHeap=0x1f0000) returned 1 [0236.331] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2acb78 | out: hHeap=0x1f0000) returned 1 [0236.331] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607c0 | out: hHeap=0x1f0000) returned 1 [0236.331] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac6d8 | out: hHeap=0x1f0000) returned 1 [0236.332] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac928 | out: hHeap=0x1f0000) returned 1 [0236.332] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab7d0 [0236.332] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab580 [0236.332] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab7d0 | out: hHeap=0x1f0000) returned 1 [0236.332] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab580 | out: hHeap=0x1f0000) returned 1 [0236.332] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab0e0 | out: hHeap=0x1f0000) returned 1 [0236.332] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2acdc8 | out: hHeap=0x1f0000) returned 1 [0236.332] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2852a8 | out: hHeap=0x1f0000) returned 1 [0236.332] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24ecc0 | out: hHeap=0x1f0000) returned 1 [0236.332] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x2af7d8 [0236.332] GetLastError () returned 0x0 [0236.333] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238890 [0236.333] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388d0 [0236.334] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1041\\SetupResources.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1041\\setupresources.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e290, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0236.334] GetFileType (hFile=0x1d8) returned 0x1 [0236.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28dfd0 [0236.335] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e218 | out: lpNewFilePointer=0x0) returned 1 [0236.335] GetLastError () returned 0xb7 [0236.336] CloseHandle (hObject=0x1d8) returned 1 [0236.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388d0 | out: hHeap=0x1f0000) returned 1 [0236.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238890 | out: hHeap=0x1f0000) returned 1 [0236.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285098 | out: hHeap=0x1f0000) returned 1 [0236.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2851a0 | out: hHeap=0x1f0000) returned 1 [0236.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0236.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204db0 | out: hHeap=0x1f0000) returned 1 [0236.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0658 | out: hHeap=0x1f0000) returned 1 [0236.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f668 | out: hHeap=0x1f0000) returned 1 [0236.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8270 | out: hHeap=0x1f0000) returned 1 [0236.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2af7d8 | out: hHeap=0x1f0000) returned 1 [0236.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0236.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aafb8 | out: hHeap=0x1f0000) returned 1 [0236.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x269ba8 | out: hHeap=0x1f0000) returned 1 [0236.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2afc38 | out: hHeap=0x1f0000) returned 1 [0236.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239208 | out: hHeap=0x1f0000) returned 1 [0236.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a70 | out: hHeap=0x1f0000) returned 1 [0236.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f9b0 | out: hHeap=0x1f0000) returned 1 [0236.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0236.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b40 | out: hHeap=0x1f0000) returned 1 [0236.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f998 | out: hHeap=0x1f0000) returned 1 [0236.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0236.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238af0 | out: hHeap=0x1f0000) returned 1 [0236.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285cf8 | out: hHeap=0x1f0000) returned 1 [0236.339] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0236.339] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b00a8 | out: hHeap=0x1f0000) returned 1 [0236.339] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228cb0 | out: hHeap=0x1f0000) returned 1 [0236.339] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0236.339] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab6a8 | out: hHeap=0x1f0000) returned 1 [0236.339] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2285f0 | out: hHeap=0x1f0000) returned 1 [0236.339] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a80 | out: hHeap=0x1f0000) returned 1 [0236.339] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b30 | out: hHeap=0x1f0000) returned 1 [0236.339] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x297018 | out: hHeap=0x1f0000) returned 1 [0236.339] CloseHandle (hObject=0x1bc) returned 1 [0236.340] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a60 | out: hHeap=0x1f0000) returned 1 [0236.340] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a00 | out: hHeap=0x1f0000) returned 1 [0236.340] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223d60 | out: hHeap=0x1f0000) returned 1 [0236.340] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x249db0 | out: hHeap=0x1f0000) returned 1 [0236.341] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f980 | out: hHeap=0x1f0000) returned 1 [0236.341] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d90 | out: hHeap=0x1f0000) returned 1 [0236.341] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x295008 | out: hHeap=0x1f0000) returned 1 [0236.341] CloseHandle (hObject=0x1cc) returned 1 [0236.342] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b10 | out: hHeap=0x1f0000) returned 1 [0236.342] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a90 | out: hHeap=0x1f0000) returned 1 [0236.342] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad9d0 | out: hHeap=0x1f0000) returned 1 [0236.342] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f10 | out: hHeap=0x1f0000) returned 1 [0236.342] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b108 | out: hHeap=0x1f0000) returned 1 [0236.343] CloseHandle (hObject=0x230) returned 1 [0236.343] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389f0 | out: hHeap=0x1f0000) returned 1 [0236.343] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a50 | out: hHeap=0x1f0000) returned 1 [0236.343] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ada88 | out: hHeap=0x1f0000) returned 1 [0236.343] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b00 | out: hHeap=0x1f0000) returned 1 [0236.343] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a20 | out: hHeap=0x1f0000) returned 1 [0236.343] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ae0 | out: hHeap=0x1f0000) returned 1 [0236.343] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388b0 | out: hHeap=0x1f0000) returned 1 [0236.343] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aeab8 | out: hHeap=0x1f0000) returned 1 [0236.343] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x254980 | out: hHeap=0x1f0000) returned 1 [0236.343] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2af5a8 | out: hHeap=0x1f0000) returned 1 [0236.343] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2067d8 | out: hHeap=0x1f0000) returned 1 [0236.344] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f908 | out: hHeap=0x1f0000) returned 1 [0236.344] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f938 | out: hHeap=0x1f0000) returned 1 [0236.344] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232fb8 | out: hHeap=0x1f0000) returned 1 [0236.344] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x258298 | out: hHeap=0x1f0000) returned 1 [0236.344] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2af260 | out: hHeap=0x1f0000) returned 1 [0236.344] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238e18 | out: hHeap=0x1f0000) returned 1 [0236.344] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0728 | out: hHeap=0x1f0000) returned 1 [0236.344] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262fe0 | out: hHeap=0x1f0000) returned 1 [0236.344] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2285a8 | out: hHeap=0x1f0000) returned 1 [0236.344] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260900 | out: hHeap=0x1f0000) returned 1 [0236.344] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1041\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1041\\setupresources.dll")) returned 1 [0236.346] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0236.346] FindClose (in: hFindFile=0x24e6c0 | out: hFindFile=0x24e6c0) returned 1 [0236.347] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0c70 | out: hHeap=0x1f0000) returned 1 [0236.347] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261cc0 | out: hHeap=0x1f0000) returned 1 [0236.347] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0236.347] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228b00 | out: hHeap=0x1f0000) returned 1 [0236.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228bd8 [0236.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609a0 [0236.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x261cc0 [0236.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2284d0 [0236.347] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1042\\*", lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e940 [0236.348] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228710 [0236.348] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2284d0 | out: hHeap=0x1f0000) returned 1 [0236.348] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0236.348] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0236.348] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2284d0 [0236.348] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228710 | out: hHeap=0x1f0000) returned 1 [0236.349] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0236.349] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0236.349] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x318f, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0236.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0236.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228950 [0236.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x2b0c08 [0236.349] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228950 | out: hHeap=0x1f0000) returned 1 [0236.349] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2284d0 | out: hHeap=0x1f0000) returned 1 [0236.349] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0236.350] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1042\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1042\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0236.350] GetFileType (hFile=0x230) returned 0x1 [0236.351] CloseHandle (hObject=0x230) returned 1 [0236.351] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a85e0 [0236.351] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1042\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1042\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x173eb6c | out: lpFileInformation=0x173eb6c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x318f)) returned 1 [0236.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a85e0 | out: hHeap=0x1f0000) returned 1 [0236.351] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a85e0 [0236.351] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1042\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1042\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x173eb7c | out: lpFileInformation=0x173eb7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x318f)) returned 1 [0236.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a85e0 | out: hHeap=0x1f0000) returned 1 [0236.351] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8480 [0236.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8480 | out: hHeap=0x1f0000) returned 1 [0236.352] GetLastError () returned 0x0 [0236.352] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0236.353] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228878 [0236.353] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262fe0 [0236.353] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a83d0 [0236.353] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238da8 [0236.353] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605b8 [0236.353] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x212c68) returned 1 [0236.359] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2605b8 | out: pbBuffer=0x2605b8) returned 1 [0236.359] CryptReleaseContext (hProv=0x212c68, dwFlags=0x0) returned 1 [0236.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0236.359] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x264f88 [0236.359] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2ae428 [0236.359] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=39372827077) returned 1 [0236.359] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0236.360] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=39372852943) returned 1 [0236.360] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0236.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238f68 [0236.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x269ba8 [0236.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2ae770 [0236.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x233498 [0236.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f908 [0236.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2068c8 [0236.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f980 [0236.360] GetLastError () returned 0x0 [0236.361] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0520 [0236.361] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a2d8 [0236.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0520 | out: hHeap=0x1f0000) returned 1 [0236.361] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xee) returned 0x21ba30 [0236.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a2d8 | out: hHeap=0x1f0000) returned 1 [0236.361] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238810 [0236.362] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238820 [0236.362] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1042\\eula.rtf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1042\\eula.rtf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e230, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0236.372] GetFileType (hFile=0x1f4) returned 0x1 [0236.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238850 [0236.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238830 [0236.374] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1042\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1042\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0236.374] GetFileType (hFile=0x230) returned 0x1 [0236.375] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cf0 [0236.375] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204df0 [0236.375] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2adbf8 [0236.375] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388a0 [0236.375] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238890 [0236.376] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1042\\eula.rtf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1042\\eula.rtf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc [0236.376] GetFileType (hFile=0x1cc) returned 0x1 [0236.377] GetLastError () returned 0xb7 [0236.377] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe4) returned 0x20c2c0 [0236.377] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f50 [0236.377] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204b90 [0236.378] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f10 [0236.378] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad638 [0236.378] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238990 [0236.378] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238860 [0236.379] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1042\\eula.rtf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1042\\eula.rtf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1bc [0236.379] GetFileType (hFile=0x1bc) returned 0x1 [0236.380] GetLastError () returned 0xb7 [0236.380] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bb0 [0236.380] GetLastError () returned 0xb7 [0236.380] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0236.380] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bb0 [0236.381] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d90 [0236.381] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb8) returned 0x223be0 [0236.381] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388f0 [0236.381] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238870 [0236.382] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1042\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1042\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1a4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0236.382] GetFileType (hFile=0x1d8) returned 0x1 [0236.383] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x290fe8 [0236.383] ReadFile (in: hFile=0x1d8, lpBuffer=0x290fe8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e100, lpOverlapped=0x0 | out: lpBuffer=0x290fe8*, lpNumberOfBytesRead=0x173e100*=0x1000, lpOverlapped=0x0) returned 1 [0236.712] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24d620 [0236.712] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28afb8 [0236.712] GetLastError () returned 0x0 [0236.714] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f938 [0236.714] GetLastError () returned 0x0 [0236.715] CloseHandle (hObject=0x1f4) returned 1 [0236.716] CloseHandle (hObject=0x230) returned 1 [0236.716] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387e0 [0236.717] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238910 [0236.717] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1042\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1042\\eula.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0236.719] GetFileType (hFile=0x230) returned 0x1 [0236.720] GetLastError () returned 0xb7 [0236.720] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x288fa8 [0236.720] GetLastError () returned 0xb7 [0236.722] CloseHandle (hObject=0x230) returned 1 [0236.722] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1042\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1042\\eula.rtf")) returned 0 [0236.723] GetLastError () returned 0x20 [0236.723] GetLastError () returned 0x20 [0236.723] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228440 [0236.723] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260838 [0236.723] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260928 [0236.723] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x2287e8 [0236.724] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f70 [0236.724] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f10 [0236.724] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x2387f0 [0236.724] GetLastError () returned 0x20 [0236.724] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238d00 [0236.724] GetLastError () returned 0x20 [0236.724] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239208 [0236.724] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0658 [0236.725] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260978 [0236.725] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2858d8 [0236.725] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238800 [0236.725] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604c8 [0236.725] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f920 [0236.725] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238970 [0236.725] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0236.725] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f950 [0236.725] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260518 [0236.726] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2854b8 [0236.726] GetLastError () returned 0x20 [0236.726] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238880 [0236.726] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x2388c0 [0236.726] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a50 [0236.726] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388c0 | out: hHeap=0x1f0000) returned 1 [0236.726] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388c0 [0236.726] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a50 | out: hHeap=0x1f0000) returned 1 [0236.727] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238880 | out: hHeap=0x1f0000) returned 1 [0236.727] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238880 [0236.727] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f8d8 [0236.727] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238880 | out: hHeap=0x1f0000) returned 1 [0236.727] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f620 [0236.728] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f8d8 | out: hHeap=0x1f0000) returned 1 [0236.728] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388c0 | out: hHeap=0x1f0000) returned 1 [0236.728] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f848 [0236.728] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f6b0 [0236.728] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f848 | out: hHeap=0x1f0000) returned 1 [0236.728] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f848 [0236.728] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f6b0 | out: hHeap=0x1f0000) returned 1 [0236.728] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f620 | out: hHeap=0x1f0000) returned 1 [0236.729] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f788 [0236.729] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204bf0 [0236.729] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f788 | out: hHeap=0x1f0000) returned 1 [0236.729] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f70 [0236.729] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bf0 | out: hHeap=0x1f0000) returned 1 [0236.729] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f848 | out: hHeap=0x1f0000) returned 1 [0236.729] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c70 [0236.729] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260540 [0236.729] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c70 | out: hHeap=0x1f0000) returned 1 [0236.729] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204d90 [0236.729] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0236.730] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f70 | out: hHeap=0x1f0000) returned 1 [0236.730] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204db0 [0236.730] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206808 [0236.730] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204db0 | out: hHeap=0x1f0000) returned 1 [0236.730] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260568 [0236.730] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206808 | out: hHeap=0x1f0000) returned 1 [0236.730] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d90 | out: hHeap=0x1f0000) returned 1 [0236.730] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238880 [0236.730] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f860 [0236.730] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238880 | out: hHeap=0x1f0000) returned 1 [0236.731] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f878 [0236.731] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f860 | out: hHeap=0x1f0000) returned 1 [0236.731] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204f10 [0236.731] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f878 | out: hHeap=0x1f0000) returned 1 [0236.731] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206838 [0236.731] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f10 | out: hHeap=0x1f0000) returned 1 [0236.731] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206838 | out: hHeap=0x1f0000) returned 1 [0236.731] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0236.731] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260838 | out: hHeap=0x1f0000) returned 1 [0236.731] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abb48 [0236.731] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2858d8 | out: hHeap=0x1f0000) returned 1 [0236.731] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0236.732] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239198 [0236.732] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260838 [0236.732] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x213020) returned 1 [0236.733] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x260838 | out: pbBuffer=0x260838) returned 1 [0236.733] CryptReleaseContext (hProv=0x213020, dwFlags=0x0) returned 1 [0236.733] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260838 | out: hHeap=0x1f0000) returned 1 [0236.733] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260978 [0236.733] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260838 [0236.733] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239048 [0236.733] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0236.733] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab0e0 [0236.734] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239048 | out: hHeap=0x1f0000) returned 1 [0236.734] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a87f0 [0236.734] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f668 [0236.734] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x2b01e0 [0236.734] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260978 [0236.734] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2853b0 [0236.734] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204df0 [0236.734] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0a00 [0236.734] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260540 [0236.734] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x284f90 [0236.735] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238880 [0236.735] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0236.735] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f770 [0236.735] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388c0 [0236.735] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a68 [0236.735] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f758 [0236.735] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f758 | out: hHeap=0x1f0000) returned 1 [0236.735] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a68 | out: hHeap=0x1f0000) returned 1 [0236.736] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388c0 | out: hHeap=0x1f0000) returned 1 [0236.736] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f770 | out: hHeap=0x1f0000) returned 1 [0236.736] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0236.736] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238880 | out: hHeap=0x1f0000) returned 1 [0236.736] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x284f90 | out: hHeap=0x1f0000) returned 1 [0236.736] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0236.736] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0a00 | out: hHeap=0x1f0000) returned 1 [0236.736] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238f30 [0236.737] GetLastError () returned 0x0 [0236.737] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239010 [0236.737] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab208 [0236.737] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab208 | out: hHeap=0x1f0000) returned 1 [0236.737] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abc70 [0236.737] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abec0 [0236.738] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abc70 | out: hHeap=0x1f0000) returned 1 [0236.738] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abec0 | out: hHeap=0x1f0000) returned 1 [0236.738] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x24e680 [0236.738] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x284f90 [0236.738] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab8f8 [0236.738] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab8f8 | out: hHeap=0x1f0000) returned 1 [0236.738] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2acca0 [0236.738] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2acca0 | out: hHeap=0x1f0000) returned 1 [0236.738] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285098 [0236.739] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2acb78 [0236.739] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2acb78 | out: hHeap=0x1f0000) returned 1 [0236.739] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x230000 [0236.739] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x26c1b8 [0236.739] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2af490 [0236.739] QueryPerformanceCounter (in: lpPerformanceCount=0x173dee0 | out: lpPerformanceCount=0x173dee0*=39410810557) returned 1 [0236.739] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173df20 | out: lpSystemTimeAsFileTime=0x173df20) [0236.740] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238880 [0236.740] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260540 [0236.740] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d30 [0236.740] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d30 | out: hHeap=0x1f0000) returned 1 [0236.740] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0236.740] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260540 [0236.740] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f10 [0236.740] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f10 | out: hHeap=0x1f0000) returned 1 [0236.740] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0236.741] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238880 | out: hHeap=0x1f0000) returned 1 [0236.741] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0236.741] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238c90 [0236.741] GetLastError () returned 0x0 [0236.741] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac360 [0236.741] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac238 [0236.741] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac488 [0236.741] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260540 [0236.741] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260568 [0236.741] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac5b0 [0236.742] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac6d8 [0236.742] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2609f0 [0236.742] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab580 [0236.742] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x234b90 [0236.742] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac800 [0236.742] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0236.742] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac800 | out: hHeap=0x1f0000) returned 1 [0236.742] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x220748 [0237.071] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0237.071] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260b30 [0237.071] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260ba8 [0237.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b30 | out: hHeap=0x1f0000) returned 1 [0237.072] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab6a8 [0237.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ba8 | out: hHeap=0x1f0000) returned 1 [0237.072] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0237.072] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x2647e0 [0237.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2647e0 | out: hHeap=0x1f0000) returned 1 [0237.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0237.073] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220748 | out: hHeap=0x1f0000) returned 1 [0237.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f890 [0237.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228ab8 [0237.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260c20 [0237.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260b30 [0237.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260b58 [0237.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260ba8 [0237.073] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b30 | out: hHeap=0x1f0000) returned 1 [0237.074] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c20 | out: hHeap=0x1f0000) returned 1 [0237.074] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0237.074] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260bd0 [0237.074] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260bf8 [0237.074] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bd0 | out: hHeap=0x1f0000) returned 1 [0237.074] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac928 [0237.074] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0237.075] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206868 [0237.075] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x2a9840 [0237.075] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a9840 | out: hHeap=0x1f0000) returned 1 [0237.075] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206868 | out: hHeap=0x1f0000) returned 1 [0237.075] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609f0 | out: hHeap=0x1f0000) returned 1 [0237.075] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aca50 [0237.075] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac928 | out: hHeap=0x1f0000) returned 1 [0237.075] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0237.076] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204e90 [0237.076] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2acdc8 [0237.076] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aafb8 [0237.076] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0237.076] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab7d0 [0237.076] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aafb8 | out: hHeap=0x1f0000) returned 1 [0237.076] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ba8 | out: hHeap=0x1f0000) returned 1 [0237.076] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b58 | out: hHeap=0x1f0000) returned 1 [0237.077] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228ab8 | out: hHeap=0x1f0000) returned 1 [0237.077] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2acdc8 | out: hHeap=0x1f0000) returned 1 [0237.077] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e90 | out: hHeap=0x1f0000) returned 1 [0237.077] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f890 | out: hHeap=0x1f0000) returned 1 [0237.077] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab6a8 | out: hHeap=0x1f0000) returned 1 [0237.077] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2acdc8 [0237.077] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2acdc8 | out: hHeap=0x1f0000) returned 1 [0237.077] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b90 | out: hHeap=0x1f0000) returned 1 [0237.078] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab580 | out: hHeap=0x1f0000) returned 1 [0237.078] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aca50 | out: hHeap=0x1f0000) returned 1 [0237.078] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac6d8 | out: hHeap=0x1f0000) returned 1 [0237.078] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac5b0 | out: hHeap=0x1f0000) returned 1 [0237.078] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0237.078] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac488 | out: hHeap=0x1f0000) returned 1 [0237.078] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac238 | out: hHeap=0x1f0000) returned 1 [0237.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab580 [0237.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aba20 [0237.079] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab580 | out: hHeap=0x1f0000) returned 1 [0237.079] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aba20 | out: hHeap=0x1f0000) returned 1 [0237.079] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab7d0 | out: hHeap=0x1f0000) returned 1 [0237.079] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac360 | out: hHeap=0x1f0000) returned 1 [0237.079] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285098 | out: hHeap=0x1f0000) returned 1 [0237.080] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24e680 | out: hHeap=0x1f0000) returned 1 [0237.080] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x2aebd0 [0237.080] GetLastError () returned 0x0 [0237.080] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ad0 [0237.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389e0 [0237.082] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1042\\eula.rtf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1042\\eula.rtf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e290, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0237.082] GetFileType (hFile=0x174) returned 0x1 [0237.083] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28ffe0 [0237.083] SetFilePointerEx (in: hFile=0x174, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e218 | out: lpNewFilePointer=0x0) returned 1 [0237.084] GetLastError () returned 0xb7 [0237.084] CloseHandle (hObject=0x174) returned 1 [0237.085] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389e0 | out: hHeap=0x1f0000) returned 1 [0237.085] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ad0 | out: hHeap=0x1f0000) returned 1 [0237.085] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x284f90 | out: hHeap=0x1f0000) returned 1 [0237.085] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2853b0 | out: hHeap=0x1f0000) returned 1 [0237.085] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0237.085] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204df0 | out: hHeap=0x1f0000) returned 1 [0237.085] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b01e0 | out: hHeap=0x1f0000) returned 1 [0237.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f668 | out: hHeap=0x1f0000) returned 1 [0237.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a87f0 | out: hHeap=0x1f0000) returned 1 [0237.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aebd0 | out: hHeap=0x1f0000) returned 1 [0237.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260838 | out: hHeap=0x1f0000) returned 1 [0237.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab0e0 | out: hHeap=0x1f0000) returned 1 [0237.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x26c1b8 | out: hHeap=0x1f0000) returned 1 [0237.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2af490 | out: hHeap=0x1f0000) returned 1 [0237.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239198 | out: hHeap=0x1f0000) returned 1 [0237.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387f0 | out: hHeap=0x1f0000) returned 1 [0237.088] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f950 | out: hHeap=0x1f0000) returned 1 [0237.088] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0237.088] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238970 | out: hHeap=0x1f0000) returned 1 [0237.088] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f920 | out: hHeap=0x1f0000) returned 1 [0237.088] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604c8 | out: hHeap=0x1f0000) returned 1 [0237.088] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238800 | out: hHeap=0x1f0000) returned 1 [0237.088] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2854b8 | out: hHeap=0x1f0000) returned 1 [0237.089] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0237.089] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0658 | out: hHeap=0x1f0000) returned 1 [0237.089] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2287e8 | out: hHeap=0x1f0000) returned 1 [0237.089] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0237.089] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abb48 | out: hHeap=0x1f0000) returned 1 [0237.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228440 | out: hHeap=0x1f0000) returned 1 [0237.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238910 | out: hHeap=0x1f0000) returned 1 [0237.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387e0 | out: hHeap=0x1f0000) returned 1 [0237.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x290fe8 | out: hHeap=0x1f0000) returned 1 [0237.090] CloseHandle (hObject=0x1d8) returned 1 [0237.091] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238870 | out: hHeap=0x1f0000) returned 1 [0237.091] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388f0 | out: hHeap=0x1f0000) returned 1 [0237.092] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223be0 | out: hHeap=0x1f0000) returned 1 [0237.092] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24d620 | out: hHeap=0x1f0000) returned 1 [0237.092] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f938 | out: hHeap=0x1f0000) returned 1 [0237.092] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d70 | out: hHeap=0x1f0000) returned 1 [0237.092] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28afb8 | out: hHeap=0x1f0000) returned 1 [0237.093] CloseHandle (hObject=0x1bc) returned 1 [0237.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238860 | out: hHeap=0x1f0000) returned 1 [0237.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238990 | out: hHeap=0x1f0000) returned 1 [0237.094] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad638 | out: hHeap=0x1f0000) returned 1 [0237.094] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f50 | out: hHeap=0x1f0000) returned 1 [0237.094] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20c2c0 | out: hHeap=0x1f0000) returned 1 [0237.094] CloseHandle (hObject=0x1cc) returned 1 [0237.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238890 | out: hHeap=0x1f0000) returned 1 [0237.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388a0 | out: hHeap=0x1f0000) returned 1 [0237.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2adbf8 | out: hHeap=0x1f0000) returned 1 [0237.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238830 | out: hHeap=0x1f0000) returned 1 [0237.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238850 | out: hHeap=0x1f0000) returned 1 [0237.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238820 | out: hHeap=0x1f0000) returned 1 [0237.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238810 | out: hHeap=0x1f0000) returned 1 [0237.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ba30 | out: hHeap=0x1f0000) returned 1 [0237.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x269ba8 | out: hHeap=0x1f0000) returned 1 [0237.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae770 | out: hHeap=0x1f0000) returned 1 [0237.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2068c8 | out: hHeap=0x1f0000) returned 1 [0237.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f980 | out: hHeap=0x1f0000) returned 1 [0237.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f908 | out: hHeap=0x1f0000) returned 1 [0237.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233498 | out: hHeap=0x1f0000) returned 1 [0237.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x264f88 | out: hHeap=0x1f0000) returned 1 [0237.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae428 | out: hHeap=0x1f0000) returned 1 [0237.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238da8 | out: hHeap=0x1f0000) returned 1 [0237.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a83d0 | out: hHeap=0x1f0000) returned 1 [0237.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262fe0 | out: hHeap=0x1f0000) returned 1 [0237.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228878 | out: hHeap=0x1f0000) returned 1 [0237.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0237.097] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1042\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1042\\eula.rtf")) returned 1 [0237.100] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xfed6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0237.100] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238cc8 [0237.100] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228a28 [0237.100] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b03e8 [0237.100] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228a28 | out: hHeap=0x1f0000) returned 1 [0237.100] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0c08 | out: hHeap=0x1f0000) returned 1 [0237.100] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238cc8 | out: hHeap=0x1f0000) returned 1 [0237.101] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1042\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1042\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc [0237.102] GetFileType (hFile=0x1cc) returned 0x1 [0237.103] CloseHandle (hObject=0x1cc) returned 1 [0237.104] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0ad0 [0237.104] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1042\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1042\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x173eb6c | out: lpFileInformation=0x173eb6c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xfed6)) returned 1 [0237.104] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0ad0 | out: hHeap=0x1f0000) returned 1 [0237.104] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b00a8 [0237.104] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1042\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1042\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x173eb7c | out: lpFileInformation=0x173eb7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xfed6)) returned 1 [0237.105] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b00a8 | out: hHeap=0x1f0000) returned 1 [0237.105] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0248 [0237.105] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0248 | out: hHeap=0x1f0000) returned 1 [0237.105] GetLastError () returned 0x0 [0237.105] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260838 [0237.105] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228710 [0237.106] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262fe0 [0237.106] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0450 [0237.106] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238f30 [0237.106] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0237.106] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x212f98) returned 1 [0237.107] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x260928 | out: pbBuffer=0x260928) returned 1 [0237.107] CryptReleaseContext (hProv=0x212f98, dwFlags=0x0) returned 1 [0237.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0237.108] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x2688a0 [0237.108] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2ae9a0 [0237.108] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=39447677512) returned 1 [0237.108] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0237.108] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=39447723133) returned 1 [0237.109] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0237.109] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238fa0 [0237.109] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x264f88 [0237.109] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2af490 [0237.109] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x233158 [0237.109] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f950 [0237.109] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206868 [0237.109] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f908 [0237.110] GetLastError () returned 0x0 [0237.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0237.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2acfc0 [0237.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0237.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x106) returned 0x2afc38 [0237.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2acfc0 | out: hHeap=0x1f0000) returned 1 [0237.111] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238850 [0237.111] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387e0 [0237.112] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1042\\LocalizedData.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1042\\localizeddata.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e230, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc [0237.113] GetFileType (hFile=0x1cc) returned 0x1 [0237.113] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238970 [0237.114] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238890 [0237.115] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1042\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1042\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1bc [0237.115] GetFileType (hFile=0x1bc) returned 0x1 [0237.116] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f10 [0237.116] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d10 [0237.116] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad410 [0237.116] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238990 [0237.117] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387f0 [0237.501] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1042\\LocalizedData.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1042\\localizeddata.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0237.502] GetFileType (hFile=0x23c) returned 0x1 [0237.502] GetLastError () returned 0xb7 [0237.503] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe4) returned 0x22d368 [0237.503] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204b90 [0237.503] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f10 [0237.503] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d30 [0237.503] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2add68 [0237.503] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238820 [0237.504] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238900 [0237.505] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1042\\LocalizedData.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1042\\localizeddata.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0237.505] GetFileType (hFile=0x210) returned 0x1 [0237.506] GetLastError () returned 0xb7 [0237.506] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bb0 [0237.506] GetLastError () returned 0xb7 [0237.506] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d90 [0237.506] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bb0 [0237.506] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204db0 [0237.506] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb8) returned 0x223be0 [0237.507] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388f0 [0237.507] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238830 [0237.507] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1042\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1042\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1a4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0237.508] GetFileType (hFile=0x1f4) returned 0x1 [0237.509] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28ffe0 [0237.509] ReadFile (in: hFile=0x1f4, lpBuffer=0x28ffe0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e100, lpOverlapped=0x0 | out: lpBuffer=0x28ffe0*, lpNumberOfBytesRead=0x173e100*=0x1000, lpOverlapped=0x0) returned 1 [0237.514] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24d620 [0237.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28afb8 [0237.515] GetLastError () returned 0x0 [0237.521] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f650 [0237.521] GetLastError () returned 0x0 [0237.521] CloseHandle (hObject=0x1cc) returned 1 [0237.522] CloseHandle (hObject=0x1bc) returned 1 [0237.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238980 [0237.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388e0 [0237.528] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1042\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1042\\localizeddata.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1bc [0237.530] GetFileType (hFile=0x1bc) returned 0x1 [0237.531] GetLastError () returned 0xb7 [0237.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x289fb0 [0237.532] GetLastError () returned 0xb7 [0237.533] CloseHandle (hObject=0x1bc) returned 1 [0237.534] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1042\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1042\\localizeddata.xml")) returned 0 [0237.534] GetLastError () returned 0x20 [0237.534] GetLastError () returned 0x20 [0237.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228440 [0237.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2608b0 [0237.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260978 [0237.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x228878 [0237.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f50 [0237.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f10 [0237.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x238840 [0237.535] GetLastError () returned 0x20 [0237.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238d00 [0237.536] GetLastError () returned 0x20 [0237.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239208 [0237.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0658 [0237.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2604c8 [0237.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2859e0 [0237.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389b0 [0237.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0237.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f8a8 [0237.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238960 [0237.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260540 [0237.537] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f638 [0237.537] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260568 [0237.537] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2856c8 [0237.537] GetLastError () returned 0x20 [0237.537] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x2388d0 [0237.537] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238910 [0237.537] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238860 [0237.537] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238910 | out: hHeap=0x1f0000) returned 1 [0237.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238910 [0237.538] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238860 | out: hHeap=0x1f0000) returned 1 [0237.538] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388d0 | out: hHeap=0x1f0000) returned 1 [0237.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388a0 [0237.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f8d8 [0237.538] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388a0 | out: hHeap=0x1f0000) returned 1 [0237.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f608 [0237.538] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f8d8 | out: hHeap=0x1f0000) returned 1 [0237.538] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238910 | out: hHeap=0x1f0000) returned 1 [0237.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f848 [0237.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f6b0 [0237.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f848 | out: hHeap=0x1f0000) returned 1 [0237.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f848 [0237.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f6b0 | out: hHeap=0x1f0000) returned 1 [0237.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f608 | out: hHeap=0x1f0000) returned 1 [0237.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f788 [0237.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204bf0 [0237.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f788 | out: hHeap=0x1f0000) returned 1 [0237.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f70 [0237.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bf0 | out: hHeap=0x1f0000) returned 1 [0237.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f848 | out: hHeap=0x1f0000) returned 1 [0237.813] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c70 [0237.813] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260928 [0237.813] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c70 | out: hHeap=0x1f0000) returned 1 [0237.813] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204db0 [0237.813] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0237.813] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f70 | out: hHeap=0x1f0000) returned 1 [0237.813] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204dd0 [0237.813] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206808 [0237.814] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204dd0 | out: hHeap=0x1f0000) returned 1 [0237.814] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2605b8 [0237.814] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206808 | out: hHeap=0x1f0000) returned 1 [0237.814] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204db0 | out: hHeap=0x1f0000) returned 1 [0237.814] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389c0 [0237.814] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f860 [0237.814] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389c0 | out: hHeap=0x1f0000) returned 1 [0237.814] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f878 [0237.814] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f860 | out: hHeap=0x1f0000) returned 1 [0237.814] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204f10 [0237.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f878 | out: hHeap=0x1f0000) returned 1 [0237.815] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206838 [0237.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f10 | out: hHeap=0x1f0000) returned 1 [0237.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206838 | out: hHeap=0x1f0000) returned 1 [0237.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0237.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608b0 | out: hHeap=0x1f0000) returned 1 [0237.815] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0237.816] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2859e0 | out: hHeap=0x1f0000) returned 1 [0237.816] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604c8 | out: hHeap=0x1f0000) returned 1 [0237.816] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239198 [0237.816] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0237.816] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x213020) returned 1 [0237.817] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x260748 | out: pbBuffer=0x260748) returned 1 [0237.817] CryptReleaseContext (hProv=0x213020, dwFlags=0x0) returned 1 [0237.818] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0237.818] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260928 [0237.818] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260630 [0237.818] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239048 [0237.818] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0237.818] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0237.818] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239048 | out: hHeap=0x1f0000) returned 1 [0237.818] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a87f0 [0237.818] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f668 [0237.818] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x2b0178 [0237.819] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260928 [0237.819] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2853b0 [0237.819] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204df0 [0237.819] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0a00 [0237.819] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260860 [0237.819] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285e00 [0237.819] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389c0 [0237.819] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260518 [0237.819] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f770 [0237.819] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388c0 [0237.819] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605b8 [0237.819] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f758 [0237.819] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f758 | out: hHeap=0x1f0000) returned 1 [0237.820] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0237.820] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388c0 | out: hHeap=0x1f0000) returned 1 [0237.820] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f770 | out: hHeap=0x1f0000) returned 1 [0237.820] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0237.820] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389c0 | out: hHeap=0x1f0000) returned 1 [0237.820] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285e00 | out: hHeap=0x1f0000) returned 1 [0237.820] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0237.820] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0a00 | out: hHeap=0x1f0000) returned 1 [0237.820] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238f68 [0237.820] GetLastError () returned 0x0 [0237.821] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239010 [0237.821] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0237.821] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0237.821] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0237.821] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0237.821] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0237.821] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0237.821] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x24e680 [0237.821] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285cf8 [0237.822] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0237.822] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0237.822] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0237.822] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0237.822] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285e00 [0237.822] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0237.822] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0237.822] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x230000 [0237.822] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x26c1b8 [0237.822] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2af378 [0237.822] QueryPerformanceCounter (in: lpPerformanceCount=0x173dee0 | out: lpPerformanceCount=0x173dee0*=39519145134) returned 1 [0237.823] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173df20 | out: lpSystemTimeAsFileTime=0x173df20) [0237.823] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x2389c0 [0237.823] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605b8 [0237.823] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d30 [0237.823] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d30 | out: hHeap=0x1f0000) returned 1 [0237.823] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0237.823] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0237.823] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f10 [0237.824] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f10 | out: hHeap=0x1f0000) returned 1 [0237.824] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0237.824] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389c0 | out: hHeap=0x1f0000) returned 1 [0237.824] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0237.824] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238cc8 [0237.824] GetLastError () returned 0x0 [0237.824] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0237.825] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0237.825] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0237.825] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2606a8 [0237.825] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2606f8 [0237.825] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0237.825] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0237.825] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2604c8 [0237.825] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0237.825] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x222ee8 [0237.825] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0237.826] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x20c2c0 [0237.826] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0237.826] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x22b018 [0237.826] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20c2c0 | out: hHeap=0x1f0000) returned 1 [0237.826] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260518 [0237.826] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2605b8 [0237.826] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0237.826] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0237.827] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0237.827] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x20c2c0 [0237.827] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x234b90 [0237.827] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b90 | out: hHeap=0x1f0000) returned 1 [0237.827] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20c2c0 | out: hHeap=0x1f0000) returned 1 [0237.827] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b018 | out: hHeap=0x1f0000) returned 1 [0237.827] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f890 [0237.827] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228a70 [0237.827] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260748 [0237.828] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260518 [0237.828] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2608b0 [0237.828] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2605b8 [0237.828] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0237.829] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0237.829] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x20c2c0 [0237.829] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260608 [0237.829] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260658 [0237.829] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0237.829] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0237.829] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260658 | out: hHeap=0x1f0000) returned 1 [0237.829] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206808 [0237.829] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x2a9840 [0237.830] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a9840 | out: hHeap=0x1f0000) returned 1 [0237.830] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206808 | out: hHeap=0x1f0000) returned 1 [0237.830] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604c8 | out: hHeap=0x1f0000) returned 1 [0237.830] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0237.830] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0237.830] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20c2c0 | out: hHeap=0x1f0000) returned 1 [0237.830] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204e90 [0237.830] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0237.830] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0237.831] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606f8 | out: hHeap=0x1f0000) returned 1 [0237.831] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab8f8 [0237.831] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0237.831] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0237.831] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608b0 | out: hHeap=0x1f0000) returned 1 [0237.831] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228a70 | out: hHeap=0x1f0000) returned 1 [0237.831] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0237.831] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e90 | out: hHeap=0x1f0000) returned 1 [0237.831] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f890 | out: hHeap=0x1f0000) returned 1 [0237.831] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0237.831] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2acca0 [0237.831] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2acca0 | out: hHeap=0x1f0000) returned 1 [0237.832] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ee8 | out: hHeap=0x1f0000) returned 1 [0237.832] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0237.832] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0237.832] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0237.832] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0237.832] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0237.832] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0237.832] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0237.832] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac488 [0237.832] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abec0 [0237.832] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac488 | out: hHeap=0x1f0000) returned 1 [0237.832] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abec0 | out: hHeap=0x1f0000) returned 1 [0237.832] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab8f8 | out: hHeap=0x1f0000) returned 1 [0237.833] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0237.833] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285e00 | out: hHeap=0x1f0000) returned 1 [0237.833] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24e680 | out: hHeap=0x1f0000) returned 1 [0237.833] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x2adfc8 [0237.833] GetLastError () returned 0x0 [0237.833] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238800 [0237.833] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238910 [0237.834] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1042\\LocalizedData.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1042\\localizeddata.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e290, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0238.188] GetFileType (hFile=0x1d4) returned 0x1 [0238.189] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x299028 [0238.189] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e218 | out: lpNewFilePointer=0x0) returned 1 [0238.190] GetLastError () returned 0xb7 [0238.190] CloseHandle (hObject=0x1d4) returned 1 [0238.191] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238910 | out: hHeap=0x1f0000) returned 1 [0238.191] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238800 | out: hHeap=0x1f0000) returned 1 [0238.191] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285cf8 | out: hHeap=0x1f0000) returned 1 [0238.191] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2853b0 | out: hHeap=0x1f0000) returned 1 [0238.191] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0238.191] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204df0 | out: hHeap=0x1f0000) returned 1 [0238.192] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0178 | out: hHeap=0x1f0000) returned 1 [0238.192] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f668 | out: hHeap=0x1f0000) returned 1 [0238.192] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a87f0 | out: hHeap=0x1f0000) returned 1 [0238.192] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2adfc8 | out: hHeap=0x1f0000) returned 1 [0238.192] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260630 | out: hHeap=0x1f0000) returned 1 [0238.192] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0238.192] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x26c1b8 | out: hHeap=0x1f0000) returned 1 [0238.192] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2af378 | out: hHeap=0x1f0000) returned 1 [0238.192] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239198 | out: hHeap=0x1f0000) returned 1 [0238.192] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238840 | out: hHeap=0x1f0000) returned 1 [0238.193] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f638 | out: hHeap=0x1f0000) returned 1 [0238.193] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0238.193] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238960 | out: hHeap=0x1f0000) returned 1 [0238.193] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f8a8 | out: hHeap=0x1f0000) returned 1 [0238.193] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0238.193] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389b0 | out: hHeap=0x1f0000) returned 1 [0238.193] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2856c8 | out: hHeap=0x1f0000) returned 1 [0238.193] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0238.193] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0658 | out: hHeap=0x1f0000) returned 1 [0238.193] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228878 | out: hHeap=0x1f0000) returned 1 [0238.194] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0238.194] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0238.194] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228440 | out: hHeap=0x1f0000) returned 1 [0238.194] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388e0 | out: hHeap=0x1f0000) returned 1 [0238.194] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238980 | out: hHeap=0x1f0000) returned 1 [0238.194] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28ffe0 | out: hHeap=0x1f0000) returned 1 [0238.194] CloseHandle (hObject=0x1f4) returned 1 [0238.195] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238830 | out: hHeap=0x1f0000) returned 1 [0238.195] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388f0 | out: hHeap=0x1f0000) returned 1 [0238.195] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223be0 | out: hHeap=0x1f0000) returned 1 [0238.196] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24d620 | out: hHeap=0x1f0000) returned 1 [0238.196] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f650 | out: hHeap=0x1f0000) returned 1 [0238.196] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d90 | out: hHeap=0x1f0000) returned 1 [0238.196] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28afb8 | out: hHeap=0x1f0000) returned 1 [0238.196] CloseHandle (hObject=0x210) returned 1 [0238.197] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238900 | out: hHeap=0x1f0000) returned 1 [0238.197] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238820 | out: hHeap=0x1f0000) returned 1 [0238.197] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2add68 | out: hHeap=0x1f0000) returned 1 [0238.197] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204b90 | out: hHeap=0x1f0000) returned 1 [0238.197] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d368 | out: hHeap=0x1f0000) returned 1 [0238.198] CloseHandle (hObject=0x23c) returned 1 [0238.198] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387f0 | out: hHeap=0x1f0000) returned 1 [0238.198] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238990 | out: hHeap=0x1f0000) returned 1 [0238.199] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad410 | out: hHeap=0x1f0000) returned 1 [0238.199] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238890 | out: hHeap=0x1f0000) returned 1 [0238.199] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238970 | out: hHeap=0x1f0000) returned 1 [0238.199] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387e0 | out: hHeap=0x1f0000) returned 1 [0238.199] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238850 | out: hHeap=0x1f0000) returned 1 [0238.199] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2afc38 | out: hHeap=0x1f0000) returned 1 [0238.199] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x264f88 | out: hHeap=0x1f0000) returned 1 [0238.200] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2af490 | out: hHeap=0x1f0000) returned 1 [0238.200] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206868 | out: hHeap=0x1f0000) returned 1 [0238.200] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f908 | out: hHeap=0x1f0000) returned 1 [0238.200] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f950 | out: hHeap=0x1f0000) returned 1 [0238.200] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233158 | out: hHeap=0x1f0000) returned 1 [0238.200] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2688a0 | out: hHeap=0x1f0000) returned 1 [0238.200] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae9a0 | out: hHeap=0x1f0000) returned 1 [0238.201] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238f30 | out: hHeap=0x1f0000) returned 1 [0238.201] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0450 | out: hHeap=0x1f0000) returned 1 [0238.201] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262fe0 | out: hHeap=0x1f0000) returned 1 [0238.201] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228710 | out: hHeap=0x1f0000) returned 1 [0238.201] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260838 | out: hHeap=0x1f0000) returned 1 [0238.201] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1042\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1042\\localizeddata.xml")) returned 1 [0238.204] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0238.205] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239010 [0238.205] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228710 [0238.205] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0728 [0238.205] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228710 | out: hHeap=0x1f0000) returned 1 [0238.205] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b03e8 | out: hHeap=0x1f0000) returned 1 [0238.205] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239010 | out: hHeap=0x1f0000) returned 1 [0238.206] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1042\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1042\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0238.207] GetFileType (hFile=0x23c) returned 0x1 [0238.207] CloseHandle (hObject=0x23c) returned 1 [0238.208] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0588 [0238.208] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1042\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1042\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x173eb6c | out: lpFileInformation=0x173eb6c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3b58)) returned 1 [0238.208] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0588 | out: hHeap=0x1f0000) returned 1 [0238.209] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0658 [0238.209] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1042\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1042\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x173eb7c | out: lpFileInformation=0x173eb7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3b58)) returned 1 [0238.209] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0658 | out: hHeap=0x1f0000) returned 1 [0238.209] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0520 [0238.209] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0520 | out: hHeap=0x1f0000) returned 1 [0238.209] GetLastError () returned 0x0 [0238.210] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260630 [0238.210] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2285a8 [0238.210] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262e48 [0238.211] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0658 [0238.211] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238de0 [0238.211] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0238.212] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x212d78) returned 1 [0238.213] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2606a8 | out: pbBuffer=0x2606a8) returned 1 [0238.213] CryptReleaseContext (hProv=0x212d78, dwFlags=0x0) returned 1 [0238.213] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0238.213] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x267598 [0238.213] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2af030 [0238.213] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=39558224228) returned 1 [0238.213] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0238.214] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=39558268231) returned 1 [0238.214] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0238.214] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238cc8 [0238.214] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x26aeb0 [0238.214] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2aece8 [0238.215] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x233158 [0238.215] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f980 [0238.215] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206928 [0238.215] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f908 [0238.215] GetLastError () returned 0x0 [0238.215] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f770 [0238.216] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ade20 [0238.216] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f770 | out: hHeap=0x1f0000) returned 1 [0238.216] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x106) returned 0x2ae888 [0238.216] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ade20 | out: hHeap=0x1f0000) returned 1 [0238.216] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387e0 [0238.217] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238960 [0238.218] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1042\\SetupResources.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1042\\setupresources.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e230, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0238.219] GetFileType (hFile=0x23c) returned 0x1 [0238.220] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238890 [0238.220] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238910 [0238.221] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1042\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1042\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0238.222] GetFileType (hFile=0x210) returned 0x1 [0238.222] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d10 [0238.222] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cf0 [0238.222] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ada88 [0238.222] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389b0 [0238.223] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387f0 [0238.224] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1042\\SetupResources.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1042\\setupresources.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0238.224] GetFileType (hFile=0x1f4) returned 0x1 [0238.225] GetLastError () returned 0xb7 [0238.225] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe4) returned 0x229500 [0238.225] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f30 [0238.225] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0238.225] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f50 [0238.225] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad130 [0238.225] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238900 [0238.226] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238800 [0238.226] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1042\\SetupResources.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1042\\setupresources.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0238.227] GetFileType (hFile=0x1d4) returned 0x1 [0238.227] GetLastError () returned 0xb7 [0238.227] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0238.227] GetLastError () returned 0xb7 [0238.228] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bd0 [0238.228] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0238.228] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bf0 [0238.228] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb8) returned 0x224420 [0238.228] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238820 [0238.228] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388f0 [0238.229] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1042\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1042\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1a4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1a4 [0238.229] GetFileType (hFile=0x1a4) returned 0x1 [0238.230] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x291ff0 [0238.230] ReadFile (in: hFile=0x1a4, lpBuffer=0x291ff0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e100, lpOverlapped=0x0 | out: lpBuffer=0x291ff0*, lpNumberOfBytesRead=0x173e100*=0x1000, lpOverlapped=0x0) returned 1 [0238.735] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24a5c0 [0238.736] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28cfc8 [0238.736] GetLastError () returned 0x0 [0238.740] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f878 [0238.741] GetLastError () returned 0x0 [0238.741] CloseHandle (hObject=0x23c) returned 1 [0238.742] CloseHandle (hObject=0x210) returned 1 [0238.742] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238980 [0238.742] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238990 [0238.743] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1042\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1042\\setupresources.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0238.744] GetFileType (hFile=0x210) returned 0x1 [0238.745] GetLastError () returned 0xb7 [0238.745] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x295008 [0238.745] GetLastError () returned 0xb7 [0238.747] CloseHandle (hObject=0x210) returned 1 [0238.747] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1042\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1042\\setupresources.dll")) returned 0 [0238.748] GetLastError () returned 0x20 [0238.748] GetLastError () returned 0x20 [0238.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228a28 [0238.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2607c0 [0238.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2607e8 [0238.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x228680 [0238.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f10 [0238.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bf0 [0238.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x238a30 [0238.748] GetLastError () returned 0x20 [0238.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239278 [0238.749] GetLastError () returned 0x20 [0238.749] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238f30 [0238.749] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0c08 [0238.749] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260860 [0238.749] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285cf8 [0238.749] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389e0 [0238.749] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0238.749] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f848 [0238.749] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a80 [0238.749] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0238.749] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f800 [0238.752] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260888 [0238.752] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2857d0 [0238.752] GetLastError () returned 0x20 [0238.752] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238ad0 [0238.753] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238a60 [0238.753] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b00 [0238.753] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a60 | out: hHeap=0x1f0000) returned 1 [0238.753] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ae0 [0238.753] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b00 | out: hHeap=0x1f0000) returned 1 [0238.753] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ad0 | out: hHeap=0x1f0000) returned 1 [0238.753] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389f0 [0238.753] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f608 [0238.753] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389f0 | out: hHeap=0x1f0000) returned 1 [0238.754] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f860 [0238.754] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f608 | out: hHeap=0x1f0000) returned 1 [0238.754] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ae0 | out: hHeap=0x1f0000) returned 1 [0238.754] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f6b0 [0238.754] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f890 [0238.754] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f6b0 | out: hHeap=0x1f0000) returned 1 [0238.754] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f7a0 [0238.754] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f890 | out: hHeap=0x1f0000) returned 1 [0238.755] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f860 | out: hHeap=0x1f0000) returned 1 [0238.755] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f650 [0238.755] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204f70 [0238.755] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f650 | out: hHeap=0x1f0000) returned 1 [0238.755] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c70 [0238.755] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f70 | out: hHeap=0x1f0000) returned 1 [0238.756] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f7a0 | out: hHeap=0x1f0000) returned 1 [0238.756] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f10 [0238.756] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2608b0 [0238.756] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f10 | out: hHeap=0x1f0000) returned 1 [0238.756] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204df0 [0238.756] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608b0 | out: hHeap=0x1f0000) returned 1 [0238.756] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c70 | out: hHeap=0x1f0000) returned 1 [0238.757] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204d70 [0238.757] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x2066b8 [0238.757] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d70 | out: hHeap=0x1f0000) returned 1 [0238.757] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2608b0 [0238.757] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2066b8 | out: hHeap=0x1f0000) returned 1 [0238.757] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204df0 | out: hHeap=0x1f0000) returned 1 [0238.757] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b60 [0238.758] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f890 [0238.758] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b60 | out: hHeap=0x1f0000) returned 1 [0238.758] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f8a8 [0238.758] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f890 | out: hHeap=0x1f0000) returned 1 [0238.758] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204df0 [0238.758] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f8a8 | out: hHeap=0x1f0000) returned 1 [0238.758] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206808 [0238.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204df0 | out: hHeap=0x1f0000) returned 1 [0238.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206808 | out: hHeap=0x1f0000) returned 1 [0238.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608b0 | out: hHeap=0x1f0000) returned 1 [0238.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607c0 | out: hHeap=0x1f0000) returned 1 [0238.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac928 [0238.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285cf8 | out: hHeap=0x1f0000) returned 1 [0238.760] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0238.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238f68 [0238.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0238.760] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x212e00) returned 1 [0238.761] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x260860 | out: pbBuffer=0x260860) returned 1 [0238.761] CryptReleaseContext (hProv=0x212e00, dwFlags=0x0) returned 1 [0238.762] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0238.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2607c0 [0238.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260860 [0238.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239278 [0238.762] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607c0 | out: hHeap=0x1f0000) returned 1 [0238.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac5b0 [0238.762] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239278 | out: hHeap=0x1f0000) returned 1 [0238.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8110 [0238.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f668 [0238.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x2b0ad0 [0238.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2607c0 [0238.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285ae8 [0238.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e90 [0238.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b08c8 [0238.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260608 [0238.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285e00 [0238.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a10 [0238.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608b0 [0238.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f758 [0238.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a40 [0238.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0238.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f770 [0238.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f770 | out: hHeap=0x1f0000) returned 1 [0238.765] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0238.765] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a40 | out: hHeap=0x1f0000) returned 1 [0238.765] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f758 | out: hHeap=0x1f0000) returned 1 [0238.765] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608b0 | out: hHeap=0x1f0000) returned 1 [0238.766] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a10 | out: hHeap=0x1f0000) returned 1 [0238.766] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285e00 | out: hHeap=0x1f0000) returned 1 [0238.766] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0238.766] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b08c8 | out: hHeap=0x1f0000) returned 1 [0238.767] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239010 [0238.767] GetLastError () returned 0x0 [0238.767] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239278 [0238.767] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab8f8 [0238.767] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab8f8 | out: hHeap=0x1f0000) returned 1 [0238.767] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abb48 [0238.767] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab208 [0238.768] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abb48 | out: hHeap=0x1f0000) returned 1 [0238.768] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab208 | out: hHeap=0x1f0000) returned 1 [0238.768] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x24ed00 [0238.768] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2853b0 [0238.768] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2acb78 [0238.768] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2acb78 | out: hHeap=0x1f0000) returned 1 [0238.768] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2acca0 [0238.768] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2acca0 | out: hHeap=0x1f0000) returned 1 [0238.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285bf0 [0238.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac6d8 [0238.769] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac6d8 | out: hHeap=0x1f0000) returned 1 [0238.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fda8 [0238.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x26e7c8 [0238.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2afb20 [0238.769] QueryPerformanceCounter (in: lpPerformanceCount=0x173dee0 | out: lpPerformanceCount=0x173dee0*=39613830181) returned 1 [0238.770] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173df20 | out: lpSystemTimeAsFileTime=0x173df20) [0238.770] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238a40 [0238.770] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608b0 [0238.770] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204df0 [0238.770] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204df0 | out: hHeap=0x1f0000) returned 1 [0238.770] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608b0 | out: hHeap=0x1f0000) returned 1 [0238.771] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0238.771] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bf0 [0238.771] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bf0 | out: hHeap=0x1f0000) returned 1 [0238.771] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0238.771] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a40 | out: hHeap=0x1f0000) returned 1 [0238.771] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0238.771] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239010 [0238.771] GetLastError () returned 0x0 [0238.772] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abd98 [0238.772] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abec0 [0238.772] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abb48 [0238.772] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2608b0 [0238.772] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2608d8 [0238.772] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abfe8 [0238.772] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aafb8 [0238.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260608 [0238.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abc70 [0238.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x234b90 [0238.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac110 [0238.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x25ffe8 [0238.773] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac110 | out: hHeap=0x1f0000) returned 1 [0238.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x220748 [0238.774] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25ffe8 | out: hHeap=0x1f0000) returned 1 [0238.774] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260c48 [0238.774] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260a68 [0238.774] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0238.774] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab0e0 [0238.774] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a68 | out: hHeap=0x1f0000) returned 1 [0238.774] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x220968 [0238.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x2647e0 [0238.775] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2647e0 | out: hHeap=0x1f0000) returned 1 [0238.775] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220968 | out: hHeap=0x1f0000) returned 1 [0238.775] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220748 | out: hHeap=0x1f0000) returned 1 [0238.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f6f8 [0238.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2286c8 [0238.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260b08 [0238.776] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260c20 [0238.776] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2609f0 [0238.776] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260a68 [0238.776] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c20 | out: hHeap=0x1f0000) returned 1 [0238.776] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b08 | out: hHeap=0x1f0000) returned 1 [0238.776] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x25ffe8 [0238.776] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260a40 [0238.777] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260c20 [0238.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0238.777] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac110 [0238.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c20 | out: hHeap=0x1f0000) returned 1 [0238.777] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206808 [0238.777] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x2a9c88 [0238.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a9c88 | out: hHeap=0x1f0000) returned 1 [0238.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206808 | out: hHeap=0x1f0000) returned 1 [0238.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0238.778] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab8f8 [0238.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac110 | out: hHeap=0x1f0000) returned 1 [0238.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25ffe8 | out: hHeap=0x1f0000) returned 1 [0238.778] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204f10 [0238.779] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac110 [0238.779] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab208 [0238.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0238.779] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab330 [0238.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab208 | out: hHeap=0x1f0000) returned 1 [0238.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a68 | out: hHeap=0x1f0000) returned 1 [0238.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609f0 | out: hHeap=0x1f0000) returned 1 [0238.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2286c8 | out: hHeap=0x1f0000) returned 1 [0238.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac110 | out: hHeap=0x1f0000) returned 1 [0238.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f10 | out: hHeap=0x1f0000) returned 1 [0238.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f6f8 | out: hHeap=0x1f0000) returned 1 [0238.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab0e0 | out: hHeap=0x1f0000) returned 1 [0238.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aba20 [0238.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aba20 | out: hHeap=0x1f0000) returned 1 [0238.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b90 | out: hHeap=0x1f0000) returned 1 [0238.781] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abc70 | out: hHeap=0x1f0000) returned 1 [0239.142] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab8f8 | out: hHeap=0x1f0000) returned 1 [0239.142] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aafb8 | out: hHeap=0x1f0000) returned 1 [0239.143] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abfe8 | out: hHeap=0x1f0000) returned 1 [0239.143] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608b0 | out: hHeap=0x1f0000) returned 1 [0239.143] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abb48 | out: hHeap=0x1f0000) returned 1 [0239.143] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abec0 | out: hHeap=0x1f0000) returned 1 [0239.143] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2acca0 [0239.143] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac6d8 [0239.143] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2acca0 | out: hHeap=0x1f0000) returned 1 [0239.143] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac6d8 | out: hHeap=0x1f0000) returned 1 [0239.144] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab330 | out: hHeap=0x1f0000) returned 1 [0239.144] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abd98 | out: hHeap=0x1f0000) returned 1 [0239.144] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285bf0 | out: hHeap=0x1f0000) returned 1 [0239.144] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24ed00 | out: hHeap=0x1f0000) returned 1 [0239.144] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x2af148 [0239.144] GetLastError () returned 0x0 [0239.144] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238830 [0239.145] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238840 [0239.146] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1042\\SetupResources.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1042\\setupresources.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e290, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0239.146] GetFileType (hFile=0x220) returned 0x1 [0239.147] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x287fa0 [0239.147] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e218 | out: lpNewFilePointer=0x0) returned 1 [0239.148] GetLastError () returned 0xb7 [0239.148] CloseHandle (hObject=0x220) returned 1 [0239.149] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238840 | out: hHeap=0x1f0000) returned 1 [0239.149] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238830 | out: hHeap=0x1f0000) returned 1 [0239.149] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2853b0 | out: hHeap=0x1f0000) returned 1 [0239.149] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285ae8 | out: hHeap=0x1f0000) returned 1 [0239.149] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607c0 | out: hHeap=0x1f0000) returned 1 [0239.149] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e90 | out: hHeap=0x1f0000) returned 1 [0239.149] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0ad0 | out: hHeap=0x1f0000) returned 1 [0239.149] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f668 | out: hHeap=0x1f0000) returned 1 [0239.150] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8110 | out: hHeap=0x1f0000) returned 1 [0239.150] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2af148 | out: hHeap=0x1f0000) returned 1 [0239.150] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0239.150] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac5b0 | out: hHeap=0x1f0000) returned 1 [0239.150] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x26e7c8 | out: hHeap=0x1f0000) returned 1 [0239.150] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2afb20 | out: hHeap=0x1f0000) returned 1 [0239.150] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238f68 | out: hHeap=0x1f0000) returned 1 [0239.150] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a30 | out: hHeap=0x1f0000) returned 1 [0239.151] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f800 | out: hHeap=0x1f0000) returned 1 [0239.151] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0239.151] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a80 | out: hHeap=0x1f0000) returned 1 [0239.151] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f848 | out: hHeap=0x1f0000) returned 1 [0239.151] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0239.151] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389e0 | out: hHeap=0x1f0000) returned 1 [0239.151] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2857d0 | out: hHeap=0x1f0000) returned 1 [0239.151] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0239.152] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0c08 | out: hHeap=0x1f0000) returned 1 [0239.152] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228680 | out: hHeap=0x1f0000) returned 1 [0239.152] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607e8 | out: hHeap=0x1f0000) returned 1 [0239.152] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac928 | out: hHeap=0x1f0000) returned 1 [0239.152] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228a28 | out: hHeap=0x1f0000) returned 1 [0239.152] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238990 | out: hHeap=0x1f0000) returned 1 [0239.152] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238980 | out: hHeap=0x1f0000) returned 1 [0239.153] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x291ff0 | out: hHeap=0x1f0000) returned 1 [0239.153] CloseHandle (hObject=0x1a4) returned 1 [0239.153] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388f0 | out: hHeap=0x1f0000) returned 1 [0239.154] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238820 | out: hHeap=0x1f0000) returned 1 [0239.154] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224420 | out: hHeap=0x1f0000) returned 1 [0239.154] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24a5c0 | out: hHeap=0x1f0000) returned 1 [0239.154] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f878 | out: hHeap=0x1f0000) returned 1 [0239.154] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bd0 | out: hHeap=0x1f0000) returned 1 [0239.154] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28cfc8 | out: hHeap=0x1f0000) returned 1 [0239.154] CloseHandle (hObject=0x1d4) returned 1 [0239.155] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238800 | out: hHeap=0x1f0000) returned 1 [0239.155] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238900 | out: hHeap=0x1f0000) returned 1 [0239.155] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad130 | out: hHeap=0x1f0000) returned 1 [0239.155] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f30 | out: hHeap=0x1f0000) returned 1 [0239.155] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229500 | out: hHeap=0x1f0000) returned 1 [0239.156] CloseHandle (hObject=0x1f4) returned 1 [0239.157] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387f0 | out: hHeap=0x1f0000) returned 1 [0239.157] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389b0 | out: hHeap=0x1f0000) returned 1 [0239.157] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ada88 | out: hHeap=0x1f0000) returned 1 [0239.157] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238910 | out: hHeap=0x1f0000) returned 1 [0239.157] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238890 | out: hHeap=0x1f0000) returned 1 [0239.157] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238960 | out: hHeap=0x1f0000) returned 1 [0239.158] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387e0 | out: hHeap=0x1f0000) returned 1 [0239.158] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae888 | out: hHeap=0x1f0000) returned 1 [0239.158] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x26aeb0 | out: hHeap=0x1f0000) returned 1 [0239.158] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aece8 | out: hHeap=0x1f0000) returned 1 [0239.158] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206928 | out: hHeap=0x1f0000) returned 1 [0239.158] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f908 | out: hHeap=0x1f0000) returned 1 [0239.158] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f980 | out: hHeap=0x1f0000) returned 1 [0239.158] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233158 | out: hHeap=0x1f0000) returned 1 [0239.158] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x267598 | out: hHeap=0x1f0000) returned 1 [0239.158] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2af030 | out: hHeap=0x1f0000) returned 1 [0239.159] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238de0 | out: hHeap=0x1f0000) returned 1 [0239.159] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0658 | out: hHeap=0x1f0000) returned 1 [0239.159] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262e48 | out: hHeap=0x1f0000) returned 1 [0239.159] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2285a8 | out: hHeap=0x1f0000) returned 1 [0239.159] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260630 | out: hHeap=0x1f0000) returned 1 [0239.159] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1042\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1042\\setupresources.dll")) returned 1 [0239.161] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0239.161] FindClose (in: hFindFile=0x24e940 | out: hFindFile=0x24e940) returned 1 [0239.162] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0728 | out: hHeap=0x1f0000) returned 1 [0239.162] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261cc0 | out: hHeap=0x1f0000) returned 1 [0239.162] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0239.162] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228bd8 | out: hHeap=0x1f0000) returned 1 [0239.162] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2285a8 [0239.162] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260798 [0239.162] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262cb0 [0239.162] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228a28 [0239.162] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1043\\*", lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e940 [0239.163] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228518 [0239.163] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228a28 | out: hHeap=0x1f0000) returned 1 [0239.163] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0239.163] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0239.163] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228638 [0239.163] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228518 | out: hHeap=0x1f0000) returned 1 [0239.163] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0239.163] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0239.164] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xdda, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0239.164] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0239.164] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228680 [0239.164] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x2b0248 [0239.164] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228680 | out: hHeap=0x1f0000) returned 1 [0239.164] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228638 | out: hHeap=0x1f0000) returned 1 [0239.164] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0239.164] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1043\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1043\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0239.165] GetFileType (hFile=0x1f4) returned 0x1 [0239.165] CloseHandle (hObject=0x1f4) returned 1 [0239.166] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a84d8 [0239.166] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1043\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1043\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x173eb6c | out: lpFileInformation=0x173eb6c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xdda)) returned 1 [0239.166] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a84d8 | out: hHeap=0x1f0000) returned 1 [0239.166] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a83d0 [0239.166] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1043\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1043\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x173eb7c | out: lpFileInformation=0x173eb7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xdda)) returned 1 [0239.166] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a83d0 | out: hHeap=0x1f0000) returned 1 [0239.166] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a88f8 [0239.166] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a88f8 | out: hHeap=0x1f0000) returned 1 [0239.166] GetLastError () returned 0x0 [0239.167] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260770 [0239.167] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228758 [0239.167] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x261cc0 [0239.167] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a81c0 [0239.167] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238cc8 [0239.167] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0239.167] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x212e00) returned 1 [0239.168] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x260928 | out: pbBuffer=0x260928) returned 1 [0239.168] CryptReleaseContext (hProv=0x212e00, dwFlags=0x0) returned 1 [0239.168] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0239.168] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x264f88 [0239.169] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2ae0e0 [0239.169] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=39653762257) returned 1 [0239.169] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0239.169] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=39653794388) returned 1 [0239.169] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0239.169] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239278 [0239.169] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x267598 [0239.169] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2ae1f8 [0239.170] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x233568 [0239.170] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f938 [0239.170] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206868 [0239.170] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f9b0 [0239.170] GetLastError () returned 0x0 [0239.170] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0520 [0239.170] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a0e0 [0239.170] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0520 | out: hHeap=0x1f0000) returned 1 [0239.170] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xee) returned 0x21b938 [0239.171] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a0e0 | out: hHeap=0x1f0000) returned 1 [0239.171] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389b0 [0239.171] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387e0 [0239.173] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1043\\eula.rtf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1043\\eula.rtf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e230, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0239.181] GetFileType (hFile=0x1f4) returned 0x1 [0239.182] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388b0 [0239.182] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238990 [0239.183] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1043\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1043\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0239.184] GetFileType (hFile=0x1d4) returned 0x1 [0239.184] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204dd0 [0239.184] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bb0 [0239.185] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad6f0 [0239.185] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387f0 [0239.185] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388d0 [0239.186] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1043\\eula.rtf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1043\\eula.rtf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1a4 [0239.186] GetFileType (hFile=0x1a4) returned 0x1 [0239.187] GetLastError () returned 0xb7 [0239.642] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe4) returned 0x20d888 [0239.643] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204db0 [0239.643] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bb0 [0239.643] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204dd0 [0239.643] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad7a8 [0239.643] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389c0 [0239.643] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238830 [0239.644] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1043\\eula.rtf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1043\\eula.rtf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0239.644] GetFileType (hFile=0x200) returned 0x1 [0239.644] GetLastError () returned 0xb7 [0239.645] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ef0 [0239.645] GetLastError () returned 0xb7 [0239.645] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d90 [0239.645] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e70 [0239.645] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bb0 [0239.645] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb8) returned 0x236ea0 [0239.645] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238890 [0239.645] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388a0 [0239.646] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1043\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1043\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1a4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0239.646] GetFileType (hFile=0x1b0) returned 0x1 [0239.647] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x288fa8 [0239.647] ReadFile (in: hFile=0x1b0, lpBuffer=0x288fa8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e100, lpOverlapped=0x0 | out: lpBuffer=0x288fa8*, lpNumberOfBytesRead=0x173e100*=0xdda, lpOverlapped=0x0) returned 1 [0239.650] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x249db0 [0239.650] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28efd8 [0239.650] GetLastError () returned 0x0 [0239.650] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f8a8 [0239.650] GetLastError () returned 0x0 [0239.653] CloseHandle (hObject=0x1f4) returned 1 [0239.653] CloseHandle (hObject=0x1d4) returned 1 [0239.654] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388e0 [0239.654] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238800 [0239.654] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1043\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1043\\eula.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0239.658] GetFileType (hFile=0x1d4) returned 0x1 [0239.658] GetLastError () returned 0xb7 [0239.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x291ff0 [0239.659] GetLastError () returned 0xb7 [0239.660] CloseHandle (hObject=0x1d4) returned 1 [0239.661] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1043\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1043\\eula.rtf")) returned 0 [0239.661] GetLastError () returned 0x20 [0239.661] GetLastError () returned 0x20 [0239.661] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228c68 [0239.662] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260888 [0239.662] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2606d0 [0239.662] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x2284d0 [0239.662] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e30 [0239.662] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cf0 [0239.662] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x2388f0 [0239.662] GetLastError () returned 0x20 [0239.662] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238f68 [0239.663] GetLastError () returned 0x20 [0239.663] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238da8 [0239.663] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b07f8 [0239.663] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260748 [0239.663] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285e00 [0239.663] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238810 [0239.663] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608b0 [0239.664] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f6b0 [0239.664] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238960 [0239.664] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2607e8 [0239.664] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f650 [0239.664] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2609a0 [0239.664] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2852a8 [0239.664] GetLastError () returned 0x20 [0239.664] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238820 [0239.664] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238900 [0239.665] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238910 [0239.665] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238900 | out: hHeap=0x1f0000) returned 1 [0239.665] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388c0 [0239.665] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238910 | out: hHeap=0x1f0000) returned 1 [0239.665] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238820 | out: hHeap=0x1f0000) returned 1 [0239.665] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238820 [0239.665] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f860 [0239.665] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238820 | out: hHeap=0x1f0000) returned 1 [0239.665] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f878 [0239.665] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f860 | out: hHeap=0x1f0000) returned 1 [0239.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388c0 | out: hHeap=0x1f0000) returned 1 [0239.666] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f890 [0239.666] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f8c0 [0239.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f890 | out: hHeap=0x1f0000) returned 1 [0239.666] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f7b8 [0239.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f8c0 | out: hHeap=0x1f0000) returned 1 [0239.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f878 | out: hHeap=0x1f0000) returned 1 [0239.666] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f710 [0239.666] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204ef0 [0239.667] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f710 | out: hHeap=0x1f0000) returned 1 [0239.667] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204dd0 [0239.667] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ef0 | out: hHeap=0x1f0000) returned 1 [0239.667] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f7b8 | out: hHeap=0x1f0000) returned 1 [0239.667] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e70 [0239.667] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2608d8 [0239.667] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e70 | out: hHeap=0x1f0000) returned 1 [0239.667] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204f70 [0239.667] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0239.668] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204dd0 | out: hHeap=0x1f0000) returned 1 [0239.668] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204c90 [0239.668] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x2068c8 [0239.668] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c90 | out: hHeap=0x1f0000) returned 1 [0239.668] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260810 [0239.668] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2068c8 | out: hHeap=0x1f0000) returned 1 [0239.668] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f70 | out: hHeap=0x1f0000) returned 1 [0239.668] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238820 [0239.668] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f788 [0239.669] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238820 | out: hHeap=0x1f0000) returned 1 [0239.669] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f6c8 [0239.669] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f788 | out: hHeap=0x1f0000) returned 1 [0239.669] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204ef0 [0239.669] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f6c8 | out: hHeap=0x1f0000) returned 1 [0239.669] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206658 [0239.669] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ef0 | out: hHeap=0x1f0000) returned 1 [0239.669] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206658 | out: hHeap=0x1f0000) returned 1 [0239.669] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0239.669] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0239.669] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0239.670] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285e00 | out: hHeap=0x1f0000) returned 1 [0239.670] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0239.670] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239048 [0239.670] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0239.670] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x213708) returned 1 [0239.671] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x260608 | out: pbBuffer=0x260608) returned 1 [0239.671] CryptReleaseContext (hProv=0x213708, dwFlags=0x0) returned 1 [0239.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0239.672] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2605b8 [0239.672] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260748 [0239.672] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238ef8 [0239.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0239.672] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0239.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ef8 | out: hHeap=0x1f0000) returned 1 [0239.673] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8480 [0239.673] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f770 [0239.673] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x2b08c8 [0239.673] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260950 [0239.673] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2853b0 [0239.673] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d30 [0239.673] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b01e0 [0239.673] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260928 [0239.673] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2854b8 [0239.674] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238820 [0239.674] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0239.674] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f860 [0239.674] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238940 [0239.674] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0239.674] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f7e8 [0239.674] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f7e8 | out: hHeap=0x1f0000) returned 1 [0239.674] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0239.674] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238940 | out: hHeap=0x1f0000) returned 1 [0239.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f860 | out: hHeap=0x1f0000) returned 1 [0239.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0239.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238820 | out: hHeap=0x1f0000) returned 1 [0239.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2854b8 | out: hHeap=0x1f0000) returned 1 [0239.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0239.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b01e0 | out: hHeap=0x1f0000) returned 1 [0239.675] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239208 [0239.675] GetLastError () returned 0x0 [0239.676] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238d38 [0239.676] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0239.676] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0239.676] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0239.676] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0239.676] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0239.676] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0239.677] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x24e680 [0239.677] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2857d0 [0239.677] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0239.677] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0239.677] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0239.677] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0239.678] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2854b8 [0239.678] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0239.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0239.678] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fc18 [0239.678] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x26c1b8 [0239.678] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2adfc8 [0239.678] QueryPerformanceCounter (in: lpPerformanceCount=0x173dee0 | out: lpPerformanceCount=0x173dee0*=39704723838) returned 1 [0239.679] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173df20 | out: lpSystemTimeAsFileTime=0x173df20) [0239.679] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238820 [0239.679] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0239.679] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204dd0 [0239.679] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204dd0 | out: hHeap=0x1f0000) returned 1 [0239.679] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0239.679] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0239.679] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c30 [0239.680] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c30 | out: hHeap=0x1f0000) returned 1 [0239.680] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0239.680] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238820 | out: hHeap=0x1f0000) returned 1 [0239.680] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0239.680] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x2392b0 [0239.680] GetLastError () returned 0x0 [0239.681] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0239.681] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0239.681] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0239.681] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2608d8 [0239.681] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260978 [0239.681] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0239.681] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0239.681] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260888 [0239.682] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0239.682] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x222ee8 [0239.682] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0239.682] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0239.682] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0239.682] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x20c2c0 [0239.682] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0239.682] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260810 [0239.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260608 [0239.683] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0239.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0239.683] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0239.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0239.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x234b90 [0239.683] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b90 | out: hHeap=0x1f0000) returned 1 [0239.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0239.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20c2c0 | out: hHeap=0x1f0000) returned 1 [0239.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f788 [0239.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228440 [0239.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2604c8 [0239.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260658 [0239.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2604f0 [0239.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260838 [0239.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260658 | out: hHeap=0x1f0000) returned 1 [0239.685] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604c8 | out: hHeap=0x1f0000) returned 1 [0239.685] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0239.685] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260810 [0239.685] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2604c8 [0239.685] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0239.685] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0239.685] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604c8 | out: hHeap=0x1f0000) returned 1 [0239.685] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206808 [0239.685] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x2aa960 [0239.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aa960 | out: hHeap=0x1f0000) returned 1 [0239.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206808 | out: hHeap=0x1f0000) returned 1 [0239.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0239.686] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0239.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0239.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0239.686] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204dd0 [0239.686] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0239.686] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0239.687] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0239.687] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab580 [0239.687] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0239.687] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260838 | out: hHeap=0x1f0000) returned 1 [0239.687] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0239.687] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228440 | out: hHeap=0x1f0000) returned 1 [0239.687] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0239.687] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204dd0 | out: hHeap=0x1f0000) returned 1 [0239.687] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f788 | out: hHeap=0x1f0000) returned 1 [0239.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0239.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab6a8 [0239.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab6a8 | out: hHeap=0x1f0000) returned 1 [0239.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ee8 | out: hHeap=0x1f0000) returned 1 [0239.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0239.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0239.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0239.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0239.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0239.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0239.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0239.956] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2acdc8 [0239.956] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abec0 [0239.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2acdc8 | out: hHeap=0x1f0000) returned 1 [0239.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abec0 | out: hHeap=0x1f0000) returned 1 [0239.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab580 | out: hHeap=0x1f0000) returned 1 [0239.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0239.957] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2854b8 | out: hHeap=0x1f0000) returned 1 [0239.957] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24e680 | out: hHeap=0x1f0000) returned 1 [0239.957] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x2af490 [0239.957] GetLastError () returned 0x0 [0239.958] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238840 [0239.958] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238910 [0240.023] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1043\\eula.rtf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1043\\eula.rtf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e290, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0240.023] GetFileType (hFile=0x224) returned 0x1 [0240.023] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x287fa0 [0240.024] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e218 | out: lpNewFilePointer=0x0) returned 1 [0240.024] GetLastError () returned 0xb7 [0240.024] CloseHandle (hObject=0x224) returned 1 [0240.024] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238910 | out: hHeap=0x1f0000) returned 1 [0240.024] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238840 | out: hHeap=0x1f0000) returned 1 [0240.025] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2857d0 | out: hHeap=0x1f0000) returned 1 [0240.025] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2853b0 | out: hHeap=0x1f0000) returned 1 [0240.025] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0240.025] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d30 | out: hHeap=0x1f0000) returned 1 [0240.025] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b08c8 | out: hHeap=0x1f0000) returned 1 [0240.025] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f770 | out: hHeap=0x1f0000) returned 1 [0240.025] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8480 | out: hHeap=0x1f0000) returned 1 [0240.025] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2af490 | out: hHeap=0x1f0000) returned 1 [0240.025] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0240.025] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0240.025] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x26c1b8 | out: hHeap=0x1f0000) returned 1 [0240.025] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2adfc8 | out: hHeap=0x1f0000) returned 1 [0240.025] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239048 | out: hHeap=0x1f0000) returned 1 [0240.025] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388f0 | out: hHeap=0x1f0000) returned 1 [0240.025] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f650 | out: hHeap=0x1f0000) returned 1 [0240.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607e8 | out: hHeap=0x1f0000) returned 1 [0240.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238960 | out: hHeap=0x1f0000) returned 1 [0240.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f6b0 | out: hHeap=0x1f0000) returned 1 [0240.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608b0 | out: hHeap=0x1f0000) returned 1 [0240.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238810 | out: hHeap=0x1f0000) returned 1 [0240.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2852a8 | out: hHeap=0x1f0000) returned 1 [0240.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0240.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b07f8 | out: hHeap=0x1f0000) returned 1 [0240.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2284d0 | out: hHeap=0x1f0000) returned 1 [0240.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0240.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0240.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228c68 | out: hHeap=0x1f0000) returned 1 [0240.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238800 | out: hHeap=0x1f0000) returned 1 [0240.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388e0 | out: hHeap=0x1f0000) returned 1 [0240.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x288fa8 | out: hHeap=0x1f0000) returned 1 [0240.026] CloseHandle (hObject=0x1b0) returned 1 [0240.027] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388a0 | out: hHeap=0x1f0000) returned 1 [0240.027] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238890 | out: hHeap=0x1f0000) returned 1 [0240.027] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236ea0 | out: hHeap=0x1f0000) returned 1 [0240.027] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x249db0 | out: hHeap=0x1f0000) returned 1 [0240.027] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f8a8 | out: hHeap=0x1f0000) returned 1 [0240.027] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d90 | out: hHeap=0x1f0000) returned 1 [0240.027] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28efd8 | out: hHeap=0x1f0000) returned 1 [0240.027] CloseHandle (hObject=0x200) returned 1 [0240.028] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238830 | out: hHeap=0x1f0000) returned 1 [0240.028] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389c0 | out: hHeap=0x1f0000) returned 1 [0240.028] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad7a8 | out: hHeap=0x1f0000) returned 1 [0240.028] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204db0 | out: hHeap=0x1f0000) returned 1 [0240.028] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20d888 | out: hHeap=0x1f0000) returned 1 [0240.028] CloseHandle (hObject=0x1a4) returned 1 [0240.028] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388d0 | out: hHeap=0x1f0000) returned 1 [0240.028] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387f0 | out: hHeap=0x1f0000) returned 1 [0240.028] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad6f0 | out: hHeap=0x1f0000) returned 1 [0240.028] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238990 | out: hHeap=0x1f0000) returned 1 [0240.029] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388b0 | out: hHeap=0x1f0000) returned 1 [0240.029] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387e0 | out: hHeap=0x1f0000) returned 1 [0240.029] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389b0 | out: hHeap=0x1f0000) returned 1 [0240.029] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21b938 | out: hHeap=0x1f0000) returned 1 [0240.029] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x267598 | out: hHeap=0x1f0000) returned 1 [0240.029] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae1f8 | out: hHeap=0x1f0000) returned 1 [0240.029] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206868 | out: hHeap=0x1f0000) returned 1 [0240.029] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f9b0 | out: hHeap=0x1f0000) returned 1 [0240.029] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f938 | out: hHeap=0x1f0000) returned 1 [0240.029] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233568 | out: hHeap=0x1f0000) returned 1 [0240.029] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x264f88 | out: hHeap=0x1f0000) returned 1 [0240.029] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae0e0 | out: hHeap=0x1f0000) returned 1 [0240.029] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238cc8 | out: hHeap=0x1f0000) returned 1 [0240.029] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a81c0 | out: hHeap=0x1f0000) returned 1 [0240.029] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261cc0 | out: hHeap=0x1f0000) returned 1 [0240.029] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228758 | out: hHeap=0x1f0000) returned 1 [0240.029] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0240.029] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1043\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1043\\eula.rtf")) returned 1 [0240.032] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13712, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0240.032] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239048 [0240.032] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228bd8 [0240.032] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0588 [0240.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228bd8 | out: hHeap=0x1f0000) returned 1 [0240.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0248 | out: hHeap=0x1f0000) returned 1 [0240.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239048 | out: hHeap=0x1f0000) returned 1 [0240.033] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1043\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1043\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1a4 [0240.033] GetFileType (hFile=0x1a4) returned 0x1 [0240.033] CloseHandle (hObject=0x1a4) returned 1 [0240.034] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0ad0 [0240.034] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1043\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1043\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x173eb6c | out: lpFileInformation=0x173eb6c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13712)) returned 1 [0240.034] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0ad0 | out: hHeap=0x1f0000) returned 1 [0240.034] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b01e0 [0240.034] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1043\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1043\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x173eb7c | out: lpFileInformation=0x173eb7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13712)) returned 1 [0240.034] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b01e0 | out: hHeap=0x1f0000) returned 1 [0240.034] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0040 [0240.034] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0040 | out: hHeap=0x1f0000) returned 1 [0240.034] GetLastError () returned 0x0 [0240.034] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0240.035] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228c68 [0240.035] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x263178 [0240.035] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0ad0 [0240.035] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c20 [0240.035] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0240.035] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x2131b8) returned 1 [0240.036] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x260568 | out: pbBuffer=0x260568) returned 1 [0240.036] CryptReleaseContext (hProv=0x2131b8, dwFlags=0x0) returned 1 [0240.036] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0240.036] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x26aeb0 [0240.036] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2afa08 [0240.036] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=39740524668) returned 1 [0240.036] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0240.037] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=39740554846) returned 1 [0240.037] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0240.037] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238e88 [0240.037] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x267598 [0240.037] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2af378 [0240.037] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x233978 [0240.037] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f908 [0240.037] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206658 [0240.037] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f980 [0240.037] GetLastError () returned 0x0 [0240.037] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220490 [0240.038] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad078 [0240.038] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220490 | out: hHeap=0x1f0000) returned 1 [0240.038] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x106) returned 0x2af148 [0240.038] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad078 | out: hHeap=0x1f0000) returned 1 [0240.038] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387f0 [0240.038] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388d0 [0240.038] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1043\\LocalizedData.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1043\\localizeddata.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e230, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1a4 [0240.039] GetFileType (hFile=0x1a4) returned 0x1 [0240.039] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238800 [0240.039] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388e0 [0240.040] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1043\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1043\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0240.040] GetFileType (hFile=0x200) returned 0x1 [0240.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204db0 [0240.041] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bb0 [0240.041] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad918 [0240.041] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388f0 [0240.041] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389c0 [0240.041] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1043\\LocalizedData.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1043\\localizeddata.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0240.042] GetFileType (hFile=0x1b0) returned 0x1 [0240.042] GetLastError () returned 0xb7 [0240.042] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe4) returned 0x20d888 [0240.042] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c50 [0240.042] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bf0 [0240.042] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f70 [0240.042] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad2a0 [0240.042] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238910 [0240.043] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238960 [0240.043] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1043\\LocalizedData.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1043\\localizeddata.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0240.043] GetFileType (hFile=0x224) returned 0x1 [0240.044] GetLastError () returned 0xb7 [0240.044] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e30 [0240.044] GetLastError () returned 0xb7 [0240.044] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0240.044] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c10 [0240.044] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cf0 [0240.044] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb8) returned 0x237320 [0240.044] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387e0 [0240.044] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389b0 [0240.045] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1043\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1043\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1a4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1bc [0240.045] GetFileType (hFile=0x1bc) returned 0x1 [0240.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x288fa8 [0240.045] ReadFile (in: hFile=0x1bc, lpBuffer=0x288fa8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e100, lpOverlapped=0x0 | out: lpBuffer=0x288fa8*, lpNumberOfBytesRead=0x173e100*=0x1000, lpOverlapped=0x0) returned 1 [0240.050] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24d218 [0240.050] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x287fa0 [0240.050] GetLastError () returned 0x0 [0240.199] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f938 [0240.199] GetLastError () returned 0x0 [0240.200] CloseHandle (hObject=0x1a4) returned 1 [0240.201] CloseHandle (hObject=0x200) returned 1 [0240.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238990 [0240.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238810 [0240.202] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1043\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1043\\localizeddata.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0240.206] GetFileType (hFile=0x200) returned 0x1 [0240.206] GetLastError () returned 0xb7 [0240.206] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28ffe0 [0240.207] GetLastError () returned 0xb7 [0240.209] CloseHandle (hObject=0x200) returned 1 [0240.209] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1043\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1043\\localizeddata.xml")) returned 0 [0240.209] GetLastError () returned 0x20 [0240.209] GetLastError () returned 0x20 [0240.210] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228758 [0240.210] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260568 [0240.210] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260838 [0240.211] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x2287a0 [0240.211] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d90 [0240.211] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204dd0 [0240.211] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x238890 [0240.211] GetLastError () returned 0x20 [0240.212] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239048 [0240.212] GetLastError () returned 0x20 [0240.212] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238e88 [0240.212] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0c08 [0240.212] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260590 [0240.212] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285cf8 [0240.213] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388a0 [0240.213] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260888 [0240.213] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f9b0 [0240.213] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238830 [0240.213] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609a0 [0240.213] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f998 [0240.213] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260950 [0240.213] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2858d8 [0240.213] GetLastError () returned 0x20 [0240.214] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238840 [0240.214] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x2388b0 [0240.214] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a20 [0240.214] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388b0 | out: hHeap=0x1f0000) returned 1 [0240.214] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388b0 [0240.214] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a20 | out: hHeap=0x1f0000) returned 1 [0240.214] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238840 | out: hHeap=0x1f0000) returned 1 [0240.214] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238840 [0240.214] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f950 [0240.215] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238840 | out: hHeap=0x1f0000) returned 1 [0240.215] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f968 [0240.215] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f950 | out: hHeap=0x1f0000) returned 1 [0240.215] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388b0 | out: hHeap=0x1f0000) returned 1 [0240.215] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f950 [0240.215] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f710 [0240.215] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f950 | out: hHeap=0x1f0000) returned 1 [0240.215] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f950 [0240.215] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f710 | out: hHeap=0x1f0000) returned 1 [0240.215] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f968 | out: hHeap=0x1f0000) returned 1 [0240.215] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f968 [0240.215] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204e50 [0240.215] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f968 | out: hHeap=0x1f0000) returned 1 [0240.216] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e70 [0240.216] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e50 | out: hHeap=0x1f0000) returned 1 [0240.216] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f950 | out: hHeap=0x1f0000) returned 1 [0240.216] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f70 [0240.216] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2606d0 [0240.216] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f70 | out: hHeap=0x1f0000) returned 1 [0240.216] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204e90 [0240.216] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0240.216] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e70 | out: hHeap=0x1f0000) returned 1 [0240.216] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204dd0 [0240.216] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206688 [0240.217] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204dd0 | out: hHeap=0x1f0000) returned 1 [0240.217] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260748 [0240.217] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206688 | out: hHeap=0x1f0000) returned 1 [0240.217] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e90 | out: hHeap=0x1f0000) returned 1 [0240.217] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388b0 [0240.217] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f950 [0240.217] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388b0 | out: hHeap=0x1f0000) returned 1 [0240.217] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f968 [0240.217] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f950 | out: hHeap=0x1f0000) returned 1 [0240.217] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204e30 [0240.217] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f968 | out: hHeap=0x1f0000) returned 1 [0240.218] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x2068c8 [0240.218] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e30 | out: hHeap=0x1f0000) returned 1 [0240.218] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2068c8 | out: hHeap=0x1f0000) returned 1 [0240.218] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0240.218] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0240.218] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab8f8 [0240.219] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285cf8 | out: hHeap=0x1f0000) returned 1 [0240.219] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0240.219] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238e88 [0240.219] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0240.219] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x213350) returned 1 [0240.221] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x260568 | out: pbBuffer=0x260568) returned 1 [0240.221] CryptReleaseContext (hProv=0x213350, dwFlags=0x0) returned 1 [0240.221] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0240.221] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260748 [0240.221] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260590 [0240.221] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238ef8 [0240.221] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0240.221] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abfe8 [0240.221] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ef8 | out: hHeap=0x1f0000) returned 1 [0240.221] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8ed0 [0240.221] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f950 [0240.221] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x2b03e8 [0240.222] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2606d0 [0240.222] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2852a8 [0240.222] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f10 [0240.222] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b02b0 [0240.222] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260568 [0240.222] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2851a0 [0240.222] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238840 [0240.222] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0240.222] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f968 [0240.222] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388b0 [0240.222] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605b8 [0240.222] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f6b0 [0240.222] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f6b0 | out: hHeap=0x1f0000) returned 1 [0240.223] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0240.223] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388b0 | out: hHeap=0x1f0000) returned 1 [0240.223] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f968 | out: hHeap=0x1f0000) returned 1 [0240.223] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0240.223] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238840 | out: hHeap=0x1f0000) returned 1 [0240.223] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2851a0 | out: hHeap=0x1f0000) returned 1 [0240.223] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0240.223] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b02b0 | out: hHeap=0x1f0000) returned 1 [0240.223] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238ec0 [0240.223] GetLastError () returned 0x0 [0240.223] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238f68 [0240.224] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2acb78 [0240.224] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2acb78 | out: hHeap=0x1f0000) returned 1 [0240.224] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab458 [0240.224] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac238 [0240.224] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab458 | out: hHeap=0x1f0000) returned 1 [0240.224] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac238 | out: hHeap=0x1f0000) returned 1 [0240.224] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x24e9c0 [0240.224] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285ae8 [0240.224] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abc70 [0240.224] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abc70 | out: hHeap=0x1f0000) returned 1 [0240.224] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abb48 [0240.224] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abb48 | out: hHeap=0x1f0000) returned 1 [0240.225] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285bf0 [0240.225] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abec0 [0240.225] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abec0 | out: hHeap=0x1f0000) returned 1 [0240.225] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f510 [0240.225] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x2688a0 [0240.225] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2aebd0 [0240.225] QueryPerformanceCounter (in: lpPerformanceCount=0x173dee0 | out: lpPerformanceCount=0x173dee0*=39759401692) returned 1 [0240.225] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173df20 | out: lpSystemTimeAsFileTime=0x173df20) [0240.225] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238840 [0240.226] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0240.226] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c70 [0240.226] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c70 | out: hHeap=0x1f0000) returned 1 [0240.226] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0240.226] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0240.226] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cd0 [0240.226] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cd0 | out: hHeap=0x1f0000) returned 1 [0240.226] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0240.226] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238840 | out: hHeap=0x1f0000) returned 1 [0240.226] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0240.226] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238d00 [0240.226] GetLastError () returned 0x0 [0240.227] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abb48 [0240.227] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac928 [0240.227] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2acdc8 [0240.227] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2605b8 [0240.227] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260568 [0240.227] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac800 [0240.227] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abc70 [0240.227] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260748 [0240.227] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abd98 [0240.227] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x222ee8 [0240.227] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab7d0 [0240.228] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0240.228] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab7d0 | out: hHeap=0x1f0000) returned 1 [0240.228] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0240.228] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0240.228] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2608d8 [0240.228] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260770 [0240.228] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0240.228] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab0e0 [0240.228] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0240.228] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0240.228] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x234b90 [0240.229] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b90 | out: hHeap=0x1f0000) returned 1 [0240.229] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0240.229] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0240.229] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f968 [0240.229] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228710 [0240.229] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260770 [0240.229] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2608d8 [0240.229] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2607e8 [0240.229] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2609f0 [0240.230] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0240.230] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0240.230] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0240.230] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260770 [0240.230] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2608d8 [0240.230] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0240.230] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab208 [0240.230] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0240.231] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206808 [0240.231] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x2aa0d0 [0240.231] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aa0d0 | out: hHeap=0x1f0000) returned 1 [0240.231] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206808 | out: hHeap=0x1f0000) returned 1 [0240.231] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0240.231] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abec0 [0240.231] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab208 | out: hHeap=0x1f0000) returned 1 [0240.231] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0240.231] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204cf0 [0240.231] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac5b0 [0240.232] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab458 [0240.232] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0240.232] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab7d0 [0240.232] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab458 | out: hHeap=0x1f0000) returned 1 [0240.232] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609f0 | out: hHeap=0x1f0000) returned 1 [0240.232] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607e8 | out: hHeap=0x1f0000) returned 1 [0240.232] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228710 | out: hHeap=0x1f0000) returned 1 [0240.232] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac5b0 | out: hHeap=0x1f0000) returned 1 [0240.233] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cf0 | out: hHeap=0x1f0000) returned 1 [0240.233] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f968 | out: hHeap=0x1f0000) returned 1 [0240.233] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab0e0 | out: hHeap=0x1f0000) returned 1 [0240.233] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab6a8 [0240.233] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab6a8 | out: hHeap=0x1f0000) returned 1 [0240.233] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ee8 | out: hHeap=0x1f0000) returned 1 [0240.233] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abd98 | out: hHeap=0x1f0000) returned 1 [0240.233] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abec0 | out: hHeap=0x1f0000) returned 1 [0240.233] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abc70 | out: hHeap=0x1f0000) returned 1 [0240.234] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac800 | out: hHeap=0x1f0000) returned 1 [0240.234] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0240.842] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2acdc8 | out: hHeap=0x1f0000) returned 1 [0240.842] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac928 | out: hHeap=0x1f0000) returned 1 [0240.843] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2acca0 [0240.843] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abd98 [0240.843] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2acca0 | out: hHeap=0x1f0000) returned 1 [0240.843] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abd98 | out: hHeap=0x1f0000) returned 1 [0240.843] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab7d0 | out: hHeap=0x1f0000) returned 1 [0240.843] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abb48 | out: hHeap=0x1f0000) returned 1 [0240.843] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285bf0 | out: hHeap=0x1f0000) returned 1 [0240.843] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24e9c0 | out: hHeap=0x1f0000) returned 1 [0240.844] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x2af490 [0240.844] GetLastError () returned 0x0 [0240.844] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a30 [0240.844] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a80 [0240.845] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1043\\LocalizedData.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1043\\localizeddata.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e290, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0240.845] GetFileType (hFile=0x210) returned 0x1 [0240.846] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x294000 [0240.846] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e218 | out: lpNewFilePointer=0x0) returned 1 [0240.846] GetLastError () returned 0xb7 [0240.846] CloseHandle (hObject=0x210) returned 1 [0240.847] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a80 | out: hHeap=0x1f0000) returned 1 [0240.847] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a30 | out: hHeap=0x1f0000) returned 1 [0240.847] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285ae8 | out: hHeap=0x1f0000) returned 1 [0240.847] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2852a8 | out: hHeap=0x1f0000) returned 1 [0240.847] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0240.847] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f10 | out: hHeap=0x1f0000) returned 1 [0240.847] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b03e8 | out: hHeap=0x1f0000) returned 1 [0240.847] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f950 | out: hHeap=0x1f0000) returned 1 [0240.847] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8ed0 | out: hHeap=0x1f0000) returned 1 [0240.847] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2af490 | out: hHeap=0x1f0000) returned 1 [0240.847] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0240.848] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abfe8 | out: hHeap=0x1f0000) returned 1 [0240.848] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2688a0 | out: hHeap=0x1f0000) returned 1 [0240.848] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aebd0 | out: hHeap=0x1f0000) returned 1 [0240.848] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238e88 | out: hHeap=0x1f0000) returned 1 [0240.848] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238890 | out: hHeap=0x1f0000) returned 1 [0240.848] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f998 | out: hHeap=0x1f0000) returned 1 [0240.848] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0240.848] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238830 | out: hHeap=0x1f0000) returned 1 [0240.848] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f9b0 | out: hHeap=0x1f0000) returned 1 [0240.848] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0240.848] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388a0 | out: hHeap=0x1f0000) returned 1 [0240.848] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2858d8 | out: hHeap=0x1f0000) returned 1 [0240.848] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0240.848] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0c08 | out: hHeap=0x1f0000) returned 1 [0240.849] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2287a0 | out: hHeap=0x1f0000) returned 1 [0240.849] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260838 | out: hHeap=0x1f0000) returned 1 [0240.849] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab8f8 | out: hHeap=0x1f0000) returned 1 [0240.849] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228758 | out: hHeap=0x1f0000) returned 1 [0240.849] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238810 | out: hHeap=0x1f0000) returned 1 [0240.849] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238990 | out: hHeap=0x1f0000) returned 1 [0240.849] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x288fa8 | out: hHeap=0x1f0000) returned 1 [0240.849] CloseHandle (hObject=0x1bc) returned 1 [0240.850] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389b0 | out: hHeap=0x1f0000) returned 1 [0240.850] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387e0 | out: hHeap=0x1f0000) returned 1 [0240.850] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237320 | out: hHeap=0x1f0000) returned 1 [0240.850] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24d218 | out: hHeap=0x1f0000) returned 1 [0240.850] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f938 | out: hHeap=0x1f0000) returned 1 [0240.850] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d70 | out: hHeap=0x1f0000) returned 1 [0240.850] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x287fa0 | out: hHeap=0x1f0000) returned 1 [0240.850] CloseHandle (hObject=0x224) returned 1 [0240.851] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238960 | out: hHeap=0x1f0000) returned 1 [0240.851] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238910 | out: hHeap=0x1f0000) returned 1 [0240.851] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad2a0 | out: hHeap=0x1f0000) returned 1 [0240.851] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c50 | out: hHeap=0x1f0000) returned 1 [0240.851] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20d888 | out: hHeap=0x1f0000) returned 1 [0240.851] CloseHandle (hObject=0x1b0) returned 1 [0240.852] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389c0 | out: hHeap=0x1f0000) returned 1 [0240.852] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388f0 | out: hHeap=0x1f0000) returned 1 [0240.852] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad918 | out: hHeap=0x1f0000) returned 1 [0240.852] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388e0 | out: hHeap=0x1f0000) returned 1 [0240.852] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238800 | out: hHeap=0x1f0000) returned 1 [0240.852] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388d0 | out: hHeap=0x1f0000) returned 1 [0240.852] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387f0 | out: hHeap=0x1f0000) returned 1 [0240.852] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2af148 | out: hHeap=0x1f0000) returned 1 [0240.852] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x267598 | out: hHeap=0x1f0000) returned 1 [0240.852] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2af378 | out: hHeap=0x1f0000) returned 1 [0240.852] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206658 | out: hHeap=0x1f0000) returned 1 [0240.852] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f980 | out: hHeap=0x1f0000) returned 1 [0240.852] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f908 | out: hHeap=0x1f0000) returned 1 [0240.852] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233978 | out: hHeap=0x1f0000) returned 1 [0240.852] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x26aeb0 | out: hHeap=0x1f0000) returned 1 [0240.852] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2afa08 | out: hHeap=0x1f0000) returned 1 [0240.853] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c20 | out: hHeap=0x1f0000) returned 1 [0240.853] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0ad0 | out: hHeap=0x1f0000) returned 1 [0240.853] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263178 | out: hHeap=0x1f0000) returned 1 [0240.853] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228c68 | out: hHeap=0x1f0000) returned 1 [0240.853] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0240.853] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1043\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1043\\localizeddata.xml")) returned 1 [0240.855] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0240.855] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238e88 [0240.855] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2289e0 [0240.855] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0ad0 [0240.855] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2289e0 | out: hHeap=0x1f0000) returned 1 [0240.855] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0588 | out: hHeap=0x1f0000) returned 1 [0240.855] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238e88 | out: hHeap=0x1f0000) returned 1 [0240.856] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1043\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1043\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0240.856] GetFileType (hFile=0x1b0) returned 0x1 [0240.856] CloseHandle (hObject=0x1b0) returned 1 [0240.857] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0380 [0240.857] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1043\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1043\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x173eb6c | out: lpFileInformation=0x173eb6c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58)) returned 1 [0240.857] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0380 | out: hHeap=0x1f0000) returned 1 [0240.857] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0248 [0240.857] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1043\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1043\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x173eb7c | out: lpFileInformation=0x173eb7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58)) returned 1 [0240.857] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0248 | out: hHeap=0x1f0000) returned 1 [0240.857] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0ba0 [0240.857] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0ba0 | out: hHeap=0x1f0000) returned 1 [0240.858] GetLastError () returned 0x0 [0240.858] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260518 [0240.858] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228c68 [0240.858] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262188 [0240.858] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b08c8 [0240.858] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239160 [0240.858] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260540 [0240.858] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x212d78) returned 1 [0240.860] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x260540 | out: pbBuffer=0x260540) returned 1 [0240.860] CryptReleaseContext (hProv=0x212d78, dwFlags=0x0) returned 1 [0240.860] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0240.860] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x267598 [0240.860] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2af378 [0240.860] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=39822905358) returned 1 [0240.860] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0240.860] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=39822926206) returned 1 [0240.860] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0240.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239198 [0240.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x2688a0 [0240.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2ae9a0 [0240.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x233568 [0240.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f908 [0240.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206658 [0240.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f938 [0240.861] GetLastError () returned 0x0 [0240.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd88 [0240.862] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2add68 [0240.862] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd88 | out: hHeap=0x1f0000) returned 1 [0240.862] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x106) returned 0x2ae1f8 [0240.862] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2add68 | out: hHeap=0x1f0000) returned 1 [0240.862] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238910 [0240.862] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387f0 [0240.863] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1043\\SetupResources.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1043\\setupresources.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e230, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0240.864] GetFileType (hFile=0x1b0) returned 0x1 [0240.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388d0 [0240.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238800 [0240.865] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1043\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1043\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0240.865] GetFileType (hFile=0x224) returned 0x1 [0240.866] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bb0 [0240.866] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204db0 [0240.866] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2acfc0 [0240.866] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388f0 [0240.866] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388e0 [0240.867] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1043\\SetupResources.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1043\\setupresources.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1bc [0240.867] GetFileType (hFile=0x1bc) returned 0x1 [0240.868] GetLastError () returned 0xb7 [0240.868] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe4) returned 0x20d888 [0240.868] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204b90 [0240.868] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c50 [0240.868] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bf0 [0240.868] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad078 [0240.868] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238890 [0240.869] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238960 [0240.869] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1043\\SetupResources.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1043\\setupresources.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0240.870] GetFileType (hFile=0x210) returned 0x1 [0240.870] GetLastError () returned 0xb7 [0240.870] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204dd0 [0240.870] GetLastError () returned 0xb7 [0240.870] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e30 [0240.870] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0240.870] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c10 [0240.870] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb8) returned 0x237260 [0240.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388a0 [0240.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389c0 [0240.871] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1043\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1043\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1a4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0240.872] GetFileType (hFile=0x23c) returned 0x1 [0240.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x287fa0 [0240.872] ReadFile (in: hFile=0x23c, lpBuffer=0x287fa0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e100, lpOverlapped=0x0 | out: lpBuffer=0x287fa0*, lpNumberOfBytesRead=0x173e100*=0x1000, lpOverlapped=0x0) returned 1 [0241.127] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24a5c0 [0241.128] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x295008 [0241.128] GetLastError () returned 0x0 [0241.165] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f770 [0241.165] GetLastError () returned 0x0 [0241.167] CloseHandle (hObject=0x1b0) returned 1 [0241.167] CloseHandle (hObject=0x224) returned 1 [0241.168] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ba0 [0241.168] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238af0 [0241.169] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1043\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1043\\setupresources.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0241.171] GetFileType (hFile=0x224) returned 0x1 [0241.172] GetLastError () returned 0xb7 [0241.172] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28dfd0 [0241.172] GetLastError () returned 0xb7 [0241.174] CloseHandle (hObject=0x224) returned 1 [0241.175] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1043\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1043\\setupresources.dll")) returned 0 [0241.175] GetLastError () returned 0x20 [0241.175] GetLastError () returned 0x20 [0241.175] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228b00 [0241.175] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2606d0 [0241.175] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260658 [0241.175] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x228b48 [0241.176] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cf0 [0241.176] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0241.176] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x238ac0 [0241.176] GetLastError () returned 0x20 [0241.176] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238da8 [0241.176] GetLastError () returned 0x20 [0241.176] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239010 [0241.176] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0588 [0241.176] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260770 [0241.177] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x284f90 [0241.177] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b30 [0241.177] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0241.177] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f848 [0241.177] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ad0 [0241.177] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260888 [0241.177] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f8f0 [0241.177] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2608d8 [0241.177] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285e00 [0241.177] GetLastError () returned 0x20 [0241.177] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238ae0 [0241.178] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238b00 [0241.178] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ab0 [0241.178] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b00 | out: hHeap=0x1f0000) returned 1 [0241.178] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a30 [0241.178] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ab0 | out: hHeap=0x1f0000) returned 1 [0241.178] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ae0 | out: hHeap=0x1f0000) returned 1 [0241.178] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b50 [0241.178] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f860 [0241.178] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b50 | out: hHeap=0x1f0000) returned 1 [0241.178] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f878 [0241.178] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f860 | out: hHeap=0x1f0000) returned 1 [0241.178] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a30 | out: hHeap=0x1f0000) returned 1 [0241.178] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f890 [0241.179] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f7b8 [0241.179] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f890 | out: hHeap=0x1f0000) returned 1 [0241.179] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f710 [0241.179] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f7b8 | out: hHeap=0x1f0000) returned 1 [0241.179] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f878 | out: hHeap=0x1f0000) returned 1 [0241.179] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f878 [0241.179] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204db0 [0241.179] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f878 | out: hHeap=0x1f0000) returned 1 [0241.179] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e50 [0241.180] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204db0 | out: hHeap=0x1f0000) returned 1 [0241.180] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f710 | out: hHeap=0x1f0000) returned 1 [0241.180] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e70 [0241.180] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260928 [0241.180] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e70 | out: hHeap=0x1f0000) returned 1 [0241.180] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204c70 [0241.180] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0241.180] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e50 | out: hHeap=0x1f0000) returned 1 [0241.181] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204e70 [0241.181] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x2067d8 [0241.181] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e70 | out: hHeap=0x1f0000) returned 1 [0241.181] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260928 [0241.181] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2067d8 | out: hHeap=0x1f0000) returned 1 [0241.181] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c70 | out: hHeap=0x1f0000) returned 1 [0241.181] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ae0 [0241.181] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f6c8 [0241.181] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ae0 | out: hHeap=0x1f0000) returned 1 [0241.182] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f860 [0241.182] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f6c8 | out: hHeap=0x1f0000) returned 1 [0241.182] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204bd0 [0241.182] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f860 | out: hHeap=0x1f0000) returned 1 [0241.182] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x2067d8 [0241.182] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bd0 | out: hHeap=0x1f0000) returned 1 [0241.182] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2067d8 | out: hHeap=0x1f0000) returned 1 [0241.182] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0241.183] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0241.183] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0241.183] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x284f90 | out: hHeap=0x1f0000) returned 1 [0241.183] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0241.183] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238da8 [0241.183] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0241.183] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x212e88) returned 1 [0241.185] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2606d0 | out: pbBuffer=0x2606d0) returned 1 [0241.185] CryptReleaseContext (hProv=0x212e88, dwFlags=0x0) returned 1 [0241.185] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0241.185] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260770 [0241.185] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260928 [0241.185] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238d00 [0241.185] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0241.185] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0241.186] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238d00 | out: hHeap=0x1f0000) returned 1 [0241.186] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8d18 [0241.186] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f7d0 [0241.186] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x2b02b0 [0241.186] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2606d0 [0241.186] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2855c0 [0241.186] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bf0 [0241.186] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0318 [0241.187] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260770 [0241.187] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285bf0 [0241.187] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b80 [0241.188] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0241.188] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f818 [0241.188] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ae0 [0241.188] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ba8 [0241.188] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f8a8 [0241.188] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f8a8 | out: hHeap=0x1f0000) returned 1 [0241.188] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ba8 | out: hHeap=0x1f0000) returned 1 [0241.188] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ae0 | out: hHeap=0x1f0000) returned 1 [0241.188] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f818 | out: hHeap=0x1f0000) returned 1 [0241.188] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0241.188] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b80 | out: hHeap=0x1f0000) returned 1 [0241.189] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285bf0 | out: hHeap=0x1f0000) returned 1 [0241.189] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0241.189] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0318 | out: hHeap=0x1f0000) returned 1 [0241.189] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238d38 [0241.189] GetLastError () returned 0x0 [0241.189] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238ec0 [0241.189] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0241.189] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0241.190] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0241.190] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0241.190] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0241.190] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0241.190] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x24ea00 [0241.190] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2856c8 [0241.190] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0241.190] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0241.190] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0241.191] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0241.191] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2854b8 [0241.191] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0241.191] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0241.191] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fb50 [0241.191] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x264f88 [0241.191] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2ae428 [0241.191] QueryPerformanceCounter (in: lpPerformanceCount=0x173dee0 | out: lpPerformanceCount=0x173dee0*=39856035916) returned 1 [0241.192] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173df20 | out: lpSystemTimeAsFileTime=0x173df20) [0241.192] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238a90 [0241.192] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260770 [0241.192] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f10 [0241.192] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f10 | out: hHeap=0x1f0000) returned 1 [0241.192] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0241.192] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260770 [0241.193] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bb0 [0241.193] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bb0 | out: hHeap=0x1f0000) returned 1 [0241.193] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0241.193] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a90 | out: hHeap=0x1f0000) returned 1 [0241.193] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0241.193] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238e18 [0241.193] GetLastError () returned 0x0 [0241.193] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0241.194] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0241.194] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0241.194] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260770 [0241.194] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260950 [0241.194] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0241.194] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0241.194] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260b30 [0241.194] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0241.194] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x222ee8 [0241.195] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0241.195] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x22b018 [0241.195] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0241.195] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x25ffe8 [0241.195] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b018 | out: hHeap=0x1f0000) returned 1 [0241.195] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260b58 [0241.195] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260c20 [0241.195] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b58 | out: hHeap=0x1f0000) returned 1 [0241.195] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0241.195] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c20 | out: hHeap=0x1f0000) returned 1 [0241.195] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x22b018 [0241.196] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x234b90 [0241.196] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b90 | out: hHeap=0x1f0000) returned 1 [0241.196] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b018 | out: hHeap=0x1f0000) returned 1 [0241.196] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25ffe8 | out: hHeap=0x1f0000) returned 1 [0241.196] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f608 [0241.196] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228440 [0241.196] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260b58 [0241.196] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2609f0 [0241.196] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260bf8 [0241.196] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260ba8 [0241.196] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609f0 | out: hHeap=0x1f0000) returned 1 [0241.197] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b58 | out: hHeap=0x1f0000) returned 1 [0241.197] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x22b018 [0241.197] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2609f0 [0241.197] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260a40 [0241.197] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609f0 | out: hHeap=0x1f0000) returned 1 [0241.197] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0241.197] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0241.197] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2067d8 [0241.197] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x2a8fb0 [0241.197] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8fb0 | out: hHeap=0x1f0000) returned 1 [0241.197] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2067d8 | out: hHeap=0x1f0000) returned 1 [0241.198] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b30 | out: hHeap=0x1f0000) returned 1 [0241.198] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab458 [0241.198] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0241.198] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b018 | out: hHeap=0x1f0000) returned 1 [0241.198] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204d70 [0241.198] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac238 [0241.198] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab8f8 [0241.198] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0241.198] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abc70 [0241.198] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab8f8 | out: hHeap=0x1f0000) returned 1 [0241.199] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ba8 | out: hHeap=0x1f0000) returned 1 [0241.199] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0241.199] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228440 | out: hHeap=0x1f0000) returned 1 [0241.199] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac238 | out: hHeap=0x1f0000) returned 1 [0241.199] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d70 | out: hHeap=0x1f0000) returned 1 [0241.199] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f608 | out: hHeap=0x1f0000) returned 1 [0241.199] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0241.199] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abfe8 [0241.200] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abfe8 | out: hHeap=0x1f0000) returned 1 [0241.200] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ee8 | out: hHeap=0x1f0000) returned 1 [0241.200] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0241.200] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab458 | out: hHeap=0x1f0000) returned 1 [0241.200] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0241.200] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0241.200] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0241.200] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0241.200] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0241.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac800 [0241.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2acb78 [0241.201] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac800 | out: hHeap=0x1f0000) returned 1 [0241.201] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2acb78 | out: hHeap=0x1f0000) returned 1 [0241.201] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abc70 | out: hHeap=0x1f0000) returned 1 [0241.201] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0241.201] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2854b8 | out: hHeap=0x1f0000) returned 1 [0241.201] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24ea00 | out: hHeap=0x1f0000) returned 1 [0241.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x2ae540 [0241.202] GetLastError () returned 0x0 [0241.202] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a80 [0241.627] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238870 [0241.629] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1043\\SetupResources.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1043\\setupresources.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e290, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0241.629] GetFileType (hFile=0x220) returned 0x1 [0241.629] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28efd8 [0241.630] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e218 | out: lpNewFilePointer=0x0) returned 1 [0241.630] GetLastError () returned 0xb7 [0241.630] CloseHandle (hObject=0x220) returned 1 [0241.630] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238870 | out: hHeap=0x1f0000) returned 1 [0241.630] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a80 | out: hHeap=0x1f0000) returned 1 [0241.630] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2856c8 | out: hHeap=0x1f0000) returned 1 [0241.630] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2855c0 | out: hHeap=0x1f0000) returned 1 [0241.630] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0241.631] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bf0 | out: hHeap=0x1f0000) returned 1 [0241.631] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b02b0 | out: hHeap=0x1f0000) returned 1 [0241.631] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f7d0 | out: hHeap=0x1f0000) returned 1 [0241.631] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0241.631] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae540 | out: hHeap=0x1f0000) returned 1 [0241.631] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0241.631] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0241.631] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x264f88 | out: hHeap=0x1f0000) returned 1 [0241.631] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae428 | out: hHeap=0x1f0000) returned 1 [0241.631] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238da8 | out: hHeap=0x1f0000) returned 1 [0241.631] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ac0 | out: hHeap=0x1f0000) returned 1 [0241.631] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f8f0 | out: hHeap=0x1f0000) returned 1 [0241.631] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0241.631] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ad0 | out: hHeap=0x1f0000) returned 1 [0241.631] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f848 | out: hHeap=0x1f0000) returned 1 [0241.631] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0241.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b30 | out: hHeap=0x1f0000) returned 1 [0241.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285e00 | out: hHeap=0x1f0000) returned 1 [0241.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0241.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0588 | out: hHeap=0x1f0000) returned 1 [0241.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228b48 | out: hHeap=0x1f0000) returned 1 [0241.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260658 | out: hHeap=0x1f0000) returned 1 [0241.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0241.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228b00 | out: hHeap=0x1f0000) returned 1 [0241.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238af0 | out: hHeap=0x1f0000) returned 1 [0241.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ba0 | out: hHeap=0x1f0000) returned 1 [0241.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x287fa0 | out: hHeap=0x1f0000) returned 1 [0241.632] CloseHandle (hObject=0x23c) returned 1 [0241.633] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389c0 | out: hHeap=0x1f0000) returned 1 [0241.633] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388a0 | out: hHeap=0x1f0000) returned 1 [0241.633] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237260 | out: hHeap=0x1f0000) returned 1 [0241.633] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24a5c0 | out: hHeap=0x1f0000) returned 1 [0241.633] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f770 | out: hHeap=0x1f0000) returned 1 [0241.633] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e30 | out: hHeap=0x1f0000) returned 1 [0241.633] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x295008 | out: hHeap=0x1f0000) returned 1 [0241.633] CloseHandle (hObject=0x210) returned 1 [0241.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238960 | out: hHeap=0x1f0000) returned 1 [0241.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238890 | out: hHeap=0x1f0000) returned 1 [0241.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad078 | out: hHeap=0x1f0000) returned 1 [0241.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204b90 | out: hHeap=0x1f0000) returned 1 [0241.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20d888 | out: hHeap=0x1f0000) returned 1 [0241.634] CloseHandle (hObject=0x1bc) returned 1 [0241.635] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388e0 | out: hHeap=0x1f0000) returned 1 [0241.635] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388f0 | out: hHeap=0x1f0000) returned 1 [0241.635] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2acfc0 | out: hHeap=0x1f0000) returned 1 [0241.635] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238800 | out: hHeap=0x1f0000) returned 1 [0241.635] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388d0 | out: hHeap=0x1f0000) returned 1 [0241.635] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387f0 | out: hHeap=0x1f0000) returned 1 [0241.635] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238910 | out: hHeap=0x1f0000) returned 1 [0241.635] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae1f8 | out: hHeap=0x1f0000) returned 1 [0241.635] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2688a0 | out: hHeap=0x1f0000) returned 1 [0241.635] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae9a0 | out: hHeap=0x1f0000) returned 1 [0241.635] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206658 | out: hHeap=0x1f0000) returned 1 [0241.635] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f938 | out: hHeap=0x1f0000) returned 1 [0241.635] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f908 | out: hHeap=0x1f0000) returned 1 [0241.635] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233568 | out: hHeap=0x1f0000) returned 1 [0241.635] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x267598 | out: hHeap=0x1f0000) returned 1 [0241.635] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2af378 | out: hHeap=0x1f0000) returned 1 [0241.636] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239160 | out: hHeap=0x1f0000) returned 1 [0241.636] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b08c8 | out: hHeap=0x1f0000) returned 1 [0241.636] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262188 | out: hHeap=0x1f0000) returned 1 [0241.636] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228c68 | out: hHeap=0x1f0000) returned 1 [0241.636] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0241.636] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1043\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1043\\setupresources.dll")) returned 1 [0241.638] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0241.638] FindClose (in: hFindFile=0x24e940 | out: hFindFile=0x24e940) returned 1 [0241.638] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0ad0 | out: hHeap=0x1f0000) returned 1 [0241.638] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262cb0 | out: hHeap=0x1f0000) returned 1 [0241.638] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260798 | out: hHeap=0x1f0000) returned 1 [0241.639] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2285a8 | out: hHeap=0x1f0000) returned 1 [0241.639] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228a28 [0241.639] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0241.639] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x263178 [0241.639] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228758 [0241.639] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1044\\*", lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e780 [0241.639] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2285a8 [0241.639] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228758 | out: hHeap=0x1f0000) returned 1 [0241.639] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0241.639] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.640] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228518 [0241.640] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2285a8 | out: hHeap=0x1f0000) returned 1 [0241.640] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0241.640] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0241.640] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xbe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0241.640] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609a0 [0241.640] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228c68 [0241.640] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x2b08c8 [0241.640] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228c68 | out: hHeap=0x1f0000) returned 1 [0241.640] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228518 | out: hHeap=0x1f0000) returned 1 [0241.640] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0241.640] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1044\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1044\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1bc [0241.641] GetFileType (hFile=0x1bc) returned 0x1 [0241.641] CloseHandle (hObject=0x1bc) returned 1 [0241.641] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8d18 [0241.641] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1044\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1044\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x173eb6c | out: lpFileInformation=0x173eb6c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xbe6)) returned 1 [0241.642] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0241.642] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8e20 [0241.642] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1044\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1044\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x173eb7c | out: lpFileInformation=0x173eb7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xbe6)) returned 1 [0241.642] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8e20 | out: hHeap=0x1f0000) returned 1 [0241.642] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8e78 [0241.643] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8e78 | out: hHeap=0x1f0000) returned 1 [0241.643] GetLastError () returned 0x0 [0241.643] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605b8 [0241.643] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228758 [0241.643] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262cb0 [0241.643] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8d18 [0241.643] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238d70 [0241.643] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0241.643] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x213790) returned 1 [0241.645] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x260860 | out: pbBuffer=0x260860) returned 1 [0241.645] CryptReleaseContext (hProv=0x213790, dwFlags=0x0) returned 1 [0241.645] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0241.645] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x264f88 [0241.645] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2ae1f8 [0241.645] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=39901428360) returned 1 [0241.645] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0241.646] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=39901447026) returned 1 [0241.646] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0241.646] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238fd8 [0241.646] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x267598 [0241.646] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2aece8 [0241.646] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x232ba8 [0241.646] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f998 [0241.646] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206628 [0241.646] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f9b0 [0241.646] GetLastError () returned 0x0 [0241.646] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b02b0 [0241.646] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a4d0 [0241.646] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b02b0 | out: hHeap=0x1f0000) returned 1 [0241.647] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xee) returned 0x21b748 [0241.647] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a4d0 | out: hHeap=0x1f0000) returned 1 [0241.647] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389c0 [0241.647] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238870 [0241.647] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1044\\eula.rtf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1044\\eula.rtf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e230, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1bc [0241.674] GetFileType (hFile=0x1bc) returned 0x1 [0241.675] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387f0 [0241.675] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238890 [0241.676] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1044\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1044\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0241.677] GetFileType (hFile=0x210) returned 0x1 [0241.677] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204dd0 [0241.677] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e30 [0241.677] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad6f0 [0241.677] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388a0 [0241.678] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388d0 [0241.678] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1044\\eula.rtf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1044\\eula.rtf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0241.679] GetFileType (hFile=0x23c) returned 0x1 [0241.679] GetLastError () returned 0xb7 [0241.680] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe4) returned 0x20d888 [0241.680] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f50 [0241.680] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f10 [0241.680] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bb0 [0241.680] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad1e8 [0241.680] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238800 [0241.681] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388e0 [0241.682] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1044\\eula.rtf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1044\\eula.rtf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0241.682] GetFileType (hFile=0x220) returned 0x1 [0241.682] GetLastError () returned 0xb7 [0241.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f10 [0241.683] GetLastError () returned 0xb7 [0241.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0241.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e30 [0241.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204dd0 [0241.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb8) returned 0x237b60 [0241.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388f0 [0241.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238910 [0241.685] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1044\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1044\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1a4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0241.685] GetFileType (hFile=0x230) returned 0x1 [0241.685] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28bfc0 [0241.685] ReadFile (in: hFile=0x230, lpBuffer=0x28bfc0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e100, lpOverlapped=0x0 | out: lpBuffer=0x28bfc0*, lpNumberOfBytesRead=0x173e100*=0xbe6, lpOverlapped=0x0) returned 1 [0242.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24c600 [0242.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x289fb0 [0242.065] GetLastError () returned 0x0 [0242.065] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f6c8 [0242.065] GetLastError () returned 0x0 [0242.069] CloseHandle (hObject=0x1bc) returned 1 [0242.070] CloseHandle (hObject=0x210) returned 1 [0242.070] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b10 [0242.071] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b30 [0242.072] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1044\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1044\\eula.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0242.074] GetFileType (hFile=0x210) returned 0x1 [0242.075] GetLastError () returned 0xb7 [0242.075] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x292ff8 [0242.076] GetLastError () returned 0xb7 [0242.077] CloseHandle (hObject=0x210) returned 1 [0242.079] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1044\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1044\\eula.rtf")) returned 0 [0242.079] GetLastError () returned 0x20 [0242.079] GetLastError () returned 0x20 [0242.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228638 [0242.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260888 [0242.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260770 [0242.080] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x228518 [0242.080] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204b90 [0242.080] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c70 [0242.080] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x238b80 [0242.080] GetLastError () returned 0x20 [0242.080] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238f68 [0242.080] GetLastError () returned 0x20 [0242.080] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238fd8 [0242.080] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b05f0 [0242.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260590 [0242.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285ae8 [0242.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b60 [0242.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0242.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f8a8 [0242.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389f0 [0242.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0242.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f830 [0242.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260950 [0242.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2859e0 [0242.081] GetLastError () returned 0x20 [0242.082] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238a10 [0242.082] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238a00 [0242.082] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b40 [0242.082] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a00 | out: hHeap=0x1f0000) returned 1 [0242.082] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a00 [0242.082] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b40 | out: hHeap=0x1f0000) returned 1 [0242.082] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a10 | out: hHeap=0x1f0000) returned 1 [0242.082] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b40 [0242.082] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f8c0 [0242.083] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b40 | out: hHeap=0x1f0000) returned 1 [0242.083] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f788 [0242.083] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f8c0 | out: hHeap=0x1f0000) returned 1 [0242.083] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a00 | out: hHeap=0x1f0000) returned 1 [0242.083] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f710 [0242.083] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f860 [0242.083] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f710 | out: hHeap=0x1f0000) returned 1 [0242.083] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f638 [0242.083] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f860 | out: hHeap=0x1f0000) returned 1 [0242.083] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f788 | out: hHeap=0x1f0000) returned 1 [0242.083] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f800 [0242.084] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204dd0 [0242.084] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f800 | out: hHeap=0x1f0000) returned 1 [0242.084] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ef0 [0242.084] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204dd0 | out: hHeap=0x1f0000) returned 1 [0242.084] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f638 | out: hHeap=0x1f0000) returned 1 [0242.084] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e30 [0242.084] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260518 [0242.084] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e30 | out: hHeap=0x1f0000) returned 1 [0242.085] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204b90 [0242.085] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0242.085] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ef0 | out: hHeap=0x1f0000) returned 1 [0242.085] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204c50 [0242.085] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206838 [0242.085] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c50 | out: hHeap=0x1f0000) returned 1 [0242.085] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260518 [0242.085] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206838 | out: hHeap=0x1f0000) returned 1 [0242.085] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204b90 | out: hHeap=0x1f0000) returned 1 [0242.085] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a00 [0242.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f7b8 [0242.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a00 | out: hHeap=0x1f0000) returned 1 [0242.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f8c0 [0242.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f7b8 | out: hHeap=0x1f0000) returned 1 [0242.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204cf0 [0242.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f8c0 | out: hHeap=0x1f0000) returned 1 [0242.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x2068c8 [0242.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cf0 | out: hHeap=0x1f0000) returned 1 [0242.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2068c8 | out: hHeap=0x1f0000) returned 1 [0242.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0242.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0242.087] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0242.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285ae8 | out: hHeap=0x1f0000) returned 1 [0242.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0242.087] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2391d0 [0242.087] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260888 [0242.087] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x212b58) returned 1 [0242.088] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x260888 | out: pbBuffer=0x260888) returned 1 [0242.089] CryptReleaseContext (hProv=0x212b58, dwFlags=0x0) returned 1 [0242.089] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0242.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260518 [0242.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260590 [0242.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2390b8 [0242.089] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0242.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0242.089] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2390b8 | out: hHeap=0x1f0000) returned 1 [0242.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8e20 [0242.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f8c0 [0242.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x2b02b0 [0242.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260888 [0242.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2856c8 [0242.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ef0 [0242.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0318 [0242.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260518 [0242.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2855c0 [0242.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b40 [0242.091] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0242.091] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f710 [0242.091] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a00 [0242.091] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b30 [0242.091] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f608 [0242.091] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f608 | out: hHeap=0x1f0000) returned 1 [0242.091] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b30 | out: hHeap=0x1f0000) returned 1 [0242.091] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a00 | out: hHeap=0x1f0000) returned 1 [0242.091] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f710 | out: hHeap=0x1f0000) returned 1 [0242.091] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0242.091] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b40 | out: hHeap=0x1f0000) returned 1 [0242.092] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2855c0 | out: hHeap=0x1f0000) returned 1 [0242.092] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0242.092] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0318 | out: hHeap=0x1f0000) returned 1 [0242.092] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238cc8 [0242.092] GetLastError () returned 0x0 [0242.092] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238e88 [0242.092] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0242.092] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0242.092] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0242.092] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0242.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0242.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0242.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x24ed40 [0242.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2855c0 [0242.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0242.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0242.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0242.094] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0242.094] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285bf0 [0242.094] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0242.094] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0242.094] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f768 [0242.094] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x266290 [0242.094] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2af8f0 [0242.094] QueryPerformanceCounter (in: lpPerformanceCount=0x173dee0 | out: lpPerformanceCount=0x173dee0*=39946320168) returned 1 [0242.094] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173df20 | out: lpSystemTimeAsFileTime=0x173df20) [0242.095] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238b40 [0242.095] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260518 [0242.095] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d90 [0242.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d90 | out: hHeap=0x1f0000) returned 1 [0242.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0242.095] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0242.095] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f10 [0242.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f10 | out: hHeap=0x1f0000) returned 1 [0242.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0242.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b40 | out: hHeap=0x1f0000) returned 1 [0242.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0242.095] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238f68 [0242.096] GetLastError () returned 0x0 [0242.096] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0242.096] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0242.096] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0242.096] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260518 [0242.096] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260608 [0242.096] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0242.096] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0242.096] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260a18 [0242.096] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0242.096] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x222ee8 [0242.097] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0242.097] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x25ffe8 [0242.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0242.097] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x220748 [0242.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25ffe8 | out: hHeap=0x1f0000) returned 1 [0242.097] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260a40 [0242.097] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260ba8 [0242.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0242.097] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0242.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ba8 | out: hHeap=0x1f0000) returned 1 [0242.097] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x220968 [0242.097] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x234b90 [0242.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b90 | out: hHeap=0x1f0000) returned 1 [0242.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220968 | out: hHeap=0x1f0000) returned 1 [0242.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220748 | out: hHeap=0x1f0000) returned 1 [0242.098] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f680 [0242.098] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228b00 [0242.098] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260ba8 [0242.098] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260b30 [0242.098] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260b58 [0242.098] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260bd0 [0242.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b30 | out: hHeap=0x1f0000) returned 1 [0242.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ba8 | out: hHeap=0x1f0000) returned 1 [0242.098] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x25ffe8 [0242.098] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260c48 [0242.098] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260c70 [0242.099] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0242.099] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0242.099] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c70 | out: hHeap=0x1f0000) returned 1 [0242.099] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2067d8 [0242.099] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x2a9c88 [0242.099] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a9c88 | out: hHeap=0x1f0000) returned 1 [0242.099] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2067d8 | out: hHeap=0x1f0000) returned 1 [0242.099] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a18 | out: hHeap=0x1f0000) returned 1 [0242.099] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab0e0 [0242.099] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0242.100] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25ffe8 | out: hHeap=0x1f0000) returned 1 [0242.100] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204b90 [0242.100] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab208 [0242.100] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab7d0 [0242.100] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0242.100] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac800 [0242.100] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab7d0 | out: hHeap=0x1f0000) returned 1 [0242.100] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bd0 | out: hHeap=0x1f0000) returned 1 [0242.100] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b58 | out: hHeap=0x1f0000) returned 1 [0242.100] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228b00 | out: hHeap=0x1f0000) returned 1 [0242.100] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab208 | out: hHeap=0x1f0000) returned 1 [0242.100] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204b90 | out: hHeap=0x1f0000) returned 1 [0242.100] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f680 | out: hHeap=0x1f0000) returned 1 [0242.101] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0242.101] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab458 [0242.101] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab458 | out: hHeap=0x1f0000) returned 1 [0242.101] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ee8 | out: hHeap=0x1f0000) returned 1 [0242.101] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0242.101] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab0e0 | out: hHeap=0x1f0000) returned 1 [0242.101] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0242.101] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0242.101] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0242.101] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0242.101] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0242.101] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab330 [0242.102] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac928 [0242.102] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab330 | out: hHeap=0x1f0000) returned 1 [0242.102] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac928 | out: hHeap=0x1f0000) returned 1 [0242.102] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac800 | out: hHeap=0x1f0000) returned 1 [0242.102] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0242.102] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285bf0 | out: hHeap=0x1f0000) returned 1 [0242.102] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24ed40 | out: hHeap=0x1f0000) returned 1 [0242.102] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x2adfc8 [0242.102] GetLastError () returned 0x0 [0242.102] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a00 [0242.103] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a10 [0242.103] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1044\\eula.rtf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1044\\eula.rtf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e290, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0242.104] GetFileType (hFile=0x210) returned 0x1 [0242.104] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x299028 [0242.104] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e218 | out: lpNewFilePointer=0x0) returned 1 [0242.105] GetLastError () returned 0xb7 [0242.105] CloseHandle (hObject=0x210) returned 1 [0242.105] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a10 | out: hHeap=0x1f0000) returned 1 [0242.105] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a00 | out: hHeap=0x1f0000) returned 1 [0242.105] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2855c0 | out: hHeap=0x1f0000) returned 1 [0242.106] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2856c8 | out: hHeap=0x1f0000) returned 1 [0242.106] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0242.106] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ef0 | out: hHeap=0x1f0000) returned 1 [0242.106] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b02b0 | out: hHeap=0x1f0000) returned 1 [0242.106] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f8c0 | out: hHeap=0x1f0000) returned 1 [0242.106] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8e20 | out: hHeap=0x1f0000) returned 1 [0242.106] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2adfc8 | out: hHeap=0x1f0000) returned 1 [0242.106] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0242.106] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0242.106] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x266290 | out: hHeap=0x1f0000) returned 1 [0242.106] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2af8f0 | out: hHeap=0x1f0000) returned 1 [0242.106] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2391d0 | out: hHeap=0x1f0000) returned 1 [0242.106] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b80 | out: hHeap=0x1f0000) returned 1 [0242.106] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f830 | out: hHeap=0x1f0000) returned 1 [0242.106] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0242.106] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389f0 | out: hHeap=0x1f0000) returned 1 [0242.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f8a8 | out: hHeap=0x1f0000) returned 1 [0242.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0242.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b60 | out: hHeap=0x1f0000) returned 1 [0242.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2859e0 | out: hHeap=0x1f0000) returned 1 [0242.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0242.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b05f0 | out: hHeap=0x1f0000) returned 1 [0242.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228518 | out: hHeap=0x1f0000) returned 1 [0242.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0242.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0242.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228638 | out: hHeap=0x1f0000) returned 1 [0242.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b30 | out: hHeap=0x1f0000) returned 1 [0242.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b10 | out: hHeap=0x1f0000) returned 1 [0242.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28bfc0 | out: hHeap=0x1f0000) returned 1 [0242.108] CloseHandle (hObject=0x230) returned 1 [0242.108] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238910 | out: hHeap=0x1f0000) returned 1 [0242.108] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388f0 | out: hHeap=0x1f0000) returned 1 [0242.108] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237b60 | out: hHeap=0x1f0000) returned 1 [0242.108] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24c600 | out: hHeap=0x1f0000) returned 1 [0242.108] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f6c8 | out: hHeap=0x1f0000) returned 1 [0242.108] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d70 | out: hHeap=0x1f0000) returned 1 [0242.108] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x289fb0 | out: hHeap=0x1f0000) returned 1 [0242.109] CloseHandle (hObject=0x220) returned 1 [0242.391] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388e0 | out: hHeap=0x1f0000) returned 1 [0242.391] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238800 | out: hHeap=0x1f0000) returned 1 [0242.392] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad1e8 | out: hHeap=0x1f0000) returned 1 [0242.392] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f50 | out: hHeap=0x1f0000) returned 1 [0242.392] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20d888 | out: hHeap=0x1f0000) returned 1 [0242.392] CloseHandle (hObject=0x23c) returned 1 [0242.393] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388d0 | out: hHeap=0x1f0000) returned 1 [0242.393] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388a0 | out: hHeap=0x1f0000) returned 1 [0242.393] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad6f0 | out: hHeap=0x1f0000) returned 1 [0242.394] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238890 | out: hHeap=0x1f0000) returned 1 [0242.394] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387f0 | out: hHeap=0x1f0000) returned 1 [0242.394] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238870 | out: hHeap=0x1f0000) returned 1 [0242.394] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389c0 | out: hHeap=0x1f0000) returned 1 [0242.394] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21b748 | out: hHeap=0x1f0000) returned 1 [0242.394] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x267598 | out: hHeap=0x1f0000) returned 1 [0242.394] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aece8 | out: hHeap=0x1f0000) returned 1 [0242.395] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206628 | out: hHeap=0x1f0000) returned 1 [0242.395] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f9b0 | out: hHeap=0x1f0000) returned 1 [0242.395] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f998 | out: hHeap=0x1f0000) returned 1 [0242.395] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232ba8 | out: hHeap=0x1f0000) returned 1 [0242.395] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x264f88 | out: hHeap=0x1f0000) returned 1 [0242.395] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae1f8 | out: hHeap=0x1f0000) returned 1 [0242.395] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238d70 | out: hHeap=0x1f0000) returned 1 [0242.396] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0242.396] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262cb0 | out: hHeap=0x1f0000) returned 1 [0242.396] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228758 | out: hHeap=0x1f0000) returned 1 [0242.396] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0242.396] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1044\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1044\\eula.rtf")) returned 1 [0242.398] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x135c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0242.398] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c20 [0242.399] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2284d0 [0242.399] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0588 [0242.399] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2284d0 | out: hHeap=0x1f0000) returned 1 [0242.399] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b08c8 | out: hHeap=0x1f0000) returned 1 [0242.399] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c20 | out: hHeap=0x1f0000) returned 1 [0242.514] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1044\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1044\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1a4 [0242.516] GetFileType (hFile=0x1a4) returned 0x1 [0242.516] CloseHandle (hObject=0x1a4) returned 1 [0242.516] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0318 [0242.516] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1044\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1044\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x173eb6c | out: lpFileInformation=0x173eb6c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x135c0)) returned 1 [0242.517] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0318 | out: hHeap=0x1f0000) returned 1 [0242.517] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0318 [0242.517] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1044\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1044\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x173eb7c | out: lpFileInformation=0x173eb7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x135c0)) returned 1 [0242.517] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0318 | out: hHeap=0x1f0000) returned 1 [0242.517] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0318 [0242.517] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0318 | out: hHeap=0x1f0000) returned 1 [0242.517] GetLastError () returned 0x0 [0242.517] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0242.517] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228908 [0242.517] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x261ff0 [0242.517] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b08c8 [0242.517] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239198 [0242.518] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260888 [0242.518] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x2132c8) returned 1 [0242.519] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x260888 | out: pbBuffer=0x260888) returned 1 [0242.519] CryptReleaseContext (hProv=0x2132c8, dwFlags=0x0) returned 1 [0242.519] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0242.519] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x264f88 [0242.519] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2aef18 [0242.519] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=39988795643) returned 1 [0242.519] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0242.519] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=39988823932) returned 1 [0242.519] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0242.520] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238c20 [0242.520] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x266290 [0242.520] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2ae1f8 [0242.520] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x2333c8 [0242.520] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f980 [0242.520] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206628 [0242.520] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f998 [0242.520] GetLastError () returned 0x0 [0242.520] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0242.520] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2adcb0 [0242.520] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0242.521] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x106) returned 0x2ae0e0 [0242.521] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2adcb0 | out: hHeap=0x1f0000) returned 1 [0242.521] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388a0 [0242.521] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238970 [0242.522] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1044\\LocalizedData.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1044\\localizeddata.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e230, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1a4 [0242.522] GetFileType (hFile=0x1a4) returned 0x1 [0242.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238980 [0242.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238870 [0242.524] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1044\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1044\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0242.524] GetFileType (hFile=0x1d4) returned 0x1 [0242.524] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f10 [0242.525] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d10 [0242.525] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad078 [0242.525] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238890 [0242.525] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389f0 [0242.526] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1044\\LocalizedData.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1044\\localizeddata.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0242.526] GetFileType (hFile=0x204) returned 0x1 [0242.526] GetLastError () returned 0xb7 [0242.526] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe4) returned 0x21b7f8 [0242.527] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f10 [0242.527] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d30 [0242.527] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e30 [0242.527] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad9d0 [0242.527] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a00 [0242.527] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b00 [0242.528] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1044\\LocalizedData.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1044\\localizeddata.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0242.528] GetFileType (hFile=0x23c) returned 0x1 [0242.529] GetLastError () returned 0xb7 [0242.529] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bd0 [0242.529] GetLastError () returned 0xb7 [0242.529] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cf0 [0242.529] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0242.529] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d90 [0242.529] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb8) returned 0x2370e0 [0242.529] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b20 [0242.530] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b10 [0242.532] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1044\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1044\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1a4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0242.532] GetFileType (hFile=0x220) returned 0x1 [0242.533] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28bfc0 [0242.534] ReadFile (in: hFile=0x220, lpBuffer=0x28bfc0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e100, lpOverlapped=0x0 | out: lpBuffer=0x28bfc0*, lpNumberOfBytesRead=0x173e100*=0x1000, lpOverlapped=0x0) returned 1 [0242.610] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24ce10 [0242.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x292ff8 [0242.611] GetLastError () returned 0x0 [0242.628] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f848 [0242.628] GetLastError () returned 0x0 [0242.628] CloseHandle (hObject=0x1a4) returned 1 [0242.629] CloseHandle (hObject=0x1d4) returned 1 [0242.629] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b70 [0242.630] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238aa0 [0242.631] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1044\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1044\\localizeddata.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0242.634] GetFileType (hFile=0x1d4) returned 0x1 [0242.634] GetLastError () returned 0xb7 [0242.635] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x294000 [0242.635] GetLastError () returned 0xb7 [0242.637] CloseHandle (hObject=0x1d4) returned 1 [0242.637] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1044\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1044\\localizeddata.xml")) returned 0 [0242.637] GetLastError () returned 0x20 [0242.637] GetLastError () returned 0x20 [0242.637] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228c68 [0242.637] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260888 [0242.637] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2608d8 [0242.637] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x228638 [0242.638] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ef0 [0242.638] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f30 [0242.638] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x238a40 [0242.638] GetLastError () returned 0x20 [0242.638] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239208 [0242.638] GetLastError () returned 0x20 [0242.638] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238cc8 [0242.638] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0318 [0242.638] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260b58 [0242.638] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285ae8 [0242.638] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b80 [0242.638] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609f0 [0242.639] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f7b8 [0242.639] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b90 [0242.639] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c48 [0242.639] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f7d0 [0242.639] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260c70 [0242.639] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2856c8 [0242.639] GetLastError () returned 0x20 [0242.639] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238ba0 [0242.639] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238a50 [0242.639] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c580 [0242.639] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a50 | out: hHeap=0x1f0000) returned 1 [0242.640] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c690 [0242.640] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c580 | out: hHeap=0x1f0000) returned 1 [0242.640] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ba0 | out: hHeap=0x1f0000) returned 1 [0242.937] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c660 [0242.937] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f878 [0242.937] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c660 | out: hHeap=0x1f0000) returned 1 [0242.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f7e8 [0242.938] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f878 | out: hHeap=0x1f0000) returned 1 [0242.938] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c690 | out: hHeap=0x1f0000) returned 1 [0242.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f6f8 [0242.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f608 [0242.938] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f6f8 | out: hHeap=0x1f0000) returned 1 [0242.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f680 [0242.938] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f608 | out: hHeap=0x1f0000) returned 1 [0242.938] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f7e8 | out: hHeap=0x1f0000) returned 1 [0242.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f770 [0242.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204cd0 [0242.939] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f770 | out: hHeap=0x1f0000) returned 1 [0242.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ef0 [0242.939] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cd0 | out: hHeap=0x1f0000) returned 1 [0242.939] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f680 | out: hHeap=0x1f0000) returned 1 [0242.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bf0 [0242.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260b08 [0242.939] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bf0 | out: hHeap=0x1f0000) returned 1 [0242.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204db0 [0242.940] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b08 | out: hHeap=0x1f0000) returned 1 [0242.940] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ef0 | out: hHeap=0x1f0000) returned 1 [0242.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204c90 [0242.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206928 [0242.940] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c90 | out: hHeap=0x1f0000) returned 1 [0242.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260b08 [0242.940] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206928 | out: hHeap=0x1f0000) returned 1 [0242.940] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204db0 | out: hHeap=0x1f0000) returned 1 [0242.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c6f0 [0242.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f608 [0242.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c6f0 | out: hHeap=0x1f0000) returned 1 [0242.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f6b0 [0242.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f608 | out: hHeap=0x1f0000) returned 1 [0242.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204c30 [0242.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f6b0 | out: hHeap=0x1f0000) returned 1 [0242.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206868 [0242.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c30 | out: hHeap=0x1f0000) returned 1 [0242.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206868 | out: hHeap=0x1f0000) returned 1 [0242.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b08 | out: hHeap=0x1f0000) returned 1 [0242.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0242.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0242.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285ae8 | out: hHeap=0x1f0000) returned 1 [0242.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b58 | out: hHeap=0x1f0000) returned 1 [0242.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238d00 [0242.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b08 [0242.942] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x213708) returned 1 [0242.943] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x260b08 | out: pbBuffer=0x260b08) returned 1 [0242.943] CryptReleaseContext (hProv=0x213708, dwFlags=0x0) returned 1 [0242.943] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b08 | out: hHeap=0x1f0000) returned 1 [0242.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260bf8 [0242.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260a68 [0242.944] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c90 [0242.944] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0242.944] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0242.944] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c90 | out: hHeap=0x1f0000) returned 1 [0242.944] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8d18 [0242.944] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f800 [0242.944] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x2b0998 [0242.944] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260bf8 [0242.944] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2858d8 [0242.944] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204b90 [0242.944] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b05f0 [0242.944] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260b08 [0242.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2859e0 [0242.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c610 [0242.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b30 [0242.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f890 [0242.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c5b0 [0242.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b58 [0242.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f6f8 [0242.945] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f6f8 | out: hHeap=0x1f0000) returned 1 [0242.945] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b58 | out: hHeap=0x1f0000) returned 1 [0242.945] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5b0 | out: hHeap=0x1f0000) returned 1 [0242.945] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f890 | out: hHeap=0x1f0000) returned 1 [0242.946] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b30 | out: hHeap=0x1f0000) returned 1 [0242.946] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c610 | out: hHeap=0x1f0000) returned 1 [0242.946] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2859e0 | out: hHeap=0x1f0000) returned 1 [0242.946] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b08 | out: hHeap=0x1f0000) returned 1 [0242.946] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b05f0 | out: hHeap=0x1f0000) returned 1 [0242.946] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238d38 [0242.946] GetLastError () returned 0x0 [0242.946] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238da8 [0242.946] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0242.946] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0242.946] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0242.947] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0242.947] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0242.947] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0242.947] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x24e6c0 [0242.947] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285ae8 [0242.947] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0242.947] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0242.947] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0242.947] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0242.947] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2855c0 [0242.947] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0242.948] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0242.948] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x230190 [0242.948] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x26c1b8 [0242.948] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2adfc8 [0242.948] QueryPerformanceCounter (in: lpPerformanceCount=0x173dee0 | out: lpPerformanceCount=0x173dee0*=40031742095) returned 1 [0242.949] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173df20 | out: lpSystemTimeAsFileTime=0x173df20) [0242.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x21c720 [0242.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bd0 [0242.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f70 [0242.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f70 | out: hHeap=0x1f0000) returned 1 [0242.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bd0 | out: hHeap=0x1f0000) returned 1 [0242.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b08 [0242.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d90 [0242.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d90 | out: hHeap=0x1f0000) returned 1 [0242.950] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b08 | out: hHeap=0x1f0000) returned 1 [0242.950] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c720 | out: hHeap=0x1f0000) returned 1 [0242.950] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0242.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238c20 [0242.950] GetLastError () returned 0x0 [0242.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0242.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0242.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0242.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260b58 [0242.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260b08 [0242.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0242.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0242.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260b30 [0242.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0242.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x222ee8 [0242.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0242.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0242.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0242.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x20c2c0 [0242.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0242.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260bd0 [0242.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260c20 [0242.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bd0 | out: hHeap=0x1f0000) returned 1 [0242.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0242.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c20 | out: hHeap=0x1f0000) returned 1 [0242.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0242.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x234b90 [0242.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b90 | out: hHeap=0x1f0000) returned 1 [0242.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0242.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20c2c0 | out: hHeap=0x1f0000) returned 1 [0242.953] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f8c0 [0242.953] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228cb0 [0242.953] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260bd0 [0242.953] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260c20 [0242.953] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260518 [0242.953] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260568 [0242.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c20 | out: hHeap=0x1f0000) returned 1 [0242.954] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bd0 | out: hHeap=0x1f0000) returned 1 [0242.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0242.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260bd0 [0242.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260c20 [0242.954] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bd0 | out: hHeap=0x1f0000) returned 1 [0242.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0242.954] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c20 | out: hHeap=0x1f0000) returned 1 [0242.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2067d8 [0242.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x2aa518 [0242.954] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aa518 | out: hHeap=0x1f0000) returned 1 [0242.954] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2067d8 | out: hHeap=0x1f0000) returned 1 [0242.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b30 | out: hHeap=0x1f0000) returned 1 [0242.955] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0242.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0242.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0242.955] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204c30 [0242.955] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0242.955] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0242.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b08 | out: hHeap=0x1f0000) returned 1 [0242.955] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab7d0 [0242.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0242.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0242.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0242.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228cb0 | out: hHeap=0x1f0000) returned 1 [0242.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0242.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c30 | out: hHeap=0x1f0000) returned 1 [0242.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f8c0 | out: hHeap=0x1f0000) returned 1 [0242.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0242.956] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac5b0 [0242.957] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac5b0 | out: hHeap=0x1f0000) returned 1 [0242.957] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ee8 | out: hHeap=0x1f0000) returned 1 [0242.957] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0242.957] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0242.957] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0242.957] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0242.957] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b58 | out: hHeap=0x1f0000) returned 1 [0242.957] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0242.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0242.958] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab8f8 [0242.958] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac360 [0242.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab8f8 | out: hHeap=0x1f0000) returned 1 [0242.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac360 | out: hHeap=0x1f0000) returned 1 [0242.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab7d0 | out: hHeap=0x1f0000) returned 1 [0242.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0242.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2855c0 | out: hHeap=0x1f0000) returned 1 [0242.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24e6c0 | out: hHeap=0x1f0000) returned 1 [0242.959] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x2ae888 [0242.959] GetLastError () returned 0x0 [0242.959] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c580 [0242.960] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c5e0 [0242.961] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1044\\LocalizedData.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1044\\localizeddata.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e290, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0242.961] GetFileType (hFile=0x200) returned 0x1 [0242.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28afb8 [0242.962] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e218 | out: lpNewFilePointer=0x0) returned 1 [0242.963] GetLastError () returned 0xb7 [0242.963] CloseHandle (hObject=0x200) returned 1 [0242.964] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5e0 | out: hHeap=0x1f0000) returned 1 [0242.964] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c580 | out: hHeap=0x1f0000) returned 1 [0242.964] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285ae8 | out: hHeap=0x1f0000) returned 1 [0242.964] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2858d8 | out: hHeap=0x1f0000) returned 1 [0242.964] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0242.964] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204b90 | out: hHeap=0x1f0000) returned 1 [0242.964] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0998 | out: hHeap=0x1f0000) returned 1 [0242.964] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f800 | out: hHeap=0x1f0000) returned 1 [0242.964] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0242.964] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae888 | out: hHeap=0x1f0000) returned 1 [0242.965] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a68 | out: hHeap=0x1f0000) returned 1 [0242.965] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0242.965] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x26c1b8 | out: hHeap=0x1f0000) returned 1 [0242.965] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2adfc8 | out: hHeap=0x1f0000) returned 1 [0242.965] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238d00 | out: hHeap=0x1f0000) returned 1 [0242.965] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a40 | out: hHeap=0x1f0000) returned 1 [0242.965] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f7d0 | out: hHeap=0x1f0000) returned 1 [0242.965] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0242.965] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b90 | out: hHeap=0x1f0000) returned 1 [0242.965] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f7b8 | out: hHeap=0x1f0000) returned 1 [0242.965] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609f0 | out: hHeap=0x1f0000) returned 1 [0242.965] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b80 | out: hHeap=0x1f0000) returned 1 [0242.966] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2856c8 | out: hHeap=0x1f0000) returned 1 [0242.966] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c70 | out: hHeap=0x1f0000) returned 1 [0242.966] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0318 | out: hHeap=0x1f0000) returned 1 [0242.966] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228638 | out: hHeap=0x1f0000) returned 1 [0242.966] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0242.966] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0242.966] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228c68 | out: hHeap=0x1f0000) returned 1 [0242.966] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238aa0 | out: hHeap=0x1f0000) returned 1 [0242.966] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b70 | out: hHeap=0x1f0000) returned 1 [0242.966] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28bfc0 | out: hHeap=0x1f0000) returned 1 [0242.967] CloseHandle (hObject=0x220) returned 1 [0242.967] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b10 | out: hHeap=0x1f0000) returned 1 [0242.967] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b20 | out: hHeap=0x1f0000) returned 1 [0242.967] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2370e0 | out: hHeap=0x1f0000) returned 1 [0242.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24ce10 | out: hHeap=0x1f0000) returned 1 [0242.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f848 | out: hHeap=0x1f0000) returned 1 [0242.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cf0 | out: hHeap=0x1f0000) returned 1 [0242.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x292ff8 | out: hHeap=0x1f0000) returned 1 [0242.969] CloseHandle (hObject=0x23c) returned 1 [0242.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b00 | out: hHeap=0x1f0000) returned 1 [0242.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a00 | out: hHeap=0x1f0000) returned 1 [0242.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad9d0 | out: hHeap=0x1f0000) returned 1 [0242.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f10 | out: hHeap=0x1f0000) returned 1 [0242.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21b7f8 | out: hHeap=0x1f0000) returned 1 [0242.970] CloseHandle (hObject=0x204) returned 1 [0242.971] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389f0 | out: hHeap=0x1f0000) returned 1 [0242.971] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238890 | out: hHeap=0x1f0000) returned 1 [0242.971] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad078 | out: hHeap=0x1f0000) returned 1 [0242.971] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238870 | out: hHeap=0x1f0000) returned 1 [0242.971] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238980 | out: hHeap=0x1f0000) returned 1 [0242.971] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238970 | out: hHeap=0x1f0000) returned 1 [0242.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388a0 | out: hHeap=0x1f0000) returned 1 [0242.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae0e0 | out: hHeap=0x1f0000) returned 1 [0242.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x266290 | out: hHeap=0x1f0000) returned 1 [0242.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae1f8 | out: hHeap=0x1f0000) returned 1 [0242.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206628 | out: hHeap=0x1f0000) returned 1 [0242.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f998 | out: hHeap=0x1f0000) returned 1 [0242.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f980 | out: hHeap=0x1f0000) returned 1 [0242.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2333c8 | out: hHeap=0x1f0000) returned 1 [0242.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x264f88 | out: hHeap=0x1f0000) returned 1 [0242.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aef18 | out: hHeap=0x1f0000) returned 1 [0242.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239198 | out: hHeap=0x1f0000) returned 1 [0242.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b08c8 | out: hHeap=0x1f0000) returned 1 [0242.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261ff0 | out: hHeap=0x1f0000) returned 1 [0242.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228908 | out: hHeap=0x1f0000) returned 1 [0242.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0242.973] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1044\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1044\\localizeddata.xml")) returned 1 [0242.975] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0242.975] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238e88 [0242.975] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228638 [0242.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b08c8 [0242.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228638 | out: hHeap=0x1f0000) returned 1 [0242.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0588 | out: hHeap=0x1f0000) returned 1 [0242.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238e88 | out: hHeap=0x1f0000) returned 1 [0242.976] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1044\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1044\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0242.977] GetFileType (hFile=0x204) returned 0x1 [0242.977] CloseHandle (hObject=0x204) returned 1 [0242.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b05f0 [0242.978] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1044\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1044\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x173eb6c | out: lpFileInformation=0x173eb6c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558)) returned 1 [0242.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b05f0 | out: hHeap=0x1f0000) returned 1 [0242.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0ad0 [0242.978] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1044\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1044\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x173eb7c | out: lpFileInformation=0x173eb7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558)) returned 1 [0242.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0ad0 | out: hHeap=0x1f0000) returned 1 [0242.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0318 [0242.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0318 | out: hHeap=0x1f0000) returned 1 [0242.978] GetLastError () returned 0x0 [0242.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0242.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228908 [0242.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x261ff0 [0242.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b02b0 [0242.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238f68 [0242.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0242.979] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x213570) returned 1 [0242.981] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2606a8 | out: pbBuffer=0x2606a8) returned 1 [0242.981] CryptReleaseContext (hProv=0x213570, dwFlags=0x0) returned 1 [0242.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0242.981] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x264f88 [0242.981] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2ae540 [0242.981] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=40034994938) returned 1 [0242.981] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0242.981] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=40035021800) returned 1 [0242.981] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0242.982] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238c90 [0242.982] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x266290 [0242.982] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2adfc8 [0242.982] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x233158 [0242.982] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f968 [0242.982] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206928 [0242.982] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f998 [0242.982] GetLastError () returned 0x0 [0242.982] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0242.982] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ade20 [0242.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0242.983] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x106) returned 0x2af260 [0242.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ade20 | out: hHeap=0x1f0000) returned 1 [0242.983] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c6f0 [0243.250] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c600 [0243.251] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1044\\SetupResources.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1044\\setupresources.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e230, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0243.251] GetFileType (hFile=0x22c) returned 0x1 [0243.252] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c6b0 [0243.252] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c670 [0243.253] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1044\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1044\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0243.254] GetFileType (hFile=0x230) returned 0x1 [0243.254] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204dd0 [0243.254] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f10 [0243.255] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad860 [0243.255] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c5f0 [0243.255] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c590 [0243.256] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1044\\SetupResources.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1044\\setupresources.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0243.257] GetFileType (hFile=0x210) returned 0x1 [0243.257] GetLastError () returned 0xb7 [0243.258] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe4) returned 0x21af88 [0243.258] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cf0 [0243.258] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0243.258] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d90 [0243.258] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad410 [0243.258] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c680 [0243.259] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c610 [0243.260] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1044\\SetupResources.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1044\\setupresources.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0243.260] GetFileType (hFile=0x1d8) returned 0x1 [0243.261] GetLastError () returned 0xb7 [0243.261] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204b90 [0243.261] GetLastError () returned 0xb7 [0243.261] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e90 [0243.262] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c70 [0243.262] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ef0 [0243.262] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb8) returned 0x2374a0 [0243.262] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c5a0 [0243.262] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c720 [0243.264] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1044\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1044\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1a4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0243.265] GetFileType (hFile=0x174) returned 0x1 [0243.267] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x291ff0 [0243.267] ReadFile (in: hFile=0x174, lpBuffer=0x291ff0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e100, lpOverlapped=0x0 | out: lpBuffer=0x291ff0*, lpNumberOfBytesRead=0x173e100*=0x1000, lpOverlapped=0x0) returned 1 [0243.283] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24b9e8 [0243.284] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28afb8 [0243.284] GetLastError () returned 0x0 [0243.587] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f908 [0243.587] GetLastError () returned 0x0 [0243.588] CloseHandle (hObject=0x22c) returned 1 [0243.588] CloseHandle (hObject=0x230) returned 1 [0243.589] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c5d0 [0243.589] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c580 [0243.863] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1044\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1044\\setupresources.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0243.868] GetFileType (hFile=0x230) returned 0x1 [0243.868] GetLastError () returned 0xb7 [0243.869] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x292ff8 [0243.869] GetLastError () returned 0xb7 [0243.871] CloseHandle (hObject=0x230) returned 1 [0243.872] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1044\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1044\\setupresources.dll")) returned 0 [0243.872] GetLastError () returned 0x20 [0243.872] GetLastError () returned 0x20 [0243.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228638 [0243.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260770 [0243.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260810 [0243.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x228680 [0243.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d90 [0243.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ef0 [0243.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x21c6c0 [0243.873] GetLastError () returned 0x20 [0243.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238fd8 [0243.874] GetLastError () returned 0x20 [0243.874] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x2391d0 [0243.874] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0658 [0243.875] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260630 [0243.875] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285ae8 [0243.875] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c620 [0243.875] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0243.875] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f7b8 [0243.875] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c700 [0243.875] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260888 [0243.875] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f6f8 [0243.875] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260568 [0243.876] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2851a0 [0243.876] GetLastError () returned 0x20 [0243.876] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x21c6a0 [0243.876] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x21c6d0 [0243.876] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c570 [0243.876] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c6d0 | out: hHeap=0x1f0000) returned 1 [0243.876] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c6d0 [0243.876] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c570 | out: hHeap=0x1f0000) returned 1 [0243.876] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c6a0 | out: hHeap=0x1f0000) returned 1 [0243.877] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c6a0 [0243.877] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f7a0 [0243.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c6a0 | out: hHeap=0x1f0000) returned 1 [0243.877] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f6b0 [0243.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f7a0 | out: hHeap=0x1f0000) returned 1 [0243.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c6d0 | out: hHeap=0x1f0000) returned 1 [0243.877] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f830 [0243.877] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f668 [0243.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f830 | out: hHeap=0x1f0000) returned 1 [0243.878] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f890 [0243.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f668 | out: hHeap=0x1f0000) returned 1 [0243.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f6b0 | out: hHeap=0x1f0000) returned 1 [0243.878] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f608 [0243.878] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204c70 [0243.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f608 | out: hHeap=0x1f0000) returned 1 [0243.878] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c10 [0243.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c70 | out: hHeap=0x1f0000) returned 1 [0243.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f890 | out: hHeap=0x1f0000) returned 1 [0243.879] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d90 [0243.879] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2605b8 [0243.879] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d90 | out: hHeap=0x1f0000) returned 1 [0243.879] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204c30 [0243.879] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0243.879] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c10 | out: hHeap=0x1f0000) returned 1 [0243.879] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204c90 [0243.879] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206658 [0243.879] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c90 | out: hHeap=0x1f0000) returned 1 [0243.879] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260950 [0243.879] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206658 | out: hHeap=0x1f0000) returned 1 [0243.879] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c30 | out: hHeap=0x1f0000) returned 1 [0243.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c6a0 [0243.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f7e8 [0243.880] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c6a0 | out: hHeap=0x1f0000) returned 1 [0243.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f8d8 [0243.880] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f7e8 | out: hHeap=0x1f0000) returned 1 [0243.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204e70 [0243.880] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f8d8 | out: hHeap=0x1f0000) returned 1 [0243.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x2066b8 [0243.880] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e70 | out: hHeap=0x1f0000) returned 1 [0243.880] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2066b8 | out: hHeap=0x1f0000) returned 1 [0243.880] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0243.880] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0243.881] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0243.881] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285ae8 | out: hHeap=0x1f0000) returned 1 [0243.881] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260630 | out: hHeap=0x1f0000) returned 1 [0243.881] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2391d0 [0243.881] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260630 [0243.881] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x2132c8) returned 1 [0243.882] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x260630 | out: pbBuffer=0x260630) returned 1 [0243.882] CryptReleaseContext (hProv=0x2132c8, dwFlags=0x0) returned 1 [0243.883] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260630 | out: hHeap=0x1f0000) returned 1 [0243.883] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260770 [0243.883] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2608d8 [0243.883] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2390f0 [0243.883] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0243.883] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0243.883] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2390f0 | out: hHeap=0x1f0000) returned 1 [0243.883] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8e20 [0243.883] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f848 [0243.883] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x2b05f0 [0243.883] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2605b8 [0243.884] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2859e0 [0243.884] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204df0 [0243.884] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b06c0 [0243.884] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260950 [0243.884] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285e00 [0243.884] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c6a0 [0243.884] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0243.884] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f860 [0243.884] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c6d0 [0243.884] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0243.884] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f758 [0243.885] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f758 | out: hHeap=0x1f0000) returned 1 [0243.885] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0243.885] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c6d0 | out: hHeap=0x1f0000) returned 1 [0243.885] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f860 | out: hHeap=0x1f0000) returned 1 [0243.885] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0243.885] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c6a0 | out: hHeap=0x1f0000) returned 1 [0243.885] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285e00 | out: hHeap=0x1f0000) returned 1 [0243.885] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0243.885] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b06c0 | out: hHeap=0x1f0000) returned 1 [0243.886] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238e50 [0243.886] GetLastError () returned 0x0 [0243.886] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238cc8 [0243.886] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0243.886] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0243.886] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0243.886] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0243.886] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0243.886] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0243.886] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x24e980 [0243.886] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2856c8 [0243.887] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0243.887] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0243.887] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0243.887] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0243.887] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x284f90 [0243.887] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0243.887] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0243.887] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fe70 [0243.887] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x267598 [0243.887] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2ae428 [0243.888] QueryPerformanceCounter (in: lpPerformanceCount=0x173dee0 | out: lpPerformanceCount=0x173dee0*=40125646347) returned 1 [0243.888] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173df20 | out: lpSystemTimeAsFileTime=0x173df20) [0243.888] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x21c6a0 [0243.888] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0243.888] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c30 [0243.888] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c30 | out: hHeap=0x1f0000) returned 1 [0243.888] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0243.888] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260770 [0243.888] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e30 [0243.888] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e30 | out: hHeap=0x1f0000) returned 1 [0243.889] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0243.889] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c6a0 | out: hHeap=0x1f0000) returned 1 [0243.889] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0243.889] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238e50 [0243.889] GetLastError () returned 0x0 [0243.889] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0243.889] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0243.889] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0243.890] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260950 [0243.890] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260978 [0243.890] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0243.890] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0243.891] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2609a0 [0243.891] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0243.891] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x222ee8 [0243.891] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0243.891] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0243.891] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0243.891] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0243.891] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0243.891] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260590 [0243.891] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260630 [0243.892] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0243.892] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0243.892] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260630 | out: hHeap=0x1f0000) returned 1 [0243.892] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0243.892] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x234b90 [0243.892] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b90 | out: hHeap=0x1f0000) returned 1 [0243.892] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0243.892] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0243.892] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f860 [0243.893] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228710 [0243.893] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260590 [0243.893] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260630 [0243.893] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2606a8 [0243.893] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2606d0 [0243.893] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260630 | out: hHeap=0x1f0000) returned 1 [0243.893] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0243.893] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0243.894] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260590 [0243.894] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260630 [0243.894] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0243.894] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0243.894] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260630 | out: hHeap=0x1f0000) returned 1 [0243.894] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2067d8 [0243.894] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x2aa0d0 [0243.895] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aa0d0 | out: hHeap=0x1f0000) returned 1 [0243.895] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2067d8 | out: hHeap=0x1f0000) returned 1 [0243.895] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0243.895] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0243.895] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0243.895] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0243.895] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204bd0 [0243.896] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0243.896] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0243.896] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0243.896] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aafb8 [0243.896] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0243.896] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0243.896] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0243.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228710 | out: hHeap=0x1f0000) returned 1 [0243.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0243.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bd0 | out: hHeap=0x1f0000) returned 1 [0243.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f860 | out: hHeap=0x1f0000) returned 1 [0243.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0243.897] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab208 [0243.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab208 | out: hHeap=0x1f0000) returned 1 [0243.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ee8 | out: hHeap=0x1f0000) returned 1 [0243.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0243.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0243.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0243.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0243.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0243.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0243.899] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0243.899] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abb48 [0243.899] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aca50 [0243.899] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abb48 | out: hHeap=0x1f0000) returned 1 [0243.899] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aca50 | out: hHeap=0x1f0000) returned 1 [0243.899] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aafb8 | out: hHeap=0x1f0000) returned 1 [0243.899] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0243.900] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x284f90 | out: hHeap=0x1f0000) returned 1 [0243.900] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24e980 | out: hHeap=0x1f0000) returned 1 [0243.900] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x2aee00 [0243.900] GetLastError () returned 0x0 [0243.900] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c6d0 [0243.901] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c570 [0243.902] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1044\\SetupResources.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1044\\setupresources.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e290, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0243.902] GetFileType (hFile=0x230) returned 0x1 [0243.903] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28ffe0 [0243.903] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e218 | out: lpNewFilePointer=0x0) returned 1 [0243.903] GetLastError () returned 0xb7 [0243.904] CloseHandle (hObject=0x230) returned 1 [0243.904] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c570 | out: hHeap=0x1f0000) returned 1 [0243.904] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c6d0 | out: hHeap=0x1f0000) returned 1 [0243.904] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2856c8 | out: hHeap=0x1f0000) returned 1 [0243.904] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2859e0 | out: hHeap=0x1f0000) returned 1 [0243.905] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0243.905] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204df0 | out: hHeap=0x1f0000) returned 1 [0243.905] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b05f0 | out: hHeap=0x1f0000) returned 1 [0244.226] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f848 | out: hHeap=0x1f0000) returned 1 [0244.226] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8e20 | out: hHeap=0x1f0000) returned 1 [0244.226] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aee00 | out: hHeap=0x1f0000) returned 1 [0244.226] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0244.226] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0244.226] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x267598 | out: hHeap=0x1f0000) returned 1 [0244.226] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae428 | out: hHeap=0x1f0000) returned 1 [0244.226] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2391d0 | out: hHeap=0x1f0000) returned 1 [0244.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c6c0 | out: hHeap=0x1f0000) returned 1 [0244.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f6f8 | out: hHeap=0x1f0000) returned 1 [0244.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0244.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c700 | out: hHeap=0x1f0000) returned 1 [0244.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f7b8 | out: hHeap=0x1f0000) returned 1 [0244.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0244.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c620 | out: hHeap=0x1f0000) returned 1 [0244.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2851a0 | out: hHeap=0x1f0000) returned 1 [0244.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0244.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0658 | out: hHeap=0x1f0000) returned 1 [0244.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228680 | out: hHeap=0x1f0000) returned 1 [0244.228] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0244.228] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0244.228] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228638 | out: hHeap=0x1f0000) returned 1 [0244.228] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c580 | out: hHeap=0x1f0000) returned 1 [0244.228] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5d0 | out: hHeap=0x1f0000) returned 1 [0244.228] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x291ff0 | out: hHeap=0x1f0000) returned 1 [0244.228] CloseHandle (hObject=0x174) returned 1 [0244.229] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c720 | out: hHeap=0x1f0000) returned 1 [0244.229] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5a0 | out: hHeap=0x1f0000) returned 1 [0244.229] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2374a0 | out: hHeap=0x1f0000) returned 1 [0244.229] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24b9e8 | out: hHeap=0x1f0000) returned 1 [0244.229] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f908 | out: hHeap=0x1f0000) returned 1 [0244.229] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e90 | out: hHeap=0x1f0000) returned 1 [0244.229] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28afb8 | out: hHeap=0x1f0000) returned 1 [0244.229] CloseHandle (hObject=0x1d8) returned 1 [0244.230] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c610 | out: hHeap=0x1f0000) returned 1 [0244.230] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c680 | out: hHeap=0x1f0000) returned 1 [0244.230] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad410 | out: hHeap=0x1f0000) returned 1 [0244.230] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cf0 | out: hHeap=0x1f0000) returned 1 [0244.230] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21af88 | out: hHeap=0x1f0000) returned 1 [0244.230] CloseHandle (hObject=0x210) returned 1 [0244.231] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c590 | out: hHeap=0x1f0000) returned 1 [0244.231] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5f0 | out: hHeap=0x1f0000) returned 1 [0244.231] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad860 | out: hHeap=0x1f0000) returned 1 [0244.231] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c670 | out: hHeap=0x1f0000) returned 1 [0244.231] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c6b0 | out: hHeap=0x1f0000) returned 1 [0244.231] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c600 | out: hHeap=0x1f0000) returned 1 [0244.231] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c6f0 | out: hHeap=0x1f0000) returned 1 [0244.231] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2af260 | out: hHeap=0x1f0000) returned 1 [0244.231] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x266290 | out: hHeap=0x1f0000) returned 1 [0244.231] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2adfc8 | out: hHeap=0x1f0000) returned 1 [0244.231] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206928 | out: hHeap=0x1f0000) returned 1 [0244.231] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f998 | out: hHeap=0x1f0000) returned 1 [0244.231] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f968 | out: hHeap=0x1f0000) returned 1 [0244.231] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233158 | out: hHeap=0x1f0000) returned 1 [0244.231] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x264f88 | out: hHeap=0x1f0000) returned 1 [0244.232] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae540 | out: hHeap=0x1f0000) returned 1 [0244.232] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238f68 | out: hHeap=0x1f0000) returned 1 [0244.232] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b02b0 | out: hHeap=0x1f0000) returned 1 [0244.232] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261ff0 | out: hHeap=0x1f0000) returned 1 [0244.232] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228908 | out: hHeap=0x1f0000) returned 1 [0244.232] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0244.232] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1044\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1044\\setupresources.dll")) returned 1 [0244.234] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0244.234] FindClose (in: hFindFile=0x24e780 | out: hFindFile=0x24e780) returned 1 [0244.234] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b08c8 | out: hHeap=0x1f0000) returned 1 [0244.235] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263178 | out: hHeap=0x1f0000) returned 1 [0244.235] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0244.235] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228a28 | out: hHeap=0x1f0000) returned 1 [0244.235] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2288c0 [0244.235] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260518 [0244.235] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x263178 [0244.235] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228908 [0244.235] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1045\\*", lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e780 [0244.235] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228a28 [0244.236] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228908 | out: hHeap=0x1f0000) returned 1 [0244.236] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0244.236] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.236] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228b48 [0244.236] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228a28 | out: hHeap=0x1f0000) returned 1 [0244.236] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0244.236] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0244.236] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xfc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0244.236] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0244.236] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228908 [0244.236] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x2b05f0 [0244.236] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228908 | out: hHeap=0x1f0000) returned 1 [0244.236] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228b48 | out: hHeap=0x1f0000) returned 1 [0244.236] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0244.237] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1045\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1045\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0244.237] GetFileType (hFile=0x210) returned 0x1 [0244.237] CloseHandle (hObject=0x210) returned 1 [0244.238] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8dc8 [0244.238] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1045\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1045\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x173eb6c | out: lpFileInformation=0x173eb6c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xfc8)) returned 1 [0244.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8dc8 | out: hHeap=0x1f0000) returned 1 [0244.238] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8d18 [0244.238] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1045\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1045\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x173eb7c | out: lpFileInformation=0x173eb7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xfc8)) returned 1 [0244.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0244.238] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8d18 [0244.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0244.238] GetLastError () returned 0x0 [0244.239] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0244.239] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228710 [0244.239] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x261ff0 [0244.239] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8d18 [0244.239] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238e88 [0244.239] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0244.239] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x213570) returned 1 [0244.240] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2606a8 | out: pbBuffer=0x2606a8) returned 1 [0244.240] CryptReleaseContext (hProv=0x213570, dwFlags=0x0) returned 1 [0244.241] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0244.241] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x267598 [0244.241] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2aee00 [0244.242] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=40161044731) returned 1 [0244.242] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0244.242] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=40161074018) returned 1 [0244.242] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0244.242] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238de0 [0244.242] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x269ba8 [0244.242] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2ae9a0 [0244.242] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x232d48 [0244.242] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f920 [0244.242] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206658 [0244.243] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f950 [0244.243] GetLastError () returned 0x0 [0244.243] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0658 [0244.243] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a578 [0244.243] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0658 | out: hHeap=0x1f0000) returned 1 [0244.243] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xee) returned 0x2b13b8 [0244.243] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a578 | out: hHeap=0x1f0000) returned 1 [0244.243] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c6b0 [0244.243] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c670 [0244.244] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1045\\eula.rtf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1045\\eula.rtf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e230, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0244.249] GetFileType (hFile=0x210) returned 0x1 [0244.250] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c580 [0244.250] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c6f0 [0244.251] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1045\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1045\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0244.251] GetFileType (hFile=0x1d8) returned 0x1 [0244.251] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e90 [0244.251] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204db0 [0244.251] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad1e8 [0244.251] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c590 [0244.252] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c610 [0244.252] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1045\\eula.rtf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1045\\eula.rtf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0244.253] GetFileType (hFile=0x174) returned 0x1 [0244.253] GetLastError () returned 0xb7 [0244.254] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe4) returned 0x21b708 [0244.254] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204db0 [0244.254] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204dd0 [0244.254] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c10 [0244.254] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2adcb0 [0244.254] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c720 [0244.254] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c5a0 [0244.255] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1045\\eula.rtf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1045\\eula.rtf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0244.255] GetFileType (hFile=0x1b0) returned 0x1 [0244.256] GetLastError () returned 0xb7 [0244.256] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cf0 [0244.256] GetLastError () returned 0xb7 [0244.256] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f30 [0244.256] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c30 [0244.257] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204dd0 [0244.257] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb8) returned 0x2377a0 [0244.257] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c680 [0244.257] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c6c0 [0244.258] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1045\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1045\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1a4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0244.258] GetFileType (hFile=0x1d4) returned 0x1 [0244.258] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x291ff0 [0244.258] ReadFile (in: hFile=0x1d4, lpBuffer=0x291ff0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e100, lpOverlapped=0x0 | out: lpBuffer=0x291ff0*, lpNumberOfBytesRead=0x173e100*=0xfc8, lpOverlapped=0x0) returned 1 [0244.648] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24bdf0 [0244.648] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x294000 [0244.648] GetLastError () returned 0x0 [0244.648] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f788 [0244.649] GetLastError () returned 0x0 [0244.650] CloseHandle (hObject=0x210) returned 1 [0244.651] CloseHandle (hObject=0x1d8) returned 1 [0244.651] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c470 [0244.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c4f0 [0244.908] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1045\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1045\\eula.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0244.909] GetFileType (hFile=0x1d8) returned 0x1 [0244.910] GetLastError () returned 0xb7 [0244.911] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28cfc8 [0244.911] GetLastError () returned 0xb7 [0244.913] CloseHandle (hObject=0x1d8) returned 1 [0244.914] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1045\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1045\\eula.rtf")) returned 0 [0244.914] GetLastError () returned 0x20 [0244.914] GetLastError () returned 0x20 [0244.914] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228bd8 [0244.915] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260bd0 [0244.915] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260b08 [0244.915] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x228440 [0244.915] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c30 [0244.915] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d90 [0244.915] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x238880 [0244.915] GetLastError () returned 0x20 [0244.916] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x2391d0 [0244.916] GetLastError () returned 0x20 [0244.916] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238c90 [0244.916] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0e10 [0244.916] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260b58 [0244.916] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2856c8 [0244.916] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238950 [0244.916] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a68 [0244.917] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f8a8 [0244.917] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238980 [0244.917] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0244.917] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f620 [0244.917] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260b30 [0244.917] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2853b0 [0244.917] GetLastError () returned 0x20 [0244.917] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238820 [0244.918] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x2388c0 [0244.918] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389c0 [0244.918] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388c0 | out: hHeap=0x1f0000) returned 1 [0244.918] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387e0 [0244.918] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389c0 | out: hHeap=0x1f0000) returned 1 [0244.918] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238820 | out: hHeap=0x1f0000) returned 1 [0244.918] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238870 [0244.918] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f7e8 [0244.919] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238870 | out: hHeap=0x1f0000) returned 1 [0244.919] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f8d8 [0244.919] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f7e8 | out: hHeap=0x1f0000) returned 1 [0244.919] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387e0 | out: hHeap=0x1f0000) returned 1 [0244.919] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f830 [0244.919] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f668 [0244.919] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f830 | out: hHeap=0x1f0000) returned 1 [0244.919] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f680 [0244.920] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f668 | out: hHeap=0x1f0000) returned 1 [0244.920] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f8d8 | out: hHeap=0x1f0000) returned 1 [0244.920] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f8c0 [0244.920] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204cf0 [0244.920] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f8c0 | out: hHeap=0x1f0000) returned 1 [0244.920] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204df0 [0244.920] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cf0 | out: hHeap=0x1f0000) returned 1 [0244.920] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f680 | out: hHeap=0x1f0000) returned 1 [0244.920] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e90 [0244.920] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260c20 [0244.921] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e90 | out: hHeap=0x1f0000) returned 1 [0244.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204f70 [0244.921] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c20 | out: hHeap=0x1f0000) returned 1 [0244.921] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204df0 | out: hHeap=0x1f0000) returned 1 [0244.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204b90 [0244.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x2066b8 [0244.921] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204b90 | out: hHeap=0x1f0000) returned 1 [0244.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260c20 [0244.921] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2066b8 | out: hHeap=0x1f0000) returned 1 [0244.922] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f70 | out: hHeap=0x1f0000) returned 1 [0244.922] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238890 [0244.922] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f860 [0244.922] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238890 | out: hHeap=0x1f0000) returned 1 [0244.922] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f8c0 [0244.922] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f860 | out: hHeap=0x1f0000) returned 1 [0244.922] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204d30 [0244.922] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f8c0 | out: hHeap=0x1f0000) returned 1 [0244.923] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206868 [0244.923] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d30 | out: hHeap=0x1f0000) returned 1 [0244.923] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206868 | out: hHeap=0x1f0000) returned 1 [0244.923] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c20 | out: hHeap=0x1f0000) returned 1 [0244.923] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bd0 | out: hHeap=0x1f0000) returned 1 [0244.923] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0244.923] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2856c8 | out: hHeap=0x1f0000) returned 1 [0244.923] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b58 | out: hHeap=0x1f0000) returned 1 [0244.924] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2390f0 [0244.924] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bd0 [0244.924] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x2132c8) returned 1 [0244.925] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x260bd0 | out: pbBuffer=0x260bd0) returned 1 [0244.925] CryptReleaseContext (hProv=0x2132c8, dwFlags=0x0) returned 1 [0244.925] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bd0 | out: hHeap=0x1f0000) returned 1 [0244.925] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260c20 [0244.926] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260b58 [0244.926] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238ec0 [0244.926] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c20 | out: hHeap=0x1f0000) returned 1 [0244.926] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0244.926] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ec0 | out: hHeap=0x1f0000) returned 1 [0244.926] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8e78 [0244.926] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f668 [0244.926] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x2b0da8 [0244.927] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2609f0 [0244.927] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2856c8 [0244.927] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d90 [0244.927] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0e78 [0244.927] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260c70 [0244.927] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2859e0 [0244.927] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387e0 [0244.927] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bd0 [0244.927] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f7a0 [0244.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389c0 [0244.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c20 [0244.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f7b8 [0244.929] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f7b8 | out: hHeap=0x1f0000) returned 1 [0244.929] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c20 | out: hHeap=0x1f0000) returned 1 [0244.929] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389c0 | out: hHeap=0x1f0000) returned 1 [0244.929] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f7a0 | out: hHeap=0x1f0000) returned 1 [0244.929] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bd0 | out: hHeap=0x1f0000) returned 1 [0244.929] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387e0 | out: hHeap=0x1f0000) returned 1 [0244.929] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2859e0 | out: hHeap=0x1f0000) returned 1 [0244.930] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c70 | out: hHeap=0x1f0000) returned 1 [0244.930] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0e78 | out: hHeap=0x1f0000) returned 1 [0244.930] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238e50 [0244.930] GetLastError () returned 0x0 [0244.930] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238d00 [0244.930] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0244.930] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0244.931] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0244.931] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0244.931] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0244.931] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0244.931] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x24e940 [0244.931] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2859e0 [0244.931] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0244.932] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0244.932] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0244.932] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0244.932] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2852a8 [0244.932] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0244.932] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0244.932] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fce0 [0244.932] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x266290 [0244.933] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2afe68 [0244.933] QueryPerformanceCounter (in: lpPerformanceCount=0x173dee0 | out: lpPerformanceCount=0x173dee0*=40230161893) returned 1 [0244.933] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173df20 | out: lpSystemTimeAsFileTime=0x173df20) [0244.933] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x2387f0 [0244.933] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a18 [0244.933] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bf0 [0244.934] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bf0 | out: hHeap=0x1f0000) returned 1 [0244.934] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a18 | out: hHeap=0x1f0000) returned 1 [0244.934] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bd0 [0244.934] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ef0 [0244.934] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ef0 | out: hHeap=0x1f0000) returned 1 [0244.934] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bd0 | out: hHeap=0x1f0000) returned 1 [0244.934] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387f0 | out: hHeap=0x1f0000) returned 1 [0244.934] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0244.935] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238d38 [0244.935] GetLastError () returned 0x0 [0244.935] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0244.935] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0244.935] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0244.935] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260c70 [0244.935] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260a18 [0244.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0244.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0244.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260bd0 [0244.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0244.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x222ee8 [0244.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab580 [0244.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0244.937] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab580 | out: hHeap=0x1f0000) returned 1 [0244.937] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0244.937] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0244.937] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260c20 [0244.937] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260c48 [0244.937] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c20 | out: hHeap=0x1f0000) returned 1 [0244.937] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aba20 [0244.937] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0244.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0244.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x234b90 [0244.938] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b90 | out: hHeap=0x1f0000) returned 1 [0244.938] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0244.938] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0244.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f710 [0244.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2287a0 [0244.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260c20 [0244.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260c48 [0244.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2606a8 [0244.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238348 [0244.939] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0244.939] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c20 | out: hHeap=0x1f0000) returned 1 [0244.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0244.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238118 [0244.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238140 [0244.940] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0244.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abc70 [0244.940] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0244.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206688 [0244.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x2a93f8 [0244.940] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a93f8 | out: hHeap=0x1f0000) returned 1 [0244.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206688 | out: hHeap=0x1f0000) returned 1 [0244.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bd0 | out: hHeap=0x1f0000) returned 1 [0244.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abec0 [0244.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abc70 | out: hHeap=0x1f0000) returned 1 [0244.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0244.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204cf0 [0244.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab6a8 [0244.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abfe8 [0244.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a18 | out: hHeap=0x1f0000) returned 1 [0244.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab208 [0244.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abfe8 | out: hHeap=0x1f0000) returned 1 [0244.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238348 | out: hHeap=0x1f0000) returned 1 [0244.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0244.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2287a0 | out: hHeap=0x1f0000) returned 1 [0244.943] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab6a8 | out: hHeap=0x1f0000) returned 1 [0244.943] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cf0 | out: hHeap=0x1f0000) returned 1 [0244.943] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f710 | out: hHeap=0x1f0000) returned 1 [0244.943] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aba20 | out: hHeap=0x1f0000) returned 1 [0244.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac238 [0244.943] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac238 | out: hHeap=0x1f0000) returned 1 [0244.943] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ee8 | out: hHeap=0x1f0000) returned 1 [0245.261] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0245.327] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abec0 | out: hHeap=0x1f0000) returned 1 [0245.328] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0245.328] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0245.328] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c70 | out: hHeap=0x1f0000) returned 1 [0245.328] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0245.328] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0245.328] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abc70 [0245.328] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abd98 [0245.328] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abc70 | out: hHeap=0x1f0000) returned 1 [0245.329] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abd98 | out: hHeap=0x1f0000) returned 1 [0245.329] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab208 | out: hHeap=0x1f0000) returned 1 [0245.329] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0245.329] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2852a8 | out: hHeap=0x1f0000) returned 1 [0245.329] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24e940 | out: hHeap=0x1f0000) returned 1 [0245.329] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x2aef18 [0245.329] GetLastError () returned 0x0 [0245.330] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238960 [0245.330] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238800 [0245.331] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1045\\eula.rtf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1045\\eula.rtf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e290, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0245.332] GetFileType (hFile=0x22c) returned 0x1 [0245.332] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x288fa8 [0245.333] SetFilePointerEx (in: hFile=0x22c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e218 | out: lpNewFilePointer=0x0) returned 1 [0245.333] GetLastError () returned 0xb7 [0245.334] CloseHandle (hObject=0x22c) returned 1 [0245.335] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238800 | out: hHeap=0x1f0000) returned 1 [0245.335] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238960 | out: hHeap=0x1f0000) returned 1 [0245.335] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2859e0 | out: hHeap=0x1f0000) returned 1 [0245.335] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2856c8 | out: hHeap=0x1f0000) returned 1 [0245.335] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609f0 | out: hHeap=0x1f0000) returned 1 [0245.335] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d90 | out: hHeap=0x1f0000) returned 1 [0245.335] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0da8 | out: hHeap=0x1f0000) returned 1 [0245.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f668 | out: hHeap=0x1f0000) returned 1 [0245.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8e78 | out: hHeap=0x1f0000) returned 1 [0245.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aef18 | out: hHeap=0x1f0000) returned 1 [0245.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b58 | out: hHeap=0x1f0000) returned 1 [0245.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0245.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x266290 | out: hHeap=0x1f0000) returned 1 [0245.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2afe68 | out: hHeap=0x1f0000) returned 1 [0245.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2390f0 | out: hHeap=0x1f0000) returned 1 [0245.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238880 | out: hHeap=0x1f0000) returned 1 [0245.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f620 | out: hHeap=0x1f0000) returned 1 [0245.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0245.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238980 | out: hHeap=0x1f0000) returned 1 [0245.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f8a8 | out: hHeap=0x1f0000) returned 1 [0245.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a68 | out: hHeap=0x1f0000) returned 1 [0245.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238950 | out: hHeap=0x1f0000) returned 1 [0245.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2853b0 | out: hHeap=0x1f0000) returned 1 [0245.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b30 | out: hHeap=0x1f0000) returned 1 [0245.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0e10 | out: hHeap=0x1f0000) returned 1 [0245.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228440 | out: hHeap=0x1f0000) returned 1 [0245.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b08 | out: hHeap=0x1f0000) returned 1 [0245.339] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0245.339] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228bd8 | out: hHeap=0x1f0000) returned 1 [0245.339] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c4f0 | out: hHeap=0x1f0000) returned 1 [0245.339] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c470 | out: hHeap=0x1f0000) returned 1 [0245.339] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x291ff0 | out: hHeap=0x1f0000) returned 1 [0245.339] CloseHandle (hObject=0x1d4) returned 1 [0245.340] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c6c0 | out: hHeap=0x1f0000) returned 1 [0245.340] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c680 | out: hHeap=0x1f0000) returned 1 [0245.340] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2377a0 | out: hHeap=0x1f0000) returned 1 [0245.340] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24bdf0 | out: hHeap=0x1f0000) returned 1 [0245.341] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f788 | out: hHeap=0x1f0000) returned 1 [0245.341] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f30 | out: hHeap=0x1f0000) returned 1 [0245.341] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x294000 | out: hHeap=0x1f0000) returned 1 [0245.341] CloseHandle (hObject=0x1b0) returned 1 [0245.342] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5a0 | out: hHeap=0x1f0000) returned 1 [0245.342] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c720 | out: hHeap=0x1f0000) returned 1 [0245.342] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2adcb0 | out: hHeap=0x1f0000) returned 1 [0245.342] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204db0 | out: hHeap=0x1f0000) returned 1 [0245.342] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21b708 | out: hHeap=0x1f0000) returned 1 [0245.343] CloseHandle (hObject=0x174) returned 1 [0245.343] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c610 | out: hHeap=0x1f0000) returned 1 [0245.343] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c590 | out: hHeap=0x1f0000) returned 1 [0245.343] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad1e8 | out: hHeap=0x1f0000) returned 1 [0245.343] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c6f0 | out: hHeap=0x1f0000) returned 1 [0245.344] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c580 | out: hHeap=0x1f0000) returned 1 [0245.344] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c670 | out: hHeap=0x1f0000) returned 1 [0245.344] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c6b0 | out: hHeap=0x1f0000) returned 1 [0245.344] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b13b8 | out: hHeap=0x1f0000) returned 1 [0245.344] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x269ba8 | out: hHeap=0x1f0000) returned 1 [0245.344] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae9a0 | out: hHeap=0x1f0000) returned 1 [0245.344] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206658 | out: hHeap=0x1f0000) returned 1 [0245.344] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f950 | out: hHeap=0x1f0000) returned 1 [0245.344] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f920 | out: hHeap=0x1f0000) returned 1 [0245.345] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232d48 | out: hHeap=0x1f0000) returned 1 [0245.345] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x267598 | out: hHeap=0x1f0000) returned 1 [0245.345] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aee00 | out: hHeap=0x1f0000) returned 1 [0245.345] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238e88 | out: hHeap=0x1f0000) returned 1 [0245.345] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0245.345] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261ff0 | out: hHeap=0x1f0000) returned 1 [0245.345] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228710 | out: hHeap=0x1f0000) returned 1 [0245.345] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0245.345] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1045\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1045\\eula.rtf")) returned 1 [0245.348] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x141c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0245.348] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2392b0 [0245.348] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228a28 [0245.348] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c30 [0245.348] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228a28 | out: hHeap=0x1f0000) returned 1 [0245.349] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b05f0 | out: hHeap=0x1f0000) returned 1 [0245.349] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2392b0 | out: hHeap=0x1f0000) returned 1 [0245.350] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1045\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1045\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0245.350] GetFileType (hFile=0x174) returned 0x1 [0245.352] CloseHandle (hObject=0x174) returned 1 [0245.353] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214fd8 [0245.353] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1045\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1045\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x173eb6c | out: lpFileInformation=0x173eb6c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x141c6)) returned 1 [0245.353] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214fd8 | out: hHeap=0x1f0000) returned 1 [0245.353] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d00 [0245.353] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1045\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1045\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x173eb7c | out: lpFileInformation=0x173eb7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x141c6)) returned 1 [0245.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d00 | out: hHeap=0x1f0000) returned 1 [0245.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2150a8 [0245.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2150a8 | out: hHeap=0x1f0000) returned 1 [0245.354] GetLastError () returned 0x0 [0245.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0245.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228bd8 [0245.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x261ff0 [0245.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2150a8 [0245.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c58 [0245.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0245.355] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x212f98) returned 1 [0245.357] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2382a8 | out: pbBuffer=0x2382a8) returned 1 [0245.357] CryptReleaseContext (hProv=0x212f98, dwFlags=0x0) returned 1 [0245.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0245.357] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x2688a0 [0245.357] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2af148 [0245.357] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=40272641925) returned 1 [0245.358] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0245.358] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=40272689264) returned 1 [0245.358] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0245.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238f68 [0245.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x269ba8 [0245.359] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2af490 [0245.359] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x233158 [0245.359] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f9c8 [0245.359] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206628 [0245.359] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f998 [0245.359] GetLastError () returned 0x0 [0245.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2201c0 [0245.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2adb40 [0245.360] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2201c0 | out: hHeap=0x1f0000) returned 1 [0245.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x106) returned 0x2af260 [0245.360] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2adb40 | out: hHeap=0x1f0000) returned 1 [0245.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238810 [0245.361] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238800 [0245.363] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1045\\LocalizedData.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1045\\localizeddata.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e230, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0245.364] GetFileType (hFile=0x174) returned 0x1 [0245.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389c0 [0245.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388e0 [0245.820] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1045\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1045\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0245.820] GetFileType (hFile=0x220) returned 0x1 [0245.820] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204db0 [0245.821] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c10 [0245.821] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2adbf8 [0245.821] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238970 [0245.821] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238980 [0245.822] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1045\\LocalizedData.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1045\\localizeddata.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0245.822] GetFileType (hFile=0x1fc) returned 0x1 [0245.823] GetLastError () returned 0xb7 [0245.823] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe4) returned 0x21b438 [0245.824] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f10 [0245.824] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c30 [0245.824] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204db0 [0245.824] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad9d0 [0245.824] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238900 [0245.825] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238910 [0245.826] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1045\\LocalizedData.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1045\\localizeddata.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0245.826] GetFileType (hFile=0x1e8) returned 0x1 [0245.827] GetLastError () returned 0xb7 [0245.827] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e70 [0245.827] GetLastError () returned 0xb7 [0245.827] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204dd0 [0245.827] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ef0 [0245.828] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204db0 [0245.828] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb8) returned 0x2370e0 [0245.828] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238920 [0245.829] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238930 [0245.830] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1045\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1045\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1a4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0245.830] GetFileType (hFile=0x1d8) returned 0x1 [0245.831] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x290fe8 [0245.831] ReadFile (in: hFile=0x1d8, lpBuffer=0x290fe8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e100, lpOverlapped=0x0 | out: lpBuffer=0x290fe8*, lpNumberOfBytesRead=0x173e100*=0x1000, lpOverlapped=0x0) returned 1 [0245.868] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24ce10 [0245.868] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x291ff0 [0245.869] GetLastError () returned 0x0 [0245.922] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f6f8 [0245.923] GetLastError () returned 0x0 [0245.923] CloseHandle (hObject=0x174) returned 1 [0245.924] CloseHandle (hObject=0x220) returned 1 [0245.925] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387e0 [0245.926] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238840 [0245.927] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1045\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1045\\localizeddata.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0246.119] GetFileType (hFile=0x1c0) returned 0x1 [0246.119] GetLastError () returned 0xb7 [0246.120] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28dfd0 [0246.120] GetLastError () returned 0xb7 [0246.122] CloseHandle (hObject=0x1c0) returned 1 [0246.123] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1045\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1045\\localizeddata.xml")) returned 0 [0246.123] GetLastError () returned 0x20 [0246.123] GetLastError () returned 0x20 [0246.123] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228518 [0246.123] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2380f0 [0246.124] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238280 [0246.124] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x228638 [0246.124] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e70 [0246.124] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c10 [0246.124] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x238990 [0246.124] GetLastError () returned 0x20 [0246.124] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239198 [0246.124] GetLastError () returned 0x20 [0246.125] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239160 [0246.125] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a28 [0246.125] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238118 [0246.125] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285098 [0246.125] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238820 [0246.125] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0246.125] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f908 [0246.125] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389b0 [0246.125] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0246.126] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f9b0 [0246.126] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2384b0 [0246.126] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285ae8 [0246.126] GetLastError () returned 0x20 [0246.126] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238830 [0246.126] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238850 [0246.126] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387f0 [0246.127] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238850 | out: hHeap=0x1f0000) returned 1 [0246.127] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238870 [0246.127] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387f0 | out: hHeap=0x1f0000) returned 1 [0246.127] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238830 | out: hHeap=0x1f0000) returned 1 [0246.127] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238940 [0246.127] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f920 [0246.127] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238940 | out: hHeap=0x1f0000) returned 1 [0246.127] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f938 [0246.127] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f920 | out: hHeap=0x1f0000) returned 1 [0246.128] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238870 | out: hHeap=0x1f0000) returned 1 [0246.128] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f920 [0246.128] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f950 [0246.128] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f920 | out: hHeap=0x1f0000) returned 1 [0246.128] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f920 [0246.128] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f950 | out: hHeap=0x1f0000) returned 1 [0246.128] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f938 | out: hHeap=0x1f0000) returned 1 [0246.128] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f938 [0246.128] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204cd0 [0246.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f938 | out: hHeap=0x1f0000) returned 1 [0246.129] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ef0 [0246.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cd0 | out: hHeap=0x1f0000) returned 1 [0246.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f920 | out: hHeap=0x1f0000) returned 1 [0246.129] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f30 [0246.129] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2382d0 [0246.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f30 | out: hHeap=0x1f0000) returned 1 [0246.129] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204db0 [0246.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0246.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ef0 | out: hHeap=0x1f0000) returned 1 [0246.130] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204e50 [0246.130] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206928 [0246.130] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e50 | out: hHeap=0x1f0000) returned 1 [0246.130] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238348 [0246.130] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206928 | out: hHeap=0x1f0000) returned 1 [0246.130] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204db0 | out: hHeap=0x1f0000) returned 1 [0246.130] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238940 [0246.130] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f920 [0246.130] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238940 | out: hHeap=0x1f0000) returned 1 [0246.130] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f938 [0246.130] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f920 | out: hHeap=0x1f0000) returned 1 [0246.131] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204e30 [0246.131] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f938 | out: hHeap=0x1f0000) returned 1 [0246.131] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x2067d8 [0246.132] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e30 | out: hHeap=0x1f0000) returned 1 [0246.132] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2067d8 | out: hHeap=0x1f0000) returned 1 [0246.132] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238348 | out: hHeap=0x1f0000) returned 1 [0246.132] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380f0 | out: hHeap=0x1f0000) returned 1 [0246.132] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0246.132] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285098 | out: hHeap=0x1f0000) returned 1 [0246.132] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0246.132] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238d70 [0246.132] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0246.133] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x213350) returned 1 [0246.134] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238410 | out: pbBuffer=0x238410) returned 1 [0246.134] CryptReleaseContext (hProv=0x213350, dwFlags=0x0) returned 1 [0246.134] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0246.134] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238168 [0246.134] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2382d0 [0246.135] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238f68 [0246.135] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0246.135] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0246.135] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238f68 | out: hHeap=0x1f0000) returned 1 [0246.135] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8d18 [0246.135] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f920 [0246.135] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x214a90 [0246.135] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2382f8 [0246.135] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285e00 [0246.135] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c10 [0246.135] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214dd0 [0246.136] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238168 [0246.136] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2851a0 [0246.136] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388d0 [0246.136] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0246.136] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f968 [0246.136] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388c0 [0246.136] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238348 [0246.137] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f938 [0246.137] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f938 | out: hHeap=0x1f0000) returned 1 [0246.137] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238348 | out: hHeap=0x1f0000) returned 1 [0246.137] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388c0 | out: hHeap=0x1f0000) returned 1 [0246.137] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f968 | out: hHeap=0x1f0000) returned 1 [0246.137] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0246.137] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388d0 | out: hHeap=0x1f0000) returned 1 [0246.137] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2851a0 | out: hHeap=0x1f0000) returned 1 [0246.138] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0246.138] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214dd0 | out: hHeap=0x1f0000) returned 1 [0246.138] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239278 [0246.138] GetLastError () returned 0x0 [0246.138] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x2391d0 [0246.138] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0246.139] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0246.139] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0246.139] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0246.139] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0246.139] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0246.139] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x24ed40 [0246.139] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x284f90 [0246.139] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0246.139] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0246.140] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0246.140] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0246.140] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2854b8 [0246.140] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0246.140] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0246.140] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f768 [0246.140] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x266290 [0246.140] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2afa08 [0246.141] QueryPerformanceCounter (in: lpPerformanceCount=0x173dee0 | out: lpPerformanceCount=0x173dee0*=40350957084) returned 1 [0246.141] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173df20 | out: lpSystemTimeAsFileTime=0x173df20) [0246.141] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x2387f0 [0246.141] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0246.141] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f30 [0246.141] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f30 | out: hHeap=0x1f0000) returned 1 [0246.141] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0246.142] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0246.142] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e30 [0246.142] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e30 | out: hHeap=0x1f0000) returned 1 [0246.142] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0246.142] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387f0 | out: hHeap=0x1f0000) returned 1 [0246.142] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0246.142] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238da8 [0246.142] GetLastError () returned 0x0 [0246.143] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0246.143] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0246.143] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0246.143] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2380f0 [0246.143] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238000 [0246.143] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0246.143] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0246.143] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238320 [0246.144] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0246.144] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x222ee8 [0246.144] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0246.144] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0246.144] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0246.144] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0246.144] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0246.144] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238078 [0246.144] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2383e8 [0246.145] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0246.145] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0246.145] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0246.145] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0246.145] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x234b90 [0246.145] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b90 | out: hHeap=0x1f0000) returned 1 [0246.145] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0246.145] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0246.145] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f938 [0246.146] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228b00 [0246.146] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238118 [0246.146] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238168 [0246.146] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238348 [0246.146] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238078 [0246.146] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0246.146] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0246.146] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0246.146] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2380a0 [0246.147] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238370 [0246.148] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0246.148] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0246.148] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0246.148] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2067d8 [0246.148] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x2a9c88 [0246.148] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a9c88 | out: hHeap=0x1f0000) returned 1 [0246.148] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2067d8 | out: hHeap=0x1f0000) returned 1 [0246.148] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0246.148] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0246.148] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0246.149] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0246.149] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204df0 [0246.149] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0246.149] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0246.149] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0246.149] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abd98 [0246.149] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0246.149] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0246.149] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238348 | out: hHeap=0x1f0000) returned 1 [0246.150] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228b00 | out: hHeap=0x1f0000) returned 1 [0246.150] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0246.150] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204df0 | out: hHeap=0x1f0000) returned 1 [0246.150] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f938 | out: hHeap=0x1f0000) returned 1 [0246.150] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0246.150] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac110 [0246.150] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac110 | out: hHeap=0x1f0000) returned 1 [0246.150] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ee8 | out: hHeap=0x1f0000) returned 1 [0246.150] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0246.150] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0246.150] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0246.150] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0246.151] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380f0 | out: hHeap=0x1f0000) returned 1 [0246.151] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0246.151] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0246.151] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac6d8 [0246.151] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aba20 [0246.151] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac6d8 | out: hHeap=0x1f0000) returned 1 [0246.151] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aba20 | out: hHeap=0x1f0000) returned 1 [0246.151] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abd98 | out: hHeap=0x1f0000) returned 1 [0246.151] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0246.151] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2854b8 | out: hHeap=0x1f0000) returned 1 [0246.151] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24ed40 | out: hHeap=0x1f0000) returned 1 [0246.151] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x2af5a8 [0246.152] GetLastError () returned 0x0 [0246.152] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387f0 [0246.152] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238870 [0246.153] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1045\\LocalizedData.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1045\\localizeddata.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e290, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0246.153] GetFileType (hFile=0x1c0) returned 0x1 [0246.154] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x292ff8 [0246.154] SetFilePointerEx (in: hFile=0x1c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e218 | out: lpNewFilePointer=0x0) returned 1 [0246.154] GetLastError () returned 0xb7 [0246.154] CloseHandle (hObject=0x1c0) returned 1 [0246.155] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238870 | out: hHeap=0x1f0000) returned 1 [0246.155] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387f0 | out: hHeap=0x1f0000) returned 1 [0246.155] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x284f90 | out: hHeap=0x1f0000) returned 1 [0246.155] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285e00 | out: hHeap=0x1f0000) returned 1 [0246.155] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0246.155] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c10 | out: hHeap=0x1f0000) returned 1 [0246.155] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a90 | out: hHeap=0x1f0000) returned 1 [0246.155] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f920 | out: hHeap=0x1f0000) returned 1 [0246.156] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0246.156] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2af5a8 | out: hHeap=0x1f0000) returned 1 [0246.156] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0246.156] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0246.156] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x266290 | out: hHeap=0x1f0000) returned 1 [0246.156] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2afa08 | out: hHeap=0x1f0000) returned 1 [0246.156] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238d70 | out: hHeap=0x1f0000) returned 1 [0246.156] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238990 | out: hHeap=0x1f0000) returned 1 [0246.156] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f9b0 | out: hHeap=0x1f0000) returned 1 [0246.156] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0246.156] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389b0 | out: hHeap=0x1f0000) returned 1 [0246.156] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f908 | out: hHeap=0x1f0000) returned 1 [0246.157] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0246.157] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238820 | out: hHeap=0x1f0000) returned 1 [0246.157] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285ae8 | out: hHeap=0x1f0000) returned 1 [0246.157] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0246.157] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a28 | out: hHeap=0x1f0000) returned 1 [0246.157] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228638 | out: hHeap=0x1f0000) returned 1 [0246.157] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0246.157] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0246.157] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228518 | out: hHeap=0x1f0000) returned 1 [0246.158] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238840 | out: hHeap=0x1f0000) returned 1 [0246.158] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387e0 | out: hHeap=0x1f0000) returned 1 [0246.158] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x290fe8 | out: hHeap=0x1f0000) returned 1 [0246.158] CloseHandle (hObject=0x1d8) returned 1 [0246.159] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238930 | out: hHeap=0x1f0000) returned 1 [0246.159] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238920 | out: hHeap=0x1f0000) returned 1 [0246.159] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2370e0 | out: hHeap=0x1f0000) returned 1 [0246.159] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24ce10 | out: hHeap=0x1f0000) returned 1 [0246.159] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f6f8 | out: hHeap=0x1f0000) returned 1 [0246.159] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204dd0 | out: hHeap=0x1f0000) returned 1 [0246.159] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x291ff0 | out: hHeap=0x1f0000) returned 1 [0246.159] CloseHandle (hObject=0x1e8) returned 1 [0246.160] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238910 | out: hHeap=0x1f0000) returned 1 [0246.160] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238900 | out: hHeap=0x1f0000) returned 1 [0246.160] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad9d0 | out: hHeap=0x1f0000) returned 1 [0246.160] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f10 | out: hHeap=0x1f0000) returned 1 [0246.160] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21b438 | out: hHeap=0x1f0000) returned 1 [0246.160] CloseHandle (hObject=0x1fc) returned 1 [0246.161] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238980 | out: hHeap=0x1f0000) returned 1 [0246.161] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238970 | out: hHeap=0x1f0000) returned 1 [0246.161] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2adbf8 | out: hHeap=0x1f0000) returned 1 [0246.161] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388e0 | out: hHeap=0x1f0000) returned 1 [0246.161] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389c0 | out: hHeap=0x1f0000) returned 1 [0246.161] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238800 | out: hHeap=0x1f0000) returned 1 [0246.161] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238810 | out: hHeap=0x1f0000) returned 1 [0246.161] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2af260 | out: hHeap=0x1f0000) returned 1 [0246.161] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x269ba8 | out: hHeap=0x1f0000) returned 1 [0246.161] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2af490 | out: hHeap=0x1f0000) returned 1 [0246.162] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206628 | out: hHeap=0x1f0000) returned 1 [0246.162] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f998 | out: hHeap=0x1f0000) returned 1 [0246.162] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f9c8 | out: hHeap=0x1f0000) returned 1 [0246.162] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233158 | out: hHeap=0x1f0000) returned 1 [0246.162] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2688a0 | out: hHeap=0x1f0000) returned 1 [0246.162] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2af148 | out: hHeap=0x1f0000) returned 1 [0246.162] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c58 | out: hHeap=0x1f0000) returned 1 [0246.162] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2150a8 | out: hHeap=0x1f0000) returned 1 [0246.162] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261ff0 | out: hHeap=0x1f0000) returned 1 [0246.533] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228bd8 | out: hHeap=0x1f0000) returned 1 [0246.533] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0246.534] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1045\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1045\\localizeddata.xml")) returned 1 [0246.536] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0246.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c90 [0246.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228b00 [0246.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214f08 [0246.536] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228b00 | out: hHeap=0x1f0000) returned 1 [0246.536] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c30 | out: hHeap=0x1f0000) returned 1 [0246.536] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c90 | out: hHeap=0x1f0000) returned 1 [0246.537] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1045\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1045\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0246.538] GetFileType (hFile=0x224) returned 0x1 [0246.538] CloseHandle (hObject=0x224) returned 1 [0246.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214fd8 [0246.539] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1045\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1045\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x173eb6c | out: lpFileInformation=0x173eb6c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758)) returned 1 [0246.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214fd8 | out: hHeap=0x1f0000) returned 1 [0246.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d68 [0246.539] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1045\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1045\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x173eb7c | out: lpFileInformation=0x173eb7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758)) returned 1 [0246.540] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d68 | out: hHeap=0x1f0000) returned 1 [0246.540] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214fd8 [0246.540] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214fd8 | out: hHeap=0x1f0000) returned 1 [0246.540] GetLastError () returned 0x0 [0246.540] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238348 [0246.541] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228c68 [0246.541] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22ee88 [0246.541] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2150a8 [0246.541] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c20 [0246.541] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0246.541] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x212f98) returned 1 [0246.542] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238280 | out: pbBuffer=0x238280) returned 1 [0246.543] CryptReleaseContext (hProv=0x212f98, dwFlags=0x0) returned 1 [0246.543] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0246.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x2595a0 [0246.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x232ba8 [0246.543] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=40391217838) returned 1 [0246.543] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0246.544] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=40391273328) returned 1 [0246.544] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0246.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239160 [0246.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x252370 [0246.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2338c8 [0246.545] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x2ab708 [0246.545] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210198 [0246.545] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206628 [0246.545] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0246.545] GetLastError () returned 0x0 [0246.545] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220490 [0246.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad7a8 [0246.546] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220490 | out: hHeap=0x1f0000) returned 1 [0246.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x106) returned 0x233468 [0246.546] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad7a8 | out: hHeap=0x1f0000) returned 1 [0246.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388c0 [0246.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238840 [0246.547] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1045\\SetupResources.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1045\\setupresources.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e230, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0246.548] GetFileType (hFile=0x224) returned 0x1 [0246.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238970 [0246.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238980 [0246.550] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1045\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1045\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0246.550] GetFileType (hFile=0x210) returned 0x1 [0246.551] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cb0 [0246.551] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f30 [0246.551] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad2a0 [0246.551] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388d0 [0246.552] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238930 [0246.553] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1045\\SetupResources.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1045\\setupresources.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0246.554] GetFileType (hFile=0x200) returned 0x1 [0246.554] GetLastError () returned 0xb7 [0246.555] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe4) returned 0x21b708 [0246.555] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e90 [0246.555] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e70 [0246.555] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204dd0 [0246.555] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2adcb0 [0246.555] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238900 [0246.556] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238860 [0246.557] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1045\\SetupResources.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1045\\setupresources.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0246.557] GetFileType (hFile=0x1b0) returned 0x1 [0246.558] GetLastError () returned 0xb7 [0246.558] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bd0 [0246.558] GetLastError () returned 0xb7 [0246.558] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e30 [0246.558] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204dd0 [0246.559] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ef0 [0246.559] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb8) returned 0x2376e0 [0246.559] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238880 [0246.559] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387e0 [0246.560] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1045\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1045\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1a4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0246.561] GetFileType (hFile=0x1d4) returned 0x1 [0246.561] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28ffe0 [0246.561] ReadFile (in: hFile=0x1d4, lpBuffer=0x28ffe0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e100, lpOverlapped=0x0 | out: lpBuffer=0x28ffe0*, lpNumberOfBytesRead=0x173e100*=0x1000, lpOverlapped=0x0) returned 1 [0246.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24add0 [0246.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x292ff8 [0246.565] GetLastError () returned 0x0 [0246.792] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210210 [0246.793] GetLastError () returned 0x0 [0246.793] CloseHandle (hObject=0x224) returned 1 [0246.794] CloseHandle (hObject=0x210) returned 1 [0246.795] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238870 [0246.795] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238920 [0246.913] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1045\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1045\\setupresources.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0246.915] GetFileType (hFile=0x210) returned 0x1 [0246.916] GetLastError () returned 0xb7 [0246.917] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x290fe8 [0246.917] GetLastError () returned 0xb7 [0246.919] CloseHandle (hObject=0x210) returned 1 [0246.919] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1045\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1045\\setupresources.dll")) returned 0 [0246.920] GetLastError () returned 0x20 [0246.920] GetLastError () returned 0x20 [0246.920] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228bd8 [0246.920] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2383e8 [0246.920] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238398 [0246.920] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x228518 [0246.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c90 [0246.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bd0 [0246.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x238960 [0246.921] GetLastError () returned 0x20 [0246.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238f68 [0246.921] GetLastError () returned 0x20 [0246.922] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239278 [0246.922] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2149c0 [0246.922] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238140 [0246.922] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2858d8 [0246.922] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238990 [0246.922] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0246.922] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff28 [0246.923] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389b0 [0246.923] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0246.923] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff70 [0246.923] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2382f8 [0246.923] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285bf0 [0246.923] GetLastError () returned 0x20 [0246.924] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238b20 [0246.924] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238b90 [0246.924] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b80 [0246.924] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b90 | out: hHeap=0x1f0000) returned 1 [0246.924] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a00 [0246.924] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b80 | out: hHeap=0x1f0000) returned 1 [0246.925] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b20 | out: hHeap=0x1f0000) returned 1 [0246.925] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ac0 [0246.925] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x20ffa0 [0246.925] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ac0 | out: hHeap=0x1f0000) returned 1 [0246.925] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x20ffb8 [0246.925] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffa0 | out: hHeap=0x1f0000) returned 1 [0246.925] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a00 | out: hHeap=0x1f0000) returned 1 [0246.926] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x20ffa0 [0246.926] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffd0 [0246.926] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffa0 | out: hHeap=0x1f0000) returned 1 [0246.926] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210078 [0246.926] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffd0 | out: hHeap=0x1f0000) returned 1 [0246.926] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffb8 | out: hHeap=0x1f0000) returned 1 [0246.927] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2100a8 [0246.927] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204e70 [0246.927] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2100a8 | out: hHeap=0x1f0000) returned 1 [0246.927] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e50 [0246.927] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e70 | out: hHeap=0x1f0000) returned 1 [0246.927] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210078 | out: hHeap=0x1f0000) returned 1 [0246.927] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204df0 [0246.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238000 [0246.928] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204df0 | out: hHeap=0x1f0000) returned 1 [0246.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204d70 [0246.929] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0246.929] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e50 | out: hHeap=0x1f0000) returned 1 [0246.929] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204e50 [0246.929] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x2067d8 [0246.929] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e50 | out: hHeap=0x1f0000) returned 1 [0246.929] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238000 [0246.930] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2067d8 | out: hHeap=0x1f0000) returned 1 [0246.930] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d70 | out: hHeap=0x1f0000) returned 1 [0246.930] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a40 [0246.930] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x20ffa0 [0246.930] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a40 | out: hHeap=0x1f0000) returned 1 [0246.930] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffb8 [0246.930] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffa0 | out: hHeap=0x1f0000) returned 1 [0246.931] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204bb0 [0246.931] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffb8 | out: hHeap=0x1f0000) returned 1 [0246.931] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206838 [0246.931] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bb0 | out: hHeap=0x1f0000) returned 1 [0246.931] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206838 | out: hHeap=0x1f0000) returned 1 [0246.931] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0246.932] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0246.932] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aa230 [0246.932] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2858d8 | out: hHeap=0x1f0000) returned 1 [0246.932] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0246.932] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239160 [0246.932] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0246.932] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x213460) returned 1 [0246.934] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2380a0 | out: pbBuffer=0x2380a0) returned 1 [0246.934] CryptReleaseContext (hProv=0x213460, dwFlags=0x0) returned 1 [0246.934] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0246.934] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2380a0 [0246.934] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238280 [0246.934] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239278 [0246.935] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0246.935] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a9450 [0246.935] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239278 | out: hHeap=0x1f0000) returned 1 [0246.935] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8dc8 [0246.935] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffa0 [0246.935] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x214b60 [0246.935] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2382a8 [0246.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2857d0 [0246.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cd0 [0246.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214dd0 [0246.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2383e8 [0246.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285cf8 [0246.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b80 [0246.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0246.937] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffb8 [0246.937] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b50 [0246.937] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0246.937] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210078 [0246.937] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210078 | out: hHeap=0x1f0000) returned 1 [0246.937] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0246.937] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b50 | out: hHeap=0x1f0000) returned 1 [0246.938] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffb8 | out: hHeap=0x1f0000) returned 1 [0246.938] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0246.938] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b80 | out: hHeap=0x1f0000) returned 1 [0246.938] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285cf8 | out: hHeap=0x1f0000) returned 1 [0246.938] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0246.938] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214dd0 | out: hHeap=0x1f0000) returned 1 [0246.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239010 [0246.939] GetLastError () returned 0x0 [0246.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238ec0 [0246.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aab70 [0246.939] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aab70 | out: hHeap=0x1f0000) returned 1 [0246.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a98f0 [0246.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aa920 [0246.940] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a98f0 | out: hHeap=0x1f0000) returned 1 [0246.940] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aa920 | out: hHeap=0x1f0000) returned 1 [0246.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x24e7c0 [0246.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285098 [0246.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aaa48 [0246.940] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aaa48 | out: hHeap=0x1f0000) returned 1 [0246.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a90d8 [0246.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a90d8 | out: hHeap=0x1f0000) returned 1 [0246.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285cf8 [0246.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aab70 [0246.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aab70 | out: hHeap=0x1f0000) returned 1 [0246.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f8f8 [0246.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x251068 [0246.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x233008 [0246.942] QueryPerformanceCounter (in: lpPerformanceCount=0x173dee0 | out: lpPerformanceCount=0x173dee0*=40431070066) returned 1 [0246.942] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173df20 | out: lpSystemTimeAsFileTime=0x173df20) [0246.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238b00 [0246.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0246.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e50 [0246.943] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e50 | out: hHeap=0x1f0000) returned 1 [0246.943] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0246.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0246.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204b90 [0246.943] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204b90 | out: hHeap=0x1f0000) returned 1 [0246.944] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0246.945] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b00 | out: hHeap=0x1f0000) returned 1 [0246.945] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0246.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238e88 [0246.945] GetLastError () returned 0x0 [0246.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aa6d0 [0246.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a9d90 [0246.946] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a9b40 [0246.946] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238190 [0246.946] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238000 [0246.946] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aa920 [0246.946] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a9a18 [0246.946] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2383e8 [0246.946] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aa7f8 [0246.947] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x222ee8 [0246.947] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a98f0 [0246.947] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0246.947] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a98f0 | out: hHeap=0x1f0000) returned 1 [0246.947] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0246.947] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0246.947] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238140 [0246.948] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2380a0 [0246.948] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0246.948] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a90d8 [0246.948] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0246.948] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0246.948] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x234b90 [0246.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b90 | out: hHeap=0x1f0000) returned 1 [0246.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0246.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0246.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x20ffb8 [0246.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228cb0 [0246.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381b8 [0246.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238140 [0246.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2380a0 [0246.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238168 [0246.950] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0246.950] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0246.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0246.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238140 [0246.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381b8 [0246.950] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0246.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a9eb8 [0246.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0246.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2067d8 [0246.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x2b3dd8 [0246.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b3dd8 | out: hHeap=0x1f0000) returned 1 [0246.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2067d8 | out: hHeap=0x1f0000) returned 1 [0246.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0246.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a9c68 [0246.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a9eb8 | out: hHeap=0x1f0000) returned 1 [0246.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0246.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204e50 [0246.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a97c8 [0246.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aa358 [0246.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0246.953] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a98f0 [0246.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aa358 | out: hHeap=0x1f0000) returned 1 [0246.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0246.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0246.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228cb0 | out: hHeap=0x1f0000) returned 1 [0246.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a97c8 | out: hHeap=0x1f0000) returned 1 [0246.954] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e50 | out: hHeap=0x1f0000) returned 1 [0246.954] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffb8 | out: hHeap=0x1f0000) returned 1 [0246.954] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a90d8 | out: hHeap=0x1f0000) returned 1 [0246.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a9fe0 [0246.954] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a9fe0 | out: hHeap=0x1f0000) returned 1 [0246.954] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ee8 | out: hHeap=0x1f0000) returned 1 [0246.954] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aa7f8 | out: hHeap=0x1f0000) returned 1 [0246.954] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a9c68 | out: hHeap=0x1f0000) returned 1 [0246.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a9a18 | out: hHeap=0x1f0000) returned 1 [0246.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aa920 | out: hHeap=0x1f0000) returned 1 [0246.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0246.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a9b40 | out: hHeap=0x1f0000) returned 1 [0246.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a9d90 | out: hHeap=0x1f0000) returned 1 [0246.955] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a9578 [0246.955] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aac98 [0246.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a9578 | out: hHeap=0x1f0000) returned 1 [0246.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aac98 | out: hHeap=0x1f0000) returned 1 [0246.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a98f0 | out: hHeap=0x1f0000) returned 1 [0246.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aa6d0 | out: hHeap=0x1f0000) returned 1 [0246.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285cf8 | out: hHeap=0x1f0000) returned 1 [0246.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24e7c0 | out: hHeap=0x1f0000) returned 1 [0246.956] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x232dd8 [0246.956] GetLastError () returned 0x0 [0246.957] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b10 [0246.957] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b20 [0246.958] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1045\\SetupResources.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1045\\setupresources.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e290, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0246.958] GetFileType (hFile=0x210) returned 0x1 [0247.398] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x294000 [0247.398] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e218 | out: lpNewFilePointer=0x0) returned 1 [0247.398] GetLastError () returned 0xb7 [0247.399] CloseHandle (hObject=0x210) returned 1 [0247.399] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b20 | out: hHeap=0x1f0000) returned 1 [0247.399] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b10 | out: hHeap=0x1f0000) returned 1 [0247.399] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285098 | out: hHeap=0x1f0000) returned 1 [0247.399] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2857d0 | out: hHeap=0x1f0000) returned 1 [0247.400] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0247.400] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cd0 | out: hHeap=0x1f0000) returned 1 [0247.400] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214b60 | out: hHeap=0x1f0000) returned 1 [0247.400] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffa0 | out: hHeap=0x1f0000) returned 1 [0247.400] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8dc8 | out: hHeap=0x1f0000) returned 1 [0247.400] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232dd8 | out: hHeap=0x1f0000) returned 1 [0247.400] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0247.400] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a9450 | out: hHeap=0x1f0000) returned 1 [0247.400] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x251068 | out: hHeap=0x1f0000) returned 1 [0247.400] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233008 | out: hHeap=0x1f0000) returned 1 [0247.401] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239160 | out: hHeap=0x1f0000) returned 1 [0247.401] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238960 | out: hHeap=0x1f0000) returned 1 [0247.401] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff70 | out: hHeap=0x1f0000) returned 1 [0247.401] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0247.401] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389b0 | out: hHeap=0x1f0000) returned 1 [0247.401] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff28 | out: hHeap=0x1f0000) returned 1 [0247.401] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0247.401] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238990 | out: hHeap=0x1f0000) returned 1 [0247.401] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285bf0 | out: hHeap=0x1f0000) returned 1 [0247.402] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0247.402] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2149c0 | out: hHeap=0x1f0000) returned 1 [0247.402] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228518 | out: hHeap=0x1f0000) returned 1 [0247.402] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0247.402] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aa230 | out: hHeap=0x1f0000) returned 1 [0247.402] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228bd8 | out: hHeap=0x1f0000) returned 1 [0247.402] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238920 | out: hHeap=0x1f0000) returned 1 [0247.402] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238870 | out: hHeap=0x1f0000) returned 1 [0247.403] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28ffe0 | out: hHeap=0x1f0000) returned 1 [0247.403] CloseHandle (hObject=0x1d4) returned 1 [0247.404] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387e0 | out: hHeap=0x1f0000) returned 1 [0247.404] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238880 | out: hHeap=0x1f0000) returned 1 [0247.404] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2376e0 | out: hHeap=0x1f0000) returned 1 [0247.404] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24add0 | out: hHeap=0x1f0000) returned 1 [0247.404] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0247.404] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e30 | out: hHeap=0x1f0000) returned 1 [0247.404] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x292ff8 | out: hHeap=0x1f0000) returned 1 [0247.404] CloseHandle (hObject=0x1b0) returned 1 [0247.405] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238860 | out: hHeap=0x1f0000) returned 1 [0247.405] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238900 | out: hHeap=0x1f0000) returned 1 [0247.405] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2adcb0 | out: hHeap=0x1f0000) returned 1 [0247.405] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e90 | out: hHeap=0x1f0000) returned 1 [0247.405] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21b708 | out: hHeap=0x1f0000) returned 1 [0247.406] CloseHandle (hObject=0x200) returned 1 [0247.406] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238930 | out: hHeap=0x1f0000) returned 1 [0247.406] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388d0 | out: hHeap=0x1f0000) returned 1 [0247.406] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad2a0 | out: hHeap=0x1f0000) returned 1 [0247.407] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238980 | out: hHeap=0x1f0000) returned 1 [0247.407] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238970 | out: hHeap=0x1f0000) returned 1 [0247.407] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238840 | out: hHeap=0x1f0000) returned 1 [0247.407] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388c0 | out: hHeap=0x1f0000) returned 1 [0247.407] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233468 | out: hHeap=0x1f0000) returned 1 [0247.407] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x252370 | out: hHeap=0x1f0000) returned 1 [0247.407] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2338c8 | out: hHeap=0x1f0000) returned 1 [0247.407] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206628 | out: hHeap=0x1f0000) returned 1 [0247.407] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0247.408] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0247.408] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab708 | out: hHeap=0x1f0000) returned 1 [0247.408] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2595a0 | out: hHeap=0x1f0000) returned 1 [0247.408] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232ba8 | out: hHeap=0x1f0000) returned 1 [0247.408] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c20 | out: hHeap=0x1f0000) returned 1 [0247.408] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2150a8 | out: hHeap=0x1f0000) returned 1 [0247.408] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ee88 | out: hHeap=0x1f0000) returned 1 [0247.408] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228c68 | out: hHeap=0x1f0000) returned 1 [0247.408] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238348 | out: hHeap=0x1f0000) returned 1 [0247.409] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1045\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1045\\setupresources.dll")) returned 1 [0247.411] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0247.411] FindClose (in: hFindFile=0x24e780 | out: hFindFile=0x24e780) returned 1 [0247.412] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f08 | out: hHeap=0x1f0000) returned 1 [0247.412] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263178 | out: hHeap=0x1f0000) returned 1 [0247.412] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0247.412] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2288c0 | out: hHeap=0x1f0000) returned 1 [0247.412] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2287a0 [0247.412] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0247.413] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22ee88 [0247.413] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228b00 [0247.414] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1046\\*", lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e900 [0247.414] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228440 [0247.414] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228b00 | out: hHeap=0x1f0000) returned 1 [0247.414] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0247.414] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0247.415] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228908 [0247.415] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228440 | out: hHeap=0x1f0000) returned 1 [0247.415] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0247.415] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0247.415] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe63, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0247.415] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0247.415] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228b00 [0247.416] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x214d68 [0247.416] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228b00 | out: hHeap=0x1f0000) returned 1 [0247.416] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228908 | out: hHeap=0x1f0000) returned 1 [0247.416] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0247.417] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1046\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1046\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0247.417] GetFileType (hFile=0x200) returned 0x1 [0247.418] CloseHandle (hObject=0x200) returned 1 [0247.418] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8dc8 [0247.418] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1046\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1046\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x173eb6c | out: lpFileInformation=0x173eb6c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe63)) returned 1 [0247.418] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8dc8 | out: hHeap=0x1f0000) returned 1 [0247.419] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8dc8 [0247.419] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1046\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1046\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x173eb7c | out: lpFileInformation=0x173eb7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe63)) returned 1 [0247.419] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8dc8 | out: hHeap=0x1f0000) returned 1 [0247.419] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8d18 [0247.419] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0247.419] GetLastError () returned 0x0 [0247.420] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0247.420] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228638 [0247.420] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22db68 [0247.420] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8d18 [0247.420] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c58 [0247.420] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0247.420] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x212ad0) returned 1 [0247.421] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2382a8 | out: pbBuffer=0x2382a8) returned 1 [0247.422] CryptReleaseContext (hProv=0x212ad0, dwFlags=0x0) returned 1 [0247.422] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0247.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x258298 [0247.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2337b0 [0247.422] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=40479104281) returned 1 [0247.422] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0247.423] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=40479147564) returned 1 [0247.423] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0247.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x2391d0 [0247.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x252370 [0247.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2338c8 [0247.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x2ab228 [0247.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0247.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2068c8 [0247.424] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0247.424] GetLastError () returned 0x0 [0247.424] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214dd0 [0247.424] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a818 [0247.424] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214dd0 | out: hHeap=0x1f0000) returned 1 [0247.424] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xee) returned 0x2b1a80 [0247.425] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a818 | out: hHeap=0x1f0000) returned 1 [0247.425] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238900 [0247.425] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238990 [0247.426] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1046\\eula.rtf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1046\\eula.rtf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e230, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0247.440] GetFileType (hFile=0x200) returned 0x1 [0247.440] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238860 [0247.441] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238970 [0247.441] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1046\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1046\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0247.442] GetFileType (hFile=0x1b0) returned 0x1 [0247.443] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e30 [0247.443] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204dd0 [0247.443] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2adcb0 [0247.443] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238920 [0247.443] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238880 [0247.905] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1046\\eula.rtf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1046\\eula.rtf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0247.912] GetFileType (hFile=0x1d4) returned 0x1 [0247.912] GetLastError () returned 0xb7 [0247.913] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe4) returned 0x21b168 [0247.913] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204db0 [0247.913] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cd0 [0247.913] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ef0 [0247.913] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad130 [0247.914] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238850 [0247.914] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388f0 [0247.915] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1046\\eula.rtf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1046\\eula.rtf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0247.916] GetFileType (hFile=0x210) returned 0x1 [0247.916] GetLastError () returned 0xb7 [0247.917] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e70 [0247.917] GetLastError () returned 0xb7 [0247.917] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c10 [0247.917] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ef0 [0247.917] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f10 [0247.918] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb8) returned 0x237920 [0247.918] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387f0 [0247.918] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238870 [0247.919] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1046\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1046\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1a4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0247.920] GetFileType (hFile=0x1d8) returned 0x1 [0247.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28dfd0 [0247.921] ReadFile (in: hFile=0x1d8, lpBuffer=0x28dfd0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e100, lpOverlapped=0x0 | out: lpBuffer=0x28dfd0*, lpNumberOfBytesRead=0x173e100*=0xe63, lpOverlapped=0x0) returned 1 [0247.924] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24b5e0 [0247.924] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x294000 [0247.924] GetLastError () returned 0x0 [0247.925] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210240 [0247.925] GetLastError () returned 0x0 [0247.927] CloseHandle (hObject=0x200) returned 1 [0247.928] CloseHandle (hObject=0x1b0) returned 1 [0247.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238890 [0247.929] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238930 [0247.930] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1046\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1046\\eula.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0247.932] GetFileType (hFile=0x1b0) returned 0x1 [0247.933] GetLastError () returned 0xb7 [0247.933] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x292ff8 [0247.933] GetLastError () returned 0xb7 [0247.935] CloseHandle (hObject=0x1b0) returned 1 [0247.935] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1046\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1046\\eula.rtf")) returned 0 [0247.935] GetLastError () returned 0x20 [0247.935] GetLastError () returned 0x20 [0247.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228680 [0247.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238410 [0247.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238140 [0247.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x228b00 [0247.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e90 [0247.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e70 [0247.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x2389c0 [0247.936] GetLastError () returned 0x20 [0247.937] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239208 [0247.937] GetLastError () returned 0x20 [0247.937] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238c90 [0247.937] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214dd0 [0247.937] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238168 [0247.937] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285bf0 [0247.937] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389b0 [0247.937] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0247.937] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210210 [0247.937] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238940 [0247.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0247.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210258 [0247.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2382d0 [0247.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285ae8 [0247.938] GetLastError () returned 0x20 [0247.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x2388c0 [0247.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238950 [0247.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388a0 [0247.939] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238950 | out: hHeap=0x1f0000) returned 1 [0247.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387e0 [0247.939] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388a0 | out: hHeap=0x1f0000) returned 1 [0247.939] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388c0 | out: hHeap=0x1f0000) returned 1 [0247.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388a0 [0247.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210198 [0247.939] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388a0 | out: hHeap=0x1f0000) returned 1 [0247.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101b0 [0247.940] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0247.940] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387e0 | out: hHeap=0x1f0000) returned 1 [0247.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210198 [0247.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2100a8 [0247.940] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0247.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210198 [0247.940] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2100a8 | out: hHeap=0x1f0000) returned 1 [0247.940] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0247.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101b0 [0247.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204bf0 [0247.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0247.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cf0 [0247.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bf0 | out: hHeap=0x1f0000) returned 1 [0247.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0247.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d10 [0247.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238320 [0247.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d10 | out: hHeap=0x1f0000) returned 1 [0247.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204e30 [0247.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0247.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cf0 | out: hHeap=0x1f0000) returned 1 [0247.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204cf0 [0247.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206868 [0247.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cf0 | out: hHeap=0x1f0000) returned 1 [0247.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x237fd8 [0247.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206868 | out: hHeap=0x1f0000) returned 1 [0247.943] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e30 | out: hHeap=0x1f0000) returned 1 [0247.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388c0 [0247.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210198 [0247.943] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388c0 | out: hHeap=0x1f0000) returned 1 [0247.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101b0 [0247.943] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0247.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204c90 [0247.943] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0247.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x2067d8 [0247.944] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c90 | out: hHeap=0x1f0000) returned 1 [0247.944] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2067d8 | out: hHeap=0x1f0000) returned 1 [0247.944] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0247.944] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0247.944] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0247.944] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285bf0 | out: hHeap=0x1f0000) returned 1 [0247.944] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0247.944] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238da8 [0247.944] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380f0 [0247.945] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x213350) returned 1 [0247.946] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2380f0 | out: pbBuffer=0x2380f0) returned 1 [0247.946] CryptReleaseContext (hProv=0x213350, dwFlags=0x0) returned 1 [0247.946] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380f0 | out: hHeap=0x1f0000) returned 1 [0247.946] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238078 [0247.946] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2383e8 [0247.946] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2390f0 [0247.946] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0247.947] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0248.417] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2390f0 | out: hHeap=0x1f0000) returned 1 [0248.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8dc8 [0248.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffd0 [0248.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x236468 [0248.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2381b8 [0248.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285cf8 [0248.418] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c50 [0248.418] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2364d0 [0248.418] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2382a8 [0248.418] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2851a0 [0248.418] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238810 [0248.418] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0248.418] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffa0 [0248.418] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238950 [0248.418] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0248.418] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2100a8 [0248.419] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2100a8 | out: hHeap=0x1f0000) returned 1 [0248.419] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0248.419] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238950 | out: hHeap=0x1f0000) returned 1 [0248.419] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffa0 | out: hHeap=0x1f0000) returned 1 [0248.419] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0248.419] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238810 | out: hHeap=0x1f0000) returned 1 [0248.419] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2851a0 | out: hHeap=0x1f0000) returned 1 [0248.419] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0248.420] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2364d0 | out: hHeap=0x1f0000) returned 1 [0248.420] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238f68 [0248.420] GetLastError () returned 0x0 [0248.420] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x2390f0 [0248.420] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0248.420] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0248.420] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0248.421] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0248.421] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0248.421] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0248.421] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x24eb00 [0248.421] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2857d0 [0248.421] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0248.421] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0248.421] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0248.421] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0248.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2851a0 [0248.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0248.422] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0248.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f9c0 [0248.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x24fd60 [0248.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x233580 [0248.422] QueryPerformanceCounter (in: lpPerformanceCount=0x173dee0 | out: lpPerformanceCount=0x173dee0*=40579242739) returned 1 [0248.424] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173df20 | out: lpSystemTimeAsFileTime=0x173df20) [0248.424] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x2388a0 [0248.424] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0248.424] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204dd0 [0248.424] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204dd0 | out: hHeap=0x1f0000) returned 1 [0248.425] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0248.425] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0248.425] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c70 [0248.425] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c70 | out: hHeap=0x1f0000) returned 1 [0248.425] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0248.425] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388a0 | out: hHeap=0x1f0000) returned 1 [0248.425] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0248.425] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238f68 [0248.425] GetLastError () returned 0x0 [0248.426] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0248.426] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0248.426] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0248.426] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2382a8 [0248.426] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2382f8 [0248.426] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0248.427] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0248.427] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238320 [0248.427] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0248.427] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x222ee8 [0248.427] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0248.427] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0248.427] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0248.427] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0248.427] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0248.427] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238348 [0248.428] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238578 [0248.428] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238348 | out: hHeap=0x1f0000) returned 1 [0248.428] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0248.428] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238578 | out: hHeap=0x1f0000) returned 1 [0248.428] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0248.428] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x234b90 [0248.428] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b90 | out: hHeap=0x1f0000) returned 1 [0248.428] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0248.428] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0248.428] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x20ff28 [0248.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228c68 [0248.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238578 [0248.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238640 [0248.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238528 [0248.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238758 [0248.429] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238640 | out: hHeap=0x1f0000) returned 1 [0248.429] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238578 | out: hHeap=0x1f0000) returned 1 [0248.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0248.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238500 [0248.430] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238690 [0248.430] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238500 | out: hHeap=0x1f0000) returned 1 [0248.430] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0248.430] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238690 | out: hHeap=0x1f0000) returned 1 [0248.430] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206928 [0248.430] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x2b4ef8 [0248.430] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b4ef8 | out: hHeap=0x1f0000) returned 1 [0248.430] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206928 | out: hHeap=0x1f0000) returned 1 [0248.430] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0248.430] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a8fb0 [0248.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0248.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0248.431] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204cb0 [0248.431] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aaa48 [0248.432] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aab70 [0248.432] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0248.432] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a9a18 [0248.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aab70 | out: hHeap=0x1f0000) returned 1 [0248.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238758 | out: hHeap=0x1f0000) returned 1 [0248.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238528 | out: hHeap=0x1f0000) returned 1 [0248.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228c68 | out: hHeap=0x1f0000) returned 1 [0248.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aaa48 | out: hHeap=0x1f0000) returned 1 [0248.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cb0 | out: hHeap=0x1f0000) returned 1 [0248.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff28 | out: hHeap=0x1f0000) returned 1 [0248.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0248.433] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a90d8 [0248.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a90d8 | out: hHeap=0x1f0000) returned 1 [0248.434] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ee8 | out: hHeap=0x1f0000) returned 1 [0248.434] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0248.434] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8fb0 | out: hHeap=0x1f0000) returned 1 [0248.434] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0248.434] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0248.434] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0248.434] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0248.434] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0248.434] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a8fb0 [0248.435] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aa108 [0248.435] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8fb0 | out: hHeap=0x1f0000) returned 1 [0248.435] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aa108 | out: hHeap=0x1f0000) returned 1 [0248.435] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a9a18 | out: hHeap=0x1f0000) returned 1 [0248.435] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0248.435] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2851a0 | out: hHeap=0x1f0000) returned 1 [0248.435] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24eb00 | out: hHeap=0x1f0000) returned 1 [0248.435] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x232ba8 [0248.435] GetLastError () returned 0x0 [0248.436] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238910 [0248.436] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388e0 [0248.437] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1046\\eula.rtf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1046\\eula.rtf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e290, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0248.437] GetFileType (hFile=0x1fc) returned 0x1 [0248.437] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x286f98 [0248.438] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e218 | out: lpNewFilePointer=0x0) returned 1 [0248.438] GetLastError () returned 0xb7 [0248.438] CloseHandle (hObject=0x1fc) returned 1 [0248.439] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388e0 | out: hHeap=0x1f0000) returned 1 [0248.439] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238910 | out: hHeap=0x1f0000) returned 1 [0248.439] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2857d0 | out: hHeap=0x1f0000) returned 1 [0248.439] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285cf8 | out: hHeap=0x1f0000) returned 1 [0248.439] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0248.440] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c50 | out: hHeap=0x1f0000) returned 1 [0248.440] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0248.440] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffd0 | out: hHeap=0x1f0000) returned 1 [0248.440] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8dc8 | out: hHeap=0x1f0000) returned 1 [0248.440] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232ba8 | out: hHeap=0x1f0000) returned 1 [0248.440] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0248.440] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0248.440] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24fd60 | out: hHeap=0x1f0000) returned 1 [0248.440] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233580 | out: hHeap=0x1f0000) returned 1 [0248.440] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238da8 | out: hHeap=0x1f0000) returned 1 [0248.441] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389c0 | out: hHeap=0x1f0000) returned 1 [0248.441] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0248.441] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0248.441] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238940 | out: hHeap=0x1f0000) returned 1 [0248.441] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0248.441] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0248.441] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389b0 | out: hHeap=0x1f0000) returned 1 [0248.441] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285ae8 | out: hHeap=0x1f0000) returned 1 [0248.441] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0248.442] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214dd0 | out: hHeap=0x1f0000) returned 1 [0248.442] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228b00 | out: hHeap=0x1f0000) returned 1 [0248.442] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0248.442] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0248.442] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228680 | out: hHeap=0x1f0000) returned 1 [0248.442] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238930 | out: hHeap=0x1f0000) returned 1 [0248.442] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238890 | out: hHeap=0x1f0000) returned 1 [0248.442] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28dfd0 | out: hHeap=0x1f0000) returned 1 [0248.443] CloseHandle (hObject=0x1d8) returned 1 [0248.443] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238870 | out: hHeap=0x1f0000) returned 1 [0248.443] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387f0 | out: hHeap=0x1f0000) returned 1 [0248.443] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237920 | out: hHeap=0x1f0000) returned 1 [0248.443] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24b5e0 | out: hHeap=0x1f0000) returned 1 [0248.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210240 | out: hHeap=0x1f0000) returned 1 [0248.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c10 | out: hHeap=0x1f0000) returned 1 [0248.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x294000 | out: hHeap=0x1f0000) returned 1 [0248.444] CloseHandle (hObject=0x210) returned 1 [0248.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388f0 | out: hHeap=0x1f0000) returned 1 [0248.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238850 | out: hHeap=0x1f0000) returned 1 [0248.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad130 | out: hHeap=0x1f0000) returned 1 [0248.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204db0 | out: hHeap=0x1f0000) returned 1 [0248.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21b168 | out: hHeap=0x1f0000) returned 1 [0248.445] CloseHandle (hObject=0x1d4) returned 1 [0248.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238880 | out: hHeap=0x1f0000) returned 1 [0248.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238920 | out: hHeap=0x1f0000) returned 1 [0248.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2adcb0 | out: hHeap=0x1f0000) returned 1 [0248.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238970 | out: hHeap=0x1f0000) returned 1 [0248.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238860 | out: hHeap=0x1f0000) returned 1 [0248.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238990 | out: hHeap=0x1f0000) returned 1 [0248.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238900 | out: hHeap=0x1f0000) returned 1 [0248.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b1a80 | out: hHeap=0x1f0000) returned 1 [0248.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x252370 | out: hHeap=0x1f0000) returned 1 [0248.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2338c8 | out: hHeap=0x1f0000) returned 1 [0248.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2068c8 | out: hHeap=0x1f0000) returned 1 [0248.447] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0248.447] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0248.447] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab228 | out: hHeap=0x1f0000) returned 1 [0248.447] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x258298 | out: hHeap=0x1f0000) returned 1 [0248.447] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2337b0 | out: hHeap=0x1f0000) returned 1 [0248.447] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c58 | out: hHeap=0x1f0000) returned 1 [0248.447] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0248.448] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22db68 | out: hHeap=0x1f0000) returned 1 [0248.448] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228638 | out: hHeap=0x1f0000) returned 1 [0248.448] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0248.448] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1046\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1046\\eula.rtf")) returned 1 [0248.449] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13b62, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0248.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238d00 [0248.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228758 [0248.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236538 [0248.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228758 | out: hHeap=0x1f0000) returned 1 [0248.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d68 | out: hHeap=0x1f0000) returned 1 [0248.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238d00 | out: hHeap=0x1f0000) returned 1 [0248.451] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1046\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1046\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0248.451] GetFileType (hFile=0x1d4) returned 0x1 [0248.452] CloseHandle (hObject=0x1d4) returned 1 [0248.452] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2364d0 [0248.452] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1046\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1046\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x173eb6c | out: lpFileInformation=0x173eb6c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13b62)) returned 1 [0248.452] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2364d0 | out: hHeap=0x1f0000) returned 1 [0248.453] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236468 [0248.453] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1046\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1046\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x173eb7c | out: lpFileInformation=0x173eb7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13b62)) returned 1 [0248.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0248.453] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2365a0 [0248.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2365a0 | out: hHeap=0x1f0000) returned 1 [0248.453] GetLastError () returned 0x0 [0248.453] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0248.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228758 [0248.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d9d0 [0248.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236468 [0248.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239010 [0248.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0248.454] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x212ad0) returned 1 [0248.455] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238280 | out: pbBuffer=0x238280) returned 1 [0248.455] CryptReleaseContext (hProv=0x212ad0, dwFlags=0x0) returned 1 [0248.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0248.456] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x255c88 [0248.456] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x233580 [0248.456] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=40582475212) returned 1 [0248.456] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0248.456] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=40582646898) returned 1 [0248.458] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0248.458] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238d70 [0248.458] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x258298 [0248.458] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x233698 [0248.458] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x2aba48 [0248.458] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210240 [0248.458] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206628 [0248.458] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210258 [0248.459] GetLastError () returned 0x0 [0248.459] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae390 [0248.459] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2adcb0 [0248.459] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae390 | out: hHeap=0x1f0000) returned 1 [0248.459] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x106) returned 0x232dd8 [0248.459] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2adcb0 | out: hHeap=0x1f0000) returned 1 [0248.459] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238930 [0248.460] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238900 [0248.461] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1046\\LocalizedData.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1046\\localizeddata.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e230, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0248.461] GetFileType (hFile=0x1d4) returned 0x1 [0248.462] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238920 [0248.462] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238880 [0249.051] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1046\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1046\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0249.052] GetFileType (hFile=0x1fc) returned 0x1 [0249.052] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c30 [0249.052] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0249.052] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad410 [0249.052] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b80 [0249.052] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a20 [0249.053] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1046\\LocalizedData.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1046\\localizeddata.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0249.053] GetFileType (hFile=0x1e8) returned 0x1 [0249.053] GetLastError () returned 0xb7 [0249.053] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe4) returned 0x21b708 [0249.054] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c70 [0249.054] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e90 [0249.054] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c10 [0249.054] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2adcb0 [0249.054] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b90 [0249.054] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ba0 [0249.055] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1046\\LocalizedData.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1046\\localizeddata.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0249.055] GetFileType (hFile=0x224) returned 0x1 [0249.056] GetLastError () returned 0xb7 [0249.056] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c90 [0249.056] GetLastError () returned 0xb7 [0249.057] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bd0 [0249.057] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c10 [0249.057] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0249.057] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb8) returned 0x237b60 [0249.057] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389e0 [0249.057] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238af0 [0249.058] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1046\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1046\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1a4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0249.058] GetFileType (hFile=0x1b0) returned 0x1 [0249.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28dfd0 [0249.059] ReadFile (in: hFile=0x1b0, lpBuffer=0x28dfd0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e100, lpOverlapped=0x0 | out: lpBuffer=0x28dfd0*, lpNumberOfBytesRead=0x173e100*=0x1000, lpOverlapped=0x0) returned 1 [0249.063] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24a9c8 [0249.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x286f98 [0249.064] GetLastError () returned 0x0 [0249.403] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2100a8 [0249.404] GetLastError () returned 0x0 [0249.404] CloseHandle (hObject=0x1d4) returned 1 [0249.405] CloseHandle (hObject=0x1fc) returned 1 [0249.405] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389f0 [0249.406] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a80 [0249.406] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1046\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1046\\localizeddata.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0249.408] GetFileType (hFile=0x1fc) returned 0x1 [0249.409] GetLastError () returned 0xb7 [0249.409] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x296010 [0249.409] GetLastError () returned 0xb7 [0249.411] CloseHandle (hObject=0x1fc) returned 1 [0249.411] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1046\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1046\\localizeddata.xml")) returned 0 [0249.412] GetLastError () returned 0x20 [0249.412] GetLastError () returned 0x20 [0249.412] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228cb0 [0249.412] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2384b0 [0249.412] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238078 [0249.412] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x228908 [0249.412] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cd0 [0249.412] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f10 [0249.413] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x238a00 [0249.413] GetLastError () returned 0x20 [0249.413] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238ec0 [0249.413] GetLastError () returned 0x20 [0249.413] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239048 [0249.413] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2364d0 [0249.413] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238370 [0249.413] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2859e0 [0249.413] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a30 [0249.414] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0249.414] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210018 [0249.414] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a40 [0249.414] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0249.414] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff28 [0249.414] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238118 [0249.414] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285bf0 [0249.414] GetLastError () returned 0x20 [0249.414] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238a90 [0249.414] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238aa0 [0249.415] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ab0 [0249.415] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238aa0 | out: hHeap=0x1f0000) returned 1 [0249.415] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238aa0 [0249.415] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ab0 | out: hHeap=0x1f0000) returned 1 [0249.415] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a90 | out: hHeap=0x1f0000) returned 1 [0249.415] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a90 [0249.415] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x20ffa0 [0249.415] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a90 | out: hHeap=0x1f0000) returned 1 [0249.415] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x20ffb8 [0249.415] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffa0 | out: hHeap=0x1f0000) returned 1 [0249.415] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238aa0 | out: hHeap=0x1f0000) returned 1 [0249.416] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x20ffd0 [0249.416] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffa0 [0249.416] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffd0 | out: hHeap=0x1f0000) returned 1 [0249.416] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210078 [0249.416] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffa0 | out: hHeap=0x1f0000) returned 1 [0249.416] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffb8 | out: hHeap=0x1f0000) returned 1 [0249.416] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffa0 [0249.416] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204e30 [0249.416] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffa0 | out: hHeap=0x1f0000) returned 1 [0249.416] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204b90 [0249.417] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e30 | out: hHeap=0x1f0000) returned 1 [0249.417] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210078 | out: hHeap=0x1f0000) returned 1 [0249.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0249.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2382a8 [0249.417] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d70 | out: hHeap=0x1f0000) returned 1 [0249.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204e90 [0249.417] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0249.417] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204b90 | out: hHeap=0x1f0000) returned 1 [0249.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204c90 [0249.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x2067d8 [0249.418] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c90 | out: hHeap=0x1f0000) returned 1 [0249.418] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238410 [0249.418] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2067d8 | out: hHeap=0x1f0000) returned 1 [0249.418] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e90 | out: hHeap=0x1f0000) returned 1 [0249.418] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b00 [0249.418] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x20ffa0 [0249.418] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b00 | out: hHeap=0x1f0000) returned 1 [0249.418] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffb8 [0249.418] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffa0 | out: hHeap=0x1f0000) returned 1 [0249.419] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204df0 [0249.419] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffb8 | out: hHeap=0x1f0000) returned 1 [0249.419] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206838 [0249.419] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204df0 | out: hHeap=0x1f0000) returned 1 [0249.419] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206838 | out: hHeap=0x1f0000) returned 1 [0249.419] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0249.419] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0249.419] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0249.419] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2859e0 | out: hHeap=0x1f0000) returned 1 [0249.420] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0249.420] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239160 [0249.420] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0249.420] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x2131b8) returned 1 [0249.421] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238280 | out: pbBuffer=0x238280) returned 1 [0249.421] CryptReleaseContext (hProv=0x2131b8, dwFlags=0x0) returned 1 [0249.421] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0249.421] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2384b0 [0249.421] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238140 [0249.421] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239198 [0249.422] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0249.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0249.422] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239198 | out: hHeap=0x1f0000) returned 1 [0249.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8dc8 [0249.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffa0 [0249.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x2365a0 [0249.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238410 [0249.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285cf8 [0249.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c90 [0249.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236608 [0249.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238168 [0249.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2858d8 [0249.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a90 [0249.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238348 [0249.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffb8 [0249.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238aa0 [0249.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0249.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffd0 [0249.424] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffd0 | out: hHeap=0x1f0000) returned 1 [0249.424] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0249.424] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238aa0 | out: hHeap=0x1f0000) returned 1 [0249.424] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffb8 | out: hHeap=0x1f0000) returned 1 [0249.424] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238348 | out: hHeap=0x1f0000) returned 1 [0249.424] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a90 | out: hHeap=0x1f0000) returned 1 [0249.424] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2858d8 | out: hHeap=0x1f0000) returned 1 [0249.425] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0249.425] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236608 | out: hHeap=0x1f0000) returned 1 [0249.425] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238ec0 [0249.425] GetLastError () returned 0x0 [0249.425] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238e50 [0249.425] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0249.425] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0249.425] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0249.426] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0249.426] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0249.426] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0249.426] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x24e980 [0249.426] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285e00 [0249.426] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0249.426] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0249.426] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0249.427] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0249.427] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2852a8 [0249.427] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0249.427] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0249.427] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f5d8 [0249.427] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x252370 [0249.427] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x233468 [0249.427] QueryPerformanceCounter (in: lpPerformanceCount=0x173dee0 | out: lpPerformanceCount=0x173dee0*=40679618666) returned 1 [0249.427] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173df20 | out: lpSystemTimeAsFileTime=0x173df20) [0249.428] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238a90 [0249.428] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0249.428] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d10 [0249.428] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d10 | out: hHeap=0x1f0000) returned 1 [0249.428] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0249.428] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0249.428] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f10 [0249.428] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f10 | out: hHeap=0x1f0000) returned 1 [0249.429] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0249.429] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a90 | out: hHeap=0x1f0000) returned 1 [0249.429] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0249.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238d70 [0249.429] GetLastError () returned 0x0 [0249.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0249.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0249.430] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0249.430] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238280 [0249.430] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2382a8 [0249.430] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0249.430] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0249.430] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238168 [0249.430] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0249.430] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x222ee8 [0249.430] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0249.431] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0249.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0249.431] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0249.432] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0249.432] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2382d0 [0249.433] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2380a0 [0249.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0249.433] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0249.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0249.433] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0249.433] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x234b90 [0249.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b90 | out: hHeap=0x1f0000) returned 1 [0249.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0249.434] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0249.434] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x20ffb8 [0249.434] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228b00 [0249.434] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238348 [0249.434] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2384b0 [0249.434] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x237fd8 [0249.434] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2382d0 [0249.434] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0249.434] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238348 | out: hHeap=0x1f0000) returned 1 [0249.435] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0249.435] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2380a0 [0249.435] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2382f8 [0249.435] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0249.435] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0249.435] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0249.435] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206658 [0249.435] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x2b4ef8 [0249.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b4ef8 | out: hHeap=0x1f0000) returned 1 [0249.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206658 | out: hHeap=0x1f0000) returned 1 [0249.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0249.436] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0249.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0249.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0249.436] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204f70 [0249.436] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0249.436] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0249.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0249.437] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a9eb8 [0249.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0249.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0249.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0249.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228b00 | out: hHeap=0x1f0000) returned 1 [0249.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0249.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f70 | out: hHeap=0x1f0000) returned 1 [0249.438] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffb8 | out: hHeap=0x1f0000) returned 1 [0249.438] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0249.438] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aaa48 [0249.438] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aaa48 | out: hHeap=0x1f0000) returned 1 [0249.438] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ee8 | out: hHeap=0x1f0000) returned 1 [0249.438] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0249.438] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0249.438] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0249.439] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0249.439] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0249.439] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0249.439] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0249.439] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a90d8 [0249.439] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aa230 [0249.439] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a90d8 | out: hHeap=0x1f0000) returned 1 [0249.439] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aa230 | out: hHeap=0x1f0000) returned 1 [0249.439] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a9eb8 | out: hHeap=0x1f0000) returned 1 [0249.440] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0249.440] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2852a8 | out: hHeap=0x1f0000) returned 1 [0249.440] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24e980 | out: hHeap=0x1f0000) returned 1 [0249.440] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x232ef0 [0249.440] GetLastError () returned 0x0 [0249.440] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b20 [0249.441] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b30 [0249.442] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1046\\LocalizedData.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1046\\localizeddata.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e290, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0249.442] GetFileType (hFile=0x1fc) returned 0x1 [0249.443] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28ffe0 [0249.443] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e218 | out: lpNewFilePointer=0x0) returned 1 [0249.444] GetLastError () returned 0xb7 [0249.444] CloseHandle (hObject=0x1fc) returned 1 [0249.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b30 | out: hHeap=0x1f0000) returned 1 [0249.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b20 | out: hHeap=0x1f0000) returned 1 [0249.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285e00 | out: hHeap=0x1f0000) returned 1 [0249.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285cf8 | out: hHeap=0x1f0000) returned 1 [0249.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0249.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c90 | out: hHeap=0x1f0000) returned 1 [0249.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2365a0 | out: hHeap=0x1f0000) returned 1 [0249.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffa0 | out: hHeap=0x1f0000) returned 1 [0249.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8dc8 | out: hHeap=0x1f0000) returned 1 [0249.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232ef0 | out: hHeap=0x1f0000) returned 1 [0249.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0249.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0249.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x252370 | out: hHeap=0x1f0000) returned 1 [0249.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233468 | out: hHeap=0x1f0000) returned 1 [0249.447] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239160 | out: hHeap=0x1f0000) returned 1 [0249.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a00 | out: hHeap=0x1f0000) returned 1 [0249.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff28 | out: hHeap=0x1f0000) returned 1 [0249.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0249.698] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a40 | out: hHeap=0x1f0000) returned 1 [0249.698] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210018 | out: hHeap=0x1f0000) returned 1 [0249.698] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0249.698] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a30 | out: hHeap=0x1f0000) returned 1 [0249.698] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285bf0 | out: hHeap=0x1f0000) returned 1 [0249.698] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0249.698] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2364d0 | out: hHeap=0x1f0000) returned 1 [0249.698] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228908 | out: hHeap=0x1f0000) returned 1 [0249.698] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0249.698] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0249.698] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228cb0 | out: hHeap=0x1f0000) returned 1 [0249.699] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a80 | out: hHeap=0x1f0000) returned 1 [0249.699] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389f0 | out: hHeap=0x1f0000) returned 1 [0249.699] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28dfd0 | out: hHeap=0x1f0000) returned 1 [0249.699] CloseHandle (hObject=0x1b0) returned 1 [0249.700] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238af0 | out: hHeap=0x1f0000) returned 1 [0249.700] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389e0 | out: hHeap=0x1f0000) returned 1 [0249.700] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237b60 | out: hHeap=0x1f0000) returned 1 [0249.700] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24a9c8 | out: hHeap=0x1f0000) returned 1 [0249.700] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2100a8 | out: hHeap=0x1f0000) returned 1 [0249.700] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bd0 | out: hHeap=0x1f0000) returned 1 [0249.700] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286f98 | out: hHeap=0x1f0000) returned 1 [0249.700] CloseHandle (hObject=0x224) returned 1 [0249.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ba0 | out: hHeap=0x1f0000) returned 1 [0249.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b90 | out: hHeap=0x1f0000) returned 1 [0249.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2adcb0 | out: hHeap=0x1f0000) returned 1 [0249.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c70 | out: hHeap=0x1f0000) returned 1 [0249.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21b708 | out: hHeap=0x1f0000) returned 1 [0249.701] CloseHandle (hObject=0x1e8) returned 1 [0249.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a20 | out: hHeap=0x1f0000) returned 1 [0249.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b80 | out: hHeap=0x1f0000) returned 1 [0249.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad410 | out: hHeap=0x1f0000) returned 1 [0249.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238880 | out: hHeap=0x1f0000) returned 1 [0249.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238920 | out: hHeap=0x1f0000) returned 1 [0249.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238900 | out: hHeap=0x1f0000) returned 1 [0249.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238930 | out: hHeap=0x1f0000) returned 1 [0249.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232dd8 | out: hHeap=0x1f0000) returned 1 [0249.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x258298 | out: hHeap=0x1f0000) returned 1 [0249.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233698 | out: hHeap=0x1f0000) returned 1 [0249.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206628 | out: hHeap=0x1f0000) returned 1 [0249.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0249.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210240 | out: hHeap=0x1f0000) returned 1 [0249.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aba48 | out: hHeap=0x1f0000) returned 1 [0249.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x255c88 | out: hHeap=0x1f0000) returned 1 [0249.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233580 | out: hHeap=0x1f0000) returned 1 [0249.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239010 | out: hHeap=0x1f0000) returned 1 [0249.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0249.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d9d0 | out: hHeap=0x1f0000) returned 1 [0249.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228758 | out: hHeap=0x1f0000) returned 1 [0249.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0249.703] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1046\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1046\\localizeddata.xml")) returned 1 [0249.706] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0249.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239160 [0249.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228518 [0249.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2365a0 [0249.706] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228518 | out: hHeap=0x1f0000) returned 1 [0249.706] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236538 | out: hHeap=0x1f0000) returned 1 [0249.706] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239160 | out: hHeap=0x1f0000) returned 1 [0249.706] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1046\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1046\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0249.707] GetFileType (hFile=0x1e8) returned 0x1 [0249.707] CloseHandle (hObject=0x1e8) returned 1 [0249.708] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236538 [0249.708] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1046\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1046\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x173eb6c | out: lpFileInformation=0x173eb6c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758)) returned 1 [0249.708] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236538 | out: hHeap=0x1f0000) returned 1 [0249.708] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236468 [0249.708] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1046\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1046\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x173eb7c | out: lpFileInformation=0x173eb7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758)) returned 1 [0249.708] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0249.708] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236608 [0249.708] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236608 | out: hHeap=0x1f0000) returned 1 [0249.708] GetLastError () returned 0x0 [0249.709] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0249.709] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228710 [0249.709] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e828 [0249.709] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236538 [0249.709] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239010 [0249.709] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0249.709] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x212e00) returned 1 [0249.710] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2381b8 | out: pbBuffer=0x2381b8) returned 1 [0249.710] CryptReleaseContext (hProv=0x212e00, dwFlags=0x0) returned 1 [0249.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0249.710] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x258298 [0249.711] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2338c8 [0249.711] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=40707956958) returned 1 [0249.711] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0249.711] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=40707985116) returned 1 [0249.711] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0249.711] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238f68 [0249.711] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x255c88 [0249.711] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2339e0 [0249.711] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x2ab088 [0249.711] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210240 [0249.712] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206838 [0249.712] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210258 [0249.712] GetLastError () returned 0x0 [0249.712] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae930 [0249.712] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad410 [0249.712] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae930 | out: hHeap=0x1f0000) returned 1 [0249.712] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x106) returned 0x232ba8 [0249.713] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad410 | out: hHeap=0x1f0000) returned 1 [0249.713] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238830 [0249.714] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388d0 [0249.714] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1046\\SetupResources.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1046\\setupresources.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e230, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0249.715] GetFileType (hFile=0x1e8) returned 0x1 [0249.717] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238990 [0249.717] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238810 [0249.718] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1046\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1046\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0249.718] GetFileType (hFile=0x224) returned 0x1 [0249.719] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204db0 [0249.719] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c70 [0249.719] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2adb40 [0249.719] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238820 [0249.720] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389b0 [0249.721] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1046\\SetupResources.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1046\\setupresources.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0249.721] GetFileType (hFile=0x1b0) returned 0x1 [0249.722] GetLastError () returned 0xb7 [0249.722] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe4) returned 0x21bac8 [0249.722] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bd0 [0249.722] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c90 [0249.722] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bf0 [0249.723] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad2a0 [0249.723] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388c0 [0249.723] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389c0 [0249.724] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1046\\SetupResources.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1046\\setupresources.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0249.724] GetFileType (hFile=0x200) returned 0x1 [0249.725] GetLastError () returned 0xb7 [0249.725] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204db0 [0249.726] GetLastError () returned 0xb7 [0249.726] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e90 [0249.726] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e30 [0249.726] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c90 [0249.726] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb8) returned 0x237920 [0249.726] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238930 [0249.727] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387f0 [0249.728] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1046\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1046\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1a4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0249.729] GetFileType (hFile=0x1e0) returned 0x1 [0249.729] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28dfd0 [0249.730] ReadFile (in: hFile=0x1e0, lpBuffer=0x28dfd0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e100, lpOverlapped=0x0 | out: lpBuffer=0x28dfd0*, lpNumberOfBytesRead=0x173e100*=0x1000, lpOverlapped=0x0) returned 1 [0250.151] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24ca08 [0250.152] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28bfc0 [0250.152] GetLastError () returned 0x0 [0250.155] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20fef8 [0250.155] GetLastError () returned 0x0 [0250.155] CloseHandle (hObject=0x1e8) returned 1 [0250.156] CloseHandle (hObject=0x224) returned 1 [0250.157] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b80 [0250.157] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a00 [0250.158] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1046\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1046\\setupresources.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0250.160] GetFileType (hFile=0x224) returned 0x1 [0250.161] GetLastError () returned 0xb7 [0250.161] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x286f98 [0250.161] GetLastError () returned 0xb7 [0250.163] CloseHandle (hObject=0x224) returned 1 [0250.163] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1046\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1046\\setupresources.dll")) returned 0 [0250.164] GetLastError () returned 0x20 [0250.164] GetLastError () returned 0x20 [0250.164] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228cb0 [0250.164] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2382d0 [0250.164] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2382f8 [0250.164] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x228b00 [0250.164] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e70 [0250.165] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e50 [0250.165] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x238af0 [0250.165] GetLastError () returned 0x20 [0250.165] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239160 [0250.165] GetLastError () returned 0x20 [0250.165] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238f30 [0250.165] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236608 [0250.166] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2381b8 [0250.166] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285cf8 [0250.166] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a40 [0250.166] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0250.166] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff28 [0250.166] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389e0 [0250.167] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0250.167] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2100a8 [0250.167] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2383e8 [0250.167] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285098 [0250.167] GetLastError () returned 0x20 [0250.167] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238a80 [0250.167] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238ac0 [0250.167] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b40 [0250.168] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ac0 | out: hHeap=0x1f0000) returned 1 [0250.168] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b10 [0250.168] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b40 | out: hHeap=0x1f0000) returned 1 [0250.168] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a80 | out: hHeap=0x1f0000) returned 1 [0250.168] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ac0 [0250.168] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x20ff70 [0250.168] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ac0 | out: hHeap=0x1f0000) returned 1 [0250.168] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x20ffb8 [0250.169] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff70 | out: hHeap=0x1f0000) returned 1 [0250.169] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b10 | out: hHeap=0x1f0000) returned 1 [0250.169] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210018 [0250.169] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff70 [0250.169] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210018 | out: hHeap=0x1f0000) returned 1 [0250.169] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffd0 [0250.169] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff70 | out: hHeap=0x1f0000) returned 1 [0250.169] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffb8 | out: hHeap=0x1f0000) returned 1 [0250.169] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff70 [0250.169] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204c90 [0250.170] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff70 | out: hHeap=0x1f0000) returned 1 [0250.170] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ef0 [0250.170] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c90 | out: hHeap=0x1f0000) returned 1 [0250.170] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffd0 | out: hHeap=0x1f0000) returned 1 [0250.170] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c90 [0250.170] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238118 [0250.170] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c90 | out: hHeap=0x1f0000) returned 1 [0250.170] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204e50 [0250.170] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0250.170] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ef0 | out: hHeap=0x1f0000) returned 1 [0250.170] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204e30 [0250.171] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206808 [0250.171] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e30 | out: hHeap=0x1f0000) returned 1 [0250.171] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238348 [0250.171] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206808 | out: hHeap=0x1f0000) returned 1 [0250.171] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e50 | out: hHeap=0x1f0000) returned 1 [0250.171] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b50 [0250.171] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210018 [0250.171] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b50 | out: hHeap=0x1f0000) returned 1 [0250.171] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff70 [0250.171] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210018 | out: hHeap=0x1f0000) returned 1 [0250.172] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204e30 [0250.172] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff70 | out: hHeap=0x1f0000) returned 1 [0250.172] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x2068c8 [0250.172] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e30 | out: hHeap=0x1f0000) returned 1 [0250.172] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2068c8 | out: hHeap=0x1f0000) returned 1 [0250.172] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238348 | out: hHeap=0x1f0000) returned 1 [0250.172] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0250.172] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0250.172] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285cf8 | out: hHeap=0x1f0000) returned 1 [0250.172] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0250.172] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239208 [0250.172] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0250.173] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x212ad0) returned 1 [0250.174] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238168 | out: pbBuffer=0x238168) returned 1 [0250.174] CryptReleaseContext (hProv=0x212ad0, dwFlags=0x0) returned 1 [0250.174] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0250.174] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238000 [0250.174] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2384b0 [0250.174] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239278 [0250.174] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0250.174] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0250.174] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239278 | out: hHeap=0x1f0000) returned 1 [0250.174] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8d18 [0250.174] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff70 [0250.174] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x236468 [0250.175] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2382d0 [0250.175] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2859e0 [0250.175] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c50 [0250.175] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2364d0 [0250.175] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2381b8 [0250.175] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285ae8 [0250.175] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ac0 [0250.175] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238348 [0250.175] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffb8 [0250.175] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389f0 [0250.175] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0250.175] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffd0 [0250.176] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffd0 | out: hHeap=0x1f0000) returned 1 [0250.176] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0250.176] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389f0 | out: hHeap=0x1f0000) returned 1 [0250.176] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffb8 | out: hHeap=0x1f0000) returned 1 [0250.176] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238348 | out: hHeap=0x1f0000) returned 1 [0250.176] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ac0 | out: hHeap=0x1f0000) returned 1 [0250.176] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285ae8 | out: hHeap=0x1f0000) returned 1 [0250.176] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0250.176] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2364d0 | out: hHeap=0x1f0000) returned 1 [0250.176] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239198 [0250.176] GetLastError () returned 0x0 [0250.176] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x2390b8 [0250.177] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0250.177] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0250.177] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0250.177] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0250.177] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0250.177] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0250.177] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x24e5c0 [0250.177] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2851a0 [0250.177] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0250.177] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0250.177] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0250.177] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0250.177] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2852a8 [0250.177] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0250.178] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0250.178] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x2300c8 [0250.178] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x24fd60 [0250.178] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x232dd8 [0250.178] QueryPerformanceCounter (in: lpPerformanceCount=0x173dee0 | out: lpPerformanceCount=0x173dee0*=40754669561) returned 1 [0250.178] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173df20 | out: lpSystemTimeAsFileTime=0x173df20) [0250.178] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238b10 [0250.178] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238348 [0250.178] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c90 [0250.178] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c90 | out: hHeap=0x1f0000) returned 1 [0250.178] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238348 | out: hHeap=0x1f0000) returned 1 [0250.178] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0250.179] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204b90 [0250.179] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204b90 | out: hHeap=0x1f0000) returned 1 [0250.179] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0250.179] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b10 | out: hHeap=0x1f0000) returned 1 [0250.179] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0250.179] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238d70 [0250.179] GetLastError () returned 0x0 [0250.179] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0250.179] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0250.179] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0250.179] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x237fd8 [0250.180] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238348 [0250.180] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0250.180] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0250.180] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238078 [0250.180] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0250.180] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x222ee8 [0250.180] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0250.180] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0250.180] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0250.180] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0250.180] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0250.180] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238000 [0250.180] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2380a0 [0250.180] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0250.180] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0250.180] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0250.181] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0250.181] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x234b90 [0250.181] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b90 | out: hHeap=0x1f0000) returned 1 [0250.181] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0250.181] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0250.182] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x20ffb8 [0250.182] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228440 [0250.182] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238140 [0250.182] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238000 [0250.182] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2380a0 [0250.182] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238168 [0250.182] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0250.182] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0250.182] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0250.182] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238000 [0250.182] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381b8 [0250.182] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0250.182] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0250.182] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0250.182] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206928 [0250.183] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x2b1fe0 [0250.183] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b1fe0 | out: hHeap=0x1f0000) returned 1 [0250.183] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206928 | out: hHeap=0x1f0000) returned 1 [0250.183] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0250.183] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0250.183] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0250.183] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0250.183] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204ef0 [0250.183] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0250.183] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0250.183] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238348 | out: hHeap=0x1f0000) returned 1 [0250.183] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a9200 [0250.183] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0250.184] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0250.184] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0250.184] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228440 | out: hHeap=0x1f0000) returned 1 [0250.184] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0250.184] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ef0 | out: hHeap=0x1f0000) returned 1 [0250.184] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffb8 | out: hHeap=0x1f0000) returned 1 [0250.184] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0250.184] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aaa48 [0250.184] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aaa48 | out: hHeap=0x1f0000) returned 1 [0250.184] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ee8 | out: hHeap=0x1f0000) returned 1 [0250.184] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0250.184] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0250.184] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0250.184] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0250.185] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0250.185] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0250.185] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0250.185] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aa920 [0250.185] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a9b40 [0250.185] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aa920 | out: hHeap=0x1f0000) returned 1 [0250.185] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a9b40 | out: hHeap=0x1f0000) returned 1 [0250.185] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a9200 | out: hHeap=0x1f0000) returned 1 [0250.185] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0250.185] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2852a8 | out: hHeap=0x1f0000) returned 1 [0250.185] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24e5c0 | out: hHeap=0x1f0000) returned 1 [0250.185] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x232ef0 [0250.185] GetLastError () returned 0x0 [0250.186] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a80 [0250.186] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b10 [0250.186] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1046\\SetupResources.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1046\\setupresources.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e290, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0250.187] GetFileType (hFile=0x224) returned 0x1 [0250.187] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x286f98 [0250.187] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e218 | out: lpNewFilePointer=0x0) returned 1 [0250.187] GetLastError () returned 0xb7 [0250.188] CloseHandle (hObject=0x224) returned 1 [0250.188] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b10 | out: hHeap=0x1f0000) returned 1 [0250.188] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a80 | out: hHeap=0x1f0000) returned 1 [0250.188] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2851a0 | out: hHeap=0x1f0000) returned 1 [0250.188] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2859e0 | out: hHeap=0x1f0000) returned 1 [0250.188] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0250.188] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c50 | out: hHeap=0x1f0000) returned 1 [0250.189] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0250.189] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff70 | out: hHeap=0x1f0000) returned 1 [0250.189] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0250.189] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232ef0 | out: hHeap=0x1f0000) returned 1 [0250.189] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0250.189] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0250.189] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24fd60 | out: hHeap=0x1f0000) returned 1 [0250.189] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232dd8 | out: hHeap=0x1f0000) returned 1 [0250.189] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239208 | out: hHeap=0x1f0000) returned 1 [0250.189] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238af0 | out: hHeap=0x1f0000) returned 1 [0250.189] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2100a8 | out: hHeap=0x1f0000) returned 1 [0250.189] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0250.190] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389e0 | out: hHeap=0x1f0000) returned 1 [0250.190] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff28 | out: hHeap=0x1f0000) returned 1 [0250.190] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0250.190] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a40 | out: hHeap=0x1f0000) returned 1 [0250.190] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285098 | out: hHeap=0x1f0000) returned 1 [0250.190] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0250.190] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236608 | out: hHeap=0x1f0000) returned 1 [0250.190] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228b00 | out: hHeap=0x1f0000) returned 1 [0250.190] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0250.190] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0250.190] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228cb0 | out: hHeap=0x1f0000) returned 1 [0250.190] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a00 | out: hHeap=0x1f0000) returned 1 [0250.190] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b80 | out: hHeap=0x1f0000) returned 1 [0250.190] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28dfd0 | out: hHeap=0x1f0000) returned 1 [0250.190] CloseHandle (hObject=0x1e0) returned 1 [0250.191] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387f0 | out: hHeap=0x1f0000) returned 1 [0250.191] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238930 | out: hHeap=0x1f0000) returned 1 [0250.191] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237920 | out: hHeap=0x1f0000) returned 1 [0250.191] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24ca08 | out: hHeap=0x1f0000) returned 1 [0250.191] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20fef8 | out: hHeap=0x1f0000) returned 1 [0250.191] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e90 | out: hHeap=0x1f0000) returned 1 [0250.192] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28bfc0 | out: hHeap=0x1f0000) returned 1 [0250.192] CloseHandle (hObject=0x200) returned 1 [0250.192] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389c0 | out: hHeap=0x1f0000) returned 1 [0250.192] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388c0 | out: hHeap=0x1f0000) returned 1 [0250.192] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad2a0 | out: hHeap=0x1f0000) returned 1 [0250.192] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bd0 | out: hHeap=0x1f0000) returned 1 [0250.193] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21bac8 | out: hHeap=0x1f0000) returned 1 [0250.193] CloseHandle (hObject=0x1b0) returned 1 [0250.193] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389b0 | out: hHeap=0x1f0000) returned 1 [0250.193] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238820 | out: hHeap=0x1f0000) returned 1 [0250.193] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2adb40 | out: hHeap=0x1f0000) returned 1 [0250.193] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238810 | out: hHeap=0x1f0000) returned 1 [0250.193] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238990 | out: hHeap=0x1f0000) returned 1 [0250.193] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388d0 | out: hHeap=0x1f0000) returned 1 [0250.194] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238830 | out: hHeap=0x1f0000) returned 1 [0250.194] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232ba8 | out: hHeap=0x1f0000) returned 1 [0250.194] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x255c88 | out: hHeap=0x1f0000) returned 1 [0250.194] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2339e0 | out: hHeap=0x1f0000) returned 1 [0250.194] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206838 | out: hHeap=0x1f0000) returned 1 [0250.194] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0250.194] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210240 | out: hHeap=0x1f0000) returned 1 [0250.194] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab088 | out: hHeap=0x1f0000) returned 1 [0250.194] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x258298 | out: hHeap=0x1f0000) returned 1 [0250.195] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2338c8 | out: hHeap=0x1f0000) returned 1 [0250.195] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239010 | out: hHeap=0x1f0000) returned 1 [0250.195] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236538 | out: hHeap=0x1f0000) returned 1 [0250.195] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e828 | out: hHeap=0x1f0000) returned 1 [0250.195] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228710 | out: hHeap=0x1f0000) returned 1 [0250.195] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0250.195] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1046\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1046\\setupresources.dll")) returned 1 [0250.400] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0250.401] FindClose (in: hFindFile=0x24e900 | out: hFindFile=0x24e900) returned 1 [0250.637] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2365a0 | out: hHeap=0x1f0000) returned 1 [0250.637] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ee88 | out: hHeap=0x1f0000) returned 1 [0250.637] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0250.637] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2287a0 | out: hHeap=0x1f0000) returned 1 [0250.637] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228b00 [0250.638] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0250.638] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22ee88 [0250.638] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228a28 [0250.638] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1049\\*", lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e980 [0250.639] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228710 [0250.639] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228a28 | out: hHeap=0x1f0000) returned 1 [0250.639] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0250.639] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0250.639] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228758 [0250.639] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228710 | out: hHeap=0x1f0000) returned 1 [0250.639] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0250.639] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0250.640] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xd4b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0250.640] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0250.640] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228680 [0250.640] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x236468 [0250.640] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228680 | out: hHeap=0x1f0000) returned 1 [0250.640] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228758 | out: hHeap=0x1f0000) returned 1 [0250.640] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0250.641] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1049\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1049\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0250.641] GetFileType (hFile=0x21c) returned 0x1 [0250.642] CloseHandle (hObject=0x21c) returned 1 [0250.642] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8d18 [0250.643] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1049\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1049\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x173eb6c | out: lpFileInformation=0x173eb6c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xd4b8)) returned 1 [0250.643] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0250.643] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8e20 [0250.643] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1049\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1049\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x173eb7c | out: lpFileInformation=0x173eb7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xd4b8)) returned 1 [0250.643] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8e20 | out: hHeap=0x1f0000) returned 1 [0250.643] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8d18 [0250.644] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0250.644] GetLastError () returned 0x0 [0250.644] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0250.644] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228518 [0250.644] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f350 [0250.644] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8e20 [0250.644] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239198 [0250.645] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0250.645] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x212ad0) returned 1 [0250.646] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238320 | out: pbBuffer=0x238320) returned 1 [0250.646] CryptReleaseContext (hProv=0x212ad0, dwFlags=0x0) returned 1 [0250.646] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0250.646] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x258298 [0250.646] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x232dd8 [0250.646] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=40801539328) returned 1 [0250.647] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0250.647] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=40801578703) returned 1 [0250.647] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0250.647] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238d70 [0250.647] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x254980 [0250.647] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x232ef0 [0250.648] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x2abb18 [0250.648] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0250.648] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206628 [0250.648] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0250.648] GetLastError () returned 0x0 [0250.648] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2365a0 [0250.649] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219cf0 [0250.649] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2365a0 | out: hHeap=0x1f0000) returned 1 [0250.649] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xee) returned 0x2b13b8 [0250.649] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219cf0 | out: hHeap=0x1f0000) returned 1 [0250.649] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238800 [0250.650] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238830 [0250.651] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1049\\eula.rtf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1049\\eula.rtf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e230, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0250.655] GetFileType (hFile=0x21c) returned 0x1 [0250.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387e0 [0250.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387f0 [0250.657] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1049\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1049\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0250.657] GetFileType (hFile=0x200) returned 0x1 [0250.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e90 [0250.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e30 [0250.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad358 [0250.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238970 [0250.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238950 [0250.660] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1049\\eula.rtf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1049\\eula.rtf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0250.660] GetFileType (hFile=0x1e0) returned 0x1 [0250.661] GetLastError () returned 0xb7 [0250.661] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe4) returned 0x21bd98 [0250.661] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bd0 [0250.661] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204dd0 [0250.661] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c10 [0250.662] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad580 [0250.662] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238960 [0250.662] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238910 [0250.663] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1049\\eula.rtf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1049\\eula.rtf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0250.664] GetFileType (hFile=0x224) returned 0x1 [0250.664] GetLastError () returned 0xb7 [0250.664] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cd0 [0250.665] GetLastError () returned 0xb7 [0250.665] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ef0 [0250.665] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f30 [0250.665] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d30 [0250.665] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb8) returned 0x237560 [0250.665] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238980 [0250.667] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238990 [0250.668] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1049\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1049\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1a4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0250.668] GetFileType (hFile=0x1e8) returned 0x1 [0250.669] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28dfd0 [0250.669] ReadFile (in: hFile=0x1e8, lpBuffer=0x28dfd0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e100, lpOverlapped=0x0 | out: lpBuffer=0x28dfd0*, lpNumberOfBytesRead=0x173e100*=0x1000, lpOverlapped=0x0) returned 1 [0250.981] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24ca08 [0250.982] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x286f98 [0250.982] GetLastError () returned 0x0 [0250.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2100a8 [0250.986] GetLastError () returned 0x0 [0250.986] CloseHandle (hObject=0x21c) returned 1 [0250.987] CloseHandle (hObject=0x200) returned 1 [0250.988] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a80 [0250.988] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b70 [0251.091] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1049\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1049\\eula.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0251.094] GetFileType (hFile=0x198) returned 0x1 [0251.094] GetLastError () returned 0xb7 [0251.094] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28efd8 [0251.095] GetLastError () returned 0xb7 [0251.096] CloseHandle (hObject=0x198) returned 1 [0251.097] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1049\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1049\\eula.rtf")) returned 0 [0251.097] GetLastError () returned 0x20 [0251.097] GetLastError () returned 0x20 [0251.097] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228bd8 [0251.097] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2382d0 [0251.097] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238398 [0251.097] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x228680 [0251.098] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205130 [0251.098] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205150 [0251.098] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x238b10 [0251.098] GetLastError () returned 0x20 [0251.098] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239048 [0251.098] GetLastError () returned 0x20 [0251.098] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238e50 [0251.098] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2364d0 [0251.098] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x237fd8 [0251.099] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2855c0 [0251.099] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ae0 [0251.099] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0251.099] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff70 [0251.099] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a50 [0251.099] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0251.099] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffa0 [0251.099] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238140 [0251.099] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2859e0 [0251.099] GetLastError () returned 0x20 [0251.100] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238af0 [0251.100] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238ad0 [0251.100] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238aa0 [0251.100] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ad0 | out: hHeap=0x1f0000) returned 1 [0251.100] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b40 [0251.100] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238aa0 | out: hHeap=0x1f0000) returned 1 [0251.100] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238af0 | out: hHeap=0x1f0000) returned 1 [0251.100] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ad0 [0251.100] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x20ff28 [0251.101] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ad0 | out: hHeap=0x1f0000) returned 1 [0251.101] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x20ff40 [0251.101] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff28 | out: hHeap=0x1f0000) returned 1 [0251.101] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b40 | out: hHeap=0x1f0000) returned 1 [0251.101] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x20ff28 [0251.101] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffb8 [0251.101] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff28 | out: hHeap=0x1f0000) returned 1 [0251.101] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff28 [0251.101] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffb8 | out: hHeap=0x1f0000) returned 1 [0251.101] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff40 | out: hHeap=0x1f0000) returned 1 [0251.102] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffb8 [0251.102] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x2050b0 [0251.102] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffb8 | out: hHeap=0x1f0000) returned 1 [0251.102] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205330 [0251.102] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2050b0 | out: hHeap=0x1f0000) returned 1 [0251.102] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff28 | out: hHeap=0x1f0000) returned 1 [0251.102] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204fb0 [0251.102] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238168 [0251.102] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204fb0 | out: hHeap=0x1f0000) returned 1 [0251.102] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x2051f0 [0251.103] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0251.103] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205330 | out: hHeap=0x1f0000) returned 1 [0251.103] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x205210 [0251.103] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206658 [0251.103] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205210 | out: hHeap=0x1f0000) returned 1 [0251.104] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238320 [0251.104] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206658 | out: hHeap=0x1f0000) returned 1 [0251.104] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2051f0 | out: hHeap=0x1f0000) returned 1 [0251.104] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389e0 [0251.104] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x20ff28 [0251.104] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389e0 | out: hHeap=0x1f0000) returned 1 [0251.104] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210078 [0251.104] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff28 | out: hHeap=0x1f0000) returned 1 [0251.104] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x205330 [0251.105] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210078 | out: hHeap=0x1f0000) returned 1 [0251.105] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x2067d8 [0251.105] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205330 | out: hHeap=0x1f0000) returned 1 [0251.105] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2067d8 | out: hHeap=0x1f0000) returned 1 [0251.105] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0251.105] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0251.105] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0251.105] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2855c0 | out: hHeap=0x1f0000) returned 1 [0251.105] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0251.106] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238e18 [0251.106] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0251.106] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x213708) returned 1 [0251.107] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238168 | out: pbBuffer=0x238168) returned 1 [0251.107] CryptReleaseContext (hProv=0x213708, dwFlags=0x0) returned 1 [0251.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0251.107] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x237fd8 [0251.107] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2384b0 [0251.108] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238e50 [0251.108] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0251.108] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0251.108] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238e50 | out: hHeap=0x1f0000) returned 1 [0251.108] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8d18 [0251.108] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffb8 [0251.108] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x2365a0 [0251.108] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2382d0 [0251.108] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x284f90 [0251.109] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x2050b0 [0251.109] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236538 [0251.109] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238000 [0251.109] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2851a0 [0251.109] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a20 [0251.109] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0251.109] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff28 [0251.109] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a00 [0251.109] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0251.109] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210018 [0251.109] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210018 | out: hHeap=0x1f0000) returned 1 [0251.109] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0251.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a00 | out: hHeap=0x1f0000) returned 1 [0251.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff28 | out: hHeap=0x1f0000) returned 1 [0251.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0251.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a20 | out: hHeap=0x1f0000) returned 1 [0251.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2851a0 | out: hHeap=0x1f0000) returned 1 [0251.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0251.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236538 | out: hHeap=0x1f0000) returned 1 [0251.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238da8 [0251.110] GetLastError () returned 0x0 [0251.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238d00 [0251.111] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0251.111] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0251.111] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0251.111] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0251.111] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0251.111] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0251.111] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x24e7c0 [0251.111] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2853b0 [0251.111] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0251.112] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0251.112] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0251.112] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0251.112] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2852a8 [0251.112] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0251.112] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0251.112] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f5d8 [0251.112] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x255c88 [0251.112] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x233580 [0251.112] QueryPerformanceCounter (in: lpPerformanceCount=0x173dee0 | out: lpPerformanceCount=0x173dee0*=40848129429) returned 1 [0251.112] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173df20 | out: lpSystemTimeAsFileTime=0x173df20) [0251.113] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238b50 [0251.113] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0251.113] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205150 [0251.113] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205150 | out: hHeap=0x1f0000) returned 1 [0251.113] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0251.113] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0251.113] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204fb0 [0251.113] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204fb0 | out: hHeap=0x1f0000) returned 1 [0251.113] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0251.113] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b50 | out: hHeap=0x1f0000) returned 1 [0251.114] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0251.114] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238de0 [0251.114] GetLastError () returned 0x0 [0251.114] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0251.114] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0251.114] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0251.114] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x237fd8 [0251.114] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238168 [0251.114] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0251.114] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0251.115] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238078 [0251.115] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0251.115] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x222ee8 [0251.115] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0251.115] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0251.115] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0251.115] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0251.115] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0251.115] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238000 [0251.115] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238320 [0251.115] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0251.115] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0251.115] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0251.116] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0251.116] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x234b90 [0251.116] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b90 | out: hHeap=0x1f0000) returned 1 [0251.116] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0251.116] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0251.116] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x20ff28 [0251.116] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228710 [0251.116] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238000 [0251.116] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381b8 [0251.117] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381e0 [0251.117] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238320 [0251.117] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0251.117] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0251.117] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0251.117] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381b8 [0251.117] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238348 [0251.117] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0251.117] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0251.118] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238348 | out: hHeap=0x1f0000) returned 1 [0251.118] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2067d8 [0251.118] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x2b2870 [0251.118] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b2870 | out: hHeap=0x1f0000) returned 1 [0251.118] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2067d8 | out: hHeap=0x1f0000) returned 1 [0251.118] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0251.118] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0251.118] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0251.118] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0251.119] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x2051f0 [0251.119] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0251.119] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0251.119] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0251.120] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aa108 [0251.120] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0251.120] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0251.120] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0251.120] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228710 | out: hHeap=0x1f0000) returned 1 [0251.120] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0251.120] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2051f0 | out: hHeap=0x1f0000) returned 1 [0251.120] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff28 | out: hHeap=0x1f0000) returned 1 [0251.120] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0251.120] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aa6d0 [0251.120] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aa6d0 | out: hHeap=0x1f0000) returned 1 [0251.121] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ee8 | out: hHeap=0x1f0000) returned 1 [0251.121] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0251.121] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0251.121] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0251.121] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0251.121] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0251.121] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0251.121] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0251.121] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aadc0 [0251.121] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a90d8 [0251.121] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aadc0 | out: hHeap=0x1f0000) returned 1 [0251.121] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a90d8 | out: hHeap=0x1f0000) returned 1 [0251.122] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aa108 | out: hHeap=0x1f0000) returned 1 [0251.122] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0251.122] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2852a8 | out: hHeap=0x1f0000) returned 1 [0251.122] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24e7c0 | out: hHeap=0x1f0000) returned 1 [0251.122] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x233468 [0251.122] GetLastError () returned 0x0 [0251.122] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ad0 [0251.122] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a90 [0251.123] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1049\\eula.rtf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1049\\eula.rtf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e290, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0251.124] GetFileType (hFile=0x198) returned 0x1 [0251.124] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28efd8 [0251.125] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e218 | out: lpNewFilePointer=0x0) returned 1 [0251.125] GetLastError () returned 0xb7 [0251.125] CloseHandle (hObject=0x198) returned 1 [0251.126] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a90 | out: hHeap=0x1f0000) returned 1 [0251.126] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ad0 | out: hHeap=0x1f0000) returned 1 [0251.126] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2853b0 | out: hHeap=0x1f0000) returned 1 [0251.126] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x284f90 | out: hHeap=0x1f0000) returned 1 [0251.126] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0251.126] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2050b0 | out: hHeap=0x1f0000) returned 1 [0251.126] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2365a0 | out: hHeap=0x1f0000) returned 1 [0251.127] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffb8 | out: hHeap=0x1f0000) returned 1 [0251.127] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0251.127] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233468 | out: hHeap=0x1f0000) returned 1 [0251.127] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0251.127] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0251.127] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x255c88 | out: hHeap=0x1f0000) returned 1 [0251.127] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233580 | out: hHeap=0x1f0000) returned 1 [0251.127] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238e18 | out: hHeap=0x1f0000) returned 1 [0251.127] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b10 | out: hHeap=0x1f0000) returned 1 [0251.128] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffa0 | out: hHeap=0x1f0000) returned 1 [0251.128] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0251.128] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a50 | out: hHeap=0x1f0000) returned 1 [0251.128] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff70 | out: hHeap=0x1f0000) returned 1 [0251.128] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0251.128] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ae0 | out: hHeap=0x1f0000) returned 1 [0251.128] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2859e0 | out: hHeap=0x1f0000) returned 1 [0251.128] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0251.128] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2364d0 | out: hHeap=0x1f0000) returned 1 [0251.128] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228680 | out: hHeap=0x1f0000) returned 1 [0251.128] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0251.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0251.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228bd8 | out: hHeap=0x1f0000) returned 1 [0251.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b70 | out: hHeap=0x1f0000) returned 1 [0251.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a80 | out: hHeap=0x1f0000) returned 1 [0251.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28dfd0 | out: hHeap=0x1f0000) returned 1 [0251.129] CloseHandle (hObject=0x1e8) returned 1 [0251.130] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238990 | out: hHeap=0x1f0000) returned 1 [0251.130] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238980 | out: hHeap=0x1f0000) returned 1 [0251.130] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237560 | out: hHeap=0x1f0000) returned 1 [0251.130] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24ca08 | out: hHeap=0x1f0000) returned 1 [0251.130] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2100a8 | out: hHeap=0x1f0000) returned 1 [0251.131] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ef0 | out: hHeap=0x1f0000) returned 1 [0251.131] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286f98 | out: hHeap=0x1f0000) returned 1 [0251.131] CloseHandle (hObject=0x224) returned 1 [0251.132] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238910 | out: hHeap=0x1f0000) returned 1 [0251.132] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238960 | out: hHeap=0x1f0000) returned 1 [0251.132] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad580 | out: hHeap=0x1f0000) returned 1 [0251.132] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bd0 | out: hHeap=0x1f0000) returned 1 [0251.132] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21bd98 | out: hHeap=0x1f0000) returned 1 [0251.132] CloseHandle (hObject=0x1e0) returned 1 [0251.133] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238950 | out: hHeap=0x1f0000) returned 1 [0251.133] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238970 | out: hHeap=0x1f0000) returned 1 [0251.133] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad358 | out: hHeap=0x1f0000) returned 1 [0251.133] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387f0 | out: hHeap=0x1f0000) returned 1 [0251.133] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387e0 | out: hHeap=0x1f0000) returned 1 [0251.134] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238830 | out: hHeap=0x1f0000) returned 1 [0251.134] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238800 | out: hHeap=0x1f0000) returned 1 [0251.134] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b13b8 | out: hHeap=0x1f0000) returned 1 [0251.134] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x254980 | out: hHeap=0x1f0000) returned 1 [0251.134] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232ef0 | out: hHeap=0x1f0000) returned 1 [0251.430] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206628 | out: hHeap=0x1f0000) returned 1 [0251.430] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0251.430] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0251.430] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abb18 | out: hHeap=0x1f0000) returned 1 [0251.430] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x258298 | out: hHeap=0x1f0000) returned 1 [0251.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232dd8 | out: hHeap=0x1f0000) returned 1 [0251.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239198 | out: hHeap=0x1f0000) returned 1 [0251.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8e20 | out: hHeap=0x1f0000) returned 1 [0251.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f350 | out: hHeap=0x1f0000) returned 1 [0251.432] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228518 | out: hHeap=0x1f0000) returned 1 [0251.432] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0251.432] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1049\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1049\\eula.rtf")) returned 1 [0251.434] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13e4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0251.434] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239010 [0251.434] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2287a0 [0251.435] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2364d0 [0251.435] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2287a0 | out: hHeap=0x1f0000) returned 1 [0251.435] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0251.435] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239010 | out: hHeap=0x1f0000) returned 1 [0251.436] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1049\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1049\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0251.437] GetFileType (hFile=0x1e0) returned 0x1 [0251.437] CloseHandle (hObject=0x1e0) returned 1 [0251.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236468 [0251.480] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1049\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1049\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x173eb6c | out: lpFileInformation=0x173eb6c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13e4a)) returned 1 [0251.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0251.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236468 [0251.480] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1049\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1049\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x173eb7c | out: lpFileInformation=0x173eb7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13e4a)) returned 1 [0251.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0251.481] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236468 [0251.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0251.481] GetLastError () returned 0x0 [0251.481] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0251.482] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228680 [0251.482] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f350 [0251.482] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2365a0 [0251.482] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239010 [0251.482] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0251.482] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x213708) returned 1 [0251.483] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238000 | out: pbBuffer=0x238000) returned 1 [0251.483] CryptReleaseContext (hProv=0x213708, dwFlags=0x0) returned 1 [0251.484] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0251.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x258298 [0251.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2337b0 [0251.484] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=40885297041) returned 1 [0251.484] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0251.484] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=40885341034) returned 1 [0251.485] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0251.485] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239198 [0251.485] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x24fd60 [0251.485] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x232ef0 [0251.485] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x2ab158 [0251.485] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0251.486] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2067d8 [0251.486] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101b0 [0251.486] GetLastError () returned 0x0 [0251.486] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2aecf0 [0251.486] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad860 [0251.487] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aecf0 | out: hHeap=0x1f0000) returned 1 [0251.487] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x106) returned 0x233698 [0251.487] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad860 | out: hHeap=0x1f0000) returned 1 [0251.487] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238920 [0251.488] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238870 [0251.489] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1049\\LocalizedData.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1049\\localizeddata.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e230, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0251.490] GetFileType (hFile=0x1e0) returned 0x1 [0251.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238930 [0251.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389b0 [0251.492] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1049\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1049\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0251.492] GetFileType (hFile=0x200) returned 0x1 [0251.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bd0 [0251.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204db0 [0251.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad2a0 [0251.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388a0 [0251.495] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238940 [0251.496] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1049\\LocalizedData.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1049\\localizeddata.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0251.497] GetFileType (hFile=0x21c) returned 0x1 [0251.497] GetLastError () returned 0xb7 [0251.498] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe4) returned 0x21b528 [0251.498] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cd0 [0251.498] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ef0 [0251.498] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f30 [0251.498] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad638 [0251.498] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388f0 [0251.499] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238950 [0251.500] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1049\\LocalizedData.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1049\\localizeddata.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0251.501] GetFileType (hFile=0x1c0) returned 0x1 [0251.501] GetLastError () returned 0xb7 [0251.501] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e50 [0251.502] GetLastError () returned 0xb7 [0251.502] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204df0 [0251.502] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e90 [0251.502] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0251.502] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb8) returned 0x2377a0 [0251.502] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238890 [0251.503] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389c0 [0251.504] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1049\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1049\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1a4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0251.505] GetFileType (hFile=0x174) returned 0x1 [0251.506] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28efd8 [0251.506] ReadFile (in: hFile=0x174, lpBuffer=0x28efd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e100, lpOverlapped=0x0 | out: lpBuffer=0x28efd8*, lpNumberOfBytesRead=0x173e100*=0x1000, lpOverlapped=0x0) returned 1 [0251.801] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24ca08 [0251.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x286f98 [0251.802] GetLastError () returned 0x0 [0251.814] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210078 [0251.814] GetLastError () returned 0x0 [0251.815] CloseHandle (hObject=0x1e0) returned 1 [0251.816] CloseHandle (hObject=0x200) returned 1 [0251.816] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ae0 [0251.817] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b30 [0251.818] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1049\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1049\\localizeddata.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0251.821] GetFileType (hFile=0x200) returned 0x1 [0251.822] GetLastError () returned 0xb7 [0251.822] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28cfc8 [0251.823] GetLastError () returned 0xb7 [0251.824] CloseHandle (hObject=0x200) returned 1 [0251.825] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1049\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1049\\localizeddata.xml")) returned 0 [0251.825] GetLastError () returned 0x20 [0251.825] GetLastError () returned 0x20 [0251.826] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228a28 [0251.826] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238348 [0251.826] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238190 [0251.826] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x228bd8 [0251.826] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204b90 [0251.826] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0251.826] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x238af0 [0251.827] GetLastError () returned 0x20 [0251.827] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x2390f0 [0251.827] GetLastError () returned 0x20 [0251.827] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238da8 [0251.827] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236538 [0251.827] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238398 [0251.827] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2852a8 [0251.828] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a30 [0251.828] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0251.828] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2100a8 [0251.828] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ad0 [0251.828] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0251.828] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210120 [0251.828] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238280 [0251.828] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x284f90 [0251.829] GetLastError () returned 0x20 [0251.829] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238b10 [0251.829] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238b20 [0251.829] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b40 [0251.829] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b20 | out: hHeap=0x1f0000) returned 1 [0251.829] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b80 [0251.829] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b40 | out: hHeap=0x1f0000) returned 1 [0251.830] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b10 | out: hHeap=0x1f0000) returned 1 [0251.830] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a00 [0251.830] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x20fef8 [0251.830] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a00 | out: hHeap=0x1f0000) returned 1 [0251.830] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x20ff28 [0251.830] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20fef8 | out: hHeap=0x1f0000) returned 1 [0251.831] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b80 | out: hHeap=0x1f0000) returned 1 [0251.831] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x20fef8 [0251.831] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffa0 [0251.831] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20fef8 | out: hHeap=0x1f0000) returned 1 [0251.831] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210018 [0251.831] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffa0 | out: hHeap=0x1f0000) returned 1 [0251.831] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff28 | out: hHeap=0x1f0000) returned 1 [0251.832] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff28 [0251.832] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204c90 [0251.832] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff28 | out: hHeap=0x1f0000) returned 1 [0251.832] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d90 [0251.832] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c90 | out: hHeap=0x1f0000) returned 1 [0251.832] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210018 | out: hHeap=0x1f0000) returned 1 [0251.832] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204b90 [0251.833] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238078 [0251.833] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204b90 | out: hHeap=0x1f0000) returned 1 [0251.833] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204db0 [0251.833] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0251.833] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d90 | out: hHeap=0x1f0000) returned 1 [0251.833] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204f50 [0251.834] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206688 [0251.834] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f50 | out: hHeap=0x1f0000) returned 1 [0251.834] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2382d0 [0251.834] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206688 | out: hHeap=0x1f0000) returned 1 [0251.834] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204db0 | out: hHeap=0x1f0000) returned 1 [0251.834] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a70 [0251.834] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x20ff28 [0251.835] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a70 | out: hHeap=0x1f0000) returned 1 [0251.835] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210018 [0251.835] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff28 | out: hHeap=0x1f0000) returned 1 [0251.835] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204e30 [0251.835] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210018 | out: hHeap=0x1f0000) returned 1 [0251.835] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206808 [0251.836] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e30 | out: hHeap=0x1f0000) returned 1 [0251.836] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206808 | out: hHeap=0x1f0000) returned 1 [0251.836] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0251.836] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238348 | out: hHeap=0x1f0000) returned 1 [0251.836] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0251.836] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2852a8 | out: hHeap=0x1f0000) returned 1 [0251.836] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0251.837] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238f68 [0251.837] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0251.837] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x212ad0) returned 1 [0251.866] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x237fd8 | out: pbBuffer=0x237fd8) returned 1 [0251.866] CryptReleaseContext (hProv=0x212ad0, dwFlags=0x0) returned 1 [0251.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0251.867] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238140 [0251.867] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2382d0 [0251.867] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c58 [0251.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0251.868] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0251.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c58 | out: hHeap=0x1f0000) returned 1 [0251.868] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8d18 [0251.868] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20fef8 [0251.868] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x236468 [0251.868] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238078 [0252.177] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285bf0 [0252.183] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f30 [0252.183] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236608 [0252.183] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238398 [0252.183] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2857d0 [0252.183] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a50 [0252.184] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0252.203] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff28 [0252.203] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a40 [0252.203] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0252.203] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff40 [0252.203] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff40 | out: hHeap=0x1f0000) returned 1 [0252.204] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0252.204] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a40 | out: hHeap=0x1f0000) returned 1 [0252.204] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff28 | out: hHeap=0x1f0000) returned 1 [0252.204] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0252.204] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a50 | out: hHeap=0x1f0000) returned 1 [0252.204] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2857d0 | out: hHeap=0x1f0000) returned 1 [0252.204] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0252.205] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236608 | out: hHeap=0x1f0000) returned 1 [0252.205] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238d38 [0252.205] GetLastError () returned 0x0 [0252.205] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238c58 [0252.205] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0252.205] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0252.206] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0252.206] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0252.206] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0252.206] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0252.206] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x24e680 [0252.206] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2859e0 [0252.206] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0252.206] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0252.206] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0252.207] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0252.207] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285cf8 [0252.207] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0252.207] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0252.207] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f5d8 [0252.207] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x251068 [0252.207] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x233008 [0252.207] QueryPerformanceCounter (in: lpPerformanceCount=0x173dee0 | out: lpPerformanceCount=0x173dee0*=40957629134) returned 1 [0252.208] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173df20 | out: lpSystemTimeAsFileTime=0x173df20) [0252.208] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238b60 [0252.208] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0252.208] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cf0 [0252.208] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cf0 | out: hHeap=0x1f0000) returned 1 [0252.208] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0252.208] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0252.208] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cf0 [0252.208] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cf0 | out: hHeap=0x1f0000) returned 1 [0252.209] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0252.209] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b60 | out: hHeap=0x1f0000) returned 1 [0252.209] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0252.209] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238e88 [0252.209] GetLastError () returned 0x0 [0252.209] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0252.209] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0252.210] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0252.210] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x237fd8 [0252.210] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238000 [0252.210] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0252.210] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0252.211] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238398 [0252.211] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0252.211] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x222ee8 [0252.211] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0252.211] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0252.211] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0252.212] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0252.212] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0252.212] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2380a0 [0252.212] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381b8 [0252.212] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0252.212] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0252.213] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0252.213] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0252.213] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x234b90 [0252.213] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b90 | out: hHeap=0x1f0000) returned 1 [0252.213] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0252.213] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0252.213] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x20ffa0 [0252.214] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228c68 [0252.214] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2380a0 [0252.214] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381b8 [0252.214] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238140 [0252.214] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238168 [0252.214] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0252.214] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0252.214] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0252.214] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2380a0 [0252.214] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381b8 [0252.215] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0252.215] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0252.215] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0252.215] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206658 [0252.215] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x2b2870 [0252.215] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b2870 | out: hHeap=0x1f0000) returned 1 [0252.215] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206658 | out: hHeap=0x1f0000) returned 1 [0252.215] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0252.215] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0252.216] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0252.216] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0252.216] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204e90 [0252.216] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0252.216] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0252.216] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0252.216] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aa7f8 [0252.216] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0252.217] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0252.217] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0252.217] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228c68 | out: hHeap=0x1f0000) returned 1 [0252.217] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0252.217] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e90 | out: hHeap=0x1f0000) returned 1 [0252.217] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffa0 | out: hHeap=0x1f0000) returned 1 [0252.217] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0252.217] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aa358 [0252.218] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aa358 | out: hHeap=0x1f0000) returned 1 [0252.218] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ee8 | out: hHeap=0x1f0000) returned 1 [0252.218] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0252.218] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0252.218] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0252.218] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0252.218] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0252.218] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0252.218] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0252.219] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a90d8 [0252.219] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a9eb8 [0252.219] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a90d8 | out: hHeap=0x1f0000) returned 1 [0252.219] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a9eb8 | out: hHeap=0x1f0000) returned 1 [0252.219] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aa7f8 | out: hHeap=0x1f0000) returned 1 [0252.219] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0252.219] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285cf8 | out: hHeap=0x1f0000) returned 1 [0252.219] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24e680 | out: hHeap=0x1f0000) returned 1 [0252.219] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x232cc0 [0252.219] GetLastError () returned 0x0 [0252.220] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b00 [0252.220] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389f0 [0252.295] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1049\\LocalizedData.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1049\\localizeddata.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e290, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0252.295] GetFileType (hFile=0x1ac) returned 0x1 [0252.296] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x292ff8 [0252.296] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e218 | out: lpNewFilePointer=0x0) returned 1 [0252.296] GetLastError () returned 0xb7 [0252.297] CloseHandle (hObject=0x1ac) returned 1 [0252.297] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389f0 | out: hHeap=0x1f0000) returned 1 [0252.297] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b00 | out: hHeap=0x1f0000) returned 1 [0252.297] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2859e0 | out: hHeap=0x1f0000) returned 1 [0252.297] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285bf0 | out: hHeap=0x1f0000) returned 1 [0252.297] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0252.298] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f30 | out: hHeap=0x1f0000) returned 1 [0252.298] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0252.298] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20fef8 | out: hHeap=0x1f0000) returned 1 [0252.298] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0252.298] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232cc0 | out: hHeap=0x1f0000) returned 1 [0252.298] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0252.298] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0252.298] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x251068 | out: hHeap=0x1f0000) returned 1 [0252.298] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233008 | out: hHeap=0x1f0000) returned 1 [0252.298] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238f68 | out: hHeap=0x1f0000) returned 1 [0252.298] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238af0 | out: hHeap=0x1f0000) returned 1 [0252.299] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210120 | out: hHeap=0x1f0000) returned 1 [0252.299] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0252.299] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ad0 | out: hHeap=0x1f0000) returned 1 [0252.299] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2100a8 | out: hHeap=0x1f0000) returned 1 [0252.299] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0252.299] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a30 | out: hHeap=0x1f0000) returned 1 [0252.299] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x284f90 | out: hHeap=0x1f0000) returned 1 [0252.299] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0252.299] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236538 | out: hHeap=0x1f0000) returned 1 [0252.299] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228bd8 | out: hHeap=0x1f0000) returned 1 [0252.299] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0252.300] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0252.300] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228a28 | out: hHeap=0x1f0000) returned 1 [0252.300] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b30 | out: hHeap=0x1f0000) returned 1 [0252.300] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ae0 | out: hHeap=0x1f0000) returned 1 [0252.300] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28efd8 | out: hHeap=0x1f0000) returned 1 [0252.300] CloseHandle (hObject=0x174) returned 1 [0252.301] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389c0 | out: hHeap=0x1f0000) returned 1 [0252.301] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238890 | out: hHeap=0x1f0000) returned 1 [0252.301] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2377a0 | out: hHeap=0x1f0000) returned 1 [0252.301] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24ca08 | out: hHeap=0x1f0000) returned 1 [0252.301] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210078 | out: hHeap=0x1f0000) returned 1 [0252.301] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204df0 | out: hHeap=0x1f0000) returned 1 [0252.301] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286f98 | out: hHeap=0x1f0000) returned 1 [0252.301] CloseHandle (hObject=0x1c0) returned 1 [0252.302] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238950 | out: hHeap=0x1f0000) returned 1 [0252.302] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388f0 | out: hHeap=0x1f0000) returned 1 [0252.302] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad638 | out: hHeap=0x1f0000) returned 1 [0252.302] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cd0 | out: hHeap=0x1f0000) returned 1 [0252.302] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21b528 | out: hHeap=0x1f0000) returned 1 [0252.303] CloseHandle (hObject=0x21c) returned 1 [0252.303] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238940 | out: hHeap=0x1f0000) returned 1 [0252.303] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388a0 | out: hHeap=0x1f0000) returned 1 [0252.303] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad2a0 | out: hHeap=0x1f0000) returned 1 [0252.303] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389b0 | out: hHeap=0x1f0000) returned 1 [0252.303] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238930 | out: hHeap=0x1f0000) returned 1 [0252.304] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238870 | out: hHeap=0x1f0000) returned 1 [0252.304] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238920 | out: hHeap=0x1f0000) returned 1 [0252.304] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233698 | out: hHeap=0x1f0000) returned 1 [0252.304] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24fd60 | out: hHeap=0x1f0000) returned 1 [0252.304] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232ef0 | out: hHeap=0x1f0000) returned 1 [0252.304] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2067d8 | out: hHeap=0x1f0000) returned 1 [0252.304] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0252.304] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0252.305] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab158 | out: hHeap=0x1f0000) returned 1 [0252.305] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x258298 | out: hHeap=0x1f0000) returned 1 [0252.305] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2337b0 | out: hHeap=0x1f0000) returned 1 [0252.305] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239010 | out: hHeap=0x1f0000) returned 1 [0252.305] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2365a0 | out: hHeap=0x1f0000) returned 1 [0252.305] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f350 | out: hHeap=0x1f0000) returned 1 [0252.305] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228680 | out: hHeap=0x1f0000) returned 1 [0252.305] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0252.306] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1049\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1049\\localizeddata.xml")) returned 1 [0252.329] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0252.329] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239160 [0252.329] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228a28 [0252.329] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236468 [0252.330] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228a28 | out: hHeap=0x1f0000) returned 1 [0252.330] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2364d0 | out: hHeap=0x1f0000) returned 1 [0252.330] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239160 | out: hHeap=0x1f0000) returned 1 [0252.330] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1049\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1049\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0252.331] GetFileType (hFile=0x21c) returned 0x1 [0252.331] CloseHandle (hObject=0x21c) returned 1 [0252.331] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236538 [0252.331] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1049\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1049\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x173eb6c | out: lpFileInformation=0x173eb6c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758)) returned 1 [0252.332] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236538 | out: hHeap=0x1f0000) returned 1 [0252.332] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236608 [0252.332] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1049\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1049\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x173eb7c | out: lpFileInformation=0x173eb7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758)) returned 1 [0252.332] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236608 | out: hHeap=0x1f0000) returned 1 [0252.332] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236608 [0252.332] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236608 | out: hHeap=0x1f0000) returned 1 [0252.332] GetLastError () returned 0x0 [0252.333] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0252.333] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228bd8 [0252.333] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f350 [0252.333] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2364d0 [0252.333] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239208 [0252.333] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0252.333] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x212f98) returned 1 [0252.334] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238140 | out: pbBuffer=0x238140) returned 1 [0252.334] CryptReleaseContext (hProv=0x212f98, dwFlags=0x0) returned 1 [0252.334] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0252.334] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x251068 [0252.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x233238 [0252.335] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=40970364166) returned 1 [0252.335] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0252.335] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=40970392259) returned 1 [0252.335] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0252.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239278 [0252.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x258298 [0252.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x233350 [0252.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x2abb18 [0252.336] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210210 [0252.336] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2067d8 [0252.336] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210240 [0252.336] GetLastError () returned 0x0 [0252.336] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae9a8 [0252.336] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ade20 [0252.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae9a8 | out: hHeap=0x1f0000) returned 1 [0252.336] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x106) returned 0x2339e0 [0252.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ade20 | out: hHeap=0x1f0000) returned 1 [0252.337] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238800 [0252.337] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388f0 [0252.338] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1049\\SetupResources.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1049\\setupresources.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e230, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0252.338] GetFileType (hFile=0x21c) returned 0x1 [0252.339] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238910 [0252.339] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387e0 [0252.339] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1049\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1049\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0252.340] GetFileType (hFile=0x1c0) returned 0x1 [0252.340] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ef0 [0252.340] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f30 [0252.340] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad638 [0252.340] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238900 [0252.341] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238940 [0252.341] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1049\\SetupResources.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1049\\setupresources.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0252.342] GetFileType (hFile=0x174) returned 0x1 [0252.342] GetLastError () returned 0xb7 [0252.342] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe4) returned 0x21b9d8 [0252.342] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204df0 [0252.343] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e90 [0252.343] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0252.343] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad9d0 [0252.343] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238890 [0252.343] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389b0 [0252.344] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1049\\SetupResources.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1049\\setupresources.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0252.344] GetFileType (hFile=0x1ac) returned 0x1 [0252.344] GetLastError () returned 0xb7 [0252.345] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ef0 [0252.345] GetLastError () returned 0xb7 [0252.345] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e70 [0252.345] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bb0 [0252.345] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204db0 [0252.345] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb8) returned 0x237620 [0252.345] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238960 [0252.345] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238810 [0252.346] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1049\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1049\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1a4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0252.346] GetFileType (hFile=0x1e8) returned 0x1 [0252.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28cfc8 [0252.347] ReadFile (in: hFile=0x1e8, lpBuffer=0x28cfc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e100, lpOverlapped=0x0 | out: lpBuffer=0x28cfc8*, lpNumberOfBytesRead=0x173e100*=0x1000, lpOverlapped=0x0) returned 1 [0252.716] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24c600 [0252.716] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28dfd0 [0252.716] GetLastError () returned 0x0 [0252.723] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0252.723] GetLastError () returned 0x0 [0252.724] CloseHandle (hObject=0x21c) returned 1 [0252.724] CloseHandle (hObject=0x1c0) returned 1 [0252.725] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238920 [0252.725] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387f0 [0252.725] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1049\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1049\\setupresources.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0252.728] GetFileType (hFile=0x1c0) returned 0x1 [0252.728] GetLastError () returned 0xb7 [0252.729] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x286f98 [0252.729] GetLastError () returned 0xb7 [0252.731] CloseHandle (hObject=0x1c0) returned 1 [0252.731] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1049\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1049\\setupresources.dll")) returned 0 [0252.731] GetLastError () returned 0x20 [0252.731] GetLastError () returned 0x20 [0252.731] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228680 [0252.732] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238140 [0252.732] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238398 [0252.732] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x228758 [0252.732] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c50 [0252.732] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e50 [0252.732] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x238930 [0252.732] GetLastError () returned 0x20 [0252.732] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239010 [0252.732] GetLastError () returned 0x20 [0252.732] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238ec0 [0252.733] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236538 [0252.733] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2382d0 [0252.733] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x284f90 [0252.733] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238950 [0252.733] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0252.733] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210258 [0252.733] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389c0 [0252.733] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0252.733] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210198 [0252.733] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2384b0 [0252.733] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2859e0 [0252.733] GetLastError () returned 0x20 [0252.734] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x2388a0 [0252.734] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x2388d0 [0252.734] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238830 [0252.734] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388d0 | out: hHeap=0x1f0000) returned 1 [0252.734] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238860 [0252.734] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238830 | out: hHeap=0x1f0000) returned 1 [0252.734] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388a0 | out: hHeap=0x1f0000) returned 1 [0252.734] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388e0 [0252.734] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101b0 [0252.734] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388e0 | out: hHeap=0x1f0000) returned 1 [0252.734] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101c8 [0252.735] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0252.735] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238860 | out: hHeap=0x1f0000) returned 1 [0252.735] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101b0 [0252.735] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20fef8 [0252.735] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0252.735] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101b0 [0252.735] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20fef8 | out: hHeap=0x1f0000) returned 1 [0252.735] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0252.735] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0252.735] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204cd0 [0252.736] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0252.736] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c30 [0252.736] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cd0 | out: hHeap=0x1f0000) returned 1 [0252.736] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0252.736] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0252.736] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x237fd8 [0252.736] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d70 | out: hHeap=0x1f0000) returned 1 [0252.736] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204cd0 [0252.736] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0252.736] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c30 | out: hHeap=0x1f0000) returned 1 [0252.736] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204d70 [0252.736] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206808 [0252.736] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d70 | out: hHeap=0x1f0000) returned 1 [0252.737] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x237fd8 [0252.737] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206808 | out: hHeap=0x1f0000) returned 1 [0252.737] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cd0 | out: hHeap=0x1f0000) returned 1 [0252.737] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238820 [0252.737] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101c8 [0252.737] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238820 | out: hHeap=0x1f0000) returned 1 [0252.737] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101b0 [0252.737] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0252.737] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204ef0 [0252.737] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0252.737] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x2068c8 [0252.737] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ef0 | out: hHeap=0x1f0000) returned 1 [0252.737] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2068c8 | out: hHeap=0x1f0000) returned 1 [0252.737] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0252.737] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0252.737] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0252.737] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x284f90 | out: hHeap=0x1f0000) returned 1 [0252.738] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0252.738] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239010 [0252.738] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0252.738] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x212ad0) returned 1 [0252.739] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2381e0 | out: pbBuffer=0x2381e0) returned 1 [0252.739] CryptReleaseContext (hProv=0x212ad0, dwFlags=0x0) returned 1 [0252.739] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0252.739] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x237fd8 [0252.739] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238000 [0252.739] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c58 [0252.739] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0252.739] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0252.739] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c58 | out: hHeap=0x1f0000) returned 1 [0252.740] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8d18 [0252.740] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101b0 [0252.740] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x236608 [0252.740] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x237fd8 [0252.740] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2852a8 [0252.740] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e30 [0252.740] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2365a0 [0252.740] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238140 [0252.740] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x284f90 [0252.740] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388e0 [0252.740] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0252.740] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0252.740] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238820 [0252.741] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0252.741] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2100a8 [0252.741] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2100a8 | out: hHeap=0x1f0000) returned 1 [0252.741] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0252.741] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238820 | out: hHeap=0x1f0000) returned 1 [0252.741] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0252.741] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0252.741] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388e0 | out: hHeap=0x1f0000) returned 1 [0252.741] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x284f90 | out: hHeap=0x1f0000) returned 1 [0252.741] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0252.741] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2365a0 | out: hHeap=0x1f0000) returned 1 [0252.741] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239160 [0252.741] GetLastError () returned 0x0 [0252.742] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239198 [0252.742] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0252.742] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0252.742] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0252.742] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0252.742] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0252.742] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0252.742] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x24e7c0 [0252.742] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285bf0 [0252.742] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0252.742] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0252.742] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0252.742] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0252.742] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285e00 [0252.742] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0252.743] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0252.743] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fb50 [0252.743] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x24fd60 [0252.743] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x232ba8 [0252.743] QueryPerformanceCounter (in: lpPerformanceCount=0x173dee0 | out: lpPerformanceCount=0x173dee0*=41011177687) returned 1 [0252.743] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173df20 | out: lpSystemTimeAsFileTime=0x173df20) [0252.743] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x2388e0 [0252.743] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0252.743] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bb0 [0252.743] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bb0 | out: hHeap=0x1f0000) returned 1 [0252.744] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0252.744] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0252.744] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0252.744] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d70 | out: hHeap=0x1f0000) returned 1 [0252.744] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0252.745] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388e0 | out: hHeap=0x1f0000) returned 1 [0252.745] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0252.745] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238d70 [0252.745] GetLastError () returned 0x0 [0252.745] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0252.745] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0252.745] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0252.745] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238140 [0252.745] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238168 [0252.745] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0252.745] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0252.745] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238190 [0252.745] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0252.746] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x222ee8 [0252.746] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0252.746] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0252.746] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0252.746] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0252.746] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0252.746] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381b8 [0252.746] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2382d0 [0252.746] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0252.746] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0252.746] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0252.746] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0252.746] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x234b90 [0252.747] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b90 | out: hHeap=0x1f0000) returned 1 [0252.747] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0252.747] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0252.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101c8 [0252.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228518 [0252.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381b8 [0252.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2382d0 [0252.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381e0 [0252.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238780 [0252.747] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0252.747] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0252.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0252.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381b8 [0252.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2382d0 [0252.748] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0252.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0252.748] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0252.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206928 [0252.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x2b4668 [0252.748] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b4668 | out: hHeap=0x1f0000) returned 1 [0252.748] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206928 | out: hHeap=0x1f0000) returned 1 [0252.748] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0252.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0252.748] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0252.748] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0252.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204d70 [0252.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0252.749] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0252.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0252.749] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a9c68 [0252.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0252.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238780 | out: hHeap=0x1f0000) returned 1 [0252.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0252.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228518 | out: hHeap=0x1f0000) returned 1 [0252.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0252.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d70 | out: hHeap=0x1f0000) returned 1 [0252.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0252.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0252.749] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a97c8 [0252.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a97c8 | out: hHeap=0x1f0000) returned 1 [0252.750] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ee8 | out: hHeap=0x1f0000) returned 1 [0252.750] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0252.750] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0252.750] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0252.750] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0252.750] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0252.750] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0252.750] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0252.750] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aac98 [0252.750] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a9a18 [0252.750] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aac98 | out: hHeap=0x1f0000) returned 1 [0252.750] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a9a18 | out: hHeap=0x1f0000) returned 1 [0252.750] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a9c68 | out: hHeap=0x1f0000) returned 1 [0252.751] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0252.751] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285e00 | out: hHeap=0x1f0000) returned 1 [0252.751] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24e7c0 | out: hHeap=0x1f0000) returned 1 [0252.751] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x232cc0 [0252.751] GetLastError () returned 0x0 [0252.751] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388a0 [0252.751] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238860 [0252.752] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1049\\SetupResources.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1049\\setupresources.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e290, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0252.752] GetFileType (hFile=0x1c0) returned 0x1 [0252.752] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x286f98 [0252.752] SetFilePointerEx (in: hFile=0x1c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e218 | out: lpNewFilePointer=0x0) returned 1 [0252.753] GetLastError () returned 0xb7 [0252.753] CloseHandle (hObject=0x1c0) returned 1 [0252.753] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238860 | out: hHeap=0x1f0000) returned 1 [0252.753] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388a0 | out: hHeap=0x1f0000) returned 1 [0252.753] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285bf0 | out: hHeap=0x1f0000) returned 1 [0252.753] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2852a8 | out: hHeap=0x1f0000) returned 1 [0252.754] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0252.754] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e30 | out: hHeap=0x1f0000) returned 1 [0252.754] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236608 | out: hHeap=0x1f0000) returned 1 [0252.754] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0252.754] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0252.754] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232cc0 | out: hHeap=0x1f0000) returned 1 [0252.754] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0252.754] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0252.754] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24fd60 | out: hHeap=0x1f0000) returned 1 [0252.754] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232ba8 | out: hHeap=0x1f0000) returned 1 [0252.754] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239010 | out: hHeap=0x1f0000) returned 1 [0252.754] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238930 | out: hHeap=0x1f0000) returned 1 [0252.754] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0252.754] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0252.754] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389c0 | out: hHeap=0x1f0000) returned 1 [0252.755] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0252.755] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0252.755] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238950 | out: hHeap=0x1f0000) returned 1 [0252.755] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2859e0 | out: hHeap=0x1f0000) returned 1 [0252.755] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0252.755] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236538 | out: hHeap=0x1f0000) returned 1 [0252.755] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228758 | out: hHeap=0x1f0000) returned 1 [0252.755] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0252.755] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0252.755] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228680 | out: hHeap=0x1f0000) returned 1 [0252.755] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387f0 | out: hHeap=0x1f0000) returned 1 [0252.755] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238920 | out: hHeap=0x1f0000) returned 1 [0252.755] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28cfc8 | out: hHeap=0x1f0000) returned 1 [0252.755] CloseHandle (hObject=0x1e8) returned 1 [0252.756] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238810 | out: hHeap=0x1f0000) returned 1 [0252.756] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238960 | out: hHeap=0x1f0000) returned 1 [0252.756] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237620 | out: hHeap=0x1f0000) returned 1 [0252.756] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24c600 | out: hHeap=0x1f0000) returned 1 [0252.756] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0252.756] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e70 | out: hHeap=0x1f0000) returned 1 [0252.756] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28dfd0 | out: hHeap=0x1f0000) returned 1 [0252.757] CloseHandle (hObject=0x1ac) returned 1 [0252.757] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389b0 | out: hHeap=0x1f0000) returned 1 [0252.757] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238890 | out: hHeap=0x1f0000) returned 1 [0252.757] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad9d0 | out: hHeap=0x1f0000) returned 1 [0252.757] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204df0 | out: hHeap=0x1f0000) returned 1 [0252.757] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21b9d8 | out: hHeap=0x1f0000) returned 1 [0252.757] CloseHandle (hObject=0x174) returned 1 [0252.758] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238940 | out: hHeap=0x1f0000) returned 1 [0252.758] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238900 | out: hHeap=0x1f0000) returned 1 [0252.758] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad638 | out: hHeap=0x1f0000) returned 1 [0252.758] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387e0 | out: hHeap=0x1f0000) returned 1 [0252.758] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238910 | out: hHeap=0x1f0000) returned 1 [0252.758] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388f0 | out: hHeap=0x1f0000) returned 1 [0252.758] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238800 | out: hHeap=0x1f0000) returned 1 [0252.758] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2339e0 | out: hHeap=0x1f0000) returned 1 [0252.758] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x258298 | out: hHeap=0x1f0000) returned 1 [0252.758] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233350 | out: hHeap=0x1f0000) returned 1 [0252.758] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2067d8 | out: hHeap=0x1f0000) returned 1 [0252.758] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210240 | out: hHeap=0x1f0000) returned 1 [0252.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0252.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abb18 | out: hHeap=0x1f0000) returned 1 [0252.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x251068 | out: hHeap=0x1f0000) returned 1 [0252.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233238 | out: hHeap=0x1f0000) returned 1 [0252.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239208 | out: hHeap=0x1f0000) returned 1 [0252.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2364d0 | out: hHeap=0x1f0000) returned 1 [0252.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f350 | out: hHeap=0x1f0000) returned 1 [0252.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228bd8 | out: hHeap=0x1f0000) returned 1 [0252.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0253.217] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1049\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1049\\setupresources.dll")) returned 1 [0253.219] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0253.220] FindClose (in: hFindFile=0x24e980 | out: hFindFile=0x24e980) returned 1 [0253.220] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0253.220] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ee88 | out: hHeap=0x1f0000) returned 1 [0253.220] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0253.220] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228b00 | out: hHeap=0x1f0000) returned 1 [0253.221] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228a28 [0253.221] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0253.221] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22ee88 [0253.221] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228bd8 [0253.221] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1053\\*", lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ec40 [0253.222] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228758 [0253.222] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228bd8 | out: hHeap=0x1f0000) returned 1 [0253.222] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0253.222] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.222] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228680 [0253.222] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228758 | out: hHeap=0x1f0000) returned 1 [0253.222] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0253.223] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0253.223] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xf19, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0253.223] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0253.223] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228b00 [0253.223] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x2364d0 [0253.223] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228b00 | out: hHeap=0x1f0000) returned 1 [0253.223] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228680 | out: hHeap=0x1f0000) returned 1 [0253.224] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0253.224] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1053\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1053\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0253.225] GetFileType (hFile=0x1e8) returned 0x1 [0253.225] CloseHandle (hObject=0x1e8) returned 1 [0253.226] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8d18 [0253.226] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1053\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1053\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x173eb6c | out: lpFileInformation=0x173eb6c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xf19)) returned 1 [0253.226] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0253.226] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8d18 [0253.227] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1053\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1053\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x173eb7c | out: lpFileInformation=0x173eb7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xf19)) returned 1 [0253.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0253.227] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8d18 [0253.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0253.227] GetLastError () returned 0x0 [0253.227] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0253.228] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228bd8 [0253.228] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d6a0 [0253.228] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8d18 [0253.228] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239010 [0253.228] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0253.228] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x212ad0) returned 1 [0253.229] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2384b0 | out: pbBuffer=0x2384b0) returned 1 [0253.230] CryptReleaseContext (hProv=0x212ad0, dwFlags=0x0) returned 1 [0253.230] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0253.230] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x254980 [0253.230] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2339e0 [0253.230] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=41059908214) returned 1 [0253.231] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0253.231] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=41059977082) returned 1 [0253.231] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0253.231] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238e18 [0253.231] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x258298 [0253.231] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x232ba8 [0253.232] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x2ab638 [0253.232] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210210 [0253.232] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2068c8 [0253.232] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210240 [0253.232] GetLastError () returned 0x0 [0253.232] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236608 [0253.233] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a578 [0253.233] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236608 | out: hHeap=0x1f0000) returned 1 [0253.233] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xee) returned 0x2b1b78 [0253.233] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a578 | out: hHeap=0x1f0000) returned 1 [0253.234] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388c0 [0253.234] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238930 [0253.235] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1053\\eula.rtf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1053\\eula.rtf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e230, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0253.752] GetFileType (hFile=0x174) returned 0x1 [0253.753] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389b0 [0253.753] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238850 [0253.754] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1053\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1053\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0253.754] GetFileType (hFile=0x1e8) returned 0x1 [0253.755] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e70 [0253.755] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bb0 [0253.755] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad7a8 [0253.755] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238900 [0253.755] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238960 [0253.756] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1053\\eula.rtf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1053\\eula.rtf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0253.756] GetFileType (hFile=0x1c0) returned 0x1 [0253.757] GetLastError () returned 0xb7 [0253.757] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe4) returned 0x21b438 [0253.757] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d10 [0253.757] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e30 [0253.757] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e50 [0253.757] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad4c8 [0253.757] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238920 [0253.758] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387e0 [0253.759] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1053\\eula.rtf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1053\\eula.rtf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0253.759] GetFileType (hFile=0x21c) returned 0x1 [0253.759] GetLastError () returned 0xb7 [0253.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204dd0 [0253.760] GetLastError () returned 0xb7 [0253.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e70 [0253.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c90 [0253.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cb0 [0253.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb8) returned 0x237920 [0253.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238860 [0253.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238840 [0253.761] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1053\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1053\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1a4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0253.761] GetFileType (hFile=0x1e0) returned 0x1 [0253.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28afb8 [0253.762] ReadFile (in: hFile=0x1e0, lpBuffer=0x28afb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e100, lpOverlapped=0x0 | out: lpBuffer=0x28afb8*, lpNumberOfBytesRead=0x173e100*=0xf19, lpOverlapped=0x0) returned 1 [0253.765] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24bdf0 [0253.765] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28cfc8 [0253.765] GetLastError () returned 0x0 [0253.765] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210258 [0253.766] GetLastError () returned 0x0 [0253.767] CloseHandle (hObject=0x174) returned 1 [0253.768] CloseHandle (hObject=0x1e8) returned 1 [0253.768] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388e0 [0253.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387f0 [0253.769] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1053\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1053\\eula.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0253.771] GetFileType (hFile=0x1e8) returned 0x1 [0253.772] GetLastError () returned 0xb7 [0253.772] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x286f98 [0253.772] GetLastError () returned 0xb7 [0253.774] CloseHandle (hObject=0x1e8) returned 1 [0253.774] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1053\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1053\\eula.rtf")) returned 0 [0253.775] GetLastError () returned 0x20 [0253.775] GetLastError () returned 0x20 [0253.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228c68 [0253.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2380a0 [0253.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238168 [0253.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x228b00 [0253.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e30 [0253.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cf0 [0253.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x2388d0 [0253.775] GetLastError () returned 0x20 [0253.776] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238d00 [0253.776] GetLastError () returned 0x20 [0253.776] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238da8 [0253.776] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2365a0 [0253.776] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x237fd8 [0253.776] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285098 [0253.776] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388f0 [0253.776] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0253.776] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101b0 [0253.776] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238910 [0253.776] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0253.777] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0253.777] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238280 [0253.777] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2857d0 [0253.777] GetLastError () returned 0x20 [0253.777] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238880 [0253.777] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238940 [0253.777] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238950 [0253.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238940 | out: hHeap=0x1f0000) returned 1 [0253.777] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238970 [0253.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238950 | out: hHeap=0x1f0000) returned 1 [0253.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238880 | out: hHeap=0x1f0000) returned 1 [0253.778] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389c0 [0253.778] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101e0 [0253.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389c0 | out: hHeap=0x1f0000) returned 1 [0253.778] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210198 [0253.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0253.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238970 | out: hHeap=0x1f0000) returned 1 [0253.778] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101e0 [0253.778] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2100a8 [0253.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0253.778] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0253.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2100a8 | out: hHeap=0x1f0000) returned 1 [0253.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0253.779] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210198 [0253.779] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204d30 [0253.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0253.779] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f10 [0253.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d30 | out: hHeap=0x1f0000) returned 1 [0253.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0253.779] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cb0 [0253.779] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238000 [0253.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cb0 | out: hHeap=0x1f0000) returned 1 [0253.779] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204c30 [0253.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0253.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f10 | out: hHeap=0x1f0000) returned 1 [0253.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204c10 [0253.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206928 [0253.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c10 | out: hHeap=0x1f0000) returned 1 [0253.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238000 [0253.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206928 | out: hHeap=0x1f0000) returned 1 [0253.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c30 | out: hHeap=0x1f0000) returned 1 [0253.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238990 [0253.781] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210198 [0253.781] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238990 | out: hHeap=0x1f0000) returned 1 [0253.781] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0253.781] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0253.781] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204e30 [0253.781] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0253.781] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x2067d8 [0253.781] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e30 | out: hHeap=0x1f0000) returned 1 [0253.781] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2067d8 | out: hHeap=0x1f0000) returned 1 [0253.781] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0253.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0253.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0253.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285098 | out: hHeap=0x1f0000) returned 1 [0253.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0253.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238f30 [0253.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0253.782] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x212ad0) returned 1 [0253.784] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238370 | out: pbBuffer=0x238370) returned 1 [0253.784] CryptReleaseContext (hProv=0x212ad0, dwFlags=0x0) returned 1 [0253.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0253.784] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x237fd8 [0253.784] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2380a0 [0253.784] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239080 [0253.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0253.784] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0253.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239080 | out: hHeap=0x1f0000) returned 1 [0253.785] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8dc8 [0253.785] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210198 [0253.785] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x236608 [0253.785] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x237fd8 [0253.785] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x284f90 [0253.785] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cb0 [0253.785] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236468 [0253.785] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238000 [0253.786] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2854b8 [0253.786] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238800 [0253.786] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0253.786] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0253.786] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238970 [0253.786] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0253.786] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210018 [0253.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210018 | out: hHeap=0x1f0000) returned 1 [0254.116] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0254.116] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238970 | out: hHeap=0x1f0000) returned 1 [0254.116] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0254.116] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0254.116] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238800 | out: hHeap=0x1f0000) returned 1 [0254.116] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2854b8 | out: hHeap=0x1f0000) returned 1 [0254.116] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0254.116] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0254.117] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239208 [0254.117] GetLastError () returned 0x0 [0254.117] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238c58 [0254.117] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0254.117] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0254.117] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0254.117] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0254.118] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0254.118] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0254.118] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x24ed40 [0254.118] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285cf8 [0254.118] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0254.118] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0254.118] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0254.118] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0254.118] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2854b8 [0254.118] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0254.118] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0254.118] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22ff38 [0254.119] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x24fd60 [0254.119] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x233238 [0254.119] QueryPerformanceCounter (in: lpPerformanceCount=0x173dee0 | out: lpPerformanceCount=0x173dee0*=41148778995) returned 1 [0254.119] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173df20 | out: lpSystemTimeAsFileTime=0x173df20) [0254.119] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238870 [0254.119] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0254.119] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204df0 [0254.119] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204df0 | out: hHeap=0x1f0000) returned 1 [0254.120] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0254.120] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0254.120] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204dd0 [0254.120] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204dd0 | out: hHeap=0x1f0000) returned 1 [0254.120] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0254.120] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238870 | out: hHeap=0x1f0000) returned 1 [0254.120] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0254.120] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238c90 [0254.120] GetLastError () returned 0x0 [0254.120] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0254.121] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0254.121] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0254.121] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238000 [0254.121] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381b8 [0254.121] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0254.121] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0254.121] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381e0 [0254.121] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0254.121] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x222ee8 [0254.121] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0254.121] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0254.122] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0254.122] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0254.122] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0254.122] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2382d0 [0254.122] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2382f8 [0254.122] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0254.122] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0254.122] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0254.122] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0254.122] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x234b90 [0254.122] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b90 | out: hHeap=0x1f0000) returned 1 [0254.123] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0254.123] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0254.123] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101e0 [0254.123] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228cb0 [0254.123] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2382d0 [0254.123] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2382f8 [0254.123] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238370 [0254.123] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238398 [0254.123] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0254.123] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0254.123] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0254.123] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2382d0 [0254.123] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2382f8 [0254.124] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0254.124] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0254.124] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0254.124] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2067d8 [0254.124] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x2b3dd8 [0254.124] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b3dd8 | out: hHeap=0x1f0000) returned 1 [0254.124] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2067d8 | out: hHeap=0x1f0000) returned 1 [0254.124] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0254.124] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0254.124] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0254.124] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0254.124] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204d70 [0254.124] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0254.124] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0254.124] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0254.125] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a9578 [0254.125] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0254.125] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0254.125] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0254.125] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228cb0 | out: hHeap=0x1f0000) returned 1 [0254.125] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0254.125] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d70 | out: hHeap=0x1f0000) returned 1 [0254.125] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0254.125] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0254.125] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a97c8 [0254.125] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a97c8 | out: hHeap=0x1f0000) returned 1 [0254.125] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ee8 | out: hHeap=0x1f0000) returned 1 [0254.125] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0254.125] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0254.125] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0254.126] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0254.126] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0254.126] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0254.126] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0254.126] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aaa48 [0254.126] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a9450 [0254.126] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aaa48 | out: hHeap=0x1f0000) returned 1 [0254.126] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a9450 | out: hHeap=0x1f0000) returned 1 [0254.126] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a9578 | out: hHeap=0x1f0000) returned 1 [0254.126] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0254.126] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2854b8 | out: hHeap=0x1f0000) returned 1 [0254.126] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24ed40 | out: hHeap=0x1f0000) returned 1 [0254.126] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x233350 [0254.126] GetLastError () returned 0x0 [0254.127] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238940 [0254.127] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238870 [0254.127] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1053\\eula.rtf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1053\\eula.rtf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e290, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0254.128] GetFileType (hFile=0x1ac) returned 0x1 [0254.128] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x286f98 [0254.128] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e218 | out: lpNewFilePointer=0x0) returned 1 [0254.129] GetLastError () returned 0xb7 [0254.130] CloseHandle (hObject=0x1ac) returned 1 [0254.132] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238870 | out: hHeap=0x1f0000) returned 1 [0254.132] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238940 | out: hHeap=0x1f0000) returned 1 [0254.132] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285cf8 | out: hHeap=0x1f0000) returned 1 [0254.132] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x284f90 | out: hHeap=0x1f0000) returned 1 [0254.132] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0254.132] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cb0 | out: hHeap=0x1f0000) returned 1 [0254.132] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236608 | out: hHeap=0x1f0000) returned 1 [0254.133] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0254.133] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8dc8 | out: hHeap=0x1f0000) returned 1 [0254.133] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233350 | out: hHeap=0x1f0000) returned 1 [0254.133] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0254.133] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0254.133] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24fd60 | out: hHeap=0x1f0000) returned 1 [0254.133] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233238 | out: hHeap=0x1f0000) returned 1 [0254.133] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238f30 | out: hHeap=0x1f0000) returned 1 [0254.133] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388d0 | out: hHeap=0x1f0000) returned 1 [0254.133] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0254.133] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0254.133] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238910 | out: hHeap=0x1f0000) returned 1 [0254.133] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0254.133] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0254.134] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388f0 | out: hHeap=0x1f0000) returned 1 [0254.134] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2857d0 | out: hHeap=0x1f0000) returned 1 [0254.134] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0254.134] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2365a0 | out: hHeap=0x1f0000) returned 1 [0254.134] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228b00 | out: hHeap=0x1f0000) returned 1 [0254.134] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0254.134] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0254.134] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228c68 | out: hHeap=0x1f0000) returned 1 [0254.134] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387f0 | out: hHeap=0x1f0000) returned 1 [0254.134] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388e0 | out: hHeap=0x1f0000) returned 1 [0254.134] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28afb8 | out: hHeap=0x1f0000) returned 1 [0254.135] CloseHandle (hObject=0x1e0) returned 1 [0254.135] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238840 | out: hHeap=0x1f0000) returned 1 [0254.135] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238860 | out: hHeap=0x1f0000) returned 1 [0254.136] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237920 | out: hHeap=0x1f0000) returned 1 [0254.136] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24bdf0 | out: hHeap=0x1f0000) returned 1 [0254.136] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0254.136] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e70 | out: hHeap=0x1f0000) returned 1 [0254.136] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28cfc8 | out: hHeap=0x1f0000) returned 1 [0254.136] CloseHandle (hObject=0x21c) returned 1 [0254.136] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387e0 | out: hHeap=0x1f0000) returned 1 [0254.137] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238920 | out: hHeap=0x1f0000) returned 1 [0254.137] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad4c8 | out: hHeap=0x1f0000) returned 1 [0254.137] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d10 | out: hHeap=0x1f0000) returned 1 [0254.137] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21b438 | out: hHeap=0x1f0000) returned 1 [0254.137] CloseHandle (hObject=0x1c0) returned 1 [0254.137] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238960 | out: hHeap=0x1f0000) returned 1 [0254.138] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238900 | out: hHeap=0x1f0000) returned 1 [0254.138] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad7a8 | out: hHeap=0x1f0000) returned 1 [0254.138] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238850 | out: hHeap=0x1f0000) returned 1 [0254.138] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389b0 | out: hHeap=0x1f0000) returned 1 [0254.138] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238930 | out: hHeap=0x1f0000) returned 1 [0254.138] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388c0 | out: hHeap=0x1f0000) returned 1 [0254.138] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b1b78 | out: hHeap=0x1f0000) returned 1 [0254.138] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x258298 | out: hHeap=0x1f0000) returned 1 [0254.138] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232ba8 | out: hHeap=0x1f0000) returned 1 [0254.138] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2068c8 | out: hHeap=0x1f0000) returned 1 [0254.138] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210240 | out: hHeap=0x1f0000) returned 1 [0254.138] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0254.139] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab638 | out: hHeap=0x1f0000) returned 1 [0254.139] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x254980 | out: hHeap=0x1f0000) returned 1 [0254.139] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2339e0 | out: hHeap=0x1f0000) returned 1 [0254.139] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239010 | out: hHeap=0x1f0000) returned 1 [0254.139] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0254.139] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d6a0 | out: hHeap=0x1f0000) returned 1 [0254.139] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228bd8 | out: hHeap=0x1f0000) returned 1 [0254.139] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0254.139] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1053\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1053\\eula.rtf")) returned 1 [0254.143] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12f70, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0254.143] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239010 [0254.143] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228bd8 [0254.143] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2365a0 [0254.143] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228bd8 | out: hHeap=0x1f0000) returned 1 [0254.143] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2364d0 | out: hHeap=0x1f0000) returned 1 [0254.143] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239010 | out: hHeap=0x1f0000) returned 1 [0254.143] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1053\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1053\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0254.144] GetFileType (hFile=0x1c0) returned 0x1 [0254.144] CloseHandle (hObject=0x1c0) returned 1 [0254.145] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236468 [0254.145] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1053\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1053\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x173eb6c | out: lpFileInformation=0x173eb6c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12f70)) returned 1 [0254.145] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0254.145] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236608 [0254.145] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1053\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1053\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x173eb7c | out: lpFileInformation=0x173eb7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12f70)) returned 1 [0254.145] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236608 | out: hHeap=0x1f0000) returned 1 [0254.145] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236468 [0254.145] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0254.145] GetLastError () returned 0x0 [0254.147] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0254.147] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228758 [0254.147] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d508 [0254.147] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2364d0 [0254.147] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238f30 [0254.147] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0254.147] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x213460) returned 1 [0254.150] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238168 | out: pbBuffer=0x238168) returned 1 [0254.150] CryptReleaseContext (hProv=0x213460, dwFlags=0x0) returned 1 [0254.150] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0254.150] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x254980 [0254.151] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x233580 [0254.151] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=41151956541) returned 1 [0254.151] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0254.151] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=41151983884) returned 1 [0254.151] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0254.151] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x2390f0 [0254.151] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x255c88 [0254.151] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x233468 [0254.151] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x2abb18 [0254.151] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210210 [0254.152] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2068c8 [0254.152] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0254.152] GetLastError () returned 0x0 [0254.152] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2aecf0 [0254.152] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad2a0 [0254.152] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aecf0 | out: hHeap=0x1f0000) returned 1 [0254.152] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x106) returned 0x2339e0 [0254.152] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad2a0 | out: hHeap=0x1f0000) returned 1 [0254.152] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238860 [0254.153] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238840 [0254.153] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1053\\LocalizedData.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1053\\localizeddata.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e230, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0254.155] GetFileType (hFile=0x1c0) returned 0x1 [0254.155] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238960 [0254.155] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388e0 [0254.156] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1053\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1053\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0254.156] GetFileType (hFile=0x21c) returned 0x1 [0254.157] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e30 [0254.157] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e50 [0254.157] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad4c8 [0254.157] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238920 [0254.157] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387e0 [0254.158] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1053\\LocalizedData.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1053\\localizeddata.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0254.158] GetFileType (hFile=0x1e0) returned 0x1 [0254.158] GetLastError () returned 0xb7 [0254.159] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe4) returned 0x21b7f8 [0254.159] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e70 [0254.159] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c90 [0254.159] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cb0 [0254.159] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2adb40 [0254.159] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238870 [0254.159] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238850 [0254.160] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1053\\LocalizedData.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1053\\localizeddata.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0254.160] GetFileType (hFile=0x1ac) returned 0x1 [0254.160] GetLastError () returned 0xb7 [0254.160] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204df0 [0254.160] GetLastError () returned 0xb7 [0254.161] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204db0 [0254.161] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d30 [0254.161] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ef0 [0254.161] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb8) returned 0x2374a0 [0254.161] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387f0 [0254.161] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238930 [0254.712] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1053\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1053\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1a4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0254.712] GetFileType (hFile=0x174) returned 0x1 [0254.713] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28cfc8 [0254.713] ReadFile (in: hFile=0x174, lpBuffer=0x28cfc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e100, lpOverlapped=0x0 | out: lpBuffer=0x28cfc8*, lpNumberOfBytesRead=0x173e100*=0x1000, lpOverlapped=0x0) returned 1 [0254.743] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24d218 [0254.743] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x286f98 [0254.743] GetLastError () returned 0x0 [0254.829] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210198 [0254.829] GetLastError () returned 0x0 [0254.830] CloseHandle (hObject=0x1c0) returned 1 [0254.831] CloseHandle (hObject=0x21c) returned 1 [0254.831] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388f0 [0254.831] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238940 [0254.832] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1053\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1053\\localizeddata.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0254.837] GetFileType (hFile=0x21c) returned 0x1 [0254.837] GetLastError () returned 0xb7 [0254.837] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28efd8 [0254.838] GetLastError () returned 0xb7 [0254.840] CloseHandle (hObject=0x21c) returned 1 [0254.840] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1053\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1053\\localizeddata.xml")) returned 0 [0254.840] GetLastError () returned 0x20 [0254.841] GetLastError () returned 0x20 [0254.841] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228680 [0254.841] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238280 [0254.841] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x237fd8 [0254.841] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x228518 [0254.841] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204dd0 [0254.841] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f50 [0254.841] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x238820 [0254.841] GetLastError () returned 0x20 [0254.842] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239010 [0254.842] GetLastError () returned 0x20 [0254.842] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238e18 [0254.842] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236538 [0254.842] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2382d0 [0254.842] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2857d0 [0254.842] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238880 [0254.842] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0254.842] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210240 [0254.842] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238970 [0254.843] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0254.843] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0254.843] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238000 [0254.843] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285ae8 [0254.843] GetLastError () returned 0x20 [0254.843] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238950 [0254.843] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x2388d0 [0254.843] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238910 [0254.843] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388d0 | out: hHeap=0x1f0000) returned 1 [0254.843] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388b0 [0254.844] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238910 | out: hHeap=0x1f0000) returned 1 [0254.844] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238950 | out: hHeap=0x1f0000) returned 1 [0254.844] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389b0 [0254.844] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210258 [0254.844] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389b0 | out: hHeap=0x1f0000) returned 1 [0254.844] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101b0 [0254.844] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0254.844] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388b0 | out: hHeap=0x1f0000) returned 1 [0254.844] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210258 [0254.844] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20fef8 [0254.844] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0254.845] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210258 [0254.845] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20fef8 | out: hHeap=0x1f0000) returned 1 [0254.845] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0254.845] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101b0 [0254.845] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204ef0 [0254.845] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0254.845] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f10 [0254.845] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ef0 | out: hHeap=0x1f0000) returned 1 [0254.845] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0254.845] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c90 [0254.845] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238398 [0254.846] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c90 | out: hHeap=0x1f0000) returned 1 [0254.846] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204c90 [0254.846] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0254.846] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f10 | out: hHeap=0x1f0000) returned 1 [0254.846] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204e30 [0254.846] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x2067d8 [0254.846] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e30 | out: hHeap=0x1f0000) returned 1 [0254.846] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238398 [0254.846] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2067d8 | out: hHeap=0x1f0000) returned 1 [0254.846] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c90 | out: hHeap=0x1f0000) returned 1 [0254.846] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238890 [0254.846] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101b0 [0254.847] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238890 | out: hHeap=0x1f0000) returned 1 [0254.847] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210258 [0254.847] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0254.847] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204e30 [0254.847] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0254.847] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x2067d8 [0254.847] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e30 | out: hHeap=0x1f0000) returned 1 [0254.847] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2067d8 | out: hHeap=0x1f0000) returned 1 [0254.847] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0254.847] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0254.847] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0254.848] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2857d0 | out: hHeap=0x1f0000) returned 1 [0254.848] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0254.848] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238e50 [0254.848] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0254.848] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x213350) returned 1 [0255.044] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2380a0 | out: pbBuffer=0x2380a0) returned 1 [0255.044] CryptReleaseContext (hProv=0x213350, dwFlags=0x0) returned 1 [0255.044] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0255.044] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2380a0 [0255.044] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238140 [0255.044] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239208 [0255.044] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0255.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0255.045] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239208 | out: hHeap=0x1f0000) returned 1 [0255.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8e78 [0255.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101b0 [0255.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x236608 [0255.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2381b8 [0255.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285bf0 [0255.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bd0 [0255.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236468 [0255.046] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2380a0 [0255.046] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x284f90 [0255.046] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238910 [0255.046] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0255.046] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210258 [0255.046] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238800 [0255.046] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0255.046] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff28 [0255.046] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff28 | out: hHeap=0x1f0000) returned 1 [0255.047] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0255.047] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238800 | out: hHeap=0x1f0000) returned 1 [0255.047] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0255.047] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0255.047] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238910 | out: hHeap=0x1f0000) returned 1 [0255.047] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x284f90 | out: hHeap=0x1f0000) returned 1 [0255.047] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0255.047] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0255.047] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239278 [0255.047] GetLastError () returned 0x0 [0255.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238e18 [0255.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0255.048] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0255.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0255.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0255.048] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0255.048] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0255.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x24e900 [0255.049] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2851a0 [0255.049] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0255.049] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0255.049] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0255.049] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0255.049] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2856c8 [0255.049] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0255.049] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0255.049] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f5d8 [0255.049] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x251068 [0255.049] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x233698 [0255.050] QueryPerformanceCounter (in: lpPerformanceCount=0x173dee0 | out: lpPerformanceCount=0x173dee0*=41241850859) returned 1 [0255.050] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173df20 | out: lpSystemTimeAsFileTime=0x173df20) [0255.050] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238980 [0255.050] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0255.050] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bb0 [0255.050] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bb0 | out: hHeap=0x1f0000) returned 1 [0255.050] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0255.050] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0255.050] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204dd0 [0255.051] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204dd0 | out: hHeap=0x1f0000) returned 1 [0255.051] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0255.051] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238980 | out: hHeap=0x1f0000) returned 1 [0255.051] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0255.051] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239160 [0255.051] GetLastError () returned 0x0 [0255.051] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0255.051] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0255.051] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0255.051] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2380a0 [0255.052] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238398 [0255.052] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0255.052] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0255.052] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381e0 [0255.052] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0255.052] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x222ee8 [0255.053] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0255.053] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0255.053] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0255.054] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0255.054] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0255.054] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238190 [0255.054] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238168 [0255.054] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0255.054] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0255.054] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0255.054] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0255.055] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x234b90 [0255.055] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b90 | out: hHeap=0x1f0000) returned 1 [0255.055] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0255.055] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0255.055] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210258 [0255.055] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2287a0 [0255.055] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238168 [0255.055] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238190 [0255.055] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238280 [0255.056] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2382d0 [0255.056] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0255.056] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0255.056] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0255.056] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238168 [0255.056] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238190 [0255.056] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0255.056] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0255.056] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0255.057] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2067d8 [0255.057] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x2b3100 [0255.057] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b3100 | out: hHeap=0x1f0000) returned 1 [0255.057] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2067d8 | out: hHeap=0x1f0000) returned 1 [0255.057] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0255.057] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0255.057] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0255.057] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0255.057] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204c30 [0255.057] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0255.057] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0255.058] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0255.058] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a9fe0 [0255.058] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0255.058] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0255.058] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0255.058] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2287a0 | out: hHeap=0x1f0000) returned 1 [0255.058] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0255.058] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c30 | out: hHeap=0x1f0000) returned 1 [0255.058] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0255.058] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0255.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aa5a8 [0255.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aa5a8 | out: hHeap=0x1f0000) returned 1 [0255.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ee8 | out: hHeap=0x1f0000) returned 1 [0255.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0255.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0255.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0255.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0255.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0255.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0255.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0255.060] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aa108 [0255.060] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aaa48 [0255.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aa108 | out: hHeap=0x1f0000) returned 1 [0255.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aaa48 | out: hHeap=0x1f0000) returned 1 [0255.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a9fe0 | out: hHeap=0x1f0000) returned 1 [0255.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0255.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2856c8 | out: hHeap=0x1f0000) returned 1 [0255.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24e900 | out: hHeap=0x1f0000) returned 1 [0255.060] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x233350 [0255.061] GetLastError () returned 0x0 [0255.061] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238890 [0255.061] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238980 [0255.148] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1053\\LocalizedData.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1053\\localizeddata.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e290, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0255.148] GetFileType (hFile=0x21c) returned 0x1 [0255.149] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28ffe0 [0255.149] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e218 | out: lpNewFilePointer=0x0) returned 1 [0255.149] GetLastError () returned 0xb7 [0255.150] CloseHandle (hObject=0x21c) returned 1 [0255.150] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238980 | out: hHeap=0x1f0000) returned 1 [0255.150] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238890 | out: hHeap=0x1f0000) returned 1 [0255.150] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2851a0 | out: hHeap=0x1f0000) returned 1 [0255.151] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285bf0 | out: hHeap=0x1f0000) returned 1 [0255.151] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0255.151] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bd0 | out: hHeap=0x1f0000) returned 1 [0255.151] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236608 | out: hHeap=0x1f0000) returned 1 [0255.151] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0255.151] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8e78 | out: hHeap=0x1f0000) returned 1 [0255.151] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233350 | out: hHeap=0x1f0000) returned 1 [0255.151] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0255.151] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0255.151] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x251068 | out: hHeap=0x1f0000) returned 1 [0255.151] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233698 | out: hHeap=0x1f0000) returned 1 [0255.151] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238e50 | out: hHeap=0x1f0000) returned 1 [0255.152] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238820 | out: hHeap=0x1f0000) returned 1 [0255.152] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0255.152] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0255.152] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238970 | out: hHeap=0x1f0000) returned 1 [0255.152] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210240 | out: hHeap=0x1f0000) returned 1 [0255.152] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0255.152] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238880 | out: hHeap=0x1f0000) returned 1 [0255.152] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285ae8 | out: hHeap=0x1f0000) returned 1 [0255.152] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0255.153] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236538 | out: hHeap=0x1f0000) returned 1 [0255.153] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228518 | out: hHeap=0x1f0000) returned 1 [0255.153] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0255.153] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0255.153] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228680 | out: hHeap=0x1f0000) returned 1 [0255.153] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238940 | out: hHeap=0x1f0000) returned 1 [0255.153] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388f0 | out: hHeap=0x1f0000) returned 1 [0255.153] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28cfc8 | out: hHeap=0x1f0000) returned 1 [0255.153] CloseHandle (hObject=0x174) returned 1 [0255.154] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238930 | out: hHeap=0x1f0000) returned 1 [0255.154] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387f0 | out: hHeap=0x1f0000) returned 1 [0255.154] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2374a0 | out: hHeap=0x1f0000) returned 1 [0255.155] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24d218 | out: hHeap=0x1f0000) returned 1 [0255.155] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0255.155] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204db0 | out: hHeap=0x1f0000) returned 1 [0255.155] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286f98 | out: hHeap=0x1f0000) returned 1 [0255.155] CloseHandle (hObject=0x1ac) returned 1 [0255.156] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238850 | out: hHeap=0x1f0000) returned 1 [0255.156] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238870 | out: hHeap=0x1f0000) returned 1 [0255.156] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2adb40 | out: hHeap=0x1f0000) returned 1 [0255.156] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e70 | out: hHeap=0x1f0000) returned 1 [0255.156] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21b7f8 | out: hHeap=0x1f0000) returned 1 [0255.156] CloseHandle (hObject=0x1e0) returned 1 [0255.157] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387e0 | out: hHeap=0x1f0000) returned 1 [0255.157] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238920 | out: hHeap=0x1f0000) returned 1 [0255.157] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad4c8 | out: hHeap=0x1f0000) returned 1 [0255.157] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388e0 | out: hHeap=0x1f0000) returned 1 [0255.157] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238960 | out: hHeap=0x1f0000) returned 1 [0255.157] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238840 | out: hHeap=0x1f0000) returned 1 [0255.157] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238860 | out: hHeap=0x1f0000) returned 1 [0255.157] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2339e0 | out: hHeap=0x1f0000) returned 1 [0255.158] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x255c88 | out: hHeap=0x1f0000) returned 1 [0255.158] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233468 | out: hHeap=0x1f0000) returned 1 [0255.158] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2068c8 | out: hHeap=0x1f0000) returned 1 [0255.158] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0255.158] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0255.158] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abb18 | out: hHeap=0x1f0000) returned 1 [0255.158] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x254980 | out: hHeap=0x1f0000) returned 1 [0255.158] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233580 | out: hHeap=0x1f0000) returned 1 [0255.159] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238f30 | out: hHeap=0x1f0000) returned 1 [0255.159] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2364d0 | out: hHeap=0x1f0000) returned 1 [0255.159] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d508 | out: hHeap=0x1f0000) returned 1 [0255.159] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228758 | out: hHeap=0x1f0000) returned 1 [0255.159] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0255.159] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1053\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1053\\localizeddata.xml")) returned 1 [0255.163] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0255.163] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239198 [0255.163] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228b00 [0255.163] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236538 [0255.163] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228b00 | out: hHeap=0x1f0000) returned 1 [0255.163] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2365a0 | out: hHeap=0x1f0000) returned 1 [0255.163] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239198 | out: hHeap=0x1f0000) returned 1 [0255.164] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1053\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1053\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0255.165] GetFileType (hFile=0x1e0) returned 0x1 [0255.165] CloseHandle (hObject=0x1e0) returned 1 [0255.165] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2364d0 [0255.166] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1053\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1053\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x173eb6c | out: lpFileInformation=0x173eb6c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558)) returned 1 [0255.166] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2364d0 | out: hHeap=0x1f0000) returned 1 [0255.166] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2365a0 [0255.166] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1053\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1053\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x173eb7c | out: lpFileInformation=0x173eb7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558)) returned 1 [0255.166] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2365a0 | out: hHeap=0x1f0000) returned 1 [0255.166] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236468 [0255.166] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0255.166] GetLastError () returned 0x0 [0255.167] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0255.167] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228b00 [0255.167] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22db68 [0255.167] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236468 [0255.167] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238cc8 [0255.168] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0255.168] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x213350) returned 1 [0255.169] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2384b0 | out: pbBuffer=0x2384b0) returned 1 [0255.169] CryptReleaseContext (hProv=0x213350, dwFlags=0x0) returned 1 [0255.169] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0255.169] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x252370 [0255.169] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2338c8 [0255.170] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=41253848734) returned 1 [0255.170] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0255.170] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=41253892693) returned 1 [0255.170] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0255.170] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238d70 [0255.170] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x258298 [0255.171] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x232ef0 [0255.171] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x2abe58 [0255.171] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0255.171] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2066b8 [0255.171] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210240 [0255.171] GetLastError () returned 0x0 [0255.172] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2aeb10 [0255.172] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad7a8 [0255.172] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aeb10 | out: hHeap=0x1f0000) returned 1 [0255.172] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x106) returned 0x232cc0 [0255.172] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad7a8 | out: hHeap=0x1f0000) returned 1 [0255.172] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238930 [0255.173] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238920 [0255.174] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1053\\SetupResources.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1053\\setupresources.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e230, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0255.174] GetFileType (hFile=0x1e0) returned 0x1 [0255.175] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238940 [0255.175] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387e0 [0255.176] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1053\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1053\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0255.177] GetFileType (hFile=0x1ac) returned 0x1 [0255.177] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204dd0 [0255.178] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e70 [0255.178] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad358 [0255.178] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238860 [0255.179] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238960 [0255.179] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1053\\SetupResources.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1053\\setupresources.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0255.180] GetFileType (hFile=0x174) returned 0x1 [0255.180] GetLastError () returned 0xb7 [0255.181] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe4) returned 0x21b258 [0255.181] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e50 [0255.181] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204df0 [0255.181] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204db0 [0255.181] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad638 [0255.181] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238970 [0255.181] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388e0 [0255.182] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1053\\SetupResources.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1053\\setupresources.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0255.182] GetFileType (hFile=0x21c) returned 0x1 [0255.183] GetLastError () returned 0xb7 [0255.183] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e30 [0255.183] GetLastError () returned 0xb7 [0255.183] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e30 [0255.184] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e70 [0255.184] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f10 [0255.184] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb8) returned 0x236de0 [0255.184] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238800 [0255.184] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388f0 [0255.185] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1053\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1053\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1a4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0255.185] GetFileType (hFile=0x1e8) returned 0x1 [0255.185] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28afb8 [0255.186] ReadFile (in: hFile=0x1e8, lpBuffer=0x28afb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e100, lpOverlapped=0x0 | out: lpBuffer=0x28afb8*, lpNumberOfBytesRead=0x173e100*=0x1000, lpOverlapped=0x0) returned 1 [0255.472] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24b9e8 [0255.473] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28cfc8 [0255.473] GetLastError () returned 0x0 [0255.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0255.481] GetLastError () returned 0x0 [0255.481] CloseHandle (hObject=0x1e0) returned 1 [0255.482] CloseHandle (hObject=0x1ac) returned 1 [0255.483] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238900 [0255.483] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387f0 [0255.484] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1053\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1053\\setupresources.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0255.486] GetFileType (hFile=0x1ac) returned 0x1 [0255.487] GetLastError () returned 0xb7 [0255.487] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x286f98 [0255.488] GetLastError () returned 0xb7 [0255.489] CloseHandle (hObject=0x1ac) returned 1 [0255.490] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1053\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1053\\setupresources.dll")) returned 0 [0255.490] GetLastError () returned 0x20 [0255.490] GetLastError () returned 0x20 [0255.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228680 [0255.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2382d0 [0255.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238168 [0255.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x228758 [0255.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0255.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204df0 [0255.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x238880 [0255.492] GetLastError () returned 0x20 [0255.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238f30 [0255.492] GetLastError () returned 0x20 [0255.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238f68 [0255.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2364d0 [0255.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2384b0 [0255.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285098 [0255.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238810 [0255.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0255.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210258 [0255.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388d0 [0255.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0255.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210210 [0255.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238000 [0255.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2853b0 [0255.493] GetLastError () returned 0x20 [0255.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238980 [0255.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238830 [0255.494] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238820 [0255.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238830 | out: hHeap=0x1f0000) returned 1 [0255.494] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238990 [0255.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238820 | out: hHeap=0x1f0000) returned 1 [0255.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238980 | out: hHeap=0x1f0000) returned 1 [0255.494] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238820 [0255.494] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210198 [0255.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238820 | out: hHeap=0x1f0000) returned 1 [0255.494] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101b0 [0255.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0255.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238990 | out: hHeap=0x1f0000) returned 1 [0255.494] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210198 [0255.495] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210078 [0255.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0255.495] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210198 [0255.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210078 | out: hHeap=0x1f0000) returned 1 [0255.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0255.495] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101b0 [0255.495] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204d70 [0255.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0255.495] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e70 [0255.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d70 | out: hHeap=0x1f0000) returned 1 [0255.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0255.496] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c50 [0255.496] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2380a0 [0255.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c50 | out: hHeap=0x1f0000) returned 1 [0255.496] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204d10 [0255.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0255.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e70 | out: hHeap=0x1f0000) returned 1 [0255.496] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204e70 [0255.497] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x2067d8 [0255.497] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e70 | out: hHeap=0x1f0000) returned 1 [0255.497] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238190 [0255.497] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2067d8 | out: hHeap=0x1f0000) returned 1 [0255.497] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d10 | out: hHeap=0x1f0000) returned 1 [0255.497] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238890 [0255.497] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210198 [0255.497] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238890 | out: hHeap=0x1f0000) returned 1 [0255.498] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101b0 [0255.498] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0255.498] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204cd0 [0255.498] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0255.498] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206928 [0255.498] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cd0 | out: hHeap=0x1f0000) returned 1 [0255.498] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206928 | out: hHeap=0x1f0000) returned 1 [0255.498] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0255.498] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0255.499] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0255.499] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285098 | out: hHeap=0x1f0000) returned 1 [0255.499] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0255.499] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238da8 [0255.499] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0255.499] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x212ad0) returned 1 [0255.500] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238190 | out: pbBuffer=0x238190) returned 1 [0255.500] CryptReleaseContext (hProv=0x212ad0, dwFlags=0x0) returned 1 [0255.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0255.501] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238190 [0255.501] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381b8 [0255.501] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239160 [0255.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0255.501] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0255.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239160 | out: hHeap=0x1f0000) returned 1 [0255.501] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8d18 [0255.501] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210198 [0255.501] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x2365a0 [0255.502] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2382d0 [0255.502] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2856c8 [0255.502] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c70 [0255.502] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236608 [0255.502] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2384b0 [0255.502] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2851a0 [0255.502] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389b0 [0255.503] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0255.503] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101b0 [0255.503] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238910 [0255.503] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0255.503] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffa0 [0255.503] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffa0 | out: hHeap=0x1f0000) returned 1 [0255.503] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0255.503] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238910 | out: hHeap=0x1f0000) returned 1 [0255.504] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0255.504] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0255.504] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389b0 | out: hHeap=0x1f0000) returned 1 [0255.504] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2851a0 | out: hHeap=0x1f0000) returned 1 [0255.504] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0255.504] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236608 | out: hHeap=0x1f0000) returned 1 [0255.504] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238d38 [0255.504] GetLastError () returned 0x0 [0255.505] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x2390f0 [0255.505] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0255.505] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0255.505] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0255.505] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0255.506] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0255.506] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0255.506] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x24e680 [0255.506] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2851a0 [0255.507] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0255.507] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0255.507] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0255.507] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0255.507] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285e00 [0255.507] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0255.507] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0255.507] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fce0 [0255.507] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x254980 [0255.508] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2337b0 [0255.508] QueryPerformanceCounter (in: lpPerformanceCount=0x173dee0 | out: lpPerformanceCount=0x173dee0*=41287662014) returned 1 [0255.508] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173df20 | out: lpSystemTimeAsFileTime=0x173df20) [0255.508] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238950 [0255.508] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0255.508] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0255.508] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d70 | out: hHeap=0x1f0000) returned 1 [0255.508] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0255.508] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0255.509] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e70 [0255.509] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e70 | out: hHeap=0x1f0000) returned 1 [0255.509] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0255.509] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238950 | out: hHeap=0x1f0000) returned 1 [0255.509] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0255.509] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238c58 [0255.509] GetLastError () returned 0x0 [0255.509] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0255.509] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0255.510] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0255.510] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2384b0 [0255.510] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238190 [0255.510] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0255.510] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0255.510] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381e0 [0255.510] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0255.510] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x222ee8 [0255.510] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0255.511] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0255.511] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0255.511] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0255.511] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0255.511] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2380a0 [0255.511] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238280 [0255.511] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0255.511] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0255.511] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0255.512] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0255.512] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x234b90 [0255.512] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b90 | out: hHeap=0x1f0000) returned 1 [0255.512] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0255.512] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0255.512] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101b0 [0255.512] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228bd8 [0255.512] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238280 [0255.512] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238370 [0255.513] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2380a0 [0255.513] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238398 [0255.513] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0255.513] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0255.513] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0255.513] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238280 [0255.513] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238370 [0255.514] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0255.514] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0255.514] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0255.514] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206628 [0255.514] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x2b2870 [0255.514] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b2870 | out: hHeap=0x1f0000) returned 1 [0255.514] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206628 | out: hHeap=0x1f0000) returned 1 [0255.514] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0255.514] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0255.515] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0255.515] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0255.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204e70 [0255.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0255.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0255.515] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0255.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aaa48 [0255.515] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0255.515] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0255.516] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0255.516] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228bd8 | out: hHeap=0x1f0000) returned 1 [0255.516] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0255.516] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e70 | out: hHeap=0x1f0000) returned 1 [0255.516] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0255.516] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0255.516] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a9450 [0255.516] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a9450 | out: hHeap=0x1f0000) returned 1 [0255.516] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ee8 | out: hHeap=0x1f0000) returned 1 [0255.516] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0255.516] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0255.517] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0255.517] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0255.517] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0255.517] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0255.517] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0255.517] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a9200 [0255.517] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aa108 [0255.517] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a9200 | out: hHeap=0x1f0000) returned 1 [0255.517] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aa108 | out: hHeap=0x1f0000) returned 1 [0255.517] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aaa48 | out: hHeap=0x1f0000) returned 1 [0255.517] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0255.518] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285e00 | out: hHeap=0x1f0000) returned 1 [0255.518] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24e680 | out: hHeap=0x1f0000) returned 1 [0255.518] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x2339e0 [0255.518] GetLastError () returned 0x0 [0255.518] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238950 [0255.519] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238890 [0255.519] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1053\\SetupResources.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1053\\setupresources.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e290, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0255.520] GetFileType (hFile=0x1ac) returned 0x1 [0255.520] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x286f98 [0255.521] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e218 | out: lpNewFilePointer=0x0) returned 1 [0255.963] GetLastError () returned 0xb7 [0255.964] CloseHandle (hObject=0x1ac) returned 1 [0255.965] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238890 | out: hHeap=0x1f0000) returned 1 [0255.965] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238950 | out: hHeap=0x1f0000) returned 1 [0255.965] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2851a0 | out: hHeap=0x1f0000) returned 1 [0255.965] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2856c8 | out: hHeap=0x1f0000) returned 1 [0255.965] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0255.965] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c70 | out: hHeap=0x1f0000) returned 1 [0255.965] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2365a0 | out: hHeap=0x1f0000) returned 1 [0255.965] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0255.966] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0255.966] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2339e0 | out: hHeap=0x1f0000) returned 1 [0255.966] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0255.966] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0255.966] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x254980 | out: hHeap=0x1f0000) returned 1 [0255.966] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2337b0 | out: hHeap=0x1f0000) returned 1 [0255.966] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238da8 | out: hHeap=0x1f0000) returned 1 [0255.966] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238880 | out: hHeap=0x1f0000) returned 1 [0255.966] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0255.966] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0255.966] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388d0 | out: hHeap=0x1f0000) returned 1 [0255.966] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0255.966] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0255.967] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238810 | out: hHeap=0x1f0000) returned 1 [0255.967] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2853b0 | out: hHeap=0x1f0000) returned 1 [0255.967] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0255.967] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2364d0 | out: hHeap=0x1f0000) returned 1 [0255.967] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228758 | out: hHeap=0x1f0000) returned 1 [0255.967] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0255.967] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0255.967] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228680 | out: hHeap=0x1f0000) returned 1 [0255.967] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387f0 | out: hHeap=0x1f0000) returned 1 [0255.967] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238900 | out: hHeap=0x1f0000) returned 1 [0255.967] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28afb8 | out: hHeap=0x1f0000) returned 1 [0255.967] CloseHandle (hObject=0x1e8) returned 1 [0255.968] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388f0 | out: hHeap=0x1f0000) returned 1 [0255.968] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238800 | out: hHeap=0x1f0000) returned 1 [0255.968] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236de0 | out: hHeap=0x1f0000) returned 1 [0255.968] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24b9e8 | out: hHeap=0x1f0000) returned 1 [0255.968] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0255.968] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e30 | out: hHeap=0x1f0000) returned 1 [0255.968] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28cfc8 | out: hHeap=0x1f0000) returned 1 [0255.968] CloseHandle (hObject=0x21c) returned 1 [0255.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388e0 | out: hHeap=0x1f0000) returned 1 [0255.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238970 | out: hHeap=0x1f0000) returned 1 [0255.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad638 | out: hHeap=0x1f0000) returned 1 [0255.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e50 | out: hHeap=0x1f0000) returned 1 [0255.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21b258 | out: hHeap=0x1f0000) returned 1 [0255.969] CloseHandle (hObject=0x174) returned 1 [0255.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238960 | out: hHeap=0x1f0000) returned 1 [0255.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238860 | out: hHeap=0x1f0000) returned 1 [0255.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad358 | out: hHeap=0x1f0000) returned 1 [0255.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387e0 | out: hHeap=0x1f0000) returned 1 [0255.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238940 | out: hHeap=0x1f0000) returned 1 [0255.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238920 | out: hHeap=0x1f0000) returned 1 [0255.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238930 | out: hHeap=0x1f0000) returned 1 [0255.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232cc0 | out: hHeap=0x1f0000) returned 1 [0255.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x258298 | out: hHeap=0x1f0000) returned 1 [0255.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232ef0 | out: hHeap=0x1f0000) returned 1 [0255.971] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2066b8 | out: hHeap=0x1f0000) returned 1 [0255.971] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210240 | out: hHeap=0x1f0000) returned 1 [0255.971] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0255.971] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abe58 | out: hHeap=0x1f0000) returned 1 [0255.971] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x252370 | out: hHeap=0x1f0000) returned 1 [0255.971] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2338c8 | out: hHeap=0x1f0000) returned 1 [0255.971] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238cc8 | out: hHeap=0x1f0000) returned 1 [0255.971] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0255.971] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22db68 | out: hHeap=0x1f0000) returned 1 [0255.971] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228b00 | out: hHeap=0x1f0000) returned 1 [0255.971] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0255.971] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1053\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1053\\setupresources.dll")) returned 1 [0255.973] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0255.973] FindClose (in: hFindFile=0x24ec40 | out: hFindFile=0x24ec40) returned 1 [0255.974] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236538 | out: hHeap=0x1f0000) returned 1 [0255.974] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ee88 | out: hHeap=0x1f0000) returned 1 [0255.974] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0255.974] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228a28 | out: hHeap=0x1f0000) returned 1 [0255.974] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228758 [0255.974] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0255.974] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d9d0 [0255.974] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228680 [0255.974] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1055\\*", lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e7c0 [0255.975] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228b00 [0255.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228680 | out: hHeap=0x1f0000) returned 1 [0255.975] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0255.975] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0255.975] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228bd8 [0255.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228b00 | out: hHeap=0x1f0000) returned 1 [0255.975] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0255.975] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0255.975] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xf13, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0255.975] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0255.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228b00 [0255.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x236468 [0255.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228b00 | out: hHeap=0x1f0000) returned 1 [0255.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228bd8 | out: hHeap=0x1f0000) returned 1 [0255.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0255.976] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1055\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1055\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0255.977] GetFileType (hFile=0x174) returned 0x1 [0255.977] CloseHandle (hObject=0x174) returned 1 [0255.977] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8dc8 [0255.977] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1055\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1055\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x173eb6c | out: lpFileInformation=0x173eb6c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xf13)) returned 1 [0255.977] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8dc8 | out: hHeap=0x1f0000) returned 1 [0255.977] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8d18 [0255.977] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1055\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1055\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x173eb7c | out: lpFileInformation=0x173eb7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xf13)) returned 1 [0255.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0255.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8d18 [0255.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0255.978] GetLastError () returned 0x0 [0255.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0255.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228b00 [0255.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22ee88 [0255.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8e20 [0255.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239160 [0255.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0255.979] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x212b58) returned 1 [0255.980] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x237fd8 | out: pbBuffer=0x237fd8) returned 1 [0255.980] CryptReleaseContext (hProv=0x212b58, dwFlags=0x0) returned 1 [0255.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0255.980] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x255c88 [0255.980] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x232ba8 [0255.980] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=41334882472) returned 1 [0255.980] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0255.980] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=41334905207) returned 1 [0255.980] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0255.980] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238f30 [0255.980] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x254980 [0255.980] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2337b0 [0255.980] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x2ab2f8 [0255.981] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0255.981] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206928 [0255.981] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0255.981] GetLastError () returned 0x0 [0255.981] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236538 [0255.981] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a6c8 [0255.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236538 | out: hHeap=0x1f0000) returned 1 [0255.981] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xee) returned 0x2b1890 [0255.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a6c8 | out: hHeap=0x1f0000) returned 1 [0255.981] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388f0 [0255.981] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388b0 [0255.982] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1055\\eula.rtf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1055\\eula.rtf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e230, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0255.984] GetFileType (hFile=0x174) returned 0x1 [0255.984] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388e0 [0255.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387e0 [0255.985] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1055\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1055\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0255.985] GetFileType (hFile=0x21c) returned 0x1 [0255.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e30 [0255.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e70 [0255.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2add68 [0255.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238800 [0255.986] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238810 [0255.986] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1055\\eula.rtf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1055\\eula.rtf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0255.986] GetFileType (hFile=0x1e8) returned 0x1 [0255.987] GetLastError () returned 0xb7 [0255.987] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe4) returned 0x21b8e8 [0255.987] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cf0 [0255.987] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0255.987] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c30 [0255.987] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad358 [0255.987] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238900 [0255.988] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387f0 [0255.988] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1055\\eula.rtf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1055\\eula.rtf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0255.989] GetFileType (hFile=0x1ac) returned 0x1 [0255.989] GetLastError () returned 0xb7 [0255.989] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204db0 [0255.989] GetLastError () returned 0xb7 [0255.989] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f50 [0255.989] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c10 [0255.989] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204dd0 [0255.989] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb8) returned 0x2371a0 [0255.990] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238830 [0255.990] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388d0 [0255.990] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1055\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1055\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1a4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0255.991] GetFileType (hFile=0x1e0) returned 0x1 [0255.991] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28cfc8 [0255.991] ReadFile (in: hFile=0x1e0, lpBuffer=0x28cfc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e100, lpOverlapped=0x0 | out: lpBuffer=0x28cfc8*, lpNumberOfBytesRead=0x173e100*=0xf13, lpOverlapped=0x0) returned 1 [0255.995] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24b5e0 [0255.995] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28dfd0 [0255.995] GetLastError () returned 0x0 [0255.996] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210240 [0255.996] GetLastError () returned 0x0 [0255.997] CloseHandle (hObject=0x174) returned 1 [0255.998] CloseHandle (hObject=0x21c) returned 1 [0255.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389b0 [0255.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238820 [0256.000] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1055\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1055\\eula.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0256.001] GetFileType (hFile=0x21c) returned 0x1 [0256.002] GetLastError () returned 0xb7 [0256.002] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x286f98 [0256.003] GetLastError () returned 0xb7 [0256.004] CloseHandle (hObject=0x21c) returned 1 [0256.005] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1055\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1055\\eula.rtf")) returned 0 [0256.005] GetLastError () returned 0x20 [0256.005] GetLastError () returned 0x20 [0256.382] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228a28 [0256.382] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2382d0 [0256.382] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381e0 [0256.382] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x228c68 [0256.382] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cb0 [0256.382] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ef0 [0256.382] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x238840 [0256.382] GetLastError () returned 0x20 [0256.382] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238cc8 [0256.383] GetLastError () returned 0x20 [0256.383] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239208 [0256.383] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2364d0 [0256.383] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x237fd8 [0256.383] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285cf8 [0256.383] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238860 [0256.383] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0256.383] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210210 [0256.383] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238920 [0256.383] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0256.383] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210258 [0256.383] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238140 [0256.383] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x284f90 [0256.383] GetLastError () returned 0x20 [0256.383] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x2388a0 [0256.384] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238930 [0256.384] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388c0 [0256.384] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238930 | out: hHeap=0x1f0000) returned 1 [0256.384] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238890 [0256.384] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388c0 | out: hHeap=0x1f0000) returned 1 [0256.384] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388a0 | out: hHeap=0x1f0000) returned 1 [0256.384] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388a0 [0256.384] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210198 [0256.384] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388a0 | out: hHeap=0x1f0000) returned 1 [0256.384] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101b0 [0256.384] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0256.384] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238890 | out: hHeap=0x1f0000) returned 1 [0256.384] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210198 [0256.384] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210120 [0256.384] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0256.384] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210198 [0256.384] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210120 | out: hHeap=0x1f0000) returned 1 [0256.384] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0256.384] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101b0 [0256.384] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204c90 [0256.385] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0256.385] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0256.385] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c90 | out: hHeap=0x1f0000) returned 1 [0256.385] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0256.385] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204b90 [0256.385] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238078 [0256.385] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204b90 | out: hHeap=0x1f0000) returned 1 [0256.385] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204d90 [0256.385] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0256.385] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d70 | out: hHeap=0x1f0000) returned 1 [0256.385] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204bb0 [0256.385] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206688 [0256.385] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bb0 | out: hHeap=0x1f0000) returned 1 [0256.385] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238078 [0256.385] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206688 | out: hHeap=0x1f0000) returned 1 [0256.385] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d90 | out: hHeap=0x1f0000) returned 1 [0256.385] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238960 [0256.385] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210198 [0256.385] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238960 | out: hHeap=0x1f0000) returned 1 [0256.386] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101b0 [0256.386] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0256.386] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204d90 [0256.386] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0256.386] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206808 [0256.386] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d90 | out: hHeap=0x1f0000) returned 1 [0256.386] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206808 | out: hHeap=0x1f0000) returned 1 [0256.386] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0256.386] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0256.386] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0256.386] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285cf8 | out: hHeap=0x1f0000) returned 1 [0256.386] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0256.386] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238d00 [0256.386] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0256.387] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x213020) returned 1 [0256.388] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x237fd8 | out: pbBuffer=0x237fd8) returned 1 [0256.388] CryptReleaseContext (hProv=0x213020, dwFlags=0x0) returned 1 [0256.388] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0256.388] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2382d0 [0256.388] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238398 [0256.388] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239208 [0256.388] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0256.388] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0256.388] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239208 | out: hHeap=0x1f0000) returned 1 [0256.388] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8dc8 [0256.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210198 [0256.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x236538 [0256.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2382d0 [0256.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2858d8 [0256.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bd0 [0256.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236608 [0256.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x237fd8 [0256.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285bf0 [0256.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238850 [0256.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0256.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101b0 [0256.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238910 [0256.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0256.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210078 [0256.389] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210078 | out: hHeap=0x1f0000) returned 1 [0256.390] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0256.390] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238910 | out: hHeap=0x1f0000) returned 1 [0256.390] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0256.390] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0256.390] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238850 | out: hHeap=0x1f0000) returned 1 [0256.390] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285bf0 | out: hHeap=0x1f0000) returned 1 [0256.390] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0256.390] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236608 | out: hHeap=0x1f0000) returned 1 [0256.390] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238c58 [0256.390] GetLastError () returned 0x0 [0256.390] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238f30 [0256.390] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0256.391] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0256.391] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0256.391] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0256.391] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0256.391] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0256.391] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x24e980 [0256.391] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2856c8 [0256.391] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0256.391] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0256.391] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0256.391] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0256.391] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2855c0 [0256.391] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0256.392] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0256.392] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fb50 [0256.392] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x252370 [0256.392] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x233008 [0256.392] QueryPerformanceCounter (in: lpPerformanceCount=0x173dee0 | out: lpPerformanceCount=0x173dee0*=41376071986) returned 1 [0256.392] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173df20 | out: lpSystemTimeAsFileTime=0x173df20) [0256.392] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238960 [0256.392] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0256.392] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c30 [0256.392] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c30 | out: hHeap=0x1f0000) returned 1 [0256.392] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0256.392] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0256.392] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f70 [0256.392] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f70 | out: hHeap=0x1f0000) returned 1 [0256.393] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0256.393] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238960 | out: hHeap=0x1f0000) returned 1 [0256.393] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0256.393] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239208 [0256.393] GetLastError () returned 0x0 [0256.393] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0256.393] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0256.393] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0256.393] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x237fd8 [0256.393] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238000 [0256.393] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0256.393] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0256.393] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238078 [0256.393] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0256.393] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x222ee8 [0256.393] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0256.394] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0256.394] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0256.394] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0256.394] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0256.394] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2380a0 [0256.394] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238168 [0256.394] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0256.394] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0256.394] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0256.394] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0256.394] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x234b90 [0256.394] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b90 | out: hHeap=0x1f0000) returned 1 [0256.394] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0256.394] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0256.394] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101b0 [0256.394] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228bd8 [0256.394] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2380a0 [0256.395] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238168 [0256.395] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238190 [0256.395] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381b8 [0256.395] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0256.395] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0256.395] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0256.395] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2380a0 [0256.395] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238168 [0256.395] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0256.395] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0256.395] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0256.395] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206628 [0256.395] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x2b2870 [0256.395] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b2870 | out: hHeap=0x1f0000) returned 1 [0256.395] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206628 | out: hHeap=0x1f0000) returned 1 [0256.395] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0256.395] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0256.395] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0256.395] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0256.395] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204cd0 [0256.396] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0256.396] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0256.396] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0256.396] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a9a18 [0256.396] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0256.396] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0256.396] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0256.396] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228bd8 | out: hHeap=0x1f0000) returned 1 [0256.396] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0256.396] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cd0 | out: hHeap=0x1f0000) returned 1 [0256.396] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0256.397] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0256.397] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aa5a8 [0256.397] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aa5a8 | out: hHeap=0x1f0000) returned 1 [0256.397] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ee8 | out: hHeap=0x1f0000) returned 1 [0256.397] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0256.397] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0256.397] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0256.397] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0256.397] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0256.397] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0256.397] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0256.397] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a9c68 [0256.397] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aa358 [0256.397] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a9c68 | out: hHeap=0x1f0000) returned 1 [0256.397] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aa358 | out: hHeap=0x1f0000) returned 1 [0256.397] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a9a18 | out: hHeap=0x1f0000) returned 1 [0256.397] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0256.397] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2855c0 | out: hHeap=0x1f0000) returned 1 [0256.397] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24e980 | out: hHeap=0x1f0000) returned 1 [0256.398] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x2338c8 [0256.398] GetLastError () returned 0x0 [0256.398] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238960 [0256.398] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238850 [0256.398] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1055\\eula.rtf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1055\\eula.rtf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e290, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0256.399] GetFileType (hFile=0x1c0) returned 0x1 [0256.399] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x286f98 [0256.399] SetFilePointerEx (in: hFile=0x1c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e218 | out: lpNewFilePointer=0x0) returned 1 [0256.399] GetLastError () returned 0xb7 [0256.400] CloseHandle (hObject=0x1c0) returned 1 [0256.400] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238850 | out: hHeap=0x1f0000) returned 1 [0256.400] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238960 | out: hHeap=0x1f0000) returned 1 [0256.400] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2856c8 | out: hHeap=0x1f0000) returned 1 [0256.400] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2858d8 | out: hHeap=0x1f0000) returned 1 [0256.400] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0256.400] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bd0 | out: hHeap=0x1f0000) returned 1 [0256.400] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236538 | out: hHeap=0x1f0000) returned 1 [0256.400] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0256.400] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8dc8 | out: hHeap=0x1f0000) returned 1 [0256.400] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2338c8 | out: hHeap=0x1f0000) returned 1 [0256.401] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0256.401] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0256.401] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x252370 | out: hHeap=0x1f0000) returned 1 [0256.401] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233008 | out: hHeap=0x1f0000) returned 1 [0256.401] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238d00 | out: hHeap=0x1f0000) returned 1 [0256.401] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238840 | out: hHeap=0x1f0000) returned 1 [0256.401] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0256.401] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0256.401] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238920 | out: hHeap=0x1f0000) returned 1 [0256.401] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0256.401] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0256.401] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238860 | out: hHeap=0x1f0000) returned 1 [0256.401] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x284f90 | out: hHeap=0x1f0000) returned 1 [0256.401] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0256.401] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2364d0 | out: hHeap=0x1f0000) returned 1 [0256.401] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228c68 | out: hHeap=0x1f0000) returned 1 [0256.401] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0256.401] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0256.401] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228a28 | out: hHeap=0x1f0000) returned 1 [0256.401] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238820 | out: hHeap=0x1f0000) returned 1 [0256.402] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389b0 | out: hHeap=0x1f0000) returned 1 [0256.402] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28cfc8 | out: hHeap=0x1f0000) returned 1 [0256.402] CloseHandle (hObject=0x1e0) returned 1 [0256.402] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388d0 | out: hHeap=0x1f0000) returned 1 [0256.402] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238830 | out: hHeap=0x1f0000) returned 1 [0256.402] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2371a0 | out: hHeap=0x1f0000) returned 1 [0256.402] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24b5e0 | out: hHeap=0x1f0000) returned 1 [0256.402] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210240 | out: hHeap=0x1f0000) returned 1 [0256.402] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f50 | out: hHeap=0x1f0000) returned 1 [0256.403] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28dfd0 | out: hHeap=0x1f0000) returned 1 [0256.403] CloseHandle (hObject=0x1ac) returned 1 [0256.403] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387f0 | out: hHeap=0x1f0000) returned 1 [0256.403] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238900 | out: hHeap=0x1f0000) returned 1 [0256.403] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad358 | out: hHeap=0x1f0000) returned 1 [0256.403] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cf0 | out: hHeap=0x1f0000) returned 1 [0256.403] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21b8e8 | out: hHeap=0x1f0000) returned 1 [0256.404] CloseHandle (hObject=0x1e8) returned 1 [0256.404] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238810 | out: hHeap=0x1f0000) returned 1 [0256.404] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238800 | out: hHeap=0x1f0000) returned 1 [0256.404] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2add68 | out: hHeap=0x1f0000) returned 1 [0256.404] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387e0 | out: hHeap=0x1f0000) returned 1 [0256.404] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388e0 | out: hHeap=0x1f0000) returned 1 [0256.404] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388b0 | out: hHeap=0x1f0000) returned 1 [0256.404] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388f0 | out: hHeap=0x1f0000) returned 1 [0256.404] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b1890 | out: hHeap=0x1f0000) returned 1 [0256.404] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x254980 | out: hHeap=0x1f0000) returned 1 [0256.404] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2337b0 | out: hHeap=0x1f0000) returned 1 [0256.405] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206928 | out: hHeap=0x1f0000) returned 1 [0256.405] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0256.405] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0256.405] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab2f8 | out: hHeap=0x1f0000) returned 1 [0256.405] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x255c88 | out: hHeap=0x1f0000) returned 1 [0256.405] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232ba8 | out: hHeap=0x1f0000) returned 1 [0256.405] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239160 | out: hHeap=0x1f0000) returned 1 [0256.405] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8e20 | out: hHeap=0x1f0000) returned 1 [0256.405] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ee88 | out: hHeap=0x1f0000) returned 1 [0256.405] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228b00 | out: hHeap=0x1f0000) returned 1 [0256.405] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0256.405] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1055\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1055\\eula.rtf")) returned 1 [0256.407] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12c12, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0256.407] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238f30 [0256.407] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228c68 [0256.407] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2364d0 [0256.407] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228c68 | out: hHeap=0x1f0000) returned 1 [0256.407] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0256.407] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238f30 | out: hHeap=0x1f0000) returned 1 [0256.408] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1055\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1055\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0256.408] GetFileType (hFile=0x1e8) returned 0x1 [0256.408] CloseHandle (hObject=0x1e8) returned 1 [0256.409] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2365a0 [0256.409] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1055\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1055\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x173eb6c | out: lpFileInformation=0x173eb6c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12c12)) returned 1 [0256.409] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2365a0 | out: hHeap=0x1f0000) returned 1 [0256.409] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236538 [0256.409] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1055\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1055\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x173eb7c | out: lpFileInformation=0x173eb7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12c12)) returned 1 [0256.409] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236538 | out: hHeap=0x1f0000) returned 1 [0256.409] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236538 [0256.409] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236538 | out: hHeap=0x1f0000) returned 1 [0256.409] GetLastError () returned 0x0 [0256.410] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0256.410] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228440 [0256.410] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22ee88 [0256.410] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236538 [0256.410] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238d70 [0256.410] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0256.410] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x212ad0) returned 1 [0256.411] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2382d0 | out: pbBuffer=0x2382d0) returned 1 [0256.411] CryptReleaseContext (hProv=0x212ad0, dwFlags=0x0) returned 1 [0256.411] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0256.411] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x252370 [0256.411] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x232dd8 [0256.411] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=41378084750) returned 1 [0256.412] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0256.412] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=41378108075) returned 1 [0256.412] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0256.412] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x2390b8 [0256.412] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x254980 [0256.413] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x233350 [0256.413] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x2ab638 [0256.413] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210240 [0256.413] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206808 [0256.413] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210198 [0256.413] GetLastError () returned 0x0 [0256.413] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae9a8 [0256.413] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad9d0 [0256.413] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae9a8 | out: hHeap=0x1f0000) returned 1 [0256.414] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x106) returned 0x233698 [0256.414] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad9d0 | out: hHeap=0x1f0000) returned 1 [0256.414] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389b0 [0256.414] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238800 [0256.415] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1055\\LocalizedData.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1055\\localizeddata.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e230, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0256.415] GetFileType (hFile=0x1e8) returned 0x1 [0256.415] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388f0 [0256.416] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238930 [0256.416] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1055\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1055\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0256.417] GetFileType (hFile=0x1ac) returned 0x1 [0256.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0256.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c30 [0256.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad358 [0256.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388e0 [0256.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387e0 [0256.418] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1055\\LocalizedData.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1055\\localizeddata.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0256.418] GetFileType (hFile=0x1e0) returned 0x1 [0256.419] GetLastError () returned 0xb7 [0256.419] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe4) returned 0x21b708 [0256.419] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f50 [0256.419] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c10 [0256.419] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204dd0 [0256.419] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad410 [0256.419] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238830 [0256.420] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388d0 [0256.420] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1055\\LocalizedData.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1055\\localizeddata.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0256.421] GetFileType (hFile=0x1c0) returned 0x1 [0256.421] GetLastError () returned 0xb7 [0256.421] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cd0 [0256.421] GetLastError () returned 0xb7 [0256.421] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0256.421] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d90 [0256.421] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ef0 [0256.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb8) returned 0x237b60 [0256.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238820 [0256.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387f0 [0256.423] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1055\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1055\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1a4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0256.423] GetFileType (hFile=0x198) returned 0x1 [0256.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28cfc8 [0256.424] ReadFile (in: hFile=0x198, lpBuffer=0x28cfc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e100, lpOverlapped=0x0 | out: lpBuffer=0x28cfc8*, lpNumberOfBytesRead=0x173e100*=0x1000, lpOverlapped=0x0) returned 1 [0256.648] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24b9e8 [0256.648] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28dfd0 [0256.649] GetLastError () returned 0x0 [0256.918] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210210 [0256.919] GetLastError () returned 0x0 [0256.919] CloseHandle (hObject=0x1e8) returned 1 [0256.920] CloseHandle (hObject=0x1ac) returned 1 [0256.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389c0 [0256.922] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238870 [0257.055] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1055\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1055\\localizeddata.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0257.057] GetFileType (hFile=0x1ac) returned 0x1 [0257.058] GetLastError () returned 0xb7 [0257.058] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x286f98 [0257.059] GetLastError () returned 0xb7 [0257.060] CloseHandle (hObject=0x1ac) returned 1 [0257.061] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1055\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1055\\localizeddata.xml")) returned 0 [0257.061] GetLastError () returned 0x20 [0257.061] GetLastError () returned 0x20 [0257.062] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228bd8 [0257.062] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238000 [0257.062] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x237fd8 [0257.062] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x228c68 [0257.062] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c90 [0257.062] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e30 [0257.063] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x238860 [0257.063] GetLastError () returned 0x20 [0257.063] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239048 [0257.063] GetLastError () returned 0x20 [0257.063] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238f30 [0257.063] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236608 [0257.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238140 [0257.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x284f90 [0257.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388a0 [0257.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0257.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210258 [0257.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238890 [0257.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0257.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101b0 [0257.065] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238078 [0257.065] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2854b8 [0257.065] GetLastError () returned 0x20 [0257.065] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238980 [0257.065] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238940 [0257.065] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238880 [0257.065] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238940 | out: hHeap=0x1f0000) returned 1 [0257.066] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388b0 [0257.066] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238880 | out: hHeap=0x1f0000) returned 1 [0257.066] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238980 | out: hHeap=0x1f0000) returned 1 [0257.066] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388c0 [0257.066] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101c8 [0257.066] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388c0 | out: hHeap=0x1f0000) returned 1 [0257.066] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101e0 [0257.066] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0257.066] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388b0 | out: hHeap=0x1f0000) returned 1 [0257.066] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101c8 [0257.067] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20fef8 [0257.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0257.067] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0257.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20fef8 | out: hHeap=0x1f0000) returned 1 [0257.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0257.067] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0257.067] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204e90 [0257.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0257.067] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f30 [0257.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e90 | out: hHeap=0x1f0000) returned 1 [0257.068] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0257.068] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bb0 [0257.068] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238280 [0257.068] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bb0 | out: hHeap=0x1f0000) returned 1 [0257.068] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204d90 [0257.068] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0257.068] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f30 | out: hHeap=0x1f0000) returned 1 [0257.068] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204c90 [0257.068] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x2066b8 [0257.068] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c90 | out: hHeap=0x1f0000) returned 1 [0257.069] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2380a0 [0257.069] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2066b8 | out: hHeap=0x1f0000) returned 1 [0257.069] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d90 | out: hHeap=0x1f0000) returned 1 [0257.069] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238850 [0257.069] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101c8 [0257.069] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238850 | out: hHeap=0x1f0000) returned 1 [0257.069] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0257.069] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0257.069] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204c50 [0257.070] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0257.070] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206628 [0257.070] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c50 | out: hHeap=0x1f0000) returned 1 [0257.070] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206628 | out: hHeap=0x1f0000) returned 1 [0257.070] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0257.070] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0257.070] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0257.070] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x284f90 | out: hHeap=0x1f0000) returned 1 [0257.070] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0257.070] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238cc8 [0257.070] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0257.071] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x212e00) returned 1 [0257.072] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238000 | out: pbBuffer=0x238000) returned 1 [0257.072] CryptReleaseContext (hProv=0x212e00, dwFlags=0x0) returned 1 [0257.073] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0257.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2382d0 [0257.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2380a0 [0257.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238d00 [0257.073] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0257.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0257.073] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238d00 | out: hHeap=0x1f0000) returned 1 [0257.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8d18 [0257.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0257.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x236468 [0257.074] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238280 [0257.074] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2857d0 [0257.074] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ef0 [0257.074] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2365a0 [0257.074] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238000 [0257.074] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2856c8 [0257.074] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238840 [0257.074] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0257.074] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0257.075] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238900 [0257.075] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0257.075] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff70 [0257.075] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff70 | out: hHeap=0x1f0000) returned 1 [0257.075] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0257.075] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238900 | out: hHeap=0x1f0000) returned 1 [0257.075] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0257.075] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0257.075] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238840 | out: hHeap=0x1f0000) returned 1 [0257.075] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2856c8 | out: hHeap=0x1f0000) returned 1 [0257.076] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0257.076] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2365a0 | out: hHeap=0x1f0000) returned 1 [0257.076] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239278 [0257.076] GetLastError () returned 0x0 [0257.076] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238e50 [0257.076] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0257.076] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0257.076] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0257.076] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0257.077] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0257.077] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0257.077] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x24e900 [0257.077] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285ae8 [0257.077] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0257.077] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0257.077] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0257.077] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0257.077] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285cf8 [0257.077] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0257.077] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0257.078] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x230320 [0257.078] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x251068 [0257.078] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x232ef0 [0257.078] QueryPerformanceCounter (in: lpPerformanceCount=0x173dee0 | out: lpPerformanceCount=0x173dee0*=41444695595) returned 1 [0257.078] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173df20 | out: lpSystemTimeAsFileTime=0x173df20) [0257.078] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238810 [0257.078] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0257.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f10 [0257.079] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f10 | out: hHeap=0x1f0000) returned 1 [0257.079] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0257.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0257.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c50 [0257.079] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c50 | out: hHeap=0x1f0000) returned 1 [0257.079] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0257.079] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238810 | out: hHeap=0x1f0000) returned 1 [0257.079] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0257.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239208 [0257.080] GetLastError () returned 0x0 [0257.080] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0257.080] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0257.080] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0257.080] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238000 [0257.080] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2382d0 [0257.080] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0257.080] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0257.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238140 [0257.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0257.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x222ee8 [0257.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0257.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0257.081] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0257.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0257.081] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0257.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2382f8 [0257.082] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238168 [0257.082] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0257.082] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0257.082] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0257.082] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0257.082] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x234b90 [0257.082] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b90 | out: hHeap=0x1f0000) returned 1 [0257.082] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0257.082] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0257.083] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101e0 [0257.083] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228518 [0257.083] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238168 [0257.083] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2382f8 [0257.083] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381b8 [0257.083] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381e0 [0257.083] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0257.083] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0257.084] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0257.084] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238168 [0257.084] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2382f8 [0257.084] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0257.084] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0257.084] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0257.084] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2067d8 [0257.084] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x2b4ab0 [0257.084] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b4ab0 | out: hHeap=0x1f0000) returned 1 [0257.084] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2067d8 | out: hHeap=0x1f0000) returned 1 [0257.084] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0257.085] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0257.085] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0257.085] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0257.085] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204e30 [0257.085] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0257.085] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0257.085] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0257.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a9578 [0257.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0257.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0257.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0257.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228518 | out: hHeap=0x1f0000) returned 1 [0257.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0257.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e30 | out: hHeap=0x1f0000) returned 1 [0257.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0257.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0257.087] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a9d90 [0257.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a9d90 | out: hHeap=0x1f0000) returned 1 [0257.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ee8 | out: hHeap=0x1f0000) returned 1 [0257.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0257.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0257.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0257.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0257.088] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0257.088] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0257.088] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0257.088] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a9200 [0257.088] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a96a0 [0257.088] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a9200 | out: hHeap=0x1f0000) returned 1 [0257.088] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a96a0 | out: hHeap=0x1f0000) returned 1 [0257.089] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a9578 | out: hHeap=0x1f0000) returned 1 [0257.089] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0257.089] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285cf8 | out: hHeap=0x1f0000) returned 1 [0257.089] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24e900 | out: hHeap=0x1f0000) returned 1 [0257.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x233008 [0257.089] GetLastError () returned 0x0 [0257.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238850 [0257.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238900 [0257.091] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1055\\LocalizedData.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1055\\localizeddata.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e290, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0257.091] GetFileType (hFile=0x1ac) returned 0x1 [0257.092] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x286f98 [0257.092] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e218 | out: lpNewFilePointer=0x0) returned 1 [0257.092] GetLastError () returned 0xb7 [0257.093] CloseHandle (hObject=0x1ac) returned 1 [0257.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238900 | out: hHeap=0x1f0000) returned 1 [0257.094] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238850 | out: hHeap=0x1f0000) returned 1 [0257.094] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285ae8 | out: hHeap=0x1f0000) returned 1 [0257.094] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2857d0 | out: hHeap=0x1f0000) returned 1 [0257.094] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0257.094] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ef0 | out: hHeap=0x1f0000) returned 1 [0257.094] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0257.094] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0257.094] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0257.094] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233008 | out: hHeap=0x1f0000) returned 1 [0257.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0257.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0257.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x251068 | out: hHeap=0x1f0000) returned 1 [0257.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232ef0 | out: hHeap=0x1f0000) returned 1 [0257.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238cc8 | out: hHeap=0x1f0000) returned 1 [0257.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238860 | out: hHeap=0x1f0000) returned 1 [0257.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0257.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0257.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238890 | out: hHeap=0x1f0000) returned 1 [0257.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0257.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0257.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388a0 | out: hHeap=0x1f0000) returned 1 [0257.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2854b8 | out: hHeap=0x1f0000) returned 1 [0257.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0257.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236608 | out: hHeap=0x1f0000) returned 1 [0257.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228c68 | out: hHeap=0x1f0000) returned 1 [0257.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0257.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0257.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228bd8 | out: hHeap=0x1f0000) returned 1 [0257.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238870 | out: hHeap=0x1f0000) returned 1 [0257.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389c0 | out: hHeap=0x1f0000) returned 1 [0257.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28cfc8 | out: hHeap=0x1f0000) returned 1 [0257.098] CloseHandle (hObject=0x198) returned 1 [0257.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387f0 | out: hHeap=0x1f0000) returned 1 [0257.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238820 | out: hHeap=0x1f0000) returned 1 [0257.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237b60 | out: hHeap=0x1f0000) returned 1 [0257.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24b9e8 | out: hHeap=0x1f0000) returned 1 [0257.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0257.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d70 | out: hHeap=0x1f0000) returned 1 [0257.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28dfd0 | out: hHeap=0x1f0000) returned 1 [0257.437] CloseHandle (hObject=0x1c0) returned 1 [0257.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388d0 | out: hHeap=0x1f0000) returned 1 [0257.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238830 | out: hHeap=0x1f0000) returned 1 [0257.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad410 | out: hHeap=0x1f0000) returned 1 [0257.438] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f50 | out: hHeap=0x1f0000) returned 1 [0257.438] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21b708 | out: hHeap=0x1f0000) returned 1 [0257.438] CloseHandle (hObject=0x1e0) returned 1 [0257.439] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387e0 | out: hHeap=0x1f0000) returned 1 [0257.439] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388e0 | out: hHeap=0x1f0000) returned 1 [0257.439] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad358 | out: hHeap=0x1f0000) returned 1 [0257.439] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238930 | out: hHeap=0x1f0000) returned 1 [0257.439] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388f0 | out: hHeap=0x1f0000) returned 1 [0257.439] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238800 | out: hHeap=0x1f0000) returned 1 [0257.439] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389b0 | out: hHeap=0x1f0000) returned 1 [0257.439] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233698 | out: hHeap=0x1f0000) returned 1 [0257.439] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x254980 | out: hHeap=0x1f0000) returned 1 [0257.439] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233350 | out: hHeap=0x1f0000) returned 1 [0257.440] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206808 | out: hHeap=0x1f0000) returned 1 [0257.440] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0257.440] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210240 | out: hHeap=0x1f0000) returned 1 [0257.440] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab638 | out: hHeap=0x1f0000) returned 1 [0257.440] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x252370 | out: hHeap=0x1f0000) returned 1 [0257.440] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232dd8 | out: hHeap=0x1f0000) returned 1 [0257.440] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238d70 | out: hHeap=0x1f0000) returned 1 [0257.440] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236538 | out: hHeap=0x1f0000) returned 1 [0257.440] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ee88 | out: hHeap=0x1f0000) returned 1 [0257.440] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228440 | out: hHeap=0x1f0000) returned 1 [0257.441] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0257.441] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1055\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1055\\localizeddata.xml")) returned 1 [0257.444] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0257.444] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238d00 [0257.444] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228680 [0257.444] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236538 [0257.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228680 | out: hHeap=0x1f0000) returned 1 [0257.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2364d0 | out: hHeap=0x1f0000) returned 1 [0257.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238d00 | out: hHeap=0x1f0000) returned 1 [0257.445] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1055\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1055\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0257.445] GetFileType (hFile=0x1e0) returned 0x1 [0257.446] CloseHandle (hObject=0x1e0) returned 1 [0257.446] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236468 [0257.446] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1055\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1055\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x173eb6c | out: lpFileInformation=0x173eb6c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558)) returned 1 [0257.447] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0257.447] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2364d0 [0257.447] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1055\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1055\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x173eb7c | out: lpFileInformation=0x173eb7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558)) returned 1 [0257.447] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2364d0 | out: hHeap=0x1f0000) returned 1 [0257.447] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236608 [0257.447] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236608 | out: hHeap=0x1f0000) returned 1 [0257.447] GetLastError () returned 0x0 [0257.448] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0257.448] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2287a0 [0257.448] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22ee88 [0257.448] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236468 [0257.448] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238ec0 [0257.448] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0257.448] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x213460) returned 1 [0257.449] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238280 | out: pbBuffer=0x238280) returned 1 [0257.450] CryptReleaseContext (hProv=0x213460, dwFlags=0x0) returned 1 [0257.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0257.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x258298 [0257.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x233350 [0257.450] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=41481889251) returned 1 [0257.450] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0257.450] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=41481926330) returned 1 [0257.450] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0257.451] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238c58 [0257.451] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x255c88 [0257.451] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x233580 [0257.451] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x2aba48 [0257.451] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210258 [0257.451] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206658 [0257.451] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210198 [0257.451] GetLastError () returned 0x0 [0257.451] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae7c8 [0257.452] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad9d0 [0257.452] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae7c8 | out: hHeap=0x1f0000) returned 1 [0257.452] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x106) returned 0x233008 [0257.452] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad9d0 | out: hHeap=0x1f0000) returned 1 [0257.452] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388d0 [0257.452] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238830 [0257.453] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1055\\SetupResources.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1055\\setupresources.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e230, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0257.453] GetFileType (hFile=0x1e0) returned 0x1 [0257.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388e0 [0257.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387e0 [0257.455] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1055\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1055\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0257.455] GetFileType (hFile=0x1c0) returned 0x1 [0257.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204db0 [0257.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f50 [0257.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad130 [0257.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238900 [0257.456] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238880 [0257.456] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1055\\SetupResources.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1055\\setupresources.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0257.457] GetFileType (hFile=0x174) returned 0x1 [0257.457] GetLastError () returned 0xb7 [0257.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe4) returned 0x21b618 [0257.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204df0 [0257.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cd0 [0257.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0257.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad7a8 [0257.458] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238970 [0257.458] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389b0 [0257.459] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1055\\SetupResources.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1055\\setupresources.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0257.459] GetFileType (hFile=0x21c) returned 0x1 [0257.459] GetLastError () returned 0xb7 [0257.459] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bb0 [0257.460] GetLastError () returned 0xb7 [0257.460] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ef0 [0257.460] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e50 [0257.460] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0257.460] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb8) returned 0x237620 [0257.460] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388b0 [0257.460] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389c0 [0257.461] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1055\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1055\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1a4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0257.461] GetFileType (hFile=0x19c) returned 0x1 [0257.461] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28cfc8 [0257.462] ReadFile (in: hFile=0x19c, lpBuffer=0x28cfc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e100, lpOverlapped=0x0 | out: lpBuffer=0x28cfc8*, lpNumberOfBytesRead=0x173e100*=0x1000, lpOverlapped=0x0) returned 1 [0257.466] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24a5c0 [0257.466] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28dfd0 [0257.466] GetLastError () returned 0x0 [0257.469] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101b0 [0257.469] GetLastError () returned 0x0 [0257.470] CloseHandle (hObject=0x1e0) returned 1 [0257.470] CloseHandle (hObject=0x1c0) returned 1 [0257.471] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387f0 [0257.471] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238990 [0257.472] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1055\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1055\\setupresources.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0257.474] GetFileType (hFile=0x1c0) returned 0x1 [0257.721] GetLastError () returned 0xb7 [0257.722] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x286f98 [0257.746] GetLastError () returned 0xb7 [0257.748] CloseHandle (hObject=0x1c0) returned 1 [0257.749] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1055\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1055\\setupresources.dll")) returned 0 [0257.749] GetLastError () returned 0x20 [0257.749] GetLastError () returned 0x20 [0257.750] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228680 [0257.750] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238370 [0257.750] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238280 [0257.750] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x228b00 [0257.750] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c50 [0257.750] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204b90 [0257.750] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x2388a0 [0257.750] GetLastError () returned 0x20 [0257.751] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239080 [0257.751] GetLastError () returned 0x20 [0257.751] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238f30 [0257.751] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2365a0 [0257.751] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238190 [0257.751] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x284f90 [0257.751] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238980 [0257.752] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0257.752] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0257.752] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238940 [0257.752] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0257.752] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210210 [0257.752] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2382d0 [0257.752] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285098 [0257.752] GetLastError () returned 0x20 [0257.752] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238820 [0257.753] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x2388f0 [0257.753] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238800 [0257.753] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388f0 | out: hHeap=0x1f0000) returned 1 [0257.753] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238840 [0257.753] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238800 | out: hHeap=0x1f0000) returned 1 [0257.753] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238820 | out: hHeap=0x1f0000) returned 1 [0257.753] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238820 [0257.753] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101e0 [0257.753] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238820 | out: hHeap=0x1f0000) returned 1 [0257.754] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210240 [0257.754] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0257.754] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238840 | out: hHeap=0x1f0000) returned 1 [0257.754] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101e0 [0257.754] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210018 [0257.754] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0257.754] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0257.754] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210018 | out: hHeap=0x1f0000) returned 1 [0257.754] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210240 | out: hHeap=0x1f0000) returned 1 [0257.755] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210240 [0257.755] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204c30 [0257.755] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210240 | out: hHeap=0x1f0000) returned 1 [0257.755] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204b90 [0257.755] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c30 | out: hHeap=0x1f0000) returned 1 [0257.755] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0257.755] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c70 [0257.755] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238398 [0257.756] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c70 | out: hHeap=0x1f0000) returned 1 [0257.756] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204c30 [0257.756] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0257.756] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204b90 | out: hHeap=0x1f0000) returned 1 [0257.756] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204c50 [0257.756] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206628 [0257.757] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c50 | out: hHeap=0x1f0000) returned 1 [0257.757] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238398 [0257.757] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206628 | out: hHeap=0x1f0000) returned 1 [0257.757] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c30 | out: hHeap=0x1f0000) returned 1 [0257.757] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238820 [0257.757] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101e0 [0257.757] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238820 | out: hHeap=0x1f0000) returned 1 [0257.757] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210240 [0257.757] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0257.757] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204e30 [0257.757] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210240 | out: hHeap=0x1f0000) returned 1 [0257.758] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x2068c8 [0257.758] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e30 | out: hHeap=0x1f0000) returned 1 [0257.758] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2068c8 | out: hHeap=0x1f0000) returned 1 [0257.758] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0257.758] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0257.758] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0257.758] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x284f90 | out: hHeap=0x1f0000) returned 1 [0257.758] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0257.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239198 [0257.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0257.759] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x213350) returned 1 [0257.760] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238370 | out: pbBuffer=0x238370) returned 1 [0257.760] CryptReleaseContext (hProv=0x213350, dwFlags=0x0) returned 1 [0257.760] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0257.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238000 [0257.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238370 [0257.761] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239010 [0257.761] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0257.761] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0257.761] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239010 | out: hHeap=0x1f0000) returned 1 [0257.761] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8d18 [0257.761] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0257.761] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x236608 [0257.761] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238078 [0257.761] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2858d8 [0257.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bd0 [0257.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2364d0 [0257.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2381e0 [0257.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2853b0 [0257.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238800 [0257.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0257.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210240 [0257.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238890 [0257.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0257.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff40 [0257.763] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff40 | out: hHeap=0x1f0000) returned 1 [0257.763] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0257.763] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238890 | out: hHeap=0x1f0000) returned 1 [0257.763] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210240 | out: hHeap=0x1f0000) returned 1 [0257.763] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0257.763] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238800 | out: hHeap=0x1f0000) returned 1 [0257.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2853b0 | out: hHeap=0x1f0000) returned 1 [0257.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0257.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2364d0 | out: hHeap=0x1f0000) returned 1 [0257.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239160 [0257.764] GetLastError () returned 0x0 [0257.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x2392b0 [0257.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0257.765] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0257.765] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0257.765] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0257.765] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0257.765] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0257.765] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x24ec40 [0257.765] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2852a8 [0257.765] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0257.765] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0257.766] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0257.766] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0257.766] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2856c8 [0257.766] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0257.766] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0257.766] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f510 [0257.766] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x251068 [0257.766] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2338c8 [0257.767] QueryPerformanceCounter (in: lpPerformanceCount=0x173dee0 | out: lpPerformanceCount=0x173dee0*=41513557850) returned 1 [0257.767] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173df20 | out: lpSystemTimeAsFileTime=0x173df20) [0257.767] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238840 [0257.767] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0257.767] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c30 [0257.767] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c30 | out: hHeap=0x1f0000) returned 1 [0257.768] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0257.768] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0257.768] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e30 [0257.768] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e30 | out: hHeap=0x1f0000) returned 1 [0257.768] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0257.768] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238840 | out: hHeap=0x1f0000) returned 1 [0257.768] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0257.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239208 [0257.769] GetLastError () returned 0x0 [0257.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0257.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0257.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0257.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2380a0 [0257.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238398 [0257.770] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0257.770] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0257.770] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238190 [0257.770] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0257.770] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x222ee8 [0257.770] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0257.770] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0257.770] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0257.770] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0257.771] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0257.771] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238000 [0257.771] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381b8 [0257.772] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0257.772] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0257.772] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0257.772] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0257.772] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x234b90 [0257.772] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b90 | out: hHeap=0x1f0000) returned 1 [0257.772] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0257.773] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0257.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210240 [0257.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228a28 [0257.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238000 [0257.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381b8 [0257.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381e0 [0257.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2385f0 [0257.773] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0257.773] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0257.774] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0257.774] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238000 [0257.774] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381b8 [0257.774] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0257.774] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0257.774] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0257.774] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2067d8 [0257.774] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x2b1fe0 [0257.775] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b1fe0 | out: hHeap=0x1f0000) returned 1 [0257.775] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2067d8 | out: hHeap=0x1f0000) returned 1 [0257.775] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0257.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0257.775] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0257.775] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0257.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204d70 [0257.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0257.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0257.776] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0257.776] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aa6d0 [0257.776] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0257.776] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385f0 | out: hHeap=0x1f0000) returned 1 [0257.776] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0257.776] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228a28 | out: hHeap=0x1f0000) returned 1 [0257.776] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0257.776] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d70 | out: hHeap=0x1f0000) returned 1 [0257.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210240 | out: hHeap=0x1f0000) returned 1 [0257.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0257.777] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a8fb0 [0257.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8fb0 | out: hHeap=0x1f0000) returned 1 [0257.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ee8 | out: hHeap=0x1f0000) returned 1 [0257.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0257.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0257.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0257.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0257.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0257.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0257.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0257.778] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a9578 [0257.778] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aac98 [0257.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a9578 | out: hHeap=0x1f0000) returned 1 [0257.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aac98 | out: hHeap=0x1f0000) returned 1 [0257.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aa6d0 | out: hHeap=0x1f0000) returned 1 [0257.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0257.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2856c8 | out: hHeap=0x1f0000) returned 1 [0257.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24ec40 | out: hHeap=0x1f0000) returned 1 [0257.779] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x232ba8 [0257.779] GetLastError () returned 0x0 [0257.779] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388c0 [0257.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238890 [0257.781] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1055\\SetupResources.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\1055\\setupresources.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e290, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0257.781] GetFileType (hFile=0x1c0) returned 0x1 [0257.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x286f98 [0257.782] SetFilePointerEx (in: hFile=0x1c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e218 | out: lpNewFilePointer=0x0) returned 1 [0257.782] GetLastError () returned 0xb7 [0257.783] CloseHandle (hObject=0x1c0) returned 1 [0257.783] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238890 | out: hHeap=0x1f0000) returned 1 [0257.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388c0 | out: hHeap=0x1f0000) returned 1 [0257.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2852a8 | out: hHeap=0x1f0000) returned 1 [0257.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2858d8 | out: hHeap=0x1f0000) returned 1 [0257.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0257.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bd0 | out: hHeap=0x1f0000) returned 1 [0257.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236608 | out: hHeap=0x1f0000) returned 1 [0257.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0257.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0257.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232ba8 | out: hHeap=0x1f0000) returned 1 [0257.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0257.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0257.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x251068 | out: hHeap=0x1f0000) returned 1 [0257.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2338c8 | out: hHeap=0x1f0000) returned 1 [0257.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239198 | out: hHeap=0x1f0000) returned 1 [0257.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388a0 | out: hHeap=0x1f0000) returned 1 [0257.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0257.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0257.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238940 | out: hHeap=0x1f0000) returned 1 [0257.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0257.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0257.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238980 | out: hHeap=0x1f0000) returned 1 [0257.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285098 | out: hHeap=0x1f0000) returned 1 [0257.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0257.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2365a0 | out: hHeap=0x1f0000) returned 1 [0258.237] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228b00 | out: hHeap=0x1f0000) returned 1 [0258.237] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0258.237] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0258.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228680 | out: hHeap=0x1f0000) returned 1 [0258.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238990 | out: hHeap=0x1f0000) returned 1 [0258.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387f0 | out: hHeap=0x1f0000) returned 1 [0258.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28cfc8 | out: hHeap=0x1f0000) returned 1 [0258.238] CloseHandle (hObject=0x19c) returned 1 [0258.239] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389c0 | out: hHeap=0x1f0000) returned 1 [0258.239] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388b0 | out: hHeap=0x1f0000) returned 1 [0258.239] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237620 | out: hHeap=0x1f0000) returned 1 [0258.239] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24a5c0 | out: hHeap=0x1f0000) returned 1 [0258.240] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0258.240] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ef0 | out: hHeap=0x1f0000) returned 1 [0258.240] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28dfd0 | out: hHeap=0x1f0000) returned 1 [0258.240] CloseHandle (hObject=0x21c) returned 1 [0258.241] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389b0 | out: hHeap=0x1f0000) returned 1 [0258.241] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238970 | out: hHeap=0x1f0000) returned 1 [0258.241] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad7a8 | out: hHeap=0x1f0000) returned 1 [0258.241] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204df0 | out: hHeap=0x1f0000) returned 1 [0258.241] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21b618 | out: hHeap=0x1f0000) returned 1 [0258.241] CloseHandle (hObject=0x174) returned 1 [0258.242] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238880 | out: hHeap=0x1f0000) returned 1 [0258.242] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238900 | out: hHeap=0x1f0000) returned 1 [0258.242] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad130 | out: hHeap=0x1f0000) returned 1 [0258.242] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387e0 | out: hHeap=0x1f0000) returned 1 [0258.242] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388e0 | out: hHeap=0x1f0000) returned 1 [0258.243] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238830 | out: hHeap=0x1f0000) returned 1 [0258.243] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388d0 | out: hHeap=0x1f0000) returned 1 [0258.243] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233008 | out: hHeap=0x1f0000) returned 1 [0258.243] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x255c88 | out: hHeap=0x1f0000) returned 1 [0258.243] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233580 | out: hHeap=0x1f0000) returned 1 [0258.243] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206658 | out: hHeap=0x1f0000) returned 1 [0258.243] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0258.243] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0258.243] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aba48 | out: hHeap=0x1f0000) returned 1 [0258.244] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x258298 | out: hHeap=0x1f0000) returned 1 [0258.244] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233350 | out: hHeap=0x1f0000) returned 1 [0258.244] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ec0 | out: hHeap=0x1f0000) returned 1 [0258.244] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0258.244] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ee88 | out: hHeap=0x1f0000) returned 1 [0258.244] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2287a0 | out: hHeap=0x1f0000) returned 1 [0258.244] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0258.244] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\1055\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1055\\setupresources.dll")) returned 1 [0258.246] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0258.247] FindClose (in: hFindFile=0x24e7c0 | out: hFindFile=0x24e7c0) returned 1 [0258.247] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236538 | out: hHeap=0x1f0000) returned 1 [0258.247] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d9d0 | out: hHeap=0x1f0000) returned 1 [0258.247] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0258.247] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228758 | out: hHeap=0x1f0000) returned 1 [0258.247] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228680 [0258.247] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0258.248] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22ee88 [0258.248] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228440 [0258.248] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\2052\\*", lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ec00 [0258.248] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228c68 [0258.248] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228440 | out: hHeap=0x1f0000) returned 1 [0258.249] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0258.249] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0258.249] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228a28 [0258.249] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228c68 | out: hHeap=0x1f0000) returned 1 [0258.249] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0258.249] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0258.249] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x16c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0258.249] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0258.249] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228b00 [0258.250] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x236608 [0258.250] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228b00 | out: hHeap=0x1f0000) returned 1 [0258.250] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228a28 | out: hHeap=0x1f0000) returned 1 [0258.250] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0258.251] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\2052\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2052\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0258.251] GetFileType (hFile=0x174) returned 0x1 [0258.251] CloseHandle (hObject=0x174) returned 1 [0258.252] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8d18 [0258.253] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\2052\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2052\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x173eb6c | out: lpFileInformation=0x173eb6c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x16c3)) returned 1 [0258.253] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0258.253] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8d18 [0258.253] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\2052\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2052\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x173eb7c | out: lpFileInformation=0x173eb7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x16c3)) returned 1 [0258.253] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0258.253] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8d18 [0258.254] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0258.254] GetLastError () returned 0x0 [0258.254] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0258.254] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228bd8 [0258.254] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22db68 [0258.254] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8d18 [0258.255] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238da8 [0258.255] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0258.255] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x2131b8) returned 1 [0258.256] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238190 | out: pbBuffer=0x238190) returned 1 [0258.256] CryptReleaseContext (hProv=0x2131b8, dwFlags=0x0) returned 1 [0258.256] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0258.256] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x254980 [0258.256] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x232ba8 [0258.257] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=41562552151) returned 1 [0258.257] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0258.257] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=41562591395) returned 1 [0258.257] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0258.257] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238c58 [0258.257] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x255c88 [0258.258] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x232cc0 [0258.258] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x2ab158 [0258.258] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210210 [0258.258] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2067d8 [0258.258] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101b0 [0258.258] GetLastError () returned 0x0 [0258.259] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2365a0 [0258.259] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a578 [0258.259] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2365a0 | out: hHeap=0x1f0000) returned 1 [0258.259] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xee) returned 0x2b12c0 [0258.259] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a578 | out: hHeap=0x1f0000) returned 1 [0258.259] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238820 [0258.260] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238960 [0258.261] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\2052\\eula.rtf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\2052\\eula.rtf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e230, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0258.263] GetFileType (hFile=0x174) returned 0x1 [0258.264] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387f0 [0258.264] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238970 [0258.265] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\2052\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2052\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0258.265] GetFileType (hFile=0x21c) returned 0x1 [0258.266] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0258.266] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204df0 [0258.266] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad580 [0258.266] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389b0 [0258.267] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238870 [0258.267] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\2052\\eula.rtf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\2052\\eula.rtf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0258.268] GetFileType (hFile=0x19c) returned 0x1 [0258.268] GetLastError () returned 0xb7 [0258.269] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe4) returned 0x21b168 [0258.269] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c10 [0258.269] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ef0 [0258.269] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bb0 [0258.269] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2add68 [0258.269] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389c0 [0258.270] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238860 [0258.270] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\2052\\eula.rtf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\2052\\eula.rtf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0258.270] GetFileType (hFile=0x1c0) returned 0x1 [0258.271] GetLastError () returned 0xb7 [0258.271] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c90 [0258.271] GetLastError () returned 0xb7 [0258.271] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e30 [0258.271] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0258.271] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e50 [0258.271] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb8) returned 0x237020 [0258.271] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387e0 [0258.272] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388a0 [0258.272] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\2052\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2052\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1a4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0258.272] GetFileType (hFile=0x1e8) returned 0x1 [0258.273] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28cfc8 [0258.273] ReadFile (in: hFile=0x1e8, lpBuffer=0x28cfc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e100, lpOverlapped=0x0 | out: lpBuffer=0x28cfc8*, lpNumberOfBytesRead=0x173e100*=0x1000, lpOverlapped=0x0) returned 1 [0258.507] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24b1d8 [0258.507] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28dfd0 [0258.508] GetLastError () returned 0x0 [0258.510] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210198 [0258.510] GetLastError () returned 0x0 [0258.511] CloseHandle (hObject=0x174) returned 1 [0258.512] CloseHandle (hObject=0x21c) returned 1 [0258.512] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238980 [0258.513] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238880 [0258.514] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\2052\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2052\\eula.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0258.516] GetFileType (hFile=0x21c) returned 0x1 [0258.517] GetLastError () returned 0xb7 [0258.517] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x286f98 [0258.517] GetLastError () returned 0xb7 [0258.519] CloseHandle (hObject=0x21c) returned 1 [0258.520] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\2052\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2052\\eula.rtf")) returned 0 [0258.520] GetLastError () returned 0x20 [0258.520] GetLastError () returned 0x20 [0258.520] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228758 [0258.521] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238280 [0258.521] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x237fd8 [0258.521] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x2287a0 [0258.521] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d90 [0258.521] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bb0 [0258.521] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x238830 [0258.521] GetLastError () returned 0x20 [0258.522] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238cc8 [0258.522] GetLastError () returned 0x20 [0258.522] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239160 [0258.522] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236468 [0258.522] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238000 [0258.522] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2856c8 [0258.522] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388e0 [0258.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0258.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0258.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238800 [0258.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0258.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210240 [0258.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2380a0 [0258.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2852a8 [0258.524] GetLastError () returned 0x20 [0258.524] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238810 [0258.524] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x2388f0 [0258.524] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238840 [0258.524] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388f0 | out: hHeap=0x1f0000) returned 1 [0258.524] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238850 [0258.524] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238840 | out: hHeap=0x1f0000) returned 1 [0258.525] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238810 | out: hHeap=0x1f0000) returned 1 [0258.525] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238810 [0258.525] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210258 [0258.525] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238810 | out: hHeap=0x1f0000) returned 1 [0258.525] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101c8 [0258.525] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0258.526] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238850 | out: hHeap=0x1f0000) returned 1 [0258.526] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210258 [0258.526] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210120 [0258.526] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0258.526] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210258 [0258.526] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210120 | out: hHeap=0x1f0000) returned 1 [0258.527] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0258.527] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0258.527] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204b90 [0258.527] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0258.527] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cb0 [0258.527] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204b90 | out: hHeap=0x1f0000) returned 1 [0258.527] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0258.528] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ef0 [0258.528] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2384b0 [0258.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ef0 | out: hHeap=0x1f0000) returned 1 [0258.528] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204cd0 [0258.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0258.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cb0 | out: hHeap=0x1f0000) returned 1 [0258.529] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204f70 [0258.529] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206808 [0258.529] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f70 | out: hHeap=0x1f0000) returned 1 [0258.529] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2381e0 [0258.529] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206808 | out: hHeap=0x1f0000) returned 1 [0258.529] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cd0 | out: hHeap=0x1f0000) returned 1 [0258.529] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238990 [0258.530] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101c8 [0258.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238990 | out: hHeap=0x1f0000) returned 1 [0258.530] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210258 [0258.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0258.530] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204ef0 [0258.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0258.530] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206658 [0258.531] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ef0 | out: hHeap=0x1f0000) returned 1 [0258.531] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206658 | out: hHeap=0x1f0000) returned 1 [0258.531] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0258.531] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0258.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0258.531] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2856c8 | out: hHeap=0x1f0000) returned 1 [0258.531] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0258.532] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238f30 [0258.532] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0258.532] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x212ad0) returned 1 [0258.533] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2381e0 | out: pbBuffer=0x2381e0) returned 1 [0258.533] CryptReleaseContext (hProv=0x212ad0, dwFlags=0x0) returned 1 [0258.534] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0258.534] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381e0 [0258.534] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238280 [0258.534] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239160 [0258.534] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0258.534] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0258.535] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239160 | out: hHeap=0x1f0000) returned 1 [0258.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8e78 [0258.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0258.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x2364d0 [0258.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2384b0 [0258.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2853b0 [0258.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c70 [0258.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236538 [0258.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2382d0 [0258.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285ae8 [0258.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238810 [0258.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0258.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210258 [0258.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238840 [0258.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0258.537] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff28 [0258.537] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff28 | out: hHeap=0x1f0000) returned 1 [0258.537] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0258.537] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238840 | out: hHeap=0x1f0000) returned 1 [0258.537] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0258.537] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0258.537] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238810 | out: hHeap=0x1f0000) returned 1 [0258.537] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285ae8 | out: hHeap=0x1f0000) returned 1 [0258.538] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0258.538] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236538 | out: hHeap=0x1f0000) returned 1 [0258.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239160 [0258.538] GetLastError () returned 0x0 [0258.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239010 [0258.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0258.538] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0258.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0258.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0258.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0258.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0258.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x24e7c0 [0258.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285098 [0258.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0258.540] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0258.540] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0258.540] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0258.540] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2858d8 [0258.540] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0258.540] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0258.540] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f510 [0258.540] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x251068 [0258.541] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x233468 [0258.541] QueryPerformanceCounter (in: lpPerformanceCount=0x173dee0 | out: lpPerformanceCount=0x173dee0*=41590967609) returned 1 [0258.541] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173df20 | out: lpSystemTimeAsFileTime=0x173df20) [0258.541] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238890 [0258.541] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0258.541] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bd0 [0258.542] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bd0 | out: hHeap=0x1f0000) returned 1 [0258.542] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0258.542] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0258.542] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204db0 [0258.542] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204db0 | out: hHeap=0x1f0000) returned 1 [0258.542] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0258.542] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238890 | out: hHeap=0x1f0000) returned 1 [0258.542] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0258.542] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238e18 [0258.543] GetLastError () returned 0x0 [0258.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0258.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0258.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0258.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238398 [0258.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381e0 [0258.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0258.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0258.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2382d0 [0258.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0258.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x222ee8 [0258.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0258.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0258.544] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0258.545] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0258.545] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0258.545] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2382f8 [0258.545] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238370 [0258.545] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0258.545] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0258.546] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0258.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0258.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x234b90 [0258.546] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b90 | out: hHeap=0x1f0000) returned 1 [0258.546] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0258.546] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0258.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210258 [0258.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228440 [0258.547] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2382f8 [0258.547] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238000 [0258.547] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238078 [0258.547] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238370 [0258.547] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0258.547] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0258.547] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0258.547] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2382f8 [0258.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238000 [0258.548] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0258.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0258.548] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0258.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206808 [0258.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x2b2cb8 [0258.548] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b2cb8 | out: hHeap=0x1f0000) returned 1 [0258.549] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206808 | out: hHeap=0x1f0000) returned 1 [0258.549] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0258.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0258.846] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0258.847] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0258.847] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204df0 [0258.847] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0258.847] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0258.847] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0258.847] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a9b40 [0258.848] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0258.848] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0258.848] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0258.848] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228440 | out: hHeap=0x1f0000) returned 1 [0258.848] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0258.848] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204df0 | out: hHeap=0x1f0000) returned 1 [0258.849] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0258.849] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0258.849] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aa358 [0258.849] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aa358 | out: hHeap=0x1f0000) returned 1 [0258.849] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ee8 | out: hHeap=0x1f0000) returned 1 [0258.849] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0258.850] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0258.850] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0258.850] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0258.850] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0258.850] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0258.850] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0258.851] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a9200 [0258.851] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aadc0 [0258.851] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a9200 | out: hHeap=0x1f0000) returned 1 [0258.851] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aadc0 | out: hHeap=0x1f0000) returned 1 [0258.851] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a9b40 | out: hHeap=0x1f0000) returned 1 [0258.851] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0258.852] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2858d8 | out: hHeap=0x1f0000) returned 1 [0258.852] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24e7c0 | out: hHeap=0x1f0000) returned 1 [0258.852] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x233350 [0258.852] GetLastError () returned 0x0 [0258.853] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238910 [0258.853] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238990 [0258.894] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\2052\\eula.rtf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\2052\\eula.rtf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e290, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0258.894] GetFileType (hFile=0x174) returned 0x1 [0258.894] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x286f98 [0258.894] SetFilePointerEx (in: hFile=0x174, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e218 | out: lpNewFilePointer=0x0) returned 1 [0258.895] GetLastError () returned 0xb7 [0258.895] CloseHandle (hObject=0x174) returned 1 [0258.896] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238990 | out: hHeap=0x1f0000) returned 1 [0258.896] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238910 | out: hHeap=0x1f0000) returned 1 [0258.896] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285098 | out: hHeap=0x1f0000) returned 1 [0258.896] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2853b0 | out: hHeap=0x1f0000) returned 1 [0258.896] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0258.896] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c70 | out: hHeap=0x1f0000) returned 1 [0258.896] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2364d0 | out: hHeap=0x1f0000) returned 1 [0258.896] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0258.896] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8e78 | out: hHeap=0x1f0000) returned 1 [0258.896] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233350 | out: hHeap=0x1f0000) returned 1 [0258.896] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0258.896] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0258.896] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x251068 | out: hHeap=0x1f0000) returned 1 [0258.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233468 | out: hHeap=0x1f0000) returned 1 [0258.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238f30 | out: hHeap=0x1f0000) returned 1 [0258.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238830 | out: hHeap=0x1f0000) returned 1 [0258.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210240 | out: hHeap=0x1f0000) returned 1 [0258.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0258.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238800 | out: hHeap=0x1f0000) returned 1 [0258.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0258.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0258.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388e0 | out: hHeap=0x1f0000) returned 1 [0258.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2852a8 | out: hHeap=0x1f0000) returned 1 [0258.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0258.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0258.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2287a0 | out: hHeap=0x1f0000) returned 1 [0258.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0258.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0258.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228758 | out: hHeap=0x1f0000) returned 1 [0258.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238880 | out: hHeap=0x1f0000) returned 1 [0258.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238980 | out: hHeap=0x1f0000) returned 1 [0258.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28cfc8 | out: hHeap=0x1f0000) returned 1 [0258.898] CloseHandle (hObject=0x1e8) returned 1 [0258.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388a0 | out: hHeap=0x1f0000) returned 1 [0258.899] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387e0 | out: hHeap=0x1f0000) returned 1 [0258.899] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237020 | out: hHeap=0x1f0000) returned 1 [0258.899] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24b1d8 | out: hHeap=0x1f0000) returned 1 [0258.899] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0258.899] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e30 | out: hHeap=0x1f0000) returned 1 [0258.899] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28dfd0 | out: hHeap=0x1f0000) returned 1 [0258.899] CloseHandle (hObject=0x1c0) returned 1 [0258.899] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238860 | out: hHeap=0x1f0000) returned 1 [0258.899] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389c0 | out: hHeap=0x1f0000) returned 1 [0258.900] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2add68 | out: hHeap=0x1f0000) returned 1 [0258.900] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c10 | out: hHeap=0x1f0000) returned 1 [0258.900] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21b168 | out: hHeap=0x1f0000) returned 1 [0258.900] CloseHandle (hObject=0x19c) returned 1 [0258.900] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238870 | out: hHeap=0x1f0000) returned 1 [0258.900] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389b0 | out: hHeap=0x1f0000) returned 1 [0258.900] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad580 | out: hHeap=0x1f0000) returned 1 [0258.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238970 | out: hHeap=0x1f0000) returned 1 [0258.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387f0 | out: hHeap=0x1f0000) returned 1 [0258.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238960 | out: hHeap=0x1f0000) returned 1 [0258.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238820 | out: hHeap=0x1f0000) returned 1 [0258.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b12c0 | out: hHeap=0x1f0000) returned 1 [0258.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x255c88 | out: hHeap=0x1f0000) returned 1 [0258.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232cc0 | out: hHeap=0x1f0000) returned 1 [0258.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2067d8 | out: hHeap=0x1f0000) returned 1 [0258.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0258.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0258.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab158 | out: hHeap=0x1f0000) returned 1 [0258.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x254980 | out: hHeap=0x1f0000) returned 1 [0258.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232ba8 | out: hHeap=0x1f0000) returned 1 [0258.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238da8 | out: hHeap=0x1f0000) returned 1 [0258.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0258.902] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22db68 | out: hHeap=0x1f0000) returned 1 [0258.902] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228bd8 | out: hHeap=0x1f0000) returned 1 [0258.902] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0258.902] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\2052\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2052\\eula.rtf")) returned 1 [0258.904] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0258.904] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239208 [0258.904] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228758 [0258.904] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236468 [0258.904] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228758 | out: hHeap=0x1f0000) returned 1 [0258.904] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236608 | out: hHeap=0x1f0000) returned 1 [0258.905] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239208 | out: hHeap=0x1f0000) returned 1 [0258.905] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\2052\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2052\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0258.905] GetFileType (hFile=0x19c) returned 0x1 [0258.906] CloseHandle (hObject=0x19c) returned 1 [0258.906] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2364d0 [0258.906] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\2052\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2052\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x173eb6c | out: lpFileInformation=0x173eb6c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed0c)) returned 1 [0258.906] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2364d0 | out: hHeap=0x1f0000) returned 1 [0258.906] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236538 [0258.906] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\2052\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2052\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x173eb7c | out: lpFileInformation=0x173eb7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed0c)) returned 1 [0258.907] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236538 | out: hHeap=0x1f0000) returned 1 [0258.907] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2364d0 [0258.907] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2364d0 | out: hHeap=0x1f0000) returned 1 [0258.907] GetLastError () returned 0x0 [0258.907] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0258.907] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228518 [0258.907] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f350 [0258.907] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2364d0 [0258.908] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238e50 [0258.908] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0258.908] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x213350) returned 1 [0258.910] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2382f8 | out: pbBuffer=0x2382f8) returned 1 [0258.910] CryptReleaseContext (hProv=0x213350, dwFlags=0x0) returned 1 [0258.910] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0258.910] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x252370 [0258.910] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x233120 [0258.910] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=41627893536) returned 1 [0258.910] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0258.910] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=41627922670) returned 1 [0258.910] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0258.911] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239198 [0258.911] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x251068 [0258.911] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x233468 [0258.912] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x2ab2f8 [0258.912] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101b0 [0258.912] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206928 [0258.912] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0258.912] GetLastError () returned 0x0 [0258.912] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae048 [0258.912] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2adbf8 [0258.912] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae048 | out: hHeap=0x1f0000) returned 1 [0258.912] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x106) returned 0x233580 [0258.912] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2adbf8 | out: hHeap=0x1f0000) returned 1 [0258.912] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388d0 [0258.913] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238910 [0258.913] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\2052\\LocalizedData.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\2052\\localizeddata.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e230, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0258.914] GetFileType (hFile=0x19c) returned 0x1 [0258.914] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389b0 [0258.914] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238870 [0258.915] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\2052\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2052\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0258.915] GetFileType (hFile=0x1c0) returned 0x1 [0258.915] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c30 [0258.915] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c10 [0258.916] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2adcb0 [0258.916] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387f0 [0258.916] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238990 [0258.916] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\2052\\LocalizedData.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\2052\\localizeddata.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0258.917] GetFileType (hFile=0x1e8) returned 0x1 [0258.917] GetLastError () returned 0xb7 [0258.917] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe4) returned 0x21b348 [0258.918] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e30 [0258.918] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c90 [0258.918] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e50 [0258.918] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad638 [0258.918] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238940 [0258.918] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238840 [0258.919] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\2052\\LocalizedData.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\2052\\localizeddata.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0258.919] GetFileType (hFile=0x174) returned 0x1 [0258.920] GetLastError () returned 0xb7 [0258.920] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d10 [0258.920] GetLastError () returned 0xb7 [0258.920] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e50 [0258.920] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d30 [0258.920] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cf0 [0258.920] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb8) returned 0x237260 [0258.920] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387e0 [0258.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238970 [0258.921] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\2052\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2052\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1a4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0258.921] GetFileType (hFile=0x1ac) returned 0x1 [0258.922] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28cfc8 [0258.922] ReadFile (in: hFile=0x1ac, lpBuffer=0x28cfc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e100, lpOverlapped=0x0 | out: lpBuffer=0x28cfc8*, lpNumberOfBytesRead=0x173e100*=0x1000, lpOverlapped=0x0) returned 1 [0259.395] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24c600 [0259.396] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28dfd0 [0259.396] GetLastError () returned 0x0 [0259.400] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0259.400] GetLastError () returned 0x0 [0259.401] CloseHandle (hObject=0x19c) returned 1 [0259.401] CloseHandle (hObject=0x1c0) returned 1 [0259.402] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388c0 [0259.402] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238800 [0259.403] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\2052\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2052\\localizeddata.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0259.405] GetFileType (hFile=0x1c0) returned 0x1 [0259.406] GetLastError () returned 0xb7 [0259.406] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x286f98 [0259.406] GetLastError () returned 0xb7 [0259.407] CloseHandle (hObject=0x1c0) returned 1 [0259.408] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\2052\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2052\\localizeddata.xml")) returned 0 [0259.408] GetLastError () returned 0x20 [0259.408] GetLastError () returned 0x20 [0259.408] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228758 [0259.408] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238078 [0259.409] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238398 [0259.409] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x228c68 [0259.409] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bb0 [0259.409] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d90 [0259.409] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x2388e0 [0259.409] GetLastError () returned 0x20 [0259.409] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238da8 [0259.409] GetLastError () returned 0x20 [0259.410] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238d00 [0259.410] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236538 [0259.410] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238168 [0259.410] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285e00 [0259.410] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238880 [0259.410] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0259.410] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210210 [0259.410] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389c0 [0259.410] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0259.411] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210240 [0259.411] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238370 [0259.411] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285ae8 [0259.411] GetLastError () returned 0x20 [0259.411] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238980 [0259.411] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x2388f0 [0259.411] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238810 [0259.412] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388f0 | out: hHeap=0x1f0000) returned 1 [0259.412] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238820 [0259.412] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238810 | out: hHeap=0x1f0000) returned 1 [0259.412] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238980 | out: hHeap=0x1f0000) returned 1 [0259.412] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238890 [0259.412] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210258 [0259.412] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238890 | out: hHeap=0x1f0000) returned 1 [0259.412] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210198 [0259.413] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0259.413] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238820 | out: hHeap=0x1f0000) returned 1 [0259.413] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210258 [0259.413] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20fef8 [0259.413] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0259.413] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210258 [0259.413] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20fef8 | out: hHeap=0x1f0000) returned 1 [0259.413] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0259.414] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210198 [0259.414] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204e90 [0259.414] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0259.414] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bd0 [0259.414] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e90 | out: hHeap=0x1f0000) returned 1 [0259.414] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0259.414] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d90 [0259.415] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2384b0 [0259.415] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d90 | out: hHeap=0x1f0000) returned 1 [0259.415] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204bb0 [0259.415] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0259.415] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bd0 | out: hHeap=0x1f0000) returned 1 [0259.415] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204df0 [0259.415] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x2067d8 [0259.415] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204df0 | out: hHeap=0x1f0000) returned 1 [0259.416] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238190 [0259.416] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2067d8 | out: hHeap=0x1f0000) returned 1 [0259.416] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bb0 | out: hHeap=0x1f0000) returned 1 [0259.416] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238810 [0259.416] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210258 [0259.416] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238810 | out: hHeap=0x1f0000) returned 1 [0259.416] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210198 [0259.416] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0259.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204f30 [0259.417] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0259.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x2067d8 [0259.417] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f30 | out: hHeap=0x1f0000) returned 1 [0259.417] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2067d8 | out: hHeap=0x1f0000) returned 1 [0259.417] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0259.417] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0259.418] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0259.418] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285e00 | out: hHeap=0x1f0000) returned 1 [0259.418] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0259.418] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239010 [0259.418] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0259.418] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x2130a8) returned 1 [0259.420] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2384b0 | out: pbBuffer=0x2384b0) returned 1 [0259.420] CryptReleaseContext (hProv=0x2130a8, dwFlags=0x0) returned 1 [0259.420] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0259.420] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238168 [0259.420] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238190 [0259.420] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239278 [0259.421] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0259.421] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0259.421] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239278 | out: hHeap=0x1f0000) returned 1 [0259.421] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8d18 [0259.421] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210198 [0259.421] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x236608 [0259.421] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2384b0 [0259.421] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2851a0 [0259.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d90 [0259.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2365a0 [0259.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238000 [0259.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2858d8 [0259.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238810 [0259.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0259.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210258 [0259.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238830 [0259.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0259.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210078 [0259.423] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210078 | out: hHeap=0x1f0000) returned 1 [0259.423] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0259.423] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238830 | out: hHeap=0x1f0000) returned 1 [0259.423] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0259.423] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0259.423] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238810 | out: hHeap=0x1f0000) returned 1 [0259.424] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2858d8 | out: hHeap=0x1f0000) returned 1 [0259.424] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0259.424] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2365a0 | out: hHeap=0x1f0000) returned 1 [0259.424] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239198 [0259.425] GetLastError () returned 0x0 [0259.425] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239048 [0259.426] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0259.426] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0259.426] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0259.426] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0259.426] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0259.426] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0259.426] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x24e980 [0259.426] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2853b0 [0259.427] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0259.427] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0259.427] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0259.427] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0259.427] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2858d8 [0259.427] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0259.427] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0259.427] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f9c0 [0259.428] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x255c88 [0259.428] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x233238 [0259.428] QueryPerformanceCounter (in: lpPerformanceCount=0x173dee0 | out: lpPerformanceCount=0x173dee0*=41679689368) returned 1 [0259.428] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173df20 | out: lpSystemTimeAsFileTime=0x173df20) [0259.428] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238930 [0259.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0259.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c50 [0259.429] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c50 | out: hHeap=0x1f0000) returned 1 [0259.429] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0259.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0259.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204b90 [0259.429] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204b90 | out: hHeap=0x1f0000) returned 1 [0259.430] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0259.430] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238930 | out: hHeap=0x1f0000) returned 1 [0259.430] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0259.430] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238d70 [0259.430] GetLastError () returned 0x0 [0259.430] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0259.431] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0259.431] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0259.431] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238168 [0259.431] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381b8 [0259.431] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0259.431] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0259.431] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381e0 [0259.432] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0259.432] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x222ee8 [0259.432] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0259.432] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0259.432] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0259.432] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0259.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0259.433] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238000 [0259.433] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238078 [0259.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0259.433] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0259.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0259.433] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0259.434] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x234b90 [0259.434] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b90 | out: hHeap=0x1f0000) returned 1 [0259.434] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0259.434] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0259.434] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210258 [0259.434] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228a28 [0259.434] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238000 [0259.435] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238078 [0259.435] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238690 [0259.435] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238780 [0259.435] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0259.435] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0259.435] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0259.435] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238078 [0259.435] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238000 [0259.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0259.436] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0259.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0259.436] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2067d8 [0259.436] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x2b4220 [0259.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b4220 | out: hHeap=0x1f0000) returned 1 [0259.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2067d8 | out: hHeap=0x1f0000) returned 1 [0259.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0259.437] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0259.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0259.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0259.437] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204f70 [0259.437] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0259.437] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0259.438] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0259.438] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aa108 [0259.438] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0259.438] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238780 | out: hHeap=0x1f0000) returned 1 [0259.438] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238690 | out: hHeap=0x1f0000) returned 1 [0259.438] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228a28 | out: hHeap=0x1f0000) returned 1 [0259.439] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0259.439] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f70 | out: hHeap=0x1f0000) returned 1 [0259.439] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0259.439] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0259.439] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a90d8 [0259.439] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a90d8 | out: hHeap=0x1f0000) returned 1 [0259.439] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ee8 | out: hHeap=0x1f0000) returned 1 [0259.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0259.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0259.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0259.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0259.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0259.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0259.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0259.667] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aa920 [0259.667] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a9328 [0259.667] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aa920 | out: hHeap=0x1f0000) returned 1 [0259.667] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a9328 | out: hHeap=0x1f0000) returned 1 [0259.667] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aa108 | out: hHeap=0x1f0000) returned 1 [0259.667] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0259.667] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2858d8 | out: hHeap=0x1f0000) returned 1 [0259.667] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24e980 | out: hHeap=0x1f0000) returned 1 [0259.667] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x233698 [0259.668] GetLastError () returned 0x0 [0259.668] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238850 [0259.669] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238810 [0259.706] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\2052\\LocalizedData.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\2052\\localizeddata.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e290, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0259.706] GetFileType (hFile=0x21c) returned 0x1 [0259.707] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x286f98 [0259.707] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e218 | out: lpNewFilePointer=0x0) returned 1 [0259.708] GetLastError () returned 0xb7 [0259.708] CloseHandle (hObject=0x21c) returned 1 [0259.709] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238810 | out: hHeap=0x1f0000) returned 1 [0259.709] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238850 | out: hHeap=0x1f0000) returned 1 [0259.709] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2853b0 | out: hHeap=0x1f0000) returned 1 [0259.709] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2851a0 | out: hHeap=0x1f0000) returned 1 [0259.709] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0259.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d90 | out: hHeap=0x1f0000) returned 1 [0259.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236608 | out: hHeap=0x1f0000) returned 1 [0259.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0259.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0259.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233698 | out: hHeap=0x1f0000) returned 1 [0259.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0259.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0259.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x255c88 | out: hHeap=0x1f0000) returned 1 [0259.711] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233238 | out: hHeap=0x1f0000) returned 1 [0259.711] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239010 | out: hHeap=0x1f0000) returned 1 [0259.711] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388e0 | out: hHeap=0x1f0000) returned 1 [0259.711] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210240 | out: hHeap=0x1f0000) returned 1 [0259.711] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0259.711] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389c0 | out: hHeap=0x1f0000) returned 1 [0259.711] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0259.711] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0259.711] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238880 | out: hHeap=0x1f0000) returned 1 [0259.711] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285ae8 | out: hHeap=0x1f0000) returned 1 [0259.712] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0259.712] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236538 | out: hHeap=0x1f0000) returned 1 [0259.712] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228c68 | out: hHeap=0x1f0000) returned 1 [0259.712] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0259.712] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0259.712] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228758 | out: hHeap=0x1f0000) returned 1 [0259.712] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238800 | out: hHeap=0x1f0000) returned 1 [0259.712] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388c0 | out: hHeap=0x1f0000) returned 1 [0259.712] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28cfc8 | out: hHeap=0x1f0000) returned 1 [0259.712] CloseHandle (hObject=0x1ac) returned 1 [0259.713] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238970 | out: hHeap=0x1f0000) returned 1 [0259.713] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387e0 | out: hHeap=0x1f0000) returned 1 [0259.713] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237260 | out: hHeap=0x1f0000) returned 1 [0259.713] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24c600 | out: hHeap=0x1f0000) returned 1 [0259.714] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0259.714] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e50 | out: hHeap=0x1f0000) returned 1 [0259.714] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28dfd0 | out: hHeap=0x1f0000) returned 1 [0259.714] CloseHandle (hObject=0x174) returned 1 [0259.714] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238840 | out: hHeap=0x1f0000) returned 1 [0259.715] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238940 | out: hHeap=0x1f0000) returned 1 [0259.715] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad638 | out: hHeap=0x1f0000) returned 1 [0259.715] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e30 | out: hHeap=0x1f0000) returned 1 [0259.715] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21b348 | out: hHeap=0x1f0000) returned 1 [0259.715] CloseHandle (hObject=0x1e8) returned 1 [0259.716] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238990 | out: hHeap=0x1f0000) returned 1 [0259.716] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387f0 | out: hHeap=0x1f0000) returned 1 [0259.716] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2adcb0 | out: hHeap=0x1f0000) returned 1 [0259.716] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238870 | out: hHeap=0x1f0000) returned 1 [0259.716] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389b0 | out: hHeap=0x1f0000) returned 1 [0259.716] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238910 | out: hHeap=0x1f0000) returned 1 [0259.716] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388d0 | out: hHeap=0x1f0000) returned 1 [0259.716] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233580 | out: hHeap=0x1f0000) returned 1 [0259.716] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x251068 | out: hHeap=0x1f0000) returned 1 [0259.716] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233468 | out: hHeap=0x1f0000) returned 1 [0259.717] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206928 | out: hHeap=0x1f0000) returned 1 [0259.717] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0259.717] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0259.717] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab2f8 | out: hHeap=0x1f0000) returned 1 [0259.717] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x252370 | out: hHeap=0x1f0000) returned 1 [0259.717] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233120 | out: hHeap=0x1f0000) returned 1 [0259.717] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238e50 | out: hHeap=0x1f0000) returned 1 [0259.717] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2364d0 | out: hHeap=0x1f0000) returned 1 [0259.717] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f350 | out: hHeap=0x1f0000) returned 1 [0259.717] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228518 | out: hHeap=0x1f0000) returned 1 [0259.717] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0259.717] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\2052\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2052\\localizeddata.xml")) returned 1 [0259.719] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0259.719] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239160 [0259.719] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228a28 [0259.720] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2364d0 [0259.720] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228a28 | out: hHeap=0x1f0000) returned 1 [0259.720] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0259.720] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239160 | out: hHeap=0x1f0000) returned 1 [0259.721] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\2052\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2052\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0259.721] GetFileType (hFile=0x1e8) returned 0x1 [0259.721] CloseHandle (hObject=0x1e8) returned 1 [0259.721] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236608 [0259.722] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\2052\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2052\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x173eb6c | out: lpFileInformation=0x173eb6c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758)) returned 1 [0259.722] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236608 | out: hHeap=0x1f0000) returned 1 [0259.722] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236608 [0259.722] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\2052\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2052\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x173eb7c | out: lpFileInformation=0x173eb7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758)) returned 1 [0259.722] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236608 | out: hHeap=0x1f0000) returned 1 [0259.722] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2365a0 [0259.722] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2365a0 | out: hHeap=0x1f0000) returned 1 [0259.722] GetLastError () returned 0x0 [0259.723] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0259.723] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228b00 [0259.723] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f350 [0259.723] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236538 [0259.723] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239160 [0259.723] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0259.723] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x212e00) returned 1 [0259.725] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238168 | out: pbBuffer=0x238168) returned 1 [0259.725] CryptReleaseContext (hProv=0x212e00, dwFlags=0x0) returned 1 [0259.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0259.725] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x251068 [0259.726] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x232ba8 [0259.726] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=41709462418) returned 1 [0259.726] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0259.726] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=41709497863) returned 1 [0259.726] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0259.726] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239198 [0259.726] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x255c88 [0259.727] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x233350 [0259.727] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x2ab8a8 [0259.727] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0259.727] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206628 [0259.727] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0259.727] GetLastError () returned 0x0 [0259.727] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2aeb88 [0259.727] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad1e8 [0259.727] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aeb88 | out: hHeap=0x1f0000) returned 1 [0259.727] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x106) returned 0x232dd8 [0259.728] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad1e8 | out: hHeap=0x1f0000) returned 1 [0259.728] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238990 [0259.728] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387f0 [0259.728] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\2052\\SetupResources.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\2052\\setupresources.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e230, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0259.729] GetFileType (hFile=0x1e8) returned 0x1 [0259.729] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389b0 [0259.730] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238860 [0259.731] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\2052\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2052\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0259.731] GetFileType (hFile=0x174) returned 0x1 [0259.732] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c90 [0259.732] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e30 [0259.732] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad638 [0259.732] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238940 [0259.732] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238840 [0259.733] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\2052\\SetupResources.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\2052\\setupresources.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0259.733] GetFileType (hFile=0x1ac) returned 0x1 [0259.734] GetLastError () returned 0xb7 [0259.734] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe4) returned 0x21b528 [0259.734] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e30 [0259.735] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d30 [0259.735] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cf0 [0259.735] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad580 [0259.735] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387e0 [0259.735] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238970 [0259.736] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\2052\\SetupResources.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\2052\\setupresources.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0259.736] GetFileType (hFile=0x21c) returned 0x1 [0259.737] GetLastError () returned 0xb7 [0259.737] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ef0 [0259.737] GetLastError () returned 0xb7 [0259.737] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e50 [0259.738] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c90 [0259.738] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cb0 [0259.738] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb8) returned 0x2373e0 [0259.738] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238800 [0259.738] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238820 [0260.285] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\2052\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2052\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1a4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0260.285] GetFileType (hFile=0x19c) returned 0x1 [0260.286] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x286f98 [0260.286] ReadFile (in: hFile=0x19c, lpBuffer=0x286f98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e100, lpOverlapped=0x0 | out: lpBuffer=0x286f98*, lpNumberOfBytesRead=0x173e100*=0x1000, lpOverlapped=0x0) returned 1 [0260.597] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24a1b8 [0260.598] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28dfd0 [0260.598] GetLastError () returned 0x0 [0260.623] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210240 [0260.623] GetLastError () returned 0x0 [0260.623] CloseHandle (hObject=0x1e8) returned 1 [0260.625] CloseHandle (hObject=0x174) returned 1 [0260.625] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389c0 [0260.625] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238810 [0260.626] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\2052\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2052\\setupresources.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0260.629] GetFileType (hFile=0x174) returned 0x1 [0260.629] GetLastError () returned 0xb7 [0260.630] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x290fe8 [0260.630] GetLastError () returned 0xb7 [0260.631] CloseHandle (hObject=0x174) returned 1 [0260.632] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\2052\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2052\\setupresources.dll")) returned 0 [0260.632] GetLastError () returned 0x20 [0260.632] GetLastError () returned 0x20 [0260.632] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228a28 [0260.632] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238190 [0260.632] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x237fd8 [0260.633] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x228bd8 [0260.633] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d90 [0260.633] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f50 [0260.633] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x238880 [0260.633] GetLastError () returned 0x20 [0260.633] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238f68 [0260.633] GetLastError () returned 0x20 [0260.633] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238cc8 [0260.634] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236468 [0260.634] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238078 [0260.634] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2858d8 [0260.634] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238930 [0260.634] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0260.634] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210258 [0260.634] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388c0 [0260.634] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0260.634] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210198 [0260.635] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2381b8 [0260.635] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285bf0 [0260.635] GetLastError () returned 0x20 [0260.635] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238980 [0260.635] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238890 [0260.635] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238830 [0260.635] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238890 | out: hHeap=0x1f0000) returned 1 [0260.635] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238890 [0260.636] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238830 | out: hHeap=0x1f0000) returned 1 [0260.636] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238980 | out: hHeap=0x1f0000) returned 1 [0260.636] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388a0 [0260.636] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101b0 [0260.636] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388a0 | out: hHeap=0x1f0000) returned 1 [0260.636] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210210 [0260.636] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0260.636] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238890 | out: hHeap=0x1f0000) returned 1 [0260.637] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101b0 [0260.637] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210120 [0260.637] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0260.637] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101b0 [0260.637] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210120 | out: hHeap=0x1f0000) returned 1 [0260.637] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0260.637] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210210 [0260.637] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204d70 [0260.637] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0260.638] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c70 [0260.638] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d70 | out: hHeap=0x1f0000) returned 1 [0260.638] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0260.638] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f70 [0260.638] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2381e0 [0260.638] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f70 | out: hHeap=0x1f0000) returned 1 [0260.638] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204c30 [0260.638] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0260.639] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c70 | out: hHeap=0x1f0000) returned 1 [0260.639] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204f30 [0260.639] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x2067d8 [0260.639] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f30 | out: hHeap=0x1f0000) returned 1 [0260.639] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238280 [0260.639] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2067d8 | out: hHeap=0x1f0000) returned 1 [0260.639] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c30 | out: hHeap=0x1f0000) returned 1 [0260.639] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238900 [0260.639] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101b0 [0260.639] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238900 | out: hHeap=0x1f0000) returned 1 [0260.640] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210210 [0260.640] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0260.640] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204c50 [0260.640] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0260.640] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206928 [0260.640] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c50 | out: hHeap=0x1f0000) returned 1 [0260.640] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206928 | out: hHeap=0x1f0000) returned 1 [0260.640] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0260.641] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0260.641] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0260.641] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2858d8 | out: hHeap=0x1f0000) returned 1 [0260.641] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0260.641] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238f68 [0260.641] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0260.641] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x212f98) returned 1 [0260.643] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238398 | out: pbBuffer=0x238398) returned 1 [0260.643] CryptReleaseContext (hProv=0x212f98, dwFlags=0x0) returned 1 [0260.644] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0260.644] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238190 [0260.644] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238078 [0260.644] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238d00 [0260.644] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0260.644] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0260.644] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238d00 | out: hHeap=0x1f0000) returned 1 [0260.644] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8dc8 [0260.644] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101b0 [0260.645] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x2365a0 [0260.645] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238190 [0260.645] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2855c0 [0260.645] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f10 [0260.645] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236608 [0260.645] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2381e0 [0260.645] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2857d0 [0260.645] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238980 [0260.645] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0260.646] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210210 [0260.646] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238830 [0260.646] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0260.646] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210018 [0260.646] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210018 | out: hHeap=0x1f0000) returned 1 [0260.646] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0260.646] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238830 | out: hHeap=0x1f0000) returned 1 [0260.647] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0260.647] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0260.647] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238980 | out: hHeap=0x1f0000) returned 1 [0260.647] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2857d0 | out: hHeap=0x1f0000) returned 1 [0260.647] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0260.647] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236608 | out: hHeap=0x1f0000) returned 1 [0260.647] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238e18 [0260.647] GetLastError () returned 0x0 [0260.648] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239278 [0260.648] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0260.648] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0260.648] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0260.648] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0260.648] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0260.648] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0260.648] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x24e900 [0260.649] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2859e0 [0260.649] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0260.649] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0260.649] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0260.649] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0260.649] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285ae8 [0260.649] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0260.649] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0260.649] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fa88 [0260.649] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x24fd60 [0260.650] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x233008 [0260.650] QueryPerformanceCounter (in: lpPerformanceCount=0x173dee0 | out: lpPerformanceCount=0x173dee0*=41801865524) returned 1 [0260.650] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173df20 | out: lpSystemTimeAsFileTime=0x173df20) [0260.650] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x2388d0 [0260.650] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0260.650] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c90 [0260.650] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c90 | out: hHeap=0x1f0000) returned 1 [0260.651] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0260.651] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0260.651] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c70 [0260.651] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c70 | out: hHeap=0x1f0000) returned 1 [0260.651] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0260.651] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388d0 | out: hHeap=0x1f0000) returned 1 [0260.651] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0260.651] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239198 [0260.651] GetLastError () returned 0x0 [0260.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0260.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0260.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0260.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381e0 [0260.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238280 [0260.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0260.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0260.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238398 [0260.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0260.653] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x222ee8 [0260.653] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0260.653] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0260.653] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0260.653] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0260.653] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0260.653] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238550 [0260.653] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238690 [0260.653] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238550 | out: hHeap=0x1f0000) returned 1 [0260.653] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0260.654] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238690 | out: hHeap=0x1f0000) returned 1 [0260.654] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0260.654] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x234b90 [0260.654] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b90 | out: hHeap=0x1f0000) returned 1 [0260.654] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0260.654] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0260.654] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210210 [0260.654] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228440 [0260.654] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2385a0 [0260.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2385f0 [0260.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238690 [0260.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238500 [0260.655] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385f0 | out: hHeap=0x1f0000) returned 1 [0260.655] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385a0 | out: hHeap=0x1f0000) returned 1 [0260.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0260.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238780 [0260.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2385f0 [0260.655] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238780 | out: hHeap=0x1f0000) returned 1 [0260.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0260.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385f0 | out: hHeap=0x1f0000) returned 1 [0260.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206928 [0260.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x2b4ab0 [0260.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b4ab0 | out: hHeap=0x1f0000) returned 1 [0260.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206928 | out: hHeap=0x1f0000) returned 1 [0260.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0260.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0260.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0260.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0260.657] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204bd0 [0260.657] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0260.657] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0260.657] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0260.657] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a9eb8 [0260.657] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0260.657] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238500 | out: hHeap=0x1f0000) returned 1 [0260.658] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238690 | out: hHeap=0x1f0000) returned 1 [0260.658] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228440 | out: hHeap=0x1f0000) returned 1 [0260.658] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0260.658] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bd0 | out: hHeap=0x1f0000) returned 1 [0260.658] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0260.658] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0260.972] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aa230 [0260.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aa230 | out: hHeap=0x1f0000) returned 1 [0260.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ee8 | out: hHeap=0x1f0000) returned 1 [0260.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0260.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0260.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0260.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0260.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0260.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0260.974] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0260.974] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aa480 [0260.974] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aa5a8 [0260.974] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aa480 | out: hHeap=0x1f0000) returned 1 [0260.974] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aa5a8 | out: hHeap=0x1f0000) returned 1 [0260.974] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a9eb8 | out: hHeap=0x1f0000) returned 1 [0260.974] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0260.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285ae8 | out: hHeap=0x1f0000) returned 1 [0260.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24e900 | out: hHeap=0x1f0000) returned 1 [0260.975] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x232cc0 [0260.975] GetLastError () returned 0x0 [0260.975] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388b0 [0260.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238870 [0260.977] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\2052\\SetupResources.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\2052\\setupresources.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e290, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0260.977] GetFileType (hFile=0x1e8) returned 0x1 [0260.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x292ff8 [0260.978] SetFilePointerEx (in: hFile=0x1e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e218 | out: lpNewFilePointer=0x0) returned 1 [0260.978] GetLastError () returned 0xb7 [0260.979] CloseHandle (hObject=0x1e8) returned 1 [0260.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238870 | out: hHeap=0x1f0000) returned 1 [0260.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388b0 | out: hHeap=0x1f0000) returned 1 [0260.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2859e0 | out: hHeap=0x1f0000) returned 1 [0260.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2855c0 | out: hHeap=0x1f0000) returned 1 [0260.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0260.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f10 | out: hHeap=0x1f0000) returned 1 [0260.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2365a0 | out: hHeap=0x1f0000) returned 1 [0260.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0260.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8dc8 | out: hHeap=0x1f0000) returned 1 [0260.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232cc0 | out: hHeap=0x1f0000) returned 1 [0260.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0260.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0260.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24fd60 | out: hHeap=0x1f0000) returned 1 [0260.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233008 | out: hHeap=0x1f0000) returned 1 [0260.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238f68 | out: hHeap=0x1f0000) returned 1 [0260.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238880 | out: hHeap=0x1f0000) returned 1 [0260.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0260.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0260.982] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388c0 | out: hHeap=0x1f0000) returned 1 [0260.982] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0260.982] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0260.982] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238930 | out: hHeap=0x1f0000) returned 1 [0260.982] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285bf0 | out: hHeap=0x1f0000) returned 1 [0260.982] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0260.982] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0260.982] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228bd8 | out: hHeap=0x1f0000) returned 1 [0260.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0260.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0260.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228a28 | out: hHeap=0x1f0000) returned 1 [0260.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238810 | out: hHeap=0x1f0000) returned 1 [0260.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389c0 | out: hHeap=0x1f0000) returned 1 [0260.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286f98 | out: hHeap=0x1f0000) returned 1 [0260.983] CloseHandle (hObject=0x19c) returned 1 [0260.984] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238820 | out: hHeap=0x1f0000) returned 1 [0260.984] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238800 | out: hHeap=0x1f0000) returned 1 [0260.984] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2373e0 | out: hHeap=0x1f0000) returned 1 [0260.984] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24a1b8 | out: hHeap=0x1f0000) returned 1 [0260.984] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210240 | out: hHeap=0x1f0000) returned 1 [0260.984] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e50 | out: hHeap=0x1f0000) returned 1 [0260.984] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28dfd0 | out: hHeap=0x1f0000) returned 1 [0260.984] CloseHandle (hObject=0x21c) returned 1 [0260.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238970 | out: hHeap=0x1f0000) returned 1 [0260.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387e0 | out: hHeap=0x1f0000) returned 1 [0260.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad580 | out: hHeap=0x1f0000) returned 1 [0260.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e30 | out: hHeap=0x1f0000) returned 1 [0260.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21b528 | out: hHeap=0x1f0000) returned 1 [0260.986] CloseHandle (hObject=0x1ac) returned 1 [0260.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238840 | out: hHeap=0x1f0000) returned 1 [0260.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238940 | out: hHeap=0x1f0000) returned 1 [0260.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad638 | out: hHeap=0x1f0000) returned 1 [0260.987] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238860 | out: hHeap=0x1f0000) returned 1 [0260.987] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389b0 | out: hHeap=0x1f0000) returned 1 [0260.987] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387f0 | out: hHeap=0x1f0000) returned 1 [0260.987] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238990 | out: hHeap=0x1f0000) returned 1 [0260.987] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232dd8 | out: hHeap=0x1f0000) returned 1 [0260.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x255c88 | out: hHeap=0x1f0000) returned 1 [0260.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233350 | out: hHeap=0x1f0000) returned 1 [0260.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206628 | out: hHeap=0x1f0000) returned 1 [0260.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0260.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0260.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab8a8 | out: hHeap=0x1f0000) returned 1 [0260.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x251068 | out: hHeap=0x1f0000) returned 1 [0260.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232ba8 | out: hHeap=0x1f0000) returned 1 [0260.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239160 | out: hHeap=0x1f0000) returned 1 [0260.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236538 | out: hHeap=0x1f0000) returned 1 [0260.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f350 | out: hHeap=0x1f0000) returned 1 [0260.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228b00 | out: hHeap=0x1f0000) returned 1 [0260.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0260.989] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\2052\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2052\\setupresources.dll")) returned 1 [0260.991] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0260.991] FindClose (in: hFindFile=0x24ec00 | out: hFindFile=0x24ec00) returned 1 [0260.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2364d0 | out: hHeap=0x1f0000) returned 1 [0260.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ee88 | out: hHeap=0x1f0000) returned 1 [0260.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0260.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228680 | out: hHeap=0x1f0000) returned 1 [0260.992] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228a28 [0260.992] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0260.992] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22ee88 [0260.992] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228b00 [0260.992] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\2070\\*", lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e7c0 [0260.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228680 [0260.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228b00 | out: hHeap=0x1f0000) returned 1 [0260.993] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0260.993] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0260.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228758 [0260.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228680 | out: hHeap=0x1f0000) returned 1 [0260.993] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0260.993] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0260.993] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xfaf, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0260.994] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0260.994] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228b00 [0260.994] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x236608 [0260.994] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228b00 | out: hHeap=0x1f0000) returned 1 [0260.994] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228758 | out: hHeap=0x1f0000) returned 1 [0260.994] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0260.995] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\2070\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2070\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0260.995] GetFileType (hFile=0x1ac) returned 0x1 [0260.995] CloseHandle (hObject=0x1ac) returned 1 [0260.996] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8d18 [0260.996] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\2070\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2070\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x173eb6c | out: lpFileInformation=0x173eb6c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xfaf)) returned 1 [0260.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0260.996] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8d18 [0260.996] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\2070\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2070\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x173eb7c | out: lpFileInformation=0x173eb7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xfaf)) returned 1 [0260.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0260.997] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8d18 [0260.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0260.997] GetLastError () returned 0x0 [0260.997] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0260.998] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228b00 [0260.998] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f350 [0260.998] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8dc8 [0260.998] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c58 [0260.998] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0260.998] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x212ad0) returned 1 [0260.999] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2382f8 | out: pbBuffer=0x2382f8) returned 1 [0260.999] CryptReleaseContext (hProv=0x212ad0, dwFlags=0x0) returned 1 [0260.999] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0260.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x258298 [0261.000] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x232ef0 [0261.000] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=41836868260) returned 1 [0261.000] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0261.000] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=41836902077) returned 1 [0261.000] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0261.000] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239048 [0261.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x252370 [0261.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x233468 [0261.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x2ab638 [0261.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210240 [0261.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2067d8 [0261.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210198 [0261.001] GetLastError () returned 0x0 [0261.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236538 [0261.002] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a6c8 [0261.002] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236538 | out: hHeap=0x1f0000) returned 1 [0261.002] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xee) returned 0x2b15a8 [0261.002] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a6c8 | out: hHeap=0x1f0000) returned 1 [0261.002] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238890 [0261.003] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388a0 [0261.004] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\2070\\eula.rtf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\2070\\eula.rtf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e230, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0261.313] GetFileType (hFile=0x174) returned 0x1 [0261.313] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238970 [0261.314] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238880 [0261.706] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\2070\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2070\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0261.706] GetFileType (hFile=0x21c) returned 0x1 [0261.707] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e50 [0261.707] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c90 [0261.707] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad358 [0261.707] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388c0 [0261.708] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387e0 [0261.709] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\2070\\eula.rtf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\2070\\eula.rtf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0261.709] GetFileType (hFile=0x19c) returned 0x1 [0261.710] GetLastError () returned 0xb7 [0261.710] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe4) returned 0x21b708 [0261.710] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bb0 [0261.710] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c10 [0261.711] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c30 [0261.711] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2adb40 [0261.711] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389b0 [0261.711] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387f0 [0261.712] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\2070\\eula.rtf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\2070\\eula.rtf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0261.712] GetFileType (hFile=0x1e8) returned 0x1 [0261.713] GetLastError () returned 0xb7 [0261.713] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d90 [0261.714] GetLastError () returned 0xb7 [0261.714] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e50 [0261.714] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e30 [0261.714] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cd0 [0261.714] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb8) returned 0x237c20 [0261.714] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238980 [0261.715] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388e0 [0261.716] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\2070\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2070\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1a4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0261.716] GetFileType (hFile=0x1c0) returned 0x1 [0261.717] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28afb8 [0261.717] ReadFile (in: hFile=0x1c0, lpBuffer=0x28afb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e100, lpOverlapped=0x0 | out: lpBuffer=0x28afb8*, lpNumberOfBytesRead=0x173e100*=0xfaf, lpOverlapped=0x0) returned 1 [0261.734] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24b9e8 [0261.735] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28dfd0 [0261.735] GetLastError () returned 0x0 [0261.735] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101b0 [0261.736] GetLastError () returned 0x0 [0261.738] CloseHandle (hObject=0x174) returned 1 [0261.739] CloseHandle (hObject=0x21c) returned 1 [0261.739] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238810 [0261.740] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238930 [0261.740] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\2070\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2070\\eula.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0261.742] GetFileType (hFile=0x21c) returned 0x1 [0261.743] GetLastError () returned 0xb7 [0261.743] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x286f98 [0261.743] GetLastError () returned 0xb7 [0261.745] CloseHandle (hObject=0x21c) returned 1 [0261.746] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\2070\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2070\\eula.rtf")) returned 0 [0261.746] GetLastError () returned 0x20 [0261.746] GetLastError () returned 0x20 [0261.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228bd8 [0261.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238000 [0261.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238078 [0261.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x228758 [0261.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ef0 [0261.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f10 [0261.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x2388b0 [0261.747] GetLastError () returned 0x20 [0261.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x2392b0 [0261.748] GetLastError () returned 0x20 [0261.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238e18 [0261.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236538 [0261.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238398 [0261.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285098 [0261.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388f0 [0261.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0261.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0261.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238910 [0261.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0261.749] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210210 [0261.749] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2380a0 [0261.749] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285bf0 [0261.749] GetLastError () returned 0x20 [0261.749] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238830 [0261.749] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x2389c0 [0261.749] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388d0 [0261.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389c0 | out: hHeap=0x1f0000) returned 1 [0261.749] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238900 [0261.750] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388d0 | out: hHeap=0x1f0000) returned 1 [0261.750] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238830 | out: hHeap=0x1f0000) returned 1 [0261.750] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238920 [0261.750] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101e0 [0261.750] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238920 | out: hHeap=0x1f0000) returned 1 [0261.750] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210258 [0261.750] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0261.750] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238900 | out: hHeap=0x1f0000) returned 1 [0261.750] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101e0 [0261.750] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210120 [0261.751] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0261.751] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0261.751] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210120 | out: hHeap=0x1f0000) returned 1 [0261.751] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0261.751] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210258 [0261.751] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204dd0 [0261.751] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0261.751] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bd0 [0261.751] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204dd0 | out: hHeap=0x1f0000) returned 1 [0261.751] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0261.751] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c10 [0261.751] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2382f8 [0261.751] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c10 | out: hHeap=0x1f0000) returned 1 [0261.751] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204e90 [0261.752] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0261.752] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bd0 | out: hHeap=0x1f0000) returned 1 [0261.752] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204f70 [0261.752] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206658 [0261.752] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f70 | out: hHeap=0x1f0000) returned 1 [0261.753] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2382f8 [0261.753] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206658 | out: hHeap=0x1f0000) returned 1 [0261.753] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e90 | out: hHeap=0x1f0000) returned 1 [0261.753] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238900 [0261.753] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101e0 [0261.753] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238900 | out: hHeap=0x1f0000) returned 1 [0261.753] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210258 [0261.753] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0261.753] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204bd0 [0261.753] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0261.753] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206808 [0261.754] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bd0 | out: hHeap=0x1f0000) returned 1 [0261.754] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206808 | out: hHeap=0x1f0000) returned 1 [0261.754] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0261.754] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0261.754] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0261.754] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285098 | out: hHeap=0x1f0000) returned 1 [0261.754] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0261.754] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239048 [0261.754] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0261.754] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x212ad0) returned 1 [0261.756] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238140 | out: pbBuffer=0x238140) returned 1 [0261.756] CryptReleaseContext (hProv=0x212ad0, dwFlags=0x0) returned 1 [0261.756] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0261.756] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238168 [0261.756] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238000 [0261.756] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238d00 [0261.756] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0261.756] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0261.756] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238d00 | out: hHeap=0x1f0000) returned 1 [0261.756] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8e78 [0261.757] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0261.757] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x236468 [0261.757] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238398 [0261.757] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2857d0 [0261.757] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cd0 [0261.757] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2364d0 [0261.757] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2381e0 [0261.757] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2858d8 [0261.757] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238960 [0261.757] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0261.757] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210258 [0261.757] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238800 [0261.757] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0261.757] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210018 [0261.758] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210018 | out: hHeap=0x1f0000) returned 1 [0261.758] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0261.758] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238800 | out: hHeap=0x1f0000) returned 1 [0261.758] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0261.758] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0261.758] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238960 | out: hHeap=0x1f0000) returned 1 [0261.758] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2858d8 | out: hHeap=0x1f0000) returned 1 [0261.758] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0261.758] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2364d0 | out: hHeap=0x1f0000) returned 1 [0261.758] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238c90 [0261.758] GetLastError () returned 0x0 [0261.758] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238da8 [0261.758] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0261.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0261.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0261.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0261.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0261.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0261.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x24e5c0 [0261.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2852a8 [0261.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0261.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0261.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0261.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0261.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2855c0 [0261.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0261.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0261.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x230190 [0261.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x24fd60 [0261.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x233350 [0261.760] QueryPerformanceCounter (in: lpPerformanceCount=0x173dee0 | out: lpPerformanceCount=0x173dee0*=41912870451) returned 1 [0261.760] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173df20 | out: lpSystemTimeAsFileTime=0x173df20) [0261.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238850 [0261.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0261.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204df0 [0261.760] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204df0 | out: hHeap=0x1f0000) returned 1 [0261.760] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0261.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0261.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bf0 [0261.760] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bf0 | out: hHeap=0x1f0000) returned 1 [0261.761] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0261.761] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238850 | out: hHeap=0x1f0000) returned 1 [0261.761] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0261.761] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238c90 [0261.761] GetLastError () returned 0x0 [0261.761] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0261.761] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0261.761] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0261.761] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238140 [0261.761] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238168 [0261.761] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0261.761] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0261.761] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238190 [0261.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0261.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x222ee8 [0261.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0261.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0261.762] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0261.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0261.762] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0261.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381b8 [0261.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381e0 [0261.762] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0261.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0261.762] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0261.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0261.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x234b90 [0261.763] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b90 | out: hHeap=0x1f0000) returned 1 [0261.763] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0261.763] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0261.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210258 [0261.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228c68 [0261.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2382f8 [0261.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381b8 [0261.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381e0 [0261.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2386e0 [0261.763] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0261.763] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0261.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0261.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381b8 [0261.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2382f8 [0261.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0261.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0261.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0261.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2068c8 [0261.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x2b4220 [0261.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b4220 | out: hHeap=0x1f0000) returned 1 [0261.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2068c8 | out: hHeap=0x1f0000) returned 1 [0261.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0261.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0261.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0261.765] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0261.765] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204e30 [0261.765] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0261.765] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0261.765] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0261.765] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a9328 [0261.765] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0261.765] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2386e0 | out: hHeap=0x1f0000) returned 1 [0261.765] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0261.766] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228c68 | out: hHeap=0x1f0000) returned 1 [0261.766] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0261.766] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e30 | out: hHeap=0x1f0000) returned 1 [0261.766] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0261.766] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0261.766] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a9eb8 [0261.766] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a9eb8 | out: hHeap=0x1f0000) returned 1 [0261.766] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ee8 | out: hHeap=0x1f0000) returned 1 [0261.766] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0261.766] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0261.766] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0261.767] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0261.767] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0261.767] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0261.767] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0261.767] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a9a18 [0261.767] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a97c8 [0261.767] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a9a18 | out: hHeap=0x1f0000) returned 1 [0261.767] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a97c8 | out: hHeap=0x1f0000) returned 1 [0261.767] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a9328 | out: hHeap=0x1f0000) returned 1 [0261.767] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0261.767] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2855c0 | out: hHeap=0x1f0000) returned 1 [0261.768] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24e5c0 | out: hHeap=0x1f0000) returned 1 [0261.768] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x232cc0 [0261.768] GetLastError () returned 0x0 [0261.768] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238900 [0261.768] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388d0 [0261.769] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\2070\\eula.rtf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\2070\\eula.rtf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e290, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0262.089] GetFileType (hFile=0x1ac) returned 0x1 [0262.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x286f98 [0262.090] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e218 | out: lpNewFilePointer=0x0) returned 1 [0262.090] GetLastError () returned 0xb7 [0262.091] CloseHandle (hObject=0x1ac) returned 1 [0262.092] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388d0 | out: hHeap=0x1f0000) returned 1 [0262.092] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238900 | out: hHeap=0x1f0000) returned 1 [0262.092] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2852a8 | out: hHeap=0x1f0000) returned 1 [0262.092] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2857d0 | out: hHeap=0x1f0000) returned 1 [0262.092] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0262.092] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cd0 | out: hHeap=0x1f0000) returned 1 [0262.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0262.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0262.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8e78 | out: hHeap=0x1f0000) returned 1 [0262.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232cc0 | out: hHeap=0x1f0000) returned 1 [0262.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0262.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0262.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24fd60 | out: hHeap=0x1f0000) returned 1 [0262.094] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233350 | out: hHeap=0x1f0000) returned 1 [0262.094] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239048 | out: hHeap=0x1f0000) returned 1 [0262.094] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388b0 | out: hHeap=0x1f0000) returned 1 [0262.094] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0262.094] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0262.094] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238910 | out: hHeap=0x1f0000) returned 1 [0262.094] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0262.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0262.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388f0 | out: hHeap=0x1f0000) returned 1 [0262.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285bf0 | out: hHeap=0x1f0000) returned 1 [0262.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0262.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236538 | out: hHeap=0x1f0000) returned 1 [0262.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228758 | out: hHeap=0x1f0000) returned 1 [0262.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0262.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0262.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228bd8 | out: hHeap=0x1f0000) returned 1 [0262.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238930 | out: hHeap=0x1f0000) returned 1 [0262.125] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238810 | out: hHeap=0x1f0000) returned 1 [0262.125] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28afb8 | out: hHeap=0x1f0000) returned 1 [0262.126] CloseHandle (hObject=0x1c0) returned 1 [0262.127] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388e0 | out: hHeap=0x1f0000) returned 1 [0262.127] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238980 | out: hHeap=0x1f0000) returned 1 [0262.128] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237c20 | out: hHeap=0x1f0000) returned 1 [0262.128] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24b9e8 | out: hHeap=0x1f0000) returned 1 [0262.128] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0262.128] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e50 | out: hHeap=0x1f0000) returned 1 [0262.128] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28dfd0 | out: hHeap=0x1f0000) returned 1 [0262.128] CloseHandle (hObject=0x1e8) returned 1 [0262.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387f0 | out: hHeap=0x1f0000) returned 1 [0262.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389b0 | out: hHeap=0x1f0000) returned 1 [0262.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2adb40 | out: hHeap=0x1f0000) returned 1 [0262.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bb0 | out: hHeap=0x1f0000) returned 1 [0262.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21b708 | out: hHeap=0x1f0000) returned 1 [0262.129] CloseHandle (hObject=0x19c) returned 1 [0262.130] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387e0 | out: hHeap=0x1f0000) returned 1 [0262.130] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388c0 | out: hHeap=0x1f0000) returned 1 [0262.130] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad358 | out: hHeap=0x1f0000) returned 1 [0262.130] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238880 | out: hHeap=0x1f0000) returned 1 [0262.130] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238970 | out: hHeap=0x1f0000) returned 1 [0262.131] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388a0 | out: hHeap=0x1f0000) returned 1 [0262.131] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238890 | out: hHeap=0x1f0000) returned 1 [0262.131] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b15a8 | out: hHeap=0x1f0000) returned 1 [0262.131] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x252370 | out: hHeap=0x1f0000) returned 1 [0262.131] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233468 | out: hHeap=0x1f0000) returned 1 [0262.131] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2067d8 | out: hHeap=0x1f0000) returned 1 [0262.131] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0262.131] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210240 | out: hHeap=0x1f0000) returned 1 [0262.131] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab638 | out: hHeap=0x1f0000) returned 1 [0262.131] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x258298 | out: hHeap=0x1f0000) returned 1 [0262.132] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232ef0 | out: hHeap=0x1f0000) returned 1 [0262.132] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c58 | out: hHeap=0x1f0000) returned 1 [0262.132] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8dc8 | out: hHeap=0x1f0000) returned 1 [0262.132] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f350 | out: hHeap=0x1f0000) returned 1 [0262.132] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228b00 | out: hHeap=0x1f0000) returned 1 [0262.132] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0262.132] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\2070\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2070\\eula.rtf")) returned 1 [0262.135] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1397e, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0262.135] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238f68 [0262.135] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228440 [0262.135] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236468 [0262.135] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228440 | out: hHeap=0x1f0000) returned 1 [0262.135] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236608 | out: hHeap=0x1f0000) returned 1 [0262.135] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238f68 | out: hHeap=0x1f0000) returned 1 [0262.136] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\2070\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2070\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0262.136] GetFileType (hFile=0x19c) returned 0x1 [0262.136] CloseHandle (hObject=0x19c) returned 1 [0262.137] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2364d0 [0262.137] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\2070\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2070\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x173eb6c | out: lpFileInformation=0x173eb6c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1397e)) returned 1 [0262.137] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2364d0 | out: hHeap=0x1f0000) returned 1 [0262.137] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2364d0 [0262.137] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\2070\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2070\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x173eb7c | out: lpFileInformation=0x173eb7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1397e)) returned 1 [0262.138] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2364d0 | out: hHeap=0x1f0000) returned 1 [0262.138] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236608 [0262.138] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236608 | out: hHeap=0x1f0000) returned 1 [0262.138] GetLastError () returned 0x0 [0262.138] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0262.138] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228758 [0262.138] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f350 [0262.138] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236538 [0262.139] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238da8 [0262.139] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0262.139] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x212ad0) returned 1 [0262.140] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238280 | out: pbBuffer=0x238280) returned 1 [0262.141] CryptReleaseContext (hProv=0x212ad0, dwFlags=0x0) returned 1 [0262.141] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0262.141] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x255c88 [0262.141] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x233698 [0262.141] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=41950976376) returned 1 [0262.141] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0262.141] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=41951012826) returned 1 [0262.141] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0262.142] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238e50 [0262.142] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x258298 [0262.142] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2338c8 [0262.142] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x2ab7d8 [0262.142] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210240 [0262.142] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206928 [0262.142] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210258 [0262.142] GetLastError () returned 0x0 [0262.143] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2aec00 [0262.143] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ada88 [0262.143] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aec00 | out: hHeap=0x1f0000) returned 1 [0262.143] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x106) returned 0x232ef0 [0262.143] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ada88 | out: hHeap=0x1f0000) returned 1 [0262.143] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238860 [0262.144] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388c0 [0262.145] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\2070\\LocalizedData.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\2070\\localizeddata.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e230, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0262.145] GetFileType (hFile=0x19c) returned 0x1 [0262.146] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238820 [0262.146] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388e0 [0262.147] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\2070\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2070\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0262.147] GetFileType (hFile=0x1e8) returned 0x1 [0262.147] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c10 [0262.148] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c30 [0262.148] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2adb40 [0262.148] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389b0 [0262.148] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387f0 [0262.149] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\2070\\LocalizedData.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\2070\\localizeddata.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0262.149] GetFileType (hFile=0x1c0) returned 0x1 [0262.149] GetLastError () returned 0xb7 [0262.150] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe4) returned 0x21b708 [0262.150] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e50 [0262.150] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e30 [0262.150] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cd0 [0262.150] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2aded8 [0262.150] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238970 [0262.151] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388f0 [0262.151] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\2070\\LocalizedData.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\2070\\localizeddata.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0262.151] GetFileType (hFile=0x1ac) returned 0x1 [0262.151] GetLastError () returned 0xb7 [0262.152] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cd0 [0262.152] GetLastError () returned 0xb7 [0262.152] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d90 [0262.152] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c10 [0262.152] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f10 [0262.152] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb8) returned 0x236de0 [0262.152] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238930 [0262.152] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238940 [0262.153] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\2070\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2070\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1a4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0262.153] GetFileType (hFile=0x21c) returned 0x1 [0262.154] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28dfd0 [0262.154] ReadFile (in: hFile=0x21c, lpBuffer=0x28dfd0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e100, lpOverlapped=0x0 | out: lpBuffer=0x28dfd0*, lpNumberOfBytesRead=0x173e100*=0x1000, lpOverlapped=0x0) returned 1 [0262.680] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24b5e0 [0262.681] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x286f98 [0262.681] GetLastError () returned 0x0 [0262.712] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210198 [0262.713] GetLastError () returned 0x0 [0262.713] CloseHandle (hObject=0x19c) returned 1 [0262.714] CloseHandle (hObject=0x1e8) returned 1 [0262.715] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238870 [0262.716] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238990 [0262.717] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\2070\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2070\\localizeddata.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0262.720] GetFileType (hFile=0x1e8) returned 0x1 [0262.720] GetLastError () returned 0xb7 [0262.720] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28efd8 [0262.721] GetLastError () returned 0xb7 [0262.723] CloseHandle (hObject=0x1e8) returned 1 [0262.724] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\2070\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2070\\localizeddata.xml")) returned 0 [0262.724] GetLastError () returned 0x20 [0262.724] GetLastError () returned 0x20 [0262.724] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2287a0 [0262.725] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381b8 [0262.725] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238398 [0262.725] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x228518 [0262.725] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204db0 [0262.725] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ef0 [0262.725] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x238800 [0262.725] GetLastError () returned 0x20 [0262.725] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239010 [0262.725] GetLastError () returned 0x20 [0262.726] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238f30 [0262.726] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2365a0 [0262.726] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2384b0 [0262.726] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285bf0 [0262.726] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238830 [0262.726] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0262.726] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0262.726] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238900 [0262.726] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0262.727] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101b0 [0262.727] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238190 [0262.727] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2851a0 [0262.727] GetLastError () returned 0x20 [0262.727] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238950 [0262.727] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238910 [0262.727] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238920 [0262.727] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238910 | out: hHeap=0x1f0000) returned 1 [0262.727] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238910 [0262.728] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238920 | out: hHeap=0x1f0000) returned 1 [0262.728] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238950 | out: hHeap=0x1f0000) returned 1 [0262.728] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238810 [0262.728] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210210 [0262.728] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238810 | out: hHeap=0x1f0000) returned 1 [0262.728] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101c8 [0262.728] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0262.728] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238910 | out: hHeap=0x1f0000) returned 1 [0262.728] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210210 [0262.728] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20fef8 [0262.729] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0262.729] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210210 [0262.729] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20fef8 | out: hHeap=0x1f0000) returned 1 [0262.729] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0262.729] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0262.729] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204db0 [0262.729] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0262.729] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ef0 [0262.729] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204db0 | out: hHeap=0x1f0000) returned 1 [0262.730] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0262.730] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e30 [0262.730] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2380a0 [0262.730] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e30 | out: hHeap=0x1f0000) returned 1 [0262.730] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204d70 [0262.730] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0262.730] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ef0 | out: hHeap=0x1f0000) returned 1 [0262.730] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204c10 [0262.730] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206868 [0262.731] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c10 | out: hHeap=0x1f0000) returned 1 [0262.731] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2380a0 [0262.731] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206868 | out: hHeap=0x1f0000) returned 1 [0262.731] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d70 | out: hHeap=0x1f0000) returned 1 [0262.731] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238910 [0262.731] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210210 [0262.731] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238910 | out: hHeap=0x1f0000) returned 1 [0262.731] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0262.731] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0262.732] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204f50 [0262.732] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0262.732] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x2067d8 [0262.732] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f50 | out: hHeap=0x1f0000) returned 1 [0262.732] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2067d8 | out: hHeap=0x1f0000) returned 1 [0262.732] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0262.732] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0262.732] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0262.732] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285bf0 | out: hHeap=0x1f0000) returned 1 [0262.733] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0262.733] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238e50 [0262.733] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0262.733] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x212ad0) returned 1 [0262.735] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238140 | out: pbBuffer=0x238140) returned 1 [0262.735] CryptReleaseContext (hProv=0x212ad0, dwFlags=0x0) returned 1 [0262.735] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0262.735] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238280 [0262.735] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238168 [0262.735] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2390f0 [0262.735] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0262.736] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0262.736] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2390f0 | out: hHeap=0x1f0000) returned 1 [0262.736] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8d18 [0262.736] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0262.736] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x236608 [0262.736] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238140 [0262.736] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x284f90 [0263.181] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c70 [0263.181] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2364d0 [0263.181] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2380a0 [0263.181] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2853b0 [0263.181] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238850 [0263.182] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0263.182] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210210 [0263.182] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387e0 [0263.182] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0263.182] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20fef8 [0263.182] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20fef8 | out: hHeap=0x1f0000) returned 1 [0263.182] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0263.182] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387e0 | out: hHeap=0x1f0000) returned 1 [0263.182] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0263.182] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0263.182] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238850 | out: hHeap=0x1f0000) returned 1 [0263.183] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2853b0 | out: hHeap=0x1f0000) returned 1 [0263.183] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0263.183] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2364d0 | out: hHeap=0x1f0000) returned 1 [0263.183] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238c58 [0263.183] GetLastError () returned 0x0 [0263.183] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238f30 [0263.183] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0263.184] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0263.184] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0263.184] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0263.184] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0263.184] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0263.184] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x24e9c0 [0263.184] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2853b0 [0263.184] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0263.184] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0263.185] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0263.185] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0263.185] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285098 [0263.185] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0263.185] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0263.185] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f5d8 [0263.185] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x252370 [0263.185] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x233120 [0263.185] QueryPerformanceCounter (in: lpPerformanceCount=0x173dee0 | out: lpPerformanceCount=0x173dee0*=42055443337) returned 1 [0263.186] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173df20 | out: lpSystemTimeAsFileTime=0x173df20) [0263.186] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238920 [0263.186] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0263.186] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f70 [0263.186] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f70 | out: hHeap=0x1f0000) returned 1 [0263.187] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0263.187] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0263.187] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204df0 [0263.187] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204df0 | out: hHeap=0x1f0000) returned 1 [0263.187] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0263.187] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238920 | out: hHeap=0x1f0000) returned 1 [0263.187] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0263.187] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239160 [0263.188] GetLastError () returned 0x0 [0263.188] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0263.188] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0263.188] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0263.188] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2384b0 [0263.188] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2380a0 [0263.189] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0263.189] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0263.189] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238280 [0263.189] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0263.189] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x222ee8 [0263.189] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0263.189] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0263.190] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0263.190] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0263.190] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0263.190] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238000 [0263.190] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381b8 [0263.190] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0263.190] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0263.190] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0263.191] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0263.191] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x234b90 [0263.192] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b90 | out: hHeap=0x1f0000) returned 1 [0263.192] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0263.192] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0263.192] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210210 [0263.192] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228b00 [0263.192] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238000 [0263.193] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381b8 [0263.193] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381e0 [0263.193] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2384d8 [0263.193] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0263.193] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0263.193] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0263.193] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238000 [0263.193] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381b8 [0263.193] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0263.194] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0263.194] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0263.194] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206688 [0263.194] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x2b3990 [0263.194] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b3990 | out: hHeap=0x1f0000) returned 1 [0263.194] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206688 | out: hHeap=0x1f0000) returned 1 [0263.194] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0263.194] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0263.195] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0263.195] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0263.195] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204cb0 [0263.195] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0263.195] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0263.195] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0263.195] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a8fb0 [0263.195] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0263.196] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384d8 | out: hHeap=0x1f0000) returned 1 [0263.196] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0263.196] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228b00 | out: hHeap=0x1f0000) returned 1 [0263.196] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0263.196] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cb0 | out: hHeap=0x1f0000) returned 1 [0263.196] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0263.196] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0263.196] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aa358 [0263.197] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aa358 | out: hHeap=0x1f0000) returned 1 [0263.197] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ee8 | out: hHeap=0x1f0000) returned 1 [0263.197] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0263.197] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0263.197] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0263.197] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0263.197] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0263.198] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0263.198] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0263.198] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aac98 [0263.198] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aa6d0 [0263.198] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aac98 | out: hHeap=0x1f0000) returned 1 [0263.198] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aa6d0 | out: hHeap=0x1f0000) returned 1 [0263.198] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8fb0 | out: hHeap=0x1f0000) returned 1 [0263.198] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0263.199] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285098 | out: hHeap=0x1f0000) returned 1 [0263.199] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24e9c0 | out: hHeap=0x1f0000) returned 1 [0263.199] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x233238 [0263.199] GetLastError () returned 0x0 [0263.199] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238910 [0263.200] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238840 [0263.200] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\2070\\LocalizedData.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\2070\\localizeddata.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e290, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0263.201] GetFileType (hFile=0x174) returned 0x1 [0263.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28afb8 [0263.201] SetFilePointerEx (in: hFile=0x174, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e218 | out: lpNewFilePointer=0x0) returned 1 [0263.202] GetLastError () returned 0xb7 [0263.202] CloseHandle (hObject=0x174) returned 1 [0263.203] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238840 | out: hHeap=0x1f0000) returned 1 [0263.203] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238910 | out: hHeap=0x1f0000) returned 1 [0263.203] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2853b0 | out: hHeap=0x1f0000) returned 1 [0263.203] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x284f90 | out: hHeap=0x1f0000) returned 1 [0263.203] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0263.204] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c70 | out: hHeap=0x1f0000) returned 1 [0263.204] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236608 | out: hHeap=0x1f0000) returned 1 [0263.204] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0263.204] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0263.204] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233238 | out: hHeap=0x1f0000) returned 1 [0263.204] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0263.204] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0263.204] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x252370 | out: hHeap=0x1f0000) returned 1 [0263.204] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233120 | out: hHeap=0x1f0000) returned 1 [0263.205] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238e50 | out: hHeap=0x1f0000) returned 1 [0263.205] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238800 | out: hHeap=0x1f0000) returned 1 [0263.205] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0263.205] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0263.205] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238900 | out: hHeap=0x1f0000) returned 1 [0263.205] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0263.205] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0263.205] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238830 | out: hHeap=0x1f0000) returned 1 [0263.205] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2851a0 | out: hHeap=0x1f0000) returned 1 [0263.205] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0263.206] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2365a0 | out: hHeap=0x1f0000) returned 1 [0263.206] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228518 | out: hHeap=0x1f0000) returned 1 [0263.206] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0263.206] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0263.206] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2287a0 | out: hHeap=0x1f0000) returned 1 [0263.207] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238990 | out: hHeap=0x1f0000) returned 1 [0263.207] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238870 | out: hHeap=0x1f0000) returned 1 [0263.207] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28dfd0 | out: hHeap=0x1f0000) returned 1 [0263.208] CloseHandle (hObject=0x21c) returned 1 [0263.208] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238940 | out: hHeap=0x1f0000) returned 1 [0263.208] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238930 | out: hHeap=0x1f0000) returned 1 [0263.209] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236de0 | out: hHeap=0x1f0000) returned 1 [0263.209] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24b5e0 | out: hHeap=0x1f0000) returned 1 [0263.209] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0263.209] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d90 | out: hHeap=0x1f0000) returned 1 [0263.209] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286f98 | out: hHeap=0x1f0000) returned 1 [0263.209] CloseHandle (hObject=0x1ac) returned 1 [0263.211] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388f0 | out: hHeap=0x1f0000) returned 1 [0263.211] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238970 | out: hHeap=0x1f0000) returned 1 [0263.211] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aded8 | out: hHeap=0x1f0000) returned 1 [0263.211] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e50 | out: hHeap=0x1f0000) returned 1 [0263.211] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21b708 | out: hHeap=0x1f0000) returned 1 [0263.212] CloseHandle (hObject=0x1c0) returned 1 [0263.212] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387f0 | out: hHeap=0x1f0000) returned 1 [0263.212] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389b0 | out: hHeap=0x1f0000) returned 1 [0263.213] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2adb40 | out: hHeap=0x1f0000) returned 1 [0263.213] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388e0 | out: hHeap=0x1f0000) returned 1 [0263.213] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238820 | out: hHeap=0x1f0000) returned 1 [0263.213] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388c0 | out: hHeap=0x1f0000) returned 1 [0263.213] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238860 | out: hHeap=0x1f0000) returned 1 [0263.213] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232ef0 | out: hHeap=0x1f0000) returned 1 [0263.213] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x258298 | out: hHeap=0x1f0000) returned 1 [0263.213] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2338c8 | out: hHeap=0x1f0000) returned 1 [0263.213] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206928 | out: hHeap=0x1f0000) returned 1 [0263.214] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0263.214] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210240 | out: hHeap=0x1f0000) returned 1 [0263.214] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab7d8 | out: hHeap=0x1f0000) returned 1 [0263.214] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x255c88 | out: hHeap=0x1f0000) returned 1 [0263.214] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233698 | out: hHeap=0x1f0000) returned 1 [0263.214] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238da8 | out: hHeap=0x1f0000) returned 1 [0263.214] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236538 | out: hHeap=0x1f0000) returned 1 [0263.214] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f350 | out: hHeap=0x1f0000) returned 1 [0263.214] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228758 | out: hHeap=0x1f0000) returned 1 [0263.215] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0263.215] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\2070\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2070\\localizeddata.xml")) returned 1 [0263.217] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0263.217] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239010 [0263.217] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228b00 [0263.218] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2365a0 [0263.218] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228b00 | out: hHeap=0x1f0000) returned 1 [0263.218] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0263.218] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239010 | out: hHeap=0x1f0000) returned 1 [0263.219] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\2070\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2070\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0263.219] GetFileType (hFile=0x1c0) returned 0x1 [0263.220] CloseHandle (hObject=0x1c0) returned 1 [0263.220] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2364d0 [0263.220] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\2070\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2070\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x173eb6c | out: lpFileInformation=0x173eb6c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958)) returned 1 [0263.220] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2364d0 | out: hHeap=0x1f0000) returned 1 [0263.220] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236608 [0263.221] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\2070\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2070\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x173eb7c | out: lpFileInformation=0x173eb7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958)) returned 1 [0263.221] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236608 | out: hHeap=0x1f0000) returned 1 [0263.221] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236468 [0263.221] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0263.221] GetLastError () returned 0x0 [0263.221] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0263.222] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228cb0 [0263.222] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d9d0 [0263.222] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236608 [0263.222] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238e18 [0263.222] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0263.222] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x212ad0) returned 1 [0263.405] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238140 | out: pbBuffer=0x238140) returned 1 [0263.405] CryptReleaseContext (hProv=0x212ad0, dwFlags=0x0) returned 1 [0263.405] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0263.405] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x258298 [0263.405] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2337b0 [0263.405] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=42077436285) returned 1 [0263.406] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0263.406] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=42077485524) returned 1 [0263.406] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0263.406] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239160 [0263.406] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x24fd60 [0263.407] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x233580 [0263.407] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x2abd88 [0263.407] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210258 [0263.407] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206658 [0263.407] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210210 [0263.407] GetLastError () returned 0x0 [0263.408] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae048 [0263.408] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad130 [0263.408] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae048 | out: hHeap=0x1f0000) returned 1 [0263.408] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x106) returned 0x232cc0 [0263.408] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad130 | out: hHeap=0x1f0000) returned 1 [0263.409] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238960 [0263.409] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389b0 [0263.412] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\2070\\SetupResources.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\2070\\setupresources.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e230, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0263.413] GetFileType (hFile=0x1c0) returned 0x1 [0263.413] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388e0 [0263.414] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388f0 [0263.415] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\2070\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2070\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0263.415] GetFileType (hFile=0x1ac) returned 0x1 [0263.416] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e30 [0263.416] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cd0 [0263.416] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2aded8 [0263.416] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238970 [0263.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238900 [0263.417] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\2070\\SetupResources.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\2070\\setupresources.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0263.418] GetFileType (hFile=0x21c) returned 0x1 [0263.418] GetLastError () returned 0xb7 [0263.419] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe4) returned 0x21b438 [0263.419] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d90 [0263.419] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c10 [0263.419] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f10 [0263.419] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad130 [0263.420] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238930 [0263.420] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238940 [0263.421] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\2070\\SetupResources.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\2070\\setupresources.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0263.421] GetFileType (hFile=0x174) returned 0x1 [0263.422] GetLastError () returned 0xb7 [0263.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ef0 [0263.422] GetLastError () returned 0xb7 [0263.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0263.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204b90 [0263.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bb0 [0263.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb8) returned 0x2370e0 [0263.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238990 [0263.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238980 [0263.424] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\2070\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2070\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1a4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0263.425] GetFileType (hFile=0x198) returned 0x1 [0263.425] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28dfd0 [0263.426] ReadFile (in: hFile=0x198, lpBuffer=0x28dfd0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e100, lpOverlapped=0x0 | out: lpBuffer=0x28dfd0*, lpNumberOfBytesRead=0x173e100*=0x1000, lpOverlapped=0x0) returned 1 [0263.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24add0 [0263.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28afb8 [0263.491] GetLastError () returned 0x0 [0263.556] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210240 [0263.556] GetLastError () returned 0x0 [0263.557] CloseHandle (hObject=0x1c0) returned 1 [0263.557] CloseHandle (hObject=0x1ac) returned 1 [0263.558] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238800 [0263.558] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238910 [0263.559] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\2070\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2070\\setupresources.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0263.561] GetFileType (hFile=0x1ac) returned 0x1 [0263.561] GetLastError () returned 0xb7 [0263.561] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x286f98 [0263.561] GetLastError () returned 0xb7 [0263.563] CloseHandle (hObject=0x1ac) returned 1 [0263.563] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\2070\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2070\\setupresources.dll")) returned 0 [0263.563] GetLastError () returned 0x20 [0263.564] GetLastError () returned 0x20 [0263.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228b00 [0263.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238140 [0263.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2384b0 [0263.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x228bd8 [0263.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c30 [0263.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f30 [0263.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x238880 [0263.564] GetLastError () returned 0x20 [0263.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239010 [0263.564] GetLastError () returned 0x20 [0263.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239010 [0263.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236468 [0263.565] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238190 [0263.565] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2851a0 [0263.565] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238950 [0263.565] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0263.565] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210198 [0263.565] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238920 [0263.565] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0263.565] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0263.565] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238370 [0263.565] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285ae8 [0263.565] GetLastError () returned 0x20 [0263.565] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x2387e0 [0263.565] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x2387f0 [0263.565] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388c0 [0263.566] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387f0 | out: hHeap=0x1f0000) returned 1 [0263.566] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389c0 [0263.566] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388c0 | out: hHeap=0x1f0000) returned 1 [0263.566] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387e0 | out: hHeap=0x1f0000) returned 1 [0263.566] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387e0 [0263.566] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101b0 [0263.566] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387e0 | out: hHeap=0x1f0000) returned 1 [0263.566] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101e0 [0263.566] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0263.566] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389c0 | out: hHeap=0x1f0000) returned 1 [0263.566] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101b0 [0263.566] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20fef8 [0263.566] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0263.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101b0 [0263.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20fef8 | out: hHeap=0x1f0000) returned 1 [0263.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0263.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0263.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204db0 [0263.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0263.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d30 [0263.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204db0 | out: hHeap=0x1f0000) returned 1 [0263.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0263.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cb0 [0263.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238000 [0263.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cb0 | out: hHeap=0x1f0000) returned 1 [0263.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204cf0 [0263.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0263.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d30 | out: hHeap=0x1f0000) returned 1 [0263.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204f30 [0263.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x2067d8 [0263.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f30 | out: hHeap=0x1f0000) returned 1 [0263.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238168 [0263.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2067d8 | out: hHeap=0x1f0000) returned 1 [0263.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cf0 | out: hHeap=0x1f0000) returned 1 [0263.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238850 [0263.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101b0 [0263.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238850 | out: hHeap=0x1f0000) returned 1 [0263.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0263.569] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0263.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204c30 [0263.569] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0263.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206628 [0263.569] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c30 | out: hHeap=0x1f0000) returned 1 [0263.569] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206628 | out: hHeap=0x1f0000) returned 1 [0263.569] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0263.569] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0263.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0263.569] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2851a0 | out: hHeap=0x1f0000) returned 1 [0263.569] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0263.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239208 [0263.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0263.570] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x212e00) returned 1 [0263.571] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238140 | out: pbBuffer=0x238140) returned 1 [0263.571] CryptReleaseContext (hProv=0x212e00, dwFlags=0x0) returned 1 [0263.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0263.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238000 [0263.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238140 [0263.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238f30 [0263.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0263.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0263.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238f30 | out: hHeap=0x1f0000) returned 1 [0263.572] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8e20 [0263.572] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0263.572] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x236538 [0263.572] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238398 [0263.572] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x284f90 [0263.572] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c50 [0263.572] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2364d0 [0263.572] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238000 [0263.572] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2856c8 [0263.572] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238890 [0263.572] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0263.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101b0 [0263.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389c0 [0263.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0263.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff40 [0263.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff40 | out: hHeap=0x1f0000) returned 1 [0263.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0263.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389c0 | out: hHeap=0x1f0000) returned 1 [0263.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0263.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0263.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238890 | out: hHeap=0x1f0000) returned 1 [0263.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2856c8 | out: hHeap=0x1f0000) returned 1 [0263.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0263.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2364d0 | out: hHeap=0x1f0000) returned 1 [0263.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239010 [0263.574] GetLastError () returned 0x0 [0263.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x2392b0 [0263.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0263.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0263.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0263.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0263.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0263.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0263.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x24e900 [0263.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2859e0 [0263.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0263.576] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0263.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0263.576] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0263.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2855c0 [0263.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0263.576] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0263.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x230190 [0263.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x2595a0 [0263.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x233468 [0263.577] QueryPerformanceCounter (in: lpPerformanceCount=0x173dee0 | out: lpPerformanceCount=0x173dee0*=42094564142) returned 1 [0263.577] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173df20 | out: lpSystemTimeAsFileTime=0x173df20) [0263.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238810 [0263.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0263.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c10 [0263.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c10 | out: hHeap=0x1f0000) returned 1 [0263.578] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0263.578] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0263.578] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ef0 [0263.578] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ef0 | out: hHeap=0x1f0000) returned 1 [0263.578] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0263.578] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238810 | out: hHeap=0x1f0000) returned 1 [0263.578] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0263.578] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238f68 [0263.579] GetLastError () returned 0x0 [0263.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0263.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0263.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0263.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238000 [0263.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381e0 [0263.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0263.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0263.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2380a0 [0263.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0263.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x222ee8 [0263.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0263.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0263.580] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0263.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0263.581] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0263.581] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238168 [0263.581] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238190 [0263.581] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0263.581] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0263.581] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0263.581] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0263.583] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x234b90 [0263.583] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b90 | out: hHeap=0x1f0000) returned 1 [0263.583] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0263.583] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0263.583] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101b0 [0263.583] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228680 [0263.583] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238168 [0263.584] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238190 [0263.584] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381b8 [0263.584] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238500 [0263.584] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0263.584] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0263.584] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0263.585] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238168 [0263.585] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238190 [0263.585] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0263.585] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0263.585] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0263.585] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206628 [0263.585] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x2b4220 [0263.586] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b4220 | out: hHeap=0x1f0000) returned 1 [0263.586] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206628 | out: hHeap=0x1f0000) returned 1 [0263.586] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0263.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0263.586] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0263.586] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0263.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204e70 [0263.587] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0263.587] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0263.587] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0263.587] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a9eb8 [0263.587] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0263.587] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238500 | out: hHeap=0x1f0000) returned 1 [0263.587] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0263.588] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228680 | out: hHeap=0x1f0000) returned 1 [0263.588] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0263.588] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e70 | out: hHeap=0x1f0000) returned 1 [0263.588] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0263.588] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0263.588] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a8fb0 [0263.589] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8fb0 | out: hHeap=0x1f0000) returned 1 [0263.589] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ee8 | out: hHeap=0x1f0000) returned 1 [0263.589] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0263.589] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0263.589] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0263.589] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0263.589] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0263.590] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0263.590] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0263.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aadc0 [0263.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a9c68 [0263.590] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aadc0 | out: hHeap=0x1f0000) returned 1 [0263.590] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a9c68 | out: hHeap=0x1f0000) returned 1 [0263.591] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a9eb8 | out: hHeap=0x1f0000) returned 1 [0263.591] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0263.591] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2855c0 | out: hHeap=0x1f0000) returned 1 [0263.591] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24e900 | out: hHeap=0x1f0000) returned 1 [0263.591] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x233238 [0263.591] GetLastError () returned 0x0 [0263.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389c0 [0263.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238820 [0263.593] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\2070\\SetupResources.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\2070\\setupresources.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e290, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0263.594] GetFileType (hFile=0x1ac) returned 0x1 [0263.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x286f98 [0263.595] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e218 | out: lpNewFilePointer=0x0) returned 1 [0263.595] GetLastError () returned 0xb7 [0263.596] CloseHandle (hObject=0x1ac) returned 1 [0263.596] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238820 | out: hHeap=0x1f0000) returned 1 [0263.597] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389c0 | out: hHeap=0x1f0000) returned 1 [0263.597] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2859e0 | out: hHeap=0x1f0000) returned 1 [0263.597] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x284f90 | out: hHeap=0x1f0000) returned 1 [0263.597] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0263.826] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c50 | out: hHeap=0x1f0000) returned 1 [0263.826] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236538 | out: hHeap=0x1f0000) returned 1 [0263.826] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0263.826] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8e20 | out: hHeap=0x1f0000) returned 1 [0263.826] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233238 | out: hHeap=0x1f0000) returned 1 [0263.826] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0263.827] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0263.827] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2595a0 | out: hHeap=0x1f0000) returned 1 [0263.827] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233468 | out: hHeap=0x1f0000) returned 1 [0263.827] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239208 | out: hHeap=0x1f0000) returned 1 [0263.827] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238880 | out: hHeap=0x1f0000) returned 1 [0263.827] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0263.827] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0263.827] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238920 | out: hHeap=0x1f0000) returned 1 [0263.827] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0263.827] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0263.827] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238950 | out: hHeap=0x1f0000) returned 1 [0263.828] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285ae8 | out: hHeap=0x1f0000) returned 1 [0263.895] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0263.895] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0263.895] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228bd8 | out: hHeap=0x1f0000) returned 1 [0263.895] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0263.895] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0263.895] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228b00 | out: hHeap=0x1f0000) returned 1 [0263.895] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238910 | out: hHeap=0x1f0000) returned 1 [0263.896] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238800 | out: hHeap=0x1f0000) returned 1 [0263.896] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28dfd0 | out: hHeap=0x1f0000) returned 1 [0263.896] CloseHandle (hObject=0x198) returned 1 [0263.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238980 | out: hHeap=0x1f0000) returned 1 [0263.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238990 | out: hHeap=0x1f0000) returned 1 [0263.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2370e0 | out: hHeap=0x1f0000) returned 1 [0263.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24add0 | out: hHeap=0x1f0000) returned 1 [0263.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210240 | out: hHeap=0x1f0000) returned 1 [0263.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d70 | out: hHeap=0x1f0000) returned 1 [0263.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28afb8 | out: hHeap=0x1f0000) returned 1 [0263.898] CloseHandle (hObject=0x174) returned 1 [0263.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238940 | out: hHeap=0x1f0000) returned 1 [0263.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238930 | out: hHeap=0x1f0000) returned 1 [0263.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad130 | out: hHeap=0x1f0000) returned 1 [0263.899] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d90 | out: hHeap=0x1f0000) returned 1 [0263.899] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21b438 | out: hHeap=0x1f0000) returned 1 [0263.899] CloseHandle (hObject=0x21c) returned 1 [0263.899] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238900 | out: hHeap=0x1f0000) returned 1 [0263.900] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238970 | out: hHeap=0x1f0000) returned 1 [0263.900] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aded8 | out: hHeap=0x1f0000) returned 1 [0263.900] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388f0 | out: hHeap=0x1f0000) returned 1 [0263.900] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388e0 | out: hHeap=0x1f0000) returned 1 [0263.900] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389b0 | out: hHeap=0x1f0000) returned 1 [0263.900] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238960 | out: hHeap=0x1f0000) returned 1 [0263.900] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232cc0 | out: hHeap=0x1f0000) returned 1 [0263.900] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24fd60 | out: hHeap=0x1f0000) returned 1 [0263.900] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233580 | out: hHeap=0x1f0000) returned 1 [0263.900] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206658 | out: hHeap=0x1f0000) returned 1 [0263.900] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0263.900] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0263.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abd88 | out: hHeap=0x1f0000) returned 1 [0263.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x258298 | out: hHeap=0x1f0000) returned 1 [0263.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2337b0 | out: hHeap=0x1f0000) returned 1 [0263.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238e18 | out: hHeap=0x1f0000) returned 1 [0263.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236608 | out: hHeap=0x1f0000) returned 1 [0263.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d9d0 | out: hHeap=0x1f0000) returned 1 [0263.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228cb0 | out: hHeap=0x1f0000) returned 1 [0263.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0263.901] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\2070\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2070\\setupresources.dll")) returned 1 [0263.903] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0263.904] FindClose (in: hFindFile=0x24e7c0 | out: hFindFile=0x24e7c0) returned 1 [0263.904] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2365a0 | out: hHeap=0x1f0000) returned 1 [0263.904] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ee88 | out: hHeap=0x1f0000) returned 1 [0263.904] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0263.904] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228a28 | out: hHeap=0x1f0000) returned 1 [0263.905] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228518 [0263.905] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0263.905] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f350 [0263.905] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228680 [0263.905] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\3076\\*", lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e900 [0263.905] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228758 [0263.906] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228680 | out: hHeap=0x1f0000) returned 1 [0263.906] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0263.906] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0263.906] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228bd8 [0263.906] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228758 | out: hHeap=0x1f0000) returned 1 [0263.906] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0263.906] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0263.907] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x18a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0263.907] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0263.907] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228a28 [0263.907] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x2364d0 [0263.907] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228a28 | out: hHeap=0x1f0000) returned 1 [0263.907] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228bd8 | out: hHeap=0x1f0000) returned 1 [0263.907] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0263.908] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\3076\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3076\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0263.909] GetFileType (hFile=0x21c) returned 0x1 [0263.909] CloseHandle (hObject=0x21c) returned 1 [0263.910] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8d18 [0263.910] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\3076\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3076\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x173eb6c | out: lpFileInformation=0x173eb6c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x18a5)) returned 1 [0263.910] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0263.911] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8d18 [0263.911] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\3076\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3076\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x173eb7c | out: lpFileInformation=0x173eb7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x18a5)) returned 1 [0263.911] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0263.911] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8d18 [0263.911] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0263.911] GetLastError () returned 0x0 [0263.912] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0263.912] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228a28 [0263.912] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22ee88 [0263.912] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8d18 [0263.912] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238de0 [0263.912] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0263.912] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x212e00) returned 1 [0263.913] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2384b0 | out: pbBuffer=0x2384b0) returned 1 [0263.914] CryptReleaseContext (hProv=0x212e00, dwFlags=0x0) returned 1 [0263.914] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0263.914] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x254980 [0263.914] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x233350 [0263.914] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=42128307761) returned 1 [0263.914] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0263.915] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=42128351613) returned 1 [0263.915] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0263.915] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x2390b8 [0263.915] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x255c88 [0263.915] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x233008 [0263.915] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x2abe58 [0263.915] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210240 [0263.916] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206808 [0263.916] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210258 [0263.916] GetLastError () returned 0x0 [0263.916] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236538 [0263.916] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a4d0 [0263.916] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236538 | out: hHeap=0x1f0000) returned 1 [0263.917] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xee) returned 0x2b11c8 [0263.917] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a4d0 | out: hHeap=0x1f0000) returned 1 [0263.917] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389b0 [0263.917] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238810 [0263.918] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\3076\\eula.rtf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\3076\\eula.rtf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e230, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0263.921] GetFileType (hFile=0x21c) returned 0x1 [0263.922] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238930 [0263.922] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238970 [0263.923] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\3076\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3076\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0263.924] GetFileType (hFile=0x174) returned 0x1 [0263.925] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0263.925] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204b90 [0263.925] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2acfc0 [0263.925] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238870 [0264.228] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238990 [0264.229] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\3076\\eula.rtf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\3076\\eula.rtf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0264.229] GetFileType (hFile=0x198) returned 0x1 [0264.230] GetLastError () returned 0xb7 [0264.230] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe4) returned 0x21b438 [0264.230] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f70 [0264.231] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cd0 [0264.231] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d10 [0264.231] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2adbf8 [0264.231] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238800 [0264.232] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388e0 [0264.235] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\3076\\eula.rtf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\3076\\eula.rtf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0264.247] GetFileType (hFile=0x1ac) returned 0x1 [0264.247] GetLastError () returned 0xb7 [0264.247] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bb0 [0264.248] GetLastError () returned 0xb7 [0264.248] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204df0 [0264.248] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0264.248] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c70 [0264.248] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb8) returned 0x237c20 [0264.248] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238980 [0264.264] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238830 [0264.264] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\3076\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3076\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1a4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0264.288] GetFileType (hFile=0x1c0) returned 0x1 [0264.298] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28cfc8 [0264.299] ReadFile (in: hFile=0x1c0, lpBuffer=0x28cfc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e100, lpOverlapped=0x0 | out: lpBuffer=0x28cfc8*, lpNumberOfBytesRead=0x173e100*=0x1000, lpOverlapped=0x0) returned 1 [0264.301] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24b9e8 [0264.302] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28dfd0 [0264.302] GetLastError () returned 0x0 [0264.304] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210198 [0264.305] GetLastError () returned 0x0 [0264.305] CloseHandle (hObject=0x21c) returned 1 [0264.306] CloseHandle (hObject=0x174) returned 1 [0264.306] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238890 [0264.307] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238840 [0264.308] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\3076\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3076\\eula.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0264.309] GetFileType (hFile=0x174) returned 0x1 [0264.310] GetLastError () returned 0xb7 [0264.310] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x286f98 [0264.310] GetLastError () returned 0xb7 [0264.312] CloseHandle (hObject=0x174) returned 1 [0264.312] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\3076\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3076\\eula.rtf")) returned 0 [0264.313] GetLastError () returned 0x20 [0264.313] GetLastError () returned 0x20 [0264.313] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228b00 [0264.313] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238078 [0264.313] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2380a0 [0264.314] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x228bd8 [0264.314] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e90 [0264.314] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204b90 [0264.314] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x2387f0 [0264.314] GetLastError () returned 0x20 [0264.314] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238f30 [0264.314] GetLastError () returned 0x20 [0264.315] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239010 [0264.315] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236468 [0264.315] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238370 [0264.315] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x284f90 [0264.315] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388d0 [0264.315] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0264.315] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101b0 [0264.315] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238820 [0264.316] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0264.316] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210210 [0264.316] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238168 [0264.317] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285098 [0264.317] GetLastError () returned 0x20 [0264.317] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x2388a0 [0264.317] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x2389c0 [0264.318] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388b0 [0264.318] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389c0 | out: hHeap=0x1f0000) returned 1 [0264.318] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238860 [0264.318] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388b0 | out: hHeap=0x1f0000) returned 1 [0264.318] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388a0 | out: hHeap=0x1f0000) returned 1 [0264.318] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238850 [0264.319] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101c8 [0264.319] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238850 | out: hHeap=0x1f0000) returned 1 [0264.319] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101e0 [0264.319] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0264.319] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238860 | out: hHeap=0x1f0000) returned 1 [0264.319] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101c8 [0264.319] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20fef8 [0264.319] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0264.320] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0264.320] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20fef8 | out: hHeap=0x1f0000) returned 1 [0264.320] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0264.320] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0264.320] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204c70 [0264.320] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0264.320] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c90 [0264.320] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c70 | out: hHeap=0x1f0000) returned 1 [0264.320] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0264.321] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f30 [0264.321] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2384b0 [0264.321] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f30 | out: hHeap=0x1f0000) returned 1 [0264.321] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204ef0 [0264.321] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0264.321] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c90 | out: hHeap=0x1f0000) returned 1 [0264.321] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204bb0 [0264.322] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x2066b8 [0264.322] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bb0 | out: hHeap=0x1f0000) returned 1 [0264.322] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2384b0 [0264.322] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2066b8 | out: hHeap=0x1f0000) returned 1 [0264.322] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ef0 | out: hHeap=0x1f0000) returned 1 [0264.322] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238850 [0264.322] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101c8 [0264.322] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238850 | out: hHeap=0x1f0000) returned 1 [0264.322] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0264.322] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0264.323] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204ef0 [0264.323] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0264.323] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206868 [0264.323] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ef0 | out: hHeap=0x1f0000) returned 1 [0264.323] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206868 | out: hHeap=0x1f0000) returned 1 [0264.323] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0264.323] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0264.323] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0264.323] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x284f90 | out: hHeap=0x1f0000) returned 1 [0264.323] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0264.323] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238f30 [0264.323] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0264.323] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x212e00) returned 1 [0264.324] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2384b0 | out: pbBuffer=0x2384b0) returned 1 [0264.325] CryptReleaseContext (hProv=0x212e00, dwFlags=0x0) returned 1 [0264.325] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0264.325] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2384b0 [0264.325] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238370 [0264.325] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238d70 [0264.325] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0264.325] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0264.325] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238d70 | out: hHeap=0x1f0000) returned 1 [0264.325] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8dc8 [0264.325] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0264.325] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x236538 [0264.325] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x237fd8 [0264.325] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2853b0 [0264.326] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d10 [0264.326] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2365a0 [0264.326] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238078 [0264.326] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285e00 [0264.326] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388a0 [0264.326] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0264.326] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0264.326] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238960 [0264.326] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0264.326] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20fef8 [0264.326] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20fef8 | out: hHeap=0x1f0000) returned 1 [0264.327] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0264.327] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238960 | out: hHeap=0x1f0000) returned 1 [0264.327] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0264.327] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0264.327] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388a0 | out: hHeap=0x1f0000) returned 1 [0264.327] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285e00 | out: hHeap=0x1f0000) returned 1 [0264.327] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0264.327] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2365a0 | out: hHeap=0x1f0000) returned 1 [0264.327] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239208 [0264.328] GetLastError () returned 0x0 [0264.328] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238cc8 [0264.328] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0264.328] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0264.328] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0264.328] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0264.329] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0264.329] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0264.329] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x24ea80 [0264.329] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2859e0 [0264.329] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0264.329] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0264.329] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0264.329] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0264.329] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2855c0 [0264.329] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0264.330] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0264.330] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22ff38 [0264.330] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x258298 [0264.330] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x233120 [0264.330] QueryPerformanceCounter (in: lpPerformanceCount=0x173dee0 | out: lpPerformanceCount=0x173dee0*=42169886010) returned 1 [0264.561] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173df20 | out: lpSystemTimeAsFileTime=0x173df20) [0264.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238920 [0264.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0264.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0264.562] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d70 | out: hHeap=0x1f0000) returned 1 [0264.562] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0264.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0264.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e70 [0264.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e70 | out: hHeap=0x1f0000) returned 1 [0264.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0264.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238920 | out: hHeap=0x1f0000) returned 1 [0264.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0264.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238d00 [0264.563] GetLastError () returned 0x0 [0264.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0264.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0264.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0264.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238078 [0264.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238000 [0264.565] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0264.565] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0264.565] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238190 [0264.565] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0264.565] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x222ee8 [0264.565] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0264.565] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0264.565] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0264.566] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0264.566] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0264.566] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381b8 [0264.566] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381e0 [0264.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0264.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0264.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0264.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0264.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x234b90 [0264.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b90 | out: hHeap=0x1f0000) returned 1 [0264.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0264.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0264.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101e0 [0264.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228c68 [0264.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381b8 [0264.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381e0 [0264.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238780 [0264.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2385f0 [0264.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0264.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0264.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0264.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381b8 [0264.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381e0 [0264.569] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0264.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0264.569] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0264.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2067d8 [0264.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x2b4ab0 [0264.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b4ab0 | out: hHeap=0x1f0000) returned 1 [0264.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2067d8 | out: hHeap=0x1f0000) returned 1 [0264.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0264.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0264.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0264.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0264.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204d30 [0264.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0264.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0264.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0264.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aa920 [0264.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0264.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385f0 | out: hHeap=0x1f0000) returned 1 [0264.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238780 | out: hHeap=0x1f0000) returned 1 [0264.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228c68 | out: hHeap=0x1f0000) returned 1 [0264.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0264.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d30 | out: hHeap=0x1f0000) returned 1 [0264.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0264.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0264.572] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a9578 [0264.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a9578 | out: hHeap=0x1f0000) returned 1 [0264.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ee8 | out: hHeap=0x1f0000) returned 1 [0264.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0264.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0264.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0264.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0264.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0264.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0264.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0264.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a9d90 [0264.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a9a18 [0264.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a9d90 | out: hHeap=0x1f0000) returned 1 [0264.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a9a18 | out: hHeap=0x1f0000) returned 1 [0264.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aa920 | out: hHeap=0x1f0000) returned 1 [0264.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0264.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2855c0 | out: hHeap=0x1f0000) returned 1 [0264.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24ea80 | out: hHeap=0x1f0000) returned 1 [0264.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x2337b0 [0264.575] GetLastError () returned 0x0 [0264.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238910 [0264.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389c0 [0264.781] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\3076\\eula.rtf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\3076\\eula.rtf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e290, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0264.782] GetFileType (hFile=0x174) returned 0x1 [0264.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x286f98 [0264.782] SetFilePointerEx (in: hFile=0x174, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e218 | out: lpNewFilePointer=0x0) returned 1 [0264.783] GetLastError () returned 0xb7 [0264.783] CloseHandle (hObject=0x174) returned 1 [0264.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389c0 | out: hHeap=0x1f0000) returned 1 [0264.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238910 | out: hHeap=0x1f0000) returned 1 [0264.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2859e0 | out: hHeap=0x1f0000) returned 1 [0264.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2853b0 | out: hHeap=0x1f0000) returned 1 [0264.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0264.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d10 | out: hHeap=0x1f0000) returned 1 [0264.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236538 | out: hHeap=0x1f0000) returned 1 [0264.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0264.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8dc8 | out: hHeap=0x1f0000) returned 1 [0264.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2337b0 | out: hHeap=0x1f0000) returned 1 [0264.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0264.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0264.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x258298 | out: hHeap=0x1f0000) returned 1 [0264.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233120 | out: hHeap=0x1f0000) returned 1 [0264.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238f30 | out: hHeap=0x1f0000) returned 1 [0264.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387f0 | out: hHeap=0x1f0000) returned 1 [0264.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0264.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0264.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238820 | out: hHeap=0x1f0000) returned 1 [0264.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0264.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0264.787] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388d0 | out: hHeap=0x1f0000) returned 1 [0264.787] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285098 | out: hHeap=0x1f0000) returned 1 [0264.787] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0264.787] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0264.787] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228bd8 | out: hHeap=0x1f0000) returned 1 [0264.787] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0264.787] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0264.787] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228b00 | out: hHeap=0x1f0000) returned 1 [0264.787] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238840 | out: hHeap=0x1f0000) returned 1 [0264.787] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238890 | out: hHeap=0x1f0000) returned 1 [0264.787] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28cfc8 | out: hHeap=0x1f0000) returned 1 [0264.787] CloseHandle (hObject=0x1c0) returned 1 [0264.788] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238830 | out: hHeap=0x1f0000) returned 1 [0264.788] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238980 | out: hHeap=0x1f0000) returned 1 [0264.788] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237c20 | out: hHeap=0x1f0000) returned 1 [0264.788] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24b9e8 | out: hHeap=0x1f0000) returned 1 [0264.788] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0264.788] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204df0 | out: hHeap=0x1f0000) returned 1 [0264.789] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28dfd0 | out: hHeap=0x1f0000) returned 1 [0264.789] CloseHandle (hObject=0x1ac) returned 1 [0264.789] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388e0 | out: hHeap=0x1f0000) returned 1 [0264.789] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238800 | out: hHeap=0x1f0000) returned 1 [0264.789] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2adbf8 | out: hHeap=0x1f0000) returned 1 [0264.789] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f70 | out: hHeap=0x1f0000) returned 1 [0264.789] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21b438 | out: hHeap=0x1f0000) returned 1 [0264.790] CloseHandle (hObject=0x198) returned 1 [0264.790] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238990 | out: hHeap=0x1f0000) returned 1 [0264.790] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238870 | out: hHeap=0x1f0000) returned 1 [0264.790] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2acfc0 | out: hHeap=0x1f0000) returned 1 [0264.790] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238970 | out: hHeap=0x1f0000) returned 1 [0264.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238930 | out: hHeap=0x1f0000) returned 1 [0264.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238810 | out: hHeap=0x1f0000) returned 1 [0264.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389b0 | out: hHeap=0x1f0000) returned 1 [0264.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b11c8 | out: hHeap=0x1f0000) returned 1 [0264.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x255c88 | out: hHeap=0x1f0000) returned 1 [0264.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233008 | out: hHeap=0x1f0000) returned 1 [0264.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206808 | out: hHeap=0x1f0000) returned 1 [0264.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0264.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210240 | out: hHeap=0x1f0000) returned 1 [0264.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abe58 | out: hHeap=0x1f0000) returned 1 [0264.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x254980 | out: hHeap=0x1f0000) returned 1 [0264.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233350 | out: hHeap=0x1f0000) returned 1 [0264.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238de0 | out: hHeap=0x1f0000) returned 1 [0264.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0264.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ee88 | out: hHeap=0x1f0000) returned 1 [0264.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228a28 | out: hHeap=0x1f0000) returned 1 [0264.792] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0264.792] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\3076\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3076\\eula.rtf")) returned 1 [0264.795] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed90, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0264.795] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2390b8 [0264.795] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228a28 [0264.795] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236608 [0264.795] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228a28 | out: hHeap=0x1f0000) returned 1 [0264.795] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2364d0 | out: hHeap=0x1f0000) returned 1 [0264.795] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2390b8 | out: hHeap=0x1f0000) returned 1 [0264.796] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\3076\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3076\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0264.796] GetFileType (hFile=0x198) returned 0x1 [0264.797] CloseHandle (hObject=0x198) returned 1 [0264.797] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236468 [0264.797] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\3076\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3076\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x173eb6c | out: lpFileInformation=0x173eb6c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed90)) returned 1 [0264.797] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0264.797] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236468 [0264.798] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\3076\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3076\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x173eb7c | out: lpFileInformation=0x173eb7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed90)) returned 1 [0264.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0264.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236468 [0264.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0264.798] GetLastError () returned 0x0 [0264.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0264.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228680 [0264.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d508 [0264.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236468 [0264.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238da8 [0264.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0264.799] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x212ad0) returned 1 [0264.801] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2382f8 | out: pbBuffer=0x2382f8) returned 1 [0264.801] CryptReleaseContext (hProv=0x212ad0, dwFlags=0x0) returned 1 [0264.801] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0264.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x258298 [0264.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x233008 [0264.802] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=42217067109) returned 1 [0264.802] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0264.802] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=42217100231) returned 1 [0264.802] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0264.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238f68 [0264.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x251068 [0264.803] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2338c8 [0264.803] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x2ab088 [0264.803] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210210 [0264.803] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2068c8 [0264.803] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210240 [0264.803] GetLastError () returned 0x0 [0264.803] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2aec00 [0264.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad638 [0264.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aec00 | out: hHeap=0x1f0000) returned 1 [0264.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x106) returned 0x232ba8 [0264.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad638 | out: hHeap=0x1f0000) returned 1 [0264.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387e0 [0264.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238870 [0264.805] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\3076\\LocalizedData.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\3076\\localizeddata.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e230, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0264.806] GetFileType (hFile=0x198) returned 0x1 [0264.806] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238980 [0264.807] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238880 [0264.807] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\3076\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3076\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0264.807] GetFileType (hFile=0x1ac) returned 0x1 [0264.808] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cd0 [0264.808] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d10 [0264.808] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2adb40 [0264.808] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238800 [0264.808] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388e0 [0264.809] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\3076\\LocalizedData.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\3076\\localizeddata.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0264.809] GetFileType (hFile=0x1c0) returned 0x1 [0264.809] GetLastError () returned 0xb7 [0264.810] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe4) returned 0x21af88 [0264.810] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204df0 [0264.810] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0264.810] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c70 [0264.810] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2aded8 [0264.810] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238990 [0264.810] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238830 [0264.811] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\3076\\LocalizedData.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\3076\\localizeddata.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0264.811] GetFileType (hFile=0x174) returned 0x1 [0264.811] GetLastError () returned 0xb7 [0264.811] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cd0 [0264.811] GetLastError () returned 0xb7 [0264.812] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204db0 [0264.812] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204dd0 [0264.812] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f10 [0264.812] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb8) returned 0x237260 [0264.812] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238840 [0264.812] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238950 [0264.813] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\3076\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3076\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1a4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0264.813] GetFileType (hFile=0x21c) returned 0x1 [0264.813] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28cfc8 [0264.813] ReadFile (in: hFile=0x21c, lpBuffer=0x28cfc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e100, lpOverlapped=0x0 | out: lpBuffer=0x28cfc8*, lpNumberOfBytesRead=0x173e100*=0x1000, lpOverlapped=0x0) returned 1 [0264.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24bdf0 [0264.953] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x286f98 [0264.953] GetLastError () returned 0x0 [0264.957] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101b0 [0264.958] GetLastError () returned 0x0 [0264.958] CloseHandle (hObject=0x198) returned 1 [0264.959] CloseHandle (hObject=0x1ac) returned 1 [0264.959] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238900 [0264.960] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238960 [0265.129] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\3076\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3076\\localizeddata.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0265.132] GetFileType (hFile=0x19c) returned 0x1 [0265.133] GetLastError () returned 0xb7 [0265.133] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28dfd0 [0265.134] GetLastError () returned 0xb7 [0265.135] CloseHandle (hObject=0x19c) returned 1 [0265.136] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\3076\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3076\\localizeddata.xml")) returned 0 [0265.136] GetLastError () returned 0x20 [0265.136] GetLastError () returned 0x20 [0265.137] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228a28 [0265.137] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x237fd8 [0265.137] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238370 [0265.137] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x228758 [0265.137] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0265.137] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c10 [0265.137] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x238920 [0265.138] GetLastError () returned 0x20 [0265.138] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238c58 [0265.138] GetLastError () returned 0x20 [0265.138] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238f68 [0265.138] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2364d0 [0265.138] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238140 [0265.138] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285e00 [0265.139] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238890 [0265.139] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0265.139] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0265.139] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238860 [0265.139] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0265.139] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210258 [0265.139] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238078 [0265.139] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2851a0 [0265.140] GetLastError () returned 0x20 [0265.140] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x2389b0 [0265.140] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x2387f0 [0265.140] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389c0 [0265.140] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387f0 | out: hHeap=0x1f0000) returned 1 [0265.140] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238850 [0265.140] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389c0 | out: hHeap=0x1f0000) returned 1 [0265.141] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389b0 | out: hHeap=0x1f0000) returned 1 [0265.141] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388a0 [0265.141] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210198 [0265.141] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388a0 | out: hHeap=0x1f0000) returned 1 [0265.141] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101c8 [0265.141] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0265.141] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238850 | out: hHeap=0x1f0000) returned 1 [0265.141] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210198 [0265.141] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20fef8 [0265.142] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0265.142] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210198 [0265.142] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20fef8 | out: hHeap=0x1f0000) returned 1 [0265.142] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0265.142] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0265.142] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204c30 [0265.142] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0265.142] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d90 [0265.142] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c30 | out: hHeap=0x1f0000) returned 1 [0265.142] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0265.143] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c30 [0265.143] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2380a0 [0265.143] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c30 | out: hHeap=0x1f0000) returned 1 [0265.143] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204e30 [0265.143] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0265.143] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d90 | out: hHeap=0x1f0000) returned 1 [0265.143] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204f10 [0265.143] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x2067d8 [0265.144] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f10 | out: hHeap=0x1f0000) returned 1 [0265.144] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2380a0 [0265.144] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2067d8 | out: hHeap=0x1f0000) returned 1 [0265.144] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e30 | out: hHeap=0x1f0000) returned 1 [0265.144] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238850 [0265.184] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210198 [0265.184] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238850 | out: hHeap=0x1f0000) returned 1 [0265.184] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0265.184] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0265.184] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204ef0 [0265.184] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0265.184] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206868 [0265.185] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ef0 | out: hHeap=0x1f0000) returned 1 [0265.185] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206868 | out: hHeap=0x1f0000) returned 1 [0265.185] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0265.185] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0265.185] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0265.185] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285e00 | out: hHeap=0x1f0000) returned 1 [0265.185] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0265.186] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c58 [0265.186] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0265.186] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x212e00) returned 1 [0265.187] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2380a0 | out: pbBuffer=0x2380a0) returned 1 [0265.187] CryptReleaseContext (hProv=0x212e00, dwFlags=0x0) returned 1 [0265.187] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0265.187] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238190 [0265.187] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381b8 [0265.187] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239048 [0265.187] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0265.188] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0265.188] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239048 | out: hHeap=0x1f0000) returned 1 [0265.188] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8d18 [0265.188] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210198 [0265.188] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x236538 [0265.188] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x237fd8 [0265.188] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285ae8 [0265.188] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204dd0 [0265.189] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2365a0 [0265.189] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2380a0 [0265.189] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2852a8 [0265.189] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238930 [0265.189] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0265.189] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0265.189] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238910 [0265.190] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0265.190] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210120 [0265.190] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210120 | out: hHeap=0x1f0000) returned 1 [0265.190] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0265.190] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238910 | out: hHeap=0x1f0000) returned 1 [0265.190] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0265.190] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0265.190] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238930 | out: hHeap=0x1f0000) returned 1 [0265.191] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2852a8 | out: hHeap=0x1f0000) returned 1 [0265.191] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0265.191] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2365a0 | out: hHeap=0x1f0000) returned 1 [0265.191] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238c90 [0265.192] GetLastError () returned 0x0 [0265.192] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238ec0 [0265.192] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0265.192] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0265.192] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0265.193] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0265.193] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0265.193] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0265.193] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x24e980 [0265.193] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2858d8 [0265.193] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0265.193] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0265.193] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0265.193] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0265.194] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2857d0 [0265.194] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0265.194] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0265.194] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f6a0 [0265.194] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x254980 [0265.194] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x233120 [0265.194] QueryPerformanceCounter (in: lpPerformanceCount=0x173dee0 | out: lpPerformanceCount=0x173dee0*=42256306059) returned 1 [0265.194] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173df20 | out: lpSystemTimeAsFileTime=0x173df20) [0265.194] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x2388a0 [0265.195] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0265.195] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d90 [0265.195] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d90 | out: hHeap=0x1f0000) returned 1 [0265.195] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0265.195] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0265.195] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0265.195] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d70 | out: hHeap=0x1f0000) returned 1 [0265.195] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0265.196] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388a0 | out: hHeap=0x1f0000) returned 1 [0265.196] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0265.196] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238c90 [0265.196] GetLastError () returned 0x0 [0265.196] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0265.196] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0265.196] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0265.197] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381e0 [0265.197] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238398 [0265.197] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0265.197] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0265.197] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2380a0 [0265.197] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0265.197] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x222ee8 [0265.197] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0265.198] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0265.198] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0265.198] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0265.198] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0265.198] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238140 [0265.198] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238190 [0265.198] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0265.198] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0265.199] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0265.199] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0265.199] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x234b90 [0265.199] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b90 | out: hHeap=0x1f0000) returned 1 [0265.199] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0265.199] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0265.199] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101c8 [0265.199] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228b00 [0265.199] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238140 [0265.200] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238190 [0265.200] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238708 [0265.200] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238730 [0265.200] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0265.200] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0265.200] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0265.200] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238140 [0265.200] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238190 [0265.201] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0265.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0265.201] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0265.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2067d8 [0265.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x2b4220 [0265.201] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b4220 | out: hHeap=0x1f0000) returned 1 [0265.201] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2067d8 | out: hHeap=0x1f0000) returned 1 [0265.201] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0265.202] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0265.202] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0265.202] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0265.202] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204c50 [0265.202] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0265.202] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0265.202] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0265.203] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aa358 [0265.203] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0265.203] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238730 | out: hHeap=0x1f0000) returned 1 [0265.203] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238708 | out: hHeap=0x1f0000) returned 1 [0265.203] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228b00 | out: hHeap=0x1f0000) returned 1 [0265.203] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0265.203] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c50 | out: hHeap=0x1f0000) returned 1 [0265.204] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0265.204] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0265.204] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a9328 [0265.204] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a9328 | out: hHeap=0x1f0000) returned 1 [0265.204] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ee8 | out: hHeap=0x1f0000) returned 1 [0265.204] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0265.204] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0265.205] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0265.205] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0265.205] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0265.205] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0265.205] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0265.205] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a8fb0 [0265.205] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aa920 [0265.205] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8fb0 | out: hHeap=0x1f0000) returned 1 [0265.206] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aa920 | out: hHeap=0x1f0000) returned 1 [0265.206] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aa358 | out: hHeap=0x1f0000) returned 1 [0265.206] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0265.206] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2857d0 | out: hHeap=0x1f0000) returned 1 [0265.206] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24e980 | out: hHeap=0x1f0000) returned 1 [0265.206] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x233698 [0265.206] GetLastError () returned 0x0 [0265.207] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388d0 [0265.207] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238910 [0265.208] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\3076\\LocalizedData.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\3076\\localizeddata.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e290, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0265.618] GetFileType (hFile=0x1e8) returned 0x1 [0265.618] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x295008 [0265.619] SetFilePointerEx (in: hFile=0x1e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e218 | out: lpNewFilePointer=0x0) returned 1 [0265.619] GetLastError () returned 0xb7 [0265.619] CloseHandle (hObject=0x1e8) returned 1 [0265.620] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238910 | out: hHeap=0x1f0000) returned 1 [0265.620] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388d0 | out: hHeap=0x1f0000) returned 1 [0265.620] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2858d8 | out: hHeap=0x1f0000) returned 1 [0265.620] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285ae8 | out: hHeap=0x1f0000) returned 1 [0265.620] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0265.620] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204dd0 | out: hHeap=0x1f0000) returned 1 [0265.620] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236538 | out: hHeap=0x1f0000) returned 1 [0265.620] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0265.620] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0265.620] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233698 | out: hHeap=0x1f0000) returned 1 [0265.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0265.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0265.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x254980 | out: hHeap=0x1f0000) returned 1 [0265.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233120 | out: hHeap=0x1f0000) returned 1 [0265.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c58 | out: hHeap=0x1f0000) returned 1 [0265.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238920 | out: hHeap=0x1f0000) returned 1 [0265.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0265.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0265.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238860 | out: hHeap=0x1f0000) returned 1 [0265.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0265.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0265.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238890 | out: hHeap=0x1f0000) returned 1 [0265.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2851a0 | out: hHeap=0x1f0000) returned 1 [0265.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0265.622] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2364d0 | out: hHeap=0x1f0000) returned 1 [0265.622] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228758 | out: hHeap=0x1f0000) returned 1 [0265.622] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0265.622] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0265.622] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228a28 | out: hHeap=0x1f0000) returned 1 [0265.622] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238960 | out: hHeap=0x1f0000) returned 1 [0265.622] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238900 | out: hHeap=0x1f0000) returned 1 [0265.622] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28cfc8 | out: hHeap=0x1f0000) returned 1 [0265.622] CloseHandle (hObject=0x21c) returned 1 [0265.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238950 | out: hHeap=0x1f0000) returned 1 [0265.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238840 | out: hHeap=0x1f0000) returned 1 [0265.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237260 | out: hHeap=0x1f0000) returned 1 [0265.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24bdf0 | out: hHeap=0x1f0000) returned 1 [0265.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0265.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204db0 | out: hHeap=0x1f0000) returned 1 [0265.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286f98 | out: hHeap=0x1f0000) returned 1 [0265.624] CloseHandle (hObject=0x174) returned 1 [0265.624] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238830 | out: hHeap=0x1f0000) returned 1 [0265.624] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238990 | out: hHeap=0x1f0000) returned 1 [0265.624] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aded8 | out: hHeap=0x1f0000) returned 1 [0265.624] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204df0 | out: hHeap=0x1f0000) returned 1 [0265.624] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21af88 | out: hHeap=0x1f0000) returned 1 [0265.624] CloseHandle (hObject=0x1c0) returned 1 [0265.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388e0 | out: hHeap=0x1f0000) returned 1 [0265.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238800 | out: hHeap=0x1f0000) returned 1 [0265.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2adb40 | out: hHeap=0x1f0000) returned 1 [0265.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238880 | out: hHeap=0x1f0000) returned 1 [0265.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238980 | out: hHeap=0x1f0000) returned 1 [0265.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238870 | out: hHeap=0x1f0000) returned 1 [0265.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387e0 | out: hHeap=0x1f0000) returned 1 [0265.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232ba8 | out: hHeap=0x1f0000) returned 1 [0265.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x251068 | out: hHeap=0x1f0000) returned 1 [0265.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2338c8 | out: hHeap=0x1f0000) returned 1 [0265.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2068c8 | out: hHeap=0x1f0000) returned 1 [0265.626] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210240 | out: hHeap=0x1f0000) returned 1 [0265.626] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0265.626] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab088 | out: hHeap=0x1f0000) returned 1 [0265.626] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x258298 | out: hHeap=0x1f0000) returned 1 [0265.626] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233008 | out: hHeap=0x1f0000) returned 1 [0265.626] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238da8 | out: hHeap=0x1f0000) returned 1 [0265.626] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0265.626] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d508 | out: hHeap=0x1f0000) returned 1 [0265.626] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228680 | out: hHeap=0x1f0000) returned 1 [0265.626] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0265.626] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\3076\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3076\\localizeddata.xml")) returned 1 [0265.629] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0265.629] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239160 [0265.629] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228680 [0265.629] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236468 [0265.629] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228680 | out: hHeap=0x1f0000) returned 1 [0265.629] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236608 | out: hHeap=0x1f0000) returned 1 [0265.629] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239160 | out: hHeap=0x1f0000) returned 1 [0266.301] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\3076\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\3076\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0266.302] GetFileType (hFile=0x19c) returned 0x1 [0266.302] CloseHandle (hObject=0x19c) returned 1 [0266.303] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2364d0 [0266.303] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\3076\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\3076\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x173eb6c | out: lpFileInformation=0x173eb6c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758)) returned 1 [0266.303] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2364d0 | out: hHeap=0x1f0000) returned 1 [0266.303] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2364d0 [0266.303] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\3076\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\3076\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x173eb7c | out: lpFileInformation=0x173eb7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758)) returned 1 [0266.303] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2364d0 | out: hHeap=0x1f0000) returned 1 [0266.303] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2364d0 [0266.303] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2364d0 | out: hHeap=0x1f0000) returned 1 [0266.303] GetLastError () returned 0x0 [0266.304] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0266.304] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228a28 [0266.304] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22ee88 [0266.304] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2364d0 [0266.304] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238d38 [0266.304] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0266.304] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x213460) returned 1 [0266.306] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x237fd8 | out: pbBuffer=0x237fd8) returned 1 [0266.306] CryptReleaseContext (hProv=0x213460, dwFlags=0x0) returned 1 [0266.306] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0266.306] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x258298 [0266.306] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2337b0 [0266.306] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=42367488941) returned 1 [0266.306] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0266.306] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=42367519415) returned 1 [0266.306] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0266.307] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238f30 [0266.307] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x24fd60 [0266.307] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x232ba8 [0266.307] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x2ab3c8 [0266.307] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210240 [0266.307] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206928 [0266.307] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0266.307] GetLastError () returned 0x0 [0266.307] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2aee58 [0266.307] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad4c8 [0266.308] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aee58 | out: hHeap=0x1f0000) returned 1 [0266.308] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x106) returned 0x233238 [0266.308] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad4c8 | out: hHeap=0x1f0000) returned 1 [0266.308] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238960 [0266.308] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238800 [0266.309] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\3076\\SetupResources.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\3076\\setupresources.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e230, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0266.309] GetFileType (hFile=0x19c) returned 0x1 [0266.310] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238990 [0266.310] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387f0 [0266.310] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\3076\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\3076\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0266.311] GetFileType (hFile=0x1c0) returned 0x1 [0266.311] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0266.311] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c70 [0266.311] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2aded8 [0266.311] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238980 [0266.312] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238830 [0266.312] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\3076\\SetupResources.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\3076\\setupresources.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0266.312] GetFileType (hFile=0x174) returned 0x1 [0266.313] GetLastError () returned 0xb7 [0266.313] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe4) returned 0x21b438 [0266.313] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204db0 [0266.313] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204dd0 [0266.313] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f10 [0266.313] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad580 [0266.313] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238840 [0266.313] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238950 [0266.314] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\3076\\SetupResources.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\3076\\setupresources.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0266.314] GetFileType (hFile=0x21c) returned 0x1 [0266.315] GetLastError () returned 0xb7 [0266.315] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d90 [0266.315] GetLastError () returned 0xb7 [0266.315] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204dd0 [0266.315] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bd0 [0266.315] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c10 [0266.315] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb8) returned 0x237620 [0266.315] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238970 [0266.316] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387e0 [0266.317] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\3076\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\3076\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1a4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0266.317] GetFileType (hFile=0x1e8) returned 0x1 [0266.318] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28cfc8 [0266.318] ReadFile (in: hFile=0x1e8, lpBuffer=0x28cfc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e100, lpOverlapped=0x0 | out: lpBuffer=0x28cfc8*, lpNumberOfBytesRead=0x173e100*=0x1000, lpOverlapped=0x0) returned 1 [0266.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24bdf0 [0266.356] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28dfd0 [0266.356] GetLastError () returned 0x0 [0266.359] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210210 [0266.359] GetLastError () returned 0x0 [0266.359] CloseHandle (hObject=0x19c) returned 1 [0266.360] CloseHandle (hObject=0x1c0) returned 1 [0266.361] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238810 [0266.361] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388d0 [0266.362] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\3076\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\3076\\setupresources.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0266.365] GetFileType (hFile=0x1c0) returned 0x1 [0266.365] GetLastError () returned 0xb7 [0266.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x286f98 [0266.366] GetLastError () returned 0xb7 [0266.368] CloseHandle (hObject=0x1c0) returned 1 [0266.369] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\3076\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\3076\\setupresources.dll")) returned 0 [0266.369] GetLastError () returned 0x20 [0266.369] GetLastError () returned 0x20 [0266.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228b00 [0266.370] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381e0 [0266.370] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238168 [0266.370] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x228cb0 [0266.370] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cf0 [0266.370] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f30 [0266.370] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x238890 [0266.371] GetLastError () returned 0x20 [0266.371] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238da8 [0266.371] GetLastError () returned 0x20 [0266.371] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238d70 [0266.371] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236538 [0266.372] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2384b0 [0266.372] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2851a0 [0266.372] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389b0 [0266.372] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0266.372] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210258 [0266.372] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238850 [0266.372] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0266.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210198 [0266.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238370 [0266.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285ae8 [0266.373] GetLastError () returned 0x20 [0266.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238820 [0266.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238860 [0266.374] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389c0 [0266.374] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238860 | out: hHeap=0x1f0000) returned 1 [0266.374] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238860 [0266.374] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389c0 | out: hHeap=0x1f0000) returned 1 [0266.374] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238820 | out: hHeap=0x1f0000) returned 1 [0266.374] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388e0 [0266.375] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101e0 [0266.375] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388e0 | out: hHeap=0x1f0000) returned 1 [0266.375] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101b0 [0266.375] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0266.375] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238860 | out: hHeap=0x1f0000) returned 1 [0266.375] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101e0 [0266.375] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20fef8 [0266.376] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0266.376] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0266.376] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20fef8 | out: hHeap=0x1f0000) returned 1 [0266.376] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0266.376] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101b0 [0266.376] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204c30 [0266.376] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0266.377] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bf0 [0266.377] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c30 | out: hHeap=0x1f0000) returned 1 [0266.377] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0266.377] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204df0 [0266.377] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238000 [0266.377] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204df0 | out: hHeap=0x1f0000) returned 1 [0266.377] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204e30 [0266.377] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0266.378] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bf0 | out: hHeap=0x1f0000) returned 1 [0266.378] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204cd0 [0266.378] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206628 [0266.378] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cd0 | out: hHeap=0x1f0000) returned 1 [0266.378] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2380a0 [0266.378] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206628 | out: hHeap=0x1f0000) returned 1 [0266.378] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e30 | out: hHeap=0x1f0000) returned 1 [0266.379] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388e0 [0266.379] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101e0 [0266.379] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388e0 | out: hHeap=0x1f0000) returned 1 [0266.379] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101b0 [0266.379] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0266.379] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204bd0 [0266.379] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0266.379] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x2068c8 [0266.380] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bd0 | out: hHeap=0x1f0000) returned 1 [0266.380] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2068c8 | out: hHeap=0x1f0000) returned 1 [0266.380] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0266.380] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0266.380] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0266.380] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2851a0 | out: hHeap=0x1f0000) returned 1 [0266.380] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0266.381] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238e18 [0266.381] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0266.381] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x212e00) returned 1 [0266.382] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238398 | out: pbBuffer=0x238398) returned 1 [0266.382] CryptReleaseContext (hProv=0x212e00, dwFlags=0x0) returned 1 [0266.382] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0266.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238398 [0266.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238000 [0266.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c58 [0266.692] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0266.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0266.692] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c58 | out: hHeap=0x1f0000) returned 1 [0266.693] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8dc8 [0266.693] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101b0 [0266.693] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x2365a0 [0266.693] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238398 [0266.693] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2858d8 [0266.693] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e30 [0266.693] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236608 [0266.693] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238078 [0266.694] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2855c0 [0266.694] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238870 [0266.694] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0266.694] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0266.694] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388a0 [0266.694] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0266.694] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20fef8 [0266.694] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20fef8 | out: hHeap=0x1f0000) returned 1 [0266.694] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0266.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388a0 | out: hHeap=0x1f0000) returned 1 [0266.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0266.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0266.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238870 | out: hHeap=0x1f0000) returned 1 [0266.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2855c0 | out: hHeap=0x1f0000) returned 1 [0266.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0266.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236608 | out: hHeap=0x1f0000) returned 1 [0266.695] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238f30 [0266.695] GetLastError () returned 0x0 [0266.696] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239010 [0266.696] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0266.696] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0266.696] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0266.696] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0266.696] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0266.696] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0266.697] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x24e980 [0266.697] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2853b0 [0266.697] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0266.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0266.697] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0266.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0266.697] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2854b8 [0266.697] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0266.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0266.697] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f5d8 [0266.698] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x255c88 [0266.698] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2339e0 [0266.698] QueryPerformanceCounter (in: lpPerformanceCount=0x173dee0 | out: lpPerformanceCount=0x173dee0*=42406677446) returned 1 [0266.698] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173df20 | out: lpSystemTimeAsFileTime=0x173df20) [0266.698] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x2389c0 [0266.698] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0266.699] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d90 [0266.699] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d90 | out: hHeap=0x1f0000) returned 1 [0266.699] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0266.699] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0266.699] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ef0 [0266.699] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ef0 | out: hHeap=0x1f0000) returned 1 [0266.699] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0266.699] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389c0 | out: hHeap=0x1f0000) returned 1 [0266.700] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0266.700] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238f68 [0266.700] GetLastError () returned 0x0 [0266.700] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0266.700] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0266.700] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0266.700] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238078 [0266.700] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2380a0 [0266.701] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0266.701] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0266.701] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381b8 [0266.701] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0266.701] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x222ee8 [0266.701] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0266.701] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0266.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0266.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0266.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0266.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381e0 [0266.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2385f0 [0266.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0266.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0266.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385f0 | out: hHeap=0x1f0000) returned 1 [0266.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0266.703] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x234b90 [0266.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b90 | out: hHeap=0x1f0000) returned 1 [0266.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0266.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0266.703] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101e0 [0266.703] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228680 [0266.703] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238578 [0266.703] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238618 [0266.704] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2385f0 [0266.704] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238668 [0266.704] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238618 | out: hHeap=0x1f0000) returned 1 [0266.704] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238578 | out: hHeap=0x1f0000) returned 1 [0266.704] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0266.704] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2385a0 [0266.704] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238528 [0266.704] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385a0 | out: hHeap=0x1f0000) returned 1 [0266.705] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0266.705] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238528 | out: hHeap=0x1f0000) returned 1 [0266.705] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206868 [0266.705] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x2b2428 [0266.705] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b2428 | out: hHeap=0x1f0000) returned 1 [0266.705] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206868 | out: hHeap=0x1f0000) returned 1 [0266.705] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0266.705] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0266.706] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0266.706] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0266.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204ef0 [0266.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0266.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0266.706] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0266.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a96a0 [0266.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0266.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238668 | out: hHeap=0x1f0000) returned 1 [0266.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385f0 | out: hHeap=0x1f0000) returned 1 [0266.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228680 | out: hHeap=0x1f0000) returned 1 [0266.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0266.708] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ef0 | out: hHeap=0x1f0000) returned 1 [0266.708] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0266.708] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0266.708] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a97c8 [0266.708] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a97c8 | out: hHeap=0x1f0000) returned 1 [0266.708] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ee8 | out: hHeap=0x1f0000) returned 1 [0266.708] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0266.708] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0266.709] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0266.709] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0266.709] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0266.709] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0266.709] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0266.709] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aa7f8 [0266.709] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a9450 [0266.709] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aa7f8 | out: hHeap=0x1f0000) returned 1 [0266.709] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a9450 | out: hHeap=0x1f0000) returned 1 [0266.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a96a0 | out: hHeap=0x1f0000) returned 1 [0266.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0266.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2854b8 | out: hHeap=0x1f0000) returned 1 [0266.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24e980 | out: hHeap=0x1f0000) returned 1 [0266.710] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x232dd8 [0266.710] GetLastError () returned 0x0 [0266.710] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389c0 [0266.711] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238820 [0266.712] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\3076\\SetupResources.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\3076\\setupresources.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e290, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0266.712] GetFileType (hFile=0x198) returned 0x1 [0266.713] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x286f98 [0266.713] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e218 | out: lpNewFilePointer=0x0) returned 1 [0266.713] GetLastError () returned 0xb7 [0266.713] CloseHandle (hObject=0x198) returned 1 [0266.714] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238820 | out: hHeap=0x1f0000) returned 1 [0266.714] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389c0 | out: hHeap=0x1f0000) returned 1 [0266.714] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2853b0 | out: hHeap=0x1f0000) returned 1 [0266.714] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2858d8 | out: hHeap=0x1f0000) returned 1 [0266.715] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0266.715] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e30 | out: hHeap=0x1f0000) returned 1 [0266.715] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2365a0 | out: hHeap=0x1f0000) returned 1 [0266.715] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0266.715] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8dc8 | out: hHeap=0x1f0000) returned 1 [0266.715] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232dd8 | out: hHeap=0x1f0000) returned 1 [0266.715] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0266.715] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0266.715] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x255c88 | out: hHeap=0x1f0000) returned 1 [0266.715] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2339e0 | out: hHeap=0x1f0000) returned 1 [0266.716] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238e18 | out: hHeap=0x1f0000) returned 1 [0266.716] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238890 | out: hHeap=0x1f0000) returned 1 [0266.716] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0266.716] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0266.716] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238850 | out: hHeap=0x1f0000) returned 1 [0266.716] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0266.716] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0266.716] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389b0 | out: hHeap=0x1f0000) returned 1 [0266.716] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285ae8 | out: hHeap=0x1f0000) returned 1 [0266.717] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0266.717] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236538 | out: hHeap=0x1f0000) returned 1 [0266.717] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228cb0 | out: hHeap=0x1f0000) returned 1 [0266.717] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0266.717] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0266.717] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228b00 | out: hHeap=0x1f0000) returned 1 [0266.717] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388d0 | out: hHeap=0x1f0000) returned 1 [0266.717] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238810 | out: hHeap=0x1f0000) returned 1 [0266.717] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28cfc8 | out: hHeap=0x1f0000) returned 1 [0266.718] CloseHandle (hObject=0x1e8) returned 1 [0266.718] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387e0 | out: hHeap=0x1f0000) returned 1 [0266.718] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238970 | out: hHeap=0x1f0000) returned 1 [0266.718] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237620 | out: hHeap=0x1f0000) returned 1 [0266.719] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24bdf0 | out: hHeap=0x1f0000) returned 1 [0266.719] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0266.719] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204dd0 | out: hHeap=0x1f0000) returned 1 [0266.719] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28dfd0 | out: hHeap=0x1f0000) returned 1 [0266.719] CloseHandle (hObject=0x21c) returned 1 [0266.720] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238950 | out: hHeap=0x1f0000) returned 1 [0266.720] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238840 | out: hHeap=0x1f0000) returned 1 [0266.720] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad580 | out: hHeap=0x1f0000) returned 1 [0266.720] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204db0 | out: hHeap=0x1f0000) returned 1 [0266.720] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21b438 | out: hHeap=0x1f0000) returned 1 [0266.720] CloseHandle (hObject=0x174) returned 1 [0266.721] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238830 | out: hHeap=0x1f0000) returned 1 [0266.721] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238980 | out: hHeap=0x1f0000) returned 1 [0266.721] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aded8 | out: hHeap=0x1f0000) returned 1 [0266.721] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387f0 | out: hHeap=0x1f0000) returned 1 [0266.721] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238990 | out: hHeap=0x1f0000) returned 1 [0266.721] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238800 | out: hHeap=0x1f0000) returned 1 [0266.721] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238960 | out: hHeap=0x1f0000) returned 1 [0266.721] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233238 | out: hHeap=0x1f0000) returned 1 [0266.722] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24fd60 | out: hHeap=0x1f0000) returned 1 [0266.722] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232ba8 | out: hHeap=0x1f0000) returned 1 [0266.722] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206928 | out: hHeap=0x1f0000) returned 1 [0266.722] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0266.722] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210240 | out: hHeap=0x1f0000) returned 1 [0266.722] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab3c8 | out: hHeap=0x1f0000) returned 1 [0266.723] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x258298 | out: hHeap=0x1f0000) returned 1 [0266.723] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2337b0 | out: hHeap=0x1f0000) returned 1 [0266.723] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238d38 | out: hHeap=0x1f0000) returned 1 [0266.723] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2364d0 | out: hHeap=0x1f0000) returned 1 [0266.723] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ee88 | out: hHeap=0x1f0000) returned 1 [0266.723] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228a28 | out: hHeap=0x1f0000) returned 1 [0266.723] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0266.723] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\3076\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\3076\\setupresources.dll")) returned 1 [0266.725] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0266.725] FindClose (in: hFindFile=0x24e900 | out: hFindFile=0x24e900) returned 1 [0266.726] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0266.726] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f350 | out: hHeap=0x1f0000) returned 1 [0266.726] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0266.726] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228518 | out: hHeap=0x1f0000) returned 1 [0266.726] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228a28 [0266.726] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0266.726] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22ee88 [0266.726] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228b00 [0266.727] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\3082\\*", lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e7c0 [0266.727] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228440 [0266.727] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228b00 | out: hHeap=0x1f0000) returned 1 [0266.727] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0266.727] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0266.727] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228758 [0266.728] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228440 | out: hHeap=0x1f0000) returned 1 [0266.728] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0266.728] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0266.728] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xbfd, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0266.728] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0266.728] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228c68 [0266.728] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x2365a0 [0266.728] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228c68 | out: hHeap=0x1f0000) returned 1 [0266.728] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228758 | out: hHeap=0x1f0000) returned 1 [0266.729] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0266.729] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\3082\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3082\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0266.730] GetFileType (hFile=0x174) returned 0x1 [0266.730] CloseHandle (hObject=0x174) returned 1 [0266.730] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8d18 [0266.731] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\3082\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3082\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x173eb6c | out: lpFileInformation=0x173eb6c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xbfd)) returned 1 [0266.731] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0266.731] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8d18 [0266.731] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\3082\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3082\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x173eb7c | out: lpFileInformation=0x173eb7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xbfd)) returned 1 [0266.731] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0266.731] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8d18 [0266.731] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0266.731] GetLastError () returned 0x0 [0266.732] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0266.732] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228b00 [0266.732] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f350 [0266.732] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8d18 [0266.732] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c58 [0266.732] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0266.733] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x212ad0) returned 1 [0266.734] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238000 | out: pbBuffer=0x238000) returned 1 [0266.734] CryptReleaseContext (hProv=0x212ad0, dwFlags=0x0) returned 1 [0266.734] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0266.734] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x258298 [0266.734] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x232ba8 [0266.734] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=42410308893) returned 1 [0266.734] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0266.735] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=42410353799) returned 1 [0266.735] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0266.735] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239010 [0266.735] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x254980 [0266.735] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x233008 [0266.736] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x2abe58 [0266.736] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210240 [0266.736] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2066b8 [0266.736] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210258 [0266.736] GetLastError () returned 0x0 [0266.736] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236538 [0266.737] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a4d0 [0266.737] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236538 | out: hHeap=0x1f0000) returned 1 [0266.737] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xee) returned 0x2b1890 [0266.737] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a4d0 | out: hHeap=0x1f0000) returned 1 [0266.737] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389b0 [0266.738] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238890 [0266.921] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\3082\\eula.rtf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\3082\\eula.rtf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e230, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0266.924] GetFileType (hFile=0x174) returned 0x1 [0266.925] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238950 [0266.925] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238910 [0266.926] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\3082\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3082\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0266.927] GetFileType (hFile=0x21c) returned 0x1 [0266.927] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204dd0 [0266.927] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bd0 [0266.927] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad1e8 [0266.927] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238900 [0266.927] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238960 [0266.928] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\3082\\eula.rtf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\3082\\eula.rtf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0266.928] GetFileType (hFile=0x1e8) returned 0x1 [0266.928] GetLastError () returned 0xb7 [0266.929] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe4) returned 0x21af88 [0266.929] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0266.929] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204db0 [0266.929] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ef0 [0266.929] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad9d0 [0266.929] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387f0 [0266.929] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388d0 [0266.930] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\3082\\eula.rtf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\3082\\eula.rtf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0266.930] GetFileType (hFile=0x198) returned 0x1 [0266.931] GetLastError () returned 0xb7 [0266.931] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e30 [0266.931] GetLastError () returned 0xb7 [0266.931] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bd0 [0266.931] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d90 [0266.931] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d30 [0266.931] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb8) returned 0x2370e0 [0266.932] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389c0 [0266.932] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388a0 [0266.932] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\3082\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3082\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1a4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0266.933] GetFileType (hFile=0x1c0) returned 0x1 [0266.933] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28afb8 [0266.933] ReadFile (in: hFile=0x1c0, lpBuffer=0x28afb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e100, lpOverlapped=0x0 | out: lpBuffer=0x28afb8*, lpNumberOfBytesRead=0x173e100*=0xbfd, lpOverlapped=0x0) returned 1 [0266.937] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24a9c8 [0266.937] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28dfd0 [0266.937] GetLastError () returned 0x0 [0266.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210198 [0266.938] GetLastError () returned 0x0 [0266.940] CloseHandle (hObject=0x174) returned 1 [0266.940] CloseHandle (hObject=0x21c) returned 1 [0266.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387e0 [0266.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238830 [0266.943] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\3082\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3082\\eula.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0266.945] GetFileType (hFile=0x21c) returned 0x1 [0266.946] GetLastError () returned 0xb7 [0266.946] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x286f98 [0266.946] GetLastError () returned 0xb7 [0266.948] CloseHandle (hObject=0x21c) returned 1 [0266.948] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\3082\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3082\\eula.rtf")) returned 0 [0266.949] GetLastError () returned 0x20 [0266.949] GetLastError () returned 0x20 [0266.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228680 [0266.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238168 [0266.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2384b0 [0266.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x228bd8 [0266.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ef0 [0266.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bb0 [0266.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x238840 [0266.950] GetLastError () returned 0x20 [0266.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239208 [0266.950] GetLastError () returned 0x20 [0266.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238d00 [0266.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236608 [0266.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2380a0 [0266.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285bf0 [0266.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238920 [0266.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0266.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210210 [0266.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238800 [0266.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0266.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101b0 [0266.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238370 [0266.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285cf8 [0266.952] GetLastError () returned 0x20 [0266.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238930 [0266.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238880 [0266.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238810 [0266.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238880 | out: hHeap=0x1f0000) returned 1 [0266.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238850 [0266.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238810 | out: hHeap=0x1f0000) returned 1 [0266.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238930 | out: hHeap=0x1f0000) returned 1 [0266.953] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388e0 [0266.953] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101c8 [0266.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388e0 | out: hHeap=0x1f0000) returned 1 [0266.953] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101e0 [0266.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0266.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238850 | out: hHeap=0x1f0000) returned 1 [0266.953] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101c8 [0266.953] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2100a8 [0266.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0266.953] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0266.954] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2100a8 | out: hHeap=0x1f0000) returned 1 [0266.954] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0266.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0266.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204e70 [0266.954] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0266.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d30 [0266.954] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e70 | out: hHeap=0x1f0000) returned 1 [0266.954] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0266.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e30 [0266.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238398 [0266.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e30 | out: hHeap=0x1f0000) returned 1 [0266.955] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204c50 [0266.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0266.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d30 | out: hHeap=0x1f0000) returned 1 [0266.955] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204c90 [0266.955] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206628 [0266.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c90 | out: hHeap=0x1f0000) returned 1 [0266.955] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2381b8 [0266.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206628 | out: hHeap=0x1f0000) returned 1 [0266.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c50 | out: hHeap=0x1f0000) returned 1 [0266.956] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388c0 [0266.956] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101c8 [0266.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388c0 | out: hHeap=0x1f0000) returned 1 [0266.956] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0266.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0266.956] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204c70 [0267.268] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0267.268] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x2067d8 [0267.268] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c70 | out: hHeap=0x1f0000) returned 1 [0267.268] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2067d8 | out: hHeap=0x1f0000) returned 1 [0267.268] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0267.269] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0267.269] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0267.269] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285bf0 | out: hHeap=0x1f0000) returned 1 [0267.270] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0267.270] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c90 [0267.270] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0267.270] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x213350) returned 1 [0267.271] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238168 | out: pbBuffer=0x238168) returned 1 [0267.272] CryptReleaseContext (hProv=0x213350, dwFlags=0x0) returned 1 [0267.272] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0267.272] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238398 [0267.272] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381b8 [0267.272] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239048 [0267.272] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0267.272] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0267.273] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239048 | out: hHeap=0x1f0000) returned 1 [0267.273] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8dc8 [0267.273] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0267.273] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x236468 [0267.273] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238078 [0267.273] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2856c8 [0267.274] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cf0 [0267.274] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236538 [0267.274] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2380a0 [0267.274] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2857d0 [0267.274] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388b0 [0267.274] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0267.275] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0267.275] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238930 [0267.275] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0267.275] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210120 [0267.275] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210120 | out: hHeap=0x1f0000) returned 1 [0267.275] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0267.275] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238930 | out: hHeap=0x1f0000) returned 1 [0267.276] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0267.276] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0267.276] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388b0 | out: hHeap=0x1f0000) returned 1 [0267.276] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2857d0 | out: hHeap=0x1f0000) returned 1 [0267.276] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0267.277] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236538 | out: hHeap=0x1f0000) returned 1 [0267.277] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238ec0 [0267.277] GetLastError () returned 0x0 [0267.277] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238f68 [0267.278] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0267.278] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0267.278] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0267.278] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0267.278] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0267.278] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0267.279] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x24e5c0 [0267.279] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285e00 [0267.279] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0267.279] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0267.279] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0267.279] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0267.280] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x284f90 [0267.280] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0267.280] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0267.280] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fb50 [0267.280] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x24fd60 [0267.280] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x232cc0 [0267.281] QueryPerformanceCounter (in: lpPerformanceCount=0x173dee0 | out: lpPerformanceCount=0x173dee0*=42464954467) returned 1 [0267.281] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173df20 | out: lpSystemTimeAsFileTime=0x173df20) [0267.281] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238970 [0267.281] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0267.281] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d30 [0267.282] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d30 | out: hHeap=0x1f0000) returned 1 [0267.282] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0267.282] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0267.282] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c10 [0267.282] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c10 | out: hHeap=0x1f0000) returned 1 [0267.282] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0267.283] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238970 | out: hHeap=0x1f0000) returned 1 [0267.283] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0267.283] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238d70 [0267.283] GetLastError () returned 0x0 [0267.283] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0267.284] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0267.284] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0267.284] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238398 [0267.284] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238168 [0267.284] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0267.284] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0267.284] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238000 [0267.285] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0267.285] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x222ee8 [0267.285] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0267.286] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0267.286] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0267.286] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0267.286] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0267.286] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2380a0 [0267.286] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381e0 [0267.287] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0267.287] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0267.287] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0267.287] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0267.287] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x234b90 [0267.287] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b90 | out: hHeap=0x1f0000) returned 1 [0267.287] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0267.288] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0267.288] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101e0 [0267.288] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228758 [0267.288] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381e0 [0267.288] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2380a0 [0267.288] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238708 [0267.288] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238528 [0267.289] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0267.289] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0267.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0267.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2380a0 [0267.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381e0 [0267.289] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0267.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0267.290] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0267.290] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206628 [0267.290] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x2b5340 [0267.290] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b5340 | out: hHeap=0x1f0000) returned 1 [0267.290] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206628 | out: hHeap=0x1f0000) returned 1 [0267.290] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0267.291] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0267.291] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0267.291] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0267.291] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204e30 [0267.291] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0267.291] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0267.291] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0267.292] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aa6d0 [0267.292] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0267.292] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238528 | out: hHeap=0x1f0000) returned 1 [0267.292] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238708 | out: hHeap=0x1f0000) returned 1 [0267.292] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228758 | out: hHeap=0x1f0000) returned 1 [0267.293] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0267.293] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e30 | out: hHeap=0x1f0000) returned 1 [0267.293] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0267.293] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0267.293] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a9b40 [0267.293] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a9b40 | out: hHeap=0x1f0000) returned 1 [0267.293] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ee8 | out: hHeap=0x1f0000) returned 1 [0267.294] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0267.294] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0267.294] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0267.294] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0267.294] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0267.294] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0267.295] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0267.295] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aa5a8 [0267.295] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a9a18 [0267.295] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aa5a8 | out: hHeap=0x1f0000) returned 1 [0267.295] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a9a18 | out: hHeap=0x1f0000) returned 1 [0267.295] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aa6d0 | out: hHeap=0x1f0000) returned 1 [0267.295] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0267.296] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x284f90 | out: hHeap=0x1f0000) returned 1 [0267.296] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24e5c0 | out: hHeap=0x1f0000) returned 1 [0267.296] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x232dd8 [0267.296] GetLastError () returned 0x0 [0267.297] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238810 [0267.297] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388f0 [0267.298] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\3082\\eula.rtf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\3082\\eula.rtf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e290, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0267.299] GetFileType (hFile=0x174) returned 0x1 [0267.300] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x286f98 [0267.300] SetFilePointerEx (in: hFile=0x174, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e218 | out: lpNewFilePointer=0x0) returned 1 [0267.490] GetLastError () returned 0xb7 [0267.490] CloseHandle (hObject=0x174) returned 1 [0267.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388f0 | out: hHeap=0x1f0000) returned 1 [0267.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238810 | out: hHeap=0x1f0000) returned 1 [0267.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285e00 | out: hHeap=0x1f0000) returned 1 [0267.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2856c8 | out: hHeap=0x1f0000) returned 1 [0267.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0267.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cf0 | out: hHeap=0x1f0000) returned 1 [0267.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0267.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0267.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8dc8 | out: hHeap=0x1f0000) returned 1 [0267.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232dd8 | out: hHeap=0x1f0000) returned 1 [0267.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0267.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0267.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24fd60 | out: hHeap=0x1f0000) returned 1 [0267.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232cc0 | out: hHeap=0x1f0000) returned 1 [0267.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c90 | out: hHeap=0x1f0000) returned 1 [0267.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238840 | out: hHeap=0x1f0000) returned 1 [0267.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0267.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0267.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238800 | out: hHeap=0x1f0000) returned 1 [0267.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0267.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0267.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238920 | out: hHeap=0x1f0000) returned 1 [0267.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285cf8 | out: hHeap=0x1f0000) returned 1 [0267.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0267.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236608 | out: hHeap=0x1f0000) returned 1 [0267.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228bd8 | out: hHeap=0x1f0000) returned 1 [0267.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0267.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0267.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228680 | out: hHeap=0x1f0000) returned 1 [0267.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238830 | out: hHeap=0x1f0000) returned 1 [0267.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387e0 | out: hHeap=0x1f0000) returned 1 [0267.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28afb8 | out: hHeap=0x1f0000) returned 1 [0267.495] CloseHandle (hObject=0x1c0) returned 1 [0267.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388a0 | out: hHeap=0x1f0000) returned 1 [0267.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389c0 | out: hHeap=0x1f0000) returned 1 [0267.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2370e0 | out: hHeap=0x1f0000) returned 1 [0267.497] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24a9c8 | out: hHeap=0x1f0000) returned 1 [0267.497] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0267.497] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bd0 | out: hHeap=0x1f0000) returned 1 [0267.497] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28dfd0 | out: hHeap=0x1f0000) returned 1 [0267.497] CloseHandle (hObject=0x198) returned 1 [0267.498] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388d0 | out: hHeap=0x1f0000) returned 1 [0267.498] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387f0 | out: hHeap=0x1f0000) returned 1 [0267.498] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad9d0 | out: hHeap=0x1f0000) returned 1 [0267.498] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d70 | out: hHeap=0x1f0000) returned 1 [0267.498] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21af88 | out: hHeap=0x1f0000) returned 1 [0267.499] CloseHandle (hObject=0x1e8) returned 1 [0267.499] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238960 | out: hHeap=0x1f0000) returned 1 [0267.499] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238900 | out: hHeap=0x1f0000) returned 1 [0267.499] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad1e8 | out: hHeap=0x1f0000) returned 1 [0267.500] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238910 | out: hHeap=0x1f0000) returned 1 [0267.500] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238950 | out: hHeap=0x1f0000) returned 1 [0267.500] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238890 | out: hHeap=0x1f0000) returned 1 [0267.500] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389b0 | out: hHeap=0x1f0000) returned 1 [0267.500] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b1890 | out: hHeap=0x1f0000) returned 1 [0267.500] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x254980 | out: hHeap=0x1f0000) returned 1 [0267.500] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233008 | out: hHeap=0x1f0000) returned 1 [0267.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2066b8 | out: hHeap=0x1f0000) returned 1 [0267.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0267.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210240 | out: hHeap=0x1f0000) returned 1 [0267.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abe58 | out: hHeap=0x1f0000) returned 1 [0267.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x258298 | out: hHeap=0x1f0000) returned 1 [0267.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232ba8 | out: hHeap=0x1f0000) returned 1 [0267.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c58 | out: hHeap=0x1f0000) returned 1 [0267.502] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0267.502] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f350 | out: hHeap=0x1f0000) returned 1 [0267.502] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228b00 | out: hHeap=0x1f0000) returned 1 [0267.502] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0267.502] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\3082\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3082\\eula.rtf")) returned 1 [0267.506] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1387c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0267.506] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239048 [0267.506] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2287a0 [0267.506] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236608 [0267.506] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2287a0 | out: hHeap=0x1f0000) returned 1 [0267.506] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2365a0 | out: hHeap=0x1f0000) returned 1 [0267.507] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239048 | out: hHeap=0x1f0000) returned 1 [0267.507] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\3082\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3082\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0267.508] GetFileType (hFile=0x1e8) returned 0x1 [0267.509] CloseHandle (hObject=0x1e8) returned 1 [0267.509] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2365a0 [0267.509] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\3082\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3082\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x173eb6c | out: lpFileInformation=0x173eb6c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1387c)) returned 1 [0267.510] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2365a0 | out: hHeap=0x1f0000) returned 1 [0267.510] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236468 [0267.510] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\3082\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3082\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x173eb7c | out: lpFileInformation=0x173eb7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1387c)) returned 1 [0267.510] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0267.510] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236468 [0267.510] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0267.511] GetLastError () returned 0x0 [0267.511] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0267.511] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228680 [0267.511] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f350 [0267.511] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236468 [0267.512] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c58 [0267.512] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0267.512] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x212ad0) returned 1 [0267.513] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238280 | out: pbBuffer=0x238280) returned 1 [0267.513] CryptReleaseContext (hProv=0x212ad0, dwFlags=0x0) returned 1 [0267.513] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0267.513] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x258298 [0267.513] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x232dd8 [0267.513] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=42488246579) returned 1 [0267.514] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0267.514] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=42488298428) returned 1 [0267.514] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0267.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239278 [0267.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x252370 [0267.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x233350 [0267.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x2ab7d8 [0267.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210240 [0267.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2067d8 [0267.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101b0 [0267.516] GetLastError () returned 0x0 [0267.516] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2aea98 [0267.516] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad918 [0267.516] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aea98 | out: hHeap=0x1f0000) returned 1 [0267.516] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x106) returned 0x233468 [0267.517] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad918 | out: hHeap=0x1f0000) returned 1 [0267.517] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238900 [0267.517] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238800 [0267.518] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\3082\\LocalizedData.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\3082\\localizeddata.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e230, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0267.523] GetFileType (hFile=0x1e8) returned 0x1 [0267.524] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238910 [0267.524] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238960 [0267.525] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\3082\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3082\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0267.526] GetFileType (hFile=0x198) returned 0x1 [0267.527] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bb0 [0267.527] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0267.527] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad860 [0267.527] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238970 [0267.528] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238920 [0267.529] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\3082\\LocalizedData.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\3082\\localizeddata.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0267.529] GetFileType (hFile=0x1c0) returned 0x1 [0267.530] GetLastError () returned 0xb7 [0267.530] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe4) returned 0x21b618 [0267.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c10 [0267.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e30 [0267.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bd0 [0267.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad7a8 [0267.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388b0 [0267.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238870 [0267.532] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\3082\\LocalizedData.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\3082\\localizeddata.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0267.533] GetFileType (hFile=0x174) returned 0x1 [0267.533] GetLastError () returned 0xb7 [0267.534] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cf0 [0267.534] GetLastError () returned 0xb7 [0267.534] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f30 [0267.534] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cf0 [0267.534] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c90 [0267.534] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb8) returned 0x237020 [0267.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238980 [0267.879] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387e0 [0268.205] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\3082\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3082\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1a4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0268.206] GetFileType (hFile=0x19c) returned 0x1 [0268.206] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28dfd0 [0268.207] ReadFile (in: hFile=0x19c, lpBuffer=0x28dfd0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e100, lpOverlapped=0x0 | out: lpBuffer=0x28dfd0*, lpNumberOfBytesRead=0x173e100*=0x1000, lpOverlapped=0x0) returned 1 [0268.244] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24d620 [0268.245] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x286f98 [0268.245] GetLastError () returned 0x0 [0268.250] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0268.250] GetLastError () returned 0x0 [0268.250] CloseHandle (hObject=0x1e8) returned 1 [0268.251] CloseHandle (hObject=0x198) returned 1 [0268.252] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238850 [0268.252] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389b0 [0268.253] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\3082\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3082\\localizeddata.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0268.256] GetFileType (hFile=0x198) returned 0x1 [0268.257] GetLastError () returned 0xb7 [0268.257] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x290fe8 [0268.257] GetLastError () returned 0xb7 [0268.259] CloseHandle (hObject=0x198) returned 1 [0268.260] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\3082\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3082\\localizeddata.xml")) returned 0 [0268.260] GetLastError () returned 0x20 [0268.260] GetLastError () returned 0x20 [0268.261] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228758 [0268.261] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2384b0 [0268.261] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2380a0 [0268.261] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x228b00 [0268.261] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c30 [0268.261] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ef0 [0268.261] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x238930 [0268.262] GetLastError () returned 0x20 [0268.262] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239208 [0268.262] GetLastError () returned 0x20 [0268.262] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238f30 [0268.262] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2364d0 [0268.262] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238168 [0268.263] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285098 [0268.263] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238940 [0268.263] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0268.263] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210210 [0268.263] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238880 [0268.263] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0268.263] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0268.264] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238280 [0268.264] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2853b0 [0268.264] GetLastError () returned 0x20 [0268.264] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x2389c0 [0268.264] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238810 [0268.264] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238950 [0268.264] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238810 | out: hHeap=0x1f0000) returned 1 [0268.265] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388f0 [0268.265] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238950 | out: hHeap=0x1f0000) returned 1 [0268.265] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389c0 | out: hHeap=0x1f0000) returned 1 [0268.265] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238890 [0268.265] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210258 [0268.265] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238890 | out: hHeap=0x1f0000) returned 1 [0268.265] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210198 [0268.265] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0268.266] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388f0 | out: hHeap=0x1f0000) returned 1 [0268.266] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210258 [0268.266] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210120 [0268.266] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0268.266] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210258 [0268.266] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210120 | out: hHeap=0x1f0000) returned 1 [0268.266] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0268.266] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210198 [0268.266] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204b90 [0268.267] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0268.267] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c70 [0268.267] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204b90 | out: hHeap=0x1f0000) returned 1 [0268.267] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0268.267] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0268.267] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238190 [0268.267] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d70 | out: hHeap=0x1f0000) returned 1 [0268.267] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204c90 [0268.268] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0268.268] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c70 | out: hHeap=0x1f0000) returned 1 [0268.268] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204f50 [0268.268] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206838 [0268.268] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f50 | out: hHeap=0x1f0000) returned 1 [0268.268] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2381e0 [0268.268] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206838 | out: hHeap=0x1f0000) returned 1 [0268.269] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c90 | out: hHeap=0x1f0000) returned 1 [0268.269] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238950 [0268.269] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210258 [0268.269] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238950 | out: hHeap=0x1f0000) returned 1 [0268.269] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210198 [0268.269] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0268.269] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204ef0 [0268.270] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0268.270] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x2068c8 [0268.270] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ef0 | out: hHeap=0x1f0000) returned 1 [0268.270] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2068c8 | out: hHeap=0x1f0000) returned 1 [0268.270] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0268.270] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0268.270] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0268.271] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285098 | out: hHeap=0x1f0000) returned 1 [0268.271] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0268.271] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2390b8 [0268.271] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0268.271] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x2131b8) returned 1 [0268.272] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2384b0 | out: pbBuffer=0x2384b0) returned 1 [0268.272] CryptReleaseContext (hProv=0x2131b8, dwFlags=0x0) returned 1 [0268.272] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0268.272] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238370 [0268.273] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238168 [0268.273] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238f30 [0268.273] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0268.273] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0268.273] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238f30 | out: hHeap=0x1f0000) returned 1 [0268.273] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8e20 [0268.273] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210198 [0268.273] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x236538 [0268.274] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2381b8 [0268.274] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2855c0 [0268.274] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204b90 [0268.274] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2365a0 [0268.274] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2384b0 [0268.274] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2859e0 [0268.274] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388c0 [0268.275] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0268.275] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210258 [0268.275] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238990 [0268.275] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0268.275] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20fef8 [0268.275] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20fef8 | out: hHeap=0x1f0000) returned 1 [0268.275] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0268.276] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238990 | out: hHeap=0x1f0000) returned 1 [0268.276] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0268.475] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0268.476] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388c0 | out: hHeap=0x1f0000) returned 1 [0268.476] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2859e0 | out: hHeap=0x1f0000) returned 1 [0268.476] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0268.476] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2365a0 | out: hHeap=0x1f0000) returned 1 [0268.476] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x2392b0 [0268.476] GetLastError () returned 0x0 [0268.477] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238f30 [0268.478] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0268.478] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0268.478] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0268.478] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0268.478] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0268.478] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0268.479] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x24e900 [0268.479] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x284f90 [0268.479] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0268.479] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0268.479] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0268.479] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0268.479] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285e00 [0268.479] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0268.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0268.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fe70 [0268.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x251068 [0268.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x232ef0 [0268.480] QueryPerformanceCounter (in: lpPerformanceCount=0x173dee0 | out: lpPerformanceCount=0x173dee0*=42584911391) returned 1 [0268.480] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173df20 | out: lpSystemTimeAsFileTime=0x173df20) [0268.481] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238860 [0268.481] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0268.481] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d30 [0268.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d30 | out: hHeap=0x1f0000) returned 1 [0268.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0268.481] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0268.481] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cb0 [0268.482] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cb0 | out: hHeap=0x1f0000) returned 1 [0268.482] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0268.482] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238860 | out: hHeap=0x1f0000) returned 1 [0268.482] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0268.482] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238c90 [0268.482] GetLastError () returned 0x0 [0268.483] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0268.483] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0268.483] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0268.483] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238370 [0268.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238190 [0268.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0268.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0268.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2384b0 [0268.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0268.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x222ee8 [0268.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0268.485] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0268.485] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0268.485] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0268.485] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0268.485] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381e0 [0268.486] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238398 [0268.486] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0268.486] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0268.486] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0268.486] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0268.486] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x234b90 [0268.486] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b90 | out: hHeap=0x1f0000) returned 1 [0268.487] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0268.487] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0268.487] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210258 [0268.487] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228bd8 [0268.487] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381e0 [0268.487] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238398 [0268.487] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238730 [0268.488] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238690 [0268.488] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0268.488] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0268.488] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0268.488] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238398 [0268.488] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381e0 [0268.489] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0268.489] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0268.489] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0268.489] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206688 [0268.489] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x2b5788 [0268.489] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b5788 | out: hHeap=0x1f0000) returned 1 [0268.489] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206688 | out: hHeap=0x1f0000) returned 1 [0268.490] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0268.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0268.490] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0268.490] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0268.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204d10 [0268.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0268.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0268.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0268.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a9c68 [0268.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0268.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238690 | out: hHeap=0x1f0000) returned 1 [0268.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238730 | out: hHeap=0x1f0000) returned 1 [0268.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228bd8 | out: hHeap=0x1f0000) returned 1 [0268.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0268.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d10 | out: hHeap=0x1f0000) returned 1 [0268.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0268.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0268.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a9328 [0268.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a9328 | out: hHeap=0x1f0000) returned 1 [0268.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ee8 | out: hHeap=0x1f0000) returned 1 [0268.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0268.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0268.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0268.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0268.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0268.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0268.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0268.494] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a9d90 [0268.494] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aaa48 [0268.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a9d90 | out: hHeap=0x1f0000) returned 1 [0268.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aaa48 | out: hHeap=0x1f0000) returned 1 [0268.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a9c68 | out: hHeap=0x1f0000) returned 1 [0268.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0268.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285e00 | out: hHeap=0x1f0000) returned 1 [0268.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24e900 | out: hHeap=0x1f0000) returned 1 [0268.495] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x233580 [0268.495] GetLastError () returned 0x0 [0268.495] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388a0 [0268.496] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388d0 [0268.588] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\3082\\LocalizedData.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\3082\\localizeddata.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e290, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0268.588] GetFileType (hFile=0x1e8) returned 0x1 [0268.589] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28efd8 [0268.589] SetFilePointerEx (in: hFile=0x1e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e218 | out: lpNewFilePointer=0x0) returned 1 [0268.589] GetLastError () returned 0xb7 [0268.590] CloseHandle (hObject=0x1e8) returned 1 [0268.591] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388d0 | out: hHeap=0x1f0000) returned 1 [0268.591] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388a0 | out: hHeap=0x1f0000) returned 1 [0268.591] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x284f90 | out: hHeap=0x1f0000) returned 1 [0268.591] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2855c0 | out: hHeap=0x1f0000) returned 1 [0268.591] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0268.591] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204b90 | out: hHeap=0x1f0000) returned 1 [0268.592] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236538 | out: hHeap=0x1f0000) returned 1 [0268.592] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0268.592] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8e20 | out: hHeap=0x1f0000) returned 1 [0268.592] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233580 | out: hHeap=0x1f0000) returned 1 [0268.592] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0268.592] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0268.592] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x251068 | out: hHeap=0x1f0000) returned 1 [0268.593] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232ef0 | out: hHeap=0x1f0000) returned 1 [0268.593] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2390b8 | out: hHeap=0x1f0000) returned 1 [0268.593] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238930 | out: hHeap=0x1f0000) returned 1 [0268.593] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0268.593] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0268.593] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238880 | out: hHeap=0x1f0000) returned 1 [0268.593] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0268.593] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0268.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238940 | out: hHeap=0x1f0000) returned 1 [0268.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2853b0 | out: hHeap=0x1f0000) returned 1 [0268.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0268.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2364d0 | out: hHeap=0x1f0000) returned 1 [0268.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228b00 | out: hHeap=0x1f0000) returned 1 [0268.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0268.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0268.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228758 | out: hHeap=0x1f0000) returned 1 [0268.595] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389b0 | out: hHeap=0x1f0000) returned 1 [0268.595] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238850 | out: hHeap=0x1f0000) returned 1 [0268.595] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28dfd0 | out: hHeap=0x1f0000) returned 1 [0268.595] CloseHandle (hObject=0x19c) returned 1 [0268.596] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387e0 | out: hHeap=0x1f0000) returned 1 [0268.596] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238980 | out: hHeap=0x1f0000) returned 1 [0268.596] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237020 | out: hHeap=0x1f0000) returned 1 [0268.596] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24d620 | out: hHeap=0x1f0000) returned 1 [0268.597] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0268.597] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f30 | out: hHeap=0x1f0000) returned 1 [0268.597] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286f98 | out: hHeap=0x1f0000) returned 1 [0268.597] CloseHandle (hObject=0x174) returned 1 [0268.598] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238870 | out: hHeap=0x1f0000) returned 1 [0268.598] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388b0 | out: hHeap=0x1f0000) returned 1 [0268.598] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad7a8 | out: hHeap=0x1f0000) returned 1 [0268.598] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c10 | out: hHeap=0x1f0000) returned 1 [0268.598] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21b618 | out: hHeap=0x1f0000) returned 1 [0268.599] CloseHandle (hObject=0x1c0) returned 1 [0268.599] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238920 | out: hHeap=0x1f0000) returned 1 [0268.599] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238970 | out: hHeap=0x1f0000) returned 1 [0268.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad860 | out: hHeap=0x1f0000) returned 1 [0268.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238960 | out: hHeap=0x1f0000) returned 1 [0268.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238910 | out: hHeap=0x1f0000) returned 1 [0268.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238800 | out: hHeap=0x1f0000) returned 1 [0268.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238900 | out: hHeap=0x1f0000) returned 1 [0268.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233468 | out: hHeap=0x1f0000) returned 1 [0268.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x252370 | out: hHeap=0x1f0000) returned 1 [0268.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233350 | out: hHeap=0x1f0000) returned 1 [0268.601] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2067d8 | out: hHeap=0x1f0000) returned 1 [0268.601] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0268.601] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210240 | out: hHeap=0x1f0000) returned 1 [0268.601] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab7d8 | out: hHeap=0x1f0000) returned 1 [0268.601] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x258298 | out: hHeap=0x1f0000) returned 1 [0268.601] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232dd8 | out: hHeap=0x1f0000) returned 1 [0268.601] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c58 | out: hHeap=0x1f0000) returned 1 [0268.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0268.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f350 | out: hHeap=0x1f0000) returned 1 [0268.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228680 | out: hHeap=0x1f0000) returned 1 [0268.603] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0268.603] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\3082\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3082\\localizeddata.xml")) returned 1 [0268.609] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0268.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239278 [0268.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228518 [0268.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236468 [0268.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228518 | out: hHeap=0x1f0000) returned 1 [0268.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236608 | out: hHeap=0x1f0000) returned 1 [0268.610] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239278 | out: hHeap=0x1f0000) returned 1 [0268.610] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\3082\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\3082\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0268.611] GetFileType (hFile=0x1c0) returned 0x1 [0268.611] CloseHandle (hObject=0x1c0) returned 1 [0268.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2364d0 [0268.612] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\3082\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\3082\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x173eb6c | out: lpFileInformation=0x173eb6c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958)) returned 1 [0268.612] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2364d0 | out: hHeap=0x1f0000) returned 1 [0268.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2364d0 [0268.612] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\3082\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\3082\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x173eb7c | out: lpFileInformation=0x173eb7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958)) returned 1 [0268.613] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2364d0 | out: hHeap=0x1f0000) returned 1 [0268.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236608 [0268.613] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236608 | out: hHeap=0x1f0000) returned 1 [0268.613] GetLastError () returned 0x0 [0268.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0268.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228b00 [0268.614] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f350 [0268.614] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2365a0 [0268.614] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2392b0 [0268.614] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0268.614] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x212b58) returned 1 [0268.615] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2384b0 | out: pbBuffer=0x2384b0) returned 1 [0268.615] CryptReleaseContext (hProv=0x212b58, dwFlags=0x0) returned 1 [0268.616] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0268.616] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x258298 [0268.616] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x233120 [0268.616] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=42598592357) returned 1 [0268.618] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0268.618] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=42598696121) returned 1 [0268.618] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0268.618] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238d38 [0268.619] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x255c88 [0268.619] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x233468 [0268.619] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x2ab708 [0268.619] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210210 [0268.619] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206658 [0268.619] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101b0 [0268.619] GetLastError () returned 0x0 [0268.620] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae840 [0268.620] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2adbf8 [0268.620] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae840 | out: hHeap=0x1f0000) returned 1 [0268.620] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x106) returned 0x2339e0 [0268.620] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2adbf8 | out: hHeap=0x1f0000) returned 1 [0268.620] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387f0 [0268.621] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388c0 [0268.622] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\3082\\SetupResources.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\3082\\setupresources.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e230, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0268.623] GetFileType (hFile=0x1c0) returned 0x1 [0268.623] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238970 [0268.624] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238920 [0268.624] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\3082\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\3082\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0268.625] GetFileType (hFile=0x174) returned 0x1 [0268.625] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0268.625] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c10 [0268.625] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad918 [0268.625] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238800 [0268.626] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388e0 [0268.627] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\3082\\SetupResources.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\3082\\setupresources.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0268.627] GetFileType (hFile=0x19c) returned 0x1 [0268.628] GetLastError () returned 0xb7 [0268.628] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe4) returned 0x21b348 [0268.628] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f50 [0268.628] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cf0 [0268.628] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f30 [0268.628] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad4c8 [0268.629] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238860 [0268.629] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238850 [0268.630] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\3082\\SetupResources.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\3082\\setupresources.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0268.630] GetFileType (hFile=0x1e8) returned 0x1 [0268.631] GetLastError () returned 0xb7 [0268.631] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f70 [0268.631] GetLastError () returned 0xb7 [0268.632] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c30 [0268.632] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f30 [0268.632] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f70 [0268.632] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb8) returned 0x237aa0 [0268.632] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238870 [0268.633] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238880 [0268.868] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\3082\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\3082\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1a4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0268.869] GetFileType (hFile=0x198) returned 0x1 [0268.869] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28afb8 [0268.869] ReadFile (in: hFile=0x198, lpBuffer=0x28afb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e100, lpOverlapped=0x0 | out: lpBuffer=0x28afb8*, lpNumberOfBytesRead=0x173e100*=0x1000, lpOverlapped=0x0) returned 1 [0268.890] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24ca08 [0268.891] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x286f98 [0268.891] GetLastError () returned 0x0 [0268.894] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0268.894] GetLastError () returned 0x0 [0268.895] CloseHandle (hObject=0x1c0) returned 1 [0268.896] CloseHandle (hObject=0x174) returned 1 [0268.896] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389b0 [0268.897] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238830 [0268.898] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\3082\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\3082\\setupresources.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0268.900] GetFileType (hFile=0x174) returned 0x1 [0268.901] GetLastError () returned 0xb7 [0268.902] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28efd8 [0268.902] GetLastError () returned 0xb7 [0268.904] CloseHandle (hObject=0x174) returned 1 [0268.904] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\3082\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\3082\\setupresources.dll")) returned 0 [0268.904] GetLastError () returned 0x20 [0268.905] GetLastError () returned 0x20 [0268.905] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228bd8 [0268.905] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2384b0 [0268.905] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238398 [0268.905] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x228c68 [0268.906] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c50 [0268.906] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bf0 [0268.906] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x238900 [0268.906] GetLastError () returned 0x20 [0268.906] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239198 [0268.906] GetLastError () returned 0x20 [0268.907] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239048 [0268.907] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236608 [0268.907] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x237fd8 [0268.907] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2851a0 [0268.907] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388d0 [0268.907] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0268.907] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210258 [0268.908] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238810 [0268.908] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0268.908] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210240 [0268.908] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238190 [0268.908] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2859e0 [0268.908] GetLastError () returned 0x20 [0268.908] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x2388b0 [0268.909] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238930 [0268.909] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238960 [0268.909] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238930 | out: hHeap=0x1f0000) returned 1 [0268.909] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238840 [0268.909] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238960 | out: hHeap=0x1f0000) returned 1 [0268.909] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388b0 | out: hHeap=0x1f0000) returned 1 [0268.909] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238890 [0268.910] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210198 [0268.910] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238890 | out: hHeap=0x1f0000) returned 1 [0268.910] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101e0 [0268.910] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0268.910] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238840 | out: hHeap=0x1f0000) returned 1 [0268.910] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210198 [0268.910] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20fef8 [0268.911] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0268.911] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210198 [0268.911] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20fef8 | out: hHeap=0x1f0000) returned 1 [0268.911] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0268.911] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0268.911] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204df0 [0268.911] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0268.912] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d30 [0268.912] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204df0 | out: hHeap=0x1f0000) returned 1 [0268.912] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0268.912] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e30 [0268.912] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2380a0 [0268.912] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e30 | out: hHeap=0x1f0000) returned 1 [0268.912] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204ef0 [0268.913] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0268.913] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d30 | out: hHeap=0x1f0000) returned 1 [0268.913] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204f10 [0268.913] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x2068c8 [0268.913] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f10 | out: hHeap=0x1f0000) returned 1 [0268.913] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2381b8 [0268.913] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2068c8 | out: hHeap=0x1f0000) returned 1 [0268.913] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ef0 | out: hHeap=0x1f0000) returned 1 [0268.914] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238940 [0268.914] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210198 [0268.914] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238940 | out: hHeap=0x1f0000) returned 1 [0268.914] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0268.915] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0268.915] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204c70 [0268.915] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0268.916] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x2067d8 [0268.916] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c70 | out: hHeap=0x1f0000) returned 1 [0268.916] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2067d8 | out: hHeap=0x1f0000) returned 1 [0268.916] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0268.916] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0268.916] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0268.917] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2851a0 | out: hHeap=0x1f0000) returned 1 [0268.917] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0268.917] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c58 [0268.917] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0268.917] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x212f98) returned 1 [0268.918] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238078 | out: pbBuffer=0x238078) returned 1 [0268.918] CryptReleaseContext (hProv=0x212f98, dwFlags=0x0) returned 1 [0268.919] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0268.919] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2384b0 [0268.919] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381b8 [0268.919] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238f30 [0268.919] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0268.919] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0268.920] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238f30 | out: hHeap=0x1f0000) returned 1 [0268.920] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8d18 [0268.920] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210198 [0268.920] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x2364d0 [0268.920] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2381e0 [0268.920] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2856c8 [0268.920] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c50 [0268.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236538 [0268.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2384b0 [0268.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x284f90 [0268.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387e0 [0268.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0268.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0268.922] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389c0 [0268.922] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0268.922] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210018 [0268.922] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210018 | out: hHeap=0x1f0000) returned 1 [0268.922] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0268.922] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389c0 | out: hHeap=0x1f0000) returned 1 [0268.923] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0268.923] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0268.923] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387e0 | out: hHeap=0x1f0000) returned 1 [0268.923] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x284f90 | out: hHeap=0x1f0000) returned 1 [0268.923] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0268.923] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236538 | out: hHeap=0x1f0000) returned 1 [0268.924] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238c90 [0268.924] GetLastError () returned 0x0 [0268.924] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238c90 [0268.924] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0268.925] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0268.925] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0268.925] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0268.925] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0268.925] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0268.925] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x24ea80 [0268.925] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2851a0 [0268.926] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0268.926] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0268.926] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0268.926] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0268.926] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2857d0 [0268.926] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0268.927] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0268.927] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22ff38 [0268.927] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x252370 [0268.927] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x232cc0 [0268.927] QueryPerformanceCounter (in: lpPerformanceCount=0x173dee0 | out: lpPerformanceCount=0x173dee0*=42629630478) returned 1 [0268.928] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173df20 | out: lpSystemTimeAsFileTime=0x173df20) [0268.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x2388a0 [0268.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0268.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f10 [0268.928] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f10 | out: hHeap=0x1f0000) returned 1 [0268.929] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0268.929] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0268.929] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204b90 [0268.929] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204b90 | out: hHeap=0x1f0000) returned 1 [0268.929] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0268.929] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388a0 | out: hHeap=0x1f0000) returned 1 [0268.930] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0269.132] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238cc8 [0269.132] GetLastError () returned 0x0 [0269.133] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0269.133] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0269.134] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0269.134] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238370 [0269.134] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238078 [0269.134] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0269.134] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0269.134] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2380a0 [0269.134] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0269.134] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x222ee8 [0269.135] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0269.135] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0269.135] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0269.135] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0269.135] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0269.135] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238730 [0269.135] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238758 [0269.135] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238730 | out: hHeap=0x1f0000) returned 1 [0269.135] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0269.135] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238758 | out: hHeap=0x1f0000) returned 1 [0269.135] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0269.136] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x234b90 [0269.136] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b90 | out: hHeap=0x1f0000) returned 1 [0269.136] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0269.136] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0269.136] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101e0 [0269.136] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228440 [0269.136] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238500 [0269.136] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238528 [0269.136] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238780 [0269.136] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2386e0 [0269.136] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238528 | out: hHeap=0x1f0000) returned 1 [0269.137] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238500 | out: hHeap=0x1f0000) returned 1 [0269.137] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0269.137] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2385f0 [0269.137] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238690 [0269.137] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385f0 | out: hHeap=0x1f0000) returned 1 [0269.137] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0269.137] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238690 | out: hHeap=0x1f0000) returned 1 [0269.137] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2067d8 [0269.137] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x2b5788 [0269.138] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b5788 | out: hHeap=0x1f0000) returned 1 [0269.138] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2067d8 | out: hHeap=0x1f0000) returned 1 [0269.138] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0269.138] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0269.138] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0269.138] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0269.138] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204c10 [0269.138] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0269.138] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0269.139] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0269.139] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aa230 [0269.139] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0269.139] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2386e0 | out: hHeap=0x1f0000) returned 1 [0269.139] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238780 | out: hHeap=0x1f0000) returned 1 [0269.139] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228440 | out: hHeap=0x1f0000) returned 1 [0269.139] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0269.140] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c10 | out: hHeap=0x1f0000) returned 1 [0269.140] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0269.140] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0269.140] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aac98 [0269.140] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aac98 | out: hHeap=0x1f0000) returned 1 [0269.140] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ee8 | out: hHeap=0x1f0000) returned 1 [0269.140] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0269.140] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0269.140] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0269.141] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0269.141] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0269.141] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0269.141] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0269.141] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aa108 [0269.141] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a9a18 [0269.141] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aa108 | out: hHeap=0x1f0000) returned 1 [0269.141] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a9a18 | out: hHeap=0x1f0000) returned 1 [0269.141] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aa230 | out: hHeap=0x1f0000) returned 1 [0269.141] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0269.141] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2857d0 | out: hHeap=0x1f0000) returned 1 [0269.142] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24ea80 | out: hHeap=0x1f0000) returned 1 [0269.142] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x233238 [0269.142] GetLastError () returned 0x0 [0269.142] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238940 [0269.143] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238820 [0269.143] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\3082\\SetupResources.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\3082\\setupresources.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e290, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0269.144] GetFileType (hFile=0x174) returned 0x1 [0269.144] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28efd8 [0269.145] SetFilePointerEx (in: hFile=0x174, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e218 | out: lpNewFilePointer=0x0) returned 1 [0269.145] GetLastError () returned 0xb7 [0269.145] CloseHandle (hObject=0x174) returned 1 [0269.146] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238820 | out: hHeap=0x1f0000) returned 1 [0269.146] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238940 | out: hHeap=0x1f0000) returned 1 [0269.146] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2851a0 | out: hHeap=0x1f0000) returned 1 [0269.146] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2856c8 | out: hHeap=0x1f0000) returned 1 [0269.146] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0269.146] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c50 | out: hHeap=0x1f0000) returned 1 [0269.146] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2364d0 | out: hHeap=0x1f0000) returned 1 [0269.146] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0269.146] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0269.146] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233238 | out: hHeap=0x1f0000) returned 1 [0269.147] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0269.147] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0269.147] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x252370 | out: hHeap=0x1f0000) returned 1 [0269.147] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232cc0 | out: hHeap=0x1f0000) returned 1 [0269.147] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c58 | out: hHeap=0x1f0000) returned 1 [0269.147] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238900 | out: hHeap=0x1f0000) returned 1 [0269.147] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210240 | out: hHeap=0x1f0000) returned 1 [0269.147] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0269.147] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238810 | out: hHeap=0x1f0000) returned 1 [0269.147] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0269.147] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0269.147] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388d0 | out: hHeap=0x1f0000) returned 1 [0269.148] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2859e0 | out: hHeap=0x1f0000) returned 1 [0269.148] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0269.148] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236608 | out: hHeap=0x1f0000) returned 1 [0269.148] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228c68 | out: hHeap=0x1f0000) returned 1 [0269.148] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0269.148] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0269.148] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228bd8 | out: hHeap=0x1f0000) returned 1 [0269.148] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238830 | out: hHeap=0x1f0000) returned 1 [0269.148] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389b0 | out: hHeap=0x1f0000) returned 1 [0269.149] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28afb8 | out: hHeap=0x1f0000) returned 1 [0269.150] CloseHandle (hObject=0x198) returned 1 [0269.150] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238880 | out: hHeap=0x1f0000) returned 1 [0269.151] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238870 | out: hHeap=0x1f0000) returned 1 [0269.151] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237aa0 | out: hHeap=0x1f0000) returned 1 [0269.151] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24ca08 | out: hHeap=0x1f0000) returned 1 [0269.151] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0269.151] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c30 | out: hHeap=0x1f0000) returned 1 [0269.152] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286f98 | out: hHeap=0x1f0000) returned 1 [0269.152] CloseHandle (hObject=0x1e8) returned 1 [0269.152] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238850 | out: hHeap=0x1f0000) returned 1 [0269.152] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238860 | out: hHeap=0x1f0000) returned 1 [0269.152] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad4c8 | out: hHeap=0x1f0000) returned 1 [0269.153] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f50 | out: hHeap=0x1f0000) returned 1 [0269.153] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21b348 | out: hHeap=0x1f0000) returned 1 [0269.153] CloseHandle (hObject=0x19c) returned 1 [0269.154] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388e0 | out: hHeap=0x1f0000) returned 1 [0269.154] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238800 | out: hHeap=0x1f0000) returned 1 [0269.154] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad918 | out: hHeap=0x1f0000) returned 1 [0269.154] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238920 | out: hHeap=0x1f0000) returned 1 [0269.154] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238970 | out: hHeap=0x1f0000) returned 1 [0269.154] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388c0 | out: hHeap=0x1f0000) returned 1 [0269.154] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387f0 | out: hHeap=0x1f0000) returned 1 [0269.155] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2339e0 | out: hHeap=0x1f0000) returned 1 [0269.155] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x255c88 | out: hHeap=0x1f0000) returned 1 [0269.155] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233468 | out: hHeap=0x1f0000) returned 1 [0269.155] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206658 | out: hHeap=0x1f0000) returned 1 [0269.155] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0269.155] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0269.155] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab708 | out: hHeap=0x1f0000) returned 1 [0269.155] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x258298 | out: hHeap=0x1f0000) returned 1 [0269.155] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233120 | out: hHeap=0x1f0000) returned 1 [0269.156] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2392b0 | out: hHeap=0x1f0000) returned 1 [0269.156] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2365a0 | out: hHeap=0x1f0000) returned 1 [0269.156] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f350 | out: hHeap=0x1f0000) returned 1 [0269.156] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228b00 | out: hHeap=0x1f0000) returned 1 [0269.156] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0269.156] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\3082\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\3082\\setupresources.dll")) returned 1 [0269.158] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0269.158] FindClose (in: hFindFile=0x24e7c0 | out: hFindFile=0x24e7c0) returned 1 [0269.158] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0269.159] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ee88 | out: hHeap=0x1f0000) returned 1 [0269.159] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0269.159] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228a28 | out: hHeap=0x1f0000) returned 1 [0269.159] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228c68 [0269.159] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0269.159] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22ee88 [0269.159] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228a28 [0269.160] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\Client\\*", lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ea80 [0269.160] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228758 [0269.160] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228a28 | out: hHeap=0x1f0000) returned 1 [0269.160] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0269.160] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0269.161] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228bd8 [0269.161] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x2365a0 [0269.161] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228bd8 | out: hHeap=0x1f0000) returned 1 [0269.161] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228758 | out: hHeap=0x1f0000) returned 1 [0269.161] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0269.161] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0269.161] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce2bc00, ftCreationTime.dwHighDateTime=0x1cac6d5, ftLastAccessTime.dwLowDateTime=0xce2bc00, ftLastAccessTime.dwHighDateTime=0x1cac6d5, ftLastWriteTime.dwLowDateTime=0xce2bc00, ftLastWriteTime.dwHighDateTime=0x1cac6d5, nFileSizeHigh=0x0, nFileSizeLow=0x31444, dwReserved0=0x0, dwReserved1=0x0, cFileName="Parameterinfo.xml", cAlternateFileName="PARAME~1.XML")) returned 1 [0269.161] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239278 [0269.161] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228758 [0269.161] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236608 [0269.162] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228758 | out: hHeap=0x1f0000) returned 1 [0269.162] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2365a0 | out: hHeap=0x1f0000) returned 1 [0269.162] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239278 | out: hHeap=0x1f0000) returned 1 [0269.163] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Client\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\parameterinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0269.163] GetFileType (hFile=0x19c) returned 0x1 [0269.164] CloseHandle (hObject=0x19c) returned 1 [0269.164] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236468 [0269.165] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Client\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\parameterinfo.xml"), fInfoLevelId=0x0, lpFileInformation=0x173eb6c | out: lpFileInformation=0x173eb6c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce2bc00, ftCreationTime.dwHighDateTime=0x1cac6d5, ftLastAccessTime.dwLowDateTime=0xce2bc00, ftLastAccessTime.dwHighDateTime=0x1cac6d5, ftLastWriteTime.dwLowDateTime=0xce2bc00, ftLastWriteTime.dwHighDateTime=0x1cac6d5, nFileSizeHigh=0x0, nFileSizeLow=0x31444)) returned 1 [0269.165] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0269.165] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236468 [0269.165] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Client\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\parameterinfo.xml"), fInfoLevelId=0x0, lpFileInformation=0x173eb7c | out: lpFileInformation=0x173eb7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce2bc00, ftCreationTime.dwHighDateTime=0x1cac6d5, ftLastAccessTime.dwLowDateTime=0xce2bc00, ftLastAccessTime.dwHighDateTime=0x1cac6d5, ftLastWriteTime.dwLowDateTime=0xce2bc00, ftLastWriteTime.dwHighDateTime=0x1cac6d5, nFileSizeHigh=0x0, nFileSizeLow=0x31444)) returned 1 [0269.165] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0269.165] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236468 [0269.166] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0269.166] GetLastError () returned 0x0 [0269.166] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0269.166] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228a28 [0269.166] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d508 [0269.167] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236468 [0269.167] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238de0 [0269.167] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0269.167] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x212e00) returned 1 [0269.168] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2380a0 | out: pbBuffer=0x2380a0) returned 1 [0269.168] CryptReleaseContext (hProv=0x212e00, dwFlags=0x0) returned 1 [0269.168] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0269.168] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x255c88 [0269.169] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x232ba8 [0269.169] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=42653762676) returned 1 [0269.169] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0269.169] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=42653807878) returned 1 [0269.169] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0269.170] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238f30 [0269.170] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x251068 [0269.170] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x233580 [0269.170] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x2ab088 [0269.170] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210210 [0269.170] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2067d8 [0269.170] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0269.171] GetLastError () returned 0x0 [0269.171] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2aede0 [0269.171] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad580 [0269.171] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aede0 | out: hHeap=0x1f0000) returned 1 [0269.171] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x106) returned 0x2339e0 [0269.172] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad580 | out: hHeap=0x1f0000) returned 1 [0269.172] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238890 [0269.172] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238860 [0269.173] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Client\\Parameterinfo.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\client\\parameterinfo.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e230, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0269.258] GetFileType (hFile=0x19c) returned 0x1 [0269.259] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238960 [0269.260] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387e0 [0269.261] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Client\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\parameterinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0269.261] GetFileType (hFile=0x1e8) returned 0x1 [0269.262] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f30 [0269.262] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f70 [0269.262] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2adcb0 [0269.262] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238850 [0269.263] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238870 [0269.264] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Client\\Parameterinfo.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\client\\parameterinfo.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0269.265] GetFileType (hFile=0x198) returned 0x1 [0269.265] GetLastError () returned 0xb7 [0269.266] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe4) returned 0x21b618 [0269.266] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ef0 [0269.266] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bb0 [0269.266] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c50 [0269.266] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2add68 [0269.266] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238830 [0269.267] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388e0 [0269.268] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Client\\Parameterinfo.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\client\\parameterinfo.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0269.268] GetFileType (hFile=0x174) returned 0x1 [0269.269] GetLastError () returned 0xb7 [0269.269] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f10 [0269.269] GetLastError () returned 0xb7 [0269.270] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204df0 [0269.270] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f10 [0269.270] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0269.270] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb8) returned 0x237aa0 [0269.270] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238840 [0269.271] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238810 [0269.272] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Client\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\parameterinfo.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1a4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0269.272] GetFileType (hFile=0x1c0) returned 0x1 [0269.273] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28cfc8 [0269.273] ReadFile (in: hFile=0x1c0, lpBuffer=0x28cfc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e100, lpOverlapped=0x0 | out: lpBuffer=0x28cfc8*, lpNumberOfBytesRead=0x173e100*=0x1000, lpOverlapped=0x0) returned 1 [0269.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24c600 [0269.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28afb8 [0269.370] GetLastError () returned 0x0 [0269.386] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210198 [0269.386] GetLastError () returned 0x0 [0269.386] CloseHandle (hObject=0x19c) returned 1 [0269.387] CloseHandle (hObject=0x1e8) returned 1 [0269.388] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238880 [0269.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388d0 [0269.390] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Client\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\parameterinfo.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0269.393] GetFileType (hFile=0x1e8) returned 0x1 [0269.394] GetLastError () returned 0xb7 [0269.394] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x286f98 [0269.395] GetLastError () returned 0xb7 [0269.396] CloseHandle (hObject=0x1e8) returned 1 [0269.397] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\Client\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\parameterinfo.xml")) returned 0 [0269.397] GetLastError () returned 0x20 [0269.397] GetLastError () returned 0x20 [0269.397] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228b00 [0269.397] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238280 [0269.398] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238168 [0269.398] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x228bd8 [0269.398] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d30 [0269.398] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e30 [0269.398] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x238970 [0269.398] GetLastError () returned 0x20 [0269.399] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238d38 [0269.399] GetLastError () returned 0x20 [0269.399] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238da8 [0269.400] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2364d0 [0269.400] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238140 [0269.400] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2855c0 [0269.400] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238800 [0269.400] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0269.400] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101b0 [0269.400] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238910 [0269.400] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0269.401] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0269.401] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2380a0 [0269.401] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285bf0 [0269.401] GetLastError () returned 0x20 [0269.401] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238980 [0269.401] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238950 [0269.402] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388a0 [0269.402] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238950 | out: hHeap=0x1f0000) returned 1 [0269.402] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238940 [0269.402] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388a0 | out: hHeap=0x1f0000) returned 1 [0269.402] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238980 | out: hHeap=0x1f0000) returned 1 [0269.403] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387f0 [0269.403] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210240 [0269.403] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387f0 | out: hHeap=0x1f0000) returned 1 [0269.403] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210258 [0269.403] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210240 | out: hHeap=0x1f0000) returned 1 [0269.403] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238940 | out: hHeap=0x1f0000) returned 1 [0269.403] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210240 [0269.404] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210078 [0269.404] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210240 | out: hHeap=0x1f0000) returned 1 [0269.404] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210240 [0269.404] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210078 | out: hHeap=0x1f0000) returned 1 [0269.404] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0269.404] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210258 [0269.404] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204b90 [0269.405] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0269.405] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cd0 [0269.405] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204b90 | out: hHeap=0x1f0000) returned 1 [0269.405] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210240 | out: hHeap=0x1f0000) returned 1 [0269.405] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d10 [0269.405] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238370 [0269.406] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d10 | out: hHeap=0x1f0000) returned 1 [0269.406] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204bf0 [0269.406] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0269.406] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cd0 | out: hHeap=0x1f0000) returned 1 [0269.406] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204f70 [0269.406] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206808 [0269.406] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f70 | out: hHeap=0x1f0000) returned 1 [0269.407] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238370 [0269.407] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206808 | out: hHeap=0x1f0000) returned 1 [0269.407] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bf0 | out: hHeap=0x1f0000) returned 1 [0269.407] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238980 [0269.407] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210240 [0269.407] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238980 | out: hHeap=0x1f0000) returned 1 [0269.407] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210258 [0269.408] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210240 | out: hHeap=0x1f0000) returned 1 [0269.408] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204bd0 [0269.408] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0269.408] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206928 [0269.408] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bd0 | out: hHeap=0x1f0000) returned 1 [0269.408] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206928 | out: hHeap=0x1f0000) returned 1 [0269.408] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0269.409] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0269.409] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0269.409] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2855c0 | out: hHeap=0x1f0000) returned 1 [0269.409] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0269.409] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239080 [0269.409] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0269.410] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x213130) returned 1 [0269.411] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x237fd8 | out: pbBuffer=0x237fd8) returned 1 [0269.411] CryptReleaseContext (hProv=0x213130, dwFlags=0x0) returned 1 [0269.411] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0269.411] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x237fd8 [0269.411] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238140 [0269.412] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238f30 [0269.412] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0269.412] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0269.412] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238f30 | out: hHeap=0x1f0000) returned 1 [0269.412] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8d18 [0269.412] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210240 [0269.412] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x236538 [0269.412] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238280 [0269.413] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2858d8 [0269.413] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c10 [0269.413] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2365a0 [0269.413] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2381b8 [0269.413] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2856c8 [0269.413] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388b0 [0269.413] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0269.414] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210258 [0269.414] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238820 [0269.414] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0269.414] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210078 [0269.414] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210078 | out: hHeap=0x1f0000) returned 1 [0269.654] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0269.654] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238820 | out: hHeap=0x1f0000) returned 1 [0269.654] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0269.654] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0269.655] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388b0 | out: hHeap=0x1f0000) returned 1 [0269.655] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2856c8 | out: hHeap=0x1f0000) returned 1 [0269.655] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0269.655] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2365a0 | out: hHeap=0x1f0000) returned 1 [0269.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239208 [0269.655] GetLastError () returned 0x0 [0269.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239010 [0269.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0269.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0269.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0269.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0269.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0269.657] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0269.657] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x24ec80 [0269.657] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2852a8 [0269.657] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0269.657] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0269.657] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0269.657] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0269.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285ae8 [0269.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0269.658] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0269.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f8f8 [0269.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x258298 [0269.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x232cc0 [0269.658] QueryPerformanceCounter (in: lpPerformanceCount=0x173dee0 | out: lpPerformanceCount=0x173dee0*=42702902936) returned 1 [0269.660] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173df20 | out: lpSystemTimeAsFileTime=0x173df20) [0269.661] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238990 [0269.661] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0269.661] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e30 [0269.661] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e30 | out: hHeap=0x1f0000) returned 1 [0269.661] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0269.661] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0269.661] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204b90 [0269.662] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204b90 | out: hHeap=0x1f0000) returned 1 [0269.662] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0269.662] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238990 | out: hHeap=0x1f0000) returned 1 [0269.662] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0269.662] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238c90 [0269.662] GetLastError () returned 0x0 [0269.663] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0269.663] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0269.663] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0269.663] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381b8 [0269.663] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238370 [0269.663] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0269.663] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0269.664] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2384b0 [0269.664] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0269.664] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x222ee8 [0269.664] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0269.665] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0269.665] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0269.665] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0269.665] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0269.665] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238398 [0269.665] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x237fd8 [0269.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0269.666] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0269.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0269.666] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0269.666] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x234b90 [0269.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b90 | out: hHeap=0x1f0000) returned 1 [0269.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0269.667] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0269.667] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210258 [0269.667] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228cb0 [0269.667] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x237fd8 [0269.667] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238398 [0269.667] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2385c8 [0269.667] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238618 [0269.668] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0269.668] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0269.668] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0269.668] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238398 [0269.668] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x237fd8 [0269.668] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0269.669] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0269.669] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0269.669] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206688 [0269.669] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x2b4ab0 [0269.669] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b4ab0 | out: hHeap=0x1f0000) returned 1 [0269.669] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206688 | out: hHeap=0x1f0000) returned 1 [0269.670] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0269.670] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0269.670] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0269.670] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0269.670] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204bb0 [0269.670] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0269.670] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0269.671] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0269.671] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a9d90 [0269.671] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0269.671] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238618 | out: hHeap=0x1f0000) returned 1 [0269.671] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385c8 | out: hHeap=0x1f0000) returned 1 [0269.671] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228cb0 | out: hHeap=0x1f0000) returned 1 [0269.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0269.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bb0 | out: hHeap=0x1f0000) returned 1 [0269.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0269.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0269.672] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aa7f8 [0269.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aa7f8 | out: hHeap=0x1f0000) returned 1 [0269.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ee8 | out: hHeap=0x1f0000) returned 1 [0269.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0269.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0269.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0269.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0269.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0269.674] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0269.674] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0269.674] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a9578 [0269.674] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aa108 [0269.674] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a9578 | out: hHeap=0x1f0000) returned 1 [0269.674] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aa108 | out: hHeap=0x1f0000) returned 1 [0269.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a9d90 | out: hHeap=0x1f0000) returned 1 [0269.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0269.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285ae8 | out: hHeap=0x1f0000) returned 1 [0269.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24ec80 | out: hHeap=0x1f0000) returned 1 [0269.675] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x233350 [0269.675] GetLastError () returned 0x0 [0269.676] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238980 [0269.676] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388f0 [0269.678] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Client\\Parameterinfo.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\client\\parameterinfo.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e290, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0269.678] GetFileType (hFile=0x21c) returned 0x1 [0269.679] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x286f98 [0269.679] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e218 | out: lpNewFilePointer=0x0) returned 1 [0269.680] GetLastError () returned 0xb7 [0269.680] CloseHandle (hObject=0x21c) returned 1 [0269.681] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388f0 | out: hHeap=0x1f0000) returned 1 [0269.681] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238980 | out: hHeap=0x1f0000) returned 1 [0269.681] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2852a8 | out: hHeap=0x1f0000) returned 1 [0269.681] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2858d8 | out: hHeap=0x1f0000) returned 1 [0269.682] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0269.682] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c10 | out: hHeap=0x1f0000) returned 1 [0269.682] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236538 | out: hHeap=0x1f0000) returned 1 [0269.682] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210240 | out: hHeap=0x1f0000) returned 1 [0269.682] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0269.682] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233350 | out: hHeap=0x1f0000) returned 1 [0269.682] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0269.682] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0269.683] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x258298 | out: hHeap=0x1f0000) returned 1 [0269.683] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232cc0 | out: hHeap=0x1f0000) returned 1 [0269.683] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239080 | out: hHeap=0x1f0000) returned 1 [0269.683] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238970 | out: hHeap=0x1f0000) returned 1 [0269.683] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0269.683] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0269.683] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238910 | out: hHeap=0x1f0000) returned 1 [0269.683] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0269.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0269.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238800 | out: hHeap=0x1f0000) returned 1 [0269.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285bf0 | out: hHeap=0x1f0000) returned 1 [0269.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0269.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2364d0 | out: hHeap=0x1f0000) returned 1 [0269.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228bd8 | out: hHeap=0x1f0000) returned 1 [0269.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0269.685] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0269.685] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228b00 | out: hHeap=0x1f0000) returned 1 [0269.685] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388d0 | out: hHeap=0x1f0000) returned 1 [0269.685] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238880 | out: hHeap=0x1f0000) returned 1 [0269.685] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28cfc8 | out: hHeap=0x1f0000) returned 1 [0269.685] CloseHandle (hObject=0x1c0) returned 1 [0269.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238810 | out: hHeap=0x1f0000) returned 1 [0269.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238840 | out: hHeap=0x1f0000) returned 1 [0269.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237aa0 | out: hHeap=0x1f0000) returned 1 [0269.687] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24c600 | out: hHeap=0x1f0000) returned 1 [0269.687] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0269.687] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204df0 | out: hHeap=0x1f0000) returned 1 [0269.687] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28afb8 | out: hHeap=0x1f0000) returned 1 [0269.687] CloseHandle (hObject=0x174) returned 1 [0269.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388e0 | out: hHeap=0x1f0000) returned 1 [0269.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238830 | out: hHeap=0x1f0000) returned 1 [0269.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2add68 | out: hHeap=0x1f0000) returned 1 [0269.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ef0 | out: hHeap=0x1f0000) returned 1 [0269.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21b618 | out: hHeap=0x1f0000) returned 1 [0269.689] CloseHandle (hObject=0x198) returned 1 [0269.689] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238870 | out: hHeap=0x1f0000) returned 1 [0269.689] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238850 | out: hHeap=0x1f0000) returned 1 [0269.689] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2adcb0 | out: hHeap=0x1f0000) returned 1 [0269.690] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387e0 | out: hHeap=0x1f0000) returned 1 [0269.690] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238960 | out: hHeap=0x1f0000) returned 1 [0269.690] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238860 | out: hHeap=0x1f0000) returned 1 [0269.690] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238890 | out: hHeap=0x1f0000) returned 1 [0269.690] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2339e0 | out: hHeap=0x1f0000) returned 1 [0269.690] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x251068 | out: hHeap=0x1f0000) returned 1 [0269.690] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233580 | out: hHeap=0x1f0000) returned 1 [0269.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2067d8 | out: hHeap=0x1f0000) returned 1 [0269.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0269.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0269.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab088 | out: hHeap=0x1f0000) returned 1 [0269.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x255c88 | out: hHeap=0x1f0000) returned 1 [0269.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232ba8 | out: hHeap=0x1f0000) returned 1 [0269.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238de0 | out: hHeap=0x1f0000) returned 1 [0269.692] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0269.692] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d508 | out: hHeap=0x1f0000) returned 1 [0269.692] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228a28 | out: hHeap=0x1f0000) returned 1 [0269.692] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0269.692] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\Client\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\parameterinfo.xml")) returned 1 [0269.694] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x9882, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 1 [0269.694] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0269.694] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228a28 [0269.695] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236468 [0269.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228a28 | out: hHeap=0x1f0000) returned 1 [0269.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236608 | out: hHeap=0x1f0000) returned 1 [0269.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0270.165] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Client\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\uiinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0270.166] GetFileType (hFile=0x198) returned 0x1 [0270.167] CloseHandle (hObject=0x198) returned 1 [0270.167] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236608 [0270.168] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Client\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\uiinfo.xml"), fInfoLevelId=0x0, lpFileInformation=0x173eb6c | out: lpFileInformation=0x173eb6c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x9882)) returned 1 [0270.168] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236608 | out: hHeap=0x1f0000) returned 1 [0270.168] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2364d0 [0270.168] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Client\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\uiinfo.xml"), fInfoLevelId=0x0, lpFileInformation=0x173eb7c | out: lpFileInformation=0x173eb7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x9882)) returned 1 [0270.168] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2364d0 | out: hHeap=0x1f0000) returned 1 [0270.169] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236608 [0270.169] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236608 | out: hHeap=0x1f0000) returned 1 [0270.169] GetLastError () returned 0x0 [0270.170] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0270.170] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228758 [0270.170] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f350 [0270.170] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2364d0 [0270.170] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c58 [0270.170] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0270.170] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x212ad0) returned 1 [0270.172] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238280 | out: pbBuffer=0x238280) returned 1 [0270.172] CryptReleaseContext (hProv=0x212ad0, dwFlags=0x0) returned 1 [0270.172] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0270.172] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x252370 [0270.172] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2339e0 [0270.173] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=42754150755) returned 1 [0270.173] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0270.173] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=42754194576) returned 1 [0270.173] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0270.173] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238e50 [0270.174] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x258298 [0270.174] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x233008 [0270.174] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x2ab2f8 [0270.174] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101b0 [0270.174] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206928 [0270.174] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210258 [0270.174] GetLastError () returned 0x0 [0270.175] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae228 [0270.175] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218768 [0270.175] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae228 | out: hHeap=0x1f0000) returned 1 [0270.175] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf8) returned 0x217038 [0270.175] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218768 | out: hHeap=0x1f0000) returned 1 [0270.175] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387e0 [0270.176] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238990 [0270.177] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Client\\UiInfo.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\client\\uiinfo.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e230, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0270.178] GetFileType (hFile=0x198) returned 0x1 [0270.179] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238850 [0270.179] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238860 [0270.181] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Client\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\uiinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0270.182] GetFileType (hFile=0x174) returned 0x1 [0270.183] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0270.183] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ef0 [0270.183] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2acfc0 [0270.183] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238840 [0270.184] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389b0 [0270.185] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Client\\UiInfo.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\client\\uiinfo.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0270.186] GetFileType (hFile=0x1c0) returned 0x1 [0270.186] GetLastError () returned 0xb7 [0270.187] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe4) returned 0x21b168 [0270.187] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d90 [0270.187] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c30 [0270.187] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ef0 [0270.187] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad9d0 [0270.187] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389c0 [0270.188] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388c0 [0270.189] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Client\\UiInfo.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\client\\uiinfo.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0270.189] GetFileType (hFile=0x21c) returned 0x1 [0270.190] GetLastError () returned 0xb7 [0270.190] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f10 [0270.190] GetLastError () returned 0xb7 [0270.190] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c30 [0270.190] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bf0 [0270.190] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204dd0 [0270.190] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb8) returned 0x2379e0 [0270.190] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238920 [0270.191] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238880 [0270.192] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Client\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\uiinfo.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1a4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0270.192] GetFileType (hFile=0x1e8) returned 0x1 [0270.193] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28afb8 [0270.193] ReadFile (in: hFile=0x1e8, lpBuffer=0x28afb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e100, lpOverlapped=0x0 | out: lpBuffer=0x28afb8*, lpNumberOfBytesRead=0x173e100*=0x1000, lpOverlapped=0x0) returned 1 [0270.198] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24b9e8 [0270.198] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28cfc8 [0270.198] GetLastError () returned 0x0 [0270.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210198 [0270.442] GetLastError () returned 0x0 [0270.443] CloseHandle (hObject=0x198) returned 1 [0270.443] CloseHandle (hObject=0x174) returned 1 [0270.444] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238800 [0270.445] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238930 [0270.712] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Client\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\uiinfo.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0270.714] GetFileType (hFile=0x174) returned 0x1 [0270.715] GetLastError () returned 0xb7 [0270.716] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x286f98 [0270.716] GetLastError () returned 0xb7 [0270.717] CloseHandle (hObject=0x174) returned 1 [0270.718] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\Client\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\uiinfo.xml")) returned 0 [0270.718] GetLastError () returned 0x20 [0270.718] GetLastError () returned 0x20 [0270.719] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228a28 [0270.719] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238370 [0270.719] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238398 [0270.719] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x228680 [0270.719] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c90 [0270.719] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204b90 [0270.719] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x238870 [0270.719] GetLastError () returned 0x20 [0270.720] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238f30 [0270.720] GetLastError () returned 0x20 [0270.720] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238c90 [0270.720] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2365a0 [0270.720] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238078 [0270.720] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2857d0 [0270.720] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388b0 [0270.720] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0270.721] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0270.721] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238980 [0270.721] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0270.721] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0270.721] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238190 [0270.721] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2859e0 [0270.721] GetLastError () returned 0x20 [0270.722] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x2387f0 [0270.722] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x2388f0 [0270.722] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238890 [0270.722] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388f0 | out: hHeap=0x1f0000) returned 1 [0270.722] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388a0 [0270.722] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238890 | out: hHeap=0x1f0000) returned 1 [0270.722] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387f0 | out: hHeap=0x1f0000) returned 1 [0270.722] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238910 [0270.723] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210210 [0270.723] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238910 | out: hHeap=0x1f0000) returned 1 [0270.723] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210240 [0270.723] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0270.723] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388a0 | out: hHeap=0x1f0000) returned 1 [0270.723] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210210 [0270.723] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffa0 [0270.723] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0270.723] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210210 [0270.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffa0 | out: hHeap=0x1f0000) returned 1 [0270.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210240 | out: hHeap=0x1f0000) returned 1 [0270.724] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210240 [0270.724] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204bf0 [0270.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210240 | out: hHeap=0x1f0000) returned 1 [0270.724] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f70 [0270.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bf0 | out: hHeap=0x1f0000) returned 1 [0270.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0270.725] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d10 [0270.725] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2381b8 [0270.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d10 | out: hHeap=0x1f0000) returned 1 [0270.725] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204ef0 [0270.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0270.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f70 | out: hHeap=0x1f0000) returned 1 [0270.725] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204e90 [0270.725] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206838 [0270.726] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e90 | out: hHeap=0x1f0000) returned 1 [0270.726] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2381b8 [0270.726] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206838 | out: hHeap=0x1f0000) returned 1 [0270.726] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ef0 | out: hHeap=0x1f0000) returned 1 [0270.726] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387f0 [0270.726] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210240 [0270.726] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387f0 | out: hHeap=0x1f0000) returned 1 [0270.726] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210210 [0270.727] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210240 | out: hHeap=0x1f0000) returned 1 [0270.728] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204ef0 [0270.728] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0270.728] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206808 [0270.728] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ef0 | out: hHeap=0x1f0000) returned 1 [0270.728] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206808 | out: hHeap=0x1f0000) returned 1 [0270.728] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0270.728] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0270.729] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0270.729] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2857d0 | out: hHeap=0x1f0000) returned 1 [0270.729] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0270.729] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239080 [0270.729] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0270.729] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x212ad0) returned 1 [0270.730] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238370 | out: pbBuffer=0x238370) returned 1 [0270.731] CryptReleaseContext (hProv=0x212ad0, dwFlags=0x0) returned 1 [0270.731] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0270.731] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238078 [0270.731] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381b8 [0270.731] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239208 [0270.731] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0270.731] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0270.732] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239208 | out: hHeap=0x1f0000) returned 1 [0270.732] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8d18 [0270.732] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210240 [0270.732] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x236608 [0270.732] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2381e0 [0270.732] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2856c8 [0270.732] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d30 [0270.732] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236538 [0270.733] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238280 [0270.733] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285098 [0270.733] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388a0 [0270.733] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0270.733] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210210 [0270.733] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238910 [0270.733] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0270.734] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20fef8 [0270.734] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20fef8 | out: hHeap=0x1f0000) returned 1 [0270.734] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0270.734] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238910 | out: hHeap=0x1f0000) returned 1 [0270.734] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0270.734] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0270.734] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388a0 | out: hHeap=0x1f0000) returned 1 [0270.734] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285098 | out: hHeap=0x1f0000) returned 1 [0270.735] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0270.735] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236538 | out: hHeap=0x1f0000) returned 1 [0270.735] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x2390b8 [0270.735] GetLastError () returned 0x0 [0270.735] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239208 [0270.735] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0270.736] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0270.736] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0270.736] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0270.736] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0270.736] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0270.736] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x24ec00 [0270.736] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2851a0 [0270.736] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0270.737] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0270.737] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0270.737] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0270.737] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x284f90 [0270.737] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0270.737] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0270.738] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x230320 [0270.738] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x255c88 [0270.738] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x233468 [0270.738] QueryPerformanceCounter (in: lpPerformanceCount=0x173dee0 | out: lpPerformanceCount=0x173dee0*=42810694686) returned 1 [0270.738] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173df20 | out: lpSystemTimeAsFileTime=0x173df20) [0270.738] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x2387f0 [0270.739] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0270.739] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c10 [0270.739] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c10 | out: hHeap=0x1f0000) returned 1 [0270.739] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0270.739] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0270.739] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e90 [0270.739] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e90 | out: hHeap=0x1f0000) returned 1 [0270.740] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0270.740] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387f0 | out: hHeap=0x1f0000) returned 1 [0270.740] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0270.740] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238e88 [0270.740] GetLastError () returned 0x0 [0270.740] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0270.741] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0270.741] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0270.741] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238078 [0270.741] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238280 [0270.741] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0270.741] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0270.741] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238370 [0270.742] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0270.742] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x222ee8 [0270.742] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0270.742] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0270.743] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0270.743] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0270.743] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0270.743] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238668 [0270.743] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238780 [0270.744] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238668 | out: hHeap=0x1f0000) returned 1 [0270.744] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0270.744] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238780 | out: hHeap=0x1f0000) returned 1 [0270.744] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0270.744] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x234b90 [0270.744] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b90 | out: hHeap=0x1f0000) returned 1 [0270.745] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0270.745] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0270.745] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210210 [0270.745] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228b00 [0270.745] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2386b8 [0270.745] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2384d8 [0270.745] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238550 [0270.746] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238578 [0270.746] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384d8 | out: hHeap=0x1f0000) returned 1 [0270.746] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2386b8 | out: hHeap=0x1f0000) returned 1 [0270.746] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0270.746] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2386e0 [0270.746] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238758 [0270.746] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2386e0 | out: hHeap=0x1f0000) returned 1 [0270.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0270.747] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238758 | out: hHeap=0x1f0000) returned 1 [0270.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206808 [0270.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x2b3dd8 [0270.747] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b3dd8 | out: hHeap=0x1f0000) returned 1 [0270.747] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206808 | out: hHeap=0x1f0000) returned 1 [0270.748] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0270.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0270.748] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0270.748] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0270.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204bd0 [0270.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0270.749] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0270.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0270.749] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aa480 [0270.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0270.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238578 | out: hHeap=0x1f0000) returned 1 [0270.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238550 | out: hHeap=0x1f0000) returned 1 [0270.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228b00 | out: hHeap=0x1f0000) returned 1 [0270.750] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0270.750] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bd0 | out: hHeap=0x1f0000) returned 1 [0270.750] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0270.750] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0270.750] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a9578 [0270.750] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a9578 | out: hHeap=0x1f0000) returned 1 [0270.750] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ee8 | out: hHeap=0x1f0000) returned 1 [0270.751] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0270.751] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0270.751] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0270.751] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0270.751] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0270.751] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0270.751] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0270.752] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a9eb8 [0270.752] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a9328 [0270.752] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a9eb8 | out: hHeap=0x1f0000) returned 1 [0270.752] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a9328 | out: hHeap=0x1f0000) returned 1 [0270.752] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aa480 | out: hHeap=0x1f0000) returned 1 [0270.752] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0270.752] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x284f90 | out: hHeap=0x1f0000) returned 1 [0270.753] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24ec00 | out: hHeap=0x1f0000) returned 1 [0270.753] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x2338c8 [0270.753] GetLastError () returned 0x0 [0270.753] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238810 [0270.754] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238940 [0270.755] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Client\\UiInfo.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\client\\uiinfo.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e290, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0270.755] GetFileType (hFile=0x174) returned 0x1 [0270.756] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x286f98 [0270.756] SetFilePointerEx (in: hFile=0x174, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e218 | out: lpNewFilePointer=0x0) returned 1 [0270.757] GetLastError () returned 0xb7 [0270.757] CloseHandle (hObject=0x174) returned 1 [0270.758] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238940 | out: hHeap=0x1f0000) returned 1 [0270.758] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238810 | out: hHeap=0x1f0000) returned 1 [0270.758] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2851a0 | out: hHeap=0x1f0000) returned 1 [0270.758] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2856c8 | out: hHeap=0x1f0000) returned 1 [0270.758] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0270.758] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d30 | out: hHeap=0x1f0000) returned 1 [0270.758] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236608 | out: hHeap=0x1f0000) returned 1 [0270.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210240 | out: hHeap=0x1f0000) returned 1 [0270.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0270.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2338c8 | out: hHeap=0x1f0000) returned 1 [0270.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0270.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0270.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x255c88 | out: hHeap=0x1f0000) returned 1 [0270.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233468 | out: hHeap=0x1f0000) returned 1 [0270.760] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239080 | out: hHeap=0x1f0000) returned 1 [0270.760] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238870 | out: hHeap=0x1f0000) returned 1 [0270.760] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0270.760] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0270.760] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238980 | out: hHeap=0x1f0000) returned 1 [0270.760] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0270.760] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0270.761] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388b0 | out: hHeap=0x1f0000) returned 1 [0270.761] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2859e0 | out: hHeap=0x1f0000) returned 1 [0270.761] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0270.761] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2365a0 | out: hHeap=0x1f0000) returned 1 [0270.761] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228680 | out: hHeap=0x1f0000) returned 1 [0270.761] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0270.761] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0270.762] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228a28 | out: hHeap=0x1f0000) returned 1 [0270.762] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238930 | out: hHeap=0x1f0000) returned 1 [0270.762] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238800 | out: hHeap=0x1f0000) returned 1 [0270.762] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28afb8 | out: hHeap=0x1f0000) returned 1 [0270.762] CloseHandle (hObject=0x1e8) returned 1 [0270.763] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238880 | out: hHeap=0x1f0000) returned 1 [0270.763] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238920 | out: hHeap=0x1f0000) returned 1 [0270.763] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2379e0 | out: hHeap=0x1f0000) returned 1 [0270.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24b9e8 | out: hHeap=0x1f0000) returned 1 [0270.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0270.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c30 | out: hHeap=0x1f0000) returned 1 [0270.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28cfc8 | out: hHeap=0x1f0000) returned 1 [0270.764] CloseHandle (hObject=0x21c) returned 1 [0270.765] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388c0 | out: hHeap=0x1f0000) returned 1 [0270.765] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389c0 | out: hHeap=0x1f0000) returned 1 [0270.765] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad9d0 | out: hHeap=0x1f0000) returned 1 [0270.765] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d90 | out: hHeap=0x1f0000) returned 1 [0270.938] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21b168 | out: hHeap=0x1f0000) returned 1 [0270.938] CloseHandle (hObject=0x1c0) returned 1 [0270.939] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389b0 | out: hHeap=0x1f0000) returned 1 [0270.939] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238840 | out: hHeap=0x1f0000) returned 1 [0270.939] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2acfc0 | out: hHeap=0x1f0000) returned 1 [0270.939] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238860 | out: hHeap=0x1f0000) returned 1 [0270.939] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238850 | out: hHeap=0x1f0000) returned 1 [0270.940] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238990 | out: hHeap=0x1f0000) returned 1 [0270.940] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387e0 | out: hHeap=0x1f0000) returned 1 [0270.940] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0270.940] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x258298 | out: hHeap=0x1f0000) returned 1 [0270.940] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233008 | out: hHeap=0x1f0000) returned 1 [0270.940] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206928 | out: hHeap=0x1f0000) returned 1 [0270.940] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0270.940] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0270.940] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab2f8 | out: hHeap=0x1f0000) returned 1 [0270.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x252370 | out: hHeap=0x1f0000) returned 1 [0270.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2339e0 | out: hHeap=0x1f0000) returned 1 [0270.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c58 | out: hHeap=0x1f0000) returned 1 [0270.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2364d0 | out: hHeap=0x1f0000) returned 1 [0270.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f350 | out: hHeap=0x1f0000) returned 1 [0270.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228758 | out: hHeap=0x1f0000) returned 1 [0270.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0270.941] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\Client\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\uiinfo.xml")) returned 1 [0270.943] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x9882, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 0 [0270.943] FindClose (in: hFindFile=0x24ea80 | out: hFindFile=0x24ea80) returned 1 [0270.944] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0270.944] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ee88 | out: hHeap=0x1f0000) returned 1 [0270.944] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0270.944] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228c68 | out: hHeap=0x1f0000) returned 1 [0270.944] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228bd8 [0270.944] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0270.944] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22ee88 [0270.944] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8d18 [0270.945] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\Extended\\*", lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ec00 [0270.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8dc8 [0270.945] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0270.945] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0270.945] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0270.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8d18 [0270.946] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8dc8 | out: hHeap=0x1f0000) returned 1 [0270.946] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0270.946] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0270.946] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2a714f00, ftCreationTime.dwHighDateTime=0x1cac6f0, ftLastAccessTime.dwLowDateTime=0x2a714f00, ftLastAccessTime.dwHighDateTime=0x1cac6f0, ftLastWriteTime.dwLowDateTime=0x2a714f00, ftLastWriteTime.dwHighDateTime=0x1cac6f0, nFileSizeHigh=0x0, nFileSizeLow=0x16c82, dwReserved0=0x0, dwReserved1=0x0, cFileName="Parameterinfo.xml", cAlternateFileName="PARAME~1.XML")) returned 1 [0270.946] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238e18 [0270.946] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8dc8 [0270.946] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x2180d0 [0270.946] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8dc8 | out: hHeap=0x1f0000) returned 1 [0270.946] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0270.947] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238e18 | out: hHeap=0x1f0000) returned 1 [0271.115] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Extended\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\parameterinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0271.116] GetFileType (hFile=0x1c0) returned 0x1 [0271.116] CloseHandle (hObject=0x1c0) returned 1 [0271.117] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae750 [0271.117] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Extended\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\parameterinfo.xml"), fInfoLevelId=0x0, lpFileInformation=0x173eb6c | out: lpFileInformation=0x173eb6c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2a714f00, ftCreationTime.dwHighDateTime=0x1cac6f0, ftLastAccessTime.dwLowDateTime=0x2a714f00, ftLastAccessTime.dwHighDateTime=0x1cac6f0, ftLastWriteTime.dwLowDateTime=0x2a714f00, ftLastWriteTime.dwHighDateTime=0x1cac6f0, nFileSizeHigh=0x0, nFileSizeLow=0x16c82)) returned 1 [0271.117] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae750 | out: hHeap=0x1f0000) returned 1 [0271.118] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae048 [0271.118] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Extended\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\parameterinfo.xml"), fInfoLevelId=0x0, lpFileInformation=0x173eb7c | out: lpFileInformation=0x173eb7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2a714f00, ftCreationTime.dwHighDateTime=0x1cac6f0, ftLastAccessTime.dwLowDateTime=0x2a714f00, ftLastAccessTime.dwHighDateTime=0x1cac6f0, ftLastWriteTime.dwLowDateTime=0x2a714f00, ftLastWriteTime.dwHighDateTime=0x1cac6f0, nFileSizeHigh=0x0, nFileSizeLow=0x16c82)) returned 1 [0271.118] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae048 | out: hHeap=0x1f0000) returned 1 [0271.118] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae6d8 [0271.118] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae6d8 | out: hHeap=0x1f0000) returned 1 [0271.118] GetLastError () returned 0x0 [0271.119] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0271.119] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228440 [0271.119] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f350 [0271.119] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae228 [0271.119] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239278 [0271.120] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0271.120] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x213350) returned 1 [0271.121] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238168 | out: pbBuffer=0x238168) returned 1 [0271.121] CryptReleaseContext (hProv=0x213350, dwFlags=0x0) returned 1 [0271.121] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0271.121] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x258298 [0271.121] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2339e0 [0271.122] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=42849051449) returned 1 [0271.122] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0271.122] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=42849098038) returned 1 [0271.122] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0271.122] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239208 [0271.123] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x251068 [0271.123] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x232ef0 [0271.123] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x2abd88 [0271.123] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210210 [0271.123] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206928 [0271.123] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210198 [0271.123] GetLastError () returned 0x0 [0271.124] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0271.124] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0271.124] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0271.124] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x11c) returned 0x2105e0 [0271.124] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0271.124] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388e0 [0271.125] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238830 [0271.125] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Extended\\Parameterinfo.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\extended\\parameterinfo.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e230, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0271.140] GetFileType (hFile=0x1c0) returned 0x1 [0271.140] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238910 [0271.141] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389b0 [0271.142] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Extended\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\parameterinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0271.142] GetFileType (hFile=0x21c) returned 0x1 [0271.143] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f10 [0271.143] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c30 [0271.143] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad130 [0271.143] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238900 [0271.144] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238980 [0271.145] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Extended\\Parameterinfo.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\extended\\parameterinfo.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0271.145] GetFileType (hFile=0x1e8) returned 0x1 [0271.146] GetLastError () returned 0xb7 [0271.146] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe4) returned 0x21b618 [0271.146] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cb0 [0271.146] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f10 [0271.146] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f50 [0271.147] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad078 [0271.147] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238930 [0271.147] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388f0 [0271.148] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Extended\\Parameterinfo.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\extended\\parameterinfo.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0271.149] GetFileType (hFile=0x174) returned 0x1 [0271.150] GetLastError () returned 0xb7 [0271.150] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e70 [0271.150] GetLastError () returned 0xb7 [0271.151] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d30 [0271.151] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e30 [0271.151] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e90 [0271.151] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb8) returned 0x237020 [0271.151] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238860 [0271.152] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387e0 [0271.153] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Extended\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\parameterinfo.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1a4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0271.153] GetFileType (hFile=0x198) returned 0x1 [0271.154] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28cfc8 [0271.155] ReadFile (in: hFile=0x198, lpBuffer=0x28cfc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e100, lpOverlapped=0x0 | out: lpBuffer=0x28cfc8*, lpNumberOfBytesRead=0x173e100*=0x1000, lpOverlapped=0x0) returned 1 [0271.229] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24a1b8 [0271.229] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28dfd0 [0271.230] GetLastError () returned 0x0 [0271.234] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101b0 [0271.234] GetLastError () returned 0x0 [0271.235] CloseHandle (hObject=0x1c0) returned 1 [0271.236] CloseHandle (hObject=0x21c) returned 1 [0271.236] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238920 [0271.237] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388b0 [0271.238] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Extended\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\parameterinfo.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0271.240] GetFileType (hFile=0x21c) returned 0x1 [0271.241] GetLastError () returned 0xb7 [0271.241] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x286f98 [0271.242] GetLastError () returned 0xb7 [0271.587] CloseHandle (hObject=0x21c) returned 1 [0271.717] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\Extended\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\parameterinfo.xml")) returned 0 [0271.717] GetLastError () returned 0x20 [0271.718] GetLastError () returned 0x20 [0271.718] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228c68 [0271.718] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238370 [0271.718] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238190 [0271.719] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x228b00 [0271.719] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f70 [0271.719] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204db0 [0271.719] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x238850 [0271.719] GetLastError () returned 0x20 [0271.719] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238d70 [0271.719] GetLastError () returned 0x20 [0271.720] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239010 [0271.720] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236468 [0271.720] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238078 [0271.720] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x284f90 [0271.720] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238880 [0271.720] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0271.720] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210240 [0271.721] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238810 [0271.721] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0271.721] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210258 [0271.721] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238000 [0271.721] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285bf0 [0271.721] GetLastError () returned 0x20 [0271.722] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238960 [0271.722] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238940 [0271.722] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238800 [0271.722] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238940 | out: hHeap=0x1f0000) returned 1 [0271.722] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238990 [0271.722] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238800 | out: hHeap=0x1f0000) returned 1 [0271.722] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238960 | out: hHeap=0x1f0000) returned 1 [0271.722] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238820 [0271.723] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101c8 [0271.723] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238820 | out: hHeap=0x1f0000) returned 1 [0271.723] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101e0 [0271.723] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0271.723] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238990 | out: hHeap=0x1f0000) returned 1 [0271.723] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101c8 [0271.723] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210078 [0271.723] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0271.724] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0271.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210078 | out: hHeap=0x1f0000) returned 1 [0271.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0271.724] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0271.724] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204bb0 [0271.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0271.724] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0271.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bb0 | out: hHeap=0x1f0000) returned 1 [0271.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0271.725] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cd0 [0271.725] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2380a0 [0271.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cd0 | out: hHeap=0x1f0000) returned 1 [0271.725] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204e30 [0271.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0271.726] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d70 | out: hHeap=0x1f0000) returned 1 [0271.726] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204cf0 [0271.726] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206868 [0271.726] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cf0 | out: hHeap=0x1f0000) returned 1 [0271.726] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2380a0 [0271.726] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206868 | out: hHeap=0x1f0000) returned 1 [0271.727] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e30 | out: hHeap=0x1f0000) returned 1 [0271.727] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388c0 [0271.727] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101c8 [0271.727] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388c0 | out: hHeap=0x1f0000) returned 1 [0271.727] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0271.727] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0271.727] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204c10 [0271.728] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0271.728] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x2067d8 [0271.728] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c10 | out: hHeap=0x1f0000) returned 1 [0271.729] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2067d8 | out: hHeap=0x1f0000) returned 1 [0271.729] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0271.729] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0271.729] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0271.729] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x284f90 | out: hHeap=0x1f0000) returned 1 [0271.729] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0271.729] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238de0 [0271.730] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0271.730] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x212ad0) returned 1 [0271.731] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238078 | out: pbBuffer=0x238078) returned 1 [0271.731] CryptReleaseContext (hProv=0x212ad0, dwFlags=0x0) returned 1 [0271.731] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0271.731] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238370 [0271.731] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238078 [0271.732] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c90 [0271.732] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0271.732] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0271.732] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c90 | out: hHeap=0x1f0000) returned 1 [0271.732] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8d18 [0271.732] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0271.732] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x236538 [0271.733] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238168 [0271.733] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285ae8 [0271.733] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c30 [0271.733] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2364d0 [0271.733] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2380a0 [0271.733] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x284f90 [0271.733] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238990 [0271.734] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0271.734] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0271.734] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238940 [0271.734] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0271.734] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20fef8 [0271.734] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20fef8 | out: hHeap=0x1f0000) returned 1 [0271.734] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0271.735] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238940 | out: hHeap=0x1f0000) returned 1 [0271.735] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0271.735] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0271.735] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238990 | out: hHeap=0x1f0000) returned 1 [0271.735] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x284f90 | out: hHeap=0x1f0000) returned 1 [0271.735] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0271.735] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2364d0 | out: hHeap=0x1f0000) returned 1 [0271.736] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238cc8 [0271.736] GetLastError () returned 0x0 [0271.736] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x2392b0 [0271.736] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0271.737] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0271.737] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0271.737] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0271.737] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0271.737] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0271.737] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x24eb40 [0271.737] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2852a8 [0271.738] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0271.738] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0271.738] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0271.738] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0271.738] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285098 [0271.738] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0271.739] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0271.739] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x230320 [0271.739] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x24fd60 [0271.739] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x233008 [0271.739] QueryPerformanceCounter (in: lpPerformanceCount=0x173dee0 | out: lpPerformanceCount=0x173dee0*=42910805034) returned 1 [0271.739] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173df20 | out: lpSystemTimeAsFileTime=0x173df20) [0271.740] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238940 [0271.740] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0271.740] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204dd0 [0271.740] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204dd0 | out: hHeap=0x1f0000) returned 1 [0271.740] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0271.740] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0271.740] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0271.741] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d70 | out: hHeap=0x1f0000) returned 1 [0271.741] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0271.741] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238940 | out: hHeap=0x1f0000) returned 1 [0271.741] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0271.741] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x2390b8 [0271.741] GetLastError () returned 0x0 [0271.742] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0271.742] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0271.742] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0271.742] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2380a0 [0271.742] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381e0 [0271.743] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0271.743] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0271.743] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238280 [0271.743] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0271.743] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x222ee8 [0271.743] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0271.743] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0271.743] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0271.744] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0271.744] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0271.744] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238370 [0271.744] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238690 [0271.744] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0271.744] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0271.744] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238690 | out: hHeap=0x1f0000) returned 1 [0271.744] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0271.745] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x234b90 [0271.745] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b90 | out: hHeap=0x1f0000) returned 1 [0271.745] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0271.745] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0271.745] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101e0 [0271.745] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228680 [0271.745] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238618 [0271.746] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238640 [0271.746] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238528 [0271.746] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238758 [0271.746] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238640 | out: hHeap=0x1f0000) returned 1 [0271.746] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238618 | out: hHeap=0x1f0000) returned 1 [0271.746] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0271.746] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238500 [0271.746] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238690 [0271.747] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238500 | out: hHeap=0x1f0000) returned 1 [0271.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0271.747] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238690 | out: hHeap=0x1f0000) returned 1 [0271.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206628 [0271.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x2b4ef8 [0271.747] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b4ef8 | out: hHeap=0x1f0000) returned 1 [0271.747] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206628 | out: hHeap=0x1f0000) returned 1 [0271.747] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0271.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0271.748] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0271.748] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0271.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204e70 [0271.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0271.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a9c68 [0271.748] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0271.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aa7f8 [0271.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a9c68 | out: hHeap=0x1f0000) returned 1 [0271.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238758 | out: hHeap=0x1f0000) returned 1 [0271.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238528 | out: hHeap=0x1f0000) returned 1 [0271.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228680 | out: hHeap=0x1f0000) returned 1 [0271.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0271.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e70 | out: hHeap=0x1f0000) returned 1 [0271.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0271.750] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0271.750] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a9b40 [0271.750] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a9b40 | out: hHeap=0x1f0000) returned 1 [0271.750] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ee8 | out: hHeap=0x1f0000) returned 1 [0271.750] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0271.750] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0271.750] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0271.750] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0271.751] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0271.751] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0271.751] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0271.751] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a98f0 [0271.751] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a9b40 [0271.751] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a98f0 | out: hHeap=0x1f0000) returned 1 [0271.751] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a9b40 | out: hHeap=0x1f0000) returned 1 [0271.751] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aa7f8 | out: hHeap=0x1f0000) returned 1 [0271.751] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0271.752] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285098 | out: hHeap=0x1f0000) returned 1 [0271.752] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24eb40 | out: hHeap=0x1f0000) returned 1 [0271.752] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x233698 [0271.752] GetLastError () returned 0x0 [0271.752] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238800 [0271.753] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238940 [0271.754] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Extended\\Parameterinfo.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\extended\\parameterinfo.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e290, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0271.754] GetFileType (hFile=0x1c0) returned 0x1 [0271.755] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x286f98 [0271.755] SetFilePointerEx (in: hFile=0x1c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e218 | out: lpNewFilePointer=0x0) returned 1 [0271.755] GetLastError () returned 0xb7 [0271.756] CloseHandle (hObject=0x1c0) returned 1 [0271.756] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238940 | out: hHeap=0x1f0000) returned 1 [0271.756] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238800 | out: hHeap=0x1f0000) returned 1 [0271.757] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2852a8 | out: hHeap=0x1f0000) returned 1 [0271.757] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285ae8 | out: hHeap=0x1f0000) returned 1 [0271.757] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0271.757] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c30 | out: hHeap=0x1f0000) returned 1 [0271.757] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236538 | out: hHeap=0x1f0000) returned 1 [0271.757] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0271.757] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0271.757] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233698 | out: hHeap=0x1f0000) returned 1 [0271.758] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0271.758] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0271.758] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24fd60 | out: hHeap=0x1f0000) returned 1 [0271.758] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233008 | out: hHeap=0x1f0000) returned 1 [0272.058] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238de0 | out: hHeap=0x1f0000) returned 1 [0272.058] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238850 | out: hHeap=0x1f0000) returned 1 [0272.058] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0272.058] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0272.058] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238810 | out: hHeap=0x1f0000) returned 1 [0272.058] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210240 | out: hHeap=0x1f0000) returned 1 [0272.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0272.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238880 | out: hHeap=0x1f0000) returned 1 [0272.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285bf0 | out: hHeap=0x1f0000) returned 1 [0272.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0272.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0272.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228b00 | out: hHeap=0x1f0000) returned 1 [0272.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0272.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0272.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228c68 | out: hHeap=0x1f0000) returned 1 [0272.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388b0 | out: hHeap=0x1f0000) returned 1 [0272.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238920 | out: hHeap=0x1f0000) returned 1 [0272.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28cfc8 | out: hHeap=0x1f0000) returned 1 [0272.060] CloseHandle (hObject=0x198) returned 1 [0272.061] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387e0 | out: hHeap=0x1f0000) returned 1 [0272.061] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238860 | out: hHeap=0x1f0000) returned 1 [0272.061] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237020 | out: hHeap=0x1f0000) returned 1 [0272.061] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24a1b8 | out: hHeap=0x1f0000) returned 1 [0272.062] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0272.062] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d30 | out: hHeap=0x1f0000) returned 1 [0272.062] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28dfd0 | out: hHeap=0x1f0000) returned 1 [0272.062] CloseHandle (hObject=0x174) returned 1 [0272.063] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388f0 | out: hHeap=0x1f0000) returned 1 [0272.063] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238930 | out: hHeap=0x1f0000) returned 1 [0272.063] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad078 | out: hHeap=0x1f0000) returned 1 [0272.063] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cb0 | out: hHeap=0x1f0000) returned 1 [0272.063] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21b618 | out: hHeap=0x1f0000) returned 1 [0272.063] CloseHandle (hObject=0x1e8) returned 1 [0272.064] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238980 | out: hHeap=0x1f0000) returned 1 [0272.064] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238900 | out: hHeap=0x1f0000) returned 1 [0272.064] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad130 | out: hHeap=0x1f0000) returned 1 [0272.064] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389b0 | out: hHeap=0x1f0000) returned 1 [0272.064] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238910 | out: hHeap=0x1f0000) returned 1 [0272.064] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238830 | out: hHeap=0x1f0000) returned 1 [0272.064] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388e0 | out: hHeap=0x1f0000) returned 1 [0272.064] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0272.065] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x251068 | out: hHeap=0x1f0000) returned 1 [0272.065] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232ef0 | out: hHeap=0x1f0000) returned 1 [0272.065] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206928 | out: hHeap=0x1f0000) returned 1 [0272.065] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0272.065] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0272.065] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abd88 | out: hHeap=0x1f0000) returned 1 [0272.065] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x258298 | out: hHeap=0x1f0000) returned 1 [0272.065] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2339e0 | out: hHeap=0x1f0000) returned 1 [0272.065] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239278 | out: hHeap=0x1f0000) returned 1 [0272.065] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae228 | out: hHeap=0x1f0000) returned 1 [0272.066] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f350 | out: hHeap=0x1f0000) returned 1 [0272.066] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228440 | out: hHeap=0x1f0000) returned 1 [0272.066] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0272.066] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\Extended\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\parameterinfo.xml")) returned 1 [0272.068] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x988a, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 1 [0272.068] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0272.068] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8e20 [0272.068] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x218450 [0272.068] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8e20 | out: hHeap=0x1f0000) returned 1 [0272.068] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2180d0 | out: hHeap=0x1f0000) returned 1 [0272.068] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0272.258] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Extended\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\uiinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0272.260] GetFileType (hFile=0x1e8) returned 0x1 [0272.261] CloseHandle (hObject=0x1e8) returned 1 [0272.261] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2364d0 [0272.262] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Extended\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\uiinfo.xml"), fInfoLevelId=0x0, lpFileInformation=0x173eb6c | out: lpFileInformation=0x173eb6c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x988a)) returned 1 [0272.262] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2364d0 | out: hHeap=0x1f0000) returned 1 [0272.262] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236538 [0272.262] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Extended\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\uiinfo.xml"), fInfoLevelId=0x0, lpFileInformation=0x173eb7c | out: lpFileInformation=0x173eb7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x988a)) returned 1 [0272.262] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236538 | out: hHeap=0x1f0000) returned 1 [0272.263] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2365a0 [0272.263] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2365a0 | out: hHeap=0x1f0000) returned 1 [0272.263] GetLastError () returned 0x0 [0272.263] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0272.263] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228758 [0272.264] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d9d0 [0272.264] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236468 [0272.264] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239010 [0272.264] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0272.264] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x212f98) returned 1 [0272.265] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238280 | out: pbBuffer=0x238280) returned 1 [0272.265] CryptReleaseContext (hProv=0x212f98, dwFlags=0x0) returned 1 [0272.265] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0272.266] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x24fd60 [0272.266] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x232dd8 [0272.266] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=42963478181) returned 1 [0272.266] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0272.266] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=42963515317) returned 1 [0272.266] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0272.267] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239208 [0272.267] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x252370 [0272.267] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x233350 [0272.267] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x2ab228 [0272.267] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210240 [0272.267] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206868 [0272.267] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210258 [0272.267] GetLastError () returned 0x0 [0272.268] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae660 [0272.268] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218768 [0272.268] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae660 | out: hHeap=0x1f0000) returned 1 [0272.268] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf8) returned 0x217038 [0272.268] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218768 | out: hHeap=0x1f0000) returned 1 [0272.268] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238830 [0272.269] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238810 [0272.269] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Extended\\UiInfo.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\extended\\uiinfo.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e230, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0272.270] GetFileType (hFile=0x1e8) returned 0x1 [0272.271] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389b0 [0272.271] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238840 [0272.272] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Extended\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\uiinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0272.272] GetFileType (hFile=0x174) returned 0x1 [0272.273] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e50 [0272.273] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0272.273] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad410 [0272.273] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389c0 [0272.303] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387e0 [0272.304] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Extended\\UiInfo.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\extended\\uiinfo.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0272.305] GetFileType (hFile=0x198) returned 0x1 [0272.306] GetLastError () returned 0xb7 [0272.306] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe4) returned 0x21b618 [0272.306] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f70 [0272.306] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f50 [0272.306] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cf0 [0272.306] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2adb40 [0272.307] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238850 [0272.307] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238860 [0272.308] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Extended\\UiInfo.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\extended\\uiinfo.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0272.308] GetFileType (hFile=0x1c0) returned 0x1 [0272.309] GetLastError () returned 0xb7 [0272.309] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c70 [0272.309] GetLastError () returned 0xb7 [0272.309] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0272.309] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bd0 [0272.309] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c90 [0272.309] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb8) returned 0x237b60 [0272.310] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238910 [0272.310] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388b0 [0272.311] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Extended\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\uiinfo.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1a4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0272.311] GetFileType (hFile=0x21c) returned 0x1 [0272.312] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28cfc8 [0272.312] ReadFile (in: hFile=0x21c, lpBuffer=0x28cfc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e100, lpOverlapped=0x0 | out: lpBuffer=0x28cfc8*, lpNumberOfBytesRead=0x173e100*=0x1000, lpOverlapped=0x0) returned 1 [0272.416] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24ce10 [0272.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28dfd0 [0272.417] GetLastError () returned 0x0 [0272.420] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210198 [0272.420] GetLastError () returned 0x0 [0272.421] CloseHandle (hObject=0x1e8) returned 1 [0272.421] CloseHandle (hObject=0x174) returned 1 [0272.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238890 [0272.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238940 [0272.423] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Extended\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\uiinfo.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0272.425] GetFileType (hFile=0x174) returned 0x1 [0272.426] GetLastError () returned 0xb7 [0272.426] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x286f98 [0272.427] GetLastError () returned 0xb7 [0272.428] CloseHandle (hObject=0x174) returned 1 [0272.429] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\Extended\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\uiinfo.xml")) returned 0 [0272.429] GetLastError () returned 0x20 [0272.429] GetLastError () returned 0x20 [0272.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228680 [0272.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238370 [0272.430] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238000 [0272.430] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x228518 [0272.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204b90 [0272.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cd0 [0272.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x2388a0 [0272.657] GetLastError () returned 0x20 [0272.657] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239048 [0272.657] GetLastError () returned 0x20 [0272.657] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238c90 [0272.657] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2364d0 [0272.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2381b8 [0272.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2858d8 [0272.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238970 [0272.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0272.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101b0 [0272.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238800 [0272.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0272.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0272.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238140 [0272.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285bf0 [0272.659] GetLastError () returned 0x20 [0272.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x2388e0 [0272.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238920 [0272.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238930 [0272.660] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238920 | out: hHeap=0x1f0000) returned 1 [0272.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238950 [0272.660] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238930 | out: hHeap=0x1f0000) returned 1 [0272.660] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388e0 | out: hHeap=0x1f0000) returned 1 [0272.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387f0 [0272.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210210 [0272.660] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387f0 | out: hHeap=0x1f0000) returned 1 [0272.661] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101c8 [0272.661] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0272.661] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238950 | out: hHeap=0x1f0000) returned 1 [0272.661] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210210 [0272.661] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210078 [0272.661] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0272.661] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210210 [0272.662] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210078 | out: hHeap=0x1f0000) returned 1 [0272.662] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0272.662] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0272.662] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204b90 [0272.662] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0272.662] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d90 [0272.662] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204b90 | out: hHeap=0x1f0000) returned 1 [0272.663] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0272.663] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204dd0 [0272.663] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238168 [0272.663] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204dd0 | out: hHeap=0x1f0000) returned 1 [0272.663] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204c10 [0272.663] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0272.663] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d90 | out: hHeap=0x1f0000) returned 1 [0272.663] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204d90 [0272.664] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x2067d8 [0272.664] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d90 | out: hHeap=0x1f0000) returned 1 [0272.664] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238168 [0272.664] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2067d8 | out: hHeap=0x1f0000) returned 1 [0272.665] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c10 | out: hHeap=0x1f0000) returned 1 [0272.665] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238820 [0272.665] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101c8 [0272.665] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238820 | out: hHeap=0x1f0000) returned 1 [0272.665] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210210 [0272.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0272.666] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204d90 [0272.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0272.666] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206628 [0272.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d90 | out: hHeap=0x1f0000) returned 1 [0272.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206628 | out: hHeap=0x1f0000) returned 1 [0272.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0272.667] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0272.667] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0272.667] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2858d8 | out: hHeap=0x1f0000) returned 1 [0272.667] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0272.667] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239278 [0272.667] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0272.667] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x2130a8) returned 1 [0272.668] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238370 | out: pbBuffer=0x238370) returned 1 [0272.669] CryptReleaseContext (hProv=0x2130a8, dwFlags=0x0) returned 1 [0272.669] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0272.669] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238168 [0272.669] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238190 [0272.669] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238d00 [0272.669] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0272.669] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0272.670] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238d00 | out: hHeap=0x1f0000) returned 1 [0272.670] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8d18 [0272.670] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0272.670] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x236538 [0272.670] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238168 [0272.670] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2858d8 [0272.671] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e30 [0272.671] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2365a0 [0272.671] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2381b8 [0272.671] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285098 [0272.671] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387f0 [0272.671] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0272.671] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210210 [0272.671] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238920 [0272.672] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0272.672] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff40 [0272.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff40 | out: hHeap=0x1f0000) returned 1 [0272.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0272.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238920 | out: hHeap=0x1f0000) returned 1 [0272.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0272.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0272.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387f0 | out: hHeap=0x1f0000) returned 1 [0272.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285098 | out: hHeap=0x1f0000) returned 1 [0272.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0272.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2365a0 | out: hHeap=0x1f0000) returned 1 [0272.673] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x2392b0 [0272.673] GetLastError () returned 0x0 [0272.673] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238ec0 [0272.674] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0272.674] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0272.674] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0272.674] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0272.674] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0272.674] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0272.674] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x24e5c0 [0272.675] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2854b8 [0272.675] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0272.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0272.675] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0272.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0272.675] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2857d0 [0272.675] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0272.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0272.676] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fce0 [0272.676] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x258298 [0272.676] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x232ba8 [0272.676] QueryPerformanceCounter (in: lpPerformanceCount=0x173dee0 | out: lpPerformanceCount=0x173dee0*=43004498693) returned 1 [0272.676] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173df20 | out: lpSystemTimeAsFileTime=0x173df20) [0272.676] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238820 [0272.677] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0272.677] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e90 [0272.677] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e90 | out: hHeap=0x1f0000) returned 1 [0272.677] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0272.677] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0272.677] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bb0 [0272.677] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bb0 | out: hHeap=0x1f0000) returned 1 [0272.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0272.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238820 | out: hHeap=0x1f0000) returned 1 [0272.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0272.678] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238f68 [0272.678] GetLastError () returned 0x0 [0272.678] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0272.678] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0272.679] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0272.679] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381b8 [0272.679] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238370 [0272.679] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0272.679] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0272.679] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381e0 [0272.679] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0272.679] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x222ee8 [0272.680] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0272.680] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0272.680] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0272.680] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0272.681] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0272.681] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238280 [0272.681] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238758 [0272.681] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0272.681] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0272.681] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238758 | out: hHeap=0x1f0000) returned 1 [0272.681] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0272.682] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x234b90 [0272.682] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b90 | out: hHeap=0x1f0000) returned 1 [0272.682] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0272.682] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0272.682] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210210 [0272.682] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228a28 [0272.682] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238708 [0272.682] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238730 [0272.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238500 [0272.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238780 [0272.683] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238730 | out: hHeap=0x1f0000) returned 1 [0272.683] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238708 | out: hHeap=0x1f0000) returned 1 [0272.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0272.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238668 [0272.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2385f0 [0272.683] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238668 | out: hHeap=0x1f0000) returned 1 [0272.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0272.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385f0 | out: hHeap=0x1f0000) returned 1 [0272.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2067d8 [0272.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x2b4ef8 [0272.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b4ef8 | out: hHeap=0x1f0000) returned 1 [0272.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2067d8 | out: hHeap=0x1f0000) returned 1 [0272.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0272.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0272.685] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0272.685] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0272.685] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204cd0 [0272.685] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0272.685] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0272.685] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0272.685] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aa480 [0272.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0272.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238780 | out: hHeap=0x1f0000) returned 1 [0272.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238500 | out: hHeap=0x1f0000) returned 1 [0272.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228a28 | out: hHeap=0x1f0000) returned 1 [0272.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0272.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cd0 | out: hHeap=0x1f0000) returned 1 [0272.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0272.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0272.686] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aa7f8 [0272.687] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aa7f8 | out: hHeap=0x1f0000) returned 1 [0272.687] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ee8 | out: hHeap=0x1f0000) returned 1 [0272.687] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0272.687] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0272.687] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0272.687] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0272.687] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0272.687] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0272.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0272.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aaa48 [0272.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a9eb8 [0272.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aaa48 | out: hHeap=0x1f0000) returned 1 [0272.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a9eb8 | out: hHeap=0x1f0000) returned 1 [0272.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aa480 | out: hHeap=0x1f0000) returned 1 [0272.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0272.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2857d0 | out: hHeap=0x1f0000) returned 1 [0272.689] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24e5c0 | out: hHeap=0x1f0000) returned 1 [0272.689] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x233008 [0272.689] GetLastError () returned 0x0 [0272.689] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387f0 [0272.690] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238980 [0272.779] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Extended\\UiInfo.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\extended\\uiinfo.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e290, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0272.779] GetFileType (hFile=0x174) returned 0x1 [0272.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x286f98 [0272.780] SetFilePointerEx (in: hFile=0x174, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e218 | out: lpNewFilePointer=0x0) returned 1 [0272.780] GetLastError () returned 0xb7 [0272.781] CloseHandle (hObject=0x174) returned 1 [0272.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238980 | out: hHeap=0x1f0000) returned 1 [0272.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387f0 | out: hHeap=0x1f0000) returned 1 [0272.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2854b8 | out: hHeap=0x1f0000) returned 1 [0272.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2858d8 | out: hHeap=0x1f0000) returned 1 [0272.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0272.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e30 | out: hHeap=0x1f0000) returned 1 [0272.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236538 | out: hHeap=0x1f0000) returned 1 [0272.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0272.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0272.783] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233008 | out: hHeap=0x1f0000) returned 1 [0272.783] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0272.783] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0272.783] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x258298 | out: hHeap=0x1f0000) returned 1 [0272.783] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232ba8 | out: hHeap=0x1f0000) returned 1 [0272.783] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239278 | out: hHeap=0x1f0000) returned 1 [0272.783] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388a0 | out: hHeap=0x1f0000) returned 1 [0272.783] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0272.783] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0272.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238800 | out: hHeap=0x1f0000) returned 1 [0272.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0272.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0272.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238970 | out: hHeap=0x1f0000) returned 1 [0272.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285bf0 | out: hHeap=0x1f0000) returned 1 [0272.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0272.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2364d0 | out: hHeap=0x1f0000) returned 1 [0272.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228518 | out: hHeap=0x1f0000) returned 1 [0272.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0272.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0272.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228680 | out: hHeap=0x1f0000) returned 1 [0272.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238940 | out: hHeap=0x1f0000) returned 1 [0272.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238890 | out: hHeap=0x1f0000) returned 1 [0272.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28cfc8 | out: hHeap=0x1f0000) returned 1 [0272.786] CloseHandle (hObject=0x21c) returned 1 [0272.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388b0 | out: hHeap=0x1f0000) returned 1 [0272.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238910 | out: hHeap=0x1f0000) returned 1 [0272.787] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237b60 | out: hHeap=0x1f0000) returned 1 [0272.787] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24ce10 | out: hHeap=0x1f0000) returned 1 [0272.787] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0272.787] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d70 | out: hHeap=0x1f0000) returned 1 [0272.787] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28dfd0 | out: hHeap=0x1f0000) returned 1 [0272.787] CloseHandle (hObject=0x1c0) returned 1 [0272.788] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238860 | out: hHeap=0x1f0000) returned 1 [0272.788] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238850 | out: hHeap=0x1f0000) returned 1 [0272.788] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2adb40 | out: hHeap=0x1f0000) returned 1 [0272.788] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f70 | out: hHeap=0x1f0000) returned 1 [0272.788] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21b618 | out: hHeap=0x1f0000) returned 1 [0272.788] CloseHandle (hObject=0x198) returned 1 [0272.789] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387e0 | out: hHeap=0x1f0000) returned 1 [0272.790] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389c0 | out: hHeap=0x1f0000) returned 1 [0272.790] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad410 | out: hHeap=0x1f0000) returned 1 [0272.790] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238840 | out: hHeap=0x1f0000) returned 1 [0272.790] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389b0 | out: hHeap=0x1f0000) returned 1 [0272.790] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238810 | out: hHeap=0x1f0000) returned 1 [0272.790] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238830 | out: hHeap=0x1f0000) returned 1 [0272.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0272.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x252370 | out: hHeap=0x1f0000) returned 1 [0272.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233350 | out: hHeap=0x1f0000) returned 1 [0272.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206868 | out: hHeap=0x1f0000) returned 1 [0272.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0272.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210240 | out: hHeap=0x1f0000) returned 1 [0272.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab228 | out: hHeap=0x1f0000) returned 1 [0272.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24fd60 | out: hHeap=0x1f0000) returned 1 [0272.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232dd8 | out: hHeap=0x1f0000) returned 1 [0272.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239010 | out: hHeap=0x1f0000) returned 1 [0272.792] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0272.792] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d9d0 | out: hHeap=0x1f0000) returned 1 [0272.792] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228758 | out: hHeap=0x1f0000) returned 1 [0272.792] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0272.792] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\Extended\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\uiinfo.xml")) returned 1 [0272.794] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x988a, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 0 [0272.795] FindClose (in: hFindFile=0x24ec00 | out: hFindFile=0x24ec00) returned 1 [0272.795] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218450 | out: hHeap=0x1f0000) returned 1 [0272.795] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ee88 | out: hHeap=0x1f0000) returned 1 [0272.795] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0272.795] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228bd8 | out: hHeap=0x1f0000) returned 1 [0272.795] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228a28 [0272.795] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0272.795] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f350 [0272.795] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8d18 [0272.796] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\*", lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24eb40 [0272.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8dc8 [0272.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0272.798] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0272.798] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0272.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8d18 [0272.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8dc8 | out: hHeap=0x1f0000) returned 1 [0272.798] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0272.798] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0272.798] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Print.ico", cAlternateFileName="")) returned 1 [0272.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0272.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8e78 [0272.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217dd0 [0272.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8e78 | out: hHeap=0x1f0000) returned 1 [0272.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0272.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0272.800] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Print.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\print.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0272.800] GetFileType (hFile=0x198) returned 0x1 [0272.801] CloseHandle (hObject=0x198) returned 1 [0272.801] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236468 [0272.801] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Print.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\print.ico"), fInfoLevelId=0x0, lpFileInformation=0x173eb6c | out: lpFileInformation=0x173eb6c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e)) returned 1 [0272.801] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0272.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2365a0 [0272.802] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Print.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\print.ico"), fInfoLevelId=0x0, lpFileInformation=0x173eb7c | out: lpFileInformation=0x173eb7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e)) returned 1 [0272.802] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2365a0 | out: hHeap=0x1f0000) returned 1 [0272.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236468 [0272.802] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0272.802] GetLastError () returned 0x0 [0272.803] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0272.803] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228518 [0272.803] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22ee88 [0272.803] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236468 [0272.803] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239048 [0272.803] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0272.804] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x212ad0) returned 1 [0272.805] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238078 | out: pbBuffer=0x238078) returned 1 [0272.805] CryptReleaseContext (hProv=0x212ad0, dwFlags=0x0) returned 1 [0272.805] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0272.806] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x254980 [0272.806] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x233580 [0272.806] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=43017480209) returned 1 [0272.806] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0272.806] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=43017527617) returned 1 [0272.807] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0272.807] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238f30 [0272.807] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x252370 [0272.807] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2338c8 [0272.807] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x2aba48 [0272.807] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0272.807] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206808 [0272.808] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210240 [0272.808] GetLastError () returned 0x0 [0272.808] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae660 [0272.808] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218768 [0272.808] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae660 | out: hHeap=0x1f0000) returned 1 [0272.808] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf8) returned 0x217038 [0272.809] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218768 | out: hHeap=0x1f0000) returned 1 [0272.809] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389c0 [0272.809] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238890 [0272.810] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Print.ico.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\graphics\\print.ico.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e230, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0272.811] GetFileType (hFile=0x198) returned 0x1 [0272.812] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238840 [0272.812] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238860 [0272.813] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Print.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\print.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0272.813] GetFileType (hFile=0x1c0) returned 0x1 [0272.814] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c70 [0272.814] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0272.814] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad1e8 [0272.814] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238970 [0272.815] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238960 [0272.816] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Print.ico.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\graphics\\print.ico.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0272.816] GetFileType (hFile=0x21c) returned 0x1 [0272.816] GetLastError () returned 0xb7 [0272.817] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe4) returned 0x21af88 [0272.817] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d30 [0272.817] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ef0 [0272.817] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c10 [0272.817] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad4c8 [0272.817] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238940 [0272.818] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387e0 [0272.819] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Print.ico.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\graphics\\print.ico.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0272.819] GetFileType (hFile=0x174) returned 0x1 [0272.820] GetLastError () returned 0xb7 [0272.820] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c70 [0273.100] GetLastError () returned 0xb7 [0273.100] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c70 [0273.100] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204df0 [0273.100] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f70 [0273.100] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb8) returned 0x236ea0 [0273.101] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387f0 [0273.101] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238880 [0273.261] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Print.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\print.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1a4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0273.262] GetFileType (hFile=0x19c) returned 0x1 [0273.262] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28cfc8 [0273.262] ReadFile (in: hFile=0x19c, lpBuffer=0x28cfc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e100, lpOverlapped=0x0 | out: lpBuffer=0x28cfc8*, lpNumberOfBytesRead=0x173e100*=0x47e, lpOverlapped=0x0) returned 1 [0273.265] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24a1b8 [0273.265] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28dfd0 [0273.266] GetLastError () returned 0x0 [0273.266] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0273.266] GetLastError () returned 0x0 [0273.268] CloseHandle (hObject=0x198) returned 1 [0273.269] CloseHandle (hObject=0x1c0) returned 1 [0273.269] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238910 [0273.270] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238980 [0273.271] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Print.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\print.ico"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0273.272] GetFileType (hFile=0x1c0) returned 0x1 [0273.273] GetLastError () returned 0xb7 [0273.274] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x286f98 [0273.274] GetLastError () returned 0xb7 [0273.275] CloseHandle (hObject=0x1c0) returned 1 [0273.316] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Print.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\print.ico")) returned 0 [0273.316] GetLastError () returned 0x20 [0273.316] GetLastError () returned 0x20 [0273.317] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228bd8 [0273.317] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238078 [0273.317] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2384b0 [0273.317] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x228c68 [0273.317] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d90 [0273.317] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204df0 [0273.317] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x238930 [0273.318] GetLastError () returned 0x20 [0273.318] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x2390f0 [0273.318] GetLastError () returned 0x20 [0273.318] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238c58 [0273.318] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2365a0 [0273.318] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238140 [0273.318] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2859e0 [0273.319] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238920 [0273.319] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0273.319] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210210 [0273.319] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238800 [0273.319] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0273.319] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210258 [0273.319] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238000 [0273.319] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285098 [0273.319] GetLastError () returned 0x20 [0273.320] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x2388d0 [0273.320] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x2388a0 [0273.320] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238870 [0273.320] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388a0 | out: hHeap=0x1f0000) returned 1 [0273.320] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238810 [0273.320] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238870 | out: hHeap=0x1f0000) returned 1 [0273.320] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388d0 | out: hHeap=0x1f0000) returned 1 [0273.320] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388e0 [0273.320] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210198 [0273.320] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388e0 | out: hHeap=0x1f0000) returned 1 [0273.321] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101b0 [0273.321] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0273.321] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238810 | out: hHeap=0x1f0000) returned 1 [0273.321] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210198 [0273.321] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210078 [0273.321] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0273.321] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210198 [0273.321] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210078 | out: hHeap=0x1f0000) returned 1 [0273.321] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0273.321] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101b0 [0273.322] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204d70 [0273.322] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0273.322] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d90 [0273.322] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d70 | out: hHeap=0x1f0000) returned 1 [0273.322] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0273.322] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c30 [0273.322] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2380a0 [0273.322] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c30 | out: hHeap=0x1f0000) returned 1 [0273.322] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204db0 [0273.322] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0273.323] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d90 | out: hHeap=0x1f0000) returned 1 [0273.323] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204b90 [0273.323] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206628 [0273.323] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204b90 | out: hHeap=0x1f0000) returned 1 [0273.323] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2380a0 [0273.323] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206628 | out: hHeap=0x1f0000) returned 1 [0273.324] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204db0 | out: hHeap=0x1f0000) returned 1 [0273.324] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388d0 [0273.324] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210198 [0273.324] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388d0 | out: hHeap=0x1f0000) returned 1 [0273.324] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101b0 [0273.324] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0273.324] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204d70 [0273.324] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0273.324] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206658 [0273.324] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d70 | out: hHeap=0x1f0000) returned 1 [0273.324] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206658 | out: hHeap=0x1f0000) returned 1 [0273.325] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0273.325] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0273.325] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0273.325] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2859e0 | out: hHeap=0x1f0000) returned 1 [0273.325] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0273.325] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239160 [0273.325] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0273.325] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x212e00) returned 1 [0273.326] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238078 | out: pbBuffer=0x238078) returned 1 [0273.326] CryptReleaseContext (hProv=0x212e00, dwFlags=0x0) returned 1 [0273.327] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0273.327] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238078 [0273.327] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2380a0 [0273.327] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238d70 [0273.327] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0273.327] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0273.327] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238d70 | out: hHeap=0x1f0000) returned 1 [0273.327] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8d18 [0273.327] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101b0 [0273.328] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x236608 [0273.328] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238078 [0273.328] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x284f90 [0273.328] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cd0 [0273.328] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2364d0 [0273.328] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238140 [0273.328] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2859e0 [0273.328] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388a0 [0273.328] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0273.329] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210198 [0273.329] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238810 [0273.329] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0273.329] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20fef8 [0273.329] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20fef8 | out: hHeap=0x1f0000) returned 1 [0273.329] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0273.329] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238810 | out: hHeap=0x1f0000) returned 1 [0273.329] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0273.330] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0273.330] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388a0 | out: hHeap=0x1f0000) returned 1 [0273.330] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2859e0 | out: hHeap=0x1f0000) returned 1 [0273.330] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0273.330] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2364d0 | out: hHeap=0x1f0000) returned 1 [0273.330] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239198 [0273.330] GetLastError () returned 0x0 [0273.331] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239278 [0273.331] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0273.331] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0273.331] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0273.331] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0273.331] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0273.331] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0273.332] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x24eb80 [0273.332] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285bf0 [0273.332] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0273.332] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0273.332] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0273.332] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0273.332] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2858d8 [0273.332] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0273.332] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0273.332] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f830 [0273.332] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x255c88 [0273.333] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x233350 [0273.333] QueryPerformanceCounter (in: lpPerformanceCount=0x173dee0 | out: lpPerformanceCount=0x173dee0*=43070164999) returned 1 [0273.333] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173df20 | out: lpSystemTimeAsFileTime=0x173df20) [0273.333] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238820 [0273.333] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0273.333] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bf0 [0273.333] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bf0 | out: hHeap=0x1f0000) returned 1 [0273.334] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0273.334] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0273.334] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e30 [0273.334] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e30 | out: hHeap=0x1f0000) returned 1 [0273.334] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0273.334] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238820 | out: hHeap=0x1f0000) returned 1 [0273.334] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0273.334] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239198 [0273.335] GetLastError () returned 0x0 [0273.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0273.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0273.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0273.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238140 [0273.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381e0 [0273.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0273.336] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0273.336] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238168 [0273.336] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0273.336] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x222ee8 [0273.336] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0273.336] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0273.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0273.336] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0273.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0273.337] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381b8 [0273.337] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238618 [0273.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0273.337] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0273.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238618 | out: hHeap=0x1f0000) returned 1 [0273.337] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0273.337] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x234b90 [0273.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b90 | out: hHeap=0x1f0000) returned 1 [0273.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0273.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0273.338] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210198 [0273.338] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228b00 [0273.338] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238708 [0273.651] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238730 [0273.651] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238618 [0273.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238578 [0273.652] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238730 | out: hHeap=0x1f0000) returned 1 [0273.652] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238708 | out: hHeap=0x1f0000) returned 1 [0273.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0273.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238780 [0273.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238708 [0273.652] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238780 | out: hHeap=0x1f0000) returned 1 [0273.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0273.652] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238708 | out: hHeap=0x1f0000) returned 1 [0273.653] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206628 [0273.653] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x2b3100 [0273.653] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b3100 | out: hHeap=0x1f0000) returned 1 [0273.653] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206628 | out: hHeap=0x1f0000) returned 1 [0273.653] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0273.653] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0273.653] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0273.653] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0273.654] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204dd0 [0273.654] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0273.654] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0273.654] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0273.654] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a9d90 [0273.654] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0273.654] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238578 | out: hHeap=0x1f0000) returned 1 [0273.654] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238618 | out: hHeap=0x1f0000) returned 1 [0273.655] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228b00 | out: hHeap=0x1f0000) returned 1 [0273.655] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0273.655] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204dd0 | out: hHeap=0x1f0000) returned 1 [0273.655] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0273.655] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0273.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a9eb8 [0273.655] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a9eb8 | out: hHeap=0x1f0000) returned 1 [0273.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ee8 | out: hHeap=0x1f0000) returned 1 [0273.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0273.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0273.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0273.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0273.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0273.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0273.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0273.657] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aa230 [0273.657] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a90d8 [0273.657] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aa230 | out: hHeap=0x1f0000) returned 1 [0273.657] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a90d8 | out: hHeap=0x1f0000) returned 1 [0273.657] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a9d90 | out: hHeap=0x1f0000) returned 1 [0273.657] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0273.657] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2858d8 | out: hHeap=0x1f0000) returned 1 [0273.657] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24eb80 | out: hHeap=0x1f0000) returned 1 [0273.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x232dd8 [0273.658] GetLastError () returned 0x0 [0273.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238900 [0273.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238990 [0273.660] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Print.ico.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\graphics\\print.ico.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e290, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0273.660] GetFileType (hFile=0x1c0) returned 0x1 [0273.661] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x286f98 [0273.661] SetFilePointerEx (in: hFile=0x1c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e218 | out: lpNewFilePointer=0x0) returned 1 [0273.661] GetLastError () returned 0xb7 [0273.662] CloseHandle (hObject=0x1c0) returned 1 [0273.662] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238990 | out: hHeap=0x1f0000) returned 1 [0273.662] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238900 | out: hHeap=0x1f0000) returned 1 [0273.662] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285bf0 | out: hHeap=0x1f0000) returned 1 [0273.662] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x284f90 | out: hHeap=0x1f0000) returned 1 [0273.663] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0273.663] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cd0 | out: hHeap=0x1f0000) returned 1 [0273.663] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236608 | out: hHeap=0x1f0000) returned 1 [0273.663] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0273.663] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0273.663] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232dd8 | out: hHeap=0x1f0000) returned 1 [0273.663] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0273.663] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0273.664] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x255c88 | out: hHeap=0x1f0000) returned 1 [0273.664] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233350 | out: hHeap=0x1f0000) returned 1 [0273.664] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239160 | out: hHeap=0x1f0000) returned 1 [0273.664] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238930 | out: hHeap=0x1f0000) returned 1 [0273.664] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0273.664] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0273.664] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238800 | out: hHeap=0x1f0000) returned 1 [0273.664] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0273.665] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0273.665] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238920 | out: hHeap=0x1f0000) returned 1 [0273.665] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285098 | out: hHeap=0x1f0000) returned 1 [0273.665] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0273.665] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2365a0 | out: hHeap=0x1f0000) returned 1 [0273.665] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228c68 | out: hHeap=0x1f0000) returned 1 [0273.665] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0273.665] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0273.665] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228bd8 | out: hHeap=0x1f0000) returned 1 [0273.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238980 | out: hHeap=0x1f0000) returned 1 [0273.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238910 | out: hHeap=0x1f0000) returned 1 [0273.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28cfc8 | out: hHeap=0x1f0000) returned 1 [0273.666] CloseHandle (hObject=0x19c) returned 1 [0273.667] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238880 | out: hHeap=0x1f0000) returned 1 [0273.668] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387f0 | out: hHeap=0x1f0000) returned 1 [0273.668] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236ea0 | out: hHeap=0x1f0000) returned 1 [0273.668] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24a1b8 | out: hHeap=0x1f0000) returned 1 [0273.668] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0273.668] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c70 | out: hHeap=0x1f0000) returned 1 [0273.668] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28dfd0 | out: hHeap=0x1f0000) returned 1 [0273.668] CloseHandle (hObject=0x174) returned 1 [0273.669] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387e0 | out: hHeap=0x1f0000) returned 1 [0273.669] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238940 | out: hHeap=0x1f0000) returned 1 [0273.669] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad4c8 | out: hHeap=0x1f0000) returned 1 [0273.669] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d30 | out: hHeap=0x1f0000) returned 1 [0273.670] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21af88 | out: hHeap=0x1f0000) returned 1 [0273.670] CloseHandle (hObject=0x21c) returned 1 [0273.671] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238960 | out: hHeap=0x1f0000) returned 1 [0273.671] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238970 | out: hHeap=0x1f0000) returned 1 [0273.671] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad1e8 | out: hHeap=0x1f0000) returned 1 [0273.671] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238860 | out: hHeap=0x1f0000) returned 1 [0273.671] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238840 | out: hHeap=0x1f0000) returned 1 [0273.671] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238890 | out: hHeap=0x1f0000) returned 1 [0273.671] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389c0 | out: hHeap=0x1f0000) returned 1 [0273.671] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0273.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x252370 | out: hHeap=0x1f0000) returned 1 [0273.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2338c8 | out: hHeap=0x1f0000) returned 1 [0273.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206808 | out: hHeap=0x1f0000) returned 1 [0273.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210240 | out: hHeap=0x1f0000) returned 1 [0273.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0273.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aba48 | out: hHeap=0x1f0000) returned 1 [0273.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x254980 | out: hHeap=0x1f0000) returned 1 [0273.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233580 | out: hHeap=0x1f0000) returned 1 [0273.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239048 | out: hHeap=0x1f0000) returned 1 [0273.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0273.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ee88 | out: hHeap=0x1f0000) returned 1 [0273.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228518 | out: hHeap=0x1f0000) returned 1 [0273.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0273.673] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Print.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\print.ico")) returned 1 [0273.675] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate1.ico", cAlternateFileName="")) returned 1 [0273.675] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0273.676] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8d18 [0273.676] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217f50 [0273.676] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0273.676] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217dd0 | out: hHeap=0x1f0000) returned 1 [0273.676] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0273.677] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate1.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate1.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0273.677] GetFileType (hFile=0x21c) returned 0x1 [0273.678] CloseHandle (hObject=0x21c) returned 1 [0273.678] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2365a0 [0273.679] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate1.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate1.ico"), fInfoLevelId=0x0, lpFileInformation=0x173eb6c | out: lpFileInformation=0x173eb6c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1 [0273.679] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2365a0 | out: hHeap=0x1f0000) returned 1 [0273.679] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236608 [0273.679] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate1.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate1.ico"), fInfoLevelId=0x0, lpFileInformation=0x173eb7c | out: lpFileInformation=0x173eb7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1 [0273.679] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236608 | out: hHeap=0x1f0000) returned 1 [0273.679] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2365a0 [0273.680] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2365a0 | out: hHeap=0x1f0000) returned 1 [0273.680] GetLastError () returned 0x0 [0273.680] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0273.680] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228758 [0273.680] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d508 [0273.681] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236538 [0273.681] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239278 [0273.681] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0273.681] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x2130a8) returned 1 [0273.683] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238190 | out: pbBuffer=0x238190) returned 1 [0273.683] CryptReleaseContext (hProv=0x2130a8, dwFlags=0x0) returned 1 [0273.683] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0273.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x254980 [0273.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2338c8 [0273.683] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=43105216094) returned 1 [0273.683] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0273.684] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=43105260401) returned 1 [0273.684] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0273.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238f30 [0273.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x258298 [0273.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2339e0 [0273.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x2ab498 [0273.685] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210240 [0273.685] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2067d8 [0273.685] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0273.685] GetLastError () returned 0x0 [0273.685] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2adfd0 [0273.686] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218b88 [0273.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2adfd0 | out: hHeap=0x1f0000) returned 1 [0273.686] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf8) returned 0x217038 [0273.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218b88 | out: hHeap=0x1f0000) returned 1 [0273.686] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388c0 [0273.687] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238800 [0273.688] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate1.ico.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate1.ico.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e230, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0273.688] GetFileType (hFile=0x21c) returned 0x1 [0273.689] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238820 [0273.689] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238970 [0273.690] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate1.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate1.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0273.690] GetFileType (hFile=0x174) returned 0x1 [0273.691] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f10 [0273.691] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bb0 [0273.691] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad638 [0273.691] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238980 [0273.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238830 [0273.693] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate1.ico.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate1.ico.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0273.693] GetFileType (hFile=0x19c) returned 0x1 [0273.693] GetLastError () returned 0xb7 [0273.694] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe4) returned 0x21b9d8 [0273.694] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f70 [0273.694] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204db0 [0273.694] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c70 [0273.694] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad2a0 [0273.694] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238910 [0273.695] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387e0 [0273.695] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate1.ico.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate1.ico.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0273.696] GetFileType (hFile=0x1c0) returned 0x1 [0273.696] GetLastError () returned 0xb7 [0273.696] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204b90 [0273.697] GetLastError () returned 0xb7 [0273.697] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cd0 [0273.697] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d10 [0273.697] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e30 [0273.697] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb8) returned 0x236ea0 [0273.697] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387f0 [0273.697] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388a0 [0274.013] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate1.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate1.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1a4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0274.013] GetFileType (hFile=0x1e8) returned 0x1 [0274.014] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28cfc8 [0274.014] ReadFile (in: hFile=0x1e8, lpBuffer=0x28cfc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e100, lpOverlapped=0x0 | out: lpBuffer=0x28cfc8*, lpNumberOfBytesRead=0x173e100*=0x37e, lpOverlapped=0x0) returned 1 [0274.017] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24ca08 [0274.017] ReadFile (in: hFile=0x1e8, lpBuffer=0x28cfc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e190, lpOverlapped=0x0 | out: lpBuffer=0x28cfc8*, lpNumberOfBytesRead=0x173e190*=0x0, lpOverlapped=0x0) returned 1 [0274.018] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28dfd0 [0274.018] GetLastError () returned 0x0 [0274.019] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210198 [0274.019] GetLastError () returned 0x0 [0274.020] CloseHandle (hObject=0x21c) returned 1 [0274.021] CloseHandle (hObject=0x174) returned 1 [0274.022] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238990 [0274.022] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238840 [0274.023] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate1.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate1.ico"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0274.024] GetFileType (hFile=0x174) returned 0x1 [0274.025] GetLastError () returned 0xb7 [0274.026] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x286f98 [0274.026] GetLastError () returned 0xb7 [0274.027] CloseHandle (hObject=0x174) returned 1 [0274.027] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate1.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate1.ico")) returned 0 [0274.027] GetLastError () returned 0x20 [0274.027] GetLastError () returned 0x20 [0274.028] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228b00 [0274.028] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2386b8 [0274.028] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2386e0 [0274.028] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x228518 [0274.028] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d30 [0274.028] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cb0 [0274.028] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x238930 [0274.029] GetLastError () returned 0x20 [0274.029] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239048 [0274.029] GetLastError () returned 0x20 [0274.029] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238e50 [0274.029] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236608 [0274.029] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2384d8 [0274.029] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2855c0 [0274.029] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238900 [0274.029] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238708 [0274.029] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0274.029] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388d0 [0274.029] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385f0 [0274.029] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210210 [0274.029] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238528 [0274.029] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2856c8 [0274.030] GetLastError () returned 0x20 [0274.030] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x2388b0 [0274.030] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x2388e0 [0274.030] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238810 [0274.030] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388e0 | out: hHeap=0x1f0000) returned 1 [0274.030] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238920 [0274.030] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238810 | out: hHeap=0x1f0000) returned 1 [0274.030] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388b0 | out: hHeap=0x1f0000) returned 1 [0274.030] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389b0 [0274.030] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210258 [0274.030] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389b0 | out: hHeap=0x1f0000) returned 1 [0274.030] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101b0 [0274.031] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0274.031] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238920 | out: hHeap=0x1f0000) returned 1 [0274.031] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210258 [0274.031] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff28 [0274.031] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0274.031] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210258 [0274.031] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff28 | out: hHeap=0x1f0000) returned 1 [0274.031] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0274.031] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101b0 [0274.031] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204b90 [0274.031] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0274.031] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bb0 [0274.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204b90 | out: hHeap=0x1f0000) returned 1 [0274.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0274.032] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0274.032] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238640 [0274.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d70 | out: hHeap=0x1f0000) returned 1 [0274.032] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204f50 [0274.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238640 | out: hHeap=0x1f0000) returned 1 [0274.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bb0 | out: hHeap=0x1f0000) returned 1 [0274.032] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204c10 [0274.032] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206808 [0274.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c10 | out: hHeap=0x1f0000) returned 1 [0274.032] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238500 [0274.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206808 | out: hHeap=0x1f0000) returned 1 [0274.033] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f50 | out: hHeap=0x1f0000) returned 1 [0274.033] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238810 [0274.033] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210258 [0274.033] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238810 | out: hHeap=0x1f0000) returned 1 [0274.033] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101b0 [0274.033] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0274.033] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204d30 [0274.033] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0274.033] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206868 [0274.033] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d30 | out: hHeap=0x1f0000) returned 1 [0274.033] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206868 | out: hHeap=0x1f0000) returned 1 [0274.033] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238500 | out: hHeap=0x1f0000) returned 1 [0274.033] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2386b8 | out: hHeap=0x1f0000) returned 1 [0274.034] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0274.034] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2855c0 | out: hHeap=0x1f0000) returned 1 [0274.034] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384d8 | out: hHeap=0x1f0000) returned 1 [0274.034] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238d70 [0274.034] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238578 [0274.034] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x212ad0) returned 1 [0274.035] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238578 | out: pbBuffer=0x238578) returned 1 [0274.035] CryptReleaseContext (hProv=0x212ad0, dwFlags=0x0) returned 1 [0274.035] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238578 | out: hHeap=0x1f0000) returned 1 [0274.035] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238550 [0274.035] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238618 [0274.035] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239208 [0274.035] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238550 | out: hHeap=0x1f0000) returned 1 [0274.035] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0274.036] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239208 | out: hHeap=0x1f0000) returned 1 [0274.036] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8e78 [0274.036] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210258 [0274.036] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x236468 [0274.036] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238668 [0274.036] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2854b8 [0274.036] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0274.036] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2364d0 [0274.036] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2384d8 [0274.036] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285098 [0274.036] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238850 [0274.036] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238730 [0274.036] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101b0 [0274.037] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238810 [0274.037] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238690 [0274.037] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210018 [0274.037] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210018 | out: hHeap=0x1f0000) returned 1 [0274.037] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238690 | out: hHeap=0x1f0000) returned 1 [0274.037] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238810 | out: hHeap=0x1f0000) returned 1 [0274.037] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0274.037] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238730 | out: hHeap=0x1f0000) returned 1 [0274.037] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238850 | out: hHeap=0x1f0000) returned 1 [0274.037] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285098 | out: hHeap=0x1f0000) returned 1 [0274.037] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384d8 | out: hHeap=0x1f0000) returned 1 [0274.038] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2364d0 | out: hHeap=0x1f0000) returned 1 [0274.038] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239080 [0274.038] GetLastError () returned 0x0 [0274.038] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x2390f0 [0274.038] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0274.038] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0274.038] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0274.038] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0274.039] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0274.039] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0274.039] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x24e980 [0274.039] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2852a8 [0274.039] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0274.039] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0274.039] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0274.039] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0274.039] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2851a0 [0274.039] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0274.039] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0274.039] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f6a0 [0274.039] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x255c88 [0274.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x233580 [0274.040] QueryPerformanceCounter (in: lpPerformanceCount=0x173dee0 | out: lpPerformanceCount=0x173dee0*=43140853533) returned 1 [0274.040] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173df20 | out: lpSystemTimeAsFileTime=0x173df20) [0274.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x2389b0 [0274.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238730 [0274.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bd0 [0274.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bd0 | out: hHeap=0x1f0000) returned 1 [0274.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238730 | out: hHeap=0x1f0000) returned 1 [0274.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238780 [0274.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204df0 [0274.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204df0 | out: hHeap=0x1f0000) returned 1 [0274.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238780 | out: hHeap=0x1f0000) returned 1 [0274.041] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389b0 | out: hHeap=0x1f0000) returned 1 [0274.041] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0274.041] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238ec0 [0274.041] GetLastError () returned 0x0 [0274.041] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0274.041] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0274.041] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0274.041] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2385c8 [0274.041] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2386b8 [0274.041] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0274.041] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0274.041] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238550 [0274.041] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0274.041] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x222ee8 [0274.042] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0274.042] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0274.042] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0274.042] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0274.042] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0274.042] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238730 [0274.042] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238758 [0274.042] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238730 | out: hHeap=0x1f0000) returned 1 [0274.042] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0274.042] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238758 | out: hHeap=0x1f0000) returned 1 [0274.042] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0274.042] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x234b90 [0274.042] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b90 | out: hHeap=0x1f0000) returned 1 [0274.042] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0274.042] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0274.043] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101b0 [0274.043] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228440 [0274.043] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238730 [0274.043] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238578 [0274.043] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238758 [0274.043] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2385a0 [0274.043] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238578 | out: hHeap=0x1f0000) returned 1 [0274.043] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238730 | out: hHeap=0x1f0000) returned 1 [0274.043] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0274.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238640 [0274.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238730 [0274.045] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238640 | out: hHeap=0x1f0000) returned 1 [0274.333] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0274.333] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238730 | out: hHeap=0x1f0000) returned 1 [0274.333] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206808 [0274.333] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x2b1fe0 [0274.333] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b1fe0 | out: hHeap=0x1f0000) returned 1 [0274.333] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206808 | out: hHeap=0x1f0000) returned 1 [0274.333] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238550 | out: hHeap=0x1f0000) returned 1 [0274.334] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0274.334] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0274.334] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0274.334] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204d90 [0274.334] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0274.334] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0274.334] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2386b8 | out: hHeap=0x1f0000) returned 1 [0274.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aa6d0 [0274.335] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0274.335] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385a0 | out: hHeap=0x1f0000) returned 1 [0274.335] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238758 | out: hHeap=0x1f0000) returned 1 [0274.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228440 | out: hHeap=0x1f0000) returned 1 [0274.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0274.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d90 | out: hHeap=0x1f0000) returned 1 [0274.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0274.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0274.336] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a9c68 [0274.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a9c68 | out: hHeap=0x1f0000) returned 1 [0274.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ee8 | out: hHeap=0x1f0000) returned 1 [0274.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0274.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0274.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0274.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0274.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385c8 | out: hHeap=0x1f0000) returned 1 [0274.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0274.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0274.337] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a9b40 [0274.337] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a8fb0 [0274.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a9b40 | out: hHeap=0x1f0000) returned 1 [0274.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8fb0 | out: hHeap=0x1f0000) returned 1 [0274.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aa6d0 | out: hHeap=0x1f0000) returned 1 [0274.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0274.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2851a0 | out: hHeap=0x1f0000) returned 1 [0274.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24e980 | out: hHeap=0x1f0000) returned 1 [0274.338] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x233468 [0274.338] GetLastError () returned 0x0 [0274.339] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238940 [0274.339] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389b0 [0274.470] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate1.ico.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate1.ico.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e290, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0274.470] GetFileType (hFile=0x198) returned 0x1 [0274.471] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x286f98 [0274.471] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e218 | out: lpNewFilePointer=0x0) returned 1 [0274.471] GetLastError () returned 0xb7 [0274.472] CloseHandle (hObject=0x198) returned 1 [0274.472] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389b0 | out: hHeap=0x1f0000) returned 1 [0274.473] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238940 | out: hHeap=0x1f0000) returned 1 [0274.473] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2852a8 | out: hHeap=0x1f0000) returned 1 [0274.473] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2854b8 | out: hHeap=0x1f0000) returned 1 [0274.473] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238668 | out: hHeap=0x1f0000) returned 1 [0274.473] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d70 | out: hHeap=0x1f0000) returned 1 [0274.474] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0274.474] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0274.474] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8e78 | out: hHeap=0x1f0000) returned 1 [0274.474] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233468 | out: hHeap=0x1f0000) returned 1 [0274.474] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238618 | out: hHeap=0x1f0000) returned 1 [0274.474] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0274.474] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x255c88 | out: hHeap=0x1f0000) returned 1 [0274.474] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233580 | out: hHeap=0x1f0000) returned 1 [0274.475] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238d70 | out: hHeap=0x1f0000) returned 1 [0274.475] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238930 | out: hHeap=0x1f0000) returned 1 [0274.475] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0274.475] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385f0 | out: hHeap=0x1f0000) returned 1 [0274.475] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388d0 | out: hHeap=0x1f0000) returned 1 [0274.475] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0274.475] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238708 | out: hHeap=0x1f0000) returned 1 [0274.475] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238900 | out: hHeap=0x1f0000) returned 1 [0274.475] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2856c8 | out: hHeap=0x1f0000) returned 1 [0274.475] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238528 | out: hHeap=0x1f0000) returned 1 [0274.476] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236608 | out: hHeap=0x1f0000) returned 1 [0274.476] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228518 | out: hHeap=0x1f0000) returned 1 [0274.476] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2386e0 | out: hHeap=0x1f0000) returned 1 [0274.476] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0274.476] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228b00 | out: hHeap=0x1f0000) returned 1 [0274.476] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238840 | out: hHeap=0x1f0000) returned 1 [0274.476] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238990 | out: hHeap=0x1f0000) returned 1 [0274.476] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28cfc8 | out: hHeap=0x1f0000) returned 1 [0274.477] CloseHandle (hObject=0x1e8) returned 1 [0274.477] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388a0 | out: hHeap=0x1f0000) returned 1 [0274.477] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387f0 | out: hHeap=0x1f0000) returned 1 [0274.478] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236ea0 | out: hHeap=0x1f0000) returned 1 [0274.478] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24ca08 | out: hHeap=0x1f0000) returned 1 [0274.478] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0274.478] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cd0 | out: hHeap=0x1f0000) returned 1 [0274.478] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28dfd0 | out: hHeap=0x1f0000) returned 1 [0274.478] CloseHandle (hObject=0x1c0) returned 1 [0274.479] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387e0 | out: hHeap=0x1f0000) returned 1 [0274.479] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238910 | out: hHeap=0x1f0000) returned 1 [0274.479] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad2a0 | out: hHeap=0x1f0000) returned 1 [0274.479] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f70 | out: hHeap=0x1f0000) returned 1 [0274.479] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21b9d8 | out: hHeap=0x1f0000) returned 1 [0274.479] CloseHandle (hObject=0x19c) returned 1 [0274.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238830 | out: hHeap=0x1f0000) returned 1 [0274.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238980 | out: hHeap=0x1f0000) returned 1 [0274.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad638 | out: hHeap=0x1f0000) returned 1 [0274.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238970 | out: hHeap=0x1f0000) returned 1 [0274.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238820 | out: hHeap=0x1f0000) returned 1 [0274.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238800 | out: hHeap=0x1f0000) returned 1 [0274.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388c0 | out: hHeap=0x1f0000) returned 1 [0274.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0274.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x258298 | out: hHeap=0x1f0000) returned 1 [0274.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2339e0 | out: hHeap=0x1f0000) returned 1 [0274.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2067d8 | out: hHeap=0x1f0000) returned 1 [0274.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0274.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210240 | out: hHeap=0x1f0000) returned 1 [0274.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab498 | out: hHeap=0x1f0000) returned 1 [0274.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x254980 | out: hHeap=0x1f0000) returned 1 [0274.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2338c8 | out: hHeap=0x1f0000) returned 1 [0274.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239278 | out: hHeap=0x1f0000) returned 1 [0274.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236538 | out: hHeap=0x1f0000) returned 1 [0274.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d508 | out: hHeap=0x1f0000) returned 1 [0274.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228758 | out: hHeap=0x1f0000) returned 1 [0274.482] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0274.482] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate1.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate1.ico")) returned 1 [0274.483] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate2.ico", cAlternateFileName="")) returned 1 [0274.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0274.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8d18 [0274.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x2175d0 [0274.484] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0274.484] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217f50 | out: hHeap=0x1f0000) returned 1 [0274.484] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0274.485] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate2.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate2.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0274.485] GetFileType (hFile=0x19c) returned 0x1 [0274.486] CloseHandle (hObject=0x19c) returned 1 [0274.486] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2365a0 [0274.486] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate2.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate2.ico"), fInfoLevelId=0x0, lpFileInformation=0x173eb6c | out: lpFileInformation=0x173eb6c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1 [0274.486] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2365a0 | out: hHeap=0x1f0000) returned 1 [0274.487] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236468 [0274.487] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate2.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate2.ico"), fInfoLevelId=0x0, lpFileInformation=0x173eb7c | out: lpFileInformation=0x173eb7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1 [0274.487] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0274.487] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236468 [0274.487] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0274.487] GetLastError () returned 0x0 [0274.488] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0274.488] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228680 [0274.488] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22db68 [0274.489] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236468 [0274.489] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2392b0 [0274.489] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0274.489] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x212ad0) returned 1 [0274.490] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2380a0 | out: pbBuffer=0x2380a0) returned 1 [0274.490] CryptReleaseContext (hProv=0x212ad0, dwFlags=0x0) returned 1 [0274.490] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0274.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x252370 [0274.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x233698 [0274.491] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=43185952502) returned 1 [0274.491] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0274.491] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=43185995804) returned 1 [0274.491] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0274.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238d38 [0274.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x254980 [0274.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x232ba8 [0274.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x2ab2f8 [0274.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210210 [0274.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206658 [0274.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0274.492] GetLastError () returned 0x0 [0274.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae1b0 [0274.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218768 [0274.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae1b0 | out: hHeap=0x1f0000) returned 1 [0274.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf8) returned 0x217038 [0274.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218768 | out: hHeap=0x1f0000) returned 1 [0274.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238960 [0274.494] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389b0 [0274.495] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate2.ico.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate2.ico.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e230, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0274.495] GetFileType (hFile=0x19c) returned 0x1 [0274.496] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388b0 [0274.496] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238970 [0274.497] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate2.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate2.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0274.498] GetFileType (hFile=0x1c0) returned 0x1 [0274.498] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cf0 [0274.498] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e50 [0274.498] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2aded8 [0274.498] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388f0 [0274.499] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238850 [0274.500] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate2.ico.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate2.ico.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0274.500] GetFileType (hFile=0x1e8) returned 0x1 [0274.500] GetLastError () returned 0xb7 [0274.501] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe4) returned 0x21b7f8 [0274.501] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f70 [0274.501] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bf0 [0274.501] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204b90 [0274.501] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad4c8 [0274.501] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388a0 [0274.502] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238920 [0274.503] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate2.ico.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate2.ico.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0274.503] GetFileType (hFile=0x198) returned 0x1 [0274.503] GetLastError () returned 0xb7 [0274.504] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204b90 [0274.987] GetLastError () returned 0xb7 [0274.987] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d10 [0274.988] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204df0 [0274.988] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ef0 [0274.988] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb8) returned 0x237920 [0274.989] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238900 [0274.989] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238800 [0274.991] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate2.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate2.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1a4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0274.991] GetFileType (hFile=0x174) returned 0x1 [0274.992] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28cfc8 [0274.992] ReadFile (in: hFile=0x174, lpBuffer=0x28cfc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e100, lpOverlapped=0x0 | out: lpBuffer=0x28cfc8*, lpNumberOfBytesRead=0x173e100*=0x37e, lpOverlapped=0x0) returned 1 [0275.037] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24c600 [0275.037] ReadFile (in: hFile=0x174, lpBuffer=0x28cfc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e190, lpOverlapped=0x0 | out: lpBuffer=0x28cfc8*, lpNumberOfBytesRead=0x173e190*=0x0, lpOverlapped=0x0) returned 1 [0275.038] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28dfd0 [0275.038] GetLastError () returned 0x0 [0275.039] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210240 [0275.039] GetLastError () returned 0x0 [0275.042] CloseHandle (hObject=0x19c) returned 1 [0275.044] CloseHandle (hObject=0x1c0) returned 1 [0275.044] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238910 [0275.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238930 [0275.046] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate2.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate2.ico"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0275.048] GetFileType (hFile=0x1c0) returned 0x1 [0275.049] GetLastError () returned 0xb7 [0275.049] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x286f98 [0275.049] GetLastError () returned 0xb7 [0275.051] CloseHandle (hObject=0x1c0) returned 1 [0275.052] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate2.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate2.ico")) returned 0 [0275.052] GetLastError () returned 0x20 [0275.053] GetLastError () returned 0x20 [0275.053] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228758 [0275.053] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238398 [0275.053] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2384b0 [0275.053] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x2287a0 [0275.053] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e30 [0275.054] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204b90 [0275.054] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x2388c0 [0275.054] GetLastError () returned 0x20 [0275.054] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239010 [0275.054] GetLastError () returned 0x20 [0275.054] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x2390f0 [0275.055] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2364d0 [0275.055] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238280 [0275.055] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2854b8 [0275.055] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238870 [0275.055] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0275.055] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210258 [0275.055] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388d0 [0275.055] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0275.055] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210198 [0275.055] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2380a0 [0275.056] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285cf8 [0275.056] GetLastError () returned 0x20 [0275.056] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238950 [0275.056] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x2388e0 [0275.056] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238940 [0275.056] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388e0 | out: hHeap=0x1f0000) returned 1 [0275.056] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238830 [0275.057] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238940 | out: hHeap=0x1f0000) returned 1 [0275.057] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238950 | out: hHeap=0x1f0000) returned 1 [0275.057] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238980 [0275.057] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101b0 [0275.057] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238980 | out: hHeap=0x1f0000) returned 1 [0275.057] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101e0 [0275.057] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0275.057] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238830 | out: hHeap=0x1f0000) returned 1 [0275.057] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101b0 [0275.057] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210018 [0275.058] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0275.058] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101b0 [0275.058] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210018 | out: hHeap=0x1f0000) returned 1 [0275.058] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0275.058] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0275.058] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204c10 [0275.058] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0275.058] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0275.058] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c10 | out: hHeap=0x1f0000) returned 1 [0275.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0275.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bb0 [0275.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238140 [0275.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bb0 | out: hHeap=0x1f0000) returned 1 [0275.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204ef0 [0275.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0275.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d70 | out: hHeap=0x1f0000) returned 1 [0275.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204f10 [0275.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x2067d8 [0275.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f10 | out: hHeap=0x1f0000) returned 1 [0275.060] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238140 [0275.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2067d8 | out: hHeap=0x1f0000) returned 1 [0275.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ef0 | out: hHeap=0x1f0000) returned 1 [0275.060] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238820 [0275.060] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101e0 [0275.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238820 | out: hHeap=0x1f0000) returned 1 [0275.060] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101b0 [0275.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0275.060] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204d70 [0275.061] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0275.061] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x2067d8 [0275.061] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d70 | out: hHeap=0x1f0000) returned 1 [0275.061] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2067d8 | out: hHeap=0x1f0000) returned 1 [0275.061] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0275.061] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0275.061] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0275.061] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2854b8 | out: hHeap=0x1f0000) returned 1 [0275.062] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0275.062] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238de0 [0275.062] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0275.062] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x212e00) returned 1 [0275.064] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238140 | out: pbBuffer=0x238140) returned 1 [0275.064] CryptReleaseContext (hProv=0x212e00, dwFlags=0x0) returned 1 [0275.065] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0275.065] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238398 [0275.065] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238140 [0275.065] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239010 [0275.065] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0275.065] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0275.065] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239010 | out: hHeap=0x1f0000) returned 1 [0275.065] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8d18 [0275.065] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101b0 [0275.066] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x236538 [0275.066] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238168 [0275.066] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2851a0 [0275.066] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e90 [0275.066] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2365a0 [0275.066] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2381b8 [0275.297] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2856c8 [0275.297] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388e0 [0275.297] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0275.298] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0275.298] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238990 [0275.298] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0275.298] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210018 [0275.298] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210018 | out: hHeap=0x1f0000) returned 1 [0275.298] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0275.299] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238990 | out: hHeap=0x1f0000) returned 1 [0275.299] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0275.300] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0275.300] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388e0 | out: hHeap=0x1f0000) returned 1 [0275.300] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2856c8 | out: hHeap=0x1f0000) returned 1 [0275.300] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0275.300] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2365a0 | out: hHeap=0x1f0000) returned 1 [0275.300] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238f30 [0275.300] GetLastError () returned 0x0 [0275.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238d38 [0275.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0275.347] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0275.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0275.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0275.347] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0275.367] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0275.367] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x24ec80 [0275.367] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285098 [0275.367] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0275.367] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0275.367] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0275.368] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0275.368] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285ae8 [0275.368] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0275.368] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0275.368] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f6a0 [0275.368] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x258298 [0275.368] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x233580 [0275.368] QueryPerformanceCounter (in: lpPerformanceCount=0x173dee0 | out: lpPerformanceCount=0x173dee0*=43273742298) returned 1 [0275.369] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173df20 | out: lpSystemTimeAsFileTime=0x173df20) [0275.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x2388e0 [0275.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0275.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d30 [0275.369] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d30 | out: hHeap=0x1f0000) returned 1 [0275.369] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0275.370] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0275.370] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d30 [0275.370] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d30 | out: hHeap=0x1f0000) returned 1 [0275.370] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0275.370] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388e0 | out: hHeap=0x1f0000) returned 1 [0275.370] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0275.370] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239080 [0275.370] GetLastError () returned 0x0 [0275.371] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0275.371] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0275.371] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0275.371] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238398 [0275.371] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381b8 [0275.372] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0275.372] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0275.372] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238280 [0275.372] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0275.372] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x222ee8 [0275.372] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0275.372] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0275.372] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0275.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0275.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0275.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381e0 [0275.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238550 [0275.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0275.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0275.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238550 | out: hHeap=0x1f0000) returned 1 [0275.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0275.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x234b90 [0275.374] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b90 | out: hHeap=0x1f0000) returned 1 [0275.374] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0275.374] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0275.374] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101e0 [0275.374] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228b00 [0275.374] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238708 [0275.374] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2384d8 [0275.374] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238640 [0275.375] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238528 [0275.375] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384d8 | out: hHeap=0x1f0000) returned 1 [0275.375] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238708 | out: hHeap=0x1f0000) returned 1 [0275.375] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0275.375] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2384d8 [0275.375] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238668 [0275.375] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384d8 | out: hHeap=0x1f0000) returned 1 [0275.375] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0275.375] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238668 | out: hHeap=0x1f0000) returned 1 [0275.375] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206868 [0275.376] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x2b3100 [0275.376] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b3100 | out: hHeap=0x1f0000) returned 1 [0275.376] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206868 | out: hHeap=0x1f0000) returned 1 [0275.376] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0275.376] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0275.376] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0275.376] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0275.376] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204ef0 [0275.377] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0275.377] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0275.377] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0275.377] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aa7f8 [0275.377] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0275.377] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238528 | out: hHeap=0x1f0000) returned 1 [0275.377] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238640 | out: hHeap=0x1f0000) returned 1 [0275.377] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228b00 | out: hHeap=0x1f0000) returned 1 [0275.377] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0275.378] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ef0 | out: hHeap=0x1f0000) returned 1 [0275.378] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0275.378] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0275.378] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aa920 [0275.378] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aa920 | out: hHeap=0x1f0000) returned 1 [0275.378] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ee8 | out: hHeap=0x1f0000) returned 1 [0275.378] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0275.378] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0275.378] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0275.379] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0275.379] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0275.379] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0275.379] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0275.379] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aa358 [0275.379] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a90d8 [0275.379] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aa358 | out: hHeap=0x1f0000) returned 1 [0275.379] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a90d8 | out: hHeap=0x1f0000) returned 1 [0275.379] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aa7f8 | out: hHeap=0x1f0000) returned 1 [0275.379] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0275.380] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285ae8 | out: hHeap=0x1f0000) returned 1 [0275.380] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24ec80 | out: hHeap=0x1f0000) returned 1 [0275.380] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x233350 [0275.380] GetLastError () returned 0x0 [0275.380] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238820 [0275.381] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238940 [0275.520] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate2.ico.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate2.ico.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e290, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0275.520] GetFileType (hFile=0x1ac) returned 0x1 [0275.521] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x286f98 [0275.521] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e218 | out: lpNewFilePointer=0x0) returned 1 [0275.521] GetLastError () returned 0xb7 [0275.522] CloseHandle (hObject=0x1ac) returned 1 [0275.523] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238940 | out: hHeap=0x1f0000) returned 1 [0275.523] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238820 | out: hHeap=0x1f0000) returned 1 [0275.523] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285098 | out: hHeap=0x1f0000) returned 1 [0275.523] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2851a0 | out: hHeap=0x1f0000) returned 1 [0275.523] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0275.523] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e90 | out: hHeap=0x1f0000) returned 1 [0275.523] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236538 | out: hHeap=0x1f0000) returned 1 [0275.523] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0275.523] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0275.524] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233350 | out: hHeap=0x1f0000) returned 1 [0275.524] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0275.524] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0275.524] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x258298 | out: hHeap=0x1f0000) returned 1 [0275.524] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233580 | out: hHeap=0x1f0000) returned 1 [0275.524] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238de0 | out: hHeap=0x1f0000) returned 1 [0275.524] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388c0 | out: hHeap=0x1f0000) returned 1 [0275.524] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0275.524] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0275.524] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388d0 | out: hHeap=0x1f0000) returned 1 [0275.524] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0275.524] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0275.524] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238870 | out: hHeap=0x1f0000) returned 1 [0275.524] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285cf8 | out: hHeap=0x1f0000) returned 1 [0275.524] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0275.525] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2364d0 | out: hHeap=0x1f0000) returned 1 [0275.525] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2287a0 | out: hHeap=0x1f0000) returned 1 [0275.525] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0275.525] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0275.525] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228758 | out: hHeap=0x1f0000) returned 1 [0275.525] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238930 | out: hHeap=0x1f0000) returned 1 [0275.525] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238910 | out: hHeap=0x1f0000) returned 1 [0275.525] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28cfc8 | out: hHeap=0x1f0000) returned 1 [0275.525] CloseHandle (hObject=0x174) returned 1 [0275.526] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238800 | out: hHeap=0x1f0000) returned 1 [0275.526] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238900 | out: hHeap=0x1f0000) returned 1 [0275.526] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237920 | out: hHeap=0x1f0000) returned 1 [0275.526] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24c600 | out: hHeap=0x1f0000) returned 1 [0275.526] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210240 | out: hHeap=0x1f0000) returned 1 [0275.527] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d10 | out: hHeap=0x1f0000) returned 1 [0275.527] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28dfd0 | out: hHeap=0x1f0000) returned 1 [0275.527] CloseHandle (hObject=0x198) returned 1 [0275.527] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238920 | out: hHeap=0x1f0000) returned 1 [0275.527] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388a0 | out: hHeap=0x1f0000) returned 1 [0275.527] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad4c8 | out: hHeap=0x1f0000) returned 1 [0275.527] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f70 | out: hHeap=0x1f0000) returned 1 [0275.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21b7f8 | out: hHeap=0x1f0000) returned 1 [0275.528] CloseHandle (hObject=0x1e8) returned 1 [0275.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238850 | out: hHeap=0x1f0000) returned 1 [0275.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388f0 | out: hHeap=0x1f0000) returned 1 [0275.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aded8 | out: hHeap=0x1f0000) returned 1 [0275.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238970 | out: hHeap=0x1f0000) returned 1 [0275.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388b0 | out: hHeap=0x1f0000) returned 1 [0275.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389b0 | out: hHeap=0x1f0000) returned 1 [0275.529] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238960 | out: hHeap=0x1f0000) returned 1 [0275.529] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0275.529] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x254980 | out: hHeap=0x1f0000) returned 1 [0275.529] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232ba8 | out: hHeap=0x1f0000) returned 1 [0275.529] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206658 | out: hHeap=0x1f0000) returned 1 [0275.529] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0275.529] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0275.529] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab2f8 | out: hHeap=0x1f0000) returned 1 [0275.529] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x252370 | out: hHeap=0x1f0000) returned 1 [0275.529] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233698 | out: hHeap=0x1f0000) returned 1 [0275.529] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2392b0 | out: hHeap=0x1f0000) returned 1 [0275.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0275.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22db68 | out: hHeap=0x1f0000) returned 1 [0275.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228680 | out: hHeap=0x1f0000) returned 1 [0275.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0275.530] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate2.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate2.ico")) returned 1 [0275.533] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate3.ico", cAlternateFileName="")) returned 1 [0275.533] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0275.533] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8d18 [0275.533] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217ad0 [0275.533] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0275.533] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2175d0 | out: hHeap=0x1f0000) returned 1 [0275.533] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0275.534] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate3.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate3.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0275.534] GetFileType (hFile=0x1e8) returned 0x1 [0275.534] CloseHandle (hObject=0x1e8) returned 1 [0275.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236538 [0275.535] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate3.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate3.ico"), fInfoLevelId=0x0, lpFileInformation=0x173eb6c | out: lpFileInformation=0x173eb6c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1 [0275.536] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236538 | out: hHeap=0x1f0000) returned 1 [0275.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2364d0 [0275.536] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate3.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate3.ico"), fInfoLevelId=0x0, lpFileInformation=0x173eb7c | out: lpFileInformation=0x173eb7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1 [0275.536] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2364d0 | out: hHeap=0x1f0000) returned 1 [0275.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236468 [0275.536] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0275.536] GetLastError () returned 0x0 [0275.537] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0275.537] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228c68 [0275.537] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d508 [0275.537] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236468 [0275.537] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238d70 [0275.537] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0275.537] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x212f98) returned 1 [0275.539] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238140 | out: pbBuffer=0x238140) returned 1 [0275.539] CryptReleaseContext (hProv=0x212f98, dwFlags=0x0) returned 1 [0275.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0275.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x251068 [0275.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x233238 [0275.539] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=43290797281) returned 1 [0275.539] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0275.539] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=43290820949) returned 1 [0275.539] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0275.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238c58 [0275.540] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x252370 [0275.540] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x232dd8 [0275.540] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x2abb18 [0275.540] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210240 [0275.540] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206628 [0275.540] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210198 [0275.540] GetLastError () returned 0x0 [0275.540] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae5e8 [0275.540] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218768 [0275.541] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae5e8 | out: hHeap=0x1f0000) returned 1 [0275.541] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf8) returned 0x217038 [0275.541] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218768 | out: hHeap=0x1f0000) returned 1 [0275.541] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238820 [0275.541] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238890 [0275.542] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate3.ico.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate3.ico.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e230, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0275.543] GetFileType (hFile=0x1e8) returned 0x1 [0275.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387e0 [0275.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388f0 [0275.544] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate3.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate3.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0275.545] GetFileType (hFile=0x198) returned 0x1 [0275.545] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c70 [0275.545] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204df0 [0275.545] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2aded8 [0275.545] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238810 [0275.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387f0 [0275.547] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate3.ico.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate3.ico.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0275.547] GetFileType (hFile=0x174) returned 0x1 [0275.547] GetLastError () returned 0xb7 [0275.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe4) returned 0x21b528 [0275.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e30 [0275.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bf0 [0275.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f70 [0275.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad580 [0275.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238910 [0275.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238970 [0275.549] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate3.ico.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate3.ico.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0275.549] GetFileType (hFile=0x1ac) returned 0x1 [0275.549] GetLastError () returned 0xb7 [0275.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204dd0 [0275.549] GetLastError () returned 0xb7 [0275.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bd0 [0275.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ef0 [0275.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c10 [0275.550] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb8) returned 0x2376e0 [0275.550] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238990 [0275.550] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388e0 [0275.550] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate3.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate3.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1a4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0275.551] GetFileType (hFile=0x1e0) returned 0x1 [0275.552] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28cfc8 [0275.552] ReadFile (in: hFile=0x1e0, lpBuffer=0x28cfc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e100, lpOverlapped=0x0 | out: lpBuffer=0x28cfc8*, lpNumberOfBytesRead=0x173e100*=0x37e, lpOverlapped=0x0) returned 1 [0275.667] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24ca08 [0275.667] ReadFile (in: hFile=0x1e0, lpBuffer=0x28cfc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e190, lpOverlapped=0x0 | out: lpBuffer=0x28cfc8*, lpNumberOfBytesRead=0x173e190*=0x0, lpOverlapped=0x0) returned 1 [0275.668] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x286f98 [0275.668] GetLastError () returned 0x0 [0275.669] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210210 [0275.669] GetLastError () returned 0x0 [0275.671] CloseHandle (hObject=0x1e8) returned 1 [0275.672] CloseHandle (hObject=0x198) returned 1 [0275.673] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238870 [0275.673] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238930 [0275.674] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate3.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate3.ico"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0275.677] GetFileType (hFile=0x198) returned 0x1 [0275.677] GetLastError () returned 0xb7 [0275.678] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28ffe0 [0275.678] GetLastError () returned 0xb7 [0275.680] CloseHandle (hObject=0x198) returned 1 [0275.681] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate3.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate3.ico")) returned 0 [0275.681] GetLastError () returned 0x20 [0275.681] GetLastError () returned 0x20 [0275.681] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228440 [0275.681] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238280 [0275.681] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238398 [0275.682] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x228b00 [0275.682] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c10 [0275.682] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0275.682] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x2388a0 [0275.682] GetLastError () returned 0x20 [0275.682] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238de0 [0275.683] GetLastError () returned 0x20 [0275.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238c58 [0275.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236608 [0275.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2381b8 [0275.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2854b8 [0275.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388d0 [0275.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0275.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101b0 [0275.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388b0 [0275.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0275.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0275.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238078 [0275.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x284f90 [0275.684] GetLastError () returned 0x20 [0275.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238800 [0275.685] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x2388c0 [0275.685] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238900 [0275.685] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388c0 | out: hHeap=0x1f0000) returned 1 [0275.685] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389c0 [0275.685] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238900 | out: hHeap=0x1f0000) returned 1 [0275.685] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238800 | out: hHeap=0x1f0000) returned 1 [0275.685] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238830 [0275.685] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210258 [0275.685] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238830 | out: hHeap=0x1f0000) returned 1 [0275.686] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101c8 [0275.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0275.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389c0 | out: hHeap=0x1f0000) returned 1 [0275.686] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210258 [0275.686] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210120 [0275.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0275.686] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210258 [0275.687] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210120 | out: hHeap=0x1f0000) returned 1 [0275.687] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0275.687] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0275.687] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204e50 [0275.687] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0275.687] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c10 [0275.687] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e50 | out: hHeap=0x1f0000) returned 1 [0275.687] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0275.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c70 [0275.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238140 [0275.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c70 | out: hHeap=0x1f0000) returned 1 [0275.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204d70 [0275.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0275.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c10 | out: hHeap=0x1f0000) returned 1 [0275.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204d30 [0275.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x2068c8 [0275.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d30 | out: hHeap=0x1f0000) returned 1 [0275.689] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238140 [0275.689] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2068c8 | out: hHeap=0x1f0000) returned 1 [0275.689] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d70 | out: hHeap=0x1f0000) returned 1 [0275.689] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238830 [0275.689] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210258 [0275.689] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238830 | out: hHeap=0x1f0000) returned 1 [0275.689] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0275.690] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0275.690] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204f10 [0275.690] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0275.690] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x2068c8 [0275.690] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f10 | out: hHeap=0x1f0000) returned 1 [0275.690] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2068c8 | out: hHeap=0x1f0000) returned 1 [0275.690] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0275.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0275.691] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0275.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2854b8 | out: hHeap=0x1f0000) returned 1 [0275.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0275.691] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c90 [0275.691] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0275.692] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x212ad0) returned 1 [0275.693] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238140 | out: pbBuffer=0x238140) returned 1 [0275.693] CryptReleaseContext (hProv=0x212ad0, dwFlags=0x0) returned 1 [0275.693] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0275.693] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238140 [0275.693] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238168 [0275.693] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239160 [0275.693] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0275.694] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0275.694] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239160 | out: hHeap=0x1f0000) returned 1 [0275.694] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8d18 [0275.694] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210258 [0275.694] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x2364d0 [0275.694] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238140 [0275.694] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285ae8 [0275.694] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ef0 [0275.694] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236538 [0275.695] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238280 [0275.695] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2857d0 [0275.695] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238840 [0275.695] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0275.695] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0275.695] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238830 [0275.695] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0275.695] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20fef8 [0275.696] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20fef8 | out: hHeap=0x1f0000) returned 1 [0275.696] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0275.696] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238830 | out: hHeap=0x1f0000) returned 1 [0275.696] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0275.696] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0275.696] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238840 | out: hHeap=0x1f0000) returned 1 [0275.696] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2857d0 | out: hHeap=0x1f0000) returned 1 [0275.696] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0275.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236538 | out: hHeap=0x1f0000) returned 1 [0275.697] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239080 [0275.697] GetLastError () returned 0x0 [0275.697] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239080 [0275.697] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0275.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0275.698] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0275.698] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0275.698] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0275.698] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0275.698] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x24ed40 [0275.698] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2859e0 [0275.698] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0275.698] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0275.699] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0275.699] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0275.699] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2856c8 [0275.699] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0275.699] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0275.699] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fb50 [0275.699] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x255c88 [0275.699] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2338c8 [0275.699] QueryPerformanceCounter (in: lpPerformanceCount=0x173dee0 | out: lpPerformanceCount=0x173dee0*=43306841144) returned 1 [0275.700] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173df20 | out: lpSystemTimeAsFileTime=0x173df20) [0275.700] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x2388c0 [0275.700] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0275.700] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e50 [0275.700] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e50 | out: hHeap=0x1f0000) returned 1 [0275.700] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0275.700] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0275.701] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f10 [0275.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f10 | out: hHeap=0x1f0000) returned 1 [0275.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0275.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388c0 | out: hHeap=0x1f0000) returned 1 [0275.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0275.701] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239208 [0275.701] GetLastError () returned 0x0 [0275.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0275.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0275.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0275.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238190 [0275.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381b8 [0275.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0275.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0275.703] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238280 [0275.703] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0275.703] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x222ee8 [0275.703] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0275.703] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0275.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0275.703] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0275.704] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0275.704] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381e0 [0275.704] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238500 [0275.704] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0275.704] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0275.704] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238500 | out: hHeap=0x1f0000) returned 1 [0275.704] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0275.704] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x234b90 [0275.704] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b90 | out: hHeap=0x1f0000) returned 1 [0275.705] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0275.705] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0275.705] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101c8 [0275.705] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228bd8 [0275.705] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238668 [0275.705] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2385a0 [0275.705] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238690 [0275.705] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2385f0 [0275.705] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385a0 | out: hHeap=0x1f0000) returned 1 [0275.705] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238668 | out: hHeap=0x1f0000) returned 1 [0275.705] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0275.705] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238730 [0275.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238780 [0275.706] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238730 | out: hHeap=0x1f0000) returned 1 [0275.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0275.706] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238780 | out: hHeap=0x1f0000) returned 1 [0275.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206658 [0275.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x2b4ab0 [0275.706] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b4ab0 | out: hHeap=0x1f0000) returned 1 [0275.706] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206658 | out: hHeap=0x1f0000) returned 1 [0275.706] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0275.707] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0275.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0275.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0276.072] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204e50 [0276.072] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0276.072] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0276.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0276.072] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a9200 [0276.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0276.073] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385f0 | out: hHeap=0x1f0000) returned 1 [0276.073] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238690 | out: hHeap=0x1f0000) returned 1 [0276.073] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228bd8 | out: hHeap=0x1f0000) returned 1 [0276.073] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0276.073] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e50 | out: hHeap=0x1f0000) returned 1 [0276.073] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0276.074] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0276.074] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a9eb8 [0276.074] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a9eb8 | out: hHeap=0x1f0000) returned 1 [0276.074] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ee8 | out: hHeap=0x1f0000) returned 1 [0276.074] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0276.074] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0276.074] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0276.075] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0276.075] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0276.075] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0276.075] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0276.075] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a9c68 [0276.075] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a97c8 [0276.075] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a9c68 | out: hHeap=0x1f0000) returned 1 [0276.076] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a97c8 | out: hHeap=0x1f0000) returned 1 [0276.076] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a9200 | out: hHeap=0x1f0000) returned 1 [0276.076] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0276.076] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2856c8 | out: hHeap=0x1f0000) returned 1 [0276.076] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24ed40 | out: hHeap=0x1f0000) returned 1 [0276.076] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x2339e0 [0276.076] GetLastError () returned 0x0 [0276.077] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388c0 [0276.077] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389b0 [0276.217] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate3.ico.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate3.ico.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e290, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0276.217] GetFileType (hFile=0x19c) returned 0x1 [0276.220] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28ffe0 [0276.220] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e218 | out: lpNewFilePointer=0x0) returned 1 [0276.221] GetLastError () returned 0xb7 [0276.221] CloseHandle (hObject=0x19c) returned 1 [0276.222] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389b0 | out: hHeap=0x1f0000) returned 1 [0276.222] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388c0 | out: hHeap=0x1f0000) returned 1 [0276.222] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2859e0 | out: hHeap=0x1f0000) returned 1 [0276.222] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285ae8 | out: hHeap=0x1f0000) returned 1 [0276.222] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0276.222] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ef0 | out: hHeap=0x1f0000) returned 1 [0276.222] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2364d0 | out: hHeap=0x1f0000) returned 1 [0276.223] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0276.223] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0276.223] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2339e0 | out: hHeap=0x1f0000) returned 1 [0276.223] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0276.223] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0276.224] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x255c88 | out: hHeap=0x1f0000) returned 1 [0276.224] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2338c8 | out: hHeap=0x1f0000) returned 1 [0276.224] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c90 | out: hHeap=0x1f0000) returned 1 [0276.224] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388a0 | out: hHeap=0x1f0000) returned 1 [0276.224] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0276.224] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0276.224] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388b0 | out: hHeap=0x1f0000) returned 1 [0276.224] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0276.224] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0276.224] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388d0 | out: hHeap=0x1f0000) returned 1 [0276.225] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x284f90 | out: hHeap=0x1f0000) returned 1 [0276.225] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0276.225] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236608 | out: hHeap=0x1f0000) returned 1 [0276.225] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228b00 | out: hHeap=0x1f0000) returned 1 [0276.225] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0276.225] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0276.225] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228440 | out: hHeap=0x1f0000) returned 1 [0276.225] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238930 | out: hHeap=0x1f0000) returned 1 [0276.225] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238870 | out: hHeap=0x1f0000) returned 1 [0276.226] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28cfc8 | out: hHeap=0x1f0000) returned 1 [0276.226] CloseHandle (hObject=0x1e0) returned 1 [0276.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388e0 | out: hHeap=0x1f0000) returned 1 [0276.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238990 | out: hHeap=0x1f0000) returned 1 [0276.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2376e0 | out: hHeap=0x1f0000) returned 1 [0276.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24ca08 | out: hHeap=0x1f0000) returned 1 [0276.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0276.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bd0 | out: hHeap=0x1f0000) returned 1 [0276.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286f98 | out: hHeap=0x1f0000) returned 1 [0276.227] CloseHandle (hObject=0x1ac) returned 1 [0276.228] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238970 | out: hHeap=0x1f0000) returned 1 [0276.228] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238910 | out: hHeap=0x1f0000) returned 1 [0276.228] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad580 | out: hHeap=0x1f0000) returned 1 [0276.228] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e30 | out: hHeap=0x1f0000) returned 1 [0276.228] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21b528 | out: hHeap=0x1f0000) returned 1 [0276.229] CloseHandle (hObject=0x174) returned 1 [0276.229] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387f0 | out: hHeap=0x1f0000) returned 1 [0276.229] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238810 | out: hHeap=0x1f0000) returned 1 [0276.229] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aded8 | out: hHeap=0x1f0000) returned 1 [0276.229] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388f0 | out: hHeap=0x1f0000) returned 1 [0276.229] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387e0 | out: hHeap=0x1f0000) returned 1 [0276.230] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238890 | out: hHeap=0x1f0000) returned 1 [0276.230] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238820 | out: hHeap=0x1f0000) returned 1 [0276.230] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0276.230] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x252370 | out: hHeap=0x1f0000) returned 1 [0276.230] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232dd8 | out: hHeap=0x1f0000) returned 1 [0276.230] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206628 | out: hHeap=0x1f0000) returned 1 [0276.230] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0276.230] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210240 | out: hHeap=0x1f0000) returned 1 [0276.231] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abb18 | out: hHeap=0x1f0000) returned 1 [0276.231] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x251068 | out: hHeap=0x1f0000) returned 1 [0276.231] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233238 | out: hHeap=0x1f0000) returned 1 [0276.231] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238d70 | out: hHeap=0x1f0000) returned 1 [0276.231] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0276.231] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d508 | out: hHeap=0x1f0000) returned 1 [0276.231] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228c68 | out: hHeap=0x1f0000) returned 1 [0276.231] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0276.232] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate3.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate3.ico")) returned 1 [0276.233] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate4.ico", cAlternateFileName="")) returned 1 [0276.234] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0276.234] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8d18 [0276.234] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x2177d0 [0276.234] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0276.234] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217ad0 | out: hHeap=0x1f0000) returned 1 [0276.234] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0276.235] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate4.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate4.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0276.235] GetFileType (hFile=0x174) returned 0x1 [0276.236] CloseHandle (hObject=0x174) returned 1 [0276.236] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236468 [0276.236] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate4.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate4.ico"), fInfoLevelId=0x0, lpFileInformation=0x173eb6c | out: lpFileInformation=0x173eb6c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1 [0276.236] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0276.236] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2364d0 [0276.237] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate4.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate4.ico"), fInfoLevelId=0x0, lpFileInformation=0x173eb7c | out: lpFileInformation=0x173eb7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1 [0276.237] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2364d0 | out: hHeap=0x1f0000) returned 1 [0276.237] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236468 [0276.237] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0276.237] GetLastError () returned 0x0 [0276.238] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0276.238] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228bd8 [0276.238] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d508 [0276.238] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2364d0 [0276.238] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239208 [0276.239] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0276.239] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x212ad0) returned 1 [0276.240] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2380a0 | out: pbBuffer=0x2380a0) returned 1 [0276.240] CryptReleaseContext (hProv=0x212ad0, dwFlags=0x0) returned 1 [0276.240] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0276.240] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x258298 [0276.240] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x232ba8 [0276.240] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=43360923090) returned 1 [0276.240] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0276.241] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=43360952894) returned 1 [0276.241] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0276.241] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238ec0 [0276.241] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x24fd60 [0276.241] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x232ef0 [0276.241] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x2ab498 [0276.241] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210240 [0276.241] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206628 [0276.241] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210210 [0276.241] GetLastError () returned 0x0 [0276.242] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae318 [0276.242] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218b88 [0276.242] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae318 | out: hHeap=0x1f0000) returned 1 [0276.242] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf8) returned 0x217038 [0276.242] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218b88 | out: hHeap=0x1f0000) returned 1 [0276.242] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238910 [0276.242] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387e0 [0276.243] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate4.ico.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate4.ico.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e230, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0276.244] GetFileType (hFile=0x174) returned 0x1 [0276.244] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387f0 [0276.244] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238880 [0276.245] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate4.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate4.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0276.245] GetFileType (hFile=0x1ac) returned 0x1 [0276.246] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e30 [0276.246] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bf0 [0276.246] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2aded8 [0276.246] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388a0 [0276.247] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238920 [0276.247] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate4.ico.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate4.ico.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0276.248] GetFileType (hFile=0x1e0) returned 0x1 [0276.248] GetLastError () returned 0xb7 [0276.248] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe4) returned 0x21bac8 [0276.249] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204dd0 [0276.249] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bd0 [0276.249] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ef0 [0276.249] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad1e8 [0276.249] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238930 [0276.249] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238990 [0276.250] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate4.ico.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate4.ico.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0276.251] GetFileType (hFile=0x19c) returned 0x1 [0276.251] GetLastError () returned 0xb7 [0276.251] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204df0 [0276.251] GetLastError () returned 0xb7 [0276.252] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e30 [0276.252] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e70 [0276.252] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bb0 [0276.252] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb8) returned 0x237320 [0276.252] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238870 [0276.252] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238940 [0276.253] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate4.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate4.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1a4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0276.253] GetFileType (hFile=0x1c0) returned 0x1 [0276.254] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28cfc8 [0276.496] ReadFile (in: hFile=0x1c0, lpBuffer=0x28cfc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e100, lpOverlapped=0x0 | out: lpBuffer=0x28cfc8*, lpNumberOfBytesRead=0x173e100*=0x37e, lpOverlapped=0x0) returned 1 [0276.498] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24c600 [0276.499] ReadFile (in: hFile=0x1c0, lpBuffer=0x28cfc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e190, lpOverlapped=0x0 | out: lpBuffer=0x28cfc8*, lpNumberOfBytesRead=0x173e190*=0x0, lpOverlapped=0x0) returned 1 [0276.499] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x286f98 [0276.500] GetLastError () returned 0x0 [0276.500] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210258 [0276.500] GetLastError () returned 0x0 [0276.502] CloseHandle (hObject=0x174) returned 1 [0276.503] CloseHandle (hObject=0x1ac) returned 1 [0276.505] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238900 [0276.505] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238950 [0276.599] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate4.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate4.ico"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0276.601] GetFileType (hFile=0x174) returned 0x1 [0276.602] GetLastError () returned 0xb7 [0276.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x290fe8 [0276.603] GetLastError () returned 0xb7 [0276.604] CloseHandle (hObject=0x174) returned 1 [0276.605] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate4.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate4.ico")) returned 0 [0276.605] GetLastError () returned 0x20 [0276.605] GetLastError () returned 0x20 [0276.606] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228758 [0276.606] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238078 [0276.606] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238398 [0276.606] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x2287a0 [0276.606] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0276.606] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d90 [0276.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x238890 [0276.607] GetLastError () returned 0x20 [0276.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238f30 [0276.607] GetLastError () returned 0x20 [0276.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239010 [0276.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236468 [0276.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2381e0 [0276.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2856c8 [0276.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238820 [0276.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0276.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210198 [0276.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238800 [0276.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0276.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101b0 [0276.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2380a0 [0276.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285098 [0276.609] GetLastError () returned 0x20 [0276.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x2388c0 [0276.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238810 [0276.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238830 [0276.610] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238810 | out: hHeap=0x1f0000) returned 1 [0276.610] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238970 [0276.610] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238830 | out: hHeap=0x1f0000) returned 1 [0276.610] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388c0 | out: hHeap=0x1f0000) returned 1 [0276.610] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389b0 [0276.610] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101c8 [0276.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389b0 | out: hHeap=0x1f0000) returned 1 [0276.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101e0 [0276.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0276.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238970 | out: hHeap=0x1f0000) returned 1 [0276.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101c8 [0276.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff40 [0276.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0276.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0276.612] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff40 | out: hHeap=0x1f0000) returned 1 [0276.612] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0276.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0276.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204d30 [0276.612] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0276.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204df0 [0276.612] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d30 | out: hHeap=0x1f0000) returned 1 [0276.612] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0276.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cb0 [0276.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238140 [0276.613] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cb0 | out: hHeap=0x1f0000) returned 1 [0276.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204d10 [0276.614] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0276.614] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204df0 | out: hHeap=0x1f0000) returned 1 [0276.614] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204e50 [0276.614] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206658 [0276.614] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e50 | out: hHeap=0x1f0000) returned 1 [0276.614] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238140 [0276.614] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206658 | out: hHeap=0x1f0000) returned 1 [0276.614] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d10 | out: hHeap=0x1f0000) returned 1 [0276.615] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238810 [0276.615] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101e0 [0276.615] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238810 | out: hHeap=0x1f0000) returned 1 [0276.615] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0276.615] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0276.615] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204f10 [0276.615] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0276.615] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x2067d8 [0276.615] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f10 | out: hHeap=0x1f0000) returned 1 [0276.615] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2067d8 | out: hHeap=0x1f0000) returned 1 [0276.616] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0276.616] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0276.616] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0276.616] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2856c8 | out: hHeap=0x1f0000) returned 1 [0276.616] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0276.616] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238de0 [0276.616] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0276.616] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x212ad0) returned 1 [0276.618] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238078 | out: pbBuffer=0x238078) returned 1 [0276.618] CryptReleaseContext (hProv=0x212ad0, dwFlags=0x0) returned 1 [0276.618] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0276.618] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238078 [0276.618] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238140 [0276.618] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239080 [0276.618] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0276.618] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0276.619] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239080 | out: hHeap=0x1f0000) returned 1 [0276.619] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8d18 [0276.619] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0276.619] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x236538 [0276.619] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238078 [0276.619] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2852a8 [0276.619] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0276.619] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2365a0 [0276.619] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238168 [0276.620] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285cf8 [0276.620] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238810 [0276.620] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0276.620] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0276.620] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238970 [0276.620] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0276.620] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20fef8 [0276.620] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20fef8 | out: hHeap=0x1f0000) returned 1 [0276.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0276.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238970 | out: hHeap=0x1f0000) returned 1 [0276.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0276.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0276.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238810 | out: hHeap=0x1f0000) returned 1 [0276.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285cf8 | out: hHeap=0x1f0000) returned 1 [0276.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0276.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2365a0 | out: hHeap=0x1f0000) returned 1 [0276.621] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x2392b0 [0276.621] GetLastError () returned 0x0 [0276.622] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239010 [0276.622] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0276.622] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0276.622] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0276.622] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0276.622] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0276.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0276.623] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x24ec00 [0276.623] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2854b8 [0276.623] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0276.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0276.623] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0276.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0276.623] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2855c0 [0276.623] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0276.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0276.623] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22ff38 [0276.624] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x2595a0 [0276.624] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2338c8 [0276.624] QueryPerformanceCounter (in: lpPerformanceCount=0x173dee0 | out: lpPerformanceCount=0x173dee0*=43399280795) returned 1 [0276.624] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173df20 | out: lpSystemTimeAsFileTime=0x173df20) [0276.624] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x2389b0 [0276.624] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0276.625] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c70 [0276.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c70 | out: hHeap=0x1f0000) returned 1 [0276.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0276.625] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0276.625] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ef0 [0276.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ef0 | out: hHeap=0x1f0000) returned 1 [0276.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0276.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389b0 | out: hHeap=0x1f0000) returned 1 [0276.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0276.626] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238d00 [0276.626] GetLastError () returned 0x0 [0276.626] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0276.626] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0276.626] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0276.626] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238168 [0276.627] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238190 [0276.627] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0276.627] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0276.627] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381b8 [0276.627] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0276.627] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x222ee8 [0276.627] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0276.627] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0276.628] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0276.628] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0276.628] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0276.628] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381e0 [0276.628] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2385a0 [0276.628] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0276.628] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0276.628] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385a0 | out: hHeap=0x1f0000) returned 1 [0276.629] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0276.629] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x234b90 [0276.629] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b90 | out: hHeap=0x1f0000) returned 1 [0276.629] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0276.629] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0276.630] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101e0 [0276.630] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228c68 [0276.630] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238780 [0276.630] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238550 [0276.630] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2384d8 [0276.630] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238730 [0276.630] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238550 | out: hHeap=0x1f0000) returned 1 [0276.630] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238780 | out: hHeap=0x1f0000) returned 1 [0276.631] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0276.631] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238780 [0276.631] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238758 [0276.631] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238780 | out: hHeap=0x1f0000) returned 1 [0276.631] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0276.631] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238758 | out: hHeap=0x1f0000) returned 1 [0276.631] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206658 [0276.631] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x2b2428 [0276.631] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b2428 | out: hHeap=0x1f0000) returned 1 [0276.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206658 | out: hHeap=0x1f0000) returned 1 [0276.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0276.632] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0276.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0276.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0276.632] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204bf0 [0276.632] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0276.632] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0276.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0276.632] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aa7f8 [0276.633] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0276.633] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238730 | out: hHeap=0x1f0000) returned 1 [0276.633] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384d8 | out: hHeap=0x1f0000) returned 1 [0276.633] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228c68 | out: hHeap=0x1f0000) returned 1 [0276.633] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0276.633] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bf0 | out: hHeap=0x1f0000) returned 1 [0276.633] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0276.633] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0276.633] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aa920 [0276.633] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aa920 | out: hHeap=0x1f0000) returned 1 [0276.633] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ee8 | out: hHeap=0x1f0000) returned 1 [0276.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0276.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0276.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0276.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0276.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0276.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0276.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0276.634] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aac98 [0276.634] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aadc0 [0276.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aac98 | out: hHeap=0x1f0000) returned 1 [0276.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aadc0 | out: hHeap=0x1f0000) returned 1 [0276.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aa7f8 | out: hHeap=0x1f0000) returned 1 [0276.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0276.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2855c0 | out: hHeap=0x1f0000) returned 1 [0276.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24ec00 | out: hHeap=0x1f0000) returned 1 [0276.634] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x232dd8 [0276.635] GetLastError () returned 0x0 [0276.635] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238960 [0276.635] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238810 [0276.636] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate4.ico.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate4.ico.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e290, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0276.636] GetFileType (hFile=0x174) returned 0x1 [0276.636] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x295008 [0276.636] SetFilePointerEx (in: hFile=0x174, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e218 | out: lpNewFilePointer=0x0) returned 1 [0276.637] GetLastError () returned 0xb7 [0276.637] CloseHandle (hObject=0x174) returned 1 [0276.638] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238810 | out: hHeap=0x1f0000) returned 1 [0276.638] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238960 | out: hHeap=0x1f0000) returned 1 [0276.638] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2854b8 | out: hHeap=0x1f0000) returned 1 [0276.638] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2852a8 | out: hHeap=0x1f0000) returned 1 [0276.638] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0276.638] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d70 | out: hHeap=0x1f0000) returned 1 [0276.638] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236538 | out: hHeap=0x1f0000) returned 1 [0276.638] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0276.638] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0276.639] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232dd8 | out: hHeap=0x1f0000) returned 1 [0276.639] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0276.639] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0276.639] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2595a0 | out: hHeap=0x1f0000) returned 1 [0276.639] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2338c8 | out: hHeap=0x1f0000) returned 1 [0276.639] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238de0 | out: hHeap=0x1f0000) returned 1 [0276.639] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238890 | out: hHeap=0x1f0000) returned 1 [0276.639] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0276.639] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0276.639] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238800 | out: hHeap=0x1f0000) returned 1 [0276.639] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0276.640] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0276.640] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238820 | out: hHeap=0x1f0000) returned 1 [0276.640] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285098 | out: hHeap=0x1f0000) returned 1 [0276.640] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0276.640] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0276.640] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2287a0 | out: hHeap=0x1f0000) returned 1 [0276.640] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0276.640] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0276.640] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228758 | out: hHeap=0x1f0000) returned 1 [0276.640] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238950 | out: hHeap=0x1f0000) returned 1 [0276.641] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238900 | out: hHeap=0x1f0000) returned 1 [0276.641] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28cfc8 | out: hHeap=0x1f0000) returned 1 [0276.641] CloseHandle (hObject=0x1c0) returned 1 [0276.641] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238940 | out: hHeap=0x1f0000) returned 1 [0276.642] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238870 | out: hHeap=0x1f0000) returned 1 [0276.642] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237320 | out: hHeap=0x1f0000) returned 1 [0276.642] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24c600 | out: hHeap=0x1f0000) returned 1 [0276.642] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0276.642] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e30 | out: hHeap=0x1f0000) returned 1 [0276.642] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286f98 | out: hHeap=0x1f0000) returned 1 [0276.642] CloseHandle (hObject=0x19c) returned 1 [0276.643] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238990 | out: hHeap=0x1f0000) returned 1 [0276.643] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238930 | out: hHeap=0x1f0000) returned 1 [0276.643] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad1e8 | out: hHeap=0x1f0000) returned 1 [0276.643] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204dd0 | out: hHeap=0x1f0000) returned 1 [0276.643] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21bac8 | out: hHeap=0x1f0000) returned 1 [0276.643] CloseHandle (hObject=0x1e0) returned 1 [0276.644] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238920 | out: hHeap=0x1f0000) returned 1 [0276.644] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388a0 | out: hHeap=0x1f0000) returned 1 [0276.644] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aded8 | out: hHeap=0x1f0000) returned 1 [0276.644] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238880 | out: hHeap=0x1f0000) returned 1 [0276.644] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387f0 | out: hHeap=0x1f0000) returned 1 [0276.644] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387e0 | out: hHeap=0x1f0000) returned 1 [0276.644] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238910 | out: hHeap=0x1f0000) returned 1 [0276.917] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0276.917] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24fd60 | out: hHeap=0x1f0000) returned 1 [0276.917] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232ef0 | out: hHeap=0x1f0000) returned 1 [0276.917] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206628 | out: hHeap=0x1f0000) returned 1 [0276.917] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0276.918] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210240 | out: hHeap=0x1f0000) returned 1 [0276.918] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab498 | out: hHeap=0x1f0000) returned 1 [0276.918] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x258298 | out: hHeap=0x1f0000) returned 1 [0276.918] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232ba8 | out: hHeap=0x1f0000) returned 1 [0276.918] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239208 | out: hHeap=0x1f0000) returned 1 [0276.918] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2364d0 | out: hHeap=0x1f0000) returned 1 [0276.918] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d508 | out: hHeap=0x1f0000) returned 1 [0276.919] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228bd8 | out: hHeap=0x1f0000) returned 1 [0276.919] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0276.919] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate4.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate4.ico")) returned 1 [0276.921] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate5.ico", cAlternateFileName="")) returned 1 [0276.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0276.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8e20 [0276.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217850 [0276.921] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8e20 | out: hHeap=0x1f0000) returned 1 [0276.921] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2177d0 | out: hHeap=0x1f0000) returned 1 [0276.921] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0276.922] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate5.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate5.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0276.922] GetFileType (hFile=0x1ac) returned 0x1 [0276.922] CloseHandle (hObject=0x1ac) returned 1 [0276.923] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2365a0 [0276.923] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate5.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate5.ico"), fInfoLevelId=0x0, lpFileInformation=0x173eb6c | out: lpFileInformation=0x173eb6c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1 [0276.923] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2365a0 | out: hHeap=0x1f0000) returned 1 [0276.923] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236468 [0276.923] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate5.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate5.ico"), fInfoLevelId=0x0, lpFileInformation=0x173eb7c | out: lpFileInformation=0x173eb7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1 [0276.923] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0276.924] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236468 [0276.924] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0276.924] GetLastError () returned 0x0 [0276.924] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0276.925] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228b00 [0276.925] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d9d0 [0276.925] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236468 [0276.925] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239010 [0276.925] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0276.925] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x212e00) returned 1 [0276.927] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2384b0 | out: pbBuffer=0x2384b0) returned 1 [0276.927] CryptReleaseContext (hProv=0x212e00, dwFlags=0x0) returned 1 [0276.927] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0276.927] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x252370 [0276.927] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x233580 [0276.927] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=43429609132) returned 1 [0276.927] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0276.927] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=43429643014) returned 1 [0276.928] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0276.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x2392b0 [0276.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x254980 [0276.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x232ef0 [0276.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x2ab2f8 [0276.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210210 [0276.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206628 [0276.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210198 [0276.929] GetLastError () returned 0x0 [0276.929] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2adfd0 [0276.929] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ce8 [0276.929] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2adfd0 | out: hHeap=0x1f0000) returned 1 [0276.929] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf8) returned 0x217038 [0276.929] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ce8 | out: hHeap=0x1f0000) returned 1 [0276.929] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388a0 [0276.930] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238920 [0276.931] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate5.ico.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate5.ico.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e230, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0276.932] GetFileType (hFile=0x1ac) returned 0x1 [0276.932] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387e0 [0276.932] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388b0 [0276.933] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate5.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate5.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0276.934] GetFileType (hFile=0x1e0) returned 0x1 [0276.934] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ef0 [0276.934] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e90 [0276.935] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad860 [0276.935] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238800 [0276.935] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238990 [0276.936] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate5.ico.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate5.ico.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0276.936] GetFileType (hFile=0x19c) returned 0x1 [0276.937] GetLastError () returned 0xb7 [0276.937] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe4) returned 0x21b8e8 [0276.937] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ef0 [0276.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d90 [0276.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204df0 [0276.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad9d0 [0276.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238950 [0276.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387f0 [0276.939] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate5.ico.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate5.ico.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0276.939] GetFileType (hFile=0x1c0) returned 0x1 [0276.940] GetLastError () returned 0xb7 [0276.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cb0 [0276.940] GetLastError () returned 0xb7 [0276.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e30 [0276.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e50 [0276.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cf0 [0276.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb8) returned 0x2376e0 [0276.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238810 [0276.944] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388c0 [0276.944] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate5.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate5.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1a4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0276.945] GetFileType (hFile=0x174) returned 0x1 [0276.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28cfc8 [0276.946] ReadFile (in: hFile=0x174, lpBuffer=0x28cfc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e100, lpOverlapped=0x0 | out: lpBuffer=0x28cfc8*, lpNumberOfBytesRead=0x173e100*=0x37e, lpOverlapped=0x0) returned 1 [0276.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24a1b8 [0276.962] ReadFile (in: hFile=0x174, lpBuffer=0x28cfc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e190, lpOverlapped=0x0 | out: lpBuffer=0x28cfc8*, lpNumberOfBytesRead=0x173e190*=0x0, lpOverlapped=0x0) returned 1 [0276.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28dfd0 [0276.963] GetLastError () returned 0x0 [0276.963] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210240 [0276.963] GetLastError () returned 0x0 [0276.965] CloseHandle (hObject=0x1ac) returned 1 [0276.965] CloseHandle (hObject=0x1e0) returned 1 [0276.966] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238870 [0276.966] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238820 [0276.966] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate5.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate5.ico"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0276.968] GetFileType (hFile=0x1e0) returned 0x1 [0276.969] GetLastError () returned 0xb7 [0276.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x286f98 [0276.969] GetLastError () returned 0xb7 [0276.971] CloseHandle (hObject=0x1e0) returned 1 [0276.971] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate5.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate5.ico")) returned 0 [0276.971] GetLastError () returned 0x20 [0276.972] GetLastError () returned 0x20 [0276.972] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228bd8 [0276.972] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238190 [0276.972] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238280 [0276.972] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x228c68 [0276.972] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f50 [0277.213] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d30 [0277.213] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x2388d0 [0277.213] GetLastError () returned 0x20 [0277.214] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238cc8 [0277.214] GetLastError () returned 0x20 [0277.214] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238f68 [0277.214] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2364d0 [0277.214] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2384b0 [0277.214] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2855c0 [0277.215] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388e0 [0277.215] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0277.215] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0277.215] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388f0 [0277.215] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0277.215] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101b0 [0277.215] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238140 [0277.216] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285cf8 [0277.216] GetLastError () returned 0x20 [0277.216] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238900 [0277.216] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238930 [0277.216] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238830 [0277.216] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238930 | out: hHeap=0x1f0000) returned 1 [0277.216] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238850 [0277.216] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238830 | out: hHeap=0x1f0000) returned 1 [0277.217] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238900 | out: hHeap=0x1f0000) returned 1 [0277.217] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238860 [0277.217] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210258 [0277.217] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238860 | out: hHeap=0x1f0000) returned 1 [0277.217] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101e0 [0277.217] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0277.217] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238850 | out: hHeap=0x1f0000) returned 1 [0277.217] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210258 [0277.217] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff70 [0277.217] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0277.217] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210258 [0277.217] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff70 | out: hHeap=0x1f0000) returned 1 [0277.218] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0277.218] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0277.218] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204e50 [0277.218] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0277.218] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f10 [0277.218] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e50 | out: hHeap=0x1f0000) returned 1 [0277.218] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0277.218] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204df0 [0277.218] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238168 [0277.218] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204df0 | out: hHeap=0x1f0000) returned 1 [0277.218] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204bf0 [0277.219] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0277.219] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f10 | out: hHeap=0x1f0000) returned 1 [0277.219] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204e50 [0277.219] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206658 [0277.219] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e50 | out: hHeap=0x1f0000) returned 1 [0277.219] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238168 [0277.219] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206658 | out: hHeap=0x1f0000) returned 1 [0277.219] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bf0 | out: hHeap=0x1f0000) returned 1 [0277.219] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238850 [0277.219] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210258 [0277.220] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238850 | out: hHeap=0x1f0000) returned 1 [0277.220] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0277.220] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0277.220] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204c30 [0277.220] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0277.220] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x2066b8 [0277.220] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c30 | out: hHeap=0x1f0000) returned 1 [0277.220] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2066b8 | out: hHeap=0x1f0000) returned 1 [0277.220] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0277.220] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0277.221] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0277.221] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2855c0 | out: hHeap=0x1f0000) returned 1 [0277.221] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0277.221] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c58 [0277.221] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0277.221] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x212f98) returned 1 [0277.222] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2384b0 | out: pbBuffer=0x2384b0) returned 1 [0277.222] CryptReleaseContext (hProv=0x212f98, dwFlags=0x0) returned 1 [0277.222] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0277.222] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238398 [0277.222] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2384b0 [0277.223] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238f30 [0277.223] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0277.223] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0277.223] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238f30 | out: hHeap=0x1f0000) returned 1 [0277.223] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8d18 [0277.224] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210258 [0277.224] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x236538 [0277.224] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238168 [0277.224] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285098 [0277.224] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e50 [0277.224] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2365a0 [0277.224] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238190 [0277.224] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285bf0 [0277.224] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238830 [0277.225] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0277.225] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0277.225] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238900 [0277.225] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0277.225] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffd0 [0277.225] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffd0 | out: hHeap=0x1f0000) returned 1 [0277.225] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0277.225] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238900 | out: hHeap=0x1f0000) returned 1 [0277.225] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0277.225] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0277.226] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238830 | out: hHeap=0x1f0000) returned 1 [0277.226] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285bf0 | out: hHeap=0x1f0000) returned 1 [0277.226] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0277.226] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2365a0 | out: hHeap=0x1f0000) returned 1 [0277.226] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239160 [0277.226] GetLastError () returned 0x0 [0277.226] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238e88 [0277.227] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0277.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0277.227] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0277.227] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0277.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0277.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0277.227] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x24e6c0 [0277.227] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2859e0 [0277.227] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0277.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0277.227] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0277.228] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0277.228] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285e00 [0277.228] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0277.228] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0277.228] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f830 [0277.228] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x258298 [0277.228] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2337b0 [0277.228] QueryPerformanceCounter (in: lpPerformanceCount=0x173dee0 | out: lpPerformanceCount=0x173dee0*=43459710482) returned 1 [0277.228] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173df20 | out: lpSystemTimeAsFileTime=0x173df20) [0277.228] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238830 [0277.229] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0277.229] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cd0 [0277.229] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cd0 | out: hHeap=0x1f0000) returned 1 [0277.229] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0277.229] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0277.229] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f10 [0277.229] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f10 | out: hHeap=0x1f0000) returned 1 [0277.229] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0277.229] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238830 | out: hHeap=0x1f0000) returned 1 [0277.229] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0277.229] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238c90 [0277.230] GetLastError () returned 0x0 [0277.230] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0277.230] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0277.230] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0277.230] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238398 [0277.230] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238190 [0277.230] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0277.231] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0277.231] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381b8 [0277.231] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0277.231] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x222ee8 [0277.231] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0277.231] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0277.231] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0277.231] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0277.232] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0277.232] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381e0 [0277.232] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238550 [0277.232] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0277.232] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0277.232] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238550 | out: hHeap=0x1f0000) returned 1 [0277.232] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0277.232] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x234b90 [0277.233] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b90 | out: hHeap=0x1f0000) returned 1 [0277.233] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0277.233] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0277.233] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101e0 [0277.233] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228cb0 [0277.233] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238708 [0277.233] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2385a0 [0277.233] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238758 [0277.234] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238528 [0277.234] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385a0 | out: hHeap=0x1f0000) returned 1 [0277.234] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238708 | out: hHeap=0x1f0000) returned 1 [0277.234] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0277.234] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238500 [0277.234] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238550 [0277.234] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238500 | out: hHeap=0x1f0000) returned 1 [0277.235] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0277.235] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238550 | out: hHeap=0x1f0000) returned 1 [0277.235] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2067d8 [0277.235] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x2b4ab0 [0277.235] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b4ab0 | out: hHeap=0x1f0000) returned 1 [0277.235] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2067d8 | out: hHeap=0x1f0000) returned 1 [0277.235] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0277.235] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0277.236] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0277.236] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0277.236] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204f10 [0277.236] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0277.236] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0277.236] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0277.236] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aa108 [0277.236] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0277.237] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238528 | out: hHeap=0x1f0000) returned 1 [0277.237] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238758 | out: hHeap=0x1f0000) returned 1 [0277.237] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228cb0 | out: hHeap=0x1f0000) returned 1 [0277.237] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0277.237] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f10 | out: hHeap=0x1f0000) returned 1 [0277.237] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0277.237] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0277.237] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a9fe0 [0277.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a9fe0 | out: hHeap=0x1f0000) returned 1 [0277.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ee8 | out: hHeap=0x1f0000) returned 1 [0277.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0277.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0277.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0277.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0277.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0277.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0277.239] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0277.239] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a9fe0 [0277.239] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aab70 [0277.239] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a9fe0 | out: hHeap=0x1f0000) returned 1 [0277.239] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aab70 | out: hHeap=0x1f0000) returned 1 [0277.239] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aa108 | out: hHeap=0x1f0000) returned 1 [0277.239] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0277.239] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285e00 | out: hHeap=0x1f0000) returned 1 [0277.239] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24e6c0 | out: hHeap=0x1f0000) returned 1 [0277.240] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x2338c8 [0277.240] GetLastError () returned 0x0 [0277.240] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238860 [0277.241] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238900 [0277.241] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate5.ico.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate5.ico.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e290, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0277.242] GetFileType (hFile=0x1e0) returned 0x1 [0277.242] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x286f98 [0277.242] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e218 | out: lpNewFilePointer=0x0) returned 1 [0277.243] GetLastError () returned 0xb7 [0277.243] CloseHandle (hObject=0x1e0) returned 1 [0277.244] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238900 | out: hHeap=0x1f0000) returned 1 [0277.244] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238860 | out: hHeap=0x1f0000) returned 1 [0277.244] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2859e0 | out: hHeap=0x1f0000) returned 1 [0277.244] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285098 | out: hHeap=0x1f0000) returned 1 [0277.244] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0277.244] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e50 | out: hHeap=0x1f0000) returned 1 [0277.244] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236538 | out: hHeap=0x1f0000) returned 1 [0277.244] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0277.245] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0277.245] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2338c8 | out: hHeap=0x1f0000) returned 1 [0277.245] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0277.245] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0277.245] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x258298 | out: hHeap=0x1f0000) returned 1 [0277.245] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2337b0 | out: hHeap=0x1f0000) returned 1 [0277.245] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c58 | out: hHeap=0x1f0000) returned 1 [0277.245] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388d0 | out: hHeap=0x1f0000) returned 1 [0277.245] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0277.245] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0277.246] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388f0 | out: hHeap=0x1f0000) returned 1 [0277.246] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0277.246] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0277.246] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388e0 | out: hHeap=0x1f0000) returned 1 [0277.246] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285cf8 | out: hHeap=0x1f0000) returned 1 [0277.246] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0277.246] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2364d0 | out: hHeap=0x1f0000) returned 1 [0277.246] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228c68 | out: hHeap=0x1f0000) returned 1 [0277.246] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0277.246] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0277.247] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228bd8 | out: hHeap=0x1f0000) returned 1 [0277.247] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238820 | out: hHeap=0x1f0000) returned 1 [0277.247] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238870 | out: hHeap=0x1f0000) returned 1 [0277.247] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28cfc8 | out: hHeap=0x1f0000) returned 1 [0277.247] CloseHandle (hObject=0x174) returned 1 [0277.248] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388c0 | out: hHeap=0x1f0000) returned 1 [0277.248] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238810 | out: hHeap=0x1f0000) returned 1 [0277.248] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2376e0 | out: hHeap=0x1f0000) returned 1 [0277.248] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24a1b8 | out: hHeap=0x1f0000) returned 1 [0277.248] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210240 | out: hHeap=0x1f0000) returned 1 [0277.248] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e30 | out: hHeap=0x1f0000) returned 1 [0277.249] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28dfd0 | out: hHeap=0x1f0000) returned 1 [0277.249] CloseHandle (hObject=0x1c0) returned 1 [0277.249] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387f0 | out: hHeap=0x1f0000) returned 1 [0277.249] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238950 | out: hHeap=0x1f0000) returned 1 [0277.249] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad9d0 | out: hHeap=0x1f0000) returned 1 [0277.250] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ef0 | out: hHeap=0x1f0000) returned 1 [0277.250] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21b8e8 | out: hHeap=0x1f0000) returned 1 [0277.250] CloseHandle (hObject=0x19c) returned 1 [0277.250] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238990 | out: hHeap=0x1f0000) returned 1 [0277.250] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238800 | out: hHeap=0x1f0000) returned 1 [0277.251] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad860 | out: hHeap=0x1f0000) returned 1 [0277.251] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388b0 | out: hHeap=0x1f0000) returned 1 [0277.251] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387e0 | out: hHeap=0x1f0000) returned 1 [0277.251] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238920 | out: hHeap=0x1f0000) returned 1 [0277.251] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388a0 | out: hHeap=0x1f0000) returned 1 [0277.251] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0277.251] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x254980 | out: hHeap=0x1f0000) returned 1 [0277.251] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232ef0 | out: hHeap=0x1f0000) returned 1 [0277.251] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206628 | out: hHeap=0x1f0000) returned 1 [0277.252] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0277.252] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0277.252] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab2f8 | out: hHeap=0x1f0000) returned 1 [0277.252] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x252370 | out: hHeap=0x1f0000) returned 1 [0277.252] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233580 | out: hHeap=0x1f0000) returned 1 [0277.252] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239010 | out: hHeap=0x1f0000) returned 1 [0277.252] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0277.252] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d9d0 | out: hHeap=0x1f0000) returned 1 [0277.252] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228b00 | out: hHeap=0x1f0000) returned 1 [0277.252] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0277.252] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate5.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate5.ico")) returned 1 [0277.599] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate6.ico", cAlternateFileName="")) returned 1 [0277.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0277.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8d18 [0277.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x2177d0 [0277.599] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0277.599] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217850 | out: hHeap=0x1f0000) returned 1 [0277.599] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0277.767] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate6.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate6.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0277.767] GetFileType (hFile=0x21c) returned 0x1 [0277.767] CloseHandle (hObject=0x21c) returned 1 [0277.768] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2364d0 [0277.768] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate6.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate6.ico"), fInfoLevelId=0x0, lpFileInformation=0x173eb6c | out: lpFileInformation=0x173eb6c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1 [0277.768] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2364d0 | out: hHeap=0x1f0000) returned 1 [0277.768] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2364d0 [0277.768] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate6.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate6.ico"), fInfoLevelId=0x0, lpFileInformation=0x173eb7c | out: lpFileInformation=0x173eb7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1 [0277.768] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2364d0 | out: hHeap=0x1f0000) returned 1 [0277.768] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236608 [0277.769] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236608 | out: hHeap=0x1f0000) returned 1 [0277.769] GetLastError () returned 0x0 [0277.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0277.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228b00 [0277.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d508 [0277.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2364d0 [0277.770] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c90 [0277.770] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0277.770] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x212e00) returned 1 [0277.772] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238398 | out: pbBuffer=0x238398) returned 1 [0277.772] CryptReleaseContext (hProv=0x212e00, dwFlags=0x0) returned 1 [0277.772] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0277.772] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x251068 [0277.772] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x233468 [0277.772] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=43514123667) returned 1 [0277.772] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0277.773] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=43514161112) returned 1 [0277.773] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0277.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x2392b0 [0277.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x24fd60 [0277.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x232ba8 [0277.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x2ab498 [0277.774] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0277.774] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206868 [0277.774] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210198 [0277.774] GetLastError () returned 0x0 [0277.774] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2aee58 [0277.774] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218d98 [0277.775] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aee58 | out: hHeap=0x1f0000) returned 1 [0277.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf8) returned 0x217038 [0277.775] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218d98 | out: hHeap=0x1f0000) returned 1 [0277.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238910 [0277.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238970 [0277.776] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate6.ico.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate6.ico.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e230, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0277.777] GetFileType (hFile=0x21c) returned 0x1 [0277.778] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238900 [0277.778] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238800 [0277.779] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate6.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate6.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0277.779] GetFileType (hFile=0x19c) returned 0x1 [0277.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c10 [0277.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e30 [0277.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2adcb0 [0277.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388e0 [0277.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238920 [0277.781] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate6.ico.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate6.ico.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0277.781] GetFileType (hFile=0x1c0) returned 0x1 [0277.782] GetLastError () returned 0xb7 [0277.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe4) returned 0x21b9d8 [0277.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bb0 [0277.783] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d30 [0277.783] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cb0 [0277.783] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad9d0 [0277.783] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238930 [0277.783] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238890 [0277.784] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate6.ico.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate6.ico.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0277.784] GetFileType (hFile=0x174) returned 0x1 [0277.784] GetLastError () returned 0xb7 [0277.784] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204b90 [0277.785] GetLastError () returned 0xb7 [0277.785] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0277.785] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204dd0 [0277.785] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e70 [0277.786] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb8) returned 0x236ea0 [0277.786] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388d0 [0277.786] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388a0 [0277.787] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate6.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate6.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1a4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0277.787] GetFileType (hFile=0x1e0) returned 0x1 [0277.787] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x286f98 [0277.788] ReadFile (in: hFile=0x1e0, lpBuffer=0x286f98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e100, lpOverlapped=0x0 | out: lpBuffer=0x286f98*, lpNumberOfBytesRead=0x173e100*=0x37e, lpOverlapped=0x0) returned 1 [0277.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24b9e8 [0277.880] ReadFile (in: hFile=0x1e0, lpBuffer=0x286f98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e190, lpOverlapped=0x0 | out: lpBuffer=0x286f98*, lpNumberOfBytesRead=0x173e190*=0x0, lpOverlapped=0x0) returned 1 [0277.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28ffe0 [0277.881] GetLastError () returned 0x0 [0277.881] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210210 [0277.881] GetLastError () returned 0x0 [0277.883] CloseHandle (hObject=0x21c) returned 1 [0277.884] CloseHandle (hObject=0x19c) returned 1 [0277.884] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388f0 [0277.885] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388b0 [0277.885] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate6.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate6.ico"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0277.887] GetFileType (hFile=0x19c) returned 0x1 [0277.887] GetLastError () returned 0xb7 [0277.888] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x290fe8 [0277.888] GetLastError () returned 0xb7 [0277.889] CloseHandle (hObject=0x19c) returned 1 [0277.890] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate6.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate6.ico")) returned 0 [0277.890] GetLastError () returned 0x20 [0277.890] GetLastError () returned 0x20 [0277.891] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228bd8 [0277.891] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238280 [0277.891] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238078 [0277.891] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x228c68 [0277.891] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204b90 [0277.891] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f70 [0277.891] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x2388c0 [0277.891] GetLastError () returned 0x20 [0277.892] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238f30 [0277.892] GetLastError () returned 0x20 [0277.892] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239278 [0277.892] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236468 [0277.892] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238398 [0277.892] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x284f90 [0277.892] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387f0 [0277.892] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0277.892] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210258 [0277.893] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238940 [0277.893] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0277.893] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0277.893] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238140 [0277.893] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2853b0 [0277.893] GetLastError () returned 0x20 [0277.893] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238950 [0277.893] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238960 [0277.894] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238980 [0277.894] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238960 | out: hHeap=0x1f0000) returned 1 [0277.894] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238870 [0277.894] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238980 | out: hHeap=0x1f0000) returned 1 [0277.894] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238950 | out: hHeap=0x1f0000) returned 1 [0277.894] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238810 [0277.894] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210240 [0277.894] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238810 | out: hHeap=0x1f0000) returned 1 [0278.088] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101b0 [0278.088] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210240 | out: hHeap=0x1f0000) returned 1 [0278.089] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238870 | out: hHeap=0x1f0000) returned 1 [0278.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210240 [0278.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210078 [0278.089] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210240 | out: hHeap=0x1f0000) returned 1 [0278.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210240 [0278.089] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210078 | out: hHeap=0x1f0000) returned 1 [0278.089] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0278.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101b0 [0278.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204e50 [0278.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0278.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f10 [0278.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e50 | out: hHeap=0x1f0000) returned 1 [0278.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210240 | out: hHeap=0x1f0000) returned 1 [0278.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c70 [0278.091] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238190 [0278.091] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c70 | out: hHeap=0x1f0000) returned 1 [0278.091] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204cb0 [0278.091] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0278.091] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f10 | out: hHeap=0x1f0000) returned 1 [0278.091] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204ef0 [0278.091] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x2066b8 [0278.091] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ef0 | out: hHeap=0x1f0000) returned 1 [0278.091] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238190 [0278.092] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2066b8 | out: hHeap=0x1f0000) returned 1 [0278.092] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cb0 | out: hHeap=0x1f0000) returned 1 [0278.092] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238990 [0278.092] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101b0 [0278.092] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238990 | out: hHeap=0x1f0000) returned 1 [0278.092] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210240 [0278.092] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0278.092] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204f10 [0278.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210240 | out: hHeap=0x1f0000) returned 1 [0278.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x2068c8 [0278.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f10 | out: hHeap=0x1f0000) returned 1 [0278.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2068c8 | out: hHeap=0x1f0000) returned 1 [0278.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0278.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0278.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0278.094] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x284f90 | out: hHeap=0x1f0000) returned 1 [0278.094] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0278.094] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c58 [0278.094] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0278.094] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x212e00) returned 1 [0278.095] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238190 | out: pbBuffer=0x238190) returned 1 [0278.095] CryptReleaseContext (hProv=0x212e00, dwFlags=0x0) returned 1 [0278.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0278.096] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238280 [0278.096] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238190 [0278.096] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239208 [0278.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0278.096] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0278.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239208 | out: hHeap=0x1f0000) returned 1 [0278.097] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8d18 [0278.097] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210240 [0278.097] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x236538 [0278.097] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2381b8 [0278.097] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285098 [0278.097] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f70 [0278.097] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2365a0 [0278.098] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2381e0 [0278.098] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2851a0 [0278.098] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238950 [0278.098] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0278.098] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101b0 [0278.098] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238960 [0278.098] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0278.098] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210018 [0278.099] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210018 | out: hHeap=0x1f0000) returned 1 [0278.099] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0278.099] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238960 | out: hHeap=0x1f0000) returned 1 [0278.099] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0278.099] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0278.099] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238950 | out: hHeap=0x1f0000) returned 1 [0278.099] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2851a0 | out: hHeap=0x1f0000) returned 1 [0278.099] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0278.100] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2365a0 | out: hHeap=0x1f0000) returned 1 [0278.100] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238cc8 [0278.100] GetLastError () returned 0x0 [0278.100] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x2390b8 [0278.101] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0278.101] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0278.101] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0278.102] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0278.102] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0278.102] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0278.102] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x24e980 [0278.102] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2852a8 [0278.102] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0278.102] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0278.103] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0278.103] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0278.103] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2851a0 [0278.103] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0278.103] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0278.103] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f9c0 [0278.103] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x258298 [0278.103] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2338c8 [0278.104] QueryPerformanceCounter (in: lpPerformanceCount=0x173dee0 | out: lpPerformanceCount=0x173dee0*=43547249021) returned 1 [0278.104] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173df20 | out: lpSystemTimeAsFileTime=0x173df20) [0278.104] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x2387e0 [0278.104] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0278.104] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bd0 [0278.104] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bd0 | out: hHeap=0x1f0000) returned 1 [0278.104] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0278.104] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0278.105] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d90 [0278.105] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d90 | out: hHeap=0x1f0000) returned 1 [0278.105] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0278.105] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387e0 | out: hHeap=0x1f0000) returned 1 [0278.105] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0278.105] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238f30 [0278.105] GetLastError () returned 0x0 [0278.106] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0278.106] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0278.106] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0278.106] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381e0 [0278.106] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238280 [0278.106] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0278.106] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0278.106] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238398 [0278.106] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0278.106] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x222ee8 [0278.107] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0278.107] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0278.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0278.107] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0278.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0278.107] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238708 [0278.107] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2385a0 [0278.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238708 | out: hHeap=0x1f0000) returned 1 [0278.107] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0278.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385a0 | out: hHeap=0x1f0000) returned 1 [0278.108] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0278.108] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x234b90 [0278.108] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b90 | out: hHeap=0x1f0000) returned 1 [0278.108] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0278.108] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0278.108] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101b0 [0278.108] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228518 [0278.108] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238500 [0278.109] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238618 [0278.109] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238550 [0278.109] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2386e0 [0278.109] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238618 | out: hHeap=0x1f0000) returned 1 [0278.109] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238500 | out: hHeap=0x1f0000) returned 1 [0278.109] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0278.109] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238578 [0278.109] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238708 [0278.109] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238578 | out: hHeap=0x1f0000) returned 1 [0278.109] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0278.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238708 | out: hHeap=0x1f0000) returned 1 [0278.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206628 [0278.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x2b5788 [0278.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b5788 | out: hHeap=0x1f0000) returned 1 [0278.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206628 | out: hHeap=0x1f0000) returned 1 [0278.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0278.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0278.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0278.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0278.111] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204dd0 [0278.111] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0278.111] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0278.111] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0278.111] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aadc0 [0278.111] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0278.111] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2386e0 | out: hHeap=0x1f0000) returned 1 [0278.111] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238550 | out: hHeap=0x1f0000) returned 1 [0278.111] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228518 | out: hHeap=0x1f0000) returned 1 [0278.112] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0278.112] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204dd0 | out: hHeap=0x1f0000) returned 1 [0278.112] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0278.112] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0278.112] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a9fe0 [0278.112] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a9fe0 | out: hHeap=0x1f0000) returned 1 [0278.112] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ee8 | out: hHeap=0x1f0000) returned 1 [0278.112] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0278.113] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0278.113] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0278.113] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0278.113] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0278.113] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0278.113] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0278.113] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a9fe0 [0278.113] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aab70 [0278.114] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a9fe0 | out: hHeap=0x1f0000) returned 1 [0278.114] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aab70 | out: hHeap=0x1f0000) returned 1 [0278.114] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aadc0 | out: hHeap=0x1f0000) returned 1 [0278.114] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0278.114] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2851a0 | out: hHeap=0x1f0000) returned 1 [0278.114] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24e980 | out: hHeap=0x1f0000) returned 1 [0278.114] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x233350 [0278.114] GetLastError () returned 0x0 [0278.115] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238980 [0278.115] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238810 [0278.211] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate6.ico.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate6.ico.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e290, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0278.212] GetFileType (hFile=0x19c) returned 0x1 [0278.212] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x294000 [0278.213] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e218 | out: lpNewFilePointer=0x0) returned 1 [0278.213] GetLastError () returned 0xb7 [0278.214] CloseHandle (hObject=0x19c) returned 1 [0278.215] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238810 | out: hHeap=0x1f0000) returned 1 [0278.215] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238980 | out: hHeap=0x1f0000) returned 1 [0278.215] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2852a8 | out: hHeap=0x1f0000) returned 1 [0278.215] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285098 | out: hHeap=0x1f0000) returned 1 [0278.215] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0278.216] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f70 | out: hHeap=0x1f0000) returned 1 [0278.216] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236538 | out: hHeap=0x1f0000) returned 1 [0278.216] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210240 | out: hHeap=0x1f0000) returned 1 [0278.216] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0278.216] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233350 | out: hHeap=0x1f0000) returned 1 [0278.216] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0278.217] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0278.217] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x258298 | out: hHeap=0x1f0000) returned 1 [0278.217] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2338c8 | out: hHeap=0x1f0000) returned 1 [0278.217] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c58 | out: hHeap=0x1f0000) returned 1 [0278.217] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388c0 | out: hHeap=0x1f0000) returned 1 [0278.217] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0278.217] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0278.218] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238940 | out: hHeap=0x1f0000) returned 1 [0278.218] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0278.218] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0278.218] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387f0 | out: hHeap=0x1f0000) returned 1 [0278.218] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2853b0 | out: hHeap=0x1f0000) returned 1 [0278.218] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0278.218] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0278.219] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228c68 | out: hHeap=0x1f0000) returned 1 [0278.219] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0278.219] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0278.219] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228bd8 | out: hHeap=0x1f0000) returned 1 [0278.219] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388b0 | out: hHeap=0x1f0000) returned 1 [0278.219] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388f0 | out: hHeap=0x1f0000) returned 1 [0278.220] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286f98 | out: hHeap=0x1f0000) returned 1 [0278.220] CloseHandle (hObject=0x1e0) returned 1 [0278.221] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388a0 | out: hHeap=0x1f0000) returned 1 [0278.221] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388d0 | out: hHeap=0x1f0000) returned 1 [0278.221] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236ea0 | out: hHeap=0x1f0000) returned 1 [0278.221] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24b9e8 | out: hHeap=0x1f0000) returned 1 [0278.221] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0278.221] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d70 | out: hHeap=0x1f0000) returned 1 [0278.222] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28ffe0 | out: hHeap=0x1f0000) returned 1 [0278.222] CloseHandle (hObject=0x174) returned 1 [0278.223] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238890 | out: hHeap=0x1f0000) returned 1 [0278.223] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238930 | out: hHeap=0x1f0000) returned 1 [0278.223] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad9d0 | out: hHeap=0x1f0000) returned 1 [0278.223] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bb0 | out: hHeap=0x1f0000) returned 1 [0278.223] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21b9d8 | out: hHeap=0x1f0000) returned 1 [0278.223] CloseHandle (hObject=0x1c0) returned 1 [0278.224] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238920 | out: hHeap=0x1f0000) returned 1 [0278.224] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388e0 | out: hHeap=0x1f0000) returned 1 [0278.224] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2adcb0 | out: hHeap=0x1f0000) returned 1 [0278.224] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238800 | out: hHeap=0x1f0000) returned 1 [0278.224] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238900 | out: hHeap=0x1f0000) returned 1 [0278.225] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238970 | out: hHeap=0x1f0000) returned 1 [0278.225] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238910 | out: hHeap=0x1f0000) returned 1 [0278.225] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0278.225] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24fd60 | out: hHeap=0x1f0000) returned 1 [0278.225] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232ba8 | out: hHeap=0x1f0000) returned 1 [0278.226] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206868 | out: hHeap=0x1f0000) returned 1 [0278.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0278.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0278.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab498 | out: hHeap=0x1f0000) returned 1 [0278.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x251068 | out: hHeap=0x1f0000) returned 1 [0278.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233468 | out: hHeap=0x1f0000) returned 1 [0278.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c90 | out: hHeap=0x1f0000) returned 1 [0278.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2364d0 | out: hHeap=0x1f0000) returned 1 [0278.228] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d508 | out: hHeap=0x1f0000) returned 1 [0278.228] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228b00 | out: hHeap=0x1f0000) returned 1 [0278.228] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0278.228] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate6.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate6.ico")) returned 1 [0278.230] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate7.ico", cAlternateFileName="")) returned 1 [0278.231] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0278.231] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8dc8 [0278.231] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x218150 [0278.231] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8dc8 | out: hHeap=0x1f0000) returned 1 [0278.231] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2177d0 | out: hHeap=0x1f0000) returned 1 [0278.231] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0278.232] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate7.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate7.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0278.233] GetFileType (hFile=0x1c0) returned 0x1 [0278.233] CloseHandle (hObject=0x1c0) returned 1 [0278.234] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236468 [0278.234] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate7.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate7.ico"), fInfoLevelId=0x0, lpFileInformation=0x173eb6c | out: lpFileInformation=0x173eb6c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1 [0278.235] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0278.235] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236468 [0278.235] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate7.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate7.ico"), fInfoLevelId=0x0, lpFileInformation=0x173eb7c | out: lpFileInformation=0x173eb7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1 [0278.235] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0278.235] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236468 [0278.235] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0278.235] GetLastError () returned 0x0 [0278.236] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0278.236] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228c68 [0278.236] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d9d0 [0278.236] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2365a0 [0278.236] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2390b8 [0278.237] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0278.237] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x212ad0) returned 1 [0278.238] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238280 | out: pbBuffer=0x238280) returned 1 [0278.238] CryptReleaseContext (hProv=0x212ad0, dwFlags=0x0) returned 1 [0278.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0278.238] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x252370 [0278.238] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x233120 [0278.238] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=43560747358) returned 1 [0278.239] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0278.239] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=43560790498) returned 1 [0278.239] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0278.239] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239048 [0278.239] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x24fd60 [0278.240] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2339e0 [0278.240] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x2ab568 [0278.240] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210210 [0278.240] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206928 [0278.240] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210240 [0278.240] GetLastError () returned 0x0 [0278.241] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae840 [0278.241] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218818 [0278.241] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae840 | out: hHeap=0x1f0000) returned 1 [0278.241] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf8) returned 0x217038 [0278.242] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218818 | out: hHeap=0x1f0000) returned 1 [0278.242] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238990 [0278.242] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238820 [0278.243] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate7.ico.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate7.ico.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e230, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0278.244] GetFileType (hFile=0x1c0) returned 0x1 [0278.244] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389b0 [0278.245] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388e0 [0278.246] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate7.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate7.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0278.246] GetFileType (hFile=0x174) returned 0x1 [0278.247] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e30 [0278.247] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e70 [0278.247] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2acfc0 [0278.247] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388b0 [0278.248] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238870 [0278.249] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate7.ico.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate7.ico.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0278.249] GetFileType (hFile=0x1e0) returned 0x1 [0278.250] GetLastError () returned 0xb7 [0278.250] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe4) returned 0x21b8e8 [0278.250] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cf0 [0278.251] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e30 [0278.251] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204b90 [0278.251] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad6f0 [0278.251] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238900 [0278.251] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238950 [0278.252] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate7.ico.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate7.ico.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0278.252] GetFileType (hFile=0x19c) returned 0x1 [0278.252] GetLastError () returned 0xb7 [0278.253] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0278.253] GetLastError () returned 0xb7 [0278.253] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d10 [0278.253] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cb0 [0278.253] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bd0 [0278.254] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb8) returned 0x2374a0 [0278.254] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388a0 [0278.254] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388c0 [0278.255] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate7.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate7.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1a4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0278.256] GetFileType (hFile=0x21c) returned 0x1 [0278.470] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28cfc8 [0278.470] ReadFile (in: hFile=0x21c, lpBuffer=0x28cfc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e100, lpOverlapped=0x0 | out: lpBuffer=0x28cfc8*, lpNumberOfBytesRead=0x173e100*=0x37e, lpOverlapped=0x0) returned 1 [0278.677] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24b9e8 [0278.677] ReadFile (in: hFile=0x21c, lpBuffer=0x28cfc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e190, lpOverlapped=0x0 | out: lpBuffer=0x28cfc8*, lpNumberOfBytesRead=0x173e190*=0x0, lpOverlapped=0x0) returned 1 [0278.678] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28dfd0 [0278.678] GetLastError () returned 0x0 [0278.678] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210258 [0278.679] GetLastError () returned 0x0 [0278.681] CloseHandle (hObject=0x1c0) returned 1 [0278.683] CloseHandle (hObject=0x174) returned 1 [0278.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388d0 [0278.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388f0 [0278.851] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate7.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate7.ico"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0278.853] GetFileType (hFile=0x174) returned 0x1 [0278.854] GetLastError () returned 0xb7 [0278.855] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x286f98 [0278.855] GetLastError () returned 0xb7 [0278.857] CloseHandle (hObject=0x174) returned 1 [0278.857] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate7.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate7.ico")) returned 0 [0278.858] GetLastError () returned 0x20 [0278.858] GetLastError () returned 0x20 [0278.858] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228440 [0278.858] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238280 [0278.858] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2384b0 [0278.858] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x228cb0 [0278.859] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c10 [0278.859] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0278.859] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x2387f0 [0278.859] GetLastError () returned 0x20 [0278.859] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238c58 [0278.859] GetLastError () returned 0x20 [0278.860] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239160 [0278.860] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236468 [0278.860] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2381e0 [0278.860] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2858d8 [0278.860] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238830 [0278.860] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0278.860] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0278.860] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238910 [0278.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0278.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210198 [0278.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238168 [0278.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285098 [0278.861] GetLastError () returned 0x20 [0278.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238920 [0278.862] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238930 [0278.862] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389c0 [0278.862] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238930 | out: hHeap=0x1f0000) returned 1 [0278.862] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238930 [0278.862] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389c0 | out: hHeap=0x1f0000) returned 1 [0278.862] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238920 | out: hHeap=0x1f0000) returned 1 [0278.862] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387e0 [0278.862] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101e0 [0278.863] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387e0 | out: hHeap=0x1f0000) returned 1 [0278.863] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101b0 [0278.863] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0278.863] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238930 | out: hHeap=0x1f0000) returned 1 [0278.863] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101e0 [0278.863] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff40 [0278.863] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0278.863] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0278.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff40 | out: hHeap=0x1f0000) returned 1 [0278.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0278.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101b0 [0278.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204ef0 [0278.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0278.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c30 [0278.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ef0 | out: hHeap=0x1f0000) returned 1 [0278.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0278.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c10 [0278.865] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238078 [0278.865] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c10 | out: hHeap=0x1f0000) returned 1 [0278.865] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204bb0 [0278.865] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0278.865] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c30 | out: hHeap=0x1f0000) returned 1 [0278.865] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204ef0 [0278.865] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206628 [0278.865] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ef0 | out: hHeap=0x1f0000) returned 1 [0278.865] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238078 [0278.865] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206628 | out: hHeap=0x1f0000) returned 1 [0278.866] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bb0 | out: hHeap=0x1f0000) returned 1 [0278.866] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238920 [0278.866] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101b0 [0278.866] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238920 | out: hHeap=0x1f0000) returned 1 [0278.866] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0278.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0278.867] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204c10 [0278.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0278.867] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206628 [0278.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c10 | out: hHeap=0x1f0000) returned 1 [0278.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206628 | out: hHeap=0x1f0000) returned 1 [0278.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0278.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0278.867] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0278.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2858d8 | out: hHeap=0x1f0000) returned 1 [0278.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0278.868] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238e88 [0278.868] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0278.868] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x213350) returned 1 [0278.869] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238078 | out: pbBuffer=0x238078) returned 1 [0278.869] CryptReleaseContext (hProv=0x213350, dwFlags=0x0) returned 1 [0278.870] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0278.870] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238078 [0278.870] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2380a0 [0278.870] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239198 [0278.870] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0278.870] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0278.870] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239198 | out: hHeap=0x1f0000) returned 1 [0278.870] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8d18 [0278.870] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101b0 [0278.870] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x236608 [0278.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238078 [0278.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2855c0 [0278.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ef0 [0278.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2364d0 [0278.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238190 [0278.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285cf8 [0278.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238920 [0278.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0278.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0278.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238930 [0278.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0278.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20fef8 [0278.872] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20fef8 | out: hHeap=0x1f0000) returned 1 [0278.872] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0278.872] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238930 | out: hHeap=0x1f0000) returned 1 [0278.872] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0278.872] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0278.872] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238920 | out: hHeap=0x1f0000) returned 1 [0278.872] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285cf8 | out: hHeap=0x1f0000) returned 1 [0278.872] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0278.873] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2364d0 | out: hHeap=0x1f0000) returned 1 [0278.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238f30 [0278.873] GetLastError () returned 0x0 [0278.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238d70 [0278.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0278.873] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0278.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0278.874] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0278.874] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0278.874] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0278.874] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x24ecc0 [0278.874] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2853b0 [0278.874] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0278.874] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0278.874] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0278.874] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0278.874] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x284f90 [0278.874] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0278.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0278.875] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f5d8 [0278.875] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x251068 [0278.875] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x233238 [0278.875] QueryPerformanceCounter (in: lpPerformanceCount=0x173dee0 | out: lpPerformanceCount=0x173dee0*=43624401683) returned 1 [0278.875] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173df20 | out: lpSystemTimeAsFileTime=0x173df20) [0278.875] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238920 [0278.876] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0278.876] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cb0 [0278.876] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cb0 | out: hHeap=0x1f0000) returned 1 [0278.876] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0278.876] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0278.876] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d30 [0278.876] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d30 | out: hHeap=0x1f0000) returned 1 [0278.876] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0278.876] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238920 | out: hHeap=0x1f0000) returned 1 [0278.876] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0278.877] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239208 [0278.877] GetLastError () returned 0x0 [0278.877] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0278.877] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0278.877] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0278.877] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238190 [0278.877] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381b8 [0278.877] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0278.877] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0278.878] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381e0 [0278.878] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0278.878] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x222ee8 [0278.878] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0278.878] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0278.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0278.878] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0278.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0278.878] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238280 [0278.879] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238618 [0278.879] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0278.879] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0278.879] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238618 | out: hHeap=0x1f0000) returned 1 [0278.879] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0278.879] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x234b90 [0278.879] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b90 | out: hHeap=0x1f0000) returned 1 [0278.879] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0278.879] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0278.879] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101e0 [0278.879] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228680 [0278.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238708 [0278.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238730 [0278.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238780 [0278.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2384d8 [0278.880] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238730 | out: hHeap=0x1f0000) returned 1 [0278.880] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238708 | out: hHeap=0x1f0000) returned 1 [0278.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0278.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238528 [0278.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2385a0 [0278.880] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238528 | out: hHeap=0x1f0000) returned 1 [0278.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0278.881] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385a0 | out: hHeap=0x1f0000) returned 1 [0278.881] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2067d8 [0278.881] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x2b2cb8 [0278.881] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b2cb8 | out: hHeap=0x1f0000) returned 1 [0278.881] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2067d8 | out: hHeap=0x1f0000) returned 1 [0278.881] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0278.881] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0278.881] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0278.881] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0278.881] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204f70 [0278.882] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0278.882] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0278.882] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0278.882] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a9450 [0278.883] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0278.883] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384d8 | out: hHeap=0x1f0000) returned 1 [0278.883] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238780 | out: hHeap=0x1f0000) returned 1 [0278.883] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228680 | out: hHeap=0x1f0000) returned 1 [0278.883] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0278.883] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f70 | out: hHeap=0x1f0000) returned 1 [0278.883] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0278.883] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0278.883] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a96a0 [0278.884] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a96a0 | out: hHeap=0x1f0000) returned 1 [0278.884] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ee8 | out: hHeap=0x1f0000) returned 1 [0278.884] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0278.884] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0278.884] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0278.884] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0278.884] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0278.884] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0278.884] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0278.884] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a9578 [0278.885] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aaa48 [0278.885] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a9578 | out: hHeap=0x1f0000) returned 1 [0278.885] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aaa48 | out: hHeap=0x1f0000) returned 1 [0278.885] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a9450 | out: hHeap=0x1f0000) returned 1 [0278.885] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0278.885] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x284f90 | out: hHeap=0x1f0000) returned 1 [0278.885] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24ecc0 | out: hHeap=0x1f0000) returned 1 [0278.885] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x233350 [0278.885] GetLastError () returned 0x0 [0278.886] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238890 [0278.886] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238840 [0278.887] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate7.ico.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate7.ico.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e290, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0278.887] GetFileType (hFile=0x174) returned 0x1 [0278.888] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x286f98 [0278.888] SetFilePointerEx (in: hFile=0x174, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e218 | out: lpNewFilePointer=0x0) returned 1 [0278.889] GetLastError () returned 0xb7 [0278.889] CloseHandle (hObject=0x174) returned 1 [0278.890] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238840 | out: hHeap=0x1f0000) returned 1 [0278.890] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238890 | out: hHeap=0x1f0000) returned 1 [0278.890] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2853b0 | out: hHeap=0x1f0000) returned 1 [0278.890] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2855c0 | out: hHeap=0x1f0000) returned 1 [0278.890] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0278.890] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ef0 | out: hHeap=0x1f0000) returned 1 [0278.890] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236608 | out: hHeap=0x1f0000) returned 1 [0278.890] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0278.890] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0278.891] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233350 | out: hHeap=0x1f0000) returned 1 [0278.891] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0278.891] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0278.891] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x251068 | out: hHeap=0x1f0000) returned 1 [0278.891] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233238 | out: hHeap=0x1f0000) returned 1 [0278.891] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238e88 | out: hHeap=0x1f0000) returned 1 [0278.891] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387f0 | out: hHeap=0x1f0000) returned 1 [0278.891] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0278.891] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0278.892] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238910 | out: hHeap=0x1f0000) returned 1 [0278.892] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0278.892] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0278.892] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238830 | out: hHeap=0x1f0000) returned 1 [0278.892] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285098 | out: hHeap=0x1f0000) returned 1 [0278.892] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0278.892] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0278.892] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228cb0 | out: hHeap=0x1f0000) returned 1 [0278.892] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0278.892] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0278.893] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228440 | out: hHeap=0x1f0000) returned 1 [0278.893] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388f0 | out: hHeap=0x1f0000) returned 1 [0278.893] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388d0 | out: hHeap=0x1f0000) returned 1 [0278.893] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28cfc8 | out: hHeap=0x1f0000) returned 1 [0278.893] CloseHandle (hObject=0x21c) returned 1 [0278.894] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388c0 | out: hHeap=0x1f0000) returned 1 [0278.894] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388a0 | out: hHeap=0x1f0000) returned 1 [0278.894] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2374a0 | out: hHeap=0x1f0000) returned 1 [0278.894] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24b9e8 | out: hHeap=0x1f0000) returned 1 [0278.894] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0278.894] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d10 | out: hHeap=0x1f0000) returned 1 [0278.895] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28dfd0 | out: hHeap=0x1f0000) returned 1 [0278.895] CloseHandle (hObject=0x19c) returned 1 [0278.895] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238950 | out: hHeap=0x1f0000) returned 1 [0278.896] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238900 | out: hHeap=0x1f0000) returned 1 [0278.896] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad6f0 | out: hHeap=0x1f0000) returned 1 [0278.896] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cf0 | out: hHeap=0x1f0000) returned 1 [0278.896] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21b8e8 | out: hHeap=0x1f0000) returned 1 [0278.896] CloseHandle (hObject=0x1e0) returned 1 [0278.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238870 | out: hHeap=0x1f0000) returned 1 [0278.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388b0 | out: hHeap=0x1f0000) returned 1 [0278.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2acfc0 | out: hHeap=0x1f0000) returned 1 [0278.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388e0 | out: hHeap=0x1f0000) returned 1 [0278.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389b0 | out: hHeap=0x1f0000) returned 1 [0279.320] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238820 | out: hHeap=0x1f0000) returned 1 [0279.320] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238990 | out: hHeap=0x1f0000) returned 1 [0279.320] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0279.321] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24fd60 | out: hHeap=0x1f0000) returned 1 [0279.321] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2339e0 | out: hHeap=0x1f0000) returned 1 [0279.321] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206928 | out: hHeap=0x1f0000) returned 1 [0279.321] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210240 | out: hHeap=0x1f0000) returned 1 [0279.321] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0279.321] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab568 | out: hHeap=0x1f0000) returned 1 [0279.322] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x252370 | out: hHeap=0x1f0000) returned 1 [0279.322] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233120 | out: hHeap=0x1f0000) returned 1 [0279.322] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2390b8 | out: hHeap=0x1f0000) returned 1 [0279.322] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2365a0 | out: hHeap=0x1f0000) returned 1 [0279.322] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d9d0 | out: hHeap=0x1f0000) returned 1 [0279.322] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228c68 | out: hHeap=0x1f0000) returned 1 [0279.323] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0279.323] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate7.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate7.ico")) returned 1 [0279.325] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate8.ico", cAlternateFileName="")) returned 1 [0279.326] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0279.326] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8d18 [0279.326] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x2177d0 [0279.326] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0279.326] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218150 | out: hHeap=0x1f0000) returned 1 [0279.326] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0279.327] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate8.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate8.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0279.328] GetFileType (hFile=0x19c) returned 0x1 [0279.328] CloseHandle (hObject=0x19c) returned 1 [0279.329] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236468 [0279.329] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate8.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate8.ico"), fInfoLevelId=0x0, lpFileInformation=0x173eb6c | out: lpFileInformation=0x173eb6c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1 [0279.329] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0279.330] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2364d0 [0279.330] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate8.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate8.ico"), fInfoLevelId=0x0, lpFileInformation=0x173eb7c | out: lpFileInformation=0x173eb7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1 [0279.330] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2364d0 | out: hHeap=0x1f0000) returned 1 [0279.330] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236608 [0279.330] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236608 | out: hHeap=0x1f0000) returned 1 [0279.330] GetLastError () returned 0x0 [0279.331] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0279.331] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228758 [0279.331] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d508 [0279.331] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236608 [0279.332] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238e18 [0279.332] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0279.332] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x213460) returned 1 [0279.333] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238398 | out: pbBuffer=0x238398) returned 1 [0279.333] CryptReleaseContext (hProv=0x213460, dwFlags=0x0) returned 1 [0279.333] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0279.333] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x254980 [0279.334] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x233468 [0279.334] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=43671255906) returned 1 [0279.345] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0279.345] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=43671385058) returned 1 [0279.345] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0279.345] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239160 [0279.346] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x258298 [0279.346] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x233580 [0279.346] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x2ab088 [0279.346] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210240 [0279.346] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206688 [0279.346] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210210 [0279.346] GetLastError () returned 0x0 [0279.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2aec78 [0279.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218fa8 [0279.347] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aec78 | out: hHeap=0x1f0000) returned 1 [0279.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf8) returned 0x217038 [0279.348] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218fa8 | out: hHeap=0x1f0000) returned 1 [0279.348] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238910 [0279.348] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238930 [0279.349] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate8.ico.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate8.ico.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e230, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0279.353] GetFileType (hFile=0x19c) returned 0x1 [0279.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387f0 [0279.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388b0 [0279.355] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate8.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate8.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0279.356] GetFileType (hFile=0x21c) returned 0x1 [0279.356] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e30 [0279.356] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e50 [0279.356] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad4c8 [0279.357] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238920 [0279.357] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387e0 [0279.358] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate8.ico.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate8.ico.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0279.358] GetFileType (hFile=0x174) returned 0x1 [0279.359] GetLastError () returned 0xb7 [0279.359] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe4) returned 0x21b7f8 [0279.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e70 [0279.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c10 [0279.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0279.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad580 [0279.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238870 [0279.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238800 [0279.361] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate8.ico.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate8.ico.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0279.362] GetFileType (hFile=0x1c0) returned 0x1 [0279.362] GetLastError () returned 0xb7 [0279.362] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d10 [0279.363] GetLastError () returned 0xb7 [0279.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0279.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d90 [0279.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cf0 [0279.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb8) returned 0x2374a0 [0279.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238940 [0279.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389c0 [0279.364] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate8.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate8.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1a4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0279.365] GetFileType (hFile=0x1ac) returned 0x1 [0279.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28cfc8 [0279.365] ReadFile (in: hFile=0x1ac, lpBuffer=0x28cfc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e100, lpOverlapped=0x0 | out: lpBuffer=0x28cfc8*, lpNumberOfBytesRead=0x173e100*=0x37e, lpOverlapped=0x0) returned 1 [0279.796] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24a5c0 [0279.796] ReadFile (in: hFile=0x1ac, lpBuffer=0x28cfc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e190, lpOverlapped=0x0 | out: lpBuffer=0x28cfc8*, lpNumberOfBytesRead=0x173e190*=0x0, lpOverlapped=0x0) returned 1 [0279.797] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28dfd0 [0279.797] GetLastError () returned 0x0 [0279.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210198 [0279.798] GetLastError () returned 0x0 [0279.800] CloseHandle (hObject=0x19c) returned 1 [0279.801] CloseHandle (hObject=0x21c) returned 1 [0279.801] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238810 [0279.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388c0 [0279.864] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate8.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate8.ico"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0279.867] GetFileType (hFile=0x198) returned 0x1 [0279.867] GetLastError () returned 0xb7 [0279.868] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x286f98 [0279.868] GetLastError () returned 0xb7 [0279.869] CloseHandle (hObject=0x198) returned 1 [0279.870] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate8.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate8.ico")) returned 0 [0279.870] GetLastError () returned 0x20 [0279.870] GetLastError () returned 0x20 [0279.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228b00 [0279.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238000 [0279.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238078 [0279.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x228bd8 [0279.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f10 [0279.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d30 [0279.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x238950 [0279.872] GetLastError () returned 0x20 [0279.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238cc8 [0279.872] GetLastError () returned 0x20 [0279.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238d70 [0279.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2364d0 [0279.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238398 [0279.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2855c0 [0279.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238960 [0279.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0279.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0279.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388a0 [0279.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0279.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101b0 [0279.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2380a0 [0279.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x284f90 [0279.873] GetLastError () returned 0x20 [0279.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238820 [0279.874] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238970 [0279.874] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389b0 [0279.874] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238970 | out: hHeap=0x1f0000) returned 1 [0279.874] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238850 [0279.874] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389b0 | out: hHeap=0x1f0000) returned 1 [0279.874] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238820 | out: hHeap=0x1f0000) returned 1 [0279.874] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238860 [0279.874] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210258 [0279.874] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238860 | out: hHeap=0x1f0000) returned 1 [0279.875] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101e0 [0279.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0279.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238850 | out: hHeap=0x1f0000) returned 1 [0279.875] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210258 [0279.875] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20fef8 [0279.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0279.875] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210258 [0279.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20fef8 | out: hHeap=0x1f0000) returned 1 [0279.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0279.875] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0279.876] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204ef0 [0279.876] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0279.876] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f10 [0279.876] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ef0 | out: hHeap=0x1f0000) returned 1 [0279.876] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0279.876] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e30 [0279.876] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238168 [0279.876] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e30 | out: hHeap=0x1f0000) returned 1 [0279.876] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204b90 [0279.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0279.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f10 | out: hHeap=0x1f0000) returned 1 [0279.877] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204bf0 [0279.877] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x2066b8 [0279.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bf0 | out: hHeap=0x1f0000) returned 1 [0279.877] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238168 [0279.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2066b8 | out: hHeap=0x1f0000) returned 1 [0279.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204b90 | out: hHeap=0x1f0000) returned 1 [0279.877] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238970 [0279.878] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210258 [0279.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238970 | out: hHeap=0x1f0000) returned 1 [0279.878] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0279.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0279.878] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204e50 [0279.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0279.878] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x2067d8 [0279.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e50 | out: hHeap=0x1f0000) returned 1 [0279.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2067d8 | out: hHeap=0x1f0000) returned 1 [0279.879] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0279.879] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0279.879] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0279.879] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2855c0 | out: hHeap=0x1f0000) returned 1 [0279.879] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0279.879] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238ec0 [0279.879] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0279.879] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x2131b8) returned 1 [0279.881] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238168 | out: pbBuffer=0x238168) returned 1 [0279.881] CryptReleaseContext (hProv=0x2131b8, dwFlags=0x0) returned 1 [0279.881] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0279.881] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238398 [0279.881] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381e0 [0279.881] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238cc8 [0279.881] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0279.881] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0279.882] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238cc8 | out: hHeap=0x1f0000) returned 1 [0279.882] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8d18 [0279.882] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210258 [0279.882] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x236468 [0279.882] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238000 [0279.883] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2856c8 [0279.883] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c10 [0279.883] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236538 [0279.883] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238398 [0279.883] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285cf8 [0279.883] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389b0 [0279.883] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0279.883] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0279.883] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238820 [0279.883] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0279.884] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff28 [0279.884] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff28 | out: hHeap=0x1f0000) returned 1 [0279.884] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0279.884] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238820 | out: hHeap=0x1f0000) returned 1 [0279.884] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0279.884] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0279.884] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389b0 | out: hHeap=0x1f0000) returned 1 [0279.884] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285cf8 | out: hHeap=0x1f0000) returned 1 [0279.884] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0279.885] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236538 | out: hHeap=0x1f0000) returned 1 [0279.885] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239278 [0279.885] GetLastError () returned 0x0 [0279.885] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238e50 [0279.885] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0279.885] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0279.885] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0279.885] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0279.886] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0279.886] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0279.886] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x24e980 [0279.886] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2851a0 [0279.886] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0279.886] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0279.886] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0279.886] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0279.887] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2857d0 [0279.887] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0279.887] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0279.887] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f8f8 [0279.887] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x255c88 [0279.887] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x233120 [0279.887] QueryPerformanceCounter (in: lpPerformanceCount=0x173dee0 | out: lpPerformanceCount=0x173dee0*=43725614301) returned 1 [0279.887] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173df20 | out: lpSystemTimeAsFileTime=0x173df20) [0279.888] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238990 [0279.888] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0279.888] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c70 [0279.888] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c70 | out: hHeap=0x1f0000) returned 1 [0279.888] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0279.888] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0279.888] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ef0 [0279.888] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ef0 | out: hHeap=0x1f0000) returned 1 [0279.888] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0279.889] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238990 | out: hHeap=0x1f0000) returned 1 [0279.889] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0279.889] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239278 [0279.889] GetLastError () returned 0x0 [0279.889] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0279.889] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0279.889] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0279.889] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238168 [0279.889] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238190 [0279.890] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0279.890] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0279.890] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381b8 [0279.890] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0279.890] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x222ee8 [0279.890] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0279.890] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0279.890] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0279.890] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0279.891] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0279.891] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238398 [0279.891] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238708 [0279.891] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0279.891] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0279.891] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238708 | out: hHeap=0x1f0000) returned 1 [0279.891] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0279.891] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x234b90 [0279.891] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b90 | out: hHeap=0x1f0000) returned 1 [0279.892] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0279.892] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0279.892] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101e0 [0279.892] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228518 [0279.892] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238578 [0279.892] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2385a0 [0279.892] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2385f0 [0279.892] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2385c8 [0279.892] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385a0 | out: hHeap=0x1f0000) returned 1 [0279.892] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238578 | out: hHeap=0x1f0000) returned 1 [0279.893] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0279.893] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238690 [0279.893] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238780 [0279.893] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238690 | out: hHeap=0x1f0000) returned 1 [0279.893] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0279.893] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238780 | out: hHeap=0x1f0000) returned 1 [0279.893] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206838 [0279.893] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x2b4220 [0279.893] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b4220 | out: hHeap=0x1f0000) returned 1 [0279.894] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206838 | out: hHeap=0x1f0000) returned 1 [0279.894] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0279.894] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0279.894] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0279.894] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0279.894] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204c30 [0279.894] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0279.894] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0279.895] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0279.895] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aa5a8 [0279.895] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0279.895] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385c8 | out: hHeap=0x1f0000) returned 1 [0279.895] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385f0 | out: hHeap=0x1f0000) returned 1 [0279.895] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228518 | out: hHeap=0x1f0000) returned 1 [0279.895] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0279.895] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c30 | out: hHeap=0x1f0000) returned 1 [0279.896] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0279.896] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0279.896] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a9450 [0279.896] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a9450 | out: hHeap=0x1f0000) returned 1 [0279.896] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ee8 | out: hHeap=0x1f0000) returned 1 [0279.896] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0279.896] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0279.896] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0279.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0279.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0279.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0279.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0279.897] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aa7f8 [0279.897] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aa230 [0280.266] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aa7f8 | out: hHeap=0x1f0000) returned 1 [0280.266] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aa230 | out: hHeap=0x1f0000) returned 1 [0280.266] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aa5a8 | out: hHeap=0x1f0000) returned 1 [0280.267] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0280.267] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2857d0 | out: hHeap=0x1f0000) returned 1 [0280.267] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24e980 | out: hHeap=0x1f0000) returned 1 [0280.267] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x2338c8 [0280.267] GetLastError () returned 0x0 [0280.268] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388d0 [0280.268] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389b0 [0280.389] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate8.ico.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate8.ico.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e290, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0280.389] GetFileType (hFile=0x198) returned 0x1 [0280.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x286f98 [0280.390] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e218 | out: lpNewFilePointer=0x0) returned 1 [0280.390] GetLastError () returned 0xb7 [0280.391] CloseHandle (hObject=0x198) returned 1 [0280.391] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389b0 | out: hHeap=0x1f0000) returned 1 [0280.391] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388d0 | out: hHeap=0x1f0000) returned 1 [0280.391] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2851a0 | out: hHeap=0x1f0000) returned 1 [0280.391] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2856c8 | out: hHeap=0x1f0000) returned 1 [0280.392] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0280.392] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c10 | out: hHeap=0x1f0000) returned 1 [0280.392] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0280.392] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0280.392] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0280.392] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2338c8 | out: hHeap=0x1f0000) returned 1 [0280.392] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0280.392] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0280.392] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x255c88 | out: hHeap=0x1f0000) returned 1 [0280.392] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233120 | out: hHeap=0x1f0000) returned 1 [0280.392] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ec0 | out: hHeap=0x1f0000) returned 1 [0280.393] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238950 | out: hHeap=0x1f0000) returned 1 [0280.393] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0280.393] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0280.393] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388a0 | out: hHeap=0x1f0000) returned 1 [0280.393] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0280.393] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0280.393] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238960 | out: hHeap=0x1f0000) returned 1 [0280.393] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x284f90 | out: hHeap=0x1f0000) returned 1 [0280.393] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0280.393] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2364d0 | out: hHeap=0x1f0000) returned 1 [0280.394] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228bd8 | out: hHeap=0x1f0000) returned 1 [0280.394] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0280.394] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0280.394] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228b00 | out: hHeap=0x1f0000) returned 1 [0280.394] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388c0 | out: hHeap=0x1f0000) returned 1 [0280.394] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238810 | out: hHeap=0x1f0000) returned 1 [0280.394] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28cfc8 | out: hHeap=0x1f0000) returned 1 [0280.394] CloseHandle (hObject=0x1ac) returned 1 [0280.395] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389c0 | out: hHeap=0x1f0000) returned 1 [0280.395] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238940 | out: hHeap=0x1f0000) returned 1 [0280.395] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2374a0 | out: hHeap=0x1f0000) returned 1 [0280.395] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24a5c0 | out: hHeap=0x1f0000) returned 1 [0280.395] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0280.396] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d70 | out: hHeap=0x1f0000) returned 1 [0280.396] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28dfd0 | out: hHeap=0x1f0000) returned 1 [0280.396] CloseHandle (hObject=0x1c0) returned 1 [0280.396] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238800 | out: hHeap=0x1f0000) returned 1 [0280.396] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238870 | out: hHeap=0x1f0000) returned 1 [0280.396] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad580 | out: hHeap=0x1f0000) returned 1 [0280.397] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e70 | out: hHeap=0x1f0000) returned 1 [0280.397] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21b7f8 | out: hHeap=0x1f0000) returned 1 [0280.397] CloseHandle (hObject=0x174) returned 1 [0280.398] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387e0 | out: hHeap=0x1f0000) returned 1 [0280.398] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238920 | out: hHeap=0x1f0000) returned 1 [0280.398] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad4c8 | out: hHeap=0x1f0000) returned 1 [0280.398] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388b0 | out: hHeap=0x1f0000) returned 1 [0280.398] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387f0 | out: hHeap=0x1f0000) returned 1 [0280.398] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238930 | out: hHeap=0x1f0000) returned 1 [0280.398] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238910 | out: hHeap=0x1f0000) returned 1 [0280.398] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0280.399] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x258298 | out: hHeap=0x1f0000) returned 1 [0280.399] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233580 | out: hHeap=0x1f0000) returned 1 [0280.399] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206688 | out: hHeap=0x1f0000) returned 1 [0280.399] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0280.399] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210240 | out: hHeap=0x1f0000) returned 1 [0280.399] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab088 | out: hHeap=0x1f0000) returned 1 [0280.399] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x254980 | out: hHeap=0x1f0000) returned 1 [0280.399] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233468 | out: hHeap=0x1f0000) returned 1 [0280.399] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238e18 | out: hHeap=0x1f0000) returned 1 [0280.400] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236608 | out: hHeap=0x1f0000) returned 1 [0280.400] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d508 | out: hHeap=0x1f0000) returned 1 [0280.400] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228758 | out: hHeap=0x1f0000) returned 1 [0280.400] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0280.400] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate8.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate8.ico")) returned 1 [0280.402] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Save.ico", cAlternateFileName="")) returned 1 [0280.402] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0280.402] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8dc8 [0280.402] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217c50 [0280.402] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8dc8 | out: hHeap=0x1f0000) returned 1 [0280.403] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2177d0 | out: hHeap=0x1f0000) returned 1 [0280.403] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0281.008] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Save.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\save.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0281.008] GetFileType (hFile=0x1c0) returned 0x1 [0281.009] CloseHandle (hObject=0x1c0) returned 1 [0281.009] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2365a0 [0281.009] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Save.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\save.ico"), fInfoLevelId=0x0, lpFileInformation=0x173eb6c | out: lpFileInformation=0x173eb6c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e)) returned 1 [0281.010] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2365a0 | out: hHeap=0x1f0000) returned 1 [0281.010] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236468 [0281.010] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Save.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\save.ico"), fInfoLevelId=0x0, lpFileInformation=0x173eb7c | out: lpFileInformation=0x173eb7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e)) returned 1 [0281.010] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0281.010] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236538 [0281.010] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236538 | out: hHeap=0x1f0000) returned 1 [0281.010] GetLastError () returned 0x0 [0281.011] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0281.011] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228c68 [0281.011] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22ee88 [0281.011] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236468 [0281.011] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239278 [0281.011] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0281.012] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x213350) returned 1 [0281.013] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238190 | out: pbBuffer=0x238190) returned 1 [0281.013] CryptReleaseContext (hProv=0x213350, dwFlags=0x0) returned 1 [0281.013] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0281.013] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x24fd60 [0281.013] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2337b0 [0281.013] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=43838235793) returned 1 [0281.014] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0281.014] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=43838262911) returned 1 [0281.014] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0281.014] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238cc8 [0281.014] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x258298 [0281.014] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2338c8 [0281.014] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x2ab708 [0281.014] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210210 [0281.014] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2068c8 [0281.015] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210240 [0281.015] GetLastError () returned 0x0 [0281.015] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae048 [0281.015] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218d98 [0281.015] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae048 | out: hHeap=0x1f0000) returned 1 [0281.015] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf8) returned 0x217038 [0281.015] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218d98 | out: hHeap=0x1f0000) returned 1 [0281.015] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238870 [0281.016] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238930 [0281.017] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Save.ico.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\graphics\\save.ico.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e230, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0281.018] GetFileType (hFile=0x1c0) returned 0x1 [0281.018] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238920 [0281.018] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238890 [0281.019] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Save.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\save.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0281.020] GetFileType (hFile=0x1ac) returned 0x1 [0281.020] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204b90 [0281.020] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0281.020] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad860 [0281.020] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238950 [0281.021] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238820 [0281.021] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Save.ico.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\graphics\\save.ico.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0281.022] GetFileType (hFile=0x198) returned 0x1 [0281.022] GetLastError () returned 0xb7 [0281.023] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe4) returned 0x21b618 [0281.023] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cf0 [0281.023] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cb0 [0281.024] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bd0 [0281.024] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad7a8 [0281.024] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388a0 [0281.024] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388c0 [0281.024] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Save.ico.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\graphics\\save.ico.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0281.025] GetFileType (hFile=0x21c) returned 0x1 [0281.025] GetLastError () returned 0xb7 [0281.025] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d90 [0281.025] GetLastError () returned 0xb7 [0281.026] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d10 [0281.026] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0281.026] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204df0 [0281.026] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb8) returned 0x237b60 [0281.026] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388b0 [0281.026] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388d0 [0281.027] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Save.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\save.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1a4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0281.027] GetFileType (hFile=0x19c) returned 0x1 [0281.027] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28cfc8 [0281.028] ReadFile (in: hFile=0x19c, lpBuffer=0x28cfc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e100, lpOverlapped=0x0 | out: lpBuffer=0x28cfc8*, lpNumberOfBytesRead=0x173e100*=0x47e, lpOverlapped=0x0) returned 1 [0281.070] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x249db0 [0281.070] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28dfd0 [0281.070] GetLastError () returned 0x0 [0281.071] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0281.071] GetLastError () returned 0x0 [0281.073] CloseHandle (hObject=0x1c0) returned 1 [0281.074] CloseHandle (hObject=0x1ac) returned 1 [0281.074] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388e0 [0281.075] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389c0 [0281.075] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Save.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\save.ico"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0281.077] GetFileType (hFile=0x1ac) returned 0x1 [0281.077] GetLastError () returned 0xb7 [0281.078] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x286f98 [0281.078] GetLastError () returned 0xb7 [0281.079] CloseHandle (hObject=0x1ac) returned 1 [0281.080] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Save.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\save.ico")) returned 0 [0281.080] GetLastError () returned 0x20 [0281.080] GetLastError () returned 0x20 [0281.080] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228518 [0281.080] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2384b0 [0281.080] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238000 [0281.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x228b00 [0281.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e30 [0281.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c10 [0281.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x238850 [0281.081] GetLastError () returned 0x20 [0281.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238d70 [0281.081] GetLastError () returned 0x20 [0281.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238f30 [0281.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2365a0 [0281.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238398 [0281.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2853b0 [0281.082] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238810 [0281.082] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0281.082] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210258 [0281.082] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389b0 [0281.082] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0281.082] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210198 [0281.082] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2380a0 [0281.082] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2859e0 [0281.082] GetLastError () returned 0x20 [0281.082] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x2387e0 [0281.082] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238860 [0281.083] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238880 [0281.083] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238860 | out: hHeap=0x1f0000) returned 1 [0281.083] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388f0 [0281.083] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238880 | out: hHeap=0x1f0000) returned 1 [0281.083] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387e0 | out: hHeap=0x1f0000) returned 1 [0281.083] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238970 [0281.083] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101c8 [0281.083] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238970 | out: hHeap=0x1f0000) returned 1 [0281.083] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101b0 [0281.083] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0281.083] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388f0 | out: hHeap=0x1f0000) returned 1 [0281.083] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101c8 [0281.083] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20fef8 [0281.084] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0281.084] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0281.084] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20fef8 | out: hHeap=0x1f0000) returned 1 [0281.084] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0281.084] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101b0 [0281.084] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204e30 [0281.084] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0281.084] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e50 [0281.084] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e30 | out: hHeap=0x1f0000) returned 1 [0281.084] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0281.084] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204b90 [0281.084] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238140 [0281.084] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204b90 | out: hHeap=0x1f0000) returned 1 [0281.084] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204c10 [0281.085] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0281.085] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e50 | out: hHeap=0x1f0000) returned 1 [0281.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204f70 [0281.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206928 [0281.554] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f70 | out: hHeap=0x1f0000) returned 1 [0281.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2381e0 [0281.554] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206928 | out: hHeap=0x1f0000) returned 1 [0281.554] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c10 | out: hHeap=0x1f0000) returned 1 [0281.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238910 [0281.555] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101b0 [0281.555] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238910 | out: hHeap=0x1f0000) returned 1 [0281.555] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0281.555] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0281.555] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204f70 [0281.555] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0281.555] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x2067d8 [0281.555] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f70 | out: hHeap=0x1f0000) returned 1 [0281.555] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2067d8 | out: hHeap=0x1f0000) returned 1 [0281.556] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0281.556] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0281.556] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0281.556] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2853b0 | out: hHeap=0x1f0000) returned 1 [0281.556] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0281.556] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238f30 [0281.556] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0281.556] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x212e00) returned 1 [0281.557] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2384b0 | out: pbBuffer=0x2384b0) returned 1 [0281.558] CryptReleaseContext (hProv=0x212e00, dwFlags=0x0) returned 1 [0281.558] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0281.558] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238140 [0281.558] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381e0 [0281.558] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239160 [0281.558] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0281.558] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0281.559] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239160 | out: hHeap=0x1f0000) returned 1 [0281.559] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8d18 [0281.559] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101b0 [0281.559] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x236608 [0281.559] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238140 [0281.559] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285ae8 [0281.559] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e30 [0281.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2364d0 [0281.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2384b0 [0281.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2856c8 [0281.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238860 [0281.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0281.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0281.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238830 [0281.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0281.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffa0 [0281.561] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffa0 | out: hHeap=0x1f0000) returned 1 [0281.561] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0281.561] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238830 | out: hHeap=0x1f0000) returned 1 [0281.561] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0281.561] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0281.561] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238860 | out: hHeap=0x1f0000) returned 1 [0281.561] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2856c8 | out: hHeap=0x1f0000) returned 1 [0281.561] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0281.562] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2364d0 | out: hHeap=0x1f0000) returned 1 [0281.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239010 [0281.562] GetLastError () returned 0x0 [0281.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239160 [0281.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0281.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0281.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0281.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0281.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0281.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0281.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x24e600 [0281.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2856c8 [0281.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0281.564] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0281.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0281.564] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0281.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2853b0 [0281.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0281.564] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0281.565] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fb50 [0281.565] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x2595a0 [0281.565] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2339e0 [0281.565] QueryPerformanceCounter (in: lpPerformanceCount=0x173dee0 | out: lpPerformanceCount=0x173dee0*=43893403907) returned 1 [0281.565] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173df20 | out: lpSystemTimeAsFileTime=0x173df20) [0281.566] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238860 [0281.566] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0281.566] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ef0 [0281.566] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ef0 | out: hHeap=0x1f0000) returned 1 [0281.566] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0281.566] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0281.566] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ef0 [0281.566] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ef0 | out: hHeap=0x1f0000) returned 1 [0281.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0281.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238860 | out: hHeap=0x1f0000) returned 1 [0281.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0281.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238de0 [0281.567] GetLastError () returned 0x0 [0281.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0281.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0281.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0281.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238168 [0281.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238398 [0281.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0281.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0281.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238190 [0281.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0281.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x222ee8 [0281.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0281.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0281.569] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0281.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0281.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0281.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2384b0 [0281.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238780 [0281.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0281.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0281.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238780 | out: hHeap=0x1f0000) returned 1 [0281.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0281.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x234b90 [0281.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b90 | out: hHeap=0x1f0000) returned 1 [0281.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0281.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0281.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101c8 [0281.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228758 [0281.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2385f0 [0281.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238578 [0281.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238690 [0281.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238780 [0281.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238578 | out: hHeap=0x1f0000) returned 1 [0281.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385f0 | out: hHeap=0x1f0000) returned 1 [0281.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0281.572] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238640 [0281.572] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238668 [0281.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238640 | out: hHeap=0x1f0000) returned 1 [0281.572] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0281.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238668 | out: hHeap=0x1f0000) returned 1 [0281.572] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206688 [0281.572] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x2b4ab0 [0281.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b4ab0 | out: hHeap=0x1f0000) returned 1 [0281.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206688 | out: hHeap=0x1f0000) returned 1 [0281.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0281.572] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0281.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0281.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0281.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204c90 [0281.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0281.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0281.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0281.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a90d8 [0281.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0281.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238780 | out: hHeap=0x1f0000) returned 1 [0281.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238690 | out: hHeap=0x1f0000) returned 1 [0281.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228758 | out: hHeap=0x1f0000) returned 1 [0281.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0281.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c90 | out: hHeap=0x1f0000) returned 1 [0281.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0281.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0281.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aa920 [0281.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aa920 | out: hHeap=0x1f0000) returned 1 [0281.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ee8 | out: hHeap=0x1f0000) returned 1 [0281.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0281.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0281.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0281.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0281.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0281.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0281.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0281.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aa480 [0281.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a9b40 [0281.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aa480 | out: hHeap=0x1f0000) returned 1 [0281.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a9b40 | out: hHeap=0x1f0000) returned 1 [0281.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a90d8 | out: hHeap=0x1f0000) returned 1 [0281.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0281.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2853b0 | out: hHeap=0x1f0000) returned 1 [0281.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24e600 | out: hHeap=0x1f0000) returned 1 [0281.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x232ba8 [0281.576] GetLastError () returned 0x0 [0281.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387e0 [0281.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388f0 [0281.720] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Save.ico.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\graphics\\save.ico.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e290, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0281.721] GetFileType (hFile=0x1ac) returned 0x1 [0281.722] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x286f98 [0281.722] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e218 | out: lpNewFilePointer=0x0) returned 1 [0281.722] GetLastError () returned 0xb7 [0281.723] CloseHandle (hObject=0x1ac) returned 1 [0281.723] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388f0 | out: hHeap=0x1f0000) returned 1 [0281.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387e0 | out: hHeap=0x1f0000) returned 1 [0281.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2856c8 | out: hHeap=0x1f0000) returned 1 [0281.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285ae8 | out: hHeap=0x1f0000) returned 1 [0281.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0281.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e30 | out: hHeap=0x1f0000) returned 1 [0281.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236608 | out: hHeap=0x1f0000) returned 1 [0281.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0281.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0281.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232ba8 | out: hHeap=0x1f0000) returned 1 [0281.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0281.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0281.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2595a0 | out: hHeap=0x1f0000) returned 1 [0281.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2339e0 | out: hHeap=0x1f0000) returned 1 [0281.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238f30 | out: hHeap=0x1f0000) returned 1 [0281.726] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238850 | out: hHeap=0x1f0000) returned 1 [0281.726] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0281.726] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0281.726] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389b0 | out: hHeap=0x1f0000) returned 1 [0281.726] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0281.727] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0281.727] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238810 | out: hHeap=0x1f0000) returned 1 [0281.727] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2859e0 | out: hHeap=0x1f0000) returned 1 [0281.727] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0281.727] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2365a0 | out: hHeap=0x1f0000) returned 1 [0281.727] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228b00 | out: hHeap=0x1f0000) returned 1 [0281.727] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0281.727] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0281.728] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228518 | out: hHeap=0x1f0000) returned 1 [0281.728] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389c0 | out: hHeap=0x1f0000) returned 1 [0281.728] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388e0 | out: hHeap=0x1f0000) returned 1 [0281.728] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28cfc8 | out: hHeap=0x1f0000) returned 1 [0281.728] CloseHandle (hObject=0x19c) returned 1 [0281.729] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388d0 | out: hHeap=0x1f0000) returned 1 [0281.729] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388b0 | out: hHeap=0x1f0000) returned 1 [0281.729] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237b60 | out: hHeap=0x1f0000) returned 1 [0281.730] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x249db0 | out: hHeap=0x1f0000) returned 1 [0281.730] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0281.730] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d10 | out: hHeap=0x1f0000) returned 1 [0281.730] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28dfd0 | out: hHeap=0x1f0000) returned 1 [0281.730] CloseHandle (hObject=0x21c) returned 1 [0281.731] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388c0 | out: hHeap=0x1f0000) returned 1 [0281.731] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388a0 | out: hHeap=0x1f0000) returned 1 [0281.731] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad7a8 | out: hHeap=0x1f0000) returned 1 [0281.731] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cf0 | out: hHeap=0x1f0000) returned 1 [0281.731] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21b618 | out: hHeap=0x1f0000) returned 1 [0281.732] CloseHandle (hObject=0x198) returned 1 [0281.732] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238820 | out: hHeap=0x1f0000) returned 1 [0281.732] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238950 | out: hHeap=0x1f0000) returned 1 [0281.732] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad860 | out: hHeap=0x1f0000) returned 1 [0281.733] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238890 | out: hHeap=0x1f0000) returned 1 [0281.733] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238920 | out: hHeap=0x1f0000) returned 1 [0281.733] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238930 | out: hHeap=0x1f0000) returned 1 [0281.733] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238870 | out: hHeap=0x1f0000) returned 1 [0281.733] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0281.733] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x258298 | out: hHeap=0x1f0000) returned 1 [0281.733] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2338c8 | out: hHeap=0x1f0000) returned 1 [0281.734] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2068c8 | out: hHeap=0x1f0000) returned 1 [0281.734] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210240 | out: hHeap=0x1f0000) returned 1 [0281.734] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0281.734] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab708 | out: hHeap=0x1f0000) returned 1 [0281.734] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24fd60 | out: hHeap=0x1f0000) returned 1 [0281.734] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2337b0 | out: hHeap=0x1f0000) returned 1 [0281.734] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239278 | out: hHeap=0x1f0000) returned 1 [0281.734] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0281.735] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ee88 | out: hHeap=0x1f0000) returned 1 [0281.735] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228c68 | out: hHeap=0x1f0000) returned 1 [0281.735] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0281.735] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Save.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\save.ico")) returned 1 [0281.737] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x8f66, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.ico", cAlternateFileName="")) returned 1 [0281.737] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0281.738] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8d18 [0281.738] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217fd0 [0281.738] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0281.738] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217c50 | out: hHeap=0x1f0000) returned 1 [0281.738] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0281.739] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Setup.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\setup.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0281.740] GetFileType (hFile=0x198) returned 0x1 [0281.740] CloseHandle (hObject=0x198) returned 1 [0281.741] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2364d0 [0281.741] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Setup.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\setup.ico"), fInfoLevelId=0x0, lpFileInformation=0x173eb6c | out: lpFileInformation=0x173eb6c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x8f66)) returned 1 [0281.742] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2364d0 | out: hHeap=0x1f0000) returned 1 [0281.742] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236608 [0281.742] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Setup.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\setup.ico"), fInfoLevelId=0x0, lpFileInformation=0x173eb7c | out: lpFileInformation=0x173eb7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x8f66)) returned 1 [0281.742] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236608 | out: hHeap=0x1f0000) returned 1 [0281.742] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2365a0 [0281.743] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2365a0 | out: hHeap=0x1f0000) returned 1 [0281.743] GetLastError () returned 0x0 [0281.743] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0281.743] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228b00 [0281.744] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d508 [0281.744] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236468 [0281.744] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238e50 [0281.744] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0281.744] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x212ad0) returned 1 [0281.745] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238398 | out: pbBuffer=0x238398) returned 1 [0281.745] CryptReleaseContext (hProv=0x212ad0, dwFlags=0x0) returned 1 [0281.745] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0281.746] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x258298 [0281.746] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x233238 [0281.746] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=43911478241) returned 1 [0281.746] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0281.746] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=43911524998) returned 1 [0281.747] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0281.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x2392b0 [0281.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x251068 [0281.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x233468 [0281.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x2ab8a8 [0281.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210210 [0281.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206628 [0281.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210240 [0281.748] GetLastError () returned 0x0 [0281.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae9a8 [0281.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x2191b8 [0281.748] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae9a8 | out: hHeap=0x1f0000) returned 1 [0281.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf8) returned 0x217038 [0281.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2191b8 | out: hHeap=0x1f0000) returned 1 [0281.749] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238890 [0281.749] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238920 [0281.750] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Setup.ico.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\graphics\\setup.ico.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e230, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0281.751] GetFileType (hFile=0x198) returned 0x1 [0281.751] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388c0 [0281.752] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238900 [0281.753] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Setup.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\setup.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0281.753] GetFileType (hFile=0x21c) returned 0x1 [0281.754] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c10 [0281.754] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0281.754] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad4c8 [0281.754] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238870 [0281.755] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238800 [0281.756] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Setup.ico.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\graphics\\setup.ico.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0281.756] GetFileType (hFile=0x19c) returned 0x1 [0281.756] GetLastError () returned 0xb7 [0282.072] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe4) returned 0x21b528 [0282.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0282.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d90 [0282.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cf0 [0282.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad6f0 [0282.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238910 [0282.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389c0 [0282.164] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Setup.ico.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\graphics\\setup.ico.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0282.164] GetFileType (hFile=0x1ac) returned 0x1 [0282.165] GetLastError () returned 0xb7 [0282.165] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d90 [0282.165] GetLastError () returned 0xb7 [0282.166] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c10 [0282.166] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d90 [0282.166] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204b90 [0282.166] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb8) returned 0x237c20 [0282.166] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388d0 [0282.167] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388e0 [0282.167] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Setup.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\setup.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1a4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0282.168] GetFileType (hFile=0x174) returned 0x1 [0282.168] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28cfc8 [0282.168] ReadFile (in: hFile=0x174, lpBuffer=0x28cfc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e100, lpOverlapped=0x0 | out: lpBuffer=0x28cfc8*, lpNumberOfBytesRead=0x173e100*=0x1000, lpOverlapped=0x0) returned 1 [0282.213] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24b5e0 [0282.214] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x286f98 [0282.215] GetLastError () returned 0x0 [0282.218] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210198 [0282.218] GetLastError () returned 0x0 [0282.219] CloseHandle (hObject=0x198) returned 1 [0282.220] CloseHandle (hObject=0x21c) returned 1 [0282.220] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238970 [0282.221] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389b0 [0282.222] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Setup.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\setup.ico"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0282.224] GetFileType (hFile=0x21c) returned 0x1 [0282.225] GetLastError () returned 0xb7 [0282.225] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x292ff8 [0282.226] GetLastError () returned 0xb7 [0282.228] CloseHandle (hObject=0x21c) returned 1 [0282.229] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Setup.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\setup.ico")) returned 0 [0282.229] GetLastError () returned 0x20 [0282.229] GetLastError () returned 0x20 [0282.230] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228680 [0282.230] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238140 [0282.230] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238280 [0282.230] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x228bd8 [0282.230] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204df0 [0282.230] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cb0 [0282.231] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x238810 [0282.231] GetLastError () returned 0x20 [0282.231] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238e88 [0282.231] GetLastError () returned 0x20 [0282.231] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239048 [0282.231] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2364d0 [0282.232] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238398 [0282.232] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x284f90 [0282.232] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238820 [0282.232] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0282.232] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101b0 [0282.232] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238850 [0282.232] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0282.233] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210258 [0282.233] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238078 [0282.233] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2852a8 [0282.233] GetLastError () returned 0x20 [0282.233] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238830 [0282.233] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238990 [0282.234] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387f0 [0282.234] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238990 | out: hHeap=0x1f0000) returned 1 [0282.234] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238990 [0282.234] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387f0 | out: hHeap=0x1f0000) returned 1 [0282.234] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238830 | out: hHeap=0x1f0000) returned 1 [0282.234] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387e0 [0282.234] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101c8 [0282.234] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387e0 | out: hHeap=0x1f0000) returned 1 [0282.234] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101e0 [0282.235] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0282.235] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238990 | out: hHeap=0x1f0000) returned 1 [0282.235] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101c8 [0282.235] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20fef8 [0282.235] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0282.235] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0282.235] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20fef8 | out: hHeap=0x1f0000) returned 1 [0282.235] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0282.236] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0282.236] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204e90 [0282.236] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0282.236] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d10 [0282.236] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e90 | out: hHeap=0x1f0000) returned 1 [0282.236] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0282.236] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204df0 [0282.236] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2380a0 [0282.237] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204df0 | out: hHeap=0x1f0000) returned 1 [0282.237] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204c70 [0282.237] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0282.237] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d10 | out: hHeap=0x1f0000) returned 1 [0282.237] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204f70 [0282.237] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x2067d8 [0282.237] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f70 | out: hHeap=0x1f0000) returned 1 [0282.237] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2380a0 [0282.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2067d8 | out: hHeap=0x1f0000) returned 1 [0282.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c70 | out: hHeap=0x1f0000) returned 1 [0282.238] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388f0 [0282.238] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101c8 [0282.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388f0 | out: hHeap=0x1f0000) returned 1 [0282.238] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0282.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0282.239] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204cd0 [0282.239] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0282.239] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x2068c8 [0282.239] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cd0 | out: hHeap=0x1f0000) returned 1 [0282.239] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2068c8 | out: hHeap=0x1f0000) returned 1 [0282.239] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0282.239] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0282.240] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0282.240] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x284f90 | out: hHeap=0x1f0000) returned 1 [0282.240] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0282.240] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239010 [0282.240] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0282.240] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x213460) returned 1 [0282.602] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238190 | out: pbBuffer=0x238190) returned 1 [0282.602] CryptReleaseContext (hProv=0x213460, dwFlags=0x0) returned 1 [0282.603] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0282.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238398 [0282.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2380a0 [0282.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2390b8 [0282.603] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0282.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0282.603] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2390b8 | out: hHeap=0x1f0000) returned 1 [0282.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8d18 [0282.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0282.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x236538 [0282.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238140 [0282.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285e00 [0282.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ef0 [0282.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236608 [0282.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238190 [0282.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2853b0 [0282.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388f0 [0282.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0282.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0282.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238930 [0282.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0282.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20fef8 [0282.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20fef8 | out: hHeap=0x1f0000) returned 1 [0282.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0282.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238930 | out: hHeap=0x1f0000) returned 1 [0282.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0282.606] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0282.606] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388f0 | out: hHeap=0x1f0000) returned 1 [0282.606] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2853b0 | out: hHeap=0x1f0000) returned 1 [0282.606] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0282.606] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236608 | out: hHeap=0x1f0000) returned 1 [0282.606] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238f30 [0282.606] GetLastError () returned 0x0 [0282.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238f30 [0282.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0282.607] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0282.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0282.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0282.607] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0282.607] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0282.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x24e900 [0282.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285cf8 [0282.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0282.608] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0282.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0282.608] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0282.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x284f90 [0282.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0282.608] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0282.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x2303e8 [0282.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x24fd60 [0282.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x233008 [0282.608] QueryPerformanceCounter (in: lpPerformanceCount=0x173dee0 | out: lpPerformanceCount=0x173dee0*=43997718477) returned 1 [0282.608] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173df20 | out: lpSystemTimeAsFileTime=0x173df20) [0282.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x2387e0 [0282.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0282.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bf0 [0282.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bf0 | out: hHeap=0x1f0000) returned 1 [0282.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0282.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0282.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d90 [0282.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d90 | out: hHeap=0x1f0000) returned 1 [0282.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0282.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387e0 | out: hHeap=0x1f0000) returned 1 [0282.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0282.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238d00 [0282.609] GetLastError () returned 0x0 [0282.610] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0282.610] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0282.610] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0282.610] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238190 [0282.610] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381e0 [0282.610] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0282.610] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0282.610] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238398 [0282.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0282.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x222ee8 [0282.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0282.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0282.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0282.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0282.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0282.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238578 [0282.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238690 [0282.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238578 | out: hHeap=0x1f0000) returned 1 [0282.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0282.612] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238690 | out: hHeap=0x1f0000) returned 1 [0282.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0282.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x234b90 [0282.612] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b90 | out: hHeap=0x1f0000) returned 1 [0282.612] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0282.612] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0282.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101e0 [0282.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228c68 [0282.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238730 [0282.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238528 [0282.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2386e0 [0282.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238708 [0282.613] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238528 | out: hHeap=0x1f0000) returned 1 [0282.613] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238730 | out: hHeap=0x1f0000) returned 1 [0282.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0282.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238578 [0282.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238730 [0282.613] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238578 | out: hHeap=0x1f0000) returned 1 [0282.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0282.613] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238730 | out: hHeap=0x1f0000) returned 1 [0282.614] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206928 [0282.614] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x2b1fe0 [0282.614] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b1fe0 | out: hHeap=0x1f0000) returned 1 [0282.614] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206928 | out: hHeap=0x1f0000) returned 1 [0282.614] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0282.614] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0282.614] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0282.614] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0282.614] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204f10 [0282.614] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0282.615] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0282.615] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0282.615] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a9c68 [0282.615] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0282.615] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238708 | out: hHeap=0x1f0000) returned 1 [0282.615] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2386e0 | out: hHeap=0x1f0000) returned 1 [0282.615] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228c68 | out: hHeap=0x1f0000) returned 1 [0282.615] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0282.615] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f10 | out: hHeap=0x1f0000) returned 1 [0282.616] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0282.616] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0282.616] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aa5a8 [0282.616] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aa5a8 | out: hHeap=0x1f0000) returned 1 [0282.617] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ee8 | out: hHeap=0x1f0000) returned 1 [0282.617] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0282.617] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0282.617] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0282.617] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0282.617] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0282.617] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0282.617] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0282.617] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aab70 [0282.617] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a9450 [0282.618] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aab70 | out: hHeap=0x1f0000) returned 1 [0282.618] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a9450 | out: hHeap=0x1f0000) returned 1 [0282.618] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a9c68 | out: hHeap=0x1f0000) returned 1 [0282.618] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0282.618] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x284f90 | out: hHeap=0x1f0000) returned 1 [0282.618] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24e900 | out: hHeap=0x1f0000) returned 1 [0282.618] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x233350 [0282.618] GetLastError () returned 0x0 [0282.619] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238940 [0282.619] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388f0 [0282.620] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Setup.ico.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\graphics\\setup.ico.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e290, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0282.620] GetFileType (hFile=0x21c) returned 0x1 [0282.620] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x295008 [0282.621] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e218 | out: lpNewFilePointer=0x0) returned 1 [0282.621] GetLastError () returned 0xb7 [0282.621] CloseHandle (hObject=0x21c) returned 1 [0282.622] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388f0 | out: hHeap=0x1f0000) returned 1 [0282.622] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238940 | out: hHeap=0x1f0000) returned 1 [0282.622] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285cf8 | out: hHeap=0x1f0000) returned 1 [0282.622] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285e00 | out: hHeap=0x1f0000) returned 1 [0282.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0282.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ef0 | out: hHeap=0x1f0000) returned 1 [0282.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236538 | out: hHeap=0x1f0000) returned 1 [0282.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0282.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0282.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233350 | out: hHeap=0x1f0000) returned 1 [0282.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0282.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0282.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24fd60 | out: hHeap=0x1f0000) returned 1 [0282.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233008 | out: hHeap=0x1f0000) returned 1 [0282.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239010 | out: hHeap=0x1f0000) returned 1 [0282.624] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238810 | out: hHeap=0x1f0000) returned 1 [0282.624] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0282.624] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0282.624] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238850 | out: hHeap=0x1f0000) returned 1 [0282.624] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0282.624] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0282.624] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238820 | out: hHeap=0x1f0000) returned 1 [0282.624] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2852a8 | out: hHeap=0x1f0000) returned 1 [0282.624] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0282.624] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2364d0 | out: hHeap=0x1f0000) returned 1 [0282.624] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228bd8 | out: hHeap=0x1f0000) returned 1 [0282.624] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0282.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0282.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228680 | out: hHeap=0x1f0000) returned 1 [0282.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389b0 | out: hHeap=0x1f0000) returned 1 [0282.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238970 | out: hHeap=0x1f0000) returned 1 [0282.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28cfc8 | out: hHeap=0x1f0000) returned 1 [0282.625] CloseHandle (hObject=0x174) returned 1 [0282.626] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388e0 | out: hHeap=0x1f0000) returned 1 [0282.626] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388d0 | out: hHeap=0x1f0000) returned 1 [0282.626] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237c20 | out: hHeap=0x1f0000) returned 1 [0282.626] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24b5e0 | out: hHeap=0x1f0000) returned 1 [0282.626] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0282.626] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c10 | out: hHeap=0x1f0000) returned 1 [0282.626] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286f98 | out: hHeap=0x1f0000) returned 1 [0282.627] CloseHandle (hObject=0x1ac) returned 1 [0282.627] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389c0 | out: hHeap=0x1f0000) returned 1 [0282.627] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238910 | out: hHeap=0x1f0000) returned 1 [0282.627] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad6f0 | out: hHeap=0x1f0000) returned 1 [0282.628] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d70 | out: hHeap=0x1f0000) returned 1 [0282.628] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21b528 | out: hHeap=0x1f0000) returned 1 [0282.628] CloseHandle (hObject=0x19c) returned 1 [0282.629] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238800 | out: hHeap=0x1f0000) returned 1 [0282.629] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238870 | out: hHeap=0x1f0000) returned 1 [0282.629] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad4c8 | out: hHeap=0x1f0000) returned 1 [0282.629] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238900 | out: hHeap=0x1f0000) returned 1 [0282.629] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388c0 | out: hHeap=0x1f0000) returned 1 [0282.629] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238920 | out: hHeap=0x1f0000) returned 1 [0282.629] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238890 | out: hHeap=0x1f0000) returned 1 [0282.629] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0282.629] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x251068 | out: hHeap=0x1f0000) returned 1 [0282.629] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233468 | out: hHeap=0x1f0000) returned 1 [0282.629] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206628 | out: hHeap=0x1f0000) returned 1 [0282.629] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210240 | out: hHeap=0x1f0000) returned 1 [0282.630] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0282.630] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab8a8 | out: hHeap=0x1f0000) returned 1 [0282.630] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x258298 | out: hHeap=0x1f0000) returned 1 [0282.630] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233238 | out: hHeap=0x1f0000) returned 1 [0282.630] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238e50 | out: hHeap=0x1f0000) returned 1 [0282.630] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0282.630] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d508 | out: hHeap=0x1f0000) returned 1 [0282.630] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228b00 | out: hHeap=0x1f0000) returned 1 [0282.630] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0282.630] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Setup.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\setup.ico")) returned 1 [0282.633] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5b5e7f00, ftCreationTime.dwHighDateTime=0x1ca927c, ftLastAccessTime.dwLowDateTime=0x5b5e7f00, ftLastAccessTime.dwHighDateTime=0x1ca927c, ftLastWriteTime.dwLowDateTime=0x5b5e7f00, ftLastWriteTime.dwHighDateTime=0x1ca927c, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0x0, cFileName="stop.ico", cAlternateFileName="")) returned 1 [0282.633] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0282.633] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8d18 [0282.633] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x2182d0 [0282.633] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0282.633] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217fd0 | out: hHeap=0x1f0000) returned 1 [0282.633] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0282.634] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\stop.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\stop.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0282.634] GetFileType (hFile=0x19c) returned 0x1 [0282.635] CloseHandle (hObject=0x19c) returned 1 [0282.635] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236468 [0282.635] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\stop.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\stop.ico"), fInfoLevelId=0x0, lpFileInformation=0x173eb6c | out: lpFileInformation=0x173eb6c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5b5e7f00, ftCreationTime.dwHighDateTime=0x1ca927c, ftLastAccessTime.dwLowDateTime=0x5b5e7f00, ftLastAccessTime.dwHighDateTime=0x1ca927c, ftLastWriteTime.dwLowDateTime=0x5b5e7f00, ftLastWriteTime.dwHighDateTime=0x1ca927c, nFileSizeHigh=0x0, nFileSizeLow=0x2796)) returned 1 [0282.635] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0282.636] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236538 [0282.636] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\stop.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\stop.ico"), fInfoLevelId=0x0, lpFileInformation=0x173eb7c | out: lpFileInformation=0x173eb7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5b5e7f00, ftCreationTime.dwHighDateTime=0x1ca927c, ftLastAccessTime.dwLowDateTime=0x5b5e7f00, ftLastAccessTime.dwHighDateTime=0x1ca927c, ftLastWriteTime.dwLowDateTime=0x5b5e7f00, ftLastWriteTime.dwHighDateTime=0x1ca927c, nFileSizeHigh=0x0, nFileSizeLow=0x2796)) returned 1 [0282.636] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236538 | out: hHeap=0x1f0000) returned 1 [0282.636] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2364d0 [0282.636] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2364d0 | out: hHeap=0x1f0000) returned 1 [0282.636] GetLastError () returned 0x0 [0282.637] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0282.637] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228440 [0282.637] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22db68 [0282.637] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2365a0 [0282.637] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c58 [0282.637] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0282.637] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x212ad0) returned 1 [0282.638] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238168 | out: pbBuffer=0x238168) returned 1 [0282.638] CryptReleaseContext (hProv=0x212ad0, dwFlags=0x0) returned 1 [0282.638] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0282.638] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x254980 [0282.638] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x233580 [0282.639] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=44000748896) returned 1 [0282.639] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0282.639] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=44000778071) returned 1 [0282.639] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0282.639] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239278 [0282.639] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x258298 [0282.639] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x233698 [0282.639] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x2ab088 [0282.639] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210198 [0282.640] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2067d8 [0282.640] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210240 [0282.640] GetLastError () returned 0x0 [0282.640] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae930 [0282.640] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218978 [0282.640] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae930 | out: hHeap=0x1f0000) returned 1 [0282.640] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf8) returned 0x217038 [0282.640] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218978 | out: hHeap=0x1f0000) returned 1 [0282.640] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388d0 [0282.641] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238890 [0282.641] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\stop.ico.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\graphics\\stop.ico.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e230, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0282.642] GetFileType (hFile=0x19c) returned 0x1 [0282.642] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238870 [0282.643] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238800 [0282.643] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\stop.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\stop.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0282.643] GetFileType (hFile=0x1ac) returned 0x1 [0282.644] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d10 [0282.644] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0282.644] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad7a8 [0282.644] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388a0 [0282.644] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388e0 [0282.645] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\stop.ico.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\graphics\\stop.ico.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0282.645] GetFileType (hFile=0x174) returned 0x1 [0282.646] GetLastError () returned 0xb7 [0282.646] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe4) returned 0x21b7f8 [0282.646] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f50 [0282.646] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d30 [0282.646] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0282.646] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad1e8 [0282.647] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388f0 [0282.647] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387e0 [0282.992] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\stop.ico.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\graphics\\stop.ico.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0282.992] GetFileType (hFile=0x1c0) returned 0x1 [0282.993] GetLastError () returned 0xb7 [0282.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f70 [0282.993] GetLastError () returned 0xb7 [0282.994] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0282.994] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d90 [0282.994] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f70 [0282.995] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb8) returned 0x236ea0 [0282.995] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388c0 [0282.995] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387f0 [0282.996] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\stop.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\stop.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1a4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0282.999] GetFileType (hFile=0x1e0) returned 0x1 [0282.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28cfc8 [0282.999] ReadFile (in: hFile=0x1e0, lpBuffer=0x28cfc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e100, lpOverlapped=0x0 | out: lpBuffer=0x28cfc8*, lpNumberOfBytesRead=0x173e100*=0x1000, lpOverlapped=0x0) returned 1 [0283.004] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24d218 [0283.004] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28dfd0 [0283.005] GetLastError () returned 0x0 [0283.007] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210258 [0283.008] GetLastError () returned 0x0 [0283.008] CloseHandle (hObject=0x19c) returned 1 [0283.009] CloseHandle (hObject=0x1ac) returned 1 [0283.010] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238820 [0283.011] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238850 [0283.012] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\stop.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\stop.ico"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0283.014] GetFileType (hFile=0x1ac) returned 0x1 [0283.015] GetLastError () returned 0xb7 [0283.015] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x286f98 [0283.015] GetLastError () returned 0xb7 [0283.017] CloseHandle (hObject=0x1ac) returned 1 [0283.017] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\stop.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\stop.ico")) returned 0 [0283.017] GetLastError () returned 0x20 [0283.018] GetLastError () returned 0x20 [0283.018] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228b00 [0283.018] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238168 [0283.018] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238078 [0283.018] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x2287a0 [0283.018] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e30 [0283.018] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f10 [0283.019] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x238910 [0283.019] GetLastError () returned 0x20 [0283.019] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238c90 [0283.019] GetLastError () returned 0x20 [0283.019] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238c90 [0283.019] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236608 [0283.019] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2384b0 [0283.019] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2852a8 [0283.020] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238860 [0283.020] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0283.020] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101b0 [0283.020] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238830 [0283.020] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0283.020] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0283.020] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238000 [0283.021] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285cf8 [0283.021] GetLastError () returned 0x20 [0283.021] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x2389b0 [0283.021] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238920 [0283.021] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238930 [0283.021] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238920 | out: hHeap=0x1f0000) returned 1 [0283.021] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238810 [0283.022] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238930 | out: hHeap=0x1f0000) returned 1 [0283.022] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389b0 | out: hHeap=0x1f0000) returned 1 [0283.022] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238840 [0283.022] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210210 [0283.022] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238840 | out: hHeap=0x1f0000) returned 1 [0283.022] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101e0 [0283.022] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0283.022] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238810 | out: hHeap=0x1f0000) returned 1 [0283.023] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210210 [0283.023] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffb8 [0283.023] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0283.023] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210210 [0283.023] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffb8 | out: hHeap=0x1f0000) returned 1 [0283.023] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0283.023] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0283.023] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204c70 [0283.023] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0283.024] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f70 [0283.024] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c70 | out: hHeap=0x1f0000) returned 1 [0283.024] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0283.024] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d30 [0283.024] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2381b8 [0283.024] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d30 | out: hHeap=0x1f0000) returned 1 [0283.024] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204d90 [0283.024] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0283.024] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f70 | out: hHeap=0x1f0000) returned 1 [0283.025] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204f10 [0283.025] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206628 [0283.025] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f10 | out: hHeap=0x1f0000) returned 1 [0283.025] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2381b8 [0283.025] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206628 | out: hHeap=0x1f0000) returned 1 [0283.025] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d90 | out: hHeap=0x1f0000) returned 1 [0283.025] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238920 [0283.025] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101e0 [0283.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238920 | out: hHeap=0x1f0000) returned 1 [0283.026] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210210 [0283.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0283.026] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204cf0 [0283.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0283.026] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206808 [0283.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cf0 | out: hHeap=0x1f0000) returned 1 [0283.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206808 | out: hHeap=0x1f0000) returned 1 [0283.027] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0283.027] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0283.027] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0283.027] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2852a8 | out: hHeap=0x1f0000) returned 1 [0283.027] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0283.027] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c90 [0283.027] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0283.028] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x212e00) returned 1 [0283.029] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238168 | out: pbBuffer=0x238168) returned 1 [0283.029] CryptReleaseContext (hProv=0x212e00, dwFlags=0x0) returned 1 [0283.029] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0283.029] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2384b0 [0283.030] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238168 [0283.030] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238f30 [0283.030] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0283.030] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0283.030] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238f30 | out: hHeap=0x1f0000) returned 1 [0283.030] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8d18 [0283.030] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0283.030] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x2364d0 [0283.030] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2384b0 [0283.030] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2853b0 [0283.030] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204db0 [0283.031] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236468 [0283.031] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2381b8 [0283.031] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2855c0 [0283.031] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238810 [0283.031] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0283.031] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210210 [0283.031] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238900 [0283.031] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0283.031] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff70 [0283.031] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff70 | out: hHeap=0x1f0000) returned 1 [0283.031] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0283.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238900 | out: hHeap=0x1f0000) returned 1 [0283.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0283.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0283.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238810 | out: hHeap=0x1f0000) returned 1 [0283.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2855c0 | out: hHeap=0x1f0000) returned 1 [0283.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0283.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0283.032] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239048 [0283.032] GetLastError () returned 0x0 [0283.033] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238ec0 [0283.033] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0283.033] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0283.033] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0283.033] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0283.033] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0283.033] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0283.033] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x24e5c0 [0283.034] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285ae8 [0283.034] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0283.034] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0283.034] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0283.034] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0283.034] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2854b8 [0283.034] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0283.034] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0283.035] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f768 [0283.035] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x24fd60 [0283.035] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x232cc0 [0283.035] QueryPerformanceCounter (in: lpPerformanceCount=0x173dee0 | out: lpPerformanceCount=0x173dee0*=44040380999) returned 1 [0283.035] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173df20 | out: lpSystemTimeAsFileTime=0x173df20) [0283.035] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238900 [0283.035] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0283.036] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e90 [0283.036] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e90 | out: hHeap=0x1f0000) returned 1 [0283.036] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0283.036] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0283.036] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ef0 [0283.036] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ef0 | out: hHeap=0x1f0000) returned 1 [0283.036] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0283.036] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238900 | out: hHeap=0x1f0000) returned 1 [0283.037] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0283.037] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239198 [0283.037] GetLastError () returned 0x0 [0283.037] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0283.037] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0283.037] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0283.037] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381b8 [0283.037] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381e0 [0283.038] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0283.038] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0283.038] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238280 [0283.038] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0283.038] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x222ee8 [0283.038] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0283.038] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0283.038] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0283.039] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0283.039] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0283.039] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238640 [0283.039] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238730 [0283.039] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238640 | out: hHeap=0x1f0000) returned 1 [0283.039] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0283.039] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238730 | out: hHeap=0x1f0000) returned 1 [0283.039] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0283.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x234b90 [0283.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b90 | out: hHeap=0x1f0000) returned 1 [0283.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0283.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0283.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210210 [0283.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228bd8 [0283.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238578 [0283.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238708 [0283.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2385a0 [0283.041] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2386e0 [0283.041] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238708 | out: hHeap=0x1f0000) returned 1 [0283.041] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238578 | out: hHeap=0x1f0000) returned 1 [0283.041] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0283.041] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2385f0 [0283.041] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238500 [0283.041] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385f0 | out: hHeap=0x1f0000) returned 1 [0283.041] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0283.042] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238500 | out: hHeap=0x1f0000) returned 1 [0283.042] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206658 [0283.042] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x2b3100 [0283.042] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b3100 | out: hHeap=0x1f0000) returned 1 [0283.042] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206658 | out: hHeap=0x1f0000) returned 1 [0283.042] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0283.042] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0283.042] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0283.042] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0283.043] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204cb0 [0283.043] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0283.043] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0283.350] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0283.350] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a9a18 [0283.350] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0283.350] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2386e0 | out: hHeap=0x1f0000) returned 1 [0283.350] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385a0 | out: hHeap=0x1f0000) returned 1 [0283.350] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228bd8 | out: hHeap=0x1f0000) returned 1 [0283.350] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0283.350] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cb0 | out: hHeap=0x1f0000) returned 1 [0283.350] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0283.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0283.351] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aa7f8 [0283.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aa7f8 | out: hHeap=0x1f0000) returned 1 [0283.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ee8 | out: hHeap=0x1f0000) returned 1 [0283.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0283.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0283.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0283.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0283.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0283.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0283.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0283.351] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a96a0 [0283.351] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a9d90 [0283.352] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a96a0 | out: hHeap=0x1f0000) returned 1 [0283.352] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a9d90 | out: hHeap=0x1f0000) returned 1 [0283.352] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a9a18 | out: hHeap=0x1f0000) returned 1 [0283.352] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0283.352] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2854b8 | out: hHeap=0x1f0000) returned 1 [0283.352] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24e5c0 | out: hHeap=0x1f0000) returned 1 [0283.352] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x2337b0 [0283.352] GetLastError () returned 0x0 [0283.353] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238940 [0283.353] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238880 [0283.354] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\stop.ico.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\graphics\\stop.ico.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e290, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0283.354] GetFileType (hFile=0x198) returned 0x1 [0283.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x286f98 [0283.355] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e218 | out: lpNewFilePointer=0x0) returned 1 [0283.355] GetLastError () returned 0xb7 [0283.356] CloseHandle (hObject=0x198) returned 1 [0283.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238880 | out: hHeap=0x1f0000) returned 1 [0283.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238940 | out: hHeap=0x1f0000) returned 1 [0283.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285ae8 | out: hHeap=0x1f0000) returned 1 [0283.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2853b0 | out: hHeap=0x1f0000) returned 1 [0283.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0283.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204db0 | out: hHeap=0x1f0000) returned 1 [0283.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2364d0 | out: hHeap=0x1f0000) returned 1 [0283.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0283.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0283.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2337b0 | out: hHeap=0x1f0000) returned 1 [0283.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0283.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0283.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24fd60 | out: hHeap=0x1f0000) returned 1 [0283.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232cc0 | out: hHeap=0x1f0000) returned 1 [0283.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c90 | out: hHeap=0x1f0000) returned 1 [0283.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238910 | out: hHeap=0x1f0000) returned 1 [0283.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0283.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0283.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238830 | out: hHeap=0x1f0000) returned 1 [0283.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0283.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0283.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238860 | out: hHeap=0x1f0000) returned 1 [0283.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285cf8 | out: hHeap=0x1f0000) returned 1 [0283.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0283.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236608 | out: hHeap=0x1f0000) returned 1 [0283.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2287a0 | out: hHeap=0x1f0000) returned 1 [0283.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0283.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0283.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228b00 | out: hHeap=0x1f0000) returned 1 [0283.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238850 | out: hHeap=0x1f0000) returned 1 [0283.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238820 | out: hHeap=0x1f0000) returned 1 [0283.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28cfc8 | out: hHeap=0x1f0000) returned 1 [0283.359] CloseHandle (hObject=0x1e0) returned 1 [0283.360] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387f0 | out: hHeap=0x1f0000) returned 1 [0283.360] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388c0 | out: hHeap=0x1f0000) returned 1 [0283.360] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236ea0 | out: hHeap=0x1f0000) returned 1 [0283.360] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24d218 | out: hHeap=0x1f0000) returned 1 [0283.360] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0283.360] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d70 | out: hHeap=0x1f0000) returned 1 [0283.360] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28dfd0 | out: hHeap=0x1f0000) returned 1 [0283.360] CloseHandle (hObject=0x1c0) returned 1 [0283.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387e0 | out: hHeap=0x1f0000) returned 1 [0283.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388f0 | out: hHeap=0x1f0000) returned 1 [0283.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad1e8 | out: hHeap=0x1f0000) returned 1 [0283.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f50 | out: hHeap=0x1f0000) returned 1 [0283.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21b7f8 | out: hHeap=0x1f0000) returned 1 [0283.361] CloseHandle (hObject=0x174) returned 1 [0283.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388e0 | out: hHeap=0x1f0000) returned 1 [0283.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388a0 | out: hHeap=0x1f0000) returned 1 [0283.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad7a8 | out: hHeap=0x1f0000) returned 1 [0283.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238800 | out: hHeap=0x1f0000) returned 1 [0283.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238870 | out: hHeap=0x1f0000) returned 1 [0283.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238890 | out: hHeap=0x1f0000) returned 1 [0283.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388d0 | out: hHeap=0x1f0000) returned 1 [0283.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0283.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x258298 | out: hHeap=0x1f0000) returned 1 [0283.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233698 | out: hHeap=0x1f0000) returned 1 [0283.363] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2067d8 | out: hHeap=0x1f0000) returned 1 [0283.363] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210240 | out: hHeap=0x1f0000) returned 1 [0283.363] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0283.363] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab088 | out: hHeap=0x1f0000) returned 1 [0283.363] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x254980 | out: hHeap=0x1f0000) returned 1 [0283.363] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233580 | out: hHeap=0x1f0000) returned 1 [0283.363] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c58 | out: hHeap=0x1f0000) returned 1 [0283.363] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2365a0 | out: hHeap=0x1f0000) returned 1 [0283.363] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22db68 | out: hHeap=0x1f0000) returned 1 [0283.363] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228440 | out: hHeap=0x1f0000) returned 1 [0283.363] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0283.363] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\stop.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\stop.ico")) returned 1 [0283.366] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SysReqMet.ico", cAlternateFileName="SYSREQ~1.ICO")) returned 1 [0283.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0283.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8d18 [0283.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x2183d0 [0283.366] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0283.366] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2182d0 | out: hHeap=0x1f0000) returned 1 [0283.366] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0283.367] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\SysReqMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqmet.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0283.367] GetFileType (hFile=0x174) returned 0x1 [0283.368] CloseHandle (hObject=0x174) returned 1 [0283.368] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236468 [0283.368] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\SysReqMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqmet.ico"), fInfoLevelId=0x0, lpFileInformation=0x173eb6c | out: lpFileInformation=0x173eb6c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e)) returned 1 [0283.368] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0283.368] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2364d0 [0283.368] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\SysReqMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqmet.ico"), fInfoLevelId=0x0, lpFileInformation=0x173eb7c | out: lpFileInformation=0x173eb7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e)) returned 1 [0283.368] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2364d0 | out: hHeap=0x1f0000) returned 1 [0283.368] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236468 [0283.369] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0283.369] GetLastError () returned 0x0 [0283.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0283.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228680 [0283.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22ee88 [0283.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236468 [0283.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239208 [0283.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0283.369] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x213350) returned 1 [0283.371] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238000 | out: pbBuffer=0x238000) returned 1 [0283.371] CryptReleaseContext (hProv=0x213350, dwFlags=0x0) returned 1 [0283.371] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0283.371] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x254980 [0283.371] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x232ef0 [0283.371] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=44073989751) returned 1 [0283.751] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0283.751] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=44112001171) returned 1 [0283.751] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0283.752] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238c58 [0283.752] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x24fd60 [0283.752] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x232dd8 [0283.752] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x2aba48 [0283.752] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210210 [0283.752] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206688 [0283.752] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210240 [0283.753] GetLastError () returned 0x0 [0283.753] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae4f8 [0283.753] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad410 [0283.753] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae4f8 | out: hHeap=0x1f0000) returned 1 [0283.754] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x106) returned 0x232cc0 [0283.754] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad410 | out: hHeap=0x1f0000) returned 1 [0283.754] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388e0 [0283.754] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388a0 [0283.756] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\SysReqMet.ico.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqmet.ico.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e230, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0283.757] GetFileType (hFile=0x1c0) returned 0x1 [0283.757] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388f0 [0283.758] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238890 [0283.759] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\SysReqMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqmet.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0283.760] GetFileType (hFile=0x1e0) returned 0x1 [0283.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204df0 [0283.761] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f50 [0283.761] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad638 [0283.761] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388d0 [0283.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238820 [0283.763] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\SysReqMet.ico.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqmet.ico.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0283.763] GetFileType (hFile=0x198) returned 0x1 [0283.764] GetLastError () returned 0xb7 [0283.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe4) returned 0x21af88 [0283.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f70 [0283.765] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0283.765] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d90 [0283.765] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ade20 [0283.765] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238830 [0283.766] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388c0 [0283.767] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\SysReqMet.ico.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqmet.ico.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0283.767] GetFileType (hFile=0x21c) returned 0x1 [0283.768] GetLastError () returned 0xb7 [0283.768] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bb0 [0283.768] GetLastError () returned 0xb7 [0283.768] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ef0 [0283.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f10 [0283.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d30 [0283.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb8) returned 0x2376e0 [0283.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238840 [0283.770] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238850 [0283.771] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\SysReqMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqmet.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1a4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0283.771] GetFileType (hFile=0x1ac) returned 0x1 [0283.772] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28cfc8 [0283.772] ReadFile (in: hFile=0x1ac, lpBuffer=0x28cfc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e100, lpOverlapped=0x0 | out: lpBuffer=0x28cfc8*, lpNumberOfBytesRead=0x173e100*=0x47e, lpOverlapped=0x0) returned 1 [0283.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24b5e0 [0283.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28dfd0 [0283.776] GetLastError () returned 0x0 [0283.776] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0283.776] GetLastError () returned 0x0 [0283.779] CloseHandle (hObject=0x1c0) returned 1 [0283.779] CloseHandle (hObject=0x1e0) returned 1 [0283.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238810 [0283.781] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388b0 [0283.782] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\SysReqMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqmet.ico"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0283.783] GetFileType (hFile=0x1e0) returned 0x1 [0283.784] GetLastError () returned 0xb7 [0283.784] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x286f98 [0283.785] GetLastError () returned 0xb7 [0283.786] CloseHandle (hObject=0x1e0) returned 1 [0283.787] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\SysReqMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqmet.ico")) returned 0 [0283.787] GetLastError () returned 0x20 [0283.787] GetLastError () returned 0x20 [0283.787] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228440 [0283.787] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238078 [0283.787] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238398 [0283.787] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x228c68 [0283.788] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c70 [0283.788] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c90 [0283.788] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x238870 [0283.788] GetLastError () returned 0x20 [0283.788] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239160 [0283.788] GetLastError () returned 0x20 [0283.788] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238d00 [0283.788] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2364d0 [0283.788] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238000 [0283.788] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x284f90 [0283.789] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238990 [0283.789] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0283.789] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210258 [0283.789] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238920 [0283.789] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0283.789] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210198 [0283.789] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238190 [0283.789] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285098 [0283.789] GetLastError () returned 0x20 [0283.790] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238960 [0283.790] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238900 [0283.790] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238910 [0283.790] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238900 | out: hHeap=0x1f0000) returned 1 [0283.790] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238940 [0283.790] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238910 | out: hHeap=0x1f0000) returned 1 [0283.790] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238960 | out: hHeap=0x1f0000) returned 1 [0283.791] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238860 [0283.791] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101b0 [0283.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238860 | out: hHeap=0x1f0000) returned 1 [0283.791] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101e0 [0283.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0283.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238940 | out: hHeap=0x1f0000) returned 1 [0283.791] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101b0 [0283.791] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210018 [0283.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0283.791] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101b0 [0283.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210018 | out: hHeap=0x1f0000) returned 1 [0283.792] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0283.792] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0283.792] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204cd0 [0283.792] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0283.792] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204df0 [0283.792] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cd0 | out: hHeap=0x1f0000) returned 1 [0283.792] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0283.792] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f50 [0283.793] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2381b8 [0283.793] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f50 | out: hHeap=0x1f0000) returned 1 [0283.793] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204cf0 [0283.793] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0284.163] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204df0 | out: hHeap=0x1f0000) returned 1 [0284.164] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204d70 [0284.164] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x2068c8 [0284.164] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d70 | out: hHeap=0x1f0000) returned 1 [0284.164] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238140 [0284.164] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2068c8 | out: hHeap=0x1f0000) returned 1 [0284.164] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cf0 | out: hHeap=0x1f0000) returned 1 [0284.164] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238860 [0284.164] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101e0 [0284.164] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238860 | out: hHeap=0x1f0000) returned 1 [0284.164] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101b0 [0284.165] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0284.165] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204f30 [0284.165] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0284.165] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206658 [0284.165] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f30 | out: hHeap=0x1f0000) returned 1 [0284.165] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206658 | out: hHeap=0x1f0000) returned 1 [0284.165] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0284.165] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0284.165] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0284.165] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x284f90 | out: hHeap=0x1f0000) returned 1 [0284.165] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0284.165] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238f68 [0284.166] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0284.166] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x213020) returned 1 [0284.167] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238000 | out: pbBuffer=0x238000) returned 1 [0284.167] CryptReleaseContext (hProv=0x213020, dwFlags=0x0) returned 1 [0284.167] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0284.167] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238000 [0284.167] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381b8 [0284.167] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239010 [0284.167] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0284.167] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0284.167] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239010 | out: hHeap=0x1f0000) returned 1 [0284.167] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8d18 [0284.167] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101b0 [0284.168] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x236538 [0284.168] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238000 [0284.168] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2856c8 [0284.168] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0284.168] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2365a0 [0284.168] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238140 [0284.168] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2858d8 [0284.168] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238900 [0284.169] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0284.169] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0284.169] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238860 [0284.169] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0284.169] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210120 [0284.169] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210120 | out: hHeap=0x1f0000) returned 1 [0284.169] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0284.169] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238860 | out: hHeap=0x1f0000) returned 1 [0284.169] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0284.169] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0284.169] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238900 | out: hHeap=0x1f0000) returned 1 [0284.169] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2858d8 | out: hHeap=0x1f0000) returned 1 [0284.169] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0284.170] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2365a0 | out: hHeap=0x1f0000) returned 1 [0284.170] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239278 [0284.170] GetLastError () returned 0x0 [0284.170] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239160 [0284.170] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0284.171] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0284.171] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0284.171] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0284.171] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0284.171] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0284.171] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x24e680 [0284.171] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2851a0 [0284.171] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0284.172] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0284.172] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0284.172] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0284.172] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285ae8 [0284.172] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0284.172] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0284.172] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x230190 [0284.172] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x258298 [0284.172] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2339e0 [0284.172] QueryPerformanceCounter (in: lpPerformanceCount=0x173dee0 | out: lpPerformanceCount=0x173dee0*=44154140360) returned 1 [0284.173] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173df20 | out: lpSystemTimeAsFileTime=0x173df20) [0284.173] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x2387e0 [0284.173] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0284.173] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c90 [0284.173] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c90 | out: hHeap=0x1f0000) returned 1 [0284.173] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0284.173] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0284.173] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d10 [0284.173] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d10 | out: hHeap=0x1f0000) returned 1 [0284.174] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0284.174] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387e0 | out: hHeap=0x1f0000) returned 1 [0284.174] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0284.174] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238da8 [0284.174] GetLastError () returned 0x0 [0284.174] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0284.174] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0284.175] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0284.175] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238280 [0284.175] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238078 [0284.175] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0284.175] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0284.175] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238140 [0284.175] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0284.176] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x222ee8 [0284.176] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0284.176] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0284.176] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0284.176] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0284.176] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0284.176] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381e0 [0284.177] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2386e0 [0284.177] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0284.177] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0284.177] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2386e0 | out: hHeap=0x1f0000) returned 1 [0284.177] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0284.177] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x234b90 [0284.177] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b90 | out: hHeap=0x1f0000) returned 1 [0284.177] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0284.178] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0284.178] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101e0 [0284.178] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228bd8 [0284.178] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2384d8 [0284.178] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2385f0 [0284.178] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2385a0 [0284.178] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2385c8 [0284.178] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385f0 | out: hHeap=0x1f0000) returned 1 [0284.179] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384d8 | out: hHeap=0x1f0000) returned 1 [0284.179] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0284.179] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2385f0 [0284.179] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238640 [0284.179] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385f0 | out: hHeap=0x1f0000) returned 1 [0284.179] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0284.179] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238640 | out: hHeap=0x1f0000) returned 1 [0284.180] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2066b8 [0284.180] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x2b3100 [0284.180] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b3100 | out: hHeap=0x1f0000) returned 1 [0284.180] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2066b8 | out: hHeap=0x1f0000) returned 1 [0284.180] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0284.180] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0284.180] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0284.180] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0284.181] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204c90 [0284.181] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0284.181] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0284.181] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0284.181] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a9c68 [0284.181] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0284.181] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385c8 | out: hHeap=0x1f0000) returned 1 [0284.182] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385a0 | out: hHeap=0x1f0000) returned 1 [0284.182] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228bd8 | out: hHeap=0x1f0000) returned 1 [0284.182] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0284.182] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c90 | out: hHeap=0x1f0000) returned 1 [0284.182] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0284.182] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0284.182] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aac98 [0284.182] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aac98 | out: hHeap=0x1f0000) returned 1 [0284.183] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ee8 | out: hHeap=0x1f0000) returned 1 [0284.183] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0284.183] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0284.183] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0284.183] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0284.183] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0284.183] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0284.184] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0284.184] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aaa48 [0284.184] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aa7f8 [0284.185] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aaa48 | out: hHeap=0x1f0000) returned 1 [0284.185] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aa7f8 | out: hHeap=0x1f0000) returned 1 [0284.185] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a9c68 | out: hHeap=0x1f0000) returned 1 [0284.185] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0284.185] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285ae8 | out: hHeap=0x1f0000) returned 1 [0284.185] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24e680 | out: hHeap=0x1f0000) returned 1 [0284.185] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x233580 [0284.185] GetLastError () returned 0x0 [0284.186] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238930 [0284.186] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238900 [0284.187] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\SysReqMet.ico.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqmet.ico.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e290, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0284.188] GetFileType (hFile=0x174) returned 0x1 [0284.188] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x286f98 [0284.189] SetFilePointerEx (in: hFile=0x174, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e218 | out: lpNewFilePointer=0x0) returned 1 [0284.189] GetLastError () returned 0xb7 [0284.189] CloseHandle (hObject=0x174) returned 1 [0284.190] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238900 | out: hHeap=0x1f0000) returned 1 [0284.190] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238930 | out: hHeap=0x1f0000) returned 1 [0284.190] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2851a0 | out: hHeap=0x1f0000) returned 1 [0284.190] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2856c8 | out: hHeap=0x1f0000) returned 1 [0284.191] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0284.191] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d70 | out: hHeap=0x1f0000) returned 1 [0284.191] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236538 | out: hHeap=0x1f0000) returned 1 [0284.191] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0284.191] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0284.191] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233580 | out: hHeap=0x1f0000) returned 1 [0284.191] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0284.191] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0284.192] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x258298 | out: hHeap=0x1f0000) returned 1 [0284.192] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2339e0 | out: hHeap=0x1f0000) returned 1 [0284.192] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238f68 | out: hHeap=0x1f0000) returned 1 [0284.192] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238870 | out: hHeap=0x1f0000) returned 1 [0284.192] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0284.192] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0284.192] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238920 | out: hHeap=0x1f0000) returned 1 [0284.193] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0284.193] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0284.193] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238990 | out: hHeap=0x1f0000) returned 1 [0284.193] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285098 | out: hHeap=0x1f0000) returned 1 [0284.193] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0284.193] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2364d0 | out: hHeap=0x1f0000) returned 1 [0284.193] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228c68 | out: hHeap=0x1f0000) returned 1 [0284.194] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0284.194] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0284.194] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228440 | out: hHeap=0x1f0000) returned 1 [0284.194] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388b0 | out: hHeap=0x1f0000) returned 1 [0284.194] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238810 | out: hHeap=0x1f0000) returned 1 [0284.194] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28cfc8 | out: hHeap=0x1f0000) returned 1 [0284.195] CloseHandle (hObject=0x1ac) returned 1 [0284.195] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238850 | out: hHeap=0x1f0000) returned 1 [0284.196] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238840 | out: hHeap=0x1f0000) returned 1 [0284.196] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2376e0 | out: hHeap=0x1f0000) returned 1 [0284.196] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24b5e0 | out: hHeap=0x1f0000) returned 1 [0284.196] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0284.196] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ef0 | out: hHeap=0x1f0000) returned 1 [0284.196] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28dfd0 | out: hHeap=0x1f0000) returned 1 [0284.197] CloseHandle (hObject=0x21c) returned 1 [0284.197] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388c0 | out: hHeap=0x1f0000) returned 1 [0284.197] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238830 | out: hHeap=0x1f0000) returned 1 [0284.197] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ade20 | out: hHeap=0x1f0000) returned 1 [0284.197] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f70 | out: hHeap=0x1f0000) returned 1 [0284.198] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21af88 | out: hHeap=0x1f0000) returned 1 [0284.198] CloseHandle (hObject=0x198) returned 1 [0284.640] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238820 | out: hHeap=0x1f0000) returned 1 [0284.640] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388d0 | out: hHeap=0x1f0000) returned 1 [0284.640] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad638 | out: hHeap=0x1f0000) returned 1 [0284.640] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238890 | out: hHeap=0x1f0000) returned 1 [0284.640] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388f0 | out: hHeap=0x1f0000) returned 1 [0284.640] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388a0 | out: hHeap=0x1f0000) returned 1 [0284.640] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388e0 | out: hHeap=0x1f0000) returned 1 [0284.640] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232cc0 | out: hHeap=0x1f0000) returned 1 [0284.641] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24fd60 | out: hHeap=0x1f0000) returned 1 [0284.641] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232dd8 | out: hHeap=0x1f0000) returned 1 [0284.641] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206688 | out: hHeap=0x1f0000) returned 1 [0284.641] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210240 | out: hHeap=0x1f0000) returned 1 [0284.641] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0284.641] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aba48 | out: hHeap=0x1f0000) returned 1 [0284.641] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x254980 | out: hHeap=0x1f0000) returned 1 [0284.641] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232ef0 | out: hHeap=0x1f0000) returned 1 [0284.641] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239208 | out: hHeap=0x1f0000) returned 1 [0284.641] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0284.641] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ee88 | out: hHeap=0x1f0000) returned 1 [0284.641] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228680 | out: hHeap=0x1f0000) returned 1 [0284.642] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0284.642] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\SysReqMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqmet.ico")) returned 1 [0284.643] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SysReqNotMet.ico", cAlternateFileName="SYSREQ~2.ICO")) returned 1 [0284.643] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238d38 [0284.643] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8dc8 [0284.643] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x2176d0 [0284.643] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8dc8 | out: hHeap=0x1f0000) returned 1 [0284.643] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2183d0 | out: hHeap=0x1f0000) returned 1 [0284.643] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238d38 | out: hHeap=0x1f0000) returned 1 [0284.644] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqnotmet.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0284.644] GetFileType (hFile=0x198) returned 0x1 [0284.645] CloseHandle (hObject=0x198) returned 1 [0284.645] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae1b0 [0284.645] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqnotmet.ico"), fInfoLevelId=0x0, lpFileInformation=0x173eb6c | out: lpFileInformation=0x173eb6c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e)) returned 1 [0284.645] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae1b0 | out: hHeap=0x1f0000) returned 1 [0284.646] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2aeb10 [0284.646] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqnotmet.ico"), fInfoLevelId=0x0, lpFileInformation=0x173eb7c | out: lpFileInformation=0x173eb7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e)) returned 1 [0284.646] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aeb10 | out: hHeap=0x1f0000) returned 1 [0284.646] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae048 [0284.646] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae048 | out: hHeap=0x1f0000) returned 1 [0284.646] GetLastError () returned 0x0 [0284.647] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0284.647] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228bd8 [0284.647] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d9d0 [0284.647] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae4f8 [0284.647] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2390b8 [0284.647] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0284.647] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x212ad0) returned 1 [0284.648] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2384b0 | out: pbBuffer=0x2384b0) returned 1 [0284.648] CryptReleaseContext (hProv=0x212ad0, dwFlags=0x0) returned 1 [0284.648] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0284.648] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x255c88 [0284.649] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x232cc0 [0284.649] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=44201758474) returned 1 [0284.649] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0284.649] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=44201794427) returned 1 [0284.649] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0284.649] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238f30 [0284.649] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x252370 [0284.649] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x232ef0 [0284.649] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x2ab088 [0284.650] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210210 [0284.650] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2067d8 [0284.650] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210240 [0284.650] GetLastError () returned 0x0 [0284.650] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0284.650] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0284.651] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0284.651] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x11c) returned 0x210a80 [0284.651] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0284.651] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238910 [0284.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389c0 [0284.652] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqnotmet.ico.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e230, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0284.653] GetFileType (hFile=0x198) returned 0x1 [0284.653] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388d0 [0284.654] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238820 [0284.655] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqnotmet.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0284.655] GetFileType (hFile=0x21c) returned 0x1 [0284.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204b90 [0284.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f70 [0284.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad638 [0284.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388e0 [0284.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387e0 [0284.657] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqnotmet.ico.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0284.657] GetFileType (hFile=0x1ac) returned 0x1 [0284.657] GetLastError () returned 0xb7 [0284.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe4) returned 0x21b618 [0284.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bb0 [0284.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bd0 [0284.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ef0 [0284.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2add68 [0284.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388b0 [0284.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238920 [0284.660] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqnotmet.ico.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0284.660] GetFileType (hFile=0x174) returned 0x1 [0284.660] GetLastError () returned 0xb7 [0284.661] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c70 [0284.661] GetLastError () returned 0xb7 [0284.661] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c70 [0284.661] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0284.661] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d30 [0284.661] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb8) returned 0x237620 [0284.662] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238870 [0284.662] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238810 [0284.663] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqnotmet.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1a4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0284.663] GetFileType (hFile=0x1e0) returned 0x1 [0284.664] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28cfc8 [0284.664] ReadFile (in: hFile=0x1e0, lpBuffer=0x28cfc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e100, lpOverlapped=0x0 | out: lpBuffer=0x28cfc8*, lpNumberOfBytesRead=0x173e100*=0x47e, lpOverlapped=0x0) returned 1 [0284.934] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24d218 [0284.935] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28dfd0 [0284.935] GetLastError () returned 0x0 [0284.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210198 [0284.936] GetLastError () returned 0x0 [0284.938] CloseHandle (hObject=0x198) returned 1 [0284.939] CloseHandle (hObject=0x21c) returned 1 [0284.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238830 [0284.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238940 [0284.941] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqnotmet.ico"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0284.942] GetFileType (hFile=0x21c) returned 0x1 [0284.943] GetLastError () returned 0xb7 [0284.944] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x286f98 [0284.944] GetLastError () returned 0xb7 [0284.945] CloseHandle (hObject=0x21c) returned 1 [0284.946] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqnotmet.ico")) returned 0 [0284.946] GetLastError () returned 0x20 [0284.946] GetLastError () returned 0x20 [0284.947] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228758 [0284.947] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2384b0 [0284.947] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2380a0 [0284.947] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x228680 [0284.947] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ef0 [0284.947] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bd0 [0284.947] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x238990 [0284.948] GetLastError () returned 0x20 [0284.948] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239208 [0284.949] GetLastError () returned 0x20 [0284.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239048 [0284.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236608 [0284.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238000 [0284.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285098 [0284.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238840 [0284.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0284.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210258 [0284.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388a0 [0284.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0284.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101b0 [0284.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238140 [0284.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285e00 [0284.951] GetLastError () returned 0x20 [0284.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x2388c0 [0284.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238850 [0284.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388f0 [0284.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238850 | out: hHeap=0x1f0000) returned 1 [0284.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389b0 [0284.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388f0 | out: hHeap=0x1f0000) returned 1 [0284.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388c0 | out: hHeap=0x1f0000) returned 1 [0284.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387f0 [0284.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101c8 [0284.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387f0 | out: hHeap=0x1f0000) returned 1 [0284.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101e0 [0284.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0284.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389b0 | out: hHeap=0x1f0000) returned 1 [0284.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101c8 [0284.953] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210078 [0284.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0284.953] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0284.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210078 | out: hHeap=0x1f0000) returned 1 [0284.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0284.953] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0284.953] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204e50 [0284.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0284.953] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bd0 [0284.954] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e50 | out: hHeap=0x1f0000) returned 1 [0284.954] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0284.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c10 [0284.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238168 [0284.954] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c10 | out: hHeap=0x1f0000) returned 1 [0284.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204e90 [0284.954] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0284.954] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bd0 | out: hHeap=0x1f0000) returned 1 [0284.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204f30 [0284.955] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206658 [0284.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f30 | out: hHeap=0x1f0000) returned 1 [0284.955] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238280 [0284.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206658 | out: hHeap=0x1f0000) returned 1 [0284.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e90 | out: hHeap=0x1f0000) returned 1 [0284.955] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388f0 [0284.955] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101c8 [0284.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388f0 | out: hHeap=0x1f0000) returned 1 [0284.955] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0284.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0284.956] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204ef0 [0284.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0284.956] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206868 [0284.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ef0 | out: hHeap=0x1f0000) returned 1 [0284.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206868 | out: hHeap=0x1f0000) returned 1 [0284.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0284.957] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0284.957] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0284.957] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285098 | out: hHeap=0x1f0000) returned 1 [0284.957] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0284.957] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238f30 [0284.957] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0284.957] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x213460) returned 1 [0284.959] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238168 | out: pbBuffer=0x238168) returned 1 [0284.959] CryptReleaseContext (hProv=0x213460, dwFlags=0x0) returned 1 [0284.959] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0284.959] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238168 [0284.959] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238000 [0284.959] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238f68 [0284.959] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0284.959] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0284.960] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238f68 | out: hHeap=0x1f0000) returned 1 [0284.960] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8d18 [0284.960] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0284.960] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x236468 [0284.960] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238280 [0284.960] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285cf8 [0284.960] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f50 [0284.960] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236538 [0284.960] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238168 [0284.960] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285ae8 [0284.961] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387f0 [0284.961] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0284.961] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0284.961] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389b0 [0284.961] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0284.961] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20fef8 [0284.961] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20fef8 | out: hHeap=0x1f0000) returned 1 [0284.961] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0284.961] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389b0 | out: hHeap=0x1f0000) returned 1 [0284.962] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0284.962] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0284.962] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387f0 | out: hHeap=0x1f0000) returned 1 [0284.962] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285ae8 | out: hHeap=0x1f0000) returned 1 [0284.962] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0284.962] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236538 | out: hHeap=0x1f0000) returned 1 [0284.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238c90 [0284.962] GetLastError () returned 0x0 [0284.963] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238f68 [0284.963] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0284.963] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0284.963] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0284.963] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0284.963] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0284.963] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0284.964] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x24ec00 [0284.964] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285bf0 [0284.964] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0284.964] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0284.964] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0284.965] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0284.965] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285098 [0284.965] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0284.965] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0284.965] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fa88 [0284.965] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x254980 [0284.965] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x233008 [0284.965] QueryPerformanceCounter (in: lpPerformanceCount=0x173dee0 | out: lpPerformanceCount=0x173dee0*=44233433662) returned 1 [0284.966] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173df20 | out: lpSystemTimeAsFileTime=0x173df20) [0284.966] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238930 [0284.966] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0284.966] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204db0 [0284.966] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204db0 | out: hHeap=0x1f0000) returned 1 [0284.966] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0284.966] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0284.966] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ef0 [0284.967] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ef0 | out: hHeap=0x1f0000) returned 1 [0284.967] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0284.967] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238930 | out: hHeap=0x1f0000) returned 1 [0284.967] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0284.967] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238cc8 [0284.967] GetLastError () returned 0x0 [0284.967] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0284.968] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0284.968] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0284.968] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2384b0 [0284.968] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238168 [0284.968] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0284.968] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0284.968] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238190 [0284.968] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0284.968] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x222ee8 [0284.968] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0284.968] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0284.968] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0284.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0284.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0284.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381b8 [0284.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238578 [0284.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0284.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0284.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238578 | out: hHeap=0x1f0000) returned 1 [0284.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0284.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x234b90 [0284.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b90 | out: hHeap=0x1f0000) returned 1 [0284.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0284.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0284.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101e0 [0284.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228b00 [0284.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238758 [0284.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238528 [0284.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2385c8 [0284.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238708 [0284.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238528 | out: hHeap=0x1f0000) returned 1 [0284.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238758 | out: hHeap=0x1f0000) returned 1 [0284.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0284.971] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238578 [0284.971] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238618 [0284.971] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238578 | out: hHeap=0x1f0000) returned 1 [0284.971] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0284.971] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238618 | out: hHeap=0x1f0000) returned 1 [0284.971] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206838 [0284.971] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x2b4668 [0284.971] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b4668 | out: hHeap=0x1f0000) returned 1 [0284.971] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206838 | out: hHeap=0x1f0000) returned 1 [0284.971] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0284.971] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0284.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0284.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0284.972] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204dd0 [0284.972] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0284.972] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a9450 [0284.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0284.972] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aab70 [0284.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a9450 | out: hHeap=0x1f0000) returned 1 [0284.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238708 | out: hHeap=0x1f0000) returned 1 [0284.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385c8 | out: hHeap=0x1f0000) returned 1 [0284.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228b00 | out: hHeap=0x1f0000) returned 1 [0284.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0284.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204dd0 | out: hHeap=0x1f0000) returned 1 [0284.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0284.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0284.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a9c68 [0284.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a9c68 | out: hHeap=0x1f0000) returned 1 [0284.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ee8 | out: hHeap=0x1f0000) returned 1 [0284.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0284.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0284.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0284.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0284.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0284.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0284.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0284.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a9328 [0284.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a8fb0 [0284.974] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a9328 | out: hHeap=0x1f0000) returned 1 [0284.974] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8fb0 | out: hHeap=0x1f0000) returned 1 [0284.974] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aab70 | out: hHeap=0x1f0000) returned 1 [0284.974] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0284.974] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285098 | out: hHeap=0x1f0000) returned 1 [0284.974] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24ec00 | out: hHeap=0x1f0000) returned 1 [0284.974] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x233580 [0284.974] GetLastError () returned 0x0 [0284.974] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389b0 [0284.975] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238850 [0284.975] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqnotmet.ico.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e290, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0284.975] GetFileType (hFile=0x21c) returned 0x1 [0284.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x286f98 [0284.976] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e218 | out: lpNewFilePointer=0x0) returned 1 [0284.976] GetLastError () returned 0xb7 [0284.976] CloseHandle (hObject=0x21c) returned 1 [0284.977] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238850 | out: hHeap=0x1f0000) returned 1 [0284.977] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389b0 | out: hHeap=0x1f0000) returned 1 [0284.977] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285bf0 | out: hHeap=0x1f0000) returned 1 [0284.977] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285cf8 | out: hHeap=0x1f0000) returned 1 [0284.977] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0284.977] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f50 | out: hHeap=0x1f0000) returned 1 [0284.977] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0284.977] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0284.977] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0284.977] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233580 | out: hHeap=0x1f0000) returned 1 [0284.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0284.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0284.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x254980 | out: hHeap=0x1f0000) returned 1 [0284.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233008 | out: hHeap=0x1f0000) returned 1 [0284.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238f30 | out: hHeap=0x1f0000) returned 1 [0284.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238990 | out: hHeap=0x1f0000) returned 1 [0284.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0284.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0284.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388a0 | out: hHeap=0x1f0000) returned 1 [0284.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0284.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0284.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238840 | out: hHeap=0x1f0000) returned 1 [0284.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285e00 | out: hHeap=0x1f0000) returned 1 [0284.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0284.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236608 | out: hHeap=0x1f0000) returned 1 [0284.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228680 | out: hHeap=0x1f0000) returned 1 [0284.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0284.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0284.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228758 | out: hHeap=0x1f0000) returned 1 [0284.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238940 | out: hHeap=0x1f0000) returned 1 [0284.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238830 | out: hHeap=0x1f0000) returned 1 [0285.355] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28cfc8 | out: hHeap=0x1f0000) returned 1 [0285.355] CloseHandle (hObject=0x1e0) returned 1 [0285.356] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238810 | out: hHeap=0x1f0000) returned 1 [0285.356] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238870 | out: hHeap=0x1f0000) returned 1 [0285.356] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237620 | out: hHeap=0x1f0000) returned 1 [0285.356] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24d218 | out: hHeap=0x1f0000) returned 1 [0285.356] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0285.356] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c70 | out: hHeap=0x1f0000) returned 1 [0285.356] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28dfd0 | out: hHeap=0x1f0000) returned 1 [0285.356] CloseHandle (hObject=0x174) returned 1 [0285.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238920 | out: hHeap=0x1f0000) returned 1 [0285.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388b0 | out: hHeap=0x1f0000) returned 1 [0285.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2add68 | out: hHeap=0x1f0000) returned 1 [0285.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bb0 | out: hHeap=0x1f0000) returned 1 [0285.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21b618 | out: hHeap=0x1f0000) returned 1 [0285.357] CloseHandle (hObject=0x1ac) returned 1 [0285.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387e0 | out: hHeap=0x1f0000) returned 1 [0285.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388e0 | out: hHeap=0x1f0000) returned 1 [0285.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad638 | out: hHeap=0x1f0000) returned 1 [0285.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238820 | out: hHeap=0x1f0000) returned 1 [0285.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388d0 | out: hHeap=0x1f0000) returned 1 [0285.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389c0 | out: hHeap=0x1f0000) returned 1 [0285.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238910 | out: hHeap=0x1f0000) returned 1 [0285.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0285.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x252370 | out: hHeap=0x1f0000) returned 1 [0285.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232ef0 | out: hHeap=0x1f0000) returned 1 [0285.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2067d8 | out: hHeap=0x1f0000) returned 1 [0285.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210240 | out: hHeap=0x1f0000) returned 1 [0285.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0285.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab088 | out: hHeap=0x1f0000) returned 1 [0285.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x255c88 | out: hHeap=0x1f0000) returned 1 [0285.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232cc0 | out: hHeap=0x1f0000) returned 1 [0285.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2390b8 | out: hHeap=0x1f0000) returned 1 [0285.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae4f8 | out: hHeap=0x1f0000) returned 1 [0285.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d9d0 | out: hHeap=0x1f0000) returned 1 [0285.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228bd8 | out: hHeap=0x1f0000) returned 1 [0285.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0285.359] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqnotmet.ico")) returned 1 [0285.361] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0x0, cFileName="warn.ico", cAlternateFileName="")) returned 1 [0285.361] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0285.361] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8d18 [0285.361] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x218150 [0285.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0285.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2176d0 | out: hHeap=0x1f0000) returned 1 [0285.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0285.362] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\warn.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\warn.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0285.362] GetFileType (hFile=0x1ac) returned 0x1 [0285.362] CloseHandle (hObject=0x1ac) returned 1 [0285.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236538 [0285.363] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\warn.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\warn.ico"), fInfoLevelId=0x0, lpFileInformation=0x173eb6c | out: lpFileInformation=0x173eb6c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x2796)) returned 1 [0285.363] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236538 | out: hHeap=0x1f0000) returned 1 [0285.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236468 [0285.363] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\warn.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\warn.ico"), fInfoLevelId=0x0, lpFileInformation=0x173eb7c | out: lpFileInformation=0x173eb7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x2796)) returned 1 [0285.363] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0285.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2364d0 [0285.363] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2364d0 | out: hHeap=0x1f0000) returned 1 [0285.363] GetLastError () returned 0x0 [0285.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0285.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228b00 [0285.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d508 [0285.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236468 [0285.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c58 [0285.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0285.364] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x212b58) returned 1 [0285.365] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238190 | out: pbBuffer=0x238190) returned 1 [0285.365] CryptReleaseContext (hProv=0x212b58, dwFlags=0x0) returned 1 [0285.365] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0285.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x252370 [0285.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x233238 [0285.365] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=44273430368) returned 1 [0285.366] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0285.366] QueryPerformanceCounter (in: lpPerformanceCount=0x173e324 | out: lpPerformanceCount=0x173e324*=44273458628) returned 1 [0285.366] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e364 | out: lpSystemTimeAsFileTime=0x173e364) [0285.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239010 [0285.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x258298 [0285.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x233120 [0285.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x2ab708 [0285.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101b0 [0285.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206808 [0285.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210198 [0285.366] GetLastError () returned 0x0 [0285.367] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2aee58 [0285.367] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218fa8 [0285.367] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aee58 | out: hHeap=0x1f0000) returned 1 [0285.367] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf8) returned 0x217038 [0285.367] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218fa8 | out: hHeap=0x1f0000) returned 1 [0285.367] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388d0 [0285.367] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389c0 [0285.368] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\warn.ico.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\graphics\\warn.ico.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e230, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0285.368] GetFileType (hFile=0x1ac) returned 0x1 [0285.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238820 [0285.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388c0 [0285.369] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\warn.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\warn.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0285.370] GetFileType (hFile=0x174) returned 0x1 [0285.388] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bb0 [0285.388] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ef0 [0285.388] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2add68 [0285.388] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388b0 [0285.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238920 [0285.389] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\warn.ico.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\graphics\\warn.ico.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0285.389] GetFileType (hFile=0x1e0) returned 0x1 [0285.390] GetLastError () returned 0xb7 [0285.390] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe4) returned 0x21b168 [0285.390] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c70 [0285.390] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c90 [0285.390] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0285.391] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad638 [0285.391] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238910 [0285.391] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238870 [0285.391] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\warn.ico.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\graphics\\warn.ico.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1ac, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0285.392] GetFileType (hFile=0x21c) returned 0x1 [0285.392] GetLastError () returned 0xb7 [0285.392] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bf0 [0285.392] GetLastError () returned 0xb7 [0285.393] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d10 [0285.393] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e30 [0285.393] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f10 [0285.393] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb8) returned 0x237620 [0285.393] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387e0 [0285.393] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238810 [0285.394] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\warn.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\warn.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e1a4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0285.394] GetFileType (hFile=0x198) returned 0x1 [0285.395] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28dfd0 [0285.395] ReadFile (in: hFile=0x198, lpBuffer=0x28dfd0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e100, lpOverlapped=0x0 | out: lpBuffer=0x28dfd0*, lpNumberOfBytesRead=0x173e100*=0x1000, lpOverlapped=0x0) returned 1 [0285.400] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24a9c8 [0285.400] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28cfc8 [0285.400] GetLastError () returned 0x0 [0285.404] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210210 [0285.404] GetLastError () returned 0x0 [0285.404] CloseHandle (hObject=0x1ac) returned 1 [0285.405] CloseHandle (hObject=0x174) returned 1 [0285.406] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238970 [0285.406] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238830 [0285.407] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\warn.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\warn.ico"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e260, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0285.408] GetFileType (hFile=0x174) returned 0x1 [0285.409] GetLastError () returned 0xb7 [0285.409] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x286f98 [0285.410] GetLastError () returned 0xb7 [0285.411] CloseHandle (hObject=0x174) returned 1 [0285.412] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\warn.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\warn.ico")) returned 0 [0285.412] GetLastError () returned 0x20 [0285.412] GetLastError () returned 0x20 [0285.412] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228bd8 [0285.413] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2384b0 [0285.413] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238398 [0285.413] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x228c68 [0285.413] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204b90 [0285.413] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bf0 [0285.413] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x238840 [0285.413] GetLastError () returned 0x20 [0285.413] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x2392b0 [0285.413] GetLastError () returned 0x20 [0285.414] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239160 [0285.414] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2365a0 [0285.414] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238000 [0285.414] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2859e0 [0285.414] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238850 [0285.414] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0285.414] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210240 [0285.414] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238860 [0285.414] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0285.414] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0285.415] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2380a0 [0285.415] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2854b8 [0285.415] GetLastError () returned 0x20 [0285.415] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238930 [0285.415] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x2387f0 [0285.415] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238900 [0285.415] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387f0 | out: hHeap=0x1f0000) returned 1 [0285.415] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238890 [0285.416] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238900 | out: hHeap=0x1f0000) returned 1 [0285.416] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238930 | out: hHeap=0x1f0000) returned 1 [0285.416] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388e0 [0285.416] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101e0 [0285.416] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388e0 | out: hHeap=0x1f0000) returned 1 [0285.416] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210258 [0285.416] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0285.416] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238890 | out: hHeap=0x1f0000) returned 1 [0285.416] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101e0 [0285.855] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20fef8 [0285.855] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0285.855] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0285.855] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20fef8 | out: hHeap=0x1f0000) returned 1 [0285.855] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0285.855] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210258 [0285.855] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204bb0 [0285.855] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0285.855] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d90 [0285.855] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bb0 | out: hHeap=0x1f0000) returned 1 [0285.855] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0285.855] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204db0 [0285.855] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238140 [0285.856] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204db0 | out: hHeap=0x1f0000) returned 1 [0285.856] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204e70 [0285.856] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0285.856] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d90 | out: hHeap=0x1f0000) returned 1 [0285.856] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204ef0 [0285.856] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206868 [0285.856] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ef0 | out: hHeap=0x1f0000) returned 1 [0285.856] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238140 [0285.856] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206868 | out: hHeap=0x1f0000) returned 1 [0285.856] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e70 | out: hHeap=0x1f0000) returned 1 [0285.856] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388e0 [0285.856] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210258 [0285.856] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388e0 | out: hHeap=0x1f0000) returned 1 [0285.856] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0285.856] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0285.857] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204d90 [0285.857] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0285.857] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206688 [0285.857] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d90 | out: hHeap=0x1f0000) returned 1 [0285.857] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206688 | out: hHeap=0x1f0000) returned 1 [0285.857] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0285.857] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0285.857] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0285.857] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2859e0 | out: hHeap=0x1f0000) returned 1 [0285.857] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0285.857] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c90 [0285.857] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0285.857] CryptAcquireContextA (in: phProv=0x173e390, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e390*=0x212ad0) returned 1 [0285.858] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2384b0 | out: pbBuffer=0x2384b0) returned 1 [0285.858] CryptReleaseContext (hProv=0x212ad0, dwFlags=0x0) returned 1 [0285.858] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0285.858] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2384b0 [0285.859] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381e0 [0285.859] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239208 [0285.859] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0285.859] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0285.859] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239208 | out: hHeap=0x1f0000) returned 1 [0285.859] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8e20 [0285.859] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0285.859] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x2364d0 [0285.859] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2384b0 [0285.859] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285ae8 [0285.859] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cb0 [0285.859] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236538 [0285.859] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238140 [0285.859] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285098 [0285.859] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238880 [0285.859] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0285.859] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210258 [0285.859] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238960 [0285.859] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0285.860] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210120 [0285.860] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210120 | out: hHeap=0x1f0000) returned 1 [0285.860] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0285.860] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238960 | out: hHeap=0x1f0000) returned 1 [0285.860] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0285.860] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0285.860] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238880 | out: hHeap=0x1f0000) returned 1 [0285.860] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285098 | out: hHeap=0x1f0000) returned 1 [0285.860] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0285.860] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236538 | out: hHeap=0x1f0000) returned 1 [0285.860] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239198 [0285.860] GetLastError () returned 0x0 [0285.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239278 [0285.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0285.861] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0285.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0285.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0285.861] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0285.861] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0285.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x24e900 [0285.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2855c0 [0285.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0285.861] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0285.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0285.861] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0285.862] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285e00 [0285.862] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0285.862] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0285.862] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fda8 [0285.862] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x24fd60 [0285.862] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x232cc0 [0285.862] QueryPerformanceCounter (in: lpPerformanceCount=0x173dee0 | out: lpPerformanceCount=0x173dee0*=44323084997) returned 1 [0285.862] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173df20 | out: lpSystemTimeAsFileTime=0x173df20) [0285.862] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238950 [0285.862] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0285.862] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c90 [0285.862] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c90 | out: hHeap=0x1f0000) returned 1 [0285.862] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0285.863] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0285.863] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cd0 [0285.863] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cd0 | out: hHeap=0x1f0000) returned 1 [0285.863] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0285.863] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238950 | out: hHeap=0x1f0000) returned 1 [0285.863] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0285.863] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x2390f0 [0285.863] GetLastError () returned 0x0 [0285.863] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0285.863] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0285.863] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0285.863] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238000 [0285.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238190 [0285.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0285.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0285.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238140 [0285.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0285.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x222ee8 [0285.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0285.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0285.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0285.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0285.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0285.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381b8 [0285.865] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2385c8 [0285.865] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0285.865] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0285.865] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385c8 | out: hHeap=0x1f0000) returned 1 [0285.865] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0285.865] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x234b90 [0285.865] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b90 | out: hHeap=0x1f0000) returned 1 [0285.865] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0285.865] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0285.865] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210258 [0285.865] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228cb0 [0285.865] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238708 [0285.865] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2385a0 [0285.865] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238758 [0285.866] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238550 [0285.866] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385a0 | out: hHeap=0x1f0000) returned 1 [0285.866] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238708 | out: hHeap=0x1f0000) returned 1 [0285.866] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0285.866] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2386b8 [0285.866] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238500 [0285.866] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2386b8 | out: hHeap=0x1f0000) returned 1 [0285.866] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0285.866] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238500 | out: hHeap=0x1f0000) returned 1 [0285.866] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2067d8 [0285.866] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x2b2428 [0285.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b2428 | out: hHeap=0x1f0000) returned 1 [0285.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2067d8 | out: hHeap=0x1f0000) returned 1 [0285.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0285.867] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0285.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0285.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0285.867] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204c10 [0285.867] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0285.867] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0285.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0285.867] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aadc0 [0285.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0285.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238550 | out: hHeap=0x1f0000) returned 1 [0285.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238758 | out: hHeap=0x1f0000) returned 1 [0285.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228cb0 | out: hHeap=0x1f0000) returned 1 [0285.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0285.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c10 | out: hHeap=0x1f0000) returned 1 [0285.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0285.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0285.868] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aaa48 [0285.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aaa48 | out: hHeap=0x1f0000) returned 1 [0285.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ee8 | out: hHeap=0x1f0000) returned 1 [0285.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0285.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0285.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0285.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0285.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0285.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0285.869] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0285.869] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a9450 [0285.869] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aa7f8 [0285.869] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a9450 | out: hHeap=0x1f0000) returned 1 [0285.869] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aa7f8 | out: hHeap=0x1f0000) returned 1 [0285.869] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aadc0 | out: hHeap=0x1f0000) returned 1 [0285.869] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0285.869] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285e00 | out: hHeap=0x1f0000) returned 1 [0285.869] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24e900 | out: hHeap=0x1f0000) returned 1 [0285.869] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x233698 [0285.869] GetLastError () returned 0x0 [0285.870] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389b0 [0285.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387f0 [0285.871] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\warn.ico.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\graphics\\warn.ico.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e290, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0285.872] GetFileType (hFile=0x1c0) returned 0x1 [0285.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x286f98 [0285.872] SetFilePointerEx (in: hFile=0x1c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e218 | out: lpNewFilePointer=0x0) returned 1 [0285.872] GetLastError () returned 0xb7 [0285.873] CloseHandle (hObject=0x1c0) returned 1 [0285.873] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387f0 | out: hHeap=0x1f0000) returned 1 [0285.873] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389b0 | out: hHeap=0x1f0000) returned 1 [0285.873] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2855c0 | out: hHeap=0x1f0000) returned 1 [0285.873] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285ae8 | out: hHeap=0x1f0000) returned 1 [0285.874] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0285.874] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cb0 | out: hHeap=0x1f0000) returned 1 [0285.874] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2364d0 | out: hHeap=0x1f0000) returned 1 [0285.874] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0285.874] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8e20 | out: hHeap=0x1f0000) returned 1 [0285.874] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233698 | out: hHeap=0x1f0000) returned 1 [0285.874] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0285.874] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0285.874] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24fd60 | out: hHeap=0x1f0000) returned 1 [0285.874] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232cc0 | out: hHeap=0x1f0000) returned 1 [0285.874] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c90 | out: hHeap=0x1f0000) returned 1 [0285.874] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238840 | out: hHeap=0x1f0000) returned 1 [0285.874] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0285.874] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0285.874] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238860 | out: hHeap=0x1f0000) returned 1 [0285.874] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210240 | out: hHeap=0x1f0000) returned 1 [0285.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0285.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238850 | out: hHeap=0x1f0000) returned 1 [0285.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2854b8 | out: hHeap=0x1f0000) returned 1 [0285.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0285.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2365a0 | out: hHeap=0x1f0000) returned 1 [0285.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228c68 | out: hHeap=0x1f0000) returned 1 [0285.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0285.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0285.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228bd8 | out: hHeap=0x1f0000) returned 1 [0285.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238830 | out: hHeap=0x1f0000) returned 1 [0285.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238970 | out: hHeap=0x1f0000) returned 1 [0285.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28dfd0 | out: hHeap=0x1f0000) returned 1 [0285.875] CloseHandle (hObject=0x198) returned 1 [0285.876] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238810 | out: hHeap=0x1f0000) returned 1 [0285.876] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387e0 | out: hHeap=0x1f0000) returned 1 [0285.876] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237620 | out: hHeap=0x1f0000) returned 1 [0285.876] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24a9c8 | out: hHeap=0x1f0000) returned 1 [0285.876] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0285.876] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d10 | out: hHeap=0x1f0000) returned 1 [0285.876] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28cfc8 | out: hHeap=0x1f0000) returned 1 [0285.876] CloseHandle (hObject=0x21c) returned 1 [0285.876] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238870 | out: hHeap=0x1f0000) returned 1 [0285.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238910 | out: hHeap=0x1f0000) returned 1 [0285.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad638 | out: hHeap=0x1f0000) returned 1 [0285.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c70 | out: hHeap=0x1f0000) returned 1 [0285.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21b168 | out: hHeap=0x1f0000) returned 1 [0285.877] CloseHandle (hObject=0x1e0) returned 1 [0285.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238920 | out: hHeap=0x1f0000) returned 1 [0285.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388b0 | out: hHeap=0x1f0000) returned 1 [0285.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2add68 | out: hHeap=0x1f0000) returned 1 [0285.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388c0 | out: hHeap=0x1f0000) returned 1 [0285.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238820 | out: hHeap=0x1f0000) returned 1 [0285.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389c0 | out: hHeap=0x1f0000) returned 1 [0285.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388d0 | out: hHeap=0x1f0000) returned 1 [0285.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0285.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x258298 | out: hHeap=0x1f0000) returned 1 [0285.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233120 | out: hHeap=0x1f0000) returned 1 [0285.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206808 | out: hHeap=0x1f0000) returned 1 [0285.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0285.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0285.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab708 | out: hHeap=0x1f0000) returned 1 [0285.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x252370 | out: hHeap=0x1f0000) returned 1 [0285.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233238 | out: hHeap=0x1f0000) returned 1 [0285.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c58 | out: hHeap=0x1f0000) returned 1 [0285.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0285.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d508 | out: hHeap=0x1f0000) returned 1 [0285.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228b00 | out: hHeap=0x1f0000) returned 1 [0285.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0285.878] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\warn.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\warn.ico")) returned 1 [0285.880] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0x0, cFileName="warn.ico", cAlternateFileName="")) returned 0 [0285.881] FindClose (in: hFindFile=0x24eb40 | out: hFindFile=0x24eb40) returned 1 [0285.881] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218150 | out: hHeap=0x1f0000) returned 1 [0285.881] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f350 | out: hHeap=0x1f0000) returned 1 [0285.881] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0285.881] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228a28 | out: hHeap=0x1f0000) returned 1 [0285.881] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211948 | out: hHeap=0x1f0000) returned 1 [0285.881] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215af8 | out: hHeap=0x1f0000) returned 1 [0285.881] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215d38 | out: hHeap=0x1f0000) returned 1 [0285.882] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215d80 | out: hHeap=0x1f0000) returned 1 [0285.882] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216050 | out: hHeap=0x1f0000) returned 1 [0285.882] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215e10 | out: hHeap=0x1f0000) returned 1 [0285.882] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216758 | out: hHeap=0x1f0000) returned 1 [0285.882] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2163f8 | out: hHeap=0x1f0000) returned 1 [0285.882] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2163b0 | out: hHeap=0x1f0000) returned 1 [0285.882] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2164d0 | out: hHeap=0x1f0000) returned 1 [0285.882] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216638 | out: hHeap=0x1f0000) returned 1 [0285.882] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216368 | out: hHeap=0x1f0000) returned 1 [0285.882] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216440 | out: hHeap=0x1f0000) returned 1 [0285.882] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2162d8 | out: hHeap=0x1f0000) returned 1 [0285.882] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216488 | out: hHeap=0x1f0000) returned 1 [0285.882] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2167a0 | out: hHeap=0x1f0000) returned 1 [0285.883] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216290 | out: hHeap=0x1f0000) returned 1 [0285.883] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216518 | out: hHeap=0x1f0000) returned 1 [0285.883] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216878 | out: hHeap=0x1f0000) returned 1 [0285.883] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216560 | out: hHeap=0x1f0000) returned 1 [0285.883] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216680 | out: hHeap=0x1f0000) returned 1 [0285.883] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2165a8 | out: hHeap=0x1f0000) returned 1 [0285.884] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2165f0 | out: hHeap=0x1f0000) returned 1 [0285.884] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216710 | out: hHeap=0x1f0000) returned 1 [0285.884] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2167e8 | out: hHeap=0x1f0000) returned 1 [0285.884] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216830 | out: hHeap=0x1f0000) returned 1 [0285.884] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216170 | out: hHeap=0x1f0000) returned 1 [0285.884] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228dd0 | out: hHeap=0x1f0000) returned 1 [0285.884] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228d88 | out: hHeap=0x1f0000) returned 1 [0285.884] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20d5e0 | out: hHeap=0x1f0000) returned 1 [0285.884] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22de98 | out: hHeap=0x1f0000) returned 1 [0285.884] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238050 | out: hHeap=0x1f0000) returned 1 [0285.884] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216008 | out: hHeap=0x1f0000) returned 1 [0285.884] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228e18 [0285.885] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0285.885] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22ee88 [0285.885] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0285.885] FindFirstFileW (in: lpFileName="C:\\\\Boot\\*", lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9d311c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef9d311c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e7c0 [0285.886] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0285.886] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0285.886] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0285.886] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9d311c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef9d311c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0285.886] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0285.886] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0285.887] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0285.887] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0285.887] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xac3efa99, ftLastAccessTime.dwHighDateTime=0x1d4d5d3, ftLastWriteTime.dwLowDateTime=0xac3efa99, ftLastWriteTime.dwHighDateTime=0x1d4d5d3, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD", cAlternateFileName="")) returned 1 [0285.887] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238050 [0285.887] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0285.887] CreateFileW (lpFileName="C:\\\\Boot\\BCD" (normalized: "c:\\boot\\bcd"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0285.888] GetLastError () returned 0x20 [0285.888] GetLastError () returned 0x20 [0285.889] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG", cAlternateFileName="")) returned 1 [0285.889] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0285.889] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238e88 [0285.889] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0285.889] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238050 | out: hHeap=0x1f0000) returned 1 [0285.890] CreateFileW (lpFileName="C:\\\\Boot\\BCD.LOG" (normalized: "c:\\boot\\bcd.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0285.890] GetLastError () returned 0x20 [0285.890] GetLastError () returned 0x20 [0285.890] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG1", cAlternateFileName="BCD~1.LOG")) returned 1 [0285.891] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238050 [0285.891] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0285.891] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238ec0 [0285.891] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0285.891] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238e88 | out: hHeap=0x1f0000) returned 1 [0285.891] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238050 | out: hHeap=0x1f0000) returned 1 [0285.892] CreateFileW (lpFileName="C:\\\\Boot\\BCD.LOG1" (normalized: "c:\\boot\\bcd.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0285.892] GetFileType (hFile=0x1e0) returned 0x1 [0285.893] CloseHandle (hObject=0x1e0) returned 1 [0285.893] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239208 [0285.893] GetFileAttributesExW (in: lpFileName="C:\\\\Boot\\BCD.LOG1" (normalized: "c:\\boot\\bcd.log1"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0285.893] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239208 | out: hHeap=0x1f0000) returned 1 [0285.893] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239278 [0285.894] GetFileAttributesExW (in: lpFileName="C:\\\\Boot\\BCD.LOG1" (normalized: "c:\\boot\\bcd.log1"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0285.894] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239278 | out: hHeap=0x1f0000) returned 1 [0285.894] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239080 [0285.894] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239080 | out: hHeap=0x1f0000) returned 1 [0285.894] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG2", cAlternateFileName="BCD~2.LOG")) returned 1 [0285.894] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0285.894] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0285.894] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238f30 [0285.894] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0285.894] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ec0 | out: hHeap=0x1f0000) returned 1 [0285.894] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0285.895] CreateFileW (lpFileName="C:\\\\Boot\\BCD.LOG2" (normalized: "c:\\boot\\bcd.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0285.895] GetFileType (hFile=0x1e0) returned 0x1 [0285.895] CloseHandle (hObject=0x1e0) returned 1 [0285.896] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238d00 [0285.896] GetFileAttributesExW (in: lpFileName="C:\\\\Boot\\BCD.LOG2" (normalized: "c:\\boot\\bcd.log2"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0285.896] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238d00 | out: hHeap=0x1f0000) returned 1 [0285.896] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239010 [0285.896] GetFileAttributesExW (in: lpFileName="C:\\\\Boot\\BCD.LOG2" (normalized: "c:\\boot\\bcd.log2"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0285.896] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239010 | out: hHeap=0x1f0000) returned 1 [0285.896] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239278 [0285.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239278 | out: hHeap=0x1f0000) returned 1 [0285.897] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg-BG", cAlternateFileName="")) returned 1 [0285.897] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0285.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238f30 | out: hHeap=0x1f0000) returned 1 [0285.897] lstrcmpW (lpString1="bg-BG", lpString2=".") returned 1 [0285.897] lstrcmpW (lpString1="bg-BG", lpString2="..") returned 1 [0285.897] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204d90 [0285.897] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0285.897] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef4e6d79, ftCreationTime.dwHighDateTime=0x1d3273d, ftLastAccessTime.dwLowDateTime=0xef4e6d79, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x175a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootspaces.dll", cAlternateFileName="BOOTSP~1.DLL")) returned 1 [0285.897] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0285.897] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238050 [0285.897] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c58 [0285.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238050 | out: hHeap=0x1f0000) returned 1 [0285.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0285.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0285.898] CreateFileW (lpFileName="C:\\\\Boot\\bootspaces.dll" (normalized: "c:\\boot\\bootspaces.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0285.900] GetLastError () returned 0x5 [0285.900] GetLastError () returned 0x5 [0285.900] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xef703e94, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTSTAT.DAT", cAlternateFileName="")) returned 1 [0285.900] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0285.901] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0285.901] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238cc8 [0285.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0285.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c58 | out: hHeap=0x1f0000) returned 1 [0286.157] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0286.399] CreateFileW (lpFileName="C:\\\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0286.400] GetFileType (hFile=0x1ac) returned 0x1 [0286.400] CloseHandle (hObject=0x1ac) returned 1 [0286.400] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238e50 [0286.401] GetFileAttributesExW (in: lpFileName="C:\\\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xef703e94, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1 [0286.401] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238e50 | out: hHeap=0x1f0000) returned 1 [0286.401] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c58 [0286.401] GetFileAttributesExW (in: lpFileName="C:\\\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xef703e94, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1 [0286.401] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c58 | out: hHeap=0x1f0000) returned 1 [0286.401] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238e88 [0286.401] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238e88 | out: hHeap=0x1f0000) returned 1 [0286.401] GetLastError () returned 0x0 [0286.402] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0286.402] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2290e8 [0286.402] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f350 [0286.402] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238f30 [0286.402] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239010 [0286.402] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0286.402] CryptAcquireContextA (in: phProv=0x173e7b0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e7b0*=0x212360) returned 1 [0286.403] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238000 | out: pbBuffer=0x238000) returned 1 [0286.403] CryptReleaseContext (hProv=0x212360, dwFlags=0x0) returned 1 [0286.403] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0286.403] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x258298 [0286.403] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x232dd8 [0286.403] QueryPerformanceCounter (in: lpPerformanceCount=0x173e744 | out: lpPerformanceCount=0x173e744*=44377241000) returned 1 [0286.404] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e784 | out: lpSystemTimeAsFileTime=0x173e784) [0286.404] QueryPerformanceCounter (in: lpPerformanceCount=0x173e744 | out: lpPerformanceCount=0x173e744*=44377264795) returned 1 [0286.404] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e784 | out: lpSystemTimeAsFileTime=0x173e784) [0286.404] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238d00 [0286.404] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x24fd60 [0286.404] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x232ba8 [0286.404] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x2abcb8 [0286.404] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210240 [0286.404] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206868 [0286.404] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210210 [0286.404] GetLastError () returned 0x0 [0286.405] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228d40 [0286.405] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211ae0 [0286.405] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228d40 | out: hHeap=0x1f0000) returned 1 [0286.405] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0286.405] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211ae0 | out: hHeap=0x1f0000) returned 1 [0286.405] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387e0 [0286.405] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238960 [0286.406] CreateFileW (lpFileName="C:\\\\Boot\\BOOTSTAT.DAT.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\boot\\bootstat.dat.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e650, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0286.407] GetFileType (hFile=0x1ac) returned 0x1 [0286.407] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238910 [0286.407] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238940 [0286.408] CreateFileW (lpFileName="C:\\\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e680, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0286.408] GetFileType (hFile=0x174) returned 0x1 [0286.408] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f70 [0286.408] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d30 [0286.408] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad130 [0286.408] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388c0 [0286.409] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389b0 [0286.409] CreateFileW (lpFileName="C:\\\\Boot\\BOOTSTAT.DAT.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\boot\\bootstat.dat.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e5cc, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0286.409] GetFileType (hFile=0x1e0) returned 0x1 [0286.409] GetLastError () returned 0xb7 [0286.410] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe4) returned 0x21b438 [0286.410] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204df0 [0286.410] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f50 [0286.410] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204dd0 [0286.410] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad4c8 [0286.410] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388d0 [0286.410] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238950 [0286.411] CreateFileW (lpFileName="C:\\\\Boot\\BOOTSTAT.DAT.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\boot\\bootstat.dat.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e5cc, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0286.411] GetFileType (hFile=0x21c) returned 0x1 [0286.411] GetLastError () returned 0xb7 [0286.411] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c10 [0286.411] GetLastError () returned 0xb7 [0286.411] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c10 [0286.411] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e90 [0286.412] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f30 [0286.412] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb8) returned 0x236de0 [0286.412] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388e0 [0286.412] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388f0 [0286.412] CreateFileW (lpFileName="C:\\\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e5c4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0286.413] GetFileType (hFile=0x198) returned 0x1 [0286.413] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28cfc8 [0286.413] ReadFile (in: hFile=0x198, lpBuffer=0x28cfc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e520, lpOverlapped=0x0 | out: lpBuffer=0x28cfc8*, lpNumberOfBytesRead=0x173e520*=0x1000, lpOverlapped=0x0) returned 1 [0286.416] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24d218 [0286.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28dfd0 [0286.417] GetLastError () returned 0x0 [0286.421] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210258 [0286.421] WriteFile (in: hFile=0x21c, lpBuffer=0x28dfd0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x173e364, lpOverlapped=0x0 | out: lpBuffer=0x28dfd0*, lpNumberOfBytesWritten=0x173e364*=0x1000, lpOverlapped=0x0) returned 1 [0286.421] GetLastError () returned 0x0 [0286.422] CloseHandle (hObject=0x1ac) returned 1 [0286.422] CloseHandle (hObject=0x174) returned 1 [0286.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238900 [0286.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238840 [0286.424] CreateFileW (lpFileName="C:\\\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e680, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0286.424] GetLastError () returned 0x5 [0286.424] GetLastError () returned 0x5 [0286.425] DeleteFileW (lpFileName="C:\\\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat")) returned 0 [0286.425] GetLastError () returned 0x20 [0286.425] GetLastError () returned 0x20 [0286.425] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228e60 [0286.425] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238000 [0286.425] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238050 [0286.425] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x229178 [0286.425] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e30 [0286.425] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ef0 [0286.425] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x238980 [0286.426] GetLastError () returned 0x20 [0286.426] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238c58 [0286.426] GetLastError () returned 0x20 [0286.426] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x2392b0 [0286.426] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236608 [0286.426] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2381e0 [0286.426] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285098 [0286.426] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388b0 [0286.426] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0286.426] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0286.426] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238930 [0286.426] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0286.427] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210198 [0286.427] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238140 [0286.427] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2859e0 [0286.427] GetLastError () returned 0x20 [0286.427] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238970 [0286.427] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238990 [0286.427] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389c0 [0286.427] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238990 | out: hHeap=0x1f0000) returned 1 [0286.427] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238920 [0286.427] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389c0 | out: hHeap=0x1f0000) returned 1 [0286.427] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238970 | out: hHeap=0x1f0000) returned 1 [0286.428] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238850 [0286.428] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101b0 [0286.428] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238850 | out: hHeap=0x1f0000) returned 1 [0286.428] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101c8 [0286.428] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0286.428] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238920 | out: hHeap=0x1f0000) returned 1 [0286.428] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101b0 [0286.428] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20fef8 [0286.428] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0286.428] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101b0 [0286.429] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20fef8 | out: hHeap=0x1f0000) returned 1 [0286.429] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0286.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0286.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204ef0 [0286.429] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0286.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204b90 [0286.429] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ef0 | out: hHeap=0x1f0000) returned 1 [0286.429] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0286.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0286.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238168 [0286.429] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d70 | out: hHeap=0x1f0000) returned 1 [0286.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204bb0 [0286.429] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0286.429] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204b90 | out: hHeap=0x1f0000) returned 1 [0286.430] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204d70 [0286.430] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x2067d8 [0286.430] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d70 | out: hHeap=0x1f0000) returned 1 [0286.430] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238398 [0286.430] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2067d8 | out: hHeap=0x1f0000) returned 1 [0286.430] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bb0 | out: hHeap=0x1f0000) returned 1 [0286.430] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238920 [0286.430] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101b0 [0286.430] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238920 | out: hHeap=0x1f0000) returned 1 [0286.430] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0286.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0286.431] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204bb0 [0286.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0286.431] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206928 [0286.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bb0 | out: hHeap=0x1f0000) returned 1 [0286.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206928 | out: hHeap=0x1f0000) returned 1 [0286.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0286.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0286.431] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0286.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285098 | out: hHeap=0x1f0000) returned 1 [0286.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0286.431] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238da8 [0286.431] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0286.431] CryptAcquireContextA (in: phProv=0x173e7b0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e7b0*=0x212250) returned 1 [0286.853] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238168 | out: pbBuffer=0x238168) returned 1 [0286.853] CryptReleaseContext (hProv=0x212250, dwFlags=0x0) returned 1 [0286.853] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0286.853] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381b8 [0286.853] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238168 [0286.853] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238de0 [0286.854] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0286.854] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0286.854] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238de0 | out: hHeap=0x1f0000) returned 1 [0286.854] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8d18 [0286.854] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101b0 [0286.855] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x236468 [0286.855] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2381b8 [0286.855] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285ae8 [0286.855] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c90 [0286.855] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2364d0 [0286.855] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2384b0 [0286.855] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2853b0 [0286.855] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389c0 [0286.855] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0286.855] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0286.856] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238800 [0286.856] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0286.856] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffb8 [0286.856] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffb8 | out: hHeap=0x1f0000) returned 1 [0286.856] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0286.856] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238800 | out: hHeap=0x1f0000) returned 1 [0286.856] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0286.856] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0286.856] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389c0 | out: hHeap=0x1f0000) returned 1 [0286.856] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2853b0 | out: hHeap=0x1f0000) returned 1 [0286.856] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0286.857] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2364d0 | out: hHeap=0x1f0000) returned 1 [0286.857] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238c90 [0286.857] GetLastError () returned 0x0 [0286.857] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239278 [0286.857] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0286.858] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0286.858] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0286.858] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0286.858] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0286.858] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0286.858] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x24e900 [0286.858] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2856c8 [0286.858] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0286.858] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0286.858] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0286.859] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0286.859] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2851a0 [0286.859] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0286.859] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0286.859] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x2300c8 [0286.859] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x2595a0 [0286.859] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x232cc0 [0286.859] QueryPerformanceCounter (in: lpPerformanceCount=0x173e300 | out: lpPerformanceCount=0x173e300*=44422842725) returned 1 [0286.860] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e340 | out: lpSystemTimeAsFileTime=0x173e340) [0286.860] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238920 [0286.860] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0286.860] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c30 [0286.860] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c30 | out: hHeap=0x1f0000) returned 1 [0286.860] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0286.860] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0286.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e50 [0286.861] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e50 | out: hHeap=0x1f0000) returned 1 [0286.861] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0286.861] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238920 | out: hHeap=0x1f0000) returned 1 [0286.861] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0286.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x2392b0 [0286.861] GetLastError () returned 0x0 [0286.862] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0286.862] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0286.862] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0286.862] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238398 [0286.862] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2384b0 [0286.863] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0286.863] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0286.863] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238000 [0286.863] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0286.863] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x222ee8 [0286.863] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0286.863] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0286.863] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0286.863] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0286.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0286.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238500 [0286.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238780 [0286.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238500 | out: hHeap=0x1f0000) returned 1 [0286.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0286.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238780 | out: hHeap=0x1f0000) returned 1 [0286.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0286.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x20d5e0 [0286.865] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20d5e0 | out: hHeap=0x1f0000) returned 1 [0286.865] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0286.865] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0286.865] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101c8 [0286.865] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229328 [0286.865] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238578 [0286.865] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238780 [0286.865] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238528 [0286.865] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2386b8 [0286.866] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238780 | out: hHeap=0x1f0000) returned 1 [0286.866] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238578 | out: hHeap=0x1f0000) returned 1 [0286.866] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0286.866] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238578 [0286.866] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238730 [0286.866] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238578 | out: hHeap=0x1f0000) returned 1 [0286.866] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0286.866] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238730 | out: hHeap=0x1f0000) returned 1 [0286.866] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206628 [0286.866] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x2b2870 [0286.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b2870 | out: hHeap=0x1f0000) returned 1 [0286.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206628 | out: hHeap=0x1f0000) returned 1 [0286.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0286.867] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0286.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0286.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0286.867] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204e30 [0286.867] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0286.867] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0286.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0286.868] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a9d90 [0286.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0286.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2386b8 | out: hHeap=0x1f0000) returned 1 [0286.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238528 | out: hHeap=0x1f0000) returned 1 [0286.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229328 | out: hHeap=0x1f0000) returned 1 [0286.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0286.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e30 | out: hHeap=0x1f0000) returned 1 [0286.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0286.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0286.869] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a9eb8 [0286.869] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a9eb8 | out: hHeap=0x1f0000) returned 1 [0286.869] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ee8 | out: hHeap=0x1f0000) returned 1 [0286.869] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0286.869] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0286.869] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0286.869] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0286.869] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0286.869] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0286.869] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0286.869] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aa7f8 [0286.869] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aab70 [0286.869] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aa7f8 | out: hHeap=0x1f0000) returned 1 [0286.870] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aab70 | out: hHeap=0x1f0000) returned 1 [0286.870] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a9d90 | out: hHeap=0x1f0000) returned 1 [0286.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0286.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2851a0 | out: hHeap=0x1f0000) returned 1 [0286.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24e900 | out: hHeap=0x1f0000) returned 1 [0286.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x232ef0 [0286.871] GetLastError () returned 0x0 [0286.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387f0 [0286.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238920 [0286.873] CreateFileW (lpFileName="C:\\\\Boot\\BOOTSTAT.DAT.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\boot\\bootstat.dat.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e6b0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0286.873] GetFileType (hFile=0x174) returned 0x1 [0286.874] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x286f98 [0286.874] SetFilePointerEx (in: hFile=0x174, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e638 | out: lpNewFilePointer=0x0) returned 1 [0286.874] GetLastError () returned 0xb7 [0286.875] CloseHandle (hObject=0x174) returned 1 [0286.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238920 | out: hHeap=0x1f0000) returned 1 [0286.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387f0 | out: hHeap=0x1f0000) returned 1 [0286.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2856c8 | out: hHeap=0x1f0000) returned 1 [0286.876] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285ae8 | out: hHeap=0x1f0000) returned 1 [0286.876] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0286.876] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c90 | out: hHeap=0x1f0000) returned 1 [0286.876] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0286.876] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0286.876] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0286.876] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232ef0 | out: hHeap=0x1f0000) returned 1 [0286.876] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0286.876] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0286.876] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2595a0 | out: hHeap=0x1f0000) returned 1 [0286.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232cc0 | out: hHeap=0x1f0000) returned 1 [0286.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238da8 | out: hHeap=0x1f0000) returned 1 [0286.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238980 | out: hHeap=0x1f0000) returned 1 [0286.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0286.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0286.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238930 | out: hHeap=0x1f0000) returned 1 [0286.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0286.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0286.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388b0 | out: hHeap=0x1f0000) returned 1 [0286.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2859e0 | out: hHeap=0x1f0000) returned 1 [0286.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0286.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236608 | out: hHeap=0x1f0000) returned 1 [0286.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229178 | out: hHeap=0x1f0000) returned 1 [0286.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238050 | out: hHeap=0x1f0000) returned 1 [0286.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0286.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228e60 | out: hHeap=0x1f0000) returned 1 [0286.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238840 | out: hHeap=0x1f0000) returned 1 [0286.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238900 | out: hHeap=0x1f0000) returned 1 [0286.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28cfc8 | out: hHeap=0x1f0000) returned 1 [0286.879] CloseHandle (hObject=0x198) returned 1 [0286.879] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388f0 | out: hHeap=0x1f0000) returned 1 [0286.879] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388e0 | out: hHeap=0x1f0000) returned 1 [0286.879] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236de0 | out: hHeap=0x1f0000) returned 1 [0286.880] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24d218 | out: hHeap=0x1f0000) returned 1 [0286.880] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0286.880] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c10 | out: hHeap=0x1f0000) returned 1 [0286.880] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28dfd0 | out: hHeap=0x1f0000) returned 1 [0286.880] CloseHandle (hObject=0x21c) returned 1 [0286.881] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238950 | out: hHeap=0x1f0000) returned 1 [0286.881] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388d0 | out: hHeap=0x1f0000) returned 1 [0286.881] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad4c8 | out: hHeap=0x1f0000) returned 1 [0286.881] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204df0 | out: hHeap=0x1f0000) returned 1 [0286.881] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21b438 | out: hHeap=0x1f0000) returned 1 [0286.881] CloseHandle (hObject=0x1e0) returned 1 [0286.882] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389b0 | out: hHeap=0x1f0000) returned 1 [0286.882] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388c0 | out: hHeap=0x1f0000) returned 1 [0286.882] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad130 | out: hHeap=0x1f0000) returned 1 [0286.882] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238940 | out: hHeap=0x1f0000) returned 1 [0286.883] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238910 | out: hHeap=0x1f0000) returned 1 [0286.883] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238960 | out: hHeap=0x1f0000) returned 1 [0286.883] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387e0 | out: hHeap=0x1f0000) returned 1 [0286.883] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0286.883] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24fd60 | out: hHeap=0x1f0000) returned 1 [0286.883] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232ba8 | out: hHeap=0x1f0000) returned 1 [0286.883] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206868 | out: hHeap=0x1f0000) returned 1 [0286.883] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0286.883] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210240 | out: hHeap=0x1f0000) returned 1 [0286.883] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abcb8 | out: hHeap=0x1f0000) returned 1 [0286.884] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x258298 | out: hHeap=0x1f0000) returned 1 [0286.884] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232dd8 | out: hHeap=0x1f0000) returned 1 [0286.884] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239010 | out: hHeap=0x1f0000) returned 1 [0286.884] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238f30 | out: hHeap=0x1f0000) returned 1 [0286.884] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f350 | out: hHeap=0x1f0000) returned 1 [0286.884] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2290e8 | out: hHeap=0x1f0000) returned 1 [0286.884] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0286.884] DeleteFileW (lpFileName="C:\\\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat")) returned 1 [0287.209] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef4fcd12, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x185a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootvhd.dll", cAlternateFileName="")) returned 1 [0287.209] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0287.209] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0287.210] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238f68 [0287.210] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0287.210] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238cc8 | out: hHeap=0x1f0000) returned 1 [0287.210] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0287.212] CreateFileW (lpFileName="C:\\\\Boot\\bootvhd.dll" (normalized: "c:\\boot\\bootvhd.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0287.212] GetLastError () returned 0x5 [0287.212] GetLastError () returned 0x5 [0287.213] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef511a4c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-CZ", cAlternateFileName="")) returned 1 [0287.213] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0287.213] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238f68 | out: hHeap=0x1f0000) returned 1 [0287.213] lstrcmpW (lpString1="cs-CZ", lpString2=".") returned 1 [0287.213] lstrcmpW (lpString1="cs-CZ", lpString2="..") returned 1 [0287.213] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238f68 [0287.214] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0287.214] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d90 | out: hHeap=0x1f0000) returned 1 [0287.214] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0008dbb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5252b3, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-DK", cAlternateFileName="")) returned 1 [0287.214] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0287.215] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0287.215] lstrcmpW (lpString1="da-DK", lpString2=".") returned 1 [0287.215] lstrcmpW (lpString1="da-DK", lpString2="..") returned 1 [0287.215] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x48) returned 0x2260a8 [0287.215] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0287.216] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238f68 | out: hHeap=0x1f0000) returned 1 [0287.216] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0009692, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef538bee, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-DE", cAlternateFileName="")) returned 1 [0287.216] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0287.216] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0287.216] lstrcmpW (lpString1="de-DE", lpString2=".") returned 1 [0287.216] lstrcmpW (lpString1="de-DE", lpString2="..") returned 1 [0287.216] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2365a0 [0287.216] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0287.216] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2260a8 | out: hHeap=0x1f0000) returned 1 [0287.217] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef555ff8, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el-GR", cAlternateFileName="")) returned 1 [0287.217] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0287.217] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0287.217] lstrcmpW (lpString1="el-GR", lpString2=".") returned 1 [0287.217] lstrcmpW (lpString1="el-GR", lpString2="..") returned 1 [0287.217] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0287.217] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0287.217] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2365a0 | out: hHeap=0x1f0000) returned 1 [0287.218] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc482dc87, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-GB", cAlternateFileName="")) returned 1 [0287.218] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0287.218] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0287.218] lstrcmpW (lpString1="en-GB", lpString2=".") returned 1 [0287.218] lstrcmpW (lpString1="en-GB", lpString2="..") returned 1 [0287.218] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0287.218] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef57d0f5, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0287.218] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0287.219] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0287.219] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0287.219] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0287.219] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd8) returned 0x210270 [0287.219] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0287.219] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0287.219] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000b9ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef586d37, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-ES", cAlternateFileName="")) returned 1 [0287.219] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0287.220] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0287.220] lstrcmpW (lpString1="es-ES", lpString2=".") returned 1 [0287.220] lstrcmpW (lpString1="es-ES", lpString2="..") returned 1 [0287.220] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0287.220] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000c12e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc4853f40, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-MX", cAlternateFileName="")) returned 1 [0287.220] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0287.220] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0287.220] lstrcmpW (lpString1="es-MX", lpString2=".") returned 1 [0287.221] lstrcmpW (lpString1="es-MX", lpString2="..") returned 1 [0287.221] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0287.221] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc487a0b9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et-EE", cAlternateFileName="")) returned 1 [0287.221] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238730 [0287.221] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0287.221] lstrcmpW (lpString1="et-EE", lpString2=".") returned 1 [0287.221] lstrcmpW (lpString1="et-EE", lpString2="..") returned 1 [0287.221] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x138) returned 0x21d400 [0287.221] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0287.222] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210270 | out: hHeap=0x1f0000) returned 1 [0287.222] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000cf3a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef59a5b1, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-FI", cAlternateFileName="")) returned 1 [0287.222] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238690 [0287.222] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238730 | out: hHeap=0x1f0000) returned 1 [0287.222] lstrcmpW (lpString1="fi-FI", lpString2=".") returned 1 [0287.222] lstrcmpW (lpString1="fi-FI", lpString2="..") returned 1 [0287.222] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238528 [0287.222] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0109451, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef999ae4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 1 [0287.222] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238550 [0287.223] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238690 | out: hHeap=0x1f0000) returned 1 [0287.223] lstrcmpW (lpString1="Fonts", lpString2=".") returned 1 [0287.223] lstrcmpW (lpString1="Fonts", lpString2="..") returned 1 [0287.223] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238578 [0287.223] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-CA", cAlternateFileName="")) returned 1 [0287.223] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238618 [0287.223] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238550 | out: hHeap=0x1f0000) returned 1 [0287.223] lstrcmpW (lpString1="fr-CA", lpString2=".") returned 1 [0287.223] lstrcmpW (lpString1="fr-CA", lpString2="..") returned 1 [0287.223] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385f0 [0287.224] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010bc12, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ade2b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-FR", cAlternateFileName="")) returned 1 [0287.224] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238668 [0287.224] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238618 | out: hHeap=0x1f0000) returned 1 [0287.224] lstrcmpW (lpString1="fr-FR", lpString2=".") returned 1 [0287.224] lstrcmpW (lpString1="fr-FR", lpString2="..") returned 1 [0287.224] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c8) returned 0x232888 [0287.224] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238550 [0287.224] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d400 | out: hHeap=0x1f0000) returned 1 [0287.225] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-HR", cAlternateFileName="")) returned 1 [0287.225] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238618 [0287.225] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238668 | out: hHeap=0x1f0000) returned 1 [0287.225] lstrcmpW (lpString1="hr-HR", lpString2=".") returned 1 [0287.225] lstrcmpW (lpString1="hr-HR", lpString2="..") returned 1 [0287.225] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238690 [0287.225] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010c5ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5c171b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-HU", cAlternateFileName="")) returned 1 [0287.226] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238758 [0287.226] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238618 | out: hHeap=0x1f0000) returned 1 [0287.226] lstrcmpW (lpString1="hu-HU", lpString2=".") returned 1 [0287.226] lstrcmpW (lpString1="hu-HU", lpString2="..") returned 1 [0287.226] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238668 [0287.226] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010ccad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5d8ab4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-IT", cAlternateFileName="")) returned 1 [0287.226] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384d8 [0287.226] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238758 | out: hHeap=0x1f0000) returned 1 [0287.227] lstrcmpW (lpString1="it-IT", lpString2=".") returned 1 [0287.227] lstrcmpW (lpString1="it-IT", lpString2="..") returned 1 [0287.227] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385a0 [0287.227] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010d0c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ed6c6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-JP", cAlternateFileName="")) returned 1 [0287.227] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2386e0 [0287.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384d8 | out: hHeap=0x1f0000) returned 1 [0287.227] lstrcmpW (lpString1="ja-JP", lpString2=".") returned 1 [0287.227] lstrcmpW (lpString1="ja-JP", lpString2="..") returned 1 [0287.227] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238758 [0287.228] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef5fc210, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-KR", cAlternateFileName="")) returned 1 [0287.228] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385c8 [0287.228] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2386e0 | out: hHeap=0x1f0000) returned 1 [0287.228] lstrcmpW (lpString1="ko-KR", lpString2=".") returned 1 [0287.228] lstrcmpW (lpString1="ko-KR", lpString2="..") returned 1 [0287.228] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238618 [0287.228] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt-LT", cAlternateFileName="")) returned 1 [0287.228] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238640 [0287.229] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385c8 | out: hHeap=0x1f0000) returned 1 [0287.229] lstrcmpW (lpString1="lt-LT", lpString2=".") returned 1 [0287.229] lstrcmpW (lpString1="lt-LT", lpString2="..") returned 1 [0287.229] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2a0) returned 0x22b018 [0287.230] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238708 [0287.230] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232888 | out: hHeap=0x1f0000) returned 1 [0287.230] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv-LV", cAlternateFileName="")) returned 1 [0287.230] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385c8 [0287.230] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238640 | out: hHeap=0x1f0000) returned 1 [0287.230] lstrcmpW (lpString1="lv-LV", lpString2=".") returned 1 [0287.230] lstrcmpW (lpString1="lv-LV", lpString2="..") returned 1 [0287.231] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238640 [0287.231] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6196d8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfbcf473f, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0xc63a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe", cAlternateFileName="")) returned 1 [0287.231] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238730 [0287.231] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384d8 [0287.231] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239208 [0287.231] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384d8 | out: hHeap=0x1f0000) returned 1 [0287.231] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385c8 | out: hHeap=0x1f0000) returned 1 [0287.231] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238730 | out: hHeap=0x1f0000) returned 1 [0287.232] CreateFileW (lpFileName="C:\\\\Boot\\memtest.exe" (normalized: "c:\\boot\\memtest.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0287.233] GetLastError () returned 0x5 [0287.233] GetLastError () returned 0x5 [0287.233] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e138, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef62cf52, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-NO", cAlternateFileName="")) returned 1 [0287.233] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2386b8 [0287.233] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239208 | out: hHeap=0x1f0000) returned 1 [0287.234] lstrcmpW (lpString1="nb-NO", lpString2=".") returned 1 [0287.234] lstrcmpW (lpString1="nb-NO", lpString2="..") returned 1 [0287.234] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2386e0 [0287.234] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e4fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6407cf, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-NL", cAlternateFileName="")) returned 1 [0287.234] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384d8 [0287.234] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2386b8 | out: hHeap=0x1f0000) returned 1 [0287.234] lstrcmpW (lpString1="nl-NL", lpString2=".") returned 1 [0287.235] lstrcmpW (lpString1="nl-NL", lpString2="..") returned 1 [0287.235] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385c8 [0287.235] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef65403a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-PL", cAlternateFileName="")) returned 1 [0287.235] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2386b8 [0287.235] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384d8 | out: hHeap=0x1f0000) returned 1 [0287.235] lstrcmpW (lpString1="pl-PL", lpString2=".") returned 1 [0287.235] lstrcmpW (lpString1="pl-PL", lpString2="..") returned 1 [0287.235] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238780 [0287.236] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6678d6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6678d6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-BR", cAlternateFileName="")) returned 1 [0287.236] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238730 [0287.236] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2386b8 | out: hHeap=0x1f0000) returned 1 [0287.236] lstrcmpW (lpString1="pt-BR", lpString2=".") returned 1 [0287.236] lstrcmpW (lpString1="pt-BR", lpString2="..") returned 1 [0287.236] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2386b8 [0287.236] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f167, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6714dc, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-PT", cAlternateFileName="")) returned 1 [0287.236] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384d8 [0287.237] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238730 | out: hHeap=0x1f0000) returned 1 [0287.237] lstrcmpW (lpString1="pt-PT", lpString2=".") returned 1 [0287.237] lstrcmpW (lpString1="pt-PT", lpString2="..") returned 1 [0287.237] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238730 [0287.237] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f640, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef684d85, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="qps-ploc", cAlternateFileName="")) returned 1 [0287.237] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238500 [0287.237] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609a0 [0287.237] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238ec0 [0287.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0287.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384d8 | out: hHeap=0x1f0000) returned 1 [0287.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238500 | out: hHeap=0x1f0000) returned 1 [0287.238] lstrcmpW (lpString1="qps-ploc", lpString2=".") returned 1 [0287.238] lstrcmpW (lpString1="qps-ploc", lpString2="..") returned 1 [0287.238] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238cc8 [0287.238] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ab61e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9abff9, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resources", cAlternateFileName="RESOUR~1")) returned 1 [0287.238] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0287.239] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0287.239] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c58 [0287.239] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0287.239] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ec0 | out: hHeap=0x1f0000) returned 1 [0287.239] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0287.239] lstrcmpW (lpString1="Resources", lpString2=".") returned 1 [0287.239] lstrcmpW (lpString1="Resources", lpString2="..") returned 1 [0287.239] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238e18 [0287.240] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-RO", cAlternateFileName="")) returned 1 [0287.240] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0287.240] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c58 | out: hHeap=0x1f0000) returned 1 [0287.240] lstrcmpW (lpString1="ro-RO", lpString2=".") returned 1 [0287.240] lstrcmpW (lpString1="ro-RO", lpString2="..") returned 1 [0287.240] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3f0) returned 0x220748 [0287.240] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0287.240] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b018 | out: hHeap=0x1f0000) returned 1 [0287.241] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef698608, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-RU", cAlternateFileName="")) returned 1 [0287.241] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260838 [0287.241] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0287.241] lstrcmpW (lpString1="ru-RU", lpString2=".") returned 1 [0287.241] lstrcmpW (lpString1="ru-RU", lpString2="..") returned 1 [0287.241] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0287.241] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-SK", cAlternateFileName="")) returned 1 [0287.241] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0287.242] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260838 | out: hHeap=0x1f0000) returned 1 [0287.242] lstrcmpW (lpString1="sk-SK", lpString2=".") returned 1 [0287.242] lstrcmpW (lpString1="sk-SK", lpString2="..") returned 1 [0287.242] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260838 [0287.242] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-SI", cAlternateFileName="")) returned 1 [0287.242] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0287.242] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0287.242] lstrcmpW (lpString1="sl-SI", lpString2=".") returned 1 [0287.242] lstrcmpW (lpString1="sl-SI", lpString2="..") returned 1 [0287.242] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0287.242] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0x5168548b, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-Latn-CS", cAlternateFileName="SR-LAT~1")) returned 1 [0287.243] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0287.243] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260888 [0287.243] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239278 [0287.243] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0287.243] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0287.243] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0287.243] lstrcmpW (lpString1="sr-Latn-CS", lpString2=".") returned 1 [0287.243] lstrcmpW (lpString1="sr-Latn-CS", lpString2="..") returned 1 [0287.243] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c58 [0287.244] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-Latn-RS", cAlternateFileName="SR-LAT~2")) returned 1 [0287.244] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0287.244] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260770 [0287.244] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239080 [0287.244] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0287.244] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239278 | out: hHeap=0x1f0000) returned 1 [0287.244] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0287.244] lstrcmpW (lpString1="sr-Latn-RS", lpString2=".") returned 1 [0287.244] lstrcmpW (lpString1="sr-Latn-RS", lpString2="..") returned 1 [0287.245] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2390f0 [0287.245] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01adf43, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6a2250, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-SE", cAlternateFileName="")) returned 1 [0287.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0287.554] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239080 | out: hHeap=0x1f0000) returned 1 [0287.554] lstrcmpW (lpString1="sv-SE", lpString2=".") returned 1 [0287.554] lstrcmpW (lpString1="sv-SE", lpString2="..") returned 1 [0287.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0287.554] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206504, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6b5aca, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-TR", cAlternateFileName="")) returned 1 [0287.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0287.554] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0287.555] lstrcmpW (lpString1="tr-TR", lpString2=".") returned 1 [0287.555] lstrcmpW (lpString1="tr-TR", lpString2="..") returned 1 [0287.555] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260770 [0287.555] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206a30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk-UA", cAlternateFileName="")) returned 1 [0287.555] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605b8 [0287.555] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0287.555] lstrcmpW (lpString1="uk-UA", lpString2=".") returned 1 [0287.555] lstrcmpW (lpString1="uk-UA", lpString2="..") returned 1 [0287.555] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0287.556] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef6c9427, ftCreationTime.dwHighDateTime=0x1d3273d, ftLastAccessTime.dwLowDateTime=0xef6c9427, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x1236, dwReserved0=0x0, dwReserved1=0x0, cFileName="updaterevokesipolicy.p7b", cAlternateFileName="UPDATE~1.P7B")) returned 1 [0287.556] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2290e8 [0287.556] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0287.556] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8d18 [0287.556] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0287.556] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0287.556] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2290e8 | out: hHeap=0x1f0000) returned 1 [0287.557] CreateFileW (lpFileName="C:\\\\Boot\\updaterevokesipolicy.p7b" (normalized: "c:\\boot\\updaterevokesipolicy.p7b"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0287.557] GetLastError () returned 0x5 [0287.558] GetLastError () returned 0x5 [0287.558] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207100, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6d7e9a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CN", cAlternateFileName="")) returned 1 [0287.558] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0287.559] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0287.559] lstrcmpW (lpString1="zh-CN", lpString2=".") returned 1 [0287.559] lstrcmpW (lpString1="zh-CN", lpString2="..") returned 1 [0287.559] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260888 [0287.559] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207675, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x518ea25e, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-HK", cAlternateFileName="")) returned 1 [0287.559] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0287.559] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0287.559] lstrcmpW (lpString1="zh-HK", lpString2=".") returned 1 [0287.559] lstrcmpW (lpString1="zh-HK", lpString2="..") returned 1 [0287.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0287.560] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 1 [0287.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260518 [0287.560] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0287.560] lstrcmpW (lpString1="zh-TW", lpString2=".") returned 1 [0287.560] lstrcmpW (lpString1="zh-TW", lpString2="..") returned 1 [0287.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609a0 [0287.560] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 0 [0287.561] FindClose (in: hFindFile=0x24e7c0 | out: hFindFile=0x24e7c0) returned 1 [0287.561] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229130 [0287.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0287.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d9d0 [0287.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238ec0 [0287.562] FindFirstFileW (in: lpFileName="C:\\\\Boot\\bg-BG\\*", lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e900 [0287.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0287.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239208 [0287.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0287.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ec0 | out: hHeap=0x1f0000) returned 1 [0287.563] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0287.563] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0287.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0287.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2390b8 [0287.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0287.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239208 | out: hHeap=0x1f0000) returned 1 [0287.564] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0287.564] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0287.564] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210bba74, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0287.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0287.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0287.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229328 [0287.564] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0287.564] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2390b8 | out: hHeap=0x1f0000) returned 1 [0287.564] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0287.565] CreateFileW (lpFileName="C:\\\\Boot\\bg-BG\\bootmgr.exe.mui" (normalized: "c:\\boot\\bg-bg\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0287.565] GetLastError () returned 0x5 [0287.565] GetLastError () returned 0x5 [0287.566] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210bba74, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0287.566] FindClose (in: hFindFile=0x24e900 | out: hFindFile=0x24e900) returned 1 [0287.566] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229328 | out: hHeap=0x1f0000) returned 1 [0287.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d9d0 | out: hHeap=0x1f0000) returned 1 [0287.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0287.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229130 | out: hHeap=0x1f0000) returned 1 [0287.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228ea8 [0287.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0287.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f350 [0287.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238d00 [0287.567] FindFirstFileW (in: lpFileName="C:\\\\Boot\\cs-CZ\\*", lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef511a4c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e900 [0287.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0287.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239160 [0287.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0287.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238d00 | out: hHeap=0x1f0000) returned 1 [0287.568] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0287.568] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef511a4c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0287.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0287.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c90 [0287.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0287.569] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239160 | out: hHeap=0x1f0000) returned 1 [0287.569] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0287.569] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0287.569] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47e189c, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2109581d, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0287.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0287.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0287.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229058 [0287.569] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0287.569] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c90 | out: hHeap=0x1f0000) returned 1 [0287.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0287.570] CreateFileW (lpFileName="C:\\\\Boot\\cs-CZ\\bootmgr.exe.mui" (normalized: "c:\\boot\\cs-cz\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0287.570] GetLastError () returned 0x5 [0287.571] GetLastError () returned 0x5 [0287.571] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f1d4cf, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0287.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0287.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0287.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228e60 [0287.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0287.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229058 | out: hHeap=0x1f0000) returned 1 [0287.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0287.572] CreateFileW (lpFileName="C:\\\\Boot\\cs-CZ\\memtest.exe.mui" (normalized: "c:\\boot\\cs-cz\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0287.572] GetLastError () returned 0x5 [0287.573] GetLastError () returned 0x5 [0287.573] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f1d4cf, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0287.573] FindClose (in: hFindFile=0x24e900 | out: hFindFile=0x24e900) returned 1 [0287.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228e60 | out: hHeap=0x1f0000) returned 1 [0287.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f350 | out: hHeap=0x1f0000) returned 1 [0287.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0287.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228ea8 | out: hHeap=0x1f0000) returned 1 [0287.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2292e0 [0287.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0287.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22de98 [0287.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238d00 [0287.575] FindFirstFileW (in: lpFileName="C:\\\\Boot\\da-DK\\*", lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0008dbb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5252b3, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ec00 [0287.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260630 [0287.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239278 [0287.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260630 | out: hHeap=0x1f0000) returned 1 [0287.576] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238d00 | out: hHeap=0x1f0000) returned 1 [0287.576] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0287.576] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0008dbb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5252b3, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0287.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0287.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c90 [0287.576] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0287.576] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239278 | out: hHeap=0x1f0000) returned 1 [0287.576] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0287.577] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0287.577] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47e189c, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12760, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0287.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0287.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0287.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229250 [0287.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0287.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c90 | out: hHeap=0x1f0000) returned 1 [0287.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0287.578] CreateFileW (lpFileName="C:\\\\Boot\\da-DK\\bootmgr.exe.mui" (normalized: "c:\\boot\\da-dk\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0287.579] GetLastError () returned 0x5 [0287.579] GetLastError () returned 0x5 [0287.579] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5252b3, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2ef7268, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0287.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0287.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0287.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229370 [0287.580] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0287.580] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229250 | out: hHeap=0x1f0000) returned 1 [0287.580] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0287.581] CreateFileW (lpFileName="C:\\\\Boot\\da-DK\\memtest.exe.mui" (normalized: "c:\\boot\\da-dk\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0287.581] GetLastError () returned 0x5 [0287.581] GetLastError () returned 0x5 [0287.581] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5252b3, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2ef7268, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0287.582] FindClose (in: hFindFile=0x24ec00 | out: hFindFile=0x24ec00) returned 1 [0287.583] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229370 | out: hHeap=0x1f0000) returned 1 [0287.583] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22de98 | out: hHeap=0x1f0000) returned 1 [0287.583] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0287.584] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2292e0 | out: hHeap=0x1f0000) returned 1 [0287.584] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228dd0 [0287.584] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0287.584] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22de98 [0287.584] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238e88 [0287.584] FindFirstFileW (in: lpFileName="C:\\\\Boot\\de-DE\\*", lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0009692, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef538bee, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24eb40 [0287.584] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0287.584] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239010 [0287.585] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0287.585] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238e88 | out: hHeap=0x1f0000) returned 1 [0287.585] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0287.585] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0009692, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef538bee, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0287.585] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0287.585] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238d00 [0287.585] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0287.585] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239010 | out: hHeap=0x1f0000) returned 1 [0287.585] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0287.586] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0287.586] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48079da, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13560, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0287.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0287.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0287.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228ef0 [0287.586] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0287.586] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238d00 | out: hHeap=0x1f0000) returned 1 [0287.586] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0287.587] CreateFileW (lpFileName="C:\\\\Boot\\de-DE\\bootmgr.exe.mui" (normalized: "c:\\boot\\de-de\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0287.587] GetLastError () returned 0x5 [0287.587] GetLastError () returned 0x5 [0287.587] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef538bee, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2ef7268, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0287.587] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0287.588] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0287.588] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229010 [0287.588] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0287.588] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228ef0 | out: hHeap=0x1f0000) returned 1 [0287.588] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0288.165] CreateFileW (lpFileName="C:\\\\Boot\\de-DE\\memtest.exe.mui" (normalized: "c:\\boot\\de-de\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0288.165] GetLastError () returned 0x5 [0288.165] GetLastError () returned 0x5 [0288.166] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef538bee, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2ef7268, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0288.166] FindClose (in: hFindFile=0x24eb40 | out: hFindFile=0x24eb40) returned 1 [0288.166] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229010 | out: hHeap=0x1f0000) returned 1 [0288.166] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22de98 | out: hHeap=0x1f0000) returned 1 [0288.167] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0288.167] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228dd0 | out: hHeap=0x1f0000) returned 1 [0288.167] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2292e0 [0288.167] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0288.167] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22de98 [0288.167] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238da8 [0288.167] FindFirstFileW (in: lpFileName="C:\\\\Boot\\el-GR\\*", lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef555ff8, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e900 [0288.168] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0288.168] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239278 [0288.168] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0288.168] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238da8 | out: hHeap=0x1f0000) returned 1 [0288.168] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0288.168] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef555ff8, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0288.169] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0288.169] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239160 [0288.169] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0288.169] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239278 | out: hHeap=0x1f0000) returned 1 [0288.169] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0288.169] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0288.169] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13960, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0288.169] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0288.170] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0288.170] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229250 [0288.170] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0288.170] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239160 | out: hHeap=0x1f0000) returned 1 [0288.170] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0288.171] CreateFileW (lpFileName="C:\\\\Boot\\el-GR\\bootmgr.exe.mui" (normalized: "c:\\boot\\el-gr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0288.171] GetLastError () returned 0x5 [0288.171] GetLastError () returned 0x5 [0288.172] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb5a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0288.172] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0288.172] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605b8 [0288.172] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2291c0 [0288.172] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0288.172] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229250 | out: hHeap=0x1f0000) returned 1 [0288.172] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0288.173] CreateFileW (lpFileName="C:\\\\Boot\\el-GR\\memtest.exe.mui" (normalized: "c:\\boot\\el-gr\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0288.173] GetLastError () returned 0x5 [0288.173] GetLastError () returned 0x5 [0288.174] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb5a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0288.174] FindClose (in: hFindFile=0x24e900 | out: hFindFile=0x24e900) returned 1 [0288.174] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2291c0 | out: hHeap=0x1f0000) returned 1 [0288.175] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22de98 | out: hHeap=0x1f0000) returned 1 [0288.175] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0288.175] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2292e0 | out: hHeap=0x1f0000) returned 1 [0288.175] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2290e8 [0288.175] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0288.175] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d9d0 [0288.175] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239278 [0288.175] FindFirstFileW (in: lpFileName="C:\\\\Boot\\en-GB\\*", lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc482dc87, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ec00 [0288.176] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0288.176] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238d70 [0288.176] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0288.176] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239278 | out: hHeap=0x1f0000) returned 1 [0288.176] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0288.176] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc482dc87, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0288.176] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0288.176] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239208 [0288.177] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0288.177] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238d70 | out: hHeap=0x1f0000) returned 1 [0288.177] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0288.177] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0288.177] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12158, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0288.177] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0288.177] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0288.177] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229250 [0288.177] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0288.177] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239208 | out: hHeap=0x1f0000) returned 1 [0288.178] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0288.178] CreateFileW (lpFileName="C:\\\\Boot\\en-GB\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-gb\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0288.178] GetLastError () returned 0x5 [0288.179] GetLastError () returned 0x5 [0288.179] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12158, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0288.179] FindClose (in: hFindFile=0x24ec00 | out: hFindFile=0x24ec00) returned 1 [0288.180] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229250 | out: hHeap=0x1f0000) returned 1 [0288.180] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d9d0 | out: hHeap=0x1f0000) returned 1 [0288.181] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0288.181] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2290e8 | out: hHeap=0x1f0000) returned 1 [0288.181] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228d40 [0288.181] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0288.181] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f350 [0288.181] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238d00 [0288.181] FindFirstFileW (in: lpFileName="C:\\\\Boot\\en-US\\*", lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef57d0f5, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24eb40 [0288.182] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0288.182] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239010 [0288.182] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0288.182] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238d00 | out: hHeap=0x1f0000) returned 1 [0288.182] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0288.182] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef57d0f5, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0288.183] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0288.183] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239048 [0288.183] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0288.183] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239010 | out: hHeap=0x1f0000) returned 1 [0288.183] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0288.183] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0288.184] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef569843, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0x327294d0, ftLastWriteTime.dwHighDateTime=0x1d2a030, nFileSizeHigh=0x0, nFileSizeLow=0x121a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0288.184] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0288.184] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0288.184] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228d88 [0288.184] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0288.184] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239048 | out: hHeap=0x1f0000) returned 1 [0288.184] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0288.185] CreateFileW (lpFileName="C:\\\\Boot\\en-US\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-us\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0288.186] GetLastError () returned 0x5 [0288.186] GetLastError () returned 0x5 [0288.186] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xafa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0288.186] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0288.187] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0288.187] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228e60 [0288.187] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0288.187] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228d88 | out: hHeap=0x1f0000) returned 1 [0288.187] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0288.188] CreateFileW (lpFileName="C:\\\\Boot\\en-US\\memtest.exe.mui" (normalized: "c:\\boot\\en-us\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0288.188] GetLastError () returned 0x5 [0288.189] GetLastError () returned 0x5 [0288.189] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xafa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0288.189] FindClose (in: hFindFile=0x24eb40 | out: hFindFile=0x24eb40) returned 1 [0288.190] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228e60 | out: hHeap=0x1f0000) returned 1 [0288.190] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f350 | out: hHeap=0x1f0000) returned 1 [0288.190] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0288.190] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228d40 | out: hHeap=0x1f0000) returned 1 [0288.190] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229010 [0288.190] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0288.191] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f350 [0288.191] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238da8 [0288.191] FindFirstFileW (in: lpFileName="C:\\\\Boot\\es-ES\\*", lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000b9ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef586d37, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e6c0 [0288.191] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0288.191] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238d70 [0288.192] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0288.192] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238da8 | out: hHeap=0x1f0000) returned 1 [0288.192] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0288.192] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000b9ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef586d37, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0288.192] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0288.192] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2392b0 [0288.192] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0288.193] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238d70 | out: hHeap=0x1f0000) returned 1 [0288.193] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0288.193] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0288.193] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4853f40, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0288.193] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605b8 [0288.193] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0288.193] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229130 [0288.193] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0288.194] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2392b0 | out: hHeap=0x1f0000) returned 1 [0288.194] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0288.194] CreateFileW (lpFileName="C:\\\\Boot\\es-ES\\bootmgr.exe.mui" (normalized: "c:\\boot\\es-es\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0288.195] GetLastError () returned 0x5 [0288.195] GetLastError () returned 0x5 [0288.195] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef586d37, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0288.195] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0288.195] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0288.195] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228e60 [0288.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0288.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229130 | out: hHeap=0x1f0000) returned 1 [0288.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0288.453] CreateFileW (lpFileName="C:\\\\Boot\\es-ES\\memtest.exe.mui" (normalized: "c:\\boot\\es-es\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0288.454] GetLastError () returned 0x5 [0288.454] GetLastError () returned 0x5 [0288.454] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef586d37, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0288.454] FindClose (in: hFindFile=0x24e6c0 | out: hFindFile=0x24e6c0) returned 1 [0288.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228e60 | out: hHeap=0x1f0000) returned 1 [0288.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f350 | out: hHeap=0x1f0000) returned 1 [0288.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0288.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229010 | out: hHeap=0x1f0000) returned 1 [0288.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229010 [0288.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0288.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f350 [0288.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239160 [0288.455] FindFirstFileW (in: lpFileName="C:\\\\Boot\\es-MX\\*", lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000c12e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc4853f40, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ea80 [0288.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0288.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238f30 [0288.456] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0288.456] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239160 | out: hHeap=0x1f0000) returned 1 [0288.456] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0288.456] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000c12e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc4853f40, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0288.456] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260630 [0288.456] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c90 [0288.456] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260630 | out: hHeap=0x1f0000) returned 1 [0288.456] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238f30 | out: hHeap=0x1f0000) returned 1 [0288.456] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0288.456] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0288.456] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4853f40, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0288.456] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0288.456] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0288.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229058 [0288.457] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0288.457] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c90 | out: hHeap=0x1f0000) returned 1 [0288.457] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0288.457] CreateFileW (lpFileName="C:\\\\Boot\\es-MX\\bootmgr.exe.mui" (normalized: "c:\\boot\\es-mx\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0288.458] GetLastError () returned 0x5 [0288.458] GetLastError () returned 0x5 [0288.458] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4853f40, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0288.458] FindClose (in: hFindFile=0x24ea80 | out: hFindFile=0x24ea80) returned 1 [0288.459] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229058 | out: hHeap=0x1f0000) returned 1 [0288.459] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f350 | out: hHeap=0x1f0000) returned 1 [0288.459] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0288.459] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229010 | out: hHeap=0x1f0000) returned 1 [0288.459] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228f80 [0288.459] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0288.459] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f350 [0288.459] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239278 [0288.459] FindFirstFileW (in: lpFileName="C:\\\\Boot\\et-EE\\*", lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc487a0b9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e980 [0288.460] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0288.460] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238f68 [0288.460] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0288.460] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239278 | out: hHeap=0x1f0000) returned 1 [0288.460] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0288.460] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc487a0b9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0288.460] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0288.460] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238f30 [0288.460] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0288.460] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238f68 | out: hHeap=0x1f0000) returned 1 [0288.460] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0288.460] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0288.460] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12560, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0288.461] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0288.461] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0288.461] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228e60 [0288.461] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0288.461] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238f30 | out: hHeap=0x1f0000) returned 1 [0288.461] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0288.462] CreateFileW (lpFileName="C:\\\\Boot\\et-EE\\bootmgr.exe.mui" (normalized: "c:\\boot\\et-ee\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0288.463] GetLastError () returned 0x5 [0288.463] GetLastError () returned 0x5 [0288.463] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12560, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0288.463] FindClose (in: hFindFile=0x24e980 | out: hFindFile=0x24e980) returned 1 [0288.464] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228e60 | out: hHeap=0x1f0000) returned 1 [0288.464] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f350 | out: hHeap=0x1f0000) returned 1 [0288.464] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0288.464] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228f80 | out: hHeap=0x1f0000) returned 1 [0288.464] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228d88 [0288.464] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0288.464] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f350 [0288.464] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239208 [0288.464] FindFirstFileW (in: lpFileName="C:\\\\Boot\\fi-FI\\*", lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000cf3a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef59a5b1, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ea80 [0288.465] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0288.465] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238d70 [0288.465] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0288.465] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239208 | out: hHeap=0x1f0000) returned 1 [0288.465] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0288.465] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000cf3a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef59a5b1, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0288.465] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0288.466] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238ec0 [0288.466] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0288.466] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238d70 | out: hHeap=0x1f0000) returned 1 [0288.466] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0288.466] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0288.466] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2096e751, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0288.466] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0288.466] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260630 [0288.466] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228dd0 [0288.466] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260630 | out: hHeap=0x1f0000) returned 1 [0288.466] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ec0 | out: hHeap=0x1f0000) returned 1 [0288.467] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0288.467] CreateFileW (lpFileName="C:\\\\Boot\\fi-FI\\bootmgr.exe.mui" (normalized: "c:\\boot\\fi-fi\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0288.467] GetLastError () returned 0x5 [0288.467] GetLastError () returned 0x5 [0288.468] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef59a5b1, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0288.468] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0288.468] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0288.468] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229130 [0288.468] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0288.468] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228dd0 | out: hHeap=0x1f0000) returned 1 [0288.468] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0288.469] CreateFileW (lpFileName="C:\\\\Boot\\fi-FI\\memtest.exe.mui" (normalized: "c:\\boot\\fi-fi\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0288.469] GetLastError () returned 0x5 [0288.469] GetLastError () returned 0x5 [0288.469] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef59a5b1, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0288.469] FindClose (in: hFindFile=0x24ea80 | out: hFindFile=0x24ea80) returned 1 [0288.470] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229130 | out: hHeap=0x1f0000) returned 1 [0288.470] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f350 | out: hHeap=0x1f0000) returned 1 [0288.470] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0288.470] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228d88 | out: hHeap=0x1f0000) returned 1 [0288.470] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228dd0 [0288.470] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0288.470] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f350 [0288.470] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238d70 [0288.470] FindFirstFileW (in: lpFileName="C:\\\\Boot\\Fonts\\*", lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0109451, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef999ae4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e7c0 [0288.472] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0288.472] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238d00 [0288.472] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0288.472] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238d70 | out: hHeap=0x1f0000) returned 1 [0288.472] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0288.472] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0109451, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef999ae4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0288.473] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0288.473] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c90 [0288.473] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0288.473] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238d00 | out: hHeap=0x1f0000) returned 1 [0288.473] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0288.473] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0288.473] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef782dd9, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x386467, dwReserved0=0x0, dwReserved1=0x0, cFileName="chs_boot.ttf", cAlternateFileName="")) returned 1 [0288.473] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0288.473] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0288.473] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229178 [0288.473] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0288.474] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c90 | out: hHeap=0x1f0000) returned 1 [0288.474] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0288.474] CreateFileW (lpFileName="C:\\\\Boot\\Fonts\\chs_boot.ttf" (normalized: "c:\\boot\\fonts\\chs_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0288.474] GetLastError () returned 0x5 [0288.475] GetLastError () returned 0x5 [0288.475] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4a1dbea, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef81cc08, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x3b2e0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="cht_boot.ttf", cAlternateFileName="")) returned 1 [0288.475] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0288.475] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0288.475] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228e60 [0288.475] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0288.475] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229178 | out: hHeap=0x1f0000) returned 1 [0288.476] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0288.476] CreateFileW (lpFileName="C:\\\\Boot\\Fonts\\cht_boot.ttf" (normalized: "c:\\boot\\fonts\\cht_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0288.480] GetLastError () returned 0x5 [0288.480] GetLastError () returned 0x5 [0288.481] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4a902c2, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8771a7, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x1e4d4b, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpn_boot.ttf", cAlternateFileName="")) returned 1 [0288.481] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0288.481] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0288.481] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229130 [0288.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0288.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228e60 | out: hHeap=0x1f0000) returned 1 [0288.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0288.482] CreateFileW (lpFileName="C:\\\\Boot\\Fonts\\jpn_boot.ttf" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0288.484] GetLastError () returned 0x5 [0288.484] GetLastError () returned 0x5 [0288.485] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b4eed5, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8c4060, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x243588, dwReserved0=0x0, dwReserved1=0x0, cFileName="kor_boot.ttf", cAlternateFileName="")) returned 1 [0288.485] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0288.485] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0288.485] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229010 [0288.485] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0288.485] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229130 | out: hHeap=0x1f0000) returned 1 [0288.485] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0288.486] CreateFileW (lpFileName="C:\\\\Boot\\Fonts\\kor_boot.ttf" (normalized: "c:\\boot\\fonts\\kor_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0288.487] GetLastError () returned 0x5 [0288.487] GetLastError () returned 0x5 [0288.488] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b9b37e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8e28b4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2ab6f, dwReserved0=0x0, dwReserved1=0x0, cFileName="malgunn_boot.ttf", cAlternateFileName="MALGUN~1.TTF")) returned 1 [0288.488] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238f30 [0288.488] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0288.488] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228d40 [0288.488] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0288.488] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229010 | out: hHeap=0x1f0000) returned 1 [0288.488] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238f30 | out: hHeap=0x1f0000) returned 1 [0288.489] CreateFileW (lpFileName="C:\\\\Boot\\Fonts\\malgunn_boot.ttf" (normalized: "c:\\boot\\fonts\\malgunn_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0288.490] GetLastError () returned 0x5 [0288.490] GetLastError () returned 0x5 [0288.491] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b9b37e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8f4db4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2b506, dwReserved0=0x0, dwReserved1=0x0, cFileName="malgun_boot.ttf", cAlternateFileName="MALGUN~2.TTF")) returned 1 [0288.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0288.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0288.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229130 [0288.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0288.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228d40 | out: hHeap=0x1f0000) returned 1 [0288.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0288.492] CreateFileW (lpFileName="C:\\\\Boot\\Fonts\\malgun_boot.ttf" (normalized: "c:\\boot\\fonts\\malgun_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0288.838] GetLastError () returned 0x5 [0288.838] GetLastError () returned 0x5 [0288.839] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b9b37e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9072c7, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2318a, dwReserved0=0x0, dwReserved1=0x0, cFileName="meiryon_boot.ttf", cAlternateFileName="MEIRYO~1.TTF")) returned 1 [0288.839] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238f30 [0288.839] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0288.839] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228d40 [0288.839] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0288.839] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229130 | out: hHeap=0x1f0000) returned 1 [0288.840] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238f30 | out: hHeap=0x1f0000) returned 1 [0288.840] CreateFileW (lpFileName="C:\\\\Boot\\Fonts\\meiryon_boot.ttf" (normalized: "c:\\boot\\fonts\\meiryon_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0288.842] GetLastError () returned 0x5 [0288.842] GetLastError () returned 0x5 [0288.842] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4bc156a, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef918492, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2380b, dwReserved0=0x0, dwReserved1=0x0, cFileName="meiryo_boot.ttf", cAlternateFileName="MEIRYO~2.TTF")) returned 1 [0288.842] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0288.842] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0288.842] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229370 [0288.843] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0288.843] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228d40 | out: hHeap=0x1f0000) returned 1 [0288.843] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0288.843] CreateFileW (lpFileName="C:\\\\Boot\\Fonts\\meiryo_boot.ttf" (normalized: "c:\\boot\\fonts\\meiryo_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0288.845] GetLastError () returned 0x5 [0288.845] GetLastError () returned 0x5 [0288.845] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4bc156a, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef92a947, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x27a1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="msjhn_boot.ttf", cAlternateFileName="MSJHN_~1.TTF")) returned 1 [0288.845] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0288.845] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0288.845] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2291c0 [0288.846] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0288.846] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229370 | out: hHeap=0x1f0000) returned 1 [0288.846] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0288.846] CreateFileW (lpFileName="C:\\\\Boot\\Fonts\\msjhn_boot.ttf" (normalized: "c:\\boot\\fonts\\msjhn_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0288.847] GetLastError () returned 0x5 [0288.847] GetLastError () returned 0x5 [0288.847] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef93ce3b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x281fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="msjh_boot.ttf", cAlternateFileName="MSJH_B~1.TTF")) returned 1 [0288.847] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0288.847] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0288.847] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2290e8 [0288.848] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0288.848] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2291c0 | out: hHeap=0x1f0000) returned 1 [0288.848] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0288.848] CreateFileW (lpFileName="C:\\\\Boot\\Fonts\\msjh_boot.ttf" (normalized: "c:\\boot\\fonts\\msjh_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0288.849] GetLastError () returned 0x5 [0288.849] GetLastError () returned 0x5 [0288.849] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef94dfcd, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x25b3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="msyhn_boot.ttf", cAlternateFileName="MSYHN_~1.TTF")) returned 1 [0288.849] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605b8 [0288.849] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0288.849] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229130 [0288.849] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0288.849] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2290e8 | out: hHeap=0x1f0000) returned 1 [0288.850] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0288.850] CreateFileW (lpFileName="C:\\\\Boot\\Fonts\\msyhn_boot.ttf" (normalized: "c:\\boot\\fonts\\msyhn_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0288.850] GetLastError () returned 0x5 [0288.851] GetLastError () returned 0x5 [0288.851] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef95f141, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x26255, dwReserved0=0x0, dwReserved1=0x0, cFileName="msyh_boot.ttf", cAlternateFileName="MSYH_B~1.TTF")) returned 1 [0288.851] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0288.851] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0288.851] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229178 [0288.851] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0288.851] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229130 | out: hHeap=0x1f0000) returned 1 [0288.851] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0288.852] CreateFileW (lpFileName="C:\\\\Boot\\Fonts\\msyh_boot.ttf" (normalized: "c:\\boot\\fonts\\msyh_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0288.852] GetLastError () returned 0x5 [0288.853] GetLastError () returned 0x5 [0288.853] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef96ef3e, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xaf3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="segmono_boot.ttf", cAlternateFileName="SEGMON~1.TTF")) returned 1 [0288.853] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239160 [0288.853] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0288.853] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228e60 [0288.853] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0288.853] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229178 | out: hHeap=0x1f0000) returned 1 [0288.853] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239160 | out: hHeap=0x1f0000) returned 1 [0288.854] CreateFileW (lpFileName="C:\\\\Boot\\Fonts\\segmono_boot.ttf" (normalized: "c:\\boot\\fonts\\segmono_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0288.854] GetLastError () returned 0x5 [0288.854] GetLastError () returned 0x5 [0288.855] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c0da69, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef97d9ab, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x14f66, dwReserved0=0x0, dwReserved1=0x0, cFileName="segoen_slboot.ttf", cAlternateFileName="SEGOEN~1.TTF")) returned 1 [0288.855] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239010 [0288.855] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0288.855] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8dc8 [0288.855] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0288.855] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228e60 | out: hHeap=0x1f0000) returned 1 [0288.855] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239010 | out: hHeap=0x1f0000) returned 1 [0288.856] CreateFileW (lpFileName="C:\\\\Boot\\Fonts\\segoen_slboot.ttf" (normalized: "c:\\boot\\fonts\\segoen_slboot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0288.856] GetLastError () returned 0x5 [0288.856] GetLastError () returned 0x5 [0288.856] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef98c419, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x150a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="segoe_slboot.ttf", cAlternateFileName="SEGOE_~1.TTF")) returned 1 [0288.856] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239160 [0288.856] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0288.857] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2291c0 [0288.857] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0288.857] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8dc8 | out: hHeap=0x1f0000) returned 1 [0288.857] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239160 | out: hHeap=0x1f0000) returned 1 [0288.857] CreateFileW (lpFileName="C:\\\\Boot\\Fonts\\segoe_slboot.ttf" (normalized: "c:\\boot\\fonts\\segoe_slboot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0288.858] GetLastError () returned 0x5 [0288.858] GetLastError () returned 0x5 [0288.858] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef999ae4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xbfc3, dwReserved0=0x0, dwReserved1=0x0, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 1 [0288.858] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0288.858] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0288.858] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229250 [0288.858] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0288.858] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2291c0 | out: hHeap=0x1f0000) returned 1 [0288.859] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0288.859] CreateFileW (lpFileName="C:\\\\Boot\\Fonts\\wgl4_boot.ttf" (normalized: "c:\\boot\\fonts\\wgl4_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0288.859] GetLastError () returned 0x5 [0288.859] GetLastError () returned 0x5 [0288.860] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef999ae4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xbfc3, dwReserved0=0x0, dwReserved1=0x0, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 0 [0288.860] FindClose (in: hFindFile=0x24e7c0 | out: hFindFile=0x24e7c0) returned 1 [0288.861] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229250 | out: hHeap=0x1f0000) returned 1 [0288.861] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f350 | out: hHeap=0x1f0000) returned 1 [0288.861] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0288.862] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228dd0 | out: hHeap=0x1f0000) returned 1 [0288.862] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229298 [0288.862] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0288.862] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f350 [0288.862] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238d70 [0288.862] FindFirstFileW (in: lpFileName="C:\\\\Boot\\fr-CA\\*", lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ec00 [0288.863] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0288.863] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239278 [0288.863] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0288.863] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238d70 | out: hHeap=0x1f0000) returned 1 [0288.863] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0288.863] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0288.863] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0288.863] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239160 [0288.863] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0288.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239278 | out: hHeap=0x1f0000) returned 1 [0288.864] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0288.864] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0288.864] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13560, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0288.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0288.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0288.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228d88 [0288.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0288.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239160 | out: hHeap=0x1f0000) returned 1 [0288.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0288.865] CreateFileW (lpFileName="C:\\\\Boot\\fr-CA\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-ca\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0288.865] GetLastError () returned 0x5 [0288.865] GetLastError () returned 0x5 [0288.866] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13560, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0288.866] FindClose (in: hFindFile=0x24ec00 | out: hFindFile=0x24ec00) returned 1 [0288.866] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228d88 | out: hHeap=0x1f0000) returned 1 [0288.866] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f350 | out: hHeap=0x1f0000) returned 1 [0288.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0288.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229298 | out: hHeap=0x1f0000) returned 1 [0288.867] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229058 [0288.867] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0288.867] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f350 [0288.867] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238f30 [0288.867] FindFirstFileW (in: lpFileName="C:\\\\Boot\\fr-FR\\*", lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010bc12, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ade2b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e7c0 [0288.869] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0288.869] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239198 [0288.869] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0288.869] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238f30 | out: hHeap=0x1f0000) returned 1 [0288.869] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0288.869] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010bc12, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ade2b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0288.869] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0288.869] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238d00 [0288.869] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0288.869] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239198 | out: hHeap=0x1f0000) returned 1 [0288.870] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0288.870] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0288.870] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2096e751, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13558, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0288.870] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0288.870] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0288.870] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228ef0 [0288.870] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0288.870] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238d00 | out: hHeap=0x1f0000) returned 1 [0288.870] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0288.871] CreateFileW (lpFileName="C:\\\\Boot\\fr-FR\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-fr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0288.871] GetLastError () returned 0x5 [0288.871] GetLastError () returned 0x5 [0288.872] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5ade2b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0288.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0288.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605b8 [0288.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228dd0 [0288.872] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0288.872] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228ef0 | out: hHeap=0x1f0000) returned 1 [0288.872] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0288.873] CreateFileW (lpFileName="C:\\\\Boot\\fr-FR\\memtest.exe.mui" (normalized: "c:\\boot\\fr-fr\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0288.873] GetLastError () returned 0x5 [0288.873] GetLastError () returned 0x5 [0288.874] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5ade2b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0288.874] FindClose (in: hFindFile=0x24e7c0 | out: hFindFile=0x24e7c0) returned 1 [0288.874] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228dd0 | out: hHeap=0x1f0000) returned 1 [0288.874] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f350 | out: hHeap=0x1f0000) returned 1 [0288.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0288.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229058 | out: hHeap=0x1f0000) returned 1 [0288.875] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228e60 [0288.875] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0288.875] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d9d0 [0288.875] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239198 [0288.875] FindFirstFileW (in: lpFileName="C:\\\\Boot\\hr-HR\\*", lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ed00 [0288.875] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0288.875] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c90 [0288.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0288.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239198 | out: hHeap=0x1f0000) returned 1 [0288.876] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0288.876] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0288.876] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260630 [0288.876] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238e88 [0288.876] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260630 | out: hHeap=0x1f0000) returned 1 [0288.876] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c90 | out: hHeap=0x1f0000) returned 1 [0288.876] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0288.876] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0288.876] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0288.876] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0288.876] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0288.877] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2293b8 [0288.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0288.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238e88 | out: hHeap=0x1f0000) returned 1 [0288.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0288.877] CreateFileW (lpFileName="C:\\\\Boot\\hr-HR\\bootmgr.exe.mui" (normalized: "c:\\boot\\hr-hr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0288.878] GetLastError () returned 0x5 [0288.878] GetLastError () returned 0x5 [0288.878] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0288.878] FindClose (in: hFindFile=0x24ed00 | out: hFindFile=0x24ed00) returned 1 [0288.879] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2293b8 | out: hHeap=0x1f0000) returned 1 [0288.879] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d9d0 | out: hHeap=0x1f0000) returned 1 [0288.879] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0288.879] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228e60 | out: hHeap=0x1f0000) returned 1 [0288.879] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2290e8 [0288.879] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0288.879] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d9d0 [0288.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239160 [0288.880] FindFirstFileW (in: lpFileName="C:\\\\Boot\\hu-HU\\*", lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010c5ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5c171b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e7c0 [0288.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0288.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238e50 [0288.880] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0288.880] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239160 | out: hHeap=0x1f0000) returned 1 [0288.880] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0288.880] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010c5ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5c171b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0288.881] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0288.881] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c90 [0288.881] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0288.881] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238e50 | out: hHeap=0x1f0000) returned 1 [0288.881] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0288.881] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0288.881] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13360, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0288.881] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0288.882] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0288.882] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228f80 [0288.882] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0288.882] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c90 | out: hHeap=0x1f0000) returned 1 [0288.882] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0288.882] CreateFileW (lpFileName="C:\\\\Boot\\hu-HU\\bootmgr.exe.mui" (normalized: "c:\\boot\\hu-hu\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0288.883] GetLastError () returned 0x5 [0288.883] GetLastError () returned 0x5 [0289.134] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5c171b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39d81d8, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb398, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0289.134] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260630 [0289.134] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0289.134] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229130 [0289.134] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0289.134] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228f80 | out: hHeap=0x1f0000) returned 1 [0289.134] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260630 | out: hHeap=0x1f0000) returned 1 [0289.135] CreateFileW (lpFileName="C:\\\\Boot\\hu-HU\\memtest.exe.mui" (normalized: "c:\\boot\\hu-hu\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0289.135] GetLastError () returned 0x5 [0289.135] GetLastError () returned 0x5 [0289.136] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5c171b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39d81d8, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb398, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0289.136] FindClose (in: hFindFile=0x24e7c0 | out: hFindFile=0x24e7c0) returned 1 [0289.136] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229130 | out: hHeap=0x1f0000) returned 1 [0289.136] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d9d0 | out: hHeap=0x1f0000) returned 1 [0289.136] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0289.137] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2290e8 | out: hHeap=0x1f0000) returned 1 [0289.137] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228e60 [0289.137] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0289.137] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f350 [0289.137] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238da8 [0289.137] FindFirstFileW (in: lpFileName="C:\\\\Boot\\it-IT\\*", lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010ccad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5d8ab4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ec00 [0289.137] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0289.137] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239208 [0289.138] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0289.138] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238da8 | out: hHeap=0x1f0000) returned 1 [0289.138] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0289.138] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010ccad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5d8ab4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0289.138] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0289.138] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c90 [0289.138] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0289.138] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239208 | out: hHeap=0x1f0000) returned 1 [0289.138] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0289.138] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0289.139] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0289.139] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0289.139] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0289.139] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228dd0 [0289.139] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0289.139] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c90 | out: hHeap=0x1f0000) returned 1 [0289.139] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0289.140] CreateFileW (lpFileName="C:\\\\Boot\\it-IT\\bootmgr.exe.mui" (normalized: "c:\\boot\\it-it\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0289.140] GetLastError () returned 0x5 [0289.140] GetLastError () returned 0x5 [0289.140] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5d8ab4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf30285aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0289.140] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0289.140] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0289.141] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228f80 [0289.141] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0289.141] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228dd0 | out: hHeap=0x1f0000) returned 1 [0289.141] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0289.141] CreateFileW (lpFileName="C:\\\\Boot\\it-IT\\memtest.exe.mui" (normalized: "c:\\boot\\it-it\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0289.142] GetLastError () returned 0x5 [0289.142] GetLastError () returned 0x5 [0289.142] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5d8ab4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf30285aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0289.142] FindClose (in: hFindFile=0x24ec00 | out: hFindFile=0x24ec00) returned 1 [0289.143] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228f80 | out: hHeap=0x1f0000) returned 1 [0289.143] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f350 | out: hHeap=0x1f0000) returned 1 [0289.143] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0289.143] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228e60 | out: hHeap=0x1f0000) returned 1 [0289.143] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2290e8 [0289.143] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0289.143] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f350 [0289.143] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238d00 [0289.143] FindFirstFileW (in: lpFileName="C:\\\\Boot\\ja-JP\\*", lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010d0c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ed6c6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24eb80 [0289.144] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0289.144] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c90 [0289.144] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0289.144] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238d00 | out: hHeap=0x1f0000) returned 1 [0289.144] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0289.144] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010d0c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ed6c6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0289.144] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0289.144] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238d00 [0289.145] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0289.145] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c90 | out: hHeap=0x1f0000) returned 1 [0289.145] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0289.145] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0289.145] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48c6596, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21212f9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x10760, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0289.145] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0289.145] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0289.145] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2293b8 [0289.145] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0289.146] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238d00 | out: hHeap=0x1f0000) returned 1 [0289.146] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0289.146] CreateFileW (lpFileName="C:\\\\Boot\\ja-JP\\bootmgr.exe.mui" (normalized: "c:\\boot\\ja-jp\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0289.146] GetLastError () returned 0x5 [0289.147] GetLastError () returned 0x5 [0289.147] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5ed6c6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf300233f, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa798, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0289.147] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0289.147] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260630 [0289.147] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229130 [0289.147] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260630 | out: hHeap=0x1f0000) returned 1 [0289.147] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2293b8 | out: hHeap=0x1f0000) returned 1 [0289.148] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0289.148] CreateFileW (lpFileName="C:\\\\Boot\\ja-JP\\memtest.exe.mui" (normalized: "c:\\boot\\ja-jp\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0289.148] GetLastError () returned 0x5 [0289.149] GetLastError () returned 0x5 [0289.150] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5ed6c6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf300233f, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa798, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0289.150] FindClose (in: hFindFile=0x24eb80 | out: hFindFile=0x24eb80) returned 1 [0289.150] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229130 | out: hHeap=0x1f0000) returned 1 [0289.150] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f350 | out: hHeap=0x1f0000) returned 1 [0289.151] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0289.151] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2290e8 | out: hHeap=0x1f0000) returned 1 [0289.151] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228dd0 [0289.151] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0289.151] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22de98 [0289.151] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238e88 [0289.151] FindFirstFileW (in: lpFileName="C:\\\\Boot\\ko-KR\\*", lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef5fc210, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e680 [0289.152] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0289.152] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238ec0 [0289.152] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0289.152] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238e88 | out: hHeap=0x1f0000) returned 1 [0289.152] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0289.152] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef5fc210, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0289.152] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0289.153] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238da8 [0289.153] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0289.153] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ec0 | out: hHeap=0x1f0000) returned 1 [0289.153] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0289.153] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0289.153] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x211c6af1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x10560, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0289.153] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0289.153] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605b8 [0289.153] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2291c0 [0289.154] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0289.154] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238da8 | out: hHeap=0x1f0000) returned 1 [0289.154] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0289.154] CreateFileW (lpFileName="C:\\\\Boot\\ko-KR\\bootmgr.exe.mui" (normalized: "c:\\boot\\ko-kr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0289.155] GetLastError () returned 0x5 [0289.155] GetLastError () returned 0x5 [0289.155] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fdc0d7, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa7a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0289.155] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0289.155] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0289.155] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2293b8 [0289.155] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0289.156] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2291c0 | out: hHeap=0x1f0000) returned 1 [0289.156] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0289.156] CreateFileW (lpFileName="C:\\\\Boot\\ko-KR\\memtest.exe.mui" (normalized: "c:\\boot\\ko-kr\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0289.157] GetLastError () returned 0x5 [0289.157] GetLastError () returned 0x5 [0289.157] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fdc0d7, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa7a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0289.157] FindClose (in: hFindFile=0x24e680 | out: hFindFile=0x24e680) returned 1 [0289.158] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2293b8 | out: hHeap=0x1f0000) returned 1 [0289.158] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22de98 | out: hHeap=0x1f0000) returned 1 [0289.158] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0289.158] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228dd0 | out: hHeap=0x1f0000) returned 1 [0289.158] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229178 [0289.158] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0289.158] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f350 [0289.158] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239278 [0289.158] FindFirstFileW (in: lpFileName="C:\\\\Boot\\lt-LT\\*", lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e6c0 [0289.159] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0289.159] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238f30 [0289.159] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0289.159] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239278 | out: hHeap=0x1f0000) returned 1 [0289.159] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0289.159] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0289.160] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0289.160] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239160 [0289.160] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0289.160] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238f30 | out: hHeap=0x1f0000) returned 1 [0289.160] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0289.160] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0289.160] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2117a634, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12760, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0289.160] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0289.161] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0289.161] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228e60 [0289.161] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0289.161] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239160 | out: hHeap=0x1f0000) returned 1 [0289.161] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0289.162] CreateFileW (lpFileName="C:\\\\Boot\\lt-LT\\bootmgr.exe.mui" (normalized: "c:\\boot\\lt-lt\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0289.162] GetLastError () returned 0x5 [0289.162] GetLastError () returned 0x5 [0289.162] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2117a634, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12760, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0289.162] FindClose (in: hFindFile=0x24e6c0 | out: hFindFile=0x24e6c0) returned 1 [0289.163] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228e60 | out: hHeap=0x1f0000) returned 1 [0289.163] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f350 | out: hHeap=0x1f0000) returned 1 [0289.163] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0289.163] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229178 | out: hHeap=0x1f0000) returned 1 [0289.163] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228f80 [0289.163] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260630 [0289.163] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d6a0 [0289.164] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238f68 [0289.164] FindFirstFileW (in: lpFileName="C:\\\\Boot\\lv-LV\\*", lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e980 [0289.164] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0289.164] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238e50 [0289.164] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0289.165] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238f68 | out: hHeap=0x1f0000) returned 1 [0289.165] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0289.165] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0289.165] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0289.165] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239278 [0289.165] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0289.165] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238e50 | out: hHeap=0x1f0000) returned 1 [0289.165] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0289.166] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0289.166] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2117a634, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12758, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0289.166] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0289.166] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0289.166] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228e60 [0289.166] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0289.166] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239278 | out: hHeap=0x1f0000) returned 1 [0289.166] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0289.167] CreateFileW (lpFileName="C:\\\\Boot\\lv-LV\\bootmgr.exe.mui" (normalized: "c:\\boot\\lv-lv\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0289.167] GetLastError () returned 0x5 [0289.167] GetLastError () returned 0x5 [0289.167] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2117a634, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12758, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0289.167] FindClose (in: hFindFile=0x24e980 | out: hFindFile=0x24e980) returned 1 [0289.168] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228e60 | out: hHeap=0x1f0000) returned 1 [0289.168] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d6a0 | out: hHeap=0x1f0000) returned 1 [0289.168] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260630 | out: hHeap=0x1f0000) returned 1 [0289.168] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228f80 | out: hHeap=0x1f0000) returned 1 [0289.168] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228d40 [0289.168] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0289.168] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f350 [0289.168] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238f30 [0289.168] FindFirstFileW (in: lpFileName="C:\\\\Boot\\nb-NO\\*", lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e138, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef62cf52, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e680 [0289.169] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0289.169] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c90 [0289.169] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0289.169] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238f30 | out: hHeap=0x1f0000) returned 1 [0289.169] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0289.169] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e138, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef62cf52, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0289.169] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0289.169] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239208 [0289.169] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0289.170] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c90 | out: hHeap=0x1f0000) returned 1 [0289.170] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0289.170] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0289.170] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x211543da, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12760, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0289.170] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0289.170] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0289.170] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228e60 [0289.170] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0289.170] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239208 | out: hHeap=0x1f0000) returned 1 [0289.170] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0289.171] CreateFileW (lpFileName="C:\\\\Boot\\nb-NO\\bootmgr.exe.mui" (normalized: "c:\\boot\\nb-no\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0289.171] GetLastError () returned 0x5 [0289.171] GetLastError () returned 0x5 [0289.171] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef62cf52, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fb5e6c, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0289.171] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0289.171] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0289.171] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229010 [0289.171] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0289.171] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228e60 | out: hHeap=0x1f0000) returned 1 [0289.171] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0289.172] CreateFileW (lpFileName="C:\\\\Boot\\nb-NO\\memtest.exe.mui" (normalized: "c:\\boot\\nb-no\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0289.172] GetLastError () returned 0x5 [0289.172] GetLastError () returned 0x5 [0289.172] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef62cf52, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fb5e6c, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0289.172] FindClose (in: hFindFile=0x24e680 | out: hFindFile=0x24e680) returned 1 [0289.173] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229010 | out: hHeap=0x1f0000) returned 1 [0289.173] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f350 | out: hHeap=0x1f0000) returned 1 [0289.173] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0289.173] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228d40 | out: hHeap=0x1f0000) returned 1 [0289.173] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228f38 [0289.173] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0289.173] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f350 [0289.173] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239048 [0289.173] FindFirstFileW (in: lpFileName="C:\\\\Boot\\nl-NL\\*", lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e4fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6407cf, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ea80 [0289.173] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0289.174] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c90 [0289.174] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0289.174] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239048 | out: hHeap=0x1f0000) returned 1 [0289.174] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0289.174] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e4fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6407cf, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0289.174] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0289.174] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238d70 [0289.174] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0289.174] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c90 | out: hHeap=0x1f0000) returned 1 [0289.174] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0289.174] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0289.174] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x211543da, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13160, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0289.175] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0289.175] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260630 [0289.175] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229298 [0289.175] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260630 | out: hHeap=0x1f0000) returned 1 [0289.175] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238d70 | out: hHeap=0x1f0000) returned 1 [0289.175] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0289.176] CreateFileW (lpFileName="C:\\\\Boot\\nl-NL\\bootmgr.exe.mui" (normalized: "c:\\boot\\nl-nl\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0289.176] GetLastError () returned 0x5 [0289.176] GetLastError () returned 0x5 [0289.176] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6407cf, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fb5e6c, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0289.176] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605b8 [0289.176] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0289.176] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228d40 [0289.177] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0289.177] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229298 | out: hHeap=0x1f0000) returned 1 [0289.177] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0289.177] CreateFileW (lpFileName="C:\\\\Boot\\nl-NL\\memtest.exe.mui" (normalized: "c:\\boot\\nl-nl\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0289.177] GetLastError () returned 0x5 [0289.177] GetLastError () returned 0x5 [0289.177] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6407cf, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fb5e6c, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0289.178] FindClose (in: hFindFile=0x24ea80 | out: hFindFile=0x24ea80) returned 1 [0289.178] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228d40 | out: hHeap=0x1f0000) returned 1 [0289.178] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f350 | out: hHeap=0x1f0000) returned 1 [0289.178] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0289.178] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228f38 | out: hHeap=0x1f0000) returned 1 [0289.178] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229328 [0289.178] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0289.178] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f350 [0289.178] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c90 [0289.178] FindFirstFileW (in: lpFileName="C:\\\\Boot\\pl-PL\\*", lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef65403a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e680 [0289.179] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0289.179] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239160 [0289.179] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0289.179] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c90 | out: hHeap=0x1f0000) returned 1 [0289.179] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0289.179] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef65403a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0289.179] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0289.179] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2390b8 [0289.179] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0289.179] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239160 | out: hHeap=0x1f0000) returned 1 [0289.180] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0289.180] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0289.180] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2112e17f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f58, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0289.180] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0289.180] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0289.478] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229010 [0289.478] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0289.478] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2390b8 | out: hHeap=0x1f0000) returned 1 [0289.478] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0289.479] CreateFileW (lpFileName="C:\\\\Boot\\pl-PL\\bootmgr.exe.mui" (normalized: "c:\\boot\\pl-pl\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0289.479] GetLastError () returned 0x5 [0289.480] GetLastError () returned 0x5 [0289.480] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0289.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0289.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0289.481] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228d40 [0289.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0289.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229010 | out: hHeap=0x1f0000) returned 1 [0289.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0289.482] CreateFileW (lpFileName="C:\\\\Boot\\pl-PL\\memtest.exe.mui" (normalized: "c:\\boot\\pl-pl\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0289.482] GetLastError () returned 0x5 [0289.482] GetLastError () returned 0x5 [0289.482] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0289.483] FindClose (in: hFindFile=0x24e680 | out: hFindFile=0x24e680) returned 1 [0289.483] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228d40 | out: hHeap=0x1f0000) returned 1 [0289.483] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f350 | out: hHeap=0x1f0000) returned 1 [0289.483] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0289.483] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229328 | out: hHeap=0x1f0000) returned 1 [0289.483] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229130 [0289.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0289.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f350 [0289.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238e50 [0289.484] FindFirstFileW (in: lpFileName="C:\\\\Boot\\pt-BR\\*", lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6678d6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6678d6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24eb40 [0289.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605b8 [0289.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238d00 [0289.485] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0289.485] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238e50 | out: hHeap=0x1f0000) returned 1 [0289.485] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0289.485] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6678d6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6678d6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0289.485] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0289.485] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239278 [0289.485] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0289.485] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238d00 | out: hHeap=0x1f0000) returned 1 [0289.485] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0289.485] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0289.486] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2112e17f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0289.486] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605b8 [0289.486] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0289.486] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2290e8 [0289.486] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0289.486] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239278 | out: hHeap=0x1f0000) returned 1 [0289.486] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0289.487] CreateFileW (lpFileName="C:\\\\Boot\\pt-BR\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-br\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0289.488] GetLastError () returned 0x5 [0289.488] GetLastError () returned 0x5 [0289.488] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65dc94, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0289.488] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0289.488] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0289.488] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229178 [0289.489] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0289.489] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2290e8 | out: hHeap=0x1f0000) returned 1 [0289.489] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0289.489] CreateFileW (lpFileName="C:\\\\Boot\\pt-BR\\memtest.exe.mui" (normalized: "c:\\boot\\pt-br\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0289.490] GetLastError () returned 0x5 [0289.490] GetLastError () returned 0x5 [0289.490] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65dc94, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0289.490] FindClose (in: hFindFile=0x24eb40 | out: hFindFile=0x24eb40) returned 1 [0289.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229178 | out: hHeap=0x1f0000) returned 1 [0289.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f350 | out: hHeap=0x1f0000) returned 1 [0289.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0289.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229130 | out: hHeap=0x1f0000) returned 1 [0289.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229058 [0289.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605b8 [0289.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f350 [0289.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238f68 [0289.491] FindFirstFileW (in: lpFileName="C:\\\\Boot\\pt-PT\\*", lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f167, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6714dc, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ec80 [0289.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0289.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239080 [0289.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0289.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238f68 | out: hHeap=0x1f0000) returned 1 [0289.492] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0289.492] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f167, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6714dc, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0289.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0289.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239198 [0289.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0289.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239080 | out: hHeap=0x1f0000) returned 1 [0289.493] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0289.493] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0289.494] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2112e17f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0289.494] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0289.494] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0289.494] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229130 [0289.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0289.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239198 | out: hHeap=0x1f0000) returned 1 [0289.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0289.497] CreateFileW (lpFileName="C:\\\\Boot\\pt-PT\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-pt\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0289.498] GetLastError () returned 0x5 [0289.498] GetLastError () returned 0x5 [0289.498] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6714dc, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0289.498] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0289.498] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0289.499] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229298 [0289.499] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0289.499] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229130 | out: hHeap=0x1f0000) returned 1 [0289.499] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0289.499] CreateFileW (lpFileName="C:\\\\Boot\\pt-PT\\memtest.exe.mui" (normalized: "c:\\boot\\pt-pt\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0289.500] GetLastError () returned 0x5 [0289.500] GetLastError () returned 0x5 [0289.500] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6714dc, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0289.500] FindClose (in: hFindFile=0x24ec80 | out: hFindFile=0x24ec80) returned 1 [0289.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229298 | out: hHeap=0x1f0000) returned 1 [0289.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f350 | out: hHeap=0x1f0000) returned 1 [0289.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0289.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229058 | out: hHeap=0x1f0000) returned 1 [0289.501] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2291c0 [0289.501] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0289.501] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f350 [0289.501] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238d00 [0289.502] FindFirstFileW (in: lpFileName="C:\\\\Boot\\qps-ploc\\*", lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f640, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef684d85, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24eb40 [0289.502] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239160 [0289.502] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238d00 | out: hHeap=0x1f0000) returned 1 [0289.502] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0289.502] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f640, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef684d85, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0289.503] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238f30 [0289.503] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239160 | out: hHeap=0x1f0000) returned 1 [0289.503] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0289.503] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0289.503] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12160, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0289.503] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0289.503] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2392b0 [0289.503] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8d18 [0289.503] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2392b0 | out: hHeap=0x1f0000) returned 1 [0289.504] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238f30 | out: hHeap=0x1f0000) returned 1 [0289.504] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0289.504] CreateFileW (lpFileName="C:\\\\Boot\\qps-ploc\\bootmgr.exe.mui" (normalized: "c:\\boot\\qps-ploc\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0289.505] GetLastError () returned 0x5 [0289.505] GetLastError () returned 0x5 [0289.505] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef684d85, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfbd1a998, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0xd398, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0289.505] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0289.505] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238e50 [0289.505] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8dc8 [0289.505] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238e50 | out: hHeap=0x1f0000) returned 1 [0289.506] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0289.506] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0289.506] CreateFileW (lpFileName="C:\\\\Boot\\qps-ploc\\memtest.exe.mui" (normalized: "c:\\boot\\qps-ploc\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0289.506] GetLastError () returned 0x5 [0289.507] GetLastError () returned 0x5 [0289.507] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef684d85, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfbd1a998, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0xd398, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0289.507] FindClose (in: hFindFile=0x24eb40 | out: hFindFile=0x24eb40) returned 1 [0289.507] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8dc8 | out: hHeap=0x1f0000) returned 1 [0289.508] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f350 | out: hHeap=0x1f0000) returned 1 [0289.508] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0289.508] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2291c0 | out: hHeap=0x1f0000) returned 1 [0289.508] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228d40 [0289.508] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0289.509] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d6a0 [0289.509] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c90 [0289.509] FindFirstFileW (in: lpFileName="C:\\\\Boot\\Resources\\*", lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ab61e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9abff9, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e980 [0289.510] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239010 [0289.510] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c90 | out: hHeap=0x1f0000) returned 1 [0289.510] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0289.510] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ab61e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9abff9, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0289.510] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239048 [0289.510] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239010 | out: hHeap=0x1f0000) returned 1 [0289.510] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0289.510] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0289.510] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9abff9, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef597530, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x169a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootres.dll", cAlternateFileName="")) returned 1 [0289.510] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605b8 [0289.511] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c90 [0289.511] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x226288 [0289.511] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c90 | out: hHeap=0x1f0000) returned 1 [0289.511] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239048 | out: hHeap=0x1f0000) returned 1 [0289.511] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0289.512] CreateFileW (lpFileName="C:\\\\Boot\\Resources\\bootres.dll" (normalized: "c:\\boot\\resources\\bootres.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0289.512] GetLastError () returned 0x5 [0289.512] GetLastError () returned 0x5 [0289.512] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9baa67, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0289.512] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238da8 [0289.512] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225ce8 [0289.513] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238da8 | out: hHeap=0x1f0000) returned 1 [0289.513] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226288 | out: hHeap=0x1f0000) returned 1 [0289.513] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0289.513] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0289.513] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204f50 [0289.513] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2292e0 [0289.513] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9baa67, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0 [0289.513] FindClose (in: hFindFile=0x24e980 | out: hFindFile=0x24e980) returned 1 [0289.514] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228f38 [0289.514] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0289.514] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d9d0 [0289.514] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228e60 [0289.514] FindFirstFileW (in: lpFileName="C:\\\\Boot\\Resources\\en-US\\*", lpFindFileData=0x173e8f8 | out: lpFindFileData=0x173e8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9baa67, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e980 [0289.514] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228ea8 [0289.515] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228e60 | out: hHeap=0x1f0000) returned 1 [0289.515] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0289.515] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x173e8f8 | out: lpFindFileData=0x173e8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9baa67, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0289.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228ef0 [0289.515] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228ea8 | out: hHeap=0x1f0000) returned 1 [0289.515] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0289.515] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0289.515] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x173e8f8 | out: lpFindFileData=0x173e8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9baa67, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0x31acad58, ftLastWriteTime.dwHighDateTime=0x1d2a030, nFileSizeHigh=0x0, nFileSizeLow=0x2fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootres.dll.mui", cAlternateFileName="BOOTRE~1.MUI")) returned 1 [0289.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0289.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229328 [0289.516] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236468 [0289.516] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229328 | out: hHeap=0x1f0000) returned 1 [0289.516] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228ef0 | out: hHeap=0x1f0000) returned 1 [0289.516] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0289.516] CreateFileW (lpFileName="C:\\\\Boot\\Resources\\en-US\\bootres.dll.mui" (normalized: "c:\\boot\\resources\\en-us\\bootres.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e6c0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0289.517] GetLastError () returned 0x5 [0289.517] GetLastError () returned 0x5 [0289.517] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x173e8f8 | out: lpFindFileData=0x173e8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9baa67, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0x31acad58, ftLastWriteTime.dwHighDateTime=0x1d2a030, nFileSizeHigh=0x0, nFileSizeLow=0x2fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootres.dll.mui", cAlternateFileName="BOOTRE~1.MUI")) returned 0 [0289.517] FindClose (in: hFindFile=0x24e980 | out: hFindFile=0x24e980) returned 1 [0289.517] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0289.518] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d9d0 | out: hHeap=0x1f0000) returned 1 [0289.518] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0289.518] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228f38 | out: hHeap=0x1f0000) returned 1 [0289.518] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225ce8 | out: hHeap=0x1f0000) returned 1 [0289.518] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2292e0 | out: hHeap=0x1f0000) returned 1 [0289.518] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f50 | out: hHeap=0x1f0000) returned 1 [0289.518] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d6a0 | out: hHeap=0x1f0000) returned 1 [0289.518] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0289.518] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228d40 | out: hHeap=0x1f0000) returned 1 [0289.518] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228dd0 [0289.518] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0289.519] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22de98 [0289.519] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238e88 [0289.519] FindFirstFileW (in: lpFileName="C:\\\\Boot\\ro-RO\\*", lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24eb40 [0289.519] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0289.519] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239010 [0289.519] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0289.519] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238e88 | out: hHeap=0x1f0000) returned 1 [0289.519] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0289.519] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0289.520] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0289.520] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238d00 [0289.520] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0289.520] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239010 | out: hHeap=0x1f0000) returned 1 [0289.520] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0289.520] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0289.520] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12960, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0289.520] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0289.520] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0289.520] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228ef0 [0289.520] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0289.520] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238d00 | out: hHeap=0x1f0000) returned 1 [0289.520] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0289.521] CreateFileW (lpFileName="C:\\\\Boot\\ro-RO\\bootmgr.exe.mui" (normalized: "c:\\boot\\ro-ro\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0289.521] GetLastError () returned 0x5 [0289.521] GetLastError () returned 0x5 [0289.521] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12960, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0289.521] FindClose (in: hFindFile=0x24eb40 | out: hFindFile=0x24eb40) returned 1 [0289.522] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228ef0 | out: hHeap=0x1f0000) returned 1 [0289.522] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22de98 | out: hHeap=0x1f0000) returned 1 [0289.522] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0289.522] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228dd0 | out: hHeap=0x1f0000) returned 1 [0289.522] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228f38 [0289.522] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0289.522] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f350 [0289.522] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c90 [0289.522] FindFirstFileW (in: lpFileName="C:\\\\Boot\\ru-RU\\*", lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef698608, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e600 [0289.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0289.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238da8 [0289.523] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0289.523] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c90 | out: hHeap=0x1f0000) returned 1 [0289.523] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0289.523] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef698608, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0289.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0289.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238f68 [0289.523] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0289.523] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238da8 | out: hHeap=0x1f0000) returned 1 [0289.523] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0289.523] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0289.523] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0289.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0289.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605b8 [0289.524] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228f80 [0289.736] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0289.737] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238f68 | out: hHeap=0x1f0000) returned 1 [0289.737] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0289.893] CreateFileW (lpFileName="C:\\\\Boot\\ru-RU\\bootmgr.exe.mui" (normalized: "c:\\boot\\ru-ru\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0289.894] GetLastError () returned 0x5 [0289.894] GetLastError () returned 0x5 [0289.894] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f699a6, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xafa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0289.894] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0289.894] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0289.894] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229250 [0289.895] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0289.895] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228f80 | out: hHeap=0x1f0000) returned 1 [0289.895] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0289.895] CreateFileW (lpFileName="C:\\\\Boot\\ru-RU\\memtest.exe.mui" (normalized: "c:\\boot\\ru-ru\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0289.896] GetLastError () returned 0x5 [0289.896] GetLastError () returned 0x5 [0289.896] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f699a6, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xafa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0289.896] FindClose (in: hFindFile=0x24e600 | out: hFindFile=0x24e600) returned 1 [0289.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229250 | out: hHeap=0x1f0000) returned 1 [0289.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f350 | out: hHeap=0x1f0000) returned 1 [0289.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0289.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228f38 | out: hHeap=0x1f0000) returned 1 [0289.897] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229328 [0289.897] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605b8 [0289.897] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f350 [0289.897] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c90 [0289.897] FindFirstFileW (in: lpFileName="C:\\\\Boot\\sk-SK\\*", lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e900 [0289.897] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0289.898] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239278 [0289.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0289.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c90 | out: hHeap=0x1f0000) returned 1 [0289.898] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0289.898] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0289.898] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0289.898] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238e50 [0289.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0289.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239278 | out: hHeap=0x1f0000) returned 1 [0289.898] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0289.898] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0289.898] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0289.898] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0289.898] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0289.898] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2293b8 [0289.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0289.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238e50 | out: hHeap=0x1f0000) returned 1 [0289.899] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0289.899] CreateFileW (lpFileName="C:\\\\Boot\\sk-SK\\bootmgr.exe.mui" (normalized: "c:\\boot\\sk-sk\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0289.899] GetLastError () returned 0x5 [0289.899] GetLastError () returned 0x5 [0289.899] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0289.899] FindClose (in: hFindFile=0x24e900 | out: hFindFile=0x24e900) returned 1 [0289.900] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2293b8 | out: hHeap=0x1f0000) returned 1 [0289.900] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f350 | out: hHeap=0x1f0000) returned 1 [0289.900] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0289.900] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229328 | out: hHeap=0x1f0000) returned 1 [0289.900] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228e60 [0289.900] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0289.900] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f350 [0289.900] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239208 [0289.900] FindFirstFileW (in: lpFileName="C:\\\\Boot\\sl-SI\\*", lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e900 [0289.901] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0289.901] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238d00 [0289.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0289.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239208 | out: hHeap=0x1f0000) returned 1 [0289.901] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0289.901] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0289.901] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0289.902] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2392b0 [0289.902] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0289.902] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238d00 | out: hHeap=0x1f0000) returned 1 [0289.902] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0289.902] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0289.902] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0289.902] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0289.902] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0289.902] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228ea8 [0289.902] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0289.902] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2392b0 | out: hHeap=0x1f0000) returned 1 [0289.902] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0289.903] CreateFileW (lpFileName="C:\\\\Boot\\sl-SI\\bootmgr.exe.mui" (normalized: "c:\\boot\\sl-si\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0289.903] GetLastError () returned 0x5 [0289.903] GetLastError () returned 0x5 [0289.903] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0289.903] FindClose (in: hFindFile=0x24e900 | out: hFindFile=0x24e900) returned 1 [0289.903] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228ea8 | out: hHeap=0x1f0000) returned 1 [0289.904] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f350 | out: hHeap=0x1f0000) returned 1 [0289.904] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0289.904] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228e60 | out: hHeap=0x1f0000) returned 1 [0289.904] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2293b8 [0289.904] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0289.904] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d508 [0289.904] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238e50 [0289.904] FindFirstFileW (in: lpFileName="C:\\\\Boot\\sr-Latn-CS\\*", lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0x5168548b, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ea80 [0289.904] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c90 [0289.904] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238e50 | out: hHeap=0x1f0000) returned 1 [0289.904] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0289.904] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0x5168548b, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0289.905] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238e88 [0289.905] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c90 | out: hHeap=0x1f0000) returned 1 [0289.905] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0289.905] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0289.905] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21212f9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0289.905] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605b8 [0289.905] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239208 [0289.905] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8e20 [0289.905] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239208 | out: hHeap=0x1f0000) returned 1 [0289.905] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238e88 | out: hHeap=0x1f0000) returned 1 [0289.905] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0289.905] CreateFileW (lpFileName="C:\\\\Boot\\sr-Latn-CS\\bootmgr.exe.mui" (normalized: "c:\\boot\\sr-latn-cs\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0289.906] GetLastError () returned 0x5 [0289.906] GetLastError () returned 0x5 [0289.906] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0xe318f070, ftLastWriteTime.dwHighDateTime=0x1d112e1, nFileSizeHigh=0x0, nFileSizeLow=0xaf58, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0289.906] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605b8 [0289.906] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239080 [0289.906] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8e78 [0289.906] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239080 | out: hHeap=0x1f0000) returned 1 [0289.906] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8e20 | out: hHeap=0x1f0000) returned 1 [0289.906] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0289.907] CreateFileW (lpFileName="C:\\\\Boot\\sr-Latn-CS\\memtest.exe.mui" (normalized: "c:\\boot\\sr-latn-cs\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0289.907] GetLastError () returned 0x5 [0289.907] GetLastError () returned 0x5 [0289.907] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0xe318f070, ftLastWriteTime.dwHighDateTime=0x1d112e1, nFileSizeHigh=0x0, nFileSizeLow=0xaf58, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0289.907] FindClose (in: hFindFile=0x24ea80 | out: hFindFile=0x24ea80) returned 1 [0289.908] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8e78 | out: hHeap=0x1f0000) returned 1 [0289.908] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d508 | out: hHeap=0x1f0000) returned 1 [0289.908] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0289.909] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2293b8 | out: hHeap=0x1f0000) returned 1 [0289.909] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229010 [0289.909] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0289.909] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d9d0 [0289.909] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239048 [0289.909] FindFirstFileW (in: lpFileName="C:\\\\Boot\\sr-Latn-RS\\*", lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24eb40 [0289.909] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239278 [0289.909] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239048 | out: hHeap=0x1f0000) returned 1 [0289.910] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0289.910] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0289.910] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238d00 [0289.910] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239278 | out: hHeap=0x1f0000) returned 1 [0289.910] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0289.910] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0289.910] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21212f9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0289.910] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0289.910] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238f30 [0289.910] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8d18 [0289.911] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238f30 | out: hHeap=0x1f0000) returned 1 [0289.911] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238d00 | out: hHeap=0x1f0000) returned 1 [0289.911] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0289.911] CreateFileW (lpFileName="C:\\\\Boot\\sr-Latn-RS\\bootmgr.exe.mui" (normalized: "c:\\boot\\sr-latn-rs\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0289.911] GetLastError () returned 0x5 [0289.911] GetLastError () returned 0x5 [0289.912] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21212f9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0289.912] FindClose (in: hFindFile=0x24eb40 | out: hFindFile=0x24eb40) returned 1 [0289.912] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0289.912] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d9d0 | out: hHeap=0x1f0000) returned 1 [0289.912] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0289.912] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229010 | out: hHeap=0x1f0000) returned 1 [0289.912] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229298 [0289.912] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0289.912] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f350 [0289.913] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238d00 [0289.913] FindFirstFileW (in: lpFileName="C:\\\\Boot\\sv-SE\\*", lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01adf43, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6a2250, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e900 [0289.913] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260630 [0289.913] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c90 [0289.913] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260630 | out: hHeap=0x1f0000) returned 1 [0289.913] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238d00 | out: hHeap=0x1f0000) returned 1 [0289.913] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0289.913] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01adf43, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6a2250, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0289.914] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0289.914] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238f30 [0289.914] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0289.914] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c90 | out: hHeap=0x1f0000) returned 1 [0289.914] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0289.914] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0289.914] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12960, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0289.914] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0289.914] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0289.915] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229058 [0289.915] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0289.915] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238f30 | out: hHeap=0x1f0000) returned 1 [0289.915] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0289.915] CreateFileW (lpFileName="C:\\\\Boot\\sv-SE\\bootmgr.exe.mui" (normalized: "c:\\boot\\sv-se\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0289.915] GetLastError () returned 0x5 [0289.915] GetLastError () returned 0x5 [0289.916] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6a2250, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f699a6, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xaf98, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0289.916] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0289.916] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0289.916] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2290e8 [0289.916] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0289.916] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229058 | out: hHeap=0x1f0000) returned 1 [0289.916] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0289.917] CreateFileW (lpFileName="C:\\\\Boot\\sv-SE\\memtest.exe.mui" (normalized: "c:\\boot\\sv-se\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0289.917] GetLastError () returned 0x5 [0289.917] GetLastError () returned 0x5 [0289.917] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6a2250, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f699a6, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xaf98, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0289.917] FindClose (in: hFindFile=0x24e900 | out: hFindFile=0x24e900) returned 1 [0289.917] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2290e8 | out: hHeap=0x1f0000) returned 1 [0289.917] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f350 | out: hHeap=0x1f0000) returned 1 [0289.918] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0289.918] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229298 | out: hHeap=0x1f0000) returned 1 [0289.918] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2290e8 [0289.918] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0289.918] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f350 [0289.918] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238f30 [0289.918] FindFirstFileW (in: lpFileName="C:\\\\Boot\\tr-TR\\*", lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206504, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6b5aca, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ed00 [0289.918] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0289.918] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238f68 [0289.919] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0289.919] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238f30 | out: hHeap=0x1f0000) returned 1 [0289.919] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0289.919] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206504, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6b5aca, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0289.919] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0289.919] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239160 [0289.919] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0289.919] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238f68 | out: hHeap=0x1f0000) returned 1 [0289.919] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0289.919] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0289.919] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210e1cce, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12558, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0289.919] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0289.919] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0289.920] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229178 [0289.920] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0289.920] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239160 | out: hHeap=0x1f0000) returned 1 [0289.920] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0289.920] CreateFileW (lpFileName="C:\\\\Boot\\tr-TR\\bootmgr.exe.mui" (normalized: "c:\\boot\\tr-tr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0289.920] GetLastError () returned 0x5 [0289.920] GetLastError () returned 0x5 [0289.921] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6b5aca, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f4373a, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0289.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0289.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260630 [0289.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229058 [0289.921] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260630 | out: hHeap=0x1f0000) returned 1 [0289.921] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229178 | out: hHeap=0x1f0000) returned 1 [0289.921] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0289.922] CreateFileW (lpFileName="C:\\\\Boot\\tr-TR\\memtest.exe.mui" (normalized: "c:\\boot\\tr-tr\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0289.922] GetLastError () returned 0x5 [0289.922] GetLastError () returned 0x5 [0289.922] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6b5aca, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f4373a, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0289.922] FindClose (in: hFindFile=0x24ed00 | out: hFindFile=0x24ed00) returned 1 [0289.923] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229058 | out: hHeap=0x1f0000) returned 1 [0289.923] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f350 | out: hHeap=0x1f0000) returned 1 [0289.923] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0289.923] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2290e8 | out: hHeap=0x1f0000) returned 1 [0289.923] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229130 [0289.923] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260630 [0289.923] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d9d0 [0289.924] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238e88 [0289.924] FindFirstFileW (in: lpFileName="C:\\\\Boot\\uk-UA\\*", lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206a30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ec80 [0289.924] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0289.924] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c90 [0289.924] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0289.924] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238e88 | out: hHeap=0x1f0000) returned 1 [0289.924] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0289.925] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206a30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0289.925] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0289.925] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239208 [0289.925] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0289.925] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c90 | out: hHeap=0x1f0000) returned 1 [0289.925] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0289.925] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0289.925] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210e1cce, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0289.925] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0289.925] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0289.925] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228ef0 [0289.925] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0289.926] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239208 | out: hHeap=0x1f0000) returned 1 [0289.926] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0289.926] CreateFileW (lpFileName="C:\\\\Boot\\uk-UA\\bootmgr.exe.mui" (normalized: "c:\\boot\\uk-ua\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0289.926] GetLastError () returned 0x5 [0289.926] GetLastError () returned 0x5 [0289.927] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210e1cce, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0289.927] FindClose (in: hFindFile=0x24ec80 | out: hFindFile=0x24ec80) returned 1 [0289.927] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228ef0 | out: hHeap=0x1f0000) returned 1 [0289.927] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d9d0 | out: hHeap=0x1f0000) returned 1 [0289.927] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260630 | out: hHeap=0x1f0000) returned 1 [0289.927] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229130 | out: hHeap=0x1f0000) returned 1 [0289.927] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228e60 [0289.927] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0289.927] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f350 [0289.927] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c90 [0289.927] FindFirstFileW (in: lpFileName="C:\\\\Boot\\zh-CN\\*", lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207100, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6d7e9a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ec80 [0289.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0289.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239048 [0289.928] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0289.928] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c90 | out: hHeap=0x1f0000) returned 1 [0289.928] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0289.928] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207100, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6d7e9a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0289.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605b8 [0289.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238d00 [0289.929] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0289.929] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239048 | out: hHeap=0x1f0000) returned 1 [0289.929] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0289.929] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0289.929] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xf960, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0289.929] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0289.929] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0289.929] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229010 [0289.929] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0289.929] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238d00 | out: hHeap=0x1f0000) returned 1 [0289.930] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0290.223] CreateFileW (lpFileName="C:\\\\Boot\\zh-CN\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-cn\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0290.223] GetLastError () returned 0x5 [0290.224] GetLastError () returned 0x5 [0290.224] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6d7e9a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa5a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0290.224] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0290.224] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0290.224] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2293b8 [0290.225] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0290.225] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229010 | out: hHeap=0x1f0000) returned 1 [0290.225] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0290.225] CreateFileW (lpFileName="C:\\\\Boot\\zh-CN\\memtest.exe.mui" (normalized: "c:\\boot\\zh-cn\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0290.226] GetLastError () returned 0x5 [0290.226] GetLastError () returned 0x5 [0290.226] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6d7e9a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa5a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0290.226] FindClose (in: hFindFile=0x24ec80 | out: hFindFile=0x24ec80) returned 1 [0290.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2293b8 | out: hHeap=0x1f0000) returned 1 [0290.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f350 | out: hHeap=0x1f0000) returned 1 [0290.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0290.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228e60 | out: hHeap=0x1f0000) returned 1 [0290.227] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228e60 [0290.227] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0290.227] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f350 [0290.227] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c90 [0290.228] FindFirstFileW (in: lpFileName="C:\\\\Boot\\zh-HK\\*", lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207675, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x518ea25e, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ea80 [0290.228] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0290.229] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239010 [0290.229] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0290.229] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c90 | out: hHeap=0x1f0000) returned 1 [0290.229] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0290.229] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207675, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x518ea25e, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0290.229] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0290.229] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2390b8 [0290.229] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0290.229] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239010 | out: hHeap=0x1f0000) returned 1 [0290.230] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0290.230] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0290.230] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xf958, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0290.230] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0290.230] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0290.230] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228ea8 [0290.230] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0290.230] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2390b8 | out: hHeap=0x1f0000) returned 1 [0290.230] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0290.231] CreateFileW (lpFileName="C:\\\\Boot\\zh-HK\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-hk\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0290.231] GetLastError () returned 0x5 [0290.231] GetLastError () returned 0x5 [0290.232] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x518ea25e, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0xe31db522, ftLastWriteTime.dwHighDateTime=0x1d112e1, nFileSizeHigh=0x0, nFileSizeLow=0xa558, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0290.232] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0290.232] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0290.232] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2290e8 [0290.232] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0290.232] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228ea8 | out: hHeap=0x1f0000) returned 1 [0290.232] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0290.233] CreateFileW (lpFileName="C:\\\\Boot\\zh-HK\\memtest.exe.mui" (normalized: "c:\\boot\\zh-hk\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0290.233] GetLastError () returned 0x5 [0290.233] GetLastError () returned 0x5 [0290.234] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x518ea25e, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0xe31db522, ftLastWriteTime.dwHighDateTime=0x1d112e1, nFileSizeHigh=0x0, nFileSizeLow=0xa558, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0290.234] FindClose (in: hFindFile=0x24ea80 | out: hFindFile=0x24ea80) returned 1 [0290.234] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2290e8 | out: hHeap=0x1f0000) returned 1 [0290.235] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f350 | out: hHeap=0x1f0000) returned 1 [0290.235] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0290.235] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228e60 | out: hHeap=0x1f0000) returned 1 [0290.235] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2291c0 [0290.235] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0290.235] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f350 [0290.235] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239048 [0290.235] FindFirstFileW (in: lpFileName="C:\\\\Boot\\zh-TW\\*", lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e980 [0290.236] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605b8 [0290.236] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238f30 [0290.236] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0290.236] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239048 | out: hHeap=0x1f0000) returned 1 [0290.236] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0290.236] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0290.237] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0290.237] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239208 [0290.237] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0290.237] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238f30 | out: hHeap=0x1f0000) returned 1 [0290.237] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0290.237] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0290.237] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xf960, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0290.237] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0290.237] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0290.238] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229178 [0290.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0290.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239208 | out: hHeap=0x1f0000) returned 1 [0290.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0290.239] CreateFileW (lpFileName="C:\\\\Boot\\zh-TW\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-tw\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0290.239] GetLastError () returned 0x5 [0290.239] GetLastError () returned 0x5 [0290.239] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa598, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0290.239] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0290.239] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0290.240] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2293b8 [0290.240] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0290.240] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229178 | out: hHeap=0x1f0000) returned 1 [0290.240] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0290.240] CreateFileW (lpFileName="C:\\\\Boot\\zh-TW\\memtest.exe.mui" (normalized: "c:\\boot\\zh-tw\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eadc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0290.241] GetLastError () returned 0x5 [0290.241] GetLastError () returned 0x5 [0290.241] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa598, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0290.241] FindClose (in: hFindFile=0x24e980 | out: hFindFile=0x24e980) returned 1 [0290.242] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2293b8 | out: hHeap=0x1f0000) returned 1 [0290.242] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f350 | out: hHeap=0x1f0000) returned 1 [0290.242] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0290.242] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2291c0 | out: hHeap=0x1f0000) returned 1 [0290.242] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0290.242] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0290.243] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0290.243] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0290.243] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0290.243] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0290.243] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0290.243] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0290.243] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0290.243] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0290.243] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0290.244] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238528 | out: hHeap=0x1f0000) returned 1 [0290.244] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238578 | out: hHeap=0x1f0000) returned 1 [0290.244] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385f0 | out: hHeap=0x1f0000) returned 1 [0290.244] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238550 | out: hHeap=0x1f0000) returned 1 [0290.244] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238690 | out: hHeap=0x1f0000) returned 1 [0290.244] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238668 | out: hHeap=0x1f0000) returned 1 [0290.244] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385a0 | out: hHeap=0x1f0000) returned 1 [0290.244] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238758 | out: hHeap=0x1f0000) returned 1 [0290.245] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238618 | out: hHeap=0x1f0000) returned 1 [0290.245] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238708 | out: hHeap=0x1f0000) returned 1 [0290.245] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238640 | out: hHeap=0x1f0000) returned 1 [0290.245] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2386e0 | out: hHeap=0x1f0000) returned 1 [0290.245] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385c8 | out: hHeap=0x1f0000) returned 1 [0290.245] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238780 | out: hHeap=0x1f0000) returned 1 [0290.245] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2386b8 | out: hHeap=0x1f0000) returned 1 [0290.246] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238730 | out: hHeap=0x1f0000) returned 1 [0290.246] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238cc8 | out: hHeap=0x1f0000) returned 1 [0290.246] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238e18 | out: hHeap=0x1f0000) returned 1 [0290.246] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0290.246] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0290.246] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260838 | out: hHeap=0x1f0000) returned 1 [0290.246] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0290.246] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c58 | out: hHeap=0x1f0000) returned 1 [0290.247] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2390f0 | out: hHeap=0x1f0000) returned 1 [0290.247] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0290.247] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0290.247] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0290.247] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0290.247] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0290.247] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0290.247] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220748 | out: hHeap=0x1f0000) returned 1 [0290.247] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ee88 | out: hHeap=0x1f0000) returned 1 [0290.248] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0290.248] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228e18 | out: hHeap=0x1f0000) returned 1 [0290.248] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229010 [0290.248] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0290.248] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22ee88 [0290.248] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229298 [0290.248] FindFirstFileW (in: lpFileName="C:\\\\Documents and Settings\\*", lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="\"ųⷾ眽Ə")) returned 0xffffffff [0290.250] GetLastError () returned 0x5 [0290.251] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="畦正", cchWideChar=2, lpMultiByteStr=0x173da10, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ç\x95¦æ­£_¯\x0bû\\Z\x7f3ÎM¤T_¯", lpUsedDefaultChar=0x0) returned 6 [0290.251] WriteFile (in: hFile=0x90, lpBuffer=0x173da10, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x173da08, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x173da08, lpOverlapped=0x0) returned 0 [0290.251] GetLastError () returned 0x6 [0290.251] GetLastError () returned 0x6 [0290.252] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2291c0 [0290.252] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x236468 [0290.252] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2291c0 | out: hHeap=0x1f0000) returned 1 [0290.252] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229298 | out: hHeap=0x1f0000) returned 1 [0290.252] lstrcmpW (lpString1="zh-TW", lpString2=".") returned 1 [0290.252] lstrcmpW (lpString1="zh-TW", lpString2="..") returned 1 [0290.252] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204d70 [0290.252] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8dc8 [0290.253] FindNextFileW (in: hFindFile=0xffffffff, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="\"ųⷾ眽Ə")) returned 0 [0290.253] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0290.253] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2291c0 [0290.253] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0290.253] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f350 [0290.253] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8d18 [0290.253] FindFirstFileW (in: lpFileName="C:\\\\Documents and Settings\\zh-TW\\*", lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x7726971a, ftCreationTime.dwLowDateTime=0x215758, ftCreationTime.dwHighDateTime=0x215638, ftLastAccessTime.dwLowDateTime=0x7726964e, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x3c003c, nFileSizeHigh=0x229058, nFileSizeLow=0x20002, dwReserved0=0x229094, dwReserved1=0x3a0038, cFileName="銘\"ųest.", cAlternateFileName="Ɛ")) returned 0xffffffff [0290.257] GetLastError () returned 0x3 [0290.257] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="畦正res.dll.mui", cchWideChar=2, lpMultiByteStr=0x173d5f4, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ç\x95¦æ­£", lpUsedDefaultChar=0x0) returned 6 [0290.258] WriteFile (in: hFile=0x90, lpBuffer=0x173d5f4, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x173d5ec, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x173d5ec, lpOverlapped=0x0) returned 0 [0290.258] GetLastError () returned 0x6 [0290.258] GetLastError () returned 0x6 [0290.258] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0290.512] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8e20 [0290.512] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x2181d0 [0290.513] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8e20 | out: hHeap=0x1f0000) returned 1 [0290.513] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0290.513] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0290.513] lstrcmpW (lpString1="銘\"ųest.", lpString2=".") returned 1 [0290.513] lstrcmpW (lpString1="銘\"ųest.", lpString2="..") returned 1 [0290.513] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204c30 [0290.513] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2364d0 [0290.513] FindNextFileW (in: hFindFile=0xffffffff, lpFindFileData=0x173ed14 | out: lpFindFileData=0x173ed14*(dwFileAttributes=0x7726971a, ftCreationTime.dwLowDateTime=0x215758, ftCreationTime.dwHighDateTime=0x215638, ftLastAccessTime.dwLowDateTime=0x7726964e, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x3c003c, nFileSizeHigh=0x229058, nFileSizeLow=0x20002, dwReserved0=0x229094, dwReserved1=0x3a0038, cFileName="銘\"ųest.", cAlternateFileName="Ɛ")) returned 0 [0290.513] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0290.513] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228f38 [0290.513] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260770 [0290.514] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d508 [0290.514] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236538 [0290.514] FindFirstFileW (in: lpFileName="C:\\\\Documents and Settings\\zh-TW\\銘\"ųest.\\*", lpFindFileData=0x173e8f8 | out: lpFindFileData=0x173e8f8*(dwFileAttributes=0xc000003a, ftCreationTime.dwLowDateTime=0x7726971a, ftCreationTime.dwHighDateTime=0x204d88, ftLastAccessTime.dwLowDateTime=0x204d70, ftLastAccessTime.dwHighDateTime=0x7726964e, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x480048, nFileSizeLow=0x2a8e20, dwReserved0=0x20002, dwReserved1=0x2a8e68, cFileName="DF贘*ų\x03", cAlternateFileName="픈\"ųⷾ眽Ə")) returned 0xffffffff [0290.514] GetLastError () returned 0x3 [0290.515] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="畦正毒캲序?㴞翠毒캲", cchWideChar=2, lpMultiByteStr=0x173d1d8, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ç\x95¦æ­£", lpUsedDefaultChar=0x0) returned 6 [0290.515] WriteFile (in: hFile=0x90, lpBuffer=0x173d1d8, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x173d1d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x173d1d0, lpOverlapped=0x0) returned 0 [0290.515] GetLastError () returned 0x6 [0290.515] GetLastError () returned 0x6 [0290.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2365a0 [0290.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220cf0 [0290.515] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2365a0 | out: hHeap=0x1f0000) returned 1 [0290.515] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236538 | out: hHeap=0x1f0000) returned 1 [0290.516] lstrcmpW (lpString1="DF贘*ų\x03", lpString2=".") returned 1 [0290.516] lstrcmpW (lpString1="DF贘*ų\x03", lpString2="..") returned 1 [0290.516] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204d90 [0290.516] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae6d8 [0290.516] FindNextFileW (in: hFindFile=0xffffffff, lpFindFileData=0x173e8f8 | out: lpFindFileData=0x173e8f8*(dwFileAttributes=0xc000003a, ftCreationTime.dwLowDateTime=0x7726971a, ftCreationTime.dwHighDateTime=0x204d88, ftLastAccessTime.dwLowDateTime=0x204d70, ftLastAccessTime.dwHighDateTime=0x7726964e, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x480048, nFileSizeLow=0x2a8e20, dwReserved0=0x20002, dwReserved1=0x2a8e68, cFileName="DF贘*ų\x03", cAlternateFileName="픈\"ųⷾ眽Ə")) returned 0 [0290.516] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0290.516] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229130 [0290.516] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0290.516] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d6a0 [0290.516] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae228 [0290.516] FindFirstFileW (in: lpFileName="C:\\\\Documents and Settings\\zh-TW\\銘\"ųest.\\DF贘*ų\x03\\*", lpFindFileData=0x173e4dc | out: lpFindFileData=0x173e4dc*(dwFileAttributes=0x7726971a, ftCreationTime.dwLowDateTime=0x204c48, ftCreationTime.dwHighDateTime=0x204c30, ftLastAccessTime.dwLowDateTime=0x7726964e, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x580058, nFileSizeHigh=0x2365a0, nFileSizeLow=0x20002, dwReserved0=0x2365f8, dwReserved1=0x580056, cFileName="攸#ų", cAlternateFileName="Ɛ")) returned 0xffffffff [0290.517] GetLastError () returned 0x3 [0290.517] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="畦正덪尡ឩ퀁軌樰", cchWideChar=2, lpMultiByteStr=0x173cdbc, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ç\x95¦æ­£", lpUsedDefaultChar=0x0) returned 6 [0290.517] WriteFile (in: hFile=0x90, lpBuffer=0x173cdbc, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x173cdb4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x173cdb4, lpOverlapped=0x0) returned 0 [0290.517] GetLastError () returned 0x6 [0290.517] GetLastError () returned 0x6 [0290.517] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2aec00 [0290.517] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae228 | out: hHeap=0x1f0000) returned 1 [0290.517] lstrcmpW (lpString1="攸#ų", lpString2=".") returned 1 [0290.518] lstrcmpW (lpString1="攸#ų", lpString2="..") returned 1 [0290.518] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204f10 [0290.518] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae390 [0290.518] FindNextFileW (in: hFindFile=0xffffffff, lpFindFileData=0x173e4dc | out: lpFindFileData=0x173e4dc*(dwFileAttributes=0x7726971a, ftCreationTime.dwLowDateTime=0x204c48, ftCreationTime.dwHighDateTime=0x204c30, ftLastAccessTime.dwLowDateTime=0x7726964e, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x580058, nFileSizeHigh=0x2365a0, nFileSizeLow=0x20002, dwReserved0=0x2365f8, dwReserved1=0x580056, cFileName="攸#ų", cAlternateFileName="Ɛ")) returned 0 [0290.518] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0290.518] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228e18 [0290.518] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0290.518] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d9d0 [0290.518] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211e10 [0290.518] FindFirstFileW (in: lpFileName="C:\\\\Documents and Settings\\zh-TW\\銘\"ųest.\\DF贘*ų\x03\\攸#ų\\*", lpFindFileData=0x173e0c0 | out: lpFindFileData=0x173e0c0*(dwFileAttributes=0xc000003a, ftCreationTime.dwLowDateTime=0x7726971a, ftCreationTime.dwHighDateTime=0x204da8, ftLastAccessTime.dwLowDateTime=0x204d90, ftLastAccessTime.dwHighDateTime=0x7726964e, ftLastWriteTime.dwLowDateTime=0x2fc7f36b, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x680068, nFileSizeLow=0x2ae048, dwReserved0=0x20002, dwReserved1=0x2ae0b0, cFileName="fh*ų彞㽍", cAlternateFileName="?\"ųⷾ眽Ə")) returned 0xffffffff [0290.519] GetLastError () returned 0x3 [0290.519] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="畦正", cchWideChar=2, lpMultiByteStr=0x173c9a0, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ç\x95¦æ­£", lpUsedDefaultChar=0x0) returned 6 [0290.519] WriteFile (in: hFile=0x90, lpBuffer=0x173c9a0, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x173c998, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x173c998, lpOverlapped=0x0) returned 0 [0290.519] GetLastError () returned 0x6 [0290.519] GetLastError () returned 0x6 [0290.519] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0290.519] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae138 [0290.519] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218978 [0290.519] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae138 | out: hHeap=0x1f0000) returned 1 [0290.519] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e10 | out: hHeap=0x1f0000) returned 1 [0290.519] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0290.519] lstrcmpW (lpString1="fh*ų彞㽍", lpString2=".") returned 1 [0290.519] lstrcmpW (lpString1="fh*ų彞㽍", lpString2="..") returned 1 [0290.519] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204db0 [0290.519] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0290.520] FindNextFileW (in: hFindFile=0xffffffff, lpFindFileData=0x173e0c0 | out: lpFindFileData=0x173e0c0*(dwFileAttributes=0xc000003a, ftCreationTime.dwLowDateTime=0x7726971a, ftCreationTime.dwHighDateTime=0x204da8, ftLastAccessTime.dwLowDateTime=0x204d90, ftLastAccessTime.dwHighDateTime=0x7726964e, ftLastWriteTime.dwLowDateTime=0x2fc7f36b, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x680068, nFileSizeLow=0x2ae048, dwReserved0=0x20002, dwReserved1=0x2ae0b0, cFileName="fh*ų彞㽍", cAlternateFileName="?\"ųⷾ眽Ə")) returned 0 [0290.520] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0290.520] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229250 [0290.520] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0290.520] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22db68 [0290.520] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0290.520] FindFirstFileW (in: lpFileName="C:\\\\Documents and Settings\\zh-TW\\銘\"ųest.\\DF贘*ų\x03\\攸#ų\\fh*ų彞㽍\\*", lpFindFileData=0x173dca4 | out: lpFindFileData=0x173dca4*(dwFileAttributes=0x7726971a, ftCreationTime.dwLowDateTime=0x204f28, ftCreationTime.dwHighDateTime=0x204f10, ftLastAccessTime.dwLowDateTime=0x7726964e, ftLastAccessTime.dwHighDateTime=0x740651f4, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x720072, nFileSizeHigh=0x218350, nFileSizeLow=0x20002, dwReserved0=0x2183c2, dwReserved1=0x720070, cFileName="Ḑ!ų즘 ", cAlternateFileName="Ɛ")) returned 0xffffffff [0290.520] GetLastError () returned 0x3 [0290.520] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="畦正ų귉ãǀ", cchWideChar=2, lpMultiByteStr=0x173c584, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ç\x95¦æ­£", lpUsedDefaultChar=0x0) returned 6 [0290.520] WriteFile (in: hFile=0x90, lpBuffer=0x173c584, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x173c57c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x173c57c, lpOverlapped=0x0) returned 0 [0290.521] GetLastError () returned 0x6 [0290.521] GetLastError () returned 0x6 [0290.521] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0290.521] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x210270 [0290.521] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0290.521] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0290.521] lstrcmpW (lpString1="Ḑ!ų즘 ", lpString2=".") returned 1 [0290.521] lstrcmpW (lpString1="Ḑ!ų즘 ", lpString2="..") returned 1 [0290.521] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204bf0 [0290.521] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a038 [0290.521] FindNextFileW (in: hFindFile=0xffffffff, lpFindFileData=0x173dca4 | out: lpFindFileData=0x173dca4*(dwFileAttributes=0x7726971a, ftCreationTime.dwLowDateTime=0x204f28, ftCreationTime.dwHighDateTime=0x204f10, ftLastAccessTime.dwLowDateTime=0x7726964e, ftLastAccessTime.dwHighDateTime=0x740651f4, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x720072, nFileSizeHigh=0x218350, nFileSizeLow=0x20002, dwReserved0=0x2183c2, dwReserved1=0x720070, cFileName="Ḑ!ų즘 ", cAlternateFileName="Ɛ")) returned 0 [0290.521] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0290.521] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228f80 [0290.521] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0290.521] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22de98 [0290.522] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a620 [0290.522] FindFirstFileW (in: lpFileName="C:\\\\Documents and Settings\\zh-TW\\銘\"ųest.\\DF贘*ų\x03\\攸#ų\\fh*ų彞㽍\\Ḑ!ų즘 \\*", lpFindFileData=0x173d888 | out: lpFindFileData=0x173d888*(dwFileAttributes=0xc000003a, ftCreationTime.dwLowDateTime=0x7726971a, ftCreationTime.dwHighDateTime=0x204dc8, ftLastAccessTime.dwLowDateTime=0x204db0, ftLastAccessTime.dwHighDateTime=0x7726964e, ftLastWriteTime.dwLowDateTime=0x74064f40, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x880088, nFileSizeLow=0x221a98, dwReserved0=0x20002, dwReserved1=0x221b20, cFileName="\x86\x88ᣐ\"?ų", cAlternateFileName="?\"?ųⷾ眽Ə")) returned 0xffffffff [0290.522] GetLastError () returned 0x3 [0290.522] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="畦正귉ãŴ", cchWideChar=2, lpMultiByteStr=0x173c168, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ç\x95¦æ­£", lpUsedDefaultChar=0x0) returned 6 [0290.522] WriteFile (in: hFile=0x90, lpBuffer=0x173c168, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x173c160, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x173c160, lpOverlapped=0x0) returned 0 [0290.532] GetLastError () returned 0x6 [0290.532] GetLastError () returned 0x6 [0290.532] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a4d0 [0290.533] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a620 | out: hHeap=0x1f0000) returned 1 [0290.533] lstrcmpW (lpString1="\x86\x88ᣐ\"?ų", lpString2=".") returned 1 [0290.533] lstrcmpW (lpString1="\x86\x88ᣐ\"?ų", lpString2="..") returned 1 [0290.533] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204dd0 [0290.533] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a968 [0290.533] FindNextFileW (in: hFindFile=0xffffffff, lpFindFileData=0x173d888 | out: lpFindFileData=0x173d888*(dwFileAttributes=0xc000003a, ftCreationTime.dwLowDateTime=0x7726971a, ftCreationTime.dwHighDateTime=0x204dc8, ftLastAccessTime.dwLowDateTime=0x204db0, ftLastAccessTime.dwHighDateTime=0x7726964e, ftLastWriteTime.dwLowDateTime=0x74064f40, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x880088, nFileSizeLow=0x221a98, dwReserved0=0x20002, dwReserved1=0x221b20, cFileName="\x86\x88ᣐ\"?ų", cAlternateFileName="?\"?ųⷾ眽Ə")) returned 0 [0290.533] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0290.533] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228e60 [0290.533] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0290.534] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x227850 [0290.534] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad358 [0290.534] FindFirstFileW (in: lpFileName="C:\\\\Documents and Settings\\zh-TW\\銘\"ųest.\\DF贘*ų\x03\\攸#ų\\fh*ų彞㽍\\Ḑ!ų즘 \\\x86\x88ᣐ\"?ų\\*", lpFindFileData=0x173d46c | out: lpFindFileData=0x173d46c*(dwFileAttributes=0x7726971a, ftCreationTime.dwLowDateTime=0x204c08, ftCreationTime.dwHighDateTime=0x204bf0, ftLastAccessTime.dwLowDateTime=0x7726964e, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x960096, nFileSizeHigh=0x21ab60, nFileSizeLow=0x20002, dwReserved0=0x21abf6, dwReserved1=0x960094, cFileName="꘠!?ų", cAlternateFileName="Ɛ")) returned 0xffffffff [0290.534] GetLastError () returned 0x3 [0290.535] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="畦正", cchWideChar=2, lpMultiByteStr=0x173bd4c, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ç\x95¦æ­£", lpUsedDefaultChar=0x0) returned 6 [0290.535] WriteFile (in: hFile=0x90, lpBuffer=0x173bd4c, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x173bd44, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x173bd44, lpOverlapped=0x0) returned 0 [0290.536] GetLastError () returned 0x6 [0290.536] GetLastError () returned 0x6 [0290.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad410 [0290.536] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad358 | out: hHeap=0x1f0000) returned 1 [0290.536] lstrcmpW (lpString1="꘠!?ų", lpString2=".") returned 1 [0290.536] lstrcmpW (lpString1="꘠!?ų", lpString2="..") returned 1 [0290.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204e70 [0290.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad580 [0290.536] FindNextFileW (in: hFindFile=0xffffffff, lpFindFileData=0x173d46c | out: lpFindFileData=0x173d46c*(dwFileAttributes=0x7726971a, ftCreationTime.dwLowDateTime=0x204c08, ftCreationTime.dwHighDateTime=0x204bf0, ftLastAccessTime.dwLowDateTime=0x7726964e, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x960096, nFileSizeHigh=0x21ab60, nFileSizeLow=0x20002, dwReserved0=0x21abf6, dwReserved1=0x960094, cFileName="꘠!?ų", cAlternateFileName="Ɛ")) returned 0 [0290.536] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0290.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228d88 [0290.537] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0290.537] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x226d28 [0290.537] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad4c8 [0290.537] FindFirstFileW (in: lpFileName="C:\\\\Documents and Settings\\zh-TW\\銘\"ųest.\\DF贘*ų\x03\\攸#ų\\fh*ų彞㽍\\Ḑ!ų즘 \\\x86\x88ᣐ\"?ų\\꘠!?ų\\*", lpFindFileData=0x173d050 | out: lpFindFileData=0x173d050*(dwFileAttributes=0xc000003a, ftCreationTime.dwLowDateTime=0x7726971a, ftCreationTime.dwHighDateTime=0x204de8, ftLastAccessTime.dwLowDateTime=0x204dd0, ftLastAccessTime.dwHighDateTime=0x7726964e, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0xa400a4, nFileSizeLow=0x218768, dwReserved0=0x20002, dwReserved1=0x21880c, cFileName="¢¤퍘*푬ų", cAlternateFileName="洨\"튬ųⷾ眽Ə")) returned 0xffffffff [0290.537] GetLastError () returned 0x3 [0290.537] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="畦正", cchWideChar=2, lpMultiByteStr=0x173b930, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ç\x95¦æ­£", lpUsedDefaultChar=0x0) returned 6 [0290.537] WriteFile (in: hFile=0x90, lpBuffer=0x173b930, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x173b928, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x173b928, lpOverlapped=0x0) returned 0 [0290.538] GetLastError () returned 0x6 [0290.538] GetLastError () returned 0x6 [0290.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad638 [0290.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x106) returned 0x233238 [0290.538] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad638 | out: hHeap=0x1f0000) returned 1 [0290.538] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad4c8 | out: hHeap=0x1f0000) returned 1 [0290.538] lstrcmpW (lpString1="¢¤퍘*푬ų", lpString2=".") returned 1 [0290.538] lstrcmpW (lpString1="¢¤퍘*푬ų", lpString2="..") returned 1 [0290.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204df0 [0290.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x230320 [0290.539] FindNextFileW (in: hFindFile=0xffffffff, lpFindFileData=0x173d050 | out: lpFindFileData=0x173d050*(dwFileAttributes=0xc000003a, ftCreationTime.dwLowDateTime=0x7726971a, ftCreationTime.dwHighDateTime=0x204de8, ftLastAccessTime.dwLowDateTime=0x204dd0, ftLastAccessTime.dwHighDateTime=0x7726964e, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0xa400a4, nFileSizeLow=0x218768, dwReserved0=0x20002, dwReserved1=0x21880c, cFileName="¢¤퍘*푬ų", cAlternateFileName="洨\"튬ųⷾ眽Ə")) returned 0 [0290.539] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0290.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228ea8 [0290.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0290.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x226ec0 [0290.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f8f8 [0290.539] FindFirstFileW (in: lpFileName="C:\\\\Documents and Settings\\zh-TW\\銘\"ųest.\\DF贘*ų\x03\\攸#ų\\fh*ų彞㽍\\Ḑ!ų즘 \\\x86\x88ᣐ\"?ų\\꘠!?ų\\¢¤퍘*푬ų\\*", lpFindFileData=0x173cc34 | out: lpFindFileData=0x173cc34*(dwFileAttributes=0x7726971a, ftCreationTime.dwLowDateTime=0x204e88, ftCreationTime.dwHighDateTime=0x204e70, ftLastAccessTime.dwLowDateTime=0x7726964e, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0xae00ae, nFileSizeHigh=0x2370e0, nFileSizeLow=0x20002, dwReserved0=0x23718e, dwReserved1=0xae00ac, cFileName="퓈*큐ų", cAlternateFileName="Ɛ")) returned 0xffffffff [0290.540] GetLastError () returned 0x3 [0290.540] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="畦正", cchWideChar=2, lpMultiByteStr=0x173b514, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ç\x95¦æ­£", lpUsedDefaultChar=0x0) returned 6 [0290.540] WriteFile (in: hFile=0x90, lpBuffer=0x173b514, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x173b50c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x173b50c, lpOverlapped=0x0) returned 0 [0290.540] GetLastError () returned 0x6 [0290.540] GetLastError () returned 0x6 [0290.540] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x2300c8 [0290.540] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x11e) returned 0x210830 [0290.540] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0290.540] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0290.540] lstrcmpW (lpString1="퓈*큐ų", lpString2=".") returned 1 [0290.540] lstrcmpW (lpString1="퓈*큐ų", lpString2="..") returned 1 [0290.540] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204f30 [0290.541] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x2007c8 [0290.541] FindNextFileW (in: hFindFile=0xffffffff, lpFindFileData=0x173cc34 | out: lpFindFileData=0x173cc34*(dwFileAttributes=0x7726971a, ftCreationTime.dwLowDateTime=0x204e88, ftCreationTime.dwHighDateTime=0x204e70, ftLastAccessTime.dwLowDateTime=0x7726964e, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0xae00ae, nFileSizeHigh=0x2370e0, nFileSizeLow=0x20002, dwReserved0=0x23718e, dwReserved1=0xae00ac, cFileName="퓈*큐ų", cAlternateFileName="Ɛ")) returned 0 [0290.541] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0290.541] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229298 [0290.541] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260518 [0290.541] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x227058 [0290.541] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x2008a0 [0290.541] FindFirstFileW (in: lpFileName="C:\\\\Documents and Settings\\zh-TW\\銘\"ųest.\\DF贘*ų\x03\\攸#ų\\fh*ų彞㽍\\Ḑ!ų즘 \\\x86\x88ᣐ\"?ų\\꘠!?ų\\¢¤퍘*푬ų\\퓈*큐ų\\*", lpFindFileData=0x173c818 | out: lpFindFileData=0x173c818*(dwFileAttributes=0xc000003a, ftCreationTime.dwLowDateTime=0x7726971a, ftCreationTime.dwHighDateTime=0x204e08, ftLastAccessTime.dwLowDateTime=0x204df0, ftLastAccessTime.dwHighDateTime=0x7726964e, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0xbc00bc, nFileSizeLow=0x22fc18, dwReserved0=0x20002, dwReserved1=0x22fcd4, cFileName="º¼\"찴ų", cAlternateFileName="灘\"쩴ųⷾ眽Ə")) returned 0xffffffff [0290.541] GetLastError () returned 0x3 [0290.542] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="畦正", cchWideChar=2, lpMultiByteStr=0x173b0f8, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ç\x95¦æ­£", lpUsedDefaultChar=0x0) returned 6 [0290.542] WriteFile (in: hFile=0x90, lpBuffer=0x173b0f8, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x173b0f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x173b0f0, lpOverlapped=0x0) returned 0 [0290.542] GetLastError () returned 0x6 [0290.542] GetLastError () returned 0x6 [0290.542] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x200978 [0290.542] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2008a0 | out: hHeap=0x1f0000) returned 1 [0290.542] lstrcmpW (lpString1="º¼\"찴ų", lpString2=".") returned 1 [0290.542] lstrcmpW (lpString1="º¼\"찴ų", lpString2="..") returned 1 [0290.542] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204bb0 [0290.542] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x2008a0 [0290.542] FindNextFileW (in: hFindFile=0xffffffff, lpFindFileData=0x173c818 | out: lpFindFileData=0x173c818*(dwFileAttributes=0xc000003a, ftCreationTime.dwLowDateTime=0x7726971a, ftCreationTime.dwHighDateTime=0x204e08, ftLastAccessTime.dwLowDateTime=0x204df0, ftLastAccessTime.dwHighDateTime=0x7726964e, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0xbc00bc, nFileSizeLow=0x22fc18, dwReserved0=0x20002, dwReserved1=0x22fcd4, cFileName="º¼\"찴ų", cAlternateFileName="灘\"쩴ųⷾ眽Ə")) returned 0 [0290.542] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0290.542] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229058 [0290.542] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0290.542] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2271f0 [0290.542] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224a60 [0290.543] FindFirstFileW (in: lpFileName="C:\\\\Documents and Settings\\zh-TW\\銘\"ųest.\\DF贘*ų\x03\\攸#ų\\fh*ų彞㽍\\Ḑ!ų즘 \\\x86\x88ᣐ\"?ų\\꘠!?ų\\¢¤퍘*푬ų\\퓈*큐ų\\º¼\"찴ų\\*", lpFindFileData=0x173c3fc | out: lpFindFileData=0x173c3fc*(dwFileAttributes=0x7726971a, ftCreationTime.dwLowDateTime=0x204f48, ftCreationTime.dwHighDateTime=0x204f30, ftLastAccessTime.dwLowDateTime=0x7726964e, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0xc600c6, nFileSizeHigh=0x200978, nFileSizeLow=0x20002, dwReserved0=0x200a3e, dwReserved1=0xc600c4, cFileName="ࢠ 젘ų", cAlternateFileName="Ɛ")) returned 0xffffffff [0290.543] GetLastError () returned 0x3 [0290.543] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="畦正", cchWideChar=2, lpMultiByteStr=0x173acdc, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ç\x95¦æ­£", lpUsedDefaultChar=0x0) returned 6 [0290.543] WriteFile (in: hFile=0x90, lpBuffer=0x173acdc, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x173acd4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x173acd4, lpOverlapped=0x0) returned 0 [0290.543] GetLastError () returned 0x6 [0290.543] GetLastError () returned 0x6 [0290.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224890 [0290.543] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224a60 | out: hHeap=0x1f0000) returned 1 [0290.544] lstrcmpW (lpString1="ࢠ 젘ų", lpString2=".") returned -1 [0290.544] lstrcmpW (lpString1="ࢠ 젘ų", lpString2="..") returned -1 [0290.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204c10 [0290.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2247a8 [0290.544] FindNextFileW (in: hFindFile=0xffffffff, lpFindFileData=0x173c3fc | out: lpFindFileData=0x173c3fc*(dwFileAttributes=0x7726971a, ftCreationTime.dwLowDateTime=0x204f48, ftCreationTime.dwHighDateTime=0x204f30, ftLastAccessTime.dwLowDateTime=0x7726964e, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0xc600c6, nFileSizeHigh=0x200978, nFileSizeLow=0x20002, dwReserved0=0x200a3e, dwReserved1=0xc600c4, cFileName="ࢠ 젘ų", cAlternateFileName="Ɛ")) returned 0 [0290.544] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0290.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2292e0 [0290.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0290.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x227388 [0290.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224238 [0290.544] FindFirstFileW (in: lpFileName="C:\\\\Documents and Settings\\zh-TW\\銘\"ųest.\\DF贘*ų\x03\\攸#ų\\fh*ų彞㽍\\Ḑ!ų즘 \\\x86\x88ᣐ\"?ų\\꘠!?ų\\¢¤퍘*푬ų\\퓈*큐ų\\º¼\"찴ų\\ࢠ 젘ų\\*", lpFindFileData=0x173bfe0 | out: lpFindFileData=0x173bfe0*(dwFileAttributes=0xc000003a, ftCreationTime.dwLowDateTime=0x7726971a, ftCreationTime.dwHighDateTime=0x204bc8, ftLastAccessTime.dwLowDateTime=0x204bb0, ftLastAccessTime.dwHighDateTime=0x7726964e, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0xd400d4, nFileSizeLow=0x217038, dwReserved0=0x20002, dwReserved1=0x21710c, cFileName="ÒÔ䩠\"쏼ų", cAlternateFileName="玈\"숼ųⷾ眽Ə")) returned 0xffffffff [0290.544] GetLastError () returned 0x3 [0290.545] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="畦正", cchWideChar=2, lpMultiByteStr=0x173a8c0, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ç\x95¦æ­£", lpUsedDefaultChar=0x0) returned 6 [0290.545] WriteFile (in: hFile=0x90, lpBuffer=0x173a8c0, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x173a8b8, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x173a8b8, lpOverlapped=0x0) returned 0 [0290.545] GetLastError () returned 0x6 [0290.545] GetLastError () returned 0x6 [0290.545] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x223db0 [0290.545] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14e) returned 0x21d400 [0290.545] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223db0 | out: hHeap=0x1f0000) returned 1 [0290.545] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224238 | out: hHeap=0x1f0000) returned 1 [0290.545] lstrcmpW (lpString1="ÒÔ䩠\"쏼ų", lpString2=".") returned 1 [0290.545] lstrcmpW (lpString1="ÒÔ䩠\"쏼ų", lpString2="..") returned 1 [0290.545] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204cf0 [0290.545] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x2b1a80 [0290.546] FindNextFileW (in: hFindFile=0xffffffff, lpFindFileData=0x173bfe0 | out: lpFindFileData=0x173bfe0*(dwFileAttributes=0xc000003a, ftCreationTime.dwLowDateTime=0x7726971a, ftCreationTime.dwHighDateTime=0x204bc8, ftLastAccessTime.dwLowDateTime=0x204bb0, ftLastAccessTime.dwHighDateTime=0x7726964e, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0xd400d4, nFileSizeLow=0x217038, dwReserved0=0x20002, dwReserved1=0x21710c, cFileName="ÒÔ䩠\"쏼ų", cAlternateFileName="玈\"숼ųⷾ眽Ə")) returned 0 [0290.546] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0290.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2293b8 [0290.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260838 [0290.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x227520 [0290.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x2b12c0 [0290.546] FindFirstFileW (in: lpFileName="C:\\\\Documents and Settings\\zh-TW\\銘\"ųest.\\DF贘*ų\x03\\攸#ų\\fh*ų彞㽍\\Ḑ!ų즘 \\\x86\x88ᣐ\"?ų\\꘠!?ų\\¢¤퍘*푬ų\\퓈*큐ų\\º¼\"찴ų\\ࢠ 젘ų\\ÒÔ䩠\"쏼ų\\*", lpFindFileData=0x173bbc4 | out: lpFindFileData=0x173bbc4*(dwFileAttributes=0x7726971a, ftCreationTime.dwLowDateTime=0x204c28, ftCreationTime.dwHighDateTime=0x204c10, ftLastAccessTime.dwLowDateTime=0x7726964e, ftLastAccessTime.dwHighDateTime=0x8, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0xde00de, nFileSizeHigh=0x21bac8, nFileSizeLow=0x20002, dwReserved0=0x21bba6, dwReserved1=0xde00dc, cFileName="䈸\"뿠ųÀ\x1fʈ\x1f", cAlternateFileName="Ɛ")) returned 0xffffffff [0290.546] GetLastError () returned 0x3 [0290.546] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="畦正", cchWideChar=2, lpMultiByteStr=0x173a4a4, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ç\x95¦æ­£", lpUsedDefaultChar=0x0) returned 6 [0290.547] WriteFile (in: hFile=0x90, lpBuffer=0x173a4a4, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x173a49c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x173a49c, lpOverlapped=0x0) returned 0 [0290.547] GetLastError () returned 0x6 [0290.547] GetLastError () returned 0x6 [0290.547] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609a0 [0290.547] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x2b10d0 [0290.547] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x166) returned 0x22d368 [0290.547] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b10d0 | out: hHeap=0x1f0000) returned 1 [0290.547] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b12c0 | out: hHeap=0x1f0000) returned 1 [0290.547] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0290.547] lstrcmpW (lpString1="䈸\"뿠ųÀ\x1fʈ\x1f", lpString2=".") returned 1 [0290.547] lstrcmpW (lpString1="䈸\"뿠ųÀ\x1fʈ\x1f", lpString2="..") returned 1 [0290.547] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204b90 [0290.547] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2853b0 [0290.547] FindNextFileW (in: hFindFile=0xffffffff, lpFindFileData=0x173bbc4 | out: lpFindFileData=0x173bbc4*(dwFileAttributes=0x7726971a, ftCreationTime.dwLowDateTime=0x204c28, ftCreationTime.dwHighDateTime=0x204c10, ftLastAccessTime.dwLowDateTime=0x7726964e, ftLastAccessTime.dwHighDateTime=0x8, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0xde00de, nFileSizeHigh=0x21bac8, nFileSizeLow=0x20002, dwReserved0=0x21bba6, dwReserved1=0xde00dc, cFileName="䈸\"뿠ųÀ\x1fʈ\x1f", cAlternateFileName="Ɛ")) returned 0 [0290.548] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0290.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2290e8 [0290.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260888 [0290.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2276b8 [0290.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285e00 [0290.548] FindFirstFileW (in: lpFileName="C:\\\\Documents and Settings\\zh-TW\\銘\"ųest.\\DF贘*ų\x03\\攸#ų\\fh*ų彞㽍\\Ḑ!ų즘 \\\x86\x88ᣐ\"?ų\\꘠!?ų\\¢¤퍘*푬ų\\퓈*큐ų\\º¼\"찴ų\\ࢠ 젘ų\\ÒÔ䩠\"쏼ų\\䈸\"뿠ųÀ\x1fʈ\x1f\\*", lpFindFileData=0x173b7a8 | out: lpFindFileData=0x173b7a8*(dwFileAttributes=0xc000003a, ftCreationTime.dwLowDateTime=0x7726971a, ftCreationTime.dwHighDateTime=0x204d08, ftLastAccessTime.dwLowDateTime=0x204cf0, ftLastAccessTime.dwHighDateTime=0x7726964e, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0xec00ec, nFileSizeLow=0x2b1890, dwReserved0=0x20002, dwReserved1=0x2b197c, cFileName="êìዀ+믄ų", cAlternateFileName="皸\"먄ųⷾ眽Ə")) returned 0xffffffff [0290.548] GetLastError () returned 0x3 [0290.548] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="畦正", cchWideChar=2, lpMultiByteStr=0x173a088, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ç\x95¦æ­£", lpUsedDefaultChar=0x0) returned 6 [0290.549] WriteFile (in: hFile=0x90, lpBuffer=0x173a088, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x173a080, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x173a080, lpOverlapped=0x0) returned 0 [0290.549] GetLastError () returned 0x6 [0290.549] GetLastError () returned 0x6 [0290.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2851a0 [0290.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x17e) returned 0x21ca68 [0290.549] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2851a0 | out: hHeap=0x1f0000) returned 1 [0290.549] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285e00 | out: hHeap=0x1f0000) returned 1 [0290.549] lstrcmpW (lpString1="êìዀ+믄ų", lpString2=".") returned 1 [0290.549] lstrcmpW (lpString1="êìዀ+믄ų", lpString2="..") returned 1 [0290.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204f50 [0290.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x232ef0 [0290.549] FindNextFileW (in: hFindFile=0xffffffff, lpFindFileData=0x173b7a8 | out: lpFindFileData=0x173b7a8*(dwFileAttributes=0xc000003a, ftCreationTime.dwLowDateTime=0x7726971a, ftCreationTime.dwHighDateTime=0x204d08, ftLastAccessTime.dwLowDateTime=0x204cf0, ftLastAccessTime.dwHighDateTime=0x7726964e, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0xec00ec, nFileSizeLow=0x2b1890, dwReserved0=0x20002, dwReserved1=0x2b197c, cFileName="êìዀ+믄ų", cAlternateFileName="皸\"먄ųⷾ眽Ə")) returned 0 [0290.549] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0290.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229370 [0290.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605b8 [0290.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x263178 [0290.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x233008 [0290.550] FindFirstFileW (in: lpFileName="C:\\\\Documents and Settings\\zh-TW\\銘\"ųest.\\DF贘*ų\x03\\攸#ų\\fh*ų彞㽍\\Ḑ!ų즘 \\\x86\x88ᣐ\"?ų\\꘠!?ų\\¢¤퍘*푬ų\\퓈*큐ų\\º¼\"찴ų\\ࢠ 젘ų\\ÒÔ䩠\"쏼ų\\䈸\"뿠ųÀ\x1fʈ\x1f\\êìዀ+믄ų\\*", lpFindFileData=0x173b38c | out: lpFindFileData=0x173b38c*(dwFileAttributes=0x7726971a, ftCreationTime.dwLowDateTime=0x204ba8, ftCreationTime.dwHighDateTime=0x204b90, ftLastAccessTime.dwLowDateTime=0x7726964e, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0xfe00fe, nFileSizeHigh=0x233120, nFileSizeLow=0x20002, dwReserved0=0x23321e, dwReserved1=0xfe00fc, cFileName="帀(램ų", cAlternateFileName="Ɛ")) returned 0xffffffff [0290.550] GetLastError () returned 0x3 [0290.550] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="畦正", cchWideChar=2, lpMultiByteStr=0x1739c6c, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ç\x95¦æ­£", lpUsedDefaultChar=0x0) returned 6 [0290.550] WriteFile (in: hFile=0x90, lpBuffer=0x1739c6c, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x1739c64, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x1739c64, lpOverlapped=0x0) returned 0 [0290.550] GetLastError () returned 0x6 [0290.550] GetLastError () returned 0x6 [0290.550] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x233350 [0290.550] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x196) returned 0x239be0 [0290.551] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233350 | out: hHeap=0x1f0000) returned 1 [0290.551] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233008 | out: hHeap=0x1f0000) returned 1 [0290.551] lstrcmpW (lpString1="帀(램ų", lpString2=".") returned 1 [0290.551] lstrcmpW (lpString1="帀(램ų", lpString2="..") returned 1 [0290.551] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204f70 [0290.551] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120) returned 0x2105e0 [0290.551] FindNextFileW (in: hFindFile=0xffffffff, lpFindFileData=0x173b38c | out: lpFindFileData=0x173b38c*(dwFileAttributes=0x7726971a, ftCreationTime.dwLowDateTime=0x204ba8, ftCreationTime.dwHighDateTime=0x204b90, ftLastAccessTime.dwLowDateTime=0x7726964e, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0xfe00fe, nFileSizeHigh=0x233120, nFileSizeLow=0x20002, dwReserved0=0x23321e, dwReserved1=0xfe00fc, cFileName="帀(램ų", cAlternateFileName="Ɛ")) returned 0 [0290.551] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0290.551] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229178 [0290.551] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0290.551] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x263310 [0290.551] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120) returned 0x211170 [0290.551] FindFirstFileW (in: lpFileName="C:\\\\Documents and Settings\\zh-TW\\銘\"ųest.\\DF贘*ų\x03\\攸#ų\\fh*ų彞㽍\\Ḑ!ų즘 \\\x86\x88ᣐ\"?ų\\꘠!?ų\\¢¤퍘*푬ų\\퓈*큐ų\\º¼\"찴ų\\ࢠ 젘ų\\ÒÔ䩠\"쏼ų\\䈸\"뿠ųÀ\x1fʈ\x1f\\êìዀ+믄ų\\帀(램ų\\*", lpFindFileData=0x173af70 | out: lpFindFileData=0x173af70*(dwFileAttributes=0xc000003a, ftCreationTime.dwLowDateTime=0x7726971a, ftCreationTime.dwHighDateTime=0x204f68, ftLastAccessTime.dwLowDateTime=0x204f50, ftLastAccessTime.dwHighDateTime=0x7726964e, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x10c010c, nFileSizeLow=0x2338c8, dwReserved0=0x20002, dwReserved1=0x2339d4, cFileName="ĊČ〈#뎌ų", cAlternateFileName="㌐&뇌ųⷾ眽Ə")) returned 0xffffffff [0290.551] GetLastError () returned 0x3 [0290.552] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="畦正", cchWideChar=2, lpMultiByteStr=0x1739850, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ç\x95¦æ­£", lpUsedDefaultChar=0x0) returned 6 [0290.552] WriteFile (in: hFile=0x90, lpBuffer=0x1739850, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x1739848, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x1739848, lpOverlapped=0x0) returned 0 [0290.552] GetLastError () returned 0x6 [0290.552] GetLastError () returned 0x6 [0290.552] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120) returned 0x210708 [0290.552] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0290.552] lstrcmpW (lpString1="ĊČ〈#뎌ų", lpString2=".") returned 1 [0290.552] lstrcmpW (lpString1="ĊČ〈#뎌ų", lpString2="..") returned 1 [0290.552] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204e30 [0290.552] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120) returned 0x210958 [0290.552] FindNextFileW (in: hFindFile=0xffffffff, lpFindFileData=0x173af70 | out: lpFindFileData=0x173af70*(dwFileAttributes=0xc000003a, ftCreationTime.dwLowDateTime=0x7726971a, ftCreationTime.dwHighDateTime=0x204f68, ftLastAccessTime.dwLowDateTime=0x204f50, ftLastAccessTime.dwHighDateTime=0x7726964e, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x10c010c, nFileSizeLow=0x2338c8, dwReserved0=0x20002, dwReserved1=0x2339d4, cFileName="ĊČ〈#뎌ų", cAlternateFileName="㌐&뇌ųⷾ眽Ə")) returned 0 [0290.552] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0290.552] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229328 [0290.552] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609a0 [0290.552] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x261cc0 [0290.553] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x130) returned 0x21bf68 [0290.553] FindFirstFileW (in: lpFileName="C:\\\\Documents and Settings\\zh-TW\\銘\"ųest.\\DF贘*ų\x03\\攸#ų\\fh*ų彞㽍\\Ḑ!ų즘 \\\x86\x88ᣐ\"?ų\\꘠!?ų\\¢¤퍘*푬ų\\퓈*큐ų\\º¼\"찴ų\\ࢠ 젘ų\\ÒÔ䩠\"쏼ų\\䈸\"뿠ųÀ\x1fʈ\x1f\\êìዀ+믄ų\\帀(램ų\\ĊČ〈#뎌ų\\*", lpFindFileData=0x173ab54 | out: lpFindFileData=0x173ab54*(dwFileAttributes=0x7726971a, ftCreationTime.dwLowDateTime=0x204f88, ftCreationTime.dwHighDateTime=0x204f70, ftLastAccessTime.dwLowDateTime=0x7726964e, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x1160116, nFileSizeHigh=0x210df8, nFileSizeLow=0x20002, dwReserved0=0x210f0e, dwReserved1=0x1160114, cFileName="ᅰ!꽰ų", cAlternateFileName="Ɛ")) returned 0xffffffff [0290.553] GetLastError () returned 0x3 [0290.553] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="畦正", cchWideChar=2, lpMultiByteStr=0x1739434, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ç\x95¦æ­£", lpUsedDefaultChar=0x0) returned 6 [0290.553] WriteFile (in: hFile=0x90, lpBuffer=0x1739434, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x173942c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x173942c, lpOverlapped=0x0) returned 0 [0290.553] GetLastError () returned 0x6 [0290.553] GetLastError () returned 0x6 [0290.553] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x130) returned 0x229418 [0290.554] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21bf68 | out: hHeap=0x1f0000) returned 1 [0290.554] lstrcmpW (lpString1="ᅰ!꽰ų", lpString2=".") returned 1 [0290.554] lstrcmpW (lpString1="ᅰ!꽰ų", lpString2="..") returned 1 [0290.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204bd0 [0290.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x130) returned 0x21bf68 [0290.554] FindNextFileW (in: hFindFile=0xffffffff, lpFindFileData=0x173ab54 | out: lpFindFileData=0x173ab54*(dwFileAttributes=0x7726971a, ftCreationTime.dwLowDateTime=0x204f88, ftCreationTime.dwHighDateTime=0x204f70, ftLastAccessTime.dwLowDateTime=0x7726964e, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x1160116, nFileSizeHigh=0x210df8, nFileSizeLow=0x20002, dwReserved0=0x210f0e, dwReserved1=0x1160114, cFileName="ᅰ!꽰ų", cAlternateFileName="Ɛ")) returned 0 [0290.554] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0290.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228d40 [0290.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260630 [0290.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x261ff0 [0290.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x130) returned 0x2366d8 [0290.565] FindFirstFileW (in: lpFileName="C:\\\\Documents and Settings\\zh-TW\\銘\"ųest.\\DF贘*ų\x03\\攸#ų\\fh*ų彞㽍\\Ḑ!ų즘 \\\x86\x88ᣐ\"?ų\\꘠!?ų\\¢¤퍘*푬ų\\퓈*큐ų\\º¼\"찴ų\\ࢠ 젘ų\\ÒÔ䩠\"쏼ų\\䈸\"뿠ųÀ\x1fʈ\x1f\\êìዀ+믄ų\\帀(램ų\\ĊČ〈#뎌ų\\ᅰ!꽰ų\\*", lpFindFileData=0x173a738 | out: lpFindFileData=0x173a738*(dwFileAttributes=0xc000003a, ftCreationTime.dwLowDateTime=0x7726971a, ftCreationTime.dwHighDateTime=0x204e48, ftLastAccessTime.dwLowDateTime=0x204e30, ftLastAccessTime.dwHighDateTime=0x7726964e, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x1240124, nFileSizeLow=0x229418, dwReserved0=0x20002, dwReserved1=0x22953c, cFileName="䟟眽즷᪠İ", cAlternateFileName="῰&ꦔųⷾ眽Ə")) returned 0xffffffff [0290.999] GetLastError () returned 0x3 [0291.000] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="畦正", cchWideChar=2, lpMultiByteStr=0x1739018, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ç\x95¦æ­£", lpUsedDefaultChar=0x0) returned 6 [0291.000] WriteFile (in: hFile=0x90, lpBuffer=0x1739018, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x1739010, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x1739010, lpOverlapped=0x0) returned 0 [0291.000] GetLastError () returned 0x6 [0291.000] GetLastError () returned 0x6 [0291.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x130) returned 0x20c2c0 [0291.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c6) returned 0x232888 [0291.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20c2c0 | out: hHeap=0x1f0000) returned 1 [0291.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0291.001] lstrcmpW (lpString1="䟟眽즷᪠İ", lpString2=".") returned 1 [0291.001] lstrcmpW (lpString1="䟟眽즷᪠İ", lpString2="..") returned 1 [0291.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204cb0 [0291.002] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x140) returned 0x2366d8 [0291.002] FindNextFileW (in: hFindFile=0xffffffff, lpFindFileData=0x173a738 | out: lpFindFileData=0x173a738*(dwFileAttributes=0xc000003a, ftCreationTime.dwLowDateTime=0x7726971a, ftCreationTime.dwHighDateTime=0x204e48, ftLastAccessTime.dwLowDateTime=0x204e30, ftLastAccessTime.dwHighDateTime=0x7726964e, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x1240124, nFileSizeLow=0x229418, dwReserved0=0x20002, dwReserved1=0x22953c, cFileName="䟟眽즷᪠İ", cAlternateFileName="῰&ꦔųⷾ眽Ə")) returned 0 [0291.002] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0291.002] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228ef0 [0291.002] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b58 [0291.002] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262650 [0291.002] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x140) returned 0x20c2c0 [0291.002] FindFirstFileW (in: lpFileName="C:\\\\Documents and Settings\\zh-TW\\銘\"ųest.\\DF贘*ų\x03\\攸#ų\\fh*ų彞㽍\\Ḑ!ų즘 \\\x86\x88ᣐ\"?ų\\꘠!?ų\\¢¤퍘*푬ų\\퓈*큐ų\\º¼\"찴ų\\ࢠ 젘ų\\ÒÔ䩠\"쏼ų\\䈸\"뿠ųÀ\x1fʈ\x1f\\êìዀ+믄ų\\帀(램ų\\ĊČ〈#뎌ų\\ᅰ!꽰ų\\䟟眽즷᪠İ\\*", lpFindFileData=0x173a31c | out: lpFindFileData=0x173a31c*(dwFileAttributes=0x7726971a, ftCreationTime.dwLowDateTime=0x204be8, ftCreationTime.dwHighDateTime=0x204bd0, ftLastAccessTime.dwLowDateTime=0x7726964e, ftLastAccessTime.dwHighDateTime=0x1e, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x12e012e, nFileSizeHigh=0x20c2c0, nFileSizeLow=0x20002, dwReserved0=0x20c3ee, dwReserved1=0x12e012c, cFileName="曘#䟟眽얟᪠ŀ", cAlternateFileName="Ɛ")) returned 0xffffffff [0291.003] GetLastError () returned 0x3 [0291.003] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="畦正", cchWideChar=2, lpMultiByteStr=0x1738bfc, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ç\x95¦æ­£", lpUsedDefaultChar=0x0) returned 6 [0291.003] WriteFile (in: hFile=0x90, lpBuffer=0x1738bfc, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x1738bf4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x1738bf4, lpOverlapped=0x0) returned 0 [0291.004] GetLastError () returned 0x6 [0291.004] GetLastError () returned 0x6 [0291.004] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x140) returned 0x22b018 [0291.004] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1de) returned 0x25ffe8 [0291.004] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b018 | out: hHeap=0x1f0000) returned 1 [0291.004] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20c2c0 | out: hHeap=0x1f0000) returned 1 [0291.004] lstrcmpW (lpString1="曘#䟟眽얟᪠ŀ", lpString2=".") returned 1 [0291.004] lstrcmpW (lpString1="曘#䟟眽얟᪠ŀ", lpString2="..") returned 1 [0291.005] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204e50 [0291.005] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x150) returned 0x20c2c0 [0291.005] FindNextFileW (in: hFindFile=0xffffffff, lpFindFileData=0x173a31c | out: lpFindFileData=0x173a31c*(dwFileAttributes=0x7726971a, ftCreationTime.dwLowDateTime=0x204be8, ftCreationTime.dwHighDateTime=0x204bd0, ftLastAccessTime.dwLowDateTime=0x7726964e, ftLastAccessTime.dwHighDateTime=0x1e, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x12e012e, nFileSizeHigh=0x20c2c0, nFileSizeLow=0x20002, dwReserved0=0x20c3ee, dwReserved1=0x12e012c, cFileName="曘#䟟眽얟᪠ŀ", cAlternateFileName="Ɛ")) returned 0 [0291.005] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0291.005] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228dd0 [0291.005] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b30 [0291.005] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262cb0 [0291.005] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x150) returned 0x22b018 [0291.005] FindFirstFileW (in: lpFileName="C:\\\\Documents and Settings\\zh-TW\\銘\"ųest.\\DF贘*ų\x03\\攸#ų\\fh*ų彞㽍\\Ḑ!ų즘 \\\x86\x88ᣐ\"?ų\\꘠!?ų\\¢¤퍘*푬ų\\퓈*큐ų\\º¼\"찴ų\\ࢠ 젘ų\\ÒÔ䩠\"쏼ų\\䈸\"뿠ųÀ\x1fʈ\x1f\\êìዀ+믄ų\\帀(램ų\\ĊČ〈#뎌ų\\ᅰ!꽰ų\\䟟眽즷᪠İ\\曘#䟟眽얟᪠ŀ\\*", lpFindFileData=0x1739f00 | out: lpFindFileData=0x1739f00*(dwFileAttributes=0xc000003a, ftCreationTime.dwLowDateTime=0x7726971a, ftCreationTime.dwHighDateTime=0x204cc8, ftLastAccessTime.dwLowDateTime=0x204cb0, ftLastAccessTime.dwHighDateTime=0x7726964e, ftLastWriteTime.dwLowDateTime=0x1f0000, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x13a013a, nFileSizeLow=0x22b018, dwReserved0=0x20002, dwReserved1=0x22b152, cFileName="䟟眽쁿᪠Ő", cAlternateFileName="Ⲱ&ꅜųⷾ眽Ə")) returned 0xffffffff [0291.006] GetLastError () returned 0x3 [0291.006] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="畦正", cchWideChar=2, lpMultiByteStr=0x17387e0, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ç\x95¦æ­£", lpUsedDefaultChar=0x0) returned 6 [0291.006] WriteFile (in: hFile=0x90, lpBuffer=0x17387e0, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x17387d8, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x17387d8, lpOverlapped=0x0) returned 0 [0291.006] GetLastError () returned 0x6 [0291.007] GetLastError () returned 0x6 [0291.007] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x150) returned 0x220748 [0291.007] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1f6) returned 0x2208a0 [0291.007] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220748 | out: hHeap=0x1f0000) returned 1 [0291.007] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b018 | out: hHeap=0x1f0000) returned 1 [0291.007] lstrcmpW (lpString1="䟟眽쁿᪠Ő", lpString2=".") returned 1 [0291.007] lstrcmpW (lpString1="䟟眽쁿᪠Ő", lpString2="..") returned 1 [0291.007] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204e90 [0291.007] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x160) returned 0x220aa0 [0291.008] FindNextFileW (in: hFindFile=0xffffffff, lpFindFileData=0x1739f00 | out: lpFindFileData=0x1739f00*(dwFileAttributes=0xc000003a, ftCreationTime.dwLowDateTime=0x7726971a, ftCreationTime.dwHighDateTime=0x204cc8, ftLastAccessTime.dwLowDateTime=0x204cb0, ftLastAccessTime.dwHighDateTime=0x7726964e, ftLastWriteTime.dwLowDateTime=0x1f0000, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x13a013a, nFileSizeLow=0x22b018, dwReserved0=0x20002, dwReserved1=0x22b152, cFileName="䟟眽쁿᪠Ő", cAlternateFileName="Ⲱ&ꅜųⷾ眽Ə")) returned 0 [0291.008] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0291.008] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228cb0 [0291.008] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bd0 [0291.008] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2a92e0 [0291.008] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x160) returned 0x22b018 [0291.008] FindFirstFileW (in: lpFileName="C:\\\\Documents and Settings\\zh-TW\\銘\"ųest.\\DF贘*ų\x03\\攸#ų\\fh*ų彞㽍\\Ḑ!ų즘 \\\x86\x88ᣐ\"?ų\\꘠!?ų\\¢¤퍘*푬ų\\퓈*큐ų\\º¼\"찴ų\\ࢠ 젘ų\\ÒÔ䩠\"쏼ų\\䈸\"뿠ųÀ\x1fʈ\x1f\\êìዀ+믄ų\\帀(램ų\\ĊČ〈#뎌ų\\ᅰ!꽰ų\\䟟眽즷᪠İ\\曘#䟟眽얟᪠ŀ\\䟟眽쁿᪠Ő\\*", lpFindFileData=0x1739ae4 | out: lpFindFileData=0x1739ae4*(dwFileAttributes=0x7726971a, ftCreationTime.dwLowDateTime=0x204e68, ftCreationTime.dwHighDateTime=0x204e50, ftLastAccessTime.dwLowDateTime=0x7726964e, ftLastAccessTime.dwHighDateTime=0x2c, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x14a014a, nFileSizeHigh=0x220748, nFileSizeLow=0x20002, dwReserved0=0x220892, dwReserved1=0x14a0148, cFileName="뀘\"䟟眽ﱧ᪠Š", cAlternateFileName="Ɛ")) returned 0xffffffff [0291.009] GetLastError () returned 0x3 [0291.009] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="畦正", cchWideChar=2, lpMultiByteStr=0x17383c4, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ç\x95¦æ­£", lpUsedDefaultChar=0x0) returned 6 [0291.009] WriteFile (in: hFile=0x90, lpBuffer=0x17383c4, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x17383bc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x17383bc, lpOverlapped=0x0) returned 0 [0291.009] GetLastError () returned 0x6 [0291.009] GetLastError () returned 0x6 [0291.009] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x160) returned 0x222ee8 [0291.009] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20e) returned 0x223050 [0291.010] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ee8 | out: hHeap=0x1f0000) returned 1 [0291.010] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b018 | out: hHeap=0x1f0000) returned 1 [0291.010] lstrcmpW (lpString1="뀘\"䟟眽ﱧ᪠Š", lpString2=".") returned 1 [0291.010] lstrcmpW (lpString1="뀘\"䟟眽ﱧ᪠Š", lpString2="..") returned 1 [0291.010] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204c50 [0291.010] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x170) returned 0x223268 [0291.010] FindNextFileW (in: hFindFile=0xffffffff, lpFindFileData=0x1739ae4 | out: lpFindFileData=0x1739ae4*(dwFileAttributes=0x7726971a, ftCreationTime.dwLowDateTime=0x204e68, ftCreationTime.dwHighDateTime=0x204e50, ftLastAccessTime.dwLowDateTime=0x7726964e, ftLastAccessTime.dwHighDateTime=0x2c, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x14a014a, nFileSizeHigh=0x220748, nFileSizeLow=0x20002, dwReserved0=0x220892, dwReserved1=0x14a0148, cFileName="뀘\"䟟眽ﱧ᪠Š", cAlternateFileName="Ɛ")) returned 0 [0291.011] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0291.011] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228a28 [0291.011] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0291.011] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2a9e08 [0291.011] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x170) returned 0x2b6ba8 [0291.012] FindFirstFileW (in: lpFileName="C:\\\\Documents and Settings\\zh-TW\\銘\"ųest.\\DF贘*ų\x03\\攸#ų\\fh*ų彞㽍\\Ḑ!ų즘 \\\x86\x88ᣐ\"?ų\\꘠!?ų\\¢¤퍘*푬ų\\퓈*큐ų\\º¼\"찴ų\\ࢠ 젘ų\\ÒÔ䩠\"쏼ų\\䈸\"뿠ųÀ\x1fʈ\x1f\\êìዀ+믄ų\\帀(램ų\\ĊČ〈#뎌ų\\ᅰ!꽰ų\\䟟眽즷᪠İ\\曘#䟟眽얟᪠ŀ\\䟟眽쁿᪠Ő\\뀘\"䟟眽ﱧ᪠Š\\*", lpFindFileData=0x17396c8 | out: lpFindFileData=0x17396c8*(dwFileAttributes=0xf0000, ftCreationTime.dwLowDateTime=0x17396e8, ftCreationTime.dwHighDateTime=0x773bbcf4, ftLastAccessTime.dwLowDateTime=0x17396e4, ftLastAccessTime.dwHighDateTime=0x1f0000, ftLastWriteTime.dwLowDateTime=0x27, ftLastWriteTime.dwHighDateTime=0xf0000, nFileSizeHigh=0xf17c0, nFileSizeLow=0x17398c0, dwReserved0=0x773bbccb, dwReserved1=0x1f766e, cFileName="䟟眽᪠Ű", cAlternateFileName="鸈*餤ųⷾ眽Ə")) returned 0xffffffff [0291.012] GetLastError () returned 0x3 [0291.013] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="畦正", cchWideChar=2, lpMultiByteStr=0x1737fa8, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ç\x95¦æ­£", lpUsedDefaultChar=0x0) returned 6 [0291.013] WriteFile (in: hFile=0x90, lpBuffer=0x1737fa8, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x1737fa0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x1737fa0, lpOverlapped=0x0) returned 0 [0291.013] GetLastError () returned 0x6 [0291.013] GetLastError () returned 0x6 [0291.013] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x170) returned 0x2b5fe8 [0291.013] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b6ba8 | out: hHeap=0x1f0000) returned 1 [0291.014] CreateFileW (lpFileName="C:\\\\Documents and Settings\\zh-TW\\銘\"ųest.\\DF贘*ų\x03\\攸#ų\\fh*ų彞㽍\\Ḑ!ų즘 \\\x86\x88ᣐ\"?ų\\꘠!?ų\\¢¤퍘*푬ų\\퓈*큐ų\\º¼\"찴ų\\ࢠ 젘ų\\ÒÔ䩠\"쏼ų\\䈸\"뿠ųÀ\x1fʈ\x1f\\êìዀ+믄ų\\帀(램ų\\ĊČ〈#뎌ų\\ᅰ!꽰ų\\䟟眽즷᪠İ\\曘#䟟眽얟᪠ŀ\\䟟眽쁿᪠Ő\\뀘\"䟟眽ﱧ᪠Š\\䟟眽᪠Ű" (normalized: "c:\\documents and settings\\zh-tw\\銘\"ųest.\\df贘*ų\x03\\攸#ų\\fh*ų彞㽍\\Ḑ!ų즘 \\\x86\x88ᣐ\"?ų\\꘠!?ų\\¢¤퍘*푬ų\\퓈*큐ų\\º¼\"찴ų\\ࢠ 젘ų\\òô䩠\"쏼ų\\䈸\"뿠ųà\x1fʈ\x1f\\êìዀ+믄ų\\帀(램ų\\ĊČ〈#뎌ų\\ᅰ!꽰ų\\䟟眽즷᪠İ\\曘#䟟眽얟᪠ŀ\\䟟眽쁿᪠Ő\\뀘\"䟟眽ﱧ᪠Š\\䟟眽᪠Ű"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1739490, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0291.014] GetLastError () returned 0x3 [0291.014] GetLastError () returned 0x3 [0291.014] FindNextFileW (in: hFindFile=0xffffffff, lpFindFileData=0x17396c8 | out: lpFindFileData=0x17396c8*(dwFileAttributes=0xf0000, ftCreationTime.dwLowDateTime=0x17396e8, ftCreationTime.dwHighDateTime=0x773bbcf4, ftLastAccessTime.dwLowDateTime=0x17396e4, ftLastAccessTime.dwHighDateTime=0x1f0000, ftLastWriteTime.dwLowDateTime=0x27, ftLastWriteTime.dwHighDateTime=0xf0000, nFileSizeHigh=0xf17c0, nFileSizeLow=0x17398c0, dwReserved0=0x773bbccb, dwReserved1=0x1f766e, cFileName="䟟眽᪠Ű", cAlternateFileName="鸈*餤ųⷾ眽Ə")) returned 0 [0291.014] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0291.014] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b5fe8 | out: hHeap=0x1f0000) returned 1 [0291.014] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a9e08 | out: hHeap=0x1f0000) returned 1 [0291.014] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0291.014] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228a28 | out: hHeap=0x1f0000) returned 1 [0291.014] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223050 | out: hHeap=0x1f0000) returned 1 [0291.014] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223268 | out: hHeap=0x1f0000) returned 1 [0291.015] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c50 | out: hHeap=0x1f0000) returned 1 [0291.015] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a92e0 | out: hHeap=0x1f0000) returned 1 [0291.015] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bd0 | out: hHeap=0x1f0000) returned 1 [0291.015] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228cb0 | out: hHeap=0x1f0000) returned 1 [0291.015] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2208a0 | out: hHeap=0x1f0000) returned 1 [0291.015] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220aa0 | out: hHeap=0x1f0000) returned 1 [0291.015] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e90 | out: hHeap=0x1f0000) returned 1 [0291.015] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262cb0 | out: hHeap=0x1f0000) returned 1 [0291.015] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b30 | out: hHeap=0x1f0000) returned 1 [0291.015] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228dd0 | out: hHeap=0x1f0000) returned 1 [0291.015] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25ffe8 | out: hHeap=0x1f0000) returned 1 [0291.015] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20c2c0 | out: hHeap=0x1f0000) returned 1 [0291.015] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e50 | out: hHeap=0x1f0000) returned 1 [0291.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262650 | out: hHeap=0x1f0000) returned 1 [0291.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b58 | out: hHeap=0x1f0000) returned 1 [0291.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228ef0 | out: hHeap=0x1f0000) returned 1 [0291.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232888 | out: hHeap=0x1f0000) returned 1 [0291.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0291.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cb0 | out: hHeap=0x1f0000) returned 1 [0291.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261ff0 | out: hHeap=0x1f0000) returned 1 [0291.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260630 | out: hHeap=0x1f0000) returned 1 [0291.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228d40 | out: hHeap=0x1f0000) returned 1 [0291.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0291.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21bf68 | out: hHeap=0x1f0000) returned 1 [0291.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bd0 | out: hHeap=0x1f0000) returned 1 [0291.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261cc0 | out: hHeap=0x1f0000) returned 1 [0291.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0291.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229328 | out: hHeap=0x1f0000) returned 1 [0291.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0291.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0291.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e30 | out: hHeap=0x1f0000) returned 1 [0291.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263310 | out: hHeap=0x1f0000) returned 1 [0291.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0291.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229178 | out: hHeap=0x1f0000) returned 1 [0291.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239be0 | out: hHeap=0x1f0000) returned 1 [0291.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0291.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f70 | out: hHeap=0x1f0000) returned 1 [0291.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263178 | out: hHeap=0x1f0000) returned 1 [0291.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0291.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229370 | out: hHeap=0x1f0000) returned 1 [0291.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ca68 | out: hHeap=0x1f0000) returned 1 [0291.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232ef0 | out: hHeap=0x1f0000) returned 1 [0291.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f50 | out: hHeap=0x1f0000) returned 1 [0291.018] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2276b8 | out: hHeap=0x1f0000) returned 1 [0291.018] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0291.018] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2290e8 | out: hHeap=0x1f0000) returned 1 [0291.018] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d368 | out: hHeap=0x1f0000) returned 1 [0291.018] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2853b0 | out: hHeap=0x1f0000) returned 1 [0291.018] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204b90 | out: hHeap=0x1f0000) returned 1 [0291.018] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227520 | out: hHeap=0x1f0000) returned 1 [0291.018] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260838 | out: hHeap=0x1f0000) returned 1 [0291.018] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2293b8 | out: hHeap=0x1f0000) returned 1 [0291.018] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d400 | out: hHeap=0x1f0000) returned 1 [0291.018] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b1a80 | out: hHeap=0x1f0000) returned 1 [0291.018] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cf0 | out: hHeap=0x1f0000) returned 1 [0291.018] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227388 | out: hHeap=0x1f0000) returned 1 [0291.018] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0291.018] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2292e0 | out: hHeap=0x1f0000) returned 1 [0291.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224890 | out: hHeap=0x1f0000) returned 1 [0291.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2247a8 | out: hHeap=0x1f0000) returned 1 [0291.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c10 | out: hHeap=0x1f0000) returned 1 [0291.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2271f0 | out: hHeap=0x1f0000) returned 1 [0291.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0291.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229058 | out: hHeap=0x1f0000) returned 1 [0291.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x200978 | out: hHeap=0x1f0000) returned 1 [0291.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2008a0 | out: hHeap=0x1f0000) returned 1 [0291.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bb0 | out: hHeap=0x1f0000) returned 1 [0291.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227058 | out: hHeap=0x1f0000) returned 1 [0291.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0291.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229298 | out: hHeap=0x1f0000) returned 1 [0291.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0291.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2007c8 | out: hHeap=0x1f0000) returned 1 [0291.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f30 | out: hHeap=0x1f0000) returned 1 [0291.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226ec0 | out: hHeap=0x1f0000) returned 1 [0291.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0291.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228ea8 | out: hHeap=0x1f0000) returned 1 [0291.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233238 | out: hHeap=0x1f0000) returned 1 [0291.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0291.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204df0 | out: hHeap=0x1f0000) returned 1 [0291.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226d28 | out: hHeap=0x1f0000) returned 1 [0291.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0291.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228d88 | out: hHeap=0x1f0000) returned 1 [0291.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad410 | out: hHeap=0x1f0000) returned 1 [0291.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad580 | out: hHeap=0x1f0000) returned 1 [0291.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e70 | out: hHeap=0x1f0000) returned 1 [0291.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227850 | out: hHeap=0x1f0000) returned 1 [0291.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0291.021] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228e60 | out: hHeap=0x1f0000) returned 1 [0291.021] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a4d0 | out: hHeap=0x1f0000) returned 1 [0291.021] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a968 | out: hHeap=0x1f0000) returned 1 [0291.021] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204dd0 | out: hHeap=0x1f0000) returned 1 [0291.021] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22de98 | out: hHeap=0x1f0000) returned 1 [0291.021] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0291.021] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228f80 | out: hHeap=0x1f0000) returned 1 [0291.021] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210270 | out: hHeap=0x1f0000) returned 1 [0291.021] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a038 | out: hHeap=0x1f0000) returned 1 [0291.021] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bf0 | out: hHeap=0x1f0000) returned 1 [0291.021] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22db68 | out: hHeap=0x1f0000) returned 1 [0291.021] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0291.021] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229250 | out: hHeap=0x1f0000) returned 1 [0291.022] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218978 | out: hHeap=0x1f0000) returned 1 [0291.022] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0291.022] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204db0 | out: hHeap=0x1f0000) returned 1 [0291.022] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d9d0 | out: hHeap=0x1f0000) returned 1 [0291.022] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0291.022] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228e18 | out: hHeap=0x1f0000) returned 1 [0291.022] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aec00 | out: hHeap=0x1f0000) returned 1 [0291.022] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae390 | out: hHeap=0x1f0000) returned 1 [0291.022] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f10 | out: hHeap=0x1f0000) returned 1 [0291.022] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d6a0 | out: hHeap=0x1f0000) returned 1 [0291.022] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0291.022] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229130 | out: hHeap=0x1f0000) returned 1 [0291.022] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0291.022] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae6d8 | out: hHeap=0x1f0000) returned 1 [0291.022] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d90 | out: hHeap=0x1f0000) returned 1 [0291.023] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d508 | out: hHeap=0x1f0000) returned 1 [0291.023] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0291.023] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228f38 | out: hHeap=0x1f0000) returned 1 [0291.023] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2181d0 | out: hHeap=0x1f0000) returned 1 [0291.023] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2364d0 | out: hHeap=0x1f0000) returned 1 [0291.023] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c30 | out: hHeap=0x1f0000) returned 1 [0291.023] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f350 | out: hHeap=0x1f0000) returned 1 [0291.023] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0291.023] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2291c0 | out: hHeap=0x1f0000) returned 1 [0291.023] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0291.023] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8dc8 | out: hHeap=0x1f0000) returned 1 [0291.023] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d70 | out: hHeap=0x1f0000) returned 1 [0291.024] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ee88 | out: hHeap=0x1f0000) returned 1 [0291.024] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0291.024] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229010 | out: hHeap=0x1f0000) returned 1 [0291.024] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229250 [0291.024] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0291.024] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2271f0 [0291.024] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0291.024] FindFirstFileW (in: lpFileName="C:\\\\ESD\\*", lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc1969407, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e7c0 [0291.026] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0291.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0291.026] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0291.026] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc1969407, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0291.027] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0291.027] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0291.027] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0291.027] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0291.027] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc1969407, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0291.027] FindClose (in: hFindFile=0x24e7c0 | out: hFindFile=0x24e7c0) returned 1 [0291.027] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0291.027] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2271f0 | out: hHeap=0x1f0000) returned 1 [0291.027] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0291.028] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229250 | out: hHeap=0x1f0000) returned 1 [0291.028] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229130 [0291.028] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260630 [0291.028] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x226ec0 [0291.028] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0291.028] FindFirstFileW (in: lpFileName="C:\\\\Logs\\*", lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf1d773, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xc2f39201, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xc2f39201, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ec80 [0291.028] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0291.028] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0291.028] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0291.029] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf1d773, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xc2f39201, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xc2f39201, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0291.030] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0291.030] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0291.030] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0291.030] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0291.030] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5052fa31, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5052fa31, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Application.evtx", cAlternateFileName="APPLIC~1.EVT")) returned 1 [0291.030] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2390b8 [0291.030] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0291.030] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228ea8 [0291.030] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0291.031] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0291.031] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2390b8 | out: hHeap=0x1f0000) returned 1 [0291.031] CreateFileW (lpFileName="C:\\\\Logs\\Application.evtx" (normalized: "c:\\logs\\application.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0291.033] GetFileType (hFile=0x1e0) returned 0x1 [0291.033] CloseHandle (hObject=0x1e0) returned 1 [0291.034] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228ef0 [0291.034] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Application.evtx" (normalized: "c:\\logs\\application.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5052fa31, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5052fa31, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0291.034] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228ef0 | out: hHeap=0x1f0000) returned 1 [0291.034] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228e18 [0291.034] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Application.evtx" (normalized: "c:\\logs\\application.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5052fa31, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5052fa31, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0291.034] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228e18 | out: hHeap=0x1f0000) returned 1 [0291.034] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2292e0 [0291.034] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2292e0 | out: hHeap=0x1f0000) returned 1 [0291.034] GetLastError () returned 0x0 [0291.035] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260518 [0291.035] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2292e0 [0291.035] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x227850 [0291.035] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229178 [0291.035] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239048 [0291.035] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0291.035] CryptAcquireContextA (in: phProv=0x173e7b0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e7b0*=0x211b68) returned 1 [0291.036] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x260568 | out: pbBuffer=0x260568) returned 1 [0291.036] CryptReleaseContext (hProv=0x211b68, dwFlags=0x0) returned 1 [0291.036] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0291.037] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x254980 [0291.037] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x233350 [0291.037] QueryPerformanceCounter (in: lpPerformanceCount=0x173e744 | out: lpPerformanceCount=0x173e744*=44840563512) returned 1 [0291.037] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e784 | out: lpSystemTimeAsFileTime=0x173e784) [0291.037] QueryPerformanceCounter (in: lpPerformanceCount=0x173e744 | out: lpPerformanceCount=0x173e744*=44840586032) returned 1 [0291.037] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e784 | out: lpSystemTimeAsFileTime=0x173e784) [0291.037] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238cc8 [0291.037] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x258298 [0291.037] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x232cc0 [0291.037] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x2ab978 [0291.037] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210210 [0291.037] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206928 [0291.038] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210240 [0291.038] GetLastError () returned 0x0 [0291.038] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8dc8 [0291.038] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2129c0 [0291.038] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8dc8 | out: hHeap=0x1f0000) returned 1 [0291.038] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0291.038] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2129c0 | out: hHeap=0x1f0000) returned 1 [0291.038] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388b0 [0291.038] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238820 [0291.039] CreateFileW (lpFileName="C:\\\\Logs\\Application.evtx.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\logs\\application.evtx.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e650, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0291.306] GetFileType (hFile=0x1b0) returned 0x1 [0291.306] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238970 [0291.307] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388a0 [0291.307] CreateFileW (lpFileName="C:\\\\Logs\\Application.evtx" (normalized: "c:\\logs\\application.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e680, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0291.308] GetFileType (hFile=0x198) returned 0x1 [0291.308] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f10 [0291.308] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0291.308] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad130 [0291.308] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238940 [0291.309] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238930 [0291.309] CreateFileW (lpFileName="C:\\\\Logs\\Application.evtx.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\logs\\application.evtx.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e5cc, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0291.310] GetFileType (hFile=0x1e0) returned 0x1 [0291.310] GetLastError () returned 0xb7 [0291.310] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe4) returned 0x21bca8 [0291.310] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0291.311] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c70 [0291.311] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f70 [0291.311] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2adbf8 [0291.311] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238830 [0291.311] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389b0 [0291.312] CreateFileW (lpFileName="C:\\\\Logs\\Application.evtx.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\logs\\application.evtx.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e5cc, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0291.312] GetFileType (hFile=0x174) returned 0x1 [0291.312] GetLastError () returned 0xb7 [0291.313] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204db0 [0291.313] GetLastError () returned 0xb7 [0291.313] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ef0 [0291.313] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204b90 [0291.313] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d90 [0291.313] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb8) returned 0x236de0 [0291.313] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387f0 [0291.314] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388d0 [0291.314] CreateFileW (lpFileName="C:\\\\Logs\\Application.evtx" (normalized: "c:\\logs\\application.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e5c4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0291.315] GetFileType (hFile=0x1ac) returned 0x1 [0291.315] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28efd8 [0291.315] ReadFile (in: hFile=0x1ac, lpBuffer=0x28efd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e520, lpOverlapped=0x0 | out: lpBuffer=0x28efd8*, lpNumberOfBytesRead=0x173e520*=0x1000, lpOverlapped=0x0) returned 1 [0291.318] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24b5e0 [0291.319] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28ffe0 [0291.319] GetLastError () returned 0x0 [0291.324] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101b0 [0291.325] WriteFile (in: hFile=0x174, lpBuffer=0x28ffe0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x173e364, lpOverlapped=0x0 | out: lpBuffer=0x28ffe0*, lpNumberOfBytesWritten=0x173e364*=0x1000, lpOverlapped=0x0) returned 1 [0291.325] GetLastError () returned 0x0 [0291.326] CloseHandle (hObject=0x1b0) returned 1 [0291.326] CloseHandle (hObject=0x198) returned 1 [0291.327] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238800 [0291.327] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238980 [0291.327] CreateFileW (lpFileName="C:\\\\Logs\\Application.evtx" (normalized: "c:\\logs\\application.evtx"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e680, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0291.330] GetFileType (hFile=0x198) returned 0x1 [0291.330] GetLastError () returned 0xb7 [0291.331] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28cfc8 [0291.331] GetLastError () returned 0xb7 [0291.332] CloseHandle (hObject=0x198) returned 1 [0291.333] DeleteFileW (lpFileName="C:\\\\Logs\\Application.evtx" (normalized: "c:\\logs\\application.evtx")) returned 0 [0291.333] GetLastError () returned 0x20 [0291.333] GetLastError () returned 0x20 [0291.333] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229370 [0291.333] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260c48 [0291.333] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260b08 [0291.333] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x229328 [0291.333] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bf0 [0291.334] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c10 [0291.334] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x238810 [0291.334] GetLastError () returned 0x20 [0291.334] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238f30 [0291.334] GetLastError () returned 0x20 [0291.334] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238d00 [0291.334] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236468 [0291.334] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260b30 [0291.334] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285bf0 [0291.334] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238990 [0291.334] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a18 [0291.334] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210258 [0291.334] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238840 [0291.334] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b58 [0291.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0291.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260bd0 [0291.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2852a8 [0291.335] GetLastError () returned 0x20 [0291.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238950 [0291.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x2387e0 [0291.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388f0 [0291.335] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387e0 | out: hHeap=0x1f0000) returned 1 [0291.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238900 [0291.335] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388f0 | out: hHeap=0x1f0000) returned 1 [0291.335] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238950 | out: hHeap=0x1f0000) returned 1 [0291.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389c0 [0291.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101e0 [0291.335] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389c0 | out: hHeap=0x1f0000) returned 1 [0291.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210198 [0291.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0291.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238900 | out: hHeap=0x1f0000) returned 1 [0291.336] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101e0 [0291.336] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff70 [0291.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0291.336] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0291.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff70 | out: hHeap=0x1f0000) returned 1 [0291.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0291.336] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210198 [0291.336] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204e70 [0291.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0291.337] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d10 [0291.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e70 | out: hHeap=0x1f0000) returned 1 [0291.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0291.337] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bd0 [0291.337] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260a68 [0291.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bd0 | out: hHeap=0x1f0000) returned 1 [0291.337] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204bb0 [0291.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a68 | out: hHeap=0x1f0000) returned 1 [0291.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d10 | out: hHeap=0x1f0000) returned 1 [0291.337] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204cf0 [0291.337] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x2067d8 [0291.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cf0 | out: hHeap=0x1f0000) returned 1 [0291.337] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260bf8 [0291.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2067d8 | out: hHeap=0x1f0000) returned 1 [0291.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bb0 | out: hHeap=0x1f0000) returned 1 [0291.338] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388c0 [0291.338] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210198 [0291.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388c0 | out: hHeap=0x1f0000) returned 1 [0291.338] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0291.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0291.338] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204c10 [0291.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0291.338] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x2067d8 [0291.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c10 | out: hHeap=0x1f0000) returned 1 [0291.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2067d8 | out: hHeap=0x1f0000) returned 1 [0291.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0291.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0291.338] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0291.339] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285bf0 | out: hHeap=0x1f0000) returned 1 [0291.339] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b30 | out: hHeap=0x1f0000) returned 1 [0291.339] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238da8 [0291.339] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0291.339] CryptAcquireContextA (in: phProv=0x173e7b0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e7b0*=0x212030) returned 1 [0291.340] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x260bf8 | out: pbBuffer=0x260bf8) returned 1 [0291.340] CryptReleaseContext (hProv=0x212030, dwFlags=0x0) returned 1 [0291.340] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0291.340] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260bf8 [0291.340] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260c20 [0291.340] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c90 [0291.340] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0291.340] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0291.340] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c90 | out: hHeap=0x1f0000) returned 1 [0291.340] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8d18 [0291.340] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0291.340] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x2364d0 [0291.341] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260b30 [0291.341] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285e00 [0291.341] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c10 [0291.341] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236538 [0291.341] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260bf8 [0291.341] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285cf8 [0291.341] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388c0 [0291.341] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a68 [0291.341] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210198 [0291.341] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238920 [0291.341] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c48 [0291.342] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210078 [0291.342] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210078 | out: hHeap=0x1f0000) returned 1 [0291.342] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0291.342] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238920 | out: hHeap=0x1f0000) returned 1 [0291.342] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0291.342] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a68 | out: hHeap=0x1f0000) returned 1 [0291.342] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388c0 | out: hHeap=0x1f0000) returned 1 [0291.342] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285cf8 | out: hHeap=0x1f0000) returned 1 [0291.342] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0291.342] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236538 | out: hHeap=0x1f0000) returned 1 [0291.342] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239278 [0291.342] GetLastError () returned 0x0 [0291.343] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239160 [0291.343] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0291.343] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0291.343] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0291.343] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0291.343] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0291.343] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0291.343] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x24ec00 [0291.343] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285cf8 [0291.344] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0291.344] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0291.344] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0291.344] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0291.344] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2858d8 [0291.344] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0291.344] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0291.344] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fce0 [0291.344] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x252370 [0291.344] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x232ef0 [0291.344] QueryPerformanceCounter (in: lpPerformanceCount=0x173e300 | out: lpPerformanceCount=0x173e300*=44871315355) returned 1 [0291.344] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e340 | out: lpSystemTimeAsFileTime=0x173e340) [0291.344] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238850 [0291.345] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0291.345] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d10 [0291.345] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d10 | out: hHeap=0x1f0000) returned 1 [0291.345] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0291.345] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0291.345] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d90 [0291.345] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d90 | out: hHeap=0x1f0000) returned 1 [0291.345] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0291.345] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238850 | out: hHeap=0x1f0000) returned 1 [0291.345] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0291.345] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238e50 [0291.345] GetLastError () returned 0x0 [0291.346] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0291.346] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0291.346] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0291.346] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260bf8 [0291.346] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260c48 [0291.346] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0291.346] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0291.346] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260c70 [0291.346] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0291.346] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x222ee8 [0291.346] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0291.346] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0291.346] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0291.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0291.347] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0291.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260a68 [0291.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260568 [0291.347] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a68 | out: hHeap=0x1f0000) returned 1 [0291.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0291.347] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0291.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0291.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x20d5e0 [0291.347] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20d5e0 | out: hHeap=0x1f0000) returned 1 [0291.347] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0291.347] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0291.348] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210198 [0291.348] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228d88 [0291.348] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2604f0 [0291.348] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2608d8 [0291.348] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260928 [0291.348] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2606d0 [0291.348] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0291.348] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0291.348] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0291.348] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260810 [0291.348] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260568 [0291.349] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0291.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0291.349] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0291.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2067d8 [0291.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x2b3990 [0291.349] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b3990 | out: hHeap=0x1f0000) returned 1 [0291.349] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2067d8 | out: hHeap=0x1f0000) returned 1 [0291.349] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c70 | out: hHeap=0x1f0000) returned 1 [0291.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0291.349] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0291.349] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0291.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204df0 [0291.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0291.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0291.350] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0291.350] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a9fe0 [0291.350] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0291.350] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0291.350] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0291.350] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228d88 | out: hHeap=0x1f0000) returned 1 [0291.350] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0291.350] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204df0 | out: hHeap=0x1f0000) returned 1 [0291.350] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0291.350] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0291.350] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aaa48 [0291.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aaa48 | out: hHeap=0x1f0000) returned 1 [0291.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ee8 | out: hHeap=0x1f0000) returned 1 [0291.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0291.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0291.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0291.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0291.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0291.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0291.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0291.351] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aa920 [0291.351] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a96a0 [0291.352] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aa920 | out: hHeap=0x1f0000) returned 1 [0291.352] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a96a0 | out: hHeap=0x1f0000) returned 1 [0291.352] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a9fe0 | out: hHeap=0x1f0000) returned 1 [0291.352] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0291.352] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2858d8 | out: hHeap=0x1f0000) returned 1 [0291.352] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24ec00 | out: hHeap=0x1f0000) returned 1 [0291.352] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x233468 [0291.352] GetLastError () returned 0x0 [0291.352] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387e0 [0291.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389c0 [0291.595] CreateFileW (lpFileName="C:\\\\Logs\\Application.evtx.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\logs\\application.evtx.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e6b0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0291.595] GetFileType (hFile=0x198) returned 0x1 [0291.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28cfc8 [0291.595] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e638 | out: lpNewFilePointer=0x0) returned 1 [0291.595] GetLastError () returned 0xb7 [0291.596] CloseHandle (hObject=0x198) returned 1 [0291.596] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389c0 | out: hHeap=0x1f0000) returned 1 [0291.596] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387e0 | out: hHeap=0x1f0000) returned 1 [0291.596] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285cf8 | out: hHeap=0x1f0000) returned 1 [0291.596] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285e00 | out: hHeap=0x1f0000) returned 1 [0291.596] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b30 | out: hHeap=0x1f0000) returned 1 [0291.596] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c10 | out: hHeap=0x1f0000) returned 1 [0291.597] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2364d0 | out: hHeap=0x1f0000) returned 1 [0291.597] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0291.597] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0291.597] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233468 | out: hHeap=0x1f0000) returned 1 [0291.597] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c20 | out: hHeap=0x1f0000) returned 1 [0291.597] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0291.597] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x252370 | out: hHeap=0x1f0000) returned 1 [0291.597] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232ef0 | out: hHeap=0x1f0000) returned 1 [0291.597] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238da8 | out: hHeap=0x1f0000) returned 1 [0291.597] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238810 | out: hHeap=0x1f0000) returned 1 [0291.597] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0291.597] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b58 | out: hHeap=0x1f0000) returned 1 [0291.597] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238840 | out: hHeap=0x1f0000) returned 1 [0291.597] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0291.597] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a18 | out: hHeap=0x1f0000) returned 1 [0291.598] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238990 | out: hHeap=0x1f0000) returned 1 [0291.598] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2852a8 | out: hHeap=0x1f0000) returned 1 [0291.598] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bd0 | out: hHeap=0x1f0000) returned 1 [0291.598] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0291.598] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229328 | out: hHeap=0x1f0000) returned 1 [0291.598] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b08 | out: hHeap=0x1f0000) returned 1 [0291.598] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0291.598] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229370 | out: hHeap=0x1f0000) returned 1 [0291.598] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238980 | out: hHeap=0x1f0000) returned 1 [0291.598] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238800 | out: hHeap=0x1f0000) returned 1 [0291.598] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28efd8 | out: hHeap=0x1f0000) returned 1 [0291.598] CloseHandle (hObject=0x1ac) returned 1 [0291.599] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388d0 | out: hHeap=0x1f0000) returned 1 [0291.599] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387f0 | out: hHeap=0x1f0000) returned 1 [0291.599] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236de0 | out: hHeap=0x1f0000) returned 1 [0291.599] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24b5e0 | out: hHeap=0x1f0000) returned 1 [0291.599] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0291.599] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ef0 | out: hHeap=0x1f0000) returned 1 [0291.599] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28ffe0 | out: hHeap=0x1f0000) returned 1 [0291.600] CloseHandle (hObject=0x174) returned 1 [0291.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389b0 | out: hHeap=0x1f0000) returned 1 [0291.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238830 | out: hHeap=0x1f0000) returned 1 [0291.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2adbf8 | out: hHeap=0x1f0000) returned 1 [0291.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d70 | out: hHeap=0x1f0000) returned 1 [0291.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21bca8 | out: hHeap=0x1f0000) returned 1 [0291.601] CloseHandle (hObject=0x1e0) returned 1 [0291.601] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238930 | out: hHeap=0x1f0000) returned 1 [0291.601] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238940 | out: hHeap=0x1f0000) returned 1 [0291.601] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad130 | out: hHeap=0x1f0000) returned 1 [0291.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388a0 | out: hHeap=0x1f0000) returned 1 [0291.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238970 | out: hHeap=0x1f0000) returned 1 [0291.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238820 | out: hHeap=0x1f0000) returned 1 [0291.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388b0 | out: hHeap=0x1f0000) returned 1 [0291.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0291.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x258298 | out: hHeap=0x1f0000) returned 1 [0291.603] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232cc0 | out: hHeap=0x1f0000) returned 1 [0291.603] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206928 | out: hHeap=0x1f0000) returned 1 [0291.603] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210240 | out: hHeap=0x1f0000) returned 1 [0291.603] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0291.603] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab978 | out: hHeap=0x1f0000) returned 1 [0291.603] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x254980 | out: hHeap=0x1f0000) returned 1 [0291.603] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233350 | out: hHeap=0x1f0000) returned 1 [0291.603] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239048 | out: hHeap=0x1f0000) returned 1 [0291.603] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229178 | out: hHeap=0x1f0000) returned 1 [0291.603] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227850 | out: hHeap=0x1f0000) returned 1 [0291.603] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2292e0 | out: hHeap=0x1f0000) returned 1 [0291.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0291.604] DeleteFileW (lpFileName="C:\\\\Logs\\Application.evtx" (normalized: "c:\\logs\\application.evtx")) returned 1 [0291.606] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505ee5f0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505ee5f0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="HardwareEvents.evtx", cAlternateFileName="HARDWA~1.EVT")) returned 1 [0291.606] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238d00 [0291.606] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0291.606] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2292e0 [0291.606] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0291.606] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228ea8 | out: hHeap=0x1f0000) returned 1 [0291.606] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238d00 | out: hHeap=0x1f0000) returned 1 [0291.607] CreateFileW (lpFileName="C:\\\\Logs\\HardwareEvents.evtx" (normalized: "c:\\logs\\hardwareevents.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0291.607] GetFileType (hFile=0x1e0) returned 0x1 [0291.608] CloseHandle (hObject=0x1e0) returned 1 [0291.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229328 [0291.608] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\HardwareEvents.evtx" (normalized: "c:\\logs\\hardwareevents.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505ee5f0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505ee5f0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0291.608] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229328 | out: hHeap=0x1f0000) returned 1 [0291.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229178 [0291.608] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\HardwareEvents.evtx" (normalized: "c:\\logs\\hardwareevents.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505ee5f0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505ee5f0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0291.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229178 | out: hHeap=0x1f0000) returned 1 [0291.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228d40 [0291.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228d40 | out: hHeap=0x1f0000) returned 1 [0291.609] GetLastError () returned 0x0 [0291.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0291.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228e18 [0291.610] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x226d28 [0291.610] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229250 [0291.610] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238e88 [0291.610] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0291.610] CryptAcquireContextA (in: phProv=0x173e7b0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e7b0*=0x2121c8) returned 1 [0291.611] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x260810 | out: pbBuffer=0x260810) returned 1 [0291.611] CryptReleaseContext (hProv=0x2121c8, dwFlags=0x0) returned 1 [0291.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0291.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x255c88 [0291.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2337b0 [0291.611] QueryPerformanceCounter (in: lpPerformanceCount=0x173e744 | out: lpPerformanceCount=0x173e744*=44898035815) returned 1 [0291.612] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e784 | out: lpSystemTimeAsFileTime=0x173e784) [0291.612] QueryPerformanceCounter (in: lpPerformanceCount=0x173e744 | out: lpPerformanceCount=0x173e744*=44898061412) returned 1 [0291.612] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e784 | out: lpSystemTimeAsFileTime=0x173e784) [0291.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239198 [0291.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x24fd60 [0291.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2339e0 [0291.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x2ab8a8 [0291.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0291.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206688 [0291.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210210 [0291.612] GetLastError () returned 0x0 [0291.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8d18 [0291.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0291.613] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0291.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x210270 [0291.613] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0291.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238930 [0291.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389b0 [0291.614] CreateFileW (lpFileName="C:\\\\Logs\\HardwareEvents.evtx.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\logs\\hardwareevents.evtx.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e650, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0291.615] GetFileType (hFile=0x1e0) returned 0x1 [0291.615] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238820 [0291.615] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238940 [0291.616] CreateFileW (lpFileName="C:\\\\Logs\\HardwareEvents.evtx" (normalized: "c:\\logs\\hardwareevents.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e680, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0291.616] GetFileType (hFile=0x174) returned 0x1 [0291.616] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ef0 [0291.616] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f10 [0291.616] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad6f0 [0291.616] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238850 [0291.617] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387e0 [0291.617] CreateFileW (lpFileName="C:\\\\Logs\\HardwareEvents.evtx.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\logs\\hardwareevents.evtx.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e5cc, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0291.618] GetFileType (hFile=0x1ac) returned 0x1 [0291.618] GetLastError () returned 0xb7 [0291.619] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe4) returned 0x21b168 [0291.619] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f30 [0291.619] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cd0 [0291.619] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204db0 [0291.619] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2adbf8 [0291.619] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387f0 [0291.620] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388c0 [0291.620] CreateFileW (lpFileName="C:\\\\Logs\\HardwareEvents.evtx.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\logs\\hardwareevents.evtx.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e5cc, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0291.621] GetFileType (hFile=0x198) returned 0x1 [0291.621] GetLastError () returned 0xb7 [0291.621] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bb0 [0291.621] GetLastError () returned 0xb7 [0291.621] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0291.621] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d90 [0291.621] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204df0 [0291.622] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb8) returned 0x2373e0 [0291.622] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238900 [0291.622] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238830 [0291.622] CreateFileW (lpFileName="C:\\\\Logs\\HardwareEvents.evtx" (normalized: "c:\\logs\\hardwareevents.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e5c4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0291.623] GetFileType (hFile=0x1b0) returned 0x1 [0291.623] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x290fe8 [0291.624] ReadFile (in: hFile=0x1b0, lpBuffer=0x290fe8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e520, lpOverlapped=0x0 | out: lpBuffer=0x290fe8*, lpNumberOfBytesRead=0x173e520*=0x1000, lpOverlapped=0x0) returned 1 [0291.635] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24d218 [0291.636] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28cfc8 [0291.636] GetLastError () returned 0x0 [0291.923] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101b0 [0291.923] WriteFile (in: hFile=0x198, lpBuffer=0x28cfc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x173e364, lpOverlapped=0x0 | out: lpBuffer=0x28cfc8*, lpNumberOfBytesWritten=0x173e364*=0x1000, lpOverlapped=0x0) returned 1 [0291.924] GetLastError () returned 0x0 [0291.924] CloseHandle (hObject=0x1e0) returned 1 [0291.925] CloseHandle (hObject=0x174) returned 1 [0291.925] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389c0 [0291.926] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238970 [0291.926] CreateFileW (lpFileName="C:\\\\Logs\\HardwareEvents.evtx" (normalized: "c:\\logs\\hardwareevents.evtx"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e680, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0291.929] GetFileType (hFile=0x174) returned 0x1 [0291.930] GetLastError () returned 0xb7 [0291.930] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28afb8 [0291.930] GetLastError () returned 0xb7 [0291.932] CloseHandle (hObject=0x174) returned 1 [0291.933] DeleteFileW (lpFileName="C:\\\\Logs\\HardwareEvents.evtx" (normalized: "c:\\logs\\hardwareevents.evtx")) returned 0 [0291.933] GetLastError () returned 0x20 [0291.933] GetLastError () returned 0x20 [0291.934] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228dd0 [0291.934] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260590 [0291.934] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260748 [0291.934] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x228e60 [0291.934] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e90 [0291.934] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c30 [0291.934] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x238980 [0291.934] GetLastError () returned 0x20 [0291.934] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239198 [0291.935] GetLastError () returned 0x20 [0291.935] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239278 [0291.935] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236468 [0291.935] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2605b8 [0291.935] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2852a8 [0291.935] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238870 [0291.935] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0291.935] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0291.935] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238950 [0291.935] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609a0 [0291.935] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210240 [0291.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260770 [0291.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285bf0 [0291.936] GetLastError () returned 0x20 [0291.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238840 [0291.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238960 [0291.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238990 [0291.936] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238960 | out: hHeap=0x1f0000) returned 1 [0291.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238860 [0291.936] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238990 | out: hHeap=0x1f0000) returned 1 [0291.936] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238840 | out: hHeap=0x1f0000) returned 1 [0291.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238990 [0291.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210258 [0291.937] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238990 | out: hHeap=0x1f0000) returned 1 [0291.937] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210198 [0291.937] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0291.937] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238860 | out: hHeap=0x1f0000) returned 1 [0291.937] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210258 [0291.937] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20fef8 [0291.937] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0291.937] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210258 [0291.937] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20fef8 | out: hHeap=0x1f0000) returned 1 [0291.937] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0291.937] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210198 [0291.937] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204cf0 [0291.938] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0291.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c90 [0291.938] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cf0 | out: hHeap=0x1f0000) returned 1 [0291.938] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0291.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cb0 [0291.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2606d0 [0291.938] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cb0 | out: hHeap=0x1f0000) returned 1 [0291.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204d90 [0291.938] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0291.938] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c90 | out: hHeap=0x1f0000) returned 1 [0291.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204f50 [0291.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x2066b8 [0291.939] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f50 | out: hHeap=0x1f0000) returned 1 [0291.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2606d0 [0291.939] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2066b8 | out: hHeap=0x1f0000) returned 1 [0291.939] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d90 | out: hHeap=0x1f0000) returned 1 [0291.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238990 [0291.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210258 [0291.939] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238990 | out: hHeap=0x1f0000) returned 1 [0291.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210198 [0291.939] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0291.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204ef0 [0291.939] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0291.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x2067d8 [0291.939] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ef0 | out: hHeap=0x1f0000) returned 1 [0291.939] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2067d8 | out: hHeap=0x1f0000) returned 1 [0291.940] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0291.940] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0291.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0291.940] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2852a8 | out: hHeap=0x1f0000) returned 1 [0291.940] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0291.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238d38 [0291.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260838 [0291.940] CryptAcquireContextA (in: phProv=0x173e7b0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e7b0*=0x2129c0) returned 1 [0291.941] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x260838 | out: pbBuffer=0x260838) returned 1 [0291.941] CryptReleaseContext (hProv=0x2129c0, dwFlags=0x0) returned 1 [0291.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260838 | out: hHeap=0x1f0000) returned 1 [0291.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260590 [0291.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260928 [0291.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238da8 [0291.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0291.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0291.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238da8 | out: hHeap=0x1f0000) returned 1 [0291.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8dc8 [0291.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210258 [0291.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x236538 [0291.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260950 [0291.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2855c0 [0291.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f70 [0291.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2365a0 [0291.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260810 [0291.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2858d8 [0291.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238920 [0291.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0291.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210198 [0291.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238840 [0291.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260838 [0291.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210018 [0291.943] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210018 | out: hHeap=0x1f0000) returned 1 [0291.943] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260838 | out: hHeap=0x1f0000) returned 1 [0291.943] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238840 | out: hHeap=0x1f0000) returned 1 [0291.943] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0291.943] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0291.943] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238920 | out: hHeap=0x1f0000) returned 1 [0291.943] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2858d8 | out: hHeap=0x1f0000) returned 1 [0291.944] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0291.944] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2365a0 | out: hHeap=0x1f0000) returned 1 [0291.944] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239160 [0291.944] GetLastError () returned 0x0 [0291.944] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239208 [0291.944] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0291.944] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0291.944] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0291.944] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0291.944] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0291.945] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0291.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x24e6c0 [0291.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2856c8 [0291.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0291.945] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0291.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0291.945] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0291.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285098 [0291.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0291.945] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0291.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fb50 [0291.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x254980 [0291.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x233350 [0291.946] QueryPerformanceCounter (in: lpPerformanceCount=0x173e300 | out: lpPerformanceCount=0x173e300*=44931458135) returned 1 [0291.946] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e340 | out: lpSystemTimeAsFileTime=0x173e340) [0291.946] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238890 [0291.946] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0291.946] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204df0 [0291.946] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204df0 | out: hHeap=0x1f0000) returned 1 [0291.946] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0291.946] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0291.947] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d30 [0291.947] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d30 | out: hHeap=0x1f0000) returned 1 [0291.947] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0291.947] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238890 | out: hHeap=0x1f0000) returned 1 [0291.947] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0291.947] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238f30 [0291.947] GetLastError () returned 0x0 [0291.947] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0291.948] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0291.948] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0291.948] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260590 [0291.948] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260810 [0291.948] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0291.948] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0291.948] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260838 [0291.948] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0291.948] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x222ee8 [0291.948] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0291.948] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0291.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0291.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0291.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0291.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2604f0 [0291.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2608d8 [0291.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0291.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0291.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0291.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0291.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x20d5e0 [0291.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20d5e0 | out: hHeap=0x1f0000) returned 1 [0291.950] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0291.950] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0291.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210198 [0291.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229178 [0291.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2605b8 [0291.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260608 [0291.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2606d0 [0291.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260860 [0291.950] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0291.950] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0291.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0291.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260888 [0291.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2608d8 [0291.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0291.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0291.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0291.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2066b8 [0291.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x2b3548 [0291.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b3548 | out: hHeap=0x1f0000) returned 1 [0291.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2066b8 | out: hHeap=0x1f0000) returned 1 [0291.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260838 | out: hHeap=0x1f0000) returned 1 [0291.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0291.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0291.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0291.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204db0 [0291.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0291.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0291.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0291.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a8fb0 [0291.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0291.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0291.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0291.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229178 | out: hHeap=0x1f0000) returned 1 [0291.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0291.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204db0 | out: hHeap=0x1f0000) returned 1 [0291.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0291.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0291.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aa480 [0291.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aa480 | out: hHeap=0x1f0000) returned 1 [0291.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ee8 | out: hHeap=0x1f0000) returned 1 [0291.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0291.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0291.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0291.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0291.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0291.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0291.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0291.953] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aa920 [0291.953] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a98f0 [0291.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aa920 | out: hHeap=0x1f0000) returned 1 [0291.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a98f0 | out: hHeap=0x1f0000) returned 1 [0291.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8fb0 | out: hHeap=0x1f0000) returned 1 [0291.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0291.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285098 | out: hHeap=0x1f0000) returned 1 [0291.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24e6c0 | out: hHeap=0x1f0000) returned 1 [0291.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x2338c8 [0291.954] GetLastError () returned 0x0 [0291.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238840 [0291.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238860 [0291.955] CreateFileW (lpFileName="C:\\\\Logs\\HardwareEvents.evtx.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\logs\\hardwareevents.evtx.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e6b0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0291.955] GetFileType (hFile=0x174) returned 0x1 [0291.956] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28afb8 [0291.956] SetFilePointerEx (in: hFile=0x174, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e638 | out: lpNewFilePointer=0x0) returned 1 [0291.956] GetLastError () returned 0xb7 [0291.956] CloseHandle (hObject=0x174) returned 1 [0291.957] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238860 | out: hHeap=0x1f0000) returned 1 [0291.957] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238840 | out: hHeap=0x1f0000) returned 1 [0291.957] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2856c8 | out: hHeap=0x1f0000) returned 1 [0291.957] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2855c0 | out: hHeap=0x1f0000) returned 1 [0291.957] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0291.957] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f70 | out: hHeap=0x1f0000) returned 1 [0291.957] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236538 | out: hHeap=0x1f0000) returned 1 [0291.957] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0291.957] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8dc8 | out: hHeap=0x1f0000) returned 1 [0291.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2338c8 | out: hHeap=0x1f0000) returned 1 [0291.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0291.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0291.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x254980 | out: hHeap=0x1f0000) returned 1 [0291.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233350 | out: hHeap=0x1f0000) returned 1 [0291.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238d38 | out: hHeap=0x1f0000) returned 1 [0291.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238980 | out: hHeap=0x1f0000) returned 1 [0291.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210240 | out: hHeap=0x1f0000) returned 1 [0291.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0291.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238950 | out: hHeap=0x1f0000) returned 1 [0291.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0291.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0291.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238870 | out: hHeap=0x1f0000) returned 1 [0291.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285bf0 | out: hHeap=0x1f0000) returned 1 [0291.959] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0291.959] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0291.959] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228e60 | out: hHeap=0x1f0000) returned 1 [0291.959] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0291.959] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0291.959] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228dd0 | out: hHeap=0x1f0000) returned 1 [0291.959] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238970 | out: hHeap=0x1f0000) returned 1 [0291.959] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389c0 | out: hHeap=0x1f0000) returned 1 [0291.959] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x290fe8 | out: hHeap=0x1f0000) returned 1 [0291.959] CloseHandle (hObject=0x1b0) returned 1 [0291.960] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238830 | out: hHeap=0x1f0000) returned 1 [0291.960] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238900 | out: hHeap=0x1f0000) returned 1 [0291.960] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2373e0 | out: hHeap=0x1f0000) returned 1 [0291.960] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24d218 | out: hHeap=0x1f0000) returned 1 [0291.960] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0291.960] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d70 | out: hHeap=0x1f0000) returned 1 [0291.961] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28cfc8 | out: hHeap=0x1f0000) returned 1 [0291.961] CloseHandle (hObject=0x198) returned 1 [0292.253] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388c0 | out: hHeap=0x1f0000) returned 1 [0292.253] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387f0 | out: hHeap=0x1f0000) returned 1 [0292.253] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2adbf8 | out: hHeap=0x1f0000) returned 1 [0292.254] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f30 | out: hHeap=0x1f0000) returned 1 [0292.254] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21b168 | out: hHeap=0x1f0000) returned 1 [0292.254] CloseHandle (hObject=0x1ac) returned 1 [0292.255] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387e0 | out: hHeap=0x1f0000) returned 1 [0292.255] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238850 | out: hHeap=0x1f0000) returned 1 [0292.255] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad6f0 | out: hHeap=0x1f0000) returned 1 [0292.255] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238940 | out: hHeap=0x1f0000) returned 1 [0292.255] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238820 | out: hHeap=0x1f0000) returned 1 [0292.255] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389b0 | out: hHeap=0x1f0000) returned 1 [0292.255] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238930 | out: hHeap=0x1f0000) returned 1 [0292.255] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210270 | out: hHeap=0x1f0000) returned 1 [0292.255] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24fd60 | out: hHeap=0x1f0000) returned 1 [0292.255] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2339e0 | out: hHeap=0x1f0000) returned 1 [0292.256] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206688 | out: hHeap=0x1f0000) returned 1 [0292.256] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0292.256] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0292.256] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab8a8 | out: hHeap=0x1f0000) returned 1 [0292.256] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x255c88 | out: hHeap=0x1f0000) returned 1 [0292.256] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2337b0 | out: hHeap=0x1f0000) returned 1 [0292.256] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238e88 | out: hHeap=0x1f0000) returned 1 [0292.256] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229250 | out: hHeap=0x1f0000) returned 1 [0292.256] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226d28 | out: hHeap=0x1f0000) returned 1 [0292.256] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228e18 | out: hHeap=0x1f0000) returned 1 [0292.257] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0292.257] DeleteFileW (lpFileName="C:\\\\Logs\\HardwareEvents.evtx" (normalized: "c:\\logs\\hardwareevents.evtx")) returned 1 [0292.259] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505a2134, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505a2134, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer.evtx", cAlternateFileName="INTERN~1.EVT")) returned 1 [0292.259] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239208 [0292.259] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0292.259] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229178 [0292.259] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0292.260] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2292e0 | out: hHeap=0x1f0000) returned 1 [0292.260] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239208 | out: hHeap=0x1f0000) returned 1 [0292.260] CreateFileW (lpFileName="C:\\\\Logs\\Internet Explorer.evtx" (normalized: "c:\\logs\\internet explorer.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0292.261] GetFileType (hFile=0x1ac) returned 0x1 [0292.261] CloseHandle (hObject=0x1ac) returned 1 [0292.262] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228dd0 [0292.262] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Internet Explorer.evtx" (normalized: "c:\\logs\\internet explorer.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505a2134, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505a2134, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0292.262] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228dd0 | out: hHeap=0x1f0000) returned 1 [0292.262] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2293b8 [0292.262] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Internet Explorer.evtx" (normalized: "c:\\logs\\internet explorer.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505a2134, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505a2134, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0292.263] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2293b8 | out: hHeap=0x1f0000) returned 1 [0292.263] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229010 [0292.263] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229010 | out: hHeap=0x1f0000) returned 1 [0292.263] GetLastError () returned 0x0 [0292.264] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0292.264] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2291c0 [0292.264] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x227058 [0292.264] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2293b8 [0292.264] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238ec0 [0292.264] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0292.264] CryptAcquireContextA (in: phProv=0x173e7b0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e7b0*=0x2121c8) returned 1 [0292.265] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x260568 | out: pbBuffer=0x260568) returned 1 [0292.265] CryptReleaseContext (hProv=0x2121c8, dwFlags=0x0) returned 1 [0292.266] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0292.266] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x254980 [0292.266] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x233120 [0292.266] QueryPerformanceCounter (in: lpPerformanceCount=0x173e744 | out: lpPerformanceCount=0x173e744*=44963487094) returned 1 [0292.266] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e784 | out: lpSystemTimeAsFileTime=0x173e784) [0292.266] QueryPerformanceCounter (in: lpPerformanceCount=0x173e744 | out: lpPerformanceCount=0x173e744*=44963528029) returned 1 [0292.267] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e784 | out: lpSystemTimeAsFileTime=0x173e784) [0292.267] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238cc8 [0292.267] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x255c88 [0292.267] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2337b0 [0292.267] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x2ab568 [0292.267] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210240 [0292.267] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206628 [0292.267] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210210 [0292.268] GetLastError () returned 0x0 [0292.268] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8dc8 [0292.268] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0292.268] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8dc8 | out: hHeap=0x1f0000) returned 1 [0292.268] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x210270 [0292.269] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0292.269] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238930 [0292.269] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238970 [0292.270] CreateFileW (lpFileName="C:\\\\Logs\\Internet Explorer.evtx.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\logs\\internet explorer.evtx.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e650, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0292.271] GetFileType (hFile=0x1ac) returned 0x1 [0292.271] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388d0 [0292.272] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238850 [0292.273] CreateFileW (lpFileName="C:\\\\Logs\\Internet Explorer.evtx" (normalized: "c:\\logs\\internet explorer.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e680, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0292.273] GetFileType (hFile=0x1c0) returned 0x1 [0292.274] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ef0 [0292.275] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c30 [0292.275] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2add68 [0292.275] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238880 [0292.275] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388f0 [0292.276] CreateFileW (lpFileName="C:\\\\Logs\\Internet Explorer.evtx.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\logs\\internet explorer.evtx.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e5cc, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0292.277] GetFileType (hFile=0x198) returned 0x1 [0292.277] GetLastError () returned 0xb7 [0292.277] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe4) returned 0x2b1cf8 [0292.278] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d90 [0292.278] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f50 [0292.278] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bd0 [0292.278] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad580 [0292.278] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388c0 [0292.278] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238900 [0292.279] CreateFileW (lpFileName="C:\\\\Logs\\Internet Explorer.evtx.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\logs\\internet explorer.evtx.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e5cc, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0292.280] GetFileType (hFile=0x1b0) returned 0x1 [0292.280] GetLastError () returned 0xb7 [0292.280] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bb0 [0292.280] GetLastError () returned 0xb7 [0292.281] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ef0 [0292.281] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f10 [0292.281] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c90 [0292.281] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb8) returned 0x236ea0 [0292.281] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389c0 [0292.281] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238980 [0292.282] CreateFileW (lpFileName="C:\\\\Logs\\Internet Explorer.evtx" (normalized: "c:\\logs\\internet explorer.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e5c4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0292.282] GetFileType (hFile=0x174) returned 0x1 [0292.283] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28afb8 [0292.283] ReadFile (in: hFile=0x174, lpBuffer=0x28afb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e520, lpOverlapped=0x0 | out: lpBuffer=0x28afb8*, lpNumberOfBytesRead=0x173e520*=0x1000, lpOverlapped=0x0) returned 1 [0292.287] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24a1b8 [0292.288] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28cfc8 [0292.288] GetLastError () returned 0x0 [0292.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210198 [0292.569] WriteFile (in: hFile=0x1b0, lpBuffer=0x28cfc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x173e364, lpOverlapped=0x0 | out: lpBuffer=0x28cfc8*, lpNumberOfBytesWritten=0x173e364*=0x1000, lpOverlapped=0x0) returned 1 [0292.569] GetLastError () returned 0x0 [0292.570] CloseHandle (hObject=0x1ac) returned 1 [0292.570] CloseHandle (hObject=0x1c0) returned 1 [0292.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388e0 [0292.572] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238830 [0292.572] CreateFileW (lpFileName="C:\\\\Logs\\Internet Explorer.evtx" (normalized: "c:\\logs\\internet explorer.evtx"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e680, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0292.575] GetFileType (hFile=0x1c0) returned 0x1 [0292.575] GetLastError () returned 0xb7 [0292.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28efd8 [0292.576] GetLastError () returned 0xb7 [0292.577] CloseHandle (hObject=0x1c0) returned 1 [0292.578] DeleteFileW (lpFileName="C:\\\\Logs\\Internet Explorer.evtx" (normalized: "c:\\logs\\internet explorer.evtx")) returned 0 [0292.578] GetLastError () returned 0x20 [0292.578] GetLastError () returned 0x20 [0292.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229298 [0292.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260978 [0292.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2609a0 [0292.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x228dd0 [0292.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c90 [0292.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cb0 [0292.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x2388a0 [0292.579] GetLastError () returned 0x20 [0292.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238da8 [0292.580] GetLastError () returned 0x20 [0292.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239080 [0292.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236468 [0292.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260770 [0292.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2857d0 [0292.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238990 [0292.581] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0292.581] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210258 [0292.581] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389b0 [0292.581] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0292.581] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101b0 [0292.581] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2606a8 [0292.581] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2859e0 [0292.581] GetLastError () returned 0x20 [0292.582] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x2388b0 [0292.582] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238800 [0292.582] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387e0 [0292.582] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238800 | out: hHeap=0x1f0000) returned 1 [0292.582] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387f0 [0292.582] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387e0 | out: hHeap=0x1f0000) returned 1 [0292.582] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388b0 | out: hHeap=0x1f0000) returned 1 [0292.582] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238890 [0292.582] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101c8 [0292.583] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238890 | out: hHeap=0x1f0000) returned 1 [0292.583] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101e0 [0292.583] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0292.583] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387f0 | out: hHeap=0x1f0000) returned 1 [0292.583] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101c8 [0292.583] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210018 [0292.583] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0292.583] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0292.583] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210018 | out: hHeap=0x1f0000) returned 1 [0292.583] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0292.583] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0292.584] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204cf0 [0292.584] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0292.584] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f10 [0292.584] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cf0 | out: hHeap=0x1f0000) returned 1 [0292.584] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0292.584] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c90 [0292.584] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260748 [0292.584] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c90 | out: hHeap=0x1f0000) returned 1 [0292.584] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204f30 [0292.584] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0292.585] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f10 | out: hHeap=0x1f0000) returned 1 [0292.585] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204cd0 [0292.585] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206658 [0292.585] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cd0 | out: hHeap=0x1f0000) returned 1 [0292.585] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2605b8 [0292.585] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206658 | out: hHeap=0x1f0000) returned 1 [0292.585] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f30 | out: hHeap=0x1f0000) returned 1 [0292.585] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238940 [0292.585] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101c8 [0292.585] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238940 | out: hHeap=0x1f0000) returned 1 [0292.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0292.586] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0292.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204d10 [0292.586] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0292.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x2066b8 [0292.586] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d10 | out: hHeap=0x1f0000) returned 1 [0292.586] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2066b8 | out: hHeap=0x1f0000) returned 1 [0292.586] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0292.587] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0292.587] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0292.587] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2857d0 | out: hHeap=0x1f0000) returned 1 [0292.587] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0292.587] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c58 [0292.587] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0292.587] CryptAcquireContextA (in: phProv=0x173e7b0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e7b0*=0x211948) returned 1 [0292.588] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2608d8 | out: pbBuffer=0x2608d8) returned 1 [0292.588] CryptReleaseContext (hProv=0x211948, dwFlags=0x0) returned 1 [0292.588] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0292.589] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260928 [0292.589] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2606d0 [0292.589] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2392b0 [0292.589] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0292.589] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0292.589] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2392b0 | out: hHeap=0x1f0000) returned 1 [0292.589] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8d18 [0292.589] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0292.589] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x2364d0 [0292.589] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260978 [0292.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285ae8 [0292.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c30 [0292.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236538 [0292.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260748 [0292.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285bf0 [0292.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387e0 [0292.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0292.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0292.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238910 [0292.591] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0292.591] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210018 [0292.591] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210018 | out: hHeap=0x1f0000) returned 1 [0292.591] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0292.591] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238910 | out: hHeap=0x1f0000) returned 1 [0292.591] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0292.591] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0292.591] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387e0 | out: hHeap=0x1f0000) returned 1 [0292.591] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285bf0 | out: hHeap=0x1f0000) returned 1 [0292.591] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0292.591] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236538 | out: hHeap=0x1f0000) returned 1 [0292.591] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238e50 [0292.592] GetLastError () returned 0x0 [0292.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238de0 [0292.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0292.592] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0292.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0292.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0292.592] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0292.592] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0292.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x24e980 [0292.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2856c8 [0292.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0292.593] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0292.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0292.593] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0292.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2858d8 [0292.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0292.593] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0292.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fb50 [0292.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x258298 [0292.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x232cc0 [0292.593] QueryPerformanceCounter (in: lpPerformanceCount=0x173e300 | out: lpPerformanceCount=0x173e300*=44996306109) returned 1 [0292.594] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e340 | out: lpSystemTimeAsFileTime=0x173e340) [0292.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x2387e0 [0292.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0292.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c50 [0292.595] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c50 | out: hHeap=0x1f0000) returned 1 [0292.595] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0292.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0292.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c50 [0292.595] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c50 | out: hHeap=0x1f0000) returned 1 [0292.595] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0292.595] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387e0 | out: hHeap=0x1f0000) returned 1 [0292.595] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0292.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238c90 [0292.595] GetLastError () returned 0x0 [0292.596] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0292.596] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0292.596] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0292.596] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2604f0 [0292.596] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2608d8 [0292.596] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0292.596] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0292.596] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260860 [0292.596] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0292.596] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x222ee8 [0292.597] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0292.597] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0292.597] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0292.597] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0292.597] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0292.597] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260748 [0292.597] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260770 [0292.597] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0292.597] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0292.597] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0292.597] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0292.597] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x20d5e0 [0292.597] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20d5e0 | out: hHeap=0x1f0000) returned 1 [0292.597] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0292.598] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0292.598] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101e0 [0292.598] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228f38 [0292.598] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260590 [0292.598] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260748 [0292.598] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260888 [0292.598] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260928 [0292.598] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0292.598] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0292.598] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0292.598] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260518 [0292.598] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260748 [0292.598] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0292.598] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0292.599] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0292.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2067d8 [0292.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x2b1fe0 [0292.599] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b1fe0 | out: hHeap=0x1f0000) returned 1 [0292.599] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2067d8 | out: hHeap=0x1f0000) returned 1 [0292.599] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0292.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0292.599] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0292.599] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0292.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204f10 [0292.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0292.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0292.599] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0292.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a9200 [0292.599] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0292.599] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0292.599] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0292.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228f38 | out: hHeap=0x1f0000) returned 1 [0292.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0292.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f10 | out: hHeap=0x1f0000) returned 1 [0292.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0292.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0292.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aa108 [0292.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aa108 | out: hHeap=0x1f0000) returned 1 [0292.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ee8 | out: hHeap=0x1f0000) returned 1 [0292.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0292.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0292.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0292.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0292.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0292.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0292.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0292.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a9b40 [0292.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a9fe0 [0292.601] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a9b40 | out: hHeap=0x1f0000) returned 1 [0292.601] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a9fe0 | out: hHeap=0x1f0000) returned 1 [0292.601] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a9200 | out: hHeap=0x1f0000) returned 1 [0292.601] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0292.601] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2858d8 | out: hHeap=0x1f0000) returned 1 [0292.601] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24e980 | out: hHeap=0x1f0000) returned 1 [0292.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x233580 [0292.601] GetLastError () returned 0x0 [0292.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238920 [0292.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387e0 [0292.998] CreateFileW (lpFileName="C:\\\\Logs\\Internet Explorer.evtx.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\logs\\internet explorer.evtx.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e6b0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0292.998] GetFileType (hFile=0x1c0) returned 0x1 [0292.998] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28efd8 [0292.999] SetFilePointerEx (in: hFile=0x1c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e638 | out: lpNewFilePointer=0x0) returned 1 [0292.999] GetLastError () returned 0xb7 [0293.000] CloseHandle (hObject=0x1c0) returned 1 [0293.000] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387e0 | out: hHeap=0x1f0000) returned 1 [0293.000] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238920 | out: hHeap=0x1f0000) returned 1 [0293.000] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2856c8 | out: hHeap=0x1f0000) returned 1 [0293.000] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285ae8 | out: hHeap=0x1f0000) returned 1 [0293.000] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0293.000] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c30 | out: hHeap=0x1f0000) returned 1 [0293.000] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2364d0 | out: hHeap=0x1f0000) returned 1 [0293.000] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0293.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0293.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233580 | out: hHeap=0x1f0000) returned 1 [0293.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0293.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0293.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x258298 | out: hHeap=0x1f0000) returned 1 [0293.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232cc0 | out: hHeap=0x1f0000) returned 1 [0293.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c58 | out: hHeap=0x1f0000) returned 1 [0293.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388a0 | out: hHeap=0x1f0000) returned 1 [0293.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0293.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0293.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389b0 | out: hHeap=0x1f0000) returned 1 [0293.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0293.002] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0293.002] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238990 | out: hHeap=0x1f0000) returned 1 [0293.002] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2859e0 | out: hHeap=0x1f0000) returned 1 [0293.002] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0293.002] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0293.002] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228dd0 | out: hHeap=0x1f0000) returned 1 [0293.002] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0293.002] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0293.002] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229298 | out: hHeap=0x1f0000) returned 1 [0293.002] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238830 | out: hHeap=0x1f0000) returned 1 [0293.002] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388e0 | out: hHeap=0x1f0000) returned 1 [0293.003] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28afb8 | out: hHeap=0x1f0000) returned 1 [0293.003] CloseHandle (hObject=0x174) returned 1 [0293.004] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238980 | out: hHeap=0x1f0000) returned 1 [0293.004] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389c0 | out: hHeap=0x1f0000) returned 1 [0293.004] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236ea0 | out: hHeap=0x1f0000) returned 1 [0293.004] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24a1b8 | out: hHeap=0x1f0000) returned 1 [0293.004] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0293.004] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ef0 | out: hHeap=0x1f0000) returned 1 [0293.004] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28cfc8 | out: hHeap=0x1f0000) returned 1 [0293.005] CloseHandle (hObject=0x1b0) returned 1 [0293.005] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238900 | out: hHeap=0x1f0000) returned 1 [0293.005] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388c0 | out: hHeap=0x1f0000) returned 1 [0293.005] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad580 | out: hHeap=0x1f0000) returned 1 [0293.005] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d90 | out: hHeap=0x1f0000) returned 1 [0293.005] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b1cf8 | out: hHeap=0x1f0000) returned 1 [0293.006] CloseHandle (hObject=0x198) returned 1 [0293.006] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388f0 | out: hHeap=0x1f0000) returned 1 [0293.007] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238880 | out: hHeap=0x1f0000) returned 1 [0293.007] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2add68 | out: hHeap=0x1f0000) returned 1 [0293.007] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238850 | out: hHeap=0x1f0000) returned 1 [0293.007] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388d0 | out: hHeap=0x1f0000) returned 1 [0293.007] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238970 | out: hHeap=0x1f0000) returned 1 [0293.007] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238930 | out: hHeap=0x1f0000) returned 1 [0293.007] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210270 | out: hHeap=0x1f0000) returned 1 [0293.007] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x255c88 | out: hHeap=0x1f0000) returned 1 [0293.008] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2337b0 | out: hHeap=0x1f0000) returned 1 [0293.008] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206628 | out: hHeap=0x1f0000) returned 1 [0293.008] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0293.008] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210240 | out: hHeap=0x1f0000) returned 1 [0293.009] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab568 | out: hHeap=0x1f0000) returned 1 [0293.009] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x254980 | out: hHeap=0x1f0000) returned 1 [0293.009] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233120 | out: hHeap=0x1f0000) returned 1 [0293.009] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ec0 | out: hHeap=0x1f0000) returned 1 [0293.009] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2293b8 | out: hHeap=0x1f0000) returned 1 [0293.009] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227058 | out: hHeap=0x1f0000) returned 1 [0293.009] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2291c0 | out: hHeap=0x1f0000) returned 1 [0293.010] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0293.010] DeleteFileW (lpFileName="C:\\\\Logs\\Internet Explorer.evtx" (normalized: "c:\\logs\\internet explorer.evtx")) returned 1 [0293.012] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5057bed8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5057bed8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Key Management Service.evtx", cAlternateFileName="KEYMAN~1.EVT")) returned 1 [0293.012] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229250 [0293.013] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0293.013] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8d18 [0293.013] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0293.013] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229178 | out: hHeap=0x1f0000) returned 1 [0293.013] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229250 | out: hHeap=0x1f0000) returned 1 [0293.014] CreateFileW (lpFileName="C:\\\\Logs\\Key Management Service.evtx" (normalized: "c:\\logs\\key management service.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0293.014] GetFileType (hFile=0x198) returned 0x1 [0293.015] CloseHandle (hObject=0x198) returned 1 [0293.016] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8dc8 [0293.016] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Key Management Service.evtx" (normalized: "c:\\logs\\key management service.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5057bed8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5057bed8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0293.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8dc8 | out: hHeap=0x1f0000) returned 1 [0293.016] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8dc8 [0293.016] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Key Management Service.evtx" (normalized: "c:\\logs\\key management service.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5057bed8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5057bed8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0293.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8dc8 | out: hHeap=0x1f0000) returned 1 [0293.017] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8dc8 [0293.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8dc8 | out: hHeap=0x1f0000) returned 1 [0293.017] GetLastError () returned 0x0 [0293.017] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0293.018] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228d40 [0293.018] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2271f0 [0293.018] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8dc8 [0293.018] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239278 [0293.018] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0293.018] CryptAcquireContextA (in: phProv=0x173e7b0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e7b0*=0x211ae0) returned 1 [0293.019] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x260810 | out: pbBuffer=0x260810) returned 1 [0293.019] CryptReleaseContext (hProv=0x211ae0, dwFlags=0x0) returned 1 [0293.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0293.020] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x258298 [0293.020] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x233238 [0293.020] QueryPerformanceCounter (in: lpPerformanceCount=0x173e744 | out: lpPerformanceCount=0x173e744*=45038876762) returned 1 [0293.020] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e784 | out: lpSystemTimeAsFileTime=0x173e784) [0293.020] QueryPerformanceCounter (in: lpPerformanceCount=0x173e744 | out: lpPerformanceCount=0x173e744*=45038912421) returned 1 [0293.020] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e784 | out: lpSystemTimeAsFileTime=0x173e784) [0293.021] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238cc8 [0293.021] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x255c88 [0293.021] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x233580 [0293.021] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x2abbe8 [0293.021] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210240 [0293.021] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2067d8 [0293.021] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0293.021] GetLastError () returned 0x0 [0293.022] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236468 [0293.022] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a8c0 [0293.022] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0293.022] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xee) returned 0x21bd18 [0293.022] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a8c0 | out: hHeap=0x1f0000) returned 1 [0293.022] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238810 [0293.023] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388f0 [0293.023] CreateFileW (lpFileName="C:\\\\Logs\\Key Management Service.evtx.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\logs\\key management service.evtx.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e650, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0293.025] GetFileType (hFile=0x198) returned 0x1 [0293.025] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388d0 [0293.026] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389b0 [0293.029] CreateFileW (lpFileName="C:\\\\Logs\\Key Management Service.evtx" (normalized: "c:\\logs\\key management service.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e680, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0293.030] GetFileType (hFile=0x1b0) returned 0x1 [0293.030] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f50 [0293.030] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bd0 [0293.031] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad580 [0293.031] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388c0 [0293.032] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238900 [0293.032] CreateFileW (lpFileName="C:\\\\Logs\\Key Management Service.evtx.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\logs\\key management service.evtx.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e5cc, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0293.033] GetFileType (hFile=0x174) returned 0x1 [0293.033] GetLastError () returned 0xb7 [0293.034] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe4) returned 0x2b0fd8 [0293.034] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ef0 [0293.034] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f10 [0293.034] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c90 [0293.034] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad1e8 [0293.034] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389c0 [0293.309] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238970 [0293.310] CreateFileW (lpFileName="C:\\\\Logs\\Key Management Service.evtx.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\logs\\key management service.evtx.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e5cc, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0293.310] GetFileType (hFile=0x1c0) returned 0x1 [0293.310] GetLastError () returned 0xb7 [0293.311] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f30 [0293.311] GetLastError () returned 0xb7 [0293.311] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bf0 [0293.311] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c10 [0293.312] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c30 [0293.312] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb8) returned 0x2374a0 [0293.312] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238830 [0293.312] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238960 [0293.313] CreateFileW (lpFileName="C:\\\\Logs\\Key Management Service.evtx" (normalized: "c:\\logs\\key management service.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e5c4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0293.314] GetFileType (hFile=0x1ac) returned 0x1 [0293.315] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x290fe8 [0293.315] ReadFile (in: hFile=0x1ac, lpBuffer=0x290fe8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e520, lpOverlapped=0x0 | out: lpBuffer=0x290fe8*, lpNumberOfBytesRead=0x173e520*=0x1000, lpOverlapped=0x0) returned 1 [0293.368] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24ce10 [0293.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28afb8 [0293.369] GetLastError () returned 0x0 [0293.384] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210258 [0293.384] WriteFile (in: hFile=0x1c0, lpBuffer=0x28afb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x173e364, lpOverlapped=0x0 | out: lpBuffer=0x28afb8*, lpNumberOfBytesWritten=0x173e364*=0x1000, lpOverlapped=0x0) returned 1 [0293.385] GetLastError () returned 0x0 [0293.386] CloseHandle (hObject=0x198) returned 1 [0293.387] CloseHandle (hObject=0x1b0) returned 1 [0293.387] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238820 [0293.388] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238860 [0293.388] CreateFileW (lpFileName="C:\\\\Logs\\Key Management Service.evtx" (normalized: "c:\\logs\\key management service.evtx"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e680, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0293.391] GetFileType (hFile=0x1b0) returned 0x1 [0293.392] GetLastError () returned 0xb7 [0293.392] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28ffe0 [0293.392] GetLastError () returned 0xb7 [0293.394] CloseHandle (hObject=0x1b0) returned 1 [0293.394] DeleteFileW (lpFileName="C:\\\\Logs\\Key Management Service.evtx" (normalized: "c:\\logs\\key management service.evtx")) returned 0 [0293.394] GetLastError () returned 0x20 [0293.395] GetLastError () returned 0x20 [0293.395] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2291c0 [0293.395] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2609a0 [0293.395] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260770 [0293.395] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x229178 [0293.395] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f10 [0293.395] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c10 [0293.395] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x238950 [0293.395] GetLastError () returned 0x20 [0293.396] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239160 [0293.396] GetLastError () returned 0x20 [0293.396] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238da8 [0293.396] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236468 [0293.396] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2606a8 [0293.396] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2859e0 [0293.396] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238850 [0293.396] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0293.396] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101b0 [0293.396] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238800 [0293.396] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0293.397] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210198 [0293.397] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260810 [0293.397] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285cf8 [0293.397] GetLastError () returned 0x20 [0293.397] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x2388e0 [0293.397] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x2387e0 [0293.397] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238840 [0293.397] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387e0 | out: hHeap=0x1f0000) returned 1 [0293.397] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238890 [0293.397] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238840 | out: hHeap=0x1f0000) returned 1 [0293.397] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388e0 | out: hHeap=0x1f0000) returned 1 [0293.397] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238980 [0293.398] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210210 [0293.398] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238980 | out: hHeap=0x1f0000) returned 1 [0293.398] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101e0 [0293.398] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0293.398] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238890 | out: hHeap=0x1f0000) returned 1 [0293.398] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210210 [0293.398] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffa0 [0293.398] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0293.398] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210210 [0293.398] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffa0 | out: hHeap=0x1f0000) returned 1 [0293.398] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0293.399] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0293.399] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204e50 [0293.399] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0293.399] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bd0 [0293.399] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e50 | out: hHeap=0x1f0000) returned 1 [0293.399] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0293.399] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204dd0 [0293.399] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2606d0 [0293.399] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204dd0 | out: hHeap=0x1f0000) returned 1 [0293.399] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204c10 [0293.399] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0293.399] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bd0 | out: hHeap=0x1f0000) returned 1 [0293.400] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204f30 [0293.400] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206628 [0293.400] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f30 | out: hHeap=0x1f0000) returned 1 [0293.400] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2608d8 [0293.400] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206628 | out: hHeap=0x1f0000) returned 1 [0293.400] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c10 | out: hHeap=0x1f0000) returned 1 [0293.400] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238890 [0293.400] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210210 [0293.400] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238890 | out: hHeap=0x1f0000) returned 1 [0293.400] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0293.400] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0293.400] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204f70 [0293.401] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0293.401] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206628 [0293.401] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f70 | out: hHeap=0x1f0000) returned 1 [0293.401] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206628 | out: hHeap=0x1f0000) returned 1 [0293.401] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0293.401] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0293.401] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0293.401] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2859e0 | out: hHeap=0x1f0000) returned 1 [0293.401] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0293.402] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239160 [0293.402] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260888 [0293.402] CryptAcquireContextA (in: phProv=0x173e7b0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e7b0*=0x212828) returned 1 [0293.421] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x260888 | out: pbBuffer=0x260888) returned 1 [0293.421] CryptReleaseContext (hProv=0x212828, dwFlags=0x0) returned 1 [0293.421] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0293.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260888 [0293.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260590 [0293.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238f30 [0293.422] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0293.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0293.422] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238f30 | out: hHeap=0x1f0000) returned 1 [0293.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8e20 [0293.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0293.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x2364d0 [0293.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2604f0 [0293.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2858d8 [0293.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c10 [0293.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236538 [0293.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2606a8 [0293.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2853b0 [0293.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238840 [0293.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260838 [0293.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210210 [0293.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388e0 [0293.424] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0293.424] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffa0 [0293.424] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffa0 | out: hHeap=0x1f0000) returned 1 [0293.424] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0293.424] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388e0 | out: hHeap=0x1f0000) returned 1 [0293.424] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0293.424] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260838 | out: hHeap=0x1f0000) returned 1 [0293.424] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238840 | out: hHeap=0x1f0000) returned 1 [0293.424] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2853b0 | out: hHeap=0x1f0000) returned 1 [0293.425] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0293.425] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236538 | out: hHeap=0x1f0000) returned 1 [0293.425] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238f30 [0293.425] GetLastError () returned 0x0 [0293.425] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239010 [0293.425] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0293.426] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0293.426] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0293.426] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0293.426] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0293.426] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0293.426] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x24e6c0 [0293.426] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x284f90 [0293.426] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0293.426] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0293.426] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0293.426] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0293.427] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2856c8 [0293.427] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0293.427] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0293.427] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f5d8 [0293.427] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x254980 [0293.427] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2337b0 [0293.427] QueryPerformanceCounter (in: lpPerformanceCount=0x173e300 | out: lpPerformanceCount=0x173e300*=45079596194) returned 1 [0293.427] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e340 | out: lpSystemTimeAsFileTime=0x173e340) [0293.427] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x2387f0 [0293.427] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260518 [0293.428] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f10 [0293.428] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f10 | out: hHeap=0x1f0000) returned 1 [0293.428] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0293.428] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0293.428] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d30 [0293.428] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d30 | out: hHeap=0x1f0000) returned 1 [0293.428] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0293.428] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387f0 | out: hHeap=0x1f0000) returned 1 [0293.428] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0293.428] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239048 [0293.429] GetLastError () returned 0x0 [0293.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0293.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0293.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0293.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260838 [0293.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2606d0 [0293.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0293.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0293.430] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260568 [0293.430] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0293.430] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x222ee8 [0293.430] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0293.430] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0293.430] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0293.430] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0293.430] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0293.430] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260860 [0293.430] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260978 [0293.430] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0293.430] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0293.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0293.431] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0293.431] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x20d5e0 [0293.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20d5e0 | out: hHeap=0x1f0000) returned 1 [0293.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0293.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0293.431] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210210 [0293.431] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228f80 [0293.431] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260518 [0293.431] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260860 [0293.431] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2608d8 [0293.431] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260888 [0293.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0293.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0293.431] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0293.432] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260608 [0293.432] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260860 [0293.432] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0293.432] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0293.432] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0293.432] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206658 [0293.432] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x2b4220 [0293.432] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b4220 | out: hHeap=0x1f0000) returned 1 [0293.432] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206658 | out: hHeap=0x1f0000) returned 1 [0293.432] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0293.432] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0293.432] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0293.432] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0293.433] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204d90 [0293.433] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0293.433] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0293.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0293.433] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aac98 [0293.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0293.671] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0293.671] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0293.671] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228f80 | out: hHeap=0x1f0000) returned 1 [0293.671] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0293.671] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d90 | out: hHeap=0x1f0000) returned 1 [0293.671] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0293.671] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0293.671] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a9eb8 [0293.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a9eb8 | out: hHeap=0x1f0000) returned 1 [0293.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ee8 | out: hHeap=0x1f0000) returned 1 [0293.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0293.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0293.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0293.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0293.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260838 | out: hHeap=0x1f0000) returned 1 [0293.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0293.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0293.672] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a8fb0 [0293.672] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aa230 [0293.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8fb0 | out: hHeap=0x1f0000) returned 1 [0293.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aa230 | out: hHeap=0x1f0000) returned 1 [0293.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aac98 | out: hHeap=0x1f0000) returned 1 [0293.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0293.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2856c8 | out: hHeap=0x1f0000) returned 1 [0293.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24e6c0 | out: hHeap=0x1f0000) returned 1 [0293.673] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x233468 [0293.673] GetLastError () returned 0x0 [0293.674] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238940 [0293.674] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238870 [0293.675] CreateFileW (lpFileName="C:\\\\Logs\\Key Management Service.evtx.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\logs\\key management service.evtx.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e6b0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0293.675] GetFileType (hFile=0x198) returned 0x1 [0293.676] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28ffe0 [0293.676] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e638 | out: lpNewFilePointer=0x0) returned 1 [0293.676] GetLastError () returned 0xb7 [0293.677] CloseHandle (hObject=0x198) returned 1 [0293.677] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238870 | out: hHeap=0x1f0000) returned 1 [0293.677] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238940 | out: hHeap=0x1f0000) returned 1 [0293.677] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x284f90 | out: hHeap=0x1f0000) returned 1 [0293.677] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2858d8 | out: hHeap=0x1f0000) returned 1 [0293.677] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0293.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c10 | out: hHeap=0x1f0000) returned 1 [0293.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2364d0 | out: hHeap=0x1f0000) returned 1 [0293.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0293.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8e20 | out: hHeap=0x1f0000) returned 1 [0293.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233468 | out: hHeap=0x1f0000) returned 1 [0293.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0293.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0293.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x254980 | out: hHeap=0x1f0000) returned 1 [0293.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2337b0 | out: hHeap=0x1f0000) returned 1 [0293.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239160 | out: hHeap=0x1f0000) returned 1 [0293.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238950 | out: hHeap=0x1f0000) returned 1 [0293.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0293.679] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0293.679] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238800 | out: hHeap=0x1f0000) returned 1 [0293.679] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0293.679] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0293.679] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238850 | out: hHeap=0x1f0000) returned 1 [0293.679] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285cf8 | out: hHeap=0x1f0000) returned 1 [0293.679] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0293.679] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0293.679] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229178 | out: hHeap=0x1f0000) returned 1 [0293.679] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0293.679] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0293.679] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2291c0 | out: hHeap=0x1f0000) returned 1 [0293.680] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238860 | out: hHeap=0x1f0000) returned 1 [0293.680] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238820 | out: hHeap=0x1f0000) returned 1 [0293.680] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x290fe8 | out: hHeap=0x1f0000) returned 1 [0293.680] CloseHandle (hObject=0x1ac) returned 1 [0293.681] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238960 | out: hHeap=0x1f0000) returned 1 [0293.681] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238830 | out: hHeap=0x1f0000) returned 1 [0293.681] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2374a0 | out: hHeap=0x1f0000) returned 1 [0293.681] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24ce10 | out: hHeap=0x1f0000) returned 1 [0293.681] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0293.681] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bf0 | out: hHeap=0x1f0000) returned 1 [0293.681] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28afb8 | out: hHeap=0x1f0000) returned 1 [0293.681] CloseHandle (hObject=0x1c0) returned 1 [0293.682] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238970 | out: hHeap=0x1f0000) returned 1 [0293.682] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389c0 | out: hHeap=0x1f0000) returned 1 [0293.682] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad1e8 | out: hHeap=0x1f0000) returned 1 [0293.682] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ef0 | out: hHeap=0x1f0000) returned 1 [0293.682] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0fd8 | out: hHeap=0x1f0000) returned 1 [0293.682] CloseHandle (hObject=0x174) returned 1 [0293.682] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238900 | out: hHeap=0x1f0000) returned 1 [0293.682] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388c0 | out: hHeap=0x1f0000) returned 1 [0293.683] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad580 | out: hHeap=0x1f0000) returned 1 [0293.683] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389b0 | out: hHeap=0x1f0000) returned 1 [0293.683] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388d0 | out: hHeap=0x1f0000) returned 1 [0293.683] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388f0 | out: hHeap=0x1f0000) returned 1 [0293.683] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238810 | out: hHeap=0x1f0000) returned 1 [0293.683] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21bd18 | out: hHeap=0x1f0000) returned 1 [0293.683] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x255c88 | out: hHeap=0x1f0000) returned 1 [0293.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233580 | out: hHeap=0x1f0000) returned 1 [0293.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2067d8 | out: hHeap=0x1f0000) returned 1 [0293.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0293.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210240 | out: hHeap=0x1f0000) returned 1 [0293.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abbe8 | out: hHeap=0x1f0000) returned 1 [0293.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x258298 | out: hHeap=0x1f0000) returned 1 [0293.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233238 | out: hHeap=0x1f0000) returned 1 [0293.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239278 | out: hHeap=0x1f0000) returned 1 [0293.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8dc8 | out: hHeap=0x1f0000) returned 1 [0293.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2271f0 | out: hHeap=0x1f0000) returned 1 [0293.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228d40 | out: hHeap=0x1f0000) returned 1 [0293.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0293.685] DeleteFileW (lpFileName="C:\\\\Logs\\Key Management Service.evtx" (normalized: "c:\\logs\\key management service.evtx")) returned 1 [0293.686] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc1dbd7c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc1dbd7c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Client-Licensing-Platform%4Admin.evtx", cAlternateFileName="MICROS~1.EVT")) returned 1 [0293.687] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2365a0 [0293.687] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0293.687] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211948 [0293.687] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0293.687] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0293.687] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2365a0 | out: hHeap=0x1f0000) returned 1 [0293.687] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx" (normalized: "c:\\logs\\microsoft-client-licensing-platform%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0293.687] GetFileType (hFile=0x174) returned 0x1 [0293.688] CloseHandle (hObject=0x174) returned 1 [0293.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212360 [0293.688] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx" (normalized: "c:\\logs\\microsoft-client-licensing-platform%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc1dbd7c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc1dbd7c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0293.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212360 | out: hHeap=0x1f0000) returned 1 [0293.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2122d8 [0293.688] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx" (normalized: "c:\\logs\\microsoft-client-licensing-platform%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc1dbd7c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc1dbd7c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0293.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2122d8 | out: hHeap=0x1f0000) returned 1 [0293.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212140 [0293.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212140 | out: hHeap=0x1f0000) returned 1 [0293.688] GetLastError () returned 0x0 [0293.689] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260838 [0293.689] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228d40 [0293.689] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x227058 [0293.689] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211b68 [0293.689] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239160 [0293.689] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0293.689] CryptAcquireContextA (in: phProv=0x173e7b0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e7b0*=0x212030) returned 1 [0293.690] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x260950 | out: pbBuffer=0x260950) returned 1 [0293.690] CryptReleaseContext (hProv=0x212030, dwFlags=0x0) returned 1 [0293.690] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0293.690] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x258298 [0293.690] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x233580 [0293.691] QueryPerformanceCounter (in: lpPerformanceCount=0x173e744 | out: lpPerformanceCount=0x173e744*=45105944437) returned 1 [0293.691] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e784 | out: lpSystemTimeAsFileTime=0x173e784) [0293.691] QueryPerformanceCounter (in: lpPerformanceCount=0x173e744 | out: lpPerformanceCount=0x173e744*=45105964543) returned 1 [0293.691] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e784 | out: lpSystemTimeAsFileTime=0x173e784) [0293.691] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239048 [0293.691] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x24fd60 [0293.691] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x232cc0 [0293.691] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x2abd88 [0293.691] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101b0 [0293.691] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206808 [0293.691] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0293.691] GetLastError () returned 0x0 [0293.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0293.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x210270 [0293.692] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0293.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x140) returned 0x21d400 [0293.692] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210270 | out: hHeap=0x1f0000) returned 1 [0293.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389b0 [0293.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388e0 [0293.693] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\logs\\microsoft-client-licensing-platform%4admin.evtx.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e650, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0293.693] GetFileType (hFile=0x174) returned 0x1 [0293.694] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389c0 [0293.694] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238800 [0293.694] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx" (normalized: "c:\\logs\\microsoft-client-licensing-platform%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e680, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0293.694] GetFileType (hFile=0x1c0) returned 0x1 [0293.695] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0293.695] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204dd0 [0293.695] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad410 [0293.695] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238920 [0293.695] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388a0 [0293.696] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\logs\\microsoft-client-licensing-platform%4admin.evtx.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e5cc, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0293.696] GetFileType (hFile=0x1ac) returned 0x1 [0293.696] GetLastError () returned 0xb7 [0293.697] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe4) returned 0x2b1578 [0293.697] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f50 [0293.697] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ef0 [0293.697] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cb0 [0293.697] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ade20 [0293.697] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238810 [0293.697] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238820 [0293.698] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\logs\\microsoft-client-licensing-platform%4admin.evtx.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e5cc, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0293.698] GetFileType (hFile=0x198) returned 0x1 [0293.698] GetLastError () returned 0xb7 [0293.699] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bf0 [0293.699] GetLastError () returned 0xb7 [0293.699] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0293.700] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c30 [0293.700] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e90 [0293.700] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb8) returned 0x236f60 [0293.700] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238980 [0293.700] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238990 [0293.701] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx" (normalized: "c:\\logs\\microsoft-client-licensing-platform%4admin.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e5c4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0293.701] GetFileType (hFile=0x1e0) returned 0x1 [0293.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28afb8 [0293.702] ReadFile (in: hFile=0x1e0, lpBuffer=0x28afb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e520, lpOverlapped=0x0 | out: lpBuffer=0x28afb8*, lpNumberOfBytesRead=0x173e520*=0x1000, lpOverlapped=0x0) returned 1 [0294.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24a1b8 [0294.087] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28efd8 [0294.087] GetLastError () returned 0x0 [0294.099] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0294.100] WriteFile (in: hFile=0x198, lpBuffer=0x28efd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x173e364, lpOverlapped=0x0 | out: lpBuffer=0x28efd8*, lpNumberOfBytesWritten=0x173e364*=0x1000, lpOverlapped=0x0) returned 1 [0294.100] GetLastError () returned 0x0 [0294.101] CloseHandle (hObject=0x174) returned 1 [0294.102] CloseHandle (hObject=0x1c0) returned 1 [0294.103] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388b0 [0294.103] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238860 [0294.104] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx" (normalized: "c:\\logs\\microsoft-client-licensing-platform%4admin.evtx"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e680, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0294.106] GetFileType (hFile=0x1c0) returned 0x1 [0294.107] GetLastError () returned 0xb7 [0294.107] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x294000 [0294.108] GetLastError () returned 0xb7 [0294.109] CloseHandle (hObject=0x1c0) returned 1 [0294.110] DeleteFileW (lpFileName="C:\\\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx" (normalized: "c:\\logs\\microsoft-client-licensing-platform%4admin.evtx")) returned 0 [0294.110] GetLastError () returned 0x20 [0294.110] GetLastError () returned 0x20 [0294.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229178 [0294.111] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260928 [0294.111] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260568 [0294.111] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x229250 [0294.111] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ef0 [0294.111] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c90 [0294.111] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x238970 [0294.111] GetLastError () returned 0x20 [0294.112] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238e18 [0294.112] GetLastError () returned 0x20 [0294.112] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x2390f0 [0294.112] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2364d0 [0294.112] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260748 [0294.112] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2851a0 [0294.112] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238830 [0294.112] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0294.112] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210198 [0294.113] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388f0 [0294.113] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0294.113] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210210 [0294.113] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2609a0 [0294.113] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285098 [0294.113] GetLastError () returned 0x20 [0294.113] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238890 [0294.114] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x2387e0 [0294.114] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238870 [0294.114] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387e0 | out: hHeap=0x1f0000) returned 1 [0294.114] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388d0 [0294.114] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238870 | out: hHeap=0x1f0000) returned 1 [0294.114] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238890 | out: hHeap=0x1f0000) returned 1 [0294.114] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387e0 [0294.114] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210240 [0294.114] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387e0 | out: hHeap=0x1f0000) returned 1 [0294.115] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210258 [0294.115] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210240 | out: hHeap=0x1f0000) returned 1 [0294.115] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388d0 | out: hHeap=0x1f0000) returned 1 [0294.115] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210240 [0294.115] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2100a8 [0294.115] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210240 | out: hHeap=0x1f0000) returned 1 [0294.115] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210240 [0294.115] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2100a8 | out: hHeap=0x1f0000) returned 1 [0294.115] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0294.115] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210258 [0294.116] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204d10 [0294.116] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0294.116] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bf0 [0294.116] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d10 | out: hHeap=0x1f0000) returned 1 [0294.116] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210240 | out: hHeap=0x1f0000) returned 1 [0294.116] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f30 [0294.116] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2604f0 [0294.116] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f30 | out: hHeap=0x1f0000) returned 1 [0294.116] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204ef0 [0294.117] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0294.117] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bf0 | out: hHeap=0x1f0000) returned 1 [0294.117] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204cf0 [0294.117] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x2067d8 [0294.117] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cf0 | out: hHeap=0x1f0000) returned 1 [0294.117] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260770 [0294.117] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2067d8 | out: hHeap=0x1f0000) returned 1 [0294.117] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ef0 | out: hHeap=0x1f0000) returned 1 [0294.117] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387e0 [0294.118] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210240 [0294.118] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387e0 | out: hHeap=0x1f0000) returned 1 [0294.118] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210258 [0294.118] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210240 | out: hHeap=0x1f0000) returned 1 [0294.118] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204ef0 [0294.118] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0294.118] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206928 [0294.118] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ef0 | out: hHeap=0x1f0000) returned 1 [0294.119] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206928 | out: hHeap=0x1f0000) returned 1 [0294.119] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0294.119] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0294.119] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0294.119] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2851a0 | out: hHeap=0x1f0000) returned 1 [0294.119] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0294.119] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c58 [0294.119] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0294.119] CryptAcquireContextA (in: phProv=0x173e7b0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e7b0*=0x211bf0) returned 1 [0294.121] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2606d0 | out: pbBuffer=0x2606d0) returned 1 [0294.121] CryptReleaseContext (hProv=0x211bf0, dwFlags=0x0) returned 1 [0294.122] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0294.122] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260748 [0294.122] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2608d8 [0294.122] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239208 [0294.122] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0294.122] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0294.122] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239208 | out: hHeap=0x1f0000) returned 1 [0294.122] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8d18 [0294.123] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210240 [0294.123] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x236468 [0294.123] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260748 [0294.123] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2854b8 [0294.123] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cb0 [0294.123] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236538 [0294.123] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260770 [0294.123] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2855c0 [0294.124] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388c0 [0294.124] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0294.124] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210258 [0294.124] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388d0 [0294.124] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0294.124] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20fef8 [0294.124] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20fef8 | out: hHeap=0x1f0000) returned 1 [0294.124] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0294.125] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388d0 | out: hHeap=0x1f0000) returned 1 [0294.125] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0294.125] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0294.125] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388c0 | out: hHeap=0x1f0000) returned 1 [0294.125] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2855c0 | out: hHeap=0x1f0000) returned 1 [0294.125] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0294.125] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236538 | out: hHeap=0x1f0000) returned 1 [0294.125] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238ec0 [0294.126] GetLastError () returned 0x0 [0294.126] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238f30 [0294.126] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0294.126] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0294.127] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0294.127] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0294.127] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0294.127] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0294.127] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x24e7c0 [0294.127] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2855c0 [0294.127] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0294.127] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0294.127] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0294.128] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0294.128] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2857d0 [0294.128] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0294.128] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0294.128] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f5d8 [0294.128] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x251068 [0294.128] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x233698 [0294.128] QueryPerformanceCounter (in: lpPerformanceCount=0x173e300 | out: lpPerformanceCount=0x173e300*=45149719927) returned 1 [0294.128] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e340 | out: lpSystemTimeAsFileTime=0x173e340) [0294.129] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x2387e0 [0294.129] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0294.129] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e30 [0294.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e30 | out: hHeap=0x1f0000) returned 1 [0294.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0294.129] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0294.129] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c70 [0294.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c70 | out: hHeap=0x1f0000) returned 1 [0294.130] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0294.130] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387e0 | out: hHeap=0x1f0000) returned 1 [0294.130] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0294.130] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238d70 [0294.130] GetLastError () returned 0x0 [0294.131] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0294.131] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0294.131] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0294.131] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2606a8 [0294.131] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260590 [0294.131] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0294.131] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0294.131] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260810 [0294.131] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0294.132] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x222ee8 [0294.132] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0294.132] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0294.132] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0294.132] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0294.132] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0294.132] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260770 [0294.132] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2606d0 [0294.132] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0294.132] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0294.133] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0294.133] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0294.133] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x20d5e0 [0294.133] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20d5e0 | out: hHeap=0x1f0000) returned 1 [0294.133] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0294.133] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0294.133] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210258 [0294.133] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229298 [0294.133] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260860 [0294.133] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260608 [0294.134] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260770 [0294.134] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2606d0 [0294.134] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0294.134] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0294.134] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0294.134] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260518 [0294.134] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260860 [0294.134] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0294.134] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0294.134] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0294.134] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206838 [0294.134] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x2b5340 [0294.135] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b5340 | out: hHeap=0x1f0000) returned 1 [0294.135] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206838 | out: hHeap=0x1f0000) returned 1 [0294.135] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0294.135] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0294.135] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0294.135] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0294.135] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204f70 [0294.135] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0294.135] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0294.135] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0294.135] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a96a0 [0294.135] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0294.135] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0294.136] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0294.136] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229298 | out: hHeap=0x1f0000) returned 1 [0294.136] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0294.136] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f70 | out: hHeap=0x1f0000) returned 1 [0294.136] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0294.136] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0294.136] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aa230 [0294.136] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aa230 | out: hHeap=0x1f0000) returned 1 [0294.136] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ee8 | out: hHeap=0x1f0000) returned 1 [0294.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0294.447] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0294.447] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0294.447] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0294.447] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0294.447] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0294.447] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0294.447] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aa480 [0294.447] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a97c8 [0294.448] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aa480 | out: hHeap=0x1f0000) returned 1 [0294.448] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a97c8 | out: hHeap=0x1f0000) returned 1 [0294.448] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a96a0 | out: hHeap=0x1f0000) returned 1 [0294.448] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0294.448] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2857d0 | out: hHeap=0x1f0000) returned 1 [0294.448] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24e7c0 | out: hHeap=0x1f0000) returned 1 [0294.448] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x2339e0 [0294.448] GetLastError () returned 0x0 [0294.449] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388c0 [0294.449] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238840 [0294.450] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\logs\\microsoft-client-licensing-platform%4admin.evtx.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e6b0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0294.451] GetFileType (hFile=0x1c0) returned 0x1 [0294.451] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28ffe0 [0294.452] SetFilePointerEx (in: hFile=0x1c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e638 | out: lpNewFilePointer=0x0) returned 1 [0294.452] GetLastError () returned 0xb7 [0294.453] CloseHandle (hObject=0x1c0) returned 1 [0294.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238840 | out: hHeap=0x1f0000) returned 1 [0294.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388c0 | out: hHeap=0x1f0000) returned 1 [0294.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2855c0 | out: hHeap=0x1f0000) returned 1 [0294.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2854b8 | out: hHeap=0x1f0000) returned 1 [0294.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0294.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cb0 | out: hHeap=0x1f0000) returned 1 [0294.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0294.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210240 | out: hHeap=0x1f0000) returned 1 [0294.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0294.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2339e0 | out: hHeap=0x1f0000) returned 1 [0294.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0294.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0294.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x251068 | out: hHeap=0x1f0000) returned 1 [0294.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233698 | out: hHeap=0x1f0000) returned 1 [0294.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c58 | out: hHeap=0x1f0000) returned 1 [0294.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238970 | out: hHeap=0x1f0000) returned 1 [0294.456] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0294.456] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0294.456] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388f0 | out: hHeap=0x1f0000) returned 1 [0294.456] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0294.456] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0294.456] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238830 | out: hHeap=0x1f0000) returned 1 [0294.456] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285098 | out: hHeap=0x1f0000) returned 1 [0294.456] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0294.456] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2364d0 | out: hHeap=0x1f0000) returned 1 [0294.456] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229250 | out: hHeap=0x1f0000) returned 1 [0294.456] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0294.457] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0294.457] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229178 | out: hHeap=0x1f0000) returned 1 [0294.457] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238860 | out: hHeap=0x1f0000) returned 1 [0294.457] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388b0 | out: hHeap=0x1f0000) returned 1 [0294.457] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28afb8 | out: hHeap=0x1f0000) returned 1 [0294.457] CloseHandle (hObject=0x1e0) returned 1 [0294.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238990 | out: hHeap=0x1f0000) returned 1 [0294.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238980 | out: hHeap=0x1f0000) returned 1 [0294.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236f60 | out: hHeap=0x1f0000) returned 1 [0294.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24a1b8 | out: hHeap=0x1f0000) returned 1 [0294.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0294.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d70 | out: hHeap=0x1f0000) returned 1 [0294.459] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28efd8 | out: hHeap=0x1f0000) returned 1 [0294.459] CloseHandle (hObject=0x198) returned 1 [0294.459] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238820 | out: hHeap=0x1f0000) returned 1 [0294.459] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238810 | out: hHeap=0x1f0000) returned 1 [0294.460] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ade20 | out: hHeap=0x1f0000) returned 1 [0294.460] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f50 | out: hHeap=0x1f0000) returned 1 [0294.460] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b1578 | out: hHeap=0x1f0000) returned 1 [0294.460] CloseHandle (hObject=0x1ac) returned 1 [0294.460] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388a0 | out: hHeap=0x1f0000) returned 1 [0294.460] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238920 | out: hHeap=0x1f0000) returned 1 [0294.461] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad410 | out: hHeap=0x1f0000) returned 1 [0294.461] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238800 | out: hHeap=0x1f0000) returned 1 [0294.461] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389c0 | out: hHeap=0x1f0000) returned 1 [0294.461] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388e0 | out: hHeap=0x1f0000) returned 1 [0294.461] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389b0 | out: hHeap=0x1f0000) returned 1 [0294.461] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d400 | out: hHeap=0x1f0000) returned 1 [0294.461] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24fd60 | out: hHeap=0x1f0000) returned 1 [0294.461] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232cc0 | out: hHeap=0x1f0000) returned 1 [0294.461] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206808 | out: hHeap=0x1f0000) returned 1 [0294.461] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0294.461] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0294.461] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abd88 | out: hHeap=0x1f0000) returned 1 [0294.462] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x258298 | out: hHeap=0x1f0000) returned 1 [0294.462] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233580 | out: hHeap=0x1f0000) returned 1 [0294.462] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239160 | out: hHeap=0x1f0000) returned 1 [0294.462] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b68 | out: hHeap=0x1f0000) returned 1 [0294.462] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227058 | out: hHeap=0x1f0000) returned 1 [0294.462] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228d40 | out: hHeap=0x1f0000) returned 1 [0294.462] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260838 | out: hHeap=0x1f0000) returned 1 [0294.462] DeleteFileW (lpFileName="C:\\\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx" (normalized: "c:\\logs\\microsoft-client-licensing-platform%4admin.evtx")) returned 1 [0294.464] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca5d836e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca5d836e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx", cAlternateFileName="MICROS~2.EVT")) returned 1 [0294.464] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219c48 [0294.465] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0294.465] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad918 [0294.465] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0294.465] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211948 | out: hHeap=0x1f0000) returned 1 [0294.465] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219c48 | out: hHeap=0x1f0000) returned 1 [0294.465] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx" (normalized: "c:\\logs\\microsoft-windows-application-experience%4program-compatibility-assistant.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0294.466] GetFileType (hFile=0x1ac) returned 0x1 [0294.466] CloseHandle (hObject=0x1ac) returned 1 [0294.466] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad860 [0294.466] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx" (normalized: "c:\\logs\\microsoft-windows-application-experience%4program-compatibility-assistant.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca5d836e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca5d836e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0294.467] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad860 | out: hHeap=0x1f0000) returned 1 [0294.467] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad6f0 [0294.467] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx" (normalized: "c:\\logs\\microsoft-windows-application-experience%4program-compatibility-assistant.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca5d836e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca5d836e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0294.467] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad6f0 | out: hHeap=0x1f0000) returned 1 [0294.467] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2acfc0 [0294.467] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2acfc0 | out: hHeap=0x1f0000) returned 1 [0294.467] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9206ac5, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9206ac5, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xf9c0f529, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx", cAlternateFileName="MICROS~3.EVT")) returned 1 [0294.467] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0294.467] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0294.467] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2adb40 [0294.467] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0294.468] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad918 | out: hHeap=0x1f0000) returned 1 [0294.468] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0294.468] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-applicationresourcemanagementsystem%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0294.468] GetFileType (hFile=0x1ac) returned 0x1 [0294.469] CloseHandle (hObject=0x1ac) returned 1 [0294.469] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad078 [0294.469] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-applicationresourcemanagementsystem%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9206ac5, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9206ac5, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xf9c0f529, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000)) returned 1 [0294.469] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad078 | out: hHeap=0x1f0000) returned 1 [0294.470] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad7a8 [0294.470] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-applicationresourcemanagementsystem%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9206ac5, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9206ac5, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xf9c0f529, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000)) returned 1 [0294.470] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad7a8 | out: hHeap=0x1f0000) returned 1 [0294.470] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ada88 [0294.470] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ada88 | out: hHeap=0x1f0000) returned 1 [0294.471] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4143825, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4143825, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppLocker%4EXE and DLL.evtx", cAlternateFileName="MICROS~4.EVT")) returned 1 [0294.471] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236468 [0294.471] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0294.471] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae750 [0294.472] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0294.472] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2adb40 | out: hHeap=0x1f0000) returned 1 [0294.472] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0294.472] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-AppLocker%4EXE and DLL.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4exe and dll.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0294.473] GetFileType (hFile=0x1ac) returned 0x1 [0294.473] CloseHandle (hObject=0x1ac) returned 1 [0294.473] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae2a0 [0294.474] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppLocker%4EXE and DLL.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4exe and dll.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4143825, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4143825, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0294.474] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae2a0 | out: hHeap=0x1f0000) returned 1 [0294.474] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae7c8 [0294.474] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppLocker%4EXE and DLL.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4exe and dll.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4143825, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4143825, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0294.474] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae7c8 | out: hHeap=0x1f0000) returned 1 [0294.474] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2aecf0 [0294.474] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aecf0 | out: hHeap=0x1f0000) returned 1 [0294.474] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4169a7a, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4169a7a, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppLocker%4MSI and Script.evtx", cAlternateFileName="MI2EEA~1.EVT")) returned 1 [0294.474] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae138 [0294.474] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0294.475] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212470 [0294.475] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0294.475] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae750 | out: hHeap=0x1f0000) returned 1 [0294.475] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae138 | out: hHeap=0x1f0000) returned 1 [0294.475] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-AppLocker%4MSI and Script.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4msi and script.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0294.476] GetFileType (hFile=0x1ac) returned 0x1 [0294.476] CloseHandle (hObject=0x1ac) returned 1 [0294.476] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212718 [0294.477] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppLocker%4MSI and Script.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4msi and script.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4169a7a, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4169a7a, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0294.477] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212718 | out: hHeap=0x1f0000) returned 1 [0294.477] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2129c0 [0294.477] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppLocker%4MSI and Script.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4msi and script.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4169a7a, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4169a7a, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0294.477] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2129c0 | out: hHeap=0x1f0000) returned 1 [0294.477] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212030 [0294.477] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212030 | out: hHeap=0x1f0000) returned 1 [0294.478] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd418fcc3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd418fcc3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx", cAlternateFileName="MI07E1~1.EVT")) returned 1 [0294.478] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211b68 [0294.478] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0294.478] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0294.478] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0294.478] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212470 | out: hHeap=0x1f0000) returned 1 [0294.478] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b68 | out: hHeap=0x1f0000) returned 1 [0294.479] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-deployment.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0294.479] GetFileType (hFile=0x1ac) returned 0x1 [0294.480] CloseHandle (hObject=0x1ac) returned 1 [0294.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0294.480] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-deployment.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd418fcc3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd418fcc3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0294.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0294.481] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0294.481] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-deployment.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd418fcc3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd418fcc3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0294.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0294.481] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0294.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0294.481] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd418fcc3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd418fcc3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx", cAlternateFileName="MI8196~1.EVT")) returned 1 [0294.481] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212470 [0294.481] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0294.481] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0294.482] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0294.482] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0294.482] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212470 | out: hHeap=0x1f0000) returned 1 [0294.482] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-execution.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0294.483] GetFileType (hFile=0x1ac) returned 0x1 [0294.483] CloseHandle (hObject=0x1ac) returned 1 [0294.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0294.484] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-execution.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd418fcc3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd418fcc3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0294.484] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0294.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0294.484] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-execution.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd418fcc3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd418fcc3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0294.484] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0294.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0294.485] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0294.485] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd41b5f2d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd41b5f2d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppModel-Runtime%4Admin.evtx", cAlternateFileName="MIE36C~1.EVT")) returned 1 [0294.485] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236468 [0294.485] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0294.485] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae7c8 [0294.485] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0294.485] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0294.485] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0294.801] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-AppModel-Runtime%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-appmodel-runtime%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0294.802] GetFileType (hFile=0x198) returned 0x1 [0294.802] CloseHandle (hObject=0x198) returned 1 [0294.803] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae6d8 [0294.803] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppModel-Runtime%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-appmodel-runtime%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd41b5f2d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd41b5f2d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0294.803] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae6d8 | out: hHeap=0x1f0000) returned 1 [0294.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae750 [0294.804] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppModel-Runtime%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-appmodel-runtime%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd41b5f2d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd41b5f2d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0294.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae750 | out: hHeap=0x1f0000) returned 1 [0294.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae0c0 [0294.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae0c0 | out: hHeap=0x1f0000) returned 1 [0294.804] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd389efbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd389efbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppReadiness%4Admin.evtx", cAlternateFileName="MIC5CB~1.EVT")) returned 1 [0294.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236538 [0294.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0294.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2aec00 [0294.805] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0294.805] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae7c8 | out: hHeap=0x1f0000) returned 1 [0294.805] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236538 | out: hHeap=0x1f0000) returned 1 [0294.805] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-AppReadiness%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0294.806] GetFileType (hFile=0x198) returned 0x1 [0294.806] CloseHandle (hObject=0x198) returned 1 [0294.807] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae7c8 [0294.807] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppReadiness%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd389efbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd389efbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0294.807] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae7c8 | out: hHeap=0x1f0000) returned 1 [0294.807] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae930 [0294.807] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppReadiness%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd389efbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd389efbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0294.807] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae930 | out: hHeap=0x1f0000) returned 1 [0294.808] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae5e8 [0294.808] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae5e8 | out: hHeap=0x1f0000) returned 1 [0294.808] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd38c5212, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd38c5212, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x111000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppReadiness%4Operational.evtx", cAlternateFileName="MIF8AA~1.EVT")) returned 1 [0294.808] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2aede0 [0294.808] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0294.808] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211e10 [0294.808] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0294.808] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aec00 | out: hHeap=0x1f0000) returned 1 [0294.808] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aede0 | out: hHeap=0x1f0000) returned 1 [0294.809] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-AppReadiness%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0294.812] GetFileType (hFile=0x198) returned 0x1 [0294.812] CloseHandle (hObject=0x198) returned 1 [0294.813] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211ae0 [0294.813] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppReadiness%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd38c5212, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd38c5212, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x111000)) returned 1 [0294.813] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211ae0 | out: hHeap=0x1f0000) returned 1 [0294.813] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211ae0 [0294.813] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppReadiness%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd38c5212, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd38c5212, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x111000)) returned 1 [0294.813] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211ae0 | out: hHeap=0x1f0000) returned 1 [0294.813] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211bf0 [0294.814] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211bf0 | out: hHeap=0x1f0000) returned 1 [0294.814] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4143825, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4143825, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppXDeployment%4Operational.evtx", cAlternateFileName="MI34FE~1.EVT")) returned 1 [0294.814] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2aeb10 [0294.814] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0294.815] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212718 [0294.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0294.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e10 | out: hHeap=0x1f0000) returned 1 [0294.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aeb10 | out: hHeap=0x1f0000) returned 1 [0294.816] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-AppXDeployment%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeployment%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0294.816] GetFileType (hFile=0x198) returned 0x1 [0294.817] CloseHandle (hObject=0x198) returned 1 [0294.824] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212938 [0294.824] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppXDeployment%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeployment%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4143825, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4143825, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0294.824] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212938 | out: hHeap=0x1f0000) returned 1 [0294.824] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211ae0 [0294.824] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppXDeployment%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeployment%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4143825, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4143825, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0294.824] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211ae0 | out: hHeap=0x1f0000) returned 1 [0294.825] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211e10 [0294.825] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e10 | out: hHeap=0x1f0000) returned 1 [0294.825] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5af3554f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5af3554f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x211000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppXDeploymentServer%4Operational.evtx", cAlternateFileName="MIA24C~1.EVT")) returned 1 [0294.825] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211fa8 [0294.825] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0294.825] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0294.825] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0294.825] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212718 | out: hHeap=0x1f0000) returned 1 [0294.825] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211fa8 | out: hHeap=0x1f0000) returned 1 [0294.826] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0294.826] GetFileType (hFile=0x198) returned 0x1 [0294.827] CloseHandle (hObject=0x198) returned 1 [0294.827] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0294.827] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5af3554f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5af3554f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x211000)) returned 1 [0294.827] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0294.827] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0294.828] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5af3554f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5af3554f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x211000)) returned 1 [0294.828] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0294.828] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0294.828] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0294.828] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5af3554f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5af3554f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx", cAlternateFileName="MIDBEC~1.EVT")) returned 1 [0294.828] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2aeb88 [0294.828] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0294.828] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0294.828] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0294.828] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0294.828] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aeb88 | out: hHeap=0x1f0000) returned 1 [0294.829] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4restricted.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0294.883] GetFileType (hFile=0x198) returned 0x1 [0294.883] CloseHandle (hObject=0x198) returned 1 [0294.884] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0294.884] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4restricted.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5af3554f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5af3554f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0294.884] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0294.885] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0294.885] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4restricted.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5af3554f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5af3554f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0294.885] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0294.885] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0294.885] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0294.885] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85798667, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x85798667, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppxPackaging%4Operational.evtx", cAlternateFileName="MI54F1~1.EVT")) returned 1 [0294.885] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2aecf0 [0294.886] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0294.886] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212250 [0294.886] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0294.886] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0294.886] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aecf0 | out: hHeap=0x1f0000) returned 1 [0294.887] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-AppxPackaging%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxpackaging%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0294.887] GetFileType (hFile=0x198) returned 0x1 [0294.888] CloseHandle (hObject=0x198) returned 1 [0294.888] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0294.889] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppxPackaging%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxpackaging%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85798667, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x85798667, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0294.889] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0294.889] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211b68 [0294.889] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppxPackaging%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxpackaging%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85798667, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x85798667, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0294.889] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b68 | out: hHeap=0x1f0000) returned 1 [0294.889] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0294.889] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0294.890] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd74d25ab, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd74d25ab, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx", cAlternateFileName="MI111F~1.EVT")) returned 1 [0294.890] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0294.890] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0294.890] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a818 [0294.890] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0294.890] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212250 | out: hHeap=0x1f0000) returned 1 [0294.890] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0294.891] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-backgroundtaskinfrastructure%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0294.892] GetFileType (hFile=0x198) returned 0x1 [0295.381] CloseHandle (hObject=0x198) returned 1 [0295.381] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21aa10 [0295.382] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-backgroundtaskinfrastructure%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd74d25ab, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd74d25ab, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0295.382] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21aa10 | out: hHeap=0x1f0000) returned 1 [0295.382] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a6c8 [0295.382] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-backgroundtaskinfrastructure%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd74d25ab, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd74d25ab, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0295.382] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a6c8 | out: hHeap=0x1f0000) returned 1 [0295.382] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a4d0 [0295.382] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a4d0 | out: hHeap=0x1f0000) returned 1 [0295.382] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1f96ca4, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xe1f96ca4, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Bits-Client%4Operational.evtx", cAlternateFileName="MI9465~1.EVT")) returned 1 [0295.382] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236538 [0295.383] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0295.383] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2128b0 [0295.383] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0295.383] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a818 | out: hHeap=0x1f0000) returned 1 [0295.383] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236538 | out: hHeap=0x1f0000) returned 1 [0295.383] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Bits-Client%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-bits-client%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0295.384] GetFileType (hFile=0x198) returned 0x1 [0295.384] CloseHandle (hObject=0x198) returned 1 [0295.384] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212718 [0295.384] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Bits-Client%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-bits-client%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1f96ca4, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xe1f96ca4, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0295.384] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212718 | out: hHeap=0x1f0000) returned 1 [0295.384] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d00 [0295.385] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Bits-Client%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-bits-client%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1f96ca4, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xe1f96ca4, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0295.385] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d00 | out: hHeap=0x1f0000) returned 1 [0295.385] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2129c0 [0295.385] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2129c0 | out: hHeap=0x1f0000) returned 1 [0295.385] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8783aa15, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8783aa15, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-CodeIntegrity%4Operational.evtx", cAlternateFileName="MI03A7~1.EVT")) returned 1 [0295.385] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2aecf0 [0295.385] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0295.385] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0295.386] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0295.386] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2128b0 | out: hHeap=0x1f0000) returned 1 [0295.386] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aecf0 | out: hHeap=0x1f0000) returned 1 [0295.386] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-CodeIntegrity%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-codeintegrity%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0295.386] GetFileType (hFile=0x198) returned 0x1 [0295.386] CloseHandle (hObject=0x198) returned 1 [0295.387] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212828 [0295.387] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-CodeIntegrity%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-codeintegrity%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8783aa15, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8783aa15, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0295.387] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212828 | out: hHeap=0x1f0000) returned 1 [0295.387] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212030 [0295.387] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-CodeIntegrity%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-codeintegrity%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8783aa15, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8783aa15, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0295.387] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212030 | out: hHeap=0x1f0000) returned 1 [0295.387] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211b68 [0295.387] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b68 | out: hHeap=0x1f0000) returned 1 [0295.387] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c3c71c5, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8c3c71c5, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx", cAlternateFileName="MI5CA2~1.EVT")) returned 1 [0295.387] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211f20 [0295.387] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260838 [0295.387] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21ab60 [0295.388] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260838 | out: hHeap=0x1f0000) returned 1 [0295.388] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0295.388] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211f20 | out: hHeap=0x1f0000) returned 1 [0295.388] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-coresystem-smsrouter-events%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0295.388] GetFileType (hFile=0x198) returned 0x1 [0295.388] CloseHandle (hObject=0x198) returned 1 [0295.388] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219f90 [0295.389] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-coresystem-smsrouter-events%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c3c71c5, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8c3c71c5, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0295.389] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219f90 | out: hHeap=0x1f0000) returned 1 [0295.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a578 [0295.389] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-coresystem-smsrouter-events%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c3c71c5, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8c3c71c5, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0295.389] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a578 | out: hHeap=0x1f0000) returned 1 [0295.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219d98 [0295.389] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219d98 | out: hHeap=0x1f0000) returned 1 [0295.389] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc9231, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cc9231, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx", cAlternateFileName="MI5FD1~1.EVT")) returned 1 [0295.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2adfd0 [0295.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0295.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211fa8 [0295.389] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0295.389] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ab60 | out: hHeap=0x1f0000) returned 1 [0295.389] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2adfd0 | out: hHeap=0x1f0000) returned 1 [0295.389] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4backupkeysvc.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0295.390] GetFileType (hFile=0x198) returned 0x1 [0295.390] CloseHandle (hObject=0x198) returned 1 [0295.390] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211ae0 [0295.390] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4backupkeysvc.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc9231, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cc9231, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0295.390] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211ae0 | out: hHeap=0x1f0000) returned 1 [0295.390] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212030 [0295.390] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4backupkeysvc.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc9231, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cc9231, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0295.391] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212030 | out: hHeap=0x1f0000) returned 1 [0295.391] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212828 [0295.391] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212828 | out: hHeap=0x1f0000) returned 1 [0295.391] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ca2fbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ca2fbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Crypto-DPAPI%4Operational.evtx", cAlternateFileName="MI8BDF~1.EVT")) returned 1 [0295.391] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae390 [0295.391] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0295.391] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211b68 [0295.391] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0295.391] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211fa8 | out: hHeap=0x1f0000) returned 1 [0295.391] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae390 | out: hHeap=0x1f0000) returned 1 [0295.391] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0295.392] GetFileType (hFile=0x198) returned 0x1 [0295.392] CloseHandle (hObject=0x198) returned 1 [0295.392] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d00 [0295.393] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ca2fbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ca2fbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0295.393] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d00 | out: hHeap=0x1f0000) returned 1 [0295.393] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212030 [0295.393] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ca2fbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ca2fbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0295.394] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212030 | out: hHeap=0x1f0000) returned 1 [0295.394] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211bf0 [0295.394] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211bf0 | out: hHeap=0x1f0000) returned 1 [0295.394] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c3ed420, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8c3ed420, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx", cAlternateFileName="MIAEBD~1.EVT")) returned 1 [0295.394] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a620 [0295.394] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0295.394] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad9d0 [0295.394] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0295.394] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b68 | out: hHeap=0x1f0000) returned 1 [0295.394] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a620 | out: hHeap=0x1f0000) returned 1 [0295.394] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-devicemanagement-enterprise-diagnostics-provider%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0295.395] GetFileType (hFile=0x198) returned 0x1 [0295.395] CloseHandle (hObject=0x198) returned 1 [0295.395] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2adb40 [0295.395] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-devicemanagement-enterprise-diagnostics-provider%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c3ed420, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8c3ed420, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x101000)) returned 1 [0295.396] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2adb40 | out: hHeap=0x1f0000) returned 1 [0295.396] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad638 [0295.396] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-devicemanagement-enterprise-diagnostics-provider%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c3ed420, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8c3ed420, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x101000)) returned 1 [0295.396] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad638 | out: hHeap=0x1f0000) returned 1 [0295.396] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2adbf8 [0295.396] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2adbf8 | out: hHeap=0x1f0000) returned 1 [0295.396] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cef47f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cef47f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-DeviceSetupManager%4Admin.evtx", cAlternateFileName="MIA726~1.EVT")) returned 1 [0295.396] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2aecf0 [0295.396] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0295.396] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2119d0 [0295.396] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0295.396] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad9d0 | out: hHeap=0x1f0000) returned 1 [0295.397] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aecf0 | out: hHeap=0x1f0000) returned 1 [0295.397] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-DeviceSetupManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0295.397] GetFileType (hFile=0x198) returned 0x1 [0295.397] CloseHandle (hObject=0x198) returned 1 [0295.398] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211b68 [0295.398] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-DeviceSetupManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cef47f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cef47f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0295.398] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b68 | out: hHeap=0x1f0000) returned 1 [0295.398] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211f20 [0295.398] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-DeviceSetupManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cef47f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cef47f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0295.398] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211f20 | out: hHeap=0x1f0000) returned 1 [0295.398] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211a58 [0295.398] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211a58 | out: hHeap=0x1f0000) returned 1 [0295.399] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc9231, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cc9231, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-DeviceSetupManager%4Operational.evtx", cAlternateFileName="MI08CB~1.EVT")) returned 1 [0295.399] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae750 [0295.399] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0295.399] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2120b8 [0295.399] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0295.399] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2119d0 | out: hHeap=0x1f0000) returned 1 [0295.399] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae750 | out: hHeap=0x1f0000) returned 1 [0295.400] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-DeviceSetupManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0295.400] GetFileType (hFile=0x198) returned 0x1 [0295.400] CloseHandle (hObject=0x198) returned 1 [0295.401] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211f20 [0295.401] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-DeviceSetupManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc9231, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cc9231, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0295.401] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211f20 | out: hHeap=0x1f0000) returned 1 [0295.401] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212360 [0295.401] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-DeviceSetupManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc9231, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cc9231, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0295.401] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212360 | out: hHeap=0x1f0000) returned 1 [0295.401] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212030 [0295.401] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212030 | out: hHeap=0x1f0000) returned 1 [0295.401] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc967f17e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc967f17e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Dhcp-Client%4Admin.evtx", cAlternateFileName="MI8270~1.EVT")) returned 1 [0295.401] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2365a0 [0295.402] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0295.402] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2adfd0 [0295.402] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0295.402] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2120b8 | out: hHeap=0x1f0000) returned 1 [0295.402] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2365a0 | out: hHeap=0x1f0000) returned 1 [0295.402] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Dhcp-Client%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-dhcp-client%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0295.402] GetFileType (hFile=0x198) returned 0x1 [0295.403] CloseHandle (hObject=0x198) returned 1 [0295.403] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae228 [0295.403] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Dhcp-Client%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-dhcp-client%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc967f17e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc967f17e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0295.403] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae228 | out: hHeap=0x1f0000) returned 1 [0295.403] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae228 [0295.403] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Dhcp-Client%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-dhcp-client%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc967f17e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc967f17e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0295.403] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae228 | out: hHeap=0x1f0000) returned 1 [0295.403] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae7c8 [0295.404] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae7c8 | out: hHeap=0x1f0000) returned 1 [0295.404] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc96cb64b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc96cb64b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Dhcpv6-Client%4Admin.evtx", cAlternateFileName="MIEBFF~1.EVT")) returned 1 [0295.404] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236468 [0295.404] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0295.404] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae048 [0295.404] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0295.404] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2adfd0 | out: hHeap=0x1f0000) returned 1 [0295.404] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0295.404] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-dhcpv6-client%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0295.405] GetFileType (hFile=0x198) returned 0x1 [0295.405] CloseHandle (hObject=0x198) returned 1 [0295.405] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2aecf0 [0295.405] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-dhcpv6-client%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc96cb64b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc96cb64b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0295.405] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aecf0 | out: hHeap=0x1f0000) returned 1 [0295.406] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae930 [0295.406] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-dhcpv6-client%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc96cb64b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc96cb64b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0295.406] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae930 | out: hHeap=0x1f0000) returned 1 [0295.406] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae318 [0295.406] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae318 | out: hHeap=0x1f0000) returned 1 [0295.406] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca64aa7b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca64aa7b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Diagnosis-DPS%4Operational.evtx", cAlternateFileName="MI9F85~1.EVT")) returned 1 [0295.406] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae318 [0295.406] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0295.406] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212030 [0295.406] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0295.406] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae048 | out: hHeap=0x1f0000) returned 1 [0295.406] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae318 | out: hHeap=0x1f0000) returned 1 [0295.406] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-diagnosis-dps%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0295.407] GetFileType (hFile=0x198) returned 0x1 [0295.407] CloseHandle (hObject=0x198) returned 1 [0295.407] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211e10 [0295.407] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-diagnosis-dps%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca64aa7b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca64aa7b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0295.408] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e10 | out: hHeap=0x1f0000) returned 1 [0295.408] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211fa8 [0295.466] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-diagnosis-dps%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca64aa7b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca64aa7b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0295.466] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211fa8 | out: hHeap=0x1f0000) returned 1 [0295.467] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212360 [0295.467] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212360 | out: hHeap=0x1f0000) returned 1 [0295.467] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd9ec80, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xfd9ec80, ftLastAccessTime.dwHighDateTime=0x1d1a04f, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Diagnostics-Performance%4Operational.evtx", cAlternateFileName="MIBE3D~1.EVT")) returned 1 [0295.467] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212938 [0295.467] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0295.467] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0295.467] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0295.467] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212030 | out: hHeap=0x1f0000) returned 1 [0295.467] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212938 | out: hHeap=0x1f0000) returned 1 [0295.468] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-diagnostics-performance%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0295.469] GetFileType (hFile=0x198) returned 0x1 [0295.469] CloseHandle (hObject=0x198) returned 1 [0295.470] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0295.470] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-diagnostics-performance%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd9ec80, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xfd9ec80, ftLastAccessTime.dwHighDateTime=0x1d1a04f, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0295.470] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0295.470] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0295.471] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-diagnostics-performance%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd9ec80, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xfd9ec80, ftLastAccessTime.dwHighDateTime=0x1d1a04f, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0295.471] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0295.471] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0295.471] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0295.471] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9658ef3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9658ef3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-GroupPolicy%4Operational.evtx", cAlternateFileName="MIE38D~1.EVT")) returned 1 [0295.471] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2365a0 [0295.472] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0295.472] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211a58 [0295.472] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0295.472] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0295.472] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2365a0 | out: hHeap=0x1f0000) returned 1 [0295.473] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-GroupPolicy%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-grouppolicy%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0295.473] GetFileType (hFile=0x198) returned 0x1 [0295.473] CloseHandle (hObject=0x198) returned 1 [0295.474] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211fa8 [0295.474] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-GroupPolicy%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-grouppolicy%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9658ef3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9658ef3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0295.474] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211fa8 | out: hHeap=0x1f0000) returned 1 [0295.474] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2124f8 [0295.474] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-GroupPolicy%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-grouppolicy%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9658ef3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9658ef3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0295.475] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2124f8 | out: hHeap=0x1f0000) returned 1 [0295.475] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212580 [0295.475] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212580 | out: hHeap=0x1f0000) returned 1 [0295.475] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9dcc480, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9dcc480, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-HotspotAuth%4Operational.evtx", cAlternateFileName="MIE386~1.EVT")) returned 1 [0295.475] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236608 [0295.475] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0295.475] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212608 [0295.475] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0295.475] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211a58 | out: hHeap=0x1f0000) returned 1 [0295.475] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236608 | out: hHeap=0x1f0000) returned 1 [0295.476] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-HotspotAuth%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-hotspotauth%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0295.476] GetFileType (hFile=0x198) returned 0x1 [0295.477] CloseHandle (hObject=0x198) returned 1 [0295.477] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d00 [0295.477] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-HotspotAuth%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-hotspotauth%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9dcc480, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9dcc480, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0295.478] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d00 | out: hHeap=0x1f0000) returned 1 [0295.478] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2124f8 [0295.478] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-HotspotAuth%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-hotspotauth%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9dcc480, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9dcc480, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0295.478] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2124f8 | out: hHeap=0x1f0000) returned 1 [0295.478] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2129c0 [0295.478] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2129c0 | out: hHeap=0x1f0000) returned 1 [0295.478] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50b4bacf, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50b4bacf, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx", cAlternateFileName="MI6B25~1.EVT")) returned 1 [0295.478] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae5e8 [0295.478] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0295.479] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2120b8 [0295.479] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0295.479] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212608 | out: hHeap=0x1f0000) returned 1 [0295.479] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae5e8 | out: hHeap=0x1f0000) returned 1 [0295.479] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-hyper-v-guest-drivers%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0295.480] GetFileType (hFile=0x198) returned 0x1 [0295.480] CloseHandle (hObject=0x198) returned 1 [0295.481] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211948 [0295.481] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-hyper-v-guest-drivers%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50b4bacf, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50b4bacf, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0295.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211948 | out: hHeap=0x1f0000) returned 1 [0295.481] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212360 [0295.481] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-hyper-v-guest-drivers%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50b4bacf, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50b4bacf, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0295.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212360 | out: hHeap=0x1f0000) returned 1 [0295.481] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2122d8 [0295.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2122d8 | out: hHeap=0x1f0000) returned 1 [0295.482] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb66288f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb66288f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-International%4Operational.evtx", cAlternateFileName="MI854A~1.EVT")) returned 1 [0295.482] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae4f8 [0295.482] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0295.482] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2124f8 [0295.482] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0295.482] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2120b8 | out: hHeap=0x1f0000) returned 1 [0295.482] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae4f8 | out: hHeap=0x1f0000) returned 1 [0295.483] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-International%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-international%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0295.483] GetFileType (hFile=0x198) returned 0x1 [0295.483] CloseHandle (hObject=0x198) returned 1 [0295.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211b68 [0295.484] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-International%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-international%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb66288f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb66288f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0295.484] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b68 | out: hHeap=0x1f0000) returned 1 [0295.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212608 [0295.484] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-International%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-international%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb66288f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb66288f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0295.485] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212608 | out: hHeap=0x1f0000) returned 1 [0295.485] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2119d0 [0295.485] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2119d0 | out: hHeap=0x1f0000) returned 1 [0295.485] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x506ad1ac, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x506ad1ac, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-Boot%4Operational.evtx", cAlternateFileName="MI32CE~1.EVT")) returned 1 [0295.485] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2365a0 [0295.485] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0295.485] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212470 [0295.485] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0295.485] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2124f8 | out: hHeap=0x1f0000) returned 1 [0295.485] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2365a0 | out: hHeap=0x1f0000) returned 1 [0295.486] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-Boot%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-boot%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0295.779] GetFileType (hFile=0x1e0) returned 0x1 [0295.779] CloseHandle (hObject=0x1e0) returned 1 [0295.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2127a0 [0295.780] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-Boot%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-boot%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x506ad1ac, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x506ad1ac, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0295.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2127a0 | out: hHeap=0x1f0000) returned 1 [0295.781] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0295.781] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-Boot%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-boot%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x506ad1ac, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x506ad1ac, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0295.781] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0295.781] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211c78 [0295.781] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211c78 | out: hHeap=0x1f0000) returned 1 [0295.781] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ca2fbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ca2fbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-EventTracing%4Admin.evtx", cAlternateFileName="MIA934~1.EVT")) returned 1 [0295.781] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae660 [0295.781] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0295.781] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211b68 [0295.781] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0295.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212470 | out: hHeap=0x1f0000) returned 1 [0295.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae660 | out: hHeap=0x1f0000) returned 1 [0295.782] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-eventtracing%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0295.782] GetFileType (hFile=0x1e0) returned 0x1 [0295.783] CloseHandle (hObject=0x1e0) returned 1 [0295.784] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211ae0 [0295.784] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-eventtracing%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ca2fbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ca2fbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0295.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211ae0 | out: hHeap=0x1f0000) returned 1 [0295.784] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212470 [0295.784] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-eventtracing%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ca2fbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ca2fbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0295.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212470 | out: hHeap=0x1f0000) returned 1 [0295.784] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212718 [0295.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212718 | out: hHeap=0x1f0000) returned 1 [0295.784] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5071f8b0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5071f8b0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-PnP%4Configuration.evtx", cAlternateFileName="MIB32D~1.EVT")) returned 1 [0295.785] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae0c0 [0295.785] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609a0 [0295.785] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212360 [0295.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0295.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b68 | out: hHeap=0x1f0000) returned 1 [0295.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae0c0 | out: hHeap=0x1f0000) returned 1 [0295.785] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-PnP%4Configuration.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-pnp%4configuration.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0295.786] GetFileType (hFile=0x1e0) returned 0x1 [0295.786] CloseHandle (hObject=0x1e0) returned 1 [0295.786] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211b68 [0295.787] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-PnP%4Configuration.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-pnp%4configuration.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5071f8b0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5071f8b0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000)) returned 1 [0295.787] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b68 | out: hHeap=0x1f0000) returned 1 [0295.787] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0295.787] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-PnP%4Configuration.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-pnp%4configuration.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5071f8b0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5071f8b0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000)) returned 1 [0295.787] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0295.787] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212470 [0295.787] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212470 | out: hHeap=0x1f0000) returned 1 [0295.787] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8ebf6d7, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc8ebf6d7, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx", cAlternateFileName="MICA77~1.EVT")) returned 1 [0295.787] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212828 [0295.787] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0295.787] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0295.788] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0295.788] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212360 | out: hHeap=0x1f0000) returned 1 [0295.788] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212828 | out: hHeap=0x1f0000) returned 1 [0295.788] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-power%4thermal-operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0295.788] GetFileType (hFile=0x1e0) returned 0x1 [0295.789] CloseHandle (hObject=0x1e0) returned 1 [0295.789] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0295.789] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-power%4thermal-operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8ebf6d7, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc8ebf6d7, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0295.789] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0295.789] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0295.790] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-power%4thermal-operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8ebf6d7, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc8ebf6d7, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0295.790] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0295.790] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0295.790] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0295.790] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5090f75d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5090f75d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx", cAlternateFileName="MI1E8D~1.EVT")) returned 1 [0295.790] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae9a8 [0295.790] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0295.790] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212938 [0295.790] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0295.790] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0295.790] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae9a8 | out: hHeap=0x1f0000) returned 1 [0295.791] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-shimengine%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0295.791] GetFileType (hFile=0x1e0) returned 0x1 [0295.792] CloseHandle (hObject=0x1e0) returned 1 [0295.792] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2128b0 [0295.792] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-shimengine%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5090f75d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5090f75d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0295.793] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2128b0 | out: hHeap=0x1f0000) returned 1 [0295.793] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212250 [0295.793] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-shimengine%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5090f75d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5090f75d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0295.793] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212250 | out: hHeap=0x1f0000) returned 1 [0295.793] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212140 [0295.794] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212140 | out: hHeap=0x1f0000) returned 1 [0295.794] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd75102f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcd75102f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx", cAlternateFileName="MID067~1.EVT")) returned 1 [0295.795] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2aede0 [0295.795] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0295.795] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2129c0 [0295.795] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0295.795] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212938 | out: hHeap=0x1f0000) returned 1 [0295.795] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aede0 | out: hHeap=0x1f0000) returned 1 [0295.796] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-storemgr%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0295.796] GetFileType (hFile=0x1e0) returned 0x1 [0295.796] CloseHandle (hObject=0x1e0) returned 1 [0295.797] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211fa8 [0295.797] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-storemgr%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd75102f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcd75102f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0295.797] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211fa8 | out: hHeap=0x1f0000) returned 1 [0295.797] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212718 [0295.797] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-storemgr%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd75102f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcd75102f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0295.797] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212718 | out: hHeap=0x1f0000) returned 1 [0295.797] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212250 [0295.797] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212250 | out: hHeap=0x1f0000) returned 1 [0295.797] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50be4414, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50be4414, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-WHEA%4Errors.evtx", cAlternateFileName="MIDE4D~1.EVT")) returned 1 [0295.797] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236538 [0295.797] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0295.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae570 [0295.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0295.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2129c0 | out: hHeap=0x1f0000) returned 1 [0295.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236538 | out: hHeap=0x1f0000) returned 1 [0295.798] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-WHEA%4Errors.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4errors.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0295.799] GetFileType (hFile=0x1e0) returned 0x1 [0295.800] CloseHandle (hObject=0x1e0) returned 1 [0295.800] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2aede0 [0295.800] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-WHEA%4Errors.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4errors.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50be4414, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50be4414, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0295.800] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aede0 | out: hHeap=0x1f0000) returned 1 [0295.800] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae408 [0295.801] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-WHEA%4Errors.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4errors.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50be4414, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50be4414, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0295.801] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae408 | out: hHeap=0x1f0000) returned 1 [0295.801] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae138 [0295.801] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae138 | out: hHeap=0x1f0000) returned 1 [0295.801] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50be4414, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50be4414, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-WHEA%4Operational.evtx", cAlternateFileName="MI36C5~1.EVT")) returned 1 [0295.801] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236468 [0295.801] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0295.801] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212140 [0295.801] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0295.801] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae570 | out: hHeap=0x1f0000) returned 1 [0295.801] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0295.802] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-WHEA%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0295.802] GetFileType (hFile=0x1e0) returned 0x1 [0295.803] CloseHandle (hObject=0x1e0) returned 1 [0295.803] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212608 [0295.803] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-WHEA%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50be4414, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50be4414, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0295.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212608 | out: hHeap=0x1f0000) returned 1 [0295.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212718 [0295.804] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-WHEA%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50be4414, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50be4414, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0295.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212718 | out: hHeap=0x1f0000) returned 1 [0295.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212938 [0295.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212938 | out: hHeap=0x1f0000) returned 1 [0295.804] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59547c37, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x59547c37, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Known Folders API Service.evtx", cAlternateFileName="MI86D6~1.EVT")) returned 1 [0295.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2aee58 [0295.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0295.805] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d88 [0295.805] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0295.805] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212140 | out: hHeap=0x1f0000) returned 1 [0295.805] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aee58 | out: hHeap=0x1f0000) returned 1 [0295.806] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Known Folders API Service.evtx" (normalized: "c:\\logs\\microsoft-windows-known folders api service.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0295.806] GetFileType (hFile=0x1e0) returned 0x1 [0295.806] CloseHandle (hObject=0x1e0) returned 1 [0295.807] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211fa8 [0295.807] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Known Folders API Service.evtx" (normalized: "c:\\logs\\microsoft-windows-known folders api service.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59547c37, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x59547c37, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0295.807] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211fa8 | out: hHeap=0x1f0000) returned 1 [0295.807] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212470 [0295.807] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Known Folders API Service.evtx" (normalized: "c:\\logs\\microsoft-windows-known folders api service.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59547c37, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x59547c37, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0295.808] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212470 | out: hHeap=0x1f0000) returned 1 [0295.808] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212250 [0295.808] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212250 | out: hHeap=0x1f0000) returned 1 [0295.808] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbb7386e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcbb7386e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-LiveId%4Operational.evtx", cAlternateFileName="MI4C58~1.EVT")) returned 1 [0295.808] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2365a0 [0295.808] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0295.808] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae1b0 [0295.808] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0295.808] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d88 | out: hHeap=0x1f0000) returned 1 [0295.809] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2365a0 | out: hHeap=0x1f0000) returned 1 [0295.809] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-LiveId%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-liveid%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0295.810] GetFileType (hFile=0x1e0) returned 0x1 [0295.810] CloseHandle (hObject=0x1e0) returned 1 [0295.810] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2aeb88 [0295.811] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-LiveId%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-liveid%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbb7386e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcbb7386e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0295.811] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aeb88 | out: hHeap=0x1f0000) returned 1 [0295.811] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2aeb88 [0295.811] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-LiveId%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-liveid%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbb7386e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcbb7386e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0295.811] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aeb88 | out: hHeap=0x1f0000) returned 1 [0295.811] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2aea98 [0295.811] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aea98 | out: hHeap=0x1f0000) returned 1 [0295.811] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc93d06f0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc93d06f0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-MUI%4Admin.evtx", cAlternateFileName="MI30D3~1.EVT")) returned 1 [0295.812] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8e20 [0295.812] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0295.812] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2364d0 [0295.812] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0295.812] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae1b0 | out: hHeap=0x1f0000) returned 1 [0295.812] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8e20 | out: hHeap=0x1f0000) returned 1 [0295.813] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-MUI%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-mui%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0295.813] GetFileType (hFile=0x1e0) returned 0x1 [0295.814] CloseHandle (hObject=0x1e0) returned 1 [0296.133] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236468 [0296.134] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-MUI%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-mui%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc93d06f0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc93d06f0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0296.134] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0296.134] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2365a0 [0296.134] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-MUI%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-mui%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc93d06f0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc93d06f0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0296.134] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2365a0 | out: hHeap=0x1f0000) returned 1 [0296.134] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2365a0 [0296.135] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2365a0 | out: hHeap=0x1f0000) returned 1 [0296.135] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc93aa49b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc93aa49b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-MUI%4Operational.evtx", cAlternateFileName="MI6F01~1.EVT")) returned 1 [0296.135] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8d18 [0296.135] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0296.135] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae4f8 [0296.135] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0296.135] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2364d0 | out: hHeap=0x1f0000) returned 1 [0296.135] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0296.136] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-MUI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-mui%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0296.136] GetFileType (hFile=0x1e0) returned 0x1 [0296.137] CloseHandle (hObject=0x1e0) returned 1 [0296.137] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae390 [0296.138] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-MUI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-mui%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc93aa49b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc93aa49b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0296.138] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae390 | out: hHeap=0x1f0000) returned 1 [0296.138] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2aeb88 [0296.138] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-MUI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-mui%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc93aa49b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc93aa49b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0296.138] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aeb88 | out: hHeap=0x1f0000) returned 1 [0296.138] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2aecf0 [0296.138] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aecf0 | out: hHeap=0x1f0000) returned 1 [0296.138] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9d33b19, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9d33b19, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-NCSI%4Operational.evtx", cAlternateFileName="MI483C~1.EVT")) returned 1 [0296.139] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2364d0 [0296.139] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260838 [0296.139] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae0c0 [0296.139] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260838 | out: hHeap=0x1f0000) returned 1 [0296.139] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae4f8 | out: hHeap=0x1f0000) returned 1 [0296.139] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2364d0 | out: hHeap=0x1f0000) returned 1 [0296.140] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-NCSI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-ncsi%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0296.140] GetFileType (hFile=0x1e0) returned 0x1 [0296.141] CloseHandle (hObject=0x1e0) returned 1 [0296.141] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae570 [0296.141] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-NCSI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-ncsi%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9d33b19, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9d33b19, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0296.142] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae570 | out: hHeap=0x1f0000) returned 1 [0296.142] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2aede0 [0296.142] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-NCSI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-ncsi%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9d33b19, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9d33b19, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0296.142] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aede0 | out: hHeap=0x1f0000) returned 1 [0296.143] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2aec00 [0296.143] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aec00 | out: hHeap=0x1f0000) returned 1 [0296.143] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbcf0ff2, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcbcf0ff2, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-NetworkProfile%4Operational.evtx", cAlternateFileName="MIFC66~1.EVT")) returned 1 [0296.143] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae4f8 [0296.143] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0296.143] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212250 [0296.143] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0296.143] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae0c0 | out: hHeap=0x1f0000) returned 1 [0296.143] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae4f8 | out: hHeap=0x1f0000) returned 1 [0296.144] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-NetworkProfile%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-networkprofile%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0296.144] GetFileType (hFile=0x1e0) returned 0x1 [0296.145] CloseHandle (hObject=0x1e0) returned 1 [0296.146] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212828 [0296.146] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-NetworkProfile%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-networkprofile%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbcf0ff2, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcbcf0ff2, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0296.146] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212828 | out: hHeap=0x1f0000) returned 1 [0296.146] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0296.146] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-NetworkProfile%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-networkprofile%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbcf0ff2, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcbcf0ff2, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0296.146] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0296.146] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212828 [0296.147] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212828 | out: hHeap=0x1f0000) returned 1 [0296.147] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ab3154, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ab3154, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Ntfs%4Operational.evtx", cAlternateFileName="MI6E98~1.EVT")) returned 1 [0296.147] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236468 [0296.147] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0296.147] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2aeb88 [0296.147] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0296.147] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212250 | out: hHeap=0x1f0000) returned 1 [0296.147] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0296.148] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Ntfs%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-ntfs%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0296.148] GetFileType (hFile=0x1e0) returned 0x1 [0296.149] CloseHandle (hObject=0x1e0) returned 1 [0296.149] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae4f8 [0296.150] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Ntfs%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-ntfs%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ab3154, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ab3154, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0296.150] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae4f8 | out: hHeap=0x1f0000) returned 1 [0296.150] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2aee58 [0296.150] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Ntfs%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-ntfs%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ab3154, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ab3154, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0296.150] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aee58 | out: hHeap=0x1f0000) returned 1 [0296.150] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae318 [0296.150] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae318 | out: hHeap=0x1f0000) returned 1 [0296.151] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ad9393, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ad9393, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Ntfs%4WHC.evtx", cAlternateFileName="MIB2AC~1.EVT")) returned 1 [0296.151] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8e20 [0296.151] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0296.151] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236468 [0296.151] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0296.151] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aeb88 | out: hHeap=0x1f0000) returned 1 [0296.151] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8e20 | out: hHeap=0x1f0000) returned 1 [0296.152] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Ntfs%4WHC.evtx" (normalized: "c:\\logs\\microsoft-windows-ntfs%4whc.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0296.152] GetFileType (hFile=0x1e0) returned 0x1 [0296.153] CloseHandle (hObject=0x1e0) returned 1 [0296.153] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2364d0 [0296.153] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Ntfs%4WHC.evtx" (normalized: "c:\\logs\\microsoft-windows-ntfs%4whc.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ad9393, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ad9393, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0296.153] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2364d0 | out: hHeap=0x1f0000) returned 1 [0296.153] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2365a0 [0296.154] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Ntfs%4WHC.evtx" (normalized: "c:\\logs\\microsoft-windows-ntfs%4whc.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ad9393, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ad9393, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0296.154] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2365a0 | out: hHeap=0x1f0000) returned 1 [0296.154] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2364d0 [0296.154] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2364d0 | out: hHeap=0x1f0000) returned 1 [0296.154] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca5fe5cb, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca5fe5cb, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx", cAlternateFileName="MI6AFE~1.EVT")) returned 1 [0296.154] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21ab60 [0296.154] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0296.154] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad1e8 [0296.154] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0296.155] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0296.155] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ab60 | out: hHeap=0x1f0000) returned 1 [0296.155] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx" (normalized: "c:\\logs\\microsoft-windows-program-compatibility-assistant%4compatafterupgrade.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0296.156] GetFileType (hFile=0x1e0) returned 0x1 [0296.156] CloseHandle (hObject=0x1e0) returned 1 [0296.157] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad358 [0296.157] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx" (normalized: "c:\\logs\\microsoft-windows-program-compatibility-assistant%4compatafterupgrade.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca5fe5cb, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca5fe5cb, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0296.157] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad358 | out: hHeap=0x1f0000) returned 1 [0296.157] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad2a0 [0296.157] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx" (normalized: "c:\\logs\\microsoft-windows-program-compatibility-assistant%4compatafterupgrade.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca5fe5cb, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca5fe5cb, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0296.157] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad2a0 | out: hHeap=0x1f0000) returned 1 [0296.157] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad358 [0296.158] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad358 | out: hHeap=0x1f0000) returned 1 [0296.158] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe24cdef0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xe24cdef0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-ReadyBoost%4Operational.evtx", cAlternateFileName="MIB9D2~1.EVT")) returned 1 [0296.158] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236468 [0296.158] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0296.159] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2aee58 [0296.159] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0296.159] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad1e8 | out: hHeap=0x1f0000) returned 1 [0296.159] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0296.159] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-ReadyBoost%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-readyboost%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0296.160] GetFileType (hFile=0x1e0) returned 0x1 [0296.160] CloseHandle (hObject=0x1e0) returned 1 [0296.161] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae930 [0296.161] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-ReadyBoost%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-readyboost%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe24cdef0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xe24cdef0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0296.161] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae930 | out: hHeap=0x1f0000) returned 1 [0296.161] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae930 [0296.161] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-ReadyBoost%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-readyboost%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe24cdef0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xe24cdef0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0296.161] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae930 | out: hHeap=0x1f0000) returned 1 [0296.161] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2aeb10 [0296.161] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aeb10 | out: hHeap=0x1f0000) returned 1 [0296.161] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd125335f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd125335f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx", cAlternateFileName="MI7A67~1.EVT")) returned 1 [0296.161] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0296.161] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0296.162] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a2d8 [0296.162] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0296.162] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aee58 | out: hHeap=0x1f0000) returned 1 [0296.162] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0296.162] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-resource-exhaustion-detector%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0296.163] GetFileType (hFile=0x1e0) returned 0x1 [0296.163] CloseHandle (hObject=0x1e0) returned 1 [0296.163] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21aa10 [0296.163] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-resource-exhaustion-detector%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd125335f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd125335f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0296.164] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21aa10 | out: hHeap=0x1f0000) returned 1 [0296.164] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219c48 [0296.164] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-resource-exhaustion-detector%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd125335f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd125335f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0296.164] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219c48 | out: hHeap=0x1f0000) returned 1 [0296.164] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219e40 [0296.164] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219e40 | out: hHeap=0x1f0000) returned 1 [0296.164] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1fe2941, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd1fe2941, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SettingSync%4Debug.evtx", cAlternateFileName="MI3773~1.EVT")) returned 1 [0296.164] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2365a0 [0296.164] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0296.164] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae408 [0296.164] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0296.164] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a2d8 | out: hHeap=0x1f0000) returned 1 [0296.164] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2365a0 | out: hHeap=0x1f0000) returned 1 [0296.165] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-SettingSync%4Debug.evtx" (normalized: "c:\\logs\\microsoft-windows-settingsync%4debug.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0296.165] GetFileType (hFile=0x1e0) returned 0x1 [0296.166] CloseHandle (hObject=0x1e0) returned 1 [0296.166] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae750 [0296.166] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-SettingSync%4Debug.evtx" (normalized: "c:\\logs\\microsoft-windows-settingsync%4debug.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1fe2941, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd1fe2941, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000)) returned 1 [0296.166] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae750 | out: hHeap=0x1f0000) returned 1 [0296.166] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae660 [0296.166] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-SettingSync%4Debug.evtx" (normalized: "c:\\logs\\microsoft-windows-settingsync%4debug.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1fe2941, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd1fe2941, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000)) returned 1 [0296.166] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae660 | out: hHeap=0x1f0000) returned 1 [0296.166] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae4f8 [0296.167] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae4f8 | out: hHeap=0x1f0000) returned 1 [0296.167] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1fe2941, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd1fe2941, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SettingSync%4Operational.evtx", cAlternateFileName="MI36AA~1.EVT")) returned 1 [0296.167] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2365a0 [0296.167] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0296.167] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212938 [0296.167] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0296.167] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae408 | out: hHeap=0x1f0000) returned 1 [0296.167] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2365a0 | out: hHeap=0x1f0000) returned 1 [0296.167] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-SettingSync%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-settingsync%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0296.168] GetFileType (hFile=0x1e0) returned 0x1 [0296.168] CloseHandle (hObject=0x1e0) returned 1 [0296.168] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212140 [0296.168] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-SettingSync%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-settingsync%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1fe2941, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd1fe2941, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0296.169] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212140 | out: hHeap=0x1f0000) returned 1 [0296.169] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211948 [0296.169] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-SettingSync%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-settingsync%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1fe2941, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd1fe2941, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0296.169] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211948 | out: hHeap=0x1f0000) returned 1 [0296.169] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211bf0 [0296.169] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211bf0 | out: hHeap=0x1f0000) returned 1 [0296.169] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3852b12, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd3852b12, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Shell-Core%4ActionCenter.evtx", cAlternateFileName="MI2E2E~1.EVT")) returned 1 [0296.169] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2365a0 [0296.169] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0296.169] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211a58 [0296.169] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0296.170] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212938 | out: hHeap=0x1f0000) returned 1 [0296.170] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2365a0 | out: hHeap=0x1f0000) returned 1 [0296.170] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Shell-Core%4ActionCenter.evtx" (normalized: "c:\\logs\\microsoft-windows-shell-core%4actioncenter.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0296.170] GetFileType (hFile=0x1e0) returned 0x1 [0296.171] CloseHandle (hObject=0x1e0) returned 1 [0296.171] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2127a0 [0296.171] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Shell-Core%4ActionCenter.evtx" (normalized: "c:\\logs\\microsoft-windows-shell-core%4actioncenter.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3852b12, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd3852b12, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0296.171] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2127a0 | out: hHeap=0x1f0000) returned 1 [0296.171] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2119d0 [0296.171] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Shell-Core%4ActionCenter.evtx" (normalized: "c:\\logs\\microsoft-windows-shell-core%4actioncenter.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3852b12, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd3852b12, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0296.171] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2119d0 | out: hHeap=0x1f0000) returned 1 [0296.172] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212828 [0296.172] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212828 | out: hHeap=0x1f0000) returned 1 [0296.172] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3852b12, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd3852b12, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Shell-Core%4Operational.evtx", cAlternateFileName="MI1C6C~1.EVT")) returned 1 [0296.172] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236538 [0296.172] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0296.172] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae1b0 [0296.172] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0296.172] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211a58 | out: hHeap=0x1f0000) returned 1 [0296.172] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236538 | out: hHeap=0x1f0000) returned 1 [0296.172] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Shell-Core%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-shell-core%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0296.173] GetFileType (hFile=0x1e0) returned 0x1 [0296.173] CloseHandle (hObject=0x1e0) returned 1 [0296.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae318 [0296.570] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Shell-Core%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-shell-core%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3852b12, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd3852b12, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0296.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae318 | out: hHeap=0x1f0000) returned 1 [0296.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae5e8 [0296.570] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Shell-Core%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-shell-core%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3852b12, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd3852b12, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0296.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae5e8 | out: hHeap=0x1f0000) returned 1 [0296.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae408 [0296.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae408 | out: hHeap=0x1f0000) returned 1 [0296.570] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97d66c8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97d66c8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SmbClient%4Connectivity.evtx", cAlternateFileName="MI00FB~1.EVT")) returned 1 [0296.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236468 [0296.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0296.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae930 [0296.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0296.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae1b0 | out: hHeap=0x1f0000) returned 1 [0296.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0296.571] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-SmbClient%4Connectivity.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4connectivity.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0296.572] GetFileType (hFile=0x1e0) returned 0x1 [0296.572] CloseHandle (hObject=0x1e0) returned 1 [0296.572] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2aede0 [0296.572] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-SmbClient%4Connectivity.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4connectivity.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97d66c8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97d66c8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0296.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aede0 | out: hHeap=0x1f0000) returned 1 [0296.572] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae660 [0296.573] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-SmbClient%4Connectivity.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4connectivity.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97d66c8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97d66c8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0296.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae660 | out: hHeap=0x1f0000) returned 1 [0296.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2adfd0 [0296.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2adfd0 | out: hHeap=0x1f0000) returned 1 [0296.573] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97b042f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97b042f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SMBClient%4Operational.evtx", cAlternateFileName="MID8B0~1.EVT")) returned 1 [0296.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236608 [0296.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0296.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae9a8 [0296.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0296.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae930 | out: hHeap=0x1f0000) returned 1 [0296.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236608 | out: hHeap=0x1f0000) returned 1 [0296.574] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-SMBClient%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0296.574] GetFileType (hFile=0x1e0) returned 0x1 [0296.574] CloseHandle (hObject=0x1e0) returned 1 [0296.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae750 [0296.575] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-SMBClient%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97b042f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97b042f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0296.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae750 | out: hHeap=0x1f0000) returned 1 [0296.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae0c0 [0296.575] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-SMBClient%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97b042f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97b042f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0296.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae0c0 | out: hHeap=0x1f0000) returned 1 [0296.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae570 [0296.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae570 | out: hHeap=0x1f0000) returned 1 [0296.575] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97d66c8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97d66c8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SmbClient%4Security.evtx", cAlternateFileName="MI8CEE~1.EVT")) returned 1 [0296.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2365a0 [0296.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260838 [0296.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2aea98 [0296.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260838 | out: hHeap=0x1f0000) returned 1 [0296.576] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae9a8 | out: hHeap=0x1f0000) returned 1 [0296.576] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2365a0 | out: hHeap=0x1f0000) returned 1 [0296.576] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-SmbClient%4Security.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4security.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0296.576] GetFileType (hFile=0x1e0) returned 0x1 [0296.577] CloseHandle (hObject=0x1e0) returned 1 [0296.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2aeb10 [0296.577] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-SmbClient%4Security.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4security.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97d66c8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97d66c8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0296.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aeb10 | out: hHeap=0x1f0000) returned 1 [0296.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2aeb10 [0296.577] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-SmbClient%4Security.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4security.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97d66c8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97d66c8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0296.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aeb10 | out: hHeap=0x1f0000) returned 1 [0296.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae318 [0296.578] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae318 | out: hHeap=0x1f0000) returned 1 [0296.578] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb1ea1c9, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb1ea1c9, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SMBServer%4Audit.evtx", cAlternateFileName="MIE3AD~1.EVT")) returned 1 [0296.578] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8d18 [0296.578] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260838 [0296.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae318 [0296.579] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260838 | out: hHeap=0x1f0000) returned 1 [0296.579] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aea98 | out: hHeap=0x1f0000) returned 1 [0296.579] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0296.579] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-SMBServer%4Audit.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4audit.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0296.580] GetFileType (hFile=0x1e0) returned 0x1 [0296.580] CloseHandle (hObject=0x1e0) returned 1 [0296.581] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae5e8 [0296.581] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-SMBServer%4Audit.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4audit.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb1ea1c9, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb1ea1c9, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0296.581] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae5e8 | out: hHeap=0x1f0000) returned 1 [0296.581] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae660 [0296.581] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-SMBServer%4Audit.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4audit.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb1ea1c9, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb1ea1c9, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0296.581] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae660 | out: hHeap=0x1f0000) returned 1 [0296.581] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2adfd0 [0296.582] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2adfd0 | out: hHeap=0x1f0000) returned 1 [0296.582] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb19dd19, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb19dd19, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SMBServer%4Connectivity.evtx", cAlternateFileName="MI8248~1.EVT")) returned 1 [0296.582] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236538 [0296.582] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0296.582] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2aede0 [0296.582] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0296.582] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae318 | out: hHeap=0x1f0000) returned 1 [0296.582] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236538 | out: hHeap=0x1f0000) returned 1 [0296.582] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-SMBServer%4Connectivity.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4connectivity.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0296.583] GetFileType (hFile=0x1e0) returned 0x1 [0296.583] CloseHandle (hObject=0x1e0) returned 1 [0296.583] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae4f8 [0296.584] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-SMBServer%4Connectivity.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4connectivity.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb19dd19, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb19dd19, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0296.584] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae4f8 | out: hHeap=0x1f0000) returned 1 [0296.584] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2aea98 [0296.584] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-SMBServer%4Connectivity.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4connectivity.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb19dd19, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb19dd19, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0296.584] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aea98 | out: hHeap=0x1f0000) returned 1 [0296.584] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae1b0 [0296.584] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae1b0 | out: hHeap=0x1f0000) returned 1 [0296.584] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb151873, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb151873, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SMBServer%4Operational.evtx", cAlternateFileName="MI4B6B~1.EVT")) returned 1 [0296.584] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236468 [0296.584] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260888 [0296.584] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2aee58 [0296.585] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0296.585] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aede0 | out: hHeap=0x1f0000) returned 1 [0296.585] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0296.585] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-SMBServer%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0296.585] GetFileType (hFile=0x1e0) returned 0x1 [0296.586] CloseHandle (hObject=0x1e0) returned 1 [0296.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae750 [0296.586] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-SMBServer%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb151873, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb151873, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0296.586] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae750 | out: hHeap=0x1f0000) returned 1 [0296.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae9a8 [0296.586] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-SMBServer%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb151873, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb151873, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0296.587] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae9a8 | out: hHeap=0x1f0000) returned 1 [0296.587] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2aec78 [0296.587] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aec78 | out: hHeap=0x1f0000) returned 1 [0296.587] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb177aca, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb177aca, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SMBServer%4Security.evtx", cAlternateFileName="MI7709~1.EVT")) returned 1 [0296.587] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236608 [0296.587] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0296.587] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae6d8 [0296.587] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0296.587] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aee58 | out: hHeap=0x1f0000) returned 1 [0296.587] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236608 | out: hHeap=0x1f0000) returned 1 [0296.588] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-SMBServer%4Security.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4security.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0296.588] GetFileType (hFile=0x1e0) returned 0x1 [0296.588] CloseHandle (hObject=0x1e0) returned 1 [0296.588] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae660 [0296.588] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-SMBServer%4Security.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4security.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb177aca, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb177aca, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0296.589] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae660 | out: hHeap=0x1f0000) returned 1 [0296.589] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae1b0 [0296.589] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-SMBServer%4Security.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4security.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb177aca, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb177aca, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0296.589] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae1b0 | out: hHeap=0x1f0000) returned 1 [0296.589] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae138 [0296.589] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae138 | out: hHeap=0x1f0000) returned 1 [0296.589] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd751ea61, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd751ea61, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Store%4Operational.evtx", cAlternateFileName="MICEDD~1.EVT")) returned 1 [0296.589] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236608 [0296.589] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0296.589] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2aeb88 [0296.589] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0296.589] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae6d8 | out: hHeap=0x1f0000) returned 1 [0296.590] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236608 | out: hHeap=0x1f0000) returned 1 [0296.590] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Store%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-store%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0296.590] GetFileType (hFile=0x1e0) returned 0x1 [0296.591] CloseHandle (hObject=0x1e0) returned 1 [0296.591] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae0c0 [0296.591] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Store%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-store%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd751ea61, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd751ea61, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0296.591] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae0c0 | out: hHeap=0x1f0000) returned 1 [0296.591] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae8b8 [0296.591] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Store%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-store%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd751ea61, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd751ea61, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0296.592] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae8b8 | out: hHeap=0x1f0000) returned 1 [0296.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae1b0 [0296.592] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae1b0 | out: hHeap=0x1f0000) returned 1 [0296.592] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd0763ff, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcd0763ff, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-TaskScheduler%4Maintenance.evtx", cAlternateFileName="MIE2F0~1.EVT")) returned 1 [0296.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae5e8 [0296.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0296.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211fa8 [0296.592] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0296.592] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aeb88 | out: hHeap=0x1f0000) returned 1 [0296.592] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae5e8 | out: hHeap=0x1f0000) returned 1 [0296.592] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-TaskScheduler%4Maintenance.evtx" (normalized: "c:\\logs\\microsoft-windows-taskscheduler%4maintenance.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0296.593] GetFileType (hFile=0x1e0) returned 0x1 [0296.593] CloseHandle (hObject=0x1e0) returned 1 [0296.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212828 [0296.593] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-TaskScheduler%4Maintenance.evtx" (normalized: "c:\\logs\\microsoft-windows-taskscheduler%4maintenance.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd0763ff, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcd0763ff, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0296.593] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212828 | out: hHeap=0x1f0000) returned 1 [0296.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211b68 [0296.593] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-TaskScheduler%4Maintenance.evtx" (normalized: "c:\\logs\\microsoft-windows-taskscheduler%4maintenance.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd0763ff, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcd0763ff, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0296.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b68 | out: hHeap=0x1f0000) returned 1 [0296.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212470 [0296.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212470 | out: hHeap=0x1f0000) returned 1 [0296.594] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5089d037, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5089d037, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx", cAlternateFileName="MIAB1D~1.EVT")) returned 1 [0296.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0296.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0296.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21ab60 [0296.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0296.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211fa8 | out: hHeap=0x1f0000) returned 1 [0296.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0296.595] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0296.595] GetFileType (hFile=0x1e0) returned 0x1 [0296.596] CloseHandle (hObject=0x1e0) returned 1 [0296.596] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a6c8 [0296.596] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5089d037, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5089d037, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0296.596] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a6c8 | out: hHeap=0x1f0000) returned 1 [0296.596] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219c48 [0296.597] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5089d037, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5089d037, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0296.597] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219c48 | out: hHeap=0x1f0000) returned 1 [0296.597] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21aab8 [0296.597] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21aab8 | out: hHeap=0x1f0000) returned 1 [0296.597] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x508c32a6, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x508c32a6, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx", cAlternateFileName="MI62D3~1.EVT")) returned 1 [0296.597] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219d98 [0296.597] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260770 [0296.597] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad130 [0296.597] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0296.597] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ab60 | out: hHeap=0x1f0000) returned 1 [0296.597] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219d98 | out: hHeap=0x1f0000) returned 1 [0296.598] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0296.598] GetFileType (hFile=0x1e0) returned 0x1 [0296.598] CloseHandle (hObject=0x1e0) returned 1 [0296.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2add68 [0296.599] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x508c32a6, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x508c32a6, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0296.599] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2add68 | out: hHeap=0x1f0000) returned 1 [0296.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ade20 [0296.599] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x508c32a6, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x508c32a6, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0296.599] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ade20 | out: hHeap=0x1f0000) returned 1 [0296.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad580 [0296.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad580 | out: hHeap=0x1f0000) returned 1 [0296.600] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc14341c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc14341c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx", cAlternateFileName="MIEC03~1.EVT")) returned 1 [0296.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0296.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0296.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a2d8 [0296.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0296.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad130 | out: hHeap=0x1f0000) returned 1 [0296.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0296.601] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0296.601] GetFileType (hFile=0x1e0) returned 0x1 [0296.602] CloseHandle (hObject=0x1e0) returned 1 [0296.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a0e0 [0296.602] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc14341c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc14341c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0296.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a0e0 | out: hHeap=0x1f0000) returned 1 [0296.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a230 [0296.603] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc14341c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc14341c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0296.603] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a230 | out: hHeap=0x1f0000) returned 1 [0296.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21aab8 [0296.603] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21aab8 | out: hHeap=0x1f0000) returned 1 [0296.603] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc1b5b23, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc1b5b23, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx", cAlternateFileName="MI1F5D~1.EVT")) returned 1 [0296.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a8c0 [0296.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0296.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ade20 [0296.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0296.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a2d8 | out: hHeap=0x1f0000) returned 1 [0296.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a8c0 | out: hHeap=0x1f0000) returned 1 [0296.604] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0296.605] GetFileType (hFile=0x1e0) returned 0x1 [0296.605] CloseHandle (hObject=0x1e0) returned 1 [0296.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad130 [0296.606] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc1b5b23, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc1b5b23, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0296.606] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad130 | out: hHeap=0x1f0000) returned 1 [0296.606] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad6f0 [0296.606] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc1b5b23, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc1b5b23, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0296.606] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad6f0 | out: hHeap=0x1f0000) returned 1 [0296.606] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2adb40 [0296.606] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2adb40 | out: hHeap=0x1f0000) returned 1 [0296.606] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd74ac348, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd74ac348, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-TWinUI%4Operational.evtx", cAlternateFileName="MIA925~1.EVT")) returned 1 [0296.606] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2364d0 [0296.606] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0296.606] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2aec00 [0296.606] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0296.607] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ade20 | out: hHeap=0x1f0000) returned 1 [0296.607] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2364d0 | out: hHeap=0x1f0000) returned 1 [0296.607] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-TWinUI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-twinui%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0296.607] GetFileType (hFile=0x1e0) returned 0x1 [0296.608] CloseHandle (hObject=0x1e0) returned 1 [0296.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2aee58 [0296.608] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-TWinUI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-twinui%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd74ac348, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd74ac348, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0296.608] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aee58 | out: hHeap=0x1f0000) returned 1 [0296.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae390 [0296.608] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-TWinUI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-twinui%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd74ac348, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd74ac348, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0296.608] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae390 | out: hHeap=0x1f0000) returned 1 [0296.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae570 [0296.608] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae570 | out: hHeap=0x1f0000) returned 1 [0296.608] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50aff605, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50aff605, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-User Profile Service%4Operational.evtx", cAlternateFileName="MI4D4C~1.EVT")) returned 1 [0296.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d88 [0296.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0296.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0296.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0296.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aec00 | out: hHeap=0x1f0000) returned 1 [0296.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d88 | out: hHeap=0x1f0000) returned 1 [0296.610] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-User Profile Service%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-user profile service%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0296.610] GetFileType (hFile=0x1e0) returned 0x1 [0296.610] CloseHandle (hObject=0x1e0) returned 1 [0296.610] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0296.611] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-User Profile Service%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-user profile service%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50aff605, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50aff605, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0296.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0296.754] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0296.754] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-User Profile Service%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-user profile service%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50aff605, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50aff605, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0296.755] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0296.755] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0296.755] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0296.755] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50981e6e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50981e6e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-UserPnp%4ActionCenter.evtx", cAlternateFileName="MI5FF0~1.EVT")) returned 1 [0296.755] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2364d0 [0296.755] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0296.755] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae480 [0296.755] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0296.756] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0296.756] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2364d0 | out: hHeap=0x1f0000) returned 1 [0296.757] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-UserPnp%4ActionCenter.evtx" (normalized: "c:\\logs\\microsoft-windows-userpnp%4actioncenter.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0296.757] GetFileType (hFile=0x1ac) returned 0x1 [0296.758] CloseHandle (hObject=0x1ac) returned 1 [0296.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae318 [0296.759] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-UserPnp%4ActionCenter.evtx" (normalized: "c:\\logs\\microsoft-windows-userpnp%4actioncenter.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50981e6e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50981e6e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0296.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae318 | out: hHeap=0x1f0000) returned 1 [0296.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae228 [0296.759] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-UserPnp%4ActionCenter.evtx" (normalized: "c:\\logs\\microsoft-windows-userpnp%4actioncenter.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50981e6e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50981e6e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0296.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae228 | out: hHeap=0x1f0000) returned 1 [0296.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2aecf0 [0296.760] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aecf0 | out: hHeap=0x1f0000) returned 1 [0296.760] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5095bc04, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5095bc04, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-UserPnp%4DeviceInstall.evtx", cAlternateFileName="MIBD88~1.EVT")) returned 1 [0296.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236468 [0296.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260770 [0296.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2aecf0 [0296.760] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0296.761] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae480 | out: hHeap=0x1f0000) returned 1 [0296.761] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0296.761] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-UserPnp%4DeviceInstall.evtx" (normalized: "c:\\logs\\microsoft-windows-userpnp%4deviceinstall.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0296.762] GetFileType (hFile=0x1ac) returned 0x1 [0296.762] CloseHandle (hObject=0x1ac) returned 1 [0296.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2aede0 [0296.763] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-UserPnp%4DeviceInstall.evtx" (normalized: "c:\\logs\\microsoft-windows-userpnp%4deviceinstall.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5095bc04, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5095bc04, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0296.763] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aede0 | out: hHeap=0x1f0000) returned 1 [0296.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae4f8 [0296.763] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-UserPnp%4DeviceInstall.evtx" (normalized: "c:\\logs\\microsoft-windows-userpnp%4deviceinstall.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5095bc04, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5095bc04, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0296.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae4f8 | out: hHeap=0x1f0000) returned 1 [0296.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae390 [0296.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae390 | out: hHeap=0x1f0000) returned 1 [0296.764] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50b97f64, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50b97f64, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx", cAlternateFileName="MICC17~1.EVT")) returned 1 [0296.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212140 [0296.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0296.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0296.765] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0296.765] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aecf0 | out: hHeap=0x1f0000) returned 1 [0296.765] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212140 | out: hHeap=0x1f0000) returned 1 [0296.766] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-volumesnapshot-driver%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0296.766] GetFileType (hFile=0x1ac) returned 0x1 [0296.767] CloseHandle (hObject=0x1ac) returned 1 [0296.768] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0296.768] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-volumesnapshot-driver%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50b97f64, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50b97f64, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0296.768] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0296.768] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0296.768] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-volumesnapshot-driver%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50b97f64, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50b97f64, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0296.768] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0296.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0296.769] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0296.769] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc986efe1, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc986efe1, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Wcmsvc%4Operational.evtx", cAlternateFileName="MI72BF~1.EVT")) returned 1 [0296.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236468 [0296.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0296.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae048 [0296.769] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0296.769] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0296.770] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0296.770] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Wcmsvc%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-wcmsvc%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0296.771] GetFileType (hFile=0x1ac) returned 0x1 [0296.771] CloseHandle (hObject=0x1ac) returned 1 [0296.771] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae4f8 [0296.771] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Wcmsvc%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-wcmsvc%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc986efe1, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc986efe1, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0296.772] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae4f8 | out: hHeap=0x1f0000) returned 1 [0296.772] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae7c8 [0296.772] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Wcmsvc%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-wcmsvc%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc986efe1, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc986efe1, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0296.772] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae7c8 | out: hHeap=0x1f0000) returned 1 [0296.772] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2aecf0 [0296.772] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aecf0 | out: hHeap=0x1f0000) returned 1 [0296.772] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb426548, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb426548, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Windows Defender%4Operational.evtx", cAlternateFileName="MI7501~1.EVT")) returned 1 [0296.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae1b0 [0296.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0296.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212608 [0296.773] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0296.773] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae048 | out: hHeap=0x1f0000) returned 1 [0296.773] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae1b0 | out: hHeap=0x1f0000) returned 1 [0296.774] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Windows Defender%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-windows defender%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0296.774] GetFileType (hFile=0x1ac) returned 0x1 [0296.775] CloseHandle (hObject=0x1ac) returned 1 [0296.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2119d0 [0296.775] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Windows Defender%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-windows defender%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb426548, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb426548, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0296.775] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2119d0 | out: hHeap=0x1f0000) returned 1 [0296.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0296.776] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Windows Defender%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-windows defender%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb426548, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb426548, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0296.776] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0296.776] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211f20 [0296.776] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211f20 | out: hHeap=0x1f0000) returned 1 [0296.776] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb4729e7, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb4729e7, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Windows Defender%4WHC.evtx", cAlternateFileName="MIF226~1.EVT")) returned 1 [0296.776] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236608 [0296.776] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609a0 [0296.776] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae7c8 [0296.776] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0296.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212608 | out: hHeap=0x1f0000) returned 1 [0296.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236608 | out: hHeap=0x1f0000) returned 1 [0296.777] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Windows Defender%4WHC.evtx" (normalized: "c:\\logs\\microsoft-windows-windows defender%4whc.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0296.778] GetFileType (hFile=0x1ac) returned 0x1 [0296.778] CloseHandle (hObject=0x1ac) returned 1 [0296.779] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae318 [0296.779] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Windows Defender%4WHC.evtx" (normalized: "c:\\logs\\microsoft-windows-windows defender%4whc.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb4729e7, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb4729e7, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0296.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae318 | out: hHeap=0x1f0000) returned 1 [0296.779] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2aee58 [0296.779] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Windows Defender%4WHC.evtx" (normalized: "c:\\logs\\microsoft-windows-windows defender%4whc.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb4729e7, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb4729e7, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0296.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aee58 | out: hHeap=0x1f0000) returned 1 [0296.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2adfd0 [0296.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2adfd0 | out: hHeap=0x1f0000) returned 1 [0296.780] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4b19353, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4b19353, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx", cAlternateFileName="MIDCC7~1.EVT")) returned 1 [0296.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad4c8 [0296.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0296.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x230000 [0296.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0296.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae7c8 | out: hHeap=0x1f0000) returned 1 [0296.781] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad4c8 | out: hHeap=0x1f0000) returned 1 [0296.781] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4connectionsecurity.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0296.782] GetFileType (hFile=0x1ac) returned 0x1 [0296.782] CloseHandle (hObject=0x1ac) returned 1 [0296.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x2303e8 [0296.783] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4connectionsecurity.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4b19353, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4b19353, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0296.783] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0296.783] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f768 [0296.783] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4connectionsecurity.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4b19353, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4b19353, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0296.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0296.784] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f8f8 [0296.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0296.784] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9c9b1b6, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9c9b1b6, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx", cAlternateFileName="MI7771~1.EVT")) returned 1 [0296.784] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21aab8 [0296.784] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0296.784] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad9d0 [0296.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0296.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0296.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21aab8 | out: hHeap=0x1f0000) returned 1 [0296.785] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4firewall.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0296.786] GetFileType (hFile=0x1ac) returned 0x1 [0296.786] CloseHandle (hObject=0x1ac) returned 1 [0296.786] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2add68 [0296.786] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4firewall.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9c9b1b6, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9c9b1b6, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000)) returned 1 [0296.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2add68 | out: hHeap=0x1f0000) returned 1 [0296.786] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2aded8 [0296.787] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4firewall.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9c9b1b6, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9c9b1b6, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000)) returned 1 [0296.787] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aded8 | out: hHeap=0x1f0000) returned 1 [0296.787] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad918 [0296.787] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad918 | out: hHeap=0x1f0000) returned 1 [0296.787] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9df26e9, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9df26e9, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx", cAlternateFileName="MI4667~1.EVT")) returned 1 [0296.787] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212360 [0296.787] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0296.787] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0296.787] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0296.787] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad9d0 | out: hHeap=0x1f0000) returned 1 [0296.787] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212360 | out: hHeap=0x1f0000) returned 1 [0296.788] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx" (normalized: "c:\\logs\\microsoft-windows-wininet-config%4proxyconfigchanged.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0296.788] GetFileType (hFile=0x1ac) returned 0x1 [0296.789] CloseHandle (hObject=0x1ac) returned 1 [0296.789] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0296.789] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx" (normalized: "c:\\logs\\microsoft-windows-wininet-config%4proxyconfigchanged.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9df26e9, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9df26e9, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0296.789] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0296.789] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0296.790] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx" (normalized: "c:\\logs\\microsoft-windows-wininet-config%4proxyconfigchanged.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9df26e9, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9df26e9, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0296.790] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0296.790] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0296.790] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0296.790] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd122d184, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd122d184, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Winlogon%4Operational.evtx", cAlternateFileName="MID6AB~1.EVT")) returned 1 [0296.790] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236468 [0296.790] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0296.790] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae8b8 [0296.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0296.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0296.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0296.791] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Winlogon%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-winlogon%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0296.792] GetFileType (hFile=0x1ac) returned 0x1 [0296.792] CloseHandle (hObject=0x1ac) returned 1 [0296.793] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae6d8 [0296.793] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Winlogon%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-winlogon%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd122d184, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd122d184, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0296.793] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae6d8 | out: hHeap=0x1f0000) returned 1 [0296.793] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae408 [0296.793] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Winlogon%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-winlogon%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd122d184, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd122d184, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0296.793] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae408 | out: hHeap=0x1f0000) returned 1 [0296.794] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae750 [0296.794] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae750 | out: hHeap=0x1f0000) returned 1 [0296.794] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf164b9b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcf164b9b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-WMI-Activity%4Operational.evtx", cAlternateFileName="MIFF83~1.EVT")) returned 1 [0296.794] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae570 [0296.794] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0296.794] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0296.794] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0296.794] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae8b8 | out: hHeap=0x1f0000) returned 1 [0296.794] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae570 | out: hHeap=0x1f0000) returned 1 [0296.795] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-WMI-Activity%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-wmi-activity%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0296.795] GetFileType (hFile=0x1ac) returned 0x1 [0296.796] CloseHandle (hObject=0x1ac) returned 1 [0296.796] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212140 [0296.796] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-WMI-Activity%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-wmi-activity%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf164b9b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcf164b9b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000)) returned 1 [0296.796] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212140 | out: hHeap=0x1f0000) returned 1 [0296.796] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212938 [0296.797] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-WMI-Activity%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-wmi-activity%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf164b9b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcf164b9b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000)) returned 1 [0296.797] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212938 | out: hHeap=0x1f0000) returned 1 [0296.797] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212140 [0296.797] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212140 | out: hHeap=0x1f0000) returned 1 [0296.797] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50555c8d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50555c8d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xc2f39201, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x111103, dwReserved0=0x0, dwReserved1=0x0, cFileName="Security.evtx.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="SECURI~1.ODV")) returned 1 [0296.797] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219e40 [0296.797] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0296.797] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad918 [0296.797] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0296.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0296.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219e40 | out: hHeap=0x1f0000) returned 1 [0297.158] CreateFileW (lpFileName="C:\\\\Logs\\Security.evtx.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\logs\\security.evtx.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0297.159] GetFileType (hFile=0x1ac) returned 0x1 [0297.159] CloseHandle (hObject=0x1ac) returned 1 [0297.159] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad638 [0297.160] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Security.evtx.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\logs\\security.evtx.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50555c8d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50555c8d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xc2f39201, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x111103)) returned 1 [0297.160] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad638 | out: hHeap=0x1f0000) returned 1 [0297.160] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad078 [0297.160] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Security.evtx.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\logs\\security.evtx.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50555c8d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50555c8d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xc2f39201, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x111103)) returned 1 [0297.160] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad078 | out: hHeap=0x1f0000) returned 1 [0297.160] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2adcb0 [0297.160] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2adcb0 | out: hHeap=0x1f0000) returned 1 [0297.161] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95a6db2c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x95a6db2c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.evtx", cAlternateFileName="SETUP~1.EVT")) returned 1 [0297.161] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0297.161] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260518 [0297.161] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239160 [0297.161] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0297.161] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad918 | out: hHeap=0x1f0000) returned 1 [0297.161] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0297.162] CreateFileW (lpFileName="C:\\\\Logs\\Setup.evtx" (normalized: "c:\\logs\\setup.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0297.162] GetFileType (hFile=0x1ac) returned 0x1 [0297.163] CloseHandle (hObject=0x1ac) returned 1 [0297.163] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238ec0 [0297.163] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Setup.evtx" (normalized: "c:\\logs\\setup.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95a6db2c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x95a6db2c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0297.164] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ec0 | out: hHeap=0x1f0000) returned 1 [0297.164] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238cc8 [0297.164] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Setup.evtx" (normalized: "c:\\logs\\setup.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95a6db2c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x95a6db2c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0297.164] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238cc8 | out: hHeap=0x1f0000) returned 1 [0297.164] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238d70 [0297.164] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238d70 | out: hHeap=0x1f0000) returned 1 [0297.164] GetLastError () returned 0x0 [0297.165] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0297.165] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229010 [0297.165] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x227520 [0297.165] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238de0 [0297.165] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c90 [0297.165] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0297.165] CryptAcquireContextA (in: phProv=0x173e7b0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e7b0*=0x212608) returned 1 [0297.166] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2606a8 | out: pbBuffer=0x2606a8) returned 1 [0297.166] CryptReleaseContext (hProv=0x212608, dwFlags=0x0) returned 1 [0297.167] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0297.167] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x258298 [0297.167] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x233350 [0297.167] QueryPerformanceCounter (in: lpPerformanceCount=0x173e744 | out: lpPerformanceCount=0x173e744*=45453570751) returned 1 [0297.167] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e784 | out: lpSystemTimeAsFileTime=0x173e784) [0297.167] QueryPerformanceCounter (in: lpPerformanceCount=0x173e744 | out: lpPerformanceCount=0x173e744*=45453606554) returned 1 [0297.167] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e784 | out: lpSystemTimeAsFileTime=0x173e784) [0297.168] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238e50 [0297.168] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x254980 [0297.168] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x233580 [0297.168] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x2aafb8 [0297.168] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101b0 [0297.168] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206688 [0297.168] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210240 [0297.168] GetLastError () returned 0x0 [0297.169] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229328 [0297.169] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae048 [0297.169] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229328 | out: hHeap=0x1f0000) returned 1 [0297.169] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218fa8 [0297.169] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae048 | out: hHeap=0x1f0000) returned 1 [0297.169] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf8) returned 0x217038 [0297.169] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218fa8 | out: hHeap=0x1f0000) returned 1 [0297.169] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388e0 [0297.170] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238930 [0297.170] CreateFileW (lpFileName="C:\\\\Logs\\Setup.evtx.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\logs\\setup.evtx.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e650, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0297.171] GetFileType (hFile=0x1ac) returned 0x1 [0297.171] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238990 [0297.172] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238920 [0297.172] CreateFileW (lpFileName="C:\\\\Logs\\Setup.evtx" (normalized: "c:\\logs\\setup.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e680, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0297.173] GetFileType (hFile=0x1e0) returned 0x1 [0297.173] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0297.173] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c50 [0297.173] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad638 [0297.173] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388f0 [0297.174] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238820 [0297.175] CreateFileW (lpFileName="C:\\\\Logs\\Setup.evtx.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\logs\\setup.evtx.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e5cc, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0297.175] GetFileType (hFile=0x198) returned 0x1 [0297.175] GetLastError () returned 0xb7 [0297.176] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe4) returned 0x2b10c8 [0297.176] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e30 [0297.176] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e50 [0297.176] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ef0 [0297.176] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2adbf8 [0297.176] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238800 [0297.176] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387e0 [0297.177] CreateFileW (lpFileName="C:\\\\Logs\\Setup.evtx.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\logs\\setup.evtx.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e5cc, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0297.177] GetFileType (hFile=0x1c0) returned 0x1 [0297.177] GetLastError () returned 0xb7 [0297.178] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d30 [0297.178] GetLastError () returned 0xb7 [0297.178] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c10 [0297.178] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d30 [0297.178] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ef0 [0297.178] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb8) returned 0x237320 [0297.178] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238940 [0297.179] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389b0 [0297.179] CreateFileW (lpFileName="C:\\\\Logs\\Setup.evtx" (normalized: "c:\\logs\\setup.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e5c4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0297.180] GetFileType (hFile=0x174) returned 0x1 [0297.180] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28cfc8 [0297.180] ReadFile (in: hFile=0x174, lpBuffer=0x28cfc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e520, lpOverlapped=0x0 | out: lpBuffer=0x28cfc8*, lpNumberOfBytesRead=0x173e520*=0x1000, lpOverlapped=0x0) returned 1 [0297.184] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24c600 [0297.185] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28ffe0 [0297.186] GetLastError () returned 0x0 [0297.191] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210258 [0297.191] WriteFile (in: hFile=0x1c0, lpBuffer=0x28ffe0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x173e364, lpOverlapped=0x0 | out: lpBuffer=0x28ffe0*, lpNumberOfBytesWritten=0x173e364*=0x1000, lpOverlapped=0x0) returned 1 [0297.192] GetLastError () returned 0x0 [0297.192] CloseHandle (hObject=0x1ac) returned 1 [0297.193] CloseHandle (hObject=0x1e0) returned 1 [0297.193] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389c0 [0297.193] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387f0 [0297.194] CreateFileW (lpFileName="C:\\\\Logs\\Setup.evtx" (normalized: "c:\\logs\\setup.evtx"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e680, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0297.196] GetFileType (hFile=0x1e0) returned 0x1 [0297.197] GetLastError () returned 0xb7 [0297.198] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x290fe8 [0297.198] GetLastError () returned 0xb7 [0297.199] CloseHandle (hObject=0x1e0) returned 1 [0297.200] DeleteFileW (lpFileName="C:\\\\Logs\\Setup.evtx" (normalized: "c:\\logs\\setup.evtx")) returned 0 [0297.200] GetLastError () returned 0x20 [0297.200] GetLastError () returned 0x20 [0297.200] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2293b8 [0297.200] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260568 [0297.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260950 [0297.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x228dd0 [0297.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204db0 [0297.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c30 [0297.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x2388d0 [0297.201] GetLastError () returned 0x20 [0297.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239278 [0297.201] GetLastError () returned 0x20 [0297.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238f68 [0297.202] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236468 [0297.202] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260518 [0297.202] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2854b8 [0297.202] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238850 [0297.202] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0297.202] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0297.203] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238900 [0297.203] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0297.203] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210210 [0297.203] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2606d0 [0297.203] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2855c0 [0297.203] GetLastError () returned 0x20 [0297.203] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238810 [0297.203] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238970 [0297.204] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238870 [0297.204] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238970 | out: hHeap=0x1f0000) returned 1 [0297.204] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238830 [0297.204] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238870 | out: hHeap=0x1f0000) returned 1 [0297.204] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238810 | out: hHeap=0x1f0000) returned 1 [0297.204] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238810 [0297.204] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210198 [0297.204] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238810 | out: hHeap=0x1f0000) returned 1 [0297.204] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101c8 [0297.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0297.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238830 | out: hHeap=0x1f0000) returned 1 [0297.336] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210198 [0297.336] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff28 [0297.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0297.336] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210198 [0297.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff28 | out: hHeap=0x1f0000) returned 1 [0297.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0297.336] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0297.337] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204ef0 [0297.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0297.337] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f10 [0297.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ef0 | out: hHeap=0x1f0000) returned 1 [0297.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0297.337] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f50 [0297.337] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2609a0 [0297.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f50 | out: hHeap=0x1f0000) returned 1 [0297.337] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204bf0 [0297.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0297.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f10 | out: hHeap=0x1f0000) returned 1 [0297.337] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204c90 [0297.337] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x2067d8 [0297.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c90 | out: hHeap=0x1f0000) returned 1 [0297.338] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260770 [0297.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2067d8 | out: hHeap=0x1f0000) returned 1 [0297.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bf0 | out: hHeap=0x1f0000) returned 1 [0297.338] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238860 [0297.338] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210198 [0297.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238860 | out: hHeap=0x1f0000) returned 1 [0297.338] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0297.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0297.338] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204db0 [0297.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0297.338] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206838 [0297.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204db0 | out: hHeap=0x1f0000) returned 1 [0297.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206838 | out: hHeap=0x1f0000) returned 1 [0297.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0297.339] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0297.339] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0297.339] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2854b8 | out: hHeap=0x1f0000) returned 1 [0297.339] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0297.339] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238cc8 [0297.339] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260888 [0297.339] CryptAcquireContextA (in: phProv=0x173e7b0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e7b0*=0x212828) returned 1 [0297.340] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x260888 | out: pbBuffer=0x260888) returned 1 [0297.340] CryptReleaseContext (hProv=0x212828, dwFlags=0x0) returned 1 [0297.340] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0297.340] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260928 [0297.340] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260568 [0297.340] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239198 [0297.340] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0297.341] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0297.341] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239198 | out: hHeap=0x1f0000) returned 1 [0297.341] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8d18 [0297.341] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210198 [0297.341] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x236608 [0297.341] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260928 [0297.341] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2851a0 [0297.341] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cf0 [0297.341] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2364d0 [0297.341] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2609a0 [0297.341] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2857d0 [0297.341] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238860 [0297.341] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0297.342] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0297.342] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238810 [0297.342] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0297.342] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20fef8 [0297.342] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20fef8 | out: hHeap=0x1f0000) returned 1 [0297.342] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0297.342] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238810 | out: hHeap=0x1f0000) returned 1 [0297.342] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0297.342] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0297.342] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238860 | out: hHeap=0x1f0000) returned 1 [0297.342] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2857d0 | out: hHeap=0x1f0000) returned 1 [0297.342] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0297.342] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2364d0 | out: hHeap=0x1f0000) returned 1 [0297.343] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238e18 [0297.343] GetLastError () returned 0x0 [0297.343] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238e88 [0297.343] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0297.343] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0297.343] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0297.343] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0297.344] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0297.344] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0297.344] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x24e900 [0297.344] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2852a8 [0297.344] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0297.344] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0297.344] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0297.344] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0297.344] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285e00 [0297.344] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0297.344] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0297.344] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x230320 [0297.344] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x251068 [0297.344] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2338c8 [0297.345] QueryPerformanceCounter (in: lpPerformanceCount=0x173e300 | out: lpPerformanceCount=0x173e300*=45471345524) returned 1 [0297.345] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e340 | out: lpSystemTimeAsFileTime=0x173e340) [0297.345] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x2388b0 [0297.345] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609a0 [0297.345] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c30 [0297.345] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c30 | out: hHeap=0x1f0000) returned 1 [0297.345] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0297.345] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0297.346] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204df0 [0297.346] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204df0 | out: hHeap=0x1f0000) returned 1 [0297.346] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0297.346] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388b0 | out: hHeap=0x1f0000) returned 1 [0297.346] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0297.346] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239048 [0297.346] GetLastError () returned 0x0 [0297.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0297.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0297.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0297.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260770 [0297.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260810 [0297.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0297.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0297.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260978 [0297.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0297.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x222ee8 [0297.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0297.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0297.348] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0297.348] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0297.348] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0297.348] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260590 [0297.348] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260838 [0297.348] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0297.348] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0297.348] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260838 | out: hHeap=0x1f0000) returned 1 [0297.348] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0297.348] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x20d5e0 [0297.348] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20d5e0 | out: hHeap=0x1f0000) returned 1 [0297.348] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0297.348] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0297.348] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101c8 [0297.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228e18 [0297.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260838 [0297.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260888 [0297.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2609a0 [0297.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2604f0 [0297.349] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0297.349] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260838 | out: hHeap=0x1f0000) returned 1 [0297.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0297.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260838 [0297.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260888 [0297.349] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260838 | out: hHeap=0x1f0000) returned 1 [0297.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0297.349] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0297.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206628 [0297.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x2b3548 [0297.350] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b3548 | out: hHeap=0x1f0000) returned 1 [0297.350] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206628 | out: hHeap=0x1f0000) returned 1 [0297.350] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0297.350] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0297.350] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0297.350] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0297.350] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204c30 [0297.350] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0297.350] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0297.350] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0297.350] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aac98 [0297.350] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0297.350] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0297.350] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0297.350] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228e18 | out: hHeap=0x1f0000) returned 1 [0297.350] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0297.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c30 | out: hHeap=0x1f0000) returned 1 [0297.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0297.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0297.351] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a96a0 [0297.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a96a0 | out: hHeap=0x1f0000) returned 1 [0297.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ee8 | out: hHeap=0x1f0000) returned 1 [0297.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0297.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0297.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0297.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0297.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0297.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0297.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0297.351] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aa920 [0297.352] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aa230 [0297.352] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aa920 | out: hHeap=0x1f0000) returned 1 [0297.352] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aa230 | out: hHeap=0x1f0000) returned 1 [0297.352] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aac98 | out: hHeap=0x1f0000) returned 1 [0297.352] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0297.352] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285e00 | out: hHeap=0x1f0000) returned 1 [0297.352] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24e900 | out: hHeap=0x1f0000) returned 1 [0297.352] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x232ba8 [0297.352] GetLastError () returned 0x0 [0297.352] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238810 [0297.353] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238970 [0297.597] CreateFileW (lpFileName="C:\\\\Logs\\Setup.evtx.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\logs\\setup.evtx.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e6b0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0297.597] GetFileType (hFile=0x1ac) returned 0x1 [0297.598] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28dfd0 [0297.598] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x173e638 | out: lpNewFilePointer=0x0) returned 1 [0297.599] GetLastError () returned 0xb7 [0297.599] CloseHandle (hObject=0x1ac) returned 1 [0297.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238970 | out: hHeap=0x1f0000) returned 1 [0297.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238810 | out: hHeap=0x1f0000) returned 1 [0297.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2852a8 | out: hHeap=0x1f0000) returned 1 [0297.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2851a0 | out: hHeap=0x1f0000) returned 1 [0297.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0297.601] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cf0 | out: hHeap=0x1f0000) returned 1 [0297.601] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236608 | out: hHeap=0x1f0000) returned 1 [0297.601] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0297.601] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0297.601] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232ba8 | out: hHeap=0x1f0000) returned 1 [0297.601] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0297.601] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0297.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x251068 | out: hHeap=0x1f0000) returned 1 [0297.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2338c8 | out: hHeap=0x1f0000) returned 1 [0297.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238cc8 | out: hHeap=0x1f0000) returned 1 [0297.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388d0 | out: hHeap=0x1f0000) returned 1 [0297.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0297.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0297.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238900 | out: hHeap=0x1f0000) returned 1 [0297.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0297.603] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0297.603] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238850 | out: hHeap=0x1f0000) returned 1 [0297.603] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2855c0 | out: hHeap=0x1f0000) returned 1 [0297.603] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0297.603] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0297.603] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228dd0 | out: hHeap=0x1f0000) returned 1 [0297.603] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0297.603] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0297.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2293b8 | out: hHeap=0x1f0000) returned 1 [0297.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387f0 | out: hHeap=0x1f0000) returned 1 [0297.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389c0 | out: hHeap=0x1f0000) returned 1 [0297.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28cfc8 | out: hHeap=0x1f0000) returned 1 [0297.604] CloseHandle (hObject=0x174) returned 1 [0297.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389b0 | out: hHeap=0x1f0000) returned 1 [0297.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238940 | out: hHeap=0x1f0000) returned 1 [0297.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237320 | out: hHeap=0x1f0000) returned 1 [0297.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24c600 | out: hHeap=0x1f0000) returned 1 [0297.606] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0297.606] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c10 | out: hHeap=0x1f0000) returned 1 [0297.606] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28ffe0 | out: hHeap=0x1f0000) returned 1 [0297.606] CloseHandle (hObject=0x1c0) returned 1 [0297.607] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387e0 | out: hHeap=0x1f0000) returned 1 [0297.607] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238800 | out: hHeap=0x1f0000) returned 1 [0297.607] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2adbf8 | out: hHeap=0x1f0000) returned 1 [0297.607] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e30 | out: hHeap=0x1f0000) returned 1 [0297.607] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b10c8 | out: hHeap=0x1f0000) returned 1 [0297.607] CloseHandle (hObject=0x198) returned 1 [0297.608] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238820 | out: hHeap=0x1f0000) returned 1 [0297.608] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388f0 | out: hHeap=0x1f0000) returned 1 [0297.608] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad638 | out: hHeap=0x1f0000) returned 1 [0297.608] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238920 | out: hHeap=0x1f0000) returned 1 [0297.608] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238990 | out: hHeap=0x1f0000) returned 1 [0297.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238930 | out: hHeap=0x1f0000) returned 1 [0297.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388e0 | out: hHeap=0x1f0000) returned 1 [0297.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0297.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x254980 | out: hHeap=0x1f0000) returned 1 [0297.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233580 | out: hHeap=0x1f0000) returned 1 [0297.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206688 | out: hHeap=0x1f0000) returned 1 [0297.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210240 | out: hHeap=0x1f0000) returned 1 [0297.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0297.610] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aafb8 | out: hHeap=0x1f0000) returned 1 [0297.610] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x258298 | out: hHeap=0x1f0000) returned 1 [0297.610] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233350 | out: hHeap=0x1f0000) returned 1 [0297.610] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c90 | out: hHeap=0x1f0000) returned 1 [0297.610] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238de0 | out: hHeap=0x1f0000) returned 1 [0297.610] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227520 | out: hHeap=0x1f0000) returned 1 [0297.610] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229010 | out: hHeap=0x1f0000) returned 1 [0297.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0297.611] DeleteFileW (lpFileName="C:\\\\Logs\\Setup.evtx" (normalized: "c:\\logs\\setup.evtx")) returned 1 [0297.614] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505097c4, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505097c4, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xc359f9dc, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x111103, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.evtx", cAlternateFileName="SYSTEM~1.EVT")) returned 1 [0297.614] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0297.614] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0297.614] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238d70 [0297.615] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0297.615] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239160 | out: hHeap=0x1f0000) returned 1 [0297.615] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0297.615] CreateFileW (lpFileName="C:\\\\Logs\\System.evtx" (normalized: "c:\\logs\\system.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0297.616] GetFileType (hFile=0x198) returned 0x1 [0297.616] CloseHandle (hObject=0x198) returned 1 [0297.617] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238ec0 [0297.617] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\System.evtx" (normalized: "c:\\logs\\system.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505097c4, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505097c4, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xc359f9dc, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x111103)) returned 1 [0297.618] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ec0 | out: hHeap=0x1f0000) returned 1 [0297.618] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238de0 [0297.618] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\System.evtx" (normalized: "c:\\logs\\system.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505097c4, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505097c4, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xc359f9dc, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x111103)) returned 1 [0297.618] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238de0 | out: hHeap=0x1f0000) returned 1 [0297.618] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238e88 [0297.618] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238e88 | out: hHeap=0x1f0000) returned 1 [0297.618] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50555c8d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50555c8d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows PowerShell.evtx", cAlternateFileName="WINDOW~1.EVT")) returned 1 [0297.618] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239048 [0297.619] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0297.619] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8d18 [0297.619] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0297.619] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238d70 | out: hHeap=0x1f0000) returned 1 [0297.619] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239048 | out: hHeap=0x1f0000) returned 1 [0297.620] CreateFileW (lpFileName="C:\\\\Logs\\Windows PowerShell.evtx" (normalized: "c:\\logs\\windows powershell.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0297.620] GetFileType (hFile=0x198) returned 0x1 [0297.621] CloseHandle (hObject=0x198) returned 1 [0297.621] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8dc8 [0297.621] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Windows PowerShell.evtx" (normalized: "c:\\logs\\windows powershell.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50555c8d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50555c8d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0297.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8dc8 | out: hHeap=0x1f0000) returned 1 [0297.622] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8dc8 [0297.622] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Windows PowerShell.evtx" (normalized: "c:\\logs\\windows powershell.evtx"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50555c8d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50555c8d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0297.622] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8dc8 | out: hHeap=0x1f0000) returned 1 [0297.622] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8dc8 [0297.622] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8dc8 | out: hHeap=0x1f0000) returned 1 [0297.622] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50555c8d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50555c8d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows PowerShell.evtx", cAlternateFileName="WINDOW~1.EVT")) returned 0 [0297.622] FindClose (in: hFindFile=0x24ec80 | out: hFindFile=0x24ec80) returned 1 [0297.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0297.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226ec0 | out: hHeap=0x1f0000) returned 1 [0297.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260630 | out: hHeap=0x1f0000) returned 1 [0297.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229130 | out: hHeap=0x1f0000) returned 1 [0297.623] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229178 [0297.623] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0297.623] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x227388 [0297.624] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0297.624] FindFirstFileW (in: lpFileName="C:\\\\PerfLogs\\*", lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa03748ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17b3dd09, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ea80 [0297.624] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0297.624] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0297.624] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0297.624] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa03748ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17b3dd09, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0297.625] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260838 [0297.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0297.625] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0297.625] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0297.625] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa03748ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17b3dd09, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0297.625] FindClose (in: hFindFile=0x24ea80 | out: hFindFile=0x24ea80) returned 1 [0297.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260838 | out: hHeap=0x1f0000) returned 1 [0297.626] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227388 | out: hHeap=0x1f0000) returned 1 [0297.626] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0297.626] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229178 | out: hHeap=0x1f0000) returned 1 [0297.626] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2291c0 [0297.626] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260888 [0297.626] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2276b8 [0297.626] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238ec0 [0297.626] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\*", lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3ac6234, ftLastAccessTime.dwHighDateTime=0x1d5c65b, ftLastWriteTime.dwLowDateTime=0x3ac6234, ftLastWriteTime.dwHighDateTime=0x1d5c65b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e900 [0297.627] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238d70 [0297.627] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ec0 | out: hHeap=0x1f0000) returned 1 [0297.628] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0297.628] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3ac6234, ftLastAccessTime.dwHighDateTime=0x1d5c65b, ftLastWriteTime.dwLowDateTime=0x3ac6234, ftLastWriteTime.dwHighDateTime=0x1d5c65b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0297.628] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2390b8 [0297.628] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238d70 | out: hHeap=0x1f0000) returned 1 [0297.628] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0297.628] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0297.628] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4aadd873, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common Files", cAlternateFileName="COMMON~1")) returned 1 [0297.628] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0297.628] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2392b0 [0297.628] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225f18 [0297.628] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2392b0 | out: hHeap=0x1f0000) returned 1 [0297.629] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2390b8 | out: hHeap=0x1f0000) returned 1 [0297.629] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0297.629] lstrcmpW (lpString1="Common Files", lpString2=".") returned 1 [0297.629] lstrcmpW (lpString1="Common Files", lpString2="..") returned 1 [0297.629] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204c10 [0297.629] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229010 [0297.629] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x173f130 | out: lpFindFileData=0x173f130*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1a307d95, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5d0779b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5d0779b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0297.629] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0297.629] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c58 [0297.629] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225e78 [0297.630] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c58 | out: hHeap=0x1f0000) returned 1 [0297.630] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225f18 | out: hHeap=0x1f0000) returned 1 [0297.630] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0297.630] CreateFileW (lpFileName="C:\\\\Program Files\\desktop.ini" (normalized: "c:\\program files\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173eef8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0297.631] GetFileType (hFile=0x198) returned 0x1 [0297.631] CloseHandle (hObject=0x198) returned 1 [0297.632] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229370 [0297.632] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\desktop.ini" (normalized: "c:\\program files\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x173ef8c | out: lpFileInformation=0x173ef8c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1a307d95, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5d0779b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5d0779b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xae)) returned 1 [0297.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229370 | out: hHeap=0x1f0000) returned 1 [0297.632] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228f80 [0297.632] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\desktop.ini" (normalized: "c:\\program files\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x173ef94 | out: lpFileInformation=0x173ef94*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1a307d95, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5d0779b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5d0779b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xae)) returned 1 [0297.633] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228f80 | out: hHeap=0x1f0000) returned 1 [0297.633] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229250 [0297.633] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229250 | out: hHeap=0x1f0000) returned 1 [0297.633] GetLastError () returned 0x0 [0297.633] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0297.634] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228e18 [0297.634] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x226ec0 [0297.634] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229250 [0297.634] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239278 [0297.634] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260518 [0297.634] CryptAcquireContextA (in: phProv=0x173e7b0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e7b0*=0x211b68) returned 1 [0297.635] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x260518 | out: pbBuffer=0x260518) returned 1 [0297.635] CryptReleaseContext (hProv=0x211b68, dwFlags=0x0) returned 1 [0297.635] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0297.635] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x255c88 [0297.636] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x233580 [0297.636] QueryPerformanceCounter (in: lpPerformanceCount=0x173e744 | out: lpPerformanceCount=0x173e744*=45500458218) returned 1 [0297.636] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e784 | out: lpSystemTimeAsFileTime=0x173e784) [0297.636] QueryPerformanceCounter (in: lpPerformanceCount=0x173e744 | out: lpPerformanceCount=0x173e744*=45500491072) returned 1 [0297.636] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x173e784 | out: lpSystemTimeAsFileTime=0x173e784) [0297.636] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x2392b0 [0297.636] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x24fd60 [0297.637] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2338c8 [0297.637] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x2ab158 [0297.637] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210210 [0297.637] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206688 [0297.637] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210240 [0297.637] GetLastError () returned 0x0 [0297.637] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8d18 [0297.638] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0297.638] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0297.638] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x210270 [0297.638] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0297.638] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389c0 [0297.638] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238800 [0297.639] CreateFileW (lpFileName="C:\\\\Program Files\\desktop.ini.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\desktop.ini.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e650, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0297.674] GetFileType (hFile=0x198) returned 0x1 [0297.675] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238850 [0297.675] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238980 [0297.904] CreateFileW (lpFileName="C:\\\\Program Files\\desktop.ini" (normalized: "c:\\program files\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x173e680, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0297.904] GetFileType (hFile=0x1e0) returned 0x1 [0297.905] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204db0 [0297.905] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cb0 [0297.905] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad918 [0297.905] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388a0 [0297.905] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388b0 [0297.906] CreateFileW (lpFileName="C:\\\\Program Files\\desktop.ini.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\desktop.ini.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e5cc, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0297.907] GetFileType (hFile=0x1c0) returned 0x1 [0297.907] GetLastError () returned 0xb7 [0297.907] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe4) returned 0x2b1b18 [0297.908] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cb0 [0297.908] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f30 [0297.908] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bf0 [0297.908] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad130 [0297.908] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238810 [0297.909] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388d0 [0297.910] CreateFileW (lpFileName="C:\\\\Program Files\\desktop.ini.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\desktop.ini.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e5cc, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0297.910] GetFileType (hFile=0x174) returned 0x1 [0297.910] GetLastError () returned 0xb7 [0297.911] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e90 [0297.911] GetLastError () returned 0xb7 [0297.911] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c30 [0297.911] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ef0 [0297.911] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f10 [0297.911] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb8) returned 0x237c20 [0297.911] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387e0 [0297.912] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238820 [0297.912] CreateFileW (lpFileName="C:\\\\Program Files\\desktop.ini" (normalized: "c:\\program files\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x173e5c4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0297.913] GetFileType (hFile=0x1ac) returned 0x1 [0297.913] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28cfc8 [0297.914] ReadFile (in: hFile=0x1ac, lpBuffer=0x28cfc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e520, lpOverlapped=0x0 | out: lpBuffer=0x28cfc8*, lpNumberOfBytesRead=0x173e520*=0xae, lpOverlapped=0x0) returned 1 [0297.916] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24b1d8 [0297.916] ReadFile (in: hFile=0x1ac, lpBuffer=0x28cfc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x173e5b0, lpOverlapped=0x0 | out: lpBuffer=0x28cfc8*, lpNumberOfBytesRead=0x173e5b0*=0x0, lpOverlapped=0x0) returned 1 [0297.917] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28dfd0 [0297.917] GetLastError () returned 0x0 [0297.917] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210258 [0297.917] GetLastError () returned 0x0 [0297.919] CloseHandle (hObject=0x198) returned 1 [0297.920] CloseHandle (hObject=0x1e0) returned 1 [0297.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387f0 [0297.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388f0 [0297.921] CreateFileW (lpFileName="C:\\\\Program Files\\desktop.ini" (normalized: "c:\\program files\\desktop.ini"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x173e680, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0297.922] GetLastError () returned 0x5 [0297.922] GetLastError () returned 0x5 [0297.922] DeleteFileW (lpFileName="C:\\\\Program Files\\desktop.ini" (normalized: "c:\\program files\\desktop.ini")) returned 0 [0297.922] GetLastError () returned 0x20 [0297.922] GetLastError () returned 0x20 [0297.922] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228e60 [0297.922] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2608d8 [0297.923] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260928 [0297.923] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x228ef0 [0297.923] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ef0 [0297.923] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cd0 [0297.923] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x238950 [0297.923] GetLastError () returned 0x20 [0297.923] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238d70 [0297.923] GetLastError () returned 0x20 [0297.923] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238f30 [0297.923] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2364d0 [0297.923] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260518 [0297.923] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285cf8 [0297.923] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238830 [0297.923] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260770 [0297.923] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210198 [0297.924] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388e0 [0297.924] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0297.924] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0297.924] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2606a8 [0297.924] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285ae8 [0297.924] GetLastError () returned 0x20 [0297.924] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238860 [0297.924] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238900 [0297.924] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238970 [0297.924] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238900 | out: hHeap=0x1f0000) returned 1 [0297.924] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238880 [0297.924] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238970 | out: hHeap=0x1f0000) returned 1 [0297.925] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238860 | out: hHeap=0x1f0000) returned 1 [0297.925] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389b0 [0297.925] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101e0 [0297.925] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389b0 | out: hHeap=0x1f0000) returned 1 [0297.925] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101b0 [0297.925] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0297.925] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238880 | out: hHeap=0x1f0000) returned 1 [0297.925] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101e0 [0297.925] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210078 [0297.925] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0297.925] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0297.926] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210078 | out: hHeap=0x1f0000) returned 1 [0297.926] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0297.926] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101b0 [0297.926] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204f30 [0297.927] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0297.927] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bb0 [0297.927] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f30 | out: hHeap=0x1f0000) returned 1 [0297.927] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0297.927] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ef0 [0297.927] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2606d0 [0297.928] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ef0 | out: hHeap=0x1f0000) returned 1 [0297.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204c70 [0297.928] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0297.928] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bb0 | out: hHeap=0x1f0000) returned 1 [0297.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204db0 [0297.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206628 [0297.928] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204db0 | out: hHeap=0x1f0000) returned 1 [0297.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260978 [0297.928] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206628 | out: hHeap=0x1f0000) returned 1 [0297.929] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c70 | out: hHeap=0x1f0000) returned 1 [0297.929] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238840 [0297.929] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101b0 [0297.929] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238840 | out: hHeap=0x1f0000) returned 1 [0297.929] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0297.929] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0297.929] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204f10 [0297.929] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0297.929] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206628 [0297.929] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f10 | out: hHeap=0x1f0000) returned 1 [0297.929] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206628 | out: hHeap=0x1f0000) returned 1 [0297.929] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0297.930] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0297.930] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0297.930] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285cf8 | out: hHeap=0x1f0000) returned 1 [0297.930] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0297.930] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239160 [0297.930] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0297.930] CryptAcquireContextA (in: phProv=0x173e7b0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x173e7b0*=0x211d00) returned 1 [0297.931] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x260568 | out: pbBuffer=0x260568) returned 1 [0297.931] CryptReleaseContext (hProv=0x211d00, dwFlags=0x0) returned 1 [0297.932] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0297.932] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260978 [0297.932] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2608d8 [0297.932] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c58 [0297.932] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0297.932] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0297.932] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c58 | out: hHeap=0x1f0000) returned 1 [0297.932] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8dc8 [0297.933] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101b0 [0297.933] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x236538 [0297.933] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260630 [0297.933] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285098 [0297.933] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d90 [0297.933] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2365a0 [0297.933] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260748 [0297.933] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2856c8 [0297.934] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238890 [0297.934] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0297.934] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0297.934] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238840 [0297.934] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0297.934] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210018 [0297.934] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210018 | out: hHeap=0x1f0000) returned 1 [0297.934] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0297.935] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238840 | out: hHeap=0x1f0000) returned 1 [0297.935] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0297.935] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0297.935] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238890 | out: hHeap=0x1f0000) returned 1 [0297.935] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2856c8 | out: hHeap=0x1f0000) returned 1 [0297.935] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0297.935] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2365a0 | out: hHeap=0x1f0000) returned 1 [0297.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238cc8 [0297.936] GetLastError () returned 0x0 [0297.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x2390b8 [0297.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0297.936] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0297.937] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0297.937] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0297.937] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0297.937] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0297.937] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x24ed00 [0297.937] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2852a8 [0297.937] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0297.937] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0297.937] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0297.938] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0297.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x284f90 [0297.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0297.938] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0297.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x2300c8 [0297.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x2595a0 [0297.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x233120 [0297.938] QueryPerformanceCounter (lpPerformanceCount=0x173e300) Thread: id = 147 os_tid = 0x1170 [0192.182] GetLastError () returned 0x57 [0192.182] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x364) returned 0x216b30 [0192.182] SetLastError (dwErrCode=0x57) [0192.182] GetCurrentThreadId () returned 0x1170 [0192.183] GetCurrentThreadId () returned 0x1170 [0192.183] RtlWakeConditionVariable (in: ConditionVariable=0x2066bc | out: ConditionVariable=0x2066bc) [0192.185] FindFirstFileW (in: lpFileName="C:\\\\*", lpFindFileData=0x1a1f508 | out: lpFindFileData=0x1a1f508*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="$GetCurrent", cAlternateFileName="$GETCU~1")) returned 0x2142d0 [0192.185] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b8f0 [0192.185] lstrcmpW (lpString1="$GetCurrent", lpString2=".") returned -1 [0192.186] lstrcmpW (lpString1="$GetCurrent", lpString2="..") returned -1 [0192.186] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x2050f0 [0192.186] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b7b0 [0192.186] FindNextFileW (in: hFindFile=0x2142d0, lpFindFileData=0x1a1f508 | out: lpFindFileData=0x1a1f508*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="$Recycle.Bin", cAlternateFileName="")) returned 1 [0192.186] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b670 [0192.186] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf38 [0192.186] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b8f0 | out: hHeap=0x1f0000) returned 1 [0192.186] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b670 | out: hHeap=0x1f0000) returned 1 [0192.186] lstrcmpW (lpString1="$Recycle.Bin", lpString2=".") returned -1 [0192.186] lstrcmpW (lpString1="$Recycle.Bin", lpString2="..") returned -1 [0192.186] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cfa8 [0192.186] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cfe0 [0192.186] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2050f0 | out: hHeap=0x1f0000) returned 1 [0192.186] FindNextFileW (in: hFindFile=0x2142d0, lpFindFileData=0x1a1f508 | out: lpFindFileData=0x1a1f508*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x85776261, ftCreationTime.dwHighDateTime=0x1d3276f, ftLastAccessTime.dwLowDateTime=0x85776261, ftLastAccessTime.dwHighDateTime=0x1d3276f, ftLastWriteTime.dwLowDateTime=0x85776261, ftLastWriteTime.dwHighDateTime=0x1d3276f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="$WINRE_BACKUP_PARTITION.MARKER", cAlternateFileName="$WINRE~1.MAR")) returned 1 [0192.186] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x213af8 [0192.186] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x215860 [0192.186] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf38 | out: hHeap=0x1f0000) returned 1 [0192.187] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213af8 | out: hHeap=0x1f0000) returned 1 [0192.187] CreateFileW (lpFileName="C:\\\\$WINRE_BACKUP_PARTITION.MARKER" (normalized: "c:\\$winre_backup_partition.marker"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1f2c8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0192.187] GetFileType (hFile=0x1b0) returned 0x1 [0192.187] CloseHandle (hObject=0x1b0) returned 1 [0192.187] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x20b478 [0192.188] GetFileAttributesExW (in: lpFileName="C:\\\\$WINRE_BACKUP_PARTITION.MARKER" (normalized: "c:\\$winre_backup_partition.marker"), fInfoLevelId=0x0, lpFileInformation=0x1a1f35c | out: lpFileInformation=0x1a1f35c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x85776261, ftCreationTime.dwHighDateTime=0x1d3276f, ftLastAccessTime.dwLowDateTime=0x85776261, ftLastAccessTime.dwHighDateTime=0x1d3276f, ftLastWriteTime.dwLowDateTime=0x85776261, ftLastWriteTime.dwHighDateTime=0x1d3276f, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0192.188] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b478 | out: hHeap=0x1f0000) returned 1 [0192.188] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x20b478 [0192.188] GetFileAttributesExW (in: lpFileName="C:\\\\$WINRE_BACKUP_PARTITION.MARKER" (normalized: "c:\\$winre_backup_partition.marker"), fInfoLevelId=0x0, lpFileInformation=0x1a1f364 | out: lpFileInformation=0x1a1f364*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x85776261, ftCreationTime.dwHighDateTime=0x1d3276f, ftLastAccessTime.dwLowDateTime=0x85776261, ftLastAccessTime.dwHighDateTime=0x1d3276f, ftLastWriteTime.dwLowDateTime=0x85776261, ftLastWriteTime.dwHighDateTime=0x1d3276f, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0192.188] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b478 | out: hHeap=0x1f0000) returned 1 [0192.188] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x20b478 [0192.188] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b478 | out: hHeap=0x1f0000) returned 1 [0192.188] FindNextFileW (in: hFindFile=0x2142d0, lpFindFileData=0x1a1f508 | out: lpFindFileData=0x1a1f508*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf39a4e7e, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf74cd515, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="588bce7c90097ed212", cAlternateFileName="588BCE~1")) returned 1 [0192.188] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d1d8 [0192.188] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215860 | out: hHeap=0x1f0000) returned 1 [0192.188] lstrcmpW (lpString1="588bce7c90097ed212", lpString2=".") returned 1 [0192.188] lstrcmpW (lpString1="588bce7c90097ed212", lpString2="..") returned 1 [0192.188] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x48) returned 0x215860 [0192.189] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cd78 [0192.189] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cfa8 | out: hHeap=0x1f0000) returned 1 [0192.189] FindNextFileW (in: hFindFile=0x2142d0, lpFindFileData=0x1a1f508 | out: lpFindFileData=0x1a1f508*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6fa258, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6fa258, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Boot", cAlternateFileName="")) returned 1 [0192.189] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b8f0 [0192.189] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d1d8 | out: hHeap=0x1f0000) returned 1 [0192.189] lstrcmpW (lpString1="Boot", lpString2=".") returned 1 [0192.189] lstrcmpW (lpString1="Boot", lpString2="..") returned 1 [0192.189] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x20b478 [0192.189] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b918 [0192.189] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215860 | out: hHeap=0x1f0000) returned 1 [0192.189] FindNextFileW (in: hFindFile=0x2142d0, lpFindFileData=0x1a1f508 | out: lpFindFileData=0x1a1f508*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xe47a48a8, ftCreationTime.dwHighDateTime=0x1d112ea, ftLastAccessTime.dwLowDateTime=0xef6fa258, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfb90936b, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0x607da, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr", cAlternateFileName="")) returned 1 [0192.189] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b800 [0192.189] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b8f0 | out: hHeap=0x1f0000) returned 1 [0192.190] CreateFileW (lpFileName="C:\\\\bootmgr" (normalized: "c:\\bootmgr"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1f2c8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0192.190] GetLastError () returned 0x5 [0192.190] GetLastError () returned 0x5 [0192.190] SetLastError (dwErrCode=0x5) [0192.190] GetLastError () returned 0x5 [0192.190] SetLastError (dwErrCode=0x5) [0192.190] GetLastError () returned 0x5 [0192.191] SetLastError (dwErrCode=0x5) [0192.191] FindNextFileW (in: hFindFile=0x2142d0, lpFindFileData=0x1a1f508 | out: lpFindFileData=0x1a1f508*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xe5533ee0, ftCreationTime.dwHighDateTime=0x1d112ea, ftLastAccessTime.dwLowDateTime=0xef9d0a0c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x1, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTNXT", cAlternateFileName="")) returned 1 [0192.191] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b9e0 [0192.191] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b800 | out: hHeap=0x1f0000) returned 1 [0192.191] CreateFileW (lpFileName="C:\\\\BOOTNXT" (normalized: "c:\\bootnxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1f2c8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0192.191] GetFileType (hFile=0x1b0) returned 0x1 [0192.192] CloseHandle (hObject=0x1b0) returned 1 [0192.192] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b8f0 [0192.192] GetFileAttributesExW (in: lpFileName="C:\\\\BOOTNXT" (normalized: "c:\\bootnxt"), fInfoLevelId=0x0, lpFileInformation=0x1a1f35c | out: lpFileInformation=0x1a1f35c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xe5533ee0, ftCreationTime.dwHighDateTime=0x1d112ea, ftLastAccessTime.dwLowDateTime=0xef9d0a0c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x1)) returned 1 [0192.192] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b8f0 | out: hHeap=0x1f0000) returned 1 [0192.192] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20ba08 [0192.192] GetFileAttributesExW (in: lpFileName="C:\\\\BOOTNXT" (normalized: "c:\\bootnxt"), fInfoLevelId=0x0, lpFileInformation=0x1a1f364 | out: lpFileInformation=0x1a1f364*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xe5533ee0, ftCreationTime.dwHighDateTime=0x1d112ea, ftLastAccessTime.dwLowDateTime=0xef9d0a0c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x1)) returned 1 [0192.193] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ba08 | out: hHeap=0x1f0000) returned 1 [0192.193] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b7d8 [0192.193] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b7d8 | out: hHeap=0x1f0000) returned 1 [0192.193] FindNextFileW (in: hFindFile=0x2142d0, lpFindFileData=0x1a1f508 | out: lpFindFileData=0x1a1f508*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xc4ee267e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4ee267e, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xf1c63cdd, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTSECT.BAK", cAlternateFileName="")) returned 1 [0192.193] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b710 [0192.193] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d1d8 [0192.193] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b9e0 | out: hHeap=0x1f0000) returned 1 [0192.193] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b710 | out: hHeap=0x1f0000) returned 1 [0192.193] CreateFileW (lpFileName="C:\\\\BOOTSECT.BAK" (normalized: "c:\\bootsect.bak"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1f2c8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0192.193] GetLastError () returned 0x5 [0192.194] GetLastError () returned 0x5 [0192.194] SetLastError (dwErrCode=0x5) [0192.194] GetLastError () returned 0x5 [0192.194] SetLastError (dwErrCode=0x5) [0192.194] GetLastError () returned 0x5 [0192.194] SetLastError (dwErrCode=0x5) [0192.194] FindNextFileW (in: hFindFile=0x2142d0, lpFindFileData=0x1a1f508 | out: lpFindFileData=0x1a1f508*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xe99f01ae, ftCreationTime.dwHighDateTime=0x1d32708, ftLastAccessTime.dwLowDateTime=0xe99f01ae, ftLastAccessTime.dwHighDateTime=0x1d32708, ftLastWriteTime.dwLowDateTime=0xe99f01ae, ftLastWriteTime.dwHighDateTime=0x1d32708, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents and Settings", cAlternateFileName="DOCUME~1")) returned 1 [0192.194] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d248 [0192.194] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x214008 [0192.194] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d1d8 | out: hHeap=0x1f0000) returned 1 [0192.194] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d248 | out: hHeap=0x1f0000) returned 1 [0192.194] lstrcmpW (lpString1="Documents and Settings", lpString2=".") returned 1 [0192.194] lstrcmpW (lpString1="Documents and Settings", lpString2="..") returned 1 [0192.194] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x217038 [0192.195] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x214050 [0192.195] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b478 | out: hHeap=0x1f0000) returned 1 [0192.195] FindNextFileW (in: hFindFile=0x2142d0, lpFindFileData=0x1a1f508 | out: lpFindFileData=0x1a1f508*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc1969407, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ESD", cAlternateFileName="")) returned 1 [0192.195] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214008 | out: hHeap=0x1f0000) returned 1 [0192.195] lstrcmpW (lpString1="ESD", lpString2=".") returned 1 [0192.195] lstrcmpW (lpString1="ESD", lpString2="..") returned 1 [0192.195] FindNextFileW (in: hFindFile=0x2142d0, lpFindFileData=0x1a1f508 | out: lpFindFileData=0x1a1f508*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x7ef2dddf, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x7ef2dddf, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x96715303, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x332fe000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hiberfil.sys", cAlternateFileName="")) returned 1 [0192.195] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b990 [0192.195] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0192.195] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b990 | out: hHeap=0x1f0000) returned 1 [0192.195] CreateFileW (lpFileName="C:\\\\hiberfil.sys" (normalized: "c:\\hiberfil.sys"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1f2c8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0192.196] GetLastError () returned 0x20 [0192.196] GetLastError () returned 0x20 [0192.196] SetLastError (dwErrCode=0x20) [0192.196] GetLastError () returned 0x20 [0192.196] SetLastError (dwErrCode=0x20) [0192.196] GetLastError () returned 0x20 [0192.196] SetLastError (dwErrCode=0x20) [0192.196] FindNextFileW (in: hFindFile=0x2142d0, lpFindFileData=0x1a1f508 | out: lpFindFileData=0x1a1f508*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf1d773, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xa03727f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xfd9ec80, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Logs", cAlternateFileName="")) returned 1 [0192.196] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b8f0 [0192.196] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0192.196] lstrcmpW (lpString1="Logs", lpString2=".") returned 1 [0192.196] lstrcmpW (lpString1="Logs", lpString2="..") returned 1 [0192.196] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd8) returned 0x20d910 [0192.197] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b990 [0192.197] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0192.197] FindNextFileW (in: hFindFile=0x2142d0, lpFindFileData=0x1a1f508 | out: lpFindFileData=0x1a1f508*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6e97b025, ftCreationTime.dwHighDateTime=0x1d3275c, ftLastAccessTime.dwLowDateTime=0x6e97b025, ftLastAccessTime.dwHighDateTime=0x1d3275c, ftLastWriteTime.dwLowDateTime=0x98f4eb01, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x28000000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pagefile.sys", cAlternateFileName="")) returned 1 [0192.197] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b9e0 [0192.197] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d1d8 [0192.197] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b8f0 | out: hHeap=0x1f0000) returned 1 [0192.197] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b9e0 | out: hHeap=0x1f0000) returned 1 [0192.197] CreateFileW (lpFileName="C:\\\\pagefile.sys" (normalized: "c:\\pagefile.sys"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1f2c8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0192.197] GetLastError () returned 0x20 [0192.198] GetLastError () returned 0x20 [0192.198] SetLastError (dwErrCode=0x20) [0192.198] GetLastError () returned 0x20 [0192.198] SetLastError (dwErrCode=0x20) [0192.198] GetLastError () returned 0x20 [0192.198] SetLastError (dwErrCode=0x20) [0192.198] FindNextFileW (in: hFindFile=0x2142d0, lpFindFileData=0x1a1f508 | out: lpFindFileData=0x1a1f508*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa03748ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17b3dd09, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PerfLogs", cAlternateFileName="")) returned 1 [0192.198] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b698 [0192.198] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d1d8 | out: hHeap=0x1f0000) returned 1 [0192.198] lstrcmpW (lpString1="PerfLogs", lpString2=".") returned 1 [0192.198] lstrcmpW (lpString1="PerfLogs", lpString2="..") returned 1 [0192.198] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b710 [0192.198] FindNextFileW (in: hFindFile=0x2142d0, lpFindFileData=0x1a1f508 | out: lpFindFileData=0x1a1f508*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3ac6234, ftLastAccessTime.dwHighDateTime=0x1d5c65b, ftLastWriteTime.dwLowDateTime=0x3ac6234, ftLastWriteTime.dwHighDateTime=0x1d5c65b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Program Files", cAlternateFileName="PROGRA~1")) returned 1 [0192.199] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b9e0 [0192.199] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cdb0 [0192.199] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b698 | out: hHeap=0x1f0000) returned 1 [0192.199] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b9e0 | out: hHeap=0x1f0000) returned 1 [0192.199] lstrcmpW (lpString1="Program Files", lpString2=".") returned 1 [0192.199] lstrcmpW (lpString1="Program Files", lpString2="..") returned 1 [0192.199] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d1d8 [0192.199] FindNextFileW (in: hFindFile=0x2142d0, lpFindFileData=0x1a1f508 | out: lpFindFileData=0x1a1f508*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe7511354, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe7511354, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Program Files (x86)", cAlternateFileName="PROGRA~2")) returned 1 [0192.199] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cde8 [0192.199] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cdb0 | out: hHeap=0x1f0000) returned 1 [0192.199] lstrcmpW (lpString1="Program Files (x86)", lpString2=".") returned 1 [0192.199] lstrcmpW (lpString1="Program Files (x86)", lpString2="..") returned 1 [0192.199] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x138) returned 0x20d9f0 [0192.199] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21ce20 [0192.199] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20d910 | out: hHeap=0x1f0000) returned 1 [0192.199] FindNextFileW (in: hFindFile=0x2142d0, lpFindFileData=0x1a1f508 | out: lpFindFileData=0x1a1f508*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x450f4738, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x450f4738, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ProgramData", cAlternateFileName="PROGRA~3")) returned 1 [0192.199] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b8f0 [0192.199] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cde8 | out: hHeap=0x1f0000) returned 1 [0192.199] lstrcmpW (lpString1="ProgramData", lpString2=".") returned 1 [0192.199] lstrcmpW (lpString1="ProgramData", lpString2="..") returned 1 [0192.199] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b7d8 [0192.199] FindNextFileW (in: hFindFile=0x2142d0, lpFindFileData=0x1a1f508 | out: lpFindFileData=0x1a1f508*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28e9c3a2, ftCreationTime.dwHighDateTime=0x1d32795, ftLastAccessTime.dwLowDateTime=0x1044dfc5, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x1044dfc5, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Recovery", cAlternateFileName="")) returned 1 [0192.200] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b9e0 [0192.200] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b8f0 | out: hHeap=0x1f0000) returned 1 [0192.200] lstrcmpW (lpString1="Recovery", lpString2=".") returned 1 [0192.200] lstrcmpW (lpString1="Recovery", lpString2="..") returned 1 [0192.200] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20ba08 [0192.200] FindNextFileW (in: hFindFile=0x2142d0, lpFindFileData=0x1a1f508 | out: lpFindFileData=0x1a1f508*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6ead2556, ftCreationTime.dwHighDateTime=0x1d3275c, ftLastAccessTime.dwLowDateTime=0x6ead2556, ftLastAccessTime.dwHighDateTime=0x1d3275c, ftLastWriteTime.dwLowDateTime=0x98f74cd7, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x10000000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="swapfile.sys", cAlternateFileName="")) returned 1 [0192.200] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b648 [0192.200] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cdb0 [0192.200] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b9e0 | out: hHeap=0x1f0000) returned 1 [0192.200] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b648 | out: hHeap=0x1f0000) returned 1 [0192.201] CreateFileW (lpFileName="C:\\\\swapfile.sys" (normalized: "c:\\swapfile.sys"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1f2c8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0192.201] GetLastError () returned 0x20 [0192.201] GetLastError () returned 0x20 [0192.201] SetLastError (dwErrCode=0x20) [0192.201] GetLastError () returned 0x20 [0192.201] SetLastError (dwErrCode=0x20) [0192.201] GetLastError () returned 0x20 [0192.201] SetLastError (dwErrCode=0x20) [0192.202] FindNextFileW (in: hFindFile=0x2142d0, lpFindFileData=0x1a1f508 | out: lpFindFileData=0x1a1f508*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x6e16f135, ftCreationTime.dwHighDateTime=0x1d3275c, ftLastAccessTime.dwLowDateTime=0xb1ff7ba5, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xb1ff7ba5, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="System Volume Information", cAlternateFileName="SYSTEM~1")) returned 1 [0192.202] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x214008 [0192.202] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cdb0 | out: hHeap=0x1f0000) returned 1 [0192.202] lstrcmpW (lpString1="System Volume Information", lpString2=".") returned 1 [0192.202] lstrcmpW (lpString1="System Volume Information", lpString2="..") returned 1 [0192.202] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x213a20 [0192.202] FindNextFileW (in: hFindFile=0x2142d0, lpFindFileData=0x1a1f508 | out: lpFindFileData=0x1a1f508*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x475bb883, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x475bb883, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 1 [0192.202] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b738 [0192.202] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214008 | out: hHeap=0x1f0000) returned 1 [0192.203] lstrcmpW (lpString1="Users", lpString2=".") returned 1 [0192.203] lstrcmpW (lpString1="Users", lpString2="..") returned 1 [0192.203] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c8) returned 0x20db30 [0192.203] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b648 [0192.203] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20d9f0 | out: hHeap=0x1f0000) returned 1 [0192.203] FindNextFileW (in: hFindFile=0x2142d0, lpFindFileData=0x1a1f508 | out: lpFindFileData=0x1a1f508*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0xc838b81d, ftLastAccessTime.dwHighDateTime=0x1d41dc3, ftLastWriteTime.dwLowDateTime=0xc838b81d, ftLastWriteTime.dwHighDateTime=0x1d41dc3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0192.203] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b8f0 [0192.203] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b738 | out: hHeap=0x1f0000) returned 1 [0192.203] lstrcmpW (lpString1="Windows", lpString2=".") returned 1 [0192.203] lstrcmpW (lpString1="Windows", lpString2="..") returned 1 [0192.203] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b738 [0192.203] FindNextFileW (in: hFindFile=0x2142d0, lpFindFileData=0x1a1f508 | out: lpFindFileData=0x1a1f508*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea34fa37, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xccdc86a8, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xccdc86a8, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows10Upgrade", cAlternateFileName="WINDOW~1")) returned 1 [0192.203] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cdb0 [0192.203] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b8f0 | out: hHeap=0x1f0000) returned 1 [0192.203] lstrcmpW (lpString1="Windows10Upgrade", lpString2=".") returned 1 [0192.203] lstrcmpW (lpString1="Windows10Upgrade", lpString2="..") returned 1 [0192.203] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cde8 [0192.203] FindNextFileW (in: hFindFile=0x2142d0, lpFindFileData=0x1a1f508 | out: lpFindFileData=0x1a1f508*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea34fa37, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xccdc86a8, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xccdc86a8, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows10Upgrade", cAlternateFileName="WINDOW~1")) returned 0 [0192.204] FindClose (in: hFindFile=0x2142d0 | out: hFindFile=0x2142d0) returned 1 [0192.204] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x214008 [0192.204] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b800 [0192.204] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x20d910 [0192.204] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cfa8 [0192.204] FindFirstFileW (in: lpFileName="C:\\\\$GetCurrent\\*", lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x214550 [0192.204] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d248 [0192.204] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cfa8 | out: hHeap=0x1f0000) returned 1 [0192.204] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0192.204] FindNextFileW (in: hFindFile=0x214550, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0192.204] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21ce58 [0192.205] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d248 | out: hHeap=0x1f0000) returned 1 [0192.205] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0192.205] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0192.205] FindNextFileW (in: hFindFile=0x214550, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9c5a0a89, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Logs", cAlternateFileName="")) returned 1 [0192.205] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d248 [0192.205] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ce58 | out: hHeap=0x1f0000) returned 1 [0192.205] lstrcmpW (lpString1="Logs", lpString2=".") returned 1 [0192.205] lstrcmpW (lpString1="Logs", lpString2="..") returned 1 [0192.205] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x205030 [0192.205] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21ce58 [0192.205] FindNextFileW (in: hFindFile=0x214550, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SafeOS", cAlternateFileName="")) returned 1 [0192.205] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d280 [0192.205] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d248 | out: hHeap=0x1f0000) returned 1 [0192.205] lstrcmpW (lpString1="SafeOS", lpString2=".") returned 1 [0192.205] lstrcmpW (lpString1="SafeOS", lpString2="..") returned 1 [0192.205] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf38 [0192.205] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cfa8 [0192.206] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205030 | out: hHeap=0x1f0000) returned 1 [0192.206] FindNextFileW (in: hFindFile=0x214550, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SafeOS", cAlternateFileName="")) returned 0 [0192.206] FindClose (in: hFindFile=0x214550 | out: hFindFile=0x214550) returned 1 [0192.206] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x213c60 [0192.206] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b9e0 [0192.206] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x20dd00 [0192.206] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d018 [0192.206] FindFirstFileW (in: lpFileName="C:\\\\$GetCurrent\\Logs\\*", lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9c5a0a89, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x21d26e, cFileName=".", cAlternateFileName="")) returned 0x214490 [0192.206] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0192.206] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d018 | out: hHeap=0x1f0000) returned 1 [0192.206] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0192.206] FindNextFileW (in: hFindFile=0x214490, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9c5a0a89, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x21d26e, cFileName="..", cAlternateFileName="")) returned 1 [0192.206] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d018 [0192.206] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0192.206] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0192.207] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0192.207] FindNextFileW (in: hFindFile=0x214490, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x542c8aac, ftLastAccessTime.dwHighDateTime=0x1d3273a, ftLastWriteTime.dwLowDateTime=0xafe5f7a, ftLastWriteTime.dwHighDateTime=0x1d3273e, nFileSizeHigh=0x0, nFileSizeLow=0xa6b2, dwReserved0=0x20002, dwReserved1=0x21d26e, cFileName="downlevel_2017_09_07_02_02_39_766.log", cAlternateFileName="DOWNLE~1.LOG")) returned 1 [0192.207] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x215860 [0192.207] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0192.207] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x20daa8 [0192.207] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0192.207] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d018 | out: hHeap=0x1f0000) returned 1 [0192.207] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215860 | out: hHeap=0x1f0000) returned 1 [0192.207] CreateFileW (lpFileName="C:\\\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log" (normalized: "c:\\$getcurrent\\logs\\downlevel_2017_09_07_02_02_39_766.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0192.212] GetFileType (hFile=0x1b0) returned 0x1 [0192.213] CloseHandle (hObject=0x1b0) returned 1 [0192.213] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x217038 [0192.213] GetFileAttributesExW (in: lpFileName="C:\\\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log" (normalized: "c:\\$getcurrent\\logs\\downlevel_2017_09_07_02_02_39_766.log"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb14 | out: lpFileInformation=0x1a1eb14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x542c8aac, ftLastAccessTime.dwHighDateTime=0x1d3273a, ftLastWriteTime.dwLowDateTime=0xafe5f7a, ftLastWriteTime.dwHighDateTime=0x1d3273e, nFileSizeHigh=0x0, nFileSizeLow=0xa6b2)) returned 1 [0192.213] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0192.213] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x217038 [0192.213] GetFileAttributesExW (in: lpFileName="C:\\\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log" (normalized: "c:\\$getcurrent\\logs\\downlevel_2017_09_07_02_02_39_766.log"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb1c | out: lpFileInformation=0x1a1eb1c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x542c8aac, ftLastAccessTime.dwHighDateTime=0x1d3273a, ftLastWriteTime.dwLowDateTime=0xafe5f7a, ftLastWriteTime.dwHighDateTime=0x1d3273e, nFileSizeHigh=0x0, nFileSizeLow=0xa6b2)) returned 1 [0192.214] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0192.214] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x217038 [0192.214] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0192.214] FindNextFileW (in: hFindFile=0x214490, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x973abb0f, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x980eecb6, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1774, dwReserved0=0x20002, dwReserved1=0x21d26e, cFileName="oobe_2017_09_07_03_08_57_737.log", cAlternateFileName="OOBE_2~1.LOG")) returned 1 [0192.214] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x215860 [0192.214] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0192.214] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x214ef8 [0192.214] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0192.214] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20daa8 | out: hHeap=0x1f0000) returned 1 [0192.214] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215860 | out: hHeap=0x1f0000) returned 1 [0192.296] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x38) returned 0x214890 [0192.297] CreateFileW (lpFileName="C:\\\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log" (normalized: "c:\\$getcurrent\\logs\\oobe_2017_09_07_03_08_57_737.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc [0192.299] GetFileType (hFile=0x1cc) returned 0x1 [0192.299] CloseHandle (hObject=0x1cc) returned 1 [0192.300] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x214ac0 [0192.300] GetFileAttributesExW (in: lpFileName="C:\\\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log" (normalized: "c:\\$getcurrent\\logs\\oobe_2017_09_07_03_08_57_737.log"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb14 | out: lpFileInformation=0x1a1eb14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x973abb0f, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x980eecb6, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1774)) returned 1 [0192.300] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214ac0 | out: hHeap=0x1f0000) returned 1 [0192.300] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x215060 [0192.300] GetFileAttributesExW (in: lpFileName="C:\\\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log" (normalized: "c:\\$getcurrent\\logs\\oobe_2017_09_07_03_08_57_737.log"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb1c | out: lpFileInformation=0x1a1eb1c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x973abb0f, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x980eecb6, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1774)) returned 1 [0192.301] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215060 | out: hHeap=0x1f0000) returned 1 [0192.301] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x214fe8 [0192.301] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214fe8 | out: hHeap=0x1f0000) returned 1 [0192.301] FindNextFileW (in: hFindFile=0x214490, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c5a0a89, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x9c5a0a89, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xbb3747bd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x20002, dwReserved1=0x21d26e, cFileName="PartnerSetupCompleteResult.log", cAlternateFileName="PARTNE~1.LOG")) returned 1 [0192.301] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x213af8 [0192.301] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1ff090 [0192.301] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x214f70 [0192.302] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1ff090 | out: hHeap=0x1f0000) returned 1 [0192.302] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214ef8 | out: hHeap=0x1f0000) returned 1 [0192.302] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213af8 | out: hHeap=0x1f0000) returned 1 [0192.303] CreateFileW (lpFileName="C:\\\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log" (normalized: "c:\\$getcurrent\\logs\\partnersetupcompleteresult.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc [0192.303] GetFileType (hFile=0x1cc) returned 0x1 [0192.304] CloseHandle (hObject=0x1cc) returned 1 [0192.304] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x214ef8 [0192.304] GetFileAttributesExW (in: lpFileName="C:\\\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log" (normalized: "c:\\$getcurrent\\logs\\partnersetupcompleteresult.log"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb14 | out: lpFileInformation=0x1a1eb14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c5a0a89, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x9c5a0a89, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xbb3747bd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x28)) returned 1 [0192.304] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214ef8 | out: hHeap=0x1f0000) returned 1 [0192.306] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x214e08 [0192.306] GetFileAttributesExW (in: lpFileName="C:\\\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log" (normalized: "c:\\$getcurrent\\logs\\partnersetupcompleteresult.log"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb1c | out: lpFileInformation=0x1a1eb1c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c5a0a89, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x9c5a0a89, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xbb3747bd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x28)) returned 1 [0192.306] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214e08 | out: hHeap=0x1f0000) returned 1 [0192.306] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x214fe8 [0192.306] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214fe8 | out: hHeap=0x1f0000) returned 1 [0192.306] FindNextFileW (in: hFindFile=0x214490, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c5a0a89, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x9c5a0a89, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xbb3747bd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x20002, dwReserved1=0x21d26e, cFileName="PartnerSetupCompleteResult.log", cAlternateFileName="PARTNE~1.LOG")) returned 0 [0192.306] FindClose (in: hFindFile=0x214490 | out: hFindFile=0x214490) returned 1 [0192.307] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f70 | out: hHeap=0x1f0000) returned 1 [0192.307] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20dd00 | out: hHeap=0x1f0000) returned 1 [0192.307] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b9e0 | out: hHeap=0x1f0000) returned 1 [0192.307] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213c60 | out: hHeap=0x1f0000) returned 1 [0192.307] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x213af8 [0192.307] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b9e0 [0192.307] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x20dd00 [0192.307] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x213c18 [0192.308] FindFirstFileW (in: lpFileName="C:\\\\$GetCurrent\\SafeOS\\*", lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x21d26e, cFileName=".", cAlternateFileName="")) returned 0x214690 [0192.350] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1ff090 [0192.350] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x215860 [0192.350] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1ff090 | out: hHeap=0x1f0000) returned 1 [0192.350] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213c18 | out: hHeap=0x1f0000) returned 1 [0192.350] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0192.350] FindNextFileW (in: hFindFile=0x214690, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x21d26e, cFileName="..", cAlternateFileName="")) returned 1 [0192.350] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1ff090 [0192.350] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x20b478 [0192.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1ff090 | out: hHeap=0x1f0000) returned 1 [0192.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215860 | out: hHeap=0x1f0000) returned 1 [0192.351] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0192.351] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0192.351] FindNextFileW (in: hFindFile=0x214690, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9568f13f, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x9568f13f, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0xfb529700, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x232c8, dwReserved0=0x20002, dwReserved1=0x21d26e, cFileName="GetCurrentOOBE.dll", cAlternateFileName="GETCUR~1.DLL")) returned 1 [0192.351] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1ff090 [0192.351] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x225648 [0192.351] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x215860 [0192.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225648 | out: hHeap=0x1f0000) returned 1 [0192.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b478 | out: hHeap=0x1f0000) returned 1 [0192.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1ff090 | out: hHeap=0x1f0000) returned 1 [0192.352] CreateFileW (lpFileName="C:\\\\$GetCurrent\\SafeOS\\GetCurrentOOBE.dll" (normalized: "c:\\$getcurrent\\safeos\\getcurrentoobe.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc [0192.354] GetFileType (hFile=0x1cc) returned 0x1 [0192.354] CloseHandle (hObject=0x1cc) returned 1 [0192.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x20b478 [0192.355] GetFileAttributesExW (in: lpFileName="C:\\\\$GetCurrent\\SafeOS\\GetCurrentOOBE.dll" (normalized: "c:\\$getcurrent\\safeos\\getcurrentoobe.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb14 | out: lpFileInformation=0x1a1eb14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9568f13f, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x9568f13f, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0xfb529700, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x232c8)) returned 1 [0192.355] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b478 | out: hHeap=0x1f0000) returned 1 [0192.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x20b478 [0192.355] GetFileAttributesExW (in: lpFileName="C:\\\\$GetCurrent\\SafeOS\\GetCurrentOOBE.dll" (normalized: "c:\\$getcurrent\\safeos\\getcurrentoobe.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb1c | out: lpFileInformation=0x1a1eb1c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9568f13f, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x9568f13f, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0xfb529700, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x232c8)) returned 1 [0192.355] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b478 | out: hHeap=0x1f0000) returned 1 [0192.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x20b478 [0192.355] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b478 | out: hHeap=0x1f0000) returned 1 [0192.355] FindNextFileW (in: hFindFile=0x214690, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956819aa, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x956819aa, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x980eecb6, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x9c, dwReserved0=0x20002, dwReserved1=0x21d26e, cFileName="GetCurrentRollback.ini", cAlternateFileName="GETCUR~1.INI")) returned 1 [0192.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1ff090 [0192.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x225a00 [0192.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x20b478 [0192.355] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225a00 | out: hHeap=0x1f0000) returned 1 [0192.355] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215860 | out: hHeap=0x1f0000) returned 1 [0192.355] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1ff090 | out: hHeap=0x1f0000) returned 1 [0192.356] CreateFileW (lpFileName="C:\\\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini" (normalized: "c:\\$getcurrent\\safeos\\getcurrentrollback.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc [0192.357] GetFileType (hFile=0x1cc) returned 0x1 [0192.358] CloseHandle (hObject=0x1cc) returned 1 [0192.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x215860 [0192.358] GetFileAttributesExW (in: lpFileName="C:\\\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini" (normalized: "c:\\$getcurrent\\safeos\\getcurrentrollback.ini"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb14 | out: lpFileInformation=0x1a1eb14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956819aa, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x956819aa, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x980eecb6, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x9c)) returned 1 [0192.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215860 | out: hHeap=0x1f0000) returned 1 [0192.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x215860 [0192.358] GetFileAttributesExW (in: lpFileName="C:\\\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini" (normalized: "c:\\$getcurrent\\safeos\\getcurrentrollback.ini"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb1c | out: lpFileInformation=0x1a1eb1c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956819aa, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x956819aa, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x980eecb6, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x9c)) returned 1 [0192.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215860 | out: hHeap=0x1f0000) returned 1 [0192.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x215860 [0192.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215860 | out: hHeap=0x1f0000) returned 1 [0192.358] FindNextFileW (in: hFindFile=0x214690, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x54acc791, ftLastAccessTime.dwHighDateTime=0x1d3273a, ftLastWriteTime.dwLowDateTime=0x54acc791, ftLastWriteTime.dwHighDateTime=0x1d3273a, nFileSizeHigh=0x0, nFileSizeLow=0x241, dwReserved0=0x20002, dwReserved1=0x21d26e, cFileName="PartnerSetupComplete.cmd", cAlternateFileName="PARTNE~1.CMD")) returned 1 [0192.359] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x213c18 [0192.359] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1ff090 [0192.359] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x215860 [0192.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1ff090 | out: hHeap=0x1f0000) returned 1 [0192.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b478 | out: hHeap=0x1f0000) returned 1 [0192.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213c18 | out: hHeap=0x1f0000) returned 1 [0192.359] CreateFileW (lpFileName="C:\\\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\partnersetupcomplete.cmd"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc [0192.359] GetFileType (hFile=0x1cc) returned 0x1 [0192.360] CloseHandle (hObject=0x1cc) returned 1 [0192.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x20b478 [0192.360] GetFileAttributesExW (in: lpFileName="C:\\\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\partnersetupcomplete.cmd"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb14 | out: lpFileInformation=0x1a1eb14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x54acc791, ftLastAccessTime.dwHighDateTime=0x1d3273a, ftLastWriteTime.dwLowDateTime=0x54acc791, ftLastWriteTime.dwHighDateTime=0x1d3273a, nFileSizeHigh=0x0, nFileSizeLow=0x241)) returned 1 [0192.360] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b478 | out: hHeap=0x1f0000) returned 1 [0192.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x20b478 [0192.360] GetFileAttributesExW (in: lpFileName="C:\\\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\partnersetupcomplete.cmd"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb1c | out: lpFileInformation=0x1a1eb1c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x54acc791, ftLastAccessTime.dwHighDateTime=0x1d3273a, ftLastWriteTime.dwLowDateTime=0x54acc791, ftLastWriteTime.dwHighDateTime=0x1d3273a, nFileSizeHigh=0x0, nFileSizeLow=0x241)) returned 1 [0192.360] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b478 | out: hHeap=0x1f0000) returned 1 [0192.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x20b478 [0192.360] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b478 | out: hHeap=0x1f0000) returned 1 [0192.360] FindNextFileW (in: hFindFile=0x214690, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9575af11, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9577d1ec, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x4a, dwReserved0=0x20002, dwReserved1=0x21d26e, cFileName="preoobe.cmd", cAlternateFileName="")) returned 1 [0192.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b8f0 [0192.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1ff090 [0192.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x20b478 [0192.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1ff090 | out: hHeap=0x1f0000) returned 1 [0192.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215860 | out: hHeap=0x1f0000) returned 1 [0192.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b8f0 | out: hHeap=0x1f0000) returned 1 [0192.361] CreateFileW (lpFileName="C:\\\\$GetCurrent\\SafeOS\\preoobe.cmd" (normalized: "c:\\$getcurrent\\safeos\\preoobe.cmd"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc [0192.362] GetFileType (hFile=0x1cc) returned 0x1 [0192.363] CloseHandle (hObject=0x1cc) returned 1 [0192.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x215860 [0192.363] GetFileAttributesExW (in: lpFileName="C:\\\\$GetCurrent\\SafeOS\\preoobe.cmd" (normalized: "c:\\$getcurrent\\safeos\\preoobe.cmd"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb14 | out: lpFileInformation=0x1a1eb14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9575af11, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9577d1ec, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x4a)) returned 1 [0192.363] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215860 | out: hHeap=0x1f0000) returned 1 [0192.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x215860 [0192.363] GetFileAttributesExW (in: lpFileName="C:\\\\$GetCurrent\\SafeOS\\preoobe.cmd" (normalized: "c:\\$getcurrent\\safeos\\preoobe.cmd"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb1c | out: lpFileInformation=0x1a1eb1c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9575af11, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9577d1ec, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x4a)) returned 1 [0192.363] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215860 | out: hHeap=0x1f0000) returned 1 [0192.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x215860 [0192.363] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215860 | out: hHeap=0x1f0000) returned 1 [0192.364] FindNextFileW (in: hFindFile=0x214690, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x957833a7, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x957833a7, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9578472e, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x133, dwReserved0=0x20002, dwReserved1=0x21d26e, cFileName="SetupComplete.cmd", cAlternateFileName="SETUPC~1.CMD")) returned 1 [0192.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1ff090 [0192.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x225d70 [0192.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x215860 [0192.364] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225d70 | out: hHeap=0x1f0000) returned 1 [0192.364] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b478 | out: hHeap=0x1f0000) returned 1 [0192.364] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1ff090 | out: hHeap=0x1f0000) returned 1 [0192.364] CreateFileW (lpFileName="C:\\\\$GetCurrent\\SafeOS\\SetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\setupcomplete.cmd"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc [0192.366] GetFileType (hFile=0x1cc) returned 0x1 [0192.366] CloseHandle (hObject=0x1cc) returned 1 [0192.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x20b478 [0192.367] GetFileAttributesExW (in: lpFileName="C:\\\\$GetCurrent\\SafeOS\\SetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\setupcomplete.cmd"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb14 | out: lpFileInformation=0x1a1eb14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x957833a7, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x957833a7, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9578472e, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x133)) returned 1 [0192.367] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b478 | out: hHeap=0x1f0000) returned 1 [0192.367] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x20b478 [0192.367] GetFileAttributesExW (in: lpFileName="C:\\\\$GetCurrent\\SafeOS\\SetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\setupcomplete.cmd"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb1c | out: lpFileInformation=0x1a1eb1c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x957833a7, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x957833a7, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9578472e, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x133)) returned 1 [0192.367] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b478 | out: hHeap=0x1f0000) returned 1 [0192.367] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x20b478 [0192.367] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b478 | out: hHeap=0x1f0000) returned 1 [0192.367] FindNextFileW (in: hFindFile=0x214690, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x957833a7, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x957833a7, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9578472e, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x133, dwReserved0=0x20002, dwReserved1=0x21d26e, cFileName="SetupComplete.cmd", cAlternateFileName="SETUPC~1.CMD")) returned 0 [0192.367] FindClose (in: hFindFile=0x214690 | out: hFindFile=0x214690) returned 1 [0192.367] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215860 | out: hHeap=0x1f0000) returned 1 [0192.367] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20dd00 | out: hHeap=0x1f0000) returned 1 [0192.367] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b9e0 | out: hHeap=0x1f0000) returned 1 [0192.367] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213af8 | out: hHeap=0x1f0000) returned 1 [0192.368] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d280 | out: hHeap=0x1f0000) returned 1 [0192.368] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ce58 | out: hHeap=0x1f0000) returned 1 [0192.368] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cfa8 | out: hHeap=0x1f0000) returned 1 [0192.368] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf38 | out: hHeap=0x1f0000) returned 1 [0192.368] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20d910 | out: hHeap=0x1f0000) returned 1 [0192.368] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b800 | out: hHeap=0x1f0000) returned 1 [0192.368] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214008 | out: hHeap=0x1f0000) returned 1 [0192.368] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x213e58 [0192.368] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b800 [0192.368] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x20d910 [0192.368] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21ce58 [0192.368] FindFirstFileW (in: lpFileName="C:\\\\$Recycle.Bin\\*", lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x214410 [0192.368] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf38 [0192.369] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ce58 | out: hHeap=0x1f0000) returned 1 [0192.369] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0192.369] FindNextFileW (in: hFindFile=0x214410, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0192.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d280 [0192.369] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf38 | out: hHeap=0x1f0000) returned 1 [0192.369] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0192.369] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0192.369] FindNextFileW (in: hFindFile=0x214410, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18", cAlternateFileName="")) returned 1 [0192.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b8f0 [0192.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21ce58 [0192.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x226058 [0192.369] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ce58 | out: hHeap=0x1f0000) returned 1 [0192.369] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d280 | out: hHeap=0x1f0000) returned 1 [0192.369] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b8f0 | out: hHeap=0x1f0000) returned 1 [0192.369] lstrcmpW (lpString1="S-1-5-18", lpString2=".") returned 1 [0192.369] lstrcmpW (lpString1="S-1-5-18", lpString2="..") returned 1 [0192.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x205130 [0192.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x214008 [0192.369] FindNextFileW (in: hFindFile=0x214410, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x11a5eef8, ftLastAccessTime.dwHighDateTime=0x1d3375b, ftLastWriteTime.dwLowDateTime=0x11a5eef8, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-1051304884-625712362-2192934891-1000", cAlternateFileName="S-1-5-~1")) returned 1 [0192.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x215860 [0192.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21ce58 [0192.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x20dd00 [0192.369] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ce58 | out: hHeap=0x1f0000) returned 1 [0192.369] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226058 | out: hHeap=0x1f0000) returned 1 [0192.370] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215860 | out: hHeap=0x1f0000) returned 1 [0192.370] lstrcmpW (lpString1="S-1-5-21-1051304884-625712362-2192934891-1000", lpString2=".") returned 1 [0192.370] lstrcmpW (lpString1="S-1-5-21-1051304884-625712362-2192934891-1000", lpString2="..") returned 1 [0192.370] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cfa8 [0192.370] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x20dd88 [0192.370] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205130 | out: hHeap=0x1f0000) returned 1 [0192.370] FindNextFileW (in: hFindFile=0x214410, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x11a5eef8, ftLastAccessTime.dwHighDateTime=0x1d3375b, ftLastWriteTime.dwLowDateTime=0x11a5eef8, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-1051304884-625712362-2192934891-1000", cAlternateFileName="S-1-5-~1")) returned 0 [0192.370] FindClose (in: hFindFile=0x214410 | out: hFindFile=0x214410) returned 1 [0192.370] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x213af8 [0192.370] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b8f0 [0192.370] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x224c48 [0192.370] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x213c18 [0192.370] FindFirstFileW (in: lpFileName="C:\\\\$Recycle.Bin\\S-1-5-18\\*", lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x21cf60, cFileName=".", cAlternateFileName="")) returned 0x214690 [0192.370] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x213c60 [0192.370] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213c18 | out: hHeap=0x1f0000) returned 1 [0192.371] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0192.371] FindNextFileW (in: hFindFile=0x214690, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x21cf60, cFileName="..", cAlternateFileName="")) returned 1 [0192.371] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x213c18 [0192.371] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213c60 | out: hHeap=0x1f0000) returned 1 [0192.371] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0192.371] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0192.371] FindNextFileW (in: hFindFile=0x214690, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x20002, dwReserved1=0x21cf60, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0192.371] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b9e0 [0192.371] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x213c60 [0192.371] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x215860 [0192.371] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213c60 | out: hHeap=0x1f0000) returned 1 [0192.371] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213c18 | out: hHeap=0x1f0000) returned 1 [0192.371] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b9e0 | out: hHeap=0x1f0000) returned 1 [0192.371] CreateFileW (lpFileName="C:\\\\$Recycle.Bin\\S-1-5-18\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-18\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc [0192.372] GetFileType (hFile=0x1cc) returned 0x1 [0192.372] CloseHandle (hObject=0x1cc) returned 1 [0192.372] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x20b478 [0192.372] GetFileAttributesExW (in: lpFileName="C:\\\\$Recycle.Bin\\S-1-5-18\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-18\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb14 | out: lpFileInformation=0x1a1eb14*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x81)) returned 1 [0192.372] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b478 | out: hHeap=0x1f0000) returned 1 [0192.372] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x20b478 [0192.372] GetFileAttributesExW (in: lpFileName="C:\\\\$Recycle.Bin\\S-1-5-18\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-18\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb1c | out: lpFileInformation=0x1a1eb1c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x81)) returned 1 [0192.372] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b478 | out: hHeap=0x1f0000) returned 1 [0192.372] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x20b478 [0192.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b478 | out: hHeap=0x1f0000) returned 1 [0192.373] FindNextFileW (in: hFindFile=0x214690, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x20002, dwReserved1=0x21cf60, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0192.373] FindClose (in: hFindFile=0x214690 | out: hFindFile=0x214690) returned 1 [0192.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215860 | out: hHeap=0x1f0000) returned 1 [0192.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224c48 | out: hHeap=0x1f0000) returned 1 [0192.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b8f0 | out: hHeap=0x1f0000) returned 1 [0192.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213af8 | out: hHeap=0x1f0000) returned 1 [0192.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x213af8 [0192.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b9e0 [0192.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x224c48 [0192.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x224de0 [0192.373] FindFirstFileW (in: lpFileName="C:\\\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\*", lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x11a5eef8, ftLastAccessTime.dwHighDateTime=0x1d3375b, ftLastWriteTime.dwLowDateTime=0x11a5eef8, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x21cf60, cFileName=".", cAlternateFileName="")) returned 0x2147d0 [0192.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x20de10 [0192.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x226388 [0192.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20de10 | out: hHeap=0x1f0000) returned 1 [0192.374] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224de0 | out: hHeap=0x1f0000) returned 1 [0192.374] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0192.374] FindNextFileW (in: hFindFile=0x2147d0, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x11a5eef8, ftLastAccessTime.dwHighDateTime=0x1d3375b, ftLastWriteTime.dwLowDateTime=0x11a5eef8, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x21cf60, cFileName="..", cAlternateFileName="")) returned 1 [0192.374] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x20de10 [0192.374] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x226450 [0192.374] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20de10 | out: hHeap=0x1f0000) returned 1 [0192.374] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226388 | out: hHeap=0x1f0000) returned 1 [0192.374] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0192.374] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0192.374] FindNextFileW (in: hFindFile=0x2147d0, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcb9438a8, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xcb9438a8, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x20002, dwReserved1=0x21cf60, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0192.374] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b8f0 [0192.374] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x20de10 [0192.374] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x226388 [0192.374] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20de10 | out: hHeap=0x1f0000) returned 1 [0192.374] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226450 | out: hHeap=0x1f0000) returned 1 [0192.374] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b8f0 | out: hHeap=0x1f0000) returned 1 [0192.374] CreateFileW (lpFileName="C:\\\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc [0192.375] GetFileType (hFile=0x1cc) returned 0x1 [0192.375] CloseHandle (hObject=0x1cc) returned 1 [0192.375] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219e40 [0192.375] GetFileAttributesExW (in: lpFileName="C:\\\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb14 | out: lpFileInformation=0x1a1eb14*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcb9438a8, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xcb9438a8, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x81)) returned 1 [0192.375] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219e40 | out: hHeap=0x1f0000) returned 1 [0192.375] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219cf0 [0192.375] GetFileAttributesExW (in: lpFileName="C:\\\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb1c | out: lpFileInformation=0x1a1eb1c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcb9438a8, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xcb9438a8, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x81)) returned 1 [0192.376] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219cf0 | out: hHeap=0x1f0000) returned 1 [0192.376] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219ee8 [0192.376] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219ee8 | out: hHeap=0x1f0000) returned 1 [0192.376] FindNextFileW (in: hFindFile=0x2147d0, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcb9438a8, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xcb9438a8, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x20002, dwReserved1=0x21cf60, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0192.503] FindClose (in: hFindFile=0x2147d0 | out: hFindFile=0x2147d0) returned 1 [0192.504] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226388 | out: hHeap=0x1f0000) returned 1 [0192.504] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224c48 | out: hHeap=0x1f0000) returned 1 [0192.504] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b9e0 | out: hHeap=0x1f0000) returned 1 [0192.504] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213af8 | out: hHeap=0x1f0000) returned 1 [0192.504] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20dd00 | out: hHeap=0x1f0000) returned 1 [0192.504] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214008 | out: hHeap=0x1f0000) returned 1 [0192.504] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20dd88 | out: hHeap=0x1f0000) returned 1 [0192.505] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cfa8 | out: hHeap=0x1f0000) returned 1 [0192.505] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20d910 | out: hHeap=0x1f0000) returned 1 [0192.505] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b800 | out: hHeap=0x1f0000) returned 1 [0192.505] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213e58 | out: hHeap=0x1f0000) returned 1 [0192.505] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2285a8 [0192.505] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b800 [0192.505] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x20d910 [0192.505] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228488 [0192.505] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\*", lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf39a4e7e, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf74cd515, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x214350 [0192.508] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228150 [0192.508] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x226238 [0192.508] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228150 | out: hHeap=0x1f0000) returned 1 [0192.508] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228488 | out: hHeap=0x1f0000) returned 1 [0192.508] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0192.508] FindNextFileW (in: hFindFile=0x214350, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf39a4e7e, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf74cd515, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0192.545] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227cf0 [0192.545] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x226008 [0192.545] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227cf0 | out: hHeap=0x1f0000) returned 1 [0192.545] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226238 | out: hHeap=0x1f0000) returned 1 [0192.546] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0192.546] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0192.546] FindNextFileW (in: hFindFile=0x214350, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1025", cAlternateFileName="")) returned 1 [0192.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2280e0 [0192.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225bf8 [0192.546] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2280e0 | out: hHeap=0x1f0000) returned 1 [0192.547] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226008 | out: hHeap=0x1f0000) returned 1 [0192.547] lstrcmpW (lpString1="1025", lpString2=".") returned 1 [0192.547] lstrcmpW (lpString1="1025", lpString2="..") returned 1 [0192.547] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x205290 [0192.547] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228c68 [0192.548] FindNextFileW (in: hFindFile=0x214350, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1028", cAlternateFileName="")) returned 1 [0192.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228118 [0192.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x2261e8 [0192.548] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228118 | out: hHeap=0x1f0000) returned 1 [0192.548] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225bf8 | out: hHeap=0x1f0000) returned 1 [0192.548] lstrcmpW (lpString1="1028", lpString2=".") returned 1 [0192.548] lstrcmpW (lpString1="1028", lpString2="..") returned 1 [0192.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228038 [0192.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228710 [0192.549] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205290 | out: hHeap=0x1f0000) returned 1 [0192.549] FindNextFileW (in: hFindFile=0x214350, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1029", cAlternateFileName="")) returned 1 [0192.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227d98 [0192.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225e28 [0192.549] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227d98 | out: hHeap=0x1f0000) returned 1 [0192.549] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2261e8 | out: hHeap=0x1f0000) returned 1 [0192.549] lstrcmpW (lpString1="1029", lpString2=".") returned 1 [0192.549] lstrcmpW (lpString1="1029", lpString2="..") returned 1 [0192.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x48) returned 0x2262d8 [0192.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228878 [0192.549] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228038 | out: hHeap=0x1f0000) returned 1 [0192.550] FindNextFileW (in: hFindFile=0x214350, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1030", cAlternateFileName="")) returned 1 [0192.550] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228150 [0192.550] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225e78 [0192.550] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228150 | out: hHeap=0x1f0000) returned 1 [0192.550] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225e28 | out: hHeap=0x1f0000) returned 1 [0192.550] lstrcmpW (lpString1="1030", lpString2=".") returned 1 [0192.550] lstrcmpW (lpString1="1030", lpString2="..") returned 1 [0192.550] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ac48 [0192.550] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228a28 [0192.550] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2262d8 | out: hHeap=0x1f0000) returned 1 [0192.550] FindNextFileW (in: hFindFile=0x214350, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1031", cAlternateFileName="")) returned 1 [0192.551] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0192.551] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225ce8 [0192.551] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0192.551] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225e78 | out: hHeap=0x1f0000) returned 1 [0192.551] lstrcmpW (lpString1="1031", lpString2=".") returned 1 [0192.551] lstrcmpW (lpString1="1031", lpString2="..") returned 1 [0192.551] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x228378 [0192.551] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228680 [0192.551] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ac48 | out: hHeap=0x1f0000) returned 1 [0192.551] FindNextFileW (in: hFindFile=0x214350, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1032", cAlternateFileName="")) returned 1 [0192.551] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2280e0 [0192.551] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225c48 [0192.552] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2280e0 | out: hHeap=0x1f0000) returned 1 [0192.552] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225ce8 | out: hHeap=0x1f0000) returned 1 [0192.552] lstrcmpW (lpString1="1032", lpString2=".") returned 1 [0192.552] lstrcmpW (lpString1="1032", lpString2="..") returned 1 [0192.552] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2286c8 [0192.552] FindNextFileW (in: hFindFile=0x214350, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0192.552] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228268 [0192.552] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x226288 [0192.552] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228268 | out: hHeap=0x1f0000) returned 1 [0192.552] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225c48 | out: hHeap=0x1f0000) returned 1 [0192.553] lstrcmpW (lpString1="1033", lpString2=".") returned 1 [0192.553] lstrcmpW (lpString1="1033", lpString2="..") returned 1 [0192.553] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd8) returned 0x20dd00 [0192.553] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228440 [0192.553] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228378 | out: hHeap=0x1f0000) returned 1 [0192.553] FindNextFileW (in: hFindFile=0x214350, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1035", cAlternateFileName="")) returned 1 [0192.553] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2281c0 [0192.553] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x226198 [0192.553] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2281c0 | out: hHeap=0x1f0000) returned 1 [0192.553] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226288 | out: hHeap=0x1f0000) returned 1 [0192.554] lstrcmpW (lpString1="1035", lpString2=".") returned 1 [0192.554] lstrcmpW (lpString1="1035", lpString2="..") returned 1 [0192.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2287a0 [0192.554] FindNextFileW (in: hFindFile=0x214350, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1036", cAlternateFileName="")) returned 1 [0192.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2280e0 [0192.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225ce8 [0192.555] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2280e0 | out: hHeap=0x1f0000) returned 1 [0192.555] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226198 | out: hHeap=0x1f0000) returned 1 [0192.555] lstrcmpW (lpString1="1036", lpString2=".") returned 1 [0192.555] lstrcmpW (lpString1="1036", lpString2="..") returned 1 [0192.555] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228b90 [0192.555] FindNextFileW (in: hFindFile=0x214350, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1037", cAlternateFileName="")) returned 1 [0192.555] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227fc8 [0192.555] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225dd8 [0192.555] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227fc8 | out: hHeap=0x1f0000) returned 1 [0192.556] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225ce8 | out: hHeap=0x1f0000) returned 1 [0192.556] lstrcmpW (lpString1="1037", lpString2=".") returned 1 [0192.556] lstrcmpW (lpString1="1037", lpString2="..") returned 1 [0192.556] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x138) returned 0x2251e0 [0192.556] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228518 [0192.556] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20dd00 | out: hHeap=0x1f0000) returned 1 [0192.556] FindNextFileW (in: hFindFile=0x214350, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1038", cAlternateFileName="")) returned 1 [0192.556] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0192.556] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225fb8 [0192.556] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0192.557] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225dd8 | out: hHeap=0x1f0000) returned 1 [0192.557] lstrcmpW (lpString1="1038", lpString2=".") returned 1 [0192.557] lstrcmpW (lpString1="1038", lpString2="..") returned 1 [0192.557] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2284d0 [0192.557] FindNextFileW (in: hFindFile=0x214350, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1040", cAlternateFileName="")) returned 1 [0192.557] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228150 [0192.557] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x226008 [0192.557] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228150 | out: hHeap=0x1f0000) returned 1 [0192.557] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225fb8 | out: hHeap=0x1f0000) returned 1 [0192.557] lstrcmpW (lpString1="1040", lpString2=".") returned 1 [0192.557] lstrcmpW (lpString1="1040", lpString2="..") returned 1 [0192.558] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228ab8 [0192.558] FindNextFileW (in: hFindFile=0x214350, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1041", cAlternateFileName="")) returned 1 [0192.558] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2281c0 [0192.558] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225f68 [0192.558] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2281c0 | out: hHeap=0x1f0000) returned 1 [0192.558] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226008 | out: hHeap=0x1f0000) returned 1 [0192.558] lstrcmpW (lpString1="1041", lpString2=".") returned 1 [0192.558] lstrcmpW (lpString1="1041", lpString2="..") returned 1 [0192.559] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2288c0 [0192.559] FindNextFileW (in: hFindFile=0x214350, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1042", cAlternateFileName="")) returned 1 [0192.559] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227fc8 [0192.559] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225e28 [0192.559] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227fc8 | out: hHeap=0x1f0000) returned 1 [0192.559] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225f68 | out: hHeap=0x1f0000) returned 1 [0192.559] lstrcmpW (lpString1="1042", lpString2=".") returned 1 [0192.559] lstrcmpW (lpString1="1042", lpString2="..") returned 1 [0192.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c8) returned 0x224bc0 [0192.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228a70 [0192.560] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2251e0 | out: hHeap=0x1f0000) returned 1 [0192.560] FindNextFileW (in: hFindFile=0x214350, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1043", cAlternateFileName="")) returned 1 [0192.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227fc8 [0192.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x226328 [0192.560] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227fc8 | out: hHeap=0x1f0000) returned 1 [0192.560] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225e28 | out: hHeap=0x1f0000) returned 1 [0192.561] lstrcmpW (lpString1="1043", lpString2=".") returned 1 [0192.561] lstrcmpW (lpString1="1043", lpString2="..") returned 1 [0192.561] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2287e8 [0192.561] FindNextFileW (in: hFindFile=0x214350, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1044", cAlternateFileName="")) returned 1 [0192.561] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228268 [0192.561] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x226148 [0192.561] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228268 | out: hHeap=0x1f0000) returned 1 [0192.562] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226328 | out: hHeap=0x1f0000) returned 1 [0192.562] lstrcmpW (lpString1="1044", lpString2=".") returned 1 [0192.562] lstrcmpW (lpString1="1044", lpString2="..") returned 1 [0192.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228638 [0192.563] FindNextFileW (in: hFindFile=0x214350, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1045", cAlternateFileName="")) returned 1 [0192.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227eb0 [0192.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x226328 [0192.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227eb0 | out: hHeap=0x1f0000) returned 1 [0192.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226148 | out: hHeap=0x1f0000) returned 1 [0192.563] lstrcmpW (lpString1="1045", lpString2=".") returned 1 [0192.563] lstrcmpW (lpString1="1045", lpString2="..") returned 1 [0192.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228830 [0192.563] FindNextFileW (in: hFindFile=0x214350, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1046", cAlternateFileName="")) returned 1 [0192.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227fc8 [0192.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225f18 [0192.564] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227fc8 | out: hHeap=0x1f0000) returned 1 [0192.564] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226328 | out: hHeap=0x1f0000) returned 1 [0192.564] lstrcmpW (lpString1="1046", lpString2=".") returned 1 [0192.564] lstrcmpW (lpString1="1046", lpString2="..") returned 1 [0192.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228908 [0192.564] FindNextFileW (in: hFindFile=0x214350, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1049", cAlternateFileName="")) returned 1 [0192.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227d28 [0192.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x226198 [0192.564] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227d28 | out: hHeap=0x1f0000) returned 1 [0192.565] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225f18 | out: hHeap=0x1f0000) returned 1 [0192.565] lstrcmpW (lpString1="1049", lpString2=".") returned 1 [0192.565] lstrcmpW (lpString1="1049", lpString2="..") returned 1 [0192.565] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228488 [0192.565] FindNextFileW (in: hFindFile=0x214350, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1053", cAlternateFileName="")) returned 1 [0192.565] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227fc8 [0192.565] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225e28 [0192.565] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227fc8 | out: hHeap=0x1f0000) returned 1 [0192.565] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226198 | out: hHeap=0x1f0000) returned 1 [0192.565] lstrcmpW (lpString1="1053", lpString2=".") returned 1 [0192.565] lstrcmpW (lpString1="1053", lpString2="..") returned 1 [0192.566] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2a0) returned 0x22b018 [0192.566] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228cf8 [0192.566] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224bc0 | out: hHeap=0x1f0000) returned 1 [0192.566] FindNextFileW (in: hFindFile=0x214350, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1055", cAlternateFileName="")) returned 1 [0192.566] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227c80 [0192.566] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225f68 [0192.566] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227c80 | out: hHeap=0x1f0000) returned 1 [0192.566] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225e28 | out: hHeap=0x1f0000) returned 1 [0192.566] lstrcmpW (lpString1="1055", lpString2=".") returned 1 [0192.566] lstrcmpW (lpString1="1055", lpString2="..") returned 1 [0192.566] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228950 [0192.566] FindNextFileW (in: hFindFile=0x214350, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2052", cAlternateFileName="")) returned 1 [0192.566] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227c80 [0192.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x2260f8 [0192.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227c80 | out: hHeap=0x1f0000) returned 1 [0192.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225f68 | out: hHeap=0x1f0000) returned 1 [0192.567] lstrcmpW (lpString1="2052", lpString2=".") returned 1 [0192.567] lstrcmpW (lpString1="2052", lpString2="..") returned 1 [0192.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228998 [0192.567] FindNextFileW (in: hFindFile=0x214350, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2070", cAlternateFileName="")) returned 1 [0192.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227f20 [0192.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x226148 [0192.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227f20 | out: hHeap=0x1f0000) returned 1 [0192.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2260f8 | out: hHeap=0x1f0000) returned 1 [0192.567] lstrcmpW (lpString1="2070", lpString2=".") returned 1 [0192.567] lstrcmpW (lpString1="2070", lpString2="..") returned 1 [0192.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228b00 [0192.567] FindNextFileW (in: hFindFile=0x214350, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3076", cAlternateFileName="")) returned 1 [0192.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228150 [0192.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x226008 [0192.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228150 | out: hHeap=0x1f0000) returned 1 [0192.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226148 | out: hHeap=0x1f0000) returned 1 [0192.568] lstrcmpW (lpString1="3076", lpString2=".") returned 1 [0192.568] lstrcmpW (lpString1="3076", lpString2="..") returned 1 [0192.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228b48 [0192.569] FindNextFileW (in: hFindFile=0x214350, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3082", cAlternateFileName="")) returned 1 [0192.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228230 [0192.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225e28 [0192.569] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228230 | out: hHeap=0x1f0000) returned 1 [0192.569] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226008 | out: hHeap=0x1f0000) returned 1 [0192.569] lstrcmpW (lpString1="3082", lpString2=".") returned 1 [0192.569] lstrcmpW (lpString1="3082", lpString2="..") returned 1 [0192.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228bd8 [0192.569] FindNextFileW (in: hFindFile=0x214350, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Client", cAlternateFileName="")) returned 1 [0192.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228038 [0192.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x226198 [0192.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228038 | out: hHeap=0x1f0000) returned 1 [0192.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225e28 | out: hHeap=0x1f0000) returned 1 [0192.570] lstrcmpW (lpString1="Client", lpString2=".") returned 1 [0192.570] lstrcmpW (lpString1="Client", lpString2="..") returned 1 [0192.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228cb0 [0192.570] FindNextFileW (in: hFindFile=0x214350, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbc518d00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbc518d00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbc518d00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x3ef6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DHtmlHeader.html", cAlternateFileName="DHTMLH~1.HTM")) returned 1 [0192.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227c10 [0192.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228118 [0192.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x215860 [0192.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228118 | out: hHeap=0x1f0000) returned 1 [0192.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226198 | out: hHeap=0x1f0000) returned 1 [0192.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227c10 | out: hHeap=0x1f0000) returned 1 [0192.571] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\DHtmlHeader.html" (normalized: "c:\\588bce7c90097ed212\\dhtmlheader.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc [0192.574] GetFileType (hFile=0x1cc) returned 0x1 [0192.575] CloseHandle (hObject=0x1cc) returned 1 [0192.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x20b478 [0192.575] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\DHtmlHeader.html" (normalized: "c:\\588bce7c90097ed212\\dhtmlheader.html"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbc518d00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbc518d00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbc518d00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x3ef6)) returned 1 [0192.576] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b478 | out: hHeap=0x1f0000) returned 1 [0192.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x20b478 [0192.576] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\DHtmlHeader.html" (normalized: "c:\\588bce7c90097ed212\\dhtmlheader.html"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbc518d00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbc518d00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbc518d00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x3ef6)) returned 1 [0192.576] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b478 | out: hHeap=0x1f0000) returned 1 [0192.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x20b478 [0192.576] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b478 | out: hHeap=0x1f0000) returned 1 [0192.576] FindNextFileW (in: hFindFile=0x214350, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x159d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayIcon.ico", cAlternateFileName="DISPLA~1.ICO")) returned 1 [0192.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20bc38 [0192.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227c80 [0192.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x20b478 [0192.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227c80 | out: hHeap=0x1f0000) returned 1 [0192.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215860 | out: hHeap=0x1f0000) returned 1 [0192.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20bc38 | out: hHeap=0x1f0000) returned 1 [0192.577] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\DisplayIcon.ico" (normalized: "c:\\588bce7c90097ed212\\displayicon.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1dc [0192.736] GetFileType (hFile=0x1dc) returned 0x1 [0192.737] CloseHandle (hObject=0x1dc) returned 1 [0192.737] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x215860 [0192.737] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\DisplayIcon.ico" (normalized: "c:\\588bce7c90097ed212\\displayicon.ico"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x159d5)) returned 1 [0192.737] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215860 | out: hHeap=0x1f0000) returned 1 [0192.737] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x215860 [0192.738] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\DisplayIcon.ico" (normalized: "c:\\588bce7c90097ed212\\displayicon.ico"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x159d5)) returned 1 [0192.738] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215860 | out: hHeap=0x1f0000) returned 1 [0192.738] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x215860 [0192.738] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215860 | out: hHeap=0x1f0000) returned 1 [0192.738] FindNextFileW (in: hFindFile=0x214350, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Extended", cAlternateFileName="")) returned 1 [0192.738] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b610 [0192.738] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0192.738] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225e28 [0192.739] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0192.739] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b478 | out: hHeap=0x1f0000) returned 1 [0192.739] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b610 | out: hHeap=0x1f0000) returned 1 [0192.739] lstrcmpW (lpString1="Extended", lpString2=".") returned 1 [0192.739] lstrcmpW (lpString1="Extended", lpString2="..") returned 1 [0192.739] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233d20 [0192.739] FindNextFileW (in: hFindFile=0x214350, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Graphics", cAlternateFileName="")) returned 1 [0192.739] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b4d0 [0192.739] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0192.739] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225e78 [0192.739] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0192.739] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225e28 | out: hHeap=0x1f0000) returned 1 [0192.739] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b4d0 | out: hHeap=0x1f0000) returned 1 [0192.739] lstrcmpW (lpString1="Graphics", lpString2=".") returned 1 [0192.739] lstrcmpW (lpString1="Graphics", lpString2="..") returned 1 [0192.740] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233d68 [0192.740] FindNextFileW (in: hFindFile=0x214350, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x87910600, ftCreationTime.dwHighDateTime=0x1ca2a27, ftLastAccessTime.dwLowDateTime=0x87910600, ftLastAccessTime.dwHighDateTime=0x1ca2a27, ftLastWriteTime.dwLowDateTime=0x87910600, ftLastWriteTime.dwHighDateTime=0x1ca2a27, nFileSizeHigh=0x0, nFileSizeLow=0xe2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="header.bmp", cAlternateFileName="")) returned 1 [0192.740] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b700 [0192.740] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227bd8 [0192.740] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x215860 [0192.740] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227bd8 | out: hHeap=0x1f0000) returned 1 [0192.740] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225e78 | out: hHeap=0x1f0000) returned 1 [0192.740] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b700 | out: hHeap=0x1f0000) returned 1 [0192.772] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\header.bmp" (normalized: "c:\\588bce7c90097ed212\\header.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0192.773] GetFileType (hFile=0x1d8) returned 0x1 [0192.773] CloseHandle (hObject=0x1d8) returned 1 [0192.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x21ae50 [0192.774] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\header.bmp" (normalized: "c:\\588bce7c90097ed212\\header.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x87910600, ftCreationTime.dwHighDateTime=0x1ca2a27, ftLastAccessTime.dwLowDateTime=0x87910600, ftLastAccessTime.dwHighDateTime=0x1ca2a27, ftLastWriteTime.dwLowDateTime=0x87910600, ftLastWriteTime.dwHighDateTime=0x1ca2a27, nFileSizeHigh=0x0, nFileSizeLow=0xe2c)) returned 1 [0192.774] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ae50 | out: hHeap=0x1f0000) returned 1 [0192.774] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x21ae50 [0192.774] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\header.bmp" (normalized: "c:\\588bce7c90097ed212\\header.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x87910600, ftCreationTime.dwHighDateTime=0x1ca2a27, ftLastAccessTime.dwLowDateTime=0x87910600, ftLastAccessTime.dwHighDateTime=0x1ca2a27, ftLastWriteTime.dwLowDateTime=0x87910600, ftLastWriteTime.dwHighDateTime=0x1ca2a27, nFileSizeHigh=0x0, nFileSizeLow=0xe2c)) returned 1 [0192.774] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ae50 | out: hHeap=0x1f0000) returned 1 [0192.774] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x21ae50 [0192.774] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ae50 | out: hHeap=0x1f0000) returned 1 [0192.774] FindNextFileW (in: hFindFile=0x214350, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x66ea7e00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0x66ea7e00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0x66ea7e00, ftLastWriteTime.dwHighDateTime=0x1cac6e3, nFileSizeHigh=0x0, nFileSizeLow=0xad1384b, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfx_Core.mzz", cAlternateFileName="NETFX_~1.MZZ")) returned 1 [0192.774] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b638 [0192.774] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227fc8 [0192.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x21ae50 [0192.775] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227fc8 | out: hHeap=0x1f0000) returned 1 [0192.775] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215860 | out: hHeap=0x1f0000) returned 1 [0192.775] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b638 | out: hHeap=0x1f0000) returned 1 [0192.776] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\netfx_Core.mzz" (normalized: "c:\\588bce7c90097ed212\\netfx_core.mzz"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0192.776] GetFileType (hFile=0x1d8) returned 0x1 [0192.776] CloseHandle (hObject=0x1d8) returned 1 [0192.776] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x215860 [0192.776] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\netfx_Core.mzz" (normalized: "c:\\588bce7c90097ed212\\netfx_core.mzz"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x66ea7e00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0x66ea7e00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0x66ea7e00, ftLastWriteTime.dwHighDateTime=0x1cac6e3, nFileSizeHigh=0x0, nFileSizeLow=0xad1384b)) returned 1 [0192.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215860 | out: hHeap=0x1f0000) returned 1 [0192.777] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x215860 [0192.777] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\netfx_Core.mzz" (normalized: "c:\\588bce7c90097ed212\\netfx_core.mzz"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x66ea7e00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0x66ea7e00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0x66ea7e00, ftLastWriteTime.dwHighDateTime=0x1cac6e3, nFileSizeHigh=0x0, nFileSizeLow=0xad1384b)) returned 1 [0192.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215860 | out: hHeap=0x1f0000) returned 1 [0192.777] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x215860 [0192.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215860 | out: hHeap=0x1f0000) returned 1 [0192.777] FindNextFileW (in: hFindFile=0x214350, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xc183da00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0xc183da00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0xc183da00, ftLastWriteTime.dwHighDateTime=0x1cac6e3, nFileSizeHigh=0x0, nFileSizeLow=0x1d0200, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfx_Core_x64.msi", cAlternateFileName="NETFX_~1.MSI")) returned 1 [0192.777] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0192.777] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228038 [0192.777] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a970 [0192.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228038 | out: hHeap=0x1f0000) returned 1 [0192.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ae50 | out: hHeap=0x1f0000) returned 1 [0192.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0192.777] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\netfx_Core_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0192.778] GetFileType (hFile=0x1d8) returned 0x1 [0192.779] CloseHandle (hObject=0x1d8) returned 1 [0192.779] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ad18 [0192.779] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\netfx_Core_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x64.msi"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xc183da00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0xc183da00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0xc183da00, ftLastWriteTime.dwHighDateTime=0x1cac6e3, nFileSizeHigh=0x0, nFileSizeLow=0x1d0200)) returned 1 [0192.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ad18 | out: hHeap=0x1f0000) returned 1 [0192.779] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ade8 [0192.779] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\netfx_Core_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x64.msi"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xc183da00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0xc183da00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0xc183da00, ftLastWriteTime.dwHighDateTime=0x1cac6e3, nFileSizeHigh=0x0, nFileSizeLow=0x1d0200)) returned 1 [0192.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ade8 | out: hHeap=0x1f0000) returned 1 [0192.779] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ab78 [0192.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab78 | out: hHeap=0x1f0000) returned 1 [0192.780] FindNextFileW (in: hFindFile=0x214350, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x4c130c00, ftCreationTime.dwHighDateTime=0x1cac6d9, ftLastAccessTime.dwLowDateTime=0x4c130c00, ftLastAccessTime.dwHighDateTime=0x1cac6d9, ftLastWriteTime.dwLowDateTime=0x4c130c00, ftLastWriteTime.dwHighDateTime=0x1cac6d9, nFileSizeHigh=0x0, nFileSizeLow=0x11c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfx_Core_x86.msi", cAlternateFileName="NETFX_~2.MSI")) returned 1 [0192.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0192.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228150 [0192.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ab78 [0192.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228150 | out: hHeap=0x1f0000) returned 1 [0192.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a970 | out: hHeap=0x1f0000) returned 1 [0192.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0192.780] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\netfx_Core_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x86.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0192.781] GetFileType (hFile=0x1d8) returned 0x1 [0192.781] CloseHandle (hObject=0x1d8) returned 1 [0192.781] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ade8 [0192.781] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\netfx_Core_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x86.msi"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x4c130c00, ftCreationTime.dwHighDateTime=0x1cac6d9, ftLastAccessTime.dwLowDateTime=0x4c130c00, ftLastAccessTime.dwHighDateTime=0x1cac6d9, ftLastWriteTime.dwLowDateTime=0x4c130c00, ftLastWriteTime.dwHighDateTime=0x1cac6d9, nFileSizeHigh=0x0, nFileSizeLow=0x11c000)) returned 1 [0192.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ade8 | out: hHeap=0x1f0000) returned 1 [0192.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ad80 [0192.782] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\netfx_Core_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x86.msi"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x4c130c00, ftCreationTime.dwHighDateTime=0x1cac6d9, ftLastAccessTime.dwLowDateTime=0x4c130c00, ftLastAccessTime.dwHighDateTime=0x1cac6d9, ftLastWriteTime.dwLowDateTime=0x4c130c00, ftLastWriteTime.dwHighDateTime=0x1cac6d9, nFileSizeHigh=0x0, nFileSizeLow=0x11c000)) returned 1 [0192.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ad80 | out: hHeap=0x1f0000) returned 1 [0192.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ae50 [0192.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ae50 | out: hHeap=0x1f0000) returned 1 [0192.782] FindNextFileW (in: hFindFile=0x214350, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf74cd515, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf74cd515, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf7cd9415, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x29222c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfx_Extended.mzz", cAlternateFileName="NETFX_~2.MZZ")) returned 1 [0192.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0192.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228230 [0192.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ade8 [0192.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228230 | out: hHeap=0x1f0000) returned 1 [0192.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab78 | out: hHeap=0x1f0000) returned 1 [0192.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0192.782] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\netfx_Extended.mzz" (normalized: "c:\\588bce7c90097ed212\\netfx_extended.mzz"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0192.783] GetFileType (hFile=0x1d8) returned 0x1 [0192.783] CloseHandle (hObject=0x1d8) returned 1 [0192.783] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22af20 [0192.783] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\netfx_Extended.mzz" (normalized: "c:\\588bce7c90097ed212\\netfx_extended.mzz"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf74cd515, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf74cd515, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf7cd9415, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x29222c7)) returned 1 [0192.783] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22af20 | out: hHeap=0x1f0000) returned 1 [0192.783] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22aa40 [0192.783] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\netfx_Extended.mzz" (normalized: "c:\\588bce7c90097ed212\\netfx_extended.mzz"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf74cd515, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf74cd515, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf7cd9415, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x29222c7)) returned 1 [0192.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aa40 | out: hHeap=0x1f0000) returned 1 [0192.784] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a9d8 [0192.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a9d8 | out: hHeap=0x1f0000) returned 1 [0192.784] FindNextFileW (in: hFindFile=0x214350, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2dbe0800, ftCreationTime.dwHighDateTime=0x1cac6fb, ftLastAccessTime.dwLowDateTime=0x2dbe0800, ftLastAccessTime.dwHighDateTime=0x1cac6fb, ftLastWriteTime.dwLowDateTime=0x2dbe0800, ftLastWriteTime.dwHighDateTime=0x1cac6fb, nFileSizeHigh=0x0, nFileSizeLow=0xd5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfx_Extended_x64.msi", cAlternateFileName="NETFX_~3.MSI")) returned 1 [0192.784] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228150 [0192.784] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0192.784] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22aa40 [0192.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0192.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ade8 | out: hHeap=0x1f0000) returned 1 [0192.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228150 | out: hHeap=0x1f0000) returned 1 [0192.784] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\netfx_Extended_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0192.785] GetFileType (hFile=0x1d8) returned 0x1 [0192.785] CloseHandle (hObject=0x1d8) returned 1 [0192.785] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22aaa8 [0192.785] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\netfx_Extended_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x64.msi"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2dbe0800, ftCreationTime.dwHighDateTime=0x1cac6fb, ftLastAccessTime.dwLowDateTime=0x2dbe0800, ftLastAccessTime.dwHighDateTime=0x1cac6fb, ftLastWriteTime.dwLowDateTime=0x2dbe0800, ftLastWriteTime.dwHighDateTime=0x1cac6fb, nFileSizeHigh=0x0, nFileSizeLow=0xd5000)) returned 1 [0192.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aaa8 | out: hHeap=0x1f0000) returned 1 [0192.786] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ad80 [0192.786] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\netfx_Extended_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x64.msi"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2dbe0800, ftCreationTime.dwHighDateTime=0x1cac6fb, ftLastAccessTime.dwLowDateTime=0x2dbe0800, ftLastAccessTime.dwHighDateTime=0x1cac6fb, ftLastWriteTime.dwLowDateTime=0x2dbe0800, ftLastWriteTime.dwHighDateTime=0x1cac6fb, nFileSizeHigh=0x0, nFileSizeLow=0xd5000)) returned 1 [0192.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ad80 | out: hHeap=0x1f0000) returned 1 [0192.786] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ad80 [0192.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ad80 | out: hHeap=0x1f0000) returned 1 [0192.786] FindNextFileW (in: hFindFile=0x214350, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x7626f700, ftCreationTime.dwHighDateTime=0x1cac6f6, ftLastAccessTime.dwLowDateTime=0x7626f700, ftLastAccessTime.dwHighDateTime=0x1cac6f6, ftLastWriteTime.dwLowDateTime=0x7626f700, ftLastWriteTime.dwHighDateTime=0x1cac6f6, nFileSizeHigh=0x0, nFileSizeLow=0x79000, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfx_Extended_x86.msi", cAlternateFileName="NETFX_~4.MSI")) returned 1 [0192.788] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0192.788] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228150 [0192.788] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ab10 [0192.788] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228150 | out: hHeap=0x1f0000) returned 1 [0192.788] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aa40 | out: hHeap=0x1f0000) returned 1 [0192.788] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0192.788] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\netfx_Extended_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x86.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0192.823] GetFileType (hFile=0x1d8) returned 0x1 [0192.824] CloseHandle (hObject=0x1d8) returned 1 [0192.831] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ab78 [0192.832] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\netfx_Extended_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x86.msi"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x7626f700, ftCreationTime.dwHighDateTime=0x1cac6f6, ftLastAccessTime.dwLowDateTime=0x7626f700, ftLastAccessTime.dwHighDateTime=0x1cac6f6, ftLastWriteTime.dwLowDateTime=0x7626f700, ftLastWriteTime.dwHighDateTime=0x1cac6f6, nFileSizeHigh=0x0, nFileSizeLow=0x79000)) returned 1 [0192.832] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab78 | out: hHeap=0x1f0000) returned 1 [0192.832] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ad18 [0192.832] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\netfx_Extended_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x86.msi"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x7626f700, ftCreationTime.dwHighDateTime=0x1cac6f6, ftLastAccessTime.dwLowDateTime=0x7626f700, ftLastAccessTime.dwHighDateTime=0x1cac6f6, ftLastWriteTime.dwLowDateTime=0x7626f700, ftLastWriteTime.dwHighDateTime=0x1cac6f6, nFileSizeHigh=0x0, nFileSizeLow=0x79000)) returned 1 [0192.832] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ad18 | out: hHeap=0x1f0000) returned 1 [0192.832] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ab78 [0192.832] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab78 | out: hHeap=0x1f0000) returned 1 [0192.832] GetLastError () returned 0x0 [0192.832] SetLastError (dwErrCode=0x0) [0192.832] GetLastError () returned 0x0 [0192.833] SetLastError (dwErrCode=0x0) [0192.833] AreFileApisANSI () returned 1 [0192.833] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58420, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0192.833] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58420, cbMultiByte=4, lpWideCharStr=0x1a1f070, cchWideChar=4 | out: lpWideCharStr=".exe") returned 4 [0192.833] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b868 [0192.833] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234590 [0192.833] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x227388 [0192.833] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ad80 [0192.833] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227fc8 [0192.833] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b840 [0192.833] CryptAcquireContextA (in: phProv=0x1a1e758, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1a1e758*=0x22a0b0) returned 1 [0192.836] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x22b840 | out: pbBuffer=0x22b840) returned 1 [0192.836] CryptReleaseContext (hProv=0x22a0b0, dwFlags=0x0) returned 1 [0192.836] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b840 | out: hHeap=0x1f0000) returned 1 [0192.836] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x21e740 [0192.836] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x229418 [0192.836] QueryPerformanceCounter (in: lpPerformanceCount=0x1a1e6ec | out: lpPerformanceCount=0x1a1e6ec*=35020500057) returned 1 [0192.836] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1a1e72c | out: lpSystemTimeAsFileTime=0x1a1e72c) [0192.836] QueryPerformanceCounter (in: lpPerformanceCount=0x1a1e6ec | out: lpPerformanceCount=0x1a1e6ec*=35020519394) returned 1 [0192.836] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1a1e72c | out: lpSystemTimeAsFileTime=0x1a1e72c) [0192.837] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x227dd0 [0192.837] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x21f958 [0192.837] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x229528 [0192.837] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x20e1f0 [0192.837] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20fef8 [0192.837] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206898 [0192.837] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210090 [0192.837] GetLastError () returned 0x0 [0192.837] SetLastError (dwErrCode=0x0) [0192.837] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0192.837] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x215060 [0192.837] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x230e38 [0192.837] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215060 | out: hHeap=0x1f0000) returned 1 [0192.837] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x106) returned 0x22cce0 [0192.837] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230e38 | out: hHeap=0x1f0000) returned 1 [0192.838] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c520 [0192.838] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c530 [0192.838] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\netfx_Extended_x86.msi.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x86.msi.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e5f8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0192.839] GetFileType (hFile=0x1d8) returned 0x1 [0192.839] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c370 [0192.839] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c460 [0192.839] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\netfx_Extended_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x86.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e628, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0192.840] GetFileType (hFile=0x1c0) returned 0x1 [0192.840] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205130 [0192.840] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x2051f0 [0192.840] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x230e38 [0192.840] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c3a0 [0192.840] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c4e0 [0192.841] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\netfx_Extended_x86.msi.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x86.msi.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e574, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc [0192.841] GetFileType (hFile=0x1cc) returned 0x1 [0192.841] GetLastError () returned 0xb7 [0192.841] SetLastError (dwErrCode=0xb7) [0192.841] GetLastError () returned 0xb7 [0192.841] SetLastError (dwErrCode=0xb7) [0192.841] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205130 | out: hHeap=0x1f0000) returned 1 [0192.841] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2051f0 | out: hHeap=0x1f0000) returned 1 [0192.841] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe4) returned 0x22d368 [0192.841] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205210 [0192.841] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205290 [0192.841] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205130 [0192.842] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x20dd00 [0192.842] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c410 [0192.842] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c4b0 [0192.842] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\netfx_Extended_x86.msi.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x86.msi.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e574, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1dc [0192.842] GetFileType (hFile=0x1dc) returned 0x1 [0192.843] GetLastError () returned 0xb7 [0192.843] SetLastError (dwErrCode=0xb7) [0192.843] GetLastError () returned 0xb7 [0192.843] SetLastError (dwErrCode=0xb7) [0192.843] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205290 | out: hHeap=0x1f0000) returned 1 [0192.843] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205130 | out: hHeap=0x1f0000) returned 1 [0192.843] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ff0 [0192.843] GetLastError () returned 0xb7 [0192.843] SetLastError (dwErrCode=0xb7) [0192.843] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ff0 | out: hHeap=0x1f0000) returned 1 [0192.843] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x2051f0 [0192.843] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ff0 [0192.843] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205290 [0192.843] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb8) returned 0x226388 [0192.843] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c470 [0192.844] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c490 [0192.844] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x38) returned 0x2147d0 [0192.844] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\netfx_Extended_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x86.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e56c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0192.844] GetFileType (hFile=0x1e0) returned 0x1 [0192.845] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x220c30 [0192.845] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e4c8, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e4c8*=0x1000, lpOverlapped=0x0) returned 1 [0192.884] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x234b90 [0192.885] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x234f98 [0192.886] GetLastError () returned 0x0 [0192.886] SetLastError (dwErrCode=0x0) [0192.886] GetLastError () returned 0x0 [0192.886] SetLastError (dwErrCode=0x0) [0192.887] GetLastError () returned 0x0 [0192.887] SetLastError (dwErrCode=0x0) [0192.887] GetLastError () returned 0x0 [0192.887] SetLastError (dwErrCode=0x0) [0192.887] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0192.889] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0192.891] GetLastError () returned 0x0 [0192.891] SetLastError (dwErrCode=0x0) [0192.891] GetLastError () returned 0x0 [0192.891] SetLastError (dwErrCode=0x0) [0192.891] GetLastError () returned 0x0 [0192.991] SetLastError (dwErrCode=0x0) [0192.991] GetLastError () returned 0x0 [0192.991] SetLastError (dwErrCode=0x0) [0192.991] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0192.992] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0192.993] GetLastError () returned 0x0 [0192.993] SetLastError (dwErrCode=0x0) [0192.993] GetLastError () returned 0x0 [0192.993] SetLastError (dwErrCode=0x0) [0192.993] GetLastError () returned 0x0 [0192.994] SetLastError (dwErrCode=0x0) [0192.994] GetLastError () returned 0x0 [0192.994] SetLastError (dwErrCode=0x0) [0192.994] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0192.995] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0192.995] GetLastError () returned 0x0 [0192.996] SetLastError (dwErrCode=0x0) [0192.996] GetLastError () returned 0x0 [0192.996] SetLastError (dwErrCode=0x0) [0192.997] GetLastError () returned 0x0 [0192.998] SetLastError (dwErrCode=0x0) [0192.998] GetLastError () returned 0x0 [0192.998] SetLastError (dwErrCode=0x0) [0192.998] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0192.999] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0193.000] GetLastError () returned 0x0 [0193.000] SetLastError (dwErrCode=0x0) [0193.000] GetLastError () returned 0x0 [0193.000] SetLastError (dwErrCode=0x0) [0193.000] GetLastError () returned 0x0 [0193.000] SetLastError (dwErrCode=0x0) [0193.001] GetLastError () returned 0x0 [0193.001] SetLastError (dwErrCode=0x0) [0193.001] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0193.002] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0193.002] GetLastError () returned 0x0 [0193.002] SetLastError (dwErrCode=0x0) [0193.003] GetLastError () returned 0x0 [0193.003] SetLastError (dwErrCode=0x0) [0193.004] GetLastError () returned 0x0 [0193.004] SetLastError (dwErrCode=0x0) [0193.004] GetLastError () returned 0x0 [0193.004] SetLastError (dwErrCode=0x0) [0193.005] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0193.006] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0193.006] GetLastError () returned 0x0 [0193.006] SetLastError (dwErrCode=0x0) [0193.007] GetLastError () returned 0x0 [0193.007] SetLastError (dwErrCode=0x0) [0193.007] GetLastError () returned 0x0 [0193.007] SetLastError (dwErrCode=0x0) [0193.008] GetLastError () returned 0x0 [0193.008] SetLastError (dwErrCode=0x0) [0193.008] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0193.009] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0193.009] GetLastError () returned 0x0 [0193.009] SetLastError (dwErrCode=0x0) [0193.010] GetLastError () returned 0x0 [0193.010] SetLastError (dwErrCode=0x0) [0193.010] GetLastError () returned 0x0 [0193.010] SetLastError (dwErrCode=0x0) [0193.011] GetLastError () returned 0x0 [0193.011] SetLastError (dwErrCode=0x0) [0193.011] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0193.012] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0193.012] GetLastError () returned 0x0 [0193.012] SetLastError (dwErrCode=0x0) [0193.013] GetLastError () returned 0x0 [0193.013] SetLastError (dwErrCode=0x0) [0193.014] GetLastError () returned 0x0 [0193.014] SetLastError (dwErrCode=0x0) [0193.014] GetLastError () returned 0x0 [0193.014] SetLastError (dwErrCode=0x0) [0193.015] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0193.016] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0193.016] GetLastError () returned 0x0 [0193.017] SetLastError (dwErrCode=0x0) [0193.017] GetLastError () returned 0x0 [0193.017] SetLastError (dwErrCode=0x0) [0193.017] GetLastError () returned 0x0 [0193.017] SetLastError (dwErrCode=0x0) [0193.018] GetLastError () returned 0x0 [0193.018] SetLastError (dwErrCode=0x0) [0193.019] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0193.019] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0193.020] GetLastError () returned 0x0 [0193.020] SetLastError (dwErrCode=0x0) [0193.020] GetLastError () returned 0x0 [0193.020] SetLastError (dwErrCode=0x0) [0193.021] GetLastError () returned 0x0 [0193.021] SetLastError (dwErrCode=0x0) [0193.021] GetLastError () returned 0x0 [0193.021] SetLastError (dwErrCode=0x0) [0193.021] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0193.022] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0193.023] GetLastError () returned 0x0 [0193.023] SetLastError (dwErrCode=0x0) [0193.023] GetLastError () returned 0x0 [0193.023] SetLastError (dwErrCode=0x0) [0193.023] GetLastError () returned 0x0 [0193.023] SetLastError (dwErrCode=0x0) [0193.024] GetLastError () returned 0x0 [0193.024] SetLastError (dwErrCode=0x0) [0193.025] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0193.025] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0193.026] GetLastError () returned 0x0 [0193.026] SetLastError (dwErrCode=0x0) [0193.026] GetLastError () returned 0x0 [0193.026] SetLastError (dwErrCode=0x0) [0193.028] GetLastError () returned 0x0 [0193.028] SetLastError (dwErrCode=0x0) [0193.028] GetLastError () returned 0x0 [0193.028] SetLastError (dwErrCode=0x0) [0193.029] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0193.029] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0193.030] GetLastError () returned 0x0 [0193.030] SetLastError (dwErrCode=0x0) [0193.030] GetLastError () returned 0x0 [0193.030] SetLastError (dwErrCode=0x0) [0193.031] GetLastError () returned 0x0 [0193.031] SetLastError (dwErrCode=0x0) [0193.349] GetLastError () returned 0x0 [0193.349] SetLastError (dwErrCode=0x0) [0193.349] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0193.352] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0193.353] GetLastError () returned 0x0 [0193.353] SetLastError (dwErrCode=0x0) [0193.353] GetLastError () returned 0x0 [0193.353] SetLastError (dwErrCode=0x0) [0193.353] GetLastError () returned 0x0 [0193.354] SetLastError (dwErrCode=0x0) [0193.354] GetLastError () returned 0x0 [0193.354] SetLastError (dwErrCode=0x0) [0193.354] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0193.354] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0193.355] GetLastError () returned 0x0 [0193.355] SetLastError (dwErrCode=0x0) [0193.355] GetLastError () returned 0x0 [0193.355] SetLastError (dwErrCode=0x0) [0193.355] GetLastError () returned 0x0 [0193.356] SetLastError (dwErrCode=0x0) [0193.356] GetLastError () returned 0x0 [0193.356] SetLastError (dwErrCode=0x0) [0193.356] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0193.357] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0193.357] GetLastError () returned 0x0 [0193.357] SetLastError (dwErrCode=0x0) [0193.357] GetLastError () returned 0x0 [0193.358] SetLastError (dwErrCode=0x0) [0193.358] GetLastError () returned 0x0 [0193.358] SetLastError (dwErrCode=0x0) [0193.358] GetLastError () returned 0x0 [0193.358] SetLastError (dwErrCode=0x0) [0193.358] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0193.396] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0193.396] GetLastError () returned 0x0 [0193.396] SetLastError (dwErrCode=0x0) [0193.396] GetLastError () returned 0x0 [0193.396] SetLastError (dwErrCode=0x0) [0193.396] GetLastError () returned 0x0 [0193.396] SetLastError (dwErrCode=0x0) [0193.397] GetLastError () returned 0x0 [0193.397] SetLastError (dwErrCode=0x0) [0193.397] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0193.397] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0193.398] GetLastError () returned 0x0 [0193.398] SetLastError (dwErrCode=0x0) [0193.398] GetLastError () returned 0x0 [0193.398] SetLastError (dwErrCode=0x0) [0193.398] GetLastError () returned 0x0 [0193.398] SetLastError (dwErrCode=0x0) [0193.398] GetLastError () returned 0x0 [0193.398] SetLastError (dwErrCode=0x0) [0193.399] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0193.399] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0193.399] GetLastError () returned 0x0 [0193.399] SetLastError (dwErrCode=0x0) [0193.400] GetLastError () returned 0x0 [0193.400] SetLastError (dwErrCode=0x0) [0193.400] GetLastError () returned 0x0 [0193.400] SetLastError (dwErrCode=0x0) [0193.400] GetLastError () returned 0x0 [0193.400] SetLastError (dwErrCode=0x0) [0193.401] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0193.401] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0193.401] GetLastError () returned 0x0 [0193.401] SetLastError (dwErrCode=0x0) [0193.401] GetLastError () returned 0x0 [0193.401] SetLastError (dwErrCode=0x0) [0193.402] GetLastError () returned 0x0 [0193.402] SetLastError (dwErrCode=0x0) [0193.402] GetLastError () returned 0x0 [0193.402] SetLastError (dwErrCode=0x0) [0193.402] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0193.402] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0193.403] GetLastError () returned 0x0 [0193.403] SetLastError (dwErrCode=0x0) [0193.403] GetLastError () returned 0x0 [0193.403] SetLastError (dwErrCode=0x0) [0193.403] GetLastError () returned 0x0 [0193.403] SetLastError (dwErrCode=0x0) [0193.403] GetLastError () returned 0x0 [0193.404] SetLastError (dwErrCode=0x0) [0193.404] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0193.404] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0193.404] GetLastError () returned 0x0 [0193.405] SetLastError (dwErrCode=0x0) [0193.405] GetLastError () returned 0x0 [0193.405] SetLastError (dwErrCode=0x0) [0193.405] GetLastError () returned 0x0 [0193.405] SetLastError (dwErrCode=0x0) [0193.405] GetLastError () returned 0x0 [0193.405] SetLastError (dwErrCode=0x0) [0193.405] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0193.406] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0193.406] GetLastError () returned 0x0 [0193.406] SetLastError (dwErrCode=0x0) [0193.407] GetLastError () returned 0x0 [0193.407] SetLastError (dwErrCode=0x0) [0193.407] GetLastError () returned 0x0 [0193.407] SetLastError (dwErrCode=0x0) [0193.407] GetLastError () returned 0x0 [0193.407] SetLastError (dwErrCode=0x0) [0193.408] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0193.408] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0193.408] GetLastError () returned 0x0 [0193.408] SetLastError (dwErrCode=0x0) [0193.409] GetLastError () returned 0x0 [0193.409] SetLastError (dwErrCode=0x0) [0193.409] GetLastError () returned 0x0 [0193.409] SetLastError (dwErrCode=0x0) [0193.409] GetLastError () returned 0x0 [0193.409] SetLastError (dwErrCode=0x0) [0193.409] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0193.409] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0193.410] GetLastError () returned 0x0 [0193.410] SetLastError (dwErrCode=0x0) [0193.410] GetLastError () returned 0x0 [0193.410] SetLastError (dwErrCode=0x0) [0193.410] GetLastError () returned 0x0 [0193.410] SetLastError (dwErrCode=0x0) [0193.410] GetLastError () returned 0x0 [0193.410] SetLastError (dwErrCode=0x0) [0193.410] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0193.411] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0193.411] GetLastError () returned 0x0 [0193.411] SetLastError (dwErrCode=0x0) [0193.411] GetLastError () returned 0x0 [0193.411] SetLastError (dwErrCode=0x0) [0193.411] GetLastError () returned 0x0 [0193.411] SetLastError (dwErrCode=0x0) [0193.412] GetLastError () returned 0x0 [0193.412] SetLastError (dwErrCode=0x0) [0193.412] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0193.412] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0193.412] GetLastError () returned 0x0 [0193.412] SetLastError (dwErrCode=0x0) [0193.412] GetLastError () returned 0x0 [0193.412] SetLastError (dwErrCode=0x0) [0193.412] GetLastError () returned 0x0 [0193.412] SetLastError (dwErrCode=0x0) [0193.413] GetLastError () returned 0x0 [0193.413] SetLastError (dwErrCode=0x0) [0193.413] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0193.413] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0193.413] GetLastError () returned 0x0 [0193.413] SetLastError (dwErrCode=0x0) [0193.413] GetLastError () returned 0x0 [0193.414] SetLastError (dwErrCode=0x0) [0193.414] GetLastError () returned 0x0 [0193.414] SetLastError (dwErrCode=0x0) [0193.414] GetLastError () returned 0x0 [0193.414] SetLastError (dwErrCode=0x0) [0193.414] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0193.414] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0193.414] GetLastError () returned 0x0 [0193.414] SetLastError (dwErrCode=0x0) [0193.414] GetLastError () returned 0x0 [0193.414] SetLastError (dwErrCode=0x0) [0193.414] GetLastError () returned 0x0 [0193.415] SetLastError (dwErrCode=0x0) [0193.415] GetLastError () returned 0x0 [0193.415] SetLastError (dwErrCode=0x0) [0193.415] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0193.415] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0193.415] GetLastError () returned 0x0 [0193.415] SetLastError (dwErrCode=0x0) [0193.415] GetLastError () returned 0x0 [0193.415] SetLastError (dwErrCode=0x0) [0193.415] GetLastError () returned 0x0 [0193.416] SetLastError (dwErrCode=0x0) [0193.416] GetLastError () returned 0x0 [0193.416] SetLastError (dwErrCode=0x0) [0193.416] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0193.416] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0193.416] GetLastError () returned 0x0 [0193.416] SetLastError (dwErrCode=0x0) [0193.417] GetLastError () returned 0x0 [0193.417] SetLastError (dwErrCode=0x0) [0193.417] GetLastError () returned 0x0 [0193.417] SetLastError (dwErrCode=0x0) [0193.417] GetLastError () returned 0x0 [0193.417] SetLastError (dwErrCode=0x0) [0193.417] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0193.417] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0193.418] GetLastError () returned 0x0 [0193.418] SetLastError (dwErrCode=0x0) [0193.418] GetLastError () returned 0x0 [0193.418] SetLastError (dwErrCode=0x0) [0193.418] GetLastError () returned 0x0 [0193.418] SetLastError (dwErrCode=0x0) [0193.418] GetLastError () returned 0x0 [0193.418] SetLastError (dwErrCode=0x0) [0193.418] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0193.418] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0193.419] GetLastError () returned 0x0 [0193.419] SetLastError (dwErrCode=0x0) [0193.419] GetLastError () returned 0x0 [0193.419] SetLastError (dwErrCode=0x0) [0193.419] GetLastError () returned 0x0 [0193.419] SetLastError (dwErrCode=0x0) [0193.419] GetLastError () returned 0x0 [0193.419] SetLastError (dwErrCode=0x0) [0193.419] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0193.419] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0193.420] GetLastError () returned 0x0 [0193.420] SetLastError (dwErrCode=0x0) [0193.420] GetLastError () returned 0x0 [0193.420] SetLastError (dwErrCode=0x0) [0193.420] GetLastError () returned 0x0 [0193.420] SetLastError (dwErrCode=0x0) [0193.420] GetLastError () returned 0x0 [0193.420] SetLastError (dwErrCode=0x0) [0193.420] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0193.420] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0193.420] GetLastError () returned 0x0 [0193.421] SetLastError (dwErrCode=0x0) [0193.421] GetLastError () returned 0x0 [0193.421] SetLastError (dwErrCode=0x0) [0193.421] GetLastError () returned 0x0 [0193.421] SetLastError (dwErrCode=0x0) [0193.421] GetLastError () returned 0x0 [0193.421] SetLastError (dwErrCode=0x0) [0193.421] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0193.744] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0193.745] GetLastError () returned 0x0 [0193.745] SetLastError (dwErrCode=0x0) [0193.745] GetLastError () returned 0x0 [0193.745] SetLastError (dwErrCode=0x0) [0193.745] GetLastError () returned 0x0 [0193.745] SetLastError (dwErrCode=0x0) [0193.745] GetLastError () returned 0x0 [0193.745] SetLastError (dwErrCode=0x0) [0193.746] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0193.746] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0193.746] GetLastError () returned 0x0 [0193.746] SetLastError (dwErrCode=0x0) [0193.746] GetLastError () returned 0x0 [0193.746] SetLastError (dwErrCode=0x0) [0193.746] GetLastError () returned 0x0 [0193.746] SetLastError (dwErrCode=0x0) [0193.747] GetLastError () returned 0x0 [0193.747] SetLastError (dwErrCode=0x0) [0193.747] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0193.747] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0193.747] GetLastError () returned 0x0 [0193.747] SetLastError (dwErrCode=0x0) [0193.747] GetLastError () returned 0x0 [0193.747] SetLastError (dwErrCode=0x0) [0193.747] GetLastError () returned 0x0 [0193.748] SetLastError (dwErrCode=0x0) [0193.748] GetLastError () returned 0x0 [0193.748] SetLastError (dwErrCode=0x0) [0193.748] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0193.748] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0193.748] GetLastError () returned 0x0 [0193.748] SetLastError (dwErrCode=0x0) [0193.749] GetLastError () returned 0x0 [0193.749] SetLastError (dwErrCode=0x0) [0193.749] GetLastError () returned 0x0 [0193.749] SetLastError (dwErrCode=0x0) [0193.749] GetLastError () returned 0x0 [0193.750] SetLastError (dwErrCode=0x0) [0193.750] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0193.750] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0193.750] GetLastError () returned 0x0 [0193.750] SetLastError (dwErrCode=0x0) [0193.751] GetLastError () returned 0x0 [0193.751] SetLastError (dwErrCode=0x0) [0193.751] GetLastError () returned 0x0 [0193.751] SetLastError (dwErrCode=0x0) [0193.751] GetLastError () returned 0x0 [0193.751] SetLastError (dwErrCode=0x0) [0193.751] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0193.752] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0193.752] GetLastError () returned 0x0 [0193.752] SetLastError (dwErrCode=0x0) [0193.752] GetLastError () returned 0x0 [0193.752] SetLastError (dwErrCode=0x0) [0193.753] GetLastError () returned 0x0 [0193.753] SetLastError (dwErrCode=0x0) [0193.753] GetLastError () returned 0x0 [0193.753] SetLastError (dwErrCode=0x0) [0193.753] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0193.753] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0193.754] GetLastError () returned 0x0 [0193.754] SetLastError (dwErrCode=0x0) [0193.754] GetLastError () returned 0x0 [0193.754] SetLastError (dwErrCode=0x0) [0193.754] GetLastError () returned 0x0 [0193.754] SetLastError (dwErrCode=0x0) [0193.754] GetLastError () returned 0x0 [0193.755] SetLastError (dwErrCode=0x0) [0193.755] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0193.755] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0193.755] GetLastError () returned 0x0 [0193.755] SetLastError (dwErrCode=0x0) [0193.756] GetLastError () returned 0x0 [0193.756] SetLastError (dwErrCode=0x0) [0193.756] GetLastError () returned 0x0 [0193.756] SetLastError (dwErrCode=0x0) [0193.756] GetLastError () returned 0x0 [0193.756] SetLastError (dwErrCode=0x0) [0193.756] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0193.757] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0193.757] GetLastError () returned 0x0 [0193.757] SetLastError (dwErrCode=0x0) [0193.757] GetLastError () returned 0x0 [0193.757] SetLastError (dwErrCode=0x0) [0193.757] GetLastError () returned 0x0 [0193.758] SetLastError (dwErrCode=0x0) [0193.758] GetLastError () returned 0x0 [0193.758] SetLastError (dwErrCode=0x0) [0193.758] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0193.758] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0193.758] GetLastError () returned 0x0 [0193.759] SetLastError (dwErrCode=0x0) [0193.759] GetLastError () returned 0x0 [0193.759] SetLastError (dwErrCode=0x0) [0193.759] GetLastError () returned 0x0 [0193.759] SetLastError (dwErrCode=0x0) [0193.759] GetLastError () returned 0x0 [0193.759] SetLastError (dwErrCode=0x0) [0193.759] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0193.761] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0193.761] GetLastError () returned 0x0 [0193.761] SetLastError (dwErrCode=0x0) [0193.761] GetLastError () returned 0x0 [0193.761] SetLastError (dwErrCode=0x0) [0193.761] GetLastError () returned 0x0 [0193.761] SetLastError (dwErrCode=0x0) [0193.761] GetLastError () returned 0x0 [0193.762] SetLastError (dwErrCode=0x0) [0193.762] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0193.762] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0193.762] GetLastError () returned 0x0 [0193.762] SetLastError (dwErrCode=0x0) [0193.762] GetLastError () returned 0x0 [0193.762] SetLastError (dwErrCode=0x0) [0193.762] GetLastError () returned 0x0 [0193.762] SetLastError (dwErrCode=0x0) [0193.762] GetLastError () returned 0x0 [0193.762] SetLastError (dwErrCode=0x0) [0193.762] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0193.763] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0193.763] GetLastError () returned 0x0 [0193.763] SetLastError (dwErrCode=0x0) [0193.763] GetLastError () returned 0x0 [0193.763] SetLastError (dwErrCode=0x0) [0193.763] GetLastError () returned 0x0 [0193.763] SetLastError (dwErrCode=0x0) [0193.763] GetLastError () returned 0x0 [0193.763] SetLastError (dwErrCode=0x0) [0193.763] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0193.763] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0193.764] GetLastError () returned 0x0 [0193.764] SetLastError (dwErrCode=0x0) [0193.764] GetLastError () returned 0x0 [0193.764] SetLastError (dwErrCode=0x0) [0193.764] GetLastError () returned 0x0 [0193.764] SetLastError (dwErrCode=0x0) [0193.764] GetLastError () returned 0x0 [0193.764] SetLastError (dwErrCode=0x0) [0193.764] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0193.764] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0193.764] GetLastError () returned 0x0 [0193.764] SetLastError (dwErrCode=0x0) [0193.765] GetLastError () returned 0x0 [0193.765] SetLastError (dwErrCode=0x0) [0193.765] GetLastError () returned 0x0 [0193.766] SetLastError (dwErrCode=0x0) [0193.766] GetLastError () returned 0x0 [0193.766] SetLastError (dwErrCode=0x0) [0193.767] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0193.767] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0193.767] GetLastError () returned 0x0 [0193.767] SetLastError (dwErrCode=0x0) [0193.767] GetLastError () returned 0x0 [0193.767] SetLastError (dwErrCode=0x0) [0193.767] GetLastError () returned 0x0 [0193.767] SetLastError (dwErrCode=0x0) [0193.767] GetLastError () returned 0x0 [0193.767] SetLastError (dwErrCode=0x0) [0193.767] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0193.768] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0193.768] GetLastError () returned 0x0 [0193.768] SetLastError (dwErrCode=0x0) [0193.768] GetLastError () returned 0x0 [0193.768] SetLastError (dwErrCode=0x0) [0193.768] GetLastError () returned 0x0 [0193.768] SetLastError (dwErrCode=0x0) [0193.768] GetLastError () returned 0x0 [0193.768] SetLastError (dwErrCode=0x0) [0193.768] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0193.768] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0193.769] GetLastError () returned 0x0 [0193.769] SetLastError (dwErrCode=0x0) [0193.769] GetLastError () returned 0x0 [0193.769] SetLastError (dwErrCode=0x0) [0193.769] GetLastError () returned 0x0 [0193.769] SetLastError (dwErrCode=0x0) [0193.769] GetLastError () returned 0x0 [0193.769] SetLastError (dwErrCode=0x0) [0193.769] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0193.769] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0193.769] GetLastError () returned 0x0 [0193.770] SetLastError (dwErrCode=0x0) [0193.770] GetLastError () returned 0x0 [0193.770] SetLastError (dwErrCode=0x0) [0193.770] GetLastError () returned 0x0 [0193.770] SetLastError (dwErrCode=0x0) [0193.770] GetLastError () returned 0x0 [0193.770] SetLastError (dwErrCode=0x0) [0193.770] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0193.770] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0193.770] GetLastError () returned 0x0 [0193.770] SetLastError (dwErrCode=0x0) [0193.770] GetLastError () returned 0x0 [0193.771] SetLastError (dwErrCode=0x0) [0193.771] GetLastError () returned 0x0 [0193.771] SetLastError (dwErrCode=0x0) [0193.771] GetLastError () returned 0x0 [0193.771] SetLastError (dwErrCode=0x0) [0193.771] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0193.771] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0193.771] GetLastError () returned 0x0 [0193.771] SetLastError (dwErrCode=0x0) [0193.771] GetLastError () returned 0x0 [0193.771] SetLastError (dwErrCode=0x0) [0193.771] GetLastError () returned 0x0 [0193.771] SetLastError (dwErrCode=0x0) [0193.771] GetLastError () returned 0x0 [0193.772] SetLastError (dwErrCode=0x0) [0193.772] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0193.772] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0193.772] GetLastError () returned 0x0 [0193.772] SetLastError (dwErrCode=0x0) [0193.772] GetLastError () returned 0x0 [0193.772] SetLastError (dwErrCode=0x0) [0193.772] GetLastError () returned 0x0 [0193.772] SetLastError (dwErrCode=0x0) [0193.772] GetLastError () returned 0x0 [0193.772] SetLastError (dwErrCode=0x0) [0193.772] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0193.773] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0193.773] GetLastError () returned 0x0 [0193.773] SetLastError (dwErrCode=0x0) [0193.773] GetLastError () returned 0x0 [0193.773] SetLastError (dwErrCode=0x0) [0193.773] GetLastError () returned 0x0 [0193.773] SetLastError (dwErrCode=0x0) [0193.773] GetLastError () returned 0x0 [0193.773] SetLastError (dwErrCode=0x0) [0193.773] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0193.773] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0193.774] GetLastError () returned 0x0 [0193.774] SetLastError (dwErrCode=0x0) [0193.774] GetLastError () returned 0x0 [0193.774] SetLastError (dwErrCode=0x0) [0193.774] GetLastError () returned 0x0 [0193.774] SetLastError (dwErrCode=0x0) [0193.774] GetLastError () returned 0x0 [0193.774] SetLastError (dwErrCode=0x0) [0193.774] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0193.774] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0193.775] GetLastError () returned 0x0 [0193.775] SetLastError (dwErrCode=0x0) [0193.775] GetLastError () returned 0x0 [0193.775] SetLastError (dwErrCode=0x0) [0193.775] GetLastError () returned 0x0 [0193.775] SetLastError (dwErrCode=0x0) [0193.775] GetLastError () returned 0x0 [0193.775] SetLastError (dwErrCode=0x0) [0193.775] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0193.775] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0193.776] GetLastError () returned 0x0 [0193.776] SetLastError (dwErrCode=0x0) [0193.776] GetLastError () returned 0x0 [0193.776] SetLastError (dwErrCode=0x0) [0193.776] GetLastError () returned 0x0 [0193.776] SetLastError (dwErrCode=0x0) [0193.776] GetLastError () returned 0x0 [0193.776] SetLastError (dwErrCode=0x0) [0193.776] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0193.777] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0193.777] GetLastError () returned 0x0 [0193.777] SetLastError (dwErrCode=0x0) [0193.777] GetLastError () returned 0x0 [0193.777] SetLastError (dwErrCode=0x0) [0193.777] GetLastError () returned 0x0 [0193.777] SetLastError (dwErrCode=0x0) [0193.777] GetLastError () returned 0x0 [0193.777] SetLastError (dwErrCode=0x0) [0193.777] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0193.778] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0193.778] GetLastError () returned 0x0 [0193.778] SetLastError (dwErrCode=0x0) [0193.778] GetLastError () returned 0x0 [0193.778] SetLastError (dwErrCode=0x0) [0193.778] GetLastError () returned 0x0 [0193.778] SetLastError (dwErrCode=0x0) [0193.778] GetLastError () returned 0x0 [0193.778] SetLastError (dwErrCode=0x0) [0193.778] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0193.779] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0193.779] GetLastError () returned 0x0 [0193.779] SetLastError (dwErrCode=0x0) [0193.779] GetLastError () returned 0x0 [0193.779] SetLastError (dwErrCode=0x0) [0193.779] GetLastError () returned 0x0 [0193.779] SetLastError (dwErrCode=0x0) [0193.779] GetLastError () returned 0x0 [0193.779] SetLastError (dwErrCode=0x0) [0193.779] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0193.779] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0194.073] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0194.073] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0194.073] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0194.074] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0194.074] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0194.074] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0194.074] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0194.075] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0194.075] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0194.075] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0194.075] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0194.076] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0194.076] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0194.076] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0194.076] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0194.077] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0194.077] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0194.078] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0194.079] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0194.079] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0194.079] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0194.079] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0194.080] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0194.080] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0194.080] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0194.081] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0194.082] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0194.082] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0194.082] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0194.083] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0194.083] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0194.083] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0194.084] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0194.084] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0194.084] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0194.085] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0194.085] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0194.085] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0194.085] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0194.086] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0194.086] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0194.086] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0194.087] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0194.087] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0194.087] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0194.088] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0194.088] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0194.088] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0194.089] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0194.089] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0194.090] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0194.090] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0194.090] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0194.091] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0194.091] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0194.091] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0194.092] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0194.092] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0194.093] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0194.093] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0194.093] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0194.094] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0194.094] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0194.121] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0194.122] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0194.122] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0194.122] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0194.123] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0194.123] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0194.123] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0194.124] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0194.124] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0194.124] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0194.125] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0194.125] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0194.125] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0194.125] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0194.125] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0194.126] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0194.126] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0194.126] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0194.126] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0194.126] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0194.127] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0194.127] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0194.127] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0194.127] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0194.128] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0194.128] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0194.128] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0194.129] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0194.129] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0194.129] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0194.130] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0194.130] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0194.130] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0194.130] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0194.130] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0194.131] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0194.131] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0194.131] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0194.131] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0194.132] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0194.132] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0194.132] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0194.132] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0194.132] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0194.133] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0194.133] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0194.133] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0194.134] ReadFile (in: hFile=0x1e0, lpBuffer=0x220c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x220c30*, lpNumberOfBytesRead=0x1a1e558*=0x0, lpOverlapped=0x0) returned 1 [0194.134] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0194.134] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e30c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e30c*=0x1000, lpOverlapped=0x0) returned 1 [0194.134] GetLastError () returned 0x0 [0194.134] WriteFile (in: hFile=0x1dc, lpBuffer=0x234f98*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1a1e44c, lpOverlapped=0x0 | out: lpBuffer=0x234f98*, lpNumberOfBytesWritten=0x1a1e44c*=0x10, lpOverlapped=0x0) returned 1 [0194.135] GetLastError () returned 0x0 [0194.135] CloseHandle (hObject=0x1d8) returned 1 [0194.514] CloseHandle (hObject=0x1c0) returned 1 [0194.514] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c5b0 [0194.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c5c0 [0194.516] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\netfx_Extended_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x86.msi"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e628, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0194.585] GetFileType (hFile=0x1c0) returned 0x1 [0194.586] GetLastError () returned 0xb7 [0194.586] SetLastError (dwErrCode=0xb7) [0194.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x241de8 [0194.586] GetLastError () returned 0xb7 [0194.586] SetLastError (dwErrCode=0xb7) [0194.586] WriteFile (in: hFile=0x1c0, lpBuffer=0x1a1d2bc*, nNumberOfBytesToWrite=0x1, lpNumberOfBytesWritten=0x1a1d2b4, lpOverlapped=0x0 | out: lpBuffer=0x1a1d2bc*, lpNumberOfBytesWritten=0x1a1d2b4*=0x1, lpOverlapped=0x0) returned 1 [0194.588] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x241de8 | out: hHeap=0x1f0000) returned 1 [0194.588] CloseHandle (hObject=0x1c0) returned 1 [0194.588] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\netfx_Extended_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x86.msi")) returned 0 [0194.589] GetLastError () returned 0x20 [0194.589] GetLastError () returned 0x20 [0194.589] SetLastError (dwErrCode=0x20) [0194.589] GetLastError () returned 0x20 [0194.589] SetLastError (dwErrCode=0x20) [0194.589] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215af8 [0194.589] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b9e0 [0194.589] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20bc38 [0194.589] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x215ca8 [0194.589] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ff0 [0194.589] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204fb0 [0194.589] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x21c660 [0194.589] GetLastError () returned 0x20 [0194.589] SetLastError (dwErrCode=0x20) [0194.589] GetLastError () returned 0x20 [0194.590] SetLastError (dwErrCode=0x20) [0194.590] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ff0 | out: hHeap=0x1f0000) returned 1 [0194.590] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204fb0 | out: hHeap=0x1f0000) returned 1 [0194.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x1fef78 [0194.590] GetLastError () returned 0x20 [0194.590] SetLastError (dwErrCode=0x20) [0194.590] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0194.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x1fef78 [0194.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a8a0 [0194.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x20bd00 [0194.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2232f0 [0194.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c690 [0194.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20bd50 [0194.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210078 [0194.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c670 [0194.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20bb98 [0194.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2100a8 [0194.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x22b2f0 [0194.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x24fb98 [0194.590] GetLastError () returned 0x20 [0194.591] SetLastError (dwErrCode=0x20) [0194.591] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0194.591] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x21c680 [0194.591] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x21c6b0 [0194.591] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c6c0 [0194.591] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c6b0 | out: hHeap=0x1f0000) returned 1 [0194.591] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c710 [0194.591] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c6c0 | out: hHeap=0x1f0000) returned 1 [0194.591] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c680 | out: hHeap=0x1f0000) returned 1 [0194.591] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c680 [0194.591] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x20ff28 [0194.591] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c680 | out: hHeap=0x1f0000) returned 1 [0194.591] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x20ff70 [0194.591] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff28 | out: hHeap=0x1f0000) returned 1 [0194.591] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c710 | out: hHeap=0x1f0000) returned 1 [0194.591] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x20ff28 [0194.591] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210210 [0194.592] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff28 | out: hHeap=0x1f0000) returned 1 [0194.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff28 [0194.592] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0194.592] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff70 | out: hHeap=0x1f0000) returned 1 [0194.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff70 [0194.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x2052d0 [0194.592] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff70 | out: hHeap=0x1f0000) returned 1 [0194.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204fb0 [0194.592] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2052d0 | out: hHeap=0x1f0000) returned 1 [0194.592] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff28 | out: hHeap=0x1f0000) returned 1 [0194.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x2052d0 [0194.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x22b5e8 [0194.592] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2052d0 | out: hHeap=0x1f0000) returned 1 [0194.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x2052d0 [0194.592] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b5e8 | out: hHeap=0x1f0000) returned 1 [0194.592] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204fb0 | out: hHeap=0x1f0000) returned 1 [0194.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204fb0 [0194.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x2065f8 [0194.593] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204fb0 | out: hHeap=0x1f0000) returned 1 [0194.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x22b7c8 [0194.593] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2065f8 | out: hHeap=0x1f0000) returned 1 [0194.593] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2052d0 | out: hHeap=0x1f0000) returned 1 [0194.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c680 [0194.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x20ff28 [0194.593] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c680 | out: hHeap=0x1f0000) returned 1 [0194.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff70 [0194.593] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff28 | out: hHeap=0x1f0000) returned 1 [0194.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204fb0 [0194.593] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff70 | out: hHeap=0x1f0000) returned 1 [0194.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206958 [0194.593] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204fb0 | out: hHeap=0x1f0000) returned 1 [0194.593] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206958 | out: hHeap=0x1f0000) returned 1 [0194.593] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b7c8 | out: hHeap=0x1f0000) returned 1 [0194.593] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b9e0 | out: hHeap=0x1f0000) returned 1 [0194.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0194.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2232f0 | out: hHeap=0x1f0000) returned 1 [0194.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20bd00 | out: hHeap=0x1f0000) returned 1 [0194.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0194.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b3e0 [0194.594] CryptAcquireContextA (in: phProv=0x1a1e758, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1a1e758*=0x229be8) returned 1 [0194.596] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x22b3e0 | out: pbBuffer=0x22b3e0) returned 1 [0194.596] CryptReleaseContext (hProv=0x229be8, dwFlags=0x0) returned 1 [0194.597] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b3e0 | out: hHeap=0x1f0000) returned 1 [0194.597] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b5e8 [0194.597] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b458 [0194.597] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1ff058 [0194.597] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b5e8 | out: hHeap=0x1f0000) returned 1 [0194.597] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0194.597] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1ff058 | out: hHeap=0x1f0000) returned 1 [0194.597] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2397c8 [0194.597] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff28 [0194.597] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x22a908 [0194.597] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x22b5e8 [0194.597] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2232f0 [0194.597] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x2052d0 [0194.597] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a970 [0194.597] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x22b638 [0194.598] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x225048 [0194.598] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c6b0 [0194.598] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b6b0 [0194.598] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff70 [0194.598] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c710 [0194.598] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b480 [0194.598] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0194.598] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0194.598] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b480 | out: hHeap=0x1f0000) returned 1 [0194.598] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c710 | out: hHeap=0x1f0000) returned 1 [0194.598] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff70 | out: hHeap=0x1f0000) returned 1 [0194.598] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b6b0 | out: hHeap=0x1f0000) returned 1 [0194.598] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c6b0 | out: hHeap=0x1f0000) returned 1 [0194.599] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225048 | out: hHeap=0x1f0000) returned 1 [0194.599] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b638 | out: hHeap=0x1f0000) returned 1 [0194.599] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a970 | out: hHeap=0x1f0000) returned 1 [0194.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x1fefe8 [0194.599] GetLastError () returned 0x0 [0194.599] SetLastError (dwErrCode=0x0) [0194.599] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fefe8 | out: hHeap=0x1f0000) returned 1 [0194.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x1fefe8 [0194.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0194.599] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0194.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0194.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0194.599] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0194.599] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0194.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x214150 [0194.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x225048 [0194.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0194.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0194.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0194.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0194.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x225150 [0194.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0194.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0194.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fa88 [0194.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x253678 [0194.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x225258 [0194.600] QueryPerformanceCounter (in: lpPerformanceCount=0x1a1e2a8 | out: lpPerformanceCount=0x1a1e2a8*=35196910997) returned 1 [0194.600] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1a1e2e8 | out: lpSystemTimeAsFileTime=0x1a1e2e8) [0194.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x21c6c0 [0194.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b318 [0194.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204fb0 [0194.601] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204fb0 | out: hHeap=0x1f0000) returned 1 [0194.601] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b318 | out: hHeap=0x1f0000) returned 1 [0194.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b4d0 [0194.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204fb0 [0194.601] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204fb0 | out: hHeap=0x1f0000) returned 1 [0194.601] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b4d0 | out: hHeap=0x1f0000) returned 1 [0194.601] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c6c0 | out: hHeap=0x1f0000) returned 1 [0194.601] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0194.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x1ff058 [0194.601] GetLastError () returned 0x0 [0194.601] SetLastError (dwErrCode=0x0) [0194.601] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1ff058 | out: hHeap=0x1f0000) returned 1 [0194.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0194.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0194.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0194.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b3e0 [0194.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b318 [0194.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0194.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0194.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b638 [0194.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0194.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x260498 [0194.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0194.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2609b8 [0194.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0194.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x260bd8 [0194.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609b8 | out: hHeap=0x1f0000) returned 1 [0194.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b6b0 [0194.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b7c8 [0194.603] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b6b0 | out: hHeap=0x1f0000) returned 1 [0194.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0194.603] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b7c8 | out: hHeap=0x1f0000) returned 1 [0194.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2609b8 [0194.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x223bb8 [0194.603] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223bb8 | out: hHeap=0x1f0000) returned 1 [0194.603] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609b8 | out: hHeap=0x1f0000) returned 1 [0194.603] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bd8 | out: hHeap=0x1f0000) returned 1 [0194.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x20ff70 [0194.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215f30 [0194.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b750 [0194.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b4d0 [0194.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b480 [0194.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b6b0 [0194.603] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b4d0 | out: hHeap=0x1f0000) returned 1 [0194.603] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b750 | out: hHeap=0x1f0000) returned 1 [0194.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2609b8 [0194.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b340 [0194.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b750 [0194.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b340 | out: hHeap=0x1f0000) returned 1 [0194.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0194.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b750 | out: hHeap=0x1f0000) returned 1 [0194.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2068c8 [0194.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x223bb8 [0194.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223bb8 | out: hHeap=0x1f0000) returned 1 [0194.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2068c8 | out: hHeap=0x1f0000) returned 1 [0194.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b638 | out: hHeap=0x1f0000) returned 1 [0194.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0194.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0194.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609b8 | out: hHeap=0x1f0000) returned 1 [0194.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204fb0 [0194.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0194.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0194.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b318 | out: hHeap=0x1f0000) returned 1 [0194.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x237938 [0194.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0194.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b6b0 | out: hHeap=0x1f0000) returned 1 [0194.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b480 | out: hHeap=0x1f0000) returned 1 [0194.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215f30 | out: hHeap=0x1f0000) returned 1 [0194.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0194.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204fb0 | out: hHeap=0x1f0000) returned 1 [0194.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff70 | out: hHeap=0x1f0000) returned 1 [0194.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0194.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x237120 [0194.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237120 | out: hHeap=0x1f0000) returned 1 [0194.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260498 | out: hHeap=0x1f0000) returned 1 [0194.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0194.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0194.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0194.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0194.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b3e0 | out: hHeap=0x1f0000) returned 1 [0194.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0194.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0194.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x237498 [0194.606] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x236468 [0194.606] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237498 | out: hHeap=0x1f0000) returned 1 [0194.606] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0194.606] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237938 | out: hHeap=0x1f0000) returned 1 [0194.606] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0194.606] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225150 | out: hHeap=0x1f0000) returned 1 [0194.606] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214150 | out: hHeap=0x1f0000) returned 1 [0194.606] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x260498 [0194.606] GetLastError () returned 0x0 [0194.606] SetLastError (dwErrCode=0x0) [0194.606] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fefe8 | out: hHeap=0x1f0000) returned 1 [0194.606] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c5a0 [0194.606] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c6b0 [0194.606] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\netfx_Extended_x86.msi.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x86.msi.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e658, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0194.607] GetFileType (hFile=0x1c0) returned 0x1 [0194.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x241de8 [0194.607] SetFilePointerEx (in: hFile=0x1c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1a1e5e0 | out: lpNewFilePointer=0x0) returned 1 [0194.607] GetLastError () returned 0xb7 [0194.607] SetLastError (dwErrCode=0xb7) [0194.607] GetLastError () returned 0xb7 [0194.607] SetLastError (dwErrCode=0xb7) [0194.608] SetFilePointerEx (in: hFile=0x1c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1a1e6a4 | out: lpNewFilePointer=0x0) returned 1 [0194.608] WriteFile (in: hFile=0x1c0, lpBuffer=0x241de8*, nNumberOfBytesToWrite=0x103, lpNumberOfBytesWritten=0x1a1e708, lpOverlapped=0x0 | out: lpBuffer=0x241de8*, lpNumberOfBytesWritten=0x1a1e708*=0x103, lpOverlapped=0x0) returned 1 [0194.608] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x241de8 | out: hHeap=0x1f0000) returned 1 [0194.608] CloseHandle (hObject=0x1c0) returned 1 [0194.859] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c6b0 | out: hHeap=0x1f0000) returned 1 [0194.859] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5a0 | out: hHeap=0x1f0000) returned 1 [0194.859] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225048 | out: hHeap=0x1f0000) returned 1 [0194.859] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2232f0 | out: hHeap=0x1f0000) returned 1 [0194.859] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b5e8 | out: hHeap=0x1f0000) returned 1 [0194.859] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2052d0 | out: hHeap=0x1f0000) returned 1 [0194.859] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a908 | out: hHeap=0x1f0000) returned 1 [0194.859] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff28 | out: hHeap=0x1f0000) returned 1 [0194.859] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2397c8 | out: hHeap=0x1f0000) returned 1 [0194.859] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260498 | out: hHeap=0x1f0000) returned 1 [0194.859] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b458 | out: hHeap=0x1f0000) returned 1 [0194.860] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0194.860] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x253678 | out: hHeap=0x1f0000) returned 1 [0194.860] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225258 | out: hHeap=0x1f0000) returned 1 [0194.860] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0194.860] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c660 | out: hHeap=0x1f0000) returned 1 [0194.860] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2100a8 | out: hHeap=0x1f0000) returned 1 [0194.860] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20bb98 | out: hHeap=0x1f0000) returned 1 [0194.860] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c670 | out: hHeap=0x1f0000) returned 1 [0194.860] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210078 | out: hHeap=0x1f0000) returned 1 [0194.860] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20bd50 | out: hHeap=0x1f0000) returned 1 [0194.860] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c690 | out: hHeap=0x1f0000) returned 1 [0194.860] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24fb98 | out: hHeap=0x1f0000) returned 1 [0194.860] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b2f0 | out: hHeap=0x1f0000) returned 1 [0194.860] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a8a0 | out: hHeap=0x1f0000) returned 1 [0194.860] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215ca8 | out: hHeap=0x1f0000) returned 1 [0194.860] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20bc38 | out: hHeap=0x1f0000) returned 1 [0194.860] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0194.860] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215af8 | out: hHeap=0x1f0000) returned 1 [0194.860] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5c0 | out: hHeap=0x1f0000) returned 1 [0194.860] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5b0 | out: hHeap=0x1f0000) returned 1 [0194.860] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c30 | out: hHeap=0x1f0000) returned 1 [0194.861] CloseHandle (hObject=0x1e0) returned 1 [0194.861] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c490 | out: hHeap=0x1f0000) returned 1 [0194.861] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c470 | out: hHeap=0x1f0000) returned 1 [0194.861] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226388 | out: hHeap=0x1f0000) returned 1 [0194.861] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b90 | out: hHeap=0x1f0000) returned 1 [0194.861] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0194.861] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2051f0 | out: hHeap=0x1f0000) returned 1 [0194.861] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234f98 | out: hHeap=0x1f0000) returned 1 [0194.861] CloseHandle (hObject=0x1dc) returned 1 [0194.862] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c4b0 | out: hHeap=0x1f0000) returned 1 [0194.862] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c410 | out: hHeap=0x1f0000) returned 1 [0194.862] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20dd00 | out: hHeap=0x1f0000) returned 1 [0194.862] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205210 | out: hHeap=0x1f0000) returned 1 [0194.862] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d368 | out: hHeap=0x1f0000) returned 1 [0194.862] CloseHandle (hObject=0x1cc) returned 1 [0194.863] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c4e0 | out: hHeap=0x1f0000) returned 1 [0194.863] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c3a0 | out: hHeap=0x1f0000) returned 1 [0194.863] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230e38 | out: hHeap=0x1f0000) returned 1 [0194.863] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c460 | out: hHeap=0x1f0000) returned 1 [0194.863] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c370 | out: hHeap=0x1f0000) returned 1 [0194.863] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c530 | out: hHeap=0x1f0000) returned 1 [0194.863] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c520 | out: hHeap=0x1f0000) returned 1 [0194.863] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22cce0 | out: hHeap=0x1f0000) returned 1 [0194.863] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f958 | out: hHeap=0x1f0000) returned 1 [0194.863] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229528 | out: hHeap=0x1f0000) returned 1 [0194.863] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206898 | out: hHeap=0x1f0000) returned 1 [0194.863] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210090 | out: hHeap=0x1f0000) returned 1 [0194.863] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20fef8 | out: hHeap=0x1f0000) returned 1 [0194.863] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20e1f0 | out: hHeap=0x1f0000) returned 1 [0194.863] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21e740 | out: hHeap=0x1f0000) returned 1 [0194.863] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0194.863] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227fc8 | out: hHeap=0x1f0000) returned 1 [0194.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ad80 | out: hHeap=0x1f0000) returned 1 [0194.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227388 | out: hHeap=0x1f0000) returned 1 [0194.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234590 | out: hHeap=0x1f0000) returned 1 [0194.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b868 | out: hHeap=0x1f0000) returned 1 [0194.864] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\netfx_Extended_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x86.msi")) returned 1 [0194.866] FindNextFileW (in: hFindFile=0x214350, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x4a0f7400, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x4a0f7400, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x4a0f7400, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x426ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="ParameterInfo.xml", cAlternateFileName="PARAME~1.XML")) returned 1 [0194.866] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228230 [0194.866] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227fc8 [0194.866] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ae50 [0194.866] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227fc8 | out: hHeap=0x1f0000) returned 1 [0194.866] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab10 | out: hHeap=0x1f0000) returned 1 [0194.866] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228230 | out: hHeap=0x1f0000) returned 1 [0194.867] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\ParameterInfo.xml" (normalized: "c:\\588bce7c90097ed212\\parameterinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc [0194.867] GetFileType (hFile=0x1cc) returned 0x1 [0194.867] CloseHandle (hObject=0x1cc) returned 1 [0194.867] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a8a0 [0194.867] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\ParameterInfo.xml" (normalized: "c:\\588bce7c90097ed212\\parameterinfo.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x4a0f7400, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x4a0f7400, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x4a0f7400, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x426ae)) returned 1 [0194.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a8a0 | out: hHeap=0x1f0000) returned 1 [0194.867] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a8a0 [0194.868] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\ParameterInfo.xml" (normalized: "c:\\588bce7c90097ed212\\parameterinfo.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x4a0f7400, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x4a0f7400, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x4a0f7400, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x426ae)) returned 1 [0194.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a8a0 | out: hHeap=0x1f0000) returned 1 [0194.868] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a8a0 [0194.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a8a0 | out: hHeap=0x1f0000) returned 1 [0194.868] GetLastError () returned 0x0 [0194.868] SetLastError (dwErrCode=0x0) [0194.868] AreFileApisANSI () returned 1 [0194.868] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58420, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0194.868] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58420, cbMultiByte=4, lpWideCharStr=0x1a1f070, cchWideChar=4 | out: lpWideCharStr=".exe") returned 4 [0194.868] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20bd00 [0194.868] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215af8 [0194.868] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22dd00 [0194.868] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22acb0 [0194.868] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228230 [0194.868] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20bc38 [0194.869] CryptAcquireContextA (in: phProv=0x1a1e758, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1a1e758*=0x22a1c0) returned 1 [0194.871] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x20bc38 | out: pbBuffer=0x20bc38) returned 1 [0194.871] CryptReleaseContext (hProv=0x22a1c0, dwFlags=0x0) returned 1 [0194.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20bc38 | out: hHeap=0x1f0000) returned 1 [0194.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x258298 [0194.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x22cce0 [0194.872] QueryPerformanceCounter (in: lpPerformanceCount=0x1a1e6ec | out: lpPerformanceCount=0x1a1e6ec*=35224052527) returned 1 [0194.872] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1a1e72c | out: lpSystemTimeAsFileTime=0x1a1e72c) [0194.872] QueryPerformanceCounter (in: lpPerformanceCount=0x1a1e6ec | out: lpPerformanceCount=0x1a1e6ec*=35224070600) returned 1 [0194.872] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1a1e72c | out: lpSystemTimeAsFileTime=0x1a1e72c) [0194.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x227ee8 [0194.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x2595a0 [0194.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x260498 [0194.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x20e1f0 [0194.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2100a8 [0194.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206658 [0194.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff28 [0194.872] GetLastError () returned 0x0 [0194.872] SetLastError (dwErrCode=0x0) [0194.872] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0194.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x214ca0 [0194.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219478 [0194.873] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214ca0 | out: hHeap=0x1f0000) returned 1 [0194.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf8) returned 0x225048 [0194.873] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219478 | out: hHeap=0x1f0000) returned 1 [0194.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c520 [0194.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c4e0 [0194.873] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\ParameterInfo.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\parameterinfo.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e5f8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc [0194.874] GetFileType (hFile=0x1cc) returned 0x1 [0194.874] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c460 [0194.875] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c3a0 [0194.875] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\ParameterInfo.xml" (normalized: "c:\\588bce7c90097ed212\\parameterinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e628, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1dc [0194.875] GetFileType (hFile=0x1dc) returned 0x1 [0194.876] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ff0 [0194.876] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205150 [0194.876] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x230e38 [0194.876] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c530 [0194.876] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c410 [0194.876] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\ParameterInfo.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\parameterinfo.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e574, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0194.877] GetFileType (hFile=0x1e0) returned 0x1 [0194.877] GetLastError () returned 0xb7 [0194.877] SetLastError (dwErrCode=0xb7) [0194.877] GetLastError () returned 0xb7 [0194.877] SetLastError (dwErrCode=0xb7) [0194.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ff0 | out: hHeap=0x1f0000) returned 1 [0194.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205150 | out: hHeap=0x1f0000) returned 1 [0194.878] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe4) returned 0x2607c0 [0194.878] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ff0 [0194.878] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x2051f0 [0194.878] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205150 [0194.878] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x20dd00 [0194.878] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c370 [0194.878] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c490 [0194.879] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\ParameterInfo.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\parameterinfo.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e574, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0194.879] GetFileType (hFile=0x1c0) returned 0x1 [0194.879] GetLastError () returned 0xb7 [0194.880] SetLastError (dwErrCode=0xb7) [0194.880] GetLastError () returned 0xb7 [0194.880] SetLastError (dwErrCode=0xb7) [0194.880] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2051f0 | out: hHeap=0x1f0000) returned 1 [0194.880] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205150 | out: hHeap=0x1f0000) returned 1 [0194.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205150 [0194.880] GetLastError () returned 0xb7 [0194.880] SetLastError (dwErrCode=0xb7) [0194.880] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205150 | out: hHeap=0x1f0000) returned 1 [0194.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205290 [0194.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205150 [0194.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x2051f0 [0194.881] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb8) returned 0x226388 [0194.881] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c470 [0194.881] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c4b0 [0194.882] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\ParameterInfo.xml" (normalized: "c:\\588bce7c90097ed212\\parameterinfo.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e56c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0194.882] GetFileType (hFile=0x218) returned 0x1 [0194.882] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x23adb0 [0194.883] ReadFile (in: hFile=0x218, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e4c8, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e4c8*=0x1000, lpOverlapped=0x0) returned 1 [0194.892] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x260af0 [0194.894] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x245e08 [0194.894] GetLastError () returned 0x0 [0194.894] SetLastError (dwErrCode=0x0) [0194.894] GetLastError () returned 0x0 [0194.894] SetLastError (dwErrCode=0x0) [0194.895] GetLastError () returned 0x0 [0194.895] SetLastError (dwErrCode=0x0) [0194.895] GetLastError () returned 0x0 [0194.895] SetLastError (dwErrCode=0x0) [0194.896] ReadFile (in: hFile=0x218, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0194.897] WriteFile (in: hFile=0x1c0, lpBuffer=0x245e08*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x245e08*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0194.899] GetLastError () returned 0x0 [0194.899] SetLastError (dwErrCode=0x0) [0194.899] GetLastError () returned 0x0 [0194.899] SetLastError (dwErrCode=0x0) [0194.900] GetLastError () returned 0x0 [0194.900] SetLastError (dwErrCode=0x0) [0194.900] GetLastError () returned 0x0 [0194.900] SetLastError (dwErrCode=0x0) [0194.900] ReadFile (in: hFile=0x218, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0194.900] WriteFile (in: hFile=0x1c0, lpBuffer=0x245e08*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x245e08*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0194.901] GetLastError () returned 0x0 [0194.901] SetLastError (dwErrCode=0x0) [0194.901] GetLastError () returned 0x0 [0194.901] SetLastError (dwErrCode=0x0) [0194.901] GetLastError () returned 0x0 [0194.901] SetLastError (dwErrCode=0x0) [0194.902] GetLastError () returned 0x0 [0194.902] SetLastError (dwErrCode=0x0) [0194.902] ReadFile (in: hFile=0x218, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0194.902] WriteFile (in: hFile=0x1c0, lpBuffer=0x245e08*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x245e08*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0194.903] GetLastError () returned 0x0 [0194.903] SetLastError (dwErrCode=0x0) [0194.903] GetLastError () returned 0x0 [0194.903] SetLastError (dwErrCode=0x0) [0194.903] GetLastError () returned 0x0 [0194.903] SetLastError (dwErrCode=0x0) [0194.904] GetLastError () returned 0x0 [0194.904] SetLastError (dwErrCode=0x0) [0194.904] ReadFile (in: hFile=0x218, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0194.905] WriteFile (in: hFile=0x1c0, lpBuffer=0x245e08*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x245e08*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0194.905] GetLastError () returned 0x0 [0195.331] SetLastError (dwErrCode=0x0) [0195.331] GetLastError () returned 0x0 [0195.331] SetLastError (dwErrCode=0x0) [0195.332] GetLastError () returned 0x0 [0195.332] SetLastError (dwErrCode=0x0) [0195.332] GetLastError () returned 0x0 [0195.332] SetLastError (dwErrCode=0x0) [0195.333] ReadFile (in: hFile=0x218, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0195.334] WriteFile (in: hFile=0x1c0, lpBuffer=0x245e08*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x245e08*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0195.334] GetLastError () returned 0x0 [0195.334] SetLastError (dwErrCode=0x0) [0195.335] GetLastError () returned 0x0 [0195.335] SetLastError (dwErrCode=0x0) [0195.335] GetLastError () returned 0x0 [0195.335] SetLastError (dwErrCode=0x0) [0195.335] GetLastError () returned 0x0 [0195.336] SetLastError (dwErrCode=0x0) [0195.336] ReadFile (in: hFile=0x218, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0195.337] WriteFile (in: hFile=0x1c0, lpBuffer=0x245e08*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x245e08*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0195.337] GetLastError () returned 0x0 [0195.337] SetLastError (dwErrCode=0x0) [0195.338] GetLastError () returned 0x0 [0195.338] SetLastError (dwErrCode=0x0) [0195.338] GetLastError () returned 0x0 [0195.339] SetLastError (dwErrCode=0x0) [0195.339] GetLastError () returned 0x0 [0195.339] SetLastError (dwErrCode=0x0) [0195.340] ReadFile (in: hFile=0x218, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0195.340] WriteFile (in: hFile=0x1c0, lpBuffer=0x245e08*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x245e08*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0195.341] GetLastError () returned 0x0 [0195.341] SetLastError (dwErrCode=0x0) [0195.341] GetLastError () returned 0x0 [0195.341] SetLastError (dwErrCode=0x0) [0195.342] GetLastError () returned 0x0 [0195.342] SetLastError (dwErrCode=0x0) [0195.342] GetLastError () returned 0x0 [0195.342] SetLastError (dwErrCode=0x0) [0195.342] ReadFile (in: hFile=0x218, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0195.343] WriteFile (in: hFile=0x1c0, lpBuffer=0x245e08*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x245e08*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0195.343] GetLastError () returned 0x0 [0195.343] SetLastError (dwErrCode=0x0) [0195.344] GetLastError () returned 0x0 [0195.344] SetLastError (dwErrCode=0x0) [0195.344] GetLastError () returned 0x0 [0195.344] SetLastError (dwErrCode=0x0) [0195.345] GetLastError () returned 0x0 [0195.345] SetLastError (dwErrCode=0x0) [0195.345] ReadFile (in: hFile=0x218, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0195.346] WriteFile (in: hFile=0x1c0, lpBuffer=0x245e08*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x245e08*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0195.346] GetLastError () returned 0x0 [0195.346] SetLastError (dwErrCode=0x0) [0195.347] GetLastError () returned 0x0 [0195.347] SetLastError (dwErrCode=0x0) [0195.347] GetLastError () returned 0x0 [0195.347] SetLastError (dwErrCode=0x0) [0195.348] GetLastError () returned 0x0 [0195.348] SetLastError (dwErrCode=0x0) [0195.348] ReadFile (in: hFile=0x218, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0195.349] WriteFile (in: hFile=0x1c0, lpBuffer=0x245e08*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x245e08*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0195.349] GetLastError () returned 0x0 [0195.349] SetLastError (dwErrCode=0x0) [0195.349] GetLastError () returned 0x0 [0195.350] SetLastError (dwErrCode=0x0) [0195.350] GetLastError () returned 0x0 [0195.350] SetLastError (dwErrCode=0x0) [0195.350] GetLastError () returned 0x0 [0195.350] SetLastError (dwErrCode=0x0) [0195.350] ReadFile (in: hFile=0x218, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0195.351] WriteFile (in: hFile=0x1c0, lpBuffer=0x245e08*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x245e08*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0195.351] GetLastError () returned 0x0 [0195.351] SetLastError (dwErrCode=0x0) [0195.351] GetLastError () returned 0x0 [0195.351] SetLastError (dwErrCode=0x0) [0195.352] GetLastError () returned 0x0 [0195.352] SetLastError (dwErrCode=0x0) [0195.352] GetLastError () returned 0x0 [0195.352] SetLastError (dwErrCode=0x0) [0195.352] ReadFile (in: hFile=0x218, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0195.353] WriteFile (in: hFile=0x1c0, lpBuffer=0x245e08*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x245e08*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0195.353] GetLastError () returned 0x0 [0195.353] SetLastError (dwErrCode=0x0) [0195.354] GetLastError () returned 0x0 [0195.354] SetLastError (dwErrCode=0x0) [0195.354] GetLastError () returned 0x0 [0195.354] SetLastError (dwErrCode=0x0) [0195.354] GetLastError () returned 0x0 [0195.354] SetLastError (dwErrCode=0x0) [0195.355] ReadFile (in: hFile=0x218, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0195.355] WriteFile (in: hFile=0x1c0, lpBuffer=0x245e08*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x245e08*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0195.355] GetLastError () returned 0x0 [0195.355] SetLastError (dwErrCode=0x0) [0195.355] GetLastError () returned 0x0 [0195.355] SetLastError (dwErrCode=0x0) [0195.356] GetLastError () returned 0x0 [0195.356] SetLastError (dwErrCode=0x0) [0195.356] GetLastError () returned 0x0 [0195.356] SetLastError (dwErrCode=0x0) [0195.356] ReadFile (in: hFile=0x218, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0195.359] WriteFile (in: hFile=0x1c0, lpBuffer=0x245e08*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x245e08*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0195.359] GetLastError () returned 0x0 [0195.359] SetLastError (dwErrCode=0x0) [0195.360] GetLastError () returned 0x0 [0195.360] SetLastError (dwErrCode=0x0) [0195.360] GetLastError () returned 0x0 [0195.360] SetLastError (dwErrCode=0x0) [0195.360] GetLastError () returned 0x0 [0195.360] SetLastError (dwErrCode=0x0) [0195.360] ReadFile (in: hFile=0x218, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0195.361] WriteFile (in: hFile=0x1c0, lpBuffer=0x245e08*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x245e08*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0195.361] GetLastError () returned 0x0 [0195.361] SetLastError (dwErrCode=0x0) [0195.361] GetLastError () returned 0x0 [0195.361] SetLastError (dwErrCode=0x0) [0195.362] GetLastError () returned 0x0 [0195.362] SetLastError (dwErrCode=0x0) [0195.362] GetLastError () returned 0x0 [0195.362] SetLastError (dwErrCode=0x0) [0195.362] ReadFile (in: hFile=0x218, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0195.362] WriteFile (in: hFile=0x1c0, lpBuffer=0x245e08*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x245e08*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0195.362] GetLastError () returned 0x0 [0195.363] SetLastError (dwErrCode=0x0) [0195.363] GetLastError () returned 0x0 [0195.363] SetLastError (dwErrCode=0x0) [0195.363] GetLastError () returned 0x0 [0195.363] SetLastError (dwErrCode=0x0) [0195.363] GetLastError () returned 0x0 [0195.363] SetLastError (dwErrCode=0x0) [0195.363] ReadFile (in: hFile=0x218, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0195.364] WriteFile (in: hFile=0x1c0, lpBuffer=0x245e08*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x245e08*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0195.364] GetLastError () returned 0x0 [0195.364] SetLastError (dwErrCode=0x0) [0195.364] GetLastError () returned 0x0 [0195.364] SetLastError (dwErrCode=0x0) [0195.365] GetLastError () returned 0x0 [0195.365] SetLastError (dwErrCode=0x0) [0195.365] GetLastError () returned 0x0 [0195.365] SetLastError (dwErrCode=0x0) [0195.365] ReadFile (in: hFile=0x218, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0195.365] WriteFile (in: hFile=0x1c0, lpBuffer=0x245e08*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x245e08*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0195.366] GetLastError () returned 0x0 [0195.366] SetLastError (dwErrCode=0x0) [0195.366] GetLastError () returned 0x0 [0195.366] SetLastError (dwErrCode=0x0) [0195.366] GetLastError () returned 0x0 [0195.366] SetLastError (dwErrCode=0x0) [0195.366] GetLastError () returned 0x0 [0195.366] SetLastError (dwErrCode=0x0) [0195.367] ReadFile (in: hFile=0x218, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0195.367] WriteFile (in: hFile=0x1c0, lpBuffer=0x245e08*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x245e08*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0195.367] GetLastError () returned 0x0 [0195.367] SetLastError (dwErrCode=0x0) [0195.368] GetLastError () returned 0x0 [0195.368] SetLastError (dwErrCode=0x0) [0195.368] GetLastError () returned 0x0 [0195.368] SetLastError (dwErrCode=0x0) [0195.368] GetLastError () returned 0x0 [0195.368] SetLastError (dwErrCode=0x0) [0195.368] ReadFile (in: hFile=0x218, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0195.369] WriteFile (in: hFile=0x1c0, lpBuffer=0x245e08*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x245e08*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0195.369] GetLastError () returned 0x0 [0195.369] SetLastError (dwErrCode=0x0) [0195.369] GetLastError () returned 0x0 [0195.369] SetLastError (dwErrCode=0x0) [0195.369] GetLastError () returned 0x0 [0195.370] SetLastError (dwErrCode=0x0) [0195.370] GetLastError () returned 0x0 [0195.370] SetLastError (dwErrCode=0x0) [0195.370] ReadFile (in: hFile=0x218, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0195.370] WriteFile (in: hFile=0x1c0, lpBuffer=0x245e08*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x245e08*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0195.370] GetLastError () returned 0x0 [0195.370] SetLastError (dwErrCode=0x0) [0195.371] GetLastError () returned 0x0 [0195.371] SetLastError (dwErrCode=0x0) [0195.371] GetLastError () returned 0x0 [0195.371] SetLastError (dwErrCode=0x0) [0195.371] GetLastError () returned 0x0 [0195.371] SetLastError (dwErrCode=0x0) [0195.372] ReadFile (in: hFile=0x218, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0195.372] WriteFile (in: hFile=0x1c0, lpBuffer=0x245e08*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x245e08*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0195.372] GetLastError () returned 0x0 [0195.372] SetLastError (dwErrCode=0x0) [0195.373] GetLastError () returned 0x0 [0195.373] SetLastError (dwErrCode=0x0) [0195.373] GetLastError () returned 0x0 [0195.373] SetLastError (dwErrCode=0x0) [0195.373] GetLastError () returned 0x0 [0195.373] SetLastError (dwErrCode=0x0) [0195.374] ReadFile (in: hFile=0x218, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0195.374] WriteFile (in: hFile=0x1c0, lpBuffer=0x245e08*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x245e08*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0195.374] GetLastError () returned 0x0 [0195.374] SetLastError (dwErrCode=0x0) [0195.375] GetLastError () returned 0x0 [0195.375] SetLastError (dwErrCode=0x0) [0195.375] GetLastError () returned 0x0 [0195.375] SetLastError (dwErrCode=0x0) [0195.375] GetLastError () returned 0x0 [0195.375] SetLastError (dwErrCode=0x0) [0195.375] ReadFile (in: hFile=0x218, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0195.376] WriteFile (in: hFile=0x1c0, lpBuffer=0x245e08*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x245e08*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0195.376] GetLastError () returned 0x0 [0195.376] SetLastError (dwErrCode=0x0) [0195.376] GetLastError () returned 0x0 [0195.376] SetLastError (dwErrCode=0x0) [0195.376] GetLastError () returned 0x0 [0195.376] SetLastError (dwErrCode=0x0) [0195.376] GetLastError () returned 0x0 [0195.377] SetLastError (dwErrCode=0x0) [0195.377] ReadFile (in: hFile=0x218, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0195.377] WriteFile (in: hFile=0x1c0, lpBuffer=0x245e08*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x245e08*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0195.629] GetLastError () returned 0x0 [0195.629] SetLastError (dwErrCode=0x0) [0195.630] GetLastError () returned 0x0 [0195.630] SetLastError (dwErrCode=0x0) [0195.630] GetLastError () returned 0x0 [0195.630] SetLastError (dwErrCode=0x0) [0195.630] GetLastError () returned 0x0 [0195.630] SetLastError (dwErrCode=0x0) [0195.630] ReadFile (in: hFile=0x218, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0195.630] WriteFile (in: hFile=0x1c0, lpBuffer=0x245e08*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x245e08*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0195.631] GetLastError () returned 0x0 [0195.631] SetLastError (dwErrCode=0x0) [0195.631] GetLastError () returned 0x0 [0195.631] SetLastError (dwErrCode=0x0) [0195.631] GetLastError () returned 0x0 [0195.631] SetLastError (dwErrCode=0x0) [0195.631] GetLastError () returned 0x0 [0195.631] SetLastError (dwErrCode=0x0) [0195.631] ReadFile (in: hFile=0x218, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0195.632] WriteFile (in: hFile=0x1c0, lpBuffer=0x245e08*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x245e08*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0195.632] GetLastError () returned 0x0 [0195.632] SetLastError (dwErrCode=0x0) [0195.632] GetLastError () returned 0x0 [0195.632] SetLastError (dwErrCode=0x0) [0195.632] GetLastError () returned 0x0 [0195.632] SetLastError (dwErrCode=0x0) [0195.632] GetLastError () returned 0x0 [0195.632] SetLastError (dwErrCode=0x0) [0195.633] ReadFile (in: hFile=0x218, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0195.633] WriteFile (in: hFile=0x1c0, lpBuffer=0x245e08*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x245e08*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0195.633] GetLastError () returned 0x0 [0195.633] SetLastError (dwErrCode=0x0) [0195.633] GetLastError () returned 0x0 [0195.633] SetLastError (dwErrCode=0x0) [0195.633] GetLastError () returned 0x0 [0195.633] SetLastError (dwErrCode=0x0) [0195.634] GetLastError () returned 0x0 [0195.634] SetLastError (dwErrCode=0x0) [0195.634] ReadFile (in: hFile=0x218, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0195.634] WriteFile (in: hFile=0x1c0, lpBuffer=0x245e08*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x245e08*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0195.634] GetLastError () returned 0x0 [0195.634] SetLastError (dwErrCode=0x0) [0195.634] GetLastError () returned 0x0 [0195.634] SetLastError (dwErrCode=0x0) [0195.634] GetLastError () returned 0x0 [0195.634] SetLastError (dwErrCode=0x0) [0195.635] GetLastError () returned 0x0 [0195.635] SetLastError (dwErrCode=0x0) [0195.635] ReadFile (in: hFile=0x218, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0195.635] WriteFile (in: hFile=0x1c0, lpBuffer=0x245e08*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x245e08*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0195.635] GetLastError () returned 0x0 [0195.635] SetLastError (dwErrCode=0x0) [0195.635] GetLastError () returned 0x0 [0195.635] SetLastError (dwErrCode=0x0) [0195.635] GetLastError () returned 0x0 [0195.635] SetLastError (dwErrCode=0x0) [0195.635] GetLastError () returned 0x0 [0195.635] SetLastError (dwErrCode=0x0) [0195.636] ReadFile (in: hFile=0x218, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0195.636] WriteFile (in: hFile=0x1c0, lpBuffer=0x245e08*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x245e08*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0195.636] GetLastError () returned 0x0 [0195.636] SetLastError (dwErrCode=0x0) [0195.636] GetLastError () returned 0x0 [0195.636] SetLastError (dwErrCode=0x0) [0195.636] GetLastError () returned 0x0 [0195.636] SetLastError (dwErrCode=0x0) [0195.636] GetLastError () returned 0x0 [0195.636] SetLastError (dwErrCode=0x0) [0195.636] ReadFile (in: hFile=0x218, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0195.637] WriteFile (in: hFile=0x1c0, lpBuffer=0x245e08*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x245e08*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0195.637] GetLastError () returned 0x0 [0195.637] SetLastError (dwErrCode=0x0) [0195.637] GetLastError () returned 0x0 [0195.637] SetLastError (dwErrCode=0x0) [0195.637] GetLastError () returned 0x0 [0195.637] SetLastError (dwErrCode=0x0) [0195.637] GetLastError () returned 0x0 [0195.637] SetLastError (dwErrCode=0x0) [0195.637] ReadFile (in: hFile=0x218, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0195.637] WriteFile (in: hFile=0x1c0, lpBuffer=0x245e08*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x245e08*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0195.638] GetLastError () returned 0x0 [0195.638] SetLastError (dwErrCode=0x0) [0195.638] GetLastError () returned 0x0 [0195.638] SetLastError (dwErrCode=0x0) [0195.638] GetLastError () returned 0x0 [0195.638] SetLastError (dwErrCode=0x0) [0195.638] GetLastError () returned 0x0 [0195.638] SetLastError (dwErrCode=0x0) [0195.638] ReadFile (in: hFile=0x218, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0195.638] WriteFile (in: hFile=0x1c0, lpBuffer=0x245e08*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x245e08*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0195.639] GetLastError () returned 0x0 [0195.639] SetLastError (dwErrCode=0x0) [0195.639] GetLastError () returned 0x0 [0195.639] SetLastError (dwErrCode=0x0) [0195.639] GetLastError () returned 0x0 [0195.639] SetLastError (dwErrCode=0x0) [0195.639] GetLastError () returned 0x0 [0195.639] SetLastError (dwErrCode=0x0) [0195.639] ReadFile (in: hFile=0x218, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0195.639] WriteFile (in: hFile=0x1c0, lpBuffer=0x245e08*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x245e08*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0195.639] GetLastError () returned 0x0 [0195.640] SetLastError (dwErrCode=0x0) [0195.640] GetLastError () returned 0x0 [0195.640] SetLastError (dwErrCode=0x0) [0195.640] GetLastError () returned 0x0 [0195.640] SetLastError (dwErrCode=0x0) [0195.640] GetLastError () returned 0x0 [0195.640] SetLastError (dwErrCode=0x0) [0195.640] ReadFile (in: hFile=0x218, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0195.640] WriteFile (in: hFile=0x1c0, lpBuffer=0x245e08*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x245e08*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0195.640] GetLastError () returned 0x0 [0195.640] SetLastError (dwErrCode=0x0) [0195.640] GetLastError () returned 0x0 [0195.640] SetLastError (dwErrCode=0x0) [0195.641] GetLastError () returned 0x0 [0195.641] SetLastError (dwErrCode=0x0) [0195.641] GetLastError () returned 0x0 [0195.641] SetLastError (dwErrCode=0x0) [0195.641] ReadFile (in: hFile=0x218, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0195.641] WriteFile (in: hFile=0x1c0, lpBuffer=0x245e08*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x245e08*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0195.641] GetLastError () returned 0x0 [0195.641] SetLastError (dwErrCode=0x0) [0195.641] GetLastError () returned 0x0 [0195.641] SetLastError (dwErrCode=0x0) [0195.641] GetLastError () returned 0x0 [0195.641] SetLastError (dwErrCode=0x0) [0195.641] GetLastError () returned 0x0 [0195.642] SetLastError (dwErrCode=0x0) [0195.642] ReadFile (in: hFile=0x218, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0195.642] WriteFile (in: hFile=0x1c0, lpBuffer=0x245e08*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x245e08*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0195.642] GetLastError () returned 0x0 [0195.642] SetLastError (dwErrCode=0x0) [0195.642] GetLastError () returned 0x0 [0195.642] SetLastError (dwErrCode=0x0) [0195.642] GetLastError () returned 0x0 [0195.642] SetLastError (dwErrCode=0x0) [0195.642] GetLastError () returned 0x0 [0195.642] SetLastError (dwErrCode=0x0) [0195.642] ReadFile (in: hFile=0x218, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0195.643] WriteFile (in: hFile=0x1c0, lpBuffer=0x245e08*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x245e08*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0195.643] GetLastError () returned 0x0 [0195.643] SetLastError (dwErrCode=0x0) [0195.643] GetLastError () returned 0x0 [0195.643] SetLastError (dwErrCode=0x0) [0195.643] GetLastError () returned 0x0 [0195.643] SetLastError (dwErrCode=0x0) [0195.643] GetLastError () returned 0x0 [0195.643] SetLastError (dwErrCode=0x0) [0195.643] ReadFile (in: hFile=0x218, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0195.643] WriteFile (in: hFile=0x1c0, lpBuffer=0x245e08*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x245e08*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0195.644] GetLastError () returned 0x0 [0195.644] SetLastError (dwErrCode=0x0) [0195.644] GetLastError () returned 0x0 [0195.644] SetLastError (dwErrCode=0x0) [0195.644] GetLastError () returned 0x0 [0195.644] SetLastError (dwErrCode=0x0) [0195.644] GetLastError () returned 0x0 [0195.644] SetLastError (dwErrCode=0x0) [0195.644] ReadFile (in: hFile=0x218, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0195.645] WriteFile (in: hFile=0x1c0, lpBuffer=0x245e08*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x245e08*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0195.645] GetLastError () returned 0x0 [0195.645] SetLastError (dwErrCode=0x0) [0195.645] GetLastError () returned 0x0 [0195.645] SetLastError (dwErrCode=0x0) [0195.645] GetLastError () returned 0x0 [0195.645] SetLastError (dwErrCode=0x0) [0195.645] GetLastError () returned 0x0 [0195.645] SetLastError (dwErrCode=0x0) [0195.645] ReadFile (in: hFile=0x218, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0195.646] WriteFile (in: hFile=0x1c0, lpBuffer=0x245e08*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x245e08*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0195.646] GetLastError () returned 0x0 [0195.646] SetLastError (dwErrCode=0x0) [0195.646] GetLastError () returned 0x0 [0195.646] SetLastError (dwErrCode=0x0) [0195.646] GetLastError () returned 0x0 [0195.646] SetLastError (dwErrCode=0x0) [0195.646] GetLastError () returned 0x0 [0195.646] SetLastError (dwErrCode=0x0) [0195.646] ReadFile (in: hFile=0x218, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0195.646] WriteFile (in: hFile=0x1c0, lpBuffer=0x245e08*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x245e08*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0195.647] GetLastError () returned 0x0 [0195.647] SetLastError (dwErrCode=0x0) [0195.647] GetLastError () returned 0x0 [0195.647] SetLastError (dwErrCode=0x0) [0195.647] GetLastError () returned 0x0 [0195.647] SetLastError (dwErrCode=0x0) [0195.647] GetLastError () returned 0x0 [0195.647] SetLastError (dwErrCode=0x0) [0195.647] ReadFile (in: hFile=0x218, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0195.647] WriteFile (in: hFile=0x1c0, lpBuffer=0x245e08*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x245e08*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0195.648] GetLastError () returned 0x0 [0195.648] SetLastError (dwErrCode=0x0) [0195.648] GetLastError () returned 0x0 [0195.648] SetLastError (dwErrCode=0x0) [0195.648] GetLastError () returned 0x0 [0195.648] SetLastError (dwErrCode=0x0) [0195.648] GetLastError () returned 0x0 [0195.648] SetLastError (dwErrCode=0x0) [0195.648] ReadFile (in: hFile=0x218, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0195.648] WriteFile (in: hFile=0x1c0, lpBuffer=0x245e08*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x245e08*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0195.648] GetLastError () returned 0x0 [0195.648] SetLastError (dwErrCode=0x0) [0195.649] GetLastError () returned 0x0 [0195.649] SetLastError (dwErrCode=0x0) [0195.649] GetLastError () returned 0x0 [0195.649] SetLastError (dwErrCode=0x0) [0195.649] GetLastError () returned 0x0 [0195.649] SetLastError (dwErrCode=0x0) [0195.649] ReadFile (in: hFile=0x218, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0195.649] WriteFile (in: hFile=0x1c0, lpBuffer=0x245e08*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x245e08*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0195.649] GetLastError () returned 0x0 [0195.649] SetLastError (dwErrCode=0x0) [0195.650] GetLastError () returned 0x0 [0195.650] SetLastError (dwErrCode=0x0) [0195.650] GetLastError () returned 0x0 [0195.650] SetLastError (dwErrCode=0x0) [0195.650] GetLastError () returned 0x0 [0195.650] SetLastError (dwErrCode=0x0) [0195.650] ReadFile (in: hFile=0x218, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0195.650] WriteFile (in: hFile=0x1c0, lpBuffer=0x245e08*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x245e08*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0195.650] GetLastError () returned 0x0 [0195.650] SetLastError (dwErrCode=0x0) [0195.650] GetLastError () returned 0x0 [0195.650] SetLastError (dwErrCode=0x0) [0195.650] GetLastError () returned 0x0 [0195.650] SetLastError (dwErrCode=0x0) [0195.651] GetLastError () returned 0x0 [0195.651] SetLastError (dwErrCode=0x0) [0195.651] ReadFile (in: hFile=0x218, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0195.651] WriteFile (in: hFile=0x1c0, lpBuffer=0x245e08*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x245e08*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0195.651] GetLastError () returned 0x0 [0195.651] SetLastError (dwErrCode=0x0) [0195.651] GetLastError () returned 0x0 [0195.651] SetLastError (dwErrCode=0x0) [0195.651] GetLastError () returned 0x0 [0195.651] SetLastError (dwErrCode=0x0) [0195.651] GetLastError () returned 0x0 [0195.651] SetLastError (dwErrCode=0x0) [0195.651] ReadFile (in: hFile=0x218, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0195.651] WriteFile (in: hFile=0x1c0, lpBuffer=0x245e08*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x245e08*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0195.652] GetLastError () returned 0x0 [0195.652] SetLastError (dwErrCode=0x0) [0195.652] GetLastError () returned 0x0 [0195.652] SetLastError (dwErrCode=0x0) [0195.652] GetLastError () returned 0x0 [0195.652] SetLastError (dwErrCode=0x0) [0195.652] GetLastError () returned 0x0 [0195.652] SetLastError (dwErrCode=0x0) [0195.652] ReadFile (in: hFile=0x218, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0195.652] WriteFile (in: hFile=0x1c0, lpBuffer=0x245e08*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x245e08*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0195.653] GetLastError () returned 0x0 [0195.653] SetLastError (dwErrCode=0x0) [0195.653] GetLastError () returned 0x0 [0195.653] SetLastError (dwErrCode=0x0) [0195.653] GetLastError () returned 0x0 [0195.653] SetLastError (dwErrCode=0x0) [0195.653] GetLastError () returned 0x0 [0195.653] SetLastError (dwErrCode=0x0) [0195.653] ReadFile (in: hFile=0x218, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0195.653] WriteFile (in: hFile=0x1c0, lpBuffer=0x245e08*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x245e08*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0195.654] GetLastError () returned 0x0 [0195.654] SetLastError (dwErrCode=0x0) [0195.654] GetLastError () returned 0x0 [0195.654] SetLastError (dwErrCode=0x0) [0195.654] GetLastError () returned 0x0 [0195.654] SetLastError (dwErrCode=0x0) [0195.654] GetLastError () returned 0x0 [0195.654] SetLastError (dwErrCode=0x0) [0195.654] ReadFile (in: hFile=0x218, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0195.654] WriteFile (in: hFile=0x1c0, lpBuffer=0x245e08*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x245e08*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0195.654] GetLastError () returned 0x0 [0195.654] SetLastError (dwErrCode=0x0) [0195.655] GetLastError () returned 0x0 [0195.655] SetLastError (dwErrCode=0x0) [0195.655] GetLastError () returned 0x0 [0195.655] SetLastError (dwErrCode=0x0) [0195.655] GetLastError () returned 0x0 [0195.655] SetLastError (dwErrCode=0x0) [0195.655] ReadFile (in: hFile=0x218, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0195.655] WriteFile (in: hFile=0x1c0, lpBuffer=0x245e08*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x245e08*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0195.655] GetLastError () returned 0x0 [0195.655] SetLastError (dwErrCode=0x0) [0195.655] GetLastError () returned 0x0 [0195.655] SetLastError (dwErrCode=0x0) [0195.655] GetLastError () returned 0x0 [0195.656] SetLastError (dwErrCode=0x0) [0195.656] GetLastError () returned 0x0 [0195.656] SetLastError (dwErrCode=0x0) [0195.656] ReadFile (in: hFile=0x218, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0195.656] WriteFile (in: hFile=0x1c0, lpBuffer=0x245e08*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x245e08*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0195.656] GetLastError () returned 0x0 [0195.656] SetLastError (dwErrCode=0x0) [0195.656] GetLastError () returned 0x0 [0195.656] SetLastError (dwErrCode=0x0) [0195.656] GetLastError () returned 0x0 [0195.656] SetLastError (dwErrCode=0x0) [0195.656] GetLastError () returned 0x0 [0195.657] SetLastError (dwErrCode=0x0) [0195.657] ReadFile (in: hFile=0x218, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0195.657] WriteFile (in: hFile=0x1c0, lpBuffer=0x245e08*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x245e08*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0195.657] GetLastError () returned 0x0 [0195.657] SetLastError (dwErrCode=0x0) [0195.657] GetLastError () returned 0x0 [0195.657] SetLastError (dwErrCode=0x0) [0195.657] GetLastError () returned 0x0 [0195.657] SetLastError (dwErrCode=0x0) [0195.658] GetLastError () returned 0x0 [0195.658] SetLastError (dwErrCode=0x0) [0195.658] ReadFile (in: hFile=0x218, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0195.658] WriteFile (in: hFile=0x1c0, lpBuffer=0x245e08*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x245e08*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0195.658] GetLastError () returned 0x0 [0195.658] SetLastError (dwErrCode=0x0) [0195.658] GetLastError () returned 0x0 [0195.658] SetLastError (dwErrCode=0x0) [0195.658] GetLastError () returned 0x0 [0195.658] SetLastError (dwErrCode=0x0) [0195.659] GetLastError () returned 0x0 [0195.659] SetLastError (dwErrCode=0x0) [0195.659] ReadFile (in: hFile=0x218, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0195.659] WriteFile (in: hFile=0x1c0, lpBuffer=0x245e08*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x245e08*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0195.659] GetLastError () returned 0x0 [0195.659] SetLastError (dwErrCode=0x0) [0195.659] GetLastError () returned 0x0 [0195.659] SetLastError (dwErrCode=0x0) [0195.659] GetLastError () returned 0x0 [0195.659] SetLastError (dwErrCode=0x0) [0195.659] GetLastError () returned 0x0 [0195.660] SetLastError (dwErrCode=0x0) [0195.660] ReadFile (in: hFile=0x218, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0195.660] WriteFile (in: hFile=0x1c0, lpBuffer=0x245e08*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x245e08*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0195.660] GetLastError () returned 0x0 [0195.660] SetLastError (dwErrCode=0x0) [0195.660] GetLastError () returned 0x0 [0195.660] SetLastError (dwErrCode=0x0) [0195.660] GetLastError () returned 0x0 [0195.661] SetLastError (dwErrCode=0x0) [0195.661] GetLastError () returned 0x0 [0195.661] SetLastError (dwErrCode=0x0) [0195.661] ReadFile (in: hFile=0x218, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0195.661] WriteFile (in: hFile=0x1c0, lpBuffer=0x245e08*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x245e08*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0195.661] GetLastError () returned 0x0 [0195.661] SetLastError (dwErrCode=0x0) [0195.661] GetLastError () returned 0x0 [0195.661] SetLastError (dwErrCode=0x0) [0195.661] GetLastError () returned 0x0 [0195.661] SetLastError (dwErrCode=0x0) [0195.661] GetLastError () returned 0x0 [0195.662] SetLastError (dwErrCode=0x0) [0195.662] ReadFile (in: hFile=0x218, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0195.662] WriteFile (in: hFile=0x1c0, lpBuffer=0x245e08*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x245e08*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0195.662] GetLastError () returned 0x0 [0195.662] SetLastError (dwErrCode=0x0) [0195.662] GetLastError () returned 0x0 [0195.662] SetLastError (dwErrCode=0x0) [0195.662] GetLastError () returned 0x0 [0195.662] SetLastError (dwErrCode=0x0) [0195.662] GetLastError () returned 0x0 [0195.662] SetLastError (dwErrCode=0x0) [0195.662] ReadFile (in: hFile=0x218, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0195.663] WriteFile (in: hFile=0x1c0, lpBuffer=0x245e08*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x245e08*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0195.663] GetLastError () returned 0x0 [0195.663] SetLastError (dwErrCode=0x0) [0195.663] GetLastError () returned 0x0 [0195.663] SetLastError (dwErrCode=0x0) [0195.663] GetLastError () returned 0x0 [0195.663] SetLastError (dwErrCode=0x0) [0195.663] GetLastError () returned 0x0 [0195.664] SetLastError (dwErrCode=0x0) [0195.664] ReadFile (in: hFile=0x218, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0195.664] WriteFile (in: hFile=0x1c0, lpBuffer=0x245e08*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x245e08*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0195.664] GetLastError () returned 0x0 [0195.664] SetLastError (dwErrCode=0x0) [0195.664] GetLastError () returned 0x0 [0195.664] SetLastError (dwErrCode=0x0) [0195.665] GetLastError () returned 0x0 [0195.665] SetLastError (dwErrCode=0x0) [0195.665] GetLastError () returned 0x0 [0195.665] SetLastError (dwErrCode=0x0) [0195.665] ReadFile (in: hFile=0x218, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0195.665] WriteFile (in: hFile=0x1c0, lpBuffer=0x245e08*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x245e08*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0195.665] GetLastError () returned 0x0 [0195.665] SetLastError (dwErrCode=0x0) [0195.665] GetLastError () returned 0x0 [0195.666] SetLastError (dwErrCode=0x0) [0195.666] GetLastError () returned 0x0 [0195.666] SetLastError (dwErrCode=0x0) [0195.666] GetLastError () returned 0x0 [0195.666] SetLastError (dwErrCode=0x0) [0195.666] ReadFile (in: hFile=0x218, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0195.666] WriteFile (in: hFile=0x1c0, lpBuffer=0x245e08*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x245e08*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0195.667] GetLastError () returned 0x0 [0195.667] SetLastError (dwErrCode=0x0) [0195.667] GetLastError () returned 0x0 [0195.667] SetLastError (dwErrCode=0x0) [0195.667] GetLastError () returned 0x0 [0195.667] SetLastError (dwErrCode=0x0) [0195.667] GetLastError () returned 0x0 [0195.667] SetLastError (dwErrCode=0x0) [0195.667] ReadFile (in: hFile=0x218, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0195.667] WriteFile (in: hFile=0x1c0, lpBuffer=0x245e08*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x245e08*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0195.669] GetLastError () returned 0x0 [0195.669] SetLastError (dwErrCode=0x0) [0195.669] GetLastError () returned 0x0 [0195.669] SetLastError (dwErrCode=0x0) [0195.669] GetLastError () returned 0x0 [0195.669] SetLastError (dwErrCode=0x0) [0195.669] GetLastError () returned 0x0 [0195.669] SetLastError (dwErrCode=0x0) [0195.669] ReadFile (in: hFile=0x218, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x6ae, lpOverlapped=0x0) returned 1 [0195.670] WriteFile (in: hFile=0x1c0, lpBuffer=0x245e08*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x245e08*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0195.670] GetLastError () returned 0x0 [0195.670] SetLastError (dwErrCode=0x0) [0195.670] ReadFile (in: hFile=0x218, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x0, lpOverlapped=0x0) returned 1 [0195.671] GetLastError () returned 0x0 [0195.671] SetLastError (dwErrCode=0x0) [0195.671] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffa0 [0195.671] GetLastError () returned 0x0 [0195.671] SetLastError (dwErrCode=0x0) [0195.671] WriteFile (in: hFile=0x1c0, lpBuffer=0x245e08*, nNumberOfBytesToWrite=0x6be, lpNumberOfBytesWritten=0x1a1e44c, lpOverlapped=0x0 | out: lpBuffer=0x245e08*, lpNumberOfBytesWritten=0x1a1e44c*=0x6be, lpOverlapped=0x0) returned 1 [0195.672] GetLastError () returned 0x0 [0195.672] SetLastError (dwErrCode=0x0) [0195.672] GetLastError () returned 0x0 [0195.672] SetLastError (dwErrCode=0x0) [0195.672] GetLastError () returned 0x0 [0195.672] SetLastError (dwErrCode=0x0) [0195.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205150 | out: hHeap=0x1f0000) returned 1 [0195.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2051f0 | out: hHeap=0x1f0000) returned 1 [0195.673] CloseHandle (hObject=0x1cc) returned 1 [0195.918] CloseHandle (hObject=0x1dc) returned 1 [0195.919] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x206560 [0195.919] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x206450 [0195.919] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\ParameterInfo.xml" (normalized: "c:\\588bce7c90097ed212\\parameterinfo.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e628, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1dc [0195.924] GetFileType (hFile=0x1dc) returned 0x1 [0195.924] GetLastError () returned 0xb7 [0195.924] SetLastError (dwErrCode=0xb7) [0195.924] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x242df0 [0195.924] GetLastError () returned 0xb7 [0195.925] SetLastError (dwErrCode=0xb7) [0195.925] WriteFile (in: hFile=0x1dc, lpBuffer=0x1a1d2bc*, nNumberOfBytesToWrite=0x1, lpNumberOfBytesWritten=0x1a1d2b4, lpOverlapped=0x0 | out: lpBuffer=0x1a1d2bc*, lpNumberOfBytesWritten=0x1a1d2b4*=0x1, lpOverlapped=0x0) returned 1 [0195.926] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x242df0 | out: hHeap=0x1f0000) returned 1 [0195.926] CloseHandle (hObject=0x1dc) returned 1 [0195.927] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\ParameterInfo.xml" (normalized: "c:\\588bce7c90097ed212\\parameterinfo.xml")) returned 0 [0195.927] GetLastError () returned 0x20 [0195.927] GetLastError () returned 0x20 [0195.927] SetLastError (dwErrCode=0x20) [0195.927] GetLastError () returned 0x20 [0195.927] SetLastError (dwErrCode=0x20) [0195.927] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215f30 [0195.927] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b9e0 [0195.927] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b8c8 [0195.927] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x216170 [0195.927] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205210 [0195.927] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205150 [0195.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x206510 [0195.928] GetLastError () returned 0x20 [0195.928] SetLastError (dwErrCode=0x20) [0195.928] GetLastError () returned 0x20 [0195.928] SetLastError (dwErrCode=0x20) [0195.928] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205210 | out: hHeap=0x1f0000) returned 1 [0195.928] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205150 | out: hHeap=0x1f0000) returned 1 [0195.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x2282a0 [0195.928] GetLastError () returned 0x20 [0195.928] SetLastError (dwErrCode=0x20) [0195.928] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0195.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x228310 [0195.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ad80 [0195.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x20b8f0 [0195.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x234c98 [0195.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2063f0 [0195.929] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20bd50 [0195.929] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101f8 [0195.929] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x206460 [0195.929] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20bc38 [0195.929] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210228 [0195.929] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x20bb98 [0195.929] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x234fc8 [0195.929] GetLastError () returned 0x20 [0195.929] SetLastError (dwErrCode=0x20) [0195.929] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228310 | out: hHeap=0x1f0000) returned 1 [0195.929] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x206520 [0195.929] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x206430 [0195.929] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x206440 [0195.929] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206430 | out: hHeap=0x1f0000) returned 1 [0195.930] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x206530 [0195.930] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206440 | out: hHeap=0x1f0000) returned 1 [0195.930] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206520 | out: hHeap=0x1f0000) returned 1 [0195.930] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x206470 [0195.930] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2026d0 [0195.930] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206470 | out: hHeap=0x1f0000) returned 1 [0195.930] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2026e8 [0195.930] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2026d0 | out: hHeap=0x1f0000) returned 1 [0195.930] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206530 | out: hHeap=0x1f0000) returned 1 [0195.930] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2026d0 [0195.930] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x235838 [0195.930] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2026d0 | out: hHeap=0x1f0000) returned 1 [0195.930] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2359a0 [0195.930] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235838 | out: hHeap=0x1f0000) returned 1 [0195.930] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2026e8 | out: hHeap=0x1f0000) returned 1 [0195.930] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x235970 [0195.930] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x205150 [0195.930] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235970 | out: hHeap=0x1f0000) returned 1 [0195.931] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204fb0 [0195.931] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205150 | out: hHeap=0x1f0000) returned 1 [0195.931] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2359a0 | out: hHeap=0x1f0000) returned 1 [0195.931] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205150 [0195.931] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x22b868 [0195.931] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205150 | out: hHeap=0x1f0000) returned 1 [0195.931] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x205150 [0195.931] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b868 | out: hHeap=0x1f0000) returned 1 [0195.931] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204fb0 | out: hHeap=0x1f0000) returned 1 [0195.931] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204fb0 [0195.931] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206898 [0195.931] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204fb0 | out: hHeap=0x1f0000) returned 1 [0195.931] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x22b868 [0195.931] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206898 | out: hHeap=0x1f0000) returned 1 [0195.931] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205150 | out: hHeap=0x1f0000) returned 1 [0195.931] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x206520 [0195.931] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2026d0 [0195.931] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206520 | out: hHeap=0x1f0000) returned 1 [0195.931] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2026e8 [0195.932] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2026d0 | out: hHeap=0x1f0000) returned 1 [0195.932] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x205210 [0195.932] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2026e8 | out: hHeap=0x1f0000) returned 1 [0195.932] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206628 [0195.932] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205210 | out: hHeap=0x1f0000) returned 1 [0195.932] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206628 | out: hHeap=0x1f0000) returned 1 [0195.932] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b868 | out: hHeap=0x1f0000) returned 1 [0195.932] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b9e0 | out: hHeap=0x1f0000) returned 1 [0195.932] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0195.932] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234c98 | out: hHeap=0x1f0000) returned 1 [0195.932] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b8f0 | out: hHeap=0x1f0000) returned 1 [0195.932] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228310 [0195.932] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b868 [0195.932] CryptAcquireContextA (in: phProv=0x1a1e758, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1a1e758*=0x22a3e0) returned 1 [0195.935] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x22b868 | out: pbBuffer=0x22b868) returned 1 [0195.935] CryptReleaseContext (hProv=0x22a3e0, dwFlags=0x0) returned 1 [0195.935] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b868 | out: hHeap=0x1f0000) returned 1 [0195.935] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b8f0 [0195.935] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b9e0 [0195.935] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282a0 [0195.935] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b8f0 | out: hHeap=0x1f0000) returned 1 [0195.935] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0195.935] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0195.935] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x239928 [0195.935] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2026d0 [0195.935] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x22ab78 [0195.935] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x20b8f0 [0195.935] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x234c98 [0195.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205150 [0195.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a970 [0195.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x22b868 [0195.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2350d0 [0195.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x206400 [0195.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x1fb070 [0195.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2026e8 [0195.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x206470 [0195.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x235a40 [0195.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x235b08 [0195.936] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b08 | out: hHeap=0x1f0000) returned 1 [0195.936] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235a40 | out: hHeap=0x1f0000) returned 1 [0195.936] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206470 | out: hHeap=0x1f0000) returned 1 [0195.936] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2026e8 | out: hHeap=0x1f0000) returned 1 [0195.936] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fb070 | out: hHeap=0x1f0000) returned 1 [0195.936] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206400 | out: hHeap=0x1f0000) returned 1 [0195.936] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2350d0 | out: hHeap=0x1f0000) returned 1 [0195.937] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b868 | out: hHeap=0x1f0000) returned 1 [0195.937] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a970 | out: hHeap=0x1f0000) returned 1 [0195.937] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x2282a0 [0195.937] GetLastError () returned 0x0 [0195.937] SetLastError (dwErrCode=0x0) [0195.937] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0195.937] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x2282a0 [0195.937] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0195.937] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0195.937] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0195.937] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0195.937] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0195.937] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0195.937] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x220fe0 [0195.937] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2350d0 [0195.937] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0195.937] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0195.937] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0195.937] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0195.937] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2356d0 [0195.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0195.938] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0195.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fc18 [0195.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x25e1c0 [0195.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2357d8 [0195.938] QueryPerformanceCounter (in: lpPerformanceCount=0x1a1e2a8 | out: lpPerformanceCount=0x1a1e2a8*=35330667207) returned 1 [0195.938] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1a1e2e8 | out: lpSystemTimeAsFileTime=0x1a1e2e8) [0195.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x206400 [0195.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x1fb070 [0195.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205210 [0195.938] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205210 | out: hHeap=0x1f0000) returned 1 [0195.938] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fb070 | out: hHeap=0x1f0000) returned 1 [0195.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x1fb070 [0195.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205210 [0195.938] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205210 | out: hHeap=0x1f0000) returned 1 [0195.938] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fb070 | out: hHeap=0x1f0000) returned 1 [0195.938] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206400 | out: hHeap=0x1f0000) returned 1 [0195.938] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0195.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x21d248 [0195.939] GetLastError () returned 0x0 [0195.939] SetLastError (dwErrCode=0x0) [0195.939] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d248 | out: hHeap=0x1f0000) returned 1 [0195.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0195.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0195.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0195.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x1fb070 [0195.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b868 [0195.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0195.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0195.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238578 [0195.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0195.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x2358e8 [0195.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x236590 [0195.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2387b0 [0195.939] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236590 | out: hHeap=0x1f0000) returned 1 [0195.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2389d0 [0195.939] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387b0 | out: hHeap=0x1f0000) returned 1 [0195.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2385a0 [0195.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238780 [0195.940] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385a0 | out: hHeap=0x1f0000) returned 1 [0195.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x237370 [0195.940] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238780 | out: hHeap=0x1f0000) returned 1 [0195.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2387b0 [0195.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x238bf0 [0195.940] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238bf0 | out: hHeap=0x1f0000) returned 1 [0195.940] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387b0 | out: hHeap=0x1f0000) returned 1 [0195.940] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389d0 | out: hHeap=0x1f0000) returned 1 [0195.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2026e8 [0195.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216050 [0195.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238550 [0195.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2385f0 [0195.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2385a0 [0195.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238500 [0195.940] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385f0 | out: hHeap=0x1f0000) returned 1 [0195.940] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238550 | out: hHeap=0x1f0000) returned 1 [0195.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2387b0 [0195.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2386b8 [0195.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2385f0 [0195.940] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2386b8 | out: hHeap=0x1f0000) returned 1 [0195.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x236590 [0195.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385f0 | out: hHeap=0x1f0000) returned 1 [0195.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206898 [0195.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x2389d0 [0195.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389d0 | out: hHeap=0x1f0000) returned 1 [0195.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206898 | out: hHeap=0x1f0000) returned 1 [0195.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238578 | out: hHeap=0x1f0000) returned 1 [0195.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2360f0 [0195.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236590 | out: hHeap=0x1f0000) returned 1 [0195.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387b0 | out: hHeap=0x1f0000) returned 1 [0195.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204fb0 [0195.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x236da8 [0195.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x237498 [0195.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b868 | out: hHeap=0x1f0000) returned 1 [0195.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x236218 [0195.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237498 | out: hHeap=0x1f0000) returned 1 [0195.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238500 | out: hHeap=0x1f0000) returned 1 [0195.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385a0 | out: hHeap=0x1f0000) returned 1 [0195.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216050 | out: hHeap=0x1f0000) returned 1 [0195.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236da8 | out: hHeap=0x1f0000) returned 1 [0195.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204fb0 | out: hHeap=0x1f0000) returned 1 [0195.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2026e8 | out: hHeap=0x1f0000) returned 1 [0195.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237370 | out: hHeap=0x1f0000) returned 1 [0195.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x237370 [0195.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237370 | out: hHeap=0x1f0000) returned 1 [0195.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2358e8 | out: hHeap=0x1f0000) returned 1 [0195.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0195.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2360f0 | out: hHeap=0x1f0000) returned 1 [0195.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0195.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0195.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fb070 | out: hHeap=0x1f0000) returned 1 [0195.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0195.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0195.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x237370 [0195.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x237120 [0195.943] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237370 | out: hHeap=0x1f0000) returned 1 [0195.943] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237120 | out: hHeap=0x1f0000) returned 1 [0195.943] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236218 | out: hHeap=0x1f0000) returned 1 [0195.943] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0195.943] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2356d0 | out: hHeap=0x1f0000) returned 1 [0195.943] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe0 | out: hHeap=0x1f0000) returned 1 [0195.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x2358e8 [0195.943] GetLastError () returned 0x0 [0195.943] SetLastError (dwErrCode=0x0) [0195.943] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0195.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x206400 [0195.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x206520 [0195.944] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\ParameterInfo.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\parameterinfo.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e658, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1dc [0195.944] GetFileType (hFile=0x1dc) returned 0x1 [0195.944] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x246e10 [0195.945] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1a1e5e0 | out: lpNewFilePointer=0x0) returned 1 [0195.945] GetLastError () returned 0xb7 [0195.945] SetLastError (dwErrCode=0xb7) [0195.945] GetLastError () returned 0xb7 [0195.945] SetLastError (dwErrCode=0xb7) [0195.945] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1a1e6a4 | out: lpNewFilePointer=0x0) returned 1 [0195.945] WriteFile (in: hFile=0x1dc, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x103, lpNumberOfBytesWritten=0x1a1e708, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x1a1e708*=0x103, lpOverlapped=0x0) returned 1 [0195.945] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x246e10 | out: hHeap=0x1f0000) returned 1 [0195.946] CloseHandle (hObject=0x1dc) returned 1 [0195.954] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206520 | out: hHeap=0x1f0000) returned 1 [0195.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206400 | out: hHeap=0x1f0000) returned 1 [0195.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2350d0 | out: hHeap=0x1f0000) returned 1 [0195.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234c98 | out: hHeap=0x1f0000) returned 1 [0195.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b8f0 | out: hHeap=0x1f0000) returned 1 [0195.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205150 | out: hHeap=0x1f0000) returned 1 [0195.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab78 | out: hHeap=0x1f0000) returned 1 [0195.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2026d0 | out: hHeap=0x1f0000) returned 1 [0195.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239928 | out: hHeap=0x1f0000) returned 1 [0195.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2358e8 | out: hHeap=0x1f0000) returned 1 [0195.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b9e0 | out: hHeap=0x1f0000) returned 1 [0195.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0195.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25e1c0 | out: hHeap=0x1f0000) returned 1 [0195.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2357d8 | out: hHeap=0x1f0000) returned 1 [0195.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228310 | out: hHeap=0x1f0000) returned 1 [0195.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206510 | out: hHeap=0x1f0000) returned 1 [0195.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210228 | out: hHeap=0x1f0000) returned 1 [0195.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20bc38 | out: hHeap=0x1f0000) returned 1 [0195.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206460 | out: hHeap=0x1f0000) returned 1 [0195.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101f8 | out: hHeap=0x1f0000) returned 1 [0195.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20bd50 | out: hHeap=0x1f0000) returned 1 [0195.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2063f0 | out: hHeap=0x1f0000) returned 1 [0195.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234fc8 | out: hHeap=0x1f0000) returned 1 [0195.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20bb98 | out: hHeap=0x1f0000) returned 1 [0195.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ad80 | out: hHeap=0x1f0000) returned 1 [0195.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216170 | out: hHeap=0x1f0000) returned 1 [0195.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b8c8 | out: hHeap=0x1f0000) returned 1 [0195.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0195.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215f30 | out: hHeap=0x1f0000) returned 1 [0195.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206450 | out: hHeap=0x1f0000) returned 1 [0195.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206560 | out: hHeap=0x1f0000) returned 1 [0195.957] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x23adb0 | out: hHeap=0x1f0000) returned 1 [0196.348] CloseHandle (hObject=0x218) returned 1 [0196.349] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c4b0 | out: hHeap=0x1f0000) returned 1 [0196.349] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c470 | out: hHeap=0x1f0000) returned 1 [0196.349] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226388 | out: hHeap=0x1f0000) returned 1 [0196.349] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260af0 | out: hHeap=0x1f0000) returned 1 [0196.349] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffa0 | out: hHeap=0x1f0000) returned 1 [0196.349] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205290 | out: hHeap=0x1f0000) returned 1 [0196.349] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x245e08 | out: hHeap=0x1f0000) returned 1 [0196.349] CloseHandle (hObject=0x1c0) returned 1 [0196.349] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c490 | out: hHeap=0x1f0000) returned 1 [0196.349] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c370 | out: hHeap=0x1f0000) returned 1 [0196.350] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20dd00 | out: hHeap=0x1f0000) returned 1 [0196.350] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ff0 | out: hHeap=0x1f0000) returned 1 [0196.350] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607c0 | out: hHeap=0x1f0000) returned 1 [0196.350] CloseHandle (hObject=0x1e0) returned 1 [0196.350] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c410 | out: hHeap=0x1f0000) returned 1 [0196.350] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c530 | out: hHeap=0x1f0000) returned 1 [0196.350] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230e38 | out: hHeap=0x1f0000) returned 1 [0196.350] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c3a0 | out: hHeap=0x1f0000) returned 1 [0196.350] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c460 | out: hHeap=0x1f0000) returned 1 [0196.350] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c4e0 | out: hHeap=0x1f0000) returned 1 [0196.350] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c520 | out: hHeap=0x1f0000) returned 1 [0196.350] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225048 | out: hHeap=0x1f0000) returned 1 [0196.350] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2595a0 | out: hHeap=0x1f0000) returned 1 [0196.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260498 | out: hHeap=0x1f0000) returned 1 [0196.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206658 | out: hHeap=0x1f0000) returned 1 [0196.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff28 | out: hHeap=0x1f0000) returned 1 [0196.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2100a8 | out: hHeap=0x1f0000) returned 1 [0196.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20e1f0 | out: hHeap=0x1f0000) returned 1 [0196.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x258298 | out: hHeap=0x1f0000) returned 1 [0196.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22cce0 | out: hHeap=0x1f0000) returned 1 [0196.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228230 | out: hHeap=0x1f0000) returned 1 [0196.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22acb0 | out: hHeap=0x1f0000) returned 1 [0196.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22dd00 | out: hHeap=0x1f0000) returned 1 [0196.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215af8 | out: hHeap=0x1f0000) returned 1 [0196.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20bd00 | out: hHeap=0x1f0000) returned 1 [0196.351] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\ParameterInfo.xml" (normalized: "c:\\588bce7c90097ed212\\parameterinfo.xml")) returned 1 [0196.353] FindNextFileW (in: hFindFile=0x214350, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x19dedd00, ftCreationTime.dwHighDateTime=0x1ca2a1b, ftLastAccessTime.dwLowDateTime=0x19dedd00, ftLastAccessTime.dwHighDateTime=0x1ca2a1b, ftLastWriteTime.dwLowDateTime=0x19dedd00, ftLastWriteTime.dwHighDateTime=0x1ca2a1b, nFileSizeHigh=0x0, nFileSizeLow=0x2d200, dwReserved0=0x0, dwReserved1=0x0, cFileName="RGB9RAST_x64.msi", cAlternateFileName="RGB9RA~1.MSI")) returned 1 [0196.353] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0196.353] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d280 [0196.353] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239508 [0196.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d280 | out: hHeap=0x1f0000) returned 1 [0196.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ae50 | out: hHeap=0x1f0000) returned 1 [0196.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0196.354] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\RGB9RAST_x64.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0196.354] GetFileType (hFile=0x1e0) returned 0x1 [0196.354] CloseHandle (hObject=0x1e0) returned 1 [0196.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239878 [0196.355] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\RGB9RAST_x64.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x64.msi"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x19dedd00, ftCreationTime.dwHighDateTime=0x1ca2a1b, ftLastAccessTime.dwLowDateTime=0x19dedd00, ftLastAccessTime.dwHighDateTime=0x1ca2a1b, ftLastWriteTime.dwLowDateTime=0x19dedd00, ftLastWriteTime.dwHighDateTime=0x1ca2a1b, nFileSizeHigh=0x0, nFileSizeLow=0x2d200)) returned 1 [0196.355] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239878 | out: hHeap=0x1f0000) returned 1 [0196.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239400 [0196.355] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\RGB9RAST_x64.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x64.msi"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x19dedd00, ftCreationTime.dwHighDateTime=0x1ca2a1b, ftLastAccessTime.dwLowDateTime=0x19dedd00, ftLastAccessTime.dwHighDateTime=0x1ca2a1b, ftLastWriteTime.dwLowDateTime=0x19dedd00, ftLastWriteTime.dwHighDateTime=0x1ca2a1b, nFileSizeHigh=0x0, nFileSizeLow=0x2d200)) returned 1 [0196.355] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239400 | out: hHeap=0x1f0000) returned 1 [0196.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239928 [0196.355] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239928 | out: hHeap=0x1f0000) returned 1 [0196.355] FindNextFileW (in: hFindFile=0x214350, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x177c8300, ftCreationTime.dwHighDateTime=0x1ca2a1b, ftLastAccessTime.dwLowDateTime=0x177c8300, ftLastAccessTime.dwHighDateTime=0x1ca2a1b, ftLastWriteTime.dwLowDateTime=0x177c8300, ftLastWriteTime.dwHighDateTime=0x1ca2a1b, nFileSizeHigh=0x0, nFileSizeLow=0x17200, dwReserved0=0x0, dwReserved1=0x0, cFileName="RGB9Rast_x86.msi", cAlternateFileName="RGB9RA~2.MSI")) returned 1 [0196.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0196.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d280 [0196.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239668 [0196.355] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d280 | out: hHeap=0x1f0000) returned 1 [0196.355] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239508 | out: hHeap=0x1f0000) returned 1 [0196.355] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0196.356] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\RGB9Rast_x86.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x86.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0196.356] GetFileType (hFile=0x1e0) returned 0x1 [0196.356] CloseHandle (hObject=0x1e0) returned 1 [0196.356] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239820 [0196.356] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\RGB9Rast_x86.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x86.msi"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x177c8300, ftCreationTime.dwHighDateTime=0x1ca2a1b, ftLastAccessTime.dwLowDateTime=0x177c8300, ftLastAccessTime.dwHighDateTime=0x1ca2a1b, ftLastWriteTime.dwLowDateTime=0x177c8300, ftLastWriteTime.dwHighDateTime=0x1ca2a1b, nFileSizeHigh=0x0, nFileSizeLow=0x17200)) returned 1 [0196.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239820 | out: hHeap=0x1f0000) returned 1 [0196.357] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2397c8 [0196.357] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\RGB9Rast_x86.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x86.msi"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x177c8300, ftCreationTime.dwHighDateTime=0x1ca2a1b, ftLastAccessTime.dwLowDateTime=0x177c8300, ftLastAccessTime.dwHighDateTime=0x1ca2a1b, ftLastWriteTime.dwLowDateTime=0x177c8300, ftLastWriteTime.dwHighDateTime=0x1ca2a1b, nFileSizeHigh=0x0, nFileSizeLow=0x17200)) returned 1 [0196.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2397c8 | out: hHeap=0x1f0000) returned 1 [0196.357] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239610 [0196.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239610 | out: hHeap=0x1f0000) returned 1 [0196.357] FindNextFileW (in: hFindFile=0x214350, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x13148, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.exe", cAlternateFileName="")) returned 1 [0196.357] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0196.357] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d280 [0196.357] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239560 [0196.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d280 | out: hHeap=0x1f0000) returned 1 [0196.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239668 | out: hHeap=0x1f0000) returned 1 [0196.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0196.358] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Setup.exe" (normalized: "c:\\588bce7c90097ed212\\setup.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0196.358] GetFileType (hFile=0x1e0) returned 0x1 [0196.358] CloseHandle (hObject=0x1e0) returned 1 [0196.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2399d8 [0196.358] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Setup.exe" (normalized: "c:\\588bce7c90097ed212\\setup.exe"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x13148)) returned 1 [0196.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2399d8 | out: hHeap=0x1f0000) returned 1 [0196.359] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239610 [0196.359] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Setup.exe" (normalized: "c:\\588bce7c90097ed212\\setup.exe"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x13148)) returned 1 [0196.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239610 | out: hHeap=0x1f0000) returned 1 [0196.359] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239610 [0196.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239610 | out: hHeap=0x1f0000) returned 1 [0196.359] FindNextFileW (in: hFindFile=0x214350, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0xc5158, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupEngine.dll", cAlternateFileName="SETUPE~1.DLL")) returned 1 [0196.359] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383c0 [0196.359] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0196.359] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239820 [0196.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0196.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239560 | out: hHeap=0x1f0000) returned 1 [0196.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383c0 | out: hHeap=0x1f0000) returned 1 [0196.360] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\SetupEngine.dll" (normalized: "c:\\588bce7c90097ed212\\setupengine.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0196.360] GetFileType (hFile=0x1e0) returned 0x1 [0196.360] CloseHandle (hObject=0x1e0) returned 1 [0196.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239610 [0196.360] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\SetupEngine.dll" (normalized: "c:\\588bce7c90097ed212\\setupengine.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0xc5158)) returned 1 [0196.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239610 | out: hHeap=0x1f0000) returned 1 [0196.361] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239668 [0196.361] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\SetupEngine.dll" (normalized: "c:\\588bce7c90097ed212\\setupengine.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0xc5158)) returned 1 [0196.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239668 | out: hHeap=0x1f0000) returned 1 [0196.361] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239878 [0196.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239878 | out: hHeap=0x1f0000) returned 1 [0196.361] FindNextFileW (in: hFindFile=0x214350, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x48150, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupUi.dll", cAlternateFileName="")) returned 1 [0196.361] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383c0 [0196.361] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0196.361] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2394b0 [0196.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0196.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239820 | out: hHeap=0x1f0000) returned 1 [0196.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383c0 | out: hHeap=0x1f0000) returned 1 [0196.362] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\SetupUi.dll" (normalized: "c:\\588bce7c90097ed212\\setupui.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0196.362] GetFileType (hFile=0x1e0) returned 0x1 [0196.362] CloseHandle (hObject=0x1e0) returned 1 [0196.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2397c8 [0196.363] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\SetupUi.dll" (normalized: "c:\\588bce7c90097ed212\\setupui.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x48150)) returned 1 [0196.363] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2397c8 | out: hHeap=0x1f0000) returned 1 [0196.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239718 [0196.363] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\SetupUi.dll" (normalized: "c:\\588bce7c90097ed212\\setupui.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x48150)) returned 1 [0196.364] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239718 | out: hHeap=0x1f0000) returned 1 [0196.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239928 [0196.364] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239928 | out: hHeap=0x1f0000) returned 1 [0196.364] GetLastError () returned 0x0 [0196.364] SetLastError (dwErrCode=0x0) [0196.364] AreFileApisANSI () returned 1 [0196.364] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58420, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0196.364] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58420, cbMultiByte=4, lpWideCharStr=0x1a1f070, cchWideChar=4 | out: lpWideCharStr=".exe") returned 4 [0196.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0196.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215d38 [0196.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d6a0 [0196.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239508 [0196.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0196.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238488 [0196.365] CryptAcquireContextA (in: phProv=0x1a1e758, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1a1e758*=0x22a468) returned 1 [0196.367] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238488 | out: pbBuffer=0x238488) returned 1 [0196.367] CryptReleaseContext (hProv=0x22a468, dwFlags=0x0) returned 1 [0196.367] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238488 | out: hHeap=0x1f0000) returned 1 [0196.368] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x258298 [0196.368] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x260498 [0196.368] QueryPerformanceCounter (in: lpPerformanceCount=0x1a1e6ec | out: lpPerformanceCount=0x1a1e6ec*=35373656120) returned 1 [0196.368] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1a1e72c | out: lpSystemTimeAsFileTime=0x1a1e72c) [0196.368] QueryPerformanceCounter (in: lpPerformanceCount=0x1a1e6ec | out: lpPerformanceCount=0x1a1e6ec*=35373680675) returned 1 [0196.368] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1a1e72c | out: lpSystemTimeAsFileTime=0x1a1e72c) [0196.368] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x21d280 [0196.368] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x24fd60 [0196.368] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x20d778 [0196.368] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x20e1f0 [0196.368] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff28 [0196.368] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206898 [0196.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffa0 [0196.369] GetLastError () returned 0x0 [0196.369] SetLastError (dwErrCode=0x0) [0196.369] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d280 | out: hHeap=0x1f0000) returned 1 [0196.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ab78 [0196.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x24aa28 [0196.369] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab78 | out: hHeap=0x1f0000) returned 1 [0196.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x235e08 [0196.369] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24aa28 | out: hHeap=0x1f0000) returned 1 [0196.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c4e0 [0196.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c4b0 [0196.370] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\SetupUi.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\setupui.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e5f8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0196.371] GetFileType (hFile=0x1e0) returned 0x1 [0196.371] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c420 [0196.371] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c520 [0196.372] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\SetupUi.dll" (normalized: "c:\\588bce7c90097ed212\\setupui.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e628, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0196.372] GetFileType (hFile=0x1c0) returned 0x1 [0196.372] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ff0 [0196.372] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x2051f0 [0196.372] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x235ee8 [0196.372] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c3a0 [0196.372] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c460 [0196.373] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\SetupUi.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\setupui.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e574, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0196.373] GetFileType (hFile=0x218) returned 0x1 [0196.373] GetLastError () returned 0xb7 [0196.373] SetLastError (dwErrCode=0xb7) [0196.373] GetLastError () returned 0xb7 [0196.373] SetLastError (dwErrCode=0xb7) [0196.374] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ff0 | out: hHeap=0x1f0000) returned 1 [0196.374] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2051f0 | out: hHeap=0x1f0000) returned 1 [0196.374] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe4) returned 0x25fd40 [0196.374] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x2051f0 [0196.374] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205290 [0196.374] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205150 [0196.374] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x230e38 [0196.374] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c370 [0196.374] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c410 [0196.374] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\SetupUi.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\setupui.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e574, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0196.375] GetFileType (hFile=0x200) returned 0x1 [0196.375] GetLastError () returned 0xb7 [0196.375] SetLastError (dwErrCode=0xb7) [0196.375] GetLastError () returned 0xb7 [0196.375] SetLastError (dwErrCode=0xb7) [0196.375] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205290 | out: hHeap=0x1f0000) returned 1 [0196.375] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205150 | out: hHeap=0x1f0000) returned 1 [0196.375] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205150 [0196.375] GetLastError () returned 0xb7 [0196.375] SetLastError (dwErrCode=0xb7) [0196.375] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205150 | out: hHeap=0x1f0000) returned 1 [0196.375] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204fb0 [0196.376] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205150 [0196.376] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205290 [0196.376] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb8) returned 0x20dd00 [0196.376] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c430 [0196.376] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c440 [0196.376] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\SetupUi.dll" (normalized: "c:\\588bce7c90097ed212\\setupui.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e56c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0196.376] GetFileType (hFile=0x204) returned 0x1 [0196.377] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x23adb0 [0196.377] ReadFile (in: hFile=0x204, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e4c8, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e4c8*=0x1000, lpOverlapped=0x0) returned 1 [0196.381] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24c600 [0196.382] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x23ddc8 [0196.383] GetLastError () returned 0x0 [0196.383] SetLastError (dwErrCode=0x0) [0196.383] GetLastError () returned 0x0 [0196.383] SetLastError (dwErrCode=0x0) [0196.383] GetLastError () returned 0x0 [0196.384] SetLastError (dwErrCode=0x0) [0196.384] GetLastError () returned 0x0 [0196.384] SetLastError (dwErrCode=0x0) [0196.384] ReadFile (in: hFile=0x204, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0196.630] WriteFile (in: hFile=0x200, lpBuffer=0x23ddc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0196.632] GetLastError () returned 0x0 [0196.632] SetLastError (dwErrCode=0x0) [0196.632] GetLastError () returned 0x0 [0196.632] SetLastError (dwErrCode=0x0) [0196.632] GetLastError () returned 0x0 [0196.633] SetLastError (dwErrCode=0x0) [0196.633] GetLastError () returned 0x0 [0196.633] SetLastError (dwErrCode=0x0) [0196.633] ReadFile (in: hFile=0x204, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0196.633] WriteFile (in: hFile=0x200, lpBuffer=0x23ddc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0196.634] GetLastError () returned 0x0 [0196.634] SetLastError (dwErrCode=0x0) [0196.634] GetLastError () returned 0x0 [0196.634] SetLastError (dwErrCode=0x0) [0196.634] GetLastError () returned 0x0 [0196.634] SetLastError (dwErrCode=0x0) [0196.635] GetLastError () returned 0x0 [0196.635] SetLastError (dwErrCode=0x0) [0196.635] ReadFile (in: hFile=0x204, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0196.635] WriteFile (in: hFile=0x200, lpBuffer=0x23ddc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0196.636] GetLastError () returned 0x0 [0196.636] SetLastError (dwErrCode=0x0) [0196.636] GetLastError () returned 0x0 [0196.636] SetLastError (dwErrCode=0x0) [0196.636] GetLastError () returned 0x0 [0196.636] SetLastError (dwErrCode=0x0) [0196.636] GetLastError () returned 0x0 [0196.636] SetLastError (dwErrCode=0x0) [0196.637] ReadFile (in: hFile=0x204, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0196.637] WriteFile (in: hFile=0x200, lpBuffer=0x23ddc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0196.637] GetLastError () returned 0x0 [0196.637] SetLastError (dwErrCode=0x0) [0196.637] GetLastError () returned 0x0 [0196.637] SetLastError (dwErrCode=0x0) [0196.638] GetLastError () returned 0x0 [0196.638] SetLastError (dwErrCode=0x0) [0196.638] GetLastError () returned 0x0 [0196.638] SetLastError (dwErrCode=0x0) [0196.638] ReadFile (in: hFile=0x204, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0196.638] WriteFile (in: hFile=0x200, lpBuffer=0x23ddc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0196.639] GetLastError () returned 0x0 [0196.639] SetLastError (dwErrCode=0x0) [0196.639] GetLastError () returned 0x0 [0196.639] SetLastError (dwErrCode=0x0) [0196.639] GetLastError () returned 0x0 [0196.639] SetLastError (dwErrCode=0x0) [0196.639] GetLastError () returned 0x0 [0196.640] SetLastError (dwErrCode=0x0) [0196.640] ReadFile (in: hFile=0x204, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0196.641] WriteFile (in: hFile=0x200, lpBuffer=0x23ddc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0196.642] GetLastError () returned 0x0 [0196.642] SetLastError (dwErrCode=0x0) [0196.642] GetLastError () returned 0x0 [0196.642] SetLastError (dwErrCode=0x0) [0196.642] GetLastError () returned 0x0 [0196.642] SetLastError (dwErrCode=0x0) [0196.642] GetLastError () returned 0x0 [0196.643] SetLastError (dwErrCode=0x0) [0196.643] ReadFile (in: hFile=0x204, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0196.643] WriteFile (in: hFile=0x200, lpBuffer=0x23ddc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0196.644] GetLastError () returned 0x0 [0196.644] SetLastError (dwErrCode=0x0) [0196.644] GetLastError () returned 0x0 [0196.644] SetLastError (dwErrCode=0x0) [0196.644] GetLastError () returned 0x0 [0196.644] SetLastError (dwErrCode=0x0) [0196.645] GetLastError () returned 0x0 [0196.645] SetLastError (dwErrCode=0x0) [0196.645] ReadFile (in: hFile=0x204, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0196.646] WriteFile (in: hFile=0x200, lpBuffer=0x23ddc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0196.646] GetLastError () returned 0x0 [0196.646] SetLastError (dwErrCode=0x0) [0196.647] GetLastError () returned 0x0 [0196.647] SetLastError (dwErrCode=0x0) [0196.647] GetLastError () returned 0x0 [0196.647] SetLastError (dwErrCode=0x0) [0196.647] GetLastError () returned 0x0 [0196.647] SetLastError (dwErrCode=0x0) [0196.648] ReadFile (in: hFile=0x204, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0196.648] WriteFile (in: hFile=0x200, lpBuffer=0x23ddc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0196.649] GetLastError () returned 0x0 [0196.649] SetLastError (dwErrCode=0x0) [0196.649] GetLastError () returned 0x0 [0196.649] SetLastError (dwErrCode=0x0) [0196.649] GetLastError () returned 0x0 [0196.649] SetLastError (dwErrCode=0x0) [0196.650] GetLastError () returned 0x0 [0196.650] SetLastError (dwErrCode=0x0) [0196.650] ReadFile (in: hFile=0x204, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0196.651] WriteFile (in: hFile=0x200, lpBuffer=0x23ddc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0196.651] GetLastError () returned 0x0 [0196.651] SetLastError (dwErrCode=0x0) [0196.651] GetLastError () returned 0x0 [0196.651] SetLastError (dwErrCode=0x0) [0196.652] GetLastError () returned 0x0 [0196.652] SetLastError (dwErrCode=0x0) [0196.652] GetLastError () returned 0x0 [0196.652] SetLastError (dwErrCode=0x0) [0196.652] ReadFile (in: hFile=0x204, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0196.653] WriteFile (in: hFile=0x200, lpBuffer=0x23ddc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0196.653] GetLastError () returned 0x0 [0196.653] SetLastError (dwErrCode=0x0) [0196.653] GetLastError () returned 0x0 [0196.653] SetLastError (dwErrCode=0x0) [0196.654] GetLastError () returned 0x0 [0196.654] SetLastError (dwErrCode=0x0) [0196.654] GetLastError () returned 0x0 [0196.654] SetLastError (dwErrCode=0x0) [0196.655] ReadFile (in: hFile=0x204, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0196.655] WriteFile (in: hFile=0x200, lpBuffer=0x23ddc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0196.655] GetLastError () returned 0x0 [0196.655] SetLastError (dwErrCode=0x0) [0196.655] GetLastError () returned 0x0 [0196.656] SetLastError (dwErrCode=0x0) [0196.656] GetLastError () returned 0x0 [0196.656] SetLastError (dwErrCode=0x0) [0196.656] GetLastError () returned 0x0 [0196.656] SetLastError (dwErrCode=0x0) [0196.656] ReadFile (in: hFile=0x204, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0196.656] WriteFile (in: hFile=0x200, lpBuffer=0x23ddc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0196.657] GetLastError () returned 0x0 [0196.657] SetLastError (dwErrCode=0x0) [0196.657] GetLastError () returned 0x0 [0196.657] SetLastError (dwErrCode=0x0) [0196.658] GetLastError () returned 0x0 [0196.658] SetLastError (dwErrCode=0x0) [0196.658] GetLastError () returned 0x0 [0196.658] SetLastError (dwErrCode=0x0) [0196.659] ReadFile (in: hFile=0x204, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0196.661] WriteFile (in: hFile=0x200, lpBuffer=0x23ddc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0196.662] GetLastError () returned 0x0 [0196.662] SetLastError (dwErrCode=0x0) [0196.662] GetLastError () returned 0x0 [0196.662] SetLastError (dwErrCode=0x0) [0196.662] GetLastError () returned 0x0 [0196.662] SetLastError (dwErrCode=0x0) [0196.663] GetLastError () returned 0x0 [0196.663] SetLastError (dwErrCode=0x0) [0196.663] ReadFile (in: hFile=0x204, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0196.664] WriteFile (in: hFile=0x200, lpBuffer=0x23ddc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0196.664] GetLastError () returned 0x0 [0196.664] SetLastError (dwErrCode=0x0) [0196.664] GetLastError () returned 0x0 [0196.665] SetLastError (dwErrCode=0x0) [0196.665] GetLastError () returned 0x0 [0196.665] SetLastError (dwErrCode=0x0) [0196.665] GetLastError () returned 0x0 [0196.665] SetLastError (dwErrCode=0x0) [0196.666] ReadFile (in: hFile=0x204, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0196.666] WriteFile (in: hFile=0x200, lpBuffer=0x23ddc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0196.666] GetLastError () returned 0x0 [0196.666] SetLastError (dwErrCode=0x0) [0196.667] GetLastError () returned 0x0 [0196.667] SetLastError (dwErrCode=0x0) [0196.667] GetLastError () returned 0x0 [0196.667] SetLastError (dwErrCode=0x0) [0196.667] GetLastError () returned 0x0 [0196.667] SetLastError (dwErrCode=0x0) [0196.668] ReadFile (in: hFile=0x204, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0196.668] WriteFile (in: hFile=0x200, lpBuffer=0x23ddc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0196.669] GetLastError () returned 0x0 [0196.669] SetLastError (dwErrCode=0x0) [0196.669] GetLastError () returned 0x0 [0196.669] SetLastError (dwErrCode=0x0) [0196.669] GetLastError () returned 0x0 [0196.669] SetLastError (dwErrCode=0x0) [0196.669] GetLastError () returned 0x0 [0196.669] SetLastError (dwErrCode=0x0) [0196.670] ReadFile (in: hFile=0x204, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0196.670] WriteFile (in: hFile=0x200, lpBuffer=0x23ddc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0196.670] GetLastError () returned 0x0 [0196.670] SetLastError (dwErrCode=0x0) [0196.671] GetLastError () returned 0x0 [0196.671] SetLastError (dwErrCode=0x0) [0196.671] GetLastError () returned 0x0 [0196.671] SetLastError (dwErrCode=0x0) [0196.671] GetLastError () returned 0x0 [0196.671] SetLastError (dwErrCode=0x0) [0196.671] ReadFile (in: hFile=0x204, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0196.672] WriteFile (in: hFile=0x200, lpBuffer=0x23ddc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0196.672] GetLastError () returned 0x0 [0196.672] SetLastError (dwErrCode=0x0) [0196.673] GetLastError () returned 0x0 [0196.673] SetLastError (dwErrCode=0x0) [0196.673] GetLastError () returned 0x0 [0196.673] SetLastError (dwErrCode=0x0) [0196.673] GetLastError () returned 0x0 [0196.673] SetLastError (dwErrCode=0x0) [0196.673] ReadFile (in: hFile=0x204, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0196.674] WriteFile (in: hFile=0x200, lpBuffer=0x23ddc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0196.674] GetLastError () returned 0x0 [0196.674] SetLastError (dwErrCode=0x0) [0196.674] GetLastError () returned 0x0 [0196.674] SetLastError (dwErrCode=0x0) [0196.675] GetLastError () returned 0x0 [0196.675] SetLastError (dwErrCode=0x0) [0196.675] GetLastError () returned 0x0 [0196.675] SetLastError (dwErrCode=0x0) [0196.675] ReadFile (in: hFile=0x204, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0196.944] WriteFile (in: hFile=0x200, lpBuffer=0x23ddc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0196.944] GetLastError () returned 0x0 [0196.944] SetLastError (dwErrCode=0x0) [0196.945] GetLastError () returned 0x0 [0196.945] SetLastError (dwErrCode=0x0) [0196.945] GetLastError () returned 0x0 [0196.945] SetLastError (dwErrCode=0x0) [0196.945] GetLastError () returned 0x0 [0196.946] SetLastError (dwErrCode=0x0) [0196.946] ReadFile (in: hFile=0x204, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0196.946] WriteFile (in: hFile=0x200, lpBuffer=0x23ddc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0196.947] GetLastError () returned 0x0 [0196.947] SetLastError (dwErrCode=0x0) [0196.947] GetLastError () returned 0x0 [0196.947] SetLastError (dwErrCode=0x0) [0196.948] GetLastError () returned 0x0 [0196.948] SetLastError (dwErrCode=0x0) [0196.948] GetLastError () returned 0x0 [0196.948] SetLastError (dwErrCode=0x0) [0196.948] ReadFile (in: hFile=0x204, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0196.949] WriteFile (in: hFile=0x200, lpBuffer=0x23ddc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0196.949] GetLastError () returned 0x0 [0196.949] SetLastError (dwErrCode=0x0) [0196.949] GetLastError () returned 0x0 [0196.949] SetLastError (dwErrCode=0x0) [0196.950] GetLastError () returned 0x0 [0196.950] SetLastError (dwErrCode=0x0) [0196.950] GetLastError () returned 0x0 [0196.950] SetLastError (dwErrCode=0x0) [0196.951] ReadFile (in: hFile=0x204, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0196.951] WriteFile (in: hFile=0x200, lpBuffer=0x23ddc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0196.952] GetLastError () returned 0x0 [0196.952] SetLastError (dwErrCode=0x0) [0196.952] GetLastError () returned 0x0 [0196.952] SetLastError (dwErrCode=0x0) [0196.952] GetLastError () returned 0x0 [0196.952] SetLastError (dwErrCode=0x0) [0196.952] GetLastError () returned 0x0 [0196.952] SetLastError (dwErrCode=0x0) [0196.953] ReadFile (in: hFile=0x204, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0196.953] WriteFile (in: hFile=0x200, lpBuffer=0x23ddc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0196.953] GetLastError () returned 0x0 [0196.953] SetLastError (dwErrCode=0x0) [0196.953] GetLastError () returned 0x0 [0196.953] SetLastError (dwErrCode=0x0) [0196.953] GetLastError () returned 0x0 [0196.953] SetLastError (dwErrCode=0x0) [0196.953] GetLastError () returned 0x0 [0196.954] SetLastError (dwErrCode=0x0) [0196.954] ReadFile (in: hFile=0x204, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0196.954] WriteFile (in: hFile=0x200, lpBuffer=0x23ddc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0196.954] GetLastError () returned 0x0 [0196.954] SetLastError (dwErrCode=0x0) [0196.954] GetLastError () returned 0x0 [0196.954] SetLastError (dwErrCode=0x0) [0196.954] GetLastError () returned 0x0 [0196.954] SetLastError (dwErrCode=0x0) [0196.955] GetLastError () returned 0x0 [0196.955] SetLastError (dwErrCode=0x0) [0196.955] ReadFile (in: hFile=0x204, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0196.955] WriteFile (in: hFile=0x200, lpBuffer=0x23ddc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0196.955] GetLastError () returned 0x0 [0196.955] SetLastError (dwErrCode=0x0) [0196.955] GetLastError () returned 0x0 [0196.956] SetLastError (dwErrCode=0x0) [0196.956] GetLastError () returned 0x0 [0196.956] SetLastError (dwErrCode=0x0) [0196.956] GetLastError () returned 0x0 [0196.956] SetLastError (dwErrCode=0x0) [0196.956] ReadFile (in: hFile=0x204, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0196.956] WriteFile (in: hFile=0x200, lpBuffer=0x23ddc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0196.957] GetLastError () returned 0x0 [0196.957] SetLastError (dwErrCode=0x0) [0196.957] GetLastError () returned 0x0 [0196.957] SetLastError (dwErrCode=0x0) [0196.957] GetLastError () returned 0x0 [0196.957] SetLastError (dwErrCode=0x0) [0196.957] GetLastError () returned 0x0 [0196.957] SetLastError (dwErrCode=0x0) [0196.958] ReadFile (in: hFile=0x204, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0196.958] WriteFile (in: hFile=0x200, lpBuffer=0x23ddc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0196.958] GetLastError () returned 0x0 [0196.958] SetLastError (dwErrCode=0x0) [0196.958] GetLastError () returned 0x0 [0196.958] SetLastError (dwErrCode=0x0) [0196.959] GetLastError () returned 0x0 [0196.959] SetLastError (dwErrCode=0x0) [0196.959] GetLastError () returned 0x0 [0196.959] SetLastError (dwErrCode=0x0) [0196.959] ReadFile (in: hFile=0x204, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0196.959] WriteFile (in: hFile=0x200, lpBuffer=0x23ddc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0196.960] GetLastError () returned 0x0 [0196.960] SetLastError (dwErrCode=0x0) [0196.960] GetLastError () returned 0x0 [0196.960] SetLastError (dwErrCode=0x0) [0196.960] GetLastError () returned 0x0 [0196.960] SetLastError (dwErrCode=0x0) [0196.960] GetLastError () returned 0x0 [0196.960] SetLastError (dwErrCode=0x0) [0196.961] ReadFile (in: hFile=0x204, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0196.961] WriteFile (in: hFile=0x200, lpBuffer=0x23ddc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0196.961] GetLastError () returned 0x0 [0196.961] SetLastError (dwErrCode=0x0) [0196.961] GetLastError () returned 0x0 [0196.961] SetLastError (dwErrCode=0x0) [0196.962] GetLastError () returned 0x0 [0196.962] SetLastError (dwErrCode=0x0) [0196.962] GetLastError () returned 0x0 [0196.962] SetLastError (dwErrCode=0x0) [0196.962] ReadFile (in: hFile=0x204, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0196.962] WriteFile (in: hFile=0x200, lpBuffer=0x23ddc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0196.963] GetLastError () returned 0x0 [0196.963] SetLastError (dwErrCode=0x0) [0196.963] GetLastError () returned 0x0 [0196.963] SetLastError (dwErrCode=0x0) [0196.963] GetLastError () returned 0x0 [0196.963] SetLastError (dwErrCode=0x0) [0196.963] GetLastError () returned 0x0 [0196.963] SetLastError (dwErrCode=0x0) [0196.963] ReadFile (in: hFile=0x204, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0196.963] WriteFile (in: hFile=0x200, lpBuffer=0x23ddc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0196.964] GetLastError () returned 0x0 [0196.964] SetLastError (dwErrCode=0x0) [0196.964] GetLastError () returned 0x0 [0196.964] SetLastError (dwErrCode=0x0) [0196.964] GetLastError () returned 0x0 [0196.964] SetLastError (dwErrCode=0x0) [0196.964] GetLastError () returned 0x0 [0196.964] SetLastError (dwErrCode=0x0) [0196.965] ReadFile (in: hFile=0x204, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0196.965] WriteFile (in: hFile=0x200, lpBuffer=0x23ddc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0196.965] GetLastError () returned 0x0 [0196.965] SetLastError (dwErrCode=0x0) [0196.965] GetLastError () returned 0x0 [0196.965] SetLastError (dwErrCode=0x0) [0196.965] GetLastError () returned 0x0 [0196.965] SetLastError (dwErrCode=0x0) [0196.965] GetLastError () returned 0x0 [0196.965] SetLastError (dwErrCode=0x0) [0196.966] ReadFile (in: hFile=0x204, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0196.966] WriteFile (in: hFile=0x200, lpBuffer=0x23ddc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0196.966] GetLastError () returned 0x0 [0196.966] SetLastError (dwErrCode=0x0) [0196.966] GetLastError () returned 0x0 [0196.966] SetLastError (dwErrCode=0x0) [0196.967] GetLastError () returned 0x0 [0196.967] SetLastError (dwErrCode=0x0) [0196.967] GetLastError () returned 0x0 [0196.967] SetLastError (dwErrCode=0x0) [0196.967] ReadFile (in: hFile=0x204, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0196.967] WriteFile (in: hFile=0x200, lpBuffer=0x23ddc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0196.967] GetLastError () returned 0x0 [0196.968] SetLastError (dwErrCode=0x0) [0196.968] GetLastError () returned 0x0 [0196.968] SetLastError (dwErrCode=0x0) [0196.968] GetLastError () returned 0x0 [0196.968] SetLastError (dwErrCode=0x0) [0196.968] GetLastError () returned 0x0 [0196.968] SetLastError (dwErrCode=0x0) [0196.968] ReadFile (in: hFile=0x204, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0196.969] WriteFile (in: hFile=0x200, lpBuffer=0x23ddc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0196.969] GetLastError () returned 0x0 [0196.969] SetLastError (dwErrCode=0x0) [0196.969] GetLastError () returned 0x0 [0196.969] SetLastError (dwErrCode=0x0) [0196.969] GetLastError () returned 0x0 [0196.969] SetLastError (dwErrCode=0x0) [0196.969] GetLastError () returned 0x0 [0196.969] SetLastError (dwErrCode=0x0) [0196.970] ReadFile (in: hFile=0x204, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0196.970] WriteFile (in: hFile=0x200, lpBuffer=0x23ddc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0196.970] GetLastError () returned 0x0 [0196.970] SetLastError (dwErrCode=0x0) [0196.970] GetLastError () returned 0x0 [0196.971] SetLastError (dwErrCode=0x0) [0196.971] GetLastError () returned 0x0 [0196.971] SetLastError (dwErrCode=0x0) [0196.971] GetLastError () returned 0x0 [0196.971] SetLastError (dwErrCode=0x0) [0196.971] ReadFile (in: hFile=0x204, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0196.971] WriteFile (in: hFile=0x200, lpBuffer=0x23ddc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0196.972] GetLastError () returned 0x0 [0196.972] SetLastError (dwErrCode=0x0) [0196.972] GetLastError () returned 0x0 [0196.972] SetLastError (dwErrCode=0x0) [0196.972] GetLastError () returned 0x0 [0196.972] SetLastError (dwErrCode=0x0) [0196.972] GetLastError () returned 0x0 [0196.972] SetLastError (dwErrCode=0x0) [0196.973] ReadFile (in: hFile=0x204, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0196.973] WriteFile (in: hFile=0x200, lpBuffer=0x23ddc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0196.973] GetLastError () returned 0x0 [0196.973] SetLastError (dwErrCode=0x0) [0196.973] GetLastError () returned 0x0 [0196.973] SetLastError (dwErrCode=0x0) [0196.973] GetLastError () returned 0x0 [0196.974] SetLastError (dwErrCode=0x0) [0196.974] GetLastError () returned 0x0 [0196.974] SetLastError (dwErrCode=0x0) [0196.974] ReadFile (in: hFile=0x204, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0196.974] WriteFile (in: hFile=0x200, lpBuffer=0x23ddc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0196.977] GetLastError () returned 0x0 [0196.977] SetLastError (dwErrCode=0x0) [0196.977] GetLastError () returned 0x0 [0196.977] SetLastError (dwErrCode=0x0) [0196.977] GetLastError () returned 0x0 [0196.977] SetLastError (dwErrCode=0x0) [0196.977] GetLastError () returned 0x0 [0196.977] SetLastError (dwErrCode=0x0) [0196.977] ReadFile (in: hFile=0x204, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0196.977] WriteFile (in: hFile=0x200, lpBuffer=0x23ddc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0196.978] GetLastError () returned 0x0 [0196.978] SetLastError (dwErrCode=0x0) [0196.978] GetLastError () returned 0x0 [0196.978] SetLastError (dwErrCode=0x0) [0196.978] GetLastError () returned 0x0 [0196.978] SetLastError (dwErrCode=0x0) [0196.978] GetLastError () returned 0x0 [0196.978] SetLastError (dwErrCode=0x0) [0196.979] ReadFile (in: hFile=0x204, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0196.979] WriteFile (in: hFile=0x200, lpBuffer=0x23ddc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0196.979] GetLastError () returned 0x0 [0196.979] SetLastError (dwErrCode=0x0) [0196.979] GetLastError () returned 0x0 [0196.979] SetLastError (dwErrCode=0x0) [0196.980] GetLastError () returned 0x0 [0196.980] SetLastError (dwErrCode=0x0) [0196.980] GetLastError () returned 0x0 [0196.980] SetLastError (dwErrCode=0x0) [0196.980] ReadFile (in: hFile=0x204, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0196.980] WriteFile (in: hFile=0x200, lpBuffer=0x23ddc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0196.981] GetLastError () returned 0x0 [0196.981] SetLastError (dwErrCode=0x0) [0196.981] GetLastError () returned 0x0 [0196.981] SetLastError (dwErrCode=0x0) [0196.981] GetLastError () returned 0x0 [0196.981] SetLastError (dwErrCode=0x0) [0196.981] GetLastError () returned 0x0 [0196.981] SetLastError (dwErrCode=0x0) [0196.981] ReadFile (in: hFile=0x204, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0196.982] WriteFile (in: hFile=0x200, lpBuffer=0x23ddc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0196.982] GetLastError () returned 0x0 [0196.982] SetLastError (dwErrCode=0x0) [0196.982] GetLastError () returned 0x0 [0196.982] SetLastError (dwErrCode=0x0) [0196.983] GetLastError () returned 0x0 [0196.983] SetLastError (dwErrCode=0x0) [0196.983] GetLastError () returned 0x0 [0196.983] SetLastError (dwErrCode=0x0) [0196.983] ReadFile (in: hFile=0x204, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0197.245] WriteFile (in: hFile=0x200, lpBuffer=0x23ddc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0197.245] GetLastError () returned 0x0 [0197.245] SetLastError (dwErrCode=0x0) [0197.245] GetLastError () returned 0x0 [0197.245] SetLastError (dwErrCode=0x0) [0197.245] GetLastError () returned 0x0 [0197.245] SetLastError (dwErrCode=0x0) [0197.246] GetLastError () returned 0x0 [0197.246] SetLastError (dwErrCode=0x0) [0197.246] ReadFile (in: hFile=0x204, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0197.246] WriteFile (in: hFile=0x200, lpBuffer=0x23ddc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0197.246] GetLastError () returned 0x0 [0197.247] SetLastError (dwErrCode=0x0) [0197.247] GetLastError () returned 0x0 [0197.247] SetLastError (dwErrCode=0x0) [0197.247] GetLastError () returned 0x0 [0197.247] SetLastError (dwErrCode=0x0) [0197.247] GetLastError () returned 0x0 [0197.247] SetLastError (dwErrCode=0x0) [0197.248] ReadFile (in: hFile=0x204, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0197.248] WriteFile (in: hFile=0x200, lpBuffer=0x23ddc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0197.248] GetLastError () returned 0x0 [0197.248] SetLastError (dwErrCode=0x0) [0197.248] GetLastError () returned 0x0 [0197.248] SetLastError (dwErrCode=0x0) [0197.249] GetLastError () returned 0x0 [0197.249] SetLastError (dwErrCode=0x0) [0197.249] GetLastError () returned 0x0 [0197.249] SetLastError (dwErrCode=0x0) [0197.249] ReadFile (in: hFile=0x204, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0197.249] WriteFile (in: hFile=0x200, lpBuffer=0x23ddc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0197.250] GetLastError () returned 0x0 [0197.250] SetLastError (dwErrCode=0x0) [0197.250] GetLastError () returned 0x0 [0197.250] SetLastError (dwErrCode=0x0) [0197.250] GetLastError () returned 0x0 [0197.250] SetLastError (dwErrCode=0x0) [0197.250] GetLastError () returned 0x0 [0197.251] SetLastError (dwErrCode=0x0) [0197.251] ReadFile (in: hFile=0x204, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0197.251] WriteFile (in: hFile=0x200, lpBuffer=0x23ddc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0197.251] GetLastError () returned 0x0 [0197.252] SetLastError (dwErrCode=0x0) [0197.252] GetLastError () returned 0x0 [0197.252] SetLastError (dwErrCode=0x0) [0197.252] GetLastError () returned 0x0 [0197.252] SetLastError (dwErrCode=0x0) [0197.252] GetLastError () returned 0x0 [0197.252] SetLastError (dwErrCode=0x0) [0197.252] ReadFile (in: hFile=0x204, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0197.252] WriteFile (in: hFile=0x200, lpBuffer=0x23ddc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0197.253] GetLastError () returned 0x0 [0197.253] SetLastError (dwErrCode=0x0) [0197.253] GetLastError () returned 0x0 [0197.253] SetLastError (dwErrCode=0x0) [0197.253] GetLastError () returned 0x0 [0197.253] SetLastError (dwErrCode=0x0) [0197.257] GetLastError () returned 0x0 [0197.257] SetLastError (dwErrCode=0x0) [0197.257] ReadFile (in: hFile=0x204, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0197.257] WriteFile (in: hFile=0x200, lpBuffer=0x23ddc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0197.258] GetLastError () returned 0x0 [0197.258] SetLastError (dwErrCode=0x0) [0197.258] GetLastError () returned 0x0 [0197.258] SetLastError (dwErrCode=0x0) [0197.258] GetLastError () returned 0x0 [0197.258] SetLastError (dwErrCode=0x0) [0197.258] GetLastError () returned 0x0 [0197.258] SetLastError (dwErrCode=0x0) [0197.258] ReadFile (in: hFile=0x204, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0197.259] WriteFile (in: hFile=0x200, lpBuffer=0x23ddc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0197.259] GetLastError () returned 0x0 [0197.259] SetLastError (dwErrCode=0x0) [0197.259] GetLastError () returned 0x0 [0197.259] SetLastError (dwErrCode=0x0) [0197.259] GetLastError () returned 0x0 [0197.259] SetLastError (dwErrCode=0x0) [0197.259] GetLastError () returned 0x0 [0197.259] SetLastError (dwErrCode=0x0) [0197.260] ReadFile (in: hFile=0x204, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0197.260] WriteFile (in: hFile=0x200, lpBuffer=0x23ddc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0197.260] GetLastError () returned 0x0 [0197.260] SetLastError (dwErrCode=0x0) [0197.260] GetLastError () returned 0x0 [0197.261] SetLastError (dwErrCode=0x0) [0197.261] GetLastError () returned 0x0 [0197.261] SetLastError (dwErrCode=0x0) [0197.261] GetLastError () returned 0x0 [0197.261] SetLastError (dwErrCode=0x0) [0197.261] ReadFile (in: hFile=0x204, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0197.261] WriteFile (in: hFile=0x200, lpBuffer=0x23ddc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0197.262] GetLastError () returned 0x0 [0197.262] SetLastError (dwErrCode=0x0) [0197.262] GetLastError () returned 0x0 [0197.262] SetLastError (dwErrCode=0x0) [0197.262] GetLastError () returned 0x0 [0197.262] SetLastError (dwErrCode=0x0) [0197.262] GetLastError () returned 0x0 [0197.262] SetLastError (dwErrCode=0x0) [0197.262] ReadFile (in: hFile=0x204, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0197.262] WriteFile (in: hFile=0x200, lpBuffer=0x23ddc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0197.263] GetLastError () returned 0x0 [0197.263] SetLastError (dwErrCode=0x0) [0197.263] GetLastError () returned 0x0 [0197.263] SetLastError (dwErrCode=0x0) [0197.263] GetLastError () returned 0x0 [0197.263] SetLastError (dwErrCode=0x0) [0197.263] GetLastError () returned 0x0 [0197.263] SetLastError (dwErrCode=0x0) [0197.263] ReadFile (in: hFile=0x204, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0197.264] WriteFile (in: hFile=0x200, lpBuffer=0x23ddc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0197.264] GetLastError () returned 0x0 [0197.264] SetLastError (dwErrCode=0x0) [0197.264] GetLastError () returned 0x0 [0197.264] SetLastError (dwErrCode=0x0) [0197.264] GetLastError () returned 0x0 [0197.264] SetLastError (dwErrCode=0x0) [0197.264] GetLastError () returned 0x0 [0197.264] SetLastError (dwErrCode=0x0) [0197.265] ReadFile (in: hFile=0x204, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0197.265] WriteFile (in: hFile=0x200, lpBuffer=0x23ddc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0197.265] GetLastError () returned 0x0 [0197.265] SetLastError (dwErrCode=0x0) [0197.265] GetLastError () returned 0x0 [0197.265] SetLastError (dwErrCode=0x0) [0197.266] GetLastError () returned 0x0 [0197.266] SetLastError (dwErrCode=0x0) [0197.266] GetLastError () returned 0x0 [0197.266] SetLastError (dwErrCode=0x0) [0197.266] ReadFile (in: hFile=0x204, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0197.266] WriteFile (in: hFile=0x200, lpBuffer=0x23ddc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0197.266] GetLastError () returned 0x0 [0197.266] SetLastError (dwErrCode=0x0) [0197.267] GetLastError () returned 0x0 [0197.267] SetLastError (dwErrCode=0x0) [0197.267] GetLastError () returned 0x0 [0197.267] SetLastError (dwErrCode=0x0) [0197.267] GetLastError () returned 0x0 [0197.267] SetLastError (dwErrCode=0x0) [0197.267] ReadFile (in: hFile=0x204, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0197.267] WriteFile (in: hFile=0x200, lpBuffer=0x23ddc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0197.268] GetLastError () returned 0x0 [0197.268] SetLastError (dwErrCode=0x0) [0197.268] GetLastError () returned 0x0 [0197.268] SetLastError (dwErrCode=0x0) [0197.268] GetLastError () returned 0x0 [0197.268] SetLastError (dwErrCode=0x0) [0197.268] GetLastError () returned 0x0 [0197.268] SetLastError (dwErrCode=0x0) [0197.268] ReadFile (in: hFile=0x204, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0197.268] WriteFile (in: hFile=0x200, lpBuffer=0x23ddc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0197.269] GetLastError () returned 0x0 [0197.269] SetLastError (dwErrCode=0x0) [0197.269] GetLastError () returned 0x0 [0197.269] SetLastError (dwErrCode=0x0) [0197.269] GetLastError () returned 0x0 [0197.269] SetLastError (dwErrCode=0x0) [0197.269] GetLastError () returned 0x0 [0197.269] SetLastError (dwErrCode=0x0) [0197.271] ReadFile (in: hFile=0x204, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0197.271] WriteFile (in: hFile=0x200, lpBuffer=0x23ddc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0197.271] GetLastError () returned 0x0 [0197.271] SetLastError (dwErrCode=0x0) [0197.271] GetLastError () returned 0x0 [0197.271] SetLastError (dwErrCode=0x0) [0197.271] GetLastError () returned 0x0 [0197.271] SetLastError (dwErrCode=0x0) [0197.271] GetLastError () returned 0x0 [0197.271] SetLastError (dwErrCode=0x0) [0197.271] ReadFile (in: hFile=0x204, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0197.272] WriteFile (in: hFile=0x200, lpBuffer=0x23ddc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0197.272] GetLastError () returned 0x0 [0197.272] SetLastError (dwErrCode=0x0) [0197.272] GetLastError () returned 0x0 [0197.272] SetLastError (dwErrCode=0x0) [0197.272] GetLastError () returned 0x0 [0197.272] SetLastError (dwErrCode=0x0) [0197.272] GetLastError () returned 0x0 [0197.272] SetLastError (dwErrCode=0x0) [0197.273] ReadFile (in: hFile=0x204, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0197.273] WriteFile (in: hFile=0x200, lpBuffer=0x23ddc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0197.273] GetLastError () returned 0x0 [0197.273] SetLastError (dwErrCode=0x0) [0197.273] GetLastError () returned 0x0 [0197.273] SetLastError (dwErrCode=0x0) [0197.273] GetLastError () returned 0x0 [0197.274] SetLastError (dwErrCode=0x0) [0197.274] GetLastError () returned 0x0 [0197.274] SetLastError (dwErrCode=0x0) [0197.274] ReadFile (in: hFile=0x204, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0197.274] WriteFile (in: hFile=0x200, lpBuffer=0x23ddc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0197.275] GetLastError () returned 0x0 [0197.275] SetLastError (dwErrCode=0x0) [0197.275] GetLastError () returned 0x0 [0197.275] SetLastError (dwErrCode=0x0) [0197.275] GetLastError () returned 0x0 [0197.276] SetLastError (dwErrCode=0x0) [0197.276] GetLastError () returned 0x0 [0197.276] SetLastError (dwErrCode=0x0) [0197.276] ReadFile (in: hFile=0x204, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0197.276] WriteFile (in: hFile=0x200, lpBuffer=0x23ddc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0197.276] GetLastError () returned 0x0 [0197.276] SetLastError (dwErrCode=0x0) [0197.276] GetLastError () returned 0x0 [0197.277] SetLastError (dwErrCode=0x0) [0197.277] GetLastError () returned 0x0 [0197.277] SetLastError (dwErrCode=0x0) [0197.277] GetLastError () returned 0x0 [0197.277] SetLastError (dwErrCode=0x0) [0197.277] ReadFile (in: hFile=0x204, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0197.277] WriteFile (in: hFile=0x200, lpBuffer=0x23ddc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0197.277] GetLastError () returned 0x0 [0197.278] SetLastError (dwErrCode=0x0) [0197.278] GetLastError () returned 0x0 [0197.278] SetLastError (dwErrCode=0x0) [0197.278] GetLastError () returned 0x0 [0197.278] SetLastError (dwErrCode=0x0) [0197.278] GetLastError () returned 0x0 [0197.278] SetLastError (dwErrCode=0x0) [0197.278] ReadFile (in: hFile=0x204, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0197.279] WriteFile (in: hFile=0x200, lpBuffer=0x23ddc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0197.280] GetLastError () returned 0x0 [0197.280] SetLastError (dwErrCode=0x0) [0197.280] GetLastError () returned 0x0 [0197.280] SetLastError (dwErrCode=0x0) [0197.280] GetLastError () returned 0x0 [0197.280] SetLastError (dwErrCode=0x0) [0197.280] GetLastError () returned 0x0 [0197.280] SetLastError (dwErrCode=0x0) [0197.280] ReadFile (in: hFile=0x204, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0197.281] WriteFile (in: hFile=0x200, lpBuffer=0x23ddc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0197.281] GetLastError () returned 0x0 [0197.281] SetLastError (dwErrCode=0x0) [0197.281] GetLastError () returned 0x0 [0197.281] SetLastError (dwErrCode=0x0) [0197.281] GetLastError () returned 0x0 [0197.282] SetLastError (dwErrCode=0x0) [0197.282] GetLastError () returned 0x0 [0197.282] SetLastError (dwErrCode=0x0) [0197.282] ReadFile (in: hFile=0x204, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0197.282] WriteFile (in: hFile=0x200, lpBuffer=0x23ddc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0197.282] GetLastError () returned 0x0 [0197.282] SetLastError (dwErrCode=0x0) [0197.282] GetLastError () returned 0x0 [0197.283] SetLastError (dwErrCode=0x0) [0197.283] GetLastError () returned 0x0 [0197.283] SetLastError (dwErrCode=0x0) [0197.283] GetLastError () returned 0x0 [0197.283] SetLastError (dwErrCode=0x0) [0197.283] ReadFile (in: hFile=0x204, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x1000, lpOverlapped=0x0) returned 1 [0197.283] WriteFile (in: hFile=0x200, lpBuffer=0x23ddc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0197.284] GetLastError () returned 0x0 [0197.284] SetLastError (dwErrCode=0x0) [0197.284] GetLastError () returned 0x0 [0197.284] SetLastError (dwErrCode=0x0) [0197.284] GetLastError () returned 0x0 [0197.284] SetLastError (dwErrCode=0x0) [0197.284] GetLastError () returned 0x0 [0197.284] SetLastError (dwErrCode=0x0) [0197.285] ReadFile (in: hFile=0x204, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x150, lpOverlapped=0x0) returned 1 [0197.623] ReadFile (in: hFile=0x204, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1e558, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x1a1e558*=0x0, lpOverlapped=0x0) returned 1 [0197.623] WriteFile (in: hFile=0x200, lpBuffer=0x23ddc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1a1e39c, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesWritten=0x1a1e39c*=0x1000, lpOverlapped=0x0) returned 1 [0197.623] GetLastError () returned 0x0 [0197.623] SetLastError (dwErrCode=0x0) [0197.624] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20fef8 [0197.624] GetLastError () returned 0x0 [0197.624] SetLastError (dwErrCode=0x0) [0197.624] WriteFile (in: hFile=0x200, lpBuffer=0x23ddc8*, nNumberOfBytesToWrite=0x160, lpNumberOfBytesWritten=0x1a1e44c, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesWritten=0x1a1e44c*=0x160, lpOverlapped=0x0) returned 1 [0197.624] GetLastError () returned 0x0 [0197.624] SetLastError (dwErrCode=0x0) [0197.624] GetLastError () returned 0x0 [0197.624] SetLastError (dwErrCode=0x0) [0197.625] GetLastError () returned 0x0 [0197.625] SetLastError (dwErrCode=0x0) [0197.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205150 | out: hHeap=0x1f0000) returned 1 [0197.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205290 | out: hHeap=0x1f0000) returned 1 [0197.625] CloseHandle (hObject=0x1e0) returned 1 [0197.905] CloseHandle (hObject=0x1c0) returned 1 [0197.906] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c590 [0197.906] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c5a0 [0198.235] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\SetupUi.dll" (normalized: "c:\\588bce7c90097ed212\\setupui.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e628, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0198.241] GetFileType (hFile=0x1f4) returned 0x1 [0198.241] GetLastError () returned 0xb7 [0198.241] SetLastError (dwErrCode=0xb7) [0198.242] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x246e10 [0198.242] GetLastError () returned 0xb7 [0198.242] SetLastError (dwErrCode=0xb7) [0198.242] WriteFile (in: hFile=0x1f4, lpBuffer=0x1a1d2bc*, nNumberOfBytesToWrite=0x1, lpNumberOfBytesWritten=0x1a1d2b4, lpOverlapped=0x0 | out: lpBuffer=0x1a1d2bc*, lpNumberOfBytesWritten=0x1a1d2b4*=0x1, lpOverlapped=0x0) returned 1 [0198.244] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x246e10 | out: hHeap=0x1f0000) returned 1 [0198.244] CloseHandle (hObject=0x1f4) returned 1 [0198.244] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\SetupUi.dll" (normalized: "c:\\588bce7c90097ed212\\setupui.dll")) returned 0 [0198.244] GetLastError () returned 0x20 [0198.244] GetLastError () returned 0x20 [0198.245] SetLastError (dwErrCode=0x20) [0198.245] GetLastError () returned 0x20 [0198.245] SetLastError (dwErrCode=0x20) [0198.245] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215c18 [0198.245] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b2f0 [0198.245] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b5c0 [0198.245] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x215e10 [0198.245] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205130 [0198.245] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205150 [0198.246] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x21c4c0 [0198.246] GetLastError () returned 0x20 [0198.246] SetLastError (dwErrCode=0x20) [0198.246] GetLastError () returned 0x20 [0198.246] SetLastError (dwErrCode=0x20) [0198.246] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205130 | out: hHeap=0x1f0000) returned 1 [0198.246] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205150 | out: hHeap=0x1f0000) returned 1 [0198.246] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x228230 [0198.246] GetLastError () returned 0x20 [0198.247] SetLastError (dwErrCode=0x20) [0198.247] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228230 | out: hHeap=0x1f0000) returned 1 [0198.247] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x227dd0 [0198.247] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214af8 [0198.247] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x22b750 [0198.247] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x217038 [0198.247] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c4f0 [0198.247] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b638 [0198.247] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210000 [0198.247] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c530 [0198.247] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b4d0 [0198.248] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2100a8 [0198.248] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x22b778 [0198.248] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x25fe30 [0198.249] GetLastError () returned 0x20 [0198.249] SetLastError (dwErrCode=0x20) [0198.249] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0198.249] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x21c700 [0198.249] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x21c6b0 [0198.249] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c6c0 [0198.249] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c6b0 | out: hHeap=0x1f0000) returned 1 [0198.249] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c5f0 [0198.250] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c6c0 | out: hHeap=0x1f0000) returned 1 [0198.250] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c700 | out: hHeap=0x1f0000) returned 1 [0198.250] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c620 [0198.250] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x20ff70 [0198.250] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c620 | out: hHeap=0x1f0000) returned 1 [0198.250] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210078 [0198.250] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff70 | out: hHeap=0x1f0000) returned 1 [0198.250] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5f0 | out: hHeap=0x1f0000) returned 1 [0198.250] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x20ff70 [0198.250] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffb8 [0198.250] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff70 | out: hHeap=0x1f0000) returned 1 [0198.250] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffd0 [0198.250] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffb8 | out: hHeap=0x1f0000) returned 1 [0198.250] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210078 | out: hHeap=0x1f0000) returned 1 [0198.250] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff70 [0198.250] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x2052d0 [0198.251] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff70 | out: hHeap=0x1f0000) returned 1 [0198.251] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205130 [0198.251] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2052d0 | out: hHeap=0x1f0000) returned 1 [0198.251] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffd0 | out: hHeap=0x1f0000) returned 1 [0198.251] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205150 [0198.251] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x22b318 [0198.251] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205150 | out: hHeap=0x1f0000) returned 1 [0198.251] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x205150 [0198.251] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b318 | out: hHeap=0x1f0000) returned 1 [0198.251] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205130 | out: hHeap=0x1f0000) returned 1 [0198.251] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x205130 [0198.251] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x2068f8 [0198.251] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205130 | out: hHeap=0x1f0000) returned 1 [0198.252] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x22b318 [0198.252] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2068f8 | out: hHeap=0x1f0000) returned 1 [0198.252] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205150 | out: hHeap=0x1f0000) returned 1 [0198.252] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c680 [0198.252] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x20ffb8 [0198.252] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c680 | out: hHeap=0x1f0000) returned 1 [0198.252] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff70 [0198.252] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffb8 | out: hHeap=0x1f0000) returned 1 [0198.252] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x205290 [0198.252] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff70 | out: hHeap=0x1f0000) returned 1 [0198.252] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206868 [0198.252] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205290 | out: hHeap=0x1f0000) returned 1 [0198.252] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206868 | out: hHeap=0x1f0000) returned 1 [0198.252] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b318 | out: hHeap=0x1f0000) returned 1 [0198.253] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b2f0 | out: hHeap=0x1f0000) returned 1 [0198.253] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0198.253] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0198.253] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b750 | out: hHeap=0x1f0000) returned 1 [0198.253] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228230 [0198.253] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b750 [0198.253] CryptAcquireContextA (in: phProv=0x1a1e758, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1a1e758*=0x22a2d0) returned 1 [0198.257] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x22b750 | out: pbBuffer=0x22b750) returned 1 [0198.257] CryptReleaseContext (hProv=0x22a2d0, dwFlags=0x0) returned 1 [0198.257] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b750 | out: hHeap=0x1f0000) returned 1 [0198.257] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b750 [0198.257] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b2f0 [0198.258] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0198.258] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b750 | out: hHeap=0x1f0000) returned 1 [0198.258] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0198.258] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0198.258] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x239ae0 [0198.258] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffd0 [0198.258] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x214f70 [0198.258] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x22b750 [0198.258] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x217038 [0198.258] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205130 [0198.258] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214b60 [0198.258] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x22b318 [0198.258] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x260188 [0198.259] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c5b0 [0198.259] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b340 [0198.259] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff70 [0198.259] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c640 [0198.259] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b368 [0198.259] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffb8 [0198.259] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffb8 | out: hHeap=0x1f0000) returned 1 [0198.259] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b368 | out: hHeap=0x1f0000) returned 1 [0198.259] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c640 | out: hHeap=0x1f0000) returned 1 [0198.259] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff70 | out: hHeap=0x1f0000) returned 1 [0198.259] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b340 | out: hHeap=0x1f0000) returned 1 [0198.259] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5b0 | out: hHeap=0x1f0000) returned 1 [0198.260] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260188 | out: hHeap=0x1f0000) returned 1 [0198.260] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b318 | out: hHeap=0x1f0000) returned 1 [0198.260] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214b60 | out: hHeap=0x1f0000) returned 1 [0198.260] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x227dd0 [0198.260] GetLastError () returned 0x0 [0198.260] SetLastError (dwErrCode=0x0) [0198.260] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0198.260] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x227dd0 [0198.260] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0198.260] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0198.261] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0198.261] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0198.261] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0198.261] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0198.261] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x24ea40 [0198.261] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x260188 [0198.261] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0198.261] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0198.261] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0198.261] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0198.261] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x20d5e0 [0198.262] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0198.262] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0198.262] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f9c0 [0198.262] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x251068 [0198.262] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x234b90 [0198.262] QueryPerformanceCounter (in: lpPerformanceCount=0x1a1e2a8 | out: lpPerformanceCount=0x1a1e2a8*=35563100795) returned 1 [0198.262] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1a1e2e8 | out: lpSystemTimeAsFileTime=0x1a1e2e8) [0198.262] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x21c5c0 [0198.263] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b318 [0198.263] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205210 [0198.263] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205210 | out: hHeap=0x1f0000) returned 1 [0198.263] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b318 | out: hHeap=0x1f0000) returned 1 [0198.263] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b368 [0198.263] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205150 [0198.263] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205150 | out: hHeap=0x1f0000) returned 1 [0198.263] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b368 | out: hHeap=0x1f0000) returned 1 [0198.264] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5c0 | out: hHeap=0x1f0000) returned 1 [0198.264] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0198.264] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x2282a0 [0198.264] GetLastError () returned 0x0 [0198.264] SetLastError (dwErrCode=0x0) [0198.264] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0198.264] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0198.265] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0198.265] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0198.265] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b318 [0198.265] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b340 [0198.265] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0198.265] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0198.265] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b368 [0198.265] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0198.265] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x222ee8 [0198.265] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0198.265] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0198.266] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0198.266] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2357a0 [0198.266] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0198.266] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b3e0 [0198.266] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b818 [0198.266] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b3e0 | out: hHeap=0x1f0000) returned 1 [0198.266] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0198.266] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b818 | out: hHeap=0x1f0000) returned 1 [0198.266] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0198.266] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x2605b0 [0198.266] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b0 | out: hHeap=0x1f0000) returned 1 [0198.267] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0198.267] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2357a0 | out: hHeap=0x1f0000) returned 1 [0198.267] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x20ff70 [0198.267] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216050 [0198.267] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b818 [0198.267] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b840 [0198.267] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b868 [0198.267] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b3e0 [0198.267] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b840 | out: hHeap=0x1f0000) returned 1 [0198.268] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b818 | out: hHeap=0x1f0000) returned 1 [0198.268] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2357a0 [0198.268] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b818 [0198.268] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b840 [0198.268] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b818 | out: hHeap=0x1f0000) returned 1 [0198.268] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0198.268] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b840 | out: hHeap=0x1f0000) returned 1 [0198.268] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2068f8 [0198.269] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x2605b0 [0198.269] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b0 | out: hHeap=0x1f0000) returned 1 [0198.269] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2068f8 | out: hHeap=0x1f0000) returned 1 [0198.269] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b368 | out: hHeap=0x1f0000) returned 1 [0198.269] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0198.269] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0198.269] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2357a0 | out: hHeap=0x1f0000) returned 1 [0198.269] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x205150 [0198.269] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0198.269] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0198.270] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b340 | out: hHeap=0x1f0000) returned 1 [0198.270] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x237b88 [0198.270] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0198.270] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b3e0 | out: hHeap=0x1f0000) returned 1 [0198.270] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b868 | out: hHeap=0x1f0000) returned 1 [0198.270] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216050 | out: hHeap=0x1f0000) returned 1 [0198.270] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0198.270] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205150 | out: hHeap=0x1f0000) returned 1 [0198.271] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff70 | out: hHeap=0x1f0000) returned 1 [0198.271] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0198.271] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x236ff8 [0198.271] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236ff8 | out: hHeap=0x1f0000) returned 1 [0198.271] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ee8 | out: hHeap=0x1f0000) returned 1 [0198.271] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0198.271] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0198.271] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0198.271] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0198.272] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b318 | out: hHeap=0x1f0000) returned 1 [0198.272] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0198.272] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0198.272] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x236ff8 [0198.272] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x236590 [0198.272] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236ff8 | out: hHeap=0x1f0000) returned 1 [0198.272] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236590 | out: hHeap=0x1f0000) returned 1 [0198.272] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237b88 | out: hHeap=0x1f0000) returned 1 [0198.272] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0198.272] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20d5e0 | out: hHeap=0x1f0000) returned 1 [0198.273] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24ea40 | out: hHeap=0x1f0000) returned 1 [0198.273] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x20d5e0 [0198.273] GetLastError () returned 0x0 [0198.273] SetLastError (dwErrCode=0x0) [0198.273] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0198.273] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c700 [0198.273] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c5c0 [0198.274] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\SetupUi.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\setupui.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e658, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0198.275] GetFileType (hFile=0x1f4) returned 0x1 [0198.275] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x245e08 [0198.275] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1a1e5e0 | out: lpNewFilePointer=0x0) returned 1 [0198.276] GetLastError () returned 0xb7 [0198.276] SetLastError (dwErrCode=0xb7) [0198.276] GetLastError () returned 0xb7 [0198.276] SetLastError (dwErrCode=0xb7) [0198.277] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1a1e6a4 | out: lpNewFilePointer=0x0) returned 1 [0198.277] WriteFile (in: hFile=0x1f4, lpBuffer=0x245e08*, nNumberOfBytesToWrite=0x103, lpNumberOfBytesWritten=0x1a1e708, lpOverlapped=0x0 | out: lpBuffer=0x245e08*, lpNumberOfBytesWritten=0x1a1e708*=0x103, lpOverlapped=0x0) returned 1 [0198.277] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x245e08 | out: hHeap=0x1f0000) returned 1 [0198.277] CloseHandle (hObject=0x1f4) returned 1 [0198.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5c0 | out: hHeap=0x1f0000) returned 1 [0198.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c700 | out: hHeap=0x1f0000) returned 1 [0198.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260188 | out: hHeap=0x1f0000) returned 1 [0198.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0198.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b750 | out: hHeap=0x1f0000) returned 1 [0198.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205130 | out: hHeap=0x1f0000) returned 1 [0198.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f70 | out: hHeap=0x1f0000) returned 1 [0198.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffd0 | out: hHeap=0x1f0000) returned 1 [0198.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239ae0 | out: hHeap=0x1f0000) returned 1 [0198.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20d5e0 | out: hHeap=0x1f0000) returned 1 [0198.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b2f0 | out: hHeap=0x1f0000) returned 1 [0198.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0198.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x251068 | out: hHeap=0x1f0000) returned 1 [0198.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b90 | out: hHeap=0x1f0000) returned 1 [0198.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228230 | out: hHeap=0x1f0000) returned 1 [0198.622] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c4c0 | out: hHeap=0x1f0000) returned 1 [0198.622] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2100a8 | out: hHeap=0x1f0000) returned 1 [0198.622] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b4d0 | out: hHeap=0x1f0000) returned 1 [0198.622] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c530 | out: hHeap=0x1f0000) returned 1 [0198.622] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210000 | out: hHeap=0x1f0000) returned 1 [0198.622] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b638 | out: hHeap=0x1f0000) returned 1 [0198.622] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c4f0 | out: hHeap=0x1f0000) returned 1 [0198.622] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25fe30 | out: hHeap=0x1f0000) returned 1 [0198.622] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b778 | out: hHeap=0x1f0000) returned 1 [0198.622] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214af8 | out: hHeap=0x1f0000) returned 1 [0198.622] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215e10 | out: hHeap=0x1f0000) returned 1 [0198.622] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b5c0 | out: hHeap=0x1f0000) returned 1 [0198.622] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0198.622] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215c18 | out: hHeap=0x1f0000) returned 1 [0198.622] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5a0 | out: hHeap=0x1f0000) returned 1 [0198.622] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c590 | out: hHeap=0x1f0000) returned 1 [0198.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x23adb0 | out: hHeap=0x1f0000) returned 1 [0198.623] CloseHandle (hObject=0x204) returned 1 [0198.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c440 | out: hHeap=0x1f0000) returned 1 [0198.624] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c430 | out: hHeap=0x1f0000) returned 1 [0198.624] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20dd00 | out: hHeap=0x1f0000) returned 1 [0198.624] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24c600 | out: hHeap=0x1f0000) returned 1 [0198.624] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20fef8 | out: hHeap=0x1f0000) returned 1 [0198.624] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204fb0 | out: hHeap=0x1f0000) returned 1 [0198.624] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x23ddc8 | out: hHeap=0x1f0000) returned 1 [0198.624] CloseHandle (hObject=0x200) returned 1 [0198.624] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c410 | out: hHeap=0x1f0000) returned 1 [0198.624] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c370 | out: hHeap=0x1f0000) returned 1 [0198.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230e38 | out: hHeap=0x1f0000) returned 1 [0198.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2051f0 | out: hHeap=0x1f0000) returned 1 [0198.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25fd40 | out: hHeap=0x1f0000) returned 1 [0198.625] CloseHandle (hObject=0x218) returned 1 [0198.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c460 | out: hHeap=0x1f0000) returned 1 [0198.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c3a0 | out: hHeap=0x1f0000) returned 1 [0198.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235ee8 | out: hHeap=0x1f0000) returned 1 [0198.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c520 | out: hHeap=0x1f0000) returned 1 [0198.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c420 | out: hHeap=0x1f0000) returned 1 [0198.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c4b0 | out: hHeap=0x1f0000) returned 1 [0198.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c4e0 | out: hHeap=0x1f0000) returned 1 [0198.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235e08 | out: hHeap=0x1f0000) returned 1 [0198.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24fd60 | out: hHeap=0x1f0000) returned 1 [0198.626] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20d778 | out: hHeap=0x1f0000) returned 1 [0198.626] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206898 | out: hHeap=0x1f0000) returned 1 [0198.626] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffa0 | out: hHeap=0x1f0000) returned 1 [0198.626] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff28 | out: hHeap=0x1f0000) returned 1 [0198.626] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20e1f0 | out: hHeap=0x1f0000) returned 1 [0198.626] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x258298 | out: hHeap=0x1f0000) returned 1 [0198.626] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260498 | out: hHeap=0x1f0000) returned 1 [0198.626] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0198.626] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239508 | out: hHeap=0x1f0000) returned 1 [0198.626] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d6a0 | out: hHeap=0x1f0000) returned 1 [0198.626] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215d38 | out: hHeap=0x1f0000) returned 1 [0198.626] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0198.626] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\SetupUi.dll" (normalized: "c:\\588bce7c90097ed212\\setupui.dll")) returned 1 [0198.627] FindNextFileW (in: hFindFile=0x214350, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5381000, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x5381000, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x5381000, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x75a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupUi.xsd", cAlternateFileName="")) returned 1 [0198.627] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0198.628] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0198.628] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239610 [0198.628] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0198.628] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2394b0 | out: hHeap=0x1f0000) returned 1 [0198.628] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0198.628] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\SetupUi.xsd" (normalized: "c:\\588bce7c90097ed212\\setupui.xsd"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0198.628] GetFileType (hFile=0x218) returned 0x1 [0198.629] CloseHandle (hObject=0x218) returned 1 [0198.629] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239ae0 [0198.629] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\SetupUi.xsd" (normalized: "c:\\588bce7c90097ed212\\setupui.xsd"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5381000, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x5381000, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x5381000, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x75a8)) returned 1 [0198.629] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239ae0 | out: hHeap=0x1f0000) returned 1 [0198.629] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239718 [0198.629] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\SetupUi.xsd" (normalized: "c:\\588bce7c90097ed212\\setupui.xsd"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5381000, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x5381000, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x5381000, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x75a8)) returned 1 [0198.630] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239718 | out: hHeap=0x1f0000) returned 1 [0198.630] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239718 [0198.630] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239718 | out: hHeap=0x1f0000) returned 1 [0198.630] FindNextFileW (in: hFindFile=0x214350, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x6519be00, ftCreationTime.dwHighDateTime=0x1cac6d5, ftLastAccessTime.dwLowDateTime=0x6519be00, ftLastAccessTime.dwHighDateTime=0x1cac6d5, ftLastWriteTime.dwLowDateTime=0x6519be00, ftLastWriteTime.dwHighDateTime=0x1cac6d5, nFileSizeHigh=0x0, nFileSizeLow=0x17758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupUtility.exe", cAlternateFileName="SETUPU~1.EXE")) returned 1 [0198.630] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0198.630] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf38 [0198.630] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239928 [0198.630] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf38 | out: hHeap=0x1f0000) returned 1 [0198.630] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239610 | out: hHeap=0x1f0000) returned 1 [0198.630] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0198.631] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\SetupUtility.exe" (normalized: "c:\\588bce7c90097ed212\\setuputility.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0198.631] GetFileType (hFile=0x218) returned 0x1 [0198.631] CloseHandle (hObject=0x218) returned 1 [0198.631] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2395b8 [0198.631] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\SetupUtility.exe" (normalized: "c:\\588bce7c90097ed212\\setuputility.exe"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x6519be00, ftCreationTime.dwHighDateTime=0x1cac6d5, ftLastAccessTime.dwLowDateTime=0x6519be00, ftLastAccessTime.dwHighDateTime=0x1cac6d5, ftLastWriteTime.dwLowDateTime=0x6519be00, ftLastWriteTime.dwHighDateTime=0x1cac6d5, nFileSizeHigh=0x0, nFileSizeLow=0x17758)) returned 1 [0198.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2395b8 | out: hHeap=0x1f0000) returned 1 [0198.632] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2399d8 [0198.632] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\SetupUtility.exe" (normalized: "c:\\588bce7c90097ed212\\setuputility.exe"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x6519be00, ftCreationTime.dwHighDateTime=0x1cac6d5, ftLastAccessTime.dwLowDateTime=0x6519be00, ftLastAccessTime.dwHighDateTime=0x1cac6d5, ftLastWriteTime.dwLowDateTime=0x6519be00, ftLastWriteTime.dwHighDateTime=0x1cac6d5, nFileSizeHigh=0x0, nFileSizeLow=0x17758)) returned 1 [0198.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2399d8 | out: hHeap=0x1f0000) returned 1 [0198.632] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2394b0 [0198.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2394b0 | out: hHeap=0x1f0000) returned 1 [0198.632] FindNextFileW (in: hFindFile=0x214350, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0xa078, dwReserved0=0x0, dwReserved1=0x0, cFileName="SplashScreen.bmp", cAlternateFileName="SPLASH~1.BMP")) returned 1 [0198.632] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0198.632] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf70 [0198.632] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2399d8 [0198.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf70 | out: hHeap=0x1f0000) returned 1 [0198.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239928 | out: hHeap=0x1f0000) returned 1 [0198.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0198.633] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\SplashScreen.bmp" (normalized: "c:\\588bce7c90097ed212\\splashscreen.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0198.633] GetFileType (hFile=0x218) returned 0x1 [0198.633] CloseHandle (hObject=0x218) returned 1 [0198.633] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239718 [0198.633] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\SplashScreen.bmp" (normalized: "c:\\588bce7c90097ed212\\splashscreen.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0xa078)) returned 1 [0198.633] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239718 | out: hHeap=0x1f0000) returned 1 [0198.633] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239508 [0198.633] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\SplashScreen.bmp" (normalized: "c:\\588bce7c90097ed212\\splashscreen.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0xa078)) returned 1 [0198.633] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239508 | out: hHeap=0x1f0000) returned 1 [0198.633] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239ae0 [0198.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239ae0 | out: hHeap=0x1f0000) returned 1 [0198.634] FindNextFileW (in: hFindFile=0x214350, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x143bc400, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0x143bc400, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0x143bc400, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x23420, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1 [0198.634] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0198.634] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0198.634] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239b38 [0198.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0198.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2399d8 | out: hHeap=0x1f0000) returned 1 [0198.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0198.634] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\sqmapi.dll" (normalized: "c:\\588bce7c90097ed212\\sqmapi.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0198.634] GetFileType (hFile=0x218) returned 0x1 [0198.635] CloseHandle (hObject=0x218) returned 1 [0198.635] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239610 [0198.635] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\sqmapi.dll" (normalized: "c:\\588bce7c90097ed212\\sqmapi.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x143bc400, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0x143bc400, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0x143bc400, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x23420)) returned 1 [0198.635] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239610 | out: hHeap=0x1f0000) returned 1 [0198.635] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239ae0 [0198.635] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\sqmapi.dll" (normalized: "c:\\588bce7c90097ed212\\sqmapi.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x143bc400, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0x143bc400, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0x143bc400, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x23420)) returned 1 [0198.635] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239ae0 | out: hHeap=0x1f0000) returned 1 [0198.635] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239ae0 [0198.635] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239ae0 | out: hHeap=0x1f0000) returned 1 [0198.635] FindNextFileW (in: hFindFile=0x214350, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x3704, dwReserved0=0x0, dwReserved1=0x0, cFileName="Strings.xml", cAlternateFileName="")) returned 1 [0198.635] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0198.635] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0198.635] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239508 [0198.635] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0198.636] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239b38 | out: hHeap=0x1f0000) returned 1 [0198.636] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0198.636] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Strings.xml" (normalized: "c:\\588bce7c90097ed212\\strings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0198.636] GetFileType (hFile=0x218) returned 0x1 [0198.636] CloseHandle (hObject=0x218) returned 1 [0198.636] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239ae0 [0198.636] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Strings.xml" (normalized: "c:\\588bce7c90097ed212\\strings.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x3704)) returned 1 [0198.636] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239ae0 | out: hHeap=0x1f0000) returned 1 [0198.636] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239928 [0198.637] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Strings.xml" (normalized: "c:\\588bce7c90097ed212\\strings.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x3704)) returned 1 [0198.637] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239928 | out: hHeap=0x1f0000) returned 1 [0198.637] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2395b8 [0198.637] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2395b8 | out: hHeap=0x1f0000) returned 1 [0198.637] FindNextFileW (in: hFindFile=0x214350, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x97f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 1 [0198.637] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0198.637] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2f0 [0198.637] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239928 [0198.637] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0198.637] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239508 | out: hHeap=0x1f0000) returned 1 [0198.637] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0198.637] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\uiinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0198.638] GetFileType (hFile=0x218) returned 0x1 [0198.638] CloseHandle (hObject=0x218) returned 1 [0198.638] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2395b8 [0198.638] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\uiinfo.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x97f2)) returned 1 [0198.638] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2395b8 | out: hHeap=0x1f0000) returned 1 [0198.638] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2397c8 [0198.638] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\uiinfo.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x97f2)) returned 1 [0198.639] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2397c8 | out: hHeap=0x1f0000) returned 1 [0198.639] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2399d8 [0198.639] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2399d8 | out: hHeap=0x1f0000) returned 1 [0198.639] FindNextFileW (in: hFindFile=0x214350, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x87910600, ftCreationTime.dwHighDateTime=0x1ca2a27, ftLastAccessTime.dwLowDateTime=0x87910600, ftLastAccessTime.dwHighDateTime=0x1ca2a27, ftLastWriteTime.dwLowDateTime=0x87910600, ftLastWriteTime.dwHighDateTime=0x1ca2a27, nFileSizeHigh=0x0, nFileSizeLow=0x19688, dwReserved0=0x0, dwReserved1=0x0, cFileName="watermark.bmp", cAlternateFileName="WATERM~1.BMP")) returned 1 [0198.639] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0198.640] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2f0 [0198.640] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239610 [0198.640] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0198.640] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239928 | out: hHeap=0x1f0000) returned 1 [0198.640] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0198.640] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\watermark.bmp" (normalized: "c:\\588bce7c90097ed212\\watermark.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0198.640] GetFileType (hFile=0x218) returned 0x1 [0198.640] CloseHandle (hObject=0x218) returned 1 [0198.641] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239ae0 [0198.641] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\watermark.bmp" (normalized: "c:\\588bce7c90097ed212\\watermark.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x87910600, ftCreationTime.dwHighDateTime=0x1ca2a27, ftLastAccessTime.dwLowDateTime=0x87910600, ftLastAccessTime.dwHighDateTime=0x1ca2a27, ftLastWriteTime.dwLowDateTime=0x87910600, ftLastWriteTime.dwHighDateTime=0x1ca2a27, nFileSizeHigh=0x0, nFileSizeLow=0x19688)) returned 1 [0198.641] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239ae0 | out: hHeap=0x1f0000) returned 1 [0198.641] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2395b8 [0198.641] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\watermark.bmp" (normalized: "c:\\588bce7c90097ed212\\watermark.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x87910600, ftCreationTime.dwHighDateTime=0x1ca2a27, ftLastAccessTime.dwLowDateTime=0x87910600, ftLastAccessTime.dwHighDateTime=0x1ca2a27, ftLastWriteTime.dwLowDateTime=0x87910600, ftLastWriteTime.dwHighDateTime=0x1ca2a27, nFileSizeHigh=0x0, nFileSizeLow=0x19688)) returned 1 [0198.641] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2395b8 | out: hHeap=0x1f0000) returned 1 [0198.641] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239668 [0198.641] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239668 | out: hHeap=0x1f0000) returned 1 [0198.641] FindNextFileW (in: hFindFile=0x214350, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2120bc00, ftCreationTime.dwHighDateTime=0x1cac6c9, ftLastAccessTime.dwLowDateTime=0x2120bc00, ftLastAccessTime.dwHighDateTime=0x1cac6c9, ftLastWriteTime.dwLowDateTime=0x2120bc00, ftLastWriteTime.dwHighDateTime=0x1cac6c9, nFileSizeHigh=0x0, nFileSizeLow=0x4f5113, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.0-KB956250-v6001-x64.msu", cAlternateFileName="WINDOW~1.MSU")) returned 1 [0198.641] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239718 [0198.641] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0198.641] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a3e0 [0198.641] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0198.641] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239610 | out: hHeap=0x1f0000) returned 1 [0198.641] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239718 | out: hHeap=0x1f0000) returned 1 [0198.642] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x64.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x64.msu"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0198.642] GetFileType (hFile=0x218) returned 0x1 [0198.642] CloseHandle (hObject=0x218) returned 1 [0198.642] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229f18 [0198.642] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x64.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x64.msu"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2120bc00, ftCreationTime.dwHighDateTime=0x1cac6c9, ftLastAccessTime.dwLowDateTime=0x2120bc00, ftLastAccessTime.dwHighDateTime=0x1cac6c9, ftLastWriteTime.dwLowDateTime=0x2120bc00, ftLastWriteTime.dwHighDateTime=0x1cac6c9, nFileSizeHigh=0x0, nFileSizeLow=0x4f5113)) returned 1 [0198.642] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229f18 | out: hHeap=0x1f0000) returned 1 [0198.642] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a468 [0198.642] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x64.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x64.msu"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2120bc00, ftCreationTime.dwHighDateTime=0x1cac6c9, ftLastAccessTime.dwLowDateTime=0x2120bc00, ftLastAccessTime.dwHighDateTime=0x1cac6c9, ftLastWriteTime.dwLowDateTime=0x2120bc00, ftLastWriteTime.dwHighDateTime=0x1cac6c9, nFileSizeHigh=0x0, nFileSizeLow=0x4f5113)) returned 1 [0198.643] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a468 | out: hHeap=0x1f0000) returned 1 [0198.643] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a468 [0198.643] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a468 | out: hHeap=0x1f0000) returned 1 [0198.643] FindNextFileW (in: hFindFile=0x214350, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x1bbe7400, ftCreationTime.dwHighDateTime=0x1cac6bf, ftLastAccessTime.dwLowDateTime=0x1bbe7400, ftLastAccessTime.dwHighDateTime=0x1cac6bf, ftLastWriteTime.dwLowDateTime=0x1bbe7400, ftLastWriteTime.dwHighDateTime=0x1cac6bf, nFileSizeHigh=0x0, nFileSizeLow=0x217520, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.0-KB956250-v6001-x86.msu", cAlternateFileName="WINDOW~2.MSU")) returned 1 [0198.643] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2396c0 [0198.643] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2f0 [0198.643] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a1c0 [0198.643] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0198.643] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a3e0 | out: hHeap=0x1f0000) returned 1 [0198.643] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2396c0 | out: hHeap=0x1f0000) returned 1 [0198.643] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x86.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x86.msu"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0198.644] GetFileType (hFile=0x218) returned 0x1 [0198.644] CloseHandle (hObject=0x218) returned 1 [0198.644] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a028 [0198.644] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x86.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x86.msu"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x1bbe7400, ftCreationTime.dwHighDateTime=0x1cac6bf, ftLastAccessTime.dwLowDateTime=0x1bbe7400, ftLastAccessTime.dwHighDateTime=0x1cac6bf, ftLastWriteTime.dwLowDateTime=0x1bbe7400, ftLastWriteTime.dwHighDateTime=0x1cac6bf, nFileSizeHigh=0x0, nFileSizeLow=0x217520)) returned 1 [0198.644] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a028 | out: hHeap=0x1f0000) returned 1 [0198.644] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229fa0 [0198.644] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x86.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x86.msu"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x1bbe7400, ftCreationTime.dwHighDateTime=0x1cac6bf, ftLastAccessTime.dwLowDateTime=0x1bbe7400, ftLastAccessTime.dwHighDateTime=0x1cac6bf, ftLastWriteTime.dwLowDateTime=0x1bbe7400, ftLastWriteTime.dwHighDateTime=0x1cac6bf, nFileSizeHigh=0x0, nFileSizeLow=0x217520)) returned 1 [0198.644] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229fa0 | out: hHeap=0x1f0000) returned 1 [0198.644] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a0b0 [0198.645] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a0b0 | out: hHeap=0x1f0000) returned 1 [0198.645] FindNextFileW (in: hFindFile=0x214350, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5b8e5700, ftCreationTime.dwHighDateTime=0x1cac6d1, ftLastAccessTime.dwLowDateTime=0x5b8e5700, ftLastAccessTime.dwHighDateTime=0x1cac6d1, ftLastWriteTime.dwLowDateTime=0x5b8e5700, ftLastWriteTime.dwHighDateTime=0x1cac6d1, nFileSizeHigh=0x0, nFileSizeLow=0x4db1ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB958488-v6001-x64.msu", cAlternateFileName="WINDOW~3.MSU")) returned 1 [0198.645] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2399d8 [0198.645] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0198.645] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229fa0 [0198.645] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0198.645] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a1c0 | out: hHeap=0x1f0000) returned 1 [0198.645] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2399d8 | out: hHeap=0x1f0000) returned 1 [0198.645] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x64.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x64.msu"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0198.645] GetFileType (hFile=0x218) returned 0x1 [0198.646] CloseHandle (hObject=0x218) returned 1 [0198.646] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a3e0 [0198.646] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x64.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x64.msu"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5b8e5700, ftCreationTime.dwHighDateTime=0x1cac6d1, ftLastAccessTime.dwLowDateTime=0x5b8e5700, ftLastAccessTime.dwHighDateTime=0x1cac6d1, ftLastWriteTime.dwLowDateTime=0x5b8e5700, ftLastWriteTime.dwHighDateTime=0x1cac6d1, nFileSizeHigh=0x0, nFileSizeLow=0x4db1ce)) returned 1 [0198.646] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a3e0 | out: hHeap=0x1f0000) returned 1 [0198.646] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a3e0 [0198.646] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x64.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x64.msu"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5b8e5700, ftCreationTime.dwHighDateTime=0x1cac6d1, ftLastAccessTime.dwLowDateTime=0x5b8e5700, ftLastAccessTime.dwHighDateTime=0x1cac6d1, ftLastWriteTime.dwLowDateTime=0x5b8e5700, ftLastWriteTime.dwHighDateTime=0x1cac6d1, nFileSizeHigh=0x0, nFileSizeLow=0x4db1ce)) returned 1 [0198.646] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a3e0 | out: hHeap=0x1f0000) returned 1 [0198.646] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a4f0 [0198.646] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a4f0 | out: hHeap=0x1f0000) returned 1 [0198.646] FindNextFileW (in: hFindFile=0x214350, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd0ac5d00, ftCreationTime.dwHighDateTime=0x1cac6ce, ftLastAccessTime.dwLowDateTime=0xd0ac5d00, ftLastAccessTime.dwHighDateTime=0x1cac6ce, ftLastWriteTime.dwLowDateTime=0xd0ac5d00, ftLastWriteTime.dwHighDateTime=0x1cac6ce, nFileSizeHigh=0x0, nFileSizeLow=0x20acf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB958488-v6001-x86.msu", cAlternateFileName="WINDOW~4.MSU")) returned 1 [0198.646] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239610 [0198.646] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2f0 [0198.646] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a688 [0198.647] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0198.647] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229fa0 | out: hHeap=0x1f0000) returned 1 [0198.647] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239610 | out: hHeap=0x1f0000) returned 1 [0198.647] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x86.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x86.msu"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0198.647] GetFileType (hFile=0x218) returned 0x1 [0198.647] CloseHandle (hObject=0x218) returned 1 [0198.648] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229e08 [0198.648] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x86.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x86.msu"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd0ac5d00, ftCreationTime.dwHighDateTime=0x1cac6ce, ftLastAccessTime.dwLowDateTime=0xd0ac5d00, ftLastAccessTime.dwHighDateTime=0x1cac6ce, ftLastWriteTime.dwLowDateTime=0xd0ac5d00, ftLastWriteTime.dwHighDateTime=0x1cac6ce, nFileSizeHigh=0x0, nFileSizeLow=0x20acf9)) returned 1 [0198.648] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229e08 | out: hHeap=0x1f0000) returned 1 [0198.648] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229a50 [0198.648] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x86.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x86.msu"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd0ac5d00, ftCreationTime.dwHighDateTime=0x1cac6ce, ftLastAccessTime.dwLowDateTime=0xd0ac5d00, ftLastAccessTime.dwHighDateTime=0x1cac6ce, ftLastWriteTime.dwLowDateTime=0xd0ac5d00, ftLastWriteTime.dwHighDateTime=0x1cac6ce, nFileSizeHigh=0x0, nFileSizeLow=0x20acf9)) returned 1 [0198.648] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229a50 | out: hHeap=0x1f0000) returned 1 [0198.648] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229a50 [0198.648] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229a50 | out: hHeap=0x1f0000) returned 1 [0198.648] FindNextFileW (in: hFindFile=0x214350, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd0ac5d00, ftCreationTime.dwHighDateTime=0x1cac6ce, ftLastAccessTime.dwLowDateTime=0xd0ac5d00, ftLastAccessTime.dwHighDateTime=0x1cac6ce, ftLastWriteTime.dwLowDateTime=0xd0ac5d00, ftLastWriteTime.dwHighDateTime=0x1cac6ce, nFileSizeHigh=0x0, nFileSizeLow=0x20acf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB958488-v6001-x86.msu", cAlternateFileName="WINDOW~4.MSU")) returned 0 [0198.648] FindClose (in: hFindFile=0x214350 | out: hFindFile=0x214350) returned 1 [0198.649] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215c18 [0198.649] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0198.649] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e828 [0198.649] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215d38 [0198.649] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1025\\*", lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e940 [0198.649] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215e10 [0198.649] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215d38 | out: hHeap=0x1f0000) returned 1 [0198.649] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0198.649] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0198.649] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215d38 [0198.649] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215e10 | out: hHeap=0x1f0000) returned 1 [0198.649] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0198.650] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0198.650] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x1d8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0198.650] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0198.650] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215e10 [0198.650] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x214a28 [0198.650] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215e10 | out: hHeap=0x1f0000) returned 1 [0198.650] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215d38 | out: hHeap=0x1f0000) returned 1 [0198.650] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0198.650] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1025\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1025\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0198.651] GetFileType (hFile=0x218) returned 0x1 [0198.651] CloseHandle (hObject=0x218) returned 1 [0198.651] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239928 [0198.651] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1025\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1025\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb14 | out: lpFileInformation=0x1a1eb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x1d8f)) returned 1 [0198.652] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239928 | out: hHeap=0x1f0000) returned 1 [0198.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2395b8 [0198.652] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1025\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1025\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb1c | out: lpFileInformation=0x1a1eb1c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x1d8f)) returned 1 [0198.652] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2395b8 | out: hHeap=0x1f0000) returned 1 [0198.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2394b0 [0198.652] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2394b0 | out: hHeap=0x1f0000) returned 1 [0198.652] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x121e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0198.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0198.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215e10 [0198.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c30 [0198.652] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215e10 | out: hHeap=0x1f0000) returned 1 [0198.652] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a28 | out: hHeap=0x1f0000) returned 1 [0198.652] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0198.653] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1025\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1025\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0198.653] GetFileType (hFile=0x218) returned 0x1 [0198.653] CloseHandle (hObject=0x218) returned 1 [0198.654] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214f70 [0198.654] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1025\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1025\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb14 | out: lpFileInformation=0x1a1eb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x121e6)) returned 1 [0198.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f70 | out: hHeap=0x1f0000) returned 1 [0198.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214fd8 [0198.970] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1025\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1025\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb1c | out: lpFileInformation=0x1a1eb1c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x121e6)) returned 1 [0198.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214fd8 | out: hHeap=0x1f0000) returned 1 [0198.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214ea0 [0198.971] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214ea0 | out: hHeap=0x1f0000) returned 1 [0198.971] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0198.971] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0198.971] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215b40 [0198.971] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a28 [0198.971] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215b40 | out: hHeap=0x1f0000) returned 1 [0198.971] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c30 | out: hHeap=0x1f0000) returned 1 [0198.971] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0198.972] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1025\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1025\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0198.972] GetFileType (hFile=0x204) returned 0x1 [0198.972] CloseHandle (hObject=0x204) returned 1 [0198.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x215040 [0198.973] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1025\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1025\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb14 | out: lpFileInformation=0x1a1eb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358)) returned 1 [0198.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215040 | out: hHeap=0x1f0000) returned 1 [0198.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c30 [0198.973] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1025\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1025\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb1c | out: lpFileInformation=0x1a1eb1c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358)) returned 1 [0198.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c30 | out: hHeap=0x1f0000) returned 1 [0198.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d68 [0198.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d68 | out: hHeap=0x1f0000) returned 1 [0198.973] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0198.974] FindClose (in: hFindFile=0x24e940 | out: hFindFile=0x24e940) returned 1 [0198.974] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a28 | out: hHeap=0x1f0000) returned 1 [0198.974] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e828 | out: hHeap=0x1f0000) returned 1 [0198.974] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0198.974] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215c18 | out: hHeap=0x1f0000) returned 1 [0198.974] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215b40 [0198.974] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b8f0 [0198.974] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d508 [0198.975] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215c18 [0198.975] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1028\\*", lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ebc0 [0198.975] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2167a0 [0198.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215c18 | out: hHeap=0x1f0000) returned 1 [0198.975] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0198.975] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0198.975] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215c18 [0198.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2167a0 | out: hHeap=0x1f0000) returned 1 [0198.976] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0198.976] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0198.976] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x18a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0198.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b9e0 [0198.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216440 [0198.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x214e38 [0198.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216440 | out: hHeap=0x1f0000) returned 1 [0198.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215c18 | out: hHeap=0x1f0000) returned 1 [0198.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b9e0 | out: hHeap=0x1f0000) returned 1 [0198.977] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1028\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1028\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0198.977] GetFileType (hFile=0x204) returned 0x1 [0198.978] CloseHandle (hObject=0x204) returned 1 [0198.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2397c8 [0198.978] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1028\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1028\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb14 | out: lpFileInformation=0x1a1eb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x18a5)) returned 1 [0198.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2397c8 | out: hHeap=0x1f0000) returned 1 [0198.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239718 [0198.979] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1028\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1028\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb1c | out: lpFileInformation=0x1a1eb1c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x18a5)) returned 1 [0198.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239718 | out: hHeap=0x1f0000) returned 1 [0198.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239928 [0198.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239928 | out: hHeap=0x1f0000) returned 1 [0198.979] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed90, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0198.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2f0 [0198.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215c18 [0198.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d68 [0198.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215c18 | out: hHeap=0x1f0000) returned 1 [0198.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214e38 | out: hHeap=0x1f0000) returned 1 [0198.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0198.980] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1028\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1028\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0198.981] GetFileType (hFile=0x204) returned 0x1 [0198.981] CloseHandle (hObject=0x204) returned 1 [0198.981] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x215040 [0198.981] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1028\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1028\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb14 | out: lpFileInformation=0x1a1eb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed90)) returned 1 [0198.982] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215040 | out: hHeap=0x1f0000) returned 1 [0198.982] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c30 [0198.982] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1028\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1028\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb1c | out: lpFileInformation=0x1a1eb1c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed90)) returned 1 [0198.982] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c30 | out: hHeap=0x1f0000) returned 1 [0198.982] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214e38 [0198.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214e38 | out: hHeap=0x1f0000) returned 1 [0198.989] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0198.989] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0198.989] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215c18 [0198.989] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2149c0 [0198.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215c18 | out: hHeap=0x1f0000) returned 1 [0198.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d68 | out: hHeap=0x1f0000) returned 1 [0198.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0198.990] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1028\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1028\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0198.990] GetFileType (hFile=0x204) returned 0x1 [0198.991] CloseHandle (hObject=0x204) returned 1 [0198.991] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214f70 [0198.991] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1028\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1028\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb14 | out: lpFileInformation=0x1a1eb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758)) returned 1 [0198.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f70 | out: hHeap=0x1f0000) returned 1 [0198.991] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x215040 [0198.991] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1028\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1028\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb1c | out: lpFileInformation=0x1a1eb1c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758)) returned 1 [0198.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215040 | out: hHeap=0x1f0000) returned 1 [0198.991] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214fd8 [0198.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214fd8 | out: hHeap=0x1f0000) returned 1 [0198.991] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0198.991] FindClose (in: hFindFile=0x24ebc0 | out: hFindFile=0x24ebc0) returned 1 [0198.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2149c0 | out: hHeap=0x1f0000) returned 1 [0198.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d508 | out: hHeap=0x1f0000) returned 1 [0198.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b8f0 | out: hHeap=0x1f0000) returned 1 [0198.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215b40 | out: hHeap=0x1f0000) returned 1 [0198.992] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215b40 [0198.992] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b8f0 [0198.992] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22eb58 [0198.992] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215c18 [0198.992] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1029\\*", lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ea80 [0198.992] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216518 [0198.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215c18 | out: hHeap=0x1f0000) returned 1 [0198.992] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0198.992] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0198.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215c18 [0198.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216518 | out: hHeap=0x1f0000) returned 1 [0198.993] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0198.993] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0198.993] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0198.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b9e0 [0198.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216710 [0198.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x214e38 [0198.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216710 | out: hHeap=0x1f0000) returned 1 [0198.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215c18 | out: hHeap=0x1f0000) returned 1 [0198.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b9e0 | out: hHeap=0x1f0000) returned 1 [0198.993] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1029\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1029\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0198.993] GetFileType (hFile=0x204) returned 0x1 [0198.994] CloseHandle (hObject=0x204) returned 1 [0198.994] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2397c8 [0198.994] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1029\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1029\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb14 | out: lpFileInformation=0x1a1eb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe8e)) returned 1 [0198.994] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2397c8 | out: hHeap=0x1f0000) returned 1 [0198.994] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239718 [0198.994] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1029\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1029\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb1c | out: lpFileInformation=0x1a1eb1c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe8e)) returned 1 [0198.994] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239718 | out: hHeap=0x1f0000) returned 1 [0198.994] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239ae0 [0198.994] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239ae0 | out: hHeap=0x1f0000) returned 1 [0198.994] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13c4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0198.995] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0198.995] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215c18 [0198.995] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214f70 [0198.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215c18 | out: hHeap=0x1f0000) returned 1 [0198.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214e38 | out: hHeap=0x1f0000) returned 1 [0198.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0198.995] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1029\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1029\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0198.995] GetFileType (hFile=0x204) returned 0x1 [0198.996] CloseHandle (hObject=0x204) returned 1 [0198.996] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214b60 [0198.996] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1029\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1029\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb14 | out: lpFileInformation=0x1a1eb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13c4a)) returned 1 [0198.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214b60 | out: hHeap=0x1f0000) returned 1 [0198.996] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a28 [0198.996] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1029\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1029\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb1c | out: lpFileInformation=0x1a1eb1c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13c4a)) returned 1 [0198.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a28 | out: hHeap=0x1f0000) returned 1 [0198.996] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214af8 [0198.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214af8 | out: hHeap=0x1f0000) returned 1 [0198.997] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0198.997] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf70 [0198.997] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215c18 [0198.997] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214af8 [0198.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215c18 | out: hHeap=0x1f0000) returned 1 [0198.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f70 | out: hHeap=0x1f0000) returned 1 [0198.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf70 | out: hHeap=0x1f0000) returned 1 [0198.998] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1029\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1029\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0198.998] GetFileType (hFile=0x204) returned 0x1 [0198.999] CloseHandle (hObject=0x204) returned 1 [0198.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214f70 [0198.999] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1029\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1029\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb14 | out: lpFileInformation=0x1a1eb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758)) returned 1 [0198.999] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f70 | out: hHeap=0x1f0000) returned 1 [0198.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214b60 [0198.999] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1029\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1029\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb1c | out: lpFileInformation=0x1a1eb1c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758)) returned 1 [0198.999] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214b60 | out: hHeap=0x1f0000) returned 1 [0198.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214dd0 [0198.999] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214dd0 | out: hHeap=0x1f0000) returned 1 [0199.000] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0199.000] FindClose (in: hFindFile=0x24ea80 | out: hFindFile=0x24ea80) returned 1 [0199.000] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214af8 | out: hHeap=0x1f0000) returned 1 [0199.000] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22eb58 | out: hHeap=0x1f0000) returned 1 [0199.000] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b8f0 | out: hHeap=0x1f0000) returned 1 [0199.000] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215b40 | out: hHeap=0x1f0000) returned 1 [0199.000] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215b40 [0199.000] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b8f0 [0199.000] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22db68 [0199.000] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215c18 [0199.000] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1030\\*", lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e780 [0199.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216518 [0199.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215c18 | out: hHeap=0x1f0000) returned 1 [0199.001] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0199.001] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215c18 [0199.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216518 | out: hHeap=0x1f0000) returned 1 [0199.001] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0199.001] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0199.001] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xcf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0199.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b9e0 [0199.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2164d0 [0199.002] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x214a90 [0199.002] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2164d0 | out: hHeap=0x1f0000) returned 1 [0199.002] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215c18 | out: hHeap=0x1f0000) returned 1 [0199.002] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b9e0 | out: hHeap=0x1f0000) returned 1 [0199.002] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1030\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1030\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0199.003] GetFileType (hFile=0x204) returned 0x1 [0199.003] CloseHandle (hObject=0x204) returned 1 [0199.004] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2394b0 [0199.004] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1030\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1030\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb14 | out: lpFileInformation=0x1a1eb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xcf2)) returned 1 [0199.004] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2394b0 | out: hHeap=0x1f0000) returned 1 [0199.004] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239718 [0199.004] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1030\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1030\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb1c | out: lpFileInformation=0x1a1eb1c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xcf2)) returned 1 [0199.004] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239718 | out: hHeap=0x1f0000) returned 1 [0199.005] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2394b0 [0199.005] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2394b0 | out: hHeap=0x1f0000) returned 1 [0199.005] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12fb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0199.005] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2f0 [0199.005] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215c18 [0199.005] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214af8 [0199.005] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215c18 | out: hHeap=0x1f0000) returned 1 [0199.005] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a90 | out: hHeap=0x1f0000) returned 1 [0199.005] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0199.006] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1030\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1030\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0199.006] GetFileType (hFile=0x204) returned 0x1 [0199.007] CloseHandle (hObject=0x204) returned 1 [0199.007] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214fd8 [0199.007] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1030\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1030\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb14 | out: lpFileInformation=0x1a1eb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12fb4)) returned 1 [0199.007] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214fd8 | out: hHeap=0x1f0000) returned 1 [0199.007] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214958 [0199.008] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1030\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1030\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb1c | out: lpFileInformation=0x1a1eb1c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12fb4)) returned 1 [0199.008] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214958 | out: hHeap=0x1f0000) returned 1 [0199.008] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c30 [0199.008] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c30 | out: hHeap=0x1f0000) returned 1 [0199.008] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0199.008] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0199.008] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215c18 [0199.008] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214dd0 [0199.008] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215c18 | out: hHeap=0x1f0000) returned 1 [0199.008] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214af8 | out: hHeap=0x1f0000) returned 1 [0199.008] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0199.009] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1030\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1030\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0199.009] GetFileType (hFile=0x204) returned 0x1 [0199.009] CloseHandle (hObject=0x204) returned 1 [0199.010] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214fd8 [0199.010] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1030\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1030\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb14 | out: lpFileInformation=0x1a1eb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758)) returned 1 [0199.010] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214fd8 | out: hHeap=0x1f0000) returned 1 [0199.010] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214ea0 [0199.010] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1030\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1030\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb1c | out: lpFileInformation=0x1a1eb1c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758)) returned 1 [0199.010] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214ea0 | out: hHeap=0x1f0000) returned 1 [0199.011] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d68 [0199.011] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d68 | out: hHeap=0x1f0000) returned 1 [0199.011] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0199.011] FindClose (in: hFindFile=0x24e780 | out: hFindFile=0x24e780) returned 1 [0199.011] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214dd0 | out: hHeap=0x1f0000) returned 1 [0199.011] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22db68 | out: hHeap=0x1f0000) returned 1 [0199.011] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b8f0 | out: hHeap=0x1f0000) returned 1 [0199.012] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215b40 | out: hHeap=0x1f0000) returned 1 [0199.012] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215b40 [0199.012] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b8f0 [0199.012] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e828 [0199.012] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215c18 [0199.012] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1031\\*", lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e9c0 [0199.012] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2165a8 [0199.012] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215c18 | out: hHeap=0x1f0000) returned 1 [0199.012] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0199.013] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.013] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215c18 [0199.013] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2165a8 | out: hHeap=0x1f0000) returned 1 [0199.013] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0199.013] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0199.013] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xd5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0199.013] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b9e0 [0199.013] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2166c8 [0199.013] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x214d68 [0199.366] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2166c8 | out: hHeap=0x1f0000) returned 1 [0199.366] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215c18 | out: hHeap=0x1f0000) returned 1 [0199.366] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b9e0 | out: hHeap=0x1f0000) returned 1 [0199.366] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1031\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1031\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0199.367] GetFileType (hFile=0x1d8) returned 0x1 [0199.367] CloseHandle (hObject=0x1d8) returned 1 [0199.367] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239400 [0199.367] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1031\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1031\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb14 | out: lpFileInformation=0x1a1eb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xd5b)) returned 1 [0199.367] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239400 | out: hHeap=0x1f0000) returned 1 [0199.367] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239610 [0199.367] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1031\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1031\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb1c | out: lpFileInformation=0x1a1eb1c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xd5b)) returned 1 [0199.367] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239610 | out: hHeap=0x1f0000) returned 1 [0199.367] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239ae0 [0199.368] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239ae0 | out: hHeap=0x1f0000) returned 1 [0199.368] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x141aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0199.368] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0199.368] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216170 [0199.368] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214b60 [0199.368] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216170 | out: hHeap=0x1f0000) returned 1 [0199.368] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d68 | out: hHeap=0x1f0000) returned 1 [0199.368] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0199.368] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1031\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1031\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0199.368] GetFileType (hFile=0x1d8) returned 0x1 [0199.369] CloseHandle (hObject=0x1d8) returned 1 [0199.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214bc8 [0199.369] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1031\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1031\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb14 | out: lpFileInformation=0x1a1eb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x141aa)) returned 1 [0199.369] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214bc8 | out: hHeap=0x1f0000) returned 1 [0199.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214dd0 [0199.369] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1031\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1031\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb1c | out: lpFileInformation=0x1a1eb1c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x141aa)) returned 1 [0199.369] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214dd0 | out: hHeap=0x1f0000) returned 1 [0199.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214af8 [0199.370] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214af8 | out: hHeap=0x1f0000) returned 1 [0199.370] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0199.370] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf70 [0199.370] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216170 [0199.370] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d68 [0199.370] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216170 | out: hHeap=0x1f0000) returned 1 [0199.370] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214b60 | out: hHeap=0x1f0000) returned 1 [0199.370] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf70 | out: hHeap=0x1f0000) returned 1 [0199.370] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1031\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1031\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0199.371] GetFileType (hFile=0x1d8) returned 0x1 [0199.371] CloseHandle (hObject=0x1d8) returned 1 [0199.371] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c98 [0199.371] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1031\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1031\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb14 | out: lpFileInformation=0x1a1eb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958)) returned 1 [0199.371] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c98 | out: hHeap=0x1f0000) returned 1 [0199.371] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214e38 [0199.371] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1031\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1031\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb1c | out: lpFileInformation=0x1a1eb1c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958)) returned 1 [0199.372] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214e38 | out: hHeap=0x1f0000) returned 1 [0199.372] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c98 [0199.372] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c98 | out: hHeap=0x1f0000) returned 1 [0199.372] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0199.372] FindClose (in: hFindFile=0x24e9c0 | out: hFindFile=0x24e9c0) returned 1 [0199.372] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d68 | out: hHeap=0x1f0000) returned 1 [0199.372] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e828 | out: hHeap=0x1f0000) returned 1 [0199.372] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b8f0 | out: hHeap=0x1f0000) returned 1 [0199.372] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215b40 | out: hHeap=0x1f0000) returned 1 [0199.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215b40 [0199.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0199.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e828 [0199.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215c18 [0199.373] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1032\\*", lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e880 [0199.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216170 [0199.374] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215c18 | out: hHeap=0x1f0000) returned 1 [0199.374] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0199.374] FindNextFileW (in: hFindFile=0x24e880, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.374] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215c18 [0199.374] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216170 | out: hHeap=0x1f0000) returned 1 [0199.374] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0199.374] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0199.374] FindNextFileW (in: hFindFile=0x24e880, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x22ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0199.374] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0199.374] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216170 [0199.374] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x214fd8 [0199.374] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216170 | out: hHeap=0x1f0000) returned 1 [0199.374] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215c18 | out: hHeap=0x1f0000) returned 1 [0199.374] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0199.375] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1032\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1032\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0199.375] GetFileType (hFile=0x1d8) returned 0x1 [0199.375] CloseHandle (hObject=0x1d8) returned 1 [0199.376] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239928 [0199.376] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1032\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1032\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb14 | out: lpFileInformation=0x1a1eb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x22ac)) returned 1 [0199.376] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239928 | out: hHeap=0x1f0000) returned 1 [0199.376] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239508 [0199.376] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1032\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1032\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb1c | out: lpFileInformation=0x1a1eb1c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x22ac)) returned 1 [0199.376] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239508 | out: hHeap=0x1f0000) returned 1 [0199.376] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239ae0 [0199.376] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239ae0 | out: hHeap=0x1f0000) returned 1 [0199.377] FindNextFileW (in: hFindFile=0x24e880, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1510c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0199.377] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2f0 [0199.377] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216170 [0199.377] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d68 [0199.377] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216170 | out: hHeap=0x1f0000) returned 1 [0199.377] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214fd8 | out: hHeap=0x1f0000) returned 1 [0199.377] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0199.378] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1032\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1032\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0199.378] GetFileType (hFile=0x1d8) returned 0x1 [0199.378] CloseHandle (hObject=0x1d8) returned 1 [0199.378] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214958 [0199.379] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1032\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1032\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb14 | out: lpFileInformation=0x1a1eb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1510c)) returned 1 [0199.379] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214958 | out: hHeap=0x1f0000) returned 1 [0199.379] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214dd0 [0199.379] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1032\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1032\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb1c | out: lpFileInformation=0x1a1eb1c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1510c)) returned 1 [0199.379] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214dd0 | out: hHeap=0x1f0000) returned 1 [0199.379] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214af8 [0199.379] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214af8 | out: hHeap=0x1f0000) returned 1 [0199.379] FindNextFileW (in: hFindFile=0x24e880, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0199.379] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2f0 [0199.380] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216170 [0199.380] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214dd0 [0199.380] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216170 | out: hHeap=0x1f0000) returned 1 [0199.380] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d68 | out: hHeap=0x1f0000) returned 1 [0199.380] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0199.381] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1032\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1032\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0199.381] GetFileType (hFile=0x1d8) returned 0x1 [0199.381] CloseHandle (hObject=0x1d8) returned 1 [0199.381] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c98 [0199.382] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1032\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1032\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb14 | out: lpFileInformation=0x1a1eb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58)) returned 1 [0199.382] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c98 | out: hHeap=0x1f0000) returned 1 [0199.382] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214b60 [0199.382] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1032\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1032\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb1c | out: lpFileInformation=0x1a1eb1c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58)) returned 1 [0199.382] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214b60 | out: hHeap=0x1f0000) returned 1 [0199.382] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214fd8 [0199.382] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214fd8 | out: hHeap=0x1f0000) returned 1 [0199.382] FindNextFileW (in: hFindFile=0x24e880, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0199.382] FindClose (in: hFindFile=0x24e880 | out: hFindFile=0x24e880) returned 1 [0199.383] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214dd0 | out: hHeap=0x1f0000) returned 1 [0199.383] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e828 | out: hHeap=0x1f0000) returned 1 [0199.383] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0199.383] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215b40 | out: hHeap=0x1f0000) returned 1 [0199.383] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216170 [0199.383] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0199.383] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e030 [0199.383] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215b40 [0199.383] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1033\\*", lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e680 [0199.384] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215c18 [0199.384] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215b40 | out: hHeap=0x1f0000) returned 1 [0199.384] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0199.384] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.384] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215b40 [0199.384] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215c18 | out: hHeap=0x1f0000) returned 1 [0199.384] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0199.385] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0199.385] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd723cc00, ftCreationTime.dwHighDateTime=0x1cabb47, ftLastAccessTime.dwLowDateTime=0xd723cc00, ftLastAccessTime.dwHighDateTime=0x1cabb47, ftLastWriteTime.dwLowDateTime=0xd723cc00, ftLastWriteTime.dwHighDateTime=0x1cabb47, nFileSizeHigh=0x0, nFileSizeLow=0xc74, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0199.385] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0199.385] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215c18 [0199.385] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x214e38 [0199.385] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215c18 | out: hHeap=0x1f0000) returned 1 [0199.385] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215b40 | out: hHeap=0x1f0000) returned 1 [0199.385] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0199.386] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1033\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1033\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0199.386] GetFileType (hFile=0x1d8) returned 0x1 [0199.386] CloseHandle (hObject=0x1d8) returned 1 [0199.387] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2396c0 [0199.387] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1033\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1033\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb14 | out: lpFileInformation=0x1a1eb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd723cc00, ftCreationTime.dwHighDateTime=0x1cabb47, ftLastAccessTime.dwLowDateTime=0xd723cc00, ftLastAccessTime.dwHighDateTime=0x1cabb47, ftLastWriteTime.dwLowDateTime=0xd723cc00, ftLastWriteTime.dwHighDateTime=0x1cabb47, nFileSizeHigh=0x0, nFileSizeLow=0xc74)) returned 1 [0199.387] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2396c0 | out: hHeap=0x1f0000) returned 1 [0199.387] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239928 [0199.387] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1033\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1033\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb1c | out: lpFileInformation=0x1a1eb1c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd723cc00, ftCreationTime.dwHighDateTime=0x1cabb47, ftLastAccessTime.dwLowDateTime=0xd723cc00, ftLastAccessTime.dwHighDateTime=0x1cabb47, ftLastWriteTime.dwLowDateTime=0xd723cc00, ftLastWriteTime.dwHighDateTime=0x1cabb47, nFileSizeHigh=0x0, nFileSizeLow=0xc74)) returned 1 [0199.388] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239928 | out: hHeap=0x1f0000) returned 1 [0199.388] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2397c8 [0199.388] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2397c8 | out: hHeap=0x1f0000) returned 1 [0199.388] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x47ad1a00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x47ad1a00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x47ad1a00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12db0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0199.388] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf70 [0199.388] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215b40 [0199.388] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d68 [0199.388] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215b40 | out: hHeap=0x1f0000) returned 1 [0199.388] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214e38 | out: hHeap=0x1f0000) returned 1 [0199.388] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf70 | out: hHeap=0x1f0000) returned 1 [0199.390] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1033\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1033\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0199.391] GetFileType (hFile=0x1d8) returned 0x1 [0199.391] CloseHandle (hObject=0x1d8) returned 1 [0199.391] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214fd8 [0199.392] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1033\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1033\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb14 | out: lpFileInformation=0x1a1eb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x47ad1a00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x47ad1a00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x47ad1a00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12db0)) returned 1 [0199.392] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214fd8 | out: hHeap=0x1f0000) returned 1 [0199.392] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214dd0 [0199.392] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1033\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1033\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb1c | out: lpFileInformation=0x1a1eb1c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x47ad1a00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x47ad1a00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x47ad1a00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12db0)) returned 1 [0199.392] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214dd0 | out: hHeap=0x1f0000) returned 1 [0199.392] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214fd8 [0199.392] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214fd8 | out: hHeap=0x1f0000) returned 1 [0199.392] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0199.393] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2f0 [0199.393] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215b40 [0199.393] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214bc8 [0199.393] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215b40 | out: hHeap=0x1f0000) returned 1 [0199.393] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d68 | out: hHeap=0x1f0000) returned 1 [0199.393] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0199.394] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1033\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1033\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0199.394] GetFileType (hFile=0x1d8) returned 0x1 [0199.394] CloseHandle (hObject=0x1d8) returned 1 [0199.394] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214b60 [0199.394] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1033\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1033\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb14 | out: lpFileInformation=0x1a1eb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358)) returned 1 [0199.395] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214b60 | out: hHeap=0x1f0000) returned 1 [0199.395] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x215040 [0199.395] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1033\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1033\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb1c | out: lpFileInformation=0x1a1eb1c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358)) returned 1 [0199.395] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215040 | out: hHeap=0x1f0000) returned 1 [0199.395] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c30 [0199.395] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c30 | out: hHeap=0x1f0000) returned 1 [0199.395] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0199.395] FindClose (in: hFindFile=0x24e680 | out: hFindFile=0x24e680) returned 1 [0199.396] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214bc8 | out: hHeap=0x1f0000) returned 1 [0199.396] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e030 | out: hHeap=0x1f0000) returned 1 [0199.396] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0199.396] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216170 | out: hHeap=0x1f0000) returned 1 [0199.396] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215b40 [0199.396] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0199.396] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e360 [0199.396] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215c18 [0199.396] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1035\\*", lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ec00 [0199.397] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216170 [0199.397] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215c18 | out: hHeap=0x1f0000) returned 1 [0199.397] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0199.397] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.397] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215c18 [0199.397] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216170 | out: hHeap=0x1f0000) returned 1 [0199.397] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0199.397] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0199.397] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe76, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0199.397] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0199.397] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216170 [0199.397] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x214958 [0199.397] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216170 | out: hHeap=0x1f0000) returned 1 [0199.397] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215c18 | out: hHeap=0x1f0000) returned 1 [0199.398] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0199.398] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1035\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1035\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0199.398] GetFileType (hFile=0x1d8) returned 0x1 [0199.399] CloseHandle (hObject=0x1d8) returned 1 [0199.399] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239718 [0199.399] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1035\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1035\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb14 | out: lpFileInformation=0x1a1eb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe76)) returned 1 [0199.399] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239718 | out: hHeap=0x1f0000) returned 1 [0199.399] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239ae0 [0199.399] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1035\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1035\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb1c | out: lpFileInformation=0x1a1eb1c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe76)) returned 1 [0199.400] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239ae0 | out: hHeap=0x1f0000) returned 1 [0199.400] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239928 [0199.400] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239928 | out: hHeap=0x1f0000) returned 1 [0199.400] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12cde, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0199.400] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf70 [0199.400] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215c18 [0199.400] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x215040 [0199.400] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215c18 | out: hHeap=0x1f0000) returned 1 [0199.400] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214958 | out: hHeap=0x1f0000) returned 1 [0199.400] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf70 | out: hHeap=0x1f0000) returned 1 [0199.401] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1035\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1035\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0199.401] GetFileType (hFile=0x1d8) returned 0x1 [0199.402] CloseHandle (hObject=0x1d8) returned 1 [0199.402] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214dd0 [0199.402] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1035\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1035\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb14 | out: lpFileInformation=0x1a1eb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12cde)) returned 1 [0199.402] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214dd0 | out: hHeap=0x1f0000) returned 1 [0199.402] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214af8 [0199.402] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1035\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1035\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb1c | out: lpFileInformation=0x1a1eb1c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12cde)) returned 1 [0199.402] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214af8 | out: hHeap=0x1f0000) returned 1 [0199.402] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214ea0 [0199.403] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214ea0 | out: hHeap=0x1f0000) returned 1 [0199.403] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0199.403] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2f0 [0199.403] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216170 [0199.403] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214ea0 [0199.403] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216170 | out: hHeap=0x1f0000) returned 1 [0199.403] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215040 | out: hHeap=0x1f0000) returned 1 [0199.403] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0199.404] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1035\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1035\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0199.404] GetFileType (hFile=0x1d8) returned 0x1 [0199.664] CloseHandle (hObject=0x1d8) returned 1 [0199.665] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214bc8 [0199.665] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1035\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1035\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb14 | out: lpFileInformation=0x1a1eb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758)) returned 1 [0199.665] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214bc8 | out: hHeap=0x1f0000) returned 1 [0199.665] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a28 [0199.665] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1035\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1035\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb1c | out: lpFileInformation=0x1a1eb1c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758)) returned 1 [0199.665] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a28 | out: hHeap=0x1f0000) returned 1 [0199.665] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x215040 [0199.665] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215040 | out: hHeap=0x1f0000) returned 1 [0199.665] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0199.666] FindClose (in: hFindFile=0x24ec00 | out: hFindFile=0x24ec00) returned 1 [0199.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214ea0 | out: hHeap=0x1f0000) returned 1 [0199.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e360 | out: hHeap=0x1f0000) returned 1 [0199.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0199.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215b40 | out: hHeap=0x1f0000) returned 1 [0199.666] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234b30 [0199.666] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260680 [0199.666] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22dd00 [0199.666] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2347d0 [0199.666] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1036\\*", lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ea40 [0199.667] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234aa0 [0199.667] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2347d0 | out: hHeap=0x1f0000) returned 1 [0199.667] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0199.667] FindNextFileW (in: hFindFile=0x24ea40, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.667] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234ae8 [0199.667] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234aa0 | out: hHeap=0x1f0000) returned 1 [0199.667] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0199.667] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0199.667] FindNextFileW (in: hFindFile=0x24ea40, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xdc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0199.667] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608b0 [0199.668] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234a58 [0199.668] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x214ea0 [0199.668] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234a58 | out: hHeap=0x1f0000) returned 1 [0199.668] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234ae8 | out: hHeap=0x1f0000) returned 1 [0199.668] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608b0 | out: hHeap=0x1f0000) returned 1 [0199.668] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1036\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1036\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0199.669] GetFileType (hFile=0x1d8) returned 0x1 [0199.669] CloseHandle (hObject=0x1d8) returned 1 [0199.669] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239610 [0199.669] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1036\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1036\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb14 | out: lpFileInformation=0x1a1eb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xdc6)) returned 1 [0199.670] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239610 | out: hHeap=0x1f0000) returned 1 [0199.670] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2397c8 [0199.670] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1036\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1036\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb1c | out: lpFileInformation=0x1a1eb1c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xdc6)) returned 1 [0199.670] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2397c8 | out: hHeap=0x1f0000) returned 1 [0199.670] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239b38 [0199.670] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239b38 | out: hHeap=0x1f0000) returned 1 [0199.670] FindNextFileW (in: hFindFile=0x24ea40, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x14412, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0199.670] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0199.670] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2347d0 [0199.670] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d68 [0199.670] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2347d0 | out: hHeap=0x1f0000) returned 1 [0199.671] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214ea0 | out: hHeap=0x1f0000) returned 1 [0199.671] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0199.671] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1036\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1036\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0199.671] GetFileType (hFile=0x1d8) returned 0x1 [0199.671] CloseHandle (hObject=0x1d8) returned 1 [0199.672] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214ea0 [0199.672] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1036\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1036\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb14 | out: lpFileInformation=0x1a1eb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x14412)) returned 1 [0199.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214ea0 | out: hHeap=0x1f0000) returned 1 [0199.672] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214ea0 [0199.672] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1036\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1036\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb1c | out: lpFileInformation=0x1a1eb1c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x14412)) returned 1 [0199.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214ea0 | out: hHeap=0x1f0000) returned 1 [0199.672] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x215040 [0199.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215040 | out: hHeap=0x1f0000) returned 1 [0199.673] FindNextFileW (in: hFindFile=0x24ea40, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0199.673] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0199.673] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234740 [0199.673] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214f70 [0199.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234740 | out: hHeap=0x1f0000) returned 1 [0199.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d68 | out: hHeap=0x1f0000) returned 1 [0199.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0199.674] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1036\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1036\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0199.674] GetFileType (hFile=0x1d8) returned 0x1 [0199.674] CloseHandle (hObject=0x1d8) returned 1 [0199.674] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2149c0 [0199.675] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1036\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1036\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb14 | out: lpFileInformation=0x1a1eb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958)) returned 1 [0199.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2149c0 | out: hHeap=0x1f0000) returned 1 [0199.675] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2149c0 [0199.675] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1036\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1036\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb1c | out: lpFileInformation=0x1a1eb1c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958)) returned 1 [0199.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2149c0 | out: hHeap=0x1f0000) returned 1 [0199.675] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214fd8 [0199.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214fd8 | out: hHeap=0x1f0000) returned 1 [0199.675] FindNextFileW (in: hFindFile=0x24ea40, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0199.675] FindClose (in: hFindFile=0x24ea40 | out: hFindFile=0x24ea40) returned 1 [0199.676] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f70 | out: hHeap=0x1f0000) returned 1 [0199.676] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22dd00 | out: hHeap=0x1f0000) returned 1 [0199.676] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260680 | out: hHeap=0x1f0000) returned 1 [0199.676] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b30 | out: hHeap=0x1f0000) returned 1 [0199.676] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234590 [0199.676] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604c8 [0199.676] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22eb58 [0199.676] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234a58 [0199.676] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1037\\*", lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e740 [0199.676] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234aa0 [0199.677] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234a58 | out: hHeap=0x1f0000) returned 1 [0199.677] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0199.677] FindNextFileW (in: hFindFile=0x24e740, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.677] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2344b8 [0199.677] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234aa0 | out: hHeap=0x1f0000) returned 1 [0199.677] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0199.677] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0199.677] FindNextFileW (in: hFindFile=0x24e740, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x1ac3, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0199.677] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0199.677] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234818 [0199.677] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x2149c0 [0199.677] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234818 | out: hHeap=0x1f0000) returned 1 [0199.677] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2344b8 | out: hHeap=0x1f0000) returned 1 [0199.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0199.678] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1037\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1037\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0199.678] GetFileType (hFile=0x1d8) returned 0x1 [0199.679] CloseHandle (hObject=0x1d8) returned 1 [0199.679] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2395b8 [0199.679] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1037\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1037\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb14 | out: lpFileInformation=0x1a1eb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x1ac3)) returned 1 [0199.679] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2395b8 | out: hHeap=0x1f0000) returned 1 [0199.679] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239a30 [0199.679] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1037\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1037\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb1c | out: lpFileInformation=0x1a1eb1c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x1ac3)) returned 1 [0199.679] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239a30 | out: hHeap=0x1f0000) returned 1 [0199.679] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2397c8 [0199.679] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2397c8 | out: hHeap=0x1f0000) returned 1 [0199.679] FindNextFileW (in: hFindFile=0x24e740, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1198c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0199.680] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0199.680] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234788 [0199.680] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214ea0 [0199.680] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234788 | out: hHeap=0x1f0000) returned 1 [0199.680] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2149c0 | out: hHeap=0x1f0000) returned 1 [0199.680] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0199.680] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1037\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1037\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0199.680] GetFileType (hFile=0x1d8) returned 0x1 [0199.681] CloseHandle (hObject=0x1d8) returned 1 [0199.681] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c98 [0199.681] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1037\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1037\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb14 | out: lpFileInformation=0x1a1eb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1198c)) returned 1 [0199.681] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c98 | out: hHeap=0x1f0000) returned 1 [0199.681] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214f70 [0199.681] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1037\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1037\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb1c | out: lpFileInformation=0x1a1eb1c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1198c)) returned 1 [0199.681] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f70 | out: hHeap=0x1f0000) returned 1 [0199.681] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214b60 [0199.681] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214b60 | out: hHeap=0x1f0000) returned 1 [0199.681] FindNextFileW (in: hFindFile=0x24e740, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4158, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0199.681] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0199.681] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2345d8 [0199.681] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214fd8 [0199.682] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2345d8 | out: hHeap=0x1f0000) returned 1 [0199.682] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214ea0 | out: hHeap=0x1f0000) returned 1 [0199.682] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0199.682] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1037\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1037\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0199.682] GetFileType (hFile=0x1d8) returned 0x1 [0199.682] CloseHandle (hObject=0x1d8) returned 1 [0199.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d68 [0199.683] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1037\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1037\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb14 | out: lpFileInformation=0x1a1eb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4158)) returned 1 [0199.683] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d68 | out: hHeap=0x1f0000) returned 1 [0199.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214af8 [0199.683] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1037\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1037\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb1c | out: lpFileInformation=0x1a1eb1c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4158)) returned 1 [0199.683] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214af8 | out: hHeap=0x1f0000) returned 1 [0199.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214f70 [0199.683] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f70 | out: hHeap=0x1f0000) returned 1 [0199.683] FindNextFileW (in: hFindFile=0x24e740, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4158, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0199.683] FindClose (in: hFindFile=0x24e740 | out: hFindFile=0x24e740) returned 1 [0199.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214fd8 | out: hHeap=0x1f0000) returned 1 [0199.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22eb58 | out: hHeap=0x1f0000) returned 1 [0199.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604c8 | out: hHeap=0x1f0000) returned 1 [0199.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234590 | out: hHeap=0x1f0000) returned 1 [0199.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234740 [0199.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260630 [0199.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22eb58 [0199.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2348a8 [0199.684] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1038\\*", lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ea00 [0199.685] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2345d8 [0199.685] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2348a8 | out: hHeap=0x1f0000) returned 1 [0199.685] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0199.685] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.685] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234a58 [0199.685] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2345d8 | out: hHeap=0x1f0000) returned 1 [0199.685] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0199.685] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0199.686] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x109e, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0199.686] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605e0 [0199.686] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234788 [0199.686] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x214a90 [0199.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234788 | out: hHeap=0x1f0000) returned 1 [0199.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234a58 | out: hHeap=0x1f0000) returned 1 [0199.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605e0 | out: hHeap=0x1f0000) returned 1 [0199.687] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1038\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1038\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0199.687] GetFileType (hFile=0x1d8) returned 0x1 [0199.687] CloseHandle (hObject=0x1d8) returned 1 [0199.687] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239a30 [0199.688] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1038\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1038\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb14 | out: lpFileInformation=0x1a1eb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x109e)) returned 1 [0199.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239a30 | out: hHeap=0x1f0000) returned 1 [0199.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2395b8 [0199.688] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1038\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1038\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb1c | out: lpFileInformation=0x1a1eb1c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x109e)) returned 1 [0199.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2395b8 | out: hHeap=0x1f0000) returned 1 [0199.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2394b0 [0199.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2394b0 | out: hHeap=0x1f0000) returned 1 [0199.688] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x151aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0199.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0199.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234788 [0199.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214ea0 [0199.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234788 | out: hHeap=0x1f0000) returned 1 [0199.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a90 | out: hHeap=0x1f0000) returned 1 [0199.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0199.688] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1038\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1038\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0199.689] GetFileType (hFile=0x1d8) returned 0x1 [0199.689] CloseHandle (hObject=0x1d8) returned 1 [0199.689] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214f70 [0199.689] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1038\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1038\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb14 | out: lpFileInformation=0x1a1eb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x151aa)) returned 1 [0199.689] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f70 | out: hHeap=0x1f0000) returned 1 [0199.689] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214af8 [0199.690] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1038\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1038\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb1c | out: lpFileInformation=0x1a1eb1c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x151aa)) returned 1 [0199.690] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214af8 | out: hHeap=0x1f0000) returned 1 [0199.690] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214fd8 [0199.690] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214fd8 | out: hHeap=0x1f0000) returned 1 [0199.690] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0199.690] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0199.690] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2344b8 [0199.690] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a28 [0199.690] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2344b8 | out: hHeap=0x1f0000) returned 1 [0199.690] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214ea0 | out: hHeap=0x1f0000) returned 1 [0199.690] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0199.691] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1038\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1038\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0199.691] GetFileType (hFile=0x1d8) returned 0x1 [0199.691] CloseHandle (hObject=0x1d8) returned 1 [0199.691] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a90 [0199.692] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1038\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1038\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb14 | out: lpFileInformation=0x1a1eb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958)) returned 1 [0199.692] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a90 | out: hHeap=0x1f0000) returned 1 [0199.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214ea0 [0199.692] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1038\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1038\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb1c | out: lpFileInformation=0x1a1eb1c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958)) returned 1 [0199.692] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214ea0 | out: hHeap=0x1f0000) returned 1 [0199.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214fd8 [0199.692] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214fd8 | out: hHeap=0x1f0000) returned 1 [0199.692] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0199.692] FindClose (in: hFindFile=0x24ea00 | out: hFindFile=0x24ea00) returned 1 [0199.692] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a28 | out: hHeap=0x1f0000) returned 1 [0199.693] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22eb58 | out: hHeap=0x1f0000) returned 1 [0199.693] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260630 | out: hHeap=0x1f0000) returned 1 [0199.693] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234740 | out: hHeap=0x1f0000) returned 1 [0199.693] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234818 [0199.693] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608b0 [0199.693] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22eb58 [0199.693] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2348a8 [0199.693] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1040\\*", lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e980 [0199.693] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234a58 [0199.693] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2348a8 | out: hHeap=0x1f0000) returned 1 [0199.693] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0199.693] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.693] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234aa0 [0199.693] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234a58 | out: hHeap=0x1f0000) returned 1 [0199.694] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0199.694] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0199.694] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0199.694] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0199.694] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2348a8 [0199.694] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x214a90 [0199.694] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2348a8 | out: hHeap=0x1f0000) returned 1 [0199.694] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234aa0 | out: hHeap=0x1f0000) returned 1 [0199.694] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0199.694] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1040\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1040\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0199.695] GetFileType (hFile=0x1d8) returned 0x1 [0199.695] CloseHandle (hObject=0x1d8) returned 1 [0199.695] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239508 [0199.695] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1040\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1040\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb14 | out: lpFileInformation=0x1a1eb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe3b)) returned 1 [0199.696] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239508 | out: hHeap=0x1f0000) returned 1 [0199.696] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239718 [0199.696] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1040\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1040\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb1c | out: lpFileInformation=0x1a1eb1c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe3b)) returned 1 [0199.696] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239718 | out: hHeap=0x1f0000) returned 1 [0199.696] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239400 [0199.696] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239400 | out: hHeap=0x1f0000) returned 1 [0199.696] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x138bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0199.696] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1ff058 [0199.696] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234668 [0199.696] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214f70 [0199.696] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234668 | out: hHeap=0x1f0000) returned 1 [0199.696] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a90 | out: hHeap=0x1f0000) returned 1 [0199.696] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1ff058 | out: hHeap=0x1f0000) returned 1 [0199.697] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1040\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1040\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0199.697] GetFileType (hFile=0x1d8) returned 0x1 [0199.698] CloseHandle (hObject=0x1d8) returned 1 [0199.698] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214ea0 [0199.698] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1040\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1040\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb14 | out: lpFileInformation=0x1a1eb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x138bc)) returned 1 [0199.698] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214ea0 | out: hHeap=0x1f0000) returned 1 [0199.698] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214b60 [0199.698] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1040\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1040\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb1c | out: lpFileInformation=0x1a1eb1c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x138bc)) returned 1 [0199.698] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214b60 | out: hHeap=0x1f0000) returned 1 [0199.699] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214bc8 [0199.699] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214bc8 | out: hHeap=0x1f0000) returned 1 [0199.699] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0199.699] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1ff058 [0199.699] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2348a8 [0199.699] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214fd8 [0199.699] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2348a8 | out: hHeap=0x1f0000) returned 1 [0199.699] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f70 | out: hHeap=0x1f0000) returned 1 [0199.699] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1ff058 | out: hHeap=0x1f0000) returned 1 [0199.700] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1040\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1040\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0199.700] GetFileType (hFile=0x1d8) returned 0x1 [0199.700] CloseHandle (hObject=0x1d8) returned 1 [0199.700] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2149c0 [0199.700] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1040\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1040\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb14 | out: lpFileInformation=0x1a1eb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758)) returned 1 [0199.700] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2149c0 | out: hHeap=0x1f0000) returned 1 [0199.700] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d68 [0199.700] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1040\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1040\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb1c | out: lpFileInformation=0x1a1eb1c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758)) returned 1 [0199.700] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d68 | out: hHeap=0x1f0000) returned 1 [0199.700] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c98 [0199.700] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c98 | out: hHeap=0x1f0000) returned 1 [0199.701] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0199.701] FindClose (in: hFindFile=0x24e980 | out: hFindFile=0x24e980) returned 1 [0199.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214fd8 | out: hHeap=0x1f0000) returned 1 [0200.018] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22eb58 | out: hHeap=0x1f0000) returned 1 [0200.018] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608b0 | out: hHeap=0x1f0000) returned 1 [0200.018] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234818 | out: hHeap=0x1f0000) returned 1 [0200.018] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234818 [0200.018] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608b0 [0200.019] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e9c0 [0200.019] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2344b8 [0200.019] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1041\\*", lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e6c0 [0200.019] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234500 [0200.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2344b8 | out: hHeap=0x1f0000) returned 1 [0200.019] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0200.019] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0200.019] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2344b8 [0200.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234500 | out: hHeap=0x1f0000) returned 1 [0200.020] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0200.020] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0200.020] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x278d, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0200.020] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ab8 [0200.020] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234500 [0200.020] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x214f70 [0200.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234500 | out: hHeap=0x1f0000) returned 1 [0200.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2344b8 | out: hHeap=0x1f0000) returned 1 [0200.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ab8 | out: hHeap=0x1f0000) returned 1 [0200.021] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1041\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1041\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1dc [0200.021] GetFileType (hFile=0x1dc) returned 0x1 [0200.021] CloseHandle (hObject=0x1dc) returned 1 [0200.022] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239b38 [0200.022] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1041\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1041\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb14 | out: lpFileInformation=0x1a1eb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x278d)) returned 1 [0200.022] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239b38 | out: hHeap=0x1f0000) returned 1 [0200.022] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239458 [0200.022] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1041\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1041\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb1c | out: lpFileInformation=0x1a1eb1c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x278d)) returned 1 [0200.022] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239458 | out: hHeap=0x1f0000) returned 1 [0200.022] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2394b0 [0200.022] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2394b0 | out: hHeap=0x1f0000) returned 1 [0200.022] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x10a82, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0200.022] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282d8 [0200.023] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2344b8 [0200.023] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214af8 [0200.023] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2344b8 | out: hHeap=0x1f0000) returned 1 [0200.023] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f70 | out: hHeap=0x1f0000) returned 1 [0200.023] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282d8 | out: hHeap=0x1f0000) returned 1 [0200.023] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1041\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1041\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1dc [0200.024] GetFileType (hFile=0x1dc) returned 0x1 [0200.024] CloseHandle (hObject=0x1dc) returned 1 [0200.024] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214f70 [0200.024] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1041\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1041\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb14 | out: lpFileInformation=0x1a1eb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x10a82)) returned 1 [0200.024] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f70 | out: hHeap=0x1f0000) returned 1 [0200.025] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a28 [0200.025] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1041\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1041\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb1c | out: lpFileInformation=0x1a1eb1c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x10a82)) returned 1 [0200.025] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a28 | out: hHeap=0x1f0000) returned 1 [0200.025] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a28 [0200.025] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a28 | out: hHeap=0x1f0000) returned 1 [0200.025] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0200.025] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282d8 [0200.025] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2344b8 [0200.025] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214dd0 [0200.025] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2344b8 | out: hHeap=0x1f0000) returned 1 [0200.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214af8 | out: hHeap=0x1f0000) returned 1 [0200.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282d8 | out: hHeap=0x1f0000) returned 1 [0200.026] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1041\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1041\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1dc [0200.026] GetFileType (hFile=0x1dc) returned 0x1 [0200.027] CloseHandle (hObject=0x1dc) returned 1 [0200.027] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214fd8 [0200.027] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1041\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1041\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb14 | out: lpFileInformation=0x1a1eb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3d58)) returned 1 [0200.027] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214fd8 | out: hHeap=0x1f0000) returned 1 [0200.027] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214e38 [0200.027] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1041\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1041\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb1c | out: lpFileInformation=0x1a1eb1c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3d58)) returned 1 [0200.027] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214e38 | out: hHeap=0x1f0000) returned 1 [0200.028] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c98 [0200.028] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c98 | out: hHeap=0x1f0000) returned 1 [0200.028] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0200.028] FindClose (in: hFindFile=0x24e6c0 | out: hFindFile=0x24e6c0) returned 1 [0200.028] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214dd0 | out: hHeap=0x1f0000) returned 1 [0200.028] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e9c0 | out: hHeap=0x1f0000) returned 1 [0200.028] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608b0 | out: hHeap=0x1f0000) returned 1 [0200.028] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234818 | out: hHeap=0x1f0000) returned 1 [0200.028] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2344b8 [0200.028] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608b0 [0200.028] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e9c0 [0200.028] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234500 [0200.029] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1042\\*", lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e780 [0200.029] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234818 [0200.029] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234500 | out: hHeap=0x1f0000) returned 1 [0200.029] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0200.029] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0200.029] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234500 [0200.029] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234818 | out: hHeap=0x1f0000) returned 1 [0200.029] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0200.029] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0200.029] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x318f, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0200.029] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a18 [0200.030] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234818 [0200.030] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x214af8 [0200.030] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234818 | out: hHeap=0x1f0000) returned 1 [0200.030] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234500 | out: hHeap=0x1f0000) returned 1 [0200.030] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a18 | out: hHeap=0x1f0000) returned 1 [0200.030] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1042\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1042\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1dc [0200.030] GetFileType (hFile=0x1dc) returned 0x1 [0200.031] CloseHandle (hObject=0x1dc) returned 1 [0200.031] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239ae0 [0200.031] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1042\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1042\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb14 | out: lpFileInformation=0x1a1eb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x318f)) returned 1 [0200.031] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239ae0 | out: hHeap=0x1f0000) returned 1 [0200.031] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239ae0 [0200.031] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1042\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1042\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb1c | out: lpFileInformation=0x1a1eb1c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x318f)) returned 1 [0200.031] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239ae0 | out: hHeap=0x1f0000) returned 1 [0200.032] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2396c0 [0200.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2396c0 | out: hHeap=0x1f0000) returned 1 [0200.032] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xfed6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0200.032] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228310 [0200.032] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234500 [0200.032] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2149c0 [0200.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234500 | out: hHeap=0x1f0000) returned 1 [0200.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214af8 | out: hHeap=0x1f0000) returned 1 [0200.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228310 | out: hHeap=0x1f0000) returned 1 [0200.033] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1042\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1042\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1dc [0200.033] GetFileType (hFile=0x1dc) returned 0x1 [0200.033] CloseHandle (hObject=0x1dc) returned 1 [0200.034] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a28 [0200.034] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1042\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1042\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb14 | out: lpFileInformation=0x1a1eb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xfed6)) returned 1 [0200.034] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a28 | out: hHeap=0x1f0000) returned 1 [0200.034] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214dd0 [0200.034] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1042\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1042\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb1c | out: lpFileInformation=0x1a1eb1c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xfed6)) returned 1 [0200.034] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214dd0 | out: hHeap=0x1f0000) returned 1 [0200.034] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214f70 [0200.035] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f70 | out: hHeap=0x1f0000) returned 1 [0200.035] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0200.035] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282a0 [0200.035] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234500 [0200.035] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214f70 [0200.035] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234500 | out: hHeap=0x1f0000) returned 1 [0200.035] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2149c0 | out: hHeap=0x1f0000) returned 1 [0200.035] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0200.036] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1042\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1042\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1dc [0200.036] GetFileType (hFile=0x1dc) returned 0x1 [0200.036] CloseHandle (hObject=0x1dc) returned 1 [0200.037] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214fd8 [0200.037] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1042\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1042\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb14 | out: lpFileInformation=0x1a1eb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3b58)) returned 1 [0200.037] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214fd8 | out: hHeap=0x1f0000) returned 1 [0200.037] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214bc8 [0200.037] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1042\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1042\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb1c | out: lpFileInformation=0x1a1eb1c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3b58)) returned 1 [0200.037] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214bc8 | out: hHeap=0x1f0000) returned 1 [0200.037] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214bc8 [0200.037] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214bc8 | out: hHeap=0x1f0000) returned 1 [0200.037] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0200.038] FindClose (in: hFindFile=0x24e780 | out: hFindFile=0x24e780) returned 1 [0200.038] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f70 | out: hHeap=0x1f0000) returned 1 [0200.038] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e9c0 | out: hHeap=0x1f0000) returned 1 [0200.038] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608b0 | out: hHeap=0x1f0000) returned 1 [0200.038] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2344b8 | out: hHeap=0x1f0000) returned 1 [0200.038] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2344b8 [0200.038] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608b0 [0200.038] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e9c0 [0200.039] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234818 [0200.039] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1043\\*", lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e600 [0200.039] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234500 [0200.039] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234818 | out: hHeap=0x1f0000) returned 1 [0200.039] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0200.039] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0200.039] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234818 [0200.039] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234500 | out: hHeap=0x1f0000) returned 1 [0200.040] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0200.040] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0200.040] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xdda, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0200.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0200.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234500 [0200.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x215040 [0200.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234500 | out: hHeap=0x1f0000) returned 1 [0200.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234818 | out: hHeap=0x1f0000) returned 1 [0200.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0200.041] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1043\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1043\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1dc [0200.041] GetFileType (hFile=0x1dc) returned 0x1 [0200.041] CloseHandle (hObject=0x1dc) returned 1 [0200.042] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239770 [0200.042] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1043\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1043\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb14 | out: lpFileInformation=0x1a1eb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xdda)) returned 1 [0200.042] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239770 | out: hHeap=0x1f0000) returned 1 [0200.042] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239400 [0200.042] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1043\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1043\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb1c | out: lpFileInformation=0x1a1eb1c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xdda)) returned 1 [0200.042] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239400 | out: hHeap=0x1f0000) returned 1 [0200.042] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239718 [0200.042] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239718 | out: hHeap=0x1f0000) returned 1 [0200.043] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13712, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0200.043] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282d8 [0200.043] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234500 [0200.043] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214bc8 [0200.043] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234500 | out: hHeap=0x1f0000) returned 1 [0200.043] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215040 | out: hHeap=0x1f0000) returned 1 [0200.043] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282d8 | out: hHeap=0x1f0000) returned 1 [0200.043] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1043\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1043\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1dc [0200.044] GetFileType (hFile=0x1dc) returned 0x1 [0200.044] CloseHandle (hObject=0x1dc) returned 1 [0200.044] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2149c0 [0200.044] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1043\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1043\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb14 | out: lpFileInformation=0x1a1eb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13712)) returned 1 [0200.044] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2149c0 | out: hHeap=0x1f0000) returned 1 [0200.044] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214fd8 [0200.044] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1043\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1043\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb1c | out: lpFileInformation=0x1a1eb1c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13712)) returned 1 [0200.045] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214fd8 | out: hHeap=0x1f0000) returned 1 [0200.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214dd0 [0200.045] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214dd0 | out: hHeap=0x1f0000) returned 1 [0200.045] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0200.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282d8 [0200.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234818 [0200.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214af8 [0200.046] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234818 | out: hHeap=0x1f0000) returned 1 [0200.046] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214bc8 | out: hHeap=0x1f0000) returned 1 [0200.046] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282d8 | out: hHeap=0x1f0000) returned 1 [0200.046] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1043\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1043\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1dc [0200.046] GetFileType (hFile=0x1dc) returned 0x1 [0200.046] CloseHandle (hObject=0x1dc) returned 1 [0200.047] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214f70 [0200.047] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1043\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1043\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb14 | out: lpFileInformation=0x1a1eb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58)) returned 1 [0200.047] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f70 | out: hHeap=0x1f0000) returned 1 [0200.047] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214f70 [0200.047] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1043\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1043\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb1c | out: lpFileInformation=0x1a1eb1c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58)) returned 1 [0200.047] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f70 | out: hHeap=0x1f0000) returned 1 [0200.047] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214bc8 [0200.047] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214bc8 | out: hHeap=0x1f0000) returned 1 [0200.048] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0200.048] FindClose (in: hFindFile=0x24e600 | out: hFindFile=0x24e600) returned 1 [0200.048] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214af8 | out: hHeap=0x1f0000) returned 1 [0200.048] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e9c0 | out: hHeap=0x1f0000) returned 1 [0200.048] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608b0 | out: hHeap=0x1f0000) returned 1 [0200.048] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2344b8 | out: hHeap=0x1f0000) returned 1 [0200.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234818 [0200.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608b0 [0200.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e9c0 [0200.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2344b8 [0200.048] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1044\\*", lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e840 [0200.049] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234500 [0200.049] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2344b8 | out: hHeap=0x1f0000) returned 1 [0200.049] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0200.049] FindNextFileW (in: hFindFile=0x24e840, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0200.049] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2344b8 [0200.049] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234500 | out: hHeap=0x1f0000) returned 1 [0200.049] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0200.049] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0200.049] FindNextFileW (in: hFindFile=0x24e840, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xbe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0200.049] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b58 [0200.050] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234500 [0200.050] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x214f70 [0200.050] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234500 | out: hHeap=0x1f0000) returned 1 [0200.050] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2344b8 | out: hHeap=0x1f0000) returned 1 [0200.050] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b58 | out: hHeap=0x1f0000) returned 1 [0200.050] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1044\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1044\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1dc [0200.051] GetFileType (hFile=0x1dc) returned 0x1 [0200.051] CloseHandle (hObject=0x1dc) returned 1 [0200.051] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239ae0 [0200.051] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1044\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1044\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb14 | out: lpFileInformation=0x1a1eb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xbe6)) returned 1 [0200.051] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239ae0 | out: hHeap=0x1f0000) returned 1 [0200.052] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239ae0 [0200.052] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1044\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1044\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb1c | out: lpFileInformation=0x1a1eb1c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xbe6)) returned 1 [0200.052] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239ae0 | out: hHeap=0x1f0000) returned 1 [0200.052] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239610 [0200.052] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239610 | out: hHeap=0x1f0000) returned 1 [0200.052] FindNextFileW (in: hFindFile=0x24e840, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x135c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0200.052] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282a0 [0200.052] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2344b8 [0200.052] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214fd8 [0200.052] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2344b8 | out: hHeap=0x1f0000) returned 1 [0200.053] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f70 | out: hHeap=0x1f0000) returned 1 [0200.053] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0200.053] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1044\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1044\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1dc [0200.053] GetFileType (hFile=0x1dc) returned 0x1 [0200.054] CloseHandle (hObject=0x1dc) returned 1 [0200.054] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214bc8 [0200.054] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1044\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1044\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb14 | out: lpFileInformation=0x1a1eb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x135c0)) returned 1 [0200.055] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214bc8 | out: hHeap=0x1f0000) returned 1 [0200.055] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214dd0 [0200.055] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1044\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1044\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb1c | out: lpFileInformation=0x1a1eb1c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x135c0)) returned 1 [0200.055] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214dd0 | out: hHeap=0x1f0000) returned 1 [0200.055] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214dd0 [0200.055] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214dd0 | out: hHeap=0x1f0000) returned 1 [0200.055] FindNextFileW (in: hFindFile=0x24e840, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0200.055] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282d8 [0200.055] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2344b8 [0200.056] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a28 [0200.056] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2344b8 | out: hHeap=0x1f0000) returned 1 [0200.056] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214fd8 | out: hHeap=0x1f0000) returned 1 [0200.056] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282d8 | out: hHeap=0x1f0000) returned 1 [0200.056] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1044\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1044\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1dc [0200.057] GetFileType (hFile=0x1dc) returned 0x1 [0200.057] CloseHandle (hObject=0x1dc) returned 1 [0200.057] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214f70 [0200.058] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1044\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1044\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb14 | out: lpFileInformation=0x1a1eb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558)) returned 1 [0200.058] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f70 | out: hHeap=0x1f0000) returned 1 [0200.058] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214f70 [0200.058] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1044\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1044\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb1c | out: lpFileInformation=0x1a1eb1c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558)) returned 1 [0200.058] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f70 | out: hHeap=0x1f0000) returned 1 [0200.058] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2149c0 [0200.058] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2149c0 | out: hHeap=0x1f0000) returned 1 [0200.058] FindNextFileW (in: hFindFile=0x24e840, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0200.058] FindClose (in: hFindFile=0x24e840 | out: hFindFile=0x24e840) returned 1 [0200.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a28 | out: hHeap=0x1f0000) returned 1 [0200.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e9c0 | out: hHeap=0x1f0000) returned 1 [0200.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608b0 | out: hHeap=0x1f0000) returned 1 [0200.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234818 | out: hHeap=0x1f0000) returned 1 [0200.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234818 [0200.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608b0 [0200.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e9c0 [0200.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2344b8 [0200.060] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1045\\*", lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ed00 [0200.060] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234500 [0200.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2344b8 | out: hHeap=0x1f0000) returned 1 [0200.060] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0200.060] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0200.060] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229328 [0200.298] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234500 | out: hHeap=0x1f0000) returned 1 [0200.298] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0200.298] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0200.298] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xfc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0200.298] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380c8 [0200.298] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228d88 [0200.298] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x214ea0 [0200.298] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228d88 | out: hHeap=0x1f0000) returned 1 [0200.298] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229328 | out: hHeap=0x1f0000) returned 1 [0200.298] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380c8 | out: hHeap=0x1f0000) returned 1 [0200.451] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1045\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1045\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0200.452] GetFileType (hFile=0x200) returned 0x1 [0200.452] CloseHandle (hObject=0x200) returned 1 [0200.452] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239a30 [0200.452] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1045\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1045\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb14 | out: lpFileInformation=0x1a1eb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xfc8)) returned 1 [0200.452] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239a30 | out: hHeap=0x1f0000) returned 1 [0200.452] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2394b0 [0200.452] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1045\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1045\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb1c | out: lpFileInformation=0x1a1eb1c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xfc8)) returned 1 [0200.452] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2394b0 | out: hHeap=0x1f0000) returned 1 [0200.452] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2395b8 [0200.452] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2395b8 | out: hHeap=0x1f0000) returned 1 [0200.452] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x141c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0200.453] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228150 [0200.453] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2291c0 [0200.453] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214dd0 [0200.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2291c0 | out: hHeap=0x1f0000) returned 1 [0200.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214ea0 | out: hHeap=0x1f0000) returned 1 [0200.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228150 | out: hHeap=0x1f0000) returned 1 [0200.453] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1045\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1045\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0200.453] GetFileType (hFile=0x200) returned 0x1 [0200.454] CloseHandle (hObject=0x200) returned 1 [0200.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214fd8 [0200.454] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1045\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1045\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb14 | out: lpFileInformation=0x1a1eb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x141c6)) returned 1 [0200.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214fd8 | out: hHeap=0x1f0000) returned 1 [0200.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214e38 [0200.454] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1045\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1045\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb1c | out: lpFileInformation=0x1a1eb1c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x141c6)) returned 1 [0200.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214e38 | out: hHeap=0x1f0000) returned 1 [0200.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c98 [0200.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c98 | out: hHeap=0x1f0000) returned 1 [0200.455] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0200.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228150 [0200.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228d88 [0200.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214e38 [0200.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228d88 | out: hHeap=0x1f0000) returned 1 [0200.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214dd0 | out: hHeap=0x1f0000) returned 1 [0200.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228150 | out: hHeap=0x1f0000) returned 1 [0200.455] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1045\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1045\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0200.455] GetFileType (hFile=0x200) returned 0x1 [0200.456] CloseHandle (hObject=0x200) returned 1 [0200.456] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214f70 [0200.456] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1045\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1045\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb14 | out: lpFileInformation=0x1a1eb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758)) returned 1 [0200.456] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f70 | out: hHeap=0x1f0000) returned 1 [0200.456] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214fd8 [0200.456] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1045\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1045\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb1c | out: lpFileInformation=0x1a1eb1c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758)) returned 1 [0200.456] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214fd8 | out: hHeap=0x1f0000) returned 1 [0200.456] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214dd0 [0200.456] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214dd0 | out: hHeap=0x1f0000) returned 1 [0200.456] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0200.456] FindClose (in: hFindFile=0x24ed00 | out: hFindFile=0x24ed00) returned 1 [0200.456] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214e38 | out: hHeap=0x1f0000) returned 1 [0200.457] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e9c0 | out: hHeap=0x1f0000) returned 1 [0200.457] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608b0 | out: hHeap=0x1f0000) returned 1 [0200.457] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234818 | out: hHeap=0x1f0000) returned 1 [0200.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229058 [0200.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380f0 [0200.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x236e20 [0200.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228d88 [0200.457] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1046\\*", lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e7c0 [0200.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228dd0 [0200.457] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228d88 | out: hHeap=0x1f0000) returned 1 [0200.457] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0200.457] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0200.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228ea8 [0200.457] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228dd0 | out: hHeap=0x1f0000) returned 1 [0200.457] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0200.457] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0200.457] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe63, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0200.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0200.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229130 [0200.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x2149c0 [0200.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229130 | out: hHeap=0x1f0000) returned 1 [0200.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228ea8 | out: hHeap=0x1f0000) returned 1 [0200.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0200.458] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1046\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1046\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0200.458] GetFileType (hFile=0x200) returned 0x1 [0200.458] CloseHandle (hObject=0x200) returned 1 [0200.458] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2397c8 [0200.458] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1046\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1046\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb14 | out: lpFileInformation=0x1a1eb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe63)) returned 1 [0200.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2397c8 | out: hHeap=0x1f0000) returned 1 [0200.458] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239610 [0200.459] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1046\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1046\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb1c | out: lpFileInformation=0x1a1eb1c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe63)) returned 1 [0200.459] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239610 | out: hHeap=0x1f0000) returned 1 [0200.459] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239a30 [0200.459] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239a30 | out: hHeap=0x1f0000) returned 1 [0200.459] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13b62, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0200.459] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227fc8 [0200.459] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228ea8 [0200.459] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c30 [0200.459] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228ea8 | out: hHeap=0x1f0000) returned 1 [0200.459] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2149c0 | out: hHeap=0x1f0000) returned 1 [0200.459] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227fc8 | out: hHeap=0x1f0000) returned 1 [0200.459] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1046\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1046\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0200.459] GetFileType (hFile=0x200) returned 0x1 [0200.460] CloseHandle (hObject=0x200) returned 1 [0200.460] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214f70 [0200.460] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1046\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1046\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb14 | out: lpFileInformation=0x1a1eb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13b62)) returned 1 [0200.460] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f70 | out: hHeap=0x1f0000) returned 1 [0200.460] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214e38 [0200.460] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1046\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1046\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb1c | out: lpFileInformation=0x1a1eb1c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13b62)) returned 1 [0200.460] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214e38 | out: hHeap=0x1f0000) returned 1 [0200.460] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214e38 [0200.460] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214e38 | out: hHeap=0x1f0000) returned 1 [0200.460] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0200.461] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0200.461] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229130 [0200.461] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214958 [0200.461] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229130 | out: hHeap=0x1f0000) returned 1 [0200.461] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c30 | out: hHeap=0x1f0000) returned 1 [0200.461] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0200.461] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1046\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1046\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0200.461] GetFileType (hFile=0x200) returned 0x1 [0200.461] CloseHandle (hObject=0x200) returned 1 [0200.462] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2150a8 [0200.462] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1046\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1046\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb14 | out: lpFileInformation=0x1a1eb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758)) returned 1 [0200.462] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2150a8 | out: hHeap=0x1f0000) returned 1 [0200.462] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a90 [0200.462] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1046\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1046\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb1c | out: lpFileInformation=0x1a1eb1c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758)) returned 1 [0200.462] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a90 | out: hHeap=0x1f0000) returned 1 [0200.462] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a90 [0200.462] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a90 | out: hHeap=0x1f0000) returned 1 [0200.462] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0200.462] FindClose (in: hFindFile=0x24e7c0 | out: hFindFile=0x24e7c0) returned 1 [0200.462] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214958 | out: hHeap=0x1f0000) returned 1 [0200.462] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236e20 | out: hHeap=0x1f0000) returned 1 [0200.463] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380f0 | out: hHeap=0x1f0000) returned 1 [0200.463] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229058 | out: hHeap=0x1f0000) returned 1 [0200.463] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228d88 [0200.463] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0200.463] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2372e8 [0200.463] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228dd0 [0200.463] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1049\\*", lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24eb40 [0200.463] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228e60 [0200.463] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228dd0 | out: hHeap=0x1f0000) returned 1 [0200.463] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0200.463] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0200.463] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228dd0 [0200.463] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228e60 | out: hHeap=0x1f0000) returned 1 [0200.463] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0200.463] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0200.464] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xd4b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0200.464] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238258 [0200.464] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228e60 [0200.464] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x2150a8 [0200.464] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228e60 | out: hHeap=0x1f0000) returned 1 [0200.464] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228dd0 | out: hHeap=0x1f0000) returned 1 [0200.464] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238258 | out: hHeap=0x1f0000) returned 1 [0200.464] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1049\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1049\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0200.464] GetFileType (hFile=0x200) returned 0x1 [0200.465] CloseHandle (hObject=0x200) returned 1 [0200.465] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2397c8 [0200.465] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1049\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1049\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb14 | out: lpFileInformation=0x1a1eb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xd4b8)) returned 1 [0200.465] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2397c8 | out: hHeap=0x1f0000) returned 1 [0200.465] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2395b8 [0200.465] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1049\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1049\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb1c | out: lpFileInformation=0x1a1eb1c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xd4b8)) returned 1 [0200.465] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2395b8 | out: hHeap=0x1f0000) returned 1 [0200.465] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239508 [0200.465] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239508 | out: hHeap=0x1f0000) returned 1 [0200.465] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13e4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0200.465] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228150 [0200.465] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229130 [0200.465] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c30 [0200.465] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229130 | out: hHeap=0x1f0000) returned 1 [0200.465] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2150a8 | out: hHeap=0x1f0000) returned 1 [0200.465] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228150 | out: hHeap=0x1f0000) returned 1 [0200.466] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1049\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1049\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0200.466] GetFileType (hFile=0x200) returned 0x1 [0200.466] CloseHandle (hObject=0x200) returned 1 [0200.466] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a90 [0200.466] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1049\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1049\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb14 | out: lpFileInformation=0x1a1eb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13e4a)) returned 1 [0200.467] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a90 | out: hHeap=0x1f0000) returned 1 [0200.468] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214f70 [0200.468] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1049\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1049\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb1c | out: lpFileInformation=0x1a1eb1c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13e4a)) returned 1 [0200.468] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f70 | out: hHeap=0x1f0000) returned 1 [0200.468] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214dd0 [0200.468] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214dd0 | out: hHeap=0x1f0000) returned 1 [0200.468] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0200.468] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0200.468] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229058 [0200.468] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c98 [0200.468] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229058 | out: hHeap=0x1f0000) returned 1 [0200.468] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c30 | out: hHeap=0x1f0000) returned 1 [0200.468] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0200.469] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1049\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1049\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0200.469] GetFileType (hFile=0x200) returned 0x1 [0200.469] CloseHandle (hObject=0x200) returned 1 [0200.469] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a90 [0200.469] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1049\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1049\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb14 | out: lpFileInformation=0x1a1eb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758)) returned 1 [0200.470] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a90 | out: hHeap=0x1f0000) returned 1 [0200.470] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214f70 [0200.470] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1049\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1049\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb1c | out: lpFileInformation=0x1a1eb1c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758)) returned 1 [0200.470] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f70 | out: hHeap=0x1f0000) returned 1 [0200.470] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2149c0 [0200.470] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2149c0 | out: hHeap=0x1f0000) returned 1 [0200.470] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0200.470] FindClose (in: hFindFile=0x24eb40 | out: hFindFile=0x24eb40) returned 1 [0200.470] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c98 | out: hHeap=0x1f0000) returned 1 [0200.470] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2372e8 | out: hHeap=0x1f0000) returned 1 [0200.470] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0200.470] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228d88 | out: hHeap=0x1f0000) returned 1 [0200.470] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228d88 [0200.470] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0200.470] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x236e20 [0200.470] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229130 [0200.471] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1053\\*", lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ea80 [0200.471] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229058 [0200.471] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229130 | out: hHeap=0x1f0000) returned 1 [0200.471] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0200.471] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0200.471] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228e60 [0200.471] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229058 | out: hHeap=0x1f0000) returned 1 [0200.471] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0200.471] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0200.471] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xf19, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0200.471] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0200.471] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229130 [0200.472] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x2150a8 [0200.472] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229130 | out: hHeap=0x1f0000) returned 1 [0200.472] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228e60 | out: hHeap=0x1f0000) returned 1 [0200.472] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0200.472] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1053\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1053\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0200.472] GetFileType (hFile=0x200) returned 0x1 [0200.472] CloseHandle (hObject=0x200) returned 1 [0200.472] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2396c0 [0200.473] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1053\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1053\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb14 | out: lpFileInformation=0x1a1eb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xf19)) returned 1 [0200.473] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2396c0 | out: hHeap=0x1f0000) returned 1 [0200.473] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239a30 [0200.473] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1053\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1053\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb1c | out: lpFileInformation=0x1a1eb1c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xf19)) returned 1 [0200.473] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239a30 | out: hHeap=0x1f0000) returned 1 [0200.473] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239b38 [0200.473] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239b38 | out: hHeap=0x1f0000) returned 1 [0200.473] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12f70, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0200.473] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228230 [0200.473] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228e60 [0200.473] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214ea0 [0200.473] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228e60 | out: hHeap=0x1f0000) returned 1 [0200.473] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2150a8 | out: hHeap=0x1f0000) returned 1 [0200.473] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228230 | out: hHeap=0x1f0000) returned 1 [0200.474] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1053\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1053\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0200.474] GetFileType (hFile=0x200) returned 0x1 [0200.474] CloseHandle (hObject=0x200) returned 1 [0200.474] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214e38 [0200.475] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1053\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1053\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb14 | out: lpFileInformation=0x1a1eb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12f70)) returned 1 [0200.475] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214e38 | out: hHeap=0x1f0000) returned 1 [0200.475] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a90 [0200.475] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1053\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1053\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb1c | out: lpFileInformation=0x1a1eb1c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12f70)) returned 1 [0200.475] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a90 | out: hHeap=0x1f0000) returned 1 [0200.475] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214f70 [0200.475] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f70 | out: hHeap=0x1f0000) returned 1 [0200.475] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0200.475] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0200.475] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228ea8 [0200.475] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214dd0 [0200.475] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228ea8 | out: hHeap=0x1f0000) returned 1 [0200.475] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214ea0 | out: hHeap=0x1f0000) returned 1 [0200.476] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0200.476] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1053\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1053\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0200.476] GetFileType (hFile=0x200) returned 0x1 [0200.476] CloseHandle (hObject=0x200) returned 1 [0200.477] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214e38 [0200.477] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1053\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1053\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb14 | out: lpFileInformation=0x1a1eb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558)) returned 1 [0200.477] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214e38 | out: hHeap=0x1f0000) returned 1 [0200.477] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214e38 [0200.477] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1053\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1053\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb1c | out: lpFileInformation=0x1a1eb1c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558)) returned 1 [0200.477] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214e38 | out: hHeap=0x1f0000) returned 1 [0200.477] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214fd8 [0200.477] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214fd8 | out: hHeap=0x1f0000) returned 1 [0200.477] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0200.477] FindClose (in: hFindFile=0x24ea80 | out: hFindFile=0x24ea80) returned 1 [0200.478] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214dd0 | out: hHeap=0x1f0000) returned 1 [0200.478] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236e20 | out: hHeap=0x1f0000) returned 1 [0200.478] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0200.478] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228d88 | out: hHeap=0x1f0000) returned 1 [0200.478] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229130 [0200.478] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0200.478] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x237150 [0200.478] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229058 [0200.478] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1055\\*", lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e800 [0200.478] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228e60 [0200.478] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229058 | out: hHeap=0x1f0000) returned 1 [0200.478] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0200.478] FindNextFileW (in: hFindFile=0x24e800, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0200.478] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229178 [0200.478] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228e60 | out: hHeap=0x1f0000) returned 1 [0200.479] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0200.479] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0200.479] FindNextFileW (in: hFindFile=0x24e800, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xf13, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0200.479] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380f0 [0200.479] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229058 [0200.479] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x214bc8 [0200.479] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229058 | out: hHeap=0x1f0000) returned 1 [0200.479] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229178 | out: hHeap=0x1f0000) returned 1 [0200.479] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380f0 | out: hHeap=0x1f0000) returned 1 [0200.480] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1055\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1055\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0200.480] GetFileType (hFile=0x200) returned 0x1 [0200.480] CloseHandle (hObject=0x200) returned 1 [0200.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2394b0 [0200.480] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1055\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1055\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb14 | out: lpFileInformation=0x1a1eb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xf13)) returned 1 [0200.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2394b0 | out: hHeap=0x1f0000) returned 1 [0200.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2395b8 [0200.480] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1055\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1055\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb1c | out: lpFileInformation=0x1a1eb1c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xf13)) returned 1 [0200.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2395b8 | out: hHeap=0x1f0000) returned 1 [0200.481] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239a30 [0200.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239a30 | out: hHeap=0x1f0000) returned 1 [0200.481] FindNextFileW (in: hFindFile=0x24e800, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12c12, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0200.481] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228150 [0200.481] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2291c0 [0200.481] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214f70 [0200.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2291c0 | out: hHeap=0x1f0000) returned 1 [0200.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214bc8 | out: hHeap=0x1f0000) returned 1 [0200.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228150 | out: hHeap=0x1f0000) returned 1 [0200.482] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1055\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1055\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0200.482] GetFileType (hFile=0x200) returned 0x1 [0200.483] CloseHandle (hObject=0x200) returned 1 [0200.483] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214fd8 [0200.483] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1055\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1055\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb14 | out: lpFileInformation=0x1a1eb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12c12)) returned 1 [0200.483] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214fd8 | out: hHeap=0x1f0000) returned 1 [0200.483] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c98 [0200.483] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1055\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1055\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb1c | out: lpFileInformation=0x1a1eb1c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12c12)) returned 1 [0200.483] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c98 | out: hHeap=0x1f0000) returned 1 [0200.483] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2149c0 [0200.483] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2149c0 | out: hHeap=0x1f0000) returned 1 [0200.483] FindNextFileW (in: hFindFile=0x24e800, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0200.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228150 [0200.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229058 [0200.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2149c0 [0200.484] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229058 | out: hHeap=0x1f0000) returned 1 [0200.484] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f70 | out: hHeap=0x1f0000) returned 1 [0200.484] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228150 | out: hHeap=0x1f0000) returned 1 [0200.484] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1055\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1055\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0200.484] GetFileType (hFile=0x200) returned 0x1 [0200.485] CloseHandle (hObject=0x200) returned 1 [0200.485] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214958 [0200.485] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1055\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1055\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb14 | out: lpFileInformation=0x1a1eb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558)) returned 1 [0200.485] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214958 | out: hHeap=0x1f0000) returned 1 [0200.485] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214ea0 [0200.485] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1055\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1055\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb1c | out: lpFileInformation=0x1a1eb1c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558)) returned 1 [0200.485] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214ea0 | out: hHeap=0x1f0000) returned 1 [0200.485] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214ea0 [0200.486] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214ea0 | out: hHeap=0x1f0000) returned 1 [0200.486] FindNextFileW (in: hFindFile=0x24e800, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0200.486] FindClose (in: hFindFile=0x24e800 | out: hFindFile=0x24e800) returned 1 [0200.486] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2149c0 | out: hHeap=0x1f0000) returned 1 [0200.486] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237150 | out: hHeap=0x1f0000) returned 1 [0200.486] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0200.486] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229130 | out: hHeap=0x1f0000) returned 1 [0200.486] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228d88 [0200.486] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0200.486] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x237ae0 [0200.486] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229058 [0200.486] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\2052\\*", lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ed00 [0200.487] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229130 [0200.487] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229058 | out: hHeap=0x1f0000) returned 1 [0200.487] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0200.487] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0200.487] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229058 [0200.487] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229130 | out: hHeap=0x1f0000) returned 1 [0200.487] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0200.487] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0200.487] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x16c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0200.487] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0200.487] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229130 [0200.487] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x2149c0 [0200.487] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229130 | out: hHeap=0x1f0000) returned 1 [0200.487] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229058 | out: hHeap=0x1f0000) returned 1 [0200.488] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0200.488] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\2052\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2052\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0200.488] GetFileType (hFile=0x200) returned 0x1 [0200.488] CloseHandle (hObject=0x200) returned 1 [0200.489] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239a30 [0200.489] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\2052\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2052\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb14 | out: lpFileInformation=0x1a1eb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x16c3)) returned 1 [0200.489] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239a30 | out: hHeap=0x1f0000) returned 1 [0200.489] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239ae0 [0200.489] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\2052\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2052\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb1c | out: lpFileInformation=0x1a1eb1c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x16c3)) returned 1 [0200.489] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239ae0 | out: hHeap=0x1f0000) returned 1 [0200.489] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239770 [0200.490] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239770 | out: hHeap=0x1f0000) returned 1 [0200.490] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0200.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0200.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228dd0 [0200.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214dd0 [0200.490] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228dd0 | out: hHeap=0x1f0000) returned 1 [0200.490] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2149c0 | out: hHeap=0x1f0000) returned 1 [0200.490] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0200.490] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\2052\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2052\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0200.490] GetFileType (hFile=0x200) returned 0x1 [0200.491] CloseHandle (hObject=0x200) returned 1 [0200.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214e38 [0200.491] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\2052\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2052\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb14 | out: lpFileInformation=0x1a1eb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed0c)) returned 1 [0200.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214e38 | out: hHeap=0x1f0000) returned 1 [0200.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214bc8 [0200.491] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\2052\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2052\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb1c | out: lpFileInformation=0x1a1eb1c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed0c)) returned 1 [0200.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214bc8 | out: hHeap=0x1f0000) returned 1 [0200.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2149c0 [0200.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2149c0 | out: hHeap=0x1f0000) returned 1 [0200.491] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0200.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0200.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228dd0 [0200.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2149c0 [0200.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228dd0 | out: hHeap=0x1f0000) returned 1 [0200.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214dd0 | out: hHeap=0x1f0000) returned 1 [0200.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0200.492] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\2052\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2052\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0200.492] GetFileType (hFile=0x200) returned 0x1 [0200.492] CloseHandle (hObject=0x200) returned 1 [0200.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214dd0 [0200.492] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\2052\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2052\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb14 | out: lpFileInformation=0x1a1eb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758)) returned 1 [0200.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214dd0 | out: hHeap=0x1f0000) returned 1 [0200.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214bc8 [0200.493] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\2052\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2052\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb1c | out: lpFileInformation=0x1a1eb1c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758)) returned 1 [0200.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214bc8 | out: hHeap=0x1f0000) returned 1 [0200.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214f70 [0200.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f70 | out: hHeap=0x1f0000) returned 1 [0200.493] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0200.493] FindClose (in: hFindFile=0x24ed00 | out: hFindFile=0x24ed00) returned 1 [0200.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2149c0 | out: hHeap=0x1f0000) returned 1 [0200.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237ae0 | out: hHeap=0x1f0000) returned 1 [0200.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0200.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228d88 | out: hHeap=0x1f0000) returned 1 [0200.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228d88 [0200.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0200.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x237ae0 [0200.494] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229058 [0200.494] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\2070\\*", lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e680 [0200.494] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228dd0 [0200.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229058 | out: hHeap=0x1f0000) returned 1 [0200.494] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0200.494] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0200.494] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228e60 [0200.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228dd0 | out: hHeap=0x1f0000) returned 1 [0200.494] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0200.494] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0200.494] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xfaf, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0200.494] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0200.494] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228ea8 [0200.494] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x214c98 [0200.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228ea8 | out: hHeap=0x1f0000) returned 1 [0200.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228e60 | out: hHeap=0x1f0000) returned 1 [0200.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0200.495] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\2070\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2070\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0200.495] GetFileType (hFile=0x200) returned 0x1 [0200.495] CloseHandle (hObject=0x200) returned 1 [0200.495] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239a30 [0200.495] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\2070\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2070\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb14 | out: lpFileInformation=0x1a1eb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xfaf)) returned 1 [0200.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239a30 | out: hHeap=0x1f0000) returned 1 [0200.495] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239a30 [0200.496] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\2070\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2070\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb1c | out: lpFileInformation=0x1a1eb1c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xfaf)) returned 1 [0200.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239a30 | out: hHeap=0x1f0000) returned 1 [0200.496] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239a30 [0200.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239a30 | out: hHeap=0x1f0000) returned 1 [0200.496] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1397e, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0200.496] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228150 [0200.496] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228dd0 [0200.496] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214bc8 [0200.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228dd0 | out: hHeap=0x1f0000) returned 1 [0200.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c98 | out: hHeap=0x1f0000) returned 1 [0200.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228150 | out: hHeap=0x1f0000) returned 1 [0200.497] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\2070\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2070\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0200.497] GetFileType (hFile=0x200) returned 0x1 [0200.497] CloseHandle (hObject=0x200) returned 1 [0200.497] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c30 [0200.497] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\2070\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2070\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb14 | out: lpFileInformation=0x1a1eb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1397e)) returned 1 [0200.497] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c30 | out: hHeap=0x1f0000) returned 1 [0200.497] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214ea0 [0200.497] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\2070\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2070\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb1c | out: lpFileInformation=0x1a1eb1c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1397e)) returned 1 [0200.497] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214ea0 | out: hHeap=0x1f0000) returned 1 [0200.498] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c30 [0200.498] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c30 | out: hHeap=0x1f0000) returned 1 [0200.498] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0200.498] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0200.498] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229130 [0200.498] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214ea0 [0200.498] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229130 | out: hHeap=0x1f0000) returned 1 [0200.498] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214bc8 | out: hHeap=0x1f0000) returned 1 [0200.498] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0200.498] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\2070\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2070\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0200.498] GetFileType (hFile=0x200) returned 0x1 [0200.499] CloseHandle (hObject=0x200) returned 1 [0200.499] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214dd0 [0200.499] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\2070\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2070\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb14 | out: lpFileInformation=0x1a1eb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958)) returned 1 [0200.499] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214dd0 | out: hHeap=0x1f0000) returned 1 [0200.499] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a28 [0200.499] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\2070\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2070\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb1c | out: lpFileInformation=0x1a1eb1c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958)) returned 1 [0200.499] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a28 | out: hHeap=0x1f0000) returned 1 [0200.500] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214f70 [0200.500] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f70 | out: hHeap=0x1f0000) returned 1 [0200.500] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0200.500] FindClose (in: hFindFile=0x24e680 | out: hFindFile=0x24e680) returned 1 [0200.500] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214ea0 | out: hHeap=0x1f0000) returned 1 [0200.500] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237ae0 | out: hHeap=0x1f0000) returned 1 [0200.500] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0200.500] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228d88 | out: hHeap=0x1f0000) returned 1 [0200.500] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222178 [0200.689] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0200.689] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d6a0 [0200.689] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221d40 [0200.689] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\3076\\*", lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e600 [0200.689] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221d88 [0200.689] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221d40 | out: hHeap=0x1f0000) returned 1 [0200.689] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0200.689] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0200.689] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221ef0 [0200.689] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221d88 | out: hHeap=0x1f0000) returned 1 [0200.689] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0200.689] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0200.689] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x18a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0200.689] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238488 [0200.690] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222298 [0200.690] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x214fd8 [0200.690] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222298 | out: hHeap=0x1f0000) returned 1 [0200.690] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221ef0 | out: hHeap=0x1f0000) returned 1 [0200.690] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238488 | out: hHeap=0x1f0000) returned 1 [0200.721] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\3076\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3076\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0200.722] GetFileType (hFile=0x1ac) returned 0x1 [0200.722] CloseHandle (hObject=0x1ac) returned 1 [0200.722] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2395b8 [0200.723] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\3076\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3076\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb14 | out: lpFileInformation=0x1a1eb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x18a5)) returned 1 [0200.723] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2395b8 | out: hHeap=0x1f0000) returned 1 [0200.723] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2399d8 [0200.723] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\3076\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3076\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb1c | out: lpFileInformation=0x1a1eb1c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x18a5)) returned 1 [0200.723] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2399d8 | out: hHeap=0x1f0000) returned 1 [0200.723] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2399d8 [0200.723] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2399d8 | out: hHeap=0x1f0000) returned 1 [0200.723] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed90, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0200.723] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228310 [0200.723] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221d88 [0200.723] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c98 [0200.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221d88 | out: hHeap=0x1f0000) returned 1 [0200.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214fd8 | out: hHeap=0x1f0000) returned 1 [0200.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228310 | out: hHeap=0x1f0000) returned 1 [0200.724] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\3076\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3076\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0200.724] GetFileType (hFile=0x1ac) returned 0x1 [0200.725] CloseHandle (hObject=0x1ac) returned 1 [0200.725] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214ea0 [0200.725] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\3076\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3076\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb14 | out: lpFileInformation=0x1a1eb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed90)) returned 1 [0200.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214ea0 | out: hHeap=0x1f0000) returned 1 [0200.725] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d68 [0200.725] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\3076\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3076\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb1c | out: lpFileInformation=0x1a1eb1c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed90)) returned 1 [0200.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d68 | out: hHeap=0x1f0000) returned 1 [0200.725] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214fd8 [0200.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214fd8 | out: hHeap=0x1f0000) returned 1 [0200.726] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0200.726] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282d8 [0200.726] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221d88 [0200.726] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x215040 [0200.726] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221d88 | out: hHeap=0x1f0000) returned 1 [0200.726] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c98 | out: hHeap=0x1f0000) returned 1 [0200.726] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282d8 | out: hHeap=0x1f0000) returned 1 [0200.727] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\3076\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\3076\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0200.727] GetFileType (hFile=0x1ac) returned 0x1 [0200.727] CloseHandle (hObject=0x1ac) returned 1 [0200.727] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214ea0 [0200.727] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\3076\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\3076\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb14 | out: lpFileInformation=0x1a1eb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758)) returned 1 [0200.727] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214ea0 | out: hHeap=0x1f0000) returned 1 [0200.728] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214ea0 [0200.728] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\3076\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\3076\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb1c | out: lpFileInformation=0x1a1eb1c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758)) returned 1 [0200.728] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214ea0 | out: hHeap=0x1f0000) returned 1 [0200.728] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214f70 [0200.728] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f70 | out: hHeap=0x1f0000) returned 1 [0200.728] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0200.728] FindClose (in: hFindFile=0x24e600 | out: hFindFile=0x24e600) returned 1 [0200.728] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215040 | out: hHeap=0x1f0000) returned 1 [0200.728] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d6a0 | out: hHeap=0x1f0000) returned 1 [0200.728] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0200.728] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222178 | out: hHeap=0x1f0000) returned 1 [0200.728] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221d88 [0200.729] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0200.729] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e4f8 [0200.729] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221ef0 [0200.729] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\3082\\*", lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e780 [0200.729] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222298 [0200.729] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221ef0 | out: hHeap=0x1f0000) returned 1 [0200.729] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0200.729] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0200.729] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222178 [0200.729] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222298 | out: hHeap=0x1f0000) returned 1 [0200.729] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0200.729] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0200.729] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xbfd, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0200.730] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0200.730] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222298 [0200.730] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x214e38 [0200.730] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222298 | out: hHeap=0x1f0000) returned 1 [0200.730] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222178 | out: hHeap=0x1f0000) returned 1 [0200.730] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0200.730] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\3082\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3082\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0200.731] GetFileType (hFile=0x1ac) returned 0x1 [0200.731] CloseHandle (hObject=0x1ac) returned 1 [0200.732] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2399d8 [0200.732] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\3082\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3082\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb14 | out: lpFileInformation=0x1a1eb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xbfd)) returned 1 [0200.732] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2399d8 | out: hHeap=0x1f0000) returned 1 [0200.732] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2394b0 [0200.732] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\3082\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3082\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb1c | out: lpFileInformation=0x1a1eb1c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xbfd)) returned 1 [0200.734] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2394b0 | out: hHeap=0x1f0000) returned 1 [0200.734] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2399d8 [0200.734] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2399d8 | out: hHeap=0x1f0000) returned 1 [0200.734] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1387c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0200.734] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282d8 [0200.734] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221ef0 [0200.734] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214ea0 [0200.734] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221ef0 | out: hHeap=0x1f0000) returned 1 [0200.734] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214e38 | out: hHeap=0x1f0000) returned 1 [0200.735] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282d8 | out: hHeap=0x1f0000) returned 1 [0200.735] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\3082\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3082\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0200.735] GetFileType (hFile=0x1ac) returned 0x1 [0200.736] CloseHandle (hObject=0x1ac) returned 1 [0200.736] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d68 [0200.736] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\3082\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3082\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb14 | out: lpFileInformation=0x1a1eb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1387c)) returned 1 [0200.736] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d68 | out: hHeap=0x1f0000) returned 1 [0200.736] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c30 [0200.736] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\3082\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3082\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb1c | out: lpFileInformation=0x1a1eb1c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1387c)) returned 1 [0200.737] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c30 | out: hHeap=0x1f0000) returned 1 [0200.737] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214f70 [0200.737] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f70 | out: hHeap=0x1f0000) returned 1 [0200.737] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0200.737] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228310 [0200.737] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222298 [0200.737] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2149c0 [0200.737] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222298 | out: hHeap=0x1f0000) returned 1 [0200.737] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214ea0 | out: hHeap=0x1f0000) returned 1 [0200.737] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228310 | out: hHeap=0x1f0000) returned 1 [0200.737] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\3082\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\3082\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0200.737] GetFileType (hFile=0x1ac) returned 0x1 [0200.738] CloseHandle (hObject=0x1ac) returned 1 [0200.738] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d68 [0200.738] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\3082\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\3082\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb14 | out: lpFileInformation=0x1a1eb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958)) returned 1 [0200.738] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d68 | out: hHeap=0x1f0000) returned 1 [0200.738] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214958 [0200.738] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\3082\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\3082\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb1c | out: lpFileInformation=0x1a1eb1c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958)) returned 1 [0200.738] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214958 | out: hHeap=0x1f0000) returned 1 [0200.738] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x215040 [0200.738] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215040 | out: hHeap=0x1f0000) returned 1 [0200.738] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0200.739] FindClose (in: hFindFile=0x24e780 | out: hFindFile=0x24e780) returned 1 [0200.739] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2149c0 | out: hHeap=0x1f0000) returned 1 [0200.739] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e4f8 | out: hHeap=0x1f0000) returned 1 [0200.739] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0200.739] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221d88 | out: hHeap=0x1f0000) returned 1 [0200.739] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221d88 [0200.739] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0200.739] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e030 [0200.739] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221ef0 [0200.739] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\Client\\*", lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ea40 [0200.739] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2221c0 [0200.739] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221ef0 | out: hHeap=0x1f0000) returned 1 [0200.739] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0200.739] FindNextFileW (in: hFindFile=0x24ea40, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0200.739] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222178 [0200.739] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x214ea0 [0200.739] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222178 | out: hHeap=0x1f0000) returned 1 [0200.739] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2221c0 | out: hHeap=0x1f0000) returned 1 [0200.739] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0200.740] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0200.740] FindNextFileW (in: hFindFile=0x24ea40, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce2bc00, ftCreationTime.dwHighDateTime=0x1cac6d5, ftLastAccessTime.dwLowDateTime=0xce2bc00, ftLastAccessTime.dwHighDateTime=0x1cac6d5, ftLastWriteTime.dwLowDateTime=0xce2bc00, ftLastWriteTime.dwHighDateTime=0x1cac6d5, nFileSizeHigh=0x0, nFileSizeLow=0x31444, dwReserved0=0x0, dwReserved1=0x0, cFileName="Parameterinfo.xml", cAlternateFileName="PARAME~1.XML")) returned 1 [0200.740] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228310 [0200.740] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222178 [0200.740] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214fd8 [0200.740] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222178 | out: hHeap=0x1f0000) returned 1 [0200.740] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214ea0 | out: hHeap=0x1f0000) returned 1 [0200.740] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228310 | out: hHeap=0x1f0000) returned 1 [0200.740] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Client\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\parameterinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0200.740] GetFileType (hFile=0x1ac) returned 0x1 [0200.741] CloseHandle (hObject=0x1ac) returned 1 [0200.741] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d68 [0200.741] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Client\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\parameterinfo.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb14 | out: lpFileInformation=0x1a1eb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce2bc00, ftCreationTime.dwHighDateTime=0x1cac6d5, ftLastAccessTime.dwLowDateTime=0xce2bc00, ftLastAccessTime.dwHighDateTime=0x1cac6d5, ftLastWriteTime.dwLowDateTime=0xce2bc00, ftLastWriteTime.dwHighDateTime=0x1cac6d5, nFileSizeHigh=0x0, nFileSizeLow=0x31444)) returned 1 [0200.741] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d68 | out: hHeap=0x1f0000) returned 1 [0200.741] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x215040 [0200.741] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Client\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\parameterinfo.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb1c | out: lpFileInformation=0x1a1eb1c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce2bc00, ftCreationTime.dwHighDateTime=0x1cac6d5, ftLastAccessTime.dwLowDateTime=0xce2bc00, ftLastAccessTime.dwHighDateTime=0x1cac6d5, ftLastWriteTime.dwLowDateTime=0xce2bc00, ftLastWriteTime.dwHighDateTime=0x1cac6d5, nFileSizeHigh=0x0, nFileSizeLow=0x31444)) returned 1 [0200.741] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215040 | out: hHeap=0x1f0000) returned 1 [0200.741] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d68 [0200.741] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d68 | out: hHeap=0x1f0000) returned 1 [0200.741] FindNextFileW (in: hFindFile=0x24ea40, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x9882, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 1 [0200.741] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380c8 [0200.741] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221ef0 [0200.741] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a28 [0200.741] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221ef0 | out: hHeap=0x1f0000) returned 1 [0200.741] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214fd8 | out: hHeap=0x1f0000) returned 1 [0200.741] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380c8 | out: hHeap=0x1f0000) returned 1 [0200.742] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Client\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\uiinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0200.742] GetFileType (hFile=0x1ac) returned 0x1 [0200.742] CloseHandle (hObject=0x1ac) returned 1 [0200.742] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c98 [0200.742] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Client\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\uiinfo.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb14 | out: lpFileInformation=0x1a1eb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x9882)) returned 1 [0200.742] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c98 | out: hHeap=0x1f0000) returned 1 [0200.742] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214958 [0200.742] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Client\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\uiinfo.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb1c | out: lpFileInformation=0x1a1eb1c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x9882)) returned 1 [0200.742] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214958 | out: hHeap=0x1f0000) returned 1 [0200.742] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214b60 [0200.743] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214b60 | out: hHeap=0x1f0000) returned 1 [0200.743] FindNextFileW (in: hFindFile=0x24ea40, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x9882, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 0 [0200.743] FindClose (in: hFindFile=0x24ea40 | out: hFindFile=0x24ea40) returned 1 [0200.743] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a28 | out: hHeap=0x1f0000) returned 1 [0200.743] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e030 | out: hHeap=0x1f0000) returned 1 [0200.743] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0200.743] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221d88 | out: hHeap=0x1f0000) returned 1 [0200.743] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221d88 [0200.743] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238488 [0200.743] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e828 [0200.743] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239770 [0200.743] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\Extended\\*", lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e900 [0200.743] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2396c0 [0200.743] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239770 | out: hHeap=0x1f0000) returned 1 [0200.744] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0200.744] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0200.744] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2399d8 [0200.744] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2396c0 | out: hHeap=0x1f0000) returned 1 [0200.744] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0200.744] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0200.744] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2a714f00, ftCreationTime.dwHighDateTime=0x1cac6f0, ftLastAccessTime.dwLowDateTime=0x2a714f00, ftLastAccessTime.dwHighDateTime=0x1cac6f0, ftLastWriteTime.dwLowDateTime=0x2a714f00, ftLastWriteTime.dwHighDateTime=0x1cac6f0, nFileSizeHigh=0x0, nFileSizeLow=0x16c82, dwReserved0=0x0, dwReserved1=0x0, cFileName="Parameterinfo.xml", cAlternateFileName="PARAME~1.XML")) returned 1 [0200.744] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282d8 [0200.744] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239668 [0200.744] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217650 [0200.744] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239668 | out: hHeap=0x1f0000) returned 1 [0200.744] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2399d8 | out: hHeap=0x1f0000) returned 1 [0200.744] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282d8 | out: hHeap=0x1f0000) returned 1 [0200.744] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Extended\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\parameterinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0200.745] GetFileType (hFile=0x1ac) returned 0x1 [0200.745] CloseHandle (hObject=0x1ac) returned 1 [0200.745] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22abf8 [0200.745] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Extended\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\parameterinfo.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb14 | out: lpFileInformation=0x1a1eb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2a714f00, ftCreationTime.dwHighDateTime=0x1cac6f0, ftLastAccessTime.dwLowDateTime=0x2a714f00, ftLastAccessTime.dwHighDateTime=0x1cac6f0, ftLastWriteTime.dwLowDateTime=0x2a714f00, ftLastWriteTime.dwHighDateTime=0x1cac6f0, nFileSizeHigh=0x0, nFileSizeLow=0x16c82)) returned 1 [0200.745] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22abf8 | out: hHeap=0x1f0000) returned 1 [0200.745] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ab08 [0200.745] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Extended\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\parameterinfo.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb1c | out: lpFileInformation=0x1a1eb1c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2a714f00, ftCreationTime.dwHighDateTime=0x1cac6f0, ftLastAccessTime.dwLowDateTime=0x2a714f00, ftLastAccessTime.dwHighDateTime=0x1cac6f0, ftLastWriteTime.dwLowDateTime=0x2a714f00, ftLastWriteTime.dwHighDateTime=0x1cac6f0, nFileSizeHigh=0x0, nFileSizeLow=0x16c82)) returned 1 [0200.745] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab08 | out: hHeap=0x1f0000) returned 1 [0200.745] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ace8 [0200.745] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ace8 | out: hHeap=0x1f0000) returned 1 [0200.745] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x988a, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 1 [0200.745] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0200.745] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239770 [0200.746] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x2175d0 [0200.746] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239770 | out: hHeap=0x1f0000) returned 1 [0200.746] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217650 | out: hHeap=0x1f0000) returned 1 [0200.746] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0200.746] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Extended\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\uiinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0200.746] GetFileType (hFile=0x1ac) returned 0x1 [0200.746] CloseHandle (hObject=0x1ac) returned 1 [0200.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d68 [0200.747] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Extended\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\uiinfo.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb14 | out: lpFileInformation=0x1a1eb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x988a)) returned 1 [0200.747] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d68 | out: hHeap=0x1f0000) returned 1 [0200.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214fd8 [0200.747] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Extended\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\uiinfo.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb1c | out: lpFileInformation=0x1a1eb1c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x988a)) returned 1 [0200.747] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214fd8 | out: hHeap=0x1f0000) returned 1 [0200.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2150a8 [0200.747] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2150a8 | out: hHeap=0x1f0000) returned 1 [0200.747] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x988a, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 0 [0200.747] FindClose (in: hFindFile=0x24e900 | out: hFindFile=0x24e900) returned 1 [0200.747] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2175d0 | out: hHeap=0x1f0000) returned 1 [0200.747] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e828 | out: hHeap=0x1f0000) returned 1 [0200.747] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238488 | out: hHeap=0x1f0000) returned 1 [0200.748] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221d88 | out: hHeap=0x1f0000) returned 1 [0200.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222298 [0200.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0200.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f350 [0200.749] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239b38 [0200.749] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\*", lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24eb40 [0200.749] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239508 [0200.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239b38 | out: hHeap=0x1f0000) returned 1 [0200.749] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0200.749] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0200.749] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2399d8 [0200.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239508 | out: hHeap=0x1f0000) returned 1 [0200.749] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0200.749] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0200.749] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Print.ico", cAlternateFileName="")) returned 1 [0200.749] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0200.750] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239458 [0200.750] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x218050 [0200.750] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239458 | out: hHeap=0x1f0000) returned 1 [0200.750] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2399d8 | out: hHeap=0x1f0000) returned 1 [0200.750] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0200.750] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Print.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\print.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0200.750] GetFileType (hFile=0x1ac) returned 0x1 [0200.751] CloseHandle (hObject=0x1ac) returned 1 [0200.751] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a28 [0200.751] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Print.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\print.ico"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb14 | out: lpFileInformation=0x1a1eb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e)) returned 1 [0200.751] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a28 | out: hHeap=0x1f0000) returned 1 [0200.751] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a28 [0200.751] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Print.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\print.ico"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb1c | out: lpFileInformation=0x1a1eb1c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e)) returned 1 [0200.751] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a28 | out: hHeap=0x1f0000) returned 1 [0200.751] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2150a8 [0200.751] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2150a8 | out: hHeap=0x1f0000) returned 1 [0200.751] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate1.ico", cAlternateFileName="")) returned 1 [0200.751] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238258 [0200.751] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2397c8 [0200.752] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x218250 [0200.752] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2397c8 | out: hHeap=0x1f0000) returned 1 [0200.752] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218050 | out: hHeap=0x1f0000) returned 1 [0200.752] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238258 | out: hHeap=0x1f0000) returned 1 [0200.752] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate1.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate1.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0200.752] GetFileType (hFile=0x1ac) returned 0x1 [0200.752] CloseHandle (hObject=0x1ac) returned 1 [0200.753] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214e38 [0200.753] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate1.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate1.ico"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb14 | out: lpFileInformation=0x1a1eb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1 [0200.753] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214e38 | out: hHeap=0x1f0000) returned 1 [0200.753] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c98 [0200.753] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate1.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate1.ico"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb1c | out: lpFileInformation=0x1a1eb1c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1 [0200.753] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c98 | out: hHeap=0x1f0000) returned 1 [0200.753] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214b60 [0200.753] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214b60 | out: hHeap=0x1f0000) returned 1 [0200.753] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate2.ico", cAlternateFileName="")) returned 1 [0200.753] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0200.753] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239ae0 [0200.753] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217c50 [0200.753] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239ae0 | out: hHeap=0x1f0000) returned 1 [0200.753] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218250 | out: hHeap=0x1f0000) returned 1 [0200.754] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0200.754] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate2.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate2.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0200.754] GetFileType (hFile=0x1ac) returned 0x1 [0200.754] CloseHandle (hObject=0x1ac) returned 1 [0200.754] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214bc8 [0200.755] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate2.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate2.ico"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb14 | out: lpFileInformation=0x1a1eb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1 [0200.755] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214bc8 | out: hHeap=0x1f0000) returned 1 [0200.755] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c98 [0200.755] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate2.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate2.ico"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb1c | out: lpFileInformation=0x1a1eb1c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1 [0200.755] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c98 | out: hHeap=0x1f0000) returned 1 [0200.755] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214ea0 [0200.755] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214ea0 | out: hHeap=0x1f0000) returned 1 [0200.755] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate3.ico", cAlternateFileName="")) returned 1 [0200.755] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0200.755] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2399d8 [0200.755] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217550 [0200.755] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2399d8 | out: hHeap=0x1f0000) returned 1 [0200.756] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217c50 | out: hHeap=0x1f0000) returned 1 [0200.756] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0200.756] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate3.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate3.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0200.756] GetFileType (hFile=0x1ac) returned 0x1 [0200.756] CloseHandle (hObject=0x1ac) returned 1 [0200.756] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214958 [0200.756] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate3.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate3.ico"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb14 | out: lpFileInformation=0x1a1eb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1 [0200.757] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214958 | out: hHeap=0x1f0000) returned 1 [0200.757] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214ea0 [0200.757] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate3.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate3.ico"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb1c | out: lpFileInformation=0x1a1eb1c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1 [0200.757] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214ea0 | out: hHeap=0x1f0000) returned 1 [0200.757] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214af8 [0200.757] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214af8 | out: hHeap=0x1f0000) returned 1 [0200.757] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate4.ico", cAlternateFileName="")) returned 1 [0200.757] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0200.757] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2396c0 [0200.757] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217650 [0200.757] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2396c0 | out: hHeap=0x1f0000) returned 1 [0200.757] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217550 | out: hHeap=0x1f0000) returned 1 [0200.757] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0200.758] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate4.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate4.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0200.758] GetFileType (hFile=0x1ac) returned 0x1 [0200.758] CloseHandle (hObject=0x1ac) returned 1 [0200.758] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c30 [0200.758] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate4.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate4.ico"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb14 | out: lpFileInformation=0x1a1eb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1 [0200.758] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c30 | out: hHeap=0x1f0000) returned 1 [0200.758] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c30 [0200.758] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate4.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate4.ico"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb1c | out: lpFileInformation=0x1a1eb1c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1 [0200.758] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c30 | out: hHeap=0x1f0000) returned 1 [0200.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d68 [0200.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d68 | out: hHeap=0x1f0000) returned 1 [0200.759] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate5.ico", cAlternateFileName="")) returned 1 [0200.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238348 [0200.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239a30 [0200.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x218050 [0200.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239a30 | out: hHeap=0x1f0000) returned 1 [0200.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217650 | out: hHeap=0x1f0000) returned 1 [0200.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238348 | out: hHeap=0x1f0000) returned 1 [0200.759] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate5.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate5.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0200.760] GetFileType (hFile=0x1ac) returned 0x1 [0200.760] CloseHandle (hObject=0x1ac) returned 1 [0200.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214bc8 [0200.760] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate5.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate5.ico"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb14 | out: lpFileInformation=0x1a1eb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1 [0200.760] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214bc8 | out: hHeap=0x1f0000) returned 1 [0200.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214b60 [0200.760] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate5.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate5.ico"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb1c | out: lpFileInformation=0x1a1eb1c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1 [0200.761] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214b60 | out: hHeap=0x1f0000) returned 1 [0200.761] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x215040 [0200.761] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215040 | out: hHeap=0x1f0000) returned 1 [0200.761] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate6.ico", cAlternateFileName="")) returned 1 [0200.761] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238258 [0200.761] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239718 [0200.761] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x2177d0 [0200.761] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239718 | out: hHeap=0x1f0000) returned 1 [0200.761] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218050 | out: hHeap=0x1f0000) returned 1 [0200.761] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238258 | out: hHeap=0x1f0000) returned 1 [0200.761] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate6.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate6.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0200.761] GetFileType (hFile=0x1ac) returned 0x1 [0200.762] CloseHandle (hObject=0x1ac) returned 1 [0200.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c98 [0200.762] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate6.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate6.ico"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb14 | out: lpFileInformation=0x1a1eb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1 [0200.762] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c98 | out: hHeap=0x1f0000) returned 1 [0200.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214e38 [0200.762] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate6.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate6.ico"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb1c | out: lpFileInformation=0x1a1eb1c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1 [0200.762] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214e38 | out: hHeap=0x1f0000) returned 1 [0200.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214e38 [0200.762] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214e38 | out: hHeap=0x1f0000) returned 1 [0200.762] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate7.ico", cAlternateFileName="")) returned 1 [0200.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238460 [0200.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239b38 [0200.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217c50 [0200.762] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239b38 | out: hHeap=0x1f0000) returned 1 [0200.762] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2177d0 | out: hHeap=0x1f0000) returned 1 [0200.762] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238460 | out: hHeap=0x1f0000) returned 1 [0200.763] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate7.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate7.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0200.763] GetFileType (hFile=0x1ac) returned 0x1 [0200.763] CloseHandle (hObject=0x1ac) returned 1 [0200.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214958 [0200.763] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate7.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate7.ico"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb14 | out: lpFileInformation=0x1a1eb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1 [0200.763] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214958 | out: hHeap=0x1f0000) returned 1 [0200.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c98 [0200.763] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate7.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate7.ico"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb1c | out: lpFileInformation=0x1a1eb1c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1 [0201.058] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c98 | out: hHeap=0x1f0000) returned 1 [0201.058] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2150a8 [0201.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2150a8 | out: hHeap=0x1f0000) returned 1 [0201.060] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate8.ico", cAlternateFileName="")) returned 1 [0201.060] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0201.060] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239928 [0201.060] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217650 [0201.061] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239928 | out: hHeap=0x1f0000) returned 1 [0201.062] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217c50 | out: hHeap=0x1f0000) returned 1 [0201.062] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0201.069] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate8.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate8.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0201.070] GetFileType (hFile=0x200) returned 0x1 [0201.074] CloseHandle (hObject=0x200) returned 1 [0201.075] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x215040 [0201.075] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate8.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate8.ico"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb14 | out: lpFileInformation=0x1a1eb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1 [0201.075] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215040 | out: hHeap=0x1f0000) returned 1 [0201.075] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214e38 [0201.075] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate8.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate8.ico"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb1c | out: lpFileInformation=0x1a1eb1c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1 [0201.075] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214e38 | out: hHeap=0x1f0000) returned 1 [0201.075] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214b60 [0201.075] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214b60 | out: hHeap=0x1f0000) returned 1 [0201.076] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Save.ico", cAlternateFileName="")) returned 1 [0201.076] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380f0 [0201.076] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239928 [0201.076] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x218150 [0201.076] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239928 | out: hHeap=0x1f0000) returned 1 [0201.076] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217650 | out: hHeap=0x1f0000) returned 1 [0201.076] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380f0 | out: hHeap=0x1f0000) returned 1 [0201.077] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Save.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\save.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0201.077] GetFileType (hFile=0x200) returned 0x1 [0201.078] CloseHandle (hObject=0x200) returned 1 [0201.078] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214f70 [0201.078] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Save.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\save.ico"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb14 | out: lpFileInformation=0x1a1eb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e)) returned 1 [0201.078] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f70 | out: hHeap=0x1f0000) returned 1 [0201.078] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c30 [0201.079] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Save.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\save.ico"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb1c | out: lpFileInformation=0x1a1eb1c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e)) returned 1 [0201.079] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c30 | out: hHeap=0x1f0000) returned 1 [0201.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a90 [0201.079] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a90 | out: hHeap=0x1f0000) returned 1 [0201.079] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x8f66, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.ico", cAlternateFileName="")) returned 1 [0201.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0201.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239ae0 [0201.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x218450 [0201.079] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239ae0 | out: hHeap=0x1f0000) returned 1 [0201.080] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218150 | out: hHeap=0x1f0000) returned 1 [0201.080] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0201.080] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Setup.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\setup.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0201.081] GetFileType (hFile=0x200) returned 0x1 [0201.081] CloseHandle (hObject=0x200) returned 1 [0201.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a90 [0201.081] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Setup.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\setup.ico"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb14 | out: lpFileInformation=0x1a1eb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x8f66)) returned 1 [0201.082] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a90 | out: hHeap=0x1f0000) returned 1 [0201.082] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214ea0 [0201.082] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Setup.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\setup.ico"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb1c | out: lpFileInformation=0x1a1eb1c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x8f66)) returned 1 [0201.082] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214ea0 | out: hHeap=0x1f0000) returned 1 [0201.082] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x215040 [0201.082] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215040 | out: hHeap=0x1f0000) returned 1 [0201.082] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5b5e7f00, ftCreationTime.dwHighDateTime=0x1ca927c, ftLastAccessTime.dwLowDateTime=0x5b5e7f00, ftLastAccessTime.dwHighDateTime=0x1ca927c, ftLastWriteTime.dwLowDateTime=0x5b5e7f00, ftLastWriteTime.dwHighDateTime=0x1ca927c, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0x0, cFileName="stop.ico", cAlternateFileName="")) returned 1 [0201.082] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0201.082] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239ae0 [0201.082] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x218150 [0201.083] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239ae0 | out: hHeap=0x1f0000) returned 1 [0201.083] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218450 | out: hHeap=0x1f0000) returned 1 [0201.083] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0201.083] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\stop.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\stop.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0201.084] GetFileType (hFile=0x200) returned 0x1 [0201.084] CloseHandle (hObject=0x200) returned 1 [0201.085] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214ea0 [0201.085] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\stop.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\stop.ico"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb14 | out: lpFileInformation=0x1a1eb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5b5e7f00, ftCreationTime.dwHighDateTime=0x1ca927c, ftLastAccessTime.dwLowDateTime=0x5b5e7f00, ftLastAccessTime.dwHighDateTime=0x1ca927c, ftLastWriteTime.dwLowDateTime=0x5b5e7f00, ftLastWriteTime.dwHighDateTime=0x1ca927c, nFileSizeHigh=0x0, nFileSizeLow=0x2796)) returned 1 [0201.085] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214ea0 | out: hHeap=0x1f0000) returned 1 [0201.085] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214bc8 [0201.085] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\stop.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\stop.ico"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb1c | out: lpFileInformation=0x1a1eb1c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5b5e7f00, ftCreationTime.dwHighDateTime=0x1ca927c, ftLastAccessTime.dwLowDateTime=0x5b5e7f00, ftLastAccessTime.dwHighDateTime=0x1ca927c, ftLastWriteTime.dwLowDateTime=0x5b5e7f00, ftLastWriteTime.dwHighDateTime=0x1ca927c, nFileSizeHigh=0x0, nFileSizeLow=0x2796)) returned 1 [0201.085] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214bc8 | out: hHeap=0x1f0000) returned 1 [0201.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214b60 [0201.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214b60 | out: hHeap=0x1f0000) returned 1 [0201.086] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SysReqMet.ico", cAlternateFileName="SYSREQ~1.ICO")) returned 1 [0201.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0201.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239718 [0201.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217550 [0201.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239718 | out: hHeap=0x1f0000) returned 1 [0201.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218150 | out: hHeap=0x1f0000) returned 1 [0201.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0201.087] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\SysReqMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqmet.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0201.088] GetFileType (hFile=0x200) returned 0x1 [0201.088] CloseHandle (hObject=0x200) returned 1 [0201.088] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214f70 [0201.089] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\SysReqMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqmet.ico"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb14 | out: lpFileInformation=0x1a1eb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e)) returned 1 [0201.089] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f70 | out: hHeap=0x1f0000) returned 1 [0201.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214f70 [0201.089] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\SysReqMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqmet.ico"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb1c | out: lpFileInformation=0x1a1eb1c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e)) returned 1 [0201.089] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f70 | out: hHeap=0x1f0000) returned 1 [0201.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214dd0 [0201.089] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214dd0 | out: hHeap=0x1f0000) returned 1 [0201.090] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SysReqNotMet.ico", cAlternateFileName="SYSREQ~2.ICO")) returned 1 [0201.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282a0 [0201.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239ae0 [0201.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x218150 [0201.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239ae0 | out: hHeap=0x1f0000) returned 1 [0201.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217550 | out: hHeap=0x1f0000) returned 1 [0201.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0201.091] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqnotmet.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0201.091] GetFileType (hFile=0x200) returned 0x1 [0201.091] CloseHandle (hObject=0x200) returned 1 [0201.092] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ae50 [0201.092] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqnotmet.ico"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb14 | out: lpFileInformation=0x1a1eb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e)) returned 1 [0201.092] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ae50 | out: hHeap=0x1f0000) returned 1 [0201.092] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a8b0 [0201.092] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqnotmet.ico"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb1c | out: lpFileInformation=0x1a1eb1c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e)) returned 1 [0201.092] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a8b0 | out: hHeap=0x1f0000) returned 1 [0201.092] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a8b0 [0201.092] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a8b0 | out: hHeap=0x1f0000) returned 1 [0201.093] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0x0, cFileName="warn.ico", cAlternateFileName="")) returned 1 [0201.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0201.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239a30 [0201.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217750 [0201.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239a30 | out: hHeap=0x1f0000) returned 1 [0201.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218150 | out: hHeap=0x1f0000) returned 1 [0201.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0201.094] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\warn.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\warn.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0201.094] GetFileType (hFile=0x200) returned 0x1 [0201.095] CloseHandle (hObject=0x200) returned 1 [0201.095] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214ea0 [0201.095] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\warn.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\warn.ico"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb14 | out: lpFileInformation=0x1a1eb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x2796)) returned 1 [0201.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214ea0 | out: hHeap=0x1f0000) returned 1 [0201.095] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214f70 [0201.095] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\warn.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\warn.ico"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb1c | out: lpFileInformation=0x1a1eb1c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x2796)) returned 1 [0201.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f70 | out: hHeap=0x1f0000) returned 1 [0201.096] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214ea0 [0201.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214ea0 | out: hHeap=0x1f0000) returned 1 [0201.096] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0x0, cFileName="warn.ico", cAlternateFileName="")) returned 0 [0201.096] FindClose (in: hFindFile=0x24eb40 | out: hFindFile=0x24eb40) returned 1 [0201.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217750 | out: hHeap=0x1f0000) returned 1 [0201.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f350 | out: hHeap=0x1f0000) returned 1 [0201.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0201.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222298 | out: hHeap=0x1f0000) returned 1 [0201.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a688 | out: hHeap=0x1f0000) returned 1 [0201.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228c68 | out: hHeap=0x1f0000) returned 1 [0201.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228710 | out: hHeap=0x1f0000) returned 1 [0201.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228878 | out: hHeap=0x1f0000) returned 1 [0201.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228a28 | out: hHeap=0x1f0000) returned 1 [0201.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228680 | out: hHeap=0x1f0000) returned 1 [0201.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2286c8 | out: hHeap=0x1f0000) returned 1 [0201.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228440 | out: hHeap=0x1f0000) returned 1 [0201.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2287a0 | out: hHeap=0x1f0000) returned 1 [0201.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228b90 | out: hHeap=0x1f0000) returned 1 [0201.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228518 | out: hHeap=0x1f0000) returned 1 [0201.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2284d0 | out: hHeap=0x1f0000) returned 1 [0201.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228ab8 | out: hHeap=0x1f0000) returned 1 [0201.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2288c0 | out: hHeap=0x1f0000) returned 1 [0201.099] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228a70 | out: hHeap=0x1f0000) returned 1 [0201.099] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2287e8 | out: hHeap=0x1f0000) returned 1 [0201.099] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228638 | out: hHeap=0x1f0000) returned 1 [0201.099] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228830 | out: hHeap=0x1f0000) returned 1 [0201.099] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228908 | out: hHeap=0x1f0000) returned 1 [0201.099] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228488 | out: hHeap=0x1f0000) returned 1 [0201.099] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228cf8 | out: hHeap=0x1f0000) returned 1 [0201.099] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228950 | out: hHeap=0x1f0000) returned 1 [0201.099] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228998 | out: hHeap=0x1f0000) returned 1 [0201.100] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228b00 | out: hHeap=0x1f0000) returned 1 [0201.100] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228b48 | out: hHeap=0x1f0000) returned 1 [0201.100] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228bd8 | out: hHeap=0x1f0000) returned 1 [0201.100] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228cb0 | out: hHeap=0x1f0000) returned 1 [0201.100] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233d20 | out: hHeap=0x1f0000) returned 1 [0201.100] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233d68 | out: hHeap=0x1f0000) returned 1 [0201.100] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b018 | out: hHeap=0x1f0000) returned 1 [0201.100] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20d910 | out: hHeap=0x1f0000) returned 1 [0201.101] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b800 | out: hHeap=0x1f0000) returned 1 [0201.101] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2285a8 | out: hHeap=0x1f0000) returned 1 [0201.101] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222298 [0201.101] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0201.101] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e828 [0201.101] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0201.101] FindFirstFileW (in: lpFileName="C:\\\\Boot\\*", lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9d311c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef9d311c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e9c0 [0201.102] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380f0 [0201.102] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0201.102] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0201.102] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9d311c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef9d311c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.102] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0201.102] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380f0 | out: hHeap=0x1f0000) returned 1 [0201.102] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0201.102] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0201.102] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xac3efa99, ftLastAccessTime.dwHighDateTime=0x1d4d5d3, ftLastWriteTime.dwLowDateTime=0xac3efa99, ftLastWriteTime.dwHighDateTime=0x1d4d5d3, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD", cAlternateFileName="")) returned 1 [0201.102] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0201.103] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0201.103] CreateFileW (lpFileName="C:\\\\Boot\\BCD" (normalized: "c:\\boot\\bcd"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0201.104] GetLastError () returned 0x20 [0201.104] GetLastError () returned 0x20 [0201.104] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG", cAlternateFileName="")) returned 1 [0201.104] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0201.104] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282a0 [0201.104] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0201.104] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0201.105] CreateFileW (lpFileName="C:\\\\Boot\\BCD.LOG" (normalized: "c:\\boot\\bcd.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0201.105] GetLastError () returned 0x20 [0201.105] GetLastError () returned 0x20 [0201.105] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG1", cAlternateFileName="BCD~1.LOG")) returned 1 [0201.106] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238438 [0201.106] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0201.106] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228150 [0201.106] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0201.106] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0201.106] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238438 | out: hHeap=0x1f0000) returned 1 [0201.107] CreateFileW (lpFileName="C:\\\\Boot\\BCD.LOG1" (normalized: "c:\\boot\\bcd.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0201.107] GetFileType (hFile=0x200) returned 0x1 [0201.333] CloseHandle (hObject=0x200) returned 1 [0201.359] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228310 [0201.359] GetFileAttributesExW (in: lpFileName="C:\\\\Boot\\BCD.LOG1" (normalized: "c:\\boot\\bcd.log1"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0201.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228310 | out: hHeap=0x1f0000) returned 1 [0201.359] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228310 [0201.360] GetFileAttributesExW (in: lpFileName="C:\\\\Boot\\BCD.LOG1" (normalized: "c:\\boot\\bcd.log1"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0201.360] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228310 | out: hHeap=0x1f0000) returned 1 [0201.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282d8 [0201.360] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282d8 | out: hHeap=0x1f0000) returned 1 [0201.360] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG2", cAlternateFileName="BCD~2.LOG")) returned 1 [0201.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0201.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0201.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228310 [0201.360] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0201.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228150 | out: hHeap=0x1f0000) returned 1 [0201.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0201.361] CreateFileW (lpFileName="C:\\\\Boot\\BCD.LOG2" (normalized: "c:\\boot\\bcd.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0201.361] GetFileType (hFile=0x200) returned 0x1 [0201.362] CloseHandle (hObject=0x200) returned 1 [0201.362] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228150 [0201.362] GetFileAttributesExW (in: lpFileName="C:\\\\Boot\\BCD.LOG2" (normalized: "c:\\boot\\bcd.log2"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0201.363] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228150 | out: hHeap=0x1f0000) returned 1 [0201.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0201.363] GetFileAttributesExW (in: lpFileName="C:\\\\Boot\\BCD.LOG2" (normalized: "c:\\boot\\bcd.log2"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0201.363] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0201.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228150 [0201.363] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228150 | out: hHeap=0x1f0000) returned 1 [0201.363] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg-BG", cAlternateFileName="")) returned 1 [0201.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0201.363] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228310 | out: hHeap=0x1f0000) returned 1 [0201.364] lstrcmpW (lpString1="bg-BG", lpString2=".") returned 1 [0201.364] lstrcmpW (lpString1="bg-BG", lpString2="..") returned 1 [0201.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204c50 [0201.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0201.364] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef4e6d79, ftCreationTime.dwHighDateTime=0x1d3273d, ftLastAccessTime.dwLowDateTime=0xef4e6d79, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x175a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootspaces.dll", cAlternateFileName="BOOTSP~1.DLL")) returned 1 [0201.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380c8 [0201.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0201.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282a0 [0201.364] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0201.365] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0201.365] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380c8 | out: hHeap=0x1f0000) returned 1 [0201.365] CreateFileW (lpFileName="C:\\\\Boot\\bootspaces.dll" (normalized: "c:\\boot\\bootspaces.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0201.366] GetLastError () returned 0x5 [0201.366] GetLastError () returned 0x5 [0201.366] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xef703e94, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTSTAT.DAT", cAlternateFileName="")) returned 1 [0201.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0201.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0201.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228310 [0201.366] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0201.366] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0201.367] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0201.367] CreateFileW (lpFileName="C:\\\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0201.367] GetFileType (hFile=0x200) returned 0x1 [0201.368] CloseHandle (hObject=0x200) returned 1 [0201.368] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282d8 [0201.368] GetFileAttributesExW (in: lpFileName="C:\\\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xef703e94, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1 [0201.369] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282d8 | out: hHeap=0x1f0000) returned 1 [0201.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282d8 [0201.369] GetFileAttributesExW (in: lpFileName="C:\\\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xef703e94, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1 [0201.369] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282d8 | out: hHeap=0x1f0000) returned 1 [0201.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282a0 [0201.369] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0201.369] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef4fcd12, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x185a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootvhd.dll", cAlternateFileName="")) returned 1 [0201.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0201.370] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0201.370] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282a0 [0201.370] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0201.370] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228310 | out: hHeap=0x1f0000) returned 1 [0201.370] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0201.371] CreateFileW (lpFileName="C:\\\\Boot\\bootvhd.dll" (normalized: "c:\\boot\\bootvhd.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0201.371] GetLastError () returned 0x5 [0201.371] GetLastError () returned 0x5 [0201.371] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef511a4c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-CZ", cAlternateFileName="")) returned 1 [0201.371] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0201.371] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0201.371] lstrcmpW (lpString1="cs-CZ", lpString2=".") returned 1 [0201.372] lstrcmpW (lpString1="cs-CZ", lpString2="..") returned 1 [0201.372] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282d8 [0201.372] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0201.372] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c50 | out: hHeap=0x1f0000) returned 1 [0201.372] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0008dbb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5252b3, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-DK", cAlternateFileName="")) returned 1 [0201.372] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0201.372] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0201.372] lstrcmpW (lpString1="da-DK", lpString2=".") returned 1 [0201.372] lstrcmpW (lpString1="da-DK", lpString2="..") returned 1 [0201.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x48) returned 0x225e78 [0201.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0201.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282d8 | out: hHeap=0x1f0000) returned 1 [0201.373] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0009692, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef538bee, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-DE", cAlternateFileName="")) returned 1 [0201.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0201.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0201.373] lstrcmpW (lpString1="de-DE", lpString2=".") returned 1 [0201.373] lstrcmpW (lpString1="de-DE", lpString2="..") returned 1 [0201.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214fd8 [0201.374] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0201.374] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225e78 | out: hHeap=0x1f0000) returned 1 [0201.374] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef555ff8, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el-GR", cAlternateFileName="")) returned 1 [0201.374] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0201.374] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0201.375] lstrcmpW (lpString1="el-GR", lpString2=".") returned 1 [0201.375] lstrcmpW (lpString1="el-GR", lpString2="..") returned 1 [0201.375] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0201.375] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0201.375] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214fd8 | out: hHeap=0x1f0000) returned 1 [0201.376] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc482dc87, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-GB", cAlternateFileName="")) returned 1 [0201.376] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0201.376] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0201.376] lstrcmpW (lpString1="en-GB", lpString2=".") returned 1 [0201.376] lstrcmpW (lpString1="en-GB", lpString2="..") returned 1 [0201.376] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238258 [0201.376] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef57d0f5, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0201.377] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238348 [0201.377] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0201.377] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0201.377] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0201.377] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd8) returned 0x229528 [0201.377] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0201.377] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0201.378] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000b9ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef586d37, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-ES", cAlternateFileName="")) returned 1 [0201.378] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0201.378] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238348 | out: hHeap=0x1f0000) returned 1 [0201.378] lstrcmpW (lpString1="es-ES", lpString2=".") returned 1 [0201.378] lstrcmpW (lpString1="es-ES", lpString2="..") returned 1 [0201.378] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0201.378] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000c12e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc4853f40, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-MX", cAlternateFileName="")) returned 1 [0201.379] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0201.379] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0201.379] lstrcmpW (lpString1="es-MX", lpString2=".") returned 1 [0201.379] lstrcmpW (lpString1="es-MX", lpString2="..") returned 1 [0201.379] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0201.379] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc487a0b9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et-EE", cAlternateFileName="")) returned 1 [0201.379] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0201.379] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0201.380] lstrcmpW (lpString1="et-EE", lpString2=".") returned 1 [0201.380] lstrcmpW (lpString1="et-EE", lpString2="..") returned 1 [0201.380] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x138) returned 0x260188 [0201.380] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238438 [0201.380] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229528 | out: hHeap=0x1f0000) returned 1 [0201.380] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000cf3a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef59a5b1, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-FI", cAlternateFileName="")) returned 1 [0201.380] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0201.380] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0201.381] lstrcmpW (lpString1="fi-FI", lpString2=".") returned 1 [0201.381] lstrcmpW (lpString1="fi-FI", lpString2="..") returned 1 [0201.381] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238348 [0201.381] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0109451, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef999ae4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 1 [0201.381] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380c8 [0201.381] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0201.381] lstrcmpW (lpString1="Fonts", lpString2=".") returned 1 [0201.381] lstrcmpW (lpString1="Fonts", lpString2="..") returned 1 [0201.381] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0201.382] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-CA", cAlternateFileName="")) returned 1 [0201.382] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0201.382] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380c8 | out: hHeap=0x1f0000) returned 1 [0201.382] lstrcmpW (lpString1="fr-CA", lpString2=".") returned 1 [0201.382] lstrcmpW (lpString1="fr-CA", lpString2="..") returned 1 [0201.382] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0201.382] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010bc12, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ade2b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-FR", cAlternateFileName="")) returned 1 [0201.382] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0201.382] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0201.382] lstrcmpW (lpString1="fr-FR", lpString2=".") returned 1 [0201.383] lstrcmpW (lpString1="fr-FR", lpString2="..") returned 1 [0201.383] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c8) returned 0x25fd40 [0201.383] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0201.383] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260188 | out: hHeap=0x1f0000) returned 1 [0201.383] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-HR", cAlternateFileName="")) returned 1 [0201.383] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380c8 [0201.383] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0201.383] lstrcmpW (lpString1="hr-HR", lpString2=".") returned 1 [0201.383] lstrcmpW (lpString1="hr-HR", lpString2="..") returned 1 [0201.384] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0201.384] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010c5ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5c171b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-HU", cAlternateFileName="")) returned 1 [0201.384] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0201.384] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380c8 | out: hHeap=0x1f0000) returned 1 [0201.384] lstrcmpW (lpString1="hu-HU", lpString2=".") returned 1 [0201.384] lstrcmpW (lpString1="hu-HU", lpString2="..") returned 1 [0201.384] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238460 [0201.384] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010ccad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5d8ab4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-IT", cAlternateFileName="")) returned 1 [0201.385] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238488 [0201.385] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0201.385] lstrcmpW (lpString1="it-IT", lpString2=".") returned 1 [0201.385] lstrcmpW (lpString1="it-IT", lpString2="..") returned 1 [0201.385] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0201.385] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010d0c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ed6c6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-JP", cAlternateFileName="")) returned 1 [0201.385] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0201.385] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238488 | out: hHeap=0x1f0000) returned 1 [0201.385] lstrcmpW (lpString1="ja-JP", lpString2=".") returned 1 [0201.386] lstrcmpW (lpString1="ja-JP", lpString2="..") returned 1 [0201.386] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0201.386] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef5fc210, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-KR", cAlternateFileName="")) returned 1 [0201.386] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0201.386] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0201.386] lstrcmpW (lpString1="ko-KR", lpString2=".") returned 1 [0201.386] lstrcmpW (lpString1="ko-KR", lpString2="..") returned 1 [0201.386] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0201.386] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt-LT", cAlternateFileName="")) returned 1 [0201.386] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380c8 [0201.387] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0201.387] lstrcmpW (lpString1="lt-LT", lpString2=".") returned 1 [0201.387] lstrcmpW (lpString1="lt-LT", lpString2="..") returned 1 [0201.387] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2a0) returned 0x20d888 [0201.387] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238488 [0201.387] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25fd40 | out: hHeap=0x1f0000) returned 1 [0201.387] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv-LV", cAlternateFileName="")) returned 1 [0201.387] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0201.387] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380c8 | out: hHeap=0x1f0000) returned 1 [0201.388] lstrcmpW (lpString1="lv-LV", lpString2=".") returned 1 [0201.388] lstrcmpW (lpString1="lv-LV", lpString2="..") returned 1 [0201.388] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0201.388] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6196d8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfbcf473f, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0xc63a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe", cAlternateFileName="")) returned 1 [0201.388] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380c8 [0201.388] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2386e0 [0201.388] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282d8 [0201.388] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2386e0 | out: hHeap=0x1f0000) returned 1 [0201.388] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0201.389] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380c8 | out: hHeap=0x1f0000) returned 1 [0201.389] CreateFileW (lpFileName="C:\\\\Boot\\memtest.exe" (normalized: "c:\\boot\\memtest.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0201.390] GetLastError () returned 0x5 [0201.390] GetLastError () returned 0x5 [0201.390] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e138, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef62cf52, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-NO", cAlternateFileName="")) returned 1 [0201.390] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0201.390] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282d8 | out: hHeap=0x1f0000) returned 1 [0201.390] lstrcmpW (lpString1="nb-NO", lpString2=".") returned 1 [0201.390] lstrcmpW (lpString1="nb-NO", lpString2="..") returned 1 [0201.390] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380c8 [0201.390] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e4fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6407cf, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-NL", cAlternateFileName="")) returned 1 [0201.391] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238690 [0201.391] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0201.391] lstrcmpW (lpString1="nl-NL", lpString2=".") returned 1 [0201.391] lstrcmpW (lpString1="nl-NL", lpString2="..") returned 1 [0201.391] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0201.391] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef65403a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-PL", cAlternateFileName="")) returned 1 [0201.391] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385f0 [0201.391] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238690 | out: hHeap=0x1f0000) returned 1 [0201.392] lstrcmpW (lpString1="pl-PL", lpString2=".") returned 1 [0201.392] lstrcmpW (lpString1="pl-PL", lpString2="..") returned 1 [0201.392] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238500 [0201.392] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6678d6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6678d6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-BR", cAlternateFileName="")) returned 1 [0201.392] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238528 [0201.392] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385f0 | out: hHeap=0x1f0000) returned 1 [0201.392] lstrcmpW (lpString1="pt-BR", lpString2=".") returned 1 [0201.392] lstrcmpW (lpString1="pt-BR", lpString2="..") returned 1 [0201.393] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238640 [0201.393] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f167, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6714dc, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-PT", cAlternateFileName="")) returned 1 [0201.393] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238780 [0201.393] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238528 | out: hHeap=0x1f0000) returned 1 [0201.393] lstrcmpW (lpString1="pt-PT", lpString2=".") returned 1 [0201.393] lstrcmpW (lpString1="pt-PT", lpString2="..") returned 1 [0201.393] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238730 [0201.393] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f640, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef684d85, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="qps-ploc", cAlternateFileName="")) returned 1 [0201.393] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385c8 [0201.393] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384d8 [0201.394] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228310 [0201.394] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384d8 | out: hHeap=0x1f0000) returned 1 [0201.394] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238780 | out: hHeap=0x1f0000) returned 1 [0201.394] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385c8 | out: hHeap=0x1f0000) returned 1 [0201.394] lstrcmpW (lpString1="qps-ploc", lpString2=".") returned 1 [0201.394] lstrcmpW (lpString1="qps-ploc", lpString2="..") returned 1 [0201.394] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282a0 [0201.394] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ab61e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9abff9, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resources", cAlternateFileName="RESOUR~1")) returned 1 [0201.394] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238780 [0201.395] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384d8 [0201.395] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282d8 [0201.395] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384d8 | out: hHeap=0x1f0000) returned 1 [0201.395] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228310 | out: hHeap=0x1f0000) returned 1 [0201.395] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238780 | out: hHeap=0x1f0000) returned 1 [0201.395] lstrcmpW (lpString1="Resources", lpString2=".") returned 1 [0201.395] lstrcmpW (lpString1="Resources", lpString2="..") returned 1 [0201.395] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228310 [0201.395] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-RO", cAlternateFileName="")) returned 1 [0201.395] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238528 [0201.396] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282d8 | out: hHeap=0x1f0000) returned 1 [0201.396] lstrcmpW (lpString1="ro-RO", lpString2=".") returned 1 [0201.396] lstrcmpW (lpString1="ro-RO", lpString2="..") returned 1 [0201.396] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3f0) returned 0x234b90 [0201.396] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238690 [0201.396] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20d888 | out: hHeap=0x1f0000) returned 1 [0201.396] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef698608, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-RU", cAlternateFileName="")) returned 1 [0201.396] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2386b8 [0201.396] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238528 | out: hHeap=0x1f0000) returned 1 [0201.397] lstrcmpW (lpString1="ru-RU", lpString2=".") returned 1 [0201.397] lstrcmpW (lpString1="ru-RU", lpString2="..") returned 1 [0201.397] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238528 [0201.397] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-SK", cAlternateFileName="")) returned 1 [0201.397] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384d8 [0201.397] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2386b8 | out: hHeap=0x1f0000) returned 1 [0201.397] lstrcmpW (lpString1="sk-SK", lpString2=".") returned 1 [0201.397] lstrcmpW (lpString1="sk-SK", lpString2="..") returned 1 [0201.397] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238780 [0201.397] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-SI", cAlternateFileName="")) returned 1 [0201.398] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2386b8 [0201.398] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384d8 | out: hHeap=0x1f0000) returned 1 [0201.398] lstrcmpW (lpString1="sl-SI", lpString2=".") returned 1 [0201.398] lstrcmpW (lpString1="sl-SI", lpString2="..") returned 1 [0201.398] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238550 [0201.398] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0x5168548b, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-Latn-CS", cAlternateFileName="SR-LAT~1")) returned 1 [0201.398] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2386e0 [0201.398] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238578 [0201.398] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282d8 [0201.399] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238578 | out: hHeap=0x1f0000) returned 1 [0201.399] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2386b8 | out: hHeap=0x1f0000) returned 1 [0201.399] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2386e0 | out: hHeap=0x1f0000) returned 1 [0201.399] lstrcmpW (lpString1="sr-Latn-CS", lpString2=".") returned 1 [0201.399] lstrcmpW (lpString1="sr-Latn-CS", lpString2="..") returned 1 [0201.399] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0201.399] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-Latn-RS", cAlternateFileName="SR-LAT~2")) returned 1 [0201.399] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238668 [0201.399] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238618 [0201.400] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228230 [0201.400] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238618 | out: hHeap=0x1f0000) returned 1 [0201.400] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282d8 | out: hHeap=0x1f0000) returned 1 [0201.400] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238668 | out: hHeap=0x1f0000) returned 1 [0201.400] lstrcmpW (lpString1="sr-Latn-RS", lpString2=".") returned 1 [0201.400] lstrcmpW (lpString1="sr-Latn-RS", lpString2="..") returned 1 [0201.400] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282d8 [0201.400] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01adf43, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6a2250, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-SE", cAlternateFileName="")) returned 1 [0201.400] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238668 [0201.401] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228230 | out: hHeap=0x1f0000) returned 1 [0201.401] lstrcmpW (lpString1="sv-SE", lpString2=".") returned 1 [0201.401] lstrcmpW (lpString1="sv-SE", lpString2="..") returned 1 [0201.401] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2386b8 [0201.401] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206504, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6b5aca, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-TR", cAlternateFileName="")) returned 1 [0201.401] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238618 [0201.401] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238668 | out: hHeap=0x1f0000) returned 1 [0201.401] lstrcmpW (lpString1="tr-TR", lpString2=".") returned 1 [0201.401] lstrcmpW (lpString1="tr-TR", lpString2="..") returned 1 [0201.402] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2386e0 [0201.402] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206a30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk-UA", cAlternateFileName="")) returned 1 [0201.402] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385a0 [0201.402] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238618 | out: hHeap=0x1f0000) returned 1 [0201.402] lstrcmpW (lpString1="uk-UA", lpString2=".") returned 1 [0201.402] lstrcmpW (lpString1="uk-UA", lpString2="..") returned 1 [0201.402] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238578 [0201.402] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef6c9427, ftCreationTime.dwHighDateTime=0x1d3273d, ftLastAccessTime.dwLowDateTime=0xef6c9427, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x1236, dwReserved0=0x0, dwReserved1=0x0, cFileName="updaterevokesipolicy.p7b", cAlternateFileName="UPDATE~1.P7B")) returned 1 [0201.402] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221d88 [0201.402] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238618 [0201.403] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2395b8 [0201.403] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238618 | out: hHeap=0x1f0000) returned 1 [0201.403] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385a0 | out: hHeap=0x1f0000) returned 1 [0201.403] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221d88 | out: hHeap=0x1f0000) returned 1 [0201.404] CreateFileW (lpFileName="C:\\\\Boot\\updaterevokesipolicy.p7b" (normalized: "c:\\boot\\updaterevokesipolicy.p7b"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0201.404] GetLastError () returned 0x5 [0201.500] GetLastError () returned 0x5 [0201.676] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207100, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6d7e9a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CN", cAlternateFileName="")) returned 1 [0201.676] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0201.677] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2395b8 | out: hHeap=0x1f0000) returned 1 [0201.677] lstrcmpW (lpString1="zh-CN", lpString2=".") returned 1 [0201.677] lstrcmpW (lpString1="zh-CN", lpString2="..") returned 1 [0201.677] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0201.677] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207675, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x518ea25e, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-HK", cAlternateFileName="")) returned 1 [0201.677] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385a0 [0201.677] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0201.677] lstrcmpW (lpString1="zh-HK", lpString2=".") returned 1 [0201.677] lstrcmpW (lpString1="zh-HK", lpString2="..") returned 1 [0201.677] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0201.677] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 1 [0201.678] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385c8 [0201.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385a0 | out: hHeap=0x1f0000) returned 1 [0201.678] lstrcmpW (lpString1="zh-TW", lpString2=".") returned 1 [0201.678] lstrcmpW (lpString1="zh-TW", lpString2="..") returned 1 [0201.678] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238668 [0201.678] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 0 [0201.678] FindClose (in: hFindFile=0x24e9c0 | out: hFindFile=0x24e9c0) returned 1 [0201.678] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222178 [0201.678] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238708 [0201.678] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d508 [0201.678] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227fc8 [0201.678] FindFirstFileW (in: lpFileName="C:\\\\Boot\\bg-BG\\*", lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e6c0 [0201.679] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385a0 [0201.679] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0201.679] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385a0 | out: hHeap=0x1f0000) returned 1 [0201.679] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227fc8 | out: hHeap=0x1f0000) returned 1 [0201.679] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0201.679] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.679] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385a0 [0201.679] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228150 [0201.679] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385a0 | out: hHeap=0x1f0000) returned 1 [0201.679] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0201.680] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0201.680] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0201.680] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210bba74, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0201.680] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385f0 [0201.680] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384d8 [0201.680] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2221c0 [0201.680] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384d8 | out: hHeap=0x1f0000) returned 1 [0201.680] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228150 | out: hHeap=0x1f0000) returned 1 [0201.680] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385f0 | out: hHeap=0x1f0000) returned 1 [0201.680] CreateFileW (lpFileName="C:\\\\Boot\\bg-BG\\bootmgr.exe.mui" (normalized: "c:\\boot\\bg-bg\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0201.681] GetLastError () returned 0x5 [0201.681] GetLastError () returned 0x5 [0201.681] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210bba74, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0201.681] FindClose (in: hFindFile=0x24e6c0 | out: hFindFile=0x24e6c0) returned 1 [0201.681] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2221c0 | out: hHeap=0x1f0000) returned 1 [0201.681] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d508 | out: hHeap=0x1f0000) returned 1 [0201.681] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238708 | out: hHeap=0x1f0000) returned 1 [0201.681] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222178 | out: hHeap=0x1f0000) returned 1 [0201.681] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222178 [0201.681] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238708 [0201.681] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22ee88 [0201.681] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228150 [0201.681] FindFirstFileW (in: lpFileName="C:\\\\Boot\\cs-CZ\\*", lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef511a4c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e880 [0201.682] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238758 [0201.682] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0201.682] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238758 | out: hHeap=0x1f0000) returned 1 [0201.682] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228150 | out: hHeap=0x1f0000) returned 1 [0201.682] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0201.682] FindNextFileW (in: hFindFile=0x24e880, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef511a4c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.682] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238758 [0201.682] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227fc8 [0201.682] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238758 | out: hHeap=0x1f0000) returned 1 [0201.682] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0201.682] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0201.682] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0201.683] FindNextFileW (in: hFindFile=0x24e880, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47e189c, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2109581d, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0201.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385f0 [0201.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385a0 [0201.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2221c0 [0201.683] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385a0 | out: hHeap=0x1f0000) returned 1 [0201.683] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227fc8 | out: hHeap=0x1f0000) returned 1 [0201.683] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385f0 | out: hHeap=0x1f0000) returned 1 [0201.683] CreateFileW (lpFileName="C:\\\\Boot\\cs-CZ\\bootmgr.exe.mui" (normalized: "c:\\boot\\cs-cz\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0201.684] GetLastError () returned 0x5 [0201.684] GetLastError () returned 0x5 [0201.684] FindNextFileW (in: hFindFile=0x24e880, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f1d4cf, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0201.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385a0 [0201.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238758 [0201.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2225f8 [0201.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238758 | out: hHeap=0x1f0000) returned 1 [0201.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2221c0 | out: hHeap=0x1f0000) returned 1 [0201.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385a0 | out: hHeap=0x1f0000) returned 1 [0201.684] CreateFileW (lpFileName="C:\\\\Boot\\cs-CZ\\memtest.exe.mui" (normalized: "c:\\boot\\cs-cz\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0201.685] GetLastError () returned 0x5 [0201.685] GetLastError () returned 0x5 [0201.685] FindNextFileW (in: hFindFile=0x24e880, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f1d4cf, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0201.685] FindClose (in: hFindFile=0x24e880 | out: hFindFile=0x24e880) returned 1 [0201.685] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2225f8 | out: hHeap=0x1f0000) returned 1 [0201.685] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ee88 | out: hHeap=0x1f0000) returned 1 [0201.685] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238708 | out: hHeap=0x1f0000) returned 1 [0201.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222178 | out: hHeap=0x1f0000) returned 1 [0201.686] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222178 [0201.686] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238758 [0201.686] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e360 [0201.686] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0201.687] FindFirstFileW (in: lpFileName="C:\\\\Boot\\da-DK\\*", lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0008dbb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5252b3, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e980 [0201.687] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238618 [0201.687] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227fc8 [0201.687] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238618 | out: hHeap=0x1f0000) returned 1 [0201.687] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0201.687] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0201.687] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0008dbb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5252b3, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.687] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385a0 [0201.687] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228150 [0201.687] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385a0 | out: hHeap=0x1f0000) returned 1 [0201.687] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227fc8 | out: hHeap=0x1f0000) returned 1 [0201.688] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0201.688] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0201.688] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47e189c, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12760, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0201.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385a0 [0201.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384d8 [0201.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2221c0 [0201.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384d8 | out: hHeap=0x1f0000) returned 1 [0201.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228150 | out: hHeap=0x1f0000) returned 1 [0201.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385a0 | out: hHeap=0x1f0000) returned 1 [0201.689] CreateFileW (lpFileName="C:\\\\Boot\\da-DK\\bootmgr.exe.mui" (normalized: "c:\\boot\\da-dk\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0201.689] GetLastError () returned 0x5 [0201.689] GetLastError () returned 0x5 [0201.689] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5252b3, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2ef7268, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0201.689] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238708 [0201.689] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238618 [0201.689] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222b08 [0201.689] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238618 | out: hHeap=0x1f0000) returned 1 [0201.690] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2221c0 | out: hHeap=0x1f0000) returned 1 [0201.690] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238708 | out: hHeap=0x1f0000) returned 1 [0201.690] CreateFileW (lpFileName="C:\\\\Boot\\da-DK\\memtest.exe.mui" (normalized: "c:\\boot\\da-dk\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0201.690] GetLastError () returned 0x5 [0201.690] GetLastError () returned 0x5 [0201.690] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5252b3, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2ef7268, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0201.690] FindClose (in: hFindFile=0x24e980 | out: hFindFile=0x24e980) returned 1 [0201.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222b08 | out: hHeap=0x1f0000) returned 1 [0201.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e360 | out: hHeap=0x1f0000) returned 1 [0201.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238758 | out: hHeap=0x1f0000) returned 1 [0201.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222178 | out: hHeap=0x1f0000) returned 1 [0201.691] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222178 [0201.691] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238708 [0201.691] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f020 [0201.691] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228150 [0201.691] FindFirstFileW (in: lpFileName="C:\\\\Boot\\de-DE\\*", lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0009692, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef538bee, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e840 [0201.691] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385f0 [0201.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0201.692] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385f0 | out: hHeap=0x1f0000) returned 1 [0201.692] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228150 | out: hHeap=0x1f0000) returned 1 [0201.692] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0201.692] FindNextFileW (in: hFindFile=0x24e840, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0009692, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef538bee, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238758 [0201.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227fc8 [0201.692] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238758 | out: hHeap=0x1f0000) returned 1 [0201.692] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0201.692] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0201.692] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0201.692] FindNextFileW (in: hFindFile=0x24e840, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48079da, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13560, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0201.693] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385f0 [0201.693] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385a0 [0201.693] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2221c0 [0201.693] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385a0 | out: hHeap=0x1f0000) returned 1 [0201.693] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227fc8 | out: hHeap=0x1f0000) returned 1 [0201.693] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385f0 | out: hHeap=0x1f0000) returned 1 [0201.693] CreateFileW (lpFileName="C:\\\\Boot\\de-DE\\bootmgr.exe.mui" (normalized: "c:\\boot\\de-de\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0201.694] GetLastError () returned 0x5 [0201.694] GetLastError () returned 0x5 [0201.694] FindNextFileW (in: hFindFile=0x24e840, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef538bee, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2ef7268, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0201.694] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238758 [0201.694] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384d8 [0201.694] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222b08 [0201.694] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384d8 | out: hHeap=0x1f0000) returned 1 [0201.694] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2221c0 | out: hHeap=0x1f0000) returned 1 [0201.694] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238758 | out: hHeap=0x1f0000) returned 1 [0201.694] CreateFileW (lpFileName="C:\\\\Boot\\de-DE\\memtest.exe.mui" (normalized: "c:\\boot\\de-de\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0201.694] GetLastError () returned 0x5 [0201.694] GetLastError () returned 0x5 [0201.695] FindNextFileW (in: hFindFile=0x24e840, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef538bee, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2ef7268, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0201.695] FindClose (in: hFindFile=0x24e840 | out: hFindFile=0x24e840) returned 1 [0201.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222b08 | out: hHeap=0x1f0000) returned 1 [0201.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f020 | out: hHeap=0x1f0000) returned 1 [0201.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238708 | out: hHeap=0x1f0000) returned 1 [0201.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222178 | out: hHeap=0x1f0000) returned 1 [0201.695] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222178 [0201.695] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238708 [0201.695] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e9c0 [0201.695] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0201.695] FindFirstFileW (in: lpFileName="C:\\\\Boot\\el-GR\\*", lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef555ff8, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e880 [0201.695] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385a0 [0201.695] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228150 [0201.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385a0 | out: hHeap=0x1f0000) returned 1 [0201.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0201.695] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0201.696] FindNextFileW (in: hFindFile=0x24e880, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef555ff8, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.696] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384d8 [0201.696] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0201.696] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384d8 | out: hHeap=0x1f0000) returned 1 [0201.696] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228150 | out: hHeap=0x1f0000) returned 1 [0201.696] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0201.696] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0201.696] FindNextFileW (in: hFindFile=0x24e880, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13960, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0201.696] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238758 [0201.696] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384d8 [0201.696] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2221c0 [0201.696] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384d8 | out: hHeap=0x1f0000) returned 1 [0201.696] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0201.696] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238758 | out: hHeap=0x1f0000) returned 1 [0201.696] CreateFileW (lpFileName="C:\\\\Boot\\el-GR\\bootmgr.exe.mui" (normalized: "c:\\boot\\el-gr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0201.697] GetLastError () returned 0x5 [0201.697] GetLastError () returned 0x5 [0201.697] FindNextFileW (in: hFindFile=0x24e880, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb5a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0201.697] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238758 [0201.697] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385a0 [0201.697] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2225f8 [0201.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385a0 | out: hHeap=0x1f0000) returned 1 [0201.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2221c0 | out: hHeap=0x1f0000) returned 1 [0201.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238758 | out: hHeap=0x1f0000) returned 1 [0201.698] CreateFileW (lpFileName="C:\\\\Boot\\el-GR\\memtest.exe.mui" (normalized: "c:\\boot\\el-gr\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0201.698] GetLastError () returned 0x5 [0201.698] GetLastError () returned 0x5 [0201.698] FindNextFileW (in: hFindFile=0x24e880, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb5a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0201.698] FindClose (in: hFindFile=0x24e880 | out: hFindFile=0x24e880) returned 1 [0201.698] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2225f8 | out: hHeap=0x1f0000) returned 1 [0201.698] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e9c0 | out: hHeap=0x1f0000) returned 1 [0201.698] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238708 | out: hHeap=0x1f0000) returned 1 [0201.698] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222178 | out: hHeap=0x1f0000) returned 1 [0201.698] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222178 [0201.699] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238758 [0201.699] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e9c0 [0201.699] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0201.699] FindFirstFileW (in: lpFileName="C:\\\\Boot\\en-GB\\*", lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc482dc87, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e640 [0201.699] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384d8 [0201.699] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228150 [0201.699] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384d8 | out: hHeap=0x1f0000) returned 1 [0201.699] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0201.699] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0201.699] FindNextFileW (in: hFindFile=0x24e640, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc482dc87, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.699] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384d8 [0201.699] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228230 [0201.699] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384d8 | out: hHeap=0x1f0000) returned 1 [0201.700] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228150 | out: hHeap=0x1f0000) returned 1 [0201.700] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0201.700] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0201.700] FindNextFileW (in: hFindFile=0x24e640, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12158, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0201.700] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384d8 [0201.700] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385a0 [0201.700] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2221c0 [0201.700] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385a0 | out: hHeap=0x1f0000) returned 1 [0201.700] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228230 | out: hHeap=0x1f0000) returned 1 [0201.700] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384d8 | out: hHeap=0x1f0000) returned 1 [0201.701] CreateFileW (lpFileName="C:\\\\Boot\\en-GB\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-gb\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0201.701] GetLastError () returned 0x5 [0201.701] GetLastError () returned 0x5 [0201.701] FindNextFileW (in: hFindFile=0x24e640, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12158, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0201.701] FindClose (in: hFindFile=0x24e640 | out: hFindFile=0x24e640) returned 1 [0201.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2221c0 | out: hHeap=0x1f0000) returned 1 [0201.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e9c0 | out: hHeap=0x1f0000) returned 1 [0201.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238758 | out: hHeap=0x1f0000) returned 1 [0201.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222178 | out: hHeap=0x1f0000) returned 1 [0201.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222178 [0201.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384d8 [0201.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e9c0 [0201.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0201.702] FindFirstFileW (in: lpFileName="C:\\\\Boot\\en-US\\*", lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef57d0f5, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e980 [0201.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238618 [0201.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228150 [0201.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238618 | out: hHeap=0x1f0000) returned 1 [0201.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0201.702] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0201.702] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef57d0f5, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238708 [0201.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0201.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238708 | out: hHeap=0x1f0000) returned 1 [0201.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228150 | out: hHeap=0x1f0000) returned 1 [0201.703] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0201.703] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0201.703] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef569843, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0x327294d0, ftLastWriteTime.dwHighDateTime=0x1d2a030, nFileSizeHigh=0x0, nFileSizeLow=0x121a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0201.703] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385a0 [0201.703] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385f0 [0201.703] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2221c0 [0201.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385f0 | out: hHeap=0x1f0000) returned 1 [0201.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0201.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385a0 | out: hHeap=0x1f0000) returned 1 [0201.703] CreateFileW (lpFileName="C:\\\\Boot\\en-US\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-us\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0201.704] GetLastError () returned 0x5 [0201.704] GetLastError () returned 0x5 [0201.704] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xafa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0201.704] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238708 [0201.704] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385a0 [0201.704] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2229e8 [0201.704] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385a0 | out: hHeap=0x1f0000) returned 1 [0201.704] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2221c0 | out: hHeap=0x1f0000) returned 1 [0201.704] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238708 | out: hHeap=0x1f0000) returned 1 [0201.705] CreateFileW (lpFileName="C:\\\\Boot\\en-US\\memtest.exe.mui" (normalized: "c:\\boot\\en-us\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0201.705] GetLastError () returned 0x5 [0201.705] GetLastError () returned 0x5 [0201.705] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xafa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0201.705] FindClose (in: hFindFile=0x24e980 | out: hFindFile=0x24e980) returned 1 [0201.705] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2229e8 | out: hHeap=0x1f0000) returned 1 [0201.705] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e9c0 | out: hHeap=0x1f0000) returned 1 [0201.706] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384d8 | out: hHeap=0x1f0000) returned 1 [0201.706] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222178 | out: hHeap=0x1f0000) returned 1 [0201.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222178 [0201.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384d8 [0201.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e1c8 [0201.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0201.706] FindFirstFileW (in: lpFileName="C:\\\\Boot\\es-ES\\*", lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000b9ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef586d37, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ec40 [0201.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385a0 [0201.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227fc8 [0201.706] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385a0 | out: hHeap=0x1f0000) returned 1 [0201.706] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0201.706] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0201.707] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000b9ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef586d37, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.707] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385a0 [0201.707] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0201.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385a0 | out: hHeap=0x1f0000) returned 1 [0201.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227fc8 | out: hHeap=0x1f0000) returned 1 [0201.707] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0201.707] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0201.707] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4853f40, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0201.707] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238708 [0201.707] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238758 [0201.707] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2221c0 [0201.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238758 | out: hHeap=0x1f0000) returned 1 [0201.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0201.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238708 | out: hHeap=0x1f0000) returned 1 [0201.708] CreateFileW (lpFileName="C:\\\\Boot\\es-ES\\bootmgr.exe.mui" (normalized: "c:\\boot\\es-es\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0201.708] GetLastError () returned 0x5 [0201.708] GetLastError () returned 0x5 [0201.708] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef586d37, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0201.708] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238758 [0201.708] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238618 [0201.708] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2229e8 [0201.708] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238618 | out: hHeap=0x1f0000) returned 1 [0201.708] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2221c0 | out: hHeap=0x1f0000) returned 1 [0201.709] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238758 | out: hHeap=0x1f0000) returned 1 [0201.709] CreateFileW (lpFileName="C:\\\\Boot\\es-ES\\memtest.exe.mui" (normalized: "c:\\boot\\es-es\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0201.709] GetLastError () returned 0x5 [0201.709] GetLastError () returned 0x5 [0201.709] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef586d37, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0201.709] FindClose (in: hFindFile=0x24ec40 | out: hFindFile=0x24ec40) returned 1 [0201.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2229e8 | out: hHeap=0x1f0000) returned 1 [0201.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e1c8 | out: hHeap=0x1f0000) returned 1 [0201.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384d8 | out: hHeap=0x1f0000) returned 1 [0201.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222178 | out: hHeap=0x1f0000) returned 1 [0201.710] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222178 [0201.710] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384d8 [0201.710] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e1c8 [0201.710] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227fc8 [0201.710] FindFirstFileW (in: lpFileName="C:\\\\Boot\\es-MX\\*", lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000c12e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc4853f40, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ea00 [0201.710] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238618 [0201.710] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0201.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238618 | out: hHeap=0x1f0000) returned 1 [0201.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227fc8 | out: hHeap=0x1f0000) returned 1 [0201.710] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0201.710] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000c12e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc4853f40, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.710] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385a0 [0201.711] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227fc8 [0201.711] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385a0 | out: hHeap=0x1f0000) returned 1 [0201.711] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0201.711] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0201.711] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0201.711] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4853f40, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0201.711] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238758 [0201.711] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385f0 [0201.711] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2221c0 [0201.711] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385f0 | out: hHeap=0x1f0000) returned 1 [0201.711] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227fc8 | out: hHeap=0x1f0000) returned 1 [0201.711] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238758 | out: hHeap=0x1f0000) returned 1 [0201.711] CreateFileW (lpFileName="C:\\\\Boot\\es-MX\\bootmgr.exe.mui" (normalized: "c:\\boot\\es-mx\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0201.711] GetLastError () returned 0x5 [0201.711] GetLastError () returned 0x5 [0201.712] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4853f40, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0201.712] FindClose (in: hFindFile=0x24ea00 | out: hFindFile=0x24ea00) returned 1 [0201.712] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2221c0 | out: hHeap=0x1f0000) returned 1 [0201.712] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e1c8 | out: hHeap=0x1f0000) returned 1 [0201.712] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384d8 | out: hHeap=0x1f0000) returned 1 [0201.712] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222178 | out: hHeap=0x1f0000) returned 1 [0201.712] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222178 [0201.712] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385a0 [0201.712] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22db68 [0201.712] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0201.712] FindFirstFileW (in: lpFileName="C:\\\\Boot\\et-EE\\*", lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc487a0b9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e800 [0201.712] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238758 [0201.712] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227fc8 [0201.712] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238758 | out: hHeap=0x1f0000) returned 1 [0201.712] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0201.713] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0201.713] FindNextFileW (in: hFindFile=0x24e800, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc487a0b9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.713] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238708 [0201.713] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228150 [0201.713] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238708 | out: hHeap=0x1f0000) returned 1 [0201.713] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227fc8 | out: hHeap=0x1f0000) returned 1 [0201.713] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0201.713] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0201.713] FindNextFileW (in: hFindFile=0x24e800, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12560, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0201.713] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238758 [0201.713] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238708 [0201.713] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2221c0 [0201.713] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238708 | out: hHeap=0x1f0000) returned 1 [0201.713] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228150 | out: hHeap=0x1f0000) returned 1 [0201.713] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238758 | out: hHeap=0x1f0000) returned 1 [0201.714] CreateFileW (lpFileName="C:\\\\Boot\\et-EE\\bootmgr.exe.mui" (normalized: "c:\\boot\\et-ee\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0201.714] GetLastError () returned 0x5 [0201.714] GetLastError () returned 0x5 [0201.714] FindNextFileW (in: hFindFile=0x24e800, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12560, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0201.714] FindClose (in: hFindFile=0x24e800 | out: hFindFile=0x24e800) returned 1 [0201.714] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2221c0 | out: hHeap=0x1f0000) returned 1 [0201.714] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22db68 | out: hHeap=0x1f0000) returned 1 [0201.715] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385a0 | out: hHeap=0x1f0000) returned 1 [0201.715] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222178 | out: hHeap=0x1f0000) returned 1 [0201.715] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222178 [0201.715] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238758 [0201.715] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e4f8 [0201.715] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227fc8 [0201.715] FindFirstFileW (in: lpFileName="C:\\\\Boot\\fi-FI\\*", lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000cf3a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef59a5b1, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ecc0 [0201.715] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238708 [0201.715] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228150 [0201.715] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238708 | out: hHeap=0x1f0000) returned 1 [0201.715] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227fc8 | out: hHeap=0x1f0000) returned 1 [0201.715] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0201.715] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000cf3a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef59a5b1, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.715] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385a0 [0201.715] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0201.716] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385a0 | out: hHeap=0x1f0000) returned 1 [0201.716] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228150 | out: hHeap=0x1f0000) returned 1 [0201.716] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0201.716] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0201.716] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2096e751, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0201.716] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238708 [0201.716] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238618 [0201.716] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2221c0 [0201.716] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238618 | out: hHeap=0x1f0000) returned 1 [0201.716] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0201.716] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238708 | out: hHeap=0x1f0000) returned 1 [0201.716] CreateFileW (lpFileName="C:\\\\Boot\\fi-FI\\bootmgr.exe.mui" (normalized: "c:\\boot\\fi-fi\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.068] GetLastError () returned 0x5 [0202.068] GetLastError () returned 0x5 [0202.069] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef59a5b1, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0202.069] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385a0 [0202.069] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385f0 [0202.069] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222b08 [0202.069] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385f0 | out: hHeap=0x1f0000) returned 1 [0202.069] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2221c0 | out: hHeap=0x1f0000) returned 1 [0202.069] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385a0 | out: hHeap=0x1f0000) returned 1 [0202.070] CreateFileW (lpFileName="C:\\\\Boot\\fi-FI\\memtest.exe.mui" (normalized: "c:\\boot\\fi-fi\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.070] GetLastError () returned 0x5 [0202.071] GetLastError () returned 0x5 [0202.071] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef59a5b1, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0202.071] FindClose (in: hFindFile=0x24ecc0 | out: hFindFile=0x24ecc0) returned 1 [0202.071] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222b08 | out: hHeap=0x1f0000) returned 1 [0202.071] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e4f8 | out: hHeap=0x1f0000) returned 1 [0202.071] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238758 | out: hHeap=0x1f0000) returned 1 [0202.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222178 | out: hHeap=0x1f0000) returned 1 [0202.072] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222178 [0202.072] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385f0 [0202.072] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e1c8 [0202.072] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227fc8 [0202.072] FindFirstFileW (in: lpFileName="C:\\\\Boot\\Fonts\\*", lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0109451, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef999ae4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e740 [0202.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238708 [0202.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228150 [0202.074] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238708 | out: hHeap=0x1f0000) returned 1 [0202.074] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227fc8 | out: hHeap=0x1f0000) returned 1 [0202.074] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0202.074] FindNextFileW (in: hFindFile=0x24e740, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0109451, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef999ae4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.074] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385a0 [0202.074] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228230 [0202.074] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385a0 | out: hHeap=0x1f0000) returned 1 [0202.074] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228150 | out: hHeap=0x1f0000) returned 1 [0202.074] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0202.074] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0202.074] FindNextFileW (in: hFindFile=0x24e740, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef782dd9, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x386467, dwReserved0=0x0, dwReserved1=0x0, cFileName="chs_boot.ttf", cAlternateFileName="")) returned 1 [0202.075] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238708 [0202.075] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384d8 [0202.075] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2221c0 [0202.075] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384d8 | out: hHeap=0x1f0000) returned 1 [0202.075] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228230 | out: hHeap=0x1f0000) returned 1 [0202.075] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238708 | out: hHeap=0x1f0000) returned 1 [0202.076] CreateFileW (lpFileName="C:\\\\Boot\\Fonts\\chs_boot.ttf" (normalized: "c:\\boot\\fonts\\chs_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.076] GetLastError () returned 0x5 [0202.076] GetLastError () returned 0x5 [0202.076] FindNextFileW (in: hFindFile=0x24e740, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4a1dbea, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef81cc08, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x3b2e0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="cht_boot.ttf", cAlternateFileName="")) returned 1 [0202.077] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238708 [0202.077] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238618 [0202.077] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2229e8 [0202.077] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238618 | out: hHeap=0x1f0000) returned 1 [0202.077] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2221c0 | out: hHeap=0x1f0000) returned 1 [0202.077] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238708 | out: hHeap=0x1f0000) returned 1 [0202.078] CreateFileW (lpFileName="C:\\\\Boot\\Fonts\\cht_boot.ttf" (normalized: "c:\\boot\\fonts\\cht_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.078] GetLastError () returned 0x5 [0202.078] GetLastError () returned 0x5 [0202.078] FindNextFileW (in: hFindFile=0x24e740, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4a902c2, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8771a7, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x1e4d4b, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpn_boot.ttf", cAlternateFileName="")) returned 1 [0202.078] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385a0 [0202.078] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238708 [0202.078] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2221c0 [0202.078] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238708 | out: hHeap=0x1f0000) returned 1 [0202.078] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2229e8 | out: hHeap=0x1f0000) returned 1 [0202.079] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385a0 | out: hHeap=0x1f0000) returned 1 [0202.079] CreateFileW (lpFileName="C:\\\\Boot\\Fonts\\jpn_boot.ttf" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.079] GetLastError () returned 0x5 [0202.080] GetLastError () returned 0x5 [0202.080] FindNextFileW (in: hFindFile=0x24e740, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b4eed5, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8c4060, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x243588, dwReserved0=0x0, dwReserved1=0x0, cFileName="kor_boot.ttf", cAlternateFileName="")) returned 1 [0202.080] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238618 [0202.080] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384d8 [0202.080] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222b08 [0202.080] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384d8 | out: hHeap=0x1f0000) returned 1 [0202.080] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2221c0 | out: hHeap=0x1f0000) returned 1 [0202.080] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238618 | out: hHeap=0x1f0000) returned 1 [0202.081] CreateFileW (lpFileName="C:\\\\Boot\\Fonts\\kor_boot.ttf" (normalized: "c:\\boot\\fonts\\kor_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.081] GetLastError () returned 0x5 [0202.081] GetLastError () returned 0x5 [0202.081] FindNextFileW (in: hFindFile=0x24e740, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b9b37e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8e28b4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2ab6f, dwReserved0=0x0, dwReserved1=0x0, cFileName="malgunn_boot.ttf", cAlternateFileName="MALGUN~1.TTF")) returned 1 [0202.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228230 [0202.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384d8 [0202.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2221c0 [0202.082] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384d8 | out: hHeap=0x1f0000) returned 1 [0202.082] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222b08 | out: hHeap=0x1f0000) returned 1 [0202.082] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228230 | out: hHeap=0x1f0000) returned 1 [0202.082] CreateFileW (lpFileName="C:\\\\Boot\\Fonts\\malgunn_boot.ttf" (normalized: "c:\\boot\\fonts\\malgunn_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.083] GetLastError () returned 0x5 [0202.083] GetLastError () returned 0x5 [0202.083] FindNextFileW (in: hFindFile=0x24e740, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b9b37e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8f4db4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2b506, dwReserved0=0x0, dwReserved1=0x0, cFileName="malgun_boot.ttf", cAlternateFileName="MALGUN~2.TTF")) returned 1 [0202.083] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385a0 [0202.083] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238708 [0202.083] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222b08 [0202.083] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238708 | out: hHeap=0x1f0000) returned 1 [0202.083] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2221c0 | out: hHeap=0x1f0000) returned 1 [0202.083] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385a0 | out: hHeap=0x1f0000) returned 1 [0202.084] CreateFileW (lpFileName="C:\\\\Boot\\Fonts\\malgun_boot.ttf" (normalized: "c:\\boot\\fonts\\malgun_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.084] GetLastError () returned 0x5 [0202.084] GetLastError () returned 0x5 [0202.084] FindNextFileW (in: hFindFile=0x24e740, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b9b37e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9072c7, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2318a, dwReserved0=0x0, dwReserved1=0x0, cFileName="meiryon_boot.ttf", cAlternateFileName="MEIRYO~1.TTF")) returned 1 [0202.084] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227fc8 [0202.084] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238708 [0202.085] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2221c0 [0202.085] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238708 | out: hHeap=0x1f0000) returned 1 [0202.085] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222b08 | out: hHeap=0x1f0000) returned 1 [0202.085] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227fc8 | out: hHeap=0x1f0000) returned 1 [0202.085] CreateFileW (lpFileName="C:\\\\Boot\\Fonts\\meiryon_boot.ttf" (normalized: "c:\\boot\\fonts\\meiryon_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.086] GetLastError () returned 0x5 [0202.086] GetLastError () returned 0x5 [0202.086] FindNextFileW (in: hFindFile=0x24e740, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4bc156a, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef918492, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2380b, dwReserved0=0x0, dwReserved1=0x0, cFileName="meiryo_boot.ttf", cAlternateFileName="MEIRYO~2.TTF")) returned 1 [0202.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238708 [0202.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385a0 [0202.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2229e8 [0202.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385a0 | out: hHeap=0x1f0000) returned 1 [0202.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2221c0 | out: hHeap=0x1f0000) returned 1 [0202.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238708 | out: hHeap=0x1f0000) returned 1 [0202.088] CreateFileW (lpFileName="C:\\\\Boot\\Fonts\\meiryo_boot.ttf" (normalized: "c:\\boot\\fonts\\meiryo_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.096] GetLastError () returned 0x5 [0202.096] GetLastError () returned 0x5 [0202.096] FindNextFileW (in: hFindFile=0x24e740, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4bc156a, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef92a947, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x27a1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="msjhn_boot.ttf", cAlternateFileName="MSJHN_~1.TTF")) returned 1 [0202.096] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238708 [0202.096] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238618 [0202.097] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2221c0 [0202.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238618 | out: hHeap=0x1f0000) returned 1 [0202.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2229e8 | out: hHeap=0x1f0000) returned 1 [0202.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238708 | out: hHeap=0x1f0000) returned 1 [0202.097] CreateFileW (lpFileName="C:\\\\Boot\\Fonts\\msjhn_boot.ttf" (normalized: "c:\\boot\\fonts\\msjhn_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.097] GetLastError () returned 0x5 [0202.098] GetLastError () returned 0x5 [0202.098] FindNextFileW (in: hFindFile=0x24e740, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef93ce3b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x281fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="msjh_boot.ttf", cAlternateFileName="MSJH_B~1.TTF")) returned 1 [0202.098] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238708 [0202.098] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238758 [0202.098] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2229e8 [0202.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238758 | out: hHeap=0x1f0000) returned 1 [0202.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2221c0 | out: hHeap=0x1f0000) returned 1 [0202.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238708 | out: hHeap=0x1f0000) returned 1 [0202.098] CreateFileW (lpFileName="C:\\\\Boot\\Fonts\\msjh_boot.ttf" (normalized: "c:\\boot\\fonts\\msjh_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.099] GetLastError () returned 0x5 [0202.099] GetLastError () returned 0x5 [0202.099] FindNextFileW (in: hFindFile=0x24e740, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef94dfcd, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x25b3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="msyhn_boot.ttf", cAlternateFileName="MSYHN_~1.TTF")) returned 1 [0202.099] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385a0 [0202.099] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238618 [0202.099] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2221c0 [0202.099] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238618 | out: hHeap=0x1f0000) returned 1 [0202.099] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2229e8 | out: hHeap=0x1f0000) returned 1 [0202.099] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385a0 | out: hHeap=0x1f0000) returned 1 [0202.100] CreateFileW (lpFileName="C:\\\\Boot\\Fonts\\msyhn_boot.ttf" (normalized: "c:\\boot\\fonts\\msyhn_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.100] GetLastError () returned 0x5 [0202.100] GetLastError () returned 0x5 [0202.100] FindNextFileW (in: hFindFile=0x24e740, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef95f141, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x26255, dwReserved0=0x0, dwReserved1=0x0, cFileName="msyh_boot.ttf", cAlternateFileName="MSYH_B~1.TTF")) returned 1 [0202.100] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385a0 [0202.100] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238618 [0202.100] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2229e8 [0202.100] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238618 | out: hHeap=0x1f0000) returned 1 [0202.100] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2221c0 | out: hHeap=0x1f0000) returned 1 [0202.101] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385a0 | out: hHeap=0x1f0000) returned 1 [0202.101] CreateFileW (lpFileName="C:\\\\Boot\\Fonts\\msyh_boot.ttf" (normalized: "c:\\boot\\fonts\\msyh_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.101] GetLastError () returned 0x5 [0202.101] GetLastError () returned 0x5 [0202.101] FindNextFileW (in: hFindFile=0x24e740, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef96ef3e, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xaf3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="segmono_boot.ttf", cAlternateFileName="SEGMON~1.TTF")) returned 1 [0202.102] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227fc8 [0202.102] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238708 [0202.102] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2221c0 [0202.102] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238708 | out: hHeap=0x1f0000) returned 1 [0202.102] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2229e8 | out: hHeap=0x1f0000) returned 1 [0202.102] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227fc8 | out: hHeap=0x1f0000) returned 1 [0202.103] CreateFileW (lpFileName="C:\\\\Boot\\Fonts\\segmono_boot.ttf" (normalized: "c:\\boot\\fonts\\segmono_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.103] GetLastError () returned 0x5 [0202.103] GetLastError () returned 0x5 [0202.103] FindNextFileW (in: hFindFile=0x24e740, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c0da69, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef97d9ab, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x14f66, dwReserved0=0x0, dwReserved1=0x0, cFileName="segoen_slboot.ttf", cAlternateFileName="SEGOEN~1.TTF")) returned 1 [0202.103] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227fc8 [0202.103] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238708 [0202.103] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239400 [0202.103] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238708 | out: hHeap=0x1f0000) returned 1 [0202.103] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2221c0 | out: hHeap=0x1f0000) returned 1 [0202.103] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227fc8 | out: hHeap=0x1f0000) returned 1 [0202.104] CreateFileW (lpFileName="C:\\\\Boot\\Fonts\\segoen_slboot.ttf" (normalized: "c:\\boot\\fonts\\segoen_slboot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.104] GetLastError () returned 0x5 [0202.104] GetLastError () returned 0x5 [0202.104] FindNextFileW (in: hFindFile=0x24e740, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef98c419, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x150a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="segoe_slboot.ttf", cAlternateFileName="SEGOE_~1.TTF")) returned 1 [0202.104] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228150 [0202.104] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385a0 [0202.104] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2221c0 [0202.104] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385a0 | out: hHeap=0x1f0000) returned 1 [0202.104] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239400 | out: hHeap=0x1f0000) returned 1 [0202.104] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228150 | out: hHeap=0x1f0000) returned 1 [0202.104] CreateFileW (lpFileName="C:\\\\Boot\\Fonts\\segoe_slboot.ttf" (normalized: "c:\\boot\\fonts\\segoe_slboot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.104] GetLastError () returned 0x5 [0202.104] GetLastError () returned 0x5 [0202.105] FindNextFileW (in: hFindFile=0x24e740, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef999ae4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xbfc3, dwReserved0=0x0, dwReserved1=0x0, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 1 [0202.105] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238618 [0202.105] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385a0 [0202.105] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222b08 [0202.105] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385a0 | out: hHeap=0x1f0000) returned 1 [0202.105] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2221c0 | out: hHeap=0x1f0000) returned 1 [0202.105] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238618 | out: hHeap=0x1f0000) returned 1 [0202.105] CreateFileW (lpFileName="C:\\\\Boot\\Fonts\\wgl4_boot.ttf" (normalized: "c:\\boot\\fonts\\wgl4_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.105] GetLastError () returned 0x5 [0202.105] GetLastError () returned 0x5 [0202.105] FindNextFileW (in: hFindFile=0x24e740, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef999ae4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xbfc3, dwReserved0=0x0, dwReserved1=0x0, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 0 [0202.105] FindClose (in: hFindFile=0x24e740 | out: hFindFile=0x24e740) returned 1 [0202.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222b08 | out: hHeap=0x1f0000) returned 1 [0202.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e1c8 | out: hHeap=0x1f0000) returned 1 [0202.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385f0 | out: hHeap=0x1f0000) returned 1 [0202.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222178 | out: hHeap=0x1f0000) returned 1 [0202.107] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222178 [0202.107] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385f0 [0202.107] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d508 [0202.107] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227fc8 [0202.107] FindFirstFileW (in: lpFileName="C:\\\\Boot\\fr-CA\\*", lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ec00 [0202.341] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238708 [0202.342] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228150 [0202.342] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238708 | out: hHeap=0x1f0000) returned 1 [0202.342] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227fc8 | out: hHeap=0x1f0000) returned 1 [0202.342] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0202.342] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.342] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238758 [0202.342] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0202.342] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238758 | out: hHeap=0x1f0000) returned 1 [0202.343] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228150 | out: hHeap=0x1f0000) returned 1 [0202.343] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0202.343] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0202.343] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13560, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0202.343] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238708 [0202.343] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238758 [0202.343] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2221c0 [0202.343] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238758 | out: hHeap=0x1f0000) returned 1 [0202.343] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0202.343] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238708 | out: hHeap=0x1f0000) returned 1 [0202.344] CreateFileW (lpFileName="C:\\\\Boot\\fr-CA\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-ca\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.344] GetLastError () returned 0x5 [0202.344] GetLastError () returned 0x5 [0202.344] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13560, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0202.344] FindClose (in: hFindFile=0x24ec00 | out: hFindFile=0x24ec00) returned 1 [0202.345] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2221c0 | out: hHeap=0x1f0000) returned 1 [0202.345] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d508 | out: hHeap=0x1f0000) returned 1 [0202.345] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385f0 | out: hHeap=0x1f0000) returned 1 [0202.345] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222178 | out: hHeap=0x1f0000) returned 1 [0202.345] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222178 [0202.345] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385a0 [0202.345] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e360 [0202.345] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0202.345] FindFirstFileW (in: lpFileName="C:\\\\Boot\\fr-FR\\*", lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010bc12, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ade2b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ec80 [0202.346] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238708 [0202.346] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228230 [0202.346] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238708 | out: hHeap=0x1f0000) returned 1 [0202.346] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0202.346] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0202.346] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010bc12, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ade2b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.346] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238618 [0202.346] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0202.346] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238618 | out: hHeap=0x1f0000) returned 1 [0202.346] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228230 | out: hHeap=0x1f0000) returned 1 [0202.346] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0202.346] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0202.347] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2096e751, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13558, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0202.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384d8 [0202.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238758 [0202.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2221c0 [0202.347] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238758 | out: hHeap=0x1f0000) returned 1 [0202.347] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0202.347] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384d8 | out: hHeap=0x1f0000) returned 1 [0202.347] CreateFileW (lpFileName="C:\\\\Boot\\fr-FR\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-fr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.347] GetLastError () returned 0x5 [0202.347] GetLastError () returned 0x5 [0202.348] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5ade2b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0202.348] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238758 [0202.348] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385f0 [0202.348] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222a30 [0202.348] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385f0 | out: hHeap=0x1f0000) returned 1 [0202.348] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2221c0 | out: hHeap=0x1f0000) returned 1 [0202.348] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238758 | out: hHeap=0x1f0000) returned 1 [0202.348] CreateFileW (lpFileName="C:\\\\Boot\\fr-FR\\memtest.exe.mui" (normalized: "c:\\boot\\fr-fr\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.348] GetLastError () returned 0x5 [0202.348] GetLastError () returned 0x5 [0202.348] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5ade2b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0202.348] FindClose (in: hFindFile=0x24ec80 | out: hFindFile=0x24ec80) returned 1 [0202.349] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222a30 | out: hHeap=0x1f0000) returned 1 [0202.349] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e360 | out: hHeap=0x1f0000) returned 1 [0202.349] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385a0 | out: hHeap=0x1f0000) returned 1 [0202.349] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222178 | out: hHeap=0x1f0000) returned 1 [0202.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222178 [0202.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238758 [0202.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e9c0 [0202.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228150 [0202.349] FindFirstFileW (in: lpFileName="C:\\\\Boot\\hr-HR\\*", lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ebc0 [0202.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385a0 [0202.350] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228230 [0202.350] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385a0 | out: hHeap=0x1f0000) returned 1 [0202.350] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228150 | out: hHeap=0x1f0000) returned 1 [0202.350] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0202.350] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.350] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384d8 [0202.350] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228150 [0202.350] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384d8 | out: hHeap=0x1f0000) returned 1 [0202.350] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228230 | out: hHeap=0x1f0000) returned 1 [0202.350] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0202.350] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0202.350] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0202.350] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238708 [0202.350] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385a0 [0202.351] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2221c0 [0202.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385a0 | out: hHeap=0x1f0000) returned 1 [0202.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228150 | out: hHeap=0x1f0000) returned 1 [0202.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238708 | out: hHeap=0x1f0000) returned 1 [0202.351] CreateFileW (lpFileName="C:\\\\Boot\\hr-HR\\bootmgr.exe.mui" (normalized: "c:\\boot\\hr-hr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.351] GetLastError () returned 0x5 [0202.351] GetLastError () returned 0x5 [0202.351] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0202.352] FindClose (in: hFindFile=0x24ebc0 | out: hFindFile=0x24ebc0) returned 1 [0202.352] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2221c0 | out: hHeap=0x1f0000) returned 1 [0202.352] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e9c0 | out: hHeap=0x1f0000) returned 1 [0202.352] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238758 | out: hHeap=0x1f0000) returned 1 [0202.352] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222178 | out: hHeap=0x1f0000) returned 1 [0202.352] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222178 [0202.352] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238758 [0202.352] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f350 [0202.352] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0202.352] FindFirstFileW (in: lpFileName="C:\\\\Boot\\hu-HU\\*", lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010c5ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5c171b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e980 [0202.353] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238708 [0202.353] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227fc8 [0202.353] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238708 | out: hHeap=0x1f0000) returned 1 [0202.353] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0202.353] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0202.353] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010c5ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5c171b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.353] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238708 [0202.353] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228230 [0202.353] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238708 | out: hHeap=0x1f0000) returned 1 [0202.353] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227fc8 | out: hHeap=0x1f0000) returned 1 [0202.353] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0202.353] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0202.353] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13360, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0202.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238708 [0202.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384d8 [0202.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2221c0 [0202.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384d8 | out: hHeap=0x1f0000) returned 1 [0202.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228230 | out: hHeap=0x1f0000) returned 1 [0202.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238708 | out: hHeap=0x1f0000) returned 1 [0202.354] CreateFileW (lpFileName="C:\\\\Boot\\hu-HU\\bootmgr.exe.mui" (normalized: "c:\\boot\\hu-hu\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.355] GetLastError () returned 0x5 [0202.355] GetLastError () returned 0x5 [0202.355] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5c171b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39d81d8, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb398, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0202.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385a0 [0202.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385f0 [0202.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2229e8 [0202.355] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385f0 | out: hHeap=0x1f0000) returned 1 [0202.355] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2221c0 | out: hHeap=0x1f0000) returned 1 [0202.355] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385a0 | out: hHeap=0x1f0000) returned 1 [0202.355] CreateFileW (lpFileName="C:\\\\Boot\\hu-HU\\memtest.exe.mui" (normalized: "c:\\boot\\hu-hu\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.356] GetLastError () returned 0x5 [0202.356] GetLastError () returned 0x5 [0202.356] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5c171b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39d81d8, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb398, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0202.356] FindClose (in: hFindFile=0x24e980 | out: hFindFile=0x24e980) returned 1 [0202.356] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2229e8 | out: hHeap=0x1f0000) returned 1 [0202.356] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f350 | out: hHeap=0x1f0000) returned 1 [0202.356] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238758 | out: hHeap=0x1f0000) returned 1 [0202.356] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222178 | out: hHeap=0x1f0000) returned 1 [0202.356] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222178 [0202.356] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384d8 [0202.356] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d6a0 [0202.357] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228150 [0202.357] FindFirstFileW (in: lpFileName="C:\\\\Boot\\it-IT\\*", lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010ccad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5d8ab4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24eb40 [0202.357] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238708 [0202.357] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227fc8 [0202.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238708 | out: hHeap=0x1f0000) returned 1 [0202.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228150 | out: hHeap=0x1f0000) returned 1 [0202.357] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0202.357] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010ccad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5d8ab4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.359] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385a0 [0202.359] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228150 [0202.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385a0 | out: hHeap=0x1f0000) returned 1 [0202.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227fc8 | out: hHeap=0x1f0000) returned 1 [0202.359] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0202.359] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0202.359] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0202.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238708 [0202.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385a0 [0202.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2221c0 [0202.360] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385a0 | out: hHeap=0x1f0000) returned 1 [0202.360] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228150 | out: hHeap=0x1f0000) returned 1 [0202.360] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238708 | out: hHeap=0x1f0000) returned 1 [0202.360] CreateFileW (lpFileName="C:\\\\Boot\\it-IT\\bootmgr.exe.mui" (normalized: "c:\\boot\\it-it\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.360] GetLastError () returned 0x5 [0202.360] GetLastError () returned 0x5 [0202.360] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5d8ab4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf30285aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0202.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238708 [0202.361] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385f0 [0202.361] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2229e8 [0202.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385f0 | out: hHeap=0x1f0000) returned 1 [0202.363] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2221c0 | out: hHeap=0x1f0000) returned 1 [0202.363] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238708 | out: hHeap=0x1f0000) returned 1 [0202.363] CreateFileW (lpFileName="C:\\\\Boot\\it-IT\\memtest.exe.mui" (normalized: "c:\\boot\\it-it\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.364] GetLastError () returned 0x5 [0202.364] GetLastError () returned 0x5 [0202.364] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5d8ab4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf30285aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0202.364] FindClose (in: hFindFile=0x24eb40 | out: hFindFile=0x24eb40) returned 1 [0202.364] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2229e8 | out: hHeap=0x1f0000) returned 1 [0202.364] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d6a0 | out: hHeap=0x1f0000) returned 1 [0202.364] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384d8 | out: hHeap=0x1f0000) returned 1 [0202.364] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222178 | out: hHeap=0x1f0000) returned 1 [0202.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222178 [0202.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384d8 [0202.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e9c0 [0202.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228230 [0202.365] FindFirstFileW (in: lpFileName="C:\\\\Boot\\ja-JP\\*", lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010d0c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ed6c6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e780 [0202.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385a0 [0202.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228150 [0202.365] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385a0 | out: hHeap=0x1f0000) returned 1 [0202.366] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228230 | out: hHeap=0x1f0000) returned 1 [0202.366] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0202.366] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010d0c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ed6c6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238758 [0202.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0202.366] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238758 | out: hHeap=0x1f0000) returned 1 [0202.366] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228150 | out: hHeap=0x1f0000) returned 1 [0202.366] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0202.366] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0202.366] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48c6596, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21212f9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x10760, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0202.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385f0 [0202.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238708 [0202.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2221c0 [0202.366] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238708 | out: hHeap=0x1f0000) returned 1 [0202.366] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0202.367] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385f0 | out: hHeap=0x1f0000) returned 1 [0202.367] CreateFileW (lpFileName="C:\\\\Boot\\ja-JP\\bootmgr.exe.mui" (normalized: "c:\\boot\\ja-jp\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.367] GetLastError () returned 0x5 [0202.367] GetLastError () returned 0x5 [0202.367] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5ed6c6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf300233f, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa798, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0202.367] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238758 [0202.367] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238708 [0202.367] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2229e8 [0202.367] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238708 | out: hHeap=0x1f0000) returned 1 [0202.367] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2221c0 | out: hHeap=0x1f0000) returned 1 [0202.368] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238758 | out: hHeap=0x1f0000) returned 1 [0202.368] CreateFileW (lpFileName="C:\\\\Boot\\ja-JP\\memtest.exe.mui" (normalized: "c:\\boot\\ja-jp\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.368] GetLastError () returned 0x5 [0202.368] GetLastError () returned 0x5 [0202.368] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5ed6c6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf300233f, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa798, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0202.369] FindClose (in: hFindFile=0x24e780 | out: hFindFile=0x24e780) returned 1 [0202.369] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2229e8 | out: hHeap=0x1f0000) returned 1 [0202.369] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e9c0 | out: hHeap=0x1f0000) returned 1 [0202.369] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384d8 | out: hHeap=0x1f0000) returned 1 [0202.369] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222178 | out: hHeap=0x1f0000) returned 1 [0202.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222178 [0202.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385a0 [0202.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f020 [0202.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0202.369] FindFirstFileW (in: lpFileName="C:\\\\Boot\\ko-KR\\*", lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef5fc210, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e780 [0202.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238708 [0202.370] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227fc8 [0202.370] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238708 | out: hHeap=0x1f0000) returned 1 [0202.370] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0202.370] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0202.370] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef5fc210, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.370] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385f0 [0202.370] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0202.370] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385f0 | out: hHeap=0x1f0000) returned 1 [0202.370] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227fc8 | out: hHeap=0x1f0000) returned 1 [0202.371] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0202.371] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0202.371] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x211c6af1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x10560, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0202.371] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385f0 [0202.371] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238758 [0202.371] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2221c0 [0202.371] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238758 | out: hHeap=0x1f0000) returned 1 [0202.371] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0202.371] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385f0 | out: hHeap=0x1f0000) returned 1 [0202.371] CreateFileW (lpFileName="C:\\\\Boot\\ko-KR\\bootmgr.exe.mui" (normalized: "c:\\boot\\ko-kr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.372] GetLastError () returned 0x5 [0202.372] GetLastError () returned 0x5 [0202.372] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fdc0d7, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa7a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0202.372] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238708 [0202.372] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238758 [0202.372] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2229e8 [0202.372] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238758 | out: hHeap=0x1f0000) returned 1 [0202.372] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2221c0 | out: hHeap=0x1f0000) returned 1 [0202.372] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238708 | out: hHeap=0x1f0000) returned 1 [0202.372] CreateFileW (lpFileName="C:\\\\Boot\\ko-KR\\memtest.exe.mui" (normalized: "c:\\boot\\ko-kr\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.373] GetLastError () returned 0x5 [0202.373] GetLastError () returned 0x5 [0202.373] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fdc0d7, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa7a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0202.373] FindClose (in: hFindFile=0x24e780 | out: hFindFile=0x24e780) returned 1 [0202.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2229e8 | out: hHeap=0x1f0000) returned 1 [0202.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f020 | out: hHeap=0x1f0000) returned 1 [0202.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385a0 | out: hHeap=0x1f0000) returned 1 [0202.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222178 | out: hHeap=0x1f0000) returned 1 [0202.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222178 [0202.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238708 [0202.374] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d9d0 [0202.374] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227fc8 [0202.374] FindFirstFileW (in: lpFileName="C:\\\\Boot\\lt-LT\\*", lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e640 [0202.374] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385a0 [0202.374] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228150 [0202.374] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385a0 | out: hHeap=0x1f0000) returned 1 [0202.374] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227fc8 | out: hHeap=0x1f0000) returned 1 [0202.374] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0202.374] FindNextFileW (in: hFindFile=0x24e640, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.374] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385a0 [0202.374] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227fc8 [0202.375] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385a0 | out: hHeap=0x1f0000) returned 1 [0202.375] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228150 | out: hHeap=0x1f0000) returned 1 [0202.375] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0202.375] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0202.375] FindNextFileW (in: hFindFile=0x24e640, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2117a634, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12760, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0202.375] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238758 [0202.375] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384d8 [0202.375] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2221c0 [0202.375] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384d8 | out: hHeap=0x1f0000) returned 1 [0202.375] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227fc8 | out: hHeap=0x1f0000) returned 1 [0202.375] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238758 | out: hHeap=0x1f0000) returned 1 [0202.376] CreateFileW (lpFileName="C:\\\\Boot\\lt-LT\\bootmgr.exe.mui" (normalized: "c:\\boot\\lt-lt\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.376] GetLastError () returned 0x5 [0202.376] GetLastError () returned 0x5 [0202.376] FindNextFileW (in: hFindFile=0x24e640, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2117a634, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12760, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0202.376] FindClose (in: hFindFile=0x24e640 | out: hFindFile=0x24e640) returned 1 [0202.376] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2221c0 | out: hHeap=0x1f0000) returned 1 [0202.376] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d9d0 | out: hHeap=0x1f0000) returned 1 [0202.376] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238708 | out: hHeap=0x1f0000) returned 1 [0202.377] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222178 | out: hHeap=0x1f0000) returned 1 [0202.377] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222178 [0202.377] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238708 [0202.377] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e1c8 [0202.377] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228150 [0202.377] FindFirstFileW (in: lpFileName="C:\\\\Boot\\lv-LV\\*", lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24eb40 [0202.377] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238758 [0202.377] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228230 [0202.377] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238758 | out: hHeap=0x1f0000) returned 1 [0202.377] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228150 | out: hHeap=0x1f0000) returned 1 [0202.377] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0202.377] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.378] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385a0 [0202.378] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0202.378] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385a0 | out: hHeap=0x1f0000) returned 1 [0202.378] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228230 | out: hHeap=0x1f0000) returned 1 [0202.378] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0202.378] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0202.378] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2117a634, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12758, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0202.378] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238758 [0202.378] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385a0 [0202.378] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2221c0 [0202.379] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385a0 | out: hHeap=0x1f0000) returned 1 [0202.379] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0202.379] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238758 | out: hHeap=0x1f0000) returned 1 [0202.379] CreateFileW (lpFileName="C:\\\\Boot\\lv-LV\\bootmgr.exe.mui" (normalized: "c:\\boot\\lv-lv\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.379] GetLastError () returned 0x5 [0202.379] GetLastError () returned 0x5 [0202.379] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2117a634, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12758, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0202.380] FindClose (in: hFindFile=0x24eb40 | out: hFindFile=0x24eb40) returned 1 [0202.380] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2221c0 | out: hHeap=0x1f0000) returned 1 [0202.382] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e1c8 | out: hHeap=0x1f0000) returned 1 [0202.383] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238708 | out: hHeap=0x1f0000) returned 1 [0202.535] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222178 | out: hHeap=0x1f0000) returned 1 [0202.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222178 [0202.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b58 [0202.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e9c0 [0202.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d280 [0202.535] FindFirstFileW (in: lpFileName="C:\\\\Boot\\nb-NO\\*", lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e138, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef62cf52, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ec00 [0202.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ba8 [0202.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cfa8 [0202.536] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ba8 | out: hHeap=0x1f0000) returned 1 [0202.536] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d280 | out: hHeap=0x1f0000) returned 1 [0202.536] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0202.536] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e138, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef62cf52, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b30 [0202.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0202.536] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b30 | out: hHeap=0x1f0000) returned 1 [0202.536] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cfa8 | out: hHeap=0x1f0000) returned 1 [0202.536] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0202.536] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0202.536] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x211543da, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12760, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0202.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c70 [0202.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c48 [0202.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222a30 [0202.536] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0202.537] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0202.537] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c70 | out: hHeap=0x1f0000) returned 1 [0202.537] CreateFileW (lpFileName="C:\\\\Boot\\nb-NO\\bootmgr.exe.mui" (normalized: "c:\\boot\\nb-no\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.537] GetLastError () returned 0x5 [0202.537] GetLastError () returned 0x5 [0202.537] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef62cf52, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fb5e6c, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0202.537] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0202.537] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a90 [0202.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222b08 [0202.538] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a90 | out: hHeap=0x1f0000) returned 1 [0202.538] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222a30 | out: hHeap=0x1f0000) returned 1 [0202.538] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0202.538] CreateFileW (lpFileName="C:\\\\Boot\\nb-NO\\memtest.exe.mui" (normalized: "c:\\boot\\nb-no\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.539] GetLastError () returned 0x5 [0202.539] GetLastError () returned 0x5 [0202.539] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef62cf52, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fb5e6c, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0202.539] FindClose (in: hFindFile=0x24ec00 | out: hFindFile=0x24ec00) returned 1 [0202.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222b08 | out: hHeap=0x1f0000) returned 1 [0202.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e9c0 | out: hHeap=0x1f0000) returned 1 [0202.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b58 | out: hHeap=0x1f0000) returned 1 [0202.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222178 | out: hHeap=0x1f0000) returned 1 [0202.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222178 [0202.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ae0 [0202.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d508 [0202.540] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf70 [0202.540] FindFirstFileW (in: lpFileName="C:\\\\Boot\\nl-NL\\*", lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e4fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6407cf, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ec00 [0202.540] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c70 [0202.540] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0202.540] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c70 | out: hHeap=0x1f0000) returned 1 [0202.540] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf70 | out: hHeap=0x1f0000) returned 1 [0202.540] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0202.540] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e4fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6407cf, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.540] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a90 [0202.540] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf70 [0202.540] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a90 | out: hHeap=0x1f0000) returned 1 [0202.540] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0202.541] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0202.541] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0202.541] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x211543da, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13160, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0202.541] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a90 [0202.541] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0202.541] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222a30 [0202.541] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0202.541] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf70 | out: hHeap=0x1f0000) returned 1 [0202.541] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a90 | out: hHeap=0x1f0000) returned 1 [0202.542] CreateFileW (lpFileName="C:\\\\Boot\\nl-NL\\bootmgr.exe.mui" (normalized: "c:\\boot\\nl-nl\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.542] GetLastError () returned 0x5 [0202.542] GetLastError () returned 0x5 [0202.542] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6407cf, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fb5e6c, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0202.542] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a90 [0202.542] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609f0 [0202.542] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222b08 [0202.542] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609f0 | out: hHeap=0x1f0000) returned 1 [0202.542] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222a30 | out: hHeap=0x1f0000) returned 1 [0202.542] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a90 | out: hHeap=0x1f0000) returned 1 [0202.543] CreateFileW (lpFileName="C:\\\\Boot\\nl-NL\\memtest.exe.mui" (normalized: "c:\\boot\\nl-nl\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.543] GetLastError () returned 0x5 [0202.543] GetLastError () returned 0x5 [0202.543] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6407cf, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fb5e6c, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0202.543] FindClose (in: hFindFile=0x24ec00 | out: hFindFile=0x24ec00) returned 1 [0202.544] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222b08 | out: hHeap=0x1f0000) returned 1 [0202.544] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d508 | out: hHeap=0x1f0000) returned 1 [0202.544] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ae0 | out: hHeap=0x1f0000) returned 1 [0202.544] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222178 | out: hHeap=0x1f0000) returned 1 [0202.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222178 [0202.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ae0 [0202.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e4f8 [0202.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d280 [0202.544] FindFirstFileW (in: lpFileName="C:\\\\Boot\\pl-PL\\*", lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef65403a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e940 [0202.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609f0 [0202.545] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf70 [0202.545] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609f0 | out: hHeap=0x1f0000) returned 1 [0202.545] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d280 | out: hHeap=0x1f0000) returned 1 [0202.545] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0202.545] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef65403a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.545] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c70 [0202.545] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d280 [0202.545] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c70 | out: hHeap=0x1f0000) returned 1 [0202.545] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf70 | out: hHeap=0x1f0000) returned 1 [0202.545] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0202.545] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0202.545] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2112e17f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f58, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0202.545] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b08 [0202.545] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c70 [0202.545] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222b08 [0202.545] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c70 | out: hHeap=0x1f0000) returned 1 [0202.545] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d280 | out: hHeap=0x1f0000) returned 1 [0202.545] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b08 | out: hHeap=0x1f0000) returned 1 [0202.546] CreateFileW (lpFileName="C:\\\\Boot\\pl-PL\\bootmgr.exe.mui" (normalized: "c:\\boot\\pl-pl\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.546] GetLastError () returned 0x5 [0202.546] GetLastError () returned 0x5 [0202.546] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0202.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c70 [0202.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609c8 [0202.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222a30 [0202.546] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609c8 | out: hHeap=0x1f0000) returned 1 [0202.546] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222b08 | out: hHeap=0x1f0000) returned 1 [0202.546] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c70 | out: hHeap=0x1f0000) returned 1 [0202.547] CreateFileW (lpFileName="C:\\\\Boot\\pl-PL\\memtest.exe.mui" (normalized: "c:\\boot\\pl-pl\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.547] GetLastError () returned 0x5 [0202.547] GetLastError () returned 0x5 [0202.547] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0202.547] FindClose (in: hFindFile=0x24e940 | out: hFindFile=0x24e940) returned 1 [0202.547] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222a30 | out: hHeap=0x1f0000) returned 1 [0202.547] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e4f8 | out: hHeap=0x1f0000) returned 1 [0202.547] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ae0 | out: hHeap=0x1f0000) returned 1 [0202.548] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222178 | out: hHeap=0x1f0000) returned 1 [0202.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222178 [0202.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ba8 [0202.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22eb58 [0202.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf70 [0202.548] FindFirstFileW (in: lpFileName="C:\\\\Boot\\pt-BR\\*", lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6678d6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6678d6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ec00 [0202.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b08 [0202.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cfa8 [0202.548] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b08 | out: hHeap=0x1f0000) returned 1 [0202.548] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf70 | out: hHeap=0x1f0000) returned 1 [0202.548] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0202.548] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6678d6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6678d6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a18 [0202.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf70 [0202.549] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a18 | out: hHeap=0x1f0000) returned 1 [0202.549] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cfa8 | out: hHeap=0x1f0000) returned 1 [0202.549] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0202.549] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0202.549] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2112e17f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0202.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c70 [0202.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b30 [0202.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222a30 [0202.549] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b30 | out: hHeap=0x1f0000) returned 1 [0202.549] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf70 | out: hHeap=0x1f0000) returned 1 [0202.549] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c70 | out: hHeap=0x1f0000) returned 1 [0202.550] CreateFileW (lpFileName="C:\\\\Boot\\pt-BR\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-br\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.550] GetLastError () returned 0x5 [0202.550] GetLastError () returned 0x5 [0202.550] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65dc94, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0202.550] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609c8 [0202.550] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609f0 [0202.550] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222b08 [0202.550] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609f0 | out: hHeap=0x1f0000) returned 1 [0202.550] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222a30 | out: hHeap=0x1f0000) returned 1 [0202.550] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609c8 | out: hHeap=0x1f0000) returned 1 [0202.551] CreateFileW (lpFileName="C:\\\\Boot\\pt-BR\\memtest.exe.mui" (normalized: "c:\\boot\\pt-br\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.551] GetLastError () returned 0x5 [0202.551] GetLastError () returned 0x5 [0202.551] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65dc94, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0202.551] FindClose (in: hFindFile=0x24ec00 | out: hFindFile=0x24ec00) returned 1 [0202.551] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222b08 | out: hHeap=0x1f0000) returned 1 [0202.551] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22eb58 | out: hHeap=0x1f0000) returned 1 [0202.552] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ba8 | out: hHeap=0x1f0000) returned 1 [0202.552] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222178 | out: hHeap=0x1f0000) returned 1 [0202.552] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222178 [0202.552] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c20 [0202.552] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e4f8 [0202.552] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d280 [0202.552] FindFirstFileW (in: lpFileName="C:\\\\Boot\\pt-PT\\*", lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f167, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6714dc, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e7c0 [0202.552] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a90 [0202.552] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf70 [0202.552] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a90 | out: hHeap=0x1f0000) returned 1 [0202.553] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d280 | out: hHeap=0x1f0000) returned 1 [0202.553] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0202.553] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f167, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6714dc, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.553] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609f0 [0202.553] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d280 [0202.553] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609f0 | out: hHeap=0x1f0000) returned 1 [0202.553] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf70 | out: hHeap=0x1f0000) returned 1 [0202.553] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0202.553] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0202.553] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2112e17f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0202.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a18 [0202.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b30 [0202.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2225f8 [0202.554] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b30 | out: hHeap=0x1f0000) returned 1 [0202.554] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d280 | out: hHeap=0x1f0000) returned 1 [0202.554] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a18 | out: hHeap=0x1f0000) returned 1 [0202.555] CreateFileW (lpFileName="C:\\\\Boot\\pt-PT\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-pt\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.555] GetLastError () returned 0x5 [0202.555] GetLastError () returned 0x5 [0202.555] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6714dc, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0202.555] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609c8 [0202.555] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b58 [0202.555] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222a30 [0202.555] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b58 | out: hHeap=0x1f0000) returned 1 [0202.556] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2225f8 | out: hHeap=0x1f0000) returned 1 [0202.556] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609c8 | out: hHeap=0x1f0000) returned 1 [0202.556] CreateFileW (lpFileName="C:\\\\Boot\\pt-PT\\memtest.exe.mui" (normalized: "c:\\boot\\pt-pt\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.556] GetLastError () returned 0x5 [0202.556] GetLastError () returned 0x5 [0202.556] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6714dc, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0202.557] FindClose (in: hFindFile=0x24e7c0 | out: hFindFile=0x24e7c0) returned 1 [0202.557] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222a30 | out: hHeap=0x1f0000) returned 1 [0202.557] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e4f8 | out: hHeap=0x1f0000) returned 1 [0202.557] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c20 | out: hHeap=0x1f0000) returned 1 [0202.557] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222178 | out: hHeap=0x1f0000) returned 1 [0202.557] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222178 [0202.557] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b08 [0202.557] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e4f8 [0202.557] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf70 [0202.558] FindFirstFileW (in: lpFileName="C:\\\\Boot\\qps-ploc\\*", lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f640, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef684d85, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e900 [0202.558] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cfa8 [0202.558] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf70 | out: hHeap=0x1f0000) returned 1 [0202.558] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0202.558] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f640, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef684d85, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.558] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf70 [0202.558] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cfa8 | out: hHeap=0x1f0000) returned 1 [0202.558] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0202.558] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0202.559] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12160, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0202.559] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b30 [0202.559] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d280 [0202.559] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239a30 [0202.559] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d280 | out: hHeap=0x1f0000) returned 1 [0202.559] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf70 | out: hHeap=0x1f0000) returned 1 [0202.559] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b30 | out: hHeap=0x1f0000) returned 1 [0202.560] CreateFileW (lpFileName="C:\\\\Boot\\qps-ploc\\bootmgr.exe.mui" (normalized: "c:\\boot\\qps-ploc\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.560] GetLastError () returned 0x5 [0202.560] GetLastError () returned 0x5 [0202.560] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef684d85, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfbd1a998, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0xd398, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0202.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0202.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf70 [0202.561] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239ae0 [0202.561] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf70 | out: hHeap=0x1f0000) returned 1 [0202.561] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239a30 | out: hHeap=0x1f0000) returned 1 [0202.561] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0202.561] CreateFileW (lpFileName="C:\\\\Boot\\qps-ploc\\memtest.exe.mui" (normalized: "c:\\boot\\qps-ploc\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.562] GetLastError () returned 0x5 [0202.562] GetLastError () returned 0x5 [0202.562] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef684d85, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfbd1a998, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0xd398, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0202.562] FindClose (in: hFindFile=0x24e900 | out: hFindFile=0x24e900) returned 1 [0202.562] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239ae0 | out: hHeap=0x1f0000) returned 1 [0202.562] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e4f8 | out: hHeap=0x1f0000) returned 1 [0202.562] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b08 | out: hHeap=0x1f0000) returned 1 [0202.562] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222178 | out: hHeap=0x1f0000) returned 1 [0202.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222178 [0202.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c48 [0202.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e4f8 [0202.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf70 [0202.563] FindFirstFileW (in: lpFileName="C:\\\\Boot\\Resources\\*", lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ab61e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9abff9, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e640 [0202.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cfa8 [0202.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf70 | out: hHeap=0x1f0000) returned 1 [0202.563] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0202.563] FindNextFileW (in: hFindFile=0x24e640, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ab61e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9abff9, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d280 [0202.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cfa8 | out: hHeap=0x1f0000) returned 1 [0202.563] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0202.564] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0202.564] FindNextFileW (in: hFindFile=0x24e640, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9abff9, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef597530, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x169a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootres.dll", cAlternateFileName="")) returned 1 [0202.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0202.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0202.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x226288 [0202.564] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0202.564] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d280 | out: hHeap=0x1f0000) returned 1 [0202.564] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0202.565] CreateFileW (lpFileName="C:\\\\Boot\\Resources\\bootres.dll" (normalized: "c:\\boot\\resources\\bootres.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.565] GetLastError () returned 0x5 [0202.565] GetLastError () returned 0x5 [0202.565] FindNextFileW (in: hFindFile=0x24e640, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9baa67, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0202.565] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf70 [0202.565] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225c48 [0202.565] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf70 | out: hHeap=0x1f0000) returned 1 [0202.565] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226288 | out: hHeap=0x1f0000) returned 1 [0202.565] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0202.566] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0202.566] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204b90 [0202.566] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222a30 [0202.566] FindNextFileW (in: hFindFile=0x24e640, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9baa67, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0 [0202.566] FindClose (in: hFindFile=0x24e640 | out: hFindFile=0x24e640) returned 1 [0202.566] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222b08 [0202.566] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b58 [0202.566] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f1b8 [0202.566] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2225f8 [0202.567] FindFirstFileW (in: lpFileName="C:\\\\Boot\\Resources\\en-US\\*", lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9baa67, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e680 [0202.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233bb8 [0202.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2225f8 | out: hHeap=0x1f0000) returned 1 [0202.567] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0202.567] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9baa67, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234158 [0202.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233bb8 | out: hHeap=0x1f0000) returned 1 [0202.567] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0202.567] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0202.568] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9baa67, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0x31acad58, ftLastWriteTime.dwHighDateTime=0x1d2a030, nFileSizeHigh=0x0, nFileSizeLow=0x2fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootres.dll.mui", cAlternateFileName="BOOTRE~1.MUI")) returned 1 [0202.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ba8 [0202.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233ff0 [0202.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214ea0 [0202.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233ff0 | out: hHeap=0x1f0000) returned 1 [0202.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234158 | out: hHeap=0x1f0000) returned 1 [0202.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ba8 | out: hHeap=0x1f0000) returned 1 [0202.569] CreateFileW (lpFileName="C:\\\\Boot\\Resources\\en-US\\bootres.dll.mui" (normalized: "c:\\boot\\resources\\en-us\\bootres.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e65c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.569] GetLastError () returned 0x5 [0202.569] GetLastError () returned 0x5 [0202.569] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9baa67, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0x31acad58, ftLastWriteTime.dwHighDateTime=0x1d2a030, nFileSizeHigh=0x0, nFileSizeLow=0x2fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootres.dll.mui", cAlternateFileName="BOOTRE~1.MUI")) returned 0 [0202.569] FindClose (in: hFindFile=0x24e680 | out: hFindFile=0x24e680) returned 1 [0202.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214ea0 | out: hHeap=0x1f0000) returned 1 [0202.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f1b8 | out: hHeap=0x1f0000) returned 1 [0202.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b58 | out: hHeap=0x1f0000) returned 1 [0202.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222b08 | out: hHeap=0x1f0000) returned 1 [0202.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225c48 | out: hHeap=0x1f0000) returned 1 [0202.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222a30 | out: hHeap=0x1f0000) returned 1 [0202.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204b90 | out: hHeap=0x1f0000) returned 1 [0202.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e4f8 | out: hHeap=0x1f0000) returned 1 [0202.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0202.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222178 | out: hHeap=0x1f0000) returned 1 [0202.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2341a0 [0202.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0202.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f020 [0202.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d280 [0202.571] FindFirstFileW (in: lpFileName="C:\\\\Boot\\ro-RO\\*", lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e840 [0202.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ae0 [0202.572] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf70 [0202.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ae0 | out: hHeap=0x1f0000) returned 1 [0202.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d280 | out: hHeap=0x1f0000) returned 1 [0202.572] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0202.572] FindNextFileW (in: hFindFile=0x24e840, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.572] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c48 [0202.572] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2f0 [0202.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0202.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf70 | out: hHeap=0x1f0000) returned 1 [0202.573] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0202.573] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0202.573] FindNextFileW (in: hFindFile=0x24e840, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12960, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0202.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ae0 [0202.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a18 [0202.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233fa8 [0202.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a18 | out: hHeap=0x1f0000) returned 1 [0202.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0202.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ae0 | out: hHeap=0x1f0000) returned 1 [0202.574] CreateFileW (lpFileName="C:\\\\Boot\\ro-RO\\bootmgr.exe.mui" (normalized: "c:\\boot\\ro-ro\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.574] GetLastError () returned 0x5 [0202.574] GetLastError () returned 0x5 [0202.574] FindNextFileW (in: hFindFile=0x24e840, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12960, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0202.574] FindClose (in: hFindFile=0x24e840 | out: hFindFile=0x24e840) returned 1 [0202.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233fa8 | out: hHeap=0x1f0000) returned 1 [0202.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f020 | out: hHeap=0x1f0000) returned 1 [0202.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0202.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2341a0 | out: hHeap=0x1f0000) returned 1 [0202.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234110 [0202.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c20 [0202.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22ee88 [0202.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d280 [0202.575] FindFirstFileW (in: lpFileName="C:\\\\Boot\\ru-RU\\*", lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef698608, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ec40 [0202.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ba8 [0202.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf70 [0202.576] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ba8 | out: hHeap=0x1f0000) returned 1 [0202.576] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d280 | out: hHeap=0x1f0000) returned 1 [0202.576] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0202.576] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef698608, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a90 [0202.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cfa8 [0202.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a90 | out: hHeap=0x1f0000) returned 1 [0202.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf70 | out: hHeap=0x1f0000) returned 1 [0202.577] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0202.577] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0202.577] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0202.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0202.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b08 [0202.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233bb8 [0202.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b08 | out: hHeap=0x1f0000) returned 1 [0202.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cfa8 | out: hHeap=0x1f0000) returned 1 [0202.578] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0202.578] CreateFileW (lpFileName="C:\\\\Boot\\ru-RU\\bootmgr.exe.mui" (normalized: "c:\\boot\\ru-ru\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.578] GetLastError () returned 0x5 [0202.578] GetLastError () returned 0x5 [0202.578] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f699a6, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xafa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0202.578] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0202.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609c8 [0202.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234230 [0202.579] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609c8 | out: hHeap=0x1f0000) returned 1 [0202.579] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233bb8 | out: hHeap=0x1f0000) returned 1 [0202.579] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0202.580] CreateFileW (lpFileName="C:\\\\Boot\\ru-RU\\memtest.exe.mui" (normalized: "c:\\boot\\ru-ru\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.580] GetLastError () returned 0x5 [0202.580] GetLastError () returned 0x5 [0202.580] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f699a6, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xafa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0202.580] FindClose (in: hFindFile=0x24ec40 | out: hFindFile=0x24ec40) returned 1 [0202.580] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234230 | out: hHeap=0x1f0000) returned 1 [0202.580] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ee88 | out: hHeap=0x1f0000) returned 1 [0202.581] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c20 | out: hHeap=0x1f0000) returned 1 [0202.581] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234110 | out: hHeap=0x1f0000) returned 1 [0202.581] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2340c8 [0202.581] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609f0 [0202.581] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f1b8 [0202.581] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d280 [0202.581] FindFirstFileW (in: lpFileName="C:\\\\Boot\\sk-SK\\*", lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ec40 [0202.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bd0 [0202.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0202.769] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bd0 | out: hHeap=0x1f0000) returned 1 [0202.769] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d280 | out: hHeap=0x1f0000) returned 1 [0202.770] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0202.770] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.770] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a18 [0202.770] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d280 [0202.770] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a18 | out: hHeap=0x1f0000) returned 1 [0202.770] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0202.770] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0202.770] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0202.770] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0202.770] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bd0 [0202.770] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a18 [0202.770] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234428 [0202.771] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a18 | out: hHeap=0x1f0000) returned 1 [0202.771] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d280 | out: hHeap=0x1f0000) returned 1 [0202.771] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bd0 | out: hHeap=0x1f0000) returned 1 [0202.771] CreateFileW (lpFileName="C:\\\\Boot\\sk-SK\\bootmgr.exe.mui" (normalized: "c:\\boot\\sk-sk\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.771] GetLastError () returned 0x5 [0202.772] GetLastError () returned 0x5 [0202.772] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0202.772] FindClose (in: hFindFile=0x24ec40 | out: hFindFile=0x24ec40) returned 1 [0202.772] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234428 | out: hHeap=0x1f0000) returned 1 [0202.772] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f1b8 | out: hHeap=0x1f0000) returned 1 [0202.772] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609f0 | out: hHeap=0x1f0000) returned 1 [0202.772] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2340c8 | out: hHeap=0x1f0000) returned 1 [0202.772] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234350 [0202.772] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bd0 [0202.772] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e4f8 [0202.772] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d280 [0202.773] FindFirstFileW (in: lpFileName="C:\\\\Boot\\sl-SI\\*", lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e600 [0202.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b80 [0202.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0202.773] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b80 | out: hHeap=0x1f0000) returned 1 [0202.773] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d280 | out: hHeap=0x1f0000) returned 1 [0202.773] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0202.773] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b08 [0202.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d280 [0202.773] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b08 | out: hHeap=0x1f0000) returned 1 [0202.773] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0202.773] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0202.774] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0202.774] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0202.774] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0202.774] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b80 [0202.774] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234080 [0202.774] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b80 | out: hHeap=0x1f0000) returned 1 [0202.774] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d280 | out: hHeap=0x1f0000) returned 1 [0202.774] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0202.775] CreateFileW (lpFileName="C:\\\\Boot\\sl-SI\\bootmgr.exe.mui" (normalized: "c:\\boot\\sl-si\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.775] GetLastError () returned 0x5 [0202.775] GetLastError () returned 0x5 [0202.775] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0202.775] FindClose (in: hFindFile=0x24e600 | out: hFindFile=0x24e600) returned 1 [0202.775] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234080 | out: hHeap=0x1f0000) returned 1 [0202.775] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e4f8 | out: hHeap=0x1f0000) returned 1 [0202.775] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bd0 | out: hHeap=0x1f0000) returned 1 [0202.775] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234350 | out: hHeap=0x1f0000) returned 1 [0202.776] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234350 [0202.776] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0202.776] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d6a0 [0202.776] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d280 [0202.776] FindFirstFileW (in: lpFileName="C:\\\\Boot\\sr-Latn-CS\\*", lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0x5168548b, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ebc0 [0202.776] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0202.776] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d280 | out: hHeap=0x1f0000) returned 1 [0202.776] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0202.776] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0x5168548b, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.776] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d280 [0202.776] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0202.777] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0202.777] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0202.777] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21212f9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0202.777] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c70 [0202.777] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0202.777] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239718 [0202.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0202.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d280 | out: hHeap=0x1f0000) returned 1 [0202.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c70 | out: hHeap=0x1f0000) returned 1 [0202.777] CreateFileW (lpFileName="C:\\\\Boot\\sr-Latn-CS\\bootmgr.exe.mui" (normalized: "c:\\boot\\sr-latn-cs\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.778] GetLastError () returned 0x5 [0202.778] GetLastError () returned 0x5 [0202.778] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0xe318f070, ftLastWriteTime.dwHighDateTime=0x1d112e1, nFileSizeHigh=0x0, nFileSizeLow=0xaf58, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0202.778] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c20 [0202.778] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d280 [0202.778] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239668 [0202.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d280 | out: hHeap=0x1f0000) returned 1 [0202.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239718 | out: hHeap=0x1f0000) returned 1 [0202.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c20 | out: hHeap=0x1f0000) returned 1 [0202.778] CreateFileW (lpFileName="C:\\\\Boot\\sr-Latn-CS\\memtest.exe.mui" (normalized: "c:\\boot\\sr-latn-cs\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.778] GetLastError () returned 0x5 [0202.778] GetLastError () returned 0x5 [0202.778] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0xe318f070, ftLastWriteTime.dwHighDateTime=0x1d112e1, nFileSizeHigh=0x0, nFileSizeLow=0xaf58, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0202.779] FindClose (in: hFindFile=0x24ebc0 | out: hFindFile=0x24ebc0) returned 1 [0202.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239668 | out: hHeap=0x1f0000) returned 1 [0202.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d6a0 | out: hHeap=0x1f0000) returned 1 [0202.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0202.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234350 | out: hHeap=0x1f0000) returned 1 [0202.779] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234308 [0202.779] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ae0 [0202.779] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e4f8 [0202.779] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d280 [0202.779] FindFirstFileW (in: lpFileName="C:\\\\Boot\\sr-Latn-RS\\*", lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e780 [0202.779] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0202.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d280 | out: hHeap=0x1f0000) returned 1 [0202.779] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0202.779] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.779] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d280 [0202.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0202.780] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0202.780] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0202.780] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21212f9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0202.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609f0 [0202.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0202.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239b38 [0202.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0202.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d280 | out: hHeap=0x1f0000) returned 1 [0202.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609f0 | out: hHeap=0x1f0000) returned 1 [0202.780] CreateFileW (lpFileName="C:\\\\Boot\\sr-Latn-RS\\bootmgr.exe.mui" (normalized: "c:\\boot\\sr-latn-rs\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.780] GetLastError () returned 0x5 [0202.780] GetLastError () returned 0x5 [0202.780] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21212f9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0202.780] FindClose (in: hFindFile=0x24e780 | out: hFindFile=0x24e780) returned 1 [0202.781] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239b38 | out: hHeap=0x1f0000) returned 1 [0202.781] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e4f8 | out: hHeap=0x1f0000) returned 1 [0202.781] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ae0 | out: hHeap=0x1f0000) returned 1 [0202.781] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234308 | out: hHeap=0x1f0000) returned 1 [0202.781] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234110 [0202.781] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bd0 [0202.781] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e4f8 [0202.781] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0202.781] FindFirstFileW (in: lpFileName="C:\\\\Boot\\sv-SE\\*", lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01adf43, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6a2250, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e640 [0202.781] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0202.781] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d280 [0202.781] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0202.781] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0202.781] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0202.781] FindNextFileW (in: hFindFile=0x24e640, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01adf43, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6a2250, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.781] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609f0 [0202.781] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2f0 [0202.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609f0 | out: hHeap=0x1f0000) returned 1 [0202.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d280 | out: hHeap=0x1f0000) returned 1 [0202.782] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0202.782] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0202.782] FindNextFileW (in: hFindFile=0x24e640, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12960, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0202.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0202.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b80 [0202.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233c48 [0202.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b80 | out: hHeap=0x1f0000) returned 1 [0202.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0202.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0202.782] CreateFileW (lpFileName="C:\\\\Boot\\sv-SE\\bootmgr.exe.mui" (normalized: "c:\\boot\\sv-se\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.782] GetLastError () returned 0x5 [0202.782] GetLastError () returned 0x5 [0202.783] FindNextFileW (in: hFindFile=0x24e640, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6a2250, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f699a6, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xaf98, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0202.783] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ab8 [0202.783] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0202.783] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233df8 [0202.783] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0202.783] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233c48 | out: hHeap=0x1f0000) returned 1 [0202.783] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ab8 | out: hHeap=0x1f0000) returned 1 [0202.783] CreateFileW (lpFileName="C:\\\\Boot\\sv-SE\\memtest.exe.mui" (normalized: "c:\\boot\\sv-se\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.783] GetLastError () returned 0x5 [0202.783] GetLastError () returned 0x5 [0202.783] FindNextFileW (in: hFindFile=0x24e640, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6a2250, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f699a6, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xaf98, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0202.783] FindClose (in: hFindFile=0x24e640 | out: hFindFile=0x24e640) returned 1 [0202.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233df8 | out: hHeap=0x1f0000) returned 1 [0202.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e4f8 | out: hHeap=0x1f0000) returned 1 [0202.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bd0 | out: hHeap=0x1f0000) returned 1 [0202.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234110 | out: hHeap=0x1f0000) returned 1 [0202.784] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233cd8 [0202.784] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bd0 [0202.784] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e9c0 [0202.784] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0202.784] FindFirstFileW (in: lpFileName="C:\\\\Boot\\tr-TR\\*", lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206504, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6b5aca, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ea00 [0202.784] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0202.784] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d280 [0202.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0202.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0202.784] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0202.784] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206504, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6b5aca, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.784] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c20 [0202.784] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0202.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c20 | out: hHeap=0x1f0000) returned 1 [0202.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d280 | out: hHeap=0x1f0000) returned 1 [0202.785] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0202.785] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0202.785] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210e1cce, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12558, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0202.785] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b30 [0202.785] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c70 [0202.785] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234398 [0202.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c70 | out: hHeap=0x1f0000) returned 1 [0202.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0202.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b30 | out: hHeap=0x1f0000) returned 1 [0202.786] CreateFileW (lpFileName="C:\\\\Boot\\tr-TR\\bootmgr.exe.mui" (normalized: "c:\\boot\\tr-tr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.786] GetLastError () returned 0x5 [0202.786] GetLastError () returned 0x5 [0202.786] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6b5aca, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f4373a, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0202.786] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b30 [0202.786] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0202.786] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233d68 [0202.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0202.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234398 | out: hHeap=0x1f0000) returned 1 [0202.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b30 | out: hHeap=0x1f0000) returned 1 [0202.786] CreateFileW (lpFileName="C:\\\\Boot\\tr-TR\\memtest.exe.mui" (normalized: "c:\\boot\\tr-tr\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.786] GetLastError () returned 0x5 [0202.786] GetLastError () returned 0x5 [0202.787] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6b5aca, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f4373a, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0202.787] FindClose (in: hFindFile=0x24ea00 | out: hFindFile=0x24ea00) returned 1 [0202.787] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233d68 | out: hHeap=0x1f0000) returned 1 [0202.787] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e9c0 | out: hHeap=0x1f0000) returned 1 [0202.787] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bd0 | out: hHeap=0x1f0000) returned 1 [0202.787] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233cd8 | out: hHeap=0x1f0000) returned 1 [0202.787] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234230 [0202.787] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b08 [0202.787] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e4f8 [0202.787] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0202.787] FindFirstFileW (in: lpFileName="C:\\\\Boot\\uk-UA\\*", lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206a30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e800 [0202.787] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0202.787] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2f0 [0202.787] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0202.787] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0202.787] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0202.787] FindNextFileW (in: hFindFile=0x24e800, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206a30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.788] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ae0 [0202.788] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0202.788] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ae0 | out: hHeap=0x1f0000) returned 1 [0202.788] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0202.788] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0202.788] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0202.788] FindNextFileW (in: hFindFile=0x24e800, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210e1cce, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0202.788] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ae0 [0202.788] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ab8 [0202.788] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233d20 [0202.788] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ab8 | out: hHeap=0x1f0000) returned 1 [0202.788] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0202.788] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ae0 | out: hHeap=0x1f0000) returned 1 [0202.788] CreateFileW (lpFileName="C:\\\\Boot\\uk-UA\\bootmgr.exe.mui" (normalized: "c:\\boot\\uk-ua\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.788] GetLastError () returned 0x5 [0202.789] GetLastError () returned 0x5 [0202.789] FindNextFileW (in: hFindFile=0x24e800, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210e1cce, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0202.789] FindClose (in: hFindFile=0x24e800 | out: hFindFile=0x24e800) returned 1 [0202.789] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233d20 | out: hHeap=0x1f0000) returned 1 [0202.789] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e4f8 | out: hHeap=0x1f0000) returned 1 [0202.789] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b08 | out: hHeap=0x1f0000) returned 1 [0202.789] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234230 | out: hHeap=0x1f0000) returned 1 [0202.789] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2342c0 [0202.789] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ab8 [0202.789] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d6a0 [0202.789] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d280 [0202.789] FindFirstFileW (in: lpFileName="C:\\\\Boot\\zh-CN\\*", lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207100, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6d7e9a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e640 [0202.789] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ae0 [0202.789] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0202.790] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ae0 | out: hHeap=0x1f0000) returned 1 [0202.790] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d280 | out: hHeap=0x1f0000) returned 1 [0202.790] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0202.790] FindNextFileW (in: hFindFile=0x24e640, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207100, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6d7e9a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.790] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ae0 [0202.790] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d280 [0202.790] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ae0 | out: hHeap=0x1f0000) returned 1 [0202.790] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0202.790] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0202.790] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0202.790] FindNextFileW (in: hFindFile=0x24e640, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xf960, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0202.790] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609f0 [0202.790] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a18 [0202.790] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234080 [0202.790] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a18 | out: hHeap=0x1f0000) returned 1 [0202.790] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d280 | out: hHeap=0x1f0000) returned 1 [0202.790] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609f0 | out: hHeap=0x1f0000) returned 1 [0202.791] CreateFileW (lpFileName="C:\\\\Boot\\zh-CN\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-cn\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.791] GetLastError () returned 0x5 [0202.791] GetLastError () returned 0x5 [0202.791] FindNextFileW (in: hFindFile=0x24e640, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6d7e9a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa5a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0202.791] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c20 [0202.791] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ae0 [0202.791] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234470 [0202.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ae0 | out: hHeap=0x1f0000) returned 1 [0202.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234080 | out: hHeap=0x1f0000) returned 1 [0202.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c20 | out: hHeap=0x1f0000) returned 1 [0202.791] CreateFileW (lpFileName="C:\\\\Boot\\zh-CN\\memtest.exe.mui" (normalized: "c:\\boot\\zh-cn\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.792] GetLastError () returned 0x5 [0202.792] GetLastError () returned 0x5 [0202.792] FindNextFileW (in: hFindFile=0x24e640, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6d7e9a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa5a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0202.792] FindClose (in: hFindFile=0x24e640 | out: hFindFile=0x24e640) returned 1 [0202.792] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234470 | out: hHeap=0x1f0000) returned 1 [0202.792] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d6a0 | out: hHeap=0x1f0000) returned 1 [0202.792] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ab8 | out: hHeap=0x1f0000) returned 1 [0202.792] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2342c0 | out: hHeap=0x1f0000) returned 1 [0202.792] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233df8 [0202.792] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c70 [0202.792] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f350 [0202.792] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0202.792] FindFirstFileW (in: lpFileName="C:\\\\Boot\\zh-HK\\*", lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207675, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x518ea25e, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e700 [0202.792] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b80 [0202.792] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d280 [0202.792] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b80 | out: hHeap=0x1f0000) returned 1 [0202.793] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0202.793] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0202.793] FindNextFileW (in: hFindFile=0x24e700, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207675, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x518ea25e, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.793] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609c8 [0202.793] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2f0 [0202.793] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609c8 | out: hHeap=0x1f0000) returned 1 [0202.793] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d280 | out: hHeap=0x1f0000) returned 1 [0202.793] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0202.793] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0202.793] FindNextFileW (in: hFindFile=0x24e700, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xf958, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0202.793] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b08 [0202.793] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a18 [0202.793] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234110 [0202.793] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a18 | out: hHeap=0x1f0000) returned 1 [0202.793] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0202.793] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b08 | out: hHeap=0x1f0000) returned 1 [0202.794] CreateFileW (lpFileName="C:\\\\Boot\\zh-HK\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-hk\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.794] GetLastError () returned 0x5 [0202.794] GetLastError () returned 0x5 [0202.794] FindNextFileW (in: hFindFile=0x24e700, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x518ea25e, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0xe31db522, ftLastWriteTime.dwHighDateTime=0x1d112e1, nFileSizeHigh=0x0, nFileSizeLow=0xa558, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0202.794] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b08 [0202.794] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609c8 [0202.794] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234080 [0202.794] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609c8 | out: hHeap=0x1f0000) returned 1 [0202.794] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234110 | out: hHeap=0x1f0000) returned 1 [0202.794] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b08 | out: hHeap=0x1f0000) returned 1 [0202.795] CreateFileW (lpFileName="C:\\\\Boot\\zh-HK\\memtest.exe.mui" (normalized: "c:\\boot\\zh-hk\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.795] GetLastError () returned 0x5 [0202.795] GetLastError () returned 0x5 [0202.795] FindNextFileW (in: hFindFile=0x24e700, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x518ea25e, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0xe31db522, ftLastWriteTime.dwHighDateTime=0x1d112e1, nFileSizeHigh=0x0, nFileSizeLow=0xa558, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0202.795] FindClose (in: hFindFile=0x24e700 | out: hFindFile=0x24e700) returned 1 [0202.795] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234080 | out: hHeap=0x1f0000) returned 1 [0202.795] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f350 | out: hHeap=0x1f0000) returned 1 [0202.795] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c70 | out: hHeap=0x1f0000) returned 1 [0202.795] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233df8 | out: hHeap=0x1f0000) returned 1 [0202.795] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2342c0 [0202.795] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609c8 [0202.795] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f350 [0202.795] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0202.795] FindFirstFileW (in: lpFileName="C:\\\\Boot\\zh-TW\\*", lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ec00 [0202.796] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c48 [0202.796] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d280 [0202.796] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0202.796] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0202.796] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0202.796] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.796] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b30 [0202.796] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0202.796] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b30 | out: hHeap=0x1f0000) returned 1 [0202.796] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d280 | out: hHeap=0x1f0000) returned 1 [0202.796] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0202.796] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0202.796] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xf960, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0202.796] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ab8 [0202.796] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ae0 [0202.796] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234080 [0202.796] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ae0 | out: hHeap=0x1f0000) returned 1 [0202.796] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0202.796] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ab8 | out: hHeap=0x1f0000) returned 1 [0202.797] CreateFileW (lpFileName="C:\\\\Boot\\zh-TW\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-tw\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.797] GetLastError () returned 0x5 [0202.797] GetLastError () returned 0x5 [0202.797] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa598, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0202.797] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0202.797] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0202.797] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2340c8 [0202.797] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0202.797] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234080 | out: hHeap=0x1f0000) returned 1 [0202.797] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0202.798] CreateFileW (lpFileName="C:\\\\Boot\\zh-TW\\memtest.exe.mui" (normalized: "c:\\boot\\zh-tw\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.798] GetLastError () returned 0x5 [0202.798] GetLastError () returned 0x5 [0202.798] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa598, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0202.798] FindClose (in: hFindFile=0x24ec00 | out: hFindFile=0x24ec00) returned 1 [0202.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2340c8 | out: hHeap=0x1f0000) returned 1 [0202.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f350 | out: hHeap=0x1f0000) returned 1 [0202.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609c8 | out: hHeap=0x1f0000) returned 1 [0202.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2342c0 | out: hHeap=0x1f0000) returned 1 [0202.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385c8 | out: hHeap=0x1f0000) returned 1 [0202.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0202.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0202.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0202.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0202.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0202.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238258 | out: hHeap=0x1f0000) returned 1 [0202.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0202.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0202.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0202.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238438 | out: hHeap=0x1f0000) returned 1 [0202.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238348 | out: hHeap=0x1f0000) returned 1 [0202.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0202.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0202.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0202.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0202.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238460 | out: hHeap=0x1f0000) returned 1 [0202.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0202.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0202.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0202.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238488 | out: hHeap=0x1f0000) returned 1 [0202.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0202.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380c8 | out: hHeap=0x1f0000) returned 1 [0202.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0202.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238500 | out: hHeap=0x1f0000) returned 1 [0202.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238640 | out: hHeap=0x1f0000) returned 1 [0202.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238730 | out: hHeap=0x1f0000) returned 1 [0202.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0202.800] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228310 | out: hHeap=0x1f0000) returned 1 [0202.800] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238690 | out: hHeap=0x1f0000) returned 1 [0202.800] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238528 | out: hHeap=0x1f0000) returned 1 [0202.800] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238780 | out: hHeap=0x1f0000) returned 1 [0202.800] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238550 | out: hHeap=0x1f0000) returned 1 [0202.800] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0202.800] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282d8 | out: hHeap=0x1f0000) returned 1 [0202.800] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2386b8 | out: hHeap=0x1f0000) returned 1 [0202.800] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2386e0 | out: hHeap=0x1f0000) returned 1 [0202.800] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238578 | out: hHeap=0x1f0000) returned 1 [0202.800] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0202.800] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0202.800] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238668 | out: hHeap=0x1f0000) returned 1 [0202.800] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b90 | out: hHeap=0x1f0000) returned 1 [0202.800] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e828 | out: hHeap=0x1f0000) returned 1 [0202.800] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0202.800] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222298 | out: hHeap=0x1f0000) returned 1 [0202.800] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234230 [0202.800] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609c8 [0202.800] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e4f8 [0202.800] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234278 [0202.801] FindFirstFileW (in: lpFileName="C:\\\\Documents and Settings\\*", lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="Ɛ")) returned 0xffffffff [0202.802] GetLastError () returned 0x5 [0202.802] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x1a1edcc | out: lpMode=0x1a1edcc) returned 0 [0202.802] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="畦正", cchWideChar=2, lpMultiByteStr=0x1a1d9bc, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ç\x95¦æ­£", lpUsedDefaultChar=0x0) returned 6 [0202.802] WriteFile (in: hFile=0x90, lpBuffer=0x1a1d9bc, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x1a1d9b4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x1a1d9b4, lpOverlapped=0x0) returned 0 [0202.802] GetLastError () returned 0x6 [0202.802] GetLastError () returned 0x6 [0202.802] lstrcmpW (lpString1="zh-TW", lpString2=".") returned 1 [0202.802] lstrcmpW (lpString1="zh-TW", lpString2="..") returned 1 [0202.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204cd0 [0202.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239458 [0202.802] FindNextFileW (in: hFindFile=0xffffffff, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="Ɛ")) returned 0 [0202.802] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0202.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2342c0 [0202.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b08 [0202.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d6a0 [0202.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239718 [0202.803] FindFirstFileW (in: lpFileName="C:\\\\Documents and Settings\\zh-TW\\*", lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0xc0000022, ftCreationTime.dwLowDateTime=0x7726971a, ftCreationTime.dwHighDateTime=0x20dcb0, ftLastAccessTime.dwLowDateTime=0x20db90, ftLastAccessTime.dwHighDateTime=0x7726964e, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x3c003c, nFileSizeLow=0x233c90, dwReserved0=0x20002, dwReserved1=0x233ccc, cFileName="8:䉸#ơt.ex", cAlternateFileName="횠\"ơⷾ眽Ə")) returned 0xffffffff [0202.803] GetLastError () returned 0x3 [0202.803] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x1a1e9a8 | out: lpMode=0x1a1e9a8) returned 0 [0202.803] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="畦正l.mui", cchWideChar=2, lpMultiByteStr=0x1a1d598, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ç\x95¦æ­£", lpUsedDefaultChar=0x0) returned 6 [0202.803] WriteFile (in: hFile=0x90, lpBuffer=0x1a1d598, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x1a1d590, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x1a1d590, lpOverlapped=0x0) returned 0 [0202.803] GetLastError () returned 0x6 [0202.803] GetLastError () returned 0x6 [0202.803] CreateFileW (lpFileName="C:\\\\Documents and Settings\\zh-TW\\8:䉸#ơt.ex" (normalized: "c:\\documents and settings\\zh-tw\\8:䉸#ơt.ex"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.803] GetLastError () returned 0x3 [0202.803] GetLastError () returned 0x3 [0202.803] FindNextFileW (in: hFindFile=0xffffffff, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0xc0000022, ftCreationTime.dwLowDateTime=0x7726971a, ftCreationTime.dwHighDateTime=0x20dcb0, ftLastAccessTime.dwLowDateTime=0x20db90, ftLastAccessTime.dwHighDateTime=0x7726964e, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x3c003c, nFileSizeLow=0x233c90, dwReserved0=0x20002, dwReserved1=0x233ccc, cFileName="8:䉸#ơt.ex", cAlternateFileName="횠\"ơⷾ眽Ə")) returned 0 [0202.804] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0202.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218150 | out: hHeap=0x1f0000) returned 1 [0202.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d6a0 | out: hHeap=0x1f0000) returned 1 [0202.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b08 | out: hHeap=0x1f0000) returned 1 [0202.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2342c0 | out: hHeap=0x1f0000) returned 1 [0202.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c98 | out: hHeap=0x1f0000) returned 1 [0202.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239458 | out: hHeap=0x1f0000) returned 1 [0202.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cd0 | out: hHeap=0x1f0000) returned 1 [0202.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e4f8 | out: hHeap=0x1f0000) returned 1 [0202.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609c8 | out: hHeap=0x1f0000) returned 1 [0202.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234230 | out: hHeap=0x1f0000) returned 1 [0202.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2342c0 [0202.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ab8 [0202.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22ee88 [0202.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ae0 [0202.804] FindFirstFileW (in: lpFileName="C:\\\\ESD\\*", lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc1969407, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ed40 [0202.805] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b08 [0202.805] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ae0 | out: hHeap=0x1f0000) returned 1 [0202.805] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0202.805] FindNextFileW (in: hFindFile=0x24ed40, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc1969407, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.805] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0202.805] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b08 | out: hHeap=0x1f0000) returned 1 [0202.805] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0202.805] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0202.805] FindNextFileW (in: hFindFile=0x24ed40, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc1969407, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0202.805] FindClose (in: hFindFile=0x24ed40 | out: hFindFile=0x24ed40) returned 1 [0202.805] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0202.806] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ee88 | out: hHeap=0x1f0000) returned 1 [0202.806] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ab8 | out: hHeap=0x1f0000) returned 1 [0202.806] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2342c0 | out: hHeap=0x1f0000) returned 1 [0202.806] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233c48 [0202.806] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b08 [0202.806] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d9d0 [0202.806] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b80 [0202.806] FindFirstFileW (in: lpFileName="C:\\\\Logs\\*", lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf1d773, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xa03727f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xfd9ec80, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ea80 [0202.806] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c48 [0202.806] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b80 | out: hHeap=0x1f0000) returned 1 [0202.806] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0202.806] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf1d773, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xa03727f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xfd9ec80, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.807] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b30 [0202.807] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0202.807] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0202.807] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0202.807] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5052fa31, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5052fa31, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Application.evtx", cAlternateFileName="APPLIC~1.EVT")) returned 1 [0202.807] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0202.807] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609c8 [0202.807] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234080 [0202.808] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609c8 | out: hHeap=0x1f0000) returned 1 [0202.808] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b30 | out: hHeap=0x1f0000) returned 1 [0202.808] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0202.808] CreateFileW (lpFileName="C:\\\\Logs\\Application.evtx" (normalized: "c:\\logs\\application.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0202.808] GetFileType (hFile=0x210) returned 0x1 [0202.808] CloseHandle (hObject=0x210) returned 1 [0202.808] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234110 [0202.808] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Application.evtx" (normalized: "c:\\logs\\application.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5052fa31, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5052fa31, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.809] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234110 | out: hHeap=0x1f0000) returned 1 [0202.809] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233e40 [0202.809] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Application.evtx" (normalized: "c:\\logs\\application.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5052fa31, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5052fa31, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.809] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233e40 | out: hHeap=0x1f0000) returned 1 [0202.809] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233c90 [0202.809] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233c90 | out: hHeap=0x1f0000) returned 1 [0202.809] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505ee5f0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505ee5f0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="HardwareEvents.evtx", cAlternateFileName="HARDWA~1.EVT")) returned 1 [0202.809] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0202.809] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c20 [0202.809] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234158 [0202.809] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c20 | out: hHeap=0x1f0000) returned 1 [0202.809] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234080 | out: hHeap=0x1f0000) returned 1 [0202.809] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0202.810] CreateFileW (lpFileName="C:\\\\Logs\\HardwareEvents.evtx" (normalized: "c:\\logs\\hardwareevents.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0202.810] GetFileType (hFile=0x210) returned 0x1 [0202.810] CloseHandle (hObject=0x210) returned 1 [0202.810] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234080 [0202.810] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\HardwareEvents.evtx" (normalized: "c:\\logs\\hardwareevents.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505ee5f0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505ee5f0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.810] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234080 | out: hHeap=0x1f0000) returned 1 [0202.810] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233df8 [0202.810] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\HardwareEvents.evtx" (normalized: "c:\\logs\\hardwareevents.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505ee5f0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505ee5f0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.810] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233df8 | out: hHeap=0x1f0000) returned 1 [0202.810] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2342c0 [0202.811] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2342c0 | out: hHeap=0x1f0000) returned 1 [0202.811] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505a2134, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505a2134, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer.evtx", cAlternateFileName="INTERN~1.EVT")) returned 1 [0202.811] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d280 [0202.811] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bd0 [0202.811] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234230 [0202.811] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bd0 | out: hHeap=0x1f0000) returned 1 [0202.811] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234158 | out: hHeap=0x1f0000) returned 1 [0202.811] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d280 | out: hHeap=0x1f0000) returned 1 [0202.811] CreateFileW (lpFileName="C:\\\\Logs\\Internet Explorer.evtx" (normalized: "c:\\logs\\internet explorer.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0202.812] GetFileType (hFile=0x210) returned 0x1 [0202.812] CloseHandle (hObject=0x210) returned 1 [0202.812] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233f60 [0202.812] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Internet Explorer.evtx" (normalized: "c:\\logs\\internet explorer.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505a2134, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505a2134, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.812] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233f60 | out: hHeap=0x1f0000) returned 1 [0202.812] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234158 [0202.812] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Internet Explorer.evtx" (normalized: "c:\\logs\\internet explorer.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505a2134, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505a2134, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.813] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234158 | out: hHeap=0x1f0000) returned 1 [0202.813] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234470 [0202.813] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234470 | out: hHeap=0x1f0000) returned 1 [0202.813] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5057bed8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5057bed8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Key Management Service.evtx", cAlternateFileName="KEYMAN~1.EVT")) returned 1 [0202.813] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233ed0 [0202.813] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a18 [0202.813] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239770 [0202.813] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a18 | out: hHeap=0x1f0000) returned 1 [0202.813] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234230 | out: hHeap=0x1f0000) returned 1 [0202.813] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233ed0 | out: hHeap=0x1f0000) returned 1 [0202.814] CreateFileW (lpFileName="C:\\\\Logs\\Key Management Service.evtx" (normalized: "c:\\logs\\key management service.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0202.814] GetFileType (hFile=0x210) returned 0x1 [0202.814] CloseHandle (hObject=0x210) returned 1 [0202.814] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239928 [0202.814] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Key Management Service.evtx" (normalized: "c:\\logs\\key management service.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5057bed8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5057bed8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239928 | out: hHeap=0x1f0000) returned 1 [0202.815] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239a30 [0202.815] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Key Management Service.evtx" (normalized: "c:\\logs\\key management service.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5057bed8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5057bed8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239a30 | out: hHeap=0x1f0000) returned 1 [0202.815] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239a30 [0202.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239a30 | out: hHeap=0x1f0000) returned 1 [0202.815] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc1dbd7c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc1dbd7c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Client-Licensing-Platform%4Admin.evtx", cAlternateFileName="MICROS~1.EVT")) returned 1 [0202.815] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214f70 [0202.815] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b80 [0202.815] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229cf8 [0202.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b80 | out: hHeap=0x1f0000) returned 1 [0202.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239770 | out: hHeap=0x1f0000) returned 1 [0202.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f70 | out: hHeap=0x1f0000) returned 1 [0203.064] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx" (normalized: "c:\\logs\\microsoft-client-licensing-platform%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0203.065] GetFileType (hFile=0x204) returned 0x1 [0203.074] CloseHandle (hObject=0x204) returned 1 [0203.076] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229d80 [0203.076] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx" (normalized: "c:\\logs\\microsoft-client-licensing-platform%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc1dbd7c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc1dbd7c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.091] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229d80 | out: hHeap=0x1f0000) returned 1 [0203.091] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a4f0 [0203.091] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx" (normalized: "c:\\logs\\microsoft-client-licensing-platform%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc1dbd7c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc1dbd7c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.091] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a4f0 | out: hHeap=0x1f0000) returned 1 [0203.091] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229830 [0203.091] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229830 | out: hHeap=0x1f0000) returned 1 [0203.091] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca5d836e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca5d836e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx", cAlternateFileName="MICROS~2.EVT")) returned 1 [0203.091] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219cf0 [0203.092] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0203.092] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x260ff0 [0203.092] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0203.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229cf8 | out: hHeap=0x1f0000) returned 1 [0203.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219cf0 | out: hHeap=0x1f0000) returned 1 [0203.093] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx" (normalized: "c:\\logs\\microsoft-windows-application-experience%4program-compatibility-assistant.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0203.094] GetFileType (hFile=0x204) returned 0x1 [0203.094] CloseHandle (hObject=0x204) returned 1 [0203.095] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2614f8 [0203.095] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx" (normalized: "c:\\logs\\microsoft-windows-application-experience%4program-compatibility-assistant.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca5d836e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca5d836e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2614f8 | out: hHeap=0x1f0000) returned 1 [0203.095] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261440 [0203.095] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx" (normalized: "c:\\logs\\microsoft-windows-application-experience%4program-compatibility-assistant.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca5d836e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca5d836e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261440 | out: hHeap=0x1f0000) returned 1 [0203.096] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261440 [0203.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261440 | out: hHeap=0x1f0000) returned 1 [0203.096] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9206ac5, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9206ac5, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xf9c0f529, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx", cAlternateFileName="MICROS~3.EVT")) returned 1 [0203.096] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0203.096] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c48 [0203.096] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2615b0 [0203.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0203.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ff0 | out: hHeap=0x1f0000) returned 1 [0203.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0203.098] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-applicationresourcemanagementsystem%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0203.098] GetFileType (hFile=0x204) returned 0x1 [0203.098] CloseHandle (hObject=0x204) returned 1 [0203.099] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261668 [0203.099] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-applicationresourcemanagementsystem%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9206ac5, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9206ac5, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xf9c0f529, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000)) returned 1 [0203.099] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261668 | out: hHeap=0x1f0000) returned 1 [0203.099] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x260ff0 [0203.099] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-applicationresourcemanagementsystem%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9206ac5, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9206ac5, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xf9c0f529, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000)) returned 1 [0203.100] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ff0 | out: hHeap=0x1f0000) returned 1 [0203.100] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x260ff0 [0203.100] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ff0 | out: hHeap=0x1f0000) returned 1 [0203.100] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4143825, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4143825, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppLocker%4EXE and DLL.evtx", cAlternateFileName="MICROS~4.EVT")) returned 1 [0203.100] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2149c0 [0203.100] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0203.101] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a928 [0203.101] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0203.101] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2615b0 | out: hHeap=0x1f0000) returned 1 [0203.101] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2149c0 | out: hHeap=0x1f0000) returned 1 [0203.101] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-AppLocker%4EXE and DLL.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4exe and dll.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0203.102] GetFileType (hFile=0x204) returned 0x1 [0203.102] CloseHandle (hObject=0x204) returned 1 [0203.103] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ace8 [0203.103] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppLocker%4EXE and DLL.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4exe and dll.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4143825, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4143825, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.103] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ace8 | out: hHeap=0x1f0000) returned 1 [0203.103] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ad60 [0203.103] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppLocker%4EXE and DLL.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4exe and dll.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4143825, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4143825, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.104] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ad60 | out: hHeap=0x1f0000) returned 1 [0203.104] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ace8 [0203.104] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ace8 | out: hHeap=0x1f0000) returned 1 [0203.104] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4169a7a, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4169a7a, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppLocker%4MSI and Script.evtx", cAlternateFileName="MI2EEA~1.EVT")) returned 1 [0203.104] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ad60 [0203.104] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609c8 [0203.104] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a138 [0203.104] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609c8 | out: hHeap=0x1f0000) returned 1 [0203.104] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a928 | out: hHeap=0x1f0000) returned 1 [0203.105] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ad60 | out: hHeap=0x1f0000) returned 1 [0203.105] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-AppLocker%4MSI and Script.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4msi and script.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0203.106] GetFileType (hFile=0x204) returned 0x1 [0203.106] CloseHandle (hObject=0x204) returned 1 [0203.107] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229940 [0203.107] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppLocker%4MSI and Script.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4msi and script.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4169a7a, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4169a7a, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229940 | out: hHeap=0x1f0000) returned 1 [0203.107] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229b60 [0203.107] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppLocker%4MSI and Script.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4msi and script.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4169a7a, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4169a7a, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229b60 | out: hHeap=0x1f0000) returned 1 [0203.107] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a1c0 [0203.108] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a1c0 | out: hHeap=0x1f0000) returned 1 [0203.108] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd418fcc3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd418fcc3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx", cAlternateFileName="MI07E1~1.EVT")) returned 1 [0203.108] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229fa0 [0203.108] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b30 [0203.108] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0203.108] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b30 | out: hHeap=0x1f0000) returned 1 [0203.108] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a138 | out: hHeap=0x1f0000) returned 1 [0203.108] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229fa0 | out: hHeap=0x1f0000) returned 1 [0203.109] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-deployment.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0203.109] GetFileType (hFile=0x204) returned 0x1 [0203.110] CloseHandle (hObject=0x204) returned 1 [0203.111] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0203.111] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-deployment.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd418fcc3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd418fcc3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.111] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0203.111] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0203.111] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-deployment.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd418fcc3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd418fcc3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.112] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0203.112] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0203.112] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0203.112] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd418fcc3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd418fcc3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx", cAlternateFileName="MI8196~1.EVT")) returned 1 [0203.112] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a2d0 [0203.112] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ab8 [0203.112] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0203.112] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ab8 | out: hHeap=0x1f0000) returned 1 [0203.112] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0203.112] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a2d0 | out: hHeap=0x1f0000) returned 1 [0203.113] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-execution.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0203.113] GetFileType (hFile=0x204) returned 0x1 [0203.114] CloseHandle (hObject=0x204) returned 1 [0203.114] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0203.114] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-execution.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd418fcc3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd418fcc3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.114] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0203.114] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0203.114] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-execution.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd418fcc3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd418fcc3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.114] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0203.115] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0203.115] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0203.115] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd41b5f2d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd41b5f2d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppModel-Runtime%4Admin.evtx", cAlternateFileName="MIE36C~1.EVT")) returned 1 [0203.115] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214f70 [0203.115] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0203.115] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ab08 [0203.115] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0203.115] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0203.115] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f70 | out: hHeap=0x1f0000) returned 1 [0203.116] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-AppModel-Runtime%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-appmodel-runtime%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0203.116] GetFileType (hFile=0x204) returned 0x1 [0203.116] CloseHandle (hObject=0x204) returned 1 [0203.117] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ace8 [0203.117] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppModel-Runtime%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-appmodel-runtime%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd41b5f2d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd41b5f2d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.117] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ace8 | out: hHeap=0x1f0000) returned 1 [0203.117] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a9a0 [0203.117] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppModel-Runtime%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-appmodel-runtime%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd41b5f2d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd41b5f2d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.117] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a9a0 | out: hHeap=0x1f0000) returned 1 [0203.117] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a9a0 [0203.117] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a9a0 | out: hHeap=0x1f0000) returned 1 [0203.117] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd389efbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd389efbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppReadiness%4Admin.evtx", cAlternateFileName="MIC5CB~1.EVT")) returned 1 [0203.117] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2149c0 [0203.117] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0203.117] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22abf8 [0203.118] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0203.118] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab08 | out: hHeap=0x1f0000) returned 1 [0203.118] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2149c0 | out: hHeap=0x1f0000) returned 1 [0203.118] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-AppReadiness%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0203.118] GetFileType (hFile=0x204) returned 0x1 [0203.118] CloseHandle (hObject=0x204) returned 1 [0203.119] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22aa18 [0203.119] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppReadiness%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd389efbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd389efbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.119] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aa18 | out: hHeap=0x1f0000) returned 1 [0203.119] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ad60 [0203.119] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppReadiness%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd389efbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd389efbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.119] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ad60 | out: hHeap=0x1f0000) returned 1 [0203.119] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a9a0 [0203.119] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a9a0 | out: hHeap=0x1f0000) returned 1 [0203.119] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd38c5212, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd38c5212, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x111000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppReadiness%4Operational.evtx", cAlternateFileName="MIF8AA~1.EVT")) returned 1 [0203.119] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ab08 [0203.119] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609c8 [0203.119] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a3e0 [0203.119] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609c8 | out: hHeap=0x1f0000) returned 1 [0203.119] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22abf8 | out: hHeap=0x1f0000) returned 1 [0203.119] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab08 | out: hHeap=0x1f0000) returned 1 [0203.120] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-AppReadiness%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0203.120] GetFileType (hFile=0x204) returned 0x1 [0203.120] CloseHandle (hObject=0x204) returned 1 [0203.120] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a1c0 [0203.120] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppReadiness%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd38c5212, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd38c5212, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x111000)) returned 1 [0203.120] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a1c0 | out: hHeap=0x1f0000) returned 1 [0203.121] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a248 [0203.121] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppReadiness%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd38c5212, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd38c5212, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x111000)) returned 1 [0203.121] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a248 | out: hHeap=0x1f0000) returned 1 [0203.121] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a1c0 [0203.121] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a1c0 | out: hHeap=0x1f0000) returned 1 [0203.121] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4143825, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4143825, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppXDeployment%4Operational.evtx", cAlternateFileName="MI34FE~1.EVT")) returned 1 [0203.121] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a8b0 [0203.121] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a90 [0203.121] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229e08 [0203.121] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a90 | out: hHeap=0x1f0000) returned 1 [0203.121] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a3e0 | out: hHeap=0x1f0000) returned 1 [0203.121] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a8b0 | out: hHeap=0x1f0000) returned 1 [0203.121] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-AppXDeployment%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeployment%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0203.122] GetFileType (hFile=0x204) returned 0x1 [0203.122] CloseHandle (hObject=0x204) returned 1 [0203.122] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229be8 [0203.122] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppXDeployment%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeployment%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4143825, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4143825, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.122] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229be8 | out: hHeap=0x1f0000) returned 1 [0203.122] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229a50 [0203.122] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppXDeployment%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeployment%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4143825, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4143825, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.122] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229a50 | out: hHeap=0x1f0000) returned 1 [0203.122] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a138 [0203.123] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a138 | out: hHeap=0x1f0000) returned 1 [0203.123] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5af3554f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5af3554f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x211000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppXDeploymentServer%4Operational.evtx", cAlternateFileName="MIA24C~1.EVT")) returned 1 [0203.123] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a138 [0203.123] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c20 [0203.123] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0203.123] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c20 | out: hHeap=0x1f0000) returned 1 [0203.123] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229e08 | out: hHeap=0x1f0000) returned 1 [0203.123] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a138 | out: hHeap=0x1f0000) returned 1 [0203.124] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0203.124] GetFileType (hFile=0x204) returned 0x1 [0203.124] CloseHandle (hObject=0x204) returned 1 [0203.124] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0203.124] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5af3554f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5af3554f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x211000)) returned 1 [0203.125] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0203.125] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0203.125] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5af3554f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5af3554f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x211000)) returned 1 [0203.125] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0203.125] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0203.125] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0203.125] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5af3554f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5af3554f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx", cAlternateFileName="MIDBEC~1.EVT")) returned 1 [0203.125] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22af40 [0203.125] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c48 [0203.125] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0203.125] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0203.125] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0203.125] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22af40 | out: hHeap=0x1f0000) returned 1 [0203.126] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4restricted.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0203.533] GetFileType (hFile=0x204) returned 0x1 [0203.533] CloseHandle (hObject=0x204) returned 1 [0203.534] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0203.534] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4restricted.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5af3554f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5af3554f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.534] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0203.534] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0203.534] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4restricted.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5af3554f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5af3554f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.535] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0203.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0203.535] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0203.535] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85798667, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x85798667, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppxPackaging%4Operational.evtx", cAlternateFileName="MI54F1~1.EVT")) returned 1 [0203.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ab08 [0203.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609c8 [0203.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229ad8 [0203.535] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609c8 | out: hHeap=0x1f0000) returned 1 [0203.535] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0203.535] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab08 | out: hHeap=0x1f0000) returned 1 [0203.535] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-AppxPackaging%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxpackaging%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0203.535] GetFileType (hFile=0x204) returned 0x1 [0203.536] CloseHandle (hObject=0x204) returned 1 [0203.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a3e0 [0203.536] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppxPackaging%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxpackaging%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85798667, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x85798667, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.536] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a3e0 | out: hHeap=0x1f0000) returned 1 [0203.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a0b0 [0203.536] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppxPackaging%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxpackaging%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85798667, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x85798667, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.536] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a0b0 | out: hHeap=0x1f0000) returned 1 [0203.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229cf8 [0203.536] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229cf8 | out: hHeap=0x1f0000) returned 1 [0203.536] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd74d25ab, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd74d25ab, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx", cAlternateFileName="MI111F~1.EVT")) returned 1 [0203.537] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0203.537] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c48 [0203.537] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219ee8 [0203.537] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0203.537] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229ad8 | out: hHeap=0x1f0000) returned 1 [0203.537] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0203.537] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-backgroundtaskinfrastructure%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0203.537] GetFileType (hFile=0x204) returned 0x1 [0203.538] CloseHandle (hObject=0x204) returned 1 [0203.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a8c0 [0203.538] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-backgroundtaskinfrastructure%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd74d25ab, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd74d25ab, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.538] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a8c0 | out: hHeap=0x1f0000) returned 1 [0203.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219d98 [0203.538] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-backgroundtaskinfrastructure%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd74d25ab, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd74d25ab, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.538] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219d98 | out: hHeap=0x1f0000) returned 1 [0203.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a4d0 [0203.538] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a4d0 | out: hHeap=0x1f0000) returned 1 [0203.538] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1f96ca4, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xe1f96ca4, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Bits-Client%4Operational.evtx", cAlternateFileName="MI9465~1.EVT")) returned 1 [0203.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214af8 [0203.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c48 [0203.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229f18 [0203.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0203.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219ee8 | out: hHeap=0x1f0000) returned 1 [0203.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214af8 | out: hHeap=0x1f0000) returned 1 [0203.539] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Bits-Client%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-bits-client%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0203.539] GetFileType (hFile=0x204) returned 0x1 [0203.539] CloseHandle (hObject=0x204) returned 1 [0203.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229fa0 [0203.539] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Bits-Client%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-bits-client%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1f96ca4, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xe1f96ca4, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229fa0 | out: hHeap=0x1f0000) returned 1 [0203.540] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2299c8 [0203.540] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Bits-Client%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-bits-client%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1f96ca4, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xe1f96ca4, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.540] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2299c8 | out: hHeap=0x1f0000) returned 1 [0203.540] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a028 [0203.540] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a028 | out: hHeap=0x1f0000) returned 1 [0203.540] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8783aa15, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8783aa15, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-CodeIntegrity%4Operational.evtx", cAlternateFileName="MI03A7~1.EVT")) returned 1 [0203.540] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22af40 [0203.540] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c48 [0203.540] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229d80 [0203.541] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0203.541] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229f18 | out: hHeap=0x1f0000) returned 1 [0203.541] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22af40 | out: hHeap=0x1f0000) returned 1 [0203.541] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-CodeIntegrity%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-codeintegrity%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0203.541] GetFileType (hFile=0x204) returned 0x1 [0203.541] CloseHandle (hObject=0x204) returned 1 [0203.541] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a2d0 [0203.541] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-CodeIntegrity%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-codeintegrity%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8783aa15, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8783aa15, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.541] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a2d0 | out: hHeap=0x1f0000) returned 1 [0203.541] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a688 [0203.542] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-CodeIntegrity%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-codeintegrity%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8783aa15, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8783aa15, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.542] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a688 | out: hHeap=0x1f0000) returned 1 [0203.542] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2299c8 [0203.542] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2299c8 | out: hHeap=0x1f0000) returned 1 [0203.542] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c3c71c5, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8c3c71c5, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx", cAlternateFileName="MI5CA2~1.EVT")) returned 1 [0203.542] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a3e0 [0203.542] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c48 [0203.542] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a620 [0203.542] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0203.542] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229d80 | out: hHeap=0x1f0000) returned 1 [0203.542] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a3e0 | out: hHeap=0x1f0000) returned 1 [0203.542] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-coresystem-smsrouter-events%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0203.542] GetFileType (hFile=0x204) returned 0x1 [0203.543] CloseHandle (hObject=0x204) returned 1 [0203.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219e40 [0203.543] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-coresystem-smsrouter-events%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c3c71c5, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8c3c71c5, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.543] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219e40 | out: hHeap=0x1f0000) returned 1 [0203.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a770 [0203.543] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-coresystem-smsrouter-events%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c3c71c5, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8c3c71c5, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.543] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a770 | out: hHeap=0x1f0000) returned 1 [0203.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219e40 [0203.543] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219e40 | out: hHeap=0x1f0000) returned 1 [0203.543] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc9231, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cc9231, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx", cAlternateFileName="MI5FD1~1.EVT")) returned 1 [0203.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ace8 [0203.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c48 [0203.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229fa0 [0203.543] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0203.543] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a620 | out: hHeap=0x1f0000) returned 1 [0203.544] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ace8 | out: hHeap=0x1f0000) returned 1 [0203.544] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4backupkeysvc.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0203.544] GetFileType (hFile=0x204) returned 0x1 [0203.544] CloseHandle (hObject=0x204) returned 1 [0203.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a028 [0203.544] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4backupkeysvc.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc9231, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cc9231, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.544] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a028 | out: hHeap=0x1f0000) returned 1 [0203.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a4f0 [0203.544] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4backupkeysvc.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc9231, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cc9231, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.545] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a4f0 | out: hHeap=0x1f0000) returned 1 [0203.545] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a710 [0203.545] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a710 | out: hHeap=0x1f0000) returned 1 [0203.545] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ca2fbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ca2fbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Crypto-DPAPI%4Operational.evtx", cAlternateFileName="MI8BDF~1.EVT")) returned 1 [0203.545] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ab80 [0203.545] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c48 [0203.545] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a3e0 [0203.545] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0203.545] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229fa0 | out: hHeap=0x1f0000) returned 1 [0203.545] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab80 | out: hHeap=0x1f0000) returned 1 [0203.545] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0203.545] GetFileType (hFile=0x204) returned 0x1 [0203.545] CloseHandle (hObject=0x204) returned 1 [0203.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229f18 [0203.546] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ca2fbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ca2fbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.546] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229f18 | out: hHeap=0x1f0000) returned 1 [0203.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229f18 [0203.546] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ca2fbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ca2fbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.546] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229f18 | out: hHeap=0x1f0000) returned 1 [0203.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229cf8 [0203.546] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229cf8 | out: hHeap=0x1f0000) returned 1 [0203.546] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c3ed420, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8c3ed420, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx", cAlternateFileName="MIAEBD~1.EVT")) returned 1 [0203.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a188 [0203.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c48 [0203.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2610a8 [0203.546] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0203.546] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a3e0 | out: hHeap=0x1f0000) returned 1 [0203.546] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a188 | out: hHeap=0x1f0000) returned 1 [0203.547] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-devicemanagement-enterprise-diagnostics-provider%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0203.547] GetFileType (hFile=0x204) returned 0x1 [0203.547] CloseHandle (hObject=0x204) returned 1 [0203.547] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2614f8 [0203.547] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-devicemanagement-enterprise-diagnostics-provider%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c3ed420, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8c3ed420, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x101000)) returned 1 [0203.547] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2614f8 | out: hHeap=0x1f0000) returned 1 [0203.547] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261160 [0203.547] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-devicemanagement-enterprise-diagnostics-provider%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c3ed420, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8c3ed420, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x101000)) returned 1 [0203.547] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261160 | out: hHeap=0x1f0000) returned 1 [0203.547] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261388 [0203.548] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261388 | out: hHeap=0x1f0000) returned 1 [0203.548] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cef47f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cef47f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-DeviceSetupManager%4Admin.evtx", cAlternateFileName="MIA726~1.EVT")) returned 1 [0203.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a838 [0203.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c48 [0203.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229830 [0203.548] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0203.548] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2610a8 | out: hHeap=0x1f0000) returned 1 [0203.548] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a838 | out: hHeap=0x1f0000) returned 1 [0203.548] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-DeviceSetupManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0203.548] GetFileType (hFile=0x204) returned 0x1 [0203.549] CloseHandle (hObject=0x204) returned 1 [0203.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a4f0 [0203.549] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-DeviceSetupManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cef47f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cef47f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.549] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a4f0 | out: hHeap=0x1f0000) returned 1 [0203.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229cf8 [0203.549] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-DeviceSetupManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cef47f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cef47f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.549] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229cf8 | out: hHeap=0x1f0000) returned 1 [0203.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229f18 [0203.549] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229f18 | out: hHeap=0x1f0000) returned 1 [0203.549] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc9231, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cc9231, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-DeviceSetupManager%4Operational.evtx", cAlternateFileName="MI08CB~1.EVT")) returned 1 [0203.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a928 [0203.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c48 [0203.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229fa0 [0203.549] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0203.549] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229830 | out: hHeap=0x1f0000) returned 1 [0203.549] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a928 | out: hHeap=0x1f0000) returned 1 [0203.550] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-DeviceSetupManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0203.550] GetFileType (hFile=0x204) returned 0x1 [0203.550] CloseHandle (hObject=0x204) returned 1 [0203.550] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229f18 [0203.550] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-DeviceSetupManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc9231, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cc9231, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.550] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229f18 | out: hHeap=0x1f0000) returned 1 [0203.550] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a028 [0203.550] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-DeviceSetupManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc9231, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cc9231, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.551] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a028 | out: hHeap=0x1f0000) returned 1 [0203.551] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a3e0 [0203.551] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a3e0 | out: hHeap=0x1f0000) returned 1 [0203.551] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc967f17e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc967f17e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Dhcp-Client%4Admin.evtx", cAlternateFileName="MI8270~1.EVT")) returned 1 [0203.551] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214fd8 [0203.551] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c48 [0203.551] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22aa90 [0203.551] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0203.551] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229fa0 | out: hHeap=0x1f0000) returned 1 [0203.551] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214fd8 | out: hHeap=0x1f0000) returned 1 [0203.551] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Dhcp-Client%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-dhcp-client%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0203.551] GetFileType (hFile=0x204) returned 0x1 [0203.552] CloseHandle (hObject=0x204) returned 1 [0203.552] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ab08 [0203.552] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Dhcp-Client%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-dhcp-client%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc967f17e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc967f17e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.552] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab08 | out: hHeap=0x1f0000) returned 1 [0203.552] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22af40 [0203.552] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Dhcp-Client%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-dhcp-client%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc967f17e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc967f17e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.552] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22af40 | out: hHeap=0x1f0000) returned 1 [0203.552] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ab08 [0203.552] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab08 | out: hHeap=0x1f0000) returned 1 [0203.552] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc96cb64b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc96cb64b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Dhcpv6-Client%4Admin.evtx", cAlternateFileName="MIEBFF~1.EVT")) returned 1 [0203.552] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214bc8 [0203.552] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c48 [0203.552] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ab80 [0203.552] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0203.553] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aa90 | out: hHeap=0x1f0000) returned 1 [0203.553] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214bc8 | out: hHeap=0x1f0000) returned 1 [0203.553] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-dhcpv6-client%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0203.553] GetFileType (hFile=0x204) returned 0x1 [0203.553] CloseHandle (hObject=0x204) returned 1 [0203.553] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ace8 [0203.553] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-dhcpv6-client%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc96cb64b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc96cb64b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.553] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ace8 | out: hHeap=0x1f0000) returned 1 [0203.553] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ace8 [0203.554] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-dhcpv6-client%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc96cb64b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc96cb64b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.554] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ace8 | out: hHeap=0x1f0000) returned 1 [0203.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22af40 [0203.554] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22af40 | out: hHeap=0x1f0000) returned 1 [0203.554] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca64aa7b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca64aa7b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Diagnosis-DPS%4Operational.evtx", cAlternateFileName="MI9F85~1.EVT")) returned 1 [0203.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22abf8 [0203.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c48 [0203.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229830 [0203.554] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0203.554] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab80 | out: hHeap=0x1f0000) returned 1 [0203.554] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22abf8 | out: hHeap=0x1f0000) returned 1 [0203.554] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-diagnosis-dps%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0203.554] GetFileType (hFile=0x204) returned 0x1 [0203.555] CloseHandle (hObject=0x204) returned 1 [0203.555] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a028 [0203.555] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-diagnosis-dps%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca64aa7b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca64aa7b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.555] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a028 | out: hHeap=0x1f0000) returned 1 [0203.555] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2299c8 [0203.555] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-diagnosis-dps%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca64aa7b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca64aa7b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.555] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2299c8 | out: hHeap=0x1f0000) returned 1 [0203.555] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a3e0 [0203.555] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a3e0 | out: hHeap=0x1f0000) returned 1 [0203.555] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd9ec80, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xfd9ec80, ftLastAccessTime.dwHighDateTime=0x1d1a04f, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Diagnostics-Performance%4Operational.evtx", cAlternateFileName="MIBE3D~1.EVT")) returned 1 [0203.555] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229ad8 [0203.555] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609c8 [0203.555] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0203.555] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609c8 | out: hHeap=0x1f0000) returned 1 [0203.555] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229830 | out: hHeap=0x1f0000) returned 1 [0203.556] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229ad8 | out: hHeap=0x1f0000) returned 1 [0203.556] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-diagnostics-performance%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0203.556] GetFileType (hFile=0x204) returned 0x1 [0203.556] CloseHandle (hObject=0x204) returned 1 [0203.556] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0203.556] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-diagnostics-performance%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd9ec80, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xfd9ec80, ftLastAccessTime.dwHighDateTime=0x1d1a04f, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.556] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0203.556] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0203.557] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-diagnostics-performance%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd9ec80, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xfd9ec80, ftLastAccessTime.dwHighDateTime=0x1d1a04f, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.557] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0203.557] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0203.557] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0203.557] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9658ef3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9658ef3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-GroupPolicy%4Operational.evtx", cAlternateFileName="MIE38D~1.EVT")) returned 1 [0203.557] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x215040 [0203.557] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c48 [0203.557] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a3e0 [0203.557] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0203.557] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0203.557] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215040 | out: hHeap=0x1f0000) returned 1 [0203.557] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-GroupPolicy%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-grouppolicy%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0203.557] GetFileType (hFile=0x204) returned 0x1 [0203.558] CloseHandle (hObject=0x204) returned 1 [0203.558] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229cf8 [0203.558] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-GroupPolicy%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-grouppolicy%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9658ef3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9658ef3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.558] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229cf8 | out: hHeap=0x1f0000) returned 1 [0203.558] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2299c8 [0203.558] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-GroupPolicy%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-grouppolicy%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9658ef3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9658ef3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.558] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2299c8 | out: hHeap=0x1f0000) returned 1 [0203.558] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a688 [0203.558] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a688 | out: hHeap=0x1f0000) returned 1 [0203.558] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9dcc480, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9dcc480, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-HotspotAuth%4Operational.evtx", cAlternateFileName="MIE386~1.EVT")) returned 1 [0203.558] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a90 [0203.558] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c48 [0203.559] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2299c8 [0203.559] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0203.559] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a3e0 | out: hHeap=0x1f0000) returned 1 [0203.559] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a90 | out: hHeap=0x1f0000) returned 1 [0203.559] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-HotspotAuth%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-hotspotauth%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0203.559] GetFileType (hFile=0x204) returned 0x1 [0203.559] CloseHandle (hObject=0x204) returned 1 [0203.559] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a248 [0203.559] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-HotspotAuth%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-hotspotauth%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9dcc480, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9dcc480, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.560] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a248 | out: hHeap=0x1f0000) returned 1 [0203.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a578 [0203.560] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-HotspotAuth%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-hotspotauth%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9dcc480, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9dcc480, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.560] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a578 | out: hHeap=0x1f0000) returned 1 [0203.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a578 [0203.560] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a578 | out: hHeap=0x1f0000) returned 1 [0203.560] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50b4bacf, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50b4bacf, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx", cAlternateFileName="MI6B25~1.EVT")) returned 1 [0203.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22af40 [0203.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c48 [0203.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a248 [0203.560] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0203.560] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2299c8 | out: hHeap=0x1f0000) returned 1 [0203.560] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22af40 | out: hHeap=0x1f0000) returned 1 [0203.561] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-hyper-v-guest-drivers%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0203.561] GetFileType (hFile=0x204) returned 0x1 [0203.561] CloseHandle (hObject=0x204) returned 1 [0203.561] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229cf8 [0203.561] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-hyper-v-guest-drivers%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50b4bacf, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50b4bacf, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.561] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229cf8 | out: hHeap=0x1f0000) returned 1 [0203.561] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a600 [0203.561] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-hyper-v-guest-drivers%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50b4bacf, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50b4bacf, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.562] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a600 | out: hHeap=0x1f0000) returned 1 [0203.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2299c8 [0203.562] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2299c8 | out: hHeap=0x1f0000) returned 1 [0203.562] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb66288f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb66288f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-International%4Operational.evtx", cAlternateFileName="MI854A~1.EVT")) returned 1 [0203.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ab08 [0203.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c48 [0203.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a3e0 [0203.562] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0203.562] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a248 | out: hHeap=0x1f0000) returned 1 [0203.562] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab08 | out: hHeap=0x1f0000) returned 1 [0203.562] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-International%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-international%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0203.562] GetFileType (hFile=0x204) returned 0x1 [0203.563] CloseHandle (hObject=0x204) returned 1 [0203.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a028 [0203.563] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-International%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-international%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb66288f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb66288f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a028 | out: hHeap=0x1f0000) returned 1 [0203.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a0b0 [0203.563] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-International%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-international%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb66288f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb66288f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a0b0 | out: hHeap=0x1f0000) returned 1 [0203.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a600 [0203.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a600 | out: hHeap=0x1f0000) returned 1 [0203.563] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x506ad1ac, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x506ad1ac, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-Boot%4Operational.evtx", cAlternateFileName="MI32CE~1.EVT")) returned 1 [0203.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x215040 [0203.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c48 [0203.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a4f0 [0203.564] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0203.564] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a3e0 | out: hHeap=0x1f0000) returned 1 [0203.564] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215040 | out: hHeap=0x1f0000) returned 1 [0203.564] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-Boot%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-boot%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0203.565] GetFileType (hFile=0x204) returned 0x1 [0203.565] CloseHandle (hObject=0x204) returned 1 [0203.565] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2299c8 [0203.565] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-Boot%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-boot%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x506ad1ac, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x506ad1ac, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.565] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2299c8 | out: hHeap=0x1f0000) returned 1 [0203.565] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2299c8 [0203.565] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-Boot%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-boot%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x506ad1ac, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x506ad1ac, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.565] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2299c8 | out: hHeap=0x1f0000) returned 1 [0203.565] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a3e0 [0203.566] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a3e0 | out: hHeap=0x1f0000) returned 1 [0203.566] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ca2fbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ca2fbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-EventTracing%4Admin.evtx", cAlternateFileName="MIA934~1.EVT")) returned 1 [0203.566] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a928 [0203.566] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c70 [0203.566] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a248 [0203.566] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c70 | out: hHeap=0x1f0000) returned 1 [0203.566] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a4f0 | out: hHeap=0x1f0000) returned 1 [0203.566] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a928 | out: hHeap=0x1f0000) returned 1 [0203.566] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-eventtracing%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0203.566] GetFileType (hFile=0x204) returned 0x1 [0203.567] CloseHandle (hObject=0x204) returned 1 [0203.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a2d0 [0203.567] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-eventtracing%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ca2fbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ca2fbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a2d0 | out: hHeap=0x1f0000) returned 1 [0203.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a2d0 [0203.567] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-eventtracing%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ca2fbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ca2fbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a2d0 | out: hHeap=0x1f0000) returned 1 [0203.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229830 [0203.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229830 | out: hHeap=0x1f0000) returned 1 [0203.567] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5071f8b0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5071f8b0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-PnP%4Configuration.evtx", cAlternateFileName="MIB32D~1.EVT")) returned 1 [0203.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ace8 [0203.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c48 [0203.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2299c8 [0203.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0203.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a248 | out: hHeap=0x1f0000) returned 1 [0203.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ace8 | out: hHeap=0x1f0000) returned 1 [0203.568] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-PnP%4Configuration.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-pnp%4configuration.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0203.568] GetFileType (hFile=0x204) returned 0x1 [0203.569] CloseHandle (hObject=0x204) returned 1 [0203.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229b60 [0203.569] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-PnP%4Configuration.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-pnp%4configuration.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5071f8b0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5071f8b0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000)) returned 1 [0203.569] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229b60 | out: hHeap=0x1f0000) returned 1 [0203.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a248 [0203.569] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-PnP%4Configuration.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-pnp%4configuration.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5071f8b0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5071f8b0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000)) returned 1 [0203.569] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a248 | out: hHeap=0x1f0000) returned 1 [0203.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229fa0 [0203.569] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229fa0 | out: hHeap=0x1f0000) returned 1 [0203.569] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8ebf6d7, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc8ebf6d7, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx", cAlternateFileName="MICA77~1.EVT")) returned 1 [0203.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a4f0 [0203.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c48 [0203.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0203.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0203.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2299c8 | out: hHeap=0x1f0000) returned 1 [0203.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a4f0 | out: hHeap=0x1f0000) returned 1 [0203.570] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-power%4thermal-operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0203.570] GetFileType (hFile=0x204) returned 0x1 [0203.570] CloseHandle (hObject=0x204) returned 1 [0203.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0203.570] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-power%4thermal-operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8ebf6d7, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc8ebf6d7, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0203.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0203.571] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-power%4thermal-operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8ebf6d7, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc8ebf6d7, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0203.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0203.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0203.571] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5090f75d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5090f75d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx", cAlternateFileName="MI1E8D~1.EVT")) returned 1 [0203.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22af40 [0203.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c48 [0203.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229f18 [0203.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0203.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0203.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22af40 | out: hHeap=0x1f0000) returned 1 [0203.572] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-shimengine%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0203.572] GetFileType (hFile=0x204) returned 0x1 [0203.572] CloseHandle (hObject=0x204) returned 1 [0203.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a4f0 [0203.573] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-shimengine%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5090f75d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5090f75d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a4f0 | out: hHeap=0x1f0000) returned 1 [0203.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229cf8 [0203.573] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-shimengine%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5090f75d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5090f75d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229cf8 | out: hHeap=0x1f0000) returned 1 [0203.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a4f0 [0203.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a4f0 | out: hHeap=0x1f0000) returned 1 [0203.574] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd75102f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcd75102f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx", cAlternateFileName="MID067~1.EVT")) returned 1 [0203.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ab08 [0203.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c48 [0203.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a248 [0203.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0203.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229f18 | out: hHeap=0x1f0000) returned 1 [0203.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab08 | out: hHeap=0x1f0000) returned 1 [0203.575] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-storemgr%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0203.575] GetFileType (hFile=0x204) returned 0x1 [0203.576] CloseHandle (hObject=0x204) returned 1 [0203.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229ad8 [0203.576] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-storemgr%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd75102f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcd75102f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.576] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229ad8 | out: hHeap=0x1f0000) returned 1 [0203.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229ad8 [0203.576] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-storemgr%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd75102f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcd75102f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.576] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229ad8 | out: hHeap=0x1f0000) returned 1 [0203.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2299c8 [0203.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2299c8 | out: hHeap=0x1f0000) returned 1 [0203.577] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50be4414, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50be4414, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-WHEA%4Errors.evtx", cAlternateFileName="MIDE4D~1.EVT")) returned 1 [0203.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214ea0 [0203.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c70 [0203.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22aa90 [0203.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c70 | out: hHeap=0x1f0000) returned 1 [0203.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a248 | out: hHeap=0x1f0000) returned 1 [0203.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214ea0 | out: hHeap=0x1f0000) returned 1 [0203.578] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-WHEA%4Errors.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4errors.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0203.578] GetFileType (hFile=0x204) returned 0x1 [0203.578] CloseHandle (hObject=0x204) returned 1 [0203.578] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22af40 [0203.578] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-WHEA%4Errors.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4errors.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50be4414, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50be4414, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.579] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22af40 | out: hHeap=0x1f0000) returned 1 [0203.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a9a0 [0203.579] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-WHEA%4Errors.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4errors.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50be4414, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50be4414, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.579] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a9a0 | out: hHeap=0x1f0000) returned 1 [0203.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a838 [0203.579] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a838 | out: hHeap=0x1f0000) returned 1 [0203.579] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50be4414, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50be4414, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-WHEA%4Operational.evtx", cAlternateFileName="MI36C5~1.EVT")) returned 1 [0203.830] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214fd8 [0203.830] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b30 [0203.830] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a248 [0203.830] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b30 | out: hHeap=0x1f0000) returned 1 [0203.830] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aa90 | out: hHeap=0x1f0000) returned 1 [0203.830] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214fd8 | out: hHeap=0x1f0000) returned 1 [0203.831] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-WHEA%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0203.831] GetFileType (hFile=0x204) returned 0x1 [0203.831] CloseHandle (hObject=0x204) returned 1 [0203.831] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a2d0 [0203.831] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-WHEA%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50be4414, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50be4414, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.832] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a2d0 | out: hHeap=0x1f0000) returned 1 [0203.832] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a2d0 [0203.832] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-WHEA%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50be4414, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50be4414, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.832] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a2d0 | out: hHeap=0x1f0000) returned 1 [0203.832] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229be8 [0203.832] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229be8 | out: hHeap=0x1f0000) returned 1 [0203.832] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59547c37, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x59547c37, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Known Folders API Service.evtx", cAlternateFileName="MI86D6~1.EVT")) returned 1 [0203.832] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ab08 [0203.832] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ba8 [0203.832] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229be8 [0203.832] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ba8 | out: hHeap=0x1f0000) returned 1 [0203.832] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a248 | out: hHeap=0x1f0000) returned 1 [0203.832] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab08 | out: hHeap=0x1f0000) returned 1 [0203.833] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Known Folders API Service.evtx" (normalized: "c:\\logs\\microsoft-windows-known folders api service.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0203.833] GetFileType (hFile=0x204) returned 0x1 [0203.833] CloseHandle (hObject=0x204) returned 1 [0203.833] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229a50 [0203.833] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Known Folders API Service.evtx" (normalized: "c:\\logs\\microsoft-windows-known folders api service.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59547c37, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x59547c37, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.833] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229a50 | out: hHeap=0x1f0000) returned 1 [0203.833] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a248 [0203.833] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Known Folders API Service.evtx" (normalized: "c:\\logs\\microsoft-windows-known folders api service.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59547c37, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x59547c37, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.834] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a248 | out: hHeap=0x1f0000) returned 1 [0203.834] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a578 [0203.834] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a578 | out: hHeap=0x1f0000) returned 1 [0203.834] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbb7386e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcbb7386e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-LiveId%4Operational.evtx", cAlternateFileName="MI4C58~1.EVT")) returned 1 [0203.834] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214ea0 [0203.834] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ba8 [0203.834] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ace8 [0203.834] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ba8 | out: hHeap=0x1f0000) returned 1 [0203.834] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229be8 | out: hHeap=0x1f0000) returned 1 [0203.834] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214ea0 | out: hHeap=0x1f0000) returned 1 [0203.834] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-LiveId%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-liveid%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0203.834] GetFileType (hFile=0x204) returned 0x1 [0203.835] CloseHandle (hObject=0x204) returned 1 [0203.835] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22af40 [0203.835] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-LiveId%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-liveid%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbb7386e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcbb7386e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.835] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22af40 | out: hHeap=0x1f0000) returned 1 [0203.835] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22abf8 [0203.835] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-LiveId%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-liveid%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbb7386e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcbb7386e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.835] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22abf8 | out: hHeap=0x1f0000) returned 1 [0203.835] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22af40 [0203.835] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22af40 | out: hHeap=0x1f0000) returned 1 [0203.835] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc93d06f0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc93d06f0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-MUI%4Admin.evtx", cAlternateFileName="MI30D3~1.EVT")) returned 1 [0203.835] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239928 [0203.835] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b30 [0203.835] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214af8 [0203.836] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b30 | out: hHeap=0x1f0000) returned 1 [0203.836] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ace8 | out: hHeap=0x1f0000) returned 1 [0203.836] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239928 | out: hHeap=0x1f0000) returned 1 [0203.836] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-MUI%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-mui%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0203.836] GetFileType (hFile=0x204) returned 0x1 [0203.836] CloseHandle (hObject=0x204) returned 1 [0203.836] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a90 [0203.836] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-MUI%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-mui%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc93d06f0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc93d06f0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.837] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a90 | out: hHeap=0x1f0000) returned 1 [0203.837] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d00 [0203.837] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-MUI%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-mui%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc93d06f0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc93d06f0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.837] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d00 | out: hHeap=0x1f0000) returned 1 [0203.837] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2149c0 [0203.837] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2149c0 | out: hHeap=0x1f0000) returned 1 [0203.837] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc93aa49b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc93aa49b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-MUI%4Operational.evtx", cAlternateFileName="MI6F01~1.EVT")) returned 1 [0203.837] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239668 [0203.837] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a68 [0203.837] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22af40 [0203.837] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a68 | out: hHeap=0x1f0000) returned 1 [0203.837] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214af8 | out: hHeap=0x1f0000) returned 1 [0203.837] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239668 | out: hHeap=0x1f0000) returned 1 [0203.838] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-MUI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-mui%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0203.838] GetFileType (hFile=0x204) returned 0x1 [0203.838] CloseHandle (hObject=0x204) returned 1 [0203.838] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ace8 [0203.838] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-MUI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-mui%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc93aa49b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc93aa49b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.838] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ace8 | out: hHeap=0x1f0000) returned 1 [0203.838] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22aa90 [0203.838] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-MUI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-mui%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc93aa49b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc93aa49b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.838] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aa90 | out: hHeap=0x1f0000) returned 1 [0203.838] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22aa90 [0203.839] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aa90 | out: hHeap=0x1f0000) returned 1 [0203.839] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9d33b19, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9d33b19, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-NCSI%4Operational.evtx", cAlternateFileName="MI483C~1.EVT")) returned 1 [0203.839] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214af8 [0203.839] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b58 [0203.839] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a838 [0203.839] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b58 | out: hHeap=0x1f0000) returned 1 [0203.839] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22af40 | out: hHeap=0x1f0000) returned 1 [0203.839] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214af8 | out: hHeap=0x1f0000) returned 1 [0203.839] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-NCSI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-ncsi%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0203.839] GetFileType (hFile=0x204) returned 0x1 [0203.840] CloseHandle (hObject=0x204) returned 1 [0203.840] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a9a0 [0203.840] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-NCSI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-ncsi%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9d33b19, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9d33b19, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.840] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a9a0 | out: hHeap=0x1f0000) returned 1 [0203.840] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ace8 [0203.840] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-NCSI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-ncsi%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9d33b19, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9d33b19, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.840] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ace8 | out: hHeap=0x1f0000) returned 1 [0203.840] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22abf8 [0203.840] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22abf8 | out: hHeap=0x1f0000) returned 1 [0203.840] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbcf0ff2, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcbcf0ff2, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-NetworkProfile%4Operational.evtx", cAlternateFileName="MIFC66~1.EVT")) returned 1 [0203.840] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ace8 [0203.840] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ba8 [0203.840] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229e08 [0203.840] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ba8 | out: hHeap=0x1f0000) returned 1 [0203.841] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a838 | out: hHeap=0x1f0000) returned 1 [0203.841] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ace8 | out: hHeap=0x1f0000) returned 1 [0203.841] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-NetworkProfile%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-networkprofile%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0203.841] GetFileType (hFile=0x204) returned 0x1 [0203.841] CloseHandle (hObject=0x204) returned 1 [0203.841] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2299c8 [0203.841] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-NetworkProfile%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-networkprofile%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbcf0ff2, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcbcf0ff2, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.841] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2299c8 | out: hHeap=0x1f0000) returned 1 [0203.841] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a028 [0203.841] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-NetworkProfile%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-networkprofile%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbcf0ff2, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcbcf0ff2, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.842] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a028 | out: hHeap=0x1f0000) returned 1 [0203.842] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a4f0 [0203.842] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a4f0 | out: hHeap=0x1f0000) returned 1 [0203.842] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ab3154, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ab3154, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Ntfs%4Operational.evtx", cAlternateFileName="MI6E98~1.EVT")) returned 1 [0203.842] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c98 [0203.842] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c70 [0203.842] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22af40 [0203.842] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c70 | out: hHeap=0x1f0000) returned 1 [0203.842] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229e08 | out: hHeap=0x1f0000) returned 1 [0203.842] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c98 | out: hHeap=0x1f0000) returned 1 [0203.842] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Ntfs%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-ntfs%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0203.842] GetFileType (hFile=0x204) returned 0x1 [0203.842] CloseHandle (hObject=0x204) returned 1 [0203.842] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a838 [0203.842] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Ntfs%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-ntfs%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ab3154, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ab3154, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.843] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a838 | out: hHeap=0x1f0000) returned 1 [0203.843] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a838 [0203.843] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Ntfs%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-ntfs%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ab3154, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ab3154, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.843] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a838 | out: hHeap=0x1f0000) returned 1 [0203.843] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a928 [0203.843] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a928 | out: hHeap=0x1f0000) returned 1 [0203.843] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ad9393, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ad9393, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Ntfs%4WHC.evtx", cAlternateFileName="MIB2AC~1.EVT")) returned 1 [0203.843] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2399d8 [0203.843] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ba8 [0203.843] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214af8 [0203.843] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ba8 | out: hHeap=0x1f0000) returned 1 [0203.843] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22af40 | out: hHeap=0x1f0000) returned 1 [0203.843] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2399d8 | out: hHeap=0x1f0000) returned 1 [0203.843] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Ntfs%4WHC.evtx" (normalized: "c:\\logs\\microsoft-windows-ntfs%4whc.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0203.843] GetFileType (hFile=0x204) returned 0x1 [0203.843] CloseHandle (hObject=0x204) returned 1 [0203.844] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214f08 [0203.844] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Ntfs%4WHC.evtx" (normalized: "c:\\logs\\microsoft-windows-ntfs%4whc.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ad9393, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ad9393, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.844] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f08 | out: hHeap=0x1f0000) returned 1 [0203.844] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a90 [0203.844] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Ntfs%4WHC.evtx" (normalized: "c:\\logs\\microsoft-windows-ntfs%4whc.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ad9393, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ad9393, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.844] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a90 | out: hHeap=0x1f0000) returned 1 [0203.844] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a90 [0203.844] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a90 | out: hHeap=0x1f0000) returned 1 [0203.844] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca5fe5cb, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca5fe5cb, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx", cAlternateFileName="MI6AFE~1.EVT")) returned 1 [0203.844] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a380 [0203.844] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c70 [0203.844] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261440 [0203.844] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c70 | out: hHeap=0x1f0000) returned 1 [0203.844] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214af8 | out: hHeap=0x1f0000) returned 1 [0203.844] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a380 | out: hHeap=0x1f0000) returned 1 [0203.844] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx" (normalized: "c:\\logs\\microsoft-windows-program-compatibility-assistant%4compatafterupgrade.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0203.845] GetFileType (hFile=0x204) returned 0x1 [0203.845] CloseHandle (hObject=0x204) returned 1 [0203.845] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2614f8 [0203.845] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx" (normalized: "c:\\logs\\microsoft-windows-program-compatibility-assistant%4compatafterupgrade.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca5fe5cb, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca5fe5cb, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.845] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2614f8 | out: hHeap=0x1f0000) returned 1 [0203.845] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261668 [0203.845] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx" (normalized: "c:\\logs\\microsoft-windows-program-compatibility-assistant%4compatafterupgrade.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca5fe5cb, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca5fe5cb, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.845] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261668 | out: hHeap=0x1f0000) returned 1 [0203.845] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2610a8 [0203.845] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2610a8 | out: hHeap=0x1f0000) returned 1 [0203.845] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe24cdef0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xe24cdef0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-ReadyBoost%4Operational.evtx", cAlternateFileName="MIB9D2~1.EVT")) returned 1 [0203.845] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214fd8 [0203.845] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c48 [0203.845] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ab08 [0203.846] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0203.846] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261440 | out: hHeap=0x1f0000) returned 1 [0203.846] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214fd8 | out: hHeap=0x1f0000) returned 1 [0203.846] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-ReadyBoost%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-readyboost%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0203.846] GetFileType (hFile=0x204) returned 0x1 [0203.846] CloseHandle (hObject=0x204) returned 1 [0203.846] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ab80 [0203.846] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-ReadyBoost%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-readyboost%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe24cdef0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xe24cdef0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.846] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab80 | out: hHeap=0x1f0000) returned 1 [0203.846] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22aa90 [0203.846] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-ReadyBoost%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-readyboost%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe24cdef0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xe24cdef0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.846] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aa90 | out: hHeap=0x1f0000) returned 1 [0203.846] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ab80 [0203.846] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab80 | out: hHeap=0x1f0000) returned 1 [0203.846] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd125335f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd125335f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx", cAlternateFileName="MI7A67~1.EVT")) returned 1 [0203.847] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0203.847] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c48 [0203.847] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219e40 [0203.847] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0203.847] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab08 | out: hHeap=0x1f0000) returned 1 [0203.847] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0203.847] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-resource-exhaustion-detector%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0203.847] GetFileType (hFile=0x204) returned 0x1 [0203.847] CloseHandle (hObject=0x204) returned 1 [0203.847] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219c48 [0203.847] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-resource-exhaustion-detector%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd125335f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd125335f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.847] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219c48 | out: hHeap=0x1f0000) returned 1 [0203.847] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219c48 [0203.847] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-resource-exhaustion-detector%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd125335f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd125335f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.848] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219c48 | out: hHeap=0x1f0000) returned 1 [0203.848] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a770 [0203.848] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a770 | out: hHeap=0x1f0000) returned 1 [0203.848] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1fe2941, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd1fe2941, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SettingSync%4Debug.evtx", cAlternateFileName="MI3773~1.EVT")) returned 1 [0203.848] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a90 [0203.848] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0203.848] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ab80 [0203.848] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0203.848] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219e40 | out: hHeap=0x1f0000) returned 1 [0203.848] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a90 | out: hHeap=0x1f0000) returned 1 [0203.848] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-SettingSync%4Debug.evtx" (normalized: "c:\\logs\\microsoft-windows-settingsync%4debug.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0203.848] GetFileType (hFile=0x204) returned 0x1 [0203.848] CloseHandle (hObject=0x204) returned 1 [0203.848] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a928 [0203.849] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-SettingSync%4Debug.evtx" (normalized: "c:\\logs\\microsoft-windows-settingsync%4debug.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1fe2941, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd1fe2941, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000)) returned 1 [0203.849] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a928 | out: hHeap=0x1f0000) returned 1 [0203.849] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ab08 [0203.849] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-SettingSync%4Debug.evtx" (normalized: "c:\\logs\\microsoft-windows-settingsync%4debug.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1fe2941, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd1fe2941, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000)) returned 1 [0203.849] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab08 | out: hHeap=0x1f0000) returned 1 [0203.849] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ab08 [0203.849] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab08 | out: hHeap=0x1f0000) returned 1 [0203.849] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1fe2941, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd1fe2941, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SettingSync%4Operational.evtx", cAlternateFileName="MI36AA~1.EVT")) returned 1 [0203.849] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2149c0 [0203.849] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b30 [0203.849] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a2d0 [0203.849] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b30 | out: hHeap=0x1f0000) returned 1 [0203.849] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab80 | out: hHeap=0x1f0000) returned 1 [0203.849] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2149c0 | out: hHeap=0x1f0000) returned 1 [0203.849] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-SettingSync%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-settingsync%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0203.849] GetFileType (hFile=0x204) returned 0x1 [0203.850] CloseHandle (hObject=0x204) returned 1 [0203.850] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a3e0 [0203.850] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-SettingSync%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-settingsync%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1fe2941, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd1fe2941, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.850] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a3e0 | out: hHeap=0x1f0000) returned 1 [0203.850] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229cf8 [0203.850] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-SettingSync%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-settingsync%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1fe2941, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd1fe2941, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.850] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229cf8 | out: hHeap=0x1f0000) returned 1 [0203.850] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229be8 [0203.850] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229be8 | out: hHeap=0x1f0000) returned 1 [0203.850] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3852b12, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd3852b12, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Shell-Core%4ActionCenter.evtx", cAlternateFileName="MI2E2E~1.EVT")) returned 1 [0203.850] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214f08 [0203.850] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c48 [0203.850] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229fa0 [0203.851] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0203.851] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a2d0 | out: hHeap=0x1f0000) returned 1 [0203.851] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f08 | out: hHeap=0x1f0000) returned 1 [0203.851] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Shell-Core%4ActionCenter.evtx" (normalized: "c:\\logs\\microsoft-windows-shell-core%4actioncenter.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0203.851] GetFileType (hFile=0x204) returned 0x1 [0203.851] CloseHandle (hObject=0x204) returned 1 [0203.851] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229ad8 [0203.851] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Shell-Core%4ActionCenter.evtx" (normalized: "c:\\logs\\microsoft-windows-shell-core%4actioncenter.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3852b12, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd3852b12, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.851] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229ad8 | out: hHeap=0x1f0000) returned 1 [0203.851] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229f18 [0203.851] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Shell-Core%4ActionCenter.evtx" (normalized: "c:\\logs\\microsoft-windows-shell-core%4actioncenter.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3852b12, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd3852b12, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.852] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229f18 | out: hHeap=0x1f0000) returned 1 [0203.852] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a248 [0203.852] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a248 | out: hHeap=0x1f0000) returned 1 [0203.852] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3852b12, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd3852b12, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Shell-Core%4Operational.evtx", cAlternateFileName="MI1C6C~1.EVT")) returned 1 [0203.852] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214fd8 [0203.852] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b58 [0203.852] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22af40 [0203.852] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b58 | out: hHeap=0x1f0000) returned 1 [0203.852] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229fa0 | out: hHeap=0x1f0000) returned 1 [0203.852] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214fd8 | out: hHeap=0x1f0000) returned 1 [0203.852] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Shell-Core%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-shell-core%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0203.852] GetFileType (hFile=0x204) returned 0x1 [0203.853] CloseHandle (hObject=0x204) returned 1 [0203.853] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ab80 [0203.853] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Shell-Core%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-shell-core%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3852b12, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd3852b12, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.853] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab80 | out: hHeap=0x1f0000) returned 1 [0203.853] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a838 [0203.853] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Shell-Core%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-shell-core%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3852b12, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd3852b12, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.853] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a838 | out: hHeap=0x1f0000) returned 1 [0203.853] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ab80 [0203.853] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab80 | out: hHeap=0x1f0000) returned 1 [0203.853] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97d66c8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97d66c8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SmbClient%4Connectivity.evtx", cAlternateFileName="MI00FB~1.EVT")) returned 1 [0203.853] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214ea0 [0203.853] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c48 [0203.853] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22aa90 [0203.853] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0203.853] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22af40 | out: hHeap=0x1f0000) returned 1 [0203.853] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214ea0 | out: hHeap=0x1f0000) returned 1 [0203.854] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-SmbClient%4Connectivity.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4connectivity.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0203.854] GetFileType (hFile=0x204) returned 0x1 [0203.854] CloseHandle (hObject=0x204) returned 1 [0203.854] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a928 [0203.854] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-SmbClient%4Connectivity.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4connectivity.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97d66c8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97d66c8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.854] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a928 | out: hHeap=0x1f0000) returned 1 [0203.854] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22af40 [0203.854] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-SmbClient%4Connectivity.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4connectivity.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97d66c8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97d66c8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.854] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22af40 | out: hHeap=0x1f0000) returned 1 [0203.855] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ace8 [0203.855] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ace8 | out: hHeap=0x1f0000) returned 1 [0203.855] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97b042f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97b042f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SMBClient%4Operational.evtx", cAlternateFileName="MID8B0~1.EVT")) returned 1 [0203.855] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214ea0 [0203.855] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c48 [0203.855] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ab08 [0203.855] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0203.855] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aa90 | out: hHeap=0x1f0000) returned 1 [0203.855] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214ea0 | out: hHeap=0x1f0000) returned 1 [0203.855] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-SMBClient%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0203.855] GetFileType (hFile=0x204) returned 0x1 [0203.855] CloseHandle (hObject=0x204) returned 1 [0203.856] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22af40 [0203.856] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-SMBClient%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97b042f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97b042f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.856] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22af40 | out: hHeap=0x1f0000) returned 1 [0203.856] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22af40 [0203.856] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-SMBClient%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97b042f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97b042f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.856] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22af40 | out: hHeap=0x1f0000) returned 1 [0203.856] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22aa90 [0203.856] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aa90 | out: hHeap=0x1f0000) returned 1 [0203.856] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97d66c8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97d66c8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SmbClient%4Security.evtx", cAlternateFileName="MI8CEE~1.EVT")) returned 1 [0203.856] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c98 [0203.856] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0203.856] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ace8 [0203.856] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0203.856] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab08 | out: hHeap=0x1f0000) returned 1 [0203.856] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c98 | out: hHeap=0x1f0000) returned 1 [0203.856] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-SmbClient%4Security.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4security.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0203.857] GetFileType (hFile=0x204) returned 0x1 [0203.857] CloseHandle (hObject=0x204) returned 1 [0203.857] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22af40 [0203.857] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-SmbClient%4Security.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4security.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97d66c8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97d66c8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.857] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22af40 | out: hHeap=0x1f0000) returned 1 [0203.857] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a928 [0203.857] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-SmbClient%4Security.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4security.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97d66c8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97d66c8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.857] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a928 | out: hHeap=0x1f0000) returned 1 [0203.857] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22af40 [0203.857] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22af40 | out: hHeap=0x1f0000) returned 1 [0203.857] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb1ea1c9, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb1ea1c9, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SMBServer%4Audit.evtx", cAlternateFileName="MIE3AD~1.EVT")) returned 1 [0203.858] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2399d8 [0203.858] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c48 [0203.858] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22af40 [0203.858] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0203.858] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ace8 | out: hHeap=0x1f0000) returned 1 [0203.858] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2399d8 | out: hHeap=0x1f0000) returned 1 [0203.858] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-SMBServer%4Audit.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4audit.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0203.859] GetFileType (hFile=0x204) returned 0x1 [0203.859] CloseHandle (hObject=0x204) returned 1 [0203.859] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a838 [0203.859] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-SMBServer%4Audit.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4audit.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb1ea1c9, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb1ea1c9, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.859] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a838 | out: hHeap=0x1f0000) returned 1 [0203.859] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ace8 [0203.859] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-SMBServer%4Audit.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4audit.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb1ea1c9, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb1ea1c9, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.859] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ace8 | out: hHeap=0x1f0000) returned 1 [0203.859] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22aa90 [0203.859] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aa90 | out: hHeap=0x1f0000) returned 1 [0203.859] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb19dd19, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb19dd19, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SMBServer%4Connectivity.evtx", cAlternateFileName="MI8248~1.EVT")) returned 1 [0203.859] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c30 [0203.859] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c48 [0203.859] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a838 [0203.860] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0203.860] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22af40 | out: hHeap=0x1f0000) returned 1 [0203.860] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c30 | out: hHeap=0x1f0000) returned 1 [0203.860] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-SMBServer%4Connectivity.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4connectivity.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0203.860] GetFileType (hFile=0x204) returned 0x1 [0203.860] CloseHandle (hObject=0x204) returned 1 [0203.860] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22abf8 [0203.860] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-SMBServer%4Connectivity.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4connectivity.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb19dd19, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb19dd19, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.860] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22abf8 | out: hHeap=0x1f0000) returned 1 [0203.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22af40 [0203.861] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-SMBServer%4Connectivity.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4connectivity.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb19dd19, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb19dd19, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.861] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22af40 | out: hHeap=0x1f0000) returned 1 [0203.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ace8 [0203.861] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ace8 | out: hHeap=0x1f0000) returned 1 [0203.861] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb151873, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb151873, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SMBServer%4Operational.evtx", cAlternateFileName="MI4B6B~1.EVT")) returned 1 [0203.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214ea0 [0203.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b58 [0203.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a9a0 [0203.861] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b58 | out: hHeap=0x1f0000) returned 1 [0203.861] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a838 | out: hHeap=0x1f0000) returned 1 [0203.861] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214ea0 | out: hHeap=0x1f0000) returned 1 [0203.862] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-SMBServer%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0203.862] GetFileType (hFile=0x204) returned 0x1 [0203.862] CloseHandle (hObject=0x204) returned 1 [0203.862] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22af40 [0203.862] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-SMBServer%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb151873, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb151873, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.862] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22af40 | out: hHeap=0x1f0000) returned 1 [0203.862] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22af40 [0203.862] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-SMBServer%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb151873, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb151873, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.862] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22af40 | out: hHeap=0x1f0000) returned 1 [0203.862] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a928 [0203.862] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a928 | out: hHeap=0x1f0000) returned 1 [0203.863] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb177aca, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb177aca, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SMBServer%4Security.evtx", cAlternateFileName="MI7709~1.EVT")) returned 1 [0203.863] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c30 [0203.863] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609f0 [0203.863] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a838 [0203.863] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609f0 | out: hHeap=0x1f0000) returned 1 [0203.863] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a9a0 | out: hHeap=0x1f0000) returned 1 [0203.863] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c30 | out: hHeap=0x1f0000) returned 1 [0203.863] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-SMBServer%4Security.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4security.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0203.863] GetFileType (hFile=0x204) returned 0x1 [0203.863] CloseHandle (hObject=0x204) returned 1 [0203.863] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22aa90 [0203.864] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-SMBServer%4Security.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4security.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb177aca, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb177aca, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aa90 | out: hHeap=0x1f0000) returned 1 [0203.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22af40 [0203.864] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-SMBServer%4Security.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4security.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb177aca, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb177aca, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22af40 | out: hHeap=0x1f0000) returned 1 [0203.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22af40 [0203.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22af40 | out: hHeap=0x1f0000) returned 1 [0203.864] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd751ea61, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd751ea61, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Store%4Operational.evtx", cAlternateFileName="MICEDD~1.EVT")) returned 1 [0203.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214b60 [0203.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ba8 [0203.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22af40 [0203.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ba8 | out: hHeap=0x1f0000) returned 1 [0203.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a838 | out: hHeap=0x1f0000) returned 1 [0203.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214b60 | out: hHeap=0x1f0000) returned 1 [0203.864] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Store%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-store%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0203.865] GetFileType (hFile=0x204) returned 0x1 [0203.865] CloseHandle (hObject=0x204) returned 1 [0203.865] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ace8 [0203.865] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Store%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-store%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd751ea61, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd751ea61, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.865] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ace8 | out: hHeap=0x1f0000) returned 1 [0203.865] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a928 [0203.865] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Store%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-store%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd751ea61, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd751ea61, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.865] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a928 | out: hHeap=0x1f0000) returned 1 [0203.865] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a9a0 [0203.865] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a9a0 | out: hHeap=0x1f0000) returned 1 [0203.865] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd0763ff, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcd0763ff, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-TaskScheduler%4Maintenance.evtx", cAlternateFileName="MIE2F0~1.EVT")) returned 1 [0203.865] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a838 [0203.865] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ba8 [0203.865] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229fa0 [0203.865] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ba8 | out: hHeap=0x1f0000) returned 1 [0203.865] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22af40 | out: hHeap=0x1f0000) returned 1 [0203.865] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a838 | out: hHeap=0x1f0000) returned 1 [0203.866] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-TaskScheduler%4Maintenance.evtx" (normalized: "c:\\logs\\microsoft-windows-taskscheduler%4maintenance.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0203.866] GetFileType (hFile=0x204) returned 0x1 [0203.866] CloseHandle (hObject=0x204) returned 1 [0203.866] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a4f0 [0203.866] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-TaskScheduler%4Maintenance.evtx" (normalized: "c:\\logs\\microsoft-windows-taskscheduler%4maintenance.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd0763ff, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcd0763ff, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.866] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a4f0 | out: hHeap=0x1f0000) returned 1 [0203.866] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a248 [0203.866] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-TaskScheduler%4Maintenance.evtx" (normalized: "c:\\logs\\microsoft-windows-taskscheduler%4maintenance.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd0763ff, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcd0763ff, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a248 | out: hHeap=0x1f0000) returned 1 [0203.867] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a248 [0203.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a248 | out: hHeap=0x1f0000) returned 1 [0203.867] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5089d037, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5089d037, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx", cAlternateFileName="MIAB1D~1.EVT")) returned 1 [0203.867] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0203.867] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ba8 [0203.867] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a038 [0203.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ba8 | out: hHeap=0x1f0000) returned 1 [0203.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229fa0 | out: hHeap=0x1f0000) returned 1 [0203.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0203.867] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0203.867] GetFileType (hFile=0x204) returned 0x1 [0203.867] CloseHandle (hObject=0x204) returned 1 [0203.868] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a578 [0203.868] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5089d037, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5089d037, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a578 | out: hHeap=0x1f0000) returned 1 [0203.868] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21aa10 [0203.868] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5089d037, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5089d037, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21aa10 | out: hHeap=0x1f0000) returned 1 [0203.868] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219ee8 [0203.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219ee8 | out: hHeap=0x1f0000) returned 1 [0203.868] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x508c32a6, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x508c32a6, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx", cAlternateFileName="MI62D3~1.EVT")) returned 1 [0203.868] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a620 [0203.868] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c70 [0203.868] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261668 [0203.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c70 | out: hHeap=0x1f0000) returned 1 [0203.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a038 | out: hHeap=0x1f0000) returned 1 [0203.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a620 | out: hHeap=0x1f0000) returned 1 [0203.869] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0203.869] GetFileType (hFile=0x204) returned 0x1 [0203.869] CloseHandle (hObject=0x204) returned 1 [0203.869] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261440 [0203.869] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x508c32a6, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x508c32a6, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.869] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261440 | out: hHeap=0x1f0000) returned 1 [0203.869] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261160 [0203.869] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x508c32a6, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x508c32a6, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.869] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261160 | out: hHeap=0x1f0000) returned 1 [0203.869] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261440 [0203.870] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261440 | out: hHeap=0x1f0000) returned 1 [0203.870] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc14341c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc14341c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx", cAlternateFileName="MIEC03~1.EVT")) returned 1 [0203.870] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0203.870] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ba8 [0203.870] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219cf0 [0203.870] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ba8 | out: hHeap=0x1f0000) returned 1 [0203.870] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261668 | out: hHeap=0x1f0000) returned 1 [0203.870] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0203.870] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0203.870] GetFileType (hFile=0x204) returned 0x1 [0203.870] CloseHandle (hObject=0x204) returned 1 [0203.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a4d0 [0203.871] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc14341c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc14341c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a4d0 | out: hHeap=0x1f0000) returned 1 [0203.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a0e0 [0203.871] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc14341c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc14341c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a0e0 | out: hHeap=0x1f0000) returned 1 [0203.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a6c8 [0203.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a6c8 | out: hHeap=0x1f0000) returned 1 [0203.871] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc1b5b23, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc1b5b23, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx", cAlternateFileName="MI1F5D~1.EVT")) returned 1 [0203.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a4d0 [0203.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0203.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2612d0 [0203.872] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0203.872] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219cf0 | out: hHeap=0x1f0000) returned 1 [0203.872] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a4d0 | out: hHeap=0x1f0000) returned 1 [0203.872] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0203.872] GetFileType (hFile=0x204) returned 0x1 [0203.872] CloseHandle (hObject=0x204) returned 1 [0203.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x260ff0 [0203.873] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc1b5b23, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc1b5b23, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.873] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ff0 | out: hHeap=0x1f0000) returned 1 [0203.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2614f8 [0203.873] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc1b5b23, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc1b5b23, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.873] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2614f8 | out: hHeap=0x1f0000) returned 1 [0203.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261440 [0203.873] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261440 | out: hHeap=0x1f0000) returned 1 [0203.873] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd74ac348, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd74ac348, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-TWinUI%4Operational.evtx", cAlternateFileName="MIA925~1.EVT")) returned 1 [0203.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214ea0 [0203.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609f0 [0203.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ace8 [0203.874] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609f0 | out: hHeap=0x1f0000) returned 1 [0203.874] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2612d0 | out: hHeap=0x1f0000) returned 1 [0203.874] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214ea0 | out: hHeap=0x1f0000) returned 1 [0203.874] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-TWinUI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-twinui%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0203.874] GetFileType (hFile=0x204) returned 0x1 [0203.874] CloseHandle (hObject=0x204) returned 1 [0203.874] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22af40 [0203.874] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-TWinUI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-twinui%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd74ac348, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd74ac348, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22af40 | out: hHeap=0x1f0000) returned 1 [0203.875] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a9a0 [0203.875] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-TWinUI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-twinui%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd74ac348, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd74ac348, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a9a0 | out: hHeap=0x1f0000) returned 1 [0203.875] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22af40 [0203.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22af40 | out: hHeap=0x1f0000) returned 1 [0203.875] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50aff605, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50aff605, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-User Profile Service%4Operational.evtx", cAlternateFileName="MI4D4C~1.EVT")) returned 1 [0203.875] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229be8 [0203.875] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c48 [0203.875] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0203.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0203.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ace8 | out: hHeap=0x1f0000) returned 1 [0203.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229be8 | out: hHeap=0x1f0000) returned 1 [0203.875] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-User Profile Service%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-user profile service%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0203.875] GetFileType (hFile=0x204) returned 0x1 [0203.876] CloseHandle (hObject=0x204) returned 1 [0203.876] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0203.876] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-User Profile Service%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-user profile service%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50aff605, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50aff605, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.876] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0204.189] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0204.189] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-User Profile Service%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-user profile service%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50aff605, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50aff605, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.190] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0204.190] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0204.190] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0204.190] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50981e6e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50981e6e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-UserPnp%4ActionCenter.evtx", cAlternateFileName="MI5FF0~1.EVT")) returned 1 [0204.190] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214ea0 [0204.190] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b30 [0204.190] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a928 [0204.190] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b30 | out: hHeap=0x1f0000) returned 1 [0204.190] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0204.190] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214ea0 | out: hHeap=0x1f0000) returned 1 [0204.190] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-UserPnp%4ActionCenter.evtx" (normalized: "c:\\logs\\microsoft-windows-userpnp%4actioncenter.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0204.191] GetFileType (hFile=0x204) returned 0x1 [0204.191] CloseHandle (hObject=0x204) returned 1 [0204.191] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a9a0 [0204.191] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-UserPnp%4ActionCenter.evtx" (normalized: "c:\\logs\\microsoft-windows-userpnp%4actioncenter.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50981e6e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50981e6e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.191] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a9a0 | out: hHeap=0x1f0000) returned 1 [0204.191] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a9a0 [0204.191] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-UserPnp%4ActionCenter.evtx" (normalized: "c:\\logs\\microsoft-windows-userpnp%4actioncenter.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50981e6e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50981e6e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.191] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a9a0 | out: hHeap=0x1f0000) returned 1 [0204.191] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a9a0 [0204.192] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a9a0 | out: hHeap=0x1f0000) returned 1 [0204.192] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5095bc04, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5095bc04, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-UserPnp%4DeviceInstall.evtx", cAlternateFileName="MIBD88~1.EVT")) returned 1 [0204.192] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214af8 [0204.192] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0204.192] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22aa90 [0204.192] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0204.192] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a928 | out: hHeap=0x1f0000) returned 1 [0204.192] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214af8 | out: hHeap=0x1f0000) returned 1 [0204.192] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-UserPnp%4DeviceInstall.evtx" (normalized: "c:\\logs\\microsoft-windows-userpnp%4deviceinstall.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0204.192] GetFileType (hFile=0x204) returned 0x1 [0204.192] CloseHandle (hObject=0x204) returned 1 [0204.193] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ace8 [0204.193] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-UserPnp%4DeviceInstall.evtx" (normalized: "c:\\logs\\microsoft-windows-userpnp%4deviceinstall.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5095bc04, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5095bc04, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.193] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ace8 | out: hHeap=0x1f0000) returned 1 [0204.193] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a928 [0204.193] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-UserPnp%4DeviceInstall.evtx" (normalized: "c:\\logs\\microsoft-windows-userpnp%4deviceinstall.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5095bc04, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5095bc04, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.193] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a928 | out: hHeap=0x1f0000) returned 1 [0204.193] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ab08 [0204.193] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab08 | out: hHeap=0x1f0000) returned 1 [0204.193] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50b97f64, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50b97f64, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx", cAlternateFileName="MICC17~1.EVT")) returned 1 [0204.193] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a3e0 [0204.193] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c70 [0204.193] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0204.193] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c70 | out: hHeap=0x1f0000) returned 1 [0204.193] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aa90 | out: hHeap=0x1f0000) returned 1 [0204.193] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a3e0 | out: hHeap=0x1f0000) returned 1 [0204.194] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-volumesnapshot-driver%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0204.194] GetFileType (hFile=0x204) returned 0x1 [0204.194] CloseHandle (hObject=0x204) returned 1 [0204.194] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0204.194] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-volumesnapshot-driver%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50b97f64, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50b97f64, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.194] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0204.194] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0204.194] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-volumesnapshot-driver%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50b97f64, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50b97f64, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.195] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0204.195] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0204.195] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0204.195] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc986efe1, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc986efe1, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Wcmsvc%4Operational.evtx", cAlternateFileName="MI72BF~1.EVT")) returned 1 [0204.195] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214fd8 [0204.195] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a68 [0204.195] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a9a0 [0204.195] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a68 | out: hHeap=0x1f0000) returned 1 [0204.195] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0204.195] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214fd8 | out: hHeap=0x1f0000) returned 1 [0204.195] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Wcmsvc%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-wcmsvc%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0204.196] GetFileType (hFile=0x204) returned 0x1 [0204.196] CloseHandle (hObject=0x204) returned 1 [0204.196] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ace8 [0204.196] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Wcmsvc%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-wcmsvc%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc986efe1, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc986efe1, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.196] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ace8 | out: hHeap=0x1f0000) returned 1 [0204.196] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22abf8 [0204.196] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Wcmsvc%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-wcmsvc%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc986efe1, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc986efe1, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.196] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22abf8 | out: hHeap=0x1f0000) returned 1 [0204.196] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a928 [0204.196] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a928 | out: hHeap=0x1f0000) returned 1 [0204.197] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb426548, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb426548, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Windows Defender%4Operational.evtx", cAlternateFileName="MI7501~1.EVT")) returned 1 [0204.197] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22abf8 [0204.197] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ae0 [0204.197] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2299c8 [0204.197] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ae0 | out: hHeap=0x1f0000) returned 1 [0204.197] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a9a0 | out: hHeap=0x1f0000) returned 1 [0204.197] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22abf8 | out: hHeap=0x1f0000) returned 1 [0204.197] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Windows Defender%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-windows defender%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0204.197] GetFileType (hFile=0x204) returned 0x1 [0204.197] CloseHandle (hObject=0x204) returned 1 [0204.197] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a028 [0204.197] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Windows Defender%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-windows defender%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb426548, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb426548, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.197] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a028 | out: hHeap=0x1f0000) returned 1 [0204.198] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a4f0 [0204.198] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Windows Defender%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-windows defender%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb426548, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb426548, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.198] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a4f0 | out: hHeap=0x1f0000) returned 1 [0204.198] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a710 [0204.198] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a710 | out: hHeap=0x1f0000) returned 1 [0204.198] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb4729e7, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb4729e7, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Windows Defender%4WHC.evtx", cAlternateFileName="MIF226~1.EVT")) returned 1 [0204.198] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214f08 [0204.198] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a68 [0204.198] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a928 [0204.198] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a68 | out: hHeap=0x1f0000) returned 1 [0204.198] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2299c8 | out: hHeap=0x1f0000) returned 1 [0204.198] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f08 | out: hHeap=0x1f0000) returned 1 [0204.198] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Windows Defender%4WHC.evtx" (normalized: "c:\\logs\\microsoft-windows-windows defender%4whc.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0204.198] GetFileType (hFile=0x204) returned 0x1 [0204.199] CloseHandle (hObject=0x204) returned 1 [0204.199] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a9a0 [0204.199] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Windows Defender%4WHC.evtx" (normalized: "c:\\logs\\microsoft-windows-windows defender%4whc.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb4729e7, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb4729e7, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.199] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a9a0 | out: hHeap=0x1f0000) returned 1 [0204.199] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22aa90 [0204.199] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Windows Defender%4WHC.evtx" (normalized: "c:\\logs\\microsoft-windows-windows defender%4whc.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb4729e7, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb4729e7, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.199] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aa90 | out: hHeap=0x1f0000) returned 1 [0204.199] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a9a0 [0204.199] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a9a0 | out: hHeap=0x1f0000) returned 1 [0204.199] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4b19353, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4b19353, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx", cAlternateFileName="MIDCC7~1.EVT")) returned 1 [0204.199] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2610a8 [0204.199] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609c8 [0204.199] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x230000 [0204.199] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609c8 | out: hHeap=0x1f0000) returned 1 [0204.199] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a928 | out: hHeap=0x1f0000) returned 1 [0204.199] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2610a8 | out: hHeap=0x1f0000) returned 1 [0204.200] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4connectionsecurity.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0204.200] GetFileType (hFile=0x204) returned 0x1 [0204.200] CloseHandle (hObject=0x204) returned 1 [0204.200] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f6a0 [0204.200] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4connectionsecurity.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4b19353, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4b19353, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.200] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0204.200] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f6a0 [0204.200] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4connectionsecurity.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4b19353, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4b19353, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.200] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0204.200] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x2303e8 [0204.201] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0204.201] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9c9b1b6, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9c9b1b6, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx", cAlternateFileName="MI7771~1.EVT")) returned 1 [0204.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a4d0 [0204.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b30 [0204.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2614f8 [0204.201] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b30 | out: hHeap=0x1f0000) returned 1 [0204.201] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0204.201] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a4d0 | out: hHeap=0x1f0000) returned 1 [0204.202] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4firewall.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0204.202] GetFileType (hFile=0x204) returned 0x1 [0204.202] CloseHandle (hObject=0x204) returned 1 [0204.202] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261668 [0204.203] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4firewall.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9c9b1b6, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9c9b1b6, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000)) returned 1 [0204.203] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261668 | out: hHeap=0x1f0000) returned 1 [0204.203] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2610a8 [0204.203] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4firewall.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9c9b1b6, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9c9b1b6, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000)) returned 1 [0204.203] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2610a8 | out: hHeap=0x1f0000) returned 1 [0204.203] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2615b0 [0204.203] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2615b0 | out: hHeap=0x1f0000) returned 1 [0204.203] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9df26e9, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9df26e9, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx", cAlternateFileName="MI4667~1.EVT")) returned 1 [0204.203] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229f18 [0204.203] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c48 [0204.203] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0204.203] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0204.203] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2614f8 | out: hHeap=0x1f0000) returned 1 [0204.203] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229f18 | out: hHeap=0x1f0000) returned 1 [0204.204] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx" (normalized: "c:\\logs\\microsoft-windows-wininet-config%4proxyconfigchanged.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0204.204] GetFileType (hFile=0x204) returned 0x1 [0204.205] CloseHandle (hObject=0x204) returned 1 [0204.205] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0204.205] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx" (normalized: "c:\\logs\\microsoft-windows-wininet-config%4proxyconfigchanged.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9df26e9, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9df26e9, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.205] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0204.205] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0204.205] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx" (normalized: "c:\\logs\\microsoft-windows-wininet-config%4proxyconfigchanged.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9df26e9, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9df26e9, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.205] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0204.205] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0204.205] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0204.206] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd122d184, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd122d184, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Winlogon%4Operational.evtx", cAlternateFileName="MID6AB~1.EVT")) returned 1 [0204.206] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a90 [0204.206] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b30 [0204.206] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a928 [0204.206] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b30 | out: hHeap=0x1f0000) returned 1 [0204.206] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0204.206] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a90 | out: hHeap=0x1f0000) returned 1 [0204.206] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Winlogon%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-winlogon%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0204.206] GetFileType (hFile=0x204) returned 0x1 [0204.207] CloseHandle (hObject=0x204) returned 1 [0204.207] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a9a0 [0204.207] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Winlogon%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-winlogon%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd122d184, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd122d184, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.207] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a9a0 | out: hHeap=0x1f0000) returned 1 [0204.207] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a9a0 [0204.207] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Winlogon%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-winlogon%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd122d184, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd122d184, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.207] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a9a0 | out: hHeap=0x1f0000) returned 1 [0204.207] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ab08 [0204.207] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab08 | out: hHeap=0x1f0000) returned 1 [0204.207] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf164b9b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcf164b9b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-WMI-Activity%4Operational.evtx", cAlternateFileName="MIFF83~1.EVT")) returned 1 [0204.207] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ace8 [0204.208] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ab8 [0204.208] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2299c8 [0204.208] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ab8 | out: hHeap=0x1f0000) returned 1 [0204.208] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a928 | out: hHeap=0x1f0000) returned 1 [0204.208] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ace8 | out: hHeap=0x1f0000) returned 1 [0204.208] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-WMI-Activity%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-wmi-activity%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0204.208] GetFileType (hFile=0x204) returned 0x1 [0204.208] CloseHandle (hObject=0x204) returned 1 [0204.209] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229e08 [0204.209] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-WMI-Activity%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-wmi-activity%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf164b9b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcf164b9b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000)) returned 1 [0204.209] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229e08 | out: hHeap=0x1f0000) returned 1 [0204.210] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229f18 [0204.210] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-WMI-Activity%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-wmi-activity%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf164b9b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcf164b9b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000)) returned 1 [0204.210] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229f18 | out: hHeap=0x1f0000) returned 1 [0204.210] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229fa0 [0204.211] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229fa0 | out: hHeap=0x1f0000) returned 1 [0204.211] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50555c8d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50555c8d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xc2f39201, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x111103, dwReserved0=0x0, dwReserved1=0x0, cFileName="Security.evtx.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="SECURI~1.ODV")) returned 1 [0204.211] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a770 [0204.211] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c48 [0204.211] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2614f8 [0204.211] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0204.211] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2299c8 | out: hHeap=0x1f0000) returned 1 [0204.211] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a770 | out: hHeap=0x1f0000) returned 1 [0204.211] CreateFileW (lpFileName="C:\\\\Logs\\Security.evtx.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\logs\\security.evtx.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0204.212] GetFileType (hFile=0x204) returned 0x1 [0204.212] CloseHandle (hObject=0x204) returned 1 [0204.212] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2615b0 [0204.212] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Security.evtx.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\logs\\security.evtx.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50555c8d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50555c8d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xc2f39201, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x111103)) returned 1 [0204.213] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2615b0 | out: hHeap=0x1f0000) returned 1 [0204.213] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2612d0 [0204.213] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Security.evtx.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\logs\\security.evtx.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50555c8d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50555c8d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xc2f39201, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x111103)) returned 1 [0204.213] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2612d0 | out: hHeap=0x1f0000) returned 1 [0204.213] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2615b0 [0204.213] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2615b0 | out: hHeap=0x1f0000) returned 1 [0204.213] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95a6db2c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x95a6db2c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.evtx", cAlternateFileName="SETUP~1.EVT")) returned 1 [0204.213] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a68 [0204.213] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ba8 [0204.213] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1ff058 [0204.213] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ba8 | out: hHeap=0x1f0000) returned 1 [0204.213] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2614f8 | out: hHeap=0x1f0000) returned 1 [0204.213] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a68 | out: hHeap=0x1f0000) returned 1 [0204.213] CreateFileW (lpFileName="C:\\\\Logs\\Setup.evtx" (normalized: "c:\\logs\\setup.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0204.213] GetFileType (hFile=0x204) returned 0x1 [0204.214] CloseHandle (hObject=0x204) returned 1 [0204.214] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0204.214] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Setup.evtx" (normalized: "c:\\logs\\setup.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95a6db2c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x95a6db2c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.214] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0204.214] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0204.214] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Setup.evtx" (normalized: "c:\\logs\\setup.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95a6db2c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x95a6db2c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.214] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0204.214] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0204.214] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0204.214] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505097c4, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505097c4, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x111000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.evtx", cAlternateFileName="SYSTEM~1.EVT")) returned 1 [0204.214] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ba8 [0204.215] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c48 [0204.215] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227fc8 [0204.215] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0204.215] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1ff058 | out: hHeap=0x1f0000) returned 1 [0204.215] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ba8 | out: hHeap=0x1f0000) returned 1 [0204.215] CreateFileW (lpFileName="C:\\\\Logs\\System.evtx" (normalized: "c:\\logs\\system.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0204.215] GetFileType (hFile=0x204) returned 0x1 [0204.215] CloseHandle (hObject=0x204) returned 1 [0204.517] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228230 [0204.518] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\System.evtx" (normalized: "c:\\logs\\system.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505097c4, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505097c4, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xc359f9dc, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x111103)) returned 1 [0204.518] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228230 | out: hHeap=0x1f0000) returned 1 [0204.518] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0204.519] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\System.evtx" (normalized: "c:\\logs\\system.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505097c4, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505097c4, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xc359f9dc, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x111103)) returned 1 [0204.519] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0204.519] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0204.519] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0204.519] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50555c8d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50555c8d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows PowerShell.evtx", cAlternateFileName="WINDOW~1.EVT")) returned 1 [0204.519] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228150 [0204.519] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c70 [0204.519] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239508 [0204.519] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c70 | out: hHeap=0x1f0000) returned 1 [0204.519] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227fc8 | out: hHeap=0x1f0000) returned 1 [0204.519] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228150 | out: hHeap=0x1f0000) returned 1 [0204.520] CreateFileW (lpFileName="C:\\\\Logs\\Windows PowerShell.evtx" (normalized: "c:\\logs\\windows powershell.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0204.520] GetFileType (hFile=0x204) returned 0x1 [0204.520] CloseHandle (hObject=0x204) returned 1 [0204.521] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239928 [0204.521] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Windows PowerShell.evtx" (normalized: "c:\\logs\\windows powershell.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50555c8d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50555c8d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.521] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239928 | out: hHeap=0x1f0000) returned 1 [0204.521] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239928 [0204.521] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Windows PowerShell.evtx" (normalized: "c:\\logs\\windows powershell.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50555c8d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50555c8d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.521] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239928 | out: hHeap=0x1f0000) returned 1 [0204.521] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239928 [0204.521] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239928 | out: hHeap=0x1f0000) returned 1 [0204.521] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50555c8d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50555c8d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows PowerShell.evtx", cAlternateFileName="WINDOW~1.EVT")) returned 0 [0204.521] FindClose (in: hFindFile=0x24ea80 | out: hFindFile=0x24ea80) returned 1 [0204.522] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239508 | out: hHeap=0x1f0000) returned 1 [0204.522] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d9d0 | out: hHeap=0x1f0000) returned 1 [0204.522] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b08 | out: hHeap=0x1f0000) returned 1 [0204.522] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233c48 | out: hHeap=0x1f0000) returned 1 [0204.522] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234428 [0204.522] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b58 [0204.522] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d9d0 [0204.522] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c48 [0204.522] FindFirstFileW (in: lpFileName="C:\\\\PerfLogs\\*", lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa03748ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17b3dd09, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ec00 [0204.522] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c70 [0204.522] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0204.522] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0204.522] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa03748ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17b3dd09, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0204.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c48 [0204.523] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c70 | out: hHeap=0x1f0000) returned 1 [0204.523] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0204.523] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0204.523] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa03748ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17b3dd09, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0204.523] FindClose (in: hFindFile=0x24ec00 | out: hFindFile=0x24ec00) returned 1 [0204.523] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0204.523] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d9d0 | out: hHeap=0x1f0000) returned 1 [0204.523] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b58 | out: hHeap=0x1f0000) returned 1 [0204.523] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234428 | out: hHeap=0x1f0000) returned 1 [0204.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233e88 [0204.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ae0 [0204.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d838 [0204.524] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228150 [0204.524] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\*", lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3ac6234, ftLastAccessTime.dwHighDateTime=0x1d5c65b, ftLastWriteTime.dwLowDateTime=0x3ac6234, ftLastWriteTime.dwHighDateTime=0x1d5c65b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ed40 [0204.524] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0204.524] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228150 | out: hHeap=0x1f0000) returned 1 [0204.524] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0204.524] FindNextFileW (in: hFindFile=0x24ed40, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3ac6234, ftLastAccessTime.dwHighDateTime=0x1d5c65b, ftLastWriteTime.dwLowDateTime=0x3ac6234, ftLastWriteTime.dwHighDateTime=0x1d5c65b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0204.524] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227f20 [0204.524] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0204.524] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0204.524] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0204.524] FindNextFileW (in: hFindFile=0x24ed40, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4aadd873, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common Files", cAlternateFileName="COMMON~1")) returned 1 [0204.524] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ba8 [0204.524] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227fc8 [0204.524] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x226238 [0204.524] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227fc8 | out: hHeap=0x1f0000) returned 1 [0204.524] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227f20 | out: hHeap=0x1f0000) returned 1 [0204.524] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ba8 | out: hHeap=0x1f0000) returned 1 [0204.525] lstrcmpW (lpString1="Common Files", lpString2=".") returned 1 [0204.525] lstrcmpW (lpString1="Common Files", lpString2="..") returned 1 [0204.525] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x205290 [0204.525] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234398 [0204.525] FindNextFileW (in: hFindFile=0x24ed40, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1a307d95, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5d0779b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5d0779b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0204.525] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c48 [0204.525] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228150 [0204.525] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x2260a8 [0204.525] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228150 | out: hHeap=0x1f0000) returned 1 [0204.525] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226238 | out: hHeap=0x1f0000) returned 1 [0204.525] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0204.525] CreateFileW (lpFileName="C:\\\\Program Files\\desktop.ini" (normalized: "c:\\program files\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1eea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0204.525] GetFileType (hFile=0x204) returned 0x1 [0204.526] CloseHandle (hObject=0x204) returned 1 [0204.526] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233e40 [0204.526] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\desktop.ini" (normalized: "c:\\program files\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef34 | out: lpFileInformation=0x1a1ef34*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1a307d95, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5d0779b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5d0779b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xae)) returned 1 [0204.526] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233e40 | out: hHeap=0x1f0000) returned 1 [0204.526] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234428 [0204.526] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\desktop.ini" (normalized: "c:\\program files\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1a1ef44 | out: lpFileInformation=0x1a1ef44*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1a307d95, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5d0779b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5d0779b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xae)) returned 1 [0204.526] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234428 | out: hHeap=0x1f0000) returned 1 [0204.526] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233c90 [0204.526] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233c90 | out: hHeap=0x1f0000) returned 1 [0204.526] FindNextFileW (in: hFindFile=0x24ed40, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfbf3a0e6, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xfbf3a0e6, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0204.526] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0204.526] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227fc8 [0204.526] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239508 [0204.526] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227fc8 | out: hHeap=0x1f0000) returned 1 [0204.526] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2260a8 | out: hHeap=0x1f0000) returned 1 [0204.526] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0204.526] lstrcmpW (lpString1="Internet Explorer", lpString2=".") returned 1 [0204.527] lstrcmpW (lpString1="Internet Explorer", lpString2="..") returned 1 [0204.527] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0204.527] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239668 [0204.527] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205290 | out: hHeap=0x1f0000) returned 1 [0204.527] FindNextFileW (in: hFindFile=0x24ed40, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xfc0fdd55, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xfc0fdd55, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 1 [0204.527] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227fc8 [0204.527] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239508 | out: hHeap=0x1f0000) returned 1 [0204.527] lstrcmpW (lpString1="Java", lpString2=".") returned 1 [0204.527] lstrcmpW (lpString1="Java", lpString2="..") returned 1 [0204.527] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x48) returned 0x226008 [0204.527] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227f20 [0204.527] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0204.527] FindNextFileW (in: hFindFile=0x24ed40, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf8a30151, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xf8a30151, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office", cAlternateFileName="MICROS~2")) returned 1 [0204.527] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228230 [0204.527] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228150 [0204.527] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239928 [0204.527] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228150 | out: hHeap=0x1f0000) returned 1 [0204.527] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227fc8 | out: hHeap=0x1f0000) returned 1 [0204.527] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228230 | out: hHeap=0x1f0000) returned 1 [0204.527] lstrcmpW (lpString1="Microsoft Office", lpString2=".") returned 1 [0204.527] lstrcmpW (lpString1="Microsoft Office", lpString2="..") returned 1 [0204.527] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x215040 [0204.527] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2399d8 [0204.527] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226008 | out: hHeap=0x1f0000) returned 1 [0204.527] FindNextFileW (in: hFindFile=0x24ed40, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82e68d8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc03f299, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xfc03f299, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office 15", cAlternateFileName="MICROS~1")) returned 1 [0204.528] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0204.528] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227fc8 [0204.528] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239508 [0204.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227fc8 | out: hHeap=0x1f0000) returned 1 [0204.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239928 | out: hHeap=0x1f0000) returned 1 [0204.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0204.528] lstrcmpW (lpString1="Microsoft Office 15", lpString2=".") returned 1 [0204.528] lstrcmpW (lpString1="Microsoft Office 15", lpString2="..") returned 1 [0204.528] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0204.528] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239928 [0204.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215040 | out: hHeap=0x1f0000) returned 1 [0204.528] FindNextFileW (in: hFindFile=0x24ed40, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xe99e772e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfbfccb69, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xfbfccb69, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla Firefox", cAlternateFileName="MOZILL~1")) returned 1 [0204.528] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0204.528] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228230 [0204.528] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c180 [0204.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228230 | out: hHeap=0x1f0000) returned 1 [0204.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239508 | out: hHeap=0x1f0000) returned 1 [0204.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0204.528] lstrcmpW (lpString1="Mozilla Firefox", lpString2=".") returned 1 [0204.528] lstrcmpW (lpString1="Mozilla Firefox", lpString2="..") returned 1 [0204.528] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22bf70 [0204.529] FindNextFileW (in: hFindFile=0x24ed40, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x709c717f, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x709c717f, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x709c717f, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSBuild", cAlternateFileName="")) returned 1 [0204.529] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228230 [0204.529] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225d88 [0204.529] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228230 | out: hHeap=0x1f0000) returned 1 [0204.529] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c180 | out: hHeap=0x1f0000) returned 1 [0204.529] lstrcmpW (lpString1="MSBuild", lpString2=".") returned 1 [0204.529] lstrcmpW (lpString1="MSBuild", lpString2="..") returned 1 [0204.529] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd8) returned 0x229528 [0204.529] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233bb8 [0204.529] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0204.529] FindNextFileW (in: hFindFile=0x24ed40, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x709ed3a7, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0xfc0b18a4, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xfc0b18a4, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reference Assemblies", cAlternateFileName="REFERE~1")) returned 1 [0204.529] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227fc8 [0204.529] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228150 [0204.529] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22bc00 [0204.529] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228150 | out: hHeap=0x1f0000) returned 1 [0204.529] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225d88 | out: hHeap=0x1f0000) returned 1 [0204.529] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227fc8 | out: hHeap=0x1f0000) returned 1 [0204.529] lstrcmpW (lpString1="Reference Assemblies", lpString2=".") returned 1 [0204.529] lstrcmpW (lpString1="Reference Assemblies", lpString2="..") returned 1 [0204.529] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22bfc8 [0204.529] FindNextFileW (in: hFindFile=0x24ed40, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x59f2f4b4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xfbf5a454, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xfbf5a454, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rempl", cAlternateFileName="")) returned 1 [0204.530] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0204.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22bc00 | out: hHeap=0x1f0000) returned 1 [0204.530] lstrcmpW (lpString1="rempl", lpString2=".") returned 1 [0204.530] lstrcmpW (lpString1="rempl", lpString2="..") returned 1 [0204.530] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228150 [0204.530] FindNextFileW (in: hFindFile=0x24ed40, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xd2709a20, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xfc066938, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xfc066938, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Uninstall Information", cAlternateFileName="UNINST~1")) returned 1 [0204.530] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228230 [0204.530] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227fc8 [0204.530] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c020 [0204.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227fc8 | out: hHeap=0x1f0000) returned 1 [0204.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0204.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228230 | out: hHeap=0x1f0000) returned 1 [0204.530] lstrcmpW (lpString1="Uninstall Information", lpString2=".") returned 1 [0204.530] lstrcmpW (lpString1="Uninstall Information", lpString2="..") returned 1 [0204.530] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x138) returned 0x22d368 [0204.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c440 [0204.531] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229528 | out: hHeap=0x1f0000) returned 1 [0204.531] FindNextFileW (in: hFindFile=0x24ed40, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x4c509d45, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa747f43e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x749f4454, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UNP", cAlternateFileName="")) returned 1 [0204.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0204.531] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c020 | out: hHeap=0x1f0000) returned 1 [0204.531] lstrcmpW (lpString1="UNP", lpString2=".") returned 1 [0204.531] lstrcmpW (lpString1="UNP", lpString2="..") returned 1 [0204.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228230 [0204.531] FindNextFileW (in: hFindFile=0x24ed40, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc066938, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xfc066938, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Defender", cAlternateFileName="WINDOW~1")) returned 1 [0204.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227fc8 [0204.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282d8 [0204.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c2e0 [0204.531] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282d8 | out: hHeap=0x1f0000) returned 1 [0204.531] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0204.531] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227fc8 | out: hHeap=0x1f0000) returned 1 [0204.531] lstrcmpW (lpString1="Windows Defender", lpString2=".") returned 1 [0204.531] lstrcmpW (lpString1="Windows Defender", lpString2="..") returned 1 [0204.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c288 [0204.531] FindNextFileW (in: hFindFile=0x24ed40, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xfbe9d08f, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xfbe9d08f, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Defender Advanced Threat Protection", cAlternateFileName="WIF4A9~1")) returned 1 [0204.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214bc8 [0204.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0204.532] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a248 [0204.532] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0204.532] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c2e0 | out: hHeap=0x1f0000) returned 1 [0204.532] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214bc8 | out: hHeap=0x1f0000) returned 1 [0204.532] lstrcmpW (lpString1="Windows Defender Advanced Threat Protection", lpString2=".") returned 1 [0204.532] lstrcmpW (lpString1="Windows Defender Advanced Threat Protection", lpString2="..") returned 1 [0204.532] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a710 [0204.532] FindNextFileW (in: hFindFile=0x24ed40, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa90b6918, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Mail", cAlternateFileName="WINDOW~2")) returned 1 [0204.532] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c48 [0204.532] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0204.532] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225ce8 [0204.532] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0204.532] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a248 | out: hHeap=0x1f0000) returned 1 [0204.532] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0204.532] lstrcmpW (lpString1="Windows Mail", lpString2=".") returned 1 [0204.532] lstrcmpW (lpString1="Windows Mail", lpString2="..") returned 1 [0204.532] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c8) returned 0x20d888 [0204.533] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234158 [0204.533] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d368 | out: hHeap=0x1f0000) returned 1 [0204.533] FindNextFileW (in: hFindFile=0x24ed40, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e4faee, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xfbfa67b3, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xfbfa67b3, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media Player", cAlternateFileName="WI54FB~1")) returned 1 [0204.533] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0204.533] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227fc8 [0204.533] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c180 [0204.533] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227fc8 | out: hHeap=0x1f0000) returned 1 [0204.533] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225ce8 | out: hHeap=0x1f0000) returned 1 [0204.533] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0204.533] lstrcmpW (lpString1="Windows Media Player", lpString2=".") returned 1 [0204.533] lstrcmpW (lpString1="Windows Media Player", lpString2="..") returned 1 [0204.533] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c1d8 [0204.533] FindNextFileW (in: hFindFile=0x24ed40, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfbfccb69, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xfbfccb69, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Multimedia Platform", cAlternateFileName="WINDOW~3")) returned 1 [0204.533] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233db0 [0204.533] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0204.533] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c98 [0204.533] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0204.533] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c180 | out: hHeap=0x1f0000) returned 1 [0204.533] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233db0 | out: hHeap=0x1f0000) returned 1 [0204.533] lstrcmpW (lpString1="Windows Multimedia Platform", lpString2=".") returned 1 [0204.534] lstrcmpW (lpString1="Windows Multimedia Platform", lpString2="..") returned 1 [0204.534] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214ea0 [0204.534] FindNextFileW (in: hFindFile=0x24ed40, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xf8bf9d3e, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xf8bf9d3e, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows NT", cAlternateFileName="WINDOW~4")) returned 1 [0204.534] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c48 [0204.534] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0204.534] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225d38 [0204.534] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0204.534] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c98 | out: hHeap=0x1f0000) returned 1 [0204.534] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0204.534] lstrcmpW (lpString1="Windows NT", lpString2=".") returned 1 [0204.534] lstrcmpW (lpString1="Windows NT", lpString2="..") returned 1 [0204.534] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233ff0 [0204.534] FindNextFileW (in: hFindFile=0x24ed40, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc08b6a0, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xfc08b6a0, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Photo Viewer", cAlternateFileName="WI8A19~1")) returned 1 [0204.534] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0204.534] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227fc8 [0204.534] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c230 [0204.534] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227fc8 | out: hHeap=0x1f0000) returned 1 [0204.534] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225d38 | out: hHeap=0x1f0000) returned 1 [0204.535] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0204.535] lstrcmpW (lpString1="Windows Photo Viewer", lpString2=".") returned 1 [0204.535] lstrcmpW (lpString1="Windows Photo Viewer", lpString2="..") returned 1 [0204.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22be10 [0204.535] FindNextFileW (in: hFindFile=0x24ed40, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfbfccb69, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xfbfccb69, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Portable Devices", cAlternateFileName="WIBFE5~1")) returned 1 [0204.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233db0 [0204.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0204.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214af8 [0204.535] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0204.535] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c230 | out: hHeap=0x1f0000) returned 1 [0204.535] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233db0 | out: hHeap=0x1f0000) returned 1 [0204.535] lstrcmpW (lpString1="Windows Portable Devices", lpString2=".") returned 1 [0204.535] lstrcmpW (lpString1="Windows Portable Devices", lpString2="..") returned 1 [0204.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c98 [0204.535] FindNextFileW (in: hFindFile=0x24ed40, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfbe9d08f, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xfbe9d08f, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Security", cAlternateFileName="WIDB62~1")) returned 1 [0204.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0204.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227fc8 [0204.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c020 [0204.536] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227fc8 | out: hHeap=0x1f0000) returned 1 [0204.536] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214af8 | out: hHeap=0x1f0000) returned 1 [0204.536] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0204.536] lstrcmpW (lpString1="Windows Security", lpString2=".") returned 1 [0204.536] lstrcmpW (lpString1="Windows Security", lpString2="..") returned 1 [0204.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2a0) returned 0x24fa20 [0204.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c230 [0204.536] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20d888 | out: hHeap=0x1f0000) returned 1 [0204.536] FindNextFileW (in: hFindFile=0x24ed40, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92aed1a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bb043c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="WI4223~1")) returned 1 [0204.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609f0 [0204.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0204.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c3e8 [0204.536] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0204.536] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c020 | out: hHeap=0x1f0000) returned 1 [0204.536] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609f0 | out: hHeap=0x1f0000) returned 1 [0204.536] lstrcmpW (lpString1="Windows Sidebar", lpString2=".") returned 1 [0204.536] lstrcmpW (lpString1="Windows Sidebar", lpString2="..") returned 1 [0204.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c2e0 [0204.536] FindNextFileW (in: hFindFile=0x24ed40, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x8da88b6d, ftLastAccessTime.dwHighDateTime=0x1d3274e, ftLastWriteTime.dwLowDateTime=0x8da88b6d, ftLastWriteTime.dwHighDateTime=0x1d3274e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsApps", cAlternateFileName="WI7DB9~1")) returned 1 [0204.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609f0 [0204.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0204.537] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225e78 [0204.537] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0204.537] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c3e8 | out: hHeap=0x1f0000) returned 1 [0204.537] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609f0 | out: hHeap=0x1f0000) returned 1 [0204.537] lstrcmpW (lpString1="WindowsApps", lpString2=".") returned 1 [0204.537] lstrcmpW (lpString1="WindowsApps", lpString2="..") returned 1 [0204.537] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234428 [0204.537] FindNextFileW (in: hFindFile=0x24ed40, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc0fdd55, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xfc0fdd55, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsPowerShell", cAlternateFileName="WID5B1~1")) returned 1 [0204.537] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0204.537] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227fc8 [0204.537] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22bc58 [0204.537] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227fc8 | out: hHeap=0x1f0000) returned 1 [0204.537] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225e78 | out: hHeap=0x1f0000) returned 1 [0204.537] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0204.537] lstrcmpW (lpString1="WindowsPowerShell", lpString2=".") returned 1 [0204.537] lstrcmpW (lpString1="WindowsPowerShell", lpString2="..") returned 1 [0204.537] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c338 [0204.537] FindNextFileW (in: hFindFile=0x24ed40, lpFindFileData=0x1a1f0e4 | out: lpFindFileData=0x1a1f0e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc0fdd55, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xfc0fdd55, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsPowerShell", cAlternateFileName="WID5B1~1")) returned 0 [0204.537] FindClose (in: hFindFile=0x24ed40 | out: hFindFile=0x24ed40) returned 1 [0204.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2341a0 [0204.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b58 [0204.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f020 [0204.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c078 [0204.538] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\*", lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4aadd873, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7f, dwReserved1=0x1e5, cFileName=".", cAlternateFileName="")) returned 0x24ea40 [0204.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234038 [0204.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x215040 [0204.538] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234038 | out: hHeap=0x1f0000) returned 1 [0204.538] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c078 | out: hHeap=0x1f0000) returned 1 [0204.538] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0204.538] FindNextFileW (in: hFindFile=0x24ea40, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4aadd873, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7f, dwReserved1=0x1e5, cFileName="..", cAlternateFileName="")) returned 1 [0204.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234470 [0204.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x2149c0 [0204.538] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234470 | out: hHeap=0x1f0000) returned 1 [0204.538] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215040 | out: hHeap=0x1f0000) returned 1 [0204.539] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0204.539] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0204.539] FindNextFileW (in: hFindFile=0x24ea40, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x4aab75fe, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0xa0417b85, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7f, dwReserved1=0x1e5, cFileName="DESIGNER", cAlternateFileName="")) returned 1 [0204.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c48 [0204.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234470 [0204.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x214f08 [0204.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234470 | out: hHeap=0x1f0000) returned 1 [0204.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2149c0 | out: hHeap=0x1f0000) returned 1 [0204.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0204.539] lstrcmpW (lpString1="DESIGNER", lpString2=".") returned 1 [0204.539] lstrcmpW (lpString1="DESIGNER", lpString2="..") returned 1 [0204.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x205130 [0204.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22bd08 [0204.539] FindNextFileW (in: hFindFile=0x24ea40, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa04663f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7f, dwReserved1=0x1e5, cFileName="microsoft shared", cAlternateFileName="MICROS~1")) returned 1 [0204.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0204.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234470 [0204.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d00 [0204.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234470 | out: hHeap=0x1f0000) returned 1 [0204.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f08 | out: hHeap=0x1f0000) returned 1 [0204.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0204.539] lstrcmpW (lpString1="microsoft shared", lpString2=".") returned 1 [0204.539] lstrcmpW (lpString1="microsoft shared", lpString2="..") returned 1 [0204.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0204.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2149c0 [0204.540] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205130 | out: hHeap=0x1f0000) returned 1 [0204.540] FindNextFileW (in: hFindFile=0x24ea40, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c11068, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7f, dwReserved1=0x1e5, cFileName="Services", cAlternateFileName="")) returned 1 [0204.540] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0204.540] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233df8 [0204.540] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x215040 [0204.540] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233df8 | out: hHeap=0x1f0000) returned 1 [0204.540] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d00 | out: hHeap=0x1f0000) returned 1 [0204.540] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0204.540] lstrcmpW (lpString1="Services", lpString2=".") returned 1 [0204.540] lstrcmpW (lpString1="Services", lpString2="..") returned 1 [0204.540] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x48) returned 0x226328 [0204.540] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c128 [0204.540] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0204.540] FindNextFileW (in: hFindFile=0x24ea40, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c5f95f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7f, dwReserved1=0x1e5, cFileName="System", cAlternateFileName="")) returned 1 [0204.540] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233f60 [0204.540] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x214d00 [0204.540] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233f60 | out: hHeap=0x1f0000) returned 1 [0204.540] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215040 | out: hHeap=0x1f0000) returned 1 [0204.540] lstrcmpW (lpString1="System", lpString2=".") returned 1 [0204.540] lstrcmpW (lpString1="System", lpString2="..") returned 1 [0204.540] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214f08 [0204.541] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22be68 [0204.541] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226328 | out: hHeap=0x1f0000) returned 1 [0204.541] FindNextFileW (in: hFindFile=0x24ea40, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c5f95f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7f, dwReserved1=0x1e5, cFileName="System", cAlternateFileName="")) returned 0 [0204.541] FindClose (in: hFindFile=0x24ea40 | out: hFindFile=0x24ea40) returned 1 [0204.541] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233db0 [0204.541] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ba8 [0204.541] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22ee88 [0204.541] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c30 [0204.541] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\DESIGNER\\*", lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x4aab75fe, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0xa0417b85, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22613c, dwReserved1=0x420040, cFileName=".", cAlternateFileName="")) returned 0x24ec00 [0204.541] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x215040 [0204.541] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c30 | out: hHeap=0x1f0000) returned 1 [0204.541] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0204.541] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x4aab75fe, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0xa0417b85, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22613c, dwReserved1=0x420040, cFileName="..", cAlternateFileName="")) returned 1 [0204.541] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a90 [0204.542] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215040 | out: hHeap=0x1f0000) returned 1 [0204.542] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0204.542] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0204.542] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c8c3a00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4aadd873, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5c8c3a00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x3e70, dwReserved0=0x22613c, dwReserved1=0x420040, cFileName="MSADDNDR.OLB", cAlternateFileName="")) returned 1 [0204.542] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b08 [0204.542] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x215040 [0204.542] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221248 [0204.542] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215040 | out: hHeap=0x1f0000) returned 1 [0204.542] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a90 | out: hHeap=0x1f0000) returned 1 [0204.542] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b08 | out: hHeap=0x1f0000) returned 1 [0204.542] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB" (normalized: "c:\\program files\\common files\\designer\\msaddndr.olb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e65c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0204.543] GetFileType (hFile=0x204) returned 0x1 [0204.543] CloseHandle (hObject=0x204) returned 1 [0204.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a928 [0204.543] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB" (normalized: "c:\\program files\\common files\\designer\\msaddndr.olb"), fInfoLevelId=0x0, lpFileInformation=0x1a1e6ec | out: lpFileInformation=0x1a1e6ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c8c3a00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4aadd873, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5c8c3a00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x3e70)) returned 1 [0204.543] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a928 | out: hHeap=0x1f0000) returned 1 [0204.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22abf8 [0204.543] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB" (normalized: "c:\\program files\\common files\\designer\\msaddndr.olb"), fInfoLevelId=0x0, lpFileInformation=0x1a1e6fc | out: lpFileInformation=0x1a1e6fc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c8c3a00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4aadd873, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5c8c3a00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x3e70)) returned 1 [0204.544] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22abf8 | out: hHeap=0x1f0000) returned 1 [0204.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22af40 [0204.544] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22af40 | out: hHeap=0x1f0000) returned 1 [0204.544] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c8c3a00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4aadd873, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5c8c3a00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x3e70, dwReserved0=0x22613c, dwReserved1=0x420040, cFileName="MSADDNDR.OLB", cAlternateFileName="")) returned 0 [0204.544] FindClose (in: hFindFile=0x24ec00 | out: hFindFile=0x24ec00) returned 1 [0204.544] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0204.544] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ee88 | out: hHeap=0x1f0000) returned 1 [0204.544] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ba8 | out: hHeap=0x1f0000) returned 1 [0204.544] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233db0 | out: hHeap=0x1f0000) returned 1 [0204.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233f60 [0204.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c70 [0204.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22ee88 [0204.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22aa90 [0204.544] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\*", lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa04663f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22613c, dwReserved1=0x420040, cFileName=".", cAlternateFileName="")) returned 0x24ed00 [0204.545] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a838 [0204.545] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aa90 | out: hHeap=0x1f0000) returned 1 [0204.545] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0204.545] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa04663f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22613c, dwReserved1=0x420040, cFileName="..", cAlternateFileName="")) returned 1 [0204.545] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22aa90 [0204.545] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a838 | out: hHeap=0x1f0000) returned 1 [0204.545] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0204.545] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0204.545] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbf6c42af, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x81028f76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x81028f76, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22613c, dwReserved1=0x420040, cFileName="ClickToRun", cAlternateFileName="CLICKT~1")) returned 1 [0204.545] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ba8 [0204.545] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22af40 [0204.545] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218768 [0204.545] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22af40 | out: hHeap=0x1f0000) returned 1 [0204.545] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aa90 | out: hHeap=0x1f0000) returned 1 [0204.545] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ba8 | out: hHeap=0x1f0000) returned 1 [0204.545] lstrcmpW (lpString1="ClickToRun", lpString2=".") returned 1 [0204.545] lstrcmpW (lpString1="ClickToRun", lpString2="..") returned 1 [0204.545] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204fb0 [0204.545] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a3e0 [0204.546] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb3e1c92c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb3e1c92c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22613c, dwReserved1=0x420040, cFileName="ink", cAlternateFileName="")) returned 1 [0204.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ab80 [0204.546] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218768 | out: hHeap=0x1f0000) returned 1 [0204.546] lstrcmpW (lpString1="ink", lpString2=".") returned 1 [0204.546] lstrcmpW (lpString1="ink", lpString2="..") returned 1 [0204.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0204.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ace8 [0204.546] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204fb0 | out: hHeap=0x1f0000) returned 1 [0204.546] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa098a4c6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71143a45, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22613c, dwReserved1=0x420040, cFileName="MSInfo", cAlternateFileName="")) returned 1 [0204.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a928 [0204.546] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab80 | out: hHeap=0x1f0000) returned 1 [0204.546] lstrcmpW (lpString1="MSInfo", lpString2=".") returned 1 [0204.546] lstrcmpW (lpString1="MSInfo", lpString2="..") returned 1 [0204.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x48) returned 0x225f68 [0204.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22af40 [0204.546] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0204.546] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd9f60362, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd9f60362, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22613c, dwReserved1=0x420040, cFileName="OFFICE16", cAlternateFileName="")) returned 1 [0204.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b30 [0204.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ab80 [0204.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x2191b8 [0204.546] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab80 | out: hHeap=0x1f0000) returned 1 [0204.546] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a928 | out: hHeap=0x1f0000) returned 1 [0204.547] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b30 | out: hHeap=0x1f0000) returned 1 [0204.547] lstrcmpW (lpString1="OFFICE16", lpString2=".") returned 1 [0204.547] lstrcmpW (lpString1="OFFICE16", lpString2="..") returned 1 [0204.547] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a90 [0204.547] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229830 [0204.547] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225f68 | out: hHeap=0x1f0000) returned 1 [0204.547] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd99442a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd99442a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22613c, dwReserved1=0x420040, cFileName="OfficeSoftwareProtectionPlatform", cAlternateFileName="OFFICE~1")) returned 1 [0204.547] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c020 [0204.547] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a928 [0204.547] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2614f8 [0204.547] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a928 | out: hHeap=0x1f0000) returned 1 [0204.547] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2191b8 | out: hHeap=0x1f0000) returned 1 [0204.547] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c020 | out: hHeap=0x1f0000) returned 1 [0204.547] lstrcmpW (lpString1="OfficeSoftwareProtectionPlatform", lpString2=".") returned 1 [0204.547] lstrcmpW (lpString1="OfficeSoftwareProtectionPlatform", lpString2="..") returned 1 [0204.547] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0204.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2612d0 [0204.548] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a90 | out: hHeap=0x1f0000) returned 1 [0204.548] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4accd6e1, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4accd6e1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22613c, dwReserved1=0x420040, cFileName="Source Engine", cAlternateFileName="SOURCE~1")) returned 1 [0204.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c48 [0204.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ab80 [0204.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x2188c8 [0204.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab80 | out: hHeap=0x1f0000) returned 1 [0204.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2614f8 | out: hHeap=0x1f0000) returned 1 [0204.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0204.759] lstrcmpW (lpString1="Source Engine", lpString2=".") returned 1 [0204.759] lstrcmpW (lpString1="Source Engine", lpString2="..") returned 1 [0204.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229f18 [0204.759] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b5538f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22613c, dwReserved1=0x420040, cFileName="Stationery", cAlternateFileName="STATIO~1")) returned 1 [0204.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ab8 [0204.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ab80 [0204.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218768 [0204.760] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab80 | out: hHeap=0x1f0000) returned 1 [0204.760] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2188c8 | out: hHeap=0x1f0000) returned 1 [0204.760] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ab8 | out: hHeap=0x1f0000) returned 1 [0204.760] lstrcmpW (lpString1="Stationery", lpString2=".") returned 1 [0204.760] lstrcmpW (lpString1="Stationery", lpString2="..") returned 1 [0204.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd8) returned 0x229528 [0204.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a4f0 [0204.760] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0204.760] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b56882, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22613c, dwReserved1=0x420040, cFileName="TextConv", cAlternateFileName="")) returned 1 [0204.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0204.761] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22abf8 [0204.761] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218558 [0204.761] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22abf8 | out: hHeap=0x1f0000) returned 1 [0204.761] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218768 | out: hHeap=0x1f0000) returned 1 [0204.761] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0204.761] lstrcmpW (lpString1="TextConv", lpString2=".") returned 1 [0204.761] lstrcmpW (lpString1="TextConv", lpString2="..") returned 1 [0204.761] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a578 [0204.761] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b57d42, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22613c, dwReserved1=0x420040, cFileName="Triedit", cAlternateFileName="")) returned 1 [0204.761] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a838 [0204.762] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218558 | out: hHeap=0x1f0000) returned 1 [0204.762] lstrcmpW (lpString1="Triedit", lpString2=".") returned 1 [0204.762] lstrcmpW (lpString1="Triedit", lpString2="..") returned 1 [0204.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a928 [0204.762] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xbcd0fab8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xa0b594b8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2ce22546, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22613c, dwReserved1=0x420040, cFileName="VC", cAlternateFileName="")) returned 1 [0204.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a9a0 [0204.762] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a838 | out: hHeap=0x1f0000) returned 1 [0204.762] lstrcmpW (lpString1="VC", lpString2=".") returned 1 [0204.762] lstrcmpW (lpString1="VC", lpString2="..") returned 1 [0204.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x138) returned 0x22d368 [0204.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22aa90 [0204.763] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229528 | out: hHeap=0x1f0000) returned 1 [0204.763] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b59a78, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22613c, dwReserved1=0x420040, cFileName="VGX", cAlternateFileName="")) returned 1 [0204.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ab08 [0204.763] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a9a0 | out: hHeap=0x1f0000) returned 1 [0204.763] lstrcmpW (lpString1="VGX", lpString2=".") returned 1 [0204.763] lstrcmpW (lpString1="VGX", lpString2="..") returned 1 [0204.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ab80 [0204.763] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49ecb94e, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ae972f5, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22613c, dwReserved1=0x420040, cFileName="VSTO", cAlternateFileName="")) returned 1 [0204.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22abf8 [0204.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab08 | out: hHeap=0x1f0000) returned 1 [0204.764] lstrcmpW (lpString1="VSTO", lpString2=".") returned 1 [0204.764] lstrcmpW (lpString1="VSTO", lpString2="..") returned 1 [0204.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a9a0 [0204.764] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49ecb94e, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ae972f5, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22613c, dwReserved1=0x420040, cFileName="VSTO", cAlternateFileName="")) returned 0 [0204.764] FindClose (in: hFindFile=0x24ed00 | out: hFindFile=0x24ed00) returned 1 [0204.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233cd8 [0204.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ba8 [0204.765] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22db68 [0204.765] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a028 [0204.765] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\*", lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbf6c42af, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x81028f76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x81028f76, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName=".", cAlternateFileName="")) returned 0x24e980 [0204.765] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a600 [0204.765] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a028 | out: hHeap=0x1f0000) returned 1 [0204.765] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0204.765] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbf6c42af, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x81028f76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x81028f76, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="..", cAlternateFileName="")) returned 1 [0204.766] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a688 [0204.766] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a600 | out: hHeap=0x1f0000) returned 1 [0204.766] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0204.766] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0204.766] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x809e6bf5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x809e6bf5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="api-ms-win-core-file-l1-2-0.dll", cAlternateFileName="API-MS~1.DLL")) returned 1 [0204.766] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233df8 [0204.766] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a028 [0204.766] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x230258 [0204.767] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a028 | out: hHeap=0x1f0000) returned 1 [0204.767] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a688 | out: hHeap=0x1f0000) returned 1 [0204.767] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233df8 | out: hHeap=0x1f0000) returned 1 [0204.892] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l1-2-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0204.892] GetFileType (hFile=0x218) returned 0x1 [0204.893] CloseHandle (hObject=0x218) returned 1 [0204.893] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x230000 [0204.893] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l1-2-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x809e6bf5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x809e6bf5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x48c0)) returned 1 [0204.893] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0204.893] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fce0 [0204.893] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l1-2-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x809e6bf5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x809e6bf5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x48c0)) returned 1 [0204.893] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0204.893] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f830 [0204.894] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0204.894] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x809e6bf5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x809e6bf5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="api-ms-win-core-file-l2-1-0.dll", cAlternateFileName="API-MS~2.DLL")) returned 1 [0204.894] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233e40 [0204.894] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a0b0 [0204.894] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f768 [0204.894] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a0b0 | out: hHeap=0x1f0000) returned 1 [0204.894] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0204.894] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233e40 | out: hHeap=0x1f0000) returned 1 [0204.894] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l2-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l2-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0204.895] GetFileType (hFile=0x218) returned 0x1 [0204.895] CloseHandle (hObject=0x218) returned 1 [0204.895] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x230258 [0204.895] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l2-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l2-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x809e6bf5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x809e6bf5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x48c0)) returned 1 [0204.896] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0204.896] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x2303e8 [0204.896] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l2-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l2-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x809e6bf5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x809e6bf5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x48c0)) returned 1 [0204.896] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0204.896] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fce0 [0204.896] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0204.896] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x52c0, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="api-ms-win-core-localization-l1-2-0.dll", cAlternateFileName="API-MS~3.DLL")) returned 1 [0204.896] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22bdb8 [0204.896] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a688 [0204.896] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x2007c8 [0204.896] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a688 | out: hHeap=0x1f0000) returned 1 [0204.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0204.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22bdb8 | out: hHeap=0x1f0000) returned 1 [0204.897] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-localization-l1-2-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0204.897] GetFileType (hFile=0x218) returned 0x1 [0204.898] CloseHandle (hObject=0x218) returned 1 [0204.898] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x2008a0 [0204.898] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-localization-l1-2-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x52c0)) returned 1 [0204.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2008a0 | out: hHeap=0x1f0000) returned 1 [0204.898] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x2008a0 [0204.898] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-localization-l1-2-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x52c0)) returned 1 [0204.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2008a0 | out: hHeap=0x1f0000) returned 1 [0204.898] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x2008a0 [0204.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2008a0 | out: hHeap=0x1f0000) returned 1 [0204.899] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="api-ms-win-core-processthreads-l1-1-1.dll", cAlternateFileName="API-MS~4.DLL")) returned 1 [0204.899] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c30 [0204.899] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a688 [0204.899] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x2008a0 [0204.899] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a688 | out: hHeap=0x1f0000) returned 1 [0204.899] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2007c8 | out: hHeap=0x1f0000) returned 1 [0204.899] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c30 | out: hHeap=0x1f0000) returned 1 [0204.899] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-processthreads-l1-1-1.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0204.899] GetFileType (hFile=0x218) returned 0x1 [0204.899] CloseHandle (hObject=0x218) returned 1 [0204.900] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x2007c8 [0204.900] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-processthreads-l1-1-1.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0)) returned 1 [0204.900] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2007c8 | out: hHeap=0x1f0000) returned 1 [0204.900] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x2007c8 [0204.900] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-processthreads-l1-1-1.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0)) returned 1 [0204.900] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2007c8 | out: hHeap=0x1f0000) returned 1 [0204.900] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x2007c8 [0204.900] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2007c8 | out: hHeap=0x1f0000) returned 1 [0204.900] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="api-ms-win-core-synch-l1-2-0.dll", cAlternateFileName="APF10C~1.DLL")) returned 1 [0204.900] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22bdb8 [0204.900] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a688 [0204.900] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x2300c8 [0204.900] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a688 | out: hHeap=0x1f0000) returned 1 [0204.900] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2008a0 | out: hHeap=0x1f0000) returned 1 [0204.900] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22bdb8 | out: hHeap=0x1f0000) returned 1 [0204.901] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-synch-l1-2-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0204.901] GetFileType (hFile=0x218) returned 0x1 [0204.901] CloseHandle (hObject=0x218) returned 1 [0204.901] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fc18 [0204.901] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-synch-l1-2-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0)) returned 1 [0204.902] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0204.902] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22ff38 [0204.902] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-synch-l1-2-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0)) returned 1 [0204.902] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0204.902] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f5d8 [0204.902] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0204.902] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="api-ms-win-core-timezone-l1-1-0.dll", cAlternateFileName="AP7902~1.DLL")) returned 1 [0204.902] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22bec0 [0204.902] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229b60 [0204.902] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fce0 [0204.902] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229b60 | out: hHeap=0x1f0000) returned 1 [0204.902] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0204.902] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22bec0 | out: hHeap=0x1f0000) returned 1 [0204.902] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-timezone-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-timezone-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0204.903] GetFileType (hFile=0x218) returned 0x1 [0204.903] CloseHandle (hObject=0x218) returned 1 [0204.903] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x230000 [0204.903] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-timezone-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-timezone-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x48c0)) returned 1 [0204.903] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0204.903] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22ff38 [0204.903] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-timezone-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-timezone-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x48c0)) returned 1 [0204.903] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0204.903] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x2303e8 [0204.903] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0204.903] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x2d60, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="api-ms-win-core-xstate-l2-1-0.dll", cAlternateFileName="APA632~1.DLL")) returned 1 [0204.904] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22bdb8 [0204.904] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2299c8 [0204.904] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x230258 [0204.904] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2299c8 | out: hHeap=0x1f0000) returned 1 [0204.904] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0204.904] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22bdb8 | out: hHeap=0x1f0000) returned 1 [0204.904] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-xstate-l2-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-xstate-l2-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0204.904] GetFileType (hFile=0x218) returned 0x1 [0204.905] CloseHandle (hObject=0x218) returned 1 [0204.905] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22ff38 [0204.905] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-xstate-l2-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-xstate-l2-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x2d60)) returned 1 [0204.905] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0204.905] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f9c0 [0204.905] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-xstate-l2-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-xstate-l2-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x2d60)) returned 1 [0204.905] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0204.905] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x2303e8 [0204.905] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0204.905] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="api-ms-win-crt-conio-l1-1-0.dll", cAlternateFileName="AP5C76~1.DLL")) returned 1 [0204.905] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233e40 [0204.906] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229b60 [0204.906] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fb50 [0204.906] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229b60 | out: hHeap=0x1f0000) returned 1 [0204.906] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0204.906] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233e40 | out: hHeap=0x1f0000) returned 1 [0204.906] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-conio-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-conio-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0204.907] GetFileType (hFile=0x218) returned 0x1 [0204.907] CloseHandle (hObject=0x218) returned 1 [0204.907] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x230190 [0204.907] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-conio-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-conio-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0)) returned 1 [0204.908] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0204.908] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fda8 [0204.908] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-conio-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-conio-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0)) returned 1 [0204.908] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0204.908] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fe70 [0204.908] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0204.908] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x58c0, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="api-ms-win-crt-convert-l1-1-0.dll", cAlternateFileName="APFD9C~1.DLL")) returned 1 [0204.909] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22bdb8 [0204.909] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2299c8 [0204.909] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x2300c8 [0204.909] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2299c8 | out: hHeap=0x1f0000) returned 1 [0204.909] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0204.909] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22bdb8 | out: hHeap=0x1f0000) returned 1 [0204.909] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-convert-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0204.910] GetFileType (hFile=0x218) returned 0x1 [0204.910] CloseHandle (hObject=0x218) returned 1 [0204.910] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x230258 [0204.911] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-convert-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x58c0)) returned 1 [0204.911] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0204.911] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f6a0 [0204.911] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-convert-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x58c0)) returned 1 [0204.911] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0204.911] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f6a0 [0204.911] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0204.911] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="api-ms-win-crt-environment-l1-1-0.dll", cAlternateFileName="APC00F~1.DLL")) returned 1 [0204.911] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22bdb8 [0204.911] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a688 [0204.911] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x200978 [0204.911] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a688 | out: hHeap=0x1f0000) returned 1 [0204.912] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0204.912] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22bdb8 | out: hHeap=0x1f0000) returned 1 [0204.912] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-environment-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0204.912] GetFileType (hFile=0x218) returned 0x1 [0204.913] CloseHandle (hObject=0x218) returned 1 [0204.913] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x2007c8 [0204.913] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-environment-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0)) returned 1 [0204.913] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2007c8 | out: hHeap=0x1f0000) returned 1 [0204.913] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x2007c8 [0204.914] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-environment-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0)) returned 1 [0204.914] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2007c8 | out: hHeap=0x1f0000) returned 1 [0204.914] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x2007c8 [0204.914] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2007c8 | out: hHeap=0x1f0000) returned 1 [0204.914] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x50c0, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="api-ms-win-crt-filesystem-l1-1-0.dll", cAlternateFileName="AP0479~1.DLL")) returned 1 [0204.914] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22bdb8 [0204.914] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a0b0 [0204.914] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x2303e8 [0204.914] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a0b0 | out: hHeap=0x1f0000) returned 1 [0204.915] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x200978 | out: hHeap=0x1f0000) returned 1 [0204.915] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22bdb8 | out: hHeap=0x1f0000) returned 1 [0204.915] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-filesystem-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-filesystem-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0204.915] GetFileType (hFile=0x218) returned 0x1 [0204.916] CloseHandle (hObject=0x218) returned 1 [0204.916] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f8f8 [0204.916] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-filesystem-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-filesystem-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x50c0)) returned 1 [0204.916] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0204.917] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f5d8 [0204.917] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-filesystem-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-filesystem-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x50c0)) returned 1 [0204.917] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0204.917] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fda8 [0204.917] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0204.917] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="api-ms-win-crt-heap-l1-1-0.dll", cAlternateFileName="AP23C9~1.DLL")) returned 1 [0204.917] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233e40 [0204.917] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229ad8 [0204.917] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fce0 [0204.918] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229ad8 | out: hHeap=0x1f0000) returned 1 [0204.918] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0204.918] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233e40 | out: hHeap=0x1f0000) returned 1 [0204.919] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-heap-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-heap-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0204.919] GetFileType (hFile=0x218) returned 0x1 [0204.919] CloseHandle (hObject=0x218) returned 1 [0204.920] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x2300c8 [0204.920] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-heap-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-heap-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0)) returned 1 [0204.920] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0204.920] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fda8 [0204.920] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-heap-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-heap-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0)) returned 1 [0204.920] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0204.920] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x2303e8 [0204.921] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0204.921] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="api-ms-win-crt-locale-l1-1-0.dll", cAlternateFileName="APCB40~1.DLL")) returned 1 [0204.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22bdb8 [0204.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a688 [0204.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22ff38 [0204.921] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a688 | out: hHeap=0x1f0000) returned 1 [0204.921] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0204.921] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22bdb8 | out: hHeap=0x1f0000) returned 1 [0204.922] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-locale-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-locale-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0204.922] GetFileType (hFile=0x218) returned 0x1 [0204.923] CloseHandle (hObject=0x218) returned 1 [0204.923] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x2300c8 [0204.923] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-locale-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-locale-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0)) returned 1 [0204.924] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0204.924] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f9c0 [0204.924] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-locale-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-locale-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0)) returned 1 [0204.924] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0204.924] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x230000 [0204.924] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0204.924] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x6cc0, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="api-ms-win-crt-math-l1-1-0.dll", cAlternateFileName="APAE51~1.DLL")) returned 1 [0204.924] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233e40 [0204.925] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2299c8 [0204.925] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f768 [0204.925] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2299c8 | out: hHeap=0x1f0000) returned 1 [0204.925] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0204.925] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233e40 | out: hHeap=0x1f0000) returned 1 [0204.926] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-math-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-math-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0204.926] GetFileType (hFile=0x218) returned 0x1 [0204.926] CloseHandle (hObject=0x218) returned 1 [0204.927] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22ff38 [0204.927] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-math-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-math-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x6cc0)) returned 1 [0204.927] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0204.927] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f5d8 [0204.927] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-math-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-math-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x6cc0)) returned 1 [0204.927] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0204.927] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22ff38 [0204.927] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0204.928] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x68c0, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="api-ms-win-crt-multibyte-l1-1-0.dll", cAlternateFileName="AP972F~1.DLL")) returned 1 [0204.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22bdb8 [0204.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229e08 [0204.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fc18 [0204.928] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229e08 | out: hHeap=0x1f0000) returned 1 [0204.928] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0204.928] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22bdb8 | out: hHeap=0x1f0000) returned 1 [0204.929] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-multibyte-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-multibyte-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0204.929] GetFileType (hFile=0x218) returned 0x1 [0204.929] CloseHandle (hObject=0x218) returned 1 [0204.930] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22ff38 [0204.930] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-multibyte-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-multibyte-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x68c0)) returned 1 [0204.930] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0204.930] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x2303e8 [0204.930] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-multibyte-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-multibyte-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x68c0)) returned 1 [0204.930] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0204.930] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x230000 [0204.930] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0204.931] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x114c0, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="api-ms-win-crt-private-l1-1-0.dll", cAlternateFileName="AP7D9E~1.DLL")) returned 1 [0204.931] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22bdb8 [0204.931] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a2d0 [0204.931] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fce0 [0204.931] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a2d0 | out: hHeap=0x1f0000) returned 1 [0204.931] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0204.931] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22bdb8 | out: hHeap=0x1f0000) returned 1 [0204.932] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-private-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-private-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0204.932] GetFileType (hFile=0x218) returned 0x1 [0204.932] CloseHandle (hObject=0x218) returned 1 [0204.932] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22ff38 [0204.933] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-private-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-private-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x114c0)) returned 1 [0204.933] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0204.933] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f830 [0204.933] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-private-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-private-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x114c0)) returned 1 [0204.933] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0204.933] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f8f8 [0204.933] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0204.933] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="api-ms-win-crt-process-l1-1-0.dll", cAlternateFileName="APFCAD~1.DLL")) returned 1 [0204.933] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22bdb8 [0204.933] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229ad8 [0204.933] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x230190 [0204.934] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229ad8 | out: hHeap=0x1f0000) returned 1 [0204.934] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0204.934] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22bdb8 | out: hHeap=0x1f0000) returned 1 [0204.934] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-process-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-process-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0204.934] GetFileType (hFile=0x218) returned 0x1 [0204.935] CloseHandle (hObject=0x218) returned 1 [0204.935] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22ff38 [0204.935] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-process-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-process-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0)) returned 1 [0204.935] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0204.935] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x230000 [0204.935] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-process-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-process-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0)) returned 1 [0204.936] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0204.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22ff38 [0204.936] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0204.936] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x5ac0, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="api-ms-win-crt-runtime-l1-1-0.dll", cAlternateFileName="AP8F34~1.DLL")) returned 1 [0204.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22bdb8 [0204.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229d80 [0204.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fb50 [0204.936] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229d80 | out: hHeap=0x1f0000) returned 1 [0204.936] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0204.936] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22bdb8 | out: hHeap=0x1f0000) returned 1 [0204.936] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-runtime-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-runtime-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0204.937] GetFileType (hFile=0x218) returned 0x1 [0204.937] CloseHandle (hObject=0x218) returned 1 [0204.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f9c0 [0204.938] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-runtime-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-runtime-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x5ac0)) returned 1 [0204.938] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0204.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f768 [0204.938] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-runtime-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-runtime-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x5ac0)) returned 1 [0204.938] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0204.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22ff38 [0204.938] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0204.938] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x60c0, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="api-ms-win-crt-stdio-l1-1-0.dll", cAlternateFileName="APD1B7~1.DLL")) returned 1 [0204.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234110 [0205.253] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2299c8 [0205.253] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fce0 [0205.253] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2299c8 | out: hHeap=0x1f0000) returned 1 [0205.253] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0205.253] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234110 | out: hHeap=0x1f0000) returned 1 [0205.254] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-stdio-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-stdio-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0205.256] GetFileType (hFile=0x218) returned 0x1 [0205.256] CloseHandle (hObject=0x218) returned 1 [0205.257] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fe70 [0205.257] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-stdio-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-stdio-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x60c0)) returned 1 [0205.257] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0205.257] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x230258 [0205.257] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-stdio-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-stdio-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x60c0)) returned 1 [0205.257] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0205.257] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fda8 [0205.258] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0205.258] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x60c0, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="api-ms-win-crt-string-l1-1-0.dll", cAlternateFileName="APBF0F~1.DLL")) returned 1 [0205.258] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22bec0 [0205.258] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2299c8 [0205.258] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fda8 [0205.258] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2299c8 | out: hHeap=0x1f0000) returned 1 [0205.258] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0205.258] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22bec0 | out: hHeap=0x1f0000) returned 1 [0205.259] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-string-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-string-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0205.259] GetFileType (hFile=0x218) returned 0x1 [0205.260] CloseHandle (hObject=0x218) returned 1 [0205.260] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f768 [0205.260] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-string-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-string-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x60c0)) returned 1 [0205.260] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0205.260] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f768 [0205.261] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-string-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-string-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x60c0)) returned 1 [0205.261] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0205.261] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fc18 [0205.261] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0205.261] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x52c0, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="api-ms-win-crt-time-l1-1-0.dll", cAlternateFileName="AP5E4C~1.DLL")) returned 1 [0205.261] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234110 [0205.261] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2299c8 [0205.261] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f830 [0205.261] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2299c8 | out: hHeap=0x1f0000) returned 1 [0205.261] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0205.261] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234110 | out: hHeap=0x1f0000) returned 1 [0205.262] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-time-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-time-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0205.262] GetFileType (hFile=0x218) returned 0x1 [0205.262] CloseHandle (hObject=0x218) returned 1 [0205.262] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x2300c8 [0205.262] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-time-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-time-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x52c0)) returned 1 [0205.263] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0205.263] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fda8 [0205.263] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-time-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-time-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x52c0)) returned 1 [0205.263] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0205.263] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f8f8 [0205.263] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0205.263] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="api-ms-win-crt-utility-l1-1-0.dll", cAlternateFileName="AP80F4~1.DLL")) returned 1 [0205.263] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22bec0 [0205.263] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a0b0 [0205.264] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f768 [0205.264] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a0b0 | out: hHeap=0x1f0000) returned 1 [0205.264] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0205.264] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22bec0 | out: hHeap=0x1f0000) returned 1 [0205.264] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-utility-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-utility-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0205.265] GetFileType (hFile=0x218) returned 0x1 [0205.265] CloseHandle (hObject=0x218) returned 1 [0205.265] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x230190 [0205.265] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-utility-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-utility-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0)) returned 1 [0205.266] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0205.266] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f5d8 [0205.266] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-utility-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-utility-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0)) returned 1 [0205.266] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0205.266] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fce0 [0205.266] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0205.266] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb979f700, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x27c40, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="ApiClient.dll", cAlternateFileName="APICLI~1.DLL")) returned 1 [0205.266] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0205.266] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a0b0 [0205.267] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0205.267] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a0b0 | out: hHeap=0x1f0000) returned 1 [0205.267] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0205.267] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0205.268] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ApiClient.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\apiclient.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0205.269] GetLastError () returned 0x20 [0205.269] GetLastError () returned 0x20 [0205.269] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9bc01200, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0xa02d8, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="AppVCatalog.dll", cAlternateFileName="APPVCA~1.DLL")) returned 1 [0205.269] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0205.269] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a0b0 [0205.269] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0205.270] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a0b0 | out: hHeap=0x1f0000) returned 1 [0205.270] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0205.270] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0205.270] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVCatalog.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvcatalog.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0205.271] GetLastError () returned 0x20 [0205.271] GetLastError () returned 0x20 [0205.271] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x1f5ad8, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="appvcleaner.exe", cAlternateFileName="APPVCL~1.EXE")) returned 1 [0205.271] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260770 [0205.271] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a688 [0205.271] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0205.271] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a688 | out: hHeap=0x1f0000) returned 1 [0205.271] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0205.272] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0205.272] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\appvcleaner.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvcleaner.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0205.272] GetFileType (hFile=0x218) returned 0x1 [0205.272] CloseHandle (hObject=0x218) returned 1 [0205.272] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a038 [0205.272] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\appvcleaner.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvcleaner.exe"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x1f5ad8)) returned 1 [0205.273] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a038 | out: hHeap=0x1f0000) returned 1 [0205.273] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219f90 [0205.273] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\appvcleaner.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvcleaner.exe"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x1f5ad8)) returned 1 [0205.273] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219f90 | out: hHeap=0x1f0000) returned 1 [0205.273] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a578 [0205.273] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a578 | out: hHeap=0x1f0000) returned 1 [0205.273] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a330a6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a330a6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x4b0d8, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="AppVFileSystemMetadata.dll", cAlternateFileName="APPVFI~1.DLL")) returned 1 [0205.273] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234110 [0205.274] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a688 [0205.274] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0205.274] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a688 | out: hHeap=0x1f0000) returned 1 [0205.274] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0205.274] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234110 | out: hHeap=0x1f0000) returned 1 [0205.274] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVFileSystemMetadata.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvfilesystemmetadata.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0205.275] GetLastError () returned 0x20 [0205.275] GetLastError () returned 0x20 [0205.275] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a330a6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a330a6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x2052d8, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="AppVIntegration.dll", cAlternateFileName="APPVIN~1.DLL")) returned 1 [0205.275] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2f0 [0205.275] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a688 [0205.275] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0205.275] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a688 | out: hHeap=0x1f0000) returned 1 [0205.275] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0205.275] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0205.276] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIntegration.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvintegration.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0205.276] GetLastError () returned 0x20 [0205.276] GetLastError () returned 0x20 [0205.276] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a59305, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a59305, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x726d8, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="AppVIsvApi.dll", cAlternateFileName="APPVIS~1.DLL")) returned 1 [0205.276] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0205.276] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a0b0 [0205.276] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0205.276] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a0b0 | out: hHeap=0x1f0000) returned 1 [0205.276] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0205.276] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0205.277] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvApi.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvapi.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0205.277] GetLastError () returned 0x20 [0205.277] GetLastError () returned 0x20 [0205.277] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a7f55d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a7f55d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe1b7300, ftLastWriteTime.dwHighDateTime=0x1d0d7a5, nFileSizeHigh=0x0, nFileSizeLow=0x60ea0, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="AppvIsvStream32.dll", cAlternateFileName="APPVIS~2.DLL")) returned 1 [0205.277] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0205.277] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a2d0 [0205.277] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0205.277] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a2d0 | out: hHeap=0x1f0000) returned 1 [0205.278] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0205.278] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0205.278] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream32.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0205.278] GetFileType (hFile=0x218) returned 0x1 [0205.278] CloseHandle (hObject=0x218) returned 1 [0205.279] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a380 [0205.279] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream32.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a7f55d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a7f55d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe1b7300, ftLastWriteTime.dwHighDateTime=0x1d0d7a5, nFileSizeHigh=0x0, nFileSizeLow=0x60ea0)) returned 1 [0205.279] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a380 | out: hHeap=0x1f0000) returned 1 [0205.279] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219c48 [0205.279] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream32.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a7f55d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a7f55d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe1b7300, ftLastWriteTime.dwHighDateTime=0x1d0d7a5, nFileSizeHigh=0x0, nFileSizeLow=0x60ea0)) returned 1 [0205.279] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219c48 | out: hHeap=0x1f0000) returned 1 [0205.279] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a2d8 [0205.279] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a2d8 | out: hHeap=0x1f0000) returned 1 [0205.279] GetLastError () returned 0x0 [0205.280] CryptAcquireContextA (in: phProv=0x1a1daf0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1a1daf0*=0x22a0b0) returned 1 [0205.285] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x260978 | out: pbBuffer=0x260978) returned 1 [0205.285] CryptReleaseContext (hProv=0x22a0b0, dwFlags=0x0) returned 1 [0205.285] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0205.286] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x255c88 [0205.286] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x22b018 [0205.286] QueryPerformanceCounter (in: lpPerformanceCount=0x1a1da84 | out: lpPerformanceCount=0x1a1da84*=36265465508) returned 1 [0205.286] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1a1dac4 | out: lpSystemTimeAsFileTime=0x1a1dac4) [0205.286] QueryPerformanceCounter (in: lpPerformanceCount=0x1a1da84 | out: lpPerformanceCount=0x1a1da84*=36265492449) returned 1 [0205.286] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1a1dac4 | out: lpSystemTimeAsFileTime=0x1a1dac4) [0205.286] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x21cf00 [0205.286] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x24fd60 [0205.286] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x217038 [0205.286] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x24f5d8 [0205.286] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffe8 [0205.287] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206658 [0205.287] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210078 [0205.287] GetLastError () returned 0x0 [0205.287] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream32.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream32.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d990, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0205.660] GetFileType (hFile=0x204) returned 0x1 [0205.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c710 [0205.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c630 [0205.660] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream32.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d9c0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0205.660] GetFileType (hFile=0x210) returned 0x1 [0205.661] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205290 [0205.661] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205130 [0205.661] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261388 [0205.661] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c720 [0205.661] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c560 [0205.661] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream32.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream32.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d90c, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0205.661] GetFileType (hFile=0x1fc) returned 0x1 [0205.662] GetLastError () returned 0xb7 [0205.662] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream32.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream32.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d90c, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc [0205.662] GetFileType (hFile=0x1cc) returned 0x1 [0205.662] GetLastError () returned 0xb7 [0205.662] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream32.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d904, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8 [0205.663] GetFileType (hFile=0x1c8) returned 0x1 [0205.663] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x23bdb8 [0205.663] ReadFile (in: hFile=0x1c8, lpBuffer=0x23bdb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1d860, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesRead=0x1a1d860*=0x1000, lpOverlapped=0x0) returned 1 [0205.665] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24ca08 [0205.666] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x243df8 [0205.666] GetLastError () returned 0x0 [0205.669] GetLastError () returned 0x0 [0205.689] CloseHandle (hObject=0x204) returned 1 [0205.703] CloseHandle (hObject=0x210) returned 1 [0205.704] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c5a0 [0205.704] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c690 [0205.976] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream32.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d9c0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0205.982] GetFileType (hFile=0x210) returned 0x1 [0205.983] GetLastError () returned 0xb7 [0205.984] CloseHandle (hObject=0x210) returned 1 [0205.985] DeleteFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream32.dll")) returned 0 [0205.985] GetLastError () returned 0x20 [0205.985] GetLastError () returned 0x20 [0205.985] CryptAcquireContextA (in: phProv=0x1a1daf0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1a1daf0*=0x213570) returned 1 [0205.989] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x260888 | out: pbBuffer=0x260888) returned 1 [0205.989] CryptReleaseContext (hProv=0x213570, dwFlags=0x0) returned 1 [0205.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0205.989] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260748 [0205.989] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260900 [0205.989] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf70 [0205.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0205.989] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0205.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf70 | out: hHeap=0x1f0000) returned 1 [0205.989] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x22c8b8 [0205.989] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff70 [0205.990] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x235970 [0205.990] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2606d0 [0205.990] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x25ffe8 [0205.990] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ff0 [0205.990] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236128 [0205.990] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2606f8 [0205.990] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x222ee8 [0205.990] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c6b0 [0205.990] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260518 [0205.990] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210090 [0205.990] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c590 [0205.990] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2607e8 [0205.990] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffa0 [0205.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffa0 | out: hHeap=0x1f0000) returned 1 [0205.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607e8 | out: hHeap=0x1f0000) returned 1 [0205.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c590 | out: hHeap=0x1f0000) returned 1 [0205.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210090 | out: hHeap=0x1f0000) returned 1 [0205.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0205.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c6b0 | out: hHeap=0x1f0000) returned 1 [0205.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ee8 | out: hHeap=0x1f0000) returned 1 [0205.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606f8 | out: hHeap=0x1f0000) returned 1 [0205.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236128 | out: hHeap=0x1f0000) returned 1 [0205.991] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x21cf70 [0205.991] GetLastError () returned 0x0 [0205.991] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1a1d680 | out: lpSystemTimeAsFileTime=0x1a1d680) [0205.991] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x21c590 [0205.992] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2607e8 [0205.992] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205210 [0205.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205210 | out: hHeap=0x1f0000) returned 1 [0205.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607e8 | out: hHeap=0x1f0000) returned 1 [0205.992] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0205.992] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205210 [0205.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205210 | out: hHeap=0x1f0000) returned 1 [0205.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0205.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c590 | out: hHeap=0x1f0000) returned 1 [0205.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0205.992] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x1fef78 [0205.992] GetLastError () returned 0x0 [0205.993] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream32.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream32.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d9f0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0205.993] GetFileType (hFile=0x210) returned 0x1 [0205.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x245e08 [0205.993] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1a1d978 | out: lpNewFilePointer=0x0) returned 1 [0205.994] GetLastError () returned 0xb7 [0205.994] CloseHandle (hObject=0x210) returned 1 [0205.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c610 | out: hHeap=0x1f0000) returned 1 [0205.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c640 | out: hHeap=0x1f0000) returned 1 [0205.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ee8 | out: hHeap=0x1f0000) returned 1 [0205.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25ffe8 | out: hHeap=0x1f0000) returned 1 [0205.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0205.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ff0 | out: hHeap=0x1f0000) returned 1 [0205.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235970 | out: hHeap=0x1f0000) returned 1 [0205.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff70 | out: hHeap=0x1f0000) returned 1 [0205.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0205.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224900 | out: hHeap=0x1f0000) returned 1 [0205.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260900 | out: hHeap=0x1f0000) returned 1 [0205.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0205.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25a8a8 | out: hHeap=0x1f0000) returned 1 [0205.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2230f8 | out: hHeap=0x1f0000) returned 1 [0205.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0205.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c570 | out: hHeap=0x1f0000) returned 1 [0205.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210000 | out: hHeap=0x1f0000) returned 1 [0205.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0205.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c580 | out: hHeap=0x1f0000) returned 1 [0205.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff28 | out: hHeap=0x1f0000) returned 1 [0205.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0205.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c600 | out: hHeap=0x1f0000) returned 1 [0205.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2600f0 | out: hHeap=0x1f0000) returned 1 [0205.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607c0 | out: hHeap=0x1f0000) returned 1 [0205.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235f20 | out: hHeap=0x1f0000) returned 1 [0205.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2348f0 | out: hHeap=0x1f0000) returned 1 [0205.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0205.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0205.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346b0 | out: hHeap=0x1f0000) returned 1 [0205.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c690 | out: hHeap=0x1f0000) returned 1 [0205.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5a0 | out: hHeap=0x1f0000) returned 1 [0205.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x23bdb8 | out: hHeap=0x1f0000) returned 1 [0205.997] CloseHandle (hObject=0x1c8) returned 1 [0205.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c6d0 | out: hHeap=0x1f0000) returned 1 [0205.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c620 | out: hHeap=0x1f0000) returned 1 [0205.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20dd00 | out: hHeap=0x1f0000) returned 1 [0205.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24ca08 | out: hHeap=0x1f0000) returned 1 [0205.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffd0 | out: hHeap=0x1f0000) returned 1 [0205.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2051f0 | out: hHeap=0x1f0000) returned 1 [0205.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x243df8 | out: hHeap=0x1f0000) returned 1 [0205.998] CloseHandle (hObject=0x1cc) returned 1 [0205.998] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5e0 | out: hHeap=0x1f0000) returned 1 [0205.998] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c6f0 | out: hHeap=0x1f0000) returned 1 [0205.998] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261160 | out: hHeap=0x1f0000) returned 1 [0205.998] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205130 | out: hHeap=0x1f0000) returned 1 [0205.998] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220a58 | out: hHeap=0x1f0000) returned 1 [0205.998] CloseHandle (hObject=0x1fc) returned 1 [0205.999] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c560 | out: hHeap=0x1f0000) returned 1 [0205.999] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c720 | out: hHeap=0x1f0000) returned 1 [0205.999] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261388 | out: hHeap=0x1f0000) returned 1 [0205.999] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c630 | out: hHeap=0x1f0000) returned 1 [0205.999] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c710 | out: hHeap=0x1f0000) returned 1 [0205.999] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c700 | out: hHeap=0x1f0000) returned 1 [0205.999] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c670 | out: hHeap=0x1f0000) returned 1 [0206.000] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20d998 | out: hHeap=0x1f0000) returned 1 [0206.000] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24fd60 | out: hHeap=0x1f0000) returned 1 [0206.000] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0206.000] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206658 | out: hHeap=0x1f0000) returned 1 [0206.000] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210078 | out: hHeap=0x1f0000) returned 1 [0206.000] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffe8 | out: hHeap=0x1f0000) returned 1 [0206.000] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f5d8 | out: hHeap=0x1f0000) returned 1 [0206.000] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x255c88 | out: hHeap=0x1f0000) returned 1 [0206.000] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b018 | out: hHeap=0x1f0000) returned 1 [0206.000] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0206.000] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a2d8 | out: hHeap=0x1f0000) returned 1 [0206.000] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f350 | out: hHeap=0x1f0000) returned 1 [0206.000] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234110 | out: hHeap=0x1f0000) returned 1 [0206.000] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0206.000] DeleteFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream32.dll")) returned 1 [0206.003] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a7f55d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a7f55d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb5e67000, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x73aa0, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="AppvIsvStream64.dll", cAlternateFileName="APPVIS~3.DLL")) returned 1 [0206.003] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0206.003] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0206.003] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0206.003] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0206.003] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0206.003] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0206.003] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream64.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0206.004] GetFileType (hFile=0x1fc) returned 0x1 [0206.004] CloseHandle (hObject=0x1fc) returned 1 [0206.004] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219f90 [0206.004] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream64.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a7f55d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a7f55d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb5e67000, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x73aa0)) returned 1 [0206.004] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219f90 | out: hHeap=0x1f0000) returned 1 [0206.004] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219cf0 [0206.004] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream64.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a7f55d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a7f55d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb5e67000, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x73aa0)) returned 1 [0206.005] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219cf0 | out: hHeap=0x1f0000) returned 1 [0206.005] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219e40 [0206.005] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219e40 | out: hHeap=0x1f0000) returned 1 [0206.005] GetLastError () returned 0x0 [0206.005] CryptAcquireContextA (in: phProv=0x1a1daf0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1a1daf0*=0x213818) returned 1 [0206.008] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2606f8 | out: pbBuffer=0x2606f8) returned 1 [0206.008] CryptReleaseContext (hProv=0x213818, dwFlags=0x0) returned 1 [0206.008] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606f8 | out: hHeap=0x1f0000) returned 1 [0206.008] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x24fd60 [0206.008] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x22b018 [0206.008] QueryPerformanceCounter (in: lpPerformanceCount=0x1a1da84 | out: lpPerformanceCount=0x1a1da84*=36337702884) returned 1 [0206.008] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1a1dac4 | out: lpSystemTimeAsFileTime=0x1a1dac4) [0206.008] QueryPerformanceCounter (in: lpPerformanceCount=0x1a1da84 | out: lpPerformanceCount=0x1a1da84*=36337725881) returned 1 [0206.008] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1a1dac4 | out: lpSystemTimeAsFileTime=0x1a1dac4) [0206.009] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x1ff058 [0206.009] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x255c88 [0206.009] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x220a58 [0206.009] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x24f5d8 [0206.009] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff28 [0206.009] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206808 [0206.009] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff70 [0206.009] GetLastError () returned 0x0 [0206.009] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream64.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream64.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d990, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0206.010] GetFileType (hFile=0x1fc) returned 0x1 [0206.010] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c670 [0206.010] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c5f0 [0206.011] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream64.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d9c0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc [0206.011] GetFileType (hFile=0x1cc) returned 0x1 [0206.011] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205290 [0206.011] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205130 [0206.011] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2614f8 [0206.011] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c710 [0206.012] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c640 [0206.012] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream64.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream64.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d90c, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8 [0206.013] GetFileType (hFile=0x1c8) returned 0x1 [0206.013] GetLastError () returned 0xb7 [0206.013] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream64.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream64.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d90c, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0206.013] GetFileType (hFile=0x210) returned 0x1 [0206.013] GetLastError () returned 0xb7 [0206.014] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream64.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d904, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0206.014] GetFileType (hFile=0x204) returned 0x1 [0206.014] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x23bdb8 [0206.014] ReadFile (in: hFile=0x204, lpBuffer=0x23bdb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1d860, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesRead=0x1a1d860*=0x1000, lpOverlapped=0x0) returned 1 [0206.377] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24c600 [0206.379] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x23ddc8 [0206.379] GetLastError () returned 0x0 [0206.408] CloseHandle (hObject=0x1fc) returned 1 [0206.760] CloseHandle (hObject=0x1cc) returned 1 [0206.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c620 [0206.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c6b0 [0206.761] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream64.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d9c0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc [0206.767] GetFileType (hFile=0x1cc) returned 0x1 [0206.768] GetLastError () returned 0xb7 [0206.769] CloseHandle (hObject=0x1cc) returned 1 [0206.769] DeleteFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream64.dll")) returned 0 [0206.770] GetLastError () returned 0x20 [0206.770] GetLastError () returned 0x20 [0206.770] CryptAcquireContextA (in: phProv=0x1a1daf0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1a1daf0*=0x212250) returned 1 [0206.773] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2608d8 | out: pbBuffer=0x2608d8) returned 1 [0206.773] CryptReleaseContext (hProv=0x212250, dwFlags=0x0) returned 1 [0206.773] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0206.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2604f0 [0206.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260928 [0206.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0206.773] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0206.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0206.773] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0206.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x22c8b8 [0206.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210000 [0206.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x235700 [0206.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2607c0 [0206.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2231b8 [0206.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x2052d0 [0206.774] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235908 [0206.774] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260658 [0206.774] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2600f0 [0206.774] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c700 [0206.774] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2607e8 [0206.774] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210018 [0206.774] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c570 [0206.774] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605b8 [0206.774] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2100a8 [0206.774] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2100a8 | out: hHeap=0x1f0000) returned 1 [0206.774] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0206.774] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c570 | out: hHeap=0x1f0000) returned 1 [0206.774] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210018 | out: hHeap=0x1f0000) returned 1 [0206.774] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607e8 | out: hHeap=0x1f0000) returned 1 [0206.774] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c700 | out: hHeap=0x1f0000) returned 1 [0206.774] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2600f0 | out: hHeap=0x1f0000) returned 1 [0206.774] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260658 | out: hHeap=0x1f0000) returned 1 [0206.774] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235908 | out: hHeap=0x1f0000) returned 1 [0206.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x21d050 [0206.775] GetLastError () returned 0x0 [0206.775] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1a1d680 | out: lpSystemTimeAsFileTime=0x1a1d680) [0206.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x21c700 [0206.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260518 [0206.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x2052f0 [0206.775] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2052f0 | out: hHeap=0x1f0000) returned 1 [0206.775] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0206.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0206.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x2052f0 [0206.775] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2052f0 | out: hHeap=0x1f0000) returned 1 [0206.775] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0206.775] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c700 | out: hHeap=0x1f0000) returned 1 [0206.775] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0206.776] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x21d050 [0206.776] GetLastError () returned 0x0 [0206.776] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream64.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream64.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d9f0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc [0206.776] GetFileType (hFile=0x1cc) returned 0x1 [0206.777] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x247e18 [0206.777] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1a1d978 | out: lpNewFilePointer=0x0) returned 1 [0206.777] GetLastError () returned 0xb7 [0206.777] CloseHandle (hObject=0x1cc) returned 1 [0206.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c570 | out: hHeap=0x1f0000) returned 1 [0206.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c700 | out: hHeap=0x1f0000) returned 1 [0206.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2600f0 | out: hHeap=0x1f0000) returned 1 [0206.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2231b8 | out: hHeap=0x1f0000) returned 1 [0206.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607c0 | out: hHeap=0x1f0000) returned 1 [0206.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2052d0 | out: hHeap=0x1f0000) returned 1 [0206.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0206.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210000 | out: hHeap=0x1f0000) returned 1 [0206.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0206.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223cf8 | out: hHeap=0x1f0000) returned 1 [0206.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0206.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0206.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25bbb0 | out: hHeap=0x1f0000) returned 1 [0206.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230968 | out: hHeap=0x1f0000) returned 1 [0206.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf70 | out: hHeap=0x1f0000) returned 1 [0206.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c6d0 | out: hHeap=0x1f0000) returned 1 [0206.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffe8 | out: hHeap=0x1f0000) returned 1 [0206.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0206.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c720 | out: hHeap=0x1f0000) returned 1 [0206.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210090 | out: hHeap=0x1f0000) returned 1 [0206.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0206.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c6c0 | out: hHeap=0x1f0000) returned 1 [0206.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25ffe8 | out: hHeap=0x1f0000) returned 1 [0206.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0206.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236058 | out: hHeap=0x1f0000) returned 1 [0206.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234740 | out: hHeap=0x1f0000) returned 1 [0206.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260798 | out: hHeap=0x1f0000) returned 1 [0206.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0206.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346f8 | out: hHeap=0x1f0000) returned 1 [0206.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c6b0 | out: hHeap=0x1f0000) returned 1 [0206.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c620 | out: hHeap=0x1f0000) returned 1 [0206.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x23bdb8 | out: hHeap=0x1f0000) returned 1 [0206.779] CloseHandle (hObject=0x204) returned 1 [0206.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5a0 | out: hHeap=0x1f0000) returned 1 [0206.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c630 | out: hHeap=0x1f0000) returned 1 [0206.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20dd00 | out: hHeap=0x1f0000) returned 1 [0206.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24c600 | out: hHeap=0x1f0000) returned 1 [0206.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffd0 | out: hHeap=0x1f0000) returned 1 [0206.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2051f0 | out: hHeap=0x1f0000) returned 1 [0206.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x23ddc8 | out: hHeap=0x1f0000) returned 1 [0206.779] CloseHandle (hObject=0x210) returned 1 [0206.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c680 | out: hHeap=0x1f0000) returned 1 [0206.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c580 | out: hHeap=0x1f0000) returned 1 [0206.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261388 | out: hHeap=0x1f0000) returned 1 [0206.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205130 | out: hHeap=0x1f0000) returned 1 [0206.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0206.780] CloseHandle (hObject=0x1c8) returned 1 [0206.781] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c640 | out: hHeap=0x1f0000) returned 1 [0206.781] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c710 | out: hHeap=0x1f0000) returned 1 [0206.781] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2614f8 | out: hHeap=0x1f0000) returned 1 [0206.781] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5f0 | out: hHeap=0x1f0000) returned 1 [0206.781] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c670 | out: hHeap=0x1f0000) returned 1 [0206.781] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5e0 | out: hHeap=0x1f0000) returned 1 [0206.781] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c590 | out: hHeap=0x1f0000) returned 1 [0206.781] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20d998 | out: hHeap=0x1f0000) returned 1 [0206.781] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x255c88 | out: hHeap=0x1f0000) returned 1 [0206.781] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220a58 | out: hHeap=0x1f0000) returned 1 [0206.781] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206808 | out: hHeap=0x1f0000) returned 1 [0206.781] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff70 | out: hHeap=0x1f0000) returned 1 [0206.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff28 | out: hHeap=0x1f0000) returned 1 [0206.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f5d8 | out: hHeap=0x1f0000) returned 1 [0206.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24fd60 | out: hHeap=0x1f0000) returned 1 [0206.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b018 | out: hHeap=0x1f0000) returned 1 [0206.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0206.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219c48 | out: hHeap=0x1f0000) returned 1 [0206.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226ec0 | out: hHeap=0x1f0000) returned 1 [0206.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234110 | out: hHeap=0x1f0000) returned 1 [0206.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0206.782] DeleteFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream64.dll")) returned 1 [0206.785] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a7f55d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a7f55d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x336d8, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="AppVIsvStreamingManager.dll", cAlternateFileName="APPVIS~4.DLL")) returned 1 [0206.785] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234110 [0206.785] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0206.785] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0206.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0206.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0206.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234110 | out: hHeap=0x1f0000) returned 1 [0206.785] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvStreamingManager.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstreamingmanager.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0206.786] GetLastError () returned 0x20 [0206.786] GetLastError () returned 0x20 [0206.786] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80aa57b9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80aa57b9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x1566d8, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="AppVIsvSubsystemController.dll", cAlternateFileName="AP213A~1.DLL")) returned 1 [0206.786] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234110 [0206.786] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0206.786] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fce0 [0206.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0206.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0206.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234110 | out: hHeap=0x1f0000) returned 1 [0206.787] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvSubsystemController.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystemcontroller.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0206.787] GetLastError () returned 0x20 [0206.787] GetLastError () returned 0x20 [0206.787] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80aa57b9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80aa57b9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x18d60800, ftLastWriteTime.dwHighDateTime=0x1d0d7a5, nFileSizeHigh=0x0, nFileSizeLow=0x1ae0a8, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="AppvIsvSubsystems32.dll", cAlternateFileName="AP3342~1.DLL")) returned 1 [0206.787] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf70 [0206.787] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d88 [0206.787] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0206.787] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d88 | out: hHeap=0x1f0000) returned 1 [0206.787] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0206.788] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf70 | out: hHeap=0x1f0000) returned 1 [0206.788] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems32.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8 [0206.788] GetFileType (hFile=0x1c8) returned 0x1 [0206.788] CloseHandle (hObject=0x1c8) returned 1 [0207.506] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261388 [0207.506] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems32.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80aa57b9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80aa57b9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc50720e6, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x1ae0a8)) returned 1 [0207.507] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261388 | out: hHeap=0x1f0000) returned 1 [0207.507] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261388 [0207.507] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems32.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80aa57b9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80aa57b9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc50720e6, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x1ae0a8)) returned 1 [0207.507] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261388 | out: hHeap=0x1f0000) returned 1 [0207.507] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261388 [0207.507] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261388 | out: hHeap=0x1f0000) returned 1 [0207.507] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80acba0b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80acba0b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbbdc5100, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x22e0a8, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="AppvIsvSubsystems64.dll", cAlternateFileName="AP4400~1.DLL")) returned 1 [0207.507] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0207.507] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211a58 [0207.507] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0207.508] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211a58 | out: hHeap=0x1f0000) returned 1 [0207.512] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0207.512] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0207.513] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems64.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8 [0207.513] GetFileType (hFile=0x1c8) returned 0x1 [0207.513] CloseHandle (hObject=0x1c8) returned 1 [0207.514] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261388 [0207.514] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems64.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80acba0b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80acba0b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbbdc5100, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x22e0a8)) returned 1 [0207.514] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261388 | out: hHeap=0x1f0000) returned 1 [0207.514] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261388 [0207.514] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems64.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80acba0b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80acba0b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbbdc5100, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x22e0a8)) returned 1 [0207.514] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261388 | out: hHeap=0x1f0000) returned 1 [0207.514] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261388 [0207.514] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261388 | out: hHeap=0x1f0000) returned 1 [0207.514] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80af1c6a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80af1c6a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x8a8d8, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="AppVIsvVirtualization.dll", cAlternateFileName="AP485B~1.DLL")) returned 1 [0207.514] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234740 [0207.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212828 [0207.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0207.515] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212828 | out: hHeap=0x1f0000) returned 1 [0207.515] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0207.515] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234740 | out: hHeap=0x1f0000) returned 1 [0207.515] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvVirtualization.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvvirtualization.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0207.516] GetLastError () returned 0x20 [0207.516] GetLastError () returned 0x20 [0207.516] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80af1c6a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80af1c6a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x12cad8, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="AppVManifest.dll", cAlternateFileName="APPVMA~1.DLL")) returned 1 [0207.516] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0207.516] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0207.516] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0207.516] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0207.516] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0207.516] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0207.517] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVManifest.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvmanifest.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0207.517] GetLastError () returned 0x20 [0207.517] GetLastError () returned 0x20 [0207.517] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b17ebf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b17ebf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0xe76d8, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="AppVOrchestration.dll", cAlternateFileName="APPVOR~1.DLL")) returned 1 [0207.517] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0207.517] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2120b8 [0207.517] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0207.517] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2120b8 | out: hHeap=0x1f0000) returned 1 [0207.517] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0207.518] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0207.518] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVOrchestration.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvorchestration.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0207.518] GetLastError () returned 0x20 [0207.518] GetLastError () returned 0x20 [0207.518] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b17ebf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b17ebf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x13c4d8, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="AppVPolicy.dll", cAlternateFileName="APPVPO~1.DLL")) returned 1 [0207.519] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0207.519] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212030 [0207.519] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0207.519] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212030 | out: hHeap=0x1f0000) returned 1 [0207.519] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0207.519] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0207.520] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVPolicy.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvpolicy.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0207.520] GetLastError () returned 0x20 [0207.520] GetLastError () returned 0x20 [0207.520] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b17ebf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b17ebf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9e226c00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x7d0d8, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="AppVScripting.dll", cAlternateFileName="APPVSC~1.DLL")) returned 1 [0207.521] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0207.521] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212030 [0207.521] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0207.521] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212030 | out: hHeap=0x1f0000) returned 1 [0207.521] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0207.521] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0207.522] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVScripting.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvscripting.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8 [0207.522] GetFileType (hFile=0x1c8) returned 0x1 [0207.522] CloseHandle (hObject=0x1c8) returned 1 [0207.522] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219cf0 [0207.522] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVScripting.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvscripting.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b17ebf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b17ebf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9e226c00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x7d0d8)) returned 1 [0207.523] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219cf0 | out: hHeap=0x1f0000) returned 1 [0207.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a4d0 [0207.523] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVScripting.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvscripting.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b17ebf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b17ebf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9e226c00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x7d0d8)) returned 1 [0207.523] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a4d0 | out: hHeap=0x1f0000) returned 1 [0207.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219f90 [0207.523] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219f90 | out: hHeap=0x1f0000) returned 1 [0207.523] GetLastError () returned 0x0 [0207.523] CryptAcquireContextA (in: phProv=0x1a1daf0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1a1daf0*=0x2121c8) returned 1 [0207.528] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x260978 | out: pbBuffer=0x260978) returned 1 [0207.528] CryptReleaseContext (hProv=0x2121c8, dwFlags=0x0) returned 1 [0207.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0207.528] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x25ceb8 [0207.528] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x230860 [0207.528] QueryPerformanceCounter (in: lpPerformanceCount=0x1a1da84 | out: lpPerformanceCount=0x1a1da84*=36489702442) returned 1 [0207.528] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1a1dac4 | out: lpSystemTimeAsFileTime=0x1a1dac4) [0207.528] QueryPerformanceCounter (in: lpPerformanceCount=0x1a1da84 | out: lpPerformanceCount=0x1a1da84*=36489726060) returned 1 [0207.528] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1a1dac4 | out: lpSystemTimeAsFileTime=0x1a1dac4) [0207.529] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x21d050 [0207.529] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x266290 [0207.532] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x230970 [0207.532] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x2601f8 [0207.532] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210210 [0207.532] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2066b8 [0207.533] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0207.533] GetLastError () returned 0x0 [0207.533] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVScripting.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvscripting.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d990, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8 [0207.534] GetFileType (hFile=0x1c8) returned 0x1 [0207.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c4f0 [0207.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c520 [0207.536] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVScripting.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvscripting.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d9c0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0207.536] GetFileType (hFile=0x1f4) returned 0x1 [0207.537] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205330 [0207.537] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205130 [0207.537] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261388 [0207.537] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c3a0 [0207.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c4b0 [0207.538] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVScripting.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvscripting.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d90c, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0207.539] GetFileType (hFile=0x1e8) returned 0x1 [0207.540] GetLastError () returned 0xb7 [0207.540] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVScripting.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvscripting.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d90c, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0207.540] GetFileType (hFile=0x218) returned 0x1 [0207.541] GetLastError () returned 0xb7 [0207.541] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVScripting.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvscripting.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d904, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0207.541] GetFileType (hFile=0x1c0) returned 0x1 [0207.542] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x245e08 [0207.542] ReadFile (in: hFile=0x1c0, lpBuffer=0x245e08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1d860, lpOverlapped=0x0 | out: lpBuffer=0x245e08*, lpNumberOfBytesRead=0x1a1d860*=0x1000, lpOverlapped=0x0) returned 1 [0207.787] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24b1d8 [0207.789] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28dfd0 [0207.794] GetLastError () returned 0x0 [0207.829] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff28 [0207.830] GetLastError () returned 0x0 [0207.830] CloseHandle (hObject=0x1c8) returned 1 [0208.196] CloseHandle (hObject=0x1f4) returned 1 [0208.197] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c630 [0208.198] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c640 [0208.199] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVScripting.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvscripting.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d9c0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0208.208] GetFileType (hFile=0x1f4) returned 0x1 [0208.212] GetLastError () returned 0xb7 [0208.213] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x286f98 [0208.214] GetLastError () returned 0xb7 [0208.576] CloseHandle (hObject=0x1f4) returned 1 [0208.577] DeleteFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVScripting.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvscripting.dll")) returned 0 [0208.578] GetLastError () returned 0x20 [0208.578] GetLastError () returned 0x20 [0208.578] CryptAcquireContextA (in: phProv=0x1a1daf0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1a1daf0*=0x212718) returned 1 [0208.621] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2608b0 | out: pbBuffer=0x2608b0) returned 1 [0208.621] CryptReleaseContext (hProv=0x212718, dwFlags=0x0) returned 1 [0208.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608b0 | out: hHeap=0x1f0000) returned 1 [0208.621] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2606d0 [0208.621] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260978 [0208.621] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0208.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0208.621] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0208.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0208.621] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x263f98 [0208.622] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff70 [0208.622] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x2361f8 [0208.622] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260748 [0208.622] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2648e8 [0208.622] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205210 [0208.622] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235700 [0208.622] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2604f0 [0208.622] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x220a58 [0208.622] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c5c0 [0208.622] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260798 [0208.622] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffd0 [0208.622] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c620 [0208.622] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260518 [0208.622] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210258 [0208.622] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0208.622] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0208.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c620 | out: hHeap=0x1f0000) returned 1 [0208.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffd0 | out: hHeap=0x1f0000) returned 1 [0208.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260798 | out: hHeap=0x1f0000) returned 1 [0208.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5c0 | out: hHeap=0x1f0000) returned 1 [0208.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220a58 | out: hHeap=0x1f0000) returned 1 [0208.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0208.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0208.623] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x227ee8 [0208.623] GetLastError () returned 0x0 [0208.623] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1a1d680 | out: lpSystemTimeAsFileTime=0x1a1d680) [0208.624] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x21c5c0 [0208.624] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0208.624] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x2052f0 [0208.624] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2052f0 | out: hHeap=0x1f0000) returned 1 [0208.624] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0208.624] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0208.624] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x2052f0 [0208.624] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2052f0 | out: hHeap=0x1f0000) returned 1 [0208.624] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0208.624] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5c0 | out: hHeap=0x1f0000) returned 1 [0208.624] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0208.624] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x21d2f0 [0208.624] GetLastError () returned 0x0 [0208.625] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVScripting.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvscripting.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d9f0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0208.625] GetFileType (hFile=0x1f4) returned 0x1 [0208.625] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28afb8 [0208.625] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1a1d978 | out: lpNewFilePointer=0x0) returned 1 [0208.626] GetLastError () returned 0xb7 [0208.626] CloseHandle (hObject=0x1f4) returned 1 [0208.626] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c620 | out: hHeap=0x1f0000) returned 1 [0208.626] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5c0 | out: hHeap=0x1f0000) returned 1 [0208.626] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220a58 | out: hHeap=0x1f0000) returned 1 [0208.627] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2648e8 | out: hHeap=0x1f0000) returned 1 [0208.627] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0208.627] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205210 | out: hHeap=0x1f0000) returned 1 [0208.627] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2361f8 | out: hHeap=0x1f0000) returned 1 [0208.627] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff70 | out: hHeap=0x1f0000) returned 1 [0208.627] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263f98 | out: hHeap=0x1f0000) returned 1 [0208.627] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224040 | out: hHeap=0x1f0000) returned 1 [0208.627] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0208.627] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0208.627] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x26aeb0 | out: hHeap=0x1f0000) returned 1 [0208.627] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223f28 | out: hHeap=0x1f0000) returned 1 [0208.627] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0208.627] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c570 | out: hHeap=0x1f0000) returned 1 [0208.627] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffe8 | out: hHeap=0x1f0000) returned 1 [0208.627] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0208.627] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5a0 | out: hHeap=0x1f0000) returned 1 [0208.627] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20fef8 | out: hHeap=0x1f0000) returned 1 [0208.627] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604c8 | out: hHeap=0x1f0000) returned 1 [0208.627] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c560 | out: hHeap=0x1f0000) returned 1 [0208.628] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b018 | out: hHeap=0x1f0000) returned 1 [0208.628] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0208.628] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235908 | out: hHeap=0x1f0000) returned 1 [0208.628] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234a58 | out: hHeap=0x1f0000) returned 1 [0208.628] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0208.628] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0208.628] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2349c8 | out: hHeap=0x1f0000) returned 1 [0208.628] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c640 | out: hHeap=0x1f0000) returned 1 [0208.628] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c630 | out: hHeap=0x1f0000) returned 1 [0208.628] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x245e08 | out: hHeap=0x1f0000) returned 1 [0208.628] CloseHandle (hObject=0x1c0) returned 1 [0208.629] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c370 | out: hHeap=0x1f0000) returned 1 [0208.629] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c430 | out: hHeap=0x1f0000) returned 1 [0208.629] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220858 | out: hHeap=0x1f0000) returned 1 [0208.629] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24b1d8 | out: hHeap=0x1f0000) returned 1 [0208.629] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff28 | out: hHeap=0x1f0000) returned 1 [0208.629] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205330 | out: hHeap=0x1f0000) returned 1 [0208.629] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28dfd0 | out: hHeap=0x1f0000) returned 1 [0208.629] CloseHandle (hObject=0x218) returned 1 [0208.630] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c530 | out: hHeap=0x1f0000) returned 1 [0208.630] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c420 | out: hHeap=0x1f0000) returned 1 [0208.630] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262e48 | out: hHeap=0x1f0000) returned 1 [0208.630] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204fb0 | out: hHeap=0x1f0000) returned 1 [0208.630] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2230c8 | out: hHeap=0x1f0000) returned 1 [0208.630] CloseHandle (hObject=0x1e8) returned 1 [0208.631] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c4b0 | out: hHeap=0x1f0000) returned 1 [0208.631] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c3a0 | out: hHeap=0x1f0000) returned 1 [0208.631] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261388 | out: hHeap=0x1f0000) returned 1 [0208.631] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c520 | out: hHeap=0x1f0000) returned 1 [0208.631] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c4f0 | out: hHeap=0x1f0000) returned 1 [0208.631] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c410 | out: hHeap=0x1f0000) returned 1 [0208.631] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c460 | out: hHeap=0x1f0000) returned 1 [0208.631] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230a80 | out: hHeap=0x1f0000) returned 1 [0208.631] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x266290 | out: hHeap=0x1f0000) returned 1 [0208.631] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230970 | out: hHeap=0x1f0000) returned 1 [0208.631] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2066b8 | out: hHeap=0x1f0000) returned 1 [0208.631] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0208.631] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0208.631] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2601f8 | out: hHeap=0x1f0000) returned 1 [0208.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25ceb8 | out: hHeap=0x1f0000) returned 1 [0208.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230860 | out: hHeap=0x1f0000) returned 1 [0208.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0208.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a620 | out: hHeap=0x1f0000) returned 1 [0208.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2276b8 | out: hHeap=0x1f0000) returned 1 [0208.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234740 | out: hHeap=0x1f0000) returned 1 [0208.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606f8 | out: hHeap=0x1f0000) returned 1 [0208.632] DeleteFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVScripting.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvscripting.dll")) returned 1 [0208.635] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b3e121, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b3e121, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9e226c00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x406d8, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="AppVShNotify.exe", cAlternateFileName="APPVSH~1.EXE")) returned 1 [0208.635] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2f0 [0208.635] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2128b0 [0208.635] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0208.635] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2128b0 | out: hHeap=0x1f0000) returned 1 [0208.635] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0208.635] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0208.635] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVShNotify.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvshnotify.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0208.636] GetFileType (hFile=0x1e8) returned 0x1 [0208.636] CloseHandle (hObject=0x1e8) returned 1 [0208.636] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21aab8 [0208.636] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVShNotify.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvshnotify.exe"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b3e121, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b3e121, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9e226c00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x406d8)) returned 1 [0208.636] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21aab8 | out: hHeap=0x1f0000) returned 1 [0208.636] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a2d8 [0208.637] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVShNotify.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvshnotify.exe"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b3e121, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b3e121, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9e226c00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x406d8)) returned 1 [0208.637] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a2d8 | out: hHeap=0x1f0000) returned 1 [0208.637] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21ab60 [0208.637] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ab60 | out: hHeap=0x1f0000) returned 1 [0208.637] GetLastError () returned 0x0 [0208.637] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b3e121, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b3e121, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x14115400, ftLastWriteTime.dwHighDateTime=0x1d0d7a5, nFileSizeHigh=0x0, nFileSizeLow=0xc84c0, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="C2R32.dll", cAlternateFileName="")) returned 1 [0208.637] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0208.637] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d88 [0208.637] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0208.637] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d88 | out: hHeap=0x1f0000) returned 1 [0208.637] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0208.637] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0208.638] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r32.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0208.638] GetLastError () returned 0x2 [0208.638] GetLastError () returned 0x2 [0208.638] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b3e121, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b3e121, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb4b54300, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x127260, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="C2R64.dll", cAlternateFileName="")) returned 1 [0208.638] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605b8 [0208.638] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211e98 [0208.638] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0208.639] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e98 | out: hHeap=0x1f0000) returned 1 [0208.639] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0208.639] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0208.639] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r64.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0208.639] GetFileType (hFile=0x1e8) returned 0x1 [0208.640] CloseHandle (hObject=0x1e8) returned 1 [0208.640] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0208.640] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r64.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b3e121, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b3e121, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb4b54300, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x127260)) returned 1 [0208.640] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0208.640] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0208.640] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r64.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b3e121, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b3e121, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb4b54300, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x127260)) returned 1 [0208.640] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0208.640] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0208.640] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0208.640] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b64383, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b64383, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8ee04f00, ftLastWriteTime.dwHighDateTime=0x1d0d67f, nFileSizeHigh=0x0, nFileSizeLow=0x1028, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="C2RHeartbeatConfig.xml", cAlternateFileName="C2RHEA~1.XML")) returned 1 [0208.641] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2f0 [0208.641] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211a58 [0208.641] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0208.641] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211a58 | out: hHeap=0x1f0000) returned 1 [0208.641] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0208.641] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0208.641] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RHeartbeatConfig.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rheartbeatconfig.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0208.641] GetFileType (hFile=0x1e8) returned 0x1 [0208.642] CloseHandle (hObject=0x1e8) returned 1 [0208.642] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261c50 [0208.642] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RHeartbeatConfig.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rheartbeatconfig.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b64383, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b64383, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8ee04f00, ftLastWriteTime.dwHighDateTime=0x1d0d67f, nFileSizeHigh=0x0, nFileSizeLow=0x1028)) returned 1 [0208.642] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261c50 | out: hHeap=0x1f0000) returned 1 [0208.642] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x262c20 [0208.642] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RHeartbeatConfig.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rheartbeatconfig.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b64383, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b64383, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8ee04f00, ftLastWriteTime.dwHighDateTime=0x1d0d67f, nFileSizeHigh=0x0, nFileSizeLow=0x1028)) returned 1 [0208.643] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262c20 | out: hHeap=0x1f0000) returned 1 [0208.643] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261e78 [0208.643] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261e78 | out: hHeap=0x1f0000) returned 1 [0208.643] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x808dbb6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x808dbb6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb3841600, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0xdc4b8, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="C2RUI.en-us.dll", cAlternateFileName="C2RUIE~1.DLL")) returned 1 [0208.643] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0208.643] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211e98 [0208.643] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0208.643] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e98 | out: hHeap=0x1f0000) returned 1 [0208.643] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0208.643] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0208.643] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RUI.en-us.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rui.en-us.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0208.644] GetFileType (hFile=0x1e8) returned 0x1 [0208.644] CloseHandle (hObject=0x1e8) returned 1 [0208.644] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219d98 [0208.644] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RUI.en-us.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rui.en-us.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x808dbb6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x808dbb6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb3841600, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0xdc4b8)) returned 1 [0208.644] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219d98 | out: hHeap=0x1f0000) returned 1 [0208.644] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a620 [0208.644] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RUI.en-us.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rui.en-us.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x808dbb6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x808dbb6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb3841600, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0xdc4b8)) returned 1 [0208.644] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a620 | out: hHeap=0x1f0000) returned 1 [0208.645] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a038 [0208.645] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a038 | out: hHeap=0x1f0000) returned 1 [0208.645] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b64383, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b64383, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x514a8, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="concrt140.dll", cAlternateFileName="CONCRT~1.DLL")) returned 1 [0208.645] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0208.645] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0208.645] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0208.645] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0208.645] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0208.645] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0208.645] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\concrt140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\concrt140.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0208.646] GetFileType (hFile=0x1e8) returned 0x1 [0208.646] CloseHandle (hObject=0x1e8) returned 1 [0208.646] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a818 [0208.646] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\concrt140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\concrt140.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b64383, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b64383, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x514a8)) returned 1 [0208.646] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a818 | out: hHeap=0x1f0000) returned 1 [0208.646] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219ee8 [0208.646] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\concrt140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\concrt140.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b64383, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b64383, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x514a8)) returned 1 [0208.647] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219ee8 | out: hHeap=0x1f0000) returned 1 [0208.647] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a818 [0208.647] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a818 | out: hHeap=0x1f0000) returned 1 [0208.647] GetLastError () returned 0x0 [0208.647] CryptAcquireContextA (in: phProv=0x1a1daf0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1a1daf0*=0x212938) returned 1 [0209.360] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x260860 | out: pbBuffer=0x260860) returned 1 [0209.360] CryptReleaseContext (hProv=0x212938, dwFlags=0x0) returned 1 [0209.360] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0209.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x2688a0 [0209.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x223f28 [0209.360] QueryPerformanceCounter (in: lpPerformanceCount=0x1a1da84 | out: lpPerformanceCount=0x1a1da84*=36672883351) returned 1 [0209.360] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1a1dac4 | out: lpSystemTimeAsFileTime=0x1a1dac4) [0209.360] QueryPerformanceCounter (in: lpPerformanceCount=0x1a1da84 | out: lpPerformanceCount=0x1a1da84*=36672904918) returned 1 [0209.360] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1a1dac4 | out: lpSystemTimeAsFileTime=0x1a1dac4) [0209.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x21cf00 [0209.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x26fad0 [0209.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x224040 [0209.361] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x2648e8 [0209.361] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff28 [0209.361] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206838 [0209.361] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210090 [0209.361] GetLastError () returned 0x0 [0209.361] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\concrt140.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\concrt140.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d990, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0209.362] GetFileType (hFile=0x1e8) returned 0x1 [0209.362] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c720 [0209.362] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c6b0 [0209.363] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\concrt140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\concrt140.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d9c0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc [0209.363] GetFileType (hFile=0x1cc) returned 0x1 [0209.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x2052f0 [0209.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205330 [0209.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2618b8 [0209.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c560 [0209.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c6f0 [0209.364] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\concrt140.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\concrt140.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d90c, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0209.364] GetFileType (hFile=0x1fc) returned 0x1 [0209.364] GetLastError () returned 0xb7 [0209.364] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\concrt140.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\concrt140.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d90c, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0209.365] GetFileType (hFile=0x1d4) returned 0x1 [0209.365] GetLastError () returned 0xb7 [0209.365] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\concrt140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\concrt140.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d904, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0209.365] GetFileType (hFile=0x218) returned 0x1 [0209.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x288fa8 [0209.365] ReadFile (in: hFile=0x218, lpBuffer=0x288fa8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1d860, lpOverlapped=0x0 | out: lpBuffer=0x288fa8*, lpNumberOfBytesRead=0x1a1d860*=0x1000, lpOverlapped=0x0) returned 1 [0209.408] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24c600 [0209.409] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28bfc0 [0209.410] GetLastError () returned 0x0 [0209.427] CloseHandle (hObject=0x1e8) returned 1 [0209.740] CloseHandle (hObject=0x1cc) returned 1 [0209.740] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238af0 [0209.741] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a20 [0209.741] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\concrt140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\concrt140.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d9c0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc [0209.747] GetFileType (hFile=0x1cc) returned 0x1 [0209.747] GetLastError () returned 0xb7 [0209.749] CloseHandle (hObject=0x1cc) returned 1 [0209.749] DeleteFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\concrt140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\concrt140.dll")) returned 0 [0209.749] GetLastError () returned 0x20 [0209.749] GetLastError () returned 0x20 [0209.749] CryptAcquireContextA (in: phProv=0x1a1daf0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1a1daf0*=0x212360) returned 1 [0209.759] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2606f8 | out: pbBuffer=0x2606f8) returned 1 [0209.759] CryptReleaseContext (hProv=0x212360, dwFlags=0x0) returned 1 [0209.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606f8 | out: hHeap=0x1f0000) returned 1 [0209.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2604c8 [0209.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2606d0 [0209.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x234f00 [0209.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604c8 | out: hHeap=0x1f0000) returned 1 [0209.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0209.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234f00 | out: hHeap=0x1f0000) returned 1 [0209.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x263860 [0209.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x238fa8 [0209.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x236128 [0209.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2609a0 [0209.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x237458 [0209.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205210 [0209.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2361f8 [0209.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2604c8 [0209.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x236f30 [0209.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a80 [0209.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606f8 [0209.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x238f30 [0209.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ba0 [0209.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0209.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x238ee8 [0209.760] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ee8 | out: hHeap=0x1f0000) returned 1 [0209.760] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0209.760] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ba0 | out: hHeap=0x1f0000) returned 1 [0209.760] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238f30 | out: hHeap=0x1f0000) returned 1 [0209.760] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606f8 | out: hHeap=0x1f0000) returned 1 [0209.760] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a80 | out: hHeap=0x1f0000) returned 1 [0209.760] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236f30 | out: hHeap=0x1f0000) returned 1 [0209.760] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604c8 | out: hHeap=0x1f0000) returned 1 [0209.760] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2361f8 | out: hHeap=0x1f0000) returned 1 [0209.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x234de8 [0209.760] GetLastError () returned 0x0 [0209.761] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1a1d680 | out: lpSystemTimeAsFileTime=0x1a1d680) [0209.761] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238b40 [0209.761] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604c8 [0209.761] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ff0 [0209.761] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ff0 | out: hHeap=0x1f0000) returned 1 [0209.761] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604c8 | out: hHeap=0x1f0000) returned 1 [0209.761] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604c8 [0209.761] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ff0 [0209.761] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ff0 | out: hHeap=0x1f0000) returned 1 [0209.761] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604c8 | out: hHeap=0x1f0000) returned 1 [0209.761] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b40 | out: hHeap=0x1f0000) returned 1 [0209.761] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0209.761] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x234de8 [0209.761] GetLastError () returned 0x0 [0209.762] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\concrt140.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\concrt140.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d9f0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc [0209.762] GetFileType (hFile=0x1cc) returned 0x1 [0209.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x290fe8 [0209.763] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1a1d978 | out: lpNewFilePointer=0x0) returned 1 [0209.763] GetLastError () returned 0xb7 [0209.763] CloseHandle (hObject=0x1cc) returned 1 [0209.763] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ad0 | out: hHeap=0x1f0000) returned 1 [0209.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a00 | out: hHeap=0x1f0000) returned 1 [0209.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236d20 | out: hHeap=0x1f0000) returned 1 [0209.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237458 | out: hHeap=0x1f0000) returned 1 [0209.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0209.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205210 | out: hHeap=0x1f0000) returned 1 [0209.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236128 | out: hHeap=0x1f0000) returned 1 [0209.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238fa8 | out: hHeap=0x1f0000) returned 1 [0209.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263860 | out: hHeap=0x1f0000) returned 1 [0209.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285738 | out: hHeap=0x1f0000) returned 1 [0209.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0209.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0209.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2733e8 | out: hHeap=0x1f0000) returned 1 [0209.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2246d0 | out: hHeap=0x1f0000) returned 1 [0209.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234d08 | out: hHeap=0x1f0000) returned 1 [0209.765] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b30 | out: hHeap=0x1f0000) returned 1 [0209.765] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238f90 | out: hHeap=0x1f0000) returned 1 [0209.765] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0209.765] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ac0 | out: hHeap=0x1f0000) returned 1 [0209.765] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2026e8 | out: hHeap=0x1f0000) returned 1 [0209.765] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608b0 | out: hHeap=0x1f0000) returned 1 [0209.765] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a90 | out: hHeap=0x1f0000) returned 1 [0209.765] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237878 | out: hHeap=0x1f0000) returned 1 [0209.765] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0209.765] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2360c0 | out: hHeap=0x1f0000) returned 1 [0209.765] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234500 | out: hHeap=0x1f0000) returned 1 [0209.765] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260658 | out: hHeap=0x1f0000) returned 1 [0209.765] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0209.766] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234740 | out: hHeap=0x1f0000) returned 1 [0209.766] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a20 | out: hHeap=0x1f0000) returned 1 [0209.766] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238af0 | out: hHeap=0x1f0000) returned 1 [0209.766] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x288fa8 | out: hHeap=0x1f0000) returned 1 [0209.766] CloseHandle (hObject=0x218) returned 1 [0209.766] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c640 | out: hHeap=0x1f0000) returned 1 [0209.766] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5a0 | out: hHeap=0x1f0000) returned 1 [0209.766] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226388 | out: hHeap=0x1f0000) returned 1 [0209.767] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24c600 | out: hHeap=0x1f0000) returned 1 [0209.767] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffa0 | out: hHeap=0x1f0000) returned 1 [0209.767] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205150 | out: hHeap=0x1f0000) returned 1 [0209.767] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28bfc0 | out: hHeap=0x1f0000) returned 1 [0209.767] CloseHandle (hObject=0x1d4) returned 1 [0209.768] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5c0 | out: hHeap=0x1f0000) returned 1 [0209.768] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c590 | out: hHeap=0x1f0000) returned 1 [0209.768] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262cd8 | out: hHeap=0x1f0000) returned 1 [0209.768] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2052f0 | out: hHeap=0x1f0000) returned 1 [0209.768] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220a58 | out: hHeap=0x1f0000) returned 1 [0209.768] CloseHandle (hObject=0x1fc) returned 1 [0209.769] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c6f0 | out: hHeap=0x1f0000) returned 1 [0209.769] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c560 | out: hHeap=0x1f0000) returned 1 [0209.769] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2618b8 | out: hHeap=0x1f0000) returned 1 [0209.769] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c6b0 | out: hHeap=0x1f0000) returned 1 [0209.769] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c720 | out: hHeap=0x1f0000) returned 1 [0209.769] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c660 | out: hHeap=0x1f0000) returned 1 [0209.769] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c650 | out: hHeap=0x1f0000) returned 1 [0209.769] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220748 | out: hHeap=0x1f0000) returned 1 [0209.770] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x26fad0 | out: hHeap=0x1f0000) returned 1 [0209.770] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224040 | out: hHeap=0x1f0000) returned 1 [0209.770] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206838 | out: hHeap=0x1f0000) returned 1 [0209.770] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210090 | out: hHeap=0x1f0000) returned 1 [0209.770] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff28 | out: hHeap=0x1f0000) returned 1 [0209.770] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2648e8 | out: hHeap=0x1f0000) returned 1 [0209.770] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2688a0 | out: hHeap=0x1f0000) returned 1 [0209.770] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223f28 | out: hHeap=0x1f0000) returned 1 [0209.770] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0209.770] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a578 | out: hHeap=0x1f0000) returned 1 [0209.770] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2276b8 | out: hHeap=0x1f0000) returned 1 [0209.770] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2344b8 | out: hHeap=0x1f0000) returned 1 [0209.770] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0209.770] DeleteFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\concrt140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\concrt140.dll")) returned 1 [0209.772] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b64383, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b64383, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbd783a00, ftLastWriteTime.dwHighDateTime=0x1d0d7e5, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="i640.hash", cAlternateFileName="I640~1.HAS")) returned 1 [0209.772] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608b0 [0209.772] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2128b0 [0209.772] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0209.772] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2128b0 | out: hHeap=0x1f0000) returned 1 [0209.772] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0209.772] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608b0 | out: hHeap=0x1f0000) returned 1 [0209.772] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i640.hash" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\i640.hash"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0209.772] GetFileType (hFile=0x1fc) returned 0x1 [0209.773] CloseHandle (hObject=0x1fc) returned 1 [0209.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0209.773] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i640.hash" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\i640.hash"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b64383, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b64383, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbd783a00, ftLastWriteTime.dwHighDateTime=0x1d0d7e5, nFileSizeHigh=0x0, nFileSizeLow=0x66)) returned 1 [0209.773] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0209.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0210.071] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i640.hash" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\i640.hash"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b64383, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b64383, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbd783a00, ftLastWriteTime.dwHighDateTime=0x1d0d7e5, nFileSizeHigh=0x0, nFileSizeLow=0x66)) returned 1 [0210.071] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0210.071] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0210.071] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0210.071] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x808dbb6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x808dbb6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbc470d00, ftLastWriteTime.dwHighDateTime=0x1d0d7e5, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="i641033.hash", cAlternateFileName="I64103~1.HAS")) returned 1 [0210.071] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605e0 [0210.071] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211fa8 [0210.071] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0210.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211fa8 | out: hHeap=0x1f0000) returned 1 [0210.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0210.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605e0 | out: hHeap=0x1f0000) returned 1 [0210.072] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i641033.hash" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\i641033.hash"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0210.072] GetFileType (hFile=0x1fc) returned 0x1 [0210.072] CloseHandle (hObject=0x1fc) returned 1 [0210.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0210.073] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i641033.hash" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\i641033.hash"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x808dbb6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x808dbb6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbc470d00, ftLastWriteTime.dwHighDateTime=0x1d0d7e5, nFileSizeHigh=0x0, nFileSizeLow=0x66)) returned 1 [0210.073] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0210.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0210.073] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i641033.hash" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\i641033.hash"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x808dbb6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x808dbb6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbc470d00, ftLastWriteTime.dwHighDateTime=0x1d0d7e5, nFileSizeHigh=0x0, nFileSizeLow=0x66)) returned 1 [0210.073] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0210.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0210.073] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0210.073] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b64383, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b64383, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbe3eab00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x10ae80, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="IntegratedOffice.exe", cAlternateFileName="INTEGR~1.EXE")) returned 1 [0210.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x234e58 [0210.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211fa8 [0210.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0210.074] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211fa8 | out: hHeap=0x1f0000) returned 1 [0210.074] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0210.074] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234e58 | out: hHeap=0x1f0000) returned 1 [0210.074] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\IntegratedOffice.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\integratedoffice.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0210.075] GetFileType (hFile=0x1fc) returned 0x1 [0210.075] CloseHandle (hObject=0x1fc) returned 1 [0210.075] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219c48 [0210.075] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\IntegratedOffice.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\integratedoffice.exe"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b64383, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b64383, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbe3eab00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x10ae80)) returned 1 [0210.075] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219c48 | out: hHeap=0x1f0000) returned 1 [0210.075] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a4d0 [0210.076] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\IntegratedOffice.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\integratedoffice.exe"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b64383, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b64383, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbe3eab00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x10ae80)) returned 1 [0210.076] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a4d0 | out: hHeap=0x1f0000) returned 1 [0210.076] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a4d0 [0210.076] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a4d0 | out: hHeap=0x1f0000) returned 1 [0210.076] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b8a5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b8a5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xa2e72000, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x578d8, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="MavInject32.exe", cAlternateFileName="MAVINJ~1.EXE")) returned 1 [0210.076] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0210.076] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212470 [0210.076] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0210.076] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212470 | out: hHeap=0x1f0000) returned 1 [0210.076] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0210.076] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0210.077] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\MavInject32.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mavinject32.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0210.077] GetFileType (hFile=0x1fc) returned 0x1 [0210.077] CloseHandle (hObject=0x1fc) returned 1 [0210.078] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a038 [0210.078] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\MavInject32.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mavinject32.exe"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b8a5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b8a5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xa2e72000, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x578d8)) returned 1 [0210.078] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a038 | out: hHeap=0x1f0000) returned 1 [0210.078] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21aa10 [0210.078] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\MavInject32.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mavinject32.exe"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b8a5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b8a5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xa2e72000, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x578d8)) returned 1 [0210.078] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21aa10 | out: hHeap=0x1f0000) returned 1 [0210.078] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a230 [0210.078] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a230 | out: hHeap=0x1f0000) returned 1 [0210.079] GetLastError () returned 0x0 [0210.079] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b8a5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b8a5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8745c00, ftLastWriteTime.dwHighDateTime=0x1d0d7aa, nFileSizeHigh=0x0, nFileSizeLow=0x2ffa60, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="mso20win32client.dll", cAlternateFileName="MSO20W~1.DLL")) returned 1 [0210.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x234f00 [0210.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212030 [0210.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0210.079] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212030 | out: hHeap=0x1f0000) returned 1 [0210.079] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0210.079] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234f00 | out: hHeap=0x1f0000) returned 1 [0210.080] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso20win32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso20win32client.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0210.080] GetLastError () returned 0x20 [0210.080] GetLastError () returned 0x20 [0210.081] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80bb0837, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80bb0837, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xad6b600, ftLastWriteTime.dwHighDateTime=0x1d0d7aa, nFileSizeHigh=0x0, nFileSizeLow=0x475e60, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="mso30win32client.dll", cAlternateFileName="MSO30W~1.DLL")) returned 1 [0210.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x234bf0 [0210.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211bf0 [0210.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0210.081] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211bf0 | out: hHeap=0x1f0000) returned 1 [0210.081] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0210.081] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234bf0 | out: hHeap=0x1f0000) returned 1 [0210.082] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso30win32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso30win32client.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0210.082] GetLastError () returned 0x20 [0210.082] GetLastError () returned 0x20 [0210.082] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80bfccf1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80bfccf1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb7179d00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x307ac0, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="mso40uires.dll", cAlternateFileName="MSO40U~1.DLL")) returned 1 [0210.082] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605e0 [0210.082] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212140 [0210.082] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0210.083] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212140 | out: hHeap=0x1f0000) returned 1 [0210.083] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0210.083] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605e0 | out: hHeap=0x1f0000) returned 1 [0210.083] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uires.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso40uires.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0210.084] GetLastError () returned 0x20 [0210.084] GetLastError () returned 0x20 [0210.084] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80c22f4a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80c22f4a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x10cc9700, ftLastWriteTime.dwHighDateTime=0x1d0d7aa, nFileSizeHigh=0x0, nFileSizeLow=0x8e6060, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="mso40uiwin32client.dll", cAlternateFileName="MSO40U~2.DLL")) returned 1 [0210.084] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x234db0 [0210.084] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2122d8 [0210.084] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0210.084] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2122d8 | out: hHeap=0x1f0000) returned 1 [0210.084] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0210.084] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234db0 | out: hHeap=0x1f0000) returned 1 [0210.085] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uiwin32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso40uiwin32client.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0210.085] GetLastError () returned 0x20 [0210.085] GetLastError () returned 0x20 [0210.086] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x808dbb6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x808dbb6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x11fdc400, ftLastWriteTime.dwHighDateTime=0x1d0d7aa, nFileSizeHigh=0x0, nFileSizeLow=0xee60, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="msointl30.en-us.dll", cAlternateFileName="MSOINT~1.DLL")) returned 1 [0210.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x234e58 [0210.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211fa8 [0210.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0210.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211fa8 | out: hHeap=0x1f0000) returned 1 [0210.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0210.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234e58 | out: hHeap=0x1f0000) returned 1 [0210.087] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msointl30.en-us.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msointl30.en-us.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0210.087] GetFileType (hFile=0x1fc) returned 0x1 [0210.088] CloseHandle (hObject=0x1fc) returned 1 [0210.088] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a2d8 [0210.088] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msointl30.en-us.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msointl30.en-us.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x808dbb6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x808dbb6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x11fdc400, ftLastWriteTime.dwHighDateTime=0x1d0d7aa, nFileSizeHigh=0x0, nFileSizeLow=0xee60)) returned 1 [0210.088] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a2d8 | out: hHeap=0x1f0000) returned 1 [0210.088] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219e40 [0210.088] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msointl30.en-us.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msointl30.en-us.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x808dbb6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x808dbb6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x11fdc400, ftLastWriteTime.dwHighDateTime=0x1d0d7aa, nFileSizeHigh=0x0, nFileSizeLow=0xee60)) returned 1 [0210.088] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219e40 | out: hHeap=0x1f0000) returned 1 [0210.088] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a4d0 [0210.089] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a4d0 | out: hHeap=0x1f0000) returned 1 [0210.089] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80c9565a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80c9565a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1909ea00, ftLastWriteTime.dwHighDateTime=0x1d098bf, nFileSizeHigh=0x0, nFileSizeLow=0xa12a8, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="msvcp120.dll", cAlternateFileName="")) returned 1 [0210.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260658 [0210.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2122d8 [0210.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0210.089] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2122d8 | out: hHeap=0x1f0000) returned 1 [0210.089] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0210.089] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260658 | out: hHeap=0x1f0000) returned 1 [0210.089] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp120.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msvcp120.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0210.090] GetLastError () returned 0x20 [0210.090] GetLastError () returned 0x20 [0210.090] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80cbb8b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80cbb8b2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x9b0a0, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="msvcp140.dll", cAlternateFileName="")) returned 1 [0210.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260540 [0210.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211e98 [0210.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0210.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e98 | out: hHeap=0x1f0000) returned 1 [0210.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0210.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0210.091] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msvcp140.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0210.091] GetLastError () returned 0x20 [0210.091] GetLastError () returned 0x20 [0210.092] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80cbb8b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80cbb8b2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1b6c4400, ftLastWriteTime.dwHighDateTime=0x1d098bf, nFileSizeHigh=0x0, nFileSizeLow=0xeb2a8, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="msvcr120.dll", cAlternateFileName="")) returned 1 [0210.092] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0210.092] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211f20 [0210.092] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0210.092] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211f20 | out: hHeap=0x1f0000) returned 1 [0210.092] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0210.092] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0210.092] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcr120.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msvcr120.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0210.093] GetLastError () returned 0x20 [0210.093] GetLastError () returned 0x20 [0210.093] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80cbb8b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80cbb8b2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb7179d00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x5b1068, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="OfficeC2RClient.exe", cAlternateFileName="OFFICE~1.EXE")) returned 1 [0210.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x234c28 [0210.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212360 [0210.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0210.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212360 | out: hHeap=0x1f0000) returned 1 [0210.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0210.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234c28 | out: hHeap=0x1f0000) returned 1 [0210.094] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RClient.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rclient.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0210.094] GetFileType (hFile=0x1fc) returned 0x1 [0210.094] CloseHandle (hObject=0x1fc) returned 1 [0210.095] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a188 [0210.095] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RClient.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rclient.exe"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80cbb8b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80cbb8b2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb7179d00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x5b1068)) returned 1 [0210.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a188 | out: hHeap=0x1f0000) returned 1 [0210.095] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219e40 [0210.095] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RClient.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rclient.exe"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80cbb8b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80cbb8b2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb7179d00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x5b1068)) returned 1 [0210.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219e40 | out: hHeap=0x1f0000) returned 1 [0210.095] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21aa10 [0210.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21aa10 | out: hHeap=0x1f0000) returned 1 [0210.095] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d07d85, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d07d85, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc698abd7, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x1, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="OfficeC2RCom.dll", cAlternateFileName="OFFICE~1.DLL")) returned 1 [0210.095] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x234bf0 [0210.095] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211e10 [0210.096] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0210.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e10 | out: hHeap=0x1f0000) returned 1 [0210.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0210.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234bf0 | out: hHeap=0x1f0000) returned 1 [0210.096] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RCom.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rcom.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0210.096] GetFileType (hFile=0x1fc) returned 0x1 [0210.097] CloseHandle (hObject=0x1fc) returned 1 [0210.097] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a380 [0210.097] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RCom.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rcom.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d07d85, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d07d85, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc698abd7, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x1)) returned 1 [0210.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a380 | out: hHeap=0x1f0000) returned 1 [0210.097] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a188 [0210.097] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RCom.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rcom.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d07d85, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d07d85, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc698abd7, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x1)) returned 1 [0210.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a188 | out: hHeap=0x1f0000) returned 1 [0210.097] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a578 [0210.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a578 | out: hHeap=0x1f0000) returned 1 [0210.098] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc65f7249, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xc65f7249, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xc661d594, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xf34e8, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="OfficeC2RCom.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="OFFICE~1.ODV")) returned 1 [0210.098] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261970 [0210.098] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212580 [0210.098] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120) returned 0x211048 [0210.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212580 | out: hHeap=0x1f0000) returned 1 [0210.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0210.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261970 | out: hHeap=0x1f0000) returned 1 [0210.100] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RCom.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rcom.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0210.100] GetFileType (hFile=0x1fc) returned 0x1 [0210.101] CloseHandle (hObject=0x1fc) returned 1 [0210.101] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120) returned 0x2105e0 [0210.101] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RCom.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rcom.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc65f7249, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xc65f7249, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xc661d594, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xf34e8)) returned 1 [0210.101] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0210.102] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120) returned 0x2104b8 [0210.102] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RCom.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rcom.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc65f7249, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xc65f7249, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xc661d594, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xf34e8)) returned 1 [0210.102] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0210.102] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120) returned 0x210cd0 [0210.102] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0210.102] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d07d85, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d07d85, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbd0d7e00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x2a5e58, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="OfficeClickToRun.exe", cAlternateFileName="OFFICE~2.EXE")) returned 1 [0210.102] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x234de8 [0210.102] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0210.103] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0210.103] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0210.103] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0210.103] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234de8 | out: hHeap=0x1f0000) returned 1 [0210.103] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeClickToRun.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeclicktorun.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0210.104] GetLastError () returned 0x20 [0210.104] GetLastError () returned 0x20 [0210.104] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d542e1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d542e1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x3f141b52, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x12ae, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="OfficeUpdateSchedule.xml", cAlternateFileName="OFFICE~1.XML")) returned 1 [0210.104] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346f8 [0210.104] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211948 [0210.104] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0210.104] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211948 | out: hHeap=0x1f0000) returned 1 [0210.104] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0210.104] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346f8 | out: hHeap=0x1f0000) returned 1 [0210.104] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeUpdateSchedule.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeupdateschedule.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0210.105] GetFileType (hFile=0x1fc) returned 0x1 [0210.105] CloseHandle (hObject=0x1fc) returned 1 [0210.105] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2627d0 [0210.105] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeUpdateSchedule.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeupdateschedule.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d542e1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d542e1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x3f141b52, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x12ae)) returned 1 [0210.105] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2627d0 | out: hHeap=0x1f0000) returned 1 [0210.105] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x262d90 [0210.105] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeUpdateSchedule.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeupdateschedule.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d542e1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d542e1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x3f141b52, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x12ae)) returned 1 [0210.106] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262d90 | out: hHeap=0x1f0000) returned 1 [0210.106] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x262438 [0210.106] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262438 | out: hHeap=0x1f0000) returned 1 [0210.106] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d542e1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d542e1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x3fa7ec8f, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x1162, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="ServiceWatcherSchedule.xml", cAlternateFileName="SERVIC~1.XML")) returned 1 [0210.106] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234ae8 [0210.106] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212828 [0210.106] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0210.106] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212828 | out: hHeap=0x1f0000) returned 1 [0210.106] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0210.106] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234ae8 | out: hHeap=0x1f0000) returned 1 [0210.106] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ServiceWatcherSchedule.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\servicewatcherschedule.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0210.107] GetFileType (hFile=0x1fc) returned 0x1 [0210.107] CloseHandle (hObject=0x1fc) returned 1 [0210.107] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261ae0 [0210.107] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ServiceWatcherSchedule.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\servicewatcherschedule.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d542e1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d542e1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x3fa7ec8f, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x1162)) returned 1 [0210.108] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261ae0 | out: hHeap=0x1f0000) returned 1 [0210.108] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261fe8 [0210.108] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ServiceWatcherSchedule.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\servicewatcherschedule.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d542e1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d542e1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x3fa7ec8f, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x1162)) returned 1 [0210.108] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261fe8 | out: hHeap=0x1f0000) returned 1 [0210.108] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261ae0 [0210.108] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261ae0 | out: hHeap=0x1f0000) returned 1 [0210.108] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d542e1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d542e1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbe3eab00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x101458, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="StreamServer.dll", cAlternateFileName="STREAM~1.DLL")) returned 1 [0210.108] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x234db0 [0210.108] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2120b8 [0210.108] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0210.108] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2120b8 | out: hHeap=0x1f0000) returned 1 [0210.109] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0210.109] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234db0 | out: hHeap=0x1f0000) returned 1 [0210.109] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\StreamServer.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\streamserver.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0210.109] GetLastError () returned 0x20 [0210.110] GetLastError () returned 0x20 [0210.110] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d542e1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d542e1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0xefec0, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="ucrtbase.dll", cAlternateFileName="")) returned 1 [0210.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260540 [0210.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211fa8 [0210.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0210.427] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211fa8 | out: hHeap=0x1f0000) returned 1 [0210.427] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0210.427] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0210.428] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ucrtbase.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\ucrtbase.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x234 [0210.428] GetFileType (hFile=0x234) returned 0x1 [0210.429] CloseHandle (hObject=0x234) returned 1 [0210.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0210.429] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ucrtbase.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\ucrtbase.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d542e1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d542e1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0xefec0)) returned 1 [0210.429] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0210.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0210.430] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ucrtbase.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\ucrtbase.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d542e1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d542e1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0xefec0)) returned 1 [0210.430] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0210.430] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0210.430] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0210.430] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d7a486, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d7a486, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x5f4b0, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="vccorlib140.dll", cAlternateFileName="VCCORL~1.DLL")) returned 1 [0210.430] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0210.431] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211948 [0210.431] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0210.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211948 | out: hHeap=0x1f0000) returned 1 [0210.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0210.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0210.432] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vccorlib140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\vccorlib140.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x234 [0210.432] GetFileType (hFile=0x234) returned 0x1 [0210.432] CloseHandle (hObject=0x234) returned 1 [0210.433] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21aab8 [0210.434] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vccorlib140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\vccorlib140.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d7a486, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d7a486, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x5f4b0)) returned 1 [0210.434] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21aab8 | out: hHeap=0x1f0000) returned 1 [0210.434] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a968 [0210.435] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vccorlib140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\vccorlib140.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d7a486, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d7a486, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x5f4b0)) returned 1 [0210.435] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a968 | out: hHeap=0x1f0000) returned 1 [0210.435] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a0e0 [0210.435] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a0e0 | out: hHeap=0x1f0000) returned 1 [0210.435] GetLastError () returned 0x0 [0210.435] CryptAcquireContextA (in: phProv=0x1a1daf0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1a1daf0*=0x211d00) returned 1 [0210.442] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x260518 | out: pbBuffer=0x260518) returned 1 [0210.442] CryptReleaseContext (hProv=0x211d00, dwFlags=0x0) returned 1 [0210.442] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0210.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x269ba8 [0210.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x224388 [0210.442] QueryPerformanceCounter (in: lpPerformanceCount=0x1a1da84 | out: lpPerformanceCount=0x1a1da84*=36781344415) returned 1 [0210.445] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1a1dac4 | out: lpSystemTimeAsFileTime=0x1a1dac4) [0210.445] QueryPerformanceCounter (in: lpPerformanceCount=0x1a1da84 | out: lpPerformanceCount=0x1a1da84*=36781374504) returned 1 [0210.445] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1a1dac4 | out: lpSystemTimeAsFileTime=0x1a1dac4) [0210.445] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x234f38 [0210.445] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x267598 [0210.445] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x224a18 [0210.445] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x24f6a8 [0210.445] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210090 [0210.445] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206808 [0210.445] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff28 [0210.446] GetLastError () returned 0x0 [0210.446] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vccorlib140.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\vccorlib140.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d990, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0210.627] GetFileType (hFile=0x1f4) returned 0x1 [0210.628] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b50 [0210.628] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ba0 [0210.629] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vccorlib140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\vccorlib140.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d9c0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0210.629] GetFileType (hFile=0x1e0) returned 0x1 [0210.630] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ff0 [0210.630] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0210.630] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261b98 [0210.630] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389e0 [0210.630] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389f0 [0210.631] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vccorlib140.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\vccorlib140.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d90c, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0210.632] GetFileType (hFile=0x204) returned 0x1 [0210.632] GetLastError () returned 0xb7 [0210.632] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vccorlib140.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\vccorlib140.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d90c, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0210.632] GetFileType (hFile=0x210) returned 0x1 [0210.633] GetLastError () returned 0xb7 [0210.633] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vccorlib140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\vccorlib140.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d904, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0210.633] GetFileType (hFile=0x1fc) returned 0x1 [0210.634] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28bfc0 [0210.634] ReadFile (in: hFile=0x1fc, lpBuffer=0x28bfc0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1d860, lpOverlapped=0x0 | out: lpBuffer=0x28bfc0*, lpNumberOfBytesRead=0x1a1d860*=0x1000, lpOverlapped=0x0) returned 1 [0211.663] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24bdf0 [0211.663] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28efd8 [0211.663] GetLastError () returned 0x0 [0212.898] CloseHandle (hObject=0x1f4) returned 1 [0212.898] CloseHandle (hObject=0x1e0) returned 1 [0212.898] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388c0 [0212.899] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387f0 [0212.966] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vccorlib140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\vccorlib140.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d9c0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0212.971] GetFileType (hFile=0x23c) returned 0x1 [0212.972] GetLastError () returned 0xb7 [0212.973] CloseHandle (hObject=0x23c) returned 1 [0212.973] DeleteFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vccorlib140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\vccorlib140.dll")) returned 0 [0212.974] GetLastError () returned 0x20 [0212.974] GetLastError () returned 0x20 [0212.974] CryptAcquireContextA (in: phProv=0x1a1daf0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1a1daf0*=0x212140) returned 1 [0212.982] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2604f0 | out: pbBuffer=0x2604f0) returned 1 [0212.982] CryptReleaseContext (hProv=0x212140, dwFlags=0x0) returned 1 [0212.982] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0212.982] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260860 [0212.982] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2608d8 [0212.982] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x234d08 [0212.982] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0212.982] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0212.982] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234d08 | out: hHeap=0x1f0000) returned 1 [0212.983] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x263808 [0212.983] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffd0 [0212.983] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x235768 [0212.983] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260518 [0212.983] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x237248 [0212.983] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205330 [0212.983] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235cb0 [0212.983] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260928 [0212.983] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x237350 [0212.983] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a00 [0212.984] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2607c0 [0212.984] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210078 [0212.984] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ad0 [0212.984] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0212.984] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101b0 [0212.984] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0212.984] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0212.984] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ad0 | out: hHeap=0x1f0000) returned 1 [0212.984] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210078 | out: hHeap=0x1f0000) returned 1 [0212.984] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607c0 | out: hHeap=0x1f0000) returned 1 [0212.984] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a00 | out: hHeap=0x1f0000) returned 1 [0212.984] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237350 | out: hHeap=0x1f0000) returned 1 [0212.984] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0212.984] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235cb0 | out: hHeap=0x1f0000) returned 1 [0212.984] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x234d08 [0212.985] GetLastError () returned 0x0 [0212.985] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1a1d680 | out: lpSystemTimeAsFileTime=0x1a1d680) [0212.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238ad0 [0212.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0212.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204fb0 [0212.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204fb0 | out: hHeap=0x1f0000) returned 1 [0212.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0212.986] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0212.986] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ff0 [0212.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ff0 | out: hHeap=0x1f0000) returned 1 [0212.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0212.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ad0 | out: hHeap=0x1f0000) returned 1 [0212.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0212.986] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x234e90 [0212.986] GetLastError () returned 0x0 [0212.987] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vccorlib140.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\vccorlib140.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d9f0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0212.987] GetFileType (hFile=0x23c) returned 0x1 [0212.987] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x288fa8 [0212.988] SetFilePointerEx (in: hFile=0x23c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1a1d978 | out: lpNewFilePointer=0x0) returned 1 [0212.988] GetLastError () returned 0xb7 [0212.988] CloseHandle (hObject=0x23c) returned 1 [0212.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b80 | out: hHeap=0x1f0000) returned 1 [0212.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ad0 | out: hHeap=0x1f0000) returned 1 [0212.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237350 | out: hHeap=0x1f0000) returned 1 [0212.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237248 | out: hHeap=0x1f0000) returned 1 [0212.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0212.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205330 | out: hHeap=0x1f0000) returned 1 [0212.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235768 | out: hHeap=0x1f0000) returned 1 [0212.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffd0 | out: hHeap=0x1f0000) returned 1 [0212.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263808 | out: hHeap=0x1f0000) returned 1 [0212.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224158 | out: hHeap=0x1f0000) returned 1 [0212.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0212.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0212.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x266290 | out: hHeap=0x1f0000) returned 1 [0212.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2246d0 | out: hHeap=0x1f0000) returned 1 [0212.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234d78 | out: hHeap=0x1f0000) returned 1 [0212.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a30 | out: hHeap=0x1f0000) returned 1 [0212.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffa0 | out: hHeap=0x1f0000) returned 1 [0212.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0212.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a90 | out: hHeap=0x1f0000) returned 1 [0212.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff70 | out: hHeap=0x1f0000) returned 1 [0212.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0212.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b30 | out: hHeap=0x1f0000) returned 1 [0212.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237668 | out: hHeap=0x1f0000) returned 1 [0212.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260798 | out: hHeap=0x1f0000) returned 1 [0212.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235de8 | out: hHeap=0x1f0000) returned 1 [0212.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234980 | out: hHeap=0x1f0000) returned 1 [0212.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0212.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0212.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2344b8 | out: hHeap=0x1f0000) returned 1 [0212.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387f0 | out: hHeap=0x1f0000) returned 1 [0212.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388c0 | out: hHeap=0x1f0000) returned 1 [0212.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28bfc0 | out: hHeap=0x1f0000) returned 1 [0212.993] CloseHandle (hObject=0x1fc) returned 1 [0212.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238990 | out: hHeap=0x1f0000) returned 1 [0212.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a80 | out: hHeap=0x1f0000) returned 1 [0212.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a7060 | out: hHeap=0x1f0000) returned 1 [0212.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24bdf0 | out: hHeap=0x1f0000) returned 1 [0212.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0212.994] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bf0 | out: hHeap=0x1f0000) returned 1 [0212.994] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28efd8 | out: hHeap=0x1f0000) returned 1 [0212.994] CloseHandle (hObject=0x210) returned 1 [0212.994] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a70 | out: hHeap=0x1f0000) returned 1 [0212.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a60 | out: hHeap=0x1f0000) returned 1 [0212.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2620a0 | out: hHeap=0x1f0000) returned 1 [0212.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f50 | out: hHeap=0x1f0000) returned 1 [0212.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2648e8 | out: hHeap=0x1f0000) returned 1 [0212.995] CloseHandle (hObject=0x204) returned 1 [0212.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389f0 | out: hHeap=0x1f0000) returned 1 [0212.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389e0 | out: hHeap=0x1f0000) returned 1 [0212.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261b98 | out: hHeap=0x1f0000) returned 1 [0212.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ba0 | out: hHeap=0x1f0000) returned 1 [0212.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b50 | out: hHeap=0x1f0000) returned 1 [0212.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b00 | out: hHeap=0x1f0000) returned 1 [0212.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ab0 | out: hHeap=0x1f0000) returned 1 [0212.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220748 | out: hHeap=0x1f0000) returned 1 [0212.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x267598 | out: hHeap=0x1f0000) returned 1 [0212.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224a18 | out: hHeap=0x1f0000) returned 1 [0212.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206808 | out: hHeap=0x1f0000) returned 1 [0212.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff28 | out: hHeap=0x1f0000) returned 1 [0212.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210090 | out: hHeap=0x1f0000) returned 1 [0212.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f6a8 | out: hHeap=0x1f0000) returned 1 [0212.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x269ba8 | out: hHeap=0x1f0000) returned 1 [0212.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224388 | out: hHeap=0x1f0000) returned 1 [0212.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234de8 | out: hHeap=0x1f0000) returned 1 [0212.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a0e0 | out: hHeap=0x1f0000) returned 1 [0212.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227388 | out: hHeap=0x1f0000) returned 1 [0212.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234ae8 | out: hHeap=0x1f0000) returned 1 [0212.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0212.998] DeleteFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vccorlib140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\vccorlib140.dll")) returned 1 [0212.999] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d7a486, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d7a486, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x15ab0, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="vcruntime140.dll", cAlternateFileName="VCRUNT~1.DLL")) returned 1 [0212.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x234f00 [0212.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211948 [0213.000] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0213.000] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211948 | out: hHeap=0x1f0000) returned 1 [0213.000] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0213.000] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234f00 | out: hHeap=0x1f0000) returned 1 [0213.000] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vcruntime140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\vcruntime140.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.001] GetLastError () returned 0x20 [0213.001] GetLastError () returned 0x20 [0213.001] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d7a486, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d7a486, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x15ab0, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="vcruntime140.dll", cAlternateFileName="VCRUNT~1.DLL")) returned 0 [0213.001] FindClose (in: hFindFile=0x24e980 | out: hFindFile=0x24e980) returned 1 [0213.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0213.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22db68 | out: hHeap=0x1f0000) returned 1 [0213.002] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ba8 | out: hHeap=0x1f0000) returned 1 [0213.002] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233cd8 | out: hHeap=0x1f0000) returned 1 [0213.002] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233cd8 [0213.002] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ba8 [0213.002] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x227388 [0213.002] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fab8 [0213.002] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\*", lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb3e1c92c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb3e1c92c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName=".", cAlternateFileName="")) returned 0x24e6c0 [0213.002] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0213.003] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fab8 | out: hHeap=0x1f0000) returned 1 [0213.003] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0213.003] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb3e1c92c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb3e1c92c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="..", cAlternateFileName="")) returned 1 [0213.003] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0213.003] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0213.003] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0213.003] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0213.003] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d100bae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe462e472, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe462e472, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xc137d, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="Alphabet.xml", cAlternateFileName="")) returned 1 [0213.003] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260770 [0213.003] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0213.004] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218818 [0213.004] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0213.004] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0213.004] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0213.004] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\alphabet.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.005] GetLastError () returned 0x5 [0213.005] GetLastError () returned 0x5 [0213.005] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05532b6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="ar-SA", cAlternateFileName="")) returned 1 [0213.005] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0213.005] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218fa8 [0213.005] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0213.005] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218818 | out: hHeap=0x1f0000) returned 1 [0213.005] lstrcmpW (lpString1="ar-SA", lpString2=".") returned 1 [0213.005] lstrcmpW (lpString1="ar-SA", lpString2="..") returned 1 [0213.006] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204cf0 [0213.006] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211e10 [0213.006] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0553f37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="bg-BG", cAlternateFileName="")) returned 1 [0213.006] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0213.006] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x2191b8 [0213.006] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0213.006] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218fa8 | out: hHeap=0x1f0000) returned 1 [0213.006] lstrcmpW (lpString1="bg-BG", lpString2=".") returned 1 [0213.006] lstrcmpW (lpString1="bg-BG", lpString2="..") returned 1 [0213.006] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x234cd0 [0213.006] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2127a0 [0213.007] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cf0 | out: hHeap=0x1f0000) returned 1 [0213.007] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe46546cb, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe46546cb, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x69a5, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="Content.xml", cAlternateFileName="")) returned 1 [0213.007] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605e0 [0213.007] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe00 [0213.007] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218978 [0213.007] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe00 | out: hHeap=0x1f0000) returned 1 [0213.007] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2191b8 | out: hHeap=0x1f0000) returned 1 [0213.007] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605e0 | out: hHeap=0x1f0000) returned 1 [0213.008] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\content.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.008] GetLastError () returned 0x5 [0213.008] GetLastError () returned 0x5 [0213.008] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0554b83, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="cs-CZ", cAlternateFileName="")) returned 1 [0213.009] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0213.009] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219318 [0213.009] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0213.009] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218978 | out: hHeap=0x1f0000) returned 1 [0213.009] lstrcmpW (lpString1="cs-CZ", lpString2=".") returned 1 [0213.009] lstrcmpW (lpString1="cs-CZ", lpString2="..") returned 1 [0213.009] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x48) returned 0x225c48 [0213.009] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212828 [0213.009] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234cd0 | out: hHeap=0x1f0000) returned 1 [0213.009] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05550d5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="da-DK", cAlternateFileName="")) returned 1 [0213.009] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0213.009] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x2191b8 [0213.010] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0213.010] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219318 | out: hHeap=0x1f0000) returned 1 [0213.010] lstrcmpW (lpString1="da-DK", lpString2=".") returned 1 [0213.010] lstrcmpW (lpString1="da-DK", lpString2="..") returned 1 [0213.010] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236190 [0213.010] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211fa8 [0213.010] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225c48 | out: hHeap=0x1f0000) returned 1 [0213.010] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0555b2c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="de-DE", cAlternateFileName="")) returned 1 [0213.010] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220490 [0213.010] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219268 [0213.010] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220490 | out: hHeap=0x1f0000) returned 1 [0213.010] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2191b8 | out: hHeap=0x1f0000) returned 1 [0213.011] lstrcmpW (lpString1="de-DE", lpString2=".") returned 1 [0213.011] lstrcmpW (lpString1="de-DE", lpString2="..") returned 1 [0213.011] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0213.011] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212030 [0213.011] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236190 | out: hHeap=0x1f0000) returned 1 [0213.011] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa055662c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="el-GR", cAlternateFileName="")) returned 1 [0213.011] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0213.011] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219478 [0213.011] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0213.011] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219268 | out: hHeap=0x1f0000) returned 1 [0213.011] lstrcmpW (lpString1="el-GR", lpString2=".") returned 1 [0213.011] lstrcmpW (lpString1="el-GR", lpString2="..") returned 1 [0213.011] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2128b0 [0213.011] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0557085, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="en-GB", cAlternateFileName="")) returned 1 [0213.012] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0213.012] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218768 [0213.012] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0213.012] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219478 | out: hHeap=0x1f0000) returned 1 [0213.012] lstrcmpW (lpString1="en-GB", lpString2=".") returned 1 [0213.012] lstrcmpW (lpString1="en-GB", lpString2="..") returned 1 [0213.012] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd8) returned 0x22b018 [0213.012] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2120b8 [0213.012] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0213.012] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05dd09d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe8231541, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="en-US", cAlternateFileName="")) returned 1 [0213.012] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0213.012] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218818 [0213.012] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0213.012] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218768 | out: hHeap=0x1f0000) returned 1 [0213.012] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0213.419] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0213.419] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a0b0 [0213.420] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05ddf5c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="es-ES", cAlternateFileName="")) returned 1 [0213.420] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0213.420] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ce8 [0213.420] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0213.420] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218818 | out: hHeap=0x1f0000) returned 1 [0213.420] lstrcmpW (lpString1="es-ES", lpString2=".") returned 1 [0213.420] lstrcmpW (lpString1="es-ES", lpString2="..") returned 1 [0213.420] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2299c8 [0213.420] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05dea14, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="es-MX", cAlternateFileName="")) returned 1 [0213.420] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fab8 [0213.420] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219268 [0213.420] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fab8 | out: hHeap=0x1f0000) returned 1 [0213.421] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ce8 | out: hHeap=0x1f0000) returned 1 [0213.421] lstrcmpW (lpString1="es-MX", lpString2=".") returned 1 [0213.421] lstrcmpW (lpString1="es-MX", lpString2="..") returned 1 [0213.421] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x138) returned 0x24f5d8 [0213.421] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229ad8 [0213.421] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b018 | out: hHeap=0x1f0000) returned 1 [0213.421] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05df011, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="et-EE", cAlternateFileName="")) returned 1 [0213.421] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2202b0 [0213.421] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218818 [0213.421] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2202b0 | out: hHeap=0x1f0000) returned 1 [0213.421] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219268 | out: hHeap=0x1f0000) returned 1 [0213.421] lstrcmpW (lpString1="et-EE", lpString2=".") returned 1 [0213.421] lstrcmpW (lpString1="et-EE", lpString2="..") returned 1 [0213.421] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229b60 [0213.421] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05df7b6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="fi-FI", cAlternateFileName="")) returned 1 [0213.421] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2202b0 [0213.421] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ef8 [0213.421] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2202b0 | out: hHeap=0x1f0000) returned 1 [0213.421] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218818 | out: hHeap=0x1f0000) returned 1 [0213.421] lstrcmpW (lpString1="fi-FI", lpString2=".") returned 1 [0213.421] lstrcmpW (lpString1="fi-FI", lpString2="..") returned 1 [0213.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a2d0 [0213.422] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8f49e8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd11f8841, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd11f8841, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x186b84, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="FlickAnimation.avi", cAlternateFileName="")) returned 1 [0213.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x234de8 [0213.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0213.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218fa8 [0213.422] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0213.422] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ef8 | out: hHeap=0x1f0000) returned 1 [0213.422] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234de8 | out: hHeap=0x1f0000) returned 1 [0213.422] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\FlickAnimation.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flickanimation.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.422] GetLastError () returned 0x5 [0213.422] GetLastError () returned 0x5 [0213.423] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8f49e8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd121ea9a, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd121ea9a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xc4800, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="FlickLearningWizard.exe", cAlternateFileName="")) returned 1 [0213.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x234e20 [0213.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0213.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ce8 [0213.423] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0213.423] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218fa8 | out: hHeap=0x1f0000) returned 1 [0213.423] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234e20 | out: hHeap=0x1f0000) returned 1 [0213.424] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\FlickLearningWizard.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flicklearningwizard.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.424] GetLastError () returned 0x5 [0213.424] GetLastError () returned 0x5 [0213.424] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0635c03, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="fr-CA", cAlternateFileName="")) returned 1 [0213.424] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fef0 [0213.424] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218818 [0213.424] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fef0 | out: hHeap=0x1f0000) returned 1 [0213.424] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ce8 | out: hHeap=0x1f0000) returned 1 [0213.425] lstrcmpW (lpString1="fr-CA", lpString2=".") returned 1 [0213.425] lstrcmpW (lpString1="fr-CA", lpString2="..") returned 1 [0213.425] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229be8 [0213.425] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06369df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="fr-FR", cAlternateFileName="")) returned 1 [0213.425] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0213.425] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ef8 [0213.425] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0213.425] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218818 | out: hHeap=0x1f0000) returned 1 [0213.425] lstrcmpW (lpString1="fr-FR", lpString2=".") returned 1 [0213.425] lstrcmpW (lpString1="fr-FR", lpString2="..") returned 1 [0213.425] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c8) returned 0x220a58 [0213.426] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a1c0 [0213.426] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f5d8 | out: hHeap=0x1f0000) returned 1 [0213.426] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0637839, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="fsdefinitions", cAlternateFileName="FSDEFI~1")) returned 1 [0213.426] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a18 [0213.426] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0213.426] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218558 [0213.426] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0213.426] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ef8 | out: hHeap=0x1f0000) returned 1 [0213.426] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a18 | out: hHeap=0x1f0000) returned 1 [0213.426] lstrcmpW (lpString1="fsdefinitions", lpString2=".") returned 1 [0213.426] lstrcmpW (lpString1="fsdefinitions", lpString2="..") returned 1 [0213.426] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0213.427] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cf9a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="he-IL", cAlternateFileName="")) returned 1 [0213.427] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0213.427] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219058 [0213.427] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0213.427] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218558 | out: hHeap=0x1f0000) returned 1 [0213.427] lstrcmpW (lpString1="he-IL", lpString2=".") returned 1 [0213.427] lstrcmpW (lpString1="he-IL", lpString2="..") returned 1 [0213.427] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229e08 [0213.427] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cfce2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="hr-HR", cAlternateFileName="")) returned 1 [0213.427] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0213.427] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218558 [0213.428] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0213.428] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219058 | out: hHeap=0x1f0000) returned 1 [0213.428] lstrcmpW (lpString1="hr-HR", lpString2=".") returned 1 [0213.428] lstrcmpW (lpString1="hr-HR", lpString2="..") returned 1 [0213.428] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229c70 [0213.428] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06d0656, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="hu-HU", cAlternateFileName="")) returned 1 [0213.428] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220490 [0213.428] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218d98 [0213.428] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220490 | out: hHeap=0x1f0000) returned 1 [0213.428] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218558 | out: hHeap=0x1f0000) returned 1 [0213.429] lstrcmpW (lpString1="hu-HU", lpString2=".") returned 1 [0213.429] lstrcmpW (lpString1="hu-HU", lpString2="..") returned 1 [0213.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229e90 [0213.429] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8ce781, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe382bd1f, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe382bd1f, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xb620, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="hwrcommonlm.dat", cAlternateFileName="")) returned 1 [0213.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bd0 [0213.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0213.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ce8 [0213.429] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0213.429] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218d98 | out: hHeap=0x1f0000) returned 1 [0213.429] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bd0 | out: hHeap=0x1f0000) returned 1 [0213.430] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\hwrcommonlm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrcommonlm.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.430] GetLastError () returned 0x5 [0213.430] GetLastError () returned 0x5 [0213.431] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6eba2ec1, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0xa07693a9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6eba2ec1, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="HWRCustomization", cAlternateFileName="HWRCUS~1")) returned 1 [0213.431] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x234e90 [0213.431] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0213.431] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x2191b8 [0213.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0213.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ce8 | out: hHeap=0x1f0000) returned 1 [0213.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234e90 | out: hHeap=0x1f0000) returned 1 [0213.431] lstrcmpW (lpString1="HWRCustomization", lpString2=".") returned 1 [0213.431] lstrcmpW (lpString1="HWRCustomization", lpString2="..") returned 1 [0213.431] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0213.431] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85c57278, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xb269cdea, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb269cdea, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x79bc0, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="hwrenclm.dat", cAlternateFileName="")) returned 1 [0213.432] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a18 [0213.432] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0213.432] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ef8 [0213.432] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0213.432] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2191b8 | out: hHeap=0x1f0000) returned 1 [0213.432] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a18 | out: hHeap=0x1f0000) returned 1 [0213.432] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\hwrenclm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrenclm.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.433] GetLastError () returned 0x5 [0213.433] GetLastError () returned 0x5 [0213.433] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8ce781, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe38781cd, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe38781cd, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x10cb30, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="hwrlatinlm.dat", cAlternateFileName="")) returned 1 [0213.433] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bd0 [0213.433] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0213.433] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218558 [0213.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0213.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ef8 | out: hHeap=0x1f0000) returned 1 [0213.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bd0 | out: hHeap=0x1f0000) returned 1 [0213.435] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\hwrlatinlm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrlatinlm.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.436] GetLastError () returned 0x5 [0213.436] GetLastError () returned 0x5 [0213.436] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85cc99ae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xb28b2edf, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb28b2edf, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x2662f0, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="hwrusalm.dat", cAlternateFileName="")) returned 1 [0213.436] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a18 [0213.436] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0213.436] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x2188c8 [0213.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0213.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218558 | out: hHeap=0x1f0000) returned 1 [0213.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a18 | out: hHeap=0x1f0000) returned 1 [0213.437] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusalm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusalm.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.437] GetLastError () returned 0x5 [0213.437] GetLastError () returned 0x5 [0213.437] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85cc99ae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xb281a570, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb281a570, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x339380, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="hwrusash.dat", cAlternateFileName="")) returned 1 [0213.438] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a18 [0213.438] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fab8 [0213.438] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218818 [0213.438] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fab8 | out: hHeap=0x1f0000) returned 1 [0213.438] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2188c8 | out: hHeap=0x1f0000) returned 1 [0213.438] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a18 | out: hHeap=0x1f0000) returned 1 [0213.438] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusash.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusash.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.439] GetLastError () returned 0x5 [0213.439] GetLastError () returned 0x5 [0213.439] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e38953f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e38953f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e38953f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x58400, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="InkDiv.dll", cAlternateFileName="")) returned 1 [0213.439] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0213.439] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fef0 [0213.439] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ef8 [0213.439] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fef0 | out: hHeap=0x1f0000) returned 1 [0213.439] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218818 | out: hHeap=0x1f0000) returned 1 [0213.439] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0213.440] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\InkDiv.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inkdiv.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.440] GetLastError () returned 0x5 [0213.440] GetLastError () returned 0x5 [0213.441] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e38953f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e38953f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e38953f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1ecc00, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="InkObj.dll", cAlternateFileName="")) returned 1 [0213.441] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bd0 [0213.441] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2202b0 [0213.441] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218558 [0213.441] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2202b0 | out: hHeap=0x1f0000) returned 1 [0213.441] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ef8 | out: hHeap=0x1f0000) returned 1 [0213.441] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bd0 | out: hHeap=0x1f0000) returned 1 [0213.442] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\InkObj.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inkobj.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.442] GetLastError () returned 0x5 [0213.442] GetLastError () returned 0x5 [0213.442] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d14d081, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe467a929, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe467a929, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x59a00, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="InputPersonalization.exe", cAlternateFileName="")) returned 1 [0213.443] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234110 [0213.443] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21ffe0 [0213.443] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219058 [0213.443] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ffe0 | out: hHeap=0x1f0000) returned 1 [0213.443] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218558 | out: hHeap=0x1f0000) returned 1 [0213.443] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234110 | out: hHeap=0x1f0000) returned 1 [0213.444] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\InputPersonalization.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inputpersonalization.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.444] GetLastError () returned 0x5 [0213.444] GetLastError () returned 0x5 [0213.444] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x972, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="ipsar.xml", cAlternateFileName="")) returned 1 [0213.444] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bd0 [0213.444] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0213.444] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218818 [0213.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0213.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219058 | out: hHeap=0x1f0000) returned 1 [0213.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bd0 | out: hHeap=0x1f0000) returned 1 [0213.446] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipsar.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsar.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.446] GetLastError () returned 0x5 [0213.446] GetLastError () returned 0x5 [0213.446] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa20, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="ipscat.xml", cAlternateFileName="")) returned 1 [0213.446] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bd0 [0213.446] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0213.446] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x2188c8 [0213.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0213.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218818 | out: hHeap=0x1f0000) returned 1 [0213.447] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bd0 | out: hHeap=0x1f0000) returned 1 [0213.447] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipscat.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscat.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.452] GetLastError () returned 0x5 [0213.452] GetLastError () returned 0x5 [0213.452] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x99e, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="ipschs.xml", cAlternateFileName="")) returned 1 [0213.452] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bd0 [0213.453] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0213.453] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219058 [0213.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0213.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2188c8 | out: hHeap=0x1f0000) returned 1 [0213.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bd0 | out: hHeap=0x1f0000) returned 1 [0213.453] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipschs.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipschs.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.453] GetLastError () returned 0x5 [0213.453] GetLastError () returned 0x5 [0213.453] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x984, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="ipscht.xml", cAlternateFileName="")) returned 1 [0213.453] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ab8 [0213.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2202b0 [0213.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ce8 [0213.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2202b0 | out: hHeap=0x1f0000) returned 1 [0213.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219058 | out: hHeap=0x1f0000) returned 1 [0213.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ab8 | out: hHeap=0x1f0000) returned 1 [0213.454] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipscht.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscht.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.454] GetLastError () returned 0x5 [0213.454] GetLastError () returned 0x5 [0213.455] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9fc, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="ipscsy.xml", cAlternateFileName="")) returned 1 [0213.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bd0 [0213.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0213.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218608 [0213.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0213.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ce8 | out: hHeap=0x1f0000) returned 1 [0213.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bd0 | out: hHeap=0x1f0000) returned 1 [0213.816] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipscsy.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscsy.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.816] GetLastError () returned 0x5 [0213.816] GetLastError () returned 0x5 [0213.816] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9d2, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="ipsdan.xml", cAlternateFileName="")) returned 1 [0213.816] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604c8 [0213.816] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220490 [0213.816] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x2191b8 [0213.816] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220490 | out: hHeap=0x1f0000) returned 1 [0213.816] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218608 | out: hHeap=0x1f0000) returned 1 [0213.817] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604c8 | out: hHeap=0x1f0000) returned 1 [0213.817] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdan.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdan.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.817] GetLastError () returned 0x5 [0213.817] GetLastError () returned 0x5 [0213.817] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa38, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="ipsdeu.xml", cAlternateFileName="")) returned 1 [0213.818] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260838 [0213.818] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0213.818] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218768 [0213.818] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0213.818] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2191b8 | out: hHeap=0x1f0000) returned 1 [0213.818] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260838 | out: hHeap=0x1f0000) returned 1 [0213.818] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdeu.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdeu.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.819] GetLastError () returned 0x5 [0213.819] GetLastError () returned 0x5 [0213.819] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa3a, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="ipsel.xml", cAlternateFileName="")) returned 1 [0213.819] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0213.819] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0213.819] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ce8 [0213.819] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0213.819] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218768 | out: hHeap=0x1f0000) returned 1 [0213.819] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0213.820] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipsel.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsel.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.820] GetLastError () returned 0x5 [0213.820] GetLastError () returned 0x5 [0213.820] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa12, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="ipsen.xml", cAlternateFileName="")) returned 1 [0213.820] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260770 [0213.820] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0213.820] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ef8 [0213.821] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0213.821] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ce8 | out: hHeap=0x1f0000) returned 1 [0213.821] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0213.821] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipsen.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsen.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.821] GetLastError () returned 0x5 [0213.821] GetLastError () returned 0x5 [0213.821] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xbd0, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="ipsesp.xml", cAlternateFileName="")) returned 1 [0213.821] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0213.821] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0213.822] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x2191b8 [0213.822] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0213.822] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ef8 | out: hHeap=0x1f0000) returned 1 [0213.822] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0213.822] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipsesp.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsesp.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.822] GetLastError () returned 0x5 [0213.822] GetLastError () returned 0x5 [0213.822] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d14d081, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d14d081, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d14d081, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="IPSEventLogMsg.dll", cAlternateFileName="")) returned 1 [0213.823] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf70 [0213.823] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220058 [0213.823] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ce8 [0213.823] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220058 | out: hHeap=0x1f0000) returned 1 [0213.823] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2191b8 | out: hHeap=0x1f0000) returned 1 [0213.823] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf70 | out: hHeap=0x1f0000) returned 1 [0213.823] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\IPSEventLogMsg.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipseventlogmsg.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.823] GetLastError () returned 0x5 [0213.823] GetLastError () returned 0x5 [0213.824] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d100bae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d100bae, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa62, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="ipsfin.xml", cAlternateFileName="")) returned 1 [0213.824] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260798 [0213.824] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0213.824] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218558 [0213.824] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0213.824] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ce8 | out: hHeap=0x1f0000) returned 1 [0213.824] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260798 | out: hHeap=0x1f0000) returned 1 [0213.824] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipsfin.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfin.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.825] GetLastError () returned 0x5 [0213.825] GetLastError () returned 0x5 [0213.825] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa44, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="ipsfra.xml", cAlternateFileName="")) returned 1 [0213.825] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0213.825] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0213.825] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219058 [0213.825] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0213.825] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218558 | out: hHeap=0x1f0000) returned 1 [0213.825] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0213.825] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipsfra.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfra.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.826] GetLastError () returned 0x5 [0213.826] GetLastError () returned 0x5 [0213.826] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9e4, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="ipshe.xml", cAlternateFileName="")) returned 1 [0213.826] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0213.826] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2202b0 [0213.826] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x2191b8 [0213.826] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2202b0 | out: hHeap=0x1f0000) returned 1 [0213.826] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219058 | out: hHeap=0x1f0000) returned 1 [0213.826] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0213.826] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipshe.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshe.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.826] GetLastError () returned 0x5 [0213.826] GetLastError () returned 0x5 [0213.826] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9d6, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="ipshi.xml", cAlternateFileName="")) returned 1 [0213.827] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605b8 [0213.827] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0213.827] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x2188c8 [0213.827] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0213.827] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2191b8 | out: hHeap=0x1f0000) returned 1 [0213.827] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0213.827] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipshi.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshi.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.827] GetLastError () returned 0x5 [0213.827] GetLastError () returned 0x5 [0213.827] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c96711d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa5c, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="ipshrv.xml", cAlternateFileName="")) returned 1 [0213.827] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260518 [0213.827] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0213.827] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218fa8 [0213.827] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0213.827] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2188c8 | out: hHeap=0x1f0000) returned 1 [0213.828] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0213.828] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipshrv.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshrv.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.828] GetLastError () returned 0x5 [0213.828] GetLastError () returned 0x5 [0213.828] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d14d081, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d14d081, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d14d081, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa0a, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="ipsid.xml", cAlternateFileName="")) returned 1 [0213.828] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0213.828] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0213.828] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219318 [0213.828] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0213.828] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218fa8 | out: hHeap=0x1f0000) returned 1 [0213.828] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0213.829] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipsid.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsid.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.829] GetLastError () returned 0x5 [0213.829] GetLastError () returned 0x5 [0213.829] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9de, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="ipsita.xml", cAlternateFileName="")) returned 1 [0213.829] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0213.829] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220058 [0213.829] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218558 [0213.829] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220058 | out: hHeap=0x1f0000) returned 1 [0213.829] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219318 | out: hHeap=0x1f0000) returned 1 [0213.829] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0213.830] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipsita.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsita.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.830] GetLastError () returned 0x5 [0213.830] GetLastError () returned 0x5 [0213.830] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c96711d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c96711d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c96711d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9da, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="ipsjpn.xml", cAlternateFileName="")) returned 1 [0213.830] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0213.830] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0213.830] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218818 [0213.830] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0213.830] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218558 | out: hHeap=0x1f0000) returned 1 [0213.830] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0213.832] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipsjpn.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsjpn.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.832] GetLastError () returned 0x5 [0213.832] GetLastError () returned 0x5 [0213.832] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d100bae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d100bae, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d100bae, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa08, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="ipskor.xml", cAlternateFileName="")) returned 1 [0213.832] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0213.832] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0213.832] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x2191b8 [0213.832] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0213.832] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218818 | out: hHeap=0x1f0000) returned 1 [0213.832] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0213.833] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipskor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipskor.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.833] GetLastError () returned 0x5 [0213.833] GetLastError () returned 0x5 [0213.833] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe462e472, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe462e472, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xa400, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="IpsMigrationPlugin.dll", cAlternateFileName="")) returned 1 [0213.833] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0213.833] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2202b0 [0213.833] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218a28 [0213.833] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2202b0 | out: hHeap=0x1f0000) returned 1 [0213.833] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2191b8 | out: hHeap=0x1f0000) returned 1 [0213.833] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0213.834] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\IpsMigrationPlugin.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsmigrationplugin.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.834] GetLastError () returned 0x5 [0213.834] GetLastError () returned 0x5 [0213.834] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d100bae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d100bae, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d100bae, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa42, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="ipsnld.xml", cAlternateFileName="")) returned 1 [0213.834] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609a0 [0213.834] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220058 [0213.834] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218608 [0213.834] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220058 | out: hHeap=0x1f0000) returned 1 [0213.834] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218a28 | out: hHeap=0x1f0000) returned 1 [0213.834] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0213.835] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnld.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnld.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.835] GetLastError () returned 0x5 [0213.835] GetLastError () returned 0x5 [0213.835] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d100bae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d100bae, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d100bae, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa14, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="ipsnor.xml", cAlternateFileName="")) returned 1 [0213.835] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0213.835] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0213.835] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218768 [0213.835] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0213.835] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218608 | out: hHeap=0x1f0000) returned 1 [0213.835] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0213.835] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnor.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.836] GetLastError () returned 0x5 [0213.836] GetLastError () returned 0x5 [0213.836] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d100bae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d100bae, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d100bae, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa28, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="ipsplk.xml", cAlternateFileName="")) returned 1 [0213.836] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260770 [0213.836] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0213.836] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218818 [0213.836] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0213.836] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218768 | out: hHeap=0x1f0000) returned 1 [0213.836] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0213.836] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipsplk.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsplk.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.837] GetLastError () returned 0x5 [0213.837] GetLastError () returned 0x5 [0213.837] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe46546cb, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe46546cb, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x1ec00, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="IpsPlugin.dll", cAlternateFileName="")) returned 1 [0213.837] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608b0 [0213.838] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0213.838] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218558 [0213.838] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0213.838] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218818 | out: hHeap=0x1f0000) returned 1 [0213.838] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608b0 | out: hHeap=0x1f0000) returned 1 [0213.838] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\IpsPlugin.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsplugin.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.838] GetLastError () returned 0x5 [0213.838] GetLastError () returned 0x5 [0213.838] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x8c6, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="ipsptb.xml", cAlternateFileName="")) returned 1 [0213.838] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0213.838] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0213.838] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218608 [0213.838] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0213.838] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218558 | out: hHeap=0x1f0000) returned 1 [0213.839] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0213.839] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptb.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.839] GetLastError () returned 0x5 [0213.839] GetLastError () returned 0x5 [0213.839] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x8c0, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="ipsptg.xml", cAlternateFileName="")) returned 1 [0213.839] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260540 [0213.839] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0213.839] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ef8 [0213.839] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0213.839] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218608 | out: hHeap=0x1f0000) returned 1 [0213.839] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0213.840] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptg.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptg.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.840] GetLastError () returned 0x5 [0213.840] GetLastError () returned 0x5 [0213.840] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c96711d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c96711d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c96711d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa54, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="ipsrom.xml", cAlternateFileName="")) returned 1 [0213.840] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0213.840] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0213.840] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218558 [0213.840] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0213.840] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ef8 | out: hHeap=0x1f0000) returned 1 [0213.840] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0213.840] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipsrom.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsrom.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.841] GetLastError () returned 0x5 [0213.841] GetLastError () returned 0x5 [0213.841] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9ee, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="ipsrus.xml", cAlternateFileName="")) returned 1 [0213.841] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0213.841] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe00 [0213.841] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ce8 [0213.841] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe00 | out: hHeap=0x1f0000) returned 1 [0213.841] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218558 | out: hHeap=0x1f0000) returned 1 [0213.841] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0213.841] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipsrus.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsrus.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.842] GetLastError () returned 0x5 [0213.842] GetLastError () returned 0x5 [0213.842] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa08, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="ipssrb.xml", cAlternateFileName="")) returned 1 [0213.842] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0213.842] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0213.842] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218768 [0213.842] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0213.842] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ce8 | out: hHeap=0x1f0000) returned 1 [0213.842] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0213.842] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssrb.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.842] GetLastError () returned 0x5 [0213.842] GetLastError () returned 0x5 [0213.843] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa24, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="ipssrl.xml", cAlternateFileName="")) returned 1 [0213.843] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606f8 [0213.843] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fab8 [0213.843] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218818 [0213.843] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fab8 | out: hHeap=0x1f0000) returned 1 [0213.843] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218768 | out: hHeap=0x1f0000) returned 1 [0213.843] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606f8 | out: hHeap=0x1f0000) returned 1 [0213.843] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssrl.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.843] GetLastError () returned 0x5 [0213.843] GetLastError () returned 0x5 [0213.843] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9d8, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="ipssve.xml", cAlternateFileName="")) returned 1 [0213.844] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260518 [0213.844] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0213.844] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ce8 [0213.844] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0213.844] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218818 | out: hHeap=0x1f0000) returned 1 [0213.844] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0213.844] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipssve.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssve.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.844] GetLastError () returned 0x5 [0213.844] GetLastError () returned 0x5 [0213.844] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xaa0, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="ipstr.xml", cAlternateFileName="")) returned 1 [0213.844] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260540 [0213.845] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0213.845] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218fa8 [0213.845] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0213.845] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ce8 | out: hHeap=0x1f0000) returned 1 [0213.845] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0213.845] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipstr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipstr.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.845] GetLastError () returned 0x5 [0213.845] GetLastError () returned 0x5 [0213.845] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0769b1e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="it-IT", cAlternateFileName="")) returned 1 [0213.845] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0213.845] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219058 [0213.845] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0213.845] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218fa8 | out: hHeap=0x1f0000) returned 1 [0213.845] lstrcmpW (lpString1="it-IT", lpString2=".") returned 1 [0213.846] lstrcmpW (lpString1="it-IT", lpString2="..") returned 1 [0213.846] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2a0) returned 0x22b018 [0213.846] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x285570 [0213.846] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220a58 | out: hHeap=0x1f0000) returned 1 [0213.846] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076a026, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="ja-JP", cAlternateFileName="")) returned 1 [0213.846] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0213.846] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219318 [0213.846] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0213.846] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219058 | out: hHeap=0x1f0000) returned 1 [0213.846] lstrcmpW (lpString1="ja-JP", lpString2=".") returned 1 [0213.846] lstrcmpW (lpString1="ja-JP", lpString2="..") returned 1 [0213.846] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286010 [0213.846] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076a7a6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="ko-KR", cAlternateFileName="")) returned 1 [0213.846] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fab8 [0213.846] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218a28 [0213.846] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fab8 | out: hHeap=0x1f0000) returned 1 [0213.846] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219318 | out: hHeap=0x1f0000) returned 1 [0213.846] lstrcmpW (lpString1="ko-KR", lpString2=".") returned 1 [0213.846] lstrcmpW (lpString1="ko-KR", lpString2="..") returned 1 [0213.846] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x285680 [0213.847] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076afd8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="LanguageModel", cAlternateFileName="LANGUA~1")) returned 1 [0213.847] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0213.847] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21ff68 [0213.847] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ce8 [0213.847] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ff68 | out: hHeap=0x1f0000) returned 1 [0213.847] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218a28 | out: hHeap=0x1f0000) returned 1 [0213.847] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0213.847] lstrcmpW (lpString1="LanguageModel", lpString2=".") returned 1 [0213.847] lstrcmpW (lpString1="LanguageModel", lpString2="..") returned 1 [0213.847] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0213.847] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076b52b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="lt-LT", cAlternateFileName="")) returned 1 [0213.847] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0213.847] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218818 [0213.847] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0213.847] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ce8 | out: hHeap=0x1f0000) returned 1 [0213.847] lstrcmpW (lpString1="lt-LT", lpString2=".") returned 1 [0213.847] lstrcmpW (lpString1="lt-LT", lpString2="..") returned 1 [0213.847] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2859b0 [0213.847] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076ba6e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="lv-LV", cAlternateFileName="")) returned 1 [0213.848] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fef0 [0213.848] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ef8 [0213.848] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fef0 | out: hHeap=0x1f0000) returned 1 [0213.848] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218818 | out: hHeap=0x1f0000) returned 1 [0213.848] lstrcmpW (lpString1="lv-LV", lpString2=".") returned 1 [0213.848] lstrcmpW (lpString1="lv-LV", lpString2="..") returned 1 [0213.848] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x285708 [0213.848] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a4376e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1f30e81, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1f30e81, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x19f200, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="micaut.dll", cAlternateFileName="")) returned 1 [0213.848] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260770 [0213.848] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fef0 [0213.848] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218608 [0213.848] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fef0 | out: hHeap=0x1f0000) returned 1 [0213.848] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ef8 | out: hHeap=0x1f0000) returned 1 [0213.848] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0213.849] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\micaut.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\micaut.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.850] GetLastError () returned 0x5 [0213.850] GetLastError () returned 0x5 [0213.850] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463d4edd, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xc2004e62, ftLastAccessTime.dwHighDateTime=0x1d2fa0a, ftLastWriteTime.dwLowDateTime=0x463d4edd, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x7b000, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="Microsoft.Ink.dll", cAlternateFileName="")) returned 1 [0213.850] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0213.850] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0213.850] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218978 [0213.850] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0213.850] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218608 | out: hHeap=0x1f0000) returned 1 [0213.850] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0213.850] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\Microsoft.Ink.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\microsoft.ink.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.850] GetLastError () returned 0x5 [0213.850] GetLastError () returned 0x5 [0213.851] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a4376e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd51e08b5, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd51e08b5, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x178200, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="mip.exe", cAlternateFileName="")) returned 1 [0213.851] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0213.851] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218a28 [0213.851] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0213.851] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218978 | out: hHeap=0x1f0000) returned 1 [0213.851] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\mip.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mip.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.851] GetLastError () returned 0x5 [0213.851] GetLastError () returned 0x5 [0213.851] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a1d507, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xde1acd8d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xde1acd8d, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x612e00, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="mraut.dll", cAlternateFileName="")) returned 1 [0213.851] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606f8 [0213.851] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fef0 [0213.852] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219318 [0213.852] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fef0 | out: hHeap=0x1f0000) returned 1 [0213.852] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218a28 | out: hHeap=0x1f0000) returned 1 [0213.852] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606f8 | out: hHeap=0x1f0000) returned 1 [0213.852] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\mraut.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mraut.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.852] GetLastError () returned 0x5 [0213.852] GetLastError () returned 0x5 [0213.852] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c3a52f7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3c3a52f7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3c3a52f7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc800, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="mshwgst.dll", cAlternateFileName="")) returned 1 [0213.852] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0213.852] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0213.852] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218558 [0213.852] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0213.852] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219318 | out: hHeap=0x1f0000) returned 1 [0213.852] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0213.853] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\mshwgst.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mshwgst.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.853] GetLastError () returned 0x5 [0213.853] GetLastError () returned 0x5 [0213.853] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8ce781, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe3805ad4, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe3805ad4, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x106a00, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="mshwLatin.dll", cAlternateFileName="")) returned 1 [0213.853] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605b8 [0213.853] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0213.853] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218768 [0213.853] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0213.853] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218558 | out: hHeap=0x1f0000) returned 1 [0213.853] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0213.853] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\mshwLatin.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mshwlatin.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.854] GetLastError () returned 0x5 [0213.854] GetLastError () returned 0x5 [0213.854] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076bff5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="nb-NO", cAlternateFileName="")) returned 1 [0213.854] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0213.854] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ce8 [0213.854] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0213.854] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218768 | out: hHeap=0x1f0000) returned 1 [0213.854] lstrcmpW (lpString1="nb-NO", lpString2=".") returned 1 [0213.854] lstrcmpW (lpString1="nb-NO", lpString2="..") returned 1 [0213.854] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x285790 [0213.854] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076c75d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="nl-NL", cAlternateFileName="")) returned 1 [0213.854] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fab8 [0213.854] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218768 [0213.854] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fab8 | out: hHeap=0x1f0000) returned 1 [0213.854] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ce8 | out: hHeap=0x1f0000) returned 1 [0213.854] lstrcmpW (lpString1="nl-NL", lpString2=".") returned 1 [0213.854] lstrcmpW (lpString1="nl-NL", lpString2="..") returned 1 [0213.854] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x285818 [0213.854] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d57c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="pl-PL", cAlternateFileName="")) returned 1 [0213.854] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0213.854] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ce8 [0213.854] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0213.854] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218768 | out: hHeap=0x1f0000) returned 1 [0213.855] lstrcmpW (lpString1="pl-PL", lpString2=".") returned 1 [0213.855] lstrcmpW (lpString1="pl-PL", lpString2="..") returned 1 [0213.855] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x285928 [0213.855] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d988, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="pt-BR", cAlternateFileName="")) returned 1 [0213.855] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0213.855] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x2188c8 [0213.855] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0213.855] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ce8 | out: hHeap=0x1f0000) returned 1 [0213.855] lstrcmpW (lpString1="pt-BR", lpString2=".") returned 1 [0213.855] lstrcmpW (lpString1="pt-BR", lpString2="..") returned 1 [0213.855] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3f0) returned 0x222ee8 [0213.855] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x285a38 [0213.855] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b018 | out: hHeap=0x1f0000) returned 1 [0213.855] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ddb8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="pt-PT", cAlternateFileName="")) returned 1 [0213.855] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220058 [0213.855] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219058 [0213.855] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220058 | out: hHeap=0x1f0000) returned 1 [0213.855] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2188c8 | out: hHeap=0x1f0000) returned 1 [0213.855] lstrcmpW (lpString1="pt-PT", lpString2=".") returned 1 [0213.855] lstrcmpW (lpString1="pt-PT", lpString2="..") returned 1 [0213.855] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x285ac0 [0213.855] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e0f5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="ro-RO", cAlternateFileName="")) returned 1 [0213.856] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0213.856] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x2191b8 [0213.856] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0213.856] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219058 | out: hHeap=0x1f0000) returned 1 [0213.856] lstrcmpW (lpString1="ro-RO", lpString2=".") returned 1 [0213.856] lstrcmpW (lpString1="ro-RO", lpString2="..") returned 1 [0213.856] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x285bd0 [0213.856] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e38953f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e38953f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e38953f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2b600, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="rtscom.dll", cAlternateFileName="")) returned 1 [0213.856] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260770 [0213.856] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220058 [0213.856] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218608 [0213.856] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220058 | out: hHeap=0x1f0000) returned 1 [0213.856] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2191b8 | out: hHeap=0x1f0000) returned 1 [0213.856] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0213.856] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\rtscom.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\rtscom.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.856] GetLastError () returned 0x5 [0213.856] GetLastError () returned 0x5 [0213.857] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e4d1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="ru-RU", cAlternateFileName="")) returned 1 [0213.857] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2202b0 [0213.857] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218fa8 [0213.857] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2202b0 | out: hHeap=0x1f0000) returned 1 [0213.857] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218608 | out: hHeap=0x1f0000) returned 1 [0213.857] lstrcmpW (lpString1="ru-RU", lpString2=".") returned 1 [0213.857] lstrcmpW (lpString1="ru-RU", lpString2="..") returned 1 [0213.857] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x285c58 [0213.857] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe46546cb, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe46546cb, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xb3200, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="ShapeCollector.exe", cAlternateFileName="")) returned 1 [0213.857] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf70 [0213.857] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fa40 [0213.857] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ce8 [0213.857] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fa40 | out: hHeap=0x1f0000) returned 1 [0213.857] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218fa8 | out: hHeap=0x1f0000) returned 1 [0213.857] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf70 | out: hHeap=0x1f0000) returned 1 [0213.857] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ShapeCollector.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\shapecollector.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.858] GetLastError () returned 0x5 [0213.858] GetLastError () returned 0x5 [0213.858] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e8a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="sk-SK", cAlternateFileName="")) returned 1 [0213.858] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0213.858] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218558 [0213.858] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0213.858] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ce8 | out: hHeap=0x1f0000) returned 1 [0213.858] lstrcmpW (lpString1="sk-SK", lpString2=".") returned 1 [0213.858] lstrcmpW (lpString1="sk-SK", lpString2="..") returned 1 [0213.858] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286918 [0213.858] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ec25, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="sl-SI", cAlternateFileName="")) returned 1 [0213.858] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0213.858] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218608 [0213.858] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0213.858] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218558 | out: hHeap=0x1f0000) returned 1 [0213.858] lstrcmpW (lpString1="sl-SI", lpString2=".") returned 1 [0213.858] lstrcmpW (lpString1="sl-SI", lpString2="..") returned 1 [0213.858] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286e68 [0213.858] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c7ae2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="sr-Latn-RS", cAlternateFileName="SR-LAT~1")) returned 1 [0213.858] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609a0 [0213.859] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0213.859] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x2191b8 [0213.859] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0213.859] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218608 | out: hHeap=0x1f0000) returned 1 [0213.859] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0213.859] lstrcmpW (lpString1="sr-Latn-RS", lpString2=".") returned 1 [0213.859] lstrcmpW (lpString1="sr-Latn-RS", lpString2="..") returned 1 [0213.859] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286808 [0213.859] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c820e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="sv-SE", cAlternateFileName="")) returned 1 [0213.859] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2202b0 [0213.859] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218768 [0213.859] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2202b0 | out: hHeap=0x1f0000) returned 1 [0213.859] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2191b8 | out: hHeap=0x1f0000) returned 1 [0213.859] lstrcmpW (lpString1="sv-SE", lpString2=".") returned 1 [0213.859] lstrcmpW (lpString1="sv-SE", lpString2="..") returned 1 [0213.859] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286120 [0213.859] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d14d081, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe467a929, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe467a929, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xa400, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="TabIpsps.dll", cAlternateFileName="")) returned 1 [0213.859] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604c8 [0213.859] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2202b0 [0213.859] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219318 [0213.859] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2202b0 | out: hHeap=0x1f0000) returned 1 [0213.859] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218768 | out: hHeap=0x1f0000) returned 1 [0213.860] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604c8 | out: hHeap=0x1f0000) returned 1 [0213.860] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\TabIpsps.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabipsps.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.860] GetLastError () returned 0x5 [0213.860] GetLastError () returned 0x5 [0213.860] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463d4edd, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x779da8e5, ftLastAccessTime.dwHighDateTime=0x1d2fa0a, ftLastWriteTime.dwLowDateTime=0x463d4edd, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x3e9600, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="tabskb.dll", cAlternateFileName="")) returned 1 [0213.860] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2607e8 [0213.860] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0213.860] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ce8 [0213.860] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0213.860] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219318 | out: hHeap=0x1f0000) returned 1 [0213.860] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607e8 | out: hHeap=0x1f0000) returned 1 [0213.860] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\tabskb.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabskb.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.861] GetLastError () returned 0x5 [0213.861] GetLastError () returned 0x5 [0213.861] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1a8750a, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1a8750a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x5f780, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="TabTip.exe", cAlternateFileName="")) returned 1 [0213.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608b0 [0213.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0213.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x2191b8 [0213.861] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0213.861] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ce8 | out: hHeap=0x1f0000) returned 1 [0213.861] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608b0 | out: hHeap=0x1f0000) returned 1 [0213.861] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\TabTip.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabtip.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.861] GetLastError () returned 0x5 [0213.861] GetLastError () returned 0x5 [0213.861] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8602, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="th-TH", cAlternateFileName="")) returned 1 [0213.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220490 [0213.862] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218558 [0213.862] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220490 | out: hHeap=0x1f0000) returned 1 [0213.862] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2191b8 | out: hHeap=0x1f0000) returned 1 [0213.862] lstrcmpW (lpString1="th-TH", lpString2=".") returned 1 [0213.862] lstrcmpW (lpString1="th-TH", lpString2="..") returned 1 [0213.862] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2869a0 [0213.862] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1aad768, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1aad768, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x109400, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="TipRes.dll", cAlternateFileName="")) returned 1 [0213.862] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608b0 [0214.253] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21ff68 [0214.253] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218818 [0214.253] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ff68 | out: hHeap=0x1f0000) returned 1 [0214.253] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218558 | out: hHeap=0x1f0000) returned 1 [0214.253] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608b0 | out: hHeap=0x1f0000) returned 1 [0214.254] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\TipRes.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipres.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.254] GetLastError () returned 0x5 [0214.254] GetLastError () returned 0x5 [0214.254] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x5600, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="tipresx.dll", cAlternateFileName="")) returned 1 [0214.254] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260658 [0214.254] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0214.254] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ce8 [0214.255] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0214.255] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218818 | out: hHeap=0x1f0000) returned 1 [0214.255] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260658 | out: hHeap=0x1f0000) returned 1 [0214.255] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\tipresx.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipresx.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.255] GetLastError () returned 0x5 [0214.256] GetLastError () returned 0x5 [0214.256] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79680792, ftCreationTime.dwHighDateTime=0x1d32794, ftLastAccessTime.dwLowDateTime=0x79680792, ftLastAccessTime.dwHighDateTime=0x1d32794, ftLastWriteTime.dwLowDateTime=0x79680792, ftLastWriteTime.dwHighDateTime=0x1d32794, nFileSizeHigh=0x0, nFileSizeLow=0x101200, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="tipskins.dll", cAlternateFileName="")) returned 1 [0214.256] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609a0 [0214.256] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0214.256] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x2188c8 [0214.256] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0214.256] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ce8 | out: hHeap=0x1f0000) returned 1 [0214.256] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0214.257] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\tipskins.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipskins.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.257] GetLastError () returned 0x5 [0214.257] GetLastError () returned 0x5 [0214.257] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7965a52d, ftCreationTime.dwHighDateTime=0x1d32794, ftLastAccessTime.dwLowDateTime=0x7965a52d, ftLastAccessTime.dwHighDateTime=0x1d32794, ftLastWriteTime.dwLowDateTime=0x7965a52d, ftLastWriteTime.dwHighDateTime=0x1d32794, nFileSizeHigh=0x0, nFileSizeLow=0x9e1a0, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="tiptsf.dll", cAlternateFileName="")) returned 1 [0214.257] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0214.257] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0214.257] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ce8 [0214.257] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0214.257] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2188c8 | out: hHeap=0x1f0000) returned 1 [0214.257] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0214.258] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\tiptsf.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tiptsf.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.258] GetLastError () returned 0x5 [0214.258] GetLastError () returned 0x5 [0214.258] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463d4edd, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x6ebfe576, ftLastAccessTime.dwHighDateTime=0x1d2fa0a, ftLastWriteTime.dwLowDateTime=0x463d4edd, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x17a00, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="tpcps.dll", cAlternateFileName="")) returned 1 [0214.258] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0214.258] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0214.258] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x2191b8 [0214.259] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0214.259] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ce8 | out: hHeap=0x1f0000) returned 1 [0214.259] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0214.259] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\tpcps.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tpcps.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.259] GetLastError () returned 0x5 [0214.259] GetLastError () returned 0x5 [0214.259] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c896f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="tr-TR", cAlternateFileName="")) returned 1 [0214.260] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe00 [0214.260] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ef8 [0214.260] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe00 | out: hHeap=0x1f0000) returned 1 [0214.260] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2191b8 | out: hHeap=0x1f0000) returned 1 [0214.260] lstrcmpW (lpString1="tr-TR", lpString2=".") returned 1 [0214.260] lstrcmpW (lpString1="tr-TR", lpString2="..") returned 1 [0214.260] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286ab0 [0214.260] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8ed8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="uk-UA", cAlternateFileName="")) returned 1 [0214.260] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0214.260] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218978 [0214.260] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0214.260] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ef8 | out: hHeap=0x1f0000) returned 1 [0214.261] lstrcmpW (lpString1="uk-UA", lpString2=".") returned 1 [0214.261] lstrcmpW (lpString1="uk-UA", lpString2="..") returned 1 [0214.261] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286780 [0214.261] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c93df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="zh-CN", cAlternateFileName="")) returned 1 [0214.261] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0214.261] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218818 [0214.261] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0214.261] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218978 | out: hHeap=0x1f0000) returned 1 [0214.261] lstrcmpW (lpString1="zh-CN", lpString2=".") returned 1 [0214.261] lstrcmpW (lpString1="zh-CN", lpString2="..") returned 1 [0214.261] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286cd0 [0214.261] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c97fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="zh-TW", cAlternateFileName="")) returned 1 [0214.261] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220058 [0214.262] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219478 [0214.262] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220058 | out: hHeap=0x1f0000) returned 1 [0214.262] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218818 | out: hHeap=0x1f0000) returned 1 [0214.262] lstrcmpW (lpString1="zh-TW", lpString2=".") returned 1 [0214.262] lstrcmpW (lpString1="zh-TW", lpString2="..") returned 1 [0214.262] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286560 [0214.262] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c97fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="zh-TW", cAlternateFileName="")) returned 0 [0214.262] FindClose (in: hFindFile=0x24e6c0 | out: hFindFile=0x24e6c0) returned 1 [0214.262] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2344b8 [0214.262] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260658 [0214.263] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x226d28 [0214.263] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286d58 [0214.263] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\*", lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05532b6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e900 [0214.263] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2861a8 [0214.263] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286d58 | out: hHeap=0x1f0000) returned 1 [0214.263] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0214.263] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05532b6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.263] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286670 [0214.264] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2861a8 | out: hHeap=0x1f0000) returned 1 [0214.264] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0214.264] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0214.264] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0214.264] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260770 [0214.264] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2861a8 [0214.264] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0214.264] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2861a8 | out: hHeap=0x1f0000) returned 1 [0214.264] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286670 | out: hHeap=0x1f0000) returned 1 [0214.264] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0214.265] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ar-sa\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.265] GetLastError () returned 0x5 [0214.265] GetLastError () returned 0x5 [0214.265] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0214.266] FindClose (in: hFindFile=0x24e900 | out: hFindFile=0x24e900) returned 1 [0214.266] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0214.266] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226d28 | out: hHeap=0x1f0000) returned 1 [0214.266] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260658 | out: hHeap=0x1f0000) returned 1 [0214.266] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2344b8 | out: hHeap=0x1f0000) returned 1 [0214.266] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2344b8 [0214.266] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0214.266] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x226d28 [0214.267] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2861a8 [0214.267] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\*", lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0553f37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e900 [0214.267] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2865e8 [0214.267] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2861a8 | out: hHeap=0x1f0000) returned 1 [0214.267] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0214.267] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0553f37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.267] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2863c8 [0214.268] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2865e8 | out: hHeap=0x1f0000) returned 1 [0214.268] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0214.268] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0214.268] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0214.268] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0214.268] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286890 [0214.268] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0214.268] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286890 | out: hHeap=0x1f0000) returned 1 [0214.269] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2863c8 | out: hHeap=0x1f0000) returned 1 [0214.269] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0214.269] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\bg-bg\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.269] GetLastError () returned 0x5 [0214.269] GetLastError () returned 0x5 [0214.270] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0214.270] FindClose (in: hFindFile=0x24e900 | out: hFindFile=0x24e900) returned 1 [0214.270] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0214.270] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226d28 | out: hHeap=0x1f0000) returned 1 [0214.270] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0214.270] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2344b8 | out: hHeap=0x1f0000) returned 1 [0214.270] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234a58 [0214.270] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260798 [0214.270] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x226d28 [0214.271] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2863c8 [0214.271] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\*", lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0554b83, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ec00 [0214.271] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286450 [0214.271] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2863c8 | out: hHeap=0x1f0000) returned 1 [0214.271] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0214.271] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0554b83, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.271] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286d58 [0214.271] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286450 | out: hHeap=0x1f0000) returned 1 [0214.271] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0214.271] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0214.272] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e316e09, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e316e09, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e316e09, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0214.272] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0214.272] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2861a8 [0214.272] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0214.272] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2861a8 | out: hHeap=0x1f0000) returned 1 [0214.272] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286d58 | out: hHeap=0x1f0000) returned 1 [0214.272] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0214.273] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\cs-cz\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.273] GetLastError () returned 0x5 [0214.273] GetLastError () returned 0x5 [0214.273] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e316e09, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e316e09, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e316e09, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0214.273] FindClose (in: hFindFile=0x24ec00 | out: hFindFile=0x24ec00) returned 1 [0214.273] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0214.273] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226d28 | out: hHeap=0x1f0000) returned 1 [0214.274] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260798 | out: hHeap=0x1f0000) returned 1 [0214.274] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234a58 | out: hHeap=0x1f0000) returned 1 [0214.274] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234ae8 [0214.274] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0214.274] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x226d28 [0214.274] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286d58 [0214.274] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\*", lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05550d5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e5c0 [0214.274] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286670 [0214.274] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286d58 | out: hHeap=0x1f0000) returned 1 [0214.274] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0214.274] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05550d5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.275] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286d58 [0214.275] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286670 | out: hHeap=0x1f0000) returned 1 [0214.275] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0214.275] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0214.275] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2f0ba2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2f0ba2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2f0ba2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0214.275] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0214.275] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286450 [0214.275] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0214.275] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286450 | out: hHeap=0x1f0000) returned 1 [0214.275] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286d58 | out: hHeap=0x1f0000) returned 1 [0214.275] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0214.276] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\da-dk\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.276] GetLastError () returned 0x5 [0214.276] GetLastError () returned 0x5 [0214.276] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2f0ba2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2f0ba2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2f0ba2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0214.276] FindClose (in: hFindFile=0x24e5c0 | out: hFindFile=0x24e5c0) returned 1 [0214.276] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0214.276] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226d28 | out: hHeap=0x1f0000) returned 1 [0214.276] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0214.276] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234ae8 | out: hHeap=0x1f0000) returned 1 [0214.276] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2344b8 [0214.276] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260518 [0214.276] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x226d28 [0214.277] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286d58 [0214.277] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\de-DE\\*", lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0555b2c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ec00 [0214.277] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286670 [0214.277] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286d58 | out: hHeap=0x1f0000) returned 1 [0214.277] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0214.277] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0555b2c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.277] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286890 [0214.277] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286670 | out: hHeap=0x1f0000) returned 1 [0214.277] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0214.277] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0214.277] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2f0ba2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2f0ba2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2f0ba2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0214.277] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0214.277] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286d58 [0214.277] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0214.277] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286d58 | out: hHeap=0x1f0000) returned 1 [0214.277] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286890 | out: hHeap=0x1f0000) returned 1 [0214.278] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0214.278] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\de-DE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\de-de\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.278] GetLastError () returned 0x5 [0214.278] GetLastError () returned 0x5 [0214.278] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2f0ba2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2f0ba2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2f0ba2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0214.278] FindClose (in: hFindFile=0x24ec00 | out: hFindFile=0x24ec00) returned 1 [0214.278] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0214.278] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226d28 | out: hHeap=0x1f0000) returned 1 [0214.278] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0214.279] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2344b8 | out: hHeap=0x1f0000) returned 1 [0214.279] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346f8 [0214.279] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260658 [0214.279] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x226ec0 [0214.279] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2866f8 [0214.279] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\el-GR\\*", lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa055662c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e6c0 [0214.279] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286d58 [0214.279] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2866f8 | out: hHeap=0x1f0000) returned 1 [0214.279] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0214.279] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa055662c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.279] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2861a8 [0214.279] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286d58 | out: hHeap=0x1f0000) returned 1 [0214.279] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0214.279] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0214.279] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0214.280] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260838 [0214.280] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286890 [0214.280] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0214.280] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286890 | out: hHeap=0x1f0000) returned 1 [0214.280] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2861a8 | out: hHeap=0x1f0000) returned 1 [0214.280] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260838 | out: hHeap=0x1f0000) returned 1 [0214.280] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\el-GR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\el-gr\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.280] GetLastError () returned 0x5 [0214.280] GetLastError () returned 0x5 [0214.280] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0214.280] FindClose (in: hFindFile=0x24e6c0 | out: hFindFile=0x24e6c0) returned 1 [0214.281] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0214.281] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226ec0 | out: hHeap=0x1f0000) returned 1 [0214.281] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260658 | out: hHeap=0x1f0000) returned 1 [0214.281] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346f8 | out: hHeap=0x1f0000) returned 1 [0214.281] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2348f0 [0214.281] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260518 [0214.281] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x226d28 [0214.281] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286d58 [0214.281] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-GB\\*", lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0557085, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e680 [0214.281] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2861a8 [0214.281] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286d58 | out: hHeap=0x1f0000) returned 1 [0214.281] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0214.281] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0557085, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.281] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2863c8 [0214.281] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2861a8 | out: hHeap=0x1f0000) returned 1 [0214.281] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0214.281] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0214.281] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0214.281] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0214.282] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286450 [0214.282] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0214.282] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286450 | out: hHeap=0x1f0000) returned 1 [0214.282] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2863c8 | out: hHeap=0x1f0000) returned 1 [0214.282] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0214.282] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-GB\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-gb\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.282] GetLastError () returned 0x5 [0214.282] GetLastError () returned 0x5 [0214.282] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0214.282] FindClose (in: hFindFile=0x24e680 | out: hFindFile=0x24e680) returned 1 [0214.283] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0214.283] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226d28 | out: hHeap=0x1f0000) returned 1 [0214.283] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0214.283] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2348f0 | out: hHeap=0x1f0000) returned 1 [0214.283] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2344b8 [0214.283] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0214.283] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x226ec0 [0214.283] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286d58 [0214.283] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\*", lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05dd09d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe8231541, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e600 [0214.284] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2863c8 [0214.284] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286d58 | out: hHeap=0x1f0000) returned 1 [0214.284] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0214.284] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05dd09d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe8231541, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.284] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286d58 [0214.284] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2863c8 | out: hHeap=0x1f0000) returned 1 [0214.284] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0214.284] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0214.284] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1a3b058, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1a3b058, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x1b2d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="boxed-correct.avi", cAlternateFileName="")) returned 1 [0214.285] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0214.285] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286670 [0214.285] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0214.285] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286670 | out: hHeap=0x1f0000) returned 1 [0214.285] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286d58 | out: hHeap=0x1f0000) returned 1 [0214.285] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0214.285] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-correct.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.285] GetLastError () returned 0x5 [0214.285] GetLastError () returned 0x5 [0214.285] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1a612b1, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1a612b1, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xbf28, dwReserved0=0x0, dwReserved1=0x0, cFileName="boxed-delete.avi", cAlternateFileName="")) returned 1 [0214.285] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0214.285] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286d58 [0214.285] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0214.285] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286d58 | out: hHeap=0x1f0000) returned 1 [0214.286] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0214.286] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0214.286] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-delete.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.286] GetLastError () returned 0x5 [0214.286] GetLastError () returned 0x5 [0214.286] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a1d507, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1aad768, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1aad768, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xb61e, dwReserved0=0x0, dwReserved1=0x0, cFileName="boxed-join.avi", cAlternateFileName="")) returned 1 [0214.286] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260770 [0214.286] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2865e8 [0214.286] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0214.286] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2865e8 | out: hHeap=0x1f0000) returned 1 [0214.286] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0214.286] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0214.286] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-join.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.287] GetLastError () returned 0x5 [0214.287] GetLastError () returned 0x5 [0214.287] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1a8750a, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1a8750a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x148de, dwReserved0=0x0, dwReserved1=0x0, cFileName="boxed-split.avi", cAlternateFileName="")) returned 1 [0214.287] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0214.287] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286890 [0214.287] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0214.287] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286890 | out: hHeap=0x1f0000) returned 1 [0214.287] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0214.287] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0214.287] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-split.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.287] GetLastError () returned 0x5 [0214.287] GetLastError () returned 0x5 [0214.287] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1a8750a, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1a8750a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x2bfcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="correct.avi", cAlternateFileName="")) returned 1 [0214.287] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0214.287] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2863c8 [0214.288] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0214.288] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2863c8 | out: hHeap=0x1f0000) returned 1 [0214.288] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0214.288] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0214.288] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\correct.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.288] GetLastError () returned 0x5 [0214.288] GetLastError () returned 0x5 [0214.288] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1a612b1, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1a612b1, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x32e18, dwReserved0=0x0, dwReserved1=0x0, cFileName="delete.avi", cAlternateFileName="")) returned 1 [0214.288] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0214.288] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2863c8 [0214.288] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0214.288] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2863c8 | out: hHeap=0x1f0000) returned 1 [0214.288] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0214.288] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0214.289] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\delete.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.289] GetLastError () returned 0x5 [0214.289] GetLastError () returned 0x5 [0214.289] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3da3ec5f, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7bf3d600, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="FlickLearningWizard.exe.mui", cAlternateFileName="")) returned 1 [0214.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346f8 [0214.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2861a8 [0214.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0214.289] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2861a8 | out: hHeap=0x1f0000) returned 1 [0214.289] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0214.289] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346f8 | out: hHeap=0x1f0000) returned 1 [0214.289] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\FlickLearningWizard.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\flicklearningwizard.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.289] GetLastError () returned 0x5 [0214.289] GetLastError () returned 0x5 [0214.289] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dab1374, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7e563000, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkObj.dll.mui", cAlternateFileName="")) returned 1 [0214.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609a0 [0214.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2861a8 [0214.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0214.289] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2861a8 | out: hHeap=0x1f0000) returned 1 [0214.290] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0214.290] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0214.290] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InkObj.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inkobj.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.290] GetLastError () returned 0x5 [0214.290] GetLastError () returned 0x5 [0214.290] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d9f27a8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7f875d00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="InputPersonalization.exe.mui", cAlternateFileName="")) returned 1 [0214.290] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2348f0 [0214.290] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2863c8 [0214.290] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0214.290] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2863c8 | out: hHeap=0x1f0000) returned 1 [0214.290] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0214.290] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2348f0 | out: hHeap=0x1f0000) returned 1 [0214.290] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InputPersonalization.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inputpersonalization.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.290] GetLastError () returned 0x5 [0214.290] GetLastError () returned 0x5 [0214.291] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d9f27a8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7f875d00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x5a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPSEventLogMsg.dll.mui", cAlternateFileName="")) returned 1 [0214.291] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0214.291] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286d58 [0214.291] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0214.291] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286d58 | out: hHeap=0x1f0000) returned 1 [0214.291] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0214.291] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0214.291] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IPSEventLogMsg.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ipseventlogmsg.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.291] GetLastError () returned 0x5 [0214.291] GetLastError () returned 0x5 [0214.291] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3da18a06, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x80b88a00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IpsMigrationPlugin.dll.mui", cAlternateFileName="")) returned 1 [0214.291] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234ae8 [0214.291] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286890 [0214.291] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0214.291] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286890 | out: hHeap=0x1f0000) returned 1 [0214.291] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0214.291] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234ae8 | out: hHeap=0x1f0000) returned 1 [0214.292] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IpsMigrationPlugin.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ipsmigrationplugin.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.292] GetLastError () returned 0x5 [0214.292] GetLastError () returned 0x5 [0214.292] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a1d507, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1af9c24, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1af9c24, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x30d3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="join.avi", cAlternateFileName="")) returned 1 [0214.292] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260770 [0214.292] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286890 [0214.292] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0214.292] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286890 | out: hHeap=0x1f0000) returned 1 [0214.292] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0214.292] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0214.292] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\join.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.292] GetLastError () returned 0x5 [0214.292] GetLastError () returned 0x5 [0214.292] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dad75cd, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7e563000, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0x0, dwReserved1=0x0, cFileName="micaut.dll.mui", cAlternateFileName="")) returned 1 [0214.292] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0214.292] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2865e8 [0214.292] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0214.293] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2865e8 | out: hHeap=0x1f0000) returned 1 [0214.293] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0214.293] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0214.293] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\micaut.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\micaut.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.293] GetLastError () returned 0x5 [0214.293] GetLastError () returned 0x5 [0214.293] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3da8b116, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7d250300, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mip.exe.mui", cAlternateFileName="")) returned 1 [0214.293] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260540 [0214.293] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2865e8 [0214.293] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0214.293] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2865e8 | out: hHeap=0x1f0000) returned 1 [0214.293] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0214.293] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0214.293] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\mip.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\mip.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.294] GetLastError () returned 0x5 [0214.294] GetLastError () returned 0x5 [0214.294] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3da18a06, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x80b88a00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mshwLatin.dll.mui", cAlternateFileName="")) returned 1 [0214.294] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0214.294] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2861a8 [0214.294] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0214.294] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2861a8 | out: hHeap=0x1f0000) returned 1 [0214.294] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0214.294] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0214.294] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\mshwLatin.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\mshwlatin.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.294] GetLastError () returned 0x5 [0214.294] GetLastError () returned 0x5 [0214.294] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dab1374, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7e563000, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtscom.dll.mui", cAlternateFileName="")) returned 1 [0214.294] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260540 [0214.295] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2861a8 [0214.295] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0214.295] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2861a8 | out: hHeap=0x1f0000) returned 1 [0214.295] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0214.295] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0214.295] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\rtscom.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\rtscom.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.295] GetLastError () returned 0x5 [0214.295] GetLastError () returned 0x5 [0214.295] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3da18a06, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7f875d00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xac00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShapeCollector.exe.mui", cAlternateFileName="")) returned 1 [0214.295] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0214.295] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2863c8 [0214.296] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0214.296] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2863c8 | out: hHeap=0x1f0000) returned 1 [0214.296] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0214.296] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0214.296] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\ShapeCollector.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\shapecollector.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.296] GetLastError () returned 0x5 [0214.296] GetLastError () returned 0x5 [0214.296] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1a8750a, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1a8750a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x2c6cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="split.avi", cAlternateFileName="")) returned 1 [0214.296] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260770 [0214.296] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2863c8 [0214.297] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0214.297] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2863c8 | out: hHeap=0x1f0000) returned 1 [0214.297] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0214.297] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0214.297] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\split.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.297] GetLastError () returned 0x5 [0214.297] GetLastError () returned 0x5 [0214.298] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dad75cd, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7e563000, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="tabskb.dll.mui", cAlternateFileName="")) returned 1 [0214.298] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605b8 [0214.298] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286670 [0214.298] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0214.298] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286670 | out: hHeap=0x1f0000) returned 1 [0214.298] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0214.298] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0214.298] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\tabskb.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tabskb.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.298] GetLastError () returned 0x5 [0214.298] GetLastError () returned 0x5 [0214.299] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3da8b116, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7d250300, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TabTip.exe.mui", cAlternateFileName="")) returned 1 [0214.299] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609a0 [0214.299] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2865e8 [0214.299] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0214.299] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2865e8 | out: hHeap=0x1f0000) returned 1 [0214.299] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0214.299] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0214.299] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TabTip.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tabtip.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.629] GetLastError () returned 0x5 [0214.629] GetLastError () returned 0x5 [0214.629] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ffe6194, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7c896e00, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0x6200, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipRes.dll.mui", cAlternateFileName="")) returned 1 [0214.629] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0214.629] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2863c8 [0214.630] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0214.630] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2863c8 | out: hHeap=0x1f0000) returned 1 [0214.630] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0214.630] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0214.630] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TipRes.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipres.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.630] GetLastError () returned 0x5 [0214.630] GetLastError () returned 0x5 [0214.630] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0214.630] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2607c0 [0214.631] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286890 [0214.631] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0214.631] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286890 | out: hHeap=0x1f0000) returned 1 [0214.631] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0214.631] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607c0 | out: hHeap=0x1f0000) returned 1 [0214.631] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.631] GetLastError () returned 0x5 [0214.631] GetLastError () returned 0x5 [0214.631] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dad75cd, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7d250300, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipTsf.dll.mui", cAlternateFileName="")) returned 1 [0214.631] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0214.631] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286c48 [0214.631] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0214.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286c48 | out: hHeap=0x1f0000) returned 1 [0214.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0214.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0214.632] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TipTsf.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tiptsf.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.632] GetLastError () returned 0x5 [0214.632] GetLastError () returned 0x5 [0214.632] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dad75cd, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7d250300, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipTsf.dll.mui", cAlternateFileName="")) returned 0 [0214.632] FindClose (in: hFindFile=0x24e600 | out: hFindFile=0x24e600) returned 1 [0214.633] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0214.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226ec0 | out: hHeap=0x1f0000) returned 1 [0214.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0214.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2344b8 | out: hHeap=0x1f0000) returned 1 [0214.634] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234860 [0214.634] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605b8 [0214.634] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x226ec0 [0214.634] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2863c8 [0214.634] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\es-ES\\*", lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05ddf5c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e600 [0214.634] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286c48 [0214.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2863c8 | out: hHeap=0x1f0000) returned 1 [0214.634] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0214.634] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05ddf5c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.634] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2865e8 [0214.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286c48 | out: hHeap=0x1f0000) returned 1 [0214.634] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0214.635] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0214.635] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0214.635] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260798 [0214.635] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286c48 [0214.635] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0214.635] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286c48 | out: hHeap=0x1f0000) returned 1 [0214.635] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2865e8 | out: hHeap=0x1f0000) returned 1 [0214.635] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260798 | out: hHeap=0x1f0000) returned 1 [0214.635] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\es-ES\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-es\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.635] GetLastError () returned 0x5 [0214.635] GetLastError () returned 0x5 [0214.635] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0214.636] FindClose (in: hFindFile=0x24e600 | out: hFindFile=0x24e600) returned 1 [0214.636] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0214.636] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226ec0 | out: hHeap=0x1f0000) returned 1 [0214.636] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0214.636] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234860 | out: hHeap=0x1f0000) returned 1 [0214.636] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234a58 [0214.636] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0214.636] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x226ec0 [0214.636] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2861a8 [0214.636] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\es-MX\\*", lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05dea14, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ecc0 [0214.637] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286d58 [0214.637] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2861a8 | out: hHeap=0x1f0000) returned 1 [0214.637] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0214.637] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05dea14, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.637] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286c48 [0214.637] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286d58 | out: hHeap=0x1f0000) returned 1 [0214.637] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0214.637] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0214.637] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2a46df, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2a46df, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2a46df, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0214.637] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609a0 [0214.637] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2866f8 [0214.637] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0214.638] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2866f8 | out: hHeap=0x1f0000) returned 1 [0214.638] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286c48 | out: hHeap=0x1f0000) returned 1 [0214.638] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0214.638] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\es-MX\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-mx\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.638] GetLastError () returned 0x5 [0214.638] GetLastError () returned 0x5 [0214.638] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2a46df, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2a46df, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2a46df, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0214.639] FindClose (in: hFindFile=0x24ecc0 | out: hFindFile=0x24ecc0) returned 1 [0214.639] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0214.639] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226ec0 | out: hHeap=0x1f0000) returned 1 [0214.639] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0214.639] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234a58 | out: hHeap=0x1f0000) returned 1 [0214.639] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234788 [0214.639] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0214.639] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x226ec0 [0214.639] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2861a8 [0214.640] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\et-EE\\*", lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05df011, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ea80 [0214.640] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2863c8 [0214.640] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2861a8 | out: hHeap=0x1f0000) returned 1 [0214.640] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0214.640] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05df011, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.640] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286450 [0214.640] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2863c8 | out: hHeap=0x1f0000) returned 1 [0214.640] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0214.641] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0214.641] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0214.641] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0214.641] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2865e8 [0214.641] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0214.641] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2865e8 | out: hHeap=0x1f0000) returned 1 [0214.641] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286450 | out: hHeap=0x1f0000) returned 1 [0214.641] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0214.642] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\et-EE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\et-ee\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.642] GetLastError () returned 0x5 [0214.642] GetLastError () returned 0x5 [0214.642] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0214.642] FindClose (in: hFindFile=0x24ea80 | out: hFindFile=0x24ea80) returned 1 [0214.642] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0214.642] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226ec0 | out: hHeap=0x1f0000) returned 1 [0214.643] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0214.643] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234788 | out: hHeap=0x1f0000) returned 1 [0214.643] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346b0 [0214.643] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609a0 [0214.643] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x226ec0 [0214.643] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2864d8 [0214.643] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fi-FI\\*", lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05df7b6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e900 [0214.643] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2863c8 [0214.643] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2864d8 | out: hHeap=0x1f0000) returned 1 [0214.644] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0214.644] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05df7b6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.644] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286c48 [0214.644] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2863c8 | out: hHeap=0x1f0000) returned 1 [0214.644] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0214.644] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0214.644] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e100c60, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e100c60, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e100c60, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0214.644] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0214.644] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286d58 [0214.644] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0214.644] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286d58 | out: hHeap=0x1f0000) returned 1 [0214.644] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286c48 | out: hHeap=0x1f0000) returned 1 [0214.645] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0214.645] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fi-FI\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fi-fi\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.645] GetLastError () returned 0x5 [0214.645] GetLastError () returned 0x5 [0214.645] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e100c60, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e100c60, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e100c60, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0214.645] FindClose (in: hFindFile=0x24e900 | out: hFindFile=0x24e900) returned 1 [0214.646] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0214.646] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226ec0 | out: hHeap=0x1f0000) returned 1 [0214.646] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0214.646] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346b0 | out: hHeap=0x1f0000) returned 1 [0214.646] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234788 [0214.646] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2607c0 [0214.646] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x226ec0 [0214.646] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286c48 [0214.646] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fr-CA\\*", lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0635c03, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e900 [0214.646] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2863c8 [0214.647] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286c48 | out: hHeap=0x1f0000) returned 1 [0214.647] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0214.647] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0635c03, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.647] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286d58 [0214.647] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2863c8 | out: hHeap=0x1f0000) returned 1 [0214.647] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0214.647] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0214.647] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e126ecb, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e126ecb, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e126ecb, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0214.647] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0214.647] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2861a8 [0214.647] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0214.647] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2861a8 | out: hHeap=0x1f0000) returned 1 [0214.647] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286d58 | out: hHeap=0x1f0000) returned 1 [0214.647] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0214.648] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fr-CA\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fr-ca\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.648] GetLastError () returned 0x5 [0214.648] GetLastError () returned 0x5 [0214.648] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e126ecb, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e126ecb, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e126ecb, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0214.648] FindClose (in: hFindFile=0x24e900 | out: hFindFile=0x24e900) returned 1 [0214.648] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0214.649] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226ec0 | out: hHeap=0x1f0000) returned 1 [0214.649] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607c0 | out: hHeap=0x1f0000) returned 1 [0214.649] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234788 | out: hHeap=0x1f0000) returned 1 [0214.649] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234788 [0214.649] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0214.649] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x226ec0 [0214.649] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2861a8 [0214.649] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fr-FR\\*", lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06369df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24eb40 [0214.649] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286c48 [0214.649] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2861a8 | out: hHeap=0x1f0000) returned 1 [0214.649] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0214.649] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06369df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.650] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286890 [0214.650] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286c48 | out: hHeap=0x1f0000) returned 1 [0214.650] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0214.650] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0214.650] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e100c60, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e100c60, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e100c60, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0214.650] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0214.650] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2863c8 [0214.650] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0214.650] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2863c8 | out: hHeap=0x1f0000) returned 1 [0214.650] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286890 | out: hHeap=0x1f0000) returned 1 [0214.650] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0214.651] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fr-FR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fr-fr\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.651] GetLastError () returned 0x5 [0214.651] GetLastError () returned 0x5 [0214.651] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e100c60, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e100c60, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e100c60, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0214.651] FindClose (in: hFindFile=0x24eb40 | out: hFindFile=0x24eb40) returned 1 [0214.652] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0214.652] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226ec0 | out: hHeap=0x1f0000) returned 1 [0214.652] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0214.652] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234788 | out: hHeap=0x1f0000) returned 1 [0214.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234aa0 [0214.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0214.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x226ec0 [0214.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0214.652] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\*", lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0637839, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e680 [0214.653] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0214.653] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0214.653] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0214.653] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0637839, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.653] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0214.653] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0214.653] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0214.653] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0214.653] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0638633, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="auxpad", cAlternateFileName="")) returned 1 [0214.653] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0214.653] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x220b50 [0214.654] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0214.654] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0214.654] lstrcmpW (lpString1="auxpad", lpString2=".") returned 1 [0214.654] lstrcmpW (lpString1="auxpad", lpString2="..") returned 1 [0214.654] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x205290 [0214.654] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a578 [0214.654] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="auxpad.xml", cAlternateFileName="")) returned 1 [0214.654] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260900 [0214.654] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0214.654] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x220828 [0214.654] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0214.655] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220b50 | out: hHeap=0x1f0000) returned 1 [0214.655] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260900 | out: hHeap=0x1f0000) returned 1 [0214.655] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.655] GetLastError () returned 0x5 [0214.655] GetLastError () returned 0x5 [0214.655] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0638c00, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="insert", cAlternateFileName="")) returned 1 [0214.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0214.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x220b50 [0214.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0214.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220828 | out: hHeap=0x1f0000) returned 1 [0214.656] lstrcmpW (lpString1="insert", lpString2=".") returned 1 [0214.656] lstrcmpW (lpString1="insert", lpString2="..") returned 1 [0214.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0214.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21aab8 [0214.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205290 | out: hHeap=0x1f0000) returned 1 [0214.656] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="insert.xml", cAlternateFileName="")) returned 1 [0214.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605b8 [0214.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0214.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x220828 [0214.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0214.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220b50 | out: hHeap=0x1f0000) returned 1 [0214.657] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0214.657] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\insert.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.657] GetLastError () returned 0x5 [0214.657] GetLastError () returned 0x5 [0214.657] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa063932e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="keypad", cAlternateFileName="")) returned 1 [0214.657] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0214.657] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x220b50 [0214.657] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0214.658] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220828 | out: hHeap=0x1f0000) returned 1 [0214.658] lstrcmpW (lpString1="keypad", lpString2=".") returned 1 [0214.658] lstrcmpW (lpString1="keypad", lpString2="..") returned 1 [0214.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x48) returned 0x225fb8 [0214.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a620 [0214.658] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0214.658] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="keypad.xml", cAlternateFileName="")) returned 1 [0214.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260540 [0214.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0214.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x220828 [0214.658] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0214.658] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220b50 | out: hHeap=0x1f0000) returned 1 [0214.658] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0214.658] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.659] GetLastError () returned 0x5 [0214.659] GetLastError () returned 0x5 [0214.659] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cd023, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="main", cAlternateFileName="")) returned 1 [0214.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0214.659] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220828 | out: hHeap=0x1f0000) returned 1 [0214.659] lstrcmpW (lpString1="main", lpString2=".") returned 1 [0214.659] lstrcmpW (lpString1="main", lpString2="..") returned 1 [0214.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236190 [0214.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0214.660] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225fb8 | out: hHeap=0x1f0000) returned 1 [0214.660] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xadda, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.xml", cAlternateFileName="")) returned 1 [0214.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604c8 [0214.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0214.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x220b50 [0214.660] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0214.660] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0214.660] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604c8 | out: hHeap=0x1f0000) returned 1 [0214.660] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.661] GetLastError () returned 0x5 [0214.661] GetLastError () returned 0x5 [0214.661] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cdb88, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskclearui", cAlternateFileName="OSKCLE~1")) returned 1 [0214.661] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260900 [0214.661] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0214.661] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x220828 [0214.661] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0214.661] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220b50 | out: hHeap=0x1f0000) returned 1 [0214.661] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260900 | out: hHeap=0x1f0000) returned 1 [0214.661] lstrcmpW (lpString1="oskclearui", lpString2=".") returned 1 [0214.661] lstrcmpW (lpString1="oskclearui", lpString2="..") returned 1 [0214.661] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0214.662] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219cf0 [0214.662] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236190 | out: hHeap=0x1f0000) returned 1 [0214.662] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskclearui.xml", cAlternateFileName="")) returned 1 [0214.662] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605e0 [0214.662] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0214.662] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x220b50 [0214.662] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0214.662] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220828 | out: hHeap=0x1f0000) returned 1 [0214.662] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605e0 | out: hHeap=0x1f0000) returned 1 [0214.662] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskclearui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.663] GetLastError () returned 0x5 [0214.663] GetLastError () returned 0x5 [0214.663] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ce328, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskmenu", cAlternateFileName="")) returned 1 [0214.663] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0214.663] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x220828 [0214.663] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0214.663] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220b50 | out: hHeap=0x1f0000) returned 1 [0214.663] lstrcmpW (lpString1="oskmenu", lpString2=".") returned 1 [0214.663] lstrcmpW (lpString1="oskmenu", lpString2="..") returned 1 [0214.663] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a8c0 [0214.663] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3fbc74, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskmenu.xml", cAlternateFileName="")) returned 1 [0214.663] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606f8 [0214.663] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0214.663] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x220b50 [0214.663] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0214.664] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220828 | out: hHeap=0x1f0000) returned 1 [0214.664] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606f8 | out: hHeap=0x1f0000) returned 1 [0214.664] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.664] GetLastError () returned 0x5 [0214.664] GetLastError () returned 0x5 [0214.664] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ce7a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknav", cAlternateFileName="")) returned 1 [0214.664] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0214.664] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x220828 [0214.664] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0214.664] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220b50 | out: hHeap=0x1f0000) returned 1 [0214.665] lstrcmpW (lpString1="osknav", lpString2=".") returned 1 [0214.665] lstrcmpW (lpString1="osknav", lpString2="..") returned 1 [0214.665] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd8) returned 0x220b50 [0214.665] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a770 [0214.665] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0214.665] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3fbc74, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknav.xml", cAlternateFileName="")) returned 1 [0214.665] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0214.665] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0214.665] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x2232e0 [0214.665] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0214.665] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220828 | out: hHeap=0x1f0000) returned 1 [0214.665] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0214.666] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknav.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.666] GetLastError () returned 0x5 [0214.666] GetLastError () returned 0x5 [0214.666] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ceb7f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknumpad", cAlternateFileName="OSKNUM~1")) returned 1 [0214.666] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0214.666] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0214.666] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x220828 [0214.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0214.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2232e0 | out: hHeap=0x1f0000) returned 1 [0214.667] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0214.667] lstrcmpW (lpString1="osknumpad", lpString2=".") returned 1 [0214.667] lstrcmpW (lpString1="osknumpad", lpString2="..") returned 1 [0214.667] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a2d8 [0214.667] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknumpad.xml", cAlternateFileName="")) returned 1 [0214.667] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0214.667] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0214.667] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x2232e0 [0214.667] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0214.667] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220828 | out: hHeap=0x1f0000) returned 1 [0214.667] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0214.668] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.668] GetLastError () returned 0x5 [0214.668] GetLastError () returned 0x5 [0214.668] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cef41, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskpred", cAlternateFileName="")) returned 1 [0214.668] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0214.668] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x220828 [0214.668] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0214.668] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2232e0 | out: hHeap=0x1f0000) returned 1 [0214.668] lstrcmpW (lpString1="oskpred", lpString2=".") returned 1 [0214.668] lstrcmpW (lpString1="oskpred", lpString2="..") returned 1 [0214.668] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21ab60 [0214.668] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskpred.xml", cAlternateFileName="")) returned 1 [0214.668] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0214.669] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0214.669] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x2232e0 [0214.669] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0214.669] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220828 | out: hHeap=0x1f0000) returned 1 [0214.669] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0214.669] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.669] GetLastError () returned 0x5 [0214.669] GetLastError () returned 0x5 [0214.669] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cf371, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="symbols", cAlternateFileName="")) returned 1 [0214.670] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0214.670] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x220828 [0214.670] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0214.670] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2232e0 | out: hHeap=0x1f0000) returned 1 [0214.670] lstrcmpW (lpString1="symbols", lpString2=".") returned 1 [0214.670] lstrcmpW (lpString1="symbols", lpString2="..") returned 1 [0214.670] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x138) returned 0x2366d8 [0214.670] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a380 [0214.670] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220b50 | out: hHeap=0x1f0000) returned 1 [0214.670] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x24f, dwReserved0=0x0, dwReserved1=0x0, cFileName="symbols.xml", cAlternateFileName="")) returned 1 [0214.670] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609a0 [0214.670] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0214.670] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x220b50 [0214.670] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0214.670] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220828 | out: hHeap=0x1f0000) returned 1 [0214.670] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0214.671] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.671] GetLastError () returned 0x5 [0214.671] GetLastError () returned 0x5 [0214.671] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x24f, dwReserved0=0x0, dwReserved1=0x0, cFileName="symbols.xml", cAlternateFileName="")) returned 0 [0214.671] FindClose (in: hFindFile=0x24e680 | out: hFindFile=0x24e680) returned 1 [0214.671] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234980 [0214.671] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0214.671] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x261b28 [0214.671] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a230 [0214.671] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\*", lpFindFileData=0x1a1dc30 | out: lpFindFileData=0x1a1dc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0638633, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e6c0 [0214.672] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219d98 [0214.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a230 | out: hHeap=0x1f0000) returned 1 [0214.672] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0214.672] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1dc30 | out: lpFindFileData=0x1a1dc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0638633, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.672] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a230 [0214.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219d98 | out: hHeap=0x1f0000) returned 1 [0214.672] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0214.672] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0214.672] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1dc30 | out: lpFindFileData=0x1a1dc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x59a, dwReserved0=0x0, dwReserved1=0x0, cFileName="auxbase.xml", cAlternateFileName="")) returned 1 [0214.672] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260798 [0214.672] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219d98 [0214.672] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xee) returned 0x2232e0 [0214.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219d98 | out: hHeap=0x1f0000) returned 1 [0214.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a230 | out: hHeap=0x1f0000) returned 1 [0214.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260798 | out: hHeap=0x1f0000) returned 1 [0214.673] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d9f0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.673] GetLastError () returned 0x5 [0214.673] GetLastError () returned 0x5 [0214.673] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1dc30 | out: lpFindFileData=0x1a1dc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x59a, dwReserved0=0x0, dwReserved1=0x0, cFileName="auxbase.xml", cAlternateFileName="")) returned 0 [0214.673] FindClose (in: hFindFile=0x24e6c0 | out: hFindFile=0x24e6c0) returned 1 [0214.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2232e0 | out: hHeap=0x1f0000) returned 1 [0214.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261b28 | out: hHeap=0x1f0000) returned 1 [0214.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0214.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234980 | out: hHeap=0x1f0000) returned 1 [0214.673] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234a58 [0214.673] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0214.673] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262e48 [0214.673] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219d98 [0214.673] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\*", lpFindFileData=0x1a1dc30 | out: lpFindFileData=0x1a1dc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0638c00, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e900 [0214.674] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a230 [0214.674] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219d98 | out: hHeap=0x1f0000) returned 1 [0214.674] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0214.674] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1a1dc30 | out: lpFindFileData=0x1a1dc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0638c00, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.674] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219d98 [0214.674] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a230 | out: hHeap=0x1f0000) returned 1 [0214.674] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0214.674] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0214.674] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1a1dc30 | out: lpFindFileData=0x1a1dc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x387, dwReserved0=0x0, dwReserved1=0x0, cFileName="insertbase.xml", cAlternateFileName="")) returned 1 [0214.674] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260900 [0214.674] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a4d0 [0214.674] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xee) returned 0x2232e0 [0214.674] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a4d0 | out: hHeap=0x1f0000) returned 1 [0214.674] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219d98 | out: hHeap=0x1f0000) returned 1 [0214.674] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260900 | out: hHeap=0x1f0000) returned 1 [0215.055] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\insertbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\insert\\insertbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d9f0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.056] GetLastError () returned 0x5 [0215.056] GetLastError () returned 0x5 [0215.056] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1a1dc30 | out: lpFindFileData=0x1a1dc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x387, dwReserved0=0x0, dwReserved1=0x0, cFileName="insertbase.xml", cAlternateFileName="")) returned 0 [0215.056] FindClose (in: hFindFile=0x24e900 | out: hFindFile=0x24e900) returned 1 [0215.056] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2232e0 | out: hHeap=0x1f0000) returned 1 [0215.056] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262e48 | out: hHeap=0x1f0000) returned 1 [0215.056] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0215.056] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234a58 | out: hHeap=0x1f0000) returned 1 [0215.056] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2348f0 [0215.057] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260658 [0215.057] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x261ff0 [0215.057] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x232da0 [0215.057] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\*", lpFindFileData=0x1a1dc30 | out: lpFindFileData=0x1a1dc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa063932e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e900 [0215.057] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x232f98 [0215.057] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232da0 | out: hHeap=0x1f0000) returned 1 [0215.057] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0215.057] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1a1dc30 | out: lpFindFileData=0x1a1dc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa063932e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.057] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x233238 [0215.057] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232f98 | out: hHeap=0x1f0000) returned 1 [0215.057] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0215.057] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0215.057] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1a1dc30 | out: lpFindFileData=0x1a1dc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x180, dwReserved0=0x0, dwReserved1=0x0, cFileName="ea.xml", cAlternateFileName="")) returned 1 [0215.057] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x232cf8 [0215.057] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233238 | out: hHeap=0x1f0000) returned 1 [0215.058] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d9f0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.058] GetLastError () returned 0x5 [0215.058] GetLastError () returned 0x5 [0215.058] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1a1dc30 | out: lpFindFileData=0x1a1dc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x387, dwReserved0=0x0, dwReserved1=0x0, cFileName="keypadbase.xml", cAlternateFileName="")) returned 1 [0215.058] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0215.058] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x233a18 [0215.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xee) returned 0x2232e0 [0215.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233a18 | out: hHeap=0x1f0000) returned 1 [0215.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232cf8 | out: hHeap=0x1f0000) returned 1 [0215.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0215.059] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d9f0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.059] GetLastError () returned 0x5 [0215.059] GetLastError () returned 0x5 [0215.059] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1a1dc30 | out: lpFindFileData=0x1a1dc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x188, dwReserved0=0x0, dwReserved1=0x0, cFileName="kor-kor.xml", cAlternateFileName="")) returned 1 [0215.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260540 [0215.060] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x2336d0 [0215.060] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xee) returned 0x22b018 [0215.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2336d0 | out: hHeap=0x1f0000) returned 1 [0215.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2232e0 | out: hHeap=0x1f0000) returned 1 [0215.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0215.060] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d9f0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.060] GetLastError () returned 0x5 [0215.060] GetLastError () returned 0x5 [0215.060] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1a1dc30 | out: lpFindFileData=0x1a1dc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x188, dwReserved0=0x0, dwReserved1=0x0, cFileName="kor-kor.xml", cAlternateFileName="")) returned 0 [0215.061] FindClose (in: hFindFile=0x24e900 | out: hFindFile=0x24e900) returned 1 [0215.061] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b018 | out: hHeap=0x1f0000) returned 1 [0215.061] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261ff0 | out: hHeap=0x1f0000) returned 1 [0215.061] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260658 | out: hHeap=0x1f0000) returned 1 [0215.061] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2348f0 | out: hHeap=0x1f0000) returned 1 [0215.061] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234500 [0215.061] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260838 [0215.061] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x261990 [0215.061] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x233ac0 [0215.061] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\*", lpFindFileData=0x1a1dc30 | out: lpFindFileData=0x1a1dc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cd023, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ec40 [0215.061] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0215.061] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x2232e0 [0215.061] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0215.062] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233ac0 | out: hHeap=0x1f0000) returned 1 [0215.062] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0215.062] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1a1dc30 | out: lpFindFileData=0x1a1dc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cd023, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.062] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0215.062] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x22b018 [0215.062] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0215.062] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2232e0 | out: hHeap=0x1f0000) returned 1 [0215.062] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0215.062] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0215.062] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1a1dc30 | out: lpFindFileData=0x1a1dc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd05, dwReserved0=0x0, dwReserved1=0x0, cFileName="base.xml", cAlternateFileName="")) returned 1 [0215.062] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260900 [0215.062] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0215.062] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x2232e0 [0215.062] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0215.062] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b018 | out: hHeap=0x1f0000) returned 1 [0215.063] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260900 | out: hHeap=0x1f0000) returned 1 [0215.063] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d9f0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.063] GetLastError () returned 0x5 [0215.063] GetLastError () returned 0x5 [0215.063] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1a1dc30 | out: lpFindFileData=0x1a1dc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xf7, dwReserved0=0x0, dwReserved1=0x0, cFileName="baseAltGr_rtl.xml", cAlternateFileName="")) returned 1 [0215.063] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0215.063] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0215.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x22b018 [0215.064] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0215.064] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2232e0 | out: hHeap=0x1f0000) returned 1 [0215.064] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0215.064] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\baseAltGr_rtl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\basealtgr_rtl.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d9f0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.064] GetLastError () returned 0x5 [0215.064] GetLastError () returned 0x5 [0215.064] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1a1dc30 | out: lpFindFileData=0x1a1dc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xdc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_altgr.xml", cAlternateFileName="")) returned 1 [0215.065] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0215.065] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0215.065] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x2232e0 [0215.065] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0215.065] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b018 | out: hHeap=0x1f0000) returned 1 [0215.065] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0215.066] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_altgr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_altgr.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d9f0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.066] GetLastError () returned 0x5 [0215.066] GetLastError () returned 0x5 [0215.066] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1a1dc30 | out: lpFindFileData=0x1a1dc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xdc9, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_ca.xml", cAlternateFileName="")) returned 1 [0215.066] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260770 [0215.066] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0215.066] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x22b018 [0215.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0215.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2232e0 | out: hHeap=0x1f0000) returned 1 [0215.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0215.067] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_ca.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_ca.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d9f0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.067] GetLastError () returned 0x5 [0215.067] GetLastError () returned 0x5 [0215.067] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1a1dc30 | out: lpFindFileData=0x1a1dc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_heb.xml", cAlternateFileName="")) returned 1 [0215.067] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0215.067] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0215.068] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x2232e0 [0215.068] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0215.068] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b018 | out: hHeap=0x1f0000) returned 1 [0215.068] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0215.068] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_heb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_heb.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d9f0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.068] GetLastError () returned 0x5 [0215.068] GetLastError () returned 0x5 [0215.068] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1a1dc30 | out: lpFindFileData=0x1a1dc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x324, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_jpn.xml", cAlternateFileName="")) returned 1 [0215.068] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0215.068] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0215.068] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x22b018 [0215.068] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0215.069] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2232e0 | out: hHeap=0x1f0000) returned 1 [0215.069] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0215.069] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_jpn.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_jpn.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d9f0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.069] GetLastError () returned 0x5 [0215.069] GetLastError () returned 0x5 [0215.069] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1a1dc30 | out: lpFindFileData=0x1a1dc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_kor.xml", cAlternateFileName="")) returned 1 [0215.069] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260900 [0215.069] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0215.069] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x2232e0 [0215.069] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0215.069] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b018 | out: hHeap=0x1f0000) returned 1 [0215.070] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260900 | out: hHeap=0x1f0000) returned 1 [0215.070] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_kor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_kor.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d9f0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.070] GetLastError () returned 0x5 [0215.070] GetLastError () returned 0x5 [0215.070] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1a1dc30 | out: lpFindFileData=0x1a1dc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x269, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_rtl.xml", cAlternateFileName="")) returned 1 [0215.070] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0215.070] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0215.070] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x22b018 [0215.070] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0215.070] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2232e0 | out: hHeap=0x1f0000) returned 1 [0215.070] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0215.071] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_rtl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_rtl.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d9f0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.071] GetLastError () returned 0x5 [0215.071] GetLastError () returned 0x5 [0215.071] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1a1dc30 | out: lpFindFileData=0x1a1dc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x40e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp.xml", cAlternateFileName="")) returned 1 [0215.071] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260888 [0215.071] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0215.071] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x2232e0 [0215.071] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0215.071] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b018 | out: hHeap=0x1f0000) returned 1 [0215.071] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0215.072] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\ja-jp.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\ja-jp.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d9f0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.072] GetLastError () returned 0x5 [0215.072] GetLastError () returned 0x5 [0215.072] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1a1dc30 | out: lpFindFileData=0x1a1dc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3af9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-kr.xml", cAlternateFileName="")) returned 1 [0215.072] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0215.072] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0215.072] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x22b018 [0215.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0215.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2232e0 | out: hHeap=0x1f0000) returned 1 [0215.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0215.073] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\ko-kr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\ko-kr.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d9f0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.073] GetLastError () returned 0x5 [0215.073] GetLastError () returned 0x5 [0215.073] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1a1dc30 | out: lpFindFileData=0x1a1dc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x264b, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-changjei.xml", cAlternateFileName="")) returned 1 [0215.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0215.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0215.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x2232e0 [0215.073] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0215.073] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b018 | out: hHeap=0x1f0000) returned 1 [0215.073] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0215.073] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-changjei.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-changjei.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d9f0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.074] GetLastError () returned 0x5 [0215.074] GetLastError () returned 0x5 [0215.074] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1a1dc30 | out: lpFindFileData=0x1a1dc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3fbc74, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2b3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-dayi.xml", cAlternateFileName="")) returned 1 [0215.074] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0215.074] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0215.074] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x22b018 [0215.074] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0215.074] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2232e0 | out: hHeap=0x1f0000) returned 1 [0215.074] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0215.075] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-dayi.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-dayi.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d9f0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.075] GetLastError () returned 0x5 [0215.075] GetLastError () returned 0x5 [0215.075] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1a1dc30 | out: lpFindFileData=0x1a1dc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2ac3, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-phonetic.xml", cAlternateFileName="")) returned 1 [0215.075] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605e0 [0215.075] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0215.075] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x2232e0 [0215.075] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0215.075] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b018 | out: hHeap=0x1f0000) returned 1 [0215.075] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605e0 | out: hHeap=0x1f0000) returned 1 [0215.076] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d9f0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.076] GetLastError () returned 0x5 [0215.076] GetLastError () returned 0x5 [0215.076] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1a1dc30 | out: lpFindFileData=0x1a1dc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2ac3, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-phonetic.xml", cAlternateFileName="")) returned 0 [0215.076] FindClose (in: hFindFile=0x24ec40 | out: hFindFile=0x24ec40) returned 1 [0215.077] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2232e0 | out: hHeap=0x1f0000) returned 1 [0215.077] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261990 | out: hHeap=0x1f0000) returned 1 [0215.077] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260838 | out: hHeap=0x1f0000) returned 1 [0215.077] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234500 | out: hHeap=0x1f0000) returned 1 [0215.077] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234740 [0215.077] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0215.077] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2624b8 [0215.077] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x232c50 [0215.078] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\*", lpFindFileData=0x1a1dc30 | out: lpFindFileData=0x1a1dc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cdb88, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ec40 [0215.078] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x2336d0 [0215.078] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232c50 | out: hHeap=0x1f0000) returned 1 [0215.078] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0215.078] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1a1dc30 | out: lpFindFileData=0x1a1dc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cdb88, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.078] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x232da0 [0215.078] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2336d0 | out: hHeap=0x1f0000) returned 1 [0215.078] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0215.078] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0215.078] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1a1dc30 | out: lpFindFileData=0x1a1dc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskclearuibase.xml", cAlternateFileName="")) returned 1 [0215.078] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2f0 [0215.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x233778 [0215.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xee) returned 0x2232e0 [0215.079] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233778 | out: hHeap=0x1f0000) returned 1 [0215.079] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232da0 | out: hHeap=0x1f0000) returned 1 [0215.079] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0215.080] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\oskclearuibase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\oskclearuibase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d9f0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.080] GetLastError () returned 0x5 [0215.080] GetLastError () returned 0x5 [0215.080] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1a1dc30 | out: lpFindFileData=0x1a1dc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskclearuibase.xml", cAlternateFileName="")) returned 0 [0215.080] FindClose (in: hFindFile=0x24ec40 | out: hFindFile=0x24ec40) returned 1 [0215.085] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2232e0 | out: hHeap=0x1f0000) returned 1 [0215.085] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2624b8 | out: hHeap=0x1f0000) returned 1 [0215.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0215.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234740 | out: hHeap=0x1f0000) returned 1 [0215.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2348f0 [0215.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260770 [0215.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262b18 [0215.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x232cf8 [0215.086] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\*", lpFindFileData=0x1a1dc30 | out: lpFindFileData=0x1a1dc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ce328, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ec40 [0215.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x2334d8 [0215.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232cf8 | out: hHeap=0x1f0000) returned 1 [0215.087] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0215.087] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1a1dc30 | out: lpFindFileData=0x1a1dc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ce328, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.087] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x233820 [0215.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2334d8 | out: hHeap=0x1f0000) returned 1 [0215.087] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0215.087] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0215.087] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1a1dc30 | out: lpFindFileData=0x1a1dc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskmenubase.xml", cAlternateFileName="")) returned 1 [0215.087] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2607c0 [0215.088] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x233580 [0215.088] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xee) returned 0x2232e0 [0215.088] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233580 | out: hHeap=0x1f0000) returned 1 [0215.088] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233820 | out: hHeap=0x1f0000) returned 1 [0215.088] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607c0 | out: hHeap=0x1f0000) returned 1 [0215.089] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d9f0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.089] GetLastError () returned 0x5 [0215.089] GetLastError () returned 0x5 [0215.089] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1a1dc30 | out: lpFindFileData=0x1a1dc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskmenubase.xml", cAlternateFileName="")) returned 0 [0215.089] FindClose (in: hFindFile=0x24ec40 | out: hFindFile=0x24ec40) returned 1 [0215.089] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2232e0 | out: hHeap=0x1f0000) returned 1 [0215.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262b18 | out: hHeap=0x1f0000) returned 1 [0215.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0215.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2348f0 | out: hHeap=0x1f0000) returned 1 [0215.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234a58 [0215.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0215.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262fe0 [0215.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x233238 [0215.090] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav\\*", lpFindFileData=0x1a1dc30 | out: lpFindFileData=0x1a1dc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ce7a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ea00 [0215.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x233778 [0215.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233238 | out: hHeap=0x1f0000) returned 1 [0215.090] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0215.091] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1a1dc30 | out: lpFindFileData=0x1a1dc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ce7a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.091] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x2330e8 [0215.091] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233778 | out: hHeap=0x1f0000) returned 1 [0215.091] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0215.091] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0215.091] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1a1dc30 | out: lpFindFileData=0x1a1dc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x42d, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknavbase.xml", cAlternateFileName="")) returned 1 [0215.091] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604c8 [0215.091] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x2334d8 [0215.091] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xee) returned 0x2232e0 [0215.091] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2334d8 | out: hHeap=0x1f0000) returned 1 [0215.091] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2330e8 | out: hHeap=0x1f0000) returned 1 [0215.091] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604c8 | out: hHeap=0x1f0000) returned 1 [0215.092] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav\\osknavbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknav\\osknavbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d9f0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.092] GetLastError () returned 0x5 [0215.092] GetLastError () returned 0x5 [0215.092] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1a1dc30 | out: lpFindFileData=0x1a1dc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x42d, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknavbase.xml", cAlternateFileName="")) returned 0 [0215.092] FindClose (in: hFindFile=0x24ea00 | out: hFindFile=0x24ea00) returned 1 [0215.092] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2232e0 | out: hHeap=0x1f0000) returned 1 [0215.092] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262fe0 | out: hHeap=0x1f0000) returned 1 [0215.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0215.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234a58 | out: hHeap=0x1f0000) returned 1 [0215.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234788 [0215.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260770 [0215.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x261990 [0215.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x233580 [0215.093] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\*", lpFindFileData=0x1a1dc30 | out: lpFindFileData=0x1a1dc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ceb7f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ea80 [0215.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x233ac0 [0215.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233580 | out: hHeap=0x1f0000) returned 1 [0215.093] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0215.093] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1dc30 | out: lpFindFileData=0x1a1dc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ceb7f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x232c50 [0215.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233ac0 | out: hHeap=0x1f0000) returned 1 [0215.093] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0215.093] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0215.094] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1dc30 | out: lpFindFileData=0x1a1dc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x73d, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknumpadbase.xml", cAlternateFileName="")) returned 1 [0215.094] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2f0 [0215.094] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x2332e0 [0215.094] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xee) returned 0x2232e0 [0215.094] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2332e0 | out: hHeap=0x1f0000) returned 1 [0215.094] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232c50 | out: hHeap=0x1f0000) returned 1 [0215.094] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0215.094] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d9f0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.094] GetLastError () returned 0x5 [0215.094] GetLastError () returned 0x5 [0215.095] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1dc30 | out: lpFindFileData=0x1a1dc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x73d, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknumpadbase.xml", cAlternateFileName="")) returned 0 [0215.095] FindClose (in: hFindFile=0x24ea80 | out: hFindFile=0x24ea80) returned 1 [0215.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2232e0 | out: hHeap=0x1f0000) returned 1 [0215.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261990 | out: hHeap=0x1f0000) returned 1 [0215.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0215.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234788 | out: hHeap=0x1f0000) returned 1 [0215.095] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234a58 [0215.095] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260900 [0215.095] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x261990 [0215.095] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x2336d0 [0215.095] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\*", lpFindFileData=0x1a1dc30 | out: lpFindFileData=0x1a1dc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cef41, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ea00 [0215.096] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x233040 [0215.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2336d0 | out: hHeap=0x1f0000) returned 1 [0215.096] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0215.096] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1a1dc30 | out: lpFindFileData=0x1a1dc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cef41, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.096] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x2338c8 [0215.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233040 | out: hHeap=0x1f0000) returned 1 [0215.096] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0215.096] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0215.096] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1a1dc30 | out: lpFindFileData=0x1a1dc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x39c, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskpredbase.xml", cAlternateFileName="")) returned 1 [0215.096] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260658 [0215.096] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x233a18 [0215.096] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xee) returned 0x2232e0 [0215.488] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233a18 | out: hHeap=0x1f0000) returned 1 [0215.488] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2338c8 | out: hHeap=0x1f0000) returned 1 [0215.488] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260658 | out: hHeap=0x1f0000) returned 1 [0215.488] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d9f0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.488] GetLastError () returned 0x5 [0215.488] GetLastError () returned 0x5 [0215.488] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1a1dc30 | out: lpFindFileData=0x1a1dc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x39c, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskpredbase.xml", cAlternateFileName="")) returned 0 [0215.488] FindClose (in: hFindFile=0x24ea00 | out: hFindFile=0x24ea00) returned 1 [0215.489] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2232e0 | out: hHeap=0x1f0000) returned 1 [0215.489] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261990 | out: hHeap=0x1f0000) returned 1 [0215.489] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260900 | out: hHeap=0x1f0000) returned 1 [0215.489] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234a58 | out: hHeap=0x1f0000) returned 1 [0215.489] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2344b8 [0215.489] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0215.489] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262fe0 [0215.489] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a188 [0215.489] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\*", lpFindFileData=0x1a1dc30 | out: lpFindFileData=0x1a1dc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cf371, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e8c0 [0215.489] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a968 [0215.489] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a188 | out: hHeap=0x1f0000) returned 1 [0215.489] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0215.489] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1a1dc30 | out: lpFindFileData=0x1a1dc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cf371, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.489] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a188 [0215.490] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a968 | out: hHeap=0x1f0000) returned 1 [0215.490] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0215.490] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0215.490] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1a1dc30 | out: lpFindFileData=0x1a1dc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3fbc74, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ea-sym.xml", cAlternateFileName="")) returned 1 [0215.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238488 [0215.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219d98 [0215.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xee) returned 0x220a58 [0215.490] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219d98 | out: hHeap=0x1f0000) returned 1 [0215.490] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a188 | out: hHeap=0x1f0000) returned 1 [0215.490] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238488 | out: hHeap=0x1f0000) returned 1 [0215.490] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d9f0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.491] GetLastError () returned 0x5 [0215.491] GetLastError () returned 0x5 [0215.491] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1a1dc30 | out: lpFindFileData=0x1a1dc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x325, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp-sym.xml", cAlternateFileName="")) returned 1 [0215.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0215.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219e40 [0215.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xee) returned 0x217038 [0215.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219e40 | out: hHeap=0x1f0000) returned 1 [0215.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220a58 | out: hHeap=0x1f0000) returned 1 [0215.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0215.491] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d9f0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.492] GetLastError () returned 0x5 [0215.492] GetLastError () returned 0x5 [0215.492] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1a1dc30 | out: lpFindFileData=0x1a1dc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xeef, dwReserved0=0x0, dwReserved1=0x0, cFileName="symbase.xml", cAlternateFileName="")) returned 1 [0215.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0215.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219c48 [0215.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xee) returned 0x220a58 [0215.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219c48 | out: hHeap=0x1f0000) returned 1 [0215.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0215.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0215.492] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d9f0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.493] GetLastError () returned 0x5 [0215.493] GetLastError () returned 0x5 [0215.493] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1a1dc30 | out: lpFindFileData=0x1a1dc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xeef, dwReserved0=0x0, dwReserved1=0x0, cFileName="symbase.xml", cAlternateFileName="")) returned 0 [0215.493] FindClose (in: hFindFile=0x24e8c0 | out: hFindFile=0x24e8c0) returned 1 [0215.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220a58 | out: hHeap=0x1f0000) returned 1 [0215.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262fe0 | out: hHeap=0x1f0000) returned 1 [0215.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0215.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2344b8 | out: hHeap=0x1f0000) returned 1 [0215.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220b50 | out: hHeap=0x1f0000) returned 1 [0215.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a578 | out: hHeap=0x1f0000) returned 1 [0215.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21aab8 | out: hHeap=0x1f0000) returned 1 [0215.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a620 | out: hHeap=0x1f0000) returned 1 [0215.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0215.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219cf0 | out: hHeap=0x1f0000) returned 1 [0215.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a8c0 | out: hHeap=0x1f0000) returned 1 [0215.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a770 | out: hHeap=0x1f0000) returned 1 [0215.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a2d8 | out: hHeap=0x1f0000) returned 1 [0215.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ab60 | out: hHeap=0x1f0000) returned 1 [0215.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a380 | out: hHeap=0x1f0000) returned 1 [0215.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0215.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226ec0 | out: hHeap=0x1f0000) returned 1 [0215.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0215.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234aa0 | out: hHeap=0x1f0000) returned 1 [0215.494] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234548 [0215.494] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238488 [0215.494] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262fe0 [0215.494] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286d58 [0215.495] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\he-IL\\*", lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cf9a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ed40 [0215.495] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2864d8 [0215.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286d58 | out: hHeap=0x1f0000) returned 1 [0215.495] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0215.495] FindNextFileW (in: hFindFile=0x24ed40, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cf9a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.495] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286670 [0215.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2864d8 | out: hHeap=0x1f0000) returned 1 [0215.495] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0215.495] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0215.495] FindNextFileW (in: hFindFile=0x24ed40, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c3a52f7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3c3a52f7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3c3a52f7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0215.496] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0215.496] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286c48 [0215.496] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0215.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286c48 | out: hHeap=0x1f0000) returned 1 [0215.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286670 | out: hHeap=0x1f0000) returned 1 [0215.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0215.496] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\he-IL\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\he-il\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.496] GetLastError () returned 0x5 [0215.497] GetLastError () returned 0x5 [0215.497] FindNextFileW (in: hFindFile=0x24ed40, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c3a52f7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3c3a52f7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3c3a52f7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0215.497] FindClose (in: hFindFile=0x24ed40 | out: hFindFile=0x24ed40) returned 1 [0215.497] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0215.497] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262fe0 | out: hHeap=0x1f0000) returned 1 [0215.497] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238488 | out: hHeap=0x1f0000) returned 1 [0215.497] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234548 | out: hHeap=0x1f0000) returned 1 [0215.497] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234980 [0215.497] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0215.497] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x261e58 [0215.497] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286890 [0215.497] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\hr-HR\\*", lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cfce2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e680 [0215.498] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286d58 [0215.498] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286890 | out: hHeap=0x1f0000) returned 1 [0215.498] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0215.498] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cfce2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.498] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2861a8 [0215.498] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286d58 | out: hHeap=0x1f0000) returned 1 [0215.498] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0215.498] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0215.498] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c3a52f7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3c3a52f7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3c3a52f7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0215.498] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238438 [0215.498] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2863c8 [0215.498] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0215.499] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2863c8 | out: hHeap=0x1f0000) returned 1 [0215.499] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2861a8 | out: hHeap=0x1f0000) returned 1 [0215.499] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238438 | out: hHeap=0x1f0000) returned 1 [0215.499] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\hr-HR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hr-hr\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.499] GetLastError () returned 0x5 [0215.499] GetLastError () returned 0x5 [0215.499] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c3a52f7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3c3a52f7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3c3a52f7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0215.499] FindClose (in: hFindFile=0x24e680 | out: hFindFile=0x24e680) returned 1 [0215.500] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0215.500] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261e58 | out: hHeap=0x1f0000) returned 1 [0215.500] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0215.500] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234980 | out: hHeap=0x1f0000) returned 1 [0215.500] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234548 [0215.500] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0215.500] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x261cc0 [0215.500] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286d58 [0215.500] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\hu-HU\\*", lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06d0656, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24eac0 [0215.500] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286c48 [0215.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286d58 | out: hHeap=0x1f0000) returned 1 [0215.501] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0215.501] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06d0656, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.501] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286d58 [0215.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286c48 | out: hHeap=0x1f0000) returned 1 [0215.501] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0215.501] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0215.501] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c3a52f7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3c3a52f7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3c3a52f7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0215.501] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0215.501] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2863c8 [0215.501] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0215.502] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2863c8 | out: hHeap=0x1f0000) returned 1 [0215.502] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286d58 | out: hHeap=0x1f0000) returned 1 [0215.502] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0215.502] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\hu-HU\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hu-hu\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.502] GetLastError () returned 0x5 [0215.503] GetLastError () returned 0x5 [0215.503] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c3a52f7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3c3a52f7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3c3a52f7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0215.503] FindClose (in: hFindFile=0x24eac0 | out: hFindFile=0x24eac0) returned 1 [0215.503] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0215.503] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261cc0 | out: hHeap=0x1f0000) returned 1 [0215.503] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0215.503] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234548 | out: hHeap=0x1f0000) returned 1 [0215.503] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346b0 [0215.503] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0215.503] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262cb0 [0215.503] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0215.503] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\HWRCustomization\\*", lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6eba2ec1, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0xa07693a9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6eba2ec1, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ea80 [0215.504] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0215.504] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0215.504] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0215.504] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6eba2ec1, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0xa07693a9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6eba2ec1, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.504] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0215.504] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0215.504] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0215.504] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0215.504] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6eba2ec1, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0xa07693a9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6eba2ec1, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0215.504] FindClose (in: hFindFile=0x24ea80 | out: hFindFile=0x24ea80) returned 1 [0215.504] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0215.504] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262cb0 | out: hHeap=0x1f0000) returned 1 [0215.504] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0215.504] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346b0 | out: hHeap=0x1f0000) returned 1 [0215.504] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234788 [0215.504] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238438 [0215.505] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262cb0 [0215.505] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2861a8 [0215.505] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\it-IT\\*", lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0769b1e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ec40 [0215.505] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2863c8 [0215.505] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2861a8 | out: hHeap=0x1f0000) returned 1 [0215.505] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0215.505] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0769b1e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.505] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286450 [0215.505] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2863c8 | out: hHeap=0x1f0000) returned 1 [0215.505] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0215.505] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0215.505] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e9592f9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e9592f9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e9592f9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0215.505] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0215.505] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2864d8 [0215.505] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0215.505] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2864d8 | out: hHeap=0x1f0000) returned 1 [0215.505] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286450 | out: hHeap=0x1f0000) returned 1 [0215.506] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0215.506] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\it-IT\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\it-it\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.506] GetLastError () returned 0x5 [0215.506] GetLastError () returned 0x5 [0215.506] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e9592f9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e9592f9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e9592f9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0215.506] FindClose (in: hFindFile=0x24ec40 | out: hFindFile=0x24ec40) returned 1 [0215.506] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0215.506] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262cb0 | out: hHeap=0x1f0000) returned 1 [0215.507] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238438 | out: hHeap=0x1f0000) returned 1 [0215.507] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234788 | out: hHeap=0x1f0000) returned 1 [0215.507] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346b0 [0215.507] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0215.507] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262650 [0215.507] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286d58 [0215.507] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ja-JP\\*", lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076a026, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ed00 [0215.507] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286890 [0215.507] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286d58 | out: hHeap=0x1f0000) returned 1 [0215.507] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0215.507] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076a026, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.508] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286c48 [0215.508] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286890 | out: hHeap=0x1f0000) returned 1 [0215.508] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0215.508] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0215.508] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e9592f9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e9592f9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e9592f9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0215.508] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238438 [0215.508] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2861a8 [0215.508] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0215.508] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2861a8 | out: hHeap=0x1f0000) returned 1 [0215.508] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286c48 | out: hHeap=0x1f0000) returned 1 [0215.508] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238438 | out: hHeap=0x1f0000) returned 1 [0215.508] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ja-JP\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ja-jp\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.509] GetLastError () returned 0x5 [0215.509] GetLastError () returned 0x5 [0215.509] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e9592f9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e9592f9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e9592f9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0215.509] FindClose (in: hFindFile=0x24ed00 | out: hFindFile=0x24ed00) returned 1 [0215.509] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0215.509] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262650 | out: hHeap=0x1f0000) returned 1 [0215.509] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0215.509] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346b0 | out: hHeap=0x1f0000) returned 1 [0215.509] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346b0 [0215.509] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0215.510] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262650 [0215.510] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2863c8 [0215.510] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ko-KR\\*", lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076a7a6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e680 [0215.510] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286d58 [0215.510] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2863c8 | out: hHeap=0x1f0000) returned 1 [0215.510] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0215.510] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076a7a6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.510] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286670 [0215.510] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286d58 | out: hHeap=0x1f0000) returned 1 [0215.510] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0215.511] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0215.511] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0215.511] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0215.511] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2863c8 [0215.511] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0215.511] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2863c8 | out: hHeap=0x1f0000) returned 1 [0215.511] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286670 | out: hHeap=0x1f0000) returned 1 [0215.511] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0215.512] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ko-KR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ko-kr\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.512] GetLastError () returned 0x5 [0215.512] GetLastError () returned 0x5 [0215.512] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0215.512] FindClose (in: hFindFile=0x24e680 | out: hFindFile=0x24e680) returned 1 [0215.513] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0215.513] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262650 | out: hHeap=0x1f0000) returned 1 [0215.513] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0215.513] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346b0 | out: hHeap=0x1f0000) returned 1 [0215.513] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234aa0 [0215.513] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0215.513] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262650 [0215.513] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0215.513] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\LanguageModel\\*", lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076afd8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e7c0 [0215.514] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0215.514] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0215.514] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0215.514] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076afd8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.514] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0215.514] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0215.514] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0215.514] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0215.515] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3fbc74, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="chstic.dgml", cAlternateFileName="")) returned 1 [0215.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0215.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0215.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x220748 [0215.515] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0215.515] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0215.515] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0215.516] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\LanguageModel\\chstic.dgml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\languagemodel\\chstic.dgml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.516] GetLastError () returned 0x5 [0215.516] GetLastError () returned 0x5 [0215.516] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3fbc74, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="chstic.dgml", cAlternateFileName="")) returned 0 [0215.516] FindClose (in: hFindFile=0x24e7c0 | out: hFindFile=0x24e7c0) returned 1 [0215.516] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220748 | out: hHeap=0x1f0000) returned 1 [0215.516] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262650 | out: hHeap=0x1f0000) returned 1 [0215.517] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0215.517] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234aa0 | out: hHeap=0x1f0000) returned 1 [0215.517] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234980 [0215.517] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0215.517] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2617f8 [0215.517] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2863c8 [0215.517] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\lt-LT\\*", lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076b52b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24eb40 [0215.517] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286c48 [0215.517] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2863c8 | out: hHeap=0x1f0000) returned 1 [0215.517] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0215.517] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076b52b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.517] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286670 [0215.518] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286c48 | out: hHeap=0x1f0000) returned 1 [0215.518] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0215.518] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0215.518] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0215.518] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0215.518] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2865e8 [0215.518] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0215.518] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2865e8 | out: hHeap=0x1f0000) returned 1 [0215.518] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286670 | out: hHeap=0x1f0000) returned 1 [0215.518] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0215.519] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\lt-LT\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lt-lt\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.519] GetLastError () returned 0x5 [0215.519] GetLastError () returned 0x5 [0215.519] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0215.519] FindClose (in: hFindFile=0x24eb40 | out: hFindFile=0x24eb40) returned 1 [0215.519] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0215.519] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2617f8 | out: hHeap=0x1f0000) returned 1 [0215.519] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0215.519] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234980 | out: hHeap=0x1f0000) returned 1 [0215.519] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234a10 [0215.519] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0215.520] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262650 [0215.520] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2861a8 [0215.520] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\lv-LV\\*", lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076ba6e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e7c0 [0215.520] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2863c8 [0215.520] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2861a8 | out: hHeap=0x1f0000) returned 1 [0215.520] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0215.520] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076ba6e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.520] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286450 [0215.520] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2863c8 | out: hHeap=0x1f0000) returned 1 [0215.520] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0215.520] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0215.520] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0215.520] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0215.520] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2861a8 [0215.520] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0215.520] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2861a8 | out: hHeap=0x1f0000) returned 1 [0215.520] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286450 | out: hHeap=0x1f0000) returned 1 [0215.520] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0215.521] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\lv-LV\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lv-lv\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.521] GetLastError () returned 0x5 [0215.521] GetLastError () returned 0x5 [0215.521] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0215.521] FindClose (in: hFindFile=0x24e7c0 | out: hFindFile=0x24e7c0) returned 1 [0215.521] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0215.521] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262650 | out: hHeap=0x1f0000) returned 1 [0215.521] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0215.521] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234a10 | out: hHeap=0x1f0000) returned 1 [0215.521] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346b0 [0215.522] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0215.522] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x263178 [0215.522] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2863c8 [0215.522] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\nb-NO\\*", lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076bff5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24eb40 [0215.522] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2861a8 [0215.522] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2863c8 | out: hHeap=0x1f0000) returned 1 [0215.522] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0215.522] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076bff5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.522] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286d58 [0215.522] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2861a8 | out: hHeap=0x1f0000) returned 1 [0215.522] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0215.522] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0215.522] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e90ce26, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e90ce26, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e90ce26, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0215.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0215.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2861a8 [0215.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0215.523] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2861a8 | out: hHeap=0x1f0000) returned 1 [0215.523] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286d58 | out: hHeap=0x1f0000) returned 1 [0215.523] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0215.523] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\nb-NO\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nb-no\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.523] GetLastError () returned 0x5 [0215.523] GetLastError () returned 0x5 [0215.524] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e90ce26, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e90ce26, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e90ce26, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0215.524] FindClose (in: hFindFile=0x24eb40 | out: hFindFile=0x24eb40) returned 1 [0215.524] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0215.524] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263178 | out: hHeap=0x1f0000) returned 1 [0215.524] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0215.524] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346b0 | out: hHeap=0x1f0000) returned 1 [0215.524] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346b0 [0215.524] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0215.524] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x261990 [0215.524] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286d58 [0215.524] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\nl-NL\\*", lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076c75d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e8c0 [0215.524] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286c48 [0215.525] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286d58 | out: hHeap=0x1f0000) returned 1 [0215.525] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0215.525] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076c75d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.525] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286450 [0215.525] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286c48 | out: hHeap=0x1f0000) returned 1 [0215.525] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0215.525] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0215.525] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0215.525] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0215.525] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2863c8 [0215.525] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0215.525] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2863c8 | out: hHeap=0x1f0000) returned 1 [0215.525] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286450 | out: hHeap=0x1f0000) returned 1 [0215.526] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0215.526] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\nl-NL\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nl-nl\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.526] GetLastError () returned 0x5 [0215.526] GetLastError () returned 0x5 [0215.526] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0215.526] FindClose (in: hFindFile=0x24e8c0 | out: hFindFile=0x24e8c0) returned 1 [0215.527] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0215.527] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261990 | out: hHeap=0x1f0000) returned 1 [0215.527] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0215.527] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346b0 | out: hHeap=0x1f0000) returned 1 [0215.527] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2349c8 [0215.527] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0215.527] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x261cc0 [0215.527] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286c48 [0215.527] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\pl-PL\\*", lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d57c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24eac0 [0215.527] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286d58 [0215.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286c48 | out: hHeap=0x1f0000) returned 1 [0215.528] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0215.528] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d57c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.528] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2861a8 [0215.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286d58 | out: hHeap=0x1f0000) returned 1 [0215.528] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0215.528] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0215.528] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e8e6bbf, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e8e6bbf, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e8e6bbf, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0215.528] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0215.528] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286c48 [0215.528] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0215.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286c48 | out: hHeap=0x1f0000) returned 1 [0215.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2861a8 | out: hHeap=0x1f0000) returned 1 [0215.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0215.529] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\pl-PL\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pl-pl\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.529] GetLastError () returned 0x5 [0215.529] GetLastError () returned 0x5 [0215.529] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e8e6bbf, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e8e6bbf, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e8e6bbf, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0215.529] FindClose (in: hFindFile=0x24eac0 | out: hFindFile=0x24eac0) returned 1 [0215.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0215.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261cc0 | out: hHeap=0x1f0000) returned 1 [0215.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0215.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2349c8 | out: hHeap=0x1f0000) returned 1 [0215.530] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234a58 [0215.530] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0215.530] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x263178 [0215.530] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2863c8 [0215.530] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\pt-BR\\*", lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d988, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ec80 [0215.530] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286450 [0215.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2863c8 | out: hHeap=0x1f0000) returned 1 [0215.531] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0215.531] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d988, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2863c8 [0215.531] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286450 | out: hHeap=0x1f0000) returned 1 [0215.531] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0215.531] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0215.531] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e8e6bbf, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e8e6bbf, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e8e6bbf, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0215.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238488 [0215.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286c48 [0215.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0215.531] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286c48 | out: hHeap=0x1f0000) returned 1 [0215.531] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2863c8 | out: hHeap=0x1f0000) returned 1 [0215.532] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238488 | out: hHeap=0x1f0000) returned 1 [0215.532] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\pt-BR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-br\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.532] GetLastError () returned 0x5 [0215.532] GetLastError () returned 0x5 [0215.532] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e8e6bbf, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e8e6bbf, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e8e6bbf, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0215.532] FindClose (in: hFindFile=0x24ec80 | out: hFindFile=0x24ec80) returned 1 [0215.532] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0215.532] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263178 | out: hHeap=0x1f0000) returned 1 [0215.532] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0215.532] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234a58 | out: hHeap=0x1f0000) returned 1 [0215.532] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346b0 [0215.532] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0215.533] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x261cc0 [0215.533] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286670 [0215.533] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\pt-PT\\*", lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ddb8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e8c0 [0215.533] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2861a8 [0215.533] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286670 | out: hHeap=0x1f0000) returned 1 [0215.533] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0215.533] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ddb8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.533] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2863c8 [0215.533] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2861a8 | out: hHeap=0x1f0000) returned 1 [0215.533] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0215.533] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0215.533] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e8e6bbf, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e8e6bbf, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e8e6bbf, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0215.533] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0215.533] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286c48 [0215.533] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0215.533] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286c48 | out: hHeap=0x1f0000) returned 1 [0215.533] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2863c8 | out: hHeap=0x1f0000) returned 1 [0215.533] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0215.534] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\pt-PT\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-pt\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.849] GetLastError () returned 0x5 [0215.849] GetLastError () returned 0x5 [0215.850] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e8e6bbf, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e8e6bbf, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e8e6bbf, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0215.850] FindClose (in: hFindFile=0x24e8c0 | out: hFindFile=0x24e8c0) returned 1 [0215.850] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0215.850] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261cc0 | out: hHeap=0x1f0000) returned 1 [0215.850] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0215.850] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346b0 | out: hHeap=0x1f0000) returned 1 [0215.850] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234980 [0215.850] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0215.850] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262e48 [0215.850] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286d58 [0215.850] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ro-RO\\*", lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e0f5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e7c0 [0215.851] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286450 [0215.851] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286d58 | out: hHeap=0x1f0000) returned 1 [0215.851] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0215.851] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e0f5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.851] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286890 [0215.851] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286450 | out: hHeap=0x1f0000) returned 1 [0215.851] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0215.851] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0215.851] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0215.851] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0215.851] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286d58 [0215.851] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0215.851] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286d58 | out: hHeap=0x1f0000) returned 1 [0215.851] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286890 | out: hHeap=0x1f0000) returned 1 [0215.851] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0215.851] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ro-RO\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ro-ro\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.852] GetLastError () returned 0x5 [0215.852] GetLastError () returned 0x5 [0215.852] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0215.852] FindClose (in: hFindFile=0x24e7c0 | out: hFindFile=0x24e7c0) returned 1 [0215.852] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0215.852] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262e48 | out: hHeap=0x1f0000) returned 1 [0215.852] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0215.852] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234980 | out: hHeap=0x1f0000) returned 1 [0215.852] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2349c8 [0215.852] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0215.852] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262e48 [0215.852] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2866f8 [0215.852] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ru-RU\\*", lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e4d1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ea80 [0215.852] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286d58 [0215.853] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2866f8 | out: hHeap=0x1f0000) returned 1 [0215.853] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0215.853] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e4d1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.853] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2865e8 [0215.853] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286d58 | out: hHeap=0x1f0000) returned 1 [0215.853] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0215.853] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0215.853] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0215.853] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0215.853] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286d58 [0215.853] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0215.853] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286d58 | out: hHeap=0x1f0000) returned 1 [0215.853] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2865e8 | out: hHeap=0x1f0000) returned 1 [0215.853] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0215.853] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ru-RU\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ru-ru\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.853] GetLastError () returned 0x5 [0215.854] GetLastError () returned 0x5 [0215.854] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0215.854] FindClose (in: hFindFile=0x24ea80 | out: hFindFile=0x24ea80) returned 1 [0215.854] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0215.854] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262e48 | out: hHeap=0x1f0000) returned 1 [0215.854] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0215.854] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2349c8 | out: hHeap=0x1f0000) returned 1 [0215.854] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2348f0 [0215.854] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0215.854] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262e48 [0215.854] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286450 [0215.854] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\sk-SK\\*", lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e8a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ec40 [0215.855] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2864d8 [0215.855] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286450 | out: hHeap=0x1f0000) returned 1 [0215.855] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0215.855] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e8a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.855] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286d58 [0215.855] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2864d8 | out: hHeap=0x1f0000) returned 1 [0215.855] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0215.855] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0215.855] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e38953f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e38953f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e38953f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0215.855] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0215.855] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2866f8 [0215.855] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0215.855] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2866f8 | out: hHeap=0x1f0000) returned 1 [0215.855] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286d58 | out: hHeap=0x1f0000) returned 1 [0215.855] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0215.855] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\sk-SK\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sk-sk\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.856] GetLastError () returned 0x5 [0215.856] GetLastError () returned 0x5 [0215.856] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e38953f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e38953f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e38953f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0215.856] FindClose (in: hFindFile=0x24ec40 | out: hFindFile=0x24ec40) returned 1 [0215.856] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0215.856] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262e48 | out: hHeap=0x1f0000) returned 1 [0215.856] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0215.856] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2348f0 | out: hHeap=0x1f0000) returned 1 [0215.856] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234980 [0215.856] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0215.856] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262e48 [0215.856] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2865e8 [0215.856] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\sl-SI\\*", lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ec25, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ec40 [0215.857] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286450 [0215.857] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2865e8 | out: hHeap=0x1f0000) returned 1 [0215.857] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0215.857] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ec25, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.857] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286890 [0215.857] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286450 | out: hHeap=0x1f0000) returned 1 [0215.857] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0215.857] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0215.857] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0215.857] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0215.857] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2865e8 [0215.857] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0215.857] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2865e8 | out: hHeap=0x1f0000) returned 1 [0215.857] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286890 | out: hHeap=0x1f0000) returned 1 [0215.857] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0215.857] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\sl-SI\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sl-si\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.858] GetLastError () returned 0x5 [0215.858] GetLastError () returned 0x5 [0215.858] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0215.858] FindClose (in: hFindFile=0x24ec40 | out: hFindFile=0x24ec40) returned 1 [0215.858] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0215.858] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262e48 | out: hHeap=0x1f0000) returned 1 [0215.858] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0215.858] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234980 | out: hHeap=0x1f0000) returned 1 [0215.858] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2348f0 [0215.858] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0215.858] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x263178 [0215.858] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0215.858] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\sr-Latn-RS\\*", lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c7ae2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ed40 [0215.859] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286450 [0215.859] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0215.859] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286450 | out: hHeap=0x1f0000) returned 1 [0215.859] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0215.859] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0215.859] FindNextFileW (in: hFindFile=0x24ed40, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c7ae2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.859] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286450 [0215.859] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0215.859] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286450 | out: hHeap=0x1f0000) returned 1 [0215.859] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0215.859] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0215.859] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0215.859] FindNextFileW (in: hFindFile=0x24ed40, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0215.859] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0215.859] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286450 [0215.859] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0215.859] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286450 | out: hHeap=0x1f0000) returned 1 [0215.859] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0215.859] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0215.860] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\sr-Latn-RS\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sr-latn-rs\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.860] GetLastError () returned 0x5 [0215.860] GetLastError () returned 0x5 [0215.860] FindNextFileW (in: hFindFile=0x24ed40, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0215.860] FindClose (in: hFindFile=0x24ed40 | out: hFindFile=0x24ed40) returned 1 [0215.860] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0215.860] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263178 | out: hHeap=0x1f0000) returned 1 [0215.860] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0215.860] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2348f0 | out: hHeap=0x1f0000) returned 1 [0215.860] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234ae8 [0215.860] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0215.860] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262fe0 [0215.860] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286d58 [0215.860] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\sv-SE\\*", lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c820e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e7c0 [0215.860] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2861a8 [0215.860] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286d58 | out: hHeap=0x1f0000) returned 1 [0215.861] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0215.861] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c820e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286890 [0215.861] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2861a8 | out: hHeap=0x1f0000) returned 1 [0215.861] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0215.861] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0215.861] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0215.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0215.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286d58 [0215.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0215.861] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286d58 | out: hHeap=0x1f0000) returned 1 [0215.861] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286890 | out: hHeap=0x1f0000) returned 1 [0215.861] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0215.861] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\sv-SE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sv-se\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.861] GetLastError () returned 0x5 [0215.861] GetLastError () returned 0x5 [0215.861] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0215.861] FindClose (in: hFindFile=0x24e7c0 | out: hFindFile=0x24e7c0) returned 1 [0215.861] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0215.862] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262fe0 | out: hHeap=0x1f0000) returned 1 [0215.862] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0215.862] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234ae8 | out: hHeap=0x1f0000) returned 1 [0215.862] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2344b8 [0215.862] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0215.862] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2617f8 [0215.862] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2861a8 [0215.862] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\th-TH\\*", lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8602, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ec80 [0215.862] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286450 [0215.862] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2861a8 | out: hHeap=0x1f0000) returned 1 [0215.862] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0215.862] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8602, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.862] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286d58 [0215.863] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286450 | out: hHeap=0x1f0000) returned 1 [0215.863] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0215.863] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0215.863] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0215.863] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0215.863] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2861a8 [0215.863] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0215.863] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2861a8 | out: hHeap=0x1f0000) returned 1 [0215.863] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286d58 | out: hHeap=0x1f0000) returned 1 [0215.863] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0215.863] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\th-TH\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\th-th\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.863] GetLastError () returned 0x5 [0215.863] GetLastError () returned 0x5 [0215.863] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0215.863] FindClose (in: hFindFile=0x24ec80 | out: hFindFile=0x24ec80) returned 1 [0215.863] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0215.863] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2617f8 | out: hHeap=0x1f0000) returned 1 [0215.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0215.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2344b8 | out: hHeap=0x1f0000) returned 1 [0215.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2348f0 [0215.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0215.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x263178 [0215.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286890 [0215.864] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\tr-TR\\*", lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c896f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ea00 [0215.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2861a8 [0215.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286890 | out: hHeap=0x1f0000) returned 1 [0215.864] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0215.864] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c896f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2865e8 [0215.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2861a8 | out: hHeap=0x1f0000) returned 1 [0215.864] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0215.864] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0215.864] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0215.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0215.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286450 [0215.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0215.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286450 | out: hHeap=0x1f0000) returned 1 [0215.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2865e8 | out: hHeap=0x1f0000) returned 1 [0215.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0215.865] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\tr-TR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tr-tr\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.865] GetLastError () returned 0x5 [0215.865] GetLastError () returned 0x5 [0215.865] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0215.865] FindClose (in: hFindFile=0x24ea00 | out: hFindFile=0x24ea00) returned 1 [0215.865] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0215.865] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263178 | out: hHeap=0x1f0000) returned 1 [0215.865] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0215.865] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2348f0 | out: hHeap=0x1f0000) returned 1 [0215.865] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2348f0 [0215.865] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0215.865] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262e48 [0215.865] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286d58 [0215.865] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\uk-UA\\*", lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8ed8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e6c0 [0215.865] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2861a8 [0215.865] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286d58 | out: hHeap=0x1f0000) returned 1 [0215.865] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0215.865] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8ed8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.866] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286d58 [0215.866] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2861a8 | out: hHeap=0x1f0000) returned 1 [0215.866] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0215.866] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0215.866] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0215.866] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0215.866] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2861a8 [0215.866] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0215.866] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2861a8 | out: hHeap=0x1f0000) returned 1 [0215.866] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286d58 | out: hHeap=0x1f0000) returned 1 [0215.866] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0215.866] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\uk-UA\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\uk-ua\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.866] GetLastError () returned 0x5 [0215.866] GetLastError () returned 0x5 [0215.866] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0215.866] FindClose (in: hFindFile=0x24e6c0 | out: hFindFile=0x24e6c0) returned 1 [0215.866] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0215.866] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262e48 | out: hHeap=0x1f0000) returned 1 [0215.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0215.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2348f0 | out: hHeap=0x1f0000) returned 1 [0215.867] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234980 [0215.867] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0215.867] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262e48 [0215.867] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286450 [0215.867] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\zh-CN\\*", lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c93df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e7c0 [0215.867] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2861a8 [0215.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286450 | out: hHeap=0x1f0000) returned 1 [0215.867] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0215.867] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c93df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.867] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286890 [0215.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2861a8 | out: hHeap=0x1f0000) returned 1 [0215.867] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0215.867] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0215.867] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e100c60, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e100c60, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e100c60, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0215.867] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0215.867] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286d58 [0215.867] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0215.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286d58 | out: hHeap=0x1f0000) returned 1 [0215.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286890 | out: hHeap=0x1f0000) returned 1 [0215.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0215.868] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\zh-CN\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-cn\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.868] GetLastError () returned 0x5 [0215.868] GetLastError () returned 0x5 [0215.868] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e100c60, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e100c60, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e100c60, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0215.868] FindClose (in: hFindFile=0x24e7c0 | out: hFindFile=0x24e7c0) returned 1 [0215.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0215.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262e48 | out: hHeap=0x1f0000) returned 1 [0215.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0215.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234980 | out: hHeap=0x1f0000) returned 1 [0215.868] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234aa0 [0215.868] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0215.868] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x261b28 [0215.868] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286d58 [0215.868] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\zh-TW\\*", lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c97fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ed00 [0215.868] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286670 [0215.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286d58 | out: hHeap=0x1f0000) returned 1 [0215.869] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0215.869] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c97fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.869] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286450 [0215.869] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286670 | out: hHeap=0x1f0000) returned 1 [0215.869] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0215.869] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0215.869] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e0daa01, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e0daa01, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e100c60, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0215.869] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0215.869] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2865e8 [0215.869] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0215.869] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2865e8 | out: hHeap=0x1f0000) returned 1 [0215.869] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286450 | out: hHeap=0x1f0000) returned 1 [0215.869] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0215.869] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\zh-TW\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-tw\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.869] GetLastError () returned 0x5 [0215.869] GetLastError () returned 0x5 [0215.869] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e0daa01, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e0daa01, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e100c60, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0215.869] FindClose (in: hFindFile=0x24ed00 | out: hFindFile=0x24ed00) returned 1 [0215.870] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0215.870] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261b28 | out: hHeap=0x1f0000) returned 1 [0215.870] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0215.870] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234aa0 | out: hHeap=0x1f0000) returned 1 [0215.870] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219478 | out: hHeap=0x1f0000) returned 1 [0215.870] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e10 | out: hHeap=0x1f0000) returned 1 [0215.870] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2127a0 | out: hHeap=0x1f0000) returned 1 [0215.870] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212828 | out: hHeap=0x1f0000) returned 1 [0215.870] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211fa8 | out: hHeap=0x1f0000) returned 1 [0215.870] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212030 | out: hHeap=0x1f0000) returned 1 [0215.870] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2128b0 | out: hHeap=0x1f0000) returned 1 [0215.870] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2120b8 | out: hHeap=0x1f0000) returned 1 [0215.870] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a0b0 | out: hHeap=0x1f0000) returned 1 [0215.870] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2299c8 | out: hHeap=0x1f0000) returned 1 [0215.870] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229ad8 | out: hHeap=0x1f0000) returned 1 [0215.870] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229b60 | out: hHeap=0x1f0000) returned 1 [0215.870] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a2d0 | out: hHeap=0x1f0000) returned 1 [0215.870] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229be8 | out: hHeap=0x1f0000) returned 1 [0215.870] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a1c0 | out: hHeap=0x1f0000) returned 1 [0215.870] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0215.870] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229e08 | out: hHeap=0x1f0000) returned 1 [0215.870] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229c70 | out: hHeap=0x1f0000) returned 1 [0215.870] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229e90 | out: hHeap=0x1f0000) returned 1 [0215.870] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0215.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285570 | out: hHeap=0x1f0000) returned 1 [0215.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286010 | out: hHeap=0x1f0000) returned 1 [0215.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285680 | out: hHeap=0x1f0000) returned 1 [0215.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0215.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2859b0 | out: hHeap=0x1f0000) returned 1 [0215.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285708 | out: hHeap=0x1f0000) returned 1 [0215.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285790 | out: hHeap=0x1f0000) returned 1 [0215.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285818 | out: hHeap=0x1f0000) returned 1 [0215.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285928 | out: hHeap=0x1f0000) returned 1 [0215.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285a38 | out: hHeap=0x1f0000) returned 1 [0215.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285ac0 | out: hHeap=0x1f0000) returned 1 [0215.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285bd0 | out: hHeap=0x1f0000) returned 1 [0215.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285c58 | out: hHeap=0x1f0000) returned 1 [0215.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286918 | out: hHeap=0x1f0000) returned 1 [0215.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286e68 | out: hHeap=0x1f0000) returned 1 [0215.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286808 | out: hHeap=0x1f0000) returned 1 [0215.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286120 | out: hHeap=0x1f0000) returned 1 [0215.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2869a0 | out: hHeap=0x1f0000) returned 1 [0215.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286ab0 | out: hHeap=0x1f0000) returned 1 [0215.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286780 | out: hHeap=0x1f0000) returned 1 [0215.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286cd0 | out: hHeap=0x1f0000) returned 1 [0215.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286560 | out: hHeap=0x1f0000) returned 1 [0215.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ee8 | out: hHeap=0x1f0000) returned 1 [0215.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227388 | out: hHeap=0x1f0000) returned 1 [0215.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ba8 | out: hHeap=0x1f0000) returned 1 [0215.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233cd8 | out: hHeap=0x1f0000) returned 1 [0215.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233cd8 [0215.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0215.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262e48 [0215.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2865e8 [0215.872] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\MSInfo\\*", lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa098a4c6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71143a45, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName=".", cAlternateFileName="")) returned 0x24eb40 [0215.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0215.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ef8 [0215.872] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0215.872] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2865e8 | out: hHeap=0x1f0000) returned 1 [0215.872] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0215.872] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa098a4c6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71143a45, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="..", cAlternateFileName="")) returned 1 [0215.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0215.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218d98 [0215.872] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0215.872] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ef8 | out: hHeap=0x1f0000) returned 1 [0215.872] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0215.872] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0215.872] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa098aa4a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="en-US", cAlternateFileName="")) returned 1 [0215.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2202b0 [0215.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218768 [0215.872] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2202b0 | out: hHeap=0x1f0000) returned 1 [0215.872] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218d98 | out: hHeap=0x1f0000) returned 1 [0215.872] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0215.872] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0215.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x2051f0 [0215.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2861a8 [0215.873] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463aec8d, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x63793f1, ftLastAccessTime.dwHighDateTime=0x1d2fa0a, ftLastWriteTime.dwLowDateTime=0x463aec8d, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x5a600, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="msinfo32.exe", cAlternateFileName="")) returned 1 [0215.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0215.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0215.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218818 [0215.873] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0215.873] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218768 | out: hHeap=0x1f0000) returned 1 [0215.873] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0215.873] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\MSInfo\\msinfo32.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\msinfo32.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.873] GetLastError () returned 0x5 [0215.873] GetLastError () returned 0x5 [0215.873] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463aec8d, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x63793f1, ftLastAccessTime.dwHighDateTime=0x1d2fa0a, ftLastWriteTime.dwLowDateTime=0x463aec8d, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x5a600, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="msinfo32.exe", cAlternateFileName="")) returned 0 [0215.873] FindClose (in: hFindFile=0x24eb40 | out: hFindFile=0x24eb40) returned 1 [0215.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2343e0 [0215.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0215.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262fe0 [0215.874] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286e68 [0215.874] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\MSInfo\\en-US\\*", lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa098aa4a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e9c0 [0215.874] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286ab0 [0215.874] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286e68 | out: hHeap=0x1f0000) returned 1 [0215.874] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0215.874] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa098aa4a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.874] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286cd0 [0215.874] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286ab0 | out: hHeap=0x1f0000) returned 1 [0215.874] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0215.874] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0215.874] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb38282, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x73430dfb, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x261f2e00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x7800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe.mui", cAlternateFileName="")) returned 1 [0215.874] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0215.874] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2865e8 [0215.874] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0215.874] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2865e8 | out: hHeap=0x1f0000) returned 1 [0215.874] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286cd0 | out: hHeap=0x1f0000) returned 1 [0215.874] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0215.874] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\MSInfo\\en-US\\msinfo32.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\en-us\\msinfo32.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.875] GetLastError () returned 0x5 [0215.875] GetLastError () returned 0x5 [0215.875] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb38282, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x73430dfb, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x261f2e00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x7800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe.mui", cAlternateFileName="")) returned 0 [0215.875] FindClose (in: hFindFile=0x24e9c0 | out: hFindFile=0x24e9c0) returned 1 [0215.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0215.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262fe0 | out: hHeap=0x1f0000) returned 1 [0215.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0215.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2343e0 | out: hHeap=0x1f0000) returned 1 [0215.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218818 | out: hHeap=0x1f0000) returned 1 [0215.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2861a8 | out: hHeap=0x1f0000) returned 1 [0215.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2051f0 | out: hHeap=0x1f0000) returned 1 [0215.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262e48 | out: hHeap=0x1f0000) returned 1 [0215.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0215.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233cd8 | out: hHeap=0x1f0000) returned 1 [0215.875] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2343e0 [0215.875] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0215.875] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262e48 [0215.875] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286670 [0215.875] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\*", lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd9f60362, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd9f60362, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName=".", cAlternateFileName="")) returned 0x24e980 [0215.875] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286450 [0215.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286670 | out: hHeap=0x1f0000) returned 1 [0215.876] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0215.876] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd9f60362, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd9f60362, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="..", cAlternateFileName="")) returned 1 [0215.876] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286ab0 [0215.876] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286450 | out: hHeap=0x1f0000) returned 1 [0215.876] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0215.876] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0215.876] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9e7b530, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x58cd0, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="LICLUA.EXE", cAlternateFileName="")) returned 1 [0215.876] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0215.876] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286918 [0215.876] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0215.876] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286918 | out: hHeap=0x1f0000) returned 1 [0215.876] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286ab0 | out: hHeap=0x1f0000) returned 1 [0215.876] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0215.876] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\LICLUA.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\liclua.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0215.876] GetFileType (hFile=0x21c) returned 0x1 [0215.876] CloseHandle (hObject=0x21c) returned 1 [0215.877] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0215.877] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\LICLUA.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\liclua.exe"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9e7b530, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x58cd0)) returned 1 [0215.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0215.877] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0215.877] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\LICLUA.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\liclua.exe"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9e7b530, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x58cd0)) returned 1 [0215.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0215.877] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0215.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0215.877] GetLastError () returned 0x0 [0215.877] CryptAcquireContextA (in: phProv=0x1a1daf0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1a1daf0*=0x286d58) returned 1 [0215.882] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2382f8 | out: pbBuffer=0x2382f8) returned 1 [0215.882] CryptReleaseContext (hProv=0x286d58, dwFlags=0x0) returned 1 [0215.882] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0215.882] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x24fd60 [0215.882] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x224a18 [0215.882] QueryPerformanceCounter (in: lpPerformanceCount=0x1a1da84 | out: lpPerformanceCount=0x1a1da84*=37325080401) returned 1 [0215.882] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1a1dac4 | out: lpSystemTimeAsFileTime=0x1a1dac4) [0215.882] QueryPerformanceCounter (in: lpPerformanceCount=0x1a1da84 | out: lpPerformanceCount=0x1a1da84*=37325093615) returned 1 [0215.882] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1a1dac4 | out: lpSystemTimeAsFileTime=0x1a1dac4) [0215.882] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238ef8 [0215.882] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x25e1c0 [0215.882] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2246d0 [0215.882] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x220838 [0215.882] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff70 [0215.882] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2067d8 [0215.882] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffb8 [0215.882] GetLastError () returned 0x0 [0215.883] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\LICLUA.EXE.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\liclua.exe.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d990, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1bc [0216.039] GetFileType (hFile=0x1bc) returned 0x1 [0216.039] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b40 [0216.039] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b20 [0216.269] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\LICLUA.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\liclua.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d9c0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0216.269] GetFileType (hFile=0x210) returned 0x1 [0216.269] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x2052d0 [0216.269] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204fb0 [0216.269] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2614f8 [0216.269] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b10 [0216.270] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b30 [0216.270] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\LICLUA.EXE.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\liclua.exe.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d90c, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0216.270] GetFileType (hFile=0x1fc) returned 0x1 [0216.271] GetLastError () returned 0xb7 [0216.271] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\LICLUA.EXE.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\liclua.exe.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d90c, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0216.271] GetFileType (hFile=0x1e0) returned 0x1 [0216.272] GetLastError () returned 0xb7 [0216.272] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\LICLUA.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\liclua.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d904, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0216.272] GetFileType (hFile=0x1f4) returned 0x1 [0216.272] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x288fa8 [0216.273] ReadFile (in: hFile=0x1f4, lpBuffer=0x288fa8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1d860, lpOverlapped=0x0 | out: lpBuffer=0x288fa8*, lpNumberOfBytesRead=0x1a1d860*=0x1000, lpOverlapped=0x0) returned 1 [0216.275] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24ca08 [0216.276] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x290fe8 [0216.276] GetLastError () returned 0x0 [0216.292] CloseHandle (hObject=0x1bc) returned 1 [0216.292] CloseHandle (hObject=0x210) returned 1 [0216.293] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389e0 [0216.293] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389f0 [0216.294] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\LICLUA.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\liclua.exe"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d9c0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0216.299] GetFileType (hFile=0x210) returned 0x1 [0216.300] GetLastError () returned 0xb7 [0216.302] CloseHandle (hObject=0x210) returned 1 [0216.302] DeleteFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\LICLUA.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\liclua.exe")) returned 0 [0216.302] GetLastError () returned 0x20 [0216.302] GetLastError () returned 0x20 [0216.303] CryptAcquireContextA (in: phProv=0x1a1daf0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1a1daf0*=0x2132c8) returned 1 [0216.311] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2385c8 | out: pbBuffer=0x2385c8) returned 1 [0216.311] CryptReleaseContext (hProv=0x2132c8, dwFlags=0x0) returned 1 [0216.311] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385c8 | out: hHeap=0x1f0000) returned 1 [0216.311] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2385f0 [0216.311] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238730 [0216.311] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2308c8 [0216.311] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385f0 | out: hHeap=0x1f0000) returned 1 [0216.311] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0216.312] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2308c8 | out: hHeap=0x1f0000) returned 1 [0216.312] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x22c8b8 [0216.312] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210198 [0216.312] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x235cb0 [0216.312] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238690 [0216.312] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x232cb0 [0216.312] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ff0 [0216.312] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2357d0 [0216.312] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2385c8 [0216.312] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2335f8 [0216.312] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a20 [0216.312] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238708 [0216.312] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210210 [0216.312] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a30 [0216.313] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238668 [0216.313] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0216.313] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0216.313] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238668 | out: hHeap=0x1f0000) returned 1 [0216.313] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a30 | out: hHeap=0x1f0000) returned 1 [0216.313] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0216.313] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238708 | out: hHeap=0x1f0000) returned 1 [0216.313] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a20 | out: hHeap=0x1f0000) returned 1 [0216.313] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2335f8 | out: hHeap=0x1f0000) returned 1 [0216.313] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385c8 | out: hHeap=0x1f0000) returned 1 [0216.313] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2357d0 | out: hHeap=0x1f0000) returned 1 [0216.314] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x230af8 [0216.314] GetLastError () returned 0x0 [0216.314] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1a1d680 | out: lpSystemTimeAsFileTime=0x1a1d680) [0216.314] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238a20 [0216.314] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238578 [0216.314] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205210 [0216.314] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205210 | out: hHeap=0x1f0000) returned 1 [0216.314] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238578 | out: hHeap=0x1f0000) returned 1 [0216.315] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2386b8 [0216.315] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205210 [0216.315] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205210 | out: hHeap=0x1f0000) returned 1 [0216.315] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2386b8 | out: hHeap=0x1f0000) returned 1 [0216.315] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a20 | out: hHeap=0x1f0000) returned 1 [0216.315] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0216.421] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x230fc8 [0216.421] GetLastError () returned 0x0 [0216.478] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\LICLUA.EXE.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\liclua.exe.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d9f0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0216.478] GetFileType (hFile=0x23c) returned 0x1 [0216.478] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28cfc8 [0216.478] SetFilePointerEx (in: hFile=0x23c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1a1d978 | out: lpNewFilePointer=0x0) returned 1 [0216.478] GetLastError () returned 0xb7 [0216.479] CloseHandle (hObject=0x23c) returned 1 [0216.479] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a80 | out: hHeap=0x1f0000) returned 1 [0216.479] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a50 | out: hHeap=0x1f0000) returned 1 [0216.479] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232ba8 | out: hHeap=0x1f0000) returned 1 [0216.479] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232cb0 | out: hHeap=0x1f0000) returned 1 [0216.479] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238690 | out: hHeap=0x1f0000) returned 1 [0216.479] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ff0 | out: hHeap=0x1f0000) returned 1 [0216.479] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235cb0 | out: hHeap=0x1f0000) returned 1 [0216.479] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0216.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0216.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224040 | out: hHeap=0x1f0000) returned 1 [0216.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238730 | out: hHeap=0x1f0000) returned 1 [0216.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0216.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x252370 | out: hHeap=0x1f0000) returned 1 [0216.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2244a0 | out: hHeap=0x1f0000) returned 1 [0216.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0216.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a90 | out: hHeap=0x1f0000) returned 1 [0216.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210000 | out: hHeap=0x1f0000) returned 1 [0216.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238618 | out: hHeap=0x1f0000) returned 1 [0216.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a10 | out: hHeap=0x1f0000) returned 1 [0216.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210090 | out: hHeap=0x1f0000) returned 1 [0216.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385a0 | out: hHeap=0x1f0000) returned 1 [0216.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a00 | out: hHeap=0x1f0000) returned 1 [0216.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232db8 | out: hHeap=0x1f0000) returned 1 [0216.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238528 | out: hHeap=0x1f0000) returned 1 [0216.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235768 | out: hHeap=0x1f0000) returned 1 [0216.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234548 | out: hHeap=0x1f0000) returned 1 [0216.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2386e0 | out: hHeap=0x1f0000) returned 1 [0216.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0216.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234788 | out: hHeap=0x1f0000) returned 1 [0216.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389f0 | out: hHeap=0x1f0000) returned 1 [0216.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389e0 | out: hHeap=0x1f0000) returned 1 [0216.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x288fa8 | out: hHeap=0x1f0000) returned 1 [0216.481] CloseHandle (hObject=0x1f4) returned 1 [0216.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b90 | out: hHeap=0x1f0000) returned 1 [0216.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a70 | out: hHeap=0x1f0000) returned 1 [0216.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2321a0 | out: hHeap=0x1f0000) returned 1 [0216.482] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24ca08 | out: hHeap=0x1f0000) returned 1 [0216.482] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210018 | out: hHeap=0x1f0000) returned 1 [0216.482] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2052d0 | out: hHeap=0x1f0000) returned 1 [0216.482] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x290fe8 | out: hHeap=0x1f0000) returned 1 [0216.482] CloseHandle (hObject=0x1e0) returned 1 [0216.482] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a60 | out: hHeap=0x1f0000) returned 1 [0216.482] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b50 | out: hHeap=0x1f0000) returned 1 [0216.482] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261668 | out: hHeap=0x1f0000) returned 1 [0216.483] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204fb0 | out: hHeap=0x1f0000) returned 1 [0216.483] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220748 | out: hHeap=0x1f0000) returned 1 [0216.483] CloseHandle (hObject=0x1fc) returned 1 [0216.483] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b30 | out: hHeap=0x1f0000) returned 1 [0216.483] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b10 | out: hHeap=0x1f0000) returned 1 [0216.483] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2614f8 | out: hHeap=0x1f0000) returned 1 [0216.483] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b20 | out: hHeap=0x1f0000) returned 1 [0216.483] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b40 | out: hHeap=0x1f0000) returned 1 [0216.483] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a40 | out: hHeap=0x1f0000) returned 1 [0216.483] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ba0 | out: hHeap=0x1f0000) returned 1 [0216.483] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0216.484] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25e1c0 | out: hHeap=0x1f0000) returned 1 [0216.484] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2246d0 | out: hHeap=0x1f0000) returned 1 [0216.484] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2067d8 | out: hHeap=0x1f0000) returned 1 [0216.484] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffb8 | out: hHeap=0x1f0000) returned 1 [0216.484] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff70 | out: hHeap=0x1f0000) returned 1 [0216.484] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220838 | out: hHeap=0x1f0000) returned 1 [0216.484] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24fd60 | out: hHeap=0x1f0000) returned 1 [0216.484] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224a18 | out: hHeap=0x1f0000) returned 1 [0216.484] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0216.484] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0216.484] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263310 | out: hHeap=0x1f0000) returned 1 [0216.484] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233cd8 | out: hHeap=0x1f0000) returned 1 [0216.484] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0216.484] DeleteFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\LICLUA.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\liclua.exe")) returned 1 [0216.485] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9f60362, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc70656d5, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xc70656d5, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="Office Setup Controller", cAlternateFileName="OFFICE~1")) returned 1 [0216.485] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2f0 [0216.485] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0216.486] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0216.486] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0216.486] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0216.486] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0216.486] lstrcmpW (lpString1="Office Setup Controller", lpString2=".") returned 1 [0216.486] lstrcmpW (lpString1="Office Setup Controller", lpString2="..") returned 1 [0216.486] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x2051f0 [0216.486] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2614f8 [0216.486] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9f60362, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc70656d5, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xc70656d5, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="Office Setup Controller", cAlternateFileName="OFFICE~1")) returned 0 [0216.486] FindClose (in: hFindFile=0x24e980 | out: hFindFile=0x24e980) returned 1 [0216.486] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233cd8 [0216.487] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b598 [0216.487] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2617f8 [0216.487] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2610a8 [0216.487] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\*", lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9f60362, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc70656d5, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xc70656d5, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8, dwReserved1=0x1a1e0a0, cFileName=".", cAlternateFileName="")) returned 0x24eb40 [0216.487] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261388 [0216.487] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2610a8 | out: hHeap=0x1f0000) returned 1 [0216.487] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0216.488] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9f60362, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc70656d5, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xc70656d5, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8, dwReserved1=0x1a1e0a0, cFileName="..", cAlternateFileName="")) returned 1 [0216.488] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2610a8 [0216.488] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261388 | out: hHeap=0x1f0000) returned 1 [0216.488] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0216.488] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0216.488] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69e1fe00, ftCreationTime.dwHighDateTime=0x1d0d79d, ftLastAccessTime.dwLowDateTime=0xd9ff8cc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x69e1fe00, ftLastWriteTime.dwHighDateTime=0x1d0d79d, nFileSizeHigh=0x0, nFileSizeLow=0x168258, dwReserved0=0x8, dwReserved1=0x1a1e0a0, cFileName="pidgenx.dll", cAlternateFileName="")) returned 1 [0216.488] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b458 [0216.488] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261388 [0216.488] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x106) returned 0x223e10 [0216.488] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261388 | out: hHeap=0x1f0000) returned 1 [0216.488] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2610a8 | out: hHeap=0x1f0000) returned 1 [0216.488] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b458 | out: hHeap=0x1f0000) returned 1 [0216.489] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pidgenx.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pidgenx.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0216.489] GetFileType (hFile=0x1fc) returned 0x1 [0216.489] CloseHandle (hObject=0x1fc) returned 1 [0216.501] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fe70 [0216.501] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pidgenx.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pidgenx.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69e1fe00, ftCreationTime.dwHighDateTime=0x1d0d79d, ftLastAccessTime.dwLowDateTime=0xd9ff8cc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x69e1fe00, ftLastWriteTime.dwHighDateTime=0x1d0d79d, nFileSizeHigh=0x0, nFileSizeLow=0x168258)) returned 1 [0216.519] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0216.519] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fc18 [0216.519] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pidgenx.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pidgenx.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69e1fe00, ftCreationTime.dwHighDateTime=0x1d0d79d, ftLastAccessTime.dwLowDateTime=0xd9ff8cc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x69e1fe00, ftLastWriteTime.dwHighDateTime=0x1d0d79d, nFileSizeHigh=0x0, nFileSizeLow=0x168258)) returned 1 [0216.550] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0216.550] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x2300c8 [0216.550] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0216.550] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6774927, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xc6774927, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xc6e4f79c, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x903ce, dwReserved0=0x8, dwReserved1=0x1a1e0a0, cFileName="pkeyconfig-office.xrm-ms.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="PKEYCO~1.ODV")) returned 1 [0216.550] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fce0 [0216.550] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261668 [0216.550] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x160) returned 0x220a58 [0216.550] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261668 | out: hHeap=0x1f0000) returned 1 [0216.551] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223e10 | out: hHeap=0x1f0000) returned 1 [0216.551] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0216.551] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig-office.xrm-ms.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pkeyconfig-office.xrm-ms.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0216.551] GetFileType (hFile=0x1e0) returned 0x1 [0216.552] CloseHandle (hObject=0x1e0) returned 1 [0216.552] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x160) returned 0x229418 [0216.552] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig-office.xrm-ms.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pkeyconfig-office.xrm-ms.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6774927, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xc6774927, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xc6e4f79c, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x903ce)) returned 1 [0216.552] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0216.552] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x160) returned 0x229418 [0216.553] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig-office.xrm-ms.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pkeyconfig-office.xrm-ms.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6774927, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xc6774927, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xc6e4f79c, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x903ce)) returned 1 [0216.553] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0216.553] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x160) returned 0x229418 [0216.553] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0216.553] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9ff8cc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x8, dwReserved1=0x1a1e0a0, cFileName="pkeyconfig.companion.dll", cAlternateFileName="PKEYCO~1.DLL")) returned 1 [0216.553] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234818 [0216.553] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261388 [0216.553] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x106) returned 0x224900 [0216.553] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261388 | out: hHeap=0x1f0000) returned 1 [0216.553] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220a58 | out: hHeap=0x1f0000) returned 1 [0216.553] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234818 | out: hHeap=0x1f0000) returned 1 [0216.554] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig.companion.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pkeyconfig.companion.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0216.554] GetFileType (hFile=0x1e0) returned 0x1 [0216.554] CloseHandle (hObject=0x1e0) returned 1 [0216.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0216.555] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig.companion.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pkeyconfig.companion.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9ff8cc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x48c0)) returned 1 [0216.555] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0216.555] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0216.555] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig.companion.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pkeyconfig.companion.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9ff8cc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x48c0)) returned 1 [0216.555] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0216.555] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0216.555] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0216.555] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9ff8cc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x8, dwReserved1=0x1a1e0a0, cFileName="pkeyconfig.companion.dll", cAlternateFileName="PKEYCO~1.DLL")) returned 0 [0216.555] FindClose (in: hFindFile=0x24eb40 | out: hFindFile=0x24eb40) returned 1 [0216.556] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224900 | out: hHeap=0x1f0000) returned 1 [0216.556] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2617f8 | out: hHeap=0x1f0000) returned 1 [0216.556] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b598 | out: hHeap=0x1f0000) returned 1 [0216.556] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233cd8 | out: hHeap=0x1f0000) returned 1 [0216.556] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0216.556] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2614f8 | out: hHeap=0x1f0000) returned 1 [0216.556] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2051f0 | out: hHeap=0x1f0000) returned 1 [0216.556] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262e48 | out: hHeap=0x1f0000) returned 1 [0216.556] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0216.556] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2343e0 | out: hHeap=0x1f0000) returned 1 [0216.556] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2343e0 [0216.557] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b598 [0216.557] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262650 [0216.557] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261668 [0216.557] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\OfficeSoftwareProtectionPlatform\\*", lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd99442a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd99442a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName=".", cAlternateFileName="")) returned 0x24ec80 [0216.557] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261388 [0216.557] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261668 | out: hHeap=0x1f0000) returned 1 [0216.557] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0216.557] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd99442a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd99442a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="..", cAlternateFileName="")) returned 1 [0216.558] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261668 [0216.558] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261388 | out: hHeap=0x1f0000) returned 1 [0216.558] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0216.558] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0216.558] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd99442a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd99442a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="..", cAlternateFileName="")) returned 0 [0216.558] FindClose (in: hFindFile=0x24ec80 | out: hFindFile=0x24ec80) returned 1 [0216.558] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261668 | out: hHeap=0x1f0000) returned 1 [0216.559] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262650 | out: hHeap=0x1f0000) returned 1 [0216.559] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b598 | out: hHeap=0x1f0000) returned 1 [0216.559] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2343e0 | out: hHeap=0x1f0000) returned 1 [0216.559] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2343e0 [0216.559] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b458 [0216.559] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2617f8 [0216.559] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0216.559] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Source Engine\\*", lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4accd6e1, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4accd6e1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName=".", cAlternateFileName="")) returned 0x24e980 [0216.559] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2132c8 [0216.560] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0216.560] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0216.560] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4accd6e1, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4accd6e1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="..", cAlternateFileName="")) returned 1 [0216.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2133d8 [0216.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0216.560] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2133d8 | out: hHeap=0x1f0000) returned 1 [0216.560] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2132c8 | out: hHeap=0x1f0000) returned 1 [0216.560] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0216.560] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0216.560] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4accd6e1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x3ba48, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="OSE.EXE", cAlternateFileName="")) returned 1 [0216.561] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213818 [0216.561] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0216.561] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213818 | out: hHeap=0x1f0000) returned 1 [0216.561] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0216.561] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Source Engine\\OSE.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\source engine\\ose.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0216.562] GetFileType (hFile=0x1e0) returned 0x1 [0216.562] CloseHandle (hObject=0x1e0) returned 1 [0216.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0216.563] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Source Engine\\OSE.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\source engine\\ose.exe"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4accd6e1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x3ba48)) returned 1 [0216.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0216.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0216.563] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Source Engine\\OSE.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\source engine\\ose.exe"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4accd6e1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x3ba48)) returned 1 [0216.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0216.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0216.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0216.563] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4accd6e1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x3ba48, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="OSE.EXE", cAlternateFileName="")) returned 0 [0216.564] FindClose (in: hFindFile=0x24e980 | out: hFindFile=0x24e980) returned 1 [0216.564] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0216.564] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2617f8 | out: hHeap=0x1f0000) returned 1 [0216.564] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b458 | out: hHeap=0x1f0000) returned 1 [0216.564] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2343e0 | out: hHeap=0x1f0000) returned 1 [0216.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2343e0 [0216.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b368 [0216.565] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x263310 [0216.565] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213570 [0216.565] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\*", lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b5538f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName=".", cAlternateFileName="")) returned 0x24e940 [0216.566] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0216.566] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213570 | out: hHeap=0x1f0000) returned 1 [0216.566] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0216.566] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b5538f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="..", cAlternateFileName="")) returned 1 [0216.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213818 [0216.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0216.567] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0216.567] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0216.567] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xff, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="Bears.htm", cAlternateFileName="")) returned 1 [0216.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b7a0 [0216.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213570 [0216.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0216.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213570 | out: hHeap=0x1f0000) returned 1 [0216.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213818 | out: hHeap=0x1f0000) returned 1 [0216.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b7a0 | out: hHeap=0x1f0000) returned 1 [0216.568] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0216.569] GetLastError () returned 0x5 [0216.569] GetLastError () returned 0x5 [0216.569] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x432, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="Bears.jpg", cAlternateFileName="")) returned 1 [0216.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b458 [0216.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2132c8 [0216.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0216.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2132c8 | out: hHeap=0x1f0000) returned 1 [0216.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0216.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b458 | out: hHeap=0x1f0000) returned 1 [0216.570] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0216.571] GetLastError () returned 0x5 [0216.571] GetLastError () returned 0x5 [0216.571] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1a3ecc0a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5d2da05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5d2da05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x285, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0216.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b318 [0216.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213570 [0216.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0216.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213570 | out: hHeap=0x1f0000) returned 1 [0216.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0216.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b318 | out: hHeap=0x1f0000) returned 1 [0216.572] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\Desktop.ini" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0216.573] GetFileType (hFile=0x1e0) returned 0x1 [0216.573] CloseHandle (hObject=0x1e0) returned 1 [0216.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0216.573] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\Desktop.ini" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1a3ecc0a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5d2da05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5d2da05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x285)) returned 1 [0216.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0216.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0216.574] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\Desktop.ini" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1a3ecc0a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5d2da05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5d2da05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x285)) returned 1 [0216.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0216.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0216.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0216.574] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="Garden.htm", cAlternateFileName="")) returned 1 [0216.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b458 [0216.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0216.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0216.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0216.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0216.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b458 | out: hHeap=0x1f0000) returned 1 [0216.575] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0216.576] GetLastError () returned 0x5 [0216.576] GetLastError () returned 0x5 [0216.576] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x5d3f, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="Garden.jpg", cAlternateFileName="")) returned 1 [0216.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b7c8 [0216.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2132c8 [0216.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0216.576] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2132c8 | out: hHeap=0x1f0000) returned 1 [0216.576] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0216.576] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b7c8 | out: hHeap=0x1f0000) returned 1 [0216.577] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0216.577] GetLastError () returned 0x5 [0216.577] GetLastError () returned 0x5 [0216.578] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="Green Bubbles.htm", cAlternateFileName="")) returned 1 [0216.578] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0216.578] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212c68 [0216.578] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0216.578] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212c68 | out: hHeap=0x1f0000) returned 1 [0216.578] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0216.578] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0216.579] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\Green Bubbles.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\green bubbles.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0216.579] GetLastError () returned 0x5 [0216.579] GetLastError () returned 0x5 [0216.579] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1906, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="GreenBubbles.jpg", cAlternateFileName="")) returned 1 [0216.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0216.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0216.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0216.580] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0216.580] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0216.580] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0216.581] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\GreenBubbles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\greenbubbles.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0216.712] GetLastError () returned 0x5 [0216.712] GetLastError () returned 0x5 [0216.712] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xeb, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="Hand Prints.htm", cAlternateFileName="")) returned 1 [0216.713] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b638 [0216.713] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0216.713] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0216.713] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0216.713] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0216.713] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b638 | out: hHeap=0x1f0000) returned 1 [0216.832] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\Hand Prints.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\hand prints.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0216.832] GetLastError () returned 0x5 [0216.832] GetLastError () returned 0x5 [0216.832] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x107e, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="HandPrints.jpg", cAlternateFileName="")) returned 1 [0216.832] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b638 [0216.833] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213680 [0216.833] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0216.833] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213680 | out: hHeap=0x1f0000) returned 1 [0216.833] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0216.833] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b638 | out: hHeap=0x1f0000) returned 1 [0216.833] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\handprints.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0216.833] GetLastError () returned 0x5 [0216.834] GetLastError () returned 0x5 [0216.834] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="Orange Circles.htm", cAlternateFileName="")) returned 1 [0216.834] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0216.834] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2133d8 [0216.834] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0216.834] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2133d8 | out: hHeap=0x1f0000) returned 1 [0216.834] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0216.834] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0216.835] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\Orange Circles.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orange circles.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0216.835] GetLastError () returned 0x5 [0216.835] GetLastError () returned 0x5 [0216.835] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d5a533, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d5a533, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d5a533, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x18ed, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="OrangeCircles.jpg", cAlternateFileName="")) returned 1 [0216.835] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0216.835] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0216.835] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0216.835] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0216.836] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0216.836] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0216.836] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\OrangeCircles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orangecircles.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0216.837] GetLastError () returned 0x5 [0216.837] GetLastError () returned 0x5 [0216.837] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="Peacock.htm", cAlternateFileName="")) returned 1 [0216.837] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b458 [0216.838] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0216.838] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0216.838] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0216.838] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0216.838] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b458 | out: hHeap=0x1f0000) returned 1 [0216.838] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0216.838] GetLastError () returned 0x5 [0216.839] GetLastError () returned 0x5 [0216.839] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x13fb, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="Peacock.jpg", cAlternateFileName="")) returned 1 [0216.839] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b5e8 [0216.839] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212c68 [0216.839] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0216.839] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212c68 | out: hHeap=0x1f0000) returned 1 [0216.839] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0216.839] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b5e8 | out: hHeap=0x1f0000) returned 1 [0216.840] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0216.840] GetLastError () returned 0x5 [0216.840] GetLastError () returned 0x5 [0216.840] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96dccc65, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="Roses.htm", cAlternateFileName="")) returned 1 [0216.840] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b458 [0216.840] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213680 [0216.840] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0216.840] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213680 | out: hHeap=0x1f0000) returned 1 [0216.841] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0216.841] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b458 | out: hHeap=0x1f0000) returned 1 [0216.841] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0216.841] GetLastError () returned 0x5 [0216.841] GetLastError () returned 0x5 [0216.841] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96dccc65, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96dccc65, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96dccc65, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x780, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="Roses.jpg", cAlternateFileName="")) returned 1 [0216.842] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b480 [0216.842] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2133d8 [0216.842] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0216.842] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2133d8 | out: hHeap=0x1f0000) returned 1 [0216.842] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0216.842] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b480 | out: hHeap=0x1f0000) returned 1 [0216.842] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0216.842] GetLastError () returned 0x5 [0216.842] GetLastError () returned 0x5 [0216.842] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="Shades of Blue.htm", cAlternateFileName="")) returned 1 [0216.843] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0216.843] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0216.843] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0216.843] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0216.843] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0216.843] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0216.843] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\Shades of Blue.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shades of blue.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0216.843] GetLastError () returned 0x5 [0216.844] GetLastError () returned 0x5 [0216.844] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x127e, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="ShadesOfBlue.jpg", cAlternateFileName="")) returned 1 [0216.844] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0216.844] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213680 [0216.844] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0216.844] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213680 | out: hHeap=0x1f0000) returned 1 [0216.844] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0216.844] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0216.844] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\ShadesOfBlue.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shadesofblue.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0216.844] GetLastError () returned 0x5 [0216.844] GetLastError () returned 0x5 [0216.845] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d5a533, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d5a533, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d5a533, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="Soft Blue.htm", cAlternateFileName="")) returned 1 [0216.845] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b2f0 [0216.845] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213818 [0216.845] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0216.845] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213818 | out: hHeap=0x1f0000) returned 1 [0216.845] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0216.845] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b2f0 | out: hHeap=0x1f0000) returned 1 [0216.846] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\Soft Blue.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\soft blue.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0216.846] GetLastError () returned 0x5 [0216.846] GetLastError () returned 0x5 [0216.846] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2949, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="SoftBlue.jpg", cAlternateFileName="")) returned 1 [0216.846] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b480 [0216.846] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2132c8 [0216.852] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0216.852] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2132c8 | out: hHeap=0x1f0000) returned 1 [0216.852] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0216.852] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b480 | out: hHeap=0x1f0000) returned 1 [0216.852] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\softblue.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0216.853] GetLastError () returned 0x5 [0216.853] GetLastError () returned 0x5 [0216.853] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="Stars.htm", cAlternateFileName="")) returned 1 [0216.853] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b5e8 [0216.853] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213818 [0216.853] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0216.853] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213818 | out: hHeap=0x1f0000) returned 1 [0216.854] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0216.854] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b5e8 | out: hHeap=0x1f0000) returned 1 [0216.854] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0216.854] GetLastError () returned 0x5 [0216.854] GetLastError () returned 0x5 [0216.854] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1d51, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="Stars.jpg", cAlternateFileName="")) returned 1 [0216.855] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b5e8 [0216.855] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213818 [0216.855] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0216.855] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213818 | out: hHeap=0x1f0000) returned 1 [0216.855] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0216.855] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b5e8 | out: hHeap=0x1f0000) returned 1 [0216.856] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0216.856] GetLastError () returned 0x5 [0216.856] GetLastError () returned 0x5 [0216.856] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1d51, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="Stars.jpg", cAlternateFileName="")) returned 0 [0216.856] FindClose (in: hFindFile=0x24e940 | out: hFindFile=0x24e940) returned 1 [0216.856] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0216.856] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263310 | out: hHeap=0x1f0000) returned 1 [0216.857] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b368 | out: hHeap=0x1f0000) returned 1 [0216.857] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2343e0 | out: hHeap=0x1f0000) returned 1 [0216.857] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2343e0 [0216.857] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b458 [0216.857] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262188 [0216.857] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213680 [0216.857] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\TextConv\\*", lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b56882, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName=".", cAlternateFileName="")) returned 0x24eb80 [0216.857] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212be0 [0216.857] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213680 | out: hHeap=0x1f0000) returned 1 [0216.857] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0216.858] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b56882, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="..", cAlternateFileName="")) returned 1 [0216.858] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0216.858] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212be0 | out: hHeap=0x1f0000) returned 1 [0216.858] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0216.858] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0216.858] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b5787e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="en-US", cAlternateFileName="")) returned 1 [0216.858] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213680 [0216.858] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0216.858] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0216.858] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0216.858] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204f10 [0216.858] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0216.858] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b5787e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="en-US", cAlternateFileName="")) returned 0 [0216.858] FindClose (in: hFindFile=0x24eb80 | out: hFindFile=0x24eb80) returned 1 [0216.859] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233cd8 [0216.859] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b5e8 [0216.859] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262650 [0216.859] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0216.859] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\TextConv\\en-US\\*", lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b5787e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x212ce0, dwReserved1=0x760074, cFileName=".", cAlternateFileName="")) returned 0x24e8c0 [0216.859] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0216.859] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0216.859] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0216.859] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0216.859] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0216.860] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b5787e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x212ce0, dwReserved1=0x760074, cFileName="..", cAlternateFileName="")) returned 1 [0216.860] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212cf0 [0216.860] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0216.860] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212cf0 | out: hHeap=0x1f0000) returned 1 [0216.860] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0216.860] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0216.860] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0216.860] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b5787e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x212ce0, dwReserved1=0x760074, cFileName="..", cAlternateFileName="")) returned 0 [0216.860] FindClose (in: hFindFile=0x24e8c0 | out: hFindFile=0x24e8c0) returned 1 [0216.861] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0216.861] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262650 | out: hHeap=0x1f0000) returned 1 [0216.861] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b5e8 | out: hHeap=0x1f0000) returned 1 [0216.861] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233cd8 | out: hHeap=0x1f0000) returned 1 [0216.861] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213680 | out: hHeap=0x1f0000) returned 1 [0216.861] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0216.861] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f10 | out: hHeap=0x1f0000) returned 1 [0216.861] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262188 | out: hHeap=0x1f0000) returned 1 [0216.861] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b458 | out: hHeap=0x1f0000) returned 1 [0216.861] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2343e0 | out: hHeap=0x1f0000) returned 1 [0216.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2343e0 [0216.862] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b2f0 [0216.862] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262188 [0216.862] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213680 [0216.862] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Triedit\\*", lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b57d42, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName=".", cAlternateFileName="")) returned 0x24e9c0 [0216.862] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0216.863] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213680 | out: hHeap=0x1f0000) returned 1 [0216.863] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0216.863] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b57d42, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="..", cAlternateFileName="")) returned 1 [0216.863] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213680 [0216.863] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0216.863] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0216.863] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0216.863] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b58502, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="en-US", cAlternateFileName="")) returned 1 [0216.863] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2132c8 [0216.863] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213680 | out: hHeap=0x1f0000) returned 1 [0216.863] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0216.864] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0216.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204c70 [0216.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0216.864] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b58502, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="en-US", cAlternateFileName="")) returned 0 [0216.864] FindClose (in: hFindFile=0x24e9c0 | out: hFindFile=0x24e9c0) returned 1 [0216.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233cd8 [0216.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b5e8 [0216.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262650 [0216.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e88 [0216.865] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Triedit\\en-US\\*", lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b58502, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x212e76, dwReserved1=0x740072, cFileName=".", cAlternateFileName="")) returned 0x24e680 [0216.865] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0216.865] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e88 | out: hHeap=0x1f0000) returned 1 [0216.865] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0216.865] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b58502, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x212e76, dwReserved1=0x740072, cFileName="..", cAlternateFileName="")) returned 1 [0216.865] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0216.865] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0216.865] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0216.866] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0216.866] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0216.866] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0216.866] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b58502, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x212e76, dwReserved1=0x740072, cFileName="..", cAlternateFileName="")) returned 0 [0216.866] FindClose (in: hFindFile=0x24e680 | out: hFindFile=0x24e680) returned 1 [0216.866] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0216.866] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262650 | out: hHeap=0x1f0000) returned 1 [0216.866] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b5e8 | out: hHeap=0x1f0000) returned 1 [0216.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233cd8 | out: hHeap=0x1f0000) returned 1 [0216.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2132c8 | out: hHeap=0x1f0000) returned 1 [0216.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0216.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c70 | out: hHeap=0x1f0000) returned 1 [0216.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262188 | out: hHeap=0x1f0000) returned 1 [0216.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b2f0 | out: hHeap=0x1f0000) returned 1 [0216.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2343e0 | out: hHeap=0x1f0000) returned 1 [0216.867] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2343e0 [0216.867] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b458 [0216.867] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262cb0 [0216.867] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0216.868] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VC\\*", lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xbcd0fab8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xa0b594b8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2ce22546, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName=".", cAlternateFileName="")) returned 0x24ecc0 [0216.868] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0216.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0216.868] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0216.868] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xbcd0fab8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xa0b594b8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2ce22546, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="..", cAlternateFileName="")) returned 1 [0216.868] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220490 [0216.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0216.869] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0216.869] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0216.869] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8127e00, ftCreationTime.dwHighDateTime=0x1cbd076, ftLastAccessTime.dwLowDateTime=0xcd0a4098, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xd8127e00, ftLastWriteTime.dwHighDateTime=0x1cbd076, nFileSizeHigh=0x0, nFileSizeLow=0xf1b50, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="msdia100.dll", cAlternateFileName="")) returned 1 [0216.869] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b5e8 [0216.869] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0216.869] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x2191b8 [0216.869] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0216.869] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220490 | out: hHeap=0x1f0000) returned 1 [0216.869] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b5e8 | out: hHeap=0x1f0000) returned 1 [0216.870] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VC\\msdia100.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia100.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0216.870] GetFileType (hFile=0x200) returned 0x1 [0216.871] CloseHandle (hObject=0x200) returned 1 [0216.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213818 [0216.871] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VC\\msdia100.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia100.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8127e00, ftCreationTime.dwHighDateTime=0x1cbd076, ftLastAccessTime.dwLowDateTime=0xcd0a4098, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xd8127e00, ftLastWriteTime.dwHighDateTime=0x1cbd076, nFileSizeHigh=0x0, nFileSizeLow=0xf1b50)) returned 1 [0216.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213818 | out: hHeap=0x1f0000) returned 1 [0216.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0216.872] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VC\\msdia100.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia100.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8127e00, ftCreationTime.dwHighDateTime=0x1cbd076, ftLastAccessTime.dwLowDateTime=0xcd0a4098, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xd8127e00, ftLastWriteTime.dwHighDateTime=0x1cbd076, nFileSizeHigh=0x0, nFileSizeLow=0xf1b50)) returned 1 [0216.872] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0216.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0216.872] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0216.872] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfe87c00, ftCreationTime.dwHighDateTime=0x1cbfe36, ftLastAccessTime.dwLowDateTime=0x2ce22546, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xcfe87c00, ftLastWriteTime.dwHighDateTime=0x1cbfe36, nFileSizeHigh=0x0, nFileSizeLow=0xd0d50, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="msdia90.dll", cAlternateFileName="")) returned 1 [0216.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b480 [0216.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0216.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218768 [0216.872] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0216.872] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2191b8 | out: hHeap=0x1f0000) returned 1 [0216.872] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b480 | out: hHeap=0x1f0000) returned 1 [0216.873] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VC\\msdia90.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia90.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0216.873] GetFileType (hFile=0x200) returned 0x1 [0216.874] CloseHandle (hObject=0x200) returned 1 [0216.874] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213680 [0216.874] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VC\\msdia90.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia90.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfe87c00, ftCreationTime.dwHighDateTime=0x1cbfe36, ftLastAccessTime.dwLowDateTime=0x2ce22546, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xcfe87c00, ftLastWriteTime.dwHighDateTime=0x1cbfe36, nFileSizeHigh=0x0, nFileSizeLow=0xd0d50)) returned 1 [0216.874] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213680 | out: hHeap=0x1f0000) returned 1 [0216.875] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0216.875] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VC\\msdia90.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia90.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfe87c00, ftCreationTime.dwHighDateTime=0x1cbfe36, ftLastAccessTime.dwLowDateTime=0x2ce22546, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xcfe87c00, ftLastWriteTime.dwHighDateTime=0x1cbfe36, nFileSizeHigh=0x0, nFileSizeLow=0xd0d50)) returned 1 [0217.180] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0217.180] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213570 [0217.180] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213570 | out: hHeap=0x1f0000) returned 1 [0217.181] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfe87c00, ftCreationTime.dwHighDateTime=0x1cbfe36, ftLastAccessTime.dwLowDateTime=0x2ce22546, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xcfe87c00, ftLastWriteTime.dwHighDateTime=0x1cbfe36, nFileSizeHigh=0x0, nFileSizeLow=0xd0d50, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="msdia90.dll", cAlternateFileName="")) returned 0 [0217.181] FindClose (in: hFindFile=0x24ecc0 | out: hFindFile=0x24ecc0) returned 1 [0217.181] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218768 | out: hHeap=0x1f0000) returned 1 [0217.181] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262cb0 | out: hHeap=0x1f0000) returned 1 [0217.181] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b458 | out: hHeap=0x1f0000) returned 1 [0217.181] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2343e0 | out: hHeap=0x1f0000) returned 1 [0217.181] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233cd8 [0217.181] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b318 [0217.181] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262cb0 [0217.183] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0217.183] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VGX\\*", lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b59a78, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName=".", cAlternateFileName="")) returned 0x24ea80 [0217.183] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0217.183] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0217.184] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0217.184] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b59a78, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="..", cAlternateFileName="")) returned 1 [0217.184] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0217.184] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0217.184] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0217.184] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0217.184] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a69a2a7, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xb3fd6e56, ftLastAccessTime.dwHighDateTime=0x1d2fa09, ftLastWriteTime.dwLowDateTime=0x4a69a2a7, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0xf1000, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="VGX.dll", cAlternateFileName="")) returned 1 [0217.184] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0217.184] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218768 [0217.184] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0217.185] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0217.185] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VGX\\VGX.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vgx\\vgx.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0217.185] GetLastError () returned 0x5 [0217.186] GetLastError () returned 0x5 [0217.186] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a69a2a7, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xb3fd6e56, ftLastAccessTime.dwHighDateTime=0x1d2fa09, ftLastWriteTime.dwLowDateTime=0x4a69a2a7, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0xf1000, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="VGX.dll", cAlternateFileName="")) returned 0 [0217.186] FindClose (in: hFindFile=0x24ea80 | out: hFindFile=0x24ea80) returned 1 [0217.186] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218768 | out: hHeap=0x1f0000) returned 1 [0217.186] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262cb0 | out: hHeap=0x1f0000) returned 1 [0217.186] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b318 | out: hHeap=0x1f0000) returned 1 [0217.186] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233cd8 | out: hHeap=0x1f0000) returned 1 [0217.186] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233cd8 [0217.186] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b598 [0217.187] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x261b28 [0217.187] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fab8 [0217.187] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\*", lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49ecb94e, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ae972f5, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName=".", cAlternateFileName="")) returned 0x24ecc0 [0217.187] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0217.187] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fab8 | out: hHeap=0x1f0000) returned 1 [0217.187] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0217.187] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49ecb94e, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ae972f5, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="..", cAlternateFileName="")) returned 1 [0217.187] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe00 [0217.187] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0217.187] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0217.187] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0217.197] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4aebd53e, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4aebd53e, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="10.0", cAlternateFileName="")) returned 1 [0217.197] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0217.197] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x2191b8 [0217.198] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0217.198] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe00 | out: hHeap=0x1f0000) returned 1 [0217.198] lstrcmpW (lpString1="10.0", lpString2=".") returned 1 [0217.198] lstrcmpW (lpString1="10.0", lpString2="..") returned 1 [0217.198] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204e70 [0217.198] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213570 [0217.198] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x29080, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="vstoee.dll", cAlternateFileName="")) returned 1 [0217.198] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b5c0 [0217.198] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fab8 [0217.198] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218768 [0217.199] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fab8 | out: hHeap=0x1f0000) returned 1 [0217.199] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2191b8 | out: hHeap=0x1f0000) returned 1 [0217.199] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b5c0 | out: hHeap=0x1f0000) returned 1 [0217.199] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0217.199] GetFileType (hFile=0x200) returned 0x1 [0217.200] CloseHandle (hObject=0x200) returned 1 [0217.200] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0217.200] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x29080)) returned 1 [0217.200] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0217.200] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2135f8 [0217.201] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x29080)) returned 1 [0217.201] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2135f8 | out: hHeap=0x1f0000) returned 1 [0217.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e88 [0217.201] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e88 | out: hHeap=0x1f0000) returned 1 [0217.201] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6340300, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0xd6340300, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x4298, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="vstoee100.tlb", cAlternateFileName="VSTOEE~1.TLB")) returned 1 [0217.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b5c0 [0217.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fef0 [0217.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218818 [0217.201] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fef0 | out: hHeap=0x1f0000) returned 1 [0217.201] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218768 | out: hHeap=0x1f0000) returned 1 [0217.201] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b5c0 | out: hHeap=0x1f0000) returned 1 [0217.202] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee100.tlb" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee100.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0217.202] GetFileType (hFile=0x200) returned 0x1 [0217.202] CloseHandle (hObject=0x200) returned 1 [0217.202] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0217.203] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee100.tlb" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee100.tlb"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6340300, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0xd6340300, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x4298)) returned 1 [0217.203] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0217.203] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0217.203] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee100.tlb" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee100.tlb"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6340300, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0xd6340300, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x4298)) returned 1 [0217.203] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0217.203] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0217.203] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0217.203] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6340300, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0xd6340300, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x5898, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="vstoee90.tlb", cAlternateFileName="")) returned 1 [0217.203] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b458 [0217.203] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21ffe0 [0217.203] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x2191b8 [0217.203] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ffe0 | out: hHeap=0x1f0000) returned 1 [0217.203] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218818 | out: hHeap=0x1f0000) returned 1 [0217.203] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b458 | out: hHeap=0x1f0000) returned 1 [0217.204] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee90.tlb" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee90.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0217.204] GetFileType (hFile=0x200) returned 0x1 [0217.204] CloseHandle (hObject=0x200) returned 1 [0217.204] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0217.204] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee90.tlb" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee90.tlb"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6340300, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0xd6340300, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x5898)) returned 1 [0217.204] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0217.204] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0217.204] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee90.tlb" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee90.tlb"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6340300, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0xd6340300, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x5898)) returned 1 [0217.205] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0217.205] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0217.205] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0217.205] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6340300, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0xd6340300, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x5898, dwReserved0=0x20002, dwReserved1=0x22afa6, cFileName="vstoee90.tlb", cAlternateFileName="")) returned 0 [0217.205] FindClose (in: hFindFile=0x24ecc0 | out: hFindFile=0x24ecc0) returned 1 [0217.205] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233df8 [0217.205] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b778 [0217.205] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262cb0 [0217.205] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0217.205] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\*", lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4aebd53e, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4aebd53e, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e900 [0217.205] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2135f8 [0217.206] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0217.206] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0217.206] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4aebd53e, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4aebd53e, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.266] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2132c8 [0217.266] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2135f8 | out: hHeap=0x1f0000) returned 1 [0217.268] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0217.268] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0217.268] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4a6fdac8, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0217.268] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0217.269] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2132c8 | out: hHeap=0x1f0000) returned 1 [0217.269] lstrcmpW (lpString1="1033", lpString2=".") returned 1 [0217.269] lstrcmpW (lpString1="1033", lpString2="..") returned 1 [0217.269] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204e90 [0217.269] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212c68 [0217.269] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x18888, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOInstaller.exe", cAlternateFileName="VSTOIN~1.EXE")) returned 1 [0217.269] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0217.269] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2132c8 [0217.269] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0217.269] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2132c8 | out: hHeap=0x1f0000) returned 1 [0217.269] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0217.270] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0217.270] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0217.270] GetFileType (hFile=0x200) returned 0x1 [0217.271] CloseHandle (hObject=0x200) returned 1 [0217.271] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a620 [0217.271] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.exe"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x18888)) returned 1 [0217.271] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a620 | out: hHeap=0x1f0000) returned 1 [0217.271] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219c48 [0217.271] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.exe"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x18888)) returned 1 [0217.271] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219c48 | out: hHeap=0x1f0000) returned 1 [0217.271] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219f90 [0217.272] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219f90 | out: hHeap=0x1f0000) returned 1 [0217.272] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4aebd53e, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x59a70, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOLoader.dll", cAlternateFileName="VSTOLO~1.DLL")) returned 1 [0217.272] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b5c0 [0217.272] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2132c8 [0217.272] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0217.272] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2132c8 | out: hHeap=0x1f0000) returned 1 [0217.272] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0217.272] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b5c0 | out: hHeap=0x1f0000) returned 1 [0217.272] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOLoader.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoloader.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0217.272] GetFileType (hFile=0x200) returned 0x1 [0217.272] CloseHandle (hObject=0x200) returned 1 [0217.273] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a230 [0217.273] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOLoader.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoloader.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4aebd53e, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x59a70)) returned 1 [0217.273] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a230 | out: hHeap=0x1f0000) returned 1 [0217.273] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219c48 [0217.273] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOLoader.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoloader.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4aebd53e, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x59a70)) returned 1 [0217.273] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219c48 | out: hHeap=0x1f0000) returned 1 [0217.273] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a968 [0217.273] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a968 | out: hHeap=0x1f0000) returned 1 [0217.273] GetLastError () returned 0x0 [0217.273] CryptAcquireContextA (in: phProv=0x1a1d6c8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1a1d6c8*=0x213818) returned 1 [0217.280] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x22b7a0 | out: pbBuffer=0x22b7a0) returned 1 [0217.280] CryptReleaseContext (hProv=0x213818, dwFlags=0x0) returned 1 [0217.280] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b7a0 | out: hHeap=0x1f0000) returned 1 [0217.280] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x251068 [0217.281] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x224270 [0217.281] QueryPerformanceCounter (in: lpPerformanceCount=0x1a1d65c | out: lpPerformanceCount=0x1a1d65c*=37464951381) returned 1 [0217.281] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1a1d69c | out: lpSystemTimeAsFileTime=0x1a1d69c) [0217.281] QueryPerformanceCounter (in: lpPerformanceCount=0x1a1d65c | out: lpPerformanceCount=0x1a1d65c*=37464983921) returned 1 [0217.281] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1a1d69c | out: lpSystemTimeAsFileTime=0x1a1d69c) [0217.281] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x1fef78 [0217.281] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x258298 [0217.281] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x223f28 [0217.281] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x2373a0 [0217.281] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff70 [0217.281] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206838 [0217.282] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffa0 [0217.282] GetLastError () returned 0x0 [0217.282] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOLoader.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoloader.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d568, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0217.283] GetFileType (hFile=0x200) returned 0x1 [0217.283] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b50 [0217.283] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238aa0 [0217.283] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOLoader.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoloader.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d598, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x238 [0217.284] GetFileType (hFile=0x238) returned 0x1 [0217.284] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204db0 [0217.284] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cf0 [0217.284] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2610a8 [0217.284] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b20 [0217.285] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b70 [0217.285] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOLoader.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoloader.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d4e4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x234 [0217.286] GetFileType (hFile=0x234) returned 0x1 [0217.286] GetLastError () returned 0xb7 [0217.286] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOLoader.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoloader.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d4e4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0217.477] GetFileType (hFile=0x1c0) returned 0x1 [0217.478] GetLastError () returned 0xb7 [0217.478] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOLoader.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoloader.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d4dc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0217.478] GetFileType (hFile=0x1f4) returned 0x1 [0217.479] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x290fe8 [0217.479] ReadFile (in: hFile=0x1f4, lpBuffer=0x290fe8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1d438, lpOverlapped=0x0 | out: lpBuffer=0x290fe8*, lpNumberOfBytesRead=0x1a1d438*=0x1000, lpOverlapped=0x0) returned 1 [0217.510] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24b9e8 [0217.511] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28bfc0 [0217.511] GetLastError () returned 0x0 [0217.790] CloseHandle (hObject=0x200) returned 1 [0217.812] CloseHandle (hObject=0x238) returned 1 [0217.812] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238930 [0217.812] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b10 [0218.413] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOLoader.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoloader.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d598, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0218.418] GetFileType (hFile=0x21c) returned 0x1 [0218.419] GetLastError () returned 0xb7 [0218.420] CloseHandle (hObject=0x21c) returned 1 [0218.420] DeleteFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOLoader.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoloader.dll")) returned 0 [0218.420] GetLastError () returned 0x20 [0218.420] GetLastError () returned 0x20 [0218.421] CryptAcquireContextA (in: phProv=0x1a1d6c8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1a1d6c8*=0x212cf0) returned 1 [0218.421] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2380c8 | out: pbBuffer=0x2380c8) returned 1 [0218.422] CryptReleaseContext (hProv=0x212cf0, dwFlags=0x0) returned 1 [0218.422] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380c8 | out: hHeap=0x1f0000) returned 1 [0218.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238168 [0218.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2383e8 [0218.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2f0 [0218.422] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0218.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0218.422] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0218.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a7e18 [0218.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210198 [0218.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x2360c0 [0218.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238438 [0218.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2311b0 [0218.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204db0 [0218.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235768 [0218.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2382a8 [0218.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2316d8 [0218.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388d0 [0218.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0218.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0218.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389c0 [0218.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0218.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101b0 [0218.423] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0218.423] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0218.423] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389c0 | out: hHeap=0x1f0000) returned 1 [0218.423] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0218.424] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0218.424] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388d0 | out: hHeap=0x1f0000) returned 1 [0218.424] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2316d8 | out: hHeap=0x1f0000) returned 1 [0218.424] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0218.424] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235768 | out: hHeap=0x1f0000) returned 1 [0218.424] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x21d050 [0218.424] GetLastError () returned 0x0 [0218.424] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1a1d258 | out: lpSystemTimeAsFileTime=0x1a1d258) [0218.425] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x2388b0 [0218.425] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0218.425] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c70 [0218.425] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c70 | out: hHeap=0x1f0000) returned 1 [0218.425] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0218.425] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380c8 [0218.425] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f10 [0218.425] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f10 | out: hHeap=0x1f0000) returned 1 [0218.425] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380c8 | out: hHeap=0x1f0000) returned 1 [0218.425] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388b0 | out: hHeap=0x1f0000) returned 1 [0218.425] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0218.426] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x21d2f0 [0218.426] GetLastError () returned 0x0 [0218.426] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOLoader.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoloader.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d5c8, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0218.426] GetFileType (hFile=0x21c) returned 0x1 [0218.427] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x289fb0 [0218.427] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1a1d550 | out: lpNewFilePointer=0x0) returned 1 [0218.428] GetLastError () returned 0xb7 [0218.428] CloseHandle (hObject=0x21c) returned 1 [0218.428] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238810 | out: hHeap=0x1f0000) returned 1 [0218.428] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387f0 | out: hHeap=0x1f0000) returned 1 [0218.429] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2312b8 | out: hHeap=0x1f0000) returned 1 [0218.429] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2311b0 | out: hHeap=0x1f0000) returned 1 [0218.429] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238438 | out: hHeap=0x1f0000) returned 1 [0218.429] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204db0 | out: hHeap=0x1f0000) returned 1 [0218.429] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2360c0 | out: hHeap=0x1f0000) returned 1 [0218.429] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0218.429] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a7e18 | out: hHeap=0x1f0000) returned 1 [0218.429] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224040 | out: hHeap=0x1f0000) returned 1 [0218.429] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0218.429] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0218.429] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2595a0 | out: hHeap=0x1f0000) returned 1 [0218.429] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224388 | out: hHeap=0x1f0000) returned 1 [0218.430] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf70 | out: hHeap=0x1f0000) returned 1 [0218.430] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238940 | out: hHeap=0x1f0000) returned 1 [0218.430] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0218.430] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238488 | out: hHeap=0x1f0000) returned 1 [0218.430] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238890 | out: hHeap=0x1f0000) returned 1 [0218.430] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210240 | out: hHeap=0x1f0000) returned 1 [0218.430] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0218.430] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238820 | out: hHeap=0x1f0000) returned 1 [0218.430] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2313c0 | out: hHeap=0x1f0000) returned 1 [0218.430] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0218.430] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235f88 | out: hHeap=0x1f0000) returned 1 [0218.430] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234548 | out: hHeap=0x1f0000) returned 1 [0218.430] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0218.430] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0218.430] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234a58 | out: hHeap=0x1f0000) returned 1 [0218.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b10 | out: hHeap=0x1f0000) returned 1 [0218.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238930 | out: hHeap=0x1f0000) returned 1 [0218.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x290fe8 | out: hHeap=0x1f0000) returned 1 [0218.431] CloseHandle (hObject=0x1f4) returned 1 [0218.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a20 | out: hHeap=0x1f0000) returned 1 [0218.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389f0 | out: hHeap=0x1f0000) returned 1 [0218.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233628 | out: hHeap=0x1f0000) returned 1 [0218.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24b9e8 | out: hHeap=0x1f0000) returned 1 [0218.432] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210018 | out: hHeap=0x1f0000) returned 1 [0218.432] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cb0 | out: hHeap=0x1f0000) returned 1 [0218.432] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28bfc0 | out: hHeap=0x1f0000) returned 1 [0218.432] CloseHandle (hObject=0x1c0) returned 1 [0218.432] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ad0 | out: hHeap=0x1f0000) returned 1 [0218.432] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b60 | out: hHeap=0x1f0000) returned 1 [0218.432] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261388 | out: hHeap=0x1f0000) returned 1 [0218.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bd0 | out: hHeap=0x1f0000) returned 1 [0218.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237d00 | out: hHeap=0x1f0000) returned 1 [0218.433] CloseHandle (hObject=0x234) returned 1 [0218.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b70 | out: hHeap=0x1f0000) returned 1 [0218.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b20 | out: hHeap=0x1f0000) returned 1 [0218.434] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2610a8 | out: hHeap=0x1f0000) returned 1 [0218.434] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238aa0 | out: hHeap=0x1f0000) returned 1 [0218.434] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b50 | out: hHeap=0x1f0000) returned 1 [0218.434] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ae0 | out: hHeap=0x1f0000) returned 1 [0218.434] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a70 | out: hHeap=0x1f0000) returned 1 [0218.434] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0218.434] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x258298 | out: hHeap=0x1f0000) returned 1 [0218.434] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223f28 | out: hHeap=0x1f0000) returned 1 [0218.434] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206838 | out: hHeap=0x1f0000) returned 1 [0218.434] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffa0 | out: hHeap=0x1f0000) returned 1 [0218.434] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff70 | out: hHeap=0x1f0000) returned 1 [0218.435] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2373a0 | out: hHeap=0x1f0000) returned 1 [0218.435] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x251068 | out: hHeap=0x1f0000) returned 1 [0218.435] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224270 | out: hHeap=0x1f0000) returned 1 [0218.435] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0218.435] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219e40 | out: hHeap=0x1f0000) returned 1 [0218.435] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262e48 | out: hHeap=0x1f0000) returned 1 [0218.435] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2343e0 | out: hHeap=0x1f0000) returned 1 [0218.435] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b458 | out: hHeap=0x1f0000) returned 1 [0218.435] DeleteFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOLoader.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoloader.dll")) returned 1 [0218.437] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0xbee8, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOMessageProvider.dll", cAlternateFileName="VSTOME~1.DLL")) returned 1 [0218.437] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0218.437] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2132c8 [0218.437] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0218.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2132c8 | out: hHeap=0x1f0000) returned 1 [0218.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0218.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0218.438] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOMessageProvider.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstomessageprovider.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x234 [0218.438] GetFileType (hFile=0x234) returned 0x1 [0218.439] CloseHandle (hObject=0x234) returned 1 [0218.439] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x286e80 [0218.439] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOMessageProvider.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstomessageprovider.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0xbee8)) returned 1 [0218.440] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286e80 | out: hHeap=0x1f0000) returned 1 [0218.440] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x286dc8 [0218.440] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOMessageProvider.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstomessageprovider.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0xbee8)) returned 1 [0218.440] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286dc8 | out: hHeap=0x1f0000) returned 1 [0218.440] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x286ba0 [0218.440] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286ba0 | out: hHeap=0x1f0000) returned 1 [0218.440] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0xbee8, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOMessageProvider.dll", cAlternateFileName="VSTOME~1.DLL")) returned 0 [0218.440] FindClose (in: hFindFile=0x24e900 | out: hFindFile=0x24e900) returned 1 [0218.441] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2343e0 [0218.441] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380f0 [0218.441] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262e48 [0218.441] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0218.441] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\*", lpFindFileData=0x1a1dc30 | out: lpFindFileData=0x1a1dc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4a6fdac8, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24eac0 [0218.441] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0218.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0218.442] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0218.442] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0218.442] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0218.442] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1a1dc30 | out: lpFindFileData=0x1a1dc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4a6fdac8, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0218.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2135f8 [0218.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0218.442] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2135f8 | out: hHeap=0x1f0000) returned 1 [0218.443] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0218.443] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0218.443] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0218.443] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1a1dc30 | out: lpFindFileData=0x1a1dc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a6d7a0a, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x30a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOInstallerUI.dll", cAlternateFileName="VSTOIN~1.DLL")) returned 1 [0218.443] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2f0 [0218.444] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2135f8 [0218.444] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0218.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2135f8 | out: hHeap=0x1f0000) returned 1 [0218.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0218.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0218.445] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOInstallerUI.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoinstallerui.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d9f0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x234 [0218.445] GetFileType (hFile=0x234) returned 0x1 [0218.446] CloseHandle (hObject=0x234) returned 1 [0218.446] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x286750 [0218.446] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOInstallerUI.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoinstallerui.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1da84 | out: lpFileInformation=0x1a1da84*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a6d7a0a, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x30a0)) returned 1 [0218.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286750 | out: hHeap=0x1f0000) returned 1 [0218.447] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x286a30 [0218.447] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOInstallerUI.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoinstallerui.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1da8c | out: lpFileInformation=0x1a1da8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a6d7a0a, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x30a0)) returned 1 [0218.447] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286a30 | out: hHeap=0x1f0000) returned 1 [0218.447] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x286a30 [0218.447] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286a30 | out: hHeap=0x1f0000) returned 1 [0218.447] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1a1dc30 | out: lpFindFileData=0x1a1dc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x5080, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOLoaderUI.dll", cAlternateFileName="VSTOLO~1.DLL")) returned 1 [0218.447] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2f0 [0218.448] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0218.448] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0218.448] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0218.448] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0218.448] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0218.449] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOLoaderUI.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoloaderui.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d9f0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x234 [0218.449] GetFileType (hFile=0x234) returned 0x1 [0218.450] CloseHandle (hObject=0x234) returned 1 [0218.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21ab60 [0218.450] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOLoaderUI.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoloaderui.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1da84 | out: lpFileInformation=0x1a1da84*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x5080)) returned 1 [0218.451] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ab60 | out: hHeap=0x1f0000) returned 1 [0218.451] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a968 [0218.451] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOLoaderUI.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoloaderui.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1da8c | out: lpFileInformation=0x1a1da8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x5080)) returned 1 [0218.451] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a968 | out: hHeap=0x1f0000) returned 1 [0218.451] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a620 [0218.451] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a620 | out: hHeap=0x1f0000) returned 1 [0218.451] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1a1dc30 | out: lpFindFileData=0x1a1dc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x5080, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOLoaderUI.dll", cAlternateFileName="VSTOLO~1.DLL")) returned 0 [0218.452] FindClose (in: hFindFile=0x24eac0 | out: hFindFile=0x24eac0) returned 1 [0218.452] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0218.452] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262e48 | out: hHeap=0x1f0000) returned 1 [0218.452] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380f0 | out: hHeap=0x1f0000) returned 1 [0218.452] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2343e0 | out: hHeap=0x1f0000) returned 1 [0218.452] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0218.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212c68 | out: hHeap=0x1f0000) returned 1 [0218.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e90 | out: hHeap=0x1f0000) returned 1 [0218.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262cb0 | out: hHeap=0x1f0000) returned 1 [0218.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b778 | out: hHeap=0x1f0000) returned 1 [0218.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233df8 | out: hHeap=0x1f0000) returned 1 [0218.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2191b8 | out: hHeap=0x1f0000) returned 1 [0218.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213570 | out: hHeap=0x1f0000) returned 1 [0218.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e70 | out: hHeap=0x1f0000) returned 1 [0218.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261b28 | out: hHeap=0x1f0000) returned 1 [0218.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b598 | out: hHeap=0x1f0000) returned 1 [0218.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233cd8 | out: hHeap=0x1f0000) returned 1 [0218.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22abf8 | out: hHeap=0x1f0000) returned 1 [0218.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a3e0 | out: hHeap=0x1f0000) returned 1 [0218.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ace8 | out: hHeap=0x1f0000) returned 1 [0218.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22af40 | out: hHeap=0x1f0000) returned 1 [0218.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229830 | out: hHeap=0x1f0000) returned 1 [0218.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2612d0 | out: hHeap=0x1f0000) returned 1 [0218.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229f18 | out: hHeap=0x1f0000) returned 1 [0218.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a4f0 | out: hHeap=0x1f0000) returned 1 [0218.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a578 | out: hHeap=0x1f0000) returned 1 [0218.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a928 | out: hHeap=0x1f0000) returned 1 [0218.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aa90 | out: hHeap=0x1f0000) returned 1 [0218.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab80 | out: hHeap=0x1f0000) returned 1 [0218.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a9a0 | out: hHeap=0x1f0000) returned 1 [0218.456] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d368 | out: hHeap=0x1f0000) returned 1 [0218.456] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ee88 | out: hHeap=0x1f0000) returned 1 [0218.456] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c70 | out: hHeap=0x1f0000) returned 1 [0218.456] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233f60 | out: hHeap=0x1f0000) returned 1 [0218.456] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233f60 [0218.456] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238488 [0218.456] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x263310 [0218.456] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235b78 [0218.456] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\Services\\*", lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c11068, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22613c, dwReserved1=0x420040, cFileName=".", cAlternateFileName="")) returned 0x24eac0 [0218.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2358a0 [0218.457] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0218.457] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0218.457] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c11068, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22613c, dwReserved1=0x420040, cFileName="..", cAlternateFileName="")) returned 1 [0218.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235ff0 [0218.457] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2358a0 | out: hHeap=0x1f0000) returned 1 [0218.457] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0218.457] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0218.457] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440ad34a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440ad34a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440ad34a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa8e, dwReserved0=0x22613c, dwReserved1=0x420040, cFileName="verisign.bmp", cAlternateFileName="")) returned 1 [0218.458] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0218.458] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235cb0 [0218.458] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220eb8 [0218.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235cb0 | out: hHeap=0x1f0000) returned 1 [0218.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235ff0 | out: hHeap=0x1f0000) returned 1 [0218.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0218.725] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\Services\\verisign.bmp" (normalized: "c:\\program files\\common files\\services\\verisign.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e65c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0218.756] GetLastError () returned 0x5 [0218.756] GetLastError () returned 0x5 [0218.756] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440ad34a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440ad34a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440ad34a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa8e, dwReserved0=0x22613c, dwReserved1=0x420040, cFileName="verisign.bmp", cAlternateFileName="")) returned 0 [0218.756] FindClose (in: hFindFile=0x24eac0 | out: hFindFile=0x24eac0) returned 1 [0218.757] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0218.757] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263310 | out: hHeap=0x1f0000) returned 1 [0218.757] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238488 | out: hHeap=0x1f0000) returned 1 [0218.757] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233f60 | out: hHeap=0x1f0000) returned 1 [0218.757] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233f60 [0218.757] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380c8 [0218.757] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x261990 [0218.757] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c8b8 [0218.757] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\System\\*", lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c5f95f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22613c, dwReserved1=0x420040, cFileName=".", cAlternateFileName="")) returned 0x24e7c0 [0218.757] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x225608 [0218.757] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0218.758] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0218.758] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c5f95f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22613c, dwReserved1=0x420040, cFileName="..", cAlternateFileName="")) returned 1 [0218.758] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x225a80 [0218.758] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217c50 [0218.758] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225a80 | out: hHeap=0x1f0000) returned 1 [0218.758] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225608 | out: hHeap=0x1f0000) returned 1 [0218.758] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0218.758] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0218.758] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0cb0a3f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22613c, dwReserved1=0x420040, cFileName="ado", cAlternateFileName="")) returned 1 [0218.758] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c8b8 [0218.758] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x2177d0 [0218.758] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0218.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217c50 | out: hHeap=0x1f0000) returned 1 [0218.759] lstrcmpW (lpString1="ado", lpString2=".") returned 1 [0218.759] lstrcmpW (lpString1="ado", lpString2="..") returned 1 [0218.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204f10 [0218.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235b78 [0218.759] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d5a533, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d5a533, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d5a533, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x22613c, dwReserved1=0x420040, cFileName="DirectDB.dll", cAlternateFileName="")) returned 1 [0218.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380f0 [0218.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c8b8 [0218.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217ed0 [0218.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0218.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2177d0 | out: hHeap=0x1f0000) returned 1 [0218.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380f0 | out: hHeap=0x1f0000) returned 1 [0218.760] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\DirectDB.dll" (normalized: "c:\\program files\\common files\\system\\directdb.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e65c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0218.760] GetLastError () returned 0x5 [0218.760] GetLastError () returned 0x5 [0218.760] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb3579, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22613c, dwReserved1=0x420040, cFileName="en-US", cAlternateFileName="")) returned 1 [0218.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c8b8 [0218.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217c50 [0218.760] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0218.760] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217ed0 | out: hHeap=0x1f0000) returned 1 [0218.760] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0218.761] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0218.761] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0218.761] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2361f8 [0218.761] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f10 | out: hHeap=0x1f0000) returned 1 [0218.761] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d7f179, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22613c, dwReserved1=0x420040, cFileName="msadc", cAlternateFileName="")) returned 1 [0218.761] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c8b8 [0218.761] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x2180d0 [0218.761] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0218.761] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217c50 | out: hHeap=0x1f0000) returned 1 [0218.761] lstrcmpW (lpString1="msadc", lpString2=".") returned 1 [0218.761] lstrcmpW (lpString1="msadc", lpString2="..") returned 1 [0218.761] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x48) returned 0x2262d8 [0218.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235ff0 [0218.762] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0218.762] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d8186d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22613c, dwReserved1=0x420040, cFileName="Ole DB", cAlternateFileName="OLEDB~1")) returned 1 [0218.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c8b8 [0218.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217ad0 [0218.762] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0218.762] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2180d0 | out: hHeap=0x1f0000) returned 1 [0218.762] lstrcmpW (lpString1="Ole DB", lpString2=".") returned 1 [0218.762] lstrcmpW (lpString1="Ole DB", lpString2="..") returned 1 [0218.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2358a0 [0218.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2362c8 [0218.762] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2262d8 | out: hHeap=0x1f0000) returned 1 [0218.763] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440d35a9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440d35a9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440d35a9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd0a00, dwReserved0=0x22613c, dwReserved1=0x420040, cFileName="wab32.dll", cAlternateFileName="")) returned 1 [0218.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380f0 [0218.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c8b8 [0218.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x218050 [0218.763] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0218.763] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217ad0 | out: hHeap=0x1f0000) returned 1 [0218.763] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380f0 | out: hHeap=0x1f0000) returned 1 [0218.763] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\wab32.dll" (normalized: "c:\\program files\\common files\\system\\wab32.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e65c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0218.764] GetLastError () returned 0x5 [0218.764] GetLastError () returned 0x5 [0218.764] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440d35a9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440d35a9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440d35a9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xeb600, dwReserved0=0x22613c, dwReserved1=0x420040, cFileName="wab32res.dll", cAlternateFileName="")) returned 1 [0218.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0218.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c8b8 [0218.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x218350 [0218.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0218.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218050 | out: hHeap=0x1f0000) returned 1 [0218.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0218.764] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\wab32res.dll" (normalized: "c:\\program files\\common files\\system\\wab32res.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e65c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0218.765] GetLastError () returned 0x5 [0218.765] GetLastError () returned 0x5 [0218.765] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440d35a9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440d35a9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440d35a9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xeb600, dwReserved0=0x22613c, dwReserved1=0x420040, cFileName="wab32res.dll", cAlternateFileName="")) returned 0 [0218.765] FindClose (in: hFindFile=0x24e7c0 | out: hFindFile=0x24e7c0) returned 1 [0218.765] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346b0 [0218.765] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238488 [0218.765] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x263178 [0218.765] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235be0 [0218.765] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\System\\ado\\*", lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0cb0a3f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ec40 [0218.766] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235908 [0218.766] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235be0 | out: hHeap=0x1f0000) returned 1 [0218.766] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0218.766] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0cb0a3f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0218.766] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235970 [0218.766] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235908 | out: hHeap=0x1f0000) returned 1 [0218.766] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0218.766] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0218.766] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52a0c6a1, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x52a0c6a1, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x52a0c6a1, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3a08, dwReserved0=0x0, dwReserved1=0x0, cFileName="adojavas.inc", cAlternateFileName="")) returned 1 [0218.766] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0218.766] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235be0 [0218.766] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221248 [0218.766] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235be0 | out: hHeap=0x1f0000) returned 1 [0218.766] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235970 | out: hHeap=0x1f0000) returned 1 [0218.767] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0218.767] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\ado\\adojavas.inc" (normalized: "c:\\program files\\common files\\system\\ado\\adojavas.inc"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0218.767] GetLastError () returned 0x5 [0218.767] GetLastError () returned 0x5 [0218.767] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x529e643a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x529e643a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x529e643a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3b5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="adovbs.inc", cAlternateFileName="")) returned 1 [0218.767] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380f0 [0218.767] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235e50 [0218.768] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220c58 [0218.768] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235e50 | out: hHeap=0x1f0000) returned 1 [0218.768] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0218.768] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380f0 | out: hHeap=0x1f0000) returned 1 [0218.768] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\ado\\adovbs.inc" (normalized: "c:\\program files\\common files\\system\\ado\\adovbs.inc"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0218.768] GetLastError () returned 0x5 [0218.768] GetLastError () returned 0x5 [0218.768] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb2730, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0218.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235a40 [0218.769] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0218.769] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0218.769] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0218.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204e30 [0218.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235908 [0218.769] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43854cb5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43854cb5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43854cb5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msader15.dll", cAlternateFileName="")) returned 1 [0218.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0218.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235be0 [0218.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220d88 [0218.769] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235be0 | out: hHeap=0x1f0000) returned 1 [0218.769] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235a40 | out: hHeap=0x1f0000) returned 1 [0218.769] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0218.770] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\ado\\msader15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msader15.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0218.770] GetLastError () returned 0x5 [0218.770] GetLastError () returned 0x5 [0218.770] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463fb128, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xced4b5c5, ftLastAccessTime.dwHighDateTime=0x1d2fa09, ftLastWriteTime.dwLowDateTime=0x463fb128, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x12d400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado15.dll", cAlternateFileName="")) returned 1 [0218.770] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0218.770] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235cb0 [0218.771] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221b30 [0218.771] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235cb0 | out: hHeap=0x1f0000) returned 1 [0218.771] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0218.771] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0218.772] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\ado\\msado15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msado15.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0218.772] GetLastError () returned 0x5 [0218.773] GetLastError () returned 0x5 [0218.773] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41cc3017, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41cc3017, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41cc3017, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado20.tlb", cAlternateFileName="")) returned 1 [0218.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380f0 [0218.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235e50 [0218.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221968 [0218.773] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235e50 | out: hHeap=0x1f0000) returned 1 [0218.773] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0218.773] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380f0 | out: hHeap=0x1f0000) returned 1 [0218.773] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\ado\\msado20.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado20.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0218.774] GetLastError () returned 0x5 [0218.774] GetLastError () returned 0x5 [0218.774] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41cc3017, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41cc3017, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41cc3017, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd200, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado21.tlb", cAlternateFileName="")) returned 1 [0218.774] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380f0 [0218.774] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235de8 [0218.774] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220f50 [0218.774] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235de8 | out: hHeap=0x1f0000) returned 1 [0218.774] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0218.774] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380f0 | out: hHeap=0x1f0000) returned 1 [0218.775] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\ado\\msado21.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado21.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0218.775] GetLastError () returned 0x5 [0218.775] GetLastError () returned 0x5 [0218.775] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41cc3017, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41cc3017, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41cc3017, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado25.tlb", cAlternateFileName="")) returned 1 [0218.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0218.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235970 [0218.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2211b0 [0218.775] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235970 | out: hHeap=0x1f0000) returned 1 [0218.775] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0218.776] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0218.776] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\ado\\msado25.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado25.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0218.776] GetLastError () returned 0x5 [0218.776] GetLastError () returned 0x5 [0218.776] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41cc3017, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41cc3017, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41cc3017, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x11400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado26.tlb", cAlternateFileName="")) returned 1 [0218.776] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0218.777] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235be0 [0218.777] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2215d8 [0218.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235be0 | out: hHeap=0x1f0000) returned 1 [0218.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0218.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0218.777] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\ado\\msado26.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado26.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0218.777] GetLastError () returned 0x5 [0218.777] GetLastError () returned 0x5 [0218.778] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41cc3017, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41cc3017, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41cc3017, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x11600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado27.tlb", cAlternateFileName="")) returned 1 [0218.778] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0218.778] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235cb0 [0218.778] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221410 [0218.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235cb0 | out: hHeap=0x1f0000) returned 1 [0218.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0218.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0218.778] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\ado\\msado27.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado27.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0218.778] GetLastError () returned 0x5 [0218.779] GetLastError () returned 0x5 [0218.779] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c6f28a5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4c6f28a5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4c6f28a5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x11400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado28.tlb", cAlternateFileName="")) returned 1 [0218.779] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380f0 [0218.779] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235970 [0218.779] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2214a8 [0218.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235970 | out: hHeap=0x1f0000) returned 1 [0218.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0218.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380f0 | out: hHeap=0x1f0000) returned 1 [0218.779] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\ado\\msado28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado28.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0218.779] GetLastError () returned 0x5 [0218.780] GetLastError () returned 0x5 [0218.780] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c6f28a5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4c6f28a5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4c6f28a5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x11400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado60.tlb", cAlternateFileName="")) returned 1 [0218.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0218.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235970 [0218.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220eb8 [0218.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235970 | out: hHeap=0x1f0000) returned 1 [0218.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0218.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0218.780] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\ado\\msado60.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado60.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0218.780] GetLastError () returned 0x5 [0218.780] GetLastError () returned 0x5 [0218.781] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463fb128, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xd005e363, ftLastAccessTime.dwHighDateTime=0x1d2fa09, ftLastWriteTime.dwLowDateTime=0x463fb128, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x58e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadomd.dll", cAlternateFileName="")) returned 1 [0218.781] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0218.781] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236058 [0218.781] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221b30 [0218.781] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236058 | out: hHeap=0x1f0000) returned 1 [0218.781] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0218.781] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0218.781] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\ado\\msadomd.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadomd.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0218.781] GetLastError () returned 0x5 [0218.781] GetLastError () returned 0x5 [0218.782] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x437960ad, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x437960ad, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x437960ad, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadomd28.tlb", cAlternateFileName="")) returned 1 [0218.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0218.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235970 [0218.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220c58 [0218.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235970 | out: hHeap=0x1f0000) returned 1 [0218.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0218.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0218.782] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\ado\\msadomd28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msadomd28.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0218.783] GetLastError () returned 0x5 [0218.783] GetLastError () returned 0x5 [0218.783] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41da7e83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41da7e83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41da7e83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb200, dwReserved0=0x0, dwReserved1=0x0, cFileName="msador15.dll", cAlternateFileName="")) returned 1 [0218.783] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0218.783] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235eb8 [0218.783] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221118 [0218.783] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235eb8 | out: hHeap=0x1f0000) returned 1 [0218.783] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0218.783] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0218.783] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\ado\\msador15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msador15.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0218.784] GetLastError () returned 0x5 [0218.784] GetLastError () returned 0x5 [0218.784] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x438ed65e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x438ed65e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x438ed65e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x8c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msador28.tlb", cAlternateFileName="")) returned 1 [0218.784] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0218.784] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235970 [0218.784] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221a00 [0218.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235970 | out: hHeap=0x1f0000) returned 1 [0218.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0218.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0218.784] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\ado\\msador28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msador28.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0218.784] GetLastError () returned 0x5 [0218.784] GetLastError () returned 0x5 [0218.785] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463fb128, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xc5b43065, ftLastAccessTime.dwHighDateTime=0x1d2fa09, ftLastWriteTime.dwLowDateTime=0x463fb128, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x62e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadox.dll", cAlternateFileName="")) returned 1 [0218.785] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380f0 [0218.785] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235e50 [0218.785] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220fe8 [0218.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235e50 | out: hHeap=0x1f0000) returned 1 [0218.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0218.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380f0 | out: hHeap=0x1f0000) returned 1 [0218.785] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\ado\\msadox.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadox.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0218.785] GetLastError () returned 0x5 [0218.785] GetLastError () returned 0x5 [0218.785] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43c5ad98, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43c5ad98, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43c5ad98, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadox28.tlb", cAlternateFileName="")) returned 1 [0218.785] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0218.785] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235970 [0218.786] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220eb8 [0218.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235970 | out: hHeap=0x1f0000) returned 1 [0218.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0218.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0218.786] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\ado\\msadox28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msadox28.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0218.786] GetLastError () returned 0x5 [0218.786] GetLastError () returned 0x5 [0218.786] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x437960ad, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x437960ad, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x437960ad, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x16400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadrh15.dll", cAlternateFileName="")) returned 1 [0218.786] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0218.787] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235a40 [0218.787] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221378 [0218.787] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235a40 | out: hHeap=0x1f0000) returned 1 [0219.048] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0219.051] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0219.051] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\ado\\msadrh15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadrh15.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.051] GetLastError () returned 0x5 [0219.052] GetLastError () returned 0x5 [0219.052] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x437960ad, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x437960ad, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x437960ad, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x16400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadrh15.dll", cAlternateFileName="")) returned 0 [0219.052] FindClose (in: hFindFile=0x24ec40 | out: hFindFile=0x24ec40) returned 1 [0219.052] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233c90 [0219.052] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0219.053] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262cb0 [0219.053] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0219.053] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\System\\ado\\en-US\\*", lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb2730, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ec00 [0219.053] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0219.053] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0219.053] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0219.053] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb2730, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.054] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0219.054] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0219.054] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0219.054] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0219.054] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b9483e2, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb3fb1900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msader15.dll.mui", cAlternateFileName="")) returned 1 [0219.054] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0219.055] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21ff68 [0219.055] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219478 [0219.055] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ff68 | out: hHeap=0x1f0000) returned 1 [0219.055] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0219.055] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0219.056] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\ado\\en-US\\msader15.dll.mui" (normalized: "c:\\program files\\common files\\system\\ado\\en-us\\msader15.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.056] GetLastError () returned 0x5 [0219.056] GetLastError () returned 0x5 [0219.056] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b9483e2, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb3fb1900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msader15.dll.mui", cAlternateFileName="")) returned 0 [0219.056] FindClose (in: hFindFile=0x24ec00 | out: hFindFile=0x24ec00) returned 1 [0219.057] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219478 | out: hHeap=0x1f0000) returned 1 [0219.057] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262cb0 | out: hHeap=0x1f0000) returned 1 [0219.057] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0219.057] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233c90 | out: hHeap=0x1f0000) returned 1 [0219.057] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0219.057] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235908 | out: hHeap=0x1f0000) returned 1 [0219.058] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e30 | out: hHeap=0x1f0000) returned 1 [0219.058] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263178 | out: hHeap=0x1f0000) returned 1 [0219.058] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238488 | out: hHeap=0x1f0000) returned 1 [0219.058] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346b0 | out: hHeap=0x1f0000) returned 1 [0219.058] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234980 [0219.058] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0219.058] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x261ff0 [0219.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235a40 [0219.059] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\System\\en-US\\*", lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb3579, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e980 [0219.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235eb8 [0219.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235a40 | out: hHeap=0x1f0000) returned 1 [0219.059] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0219.059] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb3579, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.060] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235d80 [0219.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235eb8 | out: hHeap=0x1f0000) returned 1 [0219.060] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0219.060] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0219.060] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dd86035, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x755f99d9, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x75fdf500, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32res.dll.mui", cAlternateFileName="")) returned 1 [0219.060] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0219.060] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235de8 [0219.060] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221708 [0219.061] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235de8 | out: hHeap=0x1f0000) returned 1 [0219.061] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235d80 | out: hHeap=0x1f0000) returned 1 [0219.061] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0219.062] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\en-US\\wab32res.dll.mui" (normalized: "c:\\program files\\common files\\system\\en-us\\wab32res.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.062] GetLastError () returned 0x5 [0219.062] GetLastError () returned 0x5 [0219.062] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dd86035, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x755f99d9, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x75fdf500, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32res.dll.mui", cAlternateFileName="")) returned 0 [0219.062] FindClose (in: hFindFile=0x24e980 | out: hFindFile=0x24e980) returned 1 [0219.063] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0219.063] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261ff0 | out: hHeap=0x1f0000) returned 1 [0219.063] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0219.063] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234980 | out: hHeap=0x1f0000) returned 1 [0219.063] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234548 [0219.063] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0219.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262cb0 [0219.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235f88 [0219.064] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\System\\msadc\\*", lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d7f179, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e940 [0219.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235a40 [0219.064] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235f88 | out: hHeap=0x1f0000) returned 1 [0219.064] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0219.065] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d7f179, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.065] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235be0 [0219.065] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235a40 | out: hHeap=0x1f0000) returned 1 [0219.065] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0219.065] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0219.065] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41da7e83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41da7e83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41da7e83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x276, dwReserved0=0x0, dwReserved1=0x0, cFileName="adcjavas.inc", cAlternateFileName="")) returned 1 [0219.066] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0219.066] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235a40 [0219.066] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221670 [0219.066] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235a40 | out: hHeap=0x1f0000) returned 1 [0219.066] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235be0 | out: hHeap=0x1f0000) returned 1 [0219.066] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0219.067] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\msadc\\adcjavas.inc" (normalized: "c:\\program files\\common files\\system\\msadc\\adcjavas.inc"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.067] GetLastError () returned 0x5 [0219.068] GetLastError () returned 0x5 [0219.068] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41dce0ea, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41dce0ea, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41dce0ea, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x26f, dwReserved0=0x0, dwReserved1=0x0, cFileName="adcvbs.inc", cAlternateFileName="")) returned 1 [0219.068] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0219.069] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235768 [0219.069] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2215d8 [0219.069] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235768 | out: hHeap=0x1f0000) returned 1 [0219.069] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0219.069] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0219.070] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\msadc\\adcvbs.inc" (normalized: "c:\\program files\\common files\\system\\msadc\\adcvbs.inc"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.070] GetLastError () returned 0x5 [0219.071] GetLastError () returned 0x5 [0219.071] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d805e9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0219.071] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235908 [0219.071] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220e20 [0219.071] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235908 | out: hHeap=0x1f0000) returned 1 [0219.071] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0219.071] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0219.072] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0219.072] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204bb0 [0219.072] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0219.072] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41da7e83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41da7e83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41da7e83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa9c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadce.dll", cAlternateFileName="")) returned 1 [0219.072] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0219.072] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235768 [0219.072] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220fe8 [0219.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235768 | out: hHeap=0x1f0000) returned 1 [0219.073] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0219.073] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0219.074] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\msadc\\msadce.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadce.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.074] GetLastError () returned 0x5 [0219.074] GetLastError () returned 0x5 [0219.074] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41dce0ea, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41dce0ea, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41dce0ea, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcer.dll", cAlternateFileName="")) returned 1 [0219.074] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0219.074] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235a40 [0219.075] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220e20 [0219.075] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235a40 | out: hHeap=0x1f0000) returned 1 [0219.075] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0219.075] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0219.076] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\msadc\\msadcer.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadcer.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.076] GetLastError () returned 0x5 [0219.076] GetLastError () returned 0x5 [0219.076] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41da7e83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41da7e83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41da7e83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3b400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadco.dll", cAlternateFileName="")) returned 1 [0219.077] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0219.077] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235908 [0219.077] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220c58 [0219.077] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235908 | out: hHeap=0x1f0000) returned 1 [0219.077] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0219.077] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0219.078] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\msadc\\msadco.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadco.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.078] GetLastError () returned 0x5 [0219.078] GetLastError () returned 0x5 [0219.079] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41da7e83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41da7e83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41da7e83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcor.dll", cAlternateFileName="")) returned 1 [0219.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0219.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235d80 [0219.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221540 [0219.079] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235d80 | out: hHeap=0x1f0000) returned 1 [0219.079] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0219.079] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0219.080] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\msadc\\msadcor.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadcor.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.081] GetLastError () returned 0x5 [0219.081] GetLastError () returned 0x5 [0219.081] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440870df, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440870df, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440870df, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x44400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadds.dll", cAlternateFileName="")) returned 1 [0219.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0219.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235be0 [0219.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2215d8 [0219.082] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235be0 | out: hHeap=0x1f0000) returned 1 [0219.082] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0219.082] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0219.083] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\msadc\\msadds.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadds.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.083] GetLastError () returned 0x5 [0219.083] GetLastError () returned 0x5 [0219.083] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44060e78, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x44060e78, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x44060e78, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msaddsr.dll", cAlternateFileName="")) returned 1 [0219.419] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0219.419] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235700 [0219.419] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221a98 [0219.419] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0219.419] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0219.419] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0219.419] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\msadc\\msaddsr.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msaddsr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.420] GetLastError () returned 0x5 [0219.420] GetLastError () returned 0x5 [0219.420] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41d5b9b4, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41d5b9b4, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41d5b9b4, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaprsr.dll", cAlternateFileName="")) returned 1 [0219.420] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0219.420] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235700 [0219.420] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2212e0 [0219.420] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0219.420] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0219.420] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0219.421] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\msadc\\msdaprsr.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaprsr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.421] GetLastError () returned 0x5 [0219.421] GetLastError () returned 0x5 [0219.421] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41d5b9b4, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41d5b9b4, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41d5b9b4, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x57000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaprst.dll", cAlternateFileName="")) returned 1 [0219.421] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238438 [0219.421] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236058 [0219.421] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221838 [0219.421] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236058 | out: hHeap=0x1f0000) returned 1 [0219.421] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0219.421] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238438 | out: hHeap=0x1f0000) returned 1 [0219.421] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\msadc\\msdaprst.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaprst.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.422] GetLastError () returned 0x5 [0219.422] GetLastError () returned 0x5 [0219.422] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44060e78, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x44060e78, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x44060e78, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x36200, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdarem.dll", cAlternateFileName="")) returned 1 [0219.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0219.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235700 [0219.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2215d8 [0219.422] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0219.422] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0219.422] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0219.422] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\msadc\\msdarem.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdarem.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.423] GetLastError () returned 0x5 [0219.423] GetLastError () returned 0x5 [0219.423] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4403ac10, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4403ac10, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4403ac10, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaremr.dll", cAlternateFileName="")) returned 1 [0219.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0219.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235d80 [0219.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221708 [0219.423] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235d80 | out: hHeap=0x1f0000) returned 1 [0219.423] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0219.423] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0219.423] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\msadc\\msdaremr.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaremr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.423] GetLastError () returned 0x5 [0219.423] GetLastError () returned 0x5 [0219.424] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440870df, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440870df, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440870df, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x7c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdfmap.dll", cAlternateFileName="")) returned 1 [0219.424] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0219.424] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2359d8 [0219.424] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220cf0 [0219.424] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2359d8 | out: hHeap=0x1f0000) returned 1 [0219.424] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0219.424] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0219.424] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\msadc\\msdfmap.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdfmap.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.424] GetLastError () returned 0x5 [0219.424] GetLastError () returned 0x5 [0219.424] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440870df, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440870df, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440870df, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x7c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdfmap.dll", cAlternateFileName="")) returned 0 [0219.424] FindClose (in: hFindFile=0x24e940 | out: hFindFile=0x24e940) returned 1 [0219.426] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234980 [0219.426] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0219.426] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262980 [0219.426] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0219.426] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\System\\msadc\\en-US\\*", lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d805e9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e900 [0219.427] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0219.427] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0219.427] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0219.427] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d805e9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.428] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2202b0 [0219.428] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0219.428] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0219.428] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0219.428] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b99489e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb198bf00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcer.dll.mui", cAlternateFileName="")) returned 1 [0219.428] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0219.428] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe00 [0219.428] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218978 [0219.428] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe00 | out: hHeap=0x1f0000) returned 1 [0219.428] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2202b0 | out: hHeap=0x1f0000) returned 1 [0219.428] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0219.428] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\msadc\\en-US\\msadcer.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msadcer.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.429] GetLastError () returned 0x5 [0219.429] GetLastError () returned 0x5 [0219.429] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b9e0d51, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb2c9ec00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcor.dll.mui", cAlternateFileName="")) returned 1 [0219.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0219.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220580 [0219.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x2191b8 [0219.429] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220580 | out: hHeap=0x1f0000) returned 1 [0219.429] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218978 | out: hHeap=0x1f0000) returned 1 [0219.429] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0219.430] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\msadc\\en-US\\msadcor.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msadcor.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.430] GetLastError () returned 0x5 [0219.430] GetLastError () returned 0x5 [0219.430] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ba9f918, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb198bf00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x3800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msaddsr.dll.mui", cAlternateFileName="")) returned 1 [0219.430] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0219.430] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0219.431] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218fa8 [0219.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0219.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2191b8 | out: hHeap=0x1f0000) returned 1 [0219.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0219.431] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\msadc\\en-US\\msaddsr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msaddsr.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.431] GetLastError () returned 0x5 [0219.431] GetLastError () returned 0x5 [0219.431] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ba9f918, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb198bf00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaprsr.dll.mui", cAlternateFileName="")) returned 1 [0219.431] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1ff058 [0219.431] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fef0 [0219.432] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219478 [0219.432] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fef0 | out: hHeap=0x1f0000) returned 1 [0219.432] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218fa8 | out: hHeap=0x1f0000) returned 1 [0219.432] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1ff058 | out: hHeap=0x1f0000) returned 1 [0219.432] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaprsr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msdaprsr.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.432] GetLastError () returned 0x5 [0219.432] GetLastError () returned 0x5 [0219.432] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb38282, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb198bf00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaremr.dll.mui", cAlternateFileName="")) returned 1 [0219.432] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1ff058 [0219.432] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f7e8 [0219.432] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218fa8 [0219.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f7e8 | out: hHeap=0x1f0000) returned 1 [0219.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219478 | out: hHeap=0x1f0000) returned 1 [0219.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1ff058 | out: hHeap=0x1f0000) returned 1 [0219.433] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaremr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msdaremr.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.433] GetLastError () returned 0x5 [0219.433] GetLastError () returned 0x5 [0219.433] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb38282, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb198bf00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaremr.dll.mui", cAlternateFileName="")) returned 0 [0219.433] FindClose (in: hFindFile=0x24e900 | out: hFindFile=0x24e900) returned 1 [0219.434] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218fa8 | out: hHeap=0x1f0000) returned 1 [0219.434] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262980 | out: hHeap=0x1f0000) returned 1 [0219.434] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0219.434] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234980 | out: hHeap=0x1f0000) returned 1 [0219.434] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0219.434] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0219.434] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bb0 | out: hHeap=0x1f0000) returned 1 [0219.434] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262cb0 | out: hHeap=0x1f0000) returned 1 [0219.434] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0219.434] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234548 | out: hHeap=0x1f0000) returned 1 [0219.434] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234aa0 [0219.434] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238488 [0219.434] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262980 [0219.434] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235c48 [0219.434] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\System\\Ole DB\\*", lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d8186d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24eac0 [0219.435] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236058 [0219.435] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235c48 | out: hHeap=0x1f0000) returned 1 [0219.435] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0219.435] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d8186d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.435] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235be0 [0219.435] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236058 | out: hHeap=0x1f0000) returned 1 [0219.435] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0219.435] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0219.435] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d8245b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0219.435] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235d80 [0219.435] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220eb8 [0219.435] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235d80 | out: hHeap=0x1f0000) returned 1 [0219.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235be0 | out: hHeap=0x1f0000) returned 1 [0219.436] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0219.436] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0219.436] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204f10 [0219.436] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f770 [0219.436] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440870df, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440870df, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440870df, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x18600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaosp.dll", cAlternateFileName="")) returned 1 [0219.436] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0219.436] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2357d0 [0219.436] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221378 [0219.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2357d0 | out: hHeap=0x1f0000) returned 1 [0219.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0219.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0219.437] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\Ole DB\\msdaosp.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdaosp.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.437] GetLastError () returned 0x5 [0219.437] GetLastError () returned 0x5 [0219.437] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440870df, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440870df, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440870df, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x5be00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaps.dll", cAlternateFileName="")) returned 1 [0219.437] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0219.437] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236058 [0219.437] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220e20 [0219.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236058 | out: hHeap=0x1f0000) returned 1 [0219.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0219.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0219.438] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\Ole DB\\msdaps.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdaps.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.438] GetLastError () returned 0x5 [0219.438] GetLastError () returned 0x5 [0219.438] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41d0f4ea, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41d0f4ea, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41d0f4ea, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xaa800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdasql.dll", cAlternateFileName="")) returned 1 [0219.438] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0219.438] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235700 [0219.439] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221248 [0219.439] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0219.439] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0219.439] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0219.439] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\Ole DB\\msdasql.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdasql.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.439] GetLastError () returned 0x5 [0219.439] GetLastError () returned 0x5 [0219.440] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41d0f4ea, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41d0f4ea, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41d0f4ea, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdasqlr.dll", cAlternateFileName="")) returned 1 [0219.440] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0219.440] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235700 [0219.440] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221118 [0219.440] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0219.440] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0219.440] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0219.440] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\Ole DB\\msdasqlr.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdasqlr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.441] GetLastError () returned 0x5 [0219.441] GetLastError () returned 0x5 [0219.441] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41d0f4ea, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41d0f4ea, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41d0f4ea, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1ca00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdatl3.dll", cAlternateFileName="")) returned 1 [0219.441] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0219.441] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235e50 [0219.441] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220cf0 [0219.441] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235e50 | out: hHeap=0x1f0000) returned 1 [0219.441] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0219.441] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0219.441] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\Ole DB\\msdatl3.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdatl3.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.441] GetLastError () returned 0x5 [0219.442] GetLastError () returned 0x5 [0219.442] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41d0f4ea, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41d0f4ea, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41d0f4ea, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msxactps.dll", cAlternateFileName="")) returned 1 [0219.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0219.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235700 [0219.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2218d0 [0219.442] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0219.442] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0219.442] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0219.442] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\Ole DB\\msxactps.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msxactps.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.443] GetLastError () returned 0x5 [0219.443] GetLastError () returned 0x5 [0219.443] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41ce9283, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41ce9283, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41ce9283, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledb32.dll", cAlternateFileName="")) returned 1 [0219.443] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0219.443] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235700 [0219.443] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221708 [0219.443] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0219.443] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0219.443] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0219.443] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\Ole DB\\oledb32.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\oledb32.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.444] GetLastError () returned 0x5 [0219.444] GetLastError () returned 0x5 [0219.444] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41ce9283, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41ce9283, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41ce9283, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x13000, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledb32r.dll", cAlternateFileName="")) returned 1 [0219.444] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0219.444] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235838 [0219.444] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221a00 [0219.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235838 | out: hHeap=0x1f0000) returned 1 [0219.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0219.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0219.444] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\Ole DB\\oledb32r.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\oledb32r.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.445] GetLastError () returned 0x5 [0219.445] GetLastError () returned 0x5 [0219.445] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41ce9283, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41ce9283, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41ce9283, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x264c, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledbjvs.inc", cAlternateFileName="")) returned 1 [0219.445] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0219.445] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236058 [0219.445] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221248 [0219.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236058 | out: hHeap=0x1f0000) returned 1 [0219.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0219.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0219.446] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\Ole DB\\oledbjvs.inc" (normalized: "c:\\program files\\common files\\system\\ole db\\oledbjvs.inc"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.446] GetLastError () returned 0x5 [0219.446] GetLastError () returned 0x5 [0219.446] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41cc3017, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41cc3017, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41cc3017, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x26f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledbvbs.inc", cAlternateFileName="")) returned 1 [0219.446] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0219.446] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235700 [0219.446] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220d88 [0219.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0219.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0219.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0219.447] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\Ole DB\\oledbvbs.inc" (normalized: "c:\\program files\\common files\\system\\ole db\\oledbvbs.inc"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.448] GetLastError () returned 0x5 [0219.448] GetLastError () returned 0x5 [0219.448] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43c80ffc, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43c80ffc, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43c80ffc, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqloledb.dll", cAlternateFileName="")) returned 1 [0219.448] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0219.448] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236058 [0219.448] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221248 [0219.448] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236058 | out: hHeap=0x1f0000) returned 1 [0219.448] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0219.448] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0219.448] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\Ole DB\\sqloledb.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqloledb.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.448] GetLastError () returned 0x5 [0219.448] GetLastError () returned 0x5 [0219.449] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43c80ffc, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43c80ffc, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43c80ffc, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqloledb.rll", cAlternateFileName="")) returned 1 [0219.449] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0219.449] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235700 [0219.449] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220eb8 [0219.449] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0219.449] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0219.449] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0219.449] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\Ole DB\\sqloledb.rll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqloledb.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.449] GetLastError () returned 0x5 [0219.450] GetLastError () returned 0x5 [0219.450] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43854cb5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43854cb5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43854cb5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x4fa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.dll", cAlternateFileName="")) returned 1 [0219.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0219.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235be0 [0219.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221248 [0219.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235be0 | out: hHeap=0x1f0000) returned 1 [0219.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0219.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0219.450] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\Ole DB\\sqlxmlx.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqlxmlx.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.450] GetLastError () returned 0x5 [0219.450] GetLastError () returned 0x5 [0219.451] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43854cb5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43854cb5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43854cb5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.rll", cAlternateFileName="")) returned 1 [0219.451] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0219.451] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235e50 [0219.451] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220c58 [0219.451] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235e50 | out: hHeap=0x1f0000) returned 1 [0219.451] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0219.451] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0219.451] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\Ole DB\\sqlxmlx.rll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqlxmlx.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.451] GetLastError () returned 0x5 [0219.451] GetLastError () returned 0x5 [0219.452] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43854cb5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43854cb5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43854cb5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.rll", cAlternateFileName="")) returned 0 [0219.452] FindClose (in: hFindFile=0x24eac0 | out: hFindFile=0x24eac0) returned 1 [0219.452] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346b0 [0219.452] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0219.452] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2634a8 [0219.452] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2201c0 [0219.452] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\System\\Ole DB\\en-US\\*", lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d8245b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e680 [0219.452] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fb30 [0219.452] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2201c0 | out: hHeap=0x1f0000) returned 1 [0219.453] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0219.453] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d8245b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.453] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe00 [0219.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fb30 | out: hHeap=0x1f0000) returned 1 [0219.453] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0219.453] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0219.453] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb38282, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb3fb1900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdasqlr.dll.mui", cAlternateFileName="")) returned 1 [0219.453] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1ff058 [0219.453] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220580 [0219.453] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218558 [0219.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220580 | out: hHeap=0x1f0000) returned 1 [0219.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe00 | out: hHeap=0x1f0000) returned 1 [0219.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1ff058 | out: hHeap=0x1f0000) returned 1 [0219.454] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\Ole DB\\en-US\\msdasqlr.dll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\msdasqlr.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.454] GetLastError () returned 0x5 [0219.454] GetLastError () returned 0x5 [0219.454] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b9e0d51, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb3fb1900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xbc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledb32r.dll.mui", cAlternateFileName="")) returned 1 [0219.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1ff058 [0219.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe00 [0219.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218608 [0219.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe00 | out: hHeap=0x1f0000) returned 1 [0219.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218558 | out: hHeap=0x1f0000) returned 1 [0219.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1ff058 | out: hHeap=0x1f0000) returned 1 [0219.455] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\Ole DB\\en-US\\oledb32r.dll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\oledb32r.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.456] GetLastError () returned 0x5 [0219.456] GetLastError () returned 0x5 [0219.456] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb38282, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb3fb1900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xac00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqloledb.rll.mui", cAlternateFileName="")) returned 1 [0219.456] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1ff058 [0219.456] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0219.456] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218978 [0219.456] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0219.456] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218608 | out: hHeap=0x1f0000) returned 1 [0219.456] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1ff058 | out: hHeap=0x1f0000) returned 1 [0219.457] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\Ole DB\\en-US\\sqloledb.rll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\sqloledb.rll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.457] GetLastError () returned 0x5 [0219.457] GetLastError () returned 0x5 [0219.457] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ba9f918, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb65d7300, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.rll.mui", cAlternateFileName="")) returned 1 [0219.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0219.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0219.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218a28 [0219.457] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0219.457] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218978 | out: hHeap=0x1f0000) returned 1 [0219.457] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0219.458] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\Ole DB\\en-US\\sqlxmlx.rll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\sqlxmlx.rll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.458] GetLastError () returned 0x5 [0219.458] GetLastError () returned 0x5 [0219.458] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ba9f918, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb65d7300, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.rll.mui", cAlternateFileName="")) returned 0 [0219.458] FindClose (in: hFindFile=0x24e680 | out: hFindFile=0x24e680) returned 1 [0219.711] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218a28 | out: hHeap=0x1f0000) returned 1 [0219.712] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2634a8 | out: hHeap=0x1f0000) returned 1 [0219.712] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0219.712] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346b0 | out: hHeap=0x1f0000) returned 1 [0219.712] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0219.712] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f770 | out: hHeap=0x1f0000) returned 1 [0219.712] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f10 | out: hHeap=0x1f0000) returned 1 [0219.712] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262980 | out: hHeap=0x1f0000) returned 1 [0219.712] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238488 | out: hHeap=0x1f0000) returned 1 [0219.712] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234aa0 | out: hHeap=0x1f0000) returned 1 [0219.712] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218350 | out: hHeap=0x1f0000) returned 1 [0219.712] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0219.712] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2361f8 | out: hHeap=0x1f0000) returned 1 [0219.712] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235ff0 | out: hHeap=0x1f0000) returned 1 [0219.713] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2362c8 | out: hHeap=0x1f0000) returned 1 [0219.713] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2358a0 | out: hHeap=0x1f0000) returned 1 [0219.713] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261990 | out: hHeap=0x1f0000) returned 1 [0219.713] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380c8 | out: hHeap=0x1f0000) returned 1 [0219.713] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233f60 | out: hHeap=0x1f0000) returned 1 [0219.713] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d00 | out: hHeap=0x1f0000) returned 1 [0219.713] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22bd08 | out: hHeap=0x1f0000) returned 1 [0219.713] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2149c0 | out: hHeap=0x1f0000) returned 1 [0219.713] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c128 | out: hHeap=0x1f0000) returned 1 [0219.713] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22be68 | out: hHeap=0x1f0000) returned 1 [0219.713] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f08 | out: hHeap=0x1f0000) returned 1 [0219.713] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f020 | out: hHeap=0x1f0000) returned 1 [0219.713] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b58 | out: hHeap=0x1f0000) returned 1 [0219.714] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2341a0 | out: hHeap=0x1f0000) returned 1 [0219.714] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2341a0 [0219.714] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0219.714] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262980 [0219.714] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8cc0 [0219.714] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Internet Explorer\\*", lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfbf3a0e6, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xfbf3a0e6, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7f, dwReserved1=0x1e5, cFileName=".", cAlternateFileName="")) returned 0x24ec00 [0219.714] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8ab0 [0219.714] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8cc0 | out: hHeap=0x1f0000) returned 1 [0219.715] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0219.715] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfbf3a0e6, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xfbf3a0e6, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7f, dwReserved1=0x1e5, cFileName="..", cAlternateFileName="")) returned 1 [0219.715] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8dc8 [0219.715] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8ab0 | out: hHeap=0x1f0000) returned 1 [0219.715] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0219.715] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0219.715] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d83d92, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa21685bc, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7f, dwReserved1=0x1e5, cFileName="en-US", cAlternateFileName="")) returned 1 [0219.715] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8ed0 [0219.715] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x218050 [0219.715] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8ed0 | out: hHeap=0x1f0000) returned 1 [0219.715] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8dc8 | out: hHeap=0x1f0000) returned 1 [0219.715] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0219.715] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0219.716] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204dd0 [0219.716] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2358a0 [0219.716] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a4ec31b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a4ec31b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a4ec31b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd000, dwReserved0=0x7f, dwReserved1=0x1e5, cFileName="ExtExport.exe", cAlternateFileName="")) returned 1 [0219.716] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0219.716] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8c10 [0219.716] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217ed0 [0219.716] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8c10 | out: hHeap=0x1f0000) returned 1 [0219.716] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218050 | out: hHeap=0x1f0000) returned 1 [0219.716] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0219.814] CreateFileW (lpFileName="C:\\\\Program Files\\Internet Explorer\\ExtExport.exe" (normalized: "c:\\program files\\internet explorer\\extexport.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.814] GetLastError () returned 0x5 [0219.814] GetLastError () returned 0x5 [0219.815] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a9b1003, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a9b1003, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a9b1003, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd400, dwReserved0=0x7f, dwReserved1=0x1e5, cFileName="hmmapi.dll", cAlternateFileName="")) returned 1 [0219.815] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0219.815] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8e78 [0219.815] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x2183d0 [0219.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8e78 | out: hHeap=0x1f0000) returned 1 [0219.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217ed0 | out: hHeap=0x1f0000) returned 1 [0219.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0219.815] CreateFileW (lpFileName="C:\\\\Program Files\\Internet Explorer\\hmmapi.dll" (normalized: "c:\\program files\\internet explorer\\hmmapi.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.816] GetLastError () returned 0x5 [0219.816] GetLastError () returned 0x5 [0219.816] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a49fe45, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a49fe45, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a49fe45, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x7d000, dwReserved0=0x7f, dwReserved1=0x1e5, cFileName="iediagcmd.exe", cAlternateFileName="")) returned 1 [0219.816] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0219.816] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8f28 [0219.816] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217ed0 [0219.816] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8f28 | out: hHeap=0x1f0000) returned 1 [0219.816] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2183d0 | out: hHeap=0x1f0000) returned 1 [0219.816] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0219.817] CreateFileW (lpFileName="C:\\\\Program Files\\Internet Explorer\\iediagcmd.exe" (normalized: "c:\\program files\\internet explorer\\iediagcmd.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.817] GetLastError () returned 0x5 [0219.817] GetLastError () returned 0x5 [0219.817] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a70c9a1, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xbc534b5e, ftLastAccessTime.dwHighDateTime=0x1d2fa09, ftLastWriteTime.dwLowDateTime=0x4a70c9a1, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x7a800, dwReserved0=0x7f, dwReserved1=0x1e5, cFileName="ieinstal.exe", cAlternateFileName="")) returned 1 [0219.817] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0219.817] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8dc8 [0219.817] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217750 [0219.817] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8dc8 | out: hHeap=0x1f0000) returned 1 [0219.817] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217ed0 | out: hHeap=0x1f0000) returned 1 [0219.817] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0219.818] CreateFileW (lpFileName="C:\\\\Program Files\\Internet Explorer\\ieinstal.exe" (normalized: "c:\\program files\\internet explorer\\ieinstal.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.818] GetLastError () returned 0x5 [0219.818] GetLastError () returned 0x5 [0219.818] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a49fe45, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a49fe45, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a49fe45, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x36c00, dwReserved0=0x7f, dwReserved1=0x1e5, cFileName="ielowutil.exe", cAlternateFileName="")) returned 1 [0219.818] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238488 [0219.818] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8dc8 [0219.818] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x2177d0 [0219.819] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8dc8 | out: hHeap=0x1f0000) returned 1 [0219.819] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217750 | out: hHeap=0x1f0000) returned 1 [0219.819] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238488 | out: hHeap=0x1f0000) returned 1 [0219.819] CreateFileW (lpFileName="C:\\\\Program Files\\Internet Explorer\\ielowutil.exe" (normalized: "c:\\program files\\internet explorer\\ielowutil.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.819] GetLastError () returned 0x5 [0219.819] GetLastError () returned 0x5 [0219.820] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a49fe45, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a49fe45, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a4c60b4, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x63800, dwReserved0=0x7f, dwReserved1=0x1e5, cFileName="IEShims.dll", cAlternateFileName="")) returned 1 [0219.820] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0219.820] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8dc8 [0219.820] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217750 [0219.820] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8dc8 | out: hHeap=0x1f0000) returned 1 [0219.820] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2177d0 | out: hHeap=0x1f0000) returned 1 [0219.820] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0219.821] CreateFileW (lpFileName="C:\\\\Program Files\\Internet Explorer\\IEShims.dll" (normalized: "c:\\program files\\internet explorer\\ieshims.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.821] GetLastError () returned 0x5 [0219.821] GetLastError () returned 0x5 [0219.821] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa182b3a4, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa1c0b0e4, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x8ca44c00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xc9340, dwReserved0=0x7f, dwReserved1=0x1e5, cFileName="iexplore.exe", cAlternateFileName="")) returned 1 [0219.821] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238488 [0219.821] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8ed0 [0219.821] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x2179d0 [0219.821] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8ed0 | out: hHeap=0x1f0000) returned 1 [0219.821] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217750 | out: hHeap=0x1f0000) returned 1 [0219.821] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238488 | out: hHeap=0x1f0000) returned 1 [0219.822] CreateFileW (lpFileName="C:\\\\Program Files\\Internet Explorer\\iexplore.exe" (normalized: "c:\\program files\\internet explorer\\iexplore.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.822] GetLastError () returned 0x5 [0219.822] GetLastError () returned 0x5 [0219.822] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d846d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a485593, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7f, dwReserved1=0x1e5, cFileName="images", cAlternateFileName="")) returned 1 [0219.822] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8c10 [0219.822] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x2181d0 [0219.822] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8c10 | out: hHeap=0x1f0000) returned 1 [0219.822] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2179d0 | out: hHeap=0x1f0000) returned 1 [0219.822] lstrcmpW (lpString1="images", lpString2=".") returned 1 [0219.822] lstrcmpW (lpString1="images", lpString2="..") returned 1 [0219.822] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0219.823] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2361f8 [0219.823] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204dd0 | out: hHeap=0x1f0000) returned 1 [0219.823] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18998f0, ftCreationTime.dwHighDateTime=0x1d5a06a, ftLastAccessTime.dwLowDateTime=0x9edacdc0, ftLastAccessTime.dwHighDateTime=0x1d54126, ftLastWriteTime.dwLowDateTime=0x9edacdc0, ftLastWriteTime.dwHighDateTime=0x1d54126, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x7f, dwReserved1=0x1e5, cFileName="leechftp.exe", cAlternateFileName="")) returned 1 [0219.823] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0219.823] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8ed0 [0219.823] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x2176d0 [0219.823] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8ed0 | out: hHeap=0x1f0000) returned 1 [0219.823] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2181d0 | out: hHeap=0x1f0000) returned 1 [0219.823] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0219.823] CreateFileW (lpFileName="C:\\\\Program Files\\Internet Explorer\\leechftp.exe" (normalized: "c:\\program files\\internet explorer\\leechftp.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.824] GetLastError () returned 0x20 [0219.824] GetLastError () returned 0x20 [0219.824] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2132d, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb77a1634, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb77a1634, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7f, dwReserved1=0x1e5, cFileName="SIGNUP", cAlternateFileName="")) returned 1 [0219.824] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8f28 [0219.824] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217bd0 [0219.824] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8f28 | out: hHeap=0x1f0000) returned 1 [0219.824] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2176d0 | out: hHeap=0x1f0000) returned 1 [0219.824] lstrcmpW (lpString1="SIGNUP", lpString2=".") returned 1 [0219.824] lstrcmpW (lpString1="SIGNUP", lpString2="..") returned 1 [0219.824] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x48) returned 0x2261e8 [0219.824] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235970 [0219.824] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0219.825] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a9b1003, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a9b1003, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a9b1003, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc218, dwReserved0=0x7f, dwReserved1=0x1e5, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1 [0219.825] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0219.825] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8dc8 [0219.825] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217ad0 [0219.825] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8dc8 | out: hHeap=0x1f0000) returned 1 [0219.825] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217bd0 | out: hHeap=0x1f0000) returned 1 [0219.825] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0219.825] CreateFileW (lpFileName="C:\\\\Program Files\\Internet Explorer\\sqmapi.dll" (normalized: "c:\\program files\\internet explorer\\sqmapi.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.826] GetLastError () returned 0x5 [0219.826] GetLastError () returned 0x5 [0219.826] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a9b1003, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a9b1003, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a9b1003, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc218, dwReserved0=0x7f, dwReserved1=0x1e5, cFileName="sqmapi.dll", cAlternateFileName="")) returned 0 [0219.827] FindClose (in: hFindFile=0x24ec00 | out: hFindFile=0x24ec00) returned 1 [0219.827] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234a58 [0219.827] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0219.827] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262fe0 [0219.827] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235e50 [0219.827] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Internet Explorer\\en-US\\*", lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d83d92, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa21685bc, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e5c0 [0219.827] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235be0 [0219.827] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235e50 | out: hHeap=0x1f0000) returned 1 [0219.827] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0219.827] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d83d92, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa21685bc, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.827] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235c48 [0219.828] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235be0 | out: hHeap=0x1f0000) returned 1 [0219.828] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0219.828] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0219.828] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b2dfe94, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x68e10600, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="hmmapi.dll.mui", cAlternateFileName="")) returned 1 [0219.828] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0219.828] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235b78 [0219.828] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220d88 [0219.828] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0219.828] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235c48 | out: hHeap=0x1f0000) returned 1 [0219.828] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0219.828] CreateFileW (lpFileName="C:\\\\Program Files\\Internet Explorer\\en-US\\hmmapi.dll.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\hmmapi.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e65c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.829] GetLastError () returned 0x5 [0219.829] GetLastError () returned 0x5 [0219.829] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b3c4cb5, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x75fdf500, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ieinstal.exe.mui", cAlternateFileName="")) returned 1 [0219.829] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0219.829] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235ff0 [0219.829] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2212e0 [0219.829] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235ff0 | out: hHeap=0x1f0000) returned 1 [0219.829] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0219.829] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0219.829] CreateFileW (lpFileName="C:\\\\Program Files\\Internet Explorer\\en-US\\ieinstal.exe.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\ieinstal.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e65c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.830] GetLastError () returned 0x5 [0219.830] GetLastError () returned 0x5 [0219.830] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b2212c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x74ccc800, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="iexplore.exe.mui", cAlternateFileName="")) returned 1 [0219.830] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0219.830] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235e50 [0219.830] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2211b0 [0219.830] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235e50 | out: hHeap=0x1f0000) returned 1 [0219.830] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0219.830] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0219.831] CreateFileW (lpFileName="C:\\\\Program Files\\Internet Explorer\\en-US\\iexplore.exe.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\iexplore.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e65c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.831] GetLastError () returned 0x5 [0219.831] GetLastError () returned 0x5 [0219.831] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b2212c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x74ccc800, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="iexplore.exe.mui", cAlternateFileName="")) returned 0 [0219.831] FindClose (in: hFindFile=0x24e5c0 | out: hFindFile=0x24e5c0) returned 1 [0219.831] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0219.831] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262fe0 | out: hHeap=0x1f0000) returned 1 [0219.831] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0219.831] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234a58 | out: hHeap=0x1f0000) returned 1 [0219.831] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234b30 [0219.831] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0219.831] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262fe0 [0219.832] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2360c0 [0219.832] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Internet Explorer\\images\\*", lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d846d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a485593, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ea80 [0219.832] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2359d8 [0219.832] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2360c0 | out: hHeap=0x1f0000) returned 1 [0219.832] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0219.832] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d846d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a485593, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.832] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235aa8 [0219.832] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2359d8 | out: hHeap=0x1f0000) returned 1 [0219.832] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0219.832] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0219.832] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a55ea4d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a55ea4d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a55ea4d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1536, dwReserved0=0x0, dwReserved1=0x0, cFileName="bing.ico", cAlternateFileName="")) returned 1 [0219.832] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0219.832] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2359d8 [0219.832] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221670 [0219.832] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2359d8 | out: hHeap=0x1f0000) returned 1 [0219.832] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235aa8 | out: hHeap=0x1f0000) returned 1 [0219.832] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0219.833] CreateFileW (lpFileName="C:\\\\Program Files\\Internet Explorer\\images\\bing.ico" (normalized: "c:\\program files\\internet explorer\\images\\bing.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e65c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.833] GetLastError () returned 0x5 [0219.833] GetLastError () returned 0x5 [0219.833] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a55ea4d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a55ea4d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a55ea4d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1536, dwReserved0=0x0, dwReserved1=0x0, cFileName="bing.ico", cAlternateFileName="")) returned 0 [0219.833] FindClose (in: hFindFile=0x24ea80 | out: hFindFile=0x24ea80) returned 1 [0219.833] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0219.833] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262fe0 | out: hHeap=0x1f0000) returned 1 [0219.833] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0219.833] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b30 | out: hHeap=0x1f0000) returned 1 [0219.833] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234aa0 [0219.833] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0219.833] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262fe0 [0219.833] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2359d8 [0219.833] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Internet Explorer\\SIGNUP\\*", lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2132d, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb77a1634, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb77a1634, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e8c0 [0219.834] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2360c0 [0219.834] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2359d8 | out: hHeap=0x1f0000) returned 1 [0219.834] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0219.834] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2132d, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb77a1634, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb77a1634, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.834] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236128 [0219.834] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2360c0 | out: hHeap=0x1f0000) returned 1 [0219.834] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0219.834] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0219.834] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30c952e, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x970b4468, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x970b4468, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="install.ins", cAlternateFileName="")) returned 1 [0219.834] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0219.834] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235f20 [0219.834] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2214a8 [0219.834] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235f20 | out: hHeap=0x1f0000) returned 1 [0219.834] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236128 | out: hHeap=0x1f0000) returned 1 [0219.834] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0219.835] CreateFileW (lpFileName="C:\\\\Program Files\\Internet Explorer\\SIGNUP\\install.ins" (normalized: "c:\\program files\\internet explorer\\signup\\install.ins"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e65c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0219.835] GetFileType (hFile=0x1f4) returned 0x1 [0219.835] CloseHandle (hObject=0x1f4) returned 1 [0219.835] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0219.835] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Internet Explorer\\SIGNUP\\install.ins" (normalized: "c:\\program files\\internet explorer\\signup\\install.ins"), fInfoLevelId=0x0, lpFileInformation=0x1a1e6ec | out: lpFileInformation=0x1a1e6ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30c952e, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x970b4468, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x970b4468, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1c4)) returned 1 [0219.836] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0219.836] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0219.836] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Internet Explorer\\SIGNUP\\install.ins" (normalized: "c:\\program files\\internet explorer\\signup\\install.ins"), fInfoLevelId=0x0, lpFileInformation=0x1a1e6fc | out: lpFileInformation=0x1a1e6fc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30c952e, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x970b4468, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x970b4468, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1c4)) returned 1 [0219.836] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0219.836] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fc98 [0219.836] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fc98 | out: hHeap=0x1f0000) returned 1 [0219.836] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30c952e, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x970b4468, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x970b4468, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="install.ins", cAlternateFileName="")) returned 0 [0219.836] FindClose (in: hFindFile=0x24e8c0 | out: hFindFile=0x24e8c0) returned 1 [0219.836] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0219.836] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262fe0 | out: hHeap=0x1f0000) returned 1 [0219.836] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0219.836] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234aa0 | out: hHeap=0x1f0000) returned 1 [0219.836] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217ad0 | out: hHeap=0x1f0000) returned 1 [0219.836] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2358a0 | out: hHeap=0x1f0000) returned 1 [0219.837] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2361f8 | out: hHeap=0x1f0000) returned 1 [0219.837] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235970 | out: hHeap=0x1f0000) returned 1 [0219.837] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2261e8 | out: hHeap=0x1f0000) returned 1 [0219.837] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262980 | out: hHeap=0x1f0000) returned 1 [0219.837] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0219.837] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2341a0 | out: hHeap=0x1f0000) returned 1 [0219.837] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233c90 [0219.837] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0219.837] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x261990 [0219.837] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2341a0 [0219.837] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Java\\*", lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xfc0fdd55, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xfc0fdd55, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7f, dwReserved1=0x1e5, cFileName=".", cAlternateFileName="")) returned 0x24ecc0 [0219.837] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0219.837] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x2260f8 [0219.837] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0219.837] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2341a0 | out: hHeap=0x1f0000) returned 1 [0219.837] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0219.838] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xfc0fdd55, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xfc0fdd55, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7f, dwReserved1=0x1e5, cFileName="..", cAlternateFileName="")) returned 1 [0219.838] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0219.838] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x2261e8 [0219.838] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0219.838] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2260f8 | out: hHeap=0x1f0000) returned 1 [0219.838] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0219.838] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0219.838] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe863e770, ftCreationTime.dwHighDateTime=0x1d5bbaf, ftLastAccessTime.dwLowDateTime=0xdf5500e0, ftLastAccessTime.dwHighDateTime=0x1d543b1, ftLastWriteTime.dwLowDateTime=0xdf5500e0, ftLastWriteTime.dwHighDateTime=0x1d543b1, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x7f, dwReserved1=0x1e5, cFileName="fling.exe", cAlternateFileName="")) returned 1 [0219.838] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0219.838] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0219.838] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8f28 [0219.838] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0219.838] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2261e8 | out: hHeap=0x1f0000) returned 1 [0219.838] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0219.839] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\fling.exe" (normalized: "c:\\program files\\java\\fling.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.839] GetLastError () returned 0x20 [0219.839] GetLastError () returned 0x20 [0219.839] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0de2f82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xafba0b05, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7f, dwReserved1=0x1e5, cFileName="jre1.8.0_144", cAlternateFileName="JRE18~1.0_1")) returned 1 [0219.839] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0219.839] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0219.839] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8dc8 [0219.839] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0219.839] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8f28 | out: hHeap=0x1f0000) returned 1 [0219.839] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0219.839] lstrcmpW (lpString1="jre1.8.0_144", lpString2=".") returned 1 [0219.840] lstrcmpW (lpString1="jre1.8.0_144", lpString2="..") returned 1 [0219.840] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204e50 [0219.840] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8e78 [0219.840] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd40ccbe0, ftCreationTime.dwHighDateTime=0x1d5b441, ftLastAccessTime.dwLowDateTime=0x1d073180, ftLastAccessTime.dwHighDateTime=0x1d5785d, ftLastWriteTime.dwLowDateTime=0x1d073180, ftLastWriteTime.dwHighDateTime=0x1d5785d, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x7f, dwReserved1=0x1e5, cFileName="spcwin.exe", cAlternateFileName="")) returned 1 [0219.840] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0219.840] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0219.840] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8ab0 [0219.840] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0219.840] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8dc8 | out: hHeap=0x1f0000) returned 1 [0219.840] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0219.840] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\spcwin.exe" (normalized: "c:\\program files\\java\\spcwin.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.841] GetLastError () returned 0x20 [0219.841] GetLastError () returned 0x20 [0219.841] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6e87e20, ftCreationTime.dwHighDateTime=0x1d5c516, ftLastAccessTime.dwLowDateTime=0xe9906d70, ftLastAccessTime.dwHighDateTime=0x1d5b1d3, ftLastWriteTime.dwLowDateTime=0xe9906d70, ftLastWriteTime.dwHighDateTime=0x1d5b1d3, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x7f, dwReserved1=0x1e5, cFileName="whatsapp.exe", cAlternateFileName="")) returned 1 [0219.841] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0219.841] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0219.841] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8cc0 [0219.841] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0219.841] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8ab0 | out: hHeap=0x1f0000) returned 1 [0219.841] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0219.842] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\whatsapp.exe" (normalized: "c:\\program files\\java\\whatsapp.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.842] GetLastError () returned 0x20 [0219.842] GetLastError () returned 0x20 [0219.842] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd80b1130, ftCreationTime.dwHighDateTime=0x1d53dd5, ftLastAccessTime.dwLowDateTime=0x7a6c97a0, ftLastAccessTime.dwHighDateTime=0x1d56068, ftLastWriteTime.dwLowDateTime=0x7a6c97a0, ftLastWriteTime.dwHighDateTime=0x1d56068, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x7f, dwReserved1=0x1e5, cFileName="winscp.exe", cAlternateFileName="")) returned 1 [0219.842] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0219.842] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0219.842] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8c10 [0219.842] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0219.842] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8cc0 | out: hHeap=0x1f0000) returned 1 [0219.842] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0219.842] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\winscp.exe" (normalized: "c:\\program files\\java\\winscp.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.843] GetLastError () returned 0x20 [0219.843] GetLastError () returned 0x20 [0219.843] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd80b1130, ftCreationTime.dwHighDateTime=0x1d53dd5, ftLastAccessTime.dwLowDateTime=0x7a6c97a0, ftLastAccessTime.dwHighDateTime=0x1d56068, ftLastWriteTime.dwLowDateTime=0x7a6c97a0, ftLastWriteTime.dwHighDateTime=0x1d56068, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x7f, dwReserved1=0x1e5, cFileName="winscp.exe", cAlternateFileName="")) returned 0 [0219.843] FindClose (in: hFindFile=0x24ecc0 | out: hFindFile=0x24ecc0) returned 1 [0219.843] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2343e0 [0219.843] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0219.843] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262980 [0219.843] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8bb8 [0219.843] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\*", lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0de2f82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xafba0b05, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ea80 [0219.843] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8f28 [0219.844] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8bb8 | out: hHeap=0x1f0000) returned 1 [0219.844] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0219.844] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0de2f82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xafba0b05, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.844] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8c68 [0219.844] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8f28 | out: hHeap=0x1f0000) returned 1 [0219.844] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0219.844] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0219.844] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0eaff93, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bin", cAlternateFileName="")) returned 1 [0219.844] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8dc8 [0219.844] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8c68 | out: hHeap=0x1f0000) returned 1 [0219.844] lstrcmpW (lpString1="bin", lpString2=".") returned 1 [0219.844] lstrcmpW (lpString1="bin", lpString2="..") returned 1 [0219.844] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204d30 [0219.844] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8ed0 [0219.844] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xcac, dwReserved0=0x0, dwReserved1=0x0, cFileName="COPYRIGHT", cAlternateFileName="COPYRI~1")) returned 1 [0219.844] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0219.844] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8c68 [0219.844] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217d50 [0219.845] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8c68 | out: hHeap=0x1f0000) returned 1 [0219.845] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8dc8 | out: hHeap=0x1f0000) returned 1 [0219.845] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0219.845] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT" (normalized: "c:\\program files\\java\\jre1.8.0_144\\copyright"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e65c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0219.845] GetFileType (hFile=0x1f4) returned 0x1 [0219.846] CloseHandle (hObject=0x1f4) returned 1 [0219.846] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236058 [0219.846] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT" (normalized: "c:\\program files\\java\\jre1.8.0_144\\copyright"), fInfoLevelId=0x0, lpFileInformation=0x1a1e6ec | out: lpFileInformation=0x1a1e6ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xcac)) returned 1 [0219.846] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236058 | out: hHeap=0x1f0000) returned 1 [0219.846] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2358a0 [0219.846] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT" (normalized: "c:\\program files\\java\\jre1.8.0_144\\copyright"), fInfoLevelId=0x0, lpFileInformation=0x1a1e6fc | out: lpFileInformation=0x1a1e6fc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xcac)) returned 1 [0219.847] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2358a0 | out: hHeap=0x1f0000) returned 1 [0219.847] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235c48 [0219.847] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235c48 | out: hHeap=0x1f0000) returned 1 [0219.847] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe1f09, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xaa80821a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lib", cAlternateFileName="")) returned 1 [0219.847] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8f28 [0219.847] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217d50 | out: hHeap=0x1f0000) returned 1 [0219.847] lstrcmpW (lpString1="lib", lpString2=".") returned 1 [0219.847] lstrcmpW (lpString1="lib", lpString2="..") returned 1 [0219.847] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0219.847] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8dc8 [0219.848] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d30 | out: hHeap=0x1f0000) returned 1 [0219.848] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x0, dwReserved1=0x0, cFileName="LICENSE", cAlternateFileName="")) returned 1 [0219.848] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8c68 [0219.848] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217950 [0219.848] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8c68 | out: hHeap=0x1f0000) returned 1 [0219.848] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8f28 | out: hHeap=0x1f0000) returned 1 [0219.848] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\LICENSE" (normalized: "c:\\program files\\java\\jre1.8.0_144\\license"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e65c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0219.849] GetFileType (hFile=0x1f4) returned 0x1 [0219.849] CloseHandle (hObject=0x1f4) returned 1 [0219.849] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235ff0 [0219.849] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\LICENSE" (normalized: "c:\\program files\\java\\jre1.8.0_144\\license"), fInfoLevelId=0x0, lpFileInformation=0x1a1e6ec | out: lpFileInformation=0x1a1e6ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x28)) returned 1 [0220.101] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235ff0 | out: hHeap=0x1f0000) returned 1 [0220.101] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235b78 [0220.102] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\LICENSE" (normalized: "c:\\program files\\java\\jre1.8.0_144\\license"), fInfoLevelId=0x0, lpFileInformation=0x1a1e6fc | out: lpFileInformation=0x1a1e6fc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x28)) returned 1 [0220.102] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0220.102] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235aa8 [0220.102] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235aa8 | out: hHeap=0x1f0000) returned 1 [0220.102] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="README.txt", cAlternateFileName="")) returned 1 [0220.102] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238438 [0220.102] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8d70 [0220.102] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x2178d0 [0220.102] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d70 | out: hHeap=0x1f0000) returned 1 [0220.102] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217950 | out: hHeap=0x1f0000) returned 1 [0220.102] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238438 | out: hHeap=0x1f0000) returned 1 [0220.102] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\README.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\readme.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e65c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0220.103] GetFileType (hFile=0x214) returned 0x1 [0220.103] CloseHandle (hObject=0x214) returned 1 [0220.103] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235d80 [0220.103] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\README.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\readme.txt"), fInfoLevelId=0x0, lpFileInformation=0x1a1e6ec | out: lpFileInformation=0x1a1e6ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2e)) returned 1 [0220.103] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235d80 | out: hHeap=0x1f0000) returned 1 [0220.103] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235aa8 [0220.103] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\README.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\readme.txt"), fInfoLevelId=0x0, lpFileInformation=0x1a1e6fc | out: lpFileInformation=0x1a1e6fc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2e)) returned 1 [0220.103] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235aa8 | out: hHeap=0x1f0000) returned 1 [0220.103] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2358a0 [0220.103] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2358a0 | out: hHeap=0x1f0000) returned 1 [0220.103] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x210, dwReserved0=0x0, dwReserved1=0x0, cFileName="release", cAlternateFileName="")) returned 1 [0220.104] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8d70 [0220.104] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217850 [0220.104] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d70 | out: hHeap=0x1f0000) returned 1 [0220.104] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2178d0 | out: hHeap=0x1f0000) returned 1 [0220.104] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\release" (normalized: "c:\\program files\\java\\jre1.8.0_144\\release"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e65c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0220.104] GetFileType (hFile=0x214) returned 0x1 [0220.104] CloseHandle (hObject=0x214) returned 1 [0220.104] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235c48 [0220.104] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\release" (normalized: "c:\\program files\\java\\jre1.8.0_144\\release"), fInfoLevelId=0x0, lpFileInformation=0x1a1e6ec | out: lpFileInformation=0x1a1e6ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x210)) returned 1 [0220.105] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235c48 | out: hHeap=0x1f0000) returned 1 [0220.105] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235aa8 [0220.105] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\release" (normalized: "c:\\program files\\java\\jre1.8.0_144\\release"), fInfoLevelId=0x0, lpFileInformation=0x1a1e6fc | out: lpFileInformation=0x1a1e6fc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x210)) returned 1 [0220.105] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235aa8 | out: hHeap=0x1f0000) returned 1 [0220.105] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235b78 [0220.105] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0220.105] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf9bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="THIRDPARTYLICENSEREADME-JAVAFX.txt", cAlternateFileName="THIRDP~1.TXT")) returned 1 [0220.105] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8d70 [0220.105] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8480 [0220.105] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0220.105] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8480 | out: hHeap=0x1f0000) returned 1 [0220.105] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217850 | out: hHeap=0x1f0000) returned 1 [0220.105] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d70 | out: hHeap=0x1f0000) returned 1 [0220.106] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme-javafx.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e65c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0220.106] GetFileType (hFile=0x214) returned 0x1 [0220.106] CloseHandle (hObject=0x214) returned 1 [0220.106] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0220.106] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme-javafx.txt"), fInfoLevelId=0x0, lpFileInformation=0x1a1e6ec | out: lpFileInformation=0x1a1e6ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf9bd)) returned 1 [0220.106] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0220.106] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0220.106] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme-javafx.txt"), fInfoLevelId=0x0, lpFileInformation=0x1a1e6fc | out: lpFileInformation=0x1a1e6fc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf9bd)) returned 1 [0220.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0220.107] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0220.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0220.107] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2371c, dwReserved0=0x0, dwReserved1=0x0, cFileName="THIRDPARTYLICENSEREADME.txt", cAlternateFileName="THIRDP~2.TXT")) returned 1 [0220.107] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233cd8 [0220.107] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8d70 [0220.107] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0220.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d70 | out: hHeap=0x1f0000) returned 1 [0220.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0220.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233cd8 | out: hHeap=0x1f0000) returned 1 [0220.107] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e65c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0220.107] GetFileType (hFile=0x214) returned 0x1 [0220.107] CloseHandle (hObject=0x214) returned 1 [0220.108] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e88 [0220.108] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme.txt"), fInfoLevelId=0x0, lpFileInformation=0x1a1e6ec | out: lpFileInformation=0x1a1e6ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2371c)) returned 1 [0220.108] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e88 | out: hHeap=0x1f0000) returned 1 [0220.108] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0220.108] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme.txt"), fInfoLevelId=0x0, lpFileInformation=0x1a1e6fc | out: lpFileInformation=0x1a1e6fc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2371c)) returned 1 [0220.108] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0220.108] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213680 [0220.108] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213680 | out: hHeap=0x1f0000) returned 1 [0220.108] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Welcome.html", cAlternateFileName="WELCOM~1.HTM")) returned 1 [0220.108] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0220.108] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8d70 [0220.108] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x2179d0 [0220.108] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d70 | out: hHeap=0x1f0000) returned 1 [0220.108] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0220.108] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0220.109] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\Welcome.html" (normalized: "c:\\program files\\java\\jre1.8.0_144\\welcome.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e65c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0220.109] GetFileType (hFile=0x214) returned 0x1 [0220.109] CloseHandle (hObject=0x214) returned 1 [0220.109] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220490 [0220.109] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\Welcome.html" (normalized: "c:\\program files\\java\\jre1.8.0_144\\welcome.html"), fInfoLevelId=0x0, lpFileInformation=0x1a1e6ec | out: lpFileInformation=0x1a1e6ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3bb)) returned 1 [0220.109] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220490 | out: hHeap=0x1f0000) returned 1 [0220.109] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0220.109] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\Welcome.html" (normalized: "c:\\program files\\java\\jre1.8.0_144\\welcome.html"), fInfoLevelId=0x0, lpFileInformation=0x1a1e6fc | out: lpFileInformation=0x1a1e6fc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3bb)) returned 1 [0220.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0220.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2201c0 [0220.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2201c0 | out: hHeap=0x1f0000) returned 1 [0220.110] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Welcome.html", cAlternateFileName="WELCOM~1.HTM")) returned 0 [0220.110] FindClose (in: hFindFile=0x24ea80 | out: hFindFile=0x24ea80) returned 1 [0220.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233f60 [0220.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0220.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x261cc0 [0220.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235838 [0220.110] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\*", lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0eaff93, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcca3ad23, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e6c0 [0220.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2360c0 [0220.111] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235838 | out: hHeap=0x1f0000) returned 1 [0220.111] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0220.111] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0eaff93, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcca3ad23, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.111] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235c48 [0220.111] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2360c0 | out: hHeap=0x1f0000) returned 1 [0220.111] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0220.111] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0220.111] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x172440, dwReserved0=0x0, dwReserved1=0x0, cFileName="awt.dll", cAlternateFileName="")) returned 1 [0220.111] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235d80 [0220.111] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235c48 | out: hHeap=0x1f0000) returned 1 [0220.112] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\awt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\awt.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0220.112] GetFileType (hFile=0x214) returned 0x1 [0220.112] CloseHandle (hObject=0x214) returned 1 [0220.113] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235eb8 [0220.113] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\awt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\awt.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x172440)) returned 1 [0220.113] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235eb8 | out: hHeap=0x1f0000) returned 1 [0220.113] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236058 [0220.113] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\awt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\awt.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x172440)) returned 1 [0220.113] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236058 | out: hHeap=0x1f0000) returned 1 [0220.113] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235f20 [0220.114] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235f20 | out: hHeap=0x1f0000) returned 1 [0220.114] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bci.dll", cAlternateFileName="")) returned 1 [0220.114] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2362c8 [0220.114] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235d80 | out: hHeap=0x1f0000) returned 1 [0220.114] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\bci.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\bci.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0220.114] GetFileType (hFile=0x214) returned 0x1 [0220.115] CloseHandle (hObject=0x214) returned 1 [0220.115] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235eb8 [0220.115] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\bci.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\bci.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4240)) returned 1 [0220.115] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235eb8 | out: hHeap=0x1f0000) returned 1 [0220.115] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236058 [0220.115] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\bci.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\bci.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4240)) returned 1 [0220.115] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236058 | out: hHeap=0x1f0000) returned 1 [0220.115] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235aa8 [0220.116] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235aa8 | out: hHeap=0x1f0000) returned 1 [0220.116] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x27040, dwReserved0=0x0, dwReserved1=0x0, cFileName="dcpr.dll", cAlternateFileName="")) returned 1 [0220.116] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0220.116] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235aa8 [0220.116] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2215d8 [0220.116] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235aa8 | out: hHeap=0x1f0000) returned 1 [0220.116] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2362c8 | out: hHeap=0x1f0000) returned 1 [0220.116] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0220.116] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\dcpr.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dcpr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0220.116] GetFileType (hFile=0x214) returned 0x1 [0220.117] CloseHandle (hObject=0x214) returned 1 [0220.117] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220490 [0220.117] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\dcpr.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dcpr.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x27040)) returned 1 [0220.117] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220490 | out: hHeap=0x1f0000) returned 1 [0220.117] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f770 [0220.117] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\dcpr.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dcpr.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x27040)) returned 1 [0220.117] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f770 | out: hHeap=0x1f0000) returned 1 [0220.117] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fa40 [0220.117] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fa40 | out: hHeap=0x1f0000) returned 1 [0220.117] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x15040, dwReserved0=0x0, dwReserved1=0x0, cFileName="decora_sse.dll", cAlternateFileName="DECORA~1.DLL")) returned 1 [0220.117] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0220.118] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235aa8 [0220.118] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220eb8 [0220.118] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235aa8 | out: hHeap=0x1f0000) returned 1 [0220.118] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0220.118] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0220.118] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\decora_sse.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\decora_sse.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0220.118] GetFileType (hFile=0x214) returned 0x1 [0220.119] CloseHandle (hObject=0x214) returned 1 [0220.119] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0220.119] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\decora_sse.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\decora_sse.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x15040)) returned 1 [0220.119] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0220.119] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0220.119] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\decora_sse.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\decora_sse.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x15040)) returned 1 [0220.119] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0220.119] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220490 [0220.119] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220490 | out: hHeap=0x1f0000) returned 1 [0220.120] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0a0bb4, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xca0a0bb4, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xca4ccf22, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x8f953, dwReserved0=0x0, dwReserved1=0x0, cFileName="deploy.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="DEPLOY~1.ODV")) returned 1 [0220.120] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a230 [0220.120] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235d80 [0220.120] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x22d368 [0220.120] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235d80 | out: hHeap=0x1f0000) returned 1 [0220.120] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0220.120] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a230 | out: hHeap=0x1f0000) returned 1 [0220.121] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\deploy.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\deploy.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0220.121] GetFileType (hFile=0x214) returned 0x1 [0220.121] CloseHandle (hObject=0x214) returned 1 [0220.121] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x229418 [0220.122] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\deploy.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\deploy.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0a0bb4, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xca0a0bb4, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xca4ccf22, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x8f953)) returned 1 [0220.122] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0220.122] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x229418 [0220.122] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\deploy.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\deploy.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0a0bb4, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xca0a0bb4, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xca4ccf22, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x8f953)) returned 1 [0220.122] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0220.122] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x229418 [0220.122] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0220.122] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2891a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dtplugin", cAlternateFileName="")) returned 1 [0220.122] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0220.122] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236058 [0220.122] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220cf0 [0220.122] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236058 | out: hHeap=0x1f0000) returned 1 [0220.123] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d368 | out: hHeap=0x1f0000) returned 1 [0220.123] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0220.123] lstrcmpW (lpString1="dtplugin", lpString2=".") returned 1 [0220.123] lstrcmpW (lpString1="dtplugin", lpString2="..") returned 1 [0220.123] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204f50 [0220.123] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21ff68 [0220.123] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7440, dwReserved0=0x0, dwReserved1=0x0, cFileName="dt_shmem.dll", cAlternateFileName="")) returned 1 [0220.123] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238438 [0220.123] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235ff0 [0220.123] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221540 [0220.123] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235ff0 | out: hHeap=0x1f0000) returned 1 [0220.123] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0220.123] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238438 | out: hHeap=0x1f0000) returned 1 [0220.124] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_shmem.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dt_shmem.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0220.124] GetFileType (hFile=0x214) returned 0x1 [0220.124] CloseHandle (hObject=0x214) returned 1 [0220.125] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0220.125] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_shmem.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dt_shmem.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7440)) returned 1 [0220.125] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0220.125] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0220.125] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_shmem.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dt_shmem.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7440)) returned 1 [0220.125] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0220.125] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fab8 [0220.125] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fab8 | out: hHeap=0x1f0000) returned 1 [0220.125] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x6040, dwReserved0=0x0, dwReserved1=0x0, cFileName="dt_socket.dll", cAlternateFileName="DT_SOC~1.DLL")) returned 1 [0220.125] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0220.125] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2362c8 [0220.126] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220c58 [0220.126] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2362c8 | out: hHeap=0x1f0000) returned 1 [0220.126] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0220.126] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0220.126] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_socket.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dt_socket.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0220.126] GetFileType (hFile=0x214) returned 0x1 [0220.127] CloseHandle (hObject=0x214) returned 1 [0220.127] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220580 [0220.127] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_socket.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dt_socket.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x6040)) returned 1 [0220.127] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220580 | out: hHeap=0x1f0000) returned 1 [0220.127] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fab8 [0220.127] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_socket.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dt_socket.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x6040)) returned 1 [0220.127] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fab8 | out: hHeap=0x1f0000) returned 1 [0220.127] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0220.128] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0220.128] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x21440, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.dll", cAlternateFileName="")) returned 1 [0220.128] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0220.128] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236128 [0220.128] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221b30 [0220.128] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236128 | out: hHeap=0x1f0000) returned 1 [0220.128] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0220.128] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0220.128] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\eula.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\eula.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0220.129] GetFileType (hFile=0x214) returned 0x1 [0220.129] CloseHandle (hObject=0x214) returned 1 [0220.129] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0220.129] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\eula.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\eula.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x21440)) returned 1 [0220.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0220.129] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0220.129] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\eula.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\eula.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x21440)) returned 1 [0220.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0220.129] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0220.130] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0220.130] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x43040, dwReserved0=0x0, dwReserved1=0x0, cFileName="fontmanager.dll", cAlternateFileName="FONTMA~1.DLL")) returned 1 [0220.130] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0220.130] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2362c8 [0220.130] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221968 [0220.130] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2362c8 | out: hHeap=0x1f0000) returned 1 [0220.130] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0220.130] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0220.131] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\fontmanager.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\fontmanager.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0220.131] GetFileType (hFile=0x214) returned 0x1 [0220.132] CloseHandle (hObject=0x214) returned 1 [0220.132] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0220.132] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\fontmanager.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\fontmanager.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x43040)) returned 1 [0220.132] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0220.132] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2203a0 [0220.132] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\fontmanager.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\fontmanager.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x43040)) returned 1 [0220.133] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2203a0 | out: hHeap=0x1f0000) returned 1 [0220.133] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220490 [0220.133] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220490 | out: hHeap=0x1f0000) returned 1 [0220.133] GetLastError () returned 0x0 [0220.133] CryptAcquireContextA (in: phProv=0x1a1daf0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1a1daf0*=0x213130) returned 1 [0220.134] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238208 | out: pbBuffer=0x238208) returned 1 [0220.134] CryptReleaseContext (hProv=0x213130, dwFlags=0x0) returned 1 [0220.134] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0220.134] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x251068 [0220.134] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x232dd8 [0220.134] QueryPerformanceCounter (in: lpPerformanceCount=0x1a1da84 | out: lpPerformanceCount=0x1a1da84*=37750314563) returned 1 [0220.134] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1a1dac4 | out: lpSystemTimeAsFileTime=0x1a1dac4) [0220.134] QueryPerformanceCounter (in: lpPerformanceCount=0x1a1da84 | out: lpPerformanceCount=0x1a1da84*=37750338742) returned 1 [0220.135] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1a1dac4 | out: lpSystemTimeAsFileTime=0x1a1dac4) [0220.135] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238fd8 [0220.135] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x25a8a8 [0220.135] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2337b0 [0220.135] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x237610 [0220.135] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffa0 [0220.135] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206658 [0220.135] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffb8 [0220.135] GetLastError () returned 0x0 [0220.136] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\fontmanager.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\fontmanager.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d990, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0220.136] GetFileType (hFile=0x214) returned 0x1 [0220.137] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b10 [0220.137] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ad0 [0220.138] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\fontmanager.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\fontmanager.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d9c0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0220.138] GetFileType (hFile=0x1e8) returned 0x1 [0220.138] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c30 [0220.138] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f10 [0220.138] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2610a8 [0220.139] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b20 [0220.139] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a90 [0220.140] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\fontmanager.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\fontmanager.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d90c, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0220.140] GetFileType (hFile=0x1f4) returned 0x1 [0220.140] GetLastError () returned 0xb7 [0220.140] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\fontmanager.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\fontmanager.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d90c, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x234 [0220.141] GetFileType (hFile=0x234) returned 0x1 [0220.141] GetLastError () returned 0xb7 [0220.141] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\fontmanager.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\fontmanager.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d904, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0220.141] GetFileType (hFile=0x1ac) returned 0x1 [0220.142] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28efd8 [0220.142] ReadFile (in: hFile=0x1ac, lpBuffer=0x28efd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1d860, lpOverlapped=0x0 | out: lpBuffer=0x28efd8*, lpNumberOfBytesRead=0x1a1d860*=0x1000, lpOverlapped=0x0) returned 1 [0220.415] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24b1d8 [0220.416] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x297018 [0220.419] GetLastError () returned 0x0 [0220.433] CloseHandle (hObject=0x214) returned 1 [0220.441] CloseHandle (hObject=0x1e8) returned 1 [0220.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238950 [0220.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238960 [0220.442] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\fontmanager.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\fontmanager.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d9c0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0220.449] GetFileType (hFile=0x1e8) returned 0x1 [0220.450] GetLastError () returned 0xb7 [0220.452] CloseHandle (hObject=0x1e8) returned 1 [0220.452] DeleteFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\fontmanager.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\fontmanager.dll")) returned 0 [0220.452] GetLastError () returned 0x20 [0220.452] GetLastError () returned 0x20 [0220.452] CryptAcquireContextA (in: phProv=0x1a1daf0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1a1daf0*=0x213460) returned 1 [0220.454] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238370 | out: pbBuffer=0x238370) returned 1 [0220.454] CryptReleaseContext (hProv=0x213460, dwFlags=0x0) returned 1 [0220.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0220.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238438 [0220.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238370 [0220.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238e50 [0220.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238438 | out: hHeap=0x1f0000) returned 1 [0220.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0220.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238e50 | out: hHeap=0x1f0000) returned 1 [0220.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8848 [0220.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210198 [0220.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x235908 [0220.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238438 [0220.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285cf8 [0220.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cf0 [0220.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235c48 [0220.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238618 [0220.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x284f90 [0220.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387f0 [0220.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385f0 [0220.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101b0 [0220.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238900 [0220.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238500 [0220.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0220.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0220.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238500 | out: hHeap=0x1f0000) returned 1 [0220.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238900 | out: hHeap=0x1f0000) returned 1 [0220.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0220.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385f0 | out: hHeap=0x1f0000) returned 1 [0220.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387f0 | out: hHeap=0x1f0000) returned 1 [0220.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x284f90 | out: hHeap=0x1f0000) returned 1 [0220.456] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238618 | out: hHeap=0x1f0000) returned 1 [0220.456] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235c48 | out: hHeap=0x1f0000) returned 1 [0220.456] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238f68 [0220.456] GetLastError () returned 0x0 [0220.456] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1a1d680 | out: lpSystemTimeAsFileTime=0x1a1d680) [0220.456] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238840 [0220.456] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385f0 [0220.456] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cb0 [0220.456] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cb0 | out: hHeap=0x1f0000) returned 1 [0220.456] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385f0 | out: hHeap=0x1f0000) returned 1 [0220.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238578 [0220.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d10 [0220.457] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d10 | out: hHeap=0x1f0000) returned 1 [0220.457] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238578 | out: hHeap=0x1f0000) returned 1 [0220.457] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238840 | out: hHeap=0x1f0000) returned 1 [0220.457] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0220.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238fa0 [0220.457] GetLastError () returned 0x0 [0220.457] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\fontmanager.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\fontmanager.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d9f0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0220.458] GetFileType (hFile=0x1e8) returned 0x1 [0220.458] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x291ff0 [0220.458] SetFilePointerEx (in: hFile=0x1e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1a1d978 | out: lpNewFilePointer=0x0) returned 1 [0220.740] GetLastError () returned 0xb7 [0220.740] CloseHandle (hObject=0x1e8) returned 1 [0220.741] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238820 | out: hHeap=0x1f0000) returned 1 [0220.741] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238920 | out: hHeap=0x1f0000) returned 1 [0220.741] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285098 | out: hHeap=0x1f0000) returned 1 [0220.741] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285cf8 | out: hHeap=0x1f0000) returned 1 [0220.741] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238438 | out: hHeap=0x1f0000) returned 1 [0220.741] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cf0 | out: hHeap=0x1f0000) returned 1 [0220.741] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235908 | out: hHeap=0x1f0000) returned 1 [0220.742] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0220.742] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8848 | out: hHeap=0x1f0000) returned 1 [0220.742] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233350 | out: hHeap=0x1f0000) returned 1 [0220.742] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0220.742] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0220.742] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x255c88 | out: hHeap=0x1f0000) returned 1 [0220.742] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233238 | out: hHeap=0x1f0000) returned 1 [0220.742] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238f30 | out: hHeap=0x1f0000) returned 1 [0220.742] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388a0 | out: hHeap=0x1f0000) returned 1 [0220.742] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0220.742] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238780 | out: hHeap=0x1f0000) returned 1 [0220.743] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388f0 | out: hHeap=0x1f0000) returned 1 [0220.743] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff70 | out: hHeap=0x1f0000) returned 1 [0220.743] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0220.743] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388e0 | out: hHeap=0x1f0000) returned 1 [0220.743] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285ae8 | out: hHeap=0x1f0000) returned 1 [0220.743] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384d8 | out: hHeap=0x1f0000) returned 1 [0220.743] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2358a0 | out: hHeap=0x1f0000) returned 1 [0220.743] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234860 | out: hHeap=0x1f0000) returned 1 [0220.743] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0220.743] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0220.744] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234ae8 | out: hHeap=0x1f0000) returned 1 [0220.744] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238960 | out: hHeap=0x1f0000) returned 1 [0220.744] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238950 | out: hHeap=0x1f0000) returned 1 [0220.744] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28efd8 | out: hHeap=0x1f0000) returned 1 [0220.744] CloseHandle (hObject=0x1ac) returned 1 [0220.744] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b30 | out: hHeap=0x1f0000) returned 1 [0220.745] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a70 | out: hHeap=0x1f0000) returned 1 [0220.745] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2242a0 | out: hHeap=0x1f0000) returned 1 [0220.745] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24b1d8 | out: hHeap=0x1f0000) returned 1 [0220.745] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210018 | out: hHeap=0x1f0000) returned 1 [0220.745] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bb0 | out: hHeap=0x1f0000) returned 1 [0220.745] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x297018 | out: hHeap=0x1f0000) returned 1 [0220.745] CloseHandle (hObject=0x234) returned 1 [0220.746] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b70 | out: hHeap=0x1f0000) returned 1 [0220.746] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b50 | out: hHeap=0x1f0000) returned 1 [0220.746] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261388 | out: hHeap=0x1f0000) returned 1 [0220.746] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c30 | out: hHeap=0x1f0000) returned 1 [0220.746] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d368 | out: hHeap=0x1f0000) returned 1 [0220.746] CloseHandle (hObject=0x1f4) returned 1 [0220.747] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a90 | out: hHeap=0x1f0000) returned 1 [0220.747] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b20 | out: hHeap=0x1f0000) returned 1 [0220.747] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2610a8 | out: hHeap=0x1f0000) returned 1 [0220.747] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ad0 | out: hHeap=0x1f0000) returned 1 [0220.747] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b10 | out: hHeap=0x1f0000) returned 1 [0220.747] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a10 | out: hHeap=0x1f0000) returned 1 [0220.747] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b40 | out: hHeap=0x1f0000) returned 1 [0220.747] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0220.748] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25a8a8 | out: hHeap=0x1f0000) returned 1 [0220.748] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2337b0 | out: hHeap=0x1f0000) returned 1 [0220.748] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206658 | out: hHeap=0x1f0000) returned 1 [0220.748] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffb8 | out: hHeap=0x1f0000) returned 1 [0220.748] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffa0 | out: hHeap=0x1f0000) returned 1 [0220.748] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237610 | out: hHeap=0x1f0000) returned 1 [0220.748] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x251068 | out: hHeap=0x1f0000) returned 1 [0220.748] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232dd8 | out: hHeap=0x1f0000) returned 1 [0220.748] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2392b0 | out: hHeap=0x1f0000) returned 1 [0220.748] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0220.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262fe0 | out: hHeap=0x1f0000) returned 1 [0220.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233cd8 | out: hHeap=0x1f0000) returned 1 [0220.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0220.749] DeleteFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\fontmanager.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\fontmanager.dll")) returned 1 [0220.750] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2da40, dwReserved0=0x0, dwReserved1=0x0, cFileName="fxplugins.dll", cAlternateFileName="FXPLUG~1.DLL")) returned 1 [0220.751] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0220.751] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235d80 [0220.751] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220d88 [0220.751] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235d80 | out: hHeap=0x1f0000) returned 1 [0220.751] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0220.751] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0220.752] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\fxplugins.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\fxplugins.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0220.752] GetFileType (hFile=0x1f4) returned 0x1 [0220.753] CloseHandle (hObject=0x1f4) returned 1 [0220.753] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f770 [0220.753] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\fxplugins.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\fxplugins.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2da40)) returned 1 [0220.753] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f770 | out: hHeap=0x1f0000) returned 1 [0220.753] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220508 [0220.753] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\fxplugins.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\fxplugins.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2da40)) returned 1 [0220.754] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220508 | out: hHeap=0x1f0000) returned 1 [0220.754] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220508 [0220.754] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220508 | out: hHeap=0x1f0000) returned 1 [0220.754] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x40e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="glass.dll", cAlternateFileName="")) returned 1 [0220.754] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0220.754] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235f20 [0220.754] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221b30 [0220.754] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235f20 | out: hHeap=0x1f0000) returned 1 [0220.754] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0220.754] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0220.755] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\glass.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\glass.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0220.755] GetFileType (hFile=0x1f4) returned 0x1 [0220.756] CloseHandle (hObject=0x1f4) returned 1 [0220.756] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220508 [0220.756] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\glass.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\glass.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x40e40)) returned 1 [0220.756] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220508 | out: hHeap=0x1f0000) returned 1 [0220.756] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fa40 [0220.756] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\glass.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\glass.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x40e40)) returned 1 [0220.757] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fa40 | out: hHeap=0x1f0000) returned 1 [0220.757] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220580 [0220.757] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220580 | out: hHeap=0x1f0000) returned 1 [0220.757] GetLastError () returned 0x0 [0220.757] CryptAcquireContextA (in: phProv=0x1a1daf0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1a1daf0*=0x212d78) returned 1 [0220.758] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238140 | out: pbBuffer=0x238140) returned 1 [0220.758] CryptReleaseContext (hProv=0x212d78, dwFlags=0x0) returned 1 [0220.758] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0220.758] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x255c88 [0220.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2338c8 [0220.759] QueryPerformanceCounter (in: lpPerformanceCount=0x1a1da84 | out: lpPerformanceCount=0x1a1da84*=37812761425) returned 1 [0220.759] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1a1dac4 | out: lpSystemTimeAsFileTime=0x1a1dac4) [0220.759] QueryPerformanceCounter (in: lpPerformanceCount=0x1a1da84 | out: lpPerformanceCount=0x1a1da84*=37812798567) returned 1 [0220.759] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1a1dac4 | out: lpSystemTimeAsFileTime=0x1a1dac4) [0220.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238cc8 [0220.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x251068 [0220.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x233580 [0220.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x237130 [0220.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff70 [0220.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206628 [0220.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffa0 [0220.760] GetLastError () returned 0x0 [0220.760] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\glass.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\glass.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d990, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0220.761] GetFileType (hFile=0x1f4) returned 0x1 [0220.761] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a90 [0220.761] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ad0 [0220.762] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\glass.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\glass.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d9c0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x234 [0220.762] GetFileType (hFile=0x234) returned 0x1 [0220.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e90 [0220.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bb0 [0220.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261160 [0220.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b10 [0220.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b20 [0220.763] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\glass.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\glass.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d90c, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0220.763] GetFileType (hFile=0x1ac) returned 0x1 [0220.764] GetLastError () returned 0xb7 [0220.764] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\glass.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\glass.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d90c, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0220.764] GetFileType (hFile=0x1e8) returned 0x1 [0220.764] GetLastError () returned 0xb7 [0220.764] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\glass.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\glass.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d904, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0220.765] GetFileType (hFile=0x1b0) returned 0x1 [0220.765] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28efd8 [0220.765] ReadFile (in: hFile=0x1b0, lpBuffer=0x28efd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1d860, lpOverlapped=0x0 | out: lpBuffer=0x28efd8*, lpNumberOfBytesRead=0x1a1d860*=0x1000, lpOverlapped=0x0) returned 1 [0220.767] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24b1d8 [0220.767] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x287fa0 [0220.767] GetLastError () returned 0x0 [0220.969] CloseHandle (hObject=0x1f4) returned 1 [0220.977] CloseHandle (hObject=0x234) returned 1 [0220.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238aa0 [0220.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ba0 [0221.162] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\glass.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\glass.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d9c0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0221.169] GetFileType (hFile=0x21c) returned 0x1 [0221.169] GetLastError () returned 0xb7 [0221.171] CloseHandle (hObject=0x21c) returned 1 [0221.172] DeleteFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\glass.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\glass.dll")) returned 0 [0221.172] GetLastError () returned 0x20 [0221.172] GetLastError () returned 0x20 [0221.172] CryptAcquireContextA (in: phProv=0x1a1daf0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1a1daf0*=0x212d78) returned 1 [0221.173] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238230 | out: pbBuffer=0x238230) returned 1 [0221.173] CryptReleaseContext (hProv=0x212d78, dwFlags=0x0) returned 1 [0221.173] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0221.173] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381b8 [0221.174] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238230 [0221.174] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c20 [0221.174] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0221.174] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0221.174] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c20 | out: hHeap=0x1f0000) returned 1 [0221.174] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8008 [0221.174] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffd0 [0221.174] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x235de8 [0221.174] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238320 [0221.174] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x284f90 [0221.174] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bf0 [0221.174] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235eb8 [0221.174] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2381b8 [0221.174] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2851a0 [0221.175] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ae0 [0221.175] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0221.175] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210078 [0221.175] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b60 [0221.175] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238438 [0221.175] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2100a8 [0221.175] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2100a8 | out: hHeap=0x1f0000) returned 1 [0221.175] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238438 | out: hHeap=0x1f0000) returned 1 [0221.175] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b60 | out: hHeap=0x1f0000) returned 1 [0221.175] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210078 | out: hHeap=0x1f0000) returned 1 [0221.175] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0221.175] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ae0 | out: hHeap=0x1f0000) returned 1 [0221.175] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2851a0 | out: hHeap=0x1f0000) returned 1 [0221.176] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0221.176] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235eb8 | out: hHeap=0x1f0000) returned 1 [0221.176] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238f30 [0221.176] GetLastError () returned 0x0 [0221.176] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1a1d680 | out: lpSystemTimeAsFileTime=0x1a1d680) [0221.176] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238ae0 [0221.176] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0221.176] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c30 [0221.176] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c30 | out: hHeap=0x1f0000) returned 1 [0221.176] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0221.176] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0221.176] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c70 [0221.176] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c70 | out: hHeap=0x1f0000) returned 1 [0221.177] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0221.177] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ae0 | out: hHeap=0x1f0000) returned 1 [0221.177] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0221.177] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238fa0 [0221.177] GetLastError () returned 0x0 [0221.177] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\glass.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\glass.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d9f0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0221.178] GetFileType (hFile=0x21c) returned 0x1 [0221.179] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28cfc8 [0221.179] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1a1d978 | out: lpNewFilePointer=0x0) returned 1 [0221.180] GetLastError () returned 0xb7 [0221.180] CloseHandle (hObject=0x21c) returned 1 [0221.180] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b60 | out: hHeap=0x1f0000) returned 1 [0221.180] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389e0 | out: hHeap=0x1f0000) returned 1 [0221.181] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2858d8 | out: hHeap=0x1f0000) returned 1 [0221.181] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x284f90 | out: hHeap=0x1f0000) returned 1 [0221.181] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0221.181] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bf0 | out: hHeap=0x1f0000) returned 1 [0221.181] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235de8 | out: hHeap=0x1f0000) returned 1 [0221.181] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffd0 | out: hHeap=0x1f0000) returned 1 [0221.181] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8008 | out: hHeap=0x1f0000) returned 1 [0221.181] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233238 | out: hHeap=0x1f0000) returned 1 [0221.181] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0221.182] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0221.182] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x252370 | out: hHeap=0x1f0000) returned 1 [0221.182] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233120 | out: hHeap=0x1f0000) returned 1 [0221.182] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238d38 | out: hHeap=0x1f0000) returned 1 [0221.182] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b80 | out: hHeap=0x1f0000) returned 1 [0221.182] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff28 | out: hHeap=0x1f0000) returned 1 [0221.182] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0221.182] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ac0 | out: hHeap=0x1f0000) returned 1 [0221.182] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20fef8 | out: hHeap=0x1f0000) returned 1 [0221.182] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0221.183] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a40 | out: hHeap=0x1f0000) returned 1 [0221.183] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2857d0 | out: hHeap=0x1f0000) returned 1 [0221.183] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0221.183] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236260 | out: hHeap=0x1f0000) returned 1 [0221.183] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234ae8 | out: hHeap=0x1f0000) returned 1 [0221.183] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0221.183] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0221.183] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234860 | out: hHeap=0x1f0000) returned 1 [0221.183] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ba0 | out: hHeap=0x1f0000) returned 1 [0221.183] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238aa0 | out: hHeap=0x1f0000) returned 1 [0221.184] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28efd8 | out: hHeap=0x1f0000) returned 1 [0221.184] CloseHandle (hObject=0x1b0) returned 1 [0221.184] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b50 | out: hHeap=0x1f0000) returned 1 [0221.185] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b70 | out: hHeap=0x1f0000) returned 1 [0221.185] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223ee0 | out: hHeap=0x1f0000) returned 1 [0221.185] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24b1d8 | out: hHeap=0x1f0000) returned 1 [0221.185] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210090 | out: hHeap=0x1f0000) returned 1 [0221.185] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e90 | out: hHeap=0x1f0000) returned 1 [0221.185] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x287fa0 | out: hHeap=0x1f0000) returned 1 [0221.185] CloseHandle (hObject=0x1e8) returned 1 [0221.186] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b40 | out: hHeap=0x1f0000) returned 1 [0221.186] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b30 | out: hHeap=0x1f0000) returned 1 [0221.186] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261388 | out: hHeap=0x1f0000) returned 1 [0221.186] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cf0 | out: hHeap=0x1f0000) returned 1 [0221.186] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229508 | out: hHeap=0x1f0000) returned 1 [0221.187] CloseHandle (hObject=0x1ac) returned 1 [0221.187] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b20 | out: hHeap=0x1f0000) returned 1 [0221.187] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b10 | out: hHeap=0x1f0000) returned 1 [0221.188] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261160 | out: hHeap=0x1f0000) returned 1 [0221.188] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ad0 | out: hHeap=0x1f0000) returned 1 [0221.188] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a90 | out: hHeap=0x1f0000) returned 1 [0221.188] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a70 | out: hHeap=0x1f0000) returned 1 [0221.188] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a10 | out: hHeap=0x1f0000) returned 1 [0221.188] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0221.188] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x251068 | out: hHeap=0x1f0000) returned 1 [0221.188] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233580 | out: hHeap=0x1f0000) returned 1 [0221.189] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206628 | out: hHeap=0x1f0000) returned 1 [0221.189] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffa0 | out: hHeap=0x1f0000) returned 1 [0221.189] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff70 | out: hHeap=0x1f0000) returned 1 [0221.189] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237130 | out: hHeap=0x1f0000) returned 1 [0221.189] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x255c88 | out: hHeap=0x1f0000) returned 1 [0221.189] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2338c8 | out: hHeap=0x1f0000) returned 1 [0221.189] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2391d0 | out: hHeap=0x1f0000) returned 1 [0221.189] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd88 | out: hHeap=0x1f0000) returned 1 [0221.190] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262fe0 | out: hHeap=0x1f0000) returned 1 [0221.190] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2341a0 | out: hHeap=0x1f0000) returned 1 [0221.190] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0221.190] DeleteFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\glass.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\glass.dll")) returned 1 [0221.192] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x6f440, dwReserved0=0x0, dwReserved1=0x0, cFileName="glib-lite.dll", cAlternateFileName="GLIB-L~1.DLL")) returned 1 [0221.192] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0221.192] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235a40 [0221.192] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2211b0 [0221.192] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235a40 | out: hHeap=0x1f0000) returned 1 [0221.193] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0221.193] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0221.194] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\glib-lite.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\glib-lite.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0221.194] GetFileType (hFile=0x1ac) returned 0x1 [0221.195] CloseHandle (hObject=0x1ac) returned 1 [0221.195] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220508 [0221.195] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\glib-lite.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\glib-lite.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x6f440)) returned 1 [0221.196] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220508 | out: hHeap=0x1f0000) returned 1 [0221.196] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0221.196] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\glib-lite.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\glib-lite.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x6f440)) returned 1 [0221.196] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0221.196] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220508 [0221.196] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220508 | out: hHeap=0x1f0000) returned 1 [0221.197] GetLastError () returned 0x0 [0221.197] CryptAcquireContextA (in: phProv=0x1a1daf0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1a1daf0*=0x212f10) returned 1 [0221.198] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238230 | out: pbBuffer=0x238230) returned 1 [0221.198] CryptReleaseContext (hProv=0x212f10, dwFlags=0x0) returned 1 [0221.198] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0221.199] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x24fd60 [0221.199] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x233008 [0221.199] QueryPerformanceCounter (in: lpPerformanceCount=0x1a1da84 | out: lpPerformanceCount=0x1a1da84*=37857071269) returned 1 [0221.202] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1a1dac4 | out: lpSystemTimeAsFileTime=0x1a1dac4) [0221.202] QueryPerformanceCounter (in: lpPerformanceCount=0x1a1da84 | out: lpPerformanceCount=0x1a1da84*=37857120983) returned 1 [0221.202] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1a1dac4 | out: lpSystemTimeAsFileTime=0x1a1dac4) [0221.203] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239010 [0221.203] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x255c88 [0221.203] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x232ef0 [0221.203] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x236d20 [0221.203] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20fef8 [0221.203] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206838 [0221.203] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff28 [0221.204] GetLastError () returned 0x0 [0221.204] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\glib-lite.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\glib-lite.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d990, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0221.205] GetFileType (hFile=0x1ac) returned 0x1 [0221.205] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ac0 [0221.206] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a70 [0221.207] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\glib-lite.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\glib-lite.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d9c0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0221.207] GetFileType (hFile=0x1e8) returned 0x1 [0221.208] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bf0 [0221.208] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204dd0 [0221.208] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261218 [0221.208] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b60 [0221.506] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ad0 [0221.507] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\glib-lite.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\glib-lite.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d90c, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0221.661] GetFileType (hFile=0x21c) returned 0x1 [0221.661] GetLastError () returned 0xb7 [0221.661] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\glib-lite.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\glib-lite.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d90c, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0221.662] GetFileType (hFile=0x1f4) returned 0x1 [0221.664] GetLastError () returned 0xb7 [0221.664] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\glib-lite.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\glib-lite.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d904, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0221.664] GetFileType (hFile=0x1c0) returned 0x1 [0221.665] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28afb8 [0221.665] ReadFile (in: hFile=0x1c0, lpBuffer=0x28afb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1d860, lpOverlapped=0x0 | out: lpBuffer=0x28afb8*, lpNumberOfBytesRead=0x1a1d860*=0x1000, lpOverlapped=0x0) returned 1 [0221.668] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24ca08 [0221.669] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28dfd0 [0221.669] GetLastError () returned 0x0 [0221.689] CloseHandle (hObject=0x1ac) returned 1 [0221.701] CloseHandle (hObject=0x1e8) returned 1 [0221.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b90 [0221.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b30 [0221.703] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\glib-lite.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\glib-lite.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d9c0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1a4 [0221.975] GetFileType (hFile=0x1a4) returned 0x1 [0221.976] GetLastError () returned 0xb7 [0221.977] CloseHandle (hObject=0x1a4) returned 1 [0221.977] DeleteFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\glib-lite.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\glib-lite.dll")) returned 0 [0221.977] GetLastError () returned 0x20 [0221.977] GetLastError () returned 0x20 [0221.977] CryptAcquireContextA (in: phProv=0x1a1daf0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1a1daf0*=0x212690) returned 1 [0221.978] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238140 | out: pbBuffer=0x238140) returned 1 [0221.978] CryptReleaseContext (hProv=0x212690, dwFlags=0x0) returned 1 [0221.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0221.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238140 [0221.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238208 [0221.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238f68 [0221.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0221.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0221.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238f68 | out: hHeap=0x1f0000) returned 1 [0221.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8060 [0221.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff70 [0221.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x236330 [0221.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238140 [0221.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2858d8 [0221.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cf0 [0221.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235eb8 [0221.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238230 [0221.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2856c8 [0221.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a10 [0221.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0221.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffa0 [0221.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b00 [0221.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0221.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffb8 [0221.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffb8 | out: hHeap=0x1f0000) returned 1 [0221.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0221.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b00 | out: hHeap=0x1f0000) returned 1 [0221.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffa0 | out: hHeap=0x1f0000) returned 1 [0221.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0221.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a10 | out: hHeap=0x1f0000) returned 1 [0221.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2856c8 | out: hHeap=0x1f0000) returned 1 [0221.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0221.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235eb8 | out: hHeap=0x1f0000) returned 1 [0221.980] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238e50 [0221.980] GetLastError () returned 0x0 [0221.980] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1a1d680 | out: lpSystemTimeAsFileTime=0x1a1d680) [0221.980] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238b00 [0221.980] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0221.980] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c70 [0221.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c70 | out: hHeap=0x1f0000) returned 1 [0221.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0221.980] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0221.980] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d90 [0221.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d90 | out: hHeap=0x1f0000) returned 1 [0221.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0221.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b00 | out: hHeap=0x1f0000) returned 1 [0221.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0221.980] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x2391d0 [0221.980] GetLastError () returned 0x0 [0221.981] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\glib-lite.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\glib-lite.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d9f0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1a4 [0221.981] GetFileType (hFile=0x1a4) returned 0x1 [0221.981] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28efd8 [0221.981] SetFilePointerEx (in: hFile=0x1a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1a1d978 | out: lpNewFilePointer=0x0) returned 1 [0221.982] GetLastError () returned 0xb7 [0221.982] CloseHandle (hObject=0x1a4) returned 1 [0221.982] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a50 | out: hHeap=0x1f0000) returned 1 [0221.982] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ba0 | out: hHeap=0x1f0000) returned 1 [0221.982] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2856c8 | out: hHeap=0x1f0000) returned 1 [0221.982] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2858d8 | out: hHeap=0x1f0000) returned 1 [0221.982] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0221.982] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cf0 | out: hHeap=0x1f0000) returned 1 [0221.982] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236330 | out: hHeap=0x1f0000) returned 1 [0221.982] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff70 | out: hHeap=0x1f0000) returned 1 [0221.982] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8060 | out: hHeap=0x1f0000) returned 1 [0221.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232ba8 | out: hHeap=0x1f0000) returned 1 [0221.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0221.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0221.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x258298 | out: hHeap=0x1f0000) returned 1 [0221.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233120 | out: hHeap=0x1f0000) returned 1 [0221.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ec0 | out: hHeap=0x1f0000) returned 1 [0221.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a00 | out: hHeap=0x1f0000) returned 1 [0221.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2100a8 | out: hHeap=0x1f0000) returned 1 [0221.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0221.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238af0 | out: hHeap=0x1f0000) returned 1 [0221.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210078 | out: hHeap=0x1f0000) returned 1 [0221.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0221.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389e0 | out: hHeap=0x1f0000) returned 1 [0221.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x284f90 | out: hHeap=0x1f0000) returned 1 [0221.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0221.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236190 | out: hHeap=0x1f0000) returned 1 [0221.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234818 | out: hHeap=0x1f0000) returned 1 [0221.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238488 | out: hHeap=0x1f0000) returned 1 [0221.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0221.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234590 | out: hHeap=0x1f0000) returned 1 [0221.984] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b30 | out: hHeap=0x1f0000) returned 1 [0221.984] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b90 | out: hHeap=0x1f0000) returned 1 [0221.984] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28afb8 | out: hHeap=0x1f0000) returned 1 [0221.984] CloseHandle (hObject=0x1c0) returned 1 [0221.984] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ae0 | out: hHeap=0x1f0000) returned 1 [0221.984] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a90 | out: hHeap=0x1f0000) returned 1 [0221.984] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224420 | out: hHeap=0x1f0000) returned 1 [0221.984] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24ca08 | out: hHeap=0x1f0000) returned 1 [0221.984] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210018 | out: hHeap=0x1f0000) returned 1 [0221.984] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c50 | out: hHeap=0x1f0000) returned 1 [0221.984] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28dfd0 | out: hHeap=0x1f0000) returned 1 [0221.984] CloseHandle (hObject=0x1f4) returned 1 [0221.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b70 | out: hHeap=0x1f0000) returned 1 [0221.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389f0 | out: hHeap=0x1f0000) returned 1 [0221.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261160 | out: hHeap=0x1f0000) returned 1 [0221.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e70 | out: hHeap=0x1f0000) returned 1 [0221.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0221.985] CloseHandle (hObject=0x21c) returned 1 [0221.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ad0 | out: hHeap=0x1f0000) returned 1 [0221.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b60 | out: hHeap=0x1f0000) returned 1 [0221.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261218 | out: hHeap=0x1f0000) returned 1 [0221.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a70 | out: hHeap=0x1f0000) returned 1 [0221.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ac0 | out: hHeap=0x1f0000) returned 1 [0221.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b50 | out: hHeap=0x1f0000) returned 1 [0221.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a40 | out: hHeap=0x1f0000) returned 1 [0221.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0221.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x255c88 | out: hHeap=0x1f0000) returned 1 [0221.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232ef0 | out: hHeap=0x1f0000) returned 1 [0221.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206838 | out: hHeap=0x1f0000) returned 1 [0221.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff28 | out: hHeap=0x1f0000) returned 1 [0221.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20fef8 | out: hHeap=0x1f0000) returned 1 [0221.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236d20 | out: hHeap=0x1f0000) returned 1 [0221.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24fd60 | out: hHeap=0x1f0000) returned 1 [0221.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233008 | out: hHeap=0x1f0000) returned 1 [0221.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c20 | out: hHeap=0x1f0000) returned 1 [0221.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0221.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263178 | out: hHeap=0x1f0000) returned 1 [0221.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2341a0 | out: hHeap=0x1f0000) returned 1 [0221.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0221.987] DeleteFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\glib-lite.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\glib-lite.dll")) returned 1 [0222.206] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca8f9084, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xca8f9084, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xcb10f519, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x97553, dwReserved0=0x0, dwReserved1=0x0, cFileName="gstreamer-lite.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="GSTREA~1.ODV")) returned 1 [0222.269] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x260ff0 [0222.269] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236260 [0222.269] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2852a8 [0222.269] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236260 | out: hHeap=0x1f0000) returned 1 [0222.270] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0222.270] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ff0 | out: hHeap=0x1f0000) returned 1 [0222.270] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\gstreamer-lite.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\gstreamer-lite.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0222.271] GetFileType (hFile=0x224) returned 0x1 [0222.272] CloseHandle (hObject=0x224) returned 1 [0222.272] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2855c0 [0222.272] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\gstreamer-lite.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\gstreamer-lite.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca8f9084, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xca8f9084, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xcb10f519, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x97553)) returned 1 [0222.272] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2855c0 | out: hHeap=0x1f0000) returned 1 [0222.272] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x284f90 [0222.273] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\gstreamer-lite.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\gstreamer-lite.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca8f9084, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xca8f9084, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xcb10f519, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x97553)) returned 1 [0222.273] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x284f90 | out: hHeap=0x1f0000) returned 1 [0222.273] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x284f90 [0222.273] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x284f90 | out: hHeap=0x1f0000) returned 1 [0222.273] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x26a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="hprof.dll", cAlternateFileName="")) returned 1 [0222.273] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0222.273] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235768 [0222.273] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221410 [0222.273] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235768 | out: hHeap=0x1f0000) returned 1 [0222.273] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2852a8 | out: hHeap=0x1f0000) returned 1 [0222.274] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0222.274] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\hprof.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\hprof.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0222.274] GetFileType (hFile=0x224) returned 0x1 [0222.275] CloseHandle (hObject=0x224) returned 1 [0222.275] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220508 [0222.275] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\hprof.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\hprof.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x26a40)) returned 1 [0222.275] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220508 | out: hHeap=0x1f0000) returned 1 [0222.275] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2203a0 [0222.275] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\hprof.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\hprof.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x26a40)) returned 1 [0222.276] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2203a0 | out: hHeap=0x1f0000) returned 1 [0222.276] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0222.276] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0222.276] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1e240, dwReserved0=0x0, dwReserved1=0x0, cFileName="instrument.dll", cAlternateFileName="INSTRU~1.DLL")) returned 1 [0222.276] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0222.276] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235de8 [0222.276] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221968 [0222.276] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235de8 | out: hHeap=0x1f0000) returned 1 [0222.276] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0222.276] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0222.277] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\instrument.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\instrument.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0222.277] GetFileType (hFile=0x224) returned 0x1 [0222.278] CloseHandle (hObject=0x224) returned 1 [0222.278] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2201c0 [0222.278] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\instrument.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\instrument.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1e240)) returned 1 [0222.278] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2201c0 | out: hHeap=0x1f0000) returned 1 [0222.278] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fc98 [0222.278] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\instrument.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\instrument.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1e240)) returned 1 [0222.279] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fc98 | out: hHeap=0x1f0000) returned 1 [0222.279] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0222.279] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0222.279] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="j2pcsc.dll", cAlternateFileName="")) returned 1 [0222.279] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0222.279] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235eb8 [0222.279] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220f50 [0222.279] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235eb8 | out: hHeap=0x1f0000) returned 1 [0222.280] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0222.280] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0222.280] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pcsc.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\j2pcsc.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0222.280] GetFileType (hFile=0x224) returned 0x1 [0222.281] CloseHandle (hObject=0x224) returned 1 [0222.281] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0222.281] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pcsc.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\j2pcsc.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4a40)) returned 1 [0222.281] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0222.281] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0222.282] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pcsc.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\j2pcsc.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4a40)) returned 1 [0222.282] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0222.282] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220508 [0222.282] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220508 | out: hHeap=0x1f0000) returned 1 [0222.282] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf840, dwReserved0=0x0, dwReserved1=0x0, cFileName="j2pkcs11.dll", cAlternateFileName="")) returned 1 [0222.282] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0222.282] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235f88 [0222.282] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221378 [0222.282] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235f88 | out: hHeap=0x1f0000) returned 1 [0222.282] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0222.283] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0222.283] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pkcs11.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\j2pkcs11.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0222.283] GetFileType (hFile=0x224) returned 0x1 [0222.284] CloseHandle (hObject=0x224) returned 1 [0222.284] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0222.284] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pkcs11.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\j2pkcs11.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf840)) returned 1 [0222.284] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0222.285] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fc98 [0222.285] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pkcs11.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\j2pkcs11.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf840)) returned 1 [0222.285] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fc98 | out: hHeap=0x1f0000) returned 1 [0222.285] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0222.285] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0222.285] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5240, dwReserved0=0x0, dwReserved1=0x0, cFileName="jaas_nt.dll", cAlternateFileName="")) returned 1 [0222.285] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0222.285] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236260 [0222.285] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220eb8 [0222.285] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236260 | out: hHeap=0x1f0000) returned 1 [0222.286] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0222.286] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0222.286] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jaas_nt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jaas_nt.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0222.286] GetFileType (hFile=0x224) returned 0x1 [0222.287] CloseHandle (hObject=0x224) returned 1 [0222.287] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220508 [0222.287] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jaas_nt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jaas_nt.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5240)) returned 1 [0222.287] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220508 | out: hHeap=0x1f0000) returned 1 [0222.288] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0222.288] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jaas_nt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jaas_nt.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5240)) returned 1 [0222.288] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0222.288] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0222.288] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0222.288] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8640, dwReserved0=0x0, dwReserved1=0x0, cFileName="jabswitch.exe", cAlternateFileName="JABSWI~1.EXE")) returned 1 [0222.288] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0222.288] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235de8 [0222.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221670 [0222.289] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235de8 | out: hHeap=0x1f0000) returned 1 [0222.289] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0222.289] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0222.290] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jabswitch.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jabswitch.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0222.290] GetFileType (hFile=0x224) returned 0x1 [0222.291] CloseHandle (hObject=0x224) returned 1 [0222.291] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0222.291] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jabswitch.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jabswitch.exe"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8640)) returned 1 [0222.291] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0222.291] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220328 [0222.291] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jabswitch.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jabswitch.exe"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8640)) returned 1 [0222.291] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220328 | out: hHeap=0x1f0000) returned 1 [0222.292] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fa40 [0222.292] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fa40 | out: hHeap=0x1f0000) returned 1 [0222.292] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="java-rmi.exe", cAlternateFileName="")) returned 1 [0222.292] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0222.292] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235de8 [0222.292] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2211b0 [0222.292] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235de8 | out: hHeap=0x1f0000) returned 1 [0222.292] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0222.293] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0222.293] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\java-rmi.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java-rmi.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0222.293] GetFileType (hFile=0x224) returned 0x1 [0222.294] CloseHandle (hObject=0x224) returned 1 [0222.294] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0222.294] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\java-rmi.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java-rmi.exe"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e40)) returned 1 [0222.294] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0222.294] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fc98 [0222.294] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\java-rmi.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java-rmi.exe"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e40)) returned 1 [0222.295] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fc98 | out: hHeap=0x1f0000) returned 1 [0222.295] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0222.295] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0222.295] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x27040, dwReserved0=0x0, dwReserved1=0x0, cFileName="java.dll", cAlternateFileName="")) returned 1 [0222.295] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0222.295] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236058 [0222.295] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220cf0 [0222.295] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236058 | out: hHeap=0x1f0000) returned 1 [0222.295] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0222.295] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0222.296] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\java.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0222.296] GetFileType (hFile=0x224) returned 0x1 [0222.296] CloseHandle (hObject=0x224) returned 1 [0222.296] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0222.297] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\java.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x27040)) returned 1 [0222.297] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0222.297] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0222.297] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\java.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x27040)) returned 1 [0222.297] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0222.297] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0222.297] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0222.297] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x32840, dwReserved0=0x0, dwReserved1=0x0, cFileName="java.exe", cAlternateFileName="")) returned 1 [0222.297] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0222.297] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235eb8 [0222.298] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221378 [0222.298] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235eb8 | out: hHeap=0x1f0000) returned 1 [0222.298] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0222.298] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0222.298] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\java.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0222.299] GetFileType (hFile=0x224) returned 0x1 [0222.299] CloseHandle (hObject=0x224) returned 1 [0222.299] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220328 [0222.299] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\java.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java.exe"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x32840)) returned 1 [0222.299] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220328 | out: hHeap=0x1f0000) returned 1 [0222.299] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220328 [0222.300] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\java.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java.exe"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x32840)) returned 1 [0222.300] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220328 | out: hHeap=0x1f0000) returned 1 [0222.300] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0222.300] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0222.300] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x22c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="JavaAccessBridge-64.dll", cAlternateFileName="JAVAAC~1.DLL")) returned 1 [0222.300] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239278 [0222.300] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236058 [0222.300] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221410 [0222.300] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236058 | out: hHeap=0x1f0000) returned 1 [0222.300] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0222.300] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239278 | out: hHeap=0x1f0000) returned 1 [0222.301] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\JavaAccessBridge-64.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaaccessbridge-64.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0222.301] GetFileType (hFile=0x224) returned 0x1 [0222.301] CloseHandle (hObject=0x224) returned 1 [0222.302] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2128b0 [0222.302] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\JavaAccessBridge-64.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaaccessbridge-64.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x22c40)) returned 1 [0222.302] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2128b0 | out: hHeap=0x1f0000) returned 1 [0222.302] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0222.302] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\JavaAccessBridge-64.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaaccessbridge-64.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x22c40)) returned 1 [0222.302] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0222.302] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211bf0 [0222.302] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211bf0 | out: hHeap=0x1f0000) returned 1 [0222.302] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2dc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="javacpl.cpl", cAlternateFileName="")) returned 1 [0222.302] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0222.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235a40 [0222.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220d88 [0222.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235a40 | out: hHeap=0x1f0000) returned 1 [0222.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0222.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0222.689] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.cpl" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javacpl.cpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0222.689] GetFileType (hFile=0x1e8) returned 0x1 [0222.690] CloseHandle (hObject=0x1e8) returned 1 [0222.690] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0222.690] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.cpl" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javacpl.cpl"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2dc00)) returned 1 [0222.690] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0222.690] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0222.690] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.cpl" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javacpl.cpl"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2dc00)) returned 1 [0222.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0222.691] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0222.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0222.691] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="javacpl.exe", cAlternateFileName="")) returned 1 [0222.691] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0222.691] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235d80 [0222.691] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221378 [0222.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235d80 | out: hHeap=0x1f0000) returned 1 [0222.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0222.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0222.692] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javacpl.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0222.692] GetFileType (hFile=0x1e8) returned 0x1 [0222.693] CloseHandle (hObject=0x1e8) returned 1 [0222.693] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0222.693] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javacpl.exe"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13a40)) returned 1 [0222.693] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0222.693] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f770 [0222.694] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javacpl.exe"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13a40)) returned 1 [0222.694] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f770 | out: hHeap=0x1f0000) returned 1 [0222.694] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0222.694] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0222.694] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x10e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="javafx_font.dll", cAlternateFileName="JAVAFX~1.DLL")) returned 1 [0222.694] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0222.694] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236260 [0222.694] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220cf0 [0222.694] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236260 | out: hHeap=0x1f0000) returned 1 [0222.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0222.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0222.695] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_font.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0222.695] GetFileType (hFile=0x1e8) returned 0x1 [0222.696] CloseHandle (hObject=0x1e8) returned 1 [0222.696] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0222.696] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_font.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x10e40)) returned 1 [0222.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0222.697] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd88 [0222.697] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_font.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x10e40)) returned 1 [0222.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd88 | out: hHeap=0x1f0000) returned 1 [0222.697] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220238 [0222.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220238 | out: hHeap=0x1f0000) returned 1 [0222.697] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb5f6fbf, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xcb5f6fbf, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xcba95670, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x83753, dwReserved0=0x0, dwReserved1=0x0, cFileName="javafx_font_t2k.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="JAVAFX~1.ODV")) returned 1 [0222.697] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261440 [0222.697] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235c48 [0222.698] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2851a0 [0222.698] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235c48 | out: hHeap=0x1f0000) returned 1 [0222.698] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0222.698] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261440 | out: hHeap=0x1f0000) returned 1 [0222.699] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font_t2k.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_font_t2k.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0222.699] GetFileType (hFile=0x1e8) returned 0x1 [0222.700] CloseHandle (hObject=0x1e8) returned 1 [0222.700] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2855c0 [0222.700] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font_t2k.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_font_t2k.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb5f6fbf, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xcb5f6fbf, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xcba95670, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x83753)) returned 1 [0222.700] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2855c0 | out: hHeap=0x1f0000) returned 1 [0222.701] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2852a8 [0222.701] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font_t2k.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_font_t2k.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb5f6fbf, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xcb5f6fbf, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xcba95670, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x83753)) returned 1 [0222.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2852a8 | out: hHeap=0x1f0000) returned 1 [0222.701] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2855c0 [0222.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2855c0 | out: hHeap=0x1f0000) returned 1 [0222.701] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1f440, dwReserved0=0x0, dwReserved1=0x0, cFileName="javafx_iio.dll", cAlternateFileName="JAVAFX~3.DLL")) returned 1 [0222.701] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0222.701] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235d80 [0222.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2215d8 [0222.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235d80 | out: hHeap=0x1f0000) returned 1 [0222.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2851a0 | out: hHeap=0x1f0000) returned 1 [0222.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0222.703] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_iio.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_iio.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0222.703] GetFileType (hFile=0x1e8) returned 0x1 [0222.704] CloseHandle (hObject=0x1e8) returned 1 [0222.704] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fab8 [0222.704] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_iio.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_iio.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1f440)) returned 1 [0222.704] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fab8 | out: hHeap=0x1f0000) returned 1 [0222.704] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220508 [0222.704] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_iio.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_iio.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1f440)) returned 1 [0222.705] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220508 | out: hHeap=0x1f0000) returned 1 [0222.705] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fc98 [0222.705] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fc98 | out: hHeap=0x1f0000) returned 1 [0222.705] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x32840, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaw.exe", cAlternateFileName="")) returned 1 [0222.705] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0222.705] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236330 [0222.705] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2217a0 [0222.705] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236330 | out: hHeap=0x1f0000) returned 1 [0222.705] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0222.706] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0222.706] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\javaw.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaw.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0222.706] GetFileType (hFile=0x1e8) returned 0x1 [0222.706] CloseHandle (hObject=0x1e8) returned 1 [0222.707] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fc98 [0222.707] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\javaw.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaw.exe"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x32840)) returned 1 [0222.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fc98 | out: hHeap=0x1f0000) returned 1 [0222.707] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220508 [0222.707] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\javaw.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaw.exe"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x32840)) returned 1 [0222.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220508 | out: hHeap=0x1f0000) returned 1 [0222.707] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220328 [0222.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220328 | out: hHeap=0x1f0000) returned 1 [0222.707] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e040, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaws.exe", cAlternateFileName="")) returned 1 [0222.707] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0222.707] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235c48 [0222.707] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221118 [0222.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235c48 | out: hHeap=0x1f0000) returned 1 [0222.708] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0222.708] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0222.708] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\javaws.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaws.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0222.708] GetFileType (hFile=0x1e8) returned 0x1 [0222.709] CloseHandle (hObject=0x1e8) returned 1 [0222.709] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220508 [0222.709] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\javaws.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaws.exe"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e040)) returned 1 [0222.709] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220508 | out: hHeap=0x1f0000) returned 1 [0222.709] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0222.709] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\javaws.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaws.exe"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e040)) returned 1 [0222.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0222.710] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2201c0 [0222.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2201c0 | out: hHeap=0x1f0000) returned 1 [0222.710] GetLastError () returned 0x0 [0222.710] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7440, dwReserved0=0x0, dwReserved1=0x0, cFileName="java_crw_demo.dll", cAlternateFileName="JAVA_C~1.DLL")) returned 1 [0222.710] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238e50 [0222.710] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236330 [0222.710] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2218d0 [0222.711] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236330 | out: hHeap=0x1f0000) returned 1 [0222.711] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0222.711] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238e50 | out: hHeap=0x1f0000) returned 1 [0222.711] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\java_crw_demo.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java_crw_demo.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0222.711] GetFileType (hFile=0x1e8) returned 0x1 [0222.712] CloseHandle (hObject=0x1e8) returned 1 [0222.712] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211bf0 [0222.712] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\java_crw_demo.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java_crw_demo.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7440)) returned 1 [0222.713] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211bf0 | out: hHeap=0x1f0000) returned 1 [0222.713] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0222.713] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\java_crw_demo.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java_crw_demo.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7440)) returned 1 [0222.713] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0222.713] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0222.713] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0222.713] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3840, dwReserved0=0x0, dwReserved1=0x0, cFileName="jawt.dll", cAlternateFileName="")) returned 1 [0222.713] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0222.713] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235a40 [0222.713] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220cf0 [0222.713] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235a40 | out: hHeap=0x1f0000) returned 1 [0222.713] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0222.714] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0222.714] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jawt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jawt.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0222.714] GetFileType (hFile=0x1e8) returned 0x1 [0222.714] CloseHandle (hObject=0x1e8) returned 1 [0222.715] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f770 [0222.715] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jawt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jawt.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3840)) returned 1 [0222.715] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f770 | out: hHeap=0x1f0000) returned 1 [0222.715] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0222.715] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jawt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jawt.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3840)) returned 1 [0222.715] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0222.716] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0222.716] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0222.716] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="JAWTAccessBridge-64.dll", cAlternateFileName="JAWTAC~1.DLL")) returned 1 [0222.716] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238f68 [0222.716] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235a40 [0222.716] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220eb8 [0222.716] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235a40 | out: hHeap=0x1f0000) returned 1 [0222.716] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0222.716] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238f68 | out: hHeap=0x1f0000) returned 1 [0222.717] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\JAWTAccessBridge-64.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jawtaccessbridge-64.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0222.717] GetFileType (hFile=0x1e8) returned 0x1 [0222.717] CloseHandle (hObject=0x1e8) returned 1 [0222.718] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2129c0 [0222.718] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\JAWTAccessBridge-64.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jawtaccessbridge-64.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3c40)) returned 1 [0222.718] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2129c0 | out: hHeap=0x1f0000) returned 1 [0222.718] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0222.718] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\JAWTAccessBridge-64.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jawtaccessbridge-64.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3c40)) returned 1 [0222.718] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0222.718] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0222.718] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0222.718] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x31440, dwReserved0=0x0, dwReserved1=0x0, cFileName="jdwp.dll", cAlternateFileName="")) returned 1 [0222.718] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0222.718] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235d80 [0222.718] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220cf0 [0222.719] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235d80 | out: hHeap=0x1f0000) returned 1 [0222.719] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0222.719] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0222.719] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jdwp.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jdwp.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0222.719] GetFileType (hFile=0x1e8) returned 0x1 [0222.719] CloseHandle (hObject=0x1e8) returned 1 [0222.720] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fa40 [0222.720] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jdwp.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jdwp.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x31440)) returned 1 [0222.720] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fa40 | out: hHeap=0x1f0000) returned 1 [0222.720] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0222.720] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jdwp.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jdwp.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x31440)) returned 1 [0222.720] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0222.720] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fc98 [0222.720] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fc98 | out: hHeap=0x1f0000) returned 1 [0222.720] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x6840, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfr.dll", cAlternateFileName="")) returned 1 [0222.720] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235d80 [0222.720] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0222.721] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jfr.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0222.721] GetFileType (hFile=0x1e8) returned 0x1 [0222.721] CloseHandle (hObject=0x1e8) returned 1 [0222.721] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235c48 [0222.721] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jfr.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfr.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x6840)) returned 1 [0222.722] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235c48 | out: hHeap=0x1f0000) returned 1 [0222.722] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236260 [0222.722] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jfr.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfr.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x6840)) returned 1 [0222.722] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236260 | out: hHeap=0x1f0000) returned 1 [0222.722] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235aa8 [0222.722] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235aa8 | out: hHeap=0x1f0000) returned 1 [0222.722] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x22240, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfxmedia.dll", cAlternateFileName="")) returned 1 [0222.722] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0222.722] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235c48 [0222.723] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2215d8 [0222.723] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235c48 | out: hHeap=0x1f0000) returned 1 [0222.723] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235d80 | out: hHeap=0x1f0000) returned 1 [0222.723] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0222.724] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jfxmedia.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfxmedia.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0222.724] GetFileType (hFile=0x1e8) returned 0x1 [0222.724] CloseHandle (hObject=0x1e8) returned 1 [0222.724] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220328 [0222.725] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jfxmedia.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfxmedia.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x22240)) returned 1 [0222.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220328 | out: hHeap=0x1f0000) returned 1 [0222.725] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0222.725] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jfxmedia.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfxmedia.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x22240)) returned 1 [0222.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0222.725] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fa40 [0222.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fa40 | out: hHeap=0x1f0000) returned 1 [0222.726] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7511d3f, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7511d3f, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa75aa64d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2794a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfxwebkit.dll", cAlternateFileName="JFXWEB~1.DLL")) returned 1 [0222.726] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0222.726] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235d80 [0222.726] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221a00 [0222.726] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235d80 | out: hHeap=0x1f0000) returned 1 [0222.726] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0222.726] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0222.727] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jfxwebkit.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfxwebkit.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0222.727] GetFileType (hFile=0x1e8) returned 0x1 [0222.728] CloseHandle (hObject=0x1e8) returned 1 [0222.728] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220238 [0222.728] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jfxwebkit.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfxwebkit.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7511d3f, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7511d3f, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa75aa64d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2794a40)) returned 1 [0222.729] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220238 | out: hHeap=0x1f0000) returned 1 [0222.729] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220508 [0222.729] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jfxwebkit.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfxwebkit.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7511d3f, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7511d3f, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa75aa64d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2794a40)) returned 1 [0222.729] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220508 | out: hHeap=0x1f0000) returned 1 [0222.729] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fc98 [0222.729] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fc98 | out: hHeap=0x1f0000) returned 1 [0222.729] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa75aa64d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa75aa64d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa75aa64d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="jjs.exe", cAlternateFileName="")) returned 1 [0222.729] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236330 [0222.730] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0222.730] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jjs.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jjs.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0222.731] GetFileType (hFile=0x1e8) returned 0x1 [0222.731] CloseHandle (hObject=0x1e8) returned 1 [0222.732] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235a40 [0222.732] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jjs.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jjs.exe"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa75aa64d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa75aa64d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa75aa64d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e40)) returned 1 [0222.732] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235a40 | out: hHeap=0x1f0000) returned 1 [0222.732] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235f20 [0222.732] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jjs.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jjs.exe"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa75aa64d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa75aa64d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa75aa64d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e40)) returned 1 [0222.733] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235f20 | out: hHeap=0x1f0000) returned 1 [0222.733] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236260 [0222.733] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236260 | out: hHeap=0x1f0000) returned 1 [0222.733] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa75aa64d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa75aa64d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa75aa64d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2aa40, dwReserved0=0x0, dwReserved1=0x0, cFileName="jli.dll", cAlternateFileName="")) returned 1 [0222.733] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235a40 [0222.733] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236330 | out: hHeap=0x1f0000) returned 1 [0222.734] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jli.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jli.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0222.734] GetFileType (hFile=0x1e8) returned 0x1 [0222.985] CloseHandle (hObject=0x1e8) returned 1 [0222.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235f20 [0222.985] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jli.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jli.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa75aa64d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa75aa64d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa75aa64d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2aa40)) returned 1 [0222.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235f20 | out: hHeap=0x1f0000) returned 1 [0222.986] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235c48 [0222.986] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jli.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jli.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa75aa64d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa75aa64d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa75aa64d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2aa40)) returned 1 [0222.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235c48 | out: hHeap=0x1f0000) returned 1 [0222.986] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236058 [0222.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236058 | out: hHeap=0x1f0000) returned 1 [0222.986] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa75aa64d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa75aa64d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa897bfc2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x48440, dwReserved0=0x0, dwReserved1=0x0, cFileName="jp2iexp.dll", cAlternateFileName="")) returned 1 [0222.986] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0222.986] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235de8 [0222.986] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221a98 [0222.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235de8 | out: hHeap=0x1f0000) returned 1 [0222.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235a40 | out: hHeap=0x1f0000) returned 1 [0222.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0222.987] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2iexp.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2iexp.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0222.987] GetFileType (hFile=0x1e8) returned 0x1 [0222.987] CloseHandle (hObject=0x1e8) returned 1 [0222.987] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0222.987] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2iexp.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2iexp.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa75aa64d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa75aa64d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa897bfc2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x48440)) returned 1 [0222.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0222.988] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0222.988] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2iexp.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2iexp.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa75aa64d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa75aa64d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa897bfc2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x48440)) returned 1 [0222.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0222.988] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220508 [0222.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220508 | out: hHeap=0x1f0000) returned 1 [0222.988] GetLastError () returned 0x0 [0222.988] CryptAcquireContextA (in: phProv=0x1a1daf0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1a1daf0*=0x211bf0) returned 1 [0222.989] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238140 | out: pbBuffer=0x238140) returned 1 [0222.989] CryptReleaseContext (hProv=0x211bf0, dwFlags=0x0) returned 1 [0222.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0222.989] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x254980 [0222.989] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x236f50 [0222.989] QueryPerformanceCounter (in: lpPerformanceCount=0x1a1da84 | out: lpPerformanceCount=0x1a1da84*=38035798282) returned 1 [0222.989] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1a1dac4 | out: lpSystemTimeAsFileTime=0x1a1dac4) [0222.989] QueryPerformanceCounter (in: lpPerformanceCount=0x1a1da84 | out: lpPerformanceCount=0x1a1da84*=38035812218) returned 1 [0222.989] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1a1dac4 | out: lpSystemTimeAsFileTime=0x1a1dac4) [0222.989] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239010 [0222.989] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x25ceb8 [0222.989] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x237068 [0222.990] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x233568 [0222.990] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffd0 [0222.990] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206658 [0222.990] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210078 [0222.990] GetLastError () returned 0x0 [0222.990] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2iexp.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2iexp.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d990, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0222.991] GetFileType (hFile=0x1e8) returned 0x1 [0222.991] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b90 [0222.992] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ae0 [0222.992] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2iexp.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2iexp.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d9c0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1a4 [0222.993] GetFileType (hFile=0x1a4) returned 0x1 [0222.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f70 [0222.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c30 [0222.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261440 [0222.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238af0 [0222.994] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b00 [0222.995] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2iexp.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2iexp.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d90c, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0222.995] GetFileType (hFile=0x200) returned 0x1 [0222.995] GetLastError () returned 0xb7 [0222.995] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2iexp.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2iexp.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d90c, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0222.996] GetFileType (hFile=0x210) returned 0x1 [0222.996] GetLastError () returned 0xb7 [0222.996] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2iexp.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2iexp.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d904, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0222.996] GetFileType (hFile=0x1e0) returned 0x1 [0222.997] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28efd8 [0222.997] ReadFile (in: hFile=0x1e0, lpBuffer=0x28efd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1d860, lpOverlapped=0x0 | out: lpBuffer=0x28efd8*, lpNumberOfBytesRead=0x1a1d860*=0x1000, lpOverlapped=0x0) returned 1 [0223.000] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24b5e0 [0223.000] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x287fa0 [0223.000] GetLastError () returned 0x0 [0223.014] CloseHandle (hObject=0x1e8) returned 1 [0223.028] CloseHandle (hObject=0x1a4) returned 1 [0223.028] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238940 [0223.028] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238950 [0223.029] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2iexp.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2iexp.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d9c0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0223.296] GetFileType (hFile=0x22c) returned 0x1 [0223.297] GetLastError () returned 0xb7 [0223.298] CloseHandle (hObject=0x22c) returned 1 [0223.299] DeleteFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2iexp.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2iexp.dll")) returned 0 [0223.299] GetLastError () returned 0x20 [0223.299] GetLastError () returned 0x20 [0223.299] CryptAcquireContextA (in: phProv=0x1a1daf0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1a1daf0*=0x212690) returned 1 [0223.300] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238320 | out: pbBuffer=0x238320) returned 1 [0223.300] CryptReleaseContext (hProv=0x212690, dwFlags=0x0) returned 1 [0223.300] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0223.300] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238320 [0223.301] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238398 [0223.301] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238e50 [0223.301] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0223.301] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0223.301] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238e50 | out: hHeap=0x1f0000) returned 1 [0223.301] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8848 [0223.301] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210198 [0223.301] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x235a40 [0223.302] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238320 [0223.302] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285ae8 [0223.302] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cf0 [0223.302] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235c48 [0223.302] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238618 [0223.302] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x284f90 [0223.302] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a60 [0223.302] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238640 [0223.303] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0223.303] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a70 [0223.303] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238500 [0223.303] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0223.303] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0223.303] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238500 | out: hHeap=0x1f0000) returned 1 [0223.303] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a70 | out: hHeap=0x1f0000) returned 1 [0223.303] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0223.303] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238640 | out: hHeap=0x1f0000) returned 1 [0223.304] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a60 | out: hHeap=0x1f0000) returned 1 [0223.304] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x284f90 | out: hHeap=0x1f0000) returned 1 [0223.304] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238618 | out: hHeap=0x1f0000) returned 1 [0223.304] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235c48 | out: hHeap=0x1f0000) returned 1 [0223.304] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238ef8 [0223.304] GetLastError () returned 0x0 [0223.304] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1a1d680 | out: lpSystemTimeAsFileTime=0x1a1d680) [0223.305] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238a60 [0223.305] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238618 [0223.305] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c90 [0223.305] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c90 | out: hHeap=0x1f0000) returned 1 [0223.305] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238618 | out: hHeap=0x1f0000) returned 1 [0223.305] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238578 [0223.305] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d10 [0223.305] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d10 | out: hHeap=0x1f0000) returned 1 [0223.306] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238578 | out: hHeap=0x1f0000) returned 1 [0223.306] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a60 | out: hHeap=0x1f0000) returned 1 [0223.306] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0223.306] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238fd8 [0223.306] GetLastError () returned 0x0 [0223.306] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2iexp.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2iexp.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d9f0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0223.307] GetFileType (hFile=0x22c) returned 0x1 [0223.307] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28ffe0 [0223.308] SetFilePointerEx (in: hFile=0x22c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1a1d978 | out: lpNewFilePointer=0x0) returned 1 [0223.308] GetLastError () returned 0xb7 [0223.308] CloseHandle (hObject=0x22c) returned 1 [0223.309] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a70 | out: hHeap=0x1f0000) returned 1 [0223.309] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a60 | out: hHeap=0x1f0000) returned 1 [0223.309] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285098 | out: hHeap=0x1f0000) returned 1 [0223.309] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285ae8 | out: hHeap=0x1f0000) returned 1 [0223.309] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0223.309] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cf0 | out: hHeap=0x1f0000) returned 1 [0223.309] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235a40 | out: hHeap=0x1f0000) returned 1 [0223.309] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0223.310] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8848 | out: hHeap=0x1f0000) returned 1 [0223.310] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237b58 | out: hHeap=0x1f0000) returned 1 [0223.310] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0223.310] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0223.310] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x251068 | out: hHeap=0x1f0000) returned 1 [0223.310] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2373b0 | out: hHeap=0x1f0000) returned 1 [0223.310] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238f68 | out: hHeap=0x1f0000) returned 1 [0223.310] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b70 | out: hHeap=0x1f0000) returned 1 [0223.310] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0223.310] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0223.310] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a50 | out: hHeap=0x1f0000) returned 1 [0223.310] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffb8 | out: hHeap=0x1f0000) returned 1 [0223.310] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238488 | out: hHeap=0x1f0000) returned 1 [0223.311] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a10 | out: hHeap=0x1f0000) returned 1 [0223.311] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2859e0 | out: hHeap=0x1f0000) returned 1 [0223.311] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384d8 | out: hHeap=0x1f0000) returned 1 [0223.311] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2358a0 | out: hHeap=0x1f0000) returned 1 [0223.311] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2287a0 | out: hHeap=0x1f0000) returned 1 [0223.311] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0223.311] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0223.311] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228bd8 | out: hHeap=0x1f0000) returned 1 [0223.311] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238950 | out: hHeap=0x1f0000) returned 1 [0223.311] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238940 | out: hHeap=0x1f0000) returned 1 [0223.311] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28efd8 | out: hHeap=0x1f0000) returned 1 [0223.311] CloseHandle (hObject=0x1e0) returned 1 [0223.312] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389f0 | out: hHeap=0x1f0000) returned 1 [0223.312] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389e0 | out: hHeap=0x1f0000) returned 1 [0223.312] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2242a0 | out: hHeap=0x1f0000) returned 1 [0223.312] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24b5e0 | out: hHeap=0x1f0000) returned 1 [0223.312] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2100a8 | out: hHeap=0x1f0000) returned 1 [0223.312] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c10 | out: hHeap=0x1f0000) returned 1 [0223.312] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x287fa0 | out: hHeap=0x1f0000) returned 1 [0223.312] CloseHandle (hObject=0x210) returned 1 [0223.313] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ba0 | out: hHeap=0x1f0000) returned 1 [0223.313] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b10 | out: hHeap=0x1f0000) returned 1 [0223.313] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2614f8 | out: hHeap=0x1f0000) returned 1 [0223.313] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c30 | out: hHeap=0x1f0000) returned 1 [0223.313] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2367c8 | out: hHeap=0x1f0000) returned 1 [0223.314] CloseHandle (hObject=0x200) returned 1 [0223.314] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b00 | out: hHeap=0x1f0000) returned 1 [0223.314] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238af0 | out: hHeap=0x1f0000) returned 1 [0223.314] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261440 | out: hHeap=0x1f0000) returned 1 [0223.314] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ae0 | out: hHeap=0x1f0000) returned 1 [0223.314] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b90 | out: hHeap=0x1f0000) returned 1 [0223.314] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a40 | out: hHeap=0x1f0000) returned 1 [0223.314] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ad0 | out: hHeap=0x1f0000) returned 1 [0223.315] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0223.315] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25ceb8 | out: hHeap=0x1f0000) returned 1 [0223.315] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237068 | out: hHeap=0x1f0000) returned 1 [0223.315] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206658 | out: hHeap=0x1f0000) returned 1 [0223.315] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210078 | out: hHeap=0x1f0000) returned 1 [0223.315] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffd0 | out: hHeap=0x1f0000) returned 1 [0223.315] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233568 | out: hHeap=0x1f0000) returned 1 [0223.315] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x254980 | out: hHeap=0x1f0000) returned 1 [0223.315] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236f50 | out: hHeap=0x1f0000) returned 1 [0223.315] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239278 | out: hHeap=0x1f0000) returned 1 [0223.315] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fc98 | out: hHeap=0x1f0000) returned 1 [0223.315] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d508 | out: hHeap=0x1f0000) returned 1 [0223.315] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234818 | out: hHeap=0x1f0000) returned 1 [0223.315] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0223.315] DeleteFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2iexp.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2iexp.dll")) returned 1 [0223.503] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa897bfc2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa897bfc2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89a2223, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1b640, dwReserved0=0x0, dwReserved1=0x0, cFileName="jp2launcher.exe", cAlternateFileName="JP2LAU~1.EXE")) returned 1 [0223.504] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0223.504] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235768 [0223.504] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221968 [0223.504] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235768 | out: hHeap=0x1f0000) returned 1 [0223.504] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0223.504] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0223.537] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2launcher.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2launcher.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0223.537] GetFileType (hFile=0x1e0) returned 0x1 [0223.538] CloseHandle (hObject=0x1e0) returned 1 [0223.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd88 [0223.538] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2launcher.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2launcher.exe"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa897bfc2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa897bfc2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89a2223, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1b640)) returned 1 [0223.538] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd88 | out: hHeap=0x1f0000) returned 1 [0223.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220508 [0223.538] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2launcher.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2launcher.exe"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa897bfc2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa897bfc2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89a2223, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1b640)) returned 1 [0223.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220508 | out: hHeap=0x1f0000) returned 1 [0223.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fc98 [0223.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fc98 | out: hHeap=0x1f0000) returned 1 [0223.539] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89a2223, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89a2223, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89a2223, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="jp2native.dll", cAlternateFileName="JP2NAT~1.DLL")) returned 1 [0223.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238488 [0223.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2358a0 [0223.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2211b0 [0223.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2358a0 | out: hHeap=0x1f0000) returned 1 [0223.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0223.540] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238488 | out: hHeap=0x1f0000) returned 1 [0223.540] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2native.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2native.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0223.540] GetFileType (hFile=0x1e0) returned 0x1 [0223.541] CloseHandle (hObject=0x1e0) returned 1 [0223.541] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f7e8 [0223.541] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2native.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2native.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89a2223, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89a2223, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89a2223, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e40)) returned 1 [0223.542] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f7e8 | out: hHeap=0x1f0000) returned 1 [0223.542] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0223.542] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2native.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2native.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89a2223, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89a2223, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89a2223, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e40)) returned 1 [0223.542] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0223.542] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fc98 [0223.542] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fc98 | out: hHeap=0x1f0000) returned 1 [0223.542] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89a2223, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89a2223, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89a2223, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39840, dwReserved0=0x0, dwReserved1=0x0, cFileName="jp2ssv.dll", cAlternateFileName="")) returned 1 [0223.542] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238488 [0223.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2358a0 [0223.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220fe8 [0223.543] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2358a0 | out: hHeap=0x1f0000) returned 1 [0223.543] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0223.543] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238488 | out: hHeap=0x1f0000) returned 1 [0223.544] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2ssv.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2ssv.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0223.544] GetFileType (hFile=0x1e0) returned 0x1 [0223.544] CloseHandle (hObject=0x1e0) returned 1 [0223.545] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd88 [0223.545] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2ssv.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2ssv.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89a2223, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89a2223, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89a2223, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39840)) returned 1 [0223.545] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd88 | out: hHeap=0x1f0000) returned 1 [0223.545] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f7e8 [0223.545] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2ssv.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2ssv.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89a2223, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89a2223, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89a2223, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39840)) returned 1 [0223.546] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f7e8 | out: hHeap=0x1f0000) returned 1 [0223.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f7e8 [0223.546] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f7e8 | out: hHeap=0x1f0000) returned 1 [0223.546] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89a2223, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89a2223, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2d640, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpeg.dll", cAlternateFileName="")) returned 1 [0223.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238488 [0223.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2358a0 [0223.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221410 [0223.546] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2358a0 | out: hHeap=0x1f0000) returned 1 [0223.546] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0223.546] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238488 | out: hHeap=0x1f0000) returned 1 [0223.547] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jpeg.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jpeg.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0223.548] GetFileType (hFile=0x1e0) returned 0x1 [0223.548] CloseHandle (hObject=0x1e0) returned 1 [0223.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220508 [0223.548] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jpeg.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jpeg.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89a2223, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89a2223, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2d640)) returned 1 [0223.549] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220508 | out: hHeap=0x1f0000) returned 1 [0223.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2203a0 [0223.549] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jpeg.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jpeg.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89a2223, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89a2223, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2d640)) returned 1 [0223.549] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2203a0 | out: hHeap=0x1f0000) returned 1 [0223.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0223.549] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0223.549] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4840, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsdt.dll", cAlternateFileName="")) returned 1 [0223.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238488 [0223.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235de8 [0223.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221968 [0223.550] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235de8 | out: hHeap=0x1f0000) returned 1 [0223.550] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0223.550] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238488 | out: hHeap=0x1f0000) returned 1 [0223.550] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jsdt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsdt.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0223.550] GetFileType (hFile=0x1e0) returned 0x1 [0223.551] CloseHandle (hObject=0x1e0) returned 1 [0223.551] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2201c0 [0223.551] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jsdt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsdt.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4840)) returned 1 [0223.551] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2201c0 | out: hHeap=0x1f0000) returned 1 [0223.551] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fc98 [0223.551] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jsdt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsdt.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4840)) returned 1 [0223.551] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fc98 | out: hHeap=0x1f0000) returned 1 [0223.551] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0223.551] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0223.551] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsound.dll", cAlternateFileName="")) returned 1 [0223.551] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238488 [0223.552] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235f20 [0223.552] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220f50 [0223.552] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235f20 | out: hHeap=0x1f0000) returned 1 [0223.552] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0223.552] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238488 | out: hHeap=0x1f0000) returned 1 [0223.552] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jsound.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsound.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0223.553] GetFileType (hFile=0x1e0) returned 0x1 [0223.553] CloseHandle (hObject=0x1e0) returned 1 [0223.553] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0223.553] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jsound.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsound.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8a40)) returned 1 [0223.553] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0223.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0223.554] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jsound.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsound.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8a40)) returned 1 [0223.554] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0223.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220508 [0223.554] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220508 | out: hHeap=0x1f0000) returned 1 [0223.554] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsoundds.dll", cAlternateFileName="")) returned 1 [0223.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238488 [0223.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235f88 [0223.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221410 [0223.554] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235f88 | out: hHeap=0x1f0000) returned 1 [0223.554] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0223.554] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238488 | out: hHeap=0x1f0000) returned 1 [0223.555] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jsoundds.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsoundds.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0223.557] GetFileType (hFile=0x1e0) returned 0x1 [0223.557] CloseHandle (hObject=0x1e0) returned 1 [0223.558] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0223.558] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jsoundds.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsoundds.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7a40)) returned 1 [0223.558] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0223.558] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fc98 [0223.558] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jsoundds.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsoundds.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7a40)) returned 1 [0223.558] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fc98 | out: hHeap=0x1f0000) returned 1 [0223.558] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0223.559] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0223.559] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x35e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="kcms.dll", cAlternateFileName="")) returned 1 [0223.559] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238488 [0223.559] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2358a0 [0223.559] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220eb8 [0223.559] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2358a0 | out: hHeap=0x1f0000) returned 1 [0223.559] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0223.559] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238488 | out: hHeap=0x1f0000) returned 1 [0223.560] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\kcms.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\kcms.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0223.560] GetFileType (hFile=0x1e0) returned 0x1 [0223.561] CloseHandle (hObject=0x1e0) returned 1 [0223.561] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220508 [0223.561] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\kcms.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\kcms.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x35e40)) returned 1 [0223.561] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220508 | out: hHeap=0x1f0000) returned 1 [0223.561] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0223.562] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\kcms.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\kcms.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x35e40)) returned 1 [0223.562] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0223.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fa40 [0223.562] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fa40 | out: hHeap=0x1f0000) returned 1 [0223.562] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="keytool.exe", cAlternateFileName="")) returned 1 [0223.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238488 [0223.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235d80 [0223.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2215d8 [0223.562] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235d80 | out: hHeap=0x1f0000) returned 1 [0223.562] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0223.562] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238488 | out: hHeap=0x1f0000) returned 1 [0223.563] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\keytool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\keytool.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0223.563] GetFileType (hFile=0x1e0) returned 0x1 [0223.563] CloseHandle (hObject=0x1e0) returned 1 [0223.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2201c0 [0223.563] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\keytool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\keytool.exe"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1 [0223.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2201c0 | out: hHeap=0x1f0000) returned 1 [0223.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220328 [0223.564] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\keytool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\keytool.exe"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1 [0223.564] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220328 | out: hHeap=0x1f0000) returned 1 [0223.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fa40 [0223.564] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fa40 | out: hHeap=0x1f0000) returned 1 [0223.564] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="kinit.exe", cAlternateFileName="")) returned 1 [0223.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238488 [0223.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235d80 [0223.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2211b0 [0223.564] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235d80 | out: hHeap=0x1f0000) returned 1 [0223.564] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0223.564] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238488 | out: hHeap=0x1f0000) returned 1 [0223.564] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\kinit.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\kinit.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0223.565] GetFileType (hFile=0x1e0) returned 0x1 [0223.565] CloseHandle (hObject=0x1e0) returned 1 [0223.565] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0223.565] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\kinit.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\kinit.exe"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1 [0223.565] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0223.565] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fc98 [0223.565] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\kinit.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\kinit.exe"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1 [0223.565] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fc98 | out: hHeap=0x1f0000) returned 1 [0223.566] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0223.566] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0223.566] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="klist.exe", cAlternateFileName="")) returned 1 [0223.566] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238488 [0223.566] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236058 [0223.566] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220cf0 [0223.566] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236058 | out: hHeap=0x1f0000) returned 1 [0223.566] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0223.566] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238488 | out: hHeap=0x1f0000) returned 1 [0223.566] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\klist.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\klist.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0223.566] GetFileType (hFile=0x1e0) returned 0x1 [0223.567] CloseHandle (hObject=0x1e0) returned 1 [0223.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f7e8 [0223.567] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\klist.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\klist.exe"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1 [0223.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f7e8 | out: hHeap=0x1f0000) returned 1 [0223.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0223.567] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\klist.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\klist.exe"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1 [0223.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0223.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0223.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0223.567] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="ktab.exe", cAlternateFileName="")) returned 1 [0223.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238488 [0223.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235f20 [0223.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221410 [0223.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235f20 | out: hHeap=0x1f0000) returned 1 [0223.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0223.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238488 | out: hHeap=0x1f0000) returned 1 [0223.568] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\ktab.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ktab.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0223.568] GetFileType (hFile=0x1e0) returned 0x1 [0223.569] CloseHandle (hObject=0x1e0) returned 1 [0223.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220328 [0223.569] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\ktab.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ktab.exe"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1 [0223.569] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220328 | out: hHeap=0x1f0000) returned 1 [0223.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220328 [0223.569] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\ktab.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ktab.exe"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1 [0223.569] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220328 | out: hHeap=0x1f0000) returned 1 [0223.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0223.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0223.570] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39040, dwReserved0=0x0, dwReserved1=0x0, cFileName="lcms.dll", cAlternateFileName="")) returned 1 [0223.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238488 [0223.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236058 [0223.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2214a8 [0223.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236058 | out: hHeap=0x1f0000) returned 1 [0223.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0223.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238488 | out: hHeap=0x1f0000) returned 1 [0223.570] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\lcms.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\lcms.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0223.571] GetFileType (hFile=0x1e0) returned 0x1 [0223.571] CloseHandle (hObject=0x1e0) returned 1 [0223.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220508 [0223.571] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\lcms.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\lcms.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39040)) returned 1 [0223.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220508 | out: hHeap=0x1f0000) returned 1 [0223.572] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2201c0 [0223.572] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\lcms.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\lcms.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39040)) returned 1 [0223.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2201c0 | out: hHeap=0x1f0000) returned 1 [0223.572] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0223.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0223.572] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x9040, dwReserved0=0x0, dwReserved1=0x0, cFileName="management.dll", cAlternateFileName="MANAGE~1.DLL")) returned 1 [0223.572] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238488 [0223.572] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2358a0 [0223.572] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220d88 [0223.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2358a0 | out: hHeap=0x1f0000) returned 1 [0223.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0223.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238488 | out: hHeap=0x1f0000) returned 1 [0223.573] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\management.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\management.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0223.573] GetFileType (hFile=0x1e0) returned 0x1 [0223.574] CloseHandle (hObject=0x1e0) returned 1 [0223.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0223.574] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\management.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\management.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x9040)) returned 1 [0223.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0223.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0223.575] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\management.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\management.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x9040)) returned 1 [0223.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0223.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f7e8 [0223.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f7e8 | out: hHeap=0x1f0000) returned 1 [0223.575] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc41ec25, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xcc41ec25, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xcca3ad23, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x9fb53, dwReserved0=0x0, dwReserved1=0x0, cFileName="mlib_image.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="MLIB_I~1.ODV")) returned 1 [0223.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21aab8 [0223.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235d80 [0223.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x22b110 [0223.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235d80 | out: hHeap=0x1f0000) returned 1 [0223.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0223.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21aab8 | out: hHeap=0x1f0000) returned 1 [0223.576] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\mlib_image.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\mlib_image.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0223.576] GetFileType (hFile=0x1e0) returned 0x1 [0223.576] CloseHandle (hObject=0x1e0) returned 1 [0223.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x2366d8 [0223.577] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\mlib_image.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\mlib_image.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc41ec25, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xcc41ec25, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xcca3ad23, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x9fb53)) returned 1 [0223.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0223.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x2366d8 [0223.577] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\mlib_image.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\mlib_image.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc41ec25, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xcc41ec25, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xcca3ad23, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x9fb53)) returned 1 [0223.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0223.578] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x2366d8 [0223.578] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0223.578] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcca3ad23, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xcca3ad23, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xcd48308f, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xa13b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcp120.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="MSVCP1~1.ODV")) returned 1 [0223.578] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a2d8 [0223.578] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235a40 [0223.578] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x2366d8 [0223.578] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235a40 | out: hHeap=0x1f0000) returned 1 [0223.856] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b110 | out: hHeap=0x1f0000) returned 1 [0223.856] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a2d8 | out: hHeap=0x1f0000) returned 1 [0223.857] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcp120.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcp120.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0223.857] GetFileType (hFile=0x230) returned 0x1 [0223.858] CloseHandle (hObject=0x230) returned 1 [0223.858] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x21b748 [0223.858] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcp120.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcp120.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcca3ad23, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xcca3ad23, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xcd48308f, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xa13b3)) returned 1 [0223.858] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21b748 | out: hHeap=0x1f0000) returned 1 [0223.858] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x21b650 [0223.859] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcp120.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcp120.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcca3ad23, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xcca3ad23, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xcd48308f, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xa13b3)) returned 1 [0223.859] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21b650 | out: hHeap=0x1f0000) returned 1 [0223.859] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x21bd18 [0223.859] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21bd18 | out: hHeap=0x1f0000) returned 1 [0223.859] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xce3d1510, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x1, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr100.dll", cAlternateFileName="")) returned 1 [0223.859] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0223.859] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235a40 [0223.859] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220d88 [0223.859] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235a40 | out: hHeap=0x1f0000) returned 1 [0223.859] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0223.859] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0223.861] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr100.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcr100.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0223.861] GetLastError () returned 0x2 [0223.861] GetLastError () returned 0x2 [0223.861] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdef13a3, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xcdef13a3, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xcdf3d840, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xca760, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr100.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="MSVCR1~1.ODV")) returned 1 [0223.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a2d8 [0223.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235a40 [0223.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x21ba30 [0223.862] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235a40 | out: hHeap=0x1f0000) returned 1 [0223.862] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0223.862] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a2d8 | out: hHeap=0x1f0000) returned 1 [0223.862] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr100.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcr100.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0223.862] GetFileType (hFile=0x230) returned 0x1 [0223.863] CloseHandle (hObject=0x230) returned 1 [0223.863] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x21b558 [0223.863] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr100.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcr100.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdef13a3, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xcdef13a3, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xce6576cb, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xca863)) returned 1 [0223.863] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21b558 | out: hHeap=0x1f0000) returned 1 [0223.863] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x21be10 [0223.863] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr100.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcr100.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdef13a3, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xcdef13a3, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xce6576cb, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xca863)) returned 1 [0223.863] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21be10 | out: hHeap=0x1f0000) returned 1 [0223.863] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x21b840 [0223.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21b840 | out: hHeap=0x1f0000) returned 1 [0223.864] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xeb2a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr120.dll", cAlternateFileName="")) returned 1 [0223.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0223.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236190 [0223.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221248 [0223.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236190 | out: hHeap=0x1f0000) returned 1 [0223.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ba30 | out: hHeap=0x1f0000) returned 1 [0223.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0223.864] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr120.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcr120.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0223.865] GetLastError () returned 0x2 [0223.865] GetLastError () returned 0x2 [0223.865] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x17a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="net.dll", cAlternateFileName="")) returned 1 [0223.865] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235d80 [0223.865] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0223.865] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\net.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\net.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0223.865] GetFileType (hFile=0x230) returned 0x1 [0223.866] CloseHandle (hObject=0x230) returned 1 [0223.866] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235de8 [0223.866] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\net.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\net.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x17a40)) returned 1 [0223.866] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235de8 | out: hHeap=0x1f0000) returned 1 [0223.866] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235c48 [0223.866] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\net.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\net.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x17a40)) returned 1 [0223.866] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235c48 | out: hHeap=0x1f0000) returned 1 [0223.866] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236190 [0223.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236190 | out: hHeap=0x1f0000) returned 1 [0223.867] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xec40, dwReserved0=0x0, dwReserved1=0x0, cFileName="nio.dll", cAlternateFileName="")) returned 1 [0223.867] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235b78 [0223.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235d80 | out: hHeap=0x1f0000) returned 1 [0223.867] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\nio.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\nio.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0223.867] GetFileType (hFile=0x230) returned 0x1 [0223.868] CloseHandle (hObject=0x230) returned 1 [0223.868] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235768 [0223.868] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\nio.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\nio.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xec40)) returned 1 [0223.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235768 | out: hHeap=0x1f0000) returned 1 [0223.868] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236190 [0223.868] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\nio.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\nio.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xec40)) returned 1 [0223.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236190 | out: hHeap=0x1f0000) returned 1 [0223.868] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235838 [0223.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235838 | out: hHeap=0x1f0000) returned 1 [0223.868] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="npt.dll", cAlternateFileName="")) returned 1 [0223.869] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235768 [0223.869] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0223.869] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\npt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\npt.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0223.869] GetFileType (hFile=0x230) returned 0x1 [0223.869] CloseHandle (hObject=0x230) returned 1 [0223.870] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236190 [0223.870] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\npt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\npt.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4a40)) returned 1 [0223.870] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236190 | out: hHeap=0x1f0000) returned 1 [0223.870] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235c48 [0223.870] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\npt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\npt.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4a40)) returned 1 [0223.870] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235c48 | out: hHeap=0x1f0000) returned 1 [0223.870] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235f88 [0223.870] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235f88 | out: hHeap=0x1f0000) returned 1 [0223.870] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="orbd.exe", cAlternateFileName="")) returned 1 [0223.870] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0223.870] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235838 [0223.870] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220eb8 [0223.870] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235838 | out: hHeap=0x1f0000) returned 1 [0223.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235768 | out: hHeap=0x1f0000) returned 1 [0223.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0223.871] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\orbd.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\orbd.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0223.871] GetFileType (hFile=0x230) returned 0x1 [0223.871] CloseHandle (hObject=0x230) returned 1 [0223.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2201c0 [0223.872] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\orbd.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\orbd.exe"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1 [0223.872] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2201c0 | out: hHeap=0x1f0000) returned 1 [0223.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220508 [0223.872] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\orbd.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\orbd.exe"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1 [0223.872] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220508 | out: hHeap=0x1f0000) returned 1 [0223.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220580 [0223.872] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220580 | out: hHeap=0x1f0000) returned 1 [0223.872] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="pack200.exe", cAlternateFileName="")) returned 1 [0223.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0223.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235838 [0223.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2218d0 [0223.873] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235838 | out: hHeap=0x1f0000) returned 1 [0223.873] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0223.873] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0223.873] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\pack200.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\pack200.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0223.873] GetFileType (hFile=0x230) returned 0x1 [0223.874] CloseHandle (hObject=0x230) returned 1 [0223.874] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd88 [0223.874] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\pack200.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\pack200.exe"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1 [0223.874] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd88 | out: hHeap=0x1f0000) returned 1 [0223.874] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f7e8 [0223.874] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\pack200.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\pack200.exe"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1 [0223.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f7e8 | out: hHeap=0x1f0000) returned 1 [0223.875] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0223.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0223.875] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2a2bf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin2", cAlternateFileName="")) returned 1 [0223.875] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235768 [0223.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0223.875] lstrcmpW (lpString1="plugin2", lpString2=".") returned 1 [0223.875] lstrcmpW (lpString1="plugin2", lpString2="..") returned 1 [0223.875] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238ec0 [0223.875] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235838 [0223.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f50 | out: hHeap=0x1f0000) returned 1 [0223.875] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="policytool.exe", cAlternateFileName="POLICY~1.EXE")) returned 1 [0223.876] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0223.876] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235d80 [0223.876] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221540 [0223.876] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235d80 | out: hHeap=0x1f0000) returned 1 [0223.876] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235768 | out: hHeap=0x1f0000) returned 1 [0223.876] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0223.876] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\policytool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\policytool.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0223.877] GetFileType (hFile=0x230) returned 0x1 [0223.877] CloseHandle (hObject=0x230) returned 1 [0223.877] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0223.877] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\policytool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\policytool.exe"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1 [0223.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0223.878] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220580 [0223.878] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\policytool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\policytool.exe"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1 [0223.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220580 | out: hHeap=0x1f0000) returned 1 [0223.878] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0223.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0223.878] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xe040, dwReserved0=0x0, dwReserved1=0x0, cFileName="prism_common.dll", cAlternateFileName="PRISM_~1.DLL")) returned 1 [0223.878] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238e18 [0223.878] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235eb8 [0223.878] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221a00 [0223.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235eb8 | out: hHeap=0x1f0000) returned 1 [0223.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0223.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238e18 | out: hHeap=0x1f0000) returned 1 [0223.879] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_common.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_common.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0223.879] GetFileType (hFile=0x230) returned 0x1 [0223.879] CloseHandle (hObject=0x230) returned 1 [0223.879] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211bf0 [0223.879] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_common.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_common.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xe040)) returned 1 [0223.879] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211bf0 | out: hHeap=0x1f0000) returned 1 [0223.879] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d00 [0223.880] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_common.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_common.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xe040)) returned 1 [0223.880] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d00 | out: hHeap=0x1f0000) returned 1 [0223.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d88 [0223.880] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d88 | out: hHeap=0x1f0000) returned 1 [0223.880] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1fe40, dwReserved0=0x0, dwReserved1=0x0, cFileName="prism_d3d.dll", cAlternateFileName="PRISM_~2.DLL")) returned 1 [0223.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0223.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235b78 [0223.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221410 [0223.880] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0223.880] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0223.880] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0223.881] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_d3d.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_d3d.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0223.881] GetFileType (hFile=0x230) returned 0x1 [0223.881] CloseHandle (hObject=0x230) returned 1 [0223.881] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0223.881] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_d3d.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_d3d.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1fe40)) returned 1 [0223.881] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0223.881] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220508 [0223.882] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_d3d.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_d3d.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1fe40)) returned 1 [0223.882] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220508 | out: hHeap=0x1f0000) returned 1 [0223.882] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0223.882] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0223.882] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x17e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="prism_sw.dll", cAlternateFileName="")) returned 1 [0223.882] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0223.882] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235c48 [0223.882] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221670 [0223.882] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235c48 | out: hHeap=0x1f0000) returned 1 [0223.882] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0223.882] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0223.882] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_sw.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_sw.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0223.883] GetFileType (hFile=0x230) returned 0x1 [0223.883] CloseHandle (hObject=0x230) returned 1 [0223.883] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220328 [0223.883] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_sw.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_sw.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x17e40)) returned 1 [0223.883] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220328 | out: hHeap=0x1f0000) returned 1 [0223.883] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0223.883] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_sw.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_sw.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x17e40)) returned 1 [0223.883] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0223.883] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fa40 [0223.884] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fa40 | out: hHeap=0x1f0000) returned 1 [0223.884] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.dll", cAlternateFileName="")) returned 1 [0223.884] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0223.884] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235d80 [0223.884] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221a00 [0223.884] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235d80 | out: hHeap=0x1f0000) returned 1 [0223.884] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0223.884] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0223.884] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\resource.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\resource.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0223.884] GetFileType (hFile=0x230) returned 0x1 [0223.885] CloseHandle (hObject=0x230) returned 1 [0223.885] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220238 [0223.885] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\resource.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\resource.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3c40)) returned 1 [0223.885] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220238 | out: hHeap=0x1f0000) returned 1 [0223.885] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0223.885] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\resource.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\resource.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3c40)) returned 1 [0223.885] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0223.885] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0223.885] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0223.886] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="rmid.exe", cAlternateFileName="")) returned 1 [0223.886] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0223.886] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235768 [0223.886] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2218d0 [0223.886] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235768 | out: hHeap=0x1f0000) returned 1 [0223.886] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0223.886] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0223.886] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\rmid.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\rmid.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0223.886] GetFileType (hFile=0x230) returned 0x1 [0223.887] CloseHandle (hObject=0x230) returned 1 [0223.887] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0223.887] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\rmid.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\rmid.exe"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e40)) returned 1 [0223.887] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0223.887] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0223.888] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\rmid.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\rmid.exe"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e40)) returned 1 [0223.888] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0223.888] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0223.888] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0223.888] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8af971e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="rmiregistry.exe", cAlternateFileName="RMIREG~1.EXE")) returned 1 [0223.889] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0223.889] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235eb8 [0223.889] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220cf0 [0223.889] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235eb8 | out: hHeap=0x1f0000) returned 1 [0223.889] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0223.889] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0223.890] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\rmiregistry.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\rmiregistry.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0223.890] GetFileType (hFile=0x230) returned 0x1 [0223.890] CloseHandle (hObject=0x230) returned 1 [0223.890] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0223.891] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\rmiregistry.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\rmiregistry.exe"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8af971e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1 [0224.168] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0224.168] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0224.168] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\rmiregistry.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\rmiregistry.exe"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8af971e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1 [0224.168] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0224.168] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0224.169] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0224.169] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8af971e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2b6c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xab35b530, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="server", cAlternateFileName="")) returned 1 [0224.169] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235c48 [0224.169] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0224.169] lstrcmpW (lpString1="server", lpString2=".") returned 1 [0224.169] lstrcmpW (lpString1="server", lpString2="..") returned 1 [0224.169] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x48) returned 0x225f18 [0224.169] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235d80 [0224.169] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ec0 | out: hHeap=0x1f0000) returned 1 [0224.170] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="servertool.exe", cAlternateFileName="SERVER~1.EXE")) returned 1 [0224.170] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0224.170] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235768 [0224.170] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221118 [0224.170] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235768 | out: hHeap=0x1f0000) returned 1 [0224.170] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235c48 | out: hHeap=0x1f0000) returned 1 [0224.170] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0224.171] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\servertool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\servertool.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0224.171] GetFileType (hFile=0x204) returned 0x1 [0224.172] CloseHandle (hObject=0x204) returned 1 [0224.172] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f7e8 [0224.172] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\servertool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\servertool.exe"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1 [0224.173] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f7e8 | out: hHeap=0x1f0000) returned 1 [0224.173] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220508 [0224.173] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\servertool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\servertool.exe"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1 [0224.173] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220508 | out: hHeap=0x1f0000) returned 1 [0224.173] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220508 [0224.173] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220508 | out: hHeap=0x1f0000) returned 1 [0224.173] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x32040, dwReserved0=0x0, dwReserved1=0x0, cFileName="splashscreen.dll", cAlternateFileName="SPLASH~1.DLL")) returned 1 [0224.174] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c90 [0224.174] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235aa8 [0224.174] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221248 [0224.174] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235aa8 | out: hHeap=0x1f0000) returned 1 [0224.174] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0224.174] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c90 | out: hHeap=0x1f0000) returned 1 [0224.175] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\splashscreen.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\splashscreen.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0224.175] GetFileType (hFile=0x204) returned 0x1 [0224.176] CloseHandle (hObject=0x204) returned 1 [0224.176] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2127a0 [0224.176] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\splashscreen.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\splashscreen.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x32040)) returned 1 [0224.176] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2127a0 | out: hHeap=0x1f0000) returned 1 [0224.177] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212250 [0224.177] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\splashscreen.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\splashscreen.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x32040)) returned 1 [0224.177] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212250 | out: hHeap=0x1f0000) returned 1 [0224.177] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2127a0 [0224.177] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2127a0 | out: hHeap=0x1f0000) returned 1 [0224.177] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdef13a3, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xcdef13a3, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xce60b224, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x8bb53, dwReserved0=0x0, dwReserved1=0x0, cFileName="ssv.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="SSVDLL~1.ODV")) returned 1 [0224.177] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0224.177] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235eb8 [0224.177] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0224.178] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235eb8 | out: hHeap=0x1f0000) returned 1 [0224.178] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0224.178] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0224.178] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\ssv.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ssv.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0224.179] GetFileType (hFile=0x204) returned 0x1 [0224.179] CloseHandle (hObject=0x204) returned 1 [0224.180] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x22d368 [0224.180] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\ssv.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ssv.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdef13a3, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xcdef13a3, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xce60b224, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x8bb53)) returned 1 [0224.180] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d368 | out: hHeap=0x1f0000) returned 1 [0224.180] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x22d368 [0224.180] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\ssv.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ssv.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdef13a3, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xcdef13a3, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xce60b224, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x8bb53)) returned 1 [0224.180] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d368 | out: hHeap=0x1f0000) returned 1 [0224.180] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x22d368 [0224.181] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d368 | out: hHeap=0x1f0000) returned 1 [0224.181] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x11240, dwReserved0=0x0, dwReserved1=0x0, cFileName="ssvagent.exe", cAlternateFileName="")) returned 1 [0224.181] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0224.181] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235de8 [0224.181] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220cf0 [0224.181] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235de8 | out: hHeap=0x1f0000) returned 1 [0224.181] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0224.181] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0224.182] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\ssvagent.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ssvagent.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0224.182] GetFileType (hFile=0x204) returned 0x1 [0224.183] CloseHandle (hObject=0x204) returned 1 [0224.183] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0224.183] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\ssvagent.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ssvagent.exe"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x11240)) returned 1 [0224.183] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0224.184] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0224.184] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\ssvagent.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ssvagent.exe"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x11240)) returned 1 [0224.184] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0224.184] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0224.184] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0224.184] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x21240, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunec.dll", cAlternateFileName="")) returned 1 [0224.184] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0224.184] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235768 [0224.185] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2214a8 [0224.185] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235768 | out: hHeap=0x1f0000) returned 1 [0224.185] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0224.185] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0224.186] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\sunec.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\sunec.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0224.186] GetFileType (hFile=0x204) returned 0x1 [0224.186] CloseHandle (hObject=0x204) returned 1 [0224.187] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0224.187] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\sunec.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\sunec.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x21240)) returned 1 [0224.187] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0224.187] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f7e8 [0224.187] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\sunec.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\sunec.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x21240)) returned 1 [0224.188] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f7e8 | out: hHeap=0x1f0000) returned 1 [0224.188] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0224.188] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0224.188] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunmscapi.dll", cAlternateFileName="SUNMSC~1.DLL")) returned 1 [0224.188] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0224.188] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235de8 [0224.188] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221670 [0224.188] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235de8 | out: hHeap=0x1f0000) returned 1 [0224.188] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0224.188] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0224.189] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\sunmscapi.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\sunmscapi.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0224.190] GetFileType (hFile=0x204) returned 0x1 [0224.190] CloseHandle (hObject=0x204) returned 1 [0224.191] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0224.191] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\sunmscapi.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\sunmscapi.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7c40)) returned 1 [0224.191] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0224.191] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f7e8 [0224.191] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\sunmscapi.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\sunmscapi.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7c40)) returned 1 [0224.191] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f7e8 | out: hHeap=0x1f0000) returned 1 [0224.191] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0224.191] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0224.192] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e440, dwReserved0=0x0, dwReserved1=0x0, cFileName="t2k.dll", cAlternateFileName="")) returned 1 [0224.192] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235768 [0224.192] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0224.192] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\t2k.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\t2k.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0224.192] GetFileType (hFile=0x204) returned 0x1 [0224.193] CloseHandle (hObject=0x204) returned 1 [0224.193] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235f88 [0224.193] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\t2k.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\t2k.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e440)) returned 1 [0224.194] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235f88 | out: hHeap=0x1f0000) returned 1 [0224.194] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235aa8 [0224.194] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\t2k.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\t2k.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e440)) returned 1 [0224.194] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235aa8 | out: hHeap=0x1f0000) returned 1 [0224.194] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235aa8 [0224.194] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235aa8 | out: hHeap=0x1f0000) returned 1 [0224.194] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="tnameserv.exe", cAlternateFileName="TNAMES~1.EXE")) returned 1 [0224.194] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0224.194] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236190 [0224.194] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221080 [0224.195] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236190 | out: hHeap=0x1f0000) returned 1 [0224.195] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235768 | out: hHeap=0x1f0000) returned 1 [0224.195] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0224.195] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\tnameserv.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\tnameserv.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0224.195] GetFileType (hFile=0x204) returned 0x1 [0224.196] CloseHandle (hObject=0x204) returned 1 [0224.196] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220508 [0224.196] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\tnameserv.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\tnameserv.exe"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1 [0224.196] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220508 | out: hHeap=0x1f0000) returned 1 [0224.196] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0224.197] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\tnameserv.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\tnameserv.exe"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1 [0224.197] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0224.197] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0224.197] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0224.197] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13840, dwReserved0=0x0, dwReserved1=0x0, cFileName="unpack.dll", cAlternateFileName="")) returned 1 [0224.197] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0224.197] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236190 [0224.197] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220fe8 [0224.197] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236190 | out: hHeap=0x1f0000) returned 1 [0224.198] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0224.198] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0224.198] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\unpack.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0224.199] GetFileType (hFile=0x204) returned 0x1 [0224.199] CloseHandle (hObject=0x204) returned 1 [0224.199] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0224.200] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\unpack.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13840)) returned 1 [0224.200] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0224.200] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0224.200] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\unpack.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13840)) returned 1 [0224.200] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0224.200] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220508 [0224.200] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220508 | out: hHeap=0x1f0000) returned 1 [0224.201] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x30240, dwReserved0=0x0, dwReserved1=0x0, cFileName="unpack200.exe", cAlternateFileName="UNPACK~1.EXE")) returned 1 [0224.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0224.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235768 [0224.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220f50 [0224.201] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235768 | out: hHeap=0x1f0000) returned 1 [0224.201] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0224.201] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0224.202] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack200.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\unpack200.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0224.202] GetFileType (hFile=0x204) returned 0x1 [0224.202] CloseHandle (hObject=0x204) returned 1 [0224.203] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0224.203] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack200.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\unpack200.exe"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x30240)) returned 1 [0224.203] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0224.203] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2201c0 [0224.203] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack200.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\unpack200.exe"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x30240)) returned 1 [0224.203] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2201c0 | out: hHeap=0x1f0000) returned 1 [0224.204] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0224.204] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0224.204] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc040, dwReserved0=0x0, dwReserved1=0x0, cFileName="verify.dll", cAlternateFileName="")) returned 1 [0224.204] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0224.204] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236190 [0224.204] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221410 [0224.204] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236190 | out: hHeap=0x1f0000) returned 1 [0224.204] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0224.204] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0224.564] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\verify.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\verify.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0224.565] GetFileType (hFile=0x230) returned 0x1 [0224.565] CloseHandle (hObject=0x230) returned 1 [0224.566] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220238 [0224.566] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\verify.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\verify.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc040)) returned 1 [0224.566] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220238 | out: hHeap=0x1f0000) returned 1 [0224.566] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fab8 [0224.566] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\verify.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\verify.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc040)) returned 1 [0224.566] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fab8 | out: hHeap=0x1f0000) returned 1 [0224.566] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220328 [0224.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220328 | out: hHeap=0x1f0000) returned 1 [0224.567] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="w2k_lsa_auth.dll", cAlternateFileName="W2K_LS~1.DLL")) returned 1 [0224.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238cc8 [0224.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235eb8 [0224.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221540 [0224.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235eb8 | out: hHeap=0x1f0000) returned 1 [0224.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0224.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238cc8 | out: hHeap=0x1f0000) returned 1 [0224.568] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\w2k_lsa_auth.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\w2k_lsa_auth.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0224.568] GetFileType (hFile=0x230) returned 0x1 [0224.569] CloseHandle (hObject=0x230) returned 1 [0224.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211e10 [0224.569] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\w2k_lsa_auth.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\w2k_lsa_auth.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5e40)) returned 1 [0224.569] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e10 | out: hHeap=0x1f0000) returned 1 [0224.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0224.570] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\w2k_lsa_auth.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\w2k_lsa_auth.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5e40)) returned 1 [0224.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0224.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211b68 [0224.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b68 | out: hHeap=0x1f0000) returned 1 [0224.570] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1ae40, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsAccessBridge-64.dll", cAlternateFileName="WINDOW~1.DLL")) returned 1 [0224.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228b00 [0224.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235eb8 [0224.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0224.580] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235eb8 | out: hHeap=0x1f0000) returned 1 [0224.580] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0224.580] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228b00 | out: hHeap=0x1f0000) returned 1 [0224.581] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\WindowsAccessBridge-64.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\windowsaccessbridge-64.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0224.581] GetFileType (hFile=0x1ac) returned 0x1 [0224.582] CloseHandle (hObject=0x1ac) returned 1 [0224.582] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0224.582] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\WindowsAccessBridge-64.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\windowsaccessbridge-64.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1ae40)) returned 1 [0224.582] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0224.582] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0224.583] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\WindowsAccessBridge-64.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\windowsaccessbridge-64.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1ae40)) returned 1 [0224.583] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0224.583] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0224.583] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0224.583] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2f040, dwReserved0=0x0, dwReserved1=0x0, cFileName="wsdetect.dll", cAlternateFileName="")) returned 1 [0224.583] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0224.583] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2358a0 [0224.583] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220eb8 [0224.584] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2358a0 | out: hHeap=0x1f0000) returned 1 [0224.584] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0224.584] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0224.584] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\wsdetect.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\wsdetect.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0224.585] GetFileType (hFile=0x1ac) returned 0x1 [0224.585] CloseHandle (hObject=0x1ac) returned 1 [0224.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f7e8 [0224.586] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\wsdetect.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\wsdetect.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2f040)) returned 1 [0224.586] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f7e8 | out: hHeap=0x1f0000) returned 1 [0224.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fa40 [0224.586] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\wsdetect.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\wsdetect.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2f040)) returned 1 [0224.586] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fa40 | out: hHeap=0x1f0000) returned 1 [0224.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220328 [0224.586] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220328 | out: hHeap=0x1f0000) returned 1 [0224.586] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13040, dwReserved0=0x0, dwReserved1=0x0, cFileName="zip.dll", cAlternateFileName="")) returned 1 [0224.587] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235be0 [0224.587] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0224.587] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\zip.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\zip.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0224.587] GetFileType (hFile=0x1ac) returned 0x1 [0224.588] CloseHandle (hObject=0x1ac) returned 1 [0224.588] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2358a0 [0224.588] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\zip.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\zip.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13040)) returned 1 [0224.588] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2358a0 | out: hHeap=0x1f0000) returned 1 [0224.588] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2358a0 [0224.589] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\zip.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\zip.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13040)) returned 1 [0224.589] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2358a0 | out: hHeap=0x1f0000) returned 1 [0224.589] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236058 [0224.589] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236058 | out: hHeap=0x1f0000) returned 1 [0224.589] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13040, dwReserved0=0x0, dwReserved1=0x0, cFileName="zip.dll", cAlternateFileName="")) returned 0 [0224.589] FindClose (in: hFindFile=0x24e6c0 | out: hFindFile=0x24e6c0) returned 1 [0224.589] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228680 [0224.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0224.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e4f8 [0224.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220328 [0224.590] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\*", lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xcec73804, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xcf5ea995, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e780 [0224.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220508 [0224.590] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220328 | out: hHeap=0x1f0000) returned 1 [0224.590] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0224.590] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xcec73804, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xcf5ea995, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0224.591] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fa40 [0224.591] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220508 | out: hHeap=0x1f0000) returned 1 [0224.591] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0224.591] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0224.591] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xfa840, dwReserved0=0x0, dwReserved1=0x0, cFileName="deployJava1.dll", cAlternateFileName="DEPLOY~1.DLL")) returned 1 [0224.591] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0224.591] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0224.591] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218b88 [0224.591] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0224.592] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fa40 | out: hHeap=0x1f0000) returned 1 [0224.592] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0224.592] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\deployJava1.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\deployjava1.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0224.593] GetFileType (hFile=0x1ac) returned 0x1 [0224.593] CloseHandle (hObject=0x1ac) returned 1 [0224.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0224.593] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\deployJava1.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\deployjava1.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xfa840)) returned 1 [0224.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0224.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0224.594] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\deployJava1.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\deployjava1.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xfa840)) returned 1 [0224.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0224.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0224.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0224.594] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf5b4f0e, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xcf5b4f0e, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xcf5ea995, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="deployJava1.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="DEPLOY~1.ODV")) returned 1 [0224.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a2d8 [0224.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0224.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x236d20 [0224.595] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0224.595] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218b88 | out: hHeap=0x1f0000) returned 1 [0224.595] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a2d8 | out: hHeap=0x1f0000) returned 1 [0224.595] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\deployJava1.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\deployjava1.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0224.596] GetFileType (hFile=0x1ac) returned 0x1 [0224.597] CloseHandle (hObject=0x1ac) returned 1 [0224.597] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x237298 [0224.597] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\deployJava1.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\deployjava1.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf5b4f0e, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xcf5b4f0e, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xcf5ea995, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0224.597] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237298 | out: hHeap=0x1f0000) returned 1 [0224.597] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x237810 [0224.598] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\deployJava1.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\deployjava1.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf5b4f0e, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xcf5b4f0e, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xcf5ea995, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0224.598] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237810 | out: hHeap=0x1f0000) returned 1 [0224.598] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x237810 [0224.598] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237810 | out: hHeap=0x1f0000) returned 1 [0224.598] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xcec73804, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x11a743, dwReserved0=0x0, dwReserved1=0x0, cFileName="npdeployJava1.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="NPDEPL~1.ODV")) returned 1 [0224.598] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261388 [0224.598] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd88 [0224.598] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x236e38 [0224.598] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd88 | out: hHeap=0x1f0000) returned 1 [0224.598] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236d20 | out: hHeap=0x1f0000) returned 1 [0224.598] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261388 | out: hHeap=0x1f0000) returned 1 [0224.599] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\npdeployJava1.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\npdeployjava1.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0224.599] GetFileType (hFile=0x1ac) returned 0x1 [0224.600] CloseHandle (hObject=0x1ac) returned 1 [0224.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x237298 [0224.600] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\npdeployJava1.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\npdeployjava1.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xcec73804, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x11a743)) returned 1 [0224.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237298 | out: hHeap=0x1f0000) returned 1 [0224.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x236d20 [0224.600] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\npdeployJava1.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\npdeployjava1.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xcec73804, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x11a743)) returned 1 [0224.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236d20 | out: hHeap=0x1f0000) returned 1 [0224.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x237810 [0224.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237810 | out: hHeap=0x1f0000) returned 1 [0224.600] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xcec73804, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x11a743, dwReserved0=0x0, dwReserved1=0x0, cFileName="npdeployJava1.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="NPDEPL~1.ODV")) returned 0 [0224.600] FindClose (in: hFindFile=0x24e780 | out: hFindFile=0x24e780) returned 1 [0224.601] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236e38 | out: hHeap=0x1f0000) returned 1 [0224.601] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e4f8 | out: hHeap=0x1f0000) returned 1 [0224.601] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0224.601] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228680 | out: hHeap=0x1f0000) returned 1 [0224.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228710 [0224.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0224.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d508 [0224.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0224.602] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\*", lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2a2bf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24eb00 [0224.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd88 [0224.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0224.602] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0224.602] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2a2bf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0224.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0224.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd88 | out: hHeap=0x1f0000) returned 1 [0224.603] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0224.603] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0224.603] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xca750, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr100.dll", cAlternateFileName="")) returned 1 [0224.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238488 [0224.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0224.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218818 [0224.603] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0224.603] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0224.603] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238488 | out: hHeap=0x1f0000) returned 1 [0224.604] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\msvcr100.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\plugin2\\msvcr100.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0224.604] GetFileType (hFile=0x1ac) returned 0x1 [0224.604] CloseHandle (hObject=0x1ac) returned 1 [0224.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2124f8 [0224.605] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\msvcr100.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\plugin2\\msvcr100.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xca750)) returned 1 [0224.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2124f8 | out: hHeap=0x1f0000) returned 1 [0224.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2128b0 [0224.605] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\msvcr100.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\plugin2\\msvcr100.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xca750)) returned 1 [0224.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2128b0 | out: hHeap=0x1f0000) returned 1 [0224.606] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212938 [0224.606] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212938 | out: hHeap=0x1f0000) returned 1 [0224.606] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39440, dwReserved0=0x0, dwReserved1=0x0, cFileName="npjp2.dll", cAlternateFileName="")) returned 1 [0224.606] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0224.606] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0224.606] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x2191b8 [0224.606] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0224.606] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218818 | out: hHeap=0x1f0000) returned 1 [0224.606] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0224.607] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\npjp2.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\plugin2\\npjp2.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0224.607] GetFileType (hFile=0x1ac) returned 0x1 [0224.608] CloseHandle (hObject=0x1ac) returned 1 [0224.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212030 [0224.608] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\npjp2.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\plugin2\\npjp2.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39440)) returned 1 [0224.608] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212030 | out: hHeap=0x1f0000) returned 1 [0224.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2119d0 [0224.608] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\npjp2.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\plugin2\\npjp2.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39440)) returned 1 [0224.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2119d0 | out: hHeap=0x1f0000) returned 1 [0224.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211f20 [0224.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211f20 | out: hHeap=0x1f0000) returned 1 [0224.609] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39440, dwReserved0=0x0, dwReserved1=0x0, cFileName="npjp2.dll", cAlternateFileName="")) returned 0 [0224.609] FindClose (in: hFindFile=0x24eb00 | out: hFindFile=0x24eb00) returned 1 [0224.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2191b8 | out: hHeap=0x1f0000) returned 1 [0224.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d508 | out: hHeap=0x1f0000) returned 1 [0224.610] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0224.610] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228710 | out: hHeap=0x1f0000) returned 1 [0224.610] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228440 [0224.610] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0224.610] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d508 [0224.610] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0224.610] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\*", lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8af971e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2b6c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xab35b530, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e980 [0224.610] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2358a0 [0224.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220d88 [0224.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2358a0 | out: hHeap=0x1f0000) returned 1 [0224.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0224.611] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0224.611] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8af971e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2b6c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xab35b530, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0224.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2358a0 [0224.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220e20 [0224.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2358a0 | out: hHeap=0x1f0000) returned 1 [0224.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0224.941] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0224.941] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0224.941] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xab35b530, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xab35b530, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xabaa88bc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x11d0000, dwReserved0=0x0, dwReserved1=0x0, cFileName="classes.jsa", cAlternateFileName="")) returned 1 [0224.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0224.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235b78 [0224.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2214a8 [0224.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0224.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0224.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0224.943] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\classes.jsa" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\classes.jsa"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0224.943] GetLastError () returned 0x5 [0224.943] GetLastError () returned 0x5 [0224.943] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b1f9e6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b1f9e6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b1f9e6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x866c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="jvm.dll", cAlternateFileName="")) returned 1 [0224.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235de8 [0224.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220c58 [0224.944] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235de8 | out: hHeap=0x1f0000) returned 1 [0224.944] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0224.944] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\jvm.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\jvm.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0224.945] GetFileType (hFile=0x200) returned 0x1 [0224.945] CloseHandle (hObject=0x200) returned 1 [0228.067] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fa40 [0228.067] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\jvm.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\jvm.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b1f9e6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b1f9e6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xd0a6b53b, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x866d43)) returned 1 [0228.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fa40 | out: hHeap=0x1f0000) returned 1 [0228.067] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fb30 [0228.068] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\jvm.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\jvm.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b1f9e6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b1f9e6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xd0a6b53b, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x866d43)) returned 1 [0228.068] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fb30 | out: hHeap=0x1f0000) returned 1 [0228.068] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fc98 [0228.068] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fc98 | out: hHeap=0x1f0000) returned 1 [0228.068] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b1f9e6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b1f9e6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b1f9e6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x58f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Xusage.txt", cAlternateFileName="")) returned 1 [0228.069] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0228.069] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235e50 [0228.069] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2212e0 [0228.069] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235e50 | out: hHeap=0x1f0000) returned 1 [0228.069] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0228.069] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0228.069] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\xusage.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0228.070] GetFileType (hFile=0x200) returned 0x1 [0228.070] CloseHandle (hObject=0x200) returned 1 [0228.070] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213680 [0228.071] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\xusage.txt"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b1f9e6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b1f9e6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b1f9e6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x58f)) returned 1 [0228.071] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213680 | out: hHeap=0x1f0000) returned 1 [0228.071] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e88 [0228.071] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\xusage.txt"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b1f9e6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b1f9e6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b1f9e6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x58f)) returned 1 [0228.071] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e88 | out: hHeap=0x1f0000) returned 1 [0228.071] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0228.071] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0228.071] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b1f9e6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b1f9e6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b1f9e6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x58f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Xusage.txt", cAlternateFileName="")) returned 0 [0228.071] FindClose (in: hFindFile=0x24e980 | out: hFindFile=0x24e980) returned 1 [0228.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0228.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d508 | out: hHeap=0x1f0000) returned 1 [0228.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0228.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228440 | out: hHeap=0x1f0000) returned 1 [0228.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235be0 | out: hHeap=0x1f0000) returned 1 [0228.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ff68 | out: hHeap=0x1f0000) returned 1 [0228.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235838 | out: hHeap=0x1f0000) returned 1 [0228.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235d80 | out: hHeap=0x1f0000) returned 1 [0228.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225f18 | out: hHeap=0x1f0000) returned 1 [0228.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261cc0 | out: hHeap=0x1f0000) returned 1 [0228.073] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0228.073] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233f60 | out: hHeap=0x1f0000) returned 1 [0228.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228998 [0228.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0228.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d508 [0228.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235be0 [0228.073] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\*", lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe1f09, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd10f9c74, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e600 [0228.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235d80 [0228.073] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235be0 | out: hHeap=0x1f0000) returned 1 [0228.074] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0228.074] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe1f09, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd10f9c74, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0228.074] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235e50 [0228.074] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235d80 | out: hHeap=0x1f0000) returned 1 [0228.074] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0228.074] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0228.074] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x95, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.properties", cAlternateFileName="ACCESS~1.PRO")) returned 1 [0228.074] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228bd8 [0228.074] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235d80 [0228.074] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0228.075] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235d80 | out: hHeap=0x1f0000) returned 1 [0228.075] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235e50 | out: hHeap=0x1f0000) returned 1 [0228.075] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228bd8 | out: hHeap=0x1f0000) returned 1 [0228.075] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\accessibility.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\accessibility.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0228.076] GetFileType (hFile=0x200) returned 0x1 [0228.076] CloseHandle (hObject=0x200) returned 1 [0228.077] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0228.077] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\accessibility.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\accessibility.properties"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x95)) returned 1 [0228.077] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0228.077] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0228.077] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\accessibility.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\accessibility.properties"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x95)) returned 1 [0228.077] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0228.077] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0228.078] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0228.078] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0228.078] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0228.078] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe451d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64", cAlternateFileName="")) returned 1 [0228.078] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235be0 [0228.078] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0228.078] lstrcmpW (lpString1="amd64", lpString2=".") returned 1 [0228.078] lstrcmpW (lpString1="amd64", lpString2="..") returned 1 [0228.078] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204d30 [0228.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235d80 [0228.079] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105ca28, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="applet", cAlternateFileName="")) returned 1 [0228.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235e50 [0228.079] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235be0 | out: hHeap=0x1f0000) returned 1 [0228.079] lstrcmpW (lpString1="applet", lpString2=".") returned 1 [0228.079] lstrcmpW (lpString1="applet", lpString2="..") returned 1 [0228.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239198 [0228.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235be0 [0228.080] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d30 | out: hHeap=0x1f0000) returned 1 [0228.080] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x562, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendars.properties", cAlternateFileName="CALEND~1.PRO")) returned 1 [0228.080] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238e50 [0228.080] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235838 [0228.080] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221410 [0228.080] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235838 | out: hHeap=0x1f0000) returned 1 [0228.080] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235e50 | out: hHeap=0x1f0000) returned 1 [0228.080] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238e50 | out: hHeap=0x1f0000) returned 1 [0228.081] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\calendars.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\calendars.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0228.081] GetFileType (hFile=0x200) returned 0x1 [0228.082] CloseHandle (hObject=0x200) returned 1 [0228.082] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f10 [0228.083] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\calendars.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\calendars.properties"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x562)) returned 1 [0228.083] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f10 | out: hHeap=0x1f0000) returned 1 [0228.083] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0228.084] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\calendars.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\calendars.properties"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x562)) returned 1 [0228.085] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0228.085] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2132c8 [0228.085] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0228.085] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2132c8 | out: hHeap=0x1f0000) returned 1 [0228.085] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0228.085] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa7bbd53, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xaa7bbd53, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xaa80821a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2e56fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="charsets.jar", cAlternateFileName="")) returned 1 [0228.085] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0228.085] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235e50 [0228.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221968 [0228.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235e50 | out: hHeap=0x1f0000) returned 1 [0228.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0228.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0228.087] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\charsets.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\charsets.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0228.087] GetFileType (hFile=0x200) returned 0x1 [0228.087] CloseHandle (hObject=0x200) returned 1 [0229.485] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f770 [0229.485] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\charsets.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\charsets.jar"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa7bbd53, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xaa7bbd53, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xd1b9affd, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x2e57fd)) returned 1 [0229.485] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f770 | out: hHeap=0x1f0000) returned 1 [0229.485] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fab8 [0229.485] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\charsets.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\charsets.jar"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa7bbd53, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xaa7bbd53, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xd1b9affd, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x2e57fd)) returned 1 [0229.486] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fab8 | out: hHeap=0x1f0000) returned 1 [0229.486] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0229.486] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0229.486] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x14983, dwReserved0=0x0, dwReserved1=0x0, cFileName="classlist", cAlternateFileName="CLASSL~1")) returned 1 [0229.486] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0229.486] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236330 [0229.486] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220c58 [0229.486] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236330 | out: hHeap=0x1f0000) returned 1 [0229.486] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0229.487] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0229.487] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\classlist" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\classlist"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0229.487] GetFileType (hFile=0x200) returned 0x1 [0229.488] CloseHandle (hObject=0x200) returned 1 [0229.488] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0229.488] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\classlist" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\classlist"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x14983)) returned 1 [0229.488] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0229.488] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fc98 [0229.489] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\classlist" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\classlist"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x14983)) returned 1 [0229.489] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fc98 | out: hHeap=0x1f0000) returned 1 [0229.489] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0229.489] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0229.489] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105e2a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cmm", cAlternateFileName="")) returned 1 [0229.489] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236330 [0229.489] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0229.489] lstrcmpW (lpString1="cmm", lpString2=".") returned 1 [0229.490] lstrcmpW (lpString1="cmm", lpString2="..") returned 1 [0229.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x48) returned 0x226238 [0229.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2357d0 [0229.490] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239198 | out: hHeap=0x1f0000) returned 1 [0229.490] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x15ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="content-types.properties", cAlternateFileName="CONTEN~1.PRO")) returned 1 [0229.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228a28 [0229.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2359d8 [0229.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0229.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2359d8 | out: hHeap=0x1f0000) returned 1 [0229.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236330 | out: hHeap=0x1f0000) returned 1 [0229.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228a28 | out: hHeap=0x1f0000) returned 1 [0229.491] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\content-types.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\content-types.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0229.492] GetFileType (hFile=0x200) returned 0x1 [0229.492] CloseHandle (hObject=0x200) returned 1 [0229.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0229.493] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\content-types.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\content-types.properties"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x15ac)) returned 1 [0229.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0229.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0229.493] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\content-types.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\content-types.properties"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x15ac)) returned 1 [0229.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0229.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0229.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0229.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0229.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0229.494] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x101a, dwReserved0=0x0, dwReserved1=0x0, cFileName="currency.data", cAlternateFileName="CURREN~1.DAT")) returned 1 [0229.494] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0229.494] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2359d8 [0229.494] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2214a8 [0229.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2359d8 | out: hHeap=0x1f0000) returned 1 [0229.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0229.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0229.495] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\currency.data" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\currency.data"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0229.495] GetFileType (hFile=0x200) returned 0x1 [0229.496] CloseHandle (hObject=0x200) returned 1 [0229.496] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fef0 [0229.496] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\currency.data" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\currency.data"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x101a)) returned 1 [0229.497] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fef0 | out: hHeap=0x1f0000) returned 1 [0229.497] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f7e8 [0229.497] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\currency.data" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\currency.data"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x101a)) returned 1 [0229.497] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f7e8 | out: hHeap=0x1f0000) returned 1 [0229.497] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0229.497] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0229.497] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa10e432c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="deploy", cAlternateFileName="")) returned 1 [0229.497] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236330 [0229.497] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0229.498] lstrcmpW (lpString1="deploy", lpString2=".") returned 1 [0229.498] lstrcmpW (lpString1="deploy", lpString2="..") returned 1 [0229.498] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2359d8 [0229.498] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2365a0 [0229.498] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226238 | out: hHeap=0x1f0000) returned 1 [0229.498] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ed9405, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8ed9405, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa900a6f7, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4ce7de, dwReserved0=0x0, dwReserved1=0x0, cFileName="deploy.jar", cAlternateFileName="")) returned 1 [0229.498] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0229.498] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236468 [0229.498] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220e20 [0229.499] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0229.499] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236330 | out: hHeap=0x1f0000) returned 1 [0229.499] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0229.499] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0229.500] GetFileType (hFile=0x200) returned 0x1 [0229.500] CloseHandle (hObject=0x200) returned 1 [0231.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0231.562] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy.jar"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ed9405, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8ed9405, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa900a6f7, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4ce7de)) returned 1 [0231.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0231.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0231.563] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy.jar"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ed9405, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8ed9405, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa900a6f7, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4ce7de)) returned 1 [0231.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0231.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0231.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0231.563] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa11bdb26, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xaa8ed01b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ext", cAlternateFileName="")) returned 1 [0231.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236058 [0231.564] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0231.564] lstrcmpW (lpString1="ext", lpString2=".") returned 1 [0231.564] lstrcmpW (lpString1="ext", lpString2="..") returned 1 [0231.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0231.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236260 [0231.564] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2359d8 | out: hHeap=0x1f0000) returned 1 [0231.564] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf58, dwReserved0=0x0, dwReserved1=0x0, cFileName="flavormap.properties", cAlternateFileName="FLAVOR~1.PRO")) returned 1 [0231.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238de0 [0231.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235b78 [0231.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2217a0 [0231.564] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0231.565] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236058 | out: hHeap=0x1f0000) returned 1 [0231.565] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238de0 | out: hHeap=0x1f0000) returned 1 [0231.565] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\flavormap.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0231.566] GetFileType (hFile=0x200) returned 0x1 [0231.566] CloseHandle (hObject=0x200) returned 1 [0231.566] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0231.566] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\flavormap.properties"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf58)) returned 1 [0231.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0231.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0231.567] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\flavormap.properties"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf58)) returned 1 [0231.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0231.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0231.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0231.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0231.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0231.567] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xeba, dwReserved0=0x0, dwReserved1=0x0, cFileName="fontconfig.bfc", cAlternateFileName="FONTCO~1.BFC")) returned 1 [0231.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0231.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2359d8 [0231.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220fe8 [0231.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2359d8 | out: hHeap=0x1f0000) returned 1 [0231.569] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0231.569] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0231.569] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.bfc"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0231.569] GetFileType (hFile=0x200) returned 0x1 [0231.570] CloseHandle (hObject=0x200) returned 1 [0231.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fef0 [0231.570] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.bfc"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xeba)) returned 1 [0231.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fef0 | out: hHeap=0x1f0000) returned 1 [0231.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0231.570] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.bfc"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xeba)) returned 1 [0231.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0231.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220490 [0231.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220490 | out: hHeap=0x1f0000) returned 1 [0231.571] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2948, dwReserved0=0x0, dwReserved1=0x0, cFileName="fontconfig.properties.src", cAlternateFileName="FONTCO~1.SRC")) returned 1 [0231.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228b00 [0231.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2359d8 [0231.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0231.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2359d8 | out: hHeap=0x1f0000) returned 1 [0231.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0231.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228b00 | out: hHeap=0x1f0000) returned 1 [0231.572] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.properties.src"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0231.572] GetFileType (hFile=0x200) returned 0x1 [0231.572] CloseHandle (hObject=0x200) returned 1 [0231.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0231.573] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.properties.src"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2948)) returned 1 [0231.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0231.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0231.573] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.properties.src"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2948)) returned 1 [0231.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0231.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0231.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0231.573] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa122f229, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fonts", cAlternateFileName="")) returned 1 [0231.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235b78 [0231.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0231.574] lstrcmpW (lpString1="fonts", lpString2=".") returned 1 [0231.574] lstrcmpW (lpString1="fonts", lpString2="..") returned 1 [0231.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2359d8 [0231.574] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x368a, dwReserved0=0x0, dwReserved1=0x0, cFileName="hijrah-config-umalqura.properties", cAlternateFileName="HIJRAH~1.PRO")) returned 1 [0231.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8530 [0231.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236058 [0231.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a770 [0231.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236058 | out: hHeap=0x1f0000) returned 1 [0231.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0231.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8530 | out: hHeap=0x1f0000) returned 1 [0231.575] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0231.575] GetFileType (hFile=0x200) returned 0x1 [0231.575] CloseHandle (hObject=0x200) returned 1 [0231.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219f90 [0231.576] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x368a)) returned 1 [0231.576] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219f90 | out: hHeap=0x1f0000) returned 1 [0231.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a968 [0231.576] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x368a)) returned 1 [0231.576] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a968 | out: hHeap=0x1f0000) returned 1 [0231.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a6c8 [0231.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0231.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a6c8 | out: hHeap=0x1f0000) returned 1 [0231.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0231.577] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa12313ee, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0231.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236058 [0231.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a770 | out: hHeap=0x1f0000) returned 1 [0231.577] lstrcmpW (lpString1="images", lpString2=".") returned 1 [0231.577] lstrcmpW (lpString1="images", lpString2="..") returned 1 [0231.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd8) returned 0x22d368 [0231.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235b78 [0231.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0231.577] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x38, dwReserved0=0x0, dwReserved1=0x0, cFileName="javafx.properties", cAlternateFileName="JAVAFX~1.PRO")) returned 1 [0231.578] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238e50 [0231.578] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236538 [0231.578] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221410 [0231.578] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236538 | out: hHeap=0x1f0000) returned 1 [0231.578] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236058 | out: hHeap=0x1f0000) returned 1 [0231.578] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238e50 | out: hHeap=0x1f0000) returned 1 [0231.579] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\javafx.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javafx.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0231.579] GetFileType (hFile=0x200) returned 0x1 [0231.579] CloseHandle (hObject=0x200) returned 1 [0231.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213570 [0231.580] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\javafx.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javafx.properties"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x38)) returned 1 [0231.580] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213570 | out: hHeap=0x1f0000) returned 1 [0231.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0231.580] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\javafx.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javafx.properties"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x38)) returned 1 [0231.580] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0231.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0231.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0231.581] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0231.581] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0231.581] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8e40a9d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8e40a9d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8e66d0e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xe6827, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaws.jar", cAlternateFileName="")) returned 1 [0231.581] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0231.581] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236058 [0231.581] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2212e0 [0231.581] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236058 | out: hHeap=0x1f0000) returned 1 [0231.581] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0231.581] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0231.582] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javaws.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0231.582] GetLastError () returned 0x2 [0231.582] GetLastError () returned 0x2 [0231.582] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd10f9c74, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xd10f9c74, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xd10f9c74, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaws.jar.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="JAVAWS~1.ODV")) returned 1 [0231.582] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219e40 [0231.583] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236058 [0231.583] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x21be10 [0231.583] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236058 | out: hHeap=0x1f0000) returned 1 [0231.583] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0231.583] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219e40 | out: hHeap=0x1f0000) returned 1 [0231.583] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javaws.jar.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0231.584] GetFileType (hFile=0x200) returned 0x1 [0231.584] CloseHandle (hObject=0x200) returned 1 [0231.585] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x21b270 [0231.585] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javaws.jar.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd10f9c74, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xd10f9c74, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xd1edcd99, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xe693a)) returned 1 [0231.585] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21b270 | out: hHeap=0x1f0000) returned 1 [0231.585] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x21b748 [0231.585] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javaws.jar.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd10f9c74, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xd10f9c74, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xd1edcd99, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xe693a)) returned 1 [0231.585] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21b748 | out: hHeap=0x1f0000) returned 1 [0231.585] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x21b178 [0231.586] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21b178 | out: hHeap=0x1f0000) returned 1 [0231.586] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1c6de, dwReserved0=0x0, dwReserved1=0x0, cFileName="jce.jar", cAlternateFileName="")) returned 1 [0231.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236058 [0231.586] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21be10 | out: hHeap=0x1f0000) returned 1 [0231.586] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jce.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0231.586] GetFileType (hFile=0x200) returned 0x1 [0231.587] CloseHandle (hObject=0x200) returned 1 [0231.587] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236608 [0231.587] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jce.jar"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1c6de)) returned 1 [0231.587] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236608 | out: hHeap=0x1f0000) returned 1 [0231.587] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2364d0 [0231.587] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jce.jar"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1c6de)) returned 1 [0231.587] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2364d0 | out: hHeap=0x1f0000) returned 1 [0231.588] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236608 [0231.588] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236608 | out: hHeap=0x1f0000) returned 1 [0231.588] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1295634, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfr", cAlternateFileName="")) returned 1 [0231.588] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2364d0 [0231.588] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236058 | out: hHeap=0x1f0000) returned 1 [0231.588] lstrcmpW (lpString1="jfr", lpString2=".") returned 1 [0231.588] lstrcmpW (lpString1="jfr", lpString2="..") returned 1 [0231.588] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236058 [0231.588] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x88dc5, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfr.jar", cAlternateFileName="")) returned 1 [0231.588] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236608 [0231.588] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2364d0 | out: hHeap=0x1f0000) returned 1 [0231.588] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0231.589] GetFileType (hFile=0x200) returned 0x1 [0231.589] CloseHandle (hObject=0x200) returned 1 [0231.589] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236468 [0231.589] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr.jar"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x88dc5)) returned 1 [0231.589] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0231.589] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236400 [0231.589] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr.jar"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x88dc5)) returned 1 [0231.590] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236400 | out: hHeap=0x1f0000) returned 1 [0231.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236400 [0231.590] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236400 | out: hHeap=0x1f0000) returned 1 [0231.590] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x848c, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfxswt.jar", cAlternateFileName="")) returned 1 [0231.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0231.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236538 [0231.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2212e0 [0231.590] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236538 | out: hHeap=0x1f0000) returned 1 [0231.590] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236608 | out: hHeap=0x1f0000) returned 1 [0231.590] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0231.591] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfxswt.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0231.591] GetFileType (hFile=0x200) returned 0x1 [0231.591] CloseHandle (hObject=0x200) returned 1 [0231.591] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0231.591] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfxswt.jar"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x848c)) returned 1 [0231.591] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0231.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0231.592] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfxswt.jar"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x848c)) returned 1 [0231.592] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0231.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0231.592] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0231.592] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa76f896, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xaa76f896, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xaa76f896, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8eb80, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsse.jar", cAlternateFileName="")) returned 1 [0231.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0231.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236400 [0231.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2217a0 [0231.592] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236400 | out: hHeap=0x1f0000) returned 1 [0231.592] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0231.592] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0231.593] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jsse.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0231.593] GetFileType (hFile=0x200) returned 0x1 [0231.594] CloseHandle (hObject=0x200) returned 1 [0231.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fab8 [0231.594] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jsse.jar"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa76f896, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xaa76f896, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xaa76f896, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8eb80)) returned 1 [0231.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fab8 | out: hHeap=0x1f0000) returned 1 [0231.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220328 [0231.594] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jsse.jar"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa76f896, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xaa76f896, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xaa76f896, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8eb80)) returned 1 [0231.595] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220328 | out: hHeap=0x1f0000) returned 1 [0231.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fa40 [0231.595] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fa40 | out: hHeap=0x1f0000) returned 1 [0231.595] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1082, dwReserved0=0x0, dwReserved1=0x0, cFileName="jvm.hprof.txt", cAlternateFileName="JVMHPR~1.TXT")) returned 1 [0231.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0231.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236670 [0231.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221968 [0231.595] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236670 | out: hHeap=0x1f0000) returned 1 [0231.595] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0231.595] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0231.596] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jvm.hprof.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0231.596] GetFileType (hFile=0x200) returned 0x1 [0231.596] CloseHandle (hObject=0x200) returned 1 [0231.597] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220238 [0231.597] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jvm.hprof.txt"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1082)) returned 1 [0231.597] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220238 | out: hHeap=0x1f0000) returned 1 [0231.597] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2201c0 [0231.597] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jvm.hprof.txt"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1082)) returned 1 [0231.597] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2201c0 | out: hHeap=0x1f0000) returned 1 [0231.597] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fc98 [0231.598] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fc98 | out: hHeap=0x1f0000) returned 1 [0231.598] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x997, dwReserved0=0x0, dwReserved1=0x0, cFileName="logging.properties", cAlternateFileName="LOGGIN~1.PRO")) returned 1 [0231.598] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c90 [0231.598] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236670 [0231.598] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220d88 [0231.598] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236670 | out: hHeap=0x1f0000) returned 1 [0231.598] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0231.598] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c90 | out: hHeap=0x1f0000) returned 1 [0232.180] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\logging.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\logging.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0232.180] GetFileType (hFile=0x174) returned 0x1 [0232.180] CloseHandle (hObject=0x174) returned 1 [0232.181] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2133d8 [0232.181] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\logging.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\logging.properties"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x997)) returned 1 [0232.181] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2133d8 | out: hHeap=0x1f0000) returned 1 [0232.181] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0232.181] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\logging.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\logging.properties"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x997)) returned 1 [0232.181] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0232.181] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0232.181] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0232.181] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0232.182] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0232.182] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1389711, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="management", cAlternateFileName="MANAGE~1")) returned 1 [0232.182] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0232.182] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a90 [0232.182] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221708 [0232.182] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a90 | out: hHeap=0x1f0000) returned 1 [0232.182] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0232.182] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0232.182] lstrcmpW (lpString1="management", lpString2=".") returned 1 [0232.182] lstrcmpW (lpString1="management", lpString2="..") returned 1 [0232.182] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fc98 [0232.182] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x17d, dwReserved0=0x0, dwReserved1=0x0, cFileName="management-agent.jar", cAlternateFileName="MANAGE~1.JAR")) returned 1 [0232.182] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239278 [0232.182] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a90 [0232.183] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221a98 [0232.183] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a90 | out: hHeap=0x1f0000) returned 1 [0232.183] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0232.183] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239278 | out: hHeap=0x1f0000) returned 1 [0232.183] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\management-agent.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management-agent.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0232.183] GetFileType (hFile=0x174) returned 0x1 [0232.184] CloseHandle (hObject=0x174) returned 1 [0232.184] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0232.184] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\management-agent.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management-agent.jar"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x17d)) returned 1 [0232.184] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0232.184] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e88 [0232.184] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\management-agent.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management-agent.jar"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x17d)) returned 1 [0232.185] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e88 | out: hHeap=0x1f0000) returned 1 [0232.185] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0232.185] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0232.185] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x84e, dwReserved0=0x0, dwReserved1=0x0, cFileName="meta-index", cAlternateFileName="META-I~1")) returned 1 [0232.185] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0232.185] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a90 [0232.185] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221968 [0232.185] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a90 | out: hHeap=0x1f0000) returned 1 [0232.185] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0232.185] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0232.186] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\meta-index" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\meta-index"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0232.186] GetFileType (hFile=0x174) returned 0x1 [0232.186] CloseHandle (hObject=0x174) returned 1 [0232.187] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0232.187] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\meta-index" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\meta-index"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x84e)) returned 1 [0232.187] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0232.187] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0232.187] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\meta-index" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\meta-index"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x84e)) returned 1 [0232.187] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0232.187] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fef0 [0232.187] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fef0 | out: hHeap=0x1f0000) returned 1 [0232.187] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1170, dwReserved0=0x0, dwReserved1=0x0, cFileName="net.properties", cAlternateFileName="NET~1.PRO")) returned 1 [0232.188] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0232.188] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214b60 [0232.188] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221410 [0232.188] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214b60 | out: hHeap=0x1f0000) returned 1 [0232.188] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0232.188] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0232.188] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\net.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\net.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0232.188] GetFileType (hFile=0x174) returned 0x1 [0232.189] CloseHandle (hObject=0x174) returned 1 [0232.189] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0232.189] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\net.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\net.properties"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1170)) returned 1 [0232.189] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0232.189] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0232.189] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\net.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\net.properties"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1170)) returned 1 [0232.189] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0232.189] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0232.190] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0232.190] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0232.190] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0232.190] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8d81efe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8d81efe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8df45fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1d588b, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin.jar", cAlternateFileName="")) returned 1 [0232.190] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0232.190] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214dd0 [0232.190] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220f50 [0232.190] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214dd0 | out: hHeap=0x1f0000) returned 1 [0232.190] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0232.190] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0232.190] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\plugin.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\plugin.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0232.191] GetFileType (hFile=0x174) returned 0x1 [0232.191] CloseHandle (hObject=0x174) returned 1 [0232.191] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fb30 [0232.191] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\plugin.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\plugin.jar"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8d81efe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8d81efe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8df45fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1d588b)) returned 1 [0232.191] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fb30 | out: hHeap=0x1f0000) returned 1 [0232.191] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0232.191] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\plugin.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\plugin.jar"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8d81efe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8d81efe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8df45fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1d588b)) returned 1 [0232.192] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0232.192] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0232.192] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0232.192] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xaec, dwReserved0=0x0, dwReserved1=0x0, cFileName="psfont.properties.ja", cAlternateFileName="PSFONT~1.JA")) returned 1 [0232.192] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238e88 [0232.192] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a90 [0232.192] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2218d0 [0232.192] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a90 | out: hHeap=0x1f0000) returned 1 [0232.192] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0232.192] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238e88 | out: hHeap=0x1f0000) returned 1 [0232.193] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\psfont.properties.ja" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfont.properties.ja"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0232.193] GetFileType (hFile=0x174) returned 0x1 [0232.194] CloseHandle (hObject=0x174) returned 1 [0232.194] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213790 [0232.194] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\psfont.properties.ja" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfont.properties.ja"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xaec)) returned 1 [0232.194] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213790 | out: hHeap=0x1f0000) returned 1 [0232.194] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0232.194] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\psfont.properties.ja" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfont.properties.ja"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xaec)) returned 1 [0232.194] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0232.194] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0232.194] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0232.195] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2899, dwReserved0=0x0, dwReserved1=0x0, cFileName="psfontj2d.properties", cAlternateFileName="PSFONT~1.PRO")) returned 1 [0232.195] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2391d0 [0232.195] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a90 [0232.195] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220f50 [0232.195] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a90 | out: hHeap=0x1f0000) returned 1 [0232.195] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0232.195] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2391d0 | out: hHeap=0x1f0000) returned 1 [0232.195] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\psfontj2d.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfontj2d.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0232.196] GetFileType (hFile=0x174) returned 0x1 [0232.196] CloseHandle (hObject=0x174) returned 1 [0232.196] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212cf0 [0232.196] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\psfontj2d.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfontj2d.properties"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2899)) returned 1 [0232.196] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212cf0 | out: hHeap=0x1f0000) returned 1 [0232.196] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0232.196] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\psfontj2d.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfontj2d.properties"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2899)) returned 1 [0232.197] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0232.197] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0232.197] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0232.197] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0232.197] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0232.197] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x354add, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.jar", cAlternateFileName="RESOUR~1.JAR")) returned 1 [0232.197] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0232.197] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a90 [0232.197] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2218d0 [0232.197] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a90 | out: hHeap=0x1f0000) returned 1 [0232.197] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0232.197] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0232.198] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\resources.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\resources.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0232.198] GetFileType (hFile=0x174) returned 0x1 [0232.198] CloseHandle (hObject=0x174) returned 1 [0232.198] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0232.198] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\resources.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\resources.jar"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x354add)) returned 1 [0232.199] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0232.199] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220058 [0232.199] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\resources.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\resources.jar"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x354add)) returned 1 [0232.199] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220058 | out: hHeap=0x1f0000) returned 1 [0232.199] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd88 [0232.199] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd88 | out: hHeap=0x1f0000) returned 1 [0232.199] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa90a30aa, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa90a30aa, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xaa7233eb, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x340865b, dwReserved0=0x0, dwReserved1=0x0, cFileName="rt.jar", cAlternateFileName="")) returned 1 [0232.199] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d00 [0232.199] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0232.199] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\rt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\rt.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0232.200] GetFileType (hFile=0x174) returned 0x1 [0232.200] CloseHandle (hObject=0x174) returned 1 [0232.200] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a90 [0232.200] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\rt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\rt.jar"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa90a30aa, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa90a30aa, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xaa7233eb, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x340865b)) returned 1 [0232.200] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a90 | out: hHeap=0x1f0000) returned 1 [0232.200] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d68 [0232.200] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\rt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\rt.jar"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa90a30aa, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa90a30aa, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xaa7233eb, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x340865b)) returned 1 [0232.201] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d68 | out: hHeap=0x1f0000) returned 1 [0232.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214e38 [0232.201] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214e38 | out: hHeap=0x1f0000) returned 1 [0232.201] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1418338, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="security", cAlternateFileName="")) returned 1 [0232.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0232.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d68 [0232.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220fe8 [0232.201] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d68 | out: hHeap=0x1f0000) returned 1 [0232.201] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d00 | out: hHeap=0x1f0000) returned 1 [0232.201] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0232.201] lstrcmpW (lpString1="security", lpString2=".") returned 1 [0232.201] lstrcmpW (lpString1="security", lpString2="..") returned 1 [0232.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x138) returned 0x2366d8 [0232.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21ff68 [0232.201] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d368 | out: hHeap=0x1f0000) returned 1 [0232.201] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="sound.properties", cAlternateFileName="SOUND~1.PRO")) returned 1 [0232.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c90 [0232.202] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214f08 [0232.202] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221248 [0232.202] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f08 | out: hHeap=0x1f0000) returned 1 [0232.202] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0232.202] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c90 | out: hHeap=0x1f0000) returned 1 [0232.202] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\sound.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\sound.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0232.202] GetFileType (hFile=0x174) returned 0x1 [0232.203] CloseHandle (hObject=0x174) returned 1 [0232.203] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0232.203] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\sound.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\sound.properties"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4ba)) returned 1 [0232.203] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0232.203] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0232.203] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\sound.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\sound.properties"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4ba)) returned 1 [0232.203] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0232.203] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0232.203] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0232.204] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0232.204] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0232.204] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x19c1c, dwReserved0=0x0, dwReserved1=0x0, cFileName="tzdb.dat", cAlternateFileName="")) returned 1 [0232.204] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0232.204] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a90 [0232.204] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221118 [0232.204] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a90 | out: hHeap=0x1f0000) returned 1 [0232.204] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0232.204] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0232.204] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\tzdb.dat" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzdb.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0232.204] GetFileType (hFile=0x174) returned 0x1 [0232.205] CloseHandle (hObject=0x174) returned 1 [0232.205] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2203a0 [0232.205] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\tzdb.dat" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzdb.dat"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x19c1c)) returned 1 [0232.205] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2203a0 | out: hHeap=0x1f0000) returned 1 [0232.205] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0232.205] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\tzdb.dat" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzdb.dat"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x19c1c)) returned 1 [0232.206] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0232.206] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220508 [0232.206] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220508 | out: hHeap=0x1f0000) returned 1 [0232.206] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x20d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tzmappings", cAlternateFileName="TZMAPP~1")) returned 1 [0232.206] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0232.206] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a90 [0232.206] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221248 [0232.206] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a90 | out: hHeap=0x1f0000) returned 1 [0232.206] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0232.206] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0232.207] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\tzmappings" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzmappings"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0232.207] GetFileType (hFile=0x174) returned 0x1 [0232.207] CloseHandle (hObject=0x174) returned 1 [0232.208] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f7e8 [0232.208] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\tzmappings" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzmappings"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x20d0)) returned 1 [0232.208] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f7e8 | out: hHeap=0x1f0000) returned 1 [0232.208] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f7e8 [0232.208] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\tzmappings" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzmappings"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x20d0)) returned 1 [0232.208] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f7e8 | out: hHeap=0x1f0000) returned 1 [0232.208] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f7e8 [0232.208] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f7e8 | out: hHeap=0x1f0000) returned 1 [0232.208] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x20d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tzmappings", cAlternateFileName="TZMAPP~1")) returned 0 [0232.209] FindClose (in: hFindFile=0x24e600 | out: hFindFile=0x24e600) returned 1 [0232.209] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228878 [0232.209] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0232.210] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d9d0 [0232.210] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d68 [0232.210] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\*", lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe451d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ea80 [0232.211] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d00 [0232.211] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d68 | out: hHeap=0x1f0000) returned 1 [0232.211] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0232.211] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe451d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0232.212] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214f08 [0232.212] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2218d0 [0232.212] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f08 | out: hHeap=0x1f0000) returned 1 [0232.212] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d00 | out: hHeap=0x1f0000) returned 1 [0232.212] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0232.212] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0232.212] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x27a, dwReserved0=0x0, dwReserved1=0x0, cFileName="jvm.cfg", cAlternateFileName="")) returned 1 [0232.212] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214e38 [0232.212] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221708 [0232.212] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214e38 | out: hHeap=0x1f0000) returned 1 [0232.212] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0232.213] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0232.213] GetFileType (hFile=0x174) returned 0x1 [0232.213] CloseHandle (hObject=0x174) returned 1 [0232.214] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0232.214] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x27a)) returned 1 [0232.214] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0232.214] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21ffe0 [0232.214] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x27a)) returned 1 [0232.214] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ffe0 | out: hHeap=0x1f0000) returned 1 [0232.214] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220058 [0232.215] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220058 | out: hHeap=0x1f0000) returned 1 [0232.215] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x27a, dwReserved0=0x0, dwReserved1=0x0, cFileName="jvm.cfg", cAlternateFileName="")) returned 0 [0232.215] FindClose (in: hFindFile=0x24ea80 | out: hFindFile=0x24ea80) returned 1 [0232.215] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0232.215] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d9d0 | out: hHeap=0x1f0000) returned 1 [0232.215] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0232.216] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228878 | out: hHeap=0x1f0000) returned 1 [0232.216] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2285a8 [0232.216] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0232.216] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f020 [0232.216] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f7e8 [0232.216] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\applet\\*", lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105ca28, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ea80 [0232.216] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a90 [0232.216] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221a98 [0232.217] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a90 | out: hHeap=0x1f0000) returned 1 [0232.217] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f7e8 | out: hHeap=0x1f0000) returned 1 [0232.217] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0232.217] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105ca28, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0232.217] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214dd0 [0232.217] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220c58 [0232.217] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214dd0 | out: hHeap=0x1f0000) returned 1 [0232.217] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0232.217] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0232.218] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0232.218] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105ca28, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0232.218] FindClose (in: hFindFile=0x24ea80 | out: hFindFile=0x24ea80) returned 1 [0232.218] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0232.218] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f020 | out: hHeap=0x1f0000) returned 1 [0232.218] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0232.218] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2285a8 | out: hHeap=0x1f0000) returned 1 [0232.219] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228950 [0232.219] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0232.219] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f020 [0232.219] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a90 [0232.219] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\*", lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105e2a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e780 [0232.219] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214b60 [0232.219] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a90 | out: hHeap=0x1f0000) returned 1 [0232.219] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0232.220] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105e2a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0232.220] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d00 [0232.220] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214b60 | out: hHeap=0x1f0000) returned 1 [0232.220] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0232.220] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0232.220] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc824, dwReserved0=0x0, dwReserved1=0x0, cFileName="CIEXYZ.pf", cAlternateFileName="")) returned 1 [0232.220] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0232.220] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d68 [0232.220] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220eb8 [0232.221] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d68 | out: hHeap=0x1f0000) returned 1 [0232.221] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d00 | out: hHeap=0x1f0000) returned 1 [0232.221] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0232.221] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\CIEXYZ.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\ciexyz.pf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0232.221] GetFileType (hFile=0x174) returned 0x1 [0232.222] CloseHandle (hObject=0x174) returned 1 [0232.222] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fab8 [0232.222] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\CIEXYZ.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\ciexyz.pf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc824)) returned 1 [0232.223] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fab8 | out: hHeap=0x1f0000) returned 1 [0232.223] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fef0 [0232.223] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\CIEXYZ.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\ciexyz.pf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc824)) returned 1 [0232.223] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fef0 | out: hHeap=0x1f0000) returned 1 [0232.223] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0232.223] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0232.223] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x278, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRAY.pf", cAlternateFileName="")) returned 1 [0232.223] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d00 [0232.223] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221968 [0232.223] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d00 | out: hHeap=0x1f0000) returned 1 [0232.224] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0232.224] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\GRAY.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\gray.pf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0232.224] GetFileType (hFile=0x174) returned 0x1 [0232.225] CloseHandle (hObject=0x174) returned 1 [0232.225] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f7e8 [0232.225] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\GRAY.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\gray.pf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x278)) returned 1 [0232.225] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f7e8 | out: hHeap=0x1f0000) returned 1 [0232.226] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220328 [0232.226] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\GRAY.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\gray.pf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x278)) returned 1 [0232.226] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220328 | out: hHeap=0x1f0000) returned 1 [0232.226] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0232.226] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0232.226] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x0, dwReserved1=0x0, cFileName="LINEAR_RGB.pf", cAlternateFileName="LINEAR~1.PF")) returned 1 [0232.226] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0232.227] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214b60 [0232.227] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221540 [0232.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214b60 | out: hHeap=0x1f0000) returned 1 [0232.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0232.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0232.228] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\LINEAR_RGB.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\linear_rgb.pf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0232.228] GetFileType (hFile=0x174) returned 0x1 [0232.229] CloseHandle (hObject=0x174) returned 1 [0232.229] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213680 [0232.229] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\LINEAR_RGB.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\linear_rgb.pf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x414)) returned 1 [0232.229] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213680 | out: hHeap=0x1f0000) returned 1 [0232.230] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2133d8 [0232.230] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\LINEAR_RGB.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\linear_rgb.pf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x414)) returned 1 [0232.230] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2133d8 | out: hHeap=0x1f0000) returned 1 [0232.230] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213818 [0232.230] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213818 | out: hHeap=0x1f0000) returned 1 [0232.230] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4302a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PYCC.pf", cAlternateFileName="")) returned 1 [0232.230] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d00 [0232.231] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220eb8 [0232.231] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d00 | out: hHeap=0x1f0000) returned 1 [0232.231] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0232.232] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\pycc.pf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0232.232] GetFileType (hFile=0x174) returned 0x1 [0232.232] CloseHandle (hObject=0x174) returned 1 [0232.233] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0232.233] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\pycc.pf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4302a)) returned 1 [0232.233] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0232.233] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21ffe0 [0232.233] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\pycc.pf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4302a)) returned 1 [0232.234] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ffe0 | out: hHeap=0x1f0000) returned 1 [0232.657] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0232.657] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0232.657] GetLastError () returned 0x0 [0232.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0232.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228830 [0232.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262cb0 [0232.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0232.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239160 [0232.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0232.658] CryptAcquireContextA (in: phProv=0x1a1d6c8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1a1d6c8*=0x213790) returned 1 [0232.659] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238078 | out: pbBuffer=0x238078) returned 1 [0232.659] CryptReleaseContext (hProv=0x213790, dwFlags=0x0) returned 1 [0232.659] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0232.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x255c88 [0232.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2374c8 [0232.659] QueryPerformanceCounter (in: lpPerformanceCount=0x1a1d65c | out: lpPerformanceCount=0x1a1d65c*=39002840226) returned 1 [0232.660] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1a1d69c | out: lpSystemTimeAsFileTime=0x1a1d69c) [0232.660] QueryPerformanceCounter (in: lpPerformanceCount=0x1a1d65c | out: lpPerformanceCount=0x1a1d65c*=39002870175) returned 1 [0232.660] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1a1d69c | out: lpSystemTimeAsFileTime=0x1a1d69c) [0232.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238c20 [0232.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x251068 [0232.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x237298 [0232.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x233708 [0232.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffb8 [0232.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206688 [0232.661] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffd0 [0232.661] GetLastError () returned 0x0 [0232.661] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0232.661] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0232.661] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0232.661] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x11c) returned 0x211170 [0232.661] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0232.661] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ba0 [0232.662] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b20 [0232.662] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\pycc.pf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d568, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0233.281] GetFileType (hFile=0x230) returned 0x1 [0233.281] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b10 [0233.282] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b70 [0233.282] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\pycc.pf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d598, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0233.282] GetFileType (hFile=0x1e0) returned 0x1 [0233.283] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d30 [0233.283] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d90 [0233.283] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2adcb0 [0233.283] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a30 [0233.283] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238af0 [0233.284] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\pycc.pf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d4e4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0233.284] GetFileType (hFile=0x224) returned 0x1 [0233.285] GetLastError () returned 0xb7 [0233.285] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe4) returned 0x22d368 [0233.285] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cf0 [0233.285] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0233.285] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d90 [0233.285] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2acfc0 [0233.285] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a50 [0233.285] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b30 [0233.286] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\pycc.pf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d4e4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0233.286] GetFileType (hFile=0x1f4) returned 0x1 [0233.287] GetLastError () returned 0xb7 [0233.287] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bf0 [0233.287] GetLastError () returned 0xb7 [0233.287] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c10 [0233.287] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f30 [0233.287] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e70 [0233.287] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb8) returned 0x2241e0 [0233.287] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b90 [0233.288] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b60 [0233.288] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\pycc.pf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d4dc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0233.288] GetFileType (hFile=0x200) returned 0x1 [0233.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28efd8 [0233.289] ReadFile (in: hFile=0x200, lpBuffer=0x28efd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1d438, lpOverlapped=0x0 | out: lpBuffer=0x28efd8*, lpNumberOfBytesRead=0x1a1d438*=0x1000, lpOverlapped=0x0) returned 1 [0233.666] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24a1b8 [0233.667] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x289fb0 [0233.667] GetLastError () returned 0x0 [0233.750] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f938 [0233.750] GetLastError () returned 0x0 [0233.751] CloseHandle (hObject=0x230) returned 1 [0233.752] CloseHandle (hObject=0x1e0) returned 1 [0233.752] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388b0 [0233.753] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388e0 [0233.754] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\pycc.pf"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d598, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0233.759] GetFileType (hFile=0x1e0) returned 0x1 [0233.760] GetLastError () returned 0xb7 [0233.761] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x298020 [0233.761] GetLastError () returned 0xb7 [0233.765] CloseHandle (hObject=0x1e0) returned 1 [0233.766] DeleteFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\pycc.pf")) returned 0 [0233.766] GetLastError () returned 0x20 [0233.766] GetLastError () returned 0x20 [0233.766] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228c68 [0233.767] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238528 [0233.767] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238780 [0233.767] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x2286c8 [0233.767] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d10 [0233.767] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204db0 [0233.767] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x238860 [0233.767] GetLastError () returned 0x20 [0233.768] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238c58 [0233.768] GetLastError () returned 0x20 [0233.768] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238fa0 [0233.768] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235e50 [0233.768] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238758 [0233.768] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2858d8 [0233.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238880 [0233.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260798 [0233.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f9b0 [0233.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238900 [0233.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604c8 [0233.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f980 [0233.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2605b8 [0233.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2854b8 [0233.770] GetLastError () returned 0x20 [0233.770] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238870 [0233.770] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x2388a0 [0233.770] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238930 [0233.770] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388a0 | out: hHeap=0x1f0000) returned 1 [0233.770] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238940 [0233.771] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238930 | out: hHeap=0x1f0000) returned 1 [0233.771] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238870 | out: hHeap=0x1f0000) returned 1 [0233.771] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238870 [0233.771] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f950 [0233.771] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238870 | out: hHeap=0x1f0000) returned 1 [0233.771] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f998 [0233.771] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f950 | out: hHeap=0x1f0000) returned 1 [0233.771] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238940 | out: hHeap=0x1f0000) returned 1 [0233.772] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f9c8 [0233.772] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f950 [0233.772] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f9c8 | out: hHeap=0x1f0000) returned 1 [0233.772] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f9c8 [0233.772] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f950 | out: hHeap=0x1f0000) returned 1 [0233.772] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f998 | out: hHeap=0x1f0000) returned 1 [0233.772] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f950 [0233.772] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204cb0 [0233.773] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f950 | out: hHeap=0x1f0000) returned 1 [0233.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d10 [0233.773] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cb0 | out: hHeap=0x1f0000) returned 1 [0233.773] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f9c8 | out: hHeap=0x1f0000) returned 1 [0233.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e70 [0233.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260900 [0233.773] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e70 | out: hHeap=0x1f0000) returned 1 [0233.774] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204f10 [0233.774] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260900 | out: hHeap=0x1f0000) returned 1 [0233.775] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d10 | out: hHeap=0x1f0000) returned 1 [0233.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204cb0 [0233.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x2067d8 [0233.775] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cb0 | out: hHeap=0x1f0000) returned 1 [0233.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2605e0 [0233.775] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2067d8 | out: hHeap=0x1f0000) returned 1 [0233.775] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f10 | out: hHeap=0x1f0000) returned 1 [0233.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389b0 [0233.776] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f998 [0233.776] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389b0 | out: hHeap=0x1f0000) returned 1 [0233.776] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f9c8 [0233.776] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f998 | out: hHeap=0x1f0000) returned 1 [0233.776] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204d70 [0233.776] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f9c8 | out: hHeap=0x1f0000) returned 1 [0233.776] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206928 [0233.776] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d70 | out: hHeap=0x1f0000) returned 1 [0233.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206928 | out: hHeap=0x1f0000) returned 1 [0233.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605e0 | out: hHeap=0x1f0000) returned 1 [0233.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238528 | out: hHeap=0x1f0000) returned 1 [0233.777] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0233.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2858d8 | out: hHeap=0x1f0000) returned 1 [0233.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238758 | out: hHeap=0x1f0000) returned 1 [0233.777] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2391d0 [0233.778] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260900 [0233.778] CryptAcquireContextA (in: phProv=0x1a1d6c8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1a1d6c8*=0x213460) returned 1 [0233.779] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x260900 | out: pbBuffer=0x260900) returned 1 [0233.779] CryptReleaseContext (hProv=0x213460, dwFlags=0x0) returned 1 [0233.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260900 | out: hHeap=0x1f0000) returned 1 [0233.779] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2604f0 [0233.779] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2608d8 [0233.779] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238ec0 [0233.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0233.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0233.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ec0 | out: hHeap=0x1f0000) returned 1 [0233.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a80b8 [0233.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f998 [0233.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x236538 [0233.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2606f8 [0233.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x284f90 [0233.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0233.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236670 [0233.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260770 [0233.781] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285098 [0233.781] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238930 [0233.781] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0233.781] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f9c8 [0233.781] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238870 [0233.781] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260540 [0233.781] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f908 [0233.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f908 | out: hHeap=0x1f0000) returned 1 [0233.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0233.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238870 | out: hHeap=0x1f0000) returned 1 [0233.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f9c8 | out: hHeap=0x1f0000) returned 1 [0233.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0233.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238930 | out: hHeap=0x1f0000) returned 1 [0233.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285098 | out: hHeap=0x1f0000) returned 1 [0233.783] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0233.783] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236670 | out: hHeap=0x1f0000) returned 1 [0233.783] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238f68 [0233.783] GetLastError () returned 0x0 [0233.783] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239198 [0233.783] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0233.783] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0233.784] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0233.784] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0233.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0233.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0233.784] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x24ea80 [0233.784] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2858d8 [0233.784] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0233.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0233.785] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0233.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0233.785] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2855c0 [0233.785] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0233.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0233.785] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f510 [0233.785] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x252370 [0233.786] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x237810 [0233.786] QueryPerformanceCounter (in: lpPerformanceCount=0x1a1d218 | out: lpPerformanceCount=0x1a1d218*=39115475627) returned 1 [0233.786] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1a1d258 | out: lpSystemTimeAsFileTime=0x1a1d258) [0233.786] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x2389b0 [0233.786] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0233.787] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e30 [0233.787] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e30 | out: hHeap=0x1f0000) returned 1 [0233.787] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0233.787] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0233.787] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f70 [0233.787] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f70 | out: hHeap=0x1f0000) returned 1 [0233.787] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0233.788] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389b0 | out: hHeap=0x1f0000) returned 1 [0233.788] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0233.788] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238f68 [0233.788] GetLastError () returned 0x0 [0233.788] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0233.788] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0233.788] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0233.789] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260608 [0233.789] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2605e0 [0233.789] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0233.789] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0233.789] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260590 [0233.789] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0233.789] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x222ee8 [0233.789] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2acca0 [0234.028] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0234.028] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2acca0 | out: hHeap=0x1f0000) returned 1 [0234.028] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x20c2c0 [0234.029] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0234.029] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2604f0 [0234.029] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260888 [0234.029] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0234.029] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab6a8 [0234.029] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0234.029] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0234.029] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x234b90 [0234.029] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b90 | out: hHeap=0x1f0000) returned 1 [0234.029] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0234.029] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20c2c0 | out: hHeap=0x1f0000) returned 1 [0234.029] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f950 [0234.029] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228b90 [0234.029] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260540 [0234.029] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2609a0 [0234.029] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260748 [0234.030] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260928 [0234.030] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0234.030] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0234.030] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0234.030] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260888 [0234.030] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2604f0 [0234.030] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0234.030] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab580 [0234.030] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0234.030] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2066b8 [0234.030] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x2a9c88 [0234.030] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a9c88 | out: hHeap=0x1f0000) returned 1 [0234.030] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2066b8 | out: hHeap=0x1f0000) returned 1 [0234.030] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0234.030] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abb48 [0234.031] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab580 | out: hHeap=0x1f0000) returned 1 [0234.031] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0234.031] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204e70 [0234.031] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab208 [0234.031] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac110 [0234.031] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605e0 | out: hHeap=0x1f0000) returned 1 [0234.031] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abc70 [0234.031] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac110 | out: hHeap=0x1f0000) returned 1 [0234.031] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0234.031] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0234.031] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228b90 | out: hHeap=0x1f0000) returned 1 [0234.031] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab208 | out: hHeap=0x1f0000) returned 1 [0234.031] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e70 | out: hHeap=0x1f0000) returned 1 [0234.031] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f950 | out: hHeap=0x1f0000) returned 1 [0234.031] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab6a8 | out: hHeap=0x1f0000) returned 1 [0234.031] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac928 [0234.031] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac928 | out: hHeap=0x1f0000) returned 1 [0234.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ee8 | out: hHeap=0x1f0000) returned 1 [0234.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0234.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abb48 | out: hHeap=0x1f0000) returned 1 [0234.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0234.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0234.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0234.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0234.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0234.032] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abec0 [0234.032] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac488 [0234.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abec0 | out: hHeap=0x1f0000) returned 1 [0234.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac488 | out: hHeap=0x1f0000) returned 1 [0234.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abc70 | out: hHeap=0x1f0000) returned 1 [0234.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0234.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2855c0 | out: hHeap=0x1f0000) returned 1 [0234.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24ea80 | out: hHeap=0x1f0000) returned 1 [0234.033] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x2af6c0 [0234.033] GetLastError () returned 0x0 [0234.033] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387f0 [0234.033] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238890 [0234.034] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\pycc.pf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d5c8, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0234.034] GetFileType (hFile=0x23c) returned 0x1 [0234.034] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x290fe8 [0234.034] SetFilePointerEx (in: hFile=0x23c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1a1d550 | out: lpNewFilePointer=0x0) returned 1 [0234.034] GetLastError () returned 0xb7 [0234.035] CloseHandle (hObject=0x23c) returned 1 [0234.035] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238890 | out: hHeap=0x1f0000) returned 1 [0234.035] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387f0 | out: hHeap=0x1f0000) returned 1 [0234.035] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2858d8 | out: hHeap=0x1f0000) returned 1 [0234.035] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x284f90 | out: hHeap=0x1f0000) returned 1 [0234.035] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606f8 | out: hHeap=0x1f0000) returned 1 [0234.035] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d70 | out: hHeap=0x1f0000) returned 1 [0234.035] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236538 | out: hHeap=0x1f0000) returned 1 [0234.036] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f998 | out: hHeap=0x1f0000) returned 1 [0234.036] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a80b8 | out: hHeap=0x1f0000) returned 1 [0234.036] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2af6c0 | out: hHeap=0x1f0000) returned 1 [0234.036] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0234.036] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0234.036] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x252370 | out: hHeap=0x1f0000) returned 1 [0234.036] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237810 | out: hHeap=0x1f0000) returned 1 [0234.036] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2391d0 | out: hHeap=0x1f0000) returned 1 [0234.036] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238860 | out: hHeap=0x1f0000) returned 1 [0234.036] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f980 | out: hHeap=0x1f0000) returned 1 [0234.036] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604c8 | out: hHeap=0x1f0000) returned 1 [0234.036] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238900 | out: hHeap=0x1f0000) returned 1 [0234.036] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f9b0 | out: hHeap=0x1f0000) returned 1 [0234.036] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260798 | out: hHeap=0x1f0000) returned 1 [0234.036] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238880 | out: hHeap=0x1f0000) returned 1 [0234.036] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2854b8 | out: hHeap=0x1f0000) returned 1 [0234.036] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0234.036] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235e50 | out: hHeap=0x1f0000) returned 1 [0234.037] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2286c8 | out: hHeap=0x1f0000) returned 1 [0234.037] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238780 | out: hHeap=0x1f0000) returned 1 [0234.037] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0234.037] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228c68 | out: hHeap=0x1f0000) returned 1 [0234.037] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388e0 | out: hHeap=0x1f0000) returned 1 [0234.037] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388b0 | out: hHeap=0x1f0000) returned 1 [0234.037] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28efd8 | out: hHeap=0x1f0000) returned 1 [0234.037] CloseHandle (hObject=0x200) returned 1 [0234.037] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b60 | out: hHeap=0x1f0000) returned 1 [0234.038] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b90 | out: hHeap=0x1f0000) returned 1 [0234.038] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2241e0 | out: hHeap=0x1f0000) returned 1 [0234.038] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24a1b8 | out: hHeap=0x1f0000) returned 1 [0234.038] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f938 | out: hHeap=0x1f0000) returned 1 [0234.038] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c10 | out: hHeap=0x1f0000) returned 1 [0234.038] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x289fb0 | out: hHeap=0x1f0000) returned 1 [0234.038] CloseHandle (hObject=0x1f4) returned 1 [0234.038] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b30 | out: hHeap=0x1f0000) returned 1 [0234.038] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a50 | out: hHeap=0x1f0000) returned 1 [0234.039] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2acfc0 | out: hHeap=0x1f0000) returned 1 [0234.039] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cf0 | out: hHeap=0x1f0000) returned 1 [0234.039] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d368 | out: hHeap=0x1f0000) returned 1 [0234.039] CloseHandle (hObject=0x224) returned 1 [0234.039] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238af0 | out: hHeap=0x1f0000) returned 1 [0234.039] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a30 | out: hHeap=0x1f0000) returned 1 [0234.039] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2adcb0 | out: hHeap=0x1f0000) returned 1 [0234.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b70 | out: hHeap=0x1f0000) returned 1 [0234.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b10 | out: hHeap=0x1f0000) returned 1 [0234.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b20 | out: hHeap=0x1f0000) returned 1 [0234.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ba0 | out: hHeap=0x1f0000) returned 1 [0234.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0234.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x251068 | out: hHeap=0x1f0000) returned 1 [0234.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237298 | out: hHeap=0x1f0000) returned 1 [0234.041] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206688 | out: hHeap=0x1f0000) returned 1 [0234.041] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffd0 | out: hHeap=0x1f0000) returned 1 [0234.041] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffb8 | out: hHeap=0x1f0000) returned 1 [0234.041] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233708 | out: hHeap=0x1f0000) returned 1 [0234.041] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x255c88 | out: hHeap=0x1f0000) returned 1 [0234.041] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2374c8 | out: hHeap=0x1f0000) returned 1 [0234.041] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239160 | out: hHeap=0x1f0000) returned 1 [0234.041] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0234.041] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262cb0 | out: hHeap=0x1f0000) returned 1 [0234.041] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228830 | out: hHeap=0x1f0000) returned 1 [0234.041] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0234.041] DeleteFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\pycc.pf")) returned 1 [0234.043] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc48, dwReserved0=0x0, dwReserved1=0x0, cFileName="sRGB.pf", cAlternateFileName="")) returned 1 [0234.043] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214e38 [0234.044] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220fe8 [0234.044] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214e38 | out: hHeap=0x1f0000) returned 1 [0234.044] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0234.044] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\sRGB.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\srgb.pf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0234.044] GetFileType (hFile=0x224) returned 0x1 [0234.045] CloseHandle (hObject=0x224) returned 1 [0234.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0234.045] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\sRGB.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\srgb.pf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc48)) returned 1 [0234.045] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0234.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0234.045] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\sRGB.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\srgb.pf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc48)) returned 1 [0234.045] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0234.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0234.045] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0234.045] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc48, dwReserved0=0x0, dwReserved1=0x0, cFileName="sRGB.pf", cAlternateFileName="")) returned 0 [0234.046] FindClose (in: hFindFile=0x24e780 | out: hFindFile=0x24e780) returned 1 [0234.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0234.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f020 | out: hHeap=0x1f0000) returned 1 [0234.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0234.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228950 | out: hHeap=0x1f0000) returned 1 [0234.458] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2284d0 [0234.458] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260518 [0234.458] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262cb0 [0234.459] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f7e8 [0234.459] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\*", lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa10e432c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e8c0 [0234.459] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0790 [0234.460] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2212e0 [0234.460] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0790 | out: hHeap=0x1f0000) returned 1 [0234.460] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f7e8 | out: hHeap=0x1f0000) returned 1 [0234.460] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0234.460] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa10e432c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0234.460] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0c08 [0234.460] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221540 [0234.460] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0c08 | out: hHeap=0x1f0000) returned 1 [0234.460] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0234.460] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0234.460] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0234.460] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x374c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ffjcext.zip", cAlternateFileName="")) returned 1 [0234.461] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606f8 [0234.461] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0b38 [0234.461] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220c58 [0234.461] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0b38 | out: hHeap=0x1f0000) returned 1 [0234.461] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0234.461] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606f8 | out: hHeap=0x1f0000) returned 1 [0234.461] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0234.462] GetFileType (hFile=0x1b0) returned 0x1 [0234.462] CloseHandle (hObject=0x1b0) returned 1 [0234.462] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212be0 [0234.462] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x374c)) returned 1 [0234.462] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212be0 | out: hHeap=0x1f0000) returned 1 [0234.462] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212cf0 [0234.463] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x374c)) returned 1 [0234.463] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212cf0 | out: hHeap=0x1f0000) returned 1 [0234.463] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0234.463] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0234.463] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xb2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.properties", cAlternateFileName="MESSAG~1.PRO")) returned 1 [0234.463] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2392b0 [0234.463] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0b38 [0234.463] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0234.463] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0b38 | out: hHeap=0x1f0000) returned 1 [0234.463] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0234.463] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2392b0 | out: hHeap=0x1f0000) returned 1 [0234.464] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0234.464] GetFileType (hFile=0x1b0) returned 0x1 [0234.464] CloseHandle (hObject=0x1b0) returned 1 [0234.464] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0234.464] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages.properties"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xb2c)) returned 1 [0234.465] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0234.465] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0234.465] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages.properties"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xb2c)) returned 1 [0234.465] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0234.465] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0234.465] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260658 [0234.465] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0234.465] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260658 | out: hHeap=0x1f0000) returned 1 [0234.465] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xcea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_de.properties", cAlternateFileName="MESSAG~2.PRO")) returned 1 [0234.465] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239048 [0234.465] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0998 [0234.465] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0234.466] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0998 | out: hHeap=0x1f0000) returned 1 [0234.466] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0234.466] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239048 | out: hHeap=0x1f0000) returned 1 [0234.466] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0234.466] GetFileType (hFile=0x1b0) returned 0x1 [0234.467] CloseHandle (hObject=0x1b0) returned 1 [0234.467] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0234.467] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xcea)) returned 1 [0234.467] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0234.467] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0234.467] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xcea)) returned 1 [0234.467] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0234.468] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0234.468] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606f8 [0234.468] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0234.468] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606f8 | out: hHeap=0x1f0000) returned 1 [0234.468] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xe10, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_es.properties", cAlternateFileName="MESSAG~3.PRO")) returned 1 [0234.468] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238f30 [0234.468] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0790 [0234.468] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0234.468] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0790 | out: hHeap=0x1f0000) returned 1 [0234.468] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0234.468] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238f30 | out: hHeap=0x1f0000) returned 1 [0234.469] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0234.469] GetFileType (hFile=0x1b0) returned 0x1 [0234.500] CloseHandle (hObject=0x1b0) returned 1 [0234.500] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0234.501] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xe10)) returned 1 [0234.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0234.501] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0234.501] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xe10)) returned 1 [0234.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0234.501] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0234.501] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609a0 [0234.502] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0234.502] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0234.502] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xd51, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_fr.properties", cAlternateFileName="MESSAG~4.PRO")) returned 1 [0234.502] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239160 [0234.502] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b08c8 [0234.502] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0234.502] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b08c8 | out: hHeap=0x1f0000) returned 1 [0234.502] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0234.502] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239160 | out: hHeap=0x1f0000) returned 1 [0234.503] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0234.503] GetFileType (hFile=0x1b0) returned 0x1 [0234.503] CloseHandle (hObject=0x1b0) returned 1 [0234.504] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0234.504] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xd51)) returned 1 [0234.504] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0234.504] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0234.504] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xd51)) returned 1 [0234.504] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0234.504] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0234.504] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0234.505] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0234.505] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0234.505] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc97, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_it.properties", cAlternateFileName="MEC9EA~1.PRO")) returned 1 [0234.505] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239048 [0234.505] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0588 [0234.505] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0234.505] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0588 | out: hHeap=0x1f0000) returned 1 [0234.505] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0234.505] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239048 | out: hHeap=0x1f0000) returned 1 [0234.506] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0234.506] GetFileType (hFile=0x1b0) returned 0x1 [0234.506] CloseHandle (hObject=0x1b0) returned 1 [0234.506] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0234.507] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc97)) returned 1 [0234.507] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0234.507] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0234.507] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc97)) returned 1 [0234.507] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0234.507] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0234.507] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0234.507] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0234.507] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0234.507] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x18cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_ja.properties", cAlternateFileName="ME4AF1~1.PRO")) returned 1 [0234.507] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239278 [0234.507] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0110 [0234.508] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0234.508] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0110 | out: hHeap=0x1f0000) returned 1 [0234.508] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0234.508] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239278 | out: hHeap=0x1f0000) returned 1 [0234.509] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0234.509] GetFileType (hFile=0x1b0) returned 0x1 [0234.509] CloseHandle (hObject=0x1b0) returned 1 [0234.510] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0234.510] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x18cd)) returned 1 [0234.510] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0234.510] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0234.510] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x18cd)) returned 1 [0234.510] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0234.510] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0234.510] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0234.511] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0234.511] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0234.511] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1650, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_ko.properties", cAlternateFileName="ME1706~1.PRO")) returned 1 [0234.511] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c90 [0234.511] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0998 [0234.511] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0234.511] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0998 | out: hHeap=0x1f0000) returned 1 [0234.511] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0234.511] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c90 | out: hHeap=0x1f0000) returned 1 [0234.512] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0234.512] GetFileType (hFile=0x1b0) returned 0x1 [0234.512] CloseHandle (hObject=0x1b0) returned 1 [0234.512] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0234.512] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1650)) returned 1 [0234.513] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0234.513] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0234.513] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1650)) returned 1 [0234.513] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0234.513] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0234.513] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609a0 [0234.513] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0234.513] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0234.513] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xcd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_pt_BR.properties", cAlternateFileName="MED1E1~1.PRO")) returned 1 [0234.513] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228518 [0234.513] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0380 [0234.514] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a0e0 [0234.514] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0380 | out: hHeap=0x1f0000) returned 1 [0234.514] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0234.514] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228518 | out: hHeap=0x1f0000) returned 1 [0234.514] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_pt_BR.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_pt_br.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0234.515] GetFileType (hFile=0x1b0) returned 0x1 [0234.515] CloseHandle (hObject=0x1b0) returned 1 [0234.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219c48 [0234.515] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_pt_BR.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_pt_br.properties"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xcd5)) returned 1 [0234.515] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219c48 | out: hHeap=0x1f0000) returned 1 [0234.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a4d0 [0234.515] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_pt_BR.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_pt_br.properties"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xcd5)) returned 1 [0234.516] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a4d0 | out: hHeap=0x1f0000) returned 1 [0234.516] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219e40 [0234.516] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2607e8 [0234.516] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219e40 | out: hHeap=0x1f0000) returned 1 [0234.516] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607e8 | out: hHeap=0x1f0000) returned 1 [0234.516] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xd51, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_sv.properties", cAlternateFileName="ME0541~1.PRO")) returned 1 [0234.516] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238e18 [0234.516] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0728 [0234.516] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0234.517] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0728 | out: hHeap=0x1f0000) returned 1 [0234.517] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a0e0 | out: hHeap=0x1f0000) returned 1 [0234.517] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238e18 | out: hHeap=0x1f0000) returned 1 [0234.517] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0234.518] GetFileType (hFile=0x1b0) returned 0x1 [0234.518] CloseHandle (hObject=0x1b0) returned 1 [0234.519] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0234.519] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xd51)) returned 1 [0234.519] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0234.519] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0234.519] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xd51)) returned 1 [0234.519] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0234.519] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0234.519] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0234.519] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0234.520] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0234.520] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xfe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_zh_CN.properties", cAlternateFileName="ME40CD~1.PRO")) returned 1 [0234.520] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2287a0 [0234.520] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0658 [0234.520] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a038 [0234.520] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0658 | out: hHeap=0x1f0000) returned 1 [0234.520] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0234.520] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2287a0 | out: hHeap=0x1f0000) returned 1 [0234.521] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_CN.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_cn.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0234.521] GetFileType (hFile=0x1b0) returned 0x1 [0234.521] CloseHandle (hObject=0x1b0) returned 1 [0234.522] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a620 [0234.522] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_CN.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_cn.properties"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xfe8)) returned 1 [0234.774] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a620 | out: hHeap=0x1f0000) returned 1 [0234.774] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a230 [0234.774] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_CN.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_cn.properties"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xfe8)) returned 1 [0234.775] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a230 | out: hHeap=0x1f0000) returned 1 [0234.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219f90 [0234.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260630 [0234.775] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219f90 | out: hHeap=0x1f0000) returned 1 [0234.775] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260630 | out: hHeap=0x1f0000) returned 1 [0234.775] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_zh_HK.properties", cAlternateFileName="MEB8B5~1.PRO")) returned 1 [0234.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2287a0 [0234.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0930 [0234.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a968 [0234.775] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0930 | out: hHeap=0x1f0000) returned 1 [0234.775] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a038 | out: hHeap=0x1f0000) returned 1 [0234.775] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2287a0 | out: hHeap=0x1f0000) returned 1 [0234.776] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_HK.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_hk.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0234.776] GetFileType (hFile=0x230) returned 0x1 [0234.777] CloseHandle (hObject=0x230) returned 1 [0234.777] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219f90 [0234.777] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_HK.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_hk.properties"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xea8)) returned 1 [0234.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219f90 | out: hHeap=0x1f0000) returned 1 [0234.777] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a818 [0234.777] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_HK.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_hk.properties"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xea8)) returned 1 [0234.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a818 | out: hHeap=0x1f0000) returned 1 [0234.778] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219c48 [0234.778] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260540 [0234.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219c48 | out: hHeap=0x1f0000) returned 1 [0234.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0234.778] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_zh_TW.properties", cAlternateFileName="MECC18~1.PRO")) returned 1 [0234.778] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2287a0 [0234.778] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0380 [0234.778] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219e40 [0234.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0380 | out: hHeap=0x1f0000) returned 1 [0234.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a968 | out: hHeap=0x1f0000) returned 1 [0234.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2287a0 | out: hHeap=0x1f0000) returned 1 [0234.779] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_TW.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_tw.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0234.779] GetFileType (hFile=0x230) returned 0x1 [0234.779] CloseHandle (hObject=0x230) returned 1 [0234.779] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219ee8 [0234.780] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_TW.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_tw.properties"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xea8)) returned 1 [0234.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219ee8 | out: hHeap=0x1f0000) returned 1 [0234.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219f90 [0234.780] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_TW.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_tw.properties"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xea8)) returned 1 [0234.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219f90 | out: hHeap=0x1f0000) returned 1 [0234.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a380 [0234.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0234.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a380 | out: hHeap=0x1f0000) returned 1 [0234.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0234.780] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x218e, dwReserved0=0x0, dwReserved1=0x0, cFileName="splash.gif", cAlternateFileName="")) returned 1 [0234.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0234.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0a68 [0234.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221708 [0234.781] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0a68 | out: hHeap=0x1f0000) returned 1 [0234.781] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219e40 | out: hHeap=0x1f0000) returned 1 [0234.781] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0234.781] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0234.781] GetFileType (hFile=0x230) returned 0x1 [0234.781] CloseHandle (hObject=0x230) returned 1 [0234.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0234.782] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x218e)) returned 1 [0234.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0234.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212a48 [0234.782] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x218e)) returned 1 [0234.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212a48 | out: hHeap=0x1f0000) returned 1 [0234.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0234.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0234.782] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3bac, dwReserved0=0x0, dwReserved1=0x0, cFileName="splash@2x.gif", cAlternateFileName="SPLASH~1.GIF")) returned 1 [0234.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0234.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0318 [0234.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2214a8 [0234.783] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0318 | out: hHeap=0x1f0000) returned 1 [0234.783] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0234.783] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0234.822] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0234.822] GetFileType (hFile=0x200) returned 0x1 [0234.823] CloseHandle (hObject=0x200) returned 1 [0234.823] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2132c8 [0234.823] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3bac)) returned 1 [0234.823] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2132c8 | out: hHeap=0x1f0000) returned 1 [0234.823] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0234.823] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3bac)) returned 1 [0234.824] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0234.824] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0234.824] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0234.824] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1e7d, dwReserved0=0x0, dwReserved1=0x0, cFileName="splash_11-lic.gif", cAlternateFileName="SPLASH~2.GIF")) returned 1 [0234.824] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c58 [0234.824] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b00a8 [0234.824] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0234.824] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b00a8 | out: hHeap=0x1f0000) returned 1 [0234.824] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0234.825] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c58 | out: hHeap=0x1f0000) returned 1 [0234.825] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0234.825] GetFileType (hFile=0x200) returned 0x1 [0234.826] CloseHandle (hObject=0x200) returned 1 [0234.826] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0234.826] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1e7d)) returned 1 [0234.827] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0234.827] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0234.827] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1e7d)) returned 1 [0234.827] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0234.827] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0234.827] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0234.827] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2fda, dwReserved0=0x0, dwReserved1=0x0, cFileName="splash_11@2x-lic.gif", cAlternateFileName="SPLASH~3.GIF")) returned 1 [0234.827] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238e88 [0234.828] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0520 [0234.828] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0234.828] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0520 | out: hHeap=0x1f0000) returned 1 [0234.828] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0234.828] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238e88 | out: hHeap=0x1f0000) returned 1 [0234.828] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0234.829] GetFileType (hFile=0x200) returned 0x1 [0234.829] CloseHandle (hObject=0x200) returned 1 [0234.830] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0234.830] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2fda)) returned 1 [0234.830] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0234.830] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0234.830] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2fda)) returned 1 [0234.830] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0234.831] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0234.831] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0234.831] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2fda, dwReserved0=0x0, dwReserved1=0x0, cFileName="splash_11@2x-lic.gif", cAlternateFileName="SPLASH~3.GIF")) returned 0 [0234.831] FindClose (in: hFindFile=0x24e8c0 | out: hFindFile=0x24e8c0) returned 1 [0234.831] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0234.831] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262cb0 | out: hHeap=0x1f0000) returned 1 [0234.832] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0234.832] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2284d0 | out: hHeap=0x1f0000) returned 1 [0234.832] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228a70 [0234.832] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260518 [0234.832] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262cb0 [0234.832] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b00a8 [0234.832] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\*", lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa11bdb26, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xaa8ed01b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e5c0 [0234.832] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b06c0 [0234.832] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b00a8 | out: hHeap=0x1f0000) returned 1 [0234.832] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0234.833] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa11bdb26, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xaa8ed01b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0234.833] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0728 [0234.833] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b06c0 | out: hHeap=0x1f0000) returned 1 [0234.833] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0234.833] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0234.833] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2de78, dwReserved0=0x0, dwReserved1=0x0, cFileName="access-bridge-64.jar", cAlternateFileName="ACCESS~1.JAR")) returned 1 [0234.833] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238f68 [0234.833] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0c08 [0234.833] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0234.833] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0c08 | out: hHeap=0x1f0000) returned 1 [0234.833] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0728 | out: hHeap=0x1f0000) returned 1 [0234.834] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238f68 | out: hHeap=0x1f0000) returned 1 [0234.834] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0234.834] GetFileType (hFile=0x200) returned 0x1 [0234.835] CloseHandle (hObject=0x200) returned 1 [0234.835] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0234.835] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2de78)) returned 1 [0234.835] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0234.835] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0234.836] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2de78)) returned 1 [0234.836] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0234.836] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0234.836] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0234.836] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8bb82c9, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3ae816, dwReserved0=0x0, dwReserved1=0x0, cFileName="cldrdata.jar", cAlternateFileName="")) returned 1 [0234.836] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605b8 [0234.836] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0728 [0234.836] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221410 [0234.836] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0728 | out: hHeap=0x1f0000) returned 1 [0234.836] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0234.837] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0234.837] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0234.837] GetFileType (hFile=0x200) returned 0x1 [0234.838] CloseHandle (hObject=0x200) returned 1 [0234.838] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213790 [0234.838] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8bb82c9, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3ae816)) returned 1 [0234.838] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213790 | out: hHeap=0x1f0000) returned 1 [0234.838] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212a48 [0234.838] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8bb82c9, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3ae816)) returned 1 [0234.839] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212a48 | out: hHeap=0x1f0000) returned 1 [0234.839] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0234.839] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0234.839] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bb82c9, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8bb82c9, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8bb82c9, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x205e, dwReserved0=0x0, dwReserved1=0x0, cFileName="dnsns.jar", cAlternateFileName="")) returned 1 [0234.839] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0234.839] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0c08 [0234.839] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221540 [0234.839] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0c08 | out: hHeap=0x1f0000) returned 1 [0234.839] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0234.840] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0234.840] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\dnsns.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0234.840] GetFileType (hFile=0x200) returned 0x1 [0234.841] CloseHandle (hObject=0x200) returned 1 [0234.841] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0234.841] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\dnsns.jar"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bb82c9, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8bb82c9, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8bb82c9, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x205e)) returned 1 [0234.841] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0234.841] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2202b0 [0234.841] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\dnsns.jar"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bb82c9, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8bb82c9, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8bb82c9, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x205e)) returned 1 [0234.841] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2202b0 | out: hHeap=0x1f0000) returned 1 [0234.841] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0234.842] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0234.842] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bb82c9, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8bb82c9, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8bb82c9, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xade4, dwReserved0=0x0, dwReserved1=0x0, cFileName="jaccess.jar", cAlternateFileName="")) returned 1 [0234.842] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0234.842] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0520 [0234.842] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221378 [0234.842] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0520 | out: hHeap=0x1f0000) returned 1 [0234.842] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0234.842] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0234.842] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jaccess.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0234.843] GetFileType (hFile=0x200) returned 0x1 [0234.843] CloseHandle (hObject=0x200) returned 1 [0234.843] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fb30 [0234.843] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jaccess.jar"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bb82c9, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8bb82c9, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8bb82c9, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xade4)) returned 1 [0234.843] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fb30 | out: hHeap=0x1f0000) returned 1 [0234.844] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0234.844] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jaccess.jar"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bb82c9, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8bb82c9, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8bb82c9, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xade4)) returned 1 [0234.844] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0234.844] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f7e8 [0234.844] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f7e8 | out: hHeap=0x1f0000) returned 1 [0234.844] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bb82c9, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8bb82c9, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1166a99, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfxrt.jar", cAlternateFileName="")) returned 1 [0234.844] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260888 [0234.844] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b02b0 [0234.844] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2217a0 [0234.844] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b02b0 | out: hHeap=0x1f0000) returned 1 [0234.844] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0234.844] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0234.845] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0234.845] GetFileType (hFile=0x200) returned 0x1 [0234.845] CloseHandle (hObject=0x200) returned 1 [0234.846] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0234.846] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bb82c9, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8bb82c9, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1166a99)) returned 1 [0234.846] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0234.846] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fb30 [0234.846] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bb82c9, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8bb82c9, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1166a99)) returned 1 [0234.846] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fb30 | out: hHeap=0x1f0000) returned 1 [0234.846] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2202b0 [0234.846] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2202b0 | out: hHeap=0x1f0000) returned 1 [0234.846] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa8546b2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xaa8546b2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xaa8ed01b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x21a46d, dwReserved0=0x0, dwReserved1=0x0, cFileName="localedata.jar", cAlternateFileName="LOCALE~1.JAR")) returned 1 [0234.846] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605b8 [0234.846] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b02b0 [0234.846] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221838 [0234.846] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b02b0 | out: hHeap=0x1f0000) returned 1 [0234.847] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0234.847] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0234.847] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\localedata.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0234.847] GetFileType (hFile=0x200) returned 0x1 [0234.847] CloseHandle (hObject=0x200) returned 1 [0234.848] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f10 [0234.848] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\localedata.jar"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa8546b2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xaa8546b2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xaa8ed01b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x21a46d)) returned 1 [0234.848] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f10 | out: hHeap=0x1f0000) returned 1 [0234.848] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0234.848] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\localedata.jar"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa8546b2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xaa8546b2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xaa8ed01b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x21a46d)) returned 1 [0234.848] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0234.848] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f10 [0234.848] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f10 | out: hHeap=0x1f0000) returned 1 [0234.848] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="meta-index", cAlternateFileName="META-I~1")) returned 1 [0234.848] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0234.848] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0658 [0234.849] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221708 [0234.849] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0658 | out: hHeap=0x1f0000) returned 1 [0234.849] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0234.849] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0234.849] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\meta-index"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0234.849] GetFileType (hFile=0x200) returned 0x1 [0234.850] CloseHandle (hObject=0x200) returned 1 [0234.850] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0234.850] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\meta-index"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5b5)) returned 1 [0234.850] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0234.850] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220238 [0234.850] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\meta-index"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5b5)) returned 1 [0234.850] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220238 | out: hHeap=0x1f0000) returned 1 [0234.850] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0234.850] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0234.850] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1edd4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="nashorn.jar", cAlternateFileName="")) returned 1 [0234.851] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0234.851] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0318 [0234.851] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221838 [0234.851] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0318 | out: hHeap=0x1f0000) returned 1 [0234.851] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0234.851] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0234.851] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\nashorn.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0234.851] GetFileType (hFile=0x200) returned 0x1 [0234.852] CloseHandle (hObject=0x200) returned 1 [0234.852] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0235.376] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\nashorn.jar"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1edd4e)) returned 1 [0235.376] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0235.376] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0235.376] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\nashorn.jar"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1edd4e)) returned 1 [0235.376] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0235.377] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f7e8 [0235.377] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f7e8 | out: hHeap=0x1f0000) returned 1 [0235.377] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xa4c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunec.jar", cAlternateFileName="")) returned 1 [0235.377] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0235.377] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0588 [0235.377] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220cf0 [0235.377] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0588 | out: hHeap=0x1f0000) returned 1 [0235.377] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0235.378] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0235.378] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunec.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0235.379] GetFileType (hFile=0x22c) returned 0x1 [0235.379] CloseHandle (hObject=0x22c) returned 1 [0235.380] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0235.380] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunec.jar"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xa4c9)) returned 1 [0235.380] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0235.381] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd88 [0235.381] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunec.jar"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xa4c9)) returned 1 [0235.381] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd88 | out: hHeap=0x1f0000) returned 1 [0235.381] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220580 [0235.381] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220580 | out: hHeap=0x1f0000) returned 1 [0235.381] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x44661, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunjce_provider.jar", cAlternateFileName="SUNJCE~1.JAR")) returned 1 [0235.381] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239048 [0235.382] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0588 [0235.382] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221968 [0235.382] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0588 | out: hHeap=0x1f0000) returned 1 [0235.382] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0235.382] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239048 | out: hHeap=0x1f0000) returned 1 [0235.383] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0235.384] GetFileType (hFile=0x22c) returned 0x1 [0235.385] CloseHandle (hObject=0x22c) returned 1 [0235.385] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0235.385] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x44661)) returned 1 [0235.386] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0235.386] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0235.386] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x44661)) returned 1 [0235.386] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0235.386] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212c68 [0235.386] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212c68 | out: hHeap=0x1f0000) returned 1 [0235.387] GetLastError () returned 0x0 [0235.387] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0235.387] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228440 [0235.387] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262320 [0235.387] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e88 [0235.388] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239048 [0235.388] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609a0 [0235.388] CryptAcquireContextA (in: phProv=0x1a1d6c8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1a1d6c8*=0x212d78) returned 1 [0235.389] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2609a0 | out: pbBuffer=0x2609a0) returned 1 [0235.389] CryptReleaseContext (hProv=0x212d78, dwFlags=0x0) returned 1 [0235.389] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0235.390] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x255c88 [0235.390] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2af030 [0235.390] QueryPerformanceCounter (in: lpPerformanceCount=0x1a1d65c | out: lpPerformanceCount=0x1a1d65c*=39275888516) returned 1 [0235.390] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1a1d69c | out: lpSystemTimeAsFileTime=0x1a1d69c) [0235.390] QueryPerformanceCounter (in: lpPerformanceCount=0x1a1d65c | out: lpPerformanceCount=0x1a1d65c*=39275934057) returned 1 [0235.391] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1a1d69c | out: lpSystemTimeAsFileTime=0x1a1d69c) [0235.391] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238e88 [0235.391] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x252370 [0235.391] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2af148 [0235.391] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x233228 [0235.391] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f608 [0235.392] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2066b8 [0235.392] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f800 [0235.392] GetLastError () returned 0x0 [0235.392] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0235.392] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x239be0 [0235.393] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0235.393] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x140) returned 0x20c2c0 [0235.393] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239be0 | out: hHeap=0x1f0000) returned 1 [0235.393] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238820 [0235.394] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238830 [0235.395] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d568, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0235.595] GetFileType (hFile=0x174) returned 0x1 [0235.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238960 [0235.814] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388d0 [0235.815] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d598, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0235.816] GetFileType (hFile=0x23c) returned 0x1 [0235.816] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f10 [0235.816] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f70 [0235.816] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad1e8 [0235.816] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238810 [0235.817] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238980 [0235.818] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d4e4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0235.818] GetFileType (hFile=0x210) returned 0x1 [0235.818] GetLastError () returned 0xb7 [0235.819] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe4) returned 0x22b018 [0235.819] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d30 [0235.819] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0235.819] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e90 [0235.819] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2add68 [0235.819] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389b0 [0235.820] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238990 [0235.820] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d4e4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0235.821] GetFileType (hFile=0x1e0) returned 0x1 [0235.822] GetLastError () returned 0xb7 [0235.822] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bf0 [0235.822] GetLastError () returned 0xb7 [0235.822] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cf0 [0235.822] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d10 [0235.822] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d90 [0235.822] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb8) returned 0x223be0 [0235.822] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388e0 [0235.823] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388f0 [0235.823] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d4dc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0235.823] GetFileType (hFile=0x200) returned 0x1 [0235.824] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x289fb0 [0235.824] ReadFile (in: hFile=0x200, lpBuffer=0x289fb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1d438, lpOverlapped=0x0 | out: lpBuffer=0x289fb0*, lpNumberOfBytesRead=0x1a1d438*=0x1000, lpOverlapped=0x0) returned 1 [0235.854] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24bdf0 [0235.856] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28afb8 [0235.856] GetLastError () returned 0x0 [0235.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f968 [0235.871] GetLastError () returned 0x0 [0235.872] CloseHandle (hObject=0x174) returned 1 [0235.872] CloseHandle (hObject=0x23c) returned 1 [0235.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b60 [0235.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238aa0 [0235.874] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d598, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0235.881] GetFileType (hFile=0x23c) returned 0x1 [0235.882] GetLastError () returned 0xb7 [0235.882] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28dfd0 [0235.882] GetLastError () returned 0xb7 [0236.197] CloseHandle (hObject=0x23c) returned 1 [0236.198] DeleteFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar")) returned 0 [0236.198] GetLastError () returned 0x20 [0236.198] GetLastError () returned 0x20 [0236.199] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228830 [0236.199] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260630 [0236.199] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260658 [0236.199] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x228878 [0236.199] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204dd0 [0236.199] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204df0 [0236.199] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x2388a0 [0236.199] GetLastError () returned 0x20 [0236.199] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239080 [0236.199] GetLastError () returned 0x20 [0236.199] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x2391d0 [0236.199] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0520 [0236.199] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260838 [0236.199] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285ae8 [0236.199] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238850 [0236.200] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0236.200] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f890 [0236.200] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387f0 [0236.200] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604c8 [0236.200] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f8a8 [0236.200] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260860 [0236.200] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285bf0 [0236.200] GetLastError () returned 0x20 [0236.200] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238800 [0236.200] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238860 [0236.200] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238870 [0236.200] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238860 | out: hHeap=0x1f0000) returned 1 [0236.200] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388c0 [0236.200] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238870 | out: hHeap=0x1f0000) returned 1 [0236.200] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238800 | out: hHeap=0x1f0000) returned 1 [0236.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238870 [0236.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f680 [0236.201] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238870 | out: hHeap=0x1f0000) returned 1 [0236.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f6e0 [0236.201] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f680 | out: hHeap=0x1f0000) returned 1 [0236.201] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388c0 | out: hHeap=0x1f0000) returned 1 [0236.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f698 [0236.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f728 [0236.201] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f698 | out: hHeap=0x1f0000) returned 1 [0236.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f6b0 [0236.201] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f728 | out: hHeap=0x1f0000) returned 1 [0236.201] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f6e0 | out: hHeap=0x1f0000) returned 1 [0236.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f7e8 [0236.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204dd0 [0236.201] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f7e8 | out: hHeap=0x1f0000) returned 1 [0236.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204df0 [0236.201] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204dd0 | out: hHeap=0x1f0000) returned 1 [0236.201] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f6b0 | out: hHeap=0x1f0000) returned 1 [0236.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e30 [0236.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2604f0 [0236.201] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e30 | out: hHeap=0x1f0000) returned 1 [0236.202] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204e70 [0236.202] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0236.202] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204df0 | out: hHeap=0x1f0000) returned 1 [0236.202] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204c90 [0236.202] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206838 [0236.202] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c90 | out: hHeap=0x1f0000) returned 1 [0236.202] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260888 [0236.202] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206838 | out: hHeap=0x1f0000) returned 1 [0236.202] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e70 | out: hHeap=0x1f0000) returned 1 [0236.202] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238800 [0236.202] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f680 [0236.202] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238800 | out: hHeap=0x1f0000) returned 1 [0236.202] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f788 [0236.202] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f680 | out: hHeap=0x1f0000) returned 1 [0236.202] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204dd0 [0236.202] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f788 | out: hHeap=0x1f0000) returned 1 [0236.202] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206838 [0236.202] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204dd0 | out: hHeap=0x1f0000) returned 1 [0236.203] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206838 | out: hHeap=0x1f0000) returned 1 [0236.203] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0236.203] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260630 | out: hHeap=0x1f0000) returned 1 [0236.203] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac238 [0236.203] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285ae8 | out: hHeap=0x1f0000) returned 1 [0236.203] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260838 | out: hHeap=0x1f0000) returned 1 [0236.203] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c90 [0236.203] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260838 [0236.203] CryptAcquireContextA (in: phProv=0x1a1d6c8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1a1d6c8*=0x2132c8) returned 1 [0236.204] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x260838 | out: pbBuffer=0x260838) returned 1 [0236.204] CryptReleaseContext (hProv=0x2132c8, dwFlags=0x0) returned 1 [0236.204] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260838 | out: hHeap=0x1f0000) returned 1 [0236.204] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260838 [0236.204] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260888 [0236.204] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c20 [0236.204] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260838 | out: hHeap=0x1f0000) returned 1 [0236.204] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abc70 [0236.204] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c20 | out: hHeap=0x1f0000) returned 1 [0236.205] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8a58 [0236.205] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f7b8 [0236.205] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x2b06c0 [0236.205] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260838 [0236.205] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285e00 [0236.205] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f50 [0236.205] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0110 [0236.205] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260630 [0236.205] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x284f90 [0236.205] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238900 [0236.205] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0236.205] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f7d0 [0236.205] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389c0 [0236.205] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260540 [0236.205] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f8c0 [0236.206] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f8c0 | out: hHeap=0x1f0000) returned 1 [0236.206] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0236.206] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389c0 | out: hHeap=0x1f0000) returned 1 [0236.206] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f7d0 | out: hHeap=0x1f0000) returned 1 [0236.206] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0236.206] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238900 | out: hHeap=0x1f0000) returned 1 [0236.206] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x284f90 | out: hHeap=0x1f0000) returned 1 [0236.206] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260630 | out: hHeap=0x1f0000) returned 1 [0236.206] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0110 | out: hHeap=0x1f0000) returned 1 [0236.206] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239198 [0236.206] GetLastError () returned 0x0 [0236.206] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238e50 [0236.206] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab458 [0236.206] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab458 | out: hHeap=0x1f0000) returned 1 [0236.206] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac800 [0236.206] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abd98 [0236.207] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac800 | out: hHeap=0x1f0000) returned 1 [0236.207] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abd98 | out: hHeap=0x1f0000) returned 1 [0236.207] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x24ea80 [0236.207] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2856c8 [0236.207] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aba20 [0236.207] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aba20 | out: hHeap=0x1f0000) returned 1 [0236.207] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac488 [0236.207] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac488 | out: hHeap=0x1f0000) returned 1 [0236.207] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2854b8 [0236.207] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab208 [0236.207] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab208 | out: hHeap=0x1f0000) returned 1 [0236.207] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f510 [0236.207] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x26c1b8 [0236.207] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2ae770 [0236.208] QueryPerformanceCounter (in: lpPerformanceCount=0x1a1d218 | out: lpPerformanceCount=0x1a1d218*=39357650105) returned 1 [0236.208] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1a1d258 | out: lpSystemTimeAsFileTime=0x1a1d258) [0236.208] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238970 [0236.208] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608b0 [0236.208] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bf0 [0236.208] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bf0 | out: hHeap=0x1f0000) returned 1 [0236.208] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608b0 | out: hHeap=0x1f0000) returned 1 [0236.208] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0236.208] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c90 [0236.209] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c90 | out: hHeap=0x1f0000) returned 1 [0236.209] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0236.209] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238970 | out: hHeap=0x1f0000) returned 1 [0236.209] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0236.209] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x2392b0 [0236.209] GetLastError () returned 0x0 [0236.209] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac360 [0236.209] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac488 [0236.209] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac110 [0236.209] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260630 [0236.210] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2608b0 [0236.210] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2acca0 [0236.210] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab208 [0236.210] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2604f0 [0236.210] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac5b0 [0236.210] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x234b90 [0236.211] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abd98 [0236.211] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x25ffe8 [0236.212] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abd98 | out: hHeap=0x1f0000) returned 1 [0236.212] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x220748 [0236.212] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25ffe8 | out: hHeap=0x1f0000) returned 1 [0236.212] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260540 [0236.212] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260b58 [0236.212] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0236.212] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac800 [0236.212] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b58 | out: hHeap=0x1f0000) returned 1 [0236.213] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x220968 [0236.213] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x2647e0 [0236.213] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2647e0 | out: hHeap=0x1f0000) returned 1 [0236.213] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220968 | out: hHeap=0x1f0000) returned 1 [0236.213] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220748 | out: hHeap=0x1f0000) returned 1 [0236.213] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f830 [0236.213] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2284d0 [0236.213] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260b08 [0236.213] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260bf8 [0236.213] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260ba8 [0236.214] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260c48 [0236.214] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0236.214] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b08 | out: hHeap=0x1f0000) returned 1 [0236.214] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x25ffe8 [0236.214] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260b58 [0236.214] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260b08 [0236.214] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b58 | out: hHeap=0x1f0000) returned 1 [0236.214] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab330 [0236.214] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b08 | out: hHeap=0x1f0000) returned 1 [0236.214] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206688 [0236.214] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x2aa0d0 [0236.214] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aa0d0 | out: hHeap=0x1f0000) returned 1 [0236.215] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206688 | out: hHeap=0x1f0000) returned 1 [0236.215] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0236.215] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab458 [0236.215] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab330 | out: hHeap=0x1f0000) returned 1 [0236.215] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25ffe8 | out: hHeap=0x1f0000) returned 1 [0236.215] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204c90 [0236.215] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abec0 [0236.215] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab580 [0236.215] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608b0 | out: hHeap=0x1f0000) returned 1 [0236.216] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab8f8 [0236.216] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab580 | out: hHeap=0x1f0000) returned 1 [0236.216] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0236.216] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ba8 | out: hHeap=0x1f0000) returned 1 [0236.216] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2284d0 | out: hHeap=0x1f0000) returned 1 [0236.216] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abec0 | out: hHeap=0x1f0000) returned 1 [0236.216] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c90 | out: hHeap=0x1f0000) returned 1 [0236.216] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f830 | out: hHeap=0x1f0000) returned 1 [0236.217] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac800 | out: hHeap=0x1f0000) returned 1 [0236.217] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abd98 [0236.217] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abd98 | out: hHeap=0x1f0000) returned 1 [0236.217] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b90 | out: hHeap=0x1f0000) returned 1 [0236.217] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac5b0 | out: hHeap=0x1f0000) returned 1 [0236.217] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab458 | out: hHeap=0x1f0000) returned 1 [0236.217] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab208 | out: hHeap=0x1f0000) returned 1 [0236.217] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2acca0 | out: hHeap=0x1f0000) returned 1 [0236.218] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260630 | out: hHeap=0x1f0000) returned 1 [0236.218] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac110 | out: hHeap=0x1f0000) returned 1 [0236.218] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac488 | out: hHeap=0x1f0000) returned 1 [0236.218] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab330 [0236.218] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac110 [0236.218] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab330 | out: hHeap=0x1f0000) returned 1 [0236.218] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac110 | out: hHeap=0x1f0000) returned 1 [0236.219] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab8f8 | out: hHeap=0x1f0000) returned 1 [0236.219] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac360 | out: hHeap=0x1f0000) returned 1 [0236.219] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2854b8 | out: hHeap=0x1f0000) returned 1 [0236.219] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24ea80 | out: hHeap=0x1f0000) returned 1 [0236.219] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x2aebd0 [0236.219] GetLastError () returned 0x0 [0236.219] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238910 [0236.220] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388c0 [0236.221] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d5c8, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0236.222] GetFileType (hFile=0x23c) returned 0x1 [0236.222] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28dfd0 [0236.223] SetFilePointerEx (in: hFile=0x23c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1a1d550 | out: lpNewFilePointer=0x0) returned 1 [0236.223] GetLastError () returned 0xb7 [0236.224] CloseHandle (hObject=0x23c) returned 1 [0236.224] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388c0 | out: hHeap=0x1f0000) returned 1 [0236.225] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238910 | out: hHeap=0x1f0000) returned 1 [0236.225] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2856c8 | out: hHeap=0x1f0000) returned 1 [0236.225] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285e00 | out: hHeap=0x1f0000) returned 1 [0236.225] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260838 | out: hHeap=0x1f0000) returned 1 [0236.225] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f50 | out: hHeap=0x1f0000) returned 1 [0236.225] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b06c0 | out: hHeap=0x1f0000) returned 1 [0236.225] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f7b8 | out: hHeap=0x1f0000) returned 1 [0236.226] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8a58 | out: hHeap=0x1f0000) returned 1 [0236.226] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aebd0 | out: hHeap=0x1f0000) returned 1 [0236.226] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0236.226] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abc70 | out: hHeap=0x1f0000) returned 1 [0236.226] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x26c1b8 | out: hHeap=0x1f0000) returned 1 [0236.226] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae770 | out: hHeap=0x1f0000) returned 1 [0236.226] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c90 | out: hHeap=0x1f0000) returned 1 [0236.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388a0 | out: hHeap=0x1f0000) returned 1 [0236.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f8a8 | out: hHeap=0x1f0000) returned 1 [0236.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604c8 | out: hHeap=0x1f0000) returned 1 [0236.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387f0 | out: hHeap=0x1f0000) returned 1 [0236.228] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f890 | out: hHeap=0x1f0000) returned 1 [0236.228] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0236.228] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238850 | out: hHeap=0x1f0000) returned 1 [0236.228] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285bf0 | out: hHeap=0x1f0000) returned 1 [0236.228] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0236.228] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0520 | out: hHeap=0x1f0000) returned 1 [0236.228] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228878 | out: hHeap=0x1f0000) returned 1 [0236.228] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260658 | out: hHeap=0x1f0000) returned 1 [0236.229] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac238 | out: hHeap=0x1f0000) returned 1 [0236.229] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228830 | out: hHeap=0x1f0000) returned 1 [0236.229] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238aa0 | out: hHeap=0x1f0000) returned 1 [0236.229] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b60 | out: hHeap=0x1f0000) returned 1 [0236.229] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x289fb0 | out: hHeap=0x1f0000) returned 1 [0236.229] CloseHandle (hObject=0x200) returned 1 [0236.230] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388f0 | out: hHeap=0x1f0000) returned 1 [0236.230] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388e0 | out: hHeap=0x1f0000) returned 1 [0236.231] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223be0 | out: hHeap=0x1f0000) returned 1 [0236.231] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24bdf0 | out: hHeap=0x1f0000) returned 1 [0236.231] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f968 | out: hHeap=0x1f0000) returned 1 [0236.231] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cf0 | out: hHeap=0x1f0000) returned 1 [0236.231] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28afb8 | out: hHeap=0x1f0000) returned 1 [0236.231] CloseHandle (hObject=0x1e0) returned 1 [0236.232] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238990 | out: hHeap=0x1f0000) returned 1 [0236.232] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389b0 | out: hHeap=0x1f0000) returned 1 [0236.232] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2add68 | out: hHeap=0x1f0000) returned 1 [0236.233] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d30 | out: hHeap=0x1f0000) returned 1 [0236.233] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b018 | out: hHeap=0x1f0000) returned 1 [0236.233] CloseHandle (hObject=0x210) returned 1 [0236.234] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238980 | out: hHeap=0x1f0000) returned 1 [0236.234] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238810 | out: hHeap=0x1f0000) returned 1 [0236.234] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad1e8 | out: hHeap=0x1f0000) returned 1 [0236.234] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388d0 | out: hHeap=0x1f0000) returned 1 [0236.234] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238960 | out: hHeap=0x1f0000) returned 1 [0236.235] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238830 | out: hHeap=0x1f0000) returned 1 [0236.235] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238820 | out: hHeap=0x1f0000) returned 1 [0236.235] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20c2c0 | out: hHeap=0x1f0000) returned 1 [0236.235] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x252370 | out: hHeap=0x1f0000) returned 1 [0236.235] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2af148 | out: hHeap=0x1f0000) returned 1 [0236.235] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2066b8 | out: hHeap=0x1f0000) returned 1 [0236.235] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f800 | out: hHeap=0x1f0000) returned 1 [0236.236] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f608 | out: hHeap=0x1f0000) returned 1 [0236.236] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233228 | out: hHeap=0x1f0000) returned 1 [0236.236] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x255c88 | out: hHeap=0x1f0000) returned 1 [0236.236] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2af030 | out: hHeap=0x1f0000) returned 1 [0236.236] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239048 | out: hHeap=0x1f0000) returned 1 [0236.236] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e88 | out: hHeap=0x1f0000) returned 1 [0236.236] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262320 | out: hHeap=0x1f0000) returned 1 [0236.236] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228440 | out: hHeap=0x1f0000) returned 1 [0236.237] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0236.237] DeleteFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar")) returned 1 [0236.239] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7fbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunmscapi.jar", cAlternateFileName="SUNMSC~1.JAR")) returned 1 [0236.239] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260838 [0236.239] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0b38 [0236.239] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220c58 [0236.239] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0b38 | out: hHeap=0x1f0000) returned 1 [0236.240] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0236.240] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260838 | out: hHeap=0x1f0000) returned 1 [0236.240] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0236.241] GetFileType (hFile=0x210) returned 0x1 [0236.241] CloseHandle (hObject=0x210) returned 1 [0236.242] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212be0 [0236.242] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7fbb)) returned 1 [0236.242] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212be0 | out: hHeap=0x1f0000) returned 1 [0236.242] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212cf0 [0236.242] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7fbb)) returned 1 [0236.242] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212cf0 | out: hHeap=0x1f0000) returned 1 [0236.619] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0236.619] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0236.619] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3d5bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunpkcs11.jar", cAlternateFileName="SUNPKC~1.JAR")) returned 1 [0236.619] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0236.619] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0b38 [0236.619] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2211b0 [0236.619] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0b38 | out: hHeap=0x1f0000) returned 1 [0236.619] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0236.620] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0236.620] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0236.620] GetFileType (hFile=0x174) returned 0x1 [0236.621] CloseHandle (hObject=0x174) returned 1 [0236.621] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213790 [0236.621] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3d5bf)) returned 1 [0236.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213790 | out: hHeap=0x1f0000) returned 1 [0236.621] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212c68 [0236.621] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3d5bf)) returned 1 [0236.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212c68 | out: hHeap=0x1f0000) returned 1 [0236.622] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213680 [0236.622] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213680 | out: hHeap=0x1f0000) returned 1 [0236.622] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x10d3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="zipfs.jar", cAlternateFileName="")) returned 1 [0236.622] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0236.622] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0860 [0236.622] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2217a0 [0236.622] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0860 | out: hHeap=0x1f0000) returned 1 [0236.622] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0236.622] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0236.623] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\zipfs.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0236.623] GetFileType (hFile=0x174) returned 0x1 [0236.623] CloseHandle (hObject=0x174) returned 1 [0236.623] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220580 [0236.623] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\zipfs.jar"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x10d3c)) returned 1 [0236.624] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220580 | out: hHeap=0x1f0000) returned 1 [0236.624] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0236.624] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\zipfs.jar"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x10d3c)) returned 1 [0236.624] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0236.624] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe00 [0236.624] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe00 | out: hHeap=0x1f0000) returned 1 [0236.624] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x10d3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="zipfs.jar", cAlternateFileName="")) returned 0 [0236.624] FindClose (in: hFindFile=0x24e5c0 | out: hFindFile=0x24e5c0) returned 1 [0236.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0236.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262cb0 | out: hHeap=0x1f0000) returned 1 [0236.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0236.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228a70 | out: hHeap=0x1f0000) returned 1 [0236.625] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2285f0 [0236.625] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0236.625] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x263640 [0236.626] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0860 [0236.626] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\*", lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa122f229, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e980 [0236.626] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0520 [0236.626] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0860 | out: hHeap=0x1f0000) returned 1 [0236.626] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0236.626] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa122f229, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0236.627] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0b38 [0236.627] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220fe8 [0236.627] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0b38 | out: hHeap=0x1f0000) returned 1 [0236.627] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0520 | out: hHeap=0x1f0000) returned 1 [0236.627] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0236.627] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0236.627] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x12588, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaBrightDemiBold.ttf", cAlternateFileName="LUCIDA~1.TTF")) returned 1 [0236.627] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228638 [0236.627] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0ba0 [0236.627] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0236.628] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0ba0 | out: hHeap=0x1f0000) returned 1 [0236.628] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0236.628] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228638 | out: hHeap=0x1f0000) returned 1 [0236.628] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemibold.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0236.629] GetFileType (hFile=0x174) returned 0x1 [0236.629] CloseHandle (hObject=0x174) returned 1 [0236.629] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0236.629] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemibold.ttf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x12588)) returned 1 [0236.630] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0236.630] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0236.630] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemibold.ttf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x12588)) returned 1 [0236.630] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0236.630] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0236.630] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0236.630] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x12574, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaBrightDemiItalic.ttf", cAlternateFileName="LUCIDA~2.TTF")) returned 1 [0236.630] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228950 [0236.630] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0ad0 [0236.630] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219d98 [0236.631] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0ad0 | out: hHeap=0x1f0000) returned 1 [0236.631] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0236.631] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228950 | out: hHeap=0x1f0000) returned 1 [0236.631] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiItalic.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemiitalic.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0236.631] GetFileType (hFile=0x174) returned 0x1 [0236.632] CloseHandle (hObject=0x174) returned 1 [0236.632] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a2d8 [0236.632] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiItalic.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemiitalic.ttf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x12574)) returned 1 [0236.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a2d8 | out: hHeap=0x1f0000) returned 1 [0236.632] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a230 [0236.632] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiItalic.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemiitalic.ttf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x12574)) returned 1 [0236.633] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a230 | out: hHeap=0x1f0000) returned 1 [0236.633] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a380 [0236.633] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a380 | out: hHeap=0x1f0000) returned 1 [0236.633] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13bd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaBrightItalic.ttf", cAlternateFileName="LUCIDA~3.TTF")) returned 1 [0236.633] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238f30 [0236.633] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0110 [0236.634] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0236.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0110 | out: hHeap=0x1f0000) returned 1 [0236.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219d98 | out: hHeap=0x1f0000) returned 1 [0236.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238f30 | out: hHeap=0x1f0000) returned 1 [0236.634] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightItalic.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightitalic.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0236.635] GetFileType (hFile=0x174) returned 0x1 [0236.635] CloseHandle (hObject=0x174) returned 1 [0236.635] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0236.635] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightItalic.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightitalic.ttf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13bd8)) returned 1 [0236.636] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0236.636] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0236.636] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightItalic.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightitalic.ttf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13bd8)) returned 1 [0236.636] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0236.636] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0236.636] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0236.636] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5434c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaBrightRegular.ttf", cAlternateFileName="LUCIDA~4.TTF")) returned 1 [0236.636] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238e50 [0236.636] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0ba0 [0236.636] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0236.637] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0ba0 | out: hHeap=0x1f0000) returned 1 [0236.637] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0236.637] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238e50 | out: hHeap=0x1f0000) returned 1 [0236.637] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightregular.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0236.638] GetFileType (hFile=0x174) returned 0x1 [0236.638] CloseHandle (hObject=0x174) returned 1 [0236.638] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0236.638] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightregular.ttf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5434c)) returned 1 [0236.638] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0236.638] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0236.639] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightregular.ttf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5434c)) returned 1 [0236.639] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0236.639] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0236.639] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0236.639] GetLastError () returned 0x0 [0236.639] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260900 [0236.639] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228b00 [0236.640] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262320 [0236.640] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0236.640] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2391d0 [0236.640] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260518 [0236.640] CryptAcquireContextA (in: phProv=0x1a1d6c8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1a1d6c8*=0x212e88) returned 1 [0236.641] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x260518 | out: pbBuffer=0x260518) returned 1 [0236.641] CryptReleaseContext (hProv=0x212e88, dwFlags=0x0) returned 1 [0236.641] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0236.641] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x267598 [0236.641] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2adfc8 [0236.641] QueryPerformanceCounter (in: lpPerformanceCount=0x1a1d65c | out: lpPerformanceCount=0x1a1d65c*=39401030907) returned 1 [0236.642] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1a1d69c | out: lpSystemTimeAsFileTime=0x1a1d69c) [0236.642] QueryPerformanceCounter (in: lpPerformanceCount=0x1a1d65c | out: lpPerformanceCount=0x1a1d65c*=39401059370) returned 1 [0236.642] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1a1d69c | out: lpSystemTimeAsFileTime=0x1a1d69c) [0236.642] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238c20 [0236.642] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x26aeb0 [0236.642] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2aef18 [0236.642] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x233088 [0236.642] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f680 [0236.642] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2067d8 [0236.642] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f698 [0236.643] GetLastError () returned 0x0 [0236.643] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a230 [0236.643] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xee) returned 0x21b270 [0236.643] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a230 | out: hHeap=0x1f0000) returned 1 [0236.643] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x164) returned 0x21bf68 [0236.643] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21b270 | out: hHeap=0x1f0000) returned 1 [0236.643] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238920 [0236.644] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388d0 [0236.644] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightregular.ttf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d568, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0236.645] GetFileType (hFile=0x174) returned 0x1 [0236.646] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238930 [0236.646] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238980 [0236.647] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightregular.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d598, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0236.647] GetFileType (hFile=0x210) returned 0x1 [0236.647] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cf0 [0236.647] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d10 [0236.647] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad7a8 [0236.648] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238840 [0236.648] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388e0 [0236.649] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightregular.ttf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d4e4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0236.650] GetFileType (hFile=0x1e0) returned 0x1 [0236.650] GetLastError () returned 0xb7 [0236.650] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe4) returned 0x25ffe8 [0236.651] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cf0 [0236.651] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d10 [0236.651] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204db0 [0236.651] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad130 [0236.651] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238940 [0236.651] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238900 [0236.652] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightregular.ttf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d4e4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0236.652] GetFileType (hFile=0x200) returned 0x1 [0236.653] GetLastError () returned 0xb7 [0236.653] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204db0 [0236.653] GetLastError () returned 0xb7 [0236.654] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e70 [0236.654] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bd0 [0236.654] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204b90 [0236.654] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb8) returned 0x224ae0 [0236.654] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238950 [0236.654] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238960 [0236.655] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightregular.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d4dc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0236.655] GetFileType (hFile=0x23c) returned 0x1 [0236.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x291ff0 [0236.656] ReadFile (in: hFile=0x23c, lpBuffer=0x291ff0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1d438, lpOverlapped=0x0 | out: lpBuffer=0x291ff0*, lpNumberOfBytesRead=0x1a1d438*=0x1000, lpOverlapped=0x0) returned 1 [0236.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24bdf0 [0236.980] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x292ff8 [0236.980] GetLastError () returned 0x0 [0237.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f728 [0237.001] GetLastError () returned 0x0 [0237.002] CloseHandle (hObject=0x174) returned 1 [0237.003] CloseHandle (hObject=0x210) returned 1 [0237.003] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388c0 [0237.004] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389b0 [0237.004] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightregular.ttf"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d598, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0237.013] GetFileType (hFile=0x210) returned 0x1 [0237.013] GetLastError () returned 0xb7 [0237.014] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28bfc0 [0237.014] GetLastError () returned 0xb7 [0237.016] CloseHandle (hObject=0x210) returned 1 [0237.016] DeleteFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightregular.ttf")) returned 0 [0237.017] GetLastError () returned 0x20 [0237.017] GetLastError () returned 0x20 [0237.017] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2288c0 [0237.017] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260608 [0237.017] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2607e8 [0237.017] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x228950 [0237.017] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bb0 [0237.017] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204db0 [0237.017] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x2389f0 [0237.017] GetLastError () returned 0x20 [0237.018] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238f30 [0237.018] GetLastError () returned 0x20 [0237.018] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238c58 [0237.018] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0790 [0237.018] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2608b0 [0237.018] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2859e0 [0237.018] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ac0 [0237.018] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a18 [0237.018] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f6b0 [0237.018] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a10 [0237.018] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0237.018] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f788 [0237.018] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260a68 [0237.019] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2851a0 [0237.019] GetLastError () returned 0x20 [0237.019] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238a80 [0237.019] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238ba0 [0237.019] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ae0 [0237.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ba0 | out: hHeap=0x1f0000) returned 1 [0237.019] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ad0 [0237.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ae0 | out: hHeap=0x1f0000) returned 1 [0237.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a80 | out: hHeap=0x1f0000) returned 1 [0237.019] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a90 [0237.019] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f8d8 [0237.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a90 | out: hHeap=0x1f0000) returned 1 [0237.019] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f8a8 [0237.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f8d8 | out: hHeap=0x1f0000) returned 1 [0237.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ad0 | out: hHeap=0x1f0000) returned 1 [0237.020] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f638 [0237.020] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f6c8 [0237.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f638 | out: hHeap=0x1f0000) returned 1 [0237.020] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f8c0 [0237.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f6c8 | out: hHeap=0x1f0000) returned 1 [0237.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f8a8 | out: hHeap=0x1f0000) returned 1 [0237.020] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f770 [0237.020] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204f70 [0237.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f770 | out: hHeap=0x1f0000) returned 1 [0237.020] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e30 [0237.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f70 | out: hHeap=0x1f0000) returned 1 [0237.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f8c0 | out: hHeap=0x1f0000) returned 1 [0237.020] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f10 [0237.020] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260b30 [0237.021] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f10 | out: hHeap=0x1f0000) returned 1 [0237.021] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204f10 [0237.021] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b30 | out: hHeap=0x1f0000) returned 1 [0237.021] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e30 | out: hHeap=0x1f0000) returned 1 [0237.021] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204e90 [0237.021] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206868 [0237.021] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e90 | out: hHeap=0x1f0000) returned 1 [0237.021] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260b58 [0237.021] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206868 | out: hHeap=0x1f0000) returned 1 [0237.021] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f10 | out: hHeap=0x1f0000) returned 1 [0237.021] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b10 [0237.021] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f710 [0237.021] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b10 | out: hHeap=0x1f0000) returned 1 [0237.022] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f770 [0237.022] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f710 | out: hHeap=0x1f0000) returned 1 [0237.022] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204db0 [0237.022] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f770 | out: hHeap=0x1f0000) returned 1 [0237.022] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206868 [0237.022] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204db0 | out: hHeap=0x1f0000) returned 1 [0237.022] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206868 | out: hHeap=0x1f0000) returned 1 [0237.022] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b58 | out: hHeap=0x1f0000) returned 1 [0237.022] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0237.022] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac800 [0237.022] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2859e0 | out: hHeap=0x1f0000) returned 1 [0237.022] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608b0 | out: hHeap=0x1f0000) returned 1 [0237.023] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238e88 [0237.023] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0237.023] CryptAcquireContextA (in: phProv=0x1a1d6c8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1a1d6c8*=0x213460) returned 1 [0237.416] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x260608 | out: pbBuffer=0x260608) returned 1 [0237.416] CryptReleaseContext (hProv=0x213460, dwFlags=0x0) returned 1 [0237.416] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0237.416] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2604f0 [0237.416] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260540 [0237.416] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238e18 [0237.416] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0237.416] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab208 [0237.416] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238e18 | out: hHeap=0x1f0000) returned 1 [0237.416] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a84d8 [0237.416] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f9c8 [0237.416] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x2b0860 [0237.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260888 [0237.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2856c8 [0237.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f50 [0237.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b08c8 [0237.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2608b0 [0237.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285e00 [0237.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238820 [0237.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0237.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f938 [0237.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388f0 [0237.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605b8 [0237.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f6c8 [0237.417] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f6c8 | out: hHeap=0x1f0000) returned 1 [0237.418] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0237.418] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388f0 | out: hHeap=0x1f0000) returned 1 [0237.418] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f938 | out: hHeap=0x1f0000) returned 1 [0237.418] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0237.418] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238820 | out: hHeap=0x1f0000) returned 1 [0237.418] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285e00 | out: hHeap=0x1f0000) returned 1 [0237.418] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608b0 | out: hHeap=0x1f0000) returned 1 [0237.418] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b08c8 | out: hHeap=0x1f0000) returned 1 [0237.418] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238da8 [0237.418] GetLastError () returned 0x0 [0237.418] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238c58 [0237.418] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2acb78 [0237.419] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2acb78 | out: hHeap=0x1f0000) returned 1 [0237.419] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aba20 [0237.419] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac488 [0237.419] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aba20 | out: hHeap=0x1f0000) returned 1 [0237.419] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac488 | out: hHeap=0x1f0000) returned 1 [0237.419] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x24ed00 [0237.419] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285bf0 [0237.419] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab6a8 [0237.419] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab6a8 | out: hHeap=0x1f0000) returned 1 [0237.419] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab458 [0237.419] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab458 | out: hHeap=0x1f0000) returned 1 [0237.419] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285cf8 [0237.419] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aba20 [0237.419] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aba20 | out: hHeap=0x1f0000) returned 1 [0237.420] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fe70 [0237.420] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x26e7c8 [0237.420] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2af6c0 [0237.420] QueryPerformanceCounter (in: lpPerformanceCount=0x1a1d218 | out: lpPerformanceCount=0x1a1d218*=39478878221) returned 1 [0237.420] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1a1d258 | out: lpSystemTimeAsFileTime=0x1a1d258) [0237.420] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238820 [0237.420] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0237.420] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bd0 [0237.421] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bd0 | out: hHeap=0x1f0000) returned 1 [0237.421] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0237.421] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608b0 [0237.421] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d90 [0237.421] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d90 | out: hHeap=0x1f0000) returned 1 [0237.421] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608b0 | out: hHeap=0x1f0000) returned 1 [0237.421] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238820 | out: hHeap=0x1f0000) returned 1 [0237.421] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0237.421] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238d00 [0237.421] GetLastError () returned 0x0 [0237.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abec0 [0237.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abfe8 [0237.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac488 [0237.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260978 [0237.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2608b0 [0237.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac110 [0237.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab330 [0237.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2604c8 [0237.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab8f8 [0237.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x222ee8 [0237.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2acb78 [0237.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x22b018 [0237.423] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2acb78 | out: hHeap=0x1f0000) returned 1 [0237.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x220748 [0237.423] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b018 | out: hHeap=0x1f0000) returned 1 [0237.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2604f0 [0237.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260568 [0237.423] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0237.424] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac6d8 [0237.424] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0237.424] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x22b018 [0237.424] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x2647e0 [0237.424] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2647e0 | out: hHeap=0x1f0000) returned 1 [0237.424] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b018 | out: hHeap=0x1f0000) returned 1 [0237.424] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220748 | out: hHeap=0x1f0000) returned 1 [0237.425] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f938 [0237.425] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228a70 [0237.425] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2604f0 [0237.425] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2605b8 [0237.425] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260568 [0237.425] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260608 [0237.426] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0237.426] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0237.426] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x22b018 [0237.426] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2604f0 [0237.426] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2605b8 [0237.426] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0237.426] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac238 [0237.427] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0237.427] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206808 [0237.427] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x2a9c88 [0237.427] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a9c88 | out: hHeap=0x1f0000) returned 1 [0237.427] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206808 | out: hHeap=0x1f0000) returned 1 [0237.428] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604c8 | out: hHeap=0x1f0000) returned 1 [0237.428] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aca50 [0237.428] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac238 | out: hHeap=0x1f0000) returned 1 [0237.428] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b018 | out: hHeap=0x1f0000) returned 1 [0237.428] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204d30 [0237.428] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac238 [0237.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2acb78 [0237.429] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608b0 | out: hHeap=0x1f0000) returned 1 [0237.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab0e0 [0237.429] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2acb78 | out: hHeap=0x1f0000) returned 1 [0237.429] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0237.429] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0237.430] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228a70 | out: hHeap=0x1f0000) returned 1 [0237.430] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac238 | out: hHeap=0x1f0000) returned 1 [0237.430] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d30 | out: hHeap=0x1f0000) returned 1 [0237.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f938 | out: hHeap=0x1f0000) returned 1 [0237.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac6d8 | out: hHeap=0x1f0000) returned 1 [0237.431] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aba20 [0237.432] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aba20 | out: hHeap=0x1f0000) returned 1 [0237.432] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ee8 | out: hHeap=0x1f0000) returned 1 [0237.432] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab8f8 | out: hHeap=0x1f0000) returned 1 [0237.432] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aca50 | out: hHeap=0x1f0000) returned 1 [0237.432] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab330 | out: hHeap=0x1f0000) returned 1 [0237.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac110 | out: hHeap=0x1f0000) returned 1 [0237.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0237.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac488 | out: hHeap=0x1f0000) returned 1 [0237.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abfe8 | out: hHeap=0x1f0000) returned 1 [0237.433] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac6d8 [0237.433] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab330 [0237.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac6d8 | out: hHeap=0x1f0000) returned 1 [0237.434] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab330 | out: hHeap=0x1f0000) returned 1 [0237.434] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab0e0 | out: hHeap=0x1f0000) returned 1 [0237.434] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abec0 | out: hHeap=0x1f0000) returned 1 [0237.434] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285cf8 | out: hHeap=0x1f0000) returned 1 [0237.434] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24ed00 | out: hHeap=0x1f0000) returned 1 [0237.434] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x2ae428 [0237.435] GetLastError () returned 0x0 [0237.435] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238820 [0237.436] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238830 [0237.437] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightregular.ttf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d5c8, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0237.437] GetFileType (hFile=0x210) returned 0x1 [0237.438] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28bfc0 [0237.439] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1a1d550 | out: lpNewFilePointer=0x0) returned 1 [0237.439] GetLastError () returned 0xb7 [0237.439] CloseHandle (hObject=0x210) returned 1 [0237.440] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238830 | out: hHeap=0x1f0000) returned 1 [0237.440] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238820 | out: hHeap=0x1f0000) returned 1 [0237.440] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285bf0 | out: hHeap=0x1f0000) returned 1 [0237.441] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2856c8 | out: hHeap=0x1f0000) returned 1 [0237.441] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0237.441] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f50 | out: hHeap=0x1f0000) returned 1 [0237.441] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0860 | out: hHeap=0x1f0000) returned 1 [0237.441] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f9c8 | out: hHeap=0x1f0000) returned 1 [0237.441] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a84d8 | out: hHeap=0x1f0000) returned 1 [0237.442] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae428 | out: hHeap=0x1f0000) returned 1 [0237.442] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0237.442] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab208 | out: hHeap=0x1f0000) returned 1 [0237.442] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x26e7c8 | out: hHeap=0x1f0000) returned 1 [0237.442] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2af6c0 | out: hHeap=0x1f0000) returned 1 [0237.442] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238e88 | out: hHeap=0x1f0000) returned 1 [0237.442] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389f0 | out: hHeap=0x1f0000) returned 1 [0237.442] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f788 | out: hHeap=0x1f0000) returned 1 [0237.443] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0237.443] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a10 | out: hHeap=0x1f0000) returned 1 [0237.443] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f6b0 | out: hHeap=0x1f0000) returned 1 [0237.443] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a18 | out: hHeap=0x1f0000) returned 1 [0237.443] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ac0 | out: hHeap=0x1f0000) returned 1 [0237.443] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2851a0 | out: hHeap=0x1f0000) returned 1 [0237.443] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a68 | out: hHeap=0x1f0000) returned 1 [0237.443] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0790 | out: hHeap=0x1f0000) returned 1 [0237.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228950 | out: hHeap=0x1f0000) returned 1 [0237.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607e8 | out: hHeap=0x1f0000) returned 1 [0237.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac800 | out: hHeap=0x1f0000) returned 1 [0237.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2288c0 | out: hHeap=0x1f0000) returned 1 [0237.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389b0 | out: hHeap=0x1f0000) returned 1 [0237.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388c0 | out: hHeap=0x1f0000) returned 1 [0237.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x291ff0 | out: hHeap=0x1f0000) returned 1 [0237.445] CloseHandle (hObject=0x23c) returned 1 [0237.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238960 | out: hHeap=0x1f0000) returned 1 [0237.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238950 | out: hHeap=0x1f0000) returned 1 [0237.447] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224ae0 | out: hHeap=0x1f0000) returned 1 [0237.447] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24bdf0 | out: hHeap=0x1f0000) returned 1 [0237.447] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f728 | out: hHeap=0x1f0000) returned 1 [0237.447] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e70 | out: hHeap=0x1f0000) returned 1 [0237.447] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x292ff8 | out: hHeap=0x1f0000) returned 1 [0237.448] CloseHandle (hObject=0x200) returned 1 [0237.448] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238900 | out: hHeap=0x1f0000) returned 1 [0237.449] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238940 | out: hHeap=0x1f0000) returned 1 [0237.449] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad130 | out: hHeap=0x1f0000) returned 1 [0237.449] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cf0 | out: hHeap=0x1f0000) returned 1 [0237.449] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25ffe8 | out: hHeap=0x1f0000) returned 1 [0237.450] CloseHandle (hObject=0x1e0) returned 1 [0237.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388e0 | out: hHeap=0x1f0000) returned 1 [0237.451] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238840 | out: hHeap=0x1f0000) returned 1 [0237.451] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad7a8 | out: hHeap=0x1f0000) returned 1 [0237.451] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238980 | out: hHeap=0x1f0000) returned 1 [0237.451] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238930 | out: hHeap=0x1f0000) returned 1 [0237.451] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388d0 | out: hHeap=0x1f0000) returned 1 [0237.451] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238920 | out: hHeap=0x1f0000) returned 1 [0237.451] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21bf68 | out: hHeap=0x1f0000) returned 1 [0237.452] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x26aeb0 | out: hHeap=0x1f0000) returned 1 [0237.452] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aef18 | out: hHeap=0x1f0000) returned 1 [0237.452] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2067d8 | out: hHeap=0x1f0000) returned 1 [0237.452] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f698 | out: hHeap=0x1f0000) returned 1 [0237.452] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f680 | out: hHeap=0x1f0000) returned 1 [0237.452] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233088 | out: hHeap=0x1f0000) returned 1 [0237.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x267598 | out: hHeap=0x1f0000) returned 1 [0237.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2adfc8 | out: hHeap=0x1f0000) returned 1 [0237.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2391d0 | out: hHeap=0x1f0000) returned 1 [0237.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0237.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262320 | out: hHeap=0x1f0000) returned 1 [0237.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228b00 | out: hHeap=0x1f0000) returned 1 [0237.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260900 | out: hHeap=0x1f0000) returned 1 [0237.454] DeleteFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightregular.ttf")) returned 1 [0237.455] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4d9c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaSansDemiBold.ttf", cAlternateFileName="LU38C7~1.TTF")) returned 1 [0237.456] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239160 [0237.456] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0c08 [0237.456] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0237.456] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0c08 | out: hHeap=0x1f0000) returned 1 [0237.456] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0237.456] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239160 | out: hHeap=0x1f0000) returned 1 [0237.457] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansdemibold.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0237.457] GetFileType (hFile=0x1e0) returned 0x1 [0237.458] CloseHandle (hObject=0x1e0) returned 1 [0237.459] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0237.459] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansdemibold.ttf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4d9c8)) returned 1 [0237.459] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0237.459] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0237.459] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansdemibold.ttf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4d9c8)) returned 1 [0237.459] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0237.459] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0237.460] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0237.460] GetLastError () returned 0x0 [0237.460] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260900 [0237.460] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228cb0 [0237.460] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262320 [0237.460] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0237.461] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c90 [0237.461] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2607e8 [0237.461] CryptAcquireContextA (in: phProv=0x1a1d6c8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1a1d6c8*=0x213350) returned 1 [0237.767] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2607e8 | out: pbBuffer=0x2607e8) returned 1 [0237.767] CryptReleaseContext (hProv=0x213350, dwFlags=0x0) returned 1 [0237.767] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607e8 | out: hHeap=0x1f0000) returned 1 [0237.767] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x266290 [0237.768] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2ae1f8 [0237.768] QueryPerformanceCounter (in: lpPerformanceCount=0x1a1d65c | out: lpPerformanceCount=0x1a1d65c*=39513657706) returned 1 [0237.768] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1a1d69c | out: lpSystemTimeAsFileTime=0x1a1d69c) [0237.768] QueryPerformanceCounter (in: lpPerformanceCount=0x1a1d65c | out: lpPerformanceCount=0x1a1d65c*=39513683657) returned 1 [0237.768] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1a1d69c | out: lpSystemTimeAsFileTime=0x1a1d69c) [0237.768] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238e88 [0237.768] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x269ba8 [0237.768] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2ae428 [0237.768] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x232fb8 [0237.768] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f938 [0237.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2067d8 [0237.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f968 [0237.769] GetLastError () returned 0x0 [0237.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a620 [0237.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xee) returned 0x21b650 [0237.769] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a620 | out: hHeap=0x1f0000) returned 1 [0237.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x164) returned 0x21bf68 [0237.769] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21b650 | out: hHeap=0x1f0000) returned 1 [0237.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388d0 [0237.770] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238930 [0237.770] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansdemibold.ttf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d568, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0237.910] GetFileType (hFile=0x1e0) returned 0x1 [0237.911] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238940 [0237.911] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238860 [0237.911] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansdemibold.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d598, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0237.912] GetFileType (hFile=0x200) returned 0x1 [0237.912] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0237.912] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bb0 [0237.912] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad1e8 [0237.912] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238920 [0237.913] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388a0 [0237.913] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansdemibold.ttf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d4e4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0237.913] GetFileType (hFile=0x220) returned 0x1 [0237.914] GetLastError () returned 0xb7 [0237.914] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe4) returned 0x20c2c0 [0237.914] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204db0 [0237.914] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bf0 [0237.914] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e30 [0237.914] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad638 [0237.914] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388b0 [0237.914] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388c0 [0237.915] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansdemibold.ttf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d4e4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0237.915] GetFileType (hFile=0x224) returned 0x1 [0237.915] GetLastError () returned 0xb7 [0237.916] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bd0 [0237.916] GetLastError () returned 0xb7 [0237.916] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bb0 [0237.916] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f10 [0237.916] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c70 [0237.916] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb8) returned 0x223ca0 [0237.916] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238950 [0237.916] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238880 [0237.917] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansdemibold.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d4dc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1bc [0237.917] GetFileType (hFile=0x1bc) returned 0x1 [0237.917] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x287fa0 [0237.917] ReadFile (in: hFile=0x1bc, lpBuffer=0x287fa0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1d438, lpOverlapped=0x0 | out: lpBuffer=0x287fa0*, lpNumberOfBytesRead=0x1a1d438*=0x1000, lpOverlapped=0x0) returned 1 [0237.930] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24b1d8 [0237.931] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28bfc0 [0237.931] GetLastError () returned 0x0 [0238.395] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f998 [0238.396] GetLastError () returned 0x0 [0238.396] CloseHandle (hObject=0x1e0) returned 1 [0238.397] CloseHandle (hObject=0x200) returned 1 [0238.397] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238830 [0238.397] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238840 [0238.398] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansdemibold.ttf"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d598, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0238.405] GetFileType (hFile=0x200) returned 0x1 [0238.406] GetLastError () returned 0xb7 [0238.407] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28cfc8 [0238.407] GetLastError () returned 0xb7 [0238.409] CloseHandle (hObject=0x200) returned 1 [0238.409] DeleteFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansdemibold.ttf")) returned 0 [0238.410] GetLastError () returned 0x20 [0238.410] GetLastError () returned 0x20 [0238.410] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228518 [0238.410] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260798 [0238.410] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2604f0 [0238.410] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x2288c0 [0238.410] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c70 [0238.410] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d90 [0238.411] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x238850 [0238.411] GetLastError () returned 0x20 [0238.411] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238fa0 [0238.411] GetLastError () returned 0x20 [0238.411] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238c20 [0238.411] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b06c0 [0238.411] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260770 [0238.412] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285e00 [0238.412] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388e0 [0238.412] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260540 [0238.412] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f9c8 [0238.412] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238970 [0238.412] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260838 [0238.412] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f920 [0238.412] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2606a8 [0238.412] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x284f90 [0238.413] GetLastError () returned 0x20 [0238.413] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238980 [0238.413] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238990 [0238.413] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ad0 [0238.413] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238990 | out: hHeap=0x1f0000) returned 1 [0238.413] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238990 [0238.413] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ad0 | out: hHeap=0x1f0000) returned 1 [0238.413] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238980 | out: hHeap=0x1f0000) returned 1 [0238.413] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238980 [0238.414] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f950 [0238.414] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238980 | out: hHeap=0x1f0000) returned 1 [0238.414] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f9b0 [0238.414] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f950 | out: hHeap=0x1f0000) returned 1 [0238.414] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238990 | out: hHeap=0x1f0000) returned 1 [0238.414] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f950 [0238.414] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f770 [0238.414] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f950 | out: hHeap=0x1f0000) returned 1 [0238.415] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f950 [0238.415] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f770 | out: hHeap=0x1f0000) returned 1 [0238.415] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f9b0 | out: hHeap=0x1f0000) returned 1 [0238.415] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f9b0 [0238.415] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204f10 [0238.415] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f9b0 | out: hHeap=0x1f0000) returned 1 [0238.415] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f70 [0238.415] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f10 | out: hHeap=0x1f0000) returned 1 [0238.415] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f950 | out: hHeap=0x1f0000) returned 1 [0238.416] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f10 [0238.416] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260888 [0238.416] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f10 | out: hHeap=0x1f0000) returned 1 [0238.416] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204cf0 [0238.416] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0238.416] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f70 | out: hHeap=0x1f0000) returned 1 [0238.416] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204c70 [0238.416] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x2068c8 [0238.417] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c70 | out: hHeap=0x1f0000) returned 1 [0238.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2607e8 [0238.417] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2068c8 | out: hHeap=0x1f0000) returned 1 [0238.417] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cf0 | out: hHeap=0x1f0000) returned 1 [0238.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238980 [0238.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f9b0 [0238.417] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238980 | out: hHeap=0x1f0000) returned 1 [0238.418] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f950 [0238.418] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f9b0 | out: hHeap=0x1f0000) returned 1 [0238.418] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204df0 [0238.418] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f950 | out: hHeap=0x1f0000) returned 1 [0238.418] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206808 [0238.418] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204df0 | out: hHeap=0x1f0000) returned 1 [0238.418] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206808 | out: hHeap=0x1f0000) returned 1 [0238.419] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607e8 | out: hHeap=0x1f0000) returned 1 [0238.419] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260798 | out: hHeap=0x1f0000) returned 1 [0238.419] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0238.419] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285e00 | out: hHeap=0x1f0000) returned 1 [0238.419] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0238.419] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c20 [0238.419] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260888 [0238.419] CryptAcquireContextA (in: phProv=0x1a1d6c8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1a1d6c8*=0x212d78) returned 1 [0238.421] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x260888 | out: pbBuffer=0x260888) returned 1 [0238.421] CryptReleaseContext (hProv=0x212d78, dwFlags=0x0) returned 1 [0238.421] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0238.421] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260770 [0238.421] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260518 [0238.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238f30 [0238.422] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0238.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0238.422] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238f30 | out: hHeap=0x1f0000) returned 1 [0238.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8690 [0238.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f9b0 [0238.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x2b0318 [0238.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260978 [0238.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2858d8 [0238.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d10 [0238.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0b38 [0238.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260568 [0238.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2853b0 [0238.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238980 [0238.424] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260770 [0238.424] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f950 [0238.424] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238990 [0238.424] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260798 [0238.424] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f8f0 [0238.424] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f8f0 | out: hHeap=0x1f0000) returned 1 [0238.424] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260798 | out: hHeap=0x1f0000) returned 1 [0238.424] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238990 | out: hHeap=0x1f0000) returned 1 [0238.424] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f950 | out: hHeap=0x1f0000) returned 1 [0238.425] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0238.425] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238980 | out: hHeap=0x1f0000) returned 1 [0238.425] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2853b0 | out: hHeap=0x1f0000) returned 1 [0238.425] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0238.425] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0b38 | out: hHeap=0x1f0000) returned 1 [0238.425] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239278 [0238.425] GetLastError () returned 0x0 [0238.425] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238e18 [0238.425] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0238.426] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0238.426] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0238.426] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0238.426] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0238.426] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0238.426] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x24e6c0 [0238.426] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2852a8 [0238.426] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0238.427] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0238.427] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0238.427] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0238.427] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2859e0 [0238.427] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0238.427] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0238.427] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x230000 [0238.427] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x264f88 [0238.427] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2afc38 [0238.428] QueryPerformanceCounter (in: lpPerformanceCount=0x1a1d218 | out: lpPerformanceCount=0x1a1d218*=39579658341) returned 1 [0238.428] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1a1d258 | out: lpSystemTimeAsFileTime=0x1a1d258) [0238.428] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238980 [0238.428] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260770 [0238.428] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d90 [0238.428] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d90 | out: hHeap=0x1f0000) returned 1 [0238.428] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0238.428] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0238.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d90 [0238.429] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d90 | out: hHeap=0x1f0000) returned 1 [0238.429] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0238.429] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238980 | out: hHeap=0x1f0000) returned 1 [0238.429] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0238.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238f30 [0238.429] GetLastError () returned 0x0 [0238.430] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0238.430] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0238.430] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0238.430] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260770 [0238.430] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260568 [0238.430] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0238.430] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0238.430] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260928 [0238.430] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0238.430] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x222ee8 [0238.431] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0238.432] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x25ffe8 [0238.432] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0238.432] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x220748 [0238.432] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25ffe8 | out: hHeap=0x1f0000) returned 1 [0238.432] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260860 [0238.432] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260798 [0238.432] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0238.432] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0238.432] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260798 | out: hHeap=0x1f0000) returned 1 [0238.432] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x220968 [0238.432] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x234b90 [0238.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b90 | out: hHeap=0x1f0000) returned 1 [0238.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220968 | out: hHeap=0x1f0000) returned 1 [0238.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220748 | out: hHeap=0x1f0000) returned 1 [0238.433] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f950 [0238.433] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228638 [0238.433] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260798 [0238.433] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2607e8 [0238.434] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260590 [0238.434] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2605b8 [0238.434] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607e8 | out: hHeap=0x1f0000) returned 1 [0238.434] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260798 | out: hHeap=0x1f0000) returned 1 [0238.434] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x25ffe8 [0238.434] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260798 [0238.434] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2607e8 [0238.434] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260798 | out: hHeap=0x1f0000) returned 1 [0238.435] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0238.435] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607e8 | out: hHeap=0x1f0000) returned 1 [0238.435] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206808 [0238.435] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x2a9840 [0238.435] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a9840 | out: hHeap=0x1f0000) returned 1 [0238.435] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206808 | out: hHeap=0x1f0000) returned 1 [0238.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0238.436] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0238.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0238.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25ffe8 | out: hHeap=0x1f0000) returned 1 [0238.436] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204d90 [0238.436] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0238.436] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0238.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0238.437] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aca50 [0238.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0238.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0238.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0238.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228638 | out: hHeap=0x1f0000) returned 1 [0238.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0238.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d90 | out: hHeap=0x1f0000) returned 1 [0238.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f950 | out: hHeap=0x1f0000) returned 1 [0238.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0238.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab6a8 [0238.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab6a8 | out: hHeap=0x1f0000) returned 1 [0238.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ee8 | out: hHeap=0x1f0000) returned 1 [0238.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0238.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0238.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0238.971] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0238.971] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0238.971] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0238.971] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0238.971] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab208 [0238.971] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac6d8 [0238.971] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab208 | out: hHeap=0x1f0000) returned 1 [0238.971] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac6d8 | out: hHeap=0x1f0000) returned 1 [0238.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aca50 | out: hHeap=0x1f0000) returned 1 [0238.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0238.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2859e0 | out: hHeap=0x1f0000) returned 1 [0238.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24e6c0 | out: hHeap=0x1f0000) returned 1 [0238.972] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x2ae540 [0238.972] GetLastError () returned 0x0 [0238.972] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a70 [0238.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b60 [0238.974] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansdemibold.ttf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d5c8, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0238.975] GetFileType (hFile=0x174) returned 0x1 [0238.975] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x292ff8 [0238.976] SetFilePointerEx (in: hFile=0x174, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1a1d550 | out: lpNewFilePointer=0x0) returned 1 [0238.976] GetLastError () returned 0xb7 [0238.977] CloseHandle (hObject=0x174) returned 1 [0238.977] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b60 | out: hHeap=0x1f0000) returned 1 [0238.977] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a70 | out: hHeap=0x1f0000) returned 1 [0238.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2852a8 | out: hHeap=0x1f0000) returned 1 [0238.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2858d8 | out: hHeap=0x1f0000) returned 1 [0238.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0238.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d10 | out: hHeap=0x1f0000) returned 1 [0238.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0318 | out: hHeap=0x1f0000) returned 1 [0238.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f9b0 | out: hHeap=0x1f0000) returned 1 [0238.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8690 | out: hHeap=0x1f0000) returned 1 [0238.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae540 | out: hHeap=0x1f0000) returned 1 [0238.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0238.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0238.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x264f88 | out: hHeap=0x1f0000) returned 1 [0238.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2afc38 | out: hHeap=0x1f0000) returned 1 [0238.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c20 | out: hHeap=0x1f0000) returned 1 [0238.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238850 | out: hHeap=0x1f0000) returned 1 [0238.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f920 | out: hHeap=0x1f0000) returned 1 [0238.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260838 | out: hHeap=0x1f0000) returned 1 [0238.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238970 | out: hHeap=0x1f0000) returned 1 [0238.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f9c8 | out: hHeap=0x1f0000) returned 1 [0238.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0238.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388e0 | out: hHeap=0x1f0000) returned 1 [0238.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x284f90 | out: hHeap=0x1f0000) returned 1 [0238.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0238.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b06c0 | out: hHeap=0x1f0000) returned 1 [0238.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2288c0 | out: hHeap=0x1f0000) returned 1 [0238.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0238.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0238.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228518 | out: hHeap=0x1f0000) returned 1 [0238.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238840 | out: hHeap=0x1f0000) returned 1 [0238.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238830 | out: hHeap=0x1f0000) returned 1 [0238.982] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x287fa0 | out: hHeap=0x1f0000) returned 1 [0238.982] CloseHandle (hObject=0x1bc) returned 1 [0238.982] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238880 | out: hHeap=0x1f0000) returned 1 [0238.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238950 | out: hHeap=0x1f0000) returned 1 [0238.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223ca0 | out: hHeap=0x1f0000) returned 1 [0238.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24b1d8 | out: hHeap=0x1f0000) returned 1 [0238.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f998 | out: hHeap=0x1f0000) returned 1 [0238.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bb0 | out: hHeap=0x1f0000) returned 1 [0238.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28bfc0 | out: hHeap=0x1f0000) returned 1 [0238.984] CloseHandle (hObject=0x224) returned 1 [0238.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388c0 | out: hHeap=0x1f0000) returned 1 [0238.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388b0 | out: hHeap=0x1f0000) returned 1 [0238.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad638 | out: hHeap=0x1f0000) returned 1 [0238.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204db0 | out: hHeap=0x1f0000) returned 1 [0238.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20c2c0 | out: hHeap=0x1f0000) returned 1 [0238.986] CloseHandle (hObject=0x220) returned 1 [0238.987] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388a0 | out: hHeap=0x1f0000) returned 1 [0238.987] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238920 | out: hHeap=0x1f0000) returned 1 [0238.987] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad1e8 | out: hHeap=0x1f0000) returned 1 [0238.987] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238860 | out: hHeap=0x1f0000) returned 1 [0238.987] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238940 | out: hHeap=0x1f0000) returned 1 [0238.987] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238930 | out: hHeap=0x1f0000) returned 1 [0238.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388d0 | out: hHeap=0x1f0000) returned 1 [0238.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21bf68 | out: hHeap=0x1f0000) returned 1 [0238.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x269ba8 | out: hHeap=0x1f0000) returned 1 [0238.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae428 | out: hHeap=0x1f0000) returned 1 [0238.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2067d8 | out: hHeap=0x1f0000) returned 1 [0238.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f968 | out: hHeap=0x1f0000) returned 1 [0238.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f938 | out: hHeap=0x1f0000) returned 1 [0238.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232fb8 | out: hHeap=0x1f0000) returned 1 [0238.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x266290 | out: hHeap=0x1f0000) returned 1 [0238.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae1f8 | out: hHeap=0x1f0000) returned 1 [0238.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c90 | out: hHeap=0x1f0000) returned 1 [0238.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0238.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262320 | out: hHeap=0x1f0000) returned 1 [0238.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228cb0 | out: hHeap=0x1f0000) returned 1 [0238.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260900 | out: hHeap=0x1f0000) returned 1 [0238.989] DeleteFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansdemibold.ttf")) returned 1 [0238.991] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xaa77c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaSansRegular.ttf", cAlternateFileName="LU761B~1.TTF")) returned 1 [0238.991] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239160 [0238.992] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b03e8 [0238.992] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0238.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b03e8 | out: hHeap=0x1f0000) returned 1 [0238.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0238.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239160 | out: hHeap=0x1f0000) returned 1 [0238.993] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansregular.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0238.993] GetFileType (hFile=0x220) returned 0x1 [0238.993] CloseHandle (hObject=0x220) returned 1 [0238.994] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0238.994] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansregular.ttf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xd7e79c54, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x1)) returned 1 [0238.994] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0238.994] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0238.994] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansregular.ttf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xd7e79c54, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x1)) returned 1 [0238.994] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0238.994] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0238.994] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0238.994] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39254, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaTypewriterBold.ttf", cAlternateFileName="LUE73B~1.TTF")) returned 1 [0238.994] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228710 [0238.994] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0248 [0238.994] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0238.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0248 | out: hHeap=0x1f0000) returned 1 [0238.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0238.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228710 | out: hHeap=0x1f0000) returned 1 [0238.995] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterbold.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0238.995] GetFileType (hFile=0x220) returned 0x1 [0238.995] CloseHandle (hObject=0x220) returned 1 [0238.996] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0238.996] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterbold.ttf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39254)) returned 1 [0238.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0238.996] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0238.996] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterbold.ttf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39254)) returned 1 [0238.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0238.996] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0238.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0238.996] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3b40c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaTypewriterRegular.ttf", cAlternateFileName="LUDBAB~1.TTF")) returned 1 [0238.996] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228ab8 [0238.997] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b03e8 [0238.997] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a4d0 [0238.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b03e8 | out: hHeap=0x1f0000) returned 1 [0238.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0238.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228ab8 | out: hHeap=0x1f0000) returned 1 [0238.997] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterregular.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0238.997] GetFileType (hFile=0x220) returned 0x1 [0238.998] CloseHandle (hObject=0x220) returned 1 [0238.998] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a2d8 [0238.998] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterregular.ttf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3b40c)) returned 1 [0238.998] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a2d8 | out: hHeap=0x1f0000) returned 1 [0238.998] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a380 [0238.998] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterregular.ttf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3b40c)) returned 1 [0238.998] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a380 | out: hHeap=0x1f0000) returned 1 [0238.998] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a230 [0238.998] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a230 | out: hHeap=0x1f0000) returned 1 [0238.999] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3b40c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaTypewriterRegular.ttf", cAlternateFileName="LUDBAB~1.TTF")) returned 0 [0238.999] FindClose (in: hFindFile=0x24e980 | out: hFindFile=0x24e980) returned 1 [0238.999] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a4d0 | out: hHeap=0x1f0000) returned 1 [0238.999] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263640 | out: hHeap=0x1f0000) returned 1 [0238.999] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0238.999] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2285f0 | out: hHeap=0x1f0000) returned 1 [0238.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228710 [0239.000] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0239.000] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x263178 [0239.000] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0239.000] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\*", lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa12313ee, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e900 [0239.000] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0930 [0239.000] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2218d0 [0239.000] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0930 | out: hHeap=0x1f0000) returned 1 [0239.000] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0239.001] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0239.001] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa12313ee, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0239.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0380 [0239.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221838 [0239.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0380 | out: hHeap=0x1f0000) returned 1 [0239.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0239.001] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0239.001] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0239.001] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa129361a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cursors", cAlternateFileName="")) returned 1 [0239.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0248 [0239.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220e20 [0239.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0248 | out: hHeap=0x1f0000) returned 1 [0239.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0239.001] lstrcmpW (lpString1="cursors", lpString2=".") returned 1 [0239.001] lstrcmpW (lpString1="cursors", lpString2="..") returned 1 [0239.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204f50 [0239.002] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0239.002] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa129361a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cursors", cAlternateFileName="")) returned 0 [0239.002] FindClose (in: hFindFile=0x24e900 | out: hFindFile=0x24e900) returned 1 [0239.002] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228cb0 [0239.002] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0239.002] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262320 [0239.002] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213570 [0239.002] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\*", lpFindFileData=0x1a1dc30 | out: lpFindFileData=0x1a1dc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa129361a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x22aacc, cFileName=".", cAlternateFileName="")) returned 0x24e5c0 [0239.003] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0239.003] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218b88 [0239.003] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0239.003] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213570 | out: hHeap=0x1f0000) returned 1 [0239.003] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0239.003] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1a1dc30 | out: lpFindFileData=0x1a1dc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa129361a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x22aacc, cFileName="..", cAlternateFileName="")) returned 1 [0239.003] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0239.003] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218978 [0239.003] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0239.003] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218b88 | out: hHeap=0x1f0000) returned 1 [0239.003] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0239.003] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0239.003] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1a1dc30 | out: lpFindFileData=0x1a1dc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x500, dwReserved0=0x20002, dwReserved1=0x22aacc, cFileName="cursors.properties", cAlternateFileName="CURSOR~1.PRO")) returned 1 [0239.003] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238d70 [0239.003] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0239.004] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x2188c8 [0239.004] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0239.004] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218978 | out: hHeap=0x1f0000) returned 1 [0239.004] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238d70 | out: hHeap=0x1f0000) returned 1 [0239.004] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d9f0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0239.004] GetFileType (hFile=0x220) returned 0x1 [0239.005] CloseHandle (hObject=0x220) returned 1 [0239.005] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a380 [0239.005] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties"), fInfoLevelId=0x0, lpFileInformation=0x1a1da84 | out: lpFileInformation=0x1a1da84*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x500)) returned 1 [0239.005] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a380 | out: hHeap=0x1f0000) returned 1 [0239.006] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a620 [0239.007] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties"), fInfoLevelId=0x0, lpFileInformation=0x1a1da8c | out: lpFileInformation=0x1a1da8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x500)) returned 1 [0239.007] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a620 | out: hHeap=0x1f0000) returned 1 [0239.007] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a770 [0239.007] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0239.008] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a770 | out: hHeap=0x1f0000) returned 1 [0239.008] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0239.008] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1a1dc30 | out: lpFindFileData=0x1a1dc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x20002, dwReserved1=0x22aacc, cFileName="invalid32x32.gif", cAlternateFileName="INVALI~1.GIF")) returned 1 [0239.008] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238e18 [0239.008] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe00 [0239.008] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218558 [0239.008] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe00 | out: hHeap=0x1f0000) returned 1 [0239.008] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2188c8 | out: hHeap=0x1f0000) returned 1 [0239.008] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238e18 | out: hHeap=0x1f0000) returned 1 [0239.009] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d9f0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0239.009] GetFileType (hFile=0x220) returned 0x1 [0239.009] CloseHandle (hObject=0x220) returned 1 [0239.009] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0239.010] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1da84 | out: lpFileInformation=0x1a1da84*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99)) returned 1 [0239.010] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0239.010] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0239.010] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1da8c | out: lpFileInformation=0x1a1da8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99)) returned 1 [0239.010] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0239.010] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0239.010] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0239.010] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1a1dc30 | out: lpFindFileData=0x1a1dc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xa5, dwReserved0=0x20002, dwReserved1=0x22aacc, cFileName="win32_CopyDrop32x32.gif", cAlternateFileName="WIN32_~1.GIF")) returned 1 [0239.010] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239010 [0239.010] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd88 [0239.010] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218d98 [0239.010] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd88 | out: hHeap=0x1f0000) returned 1 [0239.011] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218558 | out: hHeap=0x1f0000) returned 1 [0239.011] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239010 | out: hHeap=0x1f0000) returned 1 [0239.011] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copydrop32x32.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d9f0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0239.011] GetFileType (hFile=0x220) returned 0x1 [0239.011] CloseHandle (hObject=0x220) returned 1 [0239.012] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a770 [0239.012] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copydrop32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1da84 | out: lpFileInformation=0x1a1da84*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xa5)) returned 1 [0239.012] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a770 | out: hHeap=0x1f0000) returned 1 [0239.012] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219c48 [0239.012] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copydrop32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1da8c | out: lpFileInformation=0x1a1da8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xa5)) returned 1 [0239.012] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219c48 | out: hHeap=0x1f0000) returned 1 [0239.012] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219f90 [0239.012] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219f90 | out: hHeap=0x1f0000) returned 1 [0239.012] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1a1dc30 | out: lpFindFileData=0x1a1dc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x20002, dwReserved1=0x22aacc, cFileName="win32_CopyNoDrop32x32.gif", cAlternateFileName="WIN32_~2.GIF")) returned 1 [0239.012] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228518 [0239.013] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0239.013] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad4c8 [0239.013] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0239.013] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218d98 | out: hHeap=0x1f0000) returned 1 [0239.013] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228518 | out: hHeap=0x1f0000) returned 1 [0239.013] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copynodrop32x32.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d9f0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0239.013] GetFileType (hFile=0x220) returned 0x1 [0239.014] CloseHandle (hObject=0x220) returned 1 [0239.014] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2adcb0 [0239.014] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copynodrop32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1da84 | out: lpFileInformation=0x1a1da84*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99)) returned 1 [0239.014] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2adcb0 | out: hHeap=0x1f0000) returned 1 [0239.014] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad580 [0239.014] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copynodrop32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1da8c | out: lpFileInformation=0x1a1da8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99)) returned 1 [0239.014] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad580 | out: hHeap=0x1f0000) returned 1 [0239.015] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2aded8 [0239.015] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aded8 | out: hHeap=0x1f0000) returned 1 [0239.015] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1a1dc30 | out: lpFindFileData=0x1a1dc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xa8, dwReserved0=0x20002, dwReserved1=0x22aacc, cFileName="win32_LinkDrop32x32.gif", cAlternateFileName="WIN32_~3.GIF")) returned 1 [0239.015] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c20 [0239.015] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2203a0 [0239.015] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218b88 [0239.344] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2203a0 | out: hHeap=0x1f0000) returned 1 [0239.344] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad4c8 | out: hHeap=0x1f0000) returned 1 [0239.345] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c20 | out: hHeap=0x1f0000) returned 1 [0239.345] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linkdrop32x32.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d9f0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0239.346] GetFileType (hFile=0x1b0) returned 0x1 [0239.346] CloseHandle (hObject=0x1b0) returned 1 [0239.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219cf0 [0239.347] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linkdrop32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1da84 | out: lpFileInformation=0x1a1da84*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xa8)) returned 1 [0239.347] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219cf0 | out: hHeap=0x1f0000) returned 1 [0239.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219cf0 [0239.347] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linkdrop32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1da8c | out: lpFileInformation=0x1a1da8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xa8)) returned 1 [0239.347] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219cf0 | out: hHeap=0x1f0000) returned 1 [0239.348] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219c48 [0239.348] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219c48 | out: hHeap=0x1f0000) returned 1 [0239.348] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1a1dc30 | out: lpFindFileData=0x1a1dc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x20002, dwReserved1=0x22aacc, cFileName="win32_LinkNoDrop32x32.gif", cAlternateFileName="WIN32_~4.GIF")) returned 1 [0239.348] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228878 [0239.348] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0239.348] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad7a8 [0239.348] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0239.348] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218b88 | out: hHeap=0x1f0000) returned 1 [0239.349] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228878 | out: hHeap=0x1f0000) returned 1 [0239.349] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linknodrop32x32.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d9f0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0239.350] GetFileType (hFile=0x1b0) returned 0x1 [0239.350] CloseHandle (hObject=0x1b0) returned 1 [0239.351] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad860 [0239.351] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linknodrop32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1da84 | out: lpFileInformation=0x1a1da84*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99)) returned 1 [0239.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad860 | out: hHeap=0x1f0000) returned 1 [0239.351] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ade20 [0239.351] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linknodrop32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1da8c | out: lpFileInformation=0x1a1da8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99)) returned 1 [0239.352] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ade20 | out: hHeap=0x1f0000) returned 1 [0239.352] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad130 [0239.352] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad130 | out: hHeap=0x1f0000) returned 1 [0239.352] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1a1dc30 | out: lpFindFileData=0x1a1dc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x93, dwReserved0=0x20002, dwReserved1=0x22aacc, cFileName="win32_MoveDrop32x32.gif", cAlternateFileName="WI06CF~1.GIF")) returned 1 [0239.352] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239198 [0239.352] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0239.352] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219058 [0239.352] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0239.353] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad7a8 | out: hHeap=0x1f0000) returned 1 [0239.353] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239198 | out: hHeap=0x1f0000) returned 1 [0239.354] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movedrop32x32.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d9f0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0239.354] GetFileType (hFile=0x1b0) returned 0x1 [0239.354] CloseHandle (hObject=0x1b0) returned 1 [0239.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a188 [0239.355] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movedrop32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1da84 | out: lpFileInformation=0x1a1da84*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x93)) returned 1 [0239.355] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a188 | out: hHeap=0x1f0000) returned 1 [0239.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a578 [0239.355] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movedrop32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1da8c | out: lpFileInformation=0x1a1da8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x93)) returned 1 [0239.356] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a578 | out: hHeap=0x1f0000) returned 1 [0239.356] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a2d8 [0239.356] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a2d8 | out: hHeap=0x1f0000) returned 1 [0239.356] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1a1dc30 | out: lpFindFileData=0x1a1dc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x20002, dwReserved1=0x22aacc, cFileName="win32_MoveNoDrop32x32.gif", cAlternateFileName="WIE2D6~1.GIF")) returned 1 [0239.356] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228440 [0239.356] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220490 [0239.356] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2acfc0 [0239.356] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220490 | out: hHeap=0x1f0000) returned 1 [0239.356] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219058 | out: hHeap=0x1f0000) returned 1 [0239.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228440 | out: hHeap=0x1f0000) returned 1 [0239.357] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movenodrop32x32.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d9f0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0239.357] GetFileType (hFile=0x1b0) returned 0x1 [0239.358] CloseHandle (hObject=0x1b0) returned 1 [0239.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ade20 [0239.359] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movenodrop32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1da84 | out: lpFileInformation=0x1a1da84*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99)) returned 1 [0239.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ade20 | out: hHeap=0x1f0000) returned 1 [0239.359] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2aded8 [0239.359] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movenodrop32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1da8c | out: lpFileInformation=0x1a1da8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99)) returned 1 [0239.360] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aded8 | out: hHeap=0x1f0000) returned 1 [0239.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2adcb0 [0239.360] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2adcb0 | out: hHeap=0x1f0000) returned 1 [0239.360] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1a1dc30 | out: lpFindFileData=0x1a1dc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x20002, dwReserved1=0x22aacc, cFileName="win32_MoveNoDrop32x32.gif", cAlternateFileName="WIE2D6~1.GIF")) returned 0 [0239.360] FindClose (in: hFindFile=0x24e5c0 | out: hFindFile=0x24e5c0) returned 1 [0239.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2acfc0 | out: hHeap=0x1f0000) returned 1 [0239.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262320 | out: hHeap=0x1f0000) returned 1 [0239.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0239.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228cb0 | out: hHeap=0x1f0000) returned 1 [0239.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0239.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0239.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f50 | out: hHeap=0x1f0000) returned 1 [0239.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263178 | out: hHeap=0x1f0000) returned 1 [0239.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0239.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228710 | out: hHeap=0x1f0000) returned 1 [0239.362] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228440 [0239.362] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0239.362] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262320 [0239.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0450 [0239.363] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\*", lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1295634, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24eac0 [0239.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0520 [0239.363] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0450 | out: hHeap=0x1f0000) returned 1 [0239.363] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0239.363] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1295634, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0239.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0658 [0239.363] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0520 | out: hHeap=0x1f0000) returned 1 [0239.364] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0239.364] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0239.364] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="default.jfc", cAlternateFileName="")) returned 1 [0239.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0239.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b07f8 [0239.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2212e0 [0239.364] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b07f8 | out: hHeap=0x1f0000) returned 1 [0239.364] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0658 | out: hHeap=0x1f0000) returned 1 [0239.364] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0239.365] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\default.jfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\default.jfc"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0239.365] GetFileType (hFile=0x1b0) returned 0x1 [0239.366] CloseHandle (hObject=0x1b0) returned 1 [0239.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0239.366] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\default.jfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\default.jfc"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e8d)) returned 1 [0239.366] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0239.367] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fab8 [0239.367] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\default.jfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\default.jfc"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e8d)) returned 1 [0239.367] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fab8 | out: hHeap=0x1f0000) returned 1 [0239.367] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0239.367] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0239.367] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e61, dwReserved0=0x0, dwReserved1=0x0, cFileName="profile.jfc", cAlternateFileName="")) returned 1 [0239.367] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0239.367] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2affd8 [0239.367] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220fe8 [0239.368] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2affd8 | out: hHeap=0x1f0000) returned 1 [0239.368] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0239.368] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0239.368] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\profile.jfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\profile.jfc"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0239.368] GetFileType (hFile=0x1b0) returned 0x1 [0239.369] CloseHandle (hObject=0x1b0) returned 1 [0239.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0239.369] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\profile.jfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\profile.jfc"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e61)) returned 1 [0239.369] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0239.370] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe00 [0239.370] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\profile.jfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\profile.jfc"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e61)) returned 1 [0239.370] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe00 | out: hHeap=0x1f0000) returned 1 [0239.370] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220328 [0239.370] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220328 | out: hHeap=0x1f0000) returned 1 [0239.370] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e61, dwReserved0=0x0, dwReserved1=0x0, cFileName="profile.jfc", cAlternateFileName="")) returned 0 [0239.370] FindClose (in: hFindFile=0x24eac0 | out: hFindFile=0x24eac0) returned 1 [0239.371] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0239.371] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262320 | out: hHeap=0x1f0000) returned 1 [0239.371] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0239.371] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228440 | out: hHeap=0x1f0000) returned 1 [0239.371] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228b48 [0239.371] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0239.371] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262320 [0239.372] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0239.372] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\*", lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1389711, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ec00 [0239.372] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2201c0 [0239.372] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0239.372] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0239.372] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1389711, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0239.372] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220238 [0239.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2201c0 | out: hHeap=0x1f0000) returned 1 [0239.373] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0239.373] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0239.373] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="jmxremote.access", cAlternateFileName="JMXREM~1.ACC")) returned 1 [0239.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2392b0 [0239.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fab8 [0239.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219058 [0239.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fab8 | out: hHeap=0x1f0000) returned 1 [0239.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220238 | out: hHeap=0x1f0000) returned 1 [0239.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2392b0 | out: hHeap=0x1f0000) returned 1 [0239.374] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.access" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.access"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0239.374] GetFileType (hFile=0x1b0) returned 0x1 [0239.375] CloseHandle (hObject=0x1b0) returned 1 [0239.375] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0239.375] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.access" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.access"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf9e)) returned 1 [0239.376] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0239.376] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0239.376] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.access" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.access"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf9e)) returned 1 [0239.376] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0239.376] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0239.376] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0239.376] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xb28, dwReserved0=0x0, dwReserved1=0x0, cFileName="jmxremote.password.template", cAlternateFileName="JMXREM~1.TEM")) returned 1 [0239.376] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228a28 [0239.376] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0239.376] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218978 [0239.376] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0239.377] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219058 | out: hHeap=0x1f0000) returned 1 [0239.377] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228a28 | out: hHeap=0x1f0000) returned 1 [0239.377] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0239.377] GetFileType (hFile=0x1b0) returned 0x1 [0239.378] CloseHandle (hObject=0x1b0) returned 1 [0239.378] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219cf0 [0239.378] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xb28)) returned 1 [0239.379] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219cf0 | out: hHeap=0x1f0000) returned 1 [0239.379] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a188 [0239.379] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xb28)) returned 1 [0239.379] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a188 | out: hHeap=0x1f0000) returned 1 [0239.379] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a380 [0239.379] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0239.379] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a380 | out: hHeap=0x1f0000) returned 1 [0239.379] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0239.379] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3926, dwReserved0=0x0, dwReserved1=0x0, cFileName="management.properties", cAlternateFileName="MANAGE~1.PRO")) returned 1 [0239.379] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239010 [0239.379] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd88 [0239.380] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218a28 [0239.380] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd88 | out: hHeap=0x1f0000) returned 1 [0239.380] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218978 | out: hHeap=0x1f0000) returned 1 [0239.380] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239010 | out: hHeap=0x1f0000) returned 1 [0239.381] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\management.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\management.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0239.381] GetFileType (hFile=0x1b0) returned 0x1 [0239.381] CloseHandle (hObject=0x1b0) returned 1 [0239.382] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a578 [0239.382] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\management.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\management.properties"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3926)) returned 1 [0239.382] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a578 | out: hHeap=0x1f0000) returned 1 [0239.382] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21aa10 [0239.382] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\management.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\management.properties"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3926)) returned 1 [0239.382] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21aa10 | out: hHeap=0x1f0000) returned 1 [0239.383] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219f90 [0239.383] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0239.383] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219f90 | out: hHeap=0x1f0000) returned 1 [0239.383] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0239.383] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xd30, dwReserved0=0x0, dwReserved1=0x0, cFileName="snmp.acl.template", cAlternateFileName="SNMPAC~1.TEM")) returned 1 [0239.383] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238f68 [0239.383] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fa40 [0239.383] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218768 [0239.383] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fa40 | out: hHeap=0x1f0000) returned 1 [0239.384] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218a28 | out: hHeap=0x1f0000) returned 1 [0239.384] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238f68 | out: hHeap=0x1f0000) returned 1 [0239.384] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\snmp.acl.template" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\snmp.acl.template"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0239.385] GetFileType (hFile=0x1b0) returned 0x1 [0239.385] CloseHandle (hObject=0x1b0) returned 1 [0239.385] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0239.386] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\snmp.acl.template" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\snmp.acl.template"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xd30)) returned 1 [0239.386] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0239.386] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0239.386] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\snmp.acl.template" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\snmp.acl.template"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xd30)) returned 1 [0239.386] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0239.386] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0239.386] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260888 [0239.387] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0239.387] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0239.387] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xd30, dwReserved0=0x0, dwReserved1=0x0, cFileName="snmp.acl.template", cAlternateFileName="SNMPAC~1.TEM")) returned 0 [0239.387] FindClose (in: hFindFile=0x24ec00 | out: hFindFile=0x24ec00) returned 1 [0239.387] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218768 | out: hHeap=0x1f0000) returned 1 [0239.388] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262320 | out: hHeap=0x1f0000) returned 1 [0239.388] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0239.388] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228b48 | out: hHeap=0x1f0000) returned 1 [0239.388] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228680 [0239.388] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0239.388] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262320 [0239.388] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0239.388] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\*", lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1418338, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24eb80 [0239.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2201c0 [0239.389] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0239.389] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0239.389] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1418338, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0239.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220490 [0239.389] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2201c0 | out: hHeap=0x1f0000) returned 1 [0239.389] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0239.390] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0239.390] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xfd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="blacklist", cAlternateFileName="BLACKL~1")) returned 1 [0239.390] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260518 [0239.786] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0239.786] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ce8 [0239.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0239.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220490 | out: hHeap=0x1f0000) returned 1 [0239.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0240.106] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklist" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklist"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0240.106] GetFileType (hFile=0x174) returned 0x1 [0240.106] CloseHandle (hObject=0x174) returned 1 [0240.107] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0240.107] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklist" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklist"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xfd6)) returned 1 [0240.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0240.107] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2132c8 [0240.107] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklist" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklist"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xfd6)) returned 1 [0240.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2132c8 | out: hHeap=0x1f0000) returned 1 [0240.107] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e88 [0240.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e88 | out: hHeap=0x1f0000) returned 1 [0240.107] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="blacklisted.certs", cAlternateFileName="BLACKL~1.CER")) returned 1 [0240.107] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238ec0 [0240.107] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0240.108] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219318 [0240.108] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0240.108] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ce8 | out: hHeap=0x1f0000) returned 1 [0240.108] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ec0 | out: hHeap=0x1f0000) returned 1 [0240.108] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklisted.certs" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklisted.certs"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0240.108] GetFileType (hFile=0x174) returned 0x1 [0240.109] CloseHandle (hObject=0x174) returned 1 [0240.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0240.110] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklisted.certs" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklisted.certs"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e5)) returned 1 [0240.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0240.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0240.110] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklisted.certs" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklisted.certs"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e5)) returned 1 [0240.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0240.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0240.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0240.110] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1c0eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="cacerts", cAlternateFileName="")) returned 1 [0240.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220238 [0240.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219478 [0240.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220238 | out: hHeap=0x1f0000) returned 1 [0240.111] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219318 | out: hHeap=0x1f0000) returned 1 [0240.111] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\cacerts" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\cacerts"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0240.111] GetFileType (hFile=0x174) returned 0x1 [0240.111] CloseHandle (hObject=0x174) returned 1 [0240.112] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0240.112] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\cacerts" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\cacerts"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1c0eb)) returned 1 [0240.112] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0240.112] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0240.112] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\cacerts" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\cacerts"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1c0eb)) returned 1 [0240.112] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0240.112] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2132c8 [0240.112] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2132c8 | out: hHeap=0x1f0000) returned 1 [0240.112] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x9a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="java.policy", cAlternateFileName="JAVA~1.POL")) returned 1 [0240.113] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0240.113] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220238 [0240.113] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218b88 [0240.113] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220238 | out: hHeap=0x1f0000) returned 1 [0240.113] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219478 | out: hHeap=0x1f0000) returned 1 [0240.113] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0240.113] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.policy" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\java.policy"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0240.113] GetFileType (hFile=0x174) returned 0x1 [0240.114] CloseHandle (hObject=0x174) returned 1 [0240.114] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0240.114] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.policy" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\java.policy"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x9a2)) returned 1 [0240.114] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0240.114] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212a48 [0240.114] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.policy" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\java.policy"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x9a2)) returned 1 [0240.114] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212a48 | out: hHeap=0x1f0000) returned 1 [0240.114] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0240.115] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0240.115] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8eac, dwReserved0=0x0, dwReserved1=0x0, cFileName="java.security", cAlternateFileName="JAVA~1.SEC")) returned 1 [0240.115] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0240.115] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220490 [0240.115] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218818 [0240.115] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220490 | out: hHeap=0x1f0000) returned 1 [0240.115] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218b88 | out: hHeap=0x1f0000) returned 1 [0240.115] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0240.115] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.security" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\java.security"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0240.116] GetFileType (hFile=0x174) returned 0x1 [0240.116] CloseHandle (hObject=0x174) returned 1 [0240.116] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f10 [0240.116] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.security" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\java.security"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8eac)) returned 1 [0240.117] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f10 | out: hHeap=0x1f0000) returned 1 [0240.117] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e88 [0240.117] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.security" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\java.security"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8eac)) returned 1 [0240.117] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e88 | out: hHeap=0x1f0000) returned 1 [0240.117] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213790 [0240.117] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605b8 [0240.117] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213790 | out: hHeap=0x1f0000) returned 1 [0240.117] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0240.117] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x62, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaws.policy", cAlternateFileName="JAVAWS~1.POL")) returned 1 [0240.117] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0240.117] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2202b0 [0240.117] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218a28 [0240.118] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2202b0 | out: hHeap=0x1f0000) returned 1 [0240.118] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218818 | out: hHeap=0x1f0000) returned 1 [0240.118] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0240.118] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\javaws.policy" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\javaws.policy"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0240.118] GetFileType (hFile=0x174) returned 0x1 [0240.118] CloseHandle (hObject=0x174) returned 1 [0240.119] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0240.119] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\javaws.policy" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\javaws.policy"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x62)) returned 1 [0240.119] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0240.119] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0240.119] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\javaws.policy" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\javaws.policy"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x62)) returned 1 [0240.119] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0240.119] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212a48 [0240.120] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212a48 | out: hHeap=0x1f0000) returned 1 [0240.120] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xdc7, dwReserved0=0x0, dwReserved1=0x0, cFileName="local_policy.jar", cAlternateFileName="LOCAL_~1.JAR")) returned 1 [0240.120] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2392b0 [0240.120] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fc20 [0240.120] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219478 [0240.120] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fc20 | out: hHeap=0x1f0000) returned 1 [0240.120] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218a28 | out: hHeap=0x1f0000) returned 1 [0240.120] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2392b0 | out: hHeap=0x1f0000) returned 1 [0240.120] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\local_policy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\local_policy.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0240.121] GetFileType (hFile=0x174) returned 0x1 [0240.121] CloseHandle (hObject=0x174) returned 1 [0240.121] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0240.121] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\local_policy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\local_policy.jar"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xdc7)) returned 1 [0240.122] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0240.122] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0240.122] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\local_policy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\local_policy.jar"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xdc7)) returned 1 [0240.122] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0240.122] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0240.122] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0240.122] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="trusted.libraries", cAlternateFileName="TRUSTE~1.LIB")) returned 1 [0240.122] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238cc8 [0240.122] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220238 [0240.122] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218a28 [0240.122] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220238 | out: hHeap=0x1f0000) returned 1 [0240.122] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219478 | out: hHeap=0x1f0000) returned 1 [0240.122] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238cc8 | out: hHeap=0x1f0000) returned 1 [0240.123] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\trusted.libraries" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\trusted.libraries"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0240.123] GetFileType (hFile=0x174) returned 0x1 [0240.123] CloseHandle (hObject=0x174) returned 1 [0240.124] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0240.124] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\trusted.libraries" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\trusted.libraries"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0240.124] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0240.124] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0240.124] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\trusted.libraries" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\trusted.libraries"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0240.124] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0240.124] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0240.124] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0240.125] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0240.125] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0240.125] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xbd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="US_export_policy.jar", cAlternateFileName="US_EXP~1.JAR")) returned 1 [0240.125] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238fa0 [0240.125] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0240.125] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218b88 [0240.125] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0240.126] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218a28 | out: hHeap=0x1f0000) returned 1 [0240.126] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238fa0 | out: hHeap=0x1f0000) returned 1 [0240.126] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\US_export_policy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\us_export_policy.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0240.126] GetFileType (hFile=0x174) returned 0x1 [0240.127] CloseHandle (hObject=0x174) returned 1 [0240.127] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0240.127] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\US_export_policy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\us_export_policy.jar"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xbd2)) returned 1 [0240.127] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0240.127] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0240.127] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\US_export_policy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\us_export_policy.jar"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xbd2)) returned 1 [0240.127] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0240.127] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0240.128] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0240.128] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xbd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="US_export_policy.jar", cAlternateFileName="US_EXP~1.JAR")) returned 0 [0240.128] FindClose (in: hFindFile=0x24eb80 | out: hFindFile=0x24eb80) returned 1 [0240.128] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218b88 | out: hHeap=0x1f0000) returned 1 [0240.128] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262320 | out: hHeap=0x1f0000) returned 1 [0240.128] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0240.128] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228680 | out: hHeap=0x1f0000) returned 1 [0240.128] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0240.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235d80 | out: hHeap=0x1f0000) returned 1 [0240.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235be0 | out: hHeap=0x1f0000) returned 1 [0240.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2357d0 | out: hHeap=0x1f0000) returned 1 [0240.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2365a0 | out: hHeap=0x1f0000) returned 1 [0240.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236260 | out: hHeap=0x1f0000) returned 1 [0240.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2359d8 | out: hHeap=0x1f0000) returned 1 [0240.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0240.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236058 | out: hHeap=0x1f0000) returned 1 [0240.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fc98 | out: hHeap=0x1f0000) returned 1 [0240.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ff68 | out: hHeap=0x1f0000) returned 1 [0240.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0240.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d508 | out: hHeap=0x1f0000) returned 1 [0240.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0240.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228998 | out: hHeap=0x1f0000) returned 1 [0240.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2179d0 | out: hHeap=0x1f0000) returned 1 [0240.130] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8ed0 | out: hHeap=0x1f0000) returned 1 [0240.130] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8dc8 | out: hHeap=0x1f0000) returned 1 [0240.130] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0240.130] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262980 | out: hHeap=0x1f0000) returned 1 [0240.130] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0240.130] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2343e0 | out: hHeap=0x1f0000) returned 1 [0240.130] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8c10 | out: hHeap=0x1f0000) returned 1 [0240.130] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8e78 | out: hHeap=0x1f0000) returned 1 [0240.130] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e50 | out: hHeap=0x1f0000) returned 1 [0240.130] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261990 | out: hHeap=0x1f0000) returned 1 [0240.130] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0240.130] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233c90 | out: hHeap=0x1f0000) returned 1 [0240.130] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2286c8 [0240.130] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608b0 [0240.130] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262320 [0240.131] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8d18 [0240.131] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\*", lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf8a30151, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xf8a30151, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7f, dwReserved1=0x1e5, cFileName=".", cAlternateFileName="")) returned 0x24e5c0 [0240.131] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8c10 [0240.131] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0240.131] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0240.131] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf8a30151, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xf8a30151, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7f, dwReserved1=0x1e5, cFileName="..", cAlternateFileName="")) returned 1 [0240.131] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8d18 [0240.131] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8c10 | out: hHeap=0x1f0000) returned 1 [0240.131] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0240.131] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0240.131] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d6778e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9dfb986, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xd8685d8a, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x5ab2f7, dwReserved0=0x7f, dwReserved1=0x1e5, cFileName="AppXManifest.xml", cAlternateFileName="APPXMA~1.XML")) returned 1 [0240.131] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239160 [0240.132] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8c10 [0240.132] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217650 [0240.132] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8c10 | out: hHeap=0x1f0000) returned 1 [0240.132] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0240.132] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239160 | out: hHeap=0x1f0000) returned 1 [0240.132] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\AppXManifest.xml" (normalized: "c:\\program files\\microsoft office\\appxmanifest.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0240.132] GetFileType (hFile=0x174) returned 0x1 [0240.133] CloseHandle (hObject=0x174) returned 1 [0240.133] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe00 [0240.133] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\AppXManifest.xml" (normalized: "c:\\program files\\microsoft office\\appxmanifest.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb14 | out: lpFileInformation=0x1a1eb14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d6778e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9dfb986, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xd8685d8a, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x5ab2f7)) returned 1 [0240.133] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe00 | out: hHeap=0x1f0000) returned 1 [0240.133] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0240.133] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\AppXManifest.xml" (normalized: "c:\\program files\\microsoft office\\appxmanifest.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb1c | out: lpFileInformation=0x1a1eb1c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d6778e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9dfb986, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xd8685d8a, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x5ab2f7)) returned 1 [0240.134] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0240.134] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fa40 [0240.134] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fa40 | out: hHeap=0x1f0000) returned 1 [0240.134] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3888fc00, ftCreationTime.dwHighDateTime=0x1d5b2f9, ftLastAccessTime.dwLowDateTime=0xda731ce0, ftLastAccessTime.dwHighDateTime=0x1d58468, ftLastWriteTime.dwLowDateTime=0xda731ce0, ftLastWriteTime.dwHighDateTime=0x1d58468, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x7f, dwReserved1=0x1e5, cFileName="dresses representations super.exe", cAlternateFileName="DRESSE~1.EXE")) returned 1 [0240.134] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8dc8 [0240.134] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8d18 [0240.134] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0240.134] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0240.134] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217650 | out: hHeap=0x1f0000) returned 1 [0240.134] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8dc8 | out: hHeap=0x1f0000) returned 1 [0240.135] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\dresses representations super.exe" (normalized: "c:\\program files\\microsoft office\\dresses representations super.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0240.135] GetLastError () returned 0x20 [0240.135] GetLastError () returned 0x20 [0240.135] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83543a09, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x119, dwReserved0=0x7f, dwReserved1=0x1e5, cFileName="FileSystemMetadata.xml", cAlternateFileName="FILESY~1.XML")) returned 1 [0240.136] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238f30 [0240.136] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8c10 [0240.136] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0240.136] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8c10 | out: hHeap=0x1f0000) returned 1 [0240.136] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0240.136] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238f30 | out: hHeap=0x1f0000) returned 1 [0240.136] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\FileSystemMetadata.xml" (normalized: "c:\\program files\\microsoft office\\filesystemmetadata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ea80, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0240.137] GetFileType (hFile=0x174) returned 0x1 [0240.137] CloseHandle (hObject=0x174) returned 1 [0240.137] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e88 [0240.137] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\FileSystemMetadata.xml" (normalized: "c:\\program files\\microsoft office\\filesystemmetadata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb14 | out: lpFileInformation=0x1a1eb14*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83543a09, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x119)) returned 1 [0240.138] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e88 | out: hHeap=0x1f0000) returned 1 [0240.138] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0240.138] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\FileSystemMetadata.xml" (normalized: "c:\\program files\\microsoft office\\filesystemmetadata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1eb1c | out: lpFileInformation=0x1a1eb1c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83543a09, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x119)) returned 1 [0240.138] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0240.138] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212c68 [0240.138] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212c68 | out: hHeap=0x1f0000) returned 1 [0240.138] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9e7b530, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa146f18e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda9a8629, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7f, dwReserved1=0x1e5, cFileName="Office16", cAlternateFileName="")) returned 1 [0240.138] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0240.138] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8dc8 [0240.138] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x2179d0 [0240.139] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8dc8 | out: hHeap=0x1f0000) returned 1 [0240.139] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0240.139] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0240.139] lstrcmpW (lpString1="Office16", lpString2=".") returned 1 [0240.139] lstrcmpW (lpString1="Office16", lpString2="..") returned 1 [0240.139] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204db0 [0240.139] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b01e0 [0240.139] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd698ca4a, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xd698ca4a, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7f, dwReserved1=0x1e5, cFileName="PackageManifests", cAlternateFileName="PACKAG~1")) returned 1 [0240.139] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239010 [0240.139] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8dc8 [0240.140] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217c50 [0240.140] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8dc8 | out: hHeap=0x1f0000) returned 1 [0240.140] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2179d0 | out: hHeap=0x1f0000) returned 1 [0240.797] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239010 | out: hHeap=0x1f0000) returned 1 [0240.797] lstrcmpW (lpString1="PackageManifests", lpString2=".") returned 1 [0240.797] lstrcmpW (lpString1="PackageManifests", lpString2="..") returned 1 [0240.797] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238ef8 [0240.797] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2202b0 [0240.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204db0 | out: hHeap=0x1f0000) returned 1 [0240.798] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7f, dwReserved1=0x1e5, cFileName="root", cAlternateFileName="")) returned 1 [0240.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8060 [0240.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217c50 | out: hHeap=0x1f0000) returned 1 [0240.798] lstrcmpW (lpString1="root", lpString2=".") returned 1 [0240.798] lstrcmpW (lpString1="root", lpString2="..") returned 1 [0240.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x48) returned 0x225ba8 [0240.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8950 [0240.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ef8 | out: hHeap=0x1f0000) returned 1 [0240.799] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1a1ecc0 | out: lpFindFileData=0x1a1ecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7f, dwReserved1=0x1e5, cFileName="root", cAlternateFileName="")) returned 0 [0240.799] FindClose (in: hFindFile=0x24e5c0 | out: hFindFile=0x24e5c0) returned 1 [0240.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228638 [0240.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0240.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x261cc0 [0240.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b05f0 [0240.800] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office16\\*", lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9e7b530, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa146f18e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda9a8629, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ec40 [0240.800] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0658 [0240.800] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b05f0 | out: hHeap=0x1f0000) returned 1 [0240.800] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0240.800] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9e7b530, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa146f18e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda9a8629, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0240.800] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b08c8 [0240.801] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0658 | out: hHeap=0x1f0000) returned 1 [0240.801] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0240.801] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0240.801] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd502d600, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0xd9e7b530, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd502d600, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x2a9c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPP.HTM", cAlternateFileName="")) returned 1 [0240.801] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260518 [0240.801] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2affd8 [0240.801] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2218d0 [0240.801] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2affd8 | out: hHeap=0x1f0000) returned 1 [0240.802] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b08c8 | out: hHeap=0x1f0000) returned 1 [0240.802] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0240.802] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e65c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0240.803] GetFileType (hFile=0x200) returned 0x1 [0240.803] CloseHandle (hObject=0x200) returned 1 [0240.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0240.804] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.htm"), fInfoLevelId=0x0, lpFileInformation=0x1a1e6ec | out: lpFileInformation=0x1a1e6ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd502d600, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0xd9e7b530, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd502d600, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x2a9c0)) returned 1 [0240.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0240.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0240.804] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.htm"), fInfoLevelId=0x0, lpFileInformation=0x1a1e6fc | out: lpFileInformation=0x1a1e6fc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd502d600, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0xd9e7b530, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd502d600, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x2a9c0)) returned 1 [0240.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0240.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0240.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0240.805] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9ea17a8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x17103, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPP.VBS", cAlternateFileName="")) returned 1 [0240.805] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260518 [0240.805] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b05f0 [0240.805] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220c58 [0240.805] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b05f0 | out: hHeap=0x1f0000) returned 1 [0240.805] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0240.805] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0240.806] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.vbs"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e65c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0240.806] GetFileType (hFile=0x200) returned 0x1 [0240.807] CloseHandle (hObject=0x200) returned 1 [0240.807] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0240.807] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.vbs"), fInfoLevelId=0x0, lpFileInformation=0x1a1e6ec | out: lpFileInformation=0x1a1e6ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9ea17a8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x17103)) returned 1 [0240.807] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0240.808] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21ff68 [0240.808] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.vbs"), fInfoLevelId=0x0, lpFileInformation=0x1a1e6fc | out: lpFileInformation=0x1a1e6fc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9ea17a8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x17103)) returned 1 [0240.808] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ff68 | out: hHeap=0x1f0000) returned 1 [0240.808] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0240.808] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0240.808] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9f60362, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x6a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPREARM.EXE", cAlternateFileName="OSPPRE~1.EXE")) returned 1 [0240.808] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260540 [0240.809] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2affd8 [0240.809] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220fe8 [0240.809] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2affd8 | out: hHeap=0x1f0000) returned 1 [0240.809] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0240.809] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0240.810] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\Office16\\OSPPREARM.EXE" (normalized: "c:\\program files\\microsoft office\\office16\\ospprearm.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e65c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0240.810] GetFileType (hFile=0x200) returned 0x1 [0240.811] CloseHandle (hObject=0x200) returned 1 [0240.811] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2132c8 [0240.811] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office16\\OSPPREARM.EXE" (normalized: "c:\\program files\\microsoft office\\office16\\ospprearm.exe"), fInfoLevelId=0x0, lpFileInformation=0x1a1e6ec | out: lpFileInformation=0x1a1e6ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9f60362, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x6a40)) returned 1 [0240.811] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2132c8 | out: hHeap=0x1f0000) returned 1 [0240.811] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0240.812] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office16\\OSPPREARM.EXE" (normalized: "c:\\program files\\microsoft office\\office16\\ospprearm.exe"), fInfoLevelId=0x0, lpFileInformation=0x1a1e6fc | out: lpFileInformation=0x1a1e6fc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9f60362, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x6a40)) returned 1 [0240.812] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0240.812] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0240.813] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0240.813] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd502d600, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0xda9a8629, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd502d600, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x8df0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SLERROR.XML", cAlternateFileName="")) returned 1 [0240.813] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0240.813] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2affd8 [0240.813] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221968 [0240.813] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2affd8 | out: hHeap=0x1f0000) returned 1 [0240.813] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0240.814] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0240.814] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML" (normalized: "c:\\program files\\microsoft office\\office16\\slerror.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e65c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0240.814] GetFileType (hFile=0x200) returned 0x1 [0240.815] CloseHandle (hObject=0x200) returned 1 [0240.815] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0240.815] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML" (normalized: "c:\\program files\\microsoft office\\office16\\slerror.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1e6ec | out: lpFileInformation=0x1a1e6ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd502d600, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0xda9a8629, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd502d600, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x8df0)) returned 1 [0240.816] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0240.816] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0240.816] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML" (normalized: "c:\\program files\\microsoft office\\office16\\slerror.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1e6fc | out: lpFileInformation=0x1a1e6fc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd502d600, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0xda9a8629, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd502d600, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x8df0)) returned 1 [0240.816] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0240.816] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0240.816] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0240.816] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd502d600, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0xda9a8629, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd502d600, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x8df0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SLERROR.XML", cAlternateFileName="")) returned 0 [0240.816] FindClose (in: hFindFile=0x24ec40 | out: hFindFile=0x24ec40) returned 1 [0240.817] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0240.817] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261cc0 | out: hHeap=0x1f0000) returned 1 [0240.817] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0240.817] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228638 | out: hHeap=0x1f0000) returned 1 [0240.817] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228b90 [0240.817] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0240.817] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x261cc0 [0240.817] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220328 [0240.817] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\*", lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd698ca4a, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xd698ca4a, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e680 [0240.818] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0240.818] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220328 | out: hHeap=0x1f0000) returned 1 [0240.818] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0240.818] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd698ca4a, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xd698ca4a, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0240.818] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0240.819] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0240.819] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0240.819] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0240.819] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834f7581, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834f7581, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5e91c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml", cAlternateFileName="APA05A~1.XML")) returned 1 [0240.819] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21ff68 [0240.819] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fb30 [0240.819] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x229500 [0240.819] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fb30 | out: hHeap=0x1f0000) returned 1 [0240.819] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0240.819] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ff68 | out: hHeap=0x1f0000) returned 1 [0240.820] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e65c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0240.820] GetFileType (hFile=0x200) returned 0x1 [0240.821] CloseHandle (hObject=0x200) returned 1 [0240.821] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x20d978 [0240.821] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1e6ec | out: lpFileInformation=0x1a1e6ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834f7581, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834f7581, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5e91c)) returned 1 [0240.822] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20d978 | out: hHeap=0x1f0000) returned 1 [0240.822] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x20d978 [0240.822] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1e6fc | out: lpFileInformation=0x1a1e6fc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834f7581, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834f7581, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5e91c)) returned 1 [0240.822] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20d978 | out: hHeap=0x1f0000) returned 1 [0240.822] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x20d978 [0240.822] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20d978 | out: hHeap=0x1f0000) returned 1 [0240.822] GetLastError () returned 0x0 [0240.823] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0240.823] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2288c0 [0240.823] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x261ff0 [0240.823] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x20d978 [0240.823] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c58 [0240.823] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0240.824] CryptAcquireContextA (in: phProv=0x1a1df10, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1a1df10*=0x212d78) returned 1 [0240.825] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2608d8 | out: pbBuffer=0x2608d8) returned 1 [0240.825] CryptReleaseContext (hProv=0x212d78, dwFlags=0x0) returned 1 [0240.825] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0240.825] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x26c1b8 [0240.825] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2ae0e0 [0240.825] QueryPerformanceCounter (in: lpPerformanceCount=0x1a1dea4 | out: lpPerformanceCount=0x1a1dea4*=39819427219) returned 1 [0240.826] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1a1dee4 | out: lpSystemTimeAsFileTime=0x1a1dee4) [0240.826] QueryPerformanceCounter (in: lpPerformanceCount=0x1a1dea4 | out: lpPerformanceCount=0x1a1dea4*=39819472022) returned 1 [0240.826] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1a1dee4 | out: lpSystemTimeAsFileTime=0x1a1dee4) [0240.826] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238f30 [0240.826] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x26d4c0 [0240.826] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2af260 [0240.827] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x233228 [0240.827] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f968 [0240.827] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206688 [0240.827] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f920 [0240.827] GetLastError () returned 0x0 [0240.827] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x21b558 [0240.828] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x166) returned 0x21bf68 [0240.828] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21b558 | out: hHeap=0x1f0000) returned 1 [0240.828] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238840 [0240.829] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238880 [0240.829] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ddb0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0240.830] GetFileType (hFile=0x200) returned 0x1 [0240.831] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388b0 [0240.831] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388c0 [0240.832] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1dde0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1a4 [0240.832] GetFileType (hFile=0x1a4) returned 0x1 [0240.832] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d90 [0240.833] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c70 [0240.833] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad358 [0240.833] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238900 [0240.833] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238970 [0240.834] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1dd2c, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0240.834] GetFileType (hFile=0x174) returned 0x1 [0240.835] GetLastError () returned 0xb7 [0240.835] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe4) returned 0x2366d8 [0240.835] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f30 [0240.835] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cb0 [0240.835] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e30 [0240.835] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ade20 [0240.835] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238980 [0240.836] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a20 [0240.836] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1dd2c, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0240.837] GetFileType (hFile=0x1d8) returned 0x1 [0240.837] GetLastError () returned 0xb7 [0240.837] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c10 [0240.837] GetLastError () returned 0xb7 [0240.838] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f70 [0240.838] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cb0 [0240.838] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204df0 [0240.838] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb8) returned 0x237860 [0240.838] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b20 [0240.839] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b90 [0240.839] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1dd24, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0240.840] GetFileType (hFile=0x22c) returned 0x1 [0240.840] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x298020 [0240.841] ReadFile (in: hFile=0x22c, lpBuffer=0x298020, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1dc80, lpOverlapped=0x0 | out: lpBuffer=0x298020*, lpNumberOfBytesRead=0x1a1dc80*=0x1000, lpOverlapped=0x0) returned 1 [0241.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24a1b8 [0241.080] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x291ff0 [0241.080] GetLastError () returned 0x0 [0241.948] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f980 [0241.948] GetLastError () returned 0x0 [0241.948] CloseHandle (hObject=0x200) returned 1 [0241.949] CloseHandle (hObject=0x1a4) returned 1 [0241.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a30 [0241.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238aa0 [0241.950] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1dde0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1a4 [0241.973] GetFileType (hFile=0x1a4) returned 0x1 [0241.973] GetLastError () returned 0xb7 [0241.974] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28cfc8 [0241.974] GetLastError () returned 0xb7 [0241.976] CloseHandle (hObject=0x1a4) returned 1 [0241.976] DeleteFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml")) returned 0 [0241.977] GetLastError () returned 0x20 [0241.977] GetLastError () returned 0x20 [0241.977] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2289e0 [0241.977] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260950 [0241.977] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260658 [0241.977] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x228908 [0241.977] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bf0 [0241.977] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f10 [0241.977] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x238a50 [0241.977] GetLastError () returned 0x20 [0241.977] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x2391d0 [0241.977] GetLastError () returned 0x20 [0241.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239278 [0241.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0ad0 [0241.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260860 [0241.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2857d0 [0241.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b00 [0241.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609a0 [0241.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f938 [0241.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ab0 [0241.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0241.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f9c8 [0241.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260568 [0241.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2858d8 [0241.979] GetLastError () returned 0x20 [0241.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238ac0 [0241.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238ad0 [0241.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ae0 [0241.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ad0 | out: hHeap=0x1f0000) returned 1 [0241.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a70 [0241.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ae0 | out: hHeap=0x1f0000) returned 1 [0241.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ac0 | out: hHeap=0x1f0000) returned 1 [0241.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ac0 [0241.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f908 [0241.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ac0 | out: hHeap=0x1f0000) returned 1 [0241.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f950 [0241.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f908 | out: hHeap=0x1f0000) returned 1 [0241.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a70 | out: hHeap=0x1f0000) returned 1 [0241.980] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f908 [0241.980] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f728 [0241.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f908 | out: hHeap=0x1f0000) returned 1 [0241.980] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f908 [0241.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f728 | out: hHeap=0x1f0000) returned 1 [0241.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f950 | out: hHeap=0x1f0000) returned 1 [0241.980] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f950 [0241.980] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204c30 [0241.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f950 | out: hHeap=0x1f0000) returned 1 [0241.980] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204b90 [0241.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c30 | out: hHeap=0x1f0000) returned 1 [0241.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f908 | out: hHeap=0x1f0000) returned 1 [0241.980] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cd0 [0241.980] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260590 [0241.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cd0 | out: hHeap=0x1f0000) returned 1 [0241.980] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204cb0 [0241.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0241.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204b90 | out: hHeap=0x1f0000) returned 1 [0241.981] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204ef0 [0241.981] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206658 [0241.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ef0 | out: hHeap=0x1f0000) returned 1 [0241.981] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260590 [0241.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206658 | out: hHeap=0x1f0000) returned 1 [0241.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cb0 | out: hHeap=0x1f0000) returned 1 [0241.981] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a00 [0241.981] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f908 [0241.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a00 | out: hHeap=0x1f0000) returned 1 [0241.981] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f950 [0241.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f908 | out: hHeap=0x1f0000) returned 1 [0241.981] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204d30 [0241.982] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f950 | out: hHeap=0x1f0000) returned 1 [0241.982] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x2067d8 [0241.982] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d30 | out: hHeap=0x1f0000) returned 1 [0241.982] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2067d8 | out: hHeap=0x1f0000) returned 1 [0241.982] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0241.982] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0241.982] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0241.982] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2857d0 | out: hHeap=0x1f0000) returned 1 [0241.982] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0241.982] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239198 [0241.982] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260770 [0241.982] CryptAcquireContextA (in: phProv=0x1a1df10, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1a1df10*=0x212f98) returned 1 [0241.983] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x260770 | out: pbBuffer=0x260770) returned 1 [0241.983] CryptReleaseContext (hProv=0x212f98, dwFlags=0x0) returned 1 [0241.984] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0241.984] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260950 [0241.984] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260860 [0241.984] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239160 [0241.984] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0241.984] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0241.984] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239160 | out: hHeap=0x1f0000) returned 1 [0241.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8dc8 [0241.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f908 [0241.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x2b0588 [0241.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260630 [0241.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2851a0 [0241.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cb0 [0241.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b02b0 [0241.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2606d0 [0241.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2852a8 [0241.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b10 [0241.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260770 [0241.986] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f950 [0241.986] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b30 [0241.986] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0241.986] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f818 [0241.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f818 | out: hHeap=0x1f0000) returned 1 [0241.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0241.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b30 | out: hHeap=0x1f0000) returned 1 [0241.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f950 | out: hHeap=0x1f0000) returned 1 [0241.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0241.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b10 | out: hHeap=0x1f0000) returned 1 [0241.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2852a8 | out: hHeap=0x1f0000) returned 1 [0241.987] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0241.987] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b02b0 | out: hHeap=0x1f0000) returned 1 [0241.987] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238da8 [0241.987] GetLastError () returned 0x0 [0241.987] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238da8 [0241.987] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0241.987] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0241.987] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0241.987] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0241.987] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0241.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0241.988] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x24e980 [0241.988] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2854b8 [0241.988] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0241.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0241.988] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0241.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0241.988] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285098 [0241.988] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0241.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0241.988] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fb50 [0241.988] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x269ba8 [0241.988] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2aee00 [0241.989] QueryPerformanceCounter (in: lpPerformanceCount=0x1a1da60 | out: lpPerformanceCount=0x1a1da60*=39935746019) returned 1 [0241.989] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1a1daa0 | out: lpSystemTimeAsFileTime=0x1a1daa0) [0241.989] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238b30 [0241.989] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260518 [0241.989] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204b90 [0241.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204b90 | out: hHeap=0x1f0000) returned 1 [0241.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0241.989] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0241.989] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c70 [0241.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c70 | out: hHeap=0x1f0000) returned 1 [0241.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0241.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b30 | out: hHeap=0x1f0000) returned 1 [0241.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0241.990] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x2392b0 [0241.990] GetLastError () returned 0x0 [0241.990] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0241.990] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0241.990] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0241.990] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2608d8 [0241.990] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2606d0 [0241.991] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0241.991] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0241.991] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260950 [0241.991] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0241.991] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x222ee8 [0241.991] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0241.991] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x25ffe8 [0241.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0241.991] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x220748 [0241.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25ffe8 | out: hHeap=0x1f0000) returned 1 [0241.991] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260770 [0241.992] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260518 [0241.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0241.992] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0241.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0241.992] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x220968 [0241.992] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x234b90 [0241.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b90 | out: hHeap=0x1f0000) returned 1 [0241.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220968 | out: hHeap=0x1f0000) returned 1 [0241.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220748 | out: hHeap=0x1f0000) returned 1 [0241.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f950 [0241.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2284d0 [0241.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260770 [0241.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260518 [0241.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260888 [0241.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260590 [0241.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0241.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0241.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x25ffe8 [0241.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260770 [0241.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260518 [0241.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0241.994] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0241.994] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0241.994] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206838 [0241.994] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x2aa960 [0241.994] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aa960 | out: hHeap=0x1f0000) returned 1 [0241.994] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206838 | out: hHeap=0x1f0000) returned 1 [0241.994] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0241.994] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0241.994] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0241.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25ffe8 | out: hHeap=0x1f0000) returned 1 [0241.995] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204bf0 [0241.995] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0241.995] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0241.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0241.995] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac800 [0241.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0241.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0241.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0241.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2284d0 | out: hHeap=0x1f0000) returned 1 [0241.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0241.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bf0 | out: hHeap=0x1f0000) returned 1 [0241.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f950 | out: hHeap=0x1f0000) returned 1 [0241.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0241.996] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac6d8 [0241.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac6d8 | out: hHeap=0x1f0000) returned 1 [0241.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ee8 | out: hHeap=0x1f0000) returned 1 [0241.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0241.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0241.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0241.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0241.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0241.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0241.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0241.998] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac360 [0241.998] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aca50 [0241.998] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac360 | out: hHeap=0x1f0000) returned 1 [0241.998] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aca50 | out: hHeap=0x1f0000) returned 1 [0241.998] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac800 | out: hHeap=0x1f0000) returned 1 [0241.998] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0241.998] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285098 | out: hHeap=0x1f0000) returned 1 [0241.998] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24e980 | out: hHeap=0x1f0000) returned 1 [0241.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x2aebd0 [0241.999] GetLastError () returned 0x0 [0241.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ba0 [0241.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b70 [0242.232] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de10, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0242.232] GetFileType (hFile=0x230) returned 0x1 [0242.233] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x289fb0 [0242.233] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1a1dd98 | out: lpNewFilePointer=0x0) returned 1 [0242.233] GetLastError () returned 0xb7 [0242.234] CloseHandle (hObject=0x230) returned 1 [0242.235] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b70 | out: hHeap=0x1f0000) returned 1 [0242.235] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ba0 | out: hHeap=0x1f0000) returned 1 [0242.235] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2854b8 | out: hHeap=0x1f0000) returned 1 [0242.235] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2851a0 | out: hHeap=0x1f0000) returned 1 [0242.235] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260630 | out: hHeap=0x1f0000) returned 1 [0242.235] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cb0 | out: hHeap=0x1f0000) returned 1 [0242.235] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0588 | out: hHeap=0x1f0000) returned 1 [0242.235] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f908 | out: hHeap=0x1f0000) returned 1 [0242.235] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8dc8 | out: hHeap=0x1f0000) returned 1 [0242.235] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aebd0 | out: hHeap=0x1f0000) returned 1 [0242.236] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0242.236] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0242.236] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x269ba8 | out: hHeap=0x1f0000) returned 1 [0242.236] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aee00 | out: hHeap=0x1f0000) returned 1 [0242.236] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239198 | out: hHeap=0x1f0000) returned 1 [0242.236] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a50 | out: hHeap=0x1f0000) returned 1 [0242.236] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f9c8 | out: hHeap=0x1f0000) returned 1 [0242.236] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0242.236] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ab0 | out: hHeap=0x1f0000) returned 1 [0242.236] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f938 | out: hHeap=0x1f0000) returned 1 [0242.236] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0242.236] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b00 | out: hHeap=0x1f0000) returned 1 [0242.236] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2858d8 | out: hHeap=0x1f0000) returned 1 [0242.236] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0242.236] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0ad0 | out: hHeap=0x1f0000) returned 1 [0242.237] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228908 | out: hHeap=0x1f0000) returned 1 [0242.237] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260658 | out: hHeap=0x1f0000) returned 1 [0242.237] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0242.237] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2289e0 | out: hHeap=0x1f0000) returned 1 [0242.237] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238aa0 | out: hHeap=0x1f0000) returned 1 [0242.237] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a30 | out: hHeap=0x1f0000) returned 1 [0242.237] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x298020 | out: hHeap=0x1f0000) returned 1 [0242.237] CloseHandle (hObject=0x22c) returned 1 [0242.237] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b90 | out: hHeap=0x1f0000) returned 1 [0242.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b20 | out: hHeap=0x1f0000) returned 1 [0242.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237860 | out: hHeap=0x1f0000) returned 1 [0242.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24a1b8 | out: hHeap=0x1f0000) returned 1 [0242.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f980 | out: hHeap=0x1f0000) returned 1 [0242.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f70 | out: hHeap=0x1f0000) returned 1 [0242.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x291ff0 | out: hHeap=0x1f0000) returned 1 [0242.238] CloseHandle (hObject=0x1d8) returned 1 [0242.239] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a20 | out: hHeap=0x1f0000) returned 1 [0242.239] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238980 | out: hHeap=0x1f0000) returned 1 [0242.239] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ade20 | out: hHeap=0x1f0000) returned 1 [0242.239] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f30 | out: hHeap=0x1f0000) returned 1 [0242.239] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0242.239] CloseHandle (hObject=0x174) returned 1 [0242.239] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238970 | out: hHeap=0x1f0000) returned 1 [0242.240] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238900 | out: hHeap=0x1f0000) returned 1 [0242.240] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad358 | out: hHeap=0x1f0000) returned 1 [0242.240] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388c0 | out: hHeap=0x1f0000) returned 1 [0242.240] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388b0 | out: hHeap=0x1f0000) returned 1 [0242.240] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238880 | out: hHeap=0x1f0000) returned 1 [0242.240] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238840 | out: hHeap=0x1f0000) returned 1 [0242.240] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21bf68 | out: hHeap=0x1f0000) returned 1 [0242.240] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x26d4c0 | out: hHeap=0x1f0000) returned 1 [0242.240] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2af260 | out: hHeap=0x1f0000) returned 1 [0242.240] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206688 | out: hHeap=0x1f0000) returned 1 [0242.240] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f920 | out: hHeap=0x1f0000) returned 1 [0242.240] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f968 | out: hHeap=0x1f0000) returned 1 [0242.240] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233228 | out: hHeap=0x1f0000) returned 1 [0242.241] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x26c1b8 | out: hHeap=0x1f0000) returned 1 [0242.241] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae0e0 | out: hHeap=0x1f0000) returned 1 [0242.241] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c58 | out: hHeap=0x1f0000) returned 1 [0242.241] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20d978 | out: hHeap=0x1f0000) returned 1 [0242.241] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261ff0 | out: hHeap=0x1f0000) returned 1 [0242.241] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2288c0 | out: hHeap=0x1f0000) returned 1 [0242.241] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0242.241] DeleteFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml")) returned 1 [0242.243] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8351d7a8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8351d7a8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e3474a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml", cAlternateFileName="APAD0B~1.XML")) returned 1 [0242.243] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0242.243] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220490 [0242.244] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x229418 [0242.244] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220490 | out: hHeap=0x1f0000) returned 1 [0242.244] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229500 | out: hHeap=0x1f0000) returned 1 [0242.244] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0242.244] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e65c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0242.244] GetFileType (hFile=0x174) returned 0x1 [0242.245] CloseHandle (hObject=0x174) returned 1 [0242.245] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2366d8 [0242.245] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1e6ec | out: lpFileInformation=0x1a1e6ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8351d7a8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8351d7a8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e3474a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5fd)) returned 1 [0242.245] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0242.245] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2366d8 [0242.245] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1e6fc | out: lpFileInformation=0x1a1e6fc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8351d7a8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8351d7a8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e3474a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5fd)) returned 1 [0242.246] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0242.246] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2366d8 [0242.246] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0242.246] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd61cd00b, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xd61cd00b, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xd698ca4a, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xc3976, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="APPXMA~1.ODV")) returned 1 [0242.246] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x21b650 [0242.246] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0242.246] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x160) returned 0x239be0 [0242.246] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0242.246] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0242.246] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21b650 | out: hHeap=0x1f0000) returned 1 [0242.247] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0000-1000-0000000ff1ce.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e65c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0242.247] GetFileType (hFile=0x174) returned 0x1 [0242.247] CloseHandle (hObject=0x174) returned 1 [0242.248] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x160) returned 0x20d978 [0242.248] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0000-1000-0000000ff1ce.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x1a1e6ec | out: lpFileInformation=0x1a1e6ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd61cd00b, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xd61cd00b, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xd698ca4a, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xc3976)) returned 1 [0242.248] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20d978 | out: hHeap=0x1f0000) returned 1 [0242.248] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x160) returned 0x20d978 [0242.248] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0000-1000-0000000ff1ce.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x1a1e6fc | out: lpFileInformation=0x1a1e6fc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd61cd00b, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xd61cd00b, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xd698ca4a, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xc3976)) returned 1 [0242.249] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20d978 | out: hHeap=0x1f0000) returned 1 [0242.249] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x160) returned 0x20d978 [0242.249] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20d978 | out: hHeap=0x1f0000) returned 1 [0242.249] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP51DE~1.XML")) returned 1 [0242.249] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220490 [0242.249] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd88 [0242.249] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2366d8 [0242.249] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd88 | out: hHeap=0x1f0000) returned 1 [0242.249] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239be0 | out: hHeap=0x1f0000) returned 1 [0242.249] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220490 | out: hHeap=0x1f0000) returned 1 [0242.251] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e65c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0242.252] GetFileType (hFile=0x174) returned 0x1 [0242.252] CloseHandle (hObject=0x174) returned 1 [0242.252] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x239be0 [0242.252] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1e6ec | out: lpFileInformation=0x1a1e6ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0242.253] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239be0 | out: hHeap=0x1f0000) returned 1 [0242.253] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x239be0 [0242.253] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1e6fc | out: lpFileInformation=0x1a1e6fc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0242.253] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239be0 | out: hHeap=0x1f0000) returned 1 [0242.253] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x239be0 [0242.253] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239be0 | out: hHeap=0x1f0000) returned 1 [0242.253] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83485006, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83485006, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x79381, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml", cAlternateFileName="APPXMA~4.XML")) returned 1 [0242.253] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0242.253] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2201c0 [0242.253] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x239be0 [0242.253] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2201c0 | out: hHeap=0x1f0000) returned 1 [0242.253] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0242.254] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0242.254] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e65c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0242.254] GetFileType (hFile=0x174) returned 0x1 [0242.254] CloseHandle (hObject=0x174) returned 1 [0242.255] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2366d8 [0242.255] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1e6ec | out: lpFileInformation=0x1a1e6ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83485006, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83485006, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x79381)) returned 1 [0242.255] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0242.255] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2366d8 [0242.255] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1e6fc | out: lpFileInformation=0x1a1e6fc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83485006, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83485006, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x79381)) returned 1 [0242.255] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0242.255] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2366d8 [0242.255] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0242.255] GetLastError () returned 0x0 [0242.256] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609a0 [0242.256] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2288c0 [0242.256] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262980 [0242.256] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2366d8 [0242.256] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c58 [0242.256] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0242.256] CryptAcquireContextA (in: phProv=0x1a1df10, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1a1df10*=0x213818) returned 1 [0242.257] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2606d0 | out: pbBuffer=0x2606d0) returned 1 [0242.257] CryptReleaseContext (hProv=0x213818, dwFlags=0x0) returned 1 [0242.258] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0242.258] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x26d4c0 [0242.258] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2ae310 [0242.258] QueryPerformanceCounter (in: lpPerformanceCount=0x1a1dea4 | out: lpPerformanceCount=0x1a1dea4*=39962671810) returned 1 [0242.258] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1a1dee4 | out: lpSystemTimeAsFileTime=0x1a1dee4) [0242.258] QueryPerformanceCounter (in: lpPerformanceCount=0x1a1dea4 | out: lpPerformanceCount=0x1a1dea4*=39962701689) returned 1 [0242.258] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1a1dee4 | out: lpSystemTimeAsFileTime=0x1a1dee4) [0242.258] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239080 [0242.259] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x26aeb0 [0242.259] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2af8f0 [0242.259] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x233638 [0242.259] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f938 [0242.259] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206658 [0242.259] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f920 [0242.259] GetLastError () returned 0x0 [0242.259] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x21b650 [0242.259] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x166) returned 0x20d978 [0242.259] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21b650 | out: hHeap=0x1f0000) returned 1 [0242.260] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238880 [0242.260] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238840 [0242.261] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0000-1000-0000000ff1ce.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ddb0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0242.261] GetFileType (hFile=0x174) returned 0x1 [0242.262] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238900 [0242.262] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388b0 [0242.263] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1dde0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0242.263] GetFileType (hFile=0x1d8) returned 0x1 [0242.264] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c10 [0242.264] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ef0 [0242.264] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2acfc0 [0242.264] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388c0 [0242.265] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388f0 [0242.612] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0000-1000-0000000ff1ce.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1dd2c, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0242.612] GetFileType (hFile=0x22c) returned 0x1 [0242.612] GetLastError () returned 0xb7 [0242.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe4) returned 0x21b708 [0242.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c70 [0242.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cb0 [0242.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cd0 [0242.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad130 [0242.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a20 [0242.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ab0 [0242.614] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0000-1000-0000000ff1ce.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1dd2c, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0242.614] GetFileType (hFile=0x230) returned 0x1 [0242.614] GetLastError () returned 0xb7 [0242.615] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e30 [0242.615] GetLastError () returned 0xb7 [0242.615] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f50 [0242.615] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e70 [0242.615] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c10 [0242.615] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb8) returned 0x236ea0 [0242.615] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a30 [0242.615] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b60 [0242.616] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1dd24, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0242.616] GetFileType (hFile=0x210) returned 0x1 [0242.617] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x298020 [0242.617] ReadFile (in: hFile=0x210, lpBuffer=0x298020, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1dc80, lpOverlapped=0x0 | out: lpBuffer=0x298020*, lpNumberOfBytesRead=0x1a1dc80*=0x1000, lpOverlapped=0x0) returned 1 [0242.642] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24ca08 [0242.643] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x299028 [0242.644] GetLastError () returned 0x0 [0242.992] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f9c8 [0242.992] GetLastError () returned 0x0 [0242.992] CloseHandle (hObject=0x174) returned 1 [0242.993] CloseHandle (hObject=0x1d8) returned 1 [0242.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c580 [0243.203] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c640 [0243.204] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1dde0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0243.214] GetFileType (hFile=0x1d8) returned 0x1 [0243.215] GetLastError () returned 0xb7 [0243.215] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28bfc0 [0243.215] GetLastError () returned 0xb7 [0243.217] CloseHandle (hObject=0x1d8) returned 1 [0243.219] DeleteFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0000-1000-0000000ff1ce.xml")) returned 0 [0243.219] GetLastError () returned 0x20 [0243.219] GetLastError () returned 0x20 [0243.219] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2289e0 [0243.219] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260810 [0243.219] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260950 [0243.219] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x228710 [0243.219] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d30 [0243.219] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bf0 [0243.220] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x21c700 [0243.220] GetLastError () returned 0x20 [0243.220] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238d70 [0243.220] GetLastError () returned 0x20 [0243.220] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x2391d0 [0243.220] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0318 [0243.220] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2608d8 [0243.220] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2859e0 [0243.220] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c660 [0243.220] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0243.220] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f908 [0243.221] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c650 [0243.221] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260888 [0243.221] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f950 [0243.221] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260568 [0243.221] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2854b8 [0243.221] GetLastError () returned 0x20 [0243.221] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x21c610 [0243.221] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x21c690 [0243.221] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c680 [0243.221] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c690 | out: hHeap=0x1f0000) returned 1 [0243.221] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c600 [0243.221] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c680 | out: hHeap=0x1f0000) returned 1 [0243.222] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c610 | out: hHeap=0x1f0000) returned 1 [0243.222] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c680 [0243.222] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f980 [0243.222] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c680 | out: hHeap=0x1f0000) returned 1 [0243.222] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f9b0 [0243.222] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f980 | out: hHeap=0x1f0000) returned 1 [0243.222] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c600 | out: hHeap=0x1f0000) returned 1 [0243.222] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f980 [0243.222] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f830 [0243.222] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f980 | out: hHeap=0x1f0000) returned 1 [0243.222] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f980 [0243.222] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f830 | out: hHeap=0x1f0000) returned 1 [0243.222] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f9b0 | out: hHeap=0x1f0000) returned 1 [0243.222] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f9b0 [0243.222] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204ef0 [0243.222] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f9b0 | out: hHeap=0x1f0000) returned 1 [0243.223] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c30 [0243.223] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ef0 | out: hHeap=0x1f0000) returned 1 [0243.223] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f980 | out: hHeap=0x1f0000) returned 1 [0243.223] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f70 [0243.223] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260658 [0243.223] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f70 | out: hHeap=0x1f0000) returned 1 [0243.223] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204c50 [0243.223] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260658 | out: hHeap=0x1f0000) returned 1 [0243.223] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c30 | out: hHeap=0x1f0000) returned 1 [0243.223] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204c90 [0243.223] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206628 [0243.223] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c90 | out: hHeap=0x1f0000) returned 1 [0243.224] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260518 [0243.224] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206628 | out: hHeap=0x1f0000) returned 1 [0243.224] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c50 | out: hHeap=0x1f0000) returned 1 [0243.224] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c5a0 [0243.224] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f980 [0243.224] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5a0 | out: hHeap=0x1f0000) returned 1 [0243.224] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f9b0 [0243.224] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f980 | out: hHeap=0x1f0000) returned 1 [0243.224] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204cd0 [0243.224] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f9b0 | out: hHeap=0x1f0000) returned 1 [0243.224] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x2067d8 [0243.224] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cd0 | out: hHeap=0x1f0000) returned 1 [0243.224] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2067d8 | out: hHeap=0x1f0000) returned 1 [0243.224] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0243.225] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0243.225] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0243.225] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2859e0 | out: hHeap=0x1f0000) returned 1 [0243.225] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0243.225] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238da8 [0243.225] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0243.225] CryptAcquireContextA (in: phProv=0x1a1df10, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1a1df10*=0x213708) returned 1 [0243.226] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2608d8 | out: pbBuffer=0x2608d8) returned 1 [0243.226] CryptReleaseContext (hProv=0x213708, dwFlags=0x0) returned 1 [0243.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0243.227] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260518 [0243.227] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260590 [0243.227] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238e18 [0243.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0243.227] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0243.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238e18 | out: hHeap=0x1f0000) returned 1 [0243.227] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8e78 [0243.227] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f980 [0243.227] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x2b0380 [0243.227] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260518 [0243.227] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2853b0 [0243.228] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bf0 [0243.228] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b03e8 [0243.228] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2605b8 [0243.228] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2855c0 [0243.228] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c5c0 [0243.228] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0243.228] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f9b0 [0243.228] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c670 [0243.228] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0243.228] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f878 [0243.228] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f878 | out: hHeap=0x1f0000) returned 1 [0243.228] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0243.229] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c670 | out: hHeap=0x1f0000) returned 1 [0243.229] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f9b0 | out: hHeap=0x1f0000) returned 1 [0243.229] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0243.229] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5c0 | out: hHeap=0x1f0000) returned 1 [0243.229] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2855c0 | out: hHeap=0x1f0000) returned 1 [0243.229] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0243.229] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b03e8 | out: hHeap=0x1f0000) returned 1 [0243.229] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x2390b8 [0243.229] GetLastError () returned 0x0 [0243.229] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238e18 [0243.230] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0243.230] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0243.230] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0243.230] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0243.230] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0243.230] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0243.230] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x24e6c0 [0243.230] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2856c8 [0243.230] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0243.230] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0243.230] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0243.230] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0243.231] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2857d0 [0243.231] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0243.231] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0243.231] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fe70 [0243.231] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x26c1b8 [0243.231] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2aee00 [0243.231] QueryPerformanceCounter (in: lpPerformanceCount=0x1a1da60 | out: lpPerformanceCount=0x1a1da60*=40060003241) returned 1 [0243.231] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1a1daa0 | out: lpSystemTimeAsFileTime=0x1a1daa0) [0243.231] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x21c620 [0243.232] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0243.232] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bd0 [0243.232] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bd0 | out: hHeap=0x1f0000) returned 1 [0243.232] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0243.232] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605b8 [0243.232] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f10 [0243.232] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f10 | out: hHeap=0x1f0000) returned 1 [0243.232] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0243.232] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c620 | out: hHeap=0x1f0000) returned 1 [0243.232] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0243.232] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238d70 [0243.232] GetLastError () returned 0x0 [0243.233] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0243.233] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0243.233] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0243.233] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260810 [0243.233] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2608d8 [0243.233] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0243.233] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0243.234] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2605b8 [0243.234] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0243.234] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x222ee8 [0243.234] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0243.234] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0243.234] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0243.234] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x20c2c0 [0243.234] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0243.234] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260630 [0243.234] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2606d0 [0243.234] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260630 | out: hHeap=0x1f0000) returned 1 [0243.234] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0243.234] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0243.235] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0243.235] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x234b90 [0243.235] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b90 | out: hHeap=0x1f0000) returned 1 [0243.235] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0243.235] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20c2c0 | out: hHeap=0x1f0000) returned 1 [0243.235] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f9b0 [0243.235] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228a70 [0243.235] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260630 [0243.235] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260748 [0243.235] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260658 [0243.235] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260770 [0243.235] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0243.235] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260630 | out: hHeap=0x1f0000) returned 1 [0243.235] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0243.236] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260630 [0243.236] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2606a8 [0243.236] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260630 | out: hHeap=0x1f0000) returned 1 [0243.236] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0243.236] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0243.236] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206808 [0243.236] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x2a9c88 [0243.236] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a9c88 | out: hHeap=0x1f0000) returned 1 [0243.236] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206808 | out: hHeap=0x1f0000) returned 1 [0243.236] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0243.236] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0243.236] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0243.236] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0243.236] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204c30 [0243.237] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0243.237] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0243.237] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0243.237] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac6d8 [0243.237] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0243.237] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0243.237] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260658 | out: hHeap=0x1f0000) returned 1 [0243.237] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228a70 | out: hHeap=0x1f0000) returned 1 [0243.237] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0243.237] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c30 | out: hHeap=0x1f0000) returned 1 [0243.237] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f9b0 | out: hHeap=0x1f0000) returned 1 [0243.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0243.238] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab7d0 [0243.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab7d0 | out: hHeap=0x1f0000) returned 1 [0243.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ee8 | out: hHeap=0x1f0000) returned 1 [0243.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0243.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0243.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0243.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0243.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0243.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0243.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0243.238] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab8f8 [0243.238] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac360 [0243.239] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab8f8 | out: hHeap=0x1f0000) returned 1 [0243.239] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac360 | out: hHeap=0x1f0000) returned 1 [0243.239] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac6d8 | out: hHeap=0x1f0000) returned 1 [0243.239] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0243.239] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2857d0 | out: hHeap=0x1f0000) returned 1 [0243.239] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24e6c0 | out: hHeap=0x1f0000) returned 1 [0243.239] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x2ae0e0 [0243.239] GetLastError () returned 0x0 [0243.239] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c670 [0243.240] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c710 [0243.240] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0000-1000-0000000ff1ce.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de10, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0243.241] GetFileType (hFile=0x1d8) returned 0x1 [0243.241] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28cfc8 [0243.241] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1a1dd98 | out: lpNewFilePointer=0x0) returned 1 [0243.242] GetLastError () returned 0xb7 [0243.242] CloseHandle (hObject=0x1d8) returned 1 [0243.242] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c710 | out: hHeap=0x1f0000) returned 1 [0243.242] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c670 | out: hHeap=0x1f0000) returned 1 [0243.243] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2856c8 | out: hHeap=0x1f0000) returned 1 [0243.243] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2853b0 | out: hHeap=0x1f0000) returned 1 [0243.243] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0243.243] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bf0 | out: hHeap=0x1f0000) returned 1 [0243.243] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0380 | out: hHeap=0x1f0000) returned 1 [0243.243] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f980 | out: hHeap=0x1f0000) returned 1 [0243.243] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8e78 | out: hHeap=0x1f0000) returned 1 [0243.243] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae0e0 | out: hHeap=0x1f0000) returned 1 [0243.243] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0243.243] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0243.243] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x26c1b8 | out: hHeap=0x1f0000) returned 1 [0243.243] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aee00 | out: hHeap=0x1f0000) returned 1 [0243.244] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238da8 | out: hHeap=0x1f0000) returned 1 [0243.244] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c700 | out: hHeap=0x1f0000) returned 1 [0243.244] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f950 | out: hHeap=0x1f0000) returned 1 [0243.244] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0243.244] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c650 | out: hHeap=0x1f0000) returned 1 [0243.244] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f908 | out: hHeap=0x1f0000) returned 1 [0243.244] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0243.244] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c660 | out: hHeap=0x1f0000) returned 1 [0243.244] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2854b8 | out: hHeap=0x1f0000) returned 1 [0243.244] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0243.244] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0318 | out: hHeap=0x1f0000) returned 1 [0243.244] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228710 | out: hHeap=0x1f0000) returned 1 [0243.245] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0243.245] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0243.245] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2289e0 | out: hHeap=0x1f0000) returned 1 [0243.245] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c640 | out: hHeap=0x1f0000) returned 1 [0243.245] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c580 | out: hHeap=0x1f0000) returned 1 [0243.245] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x298020 | out: hHeap=0x1f0000) returned 1 [0243.245] CloseHandle (hObject=0x210) returned 1 [0243.246] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b60 | out: hHeap=0x1f0000) returned 1 [0243.246] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a30 | out: hHeap=0x1f0000) returned 1 [0243.246] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236ea0 | out: hHeap=0x1f0000) returned 1 [0243.246] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24ca08 | out: hHeap=0x1f0000) returned 1 [0243.246] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f9c8 | out: hHeap=0x1f0000) returned 1 [0243.246] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f50 | out: hHeap=0x1f0000) returned 1 [0243.246] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x299028 | out: hHeap=0x1f0000) returned 1 [0243.246] CloseHandle (hObject=0x230) returned 1 [0243.247] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ab0 | out: hHeap=0x1f0000) returned 1 [0243.247] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a20 | out: hHeap=0x1f0000) returned 1 [0243.247] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad130 | out: hHeap=0x1f0000) returned 1 [0243.247] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c70 | out: hHeap=0x1f0000) returned 1 [0243.247] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21b708 | out: hHeap=0x1f0000) returned 1 [0243.247] CloseHandle (hObject=0x22c) returned 1 [0243.248] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388f0 | out: hHeap=0x1f0000) returned 1 [0243.248] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388c0 | out: hHeap=0x1f0000) returned 1 [0243.248] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2acfc0 | out: hHeap=0x1f0000) returned 1 [0243.248] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388b0 | out: hHeap=0x1f0000) returned 1 [0243.248] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238900 | out: hHeap=0x1f0000) returned 1 [0243.249] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238840 | out: hHeap=0x1f0000) returned 1 [0243.249] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238880 | out: hHeap=0x1f0000) returned 1 [0243.579] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20d978 | out: hHeap=0x1f0000) returned 1 [0243.579] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x26aeb0 | out: hHeap=0x1f0000) returned 1 [0243.579] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2af8f0 | out: hHeap=0x1f0000) returned 1 [0243.579] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206658 | out: hHeap=0x1f0000) returned 1 [0243.579] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f920 | out: hHeap=0x1f0000) returned 1 [0243.579] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f938 | out: hHeap=0x1f0000) returned 1 [0243.579] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233638 | out: hHeap=0x1f0000) returned 1 [0243.579] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x26d4c0 | out: hHeap=0x1f0000) returned 1 [0243.580] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae310 | out: hHeap=0x1f0000) returned 1 [0243.580] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c58 | out: hHeap=0x1f0000) returned 1 [0243.580] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0243.580] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262980 | out: hHeap=0x1f0000) returned 1 [0243.580] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2288c0 | out: hHeap=0x1f0000) returned 1 [0243.580] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0243.580] DeleteFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0000-1000-0000000ff1ce.xml")) returned 1 [0243.582] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ecd099, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml", cAlternateFileName="APCEE5~1.XML")) returned 1 [0243.583] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220238 [0243.583] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0243.583] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224320 [0243.583] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0243.583] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239be0 | out: hHeap=0x1f0000) returned 1 [0243.583] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220238 | out: hHeap=0x1f0000) returned 1 [0243.674] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e65c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0243.674] GetFileType (hFile=0x230) returned 0x1 [0243.674] CloseHandle (hObject=0x230) returned 1 [0243.675] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224068 [0243.675] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1e6ec | out: lpFileInformation=0x1a1e6ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ecd099, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0243.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224068 | out: hHeap=0x1f0000) returned 1 [0243.675] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224068 [0243.675] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1e6fc | out: lpFileInformation=0x1a1e6fc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ecd099, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0243.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224068 | out: hHeap=0x1f0000) returned 1 [0243.675] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224068 [0243.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224068 | out: hHeap=0x1f0000) returned 1 [0243.676] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e3474a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e3474a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3df10, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP557F~1.XML")) returned 1 [0243.676] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0243.676] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0243.676] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x223be0 [0243.676] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0243.676] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224320 | out: hHeap=0x1f0000) returned 1 [0243.676] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0243.676] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e65c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0243.677] GetFileType (hFile=0x230) returned 0x1 [0243.677] CloseHandle (hObject=0x230) returned 1 [0243.677] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224408 [0243.677] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1e6ec | out: lpFileInformation=0x1a1e6ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e3474a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e3474a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3df10)) returned 1 [0243.677] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224408 | out: hHeap=0x1f0000) returned 1 [0243.677] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224068 [0243.677] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1e6fc | out: lpFileInformation=0x1a1e6fc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e3474a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e3474a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3df10)) returned 1 [0243.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224068 | out: hHeap=0x1f0000) returned 1 [0243.678] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224238 [0243.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224238 | out: hHeap=0x1f0000) returned 1 [0243.678] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml", cAlternateFileName="APE193~1.XML")) returned 1 [0243.678] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0243.678] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0243.678] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2247a8 [0243.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0243.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223be0 | out: hHeap=0x1f0000) returned 1 [0243.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0243.679] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e65c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0243.679] GetFileType (hFile=0x230) returned 0x1 [0243.679] CloseHandle (hObject=0x230) returned 1 [0243.679] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2246c0 [0243.679] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1e6ec | out: lpFileInformation=0x1a1e6ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0243.680] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2246c0 | out: hHeap=0x1f0000) returned 1 [0243.680] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x223cc8 [0243.680] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1e6fc | out: lpFileInformation=0x1a1e6fc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0243.680] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223cc8 | out: hHeap=0x1f0000) returned 1 [0243.680] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x223f80 [0243.680] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223f80 | out: hHeap=0x1f0000) returned 1 [0243.680] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e3474a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x112a4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml", cAlternateFileName="APC1E2~1.XML")) returned 1 [0243.680] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220490 [0243.680] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0243.680] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224408 [0243.680] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0243.680] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2247a8 | out: hHeap=0x1f0000) returned 1 [0243.681] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220490 | out: hHeap=0x1f0000) returned 1 [0243.681] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e65c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.681] GetLastError () returned 0x2 [0243.681] GetLastError () returned 0x2 [0243.681] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4bfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml", cAlternateFileName="APC422~1.XML")) returned 1 [0243.681] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0243.682] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2203a0 [0243.682] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2247a8 [0243.682] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2203a0 | out: hHeap=0x1f0000) returned 1 [0243.682] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224408 | out: hHeap=0x1f0000) returned 1 [0243.682] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0243.682] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e65c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0243.682] GetFileType (hFile=0x230) returned 0x1 [0243.683] CloseHandle (hObject=0x230) returned 1 [0243.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224890 [0243.683] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1e6ec | out: lpFileInformation=0x1a1e6ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4bfb)) returned 1 [0243.683] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224890 | out: hHeap=0x1f0000) returned 1 [0243.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x223cc8 [0243.683] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1e6fc | out: lpFileInformation=0x1a1e6fc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4bfb)) returned 1 [0243.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223cc8 | out: hHeap=0x1f0000) returned 1 [0243.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2244f0 [0243.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2244f0 | out: hHeap=0x1f0000) returned 1 [0243.684] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84391d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xba5e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP2169~1.XML")) returned 1 [0243.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0243.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0243.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224408 [0243.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0243.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2247a8 | out: hHeap=0x1f0000) returned 1 [0243.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0243.685] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e65c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.685] GetLastError () returned 0x2 [0243.685] GetLastError () returned 0x2 [0243.685] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP7BBA~1.XML")) returned 1 [0243.686] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220238 [0243.686] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0243.686] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224890 [0243.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0243.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224408 | out: hHeap=0x1f0000) returned 1 [0243.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220238 | out: hHeap=0x1f0000) returned 1 [0243.688] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e65c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0243.688] GetFileType (hFile=0x230) returned 0x1 [0243.689] CloseHandle (hObject=0x230) returned 1 [0243.689] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x223f80 [0243.689] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1e6ec | out: lpFileInformation=0x1a1e6ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0243.689] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223f80 | out: hHeap=0x1f0000) returned 1 [0243.689] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x223cc8 [0243.690] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1e6fc | out: lpFileInformation=0x1a1e6fc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0243.690] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223cc8 | out: hHeap=0x1f0000) returned 1 [0243.690] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224408 [0243.690] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224408 | out: hHeap=0x1f0000) returned 1 [0243.690] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e0e651, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e0e651, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml", cAlternateFileName="APEF10~1.XML")) returned 1 [0243.690] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2203a0 [0243.690] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0243.691] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224068 [0243.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0243.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224890 | out: hHeap=0x1f0000) returned 1 [0243.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2203a0 | out: hHeap=0x1f0000) returned 1 [0243.692] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e65c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0243.692] GetFileType (hFile=0x230) returned 0x1 [0243.692] CloseHandle (hObject=0x230) returned 1 [0243.693] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x223db0 [0243.693] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1e6ec | out: lpFileInformation=0x1a1e6ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e0e651, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e0e651, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0243.693] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223db0 | out: hHeap=0x1f0000) returned 1 [0243.693] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224150 [0243.694] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1e6fc | out: lpFileInformation=0x1a1e6fc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e0e651, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e0e651, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0243.694] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224150 | out: hHeap=0x1f0000) returned 1 [0243.694] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x223cc8 [0243.694] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223cc8 | out: hHeap=0x1f0000) returned 1 [0243.694] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x838fd5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x838fd5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x863, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml", cAlternateFileName="AP5F49~1.XML")) returned 1 [0243.694] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0243.694] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0243.695] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x223e98 [0243.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0243.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224068 | out: hHeap=0x1f0000) returned 1 [0243.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0243.696] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-040c-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e65c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0243.696] GetFileType (hFile=0x230) returned 0x1 [0243.697] CloseHandle (hObject=0x230) returned 1 [0243.697] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x223db0 [0243.697] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-040c-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1e6ec | out: lpFileInformation=0x1a1e6ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x838fd5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x838fd5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x863)) returned 1 [0243.698] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223db0 | out: hHeap=0x1f0000) returned 1 [0243.698] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x223be0 [0243.698] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-040c-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1e6fc | out: lpFileInformation=0x1a1e6fc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x838fd5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x838fd5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x863)) returned 1 [0243.698] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223be0 | out: hHeap=0x1f0000) returned 1 [0243.698] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x223db0 [0243.698] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223db0 | out: hHeap=0x1f0000) returned 1 [0243.698] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83ea71ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83ea71ba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x863, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml", cAlternateFileName="APB0FE~1.XML")) returned 1 [0243.699] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0243.699] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fa40 [0243.699] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x223db0 [0243.699] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fa40 | out: hHeap=0x1f0000) returned 1 [0243.699] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223e98 | out: hHeap=0x1f0000) returned 1 [0243.699] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0243.700] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0c0a-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e65c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0243.700] GetFileType (hFile=0x230) returned 0x1 [0243.700] CloseHandle (hObject=0x230) returned 1 [0243.701] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224a60 [0243.701] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0c0a-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1e6ec | out: lpFileInformation=0x1a1e6ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83ea71ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83ea71ba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x863)) returned 1 [0243.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224a60 | out: hHeap=0x1f0000) returned 1 [0243.701] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224068 [0243.701] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0c0a-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1e6fc | out: lpFileInformation=0x1a1e6fc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83ea71ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83ea71ba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x863)) returned 1 [0243.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224068 | out: hHeap=0x1f0000) returned 1 [0243.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224a60 [0243.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224a60 | out: hHeap=0x1f0000) returned 1 [0243.703] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf982bd9c, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf982bd9c, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x34b4b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP8AF5~1.XML")) returned 1 [0243.703] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220238 [0243.703] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0243.703] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x223e98 [0243.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0243.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223db0 | out: hHeap=0x1f0000) returned 1 [0243.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220238 | out: hHeap=0x1f0000) returned 1 [0243.704] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0027-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e65c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0243.704] GetFileType (hFile=0x230) returned 0x1 [0243.705] CloseHandle (hObject=0x230) returned 1 [0243.705] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224068 [0243.706] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0027-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1e6ec | out: lpFileInformation=0x1a1e6ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf982bd9c, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf982bd9c, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x34b4b)) returned 1 [0243.706] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224068 | out: hHeap=0x1f0000) returned 1 [0243.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2246c0 [0243.706] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0027-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1e6fc | out: lpFileInformation=0x1a1e6fc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf982bd9c, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf982bd9c, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x34b4b)) returned 1 [0243.706] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2246c0 | out: hHeap=0x1f0000) returned 1 [0243.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224a60 [0243.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224a60 | out: hHeap=0x1f0000) returned 1 [0243.707] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e3474a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml", cAlternateFileName="APF26A~1.XML")) returned 1 [0243.707] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220490 [0243.707] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0243.707] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224320 [0243.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0243.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223e98 | out: hHeap=0x1f0000) returned 1 [0243.708] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220490 | out: hHeap=0x1f0000) returned 1 [0243.709] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-002c-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e65c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0243.709] GetFileType (hFile=0x230) returned 0x1 [0243.710] CloseHandle (hObject=0x230) returned 1 [0243.710] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x223db0 [0243.710] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-002c-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1e6ec | out: lpFileInformation=0x1a1e6ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e3474a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0243.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223db0 | out: hHeap=0x1f0000) returned 1 [0243.711] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224408 [0243.711] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-002c-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1e6fc | out: lpFileInformation=0x1a1e6fc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e3474a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0243.712] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224408 | out: hHeap=0x1f0000) returned 1 [0243.712] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224a60 [0243.712] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224a60 | out: hHeap=0x1f0000) returned 1 [0243.712] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xbf2f172d, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0xbf2f172d, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xbf33deae, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml", cAlternateFileName="APC553~1.XML")) returned 1 [0243.712] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fc98 [0243.712] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd88 [0243.712] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x223cc8 [0243.714] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd88 | out: hHeap=0x1f0000) returned 1 [0243.714] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224320 | out: hHeap=0x1f0000) returned 1 [0243.714] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fc98 | out: hHeap=0x1f0000) returned 1 [0243.714] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0054-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e65c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0243.714] GetFileType (hFile=0x230) returned 0x1 [0243.715] CloseHandle (hObject=0x230) returned 1 [0243.715] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x223f80 [0243.715] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0054-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1e6ec | out: lpFileInformation=0x1a1e6ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xbf2f172d, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0xbf2f172d, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xbf33deae, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0243.715] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223f80 | out: hHeap=0x1f0000) returned 1 [0243.716] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224a60 [0243.716] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0054-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1e6fc | out: lpFileInformation=0x1a1e6fc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xbf2f172d, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0xbf2f172d, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xbf33deae, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0243.716] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224a60 | out: hHeap=0x1f0000) returned 1 [0243.716] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2246c0 [0243.716] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2246c0 | out: hHeap=0x1f0000) returned 1 [0243.716] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xbf2f172d, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0xbf2f172d, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xbf2f172d, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x53d21, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP9FA1~1.XML")) returned 1 [0243.716] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0243.716] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220238 [0243.717] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x223be0 [0243.717] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220238 | out: hHeap=0x1f0000) returned 1 [0243.717] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223cc8 | out: hHeap=0x1f0000) returned 1 [0243.717] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0244.099] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0057-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e65c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0244.100] GetFileType (hFile=0x230) returned 0x1 [0244.102] CloseHandle (hObject=0x230) returned 1 [0244.102] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2244f0 [0244.102] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0057-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1e6ec | out: lpFileInformation=0x1a1e6ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xbf2f172d, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0xbf2f172d, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xbf2f172d, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x53d21)) returned 1 [0244.103] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2244f0 | out: hHeap=0x1f0000) returned 1 [0244.103] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x223db0 [0244.103] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0057-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1e6fc | out: lpFileInformation=0x1a1e6fc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xbf2f172d, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0xbf2f172d, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xbf2f172d, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x53d21)) returned 1 [0244.103] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223db0 | out: hHeap=0x1f0000) returned 1 [0244.103] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224238 [0244.103] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224238 | out: hHeap=0x1f0000) returned 1 [0244.103] GetLastError () returned 0x0 [0244.105] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0244.106] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228b00 [0244.106] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262cb0 [0244.106] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2246c0 [0244.106] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c20 [0244.107] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260770 [0244.107] CryptAcquireContextA (in: phProv=0x1a1df10, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1a1df10*=0x212e88) returned 1 [0244.108] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x260770 | out: pbBuffer=0x260770) returned 1 [0244.109] CryptReleaseContext (hProv=0x212e88, dwFlags=0x0) returned 1 [0244.109] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0244.109] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x26d4c0 [0244.109] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2aebd0 [0244.109] QueryPerformanceCounter (in: lpPerformanceCount=0x1a1dea4 | out: lpPerformanceCount=0x1a1dea4*=40147813878) returned 1 [0244.109] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1a1dee4 | out: lpSystemTimeAsFileTime=0x1a1dee4) [0244.109] QueryPerformanceCounter (in: lpPerformanceCount=0x1a1dea4 | out: lpPerformanceCount=0x1a1dea4*=40147843797) returned 1 [0244.110] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1a1dee4 | out: lpSystemTimeAsFileTime=0x1a1dee4) [0244.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238f30 [0244.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x26e7c8 [0244.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2af8f0 [0244.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x233978 [0244.111] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f890 [0244.111] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2067d8 [0244.111] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f758 [0244.111] GetLastError () returned 0x0 [0244.111] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x2b1e60 [0244.112] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x166) returned 0x239be0 [0244.112] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b1e60 | out: hHeap=0x1f0000) returned 1 [0244.112] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c570 [0244.112] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c6d0 [0244.113] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0057-0000-1000-0000000ff1ce.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ddb0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0244.115] GetFileType (hFile=0x230) returned 0x1 [0244.117] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c6a0 [0244.117] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c3a0 [0244.118] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0057-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1dde0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0244.118] GetFileType (hFile=0x200) returned 0x1 [0244.119] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ef0 [0244.119] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c30 [0244.119] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad130 [0244.119] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c520 [0244.119] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c370 [0244.120] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0057-0000-1000-0000000ff1ce.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1dd2c, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0244.120] GetFileType (hFile=0x1e8) returned 0x1 [0244.121] GetLastError () returned 0xb7 [0244.121] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe4) returned 0x21bca8 [0244.121] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f10 [0244.121] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cb0 [0244.121] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e50 [0244.122] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad580 [0244.122] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c4b0 [0244.122] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c410 [0244.123] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0057-0000-1000-0000000ff1ce.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1dd2c, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0244.123] GetFileType (hFile=0x1fc) returned 0x1 [0244.123] GetLastError () returned 0xb7 [0244.123] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bd0 [0244.124] GetLastError () returned 0xb7 [0244.124] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cb0 [0244.124] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bf0 [0244.124] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d90 [0244.124] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb8) returned 0x236f60 [0244.124] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c420 [0244.124] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c430 [0244.125] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0057-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1dd24, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0244.125] GetFileType (hFile=0x224) returned 0x1 [0244.126] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x292ff8 [0244.126] ReadFile (in: hFile=0x224, lpBuffer=0x292ff8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1dc80, lpOverlapped=0x0 | out: lpBuffer=0x292ff8*, lpNumberOfBytesRead=0x1a1dc80*=0x1000, lpOverlapped=0x0) returned 1 [0244.129] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24b5e0 [0244.131] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28bfc0 [0244.132] GetLastError () returned 0x0 [0244.488] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f938 [0244.488] GetLastError () returned 0x0 [0244.489] CloseHandle (hObject=0x230) returned 1 [0244.490] CloseHandle (hObject=0x200) returned 1 [0244.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c4c0 [0244.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c440 [0244.492] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0057-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1dde0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0244.498] GetFileType (hFile=0x200) returned 0x1 [0244.499] GetLastError () returned 0xb7 [0244.499] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x294000 [0244.500] GetLastError () returned 0xb7 [0244.501] CloseHandle (hObject=0x200) returned 1 [0244.502] DeleteFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0057-0000-1000-0000000ff1ce.xml")) returned 0 [0244.502] GetLastError () returned 0x20 [0244.502] GetLastError () returned 0x20 [0244.503] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228638 [0244.503] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260888 [0244.503] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2606d0 [0244.503] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x228680 [0244.503] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204df0 [0244.503] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bf0 [0244.503] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x21c490 [0244.503] GetLastError () returned 0x20 [0244.504] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238ec0 [0244.504] GetLastError () returned 0x20 [0244.504] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238ec0 [0244.504] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b08c8 [0244.504] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260928 [0244.504] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2851a0 [0244.504] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c450 [0244.504] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0244.504] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f6b0 [0244.505] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c460 [0244.505] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609a0 [0244.505] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f6f8 [0244.505] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260590 [0244.505] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285098 [0244.505] GetLastError () returned 0x20 [0244.505] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x21c470 [0244.505] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x21c4e0 [0244.506] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c4f0 [0244.506] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c4e0 | out: hHeap=0x1f0000) returned 1 [0244.506] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c530 [0244.506] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c4f0 | out: hHeap=0x1f0000) returned 1 [0244.507] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c470 | out: hHeap=0x1f0000) returned 1 [0244.507] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c470 [0244.507] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f878 [0244.507] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c470 | out: hHeap=0x1f0000) returned 1 [0244.507] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f740 [0244.507] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f878 | out: hHeap=0x1f0000) returned 1 [0244.507] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c530 | out: hHeap=0x1f0000) returned 1 [0244.507] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f8a8 [0244.508] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f620 [0244.508] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f8a8 | out: hHeap=0x1f0000) returned 1 [0244.508] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f7b8 [0244.508] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f620 | out: hHeap=0x1f0000) returned 1 [0244.508] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f740 | out: hHeap=0x1f0000) returned 1 [0244.508] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f620 [0244.508] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204d90 [0244.508] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f620 | out: hHeap=0x1f0000) returned 1 [0244.509] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bb0 [0244.509] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d90 | out: hHeap=0x1f0000) returned 1 [0244.509] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f7b8 | out: hHeap=0x1f0000) returned 1 [0244.509] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d90 [0244.509] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2609f0 [0244.509] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d90 | out: hHeap=0x1f0000) returned 1 [0244.509] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204df0 [0244.510] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609f0 | out: hHeap=0x1f0000) returned 1 [0244.510] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bb0 | out: hHeap=0x1f0000) returned 1 [0244.510] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204bb0 [0244.510] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206868 [0244.510] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bb0 | out: hHeap=0x1f0000) returned 1 [0244.510] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260b58 [0244.510] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206868 | out: hHeap=0x1f0000) returned 1 [0244.510] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204df0 | out: hHeap=0x1f0000) returned 1 [0244.510] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c470 [0244.511] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f680 [0244.511] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c470 | out: hHeap=0x1f0000) returned 1 [0244.511] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f650 [0244.511] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f680 | out: hHeap=0x1f0000) returned 1 [0244.511] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204f70 [0244.511] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f650 | out: hHeap=0x1f0000) returned 1 [0244.511] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206808 [0244.511] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f70 | out: hHeap=0x1f0000) returned 1 [0244.512] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206808 | out: hHeap=0x1f0000) returned 1 [0244.512] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b58 | out: hHeap=0x1f0000) returned 1 [0244.512] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0244.512] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0244.512] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2851a0 | out: hHeap=0x1f0000) returned 1 [0244.512] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0244.513] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239160 [0244.513] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260888 [0244.513] CryptAcquireContextA (in: phProv=0x1a1df10, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1a1df10*=0x212e88) returned 1 [0244.514] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x260888 | out: pbBuffer=0x260888) returned 1 [0244.514] CryptReleaseContext (hProv=0x212e88, dwFlags=0x0) returned 1 [0244.514] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0244.514] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260888 [0244.514] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260928 [0244.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238cc8 [0244.515] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0244.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0244.515] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238cc8 | out: hHeap=0x1f0000) returned 1 [0244.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8e20 [0244.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f878 [0244.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x2b0d40 [0244.516] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260888 [0244.516] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2851a0 [0244.516] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c50 [0244.516] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0ee0 [0244.516] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260bd0 [0244.516] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2856c8 [0244.516] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c470 [0244.517] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0244.517] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f830 [0244.517] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c4e0 [0244.517] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c48 [0244.517] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f788 [0244.517] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f788 | out: hHeap=0x1f0000) returned 1 [0244.517] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0244.518] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c4e0 | out: hHeap=0x1f0000) returned 1 [0244.518] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f830 | out: hHeap=0x1f0000) returned 1 [0244.518] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0244.518] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c470 | out: hHeap=0x1f0000) returned 1 [0244.518] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2856c8 | out: hHeap=0x1f0000) returned 1 [0244.518] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bd0 | out: hHeap=0x1f0000) returned 1 [0244.518] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0ee0 | out: hHeap=0x1f0000) returned 1 [0244.519] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238da8 [0244.519] GetLastError () returned 0x0 [0244.519] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x2391d0 [0244.519] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0244.519] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0244.520] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0244.520] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0244.520] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0244.520] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0244.520] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x24ec40 [0244.520] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285bf0 [0244.520] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0244.521] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0244.521] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0244.521] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0244.521] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2854b8 [0244.521] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0244.521] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0244.521] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f9c0 [0244.522] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x264f88 [0244.757] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2ae310 [0244.758] QueryPerformanceCounter (in: lpPerformanceCount=0x1a1da60 | out: lpPerformanceCount=0x1a1da60*=40212649851) returned 1 [0244.758] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1a1daa0 | out: lpSystemTimeAsFileTime=0x1a1daa0) [0244.758] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x21c500 [0244.758] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0244.758] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c70 [0244.758] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c70 | out: hHeap=0x1f0000) returned 1 [0244.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0244.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0244.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c10 [0244.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c10 | out: hHeap=0x1f0000) returned 1 [0244.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0244.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c500 | out: hHeap=0x1f0000) returned 1 [0244.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0244.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239208 [0244.760] GetLastError () returned 0x0 [0244.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0244.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0244.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0244.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2606a8 [0244.761] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260a18 [0244.761] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0244.761] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0244.761] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260c70 [0244.761] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0244.761] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x222ee8 [0244.761] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0244.761] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0244.761] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0244.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0244.762] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0244.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260bd0 [0244.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2609f0 [0244.762] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bd0 | out: hHeap=0x1f0000) returned 1 [0244.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0244.762] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609f0 | out: hHeap=0x1f0000) returned 1 [0244.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0244.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x234b90 [0244.763] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b90 | out: hHeap=0x1f0000) returned 1 [0244.763] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0244.763] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0244.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f668 [0244.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2287a0 [0244.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260c48 [0244.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260b30 [0244.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260bd0 [0244.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260bf8 [0244.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b30 | out: hHeap=0x1f0000) returned 1 [0244.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0244.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0244.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260c20 [0244.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2609f0 [0244.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c20 | out: hHeap=0x1f0000) returned 1 [0244.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0244.765] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609f0 | out: hHeap=0x1f0000) returned 1 [0244.765] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2066b8 [0244.765] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x2a9c88 [0244.765] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a9c88 | out: hHeap=0x1f0000) returned 1 [0244.765] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2066b8 | out: hHeap=0x1f0000) returned 1 [0244.765] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c70 | out: hHeap=0x1f0000) returned 1 [0244.765] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2acca0 [0244.765] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0244.766] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0244.766] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204d30 [0244.766] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abfe8 [0244.766] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac488 [0244.766] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a18 | out: hHeap=0x1f0000) returned 1 [0244.766] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac5b0 [0244.766] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac488 | out: hHeap=0x1f0000) returned 1 [0244.767] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0244.767] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bd0 | out: hHeap=0x1f0000) returned 1 [0244.767] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2287a0 | out: hHeap=0x1f0000) returned 1 [0244.767] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abfe8 | out: hHeap=0x1f0000) returned 1 [0244.767] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d30 | out: hHeap=0x1f0000) returned 1 [0244.767] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f668 | out: hHeap=0x1f0000) returned 1 [0244.767] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0244.768] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac488 [0244.768] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac488 | out: hHeap=0x1f0000) returned 1 [0244.768] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ee8 | out: hHeap=0x1f0000) returned 1 [0244.768] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0244.768] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2acca0 | out: hHeap=0x1f0000) returned 1 [0244.768] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0244.768] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0244.769] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0244.769] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0244.769] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0244.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab208 [0244.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2acb78 [0244.769] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab208 | out: hHeap=0x1f0000) returned 1 [0244.769] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2acb78 | out: hHeap=0x1f0000) returned 1 [0244.770] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac5b0 | out: hHeap=0x1f0000) returned 1 [0244.770] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0244.770] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2854b8 | out: hHeap=0x1f0000) returned 1 [0244.770] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24ec40 | out: hHeap=0x1f0000) returned 1 [0244.770] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x2aece8 [0244.770] GetLastError () returned 0x0 [0244.771] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c500 [0244.771] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389b0 [0244.991] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0057-0000-1000-0000000ff1ce.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de10, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0244.992] GetFileType (hFile=0x210) returned 0x1 [0244.992] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28cfc8 [0244.993] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1a1dd98 | out: lpNewFilePointer=0x0) returned 1 [0244.993] GetLastError () returned 0xb7 [0244.994] CloseHandle (hObject=0x210) returned 1 [0244.994] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389b0 | out: hHeap=0x1f0000) returned 1 [0244.994] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c500 | out: hHeap=0x1f0000) returned 1 [0244.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285bf0 | out: hHeap=0x1f0000) returned 1 [0244.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2851a0 | out: hHeap=0x1f0000) returned 1 [0244.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0244.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c50 | out: hHeap=0x1f0000) returned 1 [0244.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0d40 | out: hHeap=0x1f0000) returned 1 [0244.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f878 | out: hHeap=0x1f0000) returned 1 [0244.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8e20 | out: hHeap=0x1f0000) returned 1 [0244.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aece8 | out: hHeap=0x1f0000) returned 1 [0244.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0244.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0244.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x264f88 | out: hHeap=0x1f0000) returned 1 [0244.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae310 | out: hHeap=0x1f0000) returned 1 [0244.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239160 | out: hHeap=0x1f0000) returned 1 [0244.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c490 | out: hHeap=0x1f0000) returned 1 [0244.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f6f8 | out: hHeap=0x1f0000) returned 1 [0244.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0244.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c460 | out: hHeap=0x1f0000) returned 1 [0244.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f6b0 | out: hHeap=0x1f0000) returned 1 [0244.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0244.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c450 | out: hHeap=0x1f0000) returned 1 [0244.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285098 | out: hHeap=0x1f0000) returned 1 [0244.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0244.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b08c8 | out: hHeap=0x1f0000) returned 1 [0244.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228680 | out: hHeap=0x1f0000) returned 1 [0244.998] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0244.998] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0244.998] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228638 | out: hHeap=0x1f0000) returned 1 [0244.998] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c440 | out: hHeap=0x1f0000) returned 1 [0244.998] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c4c0 | out: hHeap=0x1f0000) returned 1 [0244.998] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x292ff8 | out: hHeap=0x1f0000) returned 1 [0244.999] CloseHandle (hObject=0x224) returned 1 [0244.999] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c430 | out: hHeap=0x1f0000) returned 1 [0244.999] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c420 | out: hHeap=0x1f0000) returned 1 [0244.999] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236f60 | out: hHeap=0x1f0000) returned 1 [0245.000] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24b5e0 | out: hHeap=0x1f0000) returned 1 [0245.000] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f938 | out: hHeap=0x1f0000) returned 1 [0245.000] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cb0 | out: hHeap=0x1f0000) returned 1 [0245.000] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28bfc0 | out: hHeap=0x1f0000) returned 1 [0245.000] CloseHandle (hObject=0x1fc) returned 1 [0245.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c410 | out: hHeap=0x1f0000) returned 1 [0245.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c4b0 | out: hHeap=0x1f0000) returned 1 [0245.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad580 | out: hHeap=0x1f0000) returned 1 [0245.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f10 | out: hHeap=0x1f0000) returned 1 [0245.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21bca8 | out: hHeap=0x1f0000) returned 1 [0245.002] CloseHandle (hObject=0x1e8) returned 1 [0245.002] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c370 | out: hHeap=0x1f0000) returned 1 [0245.002] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c520 | out: hHeap=0x1f0000) returned 1 [0245.003] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad130 | out: hHeap=0x1f0000) returned 1 [0245.003] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c3a0 | out: hHeap=0x1f0000) returned 1 [0245.003] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c6a0 | out: hHeap=0x1f0000) returned 1 [0245.003] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c6d0 | out: hHeap=0x1f0000) returned 1 [0245.003] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c570 | out: hHeap=0x1f0000) returned 1 [0245.003] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239be0 | out: hHeap=0x1f0000) returned 1 [0245.003] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x26e7c8 | out: hHeap=0x1f0000) returned 1 [0245.003] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2af8f0 | out: hHeap=0x1f0000) returned 1 [0245.003] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2067d8 | out: hHeap=0x1f0000) returned 1 [0245.004] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f758 | out: hHeap=0x1f0000) returned 1 [0245.004] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f890 | out: hHeap=0x1f0000) returned 1 [0245.004] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233978 | out: hHeap=0x1f0000) returned 1 [0245.004] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x26d4c0 | out: hHeap=0x1f0000) returned 1 [0245.004] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aebd0 | out: hHeap=0x1f0000) returned 1 [0245.004] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c20 | out: hHeap=0x1f0000) returned 1 [0245.004] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2246c0 | out: hHeap=0x1f0000) returned 1 [0245.004] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262cb0 | out: hHeap=0x1f0000) returned 1 [0245.005] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228b00 | out: hHeap=0x1f0000) returned 1 [0245.005] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0245.005] DeleteFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0057-0000-1000-0000000ff1ce.xml")) returned 1 [0245.007] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3a41, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP330B~1.XML")) returned 1 [0245.008] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2201c0 [0245.008] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220238 [0245.008] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x223cc8 [0245.008] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220238 | out: hHeap=0x1f0000) returned 1 [0245.008] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223be0 | out: hHeap=0x1f0000) returned 1 [0245.008] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2201c0 | out: hHeap=0x1f0000) returned 1 [0245.009] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-006e-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e65c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0245.009] GetFileType (hFile=0x1e8) returned 0x1 [0245.010] CloseHandle (hObject=0x1e8) returned 1 [0245.011] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224408 [0245.011] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-006e-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1e6ec | out: lpFileInformation=0x1a1e6ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3a41)) returned 1 [0245.011] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224408 | out: hHeap=0x1f0000) returned 1 [0245.011] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x223db0 [0245.011] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-006e-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1e6fc | out: lpFileInformation=0x1a1e6fc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3a41)) returned 1 [0245.011] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223db0 | out: hHeap=0x1f0000) returned 1 [0245.012] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224150 [0245.012] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224150 | out: hHeap=0x1f0000) returned 1 [0245.012] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83543a09, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x573e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml", cAlternateFileName="APPXMA~1.XML")) returned 1 [0245.012] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2201c0 [0245.012] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220238 [0245.012] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224150 [0245.012] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220238 | out: hHeap=0x1f0000) returned 1 [0245.013] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223cc8 | out: hHeap=0x1f0000) returned 1 [0245.013] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2201c0 | out: hHeap=0x1f0000) returned 1 [0245.013] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e65c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0245.014] GetFileType (hFile=0x1e8) returned 0x1 [0245.014] CloseHandle (hObject=0x1e8) returned 1 [0245.015] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x223be0 [0245.015] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1e6ec | out: lpFileInformation=0x1a1e6ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83543a09, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x573e5)) returned 1 [0245.015] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223be0 | out: hHeap=0x1f0000) returned 1 [0245.015] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224408 [0245.015] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1e6fc | out: lpFileInformation=0x1a1e6fc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83543a09, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x573e5)) returned 1 [0245.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224408 | out: hHeap=0x1f0000) returned 1 [0245.016] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x223f80 [0245.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223f80 | out: hHeap=0x1f0000) returned 1 [0245.016] GetLastError () returned 0x0 [0245.016] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0245.016] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228b00 [0245.017] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262cb0 [0245.017] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x223e98 [0245.017] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2390b8 [0245.017] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0245.017] CryptAcquireContextA (in: phProv=0x1a1df10, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1a1df10*=0x212cf0) returned 1 [0245.018] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2382d0 | out: pbBuffer=0x2382d0) returned 1 [0245.018] CryptReleaseContext (hProv=0x212cf0, dwFlags=0x0) returned 1 [0245.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0245.019] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x26d4c0 [0245.019] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2adfc8 [0245.019] QueryPerformanceCounter (in: lpPerformanceCount=0x1a1dea4 | out: lpPerformanceCount=0x1a1dea4*=40238797167) returned 1 [0245.019] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1a1dee4 | out: lpSystemTimeAsFileTime=0x1a1dee4) [0245.019] QueryPerformanceCounter (in: lpPerformanceCount=0x1a1dea4 | out: lpPerformanceCount=0x1a1dea4*=40238840074) returned 1 [0245.020] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1a1dee4 | out: lpSystemTimeAsFileTime=0x1a1dee4) [0245.020] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238c20 [0245.020] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x264f88 [0245.020] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2ae310 [0245.020] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x232fb8 [0245.020] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f860 [0245.020] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2067d8 [0245.021] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f680 [0245.021] GetLastError () returned 0x0 [0245.021] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x2b1c70 [0245.021] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x166) returned 0x239be0 [0245.021] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b1c70 | out: hHeap=0x1f0000) returned 1 [0245.022] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387f0 [0245.023] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238990 [0245.023] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0000-1000-0000000ff1ce.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ddb0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0245.024] GetFileType (hFile=0x1e8) returned 0x1 [0245.025] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389b0 [0245.025] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238860 [0245.026] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1dde0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0245.026] GetFileType (hFile=0x1fc) returned 0x1 [0245.026] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c90 [0245.026] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e30 [0245.027] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad638 [0245.027] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238940 [0245.027] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238840 [0245.028] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0000-1000-0000000ff1ce.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1dd2c, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0245.029] GetFileType (hFile=0x224) returned 0x1 [0245.029] GetLastError () returned 0xb7 [0245.029] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe4) returned 0x21af88 [0245.030] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d10 [0245.030] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e30 [0245.030] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d30 [0245.030] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad580 [0245.030] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238890 [0245.030] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387e0 [0245.031] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0000-1000-0000000ff1ce.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1dd2c, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0245.031] GetFileType (hFile=0x210) returned 0x1 [0245.032] GetLastError () returned 0xb7 [0245.032] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ef0 [0245.032] GetLastError () returned 0xb7 [0245.032] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cf0 [0245.032] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ef0 [0245.032] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e50 [0245.032] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb8) returned 0x2371a0 [0245.032] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238870 [0245.033] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388c0 [0245.034] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1dd24, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0245.034] GetFileType (hFile=0x200) returned 0x1 [0245.034] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28cfc8 [0245.035] ReadFile (in: hFile=0x200, lpBuffer=0x28cfc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1dc80, lpOverlapped=0x0 | out: lpBuffer=0x28cfc8*, lpNumberOfBytesRead=0x1a1dc80*=0x1000, lpOverlapped=0x0) returned 1 [0245.414] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24b9e8 [0245.414] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28efd8 [0245.414] GetLastError () returned 0x0 [0245.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f938 [0245.484] GetLastError () returned 0x0 [0245.484] CloseHandle (hObject=0x1e8) returned 1 [0245.485] CloseHandle (hObject=0x1fc) returned 1 [0245.486] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388f0 [0245.486] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238820 [0245.488] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1dde0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0245.705] GetFileType (hFile=0x1fc) returned 0x1 [0245.706] GetLastError () returned 0xb7 [0245.707] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x290fe8 [0245.707] GetLastError () returned 0xb7 [0245.733] CloseHandle (hObject=0x1fc) returned 1 [0245.737] DeleteFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0000-1000-0000000ff1ce.xml")) returned 0 [0245.738] GetLastError () returned 0x20 [0245.738] GetLastError () returned 0x20 [0245.738] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228ab8 [0245.738] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238398 [0245.739] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238140 [0245.739] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x228440 [0245.739] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f10 [0245.739] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c70 [0245.739] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x238880 [0245.739] GetLastError () returned 0x20 [0245.739] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239080 [0245.740] GetLastError () returned 0x20 [0245.740] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238e18 [0245.740] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214e38 [0245.740] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2383e8 [0245.740] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2854b8 [0245.740] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388a0 [0245.741] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0245.741] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f950 [0245.741] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388b0 [0245.741] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0245.741] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f740 [0245.741] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2384b0 [0245.742] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x284f90 [0245.742] GetLastError () returned 0x20 [0245.742] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238900 [0245.742] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x2388d0 [0245.742] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238910 [0245.742] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388d0 | out: hHeap=0x1f0000) returned 1 [0245.743] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388d0 [0245.743] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238910 | out: hHeap=0x1f0000) returned 1 [0245.743] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238900 | out: hHeap=0x1f0000) returned 1 [0245.743] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238900 [0245.743] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f620 [0245.743] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238900 | out: hHeap=0x1f0000) returned 1 [0245.743] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f7a0 [0245.743] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f620 | out: hHeap=0x1f0000) returned 1 [0245.743] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388d0 | out: hHeap=0x1f0000) returned 1 [0245.744] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f620 [0245.744] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f7b8 [0245.744] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f620 | out: hHeap=0x1f0000) returned 1 [0245.744] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f788 [0245.744] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f7b8 | out: hHeap=0x1f0000) returned 1 [0245.744] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f7a0 | out: hHeap=0x1f0000) returned 1 [0245.744] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f8d8 [0245.745] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204c30 [0245.745] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f8d8 | out: hHeap=0x1f0000) returned 1 [0245.745] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bf0 [0245.745] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c30 | out: hHeap=0x1f0000) returned 1 [0245.745] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f788 | out: hHeap=0x1f0000) returned 1 [0245.745] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c30 [0245.745] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238168 [0245.746] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c30 | out: hHeap=0x1f0000) returned 1 [0245.746] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204d30 [0245.746] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0245.746] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bf0 | out: hHeap=0x1f0000) returned 1 [0245.746] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204bb0 [0245.746] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x2066b8 [0245.746] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bb0 | out: hHeap=0x1f0000) returned 1 [0245.746] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238168 [0245.747] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2066b8 | out: hHeap=0x1f0000) returned 1 [0245.747] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d30 | out: hHeap=0x1f0000) returned 1 [0245.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238960 [0245.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f638 [0245.747] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238960 | out: hHeap=0x1f0000) returned 1 [0245.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f7b8 [0245.747] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f638 | out: hHeap=0x1f0000) returned 1 [0245.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204f10 [0245.748] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f7b8 | out: hHeap=0x1f0000) returned 1 [0245.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206808 [0245.748] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f10 | out: hHeap=0x1f0000) returned 1 [0245.748] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206808 | out: hHeap=0x1f0000) returned 1 [0245.748] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0245.748] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0245.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0245.748] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2854b8 | out: hHeap=0x1f0000) returned 1 [0245.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0245.749] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2390f0 [0245.749] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0245.749] CryptAcquireContextA (in: phProv=0x1a1df10, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1a1df10*=0x212be0) returned 1 [0245.750] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2382d0 | out: pbBuffer=0x2382d0) returned 1 [0245.750] CryptReleaseContext (hProv=0x212be0, dwFlags=0x0) returned 1 [0245.750] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0245.750] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238168 [0245.750] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238208 [0245.750] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239080 [0245.751] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0245.751] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0245.751] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239080 | out: hHeap=0x1f0000) returned 1 [0245.751] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8dc8 [0245.751] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f848 [0245.751] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x214f08 [0245.751] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2382a8 [0245.752] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2852a8 [0245.752] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d90 [0245.752] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214dd0 [0245.752] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2383e8 [0245.752] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2854b8 [0245.752] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238930 [0245.752] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0245.752] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f878 [0245.753] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238920 [0245.753] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0245.753] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f608 [0245.753] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f608 | out: hHeap=0x1f0000) returned 1 [0245.753] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0245.753] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238920 | out: hHeap=0x1f0000) returned 1 [0245.753] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f878 | out: hHeap=0x1f0000) returned 1 [0245.753] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0245.753] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238930 | out: hHeap=0x1f0000) returned 1 [0245.754] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2854b8 | out: hHeap=0x1f0000) returned 1 [0245.754] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0245.754] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214dd0 | out: hHeap=0x1f0000) returned 1 [0245.754] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238d00 [0245.754] GetLastError () returned 0x0 [0245.754] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238f30 [0245.755] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0245.755] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0245.755] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0245.755] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0245.755] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0245.755] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0245.755] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x24e7c0 [0245.756] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285cf8 [0245.756] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0245.756] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0245.756] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0245.756] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0245.757] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2855c0 [0245.757] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0245.757] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0245.757] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x230190 [0245.757] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x26e7c8 [0245.757] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2ae428 [0245.757] QueryPerformanceCounter (in: lpPerformanceCount=0x1a1da60 | out: lpPerformanceCount=0x1a1da60*=40312627399) returned 1 [0245.758] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1a1daa0 | out: lpSystemTimeAsFileTime=0x1a1daa0) [0245.758] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x2388d0 [0245.758] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0245.758] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c10 [0245.758] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c10 | out: hHeap=0x1f0000) returned 1 [0245.758] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0245.758] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0245.758] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f30 [0245.758] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f30 | out: hHeap=0x1f0000) returned 1 [0245.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0245.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388d0 | out: hHeap=0x1f0000) returned 1 [0245.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0245.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239278 [0245.759] GetLastError () returned 0x0 [0245.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0245.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0245.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0245.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238398 [0245.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238168 [0245.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0245.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0245.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381b8 [0245.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0245.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x222ee8 [0245.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0245.761] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0245.761] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0245.761] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0245.761] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0245.761] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238348 [0245.761] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238230 [0245.761] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238348 | out: hHeap=0x1f0000) returned 1 [0245.761] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0245.761] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0245.761] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0245.761] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x234b90 [0245.762] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b90 | out: hHeap=0x1f0000) returned 1 [0245.762] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0245.762] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0245.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f638 [0245.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228cb0 [0245.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238230 [0245.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2383e8 [0245.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238280 [0245.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2382d0 [0245.763] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0245.763] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0245.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0245.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238348 [0245.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2383e8 [0245.763] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238348 | out: hHeap=0x1f0000) returned 1 [0245.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0245.763] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0245.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2068c8 [0245.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x2a8fb0 [0245.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8fb0 | out: hHeap=0x1f0000) returned 1 [0245.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2068c8 | out: hHeap=0x1f0000) returned 1 [0245.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0245.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac488 [0245.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0245.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0245.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204d30 [0245.765] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2acb78 [0245.765] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab6a8 [0245.765] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0245.765] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac928 [0245.765] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab6a8 | out: hHeap=0x1f0000) returned 1 [0245.765] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0245.765] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0245.765] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228cb0 | out: hHeap=0x1f0000) returned 1 [0245.766] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2acb78 | out: hHeap=0x1f0000) returned 1 [0245.766] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d30 | out: hHeap=0x1f0000) returned 1 [0245.766] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f638 | out: hHeap=0x1f0000) returned 1 [0245.766] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0245.766] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac6d8 [0245.766] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac6d8 | out: hHeap=0x1f0000) returned 1 [0245.766] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ee8 | out: hHeap=0x1f0000) returned 1 [0245.767] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0245.767] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac488 | out: hHeap=0x1f0000) returned 1 [0245.767] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0245.767] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0245.767] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0245.767] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0245.767] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0245.768] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aafb8 [0245.768] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac110 [0245.768] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aafb8 | out: hHeap=0x1f0000) returned 1 [0245.768] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac110 | out: hHeap=0x1f0000) returned 1 [0245.768] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac928 | out: hHeap=0x1f0000) returned 1 [0245.768] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0245.768] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2855c0 | out: hHeap=0x1f0000) returned 1 [0245.769] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24e7c0 | out: hHeap=0x1f0000) returned 1 [0245.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x2af378 [0245.769] GetLastError () returned 0x0 [0245.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238960 [0245.770] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388d0 [0245.834] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0000-1000-0000000ff1ce.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de10, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0245.834] GetFileType (hFile=0x1b0) returned 0x1 [0245.835] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28dfd0 [0245.836] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1a1dd98 | out: lpNewFilePointer=0x0) returned 1 [0245.836] GetLastError () returned 0xb7 [0245.837] CloseHandle (hObject=0x1b0) returned 1 [0245.837] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388d0 | out: hHeap=0x1f0000) returned 1 [0245.838] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238960 | out: hHeap=0x1f0000) returned 1 [0245.838] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285cf8 | out: hHeap=0x1f0000) returned 1 [0245.838] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2852a8 | out: hHeap=0x1f0000) returned 1 [0245.838] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0245.838] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d90 | out: hHeap=0x1f0000) returned 1 [0245.838] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f08 | out: hHeap=0x1f0000) returned 1 [0245.838] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f848 | out: hHeap=0x1f0000) returned 1 [0245.838] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8dc8 | out: hHeap=0x1f0000) returned 1 [0245.839] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2af378 | out: hHeap=0x1f0000) returned 1 [0245.839] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0245.839] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0245.839] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x26e7c8 | out: hHeap=0x1f0000) returned 1 [0245.839] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae428 | out: hHeap=0x1f0000) returned 1 [0245.839] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2390f0 | out: hHeap=0x1f0000) returned 1 [0245.839] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238880 | out: hHeap=0x1f0000) returned 1 [0245.840] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f740 | out: hHeap=0x1f0000) returned 1 [0245.840] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0245.840] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388b0 | out: hHeap=0x1f0000) returned 1 [0245.840] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f950 | out: hHeap=0x1f0000) returned 1 [0245.840] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0245.840] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388a0 | out: hHeap=0x1f0000) returned 1 [0245.840] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x284f90 | out: hHeap=0x1f0000) returned 1 [0245.841] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0245.841] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214e38 | out: hHeap=0x1f0000) returned 1 [0245.841] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228440 | out: hHeap=0x1f0000) returned 1 [0245.841] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0245.841] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0245.841] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228ab8 | out: hHeap=0x1f0000) returned 1 [0245.841] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238820 | out: hHeap=0x1f0000) returned 1 [0245.842] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388f0 | out: hHeap=0x1f0000) returned 1 [0245.842] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28cfc8 | out: hHeap=0x1f0000) returned 1 [0245.842] CloseHandle (hObject=0x200) returned 1 [0245.843] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388c0 | out: hHeap=0x1f0000) returned 1 [0245.843] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238870 | out: hHeap=0x1f0000) returned 1 [0245.843] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2371a0 | out: hHeap=0x1f0000) returned 1 [0245.843] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24b9e8 | out: hHeap=0x1f0000) returned 1 [0245.843] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f938 | out: hHeap=0x1f0000) returned 1 [0245.844] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cf0 | out: hHeap=0x1f0000) returned 1 [0245.844] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28efd8 | out: hHeap=0x1f0000) returned 1 [0245.844] CloseHandle (hObject=0x210) returned 1 [0245.845] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387e0 | out: hHeap=0x1f0000) returned 1 [0245.845] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238890 | out: hHeap=0x1f0000) returned 1 [0245.845] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad580 | out: hHeap=0x1f0000) returned 1 [0245.845] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d10 | out: hHeap=0x1f0000) returned 1 [0245.845] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21af88 | out: hHeap=0x1f0000) returned 1 [0245.846] CloseHandle (hObject=0x224) returned 1 [0245.847] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238840 | out: hHeap=0x1f0000) returned 1 [0245.847] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238940 | out: hHeap=0x1f0000) returned 1 [0245.847] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad638 | out: hHeap=0x1f0000) returned 1 [0245.847] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238860 | out: hHeap=0x1f0000) returned 1 [0245.847] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389b0 | out: hHeap=0x1f0000) returned 1 [0245.848] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238990 | out: hHeap=0x1f0000) returned 1 [0245.848] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387f0 | out: hHeap=0x1f0000) returned 1 [0245.848] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239be0 | out: hHeap=0x1f0000) returned 1 [0245.848] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x264f88 | out: hHeap=0x1f0000) returned 1 [0245.848] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae310 | out: hHeap=0x1f0000) returned 1 [0245.848] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2067d8 | out: hHeap=0x1f0000) returned 1 [0245.849] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f680 | out: hHeap=0x1f0000) returned 1 [0245.849] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f860 | out: hHeap=0x1f0000) returned 1 [0245.849] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232fb8 | out: hHeap=0x1f0000) returned 1 [0245.849] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x26d4c0 | out: hHeap=0x1f0000) returned 1 [0245.849] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2adfc8 | out: hHeap=0x1f0000) returned 1 [0245.849] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2390b8 | out: hHeap=0x1f0000) returned 1 [0245.849] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223e98 | out: hHeap=0x1f0000) returned 1 [0245.850] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262cb0 | out: hHeap=0x1f0000) returned 1 [0245.850] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228b00 | out: hHeap=0x1f0000) returned 1 [0245.850] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0245.851] DeleteFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0000-1000-0000000ff1ce.xml")) returned 1 [0245.853] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e3474a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e3474a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP6206~1.XML")) returned 1 [0245.853] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2203a0 [0245.853] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0245.853] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224238 [0245.853] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0245.854] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224150 | out: hHeap=0x1f0000) returned 1 [0245.854] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2203a0 | out: hHeap=0x1f0000) returned 1 [0245.855] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e65c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0245.855] GetFileType (hFile=0x224) returned 0x1 [0245.856] CloseHandle (hObject=0x224) returned 1 [0245.856] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x223be0 [0245.857] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1e6ec | out: lpFileInformation=0x1a1e6ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e3474a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e3474a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0245.857] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223be0 | out: hHeap=0x1f0000) returned 1 [0245.857] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224408 [0245.857] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1e6fc | out: lpFileInformation=0x1a1e6fc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e3474a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e3474a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0245.857] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224408 | out: hHeap=0x1f0000) returned 1 [0245.857] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x223f80 [0245.858] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223f80 | out: hHeap=0x1f0000) returned 1 [0245.858] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8351d7a8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xfdea, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml", cAlternateFileName="APD1EA~1.XML")) returned 1 [0245.858] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2203a0 [0245.858] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0245.858] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x223f80 [0245.858] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0245.858] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224238 | out: hHeap=0x1f0000) returned 1 [0245.859] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2203a0 | out: hHeap=0x1f0000) returned 1 [0245.859] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e65c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0245.860] GetFileType (hFile=0x224) returned 0x1 [0245.860] CloseHandle (hObject=0x224) returned 1 [0245.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2245d8 [0245.861] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1e6ec | out: lpFileInformation=0x1a1e6ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8351d7a8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xfdea)) returned 1 [0245.861] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2245d8 | out: hHeap=0x1f0000) returned 1 [0245.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224408 [0245.861] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1e6fc | out: lpFileInformation=0x1a1e6fc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8351d7a8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xfdea)) returned 1 [0245.861] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224408 | out: hHeap=0x1f0000) returned 1 [0245.862] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224a60 [0245.862] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224a60 | out: hHeap=0x1f0000) returned 1 [0245.862] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83ea71ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83ea71ba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP6EFE~1.XML")) returned 1 [0245.862] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2203a0 [0245.862] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0245.862] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2247a8 [0245.862] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0245.863] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223f80 | out: hHeap=0x1f0000) returned 1 [0245.863] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2203a0 | out: hHeap=0x1f0000) returned 1 [0245.863] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e65c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0245.864] GetFileType (hFile=0x224) returned 0x1 [0245.864] CloseHandle (hObject=0x224) returned 1 [0245.865] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224238 [0245.865] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1e6ec | out: lpFileInformation=0x1a1e6ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83ea71ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83ea71ba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0246.289] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224238 | out: hHeap=0x1f0000) returned 1 [0246.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224068 [0246.290] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1e6fc | out: lpFileInformation=0x1a1e6fc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83ea71ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83ea71ba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0246.290] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224068 | out: hHeap=0x1f0000) returned 1 [0246.290] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224978 [0246.290] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224978 | out: hHeap=0x1f0000) returned 1 [0246.290] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf982bd9c, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf98c485a, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml", cAlternateFileName="APB63F~1.XML")) returned 1 [0246.290] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2203a0 [0246.290] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0246.290] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224320 [0246.290] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0246.290] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2247a8 | out: hHeap=0x1f0000) returned 1 [0246.291] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2203a0 | out: hHeap=0x1f0000) returned 1 [0246.291] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00b4-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e65c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0246.291] GetFileType (hFile=0x1fc) returned 0x1 [0246.292] CloseHandle (hObject=0x1fc) returned 1 [0246.292] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224890 [0246.292] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00b4-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1e6ec | out: lpFileInformation=0x1a1e6ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf982bd9c, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf98c485a, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0246.293] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224890 | out: hHeap=0x1f0000) returned 1 [0246.293] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x223be0 [0246.293] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00b4-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1e6fc | out: lpFileInformation=0x1a1e6fc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf982bd9c, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf98c485a, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0246.293] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223be0 | out: hHeap=0x1f0000) returned 1 [0246.293] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224408 [0246.293] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224408 | out: hHeap=0x1f0000) returned 1 [0246.293] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml", cAlternateFileName="APB913~1.XML")) returned 1 [0246.293] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2203a0 [0246.294] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0246.294] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224408 [0246.294] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0246.294] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224320 | out: hHeap=0x1f0000) returned 1 [0246.294] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2203a0 | out: hHeap=0x1f0000) returned 1 [0246.294] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e65c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0246.295] GetFileType (hFile=0x1fc) returned 0x1 [0246.295] CloseHandle (hObject=0x1fc) returned 1 [0246.295] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x223db0 [0246.296] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1e6ec | out: lpFileInformation=0x1a1e6ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2400)) returned 1 [0246.296] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223db0 | out: hHeap=0x1f0000) returned 1 [0246.296] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2244f0 [0246.296] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1e6fc | out: lpFileInformation=0x1a1e6fc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2400)) returned 1 [0246.296] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2244f0 | out: hHeap=0x1f0000) returned 1 [0246.296] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224238 [0246.296] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224238 | out: hHeap=0x1f0000) returned 1 [0246.296] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x838fd5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x838fd5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP4637~1.XML")) returned 1 [0246.297] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2203a0 [0246.297] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0246.297] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224978 [0246.297] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0246.297] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224408 | out: hHeap=0x1f0000) returned 1 [0246.297] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2203a0 | out: hHeap=0x1f0000) returned 1 [0246.298] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e65c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0246.298] GetFileType (hFile=0x1fc) returned 0x1 [0246.299] CloseHandle (hObject=0x1fc) returned 1 [0246.299] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x223e98 [0246.299] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1e6ec | out: lpFileInformation=0x1a1e6ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x838fd5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x838fd5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0246.299] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223e98 | out: hHeap=0x1f0000) returned 1 [0246.299] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224a60 [0246.299] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1e6fc | out: lpFileInformation=0x1a1e6fc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x838fd5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x838fd5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0246.300] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224a60 | out: hHeap=0x1f0000) returned 1 [0246.300] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x223be0 [0246.300] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223be0 | out: hHeap=0x1f0000) returned 1 [0246.300] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x618a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP2FE2~1.XML")) returned 1 [0246.300] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2203a0 [0246.300] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0246.300] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x223f80 [0246.300] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0246.300] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224978 | out: hHeap=0x1f0000) returned 1 [0246.300] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2203a0 | out: hHeap=0x1f0000) returned 1 [0246.301] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e65c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0246.301] GetFileType (hFile=0x1fc) returned 0x1 [0246.301] CloseHandle (hObject=0x1fc) returned 1 [0246.302] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x223db0 [0246.302] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1e6ec | out: lpFileInformation=0x1a1e6ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x618a8)) returned 1 [0246.302] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223db0 | out: hHeap=0x1f0000) returned 1 [0246.302] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224890 [0246.302] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1e6fc | out: lpFileInformation=0x1a1e6fc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x618a8)) returned 1 [0246.302] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224890 | out: hHeap=0x1f0000) returned 1 [0246.302] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224890 [0246.302] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224890 | out: hHeap=0x1f0000) returned 1 [0246.303] GetLastError () returned 0x0 [0246.303] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0246.327] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228680 [0246.327] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e828 [0246.327] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224068 [0246.327] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239048 [0246.327] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0246.327] CryptAcquireContextA (in: phProv=0x1a1df10, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1a1df10*=0x212d78) returned 1 [0246.329] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238280 | out: pbBuffer=0x238280) returned 1 [0246.329] CryptReleaseContext (hProv=0x212d78, dwFlags=0x0) returned 1 [0246.329] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0246.329] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x258298 [0246.329] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x233580 [0246.329] QueryPerformanceCounter (in: lpPerformanceCount=0x1a1dea4 | out: lpPerformanceCount=0x1a1dea4*=40369790817) returned 1 [0246.329] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1a1dee4 | out: lpSystemTimeAsFileTime=0x1a1dee4) [0246.329] QueryPerformanceCounter (in: lpPerformanceCount=0x1a1dea4 | out: lpPerformanceCount=0x1a1dea4*=40369825928) returned 1 [0246.329] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1a1dee4 | out: lpSystemTimeAsFileTime=0x1a1dee4) [0246.330] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239080 [0246.330] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x24fd60 [0246.330] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2337b0 [0246.330] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x2abb18 [0246.330] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210240 [0246.330] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2068c8 [0246.330] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210258 [0246.330] GetLastError () returned 0x0 [0246.331] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x2b14b0 [0246.331] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x166) returned 0x22d368 [0246.331] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b14b0 | out: hHeap=0x1f0000) returned 1 [0246.331] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389c0 [0246.331] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387f0 [0246.332] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0000-1000-0000000ff1ce.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1ddb0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0246.334] GetFileType (hFile=0x1fc) returned 0x1 [0246.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388f0 [0246.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238800 [0246.335] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1dde0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0246.336] GetFileType (hFile=0x1e8) returned 0x1 [0246.336] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d90 [0246.336] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f50 [0246.336] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad1e8 [0246.336] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238810 [0246.337] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238830 [0246.337] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0000-1000-0000000ff1ce.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1dd2c, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0246.337] GetFileType (hFile=0x1d8) returned 0x1 [0246.338] GetLastError () returned 0xb7 [0246.338] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe4) returned 0x21b438 [0246.338] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d10 [0246.338] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bb0 [0246.338] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c10 [0246.338] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad358 [0246.339] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238950 [0246.339] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238820 [0246.340] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0000-1000-0000000ff1ce.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1dd2c, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0246.340] GetFileType (hFile=0x1c0) returned 0x1 [0246.340] GetLastError () returned 0xb7 [0246.340] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204dd0 [0246.340] GetLastError () returned 0xb7 [0246.340] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f10 [0246.341] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cf0 [0246.341] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c50 [0246.341] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb8) returned 0x237860 [0246.341] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238910 [0246.341] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388e0 [0246.342] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1dd24, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0246.342] GetFileType (hFile=0x174) returned 0x1 [0246.342] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28dfd0 [0246.342] ReadFile (in: hFile=0x174, lpBuffer=0x28dfd0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1dc80, lpOverlapped=0x0 | out: lpBuffer=0x28dfd0*, lpNumberOfBytesRead=0x1a1dc80*=0x1000, lpOverlapped=0x0) returned 1 [0246.345] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24b5e0 [0246.346] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28efd8 [0246.346] GetLastError () returned 0x0 [0246.740] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101b0 [0246.740] GetLastError () returned 0x0 [0246.741] CloseHandle (hObject=0x1fc) returned 1 [0246.742] CloseHandle (hObject=0x1e8) returned 1 [0246.743] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238890 [0246.743] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238850 [0246.867] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1dde0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0246.873] GetFileType (hFile=0x210) returned 0x1 [0246.874] GetLastError () returned 0xb7 [0246.874] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28bfc0 [0246.875] GetLastError () returned 0xb7 [0246.876] CloseHandle (hObject=0x210) returned 1 [0246.877] DeleteFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0000-1000-0000000ff1ce.xml")) returned 0 [0246.877] GetLastError () returned 0x20 [0246.877] GetLastError () returned 0x20 [0246.878] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228908 [0246.878] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238280 [0246.878] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238118 [0246.878] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x228b00 [0246.878] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d30 [0246.878] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f50 [0246.878] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x2388a0 [0246.879] GetLastError () returned 0x20 [0246.879] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239160 [0246.879] GetLastError () returned 0x20 [0246.879] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238d70 [0246.879] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214fd8 [0246.879] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2382a8 [0246.879] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285098 [0246.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388b0 [0246.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380f0 [0246.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0246.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238940 [0246.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0246.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210018 [0246.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238078 [0246.881] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285ae8 [0246.881] GetLastError () returned 0x20 [0246.881] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238990 [0246.883] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x2389b0 [0246.883] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238960 [0246.883] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389b0 | out: hHeap=0x1f0000) returned 1 [0246.884] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389b0 [0246.884] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238960 | out: hHeap=0x1f0000) returned 1 [0246.884] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238990 | out: hHeap=0x1f0000) returned 1 [0246.884] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238960 [0246.884] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x20ff28 [0246.884] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238960 | out: hHeap=0x1f0000) returned 1 [0246.885] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210078 [0246.885] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff28 | out: hHeap=0x1f0000) returned 1 [0246.885] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389b0 | out: hHeap=0x1f0000) returned 1 [0246.885] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2100a8 [0246.885] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff70 [0246.885] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2100a8 | out: hHeap=0x1f0000) returned 1 [0246.885] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2100a8 [0246.886] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff70 | out: hHeap=0x1f0000) returned 1 [0246.886] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210078 | out: hHeap=0x1f0000) returned 1 [0246.886] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20fef8 [0246.886] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204e70 [0246.886] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20fef8 | out: hHeap=0x1f0000) returned 1 [0246.886] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204dd0 [0246.887] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e70 | out: hHeap=0x1f0000) returned 1 [0246.887] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2100a8 | out: hHeap=0x1f0000) returned 1 [0246.887] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ef0 [0246.887] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2382f8 [0246.887] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ef0 | out: hHeap=0x1f0000) returned 1 [0246.887] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204c90 [0246.887] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0246.887] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204dd0 | out: hHeap=0x1f0000) returned 1 [0246.888] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204ef0 [0246.888] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206688 [0246.888] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ef0 | out: hHeap=0x1f0000) returned 1 [0246.888] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238320 [0246.888] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206688 | out: hHeap=0x1f0000) returned 1 [0246.888] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c90 | out: hHeap=0x1f0000) returned 1 [0246.888] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238960 [0246.889] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x20fef8 [0246.889] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238960 | out: hHeap=0x1f0000) returned 1 [0246.889] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210078 [0246.889] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20fef8 | out: hHeap=0x1f0000) returned 1 [0246.889] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204cd0 [0246.889] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210078 | out: hHeap=0x1f0000) returned 1 [0246.890] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206658 [0246.890] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cd0 | out: hHeap=0x1f0000) returned 1 [0246.890] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206658 | out: hHeap=0x1f0000) returned 1 [0246.890] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0246.890] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0246.890] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0246.890] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285098 | out: hHeap=0x1f0000) returned 1 [0246.890] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0246.891] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238f30 [0246.891] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0246.891] CryptAcquireContextA (in: phProv=0x1a1df10, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1a1df10*=0x212d78) returned 1 [0246.892] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238168 | out: pbBuffer=0x238168) returned 1 [0246.892] CryptReleaseContext (hProv=0x212d78, dwFlags=0x0) returned 1 [0246.892] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0246.892] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238280 [0246.893] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238370 [0246.893] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2390f0 [0246.893] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0246.893] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0246.893] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2390f0 | out: hHeap=0x1f0000) returned 1 [0246.893] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8d18 [0246.893] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20fef8 [0246.893] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x214d68 [0246.894] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238320 [0246.894] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2854b8 [0246.894] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f30 [0246.894] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214b60 [0246.894] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238410 [0246.894] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285bf0 [0246.894] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238960 [0246.894] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0246.895] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210078 [0246.895] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238990 [0246.895] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0246.895] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffa0 [0246.895] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffa0 | out: hHeap=0x1f0000) returned 1 [0246.895] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0246.895] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238990 | out: hHeap=0x1f0000) returned 1 [0246.896] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210078 | out: hHeap=0x1f0000) returned 1 [0246.896] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0246.896] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238960 | out: hHeap=0x1f0000) returned 1 [0246.896] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285bf0 | out: hHeap=0x1f0000) returned 1 [0246.896] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0246.896] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214b60 | out: hHeap=0x1f0000) returned 1 [0246.896] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238e88 [0246.896] GetLastError () returned 0x0 [0246.897] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239080 [0246.898] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0246.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0246.898] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0246.898] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0246.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0246.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0246.898] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x24e5c0 [0246.899] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2855c0 [0246.899] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0246.899] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0246.899] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0246.899] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0246.899] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2853b0 [0246.899] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0246.899] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0246.900] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x2300c8 [0246.900] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x254980 [0246.900] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x232ef0 [0246.900] QueryPerformanceCounter (in: lpPerformanceCount=0x1a1da60 | out: lpPerformanceCount=0x1a1da60*=40426897060) returned 1 [0246.900] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1a1daa0 | out: lpSystemTimeAsFileTime=0x1a1daa0) [0246.901] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238960 [0246.901] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0246.901] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204db0 [0246.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204db0 | out: hHeap=0x1f0000) returned 1 [0246.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0246.901] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0246.901] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ef0 [0246.902] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ef0 | out: hHeap=0x1f0000) returned 1 [0246.902] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0246.902] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238960 | out: hHeap=0x1f0000) returned 1 [0246.902] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0246.902] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238f68 [0246.902] GetLastError () returned 0x0 [0246.903] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0246.903] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0246.903] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0246.903] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238398 [0246.903] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x237fd8 [0246.903] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0246.903] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0246.904] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238000 [0246.904] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0246.904] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x222ee8 [0246.904] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0246.904] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0246.904] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0246.904] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0246.904] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0246.905] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238280 [0246.905] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2382a8 [0246.905] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0246.905] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0246.905] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0246.905] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0246.905] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x234b90 [0246.905] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b90 | out: hHeap=0x1f0000) returned 1 [0246.906] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0246.906] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0246.906] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210078 [0246.906] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228440 [0246.906] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2380a0 [0246.906] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238280 [0246.906] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238140 [0246.906] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238168 [0246.907] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0246.907] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0246.907] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0246.907] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2382a8 [0246.907] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238190 [0246.907] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0246.907] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0246.907] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0246.908] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206808 [0246.908] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x2aa0d0 [0246.908] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aa0d0 | out: hHeap=0x1f0000) returned 1 [0246.908] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206808 | out: hHeap=0x1f0000) returned 1 [0246.908] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0246.908] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0246.908] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0246.909] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0246.909] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204d70 [0246.909] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0246.909] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0246.909] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0246.909] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a8fb0 [0246.910] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0246.910] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0246.910] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0246.910] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228440 | out: hHeap=0x1f0000) returned 1 [0246.910] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0246.910] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d70 | out: hHeap=0x1f0000) returned 1 [0246.910] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210078 | out: hHeap=0x1f0000) returned 1 [0246.911] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0246.911] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aa920 [0246.911] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aa920 | out: hHeap=0x1f0000) returned 1 [0246.911] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ee8 | out: hHeap=0x1f0000) returned 1 [0246.911] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0246.911] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0246.911] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0246.911] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0246.912] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0246.912] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0246.912] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0246.912] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aa5a8 [0246.912] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a9eb8 [0247.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aa5a8 | out: hHeap=0x1f0000) returned 1 [0247.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a9eb8 | out: hHeap=0x1f0000) returned 1 [0247.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8fb0 | out: hHeap=0x1f0000) returned 1 [0247.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0247.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2853b0 | out: hHeap=0x1f0000) returned 1 [0247.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24e5c0 | out: hHeap=0x1f0000) returned 1 [0247.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x233238 [0247.363] GetLastError () returned 0x0 [0247.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238aa0 [0247.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ba0 [0247.364] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0000-1000-0000000ff1ce.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de10, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0247.364] GetFileType (hFile=0x23c) returned 0x1 [0247.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x294000 [0247.365] SetFilePointerEx (in: hFile=0x23c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1a1dd98 | out: lpNewFilePointer=0x0) returned 1 [0247.365] GetLastError () returned 0xb7 [0247.365] CloseHandle (hObject=0x23c) returned 1 [0247.367] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ba0 | out: hHeap=0x1f0000) returned 1 [0247.367] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238aa0 | out: hHeap=0x1f0000) returned 1 [0247.367] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2855c0 | out: hHeap=0x1f0000) returned 1 [0247.367] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2854b8 | out: hHeap=0x1f0000) returned 1 [0247.367] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0247.367] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f30 | out: hHeap=0x1f0000) returned 1 [0247.367] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d68 | out: hHeap=0x1f0000) returned 1 [0247.367] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20fef8 | out: hHeap=0x1f0000) returned 1 [0247.367] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0247.367] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233238 | out: hHeap=0x1f0000) returned 1 [0247.367] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0247.368] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0247.368] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x254980 | out: hHeap=0x1f0000) returned 1 [0247.368] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232ef0 | out: hHeap=0x1f0000) returned 1 [0247.368] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238f30 | out: hHeap=0x1f0000) returned 1 [0247.368] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388a0 | out: hHeap=0x1f0000) returned 1 [0247.368] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210018 | out: hHeap=0x1f0000) returned 1 [0247.368] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0247.368] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238940 | out: hHeap=0x1f0000) returned 1 [0247.368] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0247.368] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380f0 | out: hHeap=0x1f0000) returned 1 [0247.368] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388b0 | out: hHeap=0x1f0000) returned 1 [0247.368] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285ae8 | out: hHeap=0x1f0000) returned 1 [0247.369] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0247.369] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214fd8 | out: hHeap=0x1f0000) returned 1 [0247.369] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228b00 | out: hHeap=0x1f0000) returned 1 [0247.369] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0247.369] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0247.369] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228908 | out: hHeap=0x1f0000) returned 1 [0247.369] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238850 | out: hHeap=0x1f0000) returned 1 [0247.369] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238890 | out: hHeap=0x1f0000) returned 1 [0247.369] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28dfd0 | out: hHeap=0x1f0000) returned 1 [0247.370] CloseHandle (hObject=0x174) returned 1 [0247.370] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388e0 | out: hHeap=0x1f0000) returned 1 [0247.370] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238910 | out: hHeap=0x1f0000) returned 1 [0247.370] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237860 | out: hHeap=0x1f0000) returned 1 [0247.370] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24b5e0 | out: hHeap=0x1f0000) returned 1 [0247.370] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0247.370] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f10 | out: hHeap=0x1f0000) returned 1 [0247.371] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28efd8 | out: hHeap=0x1f0000) returned 1 [0247.371] CloseHandle (hObject=0x1c0) returned 1 [0247.371] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238820 | out: hHeap=0x1f0000) returned 1 [0247.371] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238950 | out: hHeap=0x1f0000) returned 1 [0247.371] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad358 | out: hHeap=0x1f0000) returned 1 [0247.372] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d10 | out: hHeap=0x1f0000) returned 1 [0247.372] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21b438 | out: hHeap=0x1f0000) returned 1 [0247.372] CloseHandle (hObject=0x1d8) returned 1 [0247.372] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238830 | out: hHeap=0x1f0000) returned 1 [0247.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238810 | out: hHeap=0x1f0000) returned 1 [0247.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad1e8 | out: hHeap=0x1f0000) returned 1 [0247.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238800 | out: hHeap=0x1f0000) returned 1 [0247.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388f0 | out: hHeap=0x1f0000) returned 1 [0247.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387f0 | out: hHeap=0x1f0000) returned 1 [0247.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389c0 | out: hHeap=0x1f0000) returned 1 [0247.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d368 | out: hHeap=0x1f0000) returned 1 [0247.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24fd60 | out: hHeap=0x1f0000) returned 1 [0247.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2337b0 | out: hHeap=0x1f0000) returned 1 [0247.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2068c8 | out: hHeap=0x1f0000) returned 1 [0247.374] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0247.374] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210240 | out: hHeap=0x1f0000) returned 1 [0247.374] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abb18 | out: hHeap=0x1f0000) returned 1 [0247.374] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x258298 | out: hHeap=0x1f0000) returned 1 [0247.374] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233580 | out: hHeap=0x1f0000) returned 1 [0247.374] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239048 | out: hHeap=0x1f0000) returned 1 [0247.374] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224068 | out: hHeap=0x1f0000) returned 1 [0247.374] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e828 | out: hHeap=0x1f0000) returned 1 [0247.374] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228680 | out: hHeap=0x1f0000) returned 1 [0247.374] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0247.374] DeleteFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0000-1000-0000000ff1ce.xml")) returned 1 [0247.376] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP2C4B~1.XML")) returned 1 [0247.376] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2203a0 [0247.376] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0247.377] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224890 [0247.377] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0247.377] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223f80 | out: hHeap=0x1f0000) returned 1 [0247.377] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2203a0 | out: hHeap=0x1f0000) returned 1 [0247.377] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e65c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0247.378] GetFileType (hFile=0x1d8) returned 0x1 [0247.378] CloseHandle (hObject=0x1d8) returned 1 [0247.378] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224978 [0247.379] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1e6ec | out: lpFileInformation=0x1a1e6ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0247.379] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224978 | out: hHeap=0x1f0000) returned 1 [0247.379] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x223f80 [0247.379] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1e6fc | out: lpFileInformation=0x1a1e6fc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0247.379] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223f80 | out: hHeap=0x1f0000) returned 1 [0247.379] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x223f80 [0247.379] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223f80 | out: hHeap=0x1f0000) returned 1 [0247.379] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml", cAlternateFileName="APF00A~1.XML")) returned 1 [0247.380] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2203a0 [0247.380] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0247.380] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2245d8 [0247.380] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0247.380] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224890 | out: hHeap=0x1f0000) returned 1 [0247.380] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2203a0 | out: hHeap=0x1f0000) returned 1 [0247.382] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e65c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0247.383] GetFileType (hFile=0x1d8) returned 0x1 [0247.383] CloseHandle (hObject=0x1d8) returned 1 [0247.384] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x223be0 [0247.384] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1e6ec | out: lpFileInformation=0x1a1e6ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5aa)) returned 1 [0247.384] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223be0 | out: hHeap=0x1f0000) returned 1 [0247.384] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2246c0 [0247.384] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1e6fc | out: lpFileInformation=0x1a1e6fc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5aa)) returned 1 [0247.385] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2246c0 | out: hHeap=0x1f0000) returned 1 [0247.385] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224150 [0247.385] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224150 | out: hHeap=0x1f0000) returned 1 [0247.385] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x834ab261, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml", cAlternateFileName="APPXMA~2.XML")) returned 1 [0247.385] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2203a0 [0247.385] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0247.385] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2247a8 [0247.385] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0247.385] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2245d8 | out: hHeap=0x1f0000) returned 1 [0247.386] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2203a0 | out: hHeap=0x1f0000) returned 1 [0247.386] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e65c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0247.387] GetFileType (hFile=0x1d8) returned 0x1 [0247.387] CloseHandle (hObject=0x1d8) returned 1 [0247.387] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224890 [0247.388] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1e6ec | out: lpFileInformation=0x1a1e6ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x834ab261, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0247.388] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224890 | out: hHeap=0x1f0000) returned 1 [0247.388] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x223f80 [0247.388] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1e6fc | out: lpFileInformation=0x1a1e6fc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x834ab261, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0247.388] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223f80 | out: hHeap=0x1f0000) returned 1 [0247.388] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224238 [0247.389] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224238 | out: hHeap=0x1f0000) returned 1 [0247.389] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xeaa, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP202C~1.XML")) returned 1 [0247.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2203a0 [0247.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0247.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224320 [0247.389] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0247.389] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2247a8 | out: hHeap=0x1f0000) returned 1 [0247.389] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2203a0 | out: hHeap=0x1f0000) returned 1 [0247.390] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e65c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0247.391] GetFileType (hFile=0x1d8) returned 0x1 [0247.391] CloseHandle (hObject=0x1d8) returned 1 [0247.392] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x223f80 [0247.392] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1e6ec | out: lpFileInformation=0x1a1e6ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xeaa)) returned 1 [0247.392] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223f80 | out: hHeap=0x1f0000) returned 1 [0247.392] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x223cc8 [0247.392] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1e6fc | out: lpFileInformation=0x1a1e6fc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xeaa)) returned 1 [0247.392] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223cc8 | out: hHeap=0x1f0000) returned 1 [0247.392] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224238 [0247.392] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224238 | out: hHeap=0x1f0000) returned 1 [0247.393] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84391d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml", cAlternateFileName="APBC30~1.XML")) returned 1 [0247.393] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2203a0 [0247.393] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0247.393] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224150 [0247.393] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0247.393] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224320 | out: hHeap=0x1f0000) returned 1 [0247.393] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2203a0 | out: hHeap=0x1f0000) returned 1 [0247.394] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e65c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0247.395] GetFileType (hFile=0x1d8) returned 0x1 [0247.395] CloseHandle (hObject=0x1d8) returned 1 [0247.396] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224408 [0247.396] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1e6ec | out: lpFileInformation=0x1a1e6ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84391d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0247.396] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224408 | out: hHeap=0x1f0000) returned 1 [0247.396] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2244f0 [0247.396] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1e6fc | out: lpFileInformation=0x1a1e6fc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84391d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0247.769] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2244f0 | out: hHeap=0x1f0000) returned 1 [0247.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224408 [0247.769] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224408 | out: hHeap=0x1f0000) returned 1 [0247.769] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml", cAlternateFileName="APCB35~1.XML")) returned 1 [0247.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2203a0 [0247.770] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0247.770] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x223db0 [0247.770] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0247.770] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224150 | out: hHeap=0x1f0000) returned 1 [0247.770] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2203a0 | out: hHeap=0x1f0000) returned 1 [0247.771] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0115-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e65c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0247.772] GetFileType (hFile=0x1d4) returned 0x1 [0247.773] CloseHandle (hObject=0x1d4) returned 1 [0247.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x223cc8 [0247.773] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0115-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1e6ec | out: lpFileInformation=0x1a1e6ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0247.773] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223cc8 | out: hHeap=0x1f0000) returned 1 [0247.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2245d8 [0247.773] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0115-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1e6fc | out: lpFileInformation=0x1a1e6fc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0247.776] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2245d8 | out: hHeap=0x1f0000) returned 1 [0247.776] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2247a8 [0247.776] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2247a8 | out: hHeap=0x1f0000) returned 1 [0247.776] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP5E1E~1.XML")) returned 1 [0247.776] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2203a0 [0247.776] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0247.776] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2246c0 [0247.776] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0247.776] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223db0 | out: hHeap=0x1f0000) returned 1 [0247.776] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2203a0 | out: hHeap=0x1f0000) returned 1 [0247.777] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0117-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e65c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0247.870] GetFileType (hFile=0x1d4) returned 0x1 [0247.870] CloseHandle (hObject=0x1d4) returned 1 [0247.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2245d8 [0247.871] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0117-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1e6ec | out: lpFileInformation=0x1a1e6ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0247.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2245d8 | out: hHeap=0x1f0000) returned 1 [0247.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224068 [0247.871] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0117-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1e6fc | out: lpFileInformation=0x1a1e6fc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0247.872] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224068 | out: hHeap=0x1f0000) returned 1 [0247.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x223be0 [0247.872] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223be0 | out: hHeap=0x1f0000) returned 1 [0247.872] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83485006, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83485006, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdb1cc551, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x1, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml", cAlternateFileName="APPXMA~3.XML")) returned 1 [0247.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2203a0 [0247.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0247.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224408 [0247.873] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0247.873] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2246c0 | out: hHeap=0x1f0000) returned 1 [0247.873] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2203a0 | out: hHeap=0x1f0000) returned 1 [0247.874] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012a-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e65c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0247.874] GetLastError () returned 0x2 [0247.874] GetLastError () returned 0x2 [0247.874] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda8ae496, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xda8ae496, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xdacf5f9e, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x80e66, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="AP3033~1.ODV")) returned 1 [0247.874] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x2b1e60 [0247.875] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2203a0 [0247.875] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x160) returned 0x22d368 [0247.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2203a0 | out: hHeap=0x1f0000) returned 1 [0247.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224408 | out: hHeap=0x1f0000) returned 1 [0247.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b1e60 | out: hHeap=0x1f0000) returned 1 [0247.876] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012a-0000-1000-0000000ff1ce.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e65c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0247.876] GetFileType (hFile=0x1d4) returned 0x1 [0247.877] CloseHandle (hObject=0x1d4) returned 1 [0247.878] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x160) returned 0x21bf68 [0247.878] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012a-0000-1000-0000000ff1ce.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x1a1e6ec | out: lpFileInformation=0x1a1e6ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda8ae496, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xda8ae496, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xdb9d87c9, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x80f69)) returned 1 [0247.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21bf68 | out: hHeap=0x1f0000) returned 1 [0247.878] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x160) returned 0x21bf68 [0247.878] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012a-0000-1000-0000000ff1ce.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x1a1e6fc | out: lpFileInformation=0x1a1e6fc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda8ae496, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xda8ae496, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xdb9d87c9, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x80f69)) returned 1 [0247.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21bf68 | out: hHeap=0x1f0000) returned 1 [0247.879] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x160) returned 0x21bf68 [0247.879] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21bf68 | out: hHeap=0x1f0000) returned 1 [0247.879] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml", cAlternateFileName="APE0B7~1.XML")) returned 1 [0247.879] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2203a0 [0247.879] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0247.879] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224068 [0247.879] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0247.879] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d368 | out: hHeap=0x1f0000) returned 1 [0247.880] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2203a0 | out: hHeap=0x1f0000) returned 1 [0247.880] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012b-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e65c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0247.881] GetFileType (hFile=0x1d4) returned 0x1 [0247.881] CloseHandle (hObject=0x1d4) returned 1 [0247.882] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x223be0 [0247.882] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012b-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1e6ec | out: lpFileInformation=0x1a1e6ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0247.882] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223be0 | out: hHeap=0x1f0000) returned 1 [0247.882] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x223f80 [0247.883] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012b-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1e6fc | out: lpFileInformation=0x1a1e6fc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0247.883] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223f80 | out: hHeap=0x1f0000) returned 1 [0247.883] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x223cc8 [0247.883] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223cc8 | out: hHeap=0x1f0000) returned 1 [0247.883] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83ea71ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83ea71ba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd2f, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP8BF9~1.XML")) returned 1 [0247.883] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2203a0 [0247.884] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220490 [0247.884] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224150 [0247.884] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220490 | out: hHeap=0x1f0000) returned 1 [0247.884] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224068 | out: hHeap=0x1f0000) returned 1 [0247.884] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2203a0 | out: hHeap=0x1f0000) returned 1 [0247.885] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-3101-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e65c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0247.885] GetFileType (hFile=0x1d4) returned 0x1 [0247.886] CloseHandle (hObject=0x1d4) returned 1 [0247.886] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2246c0 [0247.888] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-3101-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1e6ec | out: lpFileInformation=0x1a1e6ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83ea71ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83ea71ba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd2f)) returned 1 [0247.888] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2246c0 | out: hHeap=0x1f0000) returned 1 [0247.888] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224320 [0247.888] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-3101-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1e6fc | out: lpFileInformation=0x1a1e6fc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83ea71ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83ea71ba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd2f)) returned 1 [0247.888] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224320 | out: hHeap=0x1f0000) returned 1 [0247.889] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224068 [0247.889] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224068 | out: hHeap=0x1f0000) returned 1 [0247.889] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834f7581, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834f7581, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdad1c133, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x212979, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.common.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="APBB83~1.ODV")) returned 1 [0247.889] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad638 [0247.889] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2203a0 [0247.889] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120) returned 0x210ba8 [0247.889] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2203a0 | out: hHeap=0x1f0000) returned 1 [0247.890] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224150 | out: hHeap=0x1f0000) returned 1 [0247.890] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad638 | out: hHeap=0x1f0000) returned 1 [0247.890] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.common.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e65c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0247.891] GetFileType (hFile=0x1d4) returned 0x1 [0247.891] CloseHandle (hObject=0x1d4) returned 1 [0247.892] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120) returned 0x2104b8 [0247.892] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.common.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x1a1e6ec | out: lpFileInformation=0x1a1e6ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834f7581, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834f7581, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdad1c133, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x212979)) returned 1 [0247.892] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0247.892] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120) returned 0x210390 [0247.893] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.common.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x1a1e6fc | out: lpFileInformation=0x1a1e6fc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834f7581, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834f7581, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdad1c133, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x212979)) returned 1 [0247.893] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0247.893] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120) returned 0x210a80 [0247.893] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0247.893] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84391d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2667, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifestLoc.en-us.xml", cAlternateFileName="AP942B~1.XML")) returned 1 [0247.893] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2288c0 [0247.894] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2203a0 [0247.894] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218fa8 [0247.894] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2203a0 | out: hHeap=0x1f0000) returned 1 [0247.894] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0247.894] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2288c0 | out: hHeap=0x1f0000) returned 1 [0247.895] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifestloc.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e65c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0247.895] GetFileType (hFile=0x1d4) returned 0x1 [0247.896] CloseHandle (hObject=0x1d4) returned 1 [0247.897] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21aab8 [0247.897] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifestloc.en-us.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1e6ec | out: lpFileInformation=0x1a1e6ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84391d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2667)) returned 1 [0247.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21aab8 | out: hHeap=0x1f0000) returned 1 [0247.897] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a818 [0247.897] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifestloc.en-us.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1e6fc | out: lpFileInformation=0x1a1e6fc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84391d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2667)) returned 1 [0247.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a818 | out: hHeap=0x1f0000) returned 1 [0247.898] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a818 [0247.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a818 | out: hHeap=0x1f0000) returned 1 [0247.898] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x175, dwReserved0=0x0, dwReserved1=0x0, cFileName="AuthoredExtensions.xml", cAlternateFileName="AUTHOR~1.XML")) returned 1 [0247.898] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238f68 [0247.898] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2203a0 [0247.899] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219478 [0247.899] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2203a0 | out: hHeap=0x1f0000) returned 1 [0247.899] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218fa8 | out: hHeap=0x1f0000) returned 1 [0247.899] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238f68 | out: hHeap=0x1f0000) returned 1 [0247.900] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\authoredextensions.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e65c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0247.900] GetFileType (hFile=0x1d4) returned 0x1 [0247.901] CloseHandle (hObject=0x1d4) returned 1 [0247.902] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21aa10 [0247.902] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\authoredextensions.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1e6ec | out: lpFileInformation=0x1a1e6ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x175)) returned 1 [0247.902] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21aa10 | out: hHeap=0x1f0000) returned 1 [0247.902] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a4d0 [0248.370] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\authoredextensions.xml"), fInfoLevelId=0x0, lpFileInformation=0x1a1e6fc | out: lpFileInformation=0x1a1e6fc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x175)) returned 1 [0248.370] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a4d0 | out: hHeap=0x1f0000) returned 1 [0248.370] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219e40 [0248.370] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219e40 | out: hHeap=0x1f0000) returned 1 [0248.371] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x175, dwReserved0=0x0, dwReserved1=0x0, cFileName="AuthoredExtensions.xml", cAlternateFileName="AUTHOR~1.XML")) returned 0 [0248.371] FindClose (in: hFindFile=0x24e680 | out: hFindFile=0x24e680) returned 1 [0248.371] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219478 | out: hHeap=0x1f0000) returned 1 [0248.372] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261cc0 | out: hHeap=0x1f0000) returned 1 [0248.372] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0248.372] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228b90 | out: hHeap=0x1f0000) returned 1 [0248.372] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228b90 [0248.372] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380f0 [0248.372] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f020 [0248.372] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2150a8 [0248.373] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\*", lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ec80 [0248.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214b60 [0248.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2150a8 | out: hHeap=0x1f0000) returned 1 [0248.373] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0248.374] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0248.374] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214f08 [0248.374] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214b60 | out: hHeap=0x1f0000) returned 1 [0248.374] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0248.374] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0248.374] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86813dc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xdc231125, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xdc231125, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="client", cAlternateFileName="")) returned 1 [0248.374] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c30 [0248.374] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f08 | out: hHeap=0x1f0000) returned 1 [0248.375] lstrcmpW (lpString1="client", lpString2=".") returned 1 [0248.375] lstrcmpW (lpString1="client", lpString2="..") returned 1 [0248.375] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204dd0 [0248.375] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214fd8 [0248.375] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLIPART", cAlternateFileName="")) returned 1 [0248.375] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2150a8 [0248.375] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c30 | out: hHeap=0x1f0000) returned 1 [0248.375] lstrcmpW (lpString1="CLIPART", lpString2=".") returned 1 [0248.376] lstrcmpW (lpString1="CLIPART", lpString2="..") returned 1 [0248.376] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239010 [0248.376] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a28 [0248.376] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204dd0 | out: hHeap=0x1f0000) returned 1 [0248.376] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x114a91d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114a91d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Document Themes 16", cAlternateFileName="DOCUME~1")) returned 1 [0248.376] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238f68 [0248.376] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c30 [0248.376] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221838 [0248.376] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c30 | out: hHeap=0x1f0000) returned 1 [0248.377] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2150a8 | out: hHeap=0x1f0000) returned 1 [0248.377] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238f68 | out: hHeap=0x1f0000) returned 1 [0248.377] lstrcmpW (lpString1="Document Themes 16", lpString2=".") returned 1 [0248.377] lstrcmpW (lpString1="Document Themes 16", lpString2="..") returned 1 [0248.377] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x48) returned 0x225c98 [0248.377] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2134e8 [0248.377] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239010 | out: hHeap=0x1f0000) returned 1 [0248.377] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x114f5747, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114f5747, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flattener", cAlternateFileName="FLATTE~1")) returned 1 [0248.378] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0248.378] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2150a8 [0248.378] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2215d8 [0248.378] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2150a8 | out: hHeap=0x1f0000) returned 1 [0248.378] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0248.378] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0248.378] lstrcmpW (lpString1="Flattener", lpString2=".") returned 1 [0248.379] lstrcmpW (lpString1="Flattener", lpString2="..") returned 1 [0248.379] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214f08 [0248.379] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2203a0 [0248.379] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225c98 | out: hHeap=0x1f0000) returned 1 [0248.379] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x115da4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115da4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fre", cAlternateFileName="")) returned 1 [0248.379] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c30 [0248.379] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0248.379] lstrcmpW (lpString1="fre", lpString2=".") returned 1 [0248.379] lstrcmpW (lpString1="fre", lpString2="..") returned 1 [0248.380] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0248.380] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2150a8 [0248.380] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f08 | out: hHeap=0x1f0000) returned 1 [0248.380] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1f5fb21, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b2abe77, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b2abe77, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Integration", cAlternateFileName="INTEGR~1")) returned 1 [0248.380] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0248.380] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214b60 [0248.380] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220fe8 [0248.380] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214b60 | out: hHeap=0x1f0000) returned 1 [0248.381] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c30 | out: hHeap=0x1f0000) returned 1 [0248.381] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0248.381] lstrcmpW (lpString1="Integration", lpString2=".") returned 1 [0248.381] lstrcmpW (lpString1="Integration", lpString2="..") returned 1 [0248.381] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0248.381] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe2687c83, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee308135, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xee308135, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Licenses16", cAlternateFileName="LICENS~1")) returned 1 [0248.381] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0248.381] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a90 [0248.382] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220e20 [0248.382] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a90 | out: hHeap=0x1f0000) returned 1 [0248.382] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0248.382] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0248.382] lstrcmpW (lpString1="Licenses16", lpString2=".") returned 1 [0248.382] lstrcmpW (lpString1="Licenses16", lpString2="..") returned 1 [0248.382] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd8) returned 0x217038 [0248.382] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220490 [0248.383] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0248.383] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee45f66d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x983c2c8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="loc", cAlternateFileName="")) returned 1 [0248.383] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a90 [0248.383] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0248.383] lstrcmpW (lpString1="loc", lpString2=".") returned 1 [0248.383] lstrcmpW (lpString1="loc", lpString2="..") returned 1 [0248.383] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214b60 [0248.383] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mcxml", cAlternateFileName="")) returned 1 [0248.384] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214f08 [0248.384] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a90 | out: hHeap=0x1f0000) returned 1 [0248.384] lstrcmpW (lpString1="mcxml", lpString2=".") returned 1 [0248.384] lstrcmpW (lpString1="mcxml", lpString2="..") returned 1 [0248.384] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c30 [0248.384] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3c29db74, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c29db74, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office16", cAlternateFileName="")) returned 1 [0248.385] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0248.385] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a90 [0248.385] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2212e0 [0248.385] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a90 | out: hHeap=0x1f0000) returned 1 [0248.385] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f08 | out: hHeap=0x1f0000) returned 1 [0248.385] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0248.385] lstrcmpW (lpString1="Office16", lpString2=".") returned 1 [0248.385] lstrcmpW (lpString1="Office16", lpString2="..") returned 1 [0248.385] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x138) returned 0x22d368 [0248.386] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220670 [0248.386] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0248.386] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b1a0d3d, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b1a0d3d, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rsod", cAlternateFileName="")) returned 1 [0248.386] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a90 [0248.386] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0248.386] lstrcmpW (lpString1="rsod", lpString2=".") returned 1 [0248.386] lstrcmpW (lpString1="rsod", lpString2="..") returned 1 [0248.386] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214f08 [0248.386] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xb48c20e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb48c20e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stationery", cAlternateFileName="STATIO~1")) returned 1 [0248.387] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0248.387] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236670 [0248.387] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2217a0 [0248.387] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236670 | out: hHeap=0x1f0000) returned 1 [0248.387] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a90 | out: hHeap=0x1f0000) returned 1 [0248.387] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0248.387] lstrcmpW (lpString1="Stationery", lpString2=".") returned 1 [0248.387] lstrcmpW (lpString1="Stationery", lpString2="..") returned 1 [0248.387] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2aed68 [0248.388] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0248.388] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0248.388] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2365a0 [0248.388] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221838 [0248.388] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2365a0 | out: hHeap=0x1f0000) returned 1 [0248.388] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0248.388] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0248.388] lstrcmpW (lpString1="Templates", lpString2=".") returned 1 [0248.388] lstrcmpW (lpString1="Templates", lpString2="..") returned 1 [0248.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2aea20 [0248.389] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VFS", cAlternateFileName="")) returned 1 [0248.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236670 [0248.389] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0248.389] lstrcmpW (lpString1="VFS", lpString2=".") returned 1 [0248.389] lstrcmpW (lpString1="VFS", lpString2="..") returned 1 [0248.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c8) returned 0x2324d8 [0248.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236400 [0248.389] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d368 | out: hHeap=0x1f0000) returned 1 [0248.390] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1a1e89c | out: lpFindFileData=0x1a1e89c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VFS", cAlternateFileName="")) returned 0 [0248.390] FindClose (in: hFindFile=0x24ec80 | out: hFindFile=0x24ec80) returned 1 [0248.390] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2288c0 [0248.390] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0248.391] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f1b8 [0248.391] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2aede0 [0248.391] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\*", lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86813dc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xdc231125, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xdccc4f39, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1f0000, dwReserved1=0x214c86, cFileName=".", cAlternateFileName="")) returned 0x24ea00 [0248.391] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236608 [0248.391] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2217a0 [0248.391] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236608 | out: hHeap=0x1f0000) returned 1 [0248.391] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aede0 | out: hHeap=0x1f0000) returned 1 [0248.392] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0248.392] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86813dc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xdc231125, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xdccc4f39, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1f0000, dwReserved1=0x214c86, cFileName="..", cAlternateFileName="")) returned 1 [0248.392] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236608 [0248.392] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221838 [0248.392] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236608 | out: hHeap=0x1f0000) returned 1 [0248.392] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0248.393] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0248.393] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0248.393] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0715cb9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0715cb9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0952017, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x1f0000, dwReserved1=0x214c86, cFileName="api-ms-win-core-file-l1-2-0.dll", cAlternateFileName="API-MS~1.DLL")) returned 1 [0248.393] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228908 [0248.393] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236608 [0248.393] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a188 [0248.393] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236608 | out: hHeap=0x1f0000) returned 1 [0248.393] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0248.393] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228908 | out: hHeap=0x1f0000) returned 1 [0248.394] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-file-l1-2-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0248.395] GetFileType (hFile=0x1fc) returned 0x1 [0248.395] CloseHandle (hObject=0x1fc) returned 1 [0248.396] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219f90 [0248.396] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-file-l1-2-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0715cb9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0715cb9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0952017, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0)) returned 1 [0248.396] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219f90 | out: hHeap=0x1f0000) returned 1 [0248.396] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a770 [0248.396] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-file-l1-2-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0715cb9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0715cb9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0952017, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0)) returned 1 [0248.396] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a770 | out: hHeap=0x1f0000) returned 1 [0248.397] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a4d0 [0248.397] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a4d0 | out: hHeap=0x1f0000) returned 1 [0248.397] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0952017, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0952017, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0a832cb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x1f0000, dwReserved1=0x214c86, cFileName="api-ms-win-core-file-l2-1-0.dll", cAlternateFileName="API-MS~3.DLL")) returned 1 [0248.397] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228c68 [0248.397] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236468 [0248.397] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219d98 [0248.397] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0248.397] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a188 | out: hHeap=0x1f0000) returned 1 [0248.398] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228c68 | out: hHeap=0x1f0000) returned 1 [0248.398] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l2-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-file-l2-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0248.399] GetFileType (hFile=0x1fc) returned 0x1 [0248.399] CloseHandle (hObject=0x1fc) returned 1 [0248.401] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a230 [0248.401] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l2-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-file-l2-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0952017, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0952017, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0a832cb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0)) returned 1 [0248.402] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a230 | out: hHeap=0x1f0000) returned 1 [0248.402] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a620 [0248.402] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l2-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-file-l2-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0952017, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0952017, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0a832cb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0)) returned 1 [0248.402] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a620 | out: hHeap=0x1f0000) returned 1 [0248.402] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a620 [0248.402] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a620 | out: hHeap=0x1f0000) returned 1 [0248.402] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd089348e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd089348e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd09c4608, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x52c0, dwReserved0=0x1f0000, dwReserved1=0x214c86, cFileName="api-ms-win-core-localization-l1-2-0.dll", cAlternateFileName="API-MS~2.DLL")) returned 1 [0248.402] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8dc8 [0248.403] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2365a0 [0248.403] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad860 [0248.403] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2365a0 | out: hHeap=0x1f0000) returned 1 [0248.403] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219d98 | out: hHeap=0x1f0000) returned 1 [0248.403] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8dc8 | out: hHeap=0x1f0000) returned 1 [0248.404] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-localization-l1-2-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0248.404] GetFileType (hFile=0x1fc) returned 0x1 [0248.405] CloseHandle (hObject=0x1fc) returned 1 [0248.405] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad358 [0248.405] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-localization-l1-2-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd089348e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd089348e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd09c4608, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x52c0)) returned 1 [0248.406] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad358 | out: hHeap=0x1f0000) returned 1 [0248.406] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2adb40 [0248.406] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-localization-l1-2-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd089348e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd089348e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd09c4608, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x52c0)) returned 1 [0248.406] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2adb40 | out: hHeap=0x1f0000) returned 1 [0248.406] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad2a0 [0248.406] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad2a0 | out: hHeap=0x1f0000) returned 1 [0248.406] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd115de42, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd115de42, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd158a009, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x1f0000, dwReserved1=0x214c86, cFileName="api-ms-win-core-processthreads-l1-1-1.dll", cAlternateFileName="AP750A~1.DLL")) returned 1 [0248.406] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236608 [0248.406] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236468 [0248.406] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fce0 [0248.407] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0248.407] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad860 | out: hHeap=0x1f0000) returned 1 [0248.407] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236608 | out: hHeap=0x1f0000) returned 1 [0248.407] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-processthreads-l1-1-1.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0248.408] GetFileType (hFile=0x1fc) returned 0x1 [0248.408] CloseHandle (hObject=0x1fc) returned 1 [0248.409] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x230258 [0248.409] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-processthreads-l1-1-1.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd115de42, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd115de42, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd158a009, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0)) returned 1 [0248.409] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0248.409] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f510 [0248.409] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-processthreads-l1-1-1.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd115de42, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd115de42, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd158a009, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0)) returned 1 [0248.409] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0248.409] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22ff38 [0248.410] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0248.410] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0d0baf0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0d0baf0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0eaf4e3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x1f0000, dwReserved1=0x214c86, cFileName="api-ms-win-core-synch-l1-2-0.dll", cAlternateFileName="APF10C~1.DLL")) returned 1 [0248.410] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8dc8 [0248.410] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236468 [0248.410] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a0e0 [0248.410] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0248.410] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0248.410] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8dc8 | out: hHeap=0x1f0000) returned 1 [0248.411] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-synch-l1-2-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0248.411] GetFileType (hFile=0x1fc) returned 0x1 [0248.411] CloseHandle (hObject=0x1fc) returned 1 [0248.412] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21aa10 [0248.412] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-synch-l1-2-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0d0baf0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0d0baf0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0eaf4e3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0)) returned 1 [0248.412] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21aa10 | out: hHeap=0x1f0000) returned 1 [0248.412] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a038 [0248.412] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-synch-l1-2-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0d0baf0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0d0baf0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0eaf4e3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0)) returned 1 [0248.412] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a038 | out: hHeap=0x1f0000) returned 1 [0248.412] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a4d0 [0248.413] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a4d0 | out: hHeap=0x1f0000) returned 1 [0248.413] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0c4cdf5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0c4cdf5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0df0820, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x1f0000, dwReserved1=0x214c86, cFileName="api-ms-win-core-timezone-l1-1-0.dll", cAlternateFileName="AP7902~1.DLL")) returned 1 [0248.413] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8dc8 [0248.413] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2365a0 [0248.413] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2acfc0 [0248.413] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2365a0 | out: hHeap=0x1f0000) returned 1 [0248.413] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a0e0 | out: hHeap=0x1f0000) returned 1 [0248.413] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8dc8 | out: hHeap=0x1f0000) returned 1 [0248.414] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-timezone-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-timezone-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0248.414] GetFileType (hFile=0x1fc) returned 0x1 [0248.414] CloseHandle (hObject=0x1fc) returned 1 [0248.415] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad860 [0248.415] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-timezone-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-timezone-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0c4cdf5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0c4cdf5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0df0820, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0)) returned 1 [0248.415] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad860 | out: hHeap=0x1f0000) returned 1 [0248.415] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad1e8 [0248.415] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-timezone-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-timezone-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0c4cdf5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0c4cdf5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0df0820, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0)) returned 1 [0248.415] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad1e8 | out: hHeap=0x1f0000) returned 1 [0248.896] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad4c8 [0248.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad4c8 | out: hHeap=0x1f0000) returned 1 [0248.897] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0c26cd1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0c26cd1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0e62fac, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d60, dwReserved0=0x1f0000, dwReserved1=0x214c86, cFileName="api-ms-win-core-xstate-l2-1-0.dll", cAlternateFileName="APA632~1.DLL")) returned 1 [0248.897] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8dc8 [0248.897] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236608 [0248.897] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad9d0 [0248.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236608 | out: hHeap=0x1f0000) returned 1 [0248.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2acfc0 | out: hHeap=0x1f0000) returned 1 [0248.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8dc8 | out: hHeap=0x1f0000) returned 1 [0248.897] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-xstate-l2-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-xstate-l2-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0248.898] GetFileType (hFile=0x210) returned 0x1 [0248.898] CloseHandle (hObject=0x210) returned 1 [0248.898] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad638 [0248.899] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-xstate-l2-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-xstate-l2-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0c26cd1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0c26cd1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0e62fac, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d60)) returned 1 [0248.899] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad638 | out: hHeap=0x1f0000) returned 1 [0248.899] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2adcb0 [0248.899] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-xstate-l2-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-xstate-l2-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0c26cd1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0c26cd1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0e62fac, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d60)) returned 1 [0248.899] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2adcb0 | out: hHeap=0x1f0000) returned 1 [0248.899] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad130 [0248.899] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad130 | out: hHeap=0x1f0000) returned 1 [0248.899] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd289cda7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd289cda7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2a1a592, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x1f0000, dwReserved1=0x214c86, cFileName="api-ms-win-crt-conio-l1-1-0.dll", cAlternateFileName="AP5C76~1.DLL")) returned 1 [0248.900] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228518 [0248.906] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2364d0 [0248.906] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a6c8 [0248.906] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2364d0 | out: hHeap=0x1f0000) returned 1 [0248.906] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad9d0 | out: hHeap=0x1f0000) returned 1 [0248.906] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228518 | out: hHeap=0x1f0000) returned 1 [0248.907] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-conio-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-conio-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0248.907] GetFileType (hFile=0x210) returned 0x1 [0248.908] CloseHandle (hObject=0x210) returned 1 [0248.908] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a578 [0248.908] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-conio-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-conio-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd289cda7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd289cda7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2a1a592, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0)) returned 1 [0248.908] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a578 | out: hHeap=0x1f0000) returned 1 [0248.908] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21aa10 [0248.909] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-conio-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-conio-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd289cda7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd289cda7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2a1a592, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0)) returned 1 [0248.909] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21aa10 | out: hHeap=0x1f0000) returned 1 [0248.909] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a8c0 [0248.909] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a8c0 | out: hHeap=0x1f0000) returned 1 [0248.909] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0b8e391, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0b8e391, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0d7e20c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x58c0, dwReserved0=0x1f0000, dwReserved1=0x214c86, cFileName="api-ms-win-crt-convert-l1-1-0.dll", cAlternateFileName="APFD9C~1.DLL")) returned 1 [0248.909] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8dc8 [0248.909] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2364d0 [0248.909] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2adcb0 [0248.909] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2364d0 | out: hHeap=0x1f0000) returned 1 [0248.910] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a6c8 | out: hHeap=0x1f0000) returned 1 [0248.910] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8dc8 | out: hHeap=0x1f0000) returned 1 [0248.910] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-convert-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0248.910] GetFileType (hFile=0x210) returned 0x1 [0248.911] CloseHandle (hObject=0x210) returned 1 [0248.911] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2add68 [0248.911] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-convert-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0b8e391, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0b8e391, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0d7e20c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x58c0)) returned 1 [0248.911] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2add68 | out: hHeap=0x1f0000) returned 1 [0248.912] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad358 [0248.912] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-convert-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0b8e391, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0b8e391, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0d7e20c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x58c0)) returned 1 [0248.912] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad358 | out: hHeap=0x1f0000) returned 1 [0248.912] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad410 [0248.912] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad410 | out: hHeap=0x1f0000) returned 1 [0248.912] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0aa952a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0aa952a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0bda864, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x1f0000, dwReserved1=0x214c86, cFileName="api-ms-win-crt-environment-l1-1-0.dll", cAlternateFileName="APC00F~1.DLL")) returned 1 [0248.912] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8d18 [0248.912] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236608 [0248.912] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ada88 [0248.913] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236608 | out: hHeap=0x1f0000) returned 1 [0248.913] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2adcb0 | out: hHeap=0x1f0000) returned 1 [0248.913] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0248.914] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-environment-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0248.914] GetFileType (hFile=0x210) returned 0x1 [0248.914] CloseHandle (hObject=0x210) returned 1 [0248.915] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2acfc0 [0248.915] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-environment-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0aa952a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0aa952a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0bda864, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0)) returned 1 [0248.915] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2acfc0 | out: hHeap=0x1f0000) returned 1 [0248.915] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad9d0 [0248.915] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-environment-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0aa952a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0aa952a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0bda864, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0)) returned 1 [0248.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad9d0 | out: hHeap=0x1f0000) returned 1 [0248.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad4c8 [0248.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad4c8 | out: hHeap=0x1f0000) returned 1 [0248.979] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0aa952a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0aa952a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0c99389, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x50c0, dwReserved0=0x1f0000, dwReserved1=0x214c86, cFileName="api-ms-win-crt-filesystem-l1-1-0.dll", cAlternateFileName="API-MS~4.DLL")) returned 1 [0248.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8d18 [0248.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2364d0 [0248.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2adcb0 [0248.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2364d0 | out: hHeap=0x1f0000) returned 1 [0248.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ada88 | out: hHeap=0x1f0000) returned 1 [0248.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0248.980] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-filesystem-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-filesystem-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0248.981] GetFileType (hFile=0x210) returned 0x1 [0248.981] CloseHandle (hObject=0x210) returned 1 [0248.981] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2add68 [0248.982] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-filesystem-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-filesystem-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0aa952a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0aa952a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0c99389, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x50c0)) returned 1 [0248.982] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2add68 | out: hHeap=0x1f0000) returned 1 [0248.982] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad410 [0248.982] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-filesystem-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-filesystem-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0aa952a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0aa952a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0c99389, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x50c0)) returned 1 [0248.982] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad410 | out: hHeap=0x1f0000) returned 1 [0248.982] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad638 [0248.982] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad638 | out: hHeap=0x1f0000) returned 1 [0248.982] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0af5a16, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0af5a16, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0c4cdf5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x1f0000, dwReserved1=0x214c86, cFileName="api-ms-win-crt-heap-l1-1-0.dll", cAlternateFileName="AP23C9~1.DLL")) returned 1 [0248.983] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228440 [0248.983] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2365a0 [0248.983] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a4d0 [0248.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2365a0 | out: hHeap=0x1f0000) returned 1 [0248.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2adcb0 | out: hHeap=0x1f0000) returned 1 [0248.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228440 | out: hHeap=0x1f0000) returned 1 [0248.984] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-heap-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-heap-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0248.984] GetFileType (hFile=0x210) returned 0x1 [0248.984] CloseHandle (hObject=0x210) returned 1 [0248.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a578 [0248.985] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-heap-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-heap-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0af5a16, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0af5a16, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0c4cdf5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0)) returned 1 [0248.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a578 | out: hHeap=0x1f0000) returned 1 [0248.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219ee8 [0248.985] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-heap-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-heap-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0af5a16, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0af5a16, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0c4cdf5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0)) returned 1 [0248.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219ee8 | out: hHeap=0x1f0000) returned 1 [0248.986] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219f90 [0248.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219f90 | out: hHeap=0x1f0000) returned 1 [0248.986] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1e086ac, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1e086ac, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2365abe, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x1f0000, dwReserved1=0x214c86, cFileName="api-ms-win-crt-locale-l1-1-0.dll", cAlternateFileName="APCB40~1.DLL")) returned 1 [0248.986] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8d18 [0248.986] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2364d0 [0248.986] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a188 [0248.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2364d0 | out: hHeap=0x1f0000) returned 1 [0248.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a4d0 | out: hHeap=0x1f0000) returned 1 [0248.987] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0248.987] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-locale-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-locale-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0248.988] GetFileType (hFile=0x210) returned 0x1 [0248.988] CloseHandle (hObject=0x210) returned 1 [0248.989] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a4d0 [0248.989] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-locale-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-locale-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1e086ac, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1e086ac, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2365abe, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0)) returned 1 [0248.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a4d0 | out: hHeap=0x1f0000) returned 1 [0248.989] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a620 [0248.989] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-locale-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-locale-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1e086ac, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1e086ac, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2365abe, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0)) returned 1 [0248.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a620 | out: hHeap=0x1f0000) returned 1 [0248.989] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a4d0 [0248.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a4d0 | out: hHeap=0x1f0000) returned 1 [0248.990] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1137cdf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1137cdf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1d23858, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6cc0, dwReserved0=0x1f0000, dwReserved1=0x214c86, cFileName="api-ms-win-crt-math-l1-1-0.dll", cAlternateFileName="APAE51~1.DLL")) returned 1 [0248.990] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228680 [0248.990] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236608 [0248.990] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219e40 [0248.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236608 | out: hHeap=0x1f0000) returned 1 [0248.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a188 | out: hHeap=0x1f0000) returned 1 [0248.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228680 | out: hHeap=0x1f0000) returned 1 [0248.991] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-math-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-math-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0248.991] GetFileType (hFile=0x210) returned 0x1 [0248.992] CloseHandle (hObject=0x210) returned 1 [0248.992] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219d98 [0248.992] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-math-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-math-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1137cdf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1137cdf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1d23858, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6cc0)) returned 1 [0248.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219d98 | out: hHeap=0x1f0000) returned 1 [0248.992] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a620 [0248.992] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-math-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-math-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1137cdf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1137cdf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1d23858, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6cc0)) returned 1 [0248.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a620 | out: hHeap=0x1f0000) returned 1 [0248.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a8c0 [0248.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a8c0 | out: hHeap=0x1f0000) returned 1 [0248.993] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1006983, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1006983, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1242d5d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x68c0, dwReserved0=0x1f0000, dwReserved1=0x214c86, cFileName="api-ms-win-crt-multibyte-l1-1-0.dll", cAlternateFileName="AP972F~1.DLL")) returned 1 [0248.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8d18 [0248.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2364d0 [0248.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2acfc0 [0248.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2364d0 | out: hHeap=0x1f0000) returned 1 [0248.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219e40 | out: hHeap=0x1f0000) returned 1 [0248.994] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0248.995] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-multibyte-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-multibyte-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0248.995] GetFileType (hFile=0x210) returned 0x1 [0248.996] CloseHandle (hObject=0x210) returned 1 [0248.996] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2add68 [0248.996] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-multibyte-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-multibyte-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1006983, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1006983, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1242d5d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x68c0)) returned 1 [0248.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2add68 | out: hHeap=0x1f0000) returned 1 [0248.996] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad580 [0248.996] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-multibyte-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-multibyte-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1006983, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1006983, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1242d5d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x68c0)) returned 1 [0248.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad580 | out: hHeap=0x1f0000) returned 1 [0248.997] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad078 [0248.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad078 | out: hHeap=0x1f0000) returned 1 [0248.997] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0f9426a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0f9426a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd121c9ea, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x114c0, dwReserved0=0x1f0000, dwReserved1=0x214c86, cFileName="api-ms-win-crt-private-l1-1-0.dll", cAlternateFileName="AP7D9E~1.DLL")) returned 1 [0248.997] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8d18 [0248.997] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2364d0 [0248.997] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad918 [0248.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2364d0 | out: hHeap=0x1f0000) returned 1 [0248.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2acfc0 | out: hHeap=0x1f0000) returned 1 [0248.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0248.998] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-private-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-private-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0248.998] GetFileType (hFile=0x210) returned 0x1 [0248.999] CloseHandle (hObject=0x210) returned 1 [0248.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ade20 [0248.999] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-private-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-private-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0f9426a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0f9426a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd121c9ea, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x114c0)) returned 1 [0248.999] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ade20 | out: hHeap=0x1f0000) returned 1 [0248.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad130 [0248.999] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-private-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-private-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0f9426a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0f9426a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd121c9ea, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x114c0)) returned 1 [0249.000] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad130 | out: hHeap=0x1f0000) returned 1 [0249.000] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad4c8 [0249.000] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad4c8 | out: hHeap=0x1f0000) returned 1 [0249.000] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0f9426a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0f9426a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd139a18a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x1f0000, dwReserved1=0x214c86, cFileName="api-ms-win-crt-process-l1-1-0.dll", cAlternateFileName="APFCAD~1.DLL")) returned 1 [0249.000] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8d18 [0249.000] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2364d0 [0249.000] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad1e8 [0249.000] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2364d0 | out: hHeap=0x1f0000) returned 1 [0249.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad918 | out: hHeap=0x1f0000) returned 1 [0249.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0249.001] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-process-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-process-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0249.002] GetFileType (hFile=0x210) returned 0x1 [0249.002] CloseHandle (hObject=0x210) returned 1 [0249.002] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ada88 [0249.003] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-process-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-process-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0f9426a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0f9426a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd139a18a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0)) returned 1 [0249.003] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ada88 | out: hHeap=0x1f0000) returned 1 [0249.003] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad860 [0249.003] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-process-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-process-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0f9426a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0f9426a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd139a18a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0)) returned 1 [0249.003] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad860 | out: hHeap=0x1f0000) returned 1 [0249.003] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad580 [0249.003] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad580 | out: hHeap=0x1f0000) returned 1 [0249.003] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0eaf4e3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0eaf4e3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd11d067c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5ac0, dwReserved0=0x1f0000, dwReserved1=0x214c86, cFileName="api-ms-win-crt-runtime-l1-1-0.dll", cAlternateFileName="AP8F34~1.DLL")) returned 1 [0249.004] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8dc8 [0249.004] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2364d0 [0249.004] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad918 [0249.004] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2364d0 | out: hHeap=0x1f0000) returned 1 [0249.004] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad1e8 | out: hHeap=0x1f0000) returned 1 [0249.004] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8dc8 | out: hHeap=0x1f0000) returned 1 [0249.005] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-runtime-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-runtime-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0249.005] GetFileType (hFile=0x210) returned 0x1 [0249.005] CloseHandle (hObject=0x210) returned 1 [0249.006] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad860 [0249.006] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-runtime-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-runtime-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0eaf4e3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0eaf4e3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd11d067c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5ac0)) returned 1 [0249.006] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad860 | out: hHeap=0x1f0000) returned 1 [0249.006] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad638 [0249.006] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-runtime-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-runtime-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0eaf4e3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0eaf4e3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd11d067c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5ac0)) returned 1 [0249.007] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad638 | out: hHeap=0x1f0000) returned 1 [0249.007] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad860 [0249.007] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad860 | out: hHeap=0x1f0000) returned 1 [0249.007] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0dca676, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0dca676, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1078ffd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x60c0, dwReserved0=0x1f0000, dwReserved1=0x214c86, cFileName="api-ms-win-crt-stdio-l1-1-0.dll", cAlternateFileName="APD1B7~1.DLL")) returned 1 [0249.007] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228908 [0249.007] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2364d0 [0249.007] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219e40 [0249.007] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2364d0 | out: hHeap=0x1f0000) returned 1 [0249.007] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad918 | out: hHeap=0x1f0000) returned 1 [0249.007] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228908 | out: hHeap=0x1f0000) returned 1 [0249.008] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-stdio-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-stdio-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0249.008] GetFileType (hFile=0x210) returned 0x1 [0249.009] CloseHandle (hObject=0x210) returned 1 [0249.264] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a188 [0249.265] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-stdio-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-stdio-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0dca676, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0dca676, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1078ffd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x60c0)) returned 1 [0249.265] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a188 | out: hHeap=0x1f0000) returned 1 [0249.265] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a4d0 [0249.265] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-stdio-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-stdio-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0dca676, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0dca676, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1078ffd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x60c0)) returned 1 [0249.265] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a4d0 | out: hHeap=0x1f0000) returned 1 [0249.265] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a578 [0249.266] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a578 | out: hHeap=0x1f0000) returned 1 [0249.266] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0eaf4e3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0eaf4e3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd10c55e8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x60c0, dwReserved0=0x1f0000, dwReserved1=0x214c86, cFileName="api-ms-win-crt-string-l1-1-0.dll", cAlternateFileName="APBF0F~1.DLL")) returned 1 [0249.266] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8d18 [0249.266] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2364d0 [0249.266] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219c48 [0249.266] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2364d0 | out: hHeap=0x1f0000) returned 1 [0249.266] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219e40 | out: hHeap=0x1f0000) returned 1 [0249.266] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0249.267] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-string-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-string-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0249.267] GetFileType (hFile=0x1c0) returned 0x1 [0249.268] CloseHandle (hObject=0x1c0) returned 1 [0249.269] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a038 [0249.269] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-string-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-string-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0eaf4e3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0eaf4e3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd10c55e8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x60c0)) returned 1 [0249.269] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a038 | out: hHeap=0x1f0000) returned 1 [0249.269] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a4d0 [0249.269] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-string-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-string-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0eaf4e3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0eaf4e3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd10c55e8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x60c0)) returned 1 [0249.269] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a4d0 | out: hHeap=0x1f0000) returned 1 [0249.269] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219cf0 [0249.270] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219cf0 | out: hHeap=0x1f0000) returned 1 [0249.270] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0dca676, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0dca676, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0f9426a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x52c0, dwReserved0=0x1f0000, dwReserved1=0x214c86, cFileName="api-ms-win-crt-time-l1-1-0.dll", cAlternateFileName="AP5E4C~1.DLL")) returned 1 [0249.270] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228638 [0249.270] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2364d0 [0249.270] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a4d0 [0249.270] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2364d0 | out: hHeap=0x1f0000) returned 1 [0249.270] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219c48 | out: hHeap=0x1f0000) returned 1 [0249.270] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228638 | out: hHeap=0x1f0000) returned 1 [0249.271] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-time-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-time-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0249.284] GetFileType (hFile=0x1c0) returned 0x1 [0249.284] CloseHandle (hObject=0x1c0) returned 1 [0249.285] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a2d8 [0249.285] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-time-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-time-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0dca676, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0dca676, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0f9426a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x52c0)) returned 1 [0249.285] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a2d8 | out: hHeap=0x1f0000) returned 1 [0249.285] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a818 [0249.285] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-time-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-time-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0dca676, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0dca676, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0f9426a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x52c0)) returned 1 [0249.286] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a818 | out: hHeap=0x1f0000) returned 1 [0249.286] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a8c0 [0249.286] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a8c0 | out: hHeap=0x1f0000) returned 1 [0249.286] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1b7fe91, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1b7fe91, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1ec71c8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x1f0000, dwReserved1=0x214c86, cFileName="api-ms-win-crt-utility-l1-1-0.dll", cAlternateFileName="AP80F4~1.DLL")) returned 1 [0249.286] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8d18 [0249.286] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2365a0 [0249.286] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2add68 [0249.287] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2365a0 | out: hHeap=0x1f0000) returned 1 [0249.287] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a4d0 | out: hHeap=0x1f0000) returned 1 [0249.287] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0249.288] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-utility-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-utility-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0249.288] GetFileType (hFile=0x1c0) returned 0x1 [0249.288] CloseHandle (hObject=0x1c0) returned 1 [0249.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad6f0 [0249.289] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-utility-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-utility-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1b7fe91, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1b7fe91, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1ec71c8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0)) returned 1 [0249.289] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad6f0 | out: hHeap=0x1f0000) returned 1 [0249.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad358 [0249.290] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-utility-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-utility-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1b7fe91, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1b7fe91, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1ec71c8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0)) returned 1 [0249.290] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad358 | out: hHeap=0x1f0000) returned 1 [0249.290] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2adb40 [0249.290] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2adb40 | out: hHeap=0x1f0000) returned 1 [0249.290] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1b59cda, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1b59cda, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1f1370b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x34ad8, dwReserved0=0x1f0000, dwReserved1=0x214c86, cFileName="AppVDllSurrogate32.exe", cAlternateFileName="APPVDL~2.EXE")) returned 1 [0249.290] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2390f0 [0249.291] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236608 [0249.291] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0249.291] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236608 | out: hHeap=0x1f0000) returned 1 [0249.292] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2add68 | out: hHeap=0x1f0000) returned 1 [0249.292] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2390f0 | out: hHeap=0x1f0000) returned 1 [0249.292] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate32.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvdllsurrogate32.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0249.293] GetFileType (hFile=0x1c0) returned 0x1 [0249.293] CloseHandle (hObject=0x1c0) returned 1 [0249.294] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0249.294] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate32.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvdllsurrogate32.exe"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1b59cda, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1b59cda, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1f1370b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x34ad8)) returned 1 [0249.294] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0249.294] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0249.294] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate32.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvdllsurrogate32.exe"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1b59cda, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1b59cda, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1f1370b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x34ad8)) returned 1 [0249.295] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0249.295] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0249.295] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0249.295] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd153dc41, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd153dc41, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1e2e85a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3e4d8, dwReserved0=0x1f0000, dwReserved1=0x214c86, cFileName="AppVDllSurrogate64.exe", cAlternateFileName="APPVDL~1.EXE")) returned 1 [0249.295] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239198 [0249.295] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2364d0 [0249.295] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0249.296] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2364d0 | out: hHeap=0x1f0000) returned 1 [0249.296] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0249.296] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239198 | out: hHeap=0x1f0000) returned 1 [0249.297] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate64.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvdllsurrogate64.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0249.297] GetFileType (hFile=0x1c0) returned 0x1 [0249.297] CloseHandle (hObject=0x1c0) returned 1 [0249.298] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0249.298] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate64.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvdllsurrogate64.exe"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd153dc41, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd153dc41, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1e2e85a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3e4d8)) returned 1 [0249.298] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0249.298] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0249.299] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate64.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvdllsurrogate64.exe"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd153dc41, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd153dc41, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1e2e85a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3e4d8)) returned 1 [0249.299] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0249.299] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0249.299] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0249.299] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x86813dc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86813dc4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86813dc4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x214c86, cFileName="AppvIsvStream32.dll", cAlternateFileName="APPVIS~1.DLL")) returned 1 [0249.299] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238d70 [0249.300] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236608 [0249.300] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0249.300] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236608 | out: hHeap=0x1f0000) returned 1 [0249.300] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0249.300] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238d70 | out: hHeap=0x1f0000) returned 1 [0249.301] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\AppvIsvStream32.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvisvstream32.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.301] GetLastError () returned 0x2 [0249.301] GetLastError () returned 0x2 [0249.302] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x86813dc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86813dc4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86813dc4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x214c86, cFileName="AppvIsvStream64.dll", cAlternateFileName="APPVIS~2.DLL")) returned 1 [0249.302] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238cc8 [0249.302] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2364d0 [0249.302] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0249.302] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2364d0 | out: hHeap=0x1f0000) returned 1 [0249.302] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0249.302] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238cc8 | out: hHeap=0x1f0000) returned 1 [0249.303] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\AppvIsvStream64.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvisvstream64.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.303] GetLastError () returned 0x2 [0249.303] GetLastError () returned 0x2 [0249.304] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x86813dc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86813dc4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86813dc4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x214c86, cFileName="AppvIsvSubsystems32.dll", cAlternateFileName="APPVIS~3.DLL")) returned 1 [0249.304] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c58 [0249.304] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2365a0 [0249.304] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0249.304] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2365a0 | out: hHeap=0x1f0000) returned 1 [0249.305] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0249.305] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c58 | out: hHeap=0x1f0000) returned 1 [0249.306] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\AppvIsvSubsystems32.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvisvsubsystems32.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.306] GetLastError () returned 0x2 [0249.324] GetLastError () returned 0x2 [0249.325] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x8683a0f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8683a0f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8683a0f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x214c86, cFileName="AppvIsvSubsystems64.dll", cAlternateFileName="APPVIS~4.DLL")) returned 1 [0249.325] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238f30 [0249.325] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2364d0 [0249.325] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0249.325] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2364d0 | out: hHeap=0x1f0000) returned 1 [0249.325] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0249.326] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238f30 | out: hHeap=0x1f0000) returned 1 [0249.327] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\AppvIsvSubsystems64.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvisvsubsystems64.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.327] GetLastError () returned 0x2 [0249.327] GetLastError () returned 0x2 [0249.327] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd153dc41, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd153dc41, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1e7acf5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x69630, dwReserved0=0xa000000c, dwReserved1=0x214c86, cFileName="AppVLP.exe", cAlternateFileName="")) returned 1 [0249.328] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0249.328] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2364d0 [0249.328] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220fe8 [0249.328] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2364d0 | out: hHeap=0x1f0000) returned 1 [0249.328] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0249.328] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0249.329] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\AppVLP.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvlp.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0249.330] GetFileType (hFile=0x1c0) returned 0x1 [0249.330] CloseHandle (hObject=0x1c0) returned 1 [0249.331] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0249.331] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\AppVLP.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvlp.exe"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd153dc41, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd153dc41, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1e7acf5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x69630)) returned 1 [0249.331] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0249.332] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0249.332] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\AppVLP.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvlp.exe"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd153dc41, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd153dc41, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1e7acf5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x69630)) returned 1 [0249.332] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0249.332] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213570 [0249.332] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213570 | out: hHeap=0x1f0000) returned 1 [0249.332] GetLastError () returned 0x0 [0249.333] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x8683a0f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8683a0f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8683a0f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x214c86, cFileName="C2R32.dll", cAlternateFileName="")) returned 1 [0249.333] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238348 [0249.333] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2364d0 [0249.333] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221a00 [0249.333] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2364d0 | out: hHeap=0x1f0000) returned 1 [0249.333] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0249.333] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238348 | out: hHeap=0x1f0000) returned 1 [0249.334] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\C2R32.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\c2r32.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.334] GetLastError () returned 0x2 [0249.334] GetLastError () returned 0x2 [0249.335] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x8683a0f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8683a0f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8683a0f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x214c86, cFileName="C2R64.dll", cAlternateFileName="")) returned 1 [0249.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0249.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2365a0 [0249.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221838 [0249.335] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2365a0 | out: hHeap=0x1f0000) returned 1 [0249.335] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0249.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0249.336] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\C2R64.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\c2r64.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.337] GetLastError () returned 0x2 [0249.337] GetLastError () returned 0x2 [0249.337] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd11f68b6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd11f68b6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd191da0e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x514a8, dwReserved0=0xa000000c, dwReserved1=0x214c86, cFileName="concrt140.dll", cAlternateFileName="CONCRT~1.DLL")) returned 1 [0249.589] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0249.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2365a0 [0249.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221708 [0249.590] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2365a0 | out: hHeap=0x1f0000) returned 1 [0249.590] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0249.590] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0249.591] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\concrt140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\concrt140.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0249.591] GetFileType (hFile=0x1fc) returned 0x1 [0249.592] CloseHandle (hObject=0x1fc) returned 1 [0249.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0249.593] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\concrt140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\concrt140.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd11f68b6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd11f68b6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd191da0e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x514a8)) returned 1 [0249.593] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0249.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213570 [0249.593] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\concrt140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\concrt140.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd11f68b6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd11f68b6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd191da0e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x514a8)) returned 1 [0249.593] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213570 | out: hHeap=0x1f0000) returned 1 [0249.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0249.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0249.594] GetLastError () returned 0x0 [0249.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0249.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228c68 [0249.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22db68 [0249.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0249.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2390f0 [0249.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0249.595] CryptAcquireContextA (in: phProv=0x1a1daf0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1a1daf0*=0x2130a8) returned 1 [0249.596] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2380a0 | out: pbBuffer=0x2380a0) returned 1 [0249.596] CryptReleaseContext (hProv=0x2130a8, dwFlags=0x0) returned 1 [0249.597] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0249.597] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x2595a0 [0249.597] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2337b0 [0249.597] QueryPerformanceCounter (in: lpPerformanceCount=0x1a1da84 | out: lpPerformanceCount=0x1a1da84*=40696598858) returned 1 [0249.597] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1a1dac4 | out: lpSystemTimeAsFileTime=0x1a1dac4) [0249.597] QueryPerformanceCounter (in: lpPerformanceCount=0x1a1da84 | out: lpPerformanceCount=0x1a1da84*=40696641992) returned 1 [0249.598] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1a1dac4 | out: lpSystemTimeAsFileTime=0x1a1dac4) [0249.598] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238f68 [0249.598] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x251068 [0249.598] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x232cc0 [0249.598] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x2ab7d8 [0249.598] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffa0 [0249.598] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2066b8 [0249.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210078 [0249.599] GetLastError () returned 0x0 [0249.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0249.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x217038 [0249.599] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0249.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x140) returned 0x239be0 [0249.599] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0249.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ad0 [0249.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a90 [0249.601] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\concrt140.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\root\\client\\concrt140.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d990, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0249.602] GetFileType (hFile=0x1fc) returned 0x1 [0249.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b30 [0249.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238aa0 [0249.605] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\concrt140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\concrt140.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d9c0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0249.605] GetFileType (hFile=0x1d4) returned 0x1 [0249.606] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f10 [0249.606] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f30 [0249.606] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad130 [0249.606] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ab0 [0249.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ae0 [0249.608] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\concrt140.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\root\\client\\concrt140.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d90c, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0249.608] GetFileType (hFile=0x1c0) returned 0x1 [0249.609] GetLastError () returned 0xb7 [0249.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe4) returned 0x21b618 [0249.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204df0 [0249.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d30 [0249.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f10 [0249.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad4c8 [0249.610] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b00 [0249.610] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b20 [0249.611] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\concrt140.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\root\\client\\concrt140.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d90c, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0249.611] GetFileType (hFile=0x174) returned 0x1 [0249.612] GetLastError () returned 0xb7 [0249.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f10 [0249.612] GetLastError () returned 0xb7 [0249.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bb0 [0249.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f10 [0249.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f30 [0249.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb8) returned 0x2370e0 [0249.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238940 [0249.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238860 [0249.614] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\concrt140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\concrt140.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d904, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0249.615] GetFileType (hFile=0x23c) returned 0x1 [0249.615] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x292ff8 [0249.616] ReadFile (in: hFile=0x23c, lpBuffer=0x292ff8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1d860, lpOverlapped=0x0 | out: lpBuffer=0x292ff8*, lpNumberOfBytesRead=0x1a1d860*=0x1000, lpOverlapped=0x0) returned 1 [0249.619] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24c600 [0249.620] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28ffe0 [0249.620] GetLastError () returned 0x0 [0250.056] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210198 [0250.056] GetLastError () returned 0x0 [0250.057] CloseHandle (hObject=0x1fc) returned 1 [0250.541] CloseHandle (hObject=0x1d4) returned 1 [0250.542] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388a0 [0250.542] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238930 [0250.543] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\concrt140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\concrt140.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d9c0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0250.569] GetFileType (hFile=0x1d4) returned 0x1 [0250.570] GetLastError () returned 0xb7 [0250.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28bfc0 [0250.570] GetLastError () returned 0xb7 [0250.572] CloseHandle (hObject=0x1d4) returned 1 [0250.573] DeleteFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\concrt140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\concrt140.dll")) returned 0 [0250.573] GetLastError () returned 0x20 [0250.573] GetLastError () returned 0x20 [0250.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228440 [0250.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2383e8 [0250.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238168 [0250.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x228bd8 [0250.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e50 [0250.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c90 [0250.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x238870 [0250.574] GetLastError () returned 0x20 [0250.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238f30 [0250.575] GetLastError () returned 0x20 [0250.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238c20 [0250.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2364d0 [0250.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2382a8 [0250.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x284f90 [0250.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238820 [0250.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0250.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210240 [0250.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389b0 [0250.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0250.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210210 [0250.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2382d0 [0250.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2853b0 [0250.576] GetLastError () returned 0x20 [0250.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238830 [0250.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x2387e0 [0250.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238850 [0250.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387e0 | out: hHeap=0x1f0000) returned 1 [0250.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238910 [0250.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238850 | out: hHeap=0x1f0000) returned 1 [0250.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238830 | out: hHeap=0x1f0000) returned 1 [0250.578] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238830 [0250.578] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101c8 [0250.578] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238830 | out: hHeap=0x1f0000) returned 1 [0250.578] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101b0 [0250.578] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0250.578] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238910 | out: hHeap=0x1f0000) returned 1 [0250.578] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210258 [0250.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0250.579] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0250.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0250.579] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0250.579] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0250.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101b0 [0250.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204e30 [0250.579] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0250.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e50 [0250.580] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e30 | out: hHeap=0x1f0000) returned 1 [0250.580] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0250.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ef0 [0250.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238410 [0250.580] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ef0 | out: hHeap=0x1f0000) returned 1 [0250.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204d70 [0250.580] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0250.580] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e50 | out: hHeap=0x1f0000) returned 1 [0250.581] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204b90 [0250.581] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206628 [0250.581] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204b90 | out: hHeap=0x1f0000) returned 1 [0250.581] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238140 [0250.581] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206628 | out: hHeap=0x1f0000) returned 1 [0250.581] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d70 | out: hHeap=0x1f0000) returned 1 [0250.581] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238990 [0250.581] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210258 [0250.582] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238990 | out: hHeap=0x1f0000) returned 1 [0250.582] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0250.582] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0250.582] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204f70 [0250.582] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0250.582] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x2067d8 [0250.582] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f70 | out: hHeap=0x1f0000) returned 1 [0250.582] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2067d8 | out: hHeap=0x1f0000) returned 1 [0250.583] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0250.583] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0250.583] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0250.583] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x284f90 | out: hHeap=0x1f0000) returned 1 [0250.583] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0250.583] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239160 [0250.583] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0250.583] CryptAcquireContextA (in: phProv=0x1a1daf0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1a1daf0*=0x212f98) returned 1 [0250.584] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2380a0 | out: pbBuffer=0x2380a0) returned 1 [0250.584] CryptReleaseContext (hProv=0x212f98, dwFlags=0x0) returned 1 [0250.585] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0250.585] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2383e8 [0250.585] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238118 [0250.585] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239198 [0250.585] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0250.585] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0250.585] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239198 | out: hHeap=0x1f0000) returned 1 [0250.585] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8dc8 [0250.585] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101b0 [0250.585] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x236538 [0250.585] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x237fd8 [0250.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2856c8 [0250.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204db0 [0250.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236608 [0250.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2380a0 [0250.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285ae8 [0250.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238970 [0250.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0250.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0250.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238880 [0250.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0250.587] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210258 [0250.587] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0250.587] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0250.587] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238880 | out: hHeap=0x1f0000) returned 1 [0250.587] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0250.587] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0250.587] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238970 | out: hHeap=0x1f0000) returned 1 [0250.588] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285ae8 | out: hHeap=0x1f0000) returned 1 [0250.588] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0250.588] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236608 | out: hHeap=0x1f0000) returned 1 [0250.588] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238f30 [0250.588] GetLastError () returned 0x0 [0250.588] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239080 [0250.588] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0250.589] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0250.589] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0250.589] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0250.589] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0250.589] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0250.589] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x24eb40 [0250.589] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2857d0 [0250.589] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0250.589] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0250.589] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0250.590] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0250.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2852a8 [0250.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0250.590] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0250.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f5d8 [0250.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x255c88 [0250.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x233468 [0250.590] QueryPerformanceCounter (in: lpPerformanceCount=0x1a1d640 | out: lpPerformanceCount=0x1a1d640*=40795921334) returned 1 [0250.590] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1a1d680 | out: lpSystemTimeAsFileTime=0x1a1d680) [0250.591] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238980 [0250.591] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0250.591] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cd0 [0250.591] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cd0 | out: hHeap=0x1f0000) returned 1 [0250.591] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0250.591] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0250.591] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c30 [0250.591] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c30 | out: hHeap=0x1f0000) returned 1 [0250.591] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0250.591] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238980 | out: hHeap=0x1f0000) returned 1 [0250.592] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0250.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238f30 [0250.592] GetLastError () returned 0x0 [0250.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0250.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0250.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0250.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238140 [0250.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2382a8 [0250.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0250.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0250.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2380a0 [0250.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0250.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x222ee8 [0250.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0250.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0250.593] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0250.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0250.593] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0250.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2383e8 [0250.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381b8 [0250.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0250.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0250.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0250.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0250.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x234b90 [0250.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b90 | out: hHeap=0x1f0000) returned 1 [0250.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0250.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0250.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101c8 [0250.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228638 [0250.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2382f8 [0250.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381b8 [0250.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238320 [0250.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238348 [0250.595] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0250.595] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0250.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0250.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2383e8 [0250.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2382f8 [0250.596] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0250.596] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0250.596] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0250.596] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206928 [0250.596] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x2b4668 [0250.596] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b4668 | out: hHeap=0x1f0000) returned 1 [0250.596] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206928 | out: hHeap=0x1f0000) returned 1 [0250.596] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0250.596] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0250.597] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0250.597] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0250.597] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204cb0 [0250.597] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0250.597] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0250.597] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0250.597] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aa480 [0250.597] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0250.597] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238348 | out: hHeap=0x1f0000) returned 1 [0250.597] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0250.598] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228638 | out: hHeap=0x1f0000) returned 1 [0250.598] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0250.598] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cb0 | out: hHeap=0x1f0000) returned 1 [0250.598] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0250.598] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0250.598] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aa230 [0250.598] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aa230 | out: hHeap=0x1f0000) returned 1 [0250.598] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ee8 | out: hHeap=0x1f0000) returned 1 [0250.598] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0250.599] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0250.599] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0250.599] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0250.599] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0250.599] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0250.599] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0250.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a9b40 [0250.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a98f0 [0250.599] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a9b40 | out: hHeap=0x1f0000) returned 1 [0250.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a98f0 | out: hHeap=0x1f0000) returned 1 [0250.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aa480 | out: hHeap=0x1f0000) returned 1 [0250.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0250.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2852a8 | out: hHeap=0x1f0000) returned 1 [0250.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24eb40 | out: hHeap=0x1f0000) returned 1 [0250.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x2338c8 [0250.600] GetLastError () returned 0x0 [0250.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389c0 [0250.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388b0 [0250.602] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\concrt140.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\root\\client\\concrt140.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d9f0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0250.602] GetFileType (hFile=0x1d4) returned 0x1 [0250.888] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x286f98 [0250.889] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1a1d978 | out: lpNewFilePointer=0x0) returned 1 [0250.889] GetLastError () returned 0xb7 [0250.890] CloseHandle (hObject=0x1d4) returned 1 [0250.890] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388b0 | out: hHeap=0x1f0000) returned 1 [0250.890] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389c0 | out: hHeap=0x1f0000) returned 1 [0250.891] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2857d0 | out: hHeap=0x1f0000) returned 1 [0250.891] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2856c8 | out: hHeap=0x1f0000) returned 1 [0250.891] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0250.891] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204db0 | out: hHeap=0x1f0000) returned 1 [0250.891] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236538 | out: hHeap=0x1f0000) returned 1 [0250.891] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0250.892] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8dc8 | out: hHeap=0x1f0000) returned 1 [0250.892] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2338c8 | out: hHeap=0x1f0000) returned 1 [0250.892] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0250.892] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0250.892] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x255c88 | out: hHeap=0x1f0000) returned 1 [0250.892] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233468 | out: hHeap=0x1f0000) returned 1 [0250.892] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239160 | out: hHeap=0x1f0000) returned 1 [0250.893] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238870 | out: hHeap=0x1f0000) returned 1 [0250.893] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0250.893] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0250.893] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389b0 | out: hHeap=0x1f0000) returned 1 [0250.893] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210240 | out: hHeap=0x1f0000) returned 1 [0250.893] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0250.893] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238820 | out: hHeap=0x1f0000) returned 1 [0250.894] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2853b0 | out: hHeap=0x1f0000) returned 1 [0250.894] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0250.894] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2364d0 | out: hHeap=0x1f0000) returned 1 [0250.894] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228bd8 | out: hHeap=0x1f0000) returned 1 [0250.894] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0250.894] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0250.894] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228440 | out: hHeap=0x1f0000) returned 1 [0250.894] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238930 | out: hHeap=0x1f0000) returned 1 [0250.895] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388a0 | out: hHeap=0x1f0000) returned 1 [0250.895] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x292ff8 | out: hHeap=0x1f0000) returned 1 [0250.895] CloseHandle (hObject=0x23c) returned 1 [0250.896] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238860 | out: hHeap=0x1f0000) returned 1 [0250.896] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238940 | out: hHeap=0x1f0000) returned 1 [0250.896] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2370e0 | out: hHeap=0x1f0000) returned 1 [0250.896] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24c600 | out: hHeap=0x1f0000) returned 1 [0250.896] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0250.896] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bb0 | out: hHeap=0x1f0000) returned 1 [0250.896] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28ffe0 | out: hHeap=0x1f0000) returned 1 [0250.897] CloseHandle (hObject=0x174) returned 1 [0250.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b20 | out: hHeap=0x1f0000) returned 1 [0250.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b00 | out: hHeap=0x1f0000) returned 1 [0250.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad4c8 | out: hHeap=0x1f0000) returned 1 [0250.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204df0 | out: hHeap=0x1f0000) returned 1 [0250.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21b618 | out: hHeap=0x1f0000) returned 1 [0250.898] CloseHandle (hObject=0x1c0) returned 1 [0250.899] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ae0 | out: hHeap=0x1f0000) returned 1 [0250.899] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ab0 | out: hHeap=0x1f0000) returned 1 [0250.899] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad130 | out: hHeap=0x1f0000) returned 1 [0250.899] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238aa0 | out: hHeap=0x1f0000) returned 1 [0250.899] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b30 | out: hHeap=0x1f0000) returned 1 [0250.899] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a90 | out: hHeap=0x1f0000) returned 1 [0250.899] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ad0 | out: hHeap=0x1f0000) returned 1 [0250.899] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239be0 | out: hHeap=0x1f0000) returned 1 [0250.900] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x251068 | out: hHeap=0x1f0000) returned 1 [0250.900] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232cc0 | out: hHeap=0x1f0000) returned 1 [0250.900] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2066b8 | out: hHeap=0x1f0000) returned 1 [0250.900] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210078 | out: hHeap=0x1f0000) returned 1 [0250.900] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffa0 | out: hHeap=0x1f0000) returned 1 [0250.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab7d8 | out: hHeap=0x1f0000) returned 1 [0250.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2595a0 | out: hHeap=0x1f0000) returned 1 [0250.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2337b0 | out: hHeap=0x1f0000) returned 1 [0250.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2390f0 | out: hHeap=0x1f0000) returned 1 [0250.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0250.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22db68 | out: hHeap=0x1f0000) returned 1 [0250.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228c68 | out: hHeap=0x1f0000) returned 1 [0250.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0250.902] DeleteFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\concrt140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\concrt140.dll")) returned 1 [0250.904] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1242d5d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1242d5d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdc231125, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x5645a3, dwReserved0=0xa000000c, dwReserved1=0x214c86, cFileName="mfc140u.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="MFC140~1.ODV")) returned 1 [0250.904] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a6c8 [0250.904] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2364d0 [0250.904] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285ae8 [0250.904] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2364d0 | out: hHeap=0x1f0000) returned 1 [0250.904] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0250.904] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a6c8 | out: hHeap=0x1f0000) returned 1 [0250.905] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\mfc140u.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\root\\client\\mfc140u.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0250.905] GetFileType (hFile=0x1c0) returned 0x1 [0250.906] CloseHandle (hObject=0x1c0) returned 1 [0250.906] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2859e0 [0250.907] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\mfc140u.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\root\\client\\mfc140u.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1242d5d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1242d5d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdc231125, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x5645a3)) returned 1 [0250.907] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2859e0 | out: hHeap=0x1f0000) returned 1 [0250.907] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285cf8 [0250.907] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\mfc140u.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\root\\client\\mfc140u.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1242d5d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1242d5d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdc231125, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x5645a3)) returned 1 [0250.907] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285cf8 | out: hHeap=0x1f0000) returned 1 [0250.907] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285bf0 [0250.908] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285bf0 | out: hHeap=0x1f0000) returned 1 [0250.908] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdccc4f39, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xdccc4f39, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xddefaaa3, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xa13bb, dwReserved0=0xa000000c, dwReserved1=0x214c86, cFileName="msvcp120.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="MSVCP1~1.ODV")) returned 1 [0250.908] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a770 [0250.908] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2364d0 [0250.908] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2856c8 [0250.908] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2364d0 | out: hHeap=0x1f0000) returned 1 [0250.908] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285ae8 | out: hHeap=0x1f0000) returned 1 [0250.908] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a770 | out: hHeap=0x1f0000) returned 1 [0250.909] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\msvcp120.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcp120.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0250.910] GetFileType (hFile=0x1c0) returned 0x1 [0250.910] CloseHandle (hObject=0x1c0) returned 1 [0250.911] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285ae8 [0250.911] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\msvcp120.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcp120.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdccc4f39, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xdccc4f39, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xddefaaa3, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xa13bb)) returned 1 [0250.911] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285ae8 | out: hHeap=0x1f0000) returned 1 [0250.911] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2854b8 [0250.911] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\msvcp120.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcp120.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdccc4f39, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xdccc4f39, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xddefaaa3, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xa13bb)) returned 1 [0250.912] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2854b8 | out: hHeap=0x1f0000) returned 1 [0250.912] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2859e0 [0250.912] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2859e0 | out: hHeap=0x1f0000) returned 1 [0250.912] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1ea0ff2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1ea0ff2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd20449b3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x9b0a0, dwReserved0=0xa000000c, dwReserved1=0x214c86, cFileName="msvcp140.dll", cAlternateFileName="")) returned 1 [0250.912] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0250.912] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2365a0 [0250.912] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2215d8 [0250.913] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2365a0 | out: hHeap=0x1f0000) returned 1 [0250.913] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2856c8 | out: hHeap=0x1f0000) returned 1 [0250.913] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0250.913] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\msvcp140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcp140.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0250.914] GetLastError () returned 0x2 [0250.914] GetLastError () returned 0x2 [0250.914] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xddf20cdb, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xddf20cdb, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xddf4700d, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x214c86, cFileName="msvcp140.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="MSVCP1~2.ODV")) returned 1 [0250.914] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a2d8 [0250.915] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2364d0 [0250.915] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2859e0 [0250.915] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2364d0 | out: hHeap=0x1f0000) returned 1 [0250.915] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0250.915] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a2d8 | out: hHeap=0x1f0000) returned 1 [0250.917] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\msvcp140.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcp140.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0250.917] GetFileType (hFile=0x1c0) returned 0x1 [0250.918] CloseHandle (hObject=0x1c0) returned 1 [0250.918] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2853b0 [0250.918] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\msvcp140.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcp140.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xddf20cdb, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xddf20cdb, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xde942d58, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x9b1b3)) returned 1 [0250.919] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2853b0 | out: hHeap=0x1f0000) returned 1 [0250.919] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2852a8 [0250.919] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\msvcp140.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcp140.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xddf20cdb, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xddf20cdb, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xde942d58, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x9b1b3)) returned 1 [0250.919] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2852a8 | out: hHeap=0x1f0000) returned 1 [0250.919] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285ae8 [0250.919] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285ae8 | out: hHeap=0x1f0000) returned 1 [0250.919] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd890e4d1, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xd890e4d1, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xd981af3f, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xeb3bb, dwReserved0=0xa000000c, dwReserved1=0x214c86, cFileName="msvcr120.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="MSVCR1~1.ODV")) returned 1 [0250.919] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a578 [0250.920] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236608 [0250.920] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2855c0 [0250.920] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236608 | out: hHeap=0x1f0000) returned 1 [0250.920] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2859e0 | out: hHeap=0x1f0000) returned 1 [0250.920] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a578 | out: hHeap=0x1f0000) returned 1 [0250.921] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\msvcr120.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcr120.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0250.921] GetFileType (hFile=0x1c0) returned 0x1 [0250.922] CloseHandle (hObject=0x1c0) returned 1 [0250.922] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2856c8 [0250.923] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\msvcr120.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcr120.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd890e4d1, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xd890e4d1, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xd981af3f, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xeb3bb)) returned 1 [0250.923] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2856c8 | out: hHeap=0x1f0000) returned 1 [0250.923] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2858d8 [0250.923] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\msvcr120.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcr120.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd890e4d1, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xd890e4d1, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xd981af3f, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xeb3bb)) returned 1 [0250.923] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2858d8 | out: hHeap=0x1f0000) returned 1 [0250.923] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2859e0 [0250.923] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2859e0 | out: hHeap=0x1f0000) returned 1 [0250.924] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd98413d2, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xd98413d2, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xda49deba, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xeffd3, dwReserved0=0xa000000c, dwReserved1=0x214c86, cFileName="ucrtbase.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="UCRTBA~1.ODV")) returned 1 [0250.924] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21aa10 [0250.924] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2365a0 [0250.924] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2851a0 [0250.924] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2365a0 | out: hHeap=0x1f0000) returned 1 [0250.924] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2855c0 | out: hHeap=0x1f0000) returned 1 [0250.924] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21aa10 | out: hHeap=0x1f0000) returned 1 [0250.925] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\ucrtbase.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\root\\client\\ucrtbase.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0250.925] GetFileType (hFile=0x1c0) returned 0x1 [0250.926] CloseHandle (hObject=0x1c0) returned 1 [0250.926] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285e00 [0250.927] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\ucrtbase.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\root\\client\\ucrtbase.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd98413d2, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xd98413d2, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xda49deba, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xeffd3)) returned 1 [0250.927] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285e00 | out: hHeap=0x1f0000) returned 1 [0250.927] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2856c8 [0250.927] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\ucrtbase.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\root\\client\\ucrtbase.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd98413d2, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xd98413d2, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xda49deba, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xeffd3)) returned 1 [0250.927] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2856c8 | out: hHeap=0x1f0000) returned 1 [0250.927] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285bf0 [0250.927] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285bf0 | out: hHeap=0x1f0000) returned 1 [0250.927] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd2ca2e08, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2ca2e08, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2f0533c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5f4b0, dwReserved0=0xa000000c, dwReserved1=0x214c86, cFileName="vccorlib140.dll", cAlternateFileName="VCCORL~1.DLL")) returned 1 [0250.927] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0250.927] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2364d0 [0250.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220d88 [0250.928] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2364d0 | out: hHeap=0x1f0000) returned 1 [0250.928] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2851a0 | out: hHeap=0x1f0000) returned 1 [0250.928] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0250.928] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\vccorlib140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\vccorlib140.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0250.929] GetFileType (hFile=0x1c0) returned 0x1 [0250.929] CloseHandle (hObject=0x1c0) returned 1 [0250.930] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0250.930] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\vccorlib140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\vccorlib140.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd2ca2e08, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2ca2e08, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2f0533c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5f4b0)) returned 1 [0250.930] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0250.930] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0250.930] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\vccorlib140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\vccorlib140.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd2ca2e08, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2ca2e08, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2f0533c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5f4b0)) returned 1 [0250.930] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0250.930] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0250.930] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0250.931] GetLastError () returned 0x0 [0250.931] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0251.085] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228a28 [0251.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d508 [0251.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0251.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238f68 [0251.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0251.086] CryptAcquireContextA (in: phProv=0x1a1daf0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1a1daf0*=0x213460) returned 1 [0251.087] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238410 | out: pbBuffer=0x238410) returned 1 [0251.087] CryptReleaseContext (hProv=0x213460, dwFlags=0x0) returned 1 [0251.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0251.088] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x252370 [0251.088] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x233238 [0251.088] QueryPerformanceCounter (in: lpPerformanceCount=0x1a1da84 | out: lpPerformanceCount=0x1a1da84*=40845670829) returned 1 [0251.088] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1a1dac4 | out: lpSystemTimeAsFileTime=0x1a1dac4) [0251.088] QueryPerformanceCounter (in: lpPerformanceCount=0x1a1da84 | out: lpPerformanceCount=0x1a1da84*=40845709716) returned 1 [0251.088] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1a1dac4 | out: lpSystemTimeAsFileTime=0x1a1dac4) [0251.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238c58 [0251.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x251068 [0251.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x233350 [0251.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x2aafb8 [0251.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20fef8 [0251.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2066b8 [0251.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210120 [0251.089] GetLastError () returned 0x0 [0251.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0251.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x210270 [0251.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0251.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x140) returned 0x21d400 [0251.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210270 | out: hHeap=0x1f0000) returned 1 [0251.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389f0 [0251.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ac0 [0251.217] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\vccorlib140.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\root\\client\\vccorlib140.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d990, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0251.218] GetFileType (hFile=0x1e0) returned 0x1 [0251.219] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238860 [0251.219] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238830 [0251.220] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\vccorlib140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\vccorlib140.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d9c0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0251.220] GetFileType (hFile=0x224) returned 0x1 [0251.221] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c70 [0251.221] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204df0 [0251.221] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad1e8 [0251.221] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238840 [0251.221] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387e0 [0251.222] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\vccorlib140.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\root\\client\\vccorlib140.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d90c, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0251.223] GetFileType (hFile=0x1e8) returned 0x1 [0251.223] GetLastError () returned 0xb7 [0251.224] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe4) returned 0x21b168 [0251.224] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f10 [0251.224] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bf0 [0251.224] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e30 [0251.224] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad9d0 [0251.224] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238970 [0251.224] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238980 [0251.225] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\vccorlib140.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\root\\client\\vccorlib140.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d90c, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0251.226] GetFileType (hFile=0x198) returned 0x1 [0251.226] GetLastError () returned 0xb7 [0251.226] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204b90 [0251.227] GetLastError () returned 0xb7 [0251.227] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204b90 [0251.227] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cb0 [0251.227] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ef0 [0251.227] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb8) returned 0x2379e0 [0251.227] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238880 [0251.228] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387f0 [0251.228] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\vccorlib140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\vccorlib140.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d904, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0251.229] GetFileType (hFile=0x19c) returned 0x1 [0251.229] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28dfd0 [0251.230] ReadFile (in: hFile=0x19c, lpBuffer=0x28dfd0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1a1d860, lpOverlapped=0x0 | out: lpBuffer=0x28dfd0*, lpNumberOfBytesRead=0x1a1d860*=0x1000, lpOverlapped=0x0) returned 1 [0251.234] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24ca08 [0251.235] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x286f98 [0251.235] GetLastError () returned 0x0 [0251.254] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210018 [0251.255] GetLastError () returned 0x0 [0251.255] CloseHandle (hObject=0x1e0) returned 1 [0251.256] CloseHandle (hObject=0x224) returned 1 [0251.256] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238990 [0251.256] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238800 [0251.257] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\vccorlib140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\vccorlib140.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d9c0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0251.445] GetFileType (hFile=0x1e0) returned 0x1 [0251.446] GetLastError () returned 0xb7 [0251.447] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28efd8 [0251.447] GetLastError () returned 0xb7 [0251.449] CloseHandle (hObject=0x1e0) returned 1 [0251.450] DeleteFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\vccorlib140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\vccorlib140.dll")) returned 0 [0251.450] GetLastError () returned 0x20 [0251.450] GetLastError () returned 0x20 [0251.451] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228518 [0251.451] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2384b0 [0251.451] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238410 [0251.451] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x2287a0 [0251.452] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e30 [0251.452] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cd0 [0251.452] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x238900 [0251.452] GetLastError () returned 0x20 [0251.452] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239208 [0251.452] GetLastError () returned 0x20 [0251.453] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238e50 [0251.453] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236538 [0251.453] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238370 [0251.453] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2857d0 [0251.453] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388e0 [0251.453] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0251.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210198 [0251.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238820 [0251.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0251.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210240 [0251.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x237fd8 [0251.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x284f90 [0251.455] GetLastError () returned 0x20 [0251.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x2388c0 [0251.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x2388f0 [0251.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238890 [0251.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388f0 | out: hHeap=0x1f0000) returned 1 [0251.456] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388d0 [0251.456] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238890 | out: hHeap=0x1f0000) returned 1 [0251.456] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388c0 | out: hHeap=0x1f0000) returned 1 [0251.456] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388f0 [0251.456] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101e0 [0251.456] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388f0 | out: hHeap=0x1f0000) returned 1 [0251.456] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210258 [0251.457] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0251.457] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388d0 | out: hHeap=0x1f0000) returned 1 [0251.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210210 [0251.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101b0 [0251.457] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0251.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0251.457] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0251.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0251.458] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210258 [0251.458] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204c70 [0251.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0251.458] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e90 [0251.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c70 | out: hHeap=0x1f0000) returned 1 [0251.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0251.459] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d90 [0251.459] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2380a0 [0251.459] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d90 | out: hHeap=0x1f0000) returned 1 [0251.459] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204f70 [0251.459] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0251.459] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e90 | out: hHeap=0x1f0000) returned 1 [0251.459] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204c70 [0251.459] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206628 [0251.460] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c70 | out: hHeap=0x1f0000) returned 1 [0251.460] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238348 [0251.460] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206628 | out: hHeap=0x1f0000) returned 1 [0251.460] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f70 | out: hHeap=0x1f0000) returned 1 [0251.460] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388f0 [0251.460] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210210 [0251.460] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388f0 | out: hHeap=0x1f0000) returned 1 [0251.461] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0251.461] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0251.461] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204ef0 [0251.461] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0251.461] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206928 [0251.461] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ef0 | out: hHeap=0x1f0000) returned 1 [0251.461] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206928 | out: hHeap=0x1f0000) returned 1 [0251.462] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238348 | out: hHeap=0x1f0000) returned 1 [0251.462] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0251.462] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0251.462] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2857d0 | out: hHeap=0x1f0000) returned 1 [0251.462] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0251.466] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2391d0 [0251.466] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0251.466] CryptAcquireContextA (in: phProv=0x1a1daf0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1a1daf0*=0x212f98) returned 1 [0251.467] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238140 | out: pbBuffer=0x238140) returned 1 [0251.468] CryptReleaseContext (hProv=0x212f98, dwFlags=0x0) returned 1 [0251.468] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0251.468] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2380a0 [0251.468] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238348 [0251.468] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239278 [0251.468] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0251.468] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0251.468] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239278 | out: hHeap=0x1f0000) returned 1 [0251.469] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8d18 [0251.469] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210258 [0251.469] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x236608 [0251.469] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238140 [0251.469] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285cf8 [0251.469] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e30 [0251.469] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236468 [0251.469] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2384b0 [0251.470] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2851a0 [0251.470] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388f0 [0251.470] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0251.470] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210210 [0251.470] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238930 [0251.470] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0251.470] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101b0 [0251.470] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0251.470] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0251.471] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238930 | out: hHeap=0x1f0000) returned 1 [0251.471] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0251.471] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0251.471] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388f0 | out: hHeap=0x1f0000) returned 1 [0251.471] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2851a0 | out: hHeap=0x1f0000) returned 1 [0251.471] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0251.471] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0251.471] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238e18 [0251.472] GetLastError () returned 0x0 [0251.472] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239160 [0251.472] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0251.472] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0251.472] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0251.472] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0251.473] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0251.473] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0251.473] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x24eb00 [0251.473] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285bf0 [0251.473] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0251.473] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0251.473] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0251.474] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0251.474] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285e00 [0251.474] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0251.474] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0251.474] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x230000 [0251.474] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x254980 [0251.474] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2338c8 [0251.474] QueryPerformanceCounter (in: lpPerformanceCount=0x1a1d640 | out: lpPerformanceCount=0x1a1d640*=40884348532) returned 1 [0251.475] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1a1d680 | out: lpSystemTimeAsFileTime=0x1a1d680) [0251.475] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238850 [0251.475] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0251.475] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e70 [0251.475] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e70 | out: hHeap=0x1f0000) returned 1 [0251.476] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0251.476] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0251.476] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204db0 [0251.476] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204db0 | out: hHeap=0x1f0000) returned 1 [0251.476] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0251.476] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238850 | out: hHeap=0x1f0000) returned 1 [0251.476] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0251.476] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239010 [0251.476] GetLastError () returned 0x0 [0251.477] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0251.477] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0251.477] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0251.477] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381b8 [0251.477] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238370 [0251.477] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0251.478] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0251.478] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238398 [0251.478] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0251.766] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x222ee8 [0251.766] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0251.766] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0251.766] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0251.767] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0251.767] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0251.767] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238078 [0251.767] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2380a0 [0251.767] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0251.767] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0251.767] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0251.767] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0251.767] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x234b90 [0251.767] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b90 | out: hHeap=0x1f0000) returned 1 [0251.767] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0251.767] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0251.767] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210210 [0251.767] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228bd8 [0251.768] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238168 [0251.768] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381e0 [0251.768] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238078 [0251.768] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2380a0 [0251.768] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0251.768] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0251.768] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0251.768] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238168 [0251.768] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381e0 [0251.768] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0251.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0251.769] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0251.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206808 [0251.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x2b1fe0 [0251.769] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b1fe0 | out: hHeap=0x1f0000) returned 1 [0251.769] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206808 | out: hHeap=0x1f0000) returned 1 [0251.769] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0251.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0251.769] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0251.769] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0251.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204e50 [0251.770] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0251.770] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0251.770] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0251.770] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a9fe0 [0251.770] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0251.770] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0251.770] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0251.770] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228bd8 | out: hHeap=0x1f0000) returned 1 [0251.770] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0251.771] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e50 | out: hHeap=0x1f0000) returned 1 [0251.771] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0251.771] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0251.771] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aa358 [0251.771] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aa358 | out: hHeap=0x1f0000) returned 1 [0251.771] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ee8 | out: hHeap=0x1f0000) returned 1 [0251.771] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0251.771] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0251.771] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0251.771] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0251.771] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0251.772] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0251.772] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0251.772] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a9a18 [0251.772] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a9d90 [0251.772] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a9a18 | out: hHeap=0x1f0000) returned 1 [0251.772] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a9d90 | out: hHeap=0x1f0000) returned 1 [0251.772] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a9fe0 | out: hHeap=0x1f0000) returned 1 [0251.772] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0251.772] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285e00 | out: hHeap=0x1f0000) returned 1 [0251.772] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24eb00 | out: hHeap=0x1f0000) returned 1 [0251.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x232dd8 [0251.773] GetLastError () returned 0x0 [0251.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388b0 [0251.774] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238910 [0251.774] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\vccorlib140.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\root\\client\\vccorlib140.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1d9f0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0251.775] GetFileType (hFile=0x224) returned 0x1 [0251.776] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x288fa8 [0251.776] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1a1d978 | out: lpNewFilePointer=0x0) returned 1 [0251.776] GetLastError () returned 0xb7 [0251.777] CloseHandle (hObject=0x224) returned 1 [0251.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238910 | out: hHeap=0x1f0000) returned 1 [0251.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388b0 | out: hHeap=0x1f0000) returned 1 [0251.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285bf0 | out: hHeap=0x1f0000) returned 1 [0251.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285cf8 | out: hHeap=0x1f0000) returned 1 [0251.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0251.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e30 | out: hHeap=0x1f0000) returned 1 [0251.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236608 | out: hHeap=0x1f0000) returned 1 [0251.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0251.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0251.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232dd8 | out: hHeap=0x1f0000) returned 1 [0251.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238348 | out: hHeap=0x1f0000) returned 1 [0251.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0251.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x254980 | out: hHeap=0x1f0000) returned 1 [0251.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2338c8 | out: hHeap=0x1f0000) returned 1 [0251.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2391d0 | out: hHeap=0x1f0000) returned 1 [0251.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238900 | out: hHeap=0x1f0000) returned 1 [0251.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210240 | out: hHeap=0x1f0000) returned 1 [0251.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0251.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238820 | out: hHeap=0x1f0000) returned 1 [0251.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0251.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0251.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388e0 | out: hHeap=0x1f0000) returned 1 [0251.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x284f90 | out: hHeap=0x1f0000) returned 1 [0251.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0251.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236538 | out: hHeap=0x1f0000) returned 1 [0251.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2287a0 | out: hHeap=0x1f0000) returned 1 [0251.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0251.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0251.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228518 | out: hHeap=0x1f0000) returned 1 [0251.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238800 | out: hHeap=0x1f0000) returned 1 [0251.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238990 | out: hHeap=0x1f0000) returned 1 [0251.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28dfd0 | out: hHeap=0x1f0000) returned 1 [0251.781] CloseHandle (hObject=0x19c) returned 1 [0251.781] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387f0 | out: hHeap=0x1f0000) returned 1 [0251.781] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238880 | out: hHeap=0x1f0000) returned 1 [0251.781] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2379e0 | out: hHeap=0x1f0000) returned 1 [0251.781] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24ca08 | out: hHeap=0x1f0000) returned 1 [0251.781] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210018 | out: hHeap=0x1f0000) returned 1 [0251.781] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204b90 | out: hHeap=0x1f0000) returned 1 [0251.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286f98 | out: hHeap=0x1f0000) returned 1 [0251.782] CloseHandle (hObject=0x198) returned 1 [0251.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238980 | out: hHeap=0x1f0000) returned 1 [0251.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238970 | out: hHeap=0x1f0000) returned 1 [0251.783] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad9d0 | out: hHeap=0x1f0000) returned 1 [0251.783] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f10 | out: hHeap=0x1f0000) returned 1 [0251.783] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21b168 | out: hHeap=0x1f0000) returned 1 [0251.783] CloseHandle (hObject=0x1e8) returned 1 [0251.783] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387e0 | out: hHeap=0x1f0000) returned 1 [0251.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238840 | out: hHeap=0x1f0000) returned 1 [0251.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad1e8 | out: hHeap=0x1f0000) returned 1 [0251.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238830 | out: hHeap=0x1f0000) returned 1 [0251.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238860 | out: hHeap=0x1f0000) returned 1 [0251.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ac0 | out: hHeap=0x1f0000) returned 1 [0251.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389f0 | out: hHeap=0x1f0000) returned 1 [0251.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d400 | out: hHeap=0x1f0000) returned 1 [0251.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x251068 | out: hHeap=0x1f0000) returned 1 [0251.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233350 | out: hHeap=0x1f0000) returned 1 [0251.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2066b8 | out: hHeap=0x1f0000) returned 1 [0251.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210120 | out: hHeap=0x1f0000) returned 1 [0251.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20fef8 | out: hHeap=0x1f0000) returned 1 [0251.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aafb8 | out: hHeap=0x1f0000) returned 1 [0251.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x252370 | out: hHeap=0x1f0000) returned 1 [0251.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233238 | out: hHeap=0x1f0000) returned 1 [0251.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238f68 | out: hHeap=0x1f0000) returned 1 [0251.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0251.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d508 | out: hHeap=0x1f0000) returned 1 [0251.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228a28 | out: hHeap=0x1f0000) returned 1 [0251.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0251.786] DeleteFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\vccorlib140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\vccorlib140.dll")) returned 1 [0251.787] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd2424784, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2424784, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd26acf16, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15ab0, dwReserved0=0xa000000c, dwReserved1=0x214c86, cFileName="vcruntime140.dll", cAlternateFileName="VCRUNT~1.DLL")) returned 1 [0251.788] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239278 [0251.788] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236468 [0251.788] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221540 [0251.788] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0251.788] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0251.788] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239278 | out: hHeap=0x1f0000) returned 1 [0251.789] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\vcruntime140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\vcruntime140.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1e238, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0251.789] GetFileType (hFile=0x1e8) returned 0x1 [0251.790] CloseHandle (hObject=0x1e8) returned 1 [0251.790] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0251.790] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\vcruntime140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\vcruntime140.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2cc | out: lpFileInformation=0x1a1e2cc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd2424784, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2424784, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd26acf16, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15ab0)) returned 1 [0251.790] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0251.791] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0251.791] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\vcruntime140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\vcruntime140.dll"), fInfoLevelId=0x0, lpFileInformation=0x1a1e2d4 | out: lpFileInformation=0x1a1e2d4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd2424784, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2424784, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd26acf16, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15ab0)) returned 1 [0251.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0251.791] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0251.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0251.792] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd2424784, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2424784, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd26acf16, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15ab0, dwReserved0=0xa000000c, dwReserved1=0x214c86, cFileName="vcruntime140.dll", cAlternateFileName="VCRUNT~1.DLL")) returned 0 [0251.792] FindClose (in: hFindFile=0x24ea00 | out: hFindFile=0x24ea00) returned 1 [0251.792] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0251.792] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f1b8 | out: hHeap=0x1f0000) returned 1 [0251.792] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0251.792] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2288c0 | out: hHeap=0x1f0000) returned 1 [0251.793] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2288c0 [0251.793] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0251.793] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f1b8 [0251.793] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae1b0 [0251.793] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\*", lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x214c86, cFileName=".", cAlternateFileName="")) returned 0x24ec00 [0251.793] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2aea98 [0251.793] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae1b0 | out: hHeap=0x1f0000) returned 1 [0251.794] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0251.794] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x214c86, cFileName="..", cAlternateFileName="")) returned 1 [0251.794] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae8b8 [0251.794] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aea98 | out: hHeap=0x1f0000) returned 1 [0251.794] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0251.794] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0251.794] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1113bba3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1113bba3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x214c86, cFileName="PUB60COR", cAlternateFileName="")) returned 1 [0251.794] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0251.794] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2aecf0 [0251.795] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218978 [0251.795] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aecf0 | out: hHeap=0x1f0000) returned 1 [0251.795] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae8b8 | out: hHeap=0x1f0000) returned 1 [0251.795] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0251.795] lstrcmpW (lpString1="PUB60COR", lpString2=".") returned 1 [0251.795] lstrcmpW (lpString1="PUB60COR", lpString2="..") returned 1 [0251.795] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204ef0 [0251.795] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0251.795] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x104b75c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x214c86, cFileName="Publisher", cAlternateFileName="PUBLIS~1")) returned 1 [0251.795] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0251.796] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2aec78 [0251.796] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218558 [0251.796] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aec78 | out: hHeap=0x1f0000) returned 1 [0251.796] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218978 | out: hHeap=0x1f0000) returned 1 [0251.796] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0251.796] lstrcmpW (lpString1="Publisher", lpString2=".") returned 1 [0251.796] lstrcmpW (lpString1="Publisher", lpString2="..") returned 1 [0251.796] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2391d0 [0251.797] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0251.797] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ef0 | out: hHeap=0x1f0000) returned 1 [0251.797] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1a1e478 | out: lpFindFileData=0x1a1e478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x104b75c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x214c86, cFileName="Publisher", cAlternateFileName="PUBLIS~1")) returned 0 [0251.797] FindClose (in: hFindFile=0x24ec00 | out: hFindFile=0x24ec00) returned 1 [0251.800] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228710 [0251.800] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0251.800] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22dd00 [0251.800] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0251.800] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\*", lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1113bba3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1113bba3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName=".", cAlternateFileName="")) returned 0x24eb00 [0251.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0251.880] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0251.880] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0251.880] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1113bba3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1113bba3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="..", cAlternateFileName="")) returned 1 [0251.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0251.880] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0251.881] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0251.881] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0251.881] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2340, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="AG00004_.GIF", cAlternateFileName="")) returned 1 [0251.881] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238348 [0251.881] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0251.881] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0251.881] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0251.881] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0251.882] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238348 | out: hHeap=0x1f0000) returned 1 [0251.882] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00004_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0251.925] GetFileType (hFile=0x1e0) returned 0x1 [0251.926] CloseHandle (hObject=0x1e0) returned 1 [0251.926] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0251.926] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00004_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2340)) returned 1 [0251.927] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0251.927] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0251.927] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00004_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2340)) returned 1 [0251.927] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0251.927] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0251.927] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0251.928] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c30, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="AG00011_.GIF", cAlternateFileName="")) returned 1 [0251.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0251.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0251.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0251.928] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0251.928] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0251.928] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0251.929] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00011_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00011_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0252.221] GetFileType (hFile=0x1e0) returned 0x1 [0252.222] CloseHandle (hObject=0x1e0) returned 1 [0252.222] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0252.222] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00011_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00011_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c30)) returned 1 [0252.222] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0252.222] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0252.223] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00011_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00011_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c30)) returned 1 [0252.223] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0252.223] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0252.223] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0252.223] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a19, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="AG00021_.GIF", cAlternateFileName="")) returned 1 [0252.223] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0252.223] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0252.223] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0252.224] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0252.224] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0252.224] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0252.349] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00021_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0252.353] GetFileType (hFile=0x198) returned 0x1 [0252.354] CloseHandle (hObject=0x198) returned 1 [0252.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0252.354] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00021_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a19)) returned 1 [0252.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0252.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0252.354] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00021_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a19)) returned 1 [0252.355] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0252.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0252.355] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0252.355] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a1c, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="AG00037_.GIF", cAlternateFileName="")) returned 1 [0252.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0252.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0252.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0252.355] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0252.355] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0252.355] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0252.356] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00037_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0252.358] GetFileType (hFile=0x198) returned 0x1 [0252.358] CloseHandle (hObject=0x198) returned 1 [0252.359] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0252.359] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00037_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a1c)) returned 1 [0252.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0252.359] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0252.359] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00037_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a1c)) returned 1 [0252.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0252.359] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0252.360] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0252.360] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb58a9e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb58a9e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcb3, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="AG00038_.GIF", cAlternateFileName="")) returned 1 [0252.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0252.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0252.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0252.360] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0252.360] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0252.360] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0252.361] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00038_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0252.361] GetFileType (hFile=0x198) returned 0x1 [0252.362] CloseHandle (hObject=0x198) returned 1 [0252.362] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0252.362] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00038_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb58a9e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb58a9e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcb3)) returned 1 [0252.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0252.362] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0252.363] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00038_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb58a9e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb58a9e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcb3)) returned 1 [0252.363] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0252.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0252.363] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0252.363] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb58a9e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fa1, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="AG00040_.GIF", cAlternateFileName="")) returned 1 [0252.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0252.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0252.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0252.363] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0252.363] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0252.364] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0252.364] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00040_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0252.371] GetFileType (hFile=0x198) returned 0x1 [0252.372] CloseHandle (hObject=0x198) returned 1 [0252.372] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0252.372] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00040_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb58a9e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fa1)) returned 1 [0252.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0252.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0252.373] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00040_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb58a9e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fa1)) returned 1 [0252.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0252.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0252.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0252.373] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e06, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="AG00052_.GIF", cAlternateFileName="")) returned 1 [0252.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0252.374] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0252.374] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0252.374] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0252.374] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0252.374] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0252.375] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00052_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0252.375] GetFileType (hFile=0x198) returned 0x1 [0252.376] CloseHandle (hObject=0x198) returned 1 [0252.376] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0252.376] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00052_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e06)) returned 1 [0252.376] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0252.376] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0252.376] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00052_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e06)) returned 1 [0252.377] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0252.377] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0252.377] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0252.377] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e73, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="AG00057_.GIF", cAlternateFileName="")) returned 1 [0252.377] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0252.377] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0252.377] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0252.377] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0252.378] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0252.378] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0252.378] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00057_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0252.383] GetFileType (hFile=0x198) returned 0x1 [0252.384] CloseHandle (hObject=0x198) returned 1 [0252.384] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0252.384] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00057_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e73)) returned 1 [0252.384] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0252.384] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0252.385] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00057_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e73)) returned 1 [0252.385] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0252.385] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0252.385] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0252.385] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x205, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="AG00090_.GIF", cAlternateFileName="")) returned 1 [0252.385] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0252.385] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0252.385] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0252.385] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0252.386] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0252.386] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0252.387] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00090_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0252.396] GetFileType (hFile=0x198) returned 0x1 [0252.397] CloseHandle (hObject=0x198) returned 1 [0252.397] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0252.398] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00090_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x205)) returned 1 [0252.398] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0252.398] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0252.398] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00090_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x205)) returned 1 [0252.398] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0252.398] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0252.398] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0252.398] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f6, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="AG00092_.GIF", cAlternateFileName="")) returned 1 [0252.399] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0252.399] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0252.399] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0252.399] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0252.399] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0252.399] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0252.400] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00092_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0252.401] GetFileType (hFile=0x198) returned 0x1 [0252.401] CloseHandle (hObject=0x198) returned 1 [0252.401] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0252.402] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00092_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f6)) returned 1 [0252.402] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0252.402] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0252.402] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00092_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f6)) returned 1 [0252.402] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0252.402] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0252.402] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0252.403] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x319e, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="AG00103_.GIF", cAlternateFileName="")) returned 1 [0252.403] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0252.403] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0252.403] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0252.403] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0252.403] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0252.403] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0252.404] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00103_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0252.409] GetFileType (hFile=0x198) returned 0x1 [0252.410] CloseHandle (hObject=0x198) returned 1 [0252.410] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0252.410] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00103_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x319e)) returned 1 [0252.410] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0252.410] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0252.411] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00103_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x319e)) returned 1 [0252.411] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0252.411] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0252.411] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0252.411] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd9c, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="AG00120_.GIF", cAlternateFileName="")) returned 1 [0252.411] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0252.411] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0252.412] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0252.412] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0252.412] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0252.412] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0252.413] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00120_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0252.760] GetFileType (hFile=0x174) returned 0x1 [0252.760] CloseHandle (hObject=0x174) returned 1 [0252.761] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0252.761] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00120_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd9c)) returned 1 [0252.761] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0252.761] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0252.761] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00120_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd9c)) returned 1 [0252.761] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0252.761] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0252.761] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0252.761] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc44, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="AG00126_.GIF", cAlternateFileName="")) returned 1 [0252.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0252.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0252.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0252.762] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0252.762] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0252.762] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0252.762] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00126_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0253.124] GetFileType (hFile=0x1ac) returned 0x1 [0253.124] CloseHandle (hObject=0x1ac) returned 1 [0253.124] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0253.124] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00126_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc44)) returned 1 [0253.125] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0253.125] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0253.125] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00126_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc44)) returned 1 [0253.125] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0253.125] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0253.125] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0253.125] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30c2, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="AG00129_.GIF", cAlternateFileName="")) returned 1 [0253.125] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0253.125] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0253.125] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0253.126] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0253.126] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0253.126] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0253.126] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00129_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0253.127] GetFileType (hFile=0x1ac) returned 0x1 [0253.127] CloseHandle (hObject=0x1ac) returned 1 [0253.127] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0253.127] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00129_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30c2)) returned 1 [0253.128] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0253.128] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0253.128] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00129_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30c2)) returned 1 [0253.128] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0253.128] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0253.128] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0253.128] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1485, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="AG00130_.GIF", cAlternateFileName="")) returned 1 [0253.128] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0253.128] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0253.128] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0253.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0253.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0253.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0253.129] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00130_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0253.130] GetFileType (hFile=0x1ac) returned 0x1 [0253.130] CloseHandle (hObject=0x1ac) returned 1 [0253.130] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0253.131] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00130_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1485)) returned 1 [0253.131] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0253.131] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0253.131] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00130_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1485)) returned 1 [0253.131] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0253.131] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0253.131] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0253.131] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa24, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="AG00135_.GIF", cAlternateFileName="")) returned 1 [0253.132] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0253.132] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0253.132] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0253.132] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0253.132] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0253.132] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0253.133] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00135_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0253.133] GetFileType (hFile=0x1ac) returned 0x1 [0253.133] CloseHandle (hObject=0x1ac) returned 1 [0253.134] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0253.134] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00135_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa24)) returned 1 [0253.134] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0253.134] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0253.134] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00135_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa24)) returned 1 [0253.135] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0253.135] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0253.135] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0253.135] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x296f, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="AG00139_.GIF", cAlternateFileName="")) returned 1 [0253.135] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0253.135] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0253.135] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0253.135] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0253.136] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0253.136] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0253.136] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00139_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0253.137] GetFileType (hFile=0x1ac) returned 0x1 [0253.137] CloseHandle (hObject=0x1ac) returned 1 [0253.137] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0253.138] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00139_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x296f)) returned 1 [0253.138] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0253.138] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0253.138] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00139_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x296f)) returned 1 [0253.138] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0253.138] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0253.138] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0253.138] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3bcc, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="AG00142_.GIF", cAlternateFileName="")) returned 1 [0253.138] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0253.138] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0253.139] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0253.140] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0253.140] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0253.140] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0253.140] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00142_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0253.141] GetFileType (hFile=0x1ac) returned 0x1 [0253.141] CloseHandle (hObject=0x1ac) returned 1 [0253.142] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0253.142] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00142_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3bcc)) returned 1 [0253.142] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0253.142] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0253.142] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00142_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3bcc)) returned 1 [0253.143] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0253.143] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0253.143] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0253.143] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14c3, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="AG00154_.GIF", cAlternateFileName="")) returned 1 [0253.143] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0253.143] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0253.143] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0253.143] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0253.143] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0253.144] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0253.144] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00154_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0253.144] GetFileType (hFile=0x1ac) returned 0x1 [0253.145] CloseHandle (hObject=0x1ac) returned 1 [0253.145] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0253.145] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00154_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14c3)) returned 1 [0253.146] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0253.146] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0253.146] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00154_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14c3)) returned 1 [0253.146] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0253.146] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0253.146] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0253.146] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="AG00157_.GIF", cAlternateFileName="")) returned 1 [0253.146] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0253.146] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0253.147] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0253.147] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0253.147] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0253.147] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0253.147] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00157_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0253.147] GetFileType (hFile=0x1ac) returned 0x1 [0253.148] CloseHandle (hObject=0x1ac) returned 1 [0253.148] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0253.148] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00157_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x135b)) returned 1 [0253.148] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0253.149] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0253.149] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00157_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x135b)) returned 1 [0253.149] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0253.149] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0253.149] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0253.149] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13a6, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="AG00158_.GIF", cAlternateFileName="")) returned 1 [0253.149] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0253.149] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0253.149] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0253.150] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0253.150] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0253.150] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0253.150] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00158_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0253.151] GetFileType (hFile=0x1ac) returned 0x1 [0253.151] CloseHandle (hObject=0x1ac) returned 1 [0253.151] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0253.151] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00158_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13a6)) returned 1 [0253.151] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0253.151] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0253.152] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00158_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13a6)) returned 1 [0253.152] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0253.152] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0253.152] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0253.152] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x47a, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="AG00160_.GIF", cAlternateFileName="")) returned 1 [0253.152] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0253.152] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0253.152] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0253.152] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0253.153] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0253.153] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0253.153] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00160_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0253.153] GetFileType (hFile=0x1ac) returned 0x1 [0253.154] CloseHandle (hObject=0x1ac) returned 1 [0253.154] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0253.155] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00160_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x47a)) returned 1 [0253.155] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0253.155] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0253.155] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00160_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x47a)) returned 1 [0253.155] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0253.155] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0253.155] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0253.155] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d9f, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="AG00161_.GIF", cAlternateFileName="")) returned 1 [0253.155] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0253.156] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0253.156] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0253.156] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0253.156] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0253.156] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0253.156] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00161_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0253.157] GetFileType (hFile=0x1ac) returned 0x1 [0253.157] CloseHandle (hObject=0x1ac) returned 1 [0253.157] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0253.157] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00161_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d9f)) returned 1 [0253.157] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0253.158] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0253.158] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00161_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d9f)) returned 1 [0253.158] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0253.158] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0253.158] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0253.158] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b48, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="AG00163_.GIF", cAlternateFileName="")) returned 1 [0253.158] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0253.158] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0253.158] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0253.158] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0253.158] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0253.158] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0253.159] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00163_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0253.159] GetFileType (hFile=0x1ac) returned 0x1 [0253.159] CloseHandle (hObject=0x1ac) returned 1 [0253.159] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0253.160] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00163_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b48)) returned 1 [0253.160] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0253.160] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0253.160] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00163_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b48)) returned 1 [0253.160] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0253.160] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0253.160] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0253.160] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x33c6, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="AG00164_.GIF", cAlternateFileName="")) returned 1 [0253.160] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0253.160] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0253.160] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0253.160] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0253.161] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0253.161] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0253.161] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00164_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0253.162] GetFileType (hFile=0x1ac) returned 0x1 [0253.162] CloseHandle (hObject=0x1ac) returned 1 [0253.163] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0253.163] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00164_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x33c6)) returned 1 [0253.163] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0253.163] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0253.163] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00164_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x33c6)) returned 1 [0253.163] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0253.163] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0253.163] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0253.163] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2186, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="AG00165_.GIF", cAlternateFileName="")) returned 1 [0253.163] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0253.163] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0253.163] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0253.164] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0253.164] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0253.164] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0253.164] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00165_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0253.164] GetFileType (hFile=0x1ac) returned 0x1 [0253.165] CloseHandle (hObject=0x1ac) returned 1 [0253.165] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0253.165] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00165_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2186)) returned 1 [0253.165] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0253.165] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0253.165] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00165_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2186)) returned 1 [0253.166] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0253.166] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0253.166] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0253.166] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x131e, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="AG00167_.GIF", cAlternateFileName="")) returned 1 [0253.166] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0253.166] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0253.166] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0253.166] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0253.166] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0253.166] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0253.167] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00167_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0253.167] GetFileType (hFile=0x1ac) returned 0x1 [0253.167] CloseHandle (hObject=0x1ac) returned 1 [0253.168] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0253.168] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00167_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x131e)) returned 1 [0253.168] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0253.168] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0253.168] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00167_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x131e)) returned 1 [0253.168] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0253.168] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0253.168] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0253.168] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14ff, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="AG00169_.GIF", cAlternateFileName="")) returned 1 [0253.169] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0253.169] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0253.169] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0253.169] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0253.169] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0253.169] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0253.169] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00169_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0253.170] GetFileType (hFile=0x1ac) returned 0x1 [0253.586] CloseHandle (hObject=0x1ac) returned 1 [0253.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0253.586] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00169_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14ff)) returned 1 [0253.586] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0253.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0253.586] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00169_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14ff)) returned 1 [0253.587] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0253.587] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0253.587] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0253.587] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2420, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="AG00170_.GIF", cAlternateFileName="")) returned 1 [0253.587] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0253.587] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0253.587] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0253.587] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0253.587] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0253.587] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0253.588] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00170_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0253.961] GetFileType (hFile=0x1e8) returned 0x1 [0253.961] CloseHandle (hObject=0x1e8) returned 1 [0253.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0253.962] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00170_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2420)) returned 1 [0253.962] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0253.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0253.963] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00170_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2420)) returned 1 [0253.963] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0253.963] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0253.963] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0253.963] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1398, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="AG00171_.GIF", cAlternateFileName="")) returned 1 [0253.963] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0253.963] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0253.964] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0253.964] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0253.964] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0253.964] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0253.965] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00171_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0254.237] GetFileType (hFile=0x1e8) returned 0x1 [0254.237] CloseHandle (hObject=0x1e8) returned 1 [0254.238] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0254.238] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00171_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1398)) returned 1 [0254.239] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0254.239] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0254.239] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00171_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1398)) returned 1 [0254.239] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0254.239] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0254.239] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0254.240] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1126, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="AG00172_.GIF", cAlternateFileName="")) returned 1 [0254.240] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0254.240] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0254.241] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0254.241] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0254.241] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0254.241] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0254.662] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00172_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0254.709] GetFileType (hFile=0x174) returned 0x1 [0254.709] CloseHandle (hObject=0x174) returned 1 [0254.710] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0254.710] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00172_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1126)) returned 1 [0254.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0254.710] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0254.710] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00172_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1126)) returned 1 [0254.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0254.710] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0254.711] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0254.711] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf7e, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="AG00174_.GIF", cAlternateFileName="")) returned 1 [0254.711] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0254.711] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0254.711] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0254.711] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0254.711] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0254.711] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0254.711] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00174_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0255.022] GetFileType (hFile=0x1e8) returned 0x1 [0255.023] CloseHandle (hObject=0x1e8) returned 1 [0255.023] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0255.023] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00174_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf7e)) returned 1 [0255.023] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0255.024] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0255.024] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00174_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf7e)) returned 1 [0255.024] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0255.024] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0255.024] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0255.024] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd32, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="AG00175_.GIF", cAlternateFileName="")) returned 1 [0255.024] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0255.025] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0255.025] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0255.025] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0255.025] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0255.025] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0255.140] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00175_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0255.189] GetFileType (hFile=0x1c0) returned 0x1 [0255.190] CloseHandle (hObject=0x1c0) returned 1 [0255.190] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0255.190] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00175_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd32)) returned 1 [0255.190] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0255.190] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0255.191] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00175_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd32)) returned 1 [0255.191] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0255.191] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0255.191] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0255.191] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc30, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="AG00176_.GIF", cAlternateFileName="")) returned 1 [0255.191] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0255.191] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0255.191] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0255.191] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0255.192] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0255.192] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0255.192] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00176_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0255.192] GetFileType (hFile=0x1c0) returned 0x1 [0255.194] CloseHandle (hObject=0x1c0) returned 1 [0255.194] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0255.195] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00176_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc30)) returned 1 [0255.195] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0255.195] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0255.195] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00176_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc30)) returned 1 [0255.195] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0255.195] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0255.195] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0255.195] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbd2, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="AN00010_.WMF", cAlternateFileName="")) returned 1 [0255.195] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0255.195] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0255.196] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0255.196] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0255.196] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0255.196] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0255.196] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00010_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00010_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0255.196] GetFileType (hFile=0x1c0) returned 0x1 [0255.197] CloseHandle (hObject=0x1c0) returned 1 [0255.197] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0255.197] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00010_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00010_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbd2)) returned 1 [0255.197] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0255.197] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0255.197] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00010_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00010_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbd2)) returned 1 [0255.198] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0255.198] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0255.198] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0255.198] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x127e, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="AN00015_.WMF", cAlternateFileName="")) returned 1 [0255.198] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0255.198] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0255.198] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0255.198] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0255.198] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0255.198] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0255.199] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00015_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0255.199] GetFileType (hFile=0x1c0) returned 0x1 [0255.199] CloseHandle (hObject=0x1c0) returned 1 [0255.200] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0255.200] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00015_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x127e)) returned 1 [0255.200] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0255.200] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0255.200] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00015_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x127e)) returned 1 [0255.200] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0255.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0255.201] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0255.201] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1634, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="AN00790_.WMF", cAlternateFileName="")) returned 1 [0255.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0255.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0255.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0255.201] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0255.201] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0255.201] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0255.202] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00790_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00790_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0255.202] GetFileType (hFile=0x1c0) returned 0x1 [0255.202] CloseHandle (hObject=0x1c0) returned 1 [0255.202] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0255.203] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00790_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00790_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1634)) returned 1 [0255.203] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0255.203] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0255.203] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00790_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00790_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1634)) returned 1 [0255.203] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0255.203] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0255.203] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0255.203] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5062, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="AN00853_.WMF", cAlternateFileName="")) returned 1 [0255.203] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0255.203] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0255.204] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0255.204] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0255.204] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0255.204] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0255.204] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00853_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00853_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0255.204] GetFileType (hFile=0x1c0) returned 0x1 [0255.205] CloseHandle (hObject=0x1c0) returned 1 [0255.205] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0255.205] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00853_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00853_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5062)) returned 1 [0255.205] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0255.205] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0255.205] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00853_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00853_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5062)) returned 1 [0255.205] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0255.206] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0255.206] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0255.206] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a50, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="AN00914_.WMF", cAlternateFileName="")) returned 1 [0255.206] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0255.206] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0255.206] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0255.206] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0255.206] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0255.206] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0255.207] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00914_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00914_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0255.207] GetFileType (hFile=0x1c0) returned 0x1 [0255.207] CloseHandle (hObject=0x1c0) returned 1 [0255.207] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0255.207] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00914_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00914_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a50)) returned 1 [0255.208] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0255.208] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0255.208] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00914_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00914_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a50)) returned 1 [0255.208] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0255.208] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0255.208] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0255.208] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x385c, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="AN00932_.WMF", cAlternateFileName="")) returned 1 [0255.208] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0255.210] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0255.210] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0255.210] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0255.210] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0255.210] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0255.211] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00932_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00932_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0255.211] GetFileType (hFile=0x1c0) returned 0x1 [0255.211] CloseHandle (hObject=0x1c0) returned 1 [0255.212] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0255.212] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00932_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00932_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x385c)) returned 1 [0255.212] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0255.212] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0255.212] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00932_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00932_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x385c)) returned 1 [0255.212] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0255.212] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0255.212] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0255.212] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ba0, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="AN00965_.WMF", cAlternateFileName="")) returned 1 [0255.212] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0255.212] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0255.213] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0255.213] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0255.213] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0255.213] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0255.213] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00965_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00965_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0255.213] GetFileType (hFile=0x1c0) returned 0x1 [0255.214] CloseHandle (hObject=0x1c0) returned 1 [0255.214] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0255.214] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00965_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00965_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ba0)) returned 1 [0255.214] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0255.214] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0255.214] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00965_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00965_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ba0)) returned 1 [0255.215] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0255.215] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0255.215] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0255.215] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd10, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="AN01039_.WMF", cAlternateFileName="")) returned 1 [0255.215] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0255.215] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0255.215] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0255.215] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0255.215] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0255.215] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0255.216] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01039_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01039_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0255.216] GetFileType (hFile=0x1c0) returned 0x1 [0255.216] CloseHandle (hObject=0x1c0) returned 1 [0255.216] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0255.217] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01039_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01039_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd10)) returned 1 [0255.217] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0255.217] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0255.217] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01039_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01039_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd10)) returned 1 [0255.217] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0255.217] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0255.217] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0255.217] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x63c, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="AN01044_.WMF", cAlternateFileName="")) returned 1 [0255.217] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0255.218] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0255.218] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0255.218] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0255.218] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0255.218] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0255.218] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01044_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01044_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0255.218] GetFileType (hFile=0x1c0) returned 0x1 [0255.219] CloseHandle (hObject=0x1c0) returned 1 [0255.219] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0255.219] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01044_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01044_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x63c)) returned 1 [0255.219] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0255.219] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0255.220] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01044_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01044_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x63c)) returned 1 [0255.220] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0255.220] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0255.220] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0255.220] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f20, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="AN01060_.WMF", cAlternateFileName="")) returned 1 [0255.220] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0255.220] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0255.220] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0255.220] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0255.220] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0255.221] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0255.221] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01060_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01060_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0255.221] GetFileType (hFile=0x1c0) returned 0x1 [0255.222] CloseHandle (hObject=0x1c0) returned 1 [0255.222] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0255.222] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01060_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01060_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f20)) returned 1 [0255.222] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0255.222] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0255.222] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01060_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01060_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f20)) returned 1 [0255.223] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0255.223] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0255.223] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0255.223] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x728, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="AN01084_.WMF", cAlternateFileName="")) returned 1 [0255.223] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0255.223] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0255.223] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0255.223] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0255.223] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0255.223] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0255.224] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01084_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01084_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0255.474] GetFileType (hFile=0x1c0) returned 0x1 [0255.474] CloseHandle (hObject=0x1c0) returned 1 [0255.475] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0255.475] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01084_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01084_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x728)) returned 1 [0255.525] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0255.525] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0255.526] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01084_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01084_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x728)) returned 1 [0255.526] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0255.526] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0255.526] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0255.526] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x66dc, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="AN01173_.WMF", cAlternateFileName="")) returned 1 [0255.526] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0255.527] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0255.527] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0255.527] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0255.527] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0255.527] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0255.528] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01173_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0255.600] GetFileType (hFile=0x1e0) returned 0x1 [0255.600] CloseHandle (hObject=0x1e0) returned 1 [0255.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0255.601] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01173_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x66dc)) returned 1 [0255.601] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0255.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0255.601] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01173_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x66dc)) returned 1 [0255.601] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0255.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0255.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0255.602] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6cd2, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="AN01174_.WMF", cAlternateFileName="")) returned 1 [0255.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0255.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0255.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0255.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0255.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0255.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0255.603] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01174_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0255.603] GetFileType (hFile=0x1e0) returned 0x1 [0255.603] CloseHandle (hObject=0x1e0) returned 1 [0255.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0255.604] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01174_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6cd2)) returned 1 [0255.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0255.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0255.604] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01174_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6cd2)) returned 1 [0255.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0255.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0255.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0255.604] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xea2, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="AN01184_.WMF", cAlternateFileName="")) returned 1 [0255.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0255.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0255.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0255.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0255.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0255.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0255.605] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01184_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0255.605] GetFileType (hFile=0x1e0) returned 0x1 [0255.606] CloseHandle (hObject=0x1e0) returned 1 [0255.606] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0255.606] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01184_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xea2)) returned 1 [0255.606] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0255.606] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0255.606] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01184_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xea2)) returned 1 [0255.607] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0255.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0255.607] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0255.607] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16cc, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="AN01216_.WMF", cAlternateFileName="")) returned 1 [0255.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0255.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0255.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0255.607] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0255.607] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0255.607] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0255.608] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01216_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01216_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0255.608] GetFileType (hFile=0x1e0) returned 0x1 [0255.608] CloseHandle (hObject=0x1e0) returned 1 [0255.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0255.608] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01216_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01216_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16cc)) returned 1 [0255.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0255.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0255.609] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01216_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01216_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16cc)) returned 1 [0255.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0255.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0255.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0255.609] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc4, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="AN01218_.WMF", cAlternateFileName="")) returned 1 [0255.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0255.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0255.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0255.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0255.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0255.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0255.610] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01218_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01218_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0255.610] GetFileType (hFile=0x1e0) returned 0x1 [0255.610] CloseHandle (hObject=0x1e0) returned 1 [0255.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0255.611] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01218_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01218_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc4)) returned 1 [0255.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0255.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0255.611] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01218_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01218_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc4)) returned 1 [0255.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0255.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0255.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0255.612] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xac4, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="AN01251_.WMF", cAlternateFileName="")) returned 1 [0255.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0255.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0255.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0255.612] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0255.612] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0255.612] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0255.612] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01251_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01251_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0255.613] GetFileType (hFile=0x1e0) returned 0x1 [0255.613] CloseHandle (hObject=0x1e0) returned 1 [0255.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0255.613] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01251_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01251_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xac4)) returned 1 [0255.613] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0255.614] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0255.614] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01251_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01251_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xac4)) returned 1 [0255.614] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0255.614] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0255.614] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0255.614] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ccc, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="AN01545_.WMF", cAlternateFileName="")) returned 1 [0255.614] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0255.614] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0255.614] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0255.614] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0255.614] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0255.614] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0255.616] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01545_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01545_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0255.616] GetFileType (hFile=0x1e0) returned 0x1 [0255.616] CloseHandle (hObject=0x1e0) returned 1 [0255.617] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0255.617] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01545_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01545_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ccc)) returned 1 [0255.617] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0255.617] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0255.617] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01545_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01545_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ccc)) returned 1 [0255.617] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0255.617] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0255.617] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0255.617] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d74, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="AN02122_.WMF", cAlternateFileName="")) returned 1 [0255.617] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0255.617] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0255.617] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0255.618] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0255.618] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0255.618] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0255.618] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02122_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02122_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0255.618] GetFileType (hFile=0x1e0) returned 0x1 [0255.619] CloseHandle (hObject=0x1e0) returned 1 [0255.619] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0255.619] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02122_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02122_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d74)) returned 1 [0255.619] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0255.619] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0255.620] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02122_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02122_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d74)) returned 1 [0255.620] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0255.620] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0255.620] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0255.620] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19e8, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="AN02559_.WMF", cAlternateFileName="")) returned 1 [0255.620] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0255.620] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0255.620] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0255.620] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0255.620] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0255.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0255.621] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02559_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02559_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0255.621] GetFileType (hFile=0x1e0) returned 0x1 [0255.622] CloseHandle (hObject=0x1e0) returned 1 [0255.622] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0255.622] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02559_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02559_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19e8)) returned 1 [0255.622] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0255.622] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0255.623] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02559_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02559_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19e8)) returned 1 [0255.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0255.623] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0255.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0255.623] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc89dc9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x83c, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="AN02724_.WMF", cAlternateFileName="")) returned 1 [0255.623] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0255.623] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0255.623] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0255.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0255.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0255.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0255.624] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02724_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02724_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0255.624] GetFileType (hFile=0x1e0) returned 0x1 [0255.624] CloseHandle (hObject=0x1e0) returned 1 [0255.625] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0255.625] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02724_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02724_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc89dc9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x83c)) returned 1 [0255.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0255.625] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0255.625] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02724_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02724_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc89dc9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x83c)) returned 1 [0255.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0255.625] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0255.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0255.625] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2418, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="AN03500_.WMF", cAlternateFileName="")) returned 1 [0255.626] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0255.626] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0255.626] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0255.626] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0255.626] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0255.626] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0255.626] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN03500_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an03500_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0255.627] GetFileType (hFile=0x1e0) returned 0x1 [0255.627] CloseHandle (hObject=0x1e0) returned 1 [0255.627] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0255.627] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN03500_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an03500_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2418)) returned 1 [0255.627] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0255.627] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0255.627] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN03500_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an03500_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2418)) returned 1 [0255.628] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0255.628] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0255.628] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0255.628] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x928, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="AN04108_.WMF", cAlternateFileName="")) returned 1 [0255.628] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0255.628] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0255.628] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0255.628] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0255.628] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0255.628] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0255.629] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04108_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04108_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0255.629] GetFileType (hFile=0x1e0) returned 0x1 [0255.629] CloseHandle (hObject=0x1e0) returned 1 [0255.629] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0255.629] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04108_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04108_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x928)) returned 1 [0255.630] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0255.630] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0255.630] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04108_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04108_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x928)) returned 1 [0255.630] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0255.630] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0255.630] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0255.630] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17ac, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="AN04117_.WMF", cAlternateFileName="")) returned 1 [0256.131] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0256.131] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0256.131] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0256.131] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0256.131] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0256.131] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0256.132] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04117_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04117_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0256.132] GetFileType (hFile=0x174) returned 0x1 [0256.133] CloseHandle (hObject=0x174) returned 1 [0256.133] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0256.133] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04117_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04117_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17ac)) returned 1 [0256.133] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0256.133] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0256.133] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04117_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04117_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17ac)) returned 1 [0256.133] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0256.134] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0256.134] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0256.134] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd58, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="AN04134_.WMF", cAlternateFileName="")) returned 1 [0256.134] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0256.134] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0256.134] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0256.134] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0256.134] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0256.134] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0256.135] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04134_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04134_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0256.135] GetFileType (hFile=0x174) returned 0x1 [0256.135] CloseHandle (hObject=0x174) returned 1 [0256.136] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0256.136] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04134_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04134_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd58)) returned 1 [0256.136] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0256.136] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0256.136] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04134_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04134_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd58)) returned 1 [0256.136] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0256.136] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0256.136] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0256.136] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa4c, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="AN04174_.WMF", cAlternateFileName="")) returned 1 [0256.136] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0256.136] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0256.137] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0256.137] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0256.137] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0256.137] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0256.137] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04174_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0256.138] GetFileType (hFile=0x174) returned 0x1 [0256.138] CloseHandle (hObject=0x174) returned 1 [0256.138] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0256.138] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04174_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa4c)) returned 1 [0256.138] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0256.138] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0256.139] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04174_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa4c)) returned 1 [0256.139] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0256.139] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0256.139] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0256.139] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19ec, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="AN04191_.WMF", cAlternateFileName="")) returned 1 [0256.139] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0256.139] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0256.139] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0256.139] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0256.139] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0256.139] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0256.140] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04191_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04191_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0256.140] GetFileType (hFile=0x174) returned 0x1 [0256.140] CloseHandle (hObject=0x174) returned 1 [0256.140] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0256.140] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04191_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04191_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19ec)) returned 1 [0256.141] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0256.141] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0256.141] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04191_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04191_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19ec)) returned 1 [0256.141] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0256.141] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0256.141] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0256.141] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1204, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="AN04195_.WMF", cAlternateFileName="")) returned 1 [0256.141] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0256.141] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0256.141] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0256.141] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0256.141] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0256.141] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0256.142] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04195_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04195_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0256.142] GetFileType (hFile=0x174) returned 0x1 [0256.142] CloseHandle (hObject=0x174) returned 1 [0256.143] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0256.143] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04195_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04195_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1204)) returned 1 [0256.143] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0256.143] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0256.143] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04195_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04195_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1204)) returned 1 [0256.143] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0256.143] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0256.143] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0256.143] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc48, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="AN04196_.WMF", cAlternateFileName="")) returned 1 [0256.143] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0256.143] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0256.144] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0256.144] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0256.144] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0256.144] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0256.144] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04196_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04196_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0256.145] GetFileType (hFile=0x174) returned 0x1 [0256.145] CloseHandle (hObject=0x174) returned 1 [0256.145] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0256.145] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04196_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04196_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc48)) returned 1 [0256.145] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0256.145] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0256.145] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04196_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04196_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc48)) returned 1 [0256.146] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0256.146] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0256.146] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0256.146] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1df4, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="AN04206_.WMF", cAlternateFileName="")) returned 1 [0256.146] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0256.147] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0256.147] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0256.147] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0256.147] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0256.147] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0256.147] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04206_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04206_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0256.148] GetFileType (hFile=0x174) returned 0x1 [0256.148] CloseHandle (hObject=0x174) returned 1 [0256.148] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0256.148] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04206_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04206_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1df4)) returned 1 [0256.148] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0256.148] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0256.148] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04206_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04206_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1df4)) returned 1 [0256.149] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0256.149] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0256.149] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0256.149] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x212c, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="AN04225_.WMF", cAlternateFileName="")) returned 1 [0256.149] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0256.149] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0256.149] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0256.149] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0256.149] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0256.149] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0256.149] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04225_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04225_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0256.150] GetFileType (hFile=0x174) returned 0x1 [0256.150] CloseHandle (hObject=0x174) returned 1 [0256.150] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0256.150] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04225_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04225_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x212c)) returned 1 [0256.151] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0256.151] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0256.151] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04225_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04225_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x212c)) returned 1 [0256.151] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0256.151] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0256.151] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0256.151] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e7c, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="AN04235_.WMF", cAlternateFileName="")) returned 1 [0256.151] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0256.151] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0256.151] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0256.151] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0256.151] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0256.151] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0256.152] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04235_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04235_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0256.152] GetFileType (hFile=0x174) returned 0x1 [0256.152] CloseHandle (hObject=0x174) returned 1 [0256.152] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0256.153] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04235_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04235_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e7c)) returned 1 [0256.153] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0256.153] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0256.153] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04235_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04235_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e7c)) returned 1 [0256.153] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0256.153] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0256.153] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0256.153] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc89dc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc89dc9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e7c, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="AN04267_.WMF", cAlternateFileName="")) returned 1 [0256.153] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0256.153] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0256.153] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0256.153] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0256.153] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0256.153] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0256.154] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04267_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04267_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0256.154] GetFileType (hFile=0x174) returned 0x1 [0256.154] CloseHandle (hObject=0x174) returned 1 [0256.154] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0256.154] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04267_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04267_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc89dc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc89dc9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e7c)) returned 1 [0256.155] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0256.155] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0256.155] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04267_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04267_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc89dc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc89dc9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e7c)) returned 1 [0256.155] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0256.155] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0256.155] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0256.155] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e0, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="AN04269_.WMF", cAlternateFileName="")) returned 1 [0256.155] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0256.155] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0256.155] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0256.155] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0256.155] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0256.156] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0256.156] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04269_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04269_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0256.156] GetFileType (hFile=0x174) returned 0x1 [0256.156] CloseHandle (hObject=0x174) returned 1 [0256.156] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0256.157] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04269_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04269_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e0)) returned 1 [0256.157] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0256.157] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0256.157] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04269_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04269_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e0)) returned 1 [0256.157] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0256.157] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0256.157] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0256.157] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9bc, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="AN04323_.WMF", cAlternateFileName="")) returned 1 [0256.157] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0256.157] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0256.157] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0256.157] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0256.157] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0256.157] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0256.158] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04323_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04323_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0256.158] GetFileType (hFile=0x174) returned 0x1 [0256.158] CloseHandle (hObject=0x174) returned 1 [0256.158] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0256.158] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04323_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04323_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9bc)) returned 1 [0256.159] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0256.159] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0256.159] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04323_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04323_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9bc)) returned 1 [0256.159] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0256.159] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0256.159] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0256.159] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc89dc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc89dc9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd14, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="AN04326_.WMF", cAlternateFileName="")) returned 1 [0256.159] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0256.159] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0256.159] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0256.159] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0256.159] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0256.159] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0256.160] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04326_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04326_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0256.160] GetFileType (hFile=0x174) returned 0x1 [0256.160] CloseHandle (hObject=0x174) returned 1 [0256.160] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0256.160] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04326_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04326_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc89dc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc89dc9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd14)) returned 1 [0256.161] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0256.161] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0256.161] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04326_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04326_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc89dc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc89dc9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd14)) returned 1 [0256.161] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0256.161] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0256.161] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0256.161] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10c8, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="AN04332_.WMF", cAlternateFileName="")) returned 1 [0256.161] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0256.161] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0256.161] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0256.161] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0256.161] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0256.161] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0256.162] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04332_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04332_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0256.163] GetFileType (hFile=0x174) returned 0x1 [0256.163] CloseHandle (hObject=0x174) returned 1 [0256.163] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0256.163] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04332_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04332_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10c8)) returned 1 [0256.163] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0256.163] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0256.163] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04332_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04332_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10c8)) returned 1 [0256.163] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0256.164] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0256.164] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0256.164] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc9c, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="AN04355_.WMF", cAlternateFileName="")) returned 1 [0256.164] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0256.164] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0256.164] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0256.164] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0256.164] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0256.164] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0256.164] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04355_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04355_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0256.164] GetFileType (hFile=0x174) returned 0x1 [0256.165] CloseHandle (hObject=0x174) returned 1 [0256.165] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0256.165] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04355_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04355_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc9c)) returned 1 [0256.165] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0256.165] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0256.165] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04355_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04355_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc9c)) returned 1 [0256.165] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0256.165] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0256.166] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0256.166] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12c8, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="AN04369_.WMF", cAlternateFileName="")) returned 1 [0256.166] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0256.166] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0256.166] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0256.166] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0256.166] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0256.166] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0256.166] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04369_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04369_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0256.167] GetFileType (hFile=0x174) returned 0x1 [0256.167] CloseHandle (hObject=0x174) returned 1 [0256.167] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0256.167] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04369_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04369_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12c8)) returned 1 [0256.167] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0256.167] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0256.167] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04369_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04369_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12c8)) returned 1 [0256.168] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0256.168] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0256.168] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0256.168] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1384, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="AN04384_.WMF", cAlternateFileName="")) returned 1 [0256.168] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0256.168] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0256.168] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0256.168] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0256.168] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0256.168] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0256.168] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04384_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04384_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0256.169] GetFileType (hFile=0x174) returned 0x1 [0256.169] CloseHandle (hObject=0x174) returned 1 [0256.500] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0256.500] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04384_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04384_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1384)) returned 1 [0256.500] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0256.501] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0256.501] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04384_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04384_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1384)) returned 1 [0256.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0256.501] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0256.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0256.501] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x138c, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="AN04385_.WMF", cAlternateFileName="")) returned 1 [0256.501] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0256.501] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0256.501] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0256.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0256.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0256.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0256.502] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04385_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04385_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0256.564] GetFileType (hFile=0x21c) returned 0x1 [0256.565] CloseHandle (hObject=0x21c) returned 1 [0256.565] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0256.565] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04385_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04385_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x138c)) returned 1 [0256.566] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0256.566] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0256.567] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04385_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04385_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x138c)) returned 1 [0256.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0256.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0256.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0256.567] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1cd8, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="BABY_01.MID", cAlternateFileName="")) returned 1 [0256.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0256.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0256.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0256.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0256.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0256.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0256.700] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BABY_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\baby_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0256.701] GetFileType (hFile=0x174) returned 0x1 [0256.701] CloseHandle (hObject=0x174) returned 1 [0256.701] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0256.702] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BABY_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\baby_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1cd8)) returned 1 [0256.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0256.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0256.702] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BABY_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\baby_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1cd8)) returned 1 [0256.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0256.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0256.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0256.703] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1306, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="BD00116_.WMF", cAlternateFileName="")) returned 1 [0256.703] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0256.703] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0256.703] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0256.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0256.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0256.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0256.704] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00116_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00116_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0256.704] GetFileType (hFile=0x174) returned 0x1 [0256.705] CloseHandle (hObject=0x174) returned 1 [0256.705] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0256.705] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00116_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00116_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1306)) returned 1 [0256.705] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0256.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0256.706] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00116_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00116_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1306)) returned 1 [0256.706] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0256.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0256.706] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0256.706] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6906, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="BD00141_.WMF", cAlternateFileName="")) returned 1 [0256.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0256.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0256.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0256.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0256.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0256.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0256.707] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00141_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00141_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0256.708] GetFileType (hFile=0x174) returned 0x1 [0256.708] CloseHandle (hObject=0x174) returned 1 [0256.709] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0256.710] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00141_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00141_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6906)) returned 1 [0256.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0256.710] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0256.710] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00141_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00141_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6906)) returned 1 [0256.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0256.710] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0256.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0256.710] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7114, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="BD00146_.WMF", cAlternateFileName="")) returned 1 [0256.711] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0256.711] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0256.711] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0256.711] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0256.711] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0256.711] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0256.711] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00146_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00146_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0256.712] GetFileType (hFile=0x174) returned 0x1 [0256.712] CloseHandle (hObject=0x174) returned 1 [0256.712] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0256.712] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00146_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00146_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7114)) returned 1 [0256.713] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0256.713] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0256.713] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00146_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00146_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7114)) returned 1 [0256.713] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0256.713] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0256.713] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0256.713] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d74, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="BD00155_.WMF", cAlternateFileName="")) returned 1 [0256.713] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0256.713] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0256.713] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0256.714] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0256.714] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0256.714] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0256.714] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00155_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00155_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0256.715] GetFileType (hFile=0x174) returned 0x1 [0256.715] CloseHandle (hObject=0x174) returned 1 [0256.715] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0256.715] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00155_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00155_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d74)) returned 1 [0256.716] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0256.716] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0256.716] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00155_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00155_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d74)) returned 1 [0256.716] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0256.716] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0256.716] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0256.716] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x57f4, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="BD00160_.WMF", cAlternateFileName="")) returned 1 [0256.716] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0256.716] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0256.716] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0256.716] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0256.716] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0256.717] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0256.717] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00160_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00160_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0256.717] GetFileType (hFile=0x174) returned 0x1 [0256.718] CloseHandle (hObject=0x174) returned 1 [0256.718] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0256.718] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00160_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00160_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x57f4)) returned 1 [0256.718] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0256.718] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0256.718] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00160_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00160_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x57f4)) returned 1 [0256.718] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0256.719] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0256.719] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0256.719] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3f34, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="BD00173_.WMF", cAlternateFileName="")) returned 1 [0256.719] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0256.719] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0256.719] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0256.719] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0256.719] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0256.719] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0256.720] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00173_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0256.720] GetFileType (hFile=0x174) returned 0x1 [0256.720] CloseHandle (hObject=0x174) returned 1 [0256.721] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0256.721] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00173_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3f34)) returned 1 [0256.721] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0256.721] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0256.721] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00173_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3f34)) returned 1 [0256.721] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0256.721] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0256.721] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0256.721] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4354, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="BD05119_.WMF", cAlternateFileName="")) returned 1 [0256.721] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0256.721] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0256.721] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0256.722] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0256.722] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0256.722] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0256.722] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD05119_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd05119_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0256.722] GetFileType (hFile=0x174) returned 0x1 [0256.723] CloseHandle (hObject=0x174) returned 1 [0256.723] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0256.723] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD05119_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd05119_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4354)) returned 1 [0256.723] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0256.723] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0256.723] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD05119_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd05119_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4354)) returned 1 [0256.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0256.724] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0256.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0256.724] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ef0, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="BD06102_.WMF", cAlternateFileName="")) returned 1 [0256.724] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0256.725] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0256.725] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0256.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0256.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0256.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0256.726] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06102_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06102_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0256.726] GetFileType (hFile=0x174) returned 0x1 [0256.727] CloseHandle (hObject=0x174) returned 1 [0256.727] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0256.727] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06102_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06102_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ef0)) returned 1 [0256.728] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0256.728] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0256.728] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06102_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06102_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ef0)) returned 1 [0256.728] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0256.728] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0256.728] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0256.728] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4124, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="BD06200_.WMF", cAlternateFileName="")) returned 1 [0256.728] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0256.729] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0256.729] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0256.729] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0256.729] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0256.729] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0256.730] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06200_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06200_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0256.730] GetFileType (hFile=0x174) returned 0x1 [0256.731] CloseHandle (hObject=0x174) returned 1 [0256.731] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0256.731] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06200_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06200_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4124)) returned 1 [0256.731] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0256.731] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0256.732] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06200_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06200_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4124)) returned 1 [0256.732] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0256.732] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0256.732] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0256.732] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x687c, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="BD07761_.WMF", cAlternateFileName="")) returned 1 [0256.732] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0256.732] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0256.732] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0256.733] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0256.733] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0256.733] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0256.734] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07761_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07761_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0256.734] GetFileType (hFile=0x174) returned 0x1 [0256.735] CloseHandle (hObject=0x174) returned 1 [0256.735] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0256.735] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07761_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07761_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x687c)) returned 1 [0256.736] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0256.736] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0256.736] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07761_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07761_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x687c)) returned 1 [0256.736] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0256.736] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0256.736] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0256.736] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x133c, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="BD07804_.WMF", cAlternateFileName="")) returned 1 [0256.737] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0256.737] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0256.737] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0256.737] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0256.737] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0256.737] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0256.738] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07804_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07804_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0256.738] GetFileType (hFile=0x174) returned 0x1 [0256.739] CloseHandle (hObject=0x174) returned 1 [0256.740] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0257.036] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07804_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07804_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x133c)) returned 1 [0257.036] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0257.037] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0257.037] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07804_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07804_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x133c)) returned 1 [0257.037] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0257.038] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0257.038] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0257.038] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfe2, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="BD07831_.WMF", cAlternateFileName="")) returned 1 [0257.038] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0257.038] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0257.038] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0257.038] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0257.039] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0257.039] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0257.241] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07831_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07831_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0257.241] GetFileType (hFile=0x1ac) returned 0x1 [0257.241] CloseHandle (hObject=0x1ac) returned 1 [0257.242] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0257.242] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07831_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07831_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfe2)) returned 1 [0257.242] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0257.242] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0257.243] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07831_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07831_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfe2)) returned 1 [0257.243] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0257.243] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0257.243] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0257.243] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5f00, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="BD08758_.WMF", cAlternateFileName="")) returned 1 [0257.243] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0257.243] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0257.243] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0257.243] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0257.244] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0257.244] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0257.244] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08758_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08758_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0257.245] GetFileType (hFile=0x1ac) returned 0x1 [0257.245] CloseHandle (hObject=0x1ac) returned 1 [0257.246] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0257.246] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08758_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08758_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5f00)) returned 1 [0257.246] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0257.246] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0257.246] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08758_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08758_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5f00)) returned 1 [0257.246] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0257.246] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0257.246] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0257.246] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x60ca, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="BD08773_.WMF", cAlternateFileName="")) returned 1 [0257.246] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0257.246] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0257.246] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0257.247] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0257.247] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0257.247] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0257.247] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08773_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08773_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0257.248] GetFileType (hFile=0x1ac) returned 0x1 [0257.248] CloseHandle (hObject=0x1ac) returned 1 [0257.248] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0257.248] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08773_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08773_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x60ca)) returned 1 [0257.249] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0257.249] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0257.249] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08773_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08773_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x60ca)) returned 1 [0257.249] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0257.249] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0257.249] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0257.249] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbb7c, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="BD08808_.WMF", cAlternateFileName="")) returned 1 [0257.250] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0257.250] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0257.250] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0257.250] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0257.250] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0257.250] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0257.251] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08808_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08808_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0257.252] GetFileType (hFile=0x1ac) returned 0x1 [0257.252] CloseHandle (hObject=0x1ac) returned 1 [0257.252] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0257.253] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08808_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08808_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbb7c)) returned 1 [0257.253] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0257.253] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0257.253] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08808_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08808_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbb7c)) returned 1 [0257.253] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0257.253] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0257.253] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0257.253] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9d0e, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="BD08868_.WMF", cAlternateFileName="")) returned 1 [0257.253] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0257.254] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0257.254] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0257.254] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0257.254] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0257.254] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0257.255] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08868_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08868_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0257.255] GetFileType (hFile=0x1ac) returned 0x1 [0257.256] CloseHandle (hObject=0x1ac) returned 1 [0257.256] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0257.256] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08868_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08868_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9d0e)) returned 1 [0257.257] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0257.257] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0257.257] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08868_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08868_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9d0e)) returned 1 [0257.257] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0257.257] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0257.257] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0257.257] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd4897d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd4897d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbaaa, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="BD09031_.WMF", cAlternateFileName="")) returned 1 [0257.257] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0257.258] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0257.258] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0257.258] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0257.258] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0257.258] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0257.259] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09031_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09031_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0257.259] GetFileType (hFile=0x1ac) returned 0x1 [0257.260] CloseHandle (hObject=0x1ac) returned 1 [0257.260] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0257.260] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09031_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09031_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd4897d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd4897d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbaaa)) returned 1 [0257.260] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0257.260] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0257.261] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09031_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09031_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd4897d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd4897d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbaaa)) returned 1 [0257.261] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0257.261] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0257.261] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0257.261] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x38cc, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="BD09194_.WMF", cAlternateFileName="")) returned 1 [0257.261] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0257.261] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0257.262] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0257.262] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0257.262] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0257.262] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0257.263] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09194_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09194_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0257.263] GetFileType (hFile=0x1ac) returned 0x1 [0257.264] CloseHandle (hObject=0x1ac) returned 1 [0257.264] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0257.264] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09194_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09194_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x38cc)) returned 1 [0257.264] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0257.265] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0257.265] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09194_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09194_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x38cc)) returned 1 [0257.265] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0257.265] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0257.265] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0257.265] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x504a, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="BD09662_.WMF", cAlternateFileName="")) returned 1 [0257.265] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0257.266] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0257.266] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0257.266] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0257.266] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0257.266] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0257.267] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09662_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09662_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0257.267] GetFileType (hFile=0x1ac) returned 0x1 [0257.268] CloseHandle (hObject=0x1ac) returned 1 [0257.268] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0257.268] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09662_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09662_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x504a)) returned 1 [0257.269] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0257.269] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0257.269] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09662_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09662_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x504a)) returned 1 [0257.269] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0257.269] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0257.269] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0257.269] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f1e, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="BD09664_.WMF", cAlternateFileName="")) returned 1 [0257.269] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0257.270] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0257.270] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0257.270] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0257.270] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0257.270] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0257.271] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09664_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09664_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0257.271] GetFileType (hFile=0x1ac) returned 0x1 [0257.272] CloseHandle (hObject=0x1ac) returned 1 [0257.272] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0257.272] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09664_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09664_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f1e)) returned 1 [0257.272] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0257.273] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0257.273] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09664_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09664_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f1e)) returned 1 [0257.273] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0257.273] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0257.273] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0257.273] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x34cb, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="BD10890_.GIF", cAlternateFileName="")) returned 1 [0257.273] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0257.273] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0257.273] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0257.273] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0257.273] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0257.274] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0257.274] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10890_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0257.274] GetFileType (hFile=0x1ac) returned 0x1 [0257.275] CloseHandle (hObject=0x1ac) returned 1 [0257.275] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0257.275] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10890_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x34cb)) returned 1 [0257.275] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0257.275] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0257.276] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10890_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x34cb)) returned 1 [0257.276] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0257.276] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0257.276] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0257.276] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4edd, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="BD10972_.GIF", cAlternateFileName="")) returned 1 [0257.276] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0257.276] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0257.276] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0257.276] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0257.277] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0257.277] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0257.277] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10972_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0257.278] GetFileType (hFile=0x1ac) returned 0x1 [0257.278] CloseHandle (hObject=0x1ac) returned 1 [0257.279] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0257.279] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10972_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4edd)) returned 1 [0257.279] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0257.279] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0257.279] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10972_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4edd)) returned 1 [0257.280] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0257.280] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0257.280] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0257.280] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4fe6, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="BD19563_.GIF", cAlternateFileName="")) returned 1 [0257.280] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0257.280] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0257.280] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0257.281] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0257.281] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0257.281] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0257.281] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19563_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0257.282] GetFileType (hFile=0x1ac) returned 0x1 [0257.282] CloseHandle (hObject=0x1ac) returned 1 [0257.283] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0257.283] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19563_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4fe6)) returned 1 [0257.283] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0257.283] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0257.283] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19563_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4fe6)) returned 1 [0257.283] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0257.283] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0257.284] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0257.284] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d75, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="BD19582_.GIF", cAlternateFileName="")) returned 1 [0257.284] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0257.284] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0257.284] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0257.284] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0257.284] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0257.285] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0257.285] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19582_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0257.286] GetFileType (hFile=0x1ac) returned 0x1 [0257.286] CloseHandle (hObject=0x1ac) returned 1 [0257.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0257.567] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19582_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d75)) returned 1 [0257.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0257.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0257.567] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19582_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d75)) returned 1 [0257.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0257.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0257.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0257.574] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32b6, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="BD19695_.WMF", cAlternateFileName="")) returned 1 [0257.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0257.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0257.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0257.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0257.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0257.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0257.576] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19695_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19695_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0258.282] GetFileType (hFile=0x1ac) returned 0x1 [0258.282] CloseHandle (hObject=0x1ac) returned 1 [0258.283] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0258.283] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19695_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19695_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32b6)) returned 1 [0258.283] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0258.283] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0258.284] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19695_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19695_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32b6)) returned 1 [0258.284] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0258.284] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0258.284] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0258.284] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x25ee, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="BD19827_.WMF", cAlternateFileName="")) returned 1 [0258.284] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0258.285] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0258.285] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0258.285] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0258.285] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0258.285] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0258.286] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19827_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19827_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0258.286] GetFileType (hFile=0x1ac) returned 0x1 [0258.286] CloseHandle (hObject=0x1ac) returned 1 [0258.287] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0258.287] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19827_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19827_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x25ee)) returned 1 [0258.287] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0258.287] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0258.287] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19827_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19827_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x25ee)) returned 1 [0258.287] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0258.287] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0258.288] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0258.288] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2244, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="BD19828_.WMF", cAlternateFileName="")) returned 1 [0258.288] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0258.288] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0258.288] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0258.288] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0258.288] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0258.288] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0258.289] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19828_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19828_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0258.289] GetFileType (hFile=0x1ac) returned 0x1 [0258.290] CloseHandle (hObject=0x1ac) returned 1 [0258.290] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0258.290] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19828_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19828_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2244)) returned 1 [0258.290] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0258.290] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0258.291] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19828_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19828_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2244)) returned 1 [0258.291] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0258.291] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0258.291] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0258.291] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3896, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="BD19986_.WMF", cAlternateFileName="")) returned 1 [0258.291] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0258.291] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0258.291] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0258.291] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0258.292] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0258.292] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0258.293] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19986_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19986_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0258.293] GetFileType (hFile=0x1ac) returned 0x1 [0258.294] CloseHandle (hObject=0x1ac) returned 1 [0258.294] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0258.294] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19986_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19986_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3896)) returned 1 [0258.295] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0258.295] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0258.295] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19986_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19986_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3896)) returned 1 [0258.295] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0258.295] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0258.295] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0258.295] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4780, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="BD19988_.WMF", cAlternateFileName="")) returned 1 [0258.295] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0258.295] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0258.295] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0258.296] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0258.296] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0258.296] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0258.296] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19988_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19988_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0258.296] GetFileType (hFile=0x1ac) returned 0x1 [0258.297] CloseHandle (hObject=0x1ac) returned 1 [0258.297] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0258.297] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19988_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19988_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4780)) returned 1 [0258.297] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0258.297] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0258.298] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19988_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19988_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4780)) returned 1 [0258.298] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0258.298] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0258.298] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0258.298] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b32, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="BD20013_.WMF", cAlternateFileName="")) returned 1 [0258.298] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0258.298] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0258.298] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0258.298] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0258.298] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0258.298] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0258.299] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD20013_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd20013_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0258.299] GetFileType (hFile=0x1ac) returned 0x1 [0258.300] CloseHandle (hObject=0x1ac) returned 1 [0258.300] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0258.300] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD20013_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd20013_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b32)) returned 1 [0258.300] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0258.301] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0258.301] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD20013_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd20013_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b32)) returned 1 [0258.301] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0258.301] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0258.301] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0258.301] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30e8, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="BL00008_.WMF", cAlternateFileName="")) returned 1 [0258.301] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0258.301] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0258.301] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0258.301] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0258.301] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0258.302] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0258.302] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00008_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00008_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0258.302] GetFileType (hFile=0x1ac) returned 0x1 [0258.303] CloseHandle (hObject=0x1ac) returned 1 [0258.303] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0258.303] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00008_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00008_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30e8)) returned 1 [0258.304] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0258.304] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0258.304] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00008_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00008_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30e8)) returned 1 [0258.304] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0258.304] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0258.304] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0258.304] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd4897d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd4897d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x265a, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="BL00012_.WMF", cAlternateFileName="")) returned 1 [0258.304] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0258.304] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0258.305] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0258.305] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0258.305] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0258.305] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0258.305] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00012_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00012_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0258.306] GetFileType (hFile=0x1ac) returned 0x1 [0258.307] CloseHandle (hObject=0x1ac) returned 1 [0258.307] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0258.307] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00012_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00012_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd4897d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd4897d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x265a)) returned 1 [0258.307] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0258.307] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0258.307] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00012_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00012_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd4897d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd4897d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x265a)) returned 1 [0258.308] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0258.308] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0258.308] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0258.308] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1eb6, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="BL00045_.WMF", cAlternateFileName="")) returned 1 [0258.308] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0258.308] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0258.308] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0258.309] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0258.309] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0258.309] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0258.309] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00045_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00045_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0258.310] GetFileType (hFile=0x1ac) returned 0x1 [0258.310] CloseHandle (hObject=0x1ac) returned 1 [0258.311] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0258.311] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00045_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00045_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1eb6)) returned 1 [0258.311] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0258.311] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0258.311] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00045_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00045_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1eb6)) returned 1 [0258.312] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0258.312] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0258.312] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0258.312] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3f4, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="BL00098_.WMF", cAlternateFileName="")) returned 1 [0258.312] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0258.312] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0258.312] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0258.312] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0258.312] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0258.313] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0258.313] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00098_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00098_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0258.313] GetFileType (hFile=0x1ac) returned 0x1 [0258.314] CloseHandle (hObject=0x1ac) returned 1 [0258.314] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0258.315] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00098_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00098_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3f4)) returned 1 [0258.315] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0258.315] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0258.550] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00098_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00098_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3f4)) returned 1 [0258.550] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0258.550] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0258.550] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0258.550] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd4897d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd4897d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x370, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="BL00105_.WMF", cAlternateFileName="")) returned 1 [0258.551] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0258.551] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0258.551] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0258.551] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0258.551] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0258.551] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0258.552] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00105_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00105_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0258.552] GetFileType (hFile=0x21c) returned 0x1 [0258.553] CloseHandle (hObject=0x21c) returned 1 [0258.553] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0258.554] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00105_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00105_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd4897d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd4897d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x370)) returned 1 [0258.554] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0258.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0258.554] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00105_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00105_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd4897d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd4897d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x370)) returned 1 [0258.554] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0258.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0258.555] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0258.555] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd4897d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd4897d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27a2, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="BL00122_.WMF", cAlternateFileName="")) returned 1 [0258.555] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0258.555] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0258.555] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0258.555] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0258.555] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0258.556] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0258.556] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00122_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00122_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0258.557] GetFileType (hFile=0x21c) returned 0x1 [0258.557] CloseHandle (hObject=0x21c) returned 1 [0258.558] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0258.558] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00122_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00122_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd4897d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd4897d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27a2)) returned 1 [0258.558] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0258.558] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0258.558] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00122_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00122_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd4897d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd4897d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27a2)) returned 1 [0258.558] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0258.559] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0258.559] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0258.559] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd5c704c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd5c704c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5b8, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="BL00130_.WMF", cAlternateFileName="")) returned 1 [0258.559] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0258.559] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0258.559] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0258.559] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0258.559] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0258.560] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0258.560] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00130_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00130_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0258.561] GetFileType (hFile=0x21c) returned 0x1 [0258.561] CloseHandle (hObject=0x21c) returned 1 [0258.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0258.562] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00130_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00130_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd5c704c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd5c704c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5b8)) returned 1 [0258.562] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0258.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0258.562] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00130_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00130_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd5c704c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd5c704c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5b8)) returned 1 [0258.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0258.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0258.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0258.563] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcdbb058, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcdbb058, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd5c704c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6a0, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="BL00148_.WMF", cAlternateFileName="")) returned 1 [0258.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0258.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0258.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0258.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0258.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0258.564] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0258.564] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00148_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00148_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0258.565] GetFileType (hFile=0x21c) returned 0x1 [0258.566] CloseHandle (hObject=0x21c) returned 1 [0258.566] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0258.566] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00148_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00148_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcdbb058, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcdbb058, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd5c704c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6a0)) returned 1 [0258.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0258.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0258.567] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00148_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00148_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcdbb058, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcdbb058, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd5c704c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6a0)) returned 1 [0258.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0258.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0258.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0258.567] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcdbb058, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcdbb058, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd5c704c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5ec, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="BL00152_.WMF", cAlternateFileName="")) returned 1 [0258.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0258.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0258.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0258.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0258.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0258.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0258.569] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00152_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00152_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0258.569] GetFileType (hFile=0x21c) returned 0x1 [0258.570] CloseHandle (hObject=0x21c) returned 1 [0258.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0258.570] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00152_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00152_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcdbb058, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcdbb058, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd5c704c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5ec)) returned 1 [0258.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0258.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0258.571] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00152_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00152_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcdbb058, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcdbb058, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd5c704c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5ec)) returned 1 [0258.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0258.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0258.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0258.571] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcdbb058, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf92, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="BL00194_.WMF", cAlternateFileName="")) returned 1 [0258.572] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0258.572] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0258.572] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0258.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0258.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0258.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0258.573] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00194_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00194_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0258.573] GetFileType (hFile=0x21c) returned 0x1 [0258.574] CloseHandle (hObject=0x21c) returned 1 [0258.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0258.574] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00194_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00194_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcdbb058, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf92)) returned 1 [0258.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0258.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0258.575] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00194_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00194_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcdbb058, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf92)) returned 1 [0258.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0258.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0258.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0258.576] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcdbb058, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f86, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="BL00195_.WMF", cAlternateFileName="")) returned 1 [0258.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0258.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0258.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0258.576] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0258.576] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0258.576] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0258.577] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00195_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00195_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0258.577] GetFileType (hFile=0x21c) returned 0x1 [0258.578] CloseHandle (hObject=0x21c) returned 1 [0258.578] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0258.579] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00195_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00195_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcdbb058, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f86)) returned 1 [0258.579] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0258.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0258.579] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00195_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00195_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcdbb058, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f86)) returned 1 [0258.579] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0258.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0258.580] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0258.580] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2458, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="BL00234_.WMF", cAlternateFileName="")) returned 1 [0258.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0258.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0258.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0258.581] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0258.581] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0258.581] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0258.582] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00234_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00234_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0258.582] GetFileType (hFile=0x21c) returned 0x1 [0258.583] CloseHandle (hObject=0x21c) returned 1 [0258.584] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0258.584] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00234_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00234_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2458)) returned 1 [0258.584] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0258.584] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0258.584] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00234_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00234_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2458)) returned 1 [0258.584] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0258.585] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0258.585] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0258.585] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd5c704c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfb8, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="BL00242_.WMF", cAlternateFileName="")) returned 1 [0258.585] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0258.585] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0258.585] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0258.585] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0258.586] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0258.586] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0258.586] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00242_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00242_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0258.587] GetFileType (hFile=0x21c) returned 0x1 [0258.587] CloseHandle (hObject=0x21c) returned 1 [0258.588] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0258.588] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00242_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00242_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd5c704c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfb8)) returned 1 [0258.588] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0258.589] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0258.589] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00242_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00242_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd5c704c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfb8)) returned 1 [0258.589] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0258.589] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0258.589] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0258.589] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcdbb058, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x386c, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="BL00247_.WMF", cAlternateFileName="")) returned 1 [0258.589] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0258.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0258.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0258.590] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0258.590] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0258.590] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0258.591] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00247_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00247_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0258.591] GetFileType (hFile=0x21c) returned 0x1 [0258.592] CloseHandle (hObject=0x21c) returned 1 [0258.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0258.593] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00247_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00247_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcdbb058, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x386c)) returned 1 [0258.593] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0258.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0258.593] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00247_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00247_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcdbb058, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x386c)) returned 1 [0258.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0258.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0258.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0258.594] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x600, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="BL00248_.WMF", cAlternateFileName="")) returned 1 [0258.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0258.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0258.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0258.595] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0258.595] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0258.595] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0258.596] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00248_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00248_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0258.596] GetFileType (hFile=0x21c) returned 0x1 [0258.597] CloseHandle (hObject=0x21c) returned 1 [0258.925] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0258.925] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00248_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00248_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x600)) returned 1 [0258.925] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0258.926] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0258.926] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00248_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00248_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x600)) returned 1 [0258.926] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0258.926] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0258.926] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0258.926] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcdbb058, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1264, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="BL00252_.WMF", cAlternateFileName="")) returned 1 [0258.926] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0258.926] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0258.926] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0258.927] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0258.927] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0258.927] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0258.927] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00252_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00252_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0258.928] GetFileType (hFile=0x198) returned 0x1 [0258.928] CloseHandle (hObject=0x198) returned 1 [0258.929] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0258.929] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00252_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00252_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcdbb058, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1264)) returned 1 [0258.929] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0258.929] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0258.929] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00252_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00252_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcdbb058, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1264)) returned 1 [0258.929] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0258.929] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0258.930] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0258.930] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd685b3d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6c8, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="BL00254_.WMF", cAlternateFileName="")) returned 1 [0258.930] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0258.930] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0258.930] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0258.930] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0258.930] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0258.931] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0258.931] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00254_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00254_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0258.932] GetFileType (hFile=0x198) returned 0x1 [0258.932] CloseHandle (hObject=0x198) returned 1 [0258.933] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0258.933] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00254_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00254_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd685b3d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6c8)) returned 1 [0258.933] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0258.933] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0258.933] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00254_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00254_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd685b3d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6c8)) returned 1 [0258.934] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0258.934] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0258.934] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0258.934] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30c2, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="BL00261_.WMF", cAlternateFileName="")) returned 1 [0258.934] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0258.934] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0258.934] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0258.934] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0258.935] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0258.935] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0258.935] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00261_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00261_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0258.936] GetFileType (hFile=0x198) returned 0x1 [0258.936] CloseHandle (hObject=0x198) returned 1 [0258.937] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0258.937] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00261_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00261_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30c2)) returned 1 [0258.937] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0258.937] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0258.937] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00261_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00261_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30c2)) returned 1 [0258.937] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0258.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0258.938] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0258.938] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9fc, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="BL00262_.WMF", cAlternateFileName="")) returned 1 [0258.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0258.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0258.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0258.938] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0258.938] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0258.939] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0258.939] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00262_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00262_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0258.940] GetFileType (hFile=0x198) returned 0x1 [0258.940] CloseHandle (hObject=0x198) returned 1 [0258.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0258.941] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00262_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00262_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9fc)) returned 1 [0258.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0258.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0258.942] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00262_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00262_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9fc)) returned 1 [0258.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0258.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0258.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0258.942] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1678, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="BL00265_.WMF", cAlternateFileName="")) returned 1 [0258.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0258.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0258.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0258.943] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0258.943] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0258.943] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0258.944] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00265_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00265_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0258.944] GetFileType (hFile=0x198) returned 0x1 [0258.945] CloseHandle (hObject=0x198) returned 1 [0258.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0258.945] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00265_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00265_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1678)) returned 1 [0258.945] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0258.946] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0258.946] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00265_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00265_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1678)) returned 1 [0258.946] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0258.946] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0258.946] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0258.946] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa54, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="BL00267_.WMF", cAlternateFileName="")) returned 1 [0258.946] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0258.947] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0258.947] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0258.947] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0258.947] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0258.947] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0258.948] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00267_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00267_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0258.948] GetFileType (hFile=0x198) returned 0x1 [0258.949] CloseHandle (hObject=0x198) returned 1 [0258.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0258.949] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00267_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00267_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa54)) returned 1 [0258.950] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0258.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0258.950] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00267_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00267_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa54)) returned 1 [0258.950] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0258.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0258.950] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0258.950] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd5c704c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd5c704c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd5c704c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1498, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="BL00269_.WMF", cAlternateFileName="")) returned 1 [0258.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0258.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0258.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0258.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0258.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0258.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0258.952] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00269_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00269_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0258.952] GetFileType (hFile=0x198) returned 0x1 [0258.952] CloseHandle (hObject=0x198) returned 1 [0258.953] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0258.953] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00269_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00269_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd5c704c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd5c704c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd5c704c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1498)) returned 1 [0258.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0258.953] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0258.953] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00269_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00269_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd5c704c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd5c704c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd5c704c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1498)) returned 1 [0258.954] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0258.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0258.954] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0258.954] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc8, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="BL00270_.WMF", cAlternateFileName="")) returned 1 [0258.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0258.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0258.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0258.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0258.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0258.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0258.957] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00270_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00270_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0258.957] GetFileType (hFile=0x198) returned 0x1 [0258.957] CloseHandle (hObject=0x198) returned 1 [0258.958] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0258.958] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00270_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00270_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc8)) returned 1 [0258.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0258.958] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0258.958] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00270_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00270_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc8)) returned 1 [0258.959] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0258.959] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0258.959] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0258.959] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xec4, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="BL00273_.WMF", cAlternateFileName="")) returned 1 [0258.959] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0258.959] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0258.959] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0258.959] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0258.959] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0258.960] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0258.960] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00273_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00273_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0258.961] GetFileType (hFile=0x198) returned 0x1 [0258.961] CloseHandle (hObject=0x198) returned 1 [0258.961] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0258.962] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00273_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00273_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xec4)) returned 1 [0258.962] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0258.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0258.962] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00273_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00273_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xec4)) returned 1 [0258.962] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0258.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0258.963] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0258.963] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd5c704c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd5c704c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1044, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="BL00274_.WMF", cAlternateFileName="")) returned 1 [0258.963] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0258.963] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0258.963] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0258.963] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0258.963] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0258.963] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0258.964] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00274_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00274_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0258.964] GetFileType (hFile=0x198) returned 0x1 [0258.965] CloseHandle (hObject=0x198) returned 1 [0258.965] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0258.966] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00274_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00274_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd5c704c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd5c704c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1044)) returned 1 [0258.966] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0258.966] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0258.966] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00274_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00274_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd5c704c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd5c704c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1044)) returned 1 [0258.966] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0258.966] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0258.967] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0258.967] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd5c704c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd5c704c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="BL00296_.WMF", cAlternateFileName="")) returned 1 [0258.967] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0258.967] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0258.967] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0258.967] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0258.967] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0258.967] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0258.968] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00296_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00296_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0258.968] GetFileType (hFile=0x198) returned 0x1 [0258.969] CloseHandle (hObject=0x198) returned 1 [0258.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0258.970] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00296_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00296_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd5c704c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd5c704c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32c)) returned 1 [0258.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0258.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0258.970] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00296_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00296_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd5c704c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd5c704c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32c)) returned 1 [0258.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0258.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0258.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0258.971] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x332e, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="BL00390_.WMF", cAlternateFileName="")) returned 1 [0258.971] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238500 [0259.440] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0259.440] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0259.441] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0259.441] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0259.441] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238500 | out: hHeap=0x1f0000) returned 1 [0259.442] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00390_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00390_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0259.442] GetFileType (hFile=0x1c0) returned 0x1 [0259.443] CloseHandle (hObject=0x1c0) returned 1 [0259.443] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0259.443] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00390_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00390_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x332e)) returned 1 [0259.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0259.444] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0259.444] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00390_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00390_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x332e)) returned 1 [0259.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0259.444] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0259.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0259.444] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd685b3d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd685b3d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x69aa, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="BL00392_.WMF", cAlternateFileName="")) returned 1 [0259.444] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238528 [0259.445] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0259.445] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0259.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0259.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0259.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238528 | out: hHeap=0x1f0000) returned 1 [0259.446] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00392_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00392_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0259.446] GetFileType (hFile=0x1c0) returned 0x1 [0259.446] CloseHandle (hObject=0x1c0) returned 1 [0259.447] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0259.447] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00392_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00392_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd685b3d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd685b3d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x69aa)) returned 1 [0259.447] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0259.447] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0259.447] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00392_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00392_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd685b3d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd685b3d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x69aa)) returned 1 [0259.448] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0259.448] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0259.448] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0259.448] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd685b3d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd685b3d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b54, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="BL00524_.WMF", cAlternateFileName="")) returned 1 [0259.448] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238500 [0259.448] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0259.448] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0259.448] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0259.449] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0259.449] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238500 | out: hHeap=0x1f0000) returned 1 [0259.449] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00524_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00524_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0259.450] GetFileType (hFile=0x1c0) returned 0x1 [0259.450] CloseHandle (hObject=0x1c0) returned 1 [0259.451] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0259.451] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00524_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00524_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd685b3d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd685b3d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b54)) returned 1 [0259.451] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0259.451] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0259.451] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00524_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00524_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd685b3d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd685b3d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b54)) returned 1 [0259.451] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0259.451] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0259.452] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0259.452] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd685b3d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd685b3d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2576, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="BL00525_.WMF", cAlternateFileName="")) returned 1 [0259.452] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238578 [0259.452] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0259.452] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0259.452] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0259.452] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0259.452] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238578 | out: hHeap=0x1f0000) returned 1 [0259.453] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00525_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00525_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0259.453] GetFileType (hFile=0x1c0) returned 0x1 [0259.453] CloseHandle (hObject=0x1c0) returned 1 [0259.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0259.454] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00525_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00525_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd685b3d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd685b3d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2576)) returned 1 [0259.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0259.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0259.454] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00525_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00525_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd685b3d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd685b3d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2576)) returned 1 [0259.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0259.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0259.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0259.455] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd65f8ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd65f8ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd685b3d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6ba0, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="BL00526_.WMF", cAlternateFileName="")) returned 1 [0259.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238708 [0259.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0259.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0259.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0259.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0259.456] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238708 | out: hHeap=0x1f0000) returned 1 [0259.456] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00526_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00526_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0259.456] GetFileType (hFile=0x1c0) returned 0x1 [0259.457] CloseHandle (hObject=0x1c0) returned 1 [0259.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0259.457] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00526_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00526_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd65f8ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd65f8ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd685b3d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6ba0)) returned 1 [0259.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0259.458] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0259.458] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00526_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00526_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd65f8ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd65f8ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd685b3d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6ba0)) returned 1 [0259.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0259.458] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0259.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0259.458] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2cec, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="BL00648_.WMF", cAlternateFileName="")) returned 1 [0259.458] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238640 [0259.458] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0259.458] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0259.459] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0259.459] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0259.459] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238640 | out: hHeap=0x1f0000) returned 1 [0259.459] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00648_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00648_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0259.459] GetFileType (hFile=0x1c0) returned 0x1 [0259.460] CloseHandle (hObject=0x1c0) returned 1 [0259.460] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0259.460] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00648_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00648_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2cec)) returned 1 [0259.460] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0259.461] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0259.461] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00648_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00648_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2cec)) returned 1 [0259.461] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0259.461] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0259.461] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0259.461] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd685b3d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd685b3d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1138, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="BL00921_.WMF", cAlternateFileName="")) returned 1 [0259.461] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238640 [0259.461] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0259.461] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0259.461] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0259.462] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0259.462] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238640 | out: hHeap=0x1f0000) returned 1 [0259.462] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00921_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00921_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0259.462] GetFileType (hFile=0x1c0) returned 0x1 [0259.463] CloseHandle (hObject=0x1c0) returned 1 [0259.463] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0259.463] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00921_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00921_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd685b3d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd685b3d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1138)) returned 1 [0259.464] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0259.464] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0259.464] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00921_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00921_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd685b3d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd685b3d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1138)) returned 1 [0259.464] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0259.464] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0259.464] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0259.464] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd65f8ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd65f8ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1870, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="BL00923_.WMF", cAlternateFileName="")) returned 1 [0259.464] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238690 [0259.464] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0259.465] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0259.465] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0259.465] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0259.465] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238690 | out: hHeap=0x1f0000) returned 1 [0259.465] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00923_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00923_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0259.466] GetFileType (hFile=0x1c0) returned 0x1 [0259.466] CloseHandle (hObject=0x1c0) returned 1 [0259.466] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0259.466] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00923_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00923_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd65f8ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd65f8ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1870)) returned 1 [0259.467] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0259.467] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0259.467] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00923_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00923_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd65f8ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd65f8ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1870)) returned 1 [0259.467] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0259.467] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0259.467] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0259.467] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd65f8ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd65f8ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd685b3d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c14, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="BL00932_.WMF", cAlternateFileName="")) returned 1 [0259.467] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238668 [0259.467] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0259.468] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0259.468] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0259.468] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0259.468] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238668 | out: hHeap=0x1f0000) returned 1 [0259.468] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00932_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00932_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0259.469] GetFileType (hFile=0x1c0) returned 0x1 [0259.469] CloseHandle (hObject=0x1c0) returned 1 [0259.469] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0259.470] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00932_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00932_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd65f8ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd65f8ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd685b3d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c14)) returned 1 [0259.470] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0259.470] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0259.470] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00932_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00932_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd65f8ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd65f8ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd685b3d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c14)) returned 1 [0259.470] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0259.470] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0259.470] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0259.470] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd65f8ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd65f8ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd685b3d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xeb8, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="BL00985_.WMF", cAlternateFileName="")) returned 1 [0259.470] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238730 [0259.471] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0259.471] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0259.471] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0259.471] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0259.472] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238730 | out: hHeap=0x1f0000) returned 1 [0259.472] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00985_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00985_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0259.472] GetFileType (hFile=0x1c0) returned 0x1 [0259.473] CloseHandle (hObject=0x1c0) returned 1 [0259.473] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0259.473] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00985_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00985_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd65f8ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd65f8ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd685b3d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xeb8)) returned 1 [0259.473] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0259.474] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0259.474] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00985_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00985_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd65f8ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd65f8ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd685b3d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xeb8)) returned 1 [0259.474] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0259.474] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0259.474] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0259.474] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd16, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="BOAT.WMF", cAlternateFileName="")) returned 1 [0259.474] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384d8 [0259.474] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0259.474] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0259.474] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0259.475] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0259.475] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384d8 | out: hHeap=0x1f0000) returned 1 [0259.475] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOAT.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\boat.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0259.475] GetFileType (hFile=0x1c0) returned 0x1 [0259.476] CloseHandle (hObject=0x1c0) returned 1 [0259.476] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0259.476] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOAT.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\boat.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd16)) returned 1 [0259.477] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0259.477] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0259.477] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOAT.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\boat.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd16)) returned 1 [0259.477] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0259.477] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0259.477] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0259.477] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x714c, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="BOATINST.WMF", cAlternateFileName="")) returned 1 [0259.477] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238730 [0259.477] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0259.478] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0259.478] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0259.478] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0259.478] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238730 | out: hHeap=0x1f0000) returned 1 [0259.479] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOATINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\boatinst.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0259.479] GetFileType (hFile=0x1c0) returned 0x1 [0259.479] CloseHandle (hObject=0x1c0) returned 1 [0259.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0259.480] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOATINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\boatinst.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x714c)) returned 1 [0259.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0259.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0259.480] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOATINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\boatinst.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x714c)) returned 1 [0259.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0259.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0259.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0259.481] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x532, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="BS00076_.WMF", cAlternateFileName="")) returned 1 [0259.481] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238528 [0259.481] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0259.481] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0259.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0259.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0259.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238528 | out: hHeap=0x1f0000) returned 1 [0259.482] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00076_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00076_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0259.482] GetFileType (hFile=0x1c0) returned 0x1 [0259.482] CloseHandle (hObject=0x1c0) returned 1 [0259.483] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0259.483] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00076_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00076_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x532)) returned 1 [0259.483] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0259.483] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0259.483] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00076_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00076_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x532)) returned 1 [0259.484] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0259.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0259.484] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0259.484] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5a4, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="BS00078_.WMF", cAlternateFileName="")) returned 1 [0259.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385a0 [0259.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0259.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0259.484] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0259.484] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0259.485] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385a0 | out: hHeap=0x1f0000) returned 1 [0259.485] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00078_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00078_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0259.485] GetFileType (hFile=0x1c0) returned 0x1 [0259.486] CloseHandle (hObject=0x1c0) returned 1 [0259.486] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0259.486] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00078_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00078_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5a4)) returned 1 [0259.487] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0259.487] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0259.487] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00078_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00078_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5a4)) returned 1 [0259.487] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0259.487] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0259.487] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0259.487] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f26, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="BS00092_.WMF", cAlternateFileName="")) returned 1 [0259.487] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238500 [0259.487] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0259.488] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0259.488] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0259.488] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0259.488] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238500 | out: hHeap=0x1f0000) returned 1 [0259.868] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00092_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00092_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0259.868] GetFileType (hFile=0x19c) returned 0x1 [0259.869] CloseHandle (hObject=0x19c) returned 1 [0259.869] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0259.869] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00092_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00092_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f26)) returned 1 [0259.870] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0259.870] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0259.870] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00092_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00092_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f26)) returned 1 [0259.870] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0259.870] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0259.870] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0259.871] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x94a, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="BS00100_.WMF", cAlternateFileName="")) returned 1 [0259.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0259.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0259.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0259.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0259.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0259.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0259.872] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00100_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00100_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0259.872] GetFileType (hFile=0x19c) returned 0x1 [0259.873] CloseHandle (hObject=0x19c) returned 1 [0259.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0259.873] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00100_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00100_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x94a)) returned 1 [0259.873] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0259.874] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0259.874] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00100_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00100_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x94a)) returned 1 [0259.874] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0259.874] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0259.874] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0259.874] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="BS00135_.WMF", cAlternateFileName="")) returned 1 [0259.874] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0259.875] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0259.875] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0259.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0259.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0259.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0259.876] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00135_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00135_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0259.876] GetFileType (hFile=0x19c) returned 0x1 [0259.876] CloseHandle (hObject=0x19c) returned 1 [0259.877] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0259.877] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00135_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00135_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x414)) returned 1 [0259.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0259.878] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0259.878] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00135_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00135_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x414)) returned 1 [0259.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0259.878] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0259.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0259.878] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x876, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="BS00136_.WMF", cAlternateFileName="")) returned 1 [0259.879] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0259.879] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0259.879] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0259.879] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0259.879] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0259.879] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0259.880] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00136_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00136_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0259.880] GetFileType (hFile=0x19c) returned 0x1 [0259.880] CloseHandle (hObject=0x19c) returned 1 [0259.881] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0259.881] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00136_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00136_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x876)) returned 1 [0259.881] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0259.881] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0259.882] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00136_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00136_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x876)) returned 1 [0259.882] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0259.882] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0259.882] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0259.882] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6b0, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="BS00145_.WMF", cAlternateFileName="")) returned 1 [0259.882] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0259.882] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0259.883] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0259.883] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0259.883] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0259.883] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0259.884] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00145_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00145_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0259.884] GetFileType (hFile=0x19c) returned 0x1 [0259.885] CloseHandle (hObject=0x19c) returned 1 [0259.885] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0259.885] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00145_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00145_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6b0)) returned 1 [0259.885] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0259.886] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0259.886] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00145_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00145_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6b0)) returned 1 [0259.886] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0259.886] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0259.886] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0259.886] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20ae, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="BS00174_.WMF", cAlternateFileName="")) returned 1 [0259.886] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0259.887] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0259.887] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0259.887] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0259.887] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0259.887] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0259.888] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00174_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0259.888] GetFileType (hFile=0x19c) returned 0x1 [0259.889] CloseHandle (hObject=0x19c) returned 1 [0259.889] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0259.889] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00174_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20ae)) returned 1 [0259.889] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0259.890] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0259.890] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00174_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20ae)) returned 1 [0259.890] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0259.890] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0259.890] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0259.890] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1370, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="BS00184_.WMF", cAlternateFileName="")) returned 1 [0259.890] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0259.890] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0259.891] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0259.891] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0259.891] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0259.891] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0259.892] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00184_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0259.892] GetFileType (hFile=0x19c) returned 0x1 [0259.892] CloseHandle (hObject=0x19c) returned 1 [0259.893] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0259.893] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00184_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1370)) returned 1 [0259.894] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0259.894] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0259.894] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00184_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1370)) returned 1 [0259.894] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0259.894] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0259.894] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0259.894] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31f4, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="BS00186_.WMF", cAlternateFileName="")) returned 1 [0259.895] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0259.895] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0259.895] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0259.895] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0259.895] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0259.895] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0259.896] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00186_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00186_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0259.896] GetFileType (hFile=0x19c) returned 0x1 [0259.897] CloseHandle (hObject=0x19c) returned 1 [0259.897] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0259.897] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00186_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00186_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31f4)) returned 1 [0259.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0259.898] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0259.898] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00186_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00186_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31f4)) returned 1 [0259.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0259.898] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0259.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0259.898] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc20, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="BS00200_.WMF", cAlternateFileName="")) returned 1 [0259.899] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0259.899] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0259.899] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0259.899] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0259.899] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0259.899] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0259.900] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00200_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00200_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0259.901] GetFileType (hFile=0x19c) returned 0x1 [0259.901] CloseHandle (hObject=0x19c) returned 1 [0259.902] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0259.902] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00200_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00200_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc20)) returned 1 [0259.902] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0259.902] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0259.902] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00200_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00200_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc20)) returned 1 [0259.902] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0259.903] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0259.903] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0259.903] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x634, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="BS00224_.WMF", cAlternateFileName="")) returned 1 [0259.903] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0259.903] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0259.903] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0259.903] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0259.904] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0259.904] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0259.904] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00224_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00224_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0259.905] GetFileType (hFile=0x19c) returned 0x1 [0259.905] CloseHandle (hObject=0x19c) returned 1 [0259.906] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0259.906] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00224_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00224_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x634)) returned 1 [0259.906] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0259.906] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0259.906] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00224_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00224_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x634)) returned 1 [0259.907] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0259.907] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0259.907] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0259.907] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4bc, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="BS00438_.WMF", cAlternateFileName="")) returned 1 [0259.907] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0259.907] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0259.907] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0259.908] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0259.908] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0259.908] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0260.287] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00438_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00438_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0260.288] GetFileType (hFile=0x198) returned 0x1 [0260.288] CloseHandle (hObject=0x198) returned 1 [0260.288] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0260.288] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00438_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00438_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4bc)) returned 1 [0260.289] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0260.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0260.289] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00438_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00438_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4bc)) returned 1 [0260.289] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0260.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0260.289] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0260.289] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x804, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="BS00439_.WMF", cAlternateFileName="")) returned 1 [0260.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0260.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0260.290] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0260.290] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0260.290] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0260.290] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0260.290] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00439_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00439_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0260.291] GetFileType (hFile=0x198) returned 0x1 [0260.291] CloseHandle (hObject=0x198) returned 1 [0260.292] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0260.292] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00439_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00439_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x804)) returned 1 [0260.292] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0260.292] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0260.292] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00439_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00439_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x804)) returned 1 [0260.292] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0260.293] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0260.293] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0260.293] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15cc, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="BS00440_.WMF", cAlternateFileName="")) returned 1 [0260.293] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0260.293] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0260.293] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0260.293] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0260.293] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0260.294] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0260.294] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00440_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00440_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0260.295] GetFileType (hFile=0x198) returned 0x1 [0260.295] CloseHandle (hObject=0x198) returned 1 [0260.296] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0260.296] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00440_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00440_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15cc)) returned 1 [0260.296] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0260.296] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0260.296] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00440_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00440_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15cc)) returned 1 [0260.296] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0260.296] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0260.297] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0260.297] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdc4, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="BS00441_.WMF", cAlternateFileName="")) returned 1 [0260.297] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0260.297] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0260.297] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0260.297] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0260.297] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0260.297] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0260.298] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00441_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00441_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0260.298] GetFileType (hFile=0x198) returned 0x1 [0260.299] CloseHandle (hObject=0x198) returned 1 [0260.299] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0260.299] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00441_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00441_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdc4)) returned 1 [0260.300] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0260.314] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0260.314] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00441_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00441_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdc4)) returned 1 [0260.316] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0260.316] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0260.316] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0260.316] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9b8, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="BS00442_.WMF", cAlternateFileName="")) returned 1 [0260.316] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0260.316] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0260.316] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0260.316] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0260.317] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0260.317] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0260.318] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00442_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00442_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0260.318] GetFileType (hFile=0x198) returned 0x1 [0260.319] CloseHandle (hObject=0x198) returned 1 [0260.319] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0260.319] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00442_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00442_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9b8)) returned 1 [0260.320] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0260.320] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0260.320] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00442_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00442_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9b8)) returned 1 [0260.320] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0260.320] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0260.320] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0260.321] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x68c, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="BS00443_.WMF", cAlternateFileName="")) returned 1 [0260.321] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0260.321] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0260.321] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0260.321] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0260.321] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0260.321] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0260.322] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00443_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00443_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0260.323] GetFileType (hFile=0x198) returned 0x1 [0260.323] CloseHandle (hObject=0x198) returned 1 [0260.324] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0260.324] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00443_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00443_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x68c)) returned 1 [0260.324] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0260.324] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0260.324] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00443_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00443_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x68c)) returned 1 [0260.324] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0260.325] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0260.325] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0260.325] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf38, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="BS00444_.WMF", cAlternateFileName="")) returned 1 [0260.325] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0260.325] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0260.325] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0260.325] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0260.325] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0260.326] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0260.326] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00444_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00444_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0260.326] GetFileType (hFile=0x198) returned 0x1 [0260.327] CloseHandle (hObject=0x198) returned 1 [0260.327] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0260.328] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00444_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00444_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf38)) returned 1 [0260.328] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0260.328] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0260.328] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00444_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00444_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf38)) returned 1 [0260.328] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0260.328] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0260.328] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0260.329] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xed4, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="BS00445_.WMF", cAlternateFileName="")) returned 1 [0260.329] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0260.329] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0260.329] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0260.329] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0260.329] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0260.329] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0260.330] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00445_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00445_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0260.351] GetFileType (hFile=0x198) returned 0x1 [0260.352] CloseHandle (hObject=0x198) returned 1 [0260.352] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0260.353] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00445_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00445_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xed4)) returned 1 [0260.353] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0260.353] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0260.353] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00445_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00445_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xed4)) returned 1 [0260.353] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0260.353] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0260.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0260.354] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x984, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="BS00453_.WMF", cAlternateFileName="")) returned 1 [0260.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0260.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0260.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0260.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0260.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0260.355] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0260.355] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00453_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00453_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0260.356] GetFileType (hFile=0x198) returned 0x1 [0260.357] CloseHandle (hObject=0x198) returned 1 [0260.357] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0260.357] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00453_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00453_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x984)) returned 1 [0260.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0260.357] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0260.358] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00453_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00453_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x984)) returned 1 [0260.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0260.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0260.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0260.358] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaac, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="BS01080_.WMF", cAlternateFileName="")) returned 1 [0260.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0260.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0260.359] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0260.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0260.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0260.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0260.360] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01080_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01080_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0260.360] GetFileType (hFile=0x198) returned 0x1 [0260.361] CloseHandle (hObject=0x198) returned 1 [0260.361] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0260.361] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01080_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01080_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaac)) returned 1 [0260.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0260.675] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0260.675] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01080_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01080_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaac)) returned 1 [0260.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0260.675] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0260.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0260.675] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c08, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="BS01603_.WMF", cAlternateFileName="")) returned 1 [0260.676] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0260.676] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0260.676] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0260.676] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0260.676] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0260.676] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0260.677] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01603_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01603_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0260.677] GetFileType (hFile=0x174) returned 0x1 [0260.678] CloseHandle (hObject=0x174) returned 1 [0260.678] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0260.678] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01603_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01603_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c08)) returned 1 [0260.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0260.678] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0260.678] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01603_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01603_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c08)) returned 1 [0260.679] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0260.679] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0260.679] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0260.679] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xda6, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="BS01634_.WMF", cAlternateFileName="")) returned 1 [0260.679] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0260.679] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0260.679] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0260.679] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0260.679] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0260.680] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0260.680] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01634_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01634_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0260.680] GetFileType (hFile=0x174) returned 0x1 [0260.681] CloseHandle (hObject=0x174) returned 1 [0260.682] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0260.682] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01634_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01634_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xda6)) returned 1 [0260.682] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0260.682] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0260.682] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01634_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01634_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xda6)) returned 1 [0260.682] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0260.682] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0260.683] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0260.683] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a94, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="BS01635_.WMF", cAlternateFileName="")) returned 1 [0260.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0260.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0260.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0260.683] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0260.683] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0260.683] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0260.684] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01635_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01635_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0260.684] GetFileType (hFile=0x174) returned 0x1 [0260.685] CloseHandle (hObject=0x174) returned 1 [0260.685] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0260.685] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01635_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01635_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a94)) returned 1 [0260.685] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0260.685] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0260.685] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01635_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01635_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a94)) returned 1 [0260.685] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0260.685] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0260.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0260.686] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x752, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="BS01636_.WMF", cAlternateFileName="")) returned 1 [0260.686] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0260.686] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0260.686] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0260.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0260.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0260.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0260.687] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01636_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01636_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0260.687] GetFileType (hFile=0x174) returned 0x1 [0260.687] CloseHandle (hObject=0x174) returned 1 [0260.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0260.688] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01636_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01636_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x752)) returned 1 [0260.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0260.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0260.688] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01636_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01636_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x752)) returned 1 [0260.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0260.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0260.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0260.688] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf6c, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="BS01637_.WMF", cAlternateFileName="")) returned 1 [0260.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0260.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0260.689] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0260.689] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0260.689] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0260.689] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0260.689] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01637_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01637_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0260.689] GetFileType (hFile=0x174) returned 0x1 [0260.690] CloseHandle (hObject=0x174) returned 1 [0260.690] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0260.690] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01637_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01637_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf6c)) returned 1 [0260.690] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0260.691] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0260.691] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01637_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01637_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf6c)) returned 1 [0260.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0260.691] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0260.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0260.691] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x292a, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="BS01638_.WMF", cAlternateFileName="")) returned 1 [0260.691] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0260.691] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0260.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0260.692] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0260.692] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0260.692] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0260.692] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01638_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01638_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0260.693] GetFileType (hFile=0x174) returned 0x1 [0260.693] CloseHandle (hObject=0x174) returned 1 [0260.693] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0260.693] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01638_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01638_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x292a)) returned 1 [0260.694] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0260.694] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0260.694] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01638_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01638_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x292a)) returned 1 [0260.694] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0260.694] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0260.694] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0260.694] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd744774, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x108c, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="BS01639_.WMF", cAlternateFileName="")) returned 1 [0260.694] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0260.694] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0260.694] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0260.694] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0260.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0260.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0260.695] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01639_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01639_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0260.695] GetFileType (hFile=0x174) returned 0x1 [0260.696] CloseHandle (hObject=0x174) returned 1 [0260.696] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0260.696] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01639_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01639_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd744774, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x108c)) returned 1 [0260.696] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0260.696] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0260.696] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01639_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01639_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd744774, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x108c)) returned 1 [0260.696] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0260.697] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0260.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0260.697] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x246a, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="CARBN_01.MID", cAlternateFileName="")) returned 1 [0260.697] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0260.697] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0260.697] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0260.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0260.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0260.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0260.698] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CARBN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\carbn_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0260.698] GetFileType (hFile=0x174) returned 0x1 [0260.698] CloseHandle (hObject=0x174) returned 1 [0260.699] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0260.699] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CARBN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\carbn_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x246a)) returned 1 [0260.699] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0260.699] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0260.699] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CARBN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\carbn_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x246a)) returned 1 [0260.699] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0260.699] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0260.699] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0260.699] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd744774, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdec, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="CG1606.WMF", cAlternateFileName="")) returned 1 [0260.699] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0260.699] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0260.699] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0260.700] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0260.700] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0260.700] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0260.700] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CG1606.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cg1606.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0260.700] GetFileType (hFile=0x174) returned 0x1 [0260.701] CloseHandle (hObject=0x174) returned 1 [0260.701] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0260.701] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CG1606.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cg1606.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd744774, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdec)) returned 1 [0260.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0260.701] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0260.701] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CG1606.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cg1606.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd744774, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdec)) returned 1 [0260.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0260.701] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0260.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0260.702] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x976, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="CLASSIC1.WMF", cAlternateFileName="")) returned 1 [0260.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0260.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0260.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0260.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0260.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0260.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0260.702] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC1.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\classic1.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0260.702] GetFileType (hFile=0x174) returned 0x1 [0260.703] CloseHandle (hObject=0x174) returned 1 [0260.703] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0260.703] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC1.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\classic1.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x976)) returned 1 [0260.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0260.703] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0260.703] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC1.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\classic1.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x976)) returned 1 [0260.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0260.703] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0260.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0260.703] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8d6, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="CLASSIC2.WMF", cAlternateFileName="")) returned 1 [0260.704] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0260.704] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0260.704] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0260.704] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0260.704] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0260.704] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0260.704] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC2.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\classic2.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0260.704] GetFileType (hFile=0x174) returned 0x1 [0260.705] CloseHandle (hObject=0x174) returned 1 [0260.705] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0260.705] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC2.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\classic2.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8d6)) returned 1 [0260.705] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0260.705] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0260.705] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC2.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\classic2.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8d6)) returned 1 [0260.705] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0260.705] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0260.706] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0260.706] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8d6, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="CLIP.WMF", cAlternateFileName="")) returned 1 [0260.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0260.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0260.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0260.706] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0260.706] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0260.706] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0260.706] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLIP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\clip.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0260.707] GetFileType (hFile=0x174) returned 0x1 [0260.707] CloseHandle (hObject=0x174) returned 1 [0260.707] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0260.707] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLIP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\clip.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8d6)) returned 1 [0260.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0260.707] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0260.707] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLIP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\clip.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8d6)) returned 1 [0260.708] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0260.708] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0260.708] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0260.708] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b3a, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="CMNTY_01.MID", cAlternateFileName="")) returned 1 [0260.708] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0260.708] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0260.708] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0260.708] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0260.708] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0260.708] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0260.708] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CMNTY_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cmnty_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0260.709] GetFileType (hFile=0x174) returned 0x1 [0260.709] CloseHandle (hObject=0x174) returned 1 [0260.709] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0260.709] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CMNTY_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cmnty_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b3a)) returned 1 [0260.709] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0260.709] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0260.709] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CMNTY_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cmnty_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b3a)) returned 1 [0260.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0260.710] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0260.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0260.710] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1496, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="CRANE.WMF", cAlternateFileName="")) returned 1 [0260.710] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0260.710] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0260.710] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0260.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0260.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0260.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0260.711] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANE.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\crane.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0260.711] GetFileType (hFile=0x174) returned 0x1 [0260.711] CloseHandle (hObject=0x174) returned 1 [0260.711] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0260.711] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANE.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\crane.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1496)) returned 1 [0260.712] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0260.712] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0260.712] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANE.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\crane.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1496)) returned 1 [0260.712] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0260.712] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0260.712] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0260.712] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc18a, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="CRANINST.WMF", cAlternateFileName="")) returned 1 [0260.712] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0260.712] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0260.712] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0260.712] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0260.712] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0260.713] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0260.713] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\craninst.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0260.713] GetFileType (hFile=0x174) returned 0x1 [0260.713] CloseHandle (hObject=0x174) returned 1 [0260.714] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0260.714] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\craninst.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc18a)) returned 1 [0260.714] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0260.714] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0260.714] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\craninst.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc18a)) returned 1 [0260.714] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0260.714] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0260.714] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0260.714] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb96, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="CUP.WMF", cAlternateFileName="")) returned 1 [0260.715] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0260.715] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0260.715] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0260.715] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0260.715] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cup.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0260.715] GetFileType (hFile=0x174) returned 0x1 [0260.716] CloseHandle (hObject=0x174) returned 1 [0260.716] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0260.716] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cup.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb96)) returned 1 [0260.716] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0260.716] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0260.716] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cup.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb96)) returned 1 [0260.716] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0260.716] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0260.717] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0260.717] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2856, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="CUPINST.WMF", cAlternateFileName="")) returned 1 [0260.717] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0260.717] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0260.717] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0260.717] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0260.717] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0260.717] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0260.717] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUPINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cupinst.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0260.718] GetFileType (hFile=0x174) returned 0x1 [0260.718] CloseHandle (hObject=0x174) returned 1 [0260.718] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0260.718] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUPINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cupinst.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2856)) returned 1 [0260.718] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0260.718] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0260.719] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUPINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cupinst.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2856)) returned 1 [0260.719] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0260.719] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0260.719] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0260.719] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7992, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="DD00117_.WMF", cAlternateFileName="")) returned 1 [0260.719] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0260.719] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0260.719] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0260.719] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0260.719] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0260.719] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0260.720] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00117_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00117_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0260.720] GetFileType (hFile=0x174) returned 0x1 [0260.720] CloseHandle (hObject=0x174) returned 1 [0260.720] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0260.720] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00117_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00117_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7992)) returned 1 [0260.721] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0260.721] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0261.090] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00117_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00117_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7992)) returned 1 [0261.091] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0261.091] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0261.091] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0261.091] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2040, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="DD00121_.WMF", cAlternateFileName="")) returned 1 [0261.091] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0261.092] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0261.092] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0261.092] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0261.092] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0261.092] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0261.093] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00121_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00121_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0261.093] GetFileType (hFile=0x1ac) returned 0x1 [0261.094] CloseHandle (hObject=0x1ac) returned 1 [0261.094] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0261.095] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00121_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00121_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2040)) returned 1 [0261.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0261.095] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0261.095] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00121_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00121_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2040)) returned 1 [0261.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0261.095] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0261.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0261.095] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x73bc, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="DD00234_.WMF", cAlternateFileName="")) returned 1 [0261.095] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0261.096] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0261.096] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0261.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0261.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0261.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0261.097] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00234_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00234_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0261.098] GetFileType (hFile=0x1ac) returned 0x1 [0261.098] CloseHandle (hObject=0x1ac) returned 1 [0261.099] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0261.099] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00234_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00234_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x73bc)) returned 1 [0261.099] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0261.099] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0261.099] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00234_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00234_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x73bc)) returned 1 [0261.100] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0261.100] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0261.100] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0261.100] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa82, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="DD00255_.WMF", cAlternateFileName="")) returned 1 [0261.100] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0261.100] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0261.100] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0261.100] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0261.101] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0261.101] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0261.101] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00255_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00255_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0261.102] GetFileType (hFile=0x1ac) returned 0x1 [0261.102] CloseHandle (hObject=0x1ac) returned 1 [0261.103] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0261.103] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00255_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00255_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa82)) returned 1 [0261.103] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0261.103] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0261.103] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00255_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00255_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa82)) returned 1 [0261.104] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0261.104] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0261.104] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0261.104] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd744774, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb10, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="DD00256_.WMF", cAlternateFileName="")) returned 1 [0261.104] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0261.104] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0261.104] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0261.104] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0261.105] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0261.105] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0261.105] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00256_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00256_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0261.106] GetFileType (hFile=0x1ac) returned 0x1 [0261.106] CloseHandle (hObject=0x1ac) returned 1 [0261.107] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0261.107] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00256_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00256_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd744774, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb10)) returned 1 [0261.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0261.107] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0261.107] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00256_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00256_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd744774, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb10)) returned 1 [0261.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0261.108] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0261.108] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0261.108] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9456, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="DD00261_.WMF", cAlternateFileName="")) returned 1 [0261.108] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0261.108] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0261.108] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0261.108] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0261.108] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0261.109] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0261.109] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00261_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00261_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0261.109] GetFileType (hFile=0x1ac) returned 0x1 [0261.110] CloseHandle (hObject=0x1ac) returned 1 [0261.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0261.110] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00261_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00261_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9456)) returned 1 [0261.111] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0261.111] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0261.111] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00261_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00261_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9456)) returned 1 [0261.111] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0261.111] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0261.111] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0261.111] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9c5e, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="DD00297_.WMF", cAlternateFileName="")) returned 1 [0261.111] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0261.112] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0261.112] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0261.112] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0261.112] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0261.112] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0261.113] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00297_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00297_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0261.113] GetFileType (hFile=0x1ac) returned 0x1 [0261.113] CloseHandle (hObject=0x1ac) returned 1 [0261.114] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0261.114] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00297_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00297_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9c5e)) returned 1 [0261.114] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0261.114] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0261.114] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00297_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00297_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9c5e)) returned 1 [0261.114] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0261.115] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0261.115] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0261.115] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x318, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="DD00372_.WMF", cAlternateFileName="")) returned 1 [0261.115] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0261.115] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0261.115] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0261.115] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0261.115] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0261.115] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0261.116] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00372_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00372_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0261.116] GetFileType (hFile=0x1ac) returned 0x1 [0261.117] CloseHandle (hObject=0x1ac) returned 1 [0261.117] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0261.118] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00372_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00372_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x318)) returned 1 [0261.118] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0261.118] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0261.118] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00372_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00372_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x318)) returned 1 [0261.118] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0261.118] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0261.119] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0261.119] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x44b0, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="DD00405_.WMF", cAlternateFileName="")) returned 1 [0261.119] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0261.119] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0261.119] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0261.119] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0261.119] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0261.119] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0261.120] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00405_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00405_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0261.120] GetFileType (hFile=0x1ac) returned 0x1 [0261.121] CloseHandle (hObject=0x1ac) returned 1 [0261.121] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0261.121] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00405_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00405_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x44b0)) returned 1 [0261.122] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0261.122] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0261.122] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00405_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00405_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x44b0)) returned 1 [0261.122] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0261.122] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0261.122] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0261.122] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e94, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="DD00407_.WMF", cAlternateFileName="")) returned 1 [0261.122] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0261.123] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0261.123] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0261.123] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0261.123] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0261.123] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0261.124] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00407_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00407_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0261.124] GetFileType (hFile=0x1ac) returned 0x1 [0261.124] CloseHandle (hObject=0x1ac) returned 1 [0261.125] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0261.125] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00407_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00407_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e94)) returned 1 [0261.125] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0261.125] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0261.125] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00407_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00407_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e94)) returned 1 [0261.126] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0261.126] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0261.126] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0261.126] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa7f0, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="DD00413_.WMF", cAlternateFileName="")) returned 1 [0261.126] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0261.126] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0261.126] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0261.126] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0261.127] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0261.127] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0261.379] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00413_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00413_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0261.379] GetFileType (hFile=0x1ac) returned 0x1 [0261.380] CloseHandle (hObject=0x1ac) returned 1 [0261.380] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0261.380] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00413_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00413_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa7f0)) returned 1 [0261.380] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0261.381] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0261.381] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00413_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00413_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa7f0)) returned 1 [0261.381] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0261.381] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0261.381] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0261.381] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa79c, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="DD00414_.WMF", cAlternateFileName="")) returned 1 [0261.381] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0261.381] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0261.382] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0261.382] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0261.382] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0261.382] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0261.528] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00414_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00414_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0261.529] GetFileType (hFile=0x1ac) returned 0x1 [0261.529] CloseHandle (hObject=0x1ac) returned 1 [0261.530] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0261.530] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00414_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00414_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa79c)) returned 1 [0261.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0261.530] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0261.530] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00414_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00414_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa79c)) returned 1 [0261.531] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0261.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0261.531] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0261.531] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c8, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="DD00419_.WMF", cAlternateFileName="")) returned 1 [0261.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0261.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0261.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0261.531] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0261.531] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0261.531] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0261.532] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00419_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00419_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0261.532] GetFileType (hFile=0x1ac) returned 0x1 [0261.533] CloseHandle (hObject=0x1ac) returned 1 [0261.537] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0261.537] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00419_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00419_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c8)) returned 1 [0261.537] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0261.537] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0261.537] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00419_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00419_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c8)) returned 1 [0261.537] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0261.537] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0261.537] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0261.538] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x78c, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="DD00437_.WMF", cAlternateFileName="")) returned 1 [0261.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0261.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0261.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0261.538] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0261.538] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0261.538] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0261.539] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00437_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00437_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0261.539] GetFileType (hFile=0x1ac) returned 0x1 [0261.539] CloseHandle (hObject=0x1ac) returned 1 [0261.540] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0261.540] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00437_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00437_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x78c)) returned 1 [0261.540] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0261.540] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0261.540] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00437_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00437_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x78c)) returned 1 [0261.541] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0261.541] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0261.541] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0261.541] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb88, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="DD00448_.WMF", cAlternateFileName="")) returned 1 [0261.541] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0261.541] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0261.541] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0261.541] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0261.541] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0261.542] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0261.542] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00448_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00448_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0261.542] GetFileType (hFile=0x1ac) returned 0x1 [0261.543] CloseHandle (hObject=0x1ac) returned 1 [0261.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0261.543] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00448_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00448_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb88)) returned 1 [0261.544] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0261.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0261.544] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00448_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00448_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb88)) returned 1 [0261.544] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0261.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0261.544] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0261.544] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2708, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="DD00449_.WMF", cAlternateFileName="")) returned 1 [0261.545] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0261.545] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0261.545] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0261.545] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0261.545] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0261.545] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0261.546] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00449_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00449_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0261.546] GetFileType (hFile=0x1ac) returned 0x1 [0261.546] CloseHandle (hObject=0x1ac) returned 1 [0261.547] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0261.547] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00449_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00449_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2708)) returned 1 [0261.547] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0261.547] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0261.547] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00449_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00449_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2708)) returned 1 [0261.547] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0261.547] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0261.548] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0261.548] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5130, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="DD00687_.WMF", cAlternateFileName="")) returned 1 [0261.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0261.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0261.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0261.548] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0261.548] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0261.548] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0261.549] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00687_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00687_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0261.550] GetFileType (hFile=0x1ac) returned 0x1 [0261.550] CloseHandle (hObject=0x1ac) returned 1 [0261.551] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0261.551] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00687_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00687_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5130)) returned 1 [0261.551] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0261.551] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0261.551] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00687_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00687_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5130)) returned 1 [0261.551] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0261.551] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0261.552] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0261.552] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x600c, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="DD00705_.WMF", cAlternateFileName="")) returned 1 [0261.552] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0261.552] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0261.552] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0261.552] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0261.552] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0261.552] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0261.553] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00705_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00705_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0261.554] GetFileType (hFile=0x1ac) returned 0x1 [0261.554] CloseHandle (hObject=0x1ac) returned 1 [0261.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0261.555] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00705_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00705_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x600c)) returned 1 [0261.555] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0261.555] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0261.555] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00705_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00705_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x600c)) returned 1 [0261.555] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0261.555] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0261.555] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0261.556] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b2, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="DD01015_.WMF", cAlternateFileName="")) returned 1 [0261.556] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0261.556] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0261.556] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0261.556] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0261.556] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0261.556] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0261.557] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01015_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0261.557] GetFileType (hFile=0x1ac) returned 0x1 [0261.558] CloseHandle (hObject=0x1ac) returned 1 [0261.558] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0261.558] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01015_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b2)) returned 1 [0261.558] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0261.558] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0261.559] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01015_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b2)) returned 1 [0261.559] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0261.559] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0261.559] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0261.559] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x39e4, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="DD01039_.WMF", cAlternateFileName="")) returned 1 [0261.559] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0261.559] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0261.559] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0261.559] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0261.559] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0261.560] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0261.560] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01039_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01039_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0261.560] GetFileType (hFile=0x1ac) returned 0x1 [0261.561] CloseHandle (hObject=0x1ac) returned 1 [0261.561] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0261.561] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01039_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01039_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x39e4)) returned 1 [0261.561] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0261.561] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0261.561] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01039_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01039_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x39e4)) returned 1 [0261.562] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0261.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0261.562] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0261.562] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb709c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe6c, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="DD01138_.WMF", cAlternateFileName="")) returned 1 [0261.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0261.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0261.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0261.562] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0261.562] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0261.562] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0261.563] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01138_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01138_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0261.563] GetFileType (hFile=0x1ac) returned 0x1 [0261.563] CloseHandle (hObject=0x1ac) returned 1 [0261.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0261.564] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01138_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01138_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb709c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe6c)) returned 1 [0261.564] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0261.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0261.564] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01138_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01138_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb709c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe6c)) returned 1 [0261.564] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0261.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0261.564] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0261.927] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe30, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="DD01139_.WMF", cAlternateFileName="")) returned 1 [0261.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0261.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0261.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0261.928] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0261.928] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0261.929] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0261.930] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01139_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01139_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0261.930] GetFileType (hFile=0x21c) returned 0x1 [0261.931] CloseHandle (hObject=0x21c) returned 1 [0261.932] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0261.932] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01139_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01139_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe30)) returned 1 [0261.932] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0261.932] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0261.932] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01139_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01139_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe30)) returned 1 [0261.932] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0261.933] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0261.933] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0261.933] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb709c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe20, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="DD01140_.WMF", cAlternateFileName="")) returned 1 [0261.933] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0261.933] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0261.933] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0261.933] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0261.934] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0261.934] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0261.934] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01140_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01140_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0261.935] GetFileType (hFile=0x21c) returned 0x1 [0261.935] CloseHandle (hObject=0x21c) returned 1 [0261.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0261.936] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01140_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01140_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb709c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe20)) returned 1 [0261.936] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0261.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0261.936] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01140_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01140_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb709c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe20)) returned 1 [0261.937] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0261.937] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0261.937] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0261.937] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb709c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x85c, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="DD01143_.WMF", cAlternateFileName="")) returned 1 [0261.937] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0261.937] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0261.937] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0261.937] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0261.938] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0261.938] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0261.938] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01143_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01143_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0261.939] GetFileType (hFile=0x21c) returned 0x1 [0261.939] CloseHandle (hObject=0x21c) returned 1 [0261.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0261.940] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01143_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01143_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb709c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x85c)) returned 1 [0261.940] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0261.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0261.940] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01143_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01143_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb709c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x85c)) returned 1 [0261.940] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0261.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0261.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0261.941] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xadc, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="DD01145_.WMF", cAlternateFileName="")) returned 1 [0261.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0261.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0261.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0261.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0261.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0261.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0261.942] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01145_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01145_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0261.942] GetFileType (hFile=0x21c) returned 0x1 [0261.943] CloseHandle (hObject=0x21c) returned 1 [0261.944] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0261.944] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01145_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01145_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xadc)) returned 1 [0261.944] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0261.944] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0261.944] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01145_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01145_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xadc)) returned 1 [0261.944] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0261.944] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0261.944] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0261.945] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb709c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaec, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="DD01146_.WMF", cAlternateFileName="")) returned 1 [0261.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0261.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0261.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0261.945] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0261.945] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0261.945] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0261.946] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01146_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01146_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0261.946] GetFileType (hFile=0x21c) returned 0x1 [0261.947] CloseHandle (hObject=0x21c) returned 1 [0261.947] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0261.947] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01146_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01146_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb709c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaec)) returned 1 [0261.947] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0261.948] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0261.948] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01146_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01146_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb709c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaec)) returned 1 [0261.948] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0261.948] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0261.948] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0261.948] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb90, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="DD01151_.WMF", cAlternateFileName="")) returned 1 [0261.948] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0261.948] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0261.948] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0261.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0261.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0261.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0261.950] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01151_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01151_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0261.950] GetFileType (hFile=0x21c) returned 0x1 [0261.950] CloseHandle (hObject=0x21c) returned 1 [0261.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0261.951] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01151_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01151_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb90)) returned 1 [0261.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0261.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0261.951] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01151_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01151_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb90)) returned 1 [0261.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0261.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0261.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0261.952] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb90, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="DD01152_.WMF", cAlternateFileName="")) returned 1 [0261.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0261.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0261.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0261.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0261.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0261.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0261.953] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01152_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01152_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0261.954] GetFileType (hFile=0x21c) returned 0x1 [0261.954] CloseHandle (hObject=0x21c) returned 1 [0261.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0261.955] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01152_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01152_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb90)) returned 1 [0261.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0261.955] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0261.955] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01152_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01152_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb90)) returned 1 [0261.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0261.955] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0261.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0261.956] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe04, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="DD01157_.WMF", cAlternateFileName="")) returned 1 [0261.956] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0261.956] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0261.956] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0261.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0261.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0261.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0261.957] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01157_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01157_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0261.957] GetFileType (hFile=0x21c) returned 0x1 [0261.957] CloseHandle (hObject=0x21c) returned 1 [0261.958] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0261.958] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01157_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01157_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe04)) returned 1 [0261.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0261.958] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0261.958] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01157_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01157_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe04)) returned 1 [0261.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0261.958] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0261.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0261.958] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b4, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="DD01160_.WMF", cAlternateFileName="")) returned 1 [0261.959] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0261.959] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0261.959] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0261.959] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0261.959] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0261.959] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0261.959] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01160_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01160_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0261.960] GetFileType (hFile=0x21c) returned 0x1 [0261.960] CloseHandle (hObject=0x21c) returned 1 [0261.960] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0261.960] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01160_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01160_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b4)) returned 1 [0261.961] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0261.961] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0261.961] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01160_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01160_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b4)) returned 1 [0261.961] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0261.961] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0261.961] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0261.961] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8fc, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="DD01162_.WMF", cAlternateFileName="")) returned 1 [0261.961] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0261.961] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0261.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0261.962] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0261.962] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0261.962] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0261.962] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01162_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01162_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0261.963] GetFileType (hFile=0x21c) returned 0x1 [0261.963] CloseHandle (hObject=0x21c) returned 1 [0261.964] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0261.964] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01162_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01162_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8fc)) returned 1 [0261.964] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0261.964] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0261.964] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01162_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01162_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8fc)) returned 1 [0261.964] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0261.964] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0261.964] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0261.964] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8fc, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="DD01163_.WMF", cAlternateFileName="")) returned 1 [0261.965] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0261.965] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0261.965] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0261.965] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0261.965] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0261.965] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0261.966] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01163_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01163_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0261.966] GetFileType (hFile=0x21c) returned 0x1 [0261.966] CloseHandle (hObject=0x21c) returned 1 [0261.967] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0261.967] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01163_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01163_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8fc)) returned 1 [0261.967] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0261.967] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0261.967] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01163_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01163_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8fc)) returned 1 [0261.967] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0261.967] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0261.967] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0261.968] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x820, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="DD01166_.WMF", cAlternateFileName="")) returned 1 [0261.968] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0261.968] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0261.968] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0261.968] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0261.968] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0261.968] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0261.969] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01166_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01166_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0261.969] GetFileType (hFile=0x21c) returned 0x1 [0261.969] CloseHandle (hObject=0x21c) returned 1 [0261.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0261.970] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01166_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01166_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x820)) returned 1 [0261.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0261.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0261.970] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01166_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01166_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x820)) returned 1 [0261.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0261.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0261.971] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0261.971] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x820, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="DD01167_.WMF", cAlternateFileName="")) returned 1 [0262.378] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0262.378] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0262.378] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0262.378] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0262.378] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0262.378] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0262.379] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01167_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01167_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0262.379] GetFileType (hFile=0x198) returned 0x1 [0262.379] CloseHandle (hObject=0x198) returned 1 [0262.380] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0262.380] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01167_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01167_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x820)) returned 1 [0262.380] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0262.380] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0262.380] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01167_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01167_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x820)) returned 1 [0262.381] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0262.381] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0262.381] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0262.381] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7d4, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="DD01168_.WMF", cAlternateFileName="")) returned 1 [0262.381] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0262.381] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0262.381] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0262.381] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0262.381] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0262.382] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0262.382] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01168_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01168_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0262.382] GetFileType (hFile=0x198) returned 0x1 [0262.383] CloseHandle (hObject=0x198) returned 1 [0262.383] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0262.384] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01168_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01168_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7d4)) returned 1 [0262.384] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0262.384] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0262.384] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01168_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01168_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7d4)) returned 1 [0262.385] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0262.385] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0262.385] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0262.385] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e4, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="DD01169_.WMF", cAlternateFileName="")) returned 1 [0262.385] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0262.385] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0262.385] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0262.385] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0262.385] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0262.385] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0262.386] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01169_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01169_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0262.386] GetFileType (hFile=0x198) returned 0x1 [0262.387] CloseHandle (hObject=0x198) returned 1 [0262.387] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0262.387] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01169_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01169_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e4)) returned 1 [0262.387] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0262.387] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0262.388] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01169_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01169_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e4)) returned 1 [0262.388] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0262.388] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0262.388] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0262.388] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x964, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="DD01170_.WMF", cAlternateFileName="")) returned 1 [0262.388] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0262.388] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0262.388] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0262.388] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0262.388] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0262.388] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0262.389] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01170_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01170_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0262.389] GetFileType (hFile=0x198) returned 0x1 [0262.389] CloseHandle (hObject=0x198) returned 1 [0262.390] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0262.390] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01170_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01170_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x964)) returned 1 [0262.390] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0262.390] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0262.390] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01170_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01170_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x964)) returned 1 [0262.391] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0262.391] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0262.391] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0262.391] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x804, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="DD01171_.WMF", cAlternateFileName="")) returned 1 [0262.391] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0262.391] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0262.391] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0262.392] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0262.392] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0262.392] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0262.392] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01171_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01171_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0262.393] GetFileType (hFile=0x198) returned 0x1 [0262.394] CloseHandle (hObject=0x198) returned 1 [0262.394] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0262.394] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01171_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01171_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x804)) returned 1 [0262.394] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0262.394] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0262.395] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01171_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01171_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x804)) returned 1 [0262.395] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0262.395] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0262.395] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0262.395] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b8, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="DD01172_.WMF", cAlternateFileName="")) returned 1 [0262.395] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0262.395] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0262.395] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0262.395] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0262.396] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0262.396] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0262.396] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01172_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0262.397] GetFileType (hFile=0x198) returned 0x1 [0262.397] CloseHandle (hObject=0x198) returned 1 [0262.397] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0262.397] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01172_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b8)) returned 1 [0262.398] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0262.398] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0262.398] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01172_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b8)) returned 1 [0262.398] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0262.398] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0262.398] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0262.398] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x70c, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="DD01173_.WMF", cAlternateFileName="")) returned 1 [0262.398] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0262.399] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0262.399] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0262.399] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0262.399] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0262.399] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0262.400] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01173_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0262.400] GetFileType (hFile=0x198) returned 0x1 [0262.400] CloseHandle (hObject=0x198) returned 1 [0262.401] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0262.401] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01173_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x70c)) returned 1 [0262.401] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0262.401] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0262.401] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01173_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x70c)) returned 1 [0262.401] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0262.402] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0262.402] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0262.402] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x760, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="DD01176_.WMF", cAlternateFileName="")) returned 1 [0262.402] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0262.402] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0262.402] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0262.402] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0262.402] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0262.403] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0262.403] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01176_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01176_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0262.404] GetFileType (hFile=0x198) returned 0x1 [0262.404] CloseHandle (hObject=0x198) returned 1 [0262.405] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0262.405] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01176_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01176_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x760)) returned 1 [0262.405] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0262.405] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0262.405] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01176_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01176_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x760)) returned 1 [0262.405] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0262.405] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0262.406] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0262.406] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xed4, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="DD01178_.WMF", cAlternateFileName="")) returned 1 [0262.406] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0262.406] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0262.406] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0262.406] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0262.406] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0262.407] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0262.407] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01178_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01178_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0262.408] GetFileType (hFile=0x198) returned 0x1 [0262.408] CloseHandle (hObject=0x198) returned 1 [0262.409] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0262.410] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01178_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01178_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xed4)) returned 1 [0262.410] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0262.410] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0262.410] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01178_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01178_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xed4)) returned 1 [0262.410] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0262.410] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0262.410] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0262.410] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e8, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="DD01179_.WMF", cAlternateFileName="")) returned 1 [0262.410] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0262.410] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0262.411] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0262.411] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0262.411] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0262.411] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0262.411] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01179_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01179_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0262.412] GetFileType (hFile=0x198) returned 0x1 [0262.412] CloseHandle (hObject=0x198) returned 1 [0262.413] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0262.413] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01179_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01179_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e8)) returned 1 [0262.413] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0262.413] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0262.413] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01179_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01179_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e8)) returned 1 [0262.413] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0262.413] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0262.414] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0262.414] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x824, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="DD01180_.WMF", cAlternateFileName="")) returned 1 [0262.414] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0262.414] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0262.414] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0262.414] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0262.414] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0262.414] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0262.415] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01180_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01180_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0262.415] GetFileType (hFile=0x198) returned 0x1 [0262.416] CloseHandle (hObject=0x198) returned 1 [0262.416] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0262.416] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01180_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01180_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x824)) returned 1 [0262.416] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0262.416] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0262.417] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01180_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01180_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x824)) returned 1 [0262.417] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0262.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0262.417] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0262.417] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5a8, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="DD01181_.WMF", cAlternateFileName="")) returned 1 [0262.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0262.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0262.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0262.417] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0262.418] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0262.418] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0262.418] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01181_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01181_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0262.418] GetFileType (hFile=0x198) returned 0x1 [0262.419] CloseHandle (hObject=0x198) returned 1 [0262.419] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0262.419] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01181_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01181_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5a8)) returned 1 [0262.420] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0262.420] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0262.420] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01181_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01181_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5a8)) returned 1 [0262.420] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0262.420] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0262.420] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0262.420] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbb4, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="DD01182_.WMF", cAlternateFileName="")) returned 1 [0262.420] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0262.420] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0262.420] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0262.420] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0262.420] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0262.421] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0262.421] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01182_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01182_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0262.421] GetFileType (hFile=0x198) returned 0x1 [0262.422] CloseHandle (hObject=0x198) returned 1 [0262.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0262.422] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01182_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01182_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbb4)) returned 1 [0262.422] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0262.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0262.423] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01182_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01182_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbb4)) returned 1 [0262.423] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0262.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0262.423] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0262.423] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="DD01183_.WMF", cAlternateFileName="")) returned 1 [0262.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0262.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0262.424] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0262.424] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0262.424] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0263.004] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0263.005] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01183_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01183_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0263.005] GetFileType (hFile=0x1e8) returned 0x1 [0263.006] CloseHandle (hObject=0x1e8) returned 1 [0263.006] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0263.006] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01183_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01183_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8f8)) returned 1 [0263.008] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0263.008] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0263.008] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01183_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01183_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8f8)) returned 1 [0263.008] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0263.008] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0263.008] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0263.009] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2174, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="DD01186_.WMF", cAlternateFileName="")) returned 1 [0263.009] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0263.009] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0263.009] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0263.009] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0263.009] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0263.009] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0263.010] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01186_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01186_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0263.010] GetFileType (hFile=0x1e8) returned 0x1 [0263.010] CloseHandle (hObject=0x1e8) returned 1 [0263.011] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0263.011] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01186_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01186_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2174)) returned 1 [0263.011] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0263.011] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0263.011] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01186_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01186_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2174)) returned 1 [0263.011] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0263.012] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0263.012] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0263.012] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6e8, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="DD01366_.WMF", cAlternateFileName="")) returned 1 [0263.012] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0263.012] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0263.012] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0263.013] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0263.013] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0263.013] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0263.014] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01366_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01366_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0263.014] GetFileType (hFile=0x1e8) returned 0x1 [0263.014] CloseHandle (hObject=0x1e8) returned 1 [0263.015] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0263.015] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01366_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01366_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6e8)) returned 1 [0263.015] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0263.015] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0263.015] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01366_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01366_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6e8)) returned 1 [0263.015] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0263.016] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0263.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0263.016] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="DD01434_.WMF", cAlternateFileName="")) returned 1 [0263.016] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0263.016] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0263.016] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0263.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0263.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0263.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0263.017] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01434_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01434_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0263.017] GetFileType (hFile=0x1e8) returned 0x1 [0263.018] CloseHandle (hObject=0x1e8) returned 1 [0263.018] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0263.018] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01434_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01434_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x384)) returned 1 [0263.018] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0263.018] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0263.018] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01434_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01434_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x384)) returned 1 [0263.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0263.019] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0263.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0263.019] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9dc, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="DD01585_.WMF", cAlternateFileName="")) returned 1 [0263.019] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0263.019] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0263.019] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0263.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0263.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0263.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0263.020] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01585_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01585_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0263.020] GetFileType (hFile=0x1e8) returned 0x1 [0263.021] CloseHandle (hObject=0x1e8) returned 1 [0263.021] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0263.022] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01585_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01585_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9dc)) returned 1 [0263.022] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0263.022] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0263.022] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01585_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01585_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9dc)) returned 1 [0263.022] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0263.023] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0263.023] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0263.023] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x914, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="DD01586_.WMF", cAlternateFileName="")) returned 1 [0263.023] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0263.023] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0263.023] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0263.023] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0263.023] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0263.024] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0263.024] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01586_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01586_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0263.025] GetFileType (hFile=0x1e8) returned 0x1 [0263.025] CloseHandle (hObject=0x1e8) returned 1 [0263.026] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0263.026] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01586_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01586_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x914)) returned 1 [0263.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0263.026] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0263.026] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01586_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01586_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x914)) returned 1 [0263.027] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0263.027] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0263.027] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0263.027] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4a7c, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="DD01628_.WMF", cAlternateFileName="")) returned 1 [0263.027] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0263.027] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0263.027] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0263.027] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0263.027] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0263.028] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0263.029] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01628_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01628_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0263.029] GetFileType (hFile=0x1e8) returned 0x1 [0263.030] CloseHandle (hObject=0x1e8) returned 1 [0263.030] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0263.031] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01628_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01628_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4a7c)) returned 1 [0263.031] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0263.031] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0263.031] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01628_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01628_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4a7c)) returned 1 [0263.031] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0263.031] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0263.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0263.032] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="DD01629_.WMF", cAlternateFileName="")) returned 1 [0263.032] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0263.032] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0263.032] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0263.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0263.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0263.033] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0263.033] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01629_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01629_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0263.034] GetFileType (hFile=0x1e8) returned 0x1 [0263.034] CloseHandle (hObject=0x1e8) returned 1 [0263.035] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0263.035] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01629_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01629_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x244)) returned 1 [0263.035] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0263.035] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0263.035] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01629_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01629_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x244)) returned 1 [0263.036] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0263.036] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0263.036] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0263.036] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x128, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="DD01630_.WMF", cAlternateFileName="")) returned 1 [0263.036] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0263.036] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0263.036] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0263.037] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0263.037] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0263.037] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0263.038] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01630_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01630_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0263.038] GetFileType (hFile=0x1e8) returned 0x1 [0263.038] CloseHandle (hObject=0x1e8) returned 1 [0263.039] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0263.039] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01630_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01630_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x128)) returned 1 [0263.039] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0263.039] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0263.039] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01630_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01630_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x128)) returned 1 [0263.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0263.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0263.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0263.040] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x228, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="DD01631_.WMF", cAlternateFileName="")) returned 1 [0263.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0263.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0263.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0263.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0263.041] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0263.041] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0263.041] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01631_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01631_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0263.042] GetFileType (hFile=0x1e8) returned 0x1 [0263.042] CloseHandle (hObject=0x1e8) returned 1 [0263.043] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0263.043] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01631_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01631_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x228)) returned 1 [0263.363] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0263.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0263.364] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01631_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01631_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x228)) returned 1 [0263.364] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0263.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0263.364] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0263.364] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1034, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="DD01761_.WMF", cAlternateFileName="")) returned 1 [0263.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0263.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0263.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0263.364] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0263.364] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0263.365] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0263.365] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01761_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01761_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0263.365] GetFileType (hFile=0x1c0) returned 0x1 [0263.366] CloseHandle (hObject=0x1c0) returned 1 [0263.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0263.366] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01761_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01761_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1034)) returned 1 [0263.366] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0263.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0263.366] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01761_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01761_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1034)) returned 1 [0263.366] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0263.367] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0263.367] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0263.367] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8fc, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="DD01772_.WMF", cAlternateFileName="")) returned 1 [0263.367] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0263.367] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0263.367] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0263.367] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0263.367] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0263.367] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0263.368] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01772_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01772_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0263.368] GetFileType (hFile=0x1c0) returned 0x1 [0263.368] CloseHandle (hObject=0x1c0) returned 1 [0263.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0263.369] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01772_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01772_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8fc)) returned 1 [0263.369] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0263.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0263.369] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01772_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01772_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8fc)) returned 1 [0263.369] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0263.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0263.369] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0263.370] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcb4, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="DD01793_.WMF", cAlternateFileName="")) returned 1 [0263.370] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0263.370] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0263.370] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0263.370] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0263.370] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0263.370] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0263.370] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01793_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01793_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0263.371] GetFileType (hFile=0x1c0) returned 0x1 [0263.371] CloseHandle (hObject=0x1c0) returned 1 [0263.371] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0263.372] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01793_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01793_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcb4)) returned 1 [0263.372] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0263.372] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0263.372] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01793_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01793_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcb4)) returned 1 [0263.372] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0263.372] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0263.372] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0263.372] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1815, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="EAST_01.MID", cAlternateFileName="")) returned 1 [0263.372] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0263.372] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0263.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0263.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0263.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0263.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0263.373] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EAST_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\east_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0263.374] GetFileType (hFile=0x1c0) returned 0x1 [0263.374] CloseHandle (hObject=0x1c0) returned 1 [0263.374] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0263.374] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EAST_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\east_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1815)) returned 1 [0263.375] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0263.375] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0263.375] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EAST_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\east_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1815)) returned 1 [0263.375] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0263.375] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0263.375] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0263.375] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x566, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="ED00010_.WMF", cAlternateFileName="")) returned 1 [0263.375] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0263.375] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0263.375] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0263.375] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0263.376] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0263.376] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0263.376] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00010_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00010_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0263.376] GetFileType (hFile=0x1c0) returned 0x1 [0263.377] CloseHandle (hObject=0x1c0) returned 1 [0263.377] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0263.377] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00010_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00010_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x566)) returned 1 [0263.377] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0263.377] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0263.377] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00010_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00010_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x566)) returned 1 [0263.378] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0263.378] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0263.378] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0263.378] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32f2, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="ED00019_.WMF", cAlternateFileName="")) returned 1 [0263.378] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0263.378] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0263.378] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0263.378] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0263.378] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0263.378] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0263.379] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00019_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00019_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0263.380] GetFileType (hFile=0x1c0) returned 0x1 [0263.380] CloseHandle (hObject=0x1c0) returned 1 [0263.380] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0263.380] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00019_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00019_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32f2)) returned 1 [0263.381] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0263.381] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0263.381] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00019_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00019_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32f2)) returned 1 [0263.381] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0263.381] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0263.381] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0263.381] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa8c, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="ED00172_.WMF", cAlternateFileName="")) returned 1 [0263.381] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0263.381] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0263.382] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0263.382] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0263.382] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0263.382] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0263.382] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00172_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0263.383] GetFileType (hFile=0x1c0) returned 0x1 [0263.383] CloseHandle (hObject=0x1c0) returned 1 [0263.384] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0263.384] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00172_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa8c)) returned 1 [0263.384] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0263.384] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0263.384] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00172_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa8c)) returned 1 [0263.384] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0263.385] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0263.385] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0263.385] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b2e, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="ED00184_.WMF", cAlternateFileName="")) returned 1 [0263.385] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0263.385] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0263.385] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0263.385] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0263.386] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0263.386] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0263.387] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00184_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0263.387] GetFileType (hFile=0x1c0) returned 0x1 [0263.388] CloseHandle (hObject=0x1c0) returned 1 [0263.388] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0263.389] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00184_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b2e)) returned 1 [0263.389] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0263.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0263.389] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00184_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b2e)) returned 1 [0263.389] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0263.390] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0263.390] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0263.390] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3670, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="EN00006_.WMF", cAlternateFileName="")) returned 1 [0263.390] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0263.390] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0263.390] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0263.390] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0263.391] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0263.391] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0263.392] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00006_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00006_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0263.392] GetFileType (hFile=0x1c0) returned 0x1 [0263.393] CloseHandle (hObject=0x1c0) returned 1 [0263.393] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0263.393] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00006_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00006_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3670)) returned 1 [0263.394] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0263.394] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0263.394] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00006_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00006_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3670)) returned 1 [0263.394] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0263.598] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0263.598] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0263.598] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b1a, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="EN00202_.WMF", cAlternateFileName="")) returned 1 [0263.598] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0263.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0263.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0263.599] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0263.599] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0263.599] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0263.600] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00202_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00202_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0263.600] GetFileType (hFile=0x1ac) returned 0x1 [0263.601] CloseHandle (hObject=0x1ac) returned 1 [0263.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0263.602] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00202_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00202_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b1a)) returned 1 [0263.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0263.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0263.603] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00202_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00202_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b1a)) returned 1 [0263.603] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0263.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0263.603] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0263.603] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3044, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="EN00222_.WMF", cAlternateFileName="")) returned 1 [0263.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0263.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0263.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0263.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0263.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0263.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0263.605] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00222_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00222_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0263.605] GetFileType (hFile=0x1ac) returned 0x1 [0263.606] CloseHandle (hObject=0x1ac) returned 1 [0263.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0263.607] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00222_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00222_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3044)) returned 1 [0263.607] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0263.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0263.607] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00222_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00222_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3044)) returned 1 [0263.607] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0263.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0263.608] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0263.608] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a7c, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="EN00242_.WMF", cAlternateFileName="")) returned 1 [0263.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0263.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0263.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0263.608] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0263.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0263.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0263.610] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00242_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00242_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0263.610] GetFileType (hFile=0x1ac) returned 0x1 [0263.611] CloseHandle (hObject=0x1ac) returned 1 [0263.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0263.611] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00242_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00242_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a7c)) returned 1 [0263.612] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0263.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0263.612] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00242_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00242_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a7c)) returned 1 [0263.612] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0263.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0263.612] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0263.613] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8e8, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="EN00319_.WMF", cAlternateFileName="")) returned 1 [0263.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0263.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0263.614] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0263.614] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0263.614] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0263.614] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0263.615] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00319_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00319_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0263.615] GetFileType (hFile=0x1ac) returned 0x1 [0263.616] CloseHandle (hObject=0x1ac) returned 1 [0263.616] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0263.617] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00319_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00319_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8e8)) returned 1 [0263.617] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0263.617] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0263.617] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00319_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00319_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8e8)) returned 1 [0263.617] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0263.617] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0263.618] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0263.618] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="EN00320_.WMF", cAlternateFileName="")) returned 1 [0263.618] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0263.618] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0263.618] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0263.618] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0263.619] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0263.619] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0263.619] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00320_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00320_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0263.620] GetFileType (hFile=0x1ac) returned 0x1 [0263.620] CloseHandle (hObject=0x1ac) returned 1 [0263.621] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0263.621] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00320_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00320_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e0)) returned 1 [0263.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0263.621] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0263.621] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00320_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00320_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e0)) returned 1 [0263.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0263.622] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0263.622] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0263.622] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x439c, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="EN00397_.WMF", cAlternateFileName="")) returned 1 [0263.622] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0263.622] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0263.622] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0263.622] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0263.622] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0263.622] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0263.623] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00397_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00397_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0263.624] GetFileType (hFile=0x1ac) returned 0x1 [0263.624] CloseHandle (hObject=0x1ac) returned 1 [0263.625] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0263.625] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00397_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00397_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x439c)) returned 1 [0263.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0263.625] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0263.625] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00397_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00397_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x439c)) returned 1 [0263.626] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0263.626] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0263.626] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0263.626] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f08, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="EN00902_.WMF", cAlternateFileName="")) returned 1 [0263.626] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0263.626] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0263.626] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0263.627] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0263.627] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0263.627] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0263.628] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00902_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00902_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0263.628] GetFileType (hFile=0x1ac) returned 0x1 [0263.629] CloseHandle (hObject=0x1ac) returned 1 [0263.630] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0263.630] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00902_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00902_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f08)) returned 1 [0263.630] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0263.630] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0263.630] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00902_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00902_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f08)) returned 1 [0263.630] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0263.631] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0263.631] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0263.631] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2942, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="EXPLR_01.MID", cAlternateFileName="")) returned 1 [0263.631] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0263.631] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0263.631] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0263.631] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0263.631] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0263.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0263.632] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EXPLR_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\explr_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0263.632] GetFileType (hFile=0x1ac) returned 0x1 [0263.633] CloseHandle (hObject=0x1ac) returned 1 [0263.633] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0263.634] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EXPLR_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\explr_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2942)) returned 1 [0263.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0263.634] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0263.634] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EXPLR_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\explr_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2942)) returned 1 [0263.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0263.634] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0263.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0263.634] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12ee, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="FALL_01.MID", cAlternateFileName="")) returned 1 [0263.635] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0263.635] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0263.635] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0263.635] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0263.635] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0263.635] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0263.636] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FALL_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fall_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0263.636] GetFileType (hFile=0x1ac) returned 0x1 [0263.637] CloseHandle (hObject=0x1ac) returned 1 [0263.637] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0263.637] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FALL_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fall_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12ee)) returned 1 [0263.638] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0263.638] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0263.638] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FALL_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fall_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12ee)) returned 1 [0263.638] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0263.638] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0263.638] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0263.638] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45ba, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="FD00074_.WMF", cAlternateFileName="")) returned 1 [0263.638] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0263.639] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0263.639] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0263.639] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0263.639] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0263.639] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0263.640] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00074_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00074_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0263.640] GetFileType (hFile=0x1ac) returned 0x1 [0263.640] CloseHandle (hObject=0x1ac) returned 1 [0263.641] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0263.641] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00074_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00074_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45ba)) returned 1 [0263.641] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0263.641] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0263.641] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00074_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00074_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45ba)) returned 1 [0263.642] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0263.642] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0263.642] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0263.642] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2eda, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="FD00076_.WMF", cAlternateFileName="")) returned 1 [0263.642] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0263.642] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0263.642] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0263.642] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0263.643] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0263.643] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0263.644] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00076_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00076_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0263.926] GetFileType (hFile=0x198) returned 0x1 [0263.927] CloseHandle (hObject=0x198) returned 1 [0263.927] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0263.928] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00076_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00076_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2eda)) returned 1 [0263.928] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0263.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0263.928] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00076_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00076_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2eda)) returned 1 [0263.928] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0263.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0263.928] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0263.929] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7620, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="FD00077_.WMF", cAlternateFileName="")) returned 1 [0263.929] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0263.929] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0263.929] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0263.929] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0263.929] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0263.929] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0263.930] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00077_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00077_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0263.930] GetFileType (hFile=0x198) returned 0x1 [0263.931] CloseHandle (hObject=0x198) returned 1 [0263.931] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0263.932] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00077_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00077_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7620)) returned 1 [0263.932] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0263.932] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0263.932] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00077_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00077_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7620)) returned 1 [0263.932] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0263.932] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0263.932] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0263.933] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x721c, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="FD00086_.WMF", cAlternateFileName="")) returned 1 [0263.933] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0263.933] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0263.933] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0263.933] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0263.933] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0263.933] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0263.934] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00086_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00086_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0263.934] GetFileType (hFile=0x198) returned 0x1 [0263.935] CloseHandle (hObject=0x198) returned 1 [0263.935] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0263.936] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00086_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00086_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x721c)) returned 1 [0263.936] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0263.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0263.936] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00086_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00086_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x721c)) returned 1 [0263.936] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0263.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0263.936] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0263.937] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3772, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="FD00090_.WMF", cAlternateFileName="")) returned 1 [0263.937] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0263.937] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0263.937] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0263.937] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0263.937] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0263.937] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0263.938] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00090_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00090_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0263.938] GetFileType (hFile=0x198) returned 0x1 [0263.939] CloseHandle (hObject=0x198) returned 1 [0263.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0263.940] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00090_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00090_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3772)) returned 1 [0263.940] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0263.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0263.940] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00090_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00090_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3772)) returned 1 [0263.940] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0263.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0263.940] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0263.941] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc55757, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc55757, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x920e, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="FD00096_.WMF", cAlternateFileName="")) returned 1 [0263.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0263.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0263.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0263.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0263.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0263.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0263.943] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00096_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00096_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0263.943] GetFileType (hFile=0x198) returned 0x1 [0263.944] CloseHandle (hObject=0x198) returned 1 [0263.944] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0263.944] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00096_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00096_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc55757, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc55757, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x920e)) returned 1 [0263.945] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0263.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0263.945] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00096_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00096_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc55757, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc55757, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x920e)) returned 1 [0263.945] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0263.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0263.945] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0263.945] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc55757, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc55757, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3df0, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="FD00296_.WMF", cAlternateFileName="")) returned 1 [0263.946] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0263.946] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0263.946] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0263.946] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0263.946] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0263.946] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0263.947] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00296_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00296_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0263.948] GetFileType (hFile=0x198) returned 0x1 [0263.948] CloseHandle (hObject=0x198) returned 1 [0263.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0263.949] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00296_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00296_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc55757, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc55757, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3df0)) returned 1 [0263.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0263.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0263.949] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00296_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00296_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc55757, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc55757, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3df0)) returned 1 [0263.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0263.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0263.950] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0263.950] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc7b993, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4712, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="FD00297_.WMF", cAlternateFileName="")) returned 1 [0263.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0263.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0263.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0263.950] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0263.950] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0263.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0263.951] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00297_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00297_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0263.951] GetFileType (hFile=0x198) returned 0x1 [0263.952] CloseHandle (hObject=0x198) returned 1 [0263.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0263.953] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00297_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00297_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc7b993, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4712)) returned 1 [0263.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0263.953] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0263.953] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00297_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00297_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc7b993, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4712)) returned 1 [0263.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0263.953] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0263.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0263.953] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb6de, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="FD00306_.WMF", cAlternateFileName="")) returned 1 [0263.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0263.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0263.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0263.954] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0263.954] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0263.954] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0263.955] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00306_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00306_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0263.955] GetFileType (hFile=0x198) returned 0x1 [0263.956] CloseHandle (hObject=0x198) returned 1 [0263.956] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0263.957] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00306_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00306_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb6de)) returned 1 [0263.957] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0263.957] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0263.958] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00306_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00306_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb6de)) returned 1 [0263.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0263.958] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0263.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0263.958] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc55757, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17b4, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="FD00336_.WMF", cAlternateFileName="")) returned 1 [0263.958] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0263.959] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0263.959] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0263.959] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0263.959] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0263.959] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0263.960] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00336_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00336_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0263.960] GetFileType (hFile=0x198) returned 0x1 [0263.961] CloseHandle (hObject=0x198) returned 1 [0263.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0263.962] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00336_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00336_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc55757, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17b4)) returned 1 [0263.962] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0263.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0263.962] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00336_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00336_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc55757, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17b4)) returned 1 [0263.963] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0263.963] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0263.963] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0263.963] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfea, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="FD00361_.WMF", cAlternateFileName="")) returned 1 [0263.963] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0263.963] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0263.964] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0263.964] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0263.964] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0263.964] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0263.965] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00361_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00361_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0263.965] GetFileType (hFile=0x198) returned 0x1 [0263.966] CloseHandle (hObject=0x198) returned 1 [0263.966] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0263.967] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00361_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00361_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfea)) returned 1 [0263.967] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0263.967] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0263.967] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00361_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00361_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfea)) returned 1 [0263.967] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0263.967] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0263.967] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0263.968] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc55757, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2168, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="FD00369_.WMF", cAlternateFileName="")) returned 1 [0263.968] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0263.968] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0263.968] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0263.968] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0263.968] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0263.968] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0263.969] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00369_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00369_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0263.969] GetFileType (hFile=0x198) returned 0x1 [0263.970] CloseHandle (hObject=0x198) returned 1 [0263.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0263.970] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00369_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00369_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc55757, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2168)) returned 1 [0263.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0263.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0263.971] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00369_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00369_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc55757, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2168)) returned 1 [0263.971] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0263.971] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0263.971] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0263.971] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20e8, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="FD00382_.WMF", cAlternateFileName="")) returned 1 [0263.971] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0263.971] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0263.971] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0263.971] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0263.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0263.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0264.300] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00382_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00382_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0264.347] GetFileType (hFile=0x174) returned 0x1 [0264.348] CloseHandle (hObject=0x174) returned 1 [0264.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0264.349] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00382_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00382_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20e8)) returned 1 [0264.350] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0264.350] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0264.350] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00382_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00382_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20e8)) returned 1 [0264.396] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0264.396] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0264.396] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0264.396] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a40, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="FD00397_.WMF", cAlternateFileName="")) returned 1 [0264.396] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0264.396] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0264.397] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0264.397] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0264.397] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0264.397] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0264.398] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00397_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00397_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0264.398] GetFileType (hFile=0x174) returned 0x1 [0264.399] CloseHandle (hObject=0x174) returned 1 [0264.399] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0264.399] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00397_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00397_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a40)) returned 1 [0264.399] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0264.400] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0264.400] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00397_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00397_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a40)) returned 1 [0264.400] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0264.400] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0264.400] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0264.400] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ec6, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="FD00403_.WMF", cAlternateFileName="")) returned 1 [0264.400] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0264.400] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0264.401] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0264.401] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0264.401] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0264.401] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0264.402] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00403_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00403_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0264.402] GetFileType (hFile=0x174) returned 0x1 [0264.403] CloseHandle (hObject=0x174) returned 1 [0264.403] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0264.403] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00403_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00403_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ec6)) returned 1 [0264.404] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0264.404] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0264.404] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00403_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00403_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ec6)) returned 1 [0264.404] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0264.404] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0264.404] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0264.404] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2afa, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="FD00414_.WMF", cAlternateFileName="")) returned 1 [0264.405] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0264.405] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0264.405] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0264.405] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0264.405] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0264.405] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0264.406] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00414_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00414_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0264.406] GetFileType (hFile=0x174) returned 0x1 [0264.407] CloseHandle (hObject=0x174) returned 1 [0264.407] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0264.407] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00414_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00414_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2afa)) returned 1 [0264.407] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0264.408] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0264.408] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00414_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00414_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2afa)) returned 1 [0264.408] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0264.408] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0264.408] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0264.408] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x400c, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="FD00419_.WMF", cAlternateFileName="")) returned 1 [0264.408] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0264.408] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0264.408] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0264.409] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0264.409] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0264.409] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0264.410] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00419_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00419_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0264.411] GetFileType (hFile=0x174) returned 0x1 [0264.411] CloseHandle (hObject=0x174) returned 1 [0264.412] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0264.412] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00419_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00419_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x400c)) returned 1 [0264.412] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0264.412] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0264.412] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00419_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00419_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x400c)) returned 1 [0264.412] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0264.412] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0264.413] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0264.413] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12bc, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="FD00428_.WMF", cAlternateFileName="")) returned 1 [0264.413] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0264.413] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0264.413] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0264.413] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0264.413] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0264.413] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0264.414] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00428_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00428_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0264.414] GetFileType (hFile=0x174) returned 0x1 [0264.415] CloseHandle (hObject=0x174) returned 1 [0264.415] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0264.416] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00428_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00428_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12bc)) returned 1 [0264.416] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0264.416] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0264.416] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00428_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00428_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12bc)) returned 1 [0264.416] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0264.416] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0264.416] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0264.416] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x83c, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="FD00435_.WMF", cAlternateFileName="")) returned 1 [0264.416] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0264.416] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0264.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0264.417] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0264.417] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0264.417] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0264.418] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00435_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00435_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0264.418] GetFileType (hFile=0x174) returned 0x1 [0264.419] CloseHandle (hObject=0x174) returned 1 [0264.419] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0264.419] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00435_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00435_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x83c)) returned 1 [0264.419] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0264.419] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0264.420] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00435_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00435_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x83c)) returned 1 [0264.420] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0264.420] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0264.420] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0264.420] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13ea, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="FD00438_.WMF", cAlternateFileName="")) returned 1 [0264.420] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0264.420] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0264.420] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0264.421] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0264.421] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0264.421] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0264.421] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00438_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00438_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0264.422] GetFileType (hFile=0x174) returned 0x1 [0264.422] CloseHandle (hObject=0x174) returned 1 [0264.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0264.423] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00438_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00438_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13ea)) returned 1 [0264.423] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0264.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0264.423] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00438_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00438_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13ea)) returned 1 [0264.423] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0264.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0264.424] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0264.424] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x22de, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="FD00455_.WMF", cAlternateFileName="")) returned 1 [0264.424] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0264.424] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0264.424] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0264.424] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0264.424] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0264.424] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0264.425] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00455_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00455_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0264.426] GetFileType (hFile=0x174) returned 0x1 [0264.427] CloseHandle (hObject=0x174) returned 1 [0264.427] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0264.427] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00455_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00455_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x22de)) returned 1 [0264.427] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0264.428] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0264.428] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00455_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00455_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x22de)) returned 1 [0264.428] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0264.428] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0264.428] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0264.428] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43fe, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="FD00459_.WMF", cAlternateFileName="")) returned 1 [0264.428] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0264.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0264.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0264.429] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0264.429] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0264.429] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0264.430] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00459_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00459_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0264.430] GetFileType (hFile=0x174) returned 0x1 [0264.431] CloseHandle (hObject=0x174) returned 1 [0264.431] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0264.431] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00459_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00459_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43fe)) returned 1 [0264.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0264.432] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0264.432] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00459_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00459_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43fe)) returned 1 [0264.432] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0264.432] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0264.432] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0264.432] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5c0, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="FD00543_.WMF", cAlternateFileName="")) returned 1 [0264.432] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0264.433] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0264.433] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0264.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0264.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0264.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0264.434] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00543_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00543_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0264.434] GetFileType (hFile=0x174) returned 0x1 [0264.435] CloseHandle (hObject=0x174) returned 1 [0264.435] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0264.435] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00543_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00543_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5c0)) returned 1 [0264.435] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0264.436] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0264.436] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00543_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00543_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5c0)) returned 1 [0264.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0264.436] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0264.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0264.436] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x148c, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="FD00544_.WMF", cAlternateFileName="")) returned 1 [0264.436] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0264.436] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0264.437] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0264.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0264.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0264.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0264.438] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00544_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00544_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0264.438] GetFileType (hFile=0x174) returned 0x1 [0264.438] CloseHandle (hObject=0x174) returned 1 [0264.439] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0264.439] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00544_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00544_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x148c)) returned 1 [0264.439] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0264.439] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0264.439] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00544_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00544_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x148c)) returned 1 [0264.440] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0264.440] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0264.440] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0264.440] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x380, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="FD00564_.WMF", cAlternateFileName="")) returned 1 [0264.440] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0264.440] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0264.440] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0264.440] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0264.440] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0264.441] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0264.661] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00564_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00564_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0264.662] GetFileType (hFile=0x174) returned 0x1 [0264.662] CloseHandle (hObject=0x174) returned 1 [0264.663] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0264.663] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00564_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00564_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x380)) returned 1 [0264.663] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0264.663] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0264.663] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00564_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00564_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x380)) returned 1 [0264.663] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0264.664] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0264.664] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0264.664] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2f0, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="FD00586_.WMF", cAlternateFileName="")) returned 1 [0264.664] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0264.664] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0264.664] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0264.664] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0264.664] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0264.664] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0264.961] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00586_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00586_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0264.961] GetFileType (hFile=0x1ac) returned 0x1 [0264.962] CloseHandle (hObject=0x1ac) returned 1 [0264.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0264.962] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00586_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00586_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2f0)) returned 1 [0264.962] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0264.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0264.963] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00586_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00586_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2f0)) returned 1 [0264.963] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0264.963] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0264.963] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0264.963] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b90, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="FD00775_.WMF", cAlternateFileName="")) returned 1 [0264.963] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0264.963] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0264.964] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0264.964] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0264.964] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0264.964] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0264.965] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00775_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00775_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0264.965] GetFileType (hFile=0x1ac) returned 0x1 [0264.965] CloseHandle (hObject=0x1ac) returned 1 [0264.966] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0264.966] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00775_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00775_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b90)) returned 1 [0264.966] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0264.966] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0264.966] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00775_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00775_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b90)) returned 1 [0264.966] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0264.966] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0264.966] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0264.966] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2332, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="FD00779_.WMF", cAlternateFileName="")) returned 1 [0264.967] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0264.967] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0264.967] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0264.967] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0264.967] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0264.967] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0264.968] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00779_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00779_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0264.968] GetFileType (hFile=0x1ac) returned 0x1 [0264.968] CloseHandle (hObject=0x1ac) returned 1 [0264.968] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0264.968] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00779_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00779_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2332)) returned 1 [0264.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0264.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0264.969] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00779_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00779_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2332)) returned 1 [0264.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0264.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0264.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0264.969] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3690, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="FD00799_.WMF", cAlternateFileName="")) returned 1 [0264.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0264.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0264.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0264.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0264.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0264.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0264.970] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00799_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00799_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0264.970] GetFileType (hFile=0x1ac) returned 0x1 [0264.971] CloseHandle (hObject=0x1ac) returned 1 [0264.971] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0264.971] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00799_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00799_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3690)) returned 1 [0264.971] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0264.972] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0264.972] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00799_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00799_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3690)) returned 1 [0264.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0264.972] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0264.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0264.972] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa6d0, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="FD00814_.WMF", cAlternateFileName="")) returned 1 [0264.972] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0264.972] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0264.972] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0264.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0264.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0264.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0264.973] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00814_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00814_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0264.973] GetFileType (hFile=0x1ac) returned 0x1 [0264.974] CloseHandle (hObject=0x1ac) returned 1 [0264.974] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0264.974] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00814_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00814_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa6d0)) returned 1 [0264.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0264.975] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0264.976] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00814_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00814_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa6d0)) returned 1 [0264.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0264.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0264.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0264.976] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b3c, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="FD00965_.WMF", cAlternateFileName="")) returned 1 [0264.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0264.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0264.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0264.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0264.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0264.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0264.977] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00965_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00965_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0264.977] GetFileType (hFile=0x1ac) returned 0x1 [0264.977] CloseHandle (hObject=0x1ac) returned 1 [0264.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0264.978] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00965_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00965_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b3c)) returned 1 [0264.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0264.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0264.978] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00965_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00965_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b3c)) returned 1 [0264.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0264.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0264.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0264.978] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x121a, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="FD01074_.WMF", cAlternateFileName="")) returned 1 [0264.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0264.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0264.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0264.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0264.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0264.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0264.979] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01074_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01074_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0264.979] GetFileType (hFile=0x1ac) returned 0x1 [0264.980] CloseHandle (hObject=0x1ac) returned 1 [0264.980] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0264.980] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01074_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01074_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x121a)) returned 1 [0264.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0264.980] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0264.980] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01074_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01074_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x121a)) returned 1 [0264.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0264.980] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0264.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0264.981] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x96c, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="FD01084_.WMF", cAlternateFileName="")) returned 1 [0264.981] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0264.981] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0264.981] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0264.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0264.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0264.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0264.982] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01084_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01084_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0264.982] GetFileType (hFile=0x1ac) returned 0x1 [0264.982] CloseHandle (hObject=0x1ac) returned 1 [0264.982] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0264.982] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01084_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01084_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x96c)) returned 1 [0264.982] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0264.982] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0264.983] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01084_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01084_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x96c)) returned 1 [0264.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0264.983] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0264.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0264.983] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1378, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="FD01176_.WMF", cAlternateFileName="")) returned 1 [0264.983] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0264.983] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0264.983] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0264.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0264.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0264.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0264.983] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01176_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01176_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0264.984] GetFileType (hFile=0x1ac) returned 0x1 [0264.984] CloseHandle (hObject=0x1ac) returned 1 [0264.984] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0264.984] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01176_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01176_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1378)) returned 1 [0264.984] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0264.984] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0264.984] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01176_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01176_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1378)) returned 1 [0264.984] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0264.984] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0264.984] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0264.984] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf7c, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="FD01191_.WMF", cAlternateFileName="")) returned 1 [0264.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0264.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0264.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0264.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0264.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0264.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0264.985] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01191_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01191_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0264.985] GetFileType (hFile=0x1ac) returned 0x1 [0264.985] CloseHandle (hObject=0x1ac) returned 1 [0264.986] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0264.986] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01191_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01191_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf7c)) returned 1 [0264.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0264.986] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0264.986] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01191_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01191_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf7c)) returned 1 [0264.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0264.986] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0264.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0264.986] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf2a4e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x488, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="FD01193_.WMF", cAlternateFileName="")) returned 1 [0264.986] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0264.986] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0264.986] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0264.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0264.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0264.987] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0264.987] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01193_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01193_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0264.987] GetFileType (hFile=0x1ac) returned 0x1 [0264.987] CloseHandle (hObject=0x1ac) returned 1 [0264.988] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0264.988] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01193_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01193_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf2a4e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x488)) returned 1 [0264.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0264.988] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0264.988] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01193_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01193_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf2a4e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x488)) returned 1 [0264.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0264.988] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0264.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0264.988] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf2a4e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x91c, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="FD01196_.WMF", cAlternateFileName="")) returned 1 [0264.988] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0264.989] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0264.989] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0264.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0264.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0264.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0264.989] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01196_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01196_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0264.989] GetFileType (hFile=0x1ac) returned 0x1 [0264.990] CloseHandle (hObject=0x1ac) returned 1 [0264.990] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0264.990] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01196_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01196_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf2a4e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x91c)) returned 1 [0264.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0264.990] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0264.990] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01196_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01196_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf2a4e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x91c)) returned 1 [0264.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0264.990] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0264.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0264.991] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x284c, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="FD01548_.WMF", cAlternateFileName="")) returned 1 [0264.991] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0264.991] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0264.991] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0264.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0264.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0264.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0264.992] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01548_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01548_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0264.992] GetFileType (hFile=0x1ac) returned 0x1 [0264.992] CloseHandle (hObject=0x1ac) returned 1 [0264.992] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0264.992] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01548_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01548_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x284c)) returned 1 [0264.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0264.992] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0264.992] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01548_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01548_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x284c)) returned 1 [0264.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0264.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0264.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0264.993] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf2a4e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x76ce, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="FD01657_.WMF", cAlternateFileName="")) returned 1 [0264.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0264.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0264.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0264.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0264.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0264.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0264.993] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01657_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01657_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0264.994] GetFileType (hFile=0x1ac) returned 0x1 [0264.994] CloseHandle (hObject=0x1ac) returned 1 [0264.994] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0264.994] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01657_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01657_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf2a4e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x76ce)) returned 1 [0264.994] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0264.994] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0264.995] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01657_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01657_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf2a4e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x76ce)) returned 1 [0264.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0264.995] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0264.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0264.995] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4604, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="FD01658_.WMF", cAlternateFileName="")) returned 1 [0264.995] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0264.995] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0264.995] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0264.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0264.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0264.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0264.996] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01658_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01658_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0264.996] GetFileType (hFile=0x1ac) returned 0x1 [0264.996] CloseHandle (hObject=0x1ac) returned 1 [0264.996] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0264.996] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01658_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01658_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4604)) returned 1 [0264.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0264.997] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0264.997] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01658_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01658_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4604)) returned 1 [0264.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0264.997] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0264.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0264.997] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x79cc, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="FD01659_.WMF", cAlternateFileName="")) returned 1 [0264.997] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0264.997] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0264.997] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0264.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0264.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0264.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0264.998] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01659_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01659_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0264.998] GetFileType (hFile=0x1ac) returned 0x1 [0264.998] CloseHandle (hObject=0x1ac) returned 1 [0264.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0264.999] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01659_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01659_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x79cc)) returned 1 [0264.999] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0264.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0264.999] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01659_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01659_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x79cc)) returned 1 [0264.999] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0264.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0264.999] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0264.999] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x329e, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="FD01660_.WMF", cAlternateFileName="")) returned 1 [0264.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0265.000] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0265.000] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0265.000] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0265.000] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0265.000] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0265.000] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01660_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01660_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0265.001] GetFileType (hFile=0x1ac) returned 0x1 [0265.001] CloseHandle (hObject=0x1ac) returned 1 [0265.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0265.001] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01660_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01660_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x329e)) returned 1 [0265.002] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0265.002] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0265.002] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01660_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01660_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x329e)) returned 1 [0265.002] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0265.002] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0265.002] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0265.002] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9b8, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="FD02068_.WMF", cAlternateFileName="")) returned 1 [0265.002] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0265.002] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0265.002] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0265.002] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0265.003] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0265.003] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0265.003] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02068_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02068_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0265.459] GetFileType (hFile=0x1ac) returned 0x1 [0265.460] CloseHandle (hObject=0x1ac) returned 1 [0265.460] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0265.460] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02068_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02068_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9b8)) returned 1 [0265.461] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0265.461] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0265.461] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02068_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02068_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9b8)) returned 1 [0265.461] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0265.461] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0265.461] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0265.461] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x88c, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="FD02071_.WMF", cAlternateFileName="")) returned 1 [0265.461] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0265.461] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0265.461] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0265.461] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0265.462] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0265.462] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0265.462] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02071_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02071_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0265.462] GetFileType (hFile=0x1ac) returned 0x1 [0265.463] CloseHandle (hObject=0x1ac) returned 1 [0265.463] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0265.463] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02071_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02071_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x88c)) returned 1 [0265.463] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0265.463] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0265.463] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02071_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02071_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x88c)) returned 1 [0265.464] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0265.464] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0265.464] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0265.464] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x112c, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="FD02075_.WMF", cAlternateFileName="")) returned 1 [0265.464] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0265.464] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0265.464] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0265.464] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0265.464] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0265.464] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0265.465] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02075_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02075_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0265.465] GetFileType (hFile=0x1ac) returned 0x1 [0265.465] CloseHandle (hObject=0x1ac) returned 1 [0265.466] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0265.466] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02075_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02075_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x112c)) returned 1 [0265.466] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0265.466] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0265.466] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02075_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02075_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x112c)) returned 1 [0265.466] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0265.466] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0265.467] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0265.467] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe70, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="FD02088_.WMF", cAlternateFileName="")) returned 1 [0265.467] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0265.467] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0265.467] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0265.467] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0265.467] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0265.467] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0265.468] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02088_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02088_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0265.468] GetFileType (hFile=0x1ac) returned 0x1 [0265.468] CloseHandle (hObject=0x1ac) returned 1 [0265.469] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0265.469] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02088_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02088_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe70)) returned 1 [0265.469] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0265.469] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0265.469] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02088_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02088_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe70)) returned 1 [0265.469] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0265.469] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0265.469] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0265.469] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x61c, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="FD02097_.WMF", cAlternateFileName="")) returned 1 [0265.470] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0265.470] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0265.470] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0265.470] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0265.470] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0265.470] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0265.471] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02097_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02097_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0265.471] GetFileType (hFile=0x1ac) returned 0x1 [0265.471] CloseHandle (hObject=0x1ac) returned 1 [0265.471] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0265.472] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02097_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02097_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x61c)) returned 1 [0265.472] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0265.472] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0265.472] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02097_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02097_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x61c)) returned 1 [0265.472] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0265.472] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0265.473] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0265.473] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1234, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="FD02115_.WMF", cAlternateFileName="")) returned 1 [0265.474] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0265.474] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0265.474] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0265.474] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0265.474] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0265.474] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0265.475] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02115_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02115_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0265.475] GetFileType (hFile=0x1ac) returned 0x1 [0265.475] CloseHandle (hObject=0x1ac) returned 1 [0265.476] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0265.476] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02115_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02115_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1234)) returned 1 [0265.476] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0265.476] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0265.476] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02115_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02115_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1234)) returned 1 [0265.476] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0265.476] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0265.477] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0265.477] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf94, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="FD02116_.WMF", cAlternateFileName="")) returned 1 [0265.477] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0265.477] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0265.477] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0265.477] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0265.477] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0265.477] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0265.478] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02116_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02116_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0265.478] GetFileType (hFile=0x1ac) returned 0x1 [0265.479] CloseHandle (hObject=0x1ac) returned 1 [0265.479] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0265.479] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02116_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02116_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf94)) returned 1 [0265.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0265.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0265.480] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02116_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02116_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf94)) returned 1 [0265.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0265.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0265.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0265.480] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa4c, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="FD02141_.WMF", cAlternateFileName="")) returned 1 [0265.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0265.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0265.481] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0265.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0265.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0265.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0265.481] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02141_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02141_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0265.482] GetFileType (hFile=0x1ac) returned 0x1 [0265.482] CloseHandle (hObject=0x1ac) returned 1 [0265.483] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0265.483] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02141_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02141_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa4c)) returned 1 [0265.483] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0265.483] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0265.483] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02141_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02141_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa4c)) returned 1 [0265.483] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0265.483] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0265.483] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0265.484] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf2a4e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1510, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="FD02153_.WMF", cAlternateFileName="")) returned 1 [0265.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0265.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0265.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0265.484] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0265.484] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0265.484] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0265.485] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02153_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02153_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0265.485] GetFileType (hFile=0x1ac) returned 0x1 [0265.485] CloseHandle (hObject=0x1ac) returned 1 [0265.486] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0265.486] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02153_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02153_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf2a4e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1510)) returned 1 [0265.486] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0265.486] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0265.486] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02153_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02153_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf2a4e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1510)) returned 1 [0265.487] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0265.487] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0265.487] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0265.487] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x670, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="FD02158_.WMF", cAlternateFileName="")) returned 1 [0265.487] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0265.487] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0265.487] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0265.487] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0265.487] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0265.487] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0265.489] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02158_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02158_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0265.489] GetFileType (hFile=0x1ac) returned 0x1 [0265.489] CloseHandle (hObject=0x1ac) returned 1 [0265.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0265.490] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02158_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02158_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x670)) returned 1 [0265.490] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0265.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0265.490] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02158_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02158_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x670)) returned 1 [0265.490] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0265.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0265.490] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0265.491] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc38, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="FD02161_.WMF", cAlternateFileName="")) returned 1 [0265.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0265.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0265.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0265.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0265.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0265.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0265.492] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02161_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02161_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0265.492] GetFileType (hFile=0x1ac) returned 0x1 [0265.493] CloseHandle (hObject=0x1ac) returned 1 [0265.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0265.493] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02161_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02161_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc38)) returned 1 [0265.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0265.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0265.493] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02161_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02161_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc38)) returned 1 [0265.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0265.494] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0265.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0265.494] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32b5, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="FINCL_01.MID", cAlternateFileName="")) returned 1 [0265.494] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0265.494] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0265.494] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0265.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0265.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0265.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0265.496] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fincl_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0265.496] GetFileType (hFile=0x1ac) returned 0x1 [0265.496] CloseHandle (hObject=0x1ac) returned 1 [0265.497] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0265.497] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fincl_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32b5)) returned 1 [0265.497] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0265.497] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0265.497] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fincl_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32b5)) returned 1 [0265.498] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0265.498] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0265.498] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0265.498] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf2a4e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2466, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="FINCL_02.MID", cAlternateFileName="")) returned 1 [0265.498] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0265.498] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0265.498] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0265.498] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0265.499] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0265.499] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0265.499] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_02.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fincl_02.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0265.500] GetFileType (hFile=0x1ac) returned 0x1 [0265.500] CloseHandle (hObject=0x1ac) returned 1 [0265.501] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0265.501] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_02.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fincl_02.mid"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf2a4e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2466)) returned 1 [0265.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0265.501] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0265.501] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_02.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fincl_02.mid"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf2a4e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2466)) returned 1 [0265.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0265.501] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0265.502] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0265.502] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x816, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="FLAP.WMF", cAlternateFileName="")) returned 1 [0265.502] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0265.502] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0265.502] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0265.502] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0265.502] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0265.503] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0265.503] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FLAP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\flap.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0265.754] GetFileType (hFile=0x19c) returned 0x1 [0265.755] CloseHandle (hObject=0x19c) returned 1 [0265.755] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0265.756] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FLAP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\flap.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x816)) returned 1 [0265.756] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0265.756] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0265.756] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FLAP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\flap.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x816)) returned 1 [0265.756] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0265.757] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0265.757] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0265.757] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d8f, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="GRDEN_01.MID", cAlternateFileName="")) returned 1 [0265.757] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0265.757] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0265.757] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0265.757] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0265.757] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0265.758] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0265.848] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRDEN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\grden_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0265.849] GetFileType (hFile=0x198) returned 0x1 [0265.849] CloseHandle (hObject=0x198) returned 1 [0265.850] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0265.850] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRDEN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\grden_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d8f)) returned 1 [0265.850] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0265.850] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0265.850] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRDEN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\grden_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d8f)) returned 1 [0265.850] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0265.851] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0265.851] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0265.851] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18bb, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="GRID_01.MID", cAlternateFileName="")) returned 1 [0265.851] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0265.851] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0265.851] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0265.851] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0265.852] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0265.852] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0265.852] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRID_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\grid_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0265.853] GetFileType (hFile=0x198) returned 0x1 [0265.853] CloseHandle (hObject=0x198) returned 1 [0265.854] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0265.854] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRID_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\grid_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18bb)) returned 1 [0265.854] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0265.854] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0265.854] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRID_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\grid_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18bb)) returned 1 [0265.854] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0265.854] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0265.855] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0265.855] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xeb4, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="HH00057_.WMF", cAlternateFileName="")) returned 1 [0265.855] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0265.855] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0265.855] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0265.855] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0265.855] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0265.855] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0265.856] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00057_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00057_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0265.856] GetFileType (hFile=0x198) returned 0x1 [0265.857] CloseHandle (hObject=0x198) returned 1 [0265.857] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0265.857] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00057_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00057_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xeb4)) returned 1 [0265.857] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0265.857] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0265.858] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00057_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00057_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xeb4)) returned 1 [0265.858] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0265.858] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0265.858] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0265.858] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9a8, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="HH00084_.WMF", cAlternateFileName="")) returned 1 [0265.858] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0265.858] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0265.858] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0265.858] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0265.858] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0265.858] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0265.859] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00084_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00084_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0265.859] GetFileType (hFile=0x198) returned 0x1 [0265.860] CloseHandle (hObject=0x198) returned 1 [0265.860] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0265.860] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00084_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00084_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9a8)) returned 1 [0265.860] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0265.860] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0265.860] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00084_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00084_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9a8)) returned 1 [0265.860] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0265.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0265.861] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0265.861] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b8, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="HH00231_.WMF", cAlternateFileName="")) returned 1 [0265.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0265.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0265.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0265.861] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0265.861] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0265.861] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0265.862] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00231_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00231_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0265.862] GetFileType (hFile=0x198) returned 0x1 [0265.863] CloseHandle (hObject=0x198) returned 1 [0265.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0265.864] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00231_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00231_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b8)) returned 1 [0265.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0265.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0265.864] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00231_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00231_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b8)) returned 1 [0265.865] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0265.865] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0265.865] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0265.865] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x402, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="HH00235_.WMF", cAlternateFileName="")) returned 1 [0265.865] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0265.865] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0265.865] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0265.865] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0265.865] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0265.865] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0265.866] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00235_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00235_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0265.866] GetFileType (hFile=0x198) returned 0x1 [0265.867] CloseHandle (hObject=0x198) returned 1 [0265.867] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0265.867] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00235_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00235_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x402)) returned 1 [0265.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0265.868] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0265.868] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00235_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00235_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x402)) returned 1 [0265.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0265.868] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0265.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0265.869] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcd6, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="HH00236_.WMF", cAlternateFileName="")) returned 1 [0265.869] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0265.869] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0265.869] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0265.869] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0265.869] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0265.869] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0265.870] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00236_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00236_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0265.870] GetFileType (hFile=0x198) returned 0x1 [0265.871] CloseHandle (hObject=0x198) returned 1 [0265.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0265.871] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00236_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00236_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcd6)) returned 1 [0265.872] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0265.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0265.872] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00236_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00236_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcd6)) returned 1 [0265.872] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0265.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0265.872] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0265.872] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7a8, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="HH00241_.WMF", cAlternateFileName="")) returned 1 [0265.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0265.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0265.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0265.873] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0265.873] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0265.873] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0265.874] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00241_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00241_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0265.874] GetFileType (hFile=0x198) returned 0x1 [0265.875] CloseHandle (hObject=0x198) returned 1 [0265.875] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0265.875] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00241_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00241_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7a8)) returned 1 [0265.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0265.876] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0265.876] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00241_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00241_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7a8)) returned 1 [0265.876] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0265.876] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0265.876] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0265.876] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe4e, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="HH00260_.WMF", cAlternateFileName="")) returned 1 [0265.876] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0265.876] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0265.877] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0265.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0265.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0265.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0265.878] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00260_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00260_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0265.878] GetFileType (hFile=0x198) returned 0x1 [0265.879] CloseHandle (hObject=0x198) returned 1 [0265.879] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0265.879] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00260_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00260_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe4e)) returned 1 [0265.880] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0265.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0265.880] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00260_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00260_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe4e)) returned 1 [0265.880] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0265.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0265.880] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0265.880] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc8, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="HH00276_.WMF", cAlternateFileName="")) returned 1 [0265.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0265.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0265.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0265.881] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0265.881] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0265.881] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0265.881] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00276_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00276_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0265.882] GetFileType (hFile=0x198) returned 0x1 [0265.882] CloseHandle (hObject=0x198) returned 1 [0265.882] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0265.882] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00276_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00276_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc8)) returned 1 [0265.882] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0265.883] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0265.883] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00276_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00276_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc8)) returned 1 [0265.883] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0265.883] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0265.883] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0265.883] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5f8, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="HH00334_.WMF", cAlternateFileName="")) returned 1 [0265.883] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0265.883] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0265.883] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0265.883] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0265.883] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0265.883] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0265.884] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00334_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00334_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0265.884] GetFileType (hFile=0x198) returned 0x1 [0265.885] CloseHandle (hObject=0x198) returned 1 [0265.885] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0265.885] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00334_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00334_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5f8)) returned 1 [0265.885] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0265.885] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0265.885] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00334_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00334_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5f8)) returned 1 [0265.885] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0265.886] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0265.886] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0265.886] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xce2, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="HH00443_.WMF", cAlternateFileName="")) returned 1 [0265.886] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0265.886] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0265.886] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0265.886] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0265.886] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0265.886] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0265.887] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00443_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00443_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0265.887] GetFileType (hFile=0x198) returned 0x1 [0265.887] CloseHandle (hObject=0x198) returned 1 [0265.888] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0265.888] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00443_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00443_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xce2)) returned 1 [0265.888] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0265.888] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0265.888] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00443_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00443_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xce2)) returned 1 [0265.888] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0265.888] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0265.888] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0265.888] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x332, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="HH00513_.WMF", cAlternateFileName="")) returned 1 [0265.888] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0265.889] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0265.889] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0265.889] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0265.889] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0265.889] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0265.889] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00513_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00513_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0265.889] GetFileType (hFile=0x198) returned 0x1 [0265.890] CloseHandle (hObject=0x198) returned 1 [0265.890] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0265.890] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00513_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00513_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x332)) returned 1 [0265.890] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0265.890] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0265.890] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00513_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00513_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x332)) returned 1 [0265.890] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0265.891] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0265.891] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0265.891] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3960, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="HH00524_.WMF", cAlternateFileName="")) returned 1 [0265.891] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0265.891] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0265.891] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0265.891] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0265.891] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0265.891] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0265.891] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00524_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00524_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0265.892] GetFileType (hFile=0x198) returned 0x1 [0265.892] CloseHandle (hObject=0x198) returned 1 [0265.892] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0265.892] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00524_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00524_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3960)) returned 1 [0265.892] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0265.893] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0265.893] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00524_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00524_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3960)) returned 1 [0265.893] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0265.893] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0265.893] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0265.893] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x34e2, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="HH00526_.WMF", cAlternateFileName="")) returned 1 [0265.893] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0265.893] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0265.893] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0265.893] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0265.893] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0265.893] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0265.894] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00526_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00526_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0265.894] GetFileType (hFile=0x198) returned 0x1 [0265.894] CloseHandle (hObject=0x198) returned 1 [0265.895] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0265.895] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00526_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00526_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x34e2)) returned 1 [0265.895] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0265.895] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0265.895] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00526_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00526_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x34e2)) returned 1 [0265.895] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0265.895] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0265.895] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0265.895] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16a6, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="HH00527_.WMF", cAlternateFileName="")) returned 1 [0265.895] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0265.895] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0265.895] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0265.896] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0265.896] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0265.896] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0265.896] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00527_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00527_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0265.896] GetFileType (hFile=0x198) returned 0x1 [0265.897] CloseHandle (hObject=0x198) returned 1 [0265.897] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0265.897] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00527_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00527_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16a6)) returned 1 [0265.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0265.897] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0265.897] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00527_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00527_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16a6)) returned 1 [0265.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0265.898] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0265.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0265.898] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe86, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="HH00546_.WMF", cAlternateFileName="")) returned 1 [0265.898] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0265.898] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0265.898] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0265.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0265.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0265.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0266.114] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00546_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00546_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0266.263] GetFileType (hFile=0x198) returned 0x1 [0266.263] CloseHandle (hObject=0x198) returned 1 [0266.263] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0266.264] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00546_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00546_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe86)) returned 1 [0266.264] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0266.264] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0266.264] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00546_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00546_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe86)) returned 1 [0266.264] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0266.264] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0266.264] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0266.264] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5bc, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="HH00601_.WMF", cAlternateFileName="")) returned 1 [0266.264] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0266.264] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0266.264] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0266.265] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0266.265] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0266.265] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0266.383] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00601_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00601_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0266.390] GetFileType (hFile=0x1c0) returned 0x1 [0266.391] CloseHandle (hObject=0x1c0) returned 1 [0266.392] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0266.392] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00601_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00601_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5bc)) returned 1 [0266.392] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0266.392] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0266.392] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00601_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00601_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5bc)) returned 1 [0266.392] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0266.393] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0266.393] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0266.393] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x578, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="HH00602_.WMF", cAlternateFileName="")) returned 1 [0266.393] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0266.393] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0266.393] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0266.393] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0266.394] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0266.394] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0266.395] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00602_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00602_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0266.395] GetFileType (hFile=0x1c0) returned 0x1 [0266.396] CloseHandle (hObject=0x1c0) returned 1 [0266.396] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0266.396] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00602_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00602_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x578)) returned 1 [0266.397] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0266.397] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0266.397] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00602_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00602_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x578)) returned 1 [0266.397] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0266.397] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0266.398] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0266.398] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3158, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="HH00612_.WMF", cAlternateFileName="")) returned 1 [0266.398] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0266.398] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0266.398] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0266.398] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0266.398] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0266.399] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0266.399] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00612_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00612_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0266.400] GetFileType (hFile=0x1c0) returned 0x1 [0266.401] CloseHandle (hObject=0x1c0) returned 1 [0266.401] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0266.401] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00612_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00612_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3158)) returned 1 [0266.402] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0266.402] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0266.402] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00612_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00612_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3158)) returned 1 [0266.402] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0266.402] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0266.402] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0266.403] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2994, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="HH00623_.WMF", cAlternateFileName="")) returned 1 [0266.403] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0266.403] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0266.403] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0266.403] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0266.403] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0266.403] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0266.404] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00623_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00623_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0266.405] GetFileType (hFile=0x1c0) returned 0x1 [0266.406] CloseHandle (hObject=0x1c0) returned 1 [0266.406] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0266.406] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00623_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00623_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2994)) returned 1 [0266.406] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0266.406] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0266.407] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00623_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00623_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2994)) returned 1 [0266.407] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0266.407] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0266.407] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0266.407] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x844, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="HH00625_.WMF", cAlternateFileName="")) returned 1 [0266.407] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0266.407] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0266.407] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0266.407] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0266.408] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0266.408] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0266.408] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00625_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00625_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0266.409] GetFileType (hFile=0x1c0) returned 0x1 [0266.409] CloseHandle (hObject=0x1c0) returned 1 [0266.410] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0266.410] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00625_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00625_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x844)) returned 1 [0266.410] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0266.411] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0266.411] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00625_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00625_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x844)) returned 1 [0266.411] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0266.411] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0266.411] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0266.411] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x620, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="HH00636_.WMF", cAlternateFileName="")) returned 1 [0266.411] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0266.411] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0266.412] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0266.412] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0266.412] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0266.412] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0266.413] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00636_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00636_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0266.413] GetFileType (hFile=0x1c0) returned 0x1 [0266.413] CloseHandle (hObject=0x1c0) returned 1 [0266.414] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0266.414] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00636_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00636_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x620)) returned 1 [0266.414] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0266.414] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0266.415] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00636_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00636_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x620)) returned 1 [0266.415] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0266.415] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0266.415] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0266.415] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ce2, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="HH00669_.WMF", cAlternateFileName="")) returned 1 [0266.415] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0266.415] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0266.415] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0266.415] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0266.416] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0266.416] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0266.416] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00669_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00669_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0266.417] GetFileType (hFile=0x1c0) returned 0x1 [0266.417] CloseHandle (hObject=0x1c0) returned 1 [0266.418] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0266.418] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00669_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00669_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ce2)) returned 1 [0266.418] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0266.418] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0266.418] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00669_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00669_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ce2)) returned 1 [0266.419] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0266.419] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0266.419] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0266.419] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2454, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="HH00681_.WMF", cAlternateFileName="")) returned 1 [0266.419] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0266.419] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0266.419] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0266.419] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0266.420] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0266.420] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0266.421] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00681_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00681_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0266.421] GetFileType (hFile=0x1c0) returned 0x1 [0266.421] CloseHandle (hObject=0x1c0) returned 1 [0266.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0266.422] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00681_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00681_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2454)) returned 1 [0266.422] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0266.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0266.422] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00681_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00681_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2454)) returned 1 [0266.422] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0266.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0266.423] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0266.423] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfc0, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="HH00685_.WMF", cAlternateFileName="")) returned 1 [0266.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0266.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0266.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0266.423] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0266.423] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0266.423] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0266.424] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00685_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00685_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0266.424] GetFileType (hFile=0x1c0) returned 0x1 [0266.425] CloseHandle (hObject=0x1c0) returned 1 [0266.738] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0266.738] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00685_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00685_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfc0)) returned 1 [0266.739] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0266.739] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0266.739] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00685_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00685_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfc0)) returned 1 [0266.739] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0266.739] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0266.739] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0266.740] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10f4, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="HH00687_.WMF", cAlternateFileName="")) returned 1 [0266.740] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0266.740] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0266.740] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0266.740] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0266.740] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0266.740] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0266.741] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00687_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00687_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0266.749] GetFileType (hFile=0x174) returned 0x1 [0266.749] CloseHandle (hObject=0x174) returned 1 [0266.750] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0266.750] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00687_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00687_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10f4)) returned 1 [0266.750] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0266.750] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0266.751] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00687_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00687_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10f4)) returned 1 [0266.751] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0266.751] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0266.751] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0266.751] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bac, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="HH00688_.WMF", cAlternateFileName="")) returned 1 [0266.751] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0266.751] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0266.751] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0266.752] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0266.752] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0266.752] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0266.752] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00688_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00688_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0267.067] GetFileType (hFile=0x174) returned 0x1 [0267.068] CloseHandle (hObject=0x174) returned 1 [0267.068] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0267.069] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00688_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00688_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bac)) returned 1 [0267.069] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0267.069] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0267.069] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00688_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00688_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bac)) returned 1 [0267.069] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0267.069] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0267.070] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0267.070] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bba, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="HH00693_.WMF", cAlternateFileName="")) returned 1 [0267.070] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0267.070] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0267.070] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0267.070] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0267.071] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0267.071] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0267.071] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00693_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00693_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0267.072] GetFileType (hFile=0x174) returned 0x1 [0267.073] CloseHandle (hObject=0x174) returned 1 [0267.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0267.073] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00693_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00693_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bba)) returned 1 [0267.073] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0267.074] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0267.074] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00693_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00693_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bba)) returned 1 [0267.074] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0267.074] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0267.074] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0267.074] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb20, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="HH01013_.WMF", cAlternateFileName="")) returned 1 [0267.074] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0267.074] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0267.075] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0267.075] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0267.075] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0267.075] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0267.076] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01013_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01013_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0267.076] GetFileType (hFile=0x174) returned 0x1 [0267.076] CloseHandle (hObject=0x174) returned 1 [0267.077] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0267.077] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01013_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01013_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb20)) returned 1 [0267.077] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0267.077] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0267.077] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01013_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01013_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb20)) returned 1 [0267.078] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0267.078] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0267.078] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0267.078] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x47c, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="HH01015_.WMF", cAlternateFileName="")) returned 1 [0267.078] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0267.078] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0267.078] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0267.078] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0267.078] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0267.079] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0267.079] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01015_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0267.080] GetFileType (hFile=0x174) returned 0x1 [0267.080] CloseHandle (hObject=0x174) returned 1 [0267.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0267.081] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01015_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x47c)) returned 1 [0267.081] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0267.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0267.081] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01015_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x47c)) returned 1 [0267.081] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0267.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0267.082] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0267.082] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xac4, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="HH01058_.WMF", cAlternateFileName="")) returned 1 [0267.082] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0267.082] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0267.083] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0267.083] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0267.083] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0267.083] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0267.084] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01058_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01058_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0267.084] GetFileType (hFile=0x174) returned 0x1 [0267.084] CloseHandle (hObject=0x174) returned 1 [0267.085] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0267.085] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01058_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01058_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xac4)) returned 1 [0267.085] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0267.085] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0267.086] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01058_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01058_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xac4)) returned 1 [0267.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0267.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0267.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0267.086] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f4, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="HH01065_.WMF", cAlternateFileName="")) returned 1 [0267.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0267.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0267.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0267.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0267.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0267.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0267.087] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01065_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01065_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0267.088] GetFileType (hFile=0x174) returned 0x1 [0267.088] CloseHandle (hObject=0x174) returned 1 [0267.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0267.089] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01065_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01065_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f4)) returned 1 [0267.089] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0267.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0267.089] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01065_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01065_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f4)) returned 1 [0267.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0267.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0267.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0267.090] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1388, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="HH01080_.WMF", cAlternateFileName="")) returned 1 [0267.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0267.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0267.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0267.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0267.091] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0267.091] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0267.091] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01080_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01080_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0267.092] GetFileType (hFile=0x174) returned 0x1 [0267.092] CloseHandle (hObject=0x174) returned 1 [0267.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0267.093] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01080_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01080_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1388)) returned 1 [0267.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0267.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0267.093] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01080_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01080_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1388)) returned 1 [0267.094] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0267.094] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0267.094] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0267.094] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1cac, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="HH01242_.WMF", cAlternateFileName="")) returned 1 [0267.094] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0267.094] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0267.094] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0267.094] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0267.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0267.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0267.095] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01242_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01242_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0267.096] GetFileType (hFile=0x174) returned 0x1 [0267.096] CloseHandle (hObject=0x174) returned 1 [0267.097] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0267.097] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01242_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01242_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1cac)) returned 1 [0267.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0267.098] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0267.098] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01242_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01242_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1cac)) returned 1 [0267.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0267.098] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0267.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0267.099] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3dbe, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="HH01291_.WMF", cAlternateFileName="")) returned 1 [0267.099] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0267.099] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0267.099] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0267.099] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0267.099] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0267.099] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0267.100] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01291_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01291_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0267.100] GetFileType (hFile=0x174) returned 0x1 [0267.101] CloseHandle (hObject=0x174) returned 1 [0267.101] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0267.101] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01291_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01291_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3dbe)) returned 1 [0267.101] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0267.101] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0267.101] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01291_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01291_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3dbe)) returned 1 [0267.102] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0267.102] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0267.102] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0267.102] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1780, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="HH01329_.WMF", cAlternateFileName="")) returned 1 [0267.102] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0267.102] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0267.103] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0267.103] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0267.103] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0267.103] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0267.103] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01329_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01329_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0267.104] GetFileType (hFile=0x174) returned 0x1 [0267.104] CloseHandle (hObject=0x174) returned 1 [0267.105] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0267.105] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01329_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01329_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1780)) returned 1 [0267.105] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0267.105] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0267.105] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01329_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01329_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1780)) returned 1 [0267.105] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0267.105] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0267.106] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0267.106] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1746, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="HH01461_.WMF", cAlternateFileName="")) returned 1 [0267.106] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0267.106] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0267.106] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0267.106] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0267.106] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0267.106] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0267.107] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01461_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01461_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0267.107] GetFileType (hFile=0x174) returned 0x1 [0267.108] CloseHandle (hObject=0x174) returned 1 [0267.108] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0267.108] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01461_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01461_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1746)) returned 1 [0267.109] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0267.109] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0267.109] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01461_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01461_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1746)) returned 1 [0267.109] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0267.109] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0267.109] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0267.109] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c80, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="HH01618_.WMF", cAlternateFileName="")) returned 1 [0267.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0267.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0267.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0267.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0267.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0267.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0267.111] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01618_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01618_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0267.111] GetFileType (hFile=0x174) returned 0x1 [0267.112] CloseHandle (hObject=0x174) returned 1 [0267.112] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0267.112] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01618_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01618_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c80)) returned 1 [0267.113] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0267.113] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0267.113] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01618_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01618_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c80)) returned 1 [0267.113] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0267.113] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0267.113] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0267.113] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1526, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="HH01759_.WMF", cAlternateFileName="")) returned 1 [0267.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0267.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0267.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0267.364] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0267.364] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0267.364] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0267.366] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01759_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01759_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0267.367] GetFileType (hFile=0x19c) returned 0x1 [0267.367] CloseHandle (hObject=0x19c) returned 1 [0267.368] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0267.368] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01759_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01759_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1526)) returned 1 [0267.369] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0267.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0267.369] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01759_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01759_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1526)) returned 1 [0267.370] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0267.370] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0267.370] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0267.370] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa38, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="HH01875_.WMF", cAlternateFileName="")) returned 1 [0267.370] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0267.371] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0267.371] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0267.371] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0267.371] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0267.372] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0267.373] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01875_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01875_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0267.373] GetFileType (hFile=0x19c) returned 0x1 [0267.374] CloseHandle (hObject=0x19c) returned 1 [0267.374] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0267.374] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01875_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01875_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa38)) returned 1 [0267.374] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0267.375] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0267.375] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01875_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01875_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa38)) returned 1 [0267.375] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0267.375] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0267.375] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0267.375] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6852, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="HH01923_.WMF", cAlternateFileName="")) returned 1 [0267.375] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0267.375] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0267.376] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0267.376] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0267.376] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0267.376] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0267.376] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01923_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01923_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0267.377] GetFileType (hFile=0x19c) returned 0x1 [0267.377] CloseHandle (hObject=0x19c) returned 1 [0267.377] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0267.377] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01923_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01923_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6852)) returned 1 [0267.378] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0267.378] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0267.378] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01923_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01923_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6852)) returned 1 [0267.378] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0267.378] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0267.378] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0267.378] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa90, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="HH02155_.WMF", cAlternateFileName="")) returned 1 [0267.378] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0267.378] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0267.378] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0267.379] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0267.379] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0267.379] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0267.380] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02155_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02155_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0267.380] GetFileType (hFile=0x19c) returned 0x1 [0267.380] CloseHandle (hObject=0x19c) returned 1 [0267.380] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0267.380] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02155_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02155_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa90)) returned 1 [0267.381] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0267.381] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0267.381] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02155_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02155_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa90)) returned 1 [0267.381] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0267.381] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0267.381] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0267.381] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x52c, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="HH02166_.WMF", cAlternateFileName="")) returned 1 [0267.381] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0267.381] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0267.381] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0267.382] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0267.382] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0267.382] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0267.382] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02166_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02166_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0267.383] GetFileType (hFile=0x19c) returned 0x1 [0267.383] CloseHandle (hObject=0x19c) returned 1 [0267.383] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0267.383] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02166_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02166_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x52c)) returned 1 [0267.383] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0267.383] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0267.383] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02166_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02166_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x52c)) returned 1 [0267.384] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0267.384] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0267.384] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0267.384] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1efc, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="HH02282_.WMF", cAlternateFileName="")) returned 1 [0267.384] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0267.384] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0267.384] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0267.384] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0267.384] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0267.384] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0267.385] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02282_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02282_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0267.385] GetFileType (hFile=0x19c) returned 0x1 [0267.385] CloseHandle (hObject=0x19c) returned 1 [0267.385] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0267.385] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02282_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02282_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1efc)) returned 1 [0267.386] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0267.386] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0267.386] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02282_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02282_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1efc)) returned 1 [0267.386] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0267.386] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0267.386] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0267.386] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15b0, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="HH02298_.WMF", cAlternateFileName="")) returned 1 [0267.386] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0267.386] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0267.386] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0267.387] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0267.387] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0267.387] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0267.390] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02298_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02298_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0267.390] GetFileType (hFile=0x19c) returned 0x1 [0267.391] CloseHandle (hObject=0x19c) returned 1 [0267.391] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0267.391] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02298_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02298_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15b0)) returned 1 [0267.391] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0267.391] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0267.391] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02298_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02298_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15b0)) returned 1 [0267.391] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0267.392] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0267.392] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0267.392] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x136a, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="HH02312_.WMF", cAlternateFileName="")) returned 1 [0267.392] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0267.392] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0267.392] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0267.392] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0267.392] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0267.392] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0267.393] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02312_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02312_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0267.393] GetFileType (hFile=0x19c) returned 0x1 [0267.393] CloseHandle (hObject=0x19c) returned 1 [0267.394] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0267.394] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02312_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02312_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x136a)) returned 1 [0267.394] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0267.394] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0267.394] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02312_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02312_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x136a)) returned 1 [0267.394] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0267.395] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0267.395] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0267.395] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc0a, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="HH02313_.WMF", cAlternateFileName="")) returned 1 [0267.395] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0267.395] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0267.395] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0267.395] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0267.395] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0267.395] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0267.885] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02313_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02313_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0267.885] GetFileType (hFile=0x19c) returned 0x1 [0267.885] CloseHandle (hObject=0x19c) returned 1 [0267.886] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0267.886] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02313_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02313_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc0a)) returned 1 [0267.886] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0267.886] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0267.886] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02313_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02313_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc0a)) returned 1 [0267.887] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0267.887] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0267.887] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0267.887] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5b04, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="HM00005_.WMF", cAlternateFileName="")) returned 1 [0267.887] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0267.887] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0267.887] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0267.887] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0267.888] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0267.888] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0267.888] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00005_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00005_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0267.889] GetFileType (hFile=0x19c) returned 0x1 [0267.889] CloseHandle (hObject=0x19c) returned 1 [0267.890] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0267.890] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00005_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00005_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5b04)) returned 1 [0267.890] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0267.890] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0267.890] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00005_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00005_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5b04)) returned 1 [0267.891] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0267.891] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0267.891] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0267.891] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5664, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="HM00114_.WMF", cAlternateFileName="")) returned 1 [0267.891] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0267.891] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0267.891] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0267.892] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0267.892] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0267.892] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0267.892] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00114_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00114_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0267.893] GetFileType (hFile=0x19c) returned 0x1 [0267.893] CloseHandle (hObject=0x19c) returned 1 [0267.894] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0267.894] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00114_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00114_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5664)) returned 1 [0267.895] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0267.895] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0267.895] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00114_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00114_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5664)) returned 1 [0267.895] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0267.896] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0267.896] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0267.896] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3dec, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="HM00116_.WMF", cAlternateFileName="")) returned 1 [0267.896] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0267.896] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0267.897] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0267.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0267.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0267.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0267.898] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00116_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00116_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0267.898] GetFileType (hFile=0x19c) returned 0x1 [0267.899] CloseHandle (hObject=0x19c) returned 1 [0267.899] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0267.900] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00116_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00116_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3dec)) returned 1 [0267.900] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0267.900] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0267.900] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00116_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00116_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3dec)) returned 1 [0267.900] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0267.901] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0267.903] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0267.904] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb10, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="HM00172_.WMF", cAlternateFileName="")) returned 1 [0267.904] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0267.904] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0267.904] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0267.904] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0267.904] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0267.905] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0267.905] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00172_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0267.906] GetFileType (hFile=0x19c) returned 0x1 [0267.907] CloseHandle (hObject=0x19c) returned 1 [0267.907] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0267.907] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00172_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb10)) returned 1 [0267.908] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0267.908] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0267.908] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00172_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb10)) returned 1 [0267.908] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0267.909] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0267.909] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0267.909] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10ca8, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="HM00426_.WMF", cAlternateFileName="")) returned 1 [0267.909] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0267.909] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0267.909] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0267.909] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0267.910] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0267.910] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0267.911] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00426_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00426_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0267.911] GetFileType (hFile=0x19c) returned 0x1 [0267.912] CloseHandle (hObject=0x19c) returned 1 [0267.913] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0267.913] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00426_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00426_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10ca8)) returned 1 [0267.915] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0267.915] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0267.915] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00426_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00426_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10ca8)) returned 1 [0267.915] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0267.915] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0267.915] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0267.916] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c0a, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="HTECH_01.MID", cAlternateFileName="")) returned 1 [0267.916] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0267.916] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0267.916] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0267.916] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0267.917] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0267.918] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0267.919] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HTECH_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\htech_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0267.919] GetFileType (hFile=0x19c) returned 0x1 [0267.921] CloseHandle (hObject=0x19c) returned 1 [0267.922] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0267.922] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HTECH_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\htech_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c0a)) returned 1 [0267.922] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0267.922] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0267.922] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HTECH_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\htech_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c0a)) returned 1 [0267.932] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0267.932] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0267.933] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0267.933] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x486, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="IN00046_.WMF", cAlternateFileName="")) returned 1 [0267.933] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0267.933] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0267.933] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0267.933] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0267.934] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0267.934] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0267.935] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00046_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00046_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0267.935] GetFileType (hFile=0x19c) returned 0x1 [0267.936] CloseHandle (hObject=0x19c) returned 1 [0267.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0267.937] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00046_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00046_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x486)) returned 1 [0267.937] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0267.937] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0267.937] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00046_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00046_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x486)) returned 1 [0267.938] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0267.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0267.938] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0267.938] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x318, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="IN00118_.WMF", cAlternateFileName="")) returned 1 [0267.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0267.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0267.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0267.939] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0267.939] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0267.939] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0267.940] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00118_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00118_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0267.940] GetFileType (hFile=0x19c) returned 0x1 [0267.941] CloseHandle (hObject=0x19c) returned 1 [0267.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0267.942] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00118_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00118_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x318)) returned 1 [0267.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0267.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0267.942] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00118_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00118_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x318)) returned 1 [0267.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0267.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0267.943] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0267.943] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x432, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="IN00177_.WMF", cAlternateFileName="")) returned 1 [0267.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0267.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0267.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0267.943] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0267.943] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0267.944] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0267.944] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00177_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00177_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0267.945] GetFileType (hFile=0x19c) returned 0x1 [0268.134] CloseHandle (hObject=0x19c) returned 1 [0268.134] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0268.135] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00177_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00177_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x432)) returned 1 [0268.135] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0268.135] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0268.135] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00177_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00177_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x432)) returned 1 [0268.136] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0268.136] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0268.136] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0268.136] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x738, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="IN00204_.WMF", cAlternateFileName="")) returned 1 [0268.136] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0268.136] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0268.136] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0268.137] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0268.137] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0268.137] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0268.277] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00204_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00204_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0268.278] GetFileType (hFile=0x198) returned 0x1 [0268.278] CloseHandle (hObject=0x198) returned 1 [0268.279] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0268.279] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00204_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00204_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x738)) returned 1 [0268.279] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0268.279] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0268.279] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00204_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00204_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x738)) returned 1 [0268.280] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0268.280] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0268.280] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0268.280] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2bb6, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="IN00233_.WMF", cAlternateFileName="")) returned 1 [0268.280] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0268.281] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0268.281] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0268.281] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0268.281] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0268.281] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0268.282] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00233_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00233_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0268.282] GetFileType (hFile=0x198) returned 0x1 [0268.283] CloseHandle (hObject=0x198) returned 1 [0268.283] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0268.284] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00233_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00233_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2bb6)) returned 1 [0268.284] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0268.284] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0268.284] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00233_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00233_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2bb6)) returned 1 [0268.284] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0268.284] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0268.285] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0268.285] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x764, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="IN00343_.WMF", cAlternateFileName="")) returned 1 [0268.285] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0268.285] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0268.285] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0268.286] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0268.286] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0268.286] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0268.287] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00343_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00343_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0268.287] GetFileType (hFile=0x198) returned 0x1 [0268.288] CloseHandle (hObject=0x198) returned 1 [0268.288] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0268.289] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00343_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00343_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x764)) returned 1 [0268.289] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0268.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0268.289] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00343_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00343_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x764)) returned 1 [0268.289] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0268.290] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0268.290] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0268.290] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b8, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="IN00346_.WMF", cAlternateFileName="")) returned 1 [0268.290] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0268.290] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0268.290] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0268.291] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0268.291] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0268.291] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0268.294] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00346_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00346_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0268.295] GetFileType (hFile=0x198) returned 0x1 [0268.295] CloseHandle (hObject=0x198) returned 1 [0268.296] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0268.296] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00346_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00346_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b8)) returned 1 [0268.296] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0268.296] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0268.296] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00346_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00346_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b8)) returned 1 [0268.297] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0268.297] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0268.297] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0268.297] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x788, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="IN00351_.WMF", cAlternateFileName="")) returned 1 [0268.297] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0268.297] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0268.297] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0268.297] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0268.298] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0268.298] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0268.298] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00351_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00351_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0268.299] GetFileType (hFile=0x198) returned 0x1 [0268.299] CloseHandle (hObject=0x198) returned 1 [0268.300] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0268.300] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00351_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00351_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x788)) returned 1 [0268.300] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0268.300] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0268.300] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00351_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00351_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x788)) returned 1 [0268.301] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0268.301] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0268.301] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0268.301] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x23d4, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="IN00557_.WMF", cAlternateFileName="")) returned 1 [0268.301] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0268.301] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0268.301] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0268.301] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0268.301] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0268.302] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0268.302] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00557_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00557_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0268.302] GetFileType (hFile=0x198) returned 0x1 [0268.303] CloseHandle (hObject=0x198) returned 1 [0268.303] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0268.304] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00557_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00557_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x23d4)) returned 1 [0268.304] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0268.304] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0268.304] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00557_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00557_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x23d4)) returned 1 [0268.304] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0268.304] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0268.305] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0268.305] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe00f20a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31cc, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="IN00915_.WMF", cAlternateFileName="")) returned 1 [0268.305] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0268.305] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0268.305] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0268.305] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0268.305] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0268.306] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0268.306] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00915_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00915_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0268.307] GetFileType (hFile=0x198) returned 0x1 [0268.307] CloseHandle (hObject=0x198) returned 1 [0268.308] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0268.308] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00915_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00915_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe00f20a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31cc)) returned 1 [0268.308] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0268.308] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0268.308] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00915_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00915_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe00f20a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31cc)) returned 1 [0268.309] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0268.309] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0268.309] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0268.309] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe00f20a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b08, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="IN00919_.WMF", cAlternateFileName="")) returned 1 [0268.309] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0268.309] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0268.309] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0268.310] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0268.310] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0268.310] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0268.311] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00919_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00919_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0268.311] GetFileType (hFile=0x198) returned 0x1 [0268.312] CloseHandle (hObject=0x198) returned 1 [0268.312] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0268.312] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00919_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00919_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe00f20a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b08)) returned 1 [0268.312] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0268.312] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0268.313] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00919_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00919_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe00f20a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b08)) returned 1 [0268.313] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0268.313] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0268.313] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0268.313] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e8, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="IN00956_.WMF", cAlternateFileName="")) returned 1 [0268.313] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0268.313] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0268.314] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0268.314] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0268.314] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0268.314] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0268.315] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00956_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00956_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0268.315] GetFileType (hFile=0x198) returned 0x1 [0268.316] CloseHandle (hObject=0x198) returned 1 [0268.316] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0268.317] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00956_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00956_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e8)) returned 1 [0268.317] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0268.317] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0268.317] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00956_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00956_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e8)) returned 1 [0268.317] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0268.317] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0268.318] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0268.318] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe00f20a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb80, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="IN00957_.WMF", cAlternateFileName="")) returned 1 [0268.318] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0268.318] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0268.318] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0268.318] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0268.318] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0268.319] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0268.319] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00957_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00957_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0268.320] GetFileType (hFile=0x198) returned 0x1 [0268.320] CloseHandle (hObject=0x198) returned 1 [0268.498] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0268.498] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00957_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00957_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe00f20a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb80)) returned 1 [0268.498] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0268.498] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0268.498] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00957_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00957_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe00f20a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb80)) returned 1 [0268.498] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0268.499] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0268.499] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0268.499] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe00f20a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2178, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="INDST_01.MID", cAlternateFileName="")) returned 1 [0268.499] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0268.499] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0268.499] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0268.499] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0268.500] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0268.500] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0268.540] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\INDST_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\indst_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0268.541] GetFileType (hFile=0x198) returned 0x1 [0268.541] CloseHandle (hObject=0x198) returned 1 [0268.542] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0268.542] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\INDST_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\indst_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe00f20a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2178)) returned 1 [0268.542] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0268.542] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0268.542] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\INDST_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\indst_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe00f20a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2178)) returned 1 [0268.542] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0268.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0268.543] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0268.543] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe00f20a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c4, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0075478.GIF", cAlternateFileName="")) returned 1 [0268.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0268.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0268.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0268.543] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0268.543] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0268.544] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0268.544] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0075478.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0075478.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0268.545] GetFileType (hFile=0x198) returned 0x1 [0268.545] CloseHandle (hObject=0x198) returned 1 [0268.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0268.546] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0075478.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0075478.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe00f20a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c4)) returned 1 [0268.546] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0268.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0268.546] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0075478.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0075478.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe00f20a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c4)) returned 1 [0268.547] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0268.547] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0268.547] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0268.547] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2606, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0086384.WMF", cAlternateFileName="")) returned 1 [0268.547] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0268.547] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0268.547] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0268.547] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0268.548] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0268.548] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0268.548] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086384.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086384.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0268.549] GetFileType (hFile=0x198) returned 0x1 [0268.549] CloseHandle (hObject=0x198) returned 1 [0268.550] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0268.550] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086384.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086384.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2606)) returned 1 [0268.550] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0268.550] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0268.550] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086384.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086384.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2606)) returned 1 [0268.550] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0268.550] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0268.551] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0268.551] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x257c, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0086420.WMF", cAlternateFileName="")) returned 1 [0268.551] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0268.551] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0268.551] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0268.551] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0268.551] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0268.551] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0268.552] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086420.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086420.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0268.552] GetFileType (hFile=0x198) returned 0x1 [0268.553] CloseHandle (hObject=0x198) returned 1 [0268.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0268.554] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086420.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086420.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x257c)) returned 1 [0268.554] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0268.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0268.554] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086420.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086420.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x257c)) returned 1 [0268.554] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0268.555] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0268.555] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0268.555] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4278, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0086424.WMF", cAlternateFileName="")) returned 1 [0268.555] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0268.556] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0268.556] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0268.556] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0268.556] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0268.556] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0268.557] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086424.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086424.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0268.557] GetFileType (hFile=0x198) returned 0x1 [0268.558] CloseHandle (hObject=0x198) returned 1 [0268.559] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0268.559] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086424.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086424.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4278)) returned 1 [0268.559] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0268.559] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0268.559] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086424.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086424.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4278)) returned 1 [0268.560] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0268.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0268.560] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0268.560] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5516, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0086426.WMF", cAlternateFileName="")) returned 1 [0268.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0268.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0268.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0268.561] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0268.561] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0268.561] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0268.562] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086426.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086426.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0268.562] GetFileType (hFile=0x198) returned 0x1 [0268.563] CloseHandle (hObject=0x198) returned 1 [0268.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0268.564] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086426.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086426.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5516)) returned 1 [0268.564] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0268.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0268.564] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086426.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086426.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5516)) returned 1 [0268.564] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0268.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0268.565] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0268.565] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8a12, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0086428.WMF", cAlternateFileName="")) returned 1 [0268.565] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0268.565] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0268.565] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0268.565] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0268.566] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0268.566] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0268.567] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086428.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086428.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0268.567] GetFileType (hFile=0x198) returned 0x1 [0268.568] CloseHandle (hObject=0x198) returned 1 [0268.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0268.568] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086428.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086428.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8a12)) returned 1 [0268.569] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0268.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0268.569] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086428.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086428.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8a12)) returned 1 [0268.569] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0268.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0268.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0268.570] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x829a, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0086432.WMF", cAlternateFileName="")) returned 1 [0268.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0268.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0268.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0268.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0268.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0268.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0268.572] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086432.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086432.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0268.573] GetFileType (hFile=0x198) returned 0x1 [0268.573] CloseHandle (hObject=0x198) returned 1 [0268.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0268.574] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086432.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086432.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x829a)) returned 1 [0268.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0268.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0268.574] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086432.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086432.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x829a)) returned 1 [0268.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0268.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0268.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0268.575] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x375e, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0086478.WMF", cAlternateFileName="")) returned 1 [0268.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0268.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0268.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0268.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0268.576] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0268.576] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0268.577] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086478.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086478.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0268.577] GetFileType (hFile=0x198) returned 0x1 [0268.578] CloseHandle (hObject=0x198) returned 1 [0268.578] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0268.578] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086478.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086478.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x375e)) returned 1 [0268.579] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0268.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0268.579] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086478.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086478.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x375e)) returned 1 [0268.579] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0268.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0268.579] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0268.579] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4dba, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0089945.WMF", cAlternateFileName="")) returned 1 [0268.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0268.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0268.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0268.580] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0268.580] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0268.580] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0268.581] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089945.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0089945.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0268.582] GetFileType (hFile=0x198) returned 0x1 [0268.582] CloseHandle (hObject=0x198) returned 1 [0268.583] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0268.583] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089945.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0089945.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4dba)) returned 1 [0268.583] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0268.583] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0268.583] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089945.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0089945.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4dba)) returned 1 [0268.583] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0268.584] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0268.584] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0268.584] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d40, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0089992.WMF", cAlternateFileName="")) returned 1 [0268.584] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0268.584] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0268.584] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0268.584] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0268.585] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0268.585] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0268.585] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089992.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0089992.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0268.586] GetFileType (hFile=0x198) returned 0x1 [0268.769] CloseHandle (hObject=0x198) returned 1 [0268.770] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0268.770] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089992.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0089992.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d40)) returned 1 [0268.770] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0268.771] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0268.771] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089992.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0089992.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d40)) returned 1 [0268.771] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0268.771] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0268.771] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0268.771] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5314, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0090027.WMF", cAlternateFileName="")) returned 1 [0268.771] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0268.771] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0268.772] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0268.772] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0268.772] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0268.772] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0268.831] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090027.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090027.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0268.831] GetFileType (hFile=0x198) returned 0x1 [0268.832] CloseHandle (hObject=0x198) returned 1 [0268.832] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0268.832] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090027.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090027.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5314)) returned 1 [0268.833] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0268.833] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0268.833] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090027.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090027.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5314)) returned 1 [0268.833] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0268.833] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0268.833] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0268.834] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb758, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0090087.WMF", cAlternateFileName="")) returned 1 [0268.834] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0268.834] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0268.834] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0268.834] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0268.834] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0268.835] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0268.835] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090087.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090087.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0268.836] GetFileType (hFile=0x198) returned 0x1 [0268.837] CloseHandle (hObject=0x198) returned 1 [0268.838] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0268.838] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090087.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090087.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb758)) returned 1 [0268.838] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0268.838] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0268.839] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090087.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090087.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb758)) returned 1 [0268.839] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0268.839] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0268.839] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0268.839] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d90, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0090089.WMF", cAlternateFileName="")) returned 1 [0268.839] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0268.840] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0268.840] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0268.840] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0268.840] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0268.840] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0268.841] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090089.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090089.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0268.842] GetFileType (hFile=0x198) returned 0x1 [0268.842] CloseHandle (hObject=0x198) returned 1 [0268.843] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0268.843] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090089.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090089.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d90)) returned 1 [0268.843] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0268.843] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0268.843] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090089.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090089.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d90)) returned 1 [0268.843] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0268.844] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0268.844] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0268.844] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6e34, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0090149.WMF", cAlternateFileName="")) returned 1 [0268.844] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0268.844] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0268.844] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0268.844] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0268.844] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0268.845] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0268.845] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090149.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090149.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0268.846] GetFileType (hFile=0x198) returned 0x1 [0268.846] CloseHandle (hObject=0x198) returned 1 [0268.847] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0268.847] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090149.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090149.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6e34)) returned 1 [0268.847] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0268.847] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0268.847] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090149.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090149.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6e34)) returned 1 [0268.847] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0268.847] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0268.848] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0268.848] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x44e6, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0090390.WMF", cAlternateFileName="")) returned 1 [0268.848] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0268.848] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0268.848] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0268.848] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0268.848] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0268.848] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0268.849] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090390.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090390.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0268.849] GetFileType (hFile=0x198) returned 0x1 [0268.850] CloseHandle (hObject=0x198) returned 1 [0268.850] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0268.850] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090390.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090390.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x44e6)) returned 1 [0268.851] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0268.851] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0268.851] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090390.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090390.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x44e6)) returned 1 [0268.851] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0268.851] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0268.851] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0268.851] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd04, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0090777.WMF", cAlternateFileName="")) returned 1 [0268.852] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0268.852] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0268.853] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0268.853] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0268.853] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0268.853] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0268.854] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090777.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090777.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0268.854] GetFileType (hFile=0x198) returned 0x1 [0268.855] CloseHandle (hObject=0x198) returned 1 [0268.856] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0268.856] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090777.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090777.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd04)) returned 1 [0268.857] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0268.857] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0268.857] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090777.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090777.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd04)) returned 1 [0268.857] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0268.857] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0268.857] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0268.858] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5b0, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0090779.WMF", cAlternateFileName="")) returned 1 [0268.858] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0268.858] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0268.858] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0268.858] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0268.858] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0268.859] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0268.860] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090779.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090779.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0268.860] GetFileType (hFile=0x198) returned 0x1 [0268.861] CloseHandle (hObject=0x198) returned 1 [0268.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0268.861] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090779.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090779.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5b0)) returned 1 [0268.861] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0268.862] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0268.862] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090779.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090779.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5b0)) returned 1 [0268.862] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0268.862] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0268.862] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0268.862] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14c2, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0090781.WMF", cAlternateFileName="")) returned 1 [0268.863] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0268.863] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0268.863] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0268.863] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0268.863] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0268.863] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0268.864] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090781.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090781.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0268.864] GetFileType (hFile=0x198) returned 0x1 [0268.865] CloseHandle (hObject=0x198) returned 1 [0268.865] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0268.865] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090781.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090781.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14c2)) returned 1 [0268.866] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0268.866] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0268.866] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090781.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090781.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14c2)) returned 1 [0268.866] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0268.866] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0268.866] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0268.866] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b16, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0090783.WMF", cAlternateFileName="")) returned 1 [0268.867] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0268.867] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0268.867] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0268.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0268.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0268.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0269.132] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090783.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090783.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0269.194] GetFileType (hFile=0x19c) returned 0x1 [0269.195] CloseHandle (hObject=0x19c) returned 1 [0269.196] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0269.196] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090783.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090783.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b16)) returned 1 [0269.196] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0269.196] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0269.197] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090783.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090783.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b16)) returned 1 [0269.197] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0269.197] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0269.197] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0269.197] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa442, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0093905.WMF", cAlternateFileName="")) returned 1 [0269.197] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0269.198] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0269.198] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0269.198] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0269.198] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0269.198] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0269.199] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0093905.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0093905.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0269.199] GetFileType (hFile=0x19c) returned 0x1 [0269.200] CloseHandle (hObject=0x19c) returned 1 [0269.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0269.201] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0093905.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0093905.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa442)) returned 1 [0269.201] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0269.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0269.202] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0093905.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0093905.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa442)) returned 1 [0269.202] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0269.202] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0269.202] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0269.202] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x136a, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0098497.WMF", cAlternateFileName="")) returned 1 [0269.202] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0269.203] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0269.203] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0269.203] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0269.203] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0269.203] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0269.204] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0098497.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0098497.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0269.205] GetFileType (hFile=0x19c) returned 0x1 [0269.205] CloseHandle (hObject=0x19c) returned 1 [0269.206] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0269.206] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0098497.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0098497.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x136a)) returned 1 [0269.206] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0269.206] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0269.206] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0098497.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0098497.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x136a)) returned 1 [0269.207] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0269.207] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0269.207] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0269.207] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x60b7, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0099145.JPG", cAlternateFileName="")) returned 1 [0269.207] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0269.207] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0269.207] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0269.208] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0269.208] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0269.208] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0269.209] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099145.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099145.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0269.209] GetFileType (hFile=0x19c) returned 0x1 [0269.212] CloseHandle (hObject=0x19c) returned 1 [0269.212] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0269.213] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099145.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099145.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x60b7)) returned 1 [0269.213] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0269.213] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0269.213] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099145.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099145.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x60b7)) returned 1 [0269.213] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0269.213] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0269.214] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0269.214] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x40d4, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0099146.WMF", cAlternateFileName="")) returned 1 [0269.214] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0269.214] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0269.214] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0269.215] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0269.215] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0269.215] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0269.216] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099146.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0269.217] GetFileType (hFile=0x19c) returned 0x1 [0269.217] CloseHandle (hObject=0x19c) returned 1 [0269.218] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0269.218] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099146.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x40d4)) returned 1 [0269.218] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0269.219] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0269.219] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099146.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x40d4)) returned 1 [0269.219] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0269.219] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0269.219] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0269.219] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5f39, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0099147.JPG", cAlternateFileName="")) returned 1 [0269.220] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0269.220] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0269.220] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0269.220] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0269.220] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0269.220] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0269.221] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099147.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099147.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0269.222] GetFileType (hFile=0x19c) returned 0x1 [0269.223] CloseHandle (hObject=0x19c) returned 1 [0269.223] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0269.223] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099147.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099147.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5f39)) returned 1 [0269.223] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0269.224] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0269.224] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099147.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099147.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5f39)) returned 1 [0269.224] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0269.224] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0269.224] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0269.225] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4752, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0099148.JPG", cAlternateFileName="")) returned 1 [0269.225] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0269.225] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0269.225] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0269.225] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0269.225] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0269.226] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0269.227] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099148.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099148.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0269.588] GetFileType (hFile=0x1e8) returned 0x1 [0269.589] CloseHandle (hObject=0x1e8) returned 1 [0269.589] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0269.589] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099148.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099148.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4752)) returned 1 [0269.590] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0269.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0269.590] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099148.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099148.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4752)) returned 1 [0269.590] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0269.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0269.590] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0269.590] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11dfe, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0099149.WMF", cAlternateFileName="")) returned 1 [0269.591] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0269.591] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0269.591] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0269.591] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0269.591] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0269.591] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0269.592] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099149.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099149.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0269.592] GetFileType (hFile=0x1e8) returned 0x1 [0269.593] CloseHandle (hObject=0x1e8) returned 1 [0269.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0269.594] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099149.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099149.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11dfe)) returned 1 [0269.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0269.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0269.594] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099149.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099149.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11dfe)) returned 1 [0269.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0269.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0269.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0269.595] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x559a, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0099150.JPG", cAlternateFileName="")) returned 1 [0269.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0269.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0269.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0269.595] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0269.595] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0269.595] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0269.596] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099150.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0269.597] GetFileType (hFile=0x1e8) returned 0x1 [0269.597] CloseHandle (hObject=0x1e8) returned 1 [0269.598] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0269.598] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099150.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x559a)) returned 1 [0269.598] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0269.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0269.599] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099150.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x559a)) returned 1 [0269.599] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0269.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0269.599] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0269.599] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x65e6, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0099151.WMF", cAlternateFileName="")) returned 1 [0269.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0269.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0269.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0269.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0269.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0269.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0269.601] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099151.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0269.602] GetFileType (hFile=0x1e8) returned 0x1 [0269.603] CloseHandle (hObject=0x1e8) returned 1 [0269.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0269.604] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099151.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x65e6)) returned 1 [0269.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0269.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0269.604] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099151.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x65e6)) returned 1 [0269.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0269.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0269.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0269.605] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2dae, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0099152.JPG", cAlternateFileName="")) returned 1 [0269.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0269.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0269.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0269.606] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0269.606] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0269.606] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0269.607] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099152.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0269.607] GetFileType (hFile=0x1e8) returned 0x1 [0269.608] CloseHandle (hObject=0x1e8) returned 1 [0269.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0269.609] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099152.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2dae)) returned 1 [0269.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0269.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0269.609] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099152.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2dae)) returned 1 [0269.610] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0269.610] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0269.610] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0269.610] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3632, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0099153.WMF", cAlternateFileName="")) returned 1 [0269.610] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0269.610] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0269.610] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0269.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0269.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0269.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0269.612] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099153.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0269.698] GetFileType (hFile=0x198) returned 0x1 [0269.698] CloseHandle (hObject=0x198) returned 1 [0269.700] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0269.700] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099153.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3632)) returned 1 [0269.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0269.701] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0269.701] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099153.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3632)) returned 1 [0269.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0269.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0269.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0269.702] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b11, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0099154.JPG", cAlternateFileName="")) returned 1 [0269.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0269.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0269.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0269.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0269.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0269.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0270.132] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099154.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0270.133] GetFileType (hFile=0x198) returned 0x1 [0270.134] CloseHandle (hObject=0x198) returned 1 [0270.135] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0270.135] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099154.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b11)) returned 1 [0270.135] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0270.135] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0270.135] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099154.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b11)) returned 1 [0270.136] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0270.136] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0270.136] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0270.136] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x227a, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0099155.JPG", cAlternateFileName="")) returned 1 [0270.136] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0270.136] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0270.137] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0270.137] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0270.137] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0270.137] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0270.138] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099155.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0270.138] GetFileType (hFile=0x198) returned 0x1 [0270.139] CloseHandle (hObject=0x198) returned 1 [0270.140] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0270.140] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099155.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x227a)) returned 1 [0270.140] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0270.140] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0270.140] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099155.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x227a)) returned 1 [0270.141] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0270.141] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0270.141] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0270.141] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3682, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0099156.JPG", cAlternateFileName="")) returned 1 [0270.141] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0270.141] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0270.142] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0270.142] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0270.142] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0270.142] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0270.143] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099156.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0270.144] GetFileType (hFile=0x198) returned 0x1 [0270.144] CloseHandle (hObject=0x198) returned 1 [0270.145] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0270.145] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099156.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3682)) returned 1 [0270.145] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0270.146] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0270.146] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099156.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3682)) returned 1 [0270.146] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0270.146] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0270.146] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0270.147] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x25c7, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0099157.JPG", cAlternateFileName="")) returned 1 [0270.147] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0270.147] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0270.147] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0270.147] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0270.147] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0270.148] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0270.149] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099157.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0270.150] GetFileType (hFile=0x198) returned 0x1 [0270.151] CloseHandle (hObject=0x198) returned 1 [0270.151] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0270.151] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099157.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x25c7)) returned 1 [0270.152] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0270.152] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0270.152] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099157.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x25c7)) returned 1 [0270.152] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0270.152] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0270.153] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0270.153] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6630, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0099158.WMF", cAlternateFileName="")) returned 1 [0270.153] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0270.153] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0270.153] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0270.154] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0270.154] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0270.154] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0270.155] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099158.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0270.155] GetFileType (hFile=0x198) returned 0x1 [0270.156] CloseHandle (hObject=0x198) returned 1 [0270.157] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0270.157] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099158.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6630)) returned 1 [0270.157] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0270.157] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0270.157] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099158.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6630)) returned 1 [0270.158] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0270.158] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0270.158] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0270.158] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6b9a, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0099159.WMF", cAlternateFileName="")) returned 1 [0270.158] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0270.159] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0270.159] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0270.159] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0270.159] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0270.159] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0270.160] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099159.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0270.161] GetFileType (hFile=0x198) returned 0x1 [0270.161] CloseHandle (hObject=0x198) returned 1 [0270.162] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0270.162] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099159.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6b9a)) returned 1 [0270.163] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0270.163] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0270.163] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099159.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6b9a)) returned 1 [0270.163] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0270.163] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0270.163] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0270.164] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b29, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0099160.JPG", cAlternateFileName="")) returned 1 [0270.164] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0270.164] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0270.164] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0270.164] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0270.164] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0270.438] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0270.651] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099160.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0270.651] GetFileType (hFile=0x174) returned 0x1 [0270.652] CloseHandle (hObject=0x174) returned 1 [0270.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0270.653] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099160.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b29)) returned 1 [0270.653] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0270.653] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0270.653] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099160.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b29)) returned 1 [0270.653] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0270.654] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0270.654] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0270.654] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bf2, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0099161.JPG", cAlternateFileName="")) returned 1 [0270.654] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0270.654] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0270.654] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0270.654] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0270.655] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0270.655] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0270.655] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099161.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0270.656] GetFileType (hFile=0x174) returned 0x1 [0270.656] CloseHandle (hObject=0x174) returned 1 [0270.657] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0270.657] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099161.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bf2)) returned 1 [0270.657] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0270.657] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0270.658] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099161.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bf2)) returned 1 [0270.658] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0270.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0270.658] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0270.658] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4cc8, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0099162.JPG", cAlternateFileName="")) returned 1 [0270.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0270.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0270.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0270.659] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0270.659] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0270.659] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0270.660] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099162.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0270.660] GetFileType (hFile=0x174) returned 0x1 [0270.660] CloseHandle (hObject=0x174) returned 1 [0270.661] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0270.661] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099162.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4cc8)) returned 1 [0270.661] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0270.661] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0270.661] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099162.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4cc8)) returned 1 [0270.662] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0270.662] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0270.662] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0270.662] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5754, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0099163.WMF", cAlternateFileName="")) returned 1 [0270.662] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0270.662] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0270.662] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0270.662] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0270.662] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0270.663] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0270.663] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099163.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0270.664] GetFileType (hFile=0x174) returned 0x1 [0270.665] CloseHandle (hObject=0x174) returned 1 [0270.665] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0270.665] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099163.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5754)) returned 1 [0270.665] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0270.666] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0270.666] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099163.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5754)) returned 1 [0270.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0270.666] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0270.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0270.666] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x55ba, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0099164.WMF", cAlternateFileName="")) returned 1 [0270.666] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0270.667] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0270.667] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0270.667] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0270.667] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0270.667] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0270.668] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099164.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0270.668] GetFileType (hFile=0x174) returned 0x1 [0270.669] CloseHandle (hObject=0x174) returned 1 [0270.670] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0270.670] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099164.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x55ba)) returned 1 [0270.670] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0270.670] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0270.670] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099164.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x55ba)) returned 1 [0270.670] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0270.671] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0270.671] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0270.671] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc53a, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0099165.JPG", cAlternateFileName="")) returned 1 [0270.671] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0270.671] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0270.671] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0270.671] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0270.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0270.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0270.672] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099165.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0270.673] GetFileType (hFile=0x174) returned 0x1 [0270.673] CloseHandle (hObject=0x174) returned 1 [0270.674] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0270.674] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099165.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc53a)) returned 1 [0270.674] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0270.674] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0270.674] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099165.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc53a)) returned 1 [0270.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0270.675] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0270.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0270.675] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfcff, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0099166.JPG", cAlternateFileName="")) returned 1 [0270.675] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0270.675] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0270.675] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0270.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0270.676] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0270.676] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0270.676] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099166.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0270.677] GetFileType (hFile=0x174) returned 0x1 [0270.677] CloseHandle (hObject=0x174) returned 1 [0270.677] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0270.677] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099166.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfcff)) returned 1 [0270.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0270.678] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0270.678] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099166.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfcff)) returned 1 [0270.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0270.678] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0270.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0270.678] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xabad, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0099167.JPG", cAlternateFileName="")) returned 1 [0270.679] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0270.679] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0270.679] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0270.679] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0270.679] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0270.679] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0270.680] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099167.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0270.680] GetFileType (hFile=0x174) returned 0x1 [0270.681] CloseHandle (hObject=0x174) returned 1 [0270.682] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0270.682] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099167.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xabad)) returned 1 [0270.682] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0270.682] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0270.682] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099167.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xabad)) returned 1 [0270.682] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0270.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0270.683] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0270.683] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ed3, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0099168.JPG", cAlternateFileName="")) returned 1 [0270.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0270.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0270.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0270.683] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0270.683] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0270.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0270.684] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099168.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0270.685] GetFileType (hFile=0x174) returned 0x1 [0270.685] CloseHandle (hObject=0x174) returned 1 [0270.686] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0270.686] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099168.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ed3)) returned 1 [0270.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0270.686] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0270.686] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099168.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ed3)) returned 1 [0270.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0270.687] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0270.687] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0270.687] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27d0, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0099169.WMF", cAlternateFileName="")) returned 1 [0270.687] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0270.687] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0270.687] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0270.687] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0270.687] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0270.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0270.688] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099169.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099169.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0270.688] GetFileType (hFile=0x174) returned 0x1 [0270.689] CloseHandle (hObject=0x174) returned 1 [0270.689] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0270.690] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099169.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099169.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27d0)) returned 1 [0270.690] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0270.690] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0270.690] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099169.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099169.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27d0)) returned 1 [0270.690] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0270.690] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0270.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0270.691] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5ee4, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0099170.WMF", cAlternateFileName="")) returned 1 [0270.691] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0270.691] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0270.691] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0270.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0270.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0270.692] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0270.692] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099170.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0270.693] GetFileType (hFile=0x174) returned 0x1 [0270.693] CloseHandle (hObject=0x174) returned 1 [0270.693] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0270.694] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099170.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5ee4)) returned 1 [0270.694] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0270.694] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0270.694] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099170.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5ee4)) returned 1 [0270.694] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0270.694] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0270.694] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0270.695] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2232, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0099171.WMF", cAlternateFileName="")) returned 1 [0270.695] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0270.695] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0270.695] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0270.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0270.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0270.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0270.696] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099171.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099171.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0270.934] GetFileType (hFile=0x21c) returned 0x1 [0270.934] CloseHandle (hObject=0x21c) returned 1 [0270.935] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0270.935] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099171.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099171.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2232)) returned 1 [0270.935] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0270.935] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0270.935] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099171.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099171.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2232)) returned 1 [0270.936] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0270.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0270.936] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0270.936] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe392, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0099172.WMF", cAlternateFileName="")) returned 1 [0270.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0270.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0270.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0270.937] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0270.937] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0270.937] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0271.157] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099172.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099172.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0271.157] GetFileType (hFile=0x19c) returned 0x1 [0271.158] CloseHandle (hObject=0x19c) returned 1 [0271.158] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0271.158] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099172.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099172.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe392)) returned 1 [0271.159] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0271.159] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0271.159] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099172.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099172.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe392)) returned 1 [0271.159] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0271.159] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0271.159] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0271.159] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9114, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0099173.WMF", cAlternateFileName="")) returned 1 [0271.159] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0271.160] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0271.160] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0271.160] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0271.160] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0271.160] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0271.161] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099173.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099173.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0271.161] GetFileType (hFile=0x19c) returned 0x1 [0271.162] CloseHandle (hObject=0x19c) returned 1 [0271.162] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0271.162] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099173.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099173.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9114)) returned 1 [0271.163] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0271.163] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0271.163] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099173.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099173.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9114)) returned 1 [0271.163] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0271.163] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0271.163] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0271.163] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1846, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0099174.WMF", cAlternateFileName="")) returned 1 [0271.164] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0271.164] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0271.164] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0271.164] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0271.165] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0271.165] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0271.166] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099174.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099174.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0271.166] GetFileType (hFile=0x19c) returned 0x1 [0271.167] CloseHandle (hObject=0x19c) returned 1 [0271.167] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0271.167] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099174.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099174.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1846)) returned 1 [0271.168] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0271.168] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0271.168] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099174.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099174.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1846)) returned 1 [0271.168] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0271.168] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0271.168] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0271.169] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2610, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0099175.WMF", cAlternateFileName="")) returned 1 [0271.169] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0271.169] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0271.169] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0271.169] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0271.169] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0271.169] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0271.170] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099175.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099175.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0271.170] GetFileType (hFile=0x19c) returned 0x1 [0271.171] CloseHandle (hObject=0x19c) returned 1 [0271.172] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0271.172] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099175.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099175.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2610)) returned 1 [0271.172] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0271.172] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0271.172] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099175.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099175.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2610)) returned 1 [0271.172] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0271.172] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0271.172] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0271.173] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9b8, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0099176.WMF", cAlternateFileName="")) returned 1 [0271.173] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0271.173] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0271.173] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0271.173] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0271.173] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0271.173] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0271.174] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099176.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099176.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0271.174] GetFileType (hFile=0x19c) returned 0x1 [0271.175] CloseHandle (hObject=0x19c) returned 1 [0271.175] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0271.175] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099176.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099176.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9b8)) returned 1 [0271.175] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0271.176] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0271.176] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099176.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099176.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9b8)) returned 1 [0271.176] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0271.176] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0271.176] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0271.176] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x150a, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0099177.WMF", cAlternateFileName="")) returned 1 [0271.176] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0271.176] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0271.177] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0271.177] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0271.177] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0271.177] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0271.178] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099177.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099177.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0271.178] GetFileType (hFile=0x19c) returned 0x1 [0271.178] CloseHandle (hObject=0x19c) returned 1 [0271.179] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0271.179] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099177.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099177.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x150a)) returned 1 [0271.179] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0271.179] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0271.180] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099177.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099177.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x150a)) returned 1 [0271.180] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0271.212] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0271.213] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0271.213] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe16, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0099178.WMF", cAlternateFileName="")) returned 1 [0271.213] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0271.213] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0271.213] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0271.213] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0271.213] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0271.214] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0271.214] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099178.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099178.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0271.215] GetFileType (hFile=0x19c) returned 0x1 [0271.215] CloseHandle (hObject=0x19c) returned 1 [0271.216] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0271.216] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099178.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099178.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe16)) returned 1 [0271.216] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0271.216] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0271.217] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099178.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099178.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe16)) returned 1 [0271.217] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0271.217] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0271.217] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0271.217] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x23c2, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0099179.WMF", cAlternateFileName="")) returned 1 [0271.217] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0271.217] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0271.217] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0271.218] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0271.218] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0271.218] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0271.219] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099179.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099179.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0271.219] GetFileType (hFile=0x19c) returned 0x1 [0271.219] CloseHandle (hObject=0x19c) returned 1 [0271.220] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0271.220] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099179.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099179.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x23c2)) returned 1 [0271.220] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0271.220] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0271.220] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099179.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099179.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x23c2)) returned 1 [0271.221] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0271.221] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0271.221] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0271.221] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd42, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0099180.WMF", cAlternateFileName="")) returned 1 [0271.221] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0271.221] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0271.221] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0271.222] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0271.222] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0271.222] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0271.223] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099180.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099180.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0271.223] GetFileType (hFile=0x19c) returned 0x1 [0271.224] CloseHandle (hObject=0x19c) returned 1 [0271.224] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0271.224] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099180.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099180.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd42)) returned 1 [0271.224] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0271.225] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0271.225] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099180.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099180.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd42)) returned 1 [0271.225] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0271.225] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0271.225] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0271.225] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ae, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0099181.WMF", cAlternateFileName="")) returned 1 [0271.225] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0271.226] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0271.226] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0271.226] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0271.226] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0271.226] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0271.544] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099181.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099181.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0271.545] GetFileType (hFile=0x19c) returned 0x1 [0271.545] CloseHandle (hObject=0x19c) returned 1 [0271.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0271.546] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099181.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099181.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ae)) returned 1 [0271.546] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0271.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0271.547] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099181.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099181.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ae)) returned 1 [0271.547] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0271.547] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0271.547] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0271.547] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf00, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0099182.WMF", cAlternateFileName="")) returned 1 [0271.547] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0271.547] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0271.547] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0271.548] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0271.548] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0271.548] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0271.548] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099182.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099182.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0271.549] GetFileType (hFile=0x19c) returned 0x1 [0271.549] CloseHandle (hObject=0x19c) returned 1 [0271.550] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0271.550] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099182.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099182.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf00)) returned 1 [0271.550] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0271.550] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0271.550] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099182.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099182.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf00)) returned 1 [0271.551] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0271.551] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0271.551] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0271.551] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1352, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0099183.WMF", cAlternateFileName="")) returned 1 [0271.551] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0271.551] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0271.551] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0271.551] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0271.551] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0271.551] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0271.552] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099183.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099183.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0271.552] GetFileType (hFile=0x19c) returned 0x1 [0271.553] CloseHandle (hObject=0x19c) returned 1 [0271.553] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0271.554] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099183.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099183.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1352)) returned 1 [0271.554] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0271.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0271.554] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099183.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099183.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1352)) returned 1 [0271.554] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0271.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0271.554] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0271.554] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1016, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0099184.WMF", cAlternateFileName="")) returned 1 [0271.555] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0271.555] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0271.555] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0271.555] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0271.555] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0271.556] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0271.556] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099184.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099184.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0271.556] GetFileType (hFile=0x19c) returned 0x1 [0271.557] CloseHandle (hObject=0x19c) returned 1 [0271.557] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0271.557] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099184.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099184.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1016)) returned 1 [0271.558] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0271.558] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0271.558] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099184.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099184.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1016)) returned 1 [0271.558] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0271.558] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0271.558] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0271.558] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe56c811, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe56c811, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcd2, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0099185.JPG", cAlternateFileName="")) returned 1 [0271.558] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0271.558] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0271.558] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0271.559] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0271.559] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0271.559] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0271.559] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099185.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099185.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0271.560] GetFileType (hFile=0x19c) returned 0x1 [0271.560] CloseHandle (hObject=0x19c) returned 1 [0271.561] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0271.561] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099185.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099185.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe56c811, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe56c811, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcd2)) returned 1 [0271.561] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0271.561] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0271.561] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099185.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099185.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe56c811, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe56c811, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcd2)) returned 1 [0271.561] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0271.561] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0271.561] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0271.562] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe56c811, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe56c811, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe56c811, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4162, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0099186.JPG", cAlternateFileName="")) returned 1 [0271.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0271.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0271.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0271.562] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0271.562] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0271.562] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0271.563] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099186.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099186.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0271.563] GetFileType (hFile=0x19c) returned 0x1 [0271.564] CloseHandle (hObject=0x19c) returned 1 [0271.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0271.564] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099186.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099186.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe56c811, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe56c811, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe56c811, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4162)) returned 1 [0271.564] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0271.565] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0271.565] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099186.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099186.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe56c811, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe56c811, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe56c811, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4162)) returned 1 [0271.565] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0271.565] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0271.565] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0271.565] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe18c9a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe18c9a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe56c811, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5fd0, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0099187.JPG", cAlternateFileName="")) returned 1 [0271.565] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0271.566] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0271.566] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0271.566] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0271.566] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0271.566] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0271.567] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099187.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099187.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0271.567] GetFileType (hFile=0x19c) returned 0x1 [0271.567] CloseHandle (hObject=0x19c) returned 1 [0271.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0271.568] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099187.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099187.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe18c9a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe18c9a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe56c811, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5fd0)) returned 1 [0271.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0271.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0271.568] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099187.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099187.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe18c9a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe18c9a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe56c811, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5fd0)) returned 1 [0271.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0271.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0271.569] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0271.569] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe18c9a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe18c9a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe56c811, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2378, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0099188.JPG", cAlternateFileName="")) returned 1 [0271.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0271.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0271.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0271.569] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0271.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0271.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0271.571] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099188.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099188.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0271.571] GetFileType (hFile=0x19c) returned 0x1 [0271.572] CloseHandle (hObject=0x19c) returned 1 [0271.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0271.573] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099188.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099188.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe18c9a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe18c9a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe56c811, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2378)) returned 1 [0271.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0271.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0271.573] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099188.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099188.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe18c9a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe18c9a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe56c811, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2378)) returned 1 [0271.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0271.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0271.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0271.574] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe18c9a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f8c, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0099189.JPG", cAlternateFileName="")) returned 1 [0271.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0271.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0271.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0271.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0271.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0271.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0271.576] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099189.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099189.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0271.576] GetFileType (hFile=0x19c) returned 0x1 [0271.577] CloseHandle (hObject=0x19c) returned 1 [0271.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0271.577] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099189.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099189.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe18c9a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f8c)) returned 1 [0271.578] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0271.578] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0271.578] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099189.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099189.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe18c9a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f8c)) returned 1 [0271.578] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0271.578] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0271.579] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0271.579] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xab74, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0099190.JPG", cAlternateFileName="")) returned 1 [0271.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0271.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0271.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0271.579] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0271.579] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0271.579] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0271.580] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099190.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099190.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0271.581] GetFileType (hFile=0x19c) returned 0x1 [0271.581] CloseHandle (hObject=0x19c) returned 1 [0271.582] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0271.582] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099190.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099190.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xab74)) returned 1 [0271.582] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0271.582] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0271.582] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099190.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099190.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xab74)) returned 1 [0271.583] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0271.583] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0271.583] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0271.583] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe56c811, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf39f, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0099191.JPG", cAlternateFileName="")) returned 1 [0271.583] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0271.583] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0271.583] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0271.584] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0271.584] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0271.584] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0271.585] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099191.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099191.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0271.803] GetFileType (hFile=0x1c0) returned 0x1 [0271.804] CloseHandle (hObject=0x1c0) returned 1 [0271.806] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0271.806] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099191.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099191.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe56c811, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf39f)) returned 1 [0271.807] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0271.807] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0271.807] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099191.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099191.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe56c811, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf39f)) returned 1 [0271.808] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0271.808] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0271.808] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0271.808] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe56c811, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x462c, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0099192.GIF", cAlternateFileName="")) returned 1 [0271.808] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0271.808] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0271.808] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0271.808] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0271.809] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0271.809] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0271.809] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099192.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099192.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0271.810] GetFileType (hFile=0x1c0) returned 0x1 [0271.810] CloseHandle (hObject=0x1c0) returned 1 [0271.811] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0271.811] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099192.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099192.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe56c811, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x462c)) returned 1 [0271.811] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0271.811] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0271.811] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099192.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099192.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe56c811, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x462c)) returned 1 [0271.811] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0271.811] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0271.812] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0271.812] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8ada, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0099193.GIF", cAlternateFileName="")) returned 1 [0271.812] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0271.812] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0271.812] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0271.812] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0271.812] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0271.812] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0271.813] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099193.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099193.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0271.813] GetFileType (hFile=0x1c0) returned 0x1 [0271.814] CloseHandle (hObject=0x1c0) returned 1 [0271.814] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0271.814] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099193.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099193.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8ada)) returned 1 [0271.814] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0271.814] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0271.815] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099193.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099193.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8ada)) returned 1 [0271.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0271.815] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0271.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0271.815] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe18c9a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x62b1, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0099194.GIF", cAlternateFileName="")) returned 1 [0271.815] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0271.815] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0271.815] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0271.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0271.816] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0271.816] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0271.817] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099194.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099194.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0271.817] GetFileType (hFile=0x1c0) returned 0x1 [0271.817] CloseHandle (hObject=0x1c0) returned 1 [0271.818] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0271.818] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099194.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099194.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe18c9a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x62b1)) returned 1 [0271.818] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0271.818] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0271.818] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099194.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099194.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe18c9a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x62b1)) returned 1 [0271.819] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0271.819] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0271.819] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0271.819] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4dd3, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0099195.GIF", cAlternateFileName="")) returned 1 [0271.819] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0271.819] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0271.819] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0271.819] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0271.819] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0271.820] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0271.820] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099195.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099195.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0271.821] GetFileType (hFile=0x1c0) returned 0x1 [0271.821] CloseHandle (hObject=0x1c0) returned 1 [0271.822] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0271.822] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099195.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099195.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4dd3)) returned 1 [0271.822] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0271.822] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0271.822] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099195.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099195.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4dd3)) returned 1 [0271.823] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0271.823] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0271.823] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0271.823] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3801, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0099196.GIF", cAlternateFileName="")) returned 1 [0271.823] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0271.823] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0271.823] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0271.823] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0271.823] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0271.824] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0271.824] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099196.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099196.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0271.825] GetFileType (hFile=0x1c0) returned 0x1 [0271.825] CloseHandle (hObject=0x1c0) returned 1 [0271.826] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0271.826] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099196.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099196.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3801)) returned 1 [0271.826] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0271.826] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0271.826] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099196.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099196.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3801)) returned 1 [0271.826] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0271.826] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0271.826] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0271.826] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a92, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0099197.GIF", cAlternateFileName="")) returned 1 [0271.827] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0271.827] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0271.827] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0271.827] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0271.827] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0271.827] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0271.828] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099197.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099197.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0271.828] GetFileType (hFile=0x1c0) returned 0x1 [0271.828] CloseHandle (hObject=0x1c0) returned 1 [0271.829] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0271.829] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099197.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099197.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a92)) returned 1 [0271.829] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0271.829] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0271.829] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099197.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099197.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a92)) returned 1 [0271.829] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0271.830] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0271.830] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0271.830] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x148b, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0099198.GIF", cAlternateFileName="")) returned 1 [0271.830] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0271.830] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0271.830] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0271.830] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0271.830] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0271.830] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0271.831] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099198.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099198.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0271.831] GetFileType (hFile=0x1c0) returned 0x1 [0271.832] CloseHandle (hObject=0x1c0) returned 1 [0271.832] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0271.832] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099198.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099198.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x148b)) returned 1 [0271.832] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0271.833] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0271.833] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099198.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099198.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x148b)) returned 1 [0271.833] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0271.833] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0271.833] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0271.833] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x84b7, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0099199.GIF", cAlternateFileName="")) returned 1 [0271.833] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0271.833] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0271.834] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0271.834] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0271.834] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0271.834] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0271.835] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099199.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099199.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0271.835] GetFileType (hFile=0x1c0) returned 0x1 [0271.836] CloseHandle (hObject=0x1c0) returned 1 [0271.837] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0271.837] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099199.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099199.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x84b7)) returned 1 [0271.837] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0271.837] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0271.837] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099199.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099199.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x84b7)) returned 1 [0271.837] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0271.837] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0271.838] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0271.838] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe56c811, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe56c811, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x409f, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0099200.GIF", cAlternateFileName="")) returned 1 [0271.838] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0271.838] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0271.838] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0271.838] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0271.838] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0271.838] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0271.839] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099200.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099200.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0271.840] GetFileType (hFile=0x1c0) returned 0x1 [0271.840] CloseHandle (hObject=0x1c0) returned 1 [0271.840] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0271.841] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099200.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099200.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe56c811, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe56c811, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x409f)) returned 1 [0271.841] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0271.841] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0271.841] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099200.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099200.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe56c811, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe56c811, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x409f)) returned 1 [0271.841] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0271.841] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0271.841] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0271.841] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc8c9, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0099201.GIF", cAlternateFileName="")) returned 1 [0271.842] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0271.842] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0271.842] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0271.842] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0271.842] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0271.842] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0271.843] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099201.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099201.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0271.843] GetFileType (hFile=0x1c0) returned 0x1 [0271.844] CloseHandle (hObject=0x1c0) returned 1 [0271.844] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0271.844] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099201.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099201.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc8c9)) returned 1 [0271.844] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0271.844] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0271.844] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099201.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099201.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc8c9)) returned 1 [0271.845] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0271.845] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0271.845] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0271.845] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1367, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0099202.GIF", cAlternateFileName="")) returned 1 [0271.845] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0271.845] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0271.845] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0271.845] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0271.846] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0271.846] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0271.846] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099202.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099202.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0271.847] GetFileType (hFile=0x1c0) returned 0x1 [0271.847] CloseHandle (hObject=0x1c0) returned 1 [0271.848] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0271.848] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099202.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099202.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1367)) returned 1 [0271.848] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0271.848] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0271.848] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099202.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099202.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1367)) returned 1 [0271.848] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0271.848] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0271.849] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0271.849] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe56c811, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe56c811, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf40, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0099203.GIF", cAlternateFileName="")) returned 1 [0271.849] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0271.849] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0271.849] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0271.849] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0271.849] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0271.849] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0271.850] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099203.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099203.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0271.850] GetFileType (hFile=0x1c0) returned 0x1 [0271.851] CloseHandle (hObject=0x1c0) returned 1 [0271.851] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0271.851] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099203.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099203.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe56c811, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe56c811, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf40)) returned 1 [0271.851] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0271.851] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0271.851] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099203.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099203.gif"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe56c811, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe56c811, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf40)) returned 1 [0271.852] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0271.852] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0271.852] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0271.852] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe56c811, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe56c811, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45be, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0099204.WMF", cAlternateFileName="")) returned 1 [0271.852] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0271.852] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0271.852] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0271.852] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0271.852] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0271.852] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0272.314] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099204.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099204.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0272.315] GetFileType (hFile=0x19c) returned 0x1 [0272.315] CloseHandle (hObject=0x19c) returned 1 [0272.315] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0272.316] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099204.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099204.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe56c811, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe56c811, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45be)) returned 1 [0272.316] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0272.316] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0272.316] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099204.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099204.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe56c811, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe56c811, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45be)) returned 1 [0272.316] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0272.316] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0272.316] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0272.316] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45be, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0099205.WMF", cAlternateFileName="")) returned 1 [0272.316] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0272.317] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0272.317] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0272.317] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0272.317] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0272.317] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0272.318] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099205.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099205.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0272.318] GetFileType (hFile=0x19c) returned 0x1 [0272.318] CloseHandle (hObject=0x19c) returned 1 [0272.319] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0272.319] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099205.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099205.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45be)) returned 1 [0272.319] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0272.319] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0272.319] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099205.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099205.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45be)) returned 1 [0272.319] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0272.319] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0272.320] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0272.320] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x133f8, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0101856.BMP", cAlternateFileName="")) returned 1 [0272.320] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0272.320] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0272.320] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0272.320] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0272.320] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0272.321] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0272.322] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101856.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101856.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0272.322] GetFileType (hFile=0x19c) returned 0x1 [0272.323] CloseHandle (hObject=0x19c) returned 1 [0272.323] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0272.323] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101856.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101856.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x133f8)) returned 1 [0272.323] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0272.323] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0272.323] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101856.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101856.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x133f8)) returned 1 [0272.324] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0272.324] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0272.324] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0272.324] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0101857.BMP", cAlternateFileName="")) returned 1 [0272.324] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0272.324] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0272.324] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0272.324] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0272.324] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0272.325] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0272.325] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101857.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101857.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0272.325] GetFileType (hFile=0x19c) returned 0x1 [0272.326] CloseHandle (hObject=0x19c) returned 1 [0272.326] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0272.326] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101857.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101857.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8)) returned 1 [0272.327] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0272.327] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0272.327] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101857.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101857.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8)) returned 1 [0272.327] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0272.327] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0272.327] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0272.327] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0101858.BMP", cAlternateFileName="")) returned 1 [0272.327] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0272.327] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0272.328] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0272.328] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0272.328] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0272.328] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0272.328] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101858.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101858.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0272.329] GetFileType (hFile=0x19c) returned 0x1 [0272.329] CloseHandle (hObject=0x19c) returned 1 [0272.329] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0272.329] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101858.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101858.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8)) returned 1 [0272.330] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0272.330] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0272.330] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101858.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101858.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8)) returned 1 [0272.330] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0272.330] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0272.330] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0272.330] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0101859.BMP", cAlternateFileName="")) returned 1 [0272.330] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0272.331] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0272.331] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0272.331] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0272.331] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0272.331] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0272.331] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101859.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101859.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0272.332] GetFileType (hFile=0x19c) returned 0x1 [0272.332] CloseHandle (hObject=0x19c) returned 1 [0272.332] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0272.333] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101859.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101859.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0)) returned 1 [0272.333] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0272.333] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0272.333] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101859.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101859.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0)) returned 1 [0272.333] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0272.333] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0272.333] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0272.333] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0101860.BMP", cAlternateFileName="")) returned 1 [0272.334] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0272.334] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0272.334] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0272.334] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0272.334] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0272.334] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0272.335] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101860.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101860.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0272.335] GetFileType (hFile=0x19c) returned 0x1 [0272.335] CloseHandle (hObject=0x19c) returned 1 [0272.336] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0272.336] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101860.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101860.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8)) returned 1 [0272.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0272.336] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0272.353] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101860.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101860.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8)) returned 1 [0272.353] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0272.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0272.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0272.354] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0101861.BMP", cAlternateFileName="")) returned 1 [0272.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0272.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0272.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0272.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0272.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0272.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0272.355] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101861.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101861.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0272.356] GetFileType (hFile=0x19c) returned 0x1 [0272.356] CloseHandle (hObject=0x19c) returned 1 [0272.356] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0272.357] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101861.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101861.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8)) returned 1 [0272.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0272.357] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0272.357] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101861.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101861.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8)) returned 1 [0272.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0272.357] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0272.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0272.357] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0101862.BMP", cAlternateFileName="")) returned 1 [0272.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0272.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0272.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0272.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0272.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0272.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0272.359] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101862.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101862.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0272.359] GetFileType (hFile=0x19c) returned 0x1 [0272.360] CloseHandle (hObject=0x19c) returned 1 [0272.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0272.360] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101862.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101862.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8)) returned 1 [0272.360] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0272.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0272.360] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101862.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101862.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8)) returned 1 [0272.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0272.361] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0272.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0272.361] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0101863.BMP", cAlternateFileName="")) returned 1 [0272.361] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0272.361] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0272.361] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0272.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0272.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0272.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0272.362] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101863.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101863.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0272.363] GetFileType (hFile=0x19c) returned 0x1 [0272.363] CloseHandle (hObject=0x19c) returned 1 [0272.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0272.364] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101863.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101863.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8)) returned 1 [0272.364] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0272.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0272.364] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101863.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101863.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8)) returned 1 [0272.364] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0272.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0272.365] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0272.365] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0101864.BMP", cAlternateFileName="")) returned 1 [0272.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0272.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0272.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0272.365] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0272.365] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0272.366] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0272.366] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101864.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101864.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0272.367] GetFileType (hFile=0x19c) returned 0x1 [0272.652] CloseHandle (hObject=0x19c) returned 1 [0272.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0272.653] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101864.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101864.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0)) returned 1 [0272.653] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0272.653] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0272.653] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101864.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101864.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0)) returned 1 [0272.654] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0272.654] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0272.654] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0272.654] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0101865.BMP", cAlternateFileName="")) returned 1 [0272.654] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0272.654] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0272.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0272.655] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0272.655] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0272.655] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0272.822] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101865.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101865.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0272.823] GetFileType (hFile=0x1e8) returned 0x1 [0272.823] CloseHandle (hObject=0x1e8) returned 1 [0272.824] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0272.824] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101865.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101865.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8)) returned 1 [0272.824] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0272.824] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0272.824] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101865.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101865.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8)) returned 1 [0272.825] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0272.825] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0272.825] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0272.825] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0101866.BMP", cAlternateFileName="")) returned 1 [0272.825] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0272.825] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0272.826] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0272.826] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0272.826] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0272.826] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0272.827] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101866.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101866.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0272.827] GetFileType (hFile=0x1e8) returned 0x1 [0272.828] CloseHandle (hObject=0x1e8) returned 1 [0272.829] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0272.829] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101866.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101866.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8)) returned 1 [0272.829] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0272.829] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0272.829] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101866.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101866.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8)) returned 1 [0272.829] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0272.830] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0272.830] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0272.830] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7f68, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0101867.BMP", cAlternateFileName="")) returned 1 [0272.830] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0272.830] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0272.830] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0272.830] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0272.831] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0272.831] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0272.832] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101867.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101867.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0272.832] GetFileType (hFile=0x1e8) returned 0x1 [0272.833] CloseHandle (hObject=0x1e8) returned 1 [0272.833] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0272.833] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101867.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101867.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7f68)) returned 1 [0272.833] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0272.834] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0272.834] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101867.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101867.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7f68)) returned 1 [0272.834] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0272.834] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0272.834] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0272.834] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ee8, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0101980.WMF", cAlternateFileName="")) returned 1 [0272.834] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0272.835] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0272.835] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0272.835] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0272.835] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0272.835] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0272.836] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101980.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101980.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0272.837] GetFileType (hFile=0x1e8) returned 0x1 [0272.837] CloseHandle (hObject=0x1e8) returned 1 [0272.838] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0272.838] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101980.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101980.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ee8)) returned 1 [0272.838] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0272.838] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0272.838] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101980.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101980.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ee8)) returned 1 [0272.839] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0272.839] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0272.839] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0272.839] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3e74, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0102002.WMF", cAlternateFileName="")) returned 1 [0272.839] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0272.839] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0272.839] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0272.840] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0272.840] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0272.840] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0272.841] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102002.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102002.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0272.841] GetFileType (hFile=0x1e8) returned 0x1 [0272.842] CloseHandle (hObject=0x1e8) returned 1 [0272.842] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0272.842] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102002.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102002.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3e74)) returned 1 [0272.842] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0272.843] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0272.843] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102002.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102002.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3e74)) returned 1 [0272.843] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0272.843] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0272.843] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0272.843] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6978, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0102594.WMF", cAlternateFileName="")) returned 1 [0272.843] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0272.844] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0272.844] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0272.844] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0272.844] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0272.844] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0272.845] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102594.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102594.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0272.845] GetFileType (hFile=0x1e8) returned 0x1 [0272.846] CloseHandle (hObject=0x1e8) returned 1 [0272.846] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0272.846] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102594.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102594.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6978)) returned 1 [0272.847] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0272.847] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0272.847] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102594.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102594.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6978)) returned 1 [0272.847] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0272.847] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0272.847] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0272.848] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2bd0, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0102762.WMF", cAlternateFileName="")) returned 1 [0272.848] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0272.848] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0272.848] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0272.848] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0272.848] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0272.848] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0272.849] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102762.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102762.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0272.849] GetFileType (hFile=0x1e8) returned 0x1 [0272.850] CloseHandle (hObject=0x1e8) returned 1 [0272.850] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0272.850] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102762.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102762.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2bd0)) returned 1 [0272.851] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0272.851] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0272.851] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102762.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102762.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2bd0)) returned 1 [0272.851] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0272.851] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0272.851] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0272.851] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4290, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0102984.WMF", cAlternateFileName="")) returned 1 [0272.851] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0272.852] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0272.852] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0272.852] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0272.852] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0272.853] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0272.853] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102984.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102984.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0272.854] GetFileType (hFile=0x1e8) returned 0x1 [0272.854] CloseHandle (hObject=0x1e8) returned 1 [0272.854] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0272.854] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102984.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102984.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4290)) returned 1 [0272.855] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0272.855] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0272.855] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102984.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102984.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4290)) returned 1 [0272.855] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0272.855] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0272.855] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0272.855] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43c0, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0103058.WMF", cAlternateFileName="")) returned 1 [0272.855] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0272.855] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0272.855] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0272.856] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0272.856] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0272.856] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0272.856] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103058.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103058.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0272.856] GetFileType (hFile=0x1e8) returned 0x1 [0272.857] CloseHandle (hObject=0x1e8) returned 1 [0272.857] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0272.857] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103058.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103058.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43c0)) returned 1 [0272.858] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0272.858] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0272.858] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103058.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103058.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43c0)) returned 1 [0272.858] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0272.858] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0272.858] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0272.858] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3264, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0103262.WMF", cAlternateFileName="")) returned 1 [0272.858] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0272.858] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0272.858] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0272.859] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0272.859] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0272.859] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0272.859] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103262.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103262.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0272.859] GetFileType (hFile=0x1e8) returned 0x1 [0272.860] CloseHandle (hObject=0x1e8) returned 1 [0272.860] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0272.860] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103262.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103262.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3264)) returned 1 [0272.861] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0272.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0272.861] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103262.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103262.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3264)) returned 1 [0272.861] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0272.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0272.861] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0272.861] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaf94, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0103402.WMF", cAlternateFileName="")) returned 1 [0272.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0272.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0272.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0272.862] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0272.862] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0272.862] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0272.862] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103402.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103402.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0272.863] GetFileType (hFile=0x1e8) returned 0x1 [0272.863] CloseHandle (hObject=0x1e8) returned 1 [0272.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0272.864] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103402.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103402.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaf94)) returned 1 [0272.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0272.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0272.864] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103402.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103402.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaf94)) returned 1 [0272.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0272.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0272.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0272.864] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1714, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0103812.WMF", cAlternateFileName="")) returned 1 [0272.865] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0272.865] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0272.865] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0272.865] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0272.865] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0272.865] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0272.866] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103812.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103812.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0272.866] GetFileType (hFile=0x1e8) returned 0x1 [0272.866] CloseHandle (hObject=0x1e8) returned 1 [0272.867] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0272.867] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103812.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103812.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1714)) returned 1 [0272.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0272.867] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0272.867] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103812.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103812.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1714)) returned 1 [0272.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0272.867] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0273.102] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0273.102] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5c2c, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0103850.WMF", cAlternateFileName="")) returned 1 [0273.102] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0273.102] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0273.102] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0273.102] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0273.102] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0273.103] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0273.215] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103850.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103850.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0273.215] GetFileType (hFile=0x19c) returned 0x1 [0273.216] CloseHandle (hObject=0x19c) returned 1 [0273.216] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0273.216] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103850.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103850.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5c2c)) returned 1 [0273.216] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0273.216] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0273.216] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103850.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103850.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5c2c)) returned 1 [0273.217] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0273.217] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0273.217] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0273.217] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1434, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0105230.WMF", cAlternateFileName="")) returned 1 [0273.217] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0273.217] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0273.217] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0273.217] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0273.218] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0273.218] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0273.218] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105230.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105230.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0273.219] GetFileType (hFile=0x19c) returned 0x1 [0273.219] CloseHandle (hObject=0x19c) returned 1 [0273.220] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0273.220] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105230.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105230.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1434)) returned 1 [0273.220] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0273.220] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0273.220] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105230.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105230.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1434)) returned 1 [0273.220] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0273.220] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0273.221] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0273.221] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0105232.WMF", cAlternateFileName="")) returned 1 [0273.221] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0273.221] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0273.221] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0273.221] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0273.221] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0273.221] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0273.222] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105232.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105232.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0273.222] GetFileType (hFile=0x19c) returned 0x1 [0273.223] CloseHandle (hObject=0x19c) returned 1 [0273.223] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0273.223] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105232.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105232.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1600)) returned 1 [0273.223] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0273.224] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0273.224] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105232.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105232.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1600)) returned 1 [0273.224] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0273.224] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0273.224] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0273.224] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd74, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0105234.WMF", cAlternateFileName="")) returned 1 [0273.224] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0273.225] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0273.225] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0273.225] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0273.225] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0273.225] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0273.226] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105234.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105234.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0273.226] GetFileType (hFile=0x19c) returned 0x1 [0273.226] CloseHandle (hObject=0x19c) returned 1 [0273.227] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0273.227] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105234.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105234.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd74)) returned 1 [0273.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0273.227] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0273.227] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105234.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105234.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd74)) returned 1 [0273.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0273.228] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0273.228] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0273.228] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4314, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0105238.WMF", cAlternateFileName="")) returned 1 [0273.228] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0273.228] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0273.228] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0273.228] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0273.228] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0273.228] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0273.229] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105238.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105238.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0273.230] GetFileType (hFile=0x19c) returned 0x1 [0273.230] CloseHandle (hObject=0x19c) returned 1 [0273.230] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0273.231] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105238.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105238.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4314)) returned 1 [0273.231] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0273.231] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0273.231] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105238.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105238.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4314)) returned 1 [0273.231] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0273.231] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0273.231] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0273.231] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d0c, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0105240.WMF", cAlternateFileName="")) returned 1 [0273.231] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0273.231] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0273.232] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0273.232] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0273.232] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0273.232] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0273.232] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105240.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105240.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0273.233] GetFileType (hFile=0x19c) returned 0x1 [0273.233] CloseHandle (hObject=0x19c) returned 1 [0273.234] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0273.234] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105240.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105240.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d0c)) returned 1 [0273.234] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0273.234] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0273.234] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105240.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105240.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d0c)) returned 1 [0273.234] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0273.234] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0273.234] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0273.235] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2bdc, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0105244.WMF", cAlternateFileName="")) returned 1 [0273.235] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0273.235] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0273.235] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0273.235] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0273.235] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0273.235] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0273.236] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105244.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105244.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0273.236] GetFileType (hFile=0x19c) returned 0x1 [0273.237] CloseHandle (hObject=0x19c) returned 1 [0273.237] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0273.237] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105244.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105244.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2bdc)) returned 1 [0273.237] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0273.237] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0273.237] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105244.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105244.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2bdc)) returned 1 [0273.237] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0273.238] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0273.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0273.238] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b80, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0105246.WMF", cAlternateFileName="")) returned 1 [0273.238] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0273.238] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0273.238] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0273.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0273.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0273.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0273.239] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105246.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105246.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0273.239] GetFileType (hFile=0x19c) returned 0x1 [0273.239] CloseHandle (hObject=0x19c) returned 1 [0273.240] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0273.240] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105246.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105246.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b80)) returned 1 [0273.240] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0273.240] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0273.240] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105246.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105246.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b80)) returned 1 [0273.240] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0273.240] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0273.241] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0273.241] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1214, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0105250.WMF", cAlternateFileName="")) returned 1 [0273.241] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0273.241] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0273.241] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0273.241] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0273.241] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0273.241] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0273.241] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105250.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105250.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0273.242] GetFileType (hFile=0x19c) returned 0x1 [0273.242] CloseHandle (hObject=0x19c) returned 1 [0273.242] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0273.242] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105250.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105250.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1214)) returned 1 [0273.243] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0273.243] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0273.243] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105250.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105250.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1214)) returned 1 [0273.243] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0273.243] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0273.243] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0273.243] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1714, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0105266.WMF", cAlternateFileName="")) returned 1 [0273.243] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0273.243] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0273.243] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0273.243] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0273.243] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0273.244] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0273.244] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105266.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105266.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0273.244] GetFileType (hFile=0x19c) returned 0x1 [0273.245] CloseHandle (hObject=0x19c) returned 1 [0273.248] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0273.248] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105266.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105266.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1714)) returned 1 [0273.248] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0273.248] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0273.248] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105266.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105266.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1714)) returned 1 [0273.248] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0273.248] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0273.248] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0273.248] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4540, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0105272.WMF", cAlternateFileName="")) returned 1 [0273.249] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0273.249] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0273.249] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0273.249] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0273.249] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0273.249] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0273.249] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105272.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105272.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0273.250] GetFileType (hFile=0x19c) returned 0x1 [0273.250] CloseHandle (hObject=0x19c) returned 1 [0273.250] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0273.250] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105272.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105272.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4540)) returned 1 [0273.250] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0273.250] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0273.251] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105272.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105272.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4540)) returned 1 [0273.251] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0273.251] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0273.251] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0273.251] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b28, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0105276.WMF", cAlternateFileName="")) returned 1 [0273.251] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0273.251] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0273.251] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0273.251] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0273.251] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0273.252] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0273.252] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105276.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105276.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0273.252] GetFileType (hFile=0x19c) returned 0x1 [0273.253] CloseHandle (hObject=0x19c) returned 1 [0273.253] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0273.253] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105276.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105276.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b28)) returned 1 [0273.253] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0273.253] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0273.254] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105276.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105276.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b28)) returned 1 [0273.254] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0273.254] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0273.254] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0273.254] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d14, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0105280.WMF", cAlternateFileName="")) returned 1 [0273.254] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0273.254] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0273.254] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0273.255] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0273.255] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0273.255] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0273.255] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105280.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105280.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0273.256] GetFileType (hFile=0x19c) returned 0x1 [0273.256] CloseHandle (hObject=0x19c) returned 1 [0273.257] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0273.257] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105280.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105280.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d14)) returned 1 [0273.257] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0273.257] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0273.257] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105280.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105280.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d14)) returned 1 [0273.257] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0273.257] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0273.258] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0273.258] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12bc, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0105282.WMF", cAlternateFileName="")) returned 1 [0273.258] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0273.258] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0273.258] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0273.258] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0273.258] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0273.258] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0273.259] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105282.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105282.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0273.259] GetFileType (hFile=0x19c) returned 0x1 [0273.260] CloseHandle (hObject=0x19c) returned 1 [0273.648] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0273.648] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105282.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105282.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12bc)) returned 1 [0273.648] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0273.648] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0273.648] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105282.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105282.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12bc)) returned 1 [0273.648] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0273.648] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0273.649] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0273.649] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19a8, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0105286.WMF", cAlternateFileName="")) returned 1 [0273.649] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238780 [0273.649] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0273.649] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0273.649] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0273.649] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0273.650] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238780 | out: hHeap=0x1f0000) returned 1 [0273.650] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105286.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105286.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0273.789] GetFileType (hFile=0x198) returned 0x1 [0273.789] CloseHandle (hObject=0x198) returned 1 [0273.790] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0273.790] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105286.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105286.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19a8)) returned 1 [0273.790] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0273.791] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0273.791] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105286.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105286.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19a8)) returned 1 [0273.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0273.791] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0273.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0273.792] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3dd8, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0105288.WMF", cAlternateFileName="")) returned 1 [0273.792] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238500 [0273.792] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0273.792] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0273.792] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0273.793] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0273.793] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238500 | out: hHeap=0x1f0000) returned 1 [0273.920] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105288.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105288.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0273.920] GetFileType (hFile=0x198) returned 0x1 [0273.921] CloseHandle (hObject=0x198) returned 1 [0273.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0273.921] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105288.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105288.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3dd8)) returned 1 [0273.922] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0273.922] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0273.922] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105288.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105288.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3dd8)) returned 1 [0273.922] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0273.922] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0273.922] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0273.922] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a14, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0105292.WMF", cAlternateFileName="")) returned 1 [0273.923] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238528 [0273.923] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0273.923] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0273.923] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0273.923] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0273.923] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238528 | out: hHeap=0x1f0000) returned 1 [0273.924] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105292.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105292.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0273.924] GetFileType (hFile=0x198) returned 0x1 [0273.925] CloseHandle (hObject=0x198) returned 1 [0273.925] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0273.925] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105292.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105292.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a14)) returned 1 [0273.925] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0273.925] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0273.926] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105292.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105292.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a14)) returned 1 [0273.926] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0273.926] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0273.926] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0273.926] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1580, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0105294.WMF", cAlternateFileName="")) returned 1 [0273.926] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238500 [0273.926] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0273.926] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0273.927] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0273.927] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0273.927] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238500 | out: hHeap=0x1f0000) returned 1 [0273.927] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105294.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105294.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0273.928] GetFileType (hFile=0x198) returned 0x1 [0273.928] CloseHandle (hObject=0x198) returned 1 [0273.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0273.929] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105294.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105294.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1580)) returned 1 [0273.929] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0273.929] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0273.929] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105294.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105294.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1580)) returned 1 [0273.929] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0273.929] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0273.929] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0273.929] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18b0, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0105298.WMF", cAlternateFileName="")) returned 1 [0273.929] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238708 [0273.930] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0273.930] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0273.930] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0273.930] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0273.930] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238708 | out: hHeap=0x1f0000) returned 1 [0273.930] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105298.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105298.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0273.931] GetFileType (hFile=0x198) returned 0x1 [0273.931] CloseHandle (hObject=0x198) returned 1 [0273.931] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0273.931] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105298.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105298.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18b0)) returned 1 [0273.932] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0273.932] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0273.932] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105298.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105298.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18b0)) returned 1 [0273.932] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0273.932] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0273.932] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0273.932] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10e0, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0105306.WMF", cAlternateFileName="")) returned 1 [0273.932] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238690 [0273.932] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0273.932] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0273.933] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0273.933] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0273.933] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238690 | out: hHeap=0x1f0000) returned 1 [0273.933] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105306.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105306.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0273.934] GetFileType (hFile=0x198) returned 0x1 [0273.934] CloseHandle (hObject=0x198) returned 1 [0273.934] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0273.935] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105306.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105306.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10e0)) returned 1 [0273.935] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0273.935] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0273.935] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105306.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105306.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10e0)) returned 1 [0273.935] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0273.935] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0273.936] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0273.936] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e4, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0105320.WMF", cAlternateFileName="")) returned 1 [0273.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238690 [0273.937] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0273.937] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0273.937] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0273.937] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0273.937] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238690 | out: hHeap=0x1f0000) returned 1 [0273.937] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105320.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105320.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0273.938] GetFileType (hFile=0x198) returned 0x1 [0273.938] CloseHandle (hObject=0x198) returned 1 [0273.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0273.939] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105320.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105320.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e4)) returned 1 [0273.939] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0273.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0273.939] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105320.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105320.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e4)) returned 1 [0273.939] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0273.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0273.939] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0273.939] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f38, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0105328.WMF", cAlternateFileName="")) returned 1 [0273.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238500 [0273.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0273.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0273.940] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0273.940] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0273.940] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238500 | out: hHeap=0x1f0000) returned 1 [0273.940] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105328.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105328.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0273.940] GetFileType (hFile=0x198) returned 0x1 [0273.941] CloseHandle (hObject=0x198) returned 1 [0273.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0273.941] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105328.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105328.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f38)) returned 1 [0273.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0273.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0273.941] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105328.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105328.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f38)) returned 1 [0273.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0273.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0273.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0273.942] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x290c, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0105332.WMF", cAlternateFileName="")) returned 1 [0273.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238640 [0273.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0273.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0273.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0273.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0273.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238640 | out: hHeap=0x1f0000) returned 1 [0273.943] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105332.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105332.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0273.943] GetFileType (hFile=0x198) returned 0x1 [0273.943] CloseHandle (hObject=0x198) returned 1 [0273.944] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0273.944] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105332.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105332.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x290c)) returned 1 [0273.944] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0273.944] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0273.944] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105332.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105332.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x290c)) returned 1 [0273.944] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0273.944] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0273.945] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0273.945] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb54, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0105336.WMF", cAlternateFileName="")) returned 1 [0273.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238528 [0273.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0273.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0273.945] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0273.945] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0273.945] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238528 | out: hHeap=0x1f0000) returned 1 [0273.946] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105336.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105336.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0273.946] GetFileType (hFile=0x198) returned 0x1 [0273.946] CloseHandle (hObject=0x198) returned 1 [0273.947] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0273.947] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105336.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105336.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb54)) returned 1 [0273.947] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0273.947] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0273.947] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105336.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105336.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb54)) returned 1 [0273.947] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0273.947] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0273.947] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0273.947] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d40, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0105338.WMF", cAlternateFileName="")) returned 1 [0273.948] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238550 [0273.948] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0273.948] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0273.948] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0273.948] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0273.948] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238550 | out: hHeap=0x1f0000) returned 1 [0273.948] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105338.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105338.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0273.948] GetFileType (hFile=0x198) returned 0x1 [0273.949] CloseHandle (hObject=0x198) returned 1 [0273.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0273.949] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105338.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105338.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d40)) returned 1 [0273.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0273.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0273.949] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105338.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105338.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d40)) returned 1 [0273.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0273.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0273.950] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0273.950] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x42a4, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0105348.WMF", cAlternateFileName="")) returned 1 [0273.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238758 [0273.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0273.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0273.950] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0273.950] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0273.950] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238758 | out: hHeap=0x1f0000) returned 1 [0273.951] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105348.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105348.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0273.951] GetFileType (hFile=0x198) returned 0x1 [0273.952] CloseHandle (hObject=0x198) returned 1 [0273.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0273.952] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105348.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105348.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x42a4)) returned 1 [0273.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0273.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0273.952] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105348.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105348.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x42a4)) returned 1 [0273.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0273.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0273.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0273.953] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x229c, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0105360.WMF", cAlternateFileName="")) returned 1 [0273.953] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238708 [0273.953] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0273.953] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0273.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0273.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0273.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238708 | out: hHeap=0x1f0000) returned 1 [0273.953] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105360.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105360.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0273.954] GetFileType (hFile=0x198) returned 0x1 [0273.954] CloseHandle (hObject=0x198) returned 1 [0273.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0273.954] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105360.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105360.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x229c)) returned 1 [0273.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0273.955] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0273.955] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105360.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105360.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x229c)) returned 1 [0273.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0273.955] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0273.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0273.955] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x305c, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0105368.WMF", cAlternateFileName="")) returned 1 [0273.955] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384d8 [0273.955] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0273.955] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0273.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0273.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0273.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384d8 | out: hHeap=0x1f0000) returned 1 [0273.956] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105368.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105368.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0273.957] GetFileType (hFile=0x198) returned 0x1 [0273.957] CloseHandle (hObject=0x198) returned 1 [0273.958] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0273.958] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105368.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105368.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x305c)) returned 1 [0273.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0273.958] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0273.958] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105368.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105368.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x305c)) returned 1 [0273.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0273.958] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0273.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0273.959] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1364, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0105376.WMF", cAlternateFileName="")) returned 1 [0273.959] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238780 [0273.959] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0273.959] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0273.959] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0273.959] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0273.959] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238780 | out: hHeap=0x1f0000) returned 1 [0273.960] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105376.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105376.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0273.960] GetFileType (hFile=0x198) returned 0x1 [0273.961] CloseHandle (hObject=0x198) returned 1 [0273.961] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0273.961] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105376.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105376.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1364)) returned 1 [0273.961] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0273.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0273.962] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105376.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105376.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1364)) returned 1 [0273.962] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0273.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0273.962] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0273.962] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1364, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0105378.WMF", cAlternateFileName="")) returned 1 [0273.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238668 [0273.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0273.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0273.963] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0273.963] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0273.963] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238668 | out: hHeap=0x1f0000) returned 1 [0273.963] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105378.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105378.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0273.964] GetFileType (hFile=0x198) returned 0x1 [0273.964] CloseHandle (hObject=0x198) returned 1 [0273.965] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0273.965] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105378.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105378.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1364)) returned 1 [0273.965] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0273.965] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0273.965] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105378.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105378.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1364)) returned 1 [0273.965] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0274.258] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0274.258] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0274.258] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1210, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0105380.WMF", cAlternateFileName="")) returned 1 [0274.259] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384d8 [0274.259] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0274.259] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0274.259] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0274.259] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0274.259] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384d8 | out: hHeap=0x1f0000) returned 1 [0274.260] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105380.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105380.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0274.456] GetFileType (hFile=0x198) returned 0x1 [0274.456] CloseHandle (hObject=0x198) returned 1 [0274.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0274.457] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105380.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105380.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1210)) returned 1 [0274.457] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0274.458] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0274.458] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105380.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105380.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1210)) returned 1 [0274.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0274.458] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0274.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0274.458] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16f8, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0105384.WMF", cAlternateFileName="")) returned 1 [0274.458] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238550 [0274.458] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0274.458] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0274.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0274.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0274.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238550 | out: hHeap=0x1f0000) returned 1 [0274.608] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105384.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105384.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0274.608] GetFileType (hFile=0x174) returned 0x1 [0274.609] CloseHandle (hObject=0x174) returned 1 [0274.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0274.609] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105384.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105384.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16f8)) returned 1 [0274.610] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0274.610] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0274.610] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105384.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105384.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16f8)) returned 1 [0274.610] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0274.610] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0274.610] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0274.610] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x175c, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0105386.WMF", cAlternateFileName="")) returned 1 [0274.610] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0274.610] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0274.610] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0274.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0274.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0274.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0274.611] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105386.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105386.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0274.612] GetFileType (hFile=0x174) returned 0x1 [0274.612] CloseHandle (hObject=0x174) returned 1 [0274.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0274.612] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105386.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105386.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x175c)) returned 1 [0274.613] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0274.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0274.613] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105386.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105386.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x175c)) returned 1 [0274.613] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0274.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0274.613] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0274.613] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x203c, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0105388.WMF", cAlternateFileName="")) returned 1 [0274.615] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0274.615] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0274.615] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0274.615] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0274.615] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0274.615] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0274.616] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105388.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105388.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0274.616] GetFileType (hFile=0x174) returned 0x1 [0274.616] CloseHandle (hObject=0x174) returned 1 [0274.617] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0274.617] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105388.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105388.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x203c)) returned 1 [0274.617] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0274.617] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0274.617] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105388.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105388.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x203c)) returned 1 [0274.617] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0274.617] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0274.617] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0274.617] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1350, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0105390.WMF", cAlternateFileName="")) returned 1 [0274.617] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0274.617] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0274.617] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0274.618] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0274.618] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0274.618] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0274.618] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105390.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105390.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0274.618] GetFileType (hFile=0x174) returned 0x1 [0274.619] CloseHandle (hObject=0x174) returned 1 [0274.619] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0274.619] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105390.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105390.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1350)) returned 1 [0274.619] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0274.619] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0274.619] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105390.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105390.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1350)) returned 1 [0274.619] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0274.619] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0274.620] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0274.620] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b04, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0105396.WMF", cAlternateFileName="")) returned 1 [0274.620] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0274.620] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0274.620] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0274.620] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0274.620] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0274.620] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0274.620] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105396.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105396.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0274.621] GetFileType (hFile=0x174) returned 0x1 [0274.621] CloseHandle (hObject=0x174) returned 1 [0274.621] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0274.621] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105396.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105396.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b04)) returned 1 [0274.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0274.621] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0274.622] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105396.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105396.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b04)) returned 1 [0274.622] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0274.622] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0274.622] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0274.622] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd00, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0105398.WMF", cAlternateFileName="")) returned 1 [0274.622] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0274.622] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0274.622] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0274.622] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0274.622] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0274.622] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0274.623] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105398.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105398.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0274.623] GetFileType (hFile=0x174) returned 0x1 [0274.623] CloseHandle (hObject=0x174) returned 1 [0274.623] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0274.624] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105398.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105398.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd00)) returned 1 [0274.624] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0274.624] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0274.624] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105398.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105398.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd00)) returned 1 [0274.624] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0274.624] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0274.624] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0274.624] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4fdc, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0105410.WMF", cAlternateFileName="")) returned 1 [0274.624] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0274.624] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0274.624] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0274.624] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0274.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0274.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0274.625] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105410.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105410.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0274.625] GetFileType (hFile=0x174) returned 0x1 [0274.625] CloseHandle (hObject=0x174) returned 1 [0274.626] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0274.626] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105410.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105410.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4fdc)) returned 1 [0274.626] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0274.626] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0274.626] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105410.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105410.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4fdc)) returned 1 [0274.626] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0274.626] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0274.626] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0274.626] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x24b8, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0105412.WMF", cAlternateFileName="")) returned 1 [0274.626] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0274.626] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0274.627] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0274.627] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0274.627] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0274.627] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0274.627] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105412.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105412.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0274.627] GetFileType (hFile=0x174) returned 0x1 [0274.628] CloseHandle (hObject=0x174) returned 1 [0274.628] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0274.628] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105412.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105412.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x24b8)) returned 1 [0274.628] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0274.628] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0274.628] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105412.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105412.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x24b8)) returned 1 [0274.629] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0274.629] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0274.629] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0274.629] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1864, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0105414.WMF", cAlternateFileName="")) returned 1 [0274.629] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0274.629] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0274.629] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0274.629] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0274.630] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0274.630] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0274.630] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105414.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105414.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0274.630] GetFileType (hFile=0x174) returned 0x1 [0274.631] CloseHandle (hObject=0x174) returned 1 [0274.631] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0274.631] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105414.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105414.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1864)) returned 1 [0274.631] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0274.631] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0274.631] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105414.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105414.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1864)) returned 1 [0274.631] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0274.631] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0274.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0274.632] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4928, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0105490.WMF", cAlternateFileName="")) returned 1 [0274.632] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0274.632] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0274.632] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0274.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0274.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0274.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0274.632] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105490.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105490.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0274.633] GetFileType (hFile=0x174) returned 0x1 [0274.633] CloseHandle (hObject=0x174) returned 1 [0274.633] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0274.633] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105490.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105490.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4928)) returned 1 [0274.633] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0274.633] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0274.634] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105490.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105490.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4928)) returned 1 [0274.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0274.634] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0274.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0274.634] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1424, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0105496.WMF", cAlternateFileName="")) returned 1 [0274.634] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0274.634] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0274.634] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0274.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0274.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0274.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0274.635] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105496.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105496.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0274.635] GetFileType (hFile=0x174) returned 0x1 [0274.635] CloseHandle (hObject=0x174) returned 1 [0274.635] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0274.636] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105496.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105496.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1424)) returned 1 [0274.636] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0274.636] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0274.636] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105496.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105496.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1424)) returned 1 [0274.636] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0274.636] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0274.636] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0274.636] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1560, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0105502.WMF", cAlternateFileName="")) returned 1 [0274.636] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0274.637] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0274.637] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0274.637] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0274.637] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0274.637] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0274.637] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105502.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105502.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0274.638] GetFileType (hFile=0x174) returned 0x1 [0274.638] CloseHandle (hObject=0x174) returned 1 [0274.639] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0274.639] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105502.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105502.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1560)) returned 1 [0274.639] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0274.639] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0274.639] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105502.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105502.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1560)) returned 1 [0274.639] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0274.639] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0274.639] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0274.639] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1034, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0105504.WMF", cAlternateFileName="")) returned 1 [0274.639] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0274.639] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0274.640] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0274.640] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0274.640] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0274.640] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0274.640] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105504.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105504.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0274.640] GetFileType (hFile=0x174) returned 0x1 [0274.641] CloseHandle (hObject=0x174) returned 1 [0274.641] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0274.641] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105504.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105504.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1034)) returned 1 [0274.641] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0274.641] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0274.641] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105504.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105504.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1034)) returned 1 [0274.641] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0274.641] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0274.642] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0274.642] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb60, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0105506.WMF", cAlternateFileName="")) returned 1 [0274.642] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0274.642] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0274.642] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0274.642] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0274.642] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0274.642] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0274.642] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105506.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105506.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0274.643] GetFileType (hFile=0x174) returned 0x1 [0274.643] CloseHandle (hObject=0x174) returned 1 [0274.643] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0274.643] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105506.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105506.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb60)) returned 1 [0274.643] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0274.644] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0274.644] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105506.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105506.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb60)) returned 1 [0274.644] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0274.644] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0274.644] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0274.644] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7c44, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0105520.WMF", cAlternateFileName="")) returned 1 [0274.644] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0274.644] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0274.644] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0274.644] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0274.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0274.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0274.996] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105520.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105520.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0274.997] GetFileType (hFile=0x21c) returned 0x1 [0274.997] CloseHandle (hObject=0x21c) returned 1 [0274.998] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0274.998] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105520.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105520.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7c44)) returned 1 [0274.999] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0274.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0274.999] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105520.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105520.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7c44)) returned 1 [0274.999] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0274.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0274.999] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0275.000] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43b4, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0105526.WMF", cAlternateFileName="")) returned 1 [0275.000] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0275.000] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0275.000] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0275.000] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0275.000] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0275.000] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0275.001] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105526.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105526.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0275.002] GetFileType (hFile=0x21c) returned 0x1 [0275.002] CloseHandle (hObject=0x21c) returned 1 [0275.003] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0275.003] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105526.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105526.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43b4)) returned 1 [0275.003] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0275.003] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0275.004] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105526.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105526.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43b4)) returned 1 [0275.004] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0275.004] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0275.005] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0275.005] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1cd8, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0105530.WMF", cAlternateFileName="")) returned 1 [0275.005] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0275.005] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0275.005] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0275.005] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0275.005] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0275.006] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0275.007] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105530.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105530.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0275.007] GetFileType (hFile=0x21c) returned 0x1 [0275.008] CloseHandle (hObject=0x21c) returned 1 [0275.008] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0275.009] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105530.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105530.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1cd8)) returned 1 [0275.009] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0275.009] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0275.009] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105530.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105530.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1cd8)) returned 1 [0275.009] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0275.010] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0275.010] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0275.010] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x542c, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0105588.WMF", cAlternateFileName="")) returned 1 [0275.010] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0275.010] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0275.010] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0275.010] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0275.011] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0275.011] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0275.012] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105588.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105588.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0275.012] GetFileType (hFile=0x21c) returned 0x1 [0275.013] CloseHandle (hObject=0x21c) returned 1 [0275.013] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0275.013] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105588.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105588.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x542c)) returned 1 [0275.014] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0275.014] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0275.014] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105588.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105588.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x542c)) returned 1 [0275.014] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0275.014] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0275.014] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0275.015] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21e8, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0105600.WMF", cAlternateFileName="")) returned 1 [0275.015] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0275.015] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0275.015] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0275.015] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0275.015] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0275.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0275.017] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105600.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105600.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0275.017] GetFileType (hFile=0x21c) returned 0x1 [0275.018] CloseHandle (hObject=0x21c) returned 1 [0275.018] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0275.018] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105600.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105600.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21e8)) returned 1 [0275.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0275.019] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0275.019] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105600.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105600.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21e8)) returned 1 [0275.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0275.019] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0275.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0275.020] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x287c, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0105638.WMF", cAlternateFileName="")) returned 1 [0275.020] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0275.020] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0275.020] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0275.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0275.021] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0275.021] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0275.021] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105638.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105638.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0275.022] GetFileType (hFile=0x21c) returned 0x1 [0275.022] CloseHandle (hObject=0x21c) returned 1 [0275.023] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0275.023] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105638.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105638.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x287c)) returned 1 [0275.023] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0275.023] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0275.023] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105638.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105638.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x287c)) returned 1 [0275.024] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0275.024] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0275.024] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0275.024] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x35f0, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0105710.WMF", cAlternateFileName="")) returned 1 [0275.024] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0275.024] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0275.024] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0275.024] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0275.024] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0275.025] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0275.025] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105710.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105710.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0275.026] GetFileType (hFile=0x21c) returned 0x1 [0275.026] CloseHandle (hObject=0x21c) returned 1 [0275.027] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0275.027] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105710.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105710.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x35f0)) returned 1 [0275.027] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0275.027] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0275.027] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105710.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105710.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x35f0)) returned 1 [0275.027] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0275.028] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0275.028] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0275.028] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2030, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0105846.WMF", cAlternateFileName="")) returned 1 [0275.028] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0275.028] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0275.028] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0275.028] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0275.028] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0275.029] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0275.029] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105846.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105846.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0275.030] GetFileType (hFile=0x21c) returned 0x1 [0275.030] CloseHandle (hObject=0x21c) returned 1 [0275.031] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0275.031] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105846.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105846.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2030)) returned 1 [0275.031] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0275.031] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0275.031] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105846.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105846.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2030)) returned 1 [0275.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0275.032] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0275.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0275.032] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2dc8, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0105912.WMF", cAlternateFileName="")) returned 1 [0275.032] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0275.032] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0275.032] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0275.033] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0275.033] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0275.033] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0275.034] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105912.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105912.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0275.034] GetFileType (hFile=0x21c) returned 0x1 [0275.035] CloseHandle (hObject=0x21c) returned 1 [0275.295] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0275.295] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105912.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105912.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2dc8)) returned 1 [0275.295] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0275.295] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0275.295] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105912.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105912.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2dc8)) returned 1 [0275.295] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0275.296] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0275.296] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0275.296] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1204, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0105974.WMF", cAlternateFileName="")) returned 1 [0275.296] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0275.296] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0275.296] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0275.296] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0275.296] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0275.296] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0275.554] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105974.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105974.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0275.555] GetFileType (hFile=0x224) returned 0x1 [0275.555] CloseHandle (hObject=0x224) returned 1 [0275.556] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0275.556] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105974.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105974.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1204)) returned 1 [0275.556] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0275.556] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0275.557] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105974.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105974.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1204)) returned 1 [0275.557] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0275.557] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0275.557] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0275.557] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x274c, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0106020.WMF", cAlternateFileName="")) returned 1 [0275.557] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0275.558] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0275.558] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0275.558] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0275.558] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0275.558] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0275.559] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106020.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106020.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0275.560] GetFileType (hFile=0x224) returned 0x1 [0275.560] CloseHandle (hObject=0x224) returned 1 [0275.561] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0275.561] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106020.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106020.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x274c)) returned 1 [0275.561] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0275.561] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0275.561] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106020.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106020.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x274c)) returned 1 [0275.561] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0275.561] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0275.562] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0275.562] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16b4, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0106124.WMF", cAlternateFileName="")) returned 1 [0275.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0275.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0275.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0275.562] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0275.562] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0275.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0275.563] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106124.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106124.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0275.564] GetFileType (hFile=0x224) returned 0x1 [0275.564] CloseHandle (hObject=0x224) returned 1 [0275.565] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0275.565] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106124.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106124.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16b4)) returned 1 [0275.565] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0275.565] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0275.565] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106124.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106124.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16b4)) returned 1 [0275.566] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0275.566] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0275.566] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0275.566] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5bfc, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0106146.WMF", cAlternateFileName="")) returned 1 [0275.566] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0275.566] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0275.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0275.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0275.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0275.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0275.568] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106146.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106146.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0275.568] GetFileType (hFile=0x224) returned 0x1 [0275.569] CloseHandle (hObject=0x224) returned 1 [0275.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0275.569] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106146.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106146.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5bfc)) returned 1 [0275.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0275.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0275.570] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106146.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106146.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5bfc)) returned 1 [0275.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0275.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0275.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0275.570] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e7c, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0106208.WMF", cAlternateFileName="")) returned 1 [0275.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0275.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0275.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0275.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0275.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0275.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0275.572] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106208.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106208.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0275.572] GetFileType (hFile=0x224) returned 0x1 [0275.573] CloseHandle (hObject=0x224) returned 1 [0275.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0275.573] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106208.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106208.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e7c)) returned 1 [0275.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0275.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0275.574] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106208.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106208.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e7c)) returned 1 [0275.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0275.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0275.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0275.574] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c90, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0106222.WMF", cAlternateFileName="")) returned 1 [0275.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0275.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0275.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0275.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0275.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0275.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0275.576] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106222.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106222.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0275.576] GetFileType (hFile=0x224) returned 0x1 [0275.576] CloseHandle (hObject=0x224) returned 1 [0275.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0275.577] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106222.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106222.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c90)) returned 1 [0275.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0275.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0275.577] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106222.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106222.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c90)) returned 1 [0275.578] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0275.578] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0275.578] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0275.578] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x864, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0106572.WMF", cAlternateFileName="")) returned 1 [0275.578] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0275.578] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0275.578] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0275.578] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0275.578] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0275.579] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0275.579] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106572.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106572.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0275.580] GetFileType (hFile=0x224) returned 0x1 [0275.580] CloseHandle (hObject=0x224) returned 1 [0275.581] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0275.581] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106572.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106572.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x864)) returned 1 [0275.581] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0275.581] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0275.581] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106572.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106572.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x864)) returned 1 [0275.581] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0275.581] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0275.582] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0275.582] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd04, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0106816.WMF", cAlternateFileName="")) returned 1 [0275.582] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0275.582] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0275.582] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0275.582] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0275.582] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0275.582] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0275.583] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106816.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106816.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0275.583] GetFileType (hFile=0x224) returned 0x1 [0275.584] CloseHandle (hObject=0x224) returned 1 [0275.585] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0275.585] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106816.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106816.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd04)) returned 1 [0275.585] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0275.585] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0275.585] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106816.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106816.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd04)) returned 1 [0275.586] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0275.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0275.586] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0275.586] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x35d8, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0106958.WMF", cAlternateFileName="")) returned 1 [0275.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0275.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0275.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0275.586] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0275.587] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0275.587] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0275.587] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106958.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106958.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0275.588] GetFileType (hFile=0x224) returned 0x1 [0275.588] CloseHandle (hObject=0x224) returned 1 [0275.589] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0275.589] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106958.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106958.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x35d8)) returned 1 [0275.589] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0275.589] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0275.589] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106958.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106958.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x35d8)) returned 1 [0275.589] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0275.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0275.590] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0275.590] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbcc, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0107024.WMF", cAlternateFileName="")) returned 1 [0275.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0275.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0275.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0275.590] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0275.591] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0275.591] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0275.591] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107024.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107024.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0275.592] GetFileType (hFile=0x224) returned 0x1 [0275.593] CloseHandle (hObject=0x224) returned 1 [0275.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0275.593] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107024.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107024.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbcc)) returned 1 [0275.593] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0275.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0275.594] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107024.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107024.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbcc)) returned 1 [0275.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0275.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0275.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0275.594] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1dd0, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0107026.WMF", cAlternateFileName="")) returned 1 [0275.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0275.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0275.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0275.595] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0275.595] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0275.595] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0275.596] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107026.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107026.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0275.596] GetFileType (hFile=0x224) returned 0x1 [0275.597] CloseHandle (hObject=0x224) returned 1 [0275.597] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0275.597] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107026.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107026.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1dd0)) returned 1 [0275.961] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0275.961] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0275.961] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107026.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107026.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1dd0)) returned 1 [0275.962] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0275.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0275.962] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0275.962] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2358, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0107042.WMF", cAlternateFileName="")) returned 1 [0275.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0275.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0275.963] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0275.963] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0275.963] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0275.963] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0275.964] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107042.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107042.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0275.965] GetFileType (hFile=0x19c) returned 0x1 [0275.965] CloseHandle (hObject=0x19c) returned 1 [0275.966] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0275.966] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107042.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107042.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2358)) returned 1 [0275.966] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0275.966] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0275.966] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107042.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107042.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2358)) returned 1 [0275.967] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0275.967] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0275.967] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0275.967] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3734, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0107090.WMF", cAlternateFileName="")) returned 1 [0275.967] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0275.967] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0275.968] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0275.968] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0275.968] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0275.968] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0275.969] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107090.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107090.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0275.969] GetFileType (hFile=0x19c) returned 0x1 [0275.970] CloseHandle (hObject=0x19c) returned 1 [0275.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0275.970] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107090.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107090.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3734)) returned 1 [0275.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0275.987] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0275.987] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107090.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107090.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3734)) returned 1 [0275.987] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0275.987] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0275.987] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0275.988] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x69cc, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0107130.WMF", cAlternateFileName="")) returned 1 [0275.988] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0275.988] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0275.988] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0275.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0275.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0275.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0275.990] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107130.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107130.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0275.990] GetFileType (hFile=0x19c) returned 0x1 [0275.991] CloseHandle (hObject=0x19c) returned 1 [0275.991] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0275.991] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107130.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107130.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x69cc)) returned 1 [0275.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0275.992] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0275.992] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107130.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107130.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x69cc)) returned 1 [0275.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0275.992] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0275.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0275.992] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbcfc, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0107132.WMF", cAlternateFileName="")) returned 1 [0275.992] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0275.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0275.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0275.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0275.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0275.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0275.994] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107132.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107132.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0275.994] GetFileType (hFile=0x19c) returned 0x1 [0275.995] CloseHandle (hObject=0x19c) returned 1 [0275.995] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0275.995] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107132.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107132.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbcfc)) returned 1 [0275.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0275.996] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0275.996] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107132.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107132.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbcfc)) returned 1 [0275.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0275.996] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0275.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0275.996] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbd04, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0107134.WMF", cAlternateFileName="")) returned 1 [0275.997] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0275.997] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0275.997] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0275.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0275.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0275.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0275.998] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107134.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107134.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0275.998] GetFileType (hFile=0x19c) returned 0x1 [0275.999] CloseHandle (hObject=0x19c) returned 1 [0276.000] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0276.000] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107134.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107134.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbd04)) returned 1 [0276.000] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0276.000] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0276.000] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107134.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107134.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbd04)) returned 1 [0276.000] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0276.000] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0276.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0276.001] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4330, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0107138.WMF", cAlternateFileName="")) returned 1 [0276.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0276.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0276.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0276.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0276.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0276.002] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0276.002] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107138.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107138.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0276.003] GetFileType (hFile=0x19c) returned 0x1 [0276.003] CloseHandle (hObject=0x19c) returned 1 [0276.004] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0276.004] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107138.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107138.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4330)) returned 1 [0276.005] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0276.005] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0276.005] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107138.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107138.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4330)) returned 1 [0276.005] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0276.005] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0276.005] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0276.005] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a94, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0107146.WMF", cAlternateFileName="")) returned 1 [0276.006] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0276.006] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0276.006] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0276.006] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0276.006] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0276.006] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0276.007] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107146.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107146.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0276.007] GetFileType (hFile=0x19c) returned 0x1 [0276.008] CloseHandle (hObject=0x19c) returned 1 [0276.008] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0276.009] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107146.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107146.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a94)) returned 1 [0276.009] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0276.009] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0276.009] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107146.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107146.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a94)) returned 1 [0276.009] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0276.009] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0276.010] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0276.010] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ea8, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0107148.WMF", cAlternateFileName="")) returned 1 [0276.010] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0276.010] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0276.010] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0276.010] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0276.010] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0276.010] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0276.011] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107148.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107148.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0276.011] GetFileType (hFile=0x19c) returned 0x1 [0276.012] CloseHandle (hObject=0x19c) returned 1 [0276.012] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0276.013] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107148.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107148.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ea8)) returned 1 [0276.013] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0276.013] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0276.013] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107148.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107148.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ea8)) returned 1 [0276.013] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0276.013] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0276.013] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0276.013] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3490, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0107150.WMF", cAlternateFileName="")) returned 1 [0276.014] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0276.014] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0276.014] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0276.014] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0276.014] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0276.014] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0276.015] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107150.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107150.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0276.015] GetFileType (hFile=0x19c) returned 0x1 [0276.016] CloseHandle (hObject=0x19c) returned 1 [0276.016] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0276.016] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107150.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107150.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3490)) returned 1 [0276.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0276.017] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0276.017] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107150.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107150.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3490)) returned 1 [0276.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0276.017] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0276.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0276.017] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5804, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0107152.WMF", cAlternateFileName="")) returned 1 [0276.017] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0276.017] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0276.018] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0276.018] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0276.018] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0276.018] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0276.019] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107152.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107152.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0276.019] GetFileType (hFile=0x19c) returned 0x1 [0276.214] CloseHandle (hObject=0x19c) returned 1 [0276.215] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0276.215] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107152.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107152.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5804)) returned 1 [0276.215] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0276.215] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0276.215] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107152.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107152.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5804)) returned 1 [0276.215] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0276.215] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0276.216] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0276.216] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x571c, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0107154.WMF", cAlternateFileName="")) returned 1 [0276.216] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0276.216] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0276.216] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0276.216] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0276.216] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0276.216] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0276.254] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107154.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107154.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0276.255] GetFileType (hFile=0x21c) returned 0x1 [0276.255] CloseHandle (hObject=0x21c) returned 1 [0276.255] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0276.255] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107154.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107154.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x571c)) returned 1 [0276.256] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0276.256] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0276.256] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107154.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107154.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x571c)) returned 1 [0276.256] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0276.256] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0276.256] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0276.256] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x614c, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0107158.WMF", cAlternateFileName="")) returned 1 [0276.256] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0276.256] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0276.256] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0276.256] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0276.257] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0276.257] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0276.257] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107158.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107158.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0276.257] GetFileType (hFile=0x21c) returned 0x1 [0276.258] CloseHandle (hObject=0x21c) returned 1 [0276.258] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0276.258] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107158.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107158.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x614c)) returned 1 [0276.258] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0276.258] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0276.258] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107158.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107158.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x614c)) returned 1 [0276.258] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0276.259] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0276.259] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0276.259] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ee4, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0107182.WMF", cAlternateFileName="")) returned 1 [0276.259] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0276.259] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0276.259] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0276.259] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0276.259] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0276.259] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0276.259] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107182.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107182.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0276.260] GetFileType (hFile=0x21c) returned 0x1 [0276.260] CloseHandle (hObject=0x21c) returned 1 [0276.260] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0276.261] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107182.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107182.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ee4)) returned 1 [0276.261] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0276.261] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0276.261] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107182.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107182.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ee4)) returned 1 [0276.261] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0276.261] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0276.261] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0276.261] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11b8, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0107188.WMF", cAlternateFileName="")) returned 1 [0276.262] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0276.262] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0276.262] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0276.262] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0276.262] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0276.262] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0276.262] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107188.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107188.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0276.263] GetFileType (hFile=0x21c) returned 0x1 [0276.264] CloseHandle (hObject=0x21c) returned 1 [0276.264] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0276.264] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107188.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107188.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11b8)) returned 1 [0276.264] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0276.264] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0276.264] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107188.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107188.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11b8)) returned 1 [0276.264] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0276.265] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0276.265] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0276.265] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x26f0, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0107192.WMF", cAlternateFileName="")) returned 1 [0276.265] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0276.265] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0276.265] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0276.265] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0276.265] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0276.265] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0276.266] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107192.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107192.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0276.266] GetFileType (hFile=0x21c) returned 0x1 [0276.266] CloseHandle (hObject=0x21c) returned 1 [0276.267] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0276.267] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107192.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107192.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x26f0)) returned 1 [0276.267] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0276.267] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0276.267] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107192.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107192.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x26f0)) returned 1 [0276.267] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0276.267] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0276.267] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0276.267] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ef4, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0107254.WMF", cAlternateFileName="")) returned 1 [0276.267] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0276.268] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0276.268] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0276.268] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0276.268] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0276.268] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0276.268] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107254.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107254.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0276.268] GetFileType (hFile=0x21c) returned 0x1 [0276.269] CloseHandle (hObject=0x21c) returned 1 [0276.269] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0276.269] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107254.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107254.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ef4)) returned 1 [0276.270] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0276.270] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0276.270] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107254.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107254.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ef4)) returned 1 [0276.270] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0276.270] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0276.270] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0276.271] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2168, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0107258.WMF", cAlternateFileName="")) returned 1 [0276.271] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0276.271] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0276.271] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0276.271] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0276.271] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0276.271] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0276.271] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107258.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107258.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0276.272] GetFileType (hFile=0x21c) returned 0x1 [0276.272] CloseHandle (hObject=0x21c) returned 1 [0276.272] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0276.272] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107258.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107258.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2168)) returned 1 [0276.273] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0276.273] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0276.273] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107258.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107258.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2168)) returned 1 [0276.273] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0276.273] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0276.273] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0276.273] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f3c, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0107262.WMF", cAlternateFileName="")) returned 1 [0276.273] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0276.273] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0276.273] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0276.274] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0276.274] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0276.274] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0276.274] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107262.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107262.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0276.274] GetFileType (hFile=0x21c) returned 0x1 [0276.275] CloseHandle (hObject=0x21c) returned 1 [0276.275] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0276.275] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107262.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107262.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f3c)) returned 1 [0276.275] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0276.275] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0276.275] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107262.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107262.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f3c)) returned 1 [0276.276] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0276.276] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0276.276] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0276.276] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1498, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0107264.WMF", cAlternateFileName="")) returned 1 [0276.276] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0276.276] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0276.276] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0276.276] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0276.277] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0276.277] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0276.277] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107264.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107264.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0276.278] GetFileType (hFile=0x21c) returned 0x1 [0276.278] CloseHandle (hObject=0x21c) returned 1 [0276.278] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0276.278] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107264.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107264.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1498)) returned 1 [0276.279] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0276.279] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0276.279] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107264.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107264.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1498)) returned 1 [0276.279] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0276.279] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0276.279] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0276.279] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16ec, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0107266.WMF", cAlternateFileName="")) returned 1 [0276.279] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0276.279] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0276.280] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0276.280] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0276.280] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0276.280] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0276.280] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107266.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107266.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0276.281] GetFileType (hFile=0x21c) returned 0x1 [0276.281] CloseHandle (hObject=0x21c) returned 1 [0276.281] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0276.281] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107266.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107266.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16ec)) returned 1 [0276.282] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0276.282] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0276.282] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107266.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107266.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16ec)) returned 1 [0276.282] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0276.282] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0276.282] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0276.282] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b64, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0107280.WMF", cAlternateFileName="")) returned 1 [0276.282] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0276.283] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0276.283] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0276.283] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0276.283] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0276.283] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0276.284] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107280.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107280.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0276.284] GetFileType (hFile=0x21c) returned 0x1 [0276.285] CloseHandle (hObject=0x21c) returned 1 [0276.285] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0276.286] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107280.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107280.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b64)) returned 1 [0276.286] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0276.286] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0276.287] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107280.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107280.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b64)) returned 1 [0276.287] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0276.287] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0276.287] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0276.287] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3734, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0107282.WMF", cAlternateFileName="")) returned 1 [0276.287] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0276.287] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0276.287] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0276.288] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0276.288] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0276.288] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0276.289] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107282.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107282.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0276.289] GetFileType (hFile=0x21c) returned 0x1 [0276.290] CloseHandle (hObject=0x21c) returned 1 [0276.290] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0276.290] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107282.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107282.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3734)) returned 1 [0276.291] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0276.291] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0276.291] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107282.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107282.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3734)) returned 1 [0276.291] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0276.291] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0276.291] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0276.291] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x347c, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0107288.WMF", cAlternateFileName="")) returned 1 [0276.292] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0276.292] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0276.292] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0276.292] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0276.292] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0276.292] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0276.293] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107288.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107288.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0276.294] GetFileType (hFile=0x21c) returned 0x1 [0276.294] CloseHandle (hObject=0x21c) returned 1 [0276.295] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0276.295] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107288.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107288.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x347c)) returned 1 [0276.295] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0276.295] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0276.295] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107288.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107288.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x347c)) returned 1 [0276.296] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0276.296] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0276.296] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0276.296] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3014, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0107290.WMF", cAlternateFileName="")) returned 1 [0276.296] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0276.296] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0276.296] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0276.297] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0276.297] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0276.297] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0276.298] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107290.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107290.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0276.298] GetFileType (hFile=0x21c) returned 0x1 [0276.299] CloseHandle (hObject=0x21c) returned 1 [0276.299] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0276.299] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107290.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107290.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3014)) returned 1 [0276.299] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0276.300] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0276.300] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107290.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107290.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3014)) returned 1 [0276.300] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0276.300] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0276.300] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0276.300] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x99c, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0107300.WMF", cAlternateFileName="")) returned 1 [0276.300] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0276.506] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0276.506] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0276.506] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0276.507] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0276.507] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0276.551] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107300.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107300.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0276.552] GetFileType (hFile=0x174) returned 0x1 [0276.552] CloseHandle (hObject=0x174) returned 1 [0276.553] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0276.553] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107300.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107300.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x99c)) returned 1 [0276.553] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0276.553] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0276.553] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107300.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107300.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x99c)) returned 1 [0276.554] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0276.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0276.554] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0276.554] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1028, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0107302.WMF", cAlternateFileName="")) returned 1 [0276.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0276.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0276.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0276.554] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0276.555] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0276.555] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0276.555] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107302.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107302.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0276.556] GetFileType (hFile=0x174) returned 0x1 [0276.557] CloseHandle (hObject=0x174) returned 1 [0276.557] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0276.557] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107302.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107302.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1028)) returned 1 [0276.557] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0276.558] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0276.558] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107302.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107302.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1028)) returned 1 [0276.558] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0276.558] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0276.558] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0276.558] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3e10, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0107308.WMF", cAlternateFileName="")) returned 1 [0276.558] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0276.559] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0276.559] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0276.559] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0276.559] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0276.559] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0276.560] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107308.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107308.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0276.560] GetFileType (hFile=0x174) returned 0x1 [0276.561] CloseHandle (hObject=0x174) returned 1 [0276.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0276.562] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107308.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107308.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3e10)) returned 1 [0276.562] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0276.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0276.562] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107308.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107308.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3e10)) returned 1 [0276.562] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0276.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0276.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0276.563] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a64, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0107314.WMF", cAlternateFileName="")) returned 1 [0276.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0276.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0276.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0276.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0276.564] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0276.564] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0276.564] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107314.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107314.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0276.565] GetFileType (hFile=0x174) returned 0x1 [0276.565] CloseHandle (hObject=0x174) returned 1 [0276.566] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0276.566] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107314.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107314.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a64)) returned 1 [0276.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0276.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0276.567] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107314.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107314.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a64)) returned 1 [0276.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0276.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0276.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0276.568] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c18, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0107316.WMF", cAlternateFileName="")) returned 1 [0276.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0276.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0276.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0276.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0276.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0276.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0276.569] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107316.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107316.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0276.570] GetFileType (hFile=0x174) returned 0x1 [0276.570] CloseHandle (hObject=0x174) returned 1 [0276.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0276.571] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107316.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107316.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c18)) returned 1 [0276.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0276.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0276.571] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107316.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107316.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c18)) returned 1 [0276.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0276.572] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0276.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0276.572] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1984, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0107328.WMF", cAlternateFileName="")) returned 1 [0276.572] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0276.572] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0276.572] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0276.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0276.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0276.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0276.574] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107328.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107328.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0276.574] GetFileType (hFile=0x174) returned 0x1 [0276.575] CloseHandle (hObject=0x174) returned 1 [0276.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0276.576] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107328.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107328.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1984)) returned 1 [0276.576] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0276.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0276.576] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107328.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107328.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1984)) returned 1 [0276.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0276.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0276.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0276.577] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1094, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0107342.WMF", cAlternateFileName="")) returned 1 [0276.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0276.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0276.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0276.578] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0276.578] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0276.578] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0276.579] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107342.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107342.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0276.579] GetFileType (hFile=0x174) returned 0x1 [0276.580] CloseHandle (hObject=0x174) returned 1 [0276.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0276.580] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107342.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107342.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1094)) returned 1 [0276.581] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0276.581] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0276.581] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107342.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107342.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1094)) returned 1 [0276.581] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0276.581] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0276.581] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0276.581] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13d4, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0107344.WMF", cAlternateFileName="")) returned 1 [0276.582] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0276.582] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0276.582] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0276.583] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0276.583] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0276.583] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0276.584] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107344.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107344.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0276.584] GetFileType (hFile=0x174) returned 0x1 [0276.584] CloseHandle (hObject=0x174) returned 1 [0276.585] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0276.585] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107344.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107344.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13d4)) returned 1 [0276.585] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0276.585] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0276.585] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107344.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107344.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13d4)) returned 1 [0276.586] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0276.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0276.586] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0276.586] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5c78, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0107350.WMF", cAlternateFileName="")) returned 1 [0276.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0276.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0276.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0276.586] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0276.586] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0276.587] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0276.587] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107350.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107350.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0276.587] GetFileType (hFile=0x174) returned 0x1 [0276.588] CloseHandle (hObject=0x174) returned 1 [0276.588] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0276.589] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107350.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107350.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5c78)) returned 1 [0276.589] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0276.589] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0276.589] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107350.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107350.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5c78)) returned 1 [0276.589] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0276.589] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0276.589] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0276.590] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f1c, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0107358.WMF", cAlternateFileName="")) returned 1 [0276.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0276.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0276.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0276.590] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0276.590] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0276.590] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0276.591] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107358.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107358.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0276.591] GetFileType (hFile=0x174) returned 0x1 [0276.592] CloseHandle (hObject=0x174) returned 1 [0276.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0276.593] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107358.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107358.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f1c)) returned 1 [0276.593] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0276.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0276.593] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107358.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107358.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f1c)) returned 1 [0276.593] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0276.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0276.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0276.594] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x40cc, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0107364.WMF", cAlternateFileName="")) returned 1 [0276.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0276.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0276.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0276.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0276.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0276.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0276.595] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107364.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107364.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0276.596] GetFileType (hFile=0x174) returned 0x1 [0276.596] CloseHandle (hObject=0x174) returned 1 [0276.597] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0276.597] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107364.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107364.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x40cc)) returned 1 [0276.597] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0276.597] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0276.597] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107364.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107364.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x40cc)) returned 1 [0276.597] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0276.915] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0276.915] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0276.915] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ce4, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0107426.WMF", cAlternateFileName="")) returned 1 [0276.915] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0276.915] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0276.915] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0276.915] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0276.915] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0276.916] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0276.916] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107426.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107426.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0277.208] GetFileType (hFile=0x1e0) returned 0x1 [0277.208] CloseHandle (hObject=0x1e0) returned 1 [0277.209] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0277.209] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107426.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107426.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ce4)) returned 1 [0277.209] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0277.209] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0277.209] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107426.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107426.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ce4)) returned 1 [0277.209] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0277.209] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0277.210] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0277.210] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7680, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0107446.WMF", cAlternateFileName="")) returned 1 [0277.210] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0277.210] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0277.210] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0277.211] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0277.211] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0277.211] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0277.212] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107446.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107446.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0277.501] GetFileType (hFile=0x21c) returned 0x1 [0277.501] CloseHandle (hObject=0x21c) returned 1 [0277.501] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0277.502] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107446.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107446.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7680)) returned 1 [0277.502] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0277.502] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0277.502] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107446.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107446.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7680)) returned 1 [0277.502] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0277.502] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0277.502] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0277.502] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1338, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0107450.WMF", cAlternateFileName="")) returned 1 [0277.502] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0277.502] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0277.502] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0277.502] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0277.503] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0277.503] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0277.503] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107450.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107450.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0277.759] GetFileType (hFile=0x21c) returned 0x1 [0277.760] CloseHandle (hObject=0x21c) returned 1 [0277.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0277.760] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107450.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107450.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1338)) returned 1 [0277.760] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0277.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0277.761] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107450.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107450.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1338)) returned 1 [0277.761] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0277.761] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0277.761] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0277.761] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x52e0, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0107452.WMF", cAlternateFileName="")) returned 1 [0277.761] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0277.761] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0277.761] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0277.761] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0277.761] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0277.761] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0277.832] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107452.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107452.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0277.833] GetFileType (hFile=0x1ac) returned 0x1 [0277.833] CloseHandle (hObject=0x1ac) returned 1 [0277.833] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0277.833] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107452.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107452.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x52e0)) returned 1 [0277.833] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0277.833] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0277.834] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107452.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107452.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x52e0)) returned 1 [0277.834] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0277.834] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0277.834] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0277.834] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe8c, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0107456.WMF", cAlternateFileName="")) returned 1 [0277.834] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0277.834] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0277.834] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0277.834] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0277.834] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0277.834] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0277.835] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107456.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107456.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0277.835] GetFileType (hFile=0x1ac) returned 0x1 [0277.835] CloseHandle (hObject=0x1ac) returned 1 [0277.835] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0277.836] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107456.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107456.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe8c)) returned 1 [0277.836] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0277.836] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0277.836] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107456.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107456.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe8c)) returned 1 [0277.836] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0277.836] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0277.836] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0277.836] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdf0, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0107458.WMF", cAlternateFileName="")) returned 1 [0277.836] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0277.836] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0277.837] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0277.837] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0277.837] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0277.837] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0277.837] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107458.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107458.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0277.838] GetFileType (hFile=0x1ac) returned 0x1 [0277.838] CloseHandle (hObject=0x1ac) returned 1 [0277.838] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0277.838] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107458.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107458.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdf0)) returned 1 [0277.839] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0277.839] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0277.839] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107458.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107458.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdf0)) returned 1 [0277.839] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0277.839] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0277.839] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0277.839] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x258c, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0107468.WMF", cAlternateFileName="")) returned 1 [0277.839] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0277.839] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0277.839] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0277.839] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0277.840] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0277.840] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0277.840] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107468.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107468.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0277.840] GetFileType (hFile=0x1ac) returned 0x1 [0277.841] CloseHandle (hObject=0x1ac) returned 1 [0277.841] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0277.841] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107468.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107468.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x258c)) returned 1 [0277.841] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0277.841] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0277.842] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107468.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107468.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x258c)) returned 1 [0277.842] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0277.842] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0277.842] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0277.842] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1788, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0107480.WMF", cAlternateFileName="")) returned 1 [0277.842] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0277.842] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0277.842] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0277.842] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0277.842] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0277.842] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0277.843] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107480.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107480.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0277.843] GetFileType (hFile=0x1ac) returned 0x1 [0277.843] CloseHandle (hObject=0x1ac) returned 1 [0277.844] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0277.844] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107480.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107480.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1788)) returned 1 [0277.844] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0277.844] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0277.844] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107480.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107480.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1788)) returned 1 [0277.844] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0277.844] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0277.844] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0277.845] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe736331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe736331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1374, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0107482.WMF", cAlternateFileName="")) returned 1 [0277.845] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0277.845] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0277.845] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0277.845] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0277.845] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0277.845] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0277.846] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107482.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107482.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0277.846] GetFileType (hFile=0x1ac) returned 0x1 [0277.846] CloseHandle (hObject=0x1ac) returned 1 [0277.850] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0277.850] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107482.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107482.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe736331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe736331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1374)) returned 1 [0277.850] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0277.850] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0277.850] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107482.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107482.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe736331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe736331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1374)) returned 1 [0277.850] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0277.851] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0277.851] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0277.851] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbe0, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0107484.WMF", cAlternateFileName="")) returned 1 [0277.851] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0277.851] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0277.851] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0277.851] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0277.851] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0277.851] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0277.852] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107484.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107484.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0277.852] GetFileType (hFile=0x1ac) returned 0x1 [0277.852] CloseHandle (hObject=0x1ac) returned 1 [0277.853] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0277.853] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107484.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107484.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbe0)) returned 1 [0277.853] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0277.853] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0277.853] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107484.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107484.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbe0)) returned 1 [0277.853] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0277.853] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0277.854] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0277.854] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f40, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0107488.WMF", cAlternateFileName="")) returned 1 [0277.854] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0277.854] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0277.854] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0277.854] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0277.854] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0277.854] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0277.855] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107488.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107488.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0277.855] GetFileType (hFile=0x1ac) returned 0x1 [0277.856] CloseHandle (hObject=0x1ac) returned 1 [0277.856] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0277.856] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107488.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107488.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f40)) returned 1 [0277.857] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0277.857] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0277.857] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107488.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107488.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f40)) returned 1 [0277.857] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0277.857] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0277.857] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0277.857] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4054, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0107490.WMF", cAlternateFileName="")) returned 1 [0277.857] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0277.858] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0277.858] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0277.858] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0277.858] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0277.858] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0277.859] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107490.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107490.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0277.859] GetFileType (hFile=0x1ac) returned 0x1 [0277.860] CloseHandle (hObject=0x1ac) returned 1 [0277.860] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0277.860] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107490.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107490.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4054)) returned 1 [0277.860] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0277.860] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0277.861] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107490.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107490.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4054)) returned 1 [0277.861] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0277.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0277.861] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0277.861] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1acc, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0107492.WMF", cAlternateFileName="")) returned 1 [0277.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0277.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0277.862] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0277.862] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0277.862] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0277.862] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0277.863] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107492.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107492.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0277.863] GetFileType (hFile=0x1ac) returned 0x1 [0277.864] CloseHandle (hObject=0x1ac) returned 1 [0277.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0277.865] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107492.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107492.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1acc)) returned 1 [0277.865] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0277.865] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0277.865] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107492.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107492.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1acc)) returned 1 [0277.865] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0277.865] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0277.865] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0277.865] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1918, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0107494.WMF", cAlternateFileName="")) returned 1 [0277.866] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0277.866] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0277.866] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0277.866] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0277.866] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0277.866] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0277.867] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107494.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107494.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0277.867] GetFileType (hFile=0x1ac) returned 0x1 [0277.868] CloseHandle (hObject=0x1ac) returned 1 [0277.868] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0277.868] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107494.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107494.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1918)) returned 1 [0277.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0277.868] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0277.868] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107494.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107494.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1918)) returned 1 [0277.869] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0277.869] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0277.869] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0277.869] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x22a0, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0107496.WMF", cAlternateFileName="")) returned 1 [0277.869] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0277.869] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0277.869] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0277.869] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0277.869] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0277.869] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0277.870] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107496.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107496.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0277.870] GetFileType (hFile=0x1ac) returned 0x1 [0277.871] CloseHandle (hObject=0x1ac) returned 1 [0277.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0277.871] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107496.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107496.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x22a0)) returned 1 [0277.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0277.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0277.872] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107496.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107496.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x22a0)) returned 1 [0277.872] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0277.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0277.872] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0277.872] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1068, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0107500.WMF", cAlternateFileName="")) returned 1 [0277.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0277.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0277.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0277.872] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0277.873] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0277.873] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0277.873] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107500.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107500.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0277.874] GetFileType (hFile=0x1ac) returned 0x1 [0277.874] CloseHandle (hObject=0x1ac) returned 1 [0277.875] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0277.875] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107500.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107500.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1068)) returned 1 [0277.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0277.875] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0277.875] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107500.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107500.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1068)) returned 1 [0277.876] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0277.876] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0277.876] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0277.876] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a54, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0107502.WMF", cAlternateFileName="")) returned 1 [0277.876] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0277.876] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0277.876] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0277.876] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0277.876] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0277.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0277.877] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107502.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107502.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0277.878] GetFileType (hFile=0x1ac) returned 0x1 [0277.878] CloseHandle (hObject=0x1ac) returned 1 [0277.878] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0277.879] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107502.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107502.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a54)) returned 1 [0278.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0278.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0278.086] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107502.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107502.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a54)) returned 1 [0278.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0278.087] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0278.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0278.087] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c8c, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0107512.WMF", cAlternateFileName="")) returned 1 [0278.087] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0278.087] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0278.087] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0278.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0278.088] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0278.088] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0278.268] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107512.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107512.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0278.269] GetFileType (hFile=0x1ac) returned 0x1 [0278.270] CloseHandle (hObject=0x1ac) returned 1 [0278.271] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0278.271] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107512.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107512.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c8c)) returned 1 [0278.271] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0278.271] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0278.271] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107512.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107512.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c8c)) returned 1 [0278.272] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0278.272] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0278.272] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0278.272] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe78281d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe78281d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2fac, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0107514.WMF", cAlternateFileName="")) returned 1 [0278.272] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0278.272] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0278.272] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0278.273] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0278.273] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0278.273] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0278.273] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107514.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107514.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0278.274] GetFileType (hFile=0x1ac) returned 0x1 [0278.274] CloseHandle (hObject=0x1ac) returned 1 [0278.275] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0278.275] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107514.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107514.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe78281d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe78281d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2fac)) returned 1 [0278.275] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0278.275] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0278.275] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107514.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107514.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe78281d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe78281d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2fac)) returned 1 [0278.276] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0278.276] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0278.276] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0278.276] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe78281d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe78281d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x36b8, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0107516.WMF", cAlternateFileName="")) returned 1 [0278.276] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0278.276] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0278.276] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0278.276] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0278.276] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0278.277] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0278.277] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107516.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107516.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0278.278] GetFileType (hFile=0x1ac) returned 0x1 [0278.278] CloseHandle (hObject=0x1ac) returned 1 [0278.278] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0278.279] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107516.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107516.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe78281d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe78281d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x36b8)) returned 1 [0278.279] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0278.279] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0278.279] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107516.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107516.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe78281d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe78281d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x36b8)) returned 1 [0278.279] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0278.279] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0278.279] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0278.279] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe78281d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe78281d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe78281d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f0c, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0107526.WMF", cAlternateFileName="")) returned 1 [0278.279] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0278.279] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0278.280] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0278.280] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0278.280] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0278.280] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0278.280] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107526.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107526.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0278.281] GetFileType (hFile=0x1ac) returned 0x1 [0278.281] CloseHandle (hObject=0x1ac) returned 1 [0278.281] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0278.281] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107526.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107526.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe78281d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe78281d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe78281d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f0c)) returned 1 [0278.281] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0278.281] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0278.281] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107526.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107526.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe78281d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe78281d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe78281d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f0c)) returned 1 [0278.281] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0278.282] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0278.282] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0278.282] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe78281d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe78281d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe78281d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a88, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0107528.WMF", cAlternateFileName="")) returned 1 [0278.282] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0278.282] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0278.282] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0278.282] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0278.282] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0278.282] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0278.282] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107528.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107528.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0278.283] GetFileType (hFile=0x1ac) returned 0x1 [0278.283] CloseHandle (hObject=0x1ac) returned 1 [0278.283] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0278.283] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107528.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107528.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe78281d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe78281d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe78281d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a88)) returned 1 [0278.284] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0278.284] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0278.284] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107528.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107528.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe78281d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe78281d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe78281d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a88)) returned 1 [0278.284] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0278.284] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0278.284] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0278.284] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe736331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe736331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe78281d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6890, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0107544.WMF", cAlternateFileName="")) returned 1 [0278.284] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0278.284] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0278.284] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0278.284] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0278.284] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0278.284] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0278.285] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107544.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107544.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0278.285] GetFileType (hFile=0x1ac) returned 0x1 [0278.285] CloseHandle (hObject=0x1ac) returned 1 [0278.286] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0278.286] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107544.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107544.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe736331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe736331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe78281d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6890)) returned 1 [0278.286] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0278.286] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0278.286] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107544.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107544.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe736331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe736331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe78281d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6890)) returned 1 [0278.286] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0278.286] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0278.286] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0278.286] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe736331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe736331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe75c571, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ba0, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0107658.WMF", cAlternateFileName="")) returned 1 [0278.286] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0278.286] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0278.287] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0278.287] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0278.287] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0278.287] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0278.287] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107658.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107658.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0278.287] GetFileType (hFile=0x1ac) returned 0x1 [0278.287] CloseHandle (hObject=0x1ac) returned 1 [0278.288] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0278.288] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107658.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107658.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe736331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe736331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe75c571, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ba0)) returned 1 [0278.288] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0278.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0278.289] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107658.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107658.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe736331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe736331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe75c571, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ba0)) returned 1 [0278.289] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0278.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0278.289] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0278.289] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe75c571, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe75c571, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe78281d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12c8, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0107708.WMF", cAlternateFileName="")) returned 1 [0278.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0278.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0278.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0278.289] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0278.289] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0278.289] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0278.290] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107708.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107708.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0278.290] GetFileType (hFile=0x1ac) returned 0x1 [0278.290] CloseHandle (hObject=0x1ac) returned 1 [0278.291] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0278.291] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107708.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107708.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe75c571, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe75c571, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe78281d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12c8)) returned 1 [0278.291] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0278.291] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0278.291] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107708.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107708.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe75c571, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe75c571, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe78281d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12c8)) returned 1 [0278.291] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0278.291] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0278.291] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0278.291] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe736331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe736331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe75c571, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x121c, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0107712.WMF", cAlternateFileName="")) returned 1 [0278.291] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0278.292] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0278.292] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0278.292] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0278.292] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0278.292] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0278.292] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107712.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107712.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0278.293] GetFileType (hFile=0x1ac) returned 0x1 [0278.293] CloseHandle (hObject=0x1ac) returned 1 [0278.293] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0278.293] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107712.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107712.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe736331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe736331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe75c571, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x121c)) returned 1 [0278.293] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0278.293] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0278.293] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107712.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107712.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe736331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe736331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe75c571, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x121c)) returned 1 [0278.294] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0278.294] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0278.294] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0278.294] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe736331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe736331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe78281d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xed8, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0107718.WMF", cAlternateFileName="")) returned 1 [0278.294] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0278.294] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0278.294] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0278.294] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0278.294] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0278.294] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0278.295] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107718.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107718.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0278.295] GetFileType (hFile=0x1ac) returned 0x1 [0278.295] CloseHandle (hObject=0x1ac) returned 1 [0278.296] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0278.296] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107718.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107718.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe736331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe736331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe78281d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xed8)) returned 1 [0278.296] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0278.296] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0278.296] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107718.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107718.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe736331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe736331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe78281d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xed8)) returned 1 [0278.296] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0278.296] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0278.296] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0278.296] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe736331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe736331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2044, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0107722.WMF", cAlternateFileName="")) returned 1 [0278.297] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0278.297] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0278.297] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0278.297] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0278.297] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0278.297] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0278.297] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107722.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107722.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0278.297] GetFileType (hFile=0x1ac) returned 0x1 [0278.298] CloseHandle (hObject=0x1ac) returned 1 [0278.298] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0278.298] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107722.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107722.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe736331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe736331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2044)) returned 1 [0278.298] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0278.298] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0278.298] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107722.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107722.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe736331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe736331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2044)) returned 1 [0278.298] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0278.298] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0278.299] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0278.299] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b68, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0107724.WMF", cAlternateFileName="")) returned 1 [0278.299] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0278.299] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0278.299] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0278.299] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0278.299] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0278.299] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0278.299] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107724.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107724.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0278.667] GetFileType (hFile=0x1ac) returned 0x1 [0278.667] CloseHandle (hObject=0x1ac) returned 1 [0278.667] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0278.668] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107724.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107724.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b68)) returned 1 [0278.668] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0278.668] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0278.668] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107724.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107724.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b68)) returned 1 [0278.668] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0278.668] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0278.668] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0278.669] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1574, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0107728.WMF", cAlternateFileName="")) returned 1 [0278.669] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0278.669] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0278.669] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0278.669] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0278.669] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0278.669] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0279.033] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107728.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107728.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0279.034] GetFileType (hFile=0x1e0) returned 0x1 [0279.034] CloseHandle (hObject=0x1e0) returned 1 [0279.035] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0279.035] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107728.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107728.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1574)) returned 1 [0279.035] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0279.035] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0279.035] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107728.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107728.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1574)) returned 1 [0279.035] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0279.035] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0279.036] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0279.036] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbf4, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0107730.WMF", cAlternateFileName="")) returned 1 [0279.036] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0279.036] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0279.036] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0279.036] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0279.036] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0279.036] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0279.037] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107730.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107730.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0279.037] GetFileType (hFile=0x1e0) returned 0x1 [0279.037] CloseHandle (hObject=0x1e0) returned 1 [0279.038] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0279.039] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107730.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107730.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbf4)) returned 1 [0279.039] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0279.039] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0279.039] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107730.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107730.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbf4)) returned 1 [0279.039] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0279.039] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0279.039] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0279.039] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc44, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0107734.WMF", cAlternateFileName="")) returned 1 [0279.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0279.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0279.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0279.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0279.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0279.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0279.041] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107734.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107734.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0279.041] GetFileType (hFile=0x1e0) returned 0x1 [0279.041] CloseHandle (hObject=0x1e0) returned 1 [0279.042] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0279.042] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107734.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107734.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc44)) returned 1 [0279.042] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0279.042] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0279.042] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107734.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107734.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc44)) returned 1 [0279.042] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0279.042] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0279.042] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0279.042] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe3c, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0107742.WMF", cAlternateFileName="")) returned 1 [0279.043] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0279.043] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0279.043] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0279.043] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0279.043] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0279.043] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0279.044] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107742.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107742.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0279.044] GetFileType (hFile=0x1e0) returned 0x1 [0279.044] CloseHandle (hObject=0x1e0) returned 1 [0279.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0279.045] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107742.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107742.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe3c)) returned 1 [0279.045] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0279.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0279.045] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107742.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107742.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe3c)) returned 1 [0279.045] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0279.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0279.045] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0279.045] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe78281d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe78281d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x138c, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0107744.WMF", cAlternateFileName="")) returned 1 [0279.046] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0279.046] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0279.046] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0279.046] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0279.046] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0279.046] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0279.046] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107744.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107744.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0279.047] GetFileType (hFile=0x1e0) returned 0x1 [0279.047] CloseHandle (hObject=0x1e0) returned 1 [0279.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0279.048] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107744.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107744.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe78281d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe78281d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x138c)) returned 1 [0279.048] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0279.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0279.048] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107744.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107744.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe78281d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe78281d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x138c)) returned 1 [0279.048] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0279.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0279.048] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0279.048] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12b4, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0107746.WMF", cAlternateFileName="")) returned 1 [0279.049] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0279.049] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0279.049] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0279.049] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0279.049] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0279.049] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0279.049] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107746.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107746.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0279.050] GetFileType (hFile=0x1e0) returned 0x1 [0279.050] CloseHandle (hObject=0x1e0) returned 1 [0279.050] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0279.050] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107746.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107746.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12b4)) returned 1 [0279.051] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0279.051] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0279.051] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107746.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107746.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12b4)) returned 1 [0279.051] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0279.051] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0279.051] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0279.051] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2020, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0107748.WMF", cAlternateFileName="")) returned 1 [0279.051] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0279.051] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0279.051] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0279.051] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0279.052] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0279.052] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0279.052] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107748.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107748.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0279.053] GetFileType (hFile=0x1e0) returned 0x1 [0279.053] CloseHandle (hObject=0x1e0) returned 1 [0279.053] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0279.053] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107748.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107748.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2020)) returned 1 [0279.054] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0279.054] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0279.055] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107748.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107748.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2020)) returned 1 [0279.055] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0279.055] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0279.055] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0279.055] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x126c, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0107750.WMF", cAlternateFileName="")) returned 1 [0279.055] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0279.055] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0279.055] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0279.055] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0279.055] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0279.056] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0279.056] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107750.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107750.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0279.056] GetFileType (hFile=0x1e0) returned 0x1 [0279.057] CloseHandle (hObject=0x1e0) returned 1 [0279.057] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0279.057] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107750.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107750.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x126c)) returned 1 [0279.058] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0279.058] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0279.058] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107750.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107750.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x126c)) returned 1 [0279.058] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0279.058] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0279.058] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0279.058] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe78281d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe78281d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4146, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0136865.WMF", cAlternateFileName="")) returned 1 [0279.058] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0279.058] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0279.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0279.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0279.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0279.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0279.059] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0136865.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0136865.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0279.060] GetFileType (hFile=0x1e0) returned 0x1 [0279.060] CloseHandle (hObject=0x1e0) returned 1 [0279.061] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0279.061] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0136865.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0136865.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe78281d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe78281d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4146)) returned 1 [0279.061] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0279.061] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0279.061] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0136865.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0136865.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe78281d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe78281d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4146)) returned 1 [0279.061] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0279.061] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0279.061] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0279.061] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9d27, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0144773.JPG", cAlternateFileName="")) returned 1 [0279.061] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0279.062] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0279.062] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0279.062] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0279.062] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0279.062] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0279.062] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0144773.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0144773.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0279.063] GetFileType (hFile=0x1e0) returned 0x1 [0279.063] CloseHandle (hObject=0x1e0) returned 1 [0279.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0279.064] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0144773.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0144773.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9d27)) returned 1 [0279.064] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0279.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0279.064] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0144773.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0144773.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9d27)) returned 1 [0279.064] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0279.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0279.064] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0279.064] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8379, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0145168.JPG", cAlternateFileName="")) returned 1 [0279.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0279.065] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0279.065] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0279.065] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0279.065] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0279.065] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0279.065] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145168.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145168.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0279.066] GetFileType (hFile=0x1e0) returned 0x1 [0279.066] CloseHandle (hObject=0x1e0) returned 1 [0279.066] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0279.066] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145168.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145168.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8379)) returned 1 [0279.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0279.067] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0279.067] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145168.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145168.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8379)) returned 1 [0279.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0279.067] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0279.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0279.067] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf0c1, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0145212.JPG", cAlternateFileName="")) returned 1 [0279.067] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0279.067] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0279.068] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0279.068] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0279.068] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0279.068] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0279.068] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145212.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145212.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0279.069] GetFileType (hFile=0x1e0) returned 0x1 [0279.566] CloseHandle (hObject=0x1e0) returned 1 [0279.566] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0279.566] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145212.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145212.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf0c1)) returned 1 [0279.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0279.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0279.567] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145212.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145212.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf0c1)) returned 1 [0279.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0279.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0279.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0279.568] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc056, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0145272.JPG", cAlternateFileName="")) returned 1 [0279.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0279.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0279.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0279.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0279.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0279.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0279.570] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145272.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145272.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0279.571] GetFileType (hFile=0x1e0) returned 0x1 [0279.572] CloseHandle (hObject=0x1e0) returned 1 [0279.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0279.573] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145272.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145272.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc056)) returned 1 [0279.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0279.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0279.574] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145272.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145272.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc056)) returned 1 [0279.585] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0279.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0279.586] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0279.586] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5285, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0145361.JPG", cAlternateFileName="")) returned 1 [0279.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0279.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0279.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0279.586] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0279.586] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0279.587] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0279.587] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145361.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145361.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0279.588] GetFileType (hFile=0x1e0) returned 0x1 [0279.588] CloseHandle (hObject=0x1e0) returned 1 [0279.589] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0279.589] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145361.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145361.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5285)) returned 1 [0279.589] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0279.589] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0279.589] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145361.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145361.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5285)) returned 1 [0279.589] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0279.589] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0279.589] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0279.590] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45cb, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0145373.JPG", cAlternateFileName="")) returned 1 [0279.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0279.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0279.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0279.590] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0279.590] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0279.590] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0279.591] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145373.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145373.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0279.591] GetFileType (hFile=0x1e0) returned 0x1 [0279.592] CloseHandle (hObject=0x1e0) returned 1 [0279.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0279.592] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145373.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145373.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45cb)) returned 1 [0279.592] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0279.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0279.593] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145373.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145373.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45cb)) returned 1 [0279.593] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0279.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0279.593] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0279.593] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7c6a, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0145669.JPG", cAlternateFileName="")) returned 1 [0279.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0279.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0279.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0279.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0279.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0279.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0279.595] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145669.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145669.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0279.595] GetFileType (hFile=0x1e0) returned 0x1 [0279.595] CloseHandle (hObject=0x1e0) returned 1 [0279.596] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0279.596] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145669.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145669.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7c6a)) returned 1 [0279.596] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0279.596] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0279.596] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145669.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145669.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7c6a)) returned 1 [0279.596] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0279.597] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0279.597] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0279.597] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8fd4, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0145707.JPG", cAlternateFileName="")) returned 1 [0279.597] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0279.597] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0279.597] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0279.597] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0279.597] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0279.598] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0279.598] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145707.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145707.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0279.599] GetFileType (hFile=0x1e0) returned 0x1 [0279.599] CloseHandle (hObject=0x1e0) returned 1 [0279.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0279.600] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145707.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145707.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8fd4)) returned 1 [0279.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0279.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0279.601] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145707.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145707.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8fd4)) returned 1 [0279.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0279.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0279.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0279.602] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8fb8, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0145810.JPG", cAlternateFileName="")) returned 1 [0279.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0279.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0279.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0279.603] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0279.603] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0279.603] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0279.604] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145810.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145810.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0279.604] GetFileType (hFile=0x1e0) returned 0x1 [0279.605] CloseHandle (hObject=0x1e0) returned 1 [0279.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0279.605] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145810.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145810.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8fb8)) returned 1 [0279.606] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0279.606] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0279.606] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145810.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145810.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8fb8)) returned 1 [0279.606] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0279.606] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0279.606] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0279.607] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8a5b, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0145879.JPG", cAlternateFileName="")) returned 1 [0279.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0279.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0279.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0279.607] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0279.607] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0279.607] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0279.608] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145879.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145879.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0279.609] GetFileType (hFile=0x1e0) returned 0x1 [0279.609] CloseHandle (hObject=0x1e0) returned 1 [0279.610] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0279.610] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145879.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145879.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8a5b)) returned 1 [0279.610] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0279.610] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0279.610] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145879.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145879.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8a5b)) returned 1 [0279.610] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0279.610] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0279.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0279.611] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x84a6, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0145895.JPG", cAlternateFileName="")) returned 1 [0279.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0279.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0279.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0279.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0279.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0279.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0279.612] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145895.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145895.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0279.613] GetFileType (hFile=0x1e0) returned 0x1 [0279.613] CloseHandle (hObject=0x1e0) returned 1 [0279.614] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0279.614] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145895.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145895.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x84a6)) returned 1 [0279.614] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0279.614] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0279.614] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145895.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145895.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x84a6)) returned 1 [0279.614] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0279.614] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0279.615] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0279.615] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9a76, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0145904.JPG", cAlternateFileName="")) returned 1 [0279.615] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0279.615] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0279.615] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0279.615] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0279.615] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0279.615] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0279.858] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145904.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145904.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0279.858] GetFileType (hFile=0x198) returned 0x1 [0279.859] CloseHandle (hObject=0x198) returned 1 [0279.859] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0279.859] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145904.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145904.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9a76)) returned 1 [0279.860] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0279.860] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0279.860] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145904.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145904.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9a76)) returned 1 [0279.860] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0279.860] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0279.860] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0279.860] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb5ac, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0146142.JPG", cAlternateFileName="")) returned 1 [0279.860] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0279.860] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0279.860] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0279.861] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0279.861] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0279.861] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0279.935] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0146142.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0146142.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0279.936] GetFileType (hFile=0x198) returned 0x1 [0279.936] CloseHandle (hObject=0x198) returned 1 [0279.937] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0279.937] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0146142.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0146142.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb5ac)) returned 1 [0279.937] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0279.937] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0279.937] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0146142.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0146142.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb5ac)) returned 1 [0279.938] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0279.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0279.938] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0279.938] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe81b154, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe81b154, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaa9a, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0148309.JPG", cAlternateFileName="")) returned 1 [0279.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0279.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0279.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0279.939] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0279.939] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0279.939] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0279.940] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148309.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148309.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0279.940] GetFileType (hFile=0x198) returned 0x1 [0279.941] CloseHandle (hObject=0x198) returned 1 [0279.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0279.941] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148309.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148309.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe81b154, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe81b154, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaa9a)) returned 1 [0279.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0279.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0279.942] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148309.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148309.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe81b154, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe81b154, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaa9a)) returned 1 [0279.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0279.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0279.943] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0279.943] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x107d4, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0148757.JPG", cAlternateFileName="")) returned 1 [0279.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0279.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0279.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0279.943] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0279.944] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0279.944] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0279.945] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148757.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148757.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0279.946] GetFileType (hFile=0x198) returned 0x1 [0279.946] CloseHandle (hObject=0x198) returned 1 [0279.947] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0279.947] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148757.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148757.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x107d4)) returned 1 [0279.947] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0279.948] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0279.948] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148757.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148757.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x107d4)) returned 1 [0279.948] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0279.948] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0279.948] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0279.948] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe81b154, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x955d, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0148798.JPG", cAlternateFileName="")) returned 1 [0279.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0279.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0279.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0279.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0279.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0279.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0279.950] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148798.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148798.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0279.951] GetFileType (hFile=0x198) returned 0x1 [0279.951] CloseHandle (hObject=0x198) returned 1 [0279.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0279.952] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148798.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148798.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe81b154, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x955d)) returned 1 [0279.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0279.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0279.953] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148798.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148798.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe81b154, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x955d)) returned 1 [0279.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0279.953] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0279.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0279.953] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7f4eef, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7f4eef, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6b01, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0149018.JPG", cAlternateFileName="")) returned 1 [0279.953] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0279.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0279.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0279.954] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0279.954] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0279.954] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0279.955] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149018.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0149018.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0279.956] GetFileType (hFile=0x198) returned 0x1 [0279.956] CloseHandle (hObject=0x198) returned 1 [0279.957] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0279.957] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149018.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0149018.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7f4eef, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7f4eef, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6b01)) returned 1 [0279.957] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0279.957] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0279.957] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149018.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0149018.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7f4eef, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7f4eef, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6b01)) returned 1 [0279.957] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0279.958] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0279.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0279.958] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe81b154, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfd22, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0149118.JPG", cAlternateFileName="")) returned 1 [0279.958] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0279.958] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0279.958] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0279.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0279.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0279.959] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0279.959] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149118.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0149118.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0279.960] GetFileType (hFile=0x198) returned 0x1 [0279.961] CloseHandle (hObject=0x198) returned 1 [0279.961] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0279.961] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149118.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0149118.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe81b154, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfd22)) returned 1 [0279.962] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0279.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0279.962] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149118.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0149118.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe81b154, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfd22)) returned 1 [0279.962] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0279.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0279.962] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0279.962] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe81b154, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb544, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0150150.WMF", cAlternateFileName="")) returned 1 [0279.963] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0279.963] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0279.963] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0279.963] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0279.963] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0279.963] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0279.964] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150150.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0150150.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0279.965] GetFileType (hFile=0x198) returned 0x1 [0279.965] CloseHandle (hObject=0x198) returned 1 [0279.966] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0279.966] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150150.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0150150.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe81b154, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb544)) returned 1 [0279.966] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0279.966] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0279.966] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150150.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0150150.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe81b154, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb544)) returned 1 [0279.966] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0279.967] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0279.967] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0279.967] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7f4eef, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x212e, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0150861.WMF", cAlternateFileName="")) returned 1 [0279.967] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0279.967] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0279.967] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0279.967] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0279.968] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0279.968] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0279.969] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150861.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0150861.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0279.969] GetFileType (hFile=0x198) returned 0x1 [0279.970] CloseHandle (hObject=0x198) returned 1 [0279.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0279.970] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150861.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0150861.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7f4eef, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x212e)) returned 1 [0279.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0279.971] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0279.971] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150861.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0150861.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7f4eef, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x212e)) returned 1 [0279.971] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0279.971] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0279.971] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0279.971] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe867602, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1104, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0151041.WMF", cAlternateFileName="")) returned 1 [0279.971] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0279.972] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0279.972] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0279.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0279.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0279.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0279.973] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151041.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151041.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0279.973] GetFileType (hFile=0x198) returned 0x1 [0279.974] CloseHandle (hObject=0x198) returned 1 [0279.975] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0279.975] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151041.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151041.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe867602, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1104)) returned 1 [0279.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0279.975] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0279.975] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151041.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151041.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe867602, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1104)) returned 1 [0279.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0279.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0279.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0279.976] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3c68, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0151045.WMF", cAlternateFileName="")) returned 1 [0279.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0279.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0279.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0280.269] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0280.269] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0280.269] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0280.386] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151045.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151045.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0280.386] GetFileType (hFile=0x198) returned 0x1 [0280.386] CloseHandle (hObject=0x198) returned 1 [0280.387] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0280.387] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151045.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151045.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3c68)) returned 1 [0280.387] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0280.387] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0280.387] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151045.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151045.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3c68)) returned 1 [0280.388] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0280.388] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0280.388] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0280.388] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4844, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0151047.WMF", cAlternateFileName="")) returned 1 [0280.388] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0280.388] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0280.388] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0280.388] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0280.388] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0280.388] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0280.961] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151047.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151047.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0280.961] GetFileType (hFile=0x1c0) returned 0x1 [0280.961] CloseHandle (hObject=0x1c0) returned 1 [0280.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0280.962] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151047.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151047.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4844)) returned 1 [0280.962] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0280.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0280.962] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151047.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151047.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4844)) returned 1 [0280.962] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0280.963] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0280.963] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0280.963] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3928, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0151055.WMF", cAlternateFileName="")) returned 1 [0280.963] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0280.963] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0280.963] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0280.963] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0280.963] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0280.964] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0280.964] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151055.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151055.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0280.964] GetFileType (hFile=0x1c0) returned 0x1 [0280.965] CloseHandle (hObject=0x1c0) returned 1 [0280.965] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0280.966] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151055.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151055.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3928)) returned 1 [0280.966] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0280.966] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0280.966] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151055.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151055.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3928)) returned 1 [0280.966] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0280.966] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0280.966] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0280.966] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a60, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0151061.WMF", cAlternateFileName="")) returned 1 [0280.966] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0280.967] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0280.967] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0280.967] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0280.967] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0280.967] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0280.968] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151061.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151061.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0280.968] GetFileType (hFile=0x1c0) returned 0x1 [0280.968] CloseHandle (hObject=0x1c0) returned 1 [0280.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0280.969] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151061.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151061.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a60)) returned 1 [0280.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0280.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0280.969] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151061.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151061.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a60)) returned 1 [0280.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0280.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0280.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0280.970] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2988, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0151063.WMF", cAlternateFileName="")) returned 1 [0280.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0280.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0280.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0280.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0280.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0280.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0280.971] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151063.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151063.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0280.971] GetFileType (hFile=0x1c0) returned 0x1 [0280.972] CloseHandle (hObject=0x1c0) returned 1 [0280.972] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0280.972] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151063.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151063.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2988)) returned 1 [0280.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0280.972] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0280.973] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151063.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151063.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2988)) returned 1 [0280.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0280.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0280.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0280.973] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3394, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0151067.WMF", cAlternateFileName="")) returned 1 [0280.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0280.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0280.974] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0280.974] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0280.974] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0280.974] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0280.975] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151067.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151067.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0280.975] GetFileType (hFile=0x1c0) returned 0x1 [0280.976] CloseHandle (hObject=0x1c0) returned 1 [0280.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0280.977] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151067.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151067.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3394)) returned 1 [0280.977] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0280.977] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0280.977] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151067.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151067.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3394)) returned 1 [0280.977] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0280.977] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0280.977] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0280.978] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3418, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0151073.WMF", cAlternateFileName="")) returned 1 [0280.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0280.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0280.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0280.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0280.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0280.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0280.979] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151073.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151073.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0280.979] GetFileType (hFile=0x1c0) returned 0x1 [0280.980] CloseHandle (hObject=0x1c0) returned 1 [0280.980] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0280.980] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151073.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151073.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3418)) returned 1 [0280.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0280.981] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0280.981] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151073.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151073.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3418)) returned 1 [0280.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0280.981] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0280.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0280.981] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0151581.WMF", cAlternateFileName="")) returned 1 [0280.981] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0280.981] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0280.982] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0280.982] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0280.982] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0280.982] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0280.983] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151581.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151581.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0280.983] GetFileType (hFile=0x1c0) returned 0x1 [0280.983] CloseHandle (hObject=0x1c0) returned 1 [0280.983] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0280.984] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151581.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151581.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a00)) returned 1 [0280.984] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0280.984] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0280.984] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151581.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151581.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a00)) returned 1 [0280.984] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0280.984] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0280.984] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0280.984] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x610c, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0152414.WMF", cAlternateFileName="")) returned 1 [0280.984] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0280.984] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0280.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0280.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0280.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0280.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0280.986] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152414.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152414.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0280.986] GetFileType (hFile=0x1c0) returned 0x1 [0280.986] CloseHandle (hObject=0x1c0) returned 1 [0280.987] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0280.987] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152414.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152414.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x610c)) returned 1 [0280.987] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0280.987] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0280.987] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152414.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152414.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x610c)) returned 1 [0280.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0280.988] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0280.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0280.988] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe867602, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe867602, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe8d9e20, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3734, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0152430.WMF", cAlternateFileName="")) returned 1 [0280.988] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0280.988] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0280.988] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0280.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0280.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0280.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0280.989] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152430.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152430.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0280.990] GetFileType (hFile=0x1c0) returned 0x1 [0280.990] CloseHandle (hObject=0x1c0) returned 1 [0280.991] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0280.991] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152430.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152430.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe867602, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe867602, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe8d9e20, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3734)) returned 1 [0280.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0280.992] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0280.992] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152430.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152430.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe867602, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe867602, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe8d9e20, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3734)) returned 1 [0280.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0280.992] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0280.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0280.992] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe867602, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe867602, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe88d87c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x406c, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0152432.WMF", cAlternateFileName="")) returned 1 [0280.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0280.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0280.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0280.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0280.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0280.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0280.994] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152432.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152432.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0280.994] GetFileType (hFile=0x1c0) returned 0x1 [0280.994] CloseHandle (hObject=0x1c0) returned 1 [0280.995] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0280.995] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152432.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152432.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe867602, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe867602, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe88d87c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x406c)) returned 1 [0280.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0280.995] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0280.995] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152432.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152432.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe867602, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe867602, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe88d87c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x406c)) returned 1 [0280.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0280.996] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0280.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0280.996] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe867602, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe867602, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe8b3ab6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c4c, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0152436.WMF", cAlternateFileName="")) returned 1 [0280.996] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0280.996] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0280.996] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0280.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0280.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0280.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0280.997] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152436.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152436.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0280.997] GetFileType (hFile=0x1c0) returned 0x1 [0280.998] CloseHandle (hObject=0x1c0) returned 1 [0280.998] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0280.998] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152436.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152436.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe867602, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe867602, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe8b3ab6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c4c)) returned 1 [0280.999] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0280.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0280.999] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152436.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152436.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe867602, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe867602, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe8b3ab6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c4c)) returned 1 [0280.999] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0280.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0280.999] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0280.999] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe867602, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe867602, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe867602, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4030, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0152556.WMF", cAlternateFileName="")) returned 1 [0280.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0280.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0281.000] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0281.000] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0281.000] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0281.000] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0281.000] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152556.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152556.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0281.001] GetFileType (hFile=0x1c0) returned 0x1 [0281.001] CloseHandle (hObject=0x1c0) returned 1 [0281.002] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0281.002] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152556.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152556.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe867602, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe867602, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe867602, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4030)) returned 1 [0281.002] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0281.002] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0281.002] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152556.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152556.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe867602, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe867602, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe867602, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4030)) returned 1 [0281.002] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0281.003] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0281.003] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0281.003] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe867602, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3eb4, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0152558.WMF", cAlternateFileName="")) returned 1 [0281.003] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0281.003] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0281.003] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0281.003] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0281.003] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0281.003] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0281.004] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152558.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152558.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0281.005] GetFileType (hFile=0x1c0) returned 0x1 [0281.005] CloseHandle (hObject=0x1c0) returned 1 [0281.006] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0281.006] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152558.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152558.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe867602, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3eb4)) returned 1 [0281.006] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0281.006] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0281.006] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152558.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152558.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe867602, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3eb4)) returned 1 [0281.006] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0281.006] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0281.429] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0281.429] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a80, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0152560.WMF", cAlternateFileName="")) returned 1 [0281.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0281.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0281.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0281.430] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0281.430] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0281.430] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0281.430] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152560.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152560.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0281.431] GetFileType (hFile=0x174) returned 0x1 [0281.431] CloseHandle (hObject=0x174) returned 1 [0281.432] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0281.432] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152560.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152560.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a80)) returned 1 [0281.432] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0281.432] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0281.432] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152560.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152560.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a80)) returned 1 [0281.432] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0281.433] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0281.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0281.433] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe867602, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe867602, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe88d87c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe70, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0152568.WMF", cAlternateFileName="")) returned 1 [0281.433] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0281.433] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0281.433] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0281.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0281.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0281.434] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0281.434] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152568.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152568.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0281.435] GetFileType (hFile=0x174) returned 0x1 [0281.435] CloseHandle (hObject=0x174) returned 1 [0281.436] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0281.436] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152568.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152568.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe867602, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe867602, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe88d87c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe70)) returned 1 [0281.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0281.436] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0281.437] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152568.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152568.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe867602, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe867602, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe88d87c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe70)) returned 1 [0281.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0281.437] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0281.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0281.437] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe867602, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd28, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0152570.WMF", cAlternateFileName="")) returned 1 [0281.437] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0281.437] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0281.437] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0281.438] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0281.438] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0281.438] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0281.439] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152570.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152570.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0281.439] GetFileType (hFile=0x174) returned 0x1 [0281.439] CloseHandle (hObject=0x174) returned 1 [0281.439] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0281.439] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152570.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152570.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe867602, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd28)) returned 1 [0281.441] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0281.441] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0281.441] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152570.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152570.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe867602, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd28)) returned 1 [0281.441] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0281.441] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0281.442] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0281.442] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe867602, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ab4, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0152590.WMF", cAlternateFileName="")) returned 1 [0281.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0281.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0281.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0281.442] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0281.442] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0281.442] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0281.443] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152590.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152590.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0281.443] GetFileType (hFile=0x174) returned 0x1 [0281.444] CloseHandle (hObject=0x174) returned 1 [0281.445] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0281.445] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152590.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152590.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe867602, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ab4)) returned 1 [0281.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0281.445] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0281.445] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152590.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152590.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe867602, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ab4)) returned 1 [0281.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0281.446] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0281.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0281.446] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe867602, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18c4, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0152594.WMF", cAlternateFileName="")) returned 1 [0281.446] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0281.446] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0281.446] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0281.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0281.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0281.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0281.447] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152594.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152594.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0281.447] GetFileType (hFile=0x174) returned 0x1 [0281.448] CloseHandle (hObject=0x174) returned 1 [0281.448] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0281.448] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152594.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152594.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe867602, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18c4)) returned 1 [0281.449] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0281.449] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0281.449] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152594.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152594.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe867602, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18c4)) returned 1 [0281.449] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0281.449] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0281.449] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0281.449] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9261f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9261f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9261f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2628, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0152600.WMF", cAlternateFileName="")) returned 1 [0281.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0281.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0281.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0281.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0281.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0281.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0281.451] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152600.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152600.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0281.451] GetFileType (hFile=0x174) returned 0x1 [0281.452] CloseHandle (hObject=0x174) returned 1 [0281.452] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0281.452] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152600.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152600.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9261f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9261f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9261f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2628)) returned 1 [0281.452] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0281.452] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0281.453] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152600.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152600.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9261f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9261f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9261f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2628)) returned 1 [0281.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0281.453] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0281.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0281.453] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9261f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9261f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe94c4b9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1884, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0152602.WMF", cAlternateFileName="")) returned 1 [0281.453] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0281.453] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0281.453] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0281.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0281.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0281.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0281.455] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152602.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152602.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0281.455] GetFileType (hFile=0x174) returned 0x1 [0281.455] CloseHandle (hObject=0x174) returned 1 [0281.456] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0281.456] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152602.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152602.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9261f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9261f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe94c4b9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1884)) returned 1 [0281.456] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0281.456] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0281.456] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152602.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152602.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9261f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9261f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe94c4b9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1884)) returned 1 [0281.456] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0281.456] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0281.457] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0281.457] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9261f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9261f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9261f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x40f8, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0152606.WMF", cAlternateFileName="")) returned 1 [0281.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0281.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0281.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0281.457] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0281.457] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0281.457] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0281.458] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152606.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152606.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0281.458] GetFileType (hFile=0x174) returned 0x1 [0281.458] CloseHandle (hObject=0x174) returned 1 [0281.459] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0281.459] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152606.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152606.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9261f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9261f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9261f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x40f8)) returned 1 [0281.459] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0281.459] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0281.459] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152606.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152606.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9261f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9261f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9261f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x40f8)) returned 1 [0281.459] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0281.460] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0281.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0281.495] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9261f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9261f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9261f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3094, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0152608.WMF", cAlternateFileName="")) returned 1 [0281.495] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0281.495] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0281.495] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0281.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0281.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0281.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0281.496] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152608.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152608.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0281.496] GetFileType (hFile=0x174) returned 0x1 [0281.496] CloseHandle (hObject=0x174) returned 1 [0281.497] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0281.497] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152608.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152608.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9261f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9261f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9261f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3094)) returned 1 [0281.497] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0281.497] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0281.497] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152608.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152608.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9261f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9261f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9261f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3094)) returned 1 [0281.497] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0281.498] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0281.498] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0281.498] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe8fff80, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe8fff80, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9261f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1748, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0152610.WMF", cAlternateFileName="")) returned 1 [0281.498] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0281.498] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0281.498] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0281.498] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0281.498] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0281.498] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0281.499] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152610.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152610.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0281.499] GetFileType (hFile=0x174) returned 0x1 [0281.499] CloseHandle (hObject=0x174) returned 1 [0281.500] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0281.500] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152610.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152610.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe8fff80, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe8fff80, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9261f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1748)) returned 1 [0281.500] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0281.500] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0281.500] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152610.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152610.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe8fff80, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe8fff80, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9261f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1748)) returned 1 [0281.500] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0281.500] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0281.500] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0281.500] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe88d87c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe88d87c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe8b3ab6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2584, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0152622.WMF", cAlternateFileName="")) returned 1 [0281.500] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0281.500] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0281.500] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0281.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0281.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0281.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0281.501] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152622.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152622.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0281.501] GetFileType (hFile=0x174) returned 0x1 [0281.502] CloseHandle (hObject=0x174) returned 1 [0281.502] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0281.502] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152622.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152622.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe88d87c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe88d87c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe8b3ab6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2584)) returned 1 [0281.502] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0281.503] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0281.503] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152622.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152622.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe88d87c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe88d87c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe8b3ab6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2584)) returned 1 [0281.503] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0281.503] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0281.503] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0281.503] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe8fff80, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe8fff80, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9261f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6688, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0152626.WMF", cAlternateFileName="")) returned 1 [0281.503] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0281.503] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0281.503] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0281.503] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0281.504] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0281.504] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0281.504] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152626.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152626.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0281.504] GetFileType (hFile=0x174) returned 0x1 [0281.505] CloseHandle (hObject=0x174) returned 1 [0281.505] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0281.505] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152626.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152626.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe8fff80, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe8fff80, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9261f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6688)) returned 1 [0281.506] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0281.506] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0281.506] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152626.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152626.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe8fff80, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe8fff80, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9261f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6688)) returned 1 [0281.506] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0281.506] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0281.506] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0281.506] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe8d9e20, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe8d9e20, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9261f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x785c, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0152628.WMF", cAlternateFileName="")) returned 1 [0281.506] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0281.719] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0281.719] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0281.719] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0281.719] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0281.719] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0281.822] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152628.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152628.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0281.822] GetFileType (hFile=0x1ac) returned 0x1 [0281.823] CloseHandle (hObject=0x1ac) returned 1 [0281.823] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0281.823] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152628.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152628.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe8d9e20, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe8d9e20, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9261f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x785c)) returned 1 [0281.823] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0281.823] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0281.823] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152628.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152628.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe8d9e20, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe8d9e20, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9261f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x785c)) returned 1 [0281.823] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0281.823] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0281.823] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0281.824] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe8b3ab6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe8b3ab6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe8fff80, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8774, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0152688.WMF", cAlternateFileName="")) returned 1 [0281.824] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0281.824] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0281.824] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0281.824] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0281.824] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0281.824] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0281.824] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152688.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152688.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0281.825] GetFileType (hFile=0x1ac) returned 0x1 [0281.825] CloseHandle (hObject=0x1ac) returned 1 [0281.825] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0281.825] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152688.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152688.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe8b3ab6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe8b3ab6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe8fff80, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8774)) returned 1 [0281.826] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0281.826] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0281.826] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152688.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152688.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe8b3ab6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe8b3ab6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe8fff80, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8774)) returned 1 [0281.826] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0281.826] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0281.826] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0281.826] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe88d87c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe88d87c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe8fff80, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f4, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0152690.WMF", cAlternateFileName="")) returned 1 [0281.826] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0281.826] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0281.826] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0281.826] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0281.826] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0281.826] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0281.827] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152690.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152690.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0281.835] GetFileType (hFile=0x174) returned 0x1 [0281.836] CloseHandle (hObject=0x174) returned 1 [0281.837] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0281.837] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152690.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152690.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe88d87c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe88d87c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe8fff80, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f4)) returned 1 [0281.838] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0281.838] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0281.838] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152690.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152690.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe88d87c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe88d87c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe8fff80, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f4)) returned 1 [0281.931] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0281.931] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0281.931] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0281.931] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x544, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0152694.WMF", cAlternateFileName="")) returned 1 [0281.931] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0281.932] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0281.932] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0281.932] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0281.932] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0281.932] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0282.077] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152694.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152694.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0282.078] GetFileType (hFile=0x1ac) returned 0x1 [0282.078] CloseHandle (hObject=0x1ac) returned 1 [0282.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0282.079] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152694.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152694.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x544)) returned 1 [0282.079] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0282.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0282.079] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152694.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152694.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x544)) returned 1 [0282.079] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0282.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0282.080] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0282.080] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c98, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0152696.WMF", cAlternateFileName="")) returned 1 [0282.080] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0282.080] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0282.080] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0282.080] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0282.080] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0282.080] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0282.081] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152696.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152696.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0282.081] GetFileType (hFile=0x1ac) returned 0x1 [0282.081] CloseHandle (hObject=0x1ac) returned 1 [0282.082] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0282.082] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152696.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152696.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c98)) returned 1 [0282.082] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0282.082] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0282.082] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152696.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152696.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c98)) returned 1 [0282.083] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0282.083] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0282.083] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0282.083] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea312e2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea312e2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b8, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0152698.WMF", cAlternateFileName="")) returned 1 [0282.083] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0282.083] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0282.083] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0282.083] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0282.083] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0282.083] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0282.084] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152698.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152698.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0282.084] GetFileType (hFile=0x1ac) returned 0x1 [0282.084] CloseHandle (hObject=0x1ac) returned 1 [0282.085] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0282.086] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152698.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152698.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea312e2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea312e2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b8)) returned 1 [0282.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0282.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0282.086] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152698.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152698.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea312e2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea312e2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b8)) returned 1 [0282.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0282.087] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0282.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0282.087] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9e4dce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9e4dce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b8, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0152702.WMF", cAlternateFileName="")) returned 1 [0282.087] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0282.087] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0282.087] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0282.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0282.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0282.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0282.088] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152702.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152702.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0282.088] GetFileType (hFile=0x1ac) returned 0x1 [0282.088] CloseHandle (hObject=0x1ac) returned 1 [0282.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0282.089] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152702.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152702.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9e4dce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9e4dce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b8)) returned 1 [0282.089] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0282.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0282.089] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152702.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152702.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9e4dce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9e4dce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b8)) returned 1 [0282.089] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0282.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0282.089] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0282.089] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9726d1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9726d1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x674, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0152704.WMF", cAlternateFileName="")) returned 1 [0282.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0282.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0282.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0282.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0282.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0282.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0282.090] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152704.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152704.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0282.091] GetFileType (hFile=0x1ac) returned 0x1 [0282.091] CloseHandle (hObject=0x1ac) returned 1 [0282.091] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0282.091] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152704.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152704.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9726d1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9726d1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x674)) returned 1 [0282.091] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0282.092] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0282.092] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152704.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152704.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9726d1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9726d1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x674)) returned 1 [0282.092] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0282.092] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0282.092] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0282.092] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9261f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9261f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9726d1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x132c, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0152708.WMF", cAlternateFileName="")) returned 1 [0282.092] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0282.092] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0282.092] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0282.092] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0282.092] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0282.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0282.093] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152708.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152708.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0282.093] GetFileType (hFile=0x1ac) returned 0x1 [0282.094] CloseHandle (hObject=0x1ac) returned 1 [0282.094] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0282.094] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152708.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152708.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9261f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9261f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9726d1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x132c)) returned 1 [0282.094] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0282.094] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0282.094] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152708.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152708.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9261f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9261f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9726d1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x132c)) returned 1 [0282.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0282.095] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0282.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0282.095] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe998993, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe998993, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11e4, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0152716.WMF", cAlternateFileName="")) returned 1 [0282.095] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0282.095] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0282.095] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0282.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0282.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0282.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0282.097] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152716.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152716.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0282.097] GetFileType (hFile=0x1ac) returned 0x1 [0282.097] CloseHandle (hObject=0x1ac) returned 1 [0282.098] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0282.098] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152716.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152716.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe998993, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe998993, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11e4)) returned 1 [0282.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0282.098] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0282.098] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152716.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152716.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe998993, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe998993, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11e4)) returned 1 [0282.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0282.098] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0282.099] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0282.099] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe94c4b9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe94c4b9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe998993, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b6c, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0152722.WMF", cAlternateFileName="")) returned 1 [0282.099] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0282.099] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0282.099] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0282.099] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0282.099] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0282.099] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0282.100] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152722.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152722.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0282.100] GetFileType (hFile=0x1ac) returned 0x1 [0282.101] CloseHandle (hObject=0x1ac) returned 1 [0282.101] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0282.101] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152722.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152722.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe94c4b9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe94c4b9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe998993, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b6c)) returned 1 [0282.102] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0282.102] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0282.102] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152722.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152722.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe94c4b9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe94c4b9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe998993, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b6c)) returned 1 [0282.102] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0282.102] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0282.102] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0282.102] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9261f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9261f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9e4dce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ec4, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0152876.WMF", cAlternateFileName="")) returned 1 [0282.102] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0282.102] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0282.102] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0282.103] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0282.103] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0282.103] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0282.103] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152876.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152876.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0282.103] GetFileType (hFile=0x1ac) returned 0x1 [0282.104] CloseHandle (hObject=0x1ac) returned 1 [0282.104] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0282.104] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152876.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152876.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9261f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9261f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9e4dce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ec4)) returned 1 [0282.104] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0282.104] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0282.105] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152876.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152876.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9261f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9261f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9e4dce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ec4)) returned 1 [0282.105] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0282.105] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0282.105] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0282.105] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9261f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9261f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe94c4b9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a28, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0152878.WMF", cAlternateFileName="")) returned 1 [0282.105] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0282.105] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0282.105] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0282.105] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0282.105] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0282.105] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0282.106] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152878.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152878.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0282.106] GetFileType (hFile=0x1ac) returned 0x1 [0282.106] CloseHandle (hObject=0x1ac) returned 1 [0282.107] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0282.107] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152878.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152878.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9261f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9261f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe94c4b9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a28)) returned 1 [0282.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0282.107] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0282.107] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152878.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152878.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9261f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9261f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe94c4b9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a28)) returned 1 [0282.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0282.107] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0282.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0282.107] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2370, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0152882.WMF", cAlternateFileName="")) returned 1 [0282.107] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0282.108] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0282.108] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0282.108] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0282.108] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0282.108] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0282.108] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152882.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152882.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0282.109] GetFileType (hFile=0x1ac) returned 0x1 [0282.109] CloseHandle (hObject=0x1ac) returned 1 [0282.109] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0282.109] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152882.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152882.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2370)) returned 1 [0282.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0282.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0282.110] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152882.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152882.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2370)) returned 1 [0282.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0282.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0282.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0282.110] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b2c, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0152884.WMF", cAlternateFileName="")) returned 1 [0282.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0282.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0282.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0282.111] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0282.111] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0282.111] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0282.111] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152884.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152884.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0282.112] GetFileType (hFile=0x1ac) returned 0x1 [0282.112] CloseHandle (hObject=0x1ac) returned 1 [0282.112] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0282.112] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152884.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152884.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b2c)) returned 1 [0282.112] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0282.113] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0282.113] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152884.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152884.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b2c)) returned 1 [0282.113] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0282.113] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0282.113] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0282.113] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x794, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0152890.WMF", cAlternateFileName="")) returned 1 [0282.113] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0282.113] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0282.113] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0282.114] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0282.114] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0282.114] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0282.114] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152890.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152890.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0282.115] GetFileType (hFile=0x1ac) returned 0x1 [0282.115] CloseHandle (hObject=0x1ac) returned 1 [0282.116] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0282.464] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152890.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152890.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x794)) returned 1 [0282.465] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0282.465] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0282.465] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152890.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152890.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x794)) returned 1 [0282.465] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0282.465] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0282.465] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0282.465] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x29ac, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0152892.WMF", cAlternateFileName="")) returned 1 [0282.465] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0282.466] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0282.466] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0282.466] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0282.466] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0282.466] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0282.467] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152892.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152892.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0282.649] GetFileType (hFile=0x21c) returned 0x1 [0282.649] CloseHandle (hObject=0x21c) returned 1 [0282.650] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0282.650] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152892.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152892.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x29ac)) returned 1 [0282.651] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0282.651] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0282.651] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152892.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152892.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x29ac)) returned 1 [0282.694] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0282.694] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0282.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0282.695] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c54, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0152894.WMF", cAlternateFileName="")) returned 1 [0282.695] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0282.695] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0282.695] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0282.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0282.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0282.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0282.830] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152894.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152894.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0282.830] GetFileType (hFile=0x21c) returned 0x1 [0282.830] CloseHandle (hObject=0x21c) returned 1 [0282.831] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0282.831] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152894.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152894.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c54)) returned 1 [0282.831] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0282.831] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0282.831] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152894.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152894.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c54)) returned 1 [0282.832] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0282.832] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0282.832] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0282.832] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1190, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0152898.WMF", cAlternateFileName="")) returned 1 [0282.832] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0282.832] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0282.832] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0282.832] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0282.833] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0282.833] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0282.833] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152898.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152898.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0282.833] GetFileType (hFile=0x21c) returned 0x1 [0282.834] CloseHandle (hObject=0x21c) returned 1 [0282.834] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0282.834] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152898.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152898.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1190)) returned 1 [0282.835] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0282.835] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0282.835] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152898.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152898.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1190)) returned 1 [0282.835] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0282.836] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0282.836] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0282.836] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x812c, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0153047.WMF", cAlternateFileName="")) returned 1 [0282.836] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0282.836] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0282.836] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0282.836] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0282.836] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0282.836] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0282.837] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153047.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153047.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0282.837] GetFileType (hFile=0x21c) returned 0x1 [0282.837] CloseHandle (hObject=0x21c) returned 1 [0282.838] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0282.838] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153047.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153047.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x812c)) returned 1 [0282.838] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0282.838] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0282.838] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153047.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153047.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x812c)) returned 1 [0282.838] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0282.838] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0282.838] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0282.839] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x778, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0153087.WMF", cAlternateFileName="")) returned 1 [0282.839] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0282.839] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0282.839] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0282.839] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0282.839] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0282.839] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0282.839] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153087.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153087.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0282.840] GetFileType (hFile=0x21c) returned 0x1 [0282.840] CloseHandle (hObject=0x21c) returned 1 [0282.840] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0282.840] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153087.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153087.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x778)) returned 1 [0282.840] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0282.840] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0282.841] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153087.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153087.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x778)) returned 1 [0282.841] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0282.841] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0282.841] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0282.841] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ea8, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0153089.WMF", cAlternateFileName="")) returned 1 [0282.841] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0282.841] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0282.841] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0282.841] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0282.841] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0282.841] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0282.842] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153089.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153089.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0282.842] GetFileType (hFile=0x21c) returned 0x1 [0282.842] CloseHandle (hObject=0x21c) returned 1 [0282.842] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0282.843] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153089.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153089.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ea8)) returned 1 [0282.843] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0282.843] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0282.843] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153089.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153089.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ea8)) returned 1 [0282.843] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0282.843] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0282.843] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0282.843] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fc8, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0153091.WMF", cAlternateFileName="")) returned 1 [0282.843] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0282.843] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0282.843] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0282.843] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0282.844] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0282.844] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0282.844] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153091.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153091.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0282.844] GetFileType (hFile=0x21c) returned 0x1 [0282.844] CloseHandle (hObject=0x21c) returned 1 [0282.845] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0282.845] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153091.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153091.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fc8)) returned 1 [0282.845] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0282.845] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0282.845] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153091.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153091.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fc8)) returned 1 [0282.845] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0282.845] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0282.845] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0282.845] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x22b0, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0153093.WMF", cAlternateFileName="")) returned 1 [0282.845] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0282.846] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0282.846] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0282.846] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0282.846] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0282.846] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0282.846] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153093.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153093.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0282.846] GetFileType (hFile=0x21c) returned 0x1 [0282.847] CloseHandle (hObject=0x21c) returned 1 [0282.847] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0282.847] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153093.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153093.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x22b0)) returned 1 [0282.847] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0282.847] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0282.847] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153093.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153093.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x22b0)) returned 1 [0282.848] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0282.848] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0282.848] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0282.848] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe78, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0153095.WMF", cAlternateFileName="")) returned 1 [0282.848] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0282.848] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0282.848] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0282.848] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0282.848] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0282.848] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0282.849] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153095.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153095.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0282.849] GetFileType (hFile=0x21c) returned 0x1 [0282.849] CloseHandle (hObject=0x21c) returned 1 [0282.849] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0282.849] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153095.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153095.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe78)) returned 1 [0282.850] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0282.850] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0282.850] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153095.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153095.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe78)) returned 1 [0282.850] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0282.850] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0282.850] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0282.850] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc0, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0153265.WMF", cAlternateFileName="")) returned 1 [0282.850] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0282.850] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0282.850] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0282.851] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0282.851] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0282.851] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0282.852] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153265.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153265.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0282.852] GetFileType (hFile=0x21c) returned 0x1 [0282.852] CloseHandle (hObject=0x21c) returned 1 [0282.852] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0282.852] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153265.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153265.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc0)) returned 1 [0282.853] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0282.853] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0282.853] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153265.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153265.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc0)) returned 1 [0282.853] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0282.853] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0282.853] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0282.853] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e80, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0153273.WMF", cAlternateFileName="")) returned 1 [0282.853] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0282.853] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0282.853] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0282.853] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0282.853] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0282.854] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0282.854] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153273.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153273.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0282.854] GetFileType (hFile=0x21c) returned 0x1 [0282.854] CloseHandle (hObject=0x21c) returned 1 [0282.855] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0282.855] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153273.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153273.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e80)) returned 1 [0282.855] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0282.855] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0282.855] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153273.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153273.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e80)) returned 1 [0282.855] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0282.855] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0282.856] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0282.856] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8f0c, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0153299.WMF", cAlternateFileName="")) returned 1 [0282.856] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0282.856] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0282.856] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0282.856] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0282.856] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0282.856] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0282.857] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153299.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153299.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0282.857] GetFileType (hFile=0x21c) returned 0x1 [0282.858] CloseHandle (hObject=0x21c) returned 1 [0282.858] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0282.858] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153299.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153299.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8f0c)) returned 1 [0282.858] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0282.858] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0282.859] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153299.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153299.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8f0c)) returned 1 [0282.859] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0282.859] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0282.859] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0282.859] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7850, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0153302.WMF", cAlternateFileName="")) returned 1 [0282.859] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0282.859] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0282.859] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0282.859] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0282.859] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0282.860] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0282.860] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153302.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153302.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0282.860] GetFileType (hFile=0x21c) returned 0x1 [0282.861] CloseHandle (hObject=0x21c) returned 1 [0282.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0282.861] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153302.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153302.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7850)) returned 1 [0282.861] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0282.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0282.861] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153302.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153302.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7850)) returned 1 [0282.861] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0282.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0282.862] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0282.862] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9658, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0153305.WMF", cAlternateFileName="")) returned 1 [0282.862] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0282.862] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0282.862] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0282.862] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0282.862] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0282.862] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0282.862] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153305.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153305.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0282.863] GetFileType (hFile=0x21c) returned 0x1 [0283.241] CloseHandle (hObject=0x21c) returned 1 [0283.241] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0283.242] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153305.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153305.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9658)) returned 1 [0283.242] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0283.242] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0283.242] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153305.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153305.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9658)) returned 1 [0283.242] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0283.242] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0283.243] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0283.243] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3c58, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0153307.WMF", cAlternateFileName="")) returned 1 [0283.243] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0283.243] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0283.243] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0283.243] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0283.243] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0283.243] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0283.244] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153307.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153307.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0283.244] GetFileType (hFile=0x21c) returned 0x1 [0283.244] CloseHandle (hObject=0x21c) returned 1 [0283.245] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0283.245] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153307.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153307.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3c58)) returned 1 [0283.245] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0283.245] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0283.245] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153307.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153307.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3c58)) returned 1 [0283.245] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0283.246] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0283.246] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0283.246] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4238, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0153313.WMF", cAlternateFileName="")) returned 1 [0283.246] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0283.246] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0283.246] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0283.247] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0283.247] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0283.247] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0283.248] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153313.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153313.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0283.248] GetFileType (hFile=0x21c) returned 0x1 [0283.248] CloseHandle (hObject=0x21c) returned 1 [0283.249] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0283.249] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153313.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153313.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4238)) returned 1 [0283.249] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0283.249] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0283.249] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153313.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153313.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4238)) returned 1 [0283.249] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0283.249] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0283.249] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0283.249] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4464, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0153398.WMF", cAlternateFileName="")) returned 1 [0283.249] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0283.249] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0283.250] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0283.250] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0283.250] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0283.250] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0283.250] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153398.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153398.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0283.251] GetFileType (hFile=0x21c) returned 0x1 [0283.251] CloseHandle (hObject=0x21c) returned 1 [0283.251] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0283.251] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153398.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153398.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4464)) returned 1 [0283.251] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0283.251] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0283.252] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153398.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153398.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4464)) returned 1 [0283.252] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0283.252] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0283.252] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0283.252] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaa396f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x85d0, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0153508.WMF", cAlternateFileName="")) returned 1 [0283.252] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0283.252] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0283.252] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0283.252] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0283.252] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0283.252] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0283.253] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153508.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153508.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0283.253] GetFileType (hFile=0x21c) returned 0x1 [0283.253] CloseHandle (hObject=0x21c) returned 1 [0283.254] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0283.254] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153508.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153508.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaa396f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x85d0)) returned 1 [0283.254] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0283.254] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0283.254] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153508.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153508.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaa396f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x85d0)) returned 1 [0283.254] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0283.254] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0283.255] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0283.255] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31d0, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0153514.WMF", cAlternateFileName="")) returned 1 [0283.255] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0283.255] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0283.255] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0283.255] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0283.255] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0283.255] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0283.256] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153514.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153514.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0283.256] GetFileType (hFile=0x21c) returned 0x1 [0283.257] CloseHandle (hObject=0x21c) returned 1 [0283.257] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0283.257] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153514.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153514.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31d0)) returned 1 [0283.257] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0283.257] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0283.257] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153514.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153514.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31d0)) returned 1 [0283.258] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0283.258] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0283.258] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0283.258] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d08, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0153516.WMF", cAlternateFileName="")) returned 1 [0283.258] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0283.258] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0283.258] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0283.258] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0283.258] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0283.258] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0283.259] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153516.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153516.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0283.259] GetFileType (hFile=0x21c) returned 0x1 [0283.259] CloseHandle (hObject=0x21c) returned 1 [0283.260] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0283.260] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153516.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153516.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d08)) returned 1 [0283.260] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0283.260] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0283.260] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153516.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153516.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d08)) returned 1 [0283.260] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0283.260] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0283.260] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0283.260] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30f0, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0153518.WMF", cAlternateFileName="")) returned 1 [0283.260] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0283.260] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0283.261] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0283.261] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0283.261] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0283.261] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0283.261] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153518.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153518.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0283.261] GetFileType (hFile=0x21c) returned 0x1 [0283.262] CloseHandle (hObject=0x21c) returned 1 [0283.263] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0283.263] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153518.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153518.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30f0)) returned 1 [0283.263] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0283.263] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0283.263] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153518.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153518.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30f0)) returned 1 [0283.263] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0283.263] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0283.263] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0283.263] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x560, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0156537.WMF", cAlternateFileName="")) returned 1 [0283.263] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0283.263] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0283.264] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0283.264] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0283.264] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0283.264] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0283.264] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0156537.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0156537.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0283.264] GetFileType (hFile=0x21c) returned 0x1 [0283.265] CloseHandle (hObject=0x21c) returned 1 [0283.265] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0283.265] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0156537.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0156537.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x560)) returned 1 [0283.265] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0283.265] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0283.265] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0156537.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0156537.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x560)) returned 1 [0283.265] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0283.266] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0283.266] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0283.266] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb66e, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0157167.WMF", cAlternateFileName="")) returned 1 [0283.266] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0283.266] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0283.266] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0283.266] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0283.266] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0283.266] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0283.267] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157167.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157167.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0283.267] GetFileType (hFile=0x21c) returned 0x1 [0283.267] CloseHandle (hObject=0x21c) returned 1 [0283.268] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0283.268] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157167.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157167.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb66e)) returned 1 [0283.268] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0283.268] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0283.268] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157167.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157167.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb66e)) returned 1 [0283.268] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0283.268] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0283.268] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0283.268] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x54d4, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0157177.WMF", cAlternateFileName="")) returned 1 [0283.268] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0283.269] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0283.269] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0283.269] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0283.269] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0283.269] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0283.269] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157177.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157177.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0283.269] GetFileType (hFile=0x21c) returned 0x1 [0283.270] CloseHandle (hObject=0x21c) returned 1 [0283.270] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0283.270] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157177.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157177.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x54d4)) returned 1 [0283.270] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0283.270] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0283.270] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157177.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157177.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x54d4)) returned 1 [0283.270] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0283.271] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0283.271] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0283.271] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45f8, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0157191.WMF", cAlternateFileName="")) returned 1 [0283.271] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0283.271] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0283.271] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0283.271] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0283.271] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0283.271] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0283.271] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157191.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157191.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0283.272] GetFileType (hFile=0x21c) returned 0x1 [0283.272] CloseHandle (hObject=0x21c) returned 1 [0283.272] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0283.272] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157191.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157191.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45f8)) returned 1 [0283.272] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0283.272] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0283.273] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157191.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157191.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45f8)) returned 1 [0283.273] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0283.273] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0283.273] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0283.273] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c84, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0157831.WMF", cAlternateFileName="")) returned 1 [0283.273] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0283.273] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0283.273] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0283.273] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0283.273] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0283.273] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0283.274] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157831.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157831.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0283.274] GetFileType (hFile=0x21c) returned 0x1 [0283.274] CloseHandle (hObject=0x21c) returned 1 [0283.275] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0283.275] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157831.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157831.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c84)) returned 1 [0283.275] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0283.275] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0283.275] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157831.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157831.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c84)) returned 1 [0283.275] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0283.275] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0283.275] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0283.275] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x48dc, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0158071.WMF", cAlternateFileName="")) returned 1 [0283.276] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0283.276] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0283.276] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0283.276] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0283.276] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0283.276] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0283.276] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0158071.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0158071.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0283.276] GetFileType (hFile=0x21c) returned 0x1 [0283.277] CloseHandle (hObject=0x21c) returned 1 [0283.277] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0283.277] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0158071.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0158071.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x48dc)) returned 1 [0283.551] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0283.551] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0283.551] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0158071.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0158071.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x48dc)) returned 1 [0283.552] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0283.552] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0283.552] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0283.552] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x462e, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0158477.WMF", cAlternateFileName="")) returned 1 [0283.552] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0283.552] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0283.552] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0283.552] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0283.553] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0283.553] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0283.553] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0158477.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0158477.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0283.555] GetFileType (hFile=0x174) returned 0x1 [0283.556] CloseHandle (hObject=0x174) returned 1 [0283.557] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0283.557] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0158477.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0158477.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x462e)) returned 1 [0283.558] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0283.558] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0283.558] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0158477.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0158477.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x462e)) returned 1 [0283.606] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0283.606] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0283.606] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0283.606] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x72de, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0160590.WMF", cAlternateFileName="")) returned 1 [0283.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0283.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0283.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0283.607] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0283.607] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0283.607] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0283.608] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0160590.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0160590.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0283.608] GetFileType (hFile=0x174) returned 0x1 [0283.608] CloseHandle (hObject=0x174) returned 1 [0283.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0283.609] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0160590.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0160590.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x72de)) returned 1 [0283.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0283.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0283.609] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0160590.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0160590.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x72de)) returned 1 [0283.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0283.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0283.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0283.609] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb594, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0164153.JPG", cAlternateFileName="")) returned 1 [0283.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0283.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0283.610] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0283.610] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0283.610] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0283.610] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0283.610] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0164153.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0164153.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0283.611] GetFileType (hFile=0x174) returned 0x1 [0283.611] CloseHandle (hObject=0x174) returned 1 [0283.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0283.611] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0164153.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0164153.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb594)) returned 1 [0283.612] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0283.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0283.612] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0164153.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0164153.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb594)) returned 1 [0283.612] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0283.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0283.612] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0283.612] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaa396f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaa396f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x51aa, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0168644.WMF", cAlternateFileName="")) returned 1 [0283.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0283.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0283.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0283.613] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0283.613] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0283.613] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0283.614] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0168644.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0168644.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0283.614] GetFileType (hFile=0x174) returned 0x1 [0283.614] CloseHandle (hObject=0x174) returned 1 [0283.615] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0283.615] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0168644.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0168644.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaa396f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaa396f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x51aa)) returned 1 [0283.615] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0283.615] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0283.615] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0168644.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0168644.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaa396f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaa396f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x51aa)) returned 1 [0283.615] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0283.615] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0283.616] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0283.616] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3888, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0171685.WMF", cAlternateFileName="")) returned 1 [0283.616] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0283.616] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0283.616] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0283.616] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0283.616] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0283.617] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0283.617] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0171685.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0171685.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0283.618] GetFileType (hFile=0x174) returned 0x1 [0283.618] CloseHandle (hObject=0x174) returned 1 [0283.619] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0283.619] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0171685.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0171685.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3888)) returned 1 [0283.619] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0283.619] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0283.619] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0171685.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0171685.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3888)) returned 1 [0283.619] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0283.619] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0283.620] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0283.620] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaa396f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ae8, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0171847.WMF", cAlternateFileName="")) returned 1 [0283.620] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0283.620] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0283.620] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0283.620] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0283.620] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0283.620] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0283.621] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0171847.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0171847.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0283.622] GetFileType (hFile=0x174) returned 0x1 [0283.623] CloseHandle (hObject=0x174) returned 1 [0283.623] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0283.623] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0171847.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0171847.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaa396f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ae8)) returned 1 [0283.624] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0283.624] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0283.624] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0171847.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0171847.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaa396f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ae8)) returned 1 [0283.624] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0283.624] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0283.624] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0283.624] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaa396f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaa396f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d18, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0172035.WMF", cAlternateFileName="")) returned 1 [0283.625] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0283.625] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0283.625] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0283.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0283.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0283.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0283.626] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172035.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0172035.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0283.626] GetFileType (hFile=0x174) returned 0x1 [0283.627] CloseHandle (hObject=0x174) returned 1 [0283.627] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0283.627] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172035.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0172035.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaa396f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaa396f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d18)) returned 1 [0283.628] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0283.628] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0283.628] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172035.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0172035.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaa396f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaa396f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d18)) returned 1 [0283.628] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0283.628] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0283.628] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0283.628] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b74, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0172067.WMF", cAlternateFileName="")) returned 1 [0283.629] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0283.629] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0283.629] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0283.629] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0283.629] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0283.629] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0283.630] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172067.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0172067.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0283.630] GetFileType (hFile=0x174) returned 0x1 [0283.631] CloseHandle (hObject=0x174) returned 1 [0283.631] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0283.631] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172067.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0172067.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b74)) returned 1 [0283.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0283.632] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0283.632] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172067.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0172067.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b74)) returned 1 [0283.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0283.632] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0283.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0283.632] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaa396f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3198, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0172193.WMF", cAlternateFileName="")) returned 1 [0283.632] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0283.633] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0283.633] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0283.633] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0283.633] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0283.633] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0283.634] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172193.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0172193.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0283.634] GetFileType (hFile=0x174) returned 0x1 [0283.635] CloseHandle (hObject=0x174) returned 1 [0283.635] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0283.635] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172193.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0172193.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaa396f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3198)) returned 1 [0283.636] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0283.636] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0283.636] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172193.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0172193.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaa396f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3198)) returned 1 [0283.636] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0283.636] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0283.636] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0283.637] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16e8, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0174315.WMF", cAlternateFileName="")) returned 1 [0283.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0283.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0283.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0283.936] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0283.937] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0283.937] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0283.937] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174315.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174315.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0283.938] GetFileType (hFile=0x1e0) returned 0x1 [0283.938] CloseHandle (hObject=0x1e0) returned 1 [0283.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0283.939] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174315.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174315.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16e8)) returned 1 [0283.939] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0283.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0283.939] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174315.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174315.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16e8)) returned 1 [0283.940] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0283.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0283.940] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0283.940] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2608, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0174635.WMF", cAlternateFileName="")) returned 1 [0283.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0283.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0283.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0283.940] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0283.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0283.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0283.941] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174635.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174635.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0283.942] GetFileType (hFile=0x1e0) returned 0x1 [0283.942] CloseHandle (hObject=0x1e0) returned 1 [0283.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0283.943] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174635.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174635.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2608)) returned 1 [0283.943] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0283.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0283.943] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174635.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174635.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2608)) returned 1 [0283.943] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0283.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0283.944] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0283.944] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13ec, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0174639.WMF", cAlternateFileName="")) returned 1 [0283.944] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0283.944] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0283.944] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0283.944] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0283.944] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0283.944] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0283.945] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174639.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174639.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0283.945] GetFileType (hFile=0x1e0) returned 0x1 [0283.945] CloseHandle (hObject=0x1e0) returned 1 [0283.946] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0283.946] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174639.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174639.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13ec)) returned 1 [0283.946] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0283.946] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0283.946] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174639.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174639.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13ec)) returned 1 [0283.946] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0283.946] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0283.947] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0283.947] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6196, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0174952.JPG", cAlternateFileName="")) returned 1 [0283.947] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0283.947] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0283.947] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0283.947] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0283.947] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0283.947] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0283.948] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174952.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174952.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0283.948] GetFileType (hFile=0x1e0) returned 0x1 [0283.948] CloseHandle (hObject=0x1e0) returned 1 [0283.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0283.949] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174952.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174952.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6196)) returned 1 [0283.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0283.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0283.949] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174952.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174952.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6196)) returned 1 [0283.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0283.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0283.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0283.951] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb57d, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0175361.JPG", cAlternateFileName="")) returned 1 [0283.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0283.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0283.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0283.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0283.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0283.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0283.952] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175361.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0175361.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0283.956] GetFileType (hFile=0x1e0) returned 0x1 [0283.956] CloseHandle (hObject=0x1e0) returned 1 [0283.957] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0283.958] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175361.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0175361.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb57d)) returned 1 [0283.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0283.958] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0283.959] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175361.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0175361.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb57d)) returned 1 [0283.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0283.997] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0283.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0283.997] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x38d8, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0175428.JPG", cAlternateFileName="")) returned 1 [0283.997] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0283.997] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0283.997] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0283.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0283.998] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0283.998] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0283.999] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175428.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0175428.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0283.999] GetFileType (hFile=0x1e0) returned 0x1 [0284.000] CloseHandle (hObject=0x1e0) returned 1 [0284.000] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0284.000] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175428.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0175428.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x38d8)) returned 1 [0284.000] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0284.000] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0284.001] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175428.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0175428.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x38d8)) returned 1 [0284.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0284.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0284.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0284.001] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb12e, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0177257.JPG", cAlternateFileName="")) returned 1 [0284.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0284.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0284.002] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0284.002] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0284.002] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0284.002] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0284.003] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177257.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0177257.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0284.003] GetFileType (hFile=0x1e0) returned 0x1 [0284.004] CloseHandle (hObject=0x1e0) returned 1 [0284.004] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0284.004] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177257.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0177257.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb12e)) returned 1 [0284.004] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0284.004] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0284.005] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177257.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0177257.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb12e)) returned 1 [0284.005] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0284.005] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0284.005] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0284.005] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd902, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0177806.JPG", cAlternateFileName="")) returned 1 [0284.005] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0284.005] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0284.005] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0284.006] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0284.006] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0284.006] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0284.007] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177806.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0177806.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0284.007] GetFileType (hFile=0x1e0) returned 0x1 [0284.007] CloseHandle (hObject=0x1e0) returned 1 [0284.008] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0284.008] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177806.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0177806.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd902)) returned 1 [0284.008] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0284.008] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0284.008] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177806.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0177806.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd902)) returned 1 [0284.009] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0284.009] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0284.009] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0284.009] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x907d, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0178348.JPG", cAlternateFileName="")) returned 1 [0284.009] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0284.009] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0284.009] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0284.009] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0284.010] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0284.010] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0284.010] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178348.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178348.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0284.010] GetFileType (hFile=0x1e0) returned 0x1 [0284.011] CloseHandle (hObject=0x1e0) returned 1 [0284.011] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0284.011] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178348.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178348.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x907d)) returned 1 [0284.011] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0284.011] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0284.011] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178348.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178348.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x907d)) returned 1 [0284.011] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0284.012] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0284.326] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0284.326] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7214, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0178459.JPG", cAlternateFileName="")) returned 1 [0284.327] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0284.327] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0284.327] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0284.327] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0284.327] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0284.327] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0284.328] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178459.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178459.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0284.328] GetFileType (hFile=0x198) returned 0x1 [0284.329] CloseHandle (hObject=0x198) returned 1 [0284.329] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0284.329] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178459.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178459.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7214)) returned 1 [0284.330] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0284.330] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0284.330] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178459.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178459.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7214)) returned 1 [0284.330] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0284.330] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0284.330] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0284.331] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x67a3, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0178460.JPG", cAlternateFileName="")) returned 1 [0284.331] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0284.331] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0284.331] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0284.332] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0284.332] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0284.332] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0284.332] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178460.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178460.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0284.333] GetFileType (hFile=0x198) returned 0x1 [0284.333] CloseHandle (hObject=0x198) returned 1 [0284.333] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0284.333] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178460.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178460.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x67a3)) returned 1 [0284.334] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0284.334] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0284.334] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178460.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178460.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x67a3)) returned 1 [0284.334] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0284.334] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0284.334] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0284.335] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5de2, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0178523.JPG", cAlternateFileName="")) returned 1 [0284.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0284.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0284.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0284.335] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0284.335] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0284.335] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0284.337] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178523.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178523.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0284.337] GetFileType (hFile=0x198) returned 0x1 [0284.338] CloseHandle (hObject=0x198) returned 1 [0284.339] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0284.339] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178523.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178523.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5de2)) returned 1 [0284.339] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0284.340] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0284.340] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178523.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178523.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5de2)) returned 1 [0284.340] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0284.341] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0284.341] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0284.342] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5b2a, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0178632.JPG", cAlternateFileName="")) returned 1 [0284.342] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0284.342] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0284.343] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0284.343] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0284.343] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0284.343] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0284.344] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178632.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178632.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0284.345] GetFileType (hFile=0x198) returned 0x1 [0284.346] CloseHandle (hObject=0x198) returned 1 [0284.346] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0284.347] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178632.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178632.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5b2a)) returned 1 [0284.347] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0284.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0284.347] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178632.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178632.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5b2a)) returned 1 [0284.347] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0284.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0284.347] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0284.347] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7d26, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0178639.JPG", cAlternateFileName="")) returned 1 [0284.348] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0284.348] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0284.348] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0284.348] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0284.348] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0284.348] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0284.349] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178639.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178639.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0284.349] GetFileType (hFile=0x198) returned 0x1 [0284.349] CloseHandle (hObject=0x198) returned 1 [0284.350] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0284.350] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178639.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178639.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7d26)) returned 1 [0284.350] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0284.350] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0284.350] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178639.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178639.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7d26)) returned 1 [0284.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0284.351] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0284.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0284.351] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8a0c, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0178932.JPG", cAlternateFileName="")) returned 1 [0284.351] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0284.351] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0284.351] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0284.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0284.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0284.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0284.352] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178932.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178932.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0284.353] GetFileType (hFile=0x198) returned 0x1 [0284.353] CloseHandle (hObject=0x198) returned 1 [0284.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0284.354] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178932.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178932.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8a0c)) returned 1 [0284.356] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0284.356] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0284.356] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178932.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178932.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8a0c)) returned 1 [0284.404] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0284.404] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0284.404] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0284.404] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7d6e, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0179963.JPG", cAlternateFileName="")) returned 1 [0284.404] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0284.404] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0284.404] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0284.405] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0284.405] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0284.405] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0284.405] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0179963.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0179963.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0284.406] GetFileType (hFile=0x198) returned 0x1 [0284.407] CloseHandle (hObject=0x198) returned 1 [0284.407] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0284.407] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0179963.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0179963.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7d6e)) returned 1 [0284.407] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0284.408] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0284.408] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0179963.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0179963.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7d6e)) returned 1 [0284.408] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0284.408] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0284.408] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0284.408] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x40e7, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0182689.JPG", cAlternateFileName="")) returned 1 [0284.408] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0284.408] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0284.409] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0284.409] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0284.409] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0284.409] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0284.410] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182689.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182689.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0284.410] GetFileType (hFile=0x198) returned 0x1 [0284.410] CloseHandle (hObject=0x198) returned 1 [0284.411] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0284.411] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182689.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182689.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x40e7)) returned 1 [0284.411] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0284.412] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0284.412] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182689.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182689.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x40e7)) returned 1 [0284.412] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0284.412] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0284.412] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0284.412] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5f48, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0182888.WMF", cAlternateFileName="")) returned 1 [0284.412] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0284.412] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0284.413] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0284.413] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0284.413] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0284.413] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0284.413] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182888.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182888.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0284.414] GetFileType (hFile=0x198) returned 0x1 [0284.414] CloseHandle (hObject=0x198) returned 1 [0284.415] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0284.415] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182888.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182888.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5f48)) returned 1 [0284.415] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0284.415] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0284.415] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182888.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182888.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5f48)) returned 1 [0284.415] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0284.415] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0284.415] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0284.415] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b2e, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0182898.WMF", cAlternateFileName="")) returned 1 [0284.416] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0284.416] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0284.416] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0284.416] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0284.416] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0284.416] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0284.417] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182898.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182898.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0284.417] GetFileType (hFile=0x198) returned 0x1 [0284.417] CloseHandle (hObject=0x198) returned 1 [0284.418] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0284.418] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182898.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182898.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b2e)) returned 1 [0284.418] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0284.418] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0284.736] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182898.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182898.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b2e)) returned 1 [0284.737] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0284.737] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0284.737] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0284.737] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e8e, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0182902.WMF", cAlternateFileName="")) returned 1 [0284.737] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0284.737] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0284.737] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0284.738] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0284.738] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0284.738] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0284.739] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182902.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182902.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0284.739] GetFileType (hFile=0x1c0) returned 0x1 [0284.740] CloseHandle (hObject=0x1c0) returned 1 [0284.740] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0284.740] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182902.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182902.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e8e)) returned 1 [0284.741] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0284.741] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0284.741] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182902.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182902.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e8e)) returned 1 [0284.741] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0284.741] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0284.741] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0284.741] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ed2, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0182946.WMF", cAlternateFileName="")) returned 1 [0284.741] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0284.742] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0284.742] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0284.742] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0284.742] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0284.742] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0284.743] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182946.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182946.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0284.743] GetFileType (hFile=0x1c0) returned 0x1 [0284.744] CloseHandle (hObject=0x1c0) returned 1 [0284.744] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0284.744] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182946.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182946.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ed2)) returned 1 [0284.744] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0284.744] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0284.745] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182946.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182946.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ed2)) returned 1 [0284.745] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0284.745] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0284.746] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0284.746] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x745c, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0183172.WMF", cAlternateFileName="")) returned 1 [0284.746] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0284.746] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0284.746] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0284.746] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0284.746] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0284.746] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0284.747] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183172.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183172.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0284.747] GetFileType (hFile=0x1c0) returned 0x1 [0284.748] CloseHandle (hObject=0x1c0) returned 1 [0284.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0284.749] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183172.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183172.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x745c)) returned 1 [0284.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0284.749] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0284.749] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183172.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183172.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x745c)) returned 1 [0284.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0284.749] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0284.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0284.750] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6fd2, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0183174.WMF", cAlternateFileName="")) returned 1 [0284.750] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0284.750] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0284.750] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0284.750] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0284.750] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0284.750] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0284.751] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183174.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183174.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0284.751] GetFileType (hFile=0x1c0) returned 0x1 [0284.752] CloseHandle (hObject=0x1c0) returned 1 [0284.752] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0284.752] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183174.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183174.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6fd2)) returned 1 [0284.753] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0284.753] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0284.753] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183174.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183174.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6fd2)) returned 1 [0284.753] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0284.753] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0284.753] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0284.754] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5f6e, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0183198.WMF", cAlternateFileName="")) returned 1 [0284.754] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0284.754] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0284.754] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0284.754] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0284.754] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0284.754] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0284.755] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183198.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183198.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0284.755] GetFileType (hFile=0x1c0) returned 0x1 [0284.756] CloseHandle (hObject=0x1c0) returned 1 [0284.756] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0284.756] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183198.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183198.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5f6e)) returned 1 [0284.757] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0284.757] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0284.757] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183198.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183198.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5f6e)) returned 1 [0284.757] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0284.757] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0284.757] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0284.757] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b4a, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0183574.WMF", cAlternateFileName="")) returned 1 [0284.757] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0284.757] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0284.758] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0284.758] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0284.758] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0284.758] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0284.758] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183574.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183574.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0284.760] GetFileType (hFile=0x1c0) returned 0x1 [0284.760] CloseHandle (hObject=0x1c0) returned 1 [0284.761] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0284.761] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183574.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183574.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b4a)) returned 1 [0284.762] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0284.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0284.762] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183574.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183574.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b4a)) returned 1 [0284.792] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0284.792] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0284.792] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0284.792] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c88, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0185670.WMF", cAlternateFileName="")) returned 1 [0284.793] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0284.793] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0284.793] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0284.793] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0284.793] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0284.793] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0284.794] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185670.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185670.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0284.794] GetFileType (hFile=0x1c0) returned 0x1 [0284.794] CloseHandle (hObject=0x1c0) returned 1 [0284.794] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0284.794] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185670.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185670.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c88)) returned 1 [0284.794] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0284.794] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0284.795] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185670.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185670.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c88)) returned 1 [0284.795] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0284.795] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0284.795] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0284.795] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e46, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0185774.WMF", cAlternateFileName="")) returned 1 [0284.795] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0284.795] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0284.795] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0284.795] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0284.795] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0284.795] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0284.796] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185774.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185774.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0284.796] GetFileType (hFile=0x1c0) returned 0x1 [0284.796] CloseHandle (hObject=0x1c0) returned 1 [0284.797] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0284.797] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185774.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185774.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e46)) returned 1 [0284.797] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0284.797] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0284.797] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185774.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185774.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e46)) returned 1 [0284.797] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0284.797] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0284.797] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0284.797] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x69d8, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0185776.WMF", cAlternateFileName="")) returned 1 [0284.797] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0284.797] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0284.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0284.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0284.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0284.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0284.798] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185776.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185776.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0284.799] GetFileType (hFile=0x1c0) returned 0x1 [0284.799] CloseHandle (hObject=0x1c0) returned 1 [0284.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0284.800] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185776.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185776.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x69d8)) returned 1 [0284.800] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0284.800] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0284.800] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185776.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185776.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x69d8)) returned 1 [0284.800] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0284.800] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0284.800] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0284.800] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x62e0, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0185778.WMF", cAlternateFileName="")) returned 1 [0284.800] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0284.800] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0284.800] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0284.800] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0284.801] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0284.801] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0284.801] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185778.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185778.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0284.801] GetFileType (hFile=0x1c0) returned 0x1 [0284.801] CloseHandle (hObject=0x1c0) returned 1 [0284.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0284.802] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185778.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185778.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x62e0)) returned 1 [0284.802] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0284.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0284.802] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185778.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185778.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x62e0)) returned 1 [0284.802] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0284.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0284.802] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0284.802] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe956, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0185780.WMF", cAlternateFileName="")) returned 1 [0284.803] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0284.803] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0284.803] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0284.803] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0284.803] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0284.803] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0284.803] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185780.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185780.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0284.804] GetFileType (hFile=0x1c0) returned 0x1 [0284.804] CloseHandle (hObject=0x1c0) returned 1 [0284.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0284.804] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185780.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185780.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe956)) returned 1 [0284.805] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0284.805] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0284.805] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185780.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185780.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe956)) returned 1 [0284.805] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0284.805] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0284.805] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0284.805] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x99a2, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0185786.WMF", cAlternateFileName="")) returned 1 [0284.805] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0284.805] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0284.805] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0284.805] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0284.806] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0284.806] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0284.806] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185786.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185786.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0284.806] GetFileType (hFile=0x1c0) returned 0x1 [0284.807] CloseHandle (hObject=0x1c0) returned 1 [0285.078] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0285.078] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185786.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185786.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x99a2)) returned 1 [0285.078] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0285.078] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0285.078] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185786.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185786.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x99a2)) returned 1 [0285.079] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0285.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0285.079] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0285.079] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x50b6, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0185790.WMF", cAlternateFileName="")) returned 1 [0285.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0285.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0285.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0285.079] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0285.080] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0285.080] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0285.080] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185790.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185790.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0285.081] GetFileType (hFile=0x21c) returned 0x1 [0285.081] CloseHandle (hObject=0x21c) returned 1 [0285.082] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0285.082] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185790.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185790.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x50b6)) returned 1 [0285.082] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0285.082] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0285.082] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185790.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185790.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x50b6)) returned 1 [0285.082] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0285.083] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0285.083] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0285.083] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x650c, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0185796.WMF", cAlternateFileName="")) returned 1 [0285.083] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0285.083] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0285.083] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0285.083] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0285.083] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0285.083] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0285.084] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185796.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185796.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0285.084] GetFileType (hFile=0x21c) returned 0x1 [0285.085] CloseHandle (hObject=0x21c) returned 1 [0285.085] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0285.085] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185796.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185796.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x650c)) returned 1 [0285.085] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0285.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0285.086] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185796.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185796.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x650c)) returned 1 [0285.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0285.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0285.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0285.086] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8420, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0185798.WMF", cAlternateFileName="")) returned 1 [0285.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0285.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0285.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0285.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0285.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0285.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0285.088] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185798.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185798.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0285.088] GetFileType (hFile=0x21c) returned 0x1 [0285.088] CloseHandle (hObject=0x21c) returned 1 [0285.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0285.089] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185798.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185798.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8420)) returned 1 [0285.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0285.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0285.090] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185798.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185798.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8420)) returned 1 [0285.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0285.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0285.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0285.090] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5eae, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0185800.WMF", cAlternateFileName="")) returned 1 [0285.091] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0285.091] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0285.091] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0285.091] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0285.091] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0285.091] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0285.092] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185800.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185800.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0285.092] GetFileType (hFile=0x21c) returned 0x1 [0285.093] CloseHandle (hObject=0x21c) returned 1 [0285.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0285.093] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185800.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185800.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5eae)) returned 1 [0285.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0285.094] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0285.094] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185800.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185800.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5eae)) returned 1 [0285.094] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0285.094] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0285.094] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0285.094] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x773a, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0185806.WMF", cAlternateFileName="")) returned 1 [0285.094] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0285.094] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0285.095] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0285.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0285.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0285.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0285.096] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185806.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185806.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0285.097] GetFileType (hFile=0x21c) returned 0x1 [0285.097] CloseHandle (hObject=0x21c) returned 1 [0285.098] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0285.098] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185806.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185806.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x773a)) returned 1 [0285.099] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0285.099] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0285.099] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185806.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185806.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x773a)) returned 1 [0285.136] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0285.136] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0285.136] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0285.136] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b8e, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0185818.WMF", cAlternateFileName="")) returned 1 [0285.136] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0285.136] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0285.136] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0285.136] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0285.137] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0285.137] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0285.137] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185818.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185818.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0285.137] GetFileType (hFile=0x21c) returned 0x1 [0285.137] CloseHandle (hObject=0x21c) returned 1 [0285.138] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0285.138] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185818.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185818.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b8e)) returned 1 [0285.138] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0285.138] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0285.138] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185818.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185818.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b8e)) returned 1 [0285.138] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0285.138] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0285.139] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0285.139] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e74, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0185828.WMF", cAlternateFileName="")) returned 1 [0285.139] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0285.139] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0285.139] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0285.139] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0285.139] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0285.139] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0285.140] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185828.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185828.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0285.140] GetFileType (hFile=0x21c) returned 0x1 [0285.140] CloseHandle (hObject=0x21c) returned 1 [0285.140] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0285.140] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185828.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185828.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e74)) returned 1 [0285.140] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0285.141] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0285.141] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185828.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185828.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e74)) returned 1 [0285.141] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0285.141] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0285.141] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0285.141] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2182, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0185834.WMF", cAlternateFileName="")) returned 1 [0285.141] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0285.141] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0285.141] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0285.141] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0285.141] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0285.141] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0285.142] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185834.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185834.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0285.142] GetFileType (hFile=0x21c) returned 0x1 [0285.142] CloseHandle (hObject=0x21c) returned 1 [0285.142] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0285.142] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185834.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185834.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2182)) returned 1 [0285.143] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0285.143] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0285.143] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185834.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185834.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2182)) returned 1 [0285.143] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0285.143] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0285.143] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0285.143] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x37e4, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0185842.WMF", cAlternateFileName="")) returned 1 [0285.143] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0285.143] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0285.143] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0285.143] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0285.143] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0285.143] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0285.144] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185842.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185842.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0285.144] GetFileType (hFile=0x21c) returned 0x1 [0285.144] CloseHandle (hObject=0x21c) returned 1 [0285.144] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0285.144] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185842.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185842.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x37e4)) returned 1 [0285.144] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0285.145] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0285.145] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185842.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185842.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x37e4)) returned 1 [0285.145] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0285.145] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0285.145] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0285.145] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21da, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0186346.WMF", cAlternateFileName="")) returned 1 [0285.145] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0285.145] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0285.145] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0285.145] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0285.145] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0285.145] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0285.146] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186346.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186346.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0285.146] GetFileType (hFile=0x21c) returned 0x1 [0285.146] CloseHandle (hObject=0x21c) returned 1 [0285.146] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0285.146] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186346.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186346.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21da)) returned 1 [0285.146] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0285.147] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0285.147] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186346.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186346.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21da)) returned 1 [0285.147] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0285.147] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0285.147] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0285.147] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x843a, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0186360.WMF", cAlternateFileName="")) returned 1 [0285.147] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0285.147] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0285.147] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0285.147] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0285.147] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0285.147] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0285.148] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186360.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186360.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0285.148] GetFileType (hFile=0x21c) returned 0x1 [0285.148] CloseHandle (hObject=0x21c) returned 1 [0285.148] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0285.148] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186360.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186360.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x843a)) returned 1 [0285.148] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0285.148] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0285.148] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186360.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186360.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x843a)) returned 1 [0285.149] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0285.149] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0285.149] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0285.149] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x44fe, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0186362.WMF", cAlternateFileName="")) returned 1 [0285.149] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0285.149] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0285.149] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0285.149] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0285.149] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0285.149] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0285.149] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186362.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186362.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0285.150] GetFileType (hFile=0x21c) returned 0x1 [0285.150] CloseHandle (hObject=0x21c) returned 1 [0285.150] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0285.150] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186362.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186362.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x44fe)) returned 1 [0285.150] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0285.150] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0285.150] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186362.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186362.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x44fe)) returned 1 [0285.150] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0285.151] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0285.151] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0285.151] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4724, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0186364.WMF", cAlternateFileName="")) returned 1 [0285.151] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0285.151] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0285.151] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0285.151] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0285.506] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0285.506] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0285.507] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186364.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186364.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0285.508] GetFileType (hFile=0x174) returned 0x1 [0285.508] CloseHandle (hObject=0x174) returned 1 [0285.509] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0285.509] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186364.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186364.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4724)) returned 1 [0285.509] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0285.509] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0285.509] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186364.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186364.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4724)) returned 1 [0285.509] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0285.510] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0285.510] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0285.510] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19c4, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0187647.WMF", cAlternateFileName="")) returned 1 [0285.510] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0285.510] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0285.510] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0285.547] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0285.548] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0285.548] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0285.548] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187647.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187647.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0285.548] GetFileType (hFile=0x174) returned 0x1 [0285.549] CloseHandle (hObject=0x174) returned 1 [0285.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0285.549] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187647.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187647.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19c4)) returned 1 [0285.549] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0285.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0285.549] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187647.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187647.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19c4)) returned 1 [0285.550] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0285.550] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0285.550] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0285.550] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1500, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0187815.WMF", cAlternateFileName="")) returned 1 [0285.550] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0285.550] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0285.550] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0285.550] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0285.550] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0285.550] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0285.551] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187815.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187815.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0285.551] GetFileType (hFile=0x174) returned 0x1 [0285.551] CloseHandle (hObject=0x174) returned 1 [0285.551] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0285.552] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187815.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187815.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1500)) returned 1 [0285.552] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0285.552] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0285.552] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187815.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187815.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1500)) returned 1 [0285.552] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0285.552] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0285.552] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0285.552] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d7c, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0187817.WMF", cAlternateFileName="")) returned 1 [0285.552] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0285.552] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0285.552] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0285.552] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0285.552] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0285.553] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0285.553] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187817.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187817.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0285.553] GetFileType (hFile=0x174) returned 0x1 [0285.553] CloseHandle (hObject=0x174) returned 1 [0285.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0285.554] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187817.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187817.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d7c)) returned 1 [0285.554] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0285.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0285.555] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187817.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187817.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d7c)) returned 1 [0285.555] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0285.555] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0285.555] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0285.556] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2870, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0187819.WMF", cAlternateFileName="")) returned 1 [0285.556] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0285.556] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0285.556] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0285.556] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0285.556] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0285.556] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0285.556] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187819.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187819.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0285.557] GetFileType (hFile=0x174) returned 0x1 [0285.558] CloseHandle (hObject=0x174) returned 1 [0285.558] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0285.558] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187819.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187819.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2870)) returned 1 [0285.559] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0285.559] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0285.559] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187819.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187819.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2870)) returned 1 [0285.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0285.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0285.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0285.605] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d4c, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0187825.WMF", cAlternateFileName="")) returned 1 [0285.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0285.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0285.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0285.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0285.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0285.606] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0285.606] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187825.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187825.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0285.606] GetFileType (hFile=0x174) returned 0x1 [0285.607] CloseHandle (hObject=0x174) returned 1 [0285.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0285.607] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187825.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187825.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d4c)) returned 1 [0285.607] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0285.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0285.607] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187825.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187825.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d4c)) returned 1 [0285.607] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0285.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0285.608] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0285.608] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3040, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0187829.WMF", cAlternateFileName="")) returned 1 [0285.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0285.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0285.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0285.608] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0285.608] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0285.608] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0285.608] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187829.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187829.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0285.609] GetFileType (hFile=0x174) returned 0x1 [0285.609] CloseHandle (hObject=0x174) returned 1 [0285.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0285.609] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187829.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187829.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3040)) returned 1 [0285.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0285.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0285.609] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187829.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187829.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3040)) returned 1 [0285.610] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0285.610] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0285.610] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0285.610] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2480, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0187835.WMF", cAlternateFileName="")) returned 1 [0285.610] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0285.610] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0285.610] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0285.610] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0285.610] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0285.610] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0285.611] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187835.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187835.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0285.611] GetFileType (hFile=0x174) returned 0x1 [0285.612] CloseHandle (hObject=0x174) returned 1 [0285.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0285.612] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187835.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187835.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2480)) returned 1 [0285.612] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0285.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0285.612] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187835.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187835.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2480)) returned 1 [0285.612] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0285.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0285.613] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0285.613] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3fe2, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0187837.WMF", cAlternateFileName="")) returned 1 [0285.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0285.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0285.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0285.613] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0285.613] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0285.613] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0285.614] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187837.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187837.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0285.614] GetFileType (hFile=0x174) returned 0x1 [0285.615] CloseHandle (hObject=0x174) returned 1 [0285.615] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0285.615] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187837.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187837.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3fe2)) returned 1 [0285.615] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0285.615] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0285.615] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187837.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187837.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3fe2)) returned 1 [0285.616] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0285.616] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0285.616] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0285.616] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14fc, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0187839.WMF", cAlternateFileName="")) returned 1 [0285.616] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0285.616] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0285.616] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0285.616] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0285.616] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0285.617] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0285.617] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187839.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187839.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0285.617] GetFileType (hFile=0x174) returned 0x1 [0285.618] CloseHandle (hObject=0x174) returned 1 [0285.618] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0285.618] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187839.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187839.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14fc)) returned 1 [0285.619] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0285.619] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0285.619] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187839.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187839.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14fc)) returned 1 [0285.619] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0285.619] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0285.619] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0285.619] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bcc, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0187847.WMF", cAlternateFileName="")) returned 1 [0285.620] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0285.620] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0285.620] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0285.620] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0285.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0285.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0285.621] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187847.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187847.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0285.621] GetFileType (hFile=0x174) returned 0x1 [0285.622] CloseHandle (hObject=0x174) returned 1 [0285.622] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0285.622] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187847.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187847.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bcc)) returned 1 [0285.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0285.623] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0285.623] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187847.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187847.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bcc)) returned 1 [0285.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0285.623] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0285.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0285.623] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d94, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0187849.WMF", cAlternateFileName="")) returned 1 [0285.624] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0285.624] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0285.624] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0285.624] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0285.624] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0285.624] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0285.625] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187849.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187849.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0285.625] GetFileType (hFile=0x174) returned 0x1 [0285.625] CloseHandle (hObject=0x174) returned 1 [0285.625] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0285.626] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187849.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187849.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d94)) returned 1 [0285.626] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0285.626] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0285.626] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187849.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187849.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d94)) returned 1 [0285.626] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0285.626] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0285.626] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0285.626] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x221c, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0187851.WMF", cAlternateFileName="")) returned 1 [0285.627] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0285.627] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0285.627] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0285.627] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0285.627] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0285.627] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0285.628] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187851.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187851.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0285.628] GetFileType (hFile=0x174) returned 0x1 [0285.629] CloseHandle (hObject=0x174) returned 1 [0285.629] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0285.629] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187851.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187851.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x221c)) returned 1 [0285.629] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0285.629] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0285.630] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187851.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187851.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x221c)) returned 1 [0285.630] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0285.630] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0285.630] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0285.630] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaac, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0187859.WMF", cAlternateFileName="")) returned 1 [0285.630] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0285.630] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0285.630] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0285.630] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0285.631] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0285.631] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0285.631] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187859.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187859.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0285.631] GetFileType (hFile=0x174) returned 0x1 [0285.632] CloseHandle (hObject=0x174) returned 1 [0285.632] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0285.632] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187859.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187859.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaac)) returned 1 [0285.633] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0285.633] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0285.633] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187859.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187859.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaac)) returned 1 [0285.633] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0285.633] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0285.633] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0285.633] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2394, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0187861.WMF", cAlternateFileName="")) returned 1 [0285.633] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0285.633] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0285.634] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0285.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0285.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0285.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0285.635] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187861.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187861.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0285.635] GetFileType (hFile=0x174) returned 0x1 [0285.977] CloseHandle (hObject=0x174) returned 1 [0285.977] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0285.977] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187861.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187861.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2394)) returned 1 [0285.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0285.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0285.978] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187861.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187861.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2394)) returned 1 [0285.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0285.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0285.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0285.978] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a44, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0187863.WMF", cAlternateFileName="")) returned 1 [0285.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0285.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212250 [0285.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0285.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212250 | out: hHeap=0x1f0000) returned 1 [0285.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0285.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0285.979] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187863.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187863.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0285.979] GetFileType (hFile=0x174) returned 0x1 [0285.980] CloseHandle (hObject=0x174) returned 1 [0285.980] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0285.980] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187863.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187863.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a44)) returned 1 [0285.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0285.980] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0285.980] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187863.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187863.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a44)) returned 1 [0285.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0285.981] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0285.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0285.981] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1258, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0187881.WMF", cAlternateFileName="")) returned 1 [0285.981] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0285.981] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211fa8 [0285.981] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0285.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211fa8 | out: hHeap=0x1f0000) returned 1 [0285.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0285.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0285.982] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187881.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187881.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0285.982] GetFileType (hFile=0x174) returned 0x1 [0285.982] CloseHandle (hObject=0x174) returned 1 [0285.983] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0285.983] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187881.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187881.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1258)) returned 1 [0285.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0285.983] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0285.983] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187881.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187881.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1258)) returned 1 [0285.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0285.983] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0285.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0285.983] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x834, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0187883.WMF", cAlternateFileName="")) returned 1 [0286.074] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0286.074] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2128b0 [0286.074] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0286.074] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2128b0 | out: hHeap=0x1f0000) returned 1 [0286.074] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0286.074] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0286.075] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187883.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187883.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0286.075] GetFileType (hFile=0x174) returned 0x1 [0286.076] CloseHandle (hObject=0x174) returned 1 [0286.076] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0286.076] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187883.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187883.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x834)) returned 1 [0286.076] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0286.076] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0286.077] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187883.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187883.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x834)) returned 1 [0286.077] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0286.077] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0286.077] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0286.077] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15f4, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0187893.WMF", cAlternateFileName="")) returned 1 [0286.077] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0286.077] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211c78 [0286.077] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0286.077] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211c78 | out: hHeap=0x1f0000) returned 1 [0286.077] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0286.077] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0286.078] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187893.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187893.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0286.078] GetFileType (hFile=0x174) returned 0x1 [0286.078] CloseHandle (hObject=0x174) returned 1 [0286.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0286.079] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187893.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187893.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15f4)) returned 1 [0286.079] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0286.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0286.079] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187893.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187893.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15f4)) returned 1 [0286.079] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0286.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0286.080] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0286.080] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd90, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0187895.WMF", cAlternateFileName="")) returned 1 [0286.080] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0286.080] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211f20 [0286.080] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0286.080] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211f20 | out: hHeap=0x1f0000) returned 1 [0286.080] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0286.080] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0286.081] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187895.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187895.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0286.081] GetFileType (hFile=0x174) returned 0x1 [0286.081] CloseHandle (hObject=0x174) returned 1 [0286.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0286.081] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187895.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187895.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd90)) returned 1 [0286.082] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0286.082] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0286.082] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187895.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187895.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd90)) returned 1 [0286.082] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0286.082] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0286.082] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0286.082] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1388, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0187921.WMF", cAlternateFileName="")) returned 1 [0286.082] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0286.082] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2119d0 [0286.082] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0286.082] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2119d0 | out: hHeap=0x1f0000) returned 1 [0286.083] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0286.083] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0286.083] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187921.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187921.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0286.083] GetFileType (hFile=0x174) returned 0x1 [0286.084] CloseHandle (hObject=0x174) returned 1 [0286.084] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0286.084] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187921.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187921.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1388)) returned 1 [0286.084] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0286.084] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0286.084] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187921.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187921.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1388)) returned 1 [0286.084] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0286.084] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0286.084] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0286.085] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x29dc, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0188511.WMF", cAlternateFileName="")) returned 1 [0286.085] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0286.085] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d00 [0286.085] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0286.085] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d00 | out: hHeap=0x1f0000) returned 1 [0286.085] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0286.085] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0286.085] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188511.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188511.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0286.086] GetFileType (hFile=0x174) returned 0x1 [0286.086] CloseHandle (hObject=0x174) returned 1 [0286.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0286.086] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188511.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188511.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x29dc)) returned 1 [0286.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0286.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0286.087] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188511.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188511.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x29dc)) returned 1 [0286.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0286.087] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0286.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0286.087] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3004, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0188513.WMF", cAlternateFileName="")) returned 1 [0286.087] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238050 [0286.087] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2129c0 [0286.087] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0286.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2129c0 | out: hHeap=0x1f0000) returned 1 [0286.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0286.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238050 | out: hHeap=0x1f0000) returned 1 [0286.088] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188513.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188513.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0286.088] GetFileType (hFile=0x174) returned 0x1 [0286.088] CloseHandle (hObject=0x174) returned 1 [0286.088] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0286.089] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188513.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188513.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3004)) returned 1 [0286.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0286.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0286.090] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188513.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188513.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3004)) returned 1 [0286.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0286.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0286.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0286.090] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16c0, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0188519.WMF", cAlternateFileName="")) returned 1 [0286.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0286.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212828 [0286.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0286.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212828 | out: hHeap=0x1f0000) returned 1 [0286.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0286.091] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0286.091] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188519.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188519.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0286.091] GetFileType (hFile=0x174) returned 0x1 [0286.092] CloseHandle (hObject=0x174) returned 1 [0286.092] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0286.092] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188519.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188519.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16c0)) returned 1 [0286.092] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0286.092] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0286.092] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188519.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188519.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16c0)) returned 1 [0286.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0286.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0286.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0286.093] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b5c, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0188587.WMF", cAlternateFileName="")) returned 1 [0286.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0286.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0286.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0286.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0286.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0286.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0286.093] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188587.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188587.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0286.094] GetFileType (hFile=0x174) returned 0x1 [0286.094] CloseHandle (hObject=0x174) returned 1 [0286.094] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0286.094] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188587.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188587.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b5c)) returned 1 [0286.094] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0286.095] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0286.095] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188587.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188587.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b5c)) returned 1 [0286.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0286.095] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0286.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0286.095] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3e9e, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0188667.WMF", cAlternateFileName="")) returned 1 [0286.095] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0286.095] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212140 [0286.095] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0286.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212140 | out: hHeap=0x1f0000) returned 1 [0286.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0286.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0286.096] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188667.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188667.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0286.096] GetFileType (hFile=0x174) returned 0x1 [0286.096] CloseHandle (hObject=0x174) returned 1 [0286.096] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0286.096] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188667.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188667.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3e9e)) returned 1 [0286.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0286.097] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0286.097] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188667.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188667.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3e9e)) returned 1 [0286.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0286.097] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0286.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0286.097] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x73a2, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0188669.WMF", cAlternateFileName="")) returned 1 [0286.097] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0286.097] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212140 [0286.097] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0286.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212140 | out: hHeap=0x1f0000) returned 1 [0286.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0286.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0286.098] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188669.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188669.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0286.098] GetFileType (hFile=0x174) returned 0x1 [0286.098] CloseHandle (hObject=0x174) returned 1 [0286.098] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0286.098] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188669.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188669.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x73a2)) returned 1 [0286.099] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0286.099] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0286.099] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188669.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188669.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x73a2)) returned 1 [0286.099] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0286.099] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0286.099] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0286.099] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x336a, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0188679.WMF", cAlternateFileName="")) returned 1 [0286.099] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0286.099] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2120b8 [0286.099] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0286.099] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2120b8 | out: hHeap=0x1f0000) returned 1 [0286.099] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0286.099] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0286.100] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188679.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188679.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0286.100] GetFileType (hFile=0x174) returned 0x1 [0286.100] CloseHandle (hObject=0x174) returned 1 [0286.100] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0286.100] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188679.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188679.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x336a)) returned 1 [0286.101] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0286.101] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0286.101] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188679.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188679.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x336a)) returned 1 [0286.101] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0286.101] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0286.101] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0286.101] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ca4, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0195248.WMF", cAlternateFileName="")) returned 1 [0286.101] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0286.101] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212030 [0286.101] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0286.101] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212030 | out: hHeap=0x1f0000) returned 1 [0286.101] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0286.102] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0286.102] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195248.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195248.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0286.102] GetFileType (hFile=0x174) returned 0x1 [0286.103] CloseHandle (hObject=0x174) returned 1 [0286.103] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0286.103] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195248.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195248.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ca4)) returned 1 [0286.103] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0286.103] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0286.103] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195248.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195248.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ca4)) returned 1 [0286.103] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0286.103] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0286.103] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0286.103] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11b6, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0195254.WMF", cAlternateFileName="")) returned 1 [0286.104] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0286.104] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211ae0 [0286.104] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0286.104] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211ae0 | out: hHeap=0x1f0000) returned 1 [0286.104] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0286.104] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0286.480] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195254.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195254.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0286.480] GetFileType (hFile=0x1c0) returned 0x1 [0286.480] CloseHandle (hObject=0x1c0) returned 1 [0286.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0286.480] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195254.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195254.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11b6)) returned 1 [0286.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0286.481] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0286.481] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195254.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195254.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11b6)) returned 1 [0286.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0286.481] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0286.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0286.481] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x207a, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0195260.WMF", cAlternateFileName="")) returned 1 [0286.481] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0286.481] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d00 [0286.481] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0286.482] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d00 | out: hHeap=0x1f0000) returned 1 [0286.482] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0286.482] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0286.482] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195260.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195260.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0286.482] GetFileType (hFile=0x1c0) returned 0x1 [0286.483] CloseHandle (hObject=0x1c0) returned 1 [0286.483] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0286.483] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195260.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195260.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x207a)) returned 1 [0286.483] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0286.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0286.484] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195260.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195260.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x207a)) returned 1 [0286.484] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0286.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0286.484] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0286.484] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x72f8, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0195320.WMF", cAlternateFileName="")) returned 1 [0286.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0286.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212828 [0286.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0286.485] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212828 | out: hHeap=0x1f0000) returned 1 [0286.485] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0286.485] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0286.485] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195320.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195320.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0286.485] GetFileType (hFile=0x1c0) returned 0x1 [0286.486] CloseHandle (hObject=0x1c0) returned 1 [0286.486] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0286.486] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195320.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195320.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x72f8)) returned 1 [0286.486] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0286.486] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0286.487] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195320.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195320.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x72f8)) returned 1 [0286.487] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0286.487] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0286.487] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0286.487] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5350, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0195342.WMF", cAlternateFileName="")) returned 1 [0286.487] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0286.487] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212360 [0286.487] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0286.487] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212360 | out: hHeap=0x1f0000) returned 1 [0286.487] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0286.487] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0286.488] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195342.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195342.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0286.488] GetFileType (hFile=0x1c0) returned 0x1 [0286.489] CloseHandle (hObject=0x1c0) returned 1 [0286.489] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0286.489] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195342.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195342.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5350)) returned 1 [0286.489] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0286.489] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0286.489] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195342.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195342.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5350)) returned 1 [0286.489] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0286.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0286.490] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0286.490] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x48be, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0195428.WMF", cAlternateFileName="")) returned 1 [0286.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0286.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211e98 [0286.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0286.490] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e98 | out: hHeap=0x1f0000) returned 1 [0286.490] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0286.490] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0286.491] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195428.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195428.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0286.491] GetFileType (hFile=0x1c0) returned 0x1 [0286.491] CloseHandle (hObject=0x1c0) returned 1 [0286.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0286.492] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195428.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195428.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x48be)) returned 1 [0286.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0286.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0286.492] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195428.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195428.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x48be)) returned 1 [0286.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0286.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0286.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0286.492] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe60, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0195772.WMF", cAlternateFileName="")) returned 1 [0286.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0286.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211b68 [0286.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0286.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b68 | out: hHeap=0x1f0000) returned 1 [0286.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0286.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0286.493] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195772.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195772.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0286.493] GetFileType (hFile=0x1c0) returned 0x1 [0286.493] CloseHandle (hObject=0x1c0) returned 1 [0286.494] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0286.494] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195772.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195772.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe60)) returned 1 [0286.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0286.494] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0286.494] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195772.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195772.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe60)) returned 1 [0286.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0286.494] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0286.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0286.494] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbbc, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0195788.WMF", cAlternateFileName="")) returned 1 [0286.494] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0286.494] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2123e8 [0286.494] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0286.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2123e8 | out: hHeap=0x1f0000) returned 1 [0286.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0286.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0286.495] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195788.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195788.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0286.496] GetFileType (hFile=0x1c0) returned 0x1 [0286.496] CloseHandle (hObject=0x1c0) returned 1 [0286.496] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0286.496] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195788.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195788.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbbc)) returned 1 [0286.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0286.496] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0286.496] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195788.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195788.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbbc)) returned 1 [0286.497] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0286.497] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0286.497] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0286.497] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x128e, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0196060.WMF", cAlternateFileName="")) returned 1 [0286.497] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0286.497] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212470 [0286.497] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0286.497] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212470 | out: hHeap=0x1f0000) returned 1 [0286.497] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0286.497] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0286.497] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196060.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196060.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0286.498] GetFileType (hFile=0x1c0) returned 0x1 [0286.498] CloseHandle (hObject=0x1c0) returned 1 [0286.498] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0286.498] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196060.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196060.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x128e)) returned 1 [0286.498] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0286.498] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0286.498] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196060.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196060.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x128e)) returned 1 [0286.499] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0286.499] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0286.499] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0286.499] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14ce, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0196110.WMF", cAlternateFileName="")) returned 1 [0286.499] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0286.499] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212030 [0286.499] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0286.499] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212030 | out: hHeap=0x1f0000) returned 1 [0286.499] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0286.499] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0286.499] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196110.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196110.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0286.500] GetFileType (hFile=0x1c0) returned 0x1 [0286.500] CloseHandle (hObject=0x1c0) returned 1 [0286.500] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0286.500] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196110.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196110.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14ce)) returned 1 [0286.500] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0286.500] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0286.500] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196110.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196110.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14ce)) returned 1 [0286.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0286.501] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0286.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0286.501] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xef2, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0196142.WMF", cAlternateFileName="")) returned 1 [0286.501] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0286.501] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0286.501] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0286.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0286.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0286.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0286.502] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196142.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196142.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0286.502] GetFileType (hFile=0x1c0) returned 0x1 [0286.502] CloseHandle (hObject=0x1c0) returned 1 [0286.502] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0286.503] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196142.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196142.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xef2)) returned 1 [0286.503] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0286.503] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0286.503] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196142.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196142.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xef2)) returned 1 [0286.503] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0286.503] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0286.503] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0286.503] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3586, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0196354.WMF", cAlternateFileName="")) returned 1 [0286.503] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0286.503] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2122d8 [0286.503] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0286.503] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2122d8 | out: hHeap=0x1f0000) returned 1 [0286.503] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0286.503] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0286.504] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196354.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196354.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0286.504] GetFileType (hFile=0x1c0) returned 0x1 [0286.504] CloseHandle (hObject=0x1c0) returned 1 [0286.505] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0286.505] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196354.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196354.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3586)) returned 1 [0286.505] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0286.505] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0286.505] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196354.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196354.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3586)) returned 1 [0286.505] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0286.505] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0286.505] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0286.505] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b00, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0196358.WMF", cAlternateFileName="")) returned 1 [0286.505] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0286.505] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2120b8 [0286.505] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0286.505] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2120b8 | out: hHeap=0x1f0000) returned 1 [0286.506] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0286.506] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0286.506] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196358.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196358.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0286.506] GetFileType (hFile=0x1c0) returned 0x1 [0286.506] CloseHandle (hObject=0x1c0) returned 1 [0286.507] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0286.507] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196358.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196358.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b00)) returned 1 [0286.507] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0286.507] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0286.507] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196358.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196358.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b00)) returned 1 [0286.507] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0286.507] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0286.507] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0286.507] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x164c, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0196364.WMF", cAlternateFileName="")) returned 1 [0286.507] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0286.507] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0286.507] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0286.507] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0286.507] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0286.508] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0286.508] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196364.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196364.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0286.508] GetFileType (hFile=0x1c0) returned 0x1 [0286.508] CloseHandle (hObject=0x1c0) returned 1 [0286.508] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0286.509] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196364.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196364.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x164c)) returned 1 [0286.509] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0286.509] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0286.509] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196364.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196364.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x164c)) returned 1 [0286.509] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0286.509] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0286.509] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0286.509] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9d26, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0197979.WMF", cAlternateFileName="")) returned 1 [0286.509] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0286.509] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211bf0 [0286.509] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0286.509] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211bf0 | out: hHeap=0x1f0000) returned 1 [0286.509] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0286.509] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0286.510] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0197979.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0197979.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0286.510] GetFileType (hFile=0x1c0) returned 0x1 [0286.510] CloseHandle (hObject=0x1c0) returned 1 [0286.511] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0286.511] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0197979.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0197979.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9d26)) returned 1 [0286.511] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0286.511] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0286.511] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0197979.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0197979.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9d26)) returned 1 [0286.511] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0286.512] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0286.512] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0286.512] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x668c, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0197983.WMF", cAlternateFileName="")) returned 1 [0286.512] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0286.512] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d88 [0286.512] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0286.512] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d88 | out: hHeap=0x1f0000) returned 1 [0286.512] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0286.512] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0286.512] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0197983.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0197983.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0286.512] GetFileType (hFile=0x1c0) returned 0x1 [0286.513] CloseHandle (hObject=0x1c0) returned 1 [0286.513] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0286.513] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0197983.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0197983.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x668c)) returned 1 [0286.513] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0286.513] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0286.513] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0197983.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0197983.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x668c)) returned 1 [0286.513] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0286.513] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0286.514] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0286.514] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x849c, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0198016.WMF", cAlternateFileName="")) returned 1 [0286.514] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0286.514] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d88 [0286.514] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0286.514] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d88 | out: hHeap=0x1f0000) returned 1 [0286.514] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0286.514] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0286.514] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198016.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198016.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0286.514] GetFileType (hFile=0x1c0) returned 0x1 [0286.515] CloseHandle (hObject=0x1c0) returned 1 [0286.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0286.515] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198016.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198016.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x849c)) returned 1 [0286.515] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0286.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0286.515] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198016.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198016.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x849c)) returned 1 [0286.515] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0286.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0286.515] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0286.515] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5cae, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0198020.WMF", cAlternateFileName="")) returned 1 [0286.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0286.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d88 [0286.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0286.515] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d88 | out: hHeap=0x1f0000) returned 1 [0286.516] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0286.516] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0286.516] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198020.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198020.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0286.516] GetFileType (hFile=0x1c0) returned 0x1 [0286.516] CloseHandle (hObject=0x1c0) returned 1 [0286.516] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0286.516] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198020.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198020.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5cae)) returned 1 [0286.516] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0286.516] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0286.517] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198020.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198020.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5cae)) returned 1 [0286.517] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0286.517] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0286.517] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0286.517] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8860, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0198021.WMF", cAlternateFileName="")) returned 1 [0286.517] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0286.517] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212140 [0286.517] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0286.517] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212140 | out: hHeap=0x1f0000) returned 1 [0286.517] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0286.517] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0286.517] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198021.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198021.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0286.517] GetFileType (hFile=0x1c0) returned 0x1 [0286.518] CloseHandle (hObject=0x1c0) returned 1 [0286.518] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0286.518] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198021.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198021.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8860)) returned 1 [0286.518] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0286.518] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0286.518] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198021.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198021.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8860)) returned 1 [0286.518] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0286.518] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0286.518] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0286.518] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6624, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0198022.WMF", cAlternateFileName="")) returned 1 [0286.518] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0286.518] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211ae0 [0286.518] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0286.518] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211ae0 | out: hHeap=0x1f0000) returned 1 [0286.518] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0286.519] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0286.519] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198022.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198022.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0286.519] GetFileType (hFile=0x1c0) returned 0x1 [0286.519] CloseHandle (hObject=0x1c0) returned 1 [0286.519] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0286.519] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198022.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198022.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6624)) returned 1 [0286.519] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0286.519] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0286.520] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198022.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198022.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6624)) returned 1 [0286.520] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0286.520] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0286.520] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0286.520] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3cce, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0198025.WMF", cAlternateFileName="")) returned 1 [0286.520] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0286.520] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211b68 [0286.520] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0286.520] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b68 | out: hHeap=0x1f0000) returned 1 [0286.520] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0286.520] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0286.520] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198025.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198025.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0286.520] GetFileType (hFile=0x1c0) returned 0x1 [0286.521] CloseHandle (hObject=0x1c0) returned 1 [0286.521] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0286.521] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198025.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198025.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3cce)) returned 1 [0286.521] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0286.521] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0286.521] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198025.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198025.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3cce)) returned 1 [0286.521] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0286.521] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0286.521] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0286.521] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd6b4, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0198102.WMF", cAlternateFileName="")) returned 1 [0286.521] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0286.521] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2124f8 [0286.521] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0286.522] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2124f8 | out: hHeap=0x1f0000) returned 1 [0286.522] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0286.522] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0286.522] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198102.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198102.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0286.522] GetFileType (hFile=0x1c0) returned 0x1 [0286.522] CloseHandle (hObject=0x1c0) returned 1 [0286.522] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0286.522] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198102.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198102.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd6b4)) returned 1 [0286.523] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0286.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0286.523] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198102.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198102.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd6b4)) returned 1 [0286.523] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0286.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0286.523] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0286.523] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa520, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0198113.WMF", cAlternateFileName="")) returned 1 [0286.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0286.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211e98 [0286.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0286.523] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e98 | out: hHeap=0x1f0000) returned 1 [0286.523] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0286.523] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0286.523] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198113.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198113.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0286.524] GetFileType (hFile=0x1c0) returned 0x1 [0286.524] CloseHandle (hObject=0x1c0) returned 1 [0286.524] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0286.524] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198113.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198113.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa520)) returned 1 [0286.524] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0286.524] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0286.524] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198113.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198113.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa520)) returned 1 [0286.524] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0286.524] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0286.524] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0286.525] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa3b2, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0198226.WMF", cAlternateFileName="")) returned 1 [0286.525] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0286.525] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212938 [0286.525] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0286.525] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212938 | out: hHeap=0x1f0000) returned 1 [0286.525] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0286.525] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0286.525] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198226.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198226.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0286.525] GetFileType (hFile=0x1c0) returned 0x1 [0286.525] CloseHandle (hObject=0x1c0) returned 1 [0286.526] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0286.526] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198226.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198226.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa3b2)) returned 1 [0286.526] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0286.526] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0286.933] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198226.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198226.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa3b2)) returned 1 [0286.933] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0286.933] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0286.933] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0286.933] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa69e, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0198234.WMF", cAlternateFileName="")) returned 1 [0286.933] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0286.934] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212360 [0286.934] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0286.934] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212360 | out: hHeap=0x1f0000) returned 1 [0286.934] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0286.934] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0286.935] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198234.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198234.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0286.935] GetFileType (hFile=0x1e0) returned 0x1 [0286.936] CloseHandle (hObject=0x1e0) returned 1 [0286.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0286.936] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198234.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198234.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa69e)) returned 1 [0286.936] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0286.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0286.937] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198234.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198234.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa69e)) returned 1 [0286.937] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0286.937] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0286.937] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0286.937] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6f9c, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0198372.WMF", cAlternateFileName="")) returned 1 [0286.937] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0286.937] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0286.937] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0286.938] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0286.938] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0286.938] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0286.939] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198372.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198372.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0286.939] GetFileType (hFile=0x1e0) returned 0x1 [0286.939] CloseHandle (hObject=0x1e0) returned 1 [0286.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0286.940] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198372.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198372.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6f9c)) returned 1 [0286.940] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0286.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0286.940] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198372.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198372.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6f9c)) returned 1 [0286.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0286.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0286.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0286.941] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9d6c, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0198377.WMF", cAlternateFileName="")) returned 1 [0286.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0286.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211fa8 [0286.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0286.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211fa8 | out: hHeap=0x1f0000) returned 1 [0286.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0286.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0286.942] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198377.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198377.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0286.942] GetFileType (hFile=0x1e0) returned 0x1 [0286.943] CloseHandle (hObject=0x1e0) returned 1 [0286.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0286.943] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198377.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198377.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9d6c)) returned 1 [0286.944] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0286.944] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0286.944] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198377.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198377.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9d6c)) returned 1 [0286.944] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0286.944] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0286.944] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0286.944] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc20c, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0198447.WMF", cAlternateFileName="")) returned 1 [0286.944] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0286.944] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211b68 [0286.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0286.945] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b68 | out: hHeap=0x1f0000) returned 1 [0286.945] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0286.945] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0286.945] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198447.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198447.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0286.946] GetFileType (hFile=0x1e0) returned 0x1 [0286.946] CloseHandle (hObject=0x1e0) returned 1 [0286.947] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0286.947] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198447.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198447.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc20c)) returned 1 [0286.947] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0286.947] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0286.947] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198447.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198447.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc20c)) returned 1 [0286.947] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0286.947] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0286.947] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0286.947] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xae08, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0198494.WMF", cAlternateFileName="")) returned 1 [0286.948] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0286.948] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2119d0 [0286.948] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0286.948] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2119d0 | out: hHeap=0x1f0000) returned 1 [0286.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0286.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0286.949] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198494.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198494.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0286.950] GetFileType (hFile=0x1e0) returned 0x1 [0286.950] CloseHandle (hObject=0x1e0) returned 1 [0286.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0286.951] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198494.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198494.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xae08)) returned 1 [0286.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0286.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0286.951] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198494.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198494.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xae08)) returned 1 [0286.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0286.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0286.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0286.952] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe17a, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0198712.WMF", cAlternateFileName="")) returned 1 [0286.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0286.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212140 [0286.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0286.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212140 | out: hHeap=0x1f0000) returned 1 [0286.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0286.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0286.953] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198712.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198712.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0286.954] GetFileType (hFile=0x1e0) returned 0x1 [0286.954] CloseHandle (hObject=0x1e0) returned 1 [0286.955] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0286.955] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198712.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198712.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe17a)) returned 1 [0286.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0286.955] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0286.955] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198712.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198712.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe17a)) returned 1 [0286.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0286.955] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0286.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0286.956] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x714e, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0199279.WMF", cAlternateFileName="")) returned 1 [0286.956] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0286.956] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211948 [0286.956] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0286.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211948 | out: hHeap=0x1f0000) returned 1 [0286.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0286.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0286.957] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199279.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199279.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0286.957] GetFileType (hFile=0x1e0) returned 0x1 [0286.957] CloseHandle (hObject=0x1e0) returned 1 [0286.958] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0286.958] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199279.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199279.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x714e)) returned 1 [0286.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0286.958] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0286.958] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199279.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199279.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x714e)) returned 1 [0286.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0286.959] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0286.959] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0286.959] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7c4e, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0199303.WMF", cAlternateFileName="")) returned 1 [0286.959] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0286.959] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211b68 [0286.959] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0286.959] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b68 | out: hHeap=0x1f0000) returned 1 [0286.959] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0286.959] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0286.959] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199303.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199303.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0286.960] GetFileType (hFile=0x1e0) returned 0x1 [0286.960] CloseHandle (hObject=0x1e0) returned 1 [0286.960] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0286.961] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199303.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199303.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7c4e)) returned 1 [0286.961] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0286.961] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0286.961] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199303.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199303.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7c4e)) returned 1 [0286.961] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0286.961] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0286.961] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0286.961] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc37e, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0199307.WMF", cAlternateFileName="")) returned 1 [0286.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238050 [0286.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211b68 [0286.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0286.962] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b68 | out: hHeap=0x1f0000) returned 1 [0286.962] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0286.962] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238050 | out: hHeap=0x1f0000) returned 1 [0286.963] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199307.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199307.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0286.963] GetFileType (hFile=0x1e0) returned 0x1 [0286.964] CloseHandle (hObject=0x1e0) returned 1 [0286.965] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0286.965] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199307.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199307.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc37e)) returned 1 [0286.965] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0286.965] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0286.965] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199307.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199307.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc37e)) returned 1 [0286.965] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0286.965] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0286.966] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0286.966] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x662a, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0199423.WMF", cAlternateFileName="")) returned 1 [0286.966] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0286.966] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211b68 [0286.966] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0286.966] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b68 | out: hHeap=0x1f0000) returned 1 [0286.966] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0286.966] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0286.967] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199423.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199423.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0286.967] GetFileType (hFile=0x1e0) returned 0x1 [0286.968] CloseHandle (hObject=0x1e0) returned 1 [0286.968] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0286.968] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199423.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199423.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x662a)) returned 1 [0286.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0286.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0286.969] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199423.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199423.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x662a)) returned 1 [0286.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0286.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0286.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0286.969] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4124, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0199429.WMF", cAlternateFileName="")) returned 1 [0286.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0286.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212140 [0286.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0286.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212140 | out: hHeap=0x1f0000) returned 1 [0286.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0286.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0286.971] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199429.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199429.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0286.971] GetFileType (hFile=0x1e0) returned 0x1 [0286.972] CloseHandle (hObject=0x1e0) returned 1 [0286.972] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0286.972] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199429.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199429.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4124)) returned 1 [0286.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0286.972] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0286.972] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199429.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199429.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4124)) returned 1 [0286.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0286.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0286.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0286.973] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13c4, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0199465.WMF", cAlternateFileName="")) returned 1 [0286.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0286.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0286.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0286.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0286.974] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0286.974] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0286.974] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199465.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199465.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0286.974] GetFileType (hFile=0x1e0) returned 0x1 [0286.975] CloseHandle (hObject=0x1e0) returned 1 [0286.975] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0286.975] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199465.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199465.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13c4)) returned 1 [0286.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0286.975] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0286.975] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199465.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199465.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13c4)) returned 1 [0286.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0286.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0286.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0286.976] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x35bc, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0199469.WMF", cAlternateFileName="")) returned 1 [0286.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0286.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0286.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0286.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0286.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0286.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0286.977] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199469.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199469.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0286.977] GetFileType (hFile=0x1e0) returned 0x1 [0286.977] CloseHandle (hObject=0x1e0) returned 1 [0286.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0286.978] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199469.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199469.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x35bc)) returned 1 [0286.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0286.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0286.978] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199469.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199469.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x35bc)) returned 1 [0286.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0286.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0286.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0286.979] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a18, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0199473.WMF", cAlternateFileName="")) returned 1 [0286.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238050 [0286.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2129c0 [0286.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0287.293] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2129c0 | out: hHeap=0x1f0000) returned 1 [0287.293] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0287.293] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238050 | out: hHeap=0x1f0000) returned 1 [0287.294] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199473.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199473.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0287.294] GetFileType (hFile=0x198) returned 0x1 [0287.295] CloseHandle (hObject=0x198) returned 1 [0287.295] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0287.295] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199473.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199473.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a18)) returned 1 [0287.296] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0287.296] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0287.296] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199473.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199473.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a18)) returned 1 [0287.296] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0287.296] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0287.296] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0287.296] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1484, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0199475.WMF", cAlternateFileName="")) returned 1 [0287.297] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0287.297] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2120b8 [0287.297] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0287.297] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2120b8 | out: hHeap=0x1f0000) returned 1 [0287.297] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0287.297] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0287.298] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199475.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199475.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0287.298] GetFileType (hFile=0x198) returned 0x1 [0287.299] CloseHandle (hObject=0x198) returned 1 [0287.299] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0287.300] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199475.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199475.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1484)) returned 1 [0287.300] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0287.300] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0287.300] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199475.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199475.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1484)) returned 1 [0287.300] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0287.300] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0287.301] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0287.301] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27b4, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0199483.WMF", cAlternateFileName="")) returned 1 [0287.301] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609a0 [0287.301] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212718 [0287.301] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0287.301] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212718 | out: hHeap=0x1f0000) returned 1 [0287.302] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0287.302] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0287.303] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199483.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199483.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0287.303] GetFileType (hFile=0x198) returned 0x1 [0287.303] CloseHandle (hObject=0x198) returned 1 [0287.304] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0287.304] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199483.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199483.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27b4)) returned 1 [0287.304] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0287.304] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0287.305] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199483.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199483.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27b4)) returned 1 [0287.305] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0287.305] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0287.305] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0287.305] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x302c, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0199609.WMF", cAlternateFileName="")) returned 1 [0287.305] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260518 [0287.306] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2119d0 [0287.306] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0287.306] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2119d0 | out: hHeap=0x1f0000) returned 1 [0287.306] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0287.306] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0287.307] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199609.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199609.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0287.308] GetFileType (hFile=0x198) returned 0x1 [0287.308] CloseHandle (hObject=0x198) returned 1 [0287.309] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0287.309] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199609.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199609.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x302c)) returned 1 [0287.309] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0287.309] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0287.309] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199609.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199609.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x302c)) returned 1 [0287.309] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0287.310] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0287.310] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0287.310] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2004, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0200151.WMF", cAlternateFileName="")) returned 1 [0287.310] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0287.310] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212828 [0287.310] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0287.310] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212828 | out: hHeap=0x1f0000) returned 1 [0287.311] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0287.311] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0287.311] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200151.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200151.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0287.312] GetFileType (hFile=0x198) returned 0x1 [0287.312] CloseHandle (hObject=0x198) returned 1 [0287.313] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0287.313] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200151.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200151.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2004)) returned 1 [0287.313] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0287.313] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0287.313] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200151.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200151.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2004)) returned 1 [0287.313] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0287.313] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0287.314] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0287.314] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c0c, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0200163.WMF", cAlternateFileName="")) returned 1 [0287.314] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0287.314] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211ae0 [0287.314] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0287.314] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211ae0 | out: hHeap=0x1f0000) returned 1 [0287.314] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0287.314] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0287.315] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200163.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200163.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0287.315] GetFileType (hFile=0x198) returned 0x1 [0287.316] CloseHandle (hObject=0x198) returned 1 [0287.316] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0287.316] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200163.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200163.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c0c)) returned 1 [0287.317] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0287.317] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0287.317] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200163.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200163.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c0c)) returned 1 [0287.317] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0287.317] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0287.317] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0287.317] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14c0, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0200183.WMF", cAlternateFileName="")) returned 1 [0287.318] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609a0 [0287.318] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211ae0 [0287.318] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0287.318] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211ae0 | out: hHeap=0x1f0000) returned 1 [0287.318] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0287.318] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0287.319] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200183.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200183.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0287.319] GetFileType (hFile=0x198) returned 0x1 [0287.319] CloseHandle (hObject=0x198) returned 1 [0287.320] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0287.320] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200183.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200183.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14c0)) returned 1 [0287.320] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0287.320] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0287.320] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200183.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200183.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14c0)) returned 1 [0287.321] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0287.321] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0287.321] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0287.321] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f7c, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0200189.WMF", cAlternateFileName="")) returned 1 [0287.321] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260770 [0287.321] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2127a0 [0287.321] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0287.321] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2127a0 | out: hHeap=0x1f0000) returned 1 [0287.322] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0287.322] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0287.322] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200189.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200189.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0287.323] GetFileType (hFile=0x198) returned 0x1 [0287.324] CloseHandle (hObject=0x198) returned 1 [0287.324] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0287.324] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200189.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200189.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f7c)) returned 1 [0287.325] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0287.325] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0287.325] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200189.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200189.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f7c)) returned 1 [0287.325] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0287.325] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0287.325] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0287.325] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7a46, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0200273.WMF", cAlternateFileName="")) returned 1 [0287.325] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0287.326] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211a58 [0287.326] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0287.326] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211a58 | out: hHeap=0x1f0000) returned 1 [0287.326] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0287.326] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0287.327] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200273.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200273.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0287.327] GetFileType (hFile=0x198) returned 0x1 [0287.327] CloseHandle (hObject=0x198) returned 1 [0287.328] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0287.328] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200273.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200273.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7a46)) returned 1 [0287.328] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0287.328] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0287.328] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200273.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200273.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7a46)) returned 1 [0287.329] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0287.329] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0287.329] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0287.329] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c0a, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0200279.WMF", cAlternateFileName="")) returned 1 [0287.329] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0287.329] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211b68 [0287.329] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0287.329] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b68 | out: hHeap=0x1f0000) returned 1 [0287.329] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0287.330] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0287.330] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200279.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200279.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0287.331] GetFileType (hFile=0x198) returned 0x1 [0287.331] CloseHandle (hObject=0x198) returned 1 [0287.331] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0287.332] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200279.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200279.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c0a)) returned 1 [0287.332] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0287.332] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0287.332] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200279.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200279.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c0a)) returned 1 [0287.332] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0287.332] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0287.332] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0287.332] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa0b0, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0200289.WMF", cAlternateFileName="")) returned 1 [0287.333] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605b8 [0287.333] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2124f8 [0287.333] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0287.333] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2124f8 | out: hHeap=0x1f0000) returned 1 [0287.333] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0287.333] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0287.334] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200289.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200289.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0287.334] GetFileType (hFile=0x198) returned 0x1 [0287.334] CloseHandle (hObject=0x198) returned 1 [0287.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0287.335] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200289.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200289.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa0b0)) returned 1 [0287.335] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0287.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0287.335] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200289.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200289.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa0b0)) returned 1 [0287.335] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0287.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0287.335] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0287.335] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f08, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0200377.WMF", cAlternateFileName="")) returned 1 [0287.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0287.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d00 [0287.336] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0287.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d00 | out: hHeap=0x1f0000) returned 1 [0287.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0287.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0287.336] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200377.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200377.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0287.336] GetFileType (hFile=0x198) returned 0x1 [0287.336] CloseHandle (hObject=0x198) returned 1 [0287.337] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0287.337] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200377.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200377.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f08)) returned 1 [0287.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0287.337] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0287.337] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200377.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200377.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f08)) returned 1 [0287.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0287.337] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0287.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0287.337] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5398, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0200383.WMF", cAlternateFileName="")) returned 1 [0287.337] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0287.337] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212030 [0287.337] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0287.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212030 | out: hHeap=0x1f0000) returned 1 [0287.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0287.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0287.338] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200383.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200383.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0287.338] GetFileType (hFile=0x198) returned 0x1 [0287.595] CloseHandle (hObject=0x198) returned 1 [0287.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0287.595] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200383.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200383.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5398)) returned 1 [0287.595] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0287.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0287.595] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200383.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200383.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5398)) returned 1 [0287.595] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0287.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0287.595] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0287.595] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x366e, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0200467.WMF", cAlternateFileName="")) returned 1 [0287.596] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260630 [0287.596] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212360 [0287.596] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0287.596] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212360 | out: hHeap=0x1f0000) returned 1 [0287.596] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0287.596] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260630 | out: hHeap=0x1f0000) returned 1 [0288.128] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200467.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200467.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0288.128] GetFileType (hFile=0x21c) returned 0x1 [0288.129] CloseHandle (hObject=0x21c) returned 1 [0288.129] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0288.130] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200467.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200467.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x366e)) returned 1 [0288.130] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0288.130] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0288.130] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200467.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200467.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x366e)) returned 1 [0288.130] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0288.130] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0288.130] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0288.131] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x273e, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0200521.WMF", cAlternateFileName="")) returned 1 [0288.131] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0288.131] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211fa8 [0288.131] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0288.131] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211fa8 | out: hHeap=0x1f0000) returned 1 [0288.131] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0288.131] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0288.132] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200521.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200521.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0288.132] GetFileType (hFile=0x21c) returned 0x1 [0288.133] CloseHandle (hObject=0x21c) returned 1 [0288.134] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0288.134] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200521.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200521.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x273e)) returned 1 [0288.134] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0288.134] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0288.134] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200521.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200521.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x273e)) returned 1 [0288.134] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0288.134] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0288.134] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0288.134] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf36, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0200611.WMF", cAlternateFileName="")) returned 1 [0288.134] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0288.134] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212030 [0288.134] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0288.134] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212030 | out: hHeap=0x1f0000) returned 1 [0288.135] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0288.135] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0288.135] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200611.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200611.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0288.135] GetFileType (hFile=0x21c) returned 0x1 [0288.135] CloseHandle (hObject=0x21c) returned 1 [0288.136] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0288.136] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200611.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200611.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf36)) returned 1 [0288.136] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0288.136] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0288.136] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200611.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200611.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf36)) returned 1 [0288.136] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0288.136] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0288.137] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0288.137] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa50e, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0202045.JPG", cAlternateFileName="")) returned 1 [0288.137] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0288.137] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2120b8 [0288.137] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0288.137] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2120b8 | out: hHeap=0x1f0000) returned 1 [0288.137] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0288.137] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0288.138] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0202045.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0202045.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0288.138] GetFileType (hFile=0x21c) returned 0x1 [0288.138] CloseHandle (hObject=0x21c) returned 1 [0288.138] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0288.138] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0202045.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0202045.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa50e)) returned 1 [0288.139] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0288.139] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0288.139] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0202045.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0202045.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa50e)) returned 1 [0288.139] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0288.139] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0288.139] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0288.139] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6e74, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0211981.WMF", cAlternateFileName="")) returned 1 [0288.139] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0288.139] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211f20 [0288.139] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0288.140] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211f20 | out: hHeap=0x1f0000) returned 1 [0288.140] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0288.140] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0288.140] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0211981.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0211981.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0288.140] GetFileType (hFile=0x21c) returned 0x1 [0288.141] CloseHandle (hObject=0x21c) returned 1 [0288.141] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0288.141] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0211981.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0211981.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6e74)) returned 1 [0288.141] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0288.141] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0288.141] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0211981.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0211981.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6e74)) returned 1 [0288.142] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0288.142] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0288.142] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0288.142] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x180e, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0212299.WMF", cAlternateFileName="")) returned 1 [0288.142] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0288.142] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212360 [0288.142] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0288.142] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212360 | out: hHeap=0x1f0000) returned 1 [0288.142] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0288.142] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0288.143] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212299.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212299.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0288.143] GetFileType (hFile=0x21c) returned 0x1 [0288.143] CloseHandle (hObject=0x21c) returned 1 [0288.144] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0288.144] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212299.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212299.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x180e)) returned 1 [0288.144] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0288.144] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0288.144] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212299.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212299.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x180e)) returned 1 [0288.144] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0288.145] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0288.145] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0288.145] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x25cc, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0212601.WMF", cAlternateFileName="")) returned 1 [0288.145] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0288.145] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212140 [0288.145] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0288.145] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212140 | out: hHeap=0x1f0000) returned 1 [0288.145] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0288.145] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0288.146] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212601.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212601.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0288.146] GetFileType (hFile=0x21c) returned 0x1 [0288.146] CloseHandle (hObject=0x21c) returned 1 [0288.147] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0288.147] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212601.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212601.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x25cc)) returned 1 [0288.147] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0288.147] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0288.147] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212601.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212601.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x25cc)) returned 1 [0288.147] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0288.147] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0288.148] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0288.148] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x199a, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0212685.WMF", cAlternateFileName="")) returned 1 [0288.148] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0288.148] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2123e8 [0288.148] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0288.148] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2123e8 | out: hHeap=0x1f0000) returned 1 [0288.148] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0288.148] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0288.150] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212685.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212685.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0288.150] GetFileType (hFile=0x21c) returned 0x1 [0288.150] CloseHandle (hObject=0x21c) returned 1 [0288.150] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0288.151] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212685.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212685.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x199a)) returned 1 [0288.151] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0288.151] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0288.151] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212685.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212685.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x199a)) returned 1 [0288.151] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0288.151] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0288.151] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0288.151] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x80c, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0212751.WMF", cAlternateFileName="")) returned 1 [0288.151] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0288.152] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211fa8 [0288.152] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0288.152] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211fa8 | out: hHeap=0x1f0000) returned 1 [0288.152] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0288.152] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0288.152] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212751.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212751.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0288.153] GetFileType (hFile=0x21c) returned 0x1 [0288.153] CloseHandle (hObject=0x21c) returned 1 [0288.153] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0288.153] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212751.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212751.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x80c)) returned 1 [0288.153] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0288.153] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0288.154] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212751.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212751.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x80c)) returned 1 [0288.154] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0288.154] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0288.154] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0288.154] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d4a, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0212953.WMF", cAlternateFileName="")) returned 1 [0288.154] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260630 [0288.154] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d00 [0288.154] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0288.154] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d00 | out: hHeap=0x1f0000) returned 1 [0288.154] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0288.155] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260630 | out: hHeap=0x1f0000) returned 1 [0288.155] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212953.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212953.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0288.155] GetFileType (hFile=0x21c) returned 0x1 [0288.155] CloseHandle (hObject=0x21c) returned 1 [0288.156] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0288.156] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212953.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212953.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d4a)) returned 1 [0288.156] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0288.156] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0288.156] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212953.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212953.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d4a)) returned 1 [0288.156] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0288.156] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0288.156] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0288.156] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa5c, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0213243.WMF", cAlternateFileName="")) returned 1 [0288.157] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0288.157] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2123e8 [0288.157] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0288.157] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2123e8 | out: hHeap=0x1f0000) returned 1 [0288.157] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0288.157] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0288.157] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0213243.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0213243.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0288.158] GetFileType (hFile=0x21c) returned 0x1 [0288.158] CloseHandle (hObject=0x21c) returned 1 [0288.158] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0288.158] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0213243.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0213243.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa5c)) returned 1 [0288.159] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0288.159] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0288.159] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0213243.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0213243.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa5c)) returned 1 [0288.159] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0288.159] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0288.159] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0288.159] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf00, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0213449.WMF", cAlternateFileName="")) returned 1 [0288.159] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0288.159] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2124f8 [0288.159] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0288.159] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2124f8 | out: hHeap=0x1f0000) returned 1 [0288.160] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0288.160] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0288.160] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0213449.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0213449.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0288.160] GetFileType (hFile=0x21c) returned 0x1 [0288.161] CloseHandle (hObject=0x21c) returned 1 [0288.161] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0288.161] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0213449.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0213449.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf00)) returned 1 [0288.161] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0288.161] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0288.161] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0213449.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0213449.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf00)) returned 1 [0288.161] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0288.162] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0288.162] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0288.162] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7cb6, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0214934.WMF", cAlternateFileName="")) returned 1 [0288.162] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0288.162] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212360 [0288.162] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0288.162] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212360 | out: hHeap=0x1f0000) returned 1 [0288.162] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0288.162] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0288.163] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0214934.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0214934.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0288.163] GetFileType (hFile=0x21c) returned 0x1 [0288.164] CloseHandle (hObject=0x21c) returned 1 [0288.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0288.423] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0214934.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0214934.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7cb6)) returned 1 [0288.423] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0288.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0288.423] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0214934.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0214934.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7cb6)) returned 1 [0288.424] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0288.424] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0288.424] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0288.424] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaefa, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0214948.WMF", cAlternateFileName="")) returned 1 [0288.424] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0288.424] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212608 [0288.424] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0288.424] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212608 | out: hHeap=0x1f0000) returned 1 [0288.424] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0288.424] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0288.425] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0214948.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0214948.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0288.425] GetFileType (hFile=0x198) returned 0x1 [0288.426] CloseHandle (hObject=0x198) returned 1 [0288.426] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0288.426] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0214948.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0214948.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaefa)) returned 1 [0288.426] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0288.427] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0288.427] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0214948.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0214948.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaefa)) returned 1 [0288.427] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0288.427] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0288.427] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0288.427] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d6c, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0215070.WMF", cAlternateFileName="")) returned 1 [0288.427] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0288.427] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0288.427] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0288.427] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0288.427] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0288.428] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0288.428] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215070.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215070.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0288.428] GetFileType (hFile=0x198) returned 0x1 [0288.429] CloseHandle (hObject=0x198) returned 1 [0288.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0288.429] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215070.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215070.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d6c)) returned 1 [0288.429] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0288.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0288.429] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215070.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215070.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d6c)) returned 1 [0288.430] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0288.430] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0288.430] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0288.430] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f50, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0215076.WMF", cAlternateFileName="")) returned 1 [0288.430] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0288.431] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212470 [0288.431] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0288.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212470 | out: hHeap=0x1f0000) returned 1 [0288.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0288.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0288.432] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215076.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215076.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0288.432] GetFileType (hFile=0x198) returned 0x1 [0288.432] CloseHandle (hObject=0x198) returned 1 [0288.433] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0288.433] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215076.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215076.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f50)) returned 1 [0288.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0288.433] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0288.433] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215076.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215076.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f50)) returned 1 [0288.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0288.433] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0288.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0288.434] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x81ce, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0215210.WMF", cAlternateFileName="")) returned 1 [0288.434] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0288.434] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0288.434] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0288.434] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0288.434] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0288.434] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0288.435] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215210.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215210.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0288.435] GetFileType (hFile=0x198) returned 0x1 [0288.435] CloseHandle (hObject=0x198) returned 1 [0288.436] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0288.436] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215210.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215210.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x81ce)) returned 1 [0288.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0288.436] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0288.436] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215210.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215210.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x81ce)) returned 1 [0288.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0288.436] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0288.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0288.437] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x244a, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0215709.WMF", cAlternateFileName="")) returned 1 [0288.437] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0288.437] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212828 [0288.437] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0288.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212828 | out: hHeap=0x1f0000) returned 1 [0288.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0288.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0288.438] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215709.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215709.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0288.438] GetFileType (hFile=0x198) returned 0x1 [0288.438] CloseHandle (hObject=0x198) returned 1 [0288.439] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0288.439] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215709.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215709.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x244a)) returned 1 [0288.439] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0288.439] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0288.439] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215709.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215709.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x244a)) returned 1 [0288.439] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0288.439] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0288.439] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0288.439] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45a2, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0215710.WMF", cAlternateFileName="")) returned 1 [0288.440] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0288.440] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0288.440] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0288.440] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0288.440] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0288.440] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0288.441] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215710.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215710.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0288.441] GetFileType (hFile=0x198) returned 0x1 [0288.441] CloseHandle (hObject=0x198) returned 1 [0288.441] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0288.442] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215710.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215710.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45a2)) returned 1 [0288.442] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0288.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0288.442] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215710.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215710.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45a2)) returned 1 [0288.442] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0288.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0288.442] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0288.442] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15f2, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0215718.WMF", cAlternateFileName="")) returned 1 [0288.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0288.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2122d8 [0288.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0288.443] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2122d8 | out: hHeap=0x1f0000) returned 1 [0288.443] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0288.443] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0288.443] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215718.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215718.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0288.443] GetFileType (hFile=0x198) returned 0x1 [0288.443] CloseHandle (hObject=0x198) returned 1 [0288.444] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0288.444] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215718.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215718.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15f2)) returned 1 [0288.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0288.444] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0288.444] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215718.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215718.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15f2)) returned 1 [0288.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0288.444] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0288.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0288.444] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa783, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0216112.JPG", cAlternateFileName="")) returned 1 [0288.444] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0288.445] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211e10 [0288.445] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0288.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e10 | out: hHeap=0x1f0000) returned 1 [0288.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0288.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0288.445] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216112.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216112.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0288.445] GetFileType (hFile=0x198) returned 0x1 [0288.446] CloseHandle (hObject=0x198) returned 1 [0288.446] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0288.446] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216112.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216112.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa783)) returned 1 [0288.447] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0288.447] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0288.447] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216112.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216112.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa783)) returned 1 [0288.447] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0288.447] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0288.447] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0288.447] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec9380a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5474, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0216153.JPG", cAlternateFileName="")) returned 1 [0288.447] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0288.447] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212718 [0288.447] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0288.447] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212718 | out: hHeap=0x1f0000) returned 1 [0288.447] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0288.447] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0288.448] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216153.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216153.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0288.448] GetFileType (hFile=0x198) returned 0x1 [0288.448] CloseHandle (hObject=0x198) returned 1 [0288.449] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0288.449] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216153.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216153.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec9380a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5474)) returned 1 [0288.449] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0288.449] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0288.449] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216153.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216153.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec9380a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5474)) returned 1 [0288.449] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0288.449] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0288.449] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0288.449] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa488, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0216540.WMF", cAlternateFileName="")) returned 1 [0288.449] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0288.449] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212470 [0288.449] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0288.449] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212470 | out: hHeap=0x1f0000) returned 1 [0288.449] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0288.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0288.450] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216540.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216540.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0288.450] GetFileType (hFile=0x198) returned 0x1 [0288.450] CloseHandle (hObject=0x198) returned 1 [0288.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0288.451] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216540.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216540.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa488)) returned 1 [0288.451] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0288.451] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0288.451] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216540.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216540.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa488)) returned 1 [0288.451] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0288.452] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0288.452] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0288.452] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec9380a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x60dc, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0216570.WMF", cAlternateFileName="")) returned 1 [0288.452] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0288.452] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0288.452] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0288.452] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0288.452] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0288.452] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0288.452] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216570.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216570.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0288.616] GetFileType (hFile=0x198) returned 0x1 [0288.616] CloseHandle (hObject=0x198) returned 1 [0288.617] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0288.617] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216570.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216570.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec9380a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x60dc)) returned 1 [0288.617] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0288.617] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0288.617] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216570.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216570.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec9380a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x60dc)) returned 1 [0288.658] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0288.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0288.658] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0288.658] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec9380a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f46, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0216600.WMF", cAlternateFileName="")) returned 1 [0288.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0288.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211e10 [0288.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0288.658] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e10 | out: hHeap=0x1f0000) returned 1 [0288.658] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0288.659] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0288.659] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216600.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216600.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0288.660] GetFileType (hFile=0x198) returned 0x1 [0288.660] CloseHandle (hObject=0x198) returned 1 [0288.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0288.660] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216600.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216600.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec9380a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f46)) returned 1 [0288.661] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0288.661] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0288.661] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216600.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216600.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec9380a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f46)) returned 1 [0288.661] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0288.661] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0288.661] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0288.661] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x24e2, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0216612.WMF", cAlternateFileName="")) returned 1 [0288.661] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0288.661] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0288.661] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0288.661] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0288.662] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0288.662] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0288.662] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216612.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216612.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0288.662] GetFileType (hFile=0x198) returned 0x1 [0288.662] CloseHandle (hObject=0x198) returned 1 [0288.663] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0288.663] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216612.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216612.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x24e2)) returned 1 [0288.663] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0288.663] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0288.663] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216612.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216612.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x24e2)) returned 1 [0288.663] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0288.663] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0288.663] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0288.663] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9b3a, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0216874.WMF", cAlternateFileName="")) returned 1 [0288.663] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0288.663] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2128b0 [0288.663] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0288.664] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2128b0 | out: hHeap=0x1f0000) returned 1 [0288.664] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0288.664] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0288.664] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216874.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216874.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0288.665] GetFileType (hFile=0x198) returned 0x1 [0288.665] CloseHandle (hObject=0x198) returned 1 [0288.665] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0288.666] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216874.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216874.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9b3a)) returned 1 [0288.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0288.666] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0288.666] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216874.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216874.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9b3a)) returned 1 [0288.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0288.666] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0288.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0288.666] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1484, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0217262.WMF", cAlternateFileName="")) returned 1 [0288.667] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0288.667] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0288.667] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0288.667] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0288.667] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0288.667] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0288.667] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0217262.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0217262.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0288.668] GetFileType (hFile=0x198) returned 0x1 [0288.668] CloseHandle (hObject=0x198) returned 1 [0288.668] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0288.669] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0217262.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0217262.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1484)) returned 1 [0288.669] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0288.669] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0288.669] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0217262.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0217262.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1484)) returned 1 [0288.669] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0288.669] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0288.669] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0288.669] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd9a, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0217302.WMF", cAlternateFileName="")) returned 1 [0288.669] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0288.669] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2129c0 [0288.669] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0288.669] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2129c0 | out: hHeap=0x1f0000) returned 1 [0288.669] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0288.669] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0288.670] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0217302.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0217302.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0288.670] GetFileType (hFile=0x198) returned 0x1 [0288.670] CloseHandle (hObject=0x198) returned 1 [0288.671] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0288.671] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0217302.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0217302.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd9a)) returned 1 [0288.671] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0288.671] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0288.671] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0217302.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0217302.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd9a)) returned 1 [0288.671] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0288.671] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0288.671] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0288.671] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ca8, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0217872.WMF", cAlternateFileName="")) returned 1 [0288.671] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0288.672] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211fa8 [0288.672] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0288.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211fa8 | out: hHeap=0x1f0000) returned 1 [0288.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0288.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0288.672] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0217872.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0217872.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0288.673] GetFileType (hFile=0x198) returned 0x1 [0288.673] CloseHandle (hObject=0x198) returned 1 [0288.674] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0288.674] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0217872.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0217872.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ca8)) returned 1 [0288.674] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0288.674] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0288.674] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0217872.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0217872.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ca8)) returned 1 [0288.674] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0288.674] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0288.674] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0288.674] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8ad6, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0227419.JPG", cAlternateFileName="")) returned 1 [0288.675] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0288.675] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211b68 [0288.675] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0288.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b68 | out: hHeap=0x1f0000) returned 1 [0288.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0288.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0288.676] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0227419.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0227419.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0288.676] GetFileType (hFile=0x198) returned 0x1 [0288.676] CloseHandle (hObject=0x198) returned 1 [0288.676] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0288.676] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0227419.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0227419.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8ad6)) returned 1 [0288.677] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0288.677] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0288.677] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0227419.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0227419.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8ad6)) returned 1 [0288.677] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0288.677] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0288.677] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0288.677] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe2e9, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0227558.JPG", cAlternateFileName="")) returned 1 [0288.677] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0288.677] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2123e8 [0288.677] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0288.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2123e8 | out: hHeap=0x1f0000) returned 1 [0288.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0288.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0288.678] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0227558.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0227558.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0288.679] GetFileType (hFile=0x198) returned 0x1 [0288.679] CloseHandle (hObject=0x198) returned 1 [0288.681] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0288.681] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0227558.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0227558.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe2e9)) returned 1 [0288.681] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0288.681] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0288.681] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0227558.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0227558.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe2e9)) returned 1 [0288.681] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0288.681] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0288.682] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0288.682] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x65a6, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0228823.WMF", cAlternateFileName="")) returned 1 [0288.682] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0288.682] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2119d0 [0288.682] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0288.682] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2119d0 | out: hHeap=0x1f0000) returned 1 [0288.682] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0288.682] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0288.683] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0228823.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0228823.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0288.683] GetFileType (hFile=0x198) returned 0x1 [0288.684] CloseHandle (hObject=0x198) returned 1 [0288.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0288.684] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0228823.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0228823.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x65a6)) returned 1 [0288.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0288.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0288.684] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0228823.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0228823.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x65a6)) returned 1 [0288.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0288.685] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0288.685] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0288.685] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec9380a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x918c, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0228959.WMF", cAlternateFileName="")) returned 1 [0288.685] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0288.685] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2120b8 [0288.685] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0288.685] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2120b8 | out: hHeap=0x1f0000) returned 1 [0288.685] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0288.685] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0288.686] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0228959.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0228959.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0288.686] GetFileType (hFile=0x198) returned 0x1 [0288.687] CloseHandle (hObject=0x198) returned 1 [0288.687] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0288.687] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0228959.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0228959.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec9380a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x918c)) returned 1 [0288.687] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0288.687] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0288.687] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0228959.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0228959.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec9380a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x918c)) returned 1 [0288.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0288.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0288.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0288.688] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1daa, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0230553.WMF", cAlternateFileName="")) returned 1 [0288.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0288.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0288.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0288.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0288.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0288.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0288.689] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0230553.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0230553.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0288.689] GetFileType (hFile=0x198) returned 0x1 [0288.689] CloseHandle (hObject=0x198) returned 1 [0288.689] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0288.689] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0230553.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0230553.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1daa)) returned 1 [0288.690] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0288.690] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0288.690] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0230553.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0230553.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1daa)) returned 1 [0288.690] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0288.690] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0288.690] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0288.690] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec9380a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1066, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0230558.WMF", cAlternateFileName="")) returned 1 [0288.690] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0288.690] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2119d0 [0288.690] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0288.690] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2119d0 | out: hHeap=0x1f0000) returned 1 [0288.690] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0288.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0288.691] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0230558.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0230558.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0288.691] GetFileType (hFile=0x198) returned 0x1 [0288.692] CloseHandle (hObject=0x198) returned 1 [0288.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0288.692] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0230558.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0230558.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec9380a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1066)) returned 1 [0288.692] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0288.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0288.692] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0230558.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0230558.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec9380a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1066)) returned 1 [0288.693] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0288.693] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0288.693] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0288.693] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x332a, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0232171.WMF", cAlternateFileName="")) returned 1 [0288.693] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0288.693] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212030 [0288.693] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0288.693] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212030 | out: hHeap=0x1f0000) returned 1 [0288.693] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0288.693] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0288.693] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232171.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232171.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0288.693] GetFileType (hFile=0x198) returned 0x1 [0288.694] CloseHandle (hObject=0x198) returned 1 [0288.694] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0288.694] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232171.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232171.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x332a)) returned 1 [0288.694] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0288.694] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0288.694] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232171.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232171.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x332a)) returned 1 [0288.694] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0288.694] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0288.694] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0288.694] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec9380a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6bc2, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0232393.WMF", cAlternateFileName="")) returned 1 [0288.695] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0288.695] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211ae0 [0288.695] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0288.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211ae0 | out: hHeap=0x1f0000) returned 1 [0288.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0288.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0288.695] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232393.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232393.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0288.695] GetFileType (hFile=0x198) returned 0x1 [0288.975] CloseHandle (hObject=0x198) returned 1 [0288.975] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0288.975] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232393.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232393.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec9380a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6bc2)) returned 1 [0288.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0288.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0288.976] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232393.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232393.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec9380a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6bc2)) returned 1 [0288.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0288.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0288.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0288.976] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa086, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0232395.WMF", cAlternateFileName="")) returned 1 [0288.977] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0288.977] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2127a0 [0288.977] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0288.977] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2127a0 | out: hHeap=0x1f0000) returned 1 [0288.977] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0288.977] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0288.987] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232395.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232395.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0288.988] GetFileType (hFile=0x198) returned 0x1 [0288.988] CloseHandle (hObject=0x198) returned 1 [0288.988] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0288.988] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232395.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232395.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa086)) returned 1 [0288.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0288.989] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0288.989] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232395.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232395.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa086)) returned 1 [0288.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0288.989] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0288.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0288.989] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec9380a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x380a, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0232795.WMF", cAlternateFileName="")) returned 1 [0288.989] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0288.989] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2129c0 [0288.989] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0288.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2129c0 | out: hHeap=0x1f0000) returned 1 [0288.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0288.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0288.990] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232795.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232795.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0288.990] GetFileType (hFile=0x198) returned 0x1 [0288.990] CloseHandle (hObject=0x198) returned 1 [0288.990] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0288.990] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232795.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232795.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec9380a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x380a)) returned 1 [0288.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0288.991] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0288.991] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232795.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232795.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec9380a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x380a)) returned 1 [0288.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0288.991] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0288.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0288.991] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x899c, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0232797.WMF", cAlternateFileName="")) returned 1 [0288.991] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0288.991] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2120b8 [0288.991] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0288.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2120b8 | out: hHeap=0x1f0000) returned 1 [0288.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0288.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0288.992] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232797.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232797.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0288.992] GetFileType (hFile=0x198) returned 0x1 [0288.992] CloseHandle (hObject=0x198) returned 1 [0289.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0289.040] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232797.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232797.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x899c)) returned 1 [0289.041] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0289.041] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0289.041] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232797.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232797.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x899c)) returned 1 [0289.041] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0289.041] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0289.041] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0289.041] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4de6, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0232803.WMF", cAlternateFileName="")) returned 1 [0289.041] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0289.042] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2124f8 [0289.042] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0289.042] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2124f8 | out: hHeap=0x1f0000) returned 1 [0289.042] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0289.042] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0289.042] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232803.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232803.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.043] GetFileType (hFile=0x198) returned 0x1 [0289.043] CloseHandle (hObject=0x198) returned 1 [0289.044] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0289.044] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232803.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232803.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4de6)) returned 1 [0289.044] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0289.044] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0289.044] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232803.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232803.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4de6)) returned 1 [0289.044] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0289.044] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0289.044] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0289.044] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x26e8, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0233512.WMF", cAlternateFileName="")) returned 1 [0289.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0289.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212470 [0289.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0289.045] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212470 | out: hHeap=0x1f0000) returned 1 [0289.045] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0289.045] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0289.046] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0233512.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0233512.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.046] GetFileType (hFile=0x198) returned 0x1 [0289.046] CloseHandle (hObject=0x198) returned 1 [0289.047] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0289.047] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0233512.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0233512.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x26e8)) returned 1 [0289.047] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0289.047] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0289.047] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0233512.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0233512.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x26e8)) returned 1 [0289.047] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0289.047] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0289.048] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0289.048] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x312c, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0233665.WMF", cAlternateFileName="")) returned 1 [0289.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0289.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211b68 [0289.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0289.048] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b68 | out: hHeap=0x1f0000) returned 1 [0289.048] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0289.048] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0289.049] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0233665.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0233665.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.049] GetFileType (hFile=0x198) returned 0x1 [0289.050] CloseHandle (hObject=0x198) returned 1 [0289.050] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0289.050] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0233665.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0233665.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x312c)) returned 1 [0289.050] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0289.050] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0289.050] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0233665.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0233665.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x312c)) returned 1 [0289.051] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0289.051] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0289.051] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0289.051] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x975e, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0233992.WMF", cAlternateFileName="")) returned 1 [0289.051] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0289.051] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212360 [0289.051] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0289.051] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212360 | out: hHeap=0x1f0000) returned 1 [0289.051] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0289.051] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0289.052] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0233992.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0233992.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.052] GetFileType (hFile=0x198) returned 0x1 [0289.053] CloseHandle (hObject=0x198) returned 1 [0289.053] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0289.053] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0233992.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0233992.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x975e)) returned 1 [0289.053] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0289.053] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0289.054] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0233992.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0233992.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x975e)) returned 1 [0289.054] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0289.054] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0289.054] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0289.054] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcec6, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0234000.WMF", cAlternateFileName="")) returned 1 [0289.054] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0289.054] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211b68 [0289.054] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0289.054] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b68 | out: hHeap=0x1f0000) returned 1 [0289.054] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0289.054] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0289.055] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0234000.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0234000.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.056] GetFileType (hFile=0x198) returned 0x1 [0289.056] CloseHandle (hObject=0x198) returned 1 [0289.056] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0289.056] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0234000.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0234000.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcec6)) returned 1 [0289.056] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0289.056] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0289.057] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0234000.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0234000.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcec6)) returned 1 [0289.057] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0289.057] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0289.057] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0289.057] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b40, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0234001.WMF", cAlternateFileName="")) returned 1 [0289.057] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0289.057] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211bf0 [0289.057] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0289.057] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211bf0 | out: hHeap=0x1f0000) returned 1 [0289.057] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0289.057] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0289.058] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0234001.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0234001.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.058] GetFileType (hFile=0x198) returned 0x1 [0289.058] CloseHandle (hObject=0x198) returned 1 [0289.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0289.059] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0234001.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0234001.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b40)) returned 1 [0289.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0289.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0289.059] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0234001.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0234001.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b40)) returned 1 [0289.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0289.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0289.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0289.059] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x80d4, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0234376.WMF", cAlternateFileName="")) returned 1 [0289.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0289.060] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212140 [0289.060] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0289.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212140 | out: hHeap=0x1f0000) returned 1 [0289.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0289.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0289.061] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0234376.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0234376.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.061] GetFileType (hFile=0x198) returned 0x1 [0289.061] CloseHandle (hObject=0x198) returned 1 [0289.061] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0289.062] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0234376.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0234376.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x80d4)) returned 1 [0289.062] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0289.062] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0289.062] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0234376.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0234376.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x80d4)) returned 1 [0289.062] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0289.062] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0289.062] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0289.062] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcba0, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0237225.WMF", cAlternateFileName="")) returned 1 [0289.062] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0289.063] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d88 [0289.063] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0289.063] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d88 | out: hHeap=0x1f0000) returned 1 [0289.063] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0289.063] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0289.063] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237225.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0237225.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.063] GetFileType (hFile=0x198) returned 0x1 [0289.064] CloseHandle (hObject=0x198) returned 1 [0289.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0289.064] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237225.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0237225.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcba0)) returned 1 [0289.064] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0289.065] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0289.065] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237225.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0237225.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcba0)) returned 1 [0289.065] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0289.065] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0289.065] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0289.065] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5700, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0237228.WMF", cAlternateFileName="")) returned 1 [0289.065] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0289.065] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212140 [0289.065] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0289.066] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212140 | out: hHeap=0x1f0000) returned 1 [0289.066] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0289.066] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0289.066] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237228.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0237228.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.067] GetFileType (hFile=0x198) returned 0x1 [0289.067] CloseHandle (hObject=0x198) returned 1 [0289.067] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0289.067] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237228.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0237228.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5700)) returned 1 [0289.068] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0289.068] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0289.068] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237228.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0237228.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5700)) returned 1 [0289.068] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0289.068] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0289.068] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0289.068] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x60c2, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0237336.WMF", cAlternateFileName="")) returned 1 [0289.068] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0289.068] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d88 [0289.068] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0289.069] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d88 | out: hHeap=0x1f0000) returned 1 [0289.069] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0289.069] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0289.069] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237336.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0237336.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.070] GetFileType (hFile=0x198) returned 0x1 [0289.070] CloseHandle (hObject=0x198) returned 1 [0289.070] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0289.070] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237336.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0237336.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x60c2)) returned 1 [0289.277] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0289.277] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0289.277] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237336.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0237336.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x60c2)) returned 1 [0289.277] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0289.277] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0289.277] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0289.278] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x51be, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0237759.WMF", cAlternateFileName="")) returned 1 [0289.278] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0289.278] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211b68 [0289.278] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0289.278] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b68 | out: hHeap=0x1f0000) returned 1 [0289.278] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0289.278] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0289.278] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237759.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0237759.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.279] GetFileType (hFile=0x198) returned 0x1 [0289.279] CloseHandle (hObject=0x198) returned 1 [0289.279] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0289.279] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237759.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0237759.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x51be)) returned 1 [0289.279] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0289.279] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0289.280] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237759.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0237759.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x51be)) returned 1 [0289.280] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0289.280] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0289.280] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0289.280] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x59a0, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0238333.WMF", cAlternateFileName="")) returned 1 [0289.280] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0289.280] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2127a0 [0289.280] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0289.280] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2127a0 | out: hHeap=0x1f0000) returned 1 [0289.280] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0289.280] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0289.280] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238333.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0238333.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.281] GetFileType (hFile=0x198) returned 0x1 [0289.281] CloseHandle (hObject=0x198) returned 1 [0289.281] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0289.281] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238333.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0238333.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x59a0)) returned 1 [0289.281] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0289.281] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0289.282] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238333.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0238333.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x59a0)) returned 1 [0289.282] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0289.282] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0289.282] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0289.282] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1334, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0238927.WMF", cAlternateFileName="")) returned 1 [0289.282] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0289.282] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211f20 [0289.282] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0289.282] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211f20 | out: hHeap=0x1f0000) returned 1 [0289.282] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0289.282] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0289.283] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238927.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0238927.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.283] GetFileType (hFile=0x198) returned 0x1 [0289.283] CloseHandle (hObject=0x198) returned 1 [0289.283] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0289.283] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238927.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0238927.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1334)) returned 1 [0289.284] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0289.284] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0289.284] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238927.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0238927.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1334)) returned 1 [0289.284] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0289.284] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0289.284] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0289.284] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d3c, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0238959.WMF", cAlternateFileName="")) returned 1 [0289.284] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0289.284] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211a58 [0289.284] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0289.284] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211a58 | out: hHeap=0x1f0000) returned 1 [0289.285] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0289.285] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0289.285] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238959.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0238959.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.285] GetFileType (hFile=0x198) returned 0x1 [0289.286] CloseHandle (hObject=0x198) returned 1 [0289.286] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0289.286] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238959.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0238959.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d3c)) returned 1 [0289.286] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0289.287] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0289.287] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238959.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0238959.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d3c)) returned 1 [0289.287] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0289.287] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0289.287] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0289.287] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13b8, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0238983.WMF", cAlternateFileName="")) returned 1 [0289.287] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260630 [0289.287] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212250 [0289.287] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0289.288] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212250 | out: hHeap=0x1f0000) returned 1 [0289.288] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0289.288] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260630 | out: hHeap=0x1f0000) returned 1 [0289.288] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238983.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0238983.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.289] GetFileType (hFile=0x198) returned 0x1 [0289.289] CloseHandle (hObject=0x198) returned 1 [0289.290] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0289.291] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238983.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0238983.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13b8)) returned 1 [0289.291] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0289.291] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0289.291] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238983.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0238983.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13b8)) returned 1 [0289.291] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0289.291] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0289.291] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0289.292] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1284, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0239057.WMF", cAlternateFileName="")) returned 1 [0289.292] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0289.292] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0289.292] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0289.292] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0289.292] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0289.292] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0289.293] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239057.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239057.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.293] GetFileType (hFile=0x198) returned 0x1 [0289.294] CloseHandle (hObject=0x198) returned 1 [0289.294] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0289.294] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239057.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239057.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1284)) returned 1 [0289.294] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0289.295] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0289.295] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239057.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239057.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1284)) returned 1 [0289.295] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0289.295] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0289.295] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0289.295] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16fc, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0239063.WMF", cAlternateFileName="")) returned 1 [0289.295] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0289.295] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2129c0 [0289.295] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0289.295] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2129c0 | out: hHeap=0x1f0000) returned 1 [0289.296] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0289.296] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0289.296] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239063.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239063.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.297] GetFileType (hFile=0x198) returned 0x1 [0289.297] CloseHandle (hObject=0x198) returned 1 [0289.297] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0289.298] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239063.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239063.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16fc)) returned 1 [0289.298] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0289.298] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0289.298] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239063.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239063.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16fc)) returned 1 [0289.298] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0289.298] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0289.298] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0289.298] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1294, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0239079.WMF", cAlternateFileName="")) returned 1 [0289.299] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0289.299] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211bf0 [0289.299] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0289.299] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211bf0 | out: hHeap=0x1f0000) returned 1 [0289.299] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0289.299] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0289.300] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239079.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239079.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.300] GetFileType (hFile=0x198) returned 0x1 [0289.301] CloseHandle (hObject=0x198) returned 1 [0289.302] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0289.302] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239079.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239079.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1294)) returned 1 [0289.302] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0289.302] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0289.302] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239079.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239079.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1294)) returned 1 [0289.302] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0289.302] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0289.303] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0289.303] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1464, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0239191.WMF", cAlternateFileName="")) returned 1 [0289.303] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0289.303] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2129c0 [0289.303] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0289.303] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2129c0 | out: hHeap=0x1f0000) returned 1 [0289.303] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0289.303] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0289.304] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239191.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239191.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.304] GetFileType (hFile=0x198) returned 0x1 [0289.304] CloseHandle (hObject=0x198) returned 1 [0289.305] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0289.305] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239191.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239191.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1464)) returned 1 [0289.306] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0289.306] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0289.306] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239191.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239191.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1464)) returned 1 [0289.306] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0289.306] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0289.306] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0289.306] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8424, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0239611.WMF", cAlternateFileName="")) returned 1 [0289.306] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0289.306] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2120b8 [0289.306] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0289.307] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2120b8 | out: hHeap=0x1f0000) returned 1 [0289.307] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0289.307] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0289.307] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239611.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239611.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.308] GetFileType (hFile=0x198) returned 0x1 [0289.308] CloseHandle (hObject=0x198) returned 1 [0289.308] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0289.309] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239611.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239611.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8424)) returned 1 [0289.309] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0289.309] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0289.309] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239611.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239611.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8424)) returned 1 [0289.309] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0289.309] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0289.309] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0289.309] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1314, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0239935.WMF", cAlternateFileName="")) returned 1 [0289.310] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0289.310] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211e10 [0289.310] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0289.310] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e10 | out: hHeap=0x1f0000) returned 1 [0289.310] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0289.310] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0289.311] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239935.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239935.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.311] GetFileType (hFile=0x198) returned 0x1 [0289.311] CloseHandle (hObject=0x198) returned 1 [0289.312] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0289.312] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239935.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239935.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1314)) returned 1 [0289.312] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0289.312] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0289.312] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239935.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239935.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1314)) returned 1 [0289.313] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0289.313] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0289.313] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0289.313] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1418, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0239941.WMF", cAlternateFileName="")) returned 1 [0289.313] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0289.313] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212938 [0289.313] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0289.313] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212938 | out: hHeap=0x1f0000) returned 1 [0289.313] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0289.313] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0289.314] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239941.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239941.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.314] GetFileType (hFile=0x198) returned 0x1 [0289.314] CloseHandle (hObject=0x198) returned 1 [0289.315] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0289.315] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239941.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239941.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1418)) returned 1 [0289.315] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0289.315] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0289.315] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239941.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239941.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1418)) returned 1 [0289.315] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0289.315] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0289.315] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0289.315] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1998, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0239943.WMF", cAlternateFileName="")) returned 1 [0289.316] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0289.316] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212938 [0289.316] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0289.316] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212938 | out: hHeap=0x1f0000) returned 1 [0289.316] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0289.316] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0289.316] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239943.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239943.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.317] GetFileType (hFile=0x198) returned 0x1 [0289.317] CloseHandle (hObject=0x198) returned 1 [0289.317] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0289.317] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239943.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239943.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1998)) returned 1 [0289.317] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0289.317] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0289.318] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239943.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239943.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1998)) returned 1 [0289.318] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0289.318] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0289.318] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0289.318] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c40, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0239951.WMF", cAlternateFileName="")) returned 1 [0289.318] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0289.318] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211b68 [0289.318] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0289.318] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b68 | out: hHeap=0x1f0000) returned 1 [0289.318] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0289.318] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0289.319] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239951.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239951.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.319] GetFileType (hFile=0x198) returned 0x1 [0289.319] CloseHandle (hObject=0x198) returned 1 [0289.320] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0289.320] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239951.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239951.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c40)) returned 1 [0289.320] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0289.320] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0289.320] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239951.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239951.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c40)) returned 1 [0289.320] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0289.320] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0289.320] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0289.320] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bc8, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0239953.WMF", cAlternateFileName="")) returned 1 [0289.320] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0289.682] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2123e8 [0289.682] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0289.682] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2123e8 | out: hHeap=0x1f0000) returned 1 [0289.682] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0289.682] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0289.683] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239953.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239953.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.684] GetFileType (hFile=0x198) returned 0x1 [0289.684] CloseHandle (hObject=0x198) returned 1 [0289.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0289.685] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239953.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239953.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bc8)) returned 1 [0289.685] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0289.685] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0289.685] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239953.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239953.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bc8)) returned 1 [0289.685] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0289.685] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0289.685] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0289.685] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1348, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0239955.WMF", cAlternateFileName="")) returned 1 [0289.686] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0289.686] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211e10 [0289.686] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0289.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e10 | out: hHeap=0x1f0000) returned 1 [0289.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0289.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0289.687] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239955.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239955.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.687] GetFileType (hFile=0x198) returned 0x1 [0289.688] CloseHandle (hObject=0x198) returned 1 [0289.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0289.688] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239955.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239955.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1348)) returned 1 [0289.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0289.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0289.688] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239955.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239955.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1348)) returned 1 [0289.689] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0289.689] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0289.689] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0289.689] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1720, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0239965.WMF", cAlternateFileName="")) returned 1 [0289.689] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0289.689] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2123e8 [0289.689] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0289.689] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2123e8 | out: hHeap=0x1f0000) returned 1 [0289.689] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0289.690] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0289.690] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239965.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239965.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.690] GetFileType (hFile=0x198) returned 0x1 [0289.691] CloseHandle (hObject=0x198) returned 1 [0289.691] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0289.691] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239965.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239965.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1720)) returned 1 [0289.692] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0289.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0289.692] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239965.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239965.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1720)) returned 1 [0289.692] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0289.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0289.692] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0289.692] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x154c, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0239967.WMF", cAlternateFileName="")) returned 1 [0289.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0289.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d00 [0289.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0289.693] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d00 | out: hHeap=0x1f0000) returned 1 [0289.693] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0289.693] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0289.693] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239967.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239967.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.694] GetFileType (hFile=0x198) returned 0x1 [0289.694] CloseHandle (hObject=0x198) returned 1 [0289.694] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0289.695] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239967.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239967.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x154c)) returned 1 [0289.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0289.695] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0289.695] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239967.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239967.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x154c)) returned 1 [0289.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0289.695] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0289.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0289.696] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13e8, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0239973.WMF", cAlternateFileName="")) returned 1 [0289.696] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0289.696] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212938 [0289.696] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0289.696] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212938 | out: hHeap=0x1f0000) returned 1 [0289.696] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0289.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0289.697] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239973.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239973.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.698] GetFileType (hFile=0x198) returned 0x1 [0289.698] CloseHandle (hObject=0x198) returned 1 [0289.699] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0289.699] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239973.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239973.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13e8)) returned 1 [0289.699] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0289.699] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0289.699] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239973.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239973.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13e8)) returned 1 [0289.700] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0289.700] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0289.700] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0289.700] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xed05f07, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xed05f07, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xed05f07, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xda0, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0239975.WMF", cAlternateFileName="")) returned 1 [0289.700] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0289.700] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2128b0 [0289.700] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0289.700] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2128b0 | out: hHeap=0x1f0000) returned 1 [0289.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0289.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0289.701] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239975.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239975.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.702] GetFileType (hFile=0x198) returned 0x1 [0289.702] CloseHandle (hObject=0x198) returned 1 [0289.703] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0289.703] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239975.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239975.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xed05f07, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xed05f07, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xed05f07, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xda0)) returned 1 [0289.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0289.703] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0289.703] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239975.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239975.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xed05f07, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xed05f07, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xed05f07, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xda0)) returned 1 [0289.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0289.704] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0289.704] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0289.704] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xed05f07, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xed05f07, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf2fbd2e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcd8, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0239997.WMF", cAlternateFileName="")) returned 1 [0289.704] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0289.704] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212140 [0289.704] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0289.704] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212140 | out: hHeap=0x1f0000) returned 1 [0289.704] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0289.705] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0289.705] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239997.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239997.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.706] GetFileType (hFile=0x198) returned 0x1 [0289.706] CloseHandle (hObject=0x198) returned 1 [0289.707] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0289.707] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239997.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239997.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xed05f07, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xed05f07, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf2fbd2e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcd8)) returned 1 [0289.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0289.707] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0289.707] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239997.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239997.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xed05f07, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xed05f07, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf2fbd2e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcd8)) returned 1 [0289.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0289.707] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0289.708] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0289.708] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xed05f07, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1df8, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0240157.WMF", cAlternateFileName="")) returned 1 [0289.708] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0289.708] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0289.708] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0289.708] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0289.708] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0289.708] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0289.709] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240157.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0240157.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.709] GetFileType (hFile=0x198) returned 0x1 [0289.709] CloseHandle (hObject=0x198) returned 1 [0289.710] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0289.710] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240157.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0240157.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xed05f07, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1df8)) returned 1 [0289.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0289.710] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0289.710] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240157.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0240157.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xed05f07, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1df8)) returned 1 [0289.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0289.711] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0289.711] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0289.711] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xed05f07, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa410, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0240175.WMF", cAlternateFileName="")) returned 1 [0289.711] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0289.711] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211fa8 [0289.711] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0289.711] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211fa8 | out: hHeap=0x1f0000) returned 1 [0289.711] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0289.711] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0289.713] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240175.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0240175.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.713] GetFileType (hFile=0x198) returned 0x1 [0289.713] CloseHandle (hObject=0x198) returned 1 [0289.713] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0289.714] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240175.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0240175.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xed05f07, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa410)) returned 1 [0289.714] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0289.714] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0289.714] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240175.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0240175.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xed05f07, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa410)) returned 1 [0289.714] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0289.714] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0289.714] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0289.714] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xed05f07, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdc4, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0240189.WMF", cAlternateFileName="")) returned 1 [0289.714] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0289.714] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212140 [0289.714] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0289.714] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212140 | out: hHeap=0x1f0000) returned 1 [0289.715] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0289.715] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0289.715] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240189.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0240189.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.715] GetFileType (hFile=0x198) returned 0x1 [0289.716] CloseHandle (hObject=0x198) returned 1 [0289.716] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0289.716] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240189.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0240189.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xed05f07, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdc4)) returned 1 [0289.716] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0289.716] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0289.716] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240189.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0240189.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xed05f07, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdc4)) returned 1 [0289.716] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0289.716] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0289.716] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0289.717] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1476, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0240291.WMF", cAlternateFileName="")) returned 1 [0289.717] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0289.717] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211948 [0289.717] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0289.717] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211948 | out: hHeap=0x1f0000) returned 1 [0289.717] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0289.717] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0289.717] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240291.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0240291.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.718] GetFileType (hFile=0x198) returned 0x1 [0289.718] CloseHandle (hObject=0x198) returned 1 [0289.718] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0289.718] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240291.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0240291.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1476)) returned 1 [0289.718] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0289.718] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0289.719] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240291.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0240291.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1476)) returned 1 [0289.719] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0289.719] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0289.719] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0289.719] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xed05f07, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x92e, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0241019.WMF", cAlternateFileName="")) returned 1 [0289.719] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0289.719] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211bf0 [0289.719] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0289.719] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211bf0 | out: hHeap=0x1f0000) returned 1 [0289.720] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0289.720] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0289.720] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241019.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241019.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.720] GetFileType (hFile=0x198) returned 0x1 [0289.721] CloseHandle (hObject=0x198) returned 1 [0289.721] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0289.721] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241019.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241019.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xed05f07, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x92e)) returned 1 [0289.721] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0289.722] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0289.722] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241019.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241019.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xed05f07, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x92e)) returned 1 [0289.722] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0289.722] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0289.722] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0289.722] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa4e, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0241037.WMF", cAlternateFileName="")) returned 1 [0289.722] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260630 [0289.722] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2128b0 [0289.722] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0289.723] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2128b0 | out: hHeap=0x1f0000) returned 1 [0289.723] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0289.723] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260630 | out: hHeap=0x1f0000) returned 1 [0289.723] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241037.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241037.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.724] GetFileType (hFile=0x198) returned 0x1 [0289.724] CloseHandle (hObject=0x198) returned 1 [0289.725] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0289.725] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241037.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241037.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa4e)) returned 1 [0289.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0289.725] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0289.725] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241037.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241037.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa4e)) returned 1 [0289.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0289.726] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0289.726] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0289.726] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x926, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0241041.WMF", cAlternateFileName="")) returned 1 [0289.726] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0289.726] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212718 [0289.726] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0289.726] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212718 | out: hHeap=0x1f0000) returned 1 [0289.726] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0289.727] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0290.103] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241041.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241041.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0290.292] GetFileType (hFile=0x198) returned 0x1 [0290.293] CloseHandle (hObject=0x198) returned 1 [0290.293] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0290.293] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241041.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241041.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x926)) returned 1 [0290.294] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0290.294] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0290.294] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241041.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241041.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x926)) returned 1 [0290.294] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0290.294] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0290.294] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0290.294] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xab2, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0241043.WMF", cAlternateFileName="")) returned 1 [0290.295] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260838 [0290.295] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2129c0 [0290.295] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0290.295] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2129c0 | out: hHeap=0x1f0000) returned 1 [0290.295] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0290.295] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260838 | out: hHeap=0x1f0000) returned 1 [0290.296] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241043.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241043.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0290.838] GetFileType (hFile=0x1b0) returned 0x1 [0290.840] CloseHandle (hObject=0x1b0) returned 1 [0290.840] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0290.840] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241043.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241043.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xab2)) returned 1 [0290.841] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0290.841] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0290.843] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241043.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241043.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xab2)) returned 1 [0290.843] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0290.843] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0290.843] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0290.843] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34834b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf34834b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x82a, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0241077.WMF", cAlternateFileName="")) returned 1 [0290.844] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c20 [0290.844] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211e98 [0290.844] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0290.844] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e98 | out: hHeap=0x1f0000) returned 1 [0290.844] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0290.844] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c20 | out: hHeap=0x1f0000) returned 1 [0290.847] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241077.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241077.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0290.847] GetFileType (hFile=0x1b0) returned 0x1 [0290.847] CloseHandle (hObject=0x1b0) returned 1 [0290.848] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0290.848] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241077.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241077.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34834b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf34834b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x82a)) returned 1 [0290.848] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0290.848] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0290.848] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241077.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241077.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34834b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf34834b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x82a)) returned 1 [0290.848] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0290.848] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0290.848] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0290.848] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34834b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf34834b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcbe, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0241773.WMF", cAlternateFileName="")) returned 1 [0290.849] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b30 [0290.849] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212030 [0290.849] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0290.851] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212030 | out: hHeap=0x1f0000) returned 1 [0290.851] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0290.851] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b30 | out: hHeap=0x1f0000) returned 1 [0290.852] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241773.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241773.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0290.852] GetFileType (hFile=0x1b0) returned 0x1 [0290.852] CloseHandle (hObject=0x1b0) returned 1 [0290.853] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0290.853] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241773.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241773.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34834b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf34834b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcbe)) returned 1 [0290.853] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0290.853] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0290.853] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241773.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241773.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34834b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf34834b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcbe)) returned 1 [0290.853] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0290.853] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0290.853] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0290.856] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34834b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf34834b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7b2, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0241781.WMF", cAlternateFileName="")) returned 1 [0290.856] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c20 [0290.856] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211e98 [0290.856] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0290.856] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e98 | out: hHeap=0x1f0000) returned 1 [0290.856] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0290.856] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c20 | out: hHeap=0x1f0000) returned 1 [0290.857] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241781.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241781.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0290.857] GetFileType (hFile=0x1b0) returned 0x1 [0290.857] CloseHandle (hObject=0x1b0) returned 1 [0290.858] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0290.858] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241781.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241781.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34834b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf34834b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7b2)) returned 1 [0290.858] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0290.858] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0290.858] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241781.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241781.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34834b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf34834b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7b2)) returned 1 [0290.858] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0290.859] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0290.859] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0290.859] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34834b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf34834b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7938, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0250504.WMF", cAlternateFileName="")) returned 1 [0290.859] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c70 [0290.859] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211ae0 [0290.859] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0290.859] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211ae0 | out: hHeap=0x1f0000) returned 1 [0290.859] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0290.859] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c70 | out: hHeap=0x1f0000) returned 1 [0290.860] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0250504.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0250504.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0290.860] GetFileType (hFile=0x1b0) returned 0x1 [0290.861] CloseHandle (hObject=0x1b0) returned 1 [0290.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0290.861] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0250504.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0250504.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34834b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf34834b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7938)) returned 1 [0290.861] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0290.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0290.861] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0250504.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0250504.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34834b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf34834b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7938)) returned 1 [0290.861] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0290.862] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0290.862] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0290.862] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf2fbd2e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf2fbd2e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf34834b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6958, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0250997.WMF", cAlternateFileName="")) returned 1 [0290.862] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c20 [0290.862] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212608 [0290.862] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0290.862] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212608 | out: hHeap=0x1f0000) returned 1 [0290.862] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0290.862] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c20 | out: hHeap=0x1f0000) returned 1 [0290.863] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0250997.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0250997.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0290.863] GetFileType (hFile=0x1b0) returned 0x1 [0290.863] CloseHandle (hObject=0x1b0) returned 1 [0290.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0290.864] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0250997.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0250997.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf2fbd2e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf2fbd2e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf34834b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6958)) returned 1 [0290.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0290.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0290.864] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0250997.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0250997.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf2fbd2e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf2fbd2e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf34834b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6958)) returned 1 [0290.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0290.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0290.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0290.865] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xed05f07, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xed05f07, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf34834b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1100c, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0251007.WMF", cAlternateFileName="")) returned 1 [0290.865] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609f0 [0290.865] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212250 [0290.865] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0290.865] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212250 | out: hHeap=0x1f0000) returned 1 [0290.865] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0290.865] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609f0 | out: hHeap=0x1f0000) returned 1 [0290.865] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0251007.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0251007.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0290.865] GetFileType (hFile=0x1b0) returned 0x1 [0290.866] CloseHandle (hObject=0x1b0) returned 1 [0290.866] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0290.866] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0251007.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0251007.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xed05f07, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xed05f07, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf34834b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1100c)) returned 1 [0290.866] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0290.866] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0290.866] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0251007.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0251007.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xed05f07, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xed05f07, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf34834b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1100c)) returned 1 [0290.866] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0290.866] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0290.866] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0290.866] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34834b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf34834b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf34834b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xae2, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0252629.WMF", cAlternateFileName="")) returned 1 [0290.866] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b30 [0290.866] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2123e8 [0290.866] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0290.866] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2123e8 | out: hHeap=0x1f0000) returned 1 [0290.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0290.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b30 | out: hHeap=0x1f0000) returned 1 [0290.867] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0252629.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0252629.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0290.867] GetFileType (hFile=0x1b0) returned 0x1 [0290.867] CloseHandle (hObject=0x1b0) returned 1 [0290.868] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0290.868] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0252629.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0252629.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34834b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf34834b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf34834b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xae2)) returned 1 [0290.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0290.868] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0290.868] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0252629.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0252629.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34834b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf34834b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf34834b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xae2)) returned 1 [0290.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0290.868] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0290.869] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0290.869] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf2fbd2e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf2fbd2e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf34834b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf56, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0252669.WMF", cAlternateFileName="")) returned 1 [0290.869] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a68 [0290.869] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212470 [0290.869] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0290.869] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212470 | out: hHeap=0x1f0000) returned 1 [0290.869] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0290.869] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a68 | out: hHeap=0x1f0000) returned 1 [0290.869] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0252669.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0252669.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0290.870] GetFileType (hFile=0x1b0) returned 0x1 [0290.870] CloseHandle (hObject=0x1b0) returned 1 [0290.870] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0290.870] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0252669.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0252669.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf2fbd2e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf2fbd2e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf34834b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf56)) returned 1 [0290.870] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0290.870] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0290.871] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0252669.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0252669.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf2fbd2e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf2fbd2e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf34834b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf56)) returned 1 [0290.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0290.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0290.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0290.871] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xed05f07, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xed05f07, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf34834b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf6a, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0278702.WMF", cAlternateFileName="")) returned 1 [0290.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bd0 [0290.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212938 [0290.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0290.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212938 | out: hHeap=0x1f0000) returned 1 [0290.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0290.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bd0 | out: hHeap=0x1f0000) returned 1 [0290.872] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0278702.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0278702.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0290.872] GetFileType (hFile=0x1b0) returned 0x1 [0290.872] CloseHandle (hObject=0x1b0) returned 1 [0290.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0290.873] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0278702.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0278702.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xed05f07, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xed05f07, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf34834b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf6a)) returned 1 [0290.873] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0290.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0290.873] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0278702.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0278702.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xed05f07, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xed05f07, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf34834b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf6a)) returned 1 [0290.873] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0290.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0290.873] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0290.873] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xed05f07, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xed05f07, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf2fbd2e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4330, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0279644.WMF", cAlternateFileName="")) returned 1 [0290.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609f0 [0290.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212360 [0290.874] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0290.874] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212360 | out: hHeap=0x1f0000) returned 1 [0290.874] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0290.874] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609f0 | out: hHeap=0x1f0000) returned 1 [0290.874] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0279644.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0279644.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0290.874] GetFileType (hFile=0x1b0) returned 0x1 [0290.875] CloseHandle (hObject=0x1b0) returned 1 [0290.875] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0290.875] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0279644.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0279644.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xed05f07, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xed05f07, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf2fbd2e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4330)) returned 1 [0290.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0290.875] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0290.875] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0279644.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0279644.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xed05f07, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xed05f07, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf2fbd2e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4330)) returned 1 [0290.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0290.875] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0290.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0290.875] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11dee, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0280468.WMF", cAlternateFileName="")) returned 1 [0290.875] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b30 [0290.876] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0290.876] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0290.876] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0290.876] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0290.876] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b30 | out: hHeap=0x1f0000) returned 1 [0290.876] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0280468.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0280468.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0290.876] GetFileType (hFile=0x1b0) returned 0x1 [0290.877] CloseHandle (hObject=0x1b0) returned 1 [0290.877] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0290.877] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0280468.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0280468.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11dee)) returned 1 [0290.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0290.877] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0290.877] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0280468.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0280468.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11dee)) returned 1 [0290.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0290.877] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0290.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0290.877] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x94c4, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0281008.WMF", cAlternateFileName="")) returned 1 [0290.877] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b58 [0290.877] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211948 [0290.878] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0290.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211948 | out: hHeap=0x1f0000) returned 1 [0290.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0290.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b58 | out: hHeap=0x1f0000) returned 1 [0290.878] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281008.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281008.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0290.878] GetFileType (hFile=0x1b0) returned 0x1 [0290.878] CloseHandle (hObject=0x1b0) returned 1 [0290.879] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0290.879] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281008.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281008.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x94c4)) returned 1 [0290.879] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0290.879] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0290.879] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281008.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281008.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x94c4)) returned 1 [0290.879] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0290.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0290.880] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0290.880] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb5b4, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0281243.WMF", cAlternateFileName="")) returned 1 [0290.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609f0 [0290.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0290.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0290.880] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0290.880] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0290.880] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609f0 | out: hHeap=0x1f0000) returned 1 [0290.880] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281243.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281243.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0290.880] GetFileType (hFile=0x1b0) returned 0x1 [0290.881] CloseHandle (hObject=0x1b0) returned 1 [0290.881] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0290.881] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281243.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281243.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb5b4)) returned 1 [0290.881] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0290.881] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0290.881] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281243.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281243.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb5b4)) returned 1 [0290.881] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0290.881] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0290.881] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0290.881] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31dc, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0281630.WMF", cAlternateFileName="")) returned 1 [0290.882] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b30 [0290.882] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212360 [0290.882] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0290.882] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212360 | out: hHeap=0x1f0000) returned 1 [0290.882] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0290.882] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b30 | out: hHeap=0x1f0000) returned 1 [0290.882] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281630.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281630.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0290.883] GetFileType (hFile=0x1b0) returned 0x1 [0290.883] CloseHandle (hObject=0x1b0) returned 1 [0290.883] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0290.883] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281630.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281630.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31dc)) returned 1 [0291.172] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0291.172] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0291.172] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281630.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281630.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31dc)) returned 1 [0291.173] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0291.173] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0291.173] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0291.173] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3854, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0281632.WMF", cAlternateFileName="")) returned 1 [0291.173] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a68 [0291.173] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2124f8 [0291.173] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0291.174] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2124f8 | out: hHeap=0x1f0000) returned 1 [0291.174] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0291.174] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a68 | out: hHeap=0x1f0000) returned 1 [0291.174] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281632.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281632.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0291.354] GetFileType (hFile=0x198) returned 0x1 [0291.354] CloseHandle (hObject=0x198) returned 1 [0291.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0291.355] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281632.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281632.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3854)) returned 1 [0291.355] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0291.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0291.355] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281632.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281632.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3854)) returned 1 [0291.355] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0291.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0291.356] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0291.356] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34834b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf34834b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e88, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0281638.WMF", cAlternateFileName="")) returned 1 [0291.356] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a68 [0291.356] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2119d0 [0291.356] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0291.356] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2119d0 | out: hHeap=0x1f0000) returned 1 [0291.356] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0291.356] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a68 | out: hHeap=0x1f0000) returned 1 [0291.357] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281638.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281638.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0291.357] GetFileType (hFile=0x198) returned 0x1 [0291.357] CloseHandle (hObject=0x198) returned 1 [0291.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0291.358] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281638.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281638.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34834b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf34834b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e88)) returned 1 [0291.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0291.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0291.358] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281638.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281638.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34834b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf34834b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e88)) returned 1 [0291.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0291.359] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0291.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0291.359] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30f2, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0281640.WMF", cAlternateFileName="")) returned 1 [0291.359] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a68 [0291.359] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212608 [0291.359] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0291.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212608 | out: hHeap=0x1f0000) returned 1 [0291.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0291.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a68 | out: hHeap=0x1f0000) returned 1 [0291.360] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281640.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281640.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0291.360] GetFileType (hFile=0x198) returned 0x1 [0291.360] CloseHandle (hObject=0x198) returned 1 [0291.361] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0291.361] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281640.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281640.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30f2)) returned 1 [0291.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0291.361] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0291.361] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281640.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281640.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30f2)) returned 1 [0291.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0291.362] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0291.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0291.362] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3c9e, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0282126.WMF", cAlternateFileName="")) returned 1 [0291.362] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0291.362] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212828 [0291.362] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0291.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212828 | out: hHeap=0x1f0000) returned 1 [0291.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0291.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0291.363] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0282126.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0282126.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0291.363] GetFileType (hFile=0x198) returned 0x1 [0291.364] CloseHandle (hObject=0x198) returned 1 [0291.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0291.364] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0282126.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0282126.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3c9e)) returned 1 [0291.364] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0291.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0291.365] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0282126.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0282126.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3c9e)) returned 1 [0291.365] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0291.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0291.365] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0291.365] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8166, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0282928.WMF", cAlternateFileName="")) returned 1 [0291.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c48 [0291.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2119d0 [0291.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0291.365] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2119d0 | out: hHeap=0x1f0000) returned 1 [0291.365] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0291.365] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0291.366] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0282928.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0282928.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0291.366] GetFileType (hFile=0x198) returned 0x1 [0291.366] CloseHandle (hObject=0x198) returned 1 [0291.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0291.367] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0282928.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0282928.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8166)) returned 1 [0291.367] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0291.367] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0291.367] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0282928.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0282928.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8166)) returned 1 [0291.367] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0291.367] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0291.367] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0291.367] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34834b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf34834b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3700, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0282932.WMF", cAlternateFileName="")) returned 1 [0291.367] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c48 [0291.367] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212580 [0291.368] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0291.368] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212580 | out: hHeap=0x1f0000) returned 1 [0291.368] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0291.368] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0291.368] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0282932.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0282932.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0291.368] GetFileType (hFile=0x198) returned 0x1 [0291.369] CloseHandle (hObject=0x198) returned 1 [0291.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0291.369] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0282932.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0282932.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34834b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf34834b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3700)) returned 1 [0291.369] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0291.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0291.369] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0282932.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0282932.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34834b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf34834b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3700)) returned 1 [0291.370] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0291.370] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0291.370] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0291.370] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x388a, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0285462.WMF", cAlternateFileName="")) returned 1 [0291.370] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0291.370] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212828 [0291.370] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0291.370] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212828 | out: hHeap=0x1f0000) returned 1 [0291.370] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0291.370] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0291.371] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285462.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285462.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0291.371] GetFileType (hFile=0x198) returned 0x1 [0291.371] CloseHandle (hObject=0x198) returned 1 [0291.371] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0291.371] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285462.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285462.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x388a)) returned 1 [0291.371] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0291.372] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0291.372] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285462.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285462.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x388a)) returned 1 [0291.372] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0291.372] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0291.372] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0291.372] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2440, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0285484.WMF", cAlternateFileName="")) returned 1 [0291.372] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0291.372] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212030 [0291.372] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0291.372] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212030 | out: hHeap=0x1f0000) returned 1 [0291.372] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0291.372] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0291.447] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285484.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285484.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0291.448] GetFileType (hFile=0x198) returned 0x1 [0291.448] CloseHandle (hObject=0x198) returned 1 [0291.449] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0291.449] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285484.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285484.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2440)) returned 1 [0291.449] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0291.449] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0291.449] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285484.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285484.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2440)) returned 1 [0291.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0291.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0291.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0291.450] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x795c, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0285780.WMF", cAlternateFileName="")) returned 1 [0291.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0291.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2124f8 [0291.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0291.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2124f8 | out: hHeap=0x1f0000) returned 1 [0291.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0291.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0291.451] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285780.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285780.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0291.451] GetFileType (hFile=0x198) returned 0x1 [0291.452] CloseHandle (hObject=0x198) returned 1 [0291.452] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0291.452] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285780.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285780.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x795c)) returned 1 [0291.452] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0291.452] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0291.452] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285780.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285780.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x795c)) returned 1 [0291.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0291.453] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0291.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0291.453] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x523e, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0285782.WMF", cAlternateFileName="")) returned 1 [0291.453] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0291.453] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2128b0 [0291.453] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0291.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2128b0 | out: hHeap=0x1f0000) returned 1 [0291.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0291.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0291.454] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285782.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285782.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0291.455] GetFileType (hFile=0x198) returned 0x1 [0291.455] CloseHandle (hObject=0x198) returned 1 [0291.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0291.455] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285782.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285782.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x523e)) returned 1 [0291.456] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0291.456] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0291.456] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285782.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285782.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x523e)) returned 1 [0291.456] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0291.456] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0291.456] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0291.456] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2eb4, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0285792.WMF", cAlternateFileName="")) returned 1 [0291.456] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0291.456] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212140 [0291.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0291.457] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212140 | out: hHeap=0x1f0000) returned 1 [0291.457] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0291.457] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0291.457] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285792.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285792.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0291.458] GetFileType (hFile=0x198) returned 0x1 [0291.458] CloseHandle (hObject=0x198) returned 1 [0291.459] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0291.459] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285792.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285792.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2eb4)) returned 1 [0291.459] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0291.459] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0291.459] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285792.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285792.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2eb4)) returned 1 [0291.460] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0291.460] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0291.460] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0291.460] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3550, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0285796.WMF", cAlternateFileName="")) returned 1 [0291.460] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0291.460] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211b68 [0291.460] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0291.460] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b68 | out: hHeap=0x1f0000) returned 1 [0291.461] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0291.461] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0291.746] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285796.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285796.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0291.746] GetFileType (hFile=0x19c) returned 0x1 [0291.747] CloseHandle (hObject=0x19c) returned 1 [0291.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0291.747] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285796.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285796.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3550)) returned 1 [0291.748] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0291.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0291.748] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285796.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285796.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3550)) returned 1 [0291.748] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0291.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0291.748] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0291.748] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x23f4, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0285808.WMF", cAlternateFileName="")) returned 1 [0291.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0291.749] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211bf0 [0291.749] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0291.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211bf0 | out: hHeap=0x1f0000) returned 1 [0291.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0291.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0291.750] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285808.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285808.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0291.750] GetFileType (hFile=0x19c) returned 0x1 [0291.750] CloseHandle (hObject=0x19c) returned 1 [0291.751] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0291.751] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285808.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285808.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x23f4)) returned 1 [0291.751] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0291.751] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0291.751] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285808.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285808.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x23f4)) returned 1 [0291.751] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0291.752] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0291.752] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0291.752] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2210, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0285820.WMF", cAlternateFileName="")) returned 1 [0291.752] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0291.752] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211e10 [0291.752] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0291.752] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e10 | out: hHeap=0x1f0000) returned 1 [0291.752] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0291.753] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0291.753] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285820.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285820.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0291.754] GetFileType (hFile=0x19c) returned 0x1 [0291.754] CloseHandle (hObject=0x19c) returned 1 [0291.755] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0291.755] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285820.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285820.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2210)) returned 1 [0291.755] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0291.756] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0291.756] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285820.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285820.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2210)) returned 1 [0291.756] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0291.756] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0291.756] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0291.756] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21a0, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0285822.WMF", cAlternateFileName="")) returned 1 [0291.756] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0291.757] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212580 [0291.757] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0291.757] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212580 | out: hHeap=0x1f0000) returned 1 [0291.757] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0291.757] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0291.758] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285822.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285822.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0291.758] GetFileType (hFile=0x19c) returned 0x1 [0291.759] CloseHandle (hObject=0x19c) returned 1 [0291.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0291.760] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285822.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285822.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21a0)) returned 1 [0291.760] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0291.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0291.760] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285822.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285822.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21a0)) returned 1 [0291.760] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0291.761] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0291.761] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0291.761] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7898, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0287018.WMF", cAlternateFileName="")) returned 1 [0291.761] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0291.761] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2119d0 [0291.761] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0291.761] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2119d0 | out: hHeap=0x1f0000) returned 1 [0291.762] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0291.762] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0291.763] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287018.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287018.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0291.763] GetFileType (hFile=0x19c) returned 0x1 [0291.764] CloseHandle (hObject=0x19c) returned 1 [0291.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0291.764] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287018.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287018.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7898)) returned 1 [0291.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0291.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0291.765] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287018.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287018.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7898)) returned 1 [0291.765] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0291.765] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0291.765] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0291.765] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x931a, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0287019.WMF", cAlternateFileName="")) returned 1 [0291.765] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0291.765] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0291.765] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0291.766] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0291.766] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0291.766] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0291.766] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287019.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287019.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0291.767] GetFileType (hFile=0x19c) returned 0x1 [0291.767] CloseHandle (hObject=0x19c) returned 1 [0291.768] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0291.768] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287019.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287019.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x931a)) returned 1 [0291.768] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0291.768] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0291.768] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287019.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287019.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x931a)) returned 1 [0291.768] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0291.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0291.769] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0291.769] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x80d8, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0287020.WMF", cAlternateFileName="")) returned 1 [0291.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260518 [0291.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2122d8 [0291.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0291.769] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2122d8 | out: hHeap=0x1f0000) returned 1 [0291.769] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0291.769] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0291.770] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287020.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287020.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0291.771] GetFileType (hFile=0x19c) returned 0x1 [0291.771] CloseHandle (hObject=0x19c) returned 1 [0291.771] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0291.772] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287020.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287020.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x80d8)) returned 1 [0291.772] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0291.772] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0291.772] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287020.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287020.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x80d8)) returned 1 [0291.772] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0291.772] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0291.772] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0291.772] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc6d2, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0287024.WMF", cAlternateFileName="")) returned 1 [0291.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260770 [0291.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2129c0 [0291.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0291.773] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2129c0 | out: hHeap=0x1f0000) returned 1 [0291.773] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0291.773] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0291.774] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287024.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287024.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0291.775] GetFileType (hFile=0x19c) returned 0x1 [0291.775] CloseHandle (hObject=0x19c) returned 1 [0291.776] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0291.776] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287024.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287024.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc6d2)) returned 1 [0291.776] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0291.776] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0291.776] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287024.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287024.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc6d2)) returned 1 [0291.776] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0291.776] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0291.776] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0291.776] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcd10, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0287408.WMF", cAlternateFileName="")) returned 1 [0291.777] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0291.777] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211b68 [0291.777] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0291.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b68 | out: hHeap=0x1f0000) returned 1 [0291.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0291.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0291.777] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287408.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287408.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0291.778] GetFileType (hFile=0x19c) returned 0x1 [0291.778] CloseHandle (hObject=0x19c) returned 1 [0291.779] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0291.779] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287408.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287408.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcd10)) returned 1 [0291.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0291.779] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0291.779] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287408.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287408.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcd10)) returned 1 [0291.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0291.779] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0291.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0291.779] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa80c, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0287415.WMF", cAlternateFileName="")) returned 1 [0291.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609a0 [0291.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211ae0 [0291.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0291.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211ae0 | out: hHeap=0x1f0000) returned 1 [0291.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0291.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0291.781] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287415.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287415.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0291.781] GetFileType (hFile=0x19c) returned 0x1 [0291.781] CloseHandle (hObject=0x19c) returned 1 [0291.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0291.782] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287415.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287415.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa80c)) returned 1 [0291.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0291.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0291.782] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287415.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287415.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa80c)) returned 1 [0291.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0291.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0291.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0291.782] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd6bc, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0287417.WMF", cAlternateFileName="")) returned 1 [0291.783] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0291.783] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212828 [0291.783] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0291.783] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212828 | out: hHeap=0x1f0000) returned 1 [0291.783] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0291.783] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0291.784] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287417.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287417.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0291.784] GetFileType (hFile=0x19c) returned 0x1 [0291.784] CloseHandle (hObject=0x19c) returned 1 [0291.785] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0291.785] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287417.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287417.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd6bc)) returned 1 [0291.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0291.785] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0291.785] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287417.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287417.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd6bc)) returned 1 [0291.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0291.785] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0291.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0291.786] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x89a4, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0287641.JPG", cAlternateFileName="")) returned 1 [0291.786] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609a0 [0291.786] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211bf0 [0291.786] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0291.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211bf0 | out: hHeap=0x1f0000) returned 1 [0291.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0291.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0291.787] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287641.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287641.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0291.787] GetFileType (hFile=0x19c) returned 0x1 [0291.788] CloseHandle (hObject=0x19c) returned 1 [0291.788] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0291.788] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287641.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287641.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x89a4)) returned 1 [0291.788] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0291.789] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0291.789] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287641.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287641.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x89a4)) returned 1 [0291.789] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0291.789] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0291.789] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0291.789] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x42d1, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0287642.JPG", cAlternateFileName="")) returned 1 [0292.066] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0292.066] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0292.066] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0292.066] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0292.066] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0292.066] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0292.067] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287642.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287642.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0292.070] GetFileType (hFile=0x1c0) returned 0x1 [0292.070] CloseHandle (hObject=0x1c0) returned 1 [0292.070] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0292.070] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287642.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287642.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x42d1)) returned 1 [0292.071] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0292.071] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0292.071] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287642.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287642.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x42d1)) returned 1 [0292.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0292.072] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0292.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0292.072] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3e91, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0287643.JPG", cAlternateFileName="")) returned 1 [0292.072] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0292.072] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211a58 [0292.072] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0292.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211a58 | out: hHeap=0x1f0000) returned 1 [0292.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0292.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0292.119] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287643.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287643.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0292.119] GetFileType (hFile=0x1c0) returned 0x1 [0292.120] CloseHandle (hObject=0x1c0) returned 1 [0292.120] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0292.120] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287643.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287643.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3e91)) returned 1 [0292.120] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0292.120] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0292.121] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287643.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287643.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3e91)) returned 1 [0292.121] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0292.121] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0292.121] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0292.121] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43c5, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0287644.JPG", cAlternateFileName="")) returned 1 [0292.121] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0292.121] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212030 [0292.121] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0292.122] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212030 | out: hHeap=0x1f0000) returned 1 [0292.122] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0292.122] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0292.122] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287644.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287644.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0292.123] GetFileType (hFile=0x1c0) returned 0x1 [0292.123] CloseHandle (hObject=0x1c0) returned 1 [0292.123] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0292.123] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287644.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287644.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43c5)) returned 1 [0292.123] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0292.124] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0292.124] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287644.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287644.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43c5)) returned 1 [0292.124] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0292.124] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0292.124] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0292.124] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8d86, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0287645.JPG", cAlternateFileName="")) returned 1 [0292.124] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260518 [0292.124] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212250 [0292.124] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0292.124] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212250 | out: hHeap=0x1f0000) returned 1 [0292.124] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0292.124] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0292.125] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287645.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287645.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0292.126] GetFileType (hFile=0x1c0) returned 0x1 [0292.127] CloseHandle (hObject=0x1c0) returned 1 [0292.127] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0292.127] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287645.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287645.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8d86)) returned 1 [0292.128] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0292.128] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0292.128] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287645.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287645.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8d86)) returned 1 [0292.128] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0292.128] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0292.128] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0292.128] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d21, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0289430.JPG", cAlternateFileName="")) returned 1 [0292.128] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0292.129] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d00 [0292.129] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0292.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d00 | out: hHeap=0x1f0000) returned 1 [0292.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0292.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0292.130] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0289430.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0289430.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0292.130] GetFileType (hFile=0x1c0) returned 0x1 [0292.130] CloseHandle (hObject=0x1c0) returned 1 [0292.131] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0292.131] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0289430.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0289430.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d21)) returned 1 [0292.131] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0292.131] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0292.131] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0289430.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0289430.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d21)) returned 1 [0292.131] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0292.131] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0292.132] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0292.132] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9e8a, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0290548.WMF", cAlternateFileName="")) returned 1 [0292.132] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0292.132] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212360 [0292.132] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0292.132] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212360 | out: hHeap=0x1f0000) returned 1 [0292.132] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0292.132] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0292.133] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0290548.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0290548.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0292.133] GetFileType (hFile=0x1c0) returned 0x1 [0292.134] CloseHandle (hObject=0x1c0) returned 1 [0292.134] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0292.134] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0290548.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0290548.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9e8a)) returned 1 [0292.134] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0292.135] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0292.135] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0290548.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0290548.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9e8a)) returned 1 [0292.135] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0292.135] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0292.136] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0292.136] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2590, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0291794.WMF", cAlternateFileName="")) returned 1 [0292.136] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0292.136] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0292.136] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0292.136] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0292.136] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0292.136] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0292.137] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0291794.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0291794.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0292.137] GetFileType (hFile=0x1c0) returned 0x1 [0292.138] CloseHandle (hObject=0x1c0) returned 1 [0292.138] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0292.138] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0291794.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0291794.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2590)) returned 1 [0292.138] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0292.138] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0292.138] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0291794.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0291794.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2590)) returned 1 [0292.139] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0292.139] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0292.139] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0292.139] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20e4, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0292248.WMF", cAlternateFileName="")) returned 1 [0292.139] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0292.139] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211948 [0292.139] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0292.139] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211948 | out: hHeap=0x1f0000) returned 1 [0292.139] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0292.139] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0292.140] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292248.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292248.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0292.140] GetFileType (hFile=0x1c0) returned 0x1 [0292.141] CloseHandle (hObject=0x1c0) returned 1 [0292.141] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0292.141] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292248.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292248.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20e4)) returned 1 [0292.141] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0292.141] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0292.141] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292248.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292248.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20e4)) returned 1 [0292.142] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0292.142] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0292.142] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0292.142] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7aa6, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0292270.WMF", cAlternateFileName="")) returned 1 [0292.142] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0292.142] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2129c0 [0292.142] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0292.142] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2129c0 | out: hHeap=0x1f0000) returned 1 [0292.143] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0292.143] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0292.143] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292270.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292270.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0292.144] GetFileType (hFile=0x1c0) returned 0x1 [0292.144] CloseHandle (hObject=0x1c0) returned 1 [0292.144] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0292.145] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292270.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292270.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7aa6)) returned 1 [0292.145] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0292.145] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0292.145] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292270.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292270.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7aa6)) returned 1 [0292.145] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0292.145] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0292.145] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0292.145] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b64, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0292272.WMF", cAlternateFileName="")) returned 1 [0292.146] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0292.146] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2122d8 [0292.146] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0292.146] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2122d8 | out: hHeap=0x1f0000) returned 1 [0292.146] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0292.146] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0292.147] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292272.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292272.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0292.147] GetFileType (hFile=0x1c0) returned 0x1 [0292.148] CloseHandle (hObject=0x1c0) returned 1 [0292.149] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0292.431] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292272.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292272.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b64)) returned 1 [0292.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0292.431] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0292.431] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292272.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292272.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b64)) returned 1 [0292.432] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0292.432] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0292.432] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0292.432] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3658, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0292278.WMF", cAlternateFileName="")) returned 1 [0292.432] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0292.432] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2119d0 [0292.432] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0292.432] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2119d0 | out: hHeap=0x1f0000) returned 1 [0292.432] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0292.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0292.433] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292278.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292278.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0292.434] GetFileType (hFile=0x1e0) returned 0x1 [0292.434] CloseHandle (hObject=0x1e0) returned 1 [0292.434] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0292.435] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292278.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292278.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3658)) returned 1 [0292.435] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0292.435] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0292.435] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292278.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292278.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3658)) returned 1 [0292.435] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0292.435] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0292.435] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0292.436] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b56, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0292286.WMF", cAlternateFileName="")) returned 1 [0292.436] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0292.436] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211c78 [0292.436] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0292.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211c78 | out: hHeap=0x1f0000) returned 1 [0292.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0292.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0292.437] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292286.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292286.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0292.437] GetFileType (hFile=0x1e0) returned 0x1 [0292.438] CloseHandle (hObject=0x1e0) returned 1 [0292.438] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0292.438] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292286.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292286.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b56)) returned 1 [0292.438] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0292.439] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0292.439] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292286.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292286.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b56)) returned 1 [0292.439] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0292.439] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0292.439] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0292.439] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12a6, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0293800.WMF", cAlternateFileName="")) returned 1 [0292.439] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0292.439] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212718 [0292.439] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0292.440] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212718 | out: hHeap=0x1f0000) returned 1 [0292.440] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0292.440] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0292.440] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0293800.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0293800.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0292.441] GetFileType (hFile=0x1e0) returned 0x1 [0292.441] CloseHandle (hObject=0x1e0) returned 1 [0292.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0292.442] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0293800.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0293800.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12a6)) returned 1 [0292.442] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0292.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0292.442] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0293800.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0293800.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12a6)) returned 1 [0292.442] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0292.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0292.442] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0292.442] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17be, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0293832.WMF", cAlternateFileName="")) returned 1 [0292.443] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0292.443] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212470 [0292.443] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0292.443] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212470 | out: hHeap=0x1f0000) returned 1 [0292.443] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0292.443] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0292.444] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0293832.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0293832.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0292.444] GetFileType (hFile=0x1e0) returned 0x1 [0292.444] CloseHandle (hObject=0x1e0) returned 1 [0292.444] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0292.444] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0293832.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0293832.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17be)) returned 1 [0292.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0292.445] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0292.445] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0293832.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0293832.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17be)) returned 1 [0292.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0292.445] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0292.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0292.445] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x37de, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0294989.WMF", cAlternateFileName="")) returned 1 [0292.445] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0292.445] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d00 [0292.445] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0292.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d00 | out: hHeap=0x1f0000) returned 1 [0292.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0292.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0292.446] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0294989.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0294989.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0292.447] GetFileType (hFile=0x1e0) returned 0x1 [0292.447] CloseHandle (hObject=0x1e0) returned 1 [0292.447] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0292.447] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0294989.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0294989.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x37de)) returned 1 [0292.447] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0292.447] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0292.447] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0294989.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0294989.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x37de)) returned 1 [0292.448] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0292.448] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0292.448] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0292.448] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6180, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0294991.WMF", cAlternateFileName="")) returned 1 [0292.448] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0292.448] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212140 [0292.448] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0292.448] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212140 | out: hHeap=0x1f0000) returned 1 [0292.448] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0292.448] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0292.448] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0294991.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0294991.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0292.449] GetFileType (hFile=0x1e0) returned 0x1 [0292.449] CloseHandle (hObject=0x1e0) returned 1 [0292.449] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0292.449] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0294991.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0294991.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6180)) returned 1 [0292.449] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0292.449] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0292.450] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0294991.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0294991.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6180)) returned 1 [0292.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0292.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0292.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0292.450] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21b2, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0295069.WMF", cAlternateFileName="")) returned 1 [0292.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0292.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2119d0 [0292.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0292.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2119d0 | out: hHeap=0x1f0000) returned 1 [0292.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0292.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0292.451] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0295069.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0295069.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0292.451] GetFileType (hFile=0x1e0) returned 0x1 [0292.451] CloseHandle (hObject=0x1e0) returned 1 [0292.451] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0292.451] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0295069.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0295069.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21b2)) returned 1 [0292.452] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0292.452] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0292.452] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0295069.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0295069.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21b2)) returned 1 [0292.452] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0292.452] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0292.452] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0292.452] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe42c, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0296277.WMF", cAlternateFileName="")) returned 1 [0292.452] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0292.452] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211ae0 [0292.452] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0292.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211ae0 | out: hHeap=0x1f0000) returned 1 [0292.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0292.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0292.453] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0296277.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0296277.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0292.453] GetFileType (hFile=0x1e0) returned 0x1 [0292.454] CloseHandle (hObject=0x1e0) returned 1 [0292.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0292.454] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0296277.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0296277.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe42c)) returned 1 [0292.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0292.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0292.454] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0296277.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0296277.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe42c)) returned 1 [0292.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0292.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0292.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0292.454] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1088e, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0296279.WMF", cAlternateFileName="")) returned 1 [0292.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0292.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212938 [0292.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0292.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212938 | out: hHeap=0x1f0000) returned 1 [0292.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0292.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0292.455] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0296279.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0296279.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0292.455] GetFileType (hFile=0x1e0) returned 0x1 [0292.455] CloseHandle (hObject=0x1e0) returned 1 [0292.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0292.456] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0296279.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0296279.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1088e)) returned 1 [0292.456] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0292.456] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0292.456] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0296279.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0296279.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1088e)) returned 1 [0292.456] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0292.456] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0292.456] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0292.456] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x107ec, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0296288.WMF", cAlternateFileName="")) returned 1 [0292.456] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609a0 [0292.456] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212250 [0292.456] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0292.457] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212250 | out: hHeap=0x1f0000) returned 1 [0292.457] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0292.457] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0292.457] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0296288.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0296288.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0292.457] GetFileType (hFile=0x1e0) returned 0x1 [0292.457] CloseHandle (hObject=0x1e0) returned 1 [0292.458] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0292.458] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0296288.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0296288.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x107ec)) returned 1 [0292.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0292.458] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0292.458] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0296288.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0296288.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x107ec)) returned 1 [0292.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0292.458] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0292.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0292.458] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x59ce, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0297229.WMF", cAlternateFileName="")) returned 1 [0292.458] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0292.458] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212580 [0292.459] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0292.459] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212580 | out: hHeap=0x1f0000) returned 1 [0292.459] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0292.459] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0292.459] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297229.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297229.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0292.459] GetFileType (hFile=0x1e0) returned 0x1 [0292.460] CloseHandle (hObject=0x1e0) returned 1 [0292.460] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0292.460] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297229.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297229.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x59ce)) returned 1 [0292.460] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0292.460] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0292.460] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297229.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297229.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x59ce)) returned 1 [0292.460] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0292.460] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0292.460] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0292.460] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d24, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0297269.WMF", cAlternateFileName="")) returned 1 [0292.461] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0292.461] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0292.461] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0292.461] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0292.461] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0292.464] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0292.464] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297269.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297269.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0292.465] GetFileType (hFile=0x1e0) returned 0x1 [0292.465] CloseHandle (hObject=0x1e0) returned 1 [0292.465] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0292.465] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297269.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297269.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d24)) returned 1 [0292.466] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0292.466] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0292.466] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297269.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297269.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d24)) returned 1 [0292.466] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0292.466] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0292.466] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0292.466] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4236, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0297725.WMF", cAlternateFileName="")) returned 1 [0292.466] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0292.466] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212828 [0292.466] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0292.466] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212828 | out: hHeap=0x1f0000) returned 1 [0292.467] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0292.467] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0292.467] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297725.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297725.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0292.467] GetFileType (hFile=0x1e0) returned 0x1 [0292.468] CloseHandle (hObject=0x1e0) returned 1 [0292.468] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0292.468] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297725.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297725.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4236)) returned 1 [0292.468] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0292.468] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0292.468] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297725.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297725.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4236)) returned 1 [0292.468] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0292.469] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0292.469] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0292.469] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf406dcf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3c9c, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0297727.WMF", cAlternateFileName="")) returned 1 [0292.469] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0292.469] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212718 [0292.469] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0292.469] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212718 | out: hHeap=0x1f0000) returned 1 [0292.469] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0292.469] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0292.469] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297727.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297727.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0292.470] GetFileType (hFile=0x1e0) returned 0x1 [0292.470] CloseHandle (hObject=0x1e0) returned 1 [0292.470] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0292.470] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297727.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297727.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf406dcf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3c9c)) returned 1 [0292.471] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0292.471] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0292.471] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297727.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297727.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf406dcf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3c9c)) returned 1 [0292.471] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0292.471] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0292.471] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0292.471] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf406dcf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x493e, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0297757.WMF", cAlternateFileName="")) returned 1 [0292.471] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260888 [0292.471] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212828 [0292.471] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0292.471] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212828 | out: hHeap=0x1f0000) returned 1 [0292.471] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0292.472] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0292.472] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297757.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297757.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0292.472] GetFileType (hFile=0x1e0) returned 0x1 [0292.472] CloseHandle (hObject=0x1e0) returned 1 [0292.473] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0292.473] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297757.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297757.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf406dcf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x493e)) returned 1 [0292.473] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0292.473] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0292.473] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297757.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297757.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf406dcf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x493e)) returned 1 [0292.473] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0292.473] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0292.474] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0292.474] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4960, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0297759.WMF", cAlternateFileName="")) returned 1 [0292.474] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260770 [0292.474] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d00 [0292.474] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0292.474] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d00 | out: hHeap=0x1f0000) returned 1 [0292.474] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0292.474] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0292.475] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297759.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297759.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0292.475] GetFileType (hFile=0x1e0) returned 0x1 [0292.475] CloseHandle (hObject=0x1e0) returned 1 [0292.476] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0292.476] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297759.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297759.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4960)) returned 1 [0292.476] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0292.476] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0292.476] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297759.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297759.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4960)) returned 1 [0292.476] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0292.476] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0292.477] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0292.477] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4584, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0300862.WMF", cAlternateFileName="")) returned 1 [0292.477] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260838 [0292.743] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211ae0 [0292.743] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0292.743] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211ae0 | out: hHeap=0x1f0000) returned 1 [0292.743] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0292.743] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260838 | out: hHeap=0x1f0000) returned 1 [0292.961] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0300862.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0300862.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0292.961] GetFileType (hFile=0x1c0) returned 0x1 [0292.962] CloseHandle (hObject=0x1c0) returned 1 [0292.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0292.963] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0300862.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0300862.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4584)) returned 1 [0292.963] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0292.963] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0292.963] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0300862.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0300862.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4584)) returned 1 [0292.963] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0292.963] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0292.963] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0292.963] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b0e, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0301044.WMF", cAlternateFileName="")) returned 1 [0292.963] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260838 [0292.963] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d00 [0292.964] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0292.964] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d00 | out: hHeap=0x1f0000) returned 1 [0292.964] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0292.964] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260838 | out: hHeap=0x1f0000) returned 1 [0292.964] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301044.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0301044.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0292.965] GetFileType (hFile=0x1c0) returned 0x1 [0292.965] CloseHandle (hObject=0x1c0) returned 1 [0292.965] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0292.965] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301044.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0301044.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b0e)) returned 1 [0292.966] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0292.966] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0292.966] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301044.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0301044.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b0e)) returned 1 [0292.966] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0292.966] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0292.966] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0292.966] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ae8, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0301052.WMF", cAlternateFileName="")) returned 1 [0292.966] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0292.966] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212608 [0292.967] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0292.967] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212608 | out: hHeap=0x1f0000) returned 1 [0292.967] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0292.967] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0292.967] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301052.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0301052.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0292.968] GetFileType (hFile=0x1c0) returned 0x1 [0292.968] CloseHandle (hObject=0x1c0) returned 1 [0292.968] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0292.969] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301052.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0301052.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ae8)) returned 1 [0292.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0292.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0292.969] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301052.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0301052.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ae8)) returned 1 [0292.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0292.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0292.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0292.969] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4a5a, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0301418.WMF", cAlternateFileName="")) returned 1 [0292.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260838 [0292.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211b68 [0292.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0292.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b68 | out: hHeap=0x1f0000) returned 1 [0292.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0292.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260838 | out: hHeap=0x1f0000) returned 1 [0292.970] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301418.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0301418.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0292.971] GetFileType (hFile=0x1c0) returned 0x1 [0292.971] CloseHandle (hObject=0x1c0) returned 1 [0292.971] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0292.971] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301418.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0301418.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4a5a)) returned 1 [0292.971] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0292.971] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0292.972] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301418.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0301418.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4a5a)) returned 1 [0292.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0292.972] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0292.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0292.972] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4dfa, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0301432.WMF", cAlternateFileName="")) returned 1 [0292.972] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0292.972] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211f20 [0292.972] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0292.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211f20 | out: hHeap=0x1f0000) returned 1 [0292.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0292.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0292.972] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301432.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0301432.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0292.973] GetFileType (hFile=0x1c0) returned 0x1 [0292.973] CloseHandle (hObject=0x1c0) returned 1 [0292.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0292.973] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301432.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0301432.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4dfa)) returned 1 [0292.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0292.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0292.973] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301432.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0301432.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4dfa)) returned 1 [0292.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0292.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0292.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0292.974] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe20, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0304371.WMF", cAlternateFileName="")) returned 1 [0292.974] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260838 [0292.974] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211bf0 [0292.974] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0292.974] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211bf0 | out: hHeap=0x1f0000) returned 1 [0292.974] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0292.974] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260838 | out: hHeap=0x1f0000) returned 1 [0292.974] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304371.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304371.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0292.974] GetFileType (hFile=0x1c0) returned 0x1 [0292.975] CloseHandle (hObject=0x1c0) returned 1 [0292.975] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0292.975] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304371.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304371.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe20)) returned 1 [0292.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0292.975] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0292.975] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304371.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304371.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe20)) returned 1 [0292.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0292.975] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0292.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0292.975] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x103e, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0304405.WMF", cAlternateFileName="")) returned 1 [0292.975] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0292.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212828 [0292.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0292.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212828 | out: hHeap=0x1f0000) returned 1 [0292.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0292.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0292.976] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304405.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304405.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0292.976] GetFileType (hFile=0x1c0) returned 0x1 [0292.977] CloseHandle (hObject=0x1c0) returned 1 [0292.977] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0292.978] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304405.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304405.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x103e)) returned 1 [0292.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0292.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0292.978] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304405.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304405.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x103e)) returned 1 [0292.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0292.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0292.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0292.978] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4a0e, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0304853.WMF", cAlternateFileName="")) returned 1 [0292.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260838 [0292.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211e10 [0292.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0292.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e10 | out: hHeap=0x1f0000) returned 1 [0292.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0292.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260838 | out: hHeap=0x1f0000) returned 1 [0292.979] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304853.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304853.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0292.979] GetFileType (hFile=0x1c0) returned 0x1 [0292.979] CloseHandle (hObject=0x1c0) returned 1 [0292.980] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0292.980] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304853.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304853.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4a0e)) returned 1 [0292.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0292.980] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0292.980] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304853.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304853.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4a0e)) returned 1 [0292.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0292.980] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0292.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0292.980] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2cf8, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0304861.WMF", cAlternateFileName="")) returned 1 [0292.980] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0292.981] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211948 [0292.981] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0292.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211948 | out: hHeap=0x1f0000) returned 1 [0292.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0292.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0292.981] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304861.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304861.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0292.981] GetFileType (hFile=0x1c0) returned 0x1 [0292.982] CloseHandle (hObject=0x1c0) returned 1 [0292.982] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0292.982] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304861.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304861.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2cf8)) returned 1 [0292.982] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0292.982] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0292.982] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304861.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304861.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2cf8)) returned 1 [0292.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0292.983] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0292.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0292.983] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f8e, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0304875.WMF", cAlternateFileName="")) returned 1 [0292.983] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260838 [0292.983] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211fa8 [0292.983] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0292.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211fa8 | out: hHeap=0x1f0000) returned 1 [0292.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0292.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260838 | out: hHeap=0x1f0000) returned 1 [0292.984] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304875.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304875.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0292.984] GetFileType (hFile=0x1c0) returned 0x1 [0292.984] CloseHandle (hObject=0x1c0) returned 1 [0292.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0292.985] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304875.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304875.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f8e)) returned 1 [0292.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0292.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0292.985] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304875.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304875.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f8e)) returned 1 [0292.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0292.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0292.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0292.985] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x29c4, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0309480.JPG", cAlternateFileName="")) returned 1 [0292.986] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260888 [0292.986] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211fa8 [0292.986] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0292.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211fa8 | out: hHeap=0x1f0000) returned 1 [0292.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0292.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0292.987] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309480.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309480.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0292.987] GetFileType (hFile=0x1c0) returned 0x1 [0292.987] CloseHandle (hObject=0x1c0) returned 1 [0292.988] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0292.988] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309480.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309480.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x29c4)) returned 1 [0292.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0292.988] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0292.988] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309480.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309480.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x29c4)) returned 1 [0292.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0292.988] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0292.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0292.988] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf406dcf, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf406dcf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x544c, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0309567.JPG", cAlternateFileName="")) returned 1 [0292.988] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0292.989] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211948 [0292.989] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0292.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211948 | out: hHeap=0x1f0000) returned 1 [0292.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0292.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0292.989] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309567.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309567.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0292.989] GetFileType (hFile=0x1c0) returned 0x1 [0292.990] CloseHandle (hObject=0x1c0) returned 1 [0292.990] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0292.990] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309567.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309567.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf406dcf, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf406dcf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x544c)) returned 1 [0292.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0292.991] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0292.991] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309567.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309567.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf406dcf, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf406dcf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x544c)) returned 1 [0292.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0292.991] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0292.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0292.991] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf406dcf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9a8b, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0309585.JPG", cAlternateFileName="")) returned 1 [0292.991] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0292.991] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211b68 [0292.991] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0292.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b68 | out: hHeap=0x1f0000) returned 1 [0292.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0292.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0292.992] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309585.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309585.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0292.992] GetFileType (hFile=0x1c0) returned 0x1 [0292.993] CloseHandle (hObject=0x1c0) returned 1 [0292.994] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0292.994] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309585.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309585.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf406dcf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9a8b)) returned 1 [0292.994] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0292.994] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0292.994] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309585.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309585.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf406dcf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9a8b)) returned 1 [0292.994] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0292.994] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0292.994] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0292.994] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf406dcf, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf406dcf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x81f0, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0309598.JPG", cAlternateFileName="")) returned 1 [0292.995] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0292.995] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2127a0 [0292.995] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0292.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2127a0 | out: hHeap=0x1f0000) returned 1 [0292.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0292.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0292.995] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309598.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309598.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0292.996] GetFileType (hFile=0x1c0) returned 0x1 [0292.996] CloseHandle (hObject=0x1c0) returned 1 [0293.266] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0293.266] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309598.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309598.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf406dcf, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf406dcf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x81f0)) returned 1 [0293.266] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0293.266] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0293.266] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309598.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309598.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf406dcf, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf406dcf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x81f0)) returned 1 [0293.267] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0293.267] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0293.267] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0293.267] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf406dcf, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf406dcf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaabb, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0309664.JPG", cAlternateFileName="")) returned 1 [0293.267] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0293.267] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211ae0 [0293.267] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0293.267] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211ae0 | out: hHeap=0x1f0000) returned 1 [0293.268] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0293.268] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0293.268] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309664.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309664.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0293.269] GetFileType (hFile=0x1c0) returned 0x1 [0293.269] CloseHandle (hObject=0x1c0) returned 1 [0293.270] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0293.270] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309664.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309664.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf406dcf, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf406dcf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaabb)) returned 1 [0293.270] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0293.270] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0293.270] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309664.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309664.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf406dcf, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf406dcf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaabb)) returned 1 [0293.270] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0293.271] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0293.271] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0293.271] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf406dcf, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf406dcf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ada, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0309705.JPG", cAlternateFileName="")) returned 1 [0293.271] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0293.271] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211b68 [0293.271] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0293.271] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b68 | out: hHeap=0x1f0000) returned 1 [0293.271] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0293.271] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0293.272] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309705.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309705.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0293.272] GetFileType (hFile=0x1c0) returned 0x1 [0293.273] CloseHandle (hObject=0x1c0) returned 1 [0293.274] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0293.274] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309705.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309705.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf406dcf, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf406dcf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ada)) returned 1 [0293.275] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0293.275] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0293.276] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309705.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309705.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf406dcf, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf406dcf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ada)) returned 1 [0293.276] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0293.276] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0293.276] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0293.276] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf406dcf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0309902.WMF", cAlternateFileName="")) returned 1 [0293.276] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260838 [0293.276] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212470 [0293.276] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0293.277] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212470 | out: hHeap=0x1f0000) returned 1 [0293.277] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0293.277] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260838 | out: hHeap=0x1f0000) returned 1 [0293.278] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309902.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309902.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0293.278] GetFileType (hFile=0x1c0) returned 0x1 [0293.279] CloseHandle (hObject=0x1c0) returned 1 [0293.279] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0293.280] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309902.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309902.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf406dcf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a00)) returned 1 [0293.280] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0293.280] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0293.280] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309902.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309902.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf406dcf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a00)) returned 1 [0293.280] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0293.280] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0293.280] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0293.280] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20e4, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0309904.WMF", cAlternateFileName="")) returned 1 [0293.281] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0293.281] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2128b0 [0293.281] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0293.281] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2128b0 | out: hHeap=0x1f0000) returned 1 [0293.281] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0293.281] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0293.282] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309904.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309904.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0293.282] GetFileType (hFile=0x1c0) returned 0x1 [0293.283] CloseHandle (hObject=0x1c0) returned 1 [0293.283] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0293.283] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309904.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309904.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20e4)) returned 1 [0293.284] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0293.284] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0293.284] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309904.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309904.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20e4)) returned 1 [0293.284] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0293.284] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0293.284] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0293.284] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b38, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0309920.WMF", cAlternateFileName="")) returned 1 [0293.284] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260518 [0293.284] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211fa8 [0293.284] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0293.285] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211fa8 | out: hHeap=0x1f0000) returned 1 [0293.285] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0293.285] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0293.285] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309920.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309920.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0293.286] GetFileType (hFile=0x1c0) returned 0x1 [0293.287] CloseHandle (hObject=0x1c0) returned 1 [0293.287] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0293.287] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309920.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309920.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b38)) returned 1 [0293.287] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0293.287] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0293.288] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309920.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309920.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b38)) returned 1 [0293.289] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0293.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0293.289] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0293.289] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x911a, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0313896.JPG", cAlternateFileName="")) returned 1 [0293.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0293.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212938 [0293.290] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0293.290] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212938 | out: hHeap=0x1f0000) returned 1 [0293.290] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0293.290] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0293.291] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313896.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313896.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0293.291] GetFileType (hFile=0x1c0) returned 0x1 [0293.292] CloseHandle (hObject=0x1c0) returned 1 [0293.295] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0293.295] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313896.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313896.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x911a)) returned 1 [0293.295] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0293.295] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0293.295] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313896.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313896.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x911a)) returned 1 [0293.295] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0293.296] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0293.296] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0293.296] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa75a, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0313965.JPG", cAlternateFileName="")) returned 1 [0293.296] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0293.296] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212608 [0293.296] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0293.296] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212608 | out: hHeap=0x1f0000) returned 1 [0293.296] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0293.297] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0293.297] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313965.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313965.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0293.298] GetFileType (hFile=0x1c0) returned 0x1 [0293.298] CloseHandle (hObject=0x1c0) returned 1 [0293.299] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0293.299] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313965.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313965.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa75a)) returned 1 [0293.299] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0293.299] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0293.299] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313965.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313965.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa75a)) returned 1 [0293.299] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0293.299] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0293.300] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0293.300] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x81ab, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0313970.JPG", cAlternateFileName="")) returned 1 [0293.300] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0293.300] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211fa8 [0293.300] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0293.300] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211fa8 | out: hHeap=0x1f0000) returned 1 [0293.300] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0293.300] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0293.301] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313970.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313970.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0293.301] GetFileType (hFile=0x1c0) returned 0x1 [0293.302] CloseHandle (hObject=0x1c0) returned 1 [0293.302] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0293.302] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313970.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313970.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x81ab)) returned 1 [0293.302] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0293.302] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0293.303] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313970.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313970.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x81ab)) returned 1 [0293.303] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0293.303] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0293.303] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0293.303] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb9d1, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0313974.JPG", cAlternateFileName="")) returned 1 [0293.303] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0293.303] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0293.303] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0293.303] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0293.303] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0293.304] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0293.304] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313974.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313974.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0293.305] GetFileType (hFile=0x1c0) returned 0x1 [0293.306] CloseHandle (hObject=0x1c0) returned 1 [0293.307] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0293.307] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313974.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313974.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb9d1)) returned 1 [0293.308] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0293.561] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0293.561] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313974.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313974.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb9d1)) returned 1 [0293.561] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0293.561] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0293.562] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0293.562] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x40f2, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0314068.JPG", cAlternateFileName="")) returned 1 [0293.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260518 [0293.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212828 [0293.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0293.562] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212828 | out: hHeap=0x1f0000) returned 1 [0293.562] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0293.562] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0293.563] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0314068.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0314068.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0293.602] GetFileType (hFile=0x198) returned 0x1 [0293.603] CloseHandle (hObject=0x198) returned 1 [0293.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0293.603] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0314068.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0314068.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x40f2)) returned 1 [0293.603] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0293.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0293.604] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0314068.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0314068.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x40f2)) returned 1 [0293.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0293.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0293.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0293.604] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b02, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0315580.JPG", cAlternateFileName="")) returned 1 [0293.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0293.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d88 [0293.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0293.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d88 | out: hHeap=0x1f0000) returned 1 [0293.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0293.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0293.605] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0315580.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0315580.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0293.606] GetFileType (hFile=0x198) returned 0x1 [0293.606] CloseHandle (hObject=0x198) returned 1 [0293.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0293.607] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0315580.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0315580.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b02)) returned 1 [0293.607] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0293.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0293.607] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0315580.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0315580.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b02)) returned 1 [0293.607] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0293.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0293.607] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0293.607] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x423a, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0315612.JPG", cAlternateFileName="")) returned 1 [0293.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0293.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211fa8 [0293.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0293.608] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211fa8 | out: hHeap=0x1f0000) returned 1 [0293.608] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0293.608] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0293.608] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0315612.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0315612.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0293.609] GetFileType (hFile=0x198) returned 0x1 [0293.609] CloseHandle (hObject=0x198) returned 1 [0293.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0293.609] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0315612.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0315612.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x423a)) returned 1 [0293.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0293.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0293.610] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0315612.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0315612.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x423a)) returned 1 [0293.610] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0293.610] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0293.610] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0293.610] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4180, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0318448.WMF", cAlternateFileName="")) returned 1 [0293.610] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609a0 [0293.610] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212828 [0293.610] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0293.610] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212828 | out: hHeap=0x1f0000) returned 1 [0293.610] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0293.610] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0293.611] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0318448.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0318448.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0293.611] GetFileType (hFile=0x198) returned 0x1 [0293.612] CloseHandle (hObject=0x198) returned 1 [0293.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0293.612] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0318448.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0318448.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4180)) returned 1 [0293.612] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0293.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0293.612] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0318448.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0318448.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4180)) returned 1 [0293.612] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0293.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0293.612] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0293.612] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2dfa, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0318804.WMF", cAlternateFileName="")) returned 1 [0293.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0293.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211f20 [0293.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0293.613] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211f20 | out: hHeap=0x1f0000) returned 1 [0293.613] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0293.613] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0293.613] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0318804.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0318804.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0293.613] GetFileType (hFile=0x198) returned 0x1 [0293.614] CloseHandle (hObject=0x198) returned 1 [0293.614] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0293.614] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0318804.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0318804.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2dfa)) returned 1 [0293.614] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0293.614] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0293.614] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0318804.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0318804.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2dfa)) returned 1 [0293.614] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0293.614] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0293.614] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0293.614] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x28be, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0318810.WMF", cAlternateFileName="")) returned 1 [0293.615] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0293.615] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211948 [0293.615] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0293.615] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211948 | out: hHeap=0x1f0000) returned 1 [0293.615] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0293.615] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0293.615] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0318810.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0318810.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0293.615] GetFileType (hFile=0x198) returned 0x1 [0293.616] CloseHandle (hObject=0x198) returned 1 [0293.616] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0293.616] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0318810.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0318810.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x28be)) returned 1 [0293.616] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0293.616] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0293.616] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0318810.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0318810.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x28be)) returned 1 [0293.616] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0293.616] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0293.616] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0293.617] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x24d7, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0321179.JPG", cAlternateFileName="")) returned 1 [0293.617] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0293.617] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d88 [0293.617] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0293.617] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d88 | out: hHeap=0x1f0000) returned 1 [0293.617] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0293.617] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0293.617] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0321179.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0321179.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0293.617] GetFileType (hFile=0x198) returned 0x1 [0293.618] CloseHandle (hObject=0x198) returned 1 [0293.618] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0293.618] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0321179.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0321179.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x24d7)) returned 1 [0293.618] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0293.618] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0293.619] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0321179.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0321179.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x24d7)) returned 1 [0293.619] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0293.619] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0293.619] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0293.619] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ff8, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0324694.WMF", cAlternateFileName="")) returned 1 [0293.619] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605b8 [0293.619] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2123e8 [0293.619] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0293.619] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2123e8 | out: hHeap=0x1f0000) returned 1 [0293.619] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0293.619] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0293.620] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0324694.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0324694.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0293.620] GetFileType (hFile=0x198) returned 0x1 [0293.621] CloseHandle (hObject=0x198) returned 1 [0293.622] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0293.622] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0324694.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0324694.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ff8)) returned 1 [0293.622] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0293.622] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0293.622] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0324694.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0324694.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ff8)) returned 1 [0293.622] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0293.622] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0293.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0293.623] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e7e, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0324704.WMF", cAlternateFileName="")) returned 1 [0293.623] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0293.623] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212828 [0293.623] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0293.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212828 | out: hHeap=0x1f0000) returned 1 [0293.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0293.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0293.624] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0324704.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0324704.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0293.624] GetFileType (hFile=0x198) returned 0x1 [0293.625] CloseHandle (hObject=0x198) returned 1 [0293.625] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0293.625] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0324704.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0324704.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e7e)) returned 1 [0293.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0293.625] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0293.626] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0324704.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0324704.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e7e)) returned 1 [0293.626] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0293.626] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0293.626] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0293.626] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3260, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0337280.JPG", cAlternateFileName="")) returned 1 [0293.626] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260518 [0293.626] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0293.626] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0293.626] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0293.626] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0293.627] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0293.627] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0337280.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0337280.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0293.627] GetFileType (hFile=0x198) returned 0x1 [0293.628] CloseHandle (hObject=0x198) returned 1 [0293.628] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0293.628] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0337280.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0337280.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3260)) returned 1 [0293.628] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0293.629] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0293.629] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0337280.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0337280.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3260)) returned 1 [0293.629] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0293.629] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0293.629] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0293.629] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27d4, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0341328.JPG", cAlternateFileName="")) returned 1 [0293.629] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0293.629] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212140 [0293.630] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0293.630] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212140 | out: hHeap=0x1f0000) returned 1 [0293.630] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0293.630] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0293.631] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341328.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341328.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0293.631] GetFileType (hFile=0x198) returned 0x1 [0293.631] CloseHandle (hObject=0x198) returned 1 [0293.632] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0293.632] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341328.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341328.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27d4)) returned 1 [0293.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0293.632] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0293.632] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341328.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341328.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27d4)) returned 1 [0293.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0293.633] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0293.633] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0293.633] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2cdd, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0341344.JPG", cAlternateFileName="")) returned 1 [0293.633] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0293.633] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2127a0 [0293.633] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0293.633] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2127a0 | out: hHeap=0x1f0000) returned 1 [0293.633] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0293.633] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0293.634] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341344.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341344.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0293.634] GetFileType (hFile=0x198) returned 0x1 [0293.635] CloseHandle (hObject=0x198) returned 1 [0293.635] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0293.635] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341344.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341344.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2cdd)) returned 1 [0293.636] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0293.636] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0293.636] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341344.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341344.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2cdd)) returned 1 [0293.636] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0293.636] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0293.636] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0294.021] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c6d, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0341439.JPG", cAlternateFileName="")) returned 1 [0294.021] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0294.022] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d00 [0294.022] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0294.022] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d00 | out: hHeap=0x1f0000) returned 1 [0294.022] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0294.022] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0294.023] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341439.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341439.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0294.175] GetFileType (hFile=0x1c0) returned 0x1 [0294.175] CloseHandle (hObject=0x1c0) returned 1 [0294.176] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0294.176] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341439.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341439.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c6d)) returned 1 [0294.176] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0294.177] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0294.177] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341439.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341439.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c6d)) returned 1 [0294.177] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0294.177] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0294.177] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0294.177] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ad8, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0341447.JPG", cAlternateFileName="")) returned 1 [0294.177] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0294.178] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212938 [0294.178] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0294.178] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212938 | out: hHeap=0x1f0000) returned 1 [0294.178] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0294.178] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0294.179] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341447.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341447.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0294.216] GetFileType (hFile=0x1c0) returned 0x1 [0294.217] CloseHandle (hObject=0x1c0) returned 1 [0294.217] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0294.217] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341447.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341447.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ad8)) returned 1 [0294.217] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0294.217] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0294.218] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341447.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341447.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ad8)) returned 1 [0294.218] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0294.218] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0294.218] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0294.218] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x52c3, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0341448.JPG", cAlternateFileName="")) returned 1 [0294.218] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0294.218] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0294.219] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0294.219] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0294.219] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0294.219] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0294.220] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341448.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341448.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0294.220] GetFileType (hFile=0x1c0) returned 0x1 [0294.221] CloseHandle (hObject=0x1c0) returned 1 [0294.221] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0294.221] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341448.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341448.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x52c3)) returned 1 [0294.221] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0294.222] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0294.222] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341448.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341448.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x52c3)) returned 1 [0294.222] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0294.222] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0294.222] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0294.222] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7457, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0341455.JPG", cAlternateFileName="")) returned 1 [0294.222] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0294.223] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2124f8 [0294.223] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0294.223] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2124f8 | out: hHeap=0x1f0000) returned 1 [0294.223] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0294.223] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0294.224] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341455.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341455.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0294.224] GetFileType (hFile=0x1c0) returned 0x1 [0294.225] CloseHandle (hObject=0x1c0) returned 1 [0294.225] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0294.226] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341455.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341455.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7457)) returned 1 [0294.226] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0294.226] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0294.226] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341455.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341455.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7457)) returned 1 [0294.226] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0294.226] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0294.226] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0294.227] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa9e2, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0341475.JPG", cAlternateFileName="")) returned 1 [0294.227] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0294.227] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212030 [0294.227] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0294.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212030 | out: hHeap=0x1f0000) returned 1 [0294.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0294.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0294.228] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341475.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341475.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0294.228] GetFileType (hFile=0x1c0) returned 0x1 [0294.229] CloseHandle (hObject=0x1c0) returned 1 [0294.229] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0294.230] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341475.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341475.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa9e2)) returned 1 [0294.230] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0294.230] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0294.230] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341475.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341475.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa9e2)) returned 1 [0294.231] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0294.231] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0294.231] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0294.231] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ee3, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0341499.JPG", cAlternateFileName="")) returned 1 [0294.231] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0294.231] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211f20 [0294.231] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0294.231] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211f20 | out: hHeap=0x1f0000) returned 1 [0294.232] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0294.232] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0294.232] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341499.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341499.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0294.233] GetFileType (hFile=0x1c0) returned 0x1 [0294.233] CloseHandle (hObject=0x1c0) returned 1 [0294.234] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0294.234] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341499.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341499.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ee3)) returned 1 [0294.234] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0294.234] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0294.234] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341499.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341499.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ee3)) returned 1 [0294.234] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0294.234] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0294.235] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0294.235] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f8a, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0341534.JPG", cAlternateFileName="")) returned 1 [0294.235] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0294.235] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0294.235] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0294.235] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0294.235] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0294.236] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0294.237] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341534.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341534.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0294.237] GetFileType (hFile=0x1c0) returned 0x1 [0294.237] CloseHandle (hObject=0x1c0) returned 1 [0294.237] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0294.238] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341534.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341534.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f8a)) returned 1 [0294.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0294.238] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0294.238] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341534.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341534.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f8a)) returned 1 [0294.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0294.238] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0294.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0294.238] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5a56, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0341551.JPG", cAlternateFileName="")) returned 1 [0294.238] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605b8 [0294.238] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2120b8 [0294.239] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0294.239] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2120b8 | out: hHeap=0x1f0000) returned 1 [0294.239] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0294.239] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0294.239] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341551.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341551.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0294.240] GetFileType (hFile=0x1c0) returned 0x1 [0294.240] CloseHandle (hObject=0x1c0) returned 1 [0294.240] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0294.240] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341551.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341551.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5a56)) returned 1 [0294.241] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0294.241] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0294.241] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341551.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341551.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5a56)) returned 1 [0294.241] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0294.241] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0294.241] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0294.241] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6f43, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0341554.JPG", cAlternateFileName="")) returned 1 [0294.241] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0294.241] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211a58 [0294.241] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0294.241] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211a58 | out: hHeap=0x1f0000) returned 1 [0294.242] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0294.242] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0294.242] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341554.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341554.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0294.242] GetFileType (hFile=0x1c0) returned 0x1 [0294.243] CloseHandle (hObject=0x1c0) returned 1 [0294.243] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0294.243] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341554.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341554.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6f43)) returned 1 [0294.243] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0294.244] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0294.244] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341554.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341554.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6f43)) returned 1 [0294.244] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0294.244] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0294.244] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0294.244] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6aa8, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0341557.JPG", cAlternateFileName="")) returned 1 [0294.244] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0294.244] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212828 [0294.244] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0294.244] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212828 | out: hHeap=0x1f0000) returned 1 [0294.245] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0294.245] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0294.245] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341557.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341557.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0294.246] GetFileType (hFile=0x1c0) returned 0x1 [0294.246] CloseHandle (hObject=0x1c0) returned 1 [0294.247] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0294.247] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341557.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341557.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6aa8)) returned 1 [0294.247] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0294.247] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0294.247] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341557.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341557.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6aa8)) returned 1 [0294.247] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0294.247] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0294.248] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0294.248] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6873, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0341559.JPG", cAlternateFileName="")) returned 1 [0294.248] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0294.248] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212470 [0294.248] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0294.248] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212470 | out: hHeap=0x1f0000) returned 1 [0294.248] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0294.248] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0294.249] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341559.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341559.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0294.250] GetFileType (hFile=0x1c0) returned 0x1 [0294.250] CloseHandle (hObject=0x1c0) returned 1 [0294.251] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0294.251] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341559.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341559.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6873)) returned 1 [0294.251] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0294.251] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0294.251] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341559.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341559.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6873)) returned 1 [0294.554] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0294.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0294.554] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0294.554] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa497, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0341561.JPG", cAlternateFileName="")) returned 1 [0294.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0294.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2128b0 [0294.555] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0294.555] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2128b0 | out: hHeap=0x1f0000) returned 1 [0294.555] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0294.555] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0294.555] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341561.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341561.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0294.556] GetFileType (hFile=0x1ac) returned 0x1 [0294.557] CloseHandle (hObject=0x1ac) returned 1 [0294.557] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0294.557] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341561.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341561.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa497)) returned 1 [0294.557] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0294.557] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0294.557] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341561.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341561.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa497)) returned 1 [0294.557] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0294.558] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0294.558] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0294.558] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e7b, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0341634.JPG", cAlternateFileName="")) returned 1 [0294.558] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260770 [0294.558] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211e10 [0294.558] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0294.558] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e10 | out: hHeap=0x1f0000) returned 1 [0294.558] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0294.558] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0294.559] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341634.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341634.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0294.559] GetFileType (hFile=0x1ac) returned 0x1 [0294.559] CloseHandle (hObject=0x1ac) returned 1 [0294.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0294.560] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341634.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341634.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e7b)) returned 1 [0294.560] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0294.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0294.560] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341634.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341634.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e7b)) returned 1 [0294.560] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0294.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0294.561] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0294.561] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3615, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0341636.JPG", cAlternateFileName="")) returned 1 [0294.561] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0294.561] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211ae0 [0294.561] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0294.561] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211ae0 | out: hHeap=0x1f0000) returned 1 [0294.561] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0294.561] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0294.562] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341636.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341636.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0294.562] GetFileType (hFile=0x1ac) returned 0x1 [0294.562] CloseHandle (hObject=0x1ac) returned 1 [0294.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0294.563] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341636.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341636.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3615)) returned 1 [0294.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0294.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0294.563] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341636.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341636.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3615)) returned 1 [0294.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0294.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0294.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0294.563] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2026, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0341645.JPG", cAlternateFileName="")) returned 1 [0294.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0294.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2129c0 [0294.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0294.564] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2129c0 | out: hHeap=0x1f0000) returned 1 [0294.564] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0294.564] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0294.565] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341645.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341645.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0294.565] GetFileType (hFile=0x1ac) returned 0x1 [0294.566] CloseHandle (hObject=0x1ac) returned 1 [0294.566] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0294.566] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341645.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341645.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2026)) returned 1 [0294.566] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0294.566] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0294.566] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341645.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341645.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2026)) returned 1 [0294.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0294.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0294.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0294.567] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3df7, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0341653.JPG", cAlternateFileName="")) returned 1 [0294.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260770 [0294.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212250 [0294.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0294.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212250 | out: hHeap=0x1f0000) returned 1 [0294.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0294.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0294.568] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341653.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341653.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0294.568] GetFileType (hFile=0x1ac) returned 0x1 [0294.568] CloseHandle (hObject=0x1ac) returned 1 [0294.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0294.569] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341653.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341653.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3df7)) returned 1 [0294.569] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0294.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0294.569] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341653.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341653.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3df7)) returned 1 [0294.569] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0294.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0294.569] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0294.570] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d7f, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0341654.JPG", cAlternateFileName="")) returned 1 [0294.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0294.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d00 [0294.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0294.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d00 | out: hHeap=0x1f0000) returned 1 [0294.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0294.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0294.571] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341654.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341654.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0294.572] GetFileType (hFile=0x1ac) returned 0x1 [0294.572] CloseHandle (hObject=0x1ac) returned 1 [0294.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0294.573] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341654.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341654.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d7f)) returned 1 [0294.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0294.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0294.573] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341654.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341654.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d7f)) returned 1 [0294.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0294.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0294.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0294.574] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ec6, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0341738.JPG", cAlternateFileName="")) returned 1 [0294.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0294.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2128b0 [0294.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0294.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2128b0 | out: hHeap=0x1f0000) returned 1 [0294.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0294.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0294.575] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341738.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341738.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0294.576] GetFileType (hFile=0x1ac) returned 0x1 [0294.576] CloseHandle (hObject=0x1ac) returned 1 [0294.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0294.577] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341738.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341738.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ec6)) returned 1 [0294.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0294.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0294.577] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341738.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341738.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ec6)) returned 1 [0294.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0294.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0294.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0294.577] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x49ba, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0341742.JPG", cAlternateFileName="")) returned 1 [0294.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0294.578] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211c78 [0294.578] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0294.578] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211c78 | out: hHeap=0x1f0000) returned 1 [0294.578] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0294.578] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0294.578] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341742.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341742.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0294.579] GetFileType (hFile=0x1ac) returned 0x1 [0294.579] CloseHandle (hObject=0x1ac) returned 1 [0294.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0294.580] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341742.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341742.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x49ba)) returned 1 [0294.580] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0294.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0294.580] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341742.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341742.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x49ba)) returned 1 [0294.580] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0294.581] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0294.581] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0294.581] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10bdc, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0382836.JPG", cAlternateFileName="")) returned 1 [0294.581] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0294.581] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211f20 [0294.581] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0294.581] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211f20 | out: hHeap=0x1f0000) returned 1 [0294.581] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0294.581] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0294.582] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382836.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382836.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0294.582] GetFileType (hFile=0x1ac) returned 0x1 [0294.582] CloseHandle (hObject=0x1ac) returned 1 [0294.583] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0294.583] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382836.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382836.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10bdc)) returned 1 [0294.583] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0294.583] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0294.583] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382836.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382836.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10bdc)) returned 1 [0294.583] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0294.584] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0294.584] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0294.584] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ce5a, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0382925.JPG", cAlternateFileName="")) returned 1 [0294.584] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0294.584] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2119d0 [0294.584] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0294.584] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2119d0 | out: hHeap=0x1f0000) returned 1 [0294.584] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0294.584] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0294.585] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382925.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382925.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0294.599] GetFileType (hFile=0x1ac) returned 0x1 [0294.599] CloseHandle (hObject=0x1ac) returned 1 [0294.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0294.600] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382925.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382925.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ce5a)) returned 1 [0294.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0294.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0294.600] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382925.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382925.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ce5a)) returned 1 [0294.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0294.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0294.601] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0294.601] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1672c, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0382926.JPG", cAlternateFileName="")) returned 1 [0294.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0294.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d00 [0294.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0294.601] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d00 | out: hHeap=0x1f0000) returned 1 [0294.601] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0294.601] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0294.601] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382926.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382926.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0294.602] GetFileType (hFile=0x1ac) returned 0x1 [0294.602] CloseHandle (hObject=0x1ac) returned 1 [0294.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0294.602] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382926.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382926.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1672c)) returned 1 [0294.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0294.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0294.602] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382926.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382926.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1672c)) returned 1 [0294.603] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0294.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0294.603] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0294.603] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf49f727, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf49f727, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f86c, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0382927.JPG", cAlternateFileName="")) returned 1 [0294.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0294.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2129c0 [0294.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0294.603] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2129c0 | out: hHeap=0x1f0000) returned 1 [0294.603] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0294.603] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0294.603] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382927.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382927.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0294.604] GetFileType (hFile=0x1ac) returned 0x1 [0294.604] CloseHandle (hObject=0x1ac) returned 1 [0294.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0294.604] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382927.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382927.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf49f727, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf49f727, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f86c)) returned 1 [0294.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0294.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0294.605] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382927.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382927.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf49f727, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf49f727, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f86c)) returned 1 [0294.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0294.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0294.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0294.605] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b83a, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0382930.JPG", cAlternateFileName="")) returned 1 [0294.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0294.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212828 [0294.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0294.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212828 | out: hHeap=0x1f0000) returned 1 [0294.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0294.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0294.606] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382930.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382930.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0294.606] GetFileType (hFile=0x1ac) returned 0x1 [0294.606] CloseHandle (hObject=0x1ac) returned 1 [0294.606] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0294.607] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382930.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382930.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b83a)) returned 1 [0294.607] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0294.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0294.607] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382930.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382930.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b83a)) returned 1 [0294.607] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0294.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0294.607] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0294.607] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1df43, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0382931.JPG", cAlternateFileName="")) returned 1 [0294.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260888 [0294.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211bf0 [0294.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0294.608] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211bf0 | out: hHeap=0x1f0000) returned 1 [0294.608] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0294.608] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0294.608] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382931.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382931.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0294.608] GetFileType (hFile=0x1ac) returned 0x1 [0294.609] CloseHandle (hObject=0x1ac) returned 1 [0294.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0294.609] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382931.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382931.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1df43)) returned 1 [0294.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0294.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0294.609] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382931.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382931.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1df43)) returned 1 [0294.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0294.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0294.610] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0294.610] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x184d3, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0382938.JPG", cAlternateFileName="")) returned 1 [0294.610] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0294.610] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212140 [0294.610] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0294.610] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212140 | out: hHeap=0x1f0000) returned 1 [0294.610] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0294.610] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0294.611] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382938.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382938.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0295.004] GetFileType (hFile=0x1ac) returned 0x1 [0295.005] CloseHandle (hObject=0x1ac) returned 1 [0295.005] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0295.005] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382938.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382938.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x184d3)) returned 1 [0295.005] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0295.006] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0295.006] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382938.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382938.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x184d3)) returned 1 [0295.006] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0295.006] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0295.006] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0295.006] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1aba5, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0382939.JPG", cAlternateFileName="")) returned 1 [0295.006] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0295.006] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212140 [0295.006] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0295.006] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212140 | out: hHeap=0x1f0000) returned 1 [0295.006] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0295.007] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0295.007] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382939.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382939.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0295.008] GetFileType (hFile=0x1ac) returned 0x1 [0295.008] CloseHandle (hObject=0x1ac) returned 1 [0295.008] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0295.008] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382939.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382939.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1aba5)) returned 1 [0295.009] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0295.009] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0295.009] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382939.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382939.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1aba5)) returned 1 [0295.009] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0295.009] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0295.009] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0295.009] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1653a, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0382942.JPG", cAlternateFileName="")) returned 1 [0295.010] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0295.010] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2120b8 [0295.010] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0295.010] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2120b8 | out: hHeap=0x1f0000) returned 1 [0295.010] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0295.010] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0295.011] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382942.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382942.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0295.011] GetFileType (hFile=0x1ac) returned 0x1 [0295.012] CloseHandle (hObject=0x1ac) returned 1 [0295.012] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0295.012] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382942.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382942.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1653a)) returned 1 [0295.013] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0295.013] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0295.013] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382942.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382942.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1653a)) returned 1 [0295.013] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0295.013] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0295.013] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0295.013] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf49f727, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf49f727, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13e1d, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0382944.JPG", cAlternateFileName="")) returned 1 [0295.013] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0295.014] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212030 [0295.014] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0295.014] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212030 | out: hHeap=0x1f0000) returned 1 [0295.014] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0295.014] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0295.015] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382944.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382944.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0295.015] GetFileType (hFile=0x1ac) returned 0x1 [0295.015] CloseHandle (hObject=0x1ac) returned 1 [0295.016] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0295.016] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382944.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382944.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf49f727, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf49f727, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13e1d)) returned 1 [0295.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0295.016] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0295.016] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382944.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382944.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf49f727, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf49f727, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13e1d)) returned 1 [0295.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0295.017] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0295.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0295.017] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1531c, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0382947.JPG", cAlternateFileName="")) returned 1 [0295.017] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0295.017] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211ae0 [0295.018] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0295.018] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211ae0 | out: hHeap=0x1f0000) returned 1 [0295.018] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0295.018] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0295.019] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382947.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382947.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0295.019] GetFileType (hFile=0x1ac) returned 0x1 [0295.019] CloseHandle (hObject=0x1ac) returned 1 [0295.020] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0295.020] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382947.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382947.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1531c)) returned 1 [0295.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0295.020] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0295.020] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382947.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382947.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1531c)) returned 1 [0295.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0295.020] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0295.021] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0295.021] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ad37, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0382948.JPG", cAlternateFileName="")) returned 1 [0295.021] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0295.021] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212470 [0295.021] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0295.021] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212470 | out: hHeap=0x1f0000) returned 1 [0295.021] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0295.021] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0295.022] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382948.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382948.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0295.022] GetFileType (hFile=0x1ac) returned 0x1 [0295.022] CloseHandle (hObject=0x1ac) returned 1 [0295.023] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0295.023] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382948.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382948.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ad37)) returned 1 [0295.023] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0295.023] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0295.023] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382948.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382948.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ad37)) returned 1 [0295.023] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0295.023] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0295.023] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0295.023] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x178d2, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0382950.JPG", cAlternateFileName="")) returned 1 [0295.024] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0295.024] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0295.024] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0295.024] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0295.024] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0295.024] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0295.025] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382950.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382950.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0295.025] GetFileType (hFile=0x1ac) returned 0x1 [0295.025] CloseHandle (hObject=0x1ac) returned 1 [0295.026] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0295.026] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382950.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382950.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x178d2)) returned 1 [0295.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0295.026] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0295.026] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382950.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382950.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x178d2)) returned 1 [0295.027] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0295.027] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0295.027] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0295.027] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17749, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0382952.JPG", cAlternateFileName="")) returned 1 [0295.027] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0295.027] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212360 [0295.027] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0295.027] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212360 | out: hHeap=0x1f0000) returned 1 [0295.027] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0295.027] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0295.028] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382952.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382952.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0295.028] GetFileType (hFile=0x1ac) returned 0x1 [0295.029] CloseHandle (hObject=0x1ac) returned 1 [0295.029] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0295.029] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382952.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382952.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17749)) returned 1 [0295.029] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0295.029] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0295.030] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382952.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382952.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17749)) returned 1 [0295.030] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0295.030] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0295.030] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0295.030] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x110c9494, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x110c9494, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110ef705, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15a7f, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0382954.JPG", cAlternateFileName="")) returned 1 [0295.030] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0295.030] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211e98 [0295.030] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0295.030] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e98 | out: hHeap=0x1f0000) returned 1 [0295.030] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0295.031] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0295.031] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382954.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382954.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0295.032] GetFileType (hFile=0x1ac) returned 0x1 [0295.033] CloseHandle (hObject=0x1ac) returned 1 [0295.034] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0295.034] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382954.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382954.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x110c9494, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x110c9494, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110ef705, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15a7f)) returned 1 [0295.034] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0295.034] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0295.034] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382954.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382954.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x110c9494, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x110c9494, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110ef705, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15a7f)) returned 1 [0295.034] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0295.034] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0295.035] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0295.035] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15fef, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0382955.JPG", cAlternateFileName="")) returned 1 [0295.035] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0295.035] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211b68 [0295.035] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0295.035] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b68 | out: hHeap=0x1f0000) returned 1 [0295.035] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0295.035] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0295.036] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382955.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382955.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0295.036] GetFileType (hFile=0x1ac) returned 0x1 [0295.037] CloseHandle (hObject=0x1ac) returned 1 [0295.037] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0295.037] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382955.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382955.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15fef)) returned 1 [0295.037] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0295.038] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0295.038] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382955.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382955.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15fef)) returned 1 [0295.038] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0295.038] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0295.038] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0295.038] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a9ed, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0382957.JPG", cAlternateFileName="")) returned 1 [0295.038] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0295.038] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2123e8 [0295.039] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0295.039] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2123e8 | out: hHeap=0x1f0000) returned 1 [0295.039] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0295.039] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0295.040] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382957.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382957.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0295.040] GetFileType (hFile=0x1ac) returned 0x1 [0295.040] CloseHandle (hObject=0x1ac) returned 1 [0295.041] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0295.041] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382957.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382957.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a9ed)) returned 1 [0295.041] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0295.041] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0295.041] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382957.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382957.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a9ed)) returned 1 [0295.042] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0295.042] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0295.042] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0295.042] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x193e7, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0382958.JPG", cAlternateFileName="")) returned 1 [0295.042] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0295.042] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212470 [0295.042] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0295.043] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212470 | out: hHeap=0x1f0000) returned 1 [0295.043] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0295.043] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0295.044] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382958.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382958.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0295.044] GetFileType (hFile=0x1ac) returned 0x1 [0295.044] CloseHandle (hObject=0x1ac) returned 1 [0295.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0295.045] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382958.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382958.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x193e7)) returned 1 [0295.045] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0295.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0295.045] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382958.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382958.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x193e7)) returned 1 [0295.046] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0295.046] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0295.046] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0295.046] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14f8a, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0382959.JPG", cAlternateFileName="")) returned 1 [0295.046] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0295.046] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212030 [0295.046] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0295.047] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212030 | out: hHeap=0x1f0000) returned 1 [0295.047] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0295.047] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0295.048] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382959.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382959.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0295.636] GetFileType (hFile=0x198) returned 0x1 [0295.636] CloseHandle (hObject=0x198) returned 1 [0295.636] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0295.637] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382959.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382959.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14f8a)) returned 1 [0295.637] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0295.637] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0295.637] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382959.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382959.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14f8a)) returned 1 [0295.637] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0295.637] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0295.637] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0295.638] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a3f4, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0382960.JPG", cAlternateFileName="")) returned 1 [0295.638] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0295.638] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0295.638] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0295.638] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0295.638] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0295.638] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0295.639] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382960.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382960.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0295.639] GetFileType (hFile=0x198) returned 0x1 [0295.639] CloseHandle (hObject=0x198) returned 1 [0295.640] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0295.640] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382960.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382960.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a3f4)) returned 1 [0295.640] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0295.640] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0295.640] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382960.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382960.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a3f4)) returned 1 [0295.641] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0295.641] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0295.641] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0295.641] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18ac4, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0382961.JPG", cAlternateFileName="")) returned 1 [0295.641] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0295.641] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211ae0 [0295.641] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0295.641] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211ae0 | out: hHeap=0x1f0000) returned 1 [0295.641] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0295.641] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0295.642] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382961.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382961.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0295.644] GetFileType (hFile=0x198) returned 0x1 [0295.644] CloseHandle (hObject=0x198) returned 1 [0295.644] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0295.645] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382961.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382961.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18ac4)) returned 1 [0295.645] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0295.645] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0295.645] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382961.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382961.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18ac4)) returned 1 [0295.645] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0295.645] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0295.645] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0295.645] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bef7, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0382962.JPG", cAlternateFileName="")) returned 1 [0295.645] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0295.646] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d00 [0295.646] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0295.646] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d00 | out: hHeap=0x1f0000) returned 1 [0295.646] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0295.646] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0295.646] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382962.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382962.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0295.647] GetFileType (hFile=0x198) returned 0x1 [0295.647] CloseHandle (hObject=0x198) returned 1 [0295.647] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0295.647] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382962.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382962.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bef7)) returned 1 [0295.647] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0295.648] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0295.648] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382962.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382962.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bef7)) returned 1 [0295.648] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0295.648] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0295.648] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0295.648] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17dee, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0382963.JPG", cAlternateFileName="")) returned 1 [0295.648] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0295.648] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0295.648] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0295.648] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0295.649] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0295.649] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0295.649] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382963.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382963.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0295.650] GetFileType (hFile=0x198) returned 0x1 [0295.650] CloseHandle (hObject=0x198) returned 1 [0295.650] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0295.650] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382963.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382963.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17dee)) returned 1 [0295.651] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0295.651] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0295.651] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382963.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382963.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17dee)) returned 1 [0295.651] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0295.651] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0295.651] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0295.651] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bb02, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0382965.JPG", cAlternateFileName="")) returned 1 [0295.651] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260888 [0295.651] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211bf0 [0295.651] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0295.652] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211bf0 | out: hHeap=0x1f0000) returned 1 [0295.652] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0295.652] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0295.652] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382965.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382965.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0295.653] GetFileType (hFile=0x198) returned 0x1 [0295.653] CloseHandle (hObject=0x198) returned 1 [0295.653] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0295.653] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382965.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382965.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bb02)) returned 1 [0295.653] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0295.653] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0295.653] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382965.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382965.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bb02)) returned 1 [0295.653] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0295.653] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0295.654] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0295.654] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18888, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0382966.JPG", cAlternateFileName="")) returned 1 [0295.654] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0295.654] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d88 [0295.654] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0295.654] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d88 | out: hHeap=0x1f0000) returned 1 [0295.654] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0295.654] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0295.654] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382966.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382966.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0295.655] GetFileType (hFile=0x198) returned 0x1 [0295.655] CloseHandle (hObject=0x198) returned 1 [0295.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0295.655] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382966.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382966.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18888)) returned 1 [0295.655] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0295.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0295.656] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382966.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382966.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18888)) returned 1 [0295.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0295.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0295.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0295.656] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16d08, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0382967.JPG", cAlternateFileName="")) returned 1 [0295.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0295.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d88 [0295.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0295.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d88 | out: hHeap=0x1f0000) returned 1 [0295.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0295.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0295.657] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382967.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382967.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0295.657] GetFileType (hFile=0x198) returned 0x1 [0295.658] CloseHandle (hObject=0x198) returned 1 [0295.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0295.658] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382967.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382967.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16d08)) returned 1 [0295.659] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0295.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0295.659] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382967.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382967.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16d08)) returned 1 [0295.659] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0295.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0295.659] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0295.659] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b75f, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0382968.JPG", cAlternateFileName="")) returned 1 [0295.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0295.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2119d0 [0295.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0295.659] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2119d0 | out: hHeap=0x1f0000) returned 1 [0295.660] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0295.660] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0295.660] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382968.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382968.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0295.660] GetFileType (hFile=0x198) returned 0x1 [0295.661] CloseHandle (hObject=0x198) returned 1 [0295.661] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0295.661] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382968.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382968.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b75f)) returned 1 [0295.661] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0295.661] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0295.661] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382968.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382968.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b75f)) returned 1 [0295.661] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0295.661] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0295.661] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0295.662] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1779f, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0382969.JPG", cAlternateFileName="")) returned 1 [0295.662] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0295.662] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212140 [0295.662] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0295.662] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212140 | out: hHeap=0x1f0000) returned 1 [0295.662] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0295.662] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0295.662] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382969.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382969.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0295.663] GetFileType (hFile=0x198) returned 0x1 [0295.663] CloseHandle (hObject=0x198) returned 1 [0295.663] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0295.663] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382969.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382969.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1779f)) returned 1 [0295.663] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0295.664] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0295.664] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382969.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382969.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1779f)) returned 1 [0295.664] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0295.664] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0295.664] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0295.664] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15b94, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0382970.JPG", cAlternateFileName="")) returned 1 [0295.664] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0295.664] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211ae0 [0295.664] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0295.664] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211ae0 | out: hHeap=0x1f0000) returned 1 [0295.664] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0295.664] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0295.665] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382970.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382970.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0295.665] GetFileType (hFile=0x198) returned 0x1 [0295.665] CloseHandle (hObject=0x198) returned 1 [0295.666] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0295.666] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382970.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382970.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15b94)) returned 1 [0295.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0295.667] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0295.667] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382970.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382970.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15b94)) returned 1 [0295.667] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0295.667] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0295.667] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0295.667] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x190e9, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0384862.JPG", cAlternateFileName="")) returned 1 [0295.667] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0295.667] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211b68 [0295.667] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0295.667] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b68 | out: hHeap=0x1f0000) returned 1 [0295.667] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0295.667] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0295.668] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384862.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384862.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0295.668] GetFileType (hFile=0x198) returned 0x1 [0295.668] CloseHandle (hObject=0x198) returned 1 [0295.669] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0295.669] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384862.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384862.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x190e9)) returned 1 [0295.669] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0295.669] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0295.669] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384862.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384862.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x190e9)) returned 1 [0295.669] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0295.669] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0295.669] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0295.669] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17b79, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0384885.JPG", cAlternateFileName="")) returned 1 [0295.669] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0295.669] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2124f8 [0295.669] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0295.670] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2124f8 | out: hHeap=0x1f0000) returned 1 [0295.670] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0295.670] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0295.670] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384885.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384885.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0295.670] GetFileType (hFile=0x198) returned 0x1 [0295.671] CloseHandle (hObject=0x198) returned 1 [0295.671] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0295.671] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384885.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384885.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17b79)) returned 1 [0295.671] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0295.672] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0295.672] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384885.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384885.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17b79)) returned 1 [0295.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0295.672] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0295.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0295.672] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14033, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0384888.JPG", cAlternateFileName="")) returned 1 [0295.672] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0295.672] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211e98 [0295.672] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0295.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e98 | out: hHeap=0x1f0000) returned 1 [0295.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0295.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0295.673] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384888.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384888.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0296.069] GetFileType (hFile=0x198) returned 0x1 [0296.069] CloseHandle (hObject=0x198) returned 1 [0296.069] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0296.069] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384888.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384888.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14033)) returned 1 [0296.070] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0296.070] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0296.070] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384888.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384888.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14033)) returned 1 [0296.070] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0296.070] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0296.070] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0296.070] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd8f6, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0384895.JPG", cAlternateFileName="")) returned 1 [0296.071] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0296.071] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212938 [0296.071] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0296.071] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212938 | out: hHeap=0x1f0000) returned 1 [0296.071] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0296.071] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0296.072] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384895.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384895.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0296.072] GetFileType (hFile=0x198) returned 0x1 [0296.073] CloseHandle (hObject=0x198) returned 1 [0296.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0296.073] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384895.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384895.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd8f6)) returned 1 [0296.074] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0296.074] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0296.074] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384895.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384895.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd8f6)) returned 1 [0296.074] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0296.074] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0296.074] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0296.074] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11780, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0384900.JPG", cAlternateFileName="")) returned 1 [0296.075] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0296.075] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212360 [0296.075] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0296.075] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212360 | out: hHeap=0x1f0000) returned 1 [0296.075] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0296.075] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0296.076] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384900.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384900.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0296.076] GetFileType (hFile=0x198) returned 0x1 [0296.076] CloseHandle (hObject=0x198) returned 1 [0296.077] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0296.077] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384900.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384900.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11780)) returned 1 [0296.077] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0296.077] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0296.077] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384900.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384900.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11780)) returned 1 [0296.078] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0296.078] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0296.078] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0296.078] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x787a, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0386120.JPG", cAlternateFileName="")) returned 1 [0296.078] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0296.078] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0296.078] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0296.078] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0296.078] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0296.078] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0296.079] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386120.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386120.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0296.331] GetFileType (hFile=0x1ac) returned 0x1 [0296.331] CloseHandle (hObject=0x1ac) returned 1 [0296.331] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0296.332] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386120.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386120.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x787a)) returned 1 [0296.332] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0296.332] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0296.332] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386120.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386120.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x787a)) returned 1 [0296.332] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0296.332] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0296.332] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0296.332] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa91e, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0386267.JPG", cAlternateFileName="")) returned 1 [0296.332] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0296.332] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211fa8 [0296.333] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0296.333] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211fa8 | out: hHeap=0x1f0000) returned 1 [0296.333] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0296.333] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0296.333] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386267.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386267.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0296.333] GetFileType (hFile=0x1ac) returned 0x1 [0296.334] CloseHandle (hObject=0x1ac) returned 1 [0296.334] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0296.334] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386267.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386267.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa91e)) returned 1 [0296.334] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0296.334] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0296.334] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386267.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386267.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa91e)) returned 1 [0296.334] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0296.334] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0296.335] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0296.335] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b43, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0386270.JPG", cAlternateFileName="")) returned 1 [0296.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0296.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211b68 [0296.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0296.335] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b68 | out: hHeap=0x1f0000) returned 1 [0296.335] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0296.335] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0296.335] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386270.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386270.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0296.336] GetFileType (hFile=0x1ac) returned 0x1 [0296.336] CloseHandle (hObject=0x1ac) returned 1 [0296.336] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0296.336] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386270.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386270.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b43)) returned 1 [0296.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0296.336] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0296.336] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386270.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386270.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b43)) returned 1 [0296.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0296.337] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0296.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0296.337] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x396a, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0386485.JPG", cAlternateFileName="")) returned 1 [0296.337] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0296.337] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2119d0 [0296.337] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0296.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2119d0 | out: hHeap=0x1f0000) returned 1 [0296.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0296.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0296.338] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386485.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386485.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0296.338] GetFileType (hFile=0x1ac) returned 0x1 [0296.338] CloseHandle (hObject=0x1ac) returned 1 [0296.338] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0296.338] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386485.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386485.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x396a)) returned 1 [0296.339] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0296.339] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0296.339] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386485.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386485.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x396a)) returned 1 [0296.339] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0296.339] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0296.339] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0296.339] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x693e, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0386764.JPG", cAlternateFileName="")) returned 1 [0296.339] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0296.339] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212140 [0296.339] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0296.339] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212140 | out: hHeap=0x1f0000) returned 1 [0296.339] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0296.339] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0296.340] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386764.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386764.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0296.340] GetFileType (hFile=0x1ac) returned 0x1 [0296.340] CloseHandle (hObject=0x1ac) returned 1 [0296.341] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0296.341] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386764.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386764.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x693e)) returned 1 [0296.341] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0296.341] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0296.341] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386764.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386764.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x693e)) returned 1 [0296.341] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0296.341] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0296.341] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0296.341] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcb0a, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0387337.JPG", cAlternateFileName="")) returned 1 [0296.341] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0296.341] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212140 [0296.341] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0296.341] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212140 | out: hHeap=0x1f0000) returned 1 [0296.342] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0296.342] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0296.342] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387337.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387337.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0296.342] GetFileType (hFile=0x1ac) returned 0x1 [0296.343] CloseHandle (hObject=0x1ac) returned 1 [0296.343] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0296.343] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387337.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387337.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcb0a)) returned 1 [0296.343] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0296.343] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0296.343] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387337.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387337.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcb0a)) returned 1 [0296.343] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0296.343] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0296.343] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0296.344] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6cec, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0387578.JPG", cAlternateFileName="")) returned 1 [0296.344] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0296.344] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211fa8 [0296.344] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0296.344] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211fa8 | out: hHeap=0x1f0000) returned 1 [0296.344] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0296.344] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0296.345] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387578.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387578.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0296.345] GetFileType (hFile=0x1ac) returned 0x1 [0296.345] CloseHandle (hObject=0x1ac) returned 1 [0296.346] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0296.346] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387578.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387578.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6cec)) returned 1 [0296.346] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0296.346] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0296.346] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387578.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387578.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6cec)) returned 1 [0296.346] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0296.346] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0296.346] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0296.346] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x98c7, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0387591.JPG", cAlternateFileName="")) returned 1 [0296.346] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260838 [0296.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212030 [0296.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0296.347] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212030 | out: hHeap=0x1f0000) returned 1 [0296.347] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0296.347] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260838 | out: hHeap=0x1f0000) returned 1 [0296.347] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387591.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387591.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0296.347] GetFileType (hFile=0x1ac) returned 0x1 [0296.348] CloseHandle (hObject=0x1ac) returned 1 [0296.348] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0296.348] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387591.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387591.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x98c7)) returned 1 [0296.348] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0296.348] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0296.348] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387591.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387591.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x98c7)) returned 1 [0296.348] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0296.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0296.349] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0296.349] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb9bf, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0387604.JPG", cAlternateFileName="")) returned 1 [0296.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0296.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211b68 [0296.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0296.349] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b68 | out: hHeap=0x1f0000) returned 1 [0296.349] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0296.349] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0296.350] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387604.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387604.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0296.350] GetFileType (hFile=0x1ac) returned 0x1 [0296.350] CloseHandle (hObject=0x1ac) returned 1 [0296.350] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0296.350] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387604.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387604.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb9bf)) returned 1 [0296.350] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0296.351] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0296.351] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387604.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387604.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb9bf)) returned 1 [0296.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0296.351] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0296.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0296.351] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x98ec, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0387882.JPG", cAlternateFileName="")) returned 1 [0296.351] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0296.351] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212140 [0296.351] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0296.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212140 | out: hHeap=0x1f0000) returned 1 [0296.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0296.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0296.352] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387882.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387882.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0296.352] GetFileType (hFile=0x1ac) returned 0x1 [0296.353] CloseHandle (hObject=0x1ac) returned 1 [0296.353] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0296.353] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387882.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387882.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x98ec)) returned 1 [0296.353] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0296.353] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0296.353] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387882.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387882.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x98ec)) returned 1 [0296.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0296.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0296.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0296.354] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7df3, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0387895.JPG", cAlternateFileName="")) returned 1 [0296.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0296.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0296.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0296.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0296.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0296.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0296.355] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387895.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387895.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0296.355] GetFileType (hFile=0x1ac) returned 0x1 [0296.356] CloseHandle (hObject=0x1ac) returned 1 [0296.356] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0296.356] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387895.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387895.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7df3)) returned 1 [0296.356] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0296.356] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0296.356] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387895.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387895.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7df3)) returned 1 [0296.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0296.357] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0296.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0296.357] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x351c, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0390072.JPG", cAlternateFileName="")) returned 1 [0296.357] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0296.357] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0296.357] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0296.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0296.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0296.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0296.358] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0390072.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0390072.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0296.358] GetFileType (hFile=0x1ac) returned 0x1 [0296.359] CloseHandle (hObject=0x1ac) returned 1 [0296.359] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0296.359] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0390072.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0390072.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x351c)) returned 1 [0296.360] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0296.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0296.360] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0390072.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0390072.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x351c)) returned 1 [0296.360] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0296.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0296.360] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0296.360] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31883, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0400001.PNG", cAlternateFileName="")) returned 1 [0296.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260518 [0296.361] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2129c0 [0296.361] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0296.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2129c0 | out: hHeap=0x1f0000) returned 1 [0296.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0296.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0296.363] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400001.PNG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400001.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0296.363] GetFileType (hFile=0x1ac) returned 0x1 [0296.363] CloseHandle (hObject=0x1ac) returned 1 [0296.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0296.364] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400001.PNG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400001.png"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31883)) returned 1 [0296.364] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0296.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0296.364] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400001.PNG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400001.png"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31883)) returned 1 [0296.364] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0296.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0296.364] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0296.364] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15d49, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0400002.PNG", cAlternateFileName="")) returned 1 [0296.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0296.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2120b8 [0296.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0296.365] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2120b8 | out: hHeap=0x1f0000) returned 1 [0296.365] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0296.365] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0296.365] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400002.PNG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400002.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0296.366] GetFileType (hFile=0x1ac) returned 0x1 [0296.366] CloseHandle (hObject=0x1ac) returned 1 [0296.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0296.688] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400002.PNG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400002.png"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15d49)) returned 1 [0296.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0296.689] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0296.689] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400002.PNG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400002.png"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15d49)) returned 1 [0296.689] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0296.689] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0296.689] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0296.690] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e836, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0400003.PNG", cAlternateFileName="")) returned 1 [0296.878] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0296.878] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2123e8 [0296.878] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0296.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2123e8 | out: hHeap=0x1f0000) returned 1 [0296.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0296.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0296.925] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400003.PNG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400003.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0296.926] GetFileType (hFile=0x1ac) returned 0x1 [0296.926] CloseHandle (hObject=0x1ac) returned 1 [0296.927] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0296.927] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400003.PNG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400003.png"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e836)) returned 1 [0296.927] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0296.927] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0296.927] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400003.PNG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400003.png"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e836)) returned 1 [0296.928] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0296.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0296.928] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0296.928] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19a5d, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0400004.PNG", cAlternateFileName="")) returned 1 [0296.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0296.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0296.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0296.928] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0296.929] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0296.929] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0296.929] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400004.PNG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400004.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0296.930] GetFileType (hFile=0x1ac) returned 0x1 [0296.930] CloseHandle (hObject=0x1ac) returned 1 [0296.931] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0296.931] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400004.PNG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400004.png"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19a5d)) returned 1 [0296.931] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0296.931] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0296.931] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400004.PNG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400004.png"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19a5d)) returned 1 [0296.931] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0296.931] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0296.932] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0296.932] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17742, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="J0400005.PNG", cAlternateFileName="")) returned 1 [0296.932] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0296.932] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2123e8 [0296.932] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0296.932] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2123e8 | out: hHeap=0x1f0000) returned 1 [0296.932] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0296.932] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0296.933] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400005.PNG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400005.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0296.934] GetFileType (hFile=0x1ac) returned 0x1 [0296.934] CloseHandle (hObject=0x1ac) returned 1 [0296.935] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0296.935] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400005.PNG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400005.png"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17742)) returned 1 [0296.935] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0296.935] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0296.935] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400005.PNG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400005.png"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17742)) returned 1 [0296.936] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0296.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0296.936] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0296.936] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2645, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="JAVA_01.MID", cAlternateFileName="")) returned 1 [0296.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0296.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211ae0 [0296.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0296.937] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211ae0 | out: hHeap=0x1f0000) returned 1 [0296.937] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0296.937] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0296.938] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JAVA_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\java_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0296.938] GetFileType (hFile=0x1ac) returned 0x1 [0296.939] CloseHandle (hObject=0x1ac) returned 1 [0296.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0296.940] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JAVA_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\java_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2645)) returned 1 [0296.940] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0296.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0296.940] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JAVA_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\java_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2645)) returned 1 [0296.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0296.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0296.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0296.941] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16d3, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="JNGLE_01.MID", cAlternateFileName="")) returned 1 [0296.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609a0 [0296.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211ae0 [0296.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0296.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211ae0 | out: hHeap=0x1f0000) returned 1 [0296.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0296.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0296.942] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JNGLE_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\jngle_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0296.943] GetFileType (hFile=0x1ac) returned 0x1 [0296.943] CloseHandle (hObject=0x1ac) returned 1 [0296.944] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0296.944] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JNGLE_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\jngle_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16d3)) returned 1 [0296.944] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0296.944] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0296.944] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JNGLE_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\jngle_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16d3)) returned 1 [0296.944] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0296.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0296.945] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0296.945] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15f6, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="MP00021_.WMF", cAlternateFileName="")) returned 1 [0296.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260770 [0296.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2127a0 [0296.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0296.945] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2127a0 | out: hHeap=0x1f0000) returned 1 [0296.945] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0296.946] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0296.946] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MP00021_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\mp00021_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0296.947] GetFileType (hFile=0x1ac) returned 0x1 [0296.947] CloseHandle (hObject=0x1ac) returned 1 [0296.948] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0296.948] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MP00021_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\mp00021_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15f6)) returned 1 [0296.948] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0296.948] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0296.948] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MP00021_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\mp00021_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15f6)) returned 1 [0296.948] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0296.948] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0296.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0296.949] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1090, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="MP00132_.WMF", cAlternateFileName="")) returned 1 [0296.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0296.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212140 [0296.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0296.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212140 | out: hHeap=0x1f0000) returned 1 [0296.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0296.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0296.950] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MP00132_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\mp00132_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0296.950] GetFileType (hFile=0x1ac) returned 0x1 [0296.951] CloseHandle (hObject=0x1ac) returned 1 [0296.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0296.953] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MP00132_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\mp00132_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1090)) returned 1 [0296.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0296.953] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0296.953] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MP00132_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\mp00132_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1090)) returned 1 [0296.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0296.953] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0296.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0296.953] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31e2, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="MP00646_.WMF", cAlternateFileName="")) returned 1 [0296.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0296.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211b68 [0296.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0296.954] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b68 | out: hHeap=0x1f0000) returned 1 [0296.954] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0296.954] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0296.955] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MP00646_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\mp00646_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0296.955] GetFileType (hFile=0x1ac) returned 0x1 [0296.956] CloseHandle (hObject=0x1ac) returned 1 [0296.956] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0296.956] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MP00646_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\mp00646_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31e2)) returned 1 [0296.957] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0296.957] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0296.957] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MP00646_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\mp00646_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31e2)) returned 1 [0296.957] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0296.957] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0296.957] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0296.957] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ae0, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="MUSIC_01.MID", cAlternateFileName="")) returned 1 [0296.957] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605b8 [0296.957] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2124f8 [0296.958] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0296.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2124f8 | out: hHeap=0x1f0000) returned 1 [0296.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0296.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0296.958] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MUSIC_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\music_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0296.959] GetFileType (hFile=0x1ac) returned 0x1 [0296.959] CloseHandle (hObject=0x1ac) returned 1 [0296.960] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0296.960] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MUSIC_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\music_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ae0)) returned 1 [0296.960] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0296.960] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0296.960] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MUSIC_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\music_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ae0)) returned 1 [0296.960] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0296.960] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0296.960] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0296.960] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5044, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="NA00042_.WMF", cAlternateFileName="")) returned 1 [0296.961] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0296.961] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d00 [0296.961] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0296.961] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d00 | out: hHeap=0x1f0000) returned 1 [0296.961] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0296.961] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0296.962] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00042_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00042_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0296.962] GetFileType (hFile=0x1ac) returned 0x1 [0296.963] CloseHandle (hObject=0x1ac) returned 1 [0296.963] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0296.963] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00042_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00042_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5044)) returned 1 [0296.963] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0296.963] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0296.964] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00042_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00042_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5044)) returned 1 [0296.964] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0296.964] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0296.964] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0296.964] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a42, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="NA00057_.WMF", cAlternateFileName="")) returned 1 [0296.964] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0296.964] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212030 [0296.964] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0296.965] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212030 | out: hHeap=0x1f0000) returned 1 [0296.965] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0296.965] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0296.965] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00057_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00057_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0296.966] GetFileType (hFile=0x1ac) returned 0x1 [0296.966] CloseHandle (hObject=0x1ac) returned 1 [0296.967] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0296.967] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00057_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00057_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a42)) returned 1 [0296.967] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0296.967] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0296.967] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00057_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00057_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a42)) returned 1 [0296.967] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0296.967] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0296.967] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0296.968] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xeaa, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="NA00058_.WMF", cAlternateFileName="")) returned 1 [0296.968] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0296.968] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212360 [0296.968] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0296.968] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212360 | out: hHeap=0x1f0000) returned 1 [0296.968] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0296.968] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0296.969] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00058_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00058_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0296.969] GetFileType (hFile=0x1ac) returned 0x1 [0296.970] CloseHandle (hObject=0x1ac) returned 1 [0296.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0296.970] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00058_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00058_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xeaa)) returned 1 [0297.285] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0297.286] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0297.287] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00058_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00058_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xeaa)) returned 1 [0297.287] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0297.290] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0297.290] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0297.290] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1324, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="NA00068_.WMF", cAlternateFileName="")) returned 1 [0297.290] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609a0 [0297.290] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211fa8 [0297.290] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0297.291] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211fa8 | out: hHeap=0x1f0000) returned 1 [0297.291] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0297.291] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0297.291] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00068_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00068_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0297.292] GetFileType (hFile=0x1e0) returned 0x1 [0297.292] CloseHandle (hObject=0x1e0) returned 1 [0297.292] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0297.293] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00068_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00068_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1324)) returned 1 [0297.293] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0297.293] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0297.293] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00068_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00068_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1324)) returned 1 [0297.293] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0297.293] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0297.293] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0297.293] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1384, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="NA00238_.WMF", cAlternateFileName="")) returned 1 [0297.294] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0297.294] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212030 [0297.294] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0297.294] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212030 | out: hHeap=0x1f0000) returned 1 [0297.294] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0297.294] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0297.295] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00238_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00238_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0297.295] GetFileType (hFile=0x1e0) returned 0x1 [0297.295] CloseHandle (hObject=0x1e0) returned 1 [0297.296] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0297.296] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00238_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00238_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1384)) returned 1 [0297.296] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0297.296] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0297.296] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00238_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00238_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1384)) returned 1 [0297.297] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0297.297] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0297.297] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0297.297] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x864, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="NA00330_.WMF", cAlternateFileName="")) returned 1 [0297.297] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0297.297] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2120b8 [0297.297] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0297.297] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2120b8 | out: hHeap=0x1f0000) returned 1 [0297.297] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0297.298] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0297.298] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00330_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00330_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0297.299] GetFileType (hFile=0x1e0) returned 0x1 [0297.299] CloseHandle (hObject=0x1e0) returned 1 [0297.300] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0297.300] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00330_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00330_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x864)) returned 1 [0297.300] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0297.300] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0297.300] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00330_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00330_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x864)) returned 1 [0297.301] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0297.301] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0297.301] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0297.301] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1172, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="NA00388_.WMF", cAlternateFileName="")) returned 1 [0297.301] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260770 [0297.301] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211f20 [0297.301] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0297.301] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211f20 | out: hHeap=0x1f0000) returned 1 [0297.301] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0297.302] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0297.302] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00388_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00388_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0297.302] GetFileType (hFile=0x1e0) returned 0x1 [0297.303] CloseHandle (hObject=0x1e0) returned 1 [0297.303] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0297.303] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00388_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00388_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1172)) returned 1 [0297.304] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0297.304] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0297.304] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00388_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00388_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1172)) returned 1 [0297.304] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0297.304] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0297.304] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0297.304] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20ca, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="NA00389_.WMF", cAlternateFileName="")) returned 1 [0297.304] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260770 [0297.304] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212360 [0297.305] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0297.305] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212360 | out: hHeap=0x1f0000) returned 1 [0297.305] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0297.305] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0297.306] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00389_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00389_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0297.306] GetFileType (hFile=0x1e0) returned 0x1 [0297.307] CloseHandle (hObject=0x1e0) returned 1 [0297.307] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0297.307] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00389_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00389_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20ca)) returned 1 [0297.307] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0297.308] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0297.308] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00389_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00389_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20ca)) returned 1 [0297.308] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0297.308] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0297.308] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0297.308] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21c2, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="NA00390_.WMF", cAlternateFileName="")) returned 1 [0297.308] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260770 [0297.309] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211bf0 [0297.309] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0297.309] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211bf0 | out: hHeap=0x1f0000) returned 1 [0297.309] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0297.309] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0297.310] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00390_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00390_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0297.310] GetFileType (hFile=0x1e0) returned 0x1 [0297.311] CloseHandle (hObject=0x1e0) returned 1 [0297.311] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0297.311] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00390_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00390_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21c2)) returned 1 [0297.311] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0297.311] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0297.311] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00390_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00390_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21c2)) returned 1 [0297.312] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0297.312] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0297.312] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0297.312] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21ec, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="NA00391_.WMF", cAlternateFileName="")) returned 1 [0297.312] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260770 [0297.312] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2123e8 [0297.312] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0297.313] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2123e8 | out: hHeap=0x1f0000) returned 1 [0297.313] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0297.313] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0297.313] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00391_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00391_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0297.314] GetFileType (hFile=0x1e0) returned 0x1 [0297.315] CloseHandle (hObject=0x1e0) returned 1 [0297.315] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0297.315] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00391_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00391_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21ec)) returned 1 [0297.316] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0297.316] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0297.316] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00391_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00391_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21ec)) returned 1 [0297.316] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0297.316] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0297.316] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0297.316] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ad4, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="NA00394_.WMF", cAlternateFileName="")) returned 1 [0297.316] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0297.316] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211fa8 [0297.317] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0297.317] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211fa8 | out: hHeap=0x1f0000) returned 1 [0297.317] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0297.317] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0297.317] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00394_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00394_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0297.318] GetFileType (hFile=0x1e0) returned 0x1 [0297.318] CloseHandle (hObject=0x1e0) returned 1 [0297.319] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0297.319] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00394_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00394_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ad4)) returned 1 [0297.319] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0297.319] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0297.319] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00394_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00394_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ad4)) returned 1 [0297.319] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0297.319] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0297.319] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0297.320] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x194a, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="NA00395_.WMF", cAlternateFileName="")) returned 1 [0297.320] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0297.320] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0297.320] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0297.320] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0297.320] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0297.320] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0297.321] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00395_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00395_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0297.321] GetFileType (hFile=0x1e0) returned 0x1 [0297.322] CloseHandle (hObject=0x1e0) returned 1 [0297.322] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0297.322] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00395_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00395_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x194a)) returned 1 [0297.322] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0297.322] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0297.322] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00395_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00395_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x194a)) returned 1 [0297.323] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0297.323] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0297.323] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0297.323] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x38c6, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="NA00396_.WMF", cAlternateFileName="")) returned 1 [0297.323] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260770 [0297.323] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2124f8 [0297.323] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0297.323] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2124f8 | out: hHeap=0x1f0000) returned 1 [0297.323] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0297.323] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0297.324] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00396_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00396_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0297.324] GetFileType (hFile=0x1e0) returned 0x1 [0297.325] CloseHandle (hObject=0x1e0) returned 1 [0297.325] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0297.325] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00396_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00396_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x38c6)) returned 1 [0297.325] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0297.325] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0297.325] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00396_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00396_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x38c6)) returned 1 [0297.325] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0297.326] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0297.326] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0297.326] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x173e, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="NA00417_.WMF", cAlternateFileName="")) returned 1 [0297.326] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0297.326] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2124f8 [0297.326] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0297.326] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2124f8 | out: hHeap=0x1f0000) returned 1 [0297.326] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0297.326] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0297.327] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00417_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00417_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0297.327] GetFileType (hFile=0x1e0) returned 0x1 [0297.327] CloseHandle (hObject=0x1e0) returned 1 [0297.328] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0297.328] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00417_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00417_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x173e)) returned 1 [0297.328] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0297.328] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0297.328] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00417_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00417_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x173e)) returned 1 [0297.328] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0297.328] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0297.328] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0297.328] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4696, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="NA00433_.WMF", cAlternateFileName="")) returned 1 [0297.328] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260770 [0297.328] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212360 [0297.328] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0297.329] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212360 | out: hHeap=0x1f0000) returned 1 [0297.329] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0297.329] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0297.329] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00433_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00433_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1a1de14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0297.329] GetFileType (hFile=0x1e0) returned 0x1 [0297.329] CloseHandle (hObject=0x1e0) returned 1 [0297.679] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0297.680] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00433_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00433_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1dea4 | out: lpFileInformation=0x1a1dea4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4696)) returned 1 [0297.680] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0297.680] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0297.680] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00433_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00433_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1a1deb4 | out: lpFileInformation=0x1a1deb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4696)) returned 1 [0297.680] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0297.680] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0297.680] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0297.680] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1a1e054 | out: lpFindFileData=0x1a1e054*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2f38, dwReserved0=0x2ae0ae, dwReserved1=0x640062, cFileName="NA00438_.WMF", cAlternateFileName="")) returned 1 [0297.681] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0297.681] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212608 [0297.681] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0297.681] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212608 | out: hHeap=0x1f0000) returned 1 [0297.681] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0297.681] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 Thread: id = 148 os_tid = 0x110c [0192.260] GetLastError () returned 0x57 [0192.260] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x364) returned 0x223628 [0192.261] SetLastError (dwErrCode=0x57) [0192.261] GetCurrentThreadId () returned 0x110c [0192.261] GetCurrentThreadId () returned 0x110c [0192.261] RtlWakeConditionVariable (in: ConditionVariable=0x2067dc | out: ConditionVariable=0x2067dc) [0192.263] FindFirstFileW (in: lpFileName="C:\\\\*", lpFindFileData=0x1cff4e4 | out: lpFindFileData=0x1cff4e4*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="$GetCurrent", cAlternateFileName="$GETCU~1")) returned 0x2142d0 [0192.264] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b8f0 [0192.264] lstrcmpW (lpString1="$GetCurrent", lpString2=".") returned -1 [0192.264] lstrcmpW (lpString1="$GetCurrent", lpString2="..") returned -1 [0192.264] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x2051f0 [0192.264] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20ba58 [0192.264] FindNextFileW (in: hFindFile=0x2142d0, lpFindFileData=0x1cff4e4 | out: lpFindFileData=0x1cff4e4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="$Recycle.Bin", cAlternateFileName="")) returned 1 [0192.267] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b698 [0192.267] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d0c0 [0192.267] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b8f0 | out: hHeap=0x1f0000) returned 1 [0192.267] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b698 | out: hHeap=0x1f0000) returned 1 [0192.267] lstrcmpW (lpString1="$Recycle.Bin", lpString2=".") returned -1 [0192.267] lstrcmpW (lpString1="$Recycle.Bin", lpString2="..") returned -1 [0192.267] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d1a0 [0192.267] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2b8 [0192.267] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2051f0 | out: hHeap=0x1f0000) returned 1 [0192.267] FindNextFileW (in: hFindFile=0x2142d0, lpFindFileData=0x1cff4e4 | out: lpFindFileData=0x1cff4e4*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x85776261, ftCreationTime.dwHighDateTime=0x1d3276f, ftLastAccessTime.dwLowDateTime=0x85776261, ftLastAccessTime.dwHighDateTime=0x1d3276f, ftLastWriteTime.dwLowDateTime=0x85776261, ftLastWriteTime.dwHighDateTime=0x1d3276f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="$WINRE_BACKUP_PARTITION.MARKER", cAlternateFileName="$WINRE~1.MAR")) returned 1 [0192.267] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x213af8 [0192.267] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x215860 [0192.267] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d0c0 | out: hHeap=0x1f0000) returned 1 [0192.267] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213af8 | out: hHeap=0x1f0000) returned 1 [0192.268] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x38) returned 0x214790 [0192.268] CreateFileW (lpFileName="C:\\\\$WINRE_BACKUP_PARTITION.MARKER" (normalized: "c:\\$winre_backup_partition.marker"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cff2ac, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc [0192.268] GetFileType (hFile=0x1cc) returned 0x1 [0192.269] CloseHandle (hObject=0x1cc) returned 1 [0192.269] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x20b478 [0192.269] GetFileAttributesExW (in: lpFileName="C:\\\\$WINRE_BACKUP_PARTITION.MARKER" (normalized: "c:\\$winre_backup_partition.marker"), fInfoLevelId=0x0, lpFileInformation=0x1cff33c | out: lpFileInformation=0x1cff33c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x85776261, ftCreationTime.dwHighDateTime=0x1d3276f, ftLastAccessTime.dwLowDateTime=0x85776261, ftLastAccessTime.dwHighDateTime=0x1d3276f, ftLastWriteTime.dwLowDateTime=0x85776261, ftLastWriteTime.dwHighDateTime=0x1d3276f, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0192.269] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b478 | out: hHeap=0x1f0000) returned 1 [0192.269] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x20b478 [0192.269] GetFileAttributesExW (in: lpFileName="C:\\\\$WINRE_BACKUP_PARTITION.MARKER" (normalized: "c:\\$winre_backup_partition.marker"), fInfoLevelId=0x0, lpFileInformation=0x1cff34c | out: lpFileInformation=0x1cff34c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x85776261, ftCreationTime.dwHighDateTime=0x1d3276f, ftLastAccessTime.dwLowDateTime=0x85776261, ftLastAccessTime.dwHighDateTime=0x1d3276f, ftLastWriteTime.dwLowDateTime=0x85776261, ftLastWriteTime.dwHighDateTime=0x1d3276f, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0192.269] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b478 | out: hHeap=0x1f0000) returned 1 [0192.269] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x20b478 [0192.269] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b478 | out: hHeap=0x1f0000) returned 1 [0192.270] FindNextFileW (in: hFindFile=0x2142d0, lpFindFileData=0x1cff4e4 | out: lpFindFileData=0x1cff4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf39a4e7e, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf74cd515, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="588bce7c90097ed212", cAlternateFileName="588BCE~1")) returned 1 [0192.270] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d0c0 [0192.270] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215860 | out: hHeap=0x1f0000) returned 1 [0192.270] lstrcmpW (lpString1="588bce7c90097ed212", lpString2=".") returned 1 [0192.270] lstrcmpW (lpString1="588bce7c90097ed212", lpString2="..") returned 1 [0192.270] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x48) returned 0x215860 [0192.270] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d360 [0192.270] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d1a0 | out: hHeap=0x1f0000) returned 1 [0192.270] FindNextFileW (in: hFindFile=0x2142d0, lpFindFileData=0x1cff4e4 | out: lpFindFileData=0x1cff4e4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6fa258, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6fa258, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Boot", cAlternateFileName="")) returned 1 [0192.270] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b8f0 [0192.270] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d0c0 | out: hHeap=0x1f0000) returned 1 [0192.270] lstrcmpW (lpString1="Boot", lpString2=".") returned 1 [0192.270] lstrcmpW (lpString1="Boot", lpString2="..") returned 1 [0192.270] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x20b478 [0192.270] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20ba80 [0192.270] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215860 | out: hHeap=0x1f0000) returned 1 [0192.270] FindNextFileW (in: hFindFile=0x2142d0, lpFindFileData=0x1cff4e4 | out: lpFindFileData=0x1cff4e4*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xe47a48a8, ftCreationTime.dwHighDateTime=0x1d112ea, ftLastAccessTime.dwLowDateTime=0xef6fa258, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfb90936b, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0x607da, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr", cAlternateFileName="")) returned 1 [0192.270] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b698 [0192.271] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b8f0 | out: hHeap=0x1f0000) returned 1 [0192.271] CreateFileW (lpFileName="C:\\\\bootmgr" (normalized: "c:\\bootmgr"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cff2ac, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0192.271] GetLastError () returned 0x5 [0192.271] GetLastError () returned 0x5 [0192.271] SetLastError (dwErrCode=0x5) [0192.271] GetLastError () returned 0x5 [0192.271] SetLastError (dwErrCode=0x5) [0192.271] GetLastError () returned 0x5 [0192.271] SetLastError (dwErrCode=0x5) [0192.271] FindNextFileW (in: hFindFile=0x2142d0, lpFindFileData=0x1cff4e4 | out: lpFindFileData=0x1cff4e4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xe5533ee0, ftCreationTime.dwHighDateTime=0x1d112ea, ftLastAccessTime.dwLowDateTime=0xef9d0a0c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x1, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTNXT", cAlternateFileName="")) returned 1 [0192.271] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b8f0 [0192.271] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b698 | out: hHeap=0x1f0000) returned 1 [0192.272] CreateFileW (lpFileName="C:\\\\BOOTNXT" (normalized: "c:\\bootnxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cff2ac, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc [0192.272] GetFileType (hFile=0x1cc) returned 0x1 [0192.272] CloseHandle (hObject=0x1cc) returned 1 [0192.272] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b698 [0192.272] GetFileAttributesExW (in: lpFileName="C:\\\\BOOTNXT" (normalized: "c:\\bootnxt"), fInfoLevelId=0x0, lpFileInformation=0x1cff33c | out: lpFileInformation=0x1cff33c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xe5533ee0, ftCreationTime.dwHighDateTime=0x1d112ea, ftLastAccessTime.dwLowDateTime=0xef9d0a0c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x1)) returned 1 [0192.272] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b698 | out: hHeap=0x1f0000) returned 1 [0192.272] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b698 [0192.272] GetFileAttributesExW (in: lpFileName="C:\\\\BOOTNXT" (normalized: "c:\\bootnxt"), fInfoLevelId=0x0, lpFileInformation=0x1cff34c | out: lpFileInformation=0x1cff34c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xe5533ee0, ftCreationTime.dwHighDateTime=0x1d112ea, ftLastAccessTime.dwLowDateTime=0xef9d0a0c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x1)) returned 1 [0192.273] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b698 | out: hHeap=0x1f0000) returned 1 [0192.273] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b698 [0192.273] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b698 | out: hHeap=0x1f0000) returned 1 [0192.273] FindNextFileW (in: hFindFile=0x2142d0, lpFindFileData=0x1cff4e4 | out: lpFindFileData=0x1cff4e4*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xc4ee267e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4ee267e, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xf1c63cdd, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTSECT.BAK", cAlternateFileName="")) returned 1 [0192.273] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b698 [0192.273] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d0c0 [0192.273] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b8f0 | out: hHeap=0x1f0000) returned 1 [0192.273] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b698 | out: hHeap=0x1f0000) returned 1 [0192.274] CreateFileW (lpFileName="C:\\\\BOOTSECT.BAK" (normalized: "c:\\bootsect.bak"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cff2ac, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0192.274] GetLastError () returned 0x5 [0192.274] GetLastError () returned 0x5 [0192.274] SetLastError (dwErrCode=0x5) [0192.274] GetLastError () returned 0x5 [0192.275] SetLastError (dwErrCode=0x5) [0192.275] GetLastError () returned 0x5 [0192.275] SetLastError (dwErrCode=0x5) [0192.275] FindNextFileW (in: hFindFile=0x2142d0, lpFindFileData=0x1cff4e4 | out: lpFindFileData=0x1cff4e4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xe99f01ae, ftCreationTime.dwHighDateTime=0x1d32708, ftLastAccessTime.dwLowDateTime=0xe99f01ae, ftLastAccessTime.dwHighDateTime=0x1d32708, ftLastWriteTime.dwLowDateTime=0xe99f01ae, ftLastWriteTime.dwHighDateTime=0x1d32708, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents and Settings", cAlternateFileName="DOCUME~1")) returned 1 [0192.275] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d1a0 [0192.275] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x213990 [0192.275] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d0c0 | out: hHeap=0x1f0000) returned 1 [0192.275] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d1a0 | out: hHeap=0x1f0000) returned 1 [0192.275] lstrcmpW (lpString1="Documents and Settings", lpString2=".") returned 1 [0192.276] lstrcmpW (lpString1="Documents and Settings", lpString2="..") returned 1 [0192.276] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x224bc0 [0192.276] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x213a68 [0192.276] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b478 | out: hHeap=0x1f0000) returned 1 [0192.276] FindNextFileW (in: hFindFile=0x2142d0, lpFindFileData=0x1cff4e4 | out: lpFindFileData=0x1cff4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc1969407, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ESD", cAlternateFileName="")) returned 1 [0192.276] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213990 | out: hHeap=0x1f0000) returned 1 [0192.276] lstrcmpW (lpString1="ESD", lpString2=".") returned 1 [0192.276] lstrcmpW (lpString1="ESD", lpString2="..") returned 1 [0192.276] FindNextFileW (in: hFindFile=0x2142d0, lpFindFileData=0x1cff4e4 | out: lpFindFileData=0x1cff4e4*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x7ef2dddf, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x7ef2dddf, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x96715303, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x332fe000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hiberfil.sys", cAlternateFileName="")) returned 1 [0192.276] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b8f0 [0192.276] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d0c0 [0192.276] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b8f0 | out: hHeap=0x1f0000) returned 1 [0192.277] CreateFileW (lpFileName="C:\\\\hiberfil.sys" (normalized: "c:\\hiberfil.sys"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cff2ac, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0192.277] GetLastError () returned 0x20 [0192.277] GetLastError () returned 0x20 [0192.277] SetLastError (dwErrCode=0x20) [0192.277] GetLastError () returned 0x20 [0192.277] SetLastError (dwErrCode=0x20) [0192.277] GetLastError () returned 0x20 [0192.277] SetLastError (dwErrCode=0x20) [0192.278] FindNextFileW (in: hFindFile=0x2142d0, lpFindFileData=0x1cff4e4 | out: lpFindFileData=0x1cff4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf1d773, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xa03727f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xfd9ec80, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Logs", cAlternateFileName="")) returned 1 [0192.278] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b8f0 [0192.278] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d0c0 | out: hHeap=0x1f0000) returned 1 [0192.278] lstrcmpW (lpString1="Logs", lpString2=".") returned 1 [0192.278] lstrcmpW (lpString1="Logs", lpString2="..") returned 1 [0192.278] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd8) returned 0x224c58 [0192.278] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b698 [0192.278] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224bc0 | out: hHeap=0x1f0000) returned 1 [0192.278] FindNextFileW (in: hFindFile=0x2142d0, lpFindFileData=0x1cff4e4 | out: lpFindFileData=0x1cff4e4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6e97b025, ftCreationTime.dwHighDateTime=0x1d3275c, ftLastAccessTime.dwLowDateTime=0x6e97b025, ftLastAccessTime.dwHighDateTime=0x1d3275c, ftLastWriteTime.dwLowDateTime=0x98f4eb01, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x28000000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pagefile.sys", cAlternateFileName="")) returned 1 [0192.278] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20bcd8 [0192.279] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d0c0 [0192.279] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b8f0 | out: hHeap=0x1f0000) returned 1 [0192.279] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20bcd8 | out: hHeap=0x1f0000) returned 1 [0192.279] CreateFileW (lpFileName="C:\\\\pagefile.sys" (normalized: "c:\\pagefile.sys"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cff2ac, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0192.279] GetLastError () returned 0x20 [0192.280] GetLastError () returned 0x20 [0192.280] SetLastError (dwErrCode=0x20) [0192.280] GetLastError () returned 0x20 [0192.280] SetLastError (dwErrCode=0x20) [0192.280] GetLastError () returned 0x20 [0192.280] SetLastError (dwErrCode=0x20) [0192.280] FindNextFileW (in: hFindFile=0x2142d0, lpFindFileData=0x1cff4e4 | out: lpFindFileData=0x1cff4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa03748ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17b3dd09, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PerfLogs", cAlternateFileName="")) returned 1 [0192.280] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20bb48 [0192.280] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d0c0 | out: hHeap=0x1f0000) returned 1 [0192.280] lstrcmpW (lpString1="PerfLogs", lpString2=".") returned 1 [0192.281] lstrcmpW (lpString1="PerfLogs", lpString2="..") returned 1 [0192.281] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20bcb0 [0192.281] FindNextFileW (in: hFindFile=0x2142d0, lpFindFileData=0x1cff4e4 | out: lpFindFileData=0x1cff4e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3ac6234, ftLastAccessTime.dwHighDateTime=0x1d5c65b, ftLastWriteTime.dwLowDateTime=0x3ac6234, ftLastWriteTime.dwHighDateTime=0x1d5c65b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Program Files", cAlternateFileName="PROGRA~1")) returned 1 [0192.281] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20bb70 [0192.281] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d1a0 [0192.281] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20bb48 | out: hHeap=0x1f0000) returned 1 [0192.281] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20bb70 | out: hHeap=0x1f0000) returned 1 [0192.281] lstrcmpW (lpString1="Program Files", lpString2=".") returned 1 [0192.281] lstrcmpW (lpString1="Program Files", lpString2="..") returned 1 [0192.281] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d0c0 [0192.281] FindNextFileW (in: hFindFile=0x2142d0, lpFindFileData=0x1cff4e4 | out: lpFindFileData=0x1cff4e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe7511354, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe7511354, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Program Files (x86)", cAlternateFileName="PROGRA~2")) returned 1 [0192.281] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d328 [0192.282] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d1a0 | out: hHeap=0x1f0000) returned 1 [0192.282] lstrcmpW (lpString1="Program Files (x86)", lpString2=".") returned 1 [0192.282] lstrcmpW (lpString1="Program Files (x86)", lpString2="..") returned 1 [0192.282] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x138) returned 0x224d38 [0192.282] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d1a0 [0192.282] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224c58 | out: hHeap=0x1f0000) returned 1 [0192.282] FindNextFileW (in: hFindFile=0x2142d0, lpFindFileData=0x1cff4e4 | out: lpFindFileData=0x1cff4e4*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x450f4738, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x450f4738, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ProgramData", cAlternateFileName="PROGRA~3")) returned 1 [0192.282] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20bb98 [0192.282] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d328 | out: hHeap=0x1f0000) returned 1 [0192.282] lstrcmpW (lpString1="ProgramData", lpString2=".") returned 1 [0192.283] lstrcmpW (lpString1="ProgramData", lpString2="..") returned 1 [0192.283] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20bc10 [0192.283] FindNextFileW (in: hFindFile=0x2142d0, lpFindFileData=0x1cff4e4 | out: lpFindFileData=0x1cff4e4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28e9c3a2, ftCreationTime.dwHighDateTime=0x1d32795, ftLastAccessTime.dwLowDateTime=0x1044dfc5, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x1044dfc5, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Recovery", cAlternateFileName="")) returned 1 [0192.283] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20bcd8 [0192.283] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20bb98 | out: hHeap=0x1f0000) returned 1 [0192.283] lstrcmpW (lpString1="Recovery", lpString2=".") returned 1 [0192.283] lstrcmpW (lpString1="Recovery", lpString2="..") returned 1 [0192.283] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20baf8 [0192.284] FindNextFileW (in: hFindFile=0x2142d0, lpFindFileData=0x1cff4e4 | out: lpFindFileData=0x1cff4e4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6ead2556, ftCreationTime.dwHighDateTime=0x1d3275c, ftLastAccessTime.dwLowDateTime=0x6ead2556, ftLastAccessTime.dwHighDateTime=0x1d3275c, ftLastWriteTime.dwLowDateTime=0x98f74cd7, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x10000000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="swapfile.sys", cAlternateFileName="")) returned 1 [0192.284] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20baa8 [0192.284] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d398 [0192.284] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20bcd8 | out: hHeap=0x1f0000) returned 1 [0192.284] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20baa8 | out: hHeap=0x1f0000) returned 1 [0192.285] CreateFileW (lpFileName="C:\\\\swapfile.sys" (normalized: "c:\\swapfile.sys"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cff2ac, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0192.285] GetLastError () returned 0x20 [0192.285] GetLastError () returned 0x20 [0192.285] SetLastError (dwErrCode=0x20) [0192.285] GetLastError () returned 0x20 [0192.286] SetLastError (dwErrCode=0x20) [0192.286] GetLastError () returned 0x20 [0192.286] SetLastError (dwErrCode=0x20) [0192.286] FindNextFileW (in: hFindFile=0x2142d0, lpFindFileData=0x1cff4e4 | out: lpFindFileData=0x1cff4e4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x6e16f135, ftCreationTime.dwHighDateTime=0x1d3275c, ftLastAccessTime.dwLowDateTime=0xb1ff7ba5, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xb1ff7ba5, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="System Volume Information", cAlternateFileName="SYSTEM~1")) returned 1 [0192.286] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x213af8 [0192.286] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d398 | out: hHeap=0x1f0000) returned 1 [0192.287] lstrcmpW (lpString1="System Volume Information", lpString2=".") returned 1 [0192.287] lstrcmpW (lpString1="System Volume Information", lpString2="..") returned 1 [0192.287] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x213bd0 [0192.287] FindNextFileW (in: hFindFile=0x2142d0, lpFindFileData=0x1cff4e4 | out: lpFindFileData=0x1cff4e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x475bb883, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x475bb883, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 1 [0192.287] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20baa8 [0192.287] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213af8 | out: hHeap=0x1f0000) returned 1 [0192.287] lstrcmpW (lpString1="Users", lpString2=".") returned 1 [0192.287] lstrcmpW (lpString1="Users", lpString2="..") returned 1 [0192.287] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c8) returned 0x224e78 [0192.287] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20bc88 [0192.287] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224d38 | out: hHeap=0x1f0000) returned 1 [0192.287] FindNextFileW (in: hFindFile=0x2142d0, lpFindFileData=0x1cff4e4 | out: lpFindFileData=0x1cff4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0xc838b81d, ftLastAccessTime.dwHighDateTime=0x1d41dc3, ftLastWriteTime.dwLowDateTime=0xc838b81d, ftLastWriteTime.dwHighDateTime=0x1d41dc3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0192.288] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20bb70 [0192.288] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20baa8 | out: hHeap=0x1f0000) returned 1 [0192.288] lstrcmpW (lpString1="Windows", lpString2=".") returned 1 [0192.288] lstrcmpW (lpString1="Windows", lpString2="..") returned 1 [0192.288] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20bb20 [0192.288] FindNextFileW (in: hFindFile=0x2142d0, lpFindFileData=0x1cff4e4 | out: lpFindFileData=0x1cff4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea34fa37, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xccdc86a8, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xccdc86a8, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows10Upgrade", cAlternateFileName="WINDOW~1")) returned 1 [0192.288] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d328 [0192.288] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20bb70 | out: hHeap=0x1f0000) returned 1 [0192.288] lstrcmpW (lpString1="Windows10Upgrade", lpString2=".") returned 1 [0192.288] lstrcmpW (lpString1="Windows10Upgrade", lpString2="..") returned 1 [0192.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d398 [0192.289] FindNextFileW (in: hFindFile=0x2142d0, lpFindFileData=0x1cff4e4 | out: lpFindFileData=0x1cff4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea34fa37, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xccdc86a8, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xccdc86a8, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows10Upgrade", cAlternateFileName="WINDOW~1")) returned 0 [0192.290] FindClose (in: hFindFile=0x2142d0 | out: hFindFile=0x2142d0) returned 1 [0192.290] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x213d80 [0192.290] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20bc38 [0192.290] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x225048 [0192.290] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1feed0 [0192.290] FindFirstFileW (in: lpFileName="C:\\\\$GetCurrent\\*", lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2147d0 [0192.291] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0192.291] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1feed0 | out: hHeap=0x1f0000) returned 1 [0192.291] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0192.291] FindNextFileW (in: hFindFile=0x2147d0, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0192.291] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1feed0 [0192.291] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0192.291] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0192.291] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0192.291] FindNextFileW (in: hFindFile=0x2147d0, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9c5a0a89, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Logs", cAlternateFileName="")) returned 1 [0192.291] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fefe8 [0192.291] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1feed0 | out: hHeap=0x1f0000) returned 1 [0192.291] lstrcmpW (lpString1="Logs", lpString2=".") returned 1 [0192.291] lstrcmpW (lpString1="Logs", lpString2="..") returned 1 [0192.291] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x205130 [0192.292] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1feed0 [0192.292] FindNextFileW (in: hFindFile=0x2147d0, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SafeOS", cAlternateFileName="")) returned 1 [0192.292] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0192.292] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fefe8 | out: hHeap=0x1f0000) returned 1 [0192.292] lstrcmpW (lpString1="SafeOS", lpString2=".") returned 1 [0192.292] lstrcmpW (lpString1="SafeOS", lpString2="..") returned 1 [0192.292] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1ff058 [0192.292] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fefe8 [0192.292] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205130 | out: hHeap=0x1f0000) returned 1 [0192.292] FindNextFileW (in: hFindFile=0x2147d0, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SafeOS", cAlternateFileName="")) returned 0 [0192.292] FindClose (in: hFindFile=0x2147d0 | out: hFindFile=0x2147d0) returned 1 [0192.293] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x213990 [0192.293] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20bb98 [0192.293] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2251e0 [0192.293] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1ff090 [0192.293] FindFirstFileW (in: lpFileName="C:\\\\$GetCurrent\\Logs\\*", lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xbc173b97, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1fef9e, dwReserved1=0x240022, cFileName=".", cAlternateFileName="")) returned 0x2144d0 [0192.293] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2257d0 [0192.293] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1ff090 | out: hHeap=0x1f0000) returned 1 [0192.293] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0192.293] FindNextFileW (in: hFindFile=0x2144d0, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xbc173b97, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1fef9e, dwReserved1=0x240022, cFileName="..", cAlternateFileName="")) returned 1 [0192.294] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x225488 [0192.294] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2257d0 | out: hHeap=0x1f0000) returned 1 [0192.294] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0192.294] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0192.294] FindNextFileW (in: hFindFile=0x2144d0, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x542c8aac, ftLastAccessTime.dwHighDateTime=0x1d3273a, ftLastWriteTime.dwLowDateTime=0xafe5f7a, ftLastWriteTime.dwHighDateTime=0x1d3273e, nFileSizeHigh=0x0, nFileSizeLow=0xa6b2, dwReserved0=0x1fef9e, dwReserved1=0x240022, cFileName="downlevel_2017_09_07_02_02_39_766.log", cAlternateFileName="DOWNLE~1.LOG")) returned 1 [0192.294] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x215860 [0192.294] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x225a38 [0192.294] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x224bc0 [0192.294] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225a38 | out: hHeap=0x1f0000) returned 1 [0192.294] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225488 | out: hHeap=0x1f0000) returned 1 [0192.294] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215860 | out: hHeap=0x1f0000) returned 1 [0192.295] CreateFileW (lpFileName="C:\\\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log" (normalized: "c:\\$getcurrent\\logs\\downlevel_2017_09_07_02_02_39_766.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc [0192.295] GetFileType (hFile=0x1cc) returned 0x1 [0192.295] CloseHandle (hObject=0x1cc) returned 1 [0192.496] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x228378 [0192.497] GetFileAttributesExW (in: lpFileName="C:\\\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log" (normalized: "c:\\$getcurrent\\logs\\downlevel_2017_09_07_02_02_39_766.log"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb04 | out: lpFileInformation=0x1cfeb04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x542c8aac, ftLastAccessTime.dwHighDateTime=0x1d3273a, ftLastWriteTime.dwLowDateTime=0xbc421c50, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0192.509] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228378 | out: hHeap=0x1f0000) returned 1 [0192.509] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229b60 [0192.509] GetFileAttributesExW (in: lpFileName="C:\\\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log" (normalized: "c:\\$getcurrent\\logs\\downlevel_2017_09_07_02_02_39_766.log"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb14 | out: lpFileInformation=0x1cfeb14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x542c8aac, ftLastAccessTime.dwHighDateTime=0x1d3273a, ftLastWriteTime.dwLowDateTime=0xbc421c50, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0192.509] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229b60 | out: hHeap=0x1f0000) returned 1 [0192.509] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2298b8 [0192.509] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2298b8 | out: hHeap=0x1f0000) returned 1 [0192.510] FindNextFileW (in: hFindFile=0x2144d0, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc17291e, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xbc17291e, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xbc1889f5, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1fef9e, dwReserved1=0x240022, cFileName="downlevel_2017_09_07_02_02_39_766.log.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="DOWNLE~1.ODV")) returned 1 [0192.510] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x2007c8 [0192.510] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228188 [0192.510] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x20dd00 [0192.510] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228188 | out: hHeap=0x1f0000) returned 1 [0192.510] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224bc0 | out: hHeap=0x1f0000) returned 1 [0192.510] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2007c8 | out: hHeap=0x1f0000) returned 1 [0192.511] CreateFileW (lpFileName="C:\\\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\$getcurrent\\logs\\downlevel_2017_09_07_02_02_39_766.log.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc [0192.511] GetFileType (hFile=0x1cc) returned 0x1 [0192.512] CloseHandle (hObject=0x1cc) returned 1 [0192.512] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x224bc0 [0192.512] GetFileAttributesExW (in: lpFileName="C:\\\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\$getcurrent\\logs\\downlevel_2017_09_07_02_02_39_766.log.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb04 | out: lpFileInformation=0x1cfeb04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc17291e, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xbc17291e, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xbc1889f5, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xa6c2)) returned 1 [0192.512] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224bc0 | out: hHeap=0x1f0000) returned 1 [0192.513] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x224bc0 [0192.513] GetFileAttributesExW (in: lpFileName="C:\\\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\$getcurrent\\logs\\downlevel_2017_09_07_02_02_39_766.log.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb14 | out: lpFileInformation=0x1cfeb14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc17291e, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xbc17291e, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xbc1889f5, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xa6c2)) returned 1 [0192.513] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224bc0 | out: hHeap=0x1f0000) returned 1 [0192.513] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x224bc0 [0192.513] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224bc0 | out: hHeap=0x1f0000) returned 1 [0192.514] FindNextFileW (in: hFindFile=0x2144d0, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x973abb0f, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x980eecb6, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1774, dwReserved0=0x1fef9e, dwReserved1=0x240022, cFileName="oobe_2017_09_07_03_08_57_737.log", cAlternateFileName="OOBE_2~1.LOG")) returned 1 [0192.514] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x215860 [0192.514] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227fc8 [0192.514] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x214ef8 [0192.514] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227fc8 | out: hHeap=0x1f0000) returned 1 [0192.514] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20dd00 | out: hHeap=0x1f0000) returned 1 [0192.514] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215860 | out: hHeap=0x1f0000) returned 1 [0192.515] CreateFileW (lpFileName="C:\\\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log" (normalized: "c:\\$getcurrent\\logs\\oobe_2017_09_07_03_08_57_737.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc [0192.515] GetFileType (hFile=0x1cc) returned 0x1 [0192.516] CloseHandle (hObject=0x1cc) returned 1 [0192.516] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x214f70 [0192.516] GetFileAttributesExW (in: lpFileName="C:\\\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log" (normalized: "c:\\$getcurrent\\logs\\oobe_2017_09_07_03_08_57_737.log"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb04 | out: lpFileInformation=0x1cfeb04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x973abb0f, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x980eecb6, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1774)) returned 1 [0192.516] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f70 | out: hHeap=0x1f0000) returned 1 [0192.516] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x214e08 [0192.516] GetFileAttributesExW (in: lpFileName="C:\\\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log" (normalized: "c:\\$getcurrent\\logs\\oobe_2017_09_07_03_08_57_737.log"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb14 | out: lpFileInformation=0x1cfeb14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x973abb0f, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x980eecb6, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1774)) returned 1 [0192.517] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214e08 | out: hHeap=0x1f0000) returned 1 [0192.517] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x214f70 [0192.517] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f70 | out: hHeap=0x1f0000) returned 1 [0192.517] FindNextFileW (in: hFindFile=0x2144d0, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c5a0a89, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x9c5a0a89, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xbb3747bd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x1fef9e, dwReserved1=0x240022, cFileName="PartnerSetupCompleteResult.log", cAlternateFileName="PARTNE~1.LOG")) returned 1 [0192.517] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228bd8 [0192.517] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228188 [0192.517] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x214d18 [0192.517] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228188 | out: hHeap=0x1f0000) returned 1 [0192.517] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214ef8 | out: hHeap=0x1f0000) returned 1 [0192.517] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228bd8 | out: hHeap=0x1f0000) returned 1 [0192.518] CreateFileW (lpFileName="C:\\\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log" (normalized: "c:\\$getcurrent\\logs\\partnersetupcompleteresult.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc [0192.518] GetFileType (hFile=0x1cc) returned 0x1 [0192.518] CloseHandle (hObject=0x1cc) returned 1 [0192.518] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x214ac0 [0192.518] GetFileAttributesExW (in: lpFileName="C:\\\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log" (normalized: "c:\\$getcurrent\\logs\\partnersetupcompleteresult.log"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb04 | out: lpFileInformation=0x1cfeb04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c5a0a89, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x9c5a0a89, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xbb3747bd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x28)) returned 1 [0192.518] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214ac0 | out: hHeap=0x1f0000) returned 1 [0192.519] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x214f70 [0192.519] GetFileAttributesExW (in: lpFileName="C:\\\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log" (normalized: "c:\\$getcurrent\\logs\\partnersetupcompleteresult.log"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb14 | out: lpFileInformation=0x1cfeb14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c5a0a89, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x9c5a0a89, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xbb3747bd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x28)) returned 1 [0192.519] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f70 | out: hHeap=0x1f0000) returned 1 [0192.519] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x214e08 [0192.519] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214e08 | out: hHeap=0x1f0000) returned 1 [0192.519] FindNextFileW (in: hFindFile=0x2144d0, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c5a0a89, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x9c5a0a89, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xbb3747bd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x1fef9e, dwReserved1=0x240022, cFileName="PartnerSetupCompleteResult.log", cAlternateFileName="PARTNE~1.LOG")) returned 0 [0192.519] FindClose (in: hFindFile=0x2144d0 | out: hFindFile=0x2144d0) returned 1 [0192.519] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d18 | out: hHeap=0x1f0000) returned 1 [0192.519] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2251e0 | out: hHeap=0x1f0000) returned 1 [0192.519] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20bb98 | out: hHeap=0x1f0000) returned 1 [0192.520] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213990 | out: hHeap=0x1f0000) returned 1 [0192.520] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228b00 [0192.520] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20bd00 [0192.520] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2251e0 [0192.520] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228bd8 [0192.520] FindFirstFileW (in: lpFileName="C:\\\\$GetCurrent\\SafeOS\\*", lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1fef9e, dwReserved1=0x240022, cFileName=".", cAlternateFileName="")) returned 0x214150 [0192.520] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228230 [0192.520] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225ba8 [0192.520] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228230 | out: hHeap=0x1f0000) returned 1 [0192.520] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228bd8 | out: hHeap=0x1f0000) returned 1 [0192.520] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0192.521] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1fef9e, dwReserved1=0x240022, cFileName="..", cAlternateFileName="")) returned 1 [0192.521] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2280e0 [0192.521] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225e78 [0192.521] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2280e0 | out: hHeap=0x1f0000) returned 1 [0192.521] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225ba8 | out: hHeap=0x1f0000) returned 1 [0192.521] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0192.521] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0192.521] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9568f13f, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x9568f13f, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0xfb529700, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x232c8, dwReserved0=0x1fef9e, dwReserved1=0x240022, cFileName="GetCurrentOOBE.dll", cAlternateFileName="GETCUR~1.DLL")) returned 1 [0192.522] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227bd8 [0192.522] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227e08 [0192.522] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x215860 [0192.522] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227e08 | out: hHeap=0x1f0000) returned 1 [0192.522] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225e78 | out: hHeap=0x1f0000) returned 1 [0192.522] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227bd8 | out: hHeap=0x1f0000) returned 1 [0192.522] CreateFileW (lpFileName="C:\\\\$GetCurrent\\SafeOS\\GetCurrentOOBE.dll" (normalized: "c:\\$getcurrent\\safeos\\getcurrentoobe.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc [0192.523] GetFileType (hFile=0x1cc) returned 0x1 [0192.523] CloseHandle (hObject=0x1cc) returned 1 [0192.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a970 [0192.524] GetFileAttributesExW (in: lpFileName="C:\\\\$GetCurrent\\SafeOS\\GetCurrentOOBE.dll" (normalized: "c:\\$getcurrent\\safeos\\getcurrentoobe.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb04 | out: lpFileInformation=0x1cfeb04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9568f13f, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x9568f13f, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0xfb529700, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x232c8)) returned 1 [0192.524] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a970 | out: hHeap=0x1f0000) returned 1 [0192.524] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ab78 [0192.524] GetFileAttributesExW (in: lpFileName="C:\\\\$GetCurrent\\SafeOS\\GetCurrentOOBE.dll" (normalized: "c:\\$getcurrent\\safeos\\getcurrentoobe.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb14 | out: lpFileInformation=0x1cfeb14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9568f13f, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x9568f13f, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0xfb529700, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x232c8)) returned 1 [0192.524] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab78 | out: hHeap=0x1f0000) returned 1 [0192.525] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22aaa8 [0192.525] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aaa8 | out: hHeap=0x1f0000) returned 1 [0192.525] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956819aa, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x956819aa, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x980eecb6, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x9c, dwReserved0=0x1fef9e, dwReserved1=0x240022, cFileName="GetCurrentRollback.ini", cAlternateFileName="GETCUR~1.INI")) returned 1 [0192.525] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227c80 [0192.525] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227cb8 [0192.525] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22aa40 [0192.525] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227cb8 | out: hHeap=0x1f0000) returned 1 [0192.525] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215860 | out: hHeap=0x1f0000) returned 1 [0192.525] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227c80 | out: hHeap=0x1f0000) returned 1 [0192.525] CreateFileW (lpFileName="C:\\\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini" (normalized: "c:\\$getcurrent\\safeos\\getcurrentrollback.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc [0192.526] GetFileType (hFile=0x1cc) returned 0x1 [0192.526] CloseHandle (hObject=0x1cc) returned 1 [0192.526] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a8a0 [0192.526] GetFileAttributesExW (in: lpFileName="C:\\\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini" (normalized: "c:\\$getcurrent\\safeos\\getcurrentrollback.ini"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb04 | out: lpFileInformation=0x1cfeb04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956819aa, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x956819aa, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x980eecb6, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x9c)) returned 1 [0192.526] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a8a0 | out: hHeap=0x1f0000) returned 1 [0192.526] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ab10 [0192.526] GetFileAttributesExW (in: lpFileName="C:\\\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini" (normalized: "c:\\$getcurrent\\safeos\\getcurrentrollback.ini"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb14 | out: lpFileInformation=0x1cfeb14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956819aa, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x956819aa, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x980eecb6, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x9c)) returned 1 [0192.527] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab10 | out: hHeap=0x1f0000) returned 1 [0192.527] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a838 [0192.527] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a838 | out: hHeap=0x1f0000) returned 1 [0192.527] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x54acc791, ftLastAccessTime.dwHighDateTime=0x1d3273a, ftLastWriteTime.dwLowDateTime=0x54acc791, ftLastWriteTime.dwHighDateTime=0x1d3273a, nFileSizeHigh=0x0, nFileSizeLow=0x241, dwReserved0=0x1fef9e, dwReserved1=0x240022, cFileName="PartnerSetupComplete.cmd", cAlternateFileName="PARTNE~1.CMD")) returned 1 [0192.527] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228cb0 [0192.527] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227d98 [0192.527] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ad80 [0192.527] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227d98 | out: hHeap=0x1f0000) returned 1 [0192.527] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aa40 | out: hHeap=0x1f0000) returned 1 [0192.527] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228cb0 | out: hHeap=0x1f0000) returned 1 [0192.527] CreateFileW (lpFileName="C:\\\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\partnersetupcomplete.cmd"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc [0192.528] GetFileType (hFile=0x1cc) returned 0x1 [0192.528] CloseHandle (hObject=0x1cc) returned 1 [0192.528] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ac48 [0192.528] GetFileAttributesExW (in: lpFileName="C:\\\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\partnersetupcomplete.cmd"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb04 | out: lpFileInformation=0x1cfeb04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x54acc791, ftLastAccessTime.dwHighDateTime=0x1d3273a, ftLastWriteTime.dwLowDateTime=0x54acc791, ftLastWriteTime.dwHighDateTime=0x1d3273a, nFileSizeHigh=0x0, nFileSizeLow=0x241)) returned 1 [0192.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ac48 | out: hHeap=0x1f0000) returned 1 [0192.528] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a908 [0192.528] GetFileAttributesExW (in: lpFileName="C:\\\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\partnersetupcomplete.cmd"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb14 | out: lpFileInformation=0x1cfeb14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x54acc791, ftLastAccessTime.dwHighDateTime=0x1d3273a, ftLastWriteTime.dwLowDateTime=0x54acc791, ftLastWriteTime.dwHighDateTime=0x1d3273a, nFileSizeHigh=0x0, nFileSizeLow=0x241)) returned 1 [0192.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a908 | out: hHeap=0x1f0000) returned 1 [0192.529] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a838 [0192.529] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a838 | out: hHeap=0x1f0000) returned 1 [0192.529] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9575af11, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9577d1ec, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x4a, dwReserved0=0x1fef9e, dwReserved1=0x240022, cFileName="preoobe.cmd", cAlternateFileName="")) returned 1 [0192.529] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20bd50 [0192.529] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227eb0 [0192.529] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x215860 [0192.529] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227eb0 | out: hHeap=0x1f0000) returned 1 [0192.529] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ad80 | out: hHeap=0x1f0000) returned 1 [0192.529] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20bd50 | out: hHeap=0x1f0000) returned 1 [0192.529] CreateFileW (lpFileName="C:\\\\$GetCurrent\\SafeOS\\preoobe.cmd" (normalized: "c:\\$getcurrent\\safeos\\preoobe.cmd"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc [0192.529] GetFileType (hFile=0x1cc) returned 0x1 [0192.530] CloseHandle (hObject=0x1cc) returned 1 [0192.530] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x20b478 [0192.530] GetFileAttributesExW (in: lpFileName="C:\\\\$GetCurrent\\SafeOS\\preoobe.cmd" (normalized: "c:\\$getcurrent\\safeos\\preoobe.cmd"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb04 | out: lpFileInformation=0x1cfeb04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9575af11, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9577d1ec, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x4a)) returned 1 [0192.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b478 | out: hHeap=0x1f0000) returned 1 [0192.530] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x20b478 [0192.530] GetFileAttributesExW (in: lpFileName="C:\\\\$GetCurrent\\SafeOS\\preoobe.cmd" (normalized: "c:\\$getcurrent\\safeos\\preoobe.cmd"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb14 | out: lpFileInformation=0x1cfeb14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9575af11, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9577d1ec, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x4a)) returned 1 [0192.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b478 | out: hHeap=0x1f0000) returned 1 [0192.530] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x20b478 [0192.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b478 | out: hHeap=0x1f0000) returned 1 [0192.530] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x957833a7, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x957833a7, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9578472e, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x133, dwReserved0=0x1fef9e, dwReserved1=0x240022, cFileName="SetupComplete.cmd", cAlternateFileName="SETUPC~1.CMD")) returned 1 [0192.530] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227fc8 [0192.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2281f8 [0192.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22aa40 [0192.531] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2281f8 | out: hHeap=0x1f0000) returned 1 [0192.531] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215860 | out: hHeap=0x1f0000) returned 1 [0192.531] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227fc8 | out: hHeap=0x1f0000) returned 1 [0192.531] CreateFileW (lpFileName="C:\\\\$GetCurrent\\SafeOS\\SetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\setupcomplete.cmd"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc [0192.531] GetFileType (hFile=0x1cc) returned 0x1 [0192.531] CloseHandle (hObject=0x1cc) returned 1 [0192.532] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ad18 [0192.532] GetFileAttributesExW (in: lpFileName="C:\\\\$GetCurrent\\SafeOS\\SetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\setupcomplete.cmd"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb04 | out: lpFileInformation=0x1cfeb04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x957833a7, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x957833a7, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9578472e, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x133)) returned 1 [0192.532] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ad18 | out: hHeap=0x1f0000) returned 1 [0192.532] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a8a0 [0192.532] GetFileAttributesExW (in: lpFileName="C:\\\\$GetCurrent\\SafeOS\\SetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\setupcomplete.cmd"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb14 | out: lpFileInformation=0x1cfeb14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x957833a7, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x957833a7, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9578472e, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x133)) returned 1 [0192.532] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a8a0 | out: hHeap=0x1f0000) returned 1 [0192.532] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22acb0 [0192.533] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22acb0 | out: hHeap=0x1f0000) returned 1 [0192.533] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x957833a7, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x957833a7, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9578472e, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x133, dwReserved0=0x1fef9e, dwReserved1=0x240022, cFileName="SetupComplete.cmd", cAlternateFileName="SETUPC~1.CMD")) returned 0 [0192.533] FindClose (in: hFindFile=0x214150 | out: hFindFile=0x214150) returned 1 [0192.533] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aa40 | out: hHeap=0x1f0000) returned 1 [0192.533] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2251e0 | out: hHeap=0x1f0000) returned 1 [0192.533] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20bd00 | out: hHeap=0x1f0000) returned 1 [0192.533] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228b00 | out: hHeap=0x1f0000) returned 1 [0192.533] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0192.533] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1feed0 | out: hHeap=0x1f0000) returned 1 [0192.533] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fefe8 | out: hHeap=0x1f0000) returned 1 [0192.533] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1ff058 | out: hHeap=0x1f0000) returned 1 [0192.533] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225048 | out: hHeap=0x1f0000) returned 1 [0192.533] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20bc38 | out: hHeap=0x1f0000) returned 1 [0192.533] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213d80 | out: hHeap=0x1f0000) returned 1 [0192.533] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228758 [0192.533] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20bd50 [0192.533] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x229418 [0192.534] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227e78 [0192.534] FindFirstFileW (in: lpFileName="C:\\\\$Recycle.Bin\\*", lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2147d0 [0192.534] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227cf0 [0192.534] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227e78 | out: hHeap=0x1f0000) returned 1 [0192.534] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0192.534] FindNextFileW (in: hFindFile=0x2147d0, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0192.534] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227e78 [0192.534] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227cf0 | out: hHeap=0x1f0000) returned 1 [0192.535] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0192.535] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0192.535] FindNextFileW (in: hFindFile=0x2147d0, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18", cAlternateFileName="")) returned 1 [0192.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20bc38 [0192.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2281f8 [0192.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225bf8 [0192.535] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2281f8 | out: hHeap=0x1f0000) returned 1 [0192.535] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227e78 | out: hHeap=0x1f0000) returned 1 [0192.535] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20bc38 | out: hHeap=0x1f0000) returned 1 [0192.535] lstrcmpW (lpString1="S-1-5-18", lpString2=".") returned 1 [0192.535] lstrcmpW (lpString1="S-1-5-18", lpString2="..") returned 1 [0192.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204fb0 [0192.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2285f0 [0192.535] FindNextFileW (in: hFindFile=0x2147d0, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x11a5eef8, ftLastAccessTime.dwHighDateTime=0x1d3375b, ftLastWriteTime.dwLowDateTime=0x11a5eef8, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-1051304884-625712362-2192934891-1000", cAlternateFileName="S-1-5-~1")) returned 1 [0192.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a970 [0192.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227cb8 [0192.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229830 [0192.536] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227cb8 | out: hHeap=0x1f0000) returned 1 [0192.536] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225bf8 | out: hHeap=0x1f0000) returned 1 [0192.536] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a970 | out: hHeap=0x1f0000) returned 1 [0192.536] lstrcmpW (lpString1="S-1-5-21-1051304884-625712362-2192934891-1000", lpString2=".") returned 1 [0192.536] lstrcmpW (lpString1="S-1-5-21-1051304884-625712362-2192934891-1000", lpString2="..") returned 1 [0192.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228188 [0192.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229be8 [0192.536] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204fb0 | out: hHeap=0x1f0000) returned 1 [0192.536] FindNextFileW (in: hFindFile=0x2147d0, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x11a5eef8, ftLastAccessTime.dwHighDateTime=0x1d3375b, ftLastWriteTime.dwLowDateTime=0x11a5eef8, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-1051304884-625712362-2192934891-1000", cAlternateFileName="S-1-5-~1")) returned 0 [0192.536] FindClose (in: hFindFile=0x2147d0 | out: hFindFile=0x2147d0) returned 1 [0192.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228b90 [0192.537] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20bb98 [0192.537] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x225048 [0192.537] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228638 [0192.537] FindFirstFileW (in: lpFileName="C:\\\\$Recycle.Bin\\S-1-5-18\\*", lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x228108, dwReserved1=0x260024, cFileName=".", cAlternateFileName="")) returned 0x2147d0 [0192.537] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2284d0 [0192.537] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228638 | out: hHeap=0x1f0000) returned 1 [0192.537] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0192.537] FindNextFileW (in: hFindFile=0x2147d0, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x228108, dwReserved1=0x260024, cFileName="..", cAlternateFileName="")) returned 1 [0192.537] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228b48 [0192.537] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2284d0 | out: hHeap=0x1f0000) returned 1 [0192.537] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0192.537] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0192.537] FindNextFileW (in: hFindFile=0x2147d0, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x228108, dwReserved1=0x260024, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0192.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20bc38 [0192.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228bd8 [0192.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x22ae50 [0192.538] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228bd8 | out: hHeap=0x1f0000) returned 1 [0192.538] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228b48 | out: hHeap=0x1f0000) returned 1 [0192.538] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20bc38 | out: hHeap=0x1f0000) returned 1 [0192.539] CreateFileW (lpFileName="C:\\\\$Recycle.Bin\\S-1-5-18\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-18\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc [0192.539] GetFileType (hFile=0x1cc) returned 0x1 [0192.539] CloseHandle (hObject=0x1cc) returned 1 [0192.540] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x215860 [0192.540] GetFileAttributesExW (in: lpFileName="C:\\\\$Recycle.Bin\\S-1-5-18\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-18\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb04 | out: lpFileInformation=0x1cfeb04*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x81)) returned 1 [0192.540] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215860 | out: hHeap=0x1f0000) returned 1 [0192.540] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x215860 [0192.540] GetFileAttributesExW (in: lpFileName="C:\\\\$Recycle.Bin\\S-1-5-18\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-18\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb14 | out: lpFileInformation=0x1cfeb14*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x81)) returned 1 [0192.540] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215860 | out: hHeap=0x1f0000) returned 1 [0192.541] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x215860 [0192.541] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215860 | out: hHeap=0x1f0000) returned 1 [0192.541] FindNextFileW (in: hFindFile=0x2147d0, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x228108, dwReserved1=0x260024, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0192.541] FindClose (in: hFindFile=0x2147d0 | out: hFindFile=0x2147d0) returned 1 [0192.541] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ae50 | out: hHeap=0x1f0000) returned 1 [0192.541] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225048 | out: hHeap=0x1f0000) returned 1 [0192.541] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20bb98 | out: hHeap=0x1f0000) returned 1 [0192.541] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228b90 | out: hHeap=0x1f0000) returned 1 [0192.542] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2289e0 [0192.542] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20bd00 [0192.542] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x225048 [0192.542] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x228378 [0192.542] FindFirstFileW (in: lpFileName="C:\\\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\*", lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x11a5eef8, ftLastAccessTime.dwHighDateTime=0x1d3375b, ftLastWriteTime.dwLowDateTime=0x11a5eef8, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x228108, dwReserved1=0x260024, cFileName=".", cAlternateFileName="")) returned 0x214390 [0192.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229d80 [0192.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x226388 [0192.543] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229d80 | out: hHeap=0x1f0000) returned 1 [0192.543] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228378 | out: hHeap=0x1f0000) returned 1 [0192.543] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0192.543] FindNextFileW (in: hFindFile=0x214390, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x11a5eef8, ftLastAccessTime.dwHighDateTime=0x1d3375b, ftLastWriteTime.dwLowDateTime=0x11a5eef8, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x228108, dwReserved1=0x260024, cFileName="..", cAlternateFileName="")) returned 1 [0192.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a710 [0192.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x20dd00 [0192.543] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a710 | out: hHeap=0x1f0000) returned 1 [0192.543] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226388 | out: hHeap=0x1f0000) returned 1 [0192.544] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0192.544] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0192.544] FindNextFileW (in: hFindFile=0x214390, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcb9438a8, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xcb9438a8, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x228108, dwReserved1=0x260024, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0192.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20bb98 [0192.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a4f0 [0192.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x226388 [0192.544] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a4f0 | out: hHeap=0x1f0000) returned 1 [0192.544] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20dd00 | out: hHeap=0x1f0000) returned 1 [0192.544] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20bb98 | out: hHeap=0x1f0000) returned 1 [0192.545] CreateFileW (lpFileName="C:\\\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1dc [0192.700] GetFileType (hFile=0x1dc) returned 0x1 [0192.700] CloseHandle (hObject=0x1dc) returned 1 [0192.700] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a380 [0192.701] GetFileAttributesExW (in: lpFileName="C:\\\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb04 | out: lpFileInformation=0x1cfeb04*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcb9438a8, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xcb9438a8, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x81)) returned 1 [0192.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a380 | out: hHeap=0x1f0000) returned 1 [0192.701] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219c48 [0192.701] GetFileAttributesExW (in: lpFileName="C:\\\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb14 | out: lpFileInformation=0x1cfeb14*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcb9438a8, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xcb9438a8, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x81)) returned 1 [0192.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219c48 | out: hHeap=0x1f0000) returned 1 [0192.701] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a038 [0192.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a038 | out: hHeap=0x1f0000) returned 1 [0192.701] FindNextFileW (in: hFindFile=0x214390, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcb9438a8, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xcb9438a8, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x228108, dwReserved1=0x260024, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0192.702] FindClose (in: hFindFile=0x214390 | out: hFindFile=0x214390) returned 1 [0192.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226388 | out: hHeap=0x1f0000) returned 1 [0192.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225048 | out: hHeap=0x1f0000) returned 1 [0192.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20bd00 | out: hHeap=0x1f0000) returned 1 [0192.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2289e0 | out: hHeap=0x1f0000) returned 1 [0192.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229830 | out: hHeap=0x1f0000) returned 1 [0192.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2285f0 | out: hHeap=0x1f0000) returned 1 [0192.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229be8 | out: hHeap=0x1f0000) returned 1 [0192.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228188 | out: hHeap=0x1f0000) returned 1 [0192.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0192.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20bd50 | out: hHeap=0x1f0000) returned 1 [0192.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228758 | out: hHeap=0x1f0000) returned 1 [0192.703] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2285f0 [0192.703] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b368 [0192.703] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x227058 [0192.703] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228758 [0192.703] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\*", lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf39a4e7e, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf74cd515, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x214150 [0192.704] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228230 [0192.704] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x226198 [0192.704] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228230 | out: hHeap=0x1f0000) returned 1 [0192.704] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228758 | out: hHeap=0x1f0000) returned 1 [0192.704] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0192.704] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf39a4e7e, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf74cd515, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0192.704] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0192.704] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x226148 [0192.704] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0192.704] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226198 | out: hHeap=0x1f0000) returned 1 [0192.704] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0192.704] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0192.704] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1025", cAlternateFileName="")) returned 1 [0192.705] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227d60 [0192.705] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x2261e8 [0192.705] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227d60 | out: hHeap=0x1f0000) returned 1 [0192.705] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226148 | out: hHeap=0x1f0000) returned 1 [0192.705] lstrcmpW (lpString1="1025", lpString2=".") returned 1 [0192.705] lstrcmpW (lpString1="1025", lpString2="..") returned 1 [0192.705] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x2051f0 [0192.705] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228758 [0192.705] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1028", cAlternateFileName="")) returned 1 [0192.705] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227d60 [0192.705] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225f68 [0192.705] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227d60 | out: hHeap=0x1f0000) returned 1 [0192.705] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2261e8 | out: hHeap=0x1f0000) returned 1 [0192.706] lstrcmpW (lpString1="1028", lpString2=".") returned 1 [0192.706] lstrcmpW (lpString1="1028", lpString2="..") returned 1 [0192.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227fc8 [0192.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2289e0 [0192.706] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2051f0 | out: hHeap=0x1f0000) returned 1 [0192.706] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1029", cAlternateFileName="")) returned 1 [0192.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228150 [0192.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x226008 [0192.706] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228150 | out: hHeap=0x1f0000) returned 1 [0192.706] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225f68 | out: hHeap=0x1f0000) returned 1 [0192.706] lstrcmpW (lpString1="1029", lpString2=".") returned 1 [0192.706] lstrcmpW (lpString1="1029", lpString2="..") returned 1 [0192.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x48) returned 0x226148 [0192.707] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2293b8 [0192.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227fc8 | out: hHeap=0x1f0000) returned 1 [0192.707] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1030", cAlternateFileName="")) returned 1 [0192.707] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227fc8 [0192.707] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225f68 [0192.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227fc8 | out: hHeap=0x1f0000) returned 1 [0192.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226008 | out: hHeap=0x1f0000) returned 1 [0192.707] lstrcmpW (lpString1="1030", lpString2=".") returned 1 [0192.707] lstrcmpW (lpString1="1030", lpString2="..") returned 1 [0192.707] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ac48 [0192.707] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229010 [0192.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226148 | out: hHeap=0x1f0000) returned 1 [0192.707] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1031", cAlternateFileName="")) returned 1 [0192.708] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228150 [0192.708] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x226008 [0192.708] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228150 | out: hHeap=0x1f0000) returned 1 [0192.708] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225f68 | out: hHeap=0x1f0000) returned 1 [0192.708] lstrcmpW (lpString1="1031", lpString2=".") returned 1 [0192.708] lstrcmpW (lpString1="1031", lpString2="..") returned 1 [0192.708] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x228378 [0192.708] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228d88 [0192.708] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ac48 | out: hHeap=0x1f0000) returned 1 [0192.708] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1032", cAlternateFileName="")) returned 1 [0192.708] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227e40 [0192.709] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x226328 [0192.709] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227e40 | out: hHeap=0x1f0000) returned 1 [0192.709] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226008 | out: hHeap=0x1f0000) returned 1 [0192.709] lstrcmpW (lpString1="1032", lpString2=".") returned 1 [0192.709] lstrcmpW (lpString1="1032", lpString2="..") returned 1 [0192.709] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229298 [0192.709] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0192.709] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227d60 [0192.709] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225f18 [0192.709] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227d60 | out: hHeap=0x1f0000) returned 1 [0192.709] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226328 | out: hHeap=0x1f0000) returned 1 [0192.710] lstrcmpW (lpString1="1033", lpString2=".") returned 1 [0192.710] lstrcmpW (lpString1="1033", lpString2="..") returned 1 [0192.710] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd8) returned 0x229418 [0192.710] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228dd0 [0192.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228378 | out: hHeap=0x1f0000) returned 1 [0192.710] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1035", cAlternateFileName="")) returned 1 [0192.710] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227d60 [0192.710] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x226058 [0192.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227d60 | out: hHeap=0x1f0000) returned 1 [0192.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225f18 | out: hHeap=0x1f0000) returned 1 [0192.710] lstrcmpW (lpString1="1035", lpString2=".") returned 1 [0192.710] lstrcmpW (lpString1="1035", lpString2="..") returned 1 [0192.710] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229130 [0192.711] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1036", cAlternateFileName="")) returned 1 [0192.711] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227e40 [0192.711] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225d38 [0192.711] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227e40 | out: hHeap=0x1f0000) returned 1 [0192.711] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226058 | out: hHeap=0x1f0000) returned 1 [0192.711] lstrcmpW (lpString1="1036", lpString2=".") returned 1 [0192.711] lstrcmpW (lpString1="1036", lpString2="..") returned 1 [0192.711] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228e18 [0192.711] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1037", cAlternateFileName="")) returned 1 [0192.711] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ba0 [0192.711] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x226008 [0192.712] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ba0 | out: hHeap=0x1f0000) returned 1 [0192.712] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225d38 | out: hHeap=0x1f0000) returned 1 [0192.712] lstrcmpW (lpString1="1037", lpString2=".") returned 1 [0192.712] lstrcmpW (lpString1="1037", lpString2="..") returned 1 [0192.712] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x138) returned 0x225048 [0192.712] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2291c0 [0192.712] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0192.712] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1038", cAlternateFileName="")) returned 1 [0192.713] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228268 [0192.713] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225c98 [0192.713] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228268 | out: hHeap=0x1f0000) returned 1 [0192.713] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226008 | out: hHeap=0x1f0000) returned 1 [0192.713] lstrcmpW (lpString1="1038", lpString2=".") returned 1 [0192.713] lstrcmpW (lpString1="1038", lpString2="..") returned 1 [0192.713] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2292e0 [0192.713] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1040", cAlternateFileName="")) returned 1 [0192.713] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227e40 [0192.713] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225ce8 [0192.714] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227e40 | out: hHeap=0x1f0000) returned 1 [0192.714] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225c98 | out: hHeap=0x1f0000) returned 1 [0192.714] lstrcmpW (lpString1="1040", lpString2=".") returned 1 [0192.714] lstrcmpW (lpString1="1040", lpString2="..") returned 1 [0192.714] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228e60 [0192.714] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1041", cAlternateFileName="")) returned 1 [0192.714] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0192.714] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225fb8 [0192.714] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0192.714] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225ce8 | out: hHeap=0x1f0000) returned 1 [0192.714] lstrcmpW (lpString1="1041", lpString2=".") returned 1 [0192.714] lstrcmpW (lpString1="1041", lpString2="..") returned 1 [0192.714] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228ea8 [0192.715] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1042", cAlternateFileName="")) returned 1 [0192.715] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0192.715] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x2261e8 [0192.715] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0192.715] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225fb8 | out: hHeap=0x1f0000) returned 1 [0192.715] lstrcmpW (lpString1="1042", lpString2=".") returned 1 [0192.715] lstrcmpW (lpString1="1042", lpString2="..") returned 1 [0192.715] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c8) returned 0x230d20 [0192.715] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228ef0 [0192.715] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225048 | out: hHeap=0x1f0000) returned 1 [0192.715] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1043", cAlternateFileName="")) returned 1 [0192.715] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227fc8 [0192.716] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x2262d8 [0192.716] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227fc8 | out: hHeap=0x1f0000) returned 1 [0192.716] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2261e8 | out: hHeap=0x1f0000) returned 1 [0192.716] lstrcmpW (lpString1="1043", lpString2=".") returned 1 [0192.716] lstrcmpW (lpString1="1043", lpString2="..") returned 1 [0192.716] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228f38 [0192.716] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1044", cAlternateFileName="")) returned 1 [0192.716] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227fc8 [0192.716] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x2260a8 [0192.716] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227fc8 | out: hHeap=0x1f0000) returned 1 [0192.716] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2262d8 | out: hHeap=0x1f0000) returned 1 [0192.717] lstrcmpW (lpString1="1044", lpString2=".") returned 1 [0192.717] lstrcmpW (lpString1="1044", lpString2="..") returned 1 [0192.717] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229058 [0192.717] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1045", cAlternateFileName="")) returned 1 [0192.717] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227e40 [0192.717] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225bf8 [0192.717] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227e40 | out: hHeap=0x1f0000) returned 1 [0192.717] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2260a8 | out: hHeap=0x1f0000) returned 1 [0192.717] lstrcmpW (lpString1="1045", lpString2=".") returned 1 [0192.718] lstrcmpW (lpString1="1045", lpString2="..") returned 1 [0192.718] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x214008 [0192.718] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1046", cAlternateFileName="")) returned 1 [0192.718] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227d60 [0192.718] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225c98 [0192.718] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227d60 | out: hHeap=0x1f0000) returned 1 [0192.718] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225bf8 | out: hHeap=0x1f0000) returned 1 [0192.718] lstrcmpW (lpString1="1046", lpString2=".") returned 1 [0192.719] lstrcmpW (lpString1="1046", lpString2="..") returned 1 [0192.719] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x213e58 [0192.719] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1049", cAlternateFileName="")) returned 1 [0192.719] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0192.719] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225e28 [0192.719] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0192.719] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225c98 | out: hHeap=0x1f0000) returned 1 [0192.719] lstrcmpW (lpString1="1049", lpString2=".") returned 1 [0192.719] lstrcmpW (lpString1="1049", lpString2="..") returned 1 [0192.720] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x213af8 [0192.720] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1053", cAlternateFileName="")) returned 1 [0192.720] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227e40 [0192.720] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225ec8 [0192.720] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227e40 | out: hHeap=0x1f0000) returned 1 [0192.720] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225e28 | out: hHeap=0x1f0000) returned 1 [0192.720] lstrcmpW (lpString1="1053", lpString2=".") returned 1 [0192.720] lstrcmpW (lpString1="1053", lpString2="..") returned 1 [0192.721] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2a0) returned 0x230ef0 [0192.721] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x213c60 [0192.721] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230d20 | out: hHeap=0x1f0000) returned 1 [0192.721] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1055", cAlternateFileName="")) returned 1 [0192.721] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227d60 [0192.721] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x2261e8 [0192.721] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227d60 | out: hHeap=0x1f0000) returned 1 [0192.721] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225ec8 | out: hHeap=0x1f0000) returned 1 [0192.721] lstrcmpW (lpString1="1055", lpString2=".") returned 1 [0192.721] lstrcmpW (lpString1="1055", lpString2="..") returned 1 [0192.721] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x213d80 [0192.721] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2052", cAlternateFileName="")) returned 1 [0192.722] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228150 [0192.722] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225fb8 [0192.722] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228150 | out: hHeap=0x1f0000) returned 1 [0192.722] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2261e8 | out: hHeap=0x1f0000) returned 1 [0192.722] lstrcmpW (lpString1="2052", lpString2=".") returned 1 [0192.722] lstrcmpW (lpString1="2052", lpString2="..") returned 1 [0192.722] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x213990 [0192.722] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2070", cAlternateFileName="")) returned 1 [0192.722] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227d60 [0192.722] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225bf8 [0192.722] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227d60 | out: hHeap=0x1f0000) returned 1 [0192.722] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225fb8 | out: hHeap=0x1f0000) returned 1 [0192.723] lstrcmpW (lpString1="2070", lpString2=".") returned 1 [0192.723] lstrcmpW (lpString1="2070", lpString2="..") returned 1 [0192.723] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234080 [0192.723] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3076", cAlternateFileName="")) returned 1 [0192.723] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228150 [0192.723] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225d88 [0192.723] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228150 | out: hHeap=0x1f0000) returned 1 [0192.723] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225bf8 | out: hHeap=0x1f0000) returned 1 [0192.723] lstrcmpW (lpString1="3076", lpString2=".") returned 1 [0192.723] lstrcmpW (lpString1="3076", lpString2="..") returned 1 [0192.723] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233fa8 [0192.724] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3082", cAlternateFileName="")) returned 1 [0192.724] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227d60 [0192.724] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x2261e8 [0192.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227d60 | out: hHeap=0x1f0000) returned 1 [0192.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225d88 | out: hHeap=0x1f0000) returned 1 [0192.724] lstrcmpW (lpString1="3082", lpString2=".") returned 1 [0192.724] lstrcmpW (lpString1="3082", lpString2="..") returned 1 [0192.724] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233ff0 [0192.724] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Client", cAlternateFileName="")) returned 1 [0192.724] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228150 [0192.724] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x226148 [0192.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228150 | out: hHeap=0x1f0000) returned 1 [0192.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2261e8 | out: hHeap=0x1f0000) returned 1 [0192.725] lstrcmpW (lpString1="Client", lpString2=".") returned 1 [0192.725] lstrcmpW (lpString1="Client", lpString2="..") returned 1 [0192.725] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234230 [0192.725] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbc518d00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbc518d00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbc518d00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x3ef6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DHtmlHeader.html", cAlternateFileName="DHTMLH~1.HTM")) returned 1 [0192.725] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228150 [0192.725] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227fc8 [0192.725] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22d470 [0192.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227fc8 | out: hHeap=0x1f0000) returned 1 [0192.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226148 | out: hHeap=0x1f0000) returned 1 [0192.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228150 | out: hHeap=0x1f0000) returned 1 [0192.726] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\DHtmlHeader.html" (normalized: "c:\\588bce7c90097ed212\\dhtmlheader.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1dc [0192.726] GetFileType (hFile=0x1dc) returned 0x1 [0192.727] CloseHandle (hObject=0x1dc) returned 1 [0192.727] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2252e8 [0192.727] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\DHtmlHeader.html" (normalized: "c:\\588bce7c90097ed212\\dhtmlheader.html"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbc518d00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbc518d00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbc518d00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x3ef6)) returned 1 [0192.727] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2252e8 | out: hHeap=0x1f0000) returned 1 [0192.727] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2252e8 [0192.727] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\DHtmlHeader.html" (normalized: "c:\\588bce7c90097ed212\\dhtmlheader.html"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbc518d00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbc518d00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbc518d00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x3ef6)) returned 1 [0192.728] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2252e8 | out: hHeap=0x1f0000) returned 1 [0192.728] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2252e8 [0192.728] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2252e8 | out: hHeap=0x1f0000) returned 1 [0192.728] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x159d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayIcon.ico", cAlternateFileName="DISPLA~1.ICO")) returned 1 [0192.728] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b700 [0192.728] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227d60 [0192.728] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2252e8 [0192.728] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227d60 | out: hHeap=0x1f0000) returned 1 [0192.728] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d470 | out: hHeap=0x1f0000) returned 1 [0192.729] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b700 | out: hHeap=0x1f0000) returned 1 [0192.729] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\DisplayIcon.ico" (normalized: "c:\\588bce7c90097ed212\\displayicon.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1dc [0192.730] GetFileType (hFile=0x1dc) returned 0x1 [0192.730] CloseHandle (hObject=0x1dc) returned 1 [0192.730] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22d470 [0192.730] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\DisplayIcon.ico" (normalized: "c:\\588bce7c90097ed212\\displayicon.ico"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x159d5)) returned 1 [0192.730] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d470 | out: hHeap=0x1f0000) returned 1 [0192.730] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22d470 [0192.730] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\DisplayIcon.ico" (normalized: "c:\\588bce7c90097ed212\\displayicon.ico"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x159d5)) returned 1 [0192.731] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d470 | out: hHeap=0x1f0000) returned 1 [0192.731] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22d470 [0192.731] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d470 | out: hHeap=0x1f0000) returned 1 [0192.731] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Extended", cAlternateFileName="")) returned 1 [0192.731] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b750 [0192.731] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228150 [0192.731] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225f68 [0192.734] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228150 | out: hHeap=0x1f0000) returned 1 [0192.734] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2252e8 | out: hHeap=0x1f0000) returned 1 [0192.734] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b750 | out: hHeap=0x1f0000) returned 1 [0192.734] lstrcmpW (lpString1="Extended", lpString2=".") returned 1 [0192.734] lstrcmpW (lpString1="Extended", lpString2="..") returned 1 [0192.734] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2343e0 [0192.734] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Graphics", cAlternateFileName="")) returned 1 [0192.734] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b5c0 [0192.734] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227d60 [0192.735] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x226148 [0192.735] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227d60 | out: hHeap=0x1f0000) returned 1 [0192.735] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225f68 | out: hHeap=0x1f0000) returned 1 [0192.735] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b5c0 | out: hHeap=0x1f0000) returned 1 [0192.735] lstrcmpW (lpString1="Graphics", lpString2=".") returned 1 [0192.735] lstrcmpW (lpString1="Graphics", lpString2="..") returned 1 [0192.735] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233db0 [0192.735] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x87910600, ftCreationTime.dwHighDateTime=0x1ca2a27, ftLastAccessTime.dwLowDateTime=0x87910600, ftLastAccessTime.dwHighDateTime=0x1ca2a27, ftLastWriteTime.dwLowDateTime=0x87910600, ftLastWriteTime.dwHighDateTime=0x1ca2a27, nFileSizeHigh=0x0, nFileSizeLow=0xe2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="header.bmp", cAlternateFileName="")) returned 1 [0192.735] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b6d8 [0192.735] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227d60 [0192.736] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22d470 [0192.736] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227d60 | out: hHeap=0x1f0000) returned 1 [0192.736] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226148 | out: hHeap=0x1f0000) returned 1 [0192.736] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b6d8 | out: hHeap=0x1f0000) returned 1 [0192.979] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\header.bmp" (normalized: "c:\\588bce7c90097ed212\\header.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0193.033] GetFileType (hFile=0x1f8) returned 0x1 [0193.033] CloseHandle (hObject=0x1f8) returned 1 [0193.033] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239668 [0193.033] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\header.bmp" (normalized: "c:\\588bce7c90097ed212\\header.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x87910600, ftCreationTime.dwHighDateTime=0x1ca2a27, ftLastAccessTime.dwLowDateTime=0x87910600, ftLastAccessTime.dwHighDateTime=0x1ca2a27, ftLastWriteTime.dwLowDateTime=0x87910600, ftLastWriteTime.dwHighDateTime=0x1ca2a27, nFileSizeHigh=0x0, nFileSizeLow=0xe2c)) returned 1 [0193.034] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239668 | out: hHeap=0x1f0000) returned 1 [0193.034] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239928 [0193.034] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\header.bmp" (normalized: "c:\\588bce7c90097ed212\\header.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x87910600, ftCreationTime.dwHighDateTime=0x1ca2a27, ftLastAccessTime.dwLowDateTime=0x87910600, ftLastAccessTime.dwHighDateTime=0x1ca2a27, ftLastWriteTime.dwLowDateTime=0x87910600, ftLastWriteTime.dwHighDateTime=0x1ca2a27, nFileSizeHigh=0x0, nFileSizeLow=0xe2c)) returned 1 [0193.034] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239928 | out: hHeap=0x1f0000) returned 1 [0193.034] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239928 [0193.034] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239928 | out: hHeap=0x1f0000) returned 1 [0193.034] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x66ea7e00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0x66ea7e00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0x66ea7e00, ftLastWriteTime.dwHighDateTime=0x1cac6e3, nFileSizeHigh=0x0, nFileSizeLow=0xad1384b, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfx_Core.mzz", cAlternateFileName="NETFX_~1.MZZ")) returned 1 [0193.034] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b390 [0193.034] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2281f8 [0193.034] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2396c0 [0193.034] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2281f8 | out: hHeap=0x1f0000) returned 1 [0193.035] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d470 | out: hHeap=0x1f0000) returned 1 [0193.035] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b390 | out: hHeap=0x1f0000) returned 1 [0193.035] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\netfx_Core.mzz" (normalized: "c:\\588bce7c90097ed212\\netfx_core.mzz"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0193.036] GetFileType (hFile=0x1f8) returned 0x1 [0193.036] CloseHandle (hObject=0x1f8) returned 1 [0193.036] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239718 [0193.036] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\netfx_Core.mzz" (normalized: "c:\\588bce7c90097ed212\\netfx_core.mzz"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x66ea7e00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0x66ea7e00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0x66ea7e00, ftLastWriteTime.dwHighDateTime=0x1cac6e3, nFileSizeHigh=0x0, nFileSizeLow=0xad1384b)) returned 1 [0193.036] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239718 | out: hHeap=0x1f0000) returned 1 [0193.037] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2398d0 [0193.037] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\netfx_Core.mzz" (normalized: "c:\\588bce7c90097ed212\\netfx_core.mzz"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x66ea7e00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0x66ea7e00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0x66ea7e00, ftLastWriteTime.dwHighDateTime=0x1cac6e3, nFileSizeHigh=0x0, nFileSizeLow=0xad1384b)) returned 1 [0193.037] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2398d0 | out: hHeap=0x1f0000) returned 1 [0193.037] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239718 [0193.037] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239718 | out: hHeap=0x1f0000) returned 1 [0193.037] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xc183da00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0xc183da00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0xc183da00, ftLastWriteTime.dwHighDateTime=0x1cac6e3, nFileSizeHigh=0x0, nFileSizeLow=0x1d0200, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfx_Core_x64.msi", cAlternateFileName="NETFX_~1.MSI")) returned 1 [0193.037] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2281f8 [0193.038] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282a0 [0193.038] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ac48 [0193.038] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0193.038] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2396c0 | out: hHeap=0x1f0000) returned 1 [0193.038] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2281f8 | out: hHeap=0x1f0000) returned 1 [0193.038] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\netfx_Core_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0193.039] GetFileType (hFile=0x1f8) returned 0x1 [0193.039] CloseHandle (hObject=0x1f8) returned 1 [0193.039] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22acb0 [0193.039] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\netfx_Core_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x64.msi"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xc183da00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0xc183da00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0xc183da00, ftLastWriteTime.dwHighDateTime=0x1cac6e3, nFileSizeHigh=0x0, nFileSizeLow=0x1d0200)) returned 1 [0193.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22acb0 | out: hHeap=0x1f0000) returned 1 [0193.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a838 [0193.040] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\netfx_Core_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x64.msi"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xc183da00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0xc183da00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0xc183da00, ftLastWriteTime.dwHighDateTime=0x1cac6e3, nFileSizeHigh=0x0, nFileSizeLow=0x1d0200)) returned 1 [0193.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a838 | out: hHeap=0x1f0000) returned 1 [0193.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a908 [0193.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a908 | out: hHeap=0x1f0000) returned 1 [0193.040] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x4c130c00, ftCreationTime.dwHighDateTime=0x1cac6d9, ftLastAccessTime.dwLowDateTime=0x4c130c00, ftLastAccessTime.dwHighDateTime=0x1cac6d9, ftLastWriteTime.dwLowDateTime=0x4c130c00, ftLastWriteTime.dwHighDateTime=0x1cac6d9, nFileSizeHigh=0x0, nFileSizeLow=0x11c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfx_Core_x86.msi", cAlternateFileName="NETFX_~2.MSI")) returned 1 [0193.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2281f8 [0193.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228310 [0193.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ab78 [0193.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228310 | out: hHeap=0x1f0000) returned 1 [0193.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ac48 | out: hHeap=0x1f0000) returned 1 [0193.041] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2281f8 | out: hHeap=0x1f0000) returned 1 [0193.041] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\netfx_Core_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x86.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0193.041] GetFileType (hFile=0x1f8) returned 0x1 [0193.041] CloseHandle (hObject=0x1f8) returned 1 [0193.042] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22aaa8 [0193.042] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\netfx_Core_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x86.msi"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x4c130c00, ftCreationTime.dwHighDateTime=0x1cac6d9, ftLastAccessTime.dwLowDateTime=0x4c130c00, ftLastAccessTime.dwHighDateTime=0x1cac6d9, ftLastWriteTime.dwLowDateTime=0x4c130c00, ftLastWriteTime.dwHighDateTime=0x1cac6d9, nFileSizeHigh=0x0, nFileSizeLow=0x11c000)) returned 1 [0193.042] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aaa8 | out: hHeap=0x1f0000) returned 1 [0193.042] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22aaa8 [0193.042] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\netfx_Core_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x86.msi"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x4c130c00, ftCreationTime.dwHighDateTime=0x1cac6d9, ftLastAccessTime.dwLowDateTime=0x4c130c00, ftLastAccessTime.dwHighDateTime=0x1cac6d9, ftLastWriteTime.dwLowDateTime=0x4c130c00, ftLastWriteTime.dwHighDateTime=0x1cac6d9, nFileSizeHigh=0x0, nFileSizeLow=0x11c000)) returned 1 [0193.042] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aaa8 | out: hHeap=0x1f0000) returned 1 [0193.042] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22abe0 [0193.042] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22abe0 | out: hHeap=0x1f0000) returned 1 [0193.042] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf74cd515, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf74cd515, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf7cd9415, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x29222c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfx_Extended.mzz", cAlternateFileName="NETFX_~2.MZZ")) returned 1 [0193.042] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2281f8 [0193.042] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228310 [0193.042] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22abe0 [0193.043] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228310 | out: hHeap=0x1f0000) returned 1 [0193.043] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab78 | out: hHeap=0x1f0000) returned 1 [0193.043] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2281f8 | out: hHeap=0x1f0000) returned 1 [0193.043] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\netfx_Extended.mzz" (normalized: "c:\\588bce7c90097ed212\\netfx_extended.mzz"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0193.043] GetFileType (hFile=0x1f8) returned 0x1 [0193.043] CloseHandle (hObject=0x1f8) returned 1 [0193.044] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a838 [0193.044] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\netfx_Extended.mzz" (normalized: "c:\\588bce7c90097ed212\\netfx_extended.mzz"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf74cd515, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf74cd515, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf7cd9415, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x29222c7)) returned 1 [0193.044] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a838 | out: hHeap=0x1f0000) returned 1 [0193.044] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22acb0 [0193.044] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\netfx_Extended.mzz" (normalized: "c:\\588bce7c90097ed212\\netfx_extended.mzz"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf74cd515, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf74cd515, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf7cd9415, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x29222c7)) returned 1 [0193.044] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22acb0 | out: hHeap=0x1f0000) returned 1 [0193.044] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a9d8 [0193.044] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a9d8 | out: hHeap=0x1f0000) returned 1 [0193.044] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2dbe0800, ftCreationTime.dwHighDateTime=0x1cac6fb, ftLastAccessTime.dwLowDateTime=0x2dbe0800, ftLastAccessTime.dwHighDateTime=0x1cac6fb, ftLastWriteTime.dwLowDateTime=0x2dbe0800, ftLastWriteTime.dwHighDateTime=0x1cac6fb, nFileSizeHigh=0x0, nFileSizeLow=0xd5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfx_Extended_x64.msi", cAlternateFileName="NETFX_~3.MSI")) returned 1 [0193.044] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2281f8 [0193.044] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282a0 [0193.044] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22aeb8 [0193.044] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0193.044] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22abe0 | out: hHeap=0x1f0000) returned 1 [0193.044] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2281f8 | out: hHeap=0x1f0000) returned 1 [0193.045] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\netfx_Extended_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0193.045] GetFileType (hFile=0x1f8) returned 0x1 [0193.045] CloseHandle (hObject=0x1f8) returned 1 [0193.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22acb0 [0193.045] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\netfx_Extended_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x64.msi"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2dbe0800, ftCreationTime.dwHighDateTime=0x1cac6fb, ftLastAccessTime.dwLowDateTime=0x2dbe0800, ftLastAccessTime.dwHighDateTime=0x1cac6fb, ftLastWriteTime.dwLowDateTime=0x2dbe0800, ftLastWriteTime.dwHighDateTime=0x1cac6fb, nFileSizeHigh=0x0, nFileSizeLow=0xd5000)) returned 1 [0193.046] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22acb0 | out: hHeap=0x1f0000) returned 1 [0193.046] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22aa40 [0193.046] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\netfx_Extended_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x64.msi"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2dbe0800, ftCreationTime.dwHighDateTime=0x1cac6fb, ftLastAccessTime.dwLowDateTime=0x2dbe0800, ftLastAccessTime.dwHighDateTime=0x1cac6fb, ftLastWriteTime.dwLowDateTime=0x2dbe0800, ftLastWriteTime.dwHighDateTime=0x1cac6fb, nFileSizeHigh=0x0, nFileSizeLow=0xd5000)) returned 1 [0193.046] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aa40 | out: hHeap=0x1f0000) returned 1 [0193.046] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ade8 [0193.046] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ade8 | out: hHeap=0x1f0000) returned 1 [0193.046] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x7626f700, ftCreationTime.dwHighDateTime=0x1cac6f6, ftLastAccessTime.dwLowDateTime=0x7626f700, ftLastAccessTime.dwHighDateTime=0x1cac6f6, ftLastWriteTime.dwLowDateTime=0x7626f700, ftLastWriteTime.dwHighDateTime=0x1cac6f6, nFileSizeHigh=0x0, nFileSizeLow=0x79000, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfx_Extended_x86.msi", cAlternateFileName="NETFX_~4.MSI")) returned 1 [0193.047] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2281f8 [0193.047] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228310 [0193.047] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ae50 [0193.047] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228310 | out: hHeap=0x1f0000) returned 1 [0193.047] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aeb8 | out: hHeap=0x1f0000) returned 1 [0193.047] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2281f8 | out: hHeap=0x1f0000) returned 1 [0193.047] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\netfx_Extended_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x86.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0193.047] GetFileType (hFile=0x1f8) returned 0x1 [0193.048] CloseHandle (hObject=0x1f8) returned 1 [0193.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22aeb8 [0193.049] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\netfx_Extended_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x86.msi"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x7626f700, ftCreationTime.dwHighDateTime=0x1cac6f6, ftLastAccessTime.dwLowDateTime=0x7626f700, ftLastAccessTime.dwHighDateTime=0x1cac6f6, ftLastWriteTime.dwLowDateTime=0x7626f700, ftLastWriteTime.dwHighDateTime=0x1cac6f6, nFileSizeHigh=0x0, nFileSizeLow=0x79000)) returned 1 [0193.049] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aeb8 | out: hHeap=0x1f0000) returned 1 [0193.049] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ab78 [0193.049] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\netfx_Extended_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x86.msi"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x7626f700, ftCreationTime.dwHighDateTime=0x1cac6f6, ftLastAccessTime.dwLowDateTime=0x7626f700, ftLastAccessTime.dwHighDateTime=0x1cac6f6, ftLastWriteTime.dwLowDateTime=0x7626f700, ftLastWriteTime.dwHighDateTime=0x1cac6f6, nFileSizeHigh=0x0, nFileSizeLow=0x79000)) returned 1 [0193.049] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab78 | out: hHeap=0x1f0000) returned 1 [0193.049] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ab78 [0193.049] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab78 | out: hHeap=0x1f0000) returned 1 [0193.049] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc749eed, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xbc749eed, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xbc753bbf, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfx_Extended_x86.msi.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="NETFX_~1.ODV")) returned 1 [0193.049] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x239be0 [0193.049] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2281f8 [0193.050] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x239c98 [0193.050] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2281f8 | out: hHeap=0x1f0000) returned 1 [0193.050] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ae50 | out: hHeap=0x1f0000) returned 1 [0193.050] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239be0 | out: hHeap=0x1f0000) returned 1 [0193.050] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\netfx_Extended_x86.msi.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x86.msi.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0193.050] GetFileType (hFile=0x1f8) returned 0x1 [0193.051] CloseHandle (hObject=0x1f8) returned 1 [0193.421] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x24f778 [0193.421] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\netfx_Extended_x86.msi.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x86.msi.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc749eed, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xbc749eed, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xbc753bbf, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x23000)) returned 1 [0193.422] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f778 | out: hHeap=0x1f0000) returned 1 [0193.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x24f778 [0193.422] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\netfx_Extended_x86.msi.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x86.msi.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc749eed, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xbc749eed, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xbc753bbf, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x23000)) returned 1 [0193.422] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f778 | out: hHeap=0x1f0000) returned 1 [0193.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x24f778 [0193.422] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f778 | out: hHeap=0x1f0000) returned 1 [0193.422] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x4a0f7400, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x4a0f7400, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x4a0f7400, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x426ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="ParameterInfo.xml", cAlternateFileName="PARAME~1.XML")) returned 1 [0193.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2280e0 [0193.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ba0 [0193.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ae50 [0193.422] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ba0 | out: hHeap=0x1f0000) returned 1 [0193.422] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239c98 | out: hHeap=0x1f0000) returned 1 [0193.422] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2280e0 | out: hHeap=0x1f0000) returned 1 [0193.548] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\ParameterInfo.xml" (normalized: "c:\\588bce7c90097ed212\\parameterinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0193.549] GetFileType (hFile=0x1e4) returned 0x1 [0193.549] CloseHandle (hObject=0x1e4) returned 1 [0193.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22aeb8 [0193.549] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\ParameterInfo.xml" (normalized: "c:\\588bce7c90097ed212\\parameterinfo.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x4a0f7400, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x4a0f7400, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x4a0f7400, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x426ae)) returned 1 [0193.549] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aeb8 | out: hHeap=0x1f0000) returned 1 [0193.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a8a0 [0193.550] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\ParameterInfo.xml" (normalized: "c:\\588bce7c90097ed212\\parameterinfo.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x4a0f7400, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x4a0f7400, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x4a0f7400, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x426ae)) returned 1 [0193.550] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a8a0 | out: hHeap=0x1f0000) returned 1 [0193.550] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a8a0 [0193.550] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a8a0 | out: hHeap=0x1f0000) returned 1 [0193.550] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x19dedd00, ftCreationTime.dwHighDateTime=0x1ca2a1b, ftLastAccessTime.dwLowDateTime=0x19dedd00, ftLastAccessTime.dwHighDateTime=0x1ca2a1b, ftLastWriteTime.dwLowDateTime=0x19dedd00, ftLastWriteTime.dwHighDateTime=0x1ca2a1b, nFileSizeHigh=0x0, nFileSizeLow=0x2d200, dwReserved0=0x0, dwReserved1=0x0, cFileName="RGB9RAST_x64.msi", cAlternateFileName="RGB9RA~1.MSI")) returned 1 [0193.550] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2280e0 [0193.550] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ba0 [0193.550] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239820 [0193.550] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ba0 | out: hHeap=0x1f0000) returned 1 [0193.550] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ae50 | out: hHeap=0x1f0000) returned 1 [0193.550] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2280e0 | out: hHeap=0x1f0000) returned 1 [0193.551] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\RGB9RAST_x64.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0193.551] GetFileType (hFile=0x1e4) returned 0x1 [0193.552] CloseHandle (hObject=0x1e4) returned 1 [0193.552] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2396c0 [0193.552] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\RGB9RAST_x64.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x64.msi"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x19dedd00, ftCreationTime.dwHighDateTime=0x1ca2a1b, ftLastAccessTime.dwLowDateTime=0x19dedd00, ftLastAccessTime.dwHighDateTime=0x1ca2a1b, ftLastWriteTime.dwLowDateTime=0x19dedd00, ftLastWriteTime.dwHighDateTime=0x1ca2a1b, nFileSizeHigh=0x0, nFileSizeLow=0x2d200)) returned 1 [0193.552] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2396c0 | out: hHeap=0x1f0000) returned 1 [0193.552] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239560 [0193.552] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\RGB9RAST_x64.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x64.msi"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x19dedd00, ftCreationTime.dwHighDateTime=0x1ca2a1b, ftLastAccessTime.dwLowDateTime=0x19dedd00, ftLastAccessTime.dwHighDateTime=0x1ca2a1b, ftLastWriteTime.dwLowDateTime=0x19dedd00, ftLastWriteTime.dwHighDateTime=0x1ca2a1b, nFileSizeHigh=0x0, nFileSizeLow=0x2d200)) returned 1 [0193.552] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239560 | out: hHeap=0x1f0000) returned 1 [0193.552] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239718 [0193.553] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239718 | out: hHeap=0x1f0000) returned 1 [0193.553] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x177c8300, ftCreationTime.dwHighDateTime=0x1ca2a1b, ftLastAccessTime.dwLowDateTime=0x177c8300, ftLastAccessTime.dwHighDateTime=0x1ca2a1b, ftLastWriteTime.dwLowDateTime=0x177c8300, ftLastWriteTime.dwHighDateTime=0x1ca2a1b, nFileSizeHigh=0x0, nFileSizeLow=0x17200, dwReserved0=0x0, dwReserved1=0x0, cFileName="RGB9Rast_x86.msi", cAlternateFileName="RGB9RA~2.MSI")) returned 1 [0193.553] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ba0 [0193.553] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2280e0 [0193.553] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2394b0 [0193.553] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2280e0 | out: hHeap=0x1f0000) returned 1 [0193.553] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239820 | out: hHeap=0x1f0000) returned 1 [0193.553] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ba0 | out: hHeap=0x1f0000) returned 1 [0193.553] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\RGB9Rast_x86.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x86.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0193.554] GetFileType (hFile=0x1e4) returned 0x1 [0193.554] CloseHandle (hObject=0x1e4) returned 1 [0193.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239610 [0193.554] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\RGB9Rast_x86.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x86.msi"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x177c8300, ftCreationTime.dwHighDateTime=0x1ca2a1b, ftLastAccessTime.dwLowDateTime=0x177c8300, ftLastAccessTime.dwHighDateTime=0x1ca2a1b, ftLastWriteTime.dwLowDateTime=0x177c8300, ftLastWriteTime.dwHighDateTime=0x1ca2a1b, nFileSizeHigh=0x0, nFileSizeLow=0x17200)) returned 1 [0193.554] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239610 | out: hHeap=0x1f0000) returned 1 [0193.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239458 [0193.554] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\RGB9Rast_x86.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x86.msi"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x177c8300, ftCreationTime.dwHighDateTime=0x1ca2a1b, ftLastAccessTime.dwLowDateTime=0x177c8300, ftLastAccessTime.dwHighDateTime=0x1ca2a1b, ftLastWriteTime.dwLowDateTime=0x177c8300, ftLastWriteTime.dwHighDateTime=0x1ca2a1b, nFileSizeHigh=0x0, nFileSizeLow=0x17200)) returned 1 [0193.555] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239458 | out: hHeap=0x1f0000) returned 1 [0193.555] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2396c0 [0193.555] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2396c0 | out: hHeap=0x1f0000) returned 1 [0193.555] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x13148, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.exe", cAlternateFileName="")) returned 1 [0193.555] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b548 [0193.555] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227bd8 [0193.555] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239ae0 [0193.555] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227bd8 | out: hHeap=0x1f0000) returned 1 [0193.555] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2394b0 | out: hHeap=0x1f0000) returned 1 [0193.555] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b548 | out: hHeap=0x1f0000) returned 1 [0193.556] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Setup.exe" (normalized: "c:\\588bce7c90097ed212\\setup.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0193.559] GetFileType (hFile=0x1e4) returned 0x1 [0193.559] CloseHandle (hObject=0x1e4) returned 1 [0193.559] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239928 [0193.559] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Setup.exe" (normalized: "c:\\588bce7c90097ed212\\setup.exe"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x13148)) returned 1 [0193.559] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239928 | out: hHeap=0x1f0000) returned 1 [0193.559] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2397c8 [0193.559] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Setup.exe" (normalized: "c:\\588bce7c90097ed212\\setup.exe"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x13148)) returned 1 [0193.559] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2397c8 | out: hHeap=0x1f0000) returned 1 [0193.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2394b0 [0193.560] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2394b0 | out: hHeap=0x1f0000) returned 1 [0193.560] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0xc5158, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupEngine.dll", cAlternateFileName="SETUPE~1.DLL")) returned 1 [0193.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b548 [0193.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ba0 [0193.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239770 [0193.560] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ba0 | out: hHeap=0x1f0000) returned 1 [0193.560] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239ae0 | out: hHeap=0x1f0000) returned 1 [0193.560] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b548 | out: hHeap=0x1f0000) returned 1 [0193.561] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\SetupEngine.dll" (normalized: "c:\\588bce7c90097ed212\\setupengine.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0193.562] GetFileType (hFile=0x1e4) returned 0x1 [0193.562] CloseHandle (hObject=0x1e4) returned 1 [0193.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2398d0 [0193.563] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\SetupEngine.dll" (normalized: "c:\\588bce7c90097ed212\\setupengine.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0xc5158)) returned 1 [0193.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2398d0 | out: hHeap=0x1f0000) returned 1 [0193.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239610 [0193.563] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\SetupEngine.dll" (normalized: "c:\\588bce7c90097ed212\\setupengine.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0xc5158)) returned 1 [0193.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239610 | out: hHeap=0x1f0000) returned 1 [0193.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2394b0 [0193.564] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2394b0 | out: hHeap=0x1f0000) returned 1 [0193.564] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x48150, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupUi.dll", cAlternateFileName="")) returned 1 [0193.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b6d8 [0193.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2280e0 [0193.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2398d0 [0193.564] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2280e0 | out: hHeap=0x1f0000) returned 1 [0193.564] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239770 | out: hHeap=0x1f0000) returned 1 [0193.564] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b6d8 | out: hHeap=0x1f0000) returned 1 [0193.565] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\SetupUi.dll" (normalized: "c:\\588bce7c90097ed212\\setupui.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0193.566] GetFileType (hFile=0x1e4) returned 0x1 [0193.566] CloseHandle (hObject=0x1e4) returned 1 [0193.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239928 [0193.567] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\SetupUi.dll" (normalized: "c:\\588bce7c90097ed212\\setupui.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x48150)) returned 1 [0193.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239928 | out: hHeap=0x1f0000) returned 1 [0193.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239560 [0193.567] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\SetupUi.dll" (normalized: "c:\\588bce7c90097ed212\\setupui.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x48150)) returned 1 [0193.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239560 | out: hHeap=0x1f0000) returned 1 [0193.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2394b0 [0193.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2394b0 | out: hHeap=0x1f0000) returned 1 [0193.568] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5381000, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x5381000, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x5381000, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x75a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupUi.xsd", cAlternateFileName="")) returned 1 [0193.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b778 [0193.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227bd8 [0193.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239b38 [0193.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227bd8 | out: hHeap=0x1f0000) returned 1 [0193.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2398d0 | out: hHeap=0x1f0000) returned 1 [0193.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b778 | out: hHeap=0x1f0000) returned 1 [0193.569] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\SetupUi.xsd" (normalized: "c:\\588bce7c90097ed212\\setupui.xsd"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0193.569] GetFileType (hFile=0x1e4) returned 0x1 [0193.569] CloseHandle (hObject=0x1e4) returned 1 [0193.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239508 [0193.570] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\SetupUi.xsd" (normalized: "c:\\588bce7c90097ed212\\setupui.xsd"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5381000, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x5381000, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x5381000, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x75a8)) returned 1 [0193.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239508 | out: hHeap=0x1f0000) returned 1 [0193.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239400 [0193.570] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\SetupUi.xsd" (normalized: "c:\\588bce7c90097ed212\\setupui.xsd"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5381000, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x5381000, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x5381000, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x75a8)) returned 1 [0193.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239400 | out: hHeap=0x1f0000) returned 1 [0193.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239400 [0193.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239400 | out: hHeap=0x1f0000) returned 1 [0193.571] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x6519be00, ftCreationTime.dwHighDateTime=0x1cac6d5, ftLastAccessTime.dwLowDateTime=0x6519be00, ftLastAccessTime.dwHighDateTime=0x1cac6d5, ftLastWriteTime.dwLowDateTime=0x6519be00, ftLastWriteTime.dwHighDateTime=0x1cac6d5, nFileSizeHigh=0x0, nFileSizeLow=0x17758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupUtility.exe", cAlternateFileName="SETUPU~1.EXE")) returned 1 [0193.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2280e0 [0193.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ba0 [0193.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239770 [0193.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ba0 | out: hHeap=0x1f0000) returned 1 [0193.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239b38 | out: hHeap=0x1f0000) returned 1 [0193.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2280e0 | out: hHeap=0x1f0000) returned 1 [0193.572] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\SetupUtility.exe" (normalized: "c:\\588bce7c90097ed212\\setuputility.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0193.572] GetFileType (hFile=0x1e4) returned 0x1 [0193.572] CloseHandle (hObject=0x1e4) returned 1 [0193.572] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2398d0 [0193.572] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\SetupUtility.exe" (normalized: "c:\\588bce7c90097ed212\\setuputility.exe"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x6519be00, ftCreationTime.dwHighDateTime=0x1cac6d5, ftLastAccessTime.dwLowDateTime=0x6519be00, ftLastAccessTime.dwHighDateTime=0x1cac6d5, ftLastWriteTime.dwLowDateTime=0x6519be00, ftLastWriteTime.dwHighDateTime=0x1cac6d5, nFileSizeHigh=0x0, nFileSizeLow=0x17758)) returned 1 [0193.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2398d0 | out: hHeap=0x1f0000) returned 1 [0193.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2399d8 [0193.573] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\SetupUtility.exe" (normalized: "c:\\588bce7c90097ed212\\setuputility.exe"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x6519be00, ftCreationTime.dwHighDateTime=0x1cac6d5, ftLastAccessTime.dwLowDateTime=0x6519be00, ftLastAccessTime.dwHighDateTime=0x1cac6d5, ftLastWriteTime.dwLowDateTime=0x6519be00, ftLastWriteTime.dwHighDateTime=0x1cac6d5, nFileSizeHigh=0x0, nFileSizeLow=0x17758)) returned 1 [0193.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2399d8 | out: hHeap=0x1f0000) returned 1 [0193.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2399d8 [0193.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2399d8 | out: hHeap=0x1f0000) returned 1 [0193.573] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0xa078, dwReserved0=0x0, dwReserved1=0x0, cFileName="SplashScreen.bmp", cAlternateFileName="SPLASH~1.BMP")) returned 1 [0193.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ba0 [0193.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2280e0 [0193.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239668 [0193.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2280e0 | out: hHeap=0x1f0000) returned 1 [0193.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239770 | out: hHeap=0x1f0000) returned 1 [0193.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ba0 | out: hHeap=0x1f0000) returned 1 [0193.574] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\SplashScreen.bmp" (normalized: "c:\\588bce7c90097ed212\\splashscreen.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0193.574] GetFileType (hFile=0x1e4) returned 0x1 [0193.574] CloseHandle (hObject=0x1e4) returned 1 [0193.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2396c0 [0193.574] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\SplashScreen.bmp" (normalized: "c:\\588bce7c90097ed212\\splashscreen.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0xa078)) returned 1 [0193.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2396c0 | out: hHeap=0x1f0000) returned 1 [0193.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239560 [0193.574] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\SplashScreen.bmp" (normalized: "c:\\588bce7c90097ed212\\splashscreen.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0xa078)) returned 1 [0193.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239560 | out: hHeap=0x1f0000) returned 1 [0193.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239610 [0193.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239610 | out: hHeap=0x1f0000) returned 1 [0193.574] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x143bc400, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0x143bc400, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0x143bc400, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x23420, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1 [0193.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b548 [0193.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ba0 [0193.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239400 [0193.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ba0 | out: hHeap=0x1f0000) returned 1 [0193.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239668 | out: hHeap=0x1f0000) returned 1 [0193.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b548 | out: hHeap=0x1f0000) returned 1 [0193.575] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\sqmapi.dll" (normalized: "c:\\588bce7c90097ed212\\sqmapi.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0193.575] GetFileType (hFile=0x1e4) returned 0x1 [0193.575] CloseHandle (hObject=0x1e4) returned 1 [0193.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239610 [0193.575] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\sqmapi.dll" (normalized: "c:\\588bce7c90097ed212\\sqmapi.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x143bc400, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0x143bc400, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0x143bc400, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x23420)) returned 1 [0193.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239610 | out: hHeap=0x1f0000) returned 1 [0193.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239508 [0193.575] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\sqmapi.dll" (normalized: "c:\\588bce7c90097ed212\\sqmapi.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x143bc400, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0x143bc400, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0x143bc400, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x23420)) returned 1 [0193.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239508 | out: hHeap=0x1f0000) returned 1 [0193.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239458 [0193.576] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239458 | out: hHeap=0x1f0000) returned 1 [0193.576] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x3704, dwReserved0=0x0, dwReserved1=0x0, cFileName="Strings.xml", cAlternateFileName="")) returned 1 [0193.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b750 [0193.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ba0 [0193.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239ae0 [0193.576] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ba0 | out: hHeap=0x1f0000) returned 1 [0193.576] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239400 | out: hHeap=0x1f0000) returned 1 [0193.576] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b750 | out: hHeap=0x1f0000) returned 1 [0193.576] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Strings.xml" (normalized: "c:\\588bce7c90097ed212\\strings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0193.576] GetFileType (hFile=0x1e4) returned 0x1 [0193.576] CloseHandle (hObject=0x1e4) returned 1 [0193.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239610 [0193.577] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Strings.xml" (normalized: "c:\\588bce7c90097ed212\\strings.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x3704)) returned 1 [0193.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239610 | out: hHeap=0x1f0000) returned 1 [0193.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239560 [0193.577] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Strings.xml" (normalized: "c:\\588bce7c90097ed212\\strings.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x3704)) returned 1 [0193.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239560 | out: hHeap=0x1f0000) returned 1 [0193.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239820 [0193.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239820 | out: hHeap=0x1f0000) returned 1 [0193.577] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x97f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 1 [0193.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b458 [0193.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2280e0 [0193.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239770 [0193.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2280e0 | out: hHeap=0x1f0000) returned 1 [0193.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239ae0 | out: hHeap=0x1f0000) returned 1 [0193.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b458 | out: hHeap=0x1f0000) returned 1 [0193.577] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\uiinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0193.578] GetFileType (hFile=0x1e4) returned 0x1 [0193.578] CloseHandle (hObject=0x1e4) returned 1 [0193.578] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239458 [0193.578] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\uiinfo.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x97f2)) returned 1 [0193.578] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239458 | out: hHeap=0x1f0000) returned 1 [0193.578] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239820 [0193.578] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\uiinfo.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x97f2)) returned 1 [0193.578] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239820 | out: hHeap=0x1f0000) returned 1 [0193.578] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239a30 [0193.578] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239a30 | out: hHeap=0x1f0000) returned 1 [0193.579] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x87910600, ftCreationTime.dwHighDateTime=0x1ca2a27, ftLastAccessTime.dwLowDateTime=0x87910600, ftLastAccessTime.dwHighDateTime=0x1ca2a27, ftLastWriteTime.dwLowDateTime=0x87910600, ftLastWriteTime.dwHighDateTime=0x1ca2a27, nFileSizeHigh=0x0, nFileSizeLow=0x19688, dwReserved0=0x0, dwReserved1=0x0, cFileName="watermark.bmp", cAlternateFileName="WATERM~1.BMP")) returned 1 [0193.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b6d8 [0193.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2280e0 [0193.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239820 [0193.579] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2280e0 | out: hHeap=0x1f0000) returned 1 [0193.579] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239770 | out: hHeap=0x1f0000) returned 1 [0193.579] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b6d8 | out: hHeap=0x1f0000) returned 1 [0193.579] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\watermark.bmp" (normalized: "c:\\588bce7c90097ed212\\watermark.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0193.580] GetFileType (hFile=0x1e4) returned 0x1 [0193.580] CloseHandle (hObject=0x1e4) returned 1 [0193.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2398d0 [0193.580] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\watermark.bmp" (normalized: "c:\\588bce7c90097ed212\\watermark.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x87910600, ftCreationTime.dwHighDateTime=0x1ca2a27, ftLastAccessTime.dwLowDateTime=0x87910600, ftLastAccessTime.dwHighDateTime=0x1ca2a27, ftLastWriteTime.dwLowDateTime=0x87910600, ftLastWriteTime.dwHighDateTime=0x1ca2a27, nFileSizeHigh=0x0, nFileSizeLow=0x19688)) returned 1 [0193.581] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2398d0 | out: hHeap=0x1f0000) returned 1 [0193.581] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239b38 [0193.581] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\watermark.bmp" (normalized: "c:\\588bce7c90097ed212\\watermark.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x87910600, ftCreationTime.dwHighDateTime=0x1ca2a27, ftLastAccessTime.dwLowDateTime=0x87910600, ftLastAccessTime.dwHighDateTime=0x1ca2a27, ftLastWriteTime.dwLowDateTime=0x87910600, ftLastWriteTime.dwHighDateTime=0x1ca2a27, nFileSizeHigh=0x0, nFileSizeLow=0x19688)) returned 1 [0193.581] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239b38 | out: hHeap=0x1f0000) returned 1 [0193.581] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239b38 [0193.581] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239b38 | out: hHeap=0x1f0000) returned 1 [0193.581] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2120bc00, ftCreationTime.dwHighDateTime=0x1cac6c9, ftLastAccessTime.dwLowDateTime=0x2120bc00, ftLastAccessTime.dwHighDateTime=0x1cac6c9, ftLastWriteTime.dwLowDateTime=0x2120bc00, ftLastWriteTime.dwHighDateTime=0x1cac6c9, nFileSizeHigh=0x0, nFileSizeLow=0x4f5113, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.0-KB956250-v6001-x64.msu", cAlternateFileName="WINDOW~1.MSU")) returned 1 [0193.581] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239928 [0193.581] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2280e0 [0193.581] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229f18 [0193.581] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2280e0 | out: hHeap=0x1f0000) returned 1 [0193.582] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239820 | out: hHeap=0x1f0000) returned 1 [0193.582] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239928 | out: hHeap=0x1f0000) returned 1 [0193.582] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x64.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x64.msu"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0193.583] GetFileType (hFile=0x1e4) returned 0x1 [0193.584] CloseHandle (hObject=0x1e4) returned 1 [0193.584] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229b60 [0193.584] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x64.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x64.msu"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2120bc00, ftCreationTime.dwHighDateTime=0x1cac6c9, ftLastAccessTime.dwLowDateTime=0x2120bc00, ftLastAccessTime.dwHighDateTime=0x1cac6c9, ftLastWriteTime.dwLowDateTime=0x2120bc00, ftLastWriteTime.dwHighDateTime=0x1cac6c9, nFileSizeHigh=0x0, nFileSizeLow=0x4f5113)) returned 1 [0193.584] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229b60 | out: hHeap=0x1f0000) returned 1 [0193.584] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229fa0 [0193.584] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x64.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x64.msu"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2120bc00, ftCreationTime.dwHighDateTime=0x1cac6c9, ftLastAccessTime.dwLowDateTime=0x2120bc00, ftLastAccessTime.dwHighDateTime=0x1cac6c9, ftLastWriteTime.dwLowDateTime=0x2120bc00, ftLastWriteTime.dwHighDateTime=0x1cac6c9, nFileSizeHigh=0x0, nFileSizeLow=0x4f5113)) returned 1 [0193.584] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229fa0 | out: hHeap=0x1f0000) returned 1 [0193.585] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229b60 [0193.585] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229b60 | out: hHeap=0x1f0000) returned 1 [0193.585] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x1bbe7400, ftCreationTime.dwHighDateTime=0x1cac6bf, ftLastAccessTime.dwLowDateTime=0x1bbe7400, ftLastAccessTime.dwHighDateTime=0x1cac6bf, ftLastWriteTime.dwLowDateTime=0x1bbe7400, ftLastWriteTime.dwHighDateTime=0x1cac6bf, nFileSizeHigh=0x0, nFileSizeLow=0x217520, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.0-KB956250-v6001-x86.msu", cAlternateFileName="WINDOW~2.MSU")) returned 1 [0193.585] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2399d8 [0193.585] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ba0 [0193.585] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a0b0 [0193.585] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ba0 | out: hHeap=0x1f0000) returned 1 [0193.585] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229f18 | out: hHeap=0x1f0000) returned 1 [0193.585] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2399d8 | out: hHeap=0x1f0000) returned 1 [0193.586] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x86.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x86.msu"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0193.586] GetFileType (hFile=0x1e4) returned 0x1 [0193.586] CloseHandle (hObject=0x1e4) returned 1 [0193.587] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a710 [0193.587] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x86.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x86.msu"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x1bbe7400, ftCreationTime.dwHighDateTime=0x1cac6bf, ftLastAccessTime.dwLowDateTime=0x1bbe7400, ftLastAccessTime.dwHighDateTime=0x1cac6bf, ftLastWriteTime.dwLowDateTime=0x1bbe7400, ftLastWriteTime.dwHighDateTime=0x1cac6bf, nFileSizeHigh=0x0, nFileSizeLow=0x217520)) returned 1 [0193.587] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a710 | out: hHeap=0x1f0000) returned 1 [0193.587] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229fa0 [0193.587] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x86.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x86.msu"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x1bbe7400, ftCreationTime.dwHighDateTime=0x1cac6bf, ftLastAccessTime.dwLowDateTime=0x1bbe7400, ftLastAccessTime.dwHighDateTime=0x1cac6bf, ftLastWriteTime.dwLowDateTime=0x1bbe7400, ftLastWriteTime.dwHighDateTime=0x1cac6bf, nFileSizeHigh=0x0, nFileSizeLow=0x217520)) returned 1 [0193.587] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229fa0 | out: hHeap=0x1f0000) returned 1 [0193.587] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229940 [0193.587] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229940 | out: hHeap=0x1f0000) returned 1 [0193.587] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5b8e5700, ftCreationTime.dwHighDateTime=0x1cac6d1, ftLastAccessTime.dwLowDateTime=0x5b8e5700, ftLastAccessTime.dwHighDateTime=0x1cac6d1, ftLastWriteTime.dwLowDateTime=0x5b8e5700, ftLastWriteTime.dwHighDateTime=0x1cac6d1, nFileSizeHigh=0x0, nFileSizeLow=0x4db1ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB958488-v6001-x64.msu", cAlternateFileName="WINDOW~3.MSU")) returned 1 [0193.588] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2394b0 [0193.588] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227bd8 [0193.588] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229940 [0193.588] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227bd8 | out: hHeap=0x1f0000) returned 1 [0193.588] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a0b0 | out: hHeap=0x1f0000) returned 1 [0193.588] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2394b0 | out: hHeap=0x1f0000) returned 1 [0193.588] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x64.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x64.msu"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0193.589] GetFileType (hFile=0x1e4) returned 0x1 [0193.589] CloseHandle (hObject=0x1e4) returned 1 [0193.589] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a138 [0193.589] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x64.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x64.msu"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5b8e5700, ftCreationTime.dwHighDateTime=0x1cac6d1, ftLastAccessTime.dwLowDateTime=0x5b8e5700, ftLastAccessTime.dwHighDateTime=0x1cac6d1, ftLastWriteTime.dwLowDateTime=0x5b8e5700, ftLastWriteTime.dwHighDateTime=0x1cac6d1, nFileSizeHigh=0x0, nFileSizeLow=0x4db1ce)) returned 1 [0193.589] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a138 | out: hHeap=0x1f0000) returned 1 [0193.589] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a0b0 [0193.589] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x64.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x64.msu"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5b8e5700, ftCreationTime.dwHighDateTime=0x1cac6d1, ftLastAccessTime.dwLowDateTime=0x5b8e5700, ftLastAccessTime.dwHighDateTime=0x1cac6d1, ftLastWriteTime.dwLowDateTime=0x5b8e5700, ftLastWriteTime.dwHighDateTime=0x1cac6d1, nFileSizeHigh=0x0, nFileSizeLow=0x4db1ce)) returned 1 [0193.590] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a0b0 | out: hHeap=0x1f0000) returned 1 [0193.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a688 [0193.590] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a688 | out: hHeap=0x1f0000) returned 1 [0193.590] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd0ac5d00, ftCreationTime.dwHighDateTime=0x1cac6ce, ftLastAccessTime.dwLowDateTime=0xd0ac5d00, ftLastAccessTime.dwHighDateTime=0x1cac6ce, ftLastWriteTime.dwLowDateTime=0xd0ac5d00, ftLastWriteTime.dwHighDateTime=0x1cac6ce, nFileSizeHigh=0x0, nFileSizeLow=0x20acf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB958488-v6001-x86.msu", cAlternateFileName="WINDOW~4.MSU")) returned 1 [0193.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239668 [0193.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2280e0 [0193.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a248 [0193.590] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2280e0 | out: hHeap=0x1f0000) returned 1 [0193.590] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229940 | out: hHeap=0x1f0000) returned 1 [0193.590] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239668 | out: hHeap=0x1f0000) returned 1 [0193.590] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x86.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x86.msu"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0193.591] GetFileType (hFile=0x1e4) returned 0x1 [0193.591] CloseHandle (hObject=0x1e4) returned 1 [0193.591] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229e08 [0193.591] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x86.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x86.msu"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd0ac5d00, ftCreationTime.dwHighDateTime=0x1cac6ce, ftLastAccessTime.dwLowDateTime=0xd0ac5d00, ftLastAccessTime.dwHighDateTime=0x1cac6ce, ftLastWriteTime.dwLowDateTime=0xd0ac5d00, ftLastWriteTime.dwHighDateTime=0x1cac6ce, nFileSizeHigh=0x0, nFileSizeLow=0x20acf9)) returned 1 [0193.591] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229e08 | out: hHeap=0x1f0000) returned 1 [0193.591] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a3e0 [0193.591] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x86.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x86.msu"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd0ac5d00, ftCreationTime.dwHighDateTime=0x1cac6ce, ftLastAccessTime.dwLowDateTime=0xd0ac5d00, ftLastAccessTime.dwHighDateTime=0x1cac6ce, ftLastWriteTime.dwLowDateTime=0xd0ac5d00, ftLastWriteTime.dwHighDateTime=0x1cac6ce, nFileSizeHigh=0x0, nFileSizeLow=0x20acf9)) returned 1 [0193.592] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a3e0 | out: hHeap=0x1f0000) returned 1 [0193.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2299c8 [0193.592] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2299c8 | out: hHeap=0x1f0000) returned 1 [0193.592] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd0ac5d00, ftCreationTime.dwHighDateTime=0x1cac6ce, ftLastAccessTime.dwLowDateTime=0xd0ac5d00, ftLastAccessTime.dwHighDateTime=0x1cac6ce, ftLastWriteTime.dwLowDateTime=0xd0ac5d00, ftLastWriteTime.dwHighDateTime=0x1cac6ce, nFileSizeHigh=0x0, nFileSizeLow=0x20acf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB958488-v6001-x86.msu", cAlternateFileName="WINDOW~4.MSU")) returned 0 [0193.592] FindClose (in: hFindFile=0x214150 | out: hFindFile=0x214150) returned 1 [0193.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222250 [0193.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b480 [0193.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e030 [0193.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221dd0 [0193.592] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1025\\*", lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x214150 [0193.828] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221f80 [0193.828] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221dd0 | out: hHeap=0x1f0000) returned 1 [0193.828] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0193.828] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0193.828] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221d88 [0193.829] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221f80 | out: hHeap=0x1f0000) returned 1 [0193.829] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0193.829] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0193.829] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x1d8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0193.829] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b3e0 [0193.829] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2222e0 [0193.829] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x22ac48 [0193.829] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2222e0 | out: hHeap=0x1f0000) returned 1 [0193.829] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221d88 | out: hHeap=0x1f0000) returned 1 [0193.829] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b3e0 | out: hHeap=0x1f0000) returned 1 [0193.829] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1025\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1025\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0193.830] GetFileType (hFile=0x1ec) returned 0x1 [0193.830] CloseHandle (hObject=0x1ec) returned 1 [0193.831] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2399d8 [0193.831] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1025\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1025\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb04 | out: lpFileInformation=0x1cfeb04*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x1d8f)) returned 1 [0193.831] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2399d8 | out: hHeap=0x1f0000) returned 1 [0193.831] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239878 [0193.831] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1025\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1025\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb14 | out: lpFileInformation=0x1cfeb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x1d8f)) returned 1 [0193.831] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239878 | out: hHeap=0x1f0000) returned 1 [0193.831] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2397c8 [0193.831] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2397c8 | out: hHeap=0x1f0000) returned 1 [0193.831] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x121e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0193.831] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d280 [0193.831] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2222e0 [0193.831] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22abe0 [0193.831] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2222e0 | out: hHeap=0x1f0000) returned 1 [0193.831] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ac48 | out: hHeap=0x1f0000) returned 1 [0193.831] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d280 | out: hHeap=0x1f0000) returned 1 [0193.832] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1025\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1025\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0193.832] GetFileType (hFile=0x1ec) returned 0x1 [0193.833] CloseHandle (hObject=0x1ec) returned 1 [0193.833] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22aeb8 [0193.833] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1025\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1025\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb04 | out: lpFileInformation=0x1cfeb04*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x121e6)) returned 1 [0193.833] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aeb8 | out: hHeap=0x1f0000) returned 1 [0193.833] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22aeb8 [0193.833] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1025\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1025\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb14 | out: lpFileInformation=0x1cfeb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x121e6)) returned 1 [0193.833] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aeb8 | out: hHeap=0x1f0000) returned 1 [0193.833] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22aeb8 [0193.833] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aeb8 | out: hHeap=0x1f0000) returned 1 [0193.833] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0193.833] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d280 [0193.833] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2222e0 [0193.833] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22aeb8 [0193.833] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2222e0 | out: hHeap=0x1f0000) returned 1 [0193.833] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22abe0 | out: hHeap=0x1f0000) returned 1 [0193.833] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d280 | out: hHeap=0x1f0000) returned 1 [0193.834] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1025\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1025\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0193.834] GetFileType (hFile=0x1ec) returned 0x1 [0193.834] CloseHandle (hObject=0x1ec) returned 1 [0193.834] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a838 [0193.834] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1025\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1025\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb04 | out: lpFileInformation=0x1cfeb04*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358)) returned 1 [0193.834] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a838 | out: hHeap=0x1f0000) returned 1 [0193.835] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22abe0 [0193.835] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1025\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1025\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb14 | out: lpFileInformation=0x1cfeb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358)) returned 1 [0193.835] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22abe0 | out: hHeap=0x1f0000) returned 1 [0193.835] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ac48 [0193.835] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ac48 | out: hHeap=0x1f0000) returned 1 [0193.835] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0193.835] FindClose (in: hFindFile=0x214150 | out: hFindFile=0x214150) returned 1 [0193.835] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aeb8 | out: hHeap=0x1f0000) returned 1 [0193.835] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e030 | out: hHeap=0x1f0000) returned 1 [0193.835] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b480 | out: hHeap=0x1f0000) returned 1 [0193.835] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222250 | out: hHeap=0x1f0000) returned 1 [0193.835] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221ea8 [0193.835] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b3e0 [0193.835] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f350 [0193.835] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222250 [0193.835] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1028\\*", lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x214150 [0193.837] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222058 [0193.837] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222250 | out: hHeap=0x1f0000) returned 1 [0193.837] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0193.837] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0193.837] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221d88 [0193.837] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222058 | out: hHeap=0x1f0000) returned 1 [0193.837] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0193.837] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0193.837] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x18a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0193.837] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b480 [0193.837] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221dd0 [0193.837] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x22aeb8 [0193.837] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221dd0 | out: hHeap=0x1f0000) returned 1 [0193.837] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221d88 | out: hHeap=0x1f0000) returned 1 [0193.837] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b480 | out: hHeap=0x1f0000) returned 1 [0193.838] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1028\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1028\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0193.838] GetFileType (hFile=0x1ec) returned 0x1 [0193.838] CloseHandle (hObject=0x1ec) returned 1 [0193.838] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2399d8 [0193.838] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1028\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1028\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb04 | out: lpFileInformation=0x1cfeb04*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x18a5)) returned 1 [0193.838] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2399d8 | out: hHeap=0x1f0000) returned 1 [0193.838] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239668 [0193.838] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1028\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1028\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb14 | out: lpFileInformation=0x1cfeb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x18a5)) returned 1 [0193.838] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239668 | out: hHeap=0x1f0000) returned 1 [0193.838] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239770 [0193.839] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239770 | out: hHeap=0x1f0000) returned 1 [0193.839] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed90, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0193.839] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d280 [0193.839] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222058 [0193.839] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22abe0 [0193.839] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222058 | out: hHeap=0x1f0000) returned 1 [0193.839] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aeb8 | out: hHeap=0x1f0000) returned 1 [0193.839] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d280 | out: hHeap=0x1f0000) returned 1 [0193.839] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1028\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1028\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0193.840] GetFileType (hFile=0x1ec) returned 0x1 [0193.840] CloseHandle (hObject=0x1ec) returned 1 [0193.840] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a908 [0193.840] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1028\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1028\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb04 | out: lpFileInformation=0x1cfeb04*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed90)) returned 1 [0193.840] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a908 | out: hHeap=0x1f0000) returned 1 [0193.840] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22aeb8 [0193.840] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1028\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1028\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb14 | out: lpFileInformation=0x1cfeb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed90)) returned 1 [0193.840] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aeb8 | out: hHeap=0x1f0000) returned 1 [0193.841] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22aeb8 [0193.841] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aeb8 | out: hHeap=0x1f0000) returned 1 [0193.841] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0193.841] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d280 [0193.841] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2222e0 [0193.841] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a908 [0193.841] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2222e0 | out: hHeap=0x1f0000) returned 1 [0193.841] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22abe0 | out: hHeap=0x1f0000) returned 1 [0193.841] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d280 | out: hHeap=0x1f0000) returned 1 [0193.841] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1028\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1028\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0193.842] GetFileType (hFile=0x1ec) returned 0x1 [0193.842] CloseHandle (hObject=0x1ec) returned 1 [0193.842] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22aeb8 [0193.842] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1028\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1028\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb04 | out: lpFileInformation=0x1cfeb04*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758)) returned 1 [0193.842] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aeb8 | out: hHeap=0x1f0000) returned 1 [0193.842] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a970 [0193.843] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1028\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1028\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb14 | out: lpFileInformation=0x1cfeb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758)) returned 1 [0193.843] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a970 | out: hHeap=0x1f0000) returned 1 [0193.843] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22aeb8 [0193.843] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aeb8 | out: hHeap=0x1f0000) returned 1 [0193.843] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0193.843] FindClose (in: hFindFile=0x214150 | out: hFindFile=0x214150) returned 1 [0193.843] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a908 | out: hHeap=0x1f0000) returned 1 [0193.843] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f350 | out: hHeap=0x1f0000) returned 1 [0193.843] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b3e0 | out: hHeap=0x1f0000) returned 1 [0193.843] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221ea8 | out: hHeap=0x1f0000) returned 1 [0193.843] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221f80 [0193.843] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b3e0 [0193.843] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e030 [0193.843] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2220e8 [0193.843] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1029\\*", lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x214150 [0193.844] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221d88 [0193.844] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2220e8 | out: hHeap=0x1f0000) returned 1 [0193.844] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0193.844] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0193.844] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221dd0 [0193.844] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221d88 | out: hHeap=0x1f0000) returned 1 [0193.844] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0193.844] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0193.844] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0193.844] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b5e8 [0193.845] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221d88 [0193.845] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x22a9d8 [0193.845] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221d88 | out: hHeap=0x1f0000) returned 1 [0193.845] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221dd0 | out: hHeap=0x1f0000) returned 1 [0193.845] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b5e8 | out: hHeap=0x1f0000) returned 1 [0193.845] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1029\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1029\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0193.846] GetFileType (hFile=0x1ec) returned 0x1 [0193.846] CloseHandle (hObject=0x1ec) returned 1 [0193.846] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239458 [0193.846] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1029\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1029\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb04 | out: lpFileInformation=0x1cfeb04*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe8e)) returned 1 [0193.846] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239458 | out: hHeap=0x1f0000) returned 1 [0193.846] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239b38 [0193.846] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1029\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1029\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb14 | out: lpFileInformation=0x1cfeb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe8e)) returned 1 [0193.846] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239b38 | out: hHeap=0x1f0000) returned 1 [0193.846] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2399d8 [0193.846] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2399d8 | out: hHeap=0x1f0000) returned 1 [0193.846] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13c4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0193.846] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d280 [0193.846] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221d88 [0193.847] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22aeb8 [0193.847] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221d88 | out: hHeap=0x1f0000) returned 1 [0193.847] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a9d8 | out: hHeap=0x1f0000) returned 1 [0193.847] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d280 | out: hHeap=0x1f0000) returned 1 [0193.847] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1029\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1029\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0193.847] GetFileType (hFile=0x1ec) returned 0x1 [0193.847] CloseHandle (hObject=0x1ec) returned 1 [0193.847] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a9d8 [0193.847] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1029\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1029\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb04 | out: lpFileInformation=0x1cfeb04*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13c4a)) returned 1 [0193.847] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a9d8 | out: hHeap=0x1f0000) returned 1 [0193.847] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22abe0 [0193.847] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1029\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1029\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb14 | out: lpFileInformation=0x1cfeb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13c4a)) returned 1 [0193.848] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22abe0 | out: hHeap=0x1f0000) returned 1 [0193.848] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a8a0 [0193.848] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a8a0 | out: hHeap=0x1f0000) returned 1 [0193.848] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0193.848] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d280 [0193.848] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221e60 [0193.848] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22abe0 [0193.848] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221e60 | out: hHeap=0x1f0000) returned 1 [0193.848] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aeb8 | out: hHeap=0x1f0000) returned 1 [0193.848] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d280 | out: hHeap=0x1f0000) returned 1 [0193.848] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1029\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1029\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0193.848] GetFileType (hFile=0x1ec) returned 0x1 [0193.848] CloseHandle (hObject=0x1ec) returned 1 [0193.849] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22aeb8 [0193.849] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1029\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1029\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb04 | out: lpFileInformation=0x1cfeb04*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758)) returned 1 [0193.849] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aeb8 | out: hHeap=0x1f0000) returned 1 [0193.849] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22aeb8 [0193.849] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1029\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1029\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb14 | out: lpFileInformation=0x1cfeb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758)) returned 1 [0193.849] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aeb8 | out: hHeap=0x1f0000) returned 1 [0193.849] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22aeb8 [0193.849] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aeb8 | out: hHeap=0x1f0000) returned 1 [0193.849] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0193.849] FindClose (in: hFindFile=0x214150 | out: hFindFile=0x214150) returned 1 [0193.849] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22abe0 | out: hHeap=0x1f0000) returned 1 [0193.849] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e030 | out: hHeap=0x1f0000) returned 1 [0193.849] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b3e0 | out: hHeap=0x1f0000) returned 1 [0193.849] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221f80 | out: hHeap=0x1f0000) returned 1 [0193.849] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222250 [0193.849] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b3e0 [0193.849] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e4f8 [0193.850] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221d88 [0193.850] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1030\\*", lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x214150 [0193.850] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2222e0 [0193.850] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221d88 | out: hHeap=0x1f0000) returned 1 [0193.850] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0193.851] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0193.851] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222058 [0193.851] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2222e0 | out: hHeap=0x1f0000) returned 1 [0193.851] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0193.851] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0193.851] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xcf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0193.851] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b480 [0193.851] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221e18 [0193.851] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x22a970 [0193.851] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221e18 | out: hHeap=0x1f0000) returned 1 [0193.851] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222058 | out: hHeap=0x1f0000) returned 1 [0193.851] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b480 | out: hHeap=0x1f0000) returned 1 [0193.851] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1030\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1030\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0193.852] GetFileType (hFile=0x1ec) returned 0x1 [0193.852] CloseHandle (hObject=0x1ec) returned 1 [0193.852] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239b38 [0193.852] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1030\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1030\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb04 | out: lpFileInformation=0x1cfeb04*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xcf2)) returned 1 [0193.852] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239b38 | out: hHeap=0x1f0000) returned 1 [0193.852] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2394b0 [0193.852] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1030\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1030\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb14 | out: lpFileInformation=0x1cfeb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xcf2)) returned 1 [0193.852] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2394b0 | out: hHeap=0x1f0000) returned 1 [0193.852] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239610 [0193.852] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239610 | out: hHeap=0x1f0000) returned 1 [0193.852] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12fb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0193.852] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d280 [0193.852] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221d88 [0193.852] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a838 [0193.852] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221d88 | out: hHeap=0x1f0000) returned 1 [0193.853] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a970 | out: hHeap=0x1f0000) returned 1 [0193.853] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d280 | out: hHeap=0x1f0000) returned 1 [0193.853] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1030\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1030\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0193.853] GetFileType (hFile=0x1ec) returned 0x1 [0193.853] CloseHandle (hObject=0x1ec) returned 1 [0193.853] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22abe0 [0193.853] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1030\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1030\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb04 | out: lpFileInformation=0x1cfeb04*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12fb4)) returned 1 [0193.854] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22abe0 | out: hHeap=0x1f0000) returned 1 [0193.854] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a8a0 [0193.854] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1030\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1030\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb14 | out: lpFileInformation=0x1cfeb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12fb4)) returned 1 [0193.854] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a8a0 | out: hHeap=0x1f0000) returned 1 [0193.854] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22aeb8 [0193.854] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aeb8 | out: hHeap=0x1f0000) returned 1 [0193.854] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0193.854] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d280 [0193.854] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2222e0 [0193.854] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ad18 [0193.854] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2222e0 | out: hHeap=0x1f0000) returned 1 [0193.854] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a838 | out: hHeap=0x1f0000) returned 1 [0193.854] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d280 | out: hHeap=0x1f0000) returned 1 [0193.854] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1030\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1030\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0193.855] GetFileType (hFile=0x1ec) returned 0x1 [0193.855] CloseHandle (hObject=0x1ec) returned 1 [0193.856] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22abe0 [0193.856] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1030\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1030\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb04 | out: lpFileInformation=0x1cfeb04*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758)) returned 1 [0193.856] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22abe0 | out: hHeap=0x1f0000) returned 1 [0193.856] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22abe0 [0193.856] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1030\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1030\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb14 | out: lpFileInformation=0x1cfeb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758)) returned 1 [0193.856] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22abe0 | out: hHeap=0x1f0000) returned 1 [0193.856] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22acb0 [0193.856] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22acb0 | out: hHeap=0x1f0000) returned 1 [0193.856] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0193.856] FindClose (in: hFindFile=0x214150 | out: hFindFile=0x214150) returned 1 [0193.856] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ad18 | out: hHeap=0x1f0000) returned 1 [0193.856] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e4f8 | out: hHeap=0x1f0000) returned 1 [0193.856] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b3e0 | out: hHeap=0x1f0000) returned 1 [0193.856] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222250 | out: hHeap=0x1f0000) returned 1 [0193.856] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221d88 [0193.856] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b480 [0193.856] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22eb58 [0193.857] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221dd0 [0193.857] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1031\\*", lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x214150 [0193.858] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222250 [0193.858] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221dd0 | out: hHeap=0x1f0000) returned 1 [0193.858] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0193.858] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0193.858] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2222e0 [0193.858] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222250 | out: hHeap=0x1f0000) returned 1 [0193.858] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0193.858] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0193.858] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xd5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0193.858] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b3e0 [0193.858] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221e18 [0193.858] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x22abe0 [0193.858] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221e18 | out: hHeap=0x1f0000) returned 1 [0193.858] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2222e0 | out: hHeap=0x1f0000) returned 1 [0193.858] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b3e0 | out: hHeap=0x1f0000) returned 1 [0193.859] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1031\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1031\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0193.859] GetFileType (hFile=0x1ec) returned 0x1 [0193.859] CloseHandle (hObject=0x1ec) returned 1 [0193.859] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239b38 [0193.860] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1031\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1031\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb04 | out: lpFileInformation=0x1cfeb04*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xd5b)) returned 1 [0193.860] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239b38 | out: hHeap=0x1f0000) returned 1 [0193.860] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239b38 [0193.860] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1031\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1031\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb14 | out: lpFileInformation=0x1cfeb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xd5b)) returned 1 [0193.860] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239b38 | out: hHeap=0x1f0000) returned 1 [0193.860] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239508 [0193.860] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239508 | out: hHeap=0x1f0000) returned 1 [0193.860] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x141aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0193.860] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d280 [0193.860] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221dd0 [0193.860] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a838 [0193.860] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221dd0 | out: hHeap=0x1f0000) returned 1 [0193.860] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22abe0 | out: hHeap=0x1f0000) returned 1 [0193.860] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d280 | out: hHeap=0x1f0000) returned 1 [0193.861] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1031\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1031\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0193.861] GetFileType (hFile=0x1ec) returned 0x1 [0193.861] CloseHandle (hObject=0x1ec) returned 1 [0193.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22abe0 [0193.861] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1031\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1031\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb04 | out: lpFileInformation=0x1cfeb04*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x141aa)) returned 1 [0193.862] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22abe0 | out: hHeap=0x1f0000) returned 1 [0193.862] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22abe0 [0193.862] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1031\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1031\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb14 | out: lpFileInformation=0x1cfeb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x141aa)) returned 1 [0193.862] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22abe0 | out: hHeap=0x1f0000) returned 1 [0193.862] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ad18 [0193.862] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ad18 | out: hHeap=0x1f0000) returned 1 [0193.862] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0193.862] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d280 [0193.862] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221dd0 [0193.862] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a8a0 [0193.862] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221dd0 | out: hHeap=0x1f0000) returned 1 [0193.862] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a838 | out: hHeap=0x1f0000) returned 1 [0193.862] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d280 | out: hHeap=0x1f0000) returned 1 [0193.862] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1031\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1031\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0193.863] GetFileType (hFile=0x1ec) returned 0x1 [0193.863] CloseHandle (hObject=0x1ec) returned 1 [0193.863] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22aeb8 [0193.863] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1031\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1031\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb04 | out: lpFileInformation=0x1cfeb04*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958)) returned 1 [0193.863] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aeb8 | out: hHeap=0x1f0000) returned 1 [0193.863] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22abe0 [0193.863] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1031\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1031\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb14 | out: lpFileInformation=0x1cfeb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958)) returned 1 [0193.863] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22abe0 | out: hHeap=0x1f0000) returned 1 [0193.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22abe0 [0193.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22abe0 | out: hHeap=0x1f0000) returned 1 [0193.864] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0193.864] FindClose (in: hFindFile=0x214150 | out: hFindFile=0x214150) returned 1 [0193.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a8a0 | out: hHeap=0x1f0000) returned 1 [0193.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22eb58 | out: hHeap=0x1f0000) returned 1 [0193.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b480 | out: hHeap=0x1f0000) returned 1 [0193.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221d88 | out: hHeap=0x1f0000) returned 1 [0193.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221d88 [0193.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b480 [0193.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22eb58 [0193.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221ef0 [0193.864] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1032\\*", lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x214150 [0194.220] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215990 [0194.220] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221ef0 | out: hHeap=0x1f0000) returned 1 [0194.221] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0194.221] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0194.221] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215c18 [0194.221] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215990 | out: hHeap=0x1f0000) returned 1 [0194.221] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0194.221] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0194.221] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x22ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0194.221] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b9e0 [0194.221] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215af8 [0194.221] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x22aa40 [0194.221] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215af8 | out: hHeap=0x1f0000) returned 1 [0194.221] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215c18 | out: hHeap=0x1f0000) returned 1 [0194.221] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b9e0 | out: hHeap=0x1f0000) returned 1 [0194.221] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x38) returned 0x214690 [0194.222] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1032\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1032\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0194.223] GetFileType (hFile=0x21c) returned 0x1 [0194.223] CloseHandle (hObject=0x21c) returned 1 [0194.223] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239400 [0194.223] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1032\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1032\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb04 | out: lpFileInformation=0x1cfeb04*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x22ac)) returned 1 [0194.223] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239400 | out: hHeap=0x1f0000) returned 1 [0194.223] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2399d8 [0194.224] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1032\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1032\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb14 | out: lpFileInformation=0x1cfeb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x22ac)) returned 1 [0194.224] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2399d8 | out: hHeap=0x1f0000) returned 1 [0194.224] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239928 [0194.224] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239928 | out: hHeap=0x1f0000) returned 1 [0194.224] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1510c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0194.224] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1ff058 [0194.224] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216098 [0194.224] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22acb0 [0194.224] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216098 | out: hHeap=0x1f0000) returned 1 [0194.224] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aa40 | out: hHeap=0x1f0000) returned 1 [0194.224] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1ff058 | out: hHeap=0x1f0000) returned 1 [0194.225] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1032\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1032\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0194.225] GetFileType (hFile=0x21c) returned 0x1 [0194.225] CloseHandle (hObject=0x21c) returned 1 [0194.225] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a970 [0194.226] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1032\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1032\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb04 | out: lpFileInformation=0x1cfeb04*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1510c)) returned 1 [0194.226] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a970 | out: hHeap=0x1f0000) returned 1 [0194.226] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ac48 [0194.226] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1032\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1032\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb14 | out: lpFileInformation=0x1cfeb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1510c)) returned 1 [0194.226] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ac48 | out: hHeap=0x1f0000) returned 1 [0194.226] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22aeb8 [0194.226] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aeb8 | out: hHeap=0x1f0000) returned 1 [0194.226] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0194.226] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0194.226] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216008 [0194.226] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a8a0 [0194.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216008 | out: hHeap=0x1f0000) returned 1 [0194.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22acb0 | out: hHeap=0x1f0000) returned 1 [0194.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0194.227] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1032\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1032\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0194.227] GetFileType (hFile=0x21c) returned 0x1 [0194.228] CloseHandle (hObject=0x21c) returned 1 [0194.228] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ae50 [0194.228] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1032\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1032\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb04 | out: lpFileInformation=0x1cfeb04*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58)) returned 1 [0194.228] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ae50 | out: hHeap=0x1f0000) returned 1 [0194.228] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22aa40 [0194.231] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1032\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1032\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb14 | out: lpFileInformation=0x1cfeb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58)) returned 1 [0194.231] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aa40 | out: hHeap=0x1f0000) returned 1 [0194.231] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22aaa8 [0194.231] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aaa8 | out: hHeap=0x1f0000) returned 1 [0194.231] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0194.231] FindClose (in: hFindFile=0x214150 | out: hFindFile=0x214150) returned 1 [0194.232] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a8a0 | out: hHeap=0x1f0000) returned 1 [0194.232] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22eb58 | out: hHeap=0x1f0000) returned 1 [0194.232] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b480 | out: hHeap=0x1f0000) returned 1 [0194.232] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221d88 | out: hHeap=0x1f0000) returned 1 [0194.232] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215990 [0194.232] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b8f0 [0194.232] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22ee88 [0194.232] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216008 [0194.232] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1033\\*", lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x214150 [0194.233] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216200 [0194.233] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216008 | out: hHeap=0x1f0000) returned 1 [0194.233] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0194.234] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0194.234] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215f30 [0194.234] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216200 | out: hHeap=0x1f0000) returned 1 [0194.234] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0194.234] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0194.234] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd723cc00, ftCreationTime.dwHighDateTime=0x1cabb47, ftLastAccessTime.dwLowDateTime=0xd723cc00, ftLastAccessTime.dwHighDateTime=0x1cabb47, ftLastWriteTime.dwLowDateTime=0xd723cc00, ftLastWriteTime.dwHighDateTime=0x1cabb47, nFileSizeHigh=0x0, nFileSizeLow=0xc74, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0194.234] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b9e0 [0194.234] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215ca8 [0194.234] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x22aa40 [0194.234] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215ca8 | out: hHeap=0x1f0000) returned 1 [0194.234] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215f30 | out: hHeap=0x1f0000) returned 1 [0194.234] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b9e0 | out: hHeap=0x1f0000) returned 1 [0194.235] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1033\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1033\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0194.235] GetFileType (hFile=0x21c) returned 0x1 [0194.235] CloseHandle (hObject=0x21c) returned 1 [0194.235] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239400 [0194.235] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1033\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1033\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb04 | out: lpFileInformation=0x1cfeb04*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd723cc00, ftCreationTime.dwHighDateTime=0x1cabb47, ftLastAccessTime.dwLowDateTime=0xd723cc00, ftLastAccessTime.dwHighDateTime=0x1cabb47, ftLastWriteTime.dwLowDateTime=0xd723cc00, ftLastWriteTime.dwHighDateTime=0x1cabb47, nFileSizeHigh=0x0, nFileSizeLow=0xc74)) returned 1 [0194.235] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239400 | out: hHeap=0x1f0000) returned 1 [0194.236] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239668 [0194.236] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1033\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1033\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb14 | out: lpFileInformation=0x1cfeb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd723cc00, ftCreationTime.dwHighDateTime=0x1cabb47, ftLastAccessTime.dwLowDateTime=0xd723cc00, ftLastAccessTime.dwHighDateTime=0x1cabb47, ftLastWriteTime.dwLowDateTime=0xd723cc00, ftLastWriteTime.dwHighDateTime=0x1cabb47, nFileSizeHigh=0x0, nFileSizeLow=0xc74)) returned 1 [0194.236] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239668 | out: hHeap=0x1f0000) returned 1 [0194.236] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239508 [0194.236] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239508 | out: hHeap=0x1f0000) returned 1 [0194.236] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x47ad1a00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x47ad1a00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x47ad1a00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12db0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0194.236] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0194.236] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215e10 [0194.236] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a908 [0194.236] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215e10 | out: hHeap=0x1f0000) returned 1 [0194.236] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aa40 | out: hHeap=0x1f0000) returned 1 [0194.236] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0194.237] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1033\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1033\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0194.237] GetFileType (hFile=0x21c) returned 0x1 [0194.238] CloseHandle (hObject=0x21c) returned 1 [0194.238] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a8a0 [0194.238] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1033\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1033\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb04 | out: lpFileInformation=0x1cfeb04*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x47ad1a00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x47ad1a00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x47ad1a00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12db0)) returned 1 [0194.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a8a0 | out: hHeap=0x1f0000) returned 1 [0194.239] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a8a0 [0194.239] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1033\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1033\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb14 | out: lpFileInformation=0x1cfeb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x47ad1a00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x47ad1a00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x47ad1a00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12db0)) returned 1 [0194.239] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a8a0 | out: hHeap=0x1f0000) returned 1 [0194.239] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a8a0 [0194.239] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a8a0 | out: hHeap=0x1f0000) returned 1 [0194.239] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0194.239] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0194.239] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215f30 [0194.239] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a8a0 [0194.239] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215f30 | out: hHeap=0x1f0000) returned 1 [0194.239] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a908 | out: hHeap=0x1f0000) returned 1 [0194.239] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0194.240] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1033\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1033\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0194.240] GetFileType (hFile=0x21c) returned 0x1 [0194.240] CloseHandle (hObject=0x21c) returned 1 [0194.241] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ae50 [0194.241] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1033\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1033\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb04 | out: lpFileInformation=0x1cfeb04*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358)) returned 1 [0194.241] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ae50 | out: hHeap=0x1f0000) returned 1 [0194.241] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22aeb8 [0194.241] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1033\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1033\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb14 | out: lpFileInformation=0x1cfeb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358)) returned 1 [0194.241] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aeb8 | out: hHeap=0x1f0000) returned 1 [0194.241] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22aa40 [0194.241] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aa40 | out: hHeap=0x1f0000) returned 1 [0194.241] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0194.241] FindClose (in: hFindFile=0x214150 | out: hFindFile=0x214150) returned 1 [0194.241] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a8a0 | out: hHeap=0x1f0000) returned 1 [0194.242] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ee88 | out: hHeap=0x1f0000) returned 1 [0194.242] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b8f0 | out: hHeap=0x1f0000) returned 1 [0194.242] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215990 | out: hHeap=0x1f0000) returned 1 [0194.242] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215d38 [0194.242] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b8f0 [0194.242] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22ee88 [0194.242] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215d80 [0194.242] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1035\\*", lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x214150 [0194.243] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215f30 [0194.243] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215d80 | out: hHeap=0x1f0000) returned 1 [0194.243] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0194.243] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0194.243] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215d80 [0194.243] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215f30 | out: hHeap=0x1f0000) returned 1 [0194.243] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0194.243] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0194.243] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe76, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0194.244] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b9e0 [0194.244] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215af8 [0194.244] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x22aeb8 [0194.244] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215af8 | out: hHeap=0x1f0000) returned 1 [0194.244] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215d80 | out: hHeap=0x1f0000) returned 1 [0194.244] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b9e0 | out: hHeap=0x1f0000) returned 1 [0194.244] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1035\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1035\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0194.245] GetFileType (hFile=0x21c) returned 0x1 [0194.245] CloseHandle (hObject=0x21c) returned 1 [0194.245] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239928 [0194.245] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1035\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1035\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb04 | out: lpFileInformation=0x1cfeb04*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe76)) returned 1 [0194.245] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239928 | out: hHeap=0x1f0000) returned 1 [0194.245] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239508 [0194.246] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1035\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1035\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb14 | out: lpFileInformation=0x1cfeb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe76)) returned 1 [0194.246] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239508 | out: hHeap=0x1f0000) returned 1 [0194.246] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239878 [0194.246] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239878 | out: hHeap=0x1f0000) returned 1 [0194.246] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12cde, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0194.246] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0194.246] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2160e0 [0194.246] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ac48 [0194.246] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2160e0 | out: hHeap=0x1f0000) returned 1 [0194.246] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aeb8 | out: hHeap=0x1f0000) returned 1 [0194.246] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0194.246] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1035\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1035\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0194.247] GetFileType (hFile=0x21c) returned 0x1 [0194.247] CloseHandle (hObject=0x21c) returned 1 [0194.247] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ad18 [0194.247] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1035\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1035\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb04 | out: lpFileInformation=0x1cfeb04*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12cde)) returned 1 [0194.247] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ad18 | out: hHeap=0x1f0000) returned 1 [0194.248] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22abe0 [0194.248] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1035\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1035\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb14 | out: lpFileInformation=0x1cfeb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12cde)) returned 1 [0194.248] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22abe0 | out: hHeap=0x1f0000) returned 1 [0194.248] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22acb0 [0194.248] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22acb0 | out: hHeap=0x1f0000) returned 1 [0194.248] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0194.248] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0194.248] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215e10 [0194.248] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22aa40 [0194.248] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215e10 | out: hHeap=0x1f0000) returned 1 [0194.248] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ac48 | out: hHeap=0x1f0000) returned 1 [0194.248] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0194.249] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1035\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1035\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0194.249] GetFileType (hFile=0x21c) returned 0x1 [0194.250] CloseHandle (hObject=0x21c) returned 1 [0194.250] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22acb0 [0194.250] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1035\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1035\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb04 | out: lpFileInformation=0x1cfeb04*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758)) returned 1 [0194.251] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22acb0 | out: hHeap=0x1f0000) returned 1 [0194.251] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a908 [0194.251] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1035\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1035\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb14 | out: lpFileInformation=0x1cfeb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758)) returned 1 [0194.251] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a908 | out: hHeap=0x1f0000) returned 1 [0194.251] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ae50 [0194.251] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ae50 | out: hHeap=0x1f0000) returned 1 [0194.251] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0194.251] FindClose (in: hFindFile=0x214150 | out: hFindFile=0x214150) returned 1 [0194.252] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aa40 | out: hHeap=0x1f0000) returned 1 [0194.252] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ee88 | out: hHeap=0x1f0000) returned 1 [0194.252] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b8f0 | out: hHeap=0x1f0000) returned 1 [0194.252] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215d38 | out: hHeap=0x1f0000) returned 1 [0194.252] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215e10 [0194.252] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b8f0 [0194.252] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e690 [0194.252] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215c18 [0194.252] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1036\\*", lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x214150 [0194.631] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215f30 [0194.631] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215c18 | out: hHeap=0x1f0000) returned 1 [0194.631] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0194.632] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0194.632] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215c18 [0194.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215f30 | out: hHeap=0x1f0000) returned 1 [0194.632] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0194.632] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0194.632] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xdc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0194.632] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b638 [0194.632] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215d38 [0194.632] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x22a970 [0194.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215d38 | out: hHeap=0x1f0000) returned 1 [0194.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215c18 | out: hHeap=0x1f0000) returned 1 [0194.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b638 | out: hHeap=0x1f0000) returned 1 [0194.632] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1036\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1036\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0194.633] GetFileType (hFile=0x218) returned 0x1 [0194.633] CloseHandle (hObject=0x218) returned 1 [0194.633] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239ae0 [0194.633] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1036\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1036\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb04 | out: lpFileInformation=0x1cfeb04*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xdc6)) returned 1 [0194.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239ae0 | out: hHeap=0x1f0000) returned 1 [0194.634] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239458 [0194.634] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1036\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1036\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb14 | out: lpFileInformation=0x1cfeb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xdc6)) returned 1 [0194.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239458 | out: hHeap=0x1f0000) returned 1 [0194.634] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2396c0 [0194.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2396c0 | out: hHeap=0x1f0000) returned 1 [0194.634] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x14412, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0194.634] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fefe8 [0194.634] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215d38 [0194.634] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ae50 [0194.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215d38 | out: hHeap=0x1f0000) returned 1 [0194.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a970 | out: hHeap=0x1f0000) returned 1 [0194.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fefe8 | out: hHeap=0x1f0000) returned 1 [0194.635] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1036\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1036\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0194.635] GetFileType (hFile=0x218) returned 0x1 [0194.635] CloseHandle (hObject=0x218) returned 1 [0194.635] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ac48 [0194.636] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1036\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1036\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb04 | out: lpFileInformation=0x1cfeb04*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x14412)) returned 1 [0194.636] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ac48 | out: hHeap=0x1f0000) returned 1 [0194.636] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22aa40 [0194.636] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1036\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1036\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb14 | out: lpFileInformation=0x1cfeb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x14412)) returned 1 [0194.636] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aa40 | out: hHeap=0x1f0000) returned 1 [0194.636] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22aeb8 [0194.636] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aeb8 | out: hHeap=0x1f0000) returned 1 [0194.636] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0194.636] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fefe8 [0194.636] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215f30 [0194.636] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22aeb8 [0194.636] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215f30 | out: hHeap=0x1f0000) returned 1 [0194.636] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ae50 | out: hHeap=0x1f0000) returned 1 [0194.636] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fefe8 | out: hHeap=0x1f0000) returned 1 [0194.636] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1036\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1036\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0194.637] GetFileType (hFile=0x218) returned 0x1 [0194.637] CloseHandle (hObject=0x218) returned 1 [0194.637] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a970 [0194.637] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1036\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1036\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb04 | out: lpFileInformation=0x1cfeb04*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958)) returned 1 [0194.637] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a970 | out: hHeap=0x1f0000) returned 1 [0194.638] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22aa40 [0194.638] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1036\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1036\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb14 | out: lpFileInformation=0x1cfeb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958)) returned 1 [0194.638] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aa40 | out: hHeap=0x1f0000) returned 1 [0194.638] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a970 [0194.638] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a970 | out: hHeap=0x1f0000) returned 1 [0194.638] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0194.638] FindClose (in: hFindFile=0x214150 | out: hFindFile=0x214150) returned 1 [0194.644] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aeb8 | out: hHeap=0x1f0000) returned 1 [0194.644] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e690 | out: hHeap=0x1f0000) returned 1 [0194.644] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b8f0 | out: hHeap=0x1f0000) returned 1 [0194.644] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215e10 | out: hHeap=0x1f0000) returned 1 [0194.644] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216170 [0194.645] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b6b0 [0194.645] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d9d0 [0194.645] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215b40 [0194.645] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1037\\*", lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x214150 [0194.645] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216098 [0194.645] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215b40 | out: hHeap=0x1f0000) returned 1 [0194.645] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0194.645] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0194.645] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215d80 [0194.645] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216098 | out: hHeap=0x1f0000) returned 1 [0194.645] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0194.646] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0194.646] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x1ac3, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0194.646] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b3e0 [0194.646] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215990 [0194.646] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x22a970 [0194.646] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215990 | out: hHeap=0x1f0000) returned 1 [0194.646] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215d80 | out: hHeap=0x1f0000) returned 1 [0194.646] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b3e0 | out: hHeap=0x1f0000) returned 1 [0194.646] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1037\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1037\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0194.647] GetFileType (hFile=0x218) returned 0x1 [0194.647] CloseHandle (hObject=0x218) returned 1 [0194.647] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2399d8 [0194.647] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1037\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1037\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb04 | out: lpFileInformation=0x1cfeb04*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x1ac3)) returned 1 [0194.647] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2399d8 | out: hHeap=0x1f0000) returned 1 [0194.647] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239ae0 [0194.647] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1037\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1037\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb14 | out: lpFileInformation=0x1cfeb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x1ac3)) returned 1 [0194.647] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239ae0 | out: hHeap=0x1f0000) returned 1 [0194.648] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239ae0 [0194.648] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239ae0 | out: hHeap=0x1f0000) returned 1 [0194.648] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1198c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0194.648] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fefe8 [0194.648] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215f30 [0194.648] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22aa40 [0194.648] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215f30 | out: hHeap=0x1f0000) returned 1 [0194.648] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a970 | out: hHeap=0x1f0000) returned 1 [0194.648] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fefe8 | out: hHeap=0x1f0000) returned 1 [0194.649] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1037\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1037\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0194.650] GetFileType (hFile=0x218) returned 0x1 [0194.650] CloseHandle (hObject=0x218) returned 1 [0194.650] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a970 [0194.650] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1037\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1037\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb04 | out: lpFileInformation=0x1cfeb04*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1198c)) returned 1 [0194.650] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a970 | out: hHeap=0x1f0000) returned 1 [0194.650] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22acb0 [0194.651] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1037\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1037\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb14 | out: lpFileInformation=0x1cfeb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1198c)) returned 1 [0194.651] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22acb0 | out: hHeap=0x1f0000) returned 1 [0194.651] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22abe0 [0194.651] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22abe0 | out: hHeap=0x1f0000) returned 1 [0194.651] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4158, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0194.651] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fefe8 [0194.651] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215d38 [0194.651] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22aaa8 [0194.651] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215d38 | out: hHeap=0x1f0000) returned 1 [0194.651] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aa40 | out: hHeap=0x1f0000) returned 1 [0194.651] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fefe8 | out: hHeap=0x1f0000) returned 1 [0194.652] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1037\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1037\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0194.653] GetFileType (hFile=0x218) returned 0x1 [0194.653] CloseHandle (hObject=0x218) returned 1 [0194.653] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22abe0 [0194.653] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1037\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1037\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb04 | out: lpFileInformation=0x1cfeb04*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4158)) returned 1 [0194.653] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22abe0 | out: hHeap=0x1f0000) returned 1 [0194.653] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a970 [0194.654] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1037\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1037\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb14 | out: lpFileInformation=0x1cfeb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4158)) returned 1 [0194.654] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a970 | out: hHeap=0x1f0000) returned 1 [0194.654] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ae50 [0194.654] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ae50 | out: hHeap=0x1f0000) returned 1 [0194.654] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4158, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0194.654] FindClose (in: hFindFile=0x214150 | out: hFindFile=0x214150) returned 1 [0194.654] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aaa8 | out: hHeap=0x1f0000) returned 1 [0194.654] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d9d0 | out: hHeap=0x1f0000) returned 1 [0194.654] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b6b0 | out: hHeap=0x1f0000) returned 1 [0194.654] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216170 | out: hHeap=0x1f0000) returned 1 [0194.654] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216008 [0194.654] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b4d0 [0194.654] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f020 [0194.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215f30 [0194.655] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1038\\*", lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x214150 [0194.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215b40 [0194.655] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215f30 | out: hHeap=0x1f0000) returned 1 [0194.655] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0194.655] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0194.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215e10 [0194.655] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215b40 | out: hHeap=0x1f0000) returned 1 [0194.656] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0194.656] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0194.656] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x109e, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0194.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b638 [0194.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216050 [0194.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x22ac48 [0194.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216050 | out: hHeap=0x1f0000) returned 1 [0194.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215e10 | out: hHeap=0x1f0000) returned 1 [0194.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b638 | out: hHeap=0x1f0000) returned 1 [0194.657] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1038\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1038\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0194.657] GetFileType (hFile=0x218) returned 0x1 [0194.657] CloseHandle (hObject=0x218) returned 1 [0194.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239560 [0194.658] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1038\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1038\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb04 | out: lpFileInformation=0x1cfeb04*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x109e)) returned 1 [0194.658] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239560 | out: hHeap=0x1f0000) returned 1 [0194.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239718 [0194.658] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1038\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1038\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb14 | out: lpFileInformation=0x1cfeb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x109e)) returned 1 [0194.658] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239718 | out: hHeap=0x1f0000) returned 1 [0194.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239668 [0194.658] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239668 | out: hHeap=0x1f0000) returned 1 [0194.659] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x151aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0194.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1ff058 [0194.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215b40 [0194.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22abe0 [0194.659] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215b40 | out: hHeap=0x1f0000) returned 1 [0194.659] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ac48 | out: hHeap=0x1f0000) returned 1 [0194.659] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1ff058 | out: hHeap=0x1f0000) returned 1 [0194.659] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1038\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1038\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0194.660] GetFileType (hFile=0x218) returned 0x1 [0194.660] CloseHandle (hObject=0x218) returned 1 [0194.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22aa40 [0194.661] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1038\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1038\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb04 | out: lpFileInformation=0x1cfeb04*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x151aa)) returned 1 [0194.661] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aa40 | out: hHeap=0x1f0000) returned 1 [0194.661] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ac48 [0194.661] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1038\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1038\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb14 | out: lpFileInformation=0x1cfeb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x151aa)) returned 1 [0194.661] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ac48 | out: hHeap=0x1f0000) returned 1 [0194.661] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a970 [0194.661] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a970 | out: hHeap=0x1f0000) returned 1 [0194.661] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0194.661] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fefe8 [0194.661] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215c18 [0194.662] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22aeb8 [0194.662] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215c18 | out: hHeap=0x1f0000) returned 1 [0194.662] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22abe0 | out: hHeap=0x1f0000) returned 1 [0194.662] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fefe8 | out: hHeap=0x1f0000) returned 1 [0194.662] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1038\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1038\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0194.663] GetFileType (hFile=0x218) returned 0x1 [0194.664] CloseHandle (hObject=0x218) returned 1 [0194.664] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ae50 [0194.664] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1038\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1038\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb04 | out: lpFileInformation=0x1cfeb04*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958)) returned 1 [0194.664] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ae50 | out: hHeap=0x1f0000) returned 1 [0194.664] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22aa40 [0194.665] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1038\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1038\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb14 | out: lpFileInformation=0x1cfeb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958)) returned 1 [0194.665] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aa40 | out: hHeap=0x1f0000) returned 1 [0194.665] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a970 [0194.665] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a970 | out: hHeap=0x1f0000) returned 1 [0194.665] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0194.665] FindClose (in: hFindFile=0x214150 | out: hFindFile=0x214150) returned 1 [0194.665] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aeb8 | out: hHeap=0x1f0000) returned 1 [0194.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f020 | out: hHeap=0x1f0000) returned 1 [0194.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b4d0 | out: hHeap=0x1f0000) returned 1 [0194.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216008 | out: hHeap=0x1f0000) returned 1 [0194.666] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215d80 [0194.666] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b638 [0194.666] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e828 [0194.666] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216170 [0194.666] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1040\\*", lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x214150 [0194.667] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215b40 [0194.667] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216170 | out: hHeap=0x1f0000) returned 1 [0194.667] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0194.667] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0194.667] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215d38 [0194.667] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215b40 | out: hHeap=0x1f0000) returned 1 [0194.667] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0194.668] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0194.668] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0194.668] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b6b0 [0194.668] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215e10 [0194.668] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x22aeb8 [0194.668] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215e10 | out: hHeap=0x1f0000) returned 1 [0194.668] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215d38 | out: hHeap=0x1f0000) returned 1 [0194.668] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b6b0 | out: hHeap=0x1f0000) returned 1 [0194.669] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1040\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1040\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0194.884] GetFileType (hFile=0x21c) returned 0x1 [0194.885] CloseHandle (hObject=0x21c) returned 1 [0194.885] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239560 [0194.885] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1040\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1040\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb04 | out: lpFileInformation=0x1cfeb04*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe3b)) returned 1 [0194.885] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239560 | out: hHeap=0x1f0000) returned 1 [0194.885] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2394b0 [0194.885] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1040\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1040\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb14 | out: lpFileInformation=0x1cfeb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe3b)) returned 1 [0194.886] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2394b0 | out: hHeap=0x1f0000) returned 1 [0194.886] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239458 [0194.886] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239458 | out: hHeap=0x1f0000) returned 1 [0194.886] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x138bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0194.886] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0194.886] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215b40 [0194.886] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22aa40 [0194.886] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215b40 | out: hHeap=0x1f0000) returned 1 [0194.886] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aeb8 | out: hHeap=0x1f0000) returned 1 [0194.886] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0194.887] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1040\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1040\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0194.887] GetFileType (hFile=0x21c) returned 0x1 [0194.887] CloseHandle (hObject=0x21c) returned 1 [0194.888] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a8a0 [0194.888] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1040\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1040\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb04 | out: lpFileInformation=0x1cfeb04*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x138bc)) returned 1 [0194.888] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a8a0 | out: hHeap=0x1f0000) returned 1 [0194.888] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a8a0 [0194.888] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1040\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1040\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb14 | out: lpFileInformation=0x1cfeb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x138bc)) returned 1 [0194.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a8a0 | out: hHeap=0x1f0000) returned 1 [0194.981] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22aaa8 [0194.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aaa8 | out: hHeap=0x1f0000) returned 1 [0194.993] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0194.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0194.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215f30 [0194.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ad18 [0194.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215f30 | out: hHeap=0x1f0000) returned 1 [0194.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aa40 | out: hHeap=0x1f0000) returned 1 [0194.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0194.993] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1040\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1040\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0194.994] GetFileType (hFile=0x21c) returned 0x1 [0194.995] CloseHandle (hObject=0x21c) returned 1 [0194.995] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22aeb8 [0194.995] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1040\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1040\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb04 | out: lpFileInformation=0x1cfeb04*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758)) returned 1 [0194.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aeb8 | out: hHeap=0x1f0000) returned 1 [0194.995] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22aeb8 [0194.995] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1040\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1040\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb14 | out: lpFileInformation=0x1cfeb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758)) returned 1 [0194.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aeb8 | out: hHeap=0x1f0000) returned 1 [0194.995] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ad80 [0194.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ad80 | out: hHeap=0x1f0000) returned 1 [0194.996] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0194.996] FindClose (in: hFindFile=0x214150 | out: hFindFile=0x214150) returned 1 [0194.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ad18 | out: hHeap=0x1f0000) returned 1 [0194.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e828 | out: hHeap=0x1f0000) returned 1 [0194.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b638 | out: hHeap=0x1f0000) returned 1 [0194.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215d80 | out: hHeap=0x1f0000) returned 1 [0194.996] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215c18 [0194.996] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20bd50 [0194.996] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22de98 [0194.996] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215b40 [0194.996] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1041\\*", lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x214150 [0194.997] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215ca8 [0194.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215b40 | out: hHeap=0x1f0000) returned 1 [0194.997] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0194.997] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0194.997] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2161b8 [0194.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215ca8 | out: hHeap=0x1f0000) returned 1 [0194.997] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0194.997] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0194.997] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x278d, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0194.997] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20bb98 [0194.997] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2160e0 [0194.997] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x22aa40 [0194.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2160e0 | out: hHeap=0x1f0000) returned 1 [0194.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2161b8 | out: hHeap=0x1f0000) returned 1 [0194.998] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20bb98 | out: hHeap=0x1f0000) returned 1 [0194.998] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1041\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1041\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0194.998] GetFileType (hFile=0x21c) returned 0x1 [0194.998] CloseHandle (hObject=0x21c) returned 1 [0194.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2394b0 [0194.999] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1041\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1041\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb04 | out: lpFileInformation=0x1cfeb04*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x278d)) returned 1 [0194.999] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2394b0 | out: hHeap=0x1f0000) returned 1 [0194.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239b38 [0194.999] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1041\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1041\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb14 | out: lpFileInformation=0x1cfeb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x278d)) returned 1 [0195.000] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239b38 | out: hHeap=0x1f0000) returned 1 [0195.000] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239400 [0195.000] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239400 | out: hHeap=0x1f0000) returned 1 [0195.001] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x10a82, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0195.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0195.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216050 [0195.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22aaa8 [0195.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216050 | out: hHeap=0x1f0000) returned 1 [0195.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aa40 | out: hHeap=0x1f0000) returned 1 [0195.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0195.001] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1041\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1041\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0195.002] GetFileType (hFile=0x21c) returned 0x1 [0195.002] CloseHandle (hObject=0x21c) returned 1 [0195.002] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22aa40 [0195.002] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1041\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1041\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb04 | out: lpFileInformation=0x1cfeb04*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x10a82)) returned 1 [0195.002] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aa40 | out: hHeap=0x1f0000) returned 1 [0195.002] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ad18 [0195.002] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1041\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1041\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb14 | out: lpFileInformation=0x1cfeb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x10a82)) returned 1 [0195.003] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ad18 | out: hHeap=0x1f0000) returned 1 [0195.003] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22aa40 [0195.003] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aa40 | out: hHeap=0x1f0000) returned 1 [0195.003] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0195.003] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0195.003] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216008 [0195.003] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22aeb8 [0195.003] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216008 | out: hHeap=0x1f0000) returned 1 [0195.003] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aaa8 | out: hHeap=0x1f0000) returned 1 [0195.003] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0195.003] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1041\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1041\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0195.004] GetFileType (hFile=0x21c) returned 0x1 [0195.004] CloseHandle (hObject=0x21c) returned 1 [0195.004] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ad18 [0195.004] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1041\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1041\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb04 | out: lpFileInformation=0x1cfeb04*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3d58)) returned 1 [0195.004] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ad18 | out: hHeap=0x1f0000) returned 1 [0195.004] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a8a0 [0195.004] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1041\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1041\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb14 | out: lpFileInformation=0x1cfeb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3d58)) returned 1 [0195.004] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a8a0 | out: hHeap=0x1f0000) returned 1 [0195.005] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ad80 [0195.005] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ad80 | out: hHeap=0x1f0000) returned 1 [0195.005] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0195.005] FindClose (in: hFindFile=0x214150 | out: hFindFile=0x214150) returned 1 [0195.005] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aeb8 | out: hHeap=0x1f0000) returned 1 [0195.005] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22de98 | out: hHeap=0x1f0000) returned 1 [0195.005] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20bd50 | out: hHeap=0x1f0000) returned 1 [0195.005] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215c18 | out: hHeap=0x1f0000) returned 1 [0195.005] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215d80 [0195.005] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20bc38 [0195.005] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f1b8 [0195.005] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215b40 [0195.005] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1042\\*", lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x214150 [0195.006] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216050 [0195.006] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215b40 | out: hHeap=0x1f0000) returned 1 [0195.006] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0195.006] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.006] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215b40 [0195.006] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216050 | out: hHeap=0x1f0000) returned 1 [0195.006] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0195.006] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0195.006] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x318f, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0195.006] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20bd50 [0195.006] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216200 [0195.006] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x22aa40 [0195.006] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216200 | out: hHeap=0x1f0000) returned 1 [0195.006] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215b40 | out: hHeap=0x1f0000) returned 1 [0195.006] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20bd50 | out: hHeap=0x1f0000) returned 1 [0195.007] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1042\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1042\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0195.007] GetFileType (hFile=0x21c) returned 0x1 [0195.007] CloseHandle (hObject=0x21c) returned 1 [0195.007] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239770 [0195.007] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1042\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1042\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb04 | out: lpFileInformation=0x1cfeb04*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x318f)) returned 1 [0195.008] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239770 | out: hHeap=0x1f0000) returned 1 [0195.008] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239560 [0195.008] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1042\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1042\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb14 | out: lpFileInformation=0x1cfeb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x318f)) returned 1 [0195.008] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239560 | out: hHeap=0x1f0000) returned 1 [0195.008] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239400 [0195.008] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239400 | out: hHeap=0x1f0000) returned 1 [0195.008] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xfed6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0195.008] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227fc8 [0195.008] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215ca8 [0195.008] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a8a0 [0195.008] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215ca8 | out: hHeap=0x1f0000) returned 1 [0195.008] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aa40 | out: hHeap=0x1f0000) returned 1 [0195.008] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227fc8 | out: hHeap=0x1f0000) returned 1 [0195.008] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1042\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1042\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0195.009] GetFileType (hFile=0x21c) returned 0x1 [0195.009] CloseHandle (hObject=0x21c) returned 1 [0195.009] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ad18 [0195.009] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1042\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1042\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb04 | out: lpFileInformation=0x1cfeb04*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xfed6)) returned 1 [0195.009] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ad18 | out: hHeap=0x1f0000) returned 1 [0195.009] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22aa40 [0195.009] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1042\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1042\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb14 | out: lpFileInformation=0x1cfeb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xfed6)) returned 1 [0195.010] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aa40 | out: hHeap=0x1f0000) returned 1 [0195.010] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a908 [0195.010] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a908 | out: hHeap=0x1f0000) returned 1 [0195.010] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0195.010] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0195.010] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2160e0 [0195.010] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ad80 [0195.010] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2160e0 | out: hHeap=0x1f0000) returned 1 [0195.010] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a8a0 | out: hHeap=0x1f0000) returned 1 [0195.010] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0195.010] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1042\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1042\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0195.010] GetFileType (hFile=0x21c) returned 0x1 [0195.011] CloseHandle (hObject=0x21c) returned 1 [0195.011] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22aa40 [0195.011] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1042\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1042\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb04 | out: lpFileInformation=0x1cfeb04*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3b58)) returned 1 [0195.011] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aa40 | out: hHeap=0x1f0000) returned 1 [0195.011] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ac48 [0195.011] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1042\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1042\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb14 | out: lpFileInformation=0x1cfeb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3b58)) returned 1 [0195.011] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ac48 | out: hHeap=0x1f0000) returned 1 [0195.011] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ad18 [0195.011] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ad18 | out: hHeap=0x1f0000) returned 1 [0195.011] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0195.011] FindClose (in: hFindFile=0x214150 | out: hFindFile=0x214150) returned 1 [0195.011] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ad80 | out: hHeap=0x1f0000) returned 1 [0195.011] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f1b8 | out: hHeap=0x1f0000) returned 1 [0195.011] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20bc38 | out: hHeap=0x1f0000) returned 1 [0195.012] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215d80 | out: hHeap=0x1f0000) returned 1 [0195.012] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216008 [0195.012] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20bb98 [0195.012] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d9d0 [0195.012] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215b40 [0195.012] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1043\\*", lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x214150 [0195.012] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216050 [0195.012] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215b40 | out: hHeap=0x1f0000) returned 1 [0195.012] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0195.012] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.012] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215f30 [0195.012] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216050 | out: hHeap=0x1f0000) returned 1 [0195.012] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0195.012] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0195.012] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xdda, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0195.012] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20bd50 [0195.012] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216050 [0195.013] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x22aeb8 [0195.013] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216050 | out: hHeap=0x1f0000) returned 1 [0195.013] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215f30 | out: hHeap=0x1f0000) returned 1 [0195.013] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20bd50 | out: hHeap=0x1f0000) returned 1 [0195.013] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1043\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1043\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0195.014] GetFileType (hFile=0x21c) returned 0x1 [0195.014] CloseHandle (hObject=0x21c) returned 1 [0195.014] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239400 [0195.015] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1043\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1043\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb04 | out: lpFileInformation=0x1cfeb04*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xdda)) returned 1 [0195.015] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239400 | out: hHeap=0x1f0000) returned 1 [0195.015] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239a30 [0195.015] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1043\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1043\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb14 | out: lpFileInformation=0x1cfeb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xdda)) returned 1 [0195.015] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239a30 | out: hHeap=0x1f0000) returned 1 [0195.015] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239928 [0195.015] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239928 | out: hHeap=0x1f0000) returned 1 [0195.015] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13712, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0195.015] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0195.015] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215b40 [0195.015] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a8a0 [0195.015] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215b40 | out: hHeap=0x1f0000) returned 1 [0195.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aeb8 | out: hHeap=0x1f0000) returned 1 [0195.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0195.016] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1043\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1043\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0195.016] GetFileType (hFile=0x21c) returned 0x1 [0195.016] CloseHandle (hObject=0x21c) returned 1 [0195.016] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ad80 [0195.016] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1043\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1043\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb04 | out: lpFileInformation=0x1cfeb04*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13712)) returned 1 [0195.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ad80 | out: hHeap=0x1f0000) returned 1 [0195.017] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ad18 [0195.017] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1043\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1043\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb14 | out: lpFileInformation=0x1cfeb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13712)) returned 1 [0195.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ad18 | out: hHeap=0x1f0000) returned 1 [0195.017] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ad80 [0195.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ad80 | out: hHeap=0x1f0000) returned 1 [0195.017] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0195.017] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0195.017] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215ca8 [0195.017] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a908 [0195.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215ca8 | out: hHeap=0x1f0000) returned 1 [0195.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a8a0 | out: hHeap=0x1f0000) returned 1 [0195.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0195.018] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1043\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1043\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0195.018] GetFileType (hFile=0x21c) returned 0x1 [0195.018] CloseHandle (hObject=0x21c) returned 1 [0195.018] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22aeb8 [0195.018] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1043\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1043\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb04 | out: lpFileInformation=0x1cfeb04*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58)) returned 1 [0195.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aeb8 | out: hHeap=0x1f0000) returned 1 [0195.019] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22aa40 [0195.019] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1043\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1043\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb14 | out: lpFileInformation=0x1cfeb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58)) returned 1 [0195.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aa40 | out: hHeap=0x1f0000) returned 1 [0195.019] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22aa40 [0195.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aa40 | out: hHeap=0x1f0000) returned 1 [0195.019] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0195.019] FindClose (in: hFindFile=0x214150 | out: hFindFile=0x214150) returned 1 [0195.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a908 | out: hHeap=0x1f0000) returned 1 [0195.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d9d0 | out: hHeap=0x1f0000) returned 1 [0195.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20bb98 | out: hHeap=0x1f0000) returned 1 [0195.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216008 | out: hHeap=0x1f0000) returned 1 [0195.020] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216170 [0195.020] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20bc38 [0195.020] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22eb58 [0195.020] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216008 [0195.020] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1044\\*", lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x214150 [0195.027] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215c18 [0195.027] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216008 | out: hHeap=0x1f0000) returned 1 [0195.027] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0195.027] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.027] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216050 [0195.027] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215c18 | out: hHeap=0x1f0000) returned 1 [0195.027] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0195.027] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0195.027] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xbe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0195.027] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20bb98 [0195.027] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215f30 [0195.028] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x22ac48 [0195.028] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215f30 | out: hHeap=0x1f0000) returned 1 [0195.028] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216050 | out: hHeap=0x1f0000) returned 1 [0195.028] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20bb98 | out: hHeap=0x1f0000) returned 1 [0195.028] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1044\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1044\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0195.029] GetFileType (hFile=0x21c) returned 0x1 [0195.029] CloseHandle (hObject=0x21c) returned 1 [0195.029] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239718 [0195.029] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1044\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1044\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb04 | out: lpFileInformation=0x1cfeb04*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xbe6)) returned 1 [0195.029] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239718 | out: hHeap=0x1f0000) returned 1 [0195.029] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239ae0 [0195.029] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1044\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1044\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb14 | out: lpFileInformation=0x1cfeb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xbe6)) returned 1 [0195.029] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239ae0 | out: hHeap=0x1f0000) returned 1 [0195.030] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239ae0 [0195.030] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239ae0 | out: hHeap=0x1f0000) returned 1 [0195.030] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x135c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0195.030] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0195.030] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215b40 [0195.030] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22aeb8 [0195.030] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215b40 | out: hHeap=0x1f0000) returned 1 [0195.030] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ac48 | out: hHeap=0x1f0000) returned 1 [0195.030] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0195.378] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1044\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1044\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0195.378] GetFileType (hFile=0x1f8) returned 0x1 [0195.378] CloseHandle (hObject=0x1f8) returned 1 [0195.378] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ac48 [0195.379] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1044\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1044\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb04 | out: lpFileInformation=0x1cfeb04*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x135c0)) returned 1 [0195.379] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ac48 | out: hHeap=0x1f0000) returned 1 [0195.379] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ac48 [0195.379] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1044\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1044\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb14 | out: lpFileInformation=0x1cfeb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x135c0)) returned 1 [0195.379] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ac48 | out: hHeap=0x1f0000) returned 1 [0195.379] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ac48 [0195.379] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ac48 | out: hHeap=0x1f0000) returned 1 [0195.379] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0195.379] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282d8 [0195.379] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215c18 [0195.379] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22aa40 [0195.379] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215c18 | out: hHeap=0x1f0000) returned 1 [0195.379] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aeb8 | out: hHeap=0x1f0000) returned 1 [0195.379] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282d8 | out: hHeap=0x1f0000) returned 1 [0195.380] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1044\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1044\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0195.380] GetFileType (hFile=0x1f8) returned 0x1 [0195.380] CloseHandle (hObject=0x1f8) returned 1 [0195.380] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22aeb8 [0195.380] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1044\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1044\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb04 | out: lpFileInformation=0x1cfeb04*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558)) returned 1 [0195.381] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aeb8 | out: hHeap=0x1f0000) returned 1 [0195.381] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22aeb8 [0195.381] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1044\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1044\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb14 | out: lpFileInformation=0x1cfeb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558)) returned 1 [0195.381] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aeb8 | out: hHeap=0x1f0000) returned 1 [0195.381] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22aeb8 [0195.381] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aeb8 | out: hHeap=0x1f0000) returned 1 [0195.381] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0195.381] FindClose (in: hFindFile=0x214150 | out: hFindFile=0x214150) returned 1 [0195.381] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aa40 | out: hHeap=0x1f0000) returned 1 [0195.381] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22eb58 | out: hHeap=0x1f0000) returned 1 [0195.381] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20bc38 | out: hHeap=0x1f0000) returned 1 [0195.381] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216170 | out: hHeap=0x1f0000) returned 1 [0195.381] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215c18 [0195.381] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b638 [0195.381] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22eb58 [0195.382] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216008 [0195.382] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1045\\*", lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2211e0 [0195.383] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215d80 [0195.383] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216008 | out: hHeap=0x1f0000) returned 1 [0195.383] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0195.383] FindNextFileW (in: hFindFile=0x2211e0, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.383] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215e10 [0195.383] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215d80 | out: hHeap=0x1f0000) returned 1 [0195.383] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0195.383] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0195.383] FindNextFileW (in: hFindFile=0x2211e0, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xfc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0195.383] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b750 [0195.383] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216098 [0195.383] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x22aeb8 [0195.383] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216098 | out: hHeap=0x1f0000) returned 1 [0195.383] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215e10 | out: hHeap=0x1f0000) returned 1 [0195.383] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b750 | out: hHeap=0x1f0000) returned 1 [0195.384] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1045\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1045\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0195.384] GetFileType (hFile=0x1f8) returned 0x1 [0195.384] CloseHandle (hObject=0x1f8) returned 1 [0195.385] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239508 [0195.385] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1045\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1045\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb04 | out: lpFileInformation=0x1cfeb04*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xfc8)) returned 1 [0195.385] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239508 | out: hHeap=0x1f0000) returned 1 [0195.385] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239b38 [0195.385] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1045\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1045\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb14 | out: lpFileInformation=0x1cfeb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xfc8)) returned 1 [0195.385] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239b38 | out: hHeap=0x1f0000) returned 1 [0195.385] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239a30 [0195.385] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239a30 | out: hHeap=0x1f0000) returned 1 [0195.385] FindNextFileW (in: hFindFile=0x2211e0, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x141c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0195.385] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282a0 [0195.385] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2161b8 [0195.385] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22aa40 [0195.385] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2161b8 | out: hHeap=0x1f0000) returned 1 [0195.385] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aeb8 | out: hHeap=0x1f0000) returned 1 [0195.385] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0195.386] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1045\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1045\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0195.386] GetFileType (hFile=0x1f8) returned 0x1 [0195.386] CloseHandle (hObject=0x1f8) returned 1 [0195.387] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a908 [0195.387] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1045\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1045\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb04 | out: lpFileInformation=0x1cfeb04*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x141c6)) returned 1 [0195.387] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a908 | out: hHeap=0x1f0000) returned 1 [0195.387] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a908 [0195.387] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1045\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1045\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb14 | out: lpFileInformation=0x1cfeb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x141c6)) returned 1 [0195.387] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a908 | out: hHeap=0x1f0000) returned 1 [0195.387] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a908 [0195.387] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a908 | out: hHeap=0x1f0000) returned 1 [0195.387] FindNextFileW (in: hFindFile=0x2211e0, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0195.387] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228310 [0195.387] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215d80 [0195.388] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ab10 [0195.388] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215d80 | out: hHeap=0x1f0000) returned 1 [0195.388] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aa40 | out: hHeap=0x1f0000) returned 1 [0195.388] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228310 | out: hHeap=0x1f0000) returned 1 [0195.388] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1045\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1045\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0195.389] GetFileType (hFile=0x1f8) returned 0x1 [0195.389] CloseHandle (hObject=0x1f8) returned 1 [0195.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ac48 [0195.389] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1045\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1045\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb04 | out: lpFileInformation=0x1cfeb04*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758)) returned 1 [0195.389] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ac48 | out: hHeap=0x1f0000) returned 1 [0195.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22aa40 [0195.389] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1045\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1045\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb14 | out: lpFileInformation=0x1cfeb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758)) returned 1 [0195.389] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aa40 | out: hHeap=0x1f0000) returned 1 [0195.390] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ac48 [0195.390] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ac48 | out: hHeap=0x1f0000) returned 1 [0195.390] FindNextFileW (in: hFindFile=0x2211e0, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0195.390] FindClose (in: hFindFile=0x2211e0 | out: hFindFile=0x2211e0) returned 1 [0195.390] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab10 | out: hHeap=0x1f0000) returned 1 [0195.390] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22eb58 | out: hHeap=0x1f0000) returned 1 [0195.390] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b638 | out: hHeap=0x1f0000) returned 1 [0195.390] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215c18 | out: hHeap=0x1f0000) returned 1 [0195.390] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215d80 [0195.390] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b750 [0195.390] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22eb58 [0195.390] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215f30 [0195.391] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1046\\*", lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x220f60 [0195.391] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2160e0 [0195.392] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215f30 | out: hHeap=0x1f0000) returned 1 [0195.392] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0195.392] FindNextFileW (in: hFindFile=0x220f60, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.392] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215c18 [0195.392] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2160e0 | out: hHeap=0x1f0000) returned 1 [0195.392] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0195.392] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0195.392] FindNextFileW (in: hFindFile=0x220f60, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe63, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0195.392] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b638 [0195.392] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215e10 [0195.392] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x22ad18 [0195.393] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215e10 | out: hHeap=0x1f0000) returned 1 [0195.393] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215c18 | out: hHeap=0x1f0000) returned 1 [0195.393] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b638 | out: hHeap=0x1f0000) returned 1 [0195.393] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1046\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1046\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0195.394] GetFileType (hFile=0x1f8) returned 0x1 [0195.394] CloseHandle (hObject=0x1f8) returned 1 [0195.394] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239820 [0195.394] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1046\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1046\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb04 | out: lpFileInformation=0x1cfeb04*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe63)) returned 1 [0195.394] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239820 | out: hHeap=0x1f0000) returned 1 [0195.394] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2396c0 [0195.395] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1046\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1046\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb14 | out: lpFileInformation=0x1cfeb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe63)) returned 1 [0195.395] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2396c0 | out: hHeap=0x1f0000) returned 1 [0195.395] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239560 [0195.395] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239560 | out: hHeap=0x1f0000) returned 1 [0195.395] FindNextFileW (in: hFindFile=0x220f60, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13b62, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0195.395] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282a0 [0195.395] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215e10 [0195.395] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a908 [0195.395] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215e10 | out: hHeap=0x1f0000) returned 1 [0195.395] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ad18 | out: hHeap=0x1f0000) returned 1 [0195.395] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0195.396] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1046\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1046\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0195.396] GetFileType (hFile=0x1f8) returned 0x1 [0195.397] CloseHandle (hObject=0x1f8) returned 1 [0195.397] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ab10 [0195.397] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1046\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1046\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb04 | out: lpFileInformation=0x1cfeb04*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13b62)) returned 1 [0195.397] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab10 | out: hHeap=0x1f0000) returned 1 [0195.397] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ac48 [0195.397] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1046\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1046\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb14 | out: lpFileInformation=0x1cfeb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13b62)) returned 1 [0195.397] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ac48 | out: hHeap=0x1f0000) returned 1 [0195.397] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ab10 [0195.397] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab10 | out: hHeap=0x1f0000) returned 1 [0195.397] FindNextFileW (in: hFindFile=0x220f60, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0195.397] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228310 [0195.397] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215e10 [0195.397] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ad18 [0195.397] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215e10 | out: hHeap=0x1f0000) returned 1 [0195.398] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a908 | out: hHeap=0x1f0000) returned 1 [0195.398] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228310 | out: hHeap=0x1f0000) returned 1 [0195.398] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1046\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1046\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0195.398] GetFileType (hFile=0x1f8) returned 0x1 [0195.398] CloseHandle (hObject=0x1f8) returned 1 [0195.398] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a908 [0195.399] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1046\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1046\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb04 | out: lpFileInformation=0x1cfeb04*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758)) returned 1 [0195.399] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a908 | out: hHeap=0x1f0000) returned 1 [0195.399] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22aeb8 [0195.399] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1046\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1046\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb14 | out: lpFileInformation=0x1cfeb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758)) returned 1 [0195.399] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aeb8 | out: hHeap=0x1f0000) returned 1 [0195.399] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ad80 [0195.399] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ad80 | out: hHeap=0x1f0000) returned 1 [0195.399] FindNextFileW (in: hFindFile=0x220f60, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0195.399] FindClose (in: hFindFile=0x220f60 | out: hFindFile=0x220f60) returned 1 [0195.399] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ad18 | out: hHeap=0x1f0000) returned 1 [0195.399] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22eb58 | out: hHeap=0x1f0000) returned 1 [0195.399] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b750 | out: hHeap=0x1f0000) returned 1 [0195.399] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215d80 | out: hHeap=0x1f0000) returned 1 [0195.399] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215f30 [0195.399] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b638 [0195.400] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e030 [0195.400] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215c18 [0195.400] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1049\\*", lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x220fe0 [0195.400] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216008 [0195.400] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215c18 | out: hHeap=0x1f0000) returned 1 [0195.400] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0195.400] FindNextFileW (in: hFindFile=0x220fe0, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.400] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215c18 [0195.400] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216008 | out: hHeap=0x1f0000) returned 1 [0195.400] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0195.400] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0195.400] FindNextFileW (in: hFindFile=0x220fe0, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xd4b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0195.400] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b750 [0195.400] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215d80 [0195.401] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x22ad80 [0195.401] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215d80 | out: hHeap=0x1f0000) returned 1 [0195.401] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215c18 | out: hHeap=0x1f0000) returned 1 [0195.401] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b750 | out: hHeap=0x1f0000) returned 1 [0195.401] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1049\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1049\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0195.402] GetFileType (hFile=0x1f8) returned 0x1 [0195.403] CloseHandle (hObject=0x1f8) returned 1 [0195.403] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239878 [0195.403] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1049\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1049\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb04 | out: lpFileInformation=0x1cfeb04*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xd4b8)) returned 1 [0195.403] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239878 | out: hHeap=0x1f0000) returned 1 [0195.403] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239928 [0195.403] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1049\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1049\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb14 | out: lpFileInformation=0x1cfeb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xd4b8)) returned 1 [0195.404] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239928 | out: hHeap=0x1f0000) returned 1 [0195.404] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239560 [0195.404] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239560 | out: hHeap=0x1f0000) returned 1 [0195.404] FindNextFileW (in: hFindFile=0x220fe0, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13e4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0195.404] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282d8 [0195.404] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215c18 [0195.404] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a908 [0195.404] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215c18 | out: hHeap=0x1f0000) returned 1 [0195.404] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ad80 | out: hHeap=0x1f0000) returned 1 [0195.404] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282d8 | out: hHeap=0x1f0000) returned 1 [0195.405] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1049\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1049\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0195.405] GetFileType (hFile=0x1f8) returned 0x1 [0195.405] CloseHandle (hObject=0x1f8) returned 1 [0195.405] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22aa40 [0195.405] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1049\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1049\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb04 | out: lpFileInformation=0x1cfeb04*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13e4a)) returned 1 [0195.406] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aa40 | out: hHeap=0x1f0000) returned 1 [0195.406] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ac48 [0195.406] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1049\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1049\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb14 | out: lpFileInformation=0x1cfeb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13e4a)) returned 1 [0195.406] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ac48 | out: hHeap=0x1f0000) returned 1 [0195.406] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22aa40 [0195.406] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aa40 | out: hHeap=0x1f0000) returned 1 [0195.406] FindNextFileW (in: hFindFile=0x220fe0, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0195.406] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228310 [0195.406] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216200 [0195.406] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ad18 [0195.406] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216200 | out: hHeap=0x1f0000) returned 1 [0195.406] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a908 | out: hHeap=0x1f0000) returned 1 [0195.406] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228310 | out: hHeap=0x1f0000) returned 1 [0195.407] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1049\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1049\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0195.407] GetFileType (hFile=0x1f8) returned 0x1 [0195.407] CloseHandle (hObject=0x1f8) returned 1 [0195.407] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ac48 [0195.407] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1049\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1049\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb04 | out: lpFileInformation=0x1cfeb04*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758)) returned 1 [0195.408] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ac48 | out: hHeap=0x1f0000) returned 1 [0195.408] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ad80 [0195.408] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1049\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1049\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb14 | out: lpFileInformation=0x1cfeb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758)) returned 1 [0195.408] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ad80 | out: hHeap=0x1f0000) returned 1 [0195.408] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22aeb8 [0195.408] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aeb8 | out: hHeap=0x1f0000) returned 1 [0195.408] FindNextFileW (in: hFindFile=0x220fe0, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0195.408] FindClose (in: hFindFile=0x220fe0 | out: hFindFile=0x220fe0) returned 1 [0195.408] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ad18 | out: hHeap=0x1f0000) returned 1 [0195.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e030 | out: hHeap=0x1f0000) returned 1 [0195.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b638 | out: hHeap=0x1f0000) returned 1 [0195.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215f30 | out: hHeap=0x1f0000) returned 1 [0195.433] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216170 [0195.433] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b750 [0195.433] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22ee88 [0195.433] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215f30 [0195.433] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1053\\*", lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x214150 [0195.676] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215ca8 [0195.677] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215f30 | out: hHeap=0x1f0000) returned 1 [0195.677] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0195.677] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.677] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215d38 [0195.677] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215ca8 | out: hHeap=0x1f0000) returned 1 [0195.677] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0195.677] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0195.677] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xf19, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0195.678] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b638 [0195.678] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215ca8 [0195.678] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x22abe0 [0195.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215ca8 | out: hHeap=0x1f0000) returned 1 [0195.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215d38 | out: hHeap=0x1f0000) returned 1 [0195.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b638 | out: hHeap=0x1f0000) returned 1 [0195.679] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1053\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1053\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8 [0195.679] GetFileType (hFile=0x1c8) returned 0x1 [0195.679] CloseHandle (hObject=0x1c8) returned 1 [0195.680] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239400 [0195.680] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1053\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1053\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb04 | out: lpFileInformation=0x1cfeb04*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xf19)) returned 1 [0195.680] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239400 | out: hHeap=0x1f0000) returned 1 [0195.680] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2395b8 [0195.680] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1053\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1053\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb14 | out: lpFileInformation=0x1cfeb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xf19)) returned 1 [0195.681] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2395b8 | out: hHeap=0x1f0000) returned 1 [0195.681] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2394b0 [0195.681] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2394b0 | out: hHeap=0x1f0000) returned 1 [0195.681] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12f70, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0195.681] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282a0 [0195.681] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216200 [0195.681] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a838 [0195.681] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216200 | out: hHeap=0x1f0000) returned 1 [0195.681] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22abe0 | out: hHeap=0x1f0000) returned 1 [0195.682] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0195.682] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1053\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1053\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8 [0195.684] GetFileType (hFile=0x1c8) returned 0x1 [0195.684] CloseHandle (hObject=0x1c8) returned 1 [0195.685] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a8a0 [0195.685] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1053\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1053\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb04 | out: lpFileInformation=0x1cfeb04*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12f70)) returned 1 [0195.685] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a8a0 | out: hHeap=0x1f0000) returned 1 [0195.685] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22aaa8 [0195.685] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1053\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1053\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb14 | out: lpFileInformation=0x1cfeb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12f70)) returned 1 [0195.685] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aaa8 | out: hHeap=0x1f0000) returned 1 [0195.685] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a9d8 [0195.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a9d8 | out: hHeap=0x1f0000) returned 1 [0195.686] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0195.686] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228310 [0195.686] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215e10 [0195.686] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22aaa8 [0195.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215e10 | out: hHeap=0x1f0000) returned 1 [0195.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a838 | out: hHeap=0x1f0000) returned 1 [0195.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228310 | out: hHeap=0x1f0000) returned 1 [0195.687] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1053\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1053\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8 [0195.687] GetFileType (hFile=0x1c8) returned 0x1 [0195.687] CloseHandle (hObject=0x1c8) returned 1 [0195.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ab10 [0195.688] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1053\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1053\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb04 | out: lpFileInformation=0x1cfeb04*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558)) returned 1 [0195.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab10 | out: hHeap=0x1f0000) returned 1 [0195.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ab10 [0195.688] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1053\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1053\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb14 | out: lpFileInformation=0x1cfeb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558)) returned 1 [0195.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab10 | out: hHeap=0x1f0000) returned 1 [0195.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a838 [0195.689] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a838 | out: hHeap=0x1f0000) returned 1 [0195.689] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0195.689] FindClose (in: hFindFile=0x214150 | out: hFindFile=0x214150) returned 1 [0195.689] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aaa8 | out: hHeap=0x1f0000) returned 1 [0195.689] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ee88 | out: hHeap=0x1f0000) returned 1 [0195.689] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b750 | out: hHeap=0x1f0000) returned 1 [0195.689] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216170 | out: hHeap=0x1f0000) returned 1 [0195.689] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216008 [0195.689] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b480 [0195.690] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22db68 [0195.690] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215f30 [0195.690] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1055\\*", lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x214150 [0195.690] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216170 [0195.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215f30 | out: hHeap=0x1f0000) returned 1 [0195.691] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0195.691] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.691] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215990 [0195.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216170 | out: hHeap=0x1f0000) returned 1 [0195.691] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0195.691] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0195.691] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xf13, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0195.691] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b2f0 [0195.691] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216050 [0195.691] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x22ad80 [0195.692] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216050 | out: hHeap=0x1f0000) returned 1 [0195.692] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215990 | out: hHeap=0x1f0000) returned 1 [0195.692] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b2f0 | out: hHeap=0x1f0000) returned 1 [0195.692] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1055\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1055\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8 [0195.693] GetFileType (hFile=0x1c8) returned 0x1 [0195.693] CloseHandle (hObject=0x1c8) returned 1 [0195.694] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239770 [0195.694] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1055\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1055\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb04 | out: lpFileInformation=0x1cfeb04*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xf13)) returned 1 [0195.694] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239770 | out: hHeap=0x1f0000) returned 1 [0195.694] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239560 [0195.694] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1055\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1055\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb14 | out: lpFileInformation=0x1cfeb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xf13)) returned 1 [0195.694] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239560 | out: hHeap=0x1f0000) returned 1 [0195.694] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239770 [0195.694] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239770 | out: hHeap=0x1f0000) returned 1 [0195.695] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12c12, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0195.695] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282d8 [0195.695] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215ca8 [0195.695] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a838 [0195.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215ca8 | out: hHeap=0x1f0000) returned 1 [0195.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ad80 | out: hHeap=0x1f0000) returned 1 [0195.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282d8 | out: hHeap=0x1f0000) returned 1 [0195.695] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1055\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1055\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8 [0195.696] GetFileType (hFile=0x1c8) returned 0x1 [0195.696] CloseHandle (hObject=0x1c8) returned 1 [0195.696] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ad80 [0195.697] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1055\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1055\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb04 | out: lpFileInformation=0x1cfeb04*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12c12)) returned 1 [0195.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ad80 | out: hHeap=0x1f0000) returned 1 [0195.697] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a8a0 [0195.697] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1055\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1055\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb14 | out: lpFileInformation=0x1cfeb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12c12)) returned 1 [0195.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a8a0 | out: hHeap=0x1f0000) returned 1 [0195.697] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ac48 [0195.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ac48 | out: hHeap=0x1f0000) returned 1 [0195.697] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0195.697] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282d8 [0195.697] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215ca8 [0195.698] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a970 [0195.698] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215ca8 | out: hHeap=0x1f0000) returned 1 [0195.698] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a838 | out: hHeap=0x1f0000) returned 1 [0195.698] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282d8 | out: hHeap=0x1f0000) returned 1 [0195.698] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1055\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1055\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8 [0195.699] GetFileType (hFile=0x1c8) returned 0x1 [0195.699] CloseHandle (hObject=0x1c8) returned 1 [0195.699] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a8a0 [0195.699] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1055\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1055\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb04 | out: lpFileInformation=0x1cfeb04*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558)) returned 1 [0195.700] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a8a0 | out: hHeap=0x1f0000) returned 1 [0195.700] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ad80 [0195.700] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1055\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1055\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb14 | out: lpFileInformation=0x1cfeb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558)) returned 1 [0195.700] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ad80 | out: hHeap=0x1f0000) returned 1 [0195.700] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22aa40 [0195.700] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aa40 | out: hHeap=0x1f0000) returned 1 [0195.700] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0195.700] FindClose (in: hFindFile=0x214150 | out: hFindFile=0x214150) returned 1 [0195.700] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a970 | out: hHeap=0x1f0000) returned 1 [0195.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22db68 | out: hHeap=0x1f0000) returned 1 [0195.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b480 | out: hHeap=0x1f0000) returned 1 [0195.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216008 | out: hHeap=0x1f0000) returned 1 [0195.701] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216050 [0195.701] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b480 [0195.701] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e1c8 [0195.701] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215ca8 [0195.701] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\2052\\*", lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x214150 [0195.701] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215d38 [0195.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215ca8 | out: hHeap=0x1f0000) returned 1 [0195.701] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0195.702] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215d80 [0195.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215d38 | out: hHeap=0x1f0000) returned 1 [0195.702] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0195.702] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0195.702] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x16c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0195.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b318 [0195.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216098 [0195.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x22ab78 [0195.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216098 | out: hHeap=0x1f0000) returned 1 [0195.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215d80 | out: hHeap=0x1f0000) returned 1 [0195.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b318 | out: hHeap=0x1f0000) returned 1 [0195.703] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\2052\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2052\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8 [0195.704] GetFileType (hFile=0x1c8) returned 0x1 [0195.704] CloseHandle (hObject=0x1c8) returned 1 [0195.704] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239458 [0195.704] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\2052\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2052\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb04 | out: lpFileInformation=0x1cfeb04*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x16c3)) returned 1 [0195.704] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239458 | out: hHeap=0x1f0000) returned 1 [0195.705] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2399d8 [0195.705] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\2052\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2052\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb14 | out: lpFileInformation=0x1cfeb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x16c3)) returned 1 [0195.705] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2399d8 | out: hHeap=0x1f0000) returned 1 [0195.705] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239400 [0195.705] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239400 | out: hHeap=0x1f0000) returned 1 [0195.705] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0195.705] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282a0 [0195.705] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216098 [0195.705] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ac48 [0195.705] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216098 | out: hHeap=0x1f0000) returned 1 [0195.705] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab78 | out: hHeap=0x1f0000) returned 1 [0195.705] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0195.706] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\2052\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2052\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8 [0195.706] GetFileType (hFile=0x1c8) returned 0x1 [0195.707] CloseHandle (hObject=0x1c8) returned 1 [0195.707] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a970 [0195.707] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\2052\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2052\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb04 | out: lpFileInformation=0x1cfeb04*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed0c)) returned 1 [0195.708] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a970 | out: hHeap=0x1f0000) returned 1 [0195.708] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a838 [0195.708] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\2052\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2052\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb14 | out: lpFileInformation=0x1cfeb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed0c)) returned 1 [0195.708] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a838 | out: hHeap=0x1f0000) returned 1 [0195.708] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ad80 [0195.708] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ad80 | out: hHeap=0x1f0000) returned 1 [0195.708] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0195.708] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228310 [0195.708] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215e10 [0195.708] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ad80 [0195.709] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215e10 | out: hHeap=0x1f0000) returned 1 [0195.709] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ac48 | out: hHeap=0x1f0000) returned 1 [0195.709] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228310 | out: hHeap=0x1f0000) returned 1 [0195.709] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\2052\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2052\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8 [0195.709] GetFileType (hFile=0x1c8) returned 0x1 [0195.710] CloseHandle (hObject=0x1c8) returned 1 [0195.710] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a838 [0195.710] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\2052\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2052\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb04 | out: lpFileInformation=0x1cfeb04*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758)) returned 1 [0195.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a838 | out: hHeap=0x1f0000) returned 1 [0195.710] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a838 [0195.710] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\2052\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2052\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb14 | out: lpFileInformation=0x1cfeb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758)) returned 1 [0195.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a838 | out: hHeap=0x1f0000) returned 1 [0195.710] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a838 [0195.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a838 | out: hHeap=0x1f0000) returned 1 [0195.710] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0195.711] FindClose (in: hFindFile=0x214150 | out: hFindFile=0x214150) returned 1 [0195.711] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ad80 | out: hHeap=0x1f0000) returned 1 [0195.711] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e1c8 | out: hHeap=0x1f0000) returned 1 [0195.711] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b480 | out: hHeap=0x1f0000) returned 1 [0195.711] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216050 | out: hHeap=0x1f0000) returned 1 [0195.711] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215e10 [0195.711] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b480 [0195.711] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22de98 [0195.711] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215ca8 [0195.711] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\2070\\*", lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x214150 [0195.712] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216008 [0195.712] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215ca8 | out: hHeap=0x1f0000) returned 1 [0195.712] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0195.712] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.712] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215d38 [0195.712] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216008 | out: hHeap=0x1f0000) returned 1 [0195.712] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0195.712] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0195.712] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xfaf, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0195.712] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b4d0 [0195.712] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215ca8 [0195.713] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x22aa40 [0195.713] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215ca8 | out: hHeap=0x1f0000) returned 1 [0195.713] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215d38 | out: hHeap=0x1f0000) returned 1 [0195.713] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b4d0 | out: hHeap=0x1f0000) returned 1 [0195.713] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\2070\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2070\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8 [0195.713] GetFileType (hFile=0x1c8) returned 0x1 [0195.714] CloseHandle (hObject=0x1c8) returned 1 [0195.958] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239ae0 [0195.958] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\2070\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2070\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb04 | out: lpFileInformation=0x1cfeb04*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xfaf)) returned 1 [0195.959] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239ae0 | out: hHeap=0x1f0000) returned 1 [0195.959] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239718 [0195.959] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\2070\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2070\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb14 | out: lpFileInformation=0x1cfeb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xfaf)) returned 1 [0195.959] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239718 | out: hHeap=0x1f0000) returned 1 [0195.959] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239718 [0195.959] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239718 | out: hHeap=0x1f0000) returned 1 [0195.959] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1397e, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0195.959] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf38 [0195.959] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216170 [0195.959] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22aaa8 [0195.959] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216170 | out: hHeap=0x1f0000) returned 1 [0195.959] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aa40 | out: hHeap=0x1f0000) returned 1 [0195.959] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf38 | out: hHeap=0x1f0000) returned 1 [0195.960] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\2070\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2070\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1dc [0195.960] GetFileType (hFile=0x1dc) returned 0x1 [0195.960] CloseHandle (hObject=0x1dc) returned 1 [0195.960] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22aa40 [0195.960] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\2070\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2070\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb04 | out: lpFileInformation=0x1cfeb04*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1397e)) returned 1 [0195.961] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aa40 | out: hHeap=0x1f0000) returned 1 [0195.961] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22aa40 [0195.961] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\2070\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2070\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb14 | out: lpFileInformation=0x1cfeb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1397e)) returned 1 [0195.961] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aa40 | out: hHeap=0x1f0000) returned 1 [0195.961] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ad80 [0195.961] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ad80 | out: hHeap=0x1f0000) returned 1 [0195.961] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0195.961] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d248 [0195.961] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215d80 [0195.961] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ad80 [0195.961] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215d80 | out: hHeap=0x1f0000) returned 1 [0195.961] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aaa8 | out: hHeap=0x1f0000) returned 1 [0195.961] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d248 | out: hHeap=0x1f0000) returned 1 [0195.961] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\2070\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2070\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1dc [0195.962] GetFileType (hFile=0x1dc) returned 0x1 [0195.962] CloseHandle (hObject=0x1dc) returned 1 [0195.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22aa40 [0195.962] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\2070\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2070\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb04 | out: lpFileInformation=0x1cfeb04*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958)) returned 1 [0195.962] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aa40 | out: hHeap=0x1f0000) returned 1 [0195.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a970 [0195.962] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\2070\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2070\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb14 | out: lpFileInformation=0x1cfeb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958)) returned 1 [0195.963] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a970 | out: hHeap=0x1f0000) returned 1 [0195.963] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a970 [0195.963] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a970 | out: hHeap=0x1f0000) returned 1 [0195.963] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0195.963] FindClose (in: hFindFile=0x214150 | out: hFindFile=0x214150) returned 1 [0195.963] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ad80 | out: hHeap=0x1f0000) returned 1 [0195.963] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22de98 | out: hHeap=0x1f0000) returned 1 [0195.963] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b480 | out: hHeap=0x1f0000) returned 1 [0195.963] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215e10 | out: hHeap=0x1f0000) returned 1 [0195.963] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215d80 [0195.963] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b9e0 [0195.963] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d9d0 [0195.963] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215e10 [0195.964] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\3076\\*", lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x214150 [0195.964] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216170 [0195.964] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215e10 | out: hHeap=0x1f0000) returned 1 [0195.964] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0195.964] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.964] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215e10 [0195.964] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216170 | out: hHeap=0x1f0000) returned 1 [0195.964] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0195.964] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0195.964] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x18a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0195.964] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b8c8 [0195.964] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215f30 [0195.964] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x22a970 [0195.965] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215f30 | out: hHeap=0x1f0000) returned 1 [0195.965] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215e10 | out: hHeap=0x1f0000) returned 1 [0195.965] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b8c8 | out: hHeap=0x1f0000) returned 1 [0195.965] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\3076\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3076\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1dc [0195.965] GetFileType (hFile=0x1dc) returned 0x1 [0195.966] CloseHandle (hObject=0x1dc) returned 1 [0195.966] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239928 [0195.966] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\3076\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3076\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb04 | out: lpFileInformation=0x1cfeb04*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x18a5)) returned 1 [0195.966] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239928 | out: hHeap=0x1f0000) returned 1 [0195.966] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239508 [0195.966] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\3076\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3076\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb14 | out: lpFileInformation=0x1cfeb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x18a5)) returned 1 [0195.966] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239508 | out: hHeap=0x1f0000) returned 1 [0195.966] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239b38 [0195.966] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239b38 | out: hHeap=0x1f0000) returned 1 [0195.966] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed90, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0195.966] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0195.967] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216050 [0195.967] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22abe0 [0195.967] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216050 | out: hHeap=0x1f0000) returned 1 [0195.967] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a970 | out: hHeap=0x1f0000) returned 1 [0195.967] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0195.967] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\3076\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3076\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1dc [0195.967] GetFileType (hFile=0x1dc) returned 0x1 [0195.968] CloseHandle (hObject=0x1dc) returned 1 [0195.968] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22aa40 [0195.968] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\3076\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3076\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb04 | out: lpFileInformation=0x1cfeb04*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed90)) returned 1 [0195.968] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aa40 | out: hHeap=0x1f0000) returned 1 [0195.968] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a970 [0195.968] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\3076\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3076\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb14 | out: lpFileInformation=0x1cfeb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed90)) returned 1 [0195.968] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a970 | out: hHeap=0x1f0000) returned 1 [0195.968] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a970 [0195.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a970 | out: hHeap=0x1f0000) returned 1 [0195.969] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0195.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf38 [0195.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216050 [0195.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a970 [0195.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216050 | out: hHeap=0x1f0000) returned 1 [0195.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22abe0 | out: hHeap=0x1f0000) returned 1 [0195.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf38 | out: hHeap=0x1f0000) returned 1 [0195.969] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\3076\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\3076\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1dc [0195.970] GetFileType (hFile=0x1dc) returned 0x1 [0195.970] CloseHandle (hObject=0x1dc) returned 1 [0195.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22abe0 [0195.970] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\3076\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\3076\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb04 | out: lpFileInformation=0x1cfeb04*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758)) returned 1 [0195.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22abe0 | out: hHeap=0x1f0000) returned 1 [0195.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ad80 [0195.971] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\3076\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\3076\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb14 | out: lpFileInformation=0x1cfeb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758)) returned 1 [0195.971] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ad80 | out: hHeap=0x1f0000) returned 1 [0195.971] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22aaa8 [0195.971] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aaa8 | out: hHeap=0x1f0000) returned 1 [0195.971] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0195.971] FindClose (in: hFindFile=0x214150 | out: hFindFile=0x214150) returned 1 [0195.971] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a970 | out: hHeap=0x1f0000) returned 1 [0195.971] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d9d0 | out: hHeap=0x1f0000) returned 1 [0195.971] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b9e0 | out: hHeap=0x1f0000) returned 1 [0195.971] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215d80 | out: hHeap=0x1f0000) returned 1 [0195.971] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216008 [0195.971] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b8c8 [0195.971] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e360 [0195.972] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216098 [0195.972] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\3082\\*", lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x214150 [0195.972] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216050 [0195.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216098 | out: hHeap=0x1f0000) returned 1 [0195.972] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0195.972] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.972] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216170 [0195.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216050 | out: hHeap=0x1f0000) returned 1 [0195.973] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0195.973] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0195.973] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xbfd, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0195.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b8f0 [0195.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215d80 [0195.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x22ad80 [0195.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215d80 | out: hHeap=0x1f0000) returned 1 [0195.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216170 | out: hHeap=0x1f0000) returned 1 [0195.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b8f0 | out: hHeap=0x1f0000) returned 1 [0195.973] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\3082\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3082\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1dc [0195.974] GetFileType (hFile=0x1dc) returned 0x1 [0195.974] CloseHandle (hObject=0x1dc) returned 1 [0195.974] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2397c8 [0195.974] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\3082\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3082\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb04 | out: lpFileInformation=0x1cfeb04*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xbfd)) returned 1 [0195.974] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2397c8 | out: hHeap=0x1f0000) returned 1 [0195.974] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239820 [0195.974] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\3082\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3082\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb14 | out: lpFileInformation=0x1cfeb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xbfd)) returned 1 [0195.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239820 | out: hHeap=0x1f0000) returned 1 [0195.975] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2396c0 [0195.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2396c0 | out: hHeap=0x1f0000) returned 1 [0195.975] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1387c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0195.975] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf38 [0195.975] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215d80 [0195.975] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22aaa8 [0195.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215d80 | out: hHeap=0x1f0000) returned 1 [0195.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ad80 | out: hHeap=0x1f0000) returned 1 [0195.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf38 | out: hHeap=0x1f0000) returned 1 [0195.975] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\3082\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3082\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1dc [0195.975] GetFileType (hFile=0x1dc) returned 0x1 [0195.976] CloseHandle (hObject=0x1dc) returned 1 [0195.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a970 [0195.976] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\3082\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3082\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb04 | out: lpFileInformation=0x1cfeb04*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1387c)) returned 1 [0195.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a970 | out: hHeap=0x1f0000) returned 1 [0195.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22aa40 [0195.976] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\3082\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3082\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb14 | out: lpFileInformation=0x1cfeb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1387c)) returned 1 [0195.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aa40 | out: hHeap=0x1f0000) returned 1 [0195.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ab78 [0195.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab78 | out: hHeap=0x1f0000) returned 1 [0195.976] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0195.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf38 [0195.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215d80 [0195.977] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a970 [0195.977] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215d80 | out: hHeap=0x1f0000) returned 1 [0195.977] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aaa8 | out: hHeap=0x1f0000) returned 1 [0195.977] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf38 | out: hHeap=0x1f0000) returned 1 [0195.977] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\3082\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\3082\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1dc [0195.977] GetFileType (hFile=0x1dc) returned 0x1 [0195.977] CloseHandle (hObject=0x1dc) returned 1 [0195.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ad80 [0195.978] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\3082\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\3082\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb04 | out: lpFileInformation=0x1cfeb04*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958)) returned 1 [0195.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ad80 | out: hHeap=0x1f0000) returned 1 [0195.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ad80 [0195.978] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\3082\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\3082\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb14 | out: lpFileInformation=0x1cfeb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958)) returned 1 [0195.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ad80 | out: hHeap=0x1f0000) returned 1 [0195.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22aa40 [0195.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aa40 | out: hHeap=0x1f0000) returned 1 [0195.978] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0195.978] FindClose (in: hFindFile=0x214150 | out: hFindFile=0x214150) returned 1 [0195.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a970 | out: hHeap=0x1f0000) returned 1 [0195.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e360 | out: hHeap=0x1f0000) returned 1 [0195.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b8c8 | out: hHeap=0x1f0000) returned 1 [0195.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216008 | out: hHeap=0x1f0000) returned 1 [0195.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215d80 [0195.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b8c8 [0195.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f350 [0195.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215e10 [0195.979] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\Client\\*", lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x214150 [0195.980] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215f30 [0195.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215e10 | out: hHeap=0x1f0000) returned 1 [0195.980] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0195.980] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.980] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216008 [0195.980] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x22a970 [0195.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216008 | out: hHeap=0x1f0000) returned 1 [0195.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215f30 | out: hHeap=0x1f0000) returned 1 [0195.981] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0195.981] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0195.981] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce2bc00, ftCreationTime.dwHighDateTime=0x1cac6d5, ftLastAccessTime.dwLowDateTime=0xce2bc00, ftLastAccessTime.dwHighDateTime=0x1cac6d5, ftLastWriteTime.dwLowDateTime=0xce2bc00, ftLastWriteTime.dwHighDateTime=0x1cac6d5, nFileSizeHigh=0x0, nFileSizeLow=0x31444, dwReserved0=0x0, dwReserved1=0x0, cFileName="Parameterinfo.xml", cAlternateFileName="PARAME~1.XML")) returned 1 [0195.981] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf38 [0195.981] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215f30 [0195.981] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22aaa8 [0195.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215f30 | out: hHeap=0x1f0000) returned 1 [0195.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a970 | out: hHeap=0x1f0000) returned 1 [0195.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf38 | out: hHeap=0x1f0000) returned 1 [0195.982] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Client\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\parameterinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1dc [0195.982] GetFileType (hFile=0x1dc) returned 0x1 [0195.983] CloseHandle (hObject=0x1dc) returned 1 [0195.983] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22abe0 [0195.983] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Client\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\parameterinfo.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb04 | out: lpFileInformation=0x1cfeb04*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce2bc00, ftCreationTime.dwHighDateTime=0x1cac6d5, ftLastAccessTime.dwLowDateTime=0xce2bc00, ftLastAccessTime.dwHighDateTime=0x1cac6d5, ftLastWriteTime.dwLowDateTime=0xce2bc00, ftLastWriteTime.dwHighDateTime=0x1cac6d5, nFileSizeHigh=0x0, nFileSizeLow=0x31444)) returned 1 [0195.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22abe0 | out: hHeap=0x1f0000) returned 1 [0195.983] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ac48 [0195.983] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Client\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\parameterinfo.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb14 | out: lpFileInformation=0x1cfeb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce2bc00, ftCreationTime.dwHighDateTime=0x1cac6d5, ftLastAccessTime.dwLowDateTime=0xce2bc00, ftLastAccessTime.dwHighDateTime=0x1cac6d5, ftLastWriteTime.dwLowDateTime=0xce2bc00, ftLastWriteTime.dwHighDateTime=0x1cac6d5, nFileSizeHigh=0x0, nFileSizeLow=0x31444)) returned 1 [0195.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ac48 | out: hHeap=0x1f0000) returned 1 [0195.983] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a970 [0195.984] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a970 | out: hHeap=0x1f0000) returned 1 [0195.984] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x9882, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 1 [0195.984] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b8f0 [0195.984] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215e10 [0195.984] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22aa40 [0195.984] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215e10 | out: hHeap=0x1f0000) returned 1 [0195.984] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aaa8 | out: hHeap=0x1f0000) returned 1 [0195.984] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b8f0 | out: hHeap=0x1f0000) returned 1 [0195.984] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Client\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\uiinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1dc [0195.984] GetFileType (hFile=0x1dc) returned 0x1 [0195.985] CloseHandle (hObject=0x1dc) returned 1 [0195.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a970 [0195.985] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Client\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\uiinfo.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb04 | out: lpFileInformation=0x1cfeb04*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x9882)) returned 1 [0195.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a970 | out: hHeap=0x1f0000) returned 1 [0195.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22aaa8 [0195.985] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Client\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\uiinfo.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb14 | out: lpFileInformation=0x1cfeb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x9882)) returned 1 [0195.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aaa8 | out: hHeap=0x1f0000) returned 1 [0195.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22aaa8 [0195.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aaa8 | out: hHeap=0x1f0000) returned 1 [0195.986] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x9882, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 0 [0195.986] FindClose (in: hFindFile=0x214150 | out: hFindFile=0x214150) returned 1 [0195.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aa40 | out: hHeap=0x1f0000) returned 1 [0195.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f350 | out: hHeap=0x1f0000) returned 1 [0195.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b8c8 | out: hHeap=0x1f0000) returned 1 [0195.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215d80 | out: hHeap=0x1f0000) returned 1 [0195.986] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215d80 [0195.986] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b8c8 [0195.986] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f350 [0195.986] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239668 [0195.986] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\Extended\\*", lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x214150 [0195.986] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239928 [0195.987] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239668 | out: hHeap=0x1f0000) returned 1 [0195.987] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0195.987] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.987] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239ae0 [0195.987] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239928 | out: hHeap=0x1f0000) returned 1 [0195.987] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0195.987] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0195.987] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2a714f00, ftCreationTime.dwHighDateTime=0x1cac6f0, ftLastAccessTime.dwLowDateTime=0x2a714f00, ftLastAccessTime.dwHighDateTime=0x1cac6f0, ftLastWriteTime.dwLowDateTime=0x2a714f00, ftLastWriteTime.dwHighDateTime=0x1cac6f0, nFileSizeHigh=0x0, nFileSizeLow=0x16c82, dwReserved0=0x0, dwReserved1=0x0, cFileName="Parameterinfo.xml", cAlternateFileName="PARAME~1.XML")) returned 1 [0195.987] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d248 [0195.987] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239b38 [0195.987] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x218150 [0195.987] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239b38 | out: hHeap=0x1f0000) returned 1 [0195.987] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239ae0 | out: hHeap=0x1f0000) returned 1 [0195.987] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d248 | out: hHeap=0x1f0000) returned 1 [0195.988] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Extended\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\parameterinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1dc [0195.988] GetFileType (hFile=0x1dc) returned 0x1 [0195.989] CloseHandle (hObject=0x1dc) returned 1 [0195.989] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x214e08 [0195.989] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Extended\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\parameterinfo.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb04 | out: lpFileInformation=0x1cfeb04*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2a714f00, ftCreationTime.dwHighDateTime=0x1cac6f0, ftLastAccessTime.dwLowDateTime=0x2a714f00, ftLastAccessTime.dwHighDateTime=0x1cac6f0, ftLastWriteTime.dwLowDateTime=0x2a714f00, ftLastWriteTime.dwHighDateTime=0x1cac6f0, nFileSizeHigh=0x0, nFileSizeLow=0x16c82)) returned 1 [0195.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214e08 | out: hHeap=0x1f0000) returned 1 [0195.989] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x214b38 [0195.989] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Extended\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\parameterinfo.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb14 | out: lpFileInformation=0x1cfeb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2a714f00, ftCreationTime.dwHighDateTime=0x1cac6f0, ftLastAccessTime.dwLowDateTime=0x2a714f00, ftLastAccessTime.dwHighDateTime=0x1cac6f0, ftLastWriteTime.dwLowDateTime=0x2a714f00, ftLastWriteTime.dwHighDateTime=0x1cac6f0, nFileSizeHigh=0x0, nFileSizeLow=0x16c82)) returned 1 [0195.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214b38 | out: hHeap=0x1f0000) returned 1 [0195.989] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x214958 [0195.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214958 | out: hHeap=0x1f0000) returned 1 [0195.989] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x988a, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 1 [0195.989] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b8f0 [0195.990] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239928 [0195.990] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217950 [0195.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239928 | out: hHeap=0x1f0000) returned 1 [0195.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218150 | out: hHeap=0x1f0000) returned 1 [0195.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b8f0 | out: hHeap=0x1f0000) returned 1 [0195.990] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Extended\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\uiinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1dc [0195.990] GetFileType (hFile=0x1dc) returned 0x1 [0195.991] CloseHandle (hObject=0x1dc) returned 1 [0195.991] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a970 [0195.991] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Extended\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\uiinfo.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb04 | out: lpFileInformation=0x1cfeb04*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x988a)) returned 1 [0195.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a970 | out: hHeap=0x1f0000) returned 1 [0195.991] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a970 [0195.991] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Extended\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\uiinfo.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb14 | out: lpFileInformation=0x1cfeb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x988a)) returned 1 [0195.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a970 | out: hHeap=0x1f0000) returned 1 [0195.991] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a970 [0195.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a970 | out: hHeap=0x1f0000) returned 1 [0195.991] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x988a, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 0 [0195.991] FindClose (in: hFindFile=0x214150 | out: hFindFile=0x214150) returned 1 [0195.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217950 | out: hHeap=0x1f0000) returned 1 [0195.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f350 | out: hHeap=0x1f0000) returned 1 [0195.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b8c8 | out: hHeap=0x1f0000) returned 1 [0195.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215d80 | out: hHeap=0x1f0000) returned 1 [0195.992] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215d80 [0195.992] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b8c8 [0195.992] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22de98 [0195.992] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2396c0 [0195.992] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\*", lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2213e0 [0196.385] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239610 [0196.385] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2396c0 | out: hHeap=0x1f0000) returned 1 [0196.385] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0196.385] FindNextFileW (in: hFindFile=0x2213e0, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0196.386] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239770 [0196.386] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239610 | out: hHeap=0x1f0000) returned 1 [0196.386] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0196.386] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0196.386] FindNextFileW (in: hFindFile=0x2213e0, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Print.ico", cAlternateFileName="")) returned 1 [0196.386] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238488 [0196.386] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239400 [0196.386] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x218050 [0196.386] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239400 | out: hHeap=0x1f0000) returned 1 [0196.386] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239770 | out: hHeap=0x1f0000) returned 1 [0196.386] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238488 | out: hHeap=0x1f0000) returned 1 [0196.387] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Print.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\print.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x20c [0196.387] GetFileType (hFile=0x20c) returned 0x1 [0196.388] CloseHandle (hObject=0x20c) returned 1 [0196.388] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a838 [0196.388] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Print.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\print.ico"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb04 | out: lpFileInformation=0x1cfeb04*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e)) returned 1 [0196.388] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a838 | out: hHeap=0x1f0000) returned 1 [0196.388] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ac48 [0196.389] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Print.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\print.ico"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb14 | out: lpFileInformation=0x1cfeb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e)) returned 1 [0196.389] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ac48 | out: hHeap=0x1f0000) returned 1 [0196.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ae50 [0196.389] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ae50 | out: hHeap=0x1f0000) returned 1 [0196.389] FindNextFileW (in: hFindFile=0x2213e0, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate1.ico", cAlternateFileName="")) returned 1 [0196.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0196.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2399d8 [0196.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217650 [0196.389] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2399d8 | out: hHeap=0x1f0000) returned 1 [0196.389] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218050 | out: hHeap=0x1f0000) returned 1 [0196.389] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0196.390] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate1.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate1.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x20c [0196.390] GetFileType (hFile=0x20c) returned 0x1 [0196.390] CloseHandle (hObject=0x20c) returned 1 [0196.390] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a9d8 [0196.391] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate1.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate1.ico"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb04 | out: lpFileInformation=0x1cfeb04*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1 [0196.391] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a9d8 | out: hHeap=0x1f0000) returned 1 [0196.391] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ad18 [0196.391] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate1.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate1.ico"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb14 | out: lpFileInformation=0x1cfeb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1 [0196.391] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ad18 | out: hHeap=0x1f0000) returned 1 [0196.391] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22abe0 [0196.391] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22abe0 | out: hHeap=0x1f0000) returned 1 [0196.391] FindNextFileW (in: hFindFile=0x2213e0, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate2.ico", cAlternateFileName="")) returned 1 [0196.391] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0196.391] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239718 [0196.391] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217ed0 [0196.391] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239718 | out: hHeap=0x1f0000) returned 1 [0196.391] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217650 | out: hHeap=0x1f0000) returned 1 [0196.391] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0196.392] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate2.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate2.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x20c [0196.392] GetFileType (hFile=0x20c) returned 0x1 [0196.392] CloseHandle (hObject=0x20c) returned 1 [0196.392] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ab78 [0196.392] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate2.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate2.ico"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb04 | out: lpFileInformation=0x1cfeb04*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1 [0196.392] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab78 | out: hHeap=0x1f0000) returned 1 [0196.392] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ae50 [0196.392] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate2.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate2.ico"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb14 | out: lpFileInformation=0x1cfeb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1 [0196.393] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ae50 | out: hHeap=0x1f0000) returned 1 [0196.393] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22aaa8 [0196.393] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aaa8 | out: hHeap=0x1f0000) returned 1 [0196.393] FindNextFileW (in: hFindFile=0x2213e0, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate3.ico", cAlternateFileName="")) returned 1 [0196.393] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0196.393] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239560 [0196.393] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x218250 [0196.393] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239560 | out: hHeap=0x1f0000) returned 1 [0196.393] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217ed0 | out: hHeap=0x1f0000) returned 1 [0196.393] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0196.394] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate3.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate3.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x20c [0196.394] GetFileType (hFile=0x20c) returned 0x1 [0196.395] CloseHandle (hObject=0x20c) returned 1 [0196.396] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22abe0 [0196.396] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate3.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate3.ico"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb04 | out: lpFileInformation=0x1cfeb04*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1 [0196.396] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22abe0 | out: hHeap=0x1f0000) returned 1 [0196.396] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a9d8 [0196.396] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate3.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate3.ico"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb14 | out: lpFileInformation=0x1cfeb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1 [0196.396] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a9d8 | out: hHeap=0x1f0000) returned 1 [0196.396] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a9d8 [0196.396] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a9d8 | out: hHeap=0x1f0000) returned 1 [0196.396] FindNextFileW (in: hFindFile=0x2213e0, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate4.ico", cAlternateFileName="")) returned 1 [0196.397] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0196.397] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2399d8 [0196.397] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217650 [0196.397] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2399d8 | out: hHeap=0x1f0000) returned 1 [0196.397] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218250 | out: hHeap=0x1f0000) returned 1 [0196.397] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0196.397] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate4.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate4.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x20c [0196.398] GetFileType (hFile=0x20c) returned 0x1 [0196.399] CloseHandle (hObject=0x20c) returned 1 [0196.399] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ae50 [0196.399] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate4.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate4.ico"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb04 | out: lpFileInformation=0x1cfeb04*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1 [0196.399] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ae50 | out: hHeap=0x1f0000) returned 1 [0196.399] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ad18 [0196.399] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate4.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate4.ico"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb14 | out: lpFileInformation=0x1cfeb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1 [0196.399] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ad18 | out: hHeap=0x1f0000) returned 1 [0196.399] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ae50 [0196.400] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ae50 | out: hHeap=0x1f0000) returned 1 [0196.400] FindNextFileW (in: hFindFile=0x2213e0, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate5.ico", cAlternateFileName="")) returned 1 [0196.400] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0196.400] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239718 [0196.400] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x2177d0 [0196.400] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239718 | out: hHeap=0x1f0000) returned 1 [0196.400] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217650 | out: hHeap=0x1f0000) returned 1 [0196.400] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0196.401] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate5.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate5.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x20c [0196.401] GetFileType (hFile=0x20c) returned 0x1 [0196.401] CloseHandle (hObject=0x20c) returned 1 [0196.401] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ad80 [0196.402] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate5.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate5.ico"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb04 | out: lpFileInformation=0x1cfeb04*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1 [0196.402] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ad80 | out: hHeap=0x1f0000) returned 1 [0196.402] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a9d8 [0196.402] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate5.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate5.ico"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb14 | out: lpFileInformation=0x1cfeb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1 [0196.402] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a9d8 | out: hHeap=0x1f0000) returned 1 [0196.402] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a8a0 [0196.402] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a8a0 | out: hHeap=0x1f0000) returned 1 [0196.402] FindNextFileW (in: hFindFile=0x2213e0, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate6.ico", cAlternateFileName="")) returned 1 [0196.402] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383c0 [0196.402] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239718 [0196.402] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217ed0 [0196.402] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239718 | out: hHeap=0x1f0000) returned 1 [0196.403] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2177d0 | out: hHeap=0x1f0000) returned 1 [0196.403] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383c0 | out: hHeap=0x1f0000) returned 1 [0196.403] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate6.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate6.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x20c [0196.403] GetFileType (hFile=0x20c) returned 0x1 [0196.404] CloseHandle (hObject=0x20c) returned 1 [0196.404] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ad18 [0196.404] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate6.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate6.ico"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb04 | out: lpFileInformation=0x1cfeb04*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1 [0196.404] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ad18 | out: hHeap=0x1f0000) returned 1 [0196.405] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ac48 [0196.405] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate6.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate6.ico"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb14 | out: lpFileInformation=0x1cfeb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1 [0196.405] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ac48 | out: hHeap=0x1f0000) returned 1 [0196.405] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22aaa8 [0196.405] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aaa8 | out: hHeap=0x1f0000) returned 1 [0196.405] FindNextFileW (in: hFindFile=0x2213e0, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate7.ico", cAlternateFileName="")) returned 1 [0196.405] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0196.405] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239a30 [0196.405] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x218450 [0196.405] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239a30 | out: hHeap=0x1f0000) returned 1 [0196.405] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217ed0 | out: hHeap=0x1f0000) returned 1 [0196.405] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0196.406] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate7.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate7.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x20c [0196.406] GetFileType (hFile=0x20c) returned 0x1 [0196.406] CloseHandle (hObject=0x20c) returned 1 [0196.407] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a9d8 [0196.407] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate7.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate7.ico"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb04 | out: lpFileInformation=0x1cfeb04*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1 [0196.407] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a9d8 | out: hHeap=0x1f0000) returned 1 [0196.407] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22acb0 [0196.407] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate7.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate7.ico"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb14 | out: lpFileInformation=0x1cfeb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1 [0196.407] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22acb0 | out: hHeap=0x1f0000) returned 1 [0196.407] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22aeb8 [0196.407] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aeb8 | out: hHeap=0x1f0000) returned 1 [0196.408] FindNextFileW (in: hFindFile=0x2213e0, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate8.ico", cAlternateFileName="")) returned 1 [0196.408] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238258 [0196.408] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239928 [0196.408] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217e50 [0196.408] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239928 | out: hHeap=0x1f0000) returned 1 [0196.408] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218450 | out: hHeap=0x1f0000) returned 1 [0196.408] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238258 | out: hHeap=0x1f0000) returned 1 [0196.409] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate8.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate8.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x20c [0196.409] GetFileType (hFile=0x20c) returned 0x1 [0196.410] CloseHandle (hObject=0x20c) returned 1 [0196.410] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22aaa8 [0196.410] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate8.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate8.ico"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb04 | out: lpFileInformation=0x1cfeb04*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1 [0196.411] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aaa8 | out: hHeap=0x1f0000) returned 1 [0196.411] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ac48 [0196.411] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate8.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate8.ico"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb14 | out: lpFileInformation=0x1cfeb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1 [0196.411] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ac48 | out: hHeap=0x1f0000) returned 1 [0196.411] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22abe0 [0196.411] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22abe0 | out: hHeap=0x1f0000) returned 1 [0196.411] FindNextFileW (in: hFindFile=0x2213e0, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Save.ico", cAlternateFileName="")) returned 1 [0196.411] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0196.411] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239610 [0196.411] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217850 [0196.411] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239610 | out: hHeap=0x1f0000) returned 1 [0196.412] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217e50 | out: hHeap=0x1f0000) returned 1 [0196.412] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0196.412] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Save.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\save.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x20c [0196.412] GetFileType (hFile=0x20c) returned 0x1 [0196.413] CloseHandle (hObject=0x20c) returned 1 [0196.413] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a9d8 [0196.413] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Save.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\save.ico"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb04 | out: lpFileInformation=0x1cfeb04*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e)) returned 1 [0196.413] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a9d8 | out: hHeap=0x1f0000) returned 1 [0196.414] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ae50 [0196.414] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Save.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\save.ico"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb14 | out: lpFileInformation=0x1cfeb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e)) returned 1 [0196.414] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ae50 | out: hHeap=0x1f0000) returned 1 [0196.414] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a9d8 [0196.414] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a9d8 | out: hHeap=0x1f0000) returned 1 [0196.414] FindNextFileW (in: hFindFile=0x2213e0, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x8f66, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.ico", cAlternateFileName="")) returned 1 [0196.414] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0196.414] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239610 [0196.414] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x218150 [0196.414] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239610 | out: hHeap=0x1f0000) returned 1 [0196.414] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217850 | out: hHeap=0x1f0000) returned 1 [0196.414] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0196.415] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Setup.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\setup.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x20c [0196.415] GetFileType (hFile=0x20c) returned 0x1 [0196.416] CloseHandle (hObject=0x20c) returned 1 [0196.416] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22acb0 [0196.416] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Setup.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\setup.ico"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb04 | out: lpFileInformation=0x1cfeb04*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x8f66)) returned 1 [0196.416] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22acb0 | out: hHeap=0x1f0000) returned 1 [0196.416] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22aaa8 [0196.416] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Setup.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\setup.ico"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb14 | out: lpFileInformation=0x1cfeb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x8f66)) returned 1 [0196.417] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aaa8 | out: hHeap=0x1f0000) returned 1 [0196.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22aaa8 [0196.417] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aaa8 | out: hHeap=0x1f0000) returned 1 [0196.417] FindNextFileW (in: hFindFile=0x2213e0, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5b5e7f00, ftCreationTime.dwHighDateTime=0x1ca927c, ftLastAccessTime.dwLowDateTime=0x5b5e7f00, ftLastAccessTime.dwHighDateTime=0x1ca927c, ftLastWriteTime.dwLowDateTime=0x5b5e7f00, ftLastWriteTime.dwHighDateTime=0x1ca927c, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0x0, cFileName="stop.ico", cAlternateFileName="")) returned 1 [0196.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0196.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239820 [0196.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x2181d0 [0196.417] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239820 | out: hHeap=0x1f0000) returned 1 [0196.417] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218150 | out: hHeap=0x1f0000) returned 1 [0196.417] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0196.418] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\stop.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\stop.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x20c [0196.418] GetFileType (hFile=0x20c) returned 0x1 [0196.419] CloseHandle (hObject=0x20c) returned 1 [0196.419] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a8a0 [0196.419] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\stop.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\stop.ico"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb04 | out: lpFileInformation=0x1cfeb04*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5b5e7f00, ftCreationTime.dwHighDateTime=0x1ca927c, ftLastAccessTime.dwLowDateTime=0x5b5e7f00, ftLastAccessTime.dwHighDateTime=0x1ca927c, ftLastWriteTime.dwLowDateTime=0x5b5e7f00, ftLastWriteTime.dwHighDateTime=0x1ca927c, nFileSizeHigh=0x0, nFileSizeLow=0x2796)) returned 1 [0196.419] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a8a0 | out: hHeap=0x1f0000) returned 1 [0196.419] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ac48 [0196.419] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\stop.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\stop.ico"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb14 | out: lpFileInformation=0x1cfeb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5b5e7f00, ftCreationTime.dwHighDateTime=0x1ca927c, ftLastAccessTime.dwLowDateTime=0x5b5e7f00, ftLastAccessTime.dwHighDateTime=0x1ca927c, ftLastWriteTime.dwLowDateTime=0x5b5e7f00, ftLastWriteTime.dwHighDateTime=0x1ca927c, nFileSizeHigh=0x0, nFileSizeLow=0x2796)) returned 1 [0196.419] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ac48 | out: hHeap=0x1f0000) returned 1 [0196.419] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ab78 [0196.420] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab78 | out: hHeap=0x1f0000) returned 1 [0196.420] FindNextFileW (in: hFindFile=0x2213e0, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SysReqMet.ico", cAlternateFileName="SYSREQ~1.ICO")) returned 1 [0196.420] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0196.420] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239928 [0196.420] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217b50 [0196.420] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239928 | out: hHeap=0x1f0000) returned 1 [0196.420] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2181d0 | out: hHeap=0x1f0000) returned 1 [0196.420] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0196.421] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\SysReqMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqmet.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x20c [0196.421] GetFileType (hFile=0x20c) returned 0x1 [0196.421] CloseHandle (hObject=0x20c) returned 1 [0196.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a8a0 [0196.422] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\SysReqMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqmet.ico"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb04 | out: lpFileInformation=0x1cfeb04*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e)) returned 1 [0196.422] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a8a0 | out: hHeap=0x1f0000) returned 1 [0196.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ac48 [0196.422] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\SysReqMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqmet.ico"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb14 | out: lpFileInformation=0x1cfeb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e)) returned 1 [0196.422] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ac48 | out: hHeap=0x1f0000) returned 1 [0196.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22aeb8 [0196.422] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aeb8 | out: hHeap=0x1f0000) returned 1 [0196.422] FindNextFileW (in: hFindFile=0x2213e0, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SysReqNotMet.ico", cAlternateFileName="SYSREQ~2.ICO")) returned 1 [0196.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d280 [0196.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239400 [0196.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x218050 [0196.423] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239400 | out: hHeap=0x1f0000) returned 1 [0196.423] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217b50 | out: hHeap=0x1f0000) returned 1 [0196.423] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d280 | out: hHeap=0x1f0000) returned 1 [0196.423] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqnotmet.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x20c [0196.423] GetFileType (hFile=0x20c) returned 0x1 [0196.424] CloseHandle (hObject=0x20c) returned 1 [0196.424] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x215060 [0196.424] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqnotmet.ico"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb04 | out: lpFileInformation=0x1cfeb04*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e)) returned 1 [0196.424] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215060 | out: hHeap=0x1f0000) returned 1 [0196.424] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x214ef8 [0196.424] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqnotmet.ico"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb14 | out: lpFileInformation=0x1cfeb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e)) returned 1 [0196.424] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214ef8 | out: hHeap=0x1f0000) returned 1 [0196.424] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x214e80 [0196.424] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214e80 | out: hHeap=0x1f0000) returned 1 [0196.424] FindNextFileW (in: hFindFile=0x2213e0, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0x0, cFileName="warn.ico", cAlternateFileName="")) returned 1 [0196.424] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0196.424] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239560 [0196.424] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217cd0 [0196.424] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239560 | out: hHeap=0x1f0000) returned 1 [0196.425] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218050 | out: hHeap=0x1f0000) returned 1 [0196.425] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0196.425] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\warn.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\warn.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x20c [0196.425] GetFileType (hFile=0x20c) returned 0x1 [0196.425] CloseHandle (hObject=0x20c) returned 1 [0196.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ae50 [0196.689] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\warn.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\warn.ico"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb04 | out: lpFileInformation=0x1cfeb04*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x2796)) returned 1 [0196.689] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ae50 | out: hHeap=0x1f0000) returned 1 [0196.689] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22abe0 [0196.689] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\warn.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\warn.ico"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb14 | out: lpFileInformation=0x1cfeb14*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x2796)) returned 1 [0196.690] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22abe0 | out: hHeap=0x1f0000) returned 1 [0196.690] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a838 [0196.690] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a838 | out: hHeap=0x1f0000) returned 1 [0196.690] FindNextFileW (in: hFindFile=0x2213e0, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0x0, cFileName="warn.ico", cAlternateFileName="")) returned 0 [0196.690] FindClose (in: hFindFile=0x2213e0 | out: hFindFile=0x2213e0) returned 1 [0196.690] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217cd0 | out: hHeap=0x1f0000) returned 1 [0196.690] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22de98 | out: hHeap=0x1f0000) returned 1 [0196.690] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b8c8 | out: hHeap=0x1f0000) returned 1 [0196.690] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215d80 | out: hHeap=0x1f0000) returned 1 [0196.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a248 | out: hHeap=0x1f0000) returned 1 [0196.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228758 | out: hHeap=0x1f0000) returned 1 [0196.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2289e0 | out: hHeap=0x1f0000) returned 1 [0196.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2293b8 | out: hHeap=0x1f0000) returned 1 [0196.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229010 | out: hHeap=0x1f0000) returned 1 [0196.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228d88 | out: hHeap=0x1f0000) returned 1 [0196.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229298 | out: hHeap=0x1f0000) returned 1 [0196.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228dd0 | out: hHeap=0x1f0000) returned 1 [0196.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229130 | out: hHeap=0x1f0000) returned 1 [0196.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228e18 | out: hHeap=0x1f0000) returned 1 [0196.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2291c0 | out: hHeap=0x1f0000) returned 1 [0196.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2292e0 | out: hHeap=0x1f0000) returned 1 [0196.692] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228e60 | out: hHeap=0x1f0000) returned 1 [0196.692] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228ea8 | out: hHeap=0x1f0000) returned 1 [0196.692] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228ef0 | out: hHeap=0x1f0000) returned 1 [0196.692] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228f38 | out: hHeap=0x1f0000) returned 1 [0196.692] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229058 | out: hHeap=0x1f0000) returned 1 [0196.692] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214008 | out: hHeap=0x1f0000) returned 1 [0196.692] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213e58 | out: hHeap=0x1f0000) returned 1 [0196.692] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213af8 | out: hHeap=0x1f0000) returned 1 [0196.692] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213c60 | out: hHeap=0x1f0000) returned 1 [0196.692] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213d80 | out: hHeap=0x1f0000) returned 1 [0196.692] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213990 | out: hHeap=0x1f0000) returned 1 [0196.692] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234080 | out: hHeap=0x1f0000) returned 1 [0196.692] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233fa8 | out: hHeap=0x1f0000) returned 1 [0196.693] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233ff0 | out: hHeap=0x1f0000) returned 1 [0196.693] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234230 | out: hHeap=0x1f0000) returned 1 [0196.693] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2343e0 | out: hHeap=0x1f0000) returned 1 [0196.693] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233db0 | out: hHeap=0x1f0000) returned 1 [0196.693] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230ef0 | out: hHeap=0x1f0000) returned 1 [0196.693] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227058 | out: hHeap=0x1f0000) returned 1 [0196.693] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b368 | out: hHeap=0x1f0000) returned 1 [0196.693] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2285f0 | out: hHeap=0x1f0000) returned 1 [0196.693] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216200 [0196.693] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0196.693] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22ee88 [0196.693] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380c8 [0196.694] FindFirstFileW (in: lpFileName="C:\\\\Boot\\*", lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9d311c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef9d311c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x214150 [0196.695] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0196.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380c8 | out: hHeap=0x1f0000) returned 1 [0196.695] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0196.695] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9d311c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef9d311c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0196.700] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0196.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0196.701] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0196.701] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0196.701] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xac3efa99, ftLastAccessTime.dwHighDateTime=0x1d4d5d3, ftLastWriteTime.dwLowDateTime=0xac3efa99, ftLastWriteTime.dwHighDateTime=0x1d4d5d3, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD", cAlternateFileName="")) returned 1 [0196.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0196.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0196.702] CreateFileW (lpFileName="C:\\\\Boot\\BCD" (normalized: "c:\\boot\\bcd"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0196.703] GetLastError () returned 0x20 [0196.703] GetLastError () returned 0x20 [0196.703] SetLastError (dwErrCode=0x20) [0196.703] GetLastError () returned 0x20 [0196.703] SetLastError (dwErrCode=0x20) [0196.703] GetLastError () returned 0x20 [0196.703] SetLastError (dwErrCode=0x20) [0196.703] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG", cAlternateFileName="")) returned 1 [0196.703] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0196.703] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228230 [0196.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0196.704] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0196.704] CreateFileW (lpFileName="C:\\\\Boot\\BCD.LOG" (normalized: "c:\\boot\\bcd.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0196.704] GetLastError () returned 0x20 [0196.704] GetLastError () returned 0x20 [0196.704] SetLastError (dwErrCode=0x20) [0196.704] GetLastError () returned 0x20 [0196.705] SetLastError (dwErrCode=0x20) [0196.705] GetLastError () returned 0x20 [0196.705] SetLastError (dwErrCode=0x20) [0196.705] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG1", cAlternateFileName="BCD~1.LOG")) returned 1 [0196.705] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380f0 [0196.705] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0196.705] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227fc8 [0196.705] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0196.705] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228230 | out: hHeap=0x1f0000) returned 1 [0196.705] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380f0 | out: hHeap=0x1f0000) returned 1 [0196.706] CreateFileW (lpFileName="C:\\\\Boot\\BCD.LOG1" (normalized: "c:\\boot\\bcd.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0196.706] GetFileType (hFile=0x1f8) returned 0x1 [0196.706] CloseHandle (hObject=0x1f8) returned 1 [0196.707] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228150 [0196.707] GetFileAttributesExW (in: lpFileName="C:\\\\Boot\\BCD.LOG1" (normalized: "c:\\boot\\bcd.log1"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0196.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228150 | out: hHeap=0x1f0000) returned 1 [0196.707] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228150 [0196.707] GetFileAttributesExW (in: lpFileName="C:\\\\Boot\\BCD.LOG1" (normalized: "c:\\boot\\bcd.log1"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0196.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228150 | out: hHeap=0x1f0000) returned 1 [0196.707] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228150 [0196.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228150 | out: hHeap=0x1f0000) returned 1 [0196.707] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG2", cAlternateFileName="BCD~2.LOG")) returned 1 [0196.707] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0196.707] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0196.707] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228150 [0196.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0196.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227fc8 | out: hHeap=0x1f0000) returned 1 [0196.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0196.708] CreateFileW (lpFileName="C:\\\\Boot\\BCD.LOG2" (normalized: "c:\\boot\\bcd.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0196.708] GetFileType (hFile=0x1f8) returned 0x1 [0196.708] CloseHandle (hObject=0x1f8) returned 1 [0196.709] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228230 [0196.709] GetFileAttributesExW (in: lpFileName="C:\\\\Boot\\BCD.LOG2" (normalized: "c:\\boot\\bcd.log2"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0196.709] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228230 | out: hHeap=0x1f0000) returned 1 [0196.709] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227fc8 [0196.709] GetFileAttributesExW (in: lpFileName="C:\\\\Boot\\BCD.LOG2" (normalized: "c:\\boot\\bcd.log2"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0196.709] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227fc8 | out: hHeap=0x1f0000) returned 1 [0196.709] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227fc8 [0196.709] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227fc8 | out: hHeap=0x1f0000) returned 1 [0196.709] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg-BG", cAlternateFileName="")) returned 1 [0196.709] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238258 [0196.709] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228150 | out: hHeap=0x1f0000) returned 1 [0196.709] lstrcmpW (lpString1="bg-BG", lpString2=".") returned 1 [0196.709] lstrcmpW (lpString1="bg-BG", lpString2="..") returned 1 [0196.709] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x205130 [0196.709] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0196.710] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef4e6d79, ftCreationTime.dwHighDateTime=0x1d3273d, ftLastAccessTime.dwLowDateTime=0xef4e6d79, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x175a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootspaces.dll", cAlternateFileName="BOOTSP~1.DLL")) returned 1 [0196.710] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0196.710] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0196.710] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228230 [0196.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0196.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238258 | out: hHeap=0x1f0000) returned 1 [0196.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0196.710] CreateFileW (lpFileName="C:\\\\Boot\\bootspaces.dll" (normalized: "c:\\boot\\bootspaces.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0196.713] GetLastError () returned 0x5 [0196.713] GetLastError () returned 0x5 [0196.713] SetLastError (dwErrCode=0x5) [0196.713] GetLastError () returned 0x5 [0196.713] SetLastError (dwErrCode=0x5) [0196.713] GetLastError () returned 0x5 [0196.713] SetLastError (dwErrCode=0x5) [0196.713] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xef703e94, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTSTAT.DAT", cAlternateFileName="")) returned 1 [0196.714] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383c0 [0196.714] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0196.714] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228150 [0196.714] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0196.714] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228230 | out: hHeap=0x1f0000) returned 1 [0196.714] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383c0 | out: hHeap=0x1f0000) returned 1 [0196.714] CreateFileW (lpFileName="C:\\\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0196.716] GetFileType (hFile=0x1f8) returned 0x1 [0196.717] CloseHandle (hObject=0x1f8) returned 1 [0196.717] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227fc8 [0196.717] GetFileAttributesExW (in: lpFileName="C:\\\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xef703e94, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1 [0196.717] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227fc8 | out: hHeap=0x1f0000) returned 1 [0196.717] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227fc8 [0196.717] GetFileAttributesExW (in: lpFileName="C:\\\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xef703e94, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1 [0196.717] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227fc8 | out: hHeap=0x1f0000) returned 1 [0196.717] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227fc8 [0196.718] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227fc8 | out: hHeap=0x1f0000) returned 1 [0196.718] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef4fcd12, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x185a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootvhd.dll", cAlternateFileName="")) returned 1 [0196.718] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238460 [0196.718] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238488 [0196.718] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227fc8 [0196.718] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238488 | out: hHeap=0x1f0000) returned 1 [0196.718] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228150 | out: hHeap=0x1f0000) returned 1 [0196.718] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238460 | out: hHeap=0x1f0000) returned 1 [0196.718] CreateFileW (lpFileName="C:\\\\Boot\\bootvhd.dll" (normalized: "c:\\boot\\bootvhd.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0196.719] GetLastError () returned 0x5 [0196.719] GetLastError () returned 0x5 [0196.719] SetLastError (dwErrCode=0x5) [0196.719] GetLastError () returned 0x5 [0196.720] SetLastError (dwErrCode=0x5) [0196.720] GetLastError () returned 0x5 [0196.720] SetLastError (dwErrCode=0x5) [0196.720] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef511a4c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-CZ", cAlternateFileName="")) returned 1 [0196.720] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0196.720] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227fc8 | out: hHeap=0x1f0000) returned 1 [0196.720] lstrcmpW (lpString1="cs-CZ", lpString2=".") returned 1 [0196.720] lstrcmpW (lpString1="cs-CZ", lpString2="..") returned 1 [0196.720] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227fc8 [0196.720] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0196.720] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205130 | out: hHeap=0x1f0000) returned 1 [0196.720] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0008dbb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5252b3, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-DK", cAlternateFileName="")) returned 1 [0196.720] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0196.720] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0196.721] lstrcmpW (lpString1="da-DK", lpString2=".") returned 1 [0196.721] lstrcmpW (lpString1="da-DK", lpString2="..") returned 1 [0196.721] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x48) returned 0x2262d8 [0196.721] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0196.721] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227fc8 | out: hHeap=0x1f0000) returned 1 [0196.721] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0009692, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef538bee, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-DE", cAlternateFileName="")) returned 1 [0196.721] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0196.721] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0196.721] lstrcmpW (lpString1="de-DE", lpString2=".") returned 1 [0196.721] lstrcmpW (lpString1="de-DE", lpString2="..") returned 1 [0196.721] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a8a0 [0196.721] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0196.721] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2262d8 | out: hHeap=0x1f0000) returned 1 [0196.721] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef555ff8, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el-GR", cAlternateFileName="")) returned 1 [0196.721] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0196.721] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0196.722] lstrcmpW (lpString1="el-GR", lpString2=".") returned 1 [0196.722] lstrcmpW (lpString1="el-GR", lpString2="..") returned 1 [0196.722] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0196.722] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380c8 [0196.722] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a8a0 | out: hHeap=0x1f0000) returned 1 [0196.722] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc482dc87, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-GB", cAlternateFileName="")) returned 1 [0196.722] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238258 [0196.722] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0196.723] lstrcmpW (lpString1="en-GB", lpString2=".") returned 1 [0196.723] lstrcmpW (lpString1="en-GB", lpString2="..") returned 1 [0196.723] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0196.723] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef57d0f5, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0196.723] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0196.723] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238258 | out: hHeap=0x1f0000) returned 1 [0196.723] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0196.723] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0196.723] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd8) returned 0x2351d8 [0196.723] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0196.723] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0196.723] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000b9ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef586d37, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-ES", cAlternateFileName="")) returned 1 [0196.724] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0196.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0196.724] lstrcmpW (lpString1="es-ES", lpString2=".") returned 1 [0196.724] lstrcmpW (lpString1="es-ES", lpString2="..") returned 1 [0196.724] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238348 [0196.724] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000c12e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc4853f40, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-MX", cAlternateFileName="")) returned 1 [0196.724] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0196.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0196.724] lstrcmpW (lpString1="es-MX", lpString2=".") returned 1 [0196.724] lstrcmpW (lpString1="es-MX", lpString2="..") returned 1 [0196.724] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380f0 [0196.724] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc487a0b9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et-EE", cAlternateFileName="")) returned 1 [0196.724] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238050 [0196.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0196.725] lstrcmpW (lpString1="et-EE", lpString2=".") returned 1 [0196.725] lstrcmpW (lpString1="et-EE", lpString2="..") returned 1 [0196.725] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x138) returned 0x260188 [0196.725] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0196.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2351d8 | out: hHeap=0x1f0000) returned 1 [0196.725] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000cf3a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef59a5b1, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-FI", cAlternateFileName="")) returned 1 [0196.725] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238488 [0196.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238050 | out: hHeap=0x1f0000) returned 1 [0196.725] lstrcmpW (lpString1="fi-FI", lpString2=".") returned 1 [0196.725] lstrcmpW (lpString1="fi-FI", lpString2="..") returned 1 [0196.725] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0196.726] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0109451, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef999ae4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 1 [0196.726] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0196.726] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238488 | out: hHeap=0x1f0000) returned 1 [0196.726] lstrcmpW (lpString1="Fonts", lpString2=".") returned 1 [0196.726] lstrcmpW (lpString1="Fonts", lpString2="..") returned 1 [0196.726] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0196.726] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-CA", cAlternateFileName="")) returned 1 [0196.726] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238258 [0196.726] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0196.726] lstrcmpW (lpString1="fr-CA", lpString2=".") returned 1 [0196.726] lstrcmpW (lpString1="fr-CA", lpString2="..") returned 1 [0196.726] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0196.727] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010bc12, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ade2b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-FR", cAlternateFileName="")) returned 1 [0196.727] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383c0 [0196.727] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238258 | out: hHeap=0x1f0000) returned 1 [0196.727] lstrcmpW (lpString1="fr-FR", lpString2=".") returned 1 [0196.727] lstrcmpW (lpString1="fr-FR", lpString2="..") returned 1 [0196.727] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c8) returned 0x230ef0 [0196.727] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238438 [0196.727] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260188 | out: hHeap=0x1f0000) returned 1 [0196.727] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-HR", cAlternateFileName="")) returned 1 [0196.727] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0196.727] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383c0 | out: hHeap=0x1f0000) returned 1 [0196.727] lstrcmpW (lpString1="hr-HR", lpString2=".") returned 1 [0196.728] lstrcmpW (lpString1="hr-HR", lpString2="..") returned 1 [0196.728] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238460 [0196.728] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010c5ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5c171b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-HU", cAlternateFileName="")) returned 1 [0196.728] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383c0 [0196.728] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0196.728] lstrcmpW (lpString1="hu-HU", lpString2=".") returned 1 [0196.728] lstrcmpW (lpString1="hu-HU", lpString2="..") returned 1 [0196.728] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0196.728] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010ccad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5d8ab4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-IT", cAlternateFileName="")) returned 1 [0196.728] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238488 [0196.728] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383c0 | out: hHeap=0x1f0000) returned 1 [0196.728] lstrcmpW (lpString1="it-IT", lpString2=".") returned 1 [0196.728] lstrcmpW (lpString1="it-IT", lpString2="..") returned 1 [0196.728] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0196.729] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010d0c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ed6c6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-JP", cAlternateFileName="")) returned 1 [0196.729] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0196.729] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238488 | out: hHeap=0x1f0000) returned 1 [0196.729] lstrcmpW (lpString1="ja-JP", lpString2=".") returned 1 [0196.729] lstrcmpW (lpString1="ja-JP", lpString2="..") returned 1 [0196.729] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238258 [0196.729] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef5fc210, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-KR", cAlternateFileName="")) returned 1 [0196.729] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383c0 [0196.729] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0196.729] lstrcmpW (lpString1="ko-KR", lpString2=".") returned 1 [0196.729] lstrcmpW (lpString1="ko-KR", lpString2="..") returned 1 [0196.729] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238488 [0196.729] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt-LT", cAlternateFileName="")) returned 1 [0196.729] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238028 [0196.730] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383c0 | out: hHeap=0x1f0000) returned 1 [0196.730] lstrcmpW (lpString1="lt-LT", lpString2=".") returned 1 [0196.730] lstrcmpW (lpString1="lt-LT", lpString2="..") returned 1 [0196.730] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2a0) returned 0x225048 [0196.730] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0196.730] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230ef0 | out: hHeap=0x1f0000) returned 1 [0196.730] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv-LV", cAlternateFileName="")) returned 1 [0196.730] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238050 [0196.730] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238028 | out: hHeap=0x1f0000) returned 1 [0196.730] lstrcmpW (lpString1="lv-LV", lpString2=".") returned 1 [0196.730] lstrcmpW (lpString1="lv-LV", lpString2="..") returned 1 [0196.730] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0196.730] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6196d8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfbcf473f, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0xc63a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe", cAlternateFileName="")) returned 1 [0196.730] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0196.730] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0196.731] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227fc8 [0196.731] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0196.731] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238050 | out: hHeap=0x1f0000) returned 1 [0196.731] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0196.731] CreateFileW (lpFileName="C:\\\\Boot\\memtest.exe" (normalized: "c:\\boot\\memtest.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0196.983] GetLastError () returned 0x5 [0196.984] GetLastError () returned 0x5 [0196.984] SetLastError (dwErrCode=0x5) [0196.984] GetLastError () returned 0x5 [0196.984] SetLastError (dwErrCode=0x5) [0196.984] GetLastError () returned 0x5 [0196.984] SetLastError (dwErrCode=0x5) [0196.984] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e138, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef62cf52, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-NO", cAlternateFileName="")) returned 1 [0196.984] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2386b8 [0196.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227fc8 | out: hHeap=0x1f0000) returned 1 [0196.985] lstrcmpW (lpString1="nb-NO", lpString2=".") returned 1 [0196.985] lstrcmpW (lpString1="nb-NO", lpString2="..") returned 1 [0196.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238500 [0196.985] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e4fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6407cf, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-NL", cAlternateFileName="")) returned 1 [0196.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238780 [0196.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2386b8 | out: hHeap=0x1f0000) returned 1 [0196.985] lstrcmpW (lpString1="nl-NL", lpString2=".") returned 1 [0196.985] lstrcmpW (lpString1="nl-NL", lpString2="..") returned 1 [0196.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385c8 [0196.985] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef65403a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-PL", cAlternateFileName="")) returned 1 [0196.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238550 [0196.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238780 | out: hHeap=0x1f0000) returned 1 [0196.986] lstrcmpW (lpString1="pl-PL", lpString2=".") returned 1 [0196.986] lstrcmpW (lpString1="pl-PL", lpString2="..") returned 1 [0196.986] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238780 [0196.986] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6678d6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6678d6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-BR", cAlternateFileName="")) returned 1 [0196.986] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238618 [0196.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238550 | out: hHeap=0x1f0000) returned 1 [0196.986] lstrcmpW (lpString1="pt-BR", lpString2=".") returned 1 [0196.986] lstrcmpW (lpString1="pt-BR", lpString2="..") returned 1 [0196.986] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384d8 [0196.986] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f167, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6714dc, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-PT", cAlternateFileName="")) returned 1 [0196.986] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385f0 [0196.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238618 | out: hHeap=0x1f0000) returned 1 [0196.986] lstrcmpW (lpString1="pt-PT", lpString2=".") returned 1 [0196.987] lstrcmpW (lpString1="pt-PT", lpString2="..") returned 1 [0196.987] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238618 [0196.987] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f640, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef684d85, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="qps-ploc", cAlternateFileName="")) returned 1 [0196.987] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238668 [0196.987] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238528 [0196.987] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227fc8 [0196.987] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238528 | out: hHeap=0x1f0000) returned 1 [0196.987] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385f0 | out: hHeap=0x1f0000) returned 1 [0196.987] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238668 | out: hHeap=0x1f0000) returned 1 [0196.987] lstrcmpW (lpString1="qps-ploc", lpString2=".") returned 1 [0196.987] lstrcmpW (lpString1="qps-ploc", lpString2="..") returned 1 [0196.988] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228150 [0196.988] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ab61e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9abff9, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resources", cAlternateFileName="RESOUR~1")) returned 1 [0196.988] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238528 [0196.988] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238730 [0196.988] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282a0 [0196.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238730 | out: hHeap=0x1f0000) returned 1 [0196.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227fc8 | out: hHeap=0x1f0000) returned 1 [0196.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238528 | out: hHeap=0x1f0000) returned 1 [0196.988] lstrcmpW (lpString1="Resources", lpString2=".") returned 1 [0196.989] lstrcmpW (lpString1="Resources", lpString2="..") returned 1 [0196.989] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227fc8 [0196.989] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-RO", cAlternateFileName="")) returned 1 [0196.989] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238730 [0196.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0196.989] lstrcmpW (lpString1="ro-RO", lpString2=".") returned 1 [0196.989] lstrcmpW (lpString1="ro-RO", lpString2="..") returned 1 [0196.989] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3f0) returned 0x2359c0 [0196.989] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238528 [0196.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225048 | out: hHeap=0x1f0000) returned 1 [0196.990] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef698608, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-RU", cAlternateFileName="")) returned 1 [0196.990] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238708 [0196.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238730 | out: hHeap=0x1f0000) returned 1 [0196.990] lstrcmpW (lpString1="ru-RU", lpString2=".") returned 1 [0196.990] lstrcmpW (lpString1="ru-RU", lpString2="..") returned 1 [0196.990] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238668 [0196.990] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-SK", cAlternateFileName="")) returned 1 [0196.990] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238578 [0196.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238708 | out: hHeap=0x1f0000) returned 1 [0196.991] lstrcmpW (lpString1="sk-SK", lpString2=".") returned 1 [0196.991] lstrcmpW (lpString1="sk-SK", lpString2="..") returned 1 [0196.991] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2386b8 [0196.991] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-SI", cAlternateFileName="")) returned 1 [0196.991] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385f0 [0196.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238578 | out: hHeap=0x1f0000) returned 1 [0196.991] lstrcmpW (lpString1="sl-SI", lpString2=".") returned 1 [0196.991] lstrcmpW (lpString1="sl-SI", lpString2="..") returned 1 [0196.991] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238550 [0196.991] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0x5168548b, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-Latn-CS", cAlternateFileName="SR-LAT~1")) returned 1 [0196.991] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238730 [0196.992] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2386e0 [0196.992] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282d8 [0196.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2386e0 | out: hHeap=0x1f0000) returned 1 [0196.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385f0 | out: hHeap=0x1f0000) returned 1 [0196.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238730 | out: hHeap=0x1f0000) returned 1 [0196.992] lstrcmpW (lpString1="sr-Latn-CS", lpString2=".") returned 1 [0196.992] lstrcmpW (lpString1="sr-Latn-CS", lpString2="..") returned 1 [0196.992] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228310 [0196.992] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-Latn-RS", cAlternateFileName="SR-LAT~2")) returned 1 [0196.992] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2386e0 [0196.992] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238730 [0196.992] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282a0 [0196.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238730 | out: hHeap=0x1f0000) returned 1 [0196.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282d8 | out: hHeap=0x1f0000) returned 1 [0196.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2386e0 | out: hHeap=0x1f0000) returned 1 [0196.993] lstrcmpW (lpString1="sr-Latn-RS", lpString2=".") returned 1 [0196.993] lstrcmpW (lpString1="sr-Latn-RS", lpString2="..") returned 1 [0196.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282d8 [0196.993] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01adf43, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6a2250, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-SE", cAlternateFileName="")) returned 1 [0196.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238578 [0196.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0196.993] lstrcmpW (lpString1="sv-SE", lpString2=".") returned 1 [0196.993] lstrcmpW (lpString1="sv-SE", lpString2="..") returned 1 [0196.994] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385a0 [0196.994] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206504, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6b5aca, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-TR", cAlternateFileName="")) returned 1 [0196.994] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385f0 [0196.994] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238578 | out: hHeap=0x1f0000) returned 1 [0196.994] lstrcmpW (lpString1="tr-TR", lpString2=".") returned 1 [0196.994] lstrcmpW (lpString1="tr-TR", lpString2="..") returned 1 [0196.994] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238640 [0196.994] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206a30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk-UA", cAlternateFileName="")) returned 1 [0196.994] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238578 [0196.994] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385f0 | out: hHeap=0x1f0000) returned 1 [0196.994] lstrcmpW (lpString1="uk-UA", lpString2=".") returned 1 [0196.994] lstrcmpW (lpString1="uk-UA", lpString2="..") returned 1 [0196.995] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2386e0 [0196.995] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef6c9427, ftCreationTime.dwHighDateTime=0x1d3273d, ftLastAccessTime.dwLowDateTime=0xef6c9427, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x1236, dwReserved0=0x0, dwReserved1=0x0, cFileName="updaterevokesipolicy.p7b", cAlternateFileName="UPDATE~1.P7B")) returned 1 [0196.995] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2160e0 [0196.995] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238708 [0196.995] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2397c8 [0196.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238708 | out: hHeap=0x1f0000) returned 1 [0196.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238578 | out: hHeap=0x1f0000) returned 1 [0196.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2160e0 | out: hHeap=0x1f0000) returned 1 [0196.995] CreateFileW (lpFileName="C:\\\\Boot\\updaterevokesipolicy.p7b" (normalized: "c:\\boot\\updaterevokesipolicy.p7b"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0196.997] GetLastError () returned 0x5 [0196.997] GetLastError () returned 0x5 [0196.997] SetLastError (dwErrCode=0x5) [0196.997] GetLastError () returned 0x5 [0196.997] SetLastError (dwErrCode=0x5) [0196.997] GetLastError () returned 0x5 [0196.997] SetLastError (dwErrCode=0x5) [0196.997] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207100, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6d7e9a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CN", cAlternateFileName="")) returned 1 [0196.998] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238708 [0196.998] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2397c8 | out: hHeap=0x1f0000) returned 1 [0196.998] lstrcmpW (lpString1="zh-CN", lpString2=".") returned 1 [0196.998] lstrcmpW (lpString1="zh-CN", lpString2="..") returned 1 [0196.998] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385f0 [0196.998] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207675, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x518ea25e, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-HK", cAlternateFileName="")) returned 1 [0196.998] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238578 [0196.998] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238708 | out: hHeap=0x1f0000) returned 1 [0196.998] lstrcmpW (lpString1="zh-HK", lpString2=".") returned 1 [0196.998] lstrcmpW (lpString1="zh-HK", lpString2="..") returned 1 [0196.998] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238708 [0196.998] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 1 [0196.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238730 [0196.999] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238578 | out: hHeap=0x1f0000) returned 1 [0196.999] lstrcmpW (lpString1="zh-TW", lpString2=".") returned 1 [0196.999] lstrcmpW (lpString1="zh-TW", lpString2="..") returned 1 [0196.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238578 [0196.999] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 0 [0196.999] FindClose (in: hFindFile=0x214150 | out: hFindFile=0x214150) returned 1 [0196.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216008 [0196.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b3e0 [0196.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e690 [0196.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282a0 [0196.999] FindFirstFileW (in: lpFileName="C:\\\\Boot\\bg-BG\\*", lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ebc0 [0197.000] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b458 [0197.000] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1ff058 [0197.000] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b458 | out: hHeap=0x1f0000) returned 1 [0197.000] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0197.000] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0197.000] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0197.000] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b368 [0197.000] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1feed0 [0197.000] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b368 | out: hHeap=0x1f0000) returned 1 [0197.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1ff058 | out: hHeap=0x1f0000) returned 1 [0197.001] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0197.001] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0197.001] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210bba74, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0197.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b5c0 [0197.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b458 [0197.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215d80 [0197.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b458 | out: hHeap=0x1f0000) returned 1 [0197.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1feed0 | out: hHeap=0x1f0000) returned 1 [0197.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b5c0 | out: hHeap=0x1f0000) returned 1 [0197.001] CreateFileW (lpFileName="C:\\\\Boot\\bg-BG\\bootmgr.exe.mui" (normalized: "c:\\boot\\bg-bg\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0197.002] GetLastError () returned 0x5 [0197.002] GetLastError () returned 0x5 [0197.002] SetLastError (dwErrCode=0x5) [0197.002] GetLastError () returned 0x5 [0197.002] SetLastError (dwErrCode=0x5) [0197.002] GetLastError () returned 0x5 [0197.002] SetLastError (dwErrCode=0x5) [0197.002] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210bba74, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0197.002] FindClose (in: hFindFile=0x24ebc0 | out: hFindFile=0x24ebc0) returned 1 [0197.003] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215d80 | out: hHeap=0x1f0000) returned 1 [0197.003] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e690 | out: hHeap=0x1f0000) returned 1 [0197.003] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b3e0 | out: hHeap=0x1f0000) returned 1 [0197.003] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216008 | out: hHeap=0x1f0000) returned 1 [0197.003] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216098 [0197.003] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b5c0 [0197.003] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e828 [0197.003] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0197.003] FindFirstFileW (in: lpFileName="C:\\\\Boot\\cs-CZ\\*", lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef511a4c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24eac0 [0197.003] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b5e8 [0197.003] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1feed0 [0197.004] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b5e8 | out: hHeap=0x1f0000) returned 1 [0197.010] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0197.010] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0197.011] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef511a4c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0197.011] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b5e8 [0197.011] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0197.011] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b5e8 | out: hHeap=0x1f0000) returned 1 [0197.011] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1feed0 | out: hHeap=0x1f0000) returned 1 [0197.011] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0197.011] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0197.011] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47e189c, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2109581d, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0197.011] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b7c8 [0197.011] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b458 [0197.011] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215b40 [0197.011] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b458 | out: hHeap=0x1f0000) returned 1 [0197.011] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0197.011] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b7c8 | out: hHeap=0x1f0000) returned 1 [0197.012] CreateFileW (lpFileName="C:\\\\Boot\\cs-CZ\\bootmgr.exe.mui" (normalized: "c:\\boot\\cs-cz\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0197.012] GetLastError () returned 0x5 [0197.012] GetLastError () returned 0x5 [0197.012] SetLastError (dwErrCode=0x5) [0197.012] GetLastError () returned 0x5 [0197.012] SetLastError (dwErrCode=0x5) [0197.012] GetLastError () returned 0x5 [0197.013] SetLastError (dwErrCode=0x5) [0197.013] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f1d4cf, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0197.013] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b5e8 [0197.013] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b638 [0197.013] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2160e0 [0197.013] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b638 | out: hHeap=0x1f0000) returned 1 [0197.013] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215b40 | out: hHeap=0x1f0000) returned 1 [0197.013] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b5e8 | out: hHeap=0x1f0000) returned 1 [0197.013] CreateFileW (lpFileName="C:\\\\Boot\\cs-CZ\\memtest.exe.mui" (normalized: "c:\\boot\\cs-cz\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0197.014] GetLastError () returned 0x5 [0197.014] GetLastError () returned 0x5 [0197.014] SetLastError (dwErrCode=0x5) [0197.014] GetLastError () returned 0x5 [0197.014] SetLastError (dwErrCode=0x5) [0197.014] GetLastError () returned 0x5 [0197.014] SetLastError (dwErrCode=0x5) [0197.014] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f1d4cf, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0197.014] FindClose (in: hFindFile=0x24eac0 | out: hFindFile=0x24eac0) returned 1 [0197.015] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2160e0 | out: hHeap=0x1f0000) returned 1 [0197.015] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e828 | out: hHeap=0x1f0000) returned 1 [0197.015] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b5c0 | out: hHeap=0x1f0000) returned 1 [0197.015] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216098 | out: hHeap=0x1f0000) returned 1 [0197.015] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216008 [0197.015] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b5e8 [0197.015] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22eb58 [0197.015] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fefe8 [0197.015] FindFirstFileW (in: lpFileName="C:\\\\Boot\\da-DK\\*", lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0008dbb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5252b3, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ea00 [0197.016] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b750 [0197.016] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1feed0 [0197.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b750 | out: hHeap=0x1f0000) returned 1 [0197.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fefe8 | out: hHeap=0x1f0000) returned 1 [0197.017] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0197.017] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0008dbb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5252b3, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0197.017] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b458 [0197.017] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1ff058 [0197.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b458 | out: hHeap=0x1f0000) returned 1 [0197.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1feed0 | out: hHeap=0x1f0000) returned 1 [0197.017] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0197.017] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0197.017] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47e189c, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12760, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0197.017] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b750 [0197.017] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b3e0 [0197.018] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216098 [0197.018] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b3e0 | out: hHeap=0x1f0000) returned 1 [0197.018] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1ff058 | out: hHeap=0x1f0000) returned 1 [0197.018] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b750 | out: hHeap=0x1f0000) returned 1 [0197.019] CreateFileW (lpFileName="C:\\\\Boot\\da-DK\\bootmgr.exe.mui" (normalized: "c:\\boot\\da-dk\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0197.019] GetLastError () returned 0x5 [0197.019] GetLastError () returned 0x5 [0197.019] SetLastError (dwErrCode=0x5) [0197.022] GetLastError () returned 0x5 [0197.022] SetLastError (dwErrCode=0x5) [0197.022] GetLastError () returned 0x5 [0197.022] SetLastError (dwErrCode=0x5) [0197.022] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5252b3, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2ef7268, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0197.022] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b5c0 [0197.022] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b458 [0197.023] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215c18 [0197.023] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b458 | out: hHeap=0x1f0000) returned 1 [0197.023] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216098 | out: hHeap=0x1f0000) returned 1 [0197.023] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b5c0 | out: hHeap=0x1f0000) returned 1 [0197.023] CreateFileW (lpFileName="C:\\\\Boot\\da-DK\\memtest.exe.mui" (normalized: "c:\\boot\\da-dk\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0197.024] GetLastError () returned 0x5 [0197.024] GetLastError () returned 0x5 [0197.024] SetLastError (dwErrCode=0x5) [0197.024] GetLastError () returned 0x5 [0197.024] SetLastError (dwErrCode=0x5) [0197.024] GetLastError () returned 0x5 [0197.024] SetLastError (dwErrCode=0x5) [0197.025] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5252b3, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2ef7268, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0197.025] FindClose (in: hFindFile=0x24ea00 | out: hFindFile=0x24ea00) returned 1 [0197.025] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215c18 | out: hHeap=0x1f0000) returned 1 [0197.025] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22eb58 | out: hHeap=0x1f0000) returned 1 [0197.025] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b5e8 | out: hHeap=0x1f0000) returned 1 [0197.025] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216008 | out: hHeap=0x1f0000) returned 1 [0197.025] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216098 [0197.025] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b7c8 [0197.026] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e690 [0197.026] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1ff058 [0197.026] FindFirstFileW (in: lpFileName="C:\\\\Boot\\de-DE\\*", lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0009692, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef538bee, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e900 [0197.026] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b480 [0197.026] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0197.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b480 | out: hHeap=0x1f0000) returned 1 [0197.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1ff058 | out: hHeap=0x1f0000) returned 1 [0197.026] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0197.027] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0009692, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef538bee, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0197.027] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b750 [0197.027] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fefe8 [0197.027] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b750 | out: hHeap=0x1f0000) returned 1 [0197.027] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0197.027] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0197.027] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0197.027] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48079da, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13560, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0197.027] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b368 [0197.027] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b6b0 [0197.027] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215e10 [0197.027] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b6b0 | out: hHeap=0x1f0000) returned 1 [0197.028] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fefe8 | out: hHeap=0x1f0000) returned 1 [0197.028] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b368 | out: hHeap=0x1f0000) returned 1 [0197.028] CreateFileW (lpFileName="C:\\\\Boot\\de-DE\\bootmgr.exe.mui" (normalized: "c:\\boot\\de-de\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0197.288] GetLastError () returned 0x5 [0197.289] GetLastError () returned 0x5 [0197.289] SetLastError (dwErrCode=0x5) [0197.289] GetLastError () returned 0x5 [0197.289] SetLastError (dwErrCode=0x5) [0197.289] GetLastError () returned 0x5 [0197.289] SetLastError (dwErrCode=0x5) [0197.290] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef538bee, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2ef7268, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0197.290] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b5c0 [0197.290] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b5e8 [0197.290] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215f30 [0197.290] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b5e8 | out: hHeap=0x1f0000) returned 1 [0197.290] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215e10 | out: hHeap=0x1f0000) returned 1 [0197.290] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b5c0 | out: hHeap=0x1f0000) returned 1 [0197.291] CreateFileW (lpFileName="C:\\\\Boot\\de-DE\\memtest.exe.mui" (normalized: "c:\\boot\\de-de\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0197.291] GetLastError () returned 0x5 [0197.291] GetLastError () returned 0x5 [0197.291] SetLastError (dwErrCode=0x5) [0197.291] GetLastError () returned 0x5 [0197.292] SetLastError (dwErrCode=0x5) [0197.292] GetLastError () returned 0x5 [0197.292] SetLastError (dwErrCode=0x5) [0197.292] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef538bee, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2ef7268, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0197.292] FindClose (in: hFindFile=0x24e900 | out: hFindFile=0x24e900) returned 1 [0197.292] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215f30 | out: hHeap=0x1f0000) returned 1 [0197.292] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e690 | out: hHeap=0x1f0000) returned 1 [0197.292] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b7c8 | out: hHeap=0x1f0000) returned 1 [0197.293] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216098 | out: hHeap=0x1f0000) returned 1 [0197.293] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215e10 [0197.293] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b340 [0197.293] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d9d0 [0197.293] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1feed0 [0197.293] FindFirstFileW (in: lpFileName="C:\\\\Boot\\el-GR\\*", lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef555ff8, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ec40 [0197.293] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b4d0 [0197.293] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0197.294] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b4d0 | out: hHeap=0x1f0000) returned 1 [0197.294] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1feed0 | out: hHeap=0x1f0000) returned 1 [0197.294] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0197.294] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef555ff8, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0197.294] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b458 [0197.294] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1feed0 [0197.294] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b458 | out: hHeap=0x1f0000) returned 1 [0197.294] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0197.294] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0197.294] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0197.295] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13960, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0197.295] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b7c8 [0197.295] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b750 [0197.295] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216170 [0197.295] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b750 | out: hHeap=0x1f0000) returned 1 [0197.295] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1feed0 | out: hHeap=0x1f0000) returned 1 [0197.295] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b7c8 | out: hHeap=0x1f0000) returned 1 [0197.296] CreateFileW (lpFileName="C:\\\\Boot\\el-GR\\bootmgr.exe.mui" (normalized: "c:\\boot\\el-gr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0197.296] GetLastError () returned 0x5 [0197.296] GetLastError () returned 0x5 [0197.296] SetLastError (dwErrCode=0x5) [0197.296] GetLastError () returned 0x5 [0197.296] SetLastError (dwErrCode=0x5) [0197.296] GetLastError () returned 0x5 [0197.296] SetLastError (dwErrCode=0x5) [0197.297] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb5a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0197.297] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b3e0 [0197.297] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b458 [0197.297] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215f30 [0197.297] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b458 | out: hHeap=0x1f0000) returned 1 [0197.297] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216170 | out: hHeap=0x1f0000) returned 1 [0197.297] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b3e0 | out: hHeap=0x1f0000) returned 1 [0197.297] CreateFileW (lpFileName="C:\\\\Boot\\el-GR\\memtest.exe.mui" (normalized: "c:\\boot\\el-gr\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0197.300] GetLastError () returned 0x5 [0197.300] GetLastError () returned 0x5 [0197.300] SetLastError (dwErrCode=0x5) [0197.300] GetLastError () returned 0x5 [0197.300] SetLastError (dwErrCode=0x5) [0197.300] GetLastError () returned 0x5 [0197.301] SetLastError (dwErrCode=0x5) [0197.301] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb5a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0197.302] FindClose (in: hFindFile=0x24ec40 | out: hFindFile=0x24ec40) returned 1 [0197.302] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215f30 | out: hHeap=0x1f0000) returned 1 [0197.302] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d9d0 | out: hHeap=0x1f0000) returned 1 [0197.302] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b340 | out: hHeap=0x1f0000) returned 1 [0197.302] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215e10 | out: hHeap=0x1f0000) returned 1 [0197.302] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216098 [0197.302] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b750 [0197.302] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e690 [0197.302] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0197.303] FindFirstFileW (in: lpFileName="C:\\\\Boot\\en-GB\\*", lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc482dc87, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ed40 [0197.303] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b5c0 [0197.303] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1feed0 [0197.303] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b5c0 | out: hHeap=0x1f0000) returned 1 [0197.303] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0197.303] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0197.303] FindNextFileW (in: hFindFile=0x24ed40, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc482dc87, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0197.304] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b4d0 [0197.304] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0197.304] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b4d0 | out: hHeap=0x1f0000) returned 1 [0197.304] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1feed0 | out: hHeap=0x1f0000) returned 1 [0197.304] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0197.304] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0197.304] FindNextFileW (in: hFindFile=0x24ed40, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12158, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0197.304] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b5c0 [0197.304] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b458 [0197.304] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215af8 [0197.304] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b458 | out: hHeap=0x1f0000) returned 1 [0197.304] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0197.304] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b5c0 | out: hHeap=0x1f0000) returned 1 [0197.305] CreateFileW (lpFileName="C:\\\\Boot\\en-GB\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-gb\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0197.305] GetLastError () returned 0x5 [0197.305] GetLastError () returned 0x5 [0197.305] SetLastError (dwErrCode=0x5) [0197.305] GetLastError () returned 0x5 [0197.305] SetLastError (dwErrCode=0x5) [0197.306] GetLastError () returned 0x5 [0197.306] SetLastError (dwErrCode=0x5) [0197.306] FindNextFileW (in: hFindFile=0x24ed40, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12158, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0197.306] FindClose (in: hFindFile=0x24ed40 | out: hFindFile=0x24ed40) returned 1 [0197.306] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215af8 | out: hHeap=0x1f0000) returned 1 [0197.306] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e690 | out: hHeap=0x1f0000) returned 1 [0197.306] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b750 | out: hHeap=0x1f0000) returned 1 [0197.306] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216098 | out: hHeap=0x1f0000) returned 1 [0197.306] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215c18 [0197.306] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b3e0 [0197.306] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f1b8 [0197.306] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1feed0 [0197.307] FindFirstFileW (in: lpFileName="C:\\\\Boot\\en-US\\*", lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef57d0f5, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e800 [0197.307] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b4d0 [0197.307] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0197.307] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b4d0 | out: hHeap=0x1f0000) returned 1 [0197.307] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1feed0 | out: hHeap=0x1f0000) returned 1 [0197.307] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0197.307] FindNextFileW (in: hFindFile=0x24e800, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef57d0f5, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0197.307] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b750 [0197.307] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fefe8 [0197.307] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b750 | out: hHeap=0x1f0000) returned 1 [0197.307] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0197.308] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0197.308] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0197.308] FindNextFileW (in: hFindFile=0x24e800, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef569843, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0x327294d0, ftLastWriteTime.dwHighDateTime=0x1d2a030, nFileSizeHigh=0x0, nFileSizeLow=0x121a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0197.308] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b5c0 [0197.308] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b750 [0197.308] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216050 [0197.308] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b750 | out: hHeap=0x1f0000) returned 1 [0197.308] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fefe8 | out: hHeap=0x1f0000) returned 1 [0197.308] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b5c0 | out: hHeap=0x1f0000) returned 1 [0197.308] CreateFileW (lpFileName="C:\\\\Boot\\en-US\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-us\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0197.309] GetLastError () returned 0x5 [0197.309] GetLastError () returned 0x5 [0197.309] SetLastError (dwErrCode=0x5) [0197.309] GetLastError () returned 0x5 [0197.309] SetLastError (dwErrCode=0x5) [0197.309] GetLastError () returned 0x5 [0197.309] SetLastError (dwErrCode=0x5) [0197.310] FindNextFileW (in: hFindFile=0x24e800, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xafa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0197.310] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b750 [0197.310] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b4d0 [0197.310] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2160e0 [0197.310] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b4d0 | out: hHeap=0x1f0000) returned 1 [0197.310] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216050 | out: hHeap=0x1f0000) returned 1 [0197.310] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b750 | out: hHeap=0x1f0000) returned 1 [0197.311] CreateFileW (lpFileName="C:\\\\Boot\\en-US\\memtest.exe.mui" (normalized: "c:\\boot\\en-us\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0197.311] GetLastError () returned 0x5 [0197.311] GetLastError () returned 0x5 [0197.311] SetLastError (dwErrCode=0x5) [0197.311] GetLastError () returned 0x5 [0197.311] SetLastError (dwErrCode=0x5) [0197.311] GetLastError () returned 0x5 [0197.311] SetLastError (dwErrCode=0x5) [0197.311] FindNextFileW (in: hFindFile=0x24e800, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xafa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0197.311] FindClose (in: hFindFile=0x24e800 | out: hFindFile=0x24e800) returned 1 [0197.312] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2160e0 | out: hHeap=0x1f0000) returned 1 [0197.312] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f1b8 | out: hHeap=0x1f0000) returned 1 [0197.312] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b3e0 | out: hHeap=0x1f0000) returned 1 [0197.312] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215c18 | out: hHeap=0x1f0000) returned 1 [0197.312] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215af8 [0197.312] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b5c0 [0197.312] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d9d0 [0197.312] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1feed0 [0197.312] FindFirstFileW (in: lpFileName="C:\\\\Boot\\es-ES\\*", lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000b9ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef586d37, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ea00 [0197.312] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b750 [0197.312] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0197.313] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b750 | out: hHeap=0x1f0000) returned 1 [0197.313] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1feed0 | out: hHeap=0x1f0000) returned 1 [0197.313] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0197.313] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000b9ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef586d37, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0197.313] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b750 [0197.313] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1feed0 [0197.313] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b750 | out: hHeap=0x1f0000) returned 1 [0197.313] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0197.313] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0197.313] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0197.313] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4853f40, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0197.313] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b750 [0197.313] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b778 [0197.313] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215c18 [0197.314] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b778 | out: hHeap=0x1f0000) returned 1 [0197.314] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1feed0 | out: hHeap=0x1f0000) returned 1 [0197.314] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b750 | out: hHeap=0x1f0000) returned 1 [0197.314] CreateFileW (lpFileName="C:\\\\Boot\\es-ES\\bootmgr.exe.mui" (normalized: "c:\\boot\\es-es\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0197.314] GetLastError () returned 0x5 [0197.314] GetLastError () returned 0x5 [0197.314] SetLastError (dwErrCode=0x5) [0197.314] GetLastError () returned 0x5 [0197.314] SetLastError (dwErrCode=0x5) [0197.315] GetLastError () returned 0x5 [0197.315] SetLastError (dwErrCode=0x5) [0197.315] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef586d37, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0197.315] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b458 [0197.315] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b750 [0197.315] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2161b8 [0197.315] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b750 | out: hHeap=0x1f0000) returned 1 [0197.315] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215c18 | out: hHeap=0x1f0000) returned 1 [0197.315] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b458 | out: hHeap=0x1f0000) returned 1 [0197.316] CreateFileW (lpFileName="C:\\\\Boot\\es-ES\\memtest.exe.mui" (normalized: "c:\\boot\\es-es\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0197.317] GetLastError () returned 0x5 [0197.317] GetLastError () returned 0x5 [0197.317] SetLastError (dwErrCode=0x5) [0197.317] GetLastError () returned 0x5 [0197.318] SetLastError (dwErrCode=0x5) [0197.318] GetLastError () returned 0x5 [0197.318] SetLastError (dwErrCode=0x5) [0197.318] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef586d37, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0197.318] FindClose (in: hFindFile=0x24ea00 | out: hFindFile=0x24ea00) returned 1 [0197.318] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2161b8 | out: hHeap=0x1f0000) returned 1 [0197.318] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d9d0 | out: hHeap=0x1f0000) returned 1 [0197.319] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b5c0 | out: hHeap=0x1f0000) returned 1 [0197.319] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215af8 | out: hHeap=0x1f0000) returned 1 [0197.319] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215ca8 [0197.319] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b3e0 [0197.319] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d9d0 [0197.319] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1feed0 [0197.319] FindFirstFileW (in: lpFileName="C:\\\\Boot\\es-MX\\*", lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000c12e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc4853f40, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24eac0 [0197.319] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b750 [0197.319] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0197.319] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b750 | out: hHeap=0x1f0000) returned 1 [0197.319] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1feed0 | out: hHeap=0x1f0000) returned 1 [0197.319] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0197.319] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000c12e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc4853f40, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0197.320] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b778 [0197.320] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1feed0 [0197.320] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b778 | out: hHeap=0x1f0000) returned 1 [0197.320] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0197.320] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0197.320] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0197.320] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4853f40, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0197.320] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b368 [0197.320] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b2f0 [0197.320] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215e10 [0197.320] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b2f0 | out: hHeap=0x1f0000) returned 1 [0197.320] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1feed0 | out: hHeap=0x1f0000) returned 1 [0197.320] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b368 | out: hHeap=0x1f0000) returned 1 [0197.321] CreateFileW (lpFileName="C:\\\\Boot\\es-MX\\bootmgr.exe.mui" (normalized: "c:\\boot\\es-mx\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0197.321] GetLastError () returned 0x5 [0197.321] GetLastError () returned 0x5 [0197.321] SetLastError (dwErrCode=0x5) [0197.321] GetLastError () returned 0x5 [0197.321] SetLastError (dwErrCode=0x5) [0197.321] GetLastError () returned 0x5 [0197.321] SetLastError (dwErrCode=0x5) [0197.321] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4853f40, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0197.322] FindClose (in: hFindFile=0x24eac0 | out: hFindFile=0x24eac0) returned 1 [0197.322] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215e10 | out: hHeap=0x1f0000) returned 1 [0197.322] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d9d0 | out: hHeap=0x1f0000) returned 1 [0197.322] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b3e0 | out: hHeap=0x1f0000) returned 1 [0197.322] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215ca8 | out: hHeap=0x1f0000) returned 1 [0197.322] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215f30 [0197.322] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b778 [0197.322] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22dd00 [0197.322] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1feed0 [0197.322] FindFirstFileW (in: lpFileName="C:\\\\Boot\\et-EE\\*", lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc487a0b9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e8c0 [0197.323] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b750 [0197.323] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0197.323] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b750 | out: hHeap=0x1f0000) returned 1 [0197.323] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1feed0 | out: hHeap=0x1f0000) returned 1 [0197.323] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0197.323] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc487a0b9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0197.323] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b5c0 [0197.323] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fefe8 [0197.323] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b5c0 | out: hHeap=0x1f0000) returned 1 [0197.324] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0197.324] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0197.324] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0197.324] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12560, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0197.324] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b5c0 [0197.324] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b750 [0197.324] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216050 [0197.324] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b750 | out: hHeap=0x1f0000) returned 1 [0197.324] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fefe8 | out: hHeap=0x1f0000) returned 1 [0197.324] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b5c0 | out: hHeap=0x1f0000) returned 1 [0197.325] CreateFileW (lpFileName="C:\\\\Boot\\et-EE\\bootmgr.exe.mui" (normalized: "c:\\boot\\et-ee\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0197.655] GetLastError () returned 0x5 [0197.655] GetLastError () returned 0x5 [0197.656] SetLastError (dwErrCode=0x5) [0197.656] GetLastError () returned 0x5 [0197.656] SetLastError (dwErrCode=0x5) [0197.656] GetLastError () returned 0x5 [0197.656] SetLastError (dwErrCode=0x5) [0197.656] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12560, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0197.656] FindClose (in: hFindFile=0x24e8c0 | out: hFindFile=0x24e8c0) returned 1 [0197.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216050 | out: hHeap=0x1f0000) returned 1 [0197.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22dd00 | out: hHeap=0x1f0000) returned 1 [0197.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b778 | out: hHeap=0x1f0000) returned 1 [0197.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215f30 | out: hHeap=0x1f0000) returned 1 [0197.657] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216008 [0197.657] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b6b0 [0197.657] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22de98 [0197.657] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fefe8 [0197.657] FindFirstFileW (in: lpFileName="C:\\\\Boot\\fi-FI\\*", lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000cf3a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef59a5b1, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ea80 [0197.657] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b318 [0197.657] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0197.657] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b318 | out: hHeap=0x1f0000) returned 1 [0197.657] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fefe8 | out: hHeap=0x1f0000) returned 1 [0197.657] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0197.657] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000cf3a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef59a5b1, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0197.657] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b458 [0197.657] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0197.657] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b458 | out: hHeap=0x1f0000) returned 1 [0197.657] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0197.658] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0197.658] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0197.658] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2096e751, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0197.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b778 [0197.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b5e8 [0197.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216170 [0197.658] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b5e8 | out: hHeap=0x1f0000) returned 1 [0197.658] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0197.658] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b778 | out: hHeap=0x1f0000) returned 1 [0197.658] CreateFileW (lpFileName="C:\\\\Boot\\fi-FI\\bootmgr.exe.mui" (normalized: "c:\\boot\\fi-fi\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0197.658] GetLastError () returned 0x5 [0197.658] GetLastError () returned 0x5 [0197.658] SetLastError (dwErrCode=0x5) [0197.658] GetLastError () returned 0x5 [0197.659] SetLastError (dwErrCode=0x5) [0197.659] GetLastError () returned 0x5 [0197.659] SetLastError (dwErrCode=0x5) [0197.659] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef59a5b1, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0197.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b778 [0197.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b318 [0197.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216098 [0197.659] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b318 | out: hHeap=0x1f0000) returned 1 [0197.659] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216170 | out: hHeap=0x1f0000) returned 1 [0197.659] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b778 | out: hHeap=0x1f0000) returned 1 [0197.659] CreateFileW (lpFileName="C:\\\\Boot\\fi-FI\\memtest.exe.mui" (normalized: "c:\\boot\\fi-fi\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0197.660] GetLastError () returned 0x5 [0197.660] GetLastError () returned 0x5 [0197.660] SetLastError (dwErrCode=0x5) [0197.660] GetLastError () returned 0x5 [0197.660] SetLastError (dwErrCode=0x5) [0197.660] GetLastError () returned 0x5 [0197.660] SetLastError (dwErrCode=0x5) [0197.660] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef59a5b1, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0197.660] FindClose (in: hFindFile=0x24ea80 | out: hFindFile=0x24ea80) returned 1 [0197.660] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216098 | out: hHeap=0x1f0000) returned 1 [0197.660] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22de98 | out: hHeap=0x1f0000) returned 1 [0197.660] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b6b0 | out: hHeap=0x1f0000) returned 1 [0197.661] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216008 | out: hHeap=0x1f0000) returned 1 [0197.661] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215f30 [0197.661] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b458 [0197.661] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22de98 [0197.661] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228230 [0197.661] FindFirstFileW (in: lpFileName="C:\\\\Boot\\Fonts\\*", lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0109451, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef999ae4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e640 [0197.665] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b318 [0197.665] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0197.665] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b318 | out: hHeap=0x1f0000) returned 1 [0197.665] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228230 | out: hHeap=0x1f0000) returned 1 [0197.665] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0197.665] FindNextFileW (in: hFindFile=0x24e640, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0109451, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef999ae4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0197.665] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b778 [0197.665] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0197.665] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b778 | out: hHeap=0x1f0000) returned 1 [0197.665] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0197.665] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0197.665] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0197.665] FindNextFileW (in: hFindFile=0x24e640, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef782dd9, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x386467, dwReserved0=0x0, dwReserved1=0x0, cFileName="chs_boot.ttf", cAlternateFileName="")) returned 1 [0197.666] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b5e8 [0197.666] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b480 [0197.666] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216008 [0197.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b480 | out: hHeap=0x1f0000) returned 1 [0197.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0197.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b5e8 | out: hHeap=0x1f0000) returned 1 [0197.666] CreateFileW (lpFileName="C:\\\\Boot\\Fonts\\chs_boot.ttf" (normalized: "c:\\boot\\fonts\\chs_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0197.670] GetLastError () returned 0x5 [0197.670] GetLastError () returned 0x5 [0197.670] SetLastError (dwErrCode=0x5) [0197.670] GetLastError () returned 0x5 [0197.670] SetLastError (dwErrCode=0x5) [0197.670] GetLastError () returned 0x5 [0197.670] SetLastError (dwErrCode=0x5) [0197.670] FindNextFileW (in: hFindFile=0x24e640, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4a1dbea, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef81cc08, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x3b2e0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="cht_boot.ttf", cAlternateFileName="")) returned 1 [0197.671] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b318 [0197.671] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b5e8 [0197.671] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215b40 [0197.671] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b5e8 | out: hHeap=0x1f0000) returned 1 [0197.671] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216008 | out: hHeap=0x1f0000) returned 1 [0197.671] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b318 | out: hHeap=0x1f0000) returned 1 [0197.671] CreateFileW (lpFileName="C:\\\\Boot\\Fonts\\cht_boot.ttf" (normalized: "c:\\boot\\fonts\\cht_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0197.673] GetLastError () returned 0x5 [0197.673] GetLastError () returned 0x5 [0197.674] SetLastError (dwErrCode=0x5) [0197.674] GetLastError () returned 0x5 [0197.674] SetLastError (dwErrCode=0x5) [0197.674] GetLastError () returned 0x5 [0197.674] SetLastError (dwErrCode=0x5) [0197.675] FindNextFileW (in: hFindFile=0x24e640, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4a902c2, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8771a7, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x1e4d4b, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpn_boot.ttf", cAlternateFileName="")) returned 1 [0197.675] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b368 [0197.675] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b480 [0197.675] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216008 [0197.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b480 | out: hHeap=0x1f0000) returned 1 [0197.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215b40 | out: hHeap=0x1f0000) returned 1 [0197.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b368 | out: hHeap=0x1f0000) returned 1 [0197.676] CreateFileW (lpFileName="C:\\\\Boot\\Fonts\\jpn_boot.ttf" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0197.682] GetLastError () returned 0x5 [0197.682] GetLastError () returned 0x5 [0197.682] SetLastError (dwErrCode=0x5) [0197.682] GetLastError () returned 0x5 [0197.682] SetLastError (dwErrCode=0x5) [0197.682] GetLastError () returned 0x5 [0197.683] SetLastError (dwErrCode=0x5) [0197.683] FindNextFileW (in: hFindFile=0x24e640, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b4eed5, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8c4060, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x243588, dwReserved0=0x0, dwReserved1=0x0, cFileName="kor_boot.ttf", cAlternateFileName="")) returned 1 [0197.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b6b0 [0197.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b480 [0197.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2161b8 [0197.683] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b480 | out: hHeap=0x1f0000) returned 1 [0197.683] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216008 | out: hHeap=0x1f0000) returned 1 [0197.683] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b6b0 | out: hHeap=0x1f0000) returned 1 [0197.684] CreateFileW (lpFileName="C:\\\\Boot\\Fonts\\kor_boot.ttf" (normalized: "c:\\boot\\fonts\\kor_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0197.687] GetLastError () returned 0x5 [0197.688] GetLastError () returned 0x5 [0197.688] SetLastError (dwErrCode=0x5) [0197.688] GetLastError () returned 0x5 [0197.688] SetLastError (dwErrCode=0x5) [0197.688] GetLastError () returned 0x5 [0197.688] SetLastError (dwErrCode=0x5) [0197.688] FindNextFileW (in: hFindFile=0x24e640, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b9b37e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8e28b4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2ab6f, dwReserved0=0x0, dwReserved1=0x0, cFileName="malgunn_boot.ttf", cAlternateFileName="MALGUN~1.TTF")) returned 1 [0197.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228230 [0197.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b6b0 [0197.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215b40 [0197.689] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b6b0 | out: hHeap=0x1f0000) returned 1 [0197.689] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2161b8 | out: hHeap=0x1f0000) returned 1 [0197.689] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228230 | out: hHeap=0x1f0000) returned 1 [0197.689] CreateFileW (lpFileName="C:\\\\Boot\\Fonts\\malgunn_boot.ttf" (normalized: "c:\\boot\\fonts\\malgunn_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0197.692] GetLastError () returned 0x5 [0197.692] GetLastError () returned 0x5 [0197.692] SetLastError (dwErrCode=0x5) [0197.693] GetLastError () returned 0x5 [0197.693] SetLastError (dwErrCode=0x5) [0197.693] GetLastError () returned 0x5 [0197.693] SetLastError (dwErrCode=0x5) [0197.693] FindNextFileW (in: hFindFile=0x24e640, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b9b37e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8f4db4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2b506, dwReserved0=0x0, dwReserved1=0x0, cFileName="malgun_boot.ttf", cAlternateFileName="MALGUN~2.TTF")) returned 1 [0197.693] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b6b0 [0197.693] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b318 [0197.693] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216008 [0197.693] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b318 | out: hHeap=0x1f0000) returned 1 [0197.694] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215b40 | out: hHeap=0x1f0000) returned 1 [0197.694] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b6b0 | out: hHeap=0x1f0000) returned 1 [0197.694] CreateFileW (lpFileName="C:\\\\Boot\\Fonts\\malgun_boot.ttf" (normalized: "c:\\boot\\fonts\\malgun_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0197.906] GetLastError () returned 0x5 [0197.906] GetLastError () returned 0x5 [0197.906] SetLastError (dwErrCode=0x5) [0197.907] GetLastError () returned 0x5 [0197.907] SetLastError (dwErrCode=0x5) [0197.907] GetLastError () returned 0x5 [0197.907] SetLastError (dwErrCode=0x5) [0197.907] FindNextFileW (in: hFindFile=0x24e640, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b9b37e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9072c7, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2318a, dwReserved0=0x0, dwReserved1=0x0, cFileName="meiryon_boot.ttf", cAlternateFileName="MEIRYO~1.TTF")) returned 1 [0197.907] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0197.907] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b778 [0197.907] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215b40 [0197.907] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b778 | out: hHeap=0x1f0000) returned 1 [0197.907] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216008 | out: hHeap=0x1f0000) returned 1 [0197.907] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0198.293] CreateFileW (lpFileName="C:\\\\Boot\\Fonts\\meiryon_boot.ttf" (normalized: "c:\\boot\\fonts\\meiryon_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0198.331] GetLastError () returned 0x5 [0198.331] GetLastError () returned 0x5 [0198.331] SetLastError (dwErrCode=0x5) [0198.331] GetLastError () returned 0x5 [0198.331] SetLastError (dwErrCode=0x5) [0198.331] GetLastError () returned 0x5 [0198.331] SetLastError (dwErrCode=0x5) [0198.331] FindNextFileW (in: hFindFile=0x24e640, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4bc156a, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef918492, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2380b, dwReserved0=0x0, dwReserved1=0x0, cFileName="meiryo_boot.ttf", cAlternateFileName="MEIRYO~2.TTF")) returned 1 [0198.331] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0198.331] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238028 [0198.331] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216170 [0198.331] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238028 | out: hHeap=0x1f0000) returned 1 [0198.331] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215b40 | out: hHeap=0x1f0000) returned 1 [0198.331] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0198.332] CreateFileW (lpFileName="C:\\\\Boot\\Fonts\\meiryo_boot.ttf" (normalized: "c:\\boot\\fonts\\meiryo_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0198.546] GetLastError () returned 0x5 [0198.546] GetLastError () returned 0x5 [0198.546] SetLastError (dwErrCode=0x5) [0198.546] GetLastError () returned 0x5 [0198.547] SetLastError (dwErrCode=0x5) [0198.547] GetLastError () returned 0x5 [0198.547] SetLastError (dwErrCode=0x5) [0198.547] FindNextFileW (in: hFindFile=0x24e640, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4bc156a, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef92a947, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x27a1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="msjhn_boot.ttf", cAlternateFileName="MSJHN_~1.TTF")) returned 1 [0198.547] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0198.547] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0198.547] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2167e8 [0198.547] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0198.547] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216170 | out: hHeap=0x1f0000) returned 1 [0198.547] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0198.548] CreateFileW (lpFileName="C:\\\\Boot\\Fonts\\msjhn_boot.ttf" (normalized: "c:\\boot\\fonts\\msjhn_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0198.548] GetLastError () returned 0x5 [0198.548] GetLastError () returned 0x5 [0198.548] SetLastError (dwErrCode=0x5) [0198.548] GetLastError () returned 0x5 [0198.549] SetLastError (dwErrCode=0x5) [0198.549] GetLastError () returned 0x5 [0198.549] SetLastError (dwErrCode=0x5) [0198.549] FindNextFileW (in: hFindFile=0x24e640, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef93ce3b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x281fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="msjh_boot.ttf", cAlternateFileName="MSJH_B~1.TTF")) returned 1 [0198.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0198.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0198.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216170 [0198.549] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0198.549] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2167e8 | out: hHeap=0x1f0000) returned 1 [0198.549] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0198.550] CreateFileW (lpFileName="C:\\\\Boot\\Fonts\\msjh_boot.ttf" (normalized: "c:\\boot\\fonts\\msjh_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0198.551] GetLastError () returned 0x5 [0198.551] GetLastError () returned 0x5 [0198.551] SetLastError (dwErrCode=0x5) [0198.551] GetLastError () returned 0x5 [0198.551] SetLastError (dwErrCode=0x5) [0198.551] GetLastError () returned 0x5 [0198.551] SetLastError (dwErrCode=0x5) [0198.552] FindNextFileW (in: hFindFile=0x24e640, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef94dfcd, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x25b3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="msyhn_boot.ttf", cAlternateFileName="MSYHN_~1.TTF")) returned 1 [0198.552] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0198.552] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0198.552] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2167e8 [0198.552] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0198.552] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216170 | out: hHeap=0x1f0000) returned 1 [0198.552] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0198.553] CreateFileW (lpFileName="C:\\\\Boot\\Fonts\\msyhn_boot.ttf" (normalized: "c:\\boot\\fonts\\msyhn_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0198.553] GetLastError () returned 0x5 [0198.553] GetLastError () returned 0x5 [0198.553] SetLastError (dwErrCode=0x5) [0198.553] GetLastError () returned 0x5 [0198.553] SetLastError (dwErrCode=0x5) [0198.553] GetLastError () returned 0x5 [0198.553] SetLastError (dwErrCode=0x5) [0198.554] FindNextFileW (in: hFindFile=0x24e640, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef95f141, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x26255, dwReserved0=0x0, dwReserved1=0x0, cFileName="msyh_boot.ttf", cAlternateFileName="MSYH_B~1.TTF")) returned 1 [0198.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0198.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0198.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216170 [0198.554] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0198.554] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2167e8 | out: hHeap=0x1f0000) returned 1 [0198.554] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0198.554] CreateFileW (lpFileName="C:\\\\Boot\\Fonts\\msyh_boot.ttf" (normalized: "c:\\boot\\fonts\\msyh_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0198.555] GetLastError () returned 0x5 [0198.555] GetLastError () returned 0x5 [0198.555] SetLastError (dwErrCode=0x5) [0198.555] GetLastError () returned 0x5 [0198.555] SetLastError (dwErrCode=0x5) [0198.555] GetLastError () returned 0x5 [0198.555] SetLastError (dwErrCode=0x5) [0198.555] FindNextFileW (in: hFindFile=0x24e640, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef96ef3e, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xaf3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="segmono_boot.ttf", cAlternateFileName="SEGMON~1.TTF")) returned 1 [0198.555] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2f0 [0198.555] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0198.555] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2163f8 [0198.555] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0198.555] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216170 | out: hHeap=0x1f0000) returned 1 [0198.555] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0198.556] CreateFileW (lpFileName="C:\\\\Boot\\Fonts\\segmono_boot.ttf" (normalized: "c:\\boot\\fonts\\segmono_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0198.556] GetLastError () returned 0x5 [0198.556] GetLastError () returned 0x5 [0198.556] SetLastError (dwErrCode=0x5) [0198.557] GetLastError () returned 0x5 [0198.557] SetLastError (dwErrCode=0x5) [0198.557] GetLastError () returned 0x5 [0198.557] SetLastError (dwErrCode=0x5) [0198.557] FindNextFileW (in: hFindFile=0x24e640, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c0da69, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef97d9ab, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x14f66, dwReserved0=0x0, dwReserved1=0x0, cFileName="segoen_slboot.ttf", cAlternateFileName="SEGOEN~1.TTF")) returned 1 [0198.557] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2f0 [0198.557] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0198.557] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239928 [0198.557] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0198.557] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2163f8 | out: hHeap=0x1f0000) returned 1 [0198.557] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0198.558] CreateFileW (lpFileName="C:\\\\Boot\\Fonts\\segoen_slboot.ttf" (normalized: "c:\\boot\\fonts\\segoen_slboot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0198.558] GetLastError () returned 0x5 [0198.558] GetLastError () returned 0x5 [0198.558] SetLastError (dwErrCode=0x5) [0198.558] GetLastError () returned 0x5 [0198.558] SetLastError (dwErrCode=0x5) [0198.558] GetLastError () returned 0x5 [0198.558] SetLastError (dwErrCode=0x5) [0198.558] FindNextFileW (in: hFindFile=0x24e640, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef98c419, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x150a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="segoe_slboot.ttf", cAlternateFileName="SEGOE_~1.TTF")) returned 1 [0198.558] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0198.559] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0198.559] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2163b0 [0198.559] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0198.559] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239928 | out: hHeap=0x1f0000) returned 1 [0198.559] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0198.559] CreateFileW (lpFileName="C:\\\\Boot\\Fonts\\segoe_slboot.ttf" (normalized: "c:\\boot\\fonts\\segoe_slboot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0198.559] GetLastError () returned 0x5 [0198.559] GetLastError () returned 0x5 [0198.559] SetLastError (dwErrCode=0x5) [0198.559] GetLastError () returned 0x5 [0198.559] SetLastError (dwErrCode=0x5) [0198.560] GetLastError () returned 0x5 [0198.560] SetLastError (dwErrCode=0x5) [0198.560] FindNextFileW (in: hFindFile=0x24e640, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef999ae4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xbfc3, dwReserved0=0x0, dwReserved1=0x0, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 1 [0198.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0198.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0198.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2166c8 [0198.560] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0198.560] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2163b0 | out: hHeap=0x1f0000) returned 1 [0198.560] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0198.561] CreateFileW (lpFileName="C:\\\\Boot\\Fonts\\wgl4_boot.ttf" (normalized: "c:\\boot\\fonts\\wgl4_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0198.561] GetLastError () returned 0x5 [0198.561] GetLastError () returned 0x5 [0198.561] SetLastError (dwErrCode=0x5) [0198.561] GetLastError () returned 0x5 [0198.561] SetLastError (dwErrCode=0x5) [0198.561] GetLastError () returned 0x5 [0198.561] SetLastError (dwErrCode=0x5) [0198.562] FindNextFileW (in: hFindFile=0x24e640, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef999ae4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xbfc3, dwReserved0=0x0, dwReserved1=0x0, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 0 [0198.562] FindClose (in: hFindFile=0x24e640 | out: hFindFile=0x24e640) returned 1 [0198.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2166c8 | out: hHeap=0x1f0000) returned 1 [0198.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22de98 | out: hHeap=0x1f0000) returned 1 [0198.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b458 | out: hHeap=0x1f0000) returned 1 [0198.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215f30 | out: hHeap=0x1f0000) returned 1 [0198.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215f30 [0198.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0198.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22db68 [0198.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2f0 [0198.563] FindFirstFileW (in: lpFileName="C:\\\\Boot\\fr-CA\\*", lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ea80 [0198.565] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0198.565] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0198.565] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0198.565] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0198.565] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0198.565] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0198.565] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0198.565] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf38 [0198.565] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0198.565] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0198.565] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0198.565] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0198.565] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13560, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0198.565] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0198.566] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0198.566] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216170 [0198.566] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0198.566] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf38 | out: hHeap=0x1f0000) returned 1 [0198.566] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0198.566] CreateFileW (lpFileName="C:\\\\Boot\\fr-CA\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-ca\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0198.566] GetLastError () returned 0x5 [0198.566] GetLastError () returned 0x5 [0198.566] SetLastError (dwErrCode=0x5) [0198.567] GetLastError () returned 0x5 [0198.567] SetLastError (dwErrCode=0x5) [0198.567] GetLastError () returned 0x5 [0198.567] SetLastError (dwErrCode=0x5) [0198.567] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13560, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0198.567] FindClose (in: hFindFile=0x24ea80 | out: hFindFile=0x24ea80) returned 1 [0198.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216170 | out: hHeap=0x1f0000) returned 1 [0198.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22db68 | out: hHeap=0x1f0000) returned 1 [0198.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0198.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215f30 | out: hHeap=0x1f0000) returned 1 [0198.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215f30 [0198.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0198.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f1b8 [0198.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2f0 [0198.568] FindFirstFileW (in: lpFileName="C:\\\\Boot\\fr-FR\\*", lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010bc12, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ade2b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ec40 [0198.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0198.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0198.569] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0198.569] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0198.569] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0198.569] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010bc12, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ade2b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0198.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0198.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2f0 [0198.569] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0198.569] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0198.569] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0198.569] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0198.569] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2096e751, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13558, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0198.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0198.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0198.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216170 [0198.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0198.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0198.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0198.570] CreateFileW (lpFileName="C:\\\\Boot\\fr-FR\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-fr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0198.570] GetLastError () returned 0x5 [0198.571] GetLastError () returned 0x5 [0198.571] SetLastError (dwErrCode=0x5) [0198.571] GetLastError () returned 0x5 [0198.571] SetLastError (dwErrCode=0x5) [0198.571] GetLastError () returned 0x5 [0198.571] SetLastError (dwErrCode=0x5) [0198.571] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5ade2b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0198.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0198.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0198.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2163b0 [0198.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0198.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216170 | out: hHeap=0x1f0000) returned 1 [0198.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0198.572] CreateFileW (lpFileName="C:\\\\Boot\\fr-FR\\memtest.exe.mui" (normalized: "c:\\boot\\fr-fr\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0198.573] GetLastError () returned 0x5 [0198.573] GetLastError () returned 0x5 [0198.573] SetLastError (dwErrCode=0x5) [0198.573] GetLastError () returned 0x5 [0198.573] SetLastError (dwErrCode=0x5) [0198.573] GetLastError () returned 0x5 [0198.573] SetLastError (dwErrCode=0x5) [0198.573] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5ade2b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0198.573] FindClose (in: hFindFile=0x24ec40 | out: hFindFile=0x24ec40) returned 1 [0198.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2163b0 | out: hHeap=0x1f0000) returned 1 [0198.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f1b8 | out: hHeap=0x1f0000) returned 1 [0198.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0198.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215f30 | out: hHeap=0x1f0000) returned 1 [0198.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215f30 [0198.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0198.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f1b8 [0198.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0198.574] FindFirstFileW (in: lpFileName="C:\\\\Boot\\hr-HR\\*", lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e800 [0198.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0198.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2f0 [0198.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0198.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0198.574] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0198.574] FindNextFileW (in: hFindFile=0x24e800, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0198.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0198.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0198.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0198.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0198.575] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0198.575] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0198.575] FindNextFileW (in: hFindFile=0x24e800, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0198.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0198.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0198.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216170 [0198.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0198.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0198.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0198.576] CreateFileW (lpFileName="C:\\\\Boot\\hr-HR\\bootmgr.exe.mui" (normalized: "c:\\boot\\hr-hr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0198.576] GetLastError () returned 0x5 [0198.576] GetLastError () returned 0x5 [0198.576] SetLastError (dwErrCode=0x5) [0198.576] GetLastError () returned 0x5 [0198.577] SetLastError (dwErrCode=0x5) [0198.577] GetLastError () returned 0x5 [0198.577] SetLastError (dwErrCode=0x5) [0198.577] FindNextFileW (in: hFindFile=0x24e800, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0198.577] FindClose (in: hFindFile=0x24e800 | out: hFindFile=0x24e800) returned 1 [0198.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216170 | out: hHeap=0x1f0000) returned 1 [0198.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f1b8 | out: hHeap=0x1f0000) returned 1 [0198.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0198.578] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215f30 | out: hHeap=0x1f0000) returned 1 [0198.578] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215f30 [0198.578] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0198.578] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22de98 [0198.578] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0198.578] FindFirstFileW (in: lpFileName="C:\\\\Boot\\hu-HU\\*", lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010c5ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5c171b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e9c0 [0198.578] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0198.578] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf38 [0198.578] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0198.578] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0198.578] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0198.579] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010c5ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5c171b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0198.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0198.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0198.579] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0198.579] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf38 | out: hHeap=0x1f0000) returned 1 [0198.579] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0198.579] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0198.579] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13360, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0198.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0198.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0198.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216170 [0198.579] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0198.579] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0198.579] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0198.580] CreateFileW (lpFileName="C:\\\\Boot\\hu-HU\\bootmgr.exe.mui" (normalized: "c:\\boot\\hu-hu\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0198.921] GetLastError () returned 0x5 [0198.921] GetLastError () returned 0x5 [0198.921] SetLastError (dwErrCode=0x5) [0198.921] GetLastError () returned 0x5 [0198.921] SetLastError (dwErrCode=0x5) [0198.921] GetLastError () returned 0x5 [0198.921] SetLastError (dwErrCode=0x5) [0198.921] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5c171b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39d81d8, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb398, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0198.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b620 [0198.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b9e0 [0198.922] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215b40 [0198.922] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b9e0 | out: hHeap=0x1f0000) returned 1 [0198.922] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216170 | out: hHeap=0x1f0000) returned 1 [0198.922] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b620 | out: hHeap=0x1f0000) returned 1 [0198.922] CreateFileW (lpFileName="C:\\\\Boot\\hu-HU\\memtest.exe.mui" (normalized: "c:\\boot\\hu-hu\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0198.922] GetLastError () returned 0x5 [0198.922] GetLastError () returned 0x5 [0198.922] SetLastError (dwErrCode=0x5) [0198.922] GetLastError () returned 0x5 [0198.922] SetLastError (dwErrCode=0x5) [0198.922] GetLastError () returned 0x5 [0198.923] SetLastError (dwErrCode=0x5) [0198.923] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5c171b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39d81d8, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb398, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0198.923] FindClose (in: hFindFile=0x24e9c0 | out: hFindFile=0x24e9c0) returned 1 [0198.923] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215b40 | out: hHeap=0x1f0000) returned 1 [0198.923] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22de98 | out: hHeap=0x1f0000) returned 1 [0198.923] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0198.923] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215f30 | out: hHeap=0x1f0000) returned 1 [0198.923] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216170 [0198.923] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b8f0 [0198.923] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f350 [0198.923] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2f0 [0198.923] FindFirstFileW (in: lpFileName="C:\\\\Boot\\it-IT\\*", lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010ccad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5d8ab4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ec80 [0198.924] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b9e0 [0198.924] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0198.924] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b9e0 | out: hHeap=0x1f0000) returned 1 [0198.924] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0198.924] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0198.924] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010ccad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5d8ab4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0198.925] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b9e0 [0198.925] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2f0 [0198.925] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b9e0 | out: hHeap=0x1f0000) returned 1 [0198.925] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0198.925] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0198.925] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0198.925] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0198.925] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b9e0 [0198.925] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b620 [0198.925] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215f30 [0198.925] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b620 | out: hHeap=0x1f0000) returned 1 [0198.925] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0198.925] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b9e0 | out: hHeap=0x1f0000) returned 1 [0198.926] CreateFileW (lpFileName="C:\\\\Boot\\it-IT\\bootmgr.exe.mui" (normalized: "c:\\boot\\it-it\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0198.926] GetLastError () returned 0x5 [0198.926] GetLastError () returned 0x5 [0198.926] SetLastError (dwErrCode=0x5) [0198.926] GetLastError () returned 0x5 [0198.926] SetLastError (dwErrCode=0x5) [0198.926] GetLastError () returned 0x5 [0198.926] SetLastError (dwErrCode=0x5) [0198.926] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5d8ab4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf30285aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0198.926] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b620 [0198.926] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b9e0 [0198.927] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215b40 [0198.927] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b9e0 | out: hHeap=0x1f0000) returned 1 [0198.927] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215f30 | out: hHeap=0x1f0000) returned 1 [0198.927] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b620 | out: hHeap=0x1f0000) returned 1 [0198.927] CreateFileW (lpFileName="C:\\\\Boot\\it-IT\\memtest.exe.mui" (normalized: "c:\\boot\\it-it\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0198.928] GetLastError () returned 0x5 [0198.928] GetLastError () returned 0x5 [0198.928] SetLastError (dwErrCode=0x5) [0198.928] GetLastError () returned 0x5 [0198.928] SetLastError (dwErrCode=0x5) [0198.928] GetLastError () returned 0x5 [0198.928] SetLastError (dwErrCode=0x5) [0198.928] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5d8ab4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf30285aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0198.928] FindClose (in: hFindFile=0x24ec80 | out: hFindFile=0x24ec80) returned 1 [0198.933] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215b40 | out: hHeap=0x1f0000) returned 1 [0198.933] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f350 | out: hHeap=0x1f0000) returned 1 [0198.934] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b8f0 | out: hHeap=0x1f0000) returned 1 [0198.934] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216170 | out: hHeap=0x1f0000) returned 1 [0198.934] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215b40 [0198.934] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b9e0 [0198.934] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22eb58 [0198.934] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2f0 [0198.934] FindFirstFileW (in: lpFileName="C:\\\\Boot\\ja-JP\\*", lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010d0c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ed6c6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e900 [0198.934] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b620 [0198.935] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0198.935] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b620 | out: hHeap=0x1f0000) returned 1 [0198.935] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0198.935] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0198.935] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010d0c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ed6c6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0198.935] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b620 [0198.935] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf70 [0198.935] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b620 | out: hHeap=0x1f0000) returned 1 [0198.935] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0198.935] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0198.936] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0198.936] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48c6596, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21212f9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x10760, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0198.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b8f0 [0198.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b620 [0198.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215f30 [0198.936] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b620 | out: hHeap=0x1f0000) returned 1 [0198.936] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf70 | out: hHeap=0x1f0000) returned 1 [0198.936] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b8f0 | out: hHeap=0x1f0000) returned 1 [0198.937] CreateFileW (lpFileName="C:\\\\Boot\\ja-JP\\bootmgr.exe.mui" (normalized: "c:\\boot\\ja-jp\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0198.937] GetLastError () returned 0x5 [0198.937] GetLastError () returned 0x5 [0198.937] SetLastError (dwErrCode=0x5) [0198.937] GetLastError () returned 0x5 [0198.937] SetLastError (dwErrCode=0x5) [0198.937] GetLastError () returned 0x5 [0198.937] SetLastError (dwErrCode=0x5) [0198.938] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5ed6c6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf300233f, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa798, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0198.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b620 [0198.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b8f0 [0198.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216170 [0198.938] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b8f0 | out: hHeap=0x1f0000) returned 1 [0198.938] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215f30 | out: hHeap=0x1f0000) returned 1 [0198.938] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b620 | out: hHeap=0x1f0000) returned 1 [0198.939] CreateFileW (lpFileName="C:\\\\Boot\\ja-JP\\memtest.exe.mui" (normalized: "c:\\boot\\ja-jp\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0198.939] GetLastError () returned 0x5 [0198.939] GetLastError () returned 0x5 [0198.939] SetLastError (dwErrCode=0x5) [0198.939] GetLastError () returned 0x5 [0198.939] SetLastError (dwErrCode=0x5) [0198.939] GetLastError () returned 0x5 [0198.940] SetLastError (dwErrCode=0x5) [0198.940] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5ed6c6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf300233f, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa798, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0198.940] FindClose (in: hFindFile=0x24e900 | out: hFindFile=0x24e900) returned 1 [0198.940] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216170 | out: hHeap=0x1f0000) returned 1 [0198.940] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22eb58 | out: hHeap=0x1f0000) returned 1 [0198.940] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b9e0 | out: hHeap=0x1f0000) returned 1 [0198.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215b40 | out: hHeap=0x1f0000) returned 1 [0198.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216170 [0198.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b9e0 [0198.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22eb58 [0198.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2f0 [0198.941] FindFirstFileW (in: lpFileName="C:\\\\Boot\\ko-KR\\*", lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef5fc210, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ec40 [0198.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b8f0 [0198.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0198.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b8f0 | out: hHeap=0x1f0000) returned 1 [0198.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0198.942] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0198.942] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef5fc210, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0198.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b620 [0198.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cfa8 [0198.943] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b620 | out: hHeap=0x1f0000) returned 1 [0198.943] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0198.943] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0198.943] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0198.943] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x211c6af1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x10560, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0198.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b8f0 [0198.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b620 [0198.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215b40 [0198.943] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b620 | out: hHeap=0x1f0000) returned 1 [0198.943] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cfa8 | out: hHeap=0x1f0000) returned 1 [0198.943] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b8f0 | out: hHeap=0x1f0000) returned 1 [0198.944] CreateFileW (lpFileName="C:\\\\Boot\\ko-KR\\bootmgr.exe.mui" (normalized: "c:\\boot\\ko-kr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0198.944] GetLastError () returned 0x5 [0198.944] GetLastError () returned 0x5 [0198.944] SetLastError (dwErrCode=0x5) [0198.944] GetLastError () returned 0x5 [0198.945] SetLastError (dwErrCode=0x5) [0198.945] GetLastError () returned 0x5 [0198.945] SetLastError (dwErrCode=0x5) [0198.945] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fdc0d7, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa7a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0198.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b8f0 [0198.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b620 [0198.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215f30 [0198.945] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b620 | out: hHeap=0x1f0000) returned 1 [0198.946] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215b40 | out: hHeap=0x1f0000) returned 1 [0198.946] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b8f0 | out: hHeap=0x1f0000) returned 1 [0198.946] CreateFileW (lpFileName="C:\\\\Boot\\ko-KR\\memtest.exe.mui" (normalized: "c:\\boot\\ko-kr\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0198.946] GetLastError () returned 0x5 [0198.946] GetLastError () returned 0x5 [0198.947] SetLastError (dwErrCode=0x5) [0198.947] GetLastError () returned 0x5 [0198.947] SetLastError (dwErrCode=0x5) [0198.947] GetLastError () returned 0x5 [0198.947] SetLastError (dwErrCode=0x5) [0198.947] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fdc0d7, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa7a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0198.947] FindClose (in: hFindFile=0x24ec40 | out: hFindFile=0x24ec40) returned 1 [0198.947] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215f30 | out: hHeap=0x1f0000) returned 1 [0198.948] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22eb58 | out: hHeap=0x1f0000) returned 1 [0198.948] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b9e0 | out: hHeap=0x1f0000) returned 1 [0198.948] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216170 | out: hHeap=0x1f0000) returned 1 [0198.948] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216170 [0198.948] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b8f0 [0198.948] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f350 [0198.948] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0198.948] FindFirstFileW (in: lpFileName="C:\\\\Boot\\lt-LT\\*", lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ed00 [0198.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b9e0 [0198.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf38 [0198.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b9e0 | out: hHeap=0x1f0000) returned 1 [0198.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0198.949] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0198.949] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0198.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b620 [0198.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf70 [0198.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b620 | out: hHeap=0x1f0000) returned 1 [0198.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf38 | out: hHeap=0x1f0000) returned 1 [0198.949] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0198.949] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0198.949] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2117a634, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12760, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0198.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b620 [0198.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b9e0 [0198.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215b40 [0198.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b9e0 | out: hHeap=0x1f0000) returned 1 [0198.950] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf70 | out: hHeap=0x1f0000) returned 1 [0198.950] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b620 | out: hHeap=0x1f0000) returned 1 [0198.950] CreateFileW (lpFileName="C:\\\\Boot\\lt-LT\\bootmgr.exe.mui" (normalized: "c:\\boot\\lt-lt\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0198.950] GetLastError () returned 0x5 [0198.950] GetLastError () returned 0x5 [0198.950] SetLastError (dwErrCode=0x5) [0198.950] GetLastError () returned 0x5 [0198.950] SetLastError (dwErrCode=0x5) [0198.951] GetLastError () returned 0x5 [0198.951] SetLastError (dwErrCode=0x5) [0198.951] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2117a634, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12760, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0198.951] FindClose (in: hFindFile=0x24ed00 | out: hFindFile=0x24ed00) returned 1 [0198.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215b40 | out: hHeap=0x1f0000) returned 1 [0198.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f350 | out: hHeap=0x1f0000) returned 1 [0198.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b8f0 | out: hHeap=0x1f0000) returned 1 [0198.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216170 | out: hHeap=0x1f0000) returned 1 [0198.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216170 [0198.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b620 [0198.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e360 [0198.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0198.952] FindFirstFileW (in: lpFileName="C:\\\\Boot\\lv-LV\\*", lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e980 [0198.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b8f0 [0198.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2f0 [0198.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b8f0 | out: hHeap=0x1f0000) returned 1 [0198.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0198.952] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0198.952] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0198.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b8f0 [0198.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0198.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b8f0 | out: hHeap=0x1f0000) returned 1 [0198.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0198.953] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0198.953] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0198.953] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2117a634, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12758, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0198.953] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b8f0 [0198.953] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b9e0 [0198.953] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215b40 [0198.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b9e0 | out: hHeap=0x1f0000) returned 1 [0198.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0198.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b8f0 | out: hHeap=0x1f0000) returned 1 [0198.953] CreateFileW (lpFileName="C:\\\\Boot\\lv-LV\\bootmgr.exe.mui" (normalized: "c:\\boot\\lv-lv\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0198.953] GetLastError () returned 0x5 [0198.953] GetLastError () returned 0x5 [0198.954] SetLastError (dwErrCode=0x5) [0198.954] GetLastError () returned 0x5 [0198.954] SetLastError (dwErrCode=0x5) [0198.954] GetLastError () returned 0x5 [0198.954] SetLastError (dwErrCode=0x5) [0198.954] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2117a634, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12758, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0198.954] FindClose (in: hFindFile=0x24e980 | out: hFindFile=0x24e980) returned 1 [0198.954] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215b40 | out: hHeap=0x1f0000) returned 1 [0198.954] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e360 | out: hHeap=0x1f0000) returned 1 [0198.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b620 | out: hHeap=0x1f0000) returned 1 [0198.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216170 | out: hHeap=0x1f0000) returned 1 [0198.955] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215f30 [0198.955] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b8f0 [0198.955] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22db68 [0198.955] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0198.955] FindFirstFileW (in: lpFileName="C:\\\\Boot\\nb-NO\\*", lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e138, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef62cf52, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ebc0 [0198.956] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b9e0 [0198.956] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2f0 [0198.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b9e0 | out: hHeap=0x1f0000) returned 1 [0198.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0198.956] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0198.956] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e138, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef62cf52, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0198.957] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b9e0 [0198.957] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0198.957] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b9e0 | out: hHeap=0x1f0000) returned 1 [0198.957] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0198.957] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0198.957] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0198.957] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x211543da, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12760, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0198.957] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b620 [0198.957] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b9e0 [0198.957] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215b40 [0198.957] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b9e0 | out: hHeap=0x1f0000) returned 1 [0198.957] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0198.957] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b620 | out: hHeap=0x1f0000) returned 1 [0198.958] CreateFileW (lpFileName="C:\\\\Boot\\nb-NO\\bootmgr.exe.mui" (normalized: "c:\\boot\\nb-no\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0198.958] GetLastError () returned 0x5 [0198.958] GetLastError () returned 0x5 [0198.958] SetLastError (dwErrCode=0x5) [0198.959] GetLastError () returned 0x5 [0198.959] SetLastError (dwErrCode=0x5) [0198.959] GetLastError () returned 0x5 [0198.959] SetLastError (dwErrCode=0x5) [0198.959] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef62cf52, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fb5e6c, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0198.959] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b9e0 [0198.960] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b620 [0198.960] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216170 [0198.960] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b620 | out: hHeap=0x1f0000) returned 1 [0198.960] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215b40 | out: hHeap=0x1f0000) returned 1 [0198.960] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b9e0 | out: hHeap=0x1f0000) returned 1 [0198.961] CreateFileW (lpFileName="C:\\\\Boot\\nb-NO\\memtest.exe.mui" (normalized: "c:\\boot\\nb-no\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0198.961] GetLastError () returned 0x5 [0198.961] GetLastError () returned 0x5 [0198.961] SetLastError (dwErrCode=0x5) [0198.961] GetLastError () returned 0x5 [0198.962] SetLastError (dwErrCode=0x5) [0198.962] GetLastError () returned 0x5 [0198.962] SetLastError (dwErrCode=0x5) [0198.962] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef62cf52, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fb5e6c, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0198.962] FindClose (in: hFindFile=0x24ebc0 | out: hFindFile=0x24ebc0) returned 1 [0198.963] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216170 | out: hHeap=0x1f0000) returned 1 [0198.963] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22db68 | out: hHeap=0x1f0000) returned 1 [0198.963] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b8f0 | out: hHeap=0x1f0000) returned 1 [0198.963] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215f30 | out: hHeap=0x1f0000) returned 1 [0198.963] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215f30 [0198.963] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b620 [0198.963] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f350 [0198.963] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2f0 [0198.964] FindFirstFileW (in: lpFileName="C:\\\\Boot\\nl-NL\\*", lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e4fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6407cf, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ec00 [0198.964] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b8f0 [0198.964] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0198.964] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b8f0 | out: hHeap=0x1f0000) returned 1 [0198.964] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0198.965] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0198.965] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e4fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6407cf, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0198.965] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b8f0 [0198.965] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2f0 [0198.965] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b8f0 | out: hHeap=0x1f0000) returned 1 [0198.965] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0198.965] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0198.965] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0198.965] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x211543da, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13160, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0198.966] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b8f0 [0198.966] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b9e0 [0198.966] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216170 [0198.966] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b9e0 | out: hHeap=0x1f0000) returned 1 [0198.966] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0198.966] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b8f0 | out: hHeap=0x1f0000) returned 1 [0199.314] CreateFileW (lpFileName="C:\\\\Boot\\nl-NL\\bootmgr.exe.mui" (normalized: "c:\\boot\\nl-nl\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0199.315] GetLastError () returned 0x5 [0199.315] GetLastError () returned 0x5 [0199.315] SetLastError (dwErrCode=0x5) [0199.315] GetLastError () returned 0x5 [0199.315] SetLastError (dwErrCode=0x5) [0199.315] GetLastError () returned 0x5 [0199.315] SetLastError (dwErrCode=0x5) [0199.316] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6407cf, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fb5e6c, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0199.316] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0199.316] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0199.316] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2168c0 [0199.316] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0199.316] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216170 | out: hHeap=0x1f0000) returned 1 [0199.316] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0199.316] CreateFileW (lpFileName="C:\\\\Boot\\nl-NL\\memtest.exe.mui" (normalized: "c:\\boot\\nl-nl\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0199.317] GetLastError () returned 0x5 [0199.317] GetLastError () returned 0x5 [0199.317] SetLastError (dwErrCode=0x5) [0199.317] GetLastError () returned 0x5 [0199.317] SetLastError (dwErrCode=0x5) [0199.317] GetLastError () returned 0x5 [0199.317] SetLastError (dwErrCode=0x5) [0199.317] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6407cf, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fb5e6c, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0199.317] FindClose (in: hFindFile=0x24ec00 | out: hFindFile=0x24ec00) returned 1 [0199.317] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2168c0 | out: hHeap=0x1f0000) returned 1 [0199.317] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f350 | out: hHeap=0x1f0000) returned 1 [0199.317] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b620 | out: hHeap=0x1f0000) returned 1 [0199.317] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215f30 | out: hHeap=0x1f0000) returned 1 [0199.318] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215f30 [0199.318] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0199.318] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f1b8 [0199.318] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2f0 [0199.318] FindFirstFileW (in: lpFileName="C:\\\\Boot\\pl-PL\\*", lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef65403a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ec00 [0199.318] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0199.318] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf38 [0199.318] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0199.318] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0199.318] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0199.319] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef65403a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.319] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0199.319] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf70 [0199.319] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0199.319] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf38 | out: hHeap=0x1f0000) returned 1 [0199.319] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0199.319] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0199.319] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2112e17f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f58, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0199.319] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0199.319] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0199.319] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216170 [0199.319] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0199.319] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf70 | out: hHeap=0x1f0000) returned 1 [0199.319] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0199.320] CreateFileW (lpFileName="C:\\\\Boot\\pl-PL\\bootmgr.exe.mui" (normalized: "c:\\boot\\pl-pl\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0199.320] GetLastError () returned 0x5 [0199.320] GetLastError () returned 0x5 [0199.320] SetLastError (dwErrCode=0x5) [0199.320] GetLastError () returned 0x5 [0199.320] SetLastError (dwErrCode=0x5) [0199.320] GetLastError () returned 0x5 [0199.320] SetLastError (dwErrCode=0x5) [0199.320] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0199.321] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0199.321] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0199.321] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2168c0 [0199.321] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0199.321] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216170 | out: hHeap=0x1f0000) returned 1 [0199.321] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0199.321] CreateFileW (lpFileName="C:\\\\Boot\\pl-PL\\memtest.exe.mui" (normalized: "c:\\boot\\pl-pl\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0199.322] GetLastError () returned 0x5 [0199.322] GetLastError () returned 0x5 [0199.322] SetLastError (dwErrCode=0x5) [0199.322] GetLastError () returned 0x5 [0199.323] SetLastError (dwErrCode=0x5) [0199.323] GetLastError () returned 0x5 [0199.323] SetLastError (dwErrCode=0x5) [0199.323] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0199.323] FindClose (in: hFindFile=0x24ec00 | out: hFindFile=0x24ec00) returned 1 [0199.323] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2168c0 | out: hHeap=0x1f0000) returned 1 [0199.323] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f1b8 | out: hHeap=0x1f0000) returned 1 [0199.323] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0199.324] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215f30 | out: hHeap=0x1f0000) returned 1 [0199.324] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216170 [0199.324] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0199.324] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e9c0 [0199.324] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf38 [0199.324] FindFirstFileW (in: lpFileName="C:\\\\Boot\\pt-BR\\*", lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6678d6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6678d6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e940 [0199.324] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0199.325] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2f0 [0199.325] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0199.325] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf38 | out: hHeap=0x1f0000) returned 1 [0199.325] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0199.325] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6678d6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6678d6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.325] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0199.325] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf70 [0199.325] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0199.325] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0199.325] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0199.325] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0199.325] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2112e17f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0199.325] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0199.326] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0199.326] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215f30 [0199.326] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0199.326] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf70 | out: hHeap=0x1f0000) returned 1 [0199.326] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0199.326] CreateFileW (lpFileName="C:\\\\Boot\\pt-BR\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-br\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0199.327] GetLastError () returned 0x5 [0199.327] GetLastError () returned 0x5 [0199.327] SetLastError (dwErrCode=0x5) [0199.327] GetLastError () returned 0x5 [0199.327] SetLastError (dwErrCode=0x5) [0199.327] GetLastError () returned 0x5 [0199.327] SetLastError (dwErrCode=0x5) [0199.327] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65dc94, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0199.327] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0199.327] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0199.327] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2168c0 [0199.328] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0199.328] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215f30 | out: hHeap=0x1f0000) returned 1 [0199.328] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0199.328] CreateFileW (lpFileName="C:\\\\Boot\\pt-BR\\memtest.exe.mui" (normalized: "c:\\boot\\pt-br\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0199.328] GetLastError () returned 0x5 [0199.328] GetLastError () returned 0x5 [0199.328] SetLastError (dwErrCode=0x5) [0199.328] GetLastError () returned 0x5 [0199.328] SetLastError (dwErrCode=0x5) [0199.328] GetLastError () returned 0x5 [0199.329] SetLastError (dwErrCode=0x5) [0199.329] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65dc94, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0199.329] FindClose (in: hFindFile=0x24e940 | out: hFindFile=0x24e940) returned 1 [0199.329] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2168c0 | out: hHeap=0x1f0000) returned 1 [0199.329] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e9c0 | out: hHeap=0x1f0000) returned 1 [0199.329] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0199.329] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216170 | out: hHeap=0x1f0000) returned 1 [0199.329] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215f30 [0199.329] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0199.329] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d9d0 [0199.329] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2f0 [0199.330] FindFirstFileW (in: lpFileName="C:\\\\Boot\\pt-PT\\*", lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f167, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6714dc, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e980 [0199.331] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0199.331] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf38 [0199.331] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0199.331] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0199.331] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0199.331] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f167, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6714dc, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.332] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0199.332] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf70 [0199.332] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0199.332] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf38 | out: hHeap=0x1f0000) returned 1 [0199.332] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0199.332] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0199.332] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2112e17f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0199.332] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0199.332] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0199.332] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216170 [0199.332] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0199.333] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf70 | out: hHeap=0x1f0000) returned 1 [0199.333] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0199.333] CreateFileW (lpFileName="C:\\\\Boot\\pt-PT\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-pt\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0199.333] GetLastError () returned 0x5 [0199.334] GetLastError () returned 0x5 [0199.334] SetLastError (dwErrCode=0x5) [0199.334] GetLastError () returned 0x5 [0199.334] SetLastError (dwErrCode=0x5) [0199.334] GetLastError () returned 0x5 [0199.334] SetLastError (dwErrCode=0x5) [0199.334] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6714dc, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0199.334] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0199.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0199.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2168c0 [0199.335] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0199.335] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216170 | out: hHeap=0x1f0000) returned 1 [0199.335] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0199.335] CreateFileW (lpFileName="C:\\\\Boot\\pt-PT\\memtest.exe.mui" (normalized: "c:\\boot\\pt-pt\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0199.335] GetLastError () returned 0x5 [0199.335] GetLastError () returned 0x5 [0199.336] SetLastError (dwErrCode=0x5) [0199.336] GetLastError () returned 0x5 [0199.336] SetLastError (dwErrCode=0x5) [0199.336] GetLastError () returned 0x5 [0199.336] SetLastError (dwErrCode=0x5) [0199.336] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6714dc, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0199.336] FindClose (in: hFindFile=0x24e980 | out: hFindFile=0x24e980) returned 1 [0199.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2168c0 | out: hHeap=0x1f0000) returned 1 [0199.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d9d0 | out: hHeap=0x1f0000) returned 1 [0199.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0199.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215f30 | out: hHeap=0x1f0000) returned 1 [0199.336] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215f30 [0199.336] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0199.336] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d9d0 [0199.337] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf38 [0199.337] FindFirstFileW (in: lpFileName="C:\\\\Boot\\qps-ploc\\*", lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f640, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef684d85, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e8c0 [0199.337] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf70 [0199.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf38 | out: hHeap=0x1f0000) returned 1 [0199.337] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0199.337] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f640, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef684d85, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.337] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf38 [0199.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf70 | out: hHeap=0x1f0000) returned 1 [0199.337] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0199.337] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0199.337] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12160, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0199.337] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0199.337] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf70 [0199.338] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239928 [0199.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf70 | out: hHeap=0x1f0000) returned 1 [0199.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf38 | out: hHeap=0x1f0000) returned 1 [0199.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0199.338] CreateFileW (lpFileName="C:\\\\Boot\\qps-ploc\\bootmgr.exe.mui" (normalized: "c:\\boot\\qps-ploc\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0199.339] GetLastError () returned 0x5 [0199.339] GetLastError () returned 0x5 [0199.339] SetLastError (dwErrCode=0x5) [0199.339] GetLastError () returned 0x5 [0199.339] SetLastError (dwErrCode=0x5) [0199.339] GetLastError () returned 0x5 [0199.340] SetLastError (dwErrCode=0x5) [0199.340] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef684d85, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfbd1a998, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0xd398, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0199.340] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0199.340] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf70 [0199.340] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239560 [0199.340] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf70 | out: hHeap=0x1f0000) returned 1 [0199.340] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239928 | out: hHeap=0x1f0000) returned 1 [0199.340] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0199.340] CreateFileW (lpFileName="C:\\\\Boot\\qps-ploc\\memtest.exe.mui" (normalized: "c:\\boot\\qps-ploc\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0199.341] GetLastError () returned 0x5 [0199.341] GetLastError () returned 0x5 [0199.341] SetLastError (dwErrCode=0x5) [0199.341] GetLastError () returned 0x5 [0199.341] SetLastError (dwErrCode=0x5) [0199.341] GetLastError () returned 0x5 [0199.341] SetLastError (dwErrCode=0x5) [0199.341] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef684d85, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfbd1a998, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0xd398, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0199.341] FindClose (in: hFindFile=0x24e8c0 | out: hFindFile=0x24e8c0) returned 1 [0199.343] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239560 | out: hHeap=0x1f0000) returned 1 [0199.343] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d9d0 | out: hHeap=0x1f0000) returned 1 [0199.343] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0199.343] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215f30 | out: hHeap=0x1f0000) returned 1 [0199.343] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216170 [0199.343] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0199.343] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d508 [0199.343] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf38 [0199.343] FindFirstFileW (in: lpFileName="C:\\\\Boot\\Resources\\*", lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ab61e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9abff9, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e6c0 [0199.344] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2f0 [0199.344] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf38 | out: hHeap=0x1f0000) returned 1 [0199.344] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0199.344] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ab61e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9abff9, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.344] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0199.345] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0199.345] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0199.345] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0199.345] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9abff9, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef597530, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x169a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootres.dll", cAlternateFileName="")) returned 1 [0199.345] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0199.345] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cfa8 [0199.345] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x226148 [0199.345] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cfa8 | out: hHeap=0x1f0000) returned 1 [0199.345] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0199.345] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0199.346] CreateFileW (lpFileName="C:\\\\Boot\\Resources\\bootres.dll" (normalized: "c:\\boot\\resources\\bootres.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0199.346] GetLastError () returned 0x5 [0199.346] GetLastError () returned 0x5 [0199.346] SetLastError (dwErrCode=0x5) [0199.346] GetLastError () returned 0x5 [0199.347] SetLastError (dwErrCode=0x5) [0199.347] GetLastError () returned 0x5 [0199.347] SetLastError (dwErrCode=0x5) [0199.347] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9baa67, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0199.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cfa8 [0199.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x226238 [0199.347] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cfa8 | out: hHeap=0x1f0000) returned 1 [0199.347] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226148 | out: hHeap=0x1f0000) returned 1 [0199.347] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0199.347] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0199.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204d90 [0199.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215f30 [0199.347] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9baa67, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0 [0199.348] FindClose (in: hFindFile=0x24e6c0 | out: hFindFile=0x24e6c0) returned 1 [0199.348] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2168c0 [0199.348] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0199.348] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e9c0 [0199.348] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216248 [0199.348] FindFirstFileW (in: lpFileName="C:\\\\Boot\\Resources\\en-US\\*", lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9baa67, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e740 [0199.348] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216320 [0199.349] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216248 | out: hHeap=0x1f0000) returned 1 [0199.349] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0199.349] FindNextFileW (in: hFindFile=0x24e740, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9baa67, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216248 [0199.349] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216320 | out: hHeap=0x1f0000) returned 1 [0199.349] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0199.349] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0199.349] FindNextFileW (in: hFindFile=0x24e740, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9baa67, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0x31acad58, ftLastWriteTime.dwHighDateTime=0x1d2a030, nFileSizeHigh=0x0, nFileSizeLow=0x2fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootres.dll.mui", cAlternateFileName="BOOTRE~1.MUI")) returned 1 [0199.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0199.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216320 [0199.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a90 [0199.349] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216320 | out: hHeap=0x1f0000) returned 1 [0199.349] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216248 | out: hHeap=0x1f0000) returned 1 [0199.349] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0199.350] CreateFileW (lpFileName="C:\\\\Boot\\Resources\\en-US\\bootres.dll.mui" (normalized: "c:\\boot\\resources\\en-us\\bootres.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe658, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0199.350] GetLastError () returned 0x5 [0199.350] GetLastError () returned 0x5 [0199.350] SetLastError (dwErrCode=0x5) [0199.350] GetLastError () returned 0x5 [0199.350] SetLastError (dwErrCode=0x5) [0199.350] GetLastError () returned 0x5 [0199.351] SetLastError (dwErrCode=0x5) [0199.351] FindNextFileW (in: hFindFile=0x24e740, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9baa67, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0x31acad58, ftLastWriteTime.dwHighDateTime=0x1d2a030, nFileSizeHigh=0x0, nFileSizeLow=0x2fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootres.dll.mui", cAlternateFileName="BOOTRE~1.MUI")) returned 0 [0199.351] FindClose (in: hFindFile=0x24e740 | out: hFindFile=0x24e740) returned 1 [0199.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a90 | out: hHeap=0x1f0000) returned 1 [0199.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e9c0 | out: hHeap=0x1f0000) returned 1 [0199.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0199.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2168c0 | out: hHeap=0x1f0000) returned 1 [0199.352] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226238 | out: hHeap=0x1f0000) returned 1 [0199.352] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215f30 | out: hHeap=0x1f0000) returned 1 [0199.352] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d90 | out: hHeap=0x1f0000) returned 1 [0199.352] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d508 | out: hHeap=0x1f0000) returned 1 [0199.352] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0199.352] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216170 | out: hHeap=0x1f0000) returned 1 [0199.352] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216170 [0199.352] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0199.352] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e9c0 [0199.352] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf38 [0199.352] FindFirstFileW (in: lpFileName="C:\\\\Boot\\ro-RO\\*", lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e900 [0199.353] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0199.353] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf70 [0199.353] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0199.353] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf38 | out: hHeap=0x1f0000) returned 1 [0199.353] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0199.353] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.353] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0199.353] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf38 [0199.353] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0199.353] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf70 | out: hHeap=0x1f0000) returned 1 [0199.353] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0199.354] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0199.354] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12960, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0199.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0199.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0199.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215f30 [0199.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0199.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf38 | out: hHeap=0x1f0000) returned 1 [0199.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0199.355] CreateFileW (lpFileName="C:\\\\Boot\\ro-RO\\bootmgr.exe.mui" (normalized: "c:\\boot\\ro-ro\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0199.355] GetLastError () returned 0x5 [0199.355] GetLastError () returned 0x5 [0199.355] SetLastError (dwErrCode=0x5) [0199.355] GetLastError () returned 0x5 [0199.355] SetLastError (dwErrCode=0x5) [0199.355] GetLastError () returned 0x5 [0199.355] SetLastError (dwErrCode=0x5) [0199.356] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12960, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0199.356] FindClose (in: hFindFile=0x24e900 | out: hFindFile=0x24e900) returned 1 [0199.356] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215f30 | out: hHeap=0x1f0000) returned 1 [0199.356] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e9c0 | out: hHeap=0x1f0000) returned 1 [0199.356] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0199.356] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216170 | out: hHeap=0x1f0000) returned 1 [0199.356] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215f30 [0199.356] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0199.357] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e9c0 [0199.357] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf38 [0199.357] FindFirstFileW (in: lpFileName="C:\\\\Boot\\ru-RU\\*", lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef698608, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e600 [0199.624] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0199.624] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0199.624] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0199.624] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf38 | out: hHeap=0x1f0000) returned 1 [0199.625] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0199.625] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef698608, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.625] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604c8 [0199.625] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1ff058 [0199.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604c8 | out: hHeap=0x1f0000) returned 1 [0199.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0199.625] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0199.625] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0199.625] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0199.626] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604c8 [0199.626] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608b0 [0199.626] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234668 [0199.626] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608b0 | out: hHeap=0x1f0000) returned 1 [0199.626] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1ff058 | out: hHeap=0x1f0000) returned 1 [0199.626] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604c8 | out: hHeap=0x1f0000) returned 1 [0199.627] CreateFileW (lpFileName="C:\\\\Boot\\ru-RU\\bootmgr.exe.mui" (normalized: "c:\\boot\\ru-ru\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0199.627] GetLastError () returned 0x5 [0199.627] GetLastError () returned 0x5 [0199.627] SetLastError (dwErrCode=0x5) [0199.627] GetLastError () returned 0x5 [0199.628] SetLastError (dwErrCode=0x5) [0199.628] GetLastError () returned 0x5 [0199.628] SetLastError (dwErrCode=0x5) [0199.628] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f699a6, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xafa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0199.628] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604c8 [0199.628] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260540 [0199.628] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234a58 [0199.629] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0199.629] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234668 | out: hHeap=0x1f0000) returned 1 [0199.629] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604c8 | out: hHeap=0x1f0000) returned 1 [0199.629] CreateFileW (lpFileName="C:\\\\Boot\\ru-RU\\memtest.exe.mui" (normalized: "c:\\boot\\ru-ru\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0199.630] GetLastError () returned 0x5 [0199.630] GetLastError () returned 0x5 [0199.630] SetLastError (dwErrCode=0x5) [0199.630] GetLastError () returned 0x5 [0199.630] SetLastError (dwErrCode=0x5) [0199.631] GetLastError () returned 0x5 [0199.631] SetLastError (dwErrCode=0x5) [0199.631] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f699a6, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xafa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0199.631] FindClose (in: hFindFile=0x24e600 | out: hFindFile=0x24e600) returned 1 [0199.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234a58 | out: hHeap=0x1f0000) returned 1 [0199.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e9c0 | out: hHeap=0x1f0000) returned 1 [0199.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0199.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215f30 | out: hHeap=0x1f0000) returned 1 [0199.632] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2348f0 [0199.632] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608b0 [0199.632] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22dd00 [0199.632] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0199.633] FindFirstFileW (in: lpFileName="C:\\\\Boot\\sk-SK\\*", lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e980 [0199.633] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0199.633] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1ff058 [0199.633] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0199.633] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0199.633] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0199.633] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.633] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0199.633] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0199.633] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0199.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1ff058 | out: hHeap=0x1f0000) returned 1 [0199.634] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0199.634] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0199.634] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0199.634] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0199.634] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260798 [0199.634] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234a58 [0199.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260798 | out: hHeap=0x1f0000) returned 1 [0199.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0199.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0199.635] CreateFileW (lpFileName="C:\\\\Boot\\sk-SK\\bootmgr.exe.mui" (normalized: "c:\\boot\\sk-sk\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0199.636] GetLastError () returned 0x5 [0199.636] GetLastError () returned 0x5 [0199.636] SetLastError (dwErrCode=0x5) [0199.636] GetLastError () returned 0x5 [0199.636] SetLastError (dwErrCode=0x5) [0199.636] GetLastError () returned 0x5 [0199.636] SetLastError (dwErrCode=0x5) [0199.636] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0199.637] FindClose (in: hFindFile=0x24e980 | out: hFindFile=0x24e980) returned 1 [0199.637] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234a58 | out: hHeap=0x1f0000) returned 1 [0199.637] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22dd00 | out: hHeap=0x1f0000) returned 1 [0199.637] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608b0 | out: hHeap=0x1f0000) returned 1 [0199.637] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2348f0 | out: hHeap=0x1f0000) returned 1 [0199.637] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2348a8 [0199.637] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260798 [0199.638] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e1c8 [0199.638] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0199.638] FindFirstFileW (in: lpFileName="C:\\\\Boot\\sl-SI\\*", lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e6c0 [0199.638] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604c8 [0199.638] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1ff058 [0199.638] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604c8 | out: hHeap=0x1f0000) returned 1 [0199.638] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0199.639] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0199.639] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.639] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260680 [0199.639] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0199.639] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260680 | out: hHeap=0x1f0000) returned 1 [0199.639] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1ff058 | out: hHeap=0x1f0000) returned 1 [0199.639] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0199.639] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0199.639] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0199.639] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0199.639] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260540 [0199.640] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234a58 [0199.640] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0199.640] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0199.640] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0199.640] CreateFileW (lpFileName="C:\\\\Boot\\sl-SI\\bootmgr.exe.mui" (normalized: "c:\\boot\\sl-si\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0199.640] GetLastError () returned 0x5 [0199.640] GetLastError () returned 0x5 [0199.640] SetLastError (dwErrCode=0x5) [0199.640] GetLastError () returned 0x5 [0199.641] SetLastError (dwErrCode=0x5) [0199.641] GetLastError () returned 0x5 [0199.641] SetLastError (dwErrCode=0x5) [0199.641] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0199.641] FindClose (in: hFindFile=0x24e6c0 | out: hFindFile=0x24e6c0) returned 1 [0199.641] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234a58 | out: hHeap=0x1f0000) returned 1 [0199.641] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e1c8 | out: hHeap=0x1f0000) returned 1 [0199.641] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260798 | out: hHeap=0x1f0000) returned 1 [0199.642] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2348a8 | out: hHeap=0x1f0000) returned 1 [0199.642] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2347d0 [0199.642] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604c8 [0199.642] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22eb58 [0199.642] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0199.642] FindFirstFileW (in: lpFileName="C:\\\\Boot\\sr-Latn-CS\\*", lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0x5168548b, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e8c0 [0199.642] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1ff058 [0199.642] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0199.643] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0199.643] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0x5168548b, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.643] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0199.643] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1ff058 | out: hHeap=0x1f0000) returned 1 [0199.643] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0199.643] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0199.643] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21212f9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0199.643] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0199.643] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1ff058 [0199.643] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2397c8 [0199.643] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1ff058 | out: hHeap=0x1f0000) returned 1 [0199.643] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0199.643] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0199.644] CreateFileW (lpFileName="C:\\\\Boot\\sr-Latn-CS\\bootmgr.exe.mui" (normalized: "c:\\boot\\sr-latn-cs\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0199.645] GetLastError () returned 0x5 [0199.645] GetLastError () returned 0x5 [0199.645] SetLastError (dwErrCode=0x5) [0199.645] GetLastError () returned 0x5 [0199.645] SetLastError (dwErrCode=0x5) [0199.645] GetLastError () returned 0x5 [0199.645] SetLastError (dwErrCode=0x5) [0199.646] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0xe318f070, ftLastWriteTime.dwHighDateTime=0x1d112e1, nFileSizeHigh=0x0, nFileSizeLow=0xaf58, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0199.646] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260798 [0199.646] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0199.646] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239400 [0199.646] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0199.646] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2397c8 | out: hHeap=0x1f0000) returned 1 [0199.646] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260798 | out: hHeap=0x1f0000) returned 1 [0199.646] CreateFileW (lpFileName="C:\\\\Boot\\sr-Latn-CS\\memtest.exe.mui" (normalized: "c:\\boot\\sr-latn-cs\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0199.647] GetLastError () returned 0x5 [0199.647] GetLastError () returned 0x5 [0199.647] SetLastError (dwErrCode=0x5) [0199.647] GetLastError () returned 0x5 [0199.647] SetLastError (dwErrCode=0x5) [0199.647] GetLastError () returned 0x5 [0199.647] SetLastError (dwErrCode=0x5) [0199.647] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0xe318f070, ftLastWriteTime.dwHighDateTime=0x1d112e1, nFileSizeHigh=0x0, nFileSizeLow=0xaf58, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0199.647] FindClose (in: hFindFile=0x24e8c0 | out: hFindFile=0x24e8c0) returned 1 [0199.647] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239400 | out: hHeap=0x1f0000) returned 1 [0199.648] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22eb58 | out: hHeap=0x1f0000) returned 1 [0199.648] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604c8 | out: hHeap=0x1f0000) returned 1 [0199.648] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2347d0 | out: hHeap=0x1f0000) returned 1 [0199.648] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234a58 [0199.648] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608b0 [0199.648] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22eb58 [0199.648] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0199.648] FindFirstFileW (in: lpFileName="C:\\\\Boot\\sr-Latn-RS\\*", lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ec40 [0199.648] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1ff058 [0199.649] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0199.649] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0199.649] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.649] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0199.649] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1ff058 | out: hHeap=0x1f0000) returned 1 [0199.649] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0199.649] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0199.649] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21212f9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0199.649] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0199.649] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1ff058 [0199.649] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239508 [0199.649] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1ff058 | out: hHeap=0x1f0000) returned 1 [0199.649] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0199.649] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0199.650] CreateFileW (lpFileName="C:\\\\Boot\\sr-Latn-RS\\bootmgr.exe.mui" (normalized: "c:\\boot\\sr-latn-rs\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0199.650] GetLastError () returned 0x5 [0199.650] GetLastError () returned 0x5 [0199.650] SetLastError (dwErrCode=0x5) [0199.650] GetLastError () returned 0x5 [0199.650] SetLastError (dwErrCode=0x5) [0199.650] GetLastError () returned 0x5 [0199.650] SetLastError (dwErrCode=0x5) [0199.651] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21212f9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0199.651] FindClose (in: hFindFile=0x24ec40 | out: hFindFile=0x24ec40) returned 1 [0199.651] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239508 | out: hHeap=0x1f0000) returned 1 [0199.651] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22eb58 | out: hHeap=0x1f0000) returned 1 [0199.651] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608b0 | out: hHeap=0x1f0000) returned 1 [0199.651] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234a58 | out: hHeap=0x1f0000) returned 1 [0199.651] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2347d0 [0199.651] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260540 [0199.651] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e9c0 [0199.651] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0199.651] FindFirstFileW (in: lpFileName="C:\\\\Boot\\sv-SE\\*", lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01adf43, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6a2250, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ecc0 [0199.653] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604c8 [0199.653] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1ff058 [0199.653] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604c8 | out: hHeap=0x1f0000) returned 1 [0199.653] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0199.653] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0199.653] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01adf43, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6a2250, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.653] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604c8 [0199.653] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0199.654] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604c8 | out: hHeap=0x1f0000) returned 1 [0199.654] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1ff058 | out: hHeap=0x1f0000) returned 1 [0199.654] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0199.654] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0199.654] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12960, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0199.654] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0199.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0199.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234ae8 [0199.655] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0199.655] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0199.655] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0199.655] CreateFileW (lpFileName="C:\\\\Boot\\sv-SE\\bootmgr.exe.mui" (normalized: "c:\\boot\\sv-se\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0199.656] GetLastError () returned 0x5 [0199.656] GetLastError () returned 0x5 [0199.656] SetLastError (dwErrCode=0x5) [0199.656] GetLastError () returned 0x5 [0199.656] SetLastError (dwErrCode=0x5) [0199.656] GetLastError () returned 0x5 [0199.656] SetLastError (dwErrCode=0x5) [0199.656] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6a2250, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f699a6, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xaf98, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0199.657] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0199.657] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0199.657] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234620 [0199.657] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0199.657] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234ae8 | out: hHeap=0x1f0000) returned 1 [0199.657] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0199.658] CreateFileW (lpFileName="C:\\\\Boot\\sv-SE\\memtest.exe.mui" (normalized: "c:\\boot\\sv-se\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0199.658] GetLastError () returned 0x5 [0199.658] GetLastError () returned 0x5 [0199.658] SetLastError (dwErrCode=0x5) [0199.658] GetLastError () returned 0x5 [0199.658] SetLastError (dwErrCode=0x5) [0199.658] GetLastError () returned 0x5 [0199.659] SetLastError (dwErrCode=0x5) [0199.659] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6a2250, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f699a6, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xaf98, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0199.659] FindClose (in: hFindFile=0x24ecc0 | out: hFindFile=0x24ecc0) returned 1 [0199.659] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234620 | out: hHeap=0x1f0000) returned 1 [0199.659] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e9c0 | out: hHeap=0x1f0000) returned 1 [0199.659] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0199.660] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2347d0 | out: hHeap=0x1f0000) returned 1 [0199.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234500 [0199.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260798 [0199.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e9c0 [0199.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1ff058 [0199.660] FindFirstFileW (in: lpFileName="C:\\\\Boot\\tr-TR\\*", lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206504, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6b5aca, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24eb00 [0199.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608b0 [0199.661] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0199.661] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608b0 | out: hHeap=0x1f0000) returned 1 [0199.661] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1ff058 | out: hHeap=0x1f0000) returned 1 [0199.661] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0199.661] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206504, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6b5aca, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.661] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608b0 [0199.661] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1ff058 [0199.661] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608b0 | out: hHeap=0x1f0000) returned 1 [0199.661] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0199.661] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0199.662] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0199.662] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210e1cce, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12558, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0199.662] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0199.662] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260540 [0199.662] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2348f0 [0199.662] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0199.662] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1ff058 | out: hHeap=0x1f0000) returned 1 [0199.662] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0199.663] CreateFileW (lpFileName="C:\\\\Boot\\tr-TR\\bootmgr.exe.mui" (normalized: "c:\\boot\\tr-tr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0199.967] GetLastError () returned 0x5 [0199.967] GetLastError () returned 0x5 [0199.967] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6b5aca, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f4373a, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0199.967] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0199.968] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0199.968] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234620 [0199.968] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0199.968] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2348f0 | out: hHeap=0x1f0000) returned 1 [0199.968] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0199.968] CreateFileW (lpFileName="C:\\\\Boot\\tr-TR\\memtest.exe.mui" (normalized: "c:\\boot\\tr-tr\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0199.969] GetLastError () returned 0x5 [0199.969] GetLastError () returned 0x5 [0199.969] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6b5aca, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f4373a, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0199.969] FindClose (in: hFindFile=0x24eb00 | out: hFindFile=0x24eb00) returned 1 [0199.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234620 | out: hHeap=0x1f0000) returned 1 [0199.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e9c0 | out: hHeap=0x1f0000) returned 1 [0199.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260798 | out: hHeap=0x1f0000) returned 1 [0199.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234500 | out: hHeap=0x1f0000) returned 1 [0199.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234ae8 [0199.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0199.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f1b8 [0199.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228230 [0199.970] FindFirstFileW (in: lpFileName="C:\\\\Boot\\uk-UA\\*", lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206a30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ebc0 [0199.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0199.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0199.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0199.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228230 | out: hHeap=0x1f0000) returned 1 [0199.970] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0199.970] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206a30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.971] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260630 [0199.971] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0199.971] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260630 | out: hHeap=0x1f0000) returned 1 [0199.971] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0199.971] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0199.971] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0199.971] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210e1cce, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0199.971] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0199.971] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0199.971] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234b30 [0199.971] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0199.971] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0199.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0199.972] CreateFileW (lpFileName="C:\\\\Boot\\uk-UA\\bootmgr.exe.mui" (normalized: "c:\\boot\\uk-ua\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0199.972] GetLastError () returned 0x5 [0199.972] GetLastError () returned 0x5 [0199.973] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210e1cce, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0199.973] FindClose (in: hFindFile=0x24ebc0 | out: hFindFile=0x24ebc0) returned 1 [0199.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b30 | out: hHeap=0x1f0000) returned 1 [0199.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f1b8 | out: hHeap=0x1f0000) returned 1 [0199.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0199.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234ae8 | out: hHeap=0x1f0000) returned 1 [0199.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2347d0 [0199.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0199.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f1b8 [0199.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228230 [0199.974] FindFirstFileW (in: lpFileName="C:\\\\Boot\\zh-CN\\*", lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207100, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6d7e9a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ea00 [0199.975] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0199.975] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0199.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0199.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228230 | out: hHeap=0x1f0000) returned 1 [0199.975] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0199.975] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207100, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6d7e9a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.975] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0199.975] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228230 [0199.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0199.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0199.976] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0199.976] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0199.976] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xf960, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0199.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0199.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0199.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234740 [0199.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0199.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228230 | out: hHeap=0x1f0000) returned 1 [0199.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0199.977] CreateFileW (lpFileName="C:\\\\Boot\\zh-CN\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-cn\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0199.977] GetLastError () returned 0x5 [0199.977] GetLastError () returned 0x5 [0199.977] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6d7e9a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa5a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0199.977] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0199.977] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0199.977] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234620 [0199.977] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0199.977] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234740 | out: hHeap=0x1f0000) returned 1 [0199.977] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0199.978] CreateFileW (lpFileName="C:\\\\Boot\\zh-CN\\memtest.exe.mui" (normalized: "c:\\boot\\zh-cn\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0199.978] GetLastError () returned 0x5 [0199.978] GetLastError () returned 0x5 [0199.978] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6d7e9a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa5a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0199.978] FindClose (in: hFindFile=0x24ea00 | out: hFindFile=0x24ea00) returned 1 [0199.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234620 | out: hHeap=0x1f0000) returned 1 [0199.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f1b8 | out: hHeap=0x1f0000) returned 1 [0199.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0199.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2347d0 | out: hHeap=0x1f0000) returned 1 [0199.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2348f0 [0199.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0199.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f1b8 [0199.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0199.979] FindFirstFileW (in: lpFileName="C:\\\\Boot\\zh-HK\\*", lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207675, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x518ea25e, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24eb40 [0199.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0199.980] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228230 [0199.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0199.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0199.980] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0199.980] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207675, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x518ea25e, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.980] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0199.980] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0199.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0199.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228230 | out: hHeap=0x1f0000) returned 1 [0199.980] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0199.980] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0199.980] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xf958, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0199.981] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0199.981] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260630 [0199.981] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234ae8 [0199.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260630 | out: hHeap=0x1f0000) returned 1 [0199.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0199.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0199.981] CreateFileW (lpFileName="C:\\\\Boot\\zh-HK\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-hk\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0199.983] GetLastError () returned 0x5 [0199.983] GetLastError () returned 0x5 [0199.983] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x518ea25e, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0xe31db522, ftLastWriteTime.dwHighDateTime=0x1d112e1, nFileSizeHigh=0x0, nFileSizeLow=0xa558, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0199.983] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0199.983] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0199.983] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234788 [0199.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0199.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234ae8 | out: hHeap=0x1f0000) returned 1 [0199.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0199.984] CreateFileW (lpFileName="C:\\\\Boot\\zh-HK\\memtest.exe.mui" (normalized: "c:\\boot\\zh-hk\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0199.984] GetLastError () returned 0x5 [0199.984] GetLastError () returned 0x5 [0199.984] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x518ea25e, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0xe31db522, ftLastWriteTime.dwHighDateTime=0x1d112e1, nFileSizeHigh=0x0, nFileSizeLow=0xa558, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0199.984] FindClose (in: hFindFile=0x24eb40 | out: hFindFile=0x24eb40) returned 1 [0199.984] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234788 | out: hHeap=0x1f0000) returned 1 [0199.984] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f1b8 | out: hHeap=0x1f0000) returned 1 [0199.984] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0199.984] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2348f0 | out: hHeap=0x1f0000) returned 1 [0199.984] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234ae8 [0199.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0199.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f1b8 [0199.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228230 [0199.985] FindFirstFileW (in: lpFileName="C:\\\\Boot\\zh-TW\\*", lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e7c0 [0199.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0199.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0199.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0199.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228230 | out: hHeap=0x1f0000) returned 1 [0199.986] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0199.986] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.986] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0199.986] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0199.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0199.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0199.986] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0199.986] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0199.986] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xf960, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0199.986] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0199.986] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260630 [0199.986] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234620 [0199.987] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260630 | out: hHeap=0x1f0000) returned 1 [0199.987] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0199.987] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0199.987] CreateFileW (lpFileName="C:\\\\Boot\\zh-TW\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-tw\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0199.987] GetLastError () returned 0x5 [0199.988] GetLastError () returned 0x5 [0199.988] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa598, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0199.988] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0199.988] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260630 [0199.988] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2348f0 [0199.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260630 | out: hHeap=0x1f0000) returned 1 [0199.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234620 | out: hHeap=0x1f0000) returned 1 [0199.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0199.989] CreateFileW (lpFileName="C:\\\\Boot\\zh-TW\\memtest.exe.mui" (normalized: "c:\\boot\\zh-tw\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0199.989] GetLastError () returned 0x5 [0199.989] GetLastError () returned 0x5 [0199.989] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa598, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0199.989] FindClose (in: hFindFile=0x24e7c0 | out: hFindFile=0x24e7c0) returned 1 [0199.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2348f0 | out: hHeap=0x1f0000) returned 1 [0199.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f1b8 | out: hHeap=0x1f0000) returned 1 [0199.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0199.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234ae8 | out: hHeap=0x1f0000) returned 1 [0199.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238730 | out: hHeap=0x1f0000) returned 1 [0199.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0199.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0199.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0199.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0199.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380c8 | out: hHeap=0x1f0000) returned 1 [0199.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0199.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0199.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238348 | out: hHeap=0x1f0000) returned 1 [0199.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380f0 | out: hHeap=0x1f0000) returned 1 [0199.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0199.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0199.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0199.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0199.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238438 | out: hHeap=0x1f0000) returned 1 [0199.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238460 | out: hHeap=0x1f0000) returned 1 [0199.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0199.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0199.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238258 | out: hHeap=0x1f0000) returned 1 [0199.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238488 | out: hHeap=0x1f0000) returned 1 [0199.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0199.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0199.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238500 | out: hHeap=0x1f0000) returned 1 [0199.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385c8 | out: hHeap=0x1f0000) returned 1 [0199.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238780 | out: hHeap=0x1f0000) returned 1 [0199.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384d8 | out: hHeap=0x1f0000) returned 1 [0199.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238618 | out: hHeap=0x1f0000) returned 1 [0199.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228150 | out: hHeap=0x1f0000) returned 1 [0199.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227fc8 | out: hHeap=0x1f0000) returned 1 [0199.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238528 | out: hHeap=0x1f0000) returned 1 [0199.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238668 | out: hHeap=0x1f0000) returned 1 [0199.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2386b8 | out: hHeap=0x1f0000) returned 1 [0199.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238550 | out: hHeap=0x1f0000) returned 1 [0199.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228310 | out: hHeap=0x1f0000) returned 1 [0199.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282d8 | out: hHeap=0x1f0000) returned 1 [0199.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385a0 | out: hHeap=0x1f0000) returned 1 [0199.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238640 | out: hHeap=0x1f0000) returned 1 [0199.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2386e0 | out: hHeap=0x1f0000) returned 1 [0199.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385f0 | out: hHeap=0x1f0000) returned 1 [0199.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238708 | out: hHeap=0x1f0000) returned 1 [0199.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238578 | out: hHeap=0x1f0000) returned 1 [0199.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2359c0 | out: hHeap=0x1f0000) returned 1 [0199.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ee88 | out: hHeap=0x1f0000) returned 1 [0199.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0199.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216200 | out: hHeap=0x1f0000) returned 1 [0199.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234620 [0199.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260798 [0199.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22dd00 [0199.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234500 [0199.993] FindFirstFileW (in: lpFileName="C:\\\\Documents and Settings\\*", lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="?\"Ǐⷾ眽Ə")) returned 0xffffffff [0199.995] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x23fdd8 [0199.995] GetLastError () returned 0x5 [0199.995] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x1cfedb8 | out: lpMode=0x1cfedb8) returned 0 [0199.996] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="畦正", cchWideChar=2, lpMultiByteStr=0x1cfd9a8, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ç\x95¦æ­£", lpUsedDefaultChar=0x0) returned 6 [0199.996] WriteFile (in: hFile=0x90, lpBuffer=0x1cfd9a8, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x1cfd9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x1cfd9a0, lpOverlapped=0x0) returned 0 [0199.996] GetLastError () returned 0x6 [0199.996] GetLastError () returned 0x6 [0199.996] lstrcmpW (lpString1="zh-TW", lpString2=".") returned 1 [0199.996] lstrcmpW (lpString1="zh-TW", lpString2="..") returned 1 [0199.997] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x205290 [0199.997] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2399d8 [0199.997] FindNextFileW (in: hFindFile=0xffffffff, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="?\"Ǐⷾ眽Ə")) returned 0 [0199.997] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0199.997] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2348a8 [0199.997] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0199.997] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e1c8 [0199.997] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239458 [0199.997] FindFirstFileW (in: lpFileName="C:\\\\Documents and Settings\\zh-TW\\*", lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x7726971a, ftCreationTime.dwLowDateTime=0x224ff8, ftCreationTime.dwHighDateTime=0x224ed8, ftLastAccessTime.dwLowDateTime=0x7726964e, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x3c003c, nFileSizeHigh=0x234548, nFileSizeLow=0x20002, dwReserved0=0x234584, dwReserved1=0x3a0038, cFileName="䔀#Ǐest.", cAlternateFileName="Ɛ")) returned 0xffffffff [0199.998] GetLastError () returned 0x3 [0199.998] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x1cfe99c | out: lpMode=0x1cfe99c) returned 0 [0199.998] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="畦正res.dll.mui", cchWideChar=2, lpMultiByteStr=0x1cfd58c, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ç\x95¦æ­£", lpUsedDefaultChar=0x0) returned 6 [0199.998] WriteFile (in: hFile=0x90, lpBuffer=0x1cfd58c, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x1cfd584, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x1cfd584, lpOverlapped=0x0) returned 0 [0199.998] GetLastError () returned 0x6 [0199.998] GetLastError () returned 0x6 [0199.999] lstrcmpW (lpString1="䔀#Ǐest.", lpString2=".") returned 1 [0199.999] lstrcmpW (lpString1="䔀#Ǐest.", lpString2="..") returned 1 [0199.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x2052d0 [0199.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d68 [0199.999] FindNextFileW (in: hFindFile=0xffffffff, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x7726971a, ftCreationTime.dwLowDateTime=0x224ff8, ftCreationTime.dwHighDateTime=0x224ed8, ftLastAccessTime.dwLowDateTime=0x7726964e, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x3c003c, nFileSizeHigh=0x234548, nFileSizeLow=0x20002, dwReserved0=0x234584, dwReserved1=0x3a0038, cFileName="䔀#Ǐest.", cAlternateFileName="Ɛ")) returned 0 [0199.999] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0199.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234668 [0199.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260630 [0199.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f1b8 [0199.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x215040 [0199.999] FindFirstFileW (in: lpFileName="C:\\\\Documents and Settings\\zh-TW\\䔀#Ǐest.\\*", lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0xc000003a, ftCreationTime.dwLowDateTime=0x7726971a, ftCreationTime.dwHighDateTime=0x2052a8, ftLastAccessTime.dwLowDateTime=0x205290, ftLastAccessTime.dwHighDateTime=0x7726964e, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x480048, nFileSizeLow=0x239ae0, dwReserved0=0x20002, dwReserved1=0x239b28, cFileName="DF鑘#Ǐ\x03", cAlternateFileName="\"Ǐⷾ眽Ə")) returned 0xffffffff [0200.000] GetLastError () returned 0x3 [0200.000] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x1cfe580 | out: lpMode=0x1cfe580) returned 0 [0200.000] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="畦正", cchWideChar=2, lpMultiByteStr=0x1cfd170, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ç\x95¦æ­£", lpUsedDefaultChar=0x0) returned 6 [0200.000] WriteFile (in: hFile=0x90, lpBuffer=0x1cfd170, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x1cfd168, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x1cfd168, lpOverlapped=0x0) returned 0 [0200.000] GetLastError () returned 0x6 [0200.000] GetLastError () returned 0x6 [0200.000] lstrcmpW (lpString1="DF鑘#Ǐ\x03", lpString2=".") returned 1 [0200.000] lstrcmpW (lpString1="DF鑘#Ǐ\x03", lpString2="..") returned 1 [0200.000] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x205130 [0200.000] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22add8 [0200.000] FindNextFileW (in: hFindFile=0xffffffff, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0xc000003a, ftCreationTime.dwLowDateTime=0x7726971a, ftCreationTime.dwHighDateTime=0x2052a8, ftLastAccessTime.dwLowDateTime=0x205290, ftLastAccessTime.dwHighDateTime=0x7726964e, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x480048, nFileSizeLow=0x239ae0, dwReserved0=0x20002, dwReserved1=0x239b28, cFileName="DF鑘#Ǐ\x03", cAlternateFileName="\"Ǐⷾ眽Ə")) returned 0 [0200.001] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0200.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2348f0 [0200.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0200.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f350 [0200.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22abf8 [0200.001] FindFirstFileW (in: lpFileName="C:\\\\Documents and Settings\\zh-TW\\䔀#Ǐest.\\DF鑘#Ǐ\x03\\*", lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x7726971a, ftCreationTime.dwLowDateTime=0x2052e8, ftCreationTime.dwHighDateTime=0x2052d0, ftLastAccessTime.dwLowDateTime=0x7726964e, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x580058, nFileSizeHigh=0x214958, nFileSizeLow=0x20002, dwReserved0=0x2149b0, dwReserved1=0x580056, cFileName="偀!Ǐ", cAlternateFileName="Ɛ")) returned 0xffffffff [0200.001] GetLastError () returned 0x3 [0200.001] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x1cfe164 | out: lpMode=0x1cfe164) returned 0 [0200.002] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="畦正", cchWideChar=2, lpMultiByteStr=0x1cfcd54, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ç\x95¦æ­£", lpUsedDefaultChar=0x0) returned 6 [0200.002] WriteFile (in: hFile=0x90, lpBuffer=0x1cfcd54, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x1cfcd4c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x1cfcd4c, lpOverlapped=0x0) returned 0 [0200.002] GetLastError () returned 0x6 [0200.002] GetLastError () returned 0x6 [0200.002] lstrcmpW (lpString1="偀!Ǐ", lpString2=".") returned 1 [0200.002] lstrcmpW (lpString1="偀!Ǐ", lpString2="..") returned 1 [0200.002] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x2051f0 [0200.003] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ae50 [0200.003] FindNextFileW (in: hFindFile=0xffffffff, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x7726971a, ftCreationTime.dwLowDateTime=0x2052e8, ftCreationTime.dwHighDateTime=0x2052d0, ftLastAccessTime.dwLowDateTime=0x7726964e, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x580058, nFileSizeHigh=0x214958, nFileSizeLow=0x20002, dwReserved0=0x2149b0, dwReserved1=0x580056, cFileName="偀!Ǐ", cAlternateFileName="Ɛ")) returned 0 [0200.003] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0200.003] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234ae8 [0200.003] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0200.003] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d508 [0200.003] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a578 [0200.003] FindFirstFileW (in: lpFileName="C:\\\\Documents and Settings\\zh-TW\\䔀#Ǐest.\\DF鑘#Ǐ\x03\\偀!Ǐ\\*", lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0xc000003a, ftCreationTime.dwLowDateTime=0x7726971a, ftCreationTime.dwHighDateTime=0x205148, ftLastAccessTime.dwLowDateTime=0x205130, ftLastAccessTime.dwHighDateTime=0x7726964e, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x680068, nFileSizeLow=0x22ad60, dwReserved0=0x20002, dwReserved1=0x22adc8, cFileName="fh꯸\"Ǐ", cAlternateFileName="픈\"Ǐⷾ眽Ə")) returned 0xffffffff [0200.004] GetLastError () returned 0x3 [0200.004] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x1cfdd48 | out: lpMode=0x1cfdd48) returned 0 [0200.004] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="畦正", cchWideChar=2, lpMultiByteStr=0x1cfc938, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ç\x95¦æ­£", lpUsedDefaultChar=0x0) returned 6 [0200.004] WriteFile (in: hFile=0x90, lpBuffer=0x1cfc938, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x1cfc930, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x1cfc930, lpOverlapped=0x0) returned 0 [0200.004] GetLastError () returned 0x6 [0200.004] GetLastError () returned 0x6 [0200.004] lstrcmpW (lpString1="fh꯸\"Ǐ", lpString2=".") returned 1 [0200.004] lstrcmpW (lpString1="fh꯸\"Ǐ", lpString2="..") returned 1 [0200.004] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x205150 [0200.004] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229a50 [0200.004] FindNextFileW (in: hFindFile=0xffffffff, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0xc000003a, ftCreationTime.dwLowDateTime=0x7726971a, ftCreationTime.dwHighDateTime=0x205148, ftLastAccessTime.dwLowDateTime=0x205130, ftLastAccessTime.dwHighDateTime=0x7726964e, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x680068, nFileSizeLow=0x22ad60, dwReserved0=0x20002, dwReserved1=0x22adc8, cFileName="fh꯸\"Ǐ", cAlternateFileName="픈\"Ǐⷾ眽Ə")) returned 0 [0200.004] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0200.004] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234b30 [0200.005] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0200.005] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e360 [0200.005] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229830 [0200.005] FindFirstFileW (in: lpFileName="C:\\\\Documents and Settings\\zh-TW\\䔀#Ǐest.\\DF鑘#Ǐ\x03\\偀!Ǐ\\fh꯸\"Ǐ\\*", lpFindFileData=0x1cfdc3c | out: lpFindFileData=0x1cfdc3c*(dwFileAttributes=0x7726971a, ftCreationTime.dwLowDateTime=0x205208, ftCreationTime.dwHighDateTime=0x2051f0, ftLastAccessTime.dwLowDateTime=0x7726964e, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x720072, nFileSizeHigh=0x217d50, nFileSizeLow=0x20002, dwReserved0=0x217dc2, dwReserved1=0x720070, cFileName="ꕸ\"Ǐ", cAlternateFileName="Ɛ")) returned 0xffffffff [0200.005] GetLastError () returned 0x3 [0200.006] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x1cfd92c | out: lpMode=0x1cfd92c) returned 0 [0200.006] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="畦正", cchWideChar=2, lpMultiByteStr=0x1cfc51c, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ç\x95¦æ­£", lpUsedDefaultChar=0x0) returned 6 [0200.006] WriteFile (in: hFile=0x90, lpBuffer=0x1cfc51c, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x1cfc514, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x1cfc514, lpOverlapped=0x0) returned 0 [0200.006] GetLastError () returned 0x6 [0200.006] GetLastError () returned 0x6 [0200.006] lstrcmpW (lpString1="ꕸ\"Ǐ", lpString2=".") returned 1 [0200.006] lstrcmpW (lpString1="ꕸ\"Ǐ", lpString2="..") returned 1 [0200.006] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204ff0 [0200.006] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0200.006] FindNextFileW (in: hFindFile=0xffffffff, lpFindFileData=0x1cfdc3c | out: lpFindFileData=0x1cfdc3c*(dwFileAttributes=0x7726971a, ftCreationTime.dwLowDateTime=0x205208, ftCreationTime.dwHighDateTime=0x2051f0, ftLastAccessTime.dwLowDateTime=0x7726964e, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x720072, nFileSizeHigh=0x217d50, nFileSizeLow=0x20002, dwReserved0=0x217dc2, dwReserved1=0x720070, cFileName="ꕸ\"Ǐ", cAlternateFileName="Ɛ")) returned 0 [0200.006] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0200.006] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234788 [0200.006] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0200.006] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e4f8 [0200.007] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0200.007] FindFirstFileW (in: lpFileName="C:\\\\Documents and Settings\\zh-TW\\䔀#Ǐest.\\DF鑘#Ǐ\x03\\偀!Ǐ\\fh꯸\"Ǐ\\ꕸ\"Ǐ\\*", lpFindFileData=0x1cfd820 | out: lpFindFileData=0x1cfd820*(dwFileAttributes=0xc000003a, ftCreationTime.dwLowDateTime=0x7726971a, ftCreationTime.dwHighDateTime=0x205168, ftLastAccessTime.dwLowDateTime=0x205150, ftLastAccessTime.dwHighDateTime=0x7726964e, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x800080, nFileSizeLow=0x231e70, dwReserved0=0x20002, dwReserved1=0x231ef0, cFileName="~\x80頰\"?Ǐ", cAlternateFileName="\"?Ǐⷾ眽Ə")) returned 0xffffffff [0200.007] GetLastError () returned 0x3 [0200.007] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x1cfd510 | out: lpMode=0x1cfd510) returned 0 [0200.007] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="畦正", cchWideChar=2, lpMultiByteStr=0x1cfc100, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ç\x95¦æ­£", lpUsedDefaultChar=0x0) returned 6 [0200.007] WriteFile (in: hFile=0x90, lpBuffer=0x1cfc100, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x1cfc0f8, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x1cfc0f8, lpOverlapped=0x0) returned 0 [0200.007] GetLastError () returned 0x6 [0200.007] GetLastError () returned 0x6 [0200.007] lstrcmpW (lpString1="~\x80頰\"?Ǐ", lpString2=".") returned 1 [0200.008] lstrcmpW (lpString1="~\x80頰\"?Ǐ", lpString2="..") returned 1 [0200.008] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x205210 [0200.008] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a038 [0200.008] FindNextFileW (in: hFindFile=0xffffffff, lpFindFileData=0x1cfd820 | out: lpFindFileData=0x1cfd820*(dwFileAttributes=0xc000003a, ftCreationTime.dwLowDateTime=0x7726971a, ftCreationTime.dwHighDateTime=0x205168, ftLastAccessTime.dwLowDateTime=0x205150, ftLastAccessTime.dwHighDateTime=0x7726964e, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x800080, nFileSizeLow=0x231e70, dwReserved0=0x20002, dwReserved1=0x231ef0, cFileName="~\x80頰\"?Ǐ", cAlternateFileName="\"?Ǐⷾ眽Ə")) returned 0 [0200.008] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0200.008] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234548 [0200.008] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bd0 [0200.008] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e828 [0200.008] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219cf0 [0200.008] FindFirstFileW (in: lpFileName="C:\\\\Documents and Settings\\zh-TW\\䔀#Ǐest.\\DF鑘#Ǐ\x03\\偀!Ǐ\\fh꯸\"Ǐ\\ꕸ\"Ǐ\\~\x80頰\"?Ǐ\\*", lpFindFileData=0x1cfd404 | out: lpFindFileData=0x1cfd404*(dwFileAttributes=0x7726971a, ftCreationTime.dwLowDateTime=0x205008, ftCreationTime.dwHighDateTime=0x204ff0, ftLastAccessTime.dwLowDateTime=0x7726964e, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x8a008a, nFileSizeHigh=0x220eb8, nFileSizeLow=0x20002, dwReserved0=0x220f42, dwReserved1=0x8a0088, cFileName="ᄘ\"?Ǐ", cAlternateFileName="Ɛ")) returned 0xffffffff [0200.009] GetLastError () returned 0x3 [0200.009] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x1cfd0f4 | out: lpMode=0x1cfd0f4) returned 0 [0200.009] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="畦正", cchWideChar=2, lpMultiByteStr=0x1cfbce4, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ç\x95¦æ­£", lpUsedDefaultChar=0x0) returned 6 [0200.009] WriteFile (in: hFile=0x90, lpBuffer=0x1cfbce4, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x1cfbcdc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x1cfbcdc, lpOverlapped=0x0) returned 0 [0200.009] GetLastError () returned 0x6 [0200.009] GetLastError () returned 0x6 [0200.009] lstrcmpW (lpString1="ᄘ\"?Ǐ", lpString2=".") returned 1 [0200.009] lstrcmpW (lpString1="ᄘ\"?Ǐ", lpString2="..") returned 1 [0200.010] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x2052f0 [0200.010] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a230 [0200.010] FindNextFileW (in: hFindFile=0xffffffff, lpFindFileData=0x1cfd404 | out: lpFindFileData=0x1cfd404*(dwFileAttributes=0x7726971a, ftCreationTime.dwLowDateTime=0x205008, ftCreationTime.dwHighDateTime=0x204ff0, ftLastAccessTime.dwLowDateTime=0x7726964e, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x8a008a, nFileSizeHigh=0x220eb8, nFileSizeLow=0x20002, dwReserved0=0x220f42, dwReserved1=0x8a0088, cFileName="ᄘ\"?Ǐ", cAlternateFileName="Ɛ")) returned 0 [0200.010] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0200.010] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2347d0 [0200.010] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609f0 [0200.010] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e030 [0200.010] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x22d428 [0200.010] FindFirstFileW (in: lpFileName="C:\\\\Documents and Settings\\zh-TW\\䔀#Ǐest.\\DF鑘#Ǐ\x03\\偀!Ǐ\\fh꯸\"Ǐ\\ꕸ\"Ǐ\\~\x80頰\"?Ǐ\\ᄘ\"?Ǐ\\*", lpFindFileData=0x1cfcfe8 | out: lpFindFileData=0x1cfcfe8*(dwFileAttributes=0xc000003a, ftCreationTime.dwLowDateTime=0x7726971a, ftCreationTime.dwHighDateTime=0x205228, ftLastAccessTime.dwLowDateTime=0x205210, ftLastAccessTime.dwHighDateTime=0x7726964e, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x980098, nFileSizeLow=0x21a2d8, dwReserved0=0x20002, dwReserved1=0x21a370, cFileName="\x96\x98鳰!퐄Ǐ", cAlternateFileName="\"퉄Ǐⷾ眽Ə")) returned 0xffffffff [0200.011] GetLastError () returned 0x3 [0200.011] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x1cfccd8 | out: lpMode=0x1cfccd8) returned 0 [0200.012] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="畦正", cchWideChar=2, lpMultiByteStr=0x1cfb8c8, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ç\x95¦æ­£", lpUsedDefaultChar=0x0) returned 6 [0200.012] WriteFile (in: hFile=0x90, lpBuffer=0x1cfb8c8, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x1cfb8c0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x1cfb8c0, lpOverlapped=0x0) returned 0 [0200.012] GetLastError () returned 0x6 [0200.012] GetLastError () returned 0x6 [0200.012] lstrcmpW (lpString1="\x96\x98鳰!퐄Ǐ", lpString2=".") returned 1 [0200.012] lstrcmpW (lpString1="\x96\x98鳰!퐄Ǐ", lpString2="..") returned 1 [0200.012] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x205330 [0200.012] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x22d428 [0200.012] FindNextFileW (in: hFindFile=0xffffffff, lpFindFileData=0x1cfcfe8 | out: lpFindFileData=0x1cfcfe8*(dwFileAttributes=0xc000003a, ftCreationTime.dwLowDateTime=0x7726971a, ftCreationTime.dwHighDateTime=0x205228, ftLastAccessTime.dwLowDateTime=0x205210, ftLastAccessTime.dwHighDateTime=0x7726964e, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x980098, nFileSizeLow=0x21a2d8, dwReserved0=0x20002, dwReserved1=0x21a370, cFileName="\x96\x98鳰!퐄Ǐ", cAlternateFileName="\"퉄Ǐⷾ眽Ə")) returned 0 [0200.012] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0200.012] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234740 [0200.012] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c70 [0200.012] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22ee88 [0200.012] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x226388 [0200.012] FindFirstFileW (in: lpFileName="C:\\\\Documents and Settings\\zh-TW\\䔀#Ǐest.\\DF鑘#Ǐ\x03\\偀!Ǐ\\fh꯸\"Ǐ\\ꕸ\"Ǐ\\~\x80頰\"?Ǐ\\ᄘ\"?Ǐ\\\x96\x98鳰!퐄Ǐ\\*", lpFindFileData=0x1cfcbcc | out: lpFindFileData=0x1cfcbcc*(dwFileAttributes=0x7726971a, ftCreationTime.dwLowDateTime=0x205308, ftCreationTime.dwHighDateTime=0x2052f0, ftLastAccessTime.dwLowDateTime=0x7726964e, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0xa200a2, nFileSizeHigh=0x218d98, nFileSizeLow=0x20002, dwReserved0=0x218e3a, dwReserved1=0xa200a0, cFileName="퐨\"䟟眽굏᨜°", cAlternateFileName="Ɛ")) returned 0xffffffff [0200.013] GetLastError () returned 0x3 [0200.013] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x1cfc8bc | out: lpMode=0x1cfc8bc) returned 0 [0200.013] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="畦正", cchWideChar=2, lpMultiByteStr=0x1cfb4ac, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ç\x95¦æ­£", lpUsedDefaultChar=0x0) returned 6 [0200.013] WriteFile (in: hFile=0x90, lpBuffer=0x1cfb4ac, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x1cfb4a4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x1cfb4a4, lpOverlapped=0x0) returned 0 [0200.013] GetLastError () returned 0x6 [0200.013] GetLastError () returned 0x6 [0200.013] lstrcmpW (lpString1="퐨\"䟟眽굏᨜°", lpString2=".") returned 1 [0200.251] lstrcmpW (lpString1="퐨\"䟟眽굏᨜°", lpString2="..") returned 1 [0200.251] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204c90 [0200.251] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x2303e8 [0200.251] FindNextFileW (in: hFindFile=0xffffffff, lpFindFileData=0x1cfcbcc | out: lpFindFileData=0x1cfcbcc*(dwFileAttributes=0x7726971a, ftCreationTime.dwLowDateTime=0x205308, ftCreationTime.dwHighDateTime=0x2052f0, ftLastAccessTime.dwLowDateTime=0x7726964e, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0xa200a2, nFileSizeHigh=0x218d98, nFileSizeLow=0x20002, dwReserved0=0x218e3a, dwReserved1=0xa200a0, cFileName="퐨\"䟟眽굏᨜°", cAlternateFileName="Ɛ")) returned 0 [0200.251] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0200.251] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2345d8 [0200.251] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605b8 [0200.251] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d9d0 [0200.252] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f6a0 [0200.252] FindFirstFileW (in: lpFileName="C:\\\\Documents and Settings\\zh-TW\\䔀#Ǐest.\\DF鑘#Ǐ\x03\\偀!Ǐ\\fh꯸\"Ǐ\\ꕸ\"Ǐ\\~\x80頰\"?Ǐ\\ᄘ\"?Ǐ\\\x96\x98鳰!퐄Ǐ\\퐨\"䟟眽굏᨜°\\*", lpFindFileData=0x1cfc7b0 | out: lpFindFileData=0x1cfc7b0*(dwFileAttributes=0xc000003a, ftCreationTime.dwLowDateTime=0x7726971a, ftCreationTime.dwHighDateTime=0x205348, ftLastAccessTime.dwLowDateTime=0x205330, ftLastAccessTime.dwHighDateTime=0x7726964e, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0xb000b0, nFileSizeLow=0x2356d0, dwReserved0=0x20002, dwReserved1=0x235780, cFileName="®°授\"쯌Ǐ", cAlternateFileName="?\"쨌Ǐⷾ眽Ə")) returned 0xffffffff [0200.252] GetLastError () returned 0x3 [0200.252] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x1cfc4a0 | out: lpMode=0x1cfc4a0) returned 0 [0200.253] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="畦正", cchWideChar=2, lpMultiByteStr=0x1cfb090, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ç\x95¦æ­£", lpUsedDefaultChar=0x0) returned 6 [0200.253] WriteFile (in: hFile=0x90, lpBuffer=0x1cfb090, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x1cfb088, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x1cfb088, lpOverlapped=0x0) returned 0 [0200.253] GetLastError () returned 0x6 [0200.253] GetLastError () returned 0x6 [0200.253] lstrcmpW (lpString1="®°授\"쯌Ǐ", lpString2=".") returned 1 [0200.253] lstrcmpW (lpString1="®°授\"쯌Ǐ", lpString2="..") returned 1 [0200.254] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204c30 [0200.254] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x2007c8 [0200.254] FindNextFileW (in: hFindFile=0xffffffff, lpFindFileData=0x1cfc7b0 | out: lpFindFileData=0x1cfc7b0*(dwFileAttributes=0xc000003a, ftCreationTime.dwLowDateTime=0x7726971a, ftCreationTime.dwHighDateTime=0x205348, ftLastAccessTime.dwLowDateTime=0x205330, ftLastAccessTime.dwHighDateTime=0x7726964e, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0xb000b0, nFileSizeLow=0x2356d0, dwReserved0=0x20002, dwReserved1=0x235780, cFileName="®°授\"쯌Ǐ", cAlternateFileName="?\"쨌Ǐⷾ眽Ə")) returned 0 [0200.254] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0200.254] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346b0 [0200.254] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0200.254] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x226ec0 [0200.254] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x2008a0 [0200.255] FindFirstFileW (in: lpFileName="C:\\\\Documents and Settings\\zh-TW\\䔀#Ǐest.\\DF鑘#Ǐ\x03\\偀!Ǐ\\fh꯸\"Ǐ\\ꕸ\"Ǐ\\~\x80頰\"?Ǐ\\ᄘ\"?Ǐ\\\x96\x98鳰!퐄Ǐ\\퐨\"䟟眽굏᨜°\\®°授\"쯌Ǐ\\*", lpFindFileData=0x1cfc394 | out: lpFindFileData=0x1cfc394*(dwFileAttributes=0x7726971a, ftCreationTime.dwLowDateTime=0x204ca8, ftCreationTime.dwHighDateTime=0x204c90, ftLastAccessTime.dwLowDateTime=0x7726964e, ftLastAccessTime.dwHighDateTime=0x2, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0xc000c0, nFileSizeHigh=0x20e1f0, nFileSizeLow=0x20002, dwReserved0=0x20e2b0, dwReserved1=0xc000be, cFileName="\"잰ǏÀ\x1fʄ\x1f", cAlternateFileName="Ɛ")) returned 0xffffffff [0200.255] GetLastError () returned 0x3 [0200.255] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x1cfc084 | out: lpMode=0x1cfc084) returned 0 [0200.255] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="畦正", cchWideChar=2, lpMultiByteStr=0x1cfac74, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ç\x95¦æ­£", lpUsedDefaultChar=0x0) returned 6 [0200.255] WriteFile (in: hFile=0x90, lpBuffer=0x1cfac74, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x1cfac6c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x1cfac6c, lpOverlapped=0x0) returned 0 [0200.256] GetLastError () returned 0x6 [0200.256] GetLastError () returned 0x6 [0200.256] lstrcmpW (lpString1="\"잰ǏÀ\x1fʄ\x1f", lpString2=".") returned 1 [0200.257] lstrcmpW (lpString1="\"잰ǏÀ\x1fʄ\x1f", lpString2="..") returned 1 [0200.257] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204f70 [0200.257] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x230a48 [0200.258] FindNextFileW (in: hFindFile=0xffffffff, lpFindFileData=0x1cfc394 | out: lpFindFileData=0x1cfc394*(dwFileAttributes=0x7726971a, ftCreationTime.dwLowDateTime=0x204ca8, ftCreationTime.dwHighDateTime=0x204c90, ftLastAccessTime.dwLowDateTime=0x7726964e, ftLastAccessTime.dwHighDateTime=0x2, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0xc000c0, nFileSizeHigh=0x20e1f0, nFileSizeLow=0x20002, dwReserved0=0x20e2b0, dwReserved1=0xc000be, cFileName="\"잰ǏÀ\x1fʄ\x1f", cAlternateFileName="Ɛ")) returned 0 [0200.258] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0200.258] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234080 [0200.258] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605e0 [0200.258] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x226d28 [0200.258] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x230f30 [0200.258] FindFirstFileW (in: lpFileName="C:\\\\Documents and Settings\\zh-TW\\䔀#Ǐest.\\DF鑘#Ǐ\x03\\偀!Ǐ\\fh꯸\"Ǐ\\ꕸ\"Ǐ\\~\x80頰\"?Ǐ\\ᄘ\"?Ǐ\\\x96\x98鳰!퐄Ǐ\\퐨\"䟟眽굏᨜°\\®°授\"쯌Ǐ\\\"잰ǏÀ\x1fʄ\x1f\\*", lpFindFileData=0x1cfbf78 | out: lpFindFileData=0x1cfbf78*(dwFileAttributes=0xc000003a, ftCreationTime.dwLowDateTime=0x7726971a, ftCreationTime.dwHighDateTime=0x204c48, ftLastAccessTime.dwLowDateTime=0x204c30, ftLastAccessTime.dwHighDateTime=0x7726964e, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0xce00ce, nFileSizeLow=0x260188, dwReserved0=0x20002, dwReserved1=0x260256, cFileName="䟟眽ꇷ᨜à", cAlternateFileName="洨\"쇔Ǐⷾ眽Ə")) returned 0xffffffff [0200.259] GetLastError () returned 0x3 [0200.259] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x1cfbc68 | out: lpMode=0x1cfbc68) returned 0 [0200.259] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="畦正", cchWideChar=2, lpMultiByteStr=0x1cfa858, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ç\x95¦æ­£", lpUsedDefaultChar=0x0) returned 6 [0200.259] WriteFile (in: hFile=0x90, lpBuffer=0x1cfa858, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x1cfa850, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x1cfa850, lpOverlapped=0x0) returned 0 [0200.259] GetLastError () returned 0x6 [0200.260] GetLastError () returned 0x6 [0200.260] lstrcmpW (lpString1="䟟眽ꇷ᨜à", lpString2=".") returned 1 [0200.260] lstrcmpW (lpString1="䟟眽ꇷ᨜à", lpString2="..") returned 1 [0200.260] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204db0 [0200.260] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x230f30 [0200.260] FindNextFileW (in: hFindFile=0xffffffff, lpFindFileData=0x1cfbf78 | out: lpFindFileData=0x1cfbf78*(dwFileAttributes=0xc000003a, ftCreationTime.dwLowDateTime=0x7726971a, ftCreationTime.dwHighDateTime=0x204c48, ftLastAccessTime.dwLowDateTime=0x204c30, ftLastAccessTime.dwHighDateTime=0x7726964e, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0xce00ce, nFileSizeLow=0x260188, dwReserved0=0x20002, dwReserved1=0x260256, cFileName="䟟眽ꇷ᨜à", cAlternateFileName="洨\"쇔Ǐⷾ眽Ə")) returned 0 [0200.260] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0200.260] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234230 [0200.261] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b30 [0200.261] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2276b8 [0200.261] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x24f5d8 [0200.261] FindFirstFileW (in: lpFileName="C:\\\\Documents and Settings\\zh-TW\\䔀#Ǐest.\\DF鑘#Ǐ\x03\\偀!Ǐ\\fh꯸\"Ǐ\\ꕸ\"Ǐ\\~\x80頰\"?Ǐ\\ᄘ\"?Ǐ\\\x96\x98鳰!퐄Ǐ\\퐨\"䟟眽굏᨜°\\®°授\"쯌Ǐ\\\"잰ǏÀ\x1fʄ\x1f\\䟟眽ꇷ᨜à\\*", lpFindFileData=0x1cfbb5c | out: lpFindFileData=0x1cfbb5c*(dwFileAttributes=0x7726971a, ftCreationTime.dwLowDateTime=0x204f88, ftCreationTime.dwHighDateTime=0x204f70, ftLastAccessTime.dwLowDateTime=0x7726964e, ftLastAccessTime.dwHighDateTime=0xc, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0xe000e0, nFileSizeHigh=0x24f5d8, nFileSizeLow=0x20002, dwReserved0=0x24f6b8, dwReserved1=0xe000de, cFileName="༰#䟟眽?᨜ð", cAlternateFileName="Ɛ")) returned 0xffffffff [0200.261] GetLastError () returned 0x3 [0200.262] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x1cfb84c | out: lpMode=0x1cfb84c) returned 0 [0200.262] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="畦正", cchWideChar=2, lpMultiByteStr=0x1cfa43c, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ç\x95¦æ­£", lpUsedDefaultChar=0x0) returned 6 [0200.262] WriteFile (in: hFile=0x90, lpBuffer=0x1cfa43c, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x1cfa434, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x1cfa434, lpOverlapped=0x0) returned 0 [0200.262] GetLastError () returned 0x6 [0200.262] GetLastError () returned 0x6 [0200.262] lstrcmpW (lpString1="༰#䟟眽?᨜ð", lpString2=".") returned 1 [0200.262] lstrcmpW (lpString1="༰#䟟眽?᨜ð", lpString2="..") returned 1 [0200.262] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204e90 [0200.263] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x24f5d8 [0200.263] FindNextFileW (in: hFindFile=0xffffffff, lpFindFileData=0x1cfbb5c | out: lpFindFileData=0x1cfbb5c*(dwFileAttributes=0x7726971a, ftCreationTime.dwLowDateTime=0x204f88, ftCreationTime.dwHighDateTime=0x204f70, ftLastAccessTime.dwLowDateTime=0x7726964e, ftLastAccessTime.dwHighDateTime=0xc, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0xe000e0, nFileSizeHigh=0x24f5d8, nFileSizeLow=0x20002, dwReserved0=0x24f6b8, dwReserved1=0xe000de, cFileName="༰#䟟眽?᨜ð", cAlternateFileName="Ɛ")) returned 0 [0200.263] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0200.263] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233fa8 [0200.263] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a18 [0200.263] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x227058 [0200.263] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x24fb78 [0200.263] FindFirstFileW (in: lpFileName="C:\\\\Documents and Settings\\zh-TW\\䔀#Ǐest.\\DF鑘#Ǐ\x03\\偀!Ǐ\\fh꯸\"Ǐ\\ꕸ\"Ǐ\\~\x80頰\"?Ǐ\\ᄘ\"?Ǐ\\\x96\x98鳰!퐄Ǐ\\퐨\"䟟眽굏᨜°\\®°授\"쯌Ǐ\\\"잰ǏÀ\x1fʄ\x1f\\䟟眽ꇷ᨜à\\༰#䟟眽?᨜ð\\*", lpFindFileData=0x1cfb740 | out: lpFindFileData=0x1cfb740*(dwFileAttributes=0xc000003a, ftCreationTime.dwLowDateTime=0x7726971a, ftCreationTime.dwHighDateTime=0x204dc8, ftLastAccessTime.dwLowDateTime=0x204db0, ftLastAccessTime.dwHighDateTime=0x7726964e, ftLastWriteTime.dwLowDateTime=0x1f0000, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0xec00ec, nFileSizeLow=0x24fb78, dwReserved0=0x20002, dwReserved1=0x24fc64, cFileName="䟟眽?᨜Ā", cAlternateFileName="灘\"릜Ǐⷾ眽Ə")) returned 0xffffffff [0200.264] GetLastError () returned 0x3 [0200.264] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x1cfb430 | out: lpMode=0x1cfb430) returned 0 [0200.265] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="畦正", cchWideChar=2, lpMultiByteStr=0x1cfa020, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ç\x95¦æ­£", lpUsedDefaultChar=0x0) returned 6 [0200.265] WriteFile (in: hFile=0x90, lpBuffer=0x1cfa020, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x1cfa018, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x1cfa018, lpOverlapped=0x0) returned 0 [0200.265] GetLastError () returned 0x6 [0200.265] GetLastError () returned 0x6 [0200.265] lstrcmpW (lpString1="䟟眽?᨜Ā", lpString2=".") returned 1 [0200.265] lstrcmpW (lpString1="䟟眽?᨜Ā", lpString2="..") returned 1 [0200.265] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204dd0 [0200.265] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x24fb78 [0200.266] FindNextFileW (in: hFindFile=0xffffffff, lpFindFileData=0x1cfb740 | out: lpFindFileData=0x1cfb740*(dwFileAttributes=0xc000003a, ftCreationTime.dwLowDateTime=0x7726971a, ftCreationTime.dwHighDateTime=0x204dc8, ftLastAccessTime.dwLowDateTime=0x204db0, ftLastAccessTime.dwHighDateTime=0x7726964e, ftLastWriteTime.dwLowDateTime=0x1f0000, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0xec00ec, nFileSizeLow=0x24fb78, dwReserved0=0x20002, dwReserved1=0x24fc64, cFileName="䟟眽?᨜Ā", cAlternateFileName="灘\"릜Ǐⷾ眽Ə")) returned 0 [0200.266] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0200.266] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233db0 [0200.266] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a90 [0200.266] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x227388 [0200.266] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x260e10 [0200.266] FindFirstFileW (in: lpFileName="C:\\\\Documents and Settings\\zh-TW\\䔀#Ǐest.\\DF鑘#Ǐ\x03\\偀!Ǐ\\fh꯸\"Ǐ\\ꕸ\"Ǐ\\~\x80頰\"?Ǐ\\ᄘ\"?Ǐ\\\x96\x98鳰!퐄Ǐ\\퐨\"䟟眽굏᨜°\\®°授\"쯌Ǐ\\\"잰ǏÀ\x1fʄ\x1f\\䟟眽ꇷ᨜à\\༰#䟟眽?᨜ð\\䟟眽?᨜Ā\\*", lpFindFileData=0x1cfb324 | out: lpFindFileData=0x1cfb324*(dwFileAttributes=0x7726971a, ftCreationTime.dwLowDateTime=0x204ea8, ftCreationTime.dwHighDateTime=0x204e90, ftLastAccessTime.dwLowDateTime=0x7726964e, ftLastAccessTime.dwHighDateTime=0x19, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0xfc00fc, nFileSizeHigh=0x260e10, nFileSizeLow=0x20002, dwReserved0=0x260f0c, dwReserved1=0xfc00fa, cFileName="ﭸ$䟟眽햧᨜Đ", cAlternateFileName="Ɛ")) returned 0xffffffff [0200.267] GetLastError () returned 0x3 [0200.267] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x1cfb014 | out: lpMode=0x1cfb014) returned 0 [0200.267] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="畦正", cchWideChar=2, lpMultiByteStr=0x1cf9c04, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ç\x95¦æ­£", lpUsedDefaultChar=0x0) returned 6 [0200.267] WriteFile (in: hFile=0x90, lpBuffer=0x1cf9c04, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x1cf9bfc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x1cf9bfc, lpOverlapped=0x0) returned 0 [0200.267] GetLastError () returned 0x6 [0200.267] GetLastError () returned 0x6 [0200.267] lstrcmpW (lpString1="ﭸ$䟟眽햧᨜Đ", lpString2=".") returned 1 [0200.268] lstrcmpW (lpString1="ﭸ$䟟眽햧᨜Đ", lpString2="..") returned 1 [0200.268] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204df0 [0200.268] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120) returned 0x2104b8 [0200.268] FindNextFileW (in: hFindFile=0xffffffff, lpFindFileData=0x1cfb324 | out: lpFindFileData=0x1cfb324*(dwFileAttributes=0x7726971a, ftCreationTime.dwLowDateTime=0x204ea8, ftCreationTime.dwHighDateTime=0x204e90, ftLastAccessTime.dwLowDateTime=0x7726964e, ftLastAccessTime.dwHighDateTime=0x19, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0xfc00fc, nFileSizeHigh=0x260e10, nFileSizeLow=0x20002, dwReserved0=0x260f0c, dwReserved1=0xfc00fa, cFileName="ﭸ$䟟眽햧᨜Đ", cAlternateFileName="Ɛ")) returned 0 [0200.268] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0200.268] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2343e0 [0200.268] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0200.268] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x227520 [0200.268] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120) returned 0x211170 [0200.268] FindFirstFileW (in: lpFileName="C:\\\\Documents and Settings\\zh-TW\\䔀#Ǐest.\\DF鑘#Ǐ\x03\\偀!Ǐ\\fh꯸\"Ǐ\\ꕸ\"Ǐ\\~\x80頰\"?Ǐ\\ᄘ\"?Ǐ\\\x96\x98鳰!퐄Ǐ\\퐨\"䟟眽굏᨜°\\®°授\"쯌Ǐ\\\"잰ǏÀ\x1fʄ\x1f\\䟟眽ꇷ᨜à\\༰#䟟眽?᨜ð\\䟟眽?᨜Ā\\ﭸ$䟟眽햧᨜Đ\\*", lpFindFileData=0x1cfaf08 | out: lpFindFileData=0x1cfaf08*(dwFileAttributes=0xc000003a, ftCreationTime.dwLowDateTime=0x7726971a, ftCreationTime.dwHighDateTime=0x204de8, ftLastAccessTime.dwLowDateTime=0x204dd0, ftLastAccessTime.dwHighDateTime=0x7726964e, ftLastWriteTime.dwLowDateTime=0x1f0000, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x1080108, nFileSizeLow=0x234d18, dwReserved0=0x20002, dwReserved1=0x234e20, cFileName="ĆĈฐ&댤Ǐ", cAlternateFileName="甠\"녤Ǐⷾ眽Ə")) returned 0xffffffff [0200.269] GetLastError () returned 0x3 [0200.269] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x1cfabf8 | out: lpMode=0x1cfabf8) returned 0 [0200.269] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="畦正", cchWideChar=2, lpMultiByteStr=0x1cf97e8, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ç\x95¦æ­£", lpUsedDefaultChar=0x0) returned 6 [0200.269] WriteFile (in: hFile=0x90, lpBuffer=0x1cf97e8, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x1cf97e0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x1cf97e0, lpOverlapped=0x0) returned 0 [0200.269] GetLastError () returned 0x6 [0200.269] GetLastError () returned 0x6 [0200.269] lstrcmpW (lpString1="ĆĈฐ&댤Ǐ", lpString2=".") returned 1 [0200.270] lstrcmpW (lpString1="ĆĈฐ&댤Ǐ", lpString2="..") returned 1 [0200.270] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204ef0 [0200.270] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x130) returned 0x234d18 [0200.270] FindNextFileW (in: hFindFile=0xffffffff, lpFindFileData=0x1cfaf08 | out: lpFindFileData=0x1cfaf08*(dwFileAttributes=0xc000003a, ftCreationTime.dwLowDateTime=0x7726971a, ftCreationTime.dwHighDateTime=0x204de8, ftLastAccessTime.dwLowDateTime=0x204dd0, ftLastAccessTime.dwHighDateTime=0x7726964e, ftLastWriteTime.dwLowDateTime=0x1f0000, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x1080108, nFileSizeLow=0x234d18, dwReserved0=0x20002, dwReserved1=0x234e20, cFileName="ĆĈฐ&댤Ǐ", cAlternateFileName="甠\"녤Ǐⷾ眽Ə")) returned 0 [0200.270] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0200.270] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233ff0 [0200.270] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c20 [0200.270] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x236958 [0200.270] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x130) returned 0x234e50 [0200.270] FindFirstFileW (in: lpFileName="C:\\\\Documents and Settings\\zh-TW\\䔀#Ǐest.\\DF鑘#Ǐ\x03\\偀!Ǐ\\fh꯸\"Ǐ\\ꕸ\"Ǐ\\~\x80頰\"?Ǐ\\ᄘ\"?Ǐ\\\x96\x98鳰!퐄Ǐ\\퐨\"䟟眽굏᨜°\\®°授\"쯌Ǐ\\\"잰ǏÀ\x1fʄ\x1f\\䟟眽ꇷ᨜à\\༰#䟟眽?᨜ð\\䟟眽?᨜Ā\\ﭸ$䟟眽햧᨜Đ\\ĆĈฐ&댤Ǐ\\*", lpFindFileData=0x1cfaaec | out: lpFindFileData=0x1cfaaec*(dwFileAttributes=0x7726971a, ftCreationTime.dwLowDateTime=0x204e08, ftCreationTime.dwHighDateTime=0x204df0, ftLastAccessTime.dwLowDateTime=0x7726964e, ftLastAccessTime.dwHighDateTime=0x33, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x1180118, nFileSizeHigh=0x210390, nFileSizeLow=0x20002, dwReserved0=0x2104a8, dwReserved1=0x1180116, cFileName="ᅰ!䟟眽챯᨜İ", cAlternateFileName="Ɛ")) returned 0xffffffff [0200.271] GetLastError () returned 0x3 [0200.271] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x1cfa7dc | out: lpMode=0x1cfa7dc) returned 0 [0200.271] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="畦正", cchWideChar=2, lpMultiByteStr=0x1cf93cc, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ç\x95¦æ­£", lpUsedDefaultChar=0x0) returned 6 [0200.271] WriteFile (in: hFile=0x90, lpBuffer=0x1cf93cc, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x1cf93c4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x1cf93c4, lpOverlapped=0x0) returned 0 [0200.271] GetLastError () returned 0x6 [0200.271] GetLastError () returned 0x6 [0200.272] lstrcmpW (lpString1="ᅰ!䟟眽챯᨜İ", lpString2=".") returned 1 [0200.272] lstrcmpW (lpString1="ᅰ!䟟眽챯᨜İ", lpString2="..") returned 1 [0200.272] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204bd0 [0200.272] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x140) returned 0x234e50 [0200.272] FindNextFileW (in: hFindFile=0xffffffff, lpFindFileData=0x1cfaaec | out: lpFindFileData=0x1cfaaec*(dwFileAttributes=0x7726971a, ftCreationTime.dwLowDateTime=0x204e08, ftCreationTime.dwHighDateTime=0x204df0, ftLastAccessTime.dwLowDateTime=0x7726964e, ftLastAccessTime.dwHighDateTime=0x33, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x1180118, nFileSizeHigh=0x210390, nFileSizeLow=0x20002, dwReserved0=0x2104a8, dwReserved1=0x1180116, cFileName="ᅰ!䟟眽챯᨜İ", cAlternateFileName="Ɛ")) returned 0 [0200.272] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0200.272] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229250 [0200.272] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ae0 [0200.272] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x236160 [0200.273] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x140) returned 0x2359c0 [0200.273] FindFirstFileW (in: lpFileName="C:\\\\Documents and Settings\\zh-TW\\䔀#Ǐest.\\DF鑘#Ǐ\x03\\偀!Ǐ\\fh꯸\"Ǐ\\ꕸ\"Ǐ\\~\x80頰\"?Ǐ\\ᄘ\"?Ǐ\\\x96\x98鳰!퐄Ǐ\\퐨\"䟟眽굏᨜°\\®°授\"쯌Ǐ\\\"잰ǏÀ\x1fʄ\x1f\\䟟眽ꇷ᨜à\\༰#䟟眽?᨜ð\\䟟眽?᨜Ā\\ﭸ$䟟眽햧᨜Đ\\ĆĈฐ&댤Ǐ\\ᅰ!䟟眽챯᨜İ\\*", lpFindFileData=0x1cfa6d0 | out: lpFindFileData=0x1cfa6d0*(dwFileAttributes=0xc000003a, ftCreationTime.dwLowDateTime=0x7726971a, ftCreationTime.dwHighDateTime=0x204f08, ftLastAccessTime.dwLowDateTime=0x204ef0, ftLastAccessTime.dwHighDateTime=0x7726964e, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x1260126, nFileSizeLow=0x223088, dwReserved0=0x20002, dwReserved1=0x2231ae, cFileName="䟟眽졏᨜ŀ", cAlternateFileName="慠#꤬Ǐⷾ眽Ə")) returned 0xffffffff [0200.273] GetLastError () returned 0x3 [0200.273] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x1cfa3c0 | out: lpMode=0x1cfa3c0) returned 0 [0200.273] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="畦正", cchWideChar=2, lpMultiByteStr=0x1cf8fb0, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ç\x95¦æ­£", lpUsedDefaultChar=0x0) returned 6 [0200.273] WriteFile (in: hFile=0x90, lpBuffer=0x1cf8fb0, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x1cf8fa8, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x1cf8fa8, lpOverlapped=0x0) returned 0 [0200.273] GetLastError () returned 0x6 [0200.273] GetLastError () returned 0x6 [0200.273] lstrcmpW (lpString1="䟟眽졏᨜ŀ", lpString2=".") returned 1 [0200.274] lstrcmpW (lpString1="䟟眽졏᨜ŀ", lpString2="..") returned 1 [0200.274] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204d30 [0200.274] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x140) returned 0x2359c0 [0200.274] FindNextFileW (in: hFindFile=0xffffffff, lpFindFileData=0x1cfa6d0 | out: lpFindFileData=0x1cfa6d0*(dwFileAttributes=0xc000003a, ftCreationTime.dwLowDateTime=0x7726971a, ftCreationTime.dwHighDateTime=0x204f08, ftLastAccessTime.dwLowDateTime=0x204ef0, ftLastAccessTime.dwHighDateTime=0x7726964e, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x1260126, nFileSizeLow=0x223088, dwReserved0=0x20002, dwReserved1=0x2231ae, cFileName="䟟眽졏᨜ŀ", cAlternateFileName="慠#꤬Ǐⷾ眽Ə")) returned 0 [0200.274] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0200.274] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228d40 [0200.274] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b58 [0200.274] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x237618 [0200.274] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x150) returned 0x235c50 [0200.274] FindFirstFileW (in: lpFileName="C:\\\\Documents and Settings\\zh-TW\\䔀#Ǐest.\\DF鑘#Ǐ\x03\\偀!Ǐ\\fh꯸\"Ǐ\\ꕸ\"Ǐ\\~\x80頰\"?Ǐ\\ᄘ\"?Ǐ\\\x96\x98鳰!퐄Ǐ\\퐨\"䟟眽굏᨜°\\®°授\"쯌Ǐ\\\"잰ǏÀ\x1fʄ\x1f\\䟟眽ꇷ᨜à\\༰#䟟眽?᨜ð\\䟟眽?᨜Ā\\ﭸ$䟟眽햧᨜Đ\\ĆĈฐ&댤Ǐ\\ᅰ!䟟眽챯᨜İ\\䟟眽졏᨜ŀ\\*", lpFindFileData=0x1cfa2b4 | out: lpFindFileData=0x1cfa2b4*(dwFileAttributes=0x7726971a, ftCreationTime.dwLowDateTime=0x204be8, ftCreationTime.dwHighDateTime=0x204bd0, ftLastAccessTime.dwLowDateTime=0x7726964e, ftLastAccessTime.dwHighDateTime=0x4b, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x1360136, nFileSizeHigh=0x235b08, nFileSizeLow=0x20002, dwReserved0=0x235c3e, dwReserved1=0x1360134, cFileName="姀#䟟眽쐷᨜ŀ", cAlternateFileName="Ɛ")) returned 0xffffffff [0200.274] GetLastError () returned 0x3 [0200.275] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x1cf9fa4 | out: lpMode=0x1cf9fa4) returned 0 [0200.275] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="畦正", cchWideChar=2, lpMultiByteStr=0x1cf8b94, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ç\x95¦æ­£", lpUsedDefaultChar=0x0) returned 6 [0200.275] WriteFile (in: hFile=0x90, lpBuffer=0x1cf8b94, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x1cf8b8c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x1cf8b8c, lpOverlapped=0x0) returned 0 [0200.275] GetLastError () returned 0x6 [0200.275] GetLastError () returned 0x6 [0200.275] lstrcmpW (lpString1="姀#䟟眽쐷᨜ŀ", lpString2=".") returned 1 [0200.275] lstrcmpW (lpString1="姀#䟟眽쐷᨜ŀ", lpString2="..") returned 1 [0200.275] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204f10 [0200.275] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x150) returned 0x235c50 [0200.275] FindNextFileW (in: hFindFile=0xffffffff, lpFindFileData=0x1cfa2b4 | out: lpFindFileData=0x1cfa2b4*(dwFileAttributes=0x7726971a, ftCreationTime.dwLowDateTime=0x204be8, ftCreationTime.dwHighDateTime=0x204bd0, ftLastAccessTime.dwLowDateTime=0x7726964e, ftLastAccessTime.dwHighDateTime=0x4b, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x1360136, nFileSizeHigh=0x235b08, nFileSizeLow=0x20002, dwReserved0=0x235c3e, dwReserved1=0x1360134, cFileName="姀#䟟眽쐷᨜ŀ", cAlternateFileName="Ɛ")) returned 0 [0200.275] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0200.275] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229298 [0200.275] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0200.275] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x236af0 [0200.275] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x160) returned 0x235da8 [0200.275] FindFirstFileW (in: lpFileName="C:\\\\Documents and Settings\\zh-TW\\䔀#Ǐest.\\DF鑘#Ǐ\x03\\偀!Ǐ\\fh꯸\"Ǐ\\ꕸ\"Ǐ\\~\x80頰\"?Ǐ\\ᄘ\"?Ǐ\\\x96\x98鳰!퐄Ǐ\\퐨\"䟟眽굏᨜°\\®°授\"쯌Ǐ\\\"잰ǏÀ\x1fʄ\x1f\\䟟眽ꇷ᨜à\\༰#䟟眽?᨜ð\\䟟眽?᨜Ā\\ﭸ$䟟眽햧᨜Đ\\ĆĈฐ&댤Ǐ\\ᅰ!䟟眽챯᨜İ\\䟟眽졏᨜ŀ\\姀#䟟眽쐷᨜ŀ\\*", lpFindFileData=0x1cf9e98 | out: lpFindFileData=0x1cf9e98*(dwFileAttributes=0xc000003a, ftCreationTime.dwLowDateTime=0x7726971a, ftCreationTime.dwHighDateTime=0x204d48, ftLastAccessTime.dwLowDateTime=0x204d30, ftLastAccessTime.dwHighDateTime=0x7726964e, ftLastWriteTime.dwLowDateTime=0x1f0000, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x1420142, nFileSizeLow=0x235da8, dwReserved0=0x20002, dwReserved1=0x235eea, cFileName="䟟眽쀗᨜Ő", cAlternateFileName="櫰#ꃴǏⷾ眽Ə")) returned 0xffffffff [0200.276] GetLastError () returned 0x3 [0200.276] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x1cf9b88 | out: lpMode=0x1cf9b88) returned 0 [0200.276] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="畦正", cchWideChar=2, lpMultiByteStr=0x1cf8778, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ç\x95¦æ­£", lpUsedDefaultChar=0x0) returned 6 [0200.276] WriteFile (in: hFile=0x90, lpBuffer=0x1cf8778, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x1cf8770, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x1cf8770, lpOverlapped=0x0) returned 0 [0200.276] GetLastError () returned 0x6 [0200.276] GetLastError () returned 0x6 [0200.276] lstrcmpW (lpString1="䟟眽쀗᨜Ő", lpString2=".") returned 1 [0200.276] lstrcmpW (lpString1="䟟眽쀗᨜Ő", lpString2="..") returned 1 [0200.277] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204f30 [0200.277] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x160) returned 0x235da8 [0200.277] FindNextFileW (in: hFindFile=0xffffffff, lpFindFileData=0x1cf9e98 | out: lpFindFileData=0x1cf9e98*(dwFileAttributes=0xc000003a, ftCreationTime.dwLowDateTime=0x7726971a, ftCreationTime.dwHighDateTime=0x204d48, ftLastAccessTime.dwLowDateTime=0x204d30, ftLastAccessTime.dwHighDateTime=0x7726964e, ftLastWriteTime.dwLowDateTime=0x1f0000, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x1420142, nFileSizeLow=0x235da8, dwReserved0=0x20002, dwReserved1=0x235eea, cFileName="䟟眽쀗᨜Ő", cAlternateFileName="櫰#ꃴǏⷾ眽Ə")) returned 0 [0200.277] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0200.277] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228f38 [0200.277] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ba8 [0200.277] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x237c78 [0200.277] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x160) returned 0x2390e8 [0200.277] FindFirstFileW (in: lpFileName="C:\\\\Documents and Settings\\zh-TW\\䔀#Ǐest.\\DF鑘#Ǐ\x03\\偀!Ǐ\\fh꯸\"Ǐ\\ꕸ\"Ǐ\\~\x80頰\"?Ǐ\\ᄘ\"?Ǐ\\\x96\x98鳰!퐄Ǐ\\퐨\"䟟眽굏᨜°\\®°授\"쯌Ǐ\\\"잰ǏÀ\x1fʄ\x1f\\䟟眽ꇷ᨜à\\༰#䟟眽?᨜ð\\䟟眽?᨜Ā\\ﭸ$䟟眽햧᨜Đ\\ĆĈฐ&댤Ǐ\\ᅰ!䟟眽챯᨜İ\\䟟眽졏᨜ŀ\\姀#䟟眽쐷᨜ŀ\\䟟眽쀗᨜Ő\\*", lpFindFileData=0x1cf9a7c | out: lpFindFileData=0x1cf9a7c*(dwFileAttributes=0x7726971a, ftCreationTime.dwLowDateTime=0x204f28, ftCreationTime.dwHighDateTime=0x204f10, ftLastAccessTime.dwLowDateTime=0x7726964e, ftLastAccessTime.dwHighDateTime=0x15, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x1520152, nFileSizeHigh=0x238d90, nFileSizeLow=0x20002, dwReserved0=0x238ee2, dwReserved1=0x1520150, cFileName="嶨#䟟眽ﳿ᨜Š", cAlternateFileName="Ɛ")) returned 0xffffffff [0200.277] GetLastError () returned 0x3 [0200.278] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x1cf976c | out: lpMode=0x1cf976c) returned 0 [0200.278] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="畦正", cchWideChar=2, lpMultiByteStr=0x1cf835c, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ç\x95¦æ­£", lpUsedDefaultChar=0x0) returned 6 [0200.278] WriteFile (in: hFile=0x90, lpBuffer=0x1cf835c, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x1cf8354, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x1cf8354, lpOverlapped=0x0) returned 0 [0200.278] GetLastError () returned 0x6 [0200.278] GetLastError () returned 0x6 [0200.278] lstrcmpW (lpString1="嶨#䟟眽ﳿ᨜Š", lpString2=".") returned 1 [0200.278] lstrcmpW (lpString1="嶨#䟟眽ﳿ᨜Š", lpString2="..") returned 1 [0200.278] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204e30 [0200.278] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x170) returned 0x2390e8 [0200.278] FindNextFileW (in: hFindFile=0xffffffff, lpFindFileData=0x1cf9a7c | out: lpFindFileData=0x1cf9a7c*(dwFileAttributes=0x7726971a, ftCreationTime.dwLowDateTime=0x204f28, ftCreationTime.dwHighDateTime=0x204f10, ftLastAccessTime.dwLowDateTime=0x7726964e, ftLastAccessTime.dwHighDateTime=0x15, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x1520152, nFileSizeHigh=0x238d90, nFileSizeLow=0x20002, dwReserved0=0x238ee2, dwReserved1=0x1520150, cFileName="嶨#䟟眽ﳿ᨜Š", cAlternateFileName="Ɛ")) returned 0 [0200.279] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0200.279] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229010 [0200.279] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a68 [0200.279] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2362f8 [0200.279] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x170) returned 0x239260 [0200.279] FindFirstFileW (in: lpFileName="C:\\\\Documents and Settings\\zh-TW\\䔀#Ǐest.\\DF鑘#Ǐ\x03\\偀!Ǐ\\fh꯸\"Ǐ\\ꕸ\"Ǐ\\~\x80頰\"?Ǐ\\ᄘ\"?Ǐ\\\x96\x98鳰!퐄Ǐ\\퐨\"䟟眽굏᨜°\\®°授\"쯌Ǐ\\\"잰ǏÀ\x1fʄ\x1f\\䟟眽ꇷ᨜à\\༰#䟟眽?᨜ð\\䟟眽?᨜Ā\\ﭸ$䟟眽햧᨜Đ\\ĆĈฐ&댤Ǐ\\ᅰ!䟟眽챯᨜İ\\䟟眽졏᨜ŀ\\姀#䟟眽쐷᨜ŀ\\䟟眽쀗᨜Ő\\嶨#䟟眽ﳿ᨜Š\\*", lpFindFileData=0x1cf9660 | out: lpFindFileData=0x1cf9660*(dwFileAttributes=0xc000003a, ftCreationTime.dwLowDateTime=0x7726971a, ftCreationTime.dwHighDateTime=0x204f48, ftLastAccessTime.dwLowDateTime=0x204f30, ftLastAccessTime.dwHighDateTime=0x7726964e, ftLastWriteTime.dwLowDateTime=0x1f0000, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x15e015e, nFileSizeLow=0x239250, dwReserved0=0x20002, dwReserved1=0x2393ae, cFileName="䟟眽᨜Ű", cAlternateFileName="拸#颼Ǐⷾ眽Ə")) returned 0xffffffff [0200.283] GetLastError () returned 0x3 [0200.283] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x1cf9350 | out: lpMode=0x1cf9350) returned 0 [0200.283] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="畦正", cchWideChar=2, lpMultiByteStr=0x1cf7f40, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ç\x95¦æ­£", lpUsedDefaultChar=0x0) returned 6 [0200.283] WriteFile (in: hFile=0x90, lpBuffer=0x1cf7f40, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x1cf7f38, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x1cf7f38, lpOverlapped=0x0) returned 0 [0200.283] GetLastError () returned 0x6 [0200.284] GetLastError () returned 0x6 [0200.284] lstrcmpW (lpString1="䟟眽᨜Ű", lpString2=".") returned 1 [0200.284] lstrcmpW (lpString1="䟟眽᨜Ű", lpString2="..") returned 1 [0200.284] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204e50 [0200.284] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x180) returned 0x233140 [0200.284] FindNextFileW (in: hFindFile=0xffffffff, lpFindFileData=0x1cf9660 | out: lpFindFileData=0x1cf9660*(dwFileAttributes=0xc000003a, ftCreationTime.dwLowDateTime=0x7726971a, ftCreationTime.dwHighDateTime=0x204f48, ftLastAccessTime.dwLowDateTime=0x204f30, ftLastAccessTime.dwHighDateTime=0x7726964e, ftLastWriteTime.dwLowDateTime=0x1f0000, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x15e015e, nFileSizeLow=0x239250, dwReserved0=0x20002, dwReserved1=0x2393ae, cFileName="䟟眽᨜Ű", cAlternateFileName="拸#颼Ǐⷾ眽Ə")) returned 0 [0200.284] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0200.284] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228e18 [0200.284] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b80 [0200.284] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x237948 [0200.284] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x180) returned 0x2332c8 [0200.285] FindFirstFileW (in: lpFileName="C:\\\\Documents and Settings\\zh-TW\\䔀#Ǐest.\\DF鑘#Ǐ\x03\\偀!Ǐ\\fh꯸\"Ǐ\\ꕸ\"Ǐ\\~\x80頰\"?Ǐ\\ᄘ\"?Ǐ\\\x96\x98鳰!퐄Ǐ\\퐨\"䟟眽굏᨜°\\®°授\"쯌Ǐ\\\"잰ǏÀ\x1fʄ\x1f\\䟟眽ꇷ᨜à\\༰#䟟眽?᨜ð\\䟟眽?᨜Ā\\ﭸ$䟟眽햧᨜Đ\\ĆĈฐ&댤Ǐ\\ᅰ!䟟眽챯᨜İ\\䟟眽졏᨜ŀ\\姀#䟟眽쐷᨜ŀ\\䟟眽쀗᨜Ő\\嶨#䟟眽ﳿ᨜Š\\䟟眽᨜Ű\\*", lpFindFileData=0x1cf9244 | out: lpFindFileData=0x1cf9244*(dwFileAttributes=0x7726971a, ftCreationTime.dwLowDateTime=0x204e48, ftCreationTime.dwHighDateTime=0x204e30, ftLastAccessTime.dwLowDateTime=0x7726964e, ftLastAccessTime.dwHighDateTime=0x3, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x16e016e, nFileSizeHigh=0x232d98, nFileSizeLow=0x20002, dwReserved0=0x232f06, dwReserved1=0x16e016c, cFileName="鉠#䟟眽᨜ƀ", cAlternateFileName="Ɛ")) returned 0xffffffff [0200.285] GetLastError () returned 0x3 [0200.285] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x1cf8f34 | out: lpMode=0x1cf8f34) returned 0 [0200.285] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="畦正", cchWideChar=2, lpMultiByteStr=0x1cf7b24, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ç\x95¦æ­£", lpUsedDefaultChar=0x0) returned 6 [0200.285] WriteFile (in: hFile=0x90, lpBuffer=0x1cf7b24, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x1cf7b1c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x1cf7b1c, lpOverlapped=0x0) returned 0 [0200.286] GetLastError () returned 0x6 [0200.286] GetLastError () returned 0x6 [0200.286] lstrcmpW (lpString1="鉠#䟟眽᨜ƀ", lpString2=".") returned 1 [0200.286] lstrcmpW (lpString1="鉠#䟟眽᨜ƀ", lpString2="..") returned 1 [0200.286] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204f50 [0200.286] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x237e10 [0200.286] FindNextFileW (in: hFindFile=0xffffffff, lpFindFileData=0x1cf9244 | out: lpFindFileData=0x1cf9244*(dwFileAttributes=0x7726971a, ftCreationTime.dwLowDateTime=0x204e48, ftCreationTime.dwHighDateTime=0x204e30, ftLastAccessTime.dwLowDateTime=0x7726964e, ftLastAccessTime.dwHighDateTime=0x3, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x16e016e, nFileSizeHigh=0x232d98, nFileSizeLow=0x20002, dwReserved0=0x232f06, dwReserved1=0x16e016c, cFileName="鉠#䟟眽᨜ƀ", cAlternateFileName="Ɛ")) returned 0 [0200.286] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0200.286] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229370 [0200.287] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b08 [0200.287] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x236490 [0200.287] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x235fc8 [0200.287] FindFirstFileW (in: lpFileName="C:\\\\Documents and Settings\\zh-TW\\䔀#Ǐest.\\DF鑘#Ǐ\x03\\偀!Ǐ\\fh꯸\"Ǐ\\ꕸ\"Ǐ\\~\x80頰\"?Ǐ\\ᄘ\"?Ǐ\\\x96\x98鳰!퐄Ǐ\\퐨\"䟟眽굏᨜°\\®°授\"쯌Ǐ\\\"잰ǏÀ\x1fʄ\x1f\\䟟眽ꇷ᨜à\\༰#䟟眽?᨜ð\\䟟眽?᨜Ā\\ﭸ$䟟眽햧᨜Đ\\ĆĈฐ&댤Ǐ\\ᅰ!䟟眽챯᨜İ\\䟟眽졏᨜ŀ\\姀#䟟眽쐷᨜ŀ\\䟟眽쀗᨜Ő\\嶨#䟟眽ﳿ᨜Š\\䟟眽᨜Ű\\鉠#䟟眽᨜ƀ\\*", lpFindFileData=0x1cf8e28 | out: lpFindFileData=0x1cf8e28*(dwFileAttributes=0xc000003a, ftCreationTime.dwLowDateTime=0x7726971a, ftCreationTime.dwHighDateTime=0x204e68, ftLastAccessTime.dwLowDateTime=0x204e50, ftLastAccessTime.dwHighDateTime=0x7726964e, ftLastWriteTime.dwLowDateTime=0x1f0000, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x17a017a, nFileSizeLow=0x233450, dwReserved0=0x20002, dwReserved1=0x2335ca, cFileName="Ÿź㋈#鉄Ǐ", cAlternateFileName="撐#還Ǐⷾ眽Ə")) returned 0xffffffff [0200.287] GetLastError () returned 0x3 [0200.287] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x1cf8b18 | out: lpMode=0x1cf8b18) returned 0 [0200.287] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="畦正", cchWideChar=2, lpMultiByteStr=0x1cf7708, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ç\x95¦æ­£", lpUsedDefaultChar=0x0) returned 6 [0200.287] WriteFile (in: hFile=0x90, lpBuffer=0x1cf7708, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x1cf7700, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x1cf7700, lpOverlapped=0x0) returned 0 [0200.288] GetLastError () returned 0x6 [0200.288] GetLastError () returned 0x6 [0200.288] lstrcmpW (lpString1="Ÿź㋈#鉄Ǐ", lpString2=".") returned 1 [0200.288] lstrcmpW (lpString1="Ÿź㋈#鉄Ǐ", lpString2="..") returned 1 [0200.288] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204b90 [0200.288] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1a0) returned 0x233820 [0200.288] FindNextFileW (in: hFindFile=0xffffffff, lpFindFileData=0x1cf8e28 | out: lpFindFileData=0x1cf8e28*(dwFileAttributes=0xc000003a, ftCreationTime.dwLowDateTime=0x7726971a, ftCreationTime.dwHighDateTime=0x204e68, ftLastAccessTime.dwLowDateTime=0x204e50, ftLastAccessTime.dwHighDateTime=0x7726964e, ftLastWriteTime.dwLowDateTime=0x1f0000, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x17a017a, nFileSizeLow=0x233450, dwReserved0=0x20002, dwReserved1=0x2335ca, cFileName="Ÿź㋈#鉄Ǐ", cAlternateFileName="撐#還Ǐⷾ眽Ə")) returned 0 [0200.288] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0200.288] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2293b8 [0200.288] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ab8 [0200.288] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x237480 [0200.288] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1a0) returned 0x2339c8 [0200.288] FindFirstFileW (in: lpFileName="C:\\\\Documents and Settings\\zh-TW\\䔀#Ǐest.\\DF鑘#Ǐ\x03\\偀!Ǐ\\fh꯸\"Ǐ\\ꕸ\"Ǐ\\~\x80頰\"?Ǐ\\ᄘ\"?Ǐ\\\x96\x98鳰!퐄Ǐ\\퐨\"䟟眽굏᨜°\\®°授\"쯌Ǐ\\\"잰ǏÀ\x1fʄ\x1f\\䟟眽ꇷ᨜à\\༰#䟟眽?᨜ð\\䟟眽?᨜Ā\\ﭸ$䟟眽햧᨜Đ\\ĆĈฐ&댤Ǐ\\ᅰ!䟟眽챯᨜İ\\䟟眽졏᨜ŀ\\姀#䟟眽쐷᨜ŀ\\䟟眽쀗᨜Ő\\嶨#䟟眽ﳿ᨜Š\\䟟眽᨜Ű\\鉠#䟟眽᨜ƀ\\Ÿź㋈#鉄Ǐ\\*", lpFindFileData=0x1cf8a0c | out: lpFindFileData=0x1cf8a0c*(dwFileAttributes=0x7726971a, ftCreationTime.dwLowDateTime=0x204f68, ftCreationTime.dwHighDateTime=0x204f50, ftLastAccessTime.dwLowDateTime=0x7726964e, ftLastAccessTime.dwHighDateTime=0xb6, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x18a018a, nFileSizeHigh=0x237480, nFileSizeLow=0x20002, dwReserved0=0x23760a, dwReserved1=0x18a0188, cFileName="忈#䟟眽᨜Ơ", cAlternateFileName="Ɛ")) returned 0xffffffff [0200.289] GetLastError () returned 0x3 [0200.289] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x1cf86fc | out: lpMode=0x1cf86fc) returned 0 [0200.289] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="畦正", cchWideChar=2, lpMultiByteStr=0x1cf72ec, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ç\x95¦æ­£", lpUsedDefaultChar=0x0) returned 6 [0200.289] WriteFile (in: hFile=0x90, lpBuffer=0x1cf72ec, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x1cf72e4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x1cf72e4, lpOverlapped=0x0) returned 0 [0200.289] GetLastError () returned 0x6 [0200.289] GetLastError () returned 0x6 [0200.289] lstrcmpW (lpString1="忈#䟟眽᨜Ơ", lpString2=".") returned 1 [0200.289] lstrcmpW (lpString1="忈#䟟眽᨜Ơ", lpString2="..") returned 1 [0200.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204bf0 [0200.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b0) returned 0x2339c8 [0200.289] FindNextFileW (in: hFindFile=0xffffffff, lpFindFileData=0x1cf8a0c | out: lpFindFileData=0x1cf8a0c*(dwFileAttributes=0x7726971a, ftCreationTime.dwLowDateTime=0x204f68, ftCreationTime.dwHighDateTime=0x204f50, ftLastAccessTime.dwLowDateTime=0x7726964e, ftLastAccessTime.dwHighDateTime=0xb6, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x18a018a, nFileSizeHigh=0x237480, nFileSizeLow=0x20002, dwReserved0=0x23760a, dwReserved1=0x18a0188, cFileName="忈#䟟眽᨜Ơ", cAlternateFileName="Ɛ")) returned 0 [0200.289] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0200.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228ef0 [0200.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c48 [0200.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x236628 [0200.290] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b0) returned 0x223fd8 [0200.290] FindFirstFileW (in: lpFileName="C:\\\\Documents and Settings\\zh-TW\\䔀#Ǐest.\\DF鑘#Ǐ\x03\\偀!Ǐ\\fh꯸\"Ǐ\\ꕸ\"Ǐ\\~\x80頰\"?Ǐ\\ᄘ\"?Ǐ\\\x96\x98鳰!퐄Ǐ\\퐨\"䟟眽굏᨜°\\®°授\"쯌Ǐ\\\"잰ǏÀ\x1fʄ\x1f\\䟟眽ꇷ᨜à\\༰#䟟眽?᨜ð\\䟟眽?᨜Ā\\ﭸ$䟟眽햧᨜Đ\\ĆĈฐ&댤Ǐ\\ᅰ!䟟眽챯᨜İ\\䟟眽졏᨜ŀ\\姀#䟟眽쐷᨜ŀ\\䟟眽쀗᨜Ő\\嶨#䟟眽ﳿ᨜Š\\䟟眽᨜Ű\\鉠#䟟眽᨜ƀ\\Ÿź㋈#鉄Ǐ\\忈#䟟眽᨜Ơ\\*", lpFindFileData=0x1cf85f0 | out: lpFindFileData=0x1cf85f0*(dwFileAttributes=0xc000003a, ftCreationTime.dwLowDateTime=0x7726971a, ftCreationTime.dwHighDateTime=0x204ba8, ftLastAccessTime.dwLowDateTime=0x204b90, ftLastAccessTime.dwHighDateTime=0x7726964e, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x1980198, nFileSizeLow=0x223bb8, dwReserved0=0x20002, dwReserved1=0x223d50, cFileName="䟟眽᨜ư", cAlternateFileName="昨#行Ǐⷾ眽Ə")) returned 0xffffffff [0200.290] GetLastError () returned 0x3 [0200.290] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x1cf82e0 | out: lpMode=0x1cf82e0) returned 0 [0200.290] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="畦正", cchWideChar=2, lpMultiByteStr=0x1cf6ed0, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ç\x95¦æ­£", lpUsedDefaultChar=0x0) returned 6 [0200.290] WriteFile (in: hFile=0x90, lpBuffer=0x1cf6ed0, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x1cf6ec8, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x1cf6ec8, lpOverlapped=0x0) returned 0 [0200.290] GetLastError () returned 0x6 [0200.290] GetLastError () returned 0x6 [0200.290] lstrcmpW (lpString1="䟟眽᨜ư", lpString2=".") returned 1 [0200.291] lstrcmpW (lpString1="䟟眽᨜ư", lpString2="..") returned 1 [0200.291] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204bb0 [0200.291] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b0) returned 0x223fd8 [0200.291] FindNextFileW (in: hFindFile=0xffffffff, lpFindFileData=0x1cf85f0 | out: lpFindFileData=0x1cf85f0*(dwFileAttributes=0xc000003a, ftCreationTime.dwLowDateTime=0x7726971a, ftCreationTime.dwHighDateTime=0x204ba8, ftLastAccessTime.dwLowDateTime=0x204b90, ftLastAccessTime.dwHighDateTime=0x7726964e, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x1980198, nFileSizeLow=0x223bb8, dwReserved0=0x20002, dwReserved1=0x223d50, cFileName="䟟眽᨜ư", cAlternateFileName="昨#行Ǐⷾ眽Ə")) returned 0 [0200.291] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0200.291] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2290e8 [0200.291] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609c8 [0200.291] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2367c0 [0200.291] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c0) returned 0x224348 [0200.291] FindFirstFileW (in: lpFileName="C:\\\\Documents and Settings\\zh-TW\\䔀#Ǐest.\\DF鑘#Ǐ\x03\\偀!Ǐ\\fh꯸\"Ǐ\\ꕸ\"Ǐ\\~\x80頰\"?Ǐ\\ᄘ\"?Ǐ\\\x96\x98鳰!퐄Ǐ\\퐨\"䟟眽굏᨜°\\®°授\"쯌Ǐ\\\"잰ǏÀ\x1fʄ\x1f\\䟟眽ꇷ᨜à\\༰#䟟眽?᨜ð\\䟟眽?᨜Ā\\ﭸ$䟟眽햧᨜Đ\\ĆĈฐ&댤Ǐ\\ᅰ!䟟眽챯᨜İ\\䟟眽졏᨜ŀ\\姀#䟟眽쐷᨜ŀ\\䟟眽쀗᨜Ő\\嶨#䟟眽ﳿ᨜Š\\䟟眽᨜Ű\\鉠#䟟眽᨜ƀ\\Ÿź㋈#鉄Ǐ\\忈#䟟眽᨜Ơ\\䟟眽᨜ư\\*", lpFindFileData=0x1cf81d4 | out: lpFindFileData=0x1cf81d4*(dwFileAttributes=0x7726971a, ftCreationTime.dwLowDateTime=0x204c08, ftCreationTime.dwHighDateTime=0x204bf0, ftLastAccessTime.dwLowDateTime=0x7726964e, ftLastAccessTime.dwHighDateTime=0x1cc, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x1a801a8, nFileSizeHigh=0x224190, nFileSizeLow=0x20002, dwReserved0=0x224338, dwReserved1=0x1a801a6, cFileName="㿘\"䟟眽᨜ư", cAlternateFileName="Ɛ")) returned 0xffffffff [0200.291] GetLastError () returned 0x3 [0200.292] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x1cf7ec4 | out: lpMode=0x1cf7ec4) returned 0 [0200.292] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="畦正", cchWideChar=2, lpMultiByteStr=0x1cf6ab4, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ç\x95¦æ­£", lpUsedDefaultChar=0x0) returned 6 [0200.292] WriteFile (in: hFile=0x90, lpBuffer=0x1cf6ab4, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x1cf6aac, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x1cf6aac, lpOverlapped=0x0) returned 0 [0200.292] GetLastError () returned 0x6 [0200.292] GetLastError () returned 0x6 [0200.292] lstrcmpW (lpString1="㿘\"䟟眽᨜ư", lpString2=".") returned 1 [0200.292] lstrcmpW (lpString1="㿘\"䟟眽᨜ư", lpString2="..") returned 1 [0200.292] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204c10 [0200.292] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c0) returned 0x224348 [0200.292] FindNextFileW (in: hFindFile=0xffffffff, lpFindFileData=0x1cf81d4 | out: lpFindFileData=0x1cf81d4*(dwFileAttributes=0x7726971a, ftCreationTime.dwLowDateTime=0x204c08, ftCreationTime.dwHighDateTime=0x204bf0, ftLastAccessTime.dwLowDateTime=0x7726964e, ftLastAccessTime.dwHighDateTime=0x1cc, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x1a801a8, nFileSizeHigh=0x224190, nFileSizeLow=0x20002, dwReserved0=0x224338, dwReserved1=0x1a801a6, cFileName="㿘\"䟟眽᨜ư", cAlternateFileName="Ɛ")) returned 0 [0200.292] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0200.292] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2292e0 [0200.292] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0200.292] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2377b0 [0200.292] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1d0) returned 0x2246d8 [0200.292] FindFirstFileW (in: lpFileName="C:\\\\Documents and Settings\\zh-TW\\䔀#Ǐest.\\DF鑘#Ǐ\x03\\偀!Ǐ\\fh꯸\"Ǐ\\ꕸ\"Ǐ\\~\x80頰\"?Ǐ\\ᄘ\"?Ǐ\\\x96\x98鳰!퐄Ǐ\\퐨\"䟟眽굏᨜°\\®°授\"쯌Ǐ\\\"잰ǏÀ\x1fʄ\x1f\\䟟眽ꇷ᨜à\\༰#䟟眽?᨜ð\\䟟眽?᨜Ā\\ﭸ$䟟眽햧᨜Đ\\ĆĈฐ&댤Ǐ\\ᅰ!䟟眽챯᨜İ\\䟟眽졏᨜ŀ\\姀#䟟眽쐷᨜ŀ\\䟟眽쀗᨜Ő\\嶨#䟟眽ﳿ᨜Š\\䟟眽᨜Ű\\鉠#䟟眽᨜ƀ\\Ÿź㋈#鉄Ǐ\\忈#䟟眽᨜Ơ\\䟟眽᨜ư\\㿘\"䟟眽᨜ư\\*", lpFindFileData=0x1cf7db8 | out: lpFindFileData=0x1cf7db8*(dwFileAttributes=0xc000003a, ftCreationTime.dwLowDateTime=0x7726971a, ftCreationTime.dwHighDateTime=0x204bc8, ftLastAccessTime.dwLowDateTime=0x204bb0, ftLastAccessTime.dwHighDateTime=0x7726964e, ftLastWriteTime.dwLowDateTime=0x1f0000, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x1b401b4, nFileSizeLow=0x224510, dwReserved0=0x20002, dwReserved1=0x2246c4, cFileName="䟟眽ἷ᨜ǀ", cAlternateFileName="瞰#耔Ǐⷾ眽Ə")) returned 0xffffffff [0200.293] GetLastError () returned 0x3 [0200.293] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x1cf7aa8 | out: lpMode=0x1cf7aa8) returned 0 [0200.293] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="畦正", cchWideChar=2, lpMultiByteStr=0x1cf6698, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ç\x95¦æ­£", lpUsedDefaultChar=0x0) returned 6 [0200.293] WriteFile (in: hFile=0x90, lpBuffer=0x1cf6698, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x1cf6690, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x1cf6690, lpOverlapped=0x0) returned 0 [0200.293] GetLastError () returned 0x6 [0200.293] GetLastError () returned 0x6 [0200.293] lstrcmpW (lpString1="䟟眽ἷ᨜ǀ", lpString2=".") returned 1 [0200.293] lstrcmpW (lpString1="䟟眽ἷ᨜ǀ", lpString2="..") returned 1 [0200.293] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204c50 [0200.293] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1d0) returned 0x2246d8 [0200.293] FindNextFileW (in: hFindFile=0xffffffff, lpFindFileData=0x1cf7db8 | out: lpFindFileData=0x1cf7db8*(dwFileAttributes=0xc000003a, ftCreationTime.dwLowDateTime=0x7726971a, ftCreationTime.dwHighDateTime=0x204bc8, ftLastAccessTime.dwLowDateTime=0x204bb0, ftLastAccessTime.dwHighDateTime=0x7726964e, ftLastWriteTime.dwLowDateTime=0x1f0000, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x1b401b4, nFileSizeLow=0x224510, dwReserved0=0x20002, dwReserved1=0x2246c4, cFileName="䟟眽ἷ᨜ǀ", cAlternateFileName="瞰#耔Ǐⷾ眽Ə")) returned 0 [0200.293] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0200.294] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228f80 [0200.294] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0200.294] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x236c88 [0200.294] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1d0) returned 0x22bac8 [0200.294] FindFirstFileW (in: lpFileName="C:\\\\Documents and Settings\\zh-TW\\䔀#Ǐest.\\DF鑘#Ǐ\x03\\偀!Ǐ\\fh꯸\"Ǐ\\ꕸ\"Ǐ\\~\x80頰\"?Ǐ\\ᄘ\"?Ǐ\\\x96\x98鳰!퐄Ǐ\\퐨\"䟟眽굏᨜°\\®°授\"쯌Ǐ\\\"잰ǏÀ\x1fʄ\x1f\\䟟眽ꇷ᨜à\\༰#䟟眽?᨜ð\\䟟眽?᨜Ā\\ﭸ$䟟眽햧᨜Đ\\ĆĈฐ&댤Ǐ\\ᅰ!䟟眽챯᨜İ\\䟟眽졏᨜ŀ\\姀#䟟眽쐷᨜ŀ\\䟟眽쀗᨜Ő\\嶨#䟟眽ﳿ᨜Š\\䟟眽᨜Ű\\鉠#䟟眽᨜ƀ\\Ÿź㋈#鉄Ǐ\\忈#䟟眽᨜Ơ\\䟟眽᨜ư\\㿘\"䟟眽᨜ư\\䟟眽ἷ᨜ǀ\\*", lpFindFileData=0x1cf799c | out: lpFindFileData=0x1cf799c*(dwFileAttributes=0x7726971a, ftCreationTime.dwLowDateTime=0x204c28, ftCreationTime.dwHighDateTime=0x204c10, ftLastAccessTime.dwLowDateTime=0x7726964e, ftLastAccessTime.dwHighDateTime=0x9e, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x1c401c4, nFileSizeHigh=0x2248b0, nFileSizeLow=0x20002, dwReserved0=0x224a74, dwReserved1=0x1c401c2, cFileName="䛘\"䟟眽ᬟ᨜ǐ", cAlternateFileName="Ɛ")) returned 0xffffffff [0200.294] GetLastError () returned 0x3 [0200.294] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x1cf768c | out: lpMode=0x1cf768c) returned 0 [0200.294] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="畦正", cchWideChar=2, lpMultiByteStr=0x1cf627c, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ç\x95¦æ­£", lpUsedDefaultChar=0x0) returned 6 [0200.294] WriteFile (in: hFile=0x90, lpBuffer=0x1cf627c, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x1cf6274, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x1cf6274, lpOverlapped=0x0) returned 0 [0200.295] GetLastError () returned 0x6 [0200.295] GetLastError () returned 0x6 [0200.579] lstrcmpW (lpString1="䛘\"䟟眽ᬟ᨜ǐ", lpString2=".") returned 1 [0200.579] lstrcmpW (lpString1="䛘\"䟟眽ᬟ᨜ǐ", lpString2="..") returned 1 [0200.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204cb0 [0200.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1e0) returned 0x22bac8 [0200.579] FindNextFileW (in: hFindFile=0xffffffff, lpFindFileData=0x1cf799c | out: lpFindFileData=0x1cf799c*(dwFileAttributes=0x7726971a, ftCreationTime.dwLowDateTime=0x204c28, ftCreationTime.dwHighDateTime=0x204c10, ftLastAccessTime.dwLowDateTime=0x7726964e, ftLastAccessTime.dwHighDateTime=0x9e, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x1c401c4, nFileSizeHigh=0x2248b0, nFileSizeLow=0x20002, dwReserved0=0x224a74, dwReserved1=0x1c401c2, cFileName="䛘\"䟟眽ᬟ᨜ǐ", cAlternateFileName="Ɛ")) returned 0 [0200.579] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0200.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228e60 [0200.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0200.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x236e20 [0200.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1e0) returned 0x22c138 [0200.580] FindFirstFileW (in: lpFileName="C:\\\\Documents and Settings\\zh-TW\\䔀#Ǐest.\\DF鑘#Ǐ\x03\\偀!Ǐ\\fh꯸\"Ǐ\\ꕸ\"Ǐ\\~\x80頰\"?Ǐ\\ᄘ\"?Ǐ\\\x96\x98鳰!퐄Ǐ\\퐨\"䟟眽굏᨜°\\®°授\"쯌Ǐ\\\"잰ǏÀ\x1fʄ\x1f\\䟟眽ꇷ᨜à\\༰#䟟眽?᨜ð\\䟟眽?᨜Ā\\ﭸ$䟟眽햧᨜Đ\\ĆĈฐ&댤Ǐ\\ᅰ!䟟眽챯᨜İ\\䟟眽졏᨜ŀ\\姀#䟟眽쐷᨜ŀ\\䟟眽쀗᨜Ő\\嶨#䟟眽ﳿ᨜Š\\䟟眽᨜Ű\\鉠#䟟眽᨜ƀ\\Ÿź㋈#鉄Ǐ\\忈#䟟眽᨜Ơ\\䟟眽᨜ư\\㿘\"䟟眽᨜ư\\䟟眽ἷ᨜ǀ\\䛘\"䟟眽ᬟ᨜ǐ\\*", lpFindFileData=0x1cf7580 | out: lpFindFileData=0x1cf7580*(dwFileAttributes=0xc000003a, ftCreationTime.dwLowDateTime=0x7726971a, ftCreationTime.dwHighDateTime=0x204c68, ftLastAccessTime.dwLowDateTime=0x204c50, ftLastAccessTime.dwHighDateTime=0x7726964e, ftLastWriteTime.dwLowDateTime=0x1f0000, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x1d001d0, nFileSizeLow=0x22bca0, dwReserved0=0x20002, dwReserved1=0x22be70, cFileName="䟟眽៿᨜Ǡ", cAlternateFileName="渠#矜Ǐⷾ眽Ə")) returned 0xffffffff [0200.581] GetLastError () returned 0x3 [0200.581] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x1cf7270 | out: lpMode=0x1cf7270) returned 0 [0200.581] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="畦正", cchWideChar=2, lpMultiByteStr=0x1cf5e60, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ç\x95¦æ­£", lpUsedDefaultChar=0x0) returned 6 [0200.581] WriteFile (in: hFile=0x90, lpBuffer=0x1cf5e60, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x1cf5e58, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x1cf5e58, lpOverlapped=0x0) returned 0 [0200.581] GetLastError () returned 0x6 [0200.581] GetLastError () returned 0x6 [0200.582] lstrcmpW (lpString1="䟟眽៿᨜Ǡ", lpString2=".") returned 1 [0200.582] lstrcmpW (lpString1="䟟眽៿᨜Ǡ", lpString2="..") returned 1 [0200.582] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204cd0 [0200.582] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1f0) returned 0x22c138 [0200.582] FindNextFileW (in: hFindFile=0xffffffff, lpFindFileData=0x1cf7580 | out: lpFindFileData=0x1cf7580*(dwFileAttributes=0xc000003a, ftCreationTime.dwLowDateTime=0x7726971a, ftCreationTime.dwHighDateTime=0x204c68, ftLastAccessTime.dwLowDateTime=0x204c50, ftLastAccessTime.dwHighDateTime=0x7726964e, ftLastWriteTime.dwLowDateTime=0x1f0000, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x1d001d0, nFileSizeLow=0x22bca0, dwReserved0=0x20002, dwReserved1=0x22be70, cFileName="䟟眽៿᨜Ǡ", cAlternateFileName="渠#矜Ǐⷾ眽Ə")) returned 0 [0200.582] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0200.582] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228ea8 [0200.582] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0200.582] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x237150 [0200.582] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1f0) returned 0x22c7e0 [0200.582] FindFirstFileW (in: lpFileName="C:\\\\Documents and Settings\\zh-TW\\䔀#Ǐest.\\DF鑘#Ǐ\x03\\偀!Ǐ\\fh꯸\"Ǐ\\ꕸ\"Ǐ\\~\x80頰\"?Ǐ\\ᄘ\"?Ǐ\\\x96\x98鳰!퐄Ǐ\\퐨\"䟟眽굏᨜°\\®°授\"쯌Ǐ\\\"잰ǏÀ\x1fʄ\x1f\\䟟眽ꇷ᨜à\\༰#䟟眽?᨜ð\\䟟眽?᨜Ā\\ﭸ$䟟眽햧᨜Đ\\ĆĈฐ&댤Ǐ\\ᅰ!䟟眽챯᨜İ\\䟟眽졏᨜ŀ\\姀#䟟眽쐷᨜ŀ\\䟟眽쀗᨜Ő\\嶨#䟟眽ﳿ᨜Š\\䟟眽᨜Ű\\鉠#䟟眽᨜ƀ\\Ÿź㋈#鉄Ǐ\\忈#䟟眽᨜Ơ\\䟟眽᨜ư\\㿘\"䟟眽᨜ư\\䟟眽ἷ᨜ǀ\\䛘\"䟟眽ᬟ᨜ǐ\\䟟眽៿᨜Ǡ\\*", lpFindFileData=0x1cf7164 | out: lpFindFileData=0x1cf7164*(dwFileAttributes=0x7726971a, ftCreationTime.dwLowDateTime=0x204cc8, ftCreationTime.dwHighDateTime=0x204cb0, ftLastAccessTime.dwLowDateTime=0x7726964e, ftLastAccessTime.dwHighDateTime=0x1ee, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x1e001e0, nFileSizeHigh=0x22c320, nFileSizeLow=0x20002, dwReserved0=0x22c500, dwReserved1=0x1e001de, cFileName="세\"䟟眽Ꮷ᨜ǰ", cAlternateFileName="Ɛ")) returned 0xffffffff [0200.583] GetLastError () returned 0x3 [0200.583] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x1cf6e54 | out: lpMode=0x1cf6e54) returned 0 [0200.583] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="畦正", cchWideChar=2, lpMultiByteStr=0x1cf5a44, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ç\x95¦æ­£", lpUsedDefaultChar=0x0) returned 6 [0200.583] WriteFile (in: hFile=0x90, lpBuffer=0x1cf5a44, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x1cf5a3c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x1cf5a3c, lpOverlapped=0x0) returned 0 [0200.583] GetLastError () returned 0x6 [0200.583] GetLastError () returned 0x6 [0200.584] lstrcmpW (lpString1="세\"䟟眽Ꮷ᨜ǰ", lpString2=".") returned 1 [0200.584] lstrcmpW (lpString1="세\"䟟眽Ꮷ᨜ǰ", lpString2="..") returned 1 [0200.584] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204cf0 [0200.584] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x200) returned 0x22c7e0 [0200.584] FindNextFileW (in: hFindFile=0xffffffff, lpFindFileData=0x1cf7164 | out: lpFindFileData=0x1cf7164*(dwFileAttributes=0x7726971a, ftCreationTime.dwLowDateTime=0x204cc8, ftCreationTime.dwHighDateTime=0x204cb0, ftLastAccessTime.dwLowDateTime=0x7726964e, ftLastAccessTime.dwHighDateTime=0x1ee, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x1e001e0, nFileSizeHigh=0x22c320, nFileSizeLow=0x20002, dwReserved0=0x22c500, dwReserved1=0x1e001de, cFileName="세\"䟟眽Ꮷ᨜ǰ", cAlternateFileName="Ɛ")) returned 0 [0200.584] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0200.584] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229058 [0200.584] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238460 [0200.584] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2372e8 [0200.585] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x200) returned 0x22c9e8 [0200.585] FindFirstFileW (in: lpFileName="C:\\\\Documents and Settings\\zh-TW\\䔀#Ǐest.\\DF鑘#Ǐ\x03\\偀!Ǐ\\fh꯸\"Ǐ\\ꕸ\"Ǐ\\~\x80頰\"?Ǐ\\ᄘ\"?Ǐ\\\x96\x98鳰!퐄Ǐ\\퐨\"䟟眽굏᨜°\\®°授\"쯌Ǐ\\\"잰ǏÀ\x1fʄ\x1f\\䟟眽ꇷ᨜à\\༰#䟟眽?᨜ð\\䟟眽?᨜Ā\\ﭸ$䟟眽햧᨜Đ\\ĆĈฐ&댤Ǐ\\ᅰ!䟟眽챯᨜İ\\䟟眽졏᨜ŀ\\姀#䟟眽쐷᨜ŀ\\䟟眽쀗᨜Ő\\嶨#䟟眽ﳿ᨜Š\\䟟眽᨜Ű\\鉠#䟟眽᨜ƀ\\Ÿź㋈#鉄Ǐ\\忈#䟟眽᨜Ơ\\䟟眽᨜ư\\㿘\"䟟眽᨜ư\\䟟眽ἷ᨜ǀ\\䛘\"䟟眽ᬟ᨜ǐ\\䟟眽៿᨜Ǡ\\세\"䟟眽Ꮷ᨜ǰ\\*", lpFindFileData=0x1cf6d48 | out: lpFindFileData=0x1cf6d48*(dwFileAttributes=0xc000003a, ftCreationTime.dwLowDateTime=0x7726971a, ftCreationTime.dwHighDateTime=0x204ce8, ftLastAccessTime.dwLowDateTime=0x204cd0, ftLastAccessTime.dwHighDateTime=0x7726964e, ftLastWriteTime.dwLowDateTime=0x1f0000, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x1ec01ec, nFileSizeLow=0x22c9d8, dwReserved0=0x20002, dwReserved1=0x22cbc4, cFileName="䟟眽࿇᨜Ȁ", cAlternateFileName="狨#澤Ǐⷾ眽Ə")) returned 0xffffffff [0200.585] GetLastError () returned 0x3 [0200.585] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x1cf6a38 | out: lpMode=0x1cf6a38) returned 0 [0200.586] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="畦正", cchWideChar=2, lpMultiByteStr=0x1cf5628, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ç\x95¦æ­£", lpUsedDefaultChar=0x0) returned 6 [0200.586] WriteFile (in: hFile=0x90, lpBuffer=0x1cf5628, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x1cf5620, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x1cf5620, lpOverlapped=0x0) returned 0 [0200.586] GetLastError () returned 0x6 [0200.586] GetLastError () returned 0x6 [0200.586] lstrcmpW (lpString1="䟟眽࿇᨜Ȁ", lpString2=".") returned 1 [0200.586] lstrcmpW (lpString1="䟟眽࿇᨜Ȁ", lpString2="..") returned 1 [0200.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204d10 [0200.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x210) returned 0x22c9e8 [0200.587] FindNextFileW (in: hFindFile=0xffffffff, lpFindFileData=0x1cf6d48 | out: lpFindFileData=0x1cf6d48*(dwFileAttributes=0xc000003a, ftCreationTime.dwLowDateTime=0x7726971a, ftCreationTime.dwHighDateTime=0x204ce8, ftLastAccessTime.dwLowDateTime=0x204cd0, ftLastAccessTime.dwHighDateTime=0x7726964e, ftLastWriteTime.dwLowDateTime=0x1f0000, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x1ec01ec, nFileSizeLow=0x22c9d8, dwReserved0=0x20002, dwReserved1=0x22cbc4, cFileName="䟟眽࿇᨜Ȁ", cAlternateFileName="狨#澤Ǐⷾ眽Ə")) returned 0 [0200.587] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0200.587] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229130 [0200.587] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0200.587] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e9c0 [0200.587] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x210) returned 0x21ff40 [0200.587] FindFirstFileW (in: lpFileName="C:\\\\Documents and Settings\\zh-TW\\䔀#Ǐest.\\DF鑘#Ǐ\x03\\偀!Ǐ\\fh꯸\"Ǐ\\ꕸ\"Ǐ\\~\x80頰\"?Ǐ\\ᄘ\"?Ǐ\\\x96\x98鳰!퐄Ǐ\\퐨\"䟟眽굏᨜°\\®°授\"쯌Ǐ\\\"잰ǏÀ\x1fʄ\x1f\\䟟眽ꇷ᨜à\\༰#䟟眽?᨜ð\\䟟眽?᨜Ā\\ﭸ$䟟眽햧᨜Đ\\ĆĈฐ&댤Ǐ\\ᅰ!䟟眽챯᨜İ\\䟟眽졏᨜ŀ\\姀#䟟眽쐷᨜ŀ\\䟟眽쀗᨜Ő\\嶨#䟟眽ﳿ᨜Š\\䟟眽᨜Ű\\鉠#䟟眽᨜ƀ\\Ÿź㋈#鉄Ǐ\\忈#䟟眽᨜Ơ\\䟟眽᨜ư\\㿘\"䟟眽᨜ư\\䟟眽ἷ᨜ǀ\\䛘\"䟟眽ᬟ᨜ǐ\\䟟眽៿᨜Ǡ\\세\"䟟眽Ꮷ᨜ǰ\\䟟眽࿇᨜Ȁ\\*", lpFindFileData=0x1cf692c | out: lpFindFileData=0x1cf692c*(dwFileAttributes=0x7726971a, ftCreationTime.dwLowDateTime=0x204d08, ftCreationTime.dwHighDateTime=0x204cf0, ftLastAccessTime.dwLowDateTime=0x7726964e, ftLastAccessTime.dwHighDateTime=0x44, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x1fc01fc, nFileSizeHigh=0x21fa30, nFileSizeLow=0x20002, dwReserved0=0x21fc2c, dwReserved1=0x1fc01fa, cFileName="짨\"䟟眽ய᨜Ȑ", cAlternateFileName="Ɛ")) returned 0xffffffff [0200.588] GetLastError () returned 0x3 [0200.588] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x1cf661c | out: lpMode=0x1cf661c) returned 0 [0200.588] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="畦正", cchWideChar=2, lpMultiByteStr=0x1cf520c, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ç\x95¦æ­£", lpUsedDefaultChar=0x0) returned 6 [0200.588] WriteFile (in: hFile=0x90, lpBuffer=0x1cf520c, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x1cf5204, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x1cf5204, lpOverlapped=0x0) returned 0 [0200.589] GetLastError () returned 0x6 [0200.589] GetLastError () returned 0x6 [0200.589] lstrcmpW (lpString1="짨\"䟟眽ய᨜Ȑ", lpString2=".") returned 1 [0200.589] lstrcmpW (lpString1="짨\"䟟眽ய᨜Ȑ", lpString2="..") returned 1 [0200.589] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x261598 [0200.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x220) returned 0x21ff40 [0200.590] FindNextFileW (in: hFindFile=0xffffffff, lpFindFileData=0x1cf692c | out: lpFindFileData=0x1cf692c*(dwFileAttributes=0x7726971a, ftCreationTime.dwLowDateTime=0x204d08, ftCreationTime.dwHighDateTime=0x204cf0, ftLastAccessTime.dwLowDateTime=0x7726964e, ftLastAccessTime.dwHighDateTime=0x44, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x1fc01fc, nFileSizeHigh=0x21fa30, nFileSizeLow=0x20002, dwReserved0=0x21fc2c, dwReserved1=0x1fc01fa, cFileName="짨\"䟟眽ய᨜Ȑ", cAlternateFileName="Ɛ")) returned 0 [0200.590] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0200.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2285f0 [0200.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0200.591] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22eb58 [0200.591] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x220) returned 0x21eac8 [0200.591] FindFirstFileW (in: lpFileName="C:\\\\Documents and Settings\\zh-TW\\䔀#Ǐest.\\DF鑘#Ǐ\x03\\偀!Ǐ\\fh꯸\"Ǐ\\ꕸ\"Ǐ\\~\x80頰\"?Ǐ\\ᄘ\"?Ǐ\\\x96\x98鳰!퐄Ǐ\\퐨\"䟟眽굏᨜°\\®°授\"쯌Ǐ\\\"잰ǏÀ\x1fʄ\x1f\\䟟眽ꇷ᨜à\\༰#䟟眽?᨜ð\\䟟眽?᨜Ā\\ﭸ$䟟眽햧᨜Đ\\ĆĈฐ&댤Ǐ\\ᅰ!䟟眽챯᨜İ\\䟟眽졏᨜ŀ\\姀#䟟眽쐷᨜ŀ\\䟟眽쀗᨜Ő\\嶨#䟟眽ﳿ᨜Š\\䟟眽᨜Ű\\鉠#䟟眽᨜ƀ\\Ÿź㋈#鉄Ǐ\\忈#䟟眽᨜Ơ\\䟟眽᨜ư\\㿘\"䟟眽᨜ư\\䟟眽ἷ᨜ǀ\\䛘\"䟟眽ᬟ᨜ǐ\\䟟眽៿᨜Ǡ\\세\"䟟眽Ꮷ᨜ǰ\\䟟眽࿇᨜Ȁ\\짨\"䟟眽ய᨜Ȑ\\*", lpFindFileData=0x1cf6510 | out: lpFindFileData=0x1cf6510*(dwFileAttributes=0xc000003a, ftCreationTime.dwLowDateTime=0x7726971a, ftCreationTime.dwHighDateTime=0x1f00c0, ftLastAccessTime.dwLowDateTime=0x204d10, ftLastAccessTime.dwHighDateTime=0x7726964e, ftLastWriteTime.dwLowDateTime=0x1f0000, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x2080208, nFileSizeLow=0x220158, dwReserved0=0x808, dwReserved1=0x1f769a, cFileName="䟟眽ޏ᨜Ƞ", cAlternateFileName="\"杬Ǐⷾ眽Ə")) returned 0xffffffff [0200.591] GetLastError () returned 0x3 [0200.591] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x1cf6200 | out: lpMode=0x1cf6200) returned 0 [0200.592] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="畦正", cchWideChar=2, lpMultiByteStr=0x1cf4df0, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ç\x95¦æ­£", lpUsedDefaultChar=0x0) returned 6 [0200.592] WriteFile (in: hFile=0x90, lpBuffer=0x1cf4df0, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x1cf4de8, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x1cf4de8, lpOverlapped=0x0) returned 0 [0200.592] GetLastError () returned 0x6 [0200.593] GetLastError () returned 0x6 [0200.593] lstrcmpW (lpString1="䟟眽ޏ᨜Ƞ", lpString2=".") returned 1 [0200.593] lstrcmpW (lpString1="䟟眽ޏ᨜Ƞ", lpString2="..") returned 1 [0200.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x2615f8 [0200.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x220) returned 0x21d988 [0200.593] FindNextFileW (in: hFindFile=0xffffffff, lpFindFileData=0x1cf6510 | out: lpFindFileData=0x1cf6510*(dwFileAttributes=0xc000003a, ftCreationTime.dwLowDateTime=0x7726971a, ftCreationTime.dwHighDateTime=0x1f00c0, ftLastAccessTime.dwLowDateTime=0x204d10, ftLastAccessTime.dwHighDateTime=0x7726964e, ftLastWriteTime.dwLowDateTime=0x1f0000, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x2080208, nFileSizeLow=0x220158, dwReserved0=0x808, dwReserved1=0x1f769a, cFileName="䟟眽ޏ᨜Ƞ", cAlternateFileName="\"杬Ǐⷾ眽Ə")) returned 0 [0200.593] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0200.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228758 [0200.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0200.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f020 [0200.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x230) returned 0x220690 [0200.594] FindFirstFileW (in: lpFileName="C:\\\\Documents and Settings\\zh-TW\\䔀#Ǐest.\\DF鑘#Ǐ\x03\\偀!Ǐ\\fh꯸\"Ǐ\\ꕸ\"Ǐ\\~\x80頰\"?Ǐ\\ᄘ\"?Ǐ\\\x96\x98鳰!퐄Ǐ\\퐨\"䟟眽굏᨜°\\®°授\"쯌Ǐ\\\"잰ǏÀ\x1fʄ\x1f\\䟟眽ꇷ᨜à\\༰#䟟眽?᨜ð\\䟟眽?᨜Ā\\ﭸ$䟟眽햧᨜Đ\\ĆĈฐ&댤Ǐ\\ᅰ!䟟眽챯᨜İ\\䟟眽졏᨜ŀ\\姀#䟟眽쐷᨜ŀ\\䟟眽쀗᨜Ő\\嶨#䟟眽ﳿ᨜Š\\䟟眽᨜Ű\\鉠#䟟眽᨜ƀ\\Ÿź㋈#鉄Ǐ\\忈#䟟眽᨜Ơ\\䟟眽᨜ư\\㿘\"䟟眽᨜ư\\䟟眽ἷ᨜ǀ\\䛘\"䟟眽ᬟ᨜ǐ\\䟟眽៿᨜Ǡ\\세\"䟟眽Ꮷ᨜ǰ\\䟟眽࿇᨜Ȁ\\짨\"䟟眽ய᨜Ȑ\\䟟眽ޏ᨜Ƞ\\*", lpFindFileData=0x1cf60f4 | out: lpFindFileData=0x1cf60f4*(dwFileAttributes=0x3, ftCreationTime.dwLowDateTime=0x2615b0, ftCreationTime.dwHighDateTime=0x261598, ftLastAccessTime.dwLowDateTime=0x7726964e, ftLastAccessTime.dwHighDateTime=0x100, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x1f0000, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2180216, cFileName="!攐ǏÀ\x1f虜\x1f", cAlternateFileName="Ɛ")) returned 0xffffffff [0200.594] GetLastError () returned 0x3 [0200.594] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x1cf5de4 | out: lpMode=0x1cf5de4) returned 0 [0200.594] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="畦正", cchWideChar=2, lpMultiByteStr=0x1cf49d4, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ç\x95¦æ­£", lpUsedDefaultChar=0x0) returned 6 [0200.594] WriteFile (in: hFile=0x90, lpBuffer=0x1cf49d4, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x1cf49cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x1cf49cc, lpOverlapped=0x0) returned 0 [0200.594] GetLastError () returned 0x6 [0200.594] GetLastError () returned 0x6 [0200.696] CreateFileW (lpFileName="C:\\\\Documents and Settings\\zh-TW\\䔀#Ǐest.\\DF鑘#Ǐ\x03\\偀!Ǐ\\fh꯸\"Ǐ\\ꕸ\"Ǐ\\~\x80頰\"?Ǐ\\ᄘ\"?Ǐ\\\x96\x98鳰!퐄Ǐ\\퐨\"䟟眽굏᨜°\\®°授\"쯌Ǐ\\\"잰ǏÀ\x1fʄ\x1f\\䟟眽ꇷ᨜à\\༰#䟟眽?᨜ð\\䟟眽?᨜Ā\\ﭸ$䟟眽햧᨜Đ\\ĆĈฐ&댤Ǐ\\ᅰ!䟟眽챯᨜İ\\䟟眽졏᨜ŀ\\姀#䟟眽쐷᨜ŀ\\䟟眽쀗᨜Ő\\嶨#䟟眽ﳿ᨜Š\\䟟眽᨜Ű\\鉠#䟟眽᨜ƀ\\Ÿź㋈#鉄Ǐ\\忈#䟟眽᨜Ơ\\䟟眽᨜ư\\㿘\"䟟眽᨜ư\\䟟眽ἷ᨜ǀ\\䛘\"䟟眽ᬟ᨜ǐ\\䟟眽៿᨜Ǡ\\세\"䟟眽Ꮷ᨜ǰ\\䟟眽࿇᨜Ȁ\\짨\"䟟眽ய᨜Ȑ\\䟟眽ޏ᨜Ƞ\\!攐ǏÀ\x1f虜\x1f" (normalized: "c:\\documents and settings\\zh-tw\\䔀#Ǐest.\\df鑘#Ǐ\x03\\偀!Ǐ\\fh꯸\"Ǐ\\ꕸ\"Ǐ\\~\x80頰\"?Ǐ\\ᄘ\"?Ǐ\\\x96\x98鳰!퐄Ǐ\\퐨\"䟟眽굏᨜°\\®°授\"쯌Ǐ\\\"잰Ǐà\x1fʄ\x1f\\䟟眽ꇷ᨜à\\༰#䟟眽?᨜ð\\䟟眽?᨜Ā\\ﭸ$䟟眽햧᨜Đ\\ĆĈฐ&댤Ǐ\\ᅰ!䟟眽챯᨜İ\\䟟眽졏᨜ŀ\\姀#䟟眽쐷᨜ŀ\\䟟眽쀗᨜Ő\\嶨#䟟眽ﳿ᨜Š\\䟟眽᨜Ű\\鉠#䟟眽᨜ƀ\\Ÿź㋈#鉄Ǐ\\忈#䟟眽᨜Ơ\\䟟眽᨜ư\\㿘\"䟟眽᨜ư\\䟟眽ἷ᨜ǀ\\䛘\"䟟眽ᬟ᨜ǐ\\䟟眽៿᨜Ǡ\\세\"䟟眽Ꮷ᨜ǰ\\䟟眽࿇᨜Ȁ\\짨\"䟟眽ய᨜Ȑ\\䟟眽ޏ᨜Ƞ\\!攐Ǐà\x1f虜\x1f"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cf5ebc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0200.696] GetLastError () returned 0x3 [0200.696] GetLastError () returned 0x3 [0200.696] FindNextFileW (in: hFindFile=0xffffffff, lpFindFileData=0x1cf60f4 | out: lpFindFileData=0x1cf60f4*(dwFileAttributes=0x3, ftCreationTime.dwLowDateTime=0x2615b0, ftCreationTime.dwHighDateTime=0x261598, ftLastAccessTime.dwLowDateTime=0x7726964e, ftLastAccessTime.dwHighDateTime=0x100, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x1f0000, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2180216, cFileName="!攐ǏÀ\x1f虜\x1f", cAlternateFileName="Ɛ")) returned 0 [0200.696] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0200.696] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2617d0 | out: hHeap=0x1f0000) returned 1 [0200.696] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f020 | out: hHeap=0x1f0000) returned 1 [0200.696] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0200.696] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228758 | out: hHeap=0x1f0000) returned 1 [0200.696] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21e678 | out: hHeap=0x1f0000) returned 1 [0200.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d988 | out: hHeap=0x1f0000) returned 1 [0200.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2615f8 | out: hHeap=0x1f0000) returned 1 [0200.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22eb58 | out: hHeap=0x1f0000) returned 1 [0200.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0200.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2285f0 | out: hHeap=0x1f0000) returned 1 [0200.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220370 | out: hHeap=0x1f0000) returned 1 [0200.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ff40 | out: hHeap=0x1f0000) returned 1 [0200.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261598 | out: hHeap=0x1f0000) returned 1 [0200.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e9c0 | out: hHeap=0x1f0000) returned 1 [0200.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0200.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229130 | out: hHeap=0x1f0000) returned 1 [0200.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fc38 | out: hHeap=0x1f0000) returned 1 [0200.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c9e8 | out: hHeap=0x1f0000) returned 1 [0200.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d10 | out: hHeap=0x1f0000) returned 1 [0200.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2372e8 | out: hHeap=0x1f0000) returned 1 [0200.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238460 | out: hHeap=0x1f0000) returned 1 [0200.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229058 | out: hHeap=0x1f0000) returned 1 [0200.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f740 | out: hHeap=0x1f0000) returned 1 [0200.698] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c7e0 | out: hHeap=0x1f0000) returned 1 [0200.698] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cf0 | out: hHeap=0x1f0000) returned 1 [0200.698] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237150 | out: hHeap=0x1f0000) returned 1 [0200.698] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0200.698] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228ea8 | out: hHeap=0x1f0000) returned 1 [0200.698] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c508 | out: hHeap=0x1f0000) returned 1 [0200.698] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c138 | out: hHeap=0x1f0000) returned 1 [0200.698] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cd0 | out: hHeap=0x1f0000) returned 1 [0200.698] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236e20 | out: hHeap=0x1f0000) returned 1 [0200.698] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0200.698] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228e60 | out: hHeap=0x1f0000) returned 1 [0200.698] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22be78 | out: hHeap=0x1f0000) returned 1 [0200.698] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22bac8 | out: hHeap=0x1f0000) returned 1 [0200.698] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cb0 | out: hHeap=0x1f0000) returned 1 [0200.698] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236c88 | out: hHeap=0x1f0000) returned 1 [0200.699] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0200.699] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228f80 | out: hHeap=0x1f0000) returned 1 [0200.699] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2248b0 | out: hHeap=0x1f0000) returned 1 [0200.699] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2246d8 | out: hHeap=0x1f0000) returned 1 [0200.699] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c50 | out: hHeap=0x1f0000) returned 1 [0200.699] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2377b0 | out: hHeap=0x1f0000) returned 1 [0200.699] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0200.699] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2292e0 | out: hHeap=0x1f0000) returned 1 [0200.699] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224510 | out: hHeap=0x1f0000) returned 1 [0200.699] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224348 | out: hHeap=0x1f0000) returned 1 [0200.699] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c10 | out: hHeap=0x1f0000) returned 1 [0200.699] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2367c0 | out: hHeap=0x1f0000) returned 1 [0200.699] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609c8 | out: hHeap=0x1f0000) returned 1 [0200.699] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2290e8 | out: hHeap=0x1f0000) returned 1 [0200.699] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224190 | out: hHeap=0x1f0000) returned 1 [0200.700] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223fd8 | out: hHeap=0x1f0000) returned 1 [0200.700] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bb0 | out: hHeap=0x1f0000) returned 1 [0200.700] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236628 | out: hHeap=0x1f0000) returned 1 [0200.700] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0200.700] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228ef0 | out: hHeap=0x1f0000) returned 1 [0200.700] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223d60 | out: hHeap=0x1f0000) returned 1 [0200.700] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2339c8 | out: hHeap=0x1f0000) returned 1 [0200.700] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bf0 | out: hHeap=0x1f0000) returned 1 [0200.700] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237480 | out: hHeap=0x1f0000) returned 1 [0200.700] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ab8 | out: hHeap=0x1f0000) returned 1 [0200.700] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2293b8 | out: hHeap=0x1f0000) returned 1 [0200.700] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2332c8 | out: hHeap=0x1f0000) returned 1 [0200.700] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233820 | out: hHeap=0x1f0000) returned 1 [0200.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204b90 | out: hHeap=0x1f0000) returned 1 [0200.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236490 | out: hHeap=0x1f0000) returned 1 [0200.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b08 | out: hHeap=0x1f0000) returned 1 [0200.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229370 | out: hHeap=0x1f0000) returned 1 [0200.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2335d8 | out: hHeap=0x1f0000) returned 1 [0200.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237e10 | out: hHeap=0x1f0000) returned 1 [0200.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f50 | out: hHeap=0x1f0000) returned 1 [0200.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237948 | out: hHeap=0x1f0000) returned 1 [0200.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b80 | out: hHeap=0x1f0000) returned 1 [0200.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228e18 | out: hHeap=0x1f0000) returned 1 [0200.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232f10 | out: hHeap=0x1f0000) returned 1 [0200.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233140 | out: hHeap=0x1f0000) returned 1 [0200.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e50 | out: hHeap=0x1f0000) returned 1 [0200.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2362f8 | out: hHeap=0x1f0000) returned 1 [0200.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a68 | out: hHeap=0x1f0000) returned 1 [0200.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229010 | out: hHeap=0x1f0000) returned 1 [0200.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232b80 | out: hHeap=0x1f0000) returned 1 [0200.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2390e8 | out: hHeap=0x1f0000) returned 1 [0200.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e30 | out: hHeap=0x1f0000) returned 1 [0200.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237c78 | out: hHeap=0x1f0000) returned 1 [0200.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ba8 | out: hHeap=0x1f0000) returned 1 [0200.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228f38 | out: hHeap=0x1f0000) returned 1 [0200.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ee8 | out: hHeap=0x1f0000) returned 1 [0200.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235da8 | out: hHeap=0x1f0000) returned 1 [0200.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f30 | out: hHeap=0x1f0000) returned 1 [0200.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236af0 | out: hHeap=0x1f0000) returned 1 [0200.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0200.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229298 | out: hHeap=0x1f0000) returned 1 [0200.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ba8 | out: hHeap=0x1f0000) returned 1 [0200.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235c50 | out: hHeap=0x1f0000) returned 1 [0200.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f10 | out: hHeap=0x1f0000) returned 1 [0200.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237618 | out: hHeap=0x1f0000) returned 1 [0200.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b58 | out: hHeap=0x1f0000) returned 1 [0200.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228d40 | out: hHeap=0x1f0000) returned 1 [0200.704] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b08 | out: hHeap=0x1f0000) returned 1 [0200.704] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2359c0 | out: hHeap=0x1f0000) returned 1 [0200.704] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d30 | out: hHeap=0x1f0000) returned 1 [0200.704] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236160 | out: hHeap=0x1f0000) returned 1 [0200.704] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ae0 | out: hHeap=0x1f0000) returned 1 [0200.704] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229250 | out: hHeap=0x1f0000) returned 1 [0200.704] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2231c0 | out: hHeap=0x1f0000) returned 1 [0200.704] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234e50 | out: hHeap=0x1f0000) returned 1 [0200.704] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bd0 | out: hHeap=0x1f0000) returned 1 [0200.704] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236958 | out: hHeap=0x1f0000) returned 1 [0200.704] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c20 | out: hHeap=0x1f0000) returned 1 [0200.704] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233ff0 | out: hHeap=0x1f0000) returned 1 [0200.705] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260e10 | out: hHeap=0x1f0000) returned 1 [0200.705] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234d18 | out: hHeap=0x1f0000) returned 1 [0200.705] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ef0 | out: hHeap=0x1f0000) returned 1 [0200.705] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227520 | out: hHeap=0x1f0000) returned 1 [0200.705] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0200.705] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2343e0 | out: hHeap=0x1f0000) returned 1 [0200.705] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ee8 | out: hHeap=0x1f0000) returned 1 [0200.705] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0200.705] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204df0 | out: hHeap=0x1f0000) returned 1 [0200.705] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227388 | out: hHeap=0x1f0000) returned 1 [0200.705] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a90 | out: hHeap=0x1f0000) returned 1 [0200.705] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233db0 | out: hHeap=0x1f0000) returned 1 [0200.705] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b90 | out: hHeap=0x1f0000) returned 1 [0200.705] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24fb78 | out: hHeap=0x1f0000) returned 1 [0200.706] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204dd0 | out: hHeap=0x1f0000) returned 1 [0200.706] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227058 | out: hHeap=0x1f0000) returned 1 [0200.706] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a18 | out: hHeap=0x1f0000) returned 1 [0200.706] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233fa8 | out: hHeap=0x1f0000) returned 1 [0200.706] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ca0 | out: hHeap=0x1f0000) returned 1 [0200.706] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f5d8 | out: hHeap=0x1f0000) returned 1 [0200.706] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e90 | out: hHeap=0x1f0000) returned 1 [0200.706] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2276b8 | out: hHeap=0x1f0000) returned 1 [0200.706] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b30 | out: hHeap=0x1f0000) returned 1 [0200.706] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234230 | out: hHeap=0x1f0000) returned 1 [0200.706] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24fa20 | out: hHeap=0x1f0000) returned 1 [0200.706] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230f30 | out: hHeap=0x1f0000) returned 1 [0200.706] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204db0 | out: hHeap=0x1f0000) returned 1 [0200.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226d28 | out: hHeap=0x1f0000) returned 1 [0200.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605e0 | out: hHeap=0x1f0000) returned 1 [0200.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234080 | out: hHeap=0x1f0000) returned 1 [0200.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260188 | out: hHeap=0x1f0000) returned 1 [0200.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230a48 | out: hHeap=0x1f0000) returned 1 [0200.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f70 | out: hHeap=0x1f0000) returned 1 [0200.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226ec0 | out: hHeap=0x1f0000) returned 1 [0200.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0200.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346b0 | out: hHeap=0x1f0000) returned 1 [0200.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0200.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2007c8 | out: hHeap=0x1f0000) returned 1 [0200.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c30 | out: hHeap=0x1f0000) returned 1 [0200.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d9d0 | out: hHeap=0x1f0000) returned 1 [0200.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0200.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2345d8 | out: hHeap=0x1f0000) returned 1 [0200.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25fe48 | out: hHeap=0x1f0000) returned 1 [0200.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0200.708] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c90 | out: hHeap=0x1f0000) returned 1 [0200.708] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ee88 | out: hHeap=0x1f0000) returned 1 [0200.708] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c70 | out: hHeap=0x1f0000) returned 1 [0200.708] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234740 | out: hHeap=0x1f0000) returned 1 [0200.708] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230e38 | out: hHeap=0x1f0000) returned 1 [0200.708] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d428 | out: hHeap=0x1f0000) returned 1 [0200.708] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205330 | out: hHeap=0x1f0000) returned 1 [0200.708] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e030 | out: hHeap=0x1f0000) returned 1 [0200.708] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609f0 | out: hHeap=0x1f0000) returned 1 [0200.708] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2347d0 | out: hHeap=0x1f0000) returned 1 [0200.708] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a380 | out: hHeap=0x1f0000) returned 1 [0200.708] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a230 | out: hHeap=0x1f0000) returned 1 [0200.708] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2052f0 | out: hHeap=0x1f0000) returned 1 [0200.708] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e828 | out: hHeap=0x1f0000) returned 1 [0200.709] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bd0 | out: hHeap=0x1f0000) returned 1 [0200.709] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234548 | out: hHeap=0x1f0000) returned 1 [0200.709] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230968 | out: hHeap=0x1f0000) returned 1 [0200.709] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a038 | out: hHeap=0x1f0000) returned 1 [0200.709] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205210 | out: hHeap=0x1f0000) returned 1 [0200.709] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e4f8 | out: hHeap=0x1f0000) returned 1 [0200.709] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0200.709] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234788 | out: hHeap=0x1f0000) returned 1 [0200.709] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0200.709] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0200.709] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ff0 | out: hHeap=0x1f0000) returned 1 [0200.709] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e360 | out: hHeap=0x1f0000) returned 1 [0200.709] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0200.709] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b30 | out: hHeap=0x1f0000) returned 1 [0200.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218818 | out: hHeap=0x1f0000) returned 1 [0200.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229a50 | out: hHeap=0x1f0000) returned 1 [0200.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205150 | out: hHeap=0x1f0000) returned 1 [0200.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d508 | out: hHeap=0x1f0000) returned 1 [0200.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0200.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234ae8 | out: hHeap=0x1f0000) returned 1 [0200.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ac70 | out: hHeap=0x1f0000) returned 1 [0200.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ae50 | out: hHeap=0x1f0000) returned 1 [0200.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2051f0 | out: hHeap=0x1f0000) returned 1 [0200.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f350 | out: hHeap=0x1f0000) returned 1 [0200.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0200.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2348f0 | out: hHeap=0x1f0000) returned 1 [0200.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0200.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22add8 | out: hHeap=0x1f0000) returned 1 [0200.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205130 | out: hHeap=0x1f0000) returned 1 [0200.711] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f1b8 | out: hHeap=0x1f0000) returned 1 [0200.711] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260630 | out: hHeap=0x1f0000) returned 1 [0200.711] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234668 | out: hHeap=0x1f0000) returned 1 [0200.711] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217650 | out: hHeap=0x1f0000) returned 1 [0200.711] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d68 | out: hHeap=0x1f0000) returned 1 [0200.711] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2052d0 | out: hHeap=0x1f0000) returned 1 [0200.711] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e1c8 | out: hHeap=0x1f0000) returned 1 [0200.711] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0200.711] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2348a8 | out: hHeap=0x1f0000) returned 1 [0200.711] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214b60 | out: hHeap=0x1f0000) returned 1 [0200.711] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2399d8 | out: hHeap=0x1f0000) returned 1 [0200.711] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205290 | out: hHeap=0x1f0000) returned 1 [0200.712] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22dd00 | out: hHeap=0x1f0000) returned 1 [0200.712] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260798 | out: hHeap=0x1f0000) returned 1 [0200.712] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234620 | out: hHeap=0x1f0000) returned 1 [0200.712] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222298 [0200.712] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0200.712] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e030 [0200.712] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0200.712] FindFirstFileW (in: lpFileName="C:\\\\ESD\\*", lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc1969407, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ebc0 [0200.715] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380c8 [0200.715] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0200.715] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0200.716] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc1969407, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0200.716] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0200.716] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380c8 | out: hHeap=0x1f0000) returned 1 [0200.716] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0200.716] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0200.716] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc1969407, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0200.716] FindClose (in: hFindFile=0x24ebc0 | out: hFindFile=0x24ebc0) returned 1 [0200.716] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0200.716] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e030 | out: hHeap=0x1f0000) returned 1 [0200.716] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0200.716] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222298 | out: hHeap=0x1f0000) returned 1 [0200.716] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221d40 [0200.716] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0200.717] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22dd00 [0200.717] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0200.717] FindFirstFileW (in: lpFileName="C:\\\\Logs\\*", lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf1d773, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xa03727f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xfd9ec80, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e5c0 [0201.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0201.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0201.059] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0201.059] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf1d773, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xa03727f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xfd9ec80, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.066] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0201.066] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0201.066] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0201.066] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0201.067] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5052fa31, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5052fa31, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Application.evtx", cAlternateFileName="APPLIC~1.EVT")) returned 1 [0201.067] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282a0 [0201.067] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380f0 [0201.067] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221ef0 [0201.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380f0 | out: hHeap=0x1f0000) returned 1 [0201.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0201.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0201.068] CreateFileW (lpFileName="C:\\\\Logs\\Application.evtx" (normalized: "c:\\logs\\application.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0201.070] GetFileType (hFile=0x1ac) returned 0x1 [0201.071] CloseHandle (hObject=0x1ac) returned 1 [0201.071] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2221c0 [0201.071] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Application.evtx" (normalized: "c:\\logs\\application.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5052fa31, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5052fa31, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0201.071] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2221c0 | out: hHeap=0x1f0000) returned 1 [0201.071] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2221c0 [0201.072] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Application.evtx" (normalized: "c:\\logs\\application.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5052fa31, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5052fa31, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0201.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2221c0 | out: hHeap=0x1f0000) returned 1 [0201.072] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2221c0 [0201.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2221c0 | out: hHeap=0x1f0000) returned 1 [0201.072] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505ee5f0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505ee5f0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="HardwareEvents.evtx", cAlternateFileName="HARDWA~1.EVT")) returned 1 [0201.072] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282a0 [0201.072] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0201.072] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2221c0 [0201.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0201.073] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221ef0 | out: hHeap=0x1f0000) returned 1 [0201.073] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0201.073] CreateFileW (lpFileName="C:\\\\Logs\\HardwareEvents.evtx" (normalized: "c:\\logs\\hardwareevents.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0201.311] GetFileType (hFile=0x210) returned 0x1 [0201.312] CloseHandle (hObject=0x210) returned 1 [0201.312] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221d88 [0201.312] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\HardwareEvents.evtx" (normalized: "c:\\logs\\hardwareevents.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505ee5f0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505ee5f0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0201.313] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221d88 | out: hHeap=0x1f0000) returned 1 [0201.313] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221d88 [0201.313] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\HardwareEvents.evtx" (normalized: "c:\\logs\\hardwareevents.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505ee5f0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505ee5f0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0201.313] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221d88 | out: hHeap=0x1f0000) returned 1 [0201.313] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221d88 [0201.313] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221d88 | out: hHeap=0x1f0000) returned 1 [0201.313] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505a2134, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505a2134, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer.evtx", cAlternateFileName="INTERN~1.EVT")) returned 1 [0201.313] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282d8 [0201.313] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0201.314] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221d88 [0201.314] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0201.314] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2221c0 | out: hHeap=0x1f0000) returned 1 [0201.314] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282d8 | out: hHeap=0x1f0000) returned 1 [0201.315] CreateFileW (lpFileName="C:\\\\Logs\\Internet Explorer.evtx" (normalized: "c:\\logs\\internet explorer.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0201.315] GetFileType (hFile=0x210) returned 0x1 [0201.316] CloseHandle (hObject=0x210) returned 1 [0201.316] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221ef0 [0201.316] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Internet Explorer.evtx" (normalized: "c:\\logs\\internet explorer.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505a2134, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505a2134, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0201.316] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221ef0 | out: hHeap=0x1f0000) returned 1 [0201.316] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2221c0 [0201.317] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Internet Explorer.evtx" (normalized: "c:\\logs\\internet explorer.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505a2134, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505a2134, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0201.317] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2221c0 | out: hHeap=0x1f0000) returned 1 [0201.317] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221ef0 [0201.317] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221ef0 | out: hHeap=0x1f0000) returned 1 [0201.317] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5057bed8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5057bed8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Key Management Service.evtx", cAlternateFileName="KEYMAN~1.EVT")) returned 1 [0201.317] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2221c0 [0201.317] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380c8 [0201.318] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239928 [0201.318] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380c8 | out: hHeap=0x1f0000) returned 1 [0201.318] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221d88 | out: hHeap=0x1f0000) returned 1 [0201.318] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2221c0 | out: hHeap=0x1f0000) returned 1 [0201.319] CreateFileW (lpFileName="C:\\\\Logs\\Key Management Service.evtx" (normalized: "c:\\logs\\key management service.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0201.319] GetFileType (hFile=0x210) returned 0x1 [0201.320] CloseHandle (hObject=0x210) returned 1 [0201.320] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239458 [0201.320] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Key Management Service.evtx" (normalized: "c:\\logs\\key management service.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5057bed8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5057bed8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0201.320] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239458 | out: hHeap=0x1f0000) returned 1 [0201.321] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2397c8 [0201.321] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Key Management Service.evtx" (normalized: "c:\\logs\\key management service.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5057bed8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5057bed8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0201.321] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2397c8 | out: hHeap=0x1f0000) returned 1 [0201.321] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239610 [0201.321] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239610 | out: hHeap=0x1f0000) returned 1 [0201.321] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc1dbd7c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc1dbd7c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Client-Licensing-Platform%4Admin.evtx", cAlternateFileName="MICROS~1.EVT")) returned 1 [0201.321] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214dd0 [0201.321] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238348 [0201.321] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a028 [0201.322] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238348 | out: hHeap=0x1f0000) returned 1 [0201.322] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239928 | out: hHeap=0x1f0000) returned 1 [0201.322] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214dd0 | out: hHeap=0x1f0000) returned 1 [0201.323] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx" (normalized: "c:\\logs\\microsoft-client-licensing-platform%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0201.323] GetFileType (hFile=0x210) returned 0x1 [0201.323] CloseHandle (hObject=0x210) returned 1 [0201.324] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229e08 [0201.324] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx" (normalized: "c:\\logs\\microsoft-client-licensing-platform%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc1dbd7c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc1dbd7c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0201.324] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229e08 | out: hHeap=0x1f0000) returned 1 [0201.324] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a3e0 [0201.324] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx" (normalized: "c:\\logs\\microsoft-client-licensing-platform%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc1dbd7c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc1dbd7c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0201.325] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a3e0 | out: hHeap=0x1f0000) returned 1 [0201.325] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a248 [0201.325] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a248 | out: hHeap=0x1f0000) returned 1 [0201.325] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca5d836e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca5d836e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx", cAlternateFileName="MICROS~2.EVT")) returned 1 [0201.325] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219cf0 [0201.325] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0201.325] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x239be0 [0201.325] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0201.325] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a028 | out: hHeap=0x1f0000) returned 1 [0201.325] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219cf0 | out: hHeap=0x1f0000) returned 1 [0201.328] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx" (normalized: "c:\\logs\\microsoft-windows-application-experience%4program-compatibility-assistant.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0201.329] GetFileType (hFile=0x210) returned 0x1 [0201.329] CloseHandle (hObject=0x210) returned 1 [0201.330] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x20dd00 [0201.330] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx" (normalized: "c:\\logs\\microsoft-windows-application-experience%4program-compatibility-assistant.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca5d836e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca5d836e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0201.330] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20dd00 | out: hHeap=0x1f0000) returned 1 [0201.330] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x20dd00 [0201.330] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx" (normalized: "c:\\logs\\microsoft-windows-application-experience%4program-compatibility-assistant.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca5d836e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca5d836e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0201.331] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20dd00 | out: hHeap=0x1f0000) returned 1 [0201.331] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x20dd00 [0201.331] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20dd00 | out: hHeap=0x1f0000) returned 1 [0201.331] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9206ac5, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9206ac5, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xf9c0f529, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx", cAlternateFileName="MICROS~3.EVT")) returned 1 [0201.331] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0201.331] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0201.331] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261218 [0201.331] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0201.332] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239be0 | out: hHeap=0x1f0000) returned 1 [0201.332] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0201.332] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-applicationresourcemanagementsystem%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0201.333] GetFileType (hFile=0x210) returned 0x1 [0201.334] CloseHandle (hObject=0x210) returned 1 [0201.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261160 [0201.335] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-applicationresourcemanagementsystem%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9206ac5, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9206ac5, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xf9c0f529, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000)) returned 1 [0201.335] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261160 | out: hHeap=0x1f0000) returned 1 [0201.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2610a8 [0201.335] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-applicationresourcemanagementsystem%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9206ac5, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9206ac5, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xf9c0f529, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000)) returned 1 [0201.335] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2610a8 | out: hHeap=0x1f0000) returned 1 [0201.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261440 [0201.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261440 | out: hHeap=0x1f0000) returned 1 [0201.336] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4143825, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4143825, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppLocker%4EXE and DLL.evtx", cAlternateFileName="MICROS~4.EVT")) returned 1 [0201.336] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214dd0 [0201.336] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0201.336] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22abf8 [0201.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0201.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261218 | out: hHeap=0x1f0000) returned 1 [0201.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214dd0 | out: hHeap=0x1f0000) returned 1 [0201.337] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-AppLocker%4EXE and DLL.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4exe and dll.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0201.338] GetFileType (hFile=0x210) returned 0x1 [0201.338] CloseHandle (hObject=0x210) returned 1 [0201.338] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ac70 [0201.339] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppLocker%4EXE and DLL.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4exe and dll.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4143825, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4143825, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0201.339] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ac70 | out: hHeap=0x1f0000) returned 1 [0201.339] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ae50 [0201.339] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppLocker%4EXE and DLL.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4exe and dll.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4143825, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4143825, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0201.339] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ae50 | out: hHeap=0x1f0000) returned 1 [0201.339] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ac70 [0201.339] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ac70 | out: hHeap=0x1f0000) returned 1 [0201.340] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4169a7a, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4169a7a, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppLocker%4MSI and Script.evtx", cAlternateFileName="MI2EEA~1.EVT")) returned 1 [0201.340] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22af40 [0201.340] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238438 [0201.340] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a028 [0201.340] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238438 | out: hHeap=0x1f0000) returned 1 [0201.340] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22abf8 | out: hHeap=0x1f0000) returned 1 [0201.340] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22af40 | out: hHeap=0x1f0000) returned 1 [0201.341] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-AppLocker%4MSI and Script.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4msi and script.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0201.341] GetFileType (hFile=0x210) returned 0x1 [0201.342] CloseHandle (hObject=0x210) returned 1 [0201.342] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229ad8 [0201.343] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppLocker%4MSI and Script.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4msi and script.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4169a7a, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4169a7a, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0201.343] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229ad8 | out: hHeap=0x1f0000) returned 1 [0201.343] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229a50 [0201.343] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppLocker%4MSI and Script.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4msi and script.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4169a7a, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4169a7a, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0201.343] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229a50 | out: hHeap=0x1f0000) returned 1 [0201.343] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229f18 [0201.344] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229f18 | out: hHeap=0x1f0000) returned 1 [0201.344] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd418fcc3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd418fcc3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx", cAlternateFileName="MI07E1~1.EVT")) returned 1 [0201.344] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229d80 [0201.344] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0201.344] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0201.344] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0201.344] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a028 | out: hHeap=0x1f0000) returned 1 [0201.344] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229d80 | out: hHeap=0x1f0000) returned 1 [0201.345] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-deployment.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0201.346] GetFileType (hFile=0x210) returned 0x1 [0201.346] CloseHandle (hObject=0x210) returned 1 [0201.346] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0201.347] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-deployment.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd418fcc3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd418fcc3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0201.347] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0201.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0201.347] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-deployment.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd418fcc3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd418fcc3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0201.347] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0201.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0201.347] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0201.348] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd418fcc3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd418fcc3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx", cAlternateFileName="MI8196~1.EVT")) returned 1 [0201.348] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229e90 [0201.348] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0201.348] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0201.348] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0201.348] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0201.348] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229e90 | out: hHeap=0x1f0000) returned 1 [0201.349] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-execution.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0201.349] GetFileType (hFile=0x210) returned 0x1 [0201.350] CloseHandle (hObject=0x210) returned 1 [0201.350] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0201.350] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-execution.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd418fcc3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd418fcc3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0201.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0201.351] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0201.351] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-execution.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd418fcc3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd418fcc3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0201.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0201.351] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0201.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0201.351] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd41b5f2d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd41b5f2d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppModel-Runtime%4Admin.evtx", cAlternateFileName="MIE36C~1.EVT")) returned 1 [0201.351] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2149c0 [0201.351] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0201.351] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ab80 [0201.352] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0201.352] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0201.352] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2149c0 | out: hHeap=0x1f0000) returned 1 [0201.352] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-AppModel-Runtime%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-appmodel-runtime%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0201.353] GetFileType (hFile=0x210) returned 0x1 [0201.353] CloseHandle (hObject=0x210) returned 1 [0201.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ab08 [0201.354] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppModel-Runtime%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-appmodel-runtime%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd41b5f2d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd41b5f2d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0201.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab08 | out: hHeap=0x1f0000) returned 1 [0201.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a8b0 [0201.354] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppModel-Runtime%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-appmodel-runtime%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd41b5f2d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd41b5f2d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0201.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a8b0 | out: hHeap=0x1f0000) returned 1 [0201.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22abf8 [0201.355] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22abf8 | out: hHeap=0x1f0000) returned 1 [0201.355] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd389efbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd389efbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppReadiness%4Admin.evtx", cAlternateFileName="MIC5CB~1.EVT")) returned 1 [0201.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2150a8 [0201.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0201.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ab08 [0201.355] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0201.355] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab80 | out: hHeap=0x1f0000) returned 1 [0201.355] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2150a8 | out: hHeap=0x1f0000) returned 1 [0201.356] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-AppReadiness%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0201.356] GetFileType (hFile=0x210) returned 0x1 [0201.357] CloseHandle (hObject=0x210) returned 1 [0201.357] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ad60 [0201.357] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppReadiness%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd389efbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd389efbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0201.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ad60 | out: hHeap=0x1f0000) returned 1 [0201.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22af40 [0201.498] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppReadiness%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd389efbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd389efbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0201.498] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22af40 | out: hHeap=0x1f0000) returned 1 [0201.498] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a838 [0201.499] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a838 | out: hHeap=0x1f0000) returned 1 [0201.499] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd38c5212, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd38c5212, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x111000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppReadiness%4Operational.evtx", cAlternateFileName="MIF8AA~1.EVT")) returned 1 [0201.499] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ad60 [0201.499] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0201.499] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a248 [0201.499] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0201.499] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab08 | out: hHeap=0x1f0000) returned 1 [0201.499] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ad60 | out: hHeap=0x1f0000) returned 1 [0201.592] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-AppReadiness%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0201.593] GetFileType (hFile=0x210) returned 0x1 [0201.593] CloseHandle (hObject=0x210) returned 1 [0201.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229a50 [0201.594] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppReadiness%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd38c5212, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd38c5212, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x111000)) returned 1 [0201.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229a50 | out: hHeap=0x1f0000) returned 1 [0201.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a3e0 [0201.594] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppReadiness%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd38c5212, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd38c5212, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x111000)) returned 1 [0201.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a3e0 | out: hHeap=0x1f0000) returned 1 [0201.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2299c8 [0201.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2299c8 | out: hHeap=0x1f0000) returned 1 [0201.594] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4143825, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4143825, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppXDeployment%4Operational.evtx", cAlternateFileName="MI34FE~1.EVT")) returned 1 [0201.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ac70 [0201.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0201.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229fa0 [0201.595] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0201.595] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a248 | out: hHeap=0x1f0000) returned 1 [0201.595] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ac70 | out: hHeap=0x1f0000) returned 1 [0201.595] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-AppXDeployment%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeployment%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0201.595] GetFileType (hFile=0x210) returned 0x1 [0201.596] CloseHandle (hObject=0x210) returned 1 [0201.596] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a028 [0201.596] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppXDeployment%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeployment%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4143825, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4143825, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0201.596] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a028 | out: hHeap=0x1f0000) returned 1 [0201.596] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a4f0 [0201.596] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppXDeployment%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeployment%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4143825, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4143825, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0201.596] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a4f0 | out: hHeap=0x1f0000) returned 1 [0201.596] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a138 [0201.596] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a138 | out: hHeap=0x1f0000) returned 1 [0201.596] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5af3554f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5af3554f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x211000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppXDeploymentServer%4Operational.evtx", cAlternateFileName="MIA24C~1.EVT")) returned 1 [0201.596] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a0b0 [0201.597] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0201.597] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0201.597] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0201.597] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229fa0 | out: hHeap=0x1f0000) returned 1 [0201.597] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a0b0 | out: hHeap=0x1f0000) returned 1 [0201.597] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0201.598] GetFileType (hFile=0x210) returned 0x1 [0201.598] CloseHandle (hObject=0x210) returned 1 [0201.598] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0201.598] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5af3554f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5af3554f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x211000)) returned 1 [0201.599] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0201.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0201.599] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5af3554f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5af3554f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x211000)) returned 1 [0201.599] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0201.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0201.599] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0201.599] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5af3554f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5af3554f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx", cAlternateFileName="MIDBEC~1.EVT")) returned 1 [0201.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22aa90 [0201.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0201.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0201.599] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0201.599] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0201.599] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aa90 | out: hHeap=0x1f0000) returned 1 [0201.600] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4restricted.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0201.602] GetFileType (hFile=0x1ac) returned 0x1 [0201.602] CloseHandle (hObject=0x1ac) returned 1 [0201.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0201.603] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4restricted.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5af3554f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5af3554f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0201.603] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0201.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0201.603] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4restricted.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5af3554f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5af3554f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0201.603] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0201.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0201.603] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0201.603] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85798667, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x85798667, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppxPackaging%4Operational.evtx", cAlternateFileName="MI54F1~1.EVT")) returned 1 [0201.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22abf8 [0201.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0201.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229940 [0201.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0201.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0201.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22abf8 | out: hHeap=0x1f0000) returned 1 [0201.604] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-AppxPackaging%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxpackaging%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0201.605] GetFileType (hFile=0x1ac) returned 0x1 [0201.605] CloseHandle (hObject=0x1ac) returned 1 [0201.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229f18 [0201.605] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppxPackaging%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxpackaging%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85798667, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x85798667, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0201.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229f18 | out: hHeap=0x1f0000) returned 1 [0201.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2299c8 [0201.605] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppxPackaging%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxpackaging%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85798667, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x85798667, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0201.606] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2299c8 | out: hHeap=0x1f0000) returned 1 [0201.606] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229e90 [0201.606] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229e90 | out: hHeap=0x1f0000) returned 1 [0201.606] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd74d25ab, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd74d25ab, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx", cAlternateFileName="MI111F~1.EVT")) returned 1 [0201.606] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0201.606] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0201.606] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219c48 [0201.606] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0201.606] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229940 | out: hHeap=0x1f0000) returned 1 [0201.606] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0201.606] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-backgroundtaskinfrastructure%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0201.610] GetFileType (hFile=0x1ac) returned 0x1 [0201.610] CloseHandle (hObject=0x1ac) returned 1 [0201.610] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a818 [0201.611] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-backgroundtaskinfrastructure%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd74d25ab, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd74d25ab, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0201.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a818 | out: hHeap=0x1f0000) returned 1 [0201.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a818 [0201.611] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-backgroundtaskinfrastructure%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd74d25ab, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd74d25ab, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0201.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a818 | out: hHeap=0x1f0000) returned 1 [0201.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a230 [0201.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a230 | out: hHeap=0x1f0000) returned 1 [0201.611] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1f96ca4, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xe1f96ca4, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Bits-Client%4Operational.evtx", cAlternateFileName="MI9465~1.EVT")) returned 1 [0201.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214f70 [0201.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0201.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a248 [0201.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0201.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219c48 | out: hHeap=0x1f0000) returned 1 [0201.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f70 | out: hHeap=0x1f0000) returned 1 [0201.612] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Bits-Client%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-bits-client%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0201.612] GetFileType (hFile=0x1ac) returned 0x1 [0201.612] CloseHandle (hObject=0x1ac) returned 1 [0201.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229fa0 [0201.612] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Bits-Client%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-bits-client%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1f96ca4, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xe1f96ca4, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0201.613] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229fa0 | out: hHeap=0x1f0000) returned 1 [0201.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229ad8 [0201.613] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Bits-Client%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-bits-client%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1f96ca4, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xe1f96ca4, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0201.613] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229ad8 | out: hHeap=0x1f0000) returned 1 [0201.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229f18 [0201.613] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229f18 | out: hHeap=0x1f0000) returned 1 [0201.613] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8783aa15, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8783aa15, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-CodeIntegrity%4Operational.evtx", cAlternateFileName="MI03A7~1.EVT")) returned 1 [0201.614] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a8b0 [0201.614] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0201.614] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a468 [0201.614] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0201.614] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a248 | out: hHeap=0x1f0000) returned 1 [0201.614] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a8b0 | out: hHeap=0x1f0000) returned 1 [0201.615] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-CodeIntegrity%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-codeintegrity%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0201.615] GetFileType (hFile=0x1ac) returned 0x1 [0201.615] CloseHandle (hObject=0x1ac) returned 1 [0201.616] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a600 [0201.616] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-CodeIntegrity%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-codeintegrity%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8783aa15, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8783aa15, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0201.616] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a600 | out: hHeap=0x1f0000) returned 1 [0201.616] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229f18 [0201.616] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-CodeIntegrity%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-codeintegrity%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8783aa15, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8783aa15, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0201.616] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229f18 | out: hHeap=0x1f0000) returned 1 [0201.616] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229830 [0201.616] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229830 | out: hHeap=0x1f0000) returned 1 [0201.616] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c3c71c5, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8c3c71c5, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx", cAlternateFileName="MI5CA2~1.EVT")) returned 1 [0201.616] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229f18 [0201.616] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0201.616] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a578 [0201.616] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0201.616] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a468 | out: hHeap=0x1f0000) returned 1 [0201.616] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229f18 | out: hHeap=0x1f0000) returned 1 [0201.617] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-coresystem-smsrouter-events%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0201.617] GetFileType (hFile=0x1ac) returned 0x1 [0201.617] CloseHandle (hObject=0x1ac) returned 1 [0201.618] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a038 [0201.618] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-coresystem-smsrouter-events%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c3c71c5, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8c3c71c5, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0201.618] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a038 | out: hHeap=0x1f0000) returned 1 [0201.618] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21aa10 [0201.618] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-coresystem-smsrouter-events%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c3c71c5, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8c3c71c5, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0201.618] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21aa10 | out: hHeap=0x1f0000) returned 1 [0201.618] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a620 [0201.618] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a620 | out: hHeap=0x1f0000) returned 1 [0201.618] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc9231, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cc9231, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx", cAlternateFileName="MI5FD1~1.EVT")) returned 1 [0201.618] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ab80 [0201.618] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0201.618] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229be8 [0201.618] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0201.619] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a578 | out: hHeap=0x1f0000) returned 1 [0201.619] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab80 | out: hHeap=0x1f0000) returned 1 [0201.619] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4backupkeysvc.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0201.620] GetFileType (hFile=0x1ac) returned 0x1 [0201.620] CloseHandle (hObject=0x1ac) returned 1 [0201.620] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a3e0 [0201.621] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4backupkeysvc.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc9231, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cc9231, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0201.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a3e0 | out: hHeap=0x1f0000) returned 1 [0201.621] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a3e0 [0201.621] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4backupkeysvc.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc9231, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cc9231, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0201.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a3e0 | out: hHeap=0x1f0000) returned 1 [0201.621] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229cf8 [0201.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229cf8 | out: hHeap=0x1f0000) returned 1 [0201.621] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ca2fbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ca2fbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Crypto-DPAPI%4Operational.evtx", cAlternateFileName="MI8BDF~1.EVT")) returned 1 [0201.621] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ab08 [0201.621] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0201.622] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a248 [0201.622] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0201.622] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229be8 | out: hHeap=0x1f0000) returned 1 [0201.622] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab08 | out: hHeap=0x1f0000) returned 1 [0201.622] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0201.623] GetFileType (hFile=0x1ac) returned 0x1 [0201.624] CloseHandle (hObject=0x1ac) returned 1 [0201.624] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a710 [0201.624] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ca2fbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ca2fbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0201.624] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a710 | out: hHeap=0x1f0000) returned 1 [0201.624] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2299c8 [0201.624] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ca2fbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ca2fbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0201.624] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2299c8 | out: hHeap=0x1f0000) returned 1 [0201.624] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a2d0 [0201.624] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a2d0 | out: hHeap=0x1f0000) returned 1 [0201.624] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c3ed420, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8c3ed420, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx", cAlternateFileName="MIAEBD~1.EVT")) returned 1 [0201.624] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a578 [0201.624] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0201.624] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2614f8 [0201.624] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0201.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a248 | out: hHeap=0x1f0000) returned 1 [0201.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a578 | out: hHeap=0x1f0000) returned 1 [0201.625] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-devicemanagement-enterprise-diagnostics-provider%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0201.625] GetFileType (hFile=0x1ac) returned 0x1 [0201.625] CloseHandle (hObject=0x1ac) returned 1 [0201.625] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2615b0 [0201.626] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-devicemanagement-enterprise-diagnostics-provider%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c3ed420, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8c3ed420, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x101000)) returned 1 [0201.626] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2615b0 | out: hHeap=0x1f0000) returned 1 [0201.626] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2615b0 [0201.626] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-devicemanagement-enterprise-diagnostics-provider%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c3ed420, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8c3ed420, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x101000)) returned 1 [0201.626] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2615b0 | out: hHeap=0x1f0000) returned 1 [0201.626] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2615b0 [0201.626] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2615b0 | out: hHeap=0x1f0000) returned 1 [0201.626] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cef47f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cef47f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-DeviceSetupManager%4Admin.evtx", cAlternateFileName="MIA726~1.EVT")) returned 1 [0201.626] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ace8 [0201.626] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0201.626] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229c70 [0201.626] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0201.626] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2614f8 | out: hHeap=0x1f0000) returned 1 [0201.626] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ace8 | out: hHeap=0x1f0000) returned 1 [0201.627] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-DeviceSetupManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0201.627] GetFileType (hFile=0x1ac) returned 0x1 [0201.627] CloseHandle (hObject=0x1ac) returned 1 [0201.627] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229b60 [0201.627] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-DeviceSetupManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cef47f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cef47f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0201.627] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229b60 | out: hHeap=0x1f0000) returned 1 [0201.627] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229e90 [0201.627] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-DeviceSetupManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cef47f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cef47f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0201.628] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229e90 | out: hHeap=0x1f0000) returned 1 [0201.628] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229940 [0201.628] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229940 | out: hHeap=0x1f0000) returned 1 [0201.628] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc9231, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cc9231, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-DeviceSetupManager%4Operational.evtx", cAlternateFileName="MI08CB~1.EVT")) returned 1 [0201.628] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22add8 [0201.628] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0201.628] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a248 [0201.628] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0201.628] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229c70 | out: hHeap=0x1f0000) returned 1 [0201.628] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22add8 | out: hHeap=0x1f0000) returned 1 [0201.628] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-DeviceSetupManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0201.629] GetFileType (hFile=0x1ac) returned 0x1 [0201.629] CloseHandle (hObject=0x1ac) returned 1 [0201.629] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a0b0 [0201.629] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-DeviceSetupManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc9231, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cc9231, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0201.629] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a0b0 | out: hHeap=0x1f0000) returned 1 [0201.629] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a600 [0201.629] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-DeviceSetupManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc9231, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cc9231, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0201.629] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a600 | out: hHeap=0x1f0000) returned 1 [0201.629] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229e90 [0201.629] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229e90 | out: hHeap=0x1f0000) returned 1 [0201.630] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc967f17e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc967f17e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Dhcp-Client%4Admin.evtx", cAlternateFileName="MI8270~1.EVT")) returned 1 [0201.630] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214f70 [0201.630] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0201.630] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a8b0 [0201.630] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0201.630] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a248 | out: hHeap=0x1f0000) returned 1 [0201.630] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f70 | out: hHeap=0x1f0000) returned 1 [0201.630] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Dhcp-Client%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-dhcp-client%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0201.630] GetFileType (hFile=0x1ac) returned 0x1 [0201.631] CloseHandle (hObject=0x1ac) returned 1 [0201.631] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a928 [0201.631] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Dhcp-Client%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-dhcp-client%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc967f17e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc967f17e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0201.631] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a928 | out: hHeap=0x1f0000) returned 1 [0201.631] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22add8 [0201.631] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Dhcp-Client%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-dhcp-client%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc967f17e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc967f17e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0201.631] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22add8 | out: hHeap=0x1f0000) returned 1 [0201.631] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22af40 [0201.631] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22af40 | out: hHeap=0x1f0000) returned 1 [0201.631] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc96cb64b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc96cb64b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Dhcpv6-Client%4Admin.evtx", cAlternateFileName="MIEBFF~1.EVT")) returned 1 [0201.631] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214e38 [0201.631] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0201.631] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ad60 [0201.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0201.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a8b0 | out: hHeap=0x1f0000) returned 1 [0201.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214e38 | out: hHeap=0x1f0000) returned 1 [0201.632] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-dhcpv6-client%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0201.632] GetFileType (hFile=0x1ac) returned 0x1 [0201.632] CloseHandle (hObject=0x1ac) returned 1 [0202.000] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ace8 [0202.000] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-dhcpv6-client%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc96cb64b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc96cb64b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.000] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ace8 | out: hHeap=0x1f0000) returned 1 [0202.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a838 [0202.001] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-dhcpv6-client%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc96cb64b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc96cb64b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a838 | out: hHeap=0x1f0000) returned 1 [0202.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ab80 [0202.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab80 | out: hHeap=0x1f0000) returned 1 [0202.001] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca64aa7b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca64aa7b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Diagnosis-DPS%4Operational.evtx", cAlternateFileName="MI9F85~1.EVT")) returned 1 [0202.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a8b0 [0202.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238618 [0202.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229b60 [0202.002] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238618 | out: hHeap=0x1f0000) returned 1 [0202.002] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ad60 | out: hHeap=0x1f0000) returned 1 [0202.002] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a8b0 | out: hHeap=0x1f0000) returned 1 [0202.002] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-diagnosis-dps%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0202.003] GetFileType (hFile=0x210) returned 0x1 [0202.003] CloseHandle (hObject=0x210) returned 1 [0202.003] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a248 [0202.004] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-diagnosis-dps%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca64aa7b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca64aa7b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.004] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a248 | out: hHeap=0x1f0000) returned 1 [0202.004] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229fa0 [0202.004] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-diagnosis-dps%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca64aa7b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca64aa7b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.004] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229fa0 | out: hHeap=0x1f0000) returned 1 [0202.004] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a468 [0202.004] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a468 | out: hHeap=0x1f0000) returned 1 [0202.004] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd9ec80, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xfd9ec80, ftLastAccessTime.dwHighDateTime=0x1d1a04f, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Diagnostics-Performance%4Operational.evtx", cAlternateFileName="MIBE3D~1.EVT")) returned 1 [0202.004] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229940 [0202.005] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384d8 [0202.005] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0202.005] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384d8 | out: hHeap=0x1f0000) returned 1 [0202.005] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229b60 | out: hHeap=0x1f0000) returned 1 [0202.005] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229940 | out: hHeap=0x1f0000) returned 1 [0202.005] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-diagnostics-performance%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0202.006] GetFileType (hFile=0x210) returned 0x1 [0202.006] CloseHandle (hObject=0x210) returned 1 [0202.006] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0202.007] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-diagnostics-performance%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd9ec80, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xfd9ec80, ftLastAccessTime.dwHighDateTime=0x1d1a04f, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.007] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0202.007] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0202.007] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-diagnostics-performance%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd9ec80, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xfd9ec80, ftLastAccessTime.dwHighDateTime=0x1d1a04f, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.007] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0202.007] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0202.007] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0202.007] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9658ef3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9658ef3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-GroupPolicy%4Operational.evtx", cAlternateFileName="MIE38D~1.EVT")) returned 1 [0202.007] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c98 [0202.008] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385f0 [0202.008] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a4f0 [0202.008] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385f0 | out: hHeap=0x1f0000) returned 1 [0202.008] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0202.008] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c98 | out: hHeap=0x1f0000) returned 1 [0202.009] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-GroupPolicy%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-grouppolicy%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0202.009] GetFileType (hFile=0x210) returned 0x1 [0202.009] CloseHandle (hObject=0x210) returned 1 [0202.009] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229cf8 [0202.010] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-GroupPolicy%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-grouppolicy%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9658ef3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9658ef3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.010] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229cf8 | out: hHeap=0x1f0000) returned 1 [0202.010] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a468 [0202.010] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-GroupPolicy%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-grouppolicy%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9658ef3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9658ef3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.010] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a468 | out: hHeap=0x1f0000) returned 1 [0202.010] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229c70 [0202.010] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229c70 | out: hHeap=0x1f0000) returned 1 [0202.010] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9dcc480, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9dcc480, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-HotspotAuth%4Operational.evtx", cAlternateFileName="MIE386~1.EVT")) returned 1 [0202.010] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214e38 [0202.011] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238708 [0202.011] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229ad8 [0202.011] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238708 | out: hHeap=0x1f0000) returned 1 [0202.011] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a4f0 | out: hHeap=0x1f0000) returned 1 [0202.011] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214e38 | out: hHeap=0x1f0000) returned 1 [0202.011] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-HotspotAuth%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-hotspotauth%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0202.012] GetFileType (hFile=0x210) returned 0x1 [0202.012] CloseHandle (hObject=0x210) returned 1 [0202.013] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229b60 [0202.013] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-HotspotAuth%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-hotspotauth%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9dcc480, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9dcc480, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.013] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229b60 | out: hHeap=0x1f0000) returned 1 [0202.013] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229940 [0202.013] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-HotspotAuth%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-hotspotauth%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9dcc480, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9dcc480, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.014] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229940 | out: hHeap=0x1f0000) returned 1 [0202.014] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a710 [0202.014] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a710 | out: hHeap=0x1f0000) returned 1 [0202.014] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50b4bacf, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50b4bacf, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx", cAlternateFileName="MI6B25~1.EVT")) returned 1 [0202.014] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22aa18 [0202.014] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238708 [0202.014] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a2d0 [0202.014] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238708 | out: hHeap=0x1f0000) returned 1 [0202.014] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229ad8 | out: hHeap=0x1f0000) returned 1 [0202.014] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aa18 | out: hHeap=0x1f0000) returned 1 [0202.015] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-hyper-v-guest-drivers%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0202.015] GetFileType (hFile=0x210) returned 0x1 [0202.016] CloseHandle (hObject=0x210) returned 1 [0202.016] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229ad8 [0202.016] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-hyper-v-guest-drivers%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50b4bacf, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50b4bacf, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229ad8 | out: hHeap=0x1f0000) returned 1 [0202.016] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229940 [0202.016] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-hyper-v-guest-drivers%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50b4bacf, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50b4bacf, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229940 | out: hHeap=0x1f0000) returned 1 [0202.016] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229e90 [0202.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229e90 | out: hHeap=0x1f0000) returned 1 [0202.017] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb66288f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb66288f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-International%4Operational.evtx", cAlternateFileName="MI854A~1.EVT")) returned 1 [0202.017] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ace8 [0202.017] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385a0 [0202.017] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a248 [0202.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385a0 | out: hHeap=0x1f0000) returned 1 [0202.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a2d0 | out: hHeap=0x1f0000) returned 1 [0202.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ace8 | out: hHeap=0x1f0000) returned 1 [0202.018] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-International%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-international%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0202.019] GetFileType (hFile=0x210) returned 0x1 [0202.019] CloseHandle (hObject=0x210) returned 1 [0202.020] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a2d0 [0202.020] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-International%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-international%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb66288f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb66288f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a2d0 | out: hHeap=0x1f0000) returned 1 [0202.020] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229be8 [0202.020] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-International%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-international%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb66288f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb66288f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229be8 | out: hHeap=0x1f0000) returned 1 [0202.020] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a2d0 [0202.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a2d0 | out: hHeap=0x1f0000) returned 1 [0202.020] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x506ad1ac, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x506ad1ac, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-Boot%4Operational.evtx", cAlternateFileName="MI32CE~1.EVT")) returned 1 [0202.021] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214bc8 [0202.021] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384d8 [0202.021] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229a50 [0202.021] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384d8 | out: hHeap=0x1f0000) returned 1 [0202.021] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a248 | out: hHeap=0x1f0000) returned 1 [0202.021] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214bc8 | out: hHeap=0x1f0000) returned 1 [0202.021] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-Boot%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-boot%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0202.022] GetFileType (hFile=0x210) returned 0x1 [0202.022] CloseHandle (hObject=0x210) returned 1 [0202.023] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a138 [0202.023] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-Boot%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-boot%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x506ad1ac, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x506ad1ac, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.023] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a138 | out: hHeap=0x1f0000) returned 1 [0202.023] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a578 [0202.023] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-Boot%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-boot%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x506ad1ac, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x506ad1ac, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.023] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a578 | out: hHeap=0x1f0000) returned 1 [0202.023] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a2d0 [0202.023] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a2d0 | out: hHeap=0x1f0000) returned 1 [0202.024] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ca2fbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ca2fbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-EventTracing%4Admin.evtx", cAlternateFileName="MIA934~1.EVT")) returned 1 [0202.024] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ac70 [0202.024] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238708 [0202.024] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a4f0 [0202.024] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238708 | out: hHeap=0x1f0000) returned 1 [0202.024] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229a50 | out: hHeap=0x1f0000) returned 1 [0202.024] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ac70 | out: hHeap=0x1f0000) returned 1 [0202.025] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-eventtracing%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0202.025] GetFileType (hFile=0x210) returned 0x1 [0202.025] CloseHandle (hObject=0x210) returned 1 [0202.025] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a0b0 [0202.026] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-eventtracing%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ca2fbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ca2fbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a0b0 | out: hHeap=0x1f0000) returned 1 [0202.026] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a578 [0202.026] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-eventtracing%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ca2fbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ca2fbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a578 | out: hHeap=0x1f0000) returned 1 [0202.026] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a028 [0202.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a028 | out: hHeap=0x1f0000) returned 1 [0202.026] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5071f8b0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5071f8b0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-PnP%4Configuration.evtx", cAlternateFileName="MIB32D~1.EVT")) returned 1 [0202.026] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a9a0 [0202.026] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385a0 [0202.027] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229a50 [0202.027] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385a0 | out: hHeap=0x1f0000) returned 1 [0202.027] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a4f0 | out: hHeap=0x1f0000) returned 1 [0202.027] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a9a0 | out: hHeap=0x1f0000) returned 1 [0202.027] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-PnP%4Configuration.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-pnp%4configuration.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0202.027] GetFileType (hFile=0x210) returned 0x1 [0202.028] CloseHandle (hObject=0x210) returned 1 [0202.028] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229f18 [0202.028] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-PnP%4Configuration.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-pnp%4configuration.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5071f8b0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5071f8b0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000)) returned 1 [0202.028] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229f18 | out: hHeap=0x1f0000) returned 1 [0202.028] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229830 [0202.028] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-PnP%4Configuration.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-pnp%4configuration.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5071f8b0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5071f8b0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000)) returned 1 [0202.028] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229830 | out: hHeap=0x1f0000) returned 1 [0202.029] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229be8 [0202.029] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229be8 | out: hHeap=0x1f0000) returned 1 [0202.029] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8ebf6d7, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc8ebf6d7, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx", cAlternateFileName="MICA77~1.EVT")) returned 1 [0202.029] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a3e0 [0202.029] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384d8 [0202.029] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0202.029] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384d8 | out: hHeap=0x1f0000) returned 1 [0202.029] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229a50 | out: hHeap=0x1f0000) returned 1 [0202.029] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a3e0 | out: hHeap=0x1f0000) returned 1 [0202.030] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-power%4thermal-operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0202.030] GetFileType (hFile=0x210) returned 0x1 [0202.030] CloseHandle (hObject=0x210) returned 1 [0202.030] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0202.031] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-power%4thermal-operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8ebf6d7, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc8ebf6d7, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.031] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0202.031] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0202.031] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-power%4thermal-operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8ebf6d7, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc8ebf6d7, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.031] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0202.031] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0202.031] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0202.031] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5090f75d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5090f75d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx", cAlternateFileName="MI1E8D~1.EVT")) returned 1 [0202.031] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22add8 [0202.031] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385a0 [0202.031] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229940 [0202.031] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385a0 | out: hHeap=0x1f0000) returned 1 [0202.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0202.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22add8 | out: hHeap=0x1f0000) returned 1 [0202.032] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-shimengine%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0202.032] GetFileType (hFile=0x210) returned 0x1 [0202.033] CloseHandle (hObject=0x210) returned 1 [0202.033] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a028 [0202.033] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-shimengine%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5090f75d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5090f75d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.033] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a028 | out: hHeap=0x1f0000) returned 1 [0202.033] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229e90 [0202.033] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-shimengine%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5090f75d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5090f75d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.034] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229e90 | out: hHeap=0x1f0000) returned 1 [0202.034] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a248 [0202.034] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a248 | out: hHeap=0x1f0000) returned 1 [0202.034] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd75102f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcd75102f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx", cAlternateFileName="MID067~1.EVT")) returned 1 [0202.035] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ab08 [0202.035] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385f0 [0202.035] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229a50 [0202.035] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385f0 | out: hHeap=0x1f0000) returned 1 [0202.035] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229940 | out: hHeap=0x1f0000) returned 1 [0202.035] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab08 | out: hHeap=0x1f0000) returned 1 [0202.035] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-storemgr%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0202.036] GetFileType (hFile=0x210) returned 0x1 [0202.036] CloseHandle (hObject=0x210) returned 1 [0202.036] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a028 [0202.036] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-storemgr%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd75102f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcd75102f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.036] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a028 | out: hHeap=0x1f0000) returned 1 [0202.036] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a4f0 [0202.036] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-storemgr%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd75102f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcd75102f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.037] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a4f0 | out: hHeap=0x1f0000) returned 1 [0202.037] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a710 [0202.037] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a710 | out: hHeap=0x1f0000) returned 1 [0202.037] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50be4414, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50be4414, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-WHEA%4Errors.evtx", cAlternateFileName="MIDE4D~1.EVT")) returned 1 [0202.037] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214ea0 [0202.037] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385a0 [0202.037] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22af40 [0202.037] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385a0 | out: hHeap=0x1f0000) returned 1 [0202.037] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229a50 | out: hHeap=0x1f0000) returned 1 [0202.037] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214ea0 | out: hHeap=0x1f0000) returned 1 [0202.038] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-WHEA%4Errors.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4errors.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0202.294] GetFileType (hFile=0x218) returned 0x1 [0202.303] CloseHandle (hObject=0x218) returned 1 [0202.304] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a8b0 [0202.304] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-WHEA%4Errors.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4errors.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50be4414, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50be4414, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.304] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a8b0 | out: hHeap=0x1f0000) returned 1 [0202.304] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a9a0 [0202.304] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-WHEA%4Errors.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4errors.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50be4414, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50be4414, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.304] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a9a0 | out: hHeap=0x1f0000) returned 1 [0202.304] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ae50 [0202.304] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ae50 | out: hHeap=0x1f0000) returned 1 [0202.304] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50be4414, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50be4414, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-WHEA%4Operational.evtx", cAlternateFileName="MI36C5~1.EVT")) returned 1 [0202.305] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a90 [0202.305] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384d8 [0202.305] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a3e0 [0202.305] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384d8 | out: hHeap=0x1f0000) returned 1 [0202.305] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22af40 | out: hHeap=0x1f0000) returned 1 [0202.305] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a90 | out: hHeap=0x1f0000) returned 1 [0202.306] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-WHEA%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0202.306] GetFileType (hFile=0x218) returned 0x1 [0202.306] CloseHandle (hObject=0x218) returned 1 [0202.306] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2299c8 [0202.307] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-WHEA%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50be4414, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50be4414, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.307] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2299c8 | out: hHeap=0x1f0000) returned 1 [0202.307] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2299c8 [0202.307] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-WHEA%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50be4414, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50be4414, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.307] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2299c8 | out: hHeap=0x1f0000) returned 1 [0202.307] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a710 [0202.307] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a710 | out: hHeap=0x1f0000) returned 1 [0202.307] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59547c37, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x59547c37, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Known Folders API Service.evtx", cAlternateFileName="MI86D6~1.EVT")) returned 1 [0202.307] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ac70 [0202.307] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238618 [0202.307] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a468 [0202.307] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238618 | out: hHeap=0x1f0000) returned 1 [0202.308] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a3e0 | out: hHeap=0x1f0000) returned 1 [0202.308] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ac70 | out: hHeap=0x1f0000) returned 1 [0202.308] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Known Folders API Service.evtx" (normalized: "c:\\logs\\microsoft-windows-known folders api service.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0202.308] GetFileType (hFile=0x218) returned 0x1 [0202.309] CloseHandle (hObject=0x218) returned 1 [0202.309] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a710 [0202.309] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Known Folders API Service.evtx" (normalized: "c:\\logs\\microsoft-windows-known folders api service.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59547c37, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x59547c37, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.309] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a710 | out: hHeap=0x1f0000) returned 1 [0202.309] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229ad8 [0202.309] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Known Folders API Service.evtx" (normalized: "c:\\logs\\microsoft-windows-known folders api service.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59547c37, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x59547c37, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.309] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229ad8 | out: hHeap=0x1f0000) returned 1 [0202.309] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a578 [0202.310] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a578 | out: hHeap=0x1f0000) returned 1 [0202.310] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbb7386e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcbb7386e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-LiveId%4Operational.evtx", cAlternateFileName="MI4C58~1.EVT")) returned 1 [0202.310] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c98 [0202.310] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238758 [0202.310] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22abf8 [0202.310] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238758 | out: hHeap=0x1f0000) returned 1 [0202.310] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a468 | out: hHeap=0x1f0000) returned 1 [0202.310] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c98 | out: hHeap=0x1f0000) returned 1 [0202.311] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-LiveId%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-liveid%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0202.311] GetFileType (hFile=0x218) returned 0x1 [0202.311] CloseHandle (hObject=0x218) returned 1 [0202.312] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ab08 [0202.312] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-LiveId%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-liveid%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbb7386e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcbb7386e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.312] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab08 | out: hHeap=0x1f0000) returned 1 [0202.312] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ac70 [0202.312] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-LiveId%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-liveid%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbb7386e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcbb7386e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.312] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ac70 | out: hHeap=0x1f0000) returned 1 [0202.312] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ae50 [0202.312] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ae50 | out: hHeap=0x1f0000) returned 1 [0202.313] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc93d06f0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc93d06f0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-MUI%4Admin.evtx", cAlternateFileName="MI30D3~1.EVT")) returned 1 [0202.313] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239508 [0202.313] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238708 [0202.313] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214958 [0202.313] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238708 | out: hHeap=0x1f0000) returned 1 [0202.313] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22abf8 | out: hHeap=0x1f0000) returned 1 [0202.313] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239508 | out: hHeap=0x1f0000) returned 1 [0202.314] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-MUI%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-mui%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0202.314] GetFileType (hFile=0x218) returned 0x1 [0202.314] CloseHandle (hObject=0x218) returned 1 [0202.315] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2149c0 [0202.315] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-MUI%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-mui%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc93d06f0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc93d06f0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.315] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2149c0 | out: hHeap=0x1f0000) returned 1 [0202.315] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214f70 [0202.315] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-MUI%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-mui%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc93d06f0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc93d06f0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.315] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f70 | out: hHeap=0x1f0000) returned 1 [0202.315] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214b60 [0202.316] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214b60 | out: hHeap=0x1f0000) returned 1 [0202.316] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc93aa49b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc93aa49b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-MUI%4Operational.evtx", cAlternateFileName="MI6F01~1.EVT")) returned 1 [0202.316] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239770 [0202.316] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238618 [0202.316] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a928 [0202.316] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238618 | out: hHeap=0x1f0000) returned 1 [0202.316] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214958 | out: hHeap=0x1f0000) returned 1 [0202.316] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239770 | out: hHeap=0x1f0000) returned 1 [0202.317] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-MUI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-mui%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0202.317] GetFileType (hFile=0x218) returned 0x1 [0202.317] CloseHandle (hObject=0x218) returned 1 [0202.318] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ab80 [0202.318] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-MUI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-mui%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc93aa49b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc93aa49b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.318] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab80 | out: hHeap=0x1f0000) returned 1 [0202.318] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ab80 [0202.318] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-MUI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-mui%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc93aa49b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc93aa49b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.318] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab80 | out: hHeap=0x1f0000) returned 1 [0202.318] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ac70 [0202.318] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ac70 | out: hHeap=0x1f0000) returned 1 [0202.318] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9d33b19, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9d33b19, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-NCSI%4Operational.evtx", cAlternateFileName="MI483C~1.EVT")) returned 1 [0202.319] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214ea0 [0202.319] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238708 [0202.319] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ae50 [0202.319] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238708 | out: hHeap=0x1f0000) returned 1 [0202.319] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a928 | out: hHeap=0x1f0000) returned 1 [0202.319] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214ea0 | out: hHeap=0x1f0000) returned 1 [0202.319] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-NCSI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-ncsi%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0202.320] GetFileType (hFile=0x218) returned 0x1 [0202.320] CloseHandle (hObject=0x218) returned 1 [0202.320] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ab08 [0202.320] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-NCSI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-ncsi%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9d33b19, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9d33b19, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.320] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab08 | out: hHeap=0x1f0000) returned 1 [0202.321] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22aa90 [0202.321] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-NCSI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-ncsi%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9d33b19, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9d33b19, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.321] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aa90 | out: hHeap=0x1f0000) returned 1 [0202.321] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a8b0 [0202.321] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a8b0 | out: hHeap=0x1f0000) returned 1 [0202.321] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbcf0ff2, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcbcf0ff2, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-NetworkProfile%4Operational.evtx", cAlternateFileName="MIFC66~1.EVT")) returned 1 [0202.321] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22abf8 [0202.321] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238618 [0202.321] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229ad8 [0202.321] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238618 | out: hHeap=0x1f0000) returned 1 [0202.321] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ae50 | out: hHeap=0x1f0000) returned 1 [0202.322] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22abf8 | out: hHeap=0x1f0000) returned 1 [0202.322] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-NetworkProfile%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-networkprofile%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0202.322] GetFileType (hFile=0x218) returned 0x1 [0202.323] CloseHandle (hObject=0x218) returned 1 [0202.323] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229f18 [0202.323] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-NetworkProfile%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-networkprofile%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbcf0ff2, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcbcf0ff2, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.323] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229f18 | out: hHeap=0x1f0000) returned 1 [0202.323] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a248 [0202.324] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-NetworkProfile%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-networkprofile%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbcf0ff2, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcbcf0ff2, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.324] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a248 | out: hHeap=0x1f0000) returned 1 [0202.324] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a138 [0202.324] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a138 | out: hHeap=0x1f0000) returned 1 [0202.324] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ab3154, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ab3154, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Ntfs%4Operational.evtx", cAlternateFileName="MI6E98~1.EVT")) returned 1 [0202.324] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x215040 [0202.324] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238758 [0202.324] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22abf8 [0202.324] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238758 | out: hHeap=0x1f0000) returned 1 [0202.324] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229ad8 | out: hHeap=0x1f0000) returned 1 [0202.324] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215040 | out: hHeap=0x1f0000) returned 1 [0202.325] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Ntfs%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-ntfs%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0202.325] GetFileType (hFile=0x218) returned 0x1 [0202.326] CloseHandle (hObject=0x218) returned 1 [0202.327] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a8b0 [0202.327] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Ntfs%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-ntfs%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ab3154, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ab3154, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.327] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a8b0 | out: hHeap=0x1f0000) returned 1 [0202.327] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ac70 [0202.327] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Ntfs%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-ntfs%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ab3154, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ab3154, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.327] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ac70 | out: hHeap=0x1f0000) returned 1 [0202.327] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22af40 [0202.327] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22af40 | out: hHeap=0x1f0000) returned 1 [0202.327] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ad9393, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ad9393, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Ntfs%4WHC.evtx", cAlternateFileName="MIB2AC~1.EVT")) returned 1 [0202.328] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239610 [0202.328] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238708 [0202.328] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2149c0 [0202.328] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238708 | out: hHeap=0x1f0000) returned 1 [0202.328] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22abf8 | out: hHeap=0x1f0000) returned 1 [0202.328] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239610 | out: hHeap=0x1f0000) returned 1 [0202.329] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Ntfs%4WHC.evtx" (normalized: "c:\\logs\\microsoft-windows-ntfs%4whc.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0202.329] GetFileType (hFile=0x218) returned 0x1 [0202.329] CloseHandle (hObject=0x218) returned 1 [0202.330] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214fd8 [0202.330] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Ntfs%4WHC.evtx" (normalized: "c:\\logs\\microsoft-windows-ntfs%4whc.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ad9393, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ad9393, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.330] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214fd8 | out: hHeap=0x1f0000) returned 1 [0202.330] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214e38 [0202.330] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Ntfs%4WHC.evtx" (normalized: "c:\\logs\\microsoft-windows-ntfs%4whc.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ad9393, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ad9393, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.330] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214e38 | out: hHeap=0x1f0000) returned 1 [0202.330] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214ea0 [0202.330] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214ea0 | out: hHeap=0x1f0000) returned 1 [0202.330] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca5fe5cb, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca5fe5cb, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx", cAlternateFileName="MI6AFE~1.EVT")) returned 1 [0202.331] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a038 [0202.331] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238708 [0202.331] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2614f8 [0202.331] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238708 | out: hHeap=0x1f0000) returned 1 [0202.331] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2149c0 | out: hHeap=0x1f0000) returned 1 [0202.331] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a038 | out: hHeap=0x1f0000) returned 1 [0202.332] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx" (normalized: "c:\\logs\\microsoft-windows-program-compatibility-assistant%4compatafterupgrade.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0202.332] GetFileType (hFile=0x218) returned 0x1 [0202.332] CloseHandle (hObject=0x218) returned 1 [0202.332] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2615b0 [0202.333] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx" (normalized: "c:\\logs\\microsoft-windows-program-compatibility-assistant%4compatafterupgrade.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca5fe5cb, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca5fe5cb, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.333] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2615b0 | out: hHeap=0x1f0000) returned 1 [0202.333] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261218 [0202.333] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx" (normalized: "c:\\logs\\microsoft-windows-program-compatibility-assistant%4compatafterupgrade.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca5fe5cb, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca5fe5cb, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.333] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261218 | out: hHeap=0x1f0000) returned 1 [0202.333] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2610a8 [0202.333] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2610a8 | out: hHeap=0x1f0000) returned 1 [0202.333] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe24cdef0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xe24cdef0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-ReadyBoost%4Operational.evtx", cAlternateFileName="MIB9D2~1.EVT")) returned 1 [0202.333] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214e38 [0202.333] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238758 [0202.333] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a8b0 [0202.334] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238758 | out: hHeap=0x1f0000) returned 1 [0202.334] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2614f8 | out: hHeap=0x1f0000) returned 1 [0202.334] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214e38 | out: hHeap=0x1f0000) returned 1 [0202.334] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-ReadyBoost%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-readyboost%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0202.334] GetFileType (hFile=0x218) returned 0x1 [0202.334] CloseHandle (hObject=0x218) returned 1 [0202.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22aa18 [0202.335] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-ReadyBoost%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-readyboost%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe24cdef0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xe24cdef0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.335] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aa18 | out: hHeap=0x1f0000) returned 1 [0202.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ae50 [0202.335] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-ReadyBoost%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-readyboost%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe24cdef0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xe24cdef0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.335] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ae50 | out: hHeap=0x1f0000) returned 1 [0202.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a928 [0202.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a928 | out: hHeap=0x1f0000) returned 1 [0202.336] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd125335f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd125335f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx", cAlternateFileName="MI7A67~1.EVT")) returned 1 [0202.336] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0202.336] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238758 [0202.336] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a8c0 [0202.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238758 | out: hHeap=0x1f0000) returned 1 [0202.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a8b0 | out: hHeap=0x1f0000) returned 1 [0202.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0202.337] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-resource-exhaustion-detector%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0202.337] GetFileType (hFile=0x218) returned 0x1 [0202.337] CloseHandle (hObject=0x218) returned 1 [0202.338] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a620 [0202.338] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-resource-exhaustion-detector%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd125335f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd125335f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a620 | out: hHeap=0x1f0000) returned 1 [0202.338] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a0e0 [0202.338] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-resource-exhaustion-detector%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd125335f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd125335f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a0e0 | out: hHeap=0x1f0000) returned 1 [0202.338] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219f90 [0202.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219f90 | out: hHeap=0x1f0000) returned 1 [0202.339] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1fe2941, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd1fe2941, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SettingSync%4Debug.evtx", cAlternateFileName="MI3773~1.EVT")) returned 1 [0202.339] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214f70 [0202.339] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238618 [0202.339] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a8b0 [0202.339] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238618 | out: hHeap=0x1f0000) returned 1 [0202.339] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a8c0 | out: hHeap=0x1f0000) returned 1 [0202.339] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f70 | out: hHeap=0x1f0000) returned 1 [0202.340] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-SettingSync%4Debug.evtx" (normalized: "c:\\logs\\microsoft-windows-settingsync%4debug.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0202.472] GetFileType (hFile=0x214) returned 0x1 [0202.473] CloseHandle (hObject=0x214) returned 1 [0202.473] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22aec8 [0202.473] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-SettingSync%4Debug.evtx" (normalized: "c:\\logs\\microsoft-windows-settingsync%4debug.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1fe2941, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd1fe2941, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000)) returned 1 [0202.473] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aec8 | out: hHeap=0x1f0000) returned 1 [0202.473] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ae50 [0202.473] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-SettingSync%4Debug.evtx" (normalized: "c:\\logs\\microsoft-windows-settingsync%4debug.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1fe2941, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd1fe2941, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000)) returned 1 [0202.473] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ae50 | out: hHeap=0x1f0000) returned 1 [0202.473] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ad60 [0202.473] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ad60 | out: hHeap=0x1f0000) returned 1 [0202.474] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1fe2941, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd1fe2941, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SettingSync%4Operational.evtx", cAlternateFileName="MI36AA~1.EVT")) returned 1 [0202.474] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a28 [0202.474] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c48 [0202.474] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a3e0 [0202.474] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0202.474] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a8b0 | out: hHeap=0x1f0000) returned 1 [0202.474] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a28 | out: hHeap=0x1f0000) returned 1 [0202.474] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-SettingSync%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-settingsync%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0202.475] GetFileType (hFile=0x214) returned 0x1 [0202.475] CloseHandle (hObject=0x214) returned 1 [0202.475] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a4f0 [0202.475] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-SettingSync%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-settingsync%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1fe2941, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd1fe2941, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.475] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a4f0 | out: hHeap=0x1f0000) returned 1 [0202.475] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229940 [0202.475] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-SettingSync%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-settingsync%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1fe2941, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd1fe2941, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.475] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229940 | out: hHeap=0x1f0000) returned 1 [0202.476] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229940 [0202.476] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229940 | out: hHeap=0x1f0000) returned 1 [0202.476] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3852b12, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd3852b12, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Shell-Core%4ActionCenter.evtx", cAlternateFileName="MI2E2E~1.EVT")) returned 1 [0202.476] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2149c0 [0202.476] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bd0 [0202.476] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229a50 [0202.476] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bd0 | out: hHeap=0x1f0000) returned 1 [0202.476] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a3e0 | out: hHeap=0x1f0000) returned 1 [0202.476] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2149c0 | out: hHeap=0x1f0000) returned 1 [0202.476] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Shell-Core%4ActionCenter.evtx" (normalized: "c:\\logs\\microsoft-windows-shell-core%4actioncenter.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0202.477] GetFileType (hFile=0x214) returned 0x1 [0202.477] CloseHandle (hObject=0x214) returned 1 [0202.477] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a1c0 [0202.477] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Shell-Core%4ActionCenter.evtx" (normalized: "c:\\logs\\microsoft-windows-shell-core%4actioncenter.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3852b12, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd3852b12, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.477] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a1c0 | out: hHeap=0x1f0000) returned 1 [0202.478] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a2d0 [0202.478] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Shell-Core%4ActionCenter.evtx" (normalized: "c:\\logs\\microsoft-windows-shell-core%4actioncenter.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3852b12, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd3852b12, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.478] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a2d0 | out: hHeap=0x1f0000) returned 1 [0202.478] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a248 [0202.478] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a248 | out: hHeap=0x1f0000) returned 1 [0202.478] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3852b12, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd3852b12, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Shell-Core%4Operational.evtx", cAlternateFileName="MI1C6C~1.EVT")) returned 1 [0202.478] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214ea0 [0202.478] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609c8 [0202.478] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ace8 [0202.478] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609c8 | out: hHeap=0x1f0000) returned 1 [0202.478] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229a50 | out: hHeap=0x1f0000) returned 1 [0202.478] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214ea0 | out: hHeap=0x1f0000) returned 1 [0202.479] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Shell-Core%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-shell-core%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0202.479] GetFileType (hFile=0x214) returned 0x1 [0202.479] CloseHandle (hObject=0x214) returned 1 [0202.479] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a928 [0202.479] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Shell-Core%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-shell-core%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3852b12, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd3852b12, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.479] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a928 | out: hHeap=0x1f0000) returned 1 [0202.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22aa18 [0202.480] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Shell-Core%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-shell-core%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3852b12, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd3852b12, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aa18 | out: hHeap=0x1f0000) returned 1 [0202.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ad60 [0202.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ad60 | out: hHeap=0x1f0000) returned 1 [0202.480] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97d66c8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97d66c8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SmbClient%4Connectivity.evtx", cAlternateFileName="MI00FB~1.EVT")) returned 1 [0202.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d68 [0202.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b08 [0202.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22aec8 [0202.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b08 | out: hHeap=0x1f0000) returned 1 [0202.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ace8 | out: hHeap=0x1f0000) returned 1 [0202.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d68 | out: hHeap=0x1f0000) returned 1 [0202.481] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-SmbClient%4Connectivity.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4connectivity.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0202.481] GetFileType (hFile=0x214) returned 0x1 [0202.481] CloseHandle (hObject=0x214) returned 1 [0202.481] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a928 [0202.481] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-SmbClient%4Connectivity.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4connectivity.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97d66c8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97d66c8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.482] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a928 | out: hHeap=0x1f0000) returned 1 [0202.482] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22aa90 [0202.482] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-SmbClient%4Connectivity.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4connectivity.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97d66c8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97d66c8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.482] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aa90 | out: hHeap=0x1f0000) returned 1 [0202.482] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22aa18 [0202.482] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aa18 | out: hHeap=0x1f0000) returned 1 [0202.482] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97b042f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97b042f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SMBClient%4Operational.evtx", cAlternateFileName="MID8B0~1.EVT")) returned 1 [0202.482] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214ea0 [0202.482] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ae0 [0202.482] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a8b0 [0202.482] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ae0 | out: hHeap=0x1f0000) returned 1 [0202.482] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aec8 | out: hHeap=0x1f0000) returned 1 [0202.483] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214ea0 | out: hHeap=0x1f0000) returned 1 [0202.483] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-SMBClient%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0202.483] GetFileType (hFile=0x214) returned 0x1 [0202.483] CloseHandle (hObject=0x214) returned 1 [0202.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ac70 [0202.484] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-SMBClient%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97b042f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97b042f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.484] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ac70 | out: hHeap=0x1f0000) returned 1 [0202.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22af40 [0202.484] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-SMBClient%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97b042f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97b042f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.484] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22af40 | out: hHeap=0x1f0000) returned 1 [0202.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ab80 [0202.484] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab80 | out: hHeap=0x1f0000) returned 1 [0202.484] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97d66c8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97d66c8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SmbClient%4Security.evtx", cAlternateFileName="MI8CEE~1.EVT")) returned 1 [0202.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214f70 [0202.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0202.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22abf8 [0202.484] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0202.484] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a8b0 | out: hHeap=0x1f0000) returned 1 [0202.484] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f70 | out: hHeap=0x1f0000) returned 1 [0202.485] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-SmbClient%4Security.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4security.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0202.486] GetFileType (hFile=0x218) returned 0x1 [0202.486] CloseHandle (hObject=0x218) returned 1 [0202.487] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ace8 [0202.487] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-SmbClient%4Security.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4security.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97d66c8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97d66c8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.487] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ace8 | out: hHeap=0x1f0000) returned 1 [0202.487] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a9a0 [0202.487] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-SmbClient%4Security.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4security.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97d66c8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97d66c8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.487] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a9a0 | out: hHeap=0x1f0000) returned 1 [0202.487] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a9a0 [0202.487] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a9a0 | out: hHeap=0x1f0000) returned 1 [0202.487] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb1ea1c9, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb1ea1c9, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SMBServer%4Audit.evtx", cAlternateFileName="MIE3AD~1.EVT")) returned 1 [0202.489] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239458 [0202.489] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609f0 [0202.489] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ac70 [0202.489] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609f0 | out: hHeap=0x1f0000) returned 1 [0202.489] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22abf8 | out: hHeap=0x1f0000) returned 1 [0202.489] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239458 | out: hHeap=0x1f0000) returned 1 [0202.489] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-SMBServer%4Audit.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4audit.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0202.490] GetFileType (hFile=0x218) returned 0x1 [0202.490] CloseHandle (hObject=0x218) returned 1 [0202.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22aa18 [0202.490] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-SMBServer%4Audit.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4audit.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb1ea1c9, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb1ea1c9, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aa18 | out: hHeap=0x1f0000) returned 1 [0202.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ad60 [0202.491] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-SMBServer%4Audit.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4audit.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb1ea1c9, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb1ea1c9, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ad60 | out: hHeap=0x1f0000) returned 1 [0202.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a9a0 [0202.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a9a0 | out: hHeap=0x1f0000) returned 1 [0202.491] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb19dd19, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb19dd19, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SMBServer%4Connectivity.evtx", cAlternateFileName="MI8248~1.EVT")) returned 1 [0202.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c30 [0202.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609c8 [0202.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ae50 [0202.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609c8 | out: hHeap=0x1f0000) returned 1 [0202.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ac70 | out: hHeap=0x1f0000) returned 1 [0202.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c30 | out: hHeap=0x1f0000) returned 1 [0202.492] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-SMBServer%4Connectivity.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4connectivity.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0202.492] GetFileType (hFile=0x218) returned 0x1 [0202.493] CloseHandle (hObject=0x218) returned 1 [0202.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ace8 [0202.493] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-SMBServer%4Connectivity.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4connectivity.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb19dd19, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb19dd19, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ace8 | out: hHeap=0x1f0000) returned 1 [0202.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ace8 [0202.493] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-SMBServer%4Connectivity.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4connectivity.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb19dd19, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb19dd19, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ace8 | out: hHeap=0x1f0000) returned 1 [0202.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ace8 [0202.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ace8 | out: hHeap=0x1f0000) returned 1 [0202.493] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb151873, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb151873, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SMBServer%4Operational.evtx", cAlternateFileName="MI4B6B~1.EVT")) returned 1 [0202.494] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2149c0 [0202.494] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a90 [0202.494] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ab08 [0202.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a90 | out: hHeap=0x1f0000) returned 1 [0202.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ae50 | out: hHeap=0x1f0000) returned 1 [0202.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2149c0 | out: hHeap=0x1f0000) returned 1 [0202.494] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-SMBServer%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0202.494] GetFileType (hFile=0x218) returned 0x1 [0202.495] CloseHandle (hObject=0x218) returned 1 [0202.495] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22aa18 [0202.495] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-SMBServer%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb151873, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb151873, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aa18 | out: hHeap=0x1f0000) returned 1 [0202.495] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a928 [0202.495] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-SMBServer%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb151873, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb151873, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a928 | out: hHeap=0x1f0000) returned 1 [0202.495] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ac70 [0202.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ac70 | out: hHeap=0x1f0000) returned 1 [0202.496] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb177aca, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb177aca, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SMBServer%4Security.evtx", cAlternateFileName="MI7709~1.EVT")) returned 1 [0202.496] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214dd0 [0202.496] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c20 [0202.496] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22abf8 [0202.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c20 | out: hHeap=0x1f0000) returned 1 [0202.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab08 | out: hHeap=0x1f0000) returned 1 [0202.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214dd0 | out: hHeap=0x1f0000) returned 1 [0202.496] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-SMBServer%4Security.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4security.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0202.497] GetFileType (hFile=0x218) returned 0x1 [0202.497] CloseHandle (hObject=0x218) returned 1 [0202.497] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ac70 [0202.497] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-SMBServer%4Security.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4security.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb177aca, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb177aca, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.497] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ac70 | out: hHeap=0x1f0000) returned 1 [0202.497] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ae50 [0202.498] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-SMBServer%4Security.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4security.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb177aca, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb177aca, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.498] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ae50 | out: hHeap=0x1f0000) returned 1 [0202.498] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ac70 [0202.498] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ac70 | out: hHeap=0x1f0000) returned 1 [0202.498] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd751ea61, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd751ea61, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Store%4Operational.evtx", cAlternateFileName="MICEDD~1.EVT")) returned 1 [0202.498] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2150a8 [0202.498] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c48 [0202.498] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ac70 [0202.498] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0202.498] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22abf8 | out: hHeap=0x1f0000) returned 1 [0202.498] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2150a8 | out: hHeap=0x1f0000) returned 1 [0202.499] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Store%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-store%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0202.500] GetFileType (hFile=0x218) returned 0x1 [0202.500] CloseHandle (hObject=0x218) returned 1 [0202.501] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a9a0 [0202.501] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Store%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-store%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd751ea61, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd751ea61, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a9a0 | out: hHeap=0x1f0000) returned 1 [0202.501] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a928 [0202.501] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Store%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-store%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd751ea61, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd751ea61, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a928 | out: hHeap=0x1f0000) returned 1 [0202.501] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ab80 [0202.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab80 | out: hHeap=0x1f0000) returned 1 [0202.501] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd0763ff, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcd0763ff, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-TaskScheduler%4Maintenance.evtx", cAlternateFileName="MIE2F0~1.EVT")) returned 1 [0202.501] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ab08 [0202.501] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609c8 [0202.502] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229ad8 [0202.502] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609c8 | out: hHeap=0x1f0000) returned 1 [0202.502] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ac70 | out: hHeap=0x1f0000) returned 1 [0202.502] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab08 | out: hHeap=0x1f0000) returned 1 [0202.502] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-TaskScheduler%4Maintenance.evtx" (normalized: "c:\\logs\\microsoft-windows-taskscheduler%4maintenance.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0202.503] GetFileType (hFile=0x218) returned 0x1 [0202.503] CloseHandle (hObject=0x218) returned 1 [0202.503] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a3e0 [0202.503] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-TaskScheduler%4Maintenance.evtx" (normalized: "c:\\logs\\microsoft-windows-taskscheduler%4maintenance.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd0763ff, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcd0763ff, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.504] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a3e0 | out: hHeap=0x1f0000) returned 1 [0202.504] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a0b0 [0202.504] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-TaskScheduler%4Maintenance.evtx" (normalized: "c:\\logs\\microsoft-windows-taskscheduler%4maintenance.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd0763ff, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcd0763ff, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.504] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a0b0 | out: hHeap=0x1f0000) returned 1 [0202.504] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229c70 [0202.504] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229c70 | out: hHeap=0x1f0000) returned 1 [0202.504] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5089d037, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5089d037, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx", cAlternateFileName="MIAB1D~1.EVT")) returned 1 [0202.504] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0202.504] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a90 [0202.504] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219ee8 [0202.505] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a90 | out: hHeap=0x1f0000) returned 1 [0202.505] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229ad8 | out: hHeap=0x1f0000) returned 1 [0202.505] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0202.505] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0202.505] GetFileType (hFile=0x218) returned 0x1 [0202.505] CloseHandle (hObject=0x218) returned 1 [0202.506] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a8c0 [0202.506] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5089d037, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5089d037, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.506] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a8c0 | out: hHeap=0x1f0000) returned 1 [0202.506] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219d98 [0202.506] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5089d037, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5089d037, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.506] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219d98 | out: hHeap=0x1f0000) returned 1 [0202.506] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a4d0 [0202.506] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a4d0 | out: hHeap=0x1f0000) returned 1 [0202.506] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x508c32a6, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x508c32a6, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx", cAlternateFileName="MI62D3~1.EVT")) returned 1 [0202.506] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219cf0 [0202.506] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ae0 [0202.506] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2612d0 [0202.507] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ae0 | out: hHeap=0x1f0000) returned 1 [0202.507] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219ee8 | out: hHeap=0x1f0000) returned 1 [0202.507] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219cf0 | out: hHeap=0x1f0000) returned 1 [0202.507] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0202.507] GetFileType (hFile=0x218) returned 0x1 [0202.507] CloseHandle (hObject=0x218) returned 1 [0202.508] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261388 [0202.508] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x508c32a6, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x508c32a6, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.508] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261388 | out: hHeap=0x1f0000) returned 1 [0202.508] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x260ff0 [0202.508] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x508c32a6, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x508c32a6, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.508] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ff0 | out: hHeap=0x1f0000) returned 1 [0202.508] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261388 [0202.508] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261388 | out: hHeap=0x1f0000) returned 1 [0202.508] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc14341c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc14341c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx", cAlternateFileName="MIEC03~1.EVT")) returned 1 [0202.508] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0202.508] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c20 [0202.508] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a230 [0202.508] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c20 | out: hHeap=0x1f0000) returned 1 [0202.509] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2612d0 | out: hHeap=0x1f0000) returned 1 [0202.509] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0202.509] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0202.738] GetFileType (hFile=0x210) returned 0x1 [0202.738] CloseHandle (hObject=0x210) returned 1 [0202.738] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a770 [0202.738] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc14341c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc14341c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.738] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a770 | out: hHeap=0x1f0000) returned 1 [0202.739] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21ab60 [0202.739] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc14341c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc14341c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.739] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ab60 | out: hHeap=0x1f0000) returned 1 [0202.739] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219cf0 [0202.739] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219cf0 | out: hHeap=0x1f0000) returned 1 [0202.739] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc1b5b23, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc1b5b23, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx", cAlternateFileName="MI1F5D~1.EVT")) returned 1 [0202.739] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a770 [0202.739] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a18 [0202.739] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261440 [0202.739] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a18 | out: hHeap=0x1f0000) returned 1 [0202.739] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a230 | out: hHeap=0x1f0000) returned 1 [0202.739] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a770 | out: hHeap=0x1f0000) returned 1 [0202.740] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0202.740] GetFileType (hFile=0x210) returned 0x1 [0202.740] CloseHandle (hObject=0x210) returned 1 [0202.740] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2614f8 [0202.740] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc1b5b23, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc1b5b23, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.740] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2614f8 | out: hHeap=0x1f0000) returned 1 [0202.740] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2610a8 [0202.741] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc1b5b23, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc1b5b23, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.741] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2610a8 | out: hHeap=0x1f0000) returned 1 [0202.741] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x260ff0 [0202.741] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ff0 | out: hHeap=0x1f0000) returned 1 [0202.741] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd74ac348, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd74ac348, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-TWinUI%4Operational.evtx", cAlternateFileName="MIA925~1.EVT")) returned 1 [0202.741] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214ea0 [0202.741] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b08 [0202.741] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a928 [0202.741] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b08 | out: hHeap=0x1f0000) returned 1 [0202.741] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261440 | out: hHeap=0x1f0000) returned 1 [0202.741] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214ea0 | out: hHeap=0x1f0000) returned 1 [0202.742] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-TWinUI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-twinui%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0202.742] GetFileType (hFile=0x210) returned 0x1 [0202.742] CloseHandle (hObject=0x210) returned 1 [0202.742] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a9a0 [0202.742] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-TWinUI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-twinui%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd74ac348, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd74ac348, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.743] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a9a0 | out: hHeap=0x1f0000) returned 1 [0202.743] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22af40 [0202.743] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-TWinUI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-twinui%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd74ac348, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd74ac348, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.743] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22af40 | out: hHeap=0x1f0000) returned 1 [0202.743] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ab80 [0202.743] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab80 | out: hHeap=0x1f0000) returned 1 [0202.743] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50aff605, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50aff605, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-User Profile Service%4Operational.evtx", cAlternateFileName="MI4D4C~1.EVT")) returned 1 [0202.743] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a468 [0202.743] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609c8 [0202.743] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0202.743] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609c8 | out: hHeap=0x1f0000) returned 1 [0202.743] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a928 | out: hHeap=0x1f0000) returned 1 [0202.743] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a468 | out: hHeap=0x1f0000) returned 1 [0202.744] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-User Profile Service%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-user profile service%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0202.744] GetFileType (hFile=0x210) returned 0x1 [0202.744] CloseHandle (hObject=0x210) returned 1 [0202.744] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0202.744] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-User Profile Service%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-user profile service%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50aff605, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50aff605, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.745] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0202.745] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0202.745] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-User Profile Service%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-user profile service%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50aff605, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50aff605, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.745] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0202.745] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0202.745] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0202.745] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50981e6e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50981e6e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-UserPnp%4ActionCenter.evtx", cAlternateFileName="MI5FF0~1.EVT")) returned 1 [0202.745] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c98 [0202.745] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ab8 [0202.745] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22aa90 [0202.745] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ab8 | out: hHeap=0x1f0000) returned 1 [0202.745] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0202.745] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c98 | out: hHeap=0x1f0000) returned 1 [0202.746] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-UserPnp%4ActionCenter.evtx" (normalized: "c:\\logs\\microsoft-windows-userpnp%4actioncenter.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0202.746] GetFileType (hFile=0x210) returned 0x1 [0202.746] CloseHandle (hObject=0x210) returned 1 [0202.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ab80 [0202.747] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-UserPnp%4ActionCenter.evtx" (normalized: "c:\\logs\\microsoft-windows-userpnp%4actioncenter.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50981e6e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50981e6e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.747] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab80 | out: hHeap=0x1f0000) returned 1 [0202.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ad60 [0202.747] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-UserPnp%4ActionCenter.evtx" (normalized: "c:\\logs\\microsoft-windows-userpnp%4actioncenter.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50981e6e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50981e6e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.747] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ad60 | out: hHeap=0x1f0000) returned 1 [0202.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22abf8 [0202.747] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22abf8 | out: hHeap=0x1f0000) returned 1 [0202.747] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5095bc04, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5095bc04, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-UserPnp%4DeviceInstall.evtx", cAlternateFileName="MIBD88~1.EVT")) returned 1 [0202.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214958 [0202.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bd0 [0202.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a838 [0202.747] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bd0 | out: hHeap=0x1f0000) returned 1 [0202.747] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aa90 | out: hHeap=0x1f0000) returned 1 [0202.748] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214958 | out: hHeap=0x1f0000) returned 1 [0202.748] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-UserPnp%4DeviceInstall.evtx" (normalized: "c:\\logs\\microsoft-windows-userpnp%4deviceinstall.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0202.748] GetFileType (hFile=0x210) returned 0x1 [0202.748] CloseHandle (hObject=0x210) returned 1 [0202.749] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22add8 [0202.749] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-UserPnp%4DeviceInstall.evtx" (normalized: "c:\\logs\\microsoft-windows-userpnp%4deviceinstall.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5095bc04, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5095bc04, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22add8 | out: hHeap=0x1f0000) returned 1 [0202.749] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22aa18 [0202.749] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-UserPnp%4DeviceInstall.evtx" (normalized: "c:\\logs\\microsoft-windows-userpnp%4deviceinstall.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5095bc04, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5095bc04, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aa18 | out: hHeap=0x1f0000) returned 1 [0202.749] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ab08 [0202.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab08 | out: hHeap=0x1f0000) returned 1 [0202.749] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50b97f64, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50b97f64, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx", cAlternateFileName="MICC17~1.EVT")) returned 1 [0202.749] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229940 [0202.749] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0202.749] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0202.750] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0202.750] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a838 | out: hHeap=0x1f0000) returned 1 [0202.750] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229940 | out: hHeap=0x1f0000) returned 1 [0202.750] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-volumesnapshot-driver%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0202.750] GetFileType (hFile=0x210) returned 0x1 [0202.751] CloseHandle (hObject=0x210) returned 1 [0202.751] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0202.751] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-volumesnapshot-driver%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50b97f64, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50b97f64, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.751] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0202.751] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0202.751] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-volumesnapshot-driver%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50b97f64, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50b97f64, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.751] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0202.751] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0202.751] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0202.751] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc986efe1, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc986efe1, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Wcmsvc%4Operational.evtx", cAlternateFileName="MI72BF~1.EVT")) returned 1 [0202.751] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214ea0 [0202.751] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0202.752] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22aa90 [0202.752] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0202.752] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0202.752] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214ea0 | out: hHeap=0x1f0000) returned 1 [0202.752] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Wcmsvc%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-wcmsvc%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0202.752] GetFileType (hFile=0x210) returned 0x1 [0202.753] CloseHandle (hObject=0x210) returned 1 [0202.753] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22aa18 [0202.753] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Wcmsvc%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-wcmsvc%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc986efe1, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc986efe1, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.753] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aa18 | out: hHeap=0x1f0000) returned 1 [0202.753] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22af40 [0202.753] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Wcmsvc%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-wcmsvc%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc986efe1, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc986efe1, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.754] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22af40 | out: hHeap=0x1f0000) returned 1 [0202.754] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ab08 [0202.754] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab08 | out: hHeap=0x1f0000) returned 1 [0202.754] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb426548, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb426548, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Windows Defender%4Operational.evtx", cAlternateFileName="MI7501~1.EVT")) returned 1 [0202.754] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a928 [0202.754] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a18 [0202.754] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229f18 [0202.754] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a18 | out: hHeap=0x1f0000) returned 1 [0202.754] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aa90 | out: hHeap=0x1f0000) returned 1 [0202.754] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a928 | out: hHeap=0x1f0000) returned 1 [0202.755] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Windows Defender%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-windows defender%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0202.755] GetFileType (hFile=0x210) returned 0x1 [0202.755] CloseHandle (hObject=0x210) returned 1 [0202.755] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a1c0 [0202.755] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Windows Defender%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-windows defender%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb426548, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb426548, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.755] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a1c0 | out: hHeap=0x1f0000) returned 1 [0202.755] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a138 [0202.755] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Windows Defender%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-windows defender%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb426548, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb426548, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.756] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a138 | out: hHeap=0x1f0000) returned 1 [0202.756] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a600 [0202.756] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a600 | out: hHeap=0x1f0000) returned 1 [0202.756] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb4729e7, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb4729e7, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Windows Defender%4WHC.evtx", cAlternateFileName="MIF226~1.EVT")) returned 1 [0202.756] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c98 [0202.756] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a18 [0202.756] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a838 [0202.756] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a18 | out: hHeap=0x1f0000) returned 1 [0202.756] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229f18 | out: hHeap=0x1f0000) returned 1 [0202.756] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c98 | out: hHeap=0x1f0000) returned 1 [0202.756] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Windows Defender%4WHC.evtx" (normalized: "c:\\logs\\microsoft-windows-windows defender%4whc.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0202.756] GetFileType (hFile=0x210) returned 0x1 [0202.757] CloseHandle (hObject=0x210) returned 1 [0202.757] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22abf8 [0202.757] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Windows Defender%4WHC.evtx" (normalized: "c:\\logs\\microsoft-windows-windows defender%4whc.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb4729e7, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb4729e7, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.757] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22abf8 | out: hHeap=0x1f0000) returned 1 [0202.757] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22af40 [0202.757] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Windows Defender%4WHC.evtx" (normalized: "c:\\logs\\microsoft-windows-windows defender%4whc.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb4729e7, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb4729e7, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.757] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22af40 | out: hHeap=0x1f0000) returned 1 [0202.757] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ad60 [0202.757] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ad60 | out: hHeap=0x1f0000) returned 1 [0202.758] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4b19353, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4b19353, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx", cAlternateFileName="MIDCC7~1.EVT")) returned 1 [0202.758] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x260ff0 [0202.758] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609c8 [0202.758] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x230258 [0202.758] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609c8 | out: hHeap=0x1f0000) returned 1 [0202.758] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a838 | out: hHeap=0x1f0000) returned 1 [0202.758] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ff0 | out: hHeap=0x1f0000) returned 1 [0202.758] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4connectionsecurity.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0202.758] GetFileType (hFile=0x210) returned 0x1 [0202.759] CloseHandle (hObject=0x210) returned 1 [0202.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22ff38 [0202.759] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4connectionsecurity.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4b19353, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4b19353, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0202.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x230000 [0202.759] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4connectionsecurity.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4b19353, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4b19353, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0202.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22ff38 [0202.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0202.759] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9c9b1b6, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9c9b1b6, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx", cAlternateFileName="MI7771~1.EVT")) returned 1 [0202.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a818 [0202.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c20 [0202.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2614f8 [0202.760] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c20 | out: hHeap=0x1f0000) returned 1 [0202.760] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0202.760] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a818 | out: hHeap=0x1f0000) returned 1 [0202.761] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4firewall.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0202.761] GetFileType (hFile=0x210) returned 0x1 [0202.761] CloseHandle (hObject=0x210) returned 1 [0202.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261218 [0202.762] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4firewall.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9c9b1b6, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9c9b1b6, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000)) returned 1 [0202.762] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261218 | out: hHeap=0x1f0000) returned 1 [0202.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2610a8 [0202.762] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4firewall.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9c9b1b6, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9c9b1b6, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000)) returned 1 [0202.762] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2610a8 | out: hHeap=0x1f0000) returned 1 [0202.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261668 [0202.762] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261668 | out: hHeap=0x1f0000) returned 1 [0202.763] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9df26e9, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9df26e9, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx", cAlternateFileName="MI4667~1.EVT")) returned 1 [0202.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a710 [0202.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ab8 [0202.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0202.763] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ab8 | out: hHeap=0x1f0000) returned 1 [0202.763] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2614f8 | out: hHeap=0x1f0000) returned 1 [0202.763] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a710 | out: hHeap=0x1f0000) returned 1 [0202.764] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx" (normalized: "c:\\logs\\microsoft-windows-wininet-config%4proxyconfigchanged.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0202.764] GetFileType (hFile=0x210) returned 0x1 [0202.764] CloseHandle (hObject=0x210) returned 1 [0202.765] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0202.765] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx" (normalized: "c:\\logs\\microsoft-windows-wininet-config%4proxyconfigchanged.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9df26e9, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9df26e9, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.765] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0202.765] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0202.765] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx" (normalized: "c:\\logs\\microsoft-windows-wininet-config%4proxyconfigchanged.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9df26e9, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9df26e9, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.766] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0202.766] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0202.766] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0202.766] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd122d184, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd122d184, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Winlogon%4Operational.evtx", cAlternateFileName="MID6AB~1.EVT")) returned 1 [0202.766] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214f70 [0202.766] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0202.766] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ace8 [0202.766] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0202.766] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0202.767] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f70 | out: hHeap=0x1f0000) returned 1 [0202.767] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Winlogon%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-winlogon%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0202.768] GetFileType (hFile=0x210) returned 0x1 [0202.768] CloseHandle (hObject=0x210) returned 1 [0202.768] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22aa18 [0202.768] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Winlogon%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-winlogon%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd122d184, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd122d184, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.769] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aa18 | out: hHeap=0x1f0000) returned 1 [0202.870] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a9a0 [0202.871] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Winlogon%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-winlogon%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd122d184, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd122d184, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a9a0 | out: hHeap=0x1f0000) returned 1 [0202.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ab80 [0202.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab80 | out: hHeap=0x1f0000) returned 1 [0202.946] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf164b9b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcf164b9b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-WMI-Activity%4Operational.evtx", cAlternateFileName="MIFF83~1.EVT")) returned 1 [0202.946] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a838 [0202.947] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609f0 [0202.947] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a3e0 [0202.947] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609f0 | out: hHeap=0x1f0000) returned 1 [0202.947] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ace8 | out: hHeap=0x1f0000) returned 1 [0202.947] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a838 | out: hHeap=0x1f0000) returned 1 [0202.996] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-WMI-Activity%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-wmi-activity%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0202.996] GetFileType (hFile=0x210) returned 0x1 [0202.996] CloseHandle (hObject=0x210) returned 1 [0202.997] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a248 [0202.997] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-WMI-Activity%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-wmi-activity%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf164b9b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcf164b9b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000)) returned 1 [0202.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a248 | out: hHeap=0x1f0000) returned 1 [0202.997] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a0b0 [0202.997] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-WMI-Activity%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-wmi-activity%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf164b9b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcf164b9b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000)) returned 1 [0202.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a0b0 | out: hHeap=0x1f0000) returned 1 [0202.997] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a600 [0202.998] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a600 | out: hHeap=0x1f0000) returned 1 [0202.998] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50555c8d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50555c8d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xf9a458f4, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x111000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Security.evtx", cAlternateFileName="SECURI~1.EVT")) returned 1 [0202.998] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0202.998] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ae0 [0202.998] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d280 [0202.998] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ae0 | out: hHeap=0x1f0000) returned 1 [0202.998] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a3e0 | out: hHeap=0x1f0000) returned 1 [0202.998] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0202.999] CreateFileW (lpFileName="C:\\\\Logs\\Security.evtx" (normalized: "c:\\logs\\security.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0202.999] GetFileType (hFile=0x210) returned 0x1 [0202.999] CloseHandle (hObject=0x210) returned 1 [0203.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282a0 [0203.455] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Security.evtx" (normalized: "c:\\logs\\security.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50555c8d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50555c8d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xc2c627ec, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x111103)) returned 1 [0203.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0203.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282a0 [0203.455] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Security.evtx" (normalized: "c:\\logs\\security.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50555c8d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50555c8d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xc2c627ec, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x111103)) returned 1 [0203.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0203.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228310 [0203.456] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228310 | out: hHeap=0x1f0000) returned 1 [0203.456] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95a6db2c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x95a6db2c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.evtx", cAlternateFileName="SETUP~1.EVT")) returned 1 [0203.456] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a90 [0203.456] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c70 [0203.456] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282d8 [0203.456] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c70 | out: hHeap=0x1f0000) returned 1 [0203.456] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d280 | out: hHeap=0x1f0000) returned 1 [0203.456] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a90 | out: hHeap=0x1f0000) returned 1 [0203.456] CreateFileW (lpFileName="C:\\\\Logs\\Setup.evtx" (normalized: "c:\\logs\\setup.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0203.457] GetFileType (hFile=0x210) returned 0x1 [0203.457] CloseHandle (hObject=0x210) returned 1 [0203.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228310 [0203.457] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Setup.evtx" (normalized: "c:\\logs\\setup.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95a6db2c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x95a6db2c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.457] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228310 | out: hHeap=0x1f0000) returned 1 [0203.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228310 [0203.457] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Setup.evtx" (normalized: "c:\\logs\\setup.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95a6db2c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x95a6db2c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228310 | out: hHeap=0x1f0000) returned 1 [0203.458] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282a0 [0203.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0203.458] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505097c4, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505097c4, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x111000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.evtx", cAlternateFileName="SYSTEM~1.EVT")) returned 1 [0203.458] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bd0 [0203.458] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0203.458] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282a0 [0203.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0203.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282d8 | out: hHeap=0x1f0000) returned 1 [0203.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bd0 | out: hHeap=0x1f0000) returned 1 [0203.458] CreateFileW (lpFileName="C:\\\\Logs\\System.evtx" (normalized: "c:\\logs\\system.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0203.459] GetFileType (hFile=0x210) returned 0x1 [0203.459] CloseHandle (hObject=0x210) returned 1 [0203.459] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282d8 [0203.460] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\System.evtx" (normalized: "c:\\logs\\system.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505097c4, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505097c4, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x111000)) returned 1 [0203.460] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282d8 | out: hHeap=0x1f0000) returned 1 [0203.460] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228310 [0203.460] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\System.evtx" (normalized: "c:\\logs\\system.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505097c4, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505097c4, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x111000)) returned 1 [0203.460] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228310 | out: hHeap=0x1f0000) returned 1 [0203.460] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228310 [0203.460] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228310 | out: hHeap=0x1f0000) returned 1 [0203.460] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50555c8d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50555c8d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows PowerShell.evtx", cAlternateFileName="WINDOW~1.EVT")) returned 1 [0203.460] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282d8 [0203.460] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0203.460] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239458 [0203.460] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0203.460] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0203.460] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282d8 | out: hHeap=0x1f0000) returned 1 [0203.460] CreateFileW (lpFileName="C:\\\\Logs\\Windows PowerShell.evtx" (normalized: "c:\\logs\\windows powershell.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0203.461] GetFileType (hFile=0x210) returned 0x1 [0203.461] CloseHandle (hObject=0x210) returned 1 [0203.461] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239610 [0203.461] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Windows PowerShell.evtx" (normalized: "c:\\logs\\windows powershell.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50555c8d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50555c8d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.461] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239610 | out: hHeap=0x1f0000) returned 1 [0203.461] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239560 [0203.462] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Windows PowerShell.evtx" (normalized: "c:\\logs\\windows powershell.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50555c8d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50555c8d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.462] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239560 | out: hHeap=0x1f0000) returned 1 [0203.462] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239668 [0203.462] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239668 | out: hHeap=0x1f0000) returned 1 [0203.462] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50555c8d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50555c8d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows PowerShell.evtx", cAlternateFileName="WINDOW~1.EVT")) returned 0 [0203.462] FindClose (in: hFindFile=0x24e5c0 | out: hFindFile=0x24e5c0) returned 1 [0203.462] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239458 | out: hHeap=0x1f0000) returned 1 [0203.462] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22dd00 | out: hHeap=0x1f0000) returned 1 [0203.462] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0203.462] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221d40 | out: hHeap=0x1f0000) returned 1 [0203.462] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234428 [0203.462] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bd0 [0203.462] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e828 [0203.463] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0203.463] FindFirstFileW (in: lpFileName="C:\\\\PerfLogs\\*", lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa03748ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17b3dd09, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ebc0 [0203.464] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c20 [0203.464] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0203.464] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0203.464] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa03748ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17b3dd09, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0203.464] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0203.464] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c20 | out: hHeap=0x1f0000) returned 1 [0203.464] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0203.464] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0203.464] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa03748ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17b3dd09, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0203.465] FindClose (in: hFindFile=0x24ebc0 | out: hFindFile=0x24ebc0) returned 1 [0203.465] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0203.465] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e828 | out: hHeap=0x1f0000) returned 1 [0203.465] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bd0 | out: hHeap=0x1f0000) returned 1 [0203.465] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234428 | out: hHeap=0x1f0000) returned 1 [0203.465] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233f18 [0203.465] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a90 [0203.465] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e9c0 [0203.465] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282d8 [0203.465] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\*", lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3ac6234, ftLastAccessTime.dwHighDateTime=0x1d5c65b, ftLastWriteTime.dwLowDateTime=0x3ac6234, ftLastWriteTime.dwHighDateTime=0x1d5c65b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ea00 [0203.465] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282a0 [0203.465] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282d8 | out: hHeap=0x1f0000) returned 1 [0203.466] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0203.466] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3ac6234, ftLastAccessTime.dwHighDateTime=0x1d5c65b, ftLastWriteTime.dwLowDateTime=0x3ac6234, ftLastWriteTime.dwHighDateTime=0x1d5c65b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0203.466] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282d8 [0203.466] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0203.466] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0203.466] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0203.466] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4aadd873, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common Files", cAlternateFileName="COMMON~1")) returned 1 [0203.466] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bd0 [0203.466] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228310 [0203.466] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225dd8 [0203.466] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228310 | out: hHeap=0x1f0000) returned 1 [0203.466] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282d8 | out: hHeap=0x1f0000) returned 1 [0203.466] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bd0 | out: hHeap=0x1f0000) returned 1 [0203.466] lstrcmpW (lpString1="Common Files", lpString2=".") returned 1 [0203.466] lstrcmpW (lpString1="Common Files", lpString2="..") returned 1 [0203.466] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x2051f0 [0203.466] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234230 [0203.466] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1a307d95, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5d0779b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5d0779b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0203.466] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bd0 [0203.466] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282a0 [0203.467] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225ec8 [0203.467] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0203.467] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225dd8 | out: hHeap=0x1f0000) returned 1 [0203.467] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bd0 | out: hHeap=0x1f0000) returned 1 [0203.467] CreateFileW (lpFileName="C:\\\\Program Files\\desktop.ini" (normalized: "c:\\program files\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfee90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0203.467] GetFileType (hFile=0x210) returned 0x1 [0203.467] CloseHandle (hObject=0x210) returned 1 [0203.467] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2342c0 [0203.467] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\desktop.ini" (normalized: "c:\\program files\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1cfef24 | out: lpFileInformation=0x1cfef24*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1a307d95, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5d0779b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5d0779b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xae)) returned 1 [0203.468] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2342c0 | out: hHeap=0x1f0000) returned 1 [0203.468] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234158 [0203.468] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\desktop.ini" (normalized: "c:\\program files\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1cfef2c | out: lpFileInformation=0x1cfef2c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1a307d95, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5d0779b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5d0779b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xae)) returned 1 [0203.468] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234158 | out: hHeap=0x1f0000) returned 1 [0203.468] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2341a0 [0203.468] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2341a0 | out: hHeap=0x1f0000) returned 1 [0203.468] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfbf3a0e6, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xfbf3a0e6, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0203.468] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228310 [0203.468] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282d8 [0203.468] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239458 [0203.468] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282d8 | out: hHeap=0x1f0000) returned 1 [0203.468] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225ec8 | out: hHeap=0x1f0000) returned 1 [0203.468] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228310 | out: hHeap=0x1f0000) returned 1 [0203.468] lstrcmpW (lpString1="Internet Explorer", lpString2=".") returned 1 [0203.468] lstrcmpW (lpString1="Internet Explorer", lpString2="..") returned 1 [0203.468] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282a0 [0203.468] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2396c0 [0203.468] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2051f0 | out: hHeap=0x1f0000) returned 1 [0203.468] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xfc0fdd55, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xfc0fdd55, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 1 [0203.468] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282d8 [0203.468] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239458 | out: hHeap=0x1f0000) returned 1 [0203.468] lstrcmpW (lpString1="Java", lpString2=".") returned 1 [0203.468] lstrcmpW (lpString1="Java", lpString2="..") returned 1 [0203.469] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x48) returned 0x225d88 [0203.469] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228310 [0203.469] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0203.469] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf8a30151, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xf8a30151, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office", cAlternateFileName="MICROS~2")) returned 1 [0203.469] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282a0 [0203.469] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d210 [0203.469] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239878 [0203.469] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d210 | out: hHeap=0x1f0000) returned 1 [0203.469] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282d8 | out: hHeap=0x1f0000) returned 1 [0203.469] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0203.469] lstrcmpW (lpString1="Microsoft Office", lpString2=".") returned 1 [0203.469] lstrcmpW (lpString1="Microsoft Office", lpString2="..") returned 1 [0203.469] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214dd0 [0203.469] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239a88 [0203.469] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225d88 | out: hHeap=0x1f0000) returned 1 [0203.469] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82e68d8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc03f299, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xfc03f299, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office 15", cAlternateFileName="MICROS~1")) returned 1 [0203.469] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0203.469] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d210 [0203.469] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239980 [0203.469] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d210 | out: hHeap=0x1f0000) returned 1 [0203.469] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239878 | out: hHeap=0x1f0000) returned 1 [0203.469] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0203.469] lstrcmpW (lpString1="Microsoft Office 15", lpString2=".") returned 1 [0203.470] lstrcmpW (lpString1="Microsoft Office 15", lpString2="..") returned 1 [0203.470] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0203.470] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239a30 [0203.470] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214dd0 | out: hHeap=0x1f0000) returned 1 [0203.470] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xe99e772e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfbfccb69, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xfbfccb69, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla Firefox", cAlternateFileName="MOZILL~1")) returned 1 [0203.470] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bd0 [0203.470] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0203.470] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239b38 [0203.471] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0203.471] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239980 | out: hHeap=0x1f0000) returned 1 [0203.471] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bd0 | out: hHeap=0x1f0000) returned 1 [0203.471] lstrcmpW (lpString1="Mozilla Firefox", lpString2=".") returned 1 [0203.471] lstrcmpW (lpString1="Mozilla Firefox", lpString2="..") returned 1 [0203.471] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239ae0 [0203.471] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x709c717f, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x709c717f, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x709c717f, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSBuild", cAlternateFileName="")) returned 1 [0203.471] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0203.471] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225fb8 [0203.471] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0203.471] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239b38 | out: hHeap=0x1f0000) returned 1 [0203.471] lstrcmpW (lpString1="MSBuild", lpString2=".") returned 1 [0203.471] lstrcmpW (lpString1="MSBuild", lpString2="..") returned 1 [0203.471] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd8) returned 0x20d888 [0203.471] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233d68 [0203.471] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0203.471] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x709ed3a7, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0xfc0b18a4, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xfc0b18a4, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reference Assemblies", cAlternateFileName="REFERE~1")) returned 1 [0203.471] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0203.471] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d210 [0203.471] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239980 [0203.471] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d210 | out: hHeap=0x1f0000) returned 1 [0203.472] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225fb8 | out: hHeap=0x1f0000) returned 1 [0203.472] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0203.472] lstrcmpW (lpString1="Reference Assemblies", lpString2=".") returned 1 [0203.472] lstrcmpW (lpString1="Reference Assemblies", lpString2="..") returned 1 [0203.472] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239718 [0203.472] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x59f2f4b4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xfbf5a454, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xfbf5a454, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rempl", cAlternateFileName="")) returned 1 [0203.472] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0203.472] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239980 | out: hHeap=0x1f0000) returned 1 [0203.472] lstrcmpW (lpString1="rempl", lpString2=".") returned 1 [0203.472] lstrcmpW (lpString1="rempl", lpString2="..") returned 1 [0203.472] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d210 [0203.472] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xd2709a20, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xfc066938, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xfc066938, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Uninstall Information", cAlternateFileName="UNINST~1")) returned 1 [0203.472] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d280 [0203.472] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2f0 [0203.472] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239b38 [0203.472] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0203.472] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0203.472] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d280 | out: hHeap=0x1f0000) returned 1 [0203.472] lstrcmpW (lpString1="Uninstall Information", lpString2=".") returned 1 [0203.472] lstrcmpW (lpString1="Uninstall Information", lpString2="..") returned 1 [0203.472] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x138) returned 0x22b130 [0203.472] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239400 [0203.472] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20d888 | out: hHeap=0x1f0000) returned 1 [0203.472] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x4c509d45, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa747f43e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x749f4454, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UNP", cAlternateFileName="")) returned 1 [0203.472] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0203.473] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239b38 | out: hHeap=0x1f0000) returned 1 [0203.473] lstrcmpW (lpString1="UNP", lpString2=".") returned 1 [0203.473] lstrcmpW (lpString1="UNP", lpString2="..") returned 1 [0203.473] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d280 [0203.473] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc066938, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xfc066938, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Defender", cAlternateFileName="WINDOW~1")) returned 1 [0203.473] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2f0 [0203.473] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1ff058 [0203.473] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239770 [0203.473] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1ff058 | out: hHeap=0x1f0000) returned 1 [0203.473] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0203.473] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0203.473] lstrcmpW (lpString1="Windows Defender", lpString2=".") returned 1 [0203.473] lstrcmpW (lpString1="Windows Defender", lpString2="..") returned 1 [0203.473] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239560 [0203.473] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xfbe9d08f, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xfbe9d08f, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Defender Advanced Threat Protection", cAlternateFileName="WIF4A9~1")) returned 1 [0203.473] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214dd0 [0203.473] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1feed0 [0203.473] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229be8 [0203.473] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1feed0 | out: hHeap=0x1f0000) returned 1 [0203.473] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239770 | out: hHeap=0x1f0000) returned 1 [0203.473] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214dd0 | out: hHeap=0x1f0000) returned 1 [0203.473] lstrcmpW (lpString1="Windows Defender Advanced Threat Protection", lpString2=".") returned 1 [0203.473] lstrcmpW (lpString1="Windows Defender Advanced Threat Protection", lpString2="..") returned 1 [0203.473] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229940 [0203.473] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa90b6918, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Mail", cAlternateFileName="WINDOW~2")) returned 1 [0203.473] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bd0 [0203.473] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1feed0 [0203.473] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225bf8 [0203.474] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1feed0 | out: hHeap=0x1f0000) returned 1 [0203.474] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229be8 | out: hHeap=0x1f0000) returned 1 [0203.474] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bd0 | out: hHeap=0x1f0000) returned 1 [0203.474] lstrcmpW (lpString1="Windows Mail", lpString2=".") returned 1 [0203.474] lstrcmpW (lpString1="Windows Mail", lpString2="..") returned 1 [0203.474] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c8) returned 0x24fa20 [0203.474] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233fa8 [0203.474] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b130 | out: hHeap=0x1f0000) returned 1 [0203.474] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e4faee, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xfbfa67b3, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xfbfa67b3, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media Player", cAlternateFileName="WI54FB~1")) returned 1 [0203.474] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1ff058 [0203.474] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1feed0 [0203.474] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239770 [0203.474] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1feed0 | out: hHeap=0x1f0000) returned 1 [0203.474] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225bf8 | out: hHeap=0x1f0000) returned 1 [0203.474] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1ff058 | out: hHeap=0x1f0000) returned 1 [0203.474] lstrcmpW (lpString1="Windows Media Player", lpString2=".") returned 1 [0203.474] lstrcmpW (lpString1="Windows Media Player", lpString2="..") returned 1 [0203.474] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2397c8 [0203.474] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfbfccb69, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xfbfccb69, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Multimedia Platform", cAlternateFileName="WINDOW~3")) returned 1 [0203.474] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233c90 [0203.474] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0203.474] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214dd0 [0203.474] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0203.474] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239770 | out: hHeap=0x1f0000) returned 1 [0203.474] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233c90 | out: hHeap=0x1f0000) returned 1 [0203.475] lstrcmpW (lpString1="Windows Multimedia Platform", lpString2=".") returned 1 [0203.475] lstrcmpW (lpString1="Windows Multimedia Platform", lpString2="..") returned 1 [0203.475] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214958 [0203.475] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xf8bf9d3e, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xf8bf9d3e, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows NT", cAlternateFileName="WINDOW~4")) returned 1 [0203.475] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c20 [0203.475] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1ff058 [0203.475] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x226328 [0203.475] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1ff058 | out: hHeap=0x1f0000) returned 1 [0203.475] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214dd0 | out: hHeap=0x1f0000) returned 1 [0203.475] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c20 | out: hHeap=0x1f0000) returned 1 [0203.475] lstrcmpW (lpString1="Windows NT", lpString2=".") returned 1 [0203.475] lstrcmpW (lpString1="Windows NT", lpString2="..") returned 1 [0203.475] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234278 [0203.475] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc08b6a0, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xfc08b6a0, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Photo Viewer", cAlternateFileName="WI8A19~1")) returned 1 [0203.475] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fefe8 [0203.475] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1feed0 [0203.475] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239b38 [0203.475] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1feed0 | out: hHeap=0x1f0000) returned 1 [0203.475] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226328 | out: hHeap=0x1f0000) returned 1 [0203.475] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fefe8 | out: hHeap=0x1f0000) returned 1 [0203.475] lstrcmpW (lpString1="Windows Photo Viewer", lpString2=".") returned 1 [0203.475] lstrcmpW (lpString1="Windows Photo Viewer", lpString2="..") returned 1 [0203.475] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2394b0 [0203.475] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfbfccb69, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xfbfccb69, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Portable Devices", cAlternateFileName="WIBFE5~1")) returned 1 [0203.475] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2342c0 [0203.476] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0203.476] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214f08 [0203.476] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0203.476] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239b38 | out: hHeap=0x1f0000) returned 1 [0203.476] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2342c0 | out: hHeap=0x1f0000) returned 1 [0203.476] lstrcmpW (lpString1="Windows Portable Devices", lpString2=".") returned 1 [0203.476] lstrcmpW (lpString1="Windows Portable Devices", lpString2="..") returned 1 [0203.476] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214f70 [0203.476] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfbe9d08f, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xfbe9d08f, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Security", cAlternateFileName="WIDB62~1")) returned 1 [0203.476] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0203.476] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1feed0 [0203.476] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239980 [0203.476] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1feed0 | out: hHeap=0x1f0000) returned 1 [0203.476] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f08 | out: hHeap=0x1f0000) returned 1 [0203.476] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0203.476] lstrcmpW (lpString1="Windows Security", lpString2=".") returned 1 [0203.476] lstrcmpW (lpString1="Windows Security", lpString2="..") returned 1 [0203.476] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2a0) returned 0x260ca0 [0203.476] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239770 [0203.476] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24fa20 | out: hHeap=0x1f0000) returned 1 [0203.476] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92aed1a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bb043c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="WI4223~1")) returned 1 [0203.477] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bd0 [0203.477] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1feed0 [0203.477] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239508 [0203.477] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1feed0 | out: hHeap=0x1f0000) returned 1 [0203.477] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239980 | out: hHeap=0x1f0000) returned 1 [0203.477] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bd0 | out: hHeap=0x1f0000) returned 1 [0203.477] lstrcmpW (lpString1="Windows Sidebar", lpString2=".") returned 1 [0203.477] lstrcmpW (lpString1="Windows Sidebar", lpString2="..") returned 1 [0203.477] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239878 [0203.477] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x8da88b6d, ftLastAccessTime.dwHighDateTime=0x1d3274e, ftLastWriteTime.dwLowDateTime=0x8da88b6d, ftLastWriteTime.dwHighDateTime=0x1d3274e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsApps", cAlternateFileName="WI7DB9~1")) returned 1 [0203.477] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c70 [0203.477] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1feed0 [0203.477] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225f18 [0203.477] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1feed0 | out: hHeap=0x1f0000) returned 1 [0203.477] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239508 | out: hHeap=0x1f0000) returned 1 [0203.477] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c70 | out: hHeap=0x1f0000) returned 1 [0203.477] lstrcmpW (lpString1="WindowsApps", lpString2=".") returned 1 [0203.477] lstrcmpW (lpString1="WindowsApps", lpString2="..") returned 1 [0203.477] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2342c0 [0203.478] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc0fdd55, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xfc0fdd55, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsPowerShell", cAlternateFileName="WID5B1~1")) returned 1 [0203.478] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1feed0 [0203.478] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0203.478] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239980 [0203.478] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0203.478] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225f18 | out: hHeap=0x1f0000) returned 1 [0203.478] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1feed0 | out: hHeap=0x1f0000) returned 1 [0203.478] lstrcmpW (lpString1="WindowsPowerShell", lpString2=".") returned 1 [0203.478] lstrcmpW (lpString1="WindowsPowerShell", lpString2="..") returned 1 [0203.478] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2395b8 [0203.478] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1cff0c8 | out: lpFindFileData=0x1cff0c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc0fdd55, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xfc0fdd55, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsPowerShell", cAlternateFileName="WID5B1~1")) returned 0 [0203.478] FindClose (in: hFindFile=0x24ea00 | out: hFindFile=0x24ea00) returned 1 [0203.478] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234308 [0203.478] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c20 [0203.478] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e828 [0203.479] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239b38 [0203.479] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\*", lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4aadd873, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e780 [0203.479] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233e88 [0203.479] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x214c98 [0203.479] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233e88 | out: hHeap=0x1f0000) returned 1 [0203.479] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239b38 | out: hHeap=0x1f0000) returned 1 [0203.479] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0203.479] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4aadd873, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0203.479] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233c90 [0203.479] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x214fd8 [0203.479] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233c90 | out: hHeap=0x1f0000) returned 1 [0203.479] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c98 | out: hHeap=0x1f0000) returned 1 [0203.479] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0203.479] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0203.479] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x4aab75fe, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0xa0417b85, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DESIGNER", cAlternateFileName="")) returned 1 [0203.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bd0 [0203.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234080 [0203.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x214a28 [0203.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234080 | out: hHeap=0x1f0000) returned 1 [0203.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214fd8 | out: hHeap=0x1f0000) returned 1 [0203.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bd0 | out: hHeap=0x1f0000) returned 1 [0203.480] lstrcmpW (lpString1="DESIGNER", lpString2=".") returned 1 [0203.480] lstrcmpW (lpString1="DESIGNER", lpString2="..") returned 1 [0203.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x205290 [0203.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239458 [0203.480] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa04663f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft shared", cAlternateFileName="MICROS~1")) returned 1 [0203.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1feed0 [0203.481] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234350 [0203.481] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214af8 [0203.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234350 | out: hHeap=0x1f0000) returned 1 [0203.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a28 | out: hHeap=0x1f0000) returned 1 [0203.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1feed0 | out: hHeap=0x1f0000) returned 1 [0203.481] lstrcmpW (lpString1="microsoft shared", lpString2=".") returned 1 [0203.481] lstrcmpW (lpString1="microsoft shared", lpString2="..") returned 1 [0203.481] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0203.481] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214dd0 [0203.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205290 | out: hHeap=0x1f0000) returned 1 [0203.481] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c11068, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0203.481] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bd0 [0203.481] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233c90 [0203.481] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x214fd8 [0203.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233c90 | out: hHeap=0x1f0000) returned 1 [0203.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214af8 | out: hHeap=0x1f0000) returned 1 [0203.482] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bd0 | out: hHeap=0x1f0000) returned 1 [0203.482] lstrcmpW (lpString1="Services", lpString2=".") returned 1 [0203.482] lstrcmpW (lpString1="Services", lpString2="..") returned 1 [0203.482] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x48) returned 0x225e78 [0203.482] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239610 [0203.482] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0203.482] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c5f95f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System", cAlternateFileName="")) returned 1 [0203.482] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233ff0 [0203.482] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x214a28 [0203.482] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233ff0 | out: hHeap=0x1f0000) returned 1 [0203.482] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214fd8 | out: hHeap=0x1f0000) returned 1 [0203.482] lstrcmpW (lpString1="System", lpString2=".") returned 1 [0203.482] lstrcmpW (lpString1="System", lpString2="..") returned 1 [0203.482] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214e38 [0203.482] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239b38 [0203.482] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225e78 | out: hHeap=0x1f0000) returned 1 [0203.482] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c5f95f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System", cAlternateFileName="")) returned 0 [0203.483] FindClose (in: hFindFile=0x24e780 | out: hFindFile=0x24e780) returned 1 [0203.483] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234350 [0203.483] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bd0 [0203.483] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22ee88 [0203.483] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214ea0 [0203.483] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\DESIGNER\\*", lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x4aab75fe, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0xa0417b85, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x225f5c, cFileName=".", cAlternateFileName="")) returned 0x24e7c0 [0203.483] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214fd8 [0203.483] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214ea0 | out: hHeap=0x1f0000) returned 1 [0203.483] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0203.484] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x4aab75fe, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0xa0417b85, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x225f5c, cFileName="..", cAlternateFileName="")) returned 1 [0203.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214ea0 [0203.484] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214fd8 | out: hHeap=0x1f0000) returned 1 [0203.484] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0203.484] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0203.484] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c8c3a00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4aadd873, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5c8c3a00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x3e70, dwReserved0=0x20002, dwReserved1=0x225f5c, cFileName="MSADDNDR.OLB", cAlternateFileName="")) returned 1 [0203.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0203.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214bc8 [0203.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220cf0 [0203.484] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214bc8 | out: hHeap=0x1f0000) returned 1 [0203.484] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214ea0 | out: hHeap=0x1f0000) returned 1 [0203.484] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0203.485] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB" (normalized: "c:\\program files\\common files\\designer\\msaddndr.olb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe658, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0203.486] GetFileType (hFile=0x210) returned 0x1 [0203.486] CloseHandle (hObject=0x210) returned 1 [0203.486] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a8b0 [0203.486] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB" (normalized: "c:\\program files\\common files\\designer\\msaddndr.olb"), fInfoLevelId=0x0, lpFileInformation=0x1cfe6ec | out: lpFileInformation=0x1cfe6ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c8c3a00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4aadd873, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5c8c3a00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x3e70)) returned 1 [0203.486] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a8b0 | out: hHeap=0x1f0000) returned 1 [0203.486] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ae50 [0203.486] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB" (normalized: "c:\\program files\\common files\\designer\\msaddndr.olb"), fInfoLevelId=0x0, lpFileInformation=0x1cfe6f4 | out: lpFileInformation=0x1cfe6f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c8c3a00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4aadd873, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5c8c3a00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x3e70)) returned 1 [0203.486] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ae50 | out: hHeap=0x1f0000) returned 1 [0203.487] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22aec8 [0203.487] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aec8 | out: hHeap=0x1f0000) returned 1 [0203.487] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c8c3a00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4aadd873, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5c8c3a00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x3e70, dwReserved0=0x20002, dwReserved1=0x225f5c, cFileName="MSADDNDR.OLB", cAlternateFileName="")) returned 0 [0203.487] FindClose (in: hFindFile=0x24e7c0 | out: hFindFile=0x24e7c0) returned 1 [0203.487] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0203.487] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ee88 | out: hHeap=0x1f0000) returned 1 [0203.487] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bd0 | out: hHeap=0x1f0000) returned 1 [0203.487] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234350 | out: hHeap=0x1f0000) returned 1 [0203.487] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2343e0 [0203.487] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bd0 [0203.487] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d6a0 [0203.487] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a838 [0203.487] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\*", lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa04663f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x225f5c, cFileName=".", cAlternateFileName="")) returned 0x24e900 [0203.488] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ace8 [0203.488] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a838 | out: hHeap=0x1f0000) returned 1 [0203.488] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0203.488] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa04663f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x225f5c, cFileName="..", cAlternateFileName="")) returned 1 [0203.488] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22aa18 [0203.488] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ace8 | out: hHeap=0x1f0000) returned 1 [0203.488] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0203.488] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0203.488] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbf6c42af, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x81028f76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x81028f76, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x225f5c, cFileName="ClickToRun", cAlternateFileName="CLICKT~1")) returned 1 [0203.488] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0203.488] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a8b0 [0203.488] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218558 [0203.488] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a8b0 | out: hHeap=0x1f0000) returned 1 [0203.488] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aa18 | out: hHeap=0x1f0000) returned 1 [0203.488] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0203.488] lstrcmpW (lpString1="ClickToRun", lpString2=".") returned 1 [0203.488] lstrcmpW (lpString1="ClickToRun", lpString2="..") returned 1 [0203.489] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x2052f0 [0203.489] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a1c0 [0203.489] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb3e1c92c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb3e1c92c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x225f5c, cFileName="ink", cAlternateFileName="")) returned 1 [0203.489] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ace8 [0203.489] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218558 | out: hHeap=0x1f0000) returned 1 [0203.489] lstrcmpW (lpString1="ink", lpString2=".") returned 1 [0203.489] lstrcmpW (lpString1="ink", lpString2="..") returned 1 [0203.489] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1feed0 [0203.489] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ad60 [0203.489] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2052f0 | out: hHeap=0x1f0000) returned 1 [0203.489] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa098a4c6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71143a45, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x225f5c, cFileName="MSInfo", cAlternateFileName="")) returned 1 [0203.489] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22aa18 [0203.489] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ace8 | out: hHeap=0x1f0000) returned 1 [0203.489] lstrcmpW (lpString1="MSInfo", lpString2=".") returned 1 [0203.489] lstrcmpW (lpString1="MSInfo", lpString2="..") returned 1 [0203.489] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x48) returned 0x2260a8 [0203.489] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22add8 [0203.489] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1feed0 | out: hHeap=0x1f0000) returned 1 [0203.489] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd9f60362, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd9f60362, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x225f5c, cFileName="OFFICE16", cAlternateFileName="")) returned 1 [0203.489] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c48 [0203.489] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ae50 [0203.489] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219058 [0203.490] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ae50 | out: hHeap=0x1f0000) returned 1 [0203.490] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aa18 | out: hHeap=0x1f0000) returned 1 [0203.490] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0203.490] lstrcmpW (lpString1="OFFICE16", lpString2=".") returned 1 [0203.490] lstrcmpW (lpString1="OFFICE16", lpString2="..") returned 1 [0203.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214ea0 [0203.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229e90 [0203.490] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2260a8 | out: hHeap=0x1f0000) returned 1 [0203.490] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd99442a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd99442a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x225f5c, cFileName="OfficeSoftwareProtectionPlatform", cAlternateFileName="OFFICE~1")) returned 1 [0203.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239668 [0203.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ace8 [0203.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261668 [0203.490] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ace8 | out: hHeap=0x1f0000) returned 1 [0203.490] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219058 | out: hHeap=0x1f0000) returned 1 [0203.490] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239668 | out: hHeap=0x1f0000) returned 1 [0203.490] lstrcmpW (lpString1="OfficeSoftwareProtectionPlatform", lpString2=".") returned 1 [0203.490] lstrcmpW (lpString1="OfficeSoftwareProtectionPlatform", lpString2="..") returned 1 [0203.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0203.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261218 [0203.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214ea0 | out: hHeap=0x1f0000) returned 1 [0203.491] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4accd6e1, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4accd6e1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x225f5c, cFileName="Source Engine", cAlternateFileName="SOURCE~1")) returned 1 [0203.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0203.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ab80 [0203.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218fa8 [0203.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab80 | out: hHeap=0x1f0000) returned 1 [0203.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261668 | out: hHeap=0x1f0000) returned 1 [0203.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0203.491] lstrcmpW (lpString1="Source Engine", lpString2=".") returned 1 [0203.491] lstrcmpW (lpString1="Source Engine", lpString2="..") returned 1 [0203.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a138 [0203.491] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b5538f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x225f5c, cFileName="Stationery", cAlternateFileName="STATIO~1")) returned 1 [0203.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c48 [0203.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ae50 [0203.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219318 [0203.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ae50 | out: hHeap=0x1f0000) returned 1 [0203.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218fa8 | out: hHeap=0x1f0000) returned 1 [0203.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0203.491] lstrcmpW (lpString1="Stationery", lpString2=".") returned 1 [0203.491] lstrcmpW (lpString1="Stationery", lpString2="..") returned 1 [0203.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd8) returned 0x20d888 [0203.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a468 [0203.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0203.492] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b56882, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x225f5c, cFileName="TextConv", cAlternateFileName="")) returned 1 [0203.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0203.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ace8 [0203.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218a28 [0203.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ace8 | out: hHeap=0x1f0000) returned 1 [0203.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219318 | out: hHeap=0x1f0000) returned 1 [0203.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0203.492] lstrcmpW (lpString1="TextConv", lpString2=".") returned 1 [0203.492] lstrcmpW (lpString1="TextConv", lpString2="..") returned 1 [0203.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229c70 [0203.492] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b57d42, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x225f5c, cFileName="Triedit", cAlternateFileName="")) returned 1 [0203.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22aa90 [0203.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218a28 | out: hHeap=0x1f0000) returned 1 [0203.492] lstrcmpW (lpString1="Triedit", lpString2=".") returned 1 [0203.492] lstrcmpW (lpString1="Triedit", lpString2="..") returned 1 [0203.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22aec8 [0203.492] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xbcd0fab8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xa0b594b8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2ce22546, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x225f5c, cFileName="VC", cAlternateFileName="")) returned 1 [0203.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ae50 [0203.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aa90 | out: hHeap=0x1f0000) returned 1 [0203.492] lstrcmpW (lpString1="VC", lpString2=".") returned 1 [0203.493] lstrcmpW (lpString1="VC", lpString2="..") returned 1 [0203.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x138) returned 0x22b130 [0203.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a8b0 [0203.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20d888 | out: hHeap=0x1f0000) returned 1 [0203.493] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b59a78, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x225f5c, cFileName="VGX", cAlternateFileName="")) returned 1 [0203.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ab08 [0203.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ae50 | out: hHeap=0x1f0000) returned 1 [0203.493] lstrcmpW (lpString1="VGX", lpString2=".") returned 1 [0203.493] lstrcmpW (lpString1="VGX", lpString2="..") returned 1 [0203.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ac70 [0203.493] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49ecb94e, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ae972f5, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x225f5c, cFileName="VSTO", cAlternateFileName="")) returned 1 [0203.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ae50 [0203.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab08 | out: hHeap=0x1f0000) returned 1 [0203.493] lstrcmpW (lpString1="VSTO", lpString2=".") returned 1 [0203.493] lstrcmpW (lpString1="VSTO", lpString2="..") returned 1 [0203.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22aa18 [0203.493] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49ecb94e, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ae972f5, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x225f5c, cFileName="VSTO", cAlternateFileName="")) returned 0 [0203.493] FindClose (in: hFindFile=0x24e900 | out: hFindFile=0x24e900) returned 1 [0203.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234080 [0203.494] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0203.494] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22eb58 [0203.494] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2299c8 [0203.494] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\*", lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbf6c42af, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x81028f76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x81028f76, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName=".", cAlternateFileName="")) returned 0x24ebc0 [0203.494] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229e08 [0203.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2299c8 | out: hHeap=0x1f0000) returned 1 [0203.494] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0203.494] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbf6c42af, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x81028f76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x81028f76, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="..", cAlternateFileName="")) returned 1 [0203.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a248 [0203.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229e08 | out: hHeap=0x1f0000) returned 1 [0203.759] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0203.759] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0203.759] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x809e6bf5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x809e6bf5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="api-ms-win-core-file-l1-2-0.dll", cAlternateFileName="API-MS~1.DLL")) returned 1 [0203.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233c90 [0203.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229cf8 [0203.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f5d8 [0203.760] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229cf8 | out: hHeap=0x1f0000) returned 1 [0203.760] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a248 | out: hHeap=0x1f0000) returned 1 [0203.760] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233c90 | out: hHeap=0x1f0000) returned 1 [0203.761] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l1-2-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0203.761] GetFileType (hFile=0x204) returned 0x1 [0203.762] CloseHandle (hObject=0x204) returned 1 [0203.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x2300c8 [0203.762] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l1-2-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x809e6bf5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x809e6bf5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x48c0)) returned 1 [0203.763] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0203.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x230320 [0203.763] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l1-2-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x809e6bf5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x809e6bf5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x48c0)) returned 1 [0203.763] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0203.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x230258 [0203.763] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0203.763] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x809e6bf5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x809e6bf5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="api-ms-win-core-file-l2-1-0.dll", cAlternateFileName="API-MS~2.DLL")) returned 1 [0203.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234350 [0203.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229b60 [0203.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22ff38 [0203.763] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229b60 | out: hHeap=0x1f0000) returned 1 [0203.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0203.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234350 | out: hHeap=0x1f0000) returned 1 [0203.764] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l2-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l2-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0203.765] GetFileType (hFile=0x204) returned 0x1 [0203.766] CloseHandle (hObject=0x204) returned 1 [0203.766] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f510 [0203.766] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l2-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l2-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x809e6bf5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x809e6bf5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x48c0)) returned 1 [0203.766] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0203.766] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fb50 [0203.766] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l2-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l2-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x809e6bf5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x809e6bf5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x48c0)) returned 1 [0203.767] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0203.767] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fc18 [0203.767] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0203.767] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x52c0, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="api-ms-win-core-localization-l1-2-0.dll", cAlternateFileName="API-MS~3.DLL")) returned 1 [0203.767] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239668 [0203.767] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a3e0 [0203.768] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x2008a0 [0203.768] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a3e0 | out: hHeap=0x1f0000) returned 1 [0203.768] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0203.768] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239668 | out: hHeap=0x1f0000) returned 1 [0203.768] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-localization-l1-2-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0203.769] GetFileType (hFile=0x204) returned 0x1 [0203.769] CloseHandle (hObject=0x204) returned 1 [0203.770] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x200978 [0203.770] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-localization-l1-2-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x52c0)) returned 1 [0203.770] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x200978 | out: hHeap=0x1f0000) returned 1 [0203.770] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x200978 [0203.770] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-localization-l1-2-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x52c0)) returned 1 [0203.770] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x200978 | out: hHeap=0x1f0000) returned 1 [0203.770] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x200978 [0203.770] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x200978 | out: hHeap=0x1f0000) returned 1 [0203.770] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="api-ms-win-core-processthreads-l1-1-1.dll", cAlternateFileName="API-MS~4.DLL")) returned 1 [0203.771] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a90 [0203.771] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a688 [0203.771] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x200978 [0203.771] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a688 | out: hHeap=0x1f0000) returned 1 [0203.771] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2008a0 | out: hHeap=0x1f0000) returned 1 [0203.771] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a90 | out: hHeap=0x1f0000) returned 1 [0203.772] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-processthreads-l1-1-1.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0203.772] GetFileType (hFile=0x204) returned 0x1 [0203.773] CloseHandle (hObject=0x204) returned 1 [0203.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x2008a0 [0203.773] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-processthreads-l1-1-1.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0)) returned 1 [0203.773] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2008a0 | out: hHeap=0x1f0000) returned 1 [0203.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x2008a0 [0203.773] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-processthreads-l1-1-1.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0)) returned 1 [0203.774] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2008a0 | out: hHeap=0x1f0000) returned 1 [0203.774] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x2008a0 [0203.774] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2008a0 | out: hHeap=0x1f0000) returned 1 [0203.774] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="api-ms-win-core-synch-l1-2-0.dll", cAlternateFileName="APF10C~1.DLL")) returned 1 [0203.774] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239928 [0203.774] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a248 [0203.774] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x230258 [0203.775] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a248 | out: hHeap=0x1f0000) returned 1 [0203.775] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x200978 | out: hHeap=0x1f0000) returned 1 [0203.775] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239928 | out: hHeap=0x1f0000) returned 1 [0203.775] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-synch-l1-2-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0203.776] GetFileType (hFile=0x204) returned 0x1 [0203.776] CloseHandle (hObject=0x204) returned 1 [0203.777] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f5d8 [0203.777] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-synch-l1-2-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0)) returned 1 [0203.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0203.777] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fce0 [0203.777] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-synch-l1-2-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0)) returned 1 [0203.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0203.777] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f9c0 [0203.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0203.777] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="api-ms-win-core-timezone-l1-1-0.dll", cAlternateFileName="AP7902~1.DLL")) returned 1 [0203.778] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2399d8 [0203.778] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a2d0 [0203.778] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fce0 [0203.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a2d0 | out: hHeap=0x1f0000) returned 1 [0203.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0203.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2399d8 | out: hHeap=0x1f0000) returned 1 [0203.779] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-timezone-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-timezone-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0203.780] GetFileType (hFile=0x204) returned 0x1 [0203.780] CloseHandle (hObject=0x204) returned 1 [0203.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f830 [0203.780] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-timezone-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-timezone-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x48c0)) returned 1 [0203.781] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0203.781] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fb50 [0203.781] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-timezone-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-timezone-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x48c0)) returned 1 [0203.781] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0203.781] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f5d8 [0203.781] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0203.781] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x2d60, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="api-ms-win-core-xstate-l2-1-0.dll", cAlternateFileName="APA632~1.DLL")) returned 1 [0203.781] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239508 [0203.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229f18 [0203.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fe70 [0203.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229f18 | out: hHeap=0x1f0000) returned 1 [0203.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0203.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239508 | out: hHeap=0x1f0000) returned 1 [0203.783] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-xstate-l2-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-xstate-l2-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0203.783] GetFileType (hFile=0x204) returned 0x1 [0203.783] CloseHandle (hObject=0x204) returned 1 [0203.784] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22ff38 [0203.784] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-xstate-l2-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-xstate-l2-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x2d60)) returned 1 [0203.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0203.784] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22ff38 [0203.784] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-xstate-l2-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-xstate-l2-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x2d60)) returned 1 [0203.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0203.784] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f830 [0203.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0203.785] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="api-ms-win-crt-conio-l1-1-0.dll", cAlternateFileName="AP5C76~1.DLL")) returned 1 [0203.785] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233f60 [0203.785] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a2d0 [0203.785] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f8f8 [0203.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a2d0 | out: hHeap=0x1f0000) returned 1 [0203.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0203.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233f60 | out: hHeap=0x1f0000) returned 1 [0203.786] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-conio-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-conio-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0203.786] GetFileType (hFile=0x204) returned 0x1 [0203.787] CloseHandle (hObject=0x204) returned 1 [0203.787] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f6a0 [0203.787] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-conio-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-conio-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0)) returned 1 [0203.787] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0203.787] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fe70 [0203.787] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-conio-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-conio-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0)) returned 1 [0203.787] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0203.788] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x230258 [0203.788] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0203.788] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x58c0, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="api-ms-win-crt-convert-l1-1-0.dll", cAlternateFileName="APFD9C~1.DLL")) returned 1 [0203.788] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239928 [0203.788] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a2d0 [0203.788] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fe70 [0203.788] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a2d0 | out: hHeap=0x1f0000) returned 1 [0203.788] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0203.788] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239928 | out: hHeap=0x1f0000) returned 1 [0203.789] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-convert-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0203.789] GetFileType (hFile=0x204) returned 0x1 [0203.790] CloseHandle (hObject=0x204) returned 1 [0203.790] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x230258 [0203.790] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-convert-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x58c0)) returned 1 [0203.790] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0203.790] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fda8 [0203.790] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-convert-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x58c0)) returned 1 [0203.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0203.791] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x230258 [0203.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0203.791] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="api-ms-win-crt-environment-l1-1-0.dll", cAlternateFileName="APC00F~1.DLL")) returned 1 [0203.791] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239928 [0203.791] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a028 [0203.791] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x2008a0 [0203.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a028 | out: hHeap=0x1f0000) returned 1 [0203.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0203.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239928 | out: hHeap=0x1f0000) returned 1 [0203.792] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-environment-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0204.083] GetFileType (hFile=0x204) returned 0x1 [0204.084] CloseHandle (hObject=0x204) returned 1 [0204.084] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x200978 [0204.084] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-environment-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0)) returned 1 [0204.084] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x200978 | out: hHeap=0x1f0000) returned 1 [0204.084] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x200978 [0204.084] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-environment-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0)) returned 1 [0204.084] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x200978 | out: hHeap=0x1f0000) returned 1 [0204.084] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x200978 [0204.084] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x200978 | out: hHeap=0x1f0000) returned 1 [0204.084] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x50c0, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="api-ms-win-crt-filesystem-l1-1-0.dll", cAlternateFileName="AP0479~1.DLL")) returned 1 [0204.084] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239928 [0204.084] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229d80 [0204.085] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f510 [0204.085] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229d80 | out: hHeap=0x1f0000) returned 1 [0204.085] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2008a0 | out: hHeap=0x1f0000) returned 1 [0204.085] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239928 | out: hHeap=0x1f0000) returned 1 [0204.085] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-filesystem-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-filesystem-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0204.085] GetFileType (hFile=0x204) returned 0x1 [0204.085] CloseHandle (hObject=0x204) returned 1 [0204.085] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f8f8 [0204.086] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-filesystem-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-filesystem-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x50c0)) returned 1 [0204.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0204.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f9c0 [0204.086] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-filesystem-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-filesystem-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x50c0)) returned 1 [0204.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0204.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x230190 [0204.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0204.086] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="api-ms-win-crt-heap-l1-1-0.dll", cAlternateFileName="AP23C9~1.DLL")) returned 1 [0204.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234428 [0204.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a0b0 [0204.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fc18 [0204.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a0b0 | out: hHeap=0x1f0000) returned 1 [0204.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0204.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234428 | out: hHeap=0x1f0000) returned 1 [0204.087] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-heap-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-heap-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0204.087] GetFileType (hFile=0x204) returned 0x1 [0204.087] CloseHandle (hObject=0x204) returned 1 [0204.087] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fb50 [0204.087] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-heap-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-heap-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0)) returned 1 [0204.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0204.087] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f768 [0204.087] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-heap-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-heap-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0)) returned 1 [0204.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0204.087] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x230190 [0204.088] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0204.088] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="api-ms-win-crt-locale-l1-1-0.dll", cAlternateFileName="APCB40~1.DLL")) returned 1 [0204.088] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239928 [0204.088] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2299c8 [0204.088] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x2300c8 [0204.088] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2299c8 | out: hHeap=0x1f0000) returned 1 [0204.088] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0204.088] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239928 | out: hHeap=0x1f0000) returned 1 [0204.088] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-locale-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-locale-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0204.088] GetFileType (hFile=0x204) returned 0x1 [0204.089] CloseHandle (hObject=0x204) returned 1 [0204.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f5d8 [0204.089] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-locale-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-locale-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0)) returned 1 [0204.089] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0204.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fc18 [0204.089] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-locale-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-locale-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0)) returned 1 [0204.089] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0204.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fb50 [0204.089] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0204.089] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x6cc0, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="api-ms-win-crt-math-l1-1-0.dll", cAlternateFileName="APAE51~1.DLL")) returned 1 [0204.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233f60 [0204.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2299c8 [0204.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f768 [0204.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2299c8 | out: hHeap=0x1f0000) returned 1 [0204.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0204.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233f60 | out: hHeap=0x1f0000) returned 1 [0204.090] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-math-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-math-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0204.091] GetFileType (hFile=0x204) returned 0x1 [0204.091] CloseHandle (hObject=0x204) returned 1 [0204.091] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x2303e8 [0204.091] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-math-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-math-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x6cc0)) returned 1 [0204.091] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0204.091] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fa88 [0204.091] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-math-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-math-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x6cc0)) returned 1 [0204.091] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0204.091] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x230000 [0204.092] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0204.092] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x68c0, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="api-ms-win-crt-multibyte-l1-1-0.dll", cAlternateFileName="AP972F~1.DLL")) returned 1 [0204.092] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239928 [0204.092] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a688 [0204.092] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x2303e8 [0204.092] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a688 | out: hHeap=0x1f0000) returned 1 [0204.092] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0204.092] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239928 | out: hHeap=0x1f0000) returned 1 [0204.092] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-multibyte-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-multibyte-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0204.092] GetFileType (hFile=0x204) returned 0x1 [0204.092] CloseHandle (hObject=0x204) returned 1 [0204.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f510 [0204.093] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-multibyte-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-multibyte-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x68c0)) returned 1 [0204.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0204.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x230000 [0204.093] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-multibyte-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-multibyte-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x68c0)) returned 1 [0204.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0204.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f6a0 [0204.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0204.093] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x114c0, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="api-ms-win-crt-private-l1-1-0.dll", cAlternateFileName="AP7D9E~1.DLL")) returned 1 [0204.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2399d8 [0204.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a2d0 [0204.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f768 [0204.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a2d0 | out: hHeap=0x1f0000) returned 1 [0204.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0204.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2399d8 | out: hHeap=0x1f0000) returned 1 [0204.094] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-private-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-private-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0204.094] GetFileType (hFile=0x204) returned 0x1 [0204.094] CloseHandle (hObject=0x204) returned 1 [0204.094] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x230000 [0204.094] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-private-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-private-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x114c0)) returned 1 [0204.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0204.095] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f6a0 [0204.095] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-private-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-private-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x114c0)) returned 1 [0204.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0204.095] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f6a0 [0204.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0204.095] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="api-ms-win-crt-process-l1-1-0.dll", cAlternateFileName="APFCAD~1.DLL")) returned 1 [0204.095] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239928 [0204.095] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a710 [0204.095] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fce0 [0204.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a710 | out: hHeap=0x1f0000) returned 1 [0204.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0204.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239928 | out: hHeap=0x1f0000) returned 1 [0204.096] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-process-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-process-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0204.096] GetFileType (hFile=0x204) returned 0x1 [0204.096] CloseHandle (hObject=0x204) returned 1 [0204.097] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x2300c8 [0204.097] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-process-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-process-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0)) returned 1 [0204.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0204.097] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x2303e8 [0204.097] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-process-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-process-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0)) returned 1 [0204.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0204.097] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f768 [0204.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0204.097] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x5ac0, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="api-ms-win-crt-runtime-l1-1-0.dll", cAlternateFileName="AP8F34~1.DLL")) returned 1 [0204.097] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239508 [0204.097] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a578 [0204.098] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fb50 [0204.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a578 | out: hHeap=0x1f0000) returned 1 [0204.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0204.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239508 | out: hHeap=0x1f0000) returned 1 [0204.098] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-runtime-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-runtime-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0204.099] GetFileType (hFile=0x204) returned 0x1 [0204.099] CloseHandle (hObject=0x204) returned 1 [0204.100] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fc18 [0204.100] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-runtime-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-runtime-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x5ac0)) returned 1 [0204.100] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0204.100] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f9c0 [0204.100] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-runtime-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-runtime-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x5ac0)) returned 1 [0204.100] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0204.100] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fc18 [0204.100] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0204.100] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x60c0, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="api-ms-win-crt-stdio-l1-1-0.dll", cAlternateFileName="APD1B7~1.DLL")) returned 1 [0204.100] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233c90 [0204.100] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a3e0 [0204.100] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f768 [0204.100] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a3e0 | out: hHeap=0x1f0000) returned 1 [0204.101] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0204.101] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233c90 | out: hHeap=0x1f0000) returned 1 [0204.101] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-stdio-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-stdio-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0204.101] GetFileType (hFile=0x204) returned 0x1 [0204.101] CloseHandle (hObject=0x204) returned 1 [0204.102] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f510 [0204.102] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-stdio-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-stdio-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x60c0)) returned 1 [0204.102] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0204.102] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f510 [0204.102] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-stdio-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-stdio-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x60c0)) returned 1 [0204.102] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0204.102] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x230000 [0204.102] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0204.102] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x60c0, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="api-ms-win-crt-string-l1-1-0.dll", cAlternateFileName="APBF0F~1.DLL")) returned 1 [0204.103] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239668 [0204.103] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229b60 [0204.103] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fc18 [0204.103] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229b60 | out: hHeap=0x1f0000) returned 1 [0204.103] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0204.103] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239668 | out: hHeap=0x1f0000) returned 1 [0204.103] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-string-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-string-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0204.104] GetFileType (hFile=0x204) returned 0x1 [0204.104] CloseHandle (hObject=0x204) returned 1 [0204.104] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f5d8 [0204.104] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-string-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-string-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x60c0)) returned 1 [0204.104] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0204.104] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fa88 [0204.104] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-string-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-string-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x60c0)) returned 1 [0204.104] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0204.105] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fb50 [0204.105] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0204.105] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x52c0, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="api-ms-win-crt-time-l1-1-0.dll", cAlternateFileName="AP5E4C~1.DLL")) returned 1 [0204.105] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233bb8 [0204.105] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229fa0 [0204.105] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x230000 [0204.105] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229fa0 | out: hHeap=0x1f0000) returned 1 [0204.105] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0204.105] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233bb8 | out: hHeap=0x1f0000) returned 1 [0204.106] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-time-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-time-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0204.106] GetFileType (hFile=0x204) returned 0x1 [0204.106] CloseHandle (hObject=0x204) returned 1 [0204.111] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x2300c8 [0204.111] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-time-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-time-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x52c0)) returned 1 [0204.111] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0204.111] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f9c0 [0204.111] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-time-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-time-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x52c0)) returned 1 [0204.111] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0204.112] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f8f8 [0204.112] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0204.112] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="api-ms-win-crt-utility-l1-1-0.dll", cAlternateFileName="AP80F4~1.DLL")) returned 1 [0204.112] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239508 [0204.112] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a688 [0204.112] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fc18 [0204.112] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a688 | out: hHeap=0x1f0000) returned 1 [0204.112] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0204.112] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239508 | out: hHeap=0x1f0000) returned 1 [0204.113] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-utility-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-utility-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0204.113] GetFileType (hFile=0x204) returned 0x1 [0204.114] CloseHandle (hObject=0x204) returned 1 [0204.114] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f768 [0204.114] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-utility-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-utility-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0)) returned 1 [0204.114] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0204.114] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fce0 [0204.114] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-utility-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-utility-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0)) returned 1 [0204.114] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0204.114] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fe70 [0204.115] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0204.115] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb979f700, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x27c40, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="ApiClient.dll", cAlternateFileName="APICLI~1.DLL")) returned 1 [0204.115] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c48 [0204.115] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a248 [0204.115] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0204.115] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a248 | out: hHeap=0x1f0000) returned 1 [0204.115] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0204.115] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0204.116] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ApiClient.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\apiclient.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0204.116] GetLastError () returned 0x20 [0204.116] GetLastError () returned 0x20 [0204.116] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9bc01200, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0xa02d8, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="AppVCatalog.dll", cAlternateFileName="APPVCA~1.DLL")) returned 1 [0204.116] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b30 [0204.116] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2299c8 [0204.116] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0204.116] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2299c8 | out: hHeap=0x1f0000) returned 1 [0204.116] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0204.117] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b30 | out: hHeap=0x1f0000) returned 1 [0204.117] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVCatalog.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvcatalog.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0204.117] GetLastError () returned 0x20 [0204.117] GetLastError () returned 0x20 [0204.117] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x1f5ad8, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="appvcleaner.exe", cAlternateFileName="APPVCL~1.EXE")) returned 1 [0204.118] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b30 [0204.118] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a248 [0204.118] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0204.118] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a248 | out: hHeap=0x1f0000) returned 1 [0204.118] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0204.118] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b30 | out: hHeap=0x1f0000) returned 1 [0204.118] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\appvcleaner.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvcleaner.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0204.119] GetFileType (hFile=0x204) returned 0x1 [0204.119] CloseHandle (hObject=0x204) returned 1 [0204.119] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a620 [0204.119] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\appvcleaner.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvcleaner.exe"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x1f5ad8)) returned 1 [0204.119] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a620 | out: hHeap=0x1f0000) returned 1 [0204.120] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219c48 [0204.120] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\appvcleaner.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvcleaner.exe"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x1f5ad8)) returned 1 [0204.120] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219c48 | out: hHeap=0x1f0000) returned 1 [0204.120] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a620 [0204.120] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a620 | out: hHeap=0x1f0000) returned 1 [0204.120] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a330a6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a330a6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x4b0d8, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="AppVFileSystemMetadata.dll", cAlternateFileName="APPVFI~1.DLL")) returned 1 [0204.120] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2341a0 [0204.120] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229f18 [0204.121] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0204.121] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229f18 | out: hHeap=0x1f0000) returned 1 [0204.121] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0204.121] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2341a0 | out: hHeap=0x1f0000) returned 1 [0204.121] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVFileSystemMetadata.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvfilesystemmetadata.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0204.121] GetLastError () returned 0x20 [0204.121] GetLastError () returned 0x20 [0204.121] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a330a6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a330a6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x2052d8, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="AppVIntegration.dll", cAlternateFileName="APPVIN~1.DLL")) returned 1 [0204.122] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1ff058 [0204.122] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a248 [0204.122] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0204.122] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a248 | out: hHeap=0x1f0000) returned 1 [0204.122] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0204.122] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1ff058 | out: hHeap=0x1f0000) returned 1 [0204.122] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIntegration.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvintegration.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0204.123] GetLastError () returned 0x20 [0204.123] GetLastError () returned 0x20 [0204.123] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a59305, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a59305, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x726d8, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="AppVIsvApi.dll", cAlternateFileName="APPVIS~1.DLL")) returned 1 [0204.123] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c48 [0204.123] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a3e0 [0204.123] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0204.123] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a3e0 | out: hHeap=0x1f0000) returned 1 [0204.123] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0204.123] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0204.124] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvApi.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvapi.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0204.124] GetLastError () returned 0x20 [0204.124] GetLastError () returned 0x20 [0204.124] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a7f55d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a7f55d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe1b7300, ftLastWriteTime.dwHighDateTime=0x1d0d7a5, nFileSizeHigh=0x0, nFileSizeLow=0x60ea0, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="AppvIsvStream32.dll", cAlternateFileName="APPVIS~2.DLL")) returned 1 [0204.124] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1ff058 [0204.124] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a248 [0204.124] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0204.124] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a248 | out: hHeap=0x1f0000) returned 1 [0204.124] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0204.124] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1ff058 | out: hHeap=0x1f0000) returned 1 [0204.125] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream32.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0204.125] GetFileType (hFile=0x204) returned 0x1 [0204.125] CloseHandle (hObject=0x204) returned 1 [0204.125] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a188 [0204.126] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream32.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a7f55d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a7f55d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe1b7300, ftLastWriteTime.dwHighDateTime=0x1d0d7a5, nFileSizeHigh=0x0, nFileSizeLow=0x60ea0)) returned 1 [0204.126] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a188 | out: hHeap=0x1f0000) returned 1 [0204.126] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a380 [0204.126] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream32.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a7f55d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a7f55d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe1b7300, ftLastWriteTime.dwHighDateTime=0x1d0d7a5, nFileSizeHigh=0x0, nFileSizeLow=0x60ea0)) returned 1 [0204.126] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a380 | out: hHeap=0x1f0000) returned 1 [0204.424] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a578 [0204.424] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a578 | out: hHeap=0x1f0000) returned 1 [0204.424] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a7f55d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a7f55d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb5e67000, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x73aa0, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="AppvIsvStream64.dll", cAlternateFileName="APPVIS~3.DLL")) returned 1 [0204.424] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228230 [0204.424] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a3e0 [0204.424] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0204.424] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a3e0 | out: hHeap=0x1f0000) returned 1 [0204.424] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0204.424] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228230 | out: hHeap=0x1f0000) returned 1 [0204.424] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream64.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0204.425] GetFileType (hFile=0x210) returned 0x1 [0204.425] CloseHandle (hObject=0x210) returned 1 [0204.425] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a8c0 [0204.425] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream64.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a7f55d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a7f55d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb5e67000, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x73aa0)) returned 1 [0204.425] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a8c0 | out: hHeap=0x1f0000) returned 1 [0204.425] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a188 [0204.425] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream64.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a7f55d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a7f55d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb5e67000, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x73aa0)) returned 1 [0204.425] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a188 | out: hHeap=0x1f0000) returned 1 [0204.425] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a188 [0204.426] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a188 | out: hHeap=0x1f0000) returned 1 [0204.426] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a7f55d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a7f55d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x336d8, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="AppVIsvStreamingManager.dll", cAlternateFileName="APPVIS~4.DLL")) returned 1 [0204.426] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234428 [0204.426] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a4f0 [0204.426] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0204.426] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a4f0 | out: hHeap=0x1f0000) returned 1 [0204.426] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0204.426] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234428 | out: hHeap=0x1f0000) returned 1 [0204.426] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvStreamingManager.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstreamingmanager.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0204.426] GetLastError () returned 0x20 [0204.426] GetLastError () returned 0x20 [0204.427] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80aa57b9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80aa57b9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x1566d8, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="AppVIsvSubsystemController.dll", cAlternateFileName="AP213A~1.DLL")) returned 1 [0204.427] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233f60 [0204.427] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a248 [0204.427] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x2300c8 [0204.427] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a248 | out: hHeap=0x1f0000) returned 1 [0204.427] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0204.427] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233f60 | out: hHeap=0x1f0000) returned 1 [0204.427] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvSubsystemController.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystemcontroller.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0204.428] GetLastError () returned 0x20 [0204.428] GetLastError () returned 0x20 [0204.428] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80aa57b9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80aa57b9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x18d60800, ftLastWriteTime.dwHighDateTime=0x1d0d7a5, nFileSizeHigh=0x0, nFileSizeLow=0x1ae0a8, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="AppvIsvSubsystems32.dll", cAlternateFileName="AP3342~1.DLL")) returned 1 [0204.428] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228150 [0204.428] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a028 [0204.428] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0204.428] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a028 | out: hHeap=0x1f0000) returned 1 [0204.428] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0204.428] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228150 | out: hHeap=0x1f0000) returned 1 [0204.428] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems32.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0204.428] GetFileType (hFile=0x210) returned 0x1 [0204.429] CloseHandle (hObject=0x210) returned 1 [0204.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261668 [0204.429] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems32.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80aa57b9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80aa57b9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x18d60800, ftLastWriteTime.dwHighDateTime=0x1d0d7a5, nFileSizeHigh=0x0, nFileSizeLow=0x1ae0a8)) returned 1 [0204.429] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261668 | out: hHeap=0x1f0000) returned 1 [0204.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2612d0 [0204.429] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems32.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80aa57b9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80aa57b9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x18d60800, ftLastWriteTime.dwHighDateTime=0x1d0d7a5, nFileSizeHigh=0x0, nFileSizeLow=0x1ae0a8)) returned 1 [0204.429] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2612d0 | out: hHeap=0x1f0000) returned 1 [0204.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261440 [0204.429] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261440 | out: hHeap=0x1f0000) returned 1 [0204.429] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80acba0b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80acba0b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbbdc5100, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x22e0a8, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="AppvIsvSubsystems64.dll", cAlternateFileName="AP4400~1.DLL")) returned 1 [0204.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0204.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229cf8 [0204.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0204.429] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229cf8 | out: hHeap=0x1f0000) returned 1 [0204.430] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0204.430] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0204.430] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems64.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0204.430] GetFileType (hFile=0x210) returned 0x1 [0204.430] CloseHandle (hObject=0x210) returned 1 [0204.431] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2614f8 [0204.431] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems64.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80acba0b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80acba0b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbbdc5100, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x22e0a8)) returned 1 [0204.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2614f8 | out: hHeap=0x1f0000) returned 1 [0204.431] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261668 [0204.431] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems64.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80acba0b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80acba0b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbbdc5100, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x22e0a8)) returned 1 [0204.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261668 | out: hHeap=0x1f0000) returned 1 [0204.431] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2615b0 [0204.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2615b0 | out: hHeap=0x1f0000) returned 1 [0204.431] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80af1c6a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80af1c6a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x8a8d8, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="AppVIsvVirtualization.dll", cAlternateFileName="AP485B~1.DLL")) returned 1 [0204.431] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234398 [0204.431] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229b60 [0204.431] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0204.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229b60 | out: hHeap=0x1f0000) returned 1 [0204.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0204.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234398 | out: hHeap=0x1f0000) returned 1 [0204.432] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvVirtualization.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvvirtualization.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0204.432] GetLastError () returned 0x20 [0204.432] GetLastError () returned 0x20 [0204.432] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80af1c6a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80af1c6a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x12cad8, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="AppVManifest.dll", cAlternateFileName="APPVMA~1.DLL")) returned 1 [0204.432] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0204.432] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a248 [0204.432] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0204.432] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a248 | out: hHeap=0x1f0000) returned 1 [0204.432] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0204.432] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0204.432] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVManifest.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvmanifest.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0204.433] GetLastError () returned 0x20 [0204.433] GetLastError () returned 0x20 [0204.433] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b17ebf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b17ebf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0xe76d8, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="AppVOrchestration.dll", cAlternateFileName="APPVOR~1.DLL")) returned 1 [0204.433] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0204.433] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229b60 [0204.433] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0204.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229b60 | out: hHeap=0x1f0000) returned 1 [0204.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0204.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0204.433] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVOrchestration.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvorchestration.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0204.433] GetLastError () returned 0x20 [0204.433] GetLastError () returned 0x20 [0204.434] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b17ebf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b17ebf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x13c4d8, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="AppVPolicy.dll", cAlternateFileName="APPVPO~1.DLL")) returned 1 [0204.434] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b30 [0204.434] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229fa0 [0204.434] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0204.434] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229fa0 | out: hHeap=0x1f0000) returned 1 [0204.434] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0204.434] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b30 | out: hHeap=0x1f0000) returned 1 [0204.434] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVPolicy.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvpolicy.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0204.434] GetLastError () returned 0x20 [0204.434] GetLastError () returned 0x20 [0204.434] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b17ebf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b17ebf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9e226c00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x7d0d8, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="AppVScripting.dll", cAlternateFileName="APPVSC~1.DLL")) returned 1 [0204.434] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228150 [0204.435] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a248 [0204.435] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0204.435] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a248 | out: hHeap=0x1f0000) returned 1 [0204.435] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0204.435] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228150 | out: hHeap=0x1f0000) returned 1 [0204.435] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVScripting.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvscripting.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0204.436] GetFileType (hFile=0x210) returned 0x1 [0204.436] CloseHandle (hObject=0x210) returned 1 [0204.436] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a6c8 [0204.436] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVScripting.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvscripting.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b17ebf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b17ebf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9e226c00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x7d0d8)) returned 1 [0204.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a6c8 | out: hHeap=0x1f0000) returned 1 [0204.436] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219e40 [0204.437] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVScripting.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvscripting.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b17ebf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b17ebf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9e226c00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x7d0d8)) returned 1 [0204.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219e40 | out: hHeap=0x1f0000) returned 1 [0204.437] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21ab60 [0204.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ab60 | out: hHeap=0x1f0000) returned 1 [0204.437] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b3e121, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b3e121, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9e226c00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x406d8, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="AppVShNotify.exe", cAlternateFileName="APPVSH~1.EXE")) returned 1 [0204.437] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228230 [0204.437] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2299c8 [0204.437] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0204.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2299c8 | out: hHeap=0x1f0000) returned 1 [0204.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0204.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228230 | out: hHeap=0x1f0000) returned 1 [0204.438] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVShNotify.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvshnotify.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0204.438] GetFileType (hFile=0x210) returned 0x1 [0204.438] CloseHandle (hObject=0x210) returned 1 [0204.438] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21ab60 [0204.438] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVShNotify.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvshnotify.exe"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b3e121, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b3e121, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9e226c00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x406d8)) returned 1 [0204.439] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ab60 | out: hHeap=0x1f0000) returned 1 [0204.439] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a578 [0204.439] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVShNotify.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvshnotify.exe"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b3e121, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b3e121, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9e226c00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x406d8)) returned 1 [0204.439] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a578 | out: hHeap=0x1f0000) returned 1 [0204.439] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219e40 [0204.439] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219e40 | out: hHeap=0x1f0000) returned 1 [0204.439] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b3e121, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b3e121, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x14115400, ftLastWriteTime.dwHighDateTime=0x1d0d7a5, nFileSizeHigh=0x0, nFileSizeLow=0xc84c0, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="C2R32.dll", cAlternateFileName="")) returned 1 [0204.439] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ab8 [0204.439] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229e08 [0204.440] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0204.440] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229e08 | out: hHeap=0x1f0000) returned 1 [0204.440] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0204.440] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ab8 | out: hHeap=0x1f0000) returned 1 [0204.440] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r32.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0204.441] GetFileType (hFile=0x210) returned 0x1 [0204.441] CloseHandle (hObject=0x210) returned 1 [0204.441] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0204.441] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r32.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b3e121, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b3e121, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x14115400, ftLastWriteTime.dwHighDateTime=0x1d0d7a5, nFileSizeHigh=0x0, nFileSizeLow=0xc84c0)) returned 1 [0204.441] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0204.441] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0204.441] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r32.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b3e121, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b3e121, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x14115400, ftLastWriteTime.dwHighDateTime=0x1d0d7a5, nFileSizeHigh=0x0, nFileSizeLow=0xc84c0)) returned 1 [0204.442] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0204.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0204.442] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0204.442] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b3e121, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b3e121, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb4b54300, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x127260, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="C2R64.dll", cAlternateFileName="")) returned 1 [0204.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0204.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2299c8 [0204.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0204.442] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2299c8 | out: hHeap=0x1f0000) returned 1 [0204.442] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0204.442] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0204.443] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r64.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0204.443] GetFileType (hFile=0x210) returned 0x1 [0204.443] CloseHandle (hObject=0x210) returned 1 [0204.444] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0204.444] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r64.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b3e121, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b3e121, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb4b54300, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x127260)) returned 1 [0204.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0204.444] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0204.444] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r64.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b3e121, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b3e121, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb4b54300, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x127260)) returned 1 [0204.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0204.444] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0204.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0204.444] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b64383, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b64383, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8ee04f00, ftLastWriteTime.dwHighDateTime=0x1d0d67f, nFileSizeHigh=0x0, nFileSizeLow=0x1028, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="C2RHeartbeatConfig.xml", cAlternateFileName="C2RHEA~1.XML")) returned 1 [0204.444] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228150 [0204.444] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a4f0 [0204.444] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0204.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a4f0 | out: hHeap=0x1f0000) returned 1 [0204.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0204.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228150 | out: hHeap=0x1f0000) returned 1 [0204.445] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RHeartbeatConfig.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rheartbeatconfig.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0204.445] GetFileType (hFile=0x210) returned 0x1 [0204.445] CloseHandle (hObject=0x210) returned 1 [0204.445] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261160 [0204.445] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RHeartbeatConfig.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rheartbeatconfig.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b64383, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b64383, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8ee04f00, ftLastWriteTime.dwHighDateTime=0x1d0d67f, nFileSizeHigh=0x0, nFileSizeLow=0x1028)) returned 1 [0204.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261160 | out: hHeap=0x1f0000) returned 1 [0204.446] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2614f8 [0204.446] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RHeartbeatConfig.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rheartbeatconfig.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b64383, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b64383, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8ee04f00, ftLastWriteTime.dwHighDateTime=0x1d0d67f, nFileSizeHigh=0x0, nFileSizeLow=0x1028)) returned 1 [0204.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2614f8 | out: hHeap=0x1f0000) returned 1 [0204.446] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2615b0 [0204.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2615b0 | out: hHeap=0x1f0000) returned 1 [0204.446] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x808dbb6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x808dbb6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb3841600, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0xdc4b8, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="C2RUI.en-us.dll", cAlternateFileName="C2RUIE~1.DLL")) returned 1 [0204.446] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0204.446] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a3e0 [0204.446] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0204.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a3e0 | out: hHeap=0x1f0000) returned 1 [0204.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0204.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0204.446] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RUI.en-us.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rui.en-us.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0204.447] GetFileType (hFile=0x210) returned 0x1 [0204.447] CloseHandle (hObject=0x210) returned 1 [0204.447] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a968 [0204.447] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RUI.en-us.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rui.en-us.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x808dbb6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x808dbb6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb3841600, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0xdc4b8)) returned 1 [0204.447] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a968 | out: hHeap=0x1f0000) returned 1 [0204.447] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a770 [0204.447] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RUI.en-us.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rui.en-us.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x808dbb6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x808dbb6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb3841600, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0xdc4b8)) returned 1 [0204.447] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a770 | out: hHeap=0x1f0000) returned 1 [0204.447] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a4d0 [0204.447] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a4d0 | out: hHeap=0x1f0000) returned 1 [0204.448] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b64383, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b64383, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x514a8, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="concrt140.dll", cAlternateFileName="CONCRT~1.DLL")) returned 1 [0204.448] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c48 [0204.448] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229fa0 [0204.448] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0204.448] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229fa0 | out: hHeap=0x1f0000) returned 1 [0204.448] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0204.448] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0204.448] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\concrt140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\concrt140.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0204.449] GetFileType (hFile=0x210) returned 0x1 [0204.449] CloseHandle (hObject=0x210) returned 1 [0204.449] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21aa10 [0204.449] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\concrt140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\concrt140.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b64383, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b64383, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x514a8)) returned 1 [0204.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21aa10 | out: hHeap=0x1f0000) returned 1 [0204.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a4d0 [0204.450] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\concrt140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\concrt140.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b64383, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b64383, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x514a8)) returned 1 [0204.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a4d0 | out: hHeap=0x1f0000) returned 1 [0204.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219ee8 [0204.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219ee8 | out: hHeap=0x1f0000) returned 1 [0204.450] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b64383, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b64383, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbd783a00, ftLastWriteTime.dwHighDateTime=0x1d0d7e5, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="i640.hash", cAlternateFileName="I640~1.HAS")) returned 1 [0204.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0204.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a248 [0204.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0204.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a248 | out: hHeap=0x1f0000) returned 1 [0204.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0204.451] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0204.451] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i640.hash" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\i640.hash"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0204.451] GetFileType (hFile=0x210) returned 0x1 [0204.452] CloseHandle (hObject=0x210) returned 1 [0204.452] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0204.452] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i640.hash" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\i640.hash"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b64383, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b64383, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbd783a00, ftLastWriteTime.dwHighDateTime=0x1d0d7e5, nFileSizeHigh=0x0, nFileSizeLow=0x66)) returned 1 [0204.452] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0204.452] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0204.452] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i640.hash" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\i640.hash"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b64383, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b64383, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbd783a00, ftLastWriteTime.dwHighDateTime=0x1d0d7e5, nFileSizeHigh=0x0, nFileSizeLow=0x66)) returned 1 [0204.452] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0204.452] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0204.452] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0204.452] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x808dbb6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x808dbb6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbc470d00, ftLastWriteTime.dwHighDateTime=0x1d0d7e5, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="i641033.hash", cAlternateFileName="I64103~1.HAS")) returned 1 [0204.452] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b58 [0204.452] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229f18 [0204.452] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0204.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229f18 | out: hHeap=0x1f0000) returned 1 [0204.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0204.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b58 | out: hHeap=0x1f0000) returned 1 [0204.453] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i641033.hash" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\i641033.hash"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0204.453] GetFileType (hFile=0x210) returned 0x1 [0204.454] CloseHandle (hObject=0x210) returned 1 [0204.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0204.454] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i641033.hash" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\i641033.hash"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x808dbb6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x808dbb6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbc470d00, ftLastWriteTime.dwHighDateTime=0x1d0d7e5, nFileSizeHigh=0x0, nFileSizeLow=0x66)) returned 1 [0204.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0204.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0204.454] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i641033.hash" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\i641033.hash"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x808dbb6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x808dbb6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbc470d00, ftLastWriteTime.dwHighDateTime=0x1d0d7e5, nFileSizeHigh=0x0, nFileSizeLow=0x66)) returned 1 [0204.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0204.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0204.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0204.455] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b64383, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b64383, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbe3eab00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x10ae80, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="IntegratedOffice.exe", cAlternateFileName="INTEGR~1.EXE")) returned 1 [0204.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0204.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a3e0 [0204.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0204.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a3e0 | out: hHeap=0x1f0000) returned 1 [0204.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0204.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0204.455] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\IntegratedOffice.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\integratedoffice.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0204.456] GetFileType (hFile=0x210) returned 0x1 [0204.456] CloseHandle (hObject=0x210) returned 1 [0204.456] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a2d8 [0204.456] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\IntegratedOffice.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\integratedoffice.exe"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b64383, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b64383, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbe3eab00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x10ae80)) returned 1 [0204.456] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a2d8 | out: hHeap=0x1f0000) returned 1 [0204.456] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a620 [0204.456] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\IntegratedOffice.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\integratedoffice.exe"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b64383, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b64383, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbe3eab00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x10ae80)) returned 1 [0204.456] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a620 | out: hHeap=0x1f0000) returned 1 [0204.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a2d8 [0204.457] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a2d8 | out: hHeap=0x1f0000) returned 1 [0204.457] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b8a5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b8a5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xa2e72000, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x578d8, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="MavInject32.exe", cAlternateFileName="MAVINJ~1.EXE")) returned 1 [0204.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609f0 [0204.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229a50 [0204.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0204.457] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229a50 | out: hHeap=0x1f0000) returned 1 [0204.457] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0204.457] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609f0 | out: hHeap=0x1f0000) returned 1 [0204.457] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\MavInject32.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mavinject32.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0204.755] GetFileType (hFile=0x218) returned 0x1 [0204.755] CloseHandle (hObject=0x218) returned 1 [0204.756] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a8c0 [0204.756] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\MavInject32.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mavinject32.exe"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b8a5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b8a5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xa2e72000, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x578d8)) returned 1 [0204.756] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a8c0 | out: hHeap=0x1f0000) returned 1 [0204.756] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a038 [0204.756] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\MavInject32.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mavinject32.exe"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b8a5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b8a5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xa2e72000, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x578d8)) returned 1 [0204.756] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a038 | out: hHeap=0x1f0000) returned 1 [0204.756] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219f90 [0204.757] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219f90 | out: hHeap=0x1f0000) returned 1 [0204.757] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b8a5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b8a5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8745c00, ftLastWriteTime.dwHighDateTime=0x1d0d7aa, nFileSizeHigh=0x0, nFileSizeLow=0x2ffa60, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="mso20win32client.dll", cAlternateFileName="MSO20W~1.DLL")) returned 1 [0204.757] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0204.757] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a2d0 [0204.757] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0204.757] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a2d0 | out: hHeap=0x1f0000) returned 1 [0204.757] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0204.757] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0204.940] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso20win32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso20win32client.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0204.941] GetLastError () returned 0x20 [0204.941] GetLastError () returned 0x20 [0204.941] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80bb0837, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80bb0837, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xad6b600, ftLastWriteTime.dwHighDateTime=0x1d0d7aa, nFileSizeHigh=0x0, nFileSizeLow=0x475e60, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="mso30win32client.dll", cAlternateFileName="MSO30W~1.DLL")) returned 1 [0204.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0204.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a688 [0204.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0204.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a688 | out: hHeap=0x1f0000) returned 1 [0204.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0204.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0204.942] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso30win32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso30win32client.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0204.942] GetLastError () returned 0x20 [0204.943] GetLastError () returned 0x20 [0204.943] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80bfccf1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80bfccf1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb7179d00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x307ac0, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="mso40uires.dll", cAlternateFileName="MSO40U~1.DLL")) returned 1 [0204.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609c8 [0204.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a688 [0204.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0204.943] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a688 | out: hHeap=0x1f0000) returned 1 [0204.943] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0204.943] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609c8 | out: hHeap=0x1f0000) returned 1 [0204.944] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uires.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso40uires.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0204.944] GetLastError () returned 0x20 [0204.944] GetLastError () returned 0x20 [0204.945] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80c22f4a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80c22f4a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x10cc9700, ftLastWriteTime.dwHighDateTime=0x1d0d7aa, nFileSizeHigh=0x0, nFileSizeLow=0x8e6060, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="mso40uiwin32client.dll", cAlternateFileName="MSO40U~2.DLL")) returned 1 [0204.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0204.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229b60 [0204.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0204.945] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229b60 | out: hHeap=0x1f0000) returned 1 [0204.945] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0204.945] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0204.946] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uiwin32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso40uiwin32client.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0204.946] GetLastError () returned 0x20 [0204.946] GetLastError () returned 0x20 [0204.946] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x808dbb6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x808dbb6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x11fdc400, ftLastWriteTime.dwHighDateTime=0x1d0d7aa, nFileSizeHigh=0x0, nFileSizeLow=0xee60, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="msointl30.en-us.dll", cAlternateFileName="MSOINT~1.DLL")) returned 1 [0204.946] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cfa8 [0204.946] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a0b0 [0204.946] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0204.947] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a0b0 | out: hHeap=0x1f0000) returned 1 [0204.947] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0204.947] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cfa8 | out: hHeap=0x1f0000) returned 1 [0204.947] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msointl30.en-us.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msointl30.en-us.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0204.948] GetFileType (hFile=0x218) returned 0x1 [0204.949] CloseHandle (hObject=0x218) returned 1 [0204.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21ab60 [0204.949] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msointl30.en-us.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msointl30.en-us.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x808dbb6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x808dbb6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x11fdc400, ftLastWriteTime.dwHighDateTime=0x1d0d7aa, nFileSizeHigh=0x0, nFileSizeLow=0xee60)) returned 1 [0204.950] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ab60 | out: hHeap=0x1f0000) returned 1 [0204.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219ee8 [0204.950] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msointl30.en-us.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msointl30.en-us.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x808dbb6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x808dbb6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x11fdc400, ftLastWriteTime.dwHighDateTime=0x1d0d7aa, nFileSizeHigh=0x0, nFileSizeLow=0xee60)) returned 1 [0204.950] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219ee8 | out: hHeap=0x1f0000) returned 1 [0204.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21aa10 [0204.950] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21aa10 | out: hHeap=0x1f0000) returned 1 [0204.950] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80c9565a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80c9565a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1909ea00, ftLastWriteTime.dwHighDateTime=0x1d098bf, nFileSizeHigh=0x0, nFileSizeLow=0xa12a8, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="msvcp120.dll", cAlternateFileName="")) returned 1 [0204.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609c8 [0204.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2299c8 [0204.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0204.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2299c8 | out: hHeap=0x1f0000) returned 1 [0204.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0204.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609c8 | out: hHeap=0x1f0000) returned 1 [0204.951] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp120.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msvcp120.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0204.952] GetLastError () returned 0x20 [0204.952] GetLastError () returned 0x20 [0204.952] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80cbb8b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80cbb8b2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x9b0a0, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="msvcp140.dll", cAlternateFileName="")) returned 1 [0204.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ab8 [0204.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2299c8 [0204.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0204.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2299c8 | out: hHeap=0x1f0000) returned 1 [0204.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0204.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ab8 | out: hHeap=0x1f0000) returned 1 [0204.953] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msvcp140.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0204.953] GetLastError () returned 0x20 [0204.953] GetLastError () returned 0x20 [0204.953] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80cbb8b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80cbb8b2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1b6c4400, ftLastWriteTime.dwHighDateTime=0x1d098bf, nFileSizeHigh=0x0, nFileSizeLow=0xeb2a8, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="msvcr120.dll", cAlternateFileName="")) returned 1 [0204.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a68 [0204.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229be8 [0204.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0204.954] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229be8 | out: hHeap=0x1f0000) returned 1 [0204.954] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0204.954] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a68 | out: hHeap=0x1f0000) returned 1 [0204.954] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcr120.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msvcr120.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0204.955] GetLastError () returned 0x20 [0204.955] GetLastError () returned 0x20 [0204.955] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80cbb8b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80cbb8b2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb7179d00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x5b1068, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="OfficeC2RClient.exe", cAlternateFileName="OFFICE~1.EXE")) returned 1 [0204.955] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2f0 [0204.955] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2299c8 [0204.955] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0204.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2299c8 | out: hHeap=0x1f0000) returned 1 [0204.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0204.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0204.956] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RClient.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rclient.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0204.956] GetFileType (hFile=0x218) returned 0x1 [0204.957] CloseHandle (hObject=0x218) returned 1 [0204.957] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219d98 [0204.957] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RClient.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rclient.exe"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80cbb8b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80cbb8b2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb7179d00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x5b1068)) returned 1 [0204.957] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219d98 | out: hHeap=0x1f0000) returned 1 [0204.957] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a380 [0204.957] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RClient.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rclient.exe"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80cbb8b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80cbb8b2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb7179d00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x5b1068)) returned 1 [0204.957] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a380 | out: hHeap=0x1f0000) returned 1 [0204.957] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219cf0 [0204.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219cf0 | out: hHeap=0x1f0000) returned 1 [0204.958] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d07d85, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d07d85, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb7179d00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0xf34d8, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="OfficeC2RCom.dll", cAlternateFileName="OFFICE~1.DLL")) returned 1 [0204.958] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2f0 [0204.958] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a0b0 [0204.958] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0204.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a0b0 | out: hHeap=0x1f0000) returned 1 [0204.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0204.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0204.959] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RCom.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rcom.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0204.959] GetFileType (hFile=0x218) returned 0x1 [0204.960] CloseHandle (hObject=0x218) returned 1 [0204.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219c48 [0204.962] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RCom.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rcom.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d07d85, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d07d85, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb7179d00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0xf34d8)) returned 1 [0204.962] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219c48 | out: hHeap=0x1f0000) returned 1 [0204.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a770 [0204.962] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RCom.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rcom.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d07d85, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d07d85, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb7179d00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0xf34d8)) returned 1 [0204.962] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a770 | out: hHeap=0x1f0000) returned 1 [0204.963] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a770 [0204.963] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a770 | out: hHeap=0x1f0000) returned 1 [0204.963] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d07d85, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d07d85, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbd0d7e00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x2a5e58, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="OfficeClickToRun.exe", cAlternateFileName="OFFICE~2.EXE")) returned 1 [0204.963] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2f0 [0204.963] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a0b0 [0204.963] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0204.963] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a0b0 | out: hHeap=0x1f0000) returned 1 [0204.963] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0204.963] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0204.964] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeClickToRun.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeclicktorun.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0204.964] GetLastError () returned 0x20 [0204.964] GetLastError () returned 0x20 [0204.964] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d542e1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d542e1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x3f141b52, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x12ae, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="OfficeUpdateSchedule.xml", cAlternateFileName="OFFICE~1.XML")) returned 1 [0204.964] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233e40 [0204.964] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2299c8 [0204.964] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0204.965] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2299c8 | out: hHeap=0x1f0000) returned 1 [0204.965] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0204.965] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233e40 | out: hHeap=0x1f0000) returned 1 [0204.965] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeUpdateSchedule.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeupdateschedule.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0204.966] GetFileType (hFile=0x218) returned 0x1 [0204.967] CloseHandle (hObject=0x218) returned 1 [0204.967] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2610a8 [0204.967] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeUpdateSchedule.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeupdateschedule.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d542e1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d542e1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x3f141b52, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x12ae)) returned 1 [0204.967] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2610a8 | out: hHeap=0x1f0000) returned 1 [0204.967] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261388 [0204.968] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeUpdateSchedule.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeupdateschedule.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d542e1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d542e1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x3f141b52, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x12ae)) returned 1 [0204.968] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261388 | out: hHeap=0x1f0000) returned 1 [0204.968] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261440 [0204.968] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261440 | out: hHeap=0x1f0000) returned 1 [0204.968] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d542e1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d542e1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x3fa7ec8f, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x1162, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="ServiceWatcherSchedule.xml", cAlternateFileName="SERVIC~1.XML")) returned 1 [0204.968] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233e40 [0204.968] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a2d0 [0204.968] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0204.968] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a2d0 | out: hHeap=0x1f0000) returned 1 [0204.968] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0204.968] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233e40 | out: hHeap=0x1f0000) returned 1 [0204.969] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ServiceWatcherSchedule.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\servicewatcherschedule.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0204.969] GetFileType (hFile=0x218) returned 0x1 [0204.969] CloseHandle (hObject=0x218) returned 1 [0204.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261668 [0204.970] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ServiceWatcherSchedule.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\servicewatcherschedule.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d542e1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d542e1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x3fa7ec8f, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x1162)) returned 1 [0204.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261668 | out: hHeap=0x1f0000) returned 1 [0204.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261388 [0204.970] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ServiceWatcherSchedule.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\servicewatcherschedule.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d542e1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d542e1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x3fa7ec8f, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x1162)) returned 1 [0204.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261388 | out: hHeap=0x1f0000) returned 1 [0204.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x260ff0 [0204.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ff0 | out: hHeap=0x1f0000) returned 1 [0204.971] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d542e1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d542e1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbe3eab00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x101458, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="StreamServer.dll", cAlternateFileName="STREAM~1.DLL")) returned 1 [0204.971] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2f0 [0204.971] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a0b0 [0204.971] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0204.971] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a0b0 | out: hHeap=0x1f0000) returned 1 [0204.971] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0204.971] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0204.971] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\StreamServer.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\streamserver.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0204.971] GetLastError () returned 0x20 [0204.972] GetLastError () returned 0x20 [0204.972] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d542e1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d542e1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0xefec0, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="ucrtbase.dll", cAlternateFileName="")) returned 1 [0204.972] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609c8 [0204.972] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a0b0 [0204.972] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0204.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a0b0 | out: hHeap=0x1f0000) returned 1 [0204.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0204.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609c8 | out: hHeap=0x1f0000) returned 1 [0204.972] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ucrtbase.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\ucrtbase.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0204.973] GetFileType (hFile=0x218) returned 0x1 [0204.973] CloseHandle (hObject=0x218) returned 1 [0204.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0204.973] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ucrtbase.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\ucrtbase.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d542e1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d542e1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0xefec0)) returned 1 [0204.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0204.974] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0204.974] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ucrtbase.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\ucrtbase.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d542e1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d542e1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0xefec0)) returned 1 [0204.974] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0204.974] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0204.974] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0204.974] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d7a486, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d7a486, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x5f4b0, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="vccorlib140.dll", cAlternateFileName="VCCORL~1.DLL")) returned 1 [0204.974] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0204.974] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2299c8 [0204.974] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0204.974] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2299c8 | out: hHeap=0x1f0000) returned 1 [0204.974] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0204.974] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0204.975] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vccorlib140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\vccorlib140.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0204.975] GetFileType (hFile=0x218) returned 0x1 [0204.975] CloseHandle (hObject=0x218) returned 1 [0204.975] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a968 [0204.975] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vccorlib140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\vccorlib140.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d7a486, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d7a486, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x5f4b0)) returned 1 [0204.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a968 | out: hHeap=0x1f0000) returned 1 [0204.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a770 [0204.976] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vccorlib140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\vccorlib140.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d7a486, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d7a486, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x5f4b0)) returned 1 [0204.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a770 | out: hHeap=0x1f0000) returned 1 [0204.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a230 [0204.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a230 | out: hHeap=0x1f0000) returned 1 [0204.976] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d7a486, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d7a486, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x15ab0, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="vcruntime140.dll", cAlternateFileName="VCRUNT~1.DLL")) returned 1 [0204.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0204.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a688 [0204.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0204.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a688 | out: hHeap=0x1f0000) returned 1 [0204.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0204.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0204.977] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vcruntime140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\vcruntime140.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0204.977] GetLastError () returned 0x20 [0204.977] GetLastError () returned 0x20 [0204.977] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d7a486, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d7a486, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x15ab0, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="vcruntime140.dll", cAlternateFileName="VCRUNT~1.DLL")) returned 0 [0204.977] FindClose (in: hFindFile=0x24ebc0 | out: hFindFile=0x24ebc0) returned 1 [0204.977] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0204.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22eb58 | out: hHeap=0x1f0000) returned 1 [0204.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0204.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234080 | out: hHeap=0x1f0000) returned 1 [0204.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233ed0 [0204.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0204.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e360 [0204.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0204.978] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\*", lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb3e1c92c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb3e1c92c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName=".", cAlternateFileName="")) returned 0x24ec80 [0205.310] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220328 [0205.310] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0205.310] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0205.310] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb3e1c92c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb3e1c92c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="..", cAlternateFileName="")) returned 1 [0205.311] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2203a0 [0205.311] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220328 | out: hHeap=0x1f0000) returned 1 [0205.311] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0205.311] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0205.311] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d100bae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe462e472, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe462e472, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xc137d, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="Alphabet.xml", cAlternateFileName="")) returned 1 [0205.311] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0205.311] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0205.311] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218a28 [0205.311] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0205.311] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2203a0 | out: hHeap=0x1f0000) returned 1 [0205.311] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0205.312] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\alphabet.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0205.316] GetLastError () returned 0x5 [0205.316] GetLastError () returned 0x5 [0205.316] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05532b6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="ar-SA", cAlternateFileName="")) returned 1 [0205.316] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fc98 [0205.317] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219478 [0205.317] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fc98 | out: hHeap=0x1f0000) returned 1 [0205.317] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218a28 | out: hHeap=0x1f0000) returned 1 [0205.317] lstrcmpW (lpString1="ar-SA", lpString2=".") returned 1 [0205.317] lstrcmpW (lpString1="ar-SA", lpString2="..") returned 1 [0205.317] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x205290 [0205.317] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229b60 [0205.317] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0553f37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="bg-BG", cAlternateFileName="")) returned 1 [0205.317] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0205.317] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ef8 [0205.318] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0205.318] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219478 | out: hHeap=0x1f0000) returned 1 [0205.318] lstrcmpW (lpString1="bg-BG", lpString2=".") returned 1 [0205.318] lstrcmpW (lpString1="bg-BG", lpString2="..") returned 1 [0205.318] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0205.318] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229d80 [0205.318] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205290 | out: hHeap=0x1f0000) returned 1 [0205.318] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe46546cb, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe46546cb, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x69a5, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="Content.xml", cAlternateFileName="")) returned 1 [0205.318] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260770 [0205.319] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21ff68 [0205.319] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218d98 [0205.319] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ff68 | out: hHeap=0x1f0000) returned 1 [0205.319] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ef8 | out: hHeap=0x1f0000) returned 1 [0205.319] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0205.320] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\content.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0205.321] GetLastError () returned 0x5 [0205.321] GetLastError () returned 0x5 [0205.322] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0554b83, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="cs-CZ", cAlternateFileName="")) returned 1 [0205.322] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220508 [0205.322] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x2191b8 [0205.322] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220508 | out: hHeap=0x1f0000) returned 1 [0205.322] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218d98 | out: hHeap=0x1f0000) returned 1 [0205.322] lstrcmpW (lpString1="cs-CZ", lpString2=".") returned 1 [0205.322] lstrcmpW (lpString1="cs-CZ", lpString2="..") returned 1 [0205.322] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x48) returned 0x225e78 [0205.322] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a688 [0205.323] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0205.323] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05550d5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="da-DK", cAlternateFileName="")) returned 1 [0205.323] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0205.323] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218768 [0205.323] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0205.323] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2191b8 | out: hHeap=0x1f0000) returned 1 [0205.323] lstrcmpW (lpString1="da-DK", lpString2=".") returned 1 [0205.323] lstrcmpW (lpString1="da-DK", lpString2="..") returned 1 [0205.323] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c30 [0205.323] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229ad8 [0205.323] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225e78 | out: hHeap=0x1f0000) returned 1 [0205.324] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0555b2c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="de-DE", cAlternateFileName="")) returned 1 [0205.324] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f7e8 [0205.324] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x2191b8 [0205.324] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f7e8 | out: hHeap=0x1f0000) returned 1 [0205.324] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218768 | out: hHeap=0x1f0000) returned 1 [0205.324] lstrcmpW (lpString1="de-DE", lpString2=".") returned 1 [0205.324] lstrcmpW (lpString1="de-DE", lpString2="..") returned 1 [0205.324] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0205.324] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2299c8 [0205.324] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c30 | out: hHeap=0x1f0000) returned 1 [0205.324] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa055662c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="el-GR", cAlternateFileName="")) returned 1 [0205.325] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0205.325] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218a28 [0205.325] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0205.325] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2191b8 | out: hHeap=0x1f0000) returned 1 [0205.325] lstrcmpW (lpString1="el-GR", lpString2=".") returned 1 [0205.325] lstrcmpW (lpString1="el-GR", lpString2="..") returned 1 [0205.325] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229be8 [0205.325] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0557085, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="en-GB", cAlternateFileName="")) returned 1 [0205.325] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd88 [0205.325] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219268 [0205.326] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd88 | out: hHeap=0x1f0000) returned 1 [0205.326] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218a28 | out: hHeap=0x1f0000) returned 1 [0205.326] lstrcmpW (lpString1="en-GB", lpString2=".") returned 1 [0205.326] lstrcmpW (lpString1="en-GB", lpString2="..") returned 1 [0205.326] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd8) returned 0x229528 [0205.326] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a2d0 [0205.326] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0205.326] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05dd09d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe8231541, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="en-US", cAlternateFileName="")) returned 1 [0205.326] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f7e8 [0205.326] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ce8 [0205.326] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f7e8 | out: hHeap=0x1f0000) returned 1 [0205.327] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219268 | out: hHeap=0x1f0000) returned 1 [0205.327] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0205.327] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0205.327] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229e08 [0205.327] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05ddf5c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="es-ES", cAlternateFileName="")) returned 1 [0205.327] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0205.327] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218d98 [0205.327] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0205.327] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ce8 | out: hHeap=0x1f0000) returned 1 [0205.327] lstrcmpW (lpString1="es-ES", lpString2=".") returned 1 [0205.328] lstrcmpW (lpString1="es-ES", lpString2="..") returned 1 [0205.328] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a0b0 [0205.328] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05dea14, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="es-MX", cAlternateFileName="")) returned 1 [0205.328] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2202b0 [0205.328] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ef8 [0205.328] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2202b0 | out: hHeap=0x1f0000) returned 1 [0205.328] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218d98 | out: hHeap=0x1f0000) returned 1 [0205.328] lstrcmpW (lpString1="es-MX", lpString2=".") returned 1 [0205.328] lstrcmpW (lpString1="es-MX", lpString2="..") returned 1 [0205.328] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x138) returned 0x223018 [0205.329] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0205.329] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229528 | out: hHeap=0x1f0000) returned 1 [0205.329] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05df011, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="et-EE", cAlternateFileName="")) returned 1 [0205.329] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0205.329] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218fa8 [0205.329] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0205.329] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ef8 | out: hHeap=0x1f0000) returned 1 [0205.329] lstrcmpW (lpString1="et-EE", lpString2=".") returned 1 [0205.329] lstrcmpW (lpString1="et-EE", lpString2="..") returned 1 [0205.330] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0205.330] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05df7b6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="fi-FI", cAlternateFileName="")) returned 1 [0205.330] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0205.330] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219058 [0205.330] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0205.330] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218fa8 | out: hHeap=0x1f0000) returned 1 [0205.330] lstrcmpW (lpString1="fi-FI", lpString2=".") returned 1 [0205.330] lstrcmpW (lpString1="fi-FI", lpString2="..") returned 1 [0205.330] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2133d8 [0205.330] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8f49e8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd11f8841, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd11f8841, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x186b84, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="FlickAnimation.avi", cAlternateFileName="")) returned 1 [0205.330] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fefe8 [0205.331] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0205.331] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ef8 [0205.331] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0205.331] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219058 | out: hHeap=0x1f0000) returned 1 [0205.331] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fefe8 | out: hHeap=0x1f0000) returned 1 [0205.331] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\FlickAnimation.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flickanimation.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0205.336] GetLastError () returned 0x5 [0205.336] GetLastError () returned 0x5 [0205.336] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8f49e8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd121ea9a, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd121ea9a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xc4800, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="FlickLearningWizard.exe", cAlternateFileName="")) returned 1 [0205.336] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1feed0 [0205.336] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0205.337] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218818 [0205.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0205.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ef8 | out: hHeap=0x1f0000) returned 1 [0205.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1feed0 | out: hHeap=0x1f0000) returned 1 [0205.337] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\FlickLearningWizard.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flicklearningwizard.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0205.338] GetLastError () returned 0x5 [0205.339] GetLastError () returned 0x5 [0205.339] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0635c03, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="fr-CA", cAlternateFileName="")) returned 1 [0205.339] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0205.339] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219478 [0205.339] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0205.339] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218818 | out: hHeap=0x1f0000) returned 1 [0205.339] lstrcmpW (lpString1="fr-CA", lpString2=".") returned 1 [0205.339] lstrcmpW (lpString1="fr-CA", lpString2="..") returned 1 [0205.339] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2132c8 [0205.340] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06369df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="fr-FR", cAlternateFileName="")) returned 1 [0205.340] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0205.340] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218768 [0205.340] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0205.340] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219478 | out: hHeap=0x1f0000) returned 1 [0205.340] lstrcmpW (lpString1="fr-FR", lpString2=".") returned 1 [0205.340] lstrcmpW (lpString1="fr-FR", lpString2="..") returned 1 [0205.340] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c8) returned 0x220748 [0205.340] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0205.340] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223018 | out: hHeap=0x1f0000) returned 1 [0205.340] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0637839, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="fsdefinitions", cAlternateFileName="FSDEFI~1")) returned 1 [0205.341] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0205.341] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0205.341] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219318 [0205.341] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0205.341] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218768 | out: hHeap=0x1f0000) returned 1 [0205.341] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0205.341] lstrcmpW (lpString1="fsdefinitions", lpString2=".") returned 1 [0205.341] lstrcmpW (lpString1="fsdefinitions", lpString2="..") returned 1 [0205.341] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0205.341] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cf9a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="he-IL", cAlternateFileName="")) returned 1 [0205.342] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fa40 [0205.342] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ce8 [0205.342] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fa40 | out: hHeap=0x1f0000) returned 1 [0205.342] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219318 | out: hHeap=0x1f0000) returned 1 [0205.342] lstrcmpW (lpString1="he-IL", lpString2=".") returned 1 [0205.342] lstrcmpW (lpString1="he-IL", lpString2="..") returned 1 [0205.342] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0205.342] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cfce2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="hr-HR", cAlternateFileName="")) returned 1 [0205.342] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0205.342] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ef8 [0205.342] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0205.342] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ce8 | out: hHeap=0x1f0000) returned 1 [0205.343] lstrcmpW (lpString1="hr-HR", lpString2=".") returned 1 [0205.343] lstrcmpW (lpString1="hr-HR", lpString2="..") returned 1 [0205.343] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e88 [0205.343] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06d0656, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="hu-HU", cAlternateFileName="")) returned 1 [0205.343] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0205.343] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218608 [0205.343] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0205.343] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ef8 | out: hHeap=0x1f0000) returned 1 [0205.343] lstrcmpW (lpString1="hu-HU", lpString2=".") returned 1 [0205.343] lstrcmpW (lpString1="hu-HU", lpString2="..") returned 1 [0205.343] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212cf0 [0205.343] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8ce781, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe382bd1f, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe382bd1f, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xb620, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="hwrcommonlm.dat", cAlternateFileName="")) returned 1 [0205.344] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0205.344] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f7e8 [0205.344] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x2191b8 [0205.344] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f7e8 | out: hHeap=0x1f0000) returned 1 [0205.344] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218608 | out: hHeap=0x1f0000) returned 1 [0205.344] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0205.344] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\hwrcommonlm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrcommonlm.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0205.346] GetLastError () returned 0x5 [0205.346] GetLastError () returned 0x5 [0205.346] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6eba2ec1, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0xa07693a9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6eba2ec1, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="HWRCustomization", cAlternateFileName="HWRCUS~1")) returned 1 [0205.346] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1feed0 [0205.346] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0205.346] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218fa8 [0205.346] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0205.346] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2191b8 | out: hHeap=0x1f0000) returned 1 [0205.347] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1feed0 | out: hHeap=0x1f0000) returned 1 [0205.347] lstrcmpW (lpString1="HWRCustomization", lpString2=".") returned 1 [0205.347] lstrcmpW (lpString1="HWRCustomization", lpString2="..") returned 1 [0205.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0205.347] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85c57278, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xb269cdea, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb269cdea, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x79bc0, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="hwrenclm.dat", cAlternateFileName="")) returned 1 [0205.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2607e8 [0205.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0205.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x2188c8 [0205.347] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0205.347] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218fa8 | out: hHeap=0x1f0000) returned 1 [0205.347] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607e8 | out: hHeap=0x1f0000) returned 1 [0205.348] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\hwrenclm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrenclm.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0205.348] GetLastError () returned 0x5 [0205.348] GetLastError () returned 0x5 [0205.348] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8ce781, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe38781cd, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe38781cd, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x10cb30, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="hwrlatinlm.dat", cAlternateFileName="")) returned 1 [0205.348] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0205.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0205.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219268 [0205.349] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0205.349] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2188c8 | out: hHeap=0x1f0000) returned 1 [0205.349] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0205.350] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\hwrlatinlm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrlatinlm.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0205.350] GetLastError () returned 0x5 [0205.350] GetLastError () returned 0x5 [0205.350] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85cc99ae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xb28b2edf, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb28b2edf, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x2662f0, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="hwrusalm.dat", cAlternateFileName="")) returned 1 [0205.350] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260888 [0205.350] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220058 [0205.350] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ef8 [0205.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220058 | out: hHeap=0x1f0000) returned 1 [0205.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219268 | out: hHeap=0x1f0000) returned 1 [0205.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0205.352] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusalm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusalm.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0205.706] GetLastError () returned 0x5 [0205.706] GetLastError () returned 0x5 [0205.706] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85cc99ae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xb281a570, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb281a570, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x339380, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="hwrusash.dat", cAlternateFileName="")) returned 1 [0205.707] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0205.707] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2202b0 [0205.707] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218fa8 [0205.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2202b0 | out: hHeap=0x1f0000) returned 1 [0205.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ef8 | out: hHeap=0x1f0000) returned 1 [0205.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0205.708] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusash.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusash.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0205.708] GetLastError () returned 0x5 [0205.708] GetLastError () returned 0x5 [0205.708] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e38953f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e38953f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e38953f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x58400, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="InkDiv.dll", cAlternateFileName="")) returned 1 [0205.708] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260900 [0205.708] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fef0 [0205.708] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218d98 [0205.708] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fef0 | out: hHeap=0x1f0000) returned 1 [0205.708] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218fa8 | out: hHeap=0x1f0000) returned 1 [0205.708] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260900 | out: hHeap=0x1f0000) returned 1 [0205.709] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\InkDiv.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inkdiv.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0205.711] GetLastError () returned 0x5 [0205.711] GetLastError () returned 0x5 [0205.711] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e38953f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e38953f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e38953f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1ecc00, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="InkObj.dll", cAlternateFileName="")) returned 1 [0205.711] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0205.711] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21ff68 [0205.711] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ef8 [0205.711] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ff68 | out: hHeap=0x1f0000) returned 1 [0205.711] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218d98 | out: hHeap=0x1f0000) returned 1 [0205.711] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0205.712] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\InkObj.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inkobj.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0205.712] GetLastError () returned 0x5 [0205.712] GetLastError () returned 0x5 [0205.712] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d14d081, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe467a929, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe467a929, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x59a00, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="InputPersonalization.exe", cAlternateFileName="")) returned 1 [0205.712] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346b0 [0205.712] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0205.712] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218fa8 [0205.712] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0205.712] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ef8 | out: hHeap=0x1f0000) returned 1 [0205.712] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346b0 | out: hHeap=0x1f0000) returned 1 [0205.713] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\InputPersonalization.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inputpersonalization.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0205.714] GetLastError () returned 0x5 [0205.714] GetLastError () returned 0x5 [0205.714] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x972, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="ipsar.xml", cAlternateFileName="")) returned 1 [0205.714] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0205.715] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0205.715] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218818 [0205.715] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0205.715] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218fa8 | out: hHeap=0x1f0000) returned 1 [0205.715] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0205.715] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipsar.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsar.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0205.718] GetLastError () returned 0x5 [0205.718] GetLastError () returned 0x5 [0205.718] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa20, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="ipscat.xml", cAlternateFileName="")) returned 1 [0205.718] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260658 [0205.718] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0205.718] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219478 [0205.719] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0205.719] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218818 | out: hHeap=0x1f0000) returned 1 [0205.719] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260658 | out: hHeap=0x1f0000) returned 1 [0205.719] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipscat.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscat.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0205.719] GetLastError () returned 0x5 [0205.719] GetLastError () returned 0x5 [0205.719] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x99e, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="ipschs.xml", cAlternateFileName="")) returned 1 [0205.719] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260658 [0205.720] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0205.720] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x2191b8 [0205.720] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0205.720] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219478 | out: hHeap=0x1f0000) returned 1 [0205.720] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260658 | out: hHeap=0x1f0000) returned 1 [0205.721] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipschs.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipschs.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0205.721] GetLastError () returned 0x5 [0205.721] GetLastError () returned 0x5 [0205.721] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x984, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="ipscht.xml", cAlternateFileName="")) returned 1 [0205.721] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260798 [0205.721] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220328 [0205.722] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x2188c8 [0205.722] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220328 | out: hHeap=0x1f0000) returned 1 [0205.722] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2191b8 | out: hHeap=0x1f0000) returned 1 [0205.722] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260798 | out: hHeap=0x1f0000) returned 1 [0205.722] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipscht.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscht.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0205.722] GetLastError () returned 0x5 [0205.722] GetLastError () returned 0x5 [0205.722] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9fc, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="ipscsy.xml", cAlternateFileName="")) returned 1 [0205.723] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260888 [0205.723] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21ff68 [0205.723] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218608 [0205.723] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ff68 | out: hHeap=0x1f0000) returned 1 [0205.723] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2188c8 | out: hHeap=0x1f0000) returned 1 [0205.723] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0205.723] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipscsy.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscsy.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0205.724] GetLastError () returned 0x5 [0205.724] GetLastError () returned 0x5 [0205.725] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9d2, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="ipsdan.xml", cAlternateFileName="")) returned 1 [0205.725] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0205.725] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0205.725] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218b88 [0205.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0205.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218608 | out: hHeap=0x1f0000) returned 1 [0205.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0205.725] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdan.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdan.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0205.725] GetLastError () returned 0x5 [0205.726] GetLastError () returned 0x5 [0205.726] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa38, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="ipsdeu.xml", cAlternateFileName="")) returned 1 [0205.726] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260518 [0205.726] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0205.726] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218d98 [0205.726] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0205.726] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218b88 | out: hHeap=0x1f0000) returned 1 [0205.726] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0205.726] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdeu.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdeu.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0205.727] GetLastError () returned 0x5 [0205.727] GetLastError () returned 0x5 [0205.727] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa3a, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="ipsel.xml", cAlternateFileName="")) returned 1 [0205.727] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0205.727] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0205.727] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x2188c8 [0205.727] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0205.727] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218d98 | out: hHeap=0x1f0000) returned 1 [0205.727] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0205.728] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipsel.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsel.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0205.728] GetLastError () returned 0x5 [0205.728] GetLastError () returned 0x5 [0205.728] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa12, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="ipsen.xml", cAlternateFileName="")) returned 1 [0205.728] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605b8 [0205.728] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fa40 [0205.728] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ef8 [0205.728] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fa40 | out: hHeap=0x1f0000) returned 1 [0205.728] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2188c8 | out: hHeap=0x1f0000) returned 1 [0205.728] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0205.729] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipsen.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsen.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0205.730] GetLastError () returned 0x5 [0205.730] GetLastError () returned 0x5 [0205.730] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xbd0, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="ipsesp.xml", cAlternateFileName="")) returned 1 [0205.730] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0205.730] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0205.730] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218fa8 [0205.730] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0205.730] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ef8 | out: hHeap=0x1f0000) returned 1 [0205.730] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0205.731] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipsesp.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsesp.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0205.731] GetLastError () returned 0x5 [0205.731] GetLastError () returned 0x5 [0205.731] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d14d081, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d14d081, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d14d081, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="IPSEventLogMsg.dll", cAlternateFileName="")) returned 1 [0205.731] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf70 [0205.731] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0205.731] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219058 [0205.731] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0205.731] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218fa8 | out: hHeap=0x1f0000) returned 1 [0205.731] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf70 | out: hHeap=0x1f0000) returned 1 [0205.732] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\IPSEventLogMsg.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipseventlogmsg.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0205.732] GetLastError () returned 0x5 [0205.732] GetLastError () returned 0x5 [0205.732] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d100bae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d100bae, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa62, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="ipsfin.xml", cAlternateFileName="")) returned 1 [0205.732] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0205.733] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220058 [0205.733] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218768 [0205.733] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220058 | out: hHeap=0x1f0000) returned 1 [0205.733] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219058 | out: hHeap=0x1f0000) returned 1 [0205.733] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0205.733] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipsfin.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfin.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0205.733] GetLastError () returned 0x5 [0205.733] GetLastError () returned 0x5 [0205.734] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa44, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="ipsfra.xml", cAlternateFileName="")) returned 1 [0205.734] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609a0 [0205.734] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fef0 [0205.734] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ce8 [0205.734] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fef0 | out: hHeap=0x1f0000) returned 1 [0205.734] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218768 | out: hHeap=0x1f0000) returned 1 [0205.734] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0205.734] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipsfra.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfra.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0205.734] GetLastError () returned 0x5 [0205.735] GetLastError () returned 0x5 [0205.735] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9e4, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="ipshe.xml", cAlternateFileName="")) returned 1 [0205.735] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0205.735] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0205.735] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218d98 [0205.735] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0205.735] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ce8 | out: hHeap=0x1f0000) returned 1 [0205.735] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0205.736] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipshe.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshe.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0205.737] GetLastError () returned 0x5 [0205.737] GetLastError () returned 0x5 [0205.737] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9d6, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="ipshi.xml", cAlternateFileName="")) returned 1 [0205.737] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608b0 [0205.737] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220490 [0205.737] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218b88 [0205.737] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220490 | out: hHeap=0x1f0000) returned 1 [0205.737] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218d98 | out: hHeap=0x1f0000) returned 1 [0205.737] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608b0 | out: hHeap=0x1f0000) returned 1 [0205.738] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipshi.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshi.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0205.738] GetLastError () returned 0x5 [0205.738] GetLastError () returned 0x5 [0205.738] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c96711d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa5c, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="ipshrv.xml", cAlternateFileName="")) returned 1 [0205.739] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0205.739] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220058 [0205.739] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ce8 [0205.739] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220058 | out: hHeap=0x1f0000) returned 1 [0205.739] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218b88 | out: hHeap=0x1f0000) returned 1 [0205.739] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0205.740] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipshrv.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshrv.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0205.740] GetLastError () returned 0x5 [0205.740] GetLastError () returned 0x5 [0205.740] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d14d081, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d14d081, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d14d081, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa0a, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="ipsid.xml", cAlternateFileName="")) returned 1 [0205.740] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609a0 [0205.740] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0205.741] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218978 [0205.741] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0205.741] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ce8 | out: hHeap=0x1f0000) returned 1 [0205.741] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0205.741] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipsid.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsid.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0205.742] GetLastError () returned 0x5 [0205.742] GetLastError () returned 0x5 [0205.742] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9de, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="ipsita.xml", cAlternateFileName="")) returned 1 [0205.742] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0205.742] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0205.742] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219058 [0205.742] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0205.742] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218978 | out: hHeap=0x1f0000) returned 1 [0205.742] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0205.743] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipsita.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsita.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0206.016] GetLastError () returned 0x5 [0206.017] GetLastError () returned 0x5 [0206.017] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c96711d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c96711d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c96711d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9da, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="ipsjpn.xml", cAlternateFileName="")) returned 1 [0206.017] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0206.017] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2202b0 [0206.018] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218768 [0206.018] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2202b0 | out: hHeap=0x1f0000) returned 1 [0206.018] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219058 | out: hHeap=0x1f0000) returned 1 [0206.018] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0206.018] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipsjpn.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsjpn.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0206.018] GetLastError () returned 0x5 [0206.018] GetLastError () returned 0x5 [0206.019] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d100bae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d100bae, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d100bae, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa08, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="ipskor.xml", cAlternateFileName="")) returned 1 [0206.019] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606f8 [0206.019] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0206.019] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218608 [0206.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0206.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218768 | out: hHeap=0x1f0000) returned 1 [0206.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606f8 | out: hHeap=0x1f0000) returned 1 [0206.019] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipskor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipskor.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0206.019] GetLastError () returned 0x5 [0206.020] GetLastError () returned 0x5 [0206.020] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe462e472, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe462e472, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xa400, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="IpsMigrationPlugin.dll", cAlternateFileName="")) returned 1 [0206.020] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1ff058 [0206.020] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0206.020] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218b88 [0206.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0206.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218608 | out: hHeap=0x1f0000) returned 1 [0206.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1ff058 | out: hHeap=0x1f0000) returned 1 [0206.021] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\IpsMigrationPlugin.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsmigrationplugin.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0206.021] GetLastError () returned 0x5 [0206.021] GetLastError () returned 0x5 [0206.021] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d100bae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d100bae, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d100bae, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa42, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="ipsnld.xml", cAlternateFileName="")) returned 1 [0206.021] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260900 [0206.021] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0206.021] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218a28 [0206.021] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0206.021] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218b88 | out: hHeap=0x1f0000) returned 1 [0206.021] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260900 | out: hHeap=0x1f0000) returned 1 [0206.022] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnld.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnld.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0206.022] GetLastError () returned 0x5 [0206.022] GetLastError () returned 0x5 [0206.022] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d100bae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d100bae, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d100bae, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa14, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="ipsnor.xml", cAlternateFileName="")) returned 1 [0206.022] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260658 [0206.022] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0206.022] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218fa8 [0206.022] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0206.023] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218a28 | out: hHeap=0x1f0000) returned 1 [0206.023] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260658 | out: hHeap=0x1f0000) returned 1 [0206.023] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnor.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0206.024] GetLastError () returned 0x5 [0206.024] GetLastError () returned 0x5 [0206.024] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d100bae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d100bae, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d100bae, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa28, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="ipsplk.xml", cAlternateFileName="")) returned 1 [0206.024] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260888 [0206.024] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0206.025] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ce8 [0206.025] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0206.025] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218fa8 | out: hHeap=0x1f0000) returned 1 [0206.025] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0206.025] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipsplk.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsplk.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0206.025] GetLastError () returned 0x5 [0206.025] GetLastError () returned 0x5 [0206.026] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe46546cb, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe46546cb, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x1ec00, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="IpsPlugin.dll", cAlternateFileName="")) returned 1 [0206.026] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0206.026] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0206.026] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218d98 [0206.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0206.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ce8 | out: hHeap=0x1f0000) returned 1 [0206.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0206.026] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\IpsPlugin.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsplugin.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0206.027] GetLastError () returned 0x5 [0206.027] GetLastError () returned 0x5 [0206.027] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x8c6, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="ipsptb.xml", cAlternateFileName="")) returned 1 [0206.027] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2607e8 [0206.027] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0206.027] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ef8 [0206.027] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0206.027] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218d98 | out: hHeap=0x1f0000) returned 1 [0206.027] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607e8 | out: hHeap=0x1f0000) returned 1 [0206.028] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptb.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0206.028] GetLastError () returned 0x5 [0206.028] GetLastError () returned 0x5 [0206.028] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x8c0, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="ipsptg.xml", cAlternateFileName="")) returned 1 [0206.028] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0206.028] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0206.028] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218768 [0206.028] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0206.028] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ef8 | out: hHeap=0x1f0000) returned 1 [0206.029] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0206.029] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptg.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptg.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0206.039] GetLastError () returned 0x5 [0206.039] GetLastError () returned 0x5 [0206.039] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c96711d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c96711d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c96711d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa54, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="ipsrom.xml", cAlternateFileName="")) returned 1 [0206.039] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0206.039] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21ffe0 [0206.039] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219478 [0206.039] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ffe0 | out: hHeap=0x1f0000) returned 1 [0206.039] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218768 | out: hHeap=0x1f0000) returned 1 [0206.039] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0206.040] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipsrom.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsrom.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0206.041] GetLastError () returned 0x5 [0206.041] GetLastError () returned 0x5 [0206.041] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9ee, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="ipsrus.xml", cAlternateFileName="")) returned 1 [0206.041] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0206.041] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0206.041] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218d98 [0206.041] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0206.041] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219478 | out: hHeap=0x1f0000) returned 1 [0206.042] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0206.042] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipsrus.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsrus.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0206.042] GetLastError () returned 0x5 [0206.042] GetLastError () returned 0x5 [0206.042] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa08, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="ipssrb.xml", cAlternateFileName="")) returned 1 [0206.042] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260900 [0206.043] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fab8 [0206.043] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219478 [0206.043] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fab8 | out: hHeap=0x1f0000) returned 1 [0206.043] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218d98 | out: hHeap=0x1f0000) returned 1 [0206.043] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260900 | out: hHeap=0x1f0000) returned 1 [0206.044] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssrb.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0206.044] GetLastError () returned 0x5 [0206.044] GetLastError () returned 0x5 [0206.044] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa24, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="ipssrl.xml", cAlternateFileName="")) returned 1 [0206.044] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605b8 [0206.044] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0206.044] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218b88 [0206.044] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0206.045] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219478 | out: hHeap=0x1f0000) returned 1 [0206.045] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0206.045] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssrl.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0206.045] GetLastError () returned 0x5 [0206.045] GetLastError () returned 0x5 [0206.045] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9d8, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="ipssve.xml", cAlternateFileName="")) returned 1 [0206.046] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260900 [0206.046] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2202b0 [0206.046] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219058 [0206.046] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2202b0 | out: hHeap=0x1f0000) returned 1 [0206.046] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218b88 | out: hHeap=0x1f0000) returned 1 [0206.046] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260900 | out: hHeap=0x1f0000) returned 1 [0206.046] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipssve.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssve.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0206.047] GetLastError () returned 0x5 [0206.048] GetLastError () returned 0x5 [0206.048] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xaa0, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="ipstr.xml", cAlternateFileName="")) returned 1 [0206.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0206.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0206.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ef8 [0206.048] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0206.048] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219058 | out: hHeap=0x1f0000) returned 1 [0206.049] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0206.049] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipstr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipstr.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0206.049] GetLastError () returned 0x5 [0206.049] GetLastError () returned 0x5 [0206.049] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0769b1e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="it-IT", cAlternateFileName="")) returned 1 [0206.049] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0206.049] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218b88 [0206.050] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0206.050] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ef8 | out: hHeap=0x1f0000) returned 1 [0206.050] lstrcmpW (lpString1="it-IT", lpString2=".") returned 1 [0206.050] lstrcmpW (lpString1="it-IT", lpString2="..") returned 1 [0206.050] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2a0) returned 0x25ffe8 [0206.050] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212be0 [0206.050] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220748 | out: hHeap=0x1f0000) returned 1 [0206.050] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076a026, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="ja-JP", cAlternateFileName="")) returned 1 [0206.050] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe00 [0206.050] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218fa8 [0206.050] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe00 | out: hHeap=0x1f0000) returned 1 [0206.050] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218b88 | out: hHeap=0x1f0000) returned 1 [0206.050] lstrcmpW (lpString1="ja-JP", lpString2=".") returned 1 [0206.050] lstrcmpW (lpString1="ja-JP", lpString2="..") returned 1 [0206.050] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213570 [0206.050] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076a7a6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="ko-KR", cAlternateFileName="")) returned 1 [0206.051] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220490 [0206.051] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x2191b8 [0206.051] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220490 | out: hHeap=0x1f0000) returned 1 [0206.051] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218fa8 | out: hHeap=0x1f0000) returned 1 [0206.051] lstrcmpW (lpString1="ko-KR", lpString2=".") returned 1 [0206.051] lstrcmpW (lpString1="ko-KR", lpString2="..") returned 1 [0206.051] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0206.051] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076afd8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="LanguageModel", cAlternateFileName="LANGUA~1")) returned 1 [0206.051] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608b0 [0206.051] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0206.051] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ef8 [0206.051] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0206.051] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2191b8 | out: hHeap=0x1f0000) returned 1 [0206.051] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608b0 | out: hHeap=0x1f0000) returned 1 [0206.051] lstrcmpW (lpString1="LanguageModel", lpString2=".") returned 1 [0206.051] lstrcmpW (lpString1="LanguageModel", lpString2="..") returned 1 [0206.052] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0206.052] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076b52b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="lt-LT", cAlternateFileName="")) returned 1 [0206.052] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0206.052] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218a28 [0206.052] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0206.052] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ef8 | out: hHeap=0x1f0000) returned 1 [0206.052] lstrcmpW (lpString1="lt-LT", lpString2=".") returned 1 [0206.052] lstrcmpW (lpString1="lt-LT", lpString2="..") returned 1 [0206.052] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213818 [0206.052] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076ba6e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="lv-LV", cAlternateFileName="")) returned 1 [0206.052] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220328 [0206.052] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218768 [0206.052] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220328 | out: hHeap=0x1f0000) returned 1 [0206.052] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218a28 | out: hHeap=0x1f0000) returned 1 [0206.052] lstrcmpW (lpString1="lv-LV", lpString2=".") returned 1 [0206.053] lstrcmpW (lpString1="lv-LV", lpString2="..") returned 1 [0206.053] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0206.053] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a4376e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1f30e81, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1f30e81, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x19f200, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="micaut.dll", cAlternateFileName="")) returned 1 [0206.053] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2607c0 [0206.053] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2202b0 [0206.053] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x2188c8 [0206.053] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2202b0 | out: hHeap=0x1f0000) returned 1 [0206.053] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218768 | out: hHeap=0x1f0000) returned 1 [0206.053] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607c0 | out: hHeap=0x1f0000) returned 1 [0206.053] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\micaut.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\micaut.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0206.425] GetLastError () returned 0x5 [0206.425] GetLastError () returned 0x5 [0206.425] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463d4edd, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xc2004e62, ftLastAccessTime.dwHighDateTime=0x1d2fa0a, ftLastWriteTime.dwLowDateTime=0x463d4edd, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x7b000, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="Microsoft.Ink.dll", cAlternateFileName="")) returned 1 [0206.425] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0206.425] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21ffe0 [0206.425] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218768 [0206.425] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ffe0 | out: hHeap=0x1f0000) returned 1 [0206.425] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2188c8 | out: hHeap=0x1f0000) returned 1 [0206.425] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0206.426] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\Microsoft.Ink.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\microsoft.ink.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0206.426] GetLastError () returned 0x5 [0206.426] GetLastError () returned 0x5 [0206.426] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a4376e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd51e08b5, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd51e08b5, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x178200, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="mip.exe", cAlternateFileName="")) returned 1 [0206.426] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2202b0 [0206.426] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218b88 [0206.426] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2202b0 | out: hHeap=0x1f0000) returned 1 [0206.426] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218768 | out: hHeap=0x1f0000) returned 1 [0206.427] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\mip.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mip.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0206.428] GetLastError () returned 0x5 [0206.428] GetLastError () returned 0x5 [0206.428] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a1d507, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xde1acd8d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xde1acd8d, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x612e00, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="mraut.dll", cAlternateFileName="")) returned 1 [0206.428] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260888 [0206.428] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0206.428] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218a28 [0206.428] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0206.428] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218b88 | out: hHeap=0x1f0000) returned 1 [0206.429] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0206.429] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\mraut.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mraut.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0206.429] GetLastError () returned 0x5 [0206.429] GetLastError () returned 0x5 [0206.429] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c3a52f7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3c3a52f7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3c3a52f7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc800, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="mshwgst.dll", cAlternateFileName="")) returned 1 [0206.430] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0206.430] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2202b0 [0206.430] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218768 [0206.430] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2202b0 | out: hHeap=0x1f0000) returned 1 [0206.430] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218a28 | out: hHeap=0x1f0000) returned 1 [0206.430] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0206.430] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\mshwgst.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mshwgst.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0206.432] GetLastError () returned 0x5 [0206.432] GetLastError () returned 0x5 [0206.432] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8ce781, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe3805ad4, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe3805ad4, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x106a00, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="mshwLatin.dll", cAlternateFileName="")) returned 1 [0206.432] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2607e8 [0206.432] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0206.432] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ef8 [0206.432] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0206.432] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218768 | out: hHeap=0x1f0000) returned 1 [0206.432] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607e8 | out: hHeap=0x1f0000) returned 1 [0206.433] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\mshwLatin.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mshwlatin.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0206.433] GetLastError () returned 0x5 [0206.433] GetLastError () returned 0x5 [0206.433] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076bff5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="nb-NO", cAlternateFileName="")) returned 1 [0206.433] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0206.433] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x2188c8 [0206.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0206.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ef8 | out: hHeap=0x1f0000) returned 1 [0206.433] lstrcmpW (lpString1="nb-NO", lpString2=".") returned 1 [0206.434] lstrcmpW (lpString1="nb-NO", lpString2="..") returned 1 [0206.434] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212a48 [0206.434] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076c75d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="nl-NL", cAlternateFileName="")) returned 1 [0206.434] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fef0 [0206.434] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219058 [0206.434] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fef0 | out: hHeap=0x1f0000) returned 1 [0206.434] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2188c8 | out: hHeap=0x1f0000) returned 1 [0206.434] lstrcmpW (lpString1="nl-NL", lpString2=".") returned 1 [0206.434] lstrcmpW (lpString1="nl-NL", lpString2="..") returned 1 [0206.434] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0206.434] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d57c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="pl-PL", cAlternateFileName="")) returned 1 [0206.434] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0206.434] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x2188c8 [0206.434] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0206.434] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219058 | out: hHeap=0x1f0000) returned 1 [0206.434] lstrcmpW (lpString1="pl-PL", lpString2=".") returned 1 [0206.435] lstrcmpW (lpString1="pl-PL", lpString2="..") returned 1 [0206.435] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f10 [0206.435] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d988, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="pt-BR", cAlternateFileName="")) returned 1 [0206.435] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21ff68 [0206.435] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x2191b8 [0206.435] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ff68 | out: hHeap=0x1f0000) returned 1 [0206.435] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2188c8 | out: hHeap=0x1f0000) returned 1 [0206.435] lstrcmpW (lpString1="pt-BR", lpString2=".") returned 1 [0206.435] lstrcmpW (lpString1="pt-BR", lpString2="..") returned 1 [0206.435] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3f0) returned 0x234d00 [0206.435] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212c68 [0206.435] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25ffe8 | out: hHeap=0x1f0000) returned 1 [0206.435] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ddb8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="pt-PT", cAlternateFileName="")) returned 1 [0206.435] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0206.435] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218608 [0206.435] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0206.435] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2191b8 | out: hHeap=0x1f0000) returned 1 [0206.436] lstrcmpW (lpString1="pt-PT", lpString2=".") returned 1 [0206.436] lstrcmpW (lpString1="pt-PT", lpString2="..") returned 1 [0206.436] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2135f8 [0206.436] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e0f5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="ro-RO", cAlternateFileName="")) returned 1 [0206.436] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0206.436] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218fa8 [0206.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0206.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218608 | out: hHeap=0x1f0000) returned 1 [0206.436] lstrcmpW (lpString1="ro-RO", lpString2=".") returned 1 [0206.436] lstrcmpW (lpString1="ro-RO", lpString2="..") returned 1 [0206.436] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213680 [0206.436] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e38953f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e38953f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e38953f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2b600, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="rtscom.dll", cAlternateFileName="")) returned 1 [0206.436] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260888 [0206.436] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0206.436] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218768 [0206.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0206.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218fa8 | out: hHeap=0x1f0000) returned 1 [0206.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0206.437] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\rtscom.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\rtscom.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0206.438] GetLastError () returned 0x5 [0206.438] GetLastError () returned 0x5 [0206.439] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e4d1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="ru-RU", cAlternateFileName="")) returned 1 [0206.439] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0206.439] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219318 [0206.439] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0206.439] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218768 | out: hHeap=0x1f0000) returned 1 [0206.439] lstrcmpW (lpString1="ru-RU", lpString2=".") returned 1 [0206.439] lstrcmpW (lpString1="ru-RU", lpString2="..") returned 1 [0206.439] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0206.439] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe46546cb, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe46546cb, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xb3200, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="ShapeCollector.exe", cAlternateFileName="")) returned 1 [0206.439] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf70 [0206.440] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0206.440] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219478 [0206.440] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0206.440] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219318 | out: hHeap=0x1f0000) returned 1 [0206.440] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf70 | out: hHeap=0x1f0000) returned 1 [0206.440] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ShapeCollector.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\shapecollector.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0206.441] GetLastError () returned 0x5 [0206.441] GetLastError () returned 0x5 [0206.441] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e8a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="sk-SK", cAlternateFileName="")) returned 1 [0206.441] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220058 [0206.441] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ef8 [0206.442] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220058 | out: hHeap=0x1f0000) returned 1 [0206.442] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219478 | out: hHeap=0x1f0000) returned 1 [0206.442] lstrcmpW (lpString1="sk-SK", lpString2=".") returned 1 [0206.442] lstrcmpW (lpString1="sk-SK", lpString2="..") returned 1 [0206.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0206.442] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ec25, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="sl-SI", cAlternateFileName="")) returned 1 [0206.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0206.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218b88 [0206.442] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0206.442] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ef8 | out: hHeap=0x1f0000) returned 1 [0206.442] lstrcmpW (lpString1="sl-SI", lpString2=".") returned 1 [0206.442] lstrcmpW (lpString1="sl-SI", lpString2="..") returned 1 [0206.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2123e8 [0206.442] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c7ae2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="sr-Latn-RS", cAlternateFileName="SR-LAT~1")) returned 1 [0206.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0206.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0206.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218818 [0206.442] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0206.442] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218b88 | out: hHeap=0x1f0000) returned 1 [0206.442] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0206.442] lstrcmpW (lpString1="sr-Latn-RS", lpString2=".") returned 1 [0206.442] lstrcmpW (lpString1="sr-Latn-RS", lpString2="..") returned 1 [0206.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212140 [0206.442] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c820e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="sv-SE", cAlternateFileName="")) returned 1 [0206.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0206.443] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219268 [0206.443] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0206.443] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218818 | out: hHeap=0x1f0000) returned 1 [0206.443] lstrcmpW (lpString1="sv-SE", lpString2=".") returned 1 [0206.443] lstrcmpW (lpString1="sv-SE", lpString2="..") returned 1 [0206.443] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212470 [0206.443] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d14d081, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe467a929, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe467a929, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xa400, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="TabIpsps.dll", cAlternateFileName="")) returned 1 [0206.443] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260658 [0206.443] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0206.443] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218608 [0206.443] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0206.443] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219268 | out: hHeap=0x1f0000) returned 1 [0206.443] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260658 | out: hHeap=0x1f0000) returned 1 [0206.443] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\TabIpsps.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabipsps.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0206.444] GetLastError () returned 0x5 [0206.444] GetLastError () returned 0x5 [0206.444] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463d4edd, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x779da8e5, ftLastAccessTime.dwHighDateTime=0x1d2fa0a, ftLastWriteTime.dwLowDateTime=0x463d4edd, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x3e9600, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="tabskb.dll", cAlternateFileName="")) returned 1 [0206.444] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0206.444] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0206.444] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x2191b8 [0206.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0206.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218608 | out: hHeap=0x1f0000) returned 1 [0206.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0206.445] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\tabskb.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabskb.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0206.445] GetLastError () returned 0x5 [0206.445] GetLastError () returned 0x5 [0206.445] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1a8750a, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1a8750a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x5f780, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="TabTip.exe", cAlternateFileName="")) returned 1 [0206.445] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2607e8 [0206.445] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0206.445] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218fa8 [0206.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0206.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2191b8 | out: hHeap=0x1f0000) returned 1 [0206.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607e8 | out: hHeap=0x1f0000) returned 1 [0206.446] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\TabTip.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabtip.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0206.446] GetLastError () returned 0x5 [0206.446] GetLastError () returned 0x5 [0206.446] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8602, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="th-TH", cAlternateFileName="")) returned 1 [0206.446] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0206.446] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218608 [0206.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0206.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218fa8 | out: hHeap=0x1f0000) returned 1 [0206.446] lstrcmpW (lpString1="th-TH", lpString2=".") returned 1 [0206.446] lstrcmpW (lpString1="th-TH", lpString2="..") returned 1 [0206.447] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d00 [0206.447] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1aad768, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1aad768, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x109400, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="TipRes.dll", cAlternateFileName="")) returned 1 [0206.447] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0206.447] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2202b0 [0206.447] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218978 [0206.447] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2202b0 | out: hHeap=0x1f0000) returned 1 [0206.447] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218608 | out: hHeap=0x1f0000) returned 1 [0206.447] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0206.447] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\TipRes.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipres.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0206.448] GetLastError () returned 0x5 [0206.448] GetLastError () returned 0x5 [0206.449] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x5600, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="tipresx.dll", cAlternateFileName="")) returned 1 [0206.449] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0206.449] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2202b0 [0206.449] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ef8 [0206.449] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2202b0 | out: hHeap=0x1f0000) returned 1 [0206.449] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218978 | out: hHeap=0x1f0000) returned 1 [0206.449] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0206.449] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\tipresx.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipresx.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0206.449] GetLastError () returned 0x5 [0206.449] GetLastError () returned 0x5 [0206.449] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79680792, ftCreationTime.dwHighDateTime=0x1d32794, ftLastAccessTime.dwLowDateTime=0x79680792, ftLastAccessTime.dwHighDateTime=0x1d32794, ftLastWriteTime.dwLowDateTime=0x79680792, ftLastWriteTime.dwHighDateTime=0x1d32794, nFileSizeHigh=0x0, nFileSizeLow=0x101200, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="tipskins.dll", cAlternateFileName="")) returned 1 [0206.449] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260900 [0206.449] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fef0 [0206.449] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219058 [0206.449] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fef0 | out: hHeap=0x1f0000) returned 1 [0206.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ef8 | out: hHeap=0x1f0000) returned 1 [0206.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260900 | out: hHeap=0x1f0000) returned 1 [0206.450] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\tipskins.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipskins.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0206.450] GetLastError () returned 0x5 [0206.450] GetLastError () returned 0x5 [0206.450] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7965a52d, ftCreationTime.dwHighDateTime=0x1d32794, ftLastAccessTime.dwLowDateTime=0x7965a52d, ftLastAccessTime.dwHighDateTime=0x1d32794, ftLastWriteTime.dwLowDateTime=0x7965a52d, ftLastWriteTime.dwHighDateTime=0x1d32794, nFileSizeHigh=0x0, nFileSizeLow=0x9e1a0, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="tiptsf.dll", cAlternateFileName="")) returned 1 [0206.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0206.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0206.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ce8 [0206.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0206.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219058 | out: hHeap=0x1f0000) returned 1 [0206.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0206.450] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\tiptsf.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tiptsf.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0206.451] GetLastError () returned 0x5 [0206.451] GetLastError () returned 0x5 [0206.451] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463d4edd, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x6ebfe576, ftLastAccessTime.dwHighDateTime=0x1d2fa0a, ftLastWriteTime.dwLowDateTime=0x463d4edd, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x17a00, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="tpcps.dll", cAlternateFileName="")) returned 1 [0206.451] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609a0 [0206.451] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220490 [0206.451] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218d98 [0206.451] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220490 | out: hHeap=0x1f0000) returned 1 [0206.451] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ce8 | out: hHeap=0x1f0000) returned 1 [0206.451] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0206.451] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\tpcps.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tpcps.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0206.452] GetLastError () returned 0x5 [0206.452] GetLastError () returned 0x5 [0206.452] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c896f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="tr-TR", cAlternateFileName="")) returned 1 [0206.452] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fa40 [0206.452] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218818 [0206.452] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fa40 | out: hHeap=0x1f0000) returned 1 [0206.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218d98 | out: hHeap=0x1f0000) returned 1 [0206.453] lstrcmpW (lpString1="tr-TR", lpString2=".") returned 1 [0206.453] lstrcmpW (lpString1="tr-TR", lpString2="..") returned 1 [0206.453] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211bf0 [0206.453] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8ed8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="uk-UA", cAlternateFileName="")) returned 1 [0206.453] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2202b0 [0206.453] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ce8 [0206.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2202b0 | out: hHeap=0x1f0000) returned 1 [0206.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218818 | out: hHeap=0x1f0000) returned 1 [0206.453] lstrcmpW (lpString1="uk-UA", lpString2=".") returned 1 [0206.453] lstrcmpW (lpString1="uk-UA", lpString2="..") returned 1 [0206.453] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211fa8 [0206.453] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c93df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="zh-CN", cAlternateFileName="")) returned 1 [0206.453] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0206.453] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218818 [0206.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0206.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ce8 | out: hHeap=0x1f0000) returned 1 [0206.453] lstrcmpW (lpString1="zh-CN", lpString2=".") returned 1 [0206.453] lstrcmpW (lpString1="zh-CN", lpString2="..") returned 1 [0206.453] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212608 [0206.454] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c97fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="zh-TW", cAlternateFileName="")) returned 1 [0206.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0206.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219318 [0206.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0206.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218818 | out: hHeap=0x1f0000) returned 1 [0206.454] lstrcmpW (lpString1="zh-TW", lpString2=".") returned 1 [0206.454] lstrcmpW (lpString1="zh-TW", lpString2="..") returned 1 [0206.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212938 [0206.454] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c97fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="zh-TW", cAlternateFileName="")) returned 0 [0206.454] FindClose (in: hFindFile=0x24ec80 | out: hFindFile=0x24ec80) returned 1 [0206.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234740 [0206.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260658 [0206.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2276b8 [0206.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0206.455] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\*", lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05532b6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ea40 [0206.456] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212718 [0206.456] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0206.456] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0206.457] FindNextFileW (in: hFindFile=0x24ea40, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05532b6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0206.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211ae0 [0206.457] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212718 | out: hHeap=0x1f0000) returned 1 [0206.457] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0206.457] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0206.457] FindNextFileW (in: hFindFile=0x24ea40, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0206.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260888 [0206.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212250 [0206.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0206.457] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212250 | out: hHeap=0x1f0000) returned 1 [0206.457] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211ae0 | out: hHeap=0x1f0000) returned 1 [0206.457] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0206.457] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ar-sa\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0206.459] GetLastError () returned 0x5 [0206.459] GetLastError () returned 0x5 [0206.459] FindNextFileW (in: hFindFile=0x24ea40, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0206.459] FindClose (in: hFindFile=0x24ea40 | out: hFindFile=0x24ea40) returned 1 [0206.459] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0206.459] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2276b8 | out: hHeap=0x1f0000) returned 1 [0206.460] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260658 | out: hHeap=0x1f0000) returned 1 [0206.460] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234740 | out: hHeap=0x1f0000) returned 1 [0206.460] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346b0 [0206.460] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0206.460] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x227058 [0206.460] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2120b8 [0206.460] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\*", lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0553f37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e880 [0206.460] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211e10 [0206.460] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2120b8 | out: hHeap=0x1f0000) returned 1 [0206.460] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0206.461] FindNextFileW (in: hFindFile=0x24e880, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0553f37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0206.461] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212718 [0206.461] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e10 | out: hHeap=0x1f0000) returned 1 [0206.461] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0206.461] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0206.461] FindNextFileW (in: hFindFile=0x24e880, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0206.461] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260900 [0206.461] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d88 [0206.461] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0206.461] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d88 | out: hHeap=0x1f0000) returned 1 [0206.461] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212718 | out: hHeap=0x1f0000) returned 1 [0206.461] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260900 | out: hHeap=0x1f0000) returned 1 [0206.462] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\bg-bg\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0206.462] GetLastError () returned 0x5 [0206.462] GetLastError () returned 0x5 [0206.462] FindNextFileW (in: hFindFile=0x24e880, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0206.462] FindClose (in: hFindFile=0x24e880 | out: hFindFile=0x24e880) returned 1 [0206.462] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0206.462] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227058 | out: hHeap=0x1f0000) returned 1 [0206.462] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0206.462] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346b0 | out: hHeap=0x1f0000) returned 1 [0206.463] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346b0 [0206.463] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2607c0 [0206.463] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x227058 [0206.463] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212580 [0206.463] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\*", lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0554b83, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24eac0 [0206.463] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0206.463] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212580 | out: hHeap=0x1f0000) returned 1 [0206.463] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0206.463] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0554b83, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0206.463] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211948 [0206.464] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0206.464] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0206.464] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0206.464] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e316e09, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e316e09, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e316e09, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0206.464] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260888 [0206.464] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2120b8 [0206.464] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0206.464] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2120b8 | out: hHeap=0x1f0000) returned 1 [0206.464] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211948 | out: hHeap=0x1f0000) returned 1 [0206.464] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0206.465] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\cs-cz\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0206.465] GetLastError () returned 0x5 [0206.465] GetLastError () returned 0x5 [0206.465] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e316e09, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e316e09, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e316e09, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0206.465] FindClose (in: hFindFile=0x24eac0 | out: hFindFile=0x24eac0) returned 1 [0206.465] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0206.465] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227058 | out: hHeap=0x1f0000) returned 1 [0206.465] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607c0 | out: hHeap=0x1f0000) returned 1 [0206.465] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346b0 | out: hHeap=0x1f0000) returned 1 [0206.465] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346b0 [0206.465] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0206.466] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x227058 [0206.466] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0206.466] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\*", lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05550d5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ebc0 [0206.466] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211948 [0206.466] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0206.466] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0206.466] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05550d5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0206.466] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2120b8 [0206.467] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211948 | out: hHeap=0x1f0000) returned 1 [0206.467] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0206.467] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0206.467] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2f0ba2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2f0ba2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2f0ba2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0206.467] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0206.467] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0206.467] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0206.467] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0206.467] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2120b8 | out: hHeap=0x1f0000) returned 1 [0206.467] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0206.467] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\da-dk\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0206.799] GetLastError () returned 0x5 [0206.799] GetLastError () returned 0x5 [0206.799] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2f0ba2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2f0ba2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2f0ba2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0206.799] FindClose (in: hFindFile=0x24ebc0 | out: hFindFile=0x24ebc0) returned 1 [0206.800] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0206.800] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227058 | out: hHeap=0x1f0000) returned 1 [0206.800] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0206.800] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346b0 | out: hHeap=0x1f0000) returned 1 [0206.800] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234ae8 [0206.800] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0206.800] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2276b8 [0206.800] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212030 [0206.800] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\de-DE\\*", lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0555b2c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ed40 [0206.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2129c0 [0206.802] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212030 | out: hHeap=0x1f0000) returned 1 [0206.802] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0206.802] FindNextFileW (in: hFindFile=0x24ed40, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0555b2c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0206.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211c78 [0206.802] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2129c0 | out: hHeap=0x1f0000) returned 1 [0206.802] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0206.802] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0206.803] FindNextFileW (in: hFindFile=0x24ed40, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2f0ba2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2f0ba2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2f0ba2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0206.803] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0206.803] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2119d0 [0206.803] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0206.803] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2119d0 | out: hHeap=0x1f0000) returned 1 [0206.803] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211c78 | out: hHeap=0x1f0000) returned 1 [0206.803] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0206.803] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\de-DE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\de-de\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0206.804] GetLastError () returned 0x5 [0206.804] GetLastError () returned 0x5 [0206.804] FindNextFileW (in: hFindFile=0x24ed40, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2f0ba2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2f0ba2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2f0ba2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0206.804] FindClose (in: hFindFile=0x24ed40 | out: hFindFile=0x24ed40) returned 1 [0206.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0206.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2276b8 | out: hHeap=0x1f0000) returned 1 [0206.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0206.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234ae8 | out: hHeap=0x1f0000) returned 1 [0206.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234818 [0206.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0206.805] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x226ec0 [0206.805] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211c78 [0206.805] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\el-GR\\*", lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa055662c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e840 [0206.805] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211a58 [0206.805] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211c78 | out: hHeap=0x1f0000) returned 1 [0206.805] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0206.805] FindNextFileW (in: hFindFile=0x24e840, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa055662c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0206.805] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212030 [0206.805] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211a58 | out: hHeap=0x1f0000) returned 1 [0206.805] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0206.805] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0206.805] FindNextFileW (in: hFindFile=0x24e840, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0206.806] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0206.806] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2120b8 [0206.806] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0206.806] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2120b8 | out: hHeap=0x1f0000) returned 1 [0206.806] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212030 | out: hHeap=0x1f0000) returned 1 [0206.806] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0206.806] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\el-GR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\el-gr\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0206.807] GetLastError () returned 0x5 [0206.807] GetLastError () returned 0x5 [0206.807] FindNextFileW (in: hFindFile=0x24e840, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0206.807] FindClose (in: hFindFile=0x24e840 | out: hFindFile=0x24e840) returned 1 [0206.807] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0206.807] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226ec0 | out: hHeap=0x1f0000) returned 1 [0206.807] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0206.807] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234818 | out: hHeap=0x1f0000) returned 1 [0206.807] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346b0 [0206.807] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260658 [0206.807] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2276b8 [0206.807] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211e98 [0206.808] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-GB\\*", lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0557085, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24eac0 [0206.808] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d88 [0206.808] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e98 | out: hHeap=0x1f0000) returned 1 [0206.808] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0206.808] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0557085, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0206.808] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2129c0 [0206.808] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d88 | out: hHeap=0x1f0000) returned 1 [0206.808] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0206.808] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0206.808] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0206.808] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0206.809] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212030 [0206.809] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0206.809] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212030 | out: hHeap=0x1f0000) returned 1 [0206.809] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2129c0 | out: hHeap=0x1f0000) returned 1 [0206.809] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0206.809] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-GB\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-gb\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0206.811] GetLastError () returned 0x5 [0206.811] GetLastError () returned 0x5 [0206.811] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0206.811] FindClose (in: hFindFile=0x24eac0 | out: hFindFile=0x24eac0) returned 1 [0206.811] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0206.811] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2276b8 | out: hHeap=0x1f0000) returned 1 [0206.811] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260658 | out: hHeap=0x1f0000) returned 1 [0206.811] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346b0 | out: hHeap=0x1f0000) returned 1 [0206.812] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234818 [0206.812] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260540 [0206.812] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2276b8 [0206.812] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212718 [0206.812] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\*", lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05dd09d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe8231541, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ed00 [0206.815] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2128b0 [0206.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212718 | out: hHeap=0x1f0000) returned 1 [0206.815] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0206.815] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05dd09d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe8231541, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0206.815] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211ae0 [0206.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2128b0 | out: hHeap=0x1f0000) returned 1 [0206.815] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0206.815] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0206.815] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1a3b058, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1a3b058, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x1b2d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="boxed-correct.avi", cAlternateFileName="")) returned 1 [0206.816] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2f0 [0206.816] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212030 [0206.816] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0206.816] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212030 | out: hHeap=0x1f0000) returned 1 [0206.816] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211ae0 | out: hHeap=0x1f0000) returned 1 [0206.816] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0206.816] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-correct.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0206.818] GetLastError () returned 0x5 [0206.818] GetLastError () returned 0x5 [0206.819] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1a612b1, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1a612b1, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xbf28, dwReserved0=0x0, dwReserved1=0x0, cFileName="boxed-delete.avi", cAlternateFileName="")) returned 1 [0206.819] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2f0 [0206.819] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212030 [0206.819] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0206.819] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212030 | out: hHeap=0x1f0000) returned 1 [0206.819] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0206.819] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0206.819] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-delete.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0206.820] GetLastError () returned 0x5 [0206.820] GetLastError () returned 0x5 [0206.820] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a1d507, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1aad768, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1aad768, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xb61e, dwReserved0=0x0, dwReserved1=0x0, cFileName="boxed-join.avi", cAlternateFileName="")) returned 1 [0206.820] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605e0 [0206.820] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2127a0 [0206.820] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0206.820] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2127a0 | out: hHeap=0x1f0000) returned 1 [0206.820] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0206.820] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605e0 | out: hHeap=0x1f0000) returned 1 [0206.821] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-join.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0206.822] GetLastError () returned 0x5 [0206.822] GetLastError () returned 0x5 [0206.822] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1a8750a, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1a8750a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x148de, dwReserved0=0x0, dwReserved1=0x0, cFileName="boxed-split.avi", cAlternateFileName="")) returned 1 [0206.822] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260798 [0206.822] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211c78 [0206.822] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0206.822] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211c78 | out: hHeap=0x1f0000) returned 1 [0206.823] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0206.823] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260798 | out: hHeap=0x1f0000) returned 1 [0206.823] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-split.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0206.823] GetLastError () returned 0x5 [0206.823] GetLastError () returned 0x5 [0206.824] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1a8750a, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1a8750a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x2bfcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="correct.avi", cAlternateFileName="")) returned 1 [0206.824] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608b0 [0206.824] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2127a0 [0206.824] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0206.824] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2127a0 | out: hHeap=0x1f0000) returned 1 [0206.824] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0206.824] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608b0 | out: hHeap=0x1f0000) returned 1 [0206.824] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\correct.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0206.825] GetLastError () returned 0x5 [0206.825] GetLastError () returned 0x5 [0206.825] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1a612b1, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1a612b1, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x32e18, dwReserved0=0x0, dwReserved1=0x0, cFileName="delete.avi", cAlternateFileName="")) returned 1 [0206.825] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260658 [0206.825] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212030 [0206.825] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0206.825] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212030 | out: hHeap=0x1f0000) returned 1 [0206.825] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0206.825] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260658 | out: hHeap=0x1f0000) returned 1 [0206.826] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\delete.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0206.826] GetLastError () returned 0x5 [0206.826] GetLastError () returned 0x5 [0206.826] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3da3ec5f, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7bf3d600, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="FlickLearningWizard.exe.mui", cAlternateFileName="")) returned 1 [0206.826] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234ae8 [0206.826] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2129c0 [0206.827] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0206.827] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2129c0 | out: hHeap=0x1f0000) returned 1 [0206.827] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0206.827] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234ae8 | out: hHeap=0x1f0000) returned 1 [0206.827] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\FlickLearningWizard.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\flicklearningwizard.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0206.828] GetLastError () returned 0x5 [0206.828] GetLastError () returned 0x5 [0206.828] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dab1374, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7e563000, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkObj.dll.mui", cAlternateFileName="")) returned 1 [0206.828] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0206.828] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2120b8 [0206.828] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0206.828] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2120b8 | out: hHeap=0x1f0000) returned 1 [0206.828] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0206.828] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0206.829] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InkObj.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inkobj.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0206.830] GetLastError () returned 0x5 [0206.830] GetLastError () returned 0x5 [0206.830] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d9f27a8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7f875d00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="InputPersonalization.exe.mui", cAlternateFileName="")) returned 1 [0206.830] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234aa0 [0206.830] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0206.830] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0206.830] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0206.830] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0206.830] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234aa0 | out: hHeap=0x1f0000) returned 1 [0206.831] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InputPersonalization.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inputpersonalization.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0206.831] GetLastError () returned 0x5 [0206.831] GetLastError () returned 0x5 [0206.831] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d9f27a8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7f875d00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x5a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPSEventLogMsg.dll.mui", cAlternateFileName="")) returned 1 [0206.831] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2f0 [0206.831] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212718 [0206.831] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0206.831] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212718 | out: hHeap=0x1f0000) returned 1 [0206.831] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0206.831] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0206.832] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IPSEventLogMsg.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ipseventlogmsg.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0206.833] GetLastError () returned 0x5 [0206.833] GetLastError () returned 0x5 [0206.833] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3da18a06, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x80b88a00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IpsMigrationPlugin.dll.mui", cAlternateFileName="")) returned 1 [0206.833] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346b0 [0206.833] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211e98 [0206.833] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0206.833] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e98 | out: hHeap=0x1f0000) returned 1 [0206.833] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0206.833] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346b0 | out: hHeap=0x1f0000) returned 1 [0206.834] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IpsMigrationPlugin.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ipsmigrationplugin.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0206.834] GetLastError () returned 0x5 [0206.834] GetLastError () returned 0x5 [0206.834] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a1d507, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1af9c24, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1af9c24, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x30d3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="join.avi", cAlternateFileName="")) returned 1 [0206.834] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0206.834] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212030 [0206.834] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0206.834] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212030 | out: hHeap=0x1f0000) returned 1 [0206.834] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0206.834] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0206.835] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\join.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0206.835] GetLastError () returned 0x5 [0206.835] GetLastError () returned 0x5 [0206.835] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dad75cd, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7e563000, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0x0, dwReserved1=0x0, cFileName="micaut.dll.mui", cAlternateFileName="")) returned 1 [0206.835] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0206.835] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212250 [0206.835] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0206.836] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212250 | out: hHeap=0x1f0000) returned 1 [0206.836] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0206.836] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0206.836] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\micaut.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\micaut.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0207.127] GetLastError () returned 0x5 [0207.127] GetLastError () returned 0x5 [0207.127] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3da8b116, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7d250300, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mip.exe.mui", cAlternateFileName="")) returned 1 [0207.128] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0207.128] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2128b0 [0207.128] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0207.128] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2128b0 | out: hHeap=0x1f0000) returned 1 [0207.128] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0207.128] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0207.128] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\mip.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\mip.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0207.130] GetLastError () returned 0x5 [0207.130] GetLastError () returned 0x5 [0207.130] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3da18a06, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x80b88a00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mshwLatin.dll.mui", cAlternateFileName="")) returned 1 [0207.130] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf70 [0207.131] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2124f8 [0207.131] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0207.131] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2124f8 | out: hHeap=0x1f0000) returned 1 [0207.131] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0207.131] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf70 | out: hHeap=0x1f0000) returned 1 [0207.131] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\mshwLatin.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\mshwlatin.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0207.132] GetLastError () returned 0x5 [0207.132] GetLastError () returned 0x5 [0207.133] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dab1374, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7e563000, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtscom.dll.mui", cAlternateFileName="")) returned 1 [0207.133] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260518 [0207.133] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2119d0 [0207.133] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0207.133] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2119d0 | out: hHeap=0x1f0000) returned 1 [0207.133] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0207.133] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0207.133] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\rtscom.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\rtscom.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0207.135] GetLastError () returned 0x5 [0207.135] GetLastError () returned 0x5 [0207.135] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3da18a06, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7f875d00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xac00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShapeCollector.exe.mui", cAlternateFileName="")) returned 1 [0207.135] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf70 [0207.135] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2124f8 [0207.135] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0207.135] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2124f8 | out: hHeap=0x1f0000) returned 1 [0207.135] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0207.135] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf70 | out: hHeap=0x1f0000) returned 1 [0207.136] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\ShapeCollector.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\shapecollector.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0207.137] GetLastError () returned 0x5 [0207.137] GetLastError () returned 0x5 [0207.137] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1a8750a, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1a8750a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x2c6cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="split.avi", cAlternateFileName="")) returned 1 [0207.137] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0207.137] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2127a0 [0207.137] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0207.137] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2127a0 | out: hHeap=0x1f0000) returned 1 [0207.137] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0207.137] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0207.138] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\split.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0207.138] GetLastError () returned 0x5 [0207.138] GetLastError () returned 0x5 [0207.138] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dad75cd, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7e563000, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="tabskb.dll.mui", cAlternateFileName="")) returned 1 [0207.138] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0207.138] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212580 [0207.138] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0207.138] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212580 | out: hHeap=0x1f0000) returned 1 [0207.138] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0207.138] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0207.139] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\tabskb.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tabskb.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0207.140] GetLastError () returned 0x5 [0207.140] GetLastError () returned 0x5 [0207.140] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3da8b116, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7d250300, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TabTip.exe.mui", cAlternateFileName="")) returned 1 [0207.140] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0207.140] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211e10 [0207.140] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0207.140] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e10 | out: hHeap=0x1f0000) returned 1 [0207.140] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0207.140] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0207.141] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TabTip.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tabtip.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0207.141] GetLastError () returned 0x5 [0207.141] GetLastError () returned 0x5 [0207.141] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ffe6194, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7c896e00, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0x6200, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipRes.dll.mui", cAlternateFileName="")) returned 1 [0207.141] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0207.141] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0207.141] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0207.141] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0207.141] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0207.141] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0207.172] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TipRes.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipres.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0207.174] GetLastError () returned 0x5 [0207.174] GetLastError () returned 0x5 [0207.174] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0207.174] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2607e8 [0207.174] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2124f8 [0207.174] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0207.174] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2124f8 | out: hHeap=0x1f0000) returned 1 [0207.174] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0207.175] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607e8 | out: hHeap=0x1f0000) returned 1 [0207.175] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0207.175] GetLastError () returned 0x5 [0207.175] GetLastError () returned 0x5 [0207.175] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dad75cd, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7d250300, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipTsf.dll.mui", cAlternateFileName="")) returned 1 [0207.175] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0207.175] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211b68 [0207.175] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0207.175] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b68 | out: hHeap=0x1f0000) returned 1 [0207.176] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0207.176] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0207.176] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TipTsf.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tiptsf.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0207.176] GetLastError () returned 0x5 [0207.176] GetLastError () returned 0x5 [0207.176] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dad75cd, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7d250300, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipTsf.dll.mui", cAlternateFileName="")) returned 0 [0207.176] FindClose (in: hFindFile=0x24ed00 | out: hFindFile=0x24ed00) returned 1 [0207.178] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0207.178] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2276b8 | out: hHeap=0x1f0000) returned 1 [0207.178] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0207.178] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234818 | out: hHeap=0x1f0000) returned 1 [0207.178] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234aa0 [0207.178] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260540 [0207.178] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2271f0 [0207.178] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2124f8 [0207.178] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\es-ES\\*", lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05ddf5c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ed00 [0207.180] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212360 [0207.180] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2124f8 | out: hHeap=0x1f0000) returned 1 [0207.180] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0207.180] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05ddf5c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0207.180] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211c78 [0207.180] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212360 | out: hHeap=0x1f0000) returned 1 [0207.180] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0207.180] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0207.180] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0207.180] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260658 [0207.180] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212030 [0207.180] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0207.181] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212030 | out: hHeap=0x1f0000) returned 1 [0207.181] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211c78 | out: hHeap=0x1f0000) returned 1 [0207.181] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260658 | out: hHeap=0x1f0000) returned 1 [0207.181] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\es-ES\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-es\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0207.181] GetLastError () returned 0x5 [0207.181] GetLastError () returned 0x5 [0207.181] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0207.181] FindClose (in: hFindFile=0x24ed00 | out: hFindFile=0x24ed00) returned 1 [0207.182] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0207.182] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2271f0 | out: hHeap=0x1f0000) returned 1 [0207.182] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0207.182] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234aa0 | out: hHeap=0x1f0000) returned 1 [0207.182] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234980 [0207.182] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605e0 [0207.182] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2276b8 [0207.182] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0207.182] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\es-MX\\*", lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05dea14, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24eac0 [0207.182] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211e10 [0207.183] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0207.183] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0207.183] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05dea14, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0207.183] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2119d0 [0207.183] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e10 | out: hHeap=0x1f0000) returned 1 [0207.183] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0207.183] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0207.183] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2a46df, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2a46df, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2a46df, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0207.183] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0207.183] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212030 [0207.183] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0207.183] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212030 | out: hHeap=0x1f0000) returned 1 [0207.183] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2119d0 | out: hHeap=0x1f0000) returned 1 [0207.184] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0207.184] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\es-MX\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-mx\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0207.184] GetLastError () returned 0x5 [0207.184] GetLastError () returned 0x5 [0207.184] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2a46df, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2a46df, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2a46df, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0207.184] FindClose (in: hFindFile=0x24eac0 | out: hFindFile=0x24eac0) returned 1 [0207.185] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0207.185] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2276b8 | out: hHeap=0x1f0000) returned 1 [0207.185] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605e0 | out: hHeap=0x1f0000) returned 1 [0207.185] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234980 | out: hHeap=0x1f0000) returned 1 [0207.185] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234788 [0207.185] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2607e8 [0207.185] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x227058 [0207.185] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2124f8 [0207.185] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\et-EE\\*", lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05df011, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ea80 [0207.185] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211a58 [0207.185] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2124f8 | out: hHeap=0x1f0000) returned 1 [0207.185] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0207.186] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05df011, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0207.186] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212030 [0207.186] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211a58 | out: hHeap=0x1f0000) returned 1 [0207.186] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0207.186] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0207.186] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0207.186] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0207.186] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d88 [0207.186] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0207.186] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d88 | out: hHeap=0x1f0000) returned 1 [0207.186] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212030 | out: hHeap=0x1f0000) returned 1 [0207.186] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0207.187] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\et-EE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\et-ee\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0207.187] GetLastError () returned 0x5 [0207.187] GetLastError () returned 0x5 [0207.187] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0207.187] FindClose (in: hFindFile=0x24ea80 | out: hFindFile=0x24ea80) returned 1 [0207.187] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0207.187] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227058 | out: hHeap=0x1f0000) returned 1 [0207.187] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607e8 | out: hHeap=0x1f0000) returned 1 [0207.187] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234788 | out: hHeap=0x1f0000) returned 1 [0207.187] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2349c8 [0207.187] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2607c0 [0207.187] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x227058 [0207.188] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2127a0 [0207.188] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fi-FI\\*", lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05df7b6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24eb40 [0207.188] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212360 [0207.188] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2127a0 | out: hHeap=0x1f0000) returned 1 [0207.188] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0207.188] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05df7b6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0207.188] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2127a0 [0207.188] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212360 | out: hHeap=0x1f0000) returned 1 [0207.188] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0207.188] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0207.188] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e100c60, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e100c60, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e100c60, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0207.188] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0207.189] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212250 [0207.189] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0207.189] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212250 | out: hHeap=0x1f0000) returned 1 [0207.189] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2127a0 | out: hHeap=0x1f0000) returned 1 [0207.189] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0207.189] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fi-FI\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fi-fi\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0207.190] GetLastError () returned 0x5 [0207.191] GetLastError () returned 0x5 [0207.191] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e100c60, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e100c60, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e100c60, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0207.191] FindClose (in: hFindFile=0x24eb40 | out: hFindFile=0x24eb40) returned 1 [0207.191] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0207.191] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227058 | out: hHeap=0x1f0000) returned 1 [0207.191] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607c0 | out: hHeap=0x1f0000) returned 1 [0207.191] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2349c8 | out: hHeap=0x1f0000) returned 1 [0207.191] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234818 [0207.191] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260770 [0207.191] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2271f0 [0207.191] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211c78 [0207.191] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fr-CA\\*", lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0635c03, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24eb00 [0207.193] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2120b8 [0207.193] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211c78 | out: hHeap=0x1f0000) returned 1 [0207.193] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0207.193] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0635c03, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0207.193] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211948 [0207.193] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2120b8 | out: hHeap=0x1f0000) returned 1 [0207.193] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0207.193] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0207.193] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e126ecb, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e126ecb, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e126ecb, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0207.193] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605e0 [0207.193] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211e10 [0207.193] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0207.193] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e10 | out: hHeap=0x1f0000) returned 1 [0207.193] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211948 | out: hHeap=0x1f0000) returned 1 [0207.193] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605e0 | out: hHeap=0x1f0000) returned 1 [0207.194] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fr-CA\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fr-ca\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0207.462] GetLastError () returned 0x5 [0207.462] GetLastError () returned 0x5 [0207.462] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e126ecb, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e126ecb, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e126ecb, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0207.462] FindClose (in: hFindFile=0x24eb00 | out: hFindFile=0x24eb00) returned 1 [0207.463] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0207.463] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2271f0 | out: hHeap=0x1f0000) returned 1 [0207.463] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0207.463] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234818 | out: hHeap=0x1f0000) returned 1 [0207.463] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2349c8 [0207.463] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260540 [0207.463] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x227058 [0207.463] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d88 [0207.463] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fr-FR\\*", lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06369df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e9c0 [0207.464] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2129c0 [0207.464] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d88 | out: hHeap=0x1f0000) returned 1 [0207.464] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0207.464] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06369df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0207.464] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211948 [0207.464] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2129c0 | out: hHeap=0x1f0000) returned 1 [0207.464] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0207.464] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0207.464] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e100c60, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e100c60, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e100c60, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0207.464] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260888 [0207.464] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212030 [0207.464] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0207.464] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212030 | out: hHeap=0x1f0000) returned 1 [0207.464] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211948 | out: hHeap=0x1f0000) returned 1 [0207.465] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0207.465] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fr-FR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fr-fr\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0207.466] GetLastError () returned 0x5 [0207.466] GetLastError () returned 0x5 [0207.466] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e100c60, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e100c60, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e100c60, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0207.467] FindClose (in: hFindFile=0x24e9c0 | out: hFindFile=0x24e9c0) returned 1 [0207.467] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0207.467] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227058 | out: hHeap=0x1f0000) returned 1 [0207.467] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0207.467] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2349c8 | out: hHeap=0x1f0000) returned 1 [0207.467] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2344b8 [0207.467] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0207.467] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2271f0 [0207.468] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0207.468] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\*", lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0637839, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ec80 [0207.471] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0207.471] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0207.471] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0207.471] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0637839, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0207.471] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0207.471] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0207.471] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0207.471] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0207.472] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0638633, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="auxpad", cAlternateFileName="")) returned 1 [0207.472] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0207.472] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x2350f8 [0207.472] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0207.472] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0207.472] lstrcmpW (lpString1="auxpad", lpString2=".") returned 1 [0207.472] lstrcmpW (lpString1="auxpad", lpString2="..") returned 1 [0207.472] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x205330 [0207.472] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a038 [0207.472] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="auxpad.xml", cAlternateFileName="")) returned 1 [0207.472] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260888 [0207.473] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0207.473] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x2230c8 [0207.473] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0207.473] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2350f8 | out: hHeap=0x1f0000) returned 1 [0207.473] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0207.473] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0207.474] GetLastError () returned 0x5 [0207.475] GetLastError () returned 0x5 [0207.475] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0638c00, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="insert", cAlternateFileName="")) returned 1 [0207.475] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0207.475] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x2350f8 [0207.475] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0207.475] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2230c8 | out: hHeap=0x1f0000) returned 1 [0207.475] lstrcmpW (lpString1="insert", lpString2=".") returned 1 [0207.475] lstrcmpW (lpString1="insert", lpString2="..") returned 1 [0207.475] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0207.475] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21ab60 [0207.476] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205330 | out: hHeap=0x1f0000) returned 1 [0207.476] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="insert.xml", cAlternateFileName="")) returned 1 [0207.476] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260658 [0207.476] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0207.476] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x2230c8 [0207.476] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0207.476] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2350f8 | out: hHeap=0x1f0000) returned 1 [0207.476] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260658 | out: hHeap=0x1f0000) returned 1 [0207.477] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\insert.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0207.478] GetLastError () returned 0x5 [0207.478] GetLastError () returned 0x5 [0207.478] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa063932e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="keypad", cAlternateFileName="")) returned 1 [0207.478] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0207.478] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x2350f8 [0207.478] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0207.479] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2230c8 | out: hHeap=0x1f0000) returned 1 [0207.479] lstrcmpW (lpString1="keypad", lpString2=".") returned 1 [0207.479] lstrcmpW (lpString1="keypad", lpString2="..") returned 1 [0207.479] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x48) returned 0x225e28 [0207.479] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a0e0 [0207.479] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0207.479] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="keypad.xml", cAlternateFileName="")) returned 1 [0207.479] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605e0 [0207.479] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0207.479] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x2230c8 [0207.479] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0207.479] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2350f8 | out: hHeap=0x1f0000) returned 1 [0207.479] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605e0 | out: hHeap=0x1f0000) returned 1 [0207.480] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0207.481] GetLastError () returned 0x5 [0207.481] GetLastError () returned 0x5 [0207.481] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cd023, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="main", cAlternateFileName="")) returned 1 [0207.481] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0207.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2230c8 | out: hHeap=0x1f0000) returned 1 [0207.481] lstrcmpW (lpString1="main", lpString2=".") returned 1 [0207.481] lstrcmpW (lpString1="main", lpString2="..") returned 1 [0207.481] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2362c8 [0207.481] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0207.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225e28 | out: hHeap=0x1f0000) returned 1 [0207.481] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xadda, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.xml", cAlternateFileName="")) returned 1 [0207.481] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0207.482] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0207.482] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x2350f8 [0207.482] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0207.482] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0207.482] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0207.482] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0207.483] GetLastError () returned 0x5 [0207.483] GetLastError () returned 0x5 [0207.483] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cdb88, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskclearui", cAlternateFileName="OSKCLE~1")) returned 1 [0207.483] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0207.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0207.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x2230c8 [0207.484] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0207.484] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2350f8 | out: hHeap=0x1f0000) returned 1 [0207.484] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0207.484] lstrcmpW (lpString1="oskclearui", lpString2=".") returned 1 [0207.484] lstrcmpW (lpString1="oskclearui", lpString2="..") returned 1 [0207.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0207.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219ee8 [0207.484] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2362c8 | out: hHeap=0x1f0000) returned 1 [0207.484] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskclearui.xml", cAlternateFileName="")) returned 1 [0207.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608b0 [0207.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0207.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x2350f8 [0207.484] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0207.484] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2230c8 | out: hHeap=0x1f0000) returned 1 [0207.485] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608b0 | out: hHeap=0x1f0000) returned 1 [0207.485] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskclearui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0207.486] GetLastError () returned 0x5 [0207.486] GetLastError () returned 0x5 [0207.486] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ce328, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskmenu", cAlternateFileName="")) returned 1 [0207.486] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0207.486] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x2230c8 [0207.486] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0207.486] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2350f8 | out: hHeap=0x1f0000) returned 1 [0207.486] lstrcmpW (lpString1="oskmenu", lpString2=".") returned 1 [0207.486] lstrcmpW (lpString1="oskmenu", lpString2="..") returned 1 [0207.486] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21aab8 [0207.486] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3fbc74, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskmenu.xml", cAlternateFileName="")) returned 1 [0207.487] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260888 [0207.487] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0207.487] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x2350f8 [0207.487] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0207.487] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2230c8 | out: hHeap=0x1f0000) returned 1 [0207.487] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0207.487] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0207.488] GetLastError () returned 0x5 [0207.488] GetLastError () returned 0x5 [0207.488] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ce7a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknav", cAlternateFileName="")) returned 1 [0207.488] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0207.489] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x2230c8 [0207.489] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0207.489] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2350f8 | out: hHeap=0x1f0000) returned 1 [0207.489] lstrcmpW (lpString1="osknav", lpString2=".") returned 1 [0207.489] lstrcmpW (lpString1="osknav", lpString2="..") returned 1 [0207.489] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd8) returned 0x2350f8 [0207.489] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219c48 [0207.489] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0207.489] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3fbc74, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknav.xml", cAlternateFileName="")) returned 1 [0207.489] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260658 [0207.489] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0207.489] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x264c08 [0207.489] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0207.489] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2230c8 | out: hHeap=0x1f0000) returned 1 [0207.489] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260658 | out: hHeap=0x1f0000) returned 1 [0207.490] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknav.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0207.490] GetLastError () returned 0x5 [0207.490] GetLastError () returned 0x5 [0207.490] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ceb7f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknumpad", cAlternateFileName="OSKNUM~1")) returned 1 [0207.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605e0 [0207.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0207.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x2230c8 [0207.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0207.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x264c08 | out: hHeap=0x1f0000) returned 1 [0207.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605e0 | out: hHeap=0x1f0000) returned 1 [0207.491] lstrcmpW (lpString1="osknumpad", lpString2=".") returned 1 [0207.491] lstrcmpW (lpString1="osknumpad", lpString2="..") returned 1 [0207.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a188 [0207.491] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknumpad.xml", cAlternateFileName="")) returned 1 [0207.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608b0 [0207.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0207.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x264c08 [0207.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0207.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2230c8 | out: hHeap=0x1f0000) returned 1 [0207.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608b0 | out: hHeap=0x1f0000) returned 1 [0207.492] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0207.494] GetLastError () returned 0x5 [0207.494] GetLastError () returned 0x5 [0207.494] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cef41, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskpred", cAlternateFileName="")) returned 1 [0207.494] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0207.494] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x2230c8 [0207.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0207.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x264c08 | out: hHeap=0x1f0000) returned 1 [0207.495] lstrcmpW (lpString1="oskpred", lpString2=".") returned 1 [0207.495] lstrcmpW (lpString1="oskpred", lpString2="..") returned 1 [0207.495] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a578 [0207.495] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskpred.xml", cAlternateFileName="")) returned 1 [0207.495] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260888 [0207.495] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0207.495] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x264c08 [0207.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0207.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2230c8 | out: hHeap=0x1f0000) returned 1 [0207.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0207.496] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0207.496] GetLastError () returned 0x5 [0207.496] GetLastError () returned 0x5 [0207.496] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cf371, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="symbols", cAlternateFileName="")) returned 1 [0207.497] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0207.497] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x2230c8 [0207.497] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0207.497] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x264c08 | out: hHeap=0x1f0000) returned 1 [0207.497] lstrcmpW (lpString1="symbols", lpString2=".") returned 1 [0207.497] lstrcmpW (lpString1="symbols", lpString2="..") returned 1 [0207.497] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x138) returned 0x264e20 [0207.497] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a2d8 [0207.497] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2350f8 | out: hHeap=0x1f0000) returned 1 [0207.498] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x24f, dwReserved0=0x0, dwReserved1=0x0, cFileName="symbols.xml", cAlternateFileName="")) returned 1 [0207.498] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605e0 [0207.498] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0207.498] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x2350f8 [0207.498] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0207.498] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2230c8 | out: hHeap=0x1f0000) returned 1 [0207.498] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605e0 | out: hHeap=0x1f0000) returned 1 [0207.499] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0207.500] GetLastError () returned 0x5 [0207.500] GetLastError () returned 0x5 [0207.500] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x24f, dwReserved0=0x0, dwReserved1=0x0, cFileName="symbols.xml", cAlternateFileName="")) returned 0 [0207.500] FindClose (in: hFindFile=0x24ec80 | out: hFindFile=0x24ec80) returned 1 [0207.501] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346f8 [0207.501] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260658 [0207.501] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x227058 [0207.501] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a230 [0207.502] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\*", lpFindFileData=0x1cfdc3c | out: lpFindFileData=0x1cfdc3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0638633, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24eac0 [0207.503] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219e40 [0207.503] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a230 | out: hHeap=0x1f0000) returned 1 [0207.503] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0207.503] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1cfdc3c | out: lpFindFileData=0x1cfdc3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0638633, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0207.503] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a6c8 [0207.504] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219e40 | out: hHeap=0x1f0000) returned 1 [0207.504] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0207.504] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0207.504] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1cfdc3c | out: lpFindFileData=0x1cfdc3c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x59a, dwReserved0=0x0, dwReserved1=0x0, cFileName="auxbase.xml", cAlternateFileName="")) returned 1 [0207.504] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260888 [0207.504] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a230 [0207.504] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xee) returned 0x264c08 [0207.504] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a230 | out: hHeap=0x1f0000) returned 1 [0207.504] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a6c8 | out: hHeap=0x1f0000) returned 1 [0207.504] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0207.505] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfda04, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0207.739] GetLastError () returned 0x5 [0207.739] GetLastError () returned 0x5 [0207.740] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1cfdc3c | out: lpFindFileData=0x1cfdc3c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x59a, dwReserved0=0x0, dwReserved1=0x0, cFileName="auxbase.xml", cAlternateFileName="")) returned 0 [0207.740] FindClose (in: hFindFile=0x24eac0 | out: hFindFile=0x24eac0) returned 1 [0207.740] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x264c08 | out: hHeap=0x1f0000) returned 1 [0207.740] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227058 | out: hHeap=0x1f0000) returned 1 [0207.740] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260658 | out: hHeap=0x1f0000) returned 1 [0207.741] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346f8 | out: hHeap=0x1f0000) returned 1 [0207.741] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234860 [0207.741] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260798 [0207.741] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x227058 [0207.741] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a8c0 [0207.741] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\*", lpFindFileData=0x1cfdc3c | out: lpFindFileData=0x1cfdc3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0638c00, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e740 [0207.743] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219cf0 [0207.743] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a8c0 | out: hHeap=0x1f0000) returned 1 [0207.743] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0207.743] FindNextFileW (in: hFindFile=0x24e740, lpFindFileData=0x1cfdc3c | out: lpFindFileData=0x1cfdc3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0638c00, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0207.743] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219d98 [0207.743] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219cf0 | out: hHeap=0x1f0000) returned 1 [0207.744] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0207.744] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0207.744] FindNextFileW (in: hFindFile=0x24e740, lpFindFileData=0x1cfdc3c | out: lpFindFileData=0x1cfdc3c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x387, dwReserved0=0x0, dwReserved1=0x0, cFileName="insertbase.xml", cAlternateFileName="")) returned 1 [0207.744] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0207.744] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a380 [0207.744] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xee) returned 0x264c08 [0207.744] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a380 | out: hHeap=0x1f0000) returned 1 [0207.744] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219d98 | out: hHeap=0x1f0000) returned 1 [0207.744] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0207.745] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\insertbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\insert\\insertbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfda04, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0207.746] GetLastError () returned 0x5 [0207.746] GetLastError () returned 0x5 [0207.746] FindNextFileW (in: hFindFile=0x24e740, lpFindFileData=0x1cfdc3c | out: lpFindFileData=0x1cfdc3c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x387, dwReserved0=0x0, dwReserved1=0x0, cFileName="insertbase.xml", cAlternateFileName="")) returned 0 [0207.746] FindClose (in: hFindFile=0x24e740 | out: hFindFile=0x24e740) returned 1 [0207.746] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x264c08 | out: hHeap=0x1f0000) returned 1 [0207.747] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227058 | out: hHeap=0x1f0000) returned 1 [0207.747] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260798 | out: hHeap=0x1f0000) returned 1 [0207.747] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234860 | out: hHeap=0x1f0000) returned 1 [0207.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2348f0 [0207.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260798 [0207.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x227058 [0207.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a380 [0207.747] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\*", lpFindFileData=0x1cfdc3c | out: lpFindFileData=0x1cfdc3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa063932e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e6c0 [0207.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219f90 [0207.748] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a380 | out: hHeap=0x1f0000) returned 1 [0207.748] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0207.748] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1cfdc3c | out: lpFindFileData=0x1cfdc3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa063932e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0207.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a380 [0207.748] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219f90 | out: hHeap=0x1f0000) returned 1 [0207.749] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0207.749] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0207.749] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1cfdc3c | out: lpFindFileData=0x1cfdc3c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x180, dwReserved0=0x0, dwReserved1=0x0, cFileName="ea.xml", cAlternateFileName="")) returned 1 [0207.749] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219d98 [0207.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a380 | out: hHeap=0x1f0000) returned 1 [0207.750] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfda04, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0207.751] GetLastError () returned 0x5 [0207.751] GetLastError () returned 0x5 [0207.751] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1cfdc3c | out: lpFindFileData=0x1cfdc3c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x387, dwReserved0=0x0, dwReserved1=0x0, cFileName="keypadbase.xml", cAlternateFileName="")) returned 1 [0207.752] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0207.752] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a4d0 [0207.752] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xee) returned 0x264c08 [0207.752] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a4d0 | out: hHeap=0x1f0000) returned 1 [0207.752] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219d98 | out: hHeap=0x1f0000) returned 1 [0207.752] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0207.752] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfda04, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0207.753] GetLastError () returned 0x5 [0207.753] GetLastError () returned 0x5 [0207.753] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1cfdc3c | out: lpFindFileData=0x1cfdc3c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x188, dwReserved0=0x0, dwReserved1=0x0, cFileName="kor-kor.xml", cAlternateFileName="")) returned 1 [0207.753] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260658 [0207.753] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a380 [0207.753] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xee) returned 0x220a58 [0207.753] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a380 | out: hHeap=0x1f0000) returned 1 [0207.753] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x264c08 | out: hHeap=0x1f0000) returned 1 [0207.753] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260658 | out: hHeap=0x1f0000) returned 1 [0207.754] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfda04, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0207.754] GetLastError () returned 0x5 [0207.754] GetLastError () returned 0x5 [0207.754] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1cfdc3c | out: lpFindFileData=0x1cfdc3c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x188, dwReserved0=0x0, dwReserved1=0x0, cFileName="kor-kor.xml", cAlternateFileName="")) returned 0 [0207.754] FindClose (in: hFindFile=0x24e6c0 | out: hFindFile=0x24e6c0) returned 1 [0207.755] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220a58 | out: hHeap=0x1f0000) returned 1 [0207.755] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227058 | out: hHeap=0x1f0000) returned 1 [0207.755] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260798 | out: hHeap=0x1f0000) returned 1 [0207.755] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2348f0 | out: hHeap=0x1f0000) returned 1 [0207.755] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234a58 [0207.755] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260798 [0207.755] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x227058 [0207.755] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a6c8 [0207.755] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\*", lpFindFileData=0x1cfdc3c | out: lpFindFileData=0x1cfdc3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cd023, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ec80 [0207.768] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0207.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x264c08 [0207.769] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0207.769] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a6c8 | out: hHeap=0x1f0000) returned 1 [0207.769] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0207.769] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfdc3c | out: lpFindFileData=0x1cfdc3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cd023, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0207.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0207.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x220a58 [0207.769] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0207.769] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x264c08 | out: hHeap=0x1f0000) returned 1 [0207.769] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0207.769] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0207.769] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfdc3c | out: lpFindFileData=0x1cfdc3c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd05, dwReserved0=0x0, dwReserved1=0x0, cFileName="base.xml", cAlternateFileName="")) returned 1 [0207.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0207.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0207.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x264c08 [0207.769] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0207.770] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220a58 | out: hHeap=0x1f0000) returned 1 [0207.770] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0207.770] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfda04, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0207.770] GetLastError () returned 0x5 [0207.771] GetLastError () returned 0x5 [0207.771] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfdc3c | out: lpFindFileData=0x1cfdc3c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xf7, dwReserved0=0x0, dwReserved1=0x0, cFileName="baseAltGr_rtl.xml", cAlternateFileName="")) returned 1 [0207.771] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0207.771] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0207.771] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x220a58 [0207.771] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0207.772] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x264c08 | out: hHeap=0x1f0000) returned 1 [0207.772] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0207.772] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\baseAltGr_rtl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\basealtgr_rtl.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfda04, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0207.774] GetLastError () returned 0x5 [0207.774] GetLastError () returned 0x5 [0207.774] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfdc3c | out: lpFindFileData=0x1cfdc3c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xdc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_altgr.xml", cAlternateFileName="")) returned 1 [0207.774] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260658 [0207.774] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0207.774] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x264c08 [0207.774] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0207.774] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220a58 | out: hHeap=0x1f0000) returned 1 [0207.774] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260658 | out: hHeap=0x1f0000) returned 1 [0207.775] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_altgr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_altgr.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfda04, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0207.775] GetLastError () returned 0x5 [0207.775] GetLastError () returned 0x5 [0207.775] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfdc3c | out: lpFindFileData=0x1cfdc3c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xdc9, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_ca.xml", cAlternateFileName="")) returned 1 [0207.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260540 [0207.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0207.776] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x220a58 [0207.776] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0207.776] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x264c08 | out: hHeap=0x1f0000) returned 1 [0207.776] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0207.776] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_ca.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_ca.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfda04, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0207.776] GetLastError () returned 0x5 [0207.776] GetLastError () returned 0x5 [0207.776] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfdc3c | out: lpFindFileData=0x1cfdc3c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_heb.xml", cAlternateFileName="")) returned 1 [0207.777] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0207.777] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0207.777] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x264c08 [0207.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0207.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220a58 | out: hHeap=0x1f0000) returned 1 [0207.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0207.777] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_heb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_heb.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfda04, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0207.778] GetLastError () returned 0x5 [0207.778] GetLastError () returned 0x5 [0207.779] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfdc3c | out: lpFindFileData=0x1cfdc3c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x324, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_jpn.xml", cAlternateFileName="")) returned 1 [0207.779] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0207.779] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0207.779] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x220a58 [0207.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0207.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x264c08 | out: hHeap=0x1f0000) returned 1 [0207.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0207.779] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_jpn.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_jpn.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfda04, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0207.780] GetLastError () returned 0x5 [0207.780] GetLastError () returned 0x5 [0207.780] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfdc3c | out: lpFindFileData=0x1cfdc3c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_kor.xml", cAlternateFileName="")) returned 1 [0207.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0207.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0207.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x264c08 [0207.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0207.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220a58 | out: hHeap=0x1f0000) returned 1 [0207.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0207.781] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_kor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_kor.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfda04, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0207.781] GetLastError () returned 0x5 [0207.781] GetLastError () returned 0x5 [0207.781] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfdc3c | out: lpFindFileData=0x1cfdc3c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x269, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_rtl.xml", cAlternateFileName="")) returned 1 [0207.781] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260518 [0207.781] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0207.781] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x220a58 [0207.781] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0207.781] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x264c08 | out: hHeap=0x1f0000) returned 1 [0207.781] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0207.782] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_rtl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_rtl.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfda04, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0207.782] GetLastError () returned 0x5 [0207.782] GetLastError () returned 0x5 [0207.782] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfdc3c | out: lpFindFileData=0x1cfdc3c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x40e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp.xml", cAlternateFileName="")) returned 1 [0207.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0207.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0207.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x264c08 [0207.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0207.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220a58 | out: hHeap=0x1f0000) returned 1 [0207.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0207.783] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\ja-jp.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\ja-jp.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfda04, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0207.783] GetLastError () returned 0x5 [0207.783] GetLastError () returned 0x5 [0207.783] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfdc3c | out: lpFindFileData=0x1cfdc3c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3af9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-kr.xml", cAlternateFileName="")) returned 1 [0207.783] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0207.783] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0207.783] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x220a58 [0207.783] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0207.783] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x264c08 | out: hHeap=0x1f0000) returned 1 [0207.783] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0207.784] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\ko-kr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\ko-kr.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfda04, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0207.784] GetLastError () returned 0x5 [0207.784] GetLastError () returned 0x5 [0207.784] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfdc3c | out: lpFindFileData=0x1cfdc3c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x264b, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-changjei.xml", cAlternateFileName="")) returned 1 [0207.784] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0207.784] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0207.784] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x264c08 [0207.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0207.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220a58 | out: hHeap=0x1f0000) returned 1 [0207.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0207.785] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-changjei.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-changjei.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfda04, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0208.091] GetLastError () returned 0x5 [0208.092] GetLastError () returned 0x5 [0208.092] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfdc3c | out: lpFindFileData=0x1cfdc3c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3fbc74, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2b3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-dayi.xml", cAlternateFileName="")) returned 1 [0208.092] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260540 [0208.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0208.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x220a58 [0208.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0208.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x264c08 | out: hHeap=0x1f0000) returned 1 [0208.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0208.095] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-dayi.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-dayi.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfda04, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0208.096] GetLastError () returned 0x5 [0208.096] GetLastError () returned 0x5 [0208.096] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfdc3c | out: lpFindFileData=0x1cfdc3c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2ac3, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-phonetic.xml", cAlternateFileName="")) returned 1 [0208.096] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0208.097] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0208.097] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x264c08 [0208.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0208.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220a58 | out: hHeap=0x1f0000) returned 1 [0208.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0208.097] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfda04, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0208.098] GetLastError () returned 0x5 [0208.098] GetLastError () returned 0x5 [0208.098] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfdc3c | out: lpFindFileData=0x1cfdc3c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2ac3, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-phonetic.xml", cAlternateFileName="")) returned 0 [0208.098] FindClose (in: hFindFile=0x24ec80 | out: hFindFile=0x24ec80) returned 1 [0208.100] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x264c08 | out: hHeap=0x1f0000) returned 1 [0208.100] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227058 | out: hHeap=0x1f0000) returned 1 [0208.100] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260798 | out: hHeap=0x1f0000) returned 1 [0208.100] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234a58 | out: hHeap=0x1f0000) returned 1 [0208.100] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346b0 [0208.100] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0208.100] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x227058 [0208.100] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219cf0 [0208.100] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\*", lpFindFileData=0x1cfdc3c | out: lpFindFileData=0x1cfdc3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cdb88, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e8c0 [0208.100] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a818 [0208.101] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219cf0 | out: hHeap=0x1f0000) returned 1 [0208.101] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0208.101] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1cfdc3c | out: lpFindFileData=0x1cfdc3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cdb88, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0208.101] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a968 [0208.101] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a818 | out: hHeap=0x1f0000) returned 1 [0208.101] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0208.101] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0208.101] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1cfdc3c | out: lpFindFileData=0x1cfdc3c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskclearuibase.xml", cAlternateFileName="")) returned 1 [0208.101] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1ff058 [0208.102] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219cf0 [0208.102] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xee) returned 0x264c08 [0208.102] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219cf0 | out: hHeap=0x1f0000) returned 1 [0208.102] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a968 | out: hHeap=0x1f0000) returned 1 [0208.102] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1ff058 | out: hHeap=0x1f0000) returned 1 [0208.103] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\oskclearuibase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\oskclearuibase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfda04, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0208.103] GetLastError () returned 0x5 [0208.103] GetLastError () returned 0x5 [0208.103] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1cfdc3c | out: lpFindFileData=0x1cfdc3c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskclearuibase.xml", cAlternateFileName="")) returned 0 [0208.103] FindClose (in: hFindFile=0x24e8c0 | out: hFindFile=0x24e8c0) returned 1 [0208.104] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x264c08 | out: hHeap=0x1f0000) returned 1 [0208.104] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227058 | out: hHeap=0x1f0000) returned 1 [0208.104] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0208.104] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346b0 | out: hHeap=0x1f0000) returned 1 [0208.104] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2349c8 [0208.104] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0208.104] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x227058 [0208.104] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a380 [0208.104] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\*", lpFindFileData=0x1cfdc3c | out: lpFindFileData=0x1cfdc3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ce328, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ea80 [0208.107] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a4d0 [0208.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a380 | out: hHeap=0x1f0000) returned 1 [0208.107] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0208.107] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1cfdc3c | out: lpFindFileData=0x1cfdc3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ce328, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0208.108] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21aa10 [0208.108] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a4d0 | out: hHeap=0x1f0000) returned 1 [0208.108] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0208.108] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0208.108] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1cfdc3c | out: lpFindFileData=0x1cfdc3c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskmenubase.xml", cAlternateFileName="")) returned 1 [0208.108] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260798 [0208.108] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a818 [0208.108] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xee) returned 0x264c08 [0208.108] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a818 | out: hHeap=0x1f0000) returned 1 [0208.108] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21aa10 | out: hHeap=0x1f0000) returned 1 [0208.108] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260798 | out: hHeap=0x1f0000) returned 1 [0208.109] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfda04, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0208.109] GetLastError () returned 0x5 [0208.109] GetLastError () returned 0x5 [0208.110] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1cfdc3c | out: lpFindFileData=0x1cfdc3c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskmenubase.xml", cAlternateFileName="")) returned 0 [0208.110] FindClose (in: hFindFile=0x24ea80 | out: hFindFile=0x24ea80) returned 1 [0208.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x264c08 | out: hHeap=0x1f0000) returned 1 [0208.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227058 | out: hHeap=0x1f0000) returned 1 [0208.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0208.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2349c8 | out: hHeap=0x1f0000) returned 1 [0208.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234818 [0208.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260540 [0208.111] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x227058 [0208.111] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a380 [0208.111] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav\\*", lpFindFileData=0x1cfdc3c | out: lpFindFileData=0x1cfdc3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ce7a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e6c0 [0208.111] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a4d0 [0208.111] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a380 | out: hHeap=0x1f0000) returned 1 [0208.111] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0208.112] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1cfdc3c | out: lpFindFileData=0x1cfdc3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ce7a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0208.112] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a818 [0208.112] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a4d0 | out: hHeap=0x1f0000) returned 1 [0208.112] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0208.112] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0208.112] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1cfdc3c | out: lpFindFileData=0x1cfdc3c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x42d, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknavbase.xml", cAlternateFileName="")) returned 1 [0208.112] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0208.112] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219cf0 [0208.112] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xee) returned 0x264c08 [0208.113] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219cf0 | out: hHeap=0x1f0000) returned 1 [0208.113] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a818 | out: hHeap=0x1f0000) returned 1 [0208.113] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0208.113] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav\\osknavbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknav\\osknavbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfda04, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0208.113] GetLastError () returned 0x5 [0208.113] GetLastError () returned 0x5 [0208.114] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1cfdc3c | out: lpFindFileData=0x1cfdc3c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x42d, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknavbase.xml", cAlternateFileName="")) returned 0 [0208.114] FindClose (in: hFindFile=0x24e6c0 | out: hFindFile=0x24e6c0) returned 1 [0208.114] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x264c08 | out: hHeap=0x1f0000) returned 1 [0208.114] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227058 | out: hHeap=0x1f0000) returned 1 [0208.114] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0208.114] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234818 | out: hHeap=0x1f0000) returned 1 [0208.114] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234818 [0208.114] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0208.114] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x227058 [0208.114] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219cf0 [0208.114] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\*", lpFindFileData=0x1cfdc3c | out: lpFindFileData=0x1cfdc3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ceb7f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ea80 [0208.115] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a6c8 [0208.115] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219cf0 | out: hHeap=0x1f0000) returned 1 [0208.115] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0208.115] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1cfdc3c | out: lpFindFileData=0x1cfdc3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ceb7f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0208.115] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219f90 [0208.115] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a6c8 | out: hHeap=0x1f0000) returned 1 [0208.115] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0208.115] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0208.115] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1cfdc3c | out: lpFindFileData=0x1cfdc3c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x73d, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknumpadbase.xml", cAlternateFileName="")) returned 1 [0208.115] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1ff058 [0208.115] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a4d0 [0208.115] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xee) returned 0x264c08 [0208.116] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a4d0 | out: hHeap=0x1f0000) returned 1 [0208.116] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219f90 | out: hHeap=0x1f0000) returned 1 [0208.116] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1ff058 | out: hHeap=0x1f0000) returned 1 [0208.116] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfda04, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0208.116] GetLastError () returned 0x5 [0208.116] GetLastError () returned 0x5 [0208.117] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1cfdc3c | out: lpFindFileData=0x1cfdc3c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x73d, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknumpadbase.xml", cAlternateFileName="")) returned 0 [0208.117] FindClose (in: hFindFile=0x24ea80 | out: hFindFile=0x24ea80) returned 1 [0208.117] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x264c08 | out: hHeap=0x1f0000) returned 1 [0208.117] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227058 | out: hHeap=0x1f0000) returned 1 [0208.117] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0208.117] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234818 | out: hHeap=0x1f0000) returned 1 [0208.117] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234818 [0208.117] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0208.118] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x227058 [0208.118] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a380 [0208.118] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\*", lpFindFileData=0x1cfdc3c | out: lpFindFileData=0x1cfdc3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cef41, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e600 [0208.118] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a8c0 [0208.118] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a380 | out: hHeap=0x1f0000) returned 1 [0208.118] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0208.118] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1cfdc3c | out: lpFindFileData=0x1cfdc3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cef41, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0208.118] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219cf0 [0208.119] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a8c0 | out: hHeap=0x1f0000) returned 1 [0208.119] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0208.119] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0208.119] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1cfdc3c | out: lpFindFileData=0x1cfdc3c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x39c, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskpredbase.xml", cAlternateFileName="")) returned 1 [0208.119] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605b8 [0208.119] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a6c8 [0208.119] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xee) returned 0x264c08 [0208.119] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a6c8 | out: hHeap=0x1f0000) returned 1 [0208.119] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219cf0 | out: hHeap=0x1f0000) returned 1 [0208.119] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0208.120] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfda04, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0208.120] GetLastError () returned 0x5 [0208.120] GetLastError () returned 0x5 [0208.120] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1cfdc3c | out: lpFindFileData=0x1cfdc3c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x39c, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskpredbase.xml", cAlternateFileName="")) returned 0 [0208.120] FindClose (in: hFindFile=0x24e600 | out: hFindFile=0x24e600) returned 1 [0208.120] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x264c08 | out: hHeap=0x1f0000) returned 1 [0208.120] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227058 | out: hHeap=0x1f0000) returned 1 [0208.120] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0208.120] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234818 | out: hHeap=0x1f0000) returned 1 [0208.121] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234a58 [0208.121] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260798 [0208.121] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x227058 [0208.121] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a8c0 [0208.121] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\*", lpFindFileData=0x1cfdc3c | out: lpFindFileData=0x1cfdc3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cf371, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24eb40 [0208.122] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219cf0 [0208.122] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a8c0 | out: hHeap=0x1f0000) returned 1 [0208.123] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0208.123] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x1cfdc3c | out: lpFindFileData=0x1cfdc3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cf371, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0208.123] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a380 [0208.123] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219cf0 | out: hHeap=0x1f0000) returned 1 [0208.123] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0208.123] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0208.123] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x1cfdc3c | out: lpFindFileData=0x1cfdc3c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3fbc74, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ea-sym.xml", cAlternateFileName="")) returned 1 [0208.123] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0208.123] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a770 [0208.123] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xee) returned 0x264c08 [0208.123] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a770 | out: hHeap=0x1f0000) returned 1 [0208.123] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a380 | out: hHeap=0x1f0000) returned 1 [0208.123] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0208.124] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfda04, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0208.124] GetLastError () returned 0x5 [0208.124] GetLastError () returned 0x5 [0208.124] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x1cfdc3c | out: lpFindFileData=0x1cfdc3c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x325, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp-sym.xml", cAlternateFileName="")) returned 1 [0208.124] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0208.124] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a380 [0208.124] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xee) returned 0x220a58 [0208.124] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a380 | out: hHeap=0x1f0000) returned 1 [0208.125] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x264c08 | out: hHeap=0x1f0000) returned 1 [0208.125] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0208.125] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfda04, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0208.125] GetLastError () returned 0x5 [0208.125] GetLastError () returned 0x5 [0208.125] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x1cfdc3c | out: lpFindFileData=0x1cfdc3c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xeef, dwReserved0=0x0, dwReserved1=0x0, cFileName="symbase.xml", cAlternateFileName="")) returned 1 [0208.126] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0208.126] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a4d0 [0208.126] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xee) returned 0x264c08 [0208.126] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a4d0 | out: hHeap=0x1f0000) returned 1 [0208.126] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220a58 | out: hHeap=0x1f0000) returned 1 [0208.126] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0208.126] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfda04, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0208.126] GetLastError () returned 0x5 [0208.126] GetLastError () returned 0x5 [0208.127] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x1cfdc3c | out: lpFindFileData=0x1cfdc3c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xeef, dwReserved0=0x0, dwReserved1=0x0, cFileName="symbase.xml", cAlternateFileName="")) returned 0 [0208.127] FindClose (in: hFindFile=0x24eb40 | out: hFindFile=0x24eb40) returned 1 [0208.127] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x264c08 | out: hHeap=0x1f0000) returned 1 [0208.127] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227058 | out: hHeap=0x1f0000) returned 1 [0208.127] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260798 | out: hHeap=0x1f0000) returned 1 [0208.127] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234a58 | out: hHeap=0x1f0000) returned 1 [0208.127] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2350f8 | out: hHeap=0x1f0000) returned 1 [0208.127] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a038 | out: hHeap=0x1f0000) returned 1 [0208.127] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ab60 | out: hHeap=0x1f0000) returned 1 [0208.127] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a0e0 | out: hHeap=0x1f0000) returned 1 [0208.127] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0208.128] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219ee8 | out: hHeap=0x1f0000) returned 1 [0208.128] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21aab8 | out: hHeap=0x1f0000) returned 1 [0208.128] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219c48 | out: hHeap=0x1f0000) returned 1 [0208.128] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a188 | out: hHeap=0x1f0000) returned 1 [0208.128] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a578 | out: hHeap=0x1f0000) returned 1 [0208.128] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a2d8 | out: hHeap=0x1f0000) returned 1 [0208.128] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x264e20 | out: hHeap=0x1f0000) returned 1 [0208.128] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2271f0 | out: hHeap=0x1f0000) returned 1 [0208.128] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0208.128] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2344b8 | out: hHeap=0x1f0000) returned 1 [0208.128] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346b0 [0208.128] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260798 [0208.128] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x227058 [0208.128] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2127a0 [0208.129] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\he-IL\\*", lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cf9a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ea00 [0208.129] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2129c0 [0208.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2127a0 | out: hHeap=0x1f0000) returned 1 [0208.129] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0208.129] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cf9a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0208.129] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212250 [0208.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2129c0 | out: hHeap=0x1f0000) returned 1 [0208.129] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0208.129] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0208.129] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c3a52f7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3c3a52f7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3c3a52f7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0208.129] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0208.130] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211e98 [0208.130] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0208.130] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e98 | out: hHeap=0x1f0000) returned 1 [0208.130] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212250 | out: hHeap=0x1f0000) returned 1 [0208.130] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0208.130] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\he-IL\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\he-il\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0208.130] GetLastError () returned 0x5 [0208.131] GetLastError () returned 0x5 [0208.131] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c3a52f7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3c3a52f7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3c3a52f7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0208.131] FindClose (in: hFindFile=0x24ea00 | out: hFindFile=0x24ea00) returned 1 [0208.131] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0208.131] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227058 | out: hHeap=0x1f0000) returned 1 [0208.131] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260798 | out: hHeap=0x1f0000) returned 1 [0208.131] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346b0 | out: hHeap=0x1f0000) returned 1 [0208.131] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2348f0 [0208.131] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260658 [0208.131] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x227058 [0208.131] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211a58 [0208.131] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\hr-HR\\*", lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cfce2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e8c0 [0208.132] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0208.132] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211a58 | out: hHeap=0x1f0000) returned 1 [0208.132] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0208.132] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cfce2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0208.132] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2124f8 [0208.132] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0208.132] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0208.132] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0208.133] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c3a52f7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3c3a52f7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3c3a52f7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0208.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260540 [0208.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0208.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0208.535] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0208.536] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2124f8 | out: hHeap=0x1f0000) returned 1 [0208.536] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0208.536] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\hr-HR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hr-hr\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0208.537] GetLastError () returned 0x5 [0208.537] GetLastError () returned 0x5 [0208.537] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c3a52f7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3c3a52f7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3c3a52f7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0208.538] FindClose (in: hFindFile=0x24e8c0 | out: hFindFile=0x24e8c0) returned 1 [0208.538] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0208.538] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227058 | out: hHeap=0x1f0000) returned 1 [0208.538] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260658 | out: hHeap=0x1f0000) returned 1 [0208.538] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2348f0 | out: hHeap=0x1f0000) returned 1 [0208.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234818 [0208.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0208.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x226ec0 [0208.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211948 [0208.539] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\hu-HU\\*", lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06d0656, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e8c0 [0208.540] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211b68 [0208.540] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211948 | out: hHeap=0x1f0000) returned 1 [0208.540] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0208.540] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06d0656, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0208.541] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212718 [0208.541] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b68 | out: hHeap=0x1f0000) returned 1 [0208.541] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0208.541] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0208.541] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c3a52f7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3c3a52f7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3c3a52f7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0208.541] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608b0 [0208.541] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2129c0 [0208.541] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0208.541] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2129c0 | out: hHeap=0x1f0000) returned 1 [0208.541] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212718 | out: hHeap=0x1f0000) returned 1 [0208.541] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608b0 | out: hHeap=0x1f0000) returned 1 [0208.542] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\hu-HU\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hu-hu\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0208.542] GetLastError () returned 0x5 [0208.542] GetLastError () returned 0x5 [0208.542] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c3a52f7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3c3a52f7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3c3a52f7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0208.542] FindClose (in: hFindFile=0x24e8c0 | out: hFindFile=0x24e8c0) returned 1 [0208.542] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0208.542] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226ec0 | out: hHeap=0x1f0000) returned 1 [0208.543] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0208.543] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234818 | out: hHeap=0x1f0000) returned 1 [0208.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346b0 [0208.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0208.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x226ec0 [0208.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0208.543] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\HWRCustomization\\*", lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6eba2ec1, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0xa07693a9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6eba2ec1, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ebc0 [0208.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0208.544] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0208.544] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0208.544] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6eba2ec1, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0xa07693a9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6eba2ec1, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0208.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0208.544] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0208.544] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0208.544] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0208.544] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6eba2ec1, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0xa07693a9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6eba2ec1, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0208.544] FindClose (in: hFindFile=0x24ebc0 | out: hFindFile=0x24ebc0) returned 1 [0208.544] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0208.544] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226ec0 | out: hHeap=0x1f0000) returned 1 [0208.544] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0208.544] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346b0 | out: hHeap=0x1f0000) returned 1 [0208.545] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346b0 [0208.545] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0208.545] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x227058 [0208.545] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212030 [0208.545] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\it-IT\\*", lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0769b1e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e780 [0208.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2124f8 [0208.546] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212030 | out: hHeap=0x1f0000) returned 1 [0208.546] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0208.546] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0769b1e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0208.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2129c0 [0208.547] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2124f8 | out: hHeap=0x1f0000) returned 1 [0208.547] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0208.547] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0208.547] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e9592f9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e9592f9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e9592f9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0208.547] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0208.547] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211c78 [0208.547] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0208.547] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211c78 | out: hHeap=0x1f0000) returned 1 [0208.547] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2129c0 | out: hHeap=0x1f0000) returned 1 [0208.547] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0208.547] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\it-IT\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\it-it\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0208.549] GetLastError () returned 0x5 [0208.549] GetLastError () returned 0x5 [0208.549] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e9592f9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e9592f9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e9592f9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0208.549] FindClose (in: hFindFile=0x24e780 | out: hFindFile=0x24e780) returned 1 [0208.549] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0208.549] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227058 | out: hHeap=0x1f0000) returned 1 [0208.549] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0208.549] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346b0 | out: hHeap=0x1f0000) returned 1 [0208.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234500 [0208.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0208.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x226ec0 [0208.550] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0208.550] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ja-JP\\*", lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076a026, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ed40 [0208.550] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2120b8 [0208.550] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0208.550] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0208.550] FindNextFileW (in: hFindFile=0x24ed40, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076a026, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0208.550] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0208.550] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2120b8 | out: hHeap=0x1f0000) returned 1 [0208.550] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0208.551] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0208.551] FindNextFileW (in: hFindFile=0x24ed40, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e9592f9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e9592f9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e9592f9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0208.551] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0208.551] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212030 [0208.551] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0208.551] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212030 | out: hHeap=0x1f0000) returned 1 [0208.551] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0208.551] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0208.551] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ja-JP\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ja-jp\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0208.551] GetLastError () returned 0x5 [0208.552] GetLastError () returned 0x5 [0208.552] FindNextFileW (in: hFindFile=0x24ed40, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e9592f9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e9592f9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e9592f9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0208.552] FindClose (in: hFindFile=0x24ed40 | out: hFindFile=0x24ed40) returned 1 [0208.552] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0208.552] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226ec0 | out: hHeap=0x1f0000) returned 1 [0208.552] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0208.552] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234500 | out: hHeap=0x1f0000) returned 1 [0208.552] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2348f0 [0208.552] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0208.552] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x226ec0 [0208.552] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2129c0 [0208.552] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ko-KR\\*", lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076a7a6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e7c0 [0208.553] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212250 [0208.553] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2129c0 | out: hHeap=0x1f0000) returned 1 [0208.553] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0208.553] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076a7a6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0208.553] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211c78 [0208.553] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212250 | out: hHeap=0x1f0000) returned 1 [0208.553] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0208.553] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0208.553] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0208.553] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260658 [0208.553] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211e98 [0208.553] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0208.554] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e98 | out: hHeap=0x1f0000) returned 1 [0208.554] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211c78 | out: hHeap=0x1f0000) returned 1 [0208.554] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260658 | out: hHeap=0x1f0000) returned 1 [0208.554] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ko-KR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ko-kr\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0208.554] GetLastError () returned 0x5 [0208.554] GetLastError () returned 0x5 [0208.554] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0208.555] FindClose (in: hFindFile=0x24e7c0 | out: hFindFile=0x24e7c0) returned 1 [0208.555] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0208.555] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226ec0 | out: hHeap=0x1f0000) returned 1 [0208.555] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0208.555] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2348f0 | out: hHeap=0x1f0000) returned 1 [0208.555] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346b0 [0208.555] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0208.555] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x226ec0 [0208.555] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0208.555] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\LanguageModel\\*", lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076afd8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e6c0 [0208.557] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0208.557] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0208.557] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0208.557] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076afd8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0208.557] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0208.558] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0208.558] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0208.558] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0208.558] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3fbc74, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="chstic.dgml", cAlternateFileName="")) returned 1 [0208.558] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605b8 [0208.558] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0208.558] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x2648e8 [0208.558] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0208.558] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0208.558] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0208.558] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\LanguageModel\\chstic.dgml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\languagemodel\\chstic.dgml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0208.560] GetLastError () returned 0x5 [0208.560] GetLastError () returned 0x5 [0208.561] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3fbc74, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="chstic.dgml", cAlternateFileName="")) returned 0 [0208.561] FindClose (in: hFindFile=0x24e6c0 | out: hFindFile=0x24e6c0) returned 1 [0208.561] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2648e8 | out: hHeap=0x1f0000) returned 1 [0208.561] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226ec0 | out: hHeap=0x1f0000) returned 1 [0208.561] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0208.561] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346b0 | out: hHeap=0x1f0000) returned 1 [0208.561] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346b0 [0208.561] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0208.561] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x226ec0 [0208.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212718 [0208.562] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\lt-LT\\*", lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076b52b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e6c0 [0208.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2122d8 [0208.562] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212718 | out: hHeap=0x1f0000) returned 1 [0208.562] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0208.562] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076b52b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0208.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212360 [0208.562] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2122d8 | out: hHeap=0x1f0000) returned 1 [0208.562] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0208.563] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0208.563] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0208.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260658 [0208.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2124f8 [0208.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0208.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2124f8 | out: hHeap=0x1f0000) returned 1 [0208.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212360 | out: hHeap=0x1f0000) returned 1 [0208.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260658 | out: hHeap=0x1f0000) returned 1 [0208.563] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\lt-LT\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lt-lt\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0208.565] GetLastError () returned 0x5 [0208.565] GetLastError () returned 0x5 [0208.565] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0208.565] FindClose (in: hFindFile=0x24e6c0 | out: hFindFile=0x24e6c0) returned 1 [0208.565] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0208.565] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226ec0 | out: hHeap=0x1f0000) returned 1 [0208.565] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0208.566] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346b0 | out: hHeap=0x1f0000) returned 1 [0208.566] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234a58 [0208.566] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608b0 [0208.566] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x226ec0 [0208.566] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211c78 [0208.566] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\lv-LV\\*", lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076ba6e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ebc0 [0208.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2119d0 [0208.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211c78 | out: hHeap=0x1f0000) returned 1 [0208.567] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0208.567] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076ba6e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0208.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212030 [0208.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2119d0 | out: hHeap=0x1f0000) returned 1 [0208.567] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0208.567] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0208.567] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0208.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0208.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2122d8 [0208.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0208.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2122d8 | out: hHeap=0x1f0000) returned 1 [0208.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212030 | out: hHeap=0x1f0000) returned 1 [0208.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0208.568] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\lv-LV\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lv-lv\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0208.568] GetLastError () returned 0x5 [0208.568] GetLastError () returned 0x5 [0208.569] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0208.569] FindClose (in: hFindFile=0x24ebc0 | out: hFindFile=0x24ebc0) returned 1 [0208.569] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0208.569] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226ec0 | out: hHeap=0x1f0000) returned 1 [0208.569] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608b0 | out: hHeap=0x1f0000) returned 1 [0208.569] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234a58 | out: hHeap=0x1f0000) returned 1 [0208.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234818 [0208.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0208.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x227058 [0208.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212030 [0208.570] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\nb-NO\\*", lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076bff5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e600 [0208.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2122d8 [0208.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212030 | out: hHeap=0x1f0000) returned 1 [0208.571] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0208.571] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076bff5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0208.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0208.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2122d8 | out: hHeap=0x1f0000) returned 1 [0208.571] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0208.571] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0208.571] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e90ce26, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e90ce26, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e90ce26, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0208.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260658 [0208.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211e10 [0208.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0208.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e10 | out: hHeap=0x1f0000) returned 1 [0208.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0208.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260658 | out: hHeap=0x1f0000) returned 1 [0208.572] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\nb-NO\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nb-no\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0208.572] GetLastError () returned 0x5 [0208.573] GetLastError () returned 0x5 [0208.573] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e90ce26, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e90ce26, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e90ce26, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0208.573] FindClose (in: hFindFile=0x24e600 | out: hFindFile=0x24e600) returned 1 [0208.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0208.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227058 | out: hHeap=0x1f0000) returned 1 [0208.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0208.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234818 | out: hHeap=0x1f0000) returned 1 [0208.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234818 [0208.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0208.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x226ec0 [0208.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0208.573] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\nl-NL\\*", lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076c75d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ed40 [0209.020] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0209.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0209.020] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0209.020] FindNextFileW (in: hFindFile=0x24ed40, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076c75d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0209.020] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212250 [0209.021] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0209.021] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0209.021] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0209.021] FindNextFileW (in: hFindFile=0x24ed40, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0209.021] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606f8 [0209.021] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2124f8 [0209.021] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0209.021] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2124f8 | out: hHeap=0x1f0000) returned 1 [0209.021] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212250 | out: hHeap=0x1f0000) returned 1 [0209.021] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606f8 | out: hHeap=0x1f0000) returned 1 [0209.022] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\nl-NL\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nl-nl\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0209.023] GetLastError () returned 0x5 [0209.023] GetLastError () returned 0x5 [0209.023] FindNextFileW (in: hFindFile=0x24ed40, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0209.023] FindClose (in: hFindFile=0x24ed40 | out: hFindFile=0x24ed40) returned 1 [0209.024] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0209.024] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226ec0 | out: hHeap=0x1f0000) returned 1 [0209.024] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0209.024] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234818 | out: hHeap=0x1f0000) returned 1 [0209.024] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234818 [0209.024] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260540 [0209.024] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x226ec0 [0209.024] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211c78 [0209.024] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\pl-PL\\*", lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d57c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e900 [0209.025] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211e10 [0209.025] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211c78 | out: hHeap=0x1f0000) returned 1 [0209.025] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0209.025] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d57c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0209.025] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2119d0 [0209.025] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e10 | out: hHeap=0x1f0000) returned 1 [0209.025] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0209.026] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0209.026] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e8e6bbf, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e8e6bbf, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e8e6bbf, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0209.026] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0209.026] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2124f8 [0209.026] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0209.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2124f8 | out: hHeap=0x1f0000) returned 1 [0209.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2119d0 | out: hHeap=0x1f0000) returned 1 [0209.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0209.027] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\pl-PL\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pl-pl\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0209.027] GetLastError () returned 0x5 [0209.027] GetLastError () returned 0x5 [0209.027] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e8e6bbf, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e8e6bbf, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e8e6bbf, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0209.027] FindClose (in: hFindFile=0x24e900 | out: hFindFile=0x24e900) returned 1 [0209.028] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0209.028] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226ec0 | out: hHeap=0x1f0000) returned 1 [0209.028] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0209.028] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234818 | out: hHeap=0x1f0000) returned 1 [0209.028] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234818 [0209.028] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260540 [0209.028] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x226ec0 [0209.028] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211e10 [0209.028] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\pt-BR\\*", lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d988, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ea00 [0209.029] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211ae0 [0209.029] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e10 | out: hHeap=0x1f0000) returned 1 [0209.029] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0209.029] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d988, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0209.029] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212580 [0209.029] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211ae0 | out: hHeap=0x1f0000) returned 1 [0209.029] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0209.030] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0209.030] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e8e6bbf, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e8e6bbf, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e8e6bbf, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0209.030] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606f8 [0209.030] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212718 [0209.030] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0209.030] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212718 | out: hHeap=0x1f0000) returned 1 [0209.030] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212580 | out: hHeap=0x1f0000) returned 1 [0209.030] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606f8 | out: hHeap=0x1f0000) returned 1 [0209.031] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\pt-BR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-br\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0209.031] GetLastError () returned 0x5 [0209.031] GetLastError () returned 0x5 [0209.031] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e8e6bbf, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e8e6bbf, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e8e6bbf, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0209.031] FindClose (in: hFindFile=0x24ea00 | out: hFindFile=0x24ea00) returned 1 [0209.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0209.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226ec0 | out: hHeap=0x1f0000) returned 1 [0209.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0209.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234818 | out: hHeap=0x1f0000) returned 1 [0209.032] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234818 [0209.032] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260540 [0209.032] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x226ec0 [0209.032] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0209.032] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\pt-PT\\*", lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ddb8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ed00 [0209.033] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2124f8 [0209.033] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0209.033] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0209.033] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ddb8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0209.033] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211a58 [0209.033] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2124f8 | out: hHeap=0x1f0000) returned 1 [0209.033] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0209.033] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0209.033] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e8e6bbf, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e8e6bbf, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e8e6bbf, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0209.033] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260658 [0209.033] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2124f8 [0209.033] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0209.033] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2124f8 | out: hHeap=0x1f0000) returned 1 [0209.034] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211a58 | out: hHeap=0x1f0000) returned 1 [0209.034] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260658 | out: hHeap=0x1f0000) returned 1 [0209.034] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\pt-PT\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-pt\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0209.034] GetLastError () returned 0x5 [0209.034] GetLastError () returned 0x5 [0209.034] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e8e6bbf, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e8e6bbf, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e8e6bbf, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0209.034] FindClose (in: hFindFile=0x24ed00 | out: hFindFile=0x24ed00) returned 1 [0209.035] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0209.035] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226ec0 | out: hHeap=0x1f0000) returned 1 [0209.035] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0209.035] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234818 | out: hHeap=0x1f0000) returned 1 [0209.035] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234818 [0209.035] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260540 [0209.035] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x226ec0 [0209.035] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211f20 [0209.035] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ro-RO\\*", lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e0f5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e740 [0209.038] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2127a0 [0209.038] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211f20 | out: hHeap=0x1f0000) returned 1 [0209.038] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0209.038] FindNextFileW (in: hFindFile=0x24e740, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e0f5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0209.038] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212030 [0209.039] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2127a0 | out: hHeap=0x1f0000) returned 1 [0209.039] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0209.039] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0209.039] FindNextFileW (in: hFindFile=0x24e740, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0209.039] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0209.039] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212718 [0209.039] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0209.039] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212718 | out: hHeap=0x1f0000) returned 1 [0209.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212030 | out: hHeap=0x1f0000) returned 1 [0209.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0209.040] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ro-RO\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ro-ro\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0209.040] GetLastError () returned 0x5 [0209.040] GetLastError () returned 0x5 [0209.040] FindNextFileW (in: hFindFile=0x24e740, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0209.041] FindClose (in: hFindFile=0x24e740 | out: hFindFile=0x24e740) returned 1 [0209.041] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0209.041] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226ec0 | out: hHeap=0x1f0000) returned 1 [0209.041] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0209.041] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234818 | out: hHeap=0x1f0000) returned 1 [0209.041] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234818 [0209.041] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0209.041] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x226ec0 [0209.041] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211ae0 [0209.041] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ru-RU\\*", lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e4d1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e8c0 [0209.042] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211b68 [0209.042] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211ae0 | out: hHeap=0x1f0000) returned 1 [0209.042] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0209.042] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e4d1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0209.042] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2122d8 [0209.042] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b68 | out: hHeap=0x1f0000) returned 1 [0209.042] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0209.042] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0209.042] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0209.042] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260540 [0209.042] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2128b0 [0209.043] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0209.043] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2128b0 | out: hHeap=0x1f0000) returned 1 [0209.043] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2122d8 | out: hHeap=0x1f0000) returned 1 [0209.043] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0209.043] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ru-RU\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ru-ru\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0209.043] GetLastError () returned 0x5 [0209.043] GetLastError () returned 0x5 [0209.044] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0209.044] FindClose (in: hFindFile=0x24e8c0 | out: hFindFile=0x24e8c0) returned 1 [0209.044] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0209.044] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226ec0 | out: hHeap=0x1f0000) returned 1 [0209.044] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0209.044] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234818 | out: hHeap=0x1f0000) returned 1 [0209.044] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234a58 [0209.044] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260540 [0209.044] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x226ec0 [0209.044] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212030 [0209.045] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\sk-SK\\*", lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e8a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e9c0 [0209.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0209.045] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212030 | out: hHeap=0x1f0000) returned 1 [0209.045] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0209.045] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e8a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0209.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211c78 [0209.045] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0209.045] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0209.045] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0209.045] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e38953f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e38953f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e38953f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0209.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0209.046] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0209.046] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0209.046] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0209.046] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211c78 | out: hHeap=0x1f0000) returned 1 [0209.046] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0209.046] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\sk-SK\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sk-sk\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0209.047] GetLastError () returned 0x5 [0209.047] GetLastError () returned 0x5 [0209.047] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e38953f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e38953f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e38953f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0209.048] FindClose (in: hFindFile=0x24e9c0 | out: hFindFile=0x24e9c0) returned 1 [0209.048] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0209.048] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226ec0 | out: hHeap=0x1f0000) returned 1 [0209.048] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0209.048] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234a58 | out: hHeap=0x1f0000) returned 1 [0209.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234818 [0209.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0209.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x226ec0 [0209.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0209.048] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\sl-SI\\*", lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ec25, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ed40 [0209.049] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211c78 [0209.049] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0209.049] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0209.049] FindNextFileW (in: hFindFile=0x24ed40, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ec25, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0209.049] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212718 [0209.049] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211c78 | out: hHeap=0x1f0000) returned 1 [0209.049] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0209.050] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0209.050] FindNextFileW (in: hFindFile=0x24ed40, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0209.050] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260540 [0209.050] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2120b8 [0209.050] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0209.050] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2120b8 | out: hHeap=0x1f0000) returned 1 [0209.050] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212718 | out: hHeap=0x1f0000) returned 1 [0209.050] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0209.051] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\sl-SI\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sl-si\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0209.051] GetLastError () returned 0x5 [0209.051] GetLastError () returned 0x5 [0209.051] FindNextFileW (in: hFindFile=0x24ed40, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0209.051] FindClose (in: hFindFile=0x24ed40 | out: hFindFile=0x24ed40) returned 1 [0209.052] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0209.052] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226ec0 | out: hHeap=0x1f0000) returned 1 [0209.052] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0209.052] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234818 | out: hHeap=0x1f0000) returned 1 [0209.052] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234818 [0209.052] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260540 [0209.052] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x226ec0 [0209.052] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0209.053] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\sr-Latn-RS\\*", lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c7ae2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e900 [0209.215] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212030 [0209.215] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0209.215] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212030 | out: hHeap=0x1f0000) returned 1 [0209.215] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0209.215] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0209.215] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c7ae2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0209.215] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212030 [0209.216] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0209.216] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212030 | out: hHeap=0x1f0000) returned 1 [0209.216] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0209.216] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0209.216] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0209.216] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0209.216] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0209.216] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211ae0 [0209.216] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0209.216] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211ae0 | out: hHeap=0x1f0000) returned 1 [0209.216] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0209.216] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0209.217] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\sr-Latn-RS\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sr-latn-rs\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0209.217] GetLastError () returned 0x5 [0209.217] GetLastError () returned 0x5 [0209.217] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0209.217] FindClose (in: hFindFile=0x24e900 | out: hFindFile=0x24e900) returned 1 [0209.218] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0209.218] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226ec0 | out: hHeap=0x1f0000) returned 1 [0209.218] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0209.218] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234818 | out: hHeap=0x1f0000) returned 1 [0209.218] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234ae8 [0209.218] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0209.218] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x226ec0 [0209.218] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2129c0 [0209.218] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\sv-SE\\*", lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c820e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e9c0 [0209.218] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212250 [0209.219] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2129c0 | out: hHeap=0x1f0000) returned 1 [0209.219] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0209.219] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c820e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0209.219] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211ae0 [0209.219] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212250 | out: hHeap=0x1f0000) returned 1 [0209.219] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0209.219] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0209.219] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0209.219] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0209.219] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212250 [0209.219] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0209.219] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212250 | out: hHeap=0x1f0000) returned 1 [0209.219] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211ae0 | out: hHeap=0x1f0000) returned 1 [0209.219] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0209.219] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\sv-SE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sv-se\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0209.219] GetLastError () returned 0x5 [0209.220] GetLastError () returned 0x5 [0209.220] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0209.220] FindClose (in: hFindFile=0x24e9c0 | out: hFindFile=0x24e9c0) returned 1 [0209.220] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0209.220] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226ec0 | out: hHeap=0x1f0000) returned 1 [0209.220] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0209.220] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234ae8 | out: hHeap=0x1f0000) returned 1 [0209.220] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234548 [0209.220] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0209.220] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x226ec0 [0209.220] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0209.220] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\th-TH\\*", lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8602, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24eac0 [0209.221] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211ae0 [0209.221] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0209.221] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0209.221] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8602, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0209.221] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d88 [0209.221] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211ae0 | out: hHeap=0x1f0000) returned 1 [0209.221] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0209.221] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0209.221] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0209.221] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0209.221] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0209.221] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0209.221] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0209.221] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d88 | out: hHeap=0x1f0000) returned 1 [0209.221] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0209.222] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\th-TH\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\th-th\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0209.222] GetLastError () returned 0x5 [0209.222] GetLastError () returned 0x5 [0209.222] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0209.222] FindClose (in: hFindFile=0x24eac0 | out: hFindFile=0x24eac0) returned 1 [0209.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0209.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226ec0 | out: hHeap=0x1f0000) returned 1 [0209.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0209.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234548 | out: hHeap=0x1f0000) returned 1 [0209.227] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234500 [0209.227] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0209.227] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x226ec0 [0209.227] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211b68 [0209.227] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\tr-TR\\*", lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c896f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ec00 [0209.228] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0209.228] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b68 | out: hHeap=0x1f0000) returned 1 [0209.228] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0209.228] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c896f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0209.228] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d88 [0209.228] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0209.228] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0209.228] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0209.229] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0209.229] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260540 [0209.229] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211e10 [0209.229] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0209.229] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e10 | out: hHeap=0x1f0000) returned 1 [0209.229] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d88 | out: hHeap=0x1f0000) returned 1 [0209.229] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0209.230] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\tr-TR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tr-tr\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0209.230] GetLastError () returned 0x5 [0209.230] GetLastError () returned 0x5 [0209.230] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0209.230] FindClose (in: hFindFile=0x24ec00 | out: hFindFile=0x24ec00) returned 1 [0209.231] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0209.231] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226ec0 | out: hHeap=0x1f0000) returned 1 [0209.231] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0209.231] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234500 | out: hHeap=0x1f0000) returned 1 [0209.231] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234818 [0209.231] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0209.231] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x227058 [0209.231] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212718 [0209.231] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\uk-UA\\*", lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8ed8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ed00 [0209.232] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211e10 [0209.233] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212718 | out: hHeap=0x1f0000) returned 1 [0209.233] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0209.233] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8ed8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0209.233] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211c78 [0209.233] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e10 | out: hHeap=0x1f0000) returned 1 [0209.233] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0209.233] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0209.233] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0209.233] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0209.233] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212030 [0209.233] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0209.233] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212030 | out: hHeap=0x1f0000) returned 1 [0209.233] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211c78 | out: hHeap=0x1f0000) returned 1 [0209.234] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0209.234] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\uk-UA\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\uk-ua\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0209.234] GetLastError () returned 0x5 [0209.234] GetLastError () returned 0x5 [0209.234] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0209.234] FindClose (in: hFindFile=0x24ed00 | out: hFindFile=0x24ed00) returned 1 [0209.234] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0209.234] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227058 | out: hHeap=0x1f0000) returned 1 [0209.235] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0209.235] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234818 | out: hHeap=0x1f0000) returned 1 [0209.235] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234818 [0209.235] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0209.235] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x226ec0 [0209.235] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2129c0 [0209.235] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\zh-CN\\*", lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c93df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e700 [0209.235] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212828 [0209.235] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2129c0 | out: hHeap=0x1f0000) returned 1 [0209.235] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0209.235] FindNextFileW (in: hFindFile=0x24e700, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c93df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0209.235] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211a58 [0209.235] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212828 | out: hHeap=0x1f0000) returned 1 [0209.235] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0209.235] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0209.235] FindNextFileW (in: hFindFile=0x24e700, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e100c60, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e100c60, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e100c60, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0209.235] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0209.235] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0209.236] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0209.236] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0209.236] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211a58 | out: hHeap=0x1f0000) returned 1 [0209.236] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0209.236] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\zh-CN\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-cn\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0209.236] GetLastError () returned 0x5 [0209.236] GetLastError () returned 0x5 [0209.236] FindNextFileW (in: hFindFile=0x24e700, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e100c60, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e100c60, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e100c60, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0209.236] FindClose (in: hFindFile=0x24e700 | out: hFindFile=0x24e700) returned 1 [0209.237] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0209.237] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226ec0 | out: hHeap=0x1f0000) returned 1 [0209.237] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0209.237] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234818 | out: hHeap=0x1f0000) returned 1 [0209.237] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234500 [0209.237] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0209.237] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x227058 [0209.237] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0209.237] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\zh-TW\\*", lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c97fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e900 [0209.237] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2129c0 [0209.237] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0209.237] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0209.237] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c97fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0209.237] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212360 [0209.237] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2129c0 | out: hHeap=0x1f0000) returned 1 [0209.237] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0209.237] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0209.237] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e0daa01, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e0daa01, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e100c60, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0209.237] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0209.238] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211948 [0209.238] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0209.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211948 | out: hHeap=0x1f0000) returned 1 [0209.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212360 | out: hHeap=0x1f0000) returned 1 [0209.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0209.238] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\zh-TW\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-tw\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0209.238] GetLastError () returned 0x5 [0209.238] GetLastError () returned 0x5 [0209.238] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e0daa01, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e0daa01, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e100c60, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0209.238] FindClose (in: hFindFile=0x24e900 | out: hFindFile=0x24e900) returned 1 [0209.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0209.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227058 | out: hHeap=0x1f0000) returned 1 [0209.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0209.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234500 | out: hHeap=0x1f0000) returned 1 [0209.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219318 | out: hHeap=0x1f0000) returned 1 [0209.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229b60 | out: hHeap=0x1f0000) returned 1 [0209.239] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229d80 | out: hHeap=0x1f0000) returned 1 [0209.239] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a688 | out: hHeap=0x1f0000) returned 1 [0209.239] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229ad8 | out: hHeap=0x1f0000) returned 1 [0209.239] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2299c8 | out: hHeap=0x1f0000) returned 1 [0209.239] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229be8 | out: hHeap=0x1f0000) returned 1 [0209.239] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a2d0 | out: hHeap=0x1f0000) returned 1 [0209.239] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229e08 | out: hHeap=0x1f0000) returned 1 [0209.239] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a0b0 | out: hHeap=0x1f0000) returned 1 [0209.239] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0209.239] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0209.239] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2133d8 | out: hHeap=0x1f0000) returned 1 [0209.239] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2132c8 | out: hHeap=0x1f0000) returned 1 [0209.239] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0209.239] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0209.240] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0209.240] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e88 | out: hHeap=0x1f0000) returned 1 [0209.240] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212cf0 | out: hHeap=0x1f0000) returned 1 [0209.240] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0209.240] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212be0 | out: hHeap=0x1f0000) returned 1 [0209.240] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213570 | out: hHeap=0x1f0000) returned 1 [0209.240] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0209.240] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0209.240] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213818 | out: hHeap=0x1f0000) returned 1 [0209.240] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0209.240] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212a48 | out: hHeap=0x1f0000) returned 1 [0209.240] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0209.240] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f10 | out: hHeap=0x1f0000) returned 1 [0209.241] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212c68 | out: hHeap=0x1f0000) returned 1 [0209.241] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2135f8 | out: hHeap=0x1f0000) returned 1 [0209.241] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213680 | out: hHeap=0x1f0000) returned 1 [0209.241] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0209.241] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0209.241] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2123e8 | out: hHeap=0x1f0000) returned 1 [0209.241] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212140 | out: hHeap=0x1f0000) returned 1 [0209.241] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212470 | out: hHeap=0x1f0000) returned 1 [0209.241] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d00 | out: hHeap=0x1f0000) returned 1 [0209.241] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211bf0 | out: hHeap=0x1f0000) returned 1 [0209.241] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211fa8 | out: hHeap=0x1f0000) returned 1 [0209.241] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212608 | out: hHeap=0x1f0000) returned 1 [0209.242] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212938 | out: hHeap=0x1f0000) returned 1 [0209.242] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234d00 | out: hHeap=0x1f0000) returned 1 [0209.242] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e360 | out: hHeap=0x1f0000) returned 1 [0209.242] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0209.242] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233ed0 | out: hHeap=0x1f0000) returned 1 [0209.242] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233ed0 [0209.242] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0209.242] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x226ec0 [0209.242] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211c78 [0209.242] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\MSInfo\\*", lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa098a4c6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71143a45, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName=".", cAlternateFileName="")) returned 0x24e8c0 [0209.243] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220328 [0209.243] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218d98 [0209.243] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220328 | out: hHeap=0x1f0000) returned 1 [0209.243] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211c78 | out: hHeap=0x1f0000) returned 1 [0209.243] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0209.243] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa098a4c6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71143a45, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="..", cAlternateFileName="")) returned 1 [0209.243] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0209.244] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ef8 [0209.244] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0209.244] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218d98 | out: hHeap=0x1f0000) returned 1 [0209.244] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0209.244] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0209.244] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa098aa4a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="en-US", cAlternateFileName="")) returned 1 [0209.244] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21ffe0 [0209.244] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218608 [0209.244] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ffe0 | out: hHeap=0x1f0000) returned 1 [0209.244] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ef8 | out: hHeap=0x1f0000) returned 1 [0209.245] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0209.245] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0209.245] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204ff0 [0209.245] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2128b0 [0209.245] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463aec8d, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x63793f1, ftLastAccessTime.dwHighDateTime=0x1d2fa0a, ftLastWriteTime.dwLowDateTime=0x463aec8d, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x5a600, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="msinfo32.exe", cAlternateFileName="")) returned 1 [0209.245] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ab8 [0209.245] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fa40 [0209.245] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218818 [0209.245] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fa40 | out: hHeap=0x1f0000) returned 1 [0209.245] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218608 | out: hHeap=0x1f0000) returned 1 [0209.246] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ab8 | out: hHeap=0x1f0000) returned 1 [0209.246] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\MSInfo\\msinfo32.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\msinfo32.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0209.247] GetLastError () returned 0x5 [0209.247] GetLastError () returned 0x5 [0209.248] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463aec8d, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x63793f1, ftLastAccessTime.dwHighDateTime=0x1d2fa0a, ftLastWriteTime.dwLowDateTime=0x463aec8d, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x5a600, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="msinfo32.exe", cAlternateFileName="")) returned 0 [0209.248] FindClose (in: hFindFile=0x24e8c0 | out: hFindFile=0x24e8c0) returned 1 [0209.248] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234110 [0209.248] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609c8 [0209.248] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x227058 [0209.248] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212580 [0209.248] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\MSInfo\\en-US\\*", lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa098aa4a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e9c0 [0209.249] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212938 [0209.249] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212580 | out: hHeap=0x1f0000) returned 1 [0209.249] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0209.249] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa098aa4a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0209.250] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212140 [0209.250] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212938 | out: hHeap=0x1f0000) returned 1 [0209.250] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0209.250] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0209.250] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb38282, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x73430dfb, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x261f2e00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x7800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe.mui", cAlternateFileName="")) returned 1 [0209.250] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2388f0 [0209.250] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2127a0 [0209.250] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0209.250] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2127a0 | out: hHeap=0x1f0000) returned 1 [0209.250] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212140 | out: hHeap=0x1f0000) returned 1 [0209.251] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388f0 | out: hHeap=0x1f0000) returned 1 [0209.251] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\MSInfo\\en-US\\msinfo32.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\en-us\\msinfo32.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0209.612] GetLastError () returned 0x5 [0209.617] GetLastError () returned 0x5 [0209.620] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb38282, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x73430dfb, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x261f2e00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x7800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe.mui", cAlternateFileName="")) returned 0 [0209.621] FindClose (in: hFindFile=0x24e9c0 | out: hFindFile=0x24e9c0) returned 1 [0209.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0209.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227058 | out: hHeap=0x1f0000) returned 1 [0209.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609c8 | out: hHeap=0x1f0000) returned 1 [0209.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234110 | out: hHeap=0x1f0000) returned 1 [0209.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218818 | out: hHeap=0x1f0000) returned 1 [0209.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2128b0 | out: hHeap=0x1f0000) returned 1 [0209.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ff0 | out: hHeap=0x1f0000) returned 1 [0209.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226ec0 | out: hHeap=0x1f0000) returned 1 [0209.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0209.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233ed0 | out: hHeap=0x1f0000) returned 1 [0209.623] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233ed0 [0209.623] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609c8 [0209.623] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x226ec0 [0209.624] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2119d0 [0209.624] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\*", lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd9f60362, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd9f60362, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName=".", cAlternateFileName="")) returned 0x24e900 [0209.625] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212360 [0209.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2119d0 | out: hHeap=0x1f0000) returned 1 [0209.625] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0209.625] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd9f60362, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd9f60362, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="..", cAlternateFileName="")) returned 1 [0209.625] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212470 [0209.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212360 | out: hHeap=0x1f0000) returned 1 [0209.625] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0209.625] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0209.625] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9e7b530, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x58cd0, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="LICLUA.EXE", cAlternateFileName="")) returned 1 [0209.625] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ab8 [0209.625] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212030 [0209.625] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0209.626] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212030 | out: hHeap=0x1f0000) returned 1 [0209.626] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212470 | out: hHeap=0x1f0000) returned 1 [0209.626] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ab8 | out: hHeap=0x1f0000) returned 1 [0209.626] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\LICLUA.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\liclua.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0209.627] GetFileType (hFile=0x22c) returned 0x1 [0209.627] CloseHandle (hObject=0x22c) returned 1 [0209.628] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0209.628] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\LICLUA.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\liclua.exe"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9e7b530, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x58cd0)) returned 1 [0209.628] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0209.628] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0209.628] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\LICLUA.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\liclua.exe"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9e7b530, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x58cd0)) returned 1 [0209.628] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0209.628] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0209.628] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0209.628] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9f60362, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa0a26299, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda982389, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="Office Setup Controller", cAlternateFileName="OFFICE~1")) returned 1 [0209.628] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0209.629] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211e10 [0209.629] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0209.629] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e10 | out: hHeap=0x1f0000) returned 1 [0209.629] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0209.629] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0209.629] lstrcmpW (lpString1="Office Setup Controller", lpString2=".") returned 1 [0209.629] lstrcmpW (lpString1="Office Setup Controller", lpString2="..") returned 1 [0209.629] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204fb0 [0209.629] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261b98 [0209.629] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9f60362, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa0a26299, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda982389, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="Office Setup Controller", cAlternateFileName="OFFICE~1")) returned 0 [0209.629] FindClose (in: hFindFile=0x24e900 | out: hFindFile=0x24e900) returned 1 [0209.629] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234110 [0209.629] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0209.629] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x227058 [0209.629] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x262380 [0209.630] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\*", lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9f60362, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa0a26299, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda982389, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e600 [0209.632] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x262438 [0209.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262380 | out: hHeap=0x1f0000) returned 1 [0209.632] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0209.632] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9f60362, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa0a26299, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda982389, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0209.632] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x262380 [0209.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262438 | out: hHeap=0x1f0000) returned 1 [0209.632] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0209.632] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0209.632] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69e1fe00, ftCreationTime.dwHighDateTime=0x1d0d79d, ftLastAccessTime.dwLowDateTime=0xd9ff8cc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x69e1fe00, ftLastWriteTime.dwHighDateTime=0x1d0d79d, nFileSizeHigh=0x0, nFileSizeLow=0x168258, dwReserved0=0x0, dwReserved1=0x0, cFileName="pidgenx.dll", cAlternateFileName="")) returned 1 [0209.633] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609f0 [0209.633] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x262718 [0209.633] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x106) returned 0x224a18 [0209.633] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262718 | out: hHeap=0x1f0000) returned 1 [0209.633] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262380 | out: hHeap=0x1f0000) returned 1 [0209.633] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609f0 | out: hHeap=0x1f0000) returned 1 [0209.634] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pidgenx.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pidgenx.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0209.635] GetFileType (hFile=0x22c) returned 0x1 [0209.635] CloseHandle (hObject=0x22c) returned 1 [0209.635] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f8f8 [0209.635] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pidgenx.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pidgenx.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69e1fe00, ftCreationTime.dwHighDateTime=0x1d0d79d, ftLastAccessTime.dwLowDateTime=0xd9ff8cc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x69e1fe00, ftLastWriteTime.dwHighDateTime=0x1d0d79d, nFileSizeHigh=0x0, nFileSizeLow=0x168258)) returned 1 [0209.636] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0209.636] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f6a0 [0209.636] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pidgenx.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pidgenx.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69e1fe00, ftCreationTime.dwHighDateTime=0x1d0d79d, ftLastAccessTime.dwLowDateTime=0xd9ff8cc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x69e1fe00, ftLastWriteTime.dwHighDateTime=0x1d0d79d, nFileSizeHigh=0x0, nFileSizeLow=0x168258)) returned 1 [0209.636] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0209.636] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x2300c8 [0209.636] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0209.636] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69e1fe00, ftCreationTime.dwHighDateTime=0x1d0d79d, ftLastAccessTime.dwLowDateTime=0xda982389, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x69e1fe00, ftLastWriteTime.dwHighDateTime=0x1d0d79d, nFileSizeHigh=0x0, nFileSizeLow=0x902bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="PKEYCO~1.XRM")) returned 1 [0209.636] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234818 [0209.636] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261e78 [0209.636] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x106) returned 0x224270 [0209.636] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261e78 | out: hHeap=0x1f0000) returned 1 [0209.636] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224a18 | out: hHeap=0x1f0000) returned 1 [0209.636] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234818 | out: hHeap=0x1f0000) returned 1 [0209.637] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig-office.xrm-ms" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pkeyconfig-office.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0209.637] GetFileType (hFile=0x22c) returned 0x1 [0209.638] CloseHandle (hObject=0x22c) returned 1 [0209.638] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x237d00 [0209.638] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig-office.xrm-ms" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pkeyconfig-office.xrm-ms"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69e1fe00, ftCreationTime.dwHighDateTime=0x1d0d79d, ftLastAccessTime.dwLowDateTime=0xda982389, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x69e1fe00, ftLastWriteTime.dwHighDateTime=0x1d0d79d, nFileSizeHigh=0x0, nFileSizeLow=0x902bb)) returned 1 [0209.639] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237d00 | out: hHeap=0x1f0000) returned 1 [0209.639] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x237d00 [0209.639] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig-office.xrm-ms" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pkeyconfig-office.xrm-ms"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69e1fe00, ftCreationTime.dwHighDateTime=0x1d0d79d, ftLastAccessTime.dwLowDateTime=0xda982389, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x69e1fe00, ftLastWriteTime.dwHighDateTime=0x1d0d79d, nFileSizeHigh=0x0, nFileSizeLow=0x902bb)) returned 1 [0209.639] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237d00 | out: hHeap=0x1f0000) returned 1 [0209.639] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x237d00 [0209.639] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237d00 | out: hHeap=0x1f0000) returned 1 [0209.639] GetLastError () returned 0x0 [0209.639] CryptAcquireContextA (in: phProv=0x1cfd6d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1cfd6d8*=0x211a58) returned 1 [0209.646] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x260ab8 | out: pbBuffer=0x260ab8) returned 1 [0209.646] CryptReleaseContext (hProv=0x211a58, dwFlags=0x0) returned 1 [0209.646] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ab8 | out: hHeap=0x1f0000) returned 1 [0209.646] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x270dd8 [0209.646] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2245b8 [0209.646] QueryPerformanceCounter (in: lpPerformanceCount=0x1cfd66c | out: lpPerformanceCount=0x1cfd66c*=36701536146) returned 1 [0209.647] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1cfd6ac | out: lpSystemTimeAsFileTime=0x1cfd6ac) [0209.647] QueryPerformanceCounter (in: lpPerformanceCount=0x1cfd66c | out: lpPerformanceCount=0x1cfd66c*=36701569374) returned 1 [0209.647] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1cfd6ac | out: lpSystemTimeAsFileTime=0x1cfd6ac) [0209.647] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x1ff058 [0209.647] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x2720e0 [0209.647] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x224158 [0209.647] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x237d00 [0209.647] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210000 [0209.647] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2065f8 [0209.647] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210210 [0209.648] GetLastError () returned 0x0 [0209.648] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig-office.xrm-ms.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pkeyconfig-office.xrm-ms.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfd578, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0209.649] GetFileType (hFile=0x22c) returned 0x1 [0209.649] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c520 [0209.650] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c4f0 [0209.650] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x38) returned 0x24ea40 [0209.651] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig-office.xrm-ms" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pkeyconfig-office.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfd5a8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0209.651] GetFileType (hFile=0x230) returned 0x1 [0209.651] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ff0 [0209.651] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bd0 [0209.651] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261c50 [0209.651] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c450 [0209.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c4c0 [0209.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x38) returned 0x24ebc0 [0209.652] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig-office.xrm-ms.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pkeyconfig-office.xrm-ms.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfd4f4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x234 [0209.653] GetFileType (hFile=0x234) returned 0x1 [0209.653] GetLastError () returned 0xb7 [0209.654] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig-office.xrm-ms.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pkeyconfig-office.xrm-ms.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfd4f4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x238 [0209.654] GetFileType (hFile=0x238) returned 0x1 [0209.655] GetLastError () returned 0xb7 [0209.655] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig-office.xrm-ms" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pkeyconfig-office.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfd4ec, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0209.655] GetFileType (hFile=0x23c) returned 0x1 [0209.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28efd8 [0209.656] ReadFile (in: hFile=0x23c, lpBuffer=0x28efd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1cfd448, lpOverlapped=0x0 | out: lpBuffer=0x28efd8*, lpNumberOfBytesRead=0x1cfd448*=0x1000, lpOverlapped=0x0) returned 1 [0209.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24b9e8 [0209.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x288fa8 [0209.940] GetLastError () returned 0x0 [0209.979] CloseHandle (hObject=0x22c) returned 1 [0210.319] CloseHandle (hObject=0x230) returned 1 [0210.319] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a30 [0210.319] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b70 [0210.320] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig-office.xrm-ms" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pkeyconfig-office.xrm-ms"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfd5a8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0210.344] GetFileType (hFile=0x230) returned 0x1 [0210.344] GetLastError () returned 0xb7 [0210.346] CloseHandle (hObject=0x230) returned 1 [0210.347] DeleteFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig-office.xrm-ms" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pkeyconfig-office.xrm-ms")) returned 0 [0210.347] GetLastError () returned 0x20 [0210.347] GetLastError () returned 0x20 [0210.347] CryptAcquireContextA (in: phProv=0x1cfd6d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1cfd6d8*=0x212030) returned 1 [0210.358] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2606f8 | out: pbBuffer=0x2606f8) returned 1 [0210.358] CryptReleaseContext (hProv=0x212030, dwFlags=0x0) returned 1 [0210.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606f8 | out: hHeap=0x1f0000) returned 1 [0210.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2608b0 [0210.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2604c8 [0210.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x234bf0 [0210.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608b0 | out: hHeap=0x1f0000) returned 1 [0210.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0210.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234bf0 | out: hHeap=0x1f0000) returned 1 [0210.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2639c0 [0210.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffa0 [0210.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x2362c8 [0210.359] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2606f8 [0210.359] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x236e28 [0210.359] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ff0 [0210.359] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235eb8 [0210.359] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260798 [0210.359] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x236f30 [0210.359] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ba0 [0210.359] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609a0 [0210.359] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffb8 [0210.359] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a80 [0210.359] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0210.359] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffd0 [0210.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffd0 | out: hHeap=0x1f0000) returned 1 [0210.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0210.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a80 | out: hHeap=0x1f0000) returned 1 [0210.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffb8 | out: hHeap=0x1f0000) returned 1 [0210.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0210.360] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ba0 | out: hHeap=0x1f0000) returned 1 [0210.360] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236f30 | out: hHeap=0x1f0000) returned 1 [0210.360] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260798 | out: hHeap=0x1f0000) returned 1 [0210.360] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235eb8 | out: hHeap=0x1f0000) returned 1 [0210.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x234c28 [0210.360] GetLastError () returned 0x0 [0210.360] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1cfd268 | out: lpSystemTimeAsFileTime=0x1cfd268) [0210.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238b00 [0210.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260798 [0210.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205210 [0210.360] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205210 | out: hHeap=0x1f0000) returned 1 [0210.360] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260798 | out: hHeap=0x1f0000) returned 1 [0210.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260518 [0210.361] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205210 [0210.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205210 | out: hHeap=0x1f0000) returned 1 [0210.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0210.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b00 | out: hHeap=0x1f0000) returned 1 [0210.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0210.361] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x234f38 [0210.361] GetLastError () returned 0x0 [0210.361] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig-office.xrm-ms.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pkeyconfig-office.xrm-ms.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfd5d8, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0210.362] GetFileType (hFile=0x230) returned 0x1 [0210.362] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28cfc8 [0210.362] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1cfd560 | out: lpNewFilePointer=0x0) returned 1 [0210.362] GetLastError () returned 0xb7 [0210.363] CloseHandle (hObject=0x230) returned 1 [0210.363] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b30 | out: hHeap=0x1f0000) returned 1 [0210.363] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a80 | out: hHeap=0x1f0000) returned 1 [0210.363] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237878 | out: hHeap=0x1f0000) returned 1 [0210.363] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236e28 | out: hHeap=0x1f0000) returned 1 [0210.363] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606f8 | out: hHeap=0x1f0000) returned 1 [0210.363] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ff0 | out: hHeap=0x1f0000) returned 1 [0210.363] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2362c8 | out: hHeap=0x1f0000) returned 1 [0210.364] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffa0 | out: hHeap=0x1f0000) returned 1 [0210.364] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2639c0 | out: hHeap=0x1f0000) returned 1 [0210.364] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223cf8 | out: hHeap=0x1f0000) returned 1 [0210.364] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604c8 | out: hHeap=0x1f0000) returned 1 [0210.364] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0210.364] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x26d4c0 | out: hHeap=0x1f0000) returned 1 [0210.364] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2246d0 | out: hHeap=0x1f0000) returned 1 [0210.364] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234bb8 | out: hHeap=0x1f0000) returned 1 [0210.364] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ab0 | out: hHeap=0x1f0000) returned 1 [0210.364] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff70 | out: hHeap=0x1f0000) returned 1 [0210.364] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0210.364] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a70 | out: hHeap=0x1f0000) returned 1 [0210.364] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff28 | out: hHeap=0x1f0000) returned 1 [0210.364] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0210.364] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a60 | out: hHeap=0x1f0000) returned 1 [0210.364] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236d20 | out: hHeap=0x1f0000) returned 1 [0210.364] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0210.365] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2357d0 | out: hHeap=0x1f0000) returned 1 [0210.365] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2348f0 | out: hHeap=0x1f0000) returned 1 [0210.365] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0210.365] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0210.365] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346f8 | out: hHeap=0x1f0000) returned 1 [0210.365] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b70 | out: hHeap=0x1f0000) returned 1 [0210.365] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a30 | out: hHeap=0x1f0000) returned 1 [0210.365] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28efd8 | out: hHeap=0x1f0000) returned 1 [0210.365] CloseHandle (hObject=0x23c) returned 1 [0210.365] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c440 | out: hHeap=0x1f0000) returned 1 [0210.365] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c500 | out: hHeap=0x1f0000) returned 1 [0210.366] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237dd0 | out: hHeap=0x1f0000) returned 1 [0210.366] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24b9e8 | out: hHeap=0x1f0000) returned 1 [0210.366] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2026e8 | out: hHeap=0x1f0000) returned 1 [0210.366] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cf0 | out: hHeap=0x1f0000) returned 1 [0210.366] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x288fa8 | out: hHeap=0x1f0000) returned 1 [0210.366] CloseHandle (hObject=0x238) returned 1 [0210.366] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c470 | out: hHeap=0x1f0000) returned 1 [0210.366] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c460 | out: hHeap=0x1f0000) returned 1 [0210.366] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262660 | out: hHeap=0x1f0000) returned 1 [0210.366] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bd0 | out: hHeap=0x1f0000) returned 1 [0210.367] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20d9f8 | out: hHeap=0x1f0000) returned 1 [0210.367] CloseHandle (hObject=0x234) returned 1 [0210.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c4c0 | out: hHeap=0x1f0000) returned 1 [0210.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c450 | out: hHeap=0x1f0000) returned 1 [0210.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261c50 | out: hHeap=0x1f0000) returned 1 [0210.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c4f0 | out: hHeap=0x1f0000) returned 1 [0210.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c520 | out: hHeap=0x1f0000) returned 1 [0210.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c430 | out: hHeap=0x1f0000) returned 1 [0210.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c3a0 | out: hHeap=0x1f0000) returned 1 [0210.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20d888 | out: hHeap=0x1f0000) returned 1 [0210.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2720e0 | out: hHeap=0x1f0000) returned 1 [0210.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224158 | out: hHeap=0x1f0000) returned 1 [0210.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2065f8 | out: hHeap=0x1f0000) returned 1 [0210.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0210.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210000 | out: hHeap=0x1f0000) returned 1 [0210.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237d00 | out: hHeap=0x1f0000) returned 1 [0210.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x270dd8 | out: hHeap=0x1f0000) returned 1 [0210.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2245b8 | out: hHeap=0x1f0000) returned 1 [0210.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0210.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220b48 | out: hHeap=0x1f0000) returned 1 [0210.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e360 | out: hHeap=0x1f0000) returned 1 [0210.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346b0 | out: hHeap=0x1f0000) returned 1 [0210.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609f0 | out: hHeap=0x1f0000) returned 1 [0210.574] DeleteFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig-office.xrm-ms" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pkeyconfig-office.xrm-ms")) returned 1 [0210.576] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9ff8cc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig.companion.dll", cAlternateFileName="PKEYCO~1.DLL")) returned 1 [0210.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346b0 [0210.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x262438 [0210.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x106) returned 0x224040 [0210.576] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262438 | out: hHeap=0x1f0000) returned 1 [0210.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224270 | out: hHeap=0x1f0000) returned 1 [0210.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346b0 | out: hHeap=0x1f0000) returned 1 [0210.577] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig.companion.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pkeyconfig.companion.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x234 [0210.578] GetFileType (hFile=0x234) returned 0x1 [0210.579] CloseHandle (hObject=0x234) returned 1 [0210.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x220b38 [0210.579] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig.companion.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pkeyconfig.companion.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9ff8cc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x48c0)) returned 1 [0210.579] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220b38 | out: hHeap=0x1f0000) returned 1 [0210.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x220b38 [0210.580] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig.companion.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pkeyconfig.companion.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9ff8cc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x48c0)) returned 1 [0210.580] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220b38 | out: hHeap=0x1f0000) returned 1 [0210.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x220b38 [0210.580] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220b38 | out: hHeap=0x1f0000) returned 1 [0210.580] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9ff8cc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig.companion.dll", cAlternateFileName="PKEYCO~1.DLL")) returned 0 [0210.580] FindClose (in: hFindFile=0x24e600 | out: hFindFile=0x24e600) returned 1 [0210.580] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224040 | out: hHeap=0x1f0000) returned 1 [0210.581] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227058 | out: hHeap=0x1f0000) returned 1 [0210.581] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0210.581] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234110 | out: hHeap=0x1f0000) returned 1 [0210.581] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0210.581] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261b98 | out: hHeap=0x1f0000) returned 1 [0210.581] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204fb0 | out: hHeap=0x1f0000) returned 1 [0210.581] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226ec0 | out: hHeap=0x1f0000) returned 1 [0210.581] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609c8 | out: hHeap=0x1f0000) returned 1 [0210.581] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233ed0 | out: hHeap=0x1f0000) returned 1 [0210.582] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233ed0 [0210.582] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0210.582] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x226d28 [0210.582] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x262438 [0210.582] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\OfficeSoftwareProtectionPlatform\\*", lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd99442a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd99442a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName=".", cAlternateFileName="")) returned 0x24eac0 [0210.583] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x262660 [0210.583] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262438 | out: hHeap=0x1f0000) returned 1 [0210.583] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0210.583] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd99442a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd99442a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="..", cAlternateFileName="")) returned 1 [0210.583] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261e78 [0210.584] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262660 | out: hHeap=0x1f0000) returned 1 [0210.584] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0210.584] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0210.584] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd99442a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd99442a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="..", cAlternateFileName="")) returned 0 [0210.584] FindClose (in: hFindFile=0x24eac0 | out: hFindFile=0x24eac0) returned 1 [0210.584] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261e78 | out: hHeap=0x1f0000) returned 1 [0210.584] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226d28 | out: hHeap=0x1f0000) returned 1 [0210.584] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0210.585] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233ed0 | out: hHeap=0x1f0000) returned 1 [0210.585] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233ed0 [0210.585] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609c8 [0210.585] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x226d28 [0210.585] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211fa8 [0210.585] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Source Engine\\*", lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4accd6e1, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4accd6e1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName=".", cAlternateFileName="")) returned 0x24e900 [0210.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2119d0 [0210.586] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211fa8 | out: hHeap=0x1f0000) returned 1 [0210.586] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0210.586] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4accd6e1, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4accd6e1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="..", cAlternateFileName="")) returned 1 [0210.587] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211a58 [0210.587] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0210.587] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211a58 | out: hHeap=0x1f0000) returned 1 [0210.587] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2119d0 | out: hHeap=0x1f0000) returned 1 [0210.587] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0210.587] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0210.587] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4accd6e1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x3ba48, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="OSE.EXE", cAlternateFileName="")) returned 1 [0210.587] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211a58 [0210.587] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0210.587] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211a58 | out: hHeap=0x1f0000) returned 1 [0210.587] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0210.588] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Source Engine\\OSE.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\source engine\\ose.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x234 [0210.588] GetFileType (hFile=0x234) returned 0x1 [0210.589] CloseHandle (hObject=0x234) returned 1 [0210.589] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0210.589] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Source Engine\\OSE.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\source engine\\ose.exe"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4accd6e1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x3ba48)) returned 1 [0210.589] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0210.589] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0210.590] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Source Engine\\OSE.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\source engine\\ose.exe"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4accd6e1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x3ba48)) returned 1 [0210.590] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0210.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0210.590] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0210.590] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4accd6e1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x3ba48, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="OSE.EXE", cAlternateFileName="")) returned 0 [0210.590] FindClose (in: hFindFile=0x24e900 | out: hFindFile=0x24e900) returned 1 [0210.591] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0210.591] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226d28 | out: hHeap=0x1f0000) returned 1 [0210.591] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609c8 | out: hHeap=0x1f0000) returned 1 [0210.591] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233ed0 | out: hHeap=0x1f0000) returned 1 [0210.591] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233ed0 [0210.591] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609c8 [0210.591] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x226d28 [0210.591] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211fa8 [0210.591] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\*", lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b5538f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName=".", cAlternateFileName="")) returned 0x24eb00 [0211.117] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211948 [0211.118] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211fa8 | out: hHeap=0x1f0000) returned 1 [0211.118] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0211.118] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b5538f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="..", cAlternateFileName="")) returned 1 [0211.118] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212580 [0211.118] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211948 | out: hHeap=0x1f0000) returned 1 [0211.118] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0211.118] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0211.118] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xff, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="Bears.htm", cAlternateFileName="")) returned 1 [0211.118] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0211.118] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211fa8 [0211.118] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0211.118] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211fa8 | out: hHeap=0x1f0000) returned 1 [0211.118] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212580 | out: hHeap=0x1f0000) returned 1 [0211.118] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0211.119] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0211.665] GetLastError () returned 0x5 [0211.665] GetLastError () returned 0x5 [0211.665] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x432, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="Bears.jpg", cAlternateFileName="")) returned 1 [0211.665] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ab8 [0211.665] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211948 [0211.665] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0211.665] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211948 | out: hHeap=0x1f0000) returned 1 [0211.665] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0211.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ab8 | out: hHeap=0x1f0000) returned 1 [0211.666] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0211.725] GetLastError () returned 0x5 [0211.725] GetLastError () returned 0x5 [0211.725] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1a3ecc0a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5d2da05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5d2da05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x285, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0211.725] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0211.725] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2120b8 [0211.725] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0211.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2120b8 | out: hHeap=0x1f0000) returned 1 [0211.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0211.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0211.725] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\Desktop.ini" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1dc [0211.728] GetFileType (hFile=0x1dc) returned 0x1 [0211.728] CloseHandle (hObject=0x1dc) returned 1 [0211.728] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0211.729] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\Desktop.ini" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1a3ecc0a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5d2da05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5d2da05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x285)) returned 1 [0211.729] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0211.729] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0211.729] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\Desktop.ini" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1a3ecc0a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5d2da05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5d2da05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x285)) returned 1 [0211.729] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0211.729] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0211.729] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0211.729] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="Garden.htm", cAlternateFileName="")) returned 1 [0211.729] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609f0 [0211.729] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211f20 [0211.729] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0211.729] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211f20 | out: hHeap=0x1f0000) returned 1 [0211.729] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0211.729] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609f0 | out: hHeap=0x1f0000) returned 1 [0211.729] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0211.767] GetLastError () returned 0x5 [0211.767] GetLastError () returned 0x5 [0211.767] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x5d3f, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="Garden.jpg", cAlternateFileName="")) returned 1 [0211.768] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609a0 [0211.768] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2128b0 [0211.768] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0211.768] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2128b0 | out: hHeap=0x1f0000) returned 1 [0211.768] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0211.768] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0211.768] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0211.919] GetLastError () returned 0x5 [0211.919] GetLastError () returned 0x5 [0211.919] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="Green Bubbles.htm", cAlternateFileName="")) returned 1 [0211.919] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x234c98 [0211.919] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211bf0 [0211.919] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0211.919] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211bf0 | out: hHeap=0x1f0000) returned 1 [0211.919] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0211.919] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234c98 | out: hHeap=0x1f0000) returned 1 [0211.920] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\Green Bubbles.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\green bubbles.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0211.920] GetLastError () returned 0x5 [0211.920] GetLastError () returned 0x5 [0211.920] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1906, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="GreenBubbles.jpg", cAlternateFileName="")) returned 1 [0211.920] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x234d08 [0211.920] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2129c0 [0211.920] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0211.920] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2129c0 | out: hHeap=0x1f0000) returned 1 [0211.920] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0211.920] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234d08 | out: hHeap=0x1f0000) returned 1 [0211.921] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\GreenBubbles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\greenbubbles.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0212.385] GetLastError () returned 0x5 [0212.385] GetLastError () returned 0x5 [0212.385] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xeb, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="Hand Prints.htm", cAlternateFileName="")) returned 1 [0212.386] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0212.386] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212580 [0212.386] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0212.386] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212580 | out: hHeap=0x1f0000) returned 1 [0212.386] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0212.386] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0212.386] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\Hand Prints.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\hand prints.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0212.498] GetLastError () returned 0x5 [0212.498] GetLastError () returned 0x5 [0212.498] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x107e, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="HandPrints.jpg", cAlternateFileName="")) returned 1 [0212.498] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608b0 [0212.498] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0212.498] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0212.498] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0212.498] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0212.499] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608b0 | out: hHeap=0x1f0000) returned 1 [0212.499] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\handprints.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0212.500] GetLastError () returned 0x5 [0212.500] GetLastError () returned 0x5 [0212.500] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="Orange Circles.htm", cAlternateFileName="")) returned 1 [0212.500] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x234bf0 [0212.500] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0212.500] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0212.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0212.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0212.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234bf0 | out: hHeap=0x1f0000) returned 1 [0212.501] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\Orange Circles.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orange circles.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0212.502] GetLastError () returned 0x5 [0212.502] GetLastError () returned 0x5 [0212.502] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d5a533, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d5a533, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d5a533, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x18ed, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="OrangeCircles.jpg", cAlternateFileName="")) returned 1 [0212.502] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x234c98 [0212.502] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211948 [0212.502] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0212.502] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211948 | out: hHeap=0x1f0000) returned 1 [0212.502] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0212.502] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234c98 | out: hHeap=0x1f0000) returned 1 [0212.502] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\OrangeCircles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orangecircles.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0212.503] GetLastError () returned 0x5 [0212.503] GetLastError () returned 0x5 [0212.503] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="Peacock.htm", cAlternateFileName="")) returned 1 [0212.503] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2607e8 [0212.503] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211e98 [0212.504] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0212.504] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e98 | out: hHeap=0x1f0000) returned 1 [0212.504] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0212.504] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607e8 | out: hHeap=0x1f0000) returned 1 [0212.504] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0212.504] GetLastError () returned 0x5 [0212.504] GetLastError () returned 0x5 [0212.505] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x13fb, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="Peacock.jpg", cAlternateFileName="")) returned 1 [0212.505] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260798 [0212.505] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2122d8 [0212.505] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0212.505] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2122d8 | out: hHeap=0x1f0000) returned 1 [0212.505] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0212.505] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260798 | out: hHeap=0x1f0000) returned 1 [0212.505] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0212.506] GetLastError () returned 0x5 [0212.506] GetLastError () returned 0x5 [0212.507] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96dccc65, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="Roses.htm", cAlternateFileName="")) returned 1 [0212.507] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0212.507] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212470 [0212.507] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0212.507] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212470 | out: hHeap=0x1f0000) returned 1 [0212.507] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0212.507] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0212.507] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0212.509] GetLastError () returned 0x5 [0212.509] GetLastError () returned 0x5 [0212.509] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96dccc65, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96dccc65, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96dccc65, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x780, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="Roses.jpg", cAlternateFileName="")) returned 1 [0212.509] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0212.509] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2123e8 [0212.509] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0212.509] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2123e8 | out: hHeap=0x1f0000) returned 1 [0212.509] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0212.509] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0212.509] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0212.510] GetLastError () returned 0x5 [0212.510] GetLastError () returned 0x5 [0212.511] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="Shades of Blue.htm", cAlternateFileName="")) returned 1 [0212.511] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x234d40 [0212.511] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d00 [0212.511] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0212.511] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d00 | out: hHeap=0x1f0000) returned 1 [0212.511] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0212.511] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234d40 | out: hHeap=0x1f0000) returned 1 [0212.511] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\Shades of Blue.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shades of blue.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0212.512] GetLastError () returned 0x5 [0212.512] GetLastError () returned 0x5 [0212.512] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x127e, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="ShadesOfBlue.jpg", cAlternateFileName="")) returned 1 [0212.512] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x234d08 [0212.512] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211a58 [0212.512] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0212.512] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211a58 | out: hHeap=0x1f0000) returned 1 [0212.512] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0212.512] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234d08 | out: hHeap=0x1f0000) returned 1 [0212.513] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\ShadesOfBlue.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shadesofblue.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0212.514] GetLastError () returned 0x5 [0212.514] GetLastError () returned 0x5 [0212.514] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d5a533, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d5a533, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d5a533, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="Soft Blue.htm", cAlternateFileName="")) returned 1 [0212.514] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0212.514] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211ae0 [0212.514] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0212.514] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211ae0 | out: hHeap=0x1f0000) returned 1 [0212.514] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0212.514] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0212.515] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\Soft Blue.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\soft blue.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0212.515] GetLastError () returned 0x5 [0212.515] GetLastError () returned 0x5 [0212.515] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2949, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="SoftBlue.jpg", cAlternateFileName="")) returned 1 [0212.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0212.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211948 [0212.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0212.515] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211948 | out: hHeap=0x1f0000) returned 1 [0212.515] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0212.515] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0212.515] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\softblue.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0212.517] GetLastError () returned 0x5 [0212.517] GetLastError () returned 0x5 [0212.517] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="Stars.htm", cAlternateFileName="")) returned 1 [0212.517] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0212.517] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212828 [0212.517] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0212.517] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212828 | out: hHeap=0x1f0000) returned 1 [0212.517] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0212.517] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0212.518] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0212.519] GetLastError () returned 0x5 [0212.519] GetLastError () returned 0x5 [0212.519] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1d51, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="Stars.jpg", cAlternateFileName="")) returned 1 [0212.519] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260658 [0212.519] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211ae0 [0212.519] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0212.519] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211ae0 | out: hHeap=0x1f0000) returned 1 [0212.519] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0212.519] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260658 | out: hHeap=0x1f0000) returned 1 [0212.519] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0212.521] GetLastError () returned 0x5 [0212.521] GetLastError () returned 0x5 [0212.521] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1d51, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="Stars.jpg", cAlternateFileName="")) returned 0 [0212.522] FindClose (in: hFindFile=0x24eb00 | out: hFindFile=0x24eb00) returned 1 [0212.522] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0212.522] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226d28 | out: hHeap=0x1f0000) returned 1 [0212.522] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609c8 | out: hHeap=0x1f0000) returned 1 [0212.522] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233ed0 | out: hHeap=0x1f0000) returned 1 [0212.522] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233ed0 [0212.522] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0212.522] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x226d28 [0212.522] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211c78 [0212.522] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\TextConv\\*", lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b56882, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName=".", cAlternateFileName="")) returned 0x24e8c0 [0212.522] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212250 [0212.522] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211c78 | out: hHeap=0x1f0000) returned 1 [0212.522] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0212.522] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b56882, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="..", cAlternateFileName="")) returned 1 [0212.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211ae0 [0212.523] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212250 | out: hHeap=0x1f0000) returned 1 [0212.523] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0212.523] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0212.523] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b5787e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="en-US", cAlternateFileName="")) returned 1 [0212.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2128b0 [0212.523] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211ae0 | out: hHeap=0x1f0000) returned 1 [0212.523] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0212.523] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0212.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x2052d0 [0212.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d88 [0212.523] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b5787e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="en-US", cAlternateFileName="")) returned 0 [0212.523] FindClose (in: hFindFile=0x24e8c0 | out: hFindFile=0x24e8c0) returned 1 [0212.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233d20 [0212.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a68 [0212.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x226ec0 [0212.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0212.523] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\TextConv\\en-US\\*", lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b5787e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x211f10, cFileName=".", cAlternateFileName="")) returned 0x24e6c0 [0212.524] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212828 [0212.524] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0212.524] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212828 | out: hHeap=0x1f0000) returned 1 [0212.524] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0212.524] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0212.524] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b5787e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x211f10, cFileName="..", cAlternateFileName="")) returned 1 [0212.524] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2120b8 [0212.524] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0212.524] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2120b8 | out: hHeap=0x1f0000) returned 1 [0212.524] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0212.524] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0212.524] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0212.524] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b5787e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x211f10, cFileName="..", cAlternateFileName="")) returned 0 [0212.524] FindClose (in: hFindFile=0x24e6c0 | out: hFindFile=0x24e6c0) returned 1 [0212.524] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0212.524] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226ec0 | out: hHeap=0x1f0000) returned 1 [0212.524] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a68 | out: hHeap=0x1f0000) returned 1 [0212.524] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233d20 | out: hHeap=0x1f0000) returned 1 [0212.524] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2128b0 | out: hHeap=0x1f0000) returned 1 [0212.524] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d88 | out: hHeap=0x1f0000) returned 1 [0212.524] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2052d0 | out: hHeap=0x1f0000) returned 1 [0212.525] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226d28 | out: hHeap=0x1f0000) returned 1 [0212.525] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0212.525] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233ed0 | out: hHeap=0x1f0000) returned 1 [0212.525] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234110 [0212.525] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0212.525] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x226d28 [0212.525] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d88 [0212.525] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Triedit\\*", lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b57d42, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName=".", cAlternateFileName="")) returned 0x24e8c0 [0212.526] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2119d0 [0212.526] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d88 | out: hHeap=0x1f0000) returned 1 [0212.526] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0212.526] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b57d42, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="..", cAlternateFileName="")) returned 1 [0212.526] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2123e8 [0212.526] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2119d0 | out: hHeap=0x1f0000) returned 1 [0212.527] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0212.527] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0212.527] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b58502, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="en-US", cAlternateFileName="")) returned 1 [0212.527] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212140 [0212.527] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2123e8 | out: hHeap=0x1f0000) returned 1 [0212.527] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0212.527] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0212.527] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x2052d0 [0212.527] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d00 [0212.527] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b58502, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="en-US", cAlternateFileName="")) returned 0 [0212.527] FindClose (in: hFindFile=0x24e8c0 | out: hFindFile=0x24e8c0) returned 1 [0212.527] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233d20 [0212.527] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a68 [0212.527] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x226ec0 [0212.527] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211fa8 [0212.527] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Triedit\\en-US\\*", lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b58502, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x212706, cFileName=".", cAlternateFileName="")) returned 0x24ed40 [0212.527] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d88 [0212.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211fa8 | out: hHeap=0x1f0000) returned 1 [0212.528] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0212.528] FindNextFileW (in: hFindFile=0x24ed40, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b58502, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x212706, cFileName="..", cAlternateFileName="")) returned 1 [0212.528] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212360 [0212.528] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0212.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212360 | out: hHeap=0x1f0000) returned 1 [0212.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d88 | out: hHeap=0x1f0000) returned 1 [0212.528] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0212.528] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0212.528] FindNextFileW (in: hFindFile=0x24ed40, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b58502, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x212706, cFileName="..", cAlternateFileName="")) returned 0 [0212.528] FindClose (in: hFindFile=0x24ed40 | out: hFindFile=0x24ed40) returned 1 [0212.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0212.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226ec0 | out: hHeap=0x1f0000) returned 1 [0212.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a68 | out: hHeap=0x1f0000) returned 1 [0212.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233d20 | out: hHeap=0x1f0000) returned 1 [0212.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212140 | out: hHeap=0x1f0000) returned 1 [0212.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d00 | out: hHeap=0x1f0000) returned 1 [0212.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2052d0 | out: hHeap=0x1f0000) returned 1 [0212.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226d28 | out: hHeap=0x1f0000) returned 1 [0212.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0212.529] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234110 | out: hHeap=0x1f0000) returned 1 [0212.529] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233d20 [0212.529] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0212.529] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x226d28 [0212.529] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe00 [0212.529] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VC\\*", lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xbcd0fab8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xa0b594b8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2ce22546, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName=".", cAlternateFileName="")) returned 0x24e6c0 [0212.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0212.531] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe00 | out: hHeap=0x1f0000) returned 1 [0212.531] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0212.531] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xbcd0fab8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xa0b594b8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2ce22546, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="..", cAlternateFileName="")) returned 1 [0212.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0212.531] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0212.531] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0212.531] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0212.531] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8127e00, ftCreationTime.dwHighDateTime=0x1cbd076, ftLastAccessTime.dwLowDateTime=0xcd0a4098, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xd8127e00, ftLastWriteTime.dwHighDateTime=0x1cbd076, nFileSizeHigh=0x0, nFileSizeLow=0xf1b50, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="msdia100.dll", cAlternateFileName="")) returned 1 [0212.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609c8 [0212.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe00 [0212.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218818 [0212.531] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe00 | out: hHeap=0x1f0000) returned 1 [0212.531] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0212.531] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609c8 | out: hHeap=0x1f0000) returned 1 [0212.531] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VC\\msdia100.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia100.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1dc [0212.532] GetFileType (hFile=0x1dc) returned 0x1 [0212.533] CloseHandle (hObject=0x1dc) returned 1 [0212.533] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212828 [0212.533] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VC\\msdia100.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia100.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8127e00, ftCreationTime.dwHighDateTime=0x1cbd076, ftLastAccessTime.dwLowDateTime=0xcd0a4098, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xd8127e00, ftLastWriteTime.dwHighDateTime=0x1cbd076, nFileSizeHigh=0x0, nFileSizeLow=0xf1b50)) returned 1 [0212.533] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212828 | out: hHeap=0x1f0000) returned 1 [0212.533] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212938 [0212.533] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VC\\msdia100.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia100.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8127e00, ftCreationTime.dwHighDateTime=0x1cbd076, ftLastAccessTime.dwLowDateTime=0xcd0a4098, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xd8127e00, ftLastWriteTime.dwHighDateTime=0x1cbd076, nFileSizeHigh=0x0, nFileSizeLow=0xf1b50)) returned 1 [0212.533] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212938 | out: hHeap=0x1f0000) returned 1 [0212.533] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212360 [0212.533] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212360 | out: hHeap=0x1f0000) returned 1 [0212.533] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfe87c00, ftCreationTime.dwHighDateTime=0x1cbfe36, ftLastAccessTime.dwLowDateTime=0x2ce22546, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xcfe87c00, ftLastWriteTime.dwHighDateTime=0x1cbfe36, nFileSizeHigh=0x0, nFileSizeLow=0xd0d50, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="msdia90.dll", cAlternateFileName="")) returned 1 [0212.533] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ab8 [0212.533] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0212.533] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219478 [0212.533] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0212.533] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218818 | out: hHeap=0x1f0000) returned 1 [0212.533] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ab8 | out: hHeap=0x1f0000) returned 1 [0212.534] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VC\\msdia90.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia90.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1dc [0212.535] GetFileType (hFile=0x1dc) returned 0x1 [0212.535] CloseHandle (hObject=0x1dc) returned 1 [0212.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d88 [0212.535] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VC\\msdia90.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia90.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfe87c00, ftCreationTime.dwHighDateTime=0x1cbfe36, ftLastAccessTime.dwLowDateTime=0x2ce22546, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xcfe87c00, ftLastWriteTime.dwHighDateTime=0x1cbfe36, nFileSizeHigh=0x0, nFileSizeLow=0xd0d50)) returned 1 [0212.536] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d88 | out: hHeap=0x1f0000) returned 1 [0212.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2124f8 [0212.536] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VC\\msdia90.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia90.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfe87c00, ftCreationTime.dwHighDateTime=0x1cbfe36, ftLastAccessTime.dwLowDateTime=0x2ce22546, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xcfe87c00, ftLastWriteTime.dwHighDateTime=0x1cbfe36, nFileSizeHigh=0x0, nFileSizeLow=0xd0d50)) returned 1 [0212.536] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2124f8 | out: hHeap=0x1f0000) returned 1 [0212.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211ae0 [0212.536] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211ae0 | out: hHeap=0x1f0000) returned 1 [0212.536] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfe87c00, ftCreationTime.dwHighDateTime=0x1cbfe36, ftLastAccessTime.dwLowDateTime=0x2ce22546, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xcfe87c00, ftLastWriteTime.dwHighDateTime=0x1cbfe36, nFileSizeHigh=0x0, nFileSizeLow=0xd0d50, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="msdia90.dll", cAlternateFileName="")) returned 0 [0212.536] FindClose (in: hFindFile=0x24e6c0 | out: hFindFile=0x24e6c0) returned 1 [0212.536] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219478 | out: hHeap=0x1f0000) returned 1 [0212.536] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226d28 | out: hHeap=0x1f0000) returned 1 [0212.536] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0212.536] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233d20 | out: hHeap=0x1f0000) returned 1 [0212.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233d20 [0212.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609c8 [0212.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x226d28 [0212.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fef0 [0212.536] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VGX\\*", lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b59a78, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName=".", cAlternateFileName="")) returned 0x24ea80 [0212.537] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0212.537] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fef0 | out: hHeap=0x1f0000) returned 1 [0212.537] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0212.537] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b59a78, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="..", cAlternateFileName="")) returned 1 [0212.537] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0212.537] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0212.537] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0212.537] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0212.537] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a69a2a7, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xb3fd6e56, ftLastAccessTime.dwHighDateTime=0x1d2fa09, ftLastWriteTime.dwLowDateTime=0x4a69a2a7, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0xf1000, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="VGX.dll", cAlternateFileName="")) returned 1 [0212.537] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220328 [0212.537] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218b88 [0212.537] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220328 | out: hHeap=0x1f0000) returned 1 [0212.537] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0212.537] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VGX\\VGX.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vgx\\vgx.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0212.538] GetLastError () returned 0x5 [0212.538] GetLastError () returned 0x5 [0212.539] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a69a2a7, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xb3fd6e56, ftLastAccessTime.dwHighDateTime=0x1d2fa09, ftLastWriteTime.dwLowDateTime=0x4a69a2a7, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0xf1000, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="VGX.dll", cAlternateFileName="")) returned 0 [0212.539] FindClose (in: hFindFile=0x24ea80 | out: hFindFile=0x24ea80) returned 1 [0212.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218b88 | out: hHeap=0x1f0000) returned 1 [0212.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226d28 | out: hHeap=0x1f0000) returned 1 [0212.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609c8 | out: hHeap=0x1f0000) returned 1 [0212.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233d20 | out: hHeap=0x1f0000) returned 1 [0212.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233d20 [0212.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0212.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x226d28 [0212.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21ff68 [0212.539] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\*", lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49ecb94e, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ae972f5, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName=".", cAlternateFileName="")) returned 0x24ec40 [0212.540] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0212.540] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ff68 | out: hHeap=0x1f0000) returned 1 [0212.540] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0212.540] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49ecb94e, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ae972f5, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="..", cAlternateFileName="")) returned 1 [0212.540] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0212.540] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0212.540] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0212.540] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0212.540] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4aebd53e, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4aebd53e, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="10.0", cAlternateFileName="")) returned 1 [0212.540] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21ff68 [0212.540] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218608 [0212.540] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ff68 | out: hHeap=0x1f0000) returned 1 [0212.540] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0212.540] lstrcmpW (lpString1="10.0", lpString2=".") returned 1 [0212.540] lstrcmpW (lpString1="10.0", lpString2="..") returned 1 [0212.540] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x2052d0 [0212.540] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2124f8 [0212.540] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x29080, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="vstoee.dll", cAlternateFileName="")) returned 1 [0212.540] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609c8 [0212.540] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0212.540] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218a28 [0212.540] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0212.540] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218608 | out: hHeap=0x1f0000) returned 1 [0212.540] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609c8 | out: hHeap=0x1f0000) returned 1 [0212.541] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1dc [0212.542] GetFileType (hFile=0x1dc) returned 0x1 [0212.542] CloseHandle (hObject=0x1dc) returned 1 [0212.542] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211a58 [0212.542] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x29080)) returned 1 [0212.542] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211a58 | out: hHeap=0x1f0000) returned 1 [0212.542] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2122d8 [0212.542] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x29080)) returned 1 [0212.542] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2122d8 | out: hHeap=0x1f0000) returned 1 [0212.542] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2123e8 [0212.543] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2123e8 | out: hHeap=0x1f0000) returned 1 [0212.543] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6340300, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0xd6340300, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x4298, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="vstoee100.tlb", cAlternateFileName="VSTOEE~1.TLB")) returned 1 [0212.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609c8 [0212.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0212.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218b88 [0212.543] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0212.543] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218a28 | out: hHeap=0x1f0000) returned 1 [0212.543] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609c8 | out: hHeap=0x1f0000) returned 1 [0212.543] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee100.tlb" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee100.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x238 [0212.827] GetFileType (hFile=0x238) returned 0x1 [0212.827] CloseHandle (hObject=0x238) returned 1 [0212.827] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0212.827] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee100.tlb" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee100.tlb"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6340300, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0xd6340300, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x4298)) returned 1 [0212.827] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0212.827] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0212.827] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee100.tlb" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee100.tlb"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6340300, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0xd6340300, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x4298)) returned 1 [0212.827] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0212.827] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0212.827] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0212.827] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6340300, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0xd6340300, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x5898, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="vstoee90.tlb", cAlternateFileName="")) returned 1 [0212.827] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605b8 [0212.828] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220328 [0212.828] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ef8 [0212.828] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220328 | out: hHeap=0x1f0000) returned 1 [0212.828] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218b88 | out: hHeap=0x1f0000) returned 1 [0212.828] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0213.091] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee90.tlb" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee90.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0213.091] GetFileType (hFile=0x224) returned 0x1 [0213.092] CloseHandle (hObject=0x224) returned 1 [0213.092] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0213.092] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee90.tlb" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee90.tlb"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6340300, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0xd6340300, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x5898)) returned 1 [0213.092] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0213.092] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0213.092] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee90.tlb" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee90.tlb"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6340300, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0xd6340300, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x5898)) returned 1 [0213.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0213.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0213.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0213.093] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6340300, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0xd6340300, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x5898, dwReserved0=0x22ac5e, dwReserved1=0x640062, cFileName="vstoee90.tlb", cAlternateFileName="")) returned 0 [0213.093] FindClose (in: hFindFile=0x24ec40 | out: hFindFile=0x24ec40) returned 1 [0213.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234110 [0213.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ab8 [0213.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f350 [0213.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212140 [0213.093] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\*", lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4aebd53e, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4aebd53e, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e980 [0213.096] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212938 [0213.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212140 | out: hHeap=0x1f0000) returned 1 [0213.096] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0213.096] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4aebd53e, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4aebd53e, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0213.096] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2129c0 [0213.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212938 | out: hHeap=0x1f0000) returned 1 [0213.096] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0213.096] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0213.096] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4a6fdac8, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0213.097] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212938 [0213.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2129c0 | out: hHeap=0x1f0000) returned 1 [0213.097] lstrcmpW (lpString1="1033", lpString2=".") returned 1 [0213.097] lstrcmpW (lpString1="1033", lpString2="..") returned 1 [0213.097] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x2051f0 [0213.097] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212140 [0213.097] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x18888, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOInstaller.exe", cAlternateFileName="VSTOIN~1.EXE")) returned 1 [0213.097] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x234e20 [0213.097] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2129c0 [0213.097] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0213.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2129c0 | out: hHeap=0x1f0000) returned 1 [0213.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212938 | out: hHeap=0x1f0000) returned 1 [0213.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234e20 | out: hHeap=0x1f0000) returned 1 [0213.098] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0213.099] GetFileType (hFile=0x224) returned 0x1 [0213.099] CloseHandle (hObject=0x224) returned 1 [0213.100] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a968 [0213.100] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.exe"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x18888)) returned 1 [0213.100] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a968 | out: hHeap=0x1f0000) returned 1 [0213.100] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a620 [0213.100] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.exe"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x18888)) returned 1 [0213.100] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a620 | out: hHeap=0x1f0000) returned 1 [0213.100] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a968 [0213.100] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a968 | out: hHeap=0x1f0000) returned 1 [0213.100] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4aebd53e, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x59a70, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOLoader.dll", cAlternateFileName="VSTOLO~1.DLL")) returned 1 [0213.100] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a18 [0213.101] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212938 [0213.101] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0213.101] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212938 | out: hHeap=0x1f0000) returned 1 [0213.101] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0213.101] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a18 | out: hHeap=0x1f0000) returned 1 [0213.101] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOLoader.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoloader.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0213.101] GetFileType (hFile=0x224) returned 0x1 [0213.102] CloseHandle (hObject=0x224) returned 1 [0213.102] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a8c0 [0213.102] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOLoader.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoloader.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4aebd53e, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x59a70)) returned 1 [0213.102] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a8c0 | out: hHeap=0x1f0000) returned 1 [0213.102] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a380 [0213.102] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOLoader.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoloader.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4aebd53e, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x59a70)) returned 1 [0213.102] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a380 | out: hHeap=0x1f0000) returned 1 [0213.102] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a230 [0213.102] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a230 | out: hHeap=0x1f0000) returned 1 [0213.102] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0xbee8, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOMessageProvider.dll", cAlternateFileName="VSTOME~1.DLL")) returned 1 [0213.103] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x234de8 [0213.103] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212938 [0213.103] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0213.103] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212938 | out: hHeap=0x1f0000) returned 1 [0213.103] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0213.103] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234de8 | out: hHeap=0x1f0000) returned 1 [0213.103] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOMessageProvider.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstomessageprovider.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0213.105] GetFileType (hFile=0x224) returned 0x1 [0213.105] CloseHandle (hObject=0x224) returned 1 [0213.105] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2614f8 [0213.105] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOMessageProvider.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstomessageprovider.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0xbee8)) returned 1 [0213.105] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2614f8 | out: hHeap=0x1f0000) returned 1 [0213.105] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261668 [0213.105] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOMessageProvider.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstomessageprovider.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0xbee8)) returned 1 [0213.106] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261668 | out: hHeap=0x1f0000) returned 1 [0213.106] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x260ff0 [0213.106] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ff0 | out: hHeap=0x1f0000) returned 1 [0213.106] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0xbee8, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOMessageProvider.dll", cAlternateFileName="VSTOME~1.DLL")) returned 0 [0213.106] FindClose (in: hFindFile=0x24e980 | out: hFindFile=0x24e980) returned 1 [0213.106] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346f8 [0213.106] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a18 [0213.106] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22db68 [0213.107] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0213.107] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\*", lpFindFileData=0x1cfdc3c | out: lpFindFileData=0x1cfdc3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4a6fdac8, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e5c0 [0213.107] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212938 [0213.107] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0213.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212938 | out: hHeap=0x1f0000) returned 1 [0213.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0213.107] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0213.107] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1cfdc3c | out: lpFindFileData=0x1cfdc3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4a6fdac8, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0213.107] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212938 [0213.107] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0213.108] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212938 | out: hHeap=0x1f0000) returned 1 [0213.108] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0213.108] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0213.108] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0213.108] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1cfdc3c | out: lpFindFileData=0x1cfdc3c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a6d7a0a, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x30a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOInstallerUI.dll", cAlternateFileName="VSTOIN~1.DLL")) returned 1 [0213.108] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x234d40 [0213.108] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212938 [0213.108] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0213.108] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212938 | out: hHeap=0x1f0000) returned 1 [0213.108] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0213.108] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234d40 | out: hHeap=0x1f0000) returned 1 [0213.109] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOInstallerUI.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoinstallerui.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfda04, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0213.109] GetFileType (hFile=0x224) returned 0x1 [0213.110] CloseHandle (hObject=0x224) returned 1 [0213.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261388 [0213.110] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOInstallerUI.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoinstallerui.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfda94 | out: lpFileInformation=0x1cfda94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a6d7a0a, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x30a0)) returned 1 [0213.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261388 | out: hHeap=0x1f0000) returned 1 [0213.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2614f8 [0213.110] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOInstallerUI.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoinstallerui.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfdaa4 | out: lpFileInformation=0x1cfdaa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a6d7a0a, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x30a0)) returned 1 [0213.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2614f8 | out: hHeap=0x1f0000) returned 1 [0213.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261668 [0213.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261668 | out: hHeap=0x1f0000) returned 1 [0213.110] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1cfdc3c | out: lpFindFileData=0x1cfdc3c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x5080, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOLoaderUI.dll", cAlternateFileName="VSTOLO~1.DLL")) returned 1 [0213.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x234d08 [0213.111] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212938 [0213.111] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0213.111] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212938 | out: hHeap=0x1f0000) returned 1 [0213.111] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0213.111] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234d08 | out: hHeap=0x1f0000) returned 1 [0213.111] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOLoaderUI.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoloaderui.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfda04, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0213.111] GetFileType (hFile=0x224) returned 0x1 [0213.112] CloseHandle (hObject=0x224) returned 1 [0213.112] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21aa10 [0213.112] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOLoaderUI.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoloaderui.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfda94 | out: lpFileInformation=0x1cfda94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x5080)) returned 1 [0213.112] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21aa10 | out: hHeap=0x1f0000) returned 1 [0213.112] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a0e0 [0213.112] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOLoaderUI.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoloaderui.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfdaa4 | out: lpFileInformation=0x1cfdaa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x5080)) returned 1 [0213.112] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a0e0 | out: hHeap=0x1f0000) returned 1 [0213.112] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219ee8 [0213.113] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219ee8 | out: hHeap=0x1f0000) returned 1 [0213.113] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1cfdc3c | out: lpFindFileData=0x1cfdc3c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x5080, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOLoaderUI.dll", cAlternateFileName="VSTOLO~1.DLL")) returned 0 [0213.113] FindClose (in: hFindFile=0x24e5c0 | out: hFindFile=0x24e5c0) returned 1 [0213.113] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0213.113] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22db68 | out: hHeap=0x1f0000) returned 1 [0213.113] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a18 | out: hHeap=0x1f0000) returned 1 [0213.113] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346f8 | out: hHeap=0x1f0000) returned 1 [0213.113] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0213.113] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212140 | out: hHeap=0x1f0000) returned 1 [0213.113] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2051f0 | out: hHeap=0x1f0000) returned 1 [0213.113] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f350 | out: hHeap=0x1f0000) returned 1 [0213.113] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ab8 | out: hHeap=0x1f0000) returned 1 [0213.114] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234110 | out: hHeap=0x1f0000) returned 1 [0213.114] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ef8 | out: hHeap=0x1f0000) returned 1 [0213.114] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2124f8 | out: hHeap=0x1f0000) returned 1 [0213.114] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2052d0 | out: hHeap=0x1f0000) returned 1 [0213.114] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226d28 | out: hHeap=0x1f0000) returned 1 [0213.114] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0213.114] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233d20 | out: hHeap=0x1f0000) returned 1 [0213.114] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ae50 | out: hHeap=0x1f0000) returned 1 [0213.114] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a1c0 | out: hHeap=0x1f0000) returned 1 [0213.114] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ad60 | out: hHeap=0x1f0000) returned 1 [0213.114] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22add8 | out: hHeap=0x1f0000) returned 1 [0213.115] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229e90 | out: hHeap=0x1f0000) returned 1 [0213.115] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261218 | out: hHeap=0x1f0000) returned 1 [0213.115] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a138 | out: hHeap=0x1f0000) returned 1 [0213.115] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a468 | out: hHeap=0x1f0000) returned 1 [0213.115] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229c70 | out: hHeap=0x1f0000) returned 1 [0213.115] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aec8 | out: hHeap=0x1f0000) returned 1 [0213.115] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a8b0 | out: hHeap=0x1f0000) returned 1 [0213.115] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ac70 | out: hHeap=0x1f0000) returned 1 [0213.115] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aa18 | out: hHeap=0x1f0000) returned 1 [0213.115] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b130 | out: hHeap=0x1f0000) returned 1 [0213.115] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d6a0 | out: hHeap=0x1f0000) returned 1 [0213.115] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bd0 | out: hHeap=0x1f0000) returned 1 [0213.115] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2343e0 | out: hHeap=0x1f0000) returned 1 [0213.116] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234110 [0213.116] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a18 [0213.116] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e1c8 [0213.116] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235700 [0213.116] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\Services\\*", lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c11068, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x225f5c, cFileName=".", cAlternateFileName="")) returned 0x24e780 [0213.116] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2360c0 [0213.116] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0213.116] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0213.116] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c11068, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x225f5c, cFileName="..", cAlternateFileName="")) returned 1 [0213.116] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236190 [0213.116] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2360c0 | out: hHeap=0x1f0000) returned 1 [0213.116] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0213.117] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0213.117] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440ad34a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440ad34a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440ad34a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa8e, dwReserved0=0x20002, dwReserved1=0x225f5c, cFileName="verisign.bmp", cAlternateFileName="")) returned 1 [0213.117] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a68 [0213.117] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236128 [0213.117] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221410 [0213.117] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236128 | out: hHeap=0x1f0000) returned 1 [0213.117] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236190 | out: hHeap=0x1f0000) returned 1 [0213.117] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a68 | out: hHeap=0x1f0000) returned 1 [0213.117] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\Services\\verisign.bmp" (normalized: "c:\\program files\\common files\\services\\verisign.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe658, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.119] GetLastError () returned 0x5 [0213.119] GetLastError () returned 0x5 [0213.119] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440ad34a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440ad34a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440ad34a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa8e, dwReserved0=0x20002, dwReserved1=0x225f5c, cFileName="verisign.bmp", cAlternateFileName="")) returned 0 [0213.119] FindClose (in: hFindFile=0x24e780 | out: hFindFile=0x24e780) returned 1 [0213.119] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0213.119] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e1c8 | out: hHeap=0x1f0000) returned 1 [0213.119] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a18 | out: hHeap=0x1f0000) returned 1 [0213.119] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234110 | out: hHeap=0x1f0000) returned 1 [0213.120] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233d20 [0213.120] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a68 [0213.120] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f350 [0213.120] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c8b8 [0213.120] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\System\\*", lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c5f95f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x225f5c, cFileName=".", cAlternateFileName="")) returned 0x24e780 [0213.122] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x231848 [0213.122] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0213.122] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0213.122] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c5f95f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x225f5c, cFileName="..", cAlternateFileName="")) returned 1 [0213.122] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x231270 [0213.122] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217c50 [0213.122] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x231270 | out: hHeap=0x1f0000) returned 1 [0213.123] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x231848 | out: hHeap=0x1f0000) returned 1 [0213.123] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0213.123] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0213.123] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0cb0a3f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x225f5c, cFileName="ado", cAlternateFileName="")) returned 1 [0213.123] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c8b8 [0213.123] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217ad0 [0213.123] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0213.123] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217c50 | out: hHeap=0x1f0000) returned 1 [0213.123] lstrcmpW (lpString1="ado", lpString2=".") returned 1 [0213.123] lstrcmpW (lpString1="ado", lpString2="..") returned 1 [0213.123] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x205130 [0213.123] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235a40 [0213.123] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d5a533, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d5a533, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d5a533, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x20002, dwReserved1=0x225f5c, cFileName="DirectDB.dll", cAlternateFileName="")) returned 1 [0213.123] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a18 [0213.123] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c8b8 [0213.123] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x2181d0 [0213.124] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0213.124] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217ad0 | out: hHeap=0x1f0000) returned 1 [0213.124] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a18 | out: hHeap=0x1f0000) returned 1 [0213.124] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\DirectDB.dll" (normalized: "c:\\program files\\common files\\system\\directdb.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe658, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.125] GetLastError () returned 0x5 [0213.125] GetLastError () returned 0x5 [0213.125] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb3579, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x225f5c, cFileName="en-US", cAlternateFileName="")) returned 1 [0213.125] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c8b8 [0213.125] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217cd0 [0213.125] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0213.125] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2181d0 | out: hHeap=0x1f0000) returned 1 [0213.125] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0213.125] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0213.125] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x234d08 [0213.125] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235838 [0213.126] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205130 | out: hHeap=0x1f0000) returned 1 [0213.126] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d7f179, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x225f5c, cFileName="msadc", cAlternateFileName="")) returned 1 [0213.126] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c8b8 [0213.126] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x2177d0 [0213.126] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0213.126] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217cd0 | out: hHeap=0x1f0000) returned 1 [0213.126] lstrcmpW (lpString1="msadc", lpString2=".") returned 1 [0213.126] lstrcmpW (lpString1="msadc", lpString2="..") returned 1 [0213.126] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x48) returned 0x225ec8 [0213.126] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2359d8 [0213.126] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234d08 | out: hHeap=0x1f0000) returned 1 [0213.126] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d8186d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x225f5c, cFileName="Ole DB", cAlternateFileName="OLEDB~1")) returned 1 [0213.126] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c8b8 [0213.126] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217b50 [0213.126] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0213.127] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2177d0 | out: hHeap=0x1f0000) returned 1 [0213.127] lstrcmpW (lpString1="Ole DB", lpString2=".") returned 1 [0213.127] lstrcmpW (lpString1="Ole DB", lpString2="..") returned 1 [0213.127] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2357d0 [0213.127] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235aa8 [0213.127] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225ec8 | out: hHeap=0x1f0000) returned 1 [0213.127] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440d35a9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440d35a9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440d35a9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd0a00, dwReserved0=0x20002, dwReserved1=0x225f5c, cFileName="wab32.dll", cAlternateFileName="")) returned 1 [0213.127] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bd0 [0213.127] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c8b8 [0213.127] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x2176d0 [0213.127] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0213.127] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217b50 | out: hHeap=0x1f0000) returned 1 [0213.127] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bd0 | out: hHeap=0x1f0000) returned 1 [0213.128] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\wab32.dll" (normalized: "c:\\program files\\common files\\system\\wab32.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe658, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.128] GetLastError () returned 0x5 [0213.128] GetLastError () returned 0x5 [0213.128] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440d35a9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440d35a9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440d35a9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xeb600, dwReserved0=0x20002, dwReserved1=0x225f5c, cFileName="wab32res.dll", cAlternateFileName="")) returned 1 [0213.128] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0213.128] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c8b8 [0213.129] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217550 [0213.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0213.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2176d0 | out: hHeap=0x1f0000) returned 1 [0213.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0213.129] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\wab32res.dll" (normalized: "c:\\program files\\common files\\system\\wab32res.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe658, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.550] GetLastError () returned 0x5 [0213.550] GetLastError () returned 0x5 [0213.550] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440d35a9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440d35a9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440d35a9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xeb600, dwReserved0=0x20002, dwReserved1=0x225f5c, cFileName="wab32res.dll", cAlternateFileName="")) returned 0 [0213.550] FindClose (in: hFindFile=0x24e780 | out: hFindFile=0x24e780) returned 1 [0213.551] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234110 [0213.551] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a18 [0213.552] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22db68 [0213.552] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2361f8 [0213.552] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\System\\ado\\*", lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0cb0a3f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e8c0 [0213.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2358a0 [0213.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2361f8 | out: hHeap=0x1f0000) returned 1 [0213.600] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0213.600] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0cb0a3f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0213.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235de8 [0213.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2358a0 | out: hHeap=0x1f0000) returned 1 [0213.600] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0213.600] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0213.600] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52a0c6a1, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x52a0c6a1, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x52a0c6a1, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3a08, dwReserved0=0x0, dwReserved1=0x0, cFileName="adojavas.inc", cAlternateFileName="")) returned 1 [0213.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0213.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235e50 [0213.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220cf0 [0213.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235e50 | out: hHeap=0x1f0000) returned 1 [0213.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235de8 | out: hHeap=0x1f0000) returned 1 [0213.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0213.601] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\ado\\adojavas.inc" (normalized: "c:\\program files\\common files\\system\\ado\\adojavas.inc"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.603] GetLastError () returned 0x5 [0213.603] GetLastError () returned 0x5 [0213.603] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x529e643a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x529e643a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x529e643a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3b5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="adovbs.inc", cAlternateFileName="")) returned 1 [0213.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0213.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235d80 [0213.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2215d8 [0213.603] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235d80 | out: hHeap=0x1f0000) returned 1 [0213.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0213.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0213.604] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\ado\\adovbs.inc" (normalized: "c:\\program files\\common files\\system\\ado\\adovbs.inc"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.605] GetLastError () returned 0x5 [0213.605] GetLastError () returned 0x5 [0213.605] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb2730, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0213.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235d80 [0213.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0213.605] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0213.605] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0213.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x2051f0 [0213.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2358a0 [0213.605] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43854cb5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43854cb5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43854cb5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msader15.dll", cAlternateFileName="")) returned 1 [0213.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0213.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235cb0 [0213.606] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220fe8 [0213.606] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235cb0 | out: hHeap=0x1f0000) returned 1 [0213.606] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235d80 | out: hHeap=0x1f0000) returned 1 [0213.606] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0213.606] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\ado\\msader15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msader15.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.607] GetLastError () returned 0x5 [0213.607] GetLastError () returned 0x5 [0213.607] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463fb128, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xced4b5c5, ftLastAccessTime.dwHighDateTime=0x1d2fa09, ftLastWriteTime.dwLowDateTime=0x463fb128, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x12d400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado15.dll", cAlternateFileName="")) returned 1 [0213.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ab8 [0213.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235908 [0213.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2211b0 [0213.607] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235908 | out: hHeap=0x1f0000) returned 1 [0213.607] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0213.608] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ab8 | out: hHeap=0x1f0000) returned 1 [0213.608] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\ado\\msado15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msado15.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.609] GetLastError () returned 0x5 [0213.609] GetLastError () returned 0x5 [0213.609] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41cc3017, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41cc3017, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41cc3017, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado20.tlb", cAlternateFileName="")) returned 1 [0213.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ab8 [0213.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235d80 [0213.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221a00 [0213.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235d80 | out: hHeap=0x1f0000) returned 1 [0213.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0213.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ab8 | out: hHeap=0x1f0000) returned 1 [0213.609] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\ado\\msado20.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado20.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.610] GetLastError () returned 0x5 [0213.611] GetLastError () returned 0x5 [0213.611] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41cc3017, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41cc3017, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41cc3017, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd200, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado21.tlb", cAlternateFileName="")) returned 1 [0213.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0213.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235908 [0213.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221a98 [0213.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235908 | out: hHeap=0x1f0000) returned 1 [0213.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0213.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0213.611] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\ado\\msado21.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado21.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.612] GetLastError () returned 0x5 [0213.612] GetLastError () returned 0x5 [0213.612] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41cc3017, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41cc3017, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41cc3017, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado25.tlb", cAlternateFileName="")) returned 1 [0213.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ab8 [0213.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235be0 [0213.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220cf0 [0213.612] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235be0 | out: hHeap=0x1f0000) returned 1 [0213.612] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0213.612] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ab8 | out: hHeap=0x1f0000) returned 1 [0213.613] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\ado\\msado25.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado25.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.614] GetLastError () returned 0x5 [0213.614] GetLastError () returned 0x5 [0213.614] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41cc3017, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41cc3017, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41cc3017, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x11400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado26.tlb", cAlternateFileName="")) returned 1 [0213.614] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0213.614] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235d80 [0213.614] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220eb8 [0213.614] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235d80 | out: hHeap=0x1f0000) returned 1 [0213.614] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0213.614] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0213.615] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\ado\\msado26.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado26.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.615] GetLastError () returned 0x5 [0213.615] GetLastError () returned 0x5 [0213.615] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41cc3017, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41cc3017, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41cc3017, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x11600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado27.tlb", cAlternateFileName="")) returned 1 [0213.615] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ab8 [0213.615] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235970 [0213.616] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2211b0 [0213.616] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235970 | out: hHeap=0x1f0000) returned 1 [0213.616] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0213.616] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ab8 | out: hHeap=0x1f0000) returned 1 [0213.616] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\ado\\msado27.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado27.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.617] GetLastError () returned 0x5 [0213.617] GetLastError () returned 0x5 [0213.617] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c6f28a5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4c6f28a5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4c6f28a5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x11400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado28.tlb", cAlternateFileName="")) returned 1 [0213.617] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0213.617] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235700 [0213.617] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220fe8 [0213.617] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0213.617] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0213.617] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0213.618] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\ado\\msado28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado28.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.618] GetLastError () returned 0x5 [0213.618] GetLastError () returned 0x5 [0213.618] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c6f28a5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4c6f28a5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4c6f28a5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x11400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado60.tlb", cAlternateFileName="")) returned 1 [0213.618] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0213.619] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236058 [0213.619] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220eb8 [0213.619] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236058 | out: hHeap=0x1f0000) returned 1 [0213.619] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0213.619] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0213.619] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\ado\\msado60.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado60.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.620] GetLastError () returned 0x5 [0213.621] GetLastError () returned 0x5 [0213.621] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463fb128, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xd005e363, ftLastAccessTime.dwHighDateTime=0x1d2fa09, ftLastWriteTime.dwLowDateTime=0x463fb128, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x58e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadomd.dll", cAlternateFileName="")) returned 1 [0213.621] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0213.621] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235eb8 [0213.621] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221378 [0213.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235eb8 | out: hHeap=0x1f0000) returned 1 [0213.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0213.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0213.622] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\ado\\msadomd.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadomd.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.623] GetLastError () returned 0x5 [0213.623] GetLastError () returned 0x5 [0213.623] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x437960ad, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x437960ad, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x437960ad, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadomd28.tlb", cAlternateFileName="")) returned 1 [0213.623] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ab8 [0213.623] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235f20 [0213.623] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221a00 [0213.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235f20 | out: hHeap=0x1f0000) returned 1 [0213.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0213.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ab8 | out: hHeap=0x1f0000) returned 1 [0213.624] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\ado\\msadomd28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msadomd28.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.624] GetLastError () returned 0x5 [0213.624] GetLastError () returned 0x5 [0213.624] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41da7e83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41da7e83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41da7e83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb200, dwReserved0=0x0, dwReserved1=0x0, cFileName="msador15.dll", cAlternateFileName="")) returned 1 [0213.624] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0213.624] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235d80 [0213.624] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220f50 [0213.624] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235d80 | out: hHeap=0x1f0000) returned 1 [0213.624] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0213.624] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0213.625] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\ado\\msador15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msador15.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.625] GetLastError () returned 0x5 [0213.625] GetLastError () returned 0x5 [0213.625] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x438ed65e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x438ed65e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x438ed65e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x8c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msador28.tlb", cAlternateFileName="")) returned 1 [0213.625] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ab8 [0213.625] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235700 [0213.625] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221a98 [0213.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0213.626] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0213.626] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ab8 | out: hHeap=0x1f0000) returned 1 [0213.626] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\ado\\msador28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msador28.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.627] GetLastError () returned 0x5 [0213.627] GetLastError () returned 0x5 [0213.627] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463fb128, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xc5b43065, ftLastAccessTime.dwHighDateTime=0x1d2fa09, ftLastWriteTime.dwLowDateTime=0x463fb128, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x62e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadox.dll", cAlternateFileName="")) returned 1 [0213.627] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0213.627] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235700 [0213.627] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221b30 [0213.627] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0213.627] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0213.627] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0213.628] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\ado\\msadox.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadox.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.628] GetLastError () returned 0x5 [0213.628] GetLastError () returned 0x5 [0213.628] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43c5ad98, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43c5ad98, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43c5ad98, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadox28.tlb", cAlternateFileName="")) returned 1 [0213.629] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0213.629] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2360c0 [0213.629] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2214a8 [0213.629] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2360c0 | out: hHeap=0x1f0000) returned 1 [0213.629] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0213.629] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0213.630] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\ado\\msadox28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msadox28.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.630] GetLastError () returned 0x5 [0213.630] GetLastError () returned 0x5 [0213.630] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x437960ad, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x437960ad, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x437960ad, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x16400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadrh15.dll", cAlternateFileName="")) returned 1 [0213.630] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ab8 [0213.630] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235908 [0213.630] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220c58 [0213.630] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235908 | out: hHeap=0x1f0000) returned 1 [0213.630] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0213.630] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ab8 | out: hHeap=0x1f0000) returned 1 [0213.631] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\ado\\msadrh15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadrh15.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.774] GetLastError () returned 0x5 [0213.774] GetLastError () returned 0x5 [0213.775] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x437960ad, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x437960ad, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x437960ad, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x16400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadrh15.dll", cAlternateFileName="")) returned 0 [0213.775] FindClose (in: hFindFile=0x24e8c0 | out: hFindFile=0x24e8c0) returned 1 [0213.776] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234a58 [0213.776] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609f0 [0213.776] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e4f8 [0213.776] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0213.776] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\System\\ado\\en-US\\*", lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb2730, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ed40 [0213.777] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220328 [0213.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0213.777] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0213.777] FindNextFileW (in: hFindFile=0x24ed40, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb2730, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0213.778] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0213.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220328 | out: hHeap=0x1f0000) returned 1 [0213.778] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0213.778] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0213.778] FindNextFileW (in: hFindFile=0x24ed40, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b9483e2, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb3fb1900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msader15.dll.mui", cAlternateFileName="")) returned 1 [0213.778] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0213.778] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220490 [0213.778] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219478 [0213.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220490 | out: hHeap=0x1f0000) returned 1 [0213.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0213.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0213.956] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\ado\\en-US\\msader15.dll.mui" (normalized: "c:\\program files\\common files\\system\\ado\\en-us\\msader15.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.988] GetLastError () returned 0x5 [0213.988] GetLastError () returned 0x5 [0213.988] FindNextFileW (in: hFindFile=0x24ed40, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b9483e2, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb3fb1900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msader15.dll.mui", cAlternateFileName="")) returned 0 [0213.988] FindClose (in: hFindFile=0x24ed40 | out: hFindFile=0x24ed40) returned 1 [0213.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219478 | out: hHeap=0x1f0000) returned 1 [0213.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e4f8 | out: hHeap=0x1f0000) returned 1 [0213.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609f0 | out: hHeap=0x1f0000) returned 1 [0213.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234a58 | out: hHeap=0x1f0000) returned 1 [0213.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0213.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2358a0 | out: hHeap=0x1f0000) returned 1 [0213.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2051f0 | out: hHeap=0x1f0000) returned 1 [0213.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22db68 | out: hHeap=0x1f0000) returned 1 [0213.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a18 | out: hHeap=0x1f0000) returned 1 [0213.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234110 | out: hHeap=0x1f0000) returned 1 [0213.989] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234110 [0213.989] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609f0 [0213.989] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e4f8 [0213.989] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235768 [0213.989] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\System\\en-US\\*", lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb3579, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ecc0 [0213.990] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235d80 [0213.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235768 | out: hHeap=0x1f0000) returned 1 [0213.990] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0213.990] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb3579, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0213.990] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235700 [0213.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235d80 | out: hHeap=0x1f0000) returned 1 [0213.990] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0213.990] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0213.990] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dd86035, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x755f99d9, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x75fdf500, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32res.dll.mui", cAlternateFileName="")) returned 1 [0213.990] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0213.990] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235be0 [0213.991] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220eb8 [0213.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235be0 | out: hHeap=0x1f0000) returned 1 [0213.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0213.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0213.991] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\en-US\\wab32res.dll.mui" (normalized: "c:\\program files\\common files\\system\\en-us\\wab32res.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.992] GetLastError () returned 0x5 [0213.992] GetLastError () returned 0x5 [0213.993] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dd86035, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x755f99d9, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x75fdf500, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32res.dll.mui", cAlternateFileName="")) returned 0 [0213.993] FindClose (in: hFindFile=0x24ecc0 | out: hFindFile=0x24ecc0) returned 1 [0213.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0213.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e4f8 | out: hHeap=0x1f0000) returned 1 [0213.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609f0 | out: hHeap=0x1f0000) returned 1 [0213.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234110 | out: hHeap=0x1f0000) returned 1 [0213.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234110 [0213.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609f0 [0213.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22db68 [0213.994] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235be0 [0213.994] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\System\\msadc\\*", lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d7f179, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24eb80 [0213.996] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2362c8 [0213.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235be0 | out: hHeap=0x1f0000) returned 1 [0213.996] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0213.997] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d7f179, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0213.997] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235f20 [0213.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2362c8 | out: hHeap=0x1f0000) returned 1 [0213.997] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0213.997] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0213.997] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41da7e83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41da7e83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41da7e83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x276, dwReserved0=0x0, dwReserved1=0x0, cFileName="adcjavas.inc", cAlternateFileName="")) returned 1 [0213.997] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a18 [0213.997] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235f88 [0213.997] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2211b0 [0213.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235f88 | out: hHeap=0x1f0000) returned 1 [0213.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235f20 | out: hHeap=0x1f0000) returned 1 [0213.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a18 | out: hHeap=0x1f0000) returned 1 [0213.998] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\msadc\\adcjavas.inc" (normalized: "c:\\program files\\common files\\system\\msadc\\adcjavas.inc"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.998] GetLastError () returned 0x5 [0213.999] GetLastError () returned 0x5 [0213.999] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41dce0ea, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41dce0ea, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41dce0ea, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x26f, dwReserved0=0x0, dwReserved1=0x0, cFileName="adcvbs.inc", cAlternateFileName="")) returned 1 [0213.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0213.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235908 [0213.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221a00 [0213.999] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235908 | out: hHeap=0x1f0000) returned 1 [0213.999] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0213.999] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0214.000] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\msadc\\adcvbs.inc" (normalized: "c:\\program files\\common files\\system\\msadc\\adcvbs.inc"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.000] GetLastError () returned 0x5 [0214.000] GetLastError () returned 0x5 [0214.000] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d805e9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0214.000] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235700 [0214.000] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2211b0 [0214.000] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0214.000] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0214.000] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0214.000] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0214.000] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204fb0 [0214.000] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0214.000] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41da7e83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41da7e83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41da7e83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa9c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadce.dll", cAlternateFileName="")) returned 1 [0214.000] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260658 [0214.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235ff0 [0214.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221a98 [0214.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235ff0 | out: hHeap=0x1f0000) returned 1 [0214.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0214.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260658 | out: hHeap=0x1f0000) returned 1 [0214.001] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\msadc\\msadce.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadce.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.002] GetLastError () returned 0x5 [0214.002] GetLastError () returned 0x5 [0214.002] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41dce0ea, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41dce0ea, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41dce0ea, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcer.dll", cAlternateFileName="")) returned 1 [0214.002] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0214.002] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235be0 [0214.002] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220f50 [0214.002] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235be0 | out: hHeap=0x1f0000) returned 1 [0214.002] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0214.002] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0214.003] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\msadc\\msadcer.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadcer.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.004] GetLastError () returned 0x5 [0214.004] GetLastError () returned 0x5 [0214.004] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41da7e83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41da7e83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41da7e83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3b400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadco.dll", cAlternateFileName="")) returned 1 [0214.004] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a18 [0214.004] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235768 [0214.004] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221a00 [0214.004] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235768 | out: hHeap=0x1f0000) returned 1 [0214.004] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0214.004] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a18 | out: hHeap=0x1f0000) returned 1 [0214.005] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\msadc\\msadco.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadco.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.005] GetLastError () returned 0x5 [0214.005] GetLastError () returned 0x5 [0214.005] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41da7e83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41da7e83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41da7e83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcor.dll", cAlternateFileName="")) returned 1 [0214.005] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a18 [0214.005] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236190 [0214.005] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221a98 [0214.005] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236190 | out: hHeap=0x1f0000) returned 1 [0214.006] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0214.006] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a18 | out: hHeap=0x1f0000) returned 1 [0214.006] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\msadc\\msadcor.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadcor.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.007] GetLastError () returned 0x5 [0214.007] GetLastError () returned 0x5 [0214.007] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440870df, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440870df, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440870df, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x44400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadds.dll", cAlternateFileName="")) returned 1 [0214.007] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a18 [0214.007] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2358a0 [0214.007] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221540 [0214.007] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2358a0 | out: hHeap=0x1f0000) returned 1 [0214.007] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0214.007] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a18 | out: hHeap=0x1f0000) returned 1 [0214.007] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\msadc\\msadds.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadds.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.007] GetLastError () returned 0x5 [0214.008] GetLastError () returned 0x5 [0214.008] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44060e78, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x44060e78, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x44060e78, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msaddsr.dll", cAlternateFileName="")) returned 1 [0214.008] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a18 [0214.008] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235d80 [0214.008] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2215d8 [0214.008] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235d80 | out: hHeap=0x1f0000) returned 1 [0214.008] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0214.008] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a18 | out: hHeap=0x1f0000) returned 1 [0214.008] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\msadc\\msaddsr.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msaddsr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.008] GetLastError () returned 0x5 [0214.008] GetLastError () returned 0x5 [0214.008] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41d5b9b4, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41d5b9b4, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41d5b9b4, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaprsr.dll", cAlternateFileName="")) returned 1 [0214.008] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a18 [0214.008] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235e50 [0214.009] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220d88 [0214.009] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235e50 | out: hHeap=0x1f0000) returned 1 [0214.009] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0214.009] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a18 | out: hHeap=0x1f0000) returned 1 [0214.009] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\msadc\\msdaprsr.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaprsr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.010] GetLastError () returned 0x5 [0214.010] GetLastError () returned 0x5 [0214.010] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41d5b9b4, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41d5b9b4, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41d5b9b4, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x57000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaprst.dll", cAlternateFileName="")) returned 1 [0214.010] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a18 [0214.010] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236128 [0214.010] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220eb8 [0214.010] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236128 | out: hHeap=0x1f0000) returned 1 [0214.010] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0214.010] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a18 | out: hHeap=0x1f0000) returned 1 [0214.010] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\msadc\\msdaprst.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaprst.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.011] GetLastError () returned 0x5 [0214.011] GetLastError () returned 0x5 [0214.011] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44060e78, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x44060e78, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x44060e78, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x36200, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdarem.dll", cAlternateFileName="")) returned 1 [0214.011] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a18 [0214.011] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235be0 [0214.011] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221540 [0214.011] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235be0 | out: hHeap=0x1f0000) returned 1 [0214.011] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0214.011] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a18 | out: hHeap=0x1f0000) returned 1 [0214.012] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\msadc\\msdarem.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdarem.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.012] GetLastError () returned 0x5 [0214.012] GetLastError () returned 0x5 [0214.012] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4403ac10, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4403ac10, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4403ac10, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaremr.dll", cAlternateFileName="")) returned 1 [0214.012] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a18 [0214.012] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2362c8 [0214.012] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221a00 [0214.013] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2362c8 | out: hHeap=0x1f0000) returned 1 [0214.013] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0214.013] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a18 | out: hHeap=0x1f0000) returned 1 [0214.013] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\msadc\\msdaremr.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaremr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.013] GetLastError () returned 0x5 [0214.013] GetLastError () returned 0x5 [0214.013] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440870df, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440870df, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440870df, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x7c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdfmap.dll", cAlternateFileName="")) returned 1 [0214.013] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a18 [0214.013] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235f88 [0214.013] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220c58 [0214.014] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235f88 | out: hHeap=0x1f0000) returned 1 [0214.014] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0214.014] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a18 | out: hHeap=0x1f0000) returned 1 [0214.014] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\msadc\\msdfmap.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdfmap.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.015] GetLastError () returned 0x5 [0214.015] GetLastError () returned 0x5 [0214.015] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440870df, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440870df, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440870df, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x7c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdfmap.dll", cAlternateFileName="")) returned 0 [0214.015] FindClose (in: hFindFile=0x24eb80 | out: hFindFile=0x24eb80) returned 1 [0214.017] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234980 [0214.017] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a18 [0214.017] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e4f8 [0214.017] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fa40 [0214.017] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\System\\msadc\\en-US\\*", lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d805e9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e780 [0214.018] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0214.018] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fa40 | out: hHeap=0x1f0000) returned 1 [0214.019] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0214.019] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d805e9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.019] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe00 [0214.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0214.019] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0214.019] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0214.019] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b99489e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb198bf00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcer.dll.mui", cAlternateFileName="")) returned 1 [0214.019] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260838 [0214.019] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0214.019] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219318 [0214.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0214.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe00 | out: hHeap=0x1f0000) returned 1 [0214.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260838 | out: hHeap=0x1f0000) returned 1 [0214.020] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\msadc\\en-US\\msadcer.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msadcer.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.021] GetLastError () returned 0x5 [0214.021] GetLastError () returned 0x5 [0214.021] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b9e0d51, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb2c9ec00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcor.dll.mui", cAlternateFileName="")) returned 1 [0214.021] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0214.021] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fef0 [0214.021] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218818 [0214.021] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fef0 | out: hHeap=0x1f0000) returned 1 [0214.021] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219318 | out: hHeap=0x1f0000) returned 1 [0214.021] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0214.021] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\msadc\\en-US\\msadcor.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msadcor.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.022] GetLastError () returned 0x5 [0214.022] GetLastError () returned 0x5 [0214.023] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ba9f918, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb198bf00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x3800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msaddsr.dll.mui", cAlternateFileName="")) returned 1 [0214.023] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0214.023] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0214.023] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ce8 [0214.023] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0214.023] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218818 | out: hHeap=0x1f0000) returned 1 [0214.023] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0214.023] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\msadc\\en-US\\msaddsr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msaddsr.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.024] GetLastError () returned 0x5 [0214.024] GetLastError () returned 0x5 [0214.024] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ba9f918, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb198bf00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaprsr.dll.mui", cAlternateFileName="")) returned 1 [0214.024] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0214.024] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe00 [0214.024] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218a28 [0214.024] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe00 | out: hHeap=0x1f0000) returned 1 [0214.024] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ce8 | out: hHeap=0x1f0000) returned 1 [0214.024] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0214.024] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaprsr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msdaprsr.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.393] GetLastError () returned 0x5 [0214.394] GetLastError () returned 0x5 [0214.394] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb38282, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb198bf00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaremr.dll.mui", cAlternateFileName="")) returned 1 [0214.394] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2f0 [0214.394] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0214.394] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x2191b8 [0214.394] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0214.394] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218a28 | out: hHeap=0x1f0000) returned 1 [0214.394] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0214.395] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaremr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msdaremr.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.395] GetLastError () returned 0x5 [0214.395] GetLastError () returned 0x5 [0214.395] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb38282, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb198bf00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaremr.dll.mui", cAlternateFileName="")) returned 0 [0214.395] FindClose (in: hFindFile=0x24e780 | out: hFindFile=0x24e780) returned 1 [0214.395] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2191b8 | out: hHeap=0x1f0000) returned 1 [0214.395] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e4f8 | out: hHeap=0x1f0000) returned 1 [0214.395] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a18 | out: hHeap=0x1f0000) returned 1 [0214.395] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234980 | out: hHeap=0x1f0000) returned 1 [0214.396] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0214.396] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0214.396] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204fb0 | out: hHeap=0x1f0000) returned 1 [0214.396] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22db68 | out: hHeap=0x1f0000) returned 1 [0214.396] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609f0 | out: hHeap=0x1f0000) returned 1 [0214.396] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234110 | out: hHeap=0x1f0000) returned 1 [0214.396] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234110 [0214.396] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609f0 [0214.396] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d6a0 [0214.396] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235f20 [0214.396] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\System\\Ole DB\\*", lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d8186d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24eb40 [0214.398] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236058 [0214.398] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235f20 | out: hHeap=0x1f0000) returned 1 [0214.398] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0214.398] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d8186d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.399] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2358a0 [0214.399] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236058 | out: hHeap=0x1f0000) returned 1 [0214.399] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0214.399] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0214.399] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d8245b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0214.399] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236190 [0214.399] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221410 [0214.399] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236190 | out: hHeap=0x1f0000) returned 1 [0214.399] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2358a0 | out: hHeap=0x1f0000) returned 1 [0214.399] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0214.399] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0214.399] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204fb0 [0214.400] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0214.400] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440870df, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440870df, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440870df, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x18600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaosp.dll", cAlternateFileName="")) returned 1 [0214.400] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a18 [0214.400] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236190 [0214.400] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221a98 [0214.400] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236190 | out: hHeap=0x1f0000) returned 1 [0214.400] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0214.400] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a18 | out: hHeap=0x1f0000) returned 1 [0214.401] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\Ole DB\\msdaosp.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdaosp.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.401] GetLastError () returned 0x5 [0214.401] GetLastError () returned 0x5 [0214.401] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440870df, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440870df, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440870df, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x5be00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaps.dll", cAlternateFileName="")) returned 1 [0214.401] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a18 [0214.401] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2358a0 [0214.401] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221a00 [0214.401] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2358a0 | out: hHeap=0x1f0000) returned 1 [0214.401] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0214.401] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a18 | out: hHeap=0x1f0000) returned 1 [0214.402] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\Ole DB\\msdaps.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdaps.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.402] GetLastError () returned 0x5 [0214.402] GetLastError () returned 0x5 [0214.402] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41d0f4ea, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41d0f4ea, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41d0f4ea, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xaa800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdasql.dll", cAlternateFileName="")) returned 1 [0214.402] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a18 [0214.403] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2358a0 [0214.403] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221378 [0214.403] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2358a0 | out: hHeap=0x1f0000) returned 1 [0214.403] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0214.403] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a18 | out: hHeap=0x1f0000) returned 1 [0214.403] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\Ole DB\\msdasql.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdasql.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.404] GetLastError () returned 0x5 [0214.404] GetLastError () returned 0x5 [0214.404] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41d0f4ea, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41d0f4ea, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41d0f4ea, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdasqlr.dll", cAlternateFileName="")) returned 1 [0214.404] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a18 [0214.404] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235b78 [0214.404] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2211b0 [0214.404] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0214.405] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0214.405] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a18 | out: hHeap=0x1f0000) returned 1 [0214.405] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\Ole DB\\msdasqlr.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdasqlr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.405] GetLastError () returned 0x5 [0214.405] GetLastError () returned 0x5 [0214.405] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41d0f4ea, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41d0f4ea, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41d0f4ea, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1ca00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdatl3.dll", cAlternateFileName="")) returned 1 [0214.405] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a18 [0214.406] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236190 [0214.406] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2212e0 [0214.406] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236190 | out: hHeap=0x1f0000) returned 1 [0214.406] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0214.406] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a18 | out: hHeap=0x1f0000) returned 1 [0214.406] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\Ole DB\\msdatl3.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdatl3.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.406] GetLastError () returned 0x5 [0214.406] GetLastError () returned 0x5 [0214.407] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41d0f4ea, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41d0f4ea, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41d0f4ea, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msxactps.dll", cAlternateFileName="")) returned 1 [0214.407] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a18 [0214.407] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235b78 [0214.407] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220eb8 [0214.407] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0214.407] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0214.407] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a18 | out: hHeap=0x1f0000) returned 1 [0214.408] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\Ole DB\\msxactps.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msxactps.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.408] GetLastError () returned 0x5 [0214.409] GetLastError () returned 0x5 [0214.409] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41ce9283, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41ce9283, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41ce9283, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledb32.dll", cAlternateFileName="")) returned 1 [0214.409] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a18 [0214.409] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235cb0 [0214.409] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2211b0 [0214.409] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235cb0 | out: hHeap=0x1f0000) returned 1 [0214.409] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0214.409] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a18 | out: hHeap=0x1f0000) returned 1 [0214.410] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\Ole DB\\oledb32.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\oledb32.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.410] GetLastError () returned 0x5 [0214.410] GetLastError () returned 0x5 [0214.411] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41ce9283, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41ce9283, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41ce9283, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x13000, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledb32r.dll", cAlternateFileName="")) returned 1 [0214.411] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a18 [0214.411] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2358a0 [0214.411] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221248 [0214.411] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2358a0 | out: hHeap=0x1f0000) returned 1 [0214.411] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0214.411] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a18 | out: hHeap=0x1f0000) returned 1 [0214.411] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\Ole DB\\oledb32r.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\oledb32r.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.411] GetLastError () returned 0x5 [0214.412] GetLastError () returned 0x5 [0214.412] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41ce9283, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41ce9283, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41ce9283, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x264c, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledbjvs.inc", cAlternateFileName="")) returned 1 [0214.412] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a18 [0214.412] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2358a0 [0214.412] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220eb8 [0214.412] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2358a0 | out: hHeap=0x1f0000) returned 1 [0214.412] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0214.412] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a18 | out: hHeap=0x1f0000) returned 1 [0214.413] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\Ole DB\\oledbjvs.inc" (normalized: "c:\\program files\\common files\\system\\ole db\\oledbjvs.inc"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.413] GetLastError () returned 0x5 [0214.413] GetLastError () returned 0x5 [0214.413] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41cc3017, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41cc3017, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41cc3017, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x26f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledbvbs.inc", cAlternateFileName="")) returned 1 [0214.413] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a18 [0214.413] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235700 [0214.413] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221670 [0214.413] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0214.413] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0214.413] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a18 | out: hHeap=0x1f0000) returned 1 [0214.414] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\Ole DB\\oledbvbs.inc" (normalized: "c:\\program files\\common files\\system\\ole db\\oledbvbs.inc"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.415] GetLastError () returned 0x5 [0214.415] GetLastError () returned 0x5 [0214.415] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43c80ffc, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43c80ffc, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43c80ffc, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqloledb.dll", cAlternateFileName="")) returned 1 [0214.415] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a18 [0214.415] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2362c8 [0214.415] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221a00 [0214.415] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2362c8 | out: hHeap=0x1f0000) returned 1 [0214.415] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0214.415] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a18 | out: hHeap=0x1f0000) returned 1 [0214.416] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\Ole DB\\sqloledb.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqloledb.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.417] GetLastError () returned 0x5 [0214.417] GetLastError () returned 0x5 [0214.417] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43c80ffc, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43c80ffc, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43c80ffc, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqloledb.rll", cAlternateFileName="")) returned 1 [0214.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a18 [0214.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2358a0 [0214.418] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221a98 [0214.418] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2358a0 | out: hHeap=0x1f0000) returned 1 [0214.418] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0214.418] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a18 | out: hHeap=0x1f0000) returned 1 [0214.418] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\Ole DB\\sqloledb.rll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqloledb.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.420] GetLastError () returned 0x5 [0214.420] GetLastError () returned 0x5 [0214.420] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43854cb5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43854cb5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43854cb5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x4fa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.dll", cAlternateFileName="")) returned 1 [0214.420] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a18 [0214.420] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235de8 [0214.421] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220cf0 [0214.421] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235de8 | out: hHeap=0x1f0000) returned 1 [0214.421] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0214.421] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a18 | out: hHeap=0x1f0000) returned 1 [0214.421] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\Ole DB\\sqlxmlx.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqlxmlx.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.422] GetLastError () returned 0x5 [0214.422] GetLastError () returned 0x5 [0214.422] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43854cb5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43854cb5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43854cb5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.rll", cAlternateFileName="")) returned 1 [0214.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2607c0 [0214.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235de8 [0214.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2215d8 [0214.423] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235de8 | out: hHeap=0x1f0000) returned 1 [0214.423] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0214.423] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607c0 | out: hHeap=0x1f0000) returned 1 [0214.424] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\Ole DB\\sqlxmlx.rll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqlxmlx.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.424] GetLastError () returned 0x5 [0214.425] GetLastError () returned 0x5 [0214.425] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43854cb5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43854cb5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43854cb5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.rll", cAlternateFileName="")) returned 0 [0214.425] FindClose (in: hFindFile=0x24eb40 | out: hFindFile=0x24eb40) returned 1 [0214.426] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234818 [0214.426] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260770 [0214.426] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e4f8 [0214.426] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0214.427] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\System\\Ole DB\\en-US\\*", lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d8245b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e780 [0214.428] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0214.428] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0214.428] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0214.428] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d8245b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.428] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0214.428] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0214.428] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0214.428] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0214.429] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb38282, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb3fb1900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdasqlr.dll.mui", cAlternateFileName="")) returned 1 [0214.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0214.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0214.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ce8 [0214.429] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0214.429] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0214.429] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0214.430] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\Ole DB\\en-US\\msdasqlr.dll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\msdasqlr.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.772] GetLastError () returned 0x5 [0214.772] GetLastError () returned 0x5 [0214.773] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b9e0d51, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb3fb1900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xbc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledb32r.dll.mui", cAlternateFileName="")) returned 1 [0214.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2f0 [0214.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2202b0 [0214.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219318 [0214.773] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2202b0 | out: hHeap=0x1f0000) returned 1 [0214.773] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ce8 | out: hHeap=0x1f0000) returned 1 [0214.773] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0214.774] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\Ole DB\\en-US\\oledb32r.dll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\oledb32r.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.775] GetLastError () returned 0x5 [0214.775] GetLastError () returned 0x5 [0214.775] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb38282, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb3fb1900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xac00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqloledb.rll.mui", cAlternateFileName="")) returned 1 [0214.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2f0 [0214.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0214.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218818 [0214.775] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0214.775] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219318 | out: hHeap=0x1f0000) returned 1 [0214.775] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0214.776] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\Ole DB\\en-US\\sqloledb.rll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\sqloledb.rll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.777] GetLastError () returned 0x5 [0214.777] GetLastError () returned 0x5 [0214.777] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ba9f918, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb65d7300, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.rll.mui", cAlternateFileName="")) returned 1 [0214.777] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0214.777] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0214.777] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ef8 [0214.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0214.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218818 | out: hHeap=0x1f0000) returned 1 [0214.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0214.777] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\Ole DB\\en-US\\sqlxmlx.rll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\sqlxmlx.rll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.778] GetLastError () returned 0x5 [0214.778] GetLastError () returned 0x5 [0214.778] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ba9f918, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb65d7300, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.rll.mui", cAlternateFileName="")) returned 0 [0214.778] FindClose (in: hFindFile=0x24e780 | out: hFindFile=0x24e780) returned 1 [0214.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ef8 | out: hHeap=0x1f0000) returned 1 [0214.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e4f8 | out: hHeap=0x1f0000) returned 1 [0214.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0214.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234818 | out: hHeap=0x1f0000) returned 1 [0214.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0214.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0214.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204fb0 | out: hHeap=0x1f0000) returned 1 [0214.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d6a0 | out: hHeap=0x1f0000) returned 1 [0214.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609f0 | out: hHeap=0x1f0000) returned 1 [0214.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234110 | out: hHeap=0x1f0000) returned 1 [0214.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217550 | out: hHeap=0x1f0000) returned 1 [0214.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235a40 | out: hHeap=0x1f0000) returned 1 [0214.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235838 | out: hHeap=0x1f0000) returned 1 [0214.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2359d8 | out: hHeap=0x1f0000) returned 1 [0214.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235aa8 | out: hHeap=0x1f0000) returned 1 [0214.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2357d0 | out: hHeap=0x1f0000) returned 1 [0214.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f350 | out: hHeap=0x1f0000) returned 1 [0214.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a68 | out: hHeap=0x1f0000) returned 1 [0214.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233d20 | out: hHeap=0x1f0000) returned 1 [0214.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a28 | out: hHeap=0x1f0000) returned 1 [0214.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239458 | out: hHeap=0x1f0000) returned 1 [0214.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214dd0 | out: hHeap=0x1f0000) returned 1 [0214.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239610 | out: hHeap=0x1f0000) returned 1 [0214.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239b38 | out: hHeap=0x1f0000) returned 1 [0214.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214e38 | out: hHeap=0x1f0000) returned 1 [0214.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e828 | out: hHeap=0x1f0000) returned 1 [0214.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c20 | out: hHeap=0x1f0000) returned 1 [0214.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234308 | out: hHeap=0x1f0000) returned 1 [0214.781] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233d20 [0214.781] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a68 [0214.781] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x261e58 [0214.781] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c8b8 [0214.781] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Internet Explorer\\*", lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfbf3a0e6, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xfbf3a0e6, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e940 [0214.781] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239b38 [0214.781] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0214.781] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0214.781] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfbf3a0e6, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xfbf3a0e6, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.781] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239610 [0214.781] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239b38 | out: hHeap=0x1f0000) returned 1 [0214.781] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0214.782] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0214.782] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d83d92, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa21685bc, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0214.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239b38 [0214.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217ed0 [0214.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239b38 | out: hHeap=0x1f0000) returned 1 [0214.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239610 | out: hHeap=0x1f0000) returned 1 [0214.782] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0214.782] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0214.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x205290 [0214.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235838 [0214.782] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a4ec31b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a4ec31b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a4ec31b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExtExport.exe", cAlternateFileName="")) returned 1 [0214.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609f0 [0214.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239b38 [0214.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217f50 [0214.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239b38 | out: hHeap=0x1f0000) returned 1 [0214.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217ed0 | out: hHeap=0x1f0000) returned 1 [0214.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609f0 | out: hHeap=0x1f0000) returned 1 [0214.783] CreateFileW (lpFileName="C:\\\\Program Files\\Internet Explorer\\ExtExport.exe" (normalized: "c:\\program files\\internet explorer\\extexport.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.784] GetLastError () returned 0x5 [0214.784] GetLastError () returned 0x5 [0214.784] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a9b1003, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a9b1003, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a9b1003, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd400, dwReserved0=0x0, dwReserved1=0x0, cFileName="hmmapi.dll", cAlternateFileName="")) returned 1 [0214.784] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bd0 [0214.784] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239610 [0214.784] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217b50 [0214.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239610 | out: hHeap=0x1f0000) returned 1 [0214.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217f50 | out: hHeap=0x1f0000) returned 1 [0214.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bd0 | out: hHeap=0x1f0000) returned 1 [0214.784] CreateFileW (lpFileName="C:\\\\Program Files\\Internet Explorer\\hmmapi.dll" (normalized: "c:\\program files\\internet explorer\\hmmapi.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.785] GetLastError () returned 0x5 [0214.785] GetLastError () returned 0x5 [0214.785] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a49fe45, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a49fe45, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a49fe45, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x7d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="iediagcmd.exe", cAlternateFileName="")) returned 1 [0214.785] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bd0 [0214.785] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239b38 [0214.785] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x2180d0 [0214.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239b38 | out: hHeap=0x1f0000) returned 1 [0214.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217b50 | out: hHeap=0x1f0000) returned 1 [0214.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bd0 | out: hHeap=0x1f0000) returned 1 [0214.785] CreateFileW (lpFileName="C:\\\\Program Files\\Internet Explorer\\iediagcmd.exe" (normalized: "c:\\program files\\internet explorer\\iediagcmd.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.786] GetLastError () returned 0x5 [0214.786] GetLastError () returned 0x5 [0214.786] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a70c9a1, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xbc534b5e, ftLastAccessTime.dwHighDateTime=0x1d2fa09, ftLastWriteTime.dwLowDateTime=0x4a70c9a1, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x7a800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ieinstal.exe", cAlternateFileName="")) returned 1 [0214.786] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bd0 [0214.786] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239b38 [0214.786] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x218150 [0214.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239b38 | out: hHeap=0x1f0000) returned 1 [0214.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2180d0 | out: hHeap=0x1f0000) returned 1 [0214.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bd0 | out: hHeap=0x1f0000) returned 1 [0214.787] CreateFileW (lpFileName="C:\\\\Program Files\\Internet Explorer\\ieinstal.exe" (normalized: "c:\\program files\\internet explorer\\ieinstal.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.787] GetLastError () returned 0x5 [0214.787] GetLastError () returned 0x5 [0214.787] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a49fe45, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a49fe45, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a49fe45, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x36c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ielowutil.exe", cAlternateFileName="")) returned 1 [0214.787] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0214.787] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239b38 [0214.787] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217ad0 [0214.787] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239b38 | out: hHeap=0x1f0000) returned 1 [0214.787] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218150 | out: hHeap=0x1f0000) returned 1 [0214.787] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0214.788] CreateFileW (lpFileName="C:\\\\Program Files\\Internet Explorer\\ielowutil.exe" (normalized: "c:\\program files\\internet explorer\\ielowutil.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.788] GetLastError () returned 0x5 [0214.788] GetLastError () returned 0x5 [0214.788] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a49fe45, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a49fe45, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a4c60b4, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x63800, dwReserved0=0x0, dwReserved1=0x0, cFileName="IEShims.dll", cAlternateFileName="")) returned 1 [0214.788] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bd0 [0214.789] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239b38 [0214.789] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x2179d0 [0214.789] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239b38 | out: hHeap=0x1f0000) returned 1 [0214.789] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217ad0 | out: hHeap=0x1f0000) returned 1 [0214.789] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bd0 | out: hHeap=0x1f0000) returned 1 [0214.789] CreateFileW (lpFileName="C:\\\\Program Files\\Internet Explorer\\IEShims.dll" (normalized: "c:\\program files\\internet explorer\\ieshims.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.791] GetLastError () returned 0x5 [0214.791] GetLastError () returned 0x5 [0214.791] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa182b3a4, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa1c0b0e4, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x8ca44c00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xc9340, dwReserved0=0x0, dwReserved1=0x0, cFileName="iexplore.exe", cAlternateFileName="")) returned 1 [0214.791] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bd0 [0214.791] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239b38 [0214.791] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217ad0 [0214.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239b38 | out: hHeap=0x1f0000) returned 1 [0214.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2179d0 | out: hHeap=0x1f0000) returned 1 [0214.792] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bd0 | out: hHeap=0x1f0000) returned 1 [0214.792] CreateFileW (lpFileName="C:\\\\Program Files\\Internet Explorer\\iexplore.exe" (normalized: "c:\\program files\\internet explorer\\iexplore.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.792] GetLastError () returned 0x5 [0214.792] GetLastError () returned 0x5 [0214.792] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d846d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a485593, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0214.792] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239b38 [0214.792] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217e50 [0214.792] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239b38 | out: hHeap=0x1f0000) returned 1 [0214.792] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217ad0 | out: hHeap=0x1f0000) returned 1 [0214.792] lstrcmpW (lpString1="images", lpString2=".") returned 1 [0214.792] lstrcmpW (lpString1="images", lpString2="..") returned 1 [0214.792] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0214.792] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235f20 [0214.792] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205290 | out: hHeap=0x1f0000) returned 1 [0214.792] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18998f0, ftCreationTime.dwHighDateTime=0x1d5a06a, ftLastAccessTime.dwLowDateTime=0x9edacdc0, ftLastAccessTime.dwHighDateTime=0x1d54126, ftLastWriteTime.dwLowDateTime=0x9edacdc0, ftLastWriteTime.dwHighDateTime=0x1d54126, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="leechftp.exe", cAlternateFileName="")) returned 1 [0214.793] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609f0 [0214.793] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239b38 [0214.793] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x218450 [0214.793] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239b38 | out: hHeap=0x1f0000) returned 1 [0214.793] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217e50 | out: hHeap=0x1f0000) returned 1 [0214.793] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609f0 | out: hHeap=0x1f0000) returned 1 [0214.793] CreateFileW (lpFileName="C:\\\\Program Files\\Internet Explorer\\leechftp.exe" (normalized: "c:\\program files\\internet explorer\\leechftp.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.793] GetLastError () returned 0x20 [0214.793] GetLastError () returned 0x20 [0214.793] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2132d, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb77a1634, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb77a1634, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIGNUP", cAlternateFileName="")) returned 1 [0214.794] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239b38 [0214.794] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x218150 [0214.794] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239b38 | out: hHeap=0x1f0000) returned 1 [0214.794] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218450 | out: hHeap=0x1f0000) returned 1 [0214.794] lstrcmpW (lpString1="SIGNUP", lpString2=".") returned 1 [0214.794] lstrcmpW (lpString1="SIGNUP", lpString2="..") returned 1 [0214.794] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x48) returned 0x226238 [0214.794] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2362c8 [0214.794] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0214.794] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a9b1003, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a9b1003, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a9b1003, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc218, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1 [0214.794] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609f0 [0214.794] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239b38 [0214.794] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x2181d0 [0214.794] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239b38 | out: hHeap=0x1f0000) returned 1 [0214.794] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218150 | out: hHeap=0x1f0000) returned 1 [0214.794] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609f0 | out: hHeap=0x1f0000) returned 1 [0214.794] CreateFileW (lpFileName="C:\\\\Program Files\\Internet Explorer\\sqmapi.dll" (normalized: "c:\\program files\\internet explorer\\sqmapi.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.797] GetLastError () returned 0x5 [0214.797] GetLastError () returned 0x5 [0214.797] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a9b1003, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a9b1003, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a9b1003, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc218, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 0 [0214.797] FindClose (in: hFindFile=0x24e940 | out: hFindFile=0x24e940) returned 1 [0214.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234500 [0214.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609f0 [0214.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262320 [0214.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235700 [0214.798] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Internet Explorer\\en-US\\*", lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d83d92, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa21685bc, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e780 [0214.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235768 [0214.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0214.798] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0214.798] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d83d92, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa21685bc, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2359d8 [0214.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235768 | out: hHeap=0x1f0000) returned 1 [0214.798] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0214.798] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0214.798] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b2dfe94, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x68e10600, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="hmmapi.dll.mui", cAlternateFileName="")) returned 1 [0214.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bd0 [0214.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235b78 [0214.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221a00 [0214.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0214.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2359d8 | out: hHeap=0x1f0000) returned 1 [0214.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bd0 | out: hHeap=0x1f0000) returned 1 [0214.799] CreateFileW (lpFileName="C:\\\\Program Files\\Internet Explorer\\en-US\\hmmapi.dll.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\hmmapi.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe658, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.800] GetLastError () returned 0x5 [0214.800] GetLastError () returned 0x5 [0214.800] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b3c4cb5, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x75fdf500, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ieinstal.exe.mui", cAlternateFileName="")) returned 1 [0214.800] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf70 [0214.800] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235700 [0214.800] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220d88 [0214.800] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0214.800] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0214.800] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf70 | out: hHeap=0x1f0000) returned 1 [0214.800] CreateFileW (lpFileName="C:\\\\Program Files\\Internet Explorer\\en-US\\ieinstal.exe.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\ieinstal.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe658, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.801] GetLastError () returned 0x5 [0214.801] GetLastError () returned 0x5 [0214.801] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b2212c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x74ccc800, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="iexplore.exe.mui", cAlternateFileName="")) returned 1 [0214.801] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf70 [0214.801] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2358a0 [0214.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221708 [0214.802] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2358a0 | out: hHeap=0x1f0000) returned 1 [0214.802] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0214.802] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf70 | out: hHeap=0x1f0000) returned 1 [0214.802] CreateFileW (lpFileName="C:\\\\Program Files\\Internet Explorer\\en-US\\iexplore.exe.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\iexplore.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe658, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.803] GetLastError () returned 0x5 [0214.803] GetLastError () returned 0x5 [0214.803] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b2212c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x74ccc800, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="iexplore.exe.mui", cAlternateFileName="")) returned 0 [0214.803] FindClose (in: hFindFile=0x24e780 | out: hFindFile=0x24e780) returned 1 [0214.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0214.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262320 | out: hHeap=0x1f0000) returned 1 [0214.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609f0 | out: hHeap=0x1f0000) returned 1 [0214.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234500 | out: hHeap=0x1f0000) returned 1 [0214.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2344b8 [0214.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bd0 [0214.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x261b28 [0214.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235700 [0214.804] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Internet Explorer\\images\\*", lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d846d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a485593, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ec40 [0214.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235f88 [0214.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0214.804] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0214.805] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d846d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a485593, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.805] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2359d8 [0214.805] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235f88 | out: hHeap=0x1f0000) returned 1 [0214.805] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0214.805] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0214.805] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a55ea4d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a55ea4d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a55ea4d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1536, dwReserved0=0x0, dwReserved1=0x0, cFileName="bing.ico", cAlternateFileName="")) returned 1 [0214.805] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609f0 [0214.805] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235b78 [0214.805] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2211b0 [0214.805] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0214.805] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2359d8 | out: hHeap=0x1f0000) returned 1 [0214.805] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609f0 | out: hHeap=0x1f0000) returned 1 [0214.806] CreateFileW (lpFileName="C:\\\\Program Files\\Internet Explorer\\images\\bing.ico" (normalized: "c:\\program files\\internet explorer\\images\\bing.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe658, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.808] GetLastError () returned 0x5 [0214.808] GetLastError () returned 0x5 [0214.808] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a55ea4d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a55ea4d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a55ea4d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1536, dwReserved0=0x0, dwReserved1=0x0, cFileName="bing.ico", cAlternateFileName="")) returned 0 [0214.808] FindClose (in: hFindFile=0x24ec40 | out: hFindFile=0x24ec40) returned 1 [0214.809] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0214.809] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261b28 | out: hHeap=0x1f0000) returned 1 [0214.809] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bd0 | out: hHeap=0x1f0000) returned 1 [0214.809] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2344b8 | out: hHeap=0x1f0000) returned 1 [0214.809] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2344b8 [0214.809] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bd0 [0214.809] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x263178 [0214.809] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235be0 [0214.809] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Internet Explorer\\SIGNUP\\*", lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2132d, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb77a1634, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb77a1634, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e980 [0214.810] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235768 [0214.810] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235be0 | out: hHeap=0x1f0000) returned 1 [0214.810] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0214.810] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2132d, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb77a1634, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb77a1634, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.810] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2361f8 [0214.810] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235768 | out: hHeap=0x1f0000) returned 1 [0214.810] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0214.810] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0214.810] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30c952e, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x970b4468, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x970b4468, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="install.ins", cAlternateFileName="")) returned 1 [0214.810] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609f0 [0214.810] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235700 [0214.810] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221a00 [0214.810] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0214.811] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2361f8 | out: hHeap=0x1f0000) returned 1 [0214.811] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609f0 | out: hHeap=0x1f0000) returned 1 [0214.811] CreateFileW (lpFileName="C:\\\\Program Files\\Internet Explorer\\SIGNUP\\install.ins" (normalized: "c:\\program files\\internet explorer\\signup\\install.ins"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe658, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0215.283] GetFileType (hFile=0x21c) returned 0x1 [0215.283] CloseHandle (hObject=0x21c) returned 1 [0215.283] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0215.283] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Internet Explorer\\SIGNUP\\install.ins" (normalized: "c:\\program files\\internet explorer\\signup\\install.ins"), fInfoLevelId=0x0, lpFileInformation=0x1cfe6ec | out: lpFileInformation=0x1cfe6ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30c952e, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x970b4468, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x970b4468, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1c4)) returned 1 [0215.284] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0215.284] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0215.284] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Internet Explorer\\SIGNUP\\install.ins" (normalized: "c:\\program files\\internet explorer\\signup\\install.ins"), fInfoLevelId=0x0, lpFileInformation=0x1cfe6f4 | out: lpFileInformation=0x1cfe6f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30c952e, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x970b4468, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x970b4468, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1c4)) returned 1 [0215.284] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0215.287] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0215.287] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0215.287] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30c952e, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x970b4468, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x970b4468, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="install.ins", cAlternateFileName="")) returned 0 [0215.287] FindClose (in: hFindFile=0x24e980 | out: hFindFile=0x24e980) returned 1 [0215.288] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0215.288] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263178 | out: hHeap=0x1f0000) returned 1 [0215.288] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bd0 | out: hHeap=0x1f0000) returned 1 [0215.288] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2344b8 | out: hHeap=0x1f0000) returned 1 [0215.288] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2181d0 | out: hHeap=0x1f0000) returned 1 [0215.288] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235838 | out: hHeap=0x1f0000) returned 1 [0215.288] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235f20 | out: hHeap=0x1f0000) returned 1 [0215.288] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2362c8 | out: hHeap=0x1f0000) returned 1 [0215.288] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226238 | out: hHeap=0x1f0000) returned 1 [0215.288] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261e58 | out: hHeap=0x1f0000) returned 1 [0215.288] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a68 | out: hHeap=0x1f0000) returned 1 [0215.288] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233d20 | out: hHeap=0x1f0000) returned 1 [0215.288] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234308 [0215.288] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238258 [0215.288] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262b18 [0215.288] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234110 [0215.288] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Java\\*", lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xfc0fdd55, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xfc0fdd55, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ea80 [0215.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0215.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225ce8 [0215.289] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0215.289] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234110 | out: hHeap=0x1f0000) returned 1 [0215.289] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0215.289] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xfc0fdd55, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xfc0fdd55, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0215.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225d38 [0215.289] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0215.289] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225ce8 | out: hHeap=0x1f0000) returned 1 [0215.289] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0215.289] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0215.289] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe863e770, ftCreationTime.dwHighDateTime=0x1d5bbaf, ftLastAccessTime.dwLowDateTime=0xdf5500e0, ftLastAccessTime.dwHighDateTime=0x1d543b1, ftLastWriteTime.dwLowDateTime=0xdf5500e0, ftLastWriteTime.dwHighDateTime=0x1d543b1, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="fling.exe", cAlternateFileName="")) returned 1 [0215.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0215.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0215.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239b38 [0215.290] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0215.290] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225d38 | out: hHeap=0x1f0000) returned 1 [0215.290] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0215.290] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\fling.exe" (normalized: "c:\\program files\\java\\fling.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.290] GetLastError () returned 0x20 [0215.290] GetLastError () returned 0x20 [0215.290] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0de2f82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xafba0b05, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="jre1.8.0_144", cAlternateFileName="JRE18~1.0_1")) returned 1 [0215.290] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0215.291] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0215.291] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239458 [0215.291] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0215.291] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239b38 | out: hHeap=0x1f0000) returned 1 [0215.291] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0215.291] lstrcmpW (lpString1="jre1.8.0_144", lpString2=".") returned 1 [0215.291] lstrcmpW (lpString1="jre1.8.0_144", lpString2="..") returned 1 [0215.291] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x205330 [0215.291] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239b38 [0215.291] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd40ccbe0, ftCreationTime.dwHighDateTime=0x1d5b441, ftLastAccessTime.dwLowDateTime=0x1d073180, ftLastAccessTime.dwHighDateTime=0x1d5785d, ftLastWriteTime.dwLowDateTime=0x1d073180, ftLastWriteTime.dwHighDateTime=0x1d5785d, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="spcwin.exe", cAlternateFileName="")) returned 1 [0215.291] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238438 [0215.291] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0215.291] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239508 [0215.291] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0215.291] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239458 | out: hHeap=0x1f0000) returned 1 [0215.291] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238438 | out: hHeap=0x1f0000) returned 1 [0215.292] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\spcwin.exe" (normalized: "c:\\program files\\java\\spcwin.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.292] GetLastError () returned 0x20 [0215.292] GetLastError () returned 0x20 [0215.292] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6e87e20, ftCreationTime.dwHighDateTime=0x1d5c516, ftLastAccessTime.dwLowDateTime=0xe9906d70, ftLastAccessTime.dwHighDateTime=0x1d5b1d3, ftLastWriteTime.dwLowDateTime=0xe9906d70, ftLastWriteTime.dwHighDateTime=0x1d5b1d3, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="whatsapp.exe", cAlternateFileName="")) returned 1 [0215.292] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0215.292] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0215.292] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239458 [0215.293] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0215.293] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239508 | out: hHeap=0x1f0000) returned 1 [0215.293] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0215.293] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\whatsapp.exe" (normalized: "c:\\program files\\java\\whatsapp.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.293] GetLastError () returned 0x20 [0215.293] GetLastError () returned 0x20 [0215.293] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd80b1130, ftCreationTime.dwHighDateTime=0x1d53dd5, ftLastAccessTime.dwLowDateTime=0x7a6c97a0, ftLastAccessTime.dwHighDateTime=0x1d56068, ftLastWriteTime.dwLowDateTime=0x7a6c97a0, ftLastWriteTime.dwHighDateTime=0x1d56068, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="winscp.exe", cAlternateFileName="")) returned 1 [0215.294] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0215.294] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0215.294] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239508 [0215.294] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0215.294] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239458 | out: hHeap=0x1f0000) returned 1 [0215.294] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0215.294] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\winscp.exe" (normalized: "c:\\program files\\java\\winscp.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.295] GetLastError () returned 0x20 [0215.295] GetLastError () returned 0x20 [0215.295] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd80b1130, ftCreationTime.dwHighDateTime=0x1d53dd5, ftLastAccessTime.dwLowDateTime=0x7a6c97a0, ftLastAccessTime.dwHighDateTime=0x1d56068, ftLastWriteTime.dwLowDateTime=0x7a6c97a0, ftLastWriteTime.dwHighDateTime=0x1d56068, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="winscp.exe", cAlternateFileName="")) returned 0 [0215.295] FindClose (in: hFindFile=0x24ea80 | out: hFindFile=0x24ea80) returned 1 [0215.295] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233ed0 [0215.295] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238348 [0215.295] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2624b8 [0215.295] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239458 [0215.295] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\*", lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0de2f82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xafba0b05, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ed00 [0215.296] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239610 [0215.296] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239458 | out: hHeap=0x1f0000) returned 1 [0215.296] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0215.296] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0de2f82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xafba0b05, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.296] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239458 [0215.296] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239610 | out: hHeap=0x1f0000) returned 1 [0215.296] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0215.296] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0215.296] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0eaff93, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bin", cAlternateFileName="")) returned 1 [0215.296] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239610 [0215.296] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239458 | out: hHeap=0x1f0000) returned 1 [0215.296] lstrcmpW (lpString1="bin", lpString2=".") returned 1 [0215.297] lstrcmpW (lpString1="bin", lpString2="..") returned 1 [0215.297] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204ff0 [0215.297] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239458 [0215.297] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xcac, dwReserved0=0x0, dwReserved1=0x0, cFileName="COPYRIGHT", cAlternateFileName="COPYRI~1")) returned 1 [0215.297] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0215.297] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c8b8 [0215.297] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217b50 [0215.297] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0215.297] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239610 | out: hHeap=0x1f0000) returned 1 [0215.297] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0215.297] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT" (normalized: "c:\\program files\\java\\jre1.8.0_144\\copyright"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe658, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0215.298] GetFileType (hFile=0x21c) returned 0x1 [0215.298] CloseHandle (hObject=0x21c) returned 1 [0215.298] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2358a0 [0215.298] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT" (normalized: "c:\\program files\\java\\jre1.8.0_144\\copyright"), fInfoLevelId=0x0, lpFileInformation=0x1cfe6ec | out: lpFileInformation=0x1cfe6ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xcac)) returned 1 [0215.298] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2358a0 | out: hHeap=0x1f0000) returned 1 [0215.298] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235768 [0215.298] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT" (normalized: "c:\\program files\\java\\jre1.8.0_144\\copyright"), fInfoLevelId=0x0, lpFileInformation=0x1cfe6f4 | out: lpFileInformation=0x1cfe6f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xcac)) returned 1 [0215.298] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235768 | out: hHeap=0x1f0000) returned 1 [0215.299] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235ff0 [0215.299] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235ff0 | out: hHeap=0x1f0000) returned 1 [0215.299] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe1f09, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xaa80821a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lib", cAlternateFileName="")) returned 1 [0215.299] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c8b8 [0215.299] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217b50 | out: hHeap=0x1f0000) returned 1 [0215.299] lstrcmpW (lpString1="lib", lpString2=".") returned 1 [0215.299] lstrcmpW (lpString1="lib", lpString2="..") returned 1 [0215.299] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0215.299] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239610 [0215.299] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ff0 | out: hHeap=0x1f0000) returned 1 [0215.299] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x0, dwReserved1=0x0, cFileName="LICENSE", cAlternateFileName="")) returned 1 [0215.299] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x237720 [0215.299] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217550 [0215.299] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237720 | out: hHeap=0x1f0000) returned 1 [0215.299] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0215.299] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\LICENSE" (normalized: "c:\\program files\\java\\jre1.8.0_144\\license"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe658, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0215.304] GetFileType (hFile=0x21c) returned 0x1 [0215.304] CloseHandle (hObject=0x21c) returned 1 [0215.305] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236190 [0215.305] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\LICENSE" (normalized: "c:\\program files\\java\\jre1.8.0_144\\license"), fInfoLevelId=0x0, lpFileInformation=0x1cfe6ec | out: lpFileInformation=0x1cfe6ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x28)) returned 1 [0215.305] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236190 | out: hHeap=0x1f0000) returned 1 [0215.305] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2358a0 [0215.305] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\LICENSE" (normalized: "c:\\program files\\java\\jre1.8.0_144\\license"), fInfoLevelId=0x0, lpFileInformation=0x1cfe6f4 | out: lpFileInformation=0x1cfe6f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x28)) returned 1 [0215.305] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2358a0 | out: hHeap=0x1f0000) returned 1 [0215.305] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2358a0 [0215.305] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2358a0 | out: hHeap=0x1f0000) returned 1 [0215.305] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="README.txt", cAlternateFileName="")) returned 1 [0215.305] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238438 [0215.306] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c8b8 [0215.306] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x2177d0 [0215.306] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0215.306] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217550 | out: hHeap=0x1f0000) returned 1 [0215.306] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238438 | out: hHeap=0x1f0000) returned 1 [0215.306] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\README.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\readme.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe658, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0215.307] GetFileType (hFile=0x21c) returned 0x1 [0215.307] CloseHandle (hObject=0x21c) returned 1 [0215.307] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235ff0 [0215.307] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\README.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\readme.txt"), fInfoLevelId=0x0, lpFileInformation=0x1cfe6ec | out: lpFileInformation=0x1cfe6ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2e)) returned 1 [0215.307] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235ff0 | out: hHeap=0x1f0000) returned 1 [0215.308] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235700 [0215.308] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\README.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\readme.txt"), fInfoLevelId=0x0, lpFileInformation=0x1cfe6f4 | out: lpFileInformation=0x1cfe6f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2e)) returned 1 [0215.308] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0215.308] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235d80 [0215.308] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235d80 | out: hHeap=0x1f0000) returned 1 [0215.308] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x210, dwReserved0=0x0, dwReserved1=0x0, cFileName="release", cAlternateFileName="")) returned 1 [0215.308] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c8b8 [0215.308] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x218050 [0215.308] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0215.308] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2177d0 | out: hHeap=0x1f0000) returned 1 [0215.308] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\release" (normalized: "c:\\program files\\java\\jre1.8.0_144\\release"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe658, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0215.309] GetFileType (hFile=0x21c) returned 0x1 [0215.309] CloseHandle (hObject=0x21c) returned 1 [0215.310] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235be0 [0215.310] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\release" (normalized: "c:\\program files\\java\\jre1.8.0_144\\release"), fInfoLevelId=0x0, lpFileInformation=0x1cfe6ec | out: lpFileInformation=0x1cfe6ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x210)) returned 1 [0215.310] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235be0 | out: hHeap=0x1f0000) returned 1 [0215.310] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235a40 [0215.310] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\release" (normalized: "c:\\program files\\java\\jre1.8.0_144\\release"), fInfoLevelId=0x0, lpFileInformation=0x1cfe6f4 | out: lpFileInformation=0x1cfe6f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x210)) returned 1 [0215.310] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235a40 | out: hHeap=0x1f0000) returned 1 [0215.310] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236190 [0215.310] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236190 | out: hHeap=0x1f0000) returned 1 [0215.310] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf9bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="THIRDPARTYLICENSEREADME-JAVAFX.txt", cAlternateFileName="THIRDP~1.TXT")) returned 1 [0215.310] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c8b8 [0215.310] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x237c48 [0215.310] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0215.311] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237c48 | out: hHeap=0x1f0000) returned 1 [0215.311] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218050 | out: hHeap=0x1f0000) returned 1 [0215.311] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0215.311] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme-javafx.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe658, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0215.311] GetFileType (hFile=0x21c) returned 0x1 [0215.312] CloseHandle (hObject=0x21c) returned 1 [0215.312] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0215.312] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme-javafx.txt"), fInfoLevelId=0x0, lpFileInformation=0x1cfe6ec | out: lpFileInformation=0x1cfe6ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf9bd)) returned 1 [0215.312] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0215.312] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0215.312] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme-javafx.txt"), fInfoLevelId=0x0, lpFileInformation=0x1cfe6f4 | out: lpFileInformation=0x1cfe6f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf9bd)) returned 1 [0215.312] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0215.312] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0215.312] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0215.312] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2371c, dwReserved0=0x0, dwReserved1=0x0, cFileName="THIRDPARTYLICENSEREADME.txt", cAlternateFileName="THIRDP~2.TXT")) returned 1 [0215.313] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234110 [0215.313] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c8b8 [0215.313] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2865e8 [0215.313] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0215.313] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0215.313] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234110 | out: hHeap=0x1f0000) returned 1 [0215.313] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe658, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0215.313] GetFileType (hFile=0x21c) returned 0x1 [0215.313] CloseHandle (hObject=0x21c) returned 1 [0215.314] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286d58 [0215.314] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme.txt"), fInfoLevelId=0x0, lpFileInformation=0x1cfe6ec | out: lpFileInformation=0x1cfe6ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2371c)) returned 1 [0215.314] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286d58 | out: hHeap=0x1f0000) returned 1 [0215.314] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2863c8 [0215.314] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme.txt"), fInfoLevelId=0x0, lpFileInformation=0x1cfe6f4 | out: lpFileInformation=0x1cfe6f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2371c)) returned 1 [0215.314] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2863c8 | out: hHeap=0x1f0000) returned 1 [0215.314] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2861a8 [0215.314] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2861a8 | out: hHeap=0x1f0000) returned 1 [0215.314] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Welcome.html", cAlternateFileName="WELCOM~1.HTM")) returned 1 [0215.314] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0215.315] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c8b8 [0215.315] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217550 [0215.315] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0215.315] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2865e8 | out: hHeap=0x1f0000) returned 1 [0215.315] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0215.321] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\Welcome.html" (normalized: "c:\\program files\\java\\jre1.8.0_144\\welcome.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe658, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0215.321] GetFileType (hFile=0x21c) returned 0x1 [0215.321] CloseHandle (hObject=0x21c) returned 1 [0215.322] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220490 [0215.322] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\Welcome.html" (normalized: "c:\\program files\\java\\jre1.8.0_144\\welcome.html"), fInfoLevelId=0x0, lpFileInformation=0x1cfe6ec | out: lpFileInformation=0x1cfe6ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3bb)) returned 1 [0215.322] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220490 | out: hHeap=0x1f0000) returned 1 [0215.322] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fab8 [0215.322] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\Welcome.html" (normalized: "c:\\program files\\java\\jre1.8.0_144\\welcome.html"), fInfoLevelId=0x0, lpFileInformation=0x1cfe6f4 | out: lpFileInformation=0x1cfe6f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3bb)) returned 1 [0215.322] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fab8 | out: hHeap=0x1f0000) returned 1 [0215.322] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0215.322] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0215.322] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Welcome.html", cAlternateFileName="WELCOM~1.HTM")) returned 0 [0215.322] FindClose (in: hFindFile=0x24ed00 | out: hFindFile=0x24ed00) returned 1 [0215.323] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233d20 [0215.323] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0215.323] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262320 [0215.323] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235de8 [0215.323] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\*", lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0eaff93, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e780 [0215.324] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2358a0 [0215.324] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235de8 | out: hHeap=0x1f0000) returned 1 [0215.324] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0215.324] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0eaff93, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.325] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2359d8 [0215.325] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2358a0 | out: hHeap=0x1f0000) returned 1 [0215.325] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0215.325] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0215.325] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x172440, dwReserved0=0x0, dwReserved1=0x0, cFileName="awt.dll", cAlternateFileName="")) returned 1 [0215.325] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235de8 [0215.325] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2359d8 | out: hHeap=0x1f0000) returned 1 [0215.325] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\awt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\awt.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0215.326] GetFileType (hFile=0x21c) returned 0x1 [0215.326] CloseHandle (hObject=0x21c) returned 1 [0215.326] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235be0 [0215.326] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\awt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\awt.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x172440)) returned 1 [0215.326] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235be0 | out: hHeap=0x1f0000) returned 1 [0215.326] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235ff0 [0215.327] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\awt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\awt.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x172440)) returned 1 [0215.327] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235ff0 | out: hHeap=0x1f0000) returned 1 [0215.327] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235f20 [0215.327] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235f20 | out: hHeap=0x1f0000) returned 1 [0215.327] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bci.dll", cAlternateFileName="")) returned 1 [0215.327] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2361f8 [0215.327] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235de8 | out: hHeap=0x1f0000) returned 1 [0215.327] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\bci.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\bci.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0215.328] GetFileType (hFile=0x21c) returned 0x1 [0215.328] CloseHandle (hObject=0x21c) returned 1 [0215.328] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2362c8 [0215.328] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\bci.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\bci.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4240)) returned 1 [0215.329] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2362c8 | out: hHeap=0x1f0000) returned 1 [0215.329] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235cb0 [0215.329] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\bci.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\bci.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4240)) returned 1 [0215.329] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235cb0 | out: hHeap=0x1f0000) returned 1 [0215.329] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235d80 [0215.329] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235d80 | out: hHeap=0x1f0000) returned 1 [0215.329] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x27040, dwReserved0=0x0, dwReserved1=0x0, cFileName="dcpr.dll", cAlternateFileName="")) returned 1 [0215.329] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238438 [0215.329] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2360c0 [0215.329] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221a00 [0215.329] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2360c0 | out: hHeap=0x1f0000) returned 1 [0215.329] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2361f8 | out: hHeap=0x1f0000) returned 1 [0215.329] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238438 | out: hHeap=0x1f0000) returned 1 [0215.329] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\dcpr.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dcpr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0215.330] GetFileType (hFile=0x21c) returned 0x1 [0215.330] CloseHandle (hObject=0x21c) returned 1 [0215.330] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220490 [0215.330] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\dcpr.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dcpr.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x27040)) returned 1 [0215.330] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220490 | out: hHeap=0x1f0000) returned 1 [0215.330] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fa40 [0215.330] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\dcpr.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dcpr.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x27040)) returned 1 [0215.331] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fa40 | out: hHeap=0x1f0000) returned 1 [0215.628] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0215.628] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0215.628] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x15040, dwReserved0=0x0, dwReserved1=0x0, cFileName="decora_sse.dll", cAlternateFileName="DECORA~1.DLL")) returned 1 [0215.628] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0215.628] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235f20 [0215.628] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221378 [0215.628] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235f20 | out: hHeap=0x1f0000) returned 1 [0215.628] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0215.628] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0215.629] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\decora_sse.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\decora_sse.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0215.630] GetFileType (hFile=0x1b0) returned 0x1 [0215.630] CloseHandle (hObject=0x1b0) returned 1 [0215.630] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fab8 [0215.630] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\decora_sse.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\decora_sse.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x15040)) returned 1 [0215.630] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fab8 | out: hHeap=0x1f0000) returned 1 [0215.630] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fa40 [0215.630] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\decora_sse.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\decora_sse.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x15040)) returned 1 [0215.631] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fa40 | out: hHeap=0x1f0000) returned 1 [0215.631] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0215.631] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0215.631] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8f840, dwReserved0=0x0, dwReserved1=0x0, cFileName="deploy.dll", cAlternateFileName="")) returned 1 [0215.631] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0215.631] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235768 [0215.631] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2211b0 [0215.631] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235768 | out: hHeap=0x1f0000) returned 1 [0215.631] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0215.631] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0215.631] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\deploy.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\deploy.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0215.631] GetFileType (hFile=0x1b0) returned 0x1 [0215.632] CloseHandle (hObject=0x1b0) returned 1 [0215.632] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220058 [0215.632] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\deploy.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\deploy.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8f840)) returned 1 [0215.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220058 | out: hHeap=0x1f0000) returned 1 [0215.632] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0215.632] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\deploy.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\deploy.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8f840)) returned 1 [0215.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0215.632] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2202b0 [0215.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2202b0 | out: hHeap=0x1f0000) returned 1 [0215.632] GetLastError () returned 0x0 [0215.633] CryptAcquireContextA (in: phProv=0x1cfdaf0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1cfdaf0*=0x286450) returned 1 [0215.641] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2381b8 | out: pbBuffer=0x2381b8) returned 1 [0215.641] CryptReleaseContext (hProv=0x286450, dwFlags=0x0) returned 1 [0215.641] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0215.641] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x252370 [0215.641] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2245b8 [0215.641] QueryPerformanceCounter (in: lpPerformanceCount=0x1cfda84 | out: lpPerformanceCount=0x1cfda84*=37300981805) returned 1 [0215.641] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1cfdac4 | out: lpSystemTimeAsFileTime=0x1cfdac4) [0215.641] QueryPerformanceCounter (in: lpPerformanceCount=0x1cfda84 | out: lpPerformanceCount=0x1cfda84*=37300999111) returned 1 [0215.641] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1cfdac4 | out: lpSystemTimeAsFileTime=0x1cfdac4) [0215.641] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x227dd0 [0215.641] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x251068 [0215.641] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x224270 [0215.641] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x2232e0 [0215.642] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffd0 [0215.642] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206628 [0215.642] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffa0 [0215.642] GetLastError () returned 0x0 [0215.642] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\deploy.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\deploy.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfd990, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0215.642] GetFileType (hFile=0x1b0) returned 0x1 [0215.643] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a30 [0215.643] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a90 [0215.644] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\deploy.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\deploy.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfd9c0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1bc [0215.644] GetFileType (hFile=0x1bc) returned 0x1 [0215.644] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ff0 [0215.645] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x2051f0 [0215.645] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2610a8 [0215.645] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a20 [0215.645] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b10 [0215.645] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\deploy.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\deploy.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfd90c, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0215.646] GetFileType (hFile=0x224) returned 0x1 [0215.646] GetLastError () returned 0xb7 [0215.646] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\deploy.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\deploy.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfd90c, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0215.647] GetFileType (hFile=0x210) returned 0x1 [0215.647] GetLastError () returned 0xb7 [0215.647] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\deploy.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\deploy.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfd904, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0215.647] GetFileType (hFile=0x1fc) returned 0x1 [0215.647] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28dfd0 [0215.647] ReadFile (in: hFile=0x1fc, lpBuffer=0x28dfd0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1cfd860, lpOverlapped=0x0 | out: lpBuffer=0x28dfd0*, lpNumberOfBytesRead=0x1cfd860*=0x1000, lpOverlapped=0x0) returned 1 [0215.650] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24b1d8 [0215.651] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28efd8 [0215.651] GetLastError () returned 0x0 [0215.933] CloseHandle (hObject=0x1b0) returned 1 [0215.947] CloseHandle (hObject=0x1bc) returned 1 [0215.947] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389f0 [0215.948] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a00 [0216.046] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\deploy.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\deploy.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfd9c0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0216.053] GetFileType (hFile=0x1e0) returned 0x1 [0216.053] GetLastError () returned 0xb7 [0216.054] CloseHandle (hObject=0x1e0) returned 1 [0216.055] DeleteFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\deploy.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\deploy.dll")) returned 0 [0216.055] GetLastError () returned 0x20 [0216.055] GetLastError () returned 0x20 [0216.055] CryptAcquireContextA (in: phProv=0x1cfdaf0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1cfdaf0*=0x2863c8) returned 1 [0216.063] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238780 | out: pbBuffer=0x238780) returned 1 [0216.063] CryptReleaseContext (hProv=0x2863c8, dwFlags=0x0) returned 1 [0216.063] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238780 | out: hHeap=0x1f0000) returned 1 [0216.063] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2386b8 [0216.063] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2386e0 [0216.063] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239080 [0216.063] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2386b8 | out: hHeap=0x1f0000) returned 1 [0216.063] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0216.064] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239080 | out: hHeap=0x1f0000) returned 1 [0216.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x22c8b8 [0216.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210018 [0216.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x235768 [0216.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238780 [0216.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2330d0 [0216.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205150 [0216.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235d80 [0216.065] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238550 [0216.065] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x233910 [0216.065] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238920 [0216.065] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384d8 [0216.065] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2100a8 [0216.066] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389b0 [0216.066] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238618 [0216.066] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210198 [0216.066] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0216.066] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238618 | out: hHeap=0x1f0000) returned 1 [0216.066] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389b0 | out: hHeap=0x1f0000) returned 1 [0216.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2100a8 | out: hHeap=0x1f0000) returned 1 [0216.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384d8 | out: hHeap=0x1f0000) returned 1 [0216.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238920 | out: hHeap=0x1f0000) returned 1 [0216.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233910 | out: hHeap=0x1f0000) returned 1 [0216.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238550 | out: hHeap=0x1f0000) returned 1 [0216.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235d80 | out: hHeap=0x1f0000) returned 1 [0216.067] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x2391d0 [0216.067] GetLastError () returned 0x0 [0216.068] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1cfd680 | out: lpSystemTimeAsFileTime=0x1cfd680) [0216.068] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238830 [0216.068] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238578 [0216.068] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x2052d0 [0216.068] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2052d0 | out: hHeap=0x1f0000) returned 1 [0216.068] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238578 | out: hHeap=0x1f0000) returned 1 [0216.068] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238550 [0216.069] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x2052d0 [0216.069] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2052d0 | out: hHeap=0x1f0000) returned 1 [0216.069] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238550 | out: hHeap=0x1f0000) returned 1 [0216.069] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238830 | out: hHeap=0x1f0000) returned 1 [0216.069] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0216.069] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238c58 [0216.069] GetLastError () returned 0x0 [0216.070] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\deploy.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\deploy.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfd9f0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0216.070] GetFileType (hFile=0x1e0) returned 0x1 [0216.071] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x289fb0 [0216.071] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1cfd978 | out: lpNewFilePointer=0x0) returned 1 [0216.071] GetLastError () returned 0xb7 [0216.072] CloseHandle (hObject=0x1e0) returned 1 [0216.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238840 | out: hHeap=0x1f0000) returned 1 [0216.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387e0 | out: hHeap=0x1f0000) returned 1 [0216.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233a18 | out: hHeap=0x1f0000) returned 1 [0216.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2330d0 | out: hHeap=0x1f0000) returned 1 [0216.073] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238780 | out: hHeap=0x1f0000) returned 1 [0216.073] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205150 | out: hHeap=0x1f0000) returned 1 [0216.073] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235768 | out: hHeap=0x1f0000) returned 1 [0216.073] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210018 | out: hHeap=0x1f0000) returned 1 [0216.073] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0216.073] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2244a0 | out: hHeap=0x1f0000) returned 1 [0216.073] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2386e0 | out: hHeap=0x1f0000) returned 1 [0216.073] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0216.073] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2595a0 | out: hHeap=0x1f0000) returned 1 [0216.074] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2247e8 | out: hHeap=0x1f0000) returned 1 [0216.074] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0216.074] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a10 | out: hHeap=0x1f0000) returned 1 [0216.074] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210000 | out: hHeap=0x1f0000) returned 1 [0216.074] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238528 | out: hHeap=0x1f0000) returned 1 [0216.074] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a50 | out: hHeap=0x1f0000) returned 1 [0216.074] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210090 | out: hHeap=0x1f0000) returned 1 [0216.074] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238730 | out: hHeap=0x1f0000) returned 1 [0216.074] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389e0 | out: hHeap=0x1f0000) returned 1 [0216.075] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232db8 | out: hHeap=0x1f0000) returned 1 [0216.075] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238758 | out: hHeap=0x1f0000) returned 1 [0216.075] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236190 | out: hHeap=0x1f0000) returned 1 [0216.075] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234500 | out: hHeap=0x1f0000) returned 1 [0216.075] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238708 | out: hHeap=0x1f0000) returned 1 [0216.075] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0216.075] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2344b8 | out: hHeap=0x1f0000) returned 1 [0216.075] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a00 | out: hHeap=0x1f0000) returned 1 [0216.075] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389f0 | out: hHeap=0x1f0000) returned 1 [0216.076] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28dfd0 | out: hHeap=0x1f0000) returned 1 [0216.076] CloseHandle (hObject=0x1fc) returned 1 [0216.076] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a60 | out: hHeap=0x1f0000) returned 1 [0216.076] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a70 | out: hHeap=0x1f0000) returned 1 [0216.077] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232aa0 | out: hHeap=0x1f0000) returned 1 [0216.077] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24b1d8 | out: hHeap=0x1f0000) returned 1 [0216.077] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20fef8 | out: hHeap=0x1f0000) returned 1 [0216.077] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205290 | out: hHeap=0x1f0000) returned 1 [0216.077] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28efd8 | out: hHeap=0x1f0000) returned 1 [0216.077] CloseHandle (hObject=0x210) returned 1 [0216.078] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b30 | out: hHeap=0x1f0000) returned 1 [0216.078] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b90 | out: hHeap=0x1f0000) returned 1 [0216.078] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ff0 | out: hHeap=0x1f0000) returned 1 [0216.078] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204fb0 | out: hHeap=0x1f0000) returned 1 [0216.078] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220748 | out: hHeap=0x1f0000) returned 1 [0216.078] CloseHandle (hObject=0x224) returned 1 [0216.079] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b10 | out: hHeap=0x1f0000) returned 1 [0216.079] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a20 | out: hHeap=0x1f0000) returned 1 [0216.079] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2610a8 | out: hHeap=0x1f0000) returned 1 [0216.079] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a90 | out: hHeap=0x1f0000) returned 1 [0216.079] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a30 | out: hHeap=0x1f0000) returned 1 [0216.079] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b50 | out: hHeap=0x1f0000) returned 1 [0216.079] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a80 | out: hHeap=0x1f0000) returned 1 [0216.079] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0216.079] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x251068 | out: hHeap=0x1f0000) returned 1 [0216.079] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224270 | out: hHeap=0x1f0000) returned 1 [0216.079] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206628 | out: hHeap=0x1f0000) returned 1 [0216.079] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffa0 | out: hHeap=0x1f0000) returned 1 [0216.079] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffd0 | out: hHeap=0x1f0000) returned 1 [0216.080] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2232e0 | out: hHeap=0x1f0000) returned 1 [0216.080] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x252370 | out: hHeap=0x1f0000) returned 1 [0216.080] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2245b8 | out: hHeap=0x1f0000) returned 1 [0216.080] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0216.080] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0216.080] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262980 | out: hHeap=0x1f0000) returned 1 [0216.080] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2347d0 | out: hHeap=0x1f0000) returned 1 [0216.080] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0216.080] DeleteFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\deploy.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\deploy.dll")) returned 1 [0216.411] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2891a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dtplugin", cAlternateFileName="")) returned 1 [0216.411] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2386b8 [0216.411] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235838 [0216.411] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221a00 [0216.412] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235838 | out: hHeap=0x1f0000) returned 1 [0216.412] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0216.412] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2386b8 | out: hHeap=0x1f0000) returned 1 [0216.412] lstrcmpW (lpString1="dtplugin", lpString2=".") returned 1 [0216.412] lstrcmpW (lpString1="dtplugin", lpString2="..") returned 1 [0216.412] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x205210 [0216.412] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220058 [0216.412] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7440, dwReserved0=0x0, dwReserved1=0x0, cFileName="dt_shmem.dll", cAlternateFileName="")) returned 1 [0216.412] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238640 [0216.412] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235eb8 [0216.413] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220e20 [0216.413] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235eb8 | out: hHeap=0x1f0000) returned 1 [0216.413] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0216.413] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238640 | out: hHeap=0x1f0000) returned 1 [0216.422] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_shmem.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dt_shmem.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0216.457] GetFileType (hFile=0x23c) returned 0x1 [0216.457] CloseHandle (hObject=0x23c) returned 1 [0216.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2202b0 [0216.458] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_shmem.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dt_shmem.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7440)) returned 1 [0216.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2202b0 | out: hHeap=0x1f0000) returned 1 [0216.458] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0216.458] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_shmem.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dt_shmem.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7440)) returned 1 [0216.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0216.458] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0216.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0216.458] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x6040, dwReserved0=0x0, dwReserved1=0x0, cFileName="dt_socket.dll", cAlternateFileName="DT_SOC~1.DLL")) returned 1 [0216.459] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b5c0 [0216.459] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235d80 [0216.459] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221838 [0216.459] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235d80 | out: hHeap=0x1f0000) returned 1 [0216.459] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0216.459] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b5c0 | out: hHeap=0x1f0000) returned 1 [0216.459] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_socket.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dt_socket.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0216.460] GetFileType (hFile=0x23c) returned 0x1 [0216.460] CloseHandle (hObject=0x23c) returned 1 [0216.460] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2202b0 [0216.460] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_socket.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dt_socket.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x6040)) returned 1 [0216.461] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2202b0 | out: hHeap=0x1f0000) returned 1 [0216.461] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0216.461] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_socket.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dt_socket.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x6040)) returned 1 [0216.461] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0216.461] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2202b0 [0216.461] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2202b0 | out: hHeap=0x1f0000) returned 1 [0216.461] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x21440, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.dll", cAlternateFileName="")) returned 1 [0216.461] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b750 [0216.461] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2360c0 [0216.461] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221540 [0216.461] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2360c0 | out: hHeap=0x1f0000) returned 1 [0216.461] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0216.461] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b750 | out: hHeap=0x1f0000) returned 1 [0216.462] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\eula.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\eula.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0216.462] GetFileType (hFile=0x23c) returned 0x1 [0216.462] CloseHandle (hObject=0x23c) returned 1 [0216.463] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0216.463] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\eula.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\eula.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x21440)) returned 1 [0216.463] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0216.463] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21ffe0 [0216.463] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\eula.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\eula.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x21440)) returned 1 [0216.463] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ffe0 | out: hHeap=0x1f0000) returned 1 [0216.463] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe00 [0216.463] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe00 | out: hHeap=0x1f0000) returned 1 [0216.463] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x43040, dwReserved0=0x0, dwReserved1=0x0, cFileName="fontmanager.dll", cAlternateFileName="FONTMA~1.DLL")) returned 1 [0216.463] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b750 [0216.463] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235838 [0216.463] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221a00 [0216.464] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235838 | out: hHeap=0x1f0000) returned 1 [0216.464] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0216.464] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b750 | out: hHeap=0x1f0000) returned 1 [0216.464] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\fontmanager.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\fontmanager.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0216.474] GetFileType (hFile=0x23c) returned 0x1 [0216.475] CloseHandle (hObject=0x23c) returned 1 [0216.475] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0216.475] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\fontmanager.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\fontmanager.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x43040)) returned 1 [0216.475] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0216.475] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0216.475] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\fontmanager.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\fontmanager.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x43040)) returned 1 [0216.476] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0216.476] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0216.476] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0216.476] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2da40, dwReserved0=0x0, dwReserved1=0x0, cFileName="fxplugins.dll", cAlternateFileName="FXPLUG~1.DLL")) returned 1 [0216.476] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b598 [0216.476] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235d80 [0216.476] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221118 [0216.476] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235d80 | out: hHeap=0x1f0000) returned 1 [0216.476] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0216.476] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b598 | out: hHeap=0x1f0000) returned 1 [0216.477] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\fxplugins.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\fxplugins.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0216.490] GetFileType (hFile=0x1fc) returned 0x1 [0216.490] CloseHandle (hObject=0x1fc) returned 1 [0216.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220328 [0216.492] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\fxplugins.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\fxplugins.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2da40)) returned 1 [0216.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220328 | out: hHeap=0x1f0000) returned 1 [0216.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fa40 [0216.493] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\fxplugins.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\fxplugins.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2da40)) returned 1 [0216.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fa40 | out: hHeap=0x1f0000) returned 1 [0216.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0216.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0216.493] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x40e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="glass.dll", cAlternateFileName="")) returned 1 [0216.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b368 [0216.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2362c8 [0216.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221a98 [0216.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2362c8 | out: hHeap=0x1f0000) returned 1 [0216.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0216.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b368 | out: hHeap=0x1f0000) returned 1 [0216.494] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\glass.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\glass.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0216.494] GetFileType (hFile=0x1fc) returned 0x1 [0216.495] CloseHandle (hObject=0x1fc) returned 1 [0216.495] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0216.495] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\glass.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\glass.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x40e40)) returned 1 [0216.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0216.495] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fa40 [0216.495] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\glass.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\glass.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x40e40)) returned 1 [0216.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fa40 | out: hHeap=0x1f0000) returned 1 [0216.496] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0216.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0216.496] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x6f440, dwReserved0=0x0, dwReserved1=0x0, cFileName="glib-lite.dll", cAlternateFileName="GLIB-L~1.DLL")) returned 1 [0216.496] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b368 [0216.496] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235d80 [0216.496] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220e20 [0216.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235d80 | out: hHeap=0x1f0000) returned 1 [0216.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0216.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b368 | out: hHeap=0x1f0000) returned 1 [0216.497] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\glib-lite.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\glib-lite.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0216.497] GetFileType (hFile=0x1fc) returned 0x1 [0216.498] CloseHandle (hObject=0x1fc) returned 1 [0216.498] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0216.498] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\glib-lite.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\glib-lite.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x6f440)) returned 1 [0216.499] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0216.499] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0216.499] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\glib-lite.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\glib-lite.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x6f440)) returned 1 [0216.499] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0216.499] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0216.499] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0216.499] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x97440, dwReserved0=0x0, dwReserved1=0x0, cFileName="gstreamer-lite.dll", cAlternateFileName="GSTREA~1.DLL")) returned 1 [0216.499] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2f0 [0216.499] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2360c0 [0216.500] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221838 [0216.500] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2360c0 | out: hHeap=0x1f0000) returned 1 [0216.500] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0216.500] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0216.500] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\gstreamer-lite.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\gstreamer-lite.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0216.502] GetFileType (hFile=0x1fc) returned 0x1 [0216.502] CloseHandle (hObject=0x1fc) returned 1 [0216.503] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213818 [0216.503] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\gstreamer-lite.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\gstreamer-lite.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x97440)) returned 1 [0216.503] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213818 | out: hHeap=0x1f0000) returned 1 [0216.503] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213818 [0216.503] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\gstreamer-lite.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\gstreamer-lite.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x97440)) returned 1 [0216.504] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213818 | out: hHeap=0x1f0000) returned 1 [0216.504] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0216.504] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0216.504] GetLastError () returned 0x0 [0216.504] CryptAcquireContextA (in: phProv=0x1cfdaf0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1cfdaf0*=0x213020) returned 1 [0216.513] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x22b5c0 | out: pbBuffer=0x22b5c0) returned 1 [0216.513] CryptReleaseContext (hProv=0x213020, dwFlags=0x0) returned 1 [0216.513] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b5c0 | out: hHeap=0x1f0000) returned 1 [0216.513] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x254980 [0216.513] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2244a0 [0216.514] QueryPerformanceCounter (in: lpPerformanceCount=0x1cfda84 | out: lpPerformanceCount=0x1cfda84*=37388256967) returned 1 [0216.514] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1cfdac4 | out: lpSystemTimeAsFileTime=0x1cfdac4) [0216.514] QueryPerformanceCounter (in: lpPerformanceCount=0x1cfda84 | out: lpPerformanceCount=0x1cfda84*=37388300495) returned 1 [0216.514] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1cfdac4 | out: lpSystemTimeAsFileTime=0x1cfdac4) [0216.514] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x1fef78 [0216.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x24fd60 [0216.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x223be0 [0216.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x237200 [0216.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2100a8 [0216.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2067d8 [0216.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff28 [0216.515] GetLastError () returned 0x0 [0216.515] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\gstreamer-lite.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\gstreamer-lite.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfd990, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0216.516] GetFileType (hFile=0x1fc) returned 0x1 [0216.517] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ac0 [0216.517] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a50 [0216.518] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\gstreamer-lite.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\gstreamer-lite.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfd9c0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0216.707] GetFileType (hFile=0x1e0) returned 0x1 [0216.708] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205130 [0216.708] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x2051f0 [0216.708] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261218 [0216.708] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b10 [0216.709] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b00 [0216.783] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\gstreamer-lite.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\gstreamer-lite.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfd90c, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0216.784] GetFileType (hFile=0x1f4) returned 0x1 [0216.784] GetLastError () returned 0xb7 [0216.784] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\gstreamer-lite.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\gstreamer-lite.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfd90c, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0216.785] GetFileType (hFile=0x23c) returned 0x1 [0216.785] GetLastError () returned 0xb7 [0216.785] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\gstreamer-lite.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\gstreamer-lite.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfd904, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0216.786] GetFileType (hFile=0x230) returned 0x1 [0216.786] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28efd8 [0216.787] ReadFile (in: hFile=0x230, lpBuffer=0x28efd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1cfd860, lpOverlapped=0x0 | out: lpBuffer=0x28efd8*, lpNumberOfBytesRead=0x1cfd860*=0x1000, lpOverlapped=0x0) returned 1 [0216.877] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24ce10 [0216.878] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x289fb0 [0216.878] GetLastError () returned 0x0 [0216.942] CloseHandle (hObject=0x1fc) returned 1 [0217.305] CloseHandle (hObject=0x1e0) returned 1 [0217.305] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238940 [0217.306] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238920 [0217.307] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\gstreamer-lite.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\gstreamer-lite.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfd9c0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0217.318] GetFileType (hFile=0x1e0) returned 0x1 [0217.318] GetLastError () returned 0xb7 [0217.320] CloseHandle (hObject=0x1e0) returned 1 [0217.320] DeleteFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\gstreamer-lite.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\gstreamer-lite.dll")) returned 0 [0217.320] GetLastError () returned 0x20 [0217.320] GetLastError () returned 0x20 [0217.320] CryptAcquireContextA (in: phProv=0x1cfdaf0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1cfdaf0*=0x212be0) returned 1 [0217.352] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x22b5c0 | out: pbBuffer=0x22b5c0) returned 1 [0217.352] CryptReleaseContext (hProv=0x212be0, dwFlags=0x0) returned 1 [0217.352] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b5c0 | out: hHeap=0x1f0000) returned 1 [0217.352] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b7a0 [0217.352] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b5c0 [0217.352] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2308c8 [0217.352] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b7a0 | out: hHeap=0x1f0000) returned 1 [0217.352] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0217.352] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2308c8 | out: hHeap=0x1f0000) returned 1 [0217.352] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x22c8b8 [0217.352] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210210 [0217.352] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x235c48 [0217.353] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x22b7a0 [0217.353] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2317e0 [0217.353] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d90 [0217.353] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235de8 [0217.353] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x22ba98 [0217.353] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2314c8 [0217.353] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388a0 [0217.353] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b818 [0217.353] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0217.353] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238810 [0217.353] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b840 [0217.353] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210258 [0217.353] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0217.353] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b840 | out: hHeap=0x1f0000) returned 1 [0217.353] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238810 | out: hHeap=0x1f0000) returned 1 [0217.353] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0217.353] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b818 | out: hHeap=0x1f0000) returned 1 [0217.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388a0 | out: hHeap=0x1f0000) returned 1 [0217.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2314c8 | out: hHeap=0x1f0000) returned 1 [0217.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ba98 | out: hHeap=0x1f0000) returned 1 [0217.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235de8 | out: hHeap=0x1f0000) returned 1 [0217.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x230890 [0217.354] GetLastError () returned 0x0 [0217.354] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1cfd680 | out: lpSystemTimeAsFileTime=0x1cfd680) [0217.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x2388a0 [0217.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b818 [0217.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c50 [0217.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c50 | out: hHeap=0x1f0000) returned 1 [0217.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b818 | out: hHeap=0x1f0000) returned 1 [0217.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22ba98 [0217.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d10 [0217.355] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d10 | out: hHeap=0x1f0000) returned 1 [0217.355] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ba98 | out: hHeap=0x1f0000) returned 1 [0217.355] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388a0 | out: hHeap=0x1f0000) returned 1 [0217.355] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0217.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x2308c8 [0217.355] GetLastError () returned 0x0 [0217.355] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\gstreamer-lite.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\gstreamer-lite.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfd9f0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0217.355] GetFileType (hFile=0x1e0) returned 0x1 [0217.356] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x296010 [0217.356] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1cfd978 | out: lpNewFilePointer=0x0) returned 1 [0217.356] GetLastError () returned 0xb7 [0217.356] CloseHandle (hObject=0x1e0) returned 1 [0217.356] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238930 | out: hHeap=0x1f0000) returned 1 [0217.356] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238900 | out: hHeap=0x1f0000) returned 1 [0217.356] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2314c8 | out: hHeap=0x1f0000) returned 1 [0217.356] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2317e0 | out: hHeap=0x1f0000) returned 1 [0217.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b7a0 | out: hHeap=0x1f0000) returned 1 [0217.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d90 | out: hHeap=0x1f0000) returned 1 [0217.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235c48 | out: hHeap=0x1f0000) returned 1 [0217.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0217.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0217.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224388 | out: hHeap=0x1f0000) returned 1 [0217.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b5c0 | out: hHeap=0x1f0000) returned 1 [0217.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0217.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25e1c0 | out: hHeap=0x1f0000) returned 1 [0217.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224158 | out: hHeap=0x1f0000) returned 1 [0217.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230cb8 | out: hHeap=0x1f0000) returned 1 [0217.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238980 | out: hHeap=0x1f0000) returned 1 [0217.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210018 | out: hHeap=0x1f0000) returned 1 [0217.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b5e8 | out: hHeap=0x1f0000) returned 1 [0217.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238990 | out: hHeap=0x1f0000) returned 1 [0217.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210000 | out: hHeap=0x1f0000) returned 1 [0217.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b368 | out: hHeap=0x1f0000) returned 1 [0217.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238850 | out: hHeap=0x1f0000) returned 1 [0217.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2312b8 | out: hHeap=0x1f0000) returned 1 [0217.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b9f8 | out: hHeap=0x1f0000) returned 1 [0217.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236190 | out: hHeap=0x1f0000) returned 1 [0217.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2347d0 | out: hHeap=0x1f0000) returned 1 [0217.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b2f0 | out: hHeap=0x1f0000) returned 1 [0217.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0217.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234788 | out: hHeap=0x1f0000) returned 1 [0217.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238920 | out: hHeap=0x1f0000) returned 1 [0217.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238940 | out: hHeap=0x1f0000) returned 1 [0217.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28efd8 | out: hHeap=0x1f0000) returned 1 [0217.358] CloseHandle (hObject=0x230) returned 1 [0217.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389f0 | out: hHeap=0x1f0000) returned 1 [0217.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a20 | out: hHeap=0x1f0000) returned 1 [0217.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232d28 | out: hHeap=0x1f0000) returned 1 [0217.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24ce10 | out: hHeap=0x1f0000) returned 1 [0217.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffd0 | out: hHeap=0x1f0000) returned 1 [0217.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205130 | out: hHeap=0x1f0000) returned 1 [0217.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x289fb0 | out: hHeap=0x1f0000) returned 1 [0217.359] CloseHandle (hObject=0x23c) returned 1 [0217.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b30 | out: hHeap=0x1f0000) returned 1 [0217.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a90 | out: hHeap=0x1f0000) returned 1 [0217.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2614f8 | out: hHeap=0x1f0000) returned 1 [0217.360] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ff0 | out: hHeap=0x1f0000) returned 1 [0217.360] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220a58 | out: hHeap=0x1f0000) returned 1 [0217.360] CloseHandle (hObject=0x1f4) returned 1 [0217.360] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b00 | out: hHeap=0x1f0000) returned 1 [0217.360] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b10 | out: hHeap=0x1f0000) returned 1 [0217.360] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261218 | out: hHeap=0x1f0000) returned 1 [0217.360] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a50 | out: hHeap=0x1f0000) returned 1 [0217.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ac0 | out: hHeap=0x1f0000) returned 1 [0217.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a00 | out: hHeap=0x1f0000) returned 1 [0217.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b80 | out: hHeap=0x1f0000) returned 1 [0217.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220748 | out: hHeap=0x1f0000) returned 1 [0217.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24fd60 | out: hHeap=0x1f0000) returned 1 [0217.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223be0 | out: hHeap=0x1f0000) returned 1 [0217.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2067d8 | out: hHeap=0x1f0000) returned 1 [0217.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff28 | out: hHeap=0x1f0000) returned 1 [0217.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2100a8 | out: hHeap=0x1f0000) returned 1 [0217.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237200 | out: hHeap=0x1f0000) returned 1 [0217.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x254980 | out: hHeap=0x1f0000) returned 1 [0217.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2244a0 | out: hHeap=0x1f0000) returned 1 [0217.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0217.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212a48 | out: hHeap=0x1f0000) returned 1 [0217.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261e58 | out: hHeap=0x1f0000) returned 1 [0217.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234a58 | out: hHeap=0x1f0000) returned 1 [0217.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b750 | out: hHeap=0x1f0000) returned 1 [0217.362] DeleteFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\gstreamer-lite.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\gstreamer-lite.dll")) returned 1 [0217.363] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x26a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="hprof.dll", cAlternateFileName="")) returned 1 [0217.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0217.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2359d8 [0217.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2211b0 [0217.363] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2359d8 | out: hHeap=0x1f0000) returned 1 [0217.363] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0217.363] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0217.364] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\hprof.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\hprof.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0217.364] GetFileType (hFile=0x1f4) returned 0x1 [0217.364] CloseHandle (hObject=0x1f4) returned 1 [0217.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fa40 [0217.365] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\hprof.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\hprof.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x26a40)) returned 1 [0217.365] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fa40 | out: hHeap=0x1f0000) returned 1 [0217.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fef0 [0217.365] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\hprof.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\hprof.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x26a40)) returned 1 [0217.365] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fef0 | out: hHeap=0x1f0000) returned 1 [0217.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0217.522] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0217.522] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1e240, dwReserved0=0x0, dwReserved1=0x0, cFileName="instrument.dll", cAlternateFileName="INSTRU~1.DLL")) returned 1 [0217.522] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0217.522] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235c48 [0217.522] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221a00 [0217.523] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235c48 | out: hHeap=0x1f0000) returned 1 [0217.523] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0217.523] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0217.523] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\instrument.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\instrument.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0217.523] GetFileType (hFile=0x218) returned 0x1 [0217.524] CloseHandle (hObject=0x218) returned 1 [0217.524] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe00 [0217.524] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\instrument.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\instrument.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1e240)) returned 1 [0217.524] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe00 | out: hHeap=0x1f0000) returned 1 [0217.524] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0217.524] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\instrument.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\instrument.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1e240)) returned 1 [0217.524] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0217.525] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2202b0 [0217.525] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2202b0 | out: hHeap=0x1f0000) returned 1 [0217.525] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="j2pcsc.dll", cAlternateFileName="")) returned 1 [0217.525] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0217.525] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236058 [0217.525] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220d88 [0217.525] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236058 | out: hHeap=0x1f0000) returned 1 [0217.525] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0217.525] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0217.526] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pcsc.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\j2pcsc.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0217.527] GetFileType (hFile=0x218) returned 0x1 [0217.527] CloseHandle (hObject=0x218) returned 1 [0217.527] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe00 [0217.528] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pcsc.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\j2pcsc.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4a40)) returned 1 [0217.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe00 | out: hHeap=0x1f0000) returned 1 [0217.528] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0217.528] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pcsc.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\j2pcsc.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4a40)) returned 1 [0217.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0217.528] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0217.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0217.528] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf840, dwReserved0=0x0, dwReserved1=0x0, cFileName="j2pkcs11.dll", cAlternateFileName="")) returned 1 [0217.528] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0217.529] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235de8 [0217.529] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2215d8 [0217.529] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235de8 | out: hHeap=0x1f0000) returned 1 [0217.529] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0217.529] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0217.529] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pkcs11.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\j2pkcs11.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0217.530] GetFileType (hFile=0x218) returned 0x1 [0217.530] CloseHandle (hObject=0x218) returned 1 [0217.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe00 [0217.531] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pkcs11.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\j2pkcs11.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf840)) returned 1 [0217.531] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe00 | out: hHeap=0x1f0000) returned 1 [0217.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0217.531] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pkcs11.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\j2pkcs11.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf840)) returned 1 [0217.532] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0217.532] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21ff68 [0217.532] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ff68 | out: hHeap=0x1f0000) returned 1 [0217.532] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5240, dwReserved0=0x0, dwReserved1=0x0, cFileName="jaas_nt.dll", cAlternateFileName="")) returned 1 [0217.532] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0217.532] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235970 [0217.532] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221410 [0217.533] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235970 | out: hHeap=0x1f0000) returned 1 [0217.533] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0217.533] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0217.534] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jaas_nt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jaas_nt.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0217.534] GetFileType (hFile=0x218) returned 0x1 [0217.534] CloseHandle (hObject=0x218) returned 1 [0217.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0217.535] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jaas_nt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jaas_nt.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5240)) returned 1 [0217.535] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0217.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0217.536] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jaas_nt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jaas_nt.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5240)) returned 1 [0217.536] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0217.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0217.536] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0217.536] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8640, dwReserved0=0x0, dwReserved1=0x0, cFileName="jabswitch.exe", cAlternateFileName="JABSWI~1.EXE")) returned 1 [0217.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0217.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2359d8 [0217.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221080 [0217.538] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2359d8 | out: hHeap=0x1f0000) returned 1 [0217.538] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0217.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0217.540] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jabswitch.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jabswitch.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0217.540] GetFileType (hFile=0x218) returned 0x1 [0217.541] CloseHandle (hObject=0x218) returned 1 [0217.541] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fab8 [0217.541] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jabswitch.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jabswitch.exe"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8640)) returned 1 [0217.541] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fab8 | out: hHeap=0x1f0000) returned 1 [0217.542] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0217.542] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jabswitch.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jabswitch.exe"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8640)) returned 1 [0217.542] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0217.542] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2202b0 [0217.542] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2202b0 | out: hHeap=0x1f0000) returned 1 [0217.542] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="java-rmi.exe", cAlternateFileName="")) returned 1 [0217.542] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0217.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235768 [0217.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221a98 [0217.543] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235768 | out: hHeap=0x1f0000) returned 1 [0217.543] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0217.543] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0217.544] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\java-rmi.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java-rmi.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0217.545] GetFileType (hFile=0x218) returned 0x1 [0217.546] CloseHandle (hObject=0x218) returned 1 [0217.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0217.546] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\java-rmi.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java-rmi.exe"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e40)) returned 1 [0217.547] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0217.547] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fab8 [0217.547] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\java-rmi.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java-rmi.exe"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e40)) returned 1 [0217.547] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fab8 | out: hHeap=0x1f0000) returned 1 [0217.547] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0217.547] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0217.547] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x27040, dwReserved0=0x0, dwReserved1=0x0, cFileName="java.dll", cAlternateFileName="")) returned 1 [0217.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0217.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2362c8 [0217.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220cf0 [0217.548] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2362c8 | out: hHeap=0x1f0000) returned 1 [0217.548] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0217.548] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0217.549] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\java.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0217.549] GetFileType (hFile=0x218) returned 0x1 [0217.550] CloseHandle (hObject=0x218) returned 1 [0217.550] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220490 [0217.551] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\java.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x27040)) returned 1 [0217.551] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220490 | out: hHeap=0x1f0000) returned 1 [0217.551] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220490 [0217.551] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\java.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x27040)) returned 1 [0217.551] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220490 | out: hHeap=0x1f0000) returned 1 [0217.551] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fa40 [0217.552] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fa40 | out: hHeap=0x1f0000) returned 1 [0217.552] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x32840, dwReserved0=0x0, dwReserved1=0x0, cFileName="java.exe", cAlternateFileName="")) returned 1 [0217.552] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380c8 [0217.552] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2361f8 [0217.552] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221410 [0217.552] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2361f8 | out: hHeap=0x1f0000) returned 1 [0217.552] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0217.553] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380c8 | out: hHeap=0x1f0000) returned 1 [0217.554] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\java.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0217.554] GetFileType (hFile=0x218) returned 0x1 [0217.555] CloseHandle (hObject=0x218) returned 1 [0217.555] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0217.555] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\java.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java.exe"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x32840)) returned 1 [0217.555] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0217.556] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0217.556] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\java.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java.exe"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x32840)) returned 1 [0217.556] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0217.556] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0217.556] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0217.556] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x22c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="JavaAccessBridge-64.dll", cAlternateFileName="JAVAAC~1.DLL")) returned 1 [0217.556] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2f0 [0217.557] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2358a0 [0217.557] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221248 [0217.557] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2358a0 | out: hHeap=0x1f0000) returned 1 [0217.557] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0217.557] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0217.558] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\JavaAccessBridge-64.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaaccessbridge-64.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0217.558] GetFileType (hFile=0x218) returned 0x1 [0217.559] CloseHandle (hObject=0x218) returned 1 [0217.559] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0217.560] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\JavaAccessBridge-64.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaaccessbridge-64.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x22c40)) returned 1 [0217.560] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0217.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0217.560] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\JavaAccessBridge-64.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaaccessbridge-64.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x22c40)) returned 1 [0217.560] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0217.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2135f8 [0217.560] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2135f8 | out: hHeap=0x1f0000) returned 1 [0217.561] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2dc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="javacpl.cpl", cAlternateFileName="")) returned 1 [0217.561] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0217.561] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235f20 [0217.561] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220e20 [0217.561] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235f20 | out: hHeap=0x1f0000) returned 1 [0217.561] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0217.561] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0217.562] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.cpl" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javacpl.cpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0217.563] GetFileType (hFile=0x218) returned 0x1 [0217.563] CloseHandle (hObject=0x218) returned 1 [0217.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe00 [0217.564] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.cpl" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javacpl.cpl"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2dc00)) returned 1 [0217.564] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe00 | out: hHeap=0x1f0000) returned 1 [0217.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe00 [0217.564] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.cpl" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javacpl.cpl"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2dc00)) returned 1 [0217.565] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe00 | out: hHeap=0x1f0000) returned 1 [0217.565] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0217.565] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0217.565] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="javacpl.exe", cAlternateFileName="")) returned 1 [0217.565] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380f0 [0217.565] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235c48 [0217.565] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221968 [0217.566] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235c48 | out: hHeap=0x1f0000) returned 1 [0217.566] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0217.566] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380f0 | out: hHeap=0x1f0000) returned 1 [0217.567] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javacpl.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0217.567] GetFileType (hFile=0x218) returned 0x1 [0217.568] CloseHandle (hObject=0x218) returned 1 [0217.813] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0217.813] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javacpl.exe"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13a40)) returned 1 [0217.813] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0217.813] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fab8 [0217.813] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javacpl.exe"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13a40)) returned 1 [0217.814] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fab8 | out: hHeap=0x1f0000) returned 1 [0217.814] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0217.814] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0217.814] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x10e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="javafx_font.dll", cAlternateFileName="JAVAFX~1.DLL")) returned 1 [0217.814] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0217.814] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235f88 [0217.814] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221670 [0217.814] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235f88 | out: hHeap=0x1f0000) returned 1 [0217.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0217.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0217.815] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_font.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x238 [0217.816] GetFileType (hFile=0x238) returned 0x1 [0217.816] CloseHandle (hObject=0x238) returned 1 [0217.817] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fab8 [0217.817] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_font.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x10e40)) returned 1 [0217.817] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fab8 | out: hHeap=0x1f0000) returned 1 [0217.817] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2202b0 [0217.818] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_font.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x10e40)) returned 1 [0217.818] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2202b0 | out: hHeap=0x1f0000) returned 1 [0217.818] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0217.818] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0217.818] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x83640, dwReserved0=0x0, dwReserved1=0x0, cFileName="javafx_font_t2k.dll", cAlternateFileName="JAVAFX~2.DLL")) returned 1 [0217.818] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0217.819] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235700 [0217.819] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221080 [0217.819] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0217.819] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0217.819] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0217.820] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font_t2k.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_font_t2k.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x238 [0217.820] GetFileType (hFile=0x238) returned 0x1 [0217.821] CloseHandle (hObject=0x238) returned 1 [0217.821] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0217.821] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font_t2k.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_font_t2k.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x83640)) returned 1 [0217.822] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0217.822] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f10 [0217.822] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font_t2k.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_font_t2k.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x83640)) returned 1 [0217.822] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f10 | out: hHeap=0x1f0000) returned 1 [0217.822] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0217.822] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0217.823] GetLastError () returned 0x0 [0217.823] CryptAcquireContextA (in: phProv=0x1cfdaf0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1cfdaf0*=0x213350) returned 1 [0217.870] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238488 | out: pbBuffer=0x238488) returned 1 [0217.870] CryptReleaseContext (hProv=0x213350, dwFlags=0x0) returned 1 [0217.870] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238488 | out: hHeap=0x1f0000) returned 1 [0217.870] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x25a8a8 [0217.870] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x224158 [0217.870] QueryPerformanceCounter (in: lpPerformanceCount=0x1cfda84 | out: lpPerformanceCount=0x1cfda84*=37523907158) returned 1 [0217.870] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1cfdac4 | out: lpSystemTimeAsFileTime=0x1cfdac4) [0217.870] QueryPerformanceCounter (in: lpPerformanceCount=0x1cfda84 | out: lpPerformanceCount=0x1cfda84*=37523938231) returned 1 [0217.871] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1cfdac4 | out: lpSystemTimeAsFileTime=0x1cfdac4) [0217.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x1fef78 [0217.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x25bbb0 [0217.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x224388 [0217.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x237610 [0217.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210210 [0217.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206628 [0217.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210198 [0217.872] GetLastError () returned 0x0 [0217.872] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font_t2k.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_font_t2k.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfd990, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x238 [0217.872] GetFileType (hFile=0x238) returned 0x1 [0217.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238880 [0217.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238940 [0217.874] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font_t2k.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_font_t2k.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfd9c0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0217.874] GetFileType (hFile=0x200) returned 0x1 [0217.874] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d30 [0217.875] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c50 [0217.875] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261160 [0217.875] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388d0 [0217.875] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388f0 [0217.875] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font_t2k.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_font_t2k.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfd90c, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0217.876] GetFileType (hFile=0x210) returned 0x1 [0217.876] GetLastError () returned 0xb7 [0217.876] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font_t2k.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_font_t2k.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfd90c, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0217.876] GetFileType (hFile=0x21c) returned 0x1 [0217.877] GetLastError () returned 0xb7 [0217.877] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font_t2k.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_font_t2k.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfd904, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc [0217.877] GetFileType (hFile=0x1cc) returned 0x1 [0217.878] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x289fb0 [0217.878] ReadFile (in: hFile=0x1cc, lpBuffer=0x289fb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1cfd860, lpOverlapped=0x0 | out: lpBuffer=0x289fb0*, lpNumberOfBytesRead=0x1cfd860*=0x1000, lpOverlapped=0x0) returned 1 [0217.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24b1d8 [0217.882] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x296010 [0217.882] GetLastError () returned 0x0 [0217.908] CloseHandle (hObject=0x238) returned 1 [0218.101] CloseHandle (hObject=0x200) returned 1 [0218.101] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b30 [0218.101] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387f0 [0218.338] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font_t2k.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_font_t2k.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfd9c0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0218.349] GetFileType (hFile=0x1ac) returned 0x1 [0218.350] GetLastError () returned 0xb7 [0218.352] CloseHandle (hObject=0x1ac) returned 1 [0218.352] DeleteFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font_t2k.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_font_t2k.dll")) returned 0 [0218.352] GetLastError () returned 0x20 [0218.352] GetLastError () returned 0x20 [0218.352] CryptAcquireContextA (in: phProv=0x1cfdaf0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1cfdaf0*=0x213350) returned 1 [0218.353] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238488 | out: pbBuffer=0x238488) returned 1 [0218.353] CryptReleaseContext (hProv=0x213350, dwFlags=0x0) returned 1 [0218.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238488 | out: hHeap=0x1f0000) returned 1 [0218.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2383e8 [0218.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2382a8 [0218.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf70 [0218.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0218.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0218.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf70 | out: hHeap=0x1f0000) returned 1 [0218.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2aa7a0 [0218.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffb8 [0218.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x235908 [0218.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238438 [0218.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2311b0 [0218.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204b90 [0218.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235768 [0218.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238488 [0218.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2313c0 [0218.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ba0 [0218.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0218.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210000 [0218.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a50 [0218.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0218.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210090 [0218.355] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210090 | out: hHeap=0x1f0000) returned 1 [0218.355] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0218.355] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a50 | out: hHeap=0x1f0000) returned 1 [0218.355] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210000 | out: hHeap=0x1f0000) returned 1 [0218.355] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0218.355] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ba0 | out: hHeap=0x1f0000) returned 1 [0218.355] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2313c0 | out: hHeap=0x1f0000) returned 1 [0218.355] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238488 | out: hHeap=0x1f0000) returned 1 [0218.355] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235768 | out: hHeap=0x1f0000) returned 1 [0218.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x21cf70 [0218.355] GetLastError () returned 0x0 [0218.355] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1cfd680 | out: lpSystemTimeAsFileTime=0x1cfd680) [0218.356] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238a80 [0218.356] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0218.356] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e50 [0218.356] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e50 | out: hHeap=0x1f0000) returned 1 [0218.356] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0218.356] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0218.356] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cd0 [0218.356] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cd0 | out: hHeap=0x1f0000) returned 1 [0218.356] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0218.356] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a80 | out: hHeap=0x1f0000) returned 1 [0218.356] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0218.356] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x21cf70 [0218.356] GetLastError () returned 0x0 [0218.356] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font_t2k.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_font_t2k.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfd9f0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0218.357] GetFileType (hFile=0x1ac) returned 0x1 [0218.357] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x294000 [0218.357] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1cfd978 | out: lpNewFilePointer=0x0) returned 1 [0218.357] GetLastError () returned 0xb7 [0218.357] CloseHandle (hObject=0x1ac) returned 1 [0218.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a50 | out: hHeap=0x1f0000) returned 1 [0218.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ba0 | out: hHeap=0x1f0000) returned 1 [0218.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2317e0 | out: hHeap=0x1f0000) returned 1 [0218.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2311b0 | out: hHeap=0x1f0000) returned 1 [0218.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238438 | out: hHeap=0x1f0000) returned 1 [0218.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204b90 | out: hHeap=0x1f0000) returned 1 [0218.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235908 | out: hHeap=0x1f0000) returned 1 [0218.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffb8 | out: hHeap=0x1f0000) returned 1 [0218.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aa7a0 | out: hHeap=0x1f0000) returned 1 [0218.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2246d0 | out: hHeap=0x1f0000) returned 1 [0218.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0218.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0218.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25ceb8 | out: hHeap=0x1f0000) returned 1 [0218.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224a18 | out: hHeap=0x1f0000) returned 1 [0218.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1ff058 | out: hHeap=0x1f0000) returned 1 [0218.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b90 | out: hHeap=0x1f0000) returned 1 [0218.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff28 | out: hHeap=0x1f0000) returned 1 [0218.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380c8 | out: hHeap=0x1f0000) returned 1 [0218.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a00 | out: hHeap=0x1f0000) returned 1 [0218.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20fef8 | out: hHeap=0x1f0000) returned 1 [0218.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0218.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ac0 | out: hHeap=0x1f0000) returned 1 [0218.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2314c8 | out: hHeap=0x1f0000) returned 1 [0218.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0218.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2358a0 | out: hHeap=0x1f0000) returned 1 [0218.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346b0 | out: hHeap=0x1f0000) returned 1 [0218.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0218.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0218.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234548 | out: hHeap=0x1f0000) returned 1 [0218.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387f0 | out: hHeap=0x1f0000) returned 1 [0218.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b30 | out: hHeap=0x1f0000) returned 1 [0218.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x289fb0 | out: hHeap=0x1f0000) returned 1 [0218.359] CloseHandle (hObject=0x1cc) returned 1 [0218.360] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238910 | out: hHeap=0x1f0000) returned 1 [0218.360] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238800 | out: hHeap=0x1f0000) returned 1 [0218.360] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2334a8 | out: hHeap=0x1f0000) returned 1 [0218.360] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24b1d8 | out: hHeap=0x1f0000) returned 1 [0218.360] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0218.360] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f30 | out: hHeap=0x1f0000) returned 1 [0218.360] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x296010 | out: hHeap=0x1f0000) returned 1 [0218.360] CloseHandle (hObject=0x21c) returned 1 [0218.360] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387e0 | out: hHeap=0x1f0000) returned 1 [0218.360] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389b0 | out: hHeap=0x1f0000) returned 1 [0218.360] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286dc8 | out: hHeap=0x1f0000) returned 1 [0218.360] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204db0 | out: hHeap=0x1f0000) returned 1 [0218.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220748 | out: hHeap=0x1f0000) returned 1 [0218.361] CloseHandle (hObject=0x210) returned 1 [0218.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388f0 | out: hHeap=0x1f0000) returned 1 [0218.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388d0 | out: hHeap=0x1f0000) returned 1 [0218.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261160 | out: hHeap=0x1f0000) returned 1 [0218.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238940 | out: hHeap=0x1f0000) returned 1 [0218.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238880 | out: hHeap=0x1f0000) returned 1 [0218.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238830 | out: hHeap=0x1f0000) returned 1 [0218.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238950 | out: hHeap=0x1f0000) returned 1 [0218.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220a58 | out: hHeap=0x1f0000) returned 1 [0218.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25bbb0 | out: hHeap=0x1f0000) returned 1 [0218.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224388 | out: hHeap=0x1f0000) returned 1 [0218.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206628 | out: hHeap=0x1f0000) returned 1 [0218.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0218.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0218.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237610 | out: hHeap=0x1f0000) returned 1 [0218.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25a8a8 | out: hHeap=0x1f0000) returned 1 [0218.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224158 | out: hHeap=0x1f0000) returned 1 [0218.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0218.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f10 | out: hHeap=0x1f0000) returned 1 [0218.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263310 | out: hHeap=0x1f0000) returned 1 [0218.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234740 | out: hHeap=0x1f0000) returned 1 [0218.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380f0 | out: hHeap=0x1f0000) returned 1 [0218.362] DeleteFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font_t2k.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_font_t2k.dll")) returned 1 [0218.364] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1f440, dwReserved0=0x0, dwReserved1=0x0, cFileName="javafx_iio.dll", cAlternateFileName="JAVAFX~3.DLL")) returned 1 [0218.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380f0 [0218.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2362c8 [0218.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2218d0 [0218.364] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2362c8 | out: hHeap=0x1f0000) returned 1 [0218.364] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0218.364] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380f0 | out: hHeap=0x1f0000) returned 1 [0218.365] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_iio.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_iio.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0218.366] GetFileType (hFile=0x210) returned 0x1 [0218.367] CloseHandle (hObject=0x210) returned 1 [0218.367] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0218.367] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_iio.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_iio.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1f440)) returned 1 [0218.367] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0218.367] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0218.368] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_iio.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_iio.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1f440)) returned 1 [0218.368] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0218.368] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0218.368] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0218.368] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x32840, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaw.exe", cAlternateFileName="")) returned 1 [0218.368] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0218.368] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2358a0 [0218.368] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221540 [0218.368] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2358a0 | out: hHeap=0x1f0000) returned 1 [0218.368] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0218.369] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0218.369] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\javaw.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaw.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0218.369] GetFileType (hFile=0x210) returned 0x1 [0218.370] CloseHandle (hObject=0x210) returned 1 [0218.370] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fab8 [0218.370] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\javaw.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaw.exe"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x32840)) returned 1 [0218.371] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fab8 | out: hHeap=0x1f0000) returned 1 [0218.371] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0218.371] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\javaw.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaw.exe"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x32840)) returned 1 [0218.371] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0218.371] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0218.371] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0218.371] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e040, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaws.exe", cAlternateFileName="")) returned 1 [0218.371] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0218.371] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2358a0 [0218.371] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220d88 [0218.372] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2358a0 | out: hHeap=0x1f0000) returned 1 [0218.372] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0218.372] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0218.372] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\javaws.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaws.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x234 [0218.573] GetFileType (hFile=0x234) returned 0x1 [0218.573] CloseHandle (hObject=0x234) returned 1 [0218.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0218.574] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\javaws.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaws.exe"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e040)) returned 1 [0218.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0218.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0218.574] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\javaws.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaws.exe"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e040)) returned 1 [0218.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0218.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0218.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0218.574] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7440, dwReserved0=0x0, dwReserved1=0x0, cFileName="java_crw_demo.dll", cAlternateFileName="JAVA_C~1.DLL")) returned 1 [0218.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2f0 [0218.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235be0 [0218.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221378 [0218.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235be0 | out: hHeap=0x1f0000) returned 1 [0218.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0218.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0218.663] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\java_crw_demo.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java_crw_demo.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x234 [0218.664] GetFileType (hFile=0x234) returned 0x1 [0218.664] CloseHandle (hObject=0x234) returned 1 [0218.665] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0218.665] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\java_crw_demo.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java_crw_demo.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7440)) returned 1 [0218.665] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0218.665] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e88 [0218.665] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\java_crw_demo.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java_crw_demo.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7440)) returned 1 [0218.665] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e88 | out: hHeap=0x1f0000) returned 1 [0218.665] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212c68 [0218.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212c68 | out: hHeap=0x1f0000) returned 1 [0218.666] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3840, dwReserved0=0x0, dwReserved1=0x0, cFileName="jawt.dll", cAlternateFileName="")) returned 1 [0218.666] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380c8 [0218.666] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235a40 [0218.666] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220d88 [0218.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235a40 | out: hHeap=0x1f0000) returned 1 [0218.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0218.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380c8 | out: hHeap=0x1f0000) returned 1 [0218.667] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jawt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jawt.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x234 [0218.668] GetFileType (hFile=0x234) returned 0x1 [0218.668] CloseHandle (hObject=0x234) returned 1 [0218.669] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0218.669] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jawt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jawt.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3840)) returned 1 [0218.669] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0218.669] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2202b0 [0218.669] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jawt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jawt.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3840)) returned 1 [0218.670] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2202b0 | out: hHeap=0x1f0000) returned 1 [0218.670] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21ffe0 [0218.670] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ffe0 | out: hHeap=0x1f0000) returned 1 [0218.670] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="JAWTAccessBridge-64.dll", cAlternateFileName="JAWTAC~1.DLL")) returned 1 [0218.672] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf70 [0218.672] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2361f8 [0218.672] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221968 [0218.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2361f8 | out: hHeap=0x1f0000) returned 1 [0218.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0218.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf70 | out: hHeap=0x1f0000) returned 1 [0218.672] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\JAWTAccessBridge-64.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jawtaccessbridge-64.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x234 [0218.673] GetFileType (hFile=0x234) returned 0x1 [0218.673] CloseHandle (hObject=0x234) returned 1 [0218.674] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213570 [0218.674] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\JAWTAccessBridge-64.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jawtaccessbridge-64.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3c40)) returned 1 [0218.674] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213570 | out: hHeap=0x1f0000) returned 1 [0218.674] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0218.674] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\JAWTAccessBridge-64.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jawtaccessbridge-64.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3c40)) returned 1 [0218.674] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0218.674] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0218.674] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0218.674] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x31440, dwReserved0=0x0, dwReserved1=0x0, cFileName="jdwp.dll", cAlternateFileName="")) returned 1 [0218.675] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380c8 [0218.675] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235f20 [0218.675] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221080 [0218.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235f20 | out: hHeap=0x1f0000) returned 1 [0218.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0218.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380c8 | out: hHeap=0x1f0000) returned 1 [0218.675] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jdwp.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jdwp.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x234 [0218.677] GetFileType (hFile=0x234) returned 0x1 [0218.677] CloseHandle (hObject=0x234) returned 1 [0218.678] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0218.678] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jdwp.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jdwp.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x31440)) returned 1 [0218.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0218.678] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0218.678] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jdwp.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jdwp.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x31440)) returned 1 [0218.679] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0218.679] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0218.679] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0218.679] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x6840, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfr.dll", cAlternateFileName="")) returned 1 [0218.679] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2360c0 [0218.679] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0218.680] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jfr.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x234 [0218.680] GetFileType (hFile=0x234) returned 0x1 [0218.681] CloseHandle (hObject=0x234) returned 1 [0218.681] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235cb0 [0218.681] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jfr.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfr.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x6840)) returned 1 [0218.682] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235cb0 | out: hHeap=0x1f0000) returned 1 [0218.682] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235de8 [0218.682] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jfr.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfr.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x6840)) returned 1 [0218.682] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235de8 | out: hHeap=0x1f0000) returned 1 [0218.682] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2357d0 [0218.682] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2357d0 | out: hHeap=0x1f0000) returned 1 [0218.682] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x22240, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfxmedia.dll", cAlternateFileName="")) returned 1 [0218.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0218.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235be0 [0218.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221540 [0218.683] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235be0 | out: hHeap=0x1f0000) returned 1 [0218.683] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2360c0 | out: hHeap=0x1f0000) returned 1 [0218.683] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0218.684] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jfxmedia.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfxmedia.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x234 [0218.684] GetFileType (hFile=0x234) returned 0x1 [0218.685] CloseHandle (hObject=0x234) returned 1 [0218.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0218.689] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jfxmedia.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfxmedia.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x22240)) returned 1 [0218.689] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0218.689] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe00 [0218.689] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jfxmedia.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfxmedia.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x22240)) returned 1 [0218.689] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe00 | out: hHeap=0x1f0000) returned 1 [0218.689] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0218.689] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0218.690] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7511d3f, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7511d3f, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa75aa64d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2794a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfxwebkit.dll", cAlternateFileName="JFXWEB~1.DLL")) returned 1 [0218.690] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0218.690] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2361f8 [0218.690] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220d88 [0218.690] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2361f8 | out: hHeap=0x1f0000) returned 1 [0218.690] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0218.690] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0218.691] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jfxwebkit.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfxwebkit.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x234 [0218.691] GetFileType (hFile=0x234) returned 0x1 [0218.692] CloseHandle (hObject=0x234) returned 1 [0218.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe00 [0218.692] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jfxwebkit.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfxwebkit.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7511d3f, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7511d3f, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa75aa64d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2794a40)) returned 1 [0218.692] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe00 | out: hHeap=0x1f0000) returned 1 [0218.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0218.693] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jfxwebkit.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfxwebkit.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7511d3f, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7511d3f, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa75aa64d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2794a40)) returned 1 [0218.693] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0218.693] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220328 [0218.693] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220328 | out: hHeap=0x1f0000) returned 1 [0218.693] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa75aa64d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa75aa64d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa75aa64d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="jjs.exe", cAlternateFileName="")) returned 1 [0218.693] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235eb8 [0218.693] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0218.694] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jjs.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jjs.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x234 [0218.695] GetFileType (hFile=0x234) returned 0x1 [0218.696] CloseHandle (hObject=0x234) returned 1 [0218.696] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2358a0 [0218.696] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jjs.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jjs.exe"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa75aa64d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa75aa64d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa75aa64d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e40)) returned 1 [0218.696] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2358a0 | out: hHeap=0x1f0000) returned 1 [0218.696] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235a40 [0218.696] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jjs.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jjs.exe"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa75aa64d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa75aa64d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa75aa64d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e40)) returned 1 [0218.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235a40 | out: hHeap=0x1f0000) returned 1 [0218.697] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235908 [0218.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235908 | out: hHeap=0x1f0000) returned 1 [0218.697] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa75aa64d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa75aa64d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa75aa64d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2aa40, dwReserved0=0x0, dwReserved1=0x0, cFileName="jli.dll", cAlternateFileName="")) returned 1 [0218.697] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2362c8 [0218.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235eb8 | out: hHeap=0x1f0000) returned 1 [0218.698] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jli.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jli.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x234 [0218.698] GetFileType (hFile=0x234) returned 0x1 [0218.698] CloseHandle (hObject=0x234) returned 1 [0218.699] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235970 [0218.699] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jli.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jli.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa75aa64d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa75aa64d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa75aa64d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2aa40)) returned 1 [0218.699] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235970 | out: hHeap=0x1f0000) returned 1 [0218.699] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235d80 [0218.699] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jli.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jli.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa75aa64d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa75aa64d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa75aa64d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2aa40)) returned 1 [0218.699] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235d80 | out: hHeap=0x1f0000) returned 1 [0218.700] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235908 [0218.700] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235908 | out: hHeap=0x1f0000) returned 1 [0218.700] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa75aa64d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa75aa64d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa897bfc2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x48440, dwReserved0=0x0, dwReserved1=0x0, cFileName="jp2iexp.dll", cAlternateFileName="")) returned 1 [0218.700] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0218.700] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235cb0 [0218.700] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2215d8 [0218.700] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235cb0 | out: hHeap=0x1f0000) returned 1 [0218.700] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2362c8 | out: hHeap=0x1f0000) returned 1 [0218.700] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0218.701] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2iexp.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2iexp.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x234 [0218.701] GetFileType (hFile=0x234) returned 0x1 [0218.702] CloseHandle (hObject=0x234) returned 1 [0218.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0218.702] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2iexp.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2iexp.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa75aa64d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa75aa64d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa897bfc2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x48440)) returned 1 [0218.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0218.703] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21ff68 [0218.703] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2iexp.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2iexp.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa75aa64d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa75aa64d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa897bfc2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x48440)) returned 1 [0218.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ff68 | out: hHeap=0x1f0000) returned 1 [0218.703] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0218.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0218.703] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa897bfc2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa897bfc2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89a2223, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1b640, dwReserved0=0x0, dwReserved1=0x0, cFileName="jp2launcher.exe", cAlternateFileName="JP2LAU~1.EXE")) returned 1 [0218.703] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0218.704] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235970 [0218.704] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221378 [0218.704] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235970 | out: hHeap=0x1f0000) returned 1 [0218.704] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0218.704] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0218.705] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2launcher.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2launcher.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x234 [0218.706] GetFileType (hFile=0x234) returned 0x1 [0218.706] CloseHandle (hObject=0x234) returned 1 [0218.707] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0218.707] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2launcher.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2launcher.exe"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa897bfc2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa897bfc2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89a2223, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1b640)) returned 1 [0218.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0218.707] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe00 [0218.707] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2launcher.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2launcher.exe"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa897bfc2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa897bfc2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89a2223, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1b640)) returned 1 [0218.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe00 | out: hHeap=0x1f0000) returned 1 [0218.707] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0218.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0218.708] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89a2223, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89a2223, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89a2223, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="jp2native.dll", cAlternateFileName="JP2NAT~1.DLL")) returned 1 [0218.708] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0218.708] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236058 [0218.708] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221a98 [0218.708] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236058 | out: hHeap=0x1f0000) returned 1 [0218.708] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0218.708] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0218.975] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2native.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2native.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0218.976] GetFileType (hFile=0x210) returned 0x1 [0218.976] CloseHandle (hObject=0x210) returned 1 [0218.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2202b0 [0218.977] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2native.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2native.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89a2223, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89a2223, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89a2223, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e40)) returned 1 [0218.977] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2202b0 | out: hHeap=0x1f0000) returned 1 [0218.977] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0218.977] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2native.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2native.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89a2223, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89a2223, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89a2223, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e40)) returned 1 [0218.977] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0218.977] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0218.977] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0218.977] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89a2223, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89a2223, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89a2223, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39840, dwReserved0=0x0, dwReserved1=0x0, cFileName="jp2ssv.dll", cAlternateFileName="")) returned 1 [0218.977] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0218.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236058 [0218.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221248 [0218.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236058 | out: hHeap=0x1f0000) returned 1 [0218.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0218.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0218.979] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2ssv.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2ssv.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0218.979] GetFileType (hFile=0x210) returned 0x1 [0218.979] CloseHandle (hObject=0x210) returned 1 [0218.980] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0218.980] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2ssv.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2ssv.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89a2223, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89a2223, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89a2223, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39840)) returned 1 [0218.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0218.980] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0218.980] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2ssv.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2ssv.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89a2223, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89a2223, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89a2223, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39840)) returned 1 [0218.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0218.980] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0218.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0218.980] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89a2223, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89a2223, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2d640, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpeg.dll", cAlternateFileName="")) returned 1 [0218.981] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0218.981] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235be0 [0218.981] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221a00 [0218.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235be0 | out: hHeap=0x1f0000) returned 1 [0218.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0218.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0218.982] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jpeg.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jpeg.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0218.983] GetFileType (hFile=0x210) returned 0x1 [0218.983] CloseHandle (hObject=0x210) returned 1 [0218.983] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220580 [0218.983] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jpeg.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jpeg.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89a2223, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89a2223, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2d640)) returned 1 [0218.984] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220580 | out: hHeap=0x1f0000) returned 1 [0218.984] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0218.984] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jpeg.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jpeg.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89a2223, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89a2223, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2d640)) returned 1 [0218.984] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0218.984] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fc20 [0218.984] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fc20 | out: hHeap=0x1f0000) returned 1 [0218.984] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4840, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsdt.dll", cAlternateFileName="")) returned 1 [0218.984] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0218.984] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235cb0 [0218.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220f50 [0218.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235cb0 | out: hHeap=0x1f0000) returned 1 [0218.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0218.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0218.985] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jsdt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsdt.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0218.986] GetFileType (hFile=0x210) returned 0x1 [0218.986] CloseHandle (hObject=0x210) returned 1 [0218.986] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f770 [0218.986] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jsdt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsdt.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4840)) returned 1 [0218.987] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f770 | out: hHeap=0x1f0000) returned 1 [0218.987] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fb30 [0218.987] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jsdt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsdt.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4840)) returned 1 [0218.987] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fb30 | out: hHeap=0x1f0000) returned 1 [0218.987] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220580 [0218.987] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220580 | out: hHeap=0x1f0000) returned 1 [0218.987] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsound.dll", cAlternateFileName="")) returned 1 [0218.987] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0218.987] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235be0 [0218.987] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220cf0 [0218.987] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235be0 | out: hHeap=0x1f0000) returned 1 [0218.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0218.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0218.988] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jsound.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsound.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0218.990] GetFileType (hFile=0x210) returned 0x1 [0218.990] CloseHandle (hObject=0x210) returned 1 [0218.991] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220580 [0218.991] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jsound.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsound.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8a40)) returned 1 [0218.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220580 | out: hHeap=0x1f0000) returned 1 [0218.991] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0218.991] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jsound.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsound.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8a40)) returned 1 [0218.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0218.991] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f770 [0218.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f770 | out: hHeap=0x1f0000) returned 1 [0218.992] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsoundds.dll", cAlternateFileName="")) returned 1 [0218.992] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0218.992] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235970 [0218.992] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2212e0 [0218.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235970 | out: hHeap=0x1f0000) returned 1 [0218.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0218.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0218.993] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jsoundds.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsoundds.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0218.993] GetFileType (hFile=0x210) returned 0x1 [0218.994] CloseHandle (hObject=0x210) returned 1 [0218.995] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0218.995] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jsoundds.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsoundds.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7a40)) returned 1 [0218.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0218.995] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0218.995] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jsoundds.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsoundds.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7a40)) returned 1 [0218.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0218.996] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0218.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0218.996] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x35e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="kcms.dll", cAlternateFileName="")) returned 1 [0218.996] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0218.996] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235de8 [0218.996] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221080 [0218.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235de8 | out: hHeap=0x1f0000) returned 1 [0218.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0218.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0218.998] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\kcms.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\kcms.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0218.998] GetFileType (hFile=0x210) returned 0x1 [0218.999] CloseHandle (hObject=0x210) returned 1 [0218.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0218.999] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\kcms.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\kcms.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x35e40)) returned 1 [0219.000] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0219.000] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0219.000] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\kcms.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\kcms.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x35e40)) returned 1 [0219.000] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0219.000] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fef0 [0219.000] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fef0 | out: hHeap=0x1f0000) returned 1 [0219.000] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="keytool.exe", cAlternateFileName="")) returned 1 [0219.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0219.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235970 [0219.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221a98 [0219.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235970 | out: hHeap=0x1f0000) returned 1 [0219.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0219.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0219.002] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\keytool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\keytool.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0219.003] GetFileType (hFile=0x210) returned 0x1 [0219.003] CloseHandle (hObject=0x210) returned 1 [0219.004] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220490 [0219.004] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\keytool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\keytool.exe"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1 [0219.004] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220490 | out: hHeap=0x1f0000) returned 1 [0219.004] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220490 [0219.004] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\keytool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\keytool.exe"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1 [0219.004] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220490 | out: hHeap=0x1f0000) returned 1 [0219.004] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21ff68 [0219.004] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ff68 | out: hHeap=0x1f0000) returned 1 [0219.004] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="kinit.exe", cAlternateFileName="")) returned 1 [0219.005] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0219.005] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236058 [0219.005] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221b30 [0219.005] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236058 | out: hHeap=0x1f0000) returned 1 [0219.005] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0219.005] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0219.006] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\kinit.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\kinit.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0219.006] GetFileType (hFile=0x210) returned 0x1 [0219.007] CloseHandle (hObject=0x210) returned 1 [0219.007] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220328 [0219.007] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\kinit.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\kinit.exe"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1 [0219.007] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220328 | out: hHeap=0x1f0000) returned 1 [0219.007] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f770 [0219.007] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\kinit.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\kinit.exe"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1 [0219.008] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f770 | out: hHeap=0x1f0000) returned 1 [0219.008] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220580 [0219.008] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220580 | out: hHeap=0x1f0000) returned 1 [0219.008] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="klist.exe", cAlternateFileName="")) returned 1 [0219.008] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0219.008] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235be0 [0219.008] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220e20 [0219.008] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235be0 | out: hHeap=0x1f0000) returned 1 [0219.008] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0219.009] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0219.009] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\klist.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\klist.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0219.010] GetFileType (hFile=0x210) returned 0x1 [0219.010] CloseHandle (hObject=0x210) returned 1 [0219.011] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0219.011] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\klist.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\klist.exe"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1 [0219.011] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0219.011] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220238 [0219.011] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\klist.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\klist.exe"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1 [0219.011] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220238 | out: hHeap=0x1f0000) returned 1 [0219.012] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21ffe0 [0219.012] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ffe0 | out: hHeap=0x1f0000) returned 1 [0219.012] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="ktab.exe", cAlternateFileName="")) returned 1 [0219.012] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0219.012] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235cb0 [0219.012] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2212e0 [0219.012] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235cb0 | out: hHeap=0x1f0000) returned 1 [0219.013] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0219.013] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0219.014] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\ktab.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ktab.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0219.014] GetFileType (hFile=0x210) returned 0x1 [0219.014] CloseHandle (hObject=0x210) returned 1 [0219.015] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0219.015] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\ktab.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ktab.exe"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1 [0219.015] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0219.015] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220490 [0219.015] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\ktab.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ktab.exe"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1 [0219.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220490 | out: hHeap=0x1f0000) returned 1 [0219.016] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0219.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0219.016] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39040, dwReserved0=0x0, dwReserved1=0x0, cFileName="lcms.dll", cAlternateFileName="")) returned 1 [0219.016] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0219.016] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236128 [0219.016] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221a98 [0219.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236128 | out: hHeap=0x1f0000) returned 1 [0219.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0219.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0219.018] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\lcms.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\lcms.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x238 [0219.343] GetFileType (hFile=0x238) returned 0x1 [0219.343] CloseHandle (hObject=0x238) returned 1 [0219.343] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe00 [0219.343] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\lcms.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\lcms.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39040)) returned 1 [0219.344] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe00 | out: hHeap=0x1f0000) returned 1 [0219.344] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2203a0 [0219.344] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\lcms.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\lcms.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39040)) returned 1 [0219.344] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2203a0 | out: hHeap=0x1f0000) returned 1 [0219.344] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220580 [0219.344] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220580 | out: hHeap=0x1f0000) returned 1 [0219.344] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x9040, dwReserved0=0x0, dwReserved1=0x0, cFileName="management.dll", cAlternateFileName="MANAGE~1.DLL")) returned 1 [0219.344] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0219.344] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235838 [0219.344] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221410 [0219.344] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235838 | out: hHeap=0x1f0000) returned 1 [0219.344] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0219.345] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0219.345] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\management.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\management.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x238 [0219.345] GetFileType (hFile=0x238) returned 0x1 [0219.345] CloseHandle (hObject=0x238) returned 1 [0219.345] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21ff68 [0219.346] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\management.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\management.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x9040)) returned 1 [0219.346] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ff68 | out: hHeap=0x1f0000) returned 1 [0219.346] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0219.346] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\management.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\management.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x9040)) returned 1 [0219.346] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0219.346] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fab8 [0219.346] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fab8 | out: hHeap=0x1f0000) returned 1 [0219.346] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x9fa40, dwReserved0=0x0, dwReserved1=0x0, cFileName="mlib_image.dll", cAlternateFileName="MLIB_I~1.DLL")) returned 1 [0219.346] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238488 [0219.346] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235d80 [0219.346] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221540 [0219.346] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235d80 | out: hHeap=0x1f0000) returned 1 [0219.346] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0219.346] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238488 | out: hHeap=0x1f0000) returned 1 [0219.347] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\mlib_image.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\mlib_image.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x238 [0219.348] GetFileType (hFile=0x238) returned 0x1 [0219.348] CloseHandle (hObject=0x238) returned 1 [0219.348] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fef0 [0219.348] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\mlib_image.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\mlib_image.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x9fa40)) returned 1 [0219.348] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fef0 | out: hHeap=0x1f0000) returned 1 [0219.348] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe00 [0219.348] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\mlib_image.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\mlib_image.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x9fa40)) returned 1 [0219.348] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe00 | out: hHeap=0x1f0000) returned 1 [0219.348] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fc20 [0219.348] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fc20 | out: hHeap=0x1f0000) returned 1 [0219.348] GetLastError () returned 0x0 [0219.349] CryptAcquireContextA (in: phProv=0x1cfdaf0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1cfdaf0*=0x2133d8) returned 1 [0219.349] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238208 | out: pbBuffer=0x238208) returned 1 [0219.349] CryptReleaseContext (hProv=0x2133d8, dwFlags=0x0) returned 1 [0219.350] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0219.350] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x24fd60 [0219.350] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2339e0 [0219.350] QueryPerformanceCounter (in: lpPerformanceCount=0x1cfda84 | out: lpPerformanceCount=0x1cfda84*=37671865946) returned 1 [0219.350] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1cfdac4 | out: lpSystemTimeAsFileTime=0x1cfdac4) [0219.350] QueryPerformanceCounter (in: lpPerformanceCount=0x1cfda84 | out: lpPerformanceCount=0x1cfda84*=37671887284) returned 1 [0219.350] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1cfdac4 | out: lpSystemTimeAsFileTime=0x1cfdac4) [0219.350] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x21d050 [0219.350] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x2595a0 [0219.350] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2337b0 [0219.350] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x2377b0 [0219.350] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffb8 [0219.351] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206808 [0219.351] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff28 [0219.351] GetLastError () returned 0x0 [0219.351] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\mlib_image.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\mlib_image.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfd990, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x238 [0219.352] GetFileType (hFile=0x238) returned 0x1 [0219.352] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389e0 [0219.352] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389f0 [0219.353] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\mlib_image.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\mlib_image.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfd9c0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0219.353] GetFileType (hFile=0x1e8) returned 0x1 [0219.353] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ef0 [0219.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e70 [0219.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261388 [0219.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a90 [0219.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a00 [0219.354] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\mlib_image.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\mlib_image.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfd90c, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0219.355] GetFileType (hFile=0x1b0) returned 0x1 [0219.355] GetLastError () returned 0xb7 [0219.355] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\mlib_image.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\mlib_image.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfd90c, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1bc [0219.355] GetFileType (hFile=0x1bc) returned 0x1 [0219.355] GetLastError () returned 0xb7 [0219.355] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\mlib_image.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\mlib_image.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfd904, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0219.355] GetFileType (hFile=0x1c0) returned 0x1 [0219.356] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28cfc8 [0219.356] ReadFile (in: hFile=0x1c0, lpBuffer=0x28cfc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1cfd860, lpOverlapped=0x0 | out: lpBuffer=0x28cfc8*, lpNumberOfBytesRead=0x1cfd860*=0x1000, lpOverlapped=0x0) returned 1 [0219.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x249db0 [0219.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x287fa0 [0219.359] GetLastError () returned 0x0 [0219.671] CloseHandle (hObject=0x238) returned 1 [0219.690] CloseHandle (hObject=0x1e8) returned 1 [0219.690] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b20 [0219.691] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ad0 [0219.691] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\mlib_image.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\mlib_image.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfd9c0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0219.699] GetFileType (hFile=0x1e8) returned 0x1 [0219.700] GetLastError () returned 0xb7 [0219.701] CloseHandle (hObject=0x1e8) returned 1 [0219.701] DeleteFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\mlib_image.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\mlib_image.dll")) returned 0 [0219.702] GetLastError () returned 0x20 [0219.702] GetLastError () returned 0x20 [0219.702] CryptAcquireContextA (in: phProv=0x1cfdaf0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1cfdaf0*=0x212e88) returned 1 [0219.703] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2383e8 | out: pbBuffer=0x2383e8) returned 1 [0219.703] CryptReleaseContext (hProv=0x212e88, dwFlags=0x0) returned 1 [0219.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0219.703] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238190 [0219.703] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381b8 [0219.703] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0219.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0219.703] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0219.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0219.703] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8d70 [0219.704] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210090 [0219.704] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x235838 [0219.704] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238208 [0219.704] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285098 [0219.704] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0219.704] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235970 [0219.704] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2383e8 [0219.704] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2854b8 [0219.704] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a50 [0219.704] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0219.704] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2100a8 [0219.704] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b50 [0219.704] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0219.705] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210210 [0219.705] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0219.705] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0219.705] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b50 | out: hHeap=0x1f0000) returned 1 [0219.705] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2100a8 | out: hHeap=0x1f0000) returned 1 [0219.705] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0219.705] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a50 | out: hHeap=0x1f0000) returned 1 [0219.705] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2854b8 | out: hHeap=0x1f0000) returned 1 [0219.705] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0219.706] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235970 | out: hHeap=0x1f0000) returned 1 [0219.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x21d050 [0219.706] GetLastError () returned 0x0 [0219.706] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1cfd680 | out: lpSystemTimeAsFileTime=0x1cfd680) [0219.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238b50 [0219.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0219.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c90 [0219.706] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c90 | out: hHeap=0x1f0000) returned 1 [0219.706] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0219.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0219.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f30 [0219.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f30 | out: hHeap=0x1f0000) returned 1 [0219.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0219.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b50 | out: hHeap=0x1f0000) returned 1 [0219.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0219.707] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x227dd0 [0219.707] GetLastError () returned 0x0 [0219.707] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\mlib_image.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\mlib_image.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfd9f0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0219.707] GetFileType (hFile=0x1e8) returned 0x1 [0219.708] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28dfd0 [0219.708] SetFilePointerEx (in: hFile=0x1e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1cfd978 | out: lpNewFilePointer=0x0) returned 1 [0219.708] GetLastError () returned 0xb7 [0219.708] CloseHandle (hObject=0x1e8) returned 1 [0219.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b60 | out: hHeap=0x1f0000) returned 1 [0219.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b50 | out: hHeap=0x1f0000) returned 1 [0219.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2851a0 | out: hHeap=0x1f0000) returned 1 [0219.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285098 | out: hHeap=0x1f0000) returned 1 [0219.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0219.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d70 | out: hHeap=0x1f0000) returned 1 [0219.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235838 | out: hHeap=0x1f0000) returned 1 [0219.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210090 | out: hHeap=0x1f0000) returned 1 [0219.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d70 | out: hHeap=0x1f0000) returned 1 [0219.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233698 | out: hHeap=0x1f0000) returned 1 [0219.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0219.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0219.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x251068 | out: hHeap=0x1f0000) returned 1 [0219.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233350 | out: hHeap=0x1f0000) returned 1 [0219.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0219.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b30 | out: hHeap=0x1f0000) returned 1 [0219.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210000 | out: hHeap=0x1f0000) returned 1 [0219.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0219.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ab0 | out: hHeap=0x1f0000) returned 1 [0219.977] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffa0 | out: hHeap=0x1f0000) returned 1 [0219.977] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0219.977] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b40 | out: hHeap=0x1f0000) returned 1 [0219.977] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x284f90 | out: hHeap=0x1f0000) returned 1 [0219.977] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238438 | out: hHeap=0x1f0000) returned 1 [0219.977] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235d80 | out: hHeap=0x1f0000) returned 1 [0219.977] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234500 | out: hHeap=0x1f0000) returned 1 [0219.977] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0219.977] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0219.977] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234860 | out: hHeap=0x1f0000) returned 1 [0219.977] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ad0 | out: hHeap=0x1f0000) returned 1 [0219.977] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b20 | out: hHeap=0x1f0000) returned 1 [0219.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28cfc8 | out: hHeap=0x1f0000) returned 1 [0219.978] CloseHandle (hObject=0x1c0) returned 1 [0219.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a80 | out: hHeap=0x1f0000) returned 1 [0219.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b00 | out: hHeap=0x1f0000) returned 1 [0219.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223ee0 | out: hHeap=0x1f0000) returned 1 [0219.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x249db0 | out: hHeap=0x1f0000) returned 1 [0219.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffd0 | out: hHeap=0x1f0000) returned 1 [0219.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cf0 | out: hHeap=0x1f0000) returned 1 [0219.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x287fa0 | out: hHeap=0x1f0000) returned 1 [0219.991] CloseHandle (hObject=0x1bc) returned 1 [0219.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238af0 | out: hHeap=0x1f0000) returned 1 [0219.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238aa0 | out: hHeap=0x1f0000) returned 1 [0219.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261668 | out: hHeap=0x1f0000) returned 1 [0219.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c70 | out: hHeap=0x1f0000) returned 1 [0219.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d368 | out: hHeap=0x1f0000) returned 1 [0219.992] CloseHandle (hObject=0x1b0) returned 1 [0219.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a00 | out: hHeap=0x1f0000) returned 1 [0219.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a90 | out: hHeap=0x1f0000) returned 1 [0219.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261388 | out: hHeap=0x1f0000) returned 1 [0219.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389f0 | out: hHeap=0x1f0000) returned 1 [0219.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389e0 | out: hHeap=0x1f0000) returned 1 [0219.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ae0 | out: hHeap=0x1f0000) returned 1 [0219.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ba0 | out: hHeap=0x1f0000) returned 1 [0219.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0219.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2595a0 | out: hHeap=0x1f0000) returned 1 [0219.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2337b0 | out: hHeap=0x1f0000) returned 1 [0219.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206808 | out: hHeap=0x1f0000) returned 1 [0219.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff28 | out: hHeap=0x1f0000) returned 1 [0219.994] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffb8 | out: hHeap=0x1f0000) returned 1 [0219.994] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2377b0 | out: hHeap=0x1f0000) returned 1 [0219.994] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24fd60 | out: hHeap=0x1f0000) returned 1 [0219.994] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2339e0 | out: hHeap=0x1f0000) returned 1 [0219.994] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf70 | out: hHeap=0x1f0000) returned 1 [0219.994] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0219.994] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262e48 | out: hHeap=0x1f0000) returned 1 [0219.994] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233df8 | out: hHeap=0x1f0000) returned 1 [0219.994] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0219.995] DeleteFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\mlib_image.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\mlib_image.dll")) returned 1 [0219.996] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xa12a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcp120.dll", cAlternateFileName="")) returned 1 [0219.996] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0219.996] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235d80 [0219.996] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221838 [0219.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235d80 | out: hHeap=0x1f0000) returned 1 [0219.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0219.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0219.997] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcp120.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcp120.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0219.998] GetFileType (hFile=0x1b0) returned 0x1 [0219.998] CloseHandle (hObject=0x1b0) returned 1 [0219.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0219.999] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcp120.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcp120.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xa12a0)) returned 1 [0219.999] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0219.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd88 [0219.999] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcp120.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcp120.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xa12a0)) returned 1 [0219.999] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd88 | out: hHeap=0x1f0000) returned 1 [0219.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fc98 [0220.000] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fc98 | out: hHeap=0x1f0000) returned 1 [0220.000] GetLastError () returned 0x0 [0220.000] CryptAcquireContextA (in: phProv=0x1cfdaf0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1cfdaf0*=0x212d78) returned 1 [0220.001] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238208 | out: pbBuffer=0x238208) returned 1 [0220.001] CryptReleaseContext (hProv=0x212d78, dwFlags=0x0) returned 1 [0220.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0220.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x24fd60 [0220.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x232cc0 [0220.001] QueryPerformanceCounter (in: lpPerformanceCount=0x1cfda84 | out: lpPerformanceCount=0x1cfda84*=37737034236) returned 1 [0220.002] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1cfdac4 | out: lpSystemTimeAsFileTime=0x1cfdac4) [0220.002] QueryPerformanceCounter (in: lpPerformanceCount=0x1cfda84 | out: lpPerformanceCount=0x1cfda84*=37737076481) returned 1 [0220.002] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1cfdac4 | out: lpSystemTimeAsFileTime=0x1cfdac4) [0220.002] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238fd8 [0220.002] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x2595a0 [0220.002] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2339e0 [0220.002] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x237880 [0220.003] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20fef8 [0220.003] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2067d8 [0220.003] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff28 [0220.003] GetLastError () returned 0x0 [0220.003] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcp120.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcp120.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfd990, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0220.004] GetFileType (hFile=0x1b0) returned 0x1 [0220.004] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a80 [0220.005] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b60 [0220.006] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcp120.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcp120.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfd9c0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1bc [0220.006] GetFileType (hFile=0x1bc) returned 0x1 [0220.007] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e70 [0220.007] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e90 [0220.007] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261668 [0220.007] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a40 [0220.008] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389f0 [0220.008] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcp120.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcp120.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfd90c, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0220.009] GetFileType (hFile=0x1c0) returned 0x1 [0220.009] GetLastError () returned 0xb7 [0220.009] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcp120.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcp120.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfd90c, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0220.010] GetFileType (hFile=0x22c) returned 0x1 [0220.010] GetLastError () returned 0xb7 [0220.010] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcp120.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcp120.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfd904, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0220.010] GetFileType (hFile=0x21c) returned 0x1 [0220.011] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28cfc8 [0220.011] ReadFile (in: hFile=0x21c, lpBuffer=0x28cfc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1cfd860, lpOverlapped=0x0 | out: lpBuffer=0x28cfc8*, lpNumberOfBytesRead=0x1cfd860*=0x1000, lpOverlapped=0x0) returned 1 [0220.319] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24b9e8 [0220.320] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x298020 [0220.320] GetLastError () returned 0x0 [0220.641] CloseHandle (hObject=0x1b0) returned 1 [0220.663] CloseHandle (hObject=0x1bc) returned 1 [0220.663] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387e0 [0220.959] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b90 [0221.042] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcp120.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcp120.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfd9c0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0221.052] GetFileType (hFile=0x1f4) returned 0x1 [0221.052] GetLastError () returned 0xb7 [0221.054] CloseHandle (hObject=0x1f4) returned 1 [0221.055] DeleteFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcp120.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcp120.dll")) returned 0 [0221.055] GetLastError () returned 0x20 [0221.055] GetLastError () returned 0x20 [0221.056] CryptAcquireContextA (in: phProv=0x1cfdaf0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1cfdaf0*=0x212e88) returned 1 [0221.056] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238140 | out: pbBuffer=0x238140) returned 1 [0221.057] CryptReleaseContext (hProv=0x212e88, dwFlags=0x0) returned 1 [0221.057] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0221.057] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2382a8 [0221.057] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238140 [0221.057] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238cc8 [0221.057] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0221.057] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0221.057] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238cc8 | out: hHeap=0x1f0000) returned 1 [0221.058] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8480 [0221.058] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210210 [0221.058] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x2361f8 [0221.058] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238208 [0221.058] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285098 [0221.058] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205170 [0221.058] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235a40 [0221.058] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2382a8 [0221.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2854b8 [0221.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238830 [0221.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0221.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210240 [0221.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238870 [0221.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0221.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210258 [0221.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0221.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0221.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238870 | out: hHeap=0x1f0000) returned 1 [0221.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210240 | out: hHeap=0x1f0000) returned 1 [0221.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0221.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238830 | out: hHeap=0x1f0000) returned 1 [0221.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2854b8 | out: hHeap=0x1f0000) returned 1 [0221.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0221.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235a40 | out: hHeap=0x1f0000) returned 1 [0221.060] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239208 [0221.060] GetLastError () returned 0x0 [0221.061] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1cfd680 | out: lpSystemTimeAsFileTime=0x1cfd680) [0221.061] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238990 [0221.061] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0221.061] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205290 [0221.061] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205290 | out: hHeap=0x1f0000) returned 1 [0221.061] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0221.062] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0221.062] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204fb0 [0221.062] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204fb0 | out: hHeap=0x1f0000) returned 1 [0221.062] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0221.062] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238990 | out: hHeap=0x1f0000) returned 1 [0221.062] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0221.062] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238c20 [0221.062] GetLastError () returned 0x0 [0221.063] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcp120.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcp120.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfd9f0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0221.063] GetFileType (hFile=0x1f4) returned 0x1 [0221.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28dfd0 [0221.064] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1cfd978 | out: lpNewFilePointer=0x0) returned 1 [0221.065] GetLastError () returned 0xb7 [0221.065] CloseHandle (hObject=0x1f4) returned 1 [0221.065] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238990 | out: hHeap=0x1f0000) returned 1 [0221.066] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389c0 | out: hHeap=0x1f0000) returned 1 [0221.066] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2853b0 | out: hHeap=0x1f0000) returned 1 [0221.066] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285098 | out: hHeap=0x1f0000) returned 1 [0221.066] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0221.066] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205170 | out: hHeap=0x1f0000) returned 1 [0221.066] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2361f8 | out: hHeap=0x1f0000) returned 1 [0221.066] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0221.066] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8480 | out: hHeap=0x1f0000) returned 1 [0221.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233468 | out: hHeap=0x1f0000) returned 1 [0221.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0221.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0221.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x252370 | out: hHeap=0x1f0000) returned 1 [0221.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233698 | out: hHeap=0x1f0000) returned 1 [0221.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239278 | out: hHeap=0x1f0000) returned 1 [0221.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a30 | out: hHeap=0x1f0000) returned 1 [0221.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2100a8 | out: hHeap=0x1f0000) returned 1 [0221.068] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0221.068] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238890 | out: hHeap=0x1f0000) returned 1 [0221.068] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210018 | out: hHeap=0x1f0000) returned 1 [0221.068] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0221.068] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a60 | out: hHeap=0x1f0000) returned 1 [0221.068] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x284f90 | out: hHeap=0x1f0000) returned 1 [0221.068] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0221.069] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235d80 | out: hHeap=0x1f0000) returned 1 [0221.069] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234500 | out: hHeap=0x1f0000) returned 1 [0221.069] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0221.069] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0221.069] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234860 | out: hHeap=0x1f0000) returned 1 [0221.069] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b90 | out: hHeap=0x1f0000) returned 1 [0221.069] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387e0 | out: hHeap=0x1f0000) returned 1 [0221.070] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28cfc8 | out: hHeap=0x1f0000) returned 1 [0221.070] CloseHandle (hObject=0x21c) returned 1 [0221.070] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ab0 | out: hHeap=0x1f0000) returned 1 [0221.070] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ac0 | out: hHeap=0x1f0000) returned 1 [0221.071] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2247e0 | out: hHeap=0x1f0000) returned 1 [0221.071] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24b9e8 | out: hHeap=0x1f0000) returned 1 [0221.071] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210078 | out: hHeap=0x1f0000) returned 1 [0221.071] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d90 | out: hHeap=0x1f0000) returned 1 [0221.071] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x298020 | out: hHeap=0x1f0000) returned 1 [0221.071] CloseHandle (hObject=0x22c) returned 1 [0221.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b00 | out: hHeap=0x1f0000) returned 1 [0221.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238af0 | out: hHeap=0x1f0000) returned 1 [0221.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261218 | out: hHeap=0x1f0000) returned 1 [0221.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ef0 | out: hHeap=0x1f0000) returned 1 [0221.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0221.073] CloseHandle (hObject=0x1c0) returned 1 [0221.073] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389f0 | out: hHeap=0x1f0000) returned 1 [0221.074] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a40 | out: hHeap=0x1f0000) returned 1 [0221.074] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261668 | out: hHeap=0x1f0000) returned 1 [0221.074] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b60 | out: hHeap=0x1f0000) returned 1 [0221.074] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a80 | out: hHeap=0x1f0000) returned 1 [0221.074] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ae0 | out: hHeap=0x1f0000) returned 1 [0221.074] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a00 | out: hHeap=0x1f0000) returned 1 [0221.074] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0221.075] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2595a0 | out: hHeap=0x1f0000) returned 1 [0221.075] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2339e0 | out: hHeap=0x1f0000) returned 1 [0221.075] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2067d8 | out: hHeap=0x1f0000) returned 1 [0221.075] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff28 | out: hHeap=0x1f0000) returned 1 [0221.075] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20fef8 | out: hHeap=0x1f0000) returned 1 [0221.075] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237880 | out: hHeap=0x1f0000) returned 1 [0221.076] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24fd60 | out: hHeap=0x1f0000) returned 1 [0221.076] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232cc0 | out: hHeap=0x1f0000) returned 1 [0221.076] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ef8 | out: hHeap=0x1f0000) returned 1 [0221.076] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0221.076] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263178 | out: hHeap=0x1f0000) returned 1 [0221.076] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233df8 | out: hHeap=0x1f0000) returned 1 [0221.076] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0221.076] DeleteFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcp120.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcp120.dll")) returned 1 [0221.078] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xca750, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr100.dll", cAlternateFileName="")) returned 1 [0221.078] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0221.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2361f8 [0221.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220cf0 [0221.079] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2361f8 | out: hHeap=0x1f0000) returned 1 [0221.079] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0221.079] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0221.080] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr100.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcr100.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0221.081] GetFileType (hFile=0x1c0) returned 0x1 [0221.081] CloseHandle (hObject=0x1c0) returned 1 [0221.082] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f7e8 [0221.082] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr100.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcr100.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xca750)) returned 1 [0221.082] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f7e8 | out: hHeap=0x1f0000) returned 1 [0221.082] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f7e8 [0221.082] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr100.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcr100.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xca750)) returned 1 [0221.083] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f7e8 | out: hHeap=0x1f0000) returned 1 [0221.083] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0221.083] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0221.083] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xeb2a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr120.dll", cAlternateFileName="")) returned 1 [0221.083] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0221.083] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235be0 [0221.083] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2218d0 [0221.084] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235be0 | out: hHeap=0x1f0000) returned 1 [0221.385] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0221.385] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0221.386] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr120.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcr120.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0221.386] GetFileType (hFile=0x1b0) returned 0x1 [0221.387] CloseHandle (hObject=0x1b0) returned 1 [0221.387] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0221.387] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr120.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcr120.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xeb2a0)) returned 1 [0221.388] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0221.388] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0221.388] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr120.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcr120.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xeb2a0)) returned 1 [0221.388] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0221.388] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f770 [0221.388] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f770 | out: hHeap=0x1f0000) returned 1 [0221.388] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x17a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="net.dll", cAlternateFileName="")) returned 1 [0221.388] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2358a0 [0221.389] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0221.389] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\net.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\net.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0221.390] GetFileType (hFile=0x1b0) returned 0x1 [0221.391] CloseHandle (hObject=0x1b0) returned 1 [0221.391] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236260 [0221.391] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\net.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\net.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x17a40)) returned 1 [0221.391] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236260 | out: hHeap=0x1f0000) returned 1 [0221.391] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235a40 [0221.391] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\net.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\net.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x17a40)) returned 1 [0221.392] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235a40 | out: hHeap=0x1f0000) returned 1 [0221.392] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235eb8 [0221.392] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235eb8 | out: hHeap=0x1f0000) returned 1 [0221.392] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xec40, dwReserved0=0x0, dwReserved1=0x0, cFileName="nio.dll", cAlternateFileName="")) returned 1 [0221.392] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235908 [0221.392] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2358a0 | out: hHeap=0x1f0000) returned 1 [0221.393] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\nio.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\nio.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0221.393] GetFileType (hFile=0x1b0) returned 0x1 [0221.393] CloseHandle (hObject=0x1b0) returned 1 [0221.394] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2358a0 [0221.394] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\nio.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\nio.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xec40)) returned 1 [0221.394] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2358a0 | out: hHeap=0x1f0000) returned 1 [0221.394] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2358a0 [0221.394] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\nio.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\nio.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xec40)) returned 1 [0221.394] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2358a0 | out: hHeap=0x1f0000) returned 1 [0221.394] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236260 [0221.394] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236260 | out: hHeap=0x1f0000) returned 1 [0221.395] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="npt.dll", cAlternateFileName="")) returned 1 [0221.395] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235b78 [0221.395] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235908 | out: hHeap=0x1f0000) returned 1 [0221.395] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\npt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\npt.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0221.396] GetFileType (hFile=0x1b0) returned 0x1 [0221.396] CloseHandle (hObject=0x1b0) returned 1 [0221.396] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235de8 [0221.398] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\npt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\npt.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4a40)) returned 1 [0221.398] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235de8 | out: hHeap=0x1f0000) returned 1 [0221.398] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235eb8 [0221.398] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\npt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\npt.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4a40)) returned 1 [0221.398] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235eb8 | out: hHeap=0x1f0000) returned 1 [0221.398] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235908 [0221.398] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235908 | out: hHeap=0x1f0000) returned 1 [0221.398] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="orbd.exe", cAlternateFileName="")) returned 1 [0221.398] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0221.398] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2360c0 [0221.399] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220eb8 [0221.399] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2360c0 | out: hHeap=0x1f0000) returned 1 [0221.399] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0221.399] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0221.399] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\orbd.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\orbd.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0221.400] GetFileType (hFile=0x1b0) returned 0x1 [0221.400] CloseHandle (hObject=0x1b0) returned 1 [0221.400] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0221.401] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\orbd.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\orbd.exe"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1 [0221.401] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0221.401] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0221.401] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\orbd.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\orbd.exe"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1 [0221.401] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0221.401] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0221.401] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0221.401] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="pack200.exe", cAlternateFileName="")) returned 1 [0221.401] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0221.401] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235b78 [0221.402] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220e20 [0221.402] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0221.402] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0221.402] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0221.402] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\pack200.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\pack200.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0221.402] GetFileType (hFile=0x1b0) returned 0x1 [0221.403] CloseHandle (hObject=0x1b0) returned 1 [0221.403] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220580 [0221.403] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\pack200.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\pack200.exe"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1 [0221.403] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220580 | out: hHeap=0x1f0000) returned 1 [0221.403] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220328 [0221.403] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\pack200.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\pack200.exe"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1 [0221.404] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220328 | out: hHeap=0x1f0000) returned 1 [0221.404] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220328 [0221.404] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220328 | out: hHeap=0x1f0000) returned 1 [0221.404] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2a2bf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin2", cAlternateFileName="")) returned 1 [0221.404] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235768 [0221.404] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0221.404] lstrcmpW (lpString1="plugin2", lpString2=".") returned 1 [0221.404] lstrcmpW (lpString1="plugin2", lpString2="..") returned 1 [0221.404] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238d38 [0221.404] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236128 [0221.404] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205210 | out: hHeap=0x1f0000) returned 1 [0221.404] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="policytool.exe", cAlternateFileName="POLICY~1.EXE")) returned 1 [0221.404] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0221.404] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235b78 [0221.404] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2217a0 [0221.404] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0221.405] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235768 | out: hHeap=0x1f0000) returned 1 [0221.405] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0221.405] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\policytool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\policytool.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0221.406] GetFileType (hFile=0x1b0) returned 0x1 [0221.406] CloseHandle (hObject=0x1b0) returned 1 [0221.406] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0221.406] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\policytool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\policytool.exe"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1 [0221.406] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0221.407] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2203a0 [0221.407] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\policytool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\policytool.exe"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1 [0221.407] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2203a0 | out: hHeap=0x1f0000) returned 1 [0221.407] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2201c0 [0221.407] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2201c0 | out: hHeap=0x1f0000) returned 1 [0221.407] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xe040, dwReserved0=0x0, dwReserved1=0x0, cFileName="prism_common.dll", cAlternateFileName="PRISM_~1.DLL")) returned 1 [0221.407] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239160 [0221.407] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236398 [0221.407] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221080 [0221.407] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236398 | out: hHeap=0x1f0000) returned 1 [0221.407] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0221.407] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239160 | out: hHeap=0x1f0000) returned 1 [0221.408] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_common.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_common.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0221.408] GetFileType (hFile=0x1b0) returned 0x1 [0221.408] CloseHandle (hObject=0x1b0) returned 1 [0221.408] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213680 [0221.408] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_common.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_common.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xe040)) returned 1 [0221.408] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213680 | out: hHeap=0x1f0000) returned 1 [0221.408] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0221.408] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_common.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_common.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xe040)) returned 1 [0221.409] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0221.409] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2132c8 [0221.409] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2132c8 | out: hHeap=0x1f0000) returned 1 [0221.409] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1fe40, dwReserved0=0x0, dwReserved1=0x0, cFileName="prism_d3d.dll", cAlternateFileName="PRISM_~2.DLL")) returned 1 [0221.410] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0221.410] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235be0 [0221.410] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2214a8 [0221.410] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235be0 | out: hHeap=0x1f0000) returned 1 [0221.410] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0221.410] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0221.410] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_d3d.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_d3d.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0221.411] GetFileType (hFile=0x1b0) returned 0x1 [0221.411] CloseHandle (hObject=0x1b0) returned 1 [0221.411] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0221.411] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_d3d.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_d3d.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1fe40)) returned 1 [0221.412] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0221.412] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0221.412] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_d3d.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_d3d.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1fe40)) returned 1 [0221.412] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0221.412] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220580 [0221.412] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220580 | out: hHeap=0x1f0000) returned 1 [0221.412] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x17e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="prism_sw.dll", cAlternateFileName="")) returned 1 [0221.412] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0221.413] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235de8 [0221.413] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220cf0 [0221.413] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235de8 | out: hHeap=0x1f0000) returned 1 [0221.413] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0221.413] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0221.413] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_sw.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_sw.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0221.413] GetFileType (hFile=0x1b0) returned 0x1 [0221.414] CloseHandle (hObject=0x1b0) returned 1 [0221.414] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f770 [0221.414] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_sw.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_sw.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x17e40)) returned 1 [0221.414] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f770 | out: hHeap=0x1f0000) returned 1 [0221.414] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220508 [0221.414] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_sw.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_sw.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x17e40)) returned 1 [0221.414] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220508 | out: hHeap=0x1f0000) returned 1 [0221.415] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fc98 [0221.415] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fc98 | out: hHeap=0x1f0000) returned 1 [0221.415] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.dll", cAlternateFileName="")) returned 1 [0221.415] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0221.415] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235768 [0221.415] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221080 [0221.415] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235768 | out: hHeap=0x1f0000) returned 1 [0221.415] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0221.415] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0221.415] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\resource.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\resource.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0221.416] GetFileType (hFile=0x1b0) returned 0x1 [0221.416] CloseHandle (hObject=0x1b0) returned 1 [0221.416] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220328 [0221.416] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\resource.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\resource.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3c40)) returned 1 [0221.416] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220328 | out: hHeap=0x1f0000) returned 1 [0221.416] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0221.416] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\resource.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\resource.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3c40)) returned 1 [0221.416] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0221.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220580 [0221.417] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220580 | out: hHeap=0x1f0000) returned 1 [0221.417] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="rmid.exe", cAlternateFileName="")) returned 1 [0221.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0221.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235c48 [0221.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221118 [0221.417] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235c48 | out: hHeap=0x1f0000) returned 1 [0221.417] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0221.417] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0221.417] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\rmid.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\rmid.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0221.418] GetFileType (hFile=0x1b0) returned 0x1 [0221.418] CloseHandle (hObject=0x1b0) returned 1 [0221.418] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2201c0 [0221.418] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\rmid.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\rmid.exe"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e40)) returned 1 [0221.418] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2201c0 | out: hHeap=0x1f0000) returned 1 [0221.418] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fc98 [0221.418] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\rmid.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\rmid.exe"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e40)) returned 1 [0221.419] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fc98 | out: hHeap=0x1f0000) returned 1 [0221.419] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0221.419] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0221.419] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8af971e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="rmiregistry.exe", cAlternateFileName="RMIREG~1.EXE")) returned 1 [0221.419] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238438 [0221.419] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235700 [0221.419] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220fe8 [0221.419] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0221.419] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0221.419] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238438 | out: hHeap=0x1f0000) returned 1 [0221.420] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\rmiregistry.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\rmiregistry.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0221.709] GetFileType (hFile=0x1b0) returned 0x1 [0221.709] CloseHandle (hObject=0x1b0) returned 1 [0221.710] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0221.710] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\rmiregistry.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\rmiregistry.exe"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8af971e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1 [0221.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0221.710] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0221.711] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\rmiregistry.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\rmiregistry.exe"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8af971e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1 [0221.711] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0221.711] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0221.711] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0221.711] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8af971e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2b6c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xab35b530, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="server", cAlternateFileName="")) returned 1 [0221.711] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235be0 [0221.711] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0221.712] lstrcmpW (lpString1="server", lpString2=".") returned 1 [0221.712] lstrcmpW (lpString1="server", lpString2="..") returned 1 [0221.712] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x48) returned 0x225ce8 [0221.712] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236398 [0221.712] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238d38 | out: hHeap=0x1f0000) returned 1 [0221.712] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="servertool.exe", cAlternateFileName="SERVER~1.EXE")) returned 1 [0221.712] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0221.712] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235eb8 [0221.713] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220eb8 [0221.713] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235eb8 | out: hHeap=0x1f0000) returned 1 [0221.713] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235be0 | out: hHeap=0x1f0000) returned 1 [0221.713] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0221.714] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\servertool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\servertool.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1a4 [0222.163] GetFileType (hFile=0x1a4) returned 0x1 [0222.164] CloseHandle (hObject=0x1a4) returned 1 [0222.164] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fc98 [0222.164] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\servertool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\servertool.exe"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1 [0222.164] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fc98 | out: hHeap=0x1f0000) returned 1 [0222.164] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0222.164] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\servertool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\servertool.exe"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1 [0222.164] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0222.164] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0222.165] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0222.165] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x32040, dwReserved0=0x0, dwReserved1=0x0, cFileName="splashscreen.dll", cAlternateFileName="SPLASH~1.DLL")) returned 1 [0222.165] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238d70 [0222.165] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235c48 [0222.165] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221a98 [0222.165] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235c48 | out: hHeap=0x1f0000) returned 1 [0222.165] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0222.165] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238d70 | out: hHeap=0x1f0000) returned 1 [0222.165] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\splashscreen.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\splashscreen.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1a4 [0222.166] GetFileType (hFile=0x1a4) returned 0x1 [0222.166] CloseHandle (hObject=0x1a4) returned 1 [0222.166] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211e98 [0222.166] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\splashscreen.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\splashscreen.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x32040)) returned 1 [0222.167] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e98 | out: hHeap=0x1f0000) returned 1 [0222.167] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2129c0 [0222.167] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\splashscreen.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\splashscreen.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x32040)) returned 1 [0222.167] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2129c0 | out: hHeap=0x1f0000) returned 1 [0222.167] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0222.167] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0222.167] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8ba40, dwReserved0=0x0, dwReserved1=0x0, cFileName="ssv.dll", cAlternateFileName="")) returned 1 [0222.167] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235b78 [0222.167] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0222.168] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\ssv.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ssv.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1a4 [0222.168] GetFileType (hFile=0x1a4) returned 0x1 [0222.168] CloseHandle (hObject=0x1a4) returned 1 [0222.168] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236330 [0222.168] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\ssv.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ssv.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8ba40)) returned 1 [0222.168] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236330 | out: hHeap=0x1f0000) returned 1 [0222.168] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236260 [0222.168] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\ssv.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ssv.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8ba40)) returned 1 [0222.169] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236260 | out: hHeap=0x1f0000) returned 1 [0222.169] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235c48 [0222.169] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235c48 | out: hHeap=0x1f0000) returned 1 [0222.169] GetLastError () returned 0x0 [0222.169] CryptAcquireContextA (in: phProv=0x1cfdaf0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1cfdaf0*=0x212690) returned 1 [0222.170] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238410 | out: pbBuffer=0x238410) returned 1 [0222.170] CryptReleaseContext (hProv=0x212690, dwFlags=0x0) returned 1 [0222.170] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0222.170] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x252370 [0222.170] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2373b0 [0222.170] QueryPerformanceCounter (in: lpPerformanceCount=0x1cfda84 | out: lpPerformanceCount=0x1cfda84*=37953935264) returned 1 [0222.171] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1cfdac4 | out: lpSystemTimeAsFileTime=0x1cfdac4) [0222.171] QueryPerformanceCounter (in: lpPerformanceCount=0x1cfda84 | out: lpPerformanceCount=0x1cfda84*=37953960503) returned 1 [0222.171] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1cfdac4 | out: lpSystemTimeAsFileTime=0x1cfdac4) [0222.171] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238de0 [0222.171] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x258298 [0222.171] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2376f8 [0222.171] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x2338a8 [0222.171] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffd0 [0222.171] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206808 [0222.171] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffa0 [0222.171] GetLastError () returned 0x0 [0222.172] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\ssv.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ssv.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfd990, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1a4 [0222.172] GetFileType (hFile=0x1a4) returned 0x1 [0222.172] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ad0 [0222.173] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389f0 [0222.173] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\ssv.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ssv.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfd9c0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0222.173] GetFileType (hFile=0x1ac) returned 0x1 [0222.174] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f10 [0222.174] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d90 [0222.174] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2615b0 [0222.174] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238aa0 [0222.174] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b40 [0222.175] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\ssv.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ssv.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfd90c, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0222.175] GetFileType (hFile=0x22c) returned 0x1 [0222.175] GetLastError () returned 0xb7 [0222.176] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\ssv.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ssv.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfd90c, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0222.176] GetFileType (hFile=0x1c0) returned 0x1 [0222.176] GetLastError () returned 0xb7 [0222.176] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\ssv.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ssv.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfd904, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0222.176] GetFileType (hFile=0x1f4) returned 0x1 [0222.177] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28cfc8 [0222.177] ReadFile (in: hFile=0x1f4, lpBuffer=0x28cfc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1cfd860, lpOverlapped=0x0 | out: lpBuffer=0x28cfc8*, lpNumberOfBytesRead=0x1cfd860*=0x1000, lpOverlapped=0x0) returned 1 [0222.181] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24a5c0 [0222.183] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28dfd0 [0222.183] GetLastError () returned 0x0 [0222.622] CloseHandle (hObject=0x1a4) returned 1 [0222.644] CloseHandle (hObject=0x1ac) returned 1 [0222.897] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238940 [0222.898] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388d0 [0222.899] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\ssv.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ssv.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfd9c0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1a4 [0222.905] GetFileType (hFile=0x1a4) returned 0x1 [0222.905] GetLastError () returned 0xb7 [0222.907] CloseHandle (hObject=0x1a4) returned 1 [0222.907] DeleteFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\ssv.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ssv.dll")) returned 0 [0222.907] GetLastError () returned 0x20 [0222.907] GetLastError () returned 0x20 [0222.908] CryptAcquireContextA (in: phProv=0x1cfdaf0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1cfdaf0*=0x211fa8) returned 1 [0222.908] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238230 | out: pbBuffer=0x238230) returned 1 [0222.908] CryptReleaseContext (hProv=0x211fa8, dwFlags=0x0) returned 1 [0222.908] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0222.909] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238230 [0222.909] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2382d0 [0222.909] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238f68 [0222.909] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0222.909] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0222.909] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238f68 | out: hHeap=0x1f0000) returned 1 [0222.909] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a87f0 [0222.909] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0222.909] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x235be0 [0222.909] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238230 [0222.909] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285bf0 [0222.910] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e30 [0222.910] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235c48 [0222.910] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238640 [0222.910] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2858d8 [0222.910] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238900 [0222.910] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238668 [0222.910] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210258 [0222.910] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238960 [0222.910] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238550 [0222.910] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0222.910] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0222.910] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238550 | out: hHeap=0x1f0000) returned 1 [0222.910] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238960 | out: hHeap=0x1f0000) returned 1 [0222.910] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0222.910] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238668 | out: hHeap=0x1f0000) returned 1 [0222.911] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238900 | out: hHeap=0x1f0000) returned 1 [0222.911] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2858d8 | out: hHeap=0x1f0000) returned 1 [0222.911] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238640 | out: hHeap=0x1f0000) returned 1 [0222.911] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235c48 | out: hHeap=0x1f0000) returned 1 [0222.911] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238f68 [0222.911] GetLastError () returned 0x0 [0222.912] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1cfd680 | out: lpSystemTimeAsFileTime=0x1cfd680) [0222.912] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238860 [0222.912] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238640 [0222.912] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f10 [0222.912] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f10 | out: hHeap=0x1f0000) returned 1 [0222.912] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238640 | out: hHeap=0x1f0000) returned 1 [0222.912] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238640 [0222.912] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204db0 [0222.912] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204db0 | out: hHeap=0x1f0000) returned 1 [0222.913] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238640 | out: hHeap=0x1f0000) returned 1 [0222.913] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238860 | out: hHeap=0x1f0000) returned 1 [0222.913] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0222.913] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238c20 [0222.913] GetLastError () returned 0x0 [0222.913] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\ssv.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ssv.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfd9f0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1a4 [0222.913] GetFileType (hFile=0x1a4) returned 0x1 [0222.914] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x299028 [0222.914] SetFilePointerEx (in: hFile=0x1a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1cfd978 | out: lpNewFilePointer=0x0) returned 1 [0222.915] GetLastError () returned 0xb7 [0222.915] CloseHandle (hObject=0x1a4) returned 1 [0222.915] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238950 | out: hHeap=0x1f0000) returned 1 [0222.915] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238880 | out: hHeap=0x1f0000) returned 1 [0222.915] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285e00 | out: hHeap=0x1f0000) returned 1 [0222.916] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285bf0 | out: hHeap=0x1f0000) returned 1 [0222.916] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0222.916] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e30 | out: hHeap=0x1f0000) returned 1 [0222.916] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235be0 | out: hHeap=0x1f0000) returned 1 [0222.916] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0222.916] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a87f0 | out: hHeap=0x1f0000) returned 1 [0222.916] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237298 | out: hHeap=0x1f0000) returned 1 [0222.916] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0222.916] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0222.916] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2595a0 | out: hHeap=0x1f0000) returned 1 [0222.916] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237180 | out: hHeap=0x1f0000) returned 1 [0222.917] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238d00 | out: hHeap=0x1f0000) returned 1 [0222.917] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387f0 | out: hHeap=0x1f0000) returned 1 [0222.917] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2100a8 | out: hHeap=0x1f0000) returned 1 [0222.917] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0222.917] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238990 | out: hHeap=0x1f0000) returned 1 [0222.917] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210078 | out: hHeap=0x1f0000) returned 1 [0222.917] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0222.917] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238850 | out: hHeap=0x1f0000) returned 1 [0222.917] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285cf8 | out: hHeap=0x1f0000) returned 1 [0222.917] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238618 | out: hHeap=0x1f0000) returned 1 [0222.917] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235768 | out: hHeap=0x1f0000) returned 1 [0222.917] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234590 | out: hHeap=0x1f0000) returned 1 [0222.918] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0222.918] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0222.918] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234aa0 | out: hHeap=0x1f0000) returned 1 [0222.918] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388d0 | out: hHeap=0x1f0000) returned 1 [0222.918] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238940 | out: hHeap=0x1f0000) returned 1 [0222.918] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28cfc8 | out: hHeap=0x1f0000) returned 1 [0222.918] CloseHandle (hObject=0x1f4) returned 1 [0222.919] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ae0 | out: hHeap=0x1f0000) returned 1 [0222.919] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ba0 | out: hHeap=0x1f0000) returned 1 [0222.919] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2247e0 | out: hHeap=0x1f0000) returned 1 [0222.919] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24a5c0 | out: hHeap=0x1f0000) returned 1 [0222.919] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210240 | out: hHeap=0x1f0000) returned 1 [0222.919] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c10 | out: hHeap=0x1f0000) returned 1 [0222.919] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28dfd0 | out: hHeap=0x1f0000) returned 1 [0222.919] CloseHandle (hObject=0x1c0) returned 1 [0222.920] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238af0 | out: hHeap=0x1f0000) returned 1 [0222.920] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b90 | out: hHeap=0x1f0000) returned 1 [0222.920] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261218 | out: hHeap=0x1f0000) returned 1 [0222.920] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204b90 | out: hHeap=0x1f0000) returned 1 [0222.920] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d368 | out: hHeap=0x1f0000) returned 1 [0222.920] CloseHandle (hObject=0x22c) returned 1 [0222.921] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b40 | out: hHeap=0x1f0000) returned 1 [0222.921] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238aa0 | out: hHeap=0x1f0000) returned 1 [0222.921] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2615b0 | out: hHeap=0x1f0000) returned 1 [0222.921] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389f0 | out: hHeap=0x1f0000) returned 1 [0222.921] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ad0 | out: hHeap=0x1f0000) returned 1 [0222.921] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a40 | out: hHeap=0x1f0000) returned 1 [0222.921] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b30 | out: hHeap=0x1f0000) returned 1 [0222.921] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236f50 | out: hHeap=0x1f0000) returned 1 [0222.921] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x258298 | out: hHeap=0x1f0000) returned 1 [0222.922] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2376f8 | out: hHeap=0x1f0000) returned 1 [0222.922] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206808 | out: hHeap=0x1f0000) returned 1 [0222.922] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffa0 | out: hHeap=0x1f0000) returned 1 [0222.922] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffd0 | out: hHeap=0x1f0000) returned 1 [0222.922] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2338a8 | out: hHeap=0x1f0000) returned 1 [0222.922] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x252370 | out: hHeap=0x1f0000) returned 1 [0222.922] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2373b0 | out: hHeap=0x1f0000) returned 1 [0222.922] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238cc8 | out: hHeap=0x1f0000) returned 1 [0222.922] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235838 | out: hHeap=0x1f0000) returned 1 [0222.922] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263178 | out: hHeap=0x1f0000) returned 1 [0222.923] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234ae8 | out: hHeap=0x1f0000) returned 1 [0222.923] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0222.923] DeleteFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\ssv.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ssv.dll")) returned 1 [0222.924] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x11240, dwReserved0=0x0, dwReserved1=0x0, cFileName="ssvagent.exe", cAlternateFileName="")) returned 1 [0222.924] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0222.924] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235be0 [0222.924] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220eb8 [0222.924] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235be0 | out: hHeap=0x1f0000) returned 1 [0222.924] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0222.925] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0222.925] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\ssvagent.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ssvagent.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0222.925] GetFileType (hFile=0x22c) returned 0x1 [0222.926] CloseHandle (hObject=0x22c) returned 1 [0222.926] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0222.926] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\ssvagent.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ssvagent.exe"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x11240)) returned 1 [0222.926] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0222.926] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2201c0 [0222.926] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\ssvagent.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ssvagent.exe"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x11240)) returned 1 [0222.926] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2201c0 | out: hHeap=0x1f0000) returned 1 [0222.927] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0222.927] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0222.927] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x21240, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunec.dll", cAlternateFileName="")) returned 1 [0222.927] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0222.927] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236330 [0222.927] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220f50 [0222.927] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236330 | out: hHeap=0x1f0000) returned 1 [0222.927] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0222.927] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0222.927] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\sunec.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\sunec.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0222.927] GetFileType (hFile=0x22c) returned 0x1 [0222.928] CloseHandle (hObject=0x22c) returned 1 [0222.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220508 [0222.928] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\sunec.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\sunec.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x21240)) returned 1 [0222.928] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220508 | out: hHeap=0x1f0000) returned 1 [0222.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fc98 [0222.928] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\sunec.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\sunec.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x21240)) returned 1 [0222.928] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fc98 | out: hHeap=0x1f0000) returned 1 [0222.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220328 [0222.928] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220328 | out: hHeap=0x1f0000) returned 1 [0222.928] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunmscapi.dll", cAlternateFileName="SUNMSC~1.DLL")) returned 1 [0222.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0222.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235b78 [0222.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220eb8 [0222.928] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0222.929] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0222.929] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0222.929] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\sunmscapi.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\sunmscapi.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0222.929] GetFileType (hFile=0x22c) returned 0x1 [0222.929] CloseHandle (hObject=0x22c) returned 1 [0222.930] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fc98 [0222.930] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\sunmscapi.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\sunmscapi.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7c40)) returned 1 [0222.930] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fc98 | out: hHeap=0x1f0000) returned 1 [0222.930] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0222.930] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\sunmscapi.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\sunmscapi.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7c40)) returned 1 [0222.930] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0222.930] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f770 [0222.930] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f770 | out: hHeap=0x1f0000) returned 1 [0222.931] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e440, dwReserved0=0x0, dwReserved1=0x0, cFileName="t2k.dll", cAlternateFileName="")) returned 1 [0222.931] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235b78 [0222.931] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0222.931] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\t2k.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\t2k.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0222.931] GetFileType (hFile=0x22c) returned 0x1 [0222.932] CloseHandle (hObject=0x22c) returned 1 [0222.932] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235c48 [0222.932] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\t2k.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\t2k.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e440)) returned 1 [0222.932] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235c48 | out: hHeap=0x1f0000) returned 1 [0222.932] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235768 [0222.932] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\t2k.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\t2k.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e440)) returned 1 [0222.932] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235768 | out: hHeap=0x1f0000) returned 1 [0222.933] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235de8 [0222.933] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235de8 | out: hHeap=0x1f0000) returned 1 [0222.933] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="tnameserv.exe", cAlternateFileName="TNAMES~1.EXE")) returned 1 [0222.933] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0222.933] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235838 [0222.933] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2215d8 [0222.933] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235838 | out: hHeap=0x1f0000) returned 1 [0222.933] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0222.933] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0222.934] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\tnameserv.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\tnameserv.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0222.934] GetFileType (hFile=0x22c) returned 0x1 [0222.934] CloseHandle (hObject=0x22c) returned 1 [0222.935] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0222.935] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\tnameserv.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\tnameserv.exe"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1 [0222.935] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0222.935] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fc98 [0222.935] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\tnameserv.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\tnameserv.exe"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1 [0222.935] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fc98 | out: hHeap=0x1f0000) returned 1 [0222.935] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220508 [0222.936] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220508 | out: hHeap=0x1f0000) returned 1 [0222.936] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13840, dwReserved0=0x0, dwReserved1=0x0, cFileName="unpack.dll", cAlternateFileName="")) returned 1 [0222.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0222.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235768 [0222.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2214a8 [0222.936] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235768 | out: hHeap=0x1f0000) returned 1 [0222.936] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0222.936] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0222.937] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\unpack.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0222.937] GetFileType (hFile=0x22c) returned 0x1 [0222.938] CloseHandle (hObject=0x22c) returned 1 [0223.153] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0223.154] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\unpack.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13840)) returned 1 [0223.154] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0223.154] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0223.154] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\unpack.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13840)) returned 1 [0223.154] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0223.154] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0223.154] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0223.154] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x30240, dwReserved0=0x0, dwReserved1=0x0, cFileName="unpack200.exe", cAlternateFileName="UNPACK~1.EXE")) returned 1 [0223.154] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0223.154] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235be0 [0223.157] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221708 [0223.157] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235be0 | out: hHeap=0x1f0000) returned 1 [0223.157] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0223.158] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0223.159] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack200.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\unpack200.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0223.159] GetFileType (hFile=0x22c) returned 0x1 [0223.159] CloseHandle (hObject=0x22c) returned 1 [0223.160] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd88 [0223.160] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack200.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\unpack200.exe"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x30240)) returned 1 [0223.160] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd88 | out: hHeap=0x1f0000) returned 1 [0223.160] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fab8 [0223.160] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack200.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\unpack200.exe"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x30240)) returned 1 [0223.160] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fab8 | out: hHeap=0x1f0000) returned 1 [0223.160] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0223.160] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0223.160] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc040, dwReserved0=0x0, dwReserved1=0x0, cFileName="verify.dll", cAlternateFileName="")) returned 1 [0223.160] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0223.161] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2360c0 [0223.161] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221080 [0223.161] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2360c0 | out: hHeap=0x1f0000) returned 1 [0223.161] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0223.161] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0223.161] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\verify.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\verify.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0223.162] GetFileType (hFile=0x22c) returned 0x1 [0223.162] CloseHandle (hObject=0x22c) returned 1 [0223.162] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f7e8 [0223.162] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\verify.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\verify.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc040)) returned 1 [0223.163] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f7e8 | out: hHeap=0x1f0000) returned 1 [0223.163] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220508 [0223.163] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\verify.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\verify.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc040)) returned 1 [0223.163] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220508 | out: hHeap=0x1f0000) returned 1 [0223.163] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220508 [0223.163] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220508 | out: hHeap=0x1f0000) returned 1 [0223.163] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="w2k_lsa_auth.dll", cAlternateFileName="W2K_LS~1.DLL")) returned 1 [0223.163] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238ef8 [0223.164] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236058 [0223.164] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220d88 [0223.164] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236058 | out: hHeap=0x1f0000) returned 1 [0223.164] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0223.164] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ef8 | out: hHeap=0x1f0000) returned 1 [0223.164] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\w2k_lsa_auth.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\w2k_lsa_auth.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0223.165] GetFileType (hFile=0x22c) returned 0x1 [0223.165] CloseHandle (hObject=0x22c) returned 1 [0223.165] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211bf0 [0223.166] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\w2k_lsa_auth.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\w2k_lsa_auth.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5e40)) returned 1 [0223.166] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211bf0 | out: hHeap=0x1f0000) returned 1 [0223.166] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2129c0 [0223.166] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\w2k_lsa_auth.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\w2k_lsa_auth.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5e40)) returned 1 [0223.166] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2129c0 | out: hHeap=0x1f0000) returned 1 [0223.166] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d00 [0223.166] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d00 | out: hHeap=0x1f0000) returned 1 [0223.167] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1ae40, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsAccessBridge-64.dll", cAlternateFileName="WINDOW~1.DLL")) returned 1 [0223.167] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2285a8 [0223.167] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235f20 [0223.167] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0223.167] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235f20 | out: hHeap=0x1f0000) returned 1 [0223.167] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0223.167] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2285a8 | out: hHeap=0x1f0000) returned 1 [0223.168] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\WindowsAccessBridge-64.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\windowsaccessbridge-64.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0223.168] GetFileType (hFile=0x22c) returned 0x1 [0223.168] CloseHandle (hObject=0x22c) returned 1 [0223.169] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0223.169] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\WindowsAccessBridge-64.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\windowsaccessbridge-64.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1ae40)) returned 1 [0223.169] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0223.169] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0223.169] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\WindowsAccessBridge-64.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\windowsaccessbridge-64.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1ae40)) returned 1 [0223.169] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0223.170] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0223.170] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0223.170] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2f040, dwReserved0=0x0, dwReserved1=0x0, cFileName="wsdetect.dll", cAlternateFileName="")) returned 1 [0223.170] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0223.170] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236058 [0223.170] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2217a0 [0223.170] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236058 | out: hHeap=0x1f0000) returned 1 [0223.170] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0223.170] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0223.171] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\wsdetect.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\wsdetect.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0223.171] GetFileType (hFile=0x22c) returned 0x1 [0223.171] CloseHandle (hObject=0x22c) returned 1 [0223.172] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220508 [0223.172] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\wsdetect.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\wsdetect.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2f040)) returned 1 [0223.172] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220508 | out: hHeap=0x1f0000) returned 1 [0223.172] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0223.172] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\wsdetect.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\wsdetect.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2f040)) returned 1 [0223.173] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0223.173] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0223.173] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0223.173] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13040, dwReserved0=0x0, dwReserved1=0x0, cFileName="zip.dll", cAlternateFileName="")) returned 1 [0223.173] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236330 [0223.173] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0223.174] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\zip.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\zip.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0223.174] GetFileType (hFile=0x22c) returned 0x1 [0223.174] CloseHandle (hObject=0x22c) returned 1 [0223.175] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235b78 [0223.175] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\zip.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\zip.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13040)) returned 1 [0223.175] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0223.175] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235768 [0223.175] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\zip.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\zip.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13040)) returned 1 [0223.175] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235768 | out: hHeap=0x1f0000) returned 1 [0223.175] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235768 [0223.175] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235768 | out: hHeap=0x1f0000) returned 1 [0223.175] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13040, dwReserved0=0x0, dwReserved1=0x0, cFileName="zip.dll", cAlternateFileName="")) returned 0 [0223.504] FindClose (in: hFindFile=0x24e780 | out: hFindFile=0x24e780) returned 1 [0223.644] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2284d0 [0223.644] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0223.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d9d0 [0223.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fa40 [0223.652] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\*", lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xcec73804, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xcec73804, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ed00 [0223.654] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220508 [0223.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fa40 | out: hHeap=0x1f0000) returned 1 [0223.672] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0223.672] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xcec73804, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xcec73804, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0223.673] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0223.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220508 | out: hHeap=0x1f0000) returned 1 [0223.673] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0223.673] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0223.673] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xfa840, dwReserved0=0x0, dwReserved1=0x0, cFileName="deployJava1.dll", cAlternateFileName="DEPLOY~1.DLL")) returned 1 [0223.673] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0223.673] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220508 [0223.673] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218608 [0223.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220508 | out: hHeap=0x1f0000) returned 1 [0223.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0223.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0223.673] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\deployJava1.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\deployjava1.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0223.674] GetFileType (hFile=0x218) returned 0x1 [0223.674] CloseHandle (hObject=0x218) returned 1 [0223.674] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0223.674] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\deployJava1.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\deployjava1.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xfa840)) returned 1 [0223.674] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0223.674] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0223.674] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\deployJava1.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\deployjava1.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xfa840)) returned 1 [0223.674] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0223.675] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0223.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0223.675] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xcec73804, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x11a743, dwReserved0=0x0, dwReserved1=0x0, cFileName="npdeployJava1.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="NPDEPL~1.ODV")) returned 1 [0223.675] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2615b0 [0223.675] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0223.675] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x236e38 [0223.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0223.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218608 | out: hHeap=0x1f0000) returned 1 [0223.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2615b0 | out: hHeap=0x1f0000) returned 1 [0223.675] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\npdeployJava1.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\npdeployjava1.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0223.676] GetFileType (hFile=0x218) returned 0x1 [0223.676] CloseHandle (hObject=0x218) returned 1 [0223.676] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x2373b0 [0223.676] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\npdeployJava1.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\npdeployjava1.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xcec73804, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x11a743)) returned 1 [0223.676] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2373b0 | out: hHeap=0x1f0000) returned 1 [0223.676] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x237810 [0223.676] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\npdeployJava1.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\npdeployjava1.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xcec73804, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x11a743)) returned 1 [0223.676] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237810 | out: hHeap=0x1f0000) returned 1 [0223.676] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x237810 [0223.676] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237810 | out: hHeap=0x1f0000) returned 1 [0223.676] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xcec73804, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x11a743, dwReserved0=0x0, dwReserved1=0x0, cFileName="npdeployJava1.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="NPDEPL~1.ODV")) returned 0 [0223.677] FindClose (in: hFindFile=0x24ed00 | out: hFindFile=0x24ed00) returned 1 [0223.677] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236e38 | out: hHeap=0x1f0000) returned 1 [0223.677] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d9d0 | out: hHeap=0x1f0000) returned 1 [0223.677] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0223.677] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2284d0 | out: hHeap=0x1f0000) returned 1 [0223.677] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228a70 [0223.677] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0223.677] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e1c8 [0223.677] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0223.677] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\*", lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2a2bf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e980 [0223.678] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0223.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0223.678] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0223.678] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2a2bf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0223.678] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0223.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0223.678] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0223.678] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0223.678] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xca750, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr100.dll", cAlternateFileName="")) returned 1 [0223.678] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0223.678] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f7e8 [0223.678] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218608 [0223.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f7e8 | out: hHeap=0x1f0000) returned 1 [0223.679] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0223.679] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0223.679] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\msvcr100.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\plugin2\\msvcr100.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0223.679] GetFileType (hFile=0x218) returned 0x1 [0223.679] CloseHandle (hObject=0x218) returned 1 [0223.680] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212828 [0223.680] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\msvcr100.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\plugin2\\msvcr100.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xca750)) returned 1 [0223.680] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212828 | out: hHeap=0x1f0000) returned 1 [0223.680] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0223.680] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\msvcr100.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\plugin2\\msvcr100.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xca750)) returned 1 [0223.680] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0223.680] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2129c0 [0223.680] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2129c0 | out: hHeap=0x1f0000) returned 1 [0223.680] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39440, dwReserved0=0x0, dwReserved1=0x0, cFileName="npjp2.dll", cAlternateFileName="")) returned 1 [0223.680] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0223.680] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0223.680] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218a28 [0223.680] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0223.680] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218608 | out: hHeap=0x1f0000) returned 1 [0223.681] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0223.681] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\npjp2.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\plugin2\\npjp2.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0223.681] GetFileType (hFile=0x218) returned 0x1 [0223.681] CloseHandle (hObject=0x218) returned 1 [0223.681] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d88 [0223.682] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\npjp2.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\plugin2\\npjp2.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39440)) returned 1 [0223.682] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d88 | out: hHeap=0x1f0000) returned 1 [0223.682] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212828 [0223.682] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\npjp2.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\plugin2\\npjp2.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39440)) returned 1 [0223.682] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212828 | out: hHeap=0x1f0000) returned 1 [0223.682] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211bf0 [0223.682] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211bf0 | out: hHeap=0x1f0000) returned 1 [0223.682] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39440, dwReserved0=0x0, dwReserved1=0x0, cFileName="npjp2.dll", cAlternateFileName="")) returned 0 [0223.682] FindClose (in: hFindFile=0x24e980 | out: hFindFile=0x24e980) returned 1 [0223.683] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218a28 | out: hHeap=0x1f0000) returned 1 [0223.683] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e1c8 | out: hHeap=0x1f0000) returned 1 [0223.683] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0223.683] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228a70 | out: hHeap=0x1f0000) returned 1 [0223.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228c68 [0223.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0223.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d9d0 [0223.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220328 [0223.683] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\*", lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8af971e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2b6c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xab35b530, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24eb80 [0223.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235d80 [0223.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220eb8 [0223.683] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235d80 | out: hHeap=0x1f0000) returned 1 [0223.683] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220328 | out: hHeap=0x1f0000) returned 1 [0223.684] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0223.684] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8af971e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2b6c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xab35b530, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0223.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235aa8 [0223.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221a00 [0223.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235aa8 | out: hHeap=0x1f0000) returned 1 [0223.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0223.684] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0223.684] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0223.684] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xab35b530, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xab35b530, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xabaa88bc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x11d0000, dwReserved0=0x0, dwReserved1=0x0, cFileName="classes.jsa", cAlternateFileName="")) returned 1 [0223.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0223.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235768 [0223.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220fe8 [0223.685] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235768 | out: hHeap=0x1f0000) returned 1 [0223.685] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0223.685] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0223.685] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\classes.jsa" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\classes.jsa"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0223.685] GetLastError () returned 0x5 [0223.685] GetLastError () returned 0x5 [0223.686] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b1f9e6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b1f9e6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b1f9e6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x866c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="jvm.dll", cAlternateFileName="")) returned 1 [0223.686] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235d80 [0223.686] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2211b0 [0223.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235d80 | out: hHeap=0x1f0000) returned 1 [0223.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0223.686] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\jvm.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\jvm.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0223.687] GetFileType (hFile=0x218) returned 0x1 [0223.687] CloseHandle (hObject=0x218) returned 1 [0227.063] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0227.063] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\jvm.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\jvm.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b1f9e6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b1f9e6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xd0a6b53b, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x866d43)) returned 1 [0227.064] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0227.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fc98 [0227.064] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\jvm.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\jvm.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b1f9e6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b1f9e6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xd0a6b53b, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x866d43)) returned 1 [0227.064] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fc98 | out: hHeap=0x1f0000) returned 1 [0227.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fef0 [0227.064] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fef0 | out: hHeap=0x1f0000) returned 1 [0227.067] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b1f9e6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b1f9e6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b1f9e6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x58f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Xusage.txt", cAlternateFileName="")) returned 1 [0227.067] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0227.067] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236260 [0227.067] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220cf0 [0227.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236260 | out: hHeap=0x1f0000) returned 1 [0227.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0227.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0227.068] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\xusage.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0227.068] GetFileType (hFile=0x218) returned 0x1 [0227.069] CloseHandle (hObject=0x218) returned 1 [0227.069] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212c68 [0227.069] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\xusage.txt"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b1f9e6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b1f9e6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b1f9e6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x58f)) returned 1 [0227.070] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212c68 | out: hHeap=0x1f0000) returned 1 [0227.070] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212be0 [0227.070] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\xusage.txt"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b1f9e6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b1f9e6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b1f9e6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x58f)) returned 1 [0227.070] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212be0 | out: hHeap=0x1f0000) returned 1 [0227.070] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2132c8 [0227.070] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2132c8 | out: hHeap=0x1f0000) returned 1 [0227.071] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b1f9e6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b1f9e6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b1f9e6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x58f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Xusage.txt", cAlternateFileName="")) returned 0 [0227.071] FindClose (in: hFindFile=0x24eb80 | out: hFindFile=0x24eb80) returned 1 [0227.071] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0227.071] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d9d0 | out: hHeap=0x1f0000) returned 1 [0227.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0227.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228c68 | out: hHeap=0x1f0000) returned 1 [0227.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236330 | out: hHeap=0x1f0000) returned 1 [0227.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220058 | out: hHeap=0x1f0000) returned 1 [0227.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236128 | out: hHeap=0x1f0000) returned 1 [0227.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236398 | out: hHeap=0x1f0000) returned 1 [0227.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225ce8 | out: hHeap=0x1f0000) returned 1 [0227.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262320 | out: hHeap=0x1f0000) returned 1 [0227.073] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0227.073] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233d20 | out: hHeap=0x1f0000) returned 1 [0227.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2289e0 [0227.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0227.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e828 [0227.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236128 [0227.073] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\*", lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe1f09, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xaa80821a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e680 [0227.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236190 [0227.335] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236128 | out: hHeap=0x1f0000) returned 1 [0227.335] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0227.335] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe1f09, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xaa80821a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0227.336] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235aa8 [0227.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236190 | out: hHeap=0x1f0000) returned 1 [0227.336] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0227.336] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0227.336] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x95, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.properties", cAlternateFileName="ACCESS~1.PRO")) returned 1 [0227.336] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2286c8 [0227.336] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235b78 [0227.336] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0227.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0227.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235aa8 | out: hHeap=0x1f0000) returned 1 [0227.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2286c8 | out: hHeap=0x1f0000) returned 1 [0227.337] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\accessibility.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\accessibility.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1bc [0227.337] GetFileType (hFile=0x1bc) returned 0x1 [0227.337] CloseHandle (hObject=0x1bc) returned 1 [0227.338] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0227.338] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\accessibility.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\accessibility.properties"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x95)) returned 1 [0227.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0227.338] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0227.338] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\accessibility.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\accessibility.properties"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x95)) returned 1 [0227.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0227.338] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0227.338] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238488 [0227.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0227.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238488 | out: hHeap=0x1f0000) returned 1 [0227.338] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe451d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64", cAlternateFileName="")) returned 1 [0227.338] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235700 [0227.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0227.338] lstrcmpW (lpString1="amd64", lpString2=".") returned 1 [0227.339] lstrcmpW (lpString1="amd64", lpString2="..") returned 1 [0227.339] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204c70 [0227.339] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2358a0 [0227.339] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105ca28, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="applet", cAlternateFileName="")) returned 1 [0227.339] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2360c0 [0227.339] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0227.339] lstrcmpW (lpString1="applet", lpString2=".") returned 1 [0227.339] lstrcmpW (lpString1="applet", lpString2="..") returned 1 [0227.339] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238d38 [0227.339] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235aa8 [0227.339] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c70 | out: hHeap=0x1f0000) returned 1 [0227.339] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x562, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendars.properties", cAlternateFileName="CALEND~1.PRO")) returned 1 [0227.339] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238da8 [0227.339] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236398 [0227.339] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2215d8 [0227.340] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236398 | out: hHeap=0x1f0000) returned 1 [0227.340] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2360c0 | out: hHeap=0x1f0000) returned 1 [0227.340] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238da8 | out: hHeap=0x1f0000) returned 1 [0227.340] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\calendars.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\calendars.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1bc [0227.340] GetFileType (hFile=0x1bc) returned 0x1 [0227.341] CloseHandle (hObject=0x1bc) returned 1 [0227.341] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0227.341] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\calendars.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\calendars.properties"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x562)) returned 1 [0227.341] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0227.341] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0227.342] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\calendars.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\calendars.properties"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x562)) returned 1 [0227.342] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0227.342] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0227.342] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0227.342] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0227.342] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0227.342] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa7bbd53, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xaa7bbd53, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xaa80821a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2e56fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="charsets.jar", cAlternateFileName="")) returned 1 [0227.342] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0227.342] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235b78 [0227.342] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221a00 [0227.342] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0227.343] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0227.343] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0227.343] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\charsets.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\charsets.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1bc [0227.343] GetFileType (hFile=0x1bc) returned 0x1 [0227.344] CloseHandle (hObject=0x1bc) returned 1 [0228.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fa40 [0228.939] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\charsets.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\charsets.jar"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa7bbd53, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xaa7bbd53, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xd1b9affd, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x2e57fd)) returned 1 [0228.939] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fa40 | out: hHeap=0x1f0000) returned 1 [0228.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0228.939] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\charsets.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\charsets.jar"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa7bbd53, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xaa7bbd53, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xd1b9affd, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x2e57fd)) returned 1 [0228.939] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0228.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220328 [0228.940] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220328 | out: hHeap=0x1f0000) returned 1 [0228.940] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x14983, dwReserved0=0x0, dwReserved1=0x0, cFileName="classlist", cAlternateFileName="CLASSL~1")) returned 1 [0228.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0228.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235700 [0228.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2215d8 [0228.940] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0228.940] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0228.940] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0228.941] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\classlist" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\classlist"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1bc [0228.941] GetFileType (hFile=0x1bc) returned 0x1 [0228.942] CloseHandle (hObject=0x1bc) returned 1 [0228.997] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2201c0 [0228.998] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\classlist" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\classlist"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x14983)) returned 1 [0228.998] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2201c0 | out: hHeap=0x1f0000) returned 1 [0228.998] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0228.998] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\classlist" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\classlist"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x14983)) returned 1 [0228.998] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0228.998] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220328 [0228.998] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220328 | out: hHeap=0x1f0000) returned 1 [0228.999] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105e2a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cmm", cAlternateFileName="")) returned 1 [0228.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236058 [0228.999] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0228.999] lstrcmpW (lpString1="cmm", lpString2=".") returned 1 [0228.999] lstrcmpW (lpString1="cmm", lpString2="..") returned 1 [0228.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x48) returned 0x225d38 [0228.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236190 [0228.999] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238d38 | out: hHeap=0x1f0000) returned 1 [0228.999] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x15ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="content-types.properties", cAlternateFileName="CONTEN~1.PRO")) returned 1 [0228.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228b00 [0228.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235700 [0229.000] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0229.000] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0229.000] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236058 | out: hHeap=0x1f0000) returned 1 [0229.000] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228b00 | out: hHeap=0x1f0000) returned 1 [0229.000] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\content-types.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\content-types.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1bc [0229.001] GetFileType (hFile=0x1bc) returned 0x1 [0229.001] CloseHandle (hObject=0x1bc) returned 1 [0229.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0229.001] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\content-types.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\content-types.properties"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x15ac)) returned 1 [0229.002] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0229.002] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0229.002] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\content-types.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\content-types.properties"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x15ac)) returned 1 [0229.002] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0229.002] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0229.002] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0229.002] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0229.002] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0229.002] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x101a, dwReserved0=0x0, dwReserved1=0x0, cFileName="currency.data", cAlternateFileName="CURREN~1.DAT")) returned 1 [0229.003] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0229.003] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236058 [0229.003] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220d88 [0229.003] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236058 | out: hHeap=0x1f0000) returned 1 [0229.003] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0229.003] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0229.004] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\currency.data" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\currency.data"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1bc [0229.004] GetFileType (hFile=0x1bc) returned 0x1 [0229.004] CloseHandle (hObject=0x1bc) returned 1 [0229.005] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0229.005] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\currency.data" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\currency.data"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x101a)) returned 1 [0229.005] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0229.005] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2201c0 [0229.005] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\currency.data" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\currency.data"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x101a)) returned 1 [0229.005] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2201c0 | out: hHeap=0x1f0000) returned 1 [0229.005] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0229.006] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0229.006] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa10e432c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="deploy", cAlternateFileName="")) returned 1 [0229.006] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236058 [0229.006] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0229.006] lstrcmpW (lpString1="deploy", lpString2=".") returned 1 [0229.006] lstrcmpW (lpString1="deploy", lpString2="..") returned 1 [0229.006] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235700 [0229.006] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235838 [0229.006] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225d38 | out: hHeap=0x1f0000) returned 1 [0229.006] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ed9405, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8ed9405, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa900a6f7, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4ce7de, dwReserved0=0x0, dwReserved1=0x0, cFileName="deploy.jar", cAlternateFileName="")) returned 1 [0229.006] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0229.007] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2357d0 [0229.007] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221708 [0229.007] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2357d0 | out: hHeap=0x1f0000) returned 1 [0229.007] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236058 | out: hHeap=0x1f0000) returned 1 [0229.007] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0229.007] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1bc [0229.008] GetFileType (hFile=0x1bc) returned 0x1 [0229.008] CloseHandle (hObject=0x1bc) returned 1 [0231.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220508 [0231.601] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy.jar"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ed9405, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8ed9405, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa900a6f7, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4ce7de)) returned 1 [0231.601] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220508 | out: hHeap=0x1f0000) returned 1 [0231.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0231.602] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy.jar"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ed9405, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8ed9405, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa900a6f7, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4ce7de)) returned 1 [0231.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0231.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0231.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0231.602] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa11bdb26, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xaa8ed01b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ext", cAlternateFileName="")) returned 1 [0231.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236608 [0231.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0231.603] lstrcmpW (lpString1="ext", lpString2=".") returned 1 [0231.603] lstrcmpW (lpString1="ext", lpString2="..") returned 1 [0231.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0231.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2364d0 [0231.603] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0231.603] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf58, dwReserved0=0x0, dwReserved1=0x0, cFileName="flavormap.properties", cAlternateFileName="FLAVOR~1.PRO")) returned 1 [0231.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238ef8 [0231.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235700 [0231.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221968 [0231.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0231.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236608 | out: hHeap=0x1f0000) returned 1 [0231.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ef8 | out: hHeap=0x1f0000) returned 1 [0232.004] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\flavormap.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0232.005] GetFileType (hFile=0x23c) returned 0x1 [0232.005] CloseHandle (hObject=0x23c) returned 1 [0232.005] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213680 [0232.005] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\flavormap.properties"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf58)) returned 1 [0232.005] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213680 | out: hHeap=0x1f0000) returned 1 [0232.005] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0232.006] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\flavormap.properties"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf58)) returned 1 [0232.006] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0232.006] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e88 [0232.006] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0232.006] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e88 | out: hHeap=0x1f0000) returned 1 [0232.006] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0232.006] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xeba, dwReserved0=0x0, dwReserved1=0x0, cFileName="fontconfig.bfc", cAlternateFileName="FONTCO~1.BFC")) returned 1 [0232.006] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0232.006] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236400 [0232.007] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221410 [0232.007] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236400 | out: hHeap=0x1f0000) returned 1 [0232.007] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0232.007] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0232.007] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.bfc"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0232.007] GetFileType (hFile=0x23c) returned 0x1 [0232.008] CloseHandle (hObject=0x23c) returned 1 [0232.008] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0232.008] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.bfc"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xeba)) returned 1 [0232.008] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0232.008] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fc98 [0232.008] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.bfc"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xeba)) returned 1 [0232.008] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fc98 | out: hHeap=0x1f0000) returned 1 [0232.009] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0232.009] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0232.009] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2948, dwReserved0=0x0, dwReserved1=0x0, cFileName="fontconfig.properties.src", cAlternateFileName="FONTCO~1.SRC")) returned 1 [0232.009] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228830 [0232.009] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236400 [0232.009] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0232.009] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236400 | out: hHeap=0x1f0000) returned 1 [0232.009] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0232.009] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228830 | out: hHeap=0x1f0000) returned 1 [0232.010] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.properties.src"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0232.010] GetFileType (hFile=0x23c) returned 0x1 [0232.010] CloseHandle (hObject=0x23c) returned 1 [0232.010] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0232.010] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.properties.src"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2948)) returned 1 [0232.010] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0232.010] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0232.011] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.properties.src"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2948)) returned 1 [0232.011] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0232.011] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0232.011] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0232.011] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa122f229, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fonts", cAlternateFileName="")) returned 1 [0232.011] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236468 [0232.011] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0232.011] lstrcmpW (lpString1="fonts", lpString2=".") returned 1 [0232.011] lstrcmpW (lpString1="fonts", lpString2="..") returned 1 [0232.011] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236608 [0232.011] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x368a, dwReserved0=0x0, dwReserved1=0x0, cFileName="hijrah-config-umalqura.properties", cAlternateFileName="HIJRAH~1.PRO")) returned 1 [0232.011] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8690 [0232.011] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236400 [0232.011] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a230 [0232.011] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236400 | out: hHeap=0x1f0000) returned 1 [0232.012] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0232.012] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8690 | out: hHeap=0x1f0000) returned 1 [0232.012] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0232.012] GetFileType (hFile=0x23c) returned 0x1 [0232.013] CloseHandle (hObject=0x23c) returned 1 [0232.013] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219f90 [0232.013] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x368a)) returned 1 [0232.013] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219f90 | out: hHeap=0x1f0000) returned 1 [0232.013] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a188 [0232.013] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x368a)) returned 1 [0232.013] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a188 | out: hHeap=0x1f0000) returned 1 [0232.013] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a968 [0232.013] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0232.014] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a968 | out: hHeap=0x1f0000) returned 1 [0232.014] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0232.014] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa12313ee, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0232.014] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236468 [0232.014] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a230 | out: hHeap=0x1f0000) returned 1 [0232.014] lstrcmpW (lpString1="images", lpString2=".") returned 1 [0232.014] lstrcmpW (lpString1="images", lpString2="..") returned 1 [0232.014] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd8) returned 0x21bf68 [0232.014] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236400 [0232.014] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0232.014] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x38, dwReserved0=0x0, dwReserved1=0x0, cFileName="javafx.properties", cAlternateFileName="JAVAFX~1.PRO")) returned 1 [0232.015] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238d70 [0232.015] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235700 [0232.015] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221410 [0232.015] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0232.015] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0232.015] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238d70 | out: hHeap=0x1f0000) returned 1 [0232.015] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\javafx.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javafx.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0232.016] GetFileType (hFile=0x23c) returned 0x1 [0232.016] CloseHandle (hObject=0x23c) returned 1 [0232.016] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0232.016] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\javafx.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javafx.properties"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x38)) returned 1 [0232.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0232.017] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213790 [0232.017] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\javafx.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javafx.properties"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x38)) returned 1 [0232.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213790 | out: hHeap=0x1f0000) returned 1 [0232.017] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213680 [0232.017] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0232.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213680 | out: hHeap=0x1f0000) returned 1 [0232.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0232.018] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8e40a9d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8e40a9d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8e66d0e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xe6827, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaws.jar", cAlternateFileName="")) returned 1 [0232.018] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0232.018] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236468 [0232.018] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221540 [0232.018] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0232.018] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0232.018] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0232.019] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javaws.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0232.019] GetLastError () returned 0x2 [0232.019] GetLastError () returned 0x2 [0232.019] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1c6de, dwReserved0=0x0, dwReserved1=0x0, cFileName="jce.jar", cAlternateFileName="")) returned 1 [0232.019] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236468 [0232.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0232.020] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jce.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0232.020] GetFileType (hFile=0x23c) returned 0x1 [0232.022] CloseHandle (hObject=0x23c) returned 1 [0232.022] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235700 [0232.022] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jce.jar"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1c6de)) returned 1 [0232.023] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0232.023] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235700 [0232.023] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jce.jar"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1c6de)) returned 1 [0232.023] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0232.023] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235700 [0232.023] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0232.024] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1295634, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfr", cAlternateFileName="")) returned 1 [0232.024] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235700 [0232.024] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0232.024] lstrcmpW (lpString1="jfr", lpString2=".") returned 1 [0232.024] lstrcmpW (lpString1="jfr", lpString2="..") returned 1 [0232.024] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236468 [0232.024] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x88dc5, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfr.jar", cAlternateFileName="")) returned 1 [0232.024] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c30 [0232.024] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0232.025] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0232.025] GetFileType (hFile=0x23c) returned 0x1 [0232.026] CloseHandle (hObject=0x23c) returned 1 [0232.026] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214dd0 [0232.026] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr.jar"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x88dc5)) returned 1 [0232.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214dd0 | out: hHeap=0x1f0000) returned 1 [0232.026] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214e38 [0232.026] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr.jar"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x88dc5)) returned 1 [0232.027] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214e38 | out: hHeap=0x1f0000) returned 1 [0232.027] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d00 [0232.027] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d00 | out: hHeap=0x1f0000) returned 1 [0232.027] GetLastError () returned 0x0 [0232.027] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0232.027] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228ab8 [0232.028] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22dd00 [0232.028] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2149c0 [0232.028] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239208 [0232.028] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238578 [0232.028] CryptAcquireContextA (in: phProv=0x1cfdaf0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1cfdaf0*=0x213680) returned 1 [0232.030] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238578 | out: pbBuffer=0x238578) returned 1 [0232.030] CryptReleaseContext (hProv=0x213680, dwFlags=0x0) returned 1 [0232.030] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238578 | out: hHeap=0x1f0000) returned 1 [0232.030] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x25bbb0 [0232.030] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x236f50 [0232.030] QueryPerformanceCounter (in: lpPerformanceCount=0x1cfda84 | out: lpPerformanceCount=0x1cfda84*=38939911768) returned 1 [0232.030] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1cfdac4 | out: lpSystemTimeAsFileTime=0x1cfdac4) [0232.031] QueryPerformanceCounter (in: lpPerformanceCount=0x1cfda84 | out: lpPerformanceCount=0x1cfda84*=38939947648) returned 1 [0232.031] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1cfdac4 | out: lpSystemTimeAsFileTime=0x1cfdac4) [0232.031] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238cc8 [0232.031] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x25a8a8 [0232.031] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x236d20 [0232.031] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x233638 [0232.031] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210240 [0232.031] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206628 [0232.031] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210258 [0232.031] GetLastError () returned 0x0 [0232.032] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd88 [0232.032] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2aded8 [0232.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd88 | out: hHeap=0x1f0000) returned 1 [0232.032] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x106) returned 0x237a40 [0232.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aded8 | out: hHeap=0x1f0000) returned 1 [0232.032] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a80 [0232.033] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a90 [0232.033] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr.jar.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfd990, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0232.034] GetFileType (hFile=0x23c) returned 0x1 [0232.035] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b40 [0232.035] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a70 [0232.036] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfd9c0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1bc [0232.036] GetFileType (hFile=0x1bc) returned 0x1 [0232.037] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f10 [0232.037] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c30 [0232.037] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad1e8 [0232.477] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b80 [0232.478] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a20 [0232.502] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr.jar.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfd90c, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0232.502] GetFileType (hFile=0x1c0) returned 0x1 [0232.523] GetLastError () returned 0xb7 [0232.524] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe4) returned 0x217038 [0232.524] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c30 [0232.524] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e90 [0232.527] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c70 [0232.527] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2adb40 [0232.527] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ac0 [0232.528] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a10 [0232.531] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr.jar.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfd90c, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0232.532] GetFileType (hFile=0x174) returned 0x1 [0232.533] GetLastError () returned 0xb7 [0232.533] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f70 [0232.534] GetLastError () returned 0xb7 [0232.534] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c70 [0232.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f10 [0232.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e90 [0232.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb8) returned 0x223be0 [0232.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a40 [0232.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b50 [0232.538] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfd904, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0232.538] GetFileType (hFile=0x1d8) returned 0x1 [0232.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28bfc0 [0232.540] ReadFile (in: hFile=0x1d8, lpBuffer=0x28bfc0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1cfd860, lpOverlapped=0x0 | out: lpBuffer=0x28bfc0*, lpNumberOfBytesRead=0x1cfd860*=0x1000, lpOverlapped=0x0) returned 1 [0232.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24c600 [0232.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x288fa8 [0232.547] GetLastError () returned 0x0 [0233.381] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20fef8 [0233.460] GetLastError () returned 0x0 [0233.461] CloseHandle (hObject=0x23c) returned 1 [0233.461] CloseHandle (hObject=0x1bc) returned 1 [0233.462] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238aa0 [0233.463] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389e0 [0233.463] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr.jar"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfd9c0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1bc [0233.478] GetFileType (hFile=0x1bc) returned 0x1 [0233.479] GetLastError () returned 0xb7 [0233.479] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28ffe0 [0233.480] GetLastError () returned 0xb7 [0233.482] CloseHandle (hObject=0x1bc) returned 1 [0233.482] DeleteFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr.jar")) returned 0 [0233.483] GetLastError () returned 0x20 [0233.483] GetLastError () returned 0x20 [0233.483] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228cf8 [0233.483] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2382a8 [0233.483] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238398 [0233.483] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x228a28 [0233.483] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f10 [0233.483] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d90 [0233.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x238a60 [0233.484] GetLastError () returned 0x20 [0233.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239198 [0233.484] GetLastError () returned 0x20 [0233.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238c58 [0233.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214b60 [0233.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2383e8 [0233.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2856c8 [0233.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ab0 [0233.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0233.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff28 [0233.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ad0 [0233.485] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0233.485] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210018 [0233.485] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238550 [0233.485] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2851a0 [0233.485] GetLastError () returned 0x20 [0233.485] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x2389f0 [0233.485] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x2388b0 [0233.485] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238870 [0233.485] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388b0 | out: hHeap=0x1f0000) returned 1 [0233.485] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238830 [0233.485] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238870 | out: hHeap=0x1f0000) returned 1 [0233.486] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389f0 | out: hHeap=0x1f0000) returned 1 [0233.486] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389f0 [0233.486] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210198 [0233.486] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389f0 | out: hHeap=0x1f0000) returned 1 [0233.486] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101b0 [0233.486] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0233.486] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238830 | out: hHeap=0x1f0000) returned 1 [0233.486] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101c8 [0233.486] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f920 [0233.821] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0233.821] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f9c8 [0233.821] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f920 | out: hHeap=0x1f0000) returned 1 [0233.821] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0233.843] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f920 [0233.843] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204cb0 [0233.843] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f920 | out: hHeap=0x1f0000) returned 1 [0233.844] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d10 [0233.844] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cb0 | out: hHeap=0x1f0000) returned 1 [0233.844] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f9c8 | out: hHeap=0x1f0000) returned 1 [0233.844] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f70 [0233.844] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260928 [0233.844] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f70 | out: hHeap=0x1f0000) returned 1 [0233.844] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204cb0 [0233.844] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0233.845] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d10 | out: hHeap=0x1f0000) returned 1 [0233.845] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204e30 [0233.845] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206658 [0233.845] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e30 | out: hHeap=0x1f0000) returned 1 [0233.845] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260860 [0233.845] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206658 | out: hHeap=0x1f0000) returned 1 [0233.845] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cb0 | out: hHeap=0x1f0000) returned 1 [0233.846] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238870 [0233.846] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f920 [0233.846] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238870 | out: hHeap=0x1f0000) returned 1 [0233.846] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f9c8 [0233.846] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f920 | out: hHeap=0x1f0000) returned 1 [0233.846] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204db0 [0233.846] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f9c8 | out: hHeap=0x1f0000) returned 1 [0233.846] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x2067d8 [0233.847] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204db0 | out: hHeap=0x1f0000) returned 1 [0233.847] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2067d8 | out: hHeap=0x1f0000) returned 1 [0233.847] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0233.847] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0233.847] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac360 [0233.847] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2856c8 | out: hHeap=0x1f0000) returned 1 [0233.847] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0233.848] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238fa0 [0233.848] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260540 [0233.848] CryptAcquireContextA (in: phProv=0x1cfdaf0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1cfdaf0*=0x213680) returned 1 [0233.849] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x260540 | out: pbBuffer=0x260540) returned 1 [0233.849] CryptReleaseContext (hProv=0x213680, dwFlags=0x0) returned 1 [0233.849] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0233.849] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260568 [0233.849] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260900 [0233.849] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239278 [0233.850] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0233.850] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aba20 [0233.850] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239278 | out: hHeap=0x1f0000) returned 1 [0233.850] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a89a8 [0233.850] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f9c8 [0233.850] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x236670 [0233.850] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260630 [0233.850] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2856c8 [0233.851] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e90 [0233.851] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d00 [0233.851] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2606d0 [0233.851] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285ae8 [0233.851] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238960 [0233.851] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0233.851] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f908 [0233.851] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389b0 [0233.852] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609a0 [0233.852] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f920 [0233.852] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f920 | out: hHeap=0x1f0000) returned 1 [0233.853] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0233.853] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389b0 | out: hHeap=0x1f0000) returned 1 [0233.853] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f908 | out: hHeap=0x1f0000) returned 1 [0233.853] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0233.853] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238960 | out: hHeap=0x1f0000) returned 1 [0233.853] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285ae8 | out: hHeap=0x1f0000) returned 1 [0233.854] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0233.854] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d00 | out: hHeap=0x1f0000) returned 1 [0233.854] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238de0 [0233.854] GetLastError () returned 0x0 [0233.854] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238e18 [0233.854] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abec0 [0233.855] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abec0 | out: hHeap=0x1f0000) returned 1 [0233.855] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aafb8 [0233.855] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab330 [0233.855] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aafb8 | out: hHeap=0x1f0000) returned 1 [0233.855] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab330 | out: hHeap=0x1f0000) returned 1 [0233.855] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x24e9c0 [0233.855] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285098 [0233.856] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab330 [0233.856] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab330 | out: hHeap=0x1f0000) returned 1 [0233.856] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac110 [0233.856] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac110 | out: hHeap=0x1f0000) returned 1 [0233.856] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285ae8 [0233.856] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac110 [0233.856] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac110 | out: hHeap=0x1f0000) returned 1 [0233.856] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x230258 [0233.857] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x25e1c0 [0233.857] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x237928 [0233.857] QueryPerformanceCounter (in: lpPerformanceCount=0x1cfd640 | out: lpPerformanceCount=0x1cfd640*=39122585261) returned 1 [0233.857] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1cfd680 | out: lpSystemTimeAsFileTime=0x1cfd680) [0233.857] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238930 [0233.858] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260658 [0233.858] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d10 [0233.858] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d10 | out: hHeap=0x1f0000) returned 1 [0233.858] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260658 | out: hHeap=0x1f0000) returned 1 [0233.858] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260658 [0233.858] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cb0 [0233.858] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cb0 | out: hHeap=0x1f0000) returned 1 [0233.859] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260658 | out: hHeap=0x1f0000) returned 1 [0233.859] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238930 | out: hHeap=0x1f0000) returned 1 [0233.859] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0233.859] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238e88 [0233.859] GetLastError () returned 0x0 [0233.860] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abd98 [0233.860] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab7d0 [0233.860] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abb48 [0233.860] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2607e8 [0233.860] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260928 [0233.860] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abc70 [0233.860] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2acca0 [0233.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260658 [0233.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab8f8 [0233.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x234b90 [0233.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abec0 [0233.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x20c2c0 [0233.861] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abec0 | out: hHeap=0x1f0000) returned 1 [0233.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x22b018 [0233.862] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20c2c0 | out: hHeap=0x1f0000) returned 1 [0233.862] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260860 [0233.862] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260950 [0233.862] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0233.862] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aca50 [0233.862] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0233.862] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x20c2c0 [0233.862] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x2647e0 [0233.863] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2647e0 | out: hHeap=0x1f0000) returned 1 [0233.866] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20c2c0 | out: hHeap=0x1f0000) returned 1 [0233.866] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b018 | out: hHeap=0x1f0000) returned 1 [0233.866] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f950 [0233.866] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2284d0 [0233.866] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2606a8 [0233.866] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260950 [0233.866] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260748 [0233.866] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260978 [0233.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0233.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0233.867] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x20c2c0 [0233.867] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260770 [0233.867] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260860 [0233.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0233.867] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2acdc8 [0233.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0233.868] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206658 [0233.868] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x2aa518 [0233.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aa518 | out: hHeap=0x1f0000) returned 1 [0233.869] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206658 | out: hHeap=0x1f0000) returned 1 [0233.869] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260658 | out: hHeap=0x1f0000) returned 1 [0233.869] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abfe8 [0233.869] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2acdc8 | out: hHeap=0x1f0000) returned 1 [0233.869] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20c2c0 | out: hHeap=0x1f0000) returned 1 [0233.869] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204f50 [0233.869] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abec0 [0233.870] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac238 [0233.870] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0233.870] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab330 [0233.870] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac238 | out: hHeap=0x1f0000) returned 1 [0233.870] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0233.870] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0233.870] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2284d0 | out: hHeap=0x1f0000) returned 1 [0233.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abec0 | out: hHeap=0x1f0000) returned 1 [0233.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f50 | out: hHeap=0x1f0000) returned 1 [0233.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f950 | out: hHeap=0x1f0000) returned 1 [0233.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aca50 | out: hHeap=0x1f0000) returned 1 [0233.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abec0 [0233.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abec0 | out: hHeap=0x1f0000) returned 1 [0233.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b90 | out: hHeap=0x1f0000) returned 1 [0233.872] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab8f8 | out: hHeap=0x1f0000) returned 1 [0233.872] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abfe8 | out: hHeap=0x1f0000) returned 1 [0233.872] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2acca0 | out: hHeap=0x1f0000) returned 1 [0233.872] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abc70 | out: hHeap=0x1f0000) returned 1 [0233.872] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607e8 | out: hHeap=0x1f0000) returned 1 [0233.872] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abb48 | out: hHeap=0x1f0000) returned 1 [0233.872] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab7d0 | out: hHeap=0x1f0000) returned 1 [0233.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab6a8 [0233.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac110 [0233.873] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab6a8 | out: hHeap=0x1f0000) returned 1 [0233.873] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac110 | out: hHeap=0x1f0000) returned 1 [0233.873] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab330 | out: hHeap=0x1f0000) returned 1 [0233.873] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abd98 | out: hHeap=0x1f0000) returned 1 [0233.873] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285ae8 | out: hHeap=0x1f0000) returned 1 [0233.873] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24e9c0 | out: hHeap=0x1f0000) returned 1 [0233.874] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x2aece8 [0233.874] GetLastError () returned 0x0 [0233.874] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238870 [0233.875] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388a0 [0233.876] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr.jar.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfd9f0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0233.876] GetFileType (hFile=0x1e0) returned 0x1 [0233.877] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x296010 [0233.877] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1cfd978 | out: lpNewFilePointer=0x0) returned 1 [0233.878] GetLastError () returned 0xb7 [0233.878] CloseHandle (hObject=0x1e0) returned 1 [0234.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388a0 | out: hHeap=0x1f0000) returned 1 [0234.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238870 | out: hHeap=0x1f0000) returned 1 [0234.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285098 | out: hHeap=0x1f0000) returned 1 [0234.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2856c8 | out: hHeap=0x1f0000) returned 1 [0234.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260630 | out: hHeap=0x1f0000) returned 1 [0234.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e90 | out: hHeap=0x1f0000) returned 1 [0234.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236670 | out: hHeap=0x1f0000) returned 1 [0234.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f9c8 | out: hHeap=0x1f0000) returned 1 [0234.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a89a8 | out: hHeap=0x1f0000) returned 1 [0234.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aece8 | out: hHeap=0x1f0000) returned 1 [0234.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260900 | out: hHeap=0x1f0000) returned 1 [0234.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aba20 | out: hHeap=0x1f0000) returned 1 [0234.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25e1c0 | out: hHeap=0x1f0000) returned 1 [0234.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237928 | out: hHeap=0x1f0000) returned 1 [0234.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238fa0 | out: hHeap=0x1f0000) returned 1 [0234.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a60 | out: hHeap=0x1f0000) returned 1 [0234.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210018 | out: hHeap=0x1f0000) returned 1 [0234.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0234.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ad0 | out: hHeap=0x1f0000) returned 1 [0234.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff28 | out: hHeap=0x1f0000) returned 1 [0234.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0234.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ab0 | out: hHeap=0x1f0000) returned 1 [0234.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2851a0 | out: hHeap=0x1f0000) returned 1 [0234.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238550 | out: hHeap=0x1f0000) returned 1 [0234.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214b60 | out: hHeap=0x1f0000) returned 1 [0234.576] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228a28 | out: hHeap=0x1f0000) returned 1 [0234.576] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0234.576] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac360 | out: hHeap=0x1f0000) returned 1 [0234.576] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228cf8 | out: hHeap=0x1f0000) returned 1 [0234.576] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389e0 | out: hHeap=0x1f0000) returned 1 [0234.576] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238aa0 | out: hHeap=0x1f0000) returned 1 [0234.576] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28bfc0 | out: hHeap=0x1f0000) returned 1 [0234.576] CloseHandle (hObject=0x1d8) returned 1 [0234.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b50 | out: hHeap=0x1f0000) returned 1 [0234.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a40 | out: hHeap=0x1f0000) returned 1 [0234.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223be0 | out: hHeap=0x1f0000) returned 1 [0234.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24c600 | out: hHeap=0x1f0000) returned 1 [0234.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20fef8 | out: hHeap=0x1f0000) returned 1 [0234.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c70 | out: hHeap=0x1f0000) returned 1 [0234.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x288fa8 | out: hHeap=0x1f0000) returned 1 [0234.577] CloseHandle (hObject=0x174) returned 1 [0234.578] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a10 | out: hHeap=0x1f0000) returned 1 [0234.578] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ac0 | out: hHeap=0x1f0000) returned 1 [0234.578] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2adb40 | out: hHeap=0x1f0000) returned 1 [0234.578] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c30 | out: hHeap=0x1f0000) returned 1 [0234.578] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0234.585] CloseHandle (hObject=0x1c0) returned 1 [0234.586] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a20 | out: hHeap=0x1f0000) returned 1 [0234.586] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b80 | out: hHeap=0x1f0000) returned 1 [0234.587] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad1e8 | out: hHeap=0x1f0000) returned 1 [0234.587] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a70 | out: hHeap=0x1f0000) returned 1 [0234.587] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b40 | out: hHeap=0x1f0000) returned 1 [0234.587] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a90 | out: hHeap=0x1f0000) returned 1 [0234.587] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a80 | out: hHeap=0x1f0000) returned 1 [0234.587] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237a40 | out: hHeap=0x1f0000) returned 1 [0234.587] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25a8a8 | out: hHeap=0x1f0000) returned 1 [0234.588] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236d20 | out: hHeap=0x1f0000) returned 1 [0234.588] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206628 | out: hHeap=0x1f0000) returned 1 [0234.588] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0234.588] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210240 | out: hHeap=0x1f0000) returned 1 [0234.588] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233638 | out: hHeap=0x1f0000) returned 1 [0234.588] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25bbb0 | out: hHeap=0x1f0000) returned 1 [0234.588] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236f50 | out: hHeap=0x1f0000) returned 1 [0234.588] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239208 | out: hHeap=0x1f0000) returned 1 [0234.588] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2149c0 | out: hHeap=0x1f0000) returned 1 [0234.588] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22dd00 | out: hHeap=0x1f0000) returned 1 [0234.589] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228ab8 | out: hHeap=0x1f0000) returned 1 [0234.589] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0234.589] DeleteFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr.jar")) returned 1 [0234.592] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x848c, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfxswt.jar", cAlternateFileName="")) returned 1 [0234.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0234.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b06c0 [0234.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220d88 [0234.592] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b06c0 | out: hHeap=0x1f0000) returned 1 [0234.592] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c30 | out: hHeap=0x1f0000) returned 1 [0234.592] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0234.593] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfxswt.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0234.593] GetFileType (hFile=0x1c0) returned 0x1 [0234.594] CloseHandle (hObject=0x1c0) returned 1 [0234.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd88 [0234.597] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfxswt.jar"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x848c)) returned 1 [0234.597] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd88 | out: hHeap=0x1f0000) returned 1 [0234.597] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe00 [0234.597] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfxswt.jar"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x848c)) returned 1 [0234.598] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe00 | out: hHeap=0x1f0000) returned 1 [0234.598] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0234.598] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0234.598] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa76f896, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xaa76f896, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xaa76f896, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8eb80, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsse.jar", cAlternateFileName="")) returned 1 [0234.598] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604c8 [0234.598] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0b38 [0234.598] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220fe8 [0234.598] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0b38 | out: hHeap=0x1f0000) returned 1 [0234.598] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0234.598] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604c8 | out: hHeap=0x1f0000) returned 1 [0234.599] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jsse.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0234.599] GetFileType (hFile=0x1c0) returned 0x1 [0234.599] CloseHandle (hObject=0x1c0) returned 1 [0234.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0234.599] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jsse.jar"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa76f896, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xaa76f896, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xaa76f896, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8eb80)) returned 1 [0234.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0234.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220058 [0234.600] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jsse.jar"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa76f896, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xaa76f896, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xaa76f896, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8eb80)) returned 1 [0234.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220058 | out: hHeap=0x1f0000) returned 1 [0234.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0234.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0234.600] GetLastError () returned 0x0 [0234.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260658 [0234.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228a28 [0234.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x261b28 [0234.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f770 [0234.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239198 [0234.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606f8 [0234.601] CryptAcquireContextA (in: phProv=0x1cfdaf0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1cfdaf0*=0x213130) returned 1 [0234.601] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2606f8 | out: pbBuffer=0x2606f8) returned 1 [0234.601] CryptReleaseContext (hProv=0x213130, dwFlags=0x0) returned 1 [0234.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606f8 | out: hHeap=0x1f0000) returned 1 [0234.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x25a8a8 [0234.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2ae1f8 [0234.602] QueryPerformanceCounter (in: lpPerformanceCount=0x1cfda84 | out: lpPerformanceCount=0x1cfda84*=39197072323) returned 1 [0234.602] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1cfdac4 | out: lpSystemTimeAsFileTime=0x1cfdac4) [0234.603] QueryPerformanceCounter (in: lpPerformanceCount=0x1cfda84 | out: lpPerformanceCount=0x1cfda84*=39197150968) returned 1 [0234.603] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1cfdac4 | out: lpSystemTimeAsFileTime=0x1cfdac4) [0234.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239080 [0234.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x25bbb0 [0234.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2aef18 [0234.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x2332f8 [0234.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f9c8 [0234.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206868 [0234.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f728 [0234.603] GetLastError () returned 0x0 [0234.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213790 [0234.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0234.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213790 | out: hHeap=0x1f0000) returned 1 [0234.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x11c) returned 0x2acb78 [0234.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0234.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a60 [0234.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b40 [0234.606] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jsse.jar.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfd990, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0234.606] GetFileType (hFile=0x1c0) returned 0x1 [0234.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ac0 [0234.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a10 [0234.608] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jsse.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfd9c0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0234.608] GetFileType (hFile=0x174) returned 0x1 [0234.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c70 [0234.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f30 [0234.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2adb40 [0234.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a00 [0234.610] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a40 [0234.610] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jsse.jar.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfd90c, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0234.611] GetFileType (hFile=0x1d8) returned 0x1 [0234.611] GetLastError () returned 0xb7 [0234.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe4) returned 0x217038 [0234.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f30 [0234.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0234.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cf0 [0234.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ada88 [0234.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a20 [0234.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ae0 [0234.613] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jsse.jar.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfd90c, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0234.613] GetFileType (hFile=0x1b0) returned 0x1 [0234.613] GetLastError () returned 0xb7 [0234.614] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cf0 [0234.614] GetLastError () returned 0xb7 [0234.614] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f50 [0234.614] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d90 [0234.614] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e70 [0234.614] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb8) returned 0x224720 [0234.614] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389e0 [0234.615] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ad0 [0234.615] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jsse.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfd904, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0234.616] GetFileType (hFile=0x204) returned 0x1 [0234.616] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28ffe0 [0234.616] ReadFile (in: hFile=0x204, lpBuffer=0x28ffe0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1cfd860, lpOverlapped=0x0 | out: lpBuffer=0x28ffe0*, lpNumberOfBytesRead=0x1cfd860*=0x1000, lpOverlapped=0x0) returned 1 [0234.897] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24ce10 [0234.898] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x290fe8 [0234.898] GetLastError () returned 0x0 [0235.558] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f6c8 [0235.558] GetLastError () returned 0x0 [0235.558] CloseHandle (hObject=0x1c0) returned 1 [0235.559] CloseHandle (hObject=0x174) returned 1 [0235.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238970 [0235.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238800 [0235.561] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jsse.jar"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfd9c0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0235.569] GetFileType (hFile=0x174) returned 0x1 [0235.570] GetLastError () returned 0xb7 [0235.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x294000 [0235.571] GetLastError () returned 0xb7 [0235.572] CloseHandle (hObject=0x174) returned 1 [0235.573] DeleteFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jsse.jar")) returned 0 [0235.573] GetLastError () returned 0x20 [0235.573] GetLastError () returned 0x20 [0235.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2287a0 [0235.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260568 [0235.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260630 [0235.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x228710 [0235.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bb0 [0235.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0235.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x2388a0 [0235.574] GetLastError () returned 0x20 [0235.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239080 [0235.574] GetLastError () returned 0x20 [0235.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238ec0 [0235.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0318 [0235.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2609a0 [0235.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2858d8 [0235.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238950 [0235.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0235.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f620 [0235.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238850 [0235.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260770 [0235.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f7a0 [0235.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2607c0 [0235.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2851a0 [0235.576] GetLastError () returned 0x20 [0235.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238860 [0235.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238840 [0235.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238870 [0235.576] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238840 | out: hHeap=0x1f0000) returned 1 [0235.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238880 [0235.576] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238870 | out: hHeap=0x1f0000) returned 1 [0235.576] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238860 | out: hHeap=0x1f0000) returned 1 [0235.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238960 [0235.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f8d8 [0235.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238960 | out: hHeap=0x1f0000) returned 1 [0235.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f848 [0235.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f8d8 | out: hHeap=0x1f0000) returned 1 [0235.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238880 | out: hHeap=0x1f0000) returned 1 [0235.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f668 [0235.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f680 [0235.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f668 | out: hHeap=0x1f0000) returned 1 [0235.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f890 [0235.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f680 | out: hHeap=0x1f0000) returned 1 [0235.578] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f848 | out: hHeap=0x1f0000) returned 1 [0235.578] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f6f8 [0235.578] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204df0 [0235.578] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f6f8 | out: hHeap=0x1f0000) returned 1 [0235.578] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e90 [0235.578] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204df0 | out: hHeap=0x1f0000) returned 1 [0235.578] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f890 | out: hHeap=0x1f0000) returned 1 [0235.578] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e70 [0235.578] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2607e8 [0235.578] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e70 | out: hHeap=0x1f0000) returned 1 [0235.578] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204f10 [0235.579] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607e8 | out: hHeap=0x1f0000) returned 1 [0235.579] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e90 | out: hHeap=0x1f0000) returned 1 [0235.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204bd0 [0235.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206838 [0235.579] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bd0 | out: hHeap=0x1f0000) returned 1 [0235.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2607e8 [0235.579] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206838 | out: hHeap=0x1f0000) returned 1 [0235.579] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f10 | out: hHeap=0x1f0000) returned 1 [0235.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238840 [0235.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f758 [0235.579] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238840 | out: hHeap=0x1f0000) returned 1 [0235.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f770 [0235.580] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f758 | out: hHeap=0x1f0000) returned 1 [0235.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204df0 [0235.580] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f770 | out: hHeap=0x1f0000) returned 1 [0235.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206658 [0235.580] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204df0 | out: hHeap=0x1f0000) returned 1 [0235.580] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206658 | out: hHeap=0x1f0000) returned 1 [0235.580] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607e8 | out: hHeap=0x1f0000) returned 1 [0235.580] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0235.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab8f8 [0235.580] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2858d8 | out: hHeap=0x1f0000) returned 1 [0235.580] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0235.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238ec0 [0235.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0235.581] CryptAcquireContextA (in: phProv=0x1cfdaf0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1cfdaf0*=0x212be0) returned 1 [0235.581] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x260568 | out: pbBuffer=0x260568) returned 1 [0235.581] CryptReleaseContext (hProv=0x212be0, dwFlags=0x0) returned 1 [0235.582] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0235.582] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2607e8 [0235.582] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260810 [0235.582] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238ef8 [0235.582] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607e8 | out: hHeap=0x1f0000) returned 1 [0235.582] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac6d8 [0235.582] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ef8 | out: hHeap=0x1f0000) returned 1 [0235.582] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8950 [0235.582] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f8a8 [0235.582] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x2b0ad0 [0235.582] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2609a0 [0235.582] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285098 [0235.582] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cb0 [0235.582] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0588 [0235.582] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2607e8 [0235.582] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x284f90 [0235.583] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238840 [0235.583] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260838 [0235.583] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f8d8 [0235.583] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238860 [0235.583] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0235.583] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f6f8 [0235.583] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f6f8 | out: hHeap=0x1f0000) returned 1 [0235.583] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0235.583] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238860 | out: hHeap=0x1f0000) returned 1 [0235.583] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f8d8 | out: hHeap=0x1f0000) returned 1 [0235.583] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260838 | out: hHeap=0x1f0000) returned 1 [0235.584] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238840 | out: hHeap=0x1f0000) returned 1 [0235.584] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x284f90 | out: hHeap=0x1f0000) returned 1 [0235.584] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607e8 | out: hHeap=0x1f0000) returned 1 [0235.584] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0588 | out: hHeap=0x1f0000) returned 1 [0235.584] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239080 [0235.584] GetLastError () returned 0x0 [0235.584] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x2391d0 [0235.584] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abc70 [0235.585] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abc70 | out: hHeap=0x1f0000) returned 1 [0235.585] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aafb8 [0235.585] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abec0 [0235.585] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aafb8 | out: hHeap=0x1f0000) returned 1 [0235.585] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abec0 | out: hHeap=0x1f0000) returned 1 [0235.585] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x24e7c0 [0235.585] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2854b8 [0235.585] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab7d0 [0235.585] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab7d0 | out: hHeap=0x1f0000) returned 1 [0235.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab458 [0235.586] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab458 | out: hHeap=0x1f0000) returned 1 [0235.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2855c0 [0235.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abd98 [0235.586] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abd98 | out: hHeap=0x1f0000) returned 1 [0235.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f8f8 [0235.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x24fd60 [0235.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2af490 [0235.803] QueryPerformanceCounter (in: lpPerformanceCount=0x1cfd640 | out: lpPerformanceCount=0x1cfd640*=39317228265) returned 1 [0235.804] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1cfd680 | out: lpSystemTimeAsFileTime=0x1cfd680) [0235.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238990 [0235.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604c8 [0235.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cf0 [0235.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cf0 | out: hHeap=0x1f0000) returned 1 [0235.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604c8 | out: hHeap=0x1f0000) returned 1 [0235.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604c8 [0235.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c30 [0235.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c30 | out: hHeap=0x1f0000) returned 1 [0235.805] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604c8 | out: hHeap=0x1f0000) returned 1 [0235.805] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238990 | out: hHeap=0x1f0000) returned 1 [0235.805] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0235.805] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238cc8 [0235.805] GetLastError () returned 0x0 [0235.806] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac928 [0235.806] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aafb8 [0235.806] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2acca0 [0235.806] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2604c8 [0235.806] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2604f0 [0235.806] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aca50 [0235.807] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab0e0 [0235.807] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260540 [0235.807] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab458 [0235.807] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x222ee8 [0235.807] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abd98 [0235.807] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x20d888 [0235.807] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abd98 | out: hHeap=0x1f0000) returned 1 [0235.807] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x22b018 [0235.807] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20d888 | out: hHeap=0x1f0000) returned 1 [0235.807] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260568 [0235.807] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260590 [0235.808] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0235.808] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abc70 [0235.808] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0235.808] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x20d888 [0235.808] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x234b90 [0235.808] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b90 | out: hHeap=0x1f0000) returned 1 [0235.808] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20d888 | out: hHeap=0x1f0000) returned 1 [0235.808] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b018 | out: hHeap=0x1f0000) returned 1 [0235.808] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f980 [0235.808] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228830 [0235.809] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260568 [0235.809] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260590 [0235.809] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2605b8 [0235.809] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260b30 [0235.809] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0235.809] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0235.809] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x22b018 [0235.809] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260568 [0235.809] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260590 [0235.809] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0235.809] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac800 [0235.809] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0235.810] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206838 [0235.810] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x2a93f8 [0235.810] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a93f8 | out: hHeap=0x1f0000) returned 1 [0235.810] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206838 | out: hHeap=0x1f0000) returned 1 [0235.810] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0235.810] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abec0 [0235.810] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac800 | out: hHeap=0x1f0000) returned 1 [0235.810] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b018 | out: hHeap=0x1f0000) returned 1 [0235.810] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204b90 [0235.810] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab6a8 [0235.810] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac110 [0235.810] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0235.810] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abd98 [0235.810] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac110 | out: hHeap=0x1f0000) returned 1 [0235.811] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b30 | out: hHeap=0x1f0000) returned 1 [0235.811] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0235.811] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228830 | out: hHeap=0x1f0000) returned 1 [0235.811] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab6a8 | out: hHeap=0x1f0000) returned 1 [0235.811] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204b90 | out: hHeap=0x1f0000) returned 1 [0235.811] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f980 | out: hHeap=0x1f0000) returned 1 [0235.811] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abc70 | out: hHeap=0x1f0000) returned 1 [0235.811] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abc70 [0235.811] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abc70 | out: hHeap=0x1f0000) returned 1 [0235.811] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ee8 | out: hHeap=0x1f0000) returned 1 [0235.811] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab458 | out: hHeap=0x1f0000) returned 1 [0235.811] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abec0 | out: hHeap=0x1f0000) returned 1 [0235.812] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab0e0 | out: hHeap=0x1f0000) returned 1 [0235.812] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aca50 | out: hHeap=0x1f0000) returned 1 [0235.812] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604c8 | out: hHeap=0x1f0000) returned 1 [0235.812] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2acca0 | out: hHeap=0x1f0000) returned 1 [0235.812] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aafb8 | out: hHeap=0x1f0000) returned 1 [0235.812] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abfe8 [0235.812] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab208 [0235.812] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abfe8 | out: hHeap=0x1f0000) returned 1 [0235.812] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab208 | out: hHeap=0x1f0000) returned 1 [0235.813] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abd98 | out: hHeap=0x1f0000) returned 1 [0235.813] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac928 | out: hHeap=0x1f0000) returned 1 [0235.813] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2855c0 | out: hHeap=0x1f0000) returned 1 [0235.813] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24e7c0 | out: hHeap=0x1f0000) returned 1 [0235.813] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x2af6c0 [0235.813] GetLastError () returned 0x0 [0235.814] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388c0 [0235.826] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238900 [0235.827] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jsse.jar.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfd9f0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0235.827] GetFileType (hFile=0x1c0) returned 0x1 [0235.828] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28dfd0 [0235.828] SetFilePointerEx (in: hFile=0x1c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1cfd978 | out: lpNewFilePointer=0x0) returned 1 [0235.828] GetLastError () returned 0xb7 [0235.828] CloseHandle (hObject=0x1c0) returned 1 [0235.829] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238900 | out: hHeap=0x1f0000) returned 1 [0235.829] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388c0 | out: hHeap=0x1f0000) returned 1 [0235.829] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2854b8 | out: hHeap=0x1f0000) returned 1 [0235.829] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285098 | out: hHeap=0x1f0000) returned 1 [0235.829] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0235.829] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cb0 | out: hHeap=0x1f0000) returned 1 [0235.829] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0ad0 | out: hHeap=0x1f0000) returned 1 [0235.829] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f8a8 | out: hHeap=0x1f0000) returned 1 [0235.830] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8950 | out: hHeap=0x1f0000) returned 1 [0235.830] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2af6c0 | out: hHeap=0x1f0000) returned 1 [0235.830] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0235.830] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac6d8 | out: hHeap=0x1f0000) returned 1 [0235.830] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24fd60 | out: hHeap=0x1f0000) returned 1 [0235.830] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2af490 | out: hHeap=0x1f0000) returned 1 [0235.830] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ec0 | out: hHeap=0x1f0000) returned 1 [0235.830] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388a0 | out: hHeap=0x1f0000) returned 1 [0235.830] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f7a0 | out: hHeap=0x1f0000) returned 1 [0235.830] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0235.831] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238850 | out: hHeap=0x1f0000) returned 1 [0235.831] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f620 | out: hHeap=0x1f0000) returned 1 [0235.831] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0235.831] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238950 | out: hHeap=0x1f0000) returned 1 [0235.831] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2851a0 | out: hHeap=0x1f0000) returned 1 [0235.831] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607c0 | out: hHeap=0x1f0000) returned 1 [0235.831] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0318 | out: hHeap=0x1f0000) returned 1 [0235.831] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228710 | out: hHeap=0x1f0000) returned 1 [0235.831] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260630 | out: hHeap=0x1f0000) returned 1 [0235.832] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab8f8 | out: hHeap=0x1f0000) returned 1 [0235.832] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2287a0 | out: hHeap=0x1f0000) returned 1 [0235.832] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238800 | out: hHeap=0x1f0000) returned 1 [0235.832] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238970 | out: hHeap=0x1f0000) returned 1 [0235.832] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28ffe0 | out: hHeap=0x1f0000) returned 1 [0235.832] CloseHandle (hObject=0x204) returned 1 [0235.833] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ad0 | out: hHeap=0x1f0000) returned 1 [0235.833] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389e0 | out: hHeap=0x1f0000) returned 1 [0235.833] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224720 | out: hHeap=0x1f0000) returned 1 [0235.833] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24ce10 | out: hHeap=0x1f0000) returned 1 [0235.833] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f6c8 | out: hHeap=0x1f0000) returned 1 [0235.833] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f50 | out: hHeap=0x1f0000) returned 1 [0235.833] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x290fe8 | out: hHeap=0x1f0000) returned 1 [0235.834] CloseHandle (hObject=0x1b0) returned 1 [0235.834] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ae0 | out: hHeap=0x1f0000) returned 1 [0235.834] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a20 | out: hHeap=0x1f0000) returned 1 [0235.834] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ada88 | out: hHeap=0x1f0000) returned 1 [0235.835] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f30 | out: hHeap=0x1f0000) returned 1 [0235.835] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0235.835] CloseHandle (hObject=0x1d8) returned 1 [0235.835] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a40 | out: hHeap=0x1f0000) returned 1 [0235.836] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a00 | out: hHeap=0x1f0000) returned 1 [0235.836] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2adb40 | out: hHeap=0x1f0000) returned 1 [0235.836] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a10 | out: hHeap=0x1f0000) returned 1 [0235.836] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ac0 | out: hHeap=0x1f0000) returned 1 [0235.836] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b40 | out: hHeap=0x1f0000) returned 1 [0235.836] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a60 | out: hHeap=0x1f0000) returned 1 [0235.836] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2acb78 | out: hHeap=0x1f0000) returned 1 [0235.837] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25bbb0 | out: hHeap=0x1f0000) returned 1 [0235.837] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aef18 | out: hHeap=0x1f0000) returned 1 [0235.837] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206868 | out: hHeap=0x1f0000) returned 1 [0235.837] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f728 | out: hHeap=0x1f0000) returned 1 [0235.837] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f9c8 | out: hHeap=0x1f0000) returned 1 [0235.837] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2332f8 | out: hHeap=0x1f0000) returned 1 [0235.837] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25a8a8 | out: hHeap=0x1f0000) returned 1 [0235.838] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae1f8 | out: hHeap=0x1f0000) returned 1 [0235.838] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239198 | out: hHeap=0x1f0000) returned 1 [0235.838] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f770 | out: hHeap=0x1f0000) returned 1 [0235.838] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261b28 | out: hHeap=0x1f0000) returned 1 [0235.838] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228a28 | out: hHeap=0x1f0000) returned 1 [0235.838] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260658 | out: hHeap=0x1f0000) returned 1 [0235.838] DeleteFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jsse.jar")) returned 1 [0235.840] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1082, dwReserved0=0x0, dwReserved1=0x0, cFileName="jvm.hprof.txt", cAlternateFileName="JVMHPR~1.TXT")) returned 1 [0235.840] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260540 [0235.840] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b00a8 [0235.840] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221a98 [0235.840] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b00a8 | out: hHeap=0x1f0000) returned 1 [0235.840] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0235.840] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0235.841] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jvm.hprof.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0235.841] GetFileType (hFile=0x1d8) returned 0x1 [0235.841] CloseHandle (hObject=0x1d8) returned 1 [0235.842] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0235.842] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jvm.hprof.txt"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1082)) returned 1 [0235.842] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0235.842] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fc20 [0235.842] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jvm.hprof.txt"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1082)) returned 1 [0235.843] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fc20 | out: hHeap=0x1f0000) returned 1 [0235.843] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2203a0 [0235.843] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2203a0 | out: hHeap=0x1f0000) returned 1 [0235.843] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x997, dwReserved0=0x0, dwReserved1=0x0, cFileName="logging.properties", cAlternateFileName="LOGGIN~1.PRO")) returned 1 [0235.843] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238e88 [0235.843] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b03e8 [0235.843] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2215d8 [0235.843] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b03e8 | out: hHeap=0x1f0000) returned 1 [0235.843] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0235.844] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238e88 | out: hHeap=0x1f0000) returned 1 [0235.844] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\logging.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\logging.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0235.844] GetFileType (hFile=0x1d8) returned 0x1 [0235.845] CloseHandle (hObject=0x1d8) returned 1 [0235.845] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212a48 [0235.845] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\logging.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\logging.properties"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x997)) returned 1 [0235.846] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212a48 | out: hHeap=0x1f0000) returned 1 [0235.846] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0235.846] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\logging.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\logging.properties"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x997)) returned 1 [0235.846] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0235.846] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0235.846] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2607c0 [0235.846] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0235.847] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607c0 | out: hHeap=0x1f0000) returned 1 [0235.847] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1389711, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="management", cAlternateFileName="MANAGE~1")) returned 1 [0235.847] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0235.847] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0658 [0235.847] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220cf0 [0235.847] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0658 | out: hHeap=0x1f0000) returned 1 [0235.847] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0235.847] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0235.848] lstrcmpW (lpString1="management", lpString2=".") returned 1 [0235.848] lstrcmpW (lpString1="management", lpString2="..") returned 1 [0235.848] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fef0 [0235.848] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x17d, dwReserved0=0x0, dwReserved1=0x0, cFileName="management-agent.jar", cAlternateFileName="MANAGE~1.JAR")) returned 1 [0235.848] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c20 [0235.848] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b06c0 [0235.848] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220d88 [0235.848] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b06c0 | out: hHeap=0x1f0000) returned 1 [0235.849] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0235.849] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c20 | out: hHeap=0x1f0000) returned 1 [0235.849] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\management-agent.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management-agent.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0235.850] GetFileType (hFile=0x1d8) returned 0x1 [0235.850] CloseHandle (hObject=0x1d8) returned 1 [0235.851] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0235.851] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\management-agent.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management-agent.jar"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x17d)) returned 1 [0235.851] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0235.851] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212c68 [0235.851] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\management-agent.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management-agent.jar"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x17d)) returned 1 [0235.852] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212c68 | out: hHeap=0x1f0000) returned 1 [0235.852] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213680 [0235.852] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213680 | out: hHeap=0x1f0000) returned 1 [0236.154] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x84e, dwReserved0=0x0, dwReserved1=0x0, cFileName="meta-index", cAlternateFileName="META-I~1")) returned 1 [0236.154] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260838 [0236.154] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b08c8 [0236.154] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220e20 [0236.154] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b08c8 | out: hHeap=0x1f0000) returned 1 [0236.155] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0236.155] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260838 | out: hHeap=0x1f0000) returned 1 [0236.155] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\meta-index" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\meta-index"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0236.155] GetFileType (hFile=0x22c) returned 0x1 [0236.155] CloseHandle (hObject=0x22c) returned 1 [0236.156] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0236.156] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\meta-index" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\meta-index"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x84e)) returned 1 [0236.156] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0236.156] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21ffe0 [0236.156] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\meta-index" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\meta-index"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x84e)) returned 1 [0236.156] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ffe0 | out: hHeap=0x1f0000) returned 1 [0236.156] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220580 [0236.157] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220580 | out: hHeap=0x1f0000) returned 1 [0236.157] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1170, dwReserved0=0x0, dwReserved1=0x0, cFileName="net.properties", cAlternateFileName="NET~1.PRO")) returned 1 [0236.157] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0236.157] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0110 [0236.157] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220eb8 [0236.157] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0110 | out: hHeap=0x1f0000) returned 1 [0236.157] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0236.157] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0236.158] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\net.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\net.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0236.158] GetFileType (hFile=0x22c) returned 0x1 [0236.158] CloseHandle (hObject=0x22c) returned 1 [0236.159] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21ffe0 [0236.159] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\net.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\net.properties"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1170)) returned 1 [0236.159] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ffe0 | out: hHeap=0x1f0000) returned 1 [0236.159] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0236.159] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\net.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\net.properties"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1170)) returned 1 [0236.160] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0236.160] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0236.160] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0236.160] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0236.160] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0236.160] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8d81efe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8d81efe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8df45fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1d588b, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin.jar", cAlternateFileName="")) returned 1 [0236.160] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260888 [0236.160] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0450 [0236.161] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220d88 [0236.161] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0450 | out: hHeap=0x1f0000) returned 1 [0236.161] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0236.161] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0236.162] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\plugin.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\plugin.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0236.162] GetLastError () returned 0x2 [0236.162] GetLastError () returned 0x2 [0236.163] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xaec, dwReserved0=0x0, dwReserved1=0x0, cFileName="psfont.properties.ja", cAlternateFileName="PSFONT~1.JA")) returned 1 [0236.163] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238e50 [0236.163] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b06c0 [0236.163] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221410 [0236.163] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b06c0 | out: hHeap=0x1f0000) returned 1 [0236.163] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0236.163] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238e50 | out: hHeap=0x1f0000) returned 1 [0236.164] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\psfont.properties.ja" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfont.properties.ja"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0236.167] GetFileType (hFile=0x22c) returned 0x1 [0236.167] CloseHandle (hObject=0x22c) returned 1 [0236.168] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2132c8 [0236.168] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\psfont.properties.ja" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfont.properties.ja"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xaec)) returned 1 [0236.168] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2132c8 | out: hHeap=0x1f0000) returned 1 [0236.168] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213818 [0236.168] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\psfont.properties.ja" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfont.properties.ja"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xaec)) returned 1 [0236.168] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213818 | out: hHeap=0x1f0000) returned 1 [0236.168] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2134e8 [0236.168] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2134e8 | out: hHeap=0x1f0000) returned 1 [0236.168] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2899, dwReserved0=0x0, dwReserved1=0x0, cFileName="psfontj2d.properties", cAlternateFileName="PSFONT~1.PRO")) returned 1 [0236.168] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238d70 [0236.169] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0a00 [0236.169] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2214a8 [0236.169] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0a00 | out: hHeap=0x1f0000) returned 1 [0236.169] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0236.169] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238d70 | out: hHeap=0x1f0000) returned 1 [0236.169] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\psfontj2d.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfontj2d.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0236.170] GetFileType (hFile=0x22c) returned 0x1 [0236.170] CloseHandle (hObject=0x22c) returned 1 [0236.170] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213818 [0236.170] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\psfontj2d.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfontj2d.properties"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2899)) returned 1 [0236.170] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213818 | out: hHeap=0x1f0000) returned 1 [0236.170] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213680 [0236.170] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\psfontj2d.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfontj2d.properties"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2899)) returned 1 [0236.171] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213680 | out: hHeap=0x1f0000) returned 1 [0236.171] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0236.171] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260838 [0236.171] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0236.171] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260838 | out: hHeap=0x1f0000) returned 1 [0236.171] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xd5904d83, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x354be0, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.jar.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="RESOUR~1.ODV")) returned 1 [0236.171] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219e40 [0236.171] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0a00 [0236.171] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x21bb28 [0236.171] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0a00 | out: hHeap=0x1f0000) returned 1 [0236.171] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0236.171] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219e40 | out: hHeap=0x1f0000) returned 1 [0236.172] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\resources.jar.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\resources.jar.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0236.172] GetFileType (hFile=0x22c) returned 0x1 [0236.172] CloseHandle (hObject=0x22c) returned 1 [0236.173] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x21bc20 [0236.173] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\resources.jar.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\resources.jar.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xd5904d83, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x354be0)) returned 1 [0236.173] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21bc20 | out: hHeap=0x1f0000) returned 1 [0236.173] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x21bc20 [0236.174] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\resources.jar.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\resources.jar.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xd5904d83, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x354be0)) returned 1 [0236.174] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21bc20 | out: hHeap=0x1f0000) returned 1 [0236.174] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x21b840 [0236.174] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21b840 | out: hHeap=0x1f0000) returned 1 [0236.174] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa90a30aa, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa90a30aa, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xd62b1e80, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x340875e, dwReserved0=0x0, dwReserved1=0x0, cFileName="rt.jar.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="RTJARE~1.ODV")) returned 1 [0236.174] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0236.174] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0a68 [0236.174] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x20d9c8 [0236.174] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0a68 | out: hHeap=0x1f0000) returned 1 [0236.174] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21bb28 | out: hHeap=0x1f0000) returned 1 [0236.175] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0236.175] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\rt.jar.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\rt.jar.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0236.175] GetFileType (hFile=0x22c) returned 0x1 [0236.175] CloseHandle (hObject=0x22c) returned 1 [0236.176] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x25ffe8 [0236.176] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\rt.jar.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\rt.jar.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa90a30aa, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa90a30aa, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xd62b1e80, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x340875e)) returned 1 [0236.176] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25ffe8 | out: hHeap=0x1f0000) returned 1 [0236.176] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x25ffe8 [0236.176] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\rt.jar.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\rt.jar.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa90a30aa, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa90a30aa, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xd62b1e80, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x340875e)) returned 1 [0236.177] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25ffe8 | out: hHeap=0x1f0000) returned 1 [0236.177] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x25ffe8 [0236.177] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25ffe8 | out: hHeap=0x1f0000) returned 1 [0236.177] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1418338, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="security", cAlternateFileName="")) returned 1 [0236.177] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260838 [0236.177] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b08c8 [0236.177] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2217a0 [0236.177] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b08c8 | out: hHeap=0x1f0000) returned 1 [0236.178] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20d9c8 | out: hHeap=0x1f0000) returned 1 [0236.178] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260838 | out: hHeap=0x1f0000) returned 1 [0236.178] lstrcmpW (lpString1="security", lpString2=".") returned 1 [0236.178] lstrcmpW (lpString1="security", lpString2="..") returned 1 [0236.178] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x138) returned 0x20d9c8 [0236.178] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0236.178] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21bf68 | out: hHeap=0x1f0000) returned 1 [0236.178] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="sound.properties", cAlternateFileName="SOUND~1.PRO")) returned 1 [0236.178] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238d70 [0236.178] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0930 [0236.179] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2214a8 [0236.179] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0930 | out: hHeap=0x1f0000) returned 1 [0236.179] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0236.179] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238d70 | out: hHeap=0x1f0000) returned 1 [0236.179] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\sound.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\sound.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0236.179] GetFileType (hFile=0x22c) returned 0x1 [0236.180] CloseHandle (hObject=0x22c) returned 1 [0236.181] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0236.182] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\sound.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\sound.properties"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4ba)) returned 1 [0236.182] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0236.182] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213570 [0236.182] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\sound.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\sound.properties"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4ba)) returned 1 [0236.182] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213570 | out: hHeap=0x1f0000) returned 1 [0236.182] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2133d8 [0236.182] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260838 [0236.182] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2133d8 | out: hHeap=0x1f0000) returned 1 [0236.183] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260838 | out: hHeap=0x1f0000) returned 1 [0236.183] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x19c1c, dwReserved0=0x0, dwReserved1=0x0, cFileName="tzdb.dat", cAlternateFileName="")) returned 1 [0236.183] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260630 [0236.183] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0520 [0236.183] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220d88 [0236.183] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0520 | out: hHeap=0x1f0000) returned 1 [0236.183] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0236.183] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260630 | out: hHeap=0x1f0000) returned 1 [0236.184] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\tzdb.dat" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzdb.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0236.184] GetFileType (hFile=0x22c) returned 0x1 [0236.184] CloseHandle (hObject=0x22c) returned 1 [0236.185] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fc20 [0236.185] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\tzdb.dat" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzdb.dat"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x19c1c)) returned 1 [0236.185] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fc20 | out: hHeap=0x1f0000) returned 1 [0236.185] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21ffe0 [0236.185] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\tzdb.dat" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzdb.dat"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x19c1c)) returned 1 [0236.186] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ffe0 | out: hHeap=0x1f0000) returned 1 [0236.186] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0236.186] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0236.186] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x20d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tzmappings", cAlternateFileName="TZMAPP~1")) returned 1 [0236.186] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260838 [0236.186] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0318 [0236.186] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221a98 [0236.186] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0318 | out: hHeap=0x1f0000) returned 1 [0236.186] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0236.186] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260838 | out: hHeap=0x1f0000) returned 1 [0236.187] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\tzmappings" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzmappings"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0236.187] GetFileType (hFile=0x22c) returned 0x1 [0236.188] CloseHandle (hObject=0x22c) returned 1 [0236.188] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0236.188] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\tzmappings" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzmappings"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x20d0)) returned 1 [0236.188] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0236.188] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f770 [0236.188] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\tzmappings" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzmappings"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x20d0)) returned 1 [0236.189] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f770 | out: hHeap=0x1f0000) returned 1 [0236.189] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0236.189] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0236.189] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x20d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tzmappings", cAlternateFileName="TZMAPP~1")) returned 0 [0236.189] FindClose (in: hFindFile=0x24e680 | out: hFindFile=0x24e680) returned 1 [0236.189] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2288c0 [0236.189] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260630 [0236.189] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2634a8 [0236.190] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0318 [0236.190] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\*", lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe451d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ed40 [0236.190] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0380 [0236.190] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0318 | out: hHeap=0x1f0000) returned 1 [0236.190] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0236.190] FindNextFileW (in: hFindFile=0x24ed40, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe451d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0236.190] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0c08 [0236.190] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2217a0 [0236.190] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0c08 | out: hHeap=0x1f0000) returned 1 [0236.190] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0380 | out: hHeap=0x1f0000) returned 1 [0236.190] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0236.190] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0236.191] FindNextFileW (in: hFindFile=0x24ed40, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x27a, dwReserved0=0x0, dwReserved1=0x0, cFileName="jvm.cfg", cAlternateFileName="")) returned 1 [0236.191] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0178 [0236.191] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220e20 [0236.191] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0178 | out: hHeap=0x1f0000) returned 1 [0236.191] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0236.191] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0236.191] GetFileType (hFile=0x22c) returned 0x1 [0236.192] CloseHandle (hObject=0x22c) returned 1 [0236.192] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0236.192] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x27a)) returned 1 [0236.192] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0236.192] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2202b0 [0236.192] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x27a)) returned 1 [0236.192] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2202b0 | out: hHeap=0x1f0000) returned 1 [0236.192] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220580 [0236.192] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220580 | out: hHeap=0x1f0000) returned 1 [0236.192] FindNextFileW (in: hFindFile=0x24ed40, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x27a, dwReserved0=0x0, dwReserved1=0x0, cFileName="jvm.cfg", cAlternateFileName="")) returned 0 [0236.193] FindClose (in: hFindFile=0x24ed40 | out: hFindFile=0x24ed40) returned 1 [0236.193] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0236.193] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2634a8 | out: hHeap=0x1f0000) returned 1 [0236.193] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260630 | out: hHeap=0x1f0000) returned 1 [0236.193] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2288c0 | out: hHeap=0x1f0000) returned 1 [0236.193] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2284d0 [0236.193] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260540 [0236.193] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2634a8 [0236.193] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe00 [0236.193] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\applet\\*", lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105ca28, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e9c0 [0236.193] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b06c0 [0236.194] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221540 [0236.194] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b06c0 | out: hHeap=0x1f0000) returned 1 [0236.194] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe00 | out: hHeap=0x1f0000) returned 1 [0236.194] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0236.194] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105ca28, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0236.194] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b03e8 [0236.194] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2212e0 [0236.194] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b03e8 | out: hHeap=0x1f0000) returned 1 [0236.194] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0236.194] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0236.194] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0236.194] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105ca28, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0236.194] FindClose (in: hFindFile=0x24e9c0 | out: hFindFile=0x24e9c0) returned 1 [0236.194] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0236.195] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2634a8 | out: hHeap=0x1f0000) returned 1 [0236.195] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0236.195] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2284d0 | out: hHeap=0x1f0000) returned 1 [0236.195] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228638 [0236.195] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0236.195] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2634a8 [0236.195] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0ad0 [0236.195] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\*", lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xd5037ad5, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xd5037ad5, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ec80 [0236.195] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b08c8 [0236.195] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0ad0 | out: hHeap=0x1f0000) returned 1 [0236.195] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0236.195] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xd5037ad5, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xd5037ad5, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0236.195] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0860 [0236.196] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b08c8 | out: hHeap=0x1f0000) returned 1 [0236.196] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0236.512] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0236.512] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc824, dwReserved0=0x0, dwReserved1=0x0, cFileName="CIEXYZ.pf", cAlternateFileName="")) returned 1 [0236.512] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2607e8 [0236.513] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0248 [0236.513] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221410 [0236.513] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0248 | out: hHeap=0x1f0000) returned 1 [0236.513] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0860 | out: hHeap=0x1f0000) returned 1 [0236.513] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607e8 | out: hHeap=0x1f0000) returned 1 [0236.513] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\CIEXYZ.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\ciexyz.pf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0236.514] GetFileType (hFile=0x174) returned 0x1 [0236.514] CloseHandle (hObject=0x174) returned 1 [0236.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0236.515] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\CIEXYZ.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\ciexyz.pf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc824)) returned 1 [0236.515] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0236.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21ffe0 [0236.515] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\CIEXYZ.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\ciexyz.pf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc824)) returned 1 [0236.515] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ffe0 | out: hHeap=0x1f0000) returned 1 [0236.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21ffe0 [0236.516] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ffe0 | out: hHeap=0x1f0000) returned 1 [0236.516] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x278, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRAY.pf", cAlternateFileName="")) returned 1 [0236.516] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0520 [0236.516] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2212e0 [0236.516] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0520 | out: hHeap=0x1f0000) returned 1 [0236.516] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0236.517] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\GRAY.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\gray.pf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0236.517] GetFileType (hFile=0x174) returned 0x1 [0236.518] CloseHandle (hObject=0x174) returned 1 [0236.518] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe00 [0236.518] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\GRAY.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\gray.pf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x278)) returned 1 [0236.518] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe00 | out: hHeap=0x1f0000) returned 1 [0236.519] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0236.519] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\GRAY.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\gray.pf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x278)) returned 1 [0236.519] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0236.519] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220508 [0236.519] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220508 | out: hHeap=0x1f0000) returned 1 [0236.519] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x0, dwReserved1=0x0, cFileName="LINEAR_RGB.pf", cAlternateFileName="LINEAR~1.PF")) returned 1 [0236.519] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2607e8 [0236.519] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b01e0 [0236.519] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221b30 [0236.520] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b01e0 | out: hHeap=0x1f0000) returned 1 [0236.520] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0236.520] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607e8 | out: hHeap=0x1f0000) returned 1 [0236.521] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\LINEAR_RGB.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\linear_rgb.pf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0236.521] GetFileType (hFile=0x174) returned 0x1 [0236.521] CloseHandle (hObject=0x174) returned 1 [0236.522] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f10 [0236.522] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\LINEAR_RGB.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\linear_rgb.pf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x414)) returned 1 [0236.522] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f10 | out: hHeap=0x1f0000) returned 1 [0236.522] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213570 [0236.522] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\LINEAR_RGB.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\linear_rgb.pf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x414)) returned 1 [0236.523] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213570 | out: hHeap=0x1f0000) returned 1 [0236.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212c68 [0236.523] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212c68 | out: hHeap=0x1f0000) returned 1 [0236.523] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd430017b, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xd430017b, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xd501160f, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x4313d, dwReserved0=0x0, dwReserved1=0x0, cFileName="PYCC.pf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="PYCCPF~1.ODV")) returned 1 [0236.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0236.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0a00 [0236.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x21b460 [0236.524] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0a00 | out: hHeap=0x1f0000) returned 1 [0236.524] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0236.524] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0236.584] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\pycc.pf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0236.584] GetFileType (hFile=0x174) returned 0x1 [0236.585] CloseHandle (hObject=0x174) returned 1 [0236.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x21b650 [0236.586] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\pycc.pf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd430017b, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xd430017b, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xd501160f, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x4313d)) returned 1 [0236.587] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21b650 | out: hHeap=0x1f0000) returned 1 [0236.587] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x21bc20 [0236.588] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\pycc.pf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd430017b, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xd430017b, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xd501160f, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x4313d)) returned 1 [0236.588] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21bc20 | out: hHeap=0x1f0000) returned 1 [0236.588] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x21bc20 [0236.588] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21bc20 | out: hHeap=0x1f0000) returned 1 [0236.588] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc48, dwReserved0=0x0, dwReserved1=0x0, cFileName="sRGB.pf", cAlternateFileName="")) returned 1 [0236.588] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0c70 [0236.588] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220eb8 [0236.588] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0c70 | out: hHeap=0x1f0000) returned 1 [0236.588] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21b460 | out: hHeap=0x1f0000) returned 1 [0236.589] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\sRGB.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\srgb.pf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0236.589] GetFileType (hFile=0x174) returned 0x1 [0236.590] CloseHandle (hObject=0x174) returned 1 [0236.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fc20 [0236.590] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\sRGB.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\srgb.pf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc48)) returned 1 [0236.590] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fc20 | out: hHeap=0x1f0000) returned 1 [0236.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f770 [0236.590] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\sRGB.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\srgb.pf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc48)) returned 1 [0236.591] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f770 | out: hHeap=0x1f0000) returned 1 [0236.591] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21ffe0 [0236.591] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ffe0 | out: hHeap=0x1f0000) returned 1 [0236.591] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc48, dwReserved0=0x0, dwReserved1=0x0, cFileName="sRGB.pf", cAlternateFileName="")) returned 0 [0236.591] FindClose (in: hFindFile=0x24ec80 | out: hFindFile=0x24ec80) returned 1 [0236.591] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0236.591] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2634a8 | out: hHeap=0x1f0000) returned 1 [0236.592] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0236.592] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228638 | out: hHeap=0x1f0000) returned 1 [0236.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2285a8 [0236.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2607e8 [0236.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2634a8 [0236.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fc20 [0236.592] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\*", lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa10e432c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ed00 [0236.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0588 [0236.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220d88 [0236.593] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0588 | out: hHeap=0x1f0000) returned 1 [0236.593] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fc20 | out: hHeap=0x1f0000) returned 1 [0236.593] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0236.593] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa10e432c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0236.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0248 [0236.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221410 [0236.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0248 | out: hHeap=0x1f0000) returned 1 [0236.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0236.594] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0236.594] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0236.594] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x374c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ffjcext.zip", cAlternateFileName="")) returned 1 [0236.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0236.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b01e0 [0236.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2212e0 [0236.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b01e0 | out: hHeap=0x1f0000) returned 1 [0236.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0236.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0236.595] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0236.595] GetFileType (hFile=0x174) returned 0x1 [0236.596] CloseHandle (hObject=0x174) returned 1 [0236.596] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e88 [0236.596] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x374c)) returned 1 [0236.596] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e88 | out: hHeap=0x1f0000) returned 1 [0236.596] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0236.596] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x374c)) returned 1 [0236.597] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0236.597] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0236.597] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0236.597] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xb2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.properties", cAlternateFileName="MESSAG~1.PRO")) returned 1 [0236.597] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238de0 [0236.597] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0a00 [0236.597] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0236.597] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0a00 | out: hHeap=0x1f0000) returned 1 [0236.597] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0236.597] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238de0 | out: hHeap=0x1f0000) returned 1 [0236.598] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0236.598] GetFileType (hFile=0x174) returned 0x1 [0236.598] CloseHandle (hObject=0x174) returned 1 [0236.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0236.599] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages.properties"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xb2c)) returned 1 [0236.599] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0236.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0236.599] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages.properties"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xb2c)) returned 1 [0236.599] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0236.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0236.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260900 [0236.599] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0236.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260900 | out: hHeap=0x1f0000) returned 1 [0236.600] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xcea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_de.properties", cAlternateFileName="MESSAG~2.PRO")) returned 1 [0236.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c20 [0236.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0110 [0236.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0236.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0110 | out: hHeap=0x1f0000) returned 1 [0236.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0236.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c20 | out: hHeap=0x1f0000) returned 1 [0236.601] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0236.601] GetFileType (hFile=0x174) returned 0x1 [0236.601] CloseHandle (hObject=0x174) returned 1 [0236.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0236.601] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xcea)) returned 1 [0236.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0236.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0236.602] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xcea)) returned 1 [0236.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0236.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0236.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0236.603] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0236.603] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0236.603] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xe10, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_es.properties", cAlternateFileName="MESSAG~3.PRO")) returned 1 [0236.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239048 [0236.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0588 [0236.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0236.603] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0588 | out: hHeap=0x1f0000) returned 1 [0236.603] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0236.603] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239048 | out: hHeap=0x1f0000) returned 1 [0236.604] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0236.604] GetFileType (hFile=0x174) returned 0x1 [0236.604] CloseHandle (hObject=0x174) returned 1 [0236.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0236.604] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xe10)) returned 1 [0236.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0236.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0236.605] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xe10)) returned 1 [0236.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0236.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0236.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0236.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0236.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0236.605] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xd51, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_fr.properties", cAlternateFileName="MESSAG~4.PRO")) returned 1 [0236.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238cc8 [0236.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0658 [0236.606] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0236.606] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0658 | out: hHeap=0x1f0000) returned 1 [0236.606] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0236.606] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238cc8 | out: hHeap=0x1f0000) returned 1 [0236.606] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0236.607] GetFileType (hFile=0x174) returned 0x1 [0236.607] CloseHandle (hObject=0x174) returned 1 [0236.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0236.607] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xd51)) returned 1 [0236.607] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0236.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0236.607] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xd51)) returned 1 [0236.608] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0236.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0236.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0236.608] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0236.608] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0236.608] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc97, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_it.properties", cAlternateFileName="MEC9EA~1.PRO")) returned 1 [0236.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2390f0 [0236.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0110 [0236.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0236.608] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0110 | out: hHeap=0x1f0000) returned 1 [0236.608] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0236.608] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2390f0 | out: hHeap=0x1f0000) returned 1 [0236.609] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0236.609] GetFileType (hFile=0x174) returned 0x1 [0236.610] CloseHandle (hObject=0x174) returned 1 [0236.610] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0236.610] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc97)) returned 1 [0236.610] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0236.610] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0236.610] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc97)) returned 1 [0236.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0236.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0236.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260900 [0236.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0236.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260900 | out: hHeap=0x1f0000) returned 1 [0236.611] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x18cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_ja.properties", cAlternateFileName="ME4AF1~1.PRO")) returned 1 [0236.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238e88 [0236.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b03e8 [0236.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0236.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b03e8 | out: hHeap=0x1f0000) returned 1 [0236.612] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0236.612] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238e88 | out: hHeap=0x1f0000) returned 1 [0236.612] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0236.612] GetFileType (hFile=0x174) returned 0x1 [0236.613] CloseHandle (hObject=0x174) returned 1 [0236.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0236.613] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x18cd)) returned 1 [0236.613] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0236.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0236.614] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x18cd)) returned 1 [0236.614] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0236.614] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0236.614] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0236.614] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0236.614] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0236.614] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1650, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_ko.properties", cAlternateFileName="ME1706~1.PRO")) returned 1 [0236.614] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c20 [0236.614] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0588 [0236.614] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0236.615] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0588 | out: hHeap=0x1f0000) returned 1 [0236.615] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0236.615] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c20 | out: hHeap=0x1f0000) returned 1 [0236.615] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0236.616] GetFileType (hFile=0x174) returned 0x1 [0236.616] CloseHandle (hObject=0x174) returned 1 [0236.616] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0236.616] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1650)) returned 1 [0236.617] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0236.617] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0236.617] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1650)) returned 1 [0236.617] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0236.617] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0236.617] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0236.617] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0236.617] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0236.931] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xcd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_pt_BR.properties", cAlternateFileName="MED1E1~1.PRO")) returned 1 [0236.932] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2286c8 [0236.932] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0110 [0236.932] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a8c0 [0236.932] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0110 | out: hHeap=0x1f0000) returned 1 [0236.932] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0236.932] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2286c8 | out: hHeap=0x1f0000) returned 1 [0236.933] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_pt_BR.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_pt_br.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0236.933] GetFileType (hFile=0x230) returned 0x1 [0236.934] CloseHandle (hObject=0x230) returned 1 [0236.934] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a6c8 [0236.934] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_pt_BR.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_pt_br.properties"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xcd5)) returned 1 [0236.934] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a6c8 | out: hHeap=0x1f0000) returned 1 [0236.934] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a188 [0236.934] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_pt_BR.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_pt_br.properties"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xcd5)) returned 1 [0236.934] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a188 | out: hHeap=0x1f0000) returned 1 [0236.935] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a578 [0236.935] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608b0 [0236.935] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a578 | out: hHeap=0x1f0000) returned 1 [0236.935] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608b0 | out: hHeap=0x1f0000) returned 1 [0236.935] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xd51, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_sv.properties", cAlternateFileName="ME0541~1.PRO")) returned 1 [0236.935] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238e88 [0236.935] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0c70 [0236.935] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0236.935] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0c70 | out: hHeap=0x1f0000) returned 1 [0236.935] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a8c0 | out: hHeap=0x1f0000) returned 1 [0236.935] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238e88 | out: hHeap=0x1f0000) returned 1 [0236.936] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0236.936] GetFileType (hFile=0x230) returned 0x1 [0236.937] CloseHandle (hObject=0x230) returned 1 [0236.937] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0236.938] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xd51)) returned 1 [0236.938] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0236.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0236.938] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xd51)) returned 1 [0236.938] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0236.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0236.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605b8 [0236.939] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0236.939] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0236.939] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xfe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_zh_CN.properties", cAlternateFileName="ME40CD~1.PRO")) returned 1 [0236.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2286c8 [0236.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0b38 [0236.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a818 [0236.940] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0b38 | out: hHeap=0x1f0000) returned 1 [0236.940] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0236.940] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2286c8 | out: hHeap=0x1f0000) returned 1 [0236.940] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_CN.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_cn.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0236.940] GetFileType (hFile=0x230) returned 0x1 [0236.941] CloseHandle (hObject=0x230) returned 1 [0236.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219d98 [0236.941] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_CN.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_cn.properties"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xfe8)) returned 1 [0236.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219d98 | out: hHeap=0x1f0000) returned 1 [0236.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a188 [0236.942] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_CN.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_cn.properties"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xfe8)) returned 1 [0236.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a188 | out: hHeap=0x1f0000) returned 1 [0236.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a4d0 [0236.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0236.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a4d0 | out: hHeap=0x1f0000) returned 1 [0236.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0236.942] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_zh_HK.properties", cAlternateFileName="MEB8B5~1.PRO")) returned 1 [0236.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228a28 [0236.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0520 [0236.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21aab8 [0236.943] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0520 | out: hHeap=0x1f0000) returned 1 [0236.943] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a818 | out: hHeap=0x1f0000) returned 1 [0236.943] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228a28 | out: hHeap=0x1f0000) returned 1 [0236.944] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_HK.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_hk.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0236.944] GetFileType (hFile=0x230) returned 0x1 [0236.945] CloseHandle (hObject=0x230) returned 1 [0236.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a818 [0236.946] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_HK.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_hk.properties"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xea8)) returned 1 [0236.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a818 | out: hHeap=0x1f0000) returned 1 [0236.956] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a818 [0236.956] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_HK.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_hk.properties"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xea8)) returned 1 [0236.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a818 | out: hHeap=0x1f0000) returned 1 [0236.956] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219d98 [0236.956] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605b8 [0236.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219d98 | out: hHeap=0x1f0000) returned 1 [0236.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0236.956] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_zh_TW.properties", cAlternateFileName="MECC18~1.PRO")) returned 1 [0236.957] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2286c8 [0236.957] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0b38 [0236.957] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a4d0 [0236.957] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0b38 | out: hHeap=0x1f0000) returned 1 [0236.957] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21aab8 | out: hHeap=0x1f0000) returned 1 [0236.957] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2286c8 | out: hHeap=0x1f0000) returned 1 [0236.957] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_TW.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_tw.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0236.958] GetFileType (hFile=0x230) returned 0x1 [0236.958] CloseHandle (hObject=0x230) returned 1 [0236.958] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a2d8 [0236.958] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_TW.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_tw.properties"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xea8)) returned 1 [0236.959] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a2d8 | out: hHeap=0x1f0000) returned 1 [0236.959] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a818 [0236.959] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_TW.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_tw.properties"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xea8)) returned 1 [0236.959] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a818 | out: hHeap=0x1f0000) returned 1 [0236.959] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a8c0 [0236.959] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605b8 [0236.959] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a8c0 | out: hHeap=0x1f0000) returned 1 [0236.959] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0236.959] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x218e, dwReserved0=0x0, dwReserved1=0x0, cFileName="splash.gif", cAlternateFileName="")) returned 1 [0236.959] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608b0 [0236.959] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0450 [0236.959] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2218d0 [0236.959] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0450 | out: hHeap=0x1f0000) returned 1 [0236.959] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a4d0 | out: hHeap=0x1f0000) returned 1 [0236.960] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608b0 | out: hHeap=0x1f0000) returned 1 [0236.960] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0236.960] GetFileType (hFile=0x230) returned 0x1 [0236.960] CloseHandle (hObject=0x230) returned 1 [0236.960] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2133d8 [0236.960] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x218e)) returned 1 [0236.961] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2133d8 | out: hHeap=0x1f0000) returned 1 [0236.961] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213818 [0236.961] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x218e)) returned 1 [0236.961] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213818 | out: hHeap=0x1f0000) returned 1 [0236.961] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0236.961] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0236.961] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3bac, dwReserved0=0x0, dwReserved1=0x0, cFileName="splash@2x.gif", cAlternateFileName="SPLASH~1.GIF")) returned 1 [0236.961] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608b0 [0236.961] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0ad0 [0236.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2214a8 [0236.962] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0ad0 | out: hHeap=0x1f0000) returned 1 [0236.962] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0236.962] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608b0 | out: hHeap=0x1f0000) returned 1 [0236.962] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0236.962] GetFileType (hFile=0x230) returned 0x1 [0236.963] CloseHandle (hObject=0x230) returned 1 [0236.963] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213570 [0236.963] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3bac)) returned 1 [0236.963] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213570 | out: hHeap=0x1f0000) returned 1 [0236.963] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2133d8 [0236.963] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3bac)) returned 1 [0236.963] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2133d8 | out: hHeap=0x1f0000) returned 1 [0236.963] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0236.963] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0236.963] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1e7d, dwReserved0=0x0, dwReserved1=0x0, cFileName="splash_11-lic.gif", cAlternateFileName="SPLASH~2.GIF")) returned 1 [0236.964] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238e88 [0236.964] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b00a8 [0236.964] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0236.964] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b00a8 | out: hHeap=0x1f0000) returned 1 [0236.964] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0236.964] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238e88 | out: hHeap=0x1f0000) returned 1 [0236.964] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0236.964] GetFileType (hFile=0x230) returned 0x1 [0236.965] CloseHandle (hObject=0x230) returned 1 [0236.965] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0236.965] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1e7d)) returned 1 [0236.965] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0236.965] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0236.965] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1e7d)) returned 1 [0236.965] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0236.965] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0236.965] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0236.965] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2fda, dwReserved0=0x0, dwReserved1=0x0, cFileName="splash_11@2x-lic.gif", cAlternateFileName="SPLASH~3.GIF")) returned 1 [0236.965] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238e18 [0236.966] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0c70 [0236.966] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0236.966] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0c70 | out: hHeap=0x1f0000) returned 1 [0236.966] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0236.966] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238e18 | out: hHeap=0x1f0000) returned 1 [0236.966] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0236.966] GetFileType (hFile=0x230) returned 0x1 [0236.967] CloseHandle (hObject=0x230) returned 1 [0236.967] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0236.967] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2fda)) returned 1 [0236.967] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0236.967] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0236.967] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2fda)) returned 1 [0236.968] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0236.968] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0236.968] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0236.968] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2fda, dwReserved0=0x0, dwReserved1=0x0, cFileName="splash_11@2x-lic.gif", cAlternateFileName="SPLASH~3.GIF")) returned 0 [0236.968] FindClose (in: hFindFile=0x24ed00 | out: hFindFile=0x24ed00) returned 1 [0236.968] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0236.968] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2634a8 | out: hHeap=0x1f0000) returned 1 [0236.968] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607e8 | out: hHeap=0x1f0000) returned 1 [0236.968] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2285a8 | out: hHeap=0x1f0000) returned 1 [0236.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2286c8 [0236.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605b8 [0236.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2634a8 [0236.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0c70 [0236.969] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\*", lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xd6b0a135, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xd6b0a135, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e9c0 [0236.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0860 [0236.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0c70 | out: hHeap=0x1f0000) returned 1 [0236.969] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0236.969] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xd6b0a135, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xd6b0a135, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0236.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0930 [0236.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0860 | out: hHeap=0x1f0000) returned 1 [0236.970] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0236.970] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0236.970] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2de78, dwReserved0=0x0, dwReserved1=0x0, cFileName="access-bridge-64.jar", cAlternateFileName="ACCESS~1.JAR")) returned 1 [0236.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238cc8 [0236.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0178 [0236.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0236.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0178 | out: hHeap=0x1f0000) returned 1 [0236.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0930 | out: hHeap=0x1f0000) returned 1 [0236.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238cc8 | out: hHeap=0x1f0000) returned 1 [0236.971] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0236.971] GetFileType (hFile=0x230) returned 0x1 [0236.971] CloseHandle (hObject=0x230) returned 1 [0236.972] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0236.972] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2de78)) returned 1 [0236.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0236.972] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0236.972] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2de78)) returned 1 [0236.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0236.972] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0236.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0236.972] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xd6ae3e9e, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x3ae919, dwReserved0=0x0, dwReserved1=0x0, cFileName="cldrdata.jar.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="CLDRDA~1.ODV")) returned 1 [0236.972] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219d98 [0236.972] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0790 [0236.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2857d0 [0236.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0790 | out: hHeap=0x1f0000) returned 1 [0236.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0236.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219d98 | out: hHeap=0x1f0000) returned 1 [0236.973] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0236.974] GetFileType (hFile=0x230) returned 0x1 [0236.974] CloseHandle (hObject=0x230) returned 1 [0236.975] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2856c8 [0236.975] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xd6ae3e9e, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x3ae919)) returned 1 [0236.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2856c8 | out: hHeap=0x1f0000) returned 1 [0236.975] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2859e0 [0236.975] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xd6ae3e9e, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x3ae919)) returned 1 [0236.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2859e0 | out: hHeap=0x1f0000) returned 1 [0236.975] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2859e0 [0236.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2859e0 | out: hHeap=0x1f0000) returned 1 [0236.975] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bb82c9, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8bb82c9, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8bb82c9, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x205e, dwReserved0=0x0, dwReserved1=0x0, cFileName="dnsns.jar", cAlternateFileName="")) returned 1 [0236.975] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2607e8 [0236.975] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0ba0 [0236.975] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221118 [0236.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0ba0 | out: hHeap=0x1f0000) returned 1 [0236.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2857d0 | out: hHeap=0x1f0000) returned 1 [0236.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607e8 | out: hHeap=0x1f0000) returned 1 [0236.976] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\dnsns.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0236.976] GetFileType (hFile=0x230) returned 0x1 [0236.977] CloseHandle (hObject=0x230) returned 1 [0237.368] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0237.368] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\dnsns.jar"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bb82c9, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8bb82c9, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8bb82c9, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x205e)) returned 1 [0237.369] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0237.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0237.369] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\dnsns.jar"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bb82c9, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8bb82c9, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8bb82c9, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x205e)) returned 1 [0237.369] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0237.370] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220508 [0237.370] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220508 | out: hHeap=0x1f0000) returned 1 [0237.370] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bb82c9, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8bb82c9, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8bb82c9, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xade4, dwReserved0=0x0, dwReserved1=0x0, cFileName="jaccess.jar", cAlternateFileName="")) returned 1 [0237.370] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0237.370] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b08c8 [0237.370] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221540 [0237.371] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b08c8 | out: hHeap=0x1f0000) returned 1 [0237.371] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0237.371] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0237.372] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jaccess.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0237.372] GetFileType (hFile=0x1f4) returned 0x1 [0237.373] CloseHandle (hObject=0x1f4) returned 1 [0237.374] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220508 [0237.374] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jaccess.jar"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bb82c9, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8bb82c9, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8bb82c9, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xade4)) returned 1 [0237.374] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220508 | out: hHeap=0x1f0000) returned 1 [0237.374] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd88 [0237.375] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jaccess.jar"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bb82c9, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8bb82c9, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8bb82c9, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xade4)) returned 1 [0237.375] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd88 | out: hHeap=0x1f0000) returned 1 [0237.375] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0237.375] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0237.375] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bb82c9, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8bb82c9, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xd6b7c6c3, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x1166a99, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfxrt.jar", cAlternateFileName="")) returned 1 [0237.375] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260540 [0237.376] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0728 [0237.376] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2212e0 [0237.376] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0728 | out: hHeap=0x1f0000) returned 1 [0237.376] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0237.376] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0237.377] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0237.377] GetLastError () returned 0x2 [0237.377] GetLastError () returned 0x2 [0237.378] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa8546b2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xaa8546b2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xaa8ed01b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x21a46d, dwReserved0=0x0, dwReserved1=0x0, cFileName="localedata.jar", cAlternateFileName="LOCALE~1.JAR")) returned 1 [0237.378] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0237.378] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0520 [0237.378] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221410 [0237.378] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0520 | out: hHeap=0x1f0000) returned 1 [0237.379] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0237.379] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0237.379] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\localedata.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0237.380] GetLastError () returned 0x2 [0237.380] GetLastError () returned 0x2 [0237.380] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="meta-index", cAlternateFileName="META-I~1")) returned 1 [0237.380] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604c8 [0237.380] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0178 [0237.380] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221670 [0237.381] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0178 | out: hHeap=0x1f0000) returned 1 [0237.381] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0237.381] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604c8 | out: hHeap=0x1f0000) returned 1 [0237.382] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\meta-index"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0237.382] GetFileType (hFile=0x1f4) returned 0x1 [0237.382] CloseHandle (hObject=0x1f4) returned 1 [0237.383] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0237.383] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\meta-index"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5b5)) returned 1 [0237.384] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0237.384] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0237.384] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\meta-index"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5b5)) returned 1 [0237.384] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0237.384] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0237.385] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0237.385] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1edd4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="nashorn.jar", cAlternateFileName="")) returned 1 [0237.385] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0237.385] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0a00 [0237.385] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221b30 [0237.385] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0a00 | out: hHeap=0x1f0000) returned 1 [0237.385] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0237.385] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0237.386] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\nashorn.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0237.387] GetFileType (hFile=0x1f4) returned 0x1 [0237.387] CloseHandle (hObject=0x1f4) returned 1 [0237.388] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0237.388] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\nashorn.jar"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xd6fa88e7, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x1edd4e)) returned 1 [0237.388] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0237.388] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fc20 [0237.388] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\nashorn.jar"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xd6fa88e7, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x1edd4e)) returned 1 [0237.389] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fc20 | out: hHeap=0x1f0000) returned 1 [0237.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe00 [0237.389] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe00 | out: hHeap=0x1f0000) returned 1 [0237.389] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xa4c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunec.jar", cAlternateFileName="")) returned 1 [0237.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260888 [0237.390] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0b38 [0237.390] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220c58 [0237.390] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0b38 | out: hHeap=0x1f0000) returned 1 [0237.390] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0237.390] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0237.391] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunec.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0237.391] GetFileType (hFile=0x1f4) returned 0x1 [0237.392] CloseHandle (hObject=0x1f4) returned 1 [0237.393] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f770 [0237.393] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunec.jar"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xa4c9)) returned 1 [0237.393] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f770 | out: hHeap=0x1f0000) returned 1 [0237.393] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0237.393] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunec.jar"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xa4c9)) returned 1 [0237.394] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0237.394] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21ffe0 [0237.394] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ffe0 | out: hHeap=0x1f0000) returned 1 [0237.394] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5ef8416, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xd5ef8416, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xd6514491, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x44774, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunjce_provider.jar.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="SUNJCE~1.ODV")) returned 1 [0237.394] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2acfc0 [0237.394] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b00a8 [0237.394] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2857d0 [0237.395] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b00a8 | out: hHeap=0x1f0000) returned 1 [0237.395] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0237.395] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2acfc0 | out: hHeap=0x1f0000) returned 1 [0237.396] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0237.396] GetFileType (hFile=0x1f4) returned 0x1 [0237.396] CloseHandle (hObject=0x1f4) returned 1 [0237.397] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2853b0 [0237.397] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5ef8416, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xd5ef8416, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xd6514491, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x44774)) returned 1 [0237.397] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2853b0 | out: hHeap=0x1f0000) returned 1 [0237.397] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2856c8 [0237.398] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5ef8416, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xd5ef8416, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xd6514491, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x44774)) returned 1 [0237.398] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2856c8 | out: hHeap=0x1f0000) returned 1 [0237.398] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285cf8 [0237.398] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285cf8 | out: hHeap=0x1f0000) returned 1 [0237.398] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7fbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunmscapi.jar", cAlternateFileName="SUNMSC~1.JAR")) returned 1 [0237.398] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260888 [0237.398] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b00a8 [0237.398] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221410 [0237.399] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b00a8 | out: hHeap=0x1f0000) returned 1 [0237.399] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2857d0 | out: hHeap=0x1f0000) returned 1 [0237.399] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0237.400] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0237.400] GetFileType (hFile=0x1f4) returned 0x1 [0237.401] CloseHandle (hObject=0x1f4) returned 1 [0237.401] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0237.401] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7fbb)) returned 1 [0237.401] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0237.401] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212c68 [0237.402] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7fbb)) returned 1 [0237.402] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212c68 | out: hHeap=0x1f0000) returned 1 [0237.402] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0237.402] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0237.402] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3d5bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunpkcs11.jar", cAlternateFileName="SUNPKC~1.JAR")) returned 1 [0237.402] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0237.402] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0520 [0237.402] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221670 [0237.402] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0520 | out: hHeap=0x1f0000) returned 1 [0237.402] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0237.402] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0237.403] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0237.403] GetFileType (hFile=0x1f4) returned 0x1 [0237.404] CloseHandle (hObject=0x1f4) returned 1 [0237.404] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0237.404] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3d5bf)) returned 1 [0237.405] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0237.405] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213570 [0237.405] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3d5bf)) returned 1 [0237.405] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213570 | out: hHeap=0x1f0000) returned 1 [0237.405] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212be0 [0237.405] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212be0 | out: hHeap=0x1f0000) returned 1 [0237.405] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x10d3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="zipfs.jar", cAlternateFileName="")) returned 1 [0237.405] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0237.405] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b00a8 [0237.405] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221b30 [0237.405] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b00a8 | out: hHeap=0x1f0000) returned 1 [0237.405] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0237.406] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0237.406] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\zipfs.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0237.406] GetFileType (hFile=0x1f4) returned 0x1 [0237.408] CloseHandle (hObject=0x1f4) returned 1 [0237.408] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2201c0 [0237.408] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\zipfs.jar"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x10d3c)) returned 1 [0237.408] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2201c0 | out: hHeap=0x1f0000) returned 1 [0237.409] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f770 [0237.409] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\zipfs.jar"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x10d3c)) returned 1 [0237.409] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f770 | out: hHeap=0x1f0000) returned 1 [0237.409] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0237.409] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0237.409] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x10d3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="zipfs.jar", cAlternateFileName="")) returned 0 [0237.409] FindClose (in: hFindFile=0x24e9c0 | out: hFindFile=0x24e9c0) returned 1 [0237.410] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0237.410] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2634a8 | out: hHeap=0x1f0000) returned 1 [0237.410] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0237.410] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2286c8 | out: hHeap=0x1f0000) returned 1 [0237.410] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228830 [0237.410] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0237.410] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x263310 [0237.410] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0380 [0237.410] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\*", lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa122f229, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd68f41a4, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e9c0 [0237.410] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b02b0 [0237.411] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0380 | out: hHeap=0x1f0000) returned 1 [0237.411] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0237.411] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa122f229, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd68f41a4, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0237.411] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0588 [0237.411] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221410 [0237.411] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0588 | out: hHeap=0x1f0000) returned 1 [0237.411] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b02b0 | out: hHeap=0x1f0000) returned 1 [0237.411] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0237.411] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0237.411] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x12588, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaBrightDemiBold.ttf", cAlternateFileName="LUCIDA~1.TTF")) returned 1 [0237.411] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228a70 [0237.411] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0a68 [0237.411] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0237.412] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0a68 | out: hHeap=0x1f0000) returned 1 [0237.412] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0237.412] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228a70 | out: hHeap=0x1f0000) returned 1 [0237.412] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemibold.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0237.412] GetFileType (hFile=0x1f4) returned 0x1 [0237.413] CloseHandle (hObject=0x1f4) returned 1 [0237.413] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0237.413] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemibold.ttf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x12588)) returned 1 [0237.413] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0237.413] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0237.413] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemibold.ttf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x12588)) returned 1 [0237.413] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0237.413] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0237.414] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0237.414] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x12574, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaBrightDemiItalic.ttf", cAlternateFileName="LUCIDA~2.TTF")) returned 1 [0237.414] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228878 [0237.414] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0380 [0237.414] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a4d0 [0237.414] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0380 | out: hHeap=0x1f0000) returned 1 [0237.414] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0237.414] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228878 | out: hHeap=0x1f0000) returned 1 [0237.414] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiItalic.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemiitalic.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0237.761] GetFileType (hFile=0x220) returned 0x1 [0237.761] CloseHandle (hObject=0x220) returned 1 [0237.761] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a620 [0237.762] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiItalic.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemiitalic.ttf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x12574)) returned 1 [0237.762] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a620 | out: hHeap=0x1f0000) returned 1 [0237.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a230 [0237.762] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiItalic.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemiitalic.ttf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x12574)) returned 1 [0237.762] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a230 | out: hHeap=0x1f0000) returned 1 [0237.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a770 [0237.762] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a770 | out: hHeap=0x1f0000) returned 1 [0237.762] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13bd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaBrightItalic.ttf", cAlternateFileName="LUCIDA~3.TTF")) returned 1 [0237.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c58 [0237.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b00a8 [0237.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0237.763] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b00a8 | out: hHeap=0x1f0000) returned 1 [0237.763] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a4d0 | out: hHeap=0x1f0000) returned 1 [0237.763] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c58 | out: hHeap=0x1f0000) returned 1 [0237.763] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightItalic.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightitalic.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0237.763] GetFileType (hFile=0x220) returned 0x1 [0237.764] CloseHandle (hObject=0x220) returned 1 [0237.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0237.764] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightItalic.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightitalic.ttf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13bd8)) returned 1 [0237.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0237.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0237.764] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightItalic.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightitalic.ttf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13bd8)) returned 1 [0237.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0237.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0237.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0237.764] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xd6c87a85, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x1, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaBrightRegular.ttf", cAlternateFileName="LUCIDA~4.TTF")) returned 1 [0237.765] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238e88 [0237.765] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0520 [0237.765] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0237.765] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0520 | out: hHeap=0x1f0000) returned 1 [0237.765] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0237.765] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238e88 | out: hHeap=0x1f0000) returned 1 [0237.766] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightregular.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0238.000] GetLastError () returned 0x2 [0238.000] GetLastError () returned 0x2 [0238.000] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd68f41a4, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xd68f41a4, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xd691a1ea, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x5435c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaBrightRegular.ttf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="LUCIDA~1.ODV")) returned 1 [0238.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2acfc0 [0238.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0a68 [0238.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x2aee00 [0238.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0a68 | out: hHeap=0x1f0000) returned 1 [0238.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0238.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2acfc0 | out: hHeap=0x1f0000) returned 1 [0238.002] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightregular.ttf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0238.002] GetFileType (hFile=0x1d8) returned 0x1 [0238.002] CloseHandle (hObject=0x1d8) returned 1 [0238.003] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x2ae310 [0238.003] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightregular.ttf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd68f41a4, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xd68f41a4, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xd70b3c9c, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x5445f)) returned 1 [0238.003] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae310 | out: hHeap=0x1f0000) returned 1 [0238.003] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x2ae310 [0238.003] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightregular.ttf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd68f41a4, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xd68f41a4, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xd70b3c9c, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x5445f)) returned 1 [0238.004] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae310 | out: hHeap=0x1f0000) returned 1 [0238.004] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x2ae310 [0238.004] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae310 | out: hHeap=0x1f0000) returned 1 [0238.004] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4d9c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaSansDemiBold.ttf", cAlternateFileName="LU38C7~1.TTF")) returned 1 [0238.004] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238f68 [0238.004] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b00a8 [0238.004] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0238.004] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b00a8 | out: hHeap=0x1f0000) returned 1 [0238.004] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aee00 | out: hHeap=0x1f0000) returned 1 [0238.004] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238f68 | out: hHeap=0x1f0000) returned 1 [0238.005] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansdemibold.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0238.005] GetFileType (hFile=0x1d8) returned 0x1 [0238.006] CloseHandle (hObject=0x1d8) returned 1 [0238.006] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0238.006] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansdemibold.ttf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4d9c8)) returned 1 [0238.006] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0238.006] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0238.006] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansdemibold.ttf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4d9c8)) returned 1 [0238.006] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0238.007] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0238.007] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0238.007] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xaa77c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaSansRegular.ttf", cAlternateFileName="LU761B~1.TTF")) returned 1 [0238.007] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2391d0 [0238.007] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b06c0 [0238.007] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0238.007] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b06c0 | out: hHeap=0x1f0000) returned 1 [0238.007] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0238.007] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2391d0 | out: hHeap=0x1f0000) returned 1 [0238.008] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansregular.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0238.008] GetFileType (hFile=0x1d8) returned 0x1 [0238.008] CloseHandle (hObject=0x1d8) returned 1 [0238.009] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0238.009] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansregular.ttf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xaa77c)) returned 1 [0238.009] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0238.009] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0238.009] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansregular.ttf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xaa77c)) returned 1 [0238.009] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0238.010] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0238.010] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0238.010] GetLastError () returned 0x0 [0238.010] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604c8 [0238.010] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2284d0 [0238.010] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x261b28 [0238.010] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0238.011] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239208 [0238.011] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0238.011] CryptAcquireContextA (in: phProv=0x1cfd6d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1cfd6d8*=0x213818) returned 1 [0238.012] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x260748 | out: pbBuffer=0x260748) returned 1 [0238.012] CryptReleaseContext (hProv=0x213818, dwFlags=0x0) returned 1 [0238.012] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0238.012] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x26d4c0 [0238.012] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2af6c0 [0238.012] QueryPerformanceCounter (in: lpPerformanceCount=0x1cfd66c | out: lpPerformanceCount=0x1cfd66c*=39538120502) returned 1 [0238.012] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1cfd6ac | out: lpSystemTimeAsFileTime=0x1cfd6ac) [0238.013] QueryPerformanceCounter (in: lpPerformanceCount=0x1cfd66c | out: lpPerformanceCount=0x1cfd66c*=39538151782) returned 1 [0238.013] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1cfd6ac | out: lpSystemTimeAsFileTime=0x1cfd6ac) [0238.013] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x2390f0 [0238.013] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x26fad0 [0238.013] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2ae770 [0238.013] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x233638 [0238.013] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f7b8 [0238.013] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206628 [0238.013] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f788 [0238.013] GetLastError () returned 0x0 [0238.014] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a038 [0238.014] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xee) returned 0x21bb28 [0238.014] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a038 | out: hHeap=0x1f0000) returned 1 [0238.014] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x164) returned 0x22b018 [0238.014] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21bb28 | out: hHeap=0x1f0000) returned 1 [0238.014] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238810 [0238.015] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389c0 [0238.016] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansregular.ttf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfd578, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0238.017] GetFileType (hFile=0x1d8) returned 0x1 [0238.018] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238870 [0238.018] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a90 [0238.018] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansregular.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfd5a8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0238.019] GetFileType (hFile=0x174) returned 0x1 [0238.019] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bd0 [0238.019] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cf0 [0238.019] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2acfc0 [0238.019] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ab0 [0238.019] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238aa0 [0238.020] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansregular.ttf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfd4f4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0238.020] GetFileType (hFile=0x230) returned 0x1 [0238.021] GetLastError () returned 0xb7 [0238.021] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe4) returned 0x22b188 [0238.021] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d30 [0238.021] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c90 [0238.021] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f50 [0238.021] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad9d0 [0238.022] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ac0 [0238.022] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b70 [0238.022] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansregular.ttf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfd4f4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0238.023] GetFileType (hFile=0x1b0) returned 0x1 [0238.023] GetLastError () returned 0xb7 [0238.023] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c90 [0238.023] GetLastError () returned 0xb7 [0238.023] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c10 [0238.023] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204dd0 [0238.024] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c50 [0238.024] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb8) returned 0x223fa0 [0238.024] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a50 [0238.024] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ba0 [0238.025] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansregular.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfd4ec, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0238.025] GetFileType (hFile=0x204) returned 0x1 [0238.025] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x288fa8 [0238.025] ReadFile (in: hFile=0x204, lpBuffer=0x288fa8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1cfd448, lpOverlapped=0x0 | out: lpBuffer=0x288fa8*, lpNumberOfBytesRead=0x1cfd448*=0x1000, lpOverlapped=0x0) returned 1 [0238.030] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24c600 [0238.030] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x290fe8 [0238.030] GetLastError () returned 0x0 [0238.882] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f830 [0238.882] GetLastError () returned 0x0 [0238.882] CloseHandle (hObject=0x1d8) returned 1 [0238.883] CloseHandle (hObject=0x174) returned 1 [0238.883] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a40 [0238.884] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a60 [0238.885] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansregular.ttf"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfd5a8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0238.896] GetFileType (hFile=0x174) returned 0x1 [0238.897] GetLastError () returned 0xb7 [0238.897] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x292ff8 [0238.898] GetLastError () returned 0xb7 [0238.899] CloseHandle (hObject=0x174) returned 1 [0238.900] DeleteFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansregular.ttf")) returned 0 [0238.900] GetLastError () returned 0x20 [0238.900] GetLastError () returned 0x20 [0238.900] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228b00 [0238.900] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2608d8 [0238.901] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260658 [0238.901] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x228440 [0238.901] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bf0 [0238.901] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0238.901] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x238ad0 [0238.901] GetLastError () returned 0x20 [0238.901] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238d00 [0238.901] GetLastError () returned 0x20 [0238.901] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238ef8 [0238.902] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b08c8 [0238.902] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260ba8 [0238.902] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285e00 [0238.902] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ae0 [0238.902] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b30 [0238.902] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f650 [0238.902] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b80 [0238.902] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b58 [0238.902] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f890 [0238.902] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260c70 [0238.903] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285cf8 [0238.903] GetLastError () returned 0x20 [0238.903] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238b30 [0238.903] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238af0 [0238.903] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b10 [0238.903] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238af0 | out: hHeap=0x1f0000) returned 1 [0238.903] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b90 [0238.903] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b10 | out: hHeap=0x1f0000) returned 1 [0238.903] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b30 | out: hHeap=0x1f0000) returned 1 [0238.904] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a70 [0238.904] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f740 [0238.904] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a70 | out: hHeap=0x1f0000) returned 1 [0238.904] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f7a0 [0238.904] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f740 | out: hHeap=0x1f0000) returned 1 [0238.904] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b90 | out: hHeap=0x1f0000) returned 1 [0238.904] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f8a8 [0238.904] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f680 [0238.904] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f8a8 | out: hHeap=0x1f0000) returned 1 [0238.904] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f7d0 [0238.905] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f680 | out: hHeap=0x1f0000) returned 1 [0238.905] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f7a0 | out: hHeap=0x1f0000) returned 1 [0238.905] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f758 [0238.905] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204dd0 [0238.905] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f758 | out: hHeap=0x1f0000) returned 1 [0238.905] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0238.905] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204dd0 | out: hHeap=0x1f0000) returned 1 [0238.905] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f7d0 | out: hHeap=0x1f0000) returned 1 [0238.906] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cf0 [0238.906] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260bd0 [0238.906] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cf0 | out: hHeap=0x1f0000) returned 1 [0238.907] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204dd0 [0238.907] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bd0 | out: hHeap=0x1f0000) returned 1 [0238.907] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d70 | out: hHeap=0x1f0000) returned 1 [0238.907] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204b90 [0238.907] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x2066b8 [0238.907] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204b90 | out: hHeap=0x1f0000) returned 1 [0238.907] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260bd0 [0238.907] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2066b8 | out: hHeap=0x1f0000) returned 1 [0238.908] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204dd0 | out: hHeap=0x1f0000) returned 1 [0238.908] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238af0 [0238.908] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f8a8 [0238.908] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238af0 | out: hHeap=0x1f0000) returned 1 [0238.908] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f680 [0238.908] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f8a8 | out: hHeap=0x1f0000) returned 1 [0238.908] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204f70 [0238.908] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f680 | out: hHeap=0x1f0000) returned 1 [0238.908] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206808 [0238.909] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f70 | out: hHeap=0x1f0000) returned 1 [0238.909] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206808 | out: hHeap=0x1f0000) returned 1 [0238.909] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bd0 | out: hHeap=0x1f0000) returned 1 [0238.909] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0238.909] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab580 [0238.909] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285e00 | out: hHeap=0x1f0000) returned 1 [0238.909] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ba8 | out: hHeap=0x1f0000) returned 1 [0238.909] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238da8 [0238.910] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c20 [0238.910] CryptAcquireContextA (in: phProv=0x1cfd6d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1cfd6d8*=0x212e88) returned 1 [0238.911] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x260c20 | out: pbBuffer=0x260c20) returned 1 [0238.911] CryptReleaseContext (hProv=0x212e88, dwFlags=0x0) returned 1 [0238.911] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c20 | out: hHeap=0x1f0000) returned 1 [0238.911] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260ba8 [0238.912] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260c48 [0238.912] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238ec0 [0238.912] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ba8 | out: hHeap=0x1f0000) returned 1 [0238.912] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aba20 [0238.912] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ec0 | out: hHeap=0x1f0000) returned 1 [0238.912] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8848 [0238.912] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f680 [0238.912] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x2b01e0 [0238.913] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2609f0 [0238.913] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285098 [0238.913] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f10 [0238.913] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0b38 [0238.913] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260bf8 [0238.913] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285e00 [0238.913] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389f0 [0238.913] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a18 [0238.914] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f638 [0238.914] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238af0 [0238.914] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ba8 [0238.914] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f698 [0238.914] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f698 | out: hHeap=0x1f0000) returned 1 [0238.914] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ba8 | out: hHeap=0x1f0000) returned 1 [0238.914] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238af0 | out: hHeap=0x1f0000) returned 1 [0238.915] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f638 | out: hHeap=0x1f0000) returned 1 [0238.915] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a18 | out: hHeap=0x1f0000) returned 1 [0238.915] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389f0 | out: hHeap=0x1f0000) returned 1 [0238.915] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285e00 | out: hHeap=0x1f0000) returned 1 [0238.915] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0238.915] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0b38 | out: hHeap=0x1f0000) returned 1 [0238.915] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238e50 [0238.915] GetLastError () returned 0x0 [0238.916] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238d38 [0238.916] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac110 [0238.916] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac110 | out: hHeap=0x1f0000) returned 1 [0238.916] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab7d0 [0238.916] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac360 [0238.916] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab7d0 | out: hHeap=0x1f0000) returned 1 [0238.916] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac360 | out: hHeap=0x1f0000) returned 1 [0238.916] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x24ea00 [0238.916] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285e00 [0238.917] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac488 [0238.917] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac488 | out: hHeap=0x1f0000) returned 1 [0238.917] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2acb78 [0238.917] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2acb78 | out: hHeap=0x1f0000) returned 1 [0238.917] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2851a0 [0238.917] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac110 [0238.917] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac110 | out: hHeap=0x1f0000) returned 1 [0238.917] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f8f8 [0238.918] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x26c1b8 [0238.918] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2adfc8 [0238.918] QueryPerformanceCounter (in: lpPerformanceCount=0x1cfd228 | out: lpPerformanceCount=0x1cfd228*=39628678294) returned 1 [0238.918] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1cfd268 | out: lpSystemTimeAsFileTime=0x1cfd268) [0238.918] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238a70 [0238.918] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ba8 [0238.918] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cf0 [0238.919] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cf0 | out: hHeap=0x1f0000) returned 1 [0238.919] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ba8 | out: hHeap=0x1f0000) returned 1 [0238.919] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ba8 [0238.919] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204dd0 [0238.919] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204dd0 | out: hHeap=0x1f0000) returned 1 [0238.919] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ba8 | out: hHeap=0x1f0000) returned 1 [0238.919] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a70 | out: hHeap=0x1f0000) returned 1 [0238.919] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0238.920] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238cc8 [0238.920] GetLastError () returned 0x0 [0238.920] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac360 [0238.920] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac110 [0238.920] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac238 [0238.920] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260ba8 [0238.920] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260bf8 [0238.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab458 [0238.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab0e0 [0238.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260a18 [0238.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac488 [0238.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x234b90 [0239.281] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2acdc8 [0239.281] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x20c2c0 [0239.281] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2acdc8 | out: hHeap=0x1f0000) returned 1 [0239.281] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x25ffe8 [0239.281] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20c2c0 | out: hHeap=0x1f0000) returned 1 [0239.281] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260810 [0239.281] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2606a8 [0239.281] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0239.281] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac5b0 [0239.281] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0239.282] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x20c2c0 [0239.282] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x2647e0 [0239.282] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2647e0 | out: hHeap=0x1f0000) returned 1 [0239.282] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20c2c0 | out: hHeap=0x1f0000) returned 1 [0239.282] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25ffe8 | out: hHeap=0x1f0000) returned 1 [0239.282] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f908 [0239.282] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2287a0 [0239.282] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2606a8 [0239.282] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2607e8 [0239.282] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260950 [0239.282] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2604f0 [0239.282] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607e8 | out: hHeap=0x1f0000) returned 1 [0239.282] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0239.282] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x20c2c0 [0239.282] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2608d8 [0239.283] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260748 [0239.283] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0239.283] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aca50 [0239.283] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0239.283] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206688 [0239.283] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x2aa0d0 [0239.283] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aa0d0 | out: hHeap=0x1f0000) returned 1 [0239.283] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206688 | out: hHeap=0x1f0000) returned 1 [0239.283] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a18 | out: hHeap=0x1f0000) returned 1 [0239.283] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab208 [0239.283] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aca50 | out: hHeap=0x1f0000) returned 1 [0239.283] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20c2c0 | out: hHeap=0x1f0000) returned 1 [0239.283] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204d70 [0239.283] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab330 [0239.283] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abd98 [0239.284] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0239.284] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aafb8 [0239.284] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abd98 | out: hHeap=0x1f0000) returned 1 [0239.284] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0239.284] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0239.284] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2287a0 | out: hHeap=0x1f0000) returned 1 [0239.284] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab330 | out: hHeap=0x1f0000) returned 1 [0239.284] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d70 | out: hHeap=0x1f0000) returned 1 [0239.284] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f908 | out: hHeap=0x1f0000) returned 1 [0239.284] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac5b0 | out: hHeap=0x1f0000) returned 1 [0239.284] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac5b0 [0239.284] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac5b0 | out: hHeap=0x1f0000) returned 1 [0239.284] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b90 | out: hHeap=0x1f0000) returned 1 [0239.284] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac488 | out: hHeap=0x1f0000) returned 1 [0239.284] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab208 | out: hHeap=0x1f0000) returned 1 [0239.285] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab0e0 | out: hHeap=0x1f0000) returned 1 [0239.285] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab458 | out: hHeap=0x1f0000) returned 1 [0239.285] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ba8 | out: hHeap=0x1f0000) returned 1 [0239.285] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac238 | out: hHeap=0x1f0000) returned 1 [0239.285] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac110 | out: hHeap=0x1f0000) returned 1 [0239.285] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab208 [0239.285] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac110 [0239.285] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab208 | out: hHeap=0x1f0000) returned 1 [0239.285] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac110 | out: hHeap=0x1f0000) returned 1 [0239.285] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aafb8 | out: hHeap=0x1f0000) returned 1 [0239.285] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac360 | out: hHeap=0x1f0000) returned 1 [0239.285] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2851a0 | out: hHeap=0x1f0000) returned 1 [0239.285] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24ea00 | out: hHeap=0x1f0000) returned 1 [0239.285] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x2af260 [0239.285] GetLastError () returned 0x0 [0239.286] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238800 [0239.286] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238830 [0239.286] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansregular.ttf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfd5d8, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0239.287] GetFileType (hFile=0x224) returned 0x1 [0239.287] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28ffe0 [0239.287] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1cfd560 | out: lpNewFilePointer=0x0) returned 1 [0239.287] GetLastError () returned 0xb7 [0239.288] CloseHandle (hObject=0x224) returned 1 [0239.288] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238830 | out: hHeap=0x1f0000) returned 1 [0239.288] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238800 | out: hHeap=0x1f0000) returned 1 [0239.288] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285e00 | out: hHeap=0x1f0000) returned 1 [0239.288] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285098 | out: hHeap=0x1f0000) returned 1 [0239.288] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609f0 | out: hHeap=0x1f0000) returned 1 [0239.288] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f10 | out: hHeap=0x1f0000) returned 1 [0239.288] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b01e0 | out: hHeap=0x1f0000) returned 1 [0239.289] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f680 | out: hHeap=0x1f0000) returned 1 [0239.289] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8848 | out: hHeap=0x1f0000) returned 1 [0239.289] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2af260 | out: hHeap=0x1f0000) returned 1 [0239.289] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0239.289] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aba20 | out: hHeap=0x1f0000) returned 1 [0239.289] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x26c1b8 | out: hHeap=0x1f0000) returned 1 [0239.289] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2adfc8 | out: hHeap=0x1f0000) returned 1 [0239.289] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238da8 | out: hHeap=0x1f0000) returned 1 [0239.289] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ad0 | out: hHeap=0x1f0000) returned 1 [0239.289] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f890 | out: hHeap=0x1f0000) returned 1 [0239.289] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b58 | out: hHeap=0x1f0000) returned 1 [0239.289] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b80 | out: hHeap=0x1f0000) returned 1 [0239.290] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f650 | out: hHeap=0x1f0000) returned 1 [0239.290] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b30 | out: hHeap=0x1f0000) returned 1 [0239.290] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ae0 | out: hHeap=0x1f0000) returned 1 [0239.290] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285cf8 | out: hHeap=0x1f0000) returned 1 [0239.290] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c70 | out: hHeap=0x1f0000) returned 1 [0239.290] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b08c8 | out: hHeap=0x1f0000) returned 1 [0239.290] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228440 | out: hHeap=0x1f0000) returned 1 [0239.290] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260658 | out: hHeap=0x1f0000) returned 1 [0239.290] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab580 | out: hHeap=0x1f0000) returned 1 [0239.290] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228b00 | out: hHeap=0x1f0000) returned 1 [0239.290] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a60 | out: hHeap=0x1f0000) returned 1 [0239.291] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a40 | out: hHeap=0x1f0000) returned 1 [0239.291] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x288fa8 | out: hHeap=0x1f0000) returned 1 [0239.291] CloseHandle (hObject=0x204) returned 1 [0239.291] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ba0 | out: hHeap=0x1f0000) returned 1 [0239.291] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a50 | out: hHeap=0x1f0000) returned 1 [0239.292] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223fa0 | out: hHeap=0x1f0000) returned 1 [0239.292] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24c600 | out: hHeap=0x1f0000) returned 1 [0239.292] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f830 | out: hHeap=0x1f0000) returned 1 [0239.292] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c10 | out: hHeap=0x1f0000) returned 1 [0239.292] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x290fe8 | out: hHeap=0x1f0000) returned 1 [0239.292] CloseHandle (hObject=0x1b0) returned 1 [0239.293] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b70 | out: hHeap=0x1f0000) returned 1 [0239.293] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ac0 | out: hHeap=0x1f0000) returned 1 [0239.293] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad9d0 | out: hHeap=0x1f0000) returned 1 [0239.293] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d30 | out: hHeap=0x1f0000) returned 1 [0239.294] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b188 | out: hHeap=0x1f0000) returned 1 [0239.294] CloseHandle (hObject=0x230) returned 1 [0239.294] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238aa0 | out: hHeap=0x1f0000) returned 1 [0239.294] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ab0 | out: hHeap=0x1f0000) returned 1 [0239.295] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2acfc0 | out: hHeap=0x1f0000) returned 1 [0239.295] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a90 | out: hHeap=0x1f0000) returned 1 [0239.295] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238870 | out: hHeap=0x1f0000) returned 1 [0239.295] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389c0 | out: hHeap=0x1f0000) returned 1 [0239.295] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238810 | out: hHeap=0x1f0000) returned 1 [0239.295] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b018 | out: hHeap=0x1f0000) returned 1 [0239.295] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x26fad0 | out: hHeap=0x1f0000) returned 1 [0239.296] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae770 | out: hHeap=0x1f0000) returned 1 [0239.296] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206628 | out: hHeap=0x1f0000) returned 1 [0239.296] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f788 | out: hHeap=0x1f0000) returned 1 [0239.296] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f7b8 | out: hHeap=0x1f0000) returned 1 [0239.296] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233638 | out: hHeap=0x1f0000) returned 1 [0239.296] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x26d4c0 | out: hHeap=0x1f0000) returned 1 [0239.296] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2af6c0 | out: hHeap=0x1f0000) returned 1 [0239.296] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239208 | out: hHeap=0x1f0000) returned 1 [0239.319] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0239.319] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261b28 | out: hHeap=0x1f0000) returned 1 [0239.319] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2284d0 | out: hHeap=0x1f0000) returned 1 [0239.319] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604c8 | out: hHeap=0x1f0000) returned 1 [0239.320] DeleteFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansregular.ttf")) returned 1 [0239.321] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39254, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaTypewriterBold.ttf", cAlternateFileName="LUE73B~1.TTF")) returned 1 [0239.322] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228ab8 [0239.322] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0040 [0239.322] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0239.322] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0040 | out: hHeap=0x1f0000) returned 1 [0239.322] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0239.322] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228ab8 | out: hHeap=0x1f0000) returned 1 [0239.323] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterbold.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0239.323] GetFileType (hFile=0x230) returned 0x1 [0239.323] CloseHandle (hObject=0x230) returned 1 [0239.324] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0239.324] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterbold.ttf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39254)) returned 1 [0239.324] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0239.324] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0239.324] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterbold.ttf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39254)) returned 1 [0239.325] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0239.325] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0239.325] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0239.325] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3b40c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaTypewriterRegular.ttf", cAlternateFileName="LUDBAB~1.TTF")) returned 1 [0239.325] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2284d0 [0239.325] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b01e0 [0239.325] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21aa10 [0239.325] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b01e0 | out: hHeap=0x1f0000) returned 1 [0239.326] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0239.326] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2284d0 | out: hHeap=0x1f0000) returned 1 [0239.326] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterregular.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0239.327] GetFileType (hFile=0x230) returned 0x1 [0239.327] CloseHandle (hObject=0x230) returned 1 [0239.328] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21aab8 [0239.328] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterregular.ttf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3b40c)) returned 1 [0239.328] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21aab8 | out: hHeap=0x1f0000) returned 1 [0239.328] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a8c0 [0239.329] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterregular.ttf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3b40c)) returned 1 [0239.329] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a8c0 | out: hHeap=0x1f0000) returned 1 [0239.329] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21aab8 [0239.329] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21aab8 | out: hHeap=0x1f0000) returned 1 [0239.329] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3b40c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaTypewriterRegular.ttf", cAlternateFileName="LUDBAB~1.TTF")) returned 0 [0239.329] FindClose (in: hFindFile=0x24e9c0 | out: hFindFile=0x24e9c0) returned 1 [0239.330] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21aa10 | out: hHeap=0x1f0000) returned 1 [0239.330] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263310 | out: hHeap=0x1f0000) returned 1 [0239.330] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0239.330] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228830 | out: hHeap=0x1f0000) returned 1 [0239.330] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228b00 [0239.331] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0239.331] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x261ff0 [0239.331] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0239.331] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\*", lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa12313ee, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e9c0 [0239.331] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0658 [0239.331] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221080 [0239.332] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0658 | out: hHeap=0x1f0000) returned 1 [0239.332] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0239.332] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0239.332] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa12313ee, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0239.332] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0520 [0239.332] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221b30 [0239.332] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0520 | out: hHeap=0x1f0000) returned 1 [0239.332] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0239.333] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0239.333] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0239.333] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa129361a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cursors", cAlternateFileName="")) returned 1 [0239.333] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2affd8 [0239.333] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2217a0 [0239.333] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2affd8 | out: hHeap=0x1f0000) returned 1 [0239.333] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0239.333] lstrcmpW (lpString1="cursors", lpString2=".") returned 1 [0239.334] lstrcmpW (lpString1="cursors", lpString2="..") returned 1 [0239.334] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204c70 [0239.334] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2202b0 [0239.334] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa129361a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cursors", cAlternateFileName="")) returned 0 [0239.334] FindClose (in: hFindFile=0x24e9c0 | out: hFindFile=0x24e9c0) returned 1 [0239.334] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2288c0 [0239.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0239.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x261b28 [0239.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0239.335] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\*", lpFindFileData=0x1cfdc3c | out: lpFindFileData=0x1cfdc3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa129361a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22ab3c, dwReserved1=0x620060, cFileName=".", cAlternateFileName="")) returned 0x24ea00 [0239.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0239.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ce8 [0239.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0239.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0239.336] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0239.336] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1cfdc3c | out: lpFindFileData=0x1cfdc3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa129361a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22ab3c, dwReserved1=0x620060, cFileName="..", cAlternateFileName="")) returned 1 [0239.336] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220328 [0239.336] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x2191b8 [0239.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220328 | out: hHeap=0x1f0000) returned 1 [0239.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ce8 | out: hHeap=0x1f0000) returned 1 [0239.337] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0239.337] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0239.337] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1cfdc3c | out: lpFindFileData=0x1cfdc3c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x500, dwReserved0=0x22ab3c, dwReserved1=0x620060, cFileName="cursors.properties", cAlternateFileName="CURSOR~1.PRO")) returned 1 [0239.337] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239198 [0239.337] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220490 [0239.337] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ef8 [0239.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220490 | out: hHeap=0x1f0000) returned 1 [0239.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2191b8 | out: hHeap=0x1f0000) returned 1 [0239.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239198 | out: hHeap=0x1f0000) returned 1 [0239.339] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfda04, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0239.339] GetFileType (hFile=0x230) returned 0x1 [0239.339] CloseHandle (hObject=0x230) returned 1 [0239.340] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a968 [0239.340] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties"), fInfoLevelId=0x0, lpFileInformation=0x1cfda94 | out: lpFileInformation=0x1cfda94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x500)) returned 1 [0239.340] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a968 | out: hHeap=0x1f0000) returned 1 [0239.340] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a6c8 [0239.340] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties"), fInfoLevelId=0x0, lpFileInformation=0x1cfdaa4 | out: lpFileInformation=0x1cfdaa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x500)) returned 1 [0239.341] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a6c8 | out: hHeap=0x1f0000) returned 1 [0239.341] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21ab60 [0239.341] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0239.341] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ab60 | out: hHeap=0x1f0000) returned 1 [0239.341] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0239.341] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1cfdc3c | out: lpFindFileData=0x1cfdc3c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x22ab3c, dwReserved1=0x620060, cFileName="invalid32x32.gif", cAlternateFileName="INVALI~1.GIF")) returned 1 [0239.341] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2390f0 [0239.341] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0239.341] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219268 [0239.342] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0239.342] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ef8 | out: hHeap=0x1f0000) returned 1 [0239.342] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2390f0 | out: hHeap=0x1f0000) returned 1 [0239.343] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfda04, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0239.343] GetFileType (hFile=0x230) returned 0x1 [0239.783] CloseHandle (hObject=0x230) returned 1 [0239.783] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0239.783] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfda94 | out: lpFileInformation=0x1cfda94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99)) returned 1 [0239.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0239.784] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0239.784] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdaa4 | out: lpFileInformation=0x1cfdaa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99)) returned 1 [0239.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0239.784] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0239.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0239.784] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1cfdc3c | out: lpFindFileData=0x1cfdc3c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xa5, dwReserved0=0x22ab3c, dwReserved1=0x620060, cFileName="win32_CopyDrop32x32.gif", cAlternateFileName="WIN32_~1.GIF")) returned 1 [0239.785] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238da8 [0239.785] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0239.785] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218608 [0239.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0239.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219268 | out: hHeap=0x1f0000) returned 1 [0239.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238da8 | out: hHeap=0x1f0000) returned 1 [0239.960] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copydrop32x32.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfda04, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0239.960] GetFileType (hFile=0x230) returned 0x1 [0239.961] CloseHandle (hObject=0x230) returned 1 [0239.961] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a0e0 [0239.961] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copydrop32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfda94 | out: lpFileInformation=0x1cfda94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xa5)) returned 1 [0239.961] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a0e0 | out: hHeap=0x1f0000) returned 1 [0239.961] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a380 [0239.961] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copydrop32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdaa4 | out: lpFileInformation=0x1cfdaa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xa5)) returned 1 [0239.962] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a380 | out: hHeap=0x1f0000) returned 1 [0239.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a578 [0239.962] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a578 | out: hHeap=0x1f0000) returned 1 [0239.962] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1cfdc3c | out: lpFindFileData=0x1cfdc3c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x22ab3c, dwReserved1=0x620060, cFileName="win32_CopyNoDrop32x32.gif", cAlternateFileName="WIN32_~2.GIF")) returned 1 [0239.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228830 [0239.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fb30 [0239.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ade20 [0239.962] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fb30 | out: hHeap=0x1f0000) returned 1 [0239.962] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218608 | out: hHeap=0x1f0000) returned 1 [0239.962] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228830 | out: hHeap=0x1f0000) returned 1 [0239.963] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copynodrop32x32.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfda04, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0239.963] GetFileType (hFile=0x230) returned 0x1 [0239.964] CloseHandle (hObject=0x230) returned 1 [0239.964] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad580 [0239.964] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copynodrop32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfda94 | out: lpFileInformation=0x1cfda94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99)) returned 1 [0239.964] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad580 | out: hHeap=0x1f0000) returned 1 [0239.965] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2acfc0 [0239.965] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copynodrop32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdaa4 | out: lpFileInformation=0x1cfdaa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99)) returned 1 [0239.965] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2acfc0 | out: hHeap=0x1f0000) returned 1 [0239.965] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad130 [0239.965] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad130 | out: hHeap=0x1f0000) returned 1 [0239.965] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1cfdc3c | out: lpFindFileData=0x1cfdc3c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xa8, dwReserved0=0x22ab3c, dwReserved1=0x620060, cFileName="win32_LinkDrop32x32.gif", cAlternateFileName="WIN32_~3.GIF")) returned 1 [0239.965] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238f68 [0239.965] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fa40 [0239.966] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218768 [0239.966] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fa40 | out: hHeap=0x1f0000) returned 1 [0239.966] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ade20 | out: hHeap=0x1f0000) returned 1 [0239.966] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238f68 | out: hHeap=0x1f0000) returned 1 [0239.967] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linkdrop32x32.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfda04, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0239.967] GetFileType (hFile=0x230) returned 0x1 [0239.967] CloseHandle (hObject=0x230) returned 1 [0239.968] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21ab60 [0239.968] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linkdrop32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfda94 | out: lpFileInformation=0x1cfda94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xa8)) returned 1 [0239.968] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ab60 | out: hHeap=0x1f0000) returned 1 [0239.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a0e0 [0239.969] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linkdrop32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdaa4 | out: lpFileInformation=0x1cfdaa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xa8)) returned 1 [0239.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a0e0 | out: hHeap=0x1f0000) returned 1 [0239.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21aab8 [0239.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21aab8 | out: hHeap=0x1f0000) returned 1 [0239.969] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1cfdc3c | out: lpFindFileData=0x1cfdc3c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x22ab3c, dwReserved1=0x620060, cFileName="win32_LinkNoDrop32x32.gif", cAlternateFileName="WIN32_~4.GIF")) returned 1 [0239.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228ab8 [0239.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0239.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad1e8 [0239.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0239.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218768 | out: hHeap=0x1f0000) returned 1 [0239.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228ab8 | out: hHeap=0x1f0000) returned 1 [0239.970] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linknodrop32x32.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfda04, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0239.971] GetFileType (hFile=0x230) returned 0x1 [0239.971] CloseHandle (hObject=0x230) returned 1 [0239.971] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad410 [0239.971] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linknodrop32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfda94 | out: lpFileInformation=0x1cfda94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99)) returned 1 [0239.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad410 | out: hHeap=0x1f0000) returned 1 [0239.972] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2adb40 [0239.972] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linknodrop32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdaa4 | out: lpFileInformation=0x1cfdaa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99)) returned 1 [0239.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2adb40 | out: hHeap=0x1f0000) returned 1 [0239.972] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2aded8 [0239.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aded8 | out: hHeap=0x1f0000) returned 1 [0239.972] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1cfdc3c | out: lpFindFileData=0x1cfdc3c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x93, dwReserved0=0x22ab3c, dwReserved1=0x620060, cFileName="win32_MoveDrop32x32.gif", cAlternateFileName="WI06CF~1.GIF")) returned 1 [0239.972] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239208 [0239.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0239.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218d98 [0239.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0239.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad1e8 | out: hHeap=0x1f0000) returned 1 [0239.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239208 | out: hHeap=0x1f0000) returned 1 [0239.974] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movedrop32x32.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfda04, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0239.974] GetFileType (hFile=0x230) returned 0x1 [0239.975] CloseHandle (hObject=0x230) returned 1 [0239.975] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219ee8 [0239.975] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movedrop32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfda94 | out: lpFileInformation=0x1cfda94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x93)) returned 1 [0239.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219ee8 | out: hHeap=0x1f0000) returned 1 [0239.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a380 [0239.976] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movedrop32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdaa4 | out: lpFileInformation=0x1cfdaa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x93)) returned 1 [0239.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a380 | out: hHeap=0x1f0000) returned 1 [0239.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21aa10 [0239.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21aa10 | out: hHeap=0x1f0000) returned 1 [0239.976] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1cfdc3c | out: lpFindFileData=0x1cfdc3c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x22ab3c, dwReserved1=0x620060, cFileName="win32_MoveNoDrop32x32.gif", cAlternateFileName="WIE2D6~1.GIF")) returned 1 [0239.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228710 [0239.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd88 [0239.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad130 [0239.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd88 | out: hHeap=0x1f0000) returned 1 [0239.977] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218d98 | out: hHeap=0x1f0000) returned 1 [0239.977] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228710 | out: hHeap=0x1f0000) returned 1 [0239.977] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movenodrop32x32.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfda04, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0239.978] GetFileType (hFile=0x230) returned 0x1 [0239.978] CloseHandle (hObject=0x230) returned 1 [0239.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad358 [0239.979] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movenodrop32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfda94 | out: lpFileInformation=0x1cfda94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99)) returned 1 [0239.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad358 | out: hHeap=0x1f0000) returned 1 [0239.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ade20 [0239.979] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movenodrop32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdaa4 | out: lpFileInformation=0x1cfdaa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99)) returned 1 [0239.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ade20 | out: hHeap=0x1f0000) returned 1 [0239.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ada88 [0239.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ada88 | out: hHeap=0x1f0000) returned 1 [0239.979] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1cfdc3c | out: lpFindFileData=0x1cfdc3c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x22ab3c, dwReserved1=0x620060, cFileName="win32_MoveNoDrop32x32.gif", cAlternateFileName="WIE2D6~1.GIF")) returned 0 [0239.979] FindClose (in: hFindFile=0x24ea00 | out: hFindFile=0x24ea00) returned 1 [0239.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad130 | out: hHeap=0x1f0000) returned 1 [0239.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261b28 | out: hHeap=0x1f0000) returned 1 [0239.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0239.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2288c0 | out: hHeap=0x1f0000) returned 1 [0239.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0239.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2202b0 | out: hHeap=0x1f0000) returned 1 [0239.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c70 | out: hHeap=0x1f0000) returned 1 [0239.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261ff0 | out: hHeap=0x1f0000) returned 1 [0239.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0239.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228b00 | out: hHeap=0x1f0000) returned 1 [0239.981] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228a28 [0239.981] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260838 [0239.981] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x261b28 [0239.981] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b02b0 [0239.981] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\*", lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1295634, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e9c0 [0239.981] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0ad0 [0239.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b02b0 | out: hHeap=0x1f0000) returned 1 [0239.981] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0239.981] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1295634, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0239.982] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0728 [0239.982] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0ad0 | out: hHeap=0x1f0000) returned 1 [0239.982] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0239.982] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0239.982] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="default.jfc", cAlternateFileName="")) returned 1 [0239.982] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260888 [0239.982] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0658 [0239.982] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2212e0 [0239.982] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0658 | out: hHeap=0x1f0000) returned 1 [0239.982] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0728 | out: hHeap=0x1f0000) returned 1 [0239.982] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0239.983] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\default.jfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\default.jfc"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0239.983] GetFileType (hFile=0x230) returned 0x1 [0239.984] CloseHandle (hObject=0x230) returned 1 [0239.984] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0239.984] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\default.jfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\default.jfc"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e8d)) returned 1 [0239.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0239.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0239.985] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\default.jfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\default.jfc"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e8d)) returned 1 [0239.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0239.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0239.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0239.985] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e61, dwReserved0=0x0, dwReserved1=0x0, cFileName="profile.jfc", cAlternateFileName="")) returned 1 [0239.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260888 [0239.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0ad0 [0239.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220eb8 [0239.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0ad0 | out: hHeap=0x1f0000) returned 1 [0239.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0239.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0239.986] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\profile.jfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\profile.jfc"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0239.986] GetFileType (hFile=0x230) returned 0x1 [0239.986] CloseHandle (hObject=0x230) returned 1 [0239.987] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fc20 [0239.987] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\profile.jfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\profile.jfc"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e61)) returned 1 [0239.987] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fc20 | out: hHeap=0x1f0000) returned 1 [0239.987] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fb30 [0239.987] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\profile.jfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\profile.jfc"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e61)) returned 1 [0239.987] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fb30 | out: hHeap=0x1f0000) returned 1 [0239.987] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0239.987] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0239.987] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e61, dwReserved0=0x0, dwReserved1=0x0, cFileName="profile.jfc", cAlternateFileName="")) returned 0 [0239.987] FindClose (in: hFindFile=0x24e9c0 | out: hFindFile=0x24e9c0) returned 1 [0239.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0239.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261b28 | out: hHeap=0x1f0000) returned 1 [0239.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260838 | out: hHeap=0x1f0000) returned 1 [0239.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228a28 | out: hHeap=0x1f0000) returned 1 [0239.988] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2286c8 [0239.988] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0239.988] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x263310 [0239.988] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fc20 [0239.988] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\*", lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1389711, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e900 [0239.988] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fb30 [0239.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fc20 | out: hHeap=0x1f0000) returned 1 [0239.989] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0239.989] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1389711, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0239.989] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0239.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fb30 | out: hHeap=0x1f0000) returned 1 [0239.989] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0239.989] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0239.989] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="jmxremote.access", cAlternateFileName="JMXREM~1.ACC")) returned 1 [0239.989] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c20 [0239.989] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0239.989] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218a28 [0239.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0239.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0239.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c20 | out: hHeap=0x1f0000) returned 1 [0239.990] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.access" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.access"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0239.990] GetFileType (hFile=0x230) returned 0x1 [0239.990] CloseHandle (hObject=0x230) returned 1 [0239.990] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0239.990] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.access" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.access"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf9e)) returned 1 [0239.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0239.990] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0239.990] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.access" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.access"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf9e)) returned 1 [0239.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0239.991] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0239.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0239.991] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xb28, dwReserved0=0x0, dwReserved1=0x0, cFileName="jmxremote.password.template", cAlternateFileName="JMXREM~1.TEM")) returned 1 [0239.991] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228440 [0239.991] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0239.991] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ef8 [0239.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0239.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218a28 | out: hHeap=0x1f0000) returned 1 [0239.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228440 | out: hHeap=0x1f0000) returned 1 [0239.991] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0239.992] GetFileType (hFile=0x230) returned 0x1 [0239.992] CloseHandle (hObject=0x230) returned 1 [0239.992] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a188 [0239.992] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xb28)) returned 1 [0239.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a188 | out: hHeap=0x1f0000) returned 1 [0239.992] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219d98 [0239.993] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xb28)) returned 1 [0239.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219d98 | out: hHeap=0x1f0000) returned 1 [0239.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219f90 [0239.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260518 [0239.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219f90 | out: hHeap=0x1f0000) returned 1 [0239.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0239.993] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3926, dwReserved0=0x0, dwReserved1=0x0, cFileName="management.properties", cAlternateFileName="MANAGE~1.PRO")) returned 1 [0239.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238ef8 [0239.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0239.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218768 [0239.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0239.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ef8 | out: hHeap=0x1f0000) returned 1 [0239.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ef8 | out: hHeap=0x1f0000) returned 1 [0239.994] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\management.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\management.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0239.994] GetFileType (hFile=0x230) returned 0x1 [0239.994] CloseHandle (hObject=0x230) returned 1 [0239.994] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a380 [0239.994] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\management.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\management.properties"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3926)) returned 1 [0239.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a380 | out: hHeap=0x1f0000) returned 1 [0239.995] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a230 [0239.995] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\management.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\management.properties"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3926)) returned 1 [0239.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a230 | out: hHeap=0x1f0000) returned 1 [0239.995] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a968 [0239.995] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260838 [0239.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a968 | out: hHeap=0x1f0000) returned 1 [0239.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260838 | out: hHeap=0x1f0000) returned 1 [0239.995] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xd30, dwReserved0=0x0, dwReserved1=0x0, cFileName="snmp.acl.template", cAlternateFileName="SNMPAC~1.TEM")) returned 1 [0239.995] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238e18 [0239.995] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220328 [0239.995] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218818 [0239.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220328 | out: hHeap=0x1f0000) returned 1 [0239.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218768 | out: hHeap=0x1f0000) returned 1 [0239.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238e18 | out: hHeap=0x1f0000) returned 1 [0239.996] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\snmp.acl.template" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\snmp.acl.template"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0239.996] GetFileType (hFile=0x230) returned 0x1 [0239.996] CloseHandle (hObject=0x230) returned 1 [0239.996] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0239.997] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\snmp.acl.template" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\snmp.acl.template"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xd30)) returned 1 [0239.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0239.997] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0239.997] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\snmp.acl.template" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\snmp.acl.template"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xd30)) returned 1 [0239.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0239.997] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0239.997] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0239.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0239.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0239.997] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xd30, dwReserved0=0x0, dwReserved1=0x0, cFileName="snmp.acl.template", cAlternateFileName="SNMPAC~1.TEM")) returned 0 [0239.997] FindClose (in: hFindFile=0x24e900 | out: hFindFile=0x24e900) returned 1 [0239.998] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218818 | out: hHeap=0x1f0000) returned 1 [0239.998] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263310 | out: hHeap=0x1f0000) returned 1 [0239.998] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0239.998] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2286c8 | out: hHeap=0x1f0000) returned 1 [0239.998] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228440 [0239.998] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260518 [0239.998] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x261ff0 [0239.998] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0239.998] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\*", lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1418338, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e780 [0239.998] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0239.999] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0239.999] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0239.999] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1418338, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0239.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0239.999] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0239.999] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0239.999] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0239.999] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xfd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="blacklist", cAlternateFileName="BLACKL~1")) returned 1 [0239.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260630 [0239.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0239.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218d98 [0240.706] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0240.706] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0240.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260630 | out: hHeap=0x1f0000) returned 1 [0240.707] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklist" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklist"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0240.707] GetFileType (hFile=0x200) returned 0x1 [0240.708] CloseHandle (hObject=0x200) returned 1 [0240.708] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0240.708] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklist" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklist"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xfd6)) returned 1 [0240.708] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0240.709] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0240.709] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklist" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklist"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xfd6)) returned 1 [0240.709] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0240.709] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e88 [0240.709] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e88 | out: hHeap=0x1f0000) returned 1 [0240.709] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="blacklisted.certs", cAlternateFileName="BLACKL~1.CER")) returned 1 [0240.709] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238ef8 [0240.709] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0240.709] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218768 [0240.709] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0240.709] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218d98 | out: hHeap=0x1f0000) returned 1 [0240.709] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ef8 | out: hHeap=0x1f0000) returned 1 [0240.710] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklisted.certs" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklisted.certs"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0240.710] GetFileType (hFile=0x200) returned 0x1 [0240.710] CloseHandle (hObject=0x200) returned 1 [0240.711] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0240.711] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklisted.certs" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklisted.certs"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e5)) returned 1 [0240.711] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0240.711] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0240.711] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklisted.certs" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklisted.certs"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e5)) returned 1 [0240.711] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0240.711] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0240.712] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0240.712] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1c0eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="cacerts", cAlternateFileName="")) returned 1 [0240.712] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0240.712] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218b88 [0240.712] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0240.712] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218768 | out: hHeap=0x1f0000) returned 1 [0240.713] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\cacerts" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\cacerts"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0240.713] GetFileType (hFile=0x200) returned 0x1 [0240.713] CloseHandle (hObject=0x200) returned 1 [0240.714] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0240.714] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\cacerts" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\cacerts"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1c0eb)) returned 1 [0240.714] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0240.714] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212a48 [0240.714] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\cacerts" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\cacerts"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1c0eb)) returned 1 [0240.715] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212a48 | out: hHeap=0x1f0000) returned 1 [0240.715] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0240.715] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0240.715] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x9a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="java.policy", cAlternateFileName="JAVA~1.POL")) returned 1 [0240.715] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604c8 [0240.715] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0240.715] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218a28 [0240.715] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0240.715] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218b88 | out: hHeap=0x1f0000) returned 1 [0240.716] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604c8 | out: hHeap=0x1f0000) returned 1 [0240.716] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.policy" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\java.policy"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0240.716] GetFileType (hFile=0x200) returned 0x1 [0240.717] CloseHandle (hObject=0x200) returned 1 [0240.717] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213570 [0240.717] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.policy" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\java.policy"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x9a2)) returned 1 [0240.717] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213570 | out: hHeap=0x1f0000) returned 1 [0240.718] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e88 [0240.718] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.policy" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\java.policy"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x9a2)) returned 1 [0240.718] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e88 | out: hHeap=0x1f0000) returned 1 [0240.718] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0240.718] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0240.719] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8eac, dwReserved0=0x0, dwReserved1=0x0, cFileName="java.security", cAlternateFileName="JAVA~1.SEC")) returned 1 [0240.719] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604c8 [0240.719] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2203a0 [0240.719] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218b88 [0240.719] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2203a0 | out: hHeap=0x1f0000) returned 1 [0240.719] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218a28 | out: hHeap=0x1f0000) returned 1 [0240.719] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604c8 | out: hHeap=0x1f0000) returned 1 [0240.720] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.security" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\java.security"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0240.720] GetFileType (hFile=0x200) returned 0x1 [0240.720] CloseHandle (hObject=0x200) returned 1 [0240.721] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0240.721] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.security" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\java.security"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8eac)) returned 1 [0240.721] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0240.721] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0240.721] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.security" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\java.security"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8eac)) returned 1 [0240.721] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0240.721] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0240.721] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0240.721] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0240.722] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0240.722] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x62, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaws.policy", cAlternateFileName="JAVAWS~1.POL")) returned 1 [0240.722] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0240.722] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21ff68 [0240.722] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218558 [0240.722] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ff68 | out: hHeap=0x1f0000) returned 1 [0240.722] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218b88 | out: hHeap=0x1f0000) returned 1 [0240.722] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0240.723] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\javaws.policy" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\javaws.policy"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0240.723] GetFileType (hFile=0x200) returned 0x1 [0240.723] CloseHandle (hObject=0x200) returned 1 [0240.724] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0240.724] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\javaws.policy" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\javaws.policy"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x62)) returned 1 [0240.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0240.724] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212c68 [0240.724] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\javaws.policy" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\javaws.policy"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x62)) returned 1 [0240.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212c68 | out: hHeap=0x1f0000) returned 1 [0240.724] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213818 [0240.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213818 | out: hHeap=0x1f0000) returned 1 [0240.725] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xdc7, dwReserved0=0x0, dwReserved1=0x0, cFileName="local_policy.jar", cAlternateFileName="LOCAL_~1.JAR")) returned 1 [0240.725] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238d70 [0240.725] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0240.725] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ef8 [0240.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0240.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218558 | out: hHeap=0x1f0000) returned 1 [0240.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238d70 | out: hHeap=0x1f0000) returned 1 [0240.726] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\local_policy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\local_policy.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0240.726] GetFileType (hFile=0x200) returned 0x1 [0240.726] CloseHandle (hObject=0x200) returned 1 [0240.727] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0240.727] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\local_policy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\local_policy.jar"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xdc7)) returned 1 [0240.727] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0240.727] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0240.727] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\local_policy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\local_policy.jar"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xdc7)) returned 1 [0240.727] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0240.727] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0240.728] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0240.728] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="trusted.libraries", cAlternateFileName="TRUSTE~1.LIB")) returned 1 [0240.728] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239208 [0240.728] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0240.728] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218818 [0240.728] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0240.728] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ef8 | out: hHeap=0x1f0000) returned 1 [0240.728] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239208 | out: hHeap=0x1f0000) returned 1 [0240.729] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\trusted.libraries" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\trusted.libraries"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0240.729] GetFileType (hFile=0x200) returned 0x1 [0240.730] CloseHandle (hObject=0x200) returned 1 [0240.730] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0240.730] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\trusted.libraries" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\trusted.libraries"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0240.731] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0240.731] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0240.731] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\trusted.libraries" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\trusted.libraries"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0240.731] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0240.731] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0240.731] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604c8 [0240.732] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0240.732] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604c8 | out: hHeap=0x1f0000) returned 1 [0240.732] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xbd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="US_export_policy.jar", cAlternateFileName="US_EXP~1.JAR")) returned 1 [0240.732] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239160 [0240.732] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fc98 [0240.732] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218608 [0240.732] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fc98 | out: hHeap=0x1f0000) returned 1 [0240.732] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218818 | out: hHeap=0x1f0000) returned 1 [0240.733] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239160 | out: hHeap=0x1f0000) returned 1 [0240.733] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\US_export_policy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\us_export_policy.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0240.734] GetFileType (hFile=0x200) returned 0x1 [0240.735] CloseHandle (hObject=0x200) returned 1 [0240.735] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0240.735] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\US_export_policy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\us_export_policy.jar"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xbd2)) returned 1 [0240.736] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0240.736] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0240.736] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\US_export_policy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\us_export_policy.jar"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xbd2)) returned 1 [0240.736] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0240.736] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0240.736] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0240.736] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xbd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="US_export_policy.jar", cAlternateFileName="US_EXP~1.JAR")) returned 0 [0240.736] FindClose (in: hFindFile=0x24e780 | out: hFindFile=0x24e780) returned 1 [0240.737] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218608 | out: hHeap=0x1f0000) returned 1 [0240.737] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261ff0 | out: hHeap=0x1f0000) returned 1 [0240.737] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0240.737] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228440 | out: hHeap=0x1f0000) returned 1 [0240.737] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0240.737] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2358a0 | out: hHeap=0x1f0000) returned 1 [0240.737] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235aa8 | out: hHeap=0x1f0000) returned 1 [0240.738] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236190 | out: hHeap=0x1f0000) returned 1 [0240.738] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235838 | out: hHeap=0x1f0000) returned 1 [0240.738] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2364d0 | out: hHeap=0x1f0000) returned 1 [0240.738] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236608 | out: hHeap=0x1f0000) returned 1 [0240.738] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236400 | out: hHeap=0x1f0000) returned 1 [0240.738] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0240.738] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fef0 | out: hHeap=0x1f0000) returned 1 [0240.738] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0240.738] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20d9c8 | out: hHeap=0x1f0000) returned 1 [0240.738] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e828 | out: hHeap=0x1f0000) returned 1 [0240.738] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0240.738] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2289e0 | out: hHeap=0x1f0000) returned 1 [0240.739] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217550 | out: hHeap=0x1f0000) returned 1 [0240.739] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239458 | out: hHeap=0x1f0000) returned 1 [0240.739] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239610 | out: hHeap=0x1f0000) returned 1 [0240.739] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0240.739] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2624b8 | out: hHeap=0x1f0000) returned 1 [0240.739] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238348 | out: hHeap=0x1f0000) returned 1 [0240.739] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233ed0 | out: hHeap=0x1f0000) returned 1 [0240.739] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239508 | out: hHeap=0x1f0000) returned 1 [0240.739] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239b38 | out: hHeap=0x1f0000) returned 1 [0240.739] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205330 | out: hHeap=0x1f0000) returned 1 [0240.739] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262b18 | out: hHeap=0x1f0000) returned 1 [0240.740] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238258 | out: hHeap=0x1f0000) returned 1 [0240.740] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234308 | out: hHeap=0x1f0000) returned 1 [0240.740] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228830 [0240.740] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604c8 [0240.740] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x261990 [0240.740] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8848 [0240.740] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\*", lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd8b7078e, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xd8b7078e, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ec00 [0240.740] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8530 [0240.740] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8848 | out: hHeap=0x1f0000) returned 1 [0240.741] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0240.741] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd8b7078e, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xd8b7078e, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0240.741] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8a58 [0240.741] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8530 | out: hHeap=0x1f0000) returned 1 [0240.741] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0240.741] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0240.741] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d6778e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9dfb986, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xd8b7078e, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x5ab3fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="APPXMA~1.ODV")) returned 1 [0240.741] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad358 [0240.741] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8950 [0240.742] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x21b748 [0240.742] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8950 | out: hHeap=0x1f0000) returned 1 [0240.742] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8a58 | out: hHeap=0x1f0000) returned 1 [0240.742] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad358 | out: hHeap=0x1f0000) returned 1 [0240.742] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\AppXManifest.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\appxmanifest.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0240.743] GetFileType (hFile=0x200) returned 0x1 [0240.743] CloseHandle (hObject=0x200) returned 1 [0240.743] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x21b650 [0240.743] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\AppXManifest.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\appxmanifest.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb04 | out: lpFileInformation=0x1cfeb04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d6778e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9dfb986, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xd8b7078e, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x5ab3fa)) returned 1 [0240.744] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21b650 | out: hHeap=0x1f0000) returned 1 [0240.744] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x21bb28 [0240.744] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\AppXManifest.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\appxmanifest.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb14 | out: lpFileInformation=0x1cfeb14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d6778e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9dfb986, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xd8b7078e, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x5ab3fa)) returned 1 [0240.744] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21bb28 | out: hHeap=0x1f0000) returned 1 [0240.744] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x21bc20 [0240.744] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21bc20 | out: hHeap=0x1f0000) returned 1 [0240.744] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3888fc00, ftCreationTime.dwHighDateTime=0x1d5b2f9, ftLastAccessTime.dwLowDateTime=0xda731ce0, ftLastAccessTime.dwHighDateTime=0x1d58468, ftLastWriteTime.dwLowDateTime=0xda731ce0, ftLastWriteTime.dwHighDateTime=0x1d58468, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="dresses representations super.exe", cAlternateFileName="DRESSE~1.EXE")) returned 1 [0240.744] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a88f8 [0240.744] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a85e0 [0240.744] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0240.745] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a85e0 | out: hHeap=0x1f0000) returned 1 [0240.745] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21b748 | out: hHeap=0x1f0000) returned 1 [0240.745] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a88f8 | out: hHeap=0x1f0000) returned 1 [0240.745] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\dresses representations super.exe" (normalized: "c:\\program files\\microsoft office\\dresses representations super.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0240.746] GetLastError () returned 0x20 [0240.746] GetLastError () returned 0x20 [0240.746] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83543a09, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x119, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSystemMetadata.xml", cAlternateFileName="FILESY~1.XML")) returned 1 [0240.746] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238fa0 [0240.746] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8740 [0240.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0240.747] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8740 | out: hHeap=0x1f0000) returned 1 [0240.747] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0240.747] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238fa0 | out: hHeap=0x1f0000) returned 1 [0240.748] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\FileSystemMetadata.xml" (normalized: "c:\\program files\\microsoft office\\filesystemmetadata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfea74, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0240.748] GetFileType (hFile=0x200) returned 0x1 [0240.748] CloseHandle (hObject=0x200) returned 1 [0240.749] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0240.749] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\FileSystemMetadata.xml" (normalized: "c:\\program files\\microsoft office\\filesystemmetadata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb04 | out: lpFileInformation=0x1cfeb04*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83543a09, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x119)) returned 1 [0240.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0240.749] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2132c8 [0241.018] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\FileSystemMetadata.xml" (normalized: "c:\\program files\\microsoft office\\filesystemmetadata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfeb14 | out: lpFileInformation=0x1cfeb14*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83543a09, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x119)) returned 1 [0241.018] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2132c8 | out: hHeap=0x1f0000) returned 1 [0241.018] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0241.018] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0241.018] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9e7b530, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa146f18e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda9a8629, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office16", cAlternateFileName="")) returned 1 [0241.018] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260630 [0241.018] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8c10 [0241.018] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217650 [0241.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8c10 | out: hHeap=0x1f0000) returned 1 [0241.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0241.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260630 | out: hHeap=0x1f0000) returned 1 [0241.019] lstrcmpW (lpString1="Office16", lpString2=".") returned 1 [0241.019] lstrcmpW (lpString1="Office16", lpString2="..") returned 1 [0241.019] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204e50 [0241.019] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0ba0 [0241.019] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd698ca4a, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xd698ca4a, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PackageManifests", cAlternateFileName="PACKAG~1")) returned 1 [0241.019] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238da8 [0241.019] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8dc8 [0241.020] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x2175d0 [0241.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8dc8 | out: hHeap=0x1f0000) returned 1 [0241.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217650 | out: hHeap=0x1f0000) returned 1 [0241.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238da8 | out: hHeap=0x1f0000) returned 1 [0241.020] lstrcmpW (lpString1="PackageManifests", lpString2=".") returned 1 [0241.020] lstrcmpW (lpString1="PackageManifests", lpString2="..") returned 1 [0241.020] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c90 [0241.020] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fc20 [0241.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e50 | out: hHeap=0x1f0000) returned 1 [0241.020] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="root", cAlternateFileName="")) returned 1 [0241.020] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8c10 [0241.021] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2175d0 | out: hHeap=0x1f0000) returned 1 [0241.021] lstrcmpW (lpString1="root", lpString2=".") returned 1 [0241.021] lstrcmpW (lpString1="root", lpString2="..") returned 1 [0241.021] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x48) returned 0x225f68 [0241.021] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8ed0 [0241.021] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c90 | out: hHeap=0x1f0000) returned 1 [0241.021] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1cfecac | out: lpFindFileData=0x1cfecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="root", cAlternateFileName="")) returned 0 [0241.021] FindClose (in: hFindFile=0x24ec00 | out: hFindFile=0x24ec00) returned 1 [0241.022] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2289e0 [0241.022] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0241.022] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x263178 [0241.022] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0c08 [0241.022] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office16\\*", lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9e7b530, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa146f18e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda9a8629, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e900 [0241.023] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2affd8 [0241.023] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0c08 | out: hHeap=0x1f0000) returned 1 [0241.023] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0241.023] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9e7b530, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa146f18e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda9a8629, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.023] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b02b0 [0241.023] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2affd8 | out: hHeap=0x1f0000) returned 1 [0241.023] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0241.023] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0241.023] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd502d600, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0xd9e7b530, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd502d600, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x2a9c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPP.HTM", cAlternateFileName="")) returned 1 [0241.023] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260630 [0241.024] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0658 [0241.024] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220f50 [0241.024] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0658 | out: hHeap=0x1f0000) returned 1 [0241.024] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b02b0 | out: hHeap=0x1f0000) returned 1 [0241.024] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260630 | out: hHeap=0x1f0000) returned 1 [0241.024] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe658, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0241.025] GetFileType (hFile=0x220) returned 0x1 [0241.025] CloseHandle (hObject=0x220) returned 1 [0241.025] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fb30 [0241.025] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.htm"), fInfoLevelId=0x0, lpFileInformation=0x1cfe6ec | out: lpFileInformation=0x1cfe6ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd502d600, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0xd9e7b530, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd502d600, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x2a9c0)) returned 1 [0241.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fb30 | out: hHeap=0x1f0000) returned 1 [0241.026] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220490 [0241.026] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.htm"), fInfoLevelId=0x0, lpFileInformation=0x1cfe6f4 | out: lpFileInformation=0x1cfe6f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd502d600, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0xd9e7b530, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd502d600, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x2a9c0)) returned 1 [0241.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220490 | out: hHeap=0x1f0000) returned 1 [0241.026] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0241.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0241.026] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9ea17a8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x17103, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPP.VBS", cAlternateFileName="")) returned 1 [0241.026] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260630 [0241.026] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0c08 [0241.026] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220e20 [0241.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0c08 | out: hHeap=0x1f0000) returned 1 [0241.027] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0241.027] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260630 | out: hHeap=0x1f0000) returned 1 [0241.027] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.vbs"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe658, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0241.027] GetFileType (hFile=0x220) returned 0x1 [0241.028] CloseHandle (hObject=0x220) returned 1 [0241.028] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0241.028] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.vbs"), fInfoLevelId=0x0, lpFileInformation=0x1cfe6ec | out: lpFileInformation=0x1cfe6ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9ea17a8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x17103)) returned 1 [0241.028] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0241.029] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0241.029] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.vbs"), fInfoLevelId=0x0, lpFileInformation=0x1cfe6f4 | out: lpFileInformation=0x1cfe6f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9ea17a8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x17103)) returned 1 [0241.029] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0241.029] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2201c0 [0241.029] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2201c0 | out: hHeap=0x1f0000) returned 1 [0241.029] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9f60362, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x6a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPREARM.EXE", cAlternateFileName="OSPPRE~1.EXE")) returned 1 [0241.029] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260630 [0241.029] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0c08 [0241.029] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220d88 [0241.030] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0c08 | out: hHeap=0x1f0000) returned 1 [0241.030] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0241.030] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260630 | out: hHeap=0x1f0000) returned 1 [0241.030] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\Office16\\OSPPREARM.EXE" (normalized: "c:\\program files\\microsoft office\\office16\\ospprearm.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe658, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0241.031] GetFileType (hFile=0x220) returned 0x1 [0241.032] CloseHandle (hObject=0x220) returned 1 [0241.032] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0241.032] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office16\\OSPPREARM.EXE" (normalized: "c:\\program files\\microsoft office\\office16\\ospprearm.exe"), fInfoLevelId=0x0, lpFileInformation=0x1cfe6ec | out: lpFileInformation=0x1cfe6ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9f60362, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x6a40)) returned 1 [0241.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0241.033] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0241.033] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office16\\OSPPREARM.EXE" (normalized: "c:\\program files\\microsoft office\\office16\\ospprearm.exe"), fInfoLevelId=0x0, lpFileInformation=0x1cfe6f4 | out: lpFileInformation=0x1cfe6f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9f60362, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x6a40)) returned 1 [0241.033] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0241.033] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2132c8 [0241.033] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2132c8 | out: hHeap=0x1f0000) returned 1 [0241.033] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd502d600, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0xda9a8629, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd502d600, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x8df0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SLERROR.XML", cAlternateFileName="")) returned 1 [0241.033] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0241.033] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b03e8 [0241.033] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221248 [0241.033] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b03e8 | out: hHeap=0x1f0000) returned 1 [0241.033] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0241.034] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0241.034] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML" (normalized: "c:\\program files\\microsoft office\\office16\\slerror.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe658, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0241.034] GetFileType (hFile=0x220) returned 0x1 [0241.035] CloseHandle (hObject=0x220) returned 1 [0241.035] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220490 [0241.035] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML" (normalized: "c:\\program files\\microsoft office\\office16\\slerror.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfe6ec | out: lpFileInformation=0x1cfe6ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd502d600, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0xda9a8629, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd502d600, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x8df0)) returned 1 [0241.035] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220490 | out: hHeap=0x1f0000) returned 1 [0241.035] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0241.035] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML" (normalized: "c:\\program files\\microsoft office\\office16\\slerror.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfe6f4 | out: lpFileInformation=0x1cfe6f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd502d600, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0xda9a8629, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd502d600, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x8df0)) returned 1 [0241.036] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0241.036] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220328 [0241.036] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220328 | out: hHeap=0x1f0000) returned 1 [0241.036] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd502d600, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0xda9a8629, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd502d600, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x8df0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SLERROR.XML", cAlternateFileName="")) returned 0 [0241.036] FindClose (in: hFindFile=0x24e900 | out: hFindFile=0x24e900) returned 1 [0241.036] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0241.036] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263178 | out: hHeap=0x1f0000) returned 1 [0241.037] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0241.037] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2289e0 | out: hHeap=0x1f0000) returned 1 [0241.037] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228ab8 [0241.037] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260838 [0241.037] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262650 [0241.037] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220490 [0241.037] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\*", lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd698ca4a, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xd90f40d3, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e900 [0241.037] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21ff68 [0241.037] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220490 | out: hHeap=0x1f0000) returned 1 [0241.037] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0241.037] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd698ca4a, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xd90f40d3, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.038] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0241.038] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ff68 | out: hHeap=0x1f0000) returned 1 [0241.038] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0241.038] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0241.038] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834f7581, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834f7581, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5e91c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml", cAlternateFileName="APA05A~1.XML")) returned 1 [0241.038] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0241.038] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0241.038] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2367c8 [0241.038] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0241.039] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0241.039] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0241.039] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe658, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0241.039] GetFileType (hFile=0x220) returned 0x1 [0241.039] CloseHandle (hObject=0x220) returned 1 [0241.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x20c2c0 [0241.079] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfe6ec | out: lpFileInformation=0x1cfe6ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834f7581, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834f7581, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5e91c)) returned 1 [0241.126] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20c2c0 | out: hHeap=0x1f0000) returned 1 [0241.126] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x20c2c0 [0241.126] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfe6f4 | out: lpFileInformation=0x1cfe6f4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834f7581, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834f7581, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5e91c)) returned 1 [0241.485] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20c2c0 | out: hHeap=0x1f0000) returned 1 [0241.485] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x20c2c0 [0241.485] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20c2c0 | out: hHeap=0x1f0000) returned 1 [0241.485] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd90f40d3, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xd90f40d3, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xd90f40d3, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="APPXMA~2.ODV")) returned 1 [0241.485] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x21b748 [0241.485] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0241.486] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x160) returned 0x20c2c0 [0241.486] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0241.486] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2367c8 | out: hHeap=0x1f0000) returned 1 [0241.486] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21b748 | out: hHeap=0x1f0000) returned 1 [0241.487] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe658, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0241.487] GetFileType (hFile=0x1e0) returned 0x1 [0241.487] CloseHandle (hObject=0x1e0) returned 1 [0241.488] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x160) returned 0x22b018 [0241.488] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x1cfe6ec | out: lpFileInformation=0x1cfe6ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd90f40d3, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xd90f40d3, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xd90f40d3, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0241.488] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b018 | out: hHeap=0x1f0000) returned 1 [0241.488] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x160) returned 0x22b018 [0241.489] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x1cfe6f4 | out: lpFileInformation=0x1cfe6f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd90f40d3, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xd90f40d3, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xd90f40d3, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0241.489] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b018 | out: hHeap=0x1f0000) returned 1 [0241.489] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x160) returned 0x22b018 [0241.489] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b018 | out: hHeap=0x1f0000) returned 1 [0241.489] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8351d7a8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8351d7a8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e3474a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml", cAlternateFileName="APAD0B~1.XML")) returned 1 [0241.489] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fc98 [0241.489] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0241.489] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2367c8 [0241.490] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0241.490] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20c2c0 | out: hHeap=0x1f0000) returned 1 [0241.490] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fc98 | out: hHeap=0x1f0000) returned 1 [0241.491] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe658, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0241.491] GetFileType (hFile=0x1e0) returned 0x1 [0241.491] CloseHandle (hObject=0x1e0) returned 1 [0241.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x20c2c0 [0241.492] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfe6ec | out: lpFileInformation=0x1cfe6ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8351d7a8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8351d7a8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e3474a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5fd)) returned 1 [0241.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20c2c0 | out: hHeap=0x1f0000) returned 1 [0241.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x20c2c0 [0241.492] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfe6f4 | out: lpFileInformation=0x1cfe6f4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8351d7a8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8351d7a8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e3474a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5fd)) returned 1 [0241.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20c2c0 | out: hHeap=0x1f0000) returned 1 [0241.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x20c2c0 [0241.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20c2c0 | out: hHeap=0x1f0000) returned 1 [0241.493] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd61cd00b, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xd61cd00b, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xd698ca4a, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xc3976, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="APPXMA~1.ODV")) returned 1 [0241.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x21b650 [0241.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0241.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x160) returned 0x20c2c0 [0241.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0241.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2367c8 | out: hHeap=0x1f0000) returned 1 [0241.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21b650 | out: hHeap=0x1f0000) returned 1 [0241.494] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0000-1000-0000000ff1ce.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe658, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0241.495] GetFileType (hFile=0x1e0) returned 0x1 [0241.495] CloseHandle (hObject=0x1e0) returned 1 [0241.496] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x160) returned 0x22b018 [0241.496] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0000-1000-0000000ff1ce.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x1cfe6ec | out: lpFileInformation=0x1cfe6ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd61cd00b, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xd61cd00b, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xd698ca4a, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xc3976)) returned 1 [0241.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b018 | out: hHeap=0x1f0000) returned 1 [0241.496] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x160) returned 0x22b018 [0241.497] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0000-1000-0000000ff1ce.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x1cfe6f4 | out: lpFileInformation=0x1cfe6f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd61cd00b, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xd61cd00b, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xd698ca4a, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xc3976)) returned 1 [0241.497] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b018 | out: hHeap=0x1f0000) returned 1 [0241.497] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x160) returned 0x22b018 [0241.497] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b018 | out: hHeap=0x1f0000) returned 1 [0241.497] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP51DE~1.XML")) returned 1 [0241.497] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0241.497] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0241.498] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2367c8 [0241.498] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0241.498] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20c2c0 | out: hHeap=0x1f0000) returned 1 [0241.498] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0241.499] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe658, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0241.499] GetFileType (hFile=0x1e0) returned 0x1 [0241.500] CloseHandle (hObject=0x1e0) returned 1 [0241.501] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x20c2c0 [0241.501] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfe6ec | out: lpFileInformation=0x1cfe6ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0241.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20c2c0 | out: hHeap=0x1f0000) returned 1 [0241.501] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x20c2c0 [0241.501] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfe6f4 | out: lpFileInformation=0x1cfe6f4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0241.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20c2c0 | out: hHeap=0x1f0000) returned 1 [0241.502] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x20c2c0 [0241.502] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20c2c0 | out: hHeap=0x1f0000) returned 1 [0241.502] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83485006, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83485006, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x79381, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml", cAlternateFileName="APPXMA~4.XML")) returned 1 [0241.502] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0241.502] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0241.502] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x20c2c0 [0241.502] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0241.503] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2367c8 | out: hHeap=0x1f0000) returned 1 [0241.503] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0241.504] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe658, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0241.504] GetFileType (hFile=0x1e0) returned 0x1 [0241.506] CloseHandle (hObject=0x1e0) returned 1 [0241.506] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2367c8 [0241.506] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfe6ec | out: lpFileInformation=0x1cfe6ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83485006, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83485006, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x79381)) returned 1 [0241.506] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2367c8 | out: hHeap=0x1f0000) returned 1 [0241.507] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2367c8 [0241.507] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfe6f4 | out: lpFileInformation=0x1cfe6f4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83485006, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83485006, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x79381)) returned 1 [0241.507] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2367c8 | out: hHeap=0x1f0000) returned 1 [0241.507] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2367c8 [0241.507] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2367c8 | out: hHeap=0x1f0000) returned 1 [0241.507] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ecd099, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml", cAlternateFileName="APCEE5~1.XML")) returned 1 [0241.507] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0241.507] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0241.507] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2367c8 [0241.508] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0241.508] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20c2c0 | out: hHeap=0x1f0000) returned 1 [0241.508] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0241.508] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe658, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0241.509] GetFileType (hFile=0x1e0) returned 0x1 [0241.509] CloseHandle (hObject=0x1e0) returned 1 [0241.509] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x20c2c0 [0241.510] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfe6ec | out: lpFileInformation=0x1cfe6ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ecd099, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0241.510] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20c2c0 | out: hHeap=0x1f0000) returned 1 [0241.510] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x20c2c0 [0241.510] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfe6f4 | out: lpFileInformation=0x1cfe6f4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ecd099, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0241.510] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20c2c0 | out: hHeap=0x1f0000) returned 1 [0241.510] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x20c2c0 [0241.510] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20c2c0 | out: hHeap=0x1f0000) returned 1 [0241.510] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e3474a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e3474a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3df10, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP557F~1.XML")) returned 1 [0241.511] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fc98 [0241.511] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0241.511] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x20c2c0 [0241.511] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0241.511] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2367c8 | out: hHeap=0x1f0000) returned 1 [0241.511] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fc98 | out: hHeap=0x1f0000) returned 1 [0241.511] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe658, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0241.512] GetFileType (hFile=0x1e0) returned 0x1 [0241.512] CloseHandle (hObject=0x1e0) returned 1 [0241.512] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2367c8 [0241.512] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfe6ec | out: lpFileInformation=0x1cfe6ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e3474a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e3474a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3df10)) returned 1 [0241.513] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2367c8 | out: hHeap=0x1f0000) returned 1 [0241.513] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2367c8 [0241.513] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfe6f4 | out: lpFileInformation=0x1cfe6f4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e3474a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e3474a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3df10)) returned 1 [0241.513] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2367c8 | out: hHeap=0x1f0000) returned 1 [0241.513] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2367c8 [0241.513] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2367c8 | out: hHeap=0x1f0000) returned 1 [0241.513] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml", cAlternateFileName="APE193~1.XML")) returned 1 [0241.513] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0241.513] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2203a0 [0241.513] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2367c8 [0241.514] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2203a0 | out: hHeap=0x1f0000) returned 1 [0241.514] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20c2c0 | out: hHeap=0x1f0000) returned 1 [0241.514] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0241.514] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe658, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0241.514] GetFileType (hFile=0x1e0) returned 0x1 [0241.515] CloseHandle (hObject=0x1e0) returned 1 [0241.516] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x20c2c0 [0241.516] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfe6ec | out: lpFileInformation=0x1cfe6ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0241.516] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20c2c0 | out: hHeap=0x1f0000) returned 1 [0241.516] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x20c2c0 [0241.516] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfe6f4 | out: lpFileInformation=0x1cfe6f4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0241.516] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20c2c0 | out: hHeap=0x1f0000) returned 1 [0241.516] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x20c2c0 [0241.516] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20c2c0 | out: hHeap=0x1f0000) returned 1 [0241.516] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e3474a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x112a4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml", cAlternateFileName="APC1E2~1.XML")) returned 1 [0241.516] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0241.517] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0241.517] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x20c2c0 [0241.517] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0241.517] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2367c8 | out: hHeap=0x1f0000) returned 1 [0241.517] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0241.517] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe658, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0241.518] GetFileType (hFile=0x1e0) returned 0x1 [0241.518] CloseHandle (hObject=0x1e0) returned 1 [0241.518] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2367c8 [0241.518] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfe6ec | out: lpFileInformation=0x1cfe6ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd95ded4a, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x112a4e)) returned 1 [0241.518] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2367c8 | out: hHeap=0x1f0000) returned 1 [0241.519] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2367c8 [0241.519] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfe6f4 | out: lpFileInformation=0x1cfe6f4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd95ded4a, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x112a4e)) returned 1 [0241.519] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2367c8 | out: hHeap=0x1f0000) returned 1 [0241.519] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2367c8 [0241.519] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2367c8 | out: hHeap=0x1f0000) returned 1 [0241.519] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4bfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml", cAlternateFileName="APC422~1.XML")) returned 1 [0241.519] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0241.519] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2203a0 [0241.519] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2367c8 [0241.519] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2203a0 | out: hHeap=0x1f0000) returned 1 [0241.519] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20c2c0 | out: hHeap=0x1f0000) returned 1 [0241.519] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0241.520] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe658, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0241.520] GetFileType (hFile=0x1e0) returned 0x1 [0241.520] CloseHandle (hObject=0x1e0) returned 1 [0241.521] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x20c2c0 [0241.521] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfe6ec | out: lpFileInformation=0x1cfe6ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4bfb)) returned 1 [0241.521] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20c2c0 | out: hHeap=0x1f0000) returned 1 [0241.521] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x20c2c0 [0241.521] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfe6f4 | out: lpFileInformation=0x1cfe6f4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4bfb)) returned 1 [0241.521] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20c2c0 | out: hHeap=0x1f0000) returned 1 [0241.521] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x20c2c0 [0241.521] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20c2c0 | out: hHeap=0x1f0000) returned 1 [0241.521] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84391d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xba5e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP2169~1.XML")) returned 1 [0241.521] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fc98 [0241.522] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd88 [0241.522] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x20c2c0 [0241.522] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd88 | out: hHeap=0x1f0000) returned 1 [0241.522] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2367c8 | out: hHeap=0x1f0000) returned 1 [0241.522] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fc98 | out: hHeap=0x1f0000) returned 1 [0241.522] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe658, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0241.522] GetFileType (hFile=0x1e0) returned 0x1 [0241.523] CloseHandle (hObject=0x1e0) returned 1 [0241.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2367c8 [0241.523] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfe6ec | out: lpFileInformation=0x1cfe6ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84391d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xba5e3)) returned 1 [0241.523] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2367c8 | out: hHeap=0x1f0000) returned 1 [0241.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2367c8 [0241.523] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfe6f4 | out: lpFileInformation=0x1cfe6f4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84391d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xba5e3)) returned 1 [0241.524] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2367c8 | out: hHeap=0x1f0000) returned 1 [0241.524] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2367c8 [0241.524] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2367c8 | out: hHeap=0x1f0000) returned 1 [0241.524] GetLastError () returned 0x0 [0241.524] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c20 [0241.524] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228710 [0241.524] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262b18 [0241.524] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2367c8 [0241.524] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238f30 [0241.524] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609f0 [0241.524] CryptAcquireContextA (in: phProv=0x1cfdf10, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1cfdf10*=0x2130a8) returned 1 [0241.526] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2609f0 | out: pbBuffer=0x2609f0) returned 1 [0241.526] CryptReleaseContext (hProv=0x2130a8, dwFlags=0x0) returned 1 [0241.526] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609f0 | out: hHeap=0x1f0000) returned 1 [0241.526] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x2759f8 [0241.526] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2af7d8 [0241.526] QueryPerformanceCounter (in: lpPerformanceCount=0x1cfdea4 | out: lpPerformanceCount=0x1cfdea4*=39889487101) returned 1 [0241.526] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1cfdee4 | out: lpSystemTimeAsFileTime=0x1cfdee4) [0241.526] QueryPerformanceCounter (in: lpPerformanceCount=0x1cfdea4 | out: lpPerformanceCount=0x1cfdea4*=39889514641) returned 1 [0241.526] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1cfdee4 | out: lpSystemTimeAsFileTime=0x1cfdee4) [0241.526] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238c90 [0241.527] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x26e7c8 [0241.527] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2ae658 [0241.527] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x233158 [0241.527] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f6e0 [0241.527] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206868 [0241.527] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f6f8 [0241.527] GetLastError () returned 0x0 [0241.527] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x21b270 [0241.527] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x166) returned 0x22b018 [0241.527] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21b270 | out: hHeap=0x1f0000) returned 1 [0241.527] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a90 [0241.610] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238850 [0241.611] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0000-1000-0000000ff1ce.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfddb0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0241.612] GetFileType (hFile=0x1f4) returned 0x1 [0241.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238950 [0241.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238990 [0241.614] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfdde0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0241.614] GetFileType (hFile=0x204) returned 0x1 [0241.615] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0241.615] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e50 [0241.615] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2aded8 [0241.615] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389b0 [0241.616] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238860 [0241.617] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0000-1000-0000000ff1ce.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfdd2c, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0241.617] GetFileType (hFile=0x1e0) returned 0x1 [0241.618] GetLastError () returned 0xb7 [0241.618] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe4) returned 0x22b188 [0241.618] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c90 [0241.618] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0241.618] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bb0 [0241.619] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad410 [0241.619] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387e0 [0241.619] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238810 [0241.620] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0000-1000-0000000ff1ce.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfdd2c, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0241.620] GetFileType (hFile=0x224) returned 0x1 [0241.621] GetLastError () returned 0xb7 [0241.621] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cd0 [0241.621] GetLastError () returned 0xb7 [0241.622] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204db0 [0241.622] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c10 [0241.622] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e50 [0241.622] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb8) returned 0x237320 [0241.622] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238820 [0241.623] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238830 [0241.623] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfdd24, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0241.624] GetFileType (hFile=0x1b0) returned 0x1 [0241.624] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28dfd0 [0241.625] ReadFile (in: hFile=0x1b0, lpBuffer=0x28dfd0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1cfdc80, lpOverlapped=0x0 | out: lpBuffer=0x28dfd0*, lpNumberOfBytesRead=0x1cfdc80*=0x1000, lpOverlapped=0x0) returned 1 [0241.628] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24a9c8 [0241.628] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x288fa8 [0241.628] GetLastError () returned 0x0 [0242.046] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f950 [0242.046] GetLastError () returned 0x0 [0242.047] CloseHandle (hObject=0x1f4) returned 1 [0242.048] CloseHandle (hObject=0x204) returned 1 [0242.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238af0 [0242.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389e0 [0242.049] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfdde0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0242.061] GetFileType (hFile=0x204) returned 0x1 [0242.062] GetLastError () returned 0xb7 [0242.472] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x291ff0 [0242.472] GetLastError () returned 0xb7 [0242.474] CloseHandle (hObject=0x204) returned 1 [0242.475] DeleteFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0000-1000-0000000ff1ce.xml")) returned 0 [0242.475] GetLastError () returned 0x20 [0242.475] GetLastError () returned 0x20 [0242.475] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2289e0 [0242.475] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2608d8 [0242.475] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2606d0 [0242.475] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x228758 [0242.476] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e30 [0242.476] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f30 [0242.476] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x2387f0 [0242.476] GetLastError () returned 0x20 [0242.476] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239198 [0242.476] GetLastError () returned 0x20 [0242.476] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238ec0 [0242.476] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0ad0 [0242.476] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260518 [0242.476] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2857d0 [0242.476] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238800 [0242.476] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0242.476] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f908 [0242.477] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388d0 [0242.477] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0242.477] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f9c8 [0242.477] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260590 [0242.477] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2858d8 [0242.477] GetLastError () returned 0x20 [0242.477] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x2388e0 [0242.477] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x2389c0 [0242.477] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238870 [0242.477] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389c0 | out: hHeap=0x1f0000) returned 1 [0242.477] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238890 [0242.477] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238870 | out: hHeap=0x1f0000) returned 1 [0242.477] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388e0 | out: hHeap=0x1f0000) returned 1 [0242.478] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238980 [0242.478] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f968 [0242.478] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238980 | out: hHeap=0x1f0000) returned 1 [0242.478] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f980 [0242.478] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f968 | out: hHeap=0x1f0000) returned 1 [0242.478] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238890 | out: hHeap=0x1f0000) returned 1 [0242.478] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f968 [0242.478] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f998 [0242.478] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f968 | out: hHeap=0x1f0000) returned 1 [0242.478] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f968 [0242.478] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f998 | out: hHeap=0x1f0000) returned 1 [0242.478] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f980 | out: hHeap=0x1f0000) returned 1 [0242.478] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f980 [0242.479] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204f10 [0242.479] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f980 | out: hHeap=0x1f0000) returned 1 [0242.479] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d10 [0242.479] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f10 | out: hHeap=0x1f0000) returned 1 [0242.479] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f968 | out: hHeap=0x1f0000) returned 1 [0242.479] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f50 [0242.479] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260950 [0242.479] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f50 | out: hHeap=0x1f0000) returned 1 [0242.479] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204bb0 [0242.479] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0242.479] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d10 | out: hHeap=0x1f0000) returned 1 [0242.479] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204c50 [0242.479] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206628 [0242.479] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c50 | out: hHeap=0x1f0000) returned 1 [0242.479] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260770 [0242.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206628 | out: hHeap=0x1f0000) returned 1 [0242.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bb0 | out: hHeap=0x1f0000) returned 1 [0242.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389c0 [0242.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f968 [0242.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389c0 | out: hHeap=0x1f0000) returned 1 [0242.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f980 [0242.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f968 | out: hHeap=0x1f0000) returned 1 [0242.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204e30 [0242.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f980 | out: hHeap=0x1f0000) returned 1 [0242.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206838 [0242.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e30 | out: hHeap=0x1f0000) returned 1 [0242.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206838 | out: hHeap=0x1f0000) returned 1 [0242.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0242.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0242.481] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0242.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2857d0 | out: hHeap=0x1f0000) returned 1 [0242.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0242.481] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238f68 [0242.481] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605b8 [0242.481] CryptAcquireContextA (in: phProv=0x1cfdf10, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1cfdf10*=0x213570) returned 1 [0242.482] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2605b8 | out: pbBuffer=0x2605b8) returned 1 [0242.482] CryptReleaseContext (hProv=0x213570, dwFlags=0x0) returned 1 [0242.482] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0242.482] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260770 [0242.482] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260608 [0242.483] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239160 [0242.483] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0242.483] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0242.483] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239160 | out: hHeap=0x1f0000) returned 1 [0242.483] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8d18 [0242.483] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f968 [0242.483] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x2b02b0 [0242.483] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260810 [0242.483] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2853b0 [0242.483] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204b90 [0242.483] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0318 [0242.483] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260770 [0242.483] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2854b8 [0242.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389c0 [0242.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605b8 [0242.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f9b0 [0242.485] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238910 [0242.485] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260630 [0242.485] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f980 [0242.485] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f980 | out: hHeap=0x1f0000) returned 1 [0242.485] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260630 | out: hHeap=0x1f0000) returned 1 [0242.485] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238910 | out: hHeap=0x1f0000) returned 1 [0242.485] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f9b0 | out: hHeap=0x1f0000) returned 1 [0242.485] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0242.485] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389c0 | out: hHeap=0x1f0000) returned 1 [0242.485] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2854b8 | out: hHeap=0x1f0000) returned 1 [0242.486] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0242.486] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0318 | out: hHeap=0x1f0000) returned 1 [0242.486] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238cc8 [0242.486] GetLastError () returned 0x0 [0242.486] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x2391d0 [0242.486] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0242.486] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0242.486] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0242.486] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0242.486] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0242.486] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0242.486] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x24e980 [0242.486] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2851a0 [0242.487] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0242.487] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0242.487] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0242.487] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0242.487] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285e00 [0242.487] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0242.487] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0242.487] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f9c0 [0242.487] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x26c1b8 [0242.487] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2afd50 [0242.487] QueryPerformanceCounter (in: lpPerformanceCount=0x1cfda60 | out: lpPerformanceCount=0x1cfda60*=39985618059) returned 1 [0242.487] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1cfdaa0 | out: lpSystemTimeAsFileTime=0x1cfdaa0) [0242.488] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238960 [0242.488] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605b8 [0242.488] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c50 [0242.488] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c50 | out: hHeap=0x1f0000) returned 1 [0242.488] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0242.488] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0242.488] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cb0 [0242.488] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cb0 | out: hHeap=0x1f0000) returned 1 [0242.488] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0242.488] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238960 | out: hHeap=0x1f0000) returned 1 [0242.488] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0242.488] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239010 [0242.488] GetLastError () returned 0x0 [0242.488] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0242.489] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0242.489] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0242.489] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260950 [0242.489] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260518 [0242.489] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0242.489] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0242.489] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2605b8 [0242.489] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0242.489] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x222ee8 [0242.489] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0242.489] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0242.489] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0242.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x25ffe8 [0242.490] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0242.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260860 [0242.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260630 [0242.490] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0242.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0242.490] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260630 | out: hHeap=0x1f0000) returned 1 [0242.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0242.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x234b90 [0242.490] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b90 | out: hHeap=0x1f0000) returned 1 [0242.490] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0242.490] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25ffe8 | out: hHeap=0x1f0000) returned 1 [0242.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f980 [0242.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228518 [0242.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260630 [0242.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260658 [0242.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260770 [0242.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260860 [0242.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260658 | out: hHeap=0x1f0000) returned 1 [0242.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260630 | out: hHeap=0x1f0000) returned 1 [0242.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0242.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2608d8 [0242.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260888 [0242.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0242.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0242.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0242.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2068c8 [0242.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x2aa960 [0242.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aa960 | out: hHeap=0x1f0000) returned 1 [0242.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2068c8 | out: hHeap=0x1f0000) returned 1 [0242.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0242.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0242.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0242.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0242.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204d30 [0242.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0242.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0242.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0242.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac488 [0242.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0242.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0242.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0242.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228518 | out: hHeap=0x1f0000) returned 1 [0242.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0242.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d30 | out: hHeap=0x1f0000) returned 1 [0242.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f980 | out: hHeap=0x1f0000) returned 1 [0242.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0242.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac360 [0242.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac360 | out: hHeap=0x1f0000) returned 1 [0242.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ee8 | out: hHeap=0x1f0000) returned 1 [0242.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0242.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0242.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0242.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0242.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0242.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0242.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0242.494] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aba20 [0242.494] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac360 [0242.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aba20 | out: hHeap=0x1f0000) returned 1 [0242.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac360 | out: hHeap=0x1f0000) returned 1 [0242.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac488 | out: hHeap=0x1f0000) returned 1 [0242.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0242.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285e00 | out: hHeap=0x1f0000) returned 1 [0242.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24e980 | out: hHeap=0x1f0000) returned 1 [0242.495] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x2adfc8 [0242.495] GetLastError () returned 0x0 [0242.495] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388e0 [0242.495] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238910 [0242.681] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0000-1000-0000000ff1ce.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde10, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0242.682] GetFileType (hFile=0x1d4) returned 0x1 [0242.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x297018 [0242.685] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1cfdd98 | out: lpNewFilePointer=0x0) returned 1 [0242.688] GetLastError () returned 0xb7 [0242.689] CloseHandle (hObject=0x1d4) returned 1 [0242.689] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238910 | out: hHeap=0x1f0000) returned 1 [0242.689] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388e0 | out: hHeap=0x1f0000) returned 1 [0242.689] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2851a0 | out: hHeap=0x1f0000) returned 1 [0242.690] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2853b0 | out: hHeap=0x1f0000) returned 1 [0242.690] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0242.692] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204b90 | out: hHeap=0x1f0000) returned 1 [0242.692] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b02b0 | out: hHeap=0x1f0000) returned 1 [0242.693] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f968 | out: hHeap=0x1f0000) returned 1 [0242.693] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0242.693] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2adfc8 | out: hHeap=0x1f0000) returned 1 [0242.693] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0242.693] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0242.693] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x26c1b8 | out: hHeap=0x1f0000) returned 1 [0242.693] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2afd50 | out: hHeap=0x1f0000) returned 1 [0242.693] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238f68 | out: hHeap=0x1f0000) returned 1 [0242.693] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387f0 | out: hHeap=0x1f0000) returned 1 [0242.694] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f9c8 | out: hHeap=0x1f0000) returned 1 [0242.694] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0242.694] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388d0 | out: hHeap=0x1f0000) returned 1 [0242.694] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f908 | out: hHeap=0x1f0000) returned 1 [0242.694] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0242.694] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238800 | out: hHeap=0x1f0000) returned 1 [0242.694] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2858d8 | out: hHeap=0x1f0000) returned 1 [0242.694] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0242.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0ad0 | out: hHeap=0x1f0000) returned 1 [0242.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228758 | out: hHeap=0x1f0000) returned 1 [0242.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0242.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0242.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2289e0 | out: hHeap=0x1f0000) returned 1 [0242.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389e0 | out: hHeap=0x1f0000) returned 1 [0242.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238af0 | out: hHeap=0x1f0000) returned 1 [0242.696] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28dfd0 | out: hHeap=0x1f0000) returned 1 [0242.696] CloseHandle (hObject=0x1b0) returned 1 [0242.696] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238830 | out: hHeap=0x1f0000) returned 1 [0242.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238820 | out: hHeap=0x1f0000) returned 1 [0242.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237320 | out: hHeap=0x1f0000) returned 1 [0242.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24a9c8 | out: hHeap=0x1f0000) returned 1 [0242.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f950 | out: hHeap=0x1f0000) returned 1 [0242.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204db0 | out: hHeap=0x1f0000) returned 1 [0242.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x288fa8 | out: hHeap=0x1f0000) returned 1 [0242.698] CloseHandle (hObject=0x224) returned 1 [0242.698] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238810 | out: hHeap=0x1f0000) returned 1 [0242.698] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387e0 | out: hHeap=0x1f0000) returned 1 [0242.699] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad410 | out: hHeap=0x1f0000) returned 1 [0242.699] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c90 | out: hHeap=0x1f0000) returned 1 [0242.699] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b188 | out: hHeap=0x1f0000) returned 1 [0242.699] CloseHandle (hObject=0x1e0) returned 1 [0242.700] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238860 | out: hHeap=0x1f0000) returned 1 [0242.700] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389b0 | out: hHeap=0x1f0000) returned 1 [0242.700] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aded8 | out: hHeap=0x1f0000) returned 1 [0242.700] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238990 | out: hHeap=0x1f0000) returned 1 [0242.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238950 | out: hHeap=0x1f0000) returned 1 [0242.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238850 | out: hHeap=0x1f0000) returned 1 [0242.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a90 | out: hHeap=0x1f0000) returned 1 [0242.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b018 | out: hHeap=0x1f0000) returned 1 [0242.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x26e7c8 | out: hHeap=0x1f0000) returned 1 [0242.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae658 | out: hHeap=0x1f0000) returned 1 [0242.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206868 | out: hHeap=0x1f0000) returned 1 [0242.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f6f8 | out: hHeap=0x1f0000) returned 1 [0242.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f6e0 | out: hHeap=0x1f0000) returned 1 [0242.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233158 | out: hHeap=0x1f0000) returned 1 [0242.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2759f8 | out: hHeap=0x1f0000) returned 1 [0242.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2af7d8 | out: hHeap=0x1f0000) returned 1 [0242.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238f30 | out: hHeap=0x1f0000) returned 1 [0242.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2367c8 | out: hHeap=0x1f0000) returned 1 [0242.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262b18 | out: hHeap=0x1f0000) returned 1 [0242.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228710 | out: hHeap=0x1f0000) returned 1 [0242.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c20 | out: hHeap=0x1f0000) returned 1 [0242.703] DeleteFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0000-1000-0000000ff1ce.xml")) returned 1 [0242.705] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP7BBA~1.XML")) returned 1 [0242.705] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0242.705] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0242.705] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x223e98 [0242.706] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0242.706] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20c2c0 | out: hHeap=0x1f0000) returned 1 [0242.706] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0242.706] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe658, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0242.707] GetFileType (hFile=0x1e0) returned 0x1 [0242.707] CloseHandle (hObject=0x1e0) returned 1 [0242.707] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224068 [0242.707] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfe6ec | out: lpFileInformation=0x1cfe6ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0242.708] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224068 | out: hHeap=0x1f0000) returned 1 [0242.708] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x223f80 [0242.708] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfe6f4 | out: lpFileInformation=0x1cfe6f4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0242.708] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223f80 | out: hHeap=0x1f0000) returned 1 [0242.708] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224a60 [0242.708] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224a60 | out: hHeap=0x1f0000) returned 1 [0242.708] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e0e651, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e0e651, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml", cAlternateFileName="APEF10~1.XML")) returned 1 [0242.708] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0242.708] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0242.708] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2247a8 [0242.709] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0242.709] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223e98 | out: hHeap=0x1f0000) returned 1 [0242.709] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0242.709] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe658, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0242.710] GetFileType (hFile=0x1e0) returned 0x1 [0242.710] CloseHandle (hObject=0x1e0) returned 1 [0242.710] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224238 [0242.711] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfe6ec | out: lpFileInformation=0x1cfe6ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e0e651, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e0e651, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0242.711] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224238 | out: hHeap=0x1f0000) returned 1 [0242.711] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x223f80 [0242.711] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfe6f4 | out: lpFileInformation=0x1cfe6f4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e0e651, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e0e651, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0242.711] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223f80 | out: hHeap=0x1f0000) returned 1 [0242.711] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224320 [0242.711] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224320 | out: hHeap=0x1f0000) returned 1 [0242.711] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x838fd5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x838fd5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x863, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml", cAlternateFileName="AP5F49~1.XML")) returned 1 [0242.711] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0242.711] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0242.712] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224068 [0242.712] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0242.712] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2247a8 | out: hHeap=0x1f0000) returned 1 [0242.712] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0242.713] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-040c-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe658, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0242.713] GetFileType (hFile=0x1e0) returned 0x1 [0242.713] CloseHandle (hObject=0x1e0) returned 1 [0242.713] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2245d8 [0242.714] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-040c-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfe6ec | out: lpFileInformation=0x1cfe6ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x838fd5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x838fd5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x863)) returned 1 [0242.714] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2245d8 | out: hHeap=0x1f0000) returned 1 [0242.714] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x223be0 [0242.714] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-040c-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfe6f4 | out: lpFileInformation=0x1cfe6f4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x838fd5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x838fd5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x863)) returned 1 [0242.714] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223be0 | out: hHeap=0x1f0000) returned 1 [0242.714] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224408 [0242.714] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224408 | out: hHeap=0x1f0000) returned 1 [0242.714] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83ea71ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83ea71ba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x863, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml", cAlternateFileName="APB0FE~1.XML")) returned 1 [0242.714] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0242.715] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0242.715] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224408 [0242.715] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0242.715] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224068 | out: hHeap=0x1f0000) returned 1 [0242.715] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0242.715] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0c0a-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe658, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0242.715] GetFileType (hFile=0x1e0) returned 0x1 [0242.716] CloseHandle (hObject=0x1e0) returned 1 [0242.716] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x223db0 [0242.716] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0c0a-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfe6ec | out: lpFileInformation=0x1cfe6ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83ea71ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83ea71ba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x863)) returned 1 [0242.716] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223db0 | out: hHeap=0x1f0000) returned 1 [0242.716] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2244f0 [0242.716] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0c0a-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfe6f4 | out: lpFileInformation=0x1cfe6f4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83ea71ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83ea71ba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x863)) returned 1 [0242.716] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2244f0 | out: hHeap=0x1f0000) returned 1 [0242.717] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224238 [0242.717] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224238 | out: hHeap=0x1f0000) returned 1 [0242.717] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf982bd9c, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf982bd9c, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x34b4b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP8AF5~1.XML")) returned 1 [0242.717] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0242.717] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2203a0 [0242.717] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224978 [0242.717] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2203a0 | out: hHeap=0x1f0000) returned 1 [0242.717] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224408 | out: hHeap=0x1f0000) returned 1 [0242.717] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0242.718] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0027-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe658, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0242.718] GetFileType (hFile=0x1e0) returned 0x1 [0242.719] CloseHandle (hObject=0x1e0) returned 1 [0242.719] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x223e98 [0242.719] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0027-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfe6ec | out: lpFileInformation=0x1cfe6ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf982bd9c, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf982bd9c, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x34b4b)) returned 1 [0242.719] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223e98 | out: hHeap=0x1f0000) returned 1 [0242.719] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224a60 [0242.720] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0027-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfe6f4 | out: lpFileInformation=0x1cfe6f4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf982bd9c, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf982bd9c, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x34b4b)) returned 1 [0242.720] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224a60 | out: hHeap=0x1f0000) returned 1 [0242.720] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x223be0 [0242.720] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223be0 | out: hHeap=0x1f0000) returned 1 [0242.720] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e3474a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml", cAlternateFileName="APF26A~1.XML")) returned 1 [0242.720] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0242.720] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0242.720] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x223f80 [0242.720] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0242.720] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224978 | out: hHeap=0x1f0000) returned 1 [0242.720] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0242.721] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-002c-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe658, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0242.721] GetFileType (hFile=0x1e0) returned 0x1 [0242.722] CloseHandle (hObject=0x1e0) returned 1 [0242.722] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x223db0 [0242.722] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-002c-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfe6ec | out: lpFileInformation=0x1cfe6ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e3474a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0242.722] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223db0 | out: hHeap=0x1f0000) returned 1 [0242.723] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224890 [0242.723] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-002c-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfe6f4 | out: lpFileInformation=0x1cfe6f4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e3474a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0242.723] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224890 | out: hHeap=0x1f0000) returned 1 [0242.723] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224890 [0242.723] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224890 | out: hHeap=0x1f0000) returned 1 [0242.723] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xbf2f172d, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0xbf2f172d, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xbf33deae, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml", cAlternateFileName="APC553~1.XML")) returned 1 [0242.724] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220490 [0242.724] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2201c0 [0242.724] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2247a8 [0242.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2201c0 | out: hHeap=0x1f0000) returned 1 [0242.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223f80 | out: hHeap=0x1f0000) returned 1 [0242.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220490 | out: hHeap=0x1f0000) returned 1 [0242.725] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0054-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe658, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0242.725] GetFileType (hFile=0x1e0) returned 0x1 [0242.725] CloseHandle (hObject=0x1e0) returned 1 [0242.726] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x223be0 [0242.726] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0054-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfe6ec | out: lpFileInformation=0x1cfe6ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xbf2f172d, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0xbf2f172d, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xbf33deae, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0242.726] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223be0 | out: hHeap=0x1f0000) returned 1 [0242.726] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224150 [0242.726] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0054-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfe6f4 | out: lpFileInformation=0x1cfe6f4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xbf2f172d, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0xbf2f172d, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xbf33deae, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0242.727] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224150 | out: hHeap=0x1f0000) returned 1 [0242.727] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x223db0 [0242.727] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223db0 | out: hHeap=0x1f0000) returned 1 [0242.727] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xbf2f172d, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0xbf2f172d, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xbf2f172d, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x53d21, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP9FA1~1.XML")) returned 1 [0242.727] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0242.727] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fa40 [0242.727] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224150 [0242.727] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fa40 | out: hHeap=0x1f0000) returned 1 [0242.727] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2247a8 | out: hHeap=0x1f0000) returned 1 [0242.727] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0242.728] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0057-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe658, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0242.728] GetFileType (hFile=0x1e0) returned 0x1 [0242.729] CloseHandle (hObject=0x1e0) returned 1 [0242.729] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2244f0 [0242.729] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0057-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfe6ec | out: lpFileInformation=0x1cfe6ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xbf2f172d, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0xbf2f172d, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xbf2f172d, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x53d21)) returned 1 [0242.730] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2244f0 | out: hHeap=0x1f0000) returned 1 [0242.730] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224320 [0242.730] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0057-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfe6f4 | out: lpFileInformation=0x1cfe6f4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xbf2f172d, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0xbf2f172d, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xbf2f172d, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x53d21)) returned 1 [0242.730] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224320 | out: hHeap=0x1f0000) returned 1 [0242.730] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224890 [0242.730] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224890 | out: hHeap=0x1f0000) returned 1 [0242.730] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3a41, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP330B~1.XML")) returned 1 [0242.730] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2201c0 [0242.731] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0242.731] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x223f80 [0242.731] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0242.731] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224150 | out: hHeap=0x1f0000) returned 1 [0242.731] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2201c0 | out: hHeap=0x1f0000) returned 1 [0242.732] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-006e-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe658, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0242.732] GetFileType (hFile=0x1e0) returned 0x1 [0242.732] CloseHandle (hObject=0x1e0) returned 1 [0242.733] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x223be0 [0242.733] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-006e-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfe6ec | out: lpFileInformation=0x1cfe6ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3a41)) returned 1 [0243.000] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223be0 | out: hHeap=0x1f0000) returned 1 [0243.000] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224320 [0243.000] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-006e-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfe6f4 | out: lpFileInformation=0x1cfe6f4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3a41)) returned 1 [0243.000] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224320 | out: hHeap=0x1f0000) returned 1 [0243.000] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224068 [0243.000] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224068 | out: hHeap=0x1f0000) returned 1 [0243.001] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83543a09, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x573e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml", cAlternateFileName="APPXMA~1.XML")) returned 1 [0243.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0243.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0243.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2244f0 [0243.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0243.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223f80 | out: hHeap=0x1f0000) returned 1 [0243.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0243.002] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe658, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0243.002] GetFileType (hFile=0x1d8) returned 0x1 [0243.003] CloseHandle (hObject=0x1d8) returned 1 [0243.003] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224238 [0243.003] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfe6ec | out: lpFileInformation=0x1cfe6ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83543a09, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x573e5)) returned 1 [0243.003] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224238 | out: hHeap=0x1f0000) returned 1 [0243.004] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2246c0 [0243.004] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfe6f4 | out: lpFileInformation=0x1cfe6f4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83543a09, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x573e5)) returned 1 [0243.004] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2246c0 | out: hHeap=0x1f0000) returned 1 [0243.004] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x223be0 [0243.004] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223be0 | out: hHeap=0x1f0000) returned 1 [0243.004] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e3474a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e3474a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP6206~1.XML")) returned 1 [0243.004] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220490 [0243.004] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0243.004] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224a60 [0243.005] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0243.005] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2244f0 | out: hHeap=0x1f0000) returned 1 [0243.005] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220490 | out: hHeap=0x1f0000) returned 1 [0243.006] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe658, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0243.006] GetFileType (hFile=0x1d8) returned 0x1 [0243.006] CloseHandle (hObject=0x1d8) returned 1 [0243.007] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224068 [0243.007] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfe6ec | out: lpFileInformation=0x1cfe6ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e3474a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e3474a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0243.007] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224068 | out: hHeap=0x1f0000) returned 1 [0243.007] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2247a8 [0243.007] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfe6f4 | out: lpFileInformation=0x1cfe6f4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e3474a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e3474a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0243.008] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2247a8 | out: hHeap=0x1f0000) returned 1 [0243.008] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224068 [0243.008] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224068 | out: hHeap=0x1f0000) returned 1 [0243.008] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8351d7a8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xfdea, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml", cAlternateFileName="APD1EA~1.XML")) returned 1 [0243.008] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0243.008] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0243.008] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x223be0 [0243.009] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0243.009] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224a60 | out: hHeap=0x1f0000) returned 1 [0243.009] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0243.009] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe658, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0243.010] GetFileType (hFile=0x1d8) returned 0x1 [0243.010] CloseHandle (hObject=0x1d8) returned 1 [0243.011] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224320 [0243.011] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfe6ec | out: lpFileInformation=0x1cfe6ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8351d7a8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xfdea)) returned 1 [0243.011] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224320 | out: hHeap=0x1f0000) returned 1 [0243.011] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x223cc8 [0243.011] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfe6f4 | out: lpFileInformation=0x1cfe6f4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8351d7a8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xfdea)) returned 1 [0243.012] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223cc8 | out: hHeap=0x1f0000) returned 1 [0243.012] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x223cc8 [0243.012] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223cc8 | out: hHeap=0x1f0000) returned 1 [0243.012] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83ea71ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83ea71ba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP6EFE~1.XML")) returned 1 [0243.012] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0243.012] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0243.012] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224320 [0243.013] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0243.013] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223be0 | out: hHeap=0x1f0000) returned 1 [0243.013] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0243.014] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe658, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0243.014] GetFileType (hFile=0x1d8) returned 0x1 [0243.015] CloseHandle (hObject=0x1d8) returned 1 [0243.016] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224408 [0243.016] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfe6ec | out: lpFileInformation=0x1cfe6ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83ea71ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83ea71ba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0243.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224408 | out: hHeap=0x1f0000) returned 1 [0243.016] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224408 [0243.016] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfe6f4 | out: lpFileInformation=0x1cfe6f4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83ea71ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83ea71ba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0243.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224408 | out: hHeap=0x1f0000) returned 1 [0243.017] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224978 [0243.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224978 | out: hHeap=0x1f0000) returned 1 [0243.017] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf982bd9c, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf98c485a, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml", cAlternateFileName="APB63F~1.XML")) returned 1 [0243.017] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0243.017] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0243.017] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2247a8 [0243.018] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0243.018] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224320 | out: hHeap=0x1f0000) returned 1 [0243.018] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0243.019] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00b4-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe658, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0243.019] GetFileType (hFile=0x1d8) returned 0x1 [0243.019] CloseHandle (hObject=0x1d8) returned 1 [0243.020] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224150 [0243.020] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00b4-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfe6ec | out: lpFileInformation=0x1cfe6ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf982bd9c, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf98c485a, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0243.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224150 | out: hHeap=0x1f0000) returned 1 [0243.020] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224890 [0243.020] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00b4-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfe6f4 | out: lpFileInformation=0x1cfe6f4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf982bd9c, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf98c485a, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0243.021] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224890 | out: hHeap=0x1f0000) returned 1 [0243.021] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2245d8 [0243.021] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2245d8 | out: hHeap=0x1f0000) returned 1 [0243.021] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml", cAlternateFileName="APB913~1.XML")) returned 1 [0243.021] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220490 [0243.021] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0243.021] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224978 [0243.022] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0243.022] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2247a8 | out: hHeap=0x1f0000) returned 1 [0243.022] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220490 | out: hHeap=0x1f0000) returned 1 [0243.023] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe658, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0243.023] GetFileType (hFile=0x1d8) returned 0x1 [0243.023] CloseHandle (hObject=0x1d8) returned 1 [0243.024] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x223e98 [0243.024] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfe6ec | out: lpFileInformation=0x1cfe6ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2400)) returned 1 [0243.024] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223e98 | out: hHeap=0x1f0000) returned 1 [0243.024] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2244f0 [0243.025] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfe6f4 | out: lpFileInformation=0x1cfe6f4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2400)) returned 1 [0243.025] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2244f0 | out: hHeap=0x1f0000) returned 1 [0243.025] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224408 [0243.025] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224408 | out: hHeap=0x1f0000) returned 1 [0243.025] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x838fd5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x838fd5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP4637~1.XML")) returned 1 [0243.025] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220490 [0243.025] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd88 [0243.026] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2245d8 [0243.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd88 | out: hHeap=0x1f0000) returned 1 [0243.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224978 | out: hHeap=0x1f0000) returned 1 [0243.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220490 | out: hHeap=0x1f0000) returned 1 [0243.027] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe658, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0243.027] GetFileType (hFile=0x1d8) returned 0x1 [0243.028] CloseHandle (hObject=0x1d8) returned 1 [0243.028] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224978 [0243.028] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfe6ec | out: lpFileInformation=0x1cfe6ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x838fd5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x838fd5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0243.028] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224978 | out: hHeap=0x1f0000) returned 1 [0243.029] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x223e98 [0243.029] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfe6f4 | out: lpFileInformation=0x1cfe6f4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x838fd5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x838fd5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0243.029] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223e98 | out: hHeap=0x1f0000) returned 1 [0243.029] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224150 [0243.029] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224150 | out: hHeap=0x1f0000) returned 1 [0243.029] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x618a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP2FE2~1.XML")) returned 1 [0243.029] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0243.030] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0243.030] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x223f80 [0243.030] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0243.031] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2245d8 | out: hHeap=0x1f0000) returned 1 [0243.031] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0243.031] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe658, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0243.032] GetFileType (hFile=0x1d8) returned 0x1 [0243.032] CloseHandle (hObject=0x1d8) returned 1 [0243.033] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224150 [0243.033] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfe6ec | out: lpFileInformation=0x1cfe6ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x618a8)) returned 1 [0243.033] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224150 | out: hHeap=0x1f0000) returned 1 [0243.033] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x223be0 [0243.033] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfe6f4 | out: lpFileInformation=0x1cfe6f4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x618a8)) returned 1 [0243.033] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223be0 | out: hHeap=0x1f0000) returned 1 [0243.033] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224068 [0243.033] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224068 | out: hHeap=0x1f0000) returned 1 [0243.034] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP2C4B~1.XML")) returned 1 [0243.034] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2203a0 [0243.034] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0243.034] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x223cc8 [0243.034] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0243.034] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223f80 | out: hHeap=0x1f0000) returned 1 [0243.034] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2203a0 | out: hHeap=0x1f0000) returned 1 [0243.035] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe658, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0243.035] GetFileType (hFile=0x1d8) returned 0x1 [0243.035] CloseHandle (hObject=0x1d8) returned 1 [0243.036] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x223f80 [0243.036] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfe6ec | out: lpFileInformation=0x1cfe6ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0243.036] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223f80 | out: hHeap=0x1f0000) returned 1 [0243.036] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224320 [0243.036] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfe6f4 | out: lpFileInformation=0x1cfe6f4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0243.036] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224320 | out: hHeap=0x1f0000) returned 1 [0243.036] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224238 [0243.037] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224238 | out: hHeap=0x1f0000) returned 1 [0243.037] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml", cAlternateFileName="APF00A~1.XML")) returned 1 [0243.037] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0243.037] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2203a0 [0243.037] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2247a8 [0243.037] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2203a0 | out: hHeap=0x1f0000) returned 1 [0243.037] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223cc8 | out: hHeap=0x1f0000) returned 1 [0243.037] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0243.037] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe658, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0243.038] GetFileType (hFile=0x1d8) returned 0x1 [0243.038] CloseHandle (hObject=0x1d8) returned 1 [0243.038] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224890 [0243.038] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfe6ec | out: lpFileInformation=0x1cfe6ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5aa)) returned 1 [0243.038] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224890 | out: hHeap=0x1f0000) returned 1 [0243.039] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x223cc8 [0243.039] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfe6f4 | out: lpFileInformation=0x1cfe6f4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5aa)) returned 1 [0243.039] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223cc8 | out: hHeap=0x1f0000) returned 1 [0243.039] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2244f0 [0243.039] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2244f0 | out: hHeap=0x1f0000) returned 1 [0243.039] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x834ab261, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml", cAlternateFileName="APPXMA~2.XML")) returned 1 [0243.039] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0243.039] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0243.039] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224408 [0243.039] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0243.039] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2247a8 | out: hHeap=0x1f0000) returned 1 [0243.039] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0243.040] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe658, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0243.040] GetFileType (hFile=0x1d8) returned 0x1 [0243.040] CloseHandle (hObject=0x1d8) returned 1 [0243.041] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2246c0 [0243.041] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfe6ec | out: lpFileInformation=0x1cfe6ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x834ab261, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0243.041] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2246c0 | out: hHeap=0x1f0000) returned 1 [0243.041] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224890 [0243.041] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfe6f4 | out: lpFileInformation=0x1cfe6f4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x834ab261, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0243.041] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224890 | out: hHeap=0x1f0000) returned 1 [0243.041] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x223f80 [0243.041] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223f80 | out: hHeap=0x1f0000) returned 1 [0243.041] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xeaa, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP202C~1.XML")) returned 1 [0243.042] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2203a0 [0243.042] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0243.042] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2245d8 [0243.042] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0243.042] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224408 | out: hHeap=0x1f0000) returned 1 [0243.042] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2203a0 | out: hHeap=0x1f0000) returned 1 [0243.042] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe658, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0243.042] GetFileType (hFile=0x1d8) returned 0x1 [0243.043] CloseHandle (hObject=0x1d8) returned 1 [0243.043] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2247a8 [0243.043] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfe6ec | out: lpFileInformation=0x1cfe6ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xeaa)) returned 1 [0243.043] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2247a8 | out: hHeap=0x1f0000) returned 1 [0243.043] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224068 [0243.043] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfe6f4 | out: lpFileInformation=0x1cfe6f4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xeaa)) returned 1 [0243.044] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224068 | out: hHeap=0x1f0000) returned 1 [0243.044] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x223db0 [0243.044] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223db0 | out: hHeap=0x1f0000) returned 1 [0243.044] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84391d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml", cAlternateFileName="APBC30~1.XML")) returned 1 [0243.044] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0243.044] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fc98 [0243.044] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224890 [0243.044] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fc98 | out: hHeap=0x1f0000) returned 1 [0243.044] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2245d8 | out: hHeap=0x1f0000) returned 1 [0243.044] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0243.044] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe658, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0243.045] GetFileType (hFile=0x1d8) returned 0x1 [0243.045] CloseHandle (hObject=0x1d8) returned 1 [0243.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x223e98 [0243.045] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfe6ec | out: lpFileInformation=0x1cfe6ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84391d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0243.046] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223e98 | out: hHeap=0x1f0000) returned 1 [0243.269] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x223e98 [0243.269] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfe6f4 | out: lpFileInformation=0x1cfe6f4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84391d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0243.269] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223e98 | out: hHeap=0x1f0000) returned 1 [0243.269] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x223db0 [0243.269] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223db0 | out: hHeap=0x1f0000) returned 1 [0243.269] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml", cAlternateFileName="APCB35~1.XML")) returned 1 [0243.270] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0243.270] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0243.270] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x223e98 [0243.270] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0243.270] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224890 | out: hHeap=0x1f0000) returned 1 [0243.270] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0243.271] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0115-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe658, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0243.271] GetFileType (hFile=0x204) returned 0x1 [0243.272] CloseHandle (hObject=0x204) returned 1 [0243.273] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224320 [0243.273] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0115-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfe6ec | out: lpFileInformation=0x1cfe6ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0243.273] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224320 | out: hHeap=0x1f0000) returned 1 [0243.273] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x223db0 [0243.273] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0115-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfe6f4 | out: lpFileInformation=0x1cfe6f4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0243.274] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223db0 | out: hHeap=0x1f0000) returned 1 [0243.274] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224a60 [0243.274] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224a60 | out: hHeap=0x1f0000) returned 1 [0243.274] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP5E1E~1.XML")) returned 1 [0243.274] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220490 [0243.275] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0243.275] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2244f0 [0243.275] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0243.275] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223e98 | out: hHeap=0x1f0000) returned 1 [0243.275] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220490 | out: hHeap=0x1f0000) returned 1 [0243.276] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0117-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe658, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0243.277] GetFileType (hFile=0x204) returned 0x1 [0243.277] CloseHandle (hObject=0x204) returned 1 [0243.278] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2246c0 [0243.278] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0117-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfe6ec | out: lpFileInformation=0x1cfe6ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0243.278] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2246c0 | out: hHeap=0x1f0000) returned 1 [0243.278] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x223db0 [0243.278] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0117-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfe6f4 | out: lpFileInformation=0x1cfe6f4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0243.279] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223db0 | out: hHeap=0x1f0000) returned 1 [0243.279] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224068 [0243.279] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224068 | out: hHeap=0x1f0000) returned 1 [0243.279] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83485006, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83485006, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x834ab261, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x80e56, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml", cAlternateFileName="APPXMA~3.XML")) returned 1 [0243.279] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0243.279] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2203a0 [0243.279] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2245d8 [0243.280] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2203a0 | out: hHeap=0x1f0000) returned 1 [0243.280] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2244f0 | out: hHeap=0x1f0000) returned 1 [0243.280] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0243.281] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012a-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe658, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0243.284] GetFileType (hFile=0x204) returned 0x1 [0243.285] CloseHandle (hObject=0x204) returned 1 [0243.286] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224978 [0243.286] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012a-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfe6ec | out: lpFileInformation=0x1cfe6ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83485006, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83485006, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x834ab261, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x80e56)) returned 1 [0243.286] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224978 | out: hHeap=0x1f0000) returned 1 [0243.286] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224320 [0243.286] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012a-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfe6f4 | out: lpFileInformation=0x1cfe6f4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83485006, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83485006, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x834ab261, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x80e56)) returned 1 [0243.287] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224320 | out: hHeap=0x1f0000) returned 1 [0243.287] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x223db0 [0243.287] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223db0 | out: hHeap=0x1f0000) returned 1 [0243.287] GetLastError () returned 0x0 [0243.288] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0243.288] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2289e0 [0243.288] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262b18 [0243.288] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224978 [0243.288] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238e18 [0243.288] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0243.288] CryptAcquireContextA (in: phProv=0x1cfdf10, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1cfdf10*=0x2132c8) returned 1 [0243.290] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2606d0 | out: pbBuffer=0x2606d0) returned 1 [0243.290] CryptReleaseContext (hProv=0x2132c8, dwFlags=0x0) returned 1 [0243.290] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0243.290] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x26fad0 [0243.290] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2aeab8 [0243.290] QueryPerformanceCounter (in: lpPerformanceCount=0x1cfdea4 | out: lpPerformanceCount=0x1cfdea4*=40065948117) returned 1 [0243.291] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1cfdee4 | out: lpSystemTimeAsFileTime=0x1cfdee4) [0243.291] QueryPerformanceCounter (in: lpPerformanceCount=0x1cfdea4 | out: lpPerformanceCount=0x1cfdea4*=40066005272) returned 1 [0243.291] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1cfdee4 | out: lpSystemTimeAsFileTime=0x1cfdee4) [0243.292] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238ec0 [0243.292] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x26c1b8 [0243.293] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2ae888 [0243.293] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x2337d8 [0243.293] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f980 [0243.294] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206628 [0243.294] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f9c8 [0243.294] GetLastError () returned 0x0 [0243.294] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x2b1c70 [0243.294] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x166) returned 0x22d368 [0243.295] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b1c70 | out: hHeap=0x1f0000) returned 1 [0243.295] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c640 [0243.318] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c560 [0243.319] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012a-0000-1000-0000000ff1ce.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfddb0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0243.320] GetFileType (hFile=0x204) returned 0x1 [0243.321] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c5b0 [0243.321] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c660 [0243.322] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012a-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfdde0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0243.322] GetFileType (hFile=0x23c) returned 0x1 [0243.323] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c10 [0243.323] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204dd0 [0243.323] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad4c8 [0243.324] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c5c0 [0243.324] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c650 [0243.325] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012a-0000-1000-0000000ff1ce.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfdd2c, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0243.325] GetFileType (hFile=0x220) returned 0x1 [0243.326] GetLastError () returned 0xb7 [0243.326] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe4) returned 0x21b8e8 [0243.326] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cd0 [0243.326] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0243.326] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d90 [0243.326] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2adbf8 [0243.326] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c710 [0243.327] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c5e0 [0243.778] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012a-0000-1000-0000000ff1ce.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfdd2c, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0243.779] GetFileType (hFile=0x22c) returned 0x1 [0243.779] GetLastError () returned 0xb7 [0243.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c70 [0243.780] GetLastError () returned 0xb7 [0243.781] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0243.781] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f70 [0243.781] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204b90 [0243.781] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb8) returned 0x236d20 [0243.781] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c630 [0243.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c690 [0243.783] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012a-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfdd24, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0243.783] GetFileType (hFile=0x1e0) returned 0x1 [0243.784] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x288fa8 [0243.784] ReadFile (in: hFile=0x1e0, lpBuffer=0x288fa8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1cfdc80, lpOverlapped=0x0 | out: lpBuffer=0x288fa8*, lpNumberOfBytesRead=0x1cfdc80*=0x1000, lpOverlapped=0x0) returned 1 [0243.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24a5c0 [0243.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28dfd0 [0243.862] GetLastError () returned 0x0 [0244.266] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f9b0 [0244.266] GetLastError () returned 0x0 [0244.267] CloseHandle (hObject=0x204) returned 1 [0244.268] CloseHandle (hObject=0x23c) returned 1 [0244.268] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c5d0 [0244.269] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c5f0 [0244.269] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012a-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfdde0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0244.278] GetFileType (hFile=0x23c) returned 0x1 [0244.279] GetLastError () returned 0xb7 [0244.279] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28efd8 [0244.279] GetLastError () returned 0xb7 [0244.281] CloseHandle (hObject=0x23c) returned 1 [0244.281] DeleteFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012a-0000-1000-0000000ff1ce.xml")) returned 0 [0244.282] GetLastError () returned 0x20 [0244.282] GetLastError () returned 0x20 [0244.282] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228758 [0244.282] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260860 [0244.282] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260568 [0244.282] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x228518 [0244.282] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cf0 [0244.282] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c10 [0244.283] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x21c700 [0244.283] GetLastError () returned 0x20 [0244.283] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238cc8 [0244.283] GetLastError () returned 0x20 [0244.283] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238c58 [0244.283] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b02b0 [0244.283] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2606a8 [0244.284] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285bf0 [0244.284] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c600 [0244.284] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0244.284] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f908 [0244.284] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c620 [0244.284] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0244.284] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f968 [0244.284] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260770 [0244.285] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x284f90 [0244.285] GetLastError () returned 0x20 [0244.285] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x21c440 [0244.285] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x21c460 [0244.285] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c450 [0244.285] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c460 | out: hHeap=0x1f0000) returned 1 [0244.285] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c460 [0244.285] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c450 | out: hHeap=0x1f0000) returned 1 [0244.285] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c440 | out: hHeap=0x1f0000) returned 1 [0244.286] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c470 [0244.286] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f938 [0244.286] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c470 | out: hHeap=0x1f0000) returned 1 [0244.286] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f998 [0244.286] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f938 | out: hHeap=0x1f0000) returned 1 [0244.286] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c460 | out: hHeap=0x1f0000) returned 1 [0244.286] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f938 [0244.286] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f740 [0244.286] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f938 | out: hHeap=0x1f0000) returned 1 [0244.286] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f938 [0244.287] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f740 | out: hHeap=0x1f0000) returned 1 [0244.287] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f998 | out: hHeap=0x1f0000) returned 1 [0244.287] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f998 [0244.287] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204bd0 [0244.287] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f998 | out: hHeap=0x1f0000) returned 1 [0244.287] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204b90 [0244.287] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bd0 | out: hHeap=0x1f0000) returned 1 [0244.287] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f938 | out: hHeap=0x1f0000) returned 1 [0244.288] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f50 [0244.288] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2606d0 [0244.288] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f50 | out: hHeap=0x1f0000) returned 1 [0244.288] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204f70 [0244.288] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0244.288] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204b90 | out: hHeap=0x1f0000) returned 1 [0244.288] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204e30 [0244.288] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206808 [0244.288] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e30 | out: hHeap=0x1f0000) returned 1 [0244.288] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260888 [0244.289] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206808 | out: hHeap=0x1f0000) returned 1 [0244.289] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f70 | out: hHeap=0x1f0000) returned 1 [0244.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c500 [0244.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f998 [0244.289] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c500 | out: hHeap=0x1f0000) returned 1 [0244.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f938 [0244.289] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f998 | out: hHeap=0x1f0000) returned 1 [0244.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204e30 [0244.289] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f938 | out: hHeap=0x1f0000) returned 1 [0244.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206688 [0244.289] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e30 | out: hHeap=0x1f0000) returned 1 [0244.289] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206688 | out: hHeap=0x1f0000) returned 1 [0244.290] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0244.290] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0244.290] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0244.290] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285bf0 | out: hHeap=0x1f0000) returned 1 [0244.290] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0244.290] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239198 [0244.290] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0244.290] CryptAcquireContextA (in: phProv=0x1cfdf10, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1cfdf10*=0x212ad0) returned 1 [0244.291] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2606d0 | out: pbBuffer=0x2606d0) returned 1 [0244.291] CryptReleaseContext (hProv=0x212ad0, dwFlags=0x0) returned 1 [0244.292] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0244.292] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260590 [0244.292] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2605b8 [0244.292] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c58 [0244.292] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0244.292] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0244.292] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c58 | out: hHeap=0x1f0000) returned 1 [0244.292] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8dc8 [0244.292] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f998 [0244.292] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x2b0658 [0244.293] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260860 [0244.293] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2855c0 [0244.293] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f50 [0244.293] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b08c8 [0244.293] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260888 [0244.293] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2853b0 [0244.293] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c4e0 [0244.293] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0244.293] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f938 [0244.293] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c440 [0244.293] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0244.294] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f8a8 [0244.294] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f8a8 | out: hHeap=0x1f0000) returned 1 [0244.294] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0244.294] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c440 | out: hHeap=0x1f0000) returned 1 [0244.294] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f938 | out: hHeap=0x1f0000) returned 1 [0244.294] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0244.294] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c4e0 | out: hHeap=0x1f0000) returned 1 [0244.294] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2853b0 | out: hHeap=0x1f0000) returned 1 [0244.294] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0244.295] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b08c8 | out: hHeap=0x1f0000) returned 1 [0244.295] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238f68 [0244.295] GetLastError () returned 0x0 [0244.295] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238fd8 [0244.295] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0244.295] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0244.295] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0244.296] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0244.296] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0244.296] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0244.296] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x24ec00 [0244.296] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285cf8 [0244.296] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0244.296] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0244.296] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0244.297] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0244.297] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285e00 [0244.297] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0244.297] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0244.297] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fb50 [0244.297] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x26aeb0 [0244.297] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2ae770 [0244.297] QueryPerformanceCounter (in: lpPerformanceCount=0x1cfda60 | out: lpPerformanceCount=0x1cfda60*=40166641975) returned 1 [0244.652] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1cfdaa0 | out: lpSystemTimeAsFileTime=0x1cfdaa0) [0244.653] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x21c4e0 [0244.653] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0244.653] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e70 [0244.653] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e70 | out: hHeap=0x1f0000) returned 1 [0244.653] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0244.653] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bd0 [0244.653] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ef0 [0244.653] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ef0 | out: hHeap=0x1f0000) returned 1 [0244.654] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bd0 | out: hHeap=0x1f0000) returned 1 [0244.654] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c4e0 | out: hHeap=0x1f0000) returned 1 [0244.654] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0244.654] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238f68 [0244.654] GetLastError () returned 0x0 [0244.654] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0244.654] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0244.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0244.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260bd0 [0244.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260bf8 [0244.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0244.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0244.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260b30 [0244.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0244.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x222ee8 [0244.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0244.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0244.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0244.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0244.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0244.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260b58 [0244.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260c20 [0244.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b58 | out: hHeap=0x1f0000) returned 1 [0244.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0244.657] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c20 | out: hHeap=0x1f0000) returned 1 [0244.657] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0244.657] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x234b90 [0244.657] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b90 | out: hHeap=0x1f0000) returned 1 [0244.657] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0244.657] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0244.657] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f650 [0244.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2287a0 [0244.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260b58 [0244.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260a68 [0244.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260c20 [0244.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260c48 [0244.658] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a68 | out: hHeap=0x1f0000) returned 1 [0244.658] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b58 | out: hHeap=0x1f0000) returned 1 [0244.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0244.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260c70 [0244.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2609f0 [0244.659] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c70 | out: hHeap=0x1f0000) returned 1 [0244.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0244.659] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609f0 | out: hHeap=0x1f0000) returned 1 [0244.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206808 [0244.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x2a9c88 [0244.659] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a9c88 | out: hHeap=0x1f0000) returned 1 [0244.659] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206808 | out: hHeap=0x1f0000) returned 1 [0244.660] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b30 | out: hHeap=0x1f0000) returned 1 [0244.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abd98 [0244.660] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0244.660] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0244.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204f70 [0244.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aca50 [0244.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab8f8 [0244.660] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0244.661] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac360 [0244.661] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab8f8 | out: hHeap=0x1f0000) returned 1 [0244.661] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0244.661] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c20 | out: hHeap=0x1f0000) returned 1 [0244.661] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2287a0 | out: hHeap=0x1f0000) returned 1 [0244.661] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aca50 | out: hHeap=0x1f0000) returned 1 [0244.661] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f70 | out: hHeap=0x1f0000) returned 1 [0244.662] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f650 | out: hHeap=0x1f0000) returned 1 [0244.662] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0244.662] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2acca0 [0244.662] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2acca0 | out: hHeap=0x1f0000) returned 1 [0244.662] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ee8 | out: hHeap=0x1f0000) returned 1 [0244.663] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0244.663] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abd98 | out: hHeap=0x1f0000) returned 1 [0244.663] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0244.663] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0244.663] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bd0 | out: hHeap=0x1f0000) returned 1 [0244.663] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0244.664] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0244.664] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac5b0 [0244.664] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab458 [0244.664] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac5b0 | out: hHeap=0x1f0000) returned 1 [0244.664] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab458 | out: hHeap=0x1f0000) returned 1 [0244.664] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac360 | out: hHeap=0x1f0000) returned 1 [0244.664] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0244.664] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285e00 | out: hHeap=0x1f0000) returned 1 [0244.664] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24ec00 | out: hHeap=0x1f0000) returned 1 [0244.665] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x2ae428 [0244.665] GetLastError () returned 0x0 [0244.665] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c530 [0244.666] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c4e0 [0245.116] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012a-0000-1000-0000000ff1ce.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde10, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0245.117] GetFileType (hFile=0x230) returned 0x1 [0245.117] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x292ff8 [0245.118] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1cfdd98 | out: lpNewFilePointer=0x0) returned 1 [0245.118] GetLastError () returned 0xb7 [0245.118] CloseHandle (hObject=0x230) returned 1 [0245.119] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c4e0 | out: hHeap=0x1f0000) returned 1 [0245.119] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c530 | out: hHeap=0x1f0000) returned 1 [0245.119] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285cf8 | out: hHeap=0x1f0000) returned 1 [0245.120] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2855c0 | out: hHeap=0x1f0000) returned 1 [0245.120] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0245.120] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f50 | out: hHeap=0x1f0000) returned 1 [0245.120] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0658 | out: hHeap=0x1f0000) returned 1 [0245.120] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f998 | out: hHeap=0x1f0000) returned 1 [0245.120] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8dc8 | out: hHeap=0x1f0000) returned 1 [0245.120] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae428 | out: hHeap=0x1f0000) returned 1 [0245.121] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0245.121] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0245.121] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x26aeb0 | out: hHeap=0x1f0000) returned 1 [0245.121] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae770 | out: hHeap=0x1f0000) returned 1 [0245.121] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239198 | out: hHeap=0x1f0000) returned 1 [0245.121] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c700 | out: hHeap=0x1f0000) returned 1 [0245.121] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f968 | out: hHeap=0x1f0000) returned 1 [0245.121] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0245.122] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c620 | out: hHeap=0x1f0000) returned 1 [0245.122] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f908 | out: hHeap=0x1f0000) returned 1 [0245.122] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0245.122] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c600 | out: hHeap=0x1f0000) returned 1 [0245.122] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x284f90 | out: hHeap=0x1f0000) returned 1 [0245.122] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0245.122] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b02b0 | out: hHeap=0x1f0000) returned 1 [0245.122] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228518 | out: hHeap=0x1f0000) returned 1 [0245.123] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0245.123] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0245.123] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228758 | out: hHeap=0x1f0000) returned 1 [0245.123] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5f0 | out: hHeap=0x1f0000) returned 1 [0245.123] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5d0 | out: hHeap=0x1f0000) returned 1 [0245.123] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x288fa8 | out: hHeap=0x1f0000) returned 1 [0245.123] CloseHandle (hObject=0x1e0) returned 1 [0245.124] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c690 | out: hHeap=0x1f0000) returned 1 [0245.124] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c630 | out: hHeap=0x1f0000) returned 1 [0245.124] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236d20 | out: hHeap=0x1f0000) returned 1 [0245.124] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24a5c0 | out: hHeap=0x1f0000) returned 1 [0245.124] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f9b0 | out: hHeap=0x1f0000) returned 1 [0245.124] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d70 | out: hHeap=0x1f0000) returned 1 [0245.125] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28dfd0 | out: hHeap=0x1f0000) returned 1 [0245.125] CloseHandle (hObject=0x22c) returned 1 [0245.125] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5e0 | out: hHeap=0x1f0000) returned 1 [0245.125] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c710 | out: hHeap=0x1f0000) returned 1 [0245.125] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2adbf8 | out: hHeap=0x1f0000) returned 1 [0245.126] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cd0 | out: hHeap=0x1f0000) returned 1 [0245.126] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21b8e8 | out: hHeap=0x1f0000) returned 1 [0245.126] CloseHandle (hObject=0x220) returned 1 [0245.127] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c650 | out: hHeap=0x1f0000) returned 1 [0245.127] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5c0 | out: hHeap=0x1f0000) returned 1 [0245.127] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad4c8 | out: hHeap=0x1f0000) returned 1 [0245.127] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c660 | out: hHeap=0x1f0000) returned 1 [0245.127] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5b0 | out: hHeap=0x1f0000) returned 1 [0245.127] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c560 | out: hHeap=0x1f0000) returned 1 [0245.128] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c640 | out: hHeap=0x1f0000) returned 1 [0245.128] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d368 | out: hHeap=0x1f0000) returned 1 [0245.128] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x26c1b8 | out: hHeap=0x1f0000) returned 1 [0245.128] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae888 | out: hHeap=0x1f0000) returned 1 [0245.128] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206628 | out: hHeap=0x1f0000) returned 1 [0245.128] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f9c8 | out: hHeap=0x1f0000) returned 1 [0245.128] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f980 | out: hHeap=0x1f0000) returned 1 [0245.128] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2337d8 | out: hHeap=0x1f0000) returned 1 [0245.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x26fad0 | out: hHeap=0x1f0000) returned 1 [0245.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aeab8 | out: hHeap=0x1f0000) returned 1 [0245.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238e18 | out: hHeap=0x1f0000) returned 1 [0245.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224978 | out: hHeap=0x1f0000) returned 1 [0245.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262b18 | out: hHeap=0x1f0000) returned 1 [0245.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2289e0 | out: hHeap=0x1f0000) returned 1 [0245.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0245.130] DeleteFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012a-0000-1000-0000000ff1ce.xml")) returned 1 [0245.132] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml", cAlternateFileName="APE0B7~1.XML")) returned 1 [0245.132] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2201c0 [0245.132] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0245.132] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224978 [0245.133] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0245.133] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2245d8 | out: hHeap=0x1f0000) returned 1 [0245.133] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2201c0 | out: hHeap=0x1f0000) returned 1 [0245.134] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012b-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe658, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0245.134] GetFileType (hFile=0x220) returned 0x1 [0245.135] CloseHandle (hObject=0x220) returned 1 [0245.135] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224320 [0245.135] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012b-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfe6ec | out: lpFileInformation=0x1cfe6ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0245.135] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224320 | out: hHeap=0x1f0000) returned 1 [0245.135] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2247a8 [0245.136] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012b-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfe6f4 | out: lpFileInformation=0x1cfe6f4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0245.136] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2247a8 | out: hHeap=0x1f0000) returned 1 [0245.136] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224238 [0245.136] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224238 | out: hHeap=0x1f0000) returned 1 [0245.136] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83ea71ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83ea71ba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd2f, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP8BF9~1.XML")) returned 1 [0245.136] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2201c0 [0245.136] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220238 [0245.136] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2246c0 [0245.137] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220238 | out: hHeap=0x1f0000) returned 1 [0245.137] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224978 | out: hHeap=0x1f0000) returned 1 [0245.137] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2201c0 | out: hHeap=0x1f0000) returned 1 [0245.137] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-3101-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe658, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0245.138] GetFileType (hFile=0x220) returned 0x1 [0245.138] CloseHandle (hObject=0x220) returned 1 [0245.138] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x223cc8 [0245.139] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-3101-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfe6ec | out: lpFileInformation=0x1cfe6ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83ea71ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83ea71ba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd2f)) returned 1 [0245.139] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223cc8 | out: hHeap=0x1f0000) returned 1 [0245.139] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x223f80 [0245.139] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-3101-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfe6f4 | out: lpFileInformation=0x1cfe6f4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83ea71ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83ea71ba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd2f)) returned 1 [0245.139] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223f80 | out: hHeap=0x1f0000) returned 1 [0245.139] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224978 [0245.139] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224978 | out: hHeap=0x1f0000) returned 1 [0245.139] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834f7581, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834f7581, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdad1c133, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x212979, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.common.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="APBB83~1.ODV")) returned 1 [0245.139] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2adbf8 [0245.140] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2201c0 [0245.140] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120) returned 0x2ac110 [0245.140] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2201c0 | out: hHeap=0x1f0000) returned 1 [0245.140] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2246c0 | out: hHeap=0x1f0000) returned 1 [0245.140] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2adbf8 | out: hHeap=0x1f0000) returned 1 [0245.140] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.common.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe658, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0245.140] GetFileType (hFile=0x220) returned 0x1 [0245.141] CloseHandle (hObject=0x220) returned 1 [0245.141] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120) returned 0x2aafb8 [0245.141] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.common.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x1cfe6ec | out: lpFileInformation=0x1cfe6ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834f7581, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834f7581, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdad1c133, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x212979)) returned 1 [0245.142] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aafb8 | out: hHeap=0x1f0000) returned 1 [0245.142] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120) returned 0x2ac238 [0245.142] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.common.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x1cfe6f4 | out: lpFileInformation=0x1cfe6f4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834f7581, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834f7581, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdad1c133, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x212979)) returned 1 [0245.142] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac238 | out: hHeap=0x1f0000) returned 1 [0245.142] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120) returned 0x2ab330 [0245.142] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab330 | out: hHeap=0x1f0000) returned 1 [0245.142] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84391d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2667, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifestLoc.en-us.xml", cAlternateFileName="AP942B~1.XML")) returned 1 [0245.142] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228758 [0245.142] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0245.143] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218fa8 [0245.143] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0245.143] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac110 | out: hHeap=0x1f0000) returned 1 [0245.143] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228758 | out: hHeap=0x1f0000) returned 1 [0245.143] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifestloc.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe658, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0245.144] GetFileType (hFile=0x220) returned 0x1 [0245.144] CloseHandle (hObject=0x220) returned 1 [0245.144] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a188 [0245.144] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifestloc.en-us.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfe6ec | out: lpFileInformation=0x1cfe6ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84391d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2667)) returned 1 [0245.145] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a188 | out: hHeap=0x1f0000) returned 1 [0245.145] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219c48 [0245.145] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifestloc.en-us.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfe6f4 | out: lpFileInformation=0x1cfe6f4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84391d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2667)) returned 1 [0245.145] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219c48 | out: hHeap=0x1f0000) returned 1 [0245.145] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a4d0 [0245.145] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a4d0 | out: hHeap=0x1f0000) returned 1 [0245.145] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x175, dwReserved0=0x0, dwReserved1=0x0, cFileName="AuthoredExtensions.xml", cAlternateFileName="AUTHOR~1.XML")) returned 1 [0245.145] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239160 [0245.145] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fc98 [0245.145] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218978 [0245.146] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fc98 | out: hHeap=0x1f0000) returned 1 [0245.146] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218fa8 | out: hHeap=0x1f0000) returned 1 [0245.146] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239160 | out: hHeap=0x1f0000) returned 1 [0245.146] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\authoredextensions.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe658, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0245.146] GetFileType (hFile=0x220) returned 0x1 [0245.147] CloseHandle (hObject=0x220) returned 1 [0245.148] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a038 [0245.148] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\authoredextensions.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfe6ec | out: lpFileInformation=0x1cfe6ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x175)) returned 1 [0245.148] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a038 | out: hHeap=0x1f0000) returned 1 [0245.148] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a6c8 [0245.148] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\authoredextensions.xml"), fInfoLevelId=0x0, lpFileInformation=0x1cfe6f4 | out: lpFileInformation=0x1cfe6f4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x175)) returned 1 [0245.148] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a6c8 | out: hHeap=0x1f0000) returned 1 [0245.149] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a4d0 [0245.149] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a4d0 | out: hHeap=0x1f0000) returned 1 [0245.149] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x175, dwReserved0=0x0, dwReserved1=0x0, cFileName="AuthoredExtensions.xml", cAlternateFileName="AUTHOR~1.XML")) returned 0 [0245.149] FindClose (in: hFindFile=0x24e900 | out: hFindFile=0x24e900) returned 1 [0245.149] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218978 | out: hHeap=0x1f0000) returned 1 [0245.149] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262650 | out: hHeap=0x1f0000) returned 1 [0245.150] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260838 | out: hHeap=0x1f0000) returned 1 [0245.150] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228ab8 | out: hHeap=0x1f0000) returned 1 [0245.150] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228b48 [0245.150] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238488 [0245.150] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262b18 [0245.150] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b02b0 [0245.150] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\*", lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e900 [0245.150] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0658 [0245.151] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b02b0 | out: hHeap=0x1f0000) returned 1 [0245.151] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0245.151] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0245.151] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b08c8 [0245.151] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0658 | out: hHeap=0x1f0000) returned 1 [0245.151] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0245.151] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0245.151] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86813dc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xda49deba, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xda49deba, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="client", cAlternateFileName="")) returned 1 [0245.151] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b02b0 [0245.152] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b08c8 | out: hHeap=0x1f0000) returned 1 [0245.152] lstrcmpW (lpString1="client", lpString2=".") returned 1 [0245.152] lstrcmpW (lpString1="client", lpString2="..") returned 1 [0245.152] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204f50 [0245.152] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0658 [0245.152] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLIPART", cAlternateFileName="")) returned 1 [0245.152] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b08c8 [0245.152] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b02b0 | out: hHeap=0x1f0000) returned 1 [0245.152] lstrcmpW (lpString1="CLIPART", lpString2=".") returned 1 [0245.153] lstrcmpW (lpString1="CLIPART", lpString2="..") returned 1 [0245.153] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238f68 [0245.153] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b02b0 [0245.153] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f50 | out: hHeap=0x1f0000) returned 1 [0245.153] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x114a91d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114a91d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Document Themes 16", cAlternateFileName="DOCUME~1")) returned 1 [0245.153] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239198 [0245.153] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0e78 [0245.153] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220c58 [0245.153] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0e78 | out: hHeap=0x1f0000) returned 1 [0245.154] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b08c8 | out: hHeap=0x1f0000) returned 1 [0245.154] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239198 | out: hHeap=0x1f0000) returned 1 [0245.154] lstrcmpW (lpString1="Document Themes 16", lpString2=".") returned 1 [0245.154] lstrcmpW (lpString1="Document Themes 16", lpString2="..") returned 1 [0245.154] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x48) returned 0x225c98 [0245.154] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2132c8 [0245.154] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238f68 | out: hHeap=0x1f0000) returned 1 [0245.154] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x114f5747, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114f5747, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flattener", cAlternateFileName="FLATTE~1")) returned 1 [0245.154] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0245.155] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b08c8 [0245.155] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2215d8 [0245.155] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b08c8 | out: hHeap=0x1f0000) returned 1 [0245.155] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0245.155] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0245.155] lstrcmpW (lpString1="Flattener", lpString2=".") returned 1 [0245.155] lstrcmpW (lpString1="Flattener", lpString2="..") returned 1 [0245.155] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b08c8 [0245.155] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0245.155] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225c98 | out: hHeap=0x1f0000) returned 1 [0245.155] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x115da4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115da4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fre", cAlternateFileName="")) returned 1 [0245.156] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0e78 [0245.156] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0245.156] lstrcmpW (lpString1="fre", lpString2=".") returned 1 [0245.156] lstrcmpW (lpString1="fre", lpString2="..") returned 1 [0245.156] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0245.156] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0ee0 [0245.156] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b08c8 | out: hHeap=0x1f0000) returned 1 [0245.156] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1f5fb21, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b2abe77, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b2abe77, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Integration", cAlternateFileName="INTEGR~1")) returned 1 [0245.156] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0245.157] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b08c8 [0245.157] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221838 [0245.157] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b08c8 | out: hHeap=0x1f0000) returned 1 [0245.157] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0e78 | out: hHeap=0x1f0000) returned 1 [0245.157] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0245.157] lstrcmpW (lpString1="Integration", lpString2=".") returned 1 [0245.157] lstrcmpW (lpString1="Integration", lpString2="..") returned 1 [0245.157] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fc98 [0245.157] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe2687c83, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee308135, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xee308135, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Licenses16", cAlternateFileName="LICENS~1")) returned 1 [0245.158] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0245.158] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0e78 [0245.158] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2212e0 [0245.158] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0e78 | out: hHeap=0x1f0000) returned 1 [0245.158] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0245.158] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0245.158] lstrcmpW (lpString1="Licenses16", lpString2=".") returned 1 [0245.158] lstrcmpW (lpString1="Licenses16", lpString2="..") returned 1 [0245.158] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd8) returned 0x217038 [0245.158] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0245.159] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0245.159] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee45f66d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x983c2c8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="loc", cAlternateFileName="")) returned 1 [0245.159] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0d40 [0245.159] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0245.159] lstrcmpW (lpString1="loc", lpString2=".") returned 1 [0245.159] lstrcmpW (lpString1="loc", lpString2="..") returned 1 [0245.159] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0e78 [0245.159] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mcxml", cAlternateFileName="")) returned 1 [0245.159] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0f48 [0245.160] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0d40 | out: hHeap=0x1f0000) returned 1 [0245.160] lstrcmpW (lpString1="mcxml", lpString2=".") returned 1 [0245.160] lstrcmpW (lpString1="mcxml", lpString2="..") returned 1 [0245.160] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0d40 [0245.160] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3c29db74, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c29db74, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office16", cAlternateFileName="")) returned 1 [0245.160] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0245.160] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b08c8 [0245.160] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220eb8 [0245.160] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b08c8 | out: hHeap=0x1f0000) returned 1 [0245.160] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0f48 | out: hHeap=0x1f0000) returned 1 [0245.160] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0245.161] lstrcmpW (lpString1="Office16", lpString2=".") returned 1 [0245.161] lstrcmpW (lpString1="Office16", lpString2="..") returned 1 [0245.161] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x138) returned 0x22d368 [0245.161] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd88 [0245.161] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0245.161] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b1a0d3d, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b1a0d3d, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rsod", cAlternateFileName="")) returned 1 [0245.161] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0f48 [0245.161] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0245.162] lstrcmpW (lpString1="rsod", lpString2=".") returned 1 [0245.162] lstrcmpW (lpString1="rsod", lpString2="..") returned 1 [0245.162] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b08c8 [0245.162] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xb48c20e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb48c20e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stationery", cAlternateFileName="STATIO~1")) returned 1 [0245.162] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0245.162] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236670 [0245.522] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220fe8 [0245.522] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236670 | out: hHeap=0x1f0000) returned 1 [0245.523] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0f48 | out: hHeap=0x1f0000) returned 1 [0245.523] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0245.523] lstrcmpW (lpString1="Stationery", lpString2=".") returned 1 [0245.523] lstrcmpW (lpString1="Stationery", lpString2="..") returned 1 [0245.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2201c0 [0245.523] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0245.524] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0245.524] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214f08 [0245.524] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2212e0 [0245.524] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f08 | out: hHeap=0x1f0000) returned 1 [0245.524] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0245.525] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0245.525] lstrcmpW (lpString1="Templates", lpString2=".") returned 1 [0245.525] lstrcmpW (lpString1="Templates", lpString2="..") returned 1 [0245.525] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220238 [0245.525] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VFS", cAlternateFileName="")) returned 1 [0245.525] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214af8 [0245.526] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0245.526] lstrcmpW (lpString1="VFS", lpString2=".") returned 1 [0245.526] lstrcmpW (lpString1="VFS", lpString2="..") returned 1 [0245.526] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c8) returned 0x231d78 [0245.526] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d00 [0245.526] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d368 | out: hHeap=0x1f0000) returned 1 [0245.527] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1cfe890 | out: lpFindFileData=0x1cfe890*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VFS", cAlternateFileName="")) returned 0 [0245.527] FindClose (in: hFindFile=0x24e900 | out: hFindFile=0x24e900) returned 1 [0245.527] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228a28 [0245.527] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0245.528] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e1c8 [0245.528] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2203a0 [0245.528] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\*", lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86813dc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xda49deba, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xda49deba, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2b06ae, dwReserved1=0x540052, cFileName=".", cAlternateFileName="")) returned 0x24ec00 [0245.528] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d68 [0245.529] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2218d0 [0245.529] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d68 | out: hHeap=0x1f0000) returned 1 [0245.529] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2203a0 | out: hHeap=0x1f0000) returned 1 [0245.529] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0245.529] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86813dc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xda49deba, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xda49deba, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2b06ae, dwReserved1=0x540052, cFileName="..", cAlternateFileName="")) returned 1 [0245.530] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d68 [0245.530] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220fe8 [0245.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d68 | out: hHeap=0x1f0000) returned 1 [0245.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0245.530] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0245.530] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0245.531] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0715cb9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0715cb9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0952017, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x2b06ae, dwReserved1=0x540052, cFileName="api-ms-win-core-file-l1-2-0.dll", cAlternateFileName="API-MS~1.DLL")) returned 1 [0245.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2289e0 [0245.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2149c0 [0245.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219e40 [0245.531] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2149c0 | out: hHeap=0x1f0000) returned 1 [0245.531] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0245.532] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2289e0 | out: hHeap=0x1f0000) returned 1 [0245.775] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-file-l1-2-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0245.776] GetFileType (hFile=0x220) returned 0x1 [0245.776] CloseHandle (hObject=0x220) returned 1 [0245.777] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a038 [0245.777] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-file-l1-2-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0715cb9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0715cb9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0952017, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0)) returned 1 [0245.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a038 | out: hHeap=0x1f0000) returned 1 [0245.777] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219d98 [0245.778] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-file-l1-2-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0715cb9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0715cb9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0952017, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0)) returned 1 [0245.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219d98 | out: hHeap=0x1f0000) returned 1 [0245.778] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a230 [0245.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a230 | out: hHeap=0x1f0000) returned 1 [0245.778] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0952017, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0952017, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0a832cb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x2b06ae, dwReserved1=0x540052, cFileName="api-ms-win-core-file-l2-1-0.dll", cAlternateFileName="API-MS~3.DLL")) returned 1 [0245.778] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228cb0 [0245.779] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214dd0 [0245.779] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a770 [0245.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214dd0 | out: hHeap=0x1f0000) returned 1 [0245.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219e40 | out: hHeap=0x1f0000) returned 1 [0245.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228cb0 | out: hHeap=0x1f0000) returned 1 [0245.780] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l2-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-file-l2-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0245.780] GetFileType (hFile=0x220) returned 0x1 [0245.781] CloseHandle (hObject=0x220) returned 1 [0245.781] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219c48 [0245.781] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l2-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-file-l2-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0952017, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0952017, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0a832cb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0)) returned 1 [0245.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219c48 | out: hHeap=0x1f0000) returned 1 [0245.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219f90 [0245.782] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l2-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-file-l2-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0952017, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0952017, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0a832cb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0)) returned 1 [0245.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219f90 | out: hHeap=0x1f0000) returned 1 [0245.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a620 [0245.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a620 | out: hHeap=0x1f0000) returned 1 [0245.782] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd089348e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd089348e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd09c4608, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x52c0, dwReserved0=0x2b06ae, dwReserved1=0x540052, cFileName="api-ms-win-core-localization-l1-2-0.dll", cAlternateFileName="API-MS~2.DLL")) returned 1 [0245.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8e20 [0245.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214fd8 [0245.783] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2adbf8 [0245.783] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214fd8 | out: hHeap=0x1f0000) returned 1 [0245.783] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a770 | out: hHeap=0x1f0000) returned 1 [0245.783] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8e20 | out: hHeap=0x1f0000) returned 1 [0245.784] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-localization-l1-2-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0245.784] GetFileType (hFile=0x220) returned 0x1 [0245.784] CloseHandle (hObject=0x220) returned 1 [0245.785] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad410 [0245.785] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-localization-l1-2-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd089348e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd089348e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd09c4608, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x52c0)) returned 1 [0245.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad410 | out: hHeap=0x1f0000) returned 1 [0245.785] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ade20 [0245.785] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-localization-l1-2-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd089348e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd089348e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd09c4608, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x52c0)) returned 1 [0245.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ade20 | out: hHeap=0x1f0000) returned 1 [0245.785] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2adcb0 [0245.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2adcb0 | out: hHeap=0x1f0000) returned 1 [0245.786] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd115de42, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd115de42, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd158a009, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x2b06ae, dwReserved1=0x540052, cFileName="api-ms-win-core-processthreads-l1-1-1.dll", cAlternateFileName="AP750A~1.DLL")) returned 1 [0245.786] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214dd0 [0245.786] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2149c0 [0245.786] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f5d8 [0245.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2149c0 | out: hHeap=0x1f0000) returned 1 [0245.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2adbf8 | out: hHeap=0x1f0000) returned 1 [0245.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214dd0 | out: hHeap=0x1f0000) returned 1 [0245.787] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-processthreads-l1-1-1.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0245.788] GetFileType (hFile=0x220) returned 0x1 [0245.788] CloseHandle (hObject=0x220) returned 1 [0245.789] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f6a0 [0245.789] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-processthreads-l1-1-1.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd115de42, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd115de42, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd158a009, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0)) returned 1 [0245.789] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0245.789] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f510 [0245.789] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-processthreads-l1-1-1.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd115de42, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd115de42, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd158a009, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0)) returned 1 [0245.790] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0245.790] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f510 [0245.790] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0245.790] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0d0baf0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0d0baf0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0eaf4e3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x2b06ae, dwReserved1=0x540052, cFileName="api-ms-win-core-synch-l1-2-0.dll", cAlternateFileName="APF10C~1.DLL")) returned 1 [0245.790] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8e20 [0245.790] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2149c0 [0245.790] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a4d0 [0245.790] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2149c0 | out: hHeap=0x1f0000) returned 1 [0245.790] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0245.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8e20 | out: hHeap=0x1f0000) returned 1 [0245.791] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-synch-l1-2-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0245.791] GetFileType (hFile=0x220) returned 0x1 [0245.793] CloseHandle (hObject=0x220) returned 1 [0245.794] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21aab8 [0245.794] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-synch-l1-2-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0d0baf0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0d0baf0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0eaf4e3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0)) returned 1 [0245.794] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21aab8 | out: hHeap=0x1f0000) returned 1 [0245.794] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219d98 [0245.794] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-synch-l1-2-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0d0baf0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0d0baf0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0eaf4e3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0)) returned 1 [0245.795] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219d98 | out: hHeap=0x1f0000) returned 1 [0245.795] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a188 [0245.795] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a188 | out: hHeap=0x1f0000) returned 1 [0245.795] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0c4cdf5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0c4cdf5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0df0820, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x2b06ae, dwReserved1=0x540052, cFileName="api-ms-win-core-timezone-l1-1-0.dll", cAlternateFileName="AP7902~1.DLL")) returned 1 [0245.795] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8e20 [0245.795] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2149c0 [0245.795] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad1e8 [0245.795] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2149c0 | out: hHeap=0x1f0000) returned 1 [0245.795] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a4d0 | out: hHeap=0x1f0000) returned 1 [0245.795] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8e20 | out: hHeap=0x1f0000) returned 1 [0245.796] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-timezone-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-timezone-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0245.796] GetFileType (hFile=0x220) returned 0x1 [0245.797] CloseHandle (hObject=0x220) returned 1 [0245.797] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ada88 [0245.798] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-timezone-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-timezone-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0c4cdf5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0c4cdf5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0df0820, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0)) returned 1 [0245.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ada88 | out: hHeap=0x1f0000) returned 1 [0245.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad860 [0245.798] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-timezone-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-timezone-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0c4cdf5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0c4cdf5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0df0820, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0)) returned 1 [0245.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad860 | out: hHeap=0x1f0000) returned 1 [0245.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad6f0 [0245.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad6f0 | out: hHeap=0x1f0000) returned 1 [0245.799] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0c26cd1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0c26cd1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0e62fac, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d60, dwReserved0=0x2b06ae, dwReserved1=0x540052, cFileName="api-ms-win-core-xstate-l2-1-0.dll", cAlternateFileName="APA632~1.DLL")) returned 1 [0245.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8e20 [0245.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214fd8 [0245.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad918 [0245.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214fd8 | out: hHeap=0x1f0000) returned 1 [0245.800] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad1e8 | out: hHeap=0x1f0000) returned 1 [0245.800] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8e20 | out: hHeap=0x1f0000) returned 1 [0245.800] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-xstate-l2-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-xstate-l2-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0245.801] GetFileType (hFile=0x220) returned 0x1 [0245.801] CloseHandle (hObject=0x220) returned 1 [0245.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad860 [0245.802] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-xstate-l2-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-xstate-l2-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0c26cd1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0c26cd1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0e62fac, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d60)) returned 1 [0245.802] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad860 | out: hHeap=0x1f0000) returned 1 [0245.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad6f0 [0245.802] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-xstate-l2-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-xstate-l2-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0c26cd1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0c26cd1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0e62fac, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d60)) returned 1 [0245.803] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad6f0 | out: hHeap=0x1f0000) returned 1 [0245.803] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad860 [0245.803] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad860 | out: hHeap=0x1f0000) returned 1 [0245.803] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd289cda7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd289cda7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2a1a592, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x2b06ae, dwReserved1=0x540052, cFileName="api-ms-win-crt-conio-l1-1-0.dll", cAlternateFileName="AP5C76~1.DLL")) returned 1 [0245.803] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228758 [0245.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a90 [0245.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219e40 [0245.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a90 | out: hHeap=0x1f0000) returned 1 [0245.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad918 | out: hHeap=0x1f0000) returned 1 [0245.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228758 | out: hHeap=0x1f0000) returned 1 [0245.805] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-conio-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-conio-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0245.805] GetFileType (hFile=0x220) returned 0x1 [0245.806] CloseHandle (hObject=0x220) returned 1 [0245.806] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a188 [0245.806] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-conio-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-conio-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd289cda7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd289cda7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2a1a592, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0)) returned 1 [0245.807] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a188 | out: hHeap=0x1f0000) returned 1 [0245.807] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a4d0 [0245.807] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-conio-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-conio-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd289cda7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd289cda7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2a1a592, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0)) returned 1 [0245.807] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a4d0 | out: hHeap=0x1f0000) returned 1 [0245.807] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a578 [0245.807] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a578 | out: hHeap=0x1f0000) returned 1 [0245.807] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0b8e391, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0b8e391, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0d7e20c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x58c0, dwReserved0=0x2b06ae, dwReserved1=0x540052, cFileName="api-ms-win-crt-convert-l1-1-0.dll", cAlternateFileName="APFD9C~1.DLL")) returned 1 [0245.807] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8e20 [0245.808] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2149c0 [0245.808] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2acfc0 [0245.808] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2149c0 | out: hHeap=0x1f0000) returned 1 [0245.808] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219e40 | out: hHeap=0x1f0000) returned 1 [0245.808] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8e20 | out: hHeap=0x1f0000) returned 1 [0245.809] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-convert-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0245.809] GetFileType (hFile=0x220) returned 0x1 [0245.810] CloseHandle (hObject=0x220) returned 1 [0245.810] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad410 [0245.810] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-convert-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0b8e391, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0b8e391, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0d7e20c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x58c0)) returned 1 [0245.810] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad410 | out: hHeap=0x1f0000) returned 1 [0245.811] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad860 [0245.811] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-convert-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0b8e391, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0b8e391, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0d7e20c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x58c0)) returned 1 [0245.811] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad860 | out: hHeap=0x1f0000) returned 1 [0245.811] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad078 [0245.811] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad078 | out: hHeap=0x1f0000) returned 1 [0245.811] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0aa952a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0aa952a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0bda864, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x2b06ae, dwReserved1=0x540052, cFileName="api-ms-win-crt-environment-l1-1-0.dll", cAlternateFileName="APC00F~1.DLL")) returned 1 [0245.811] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8e20 [0245.811] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2149c0 [0245.811] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad860 [0245.812] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2149c0 | out: hHeap=0x1f0000) returned 1 [0245.812] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2acfc0 | out: hHeap=0x1f0000) returned 1 [0245.812] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8e20 | out: hHeap=0x1f0000) returned 1 [0245.813] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-environment-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0245.813] GetFileType (hFile=0x220) returned 0x1 [0245.813] CloseHandle (hObject=0x220) returned 1 [0245.814] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad6f0 [0245.814] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-environment-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0aa952a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0aa952a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0bda864, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0)) returned 1 [0245.814] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad6f0 | out: hHeap=0x1f0000) returned 1 [0245.814] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2adbf8 [0245.815] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-environment-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0aa952a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0aa952a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0bda864, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0)) returned 1 [0245.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2adbf8 | out: hHeap=0x1f0000) returned 1 [0245.815] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2adcb0 [0245.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2adcb0 | out: hHeap=0x1f0000) returned 1 [0245.815] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0aa952a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0aa952a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0c99389, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x50c0, dwReserved0=0x2b06ae, dwReserved1=0x540052, cFileName="api-ms-win-crt-filesystem-l1-1-0.dll", cAlternateFileName="API-MS~4.DLL")) returned 1 [0245.815] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8e20 [0245.815] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214dd0 [0245.816] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2add68 [0245.816] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214dd0 | out: hHeap=0x1f0000) returned 1 [0245.816] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad860 | out: hHeap=0x1f0000) returned 1 [0245.816] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8e20 | out: hHeap=0x1f0000) returned 1 [0245.817] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-filesystem-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-filesystem-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0245.817] GetFileType (hFile=0x220) returned 0x1 [0245.818] CloseHandle (hObject=0x220) returned 1 [0245.818] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad6f0 [0245.818] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-filesystem-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-filesystem-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0aa952a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0aa952a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0c99389, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x50c0)) returned 1 [0245.818] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad6f0 | out: hHeap=0x1f0000) returned 1 [0246.258] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad358 [0246.258] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-filesystem-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-filesystem-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0aa952a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0aa952a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0c99389, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x50c0)) returned 1 [0246.259] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad358 | out: hHeap=0x1f0000) returned 1 [0246.259] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2adb40 [0246.259] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2adb40 | out: hHeap=0x1f0000) returned 1 [0246.259] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0af5a16, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0af5a16, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0c4cdf5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x2b06ae, dwReserved1=0x540052, cFileName="api-ms-win-crt-heap-l1-1-0.dll", cAlternateFileName="AP23C9~1.DLL")) returned 1 [0246.259] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228b00 [0246.259] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214dd0 [0246.259] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a968 [0246.260] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214dd0 | out: hHeap=0x1f0000) returned 1 [0246.260] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2add68 | out: hHeap=0x1f0000) returned 1 [0246.260] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228b00 | out: hHeap=0x1f0000) returned 1 [0246.260] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-heap-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-heap-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0246.261] GetFileType (hFile=0x1fc) returned 0x1 [0246.261] CloseHandle (hObject=0x1fc) returned 1 [0246.261] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a038 [0246.262] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-heap-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-heap-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0af5a16, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0af5a16, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0c4cdf5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0)) returned 1 [0246.262] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a038 | out: hHeap=0x1f0000) returned 1 [0246.262] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219d98 [0246.262] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-heap-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-heap-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0af5a16, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0af5a16, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0c4cdf5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0)) returned 1 [0246.262] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219d98 | out: hHeap=0x1f0000) returned 1 [0246.262] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a578 [0246.262] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a578 | out: hHeap=0x1f0000) returned 1 [0246.262] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1e086ac, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1e086ac, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2365abe, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x2b06ae, dwReserved1=0x540052, cFileName="api-ms-win-crt-locale-l1-1-0.dll", cAlternateFileName="APCB40~1.DLL")) returned 1 [0246.263] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8d18 [0246.263] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214f08 [0246.263] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a0e0 [0246.263] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f08 | out: hHeap=0x1f0000) returned 1 [0246.263] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a968 | out: hHeap=0x1f0000) returned 1 [0246.263] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0246.263] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-locale-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-locale-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0246.264] GetFileType (hFile=0x1fc) returned 0x1 [0246.264] CloseHandle (hObject=0x1fc) returned 1 [0246.264] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219e40 [0246.264] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-locale-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-locale-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1e086ac, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1e086ac, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2365abe, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0)) returned 1 [0246.265] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219e40 | out: hHeap=0x1f0000) returned 1 [0246.265] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a188 [0246.265] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-locale-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-locale-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1e086ac, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1e086ac, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2365abe, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0)) returned 1 [0246.265] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a188 | out: hHeap=0x1f0000) returned 1 [0246.265] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219d98 [0246.265] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219d98 | out: hHeap=0x1f0000) returned 1 [0246.265] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1137cdf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1137cdf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1d23858, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6cc0, dwReserved0=0x2b06ae, dwReserved1=0x540052, cFileName="api-ms-win-crt-math-l1-1-0.dll", cAlternateFileName="APAE51~1.DLL")) returned 1 [0246.265] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228638 [0246.265] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214dd0 [0246.266] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219f90 [0246.266] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214dd0 | out: hHeap=0x1f0000) returned 1 [0246.266] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a0e0 | out: hHeap=0x1f0000) returned 1 [0246.266] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228638 | out: hHeap=0x1f0000) returned 1 [0246.267] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-math-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-math-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0246.267] GetFileType (hFile=0x1fc) returned 0x1 [0246.267] CloseHandle (hObject=0x1fc) returned 1 [0246.268] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219e40 [0246.268] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-math-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-math-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1137cdf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1137cdf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1d23858, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6cc0)) returned 1 [0246.268] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219e40 | out: hHeap=0x1f0000) returned 1 [0246.268] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a8c0 [0246.268] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-math-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-math-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1137cdf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1137cdf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1d23858, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6cc0)) returned 1 [0246.269] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a8c0 | out: hHeap=0x1f0000) returned 1 [0246.269] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219cf0 [0246.269] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219cf0 | out: hHeap=0x1f0000) returned 1 [0246.269] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1006983, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1006983, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1242d5d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x68c0, dwReserved0=0x2b06ae, dwReserved1=0x540052, cFileName="api-ms-win-crt-multibyte-l1-1-0.dll", cAlternateFileName="AP972F~1.DLL")) returned 1 [0246.269] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8e20 [0246.269] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a28 [0246.269] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad130 [0246.269] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a28 | out: hHeap=0x1f0000) returned 1 [0246.269] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219f90 | out: hHeap=0x1f0000) returned 1 [0246.269] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8e20 | out: hHeap=0x1f0000) returned 1 [0246.270] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-multibyte-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-multibyte-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0246.270] GetFileType (hFile=0x1fc) returned 0x1 [0246.271] CloseHandle (hObject=0x1fc) returned 1 [0246.271] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ade20 [0246.271] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-multibyte-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-multibyte-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1006983, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1006983, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1242d5d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x68c0)) returned 1 [0246.271] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ade20 | out: hHeap=0x1f0000) returned 1 [0246.271] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad410 [0246.271] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-multibyte-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-multibyte-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1006983, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1006983, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1242d5d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x68c0)) returned 1 [0246.272] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad410 | out: hHeap=0x1f0000) returned 1 [0246.272] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ade20 [0246.272] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ade20 | out: hHeap=0x1f0000) returned 1 [0246.272] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0f9426a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0f9426a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd121c9ea, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x114c0, dwReserved0=0x2b06ae, dwReserved1=0x540052, cFileName="api-ms-win-crt-private-l1-1-0.dll", cAlternateFileName="AP7D9E~1.DLL")) returned 1 [0246.272] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8d18 [0246.272] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a90 [0246.273] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad1e8 [0246.273] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a90 | out: hHeap=0x1f0000) returned 1 [0246.273] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad130 | out: hHeap=0x1f0000) returned 1 [0246.273] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0246.273] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-private-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-private-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0246.273] GetFileType (hFile=0x1fc) returned 0x1 [0246.274] CloseHandle (hObject=0x1fc) returned 1 [0246.274] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad410 [0246.274] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-private-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-private-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0f9426a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0f9426a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd121c9ea, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x114c0)) returned 1 [0246.274] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad410 | out: hHeap=0x1f0000) returned 1 [0246.274] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2adb40 [0246.274] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-private-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-private-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0f9426a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0f9426a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd121c9ea, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x114c0)) returned 1 [0246.275] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2adb40 | out: hHeap=0x1f0000) returned 1 [0246.275] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2aded8 [0246.275] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aded8 | out: hHeap=0x1f0000) returned 1 [0246.275] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0f9426a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0f9426a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd139a18a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x2b06ae, dwReserved1=0x540052, cFileName="api-ms-win-crt-process-l1-1-0.dll", cAlternateFileName="APFCAD~1.DLL")) returned 1 [0246.275] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8d18 [0246.275] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a28 [0246.275] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad6f0 [0246.275] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a28 | out: hHeap=0x1f0000) returned 1 [0246.275] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad1e8 | out: hHeap=0x1f0000) returned 1 [0246.275] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0246.276] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-process-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-process-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0246.276] GetFileType (hFile=0x1fc) returned 0x1 [0246.276] CloseHandle (hObject=0x1fc) returned 1 [0246.276] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2adbf8 [0246.277] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-process-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-process-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0f9426a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0f9426a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd139a18a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0)) returned 1 [0246.277] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2adbf8 | out: hHeap=0x1f0000) returned 1 [0246.277] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad638 [0246.277] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-process-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-process-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0f9426a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0f9426a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd139a18a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0)) returned 1 [0246.277] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad638 | out: hHeap=0x1f0000) returned 1 [0246.277] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ada88 [0246.277] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ada88 | out: hHeap=0x1f0000) returned 1 [0246.277] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0eaf4e3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0eaf4e3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd11d067c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5ac0, dwReserved0=0x2b06ae, dwReserved1=0x540052, cFileName="api-ms-win-crt-runtime-l1-1-0.dll", cAlternateFileName="AP8F34~1.DLL")) returned 1 [0246.277] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8d18 [0246.277] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214f08 [0246.278] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad918 [0246.278] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f08 | out: hHeap=0x1f0000) returned 1 [0246.278] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad6f0 | out: hHeap=0x1f0000) returned 1 [0246.278] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0246.278] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-runtime-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-runtime-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0246.278] GetFileType (hFile=0x1fc) returned 0x1 [0246.279] CloseHandle (hObject=0x1fc) returned 1 [0246.279] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad638 [0246.279] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-runtime-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-runtime-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0eaf4e3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0eaf4e3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd11d067c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5ac0)) returned 1 [0246.279] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad638 | out: hHeap=0x1f0000) returned 1 [0246.279] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad4c8 [0246.280] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-runtime-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-runtime-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0eaf4e3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0eaf4e3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd11d067c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5ac0)) returned 1 [0246.280] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad4c8 | out: hHeap=0x1f0000) returned 1 [0246.280] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad2a0 [0246.280] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad2a0 | out: hHeap=0x1f0000) returned 1 [0246.280] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0dca676, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0dca676, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1078ffd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x60c0, dwReserved0=0x2b06ae, dwReserved1=0x540052, cFileName="api-ms-win-crt-stdio-l1-1-0.dll", cAlternateFileName="APD1B7~1.DLL")) returned 1 [0246.280] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228c68 [0246.280] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214fd8 [0246.280] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219c48 [0246.280] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214fd8 | out: hHeap=0x1f0000) returned 1 [0246.280] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad918 | out: hHeap=0x1f0000) returned 1 [0246.280] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228c68 | out: hHeap=0x1f0000) returned 1 [0246.281] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-stdio-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-stdio-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0246.281] GetFileType (hFile=0x1fc) returned 0x1 [0246.281] CloseHandle (hObject=0x1fc) returned 1 [0246.282] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a620 [0246.282] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-stdio-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-stdio-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0dca676, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0dca676, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1078ffd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x60c0)) returned 1 [0246.282] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a620 | out: hHeap=0x1f0000) returned 1 [0246.282] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219e40 [0246.282] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-stdio-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-stdio-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0dca676, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0dca676, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1078ffd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x60c0)) returned 1 [0246.282] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219e40 | out: hHeap=0x1f0000) returned 1 [0246.282] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a2d8 [0246.282] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a2d8 | out: hHeap=0x1f0000) returned 1 [0246.282] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0eaf4e3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0eaf4e3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd10c55e8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x60c0, dwReserved0=0x2b06ae, dwReserved1=0x540052, cFileName="api-ms-win-crt-string-l1-1-0.dll", cAlternateFileName="APBF0F~1.DLL")) returned 1 [0246.283] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8d18 [0246.283] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214f08 [0246.283] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a230 [0246.283] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f08 | out: hHeap=0x1f0000) returned 1 [0246.283] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219c48 | out: hHeap=0x1f0000) returned 1 [0246.283] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0246.283] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-string-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-string-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0246.283] GetFileType (hFile=0x1fc) returned 0x1 [0246.284] CloseHandle (hObject=0x1fc) returned 1 [0246.284] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219c48 [0246.284] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-string-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-string-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0eaf4e3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0eaf4e3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd10c55e8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x60c0)) returned 1 [0246.284] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219c48 | out: hHeap=0x1f0000) returned 1 [0246.284] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a4d0 [0246.284] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-string-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-string-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0eaf4e3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0eaf4e3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd10c55e8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x60c0)) returned 1 [0246.284] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a4d0 | out: hHeap=0x1f0000) returned 1 [0246.284] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a038 [0246.285] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a038 | out: hHeap=0x1f0000) returned 1 [0246.285] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0dca676, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0dca676, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0f9426a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x52c0, dwReserved0=0x2b06ae, dwReserved1=0x540052, cFileName="api-ms-win-crt-time-l1-1-0.dll", cAlternateFileName="AP5E4C~1.DLL")) returned 1 [0246.285] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228680 [0246.285] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214fd8 [0246.285] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a038 [0246.285] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214fd8 | out: hHeap=0x1f0000) returned 1 [0246.285] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a230 | out: hHeap=0x1f0000) returned 1 [0246.285] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228680 | out: hHeap=0x1f0000) returned 1 [0246.286] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-time-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-time-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0246.286] GetFileType (hFile=0x1fc) returned 0x1 [0246.286] CloseHandle (hObject=0x1fc) returned 1 [0246.286] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a6c8 [0246.286] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-time-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-time-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0dca676, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0dca676, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0f9426a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x52c0)) returned 1 [0246.287] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a6c8 | out: hHeap=0x1f0000) returned 1 [0246.287] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a4d0 [0246.287] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-time-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-time-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0dca676, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0dca676, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0f9426a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x52c0)) returned 1 [0246.287] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a4d0 | out: hHeap=0x1f0000) returned 1 [0246.287] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a818 [0246.287] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a818 | out: hHeap=0x1f0000) returned 1 [0246.287] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1b7fe91, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1b7fe91, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1ec71c8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x2b06ae, dwReserved1=0x540052, cFileName="api-ms-win-crt-utility-l1-1-0.dll", cAlternateFileName="AP80F4~1.DLL")) returned 1 [0246.633] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8d18 [0246.633] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2149c0 [0246.633] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad9d0 [0246.633] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2149c0 | out: hHeap=0x1f0000) returned 1 [0246.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a038 | out: hHeap=0x1f0000) returned 1 [0246.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0246.634] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-utility-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-utility-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0246.635] GetFileType (hFile=0x22c) returned 0x1 [0246.635] CloseHandle (hObject=0x22c) returned 1 [0246.636] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ada88 [0246.636] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-utility-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-utility-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1b7fe91, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1b7fe91, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1ec71c8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0)) returned 1 [0246.636] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ada88 | out: hHeap=0x1f0000) returned 1 [0246.636] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad410 [0246.636] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-utility-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-utility-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1b7fe91, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1b7fe91, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1ec71c8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0)) returned 1 [0246.636] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad410 | out: hHeap=0x1f0000) returned 1 [0246.636] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2add68 [0246.637] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2add68 | out: hHeap=0x1f0000) returned 1 [0246.637] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1b59cda, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1b59cda, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1f1370b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x34ad8, dwReserved0=0x2b06ae, dwReserved1=0x540052, cFileName="AppVDllSurrogate32.exe", cAlternateFileName="APPVDL~2.EXE")) returned 1 [0246.637] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2392b0 [0246.637] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c30 [0246.637] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0246.637] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c30 | out: hHeap=0x1f0000) returned 1 [0246.637] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad9d0 | out: hHeap=0x1f0000) returned 1 [0246.637] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2392b0 | out: hHeap=0x1f0000) returned 1 [0246.638] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate32.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvdllsurrogate32.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0246.638] GetFileType (hFile=0x22c) returned 0x1 [0246.639] CloseHandle (hObject=0x22c) returned 1 [0246.639] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0246.639] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate32.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvdllsurrogate32.exe"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1b59cda, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1b59cda, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1f1370b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x34ad8)) returned 1 [0246.639] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0246.640] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0246.640] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate32.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvdllsurrogate32.exe"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1b59cda, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1b59cda, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1f1370b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x34ad8)) returned 1 [0246.640] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0246.640] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0246.640] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0246.640] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd153dc41, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd153dc41, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1e2e85a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3e4d8, dwReserved0=0x2b06ae, dwReserved1=0x540052, cFileName="AppVDllSurrogate64.exe", cAlternateFileName="APPVDL~1.EXE")) returned 1 [0246.640] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239278 [0246.640] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a90 [0246.641] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0246.641] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a90 | out: hHeap=0x1f0000) returned 1 [0246.641] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0246.641] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239278 | out: hHeap=0x1f0000) returned 1 [0246.642] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate64.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvdllsurrogate64.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0246.642] GetFileType (hFile=0x22c) returned 0x1 [0246.643] CloseHandle (hObject=0x22c) returned 1 [0246.643] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0246.643] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate64.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvdllsurrogate64.exe"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd153dc41, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd153dc41, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1e2e85a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3e4d8)) returned 1 [0246.643] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0246.643] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0246.644] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate64.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvdllsurrogate64.exe"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd153dc41, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd153dc41, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1e2e85a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3e4d8)) returned 1 [0246.644] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0246.644] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0246.644] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0246.644] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x86813dc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86813dc4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86813dc4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x540052, cFileName="AppvIsvStream32.dll", cAlternateFileName="APPVIS~1.DLL")) returned 1 [0246.644] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238f68 [0246.644] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214fd8 [0246.645] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0246.645] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214fd8 | out: hHeap=0x1f0000) returned 1 [0246.645] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0246.645] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238f68 | out: hHeap=0x1f0000) returned 1 [0246.646] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\AppvIsvStream32.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvisvstream32.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0246.646] GetLastError () returned 0x2 [0246.646] GetLastError () returned 0x2 [0246.646] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x86813dc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86813dc4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86813dc4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x540052, cFileName="AppvIsvStream64.dll", cAlternateFileName="APPVIS~2.DLL")) returned 1 [0246.671] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238d70 [0246.671] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d68 [0246.672] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0246.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d68 | out: hHeap=0x1f0000) returned 1 [0246.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0246.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238d70 | out: hHeap=0x1f0000) returned 1 [0246.673] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\AppvIsvStream64.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvisvstream64.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0246.673] GetLastError () returned 0x2 [0246.674] GetLastError () returned 0x2 [0246.674] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x86813dc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86813dc4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86813dc4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x540052, cFileName="AppvIsvSubsystems32.dll", cAlternateFileName="APPVIS~3.DLL")) returned 1 [0246.674] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c58 [0246.674] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2149c0 [0246.674] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0246.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2149c0 | out: hHeap=0x1f0000) returned 1 [0246.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0246.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c58 | out: hHeap=0x1f0000) returned 1 [0246.676] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\AppvIsvSubsystems32.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvisvsubsystems32.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0246.676] GetLastError () returned 0x2 [0246.676] GetLastError () returned 0x2 [0246.676] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x8683a0f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8683a0f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8683a0f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x540052, cFileName="AppvIsvSubsystems64.dll", cAlternateFileName="APPVIS~4.DLL")) returned 1 [0246.677] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239160 [0246.677] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214b60 [0246.677] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0246.677] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214b60 | out: hHeap=0x1f0000) returned 1 [0246.677] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0246.677] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239160 | out: hHeap=0x1f0000) returned 1 [0246.679] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\AppvIsvSubsystems64.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvisvsubsystems64.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0246.679] GetLastError () returned 0x2 [0246.679] GetLastError () returned 0x2 [0246.679] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd153dc41, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd153dc41, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1e7acf5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x69630, dwReserved0=0xa000000c, dwReserved1=0x540052, cFileName="AppVLP.exe", cAlternateFileName="")) returned 1 [0246.679] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0246.679] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2149c0 [0246.680] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221968 [0246.680] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2149c0 | out: hHeap=0x1f0000) returned 1 [0246.680] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0246.680] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0246.681] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\AppVLP.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvlp.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0246.681] GetFileType (hFile=0x22c) returned 0x1 [0246.682] CloseHandle (hObject=0x22c) returned 1 [0246.682] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0246.682] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\AppVLP.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvlp.exe"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd153dc41, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd153dc41, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1e7acf5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x69630)) returned 1 [0246.683] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0246.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0246.683] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\AppVLP.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvlp.exe"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd153dc41, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd153dc41, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1e7acf5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x69630)) returned 1 [0246.683] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0246.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0246.683] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0246.683] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x8683a0f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8683a0f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8683a0f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x540052, cFileName="C2R32.dll", cAlternateFileName="")) returned 1 [0246.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380f0 [0246.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2149c0 [0246.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221248 [0246.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2149c0 | out: hHeap=0x1f0000) returned 1 [0246.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0246.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380f0 | out: hHeap=0x1f0000) returned 1 [0246.685] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\C2R32.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\c2r32.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0246.685] GetLastError () returned 0x2 [0246.685] GetLastError () returned 0x2 [0246.686] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x8683a0f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8683a0f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8683a0f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x540052, cFileName="C2R64.dll", cAlternateFileName="")) returned 1 [0246.686] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0246.686] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c30 [0246.686] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2211b0 [0246.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c30 | out: hHeap=0x1f0000) returned 1 [0246.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0246.687] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0246.687] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\C2R64.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\c2r64.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0246.688] GetLastError () returned 0x2 [0246.688] GetLastError () returned 0x2 [0246.688] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd11f68b6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd11f68b6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd191da0e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x514a8, dwReserved0=0xa000000c, dwReserved1=0x540052, cFileName="concrt140.dll", cAlternateFileName="CONCRT~1.DLL")) returned 1 [0246.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0246.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c30 [0246.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2218d0 [0246.689] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c30 | out: hHeap=0x1f0000) returned 1 [0246.689] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0246.689] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0246.690] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\concrt140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\concrt140.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0246.690] GetFileType (hFile=0x22c) returned 0x1 [0246.691] CloseHandle (hObject=0x22c) returned 1 [0246.691] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e88 [0246.691] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\concrt140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\concrt140.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd11f68b6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd11f68b6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd191da0e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x514a8)) returned 1 [0246.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e88 | out: hHeap=0x1f0000) returned 1 [0246.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0246.692] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\concrt140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\concrt140.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd11f68b6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd11f68b6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd191da0e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x514a8)) returned 1 [0246.692] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0246.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0246.692] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0246.692] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1242d5d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1242d5d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdc231125, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x5645a3, dwReserved0=0xa000000c, dwReserved1=0x540052, cFileName="mfc140u.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="MFC140~1.ODV")) returned 1 [0246.693] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a4d0 [0246.693] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c30 [0246.693] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2852a8 [0246.693] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c30 | out: hHeap=0x1f0000) returned 1 [0246.693] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0246.693] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a4d0 | out: hHeap=0x1f0000) returned 1 [0247.101] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\mfc140u.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\root\\client\\mfc140u.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0247.101] GetFileType (hFile=0x1e8) returned 0x1 [0247.101] CloseHandle (hObject=0x1e8) returned 1 [0247.102] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2851a0 [0247.102] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\mfc140u.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\root\\client\\mfc140u.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1242d5d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1242d5d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdc231125, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x5645a3)) returned 1 [0247.102] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2851a0 | out: hHeap=0x1f0000) returned 1 [0247.102] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2856c8 [0247.103] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\mfc140u.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\root\\client\\mfc140u.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1242d5d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1242d5d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdc231125, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x5645a3)) returned 1 [0247.103] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2856c8 | out: hHeap=0x1f0000) returned 1 [0247.103] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2856c8 [0247.103] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2856c8 | out: hHeap=0x1f0000) returned 1 [0247.103] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1f5fb21, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1f5fb21, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd244aa14, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xa12a8, dwReserved0=0xa000000c, dwReserved1=0x540052, cFileName="msvcp120.dll", cAlternateFileName="")) returned 1 [0247.103] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0247.103] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214dd0 [0247.104] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2214a8 [0247.104] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214dd0 | out: hHeap=0x1f0000) returned 1 [0247.104] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2852a8 | out: hHeap=0x1f0000) returned 1 [0247.104] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0247.105] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\msvcp120.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcp120.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0247.105] GetFileType (hFile=0x1e8) returned 0x1 [0247.106] CloseHandle (hObject=0x1e8) returned 1 [0247.106] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0247.106] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\msvcp120.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcp120.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1f5fb21, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1f5fb21, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd244aa14, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xa12a8)) returned 1 [0247.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0247.107] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0247.107] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\msvcp120.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcp120.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1f5fb21, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1f5fb21, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd244aa14, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xa12a8)) returned 1 [0247.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0247.107] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0247.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0247.107] GetLastError () returned 0x0 [0247.108] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0247.108] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228cb0 [0247.108] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d6a0 [0247.108] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0247.108] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2390b8 [0247.108] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0247.108] CryptAcquireContextA (in: phProv=0x1cfdaf0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1cfdaf0*=0x212e00) returned 1 [0247.109] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238000 | out: pbBuffer=0x238000) returned 1 [0247.110] CryptReleaseContext (hProv=0x212e00, dwFlags=0x0) returned 1 [0247.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0247.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x25a8a8 [0247.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x233120 [0247.110] QueryPerformanceCounter (in: lpPerformanceCount=0x1cfda84 | out: lpPerformanceCount=0x1cfda84*=40447893676) returned 1 [0247.110] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1cfdac4 | out: lpSystemTimeAsFileTime=0x1cfdac4) [0247.110] QueryPerformanceCounter (in: lpPerformanceCount=0x1cfda84 | out: lpPerformanceCount=0x1cfda84*=40447933404) returned 1 [0247.111] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1cfdac4 | out: lpSystemTimeAsFileTime=0x1cfdac4) [0247.111] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238c90 [0247.111] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x25bbb0 [0247.111] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x232cc0 [0247.111] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x2ab498 [0247.111] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210078 [0247.111] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206838 [0247.111] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffb8 [0247.111] GetLastError () returned 0x0 [0247.112] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0247.112] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x217038 [0247.112] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0247.112] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x140) returned 0x239be0 [0247.112] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0247.112] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a90 [0247.113] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b90 [0247.113] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\msvcp120.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcp120.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfd990, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0247.114] GetFileType (hFile=0x1e8) returned 0x1 [0247.114] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b30 [0247.115] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a50 [0247.116] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\msvcp120.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcp120.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfd9c0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0247.116] GetFileType (hFile=0x1fc) returned 0x1 [0247.117] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d90 [0247.117] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bf0 [0247.117] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2aded8 [0247.117] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a60 [0247.117] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b70 [0247.118] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\msvcp120.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcp120.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfd90c, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0247.119] GetFileType (hFile=0x22c) returned 0x1 [0247.119] GetLastError () returned 0xb7 [0247.119] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe4) returned 0x21b7f8 [0247.119] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0247.120] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c10 [0247.120] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ef0 [0247.120] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2adbf8 [0247.120] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b60 [0247.120] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b80 [0247.121] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\msvcp120.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcp120.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfd90c, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0247.121] GetFileType (hFile=0x1e0) returned 0x1 [0247.122] GetLastError () returned 0xb7 [0247.122] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f50 [0247.122] GetLastError () returned 0xb7 [0247.123] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c30 [0247.123] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d90 [0247.123] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e50 [0247.123] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb8) returned 0x2370e0 [0247.123] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ac0 [0247.123] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b40 [0247.124] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\msvcp120.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcp120.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfd904, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0247.125] GetFileType (hFile=0x230) returned 0x1 [0247.125] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x290fe8 [0247.126] ReadFile (in: hFile=0x230, lpBuffer=0x290fe8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1cfd860, lpOverlapped=0x0 | out: lpBuffer=0x290fe8*, lpNumberOfBytesRead=0x1cfd860*=0x1000, lpOverlapped=0x0) returned 1 [0247.129] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24ce10 [0247.130] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28bfc0 [0247.130] GetLastError () returned 0x0 [0248.087] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210198 [0248.087] GetLastError () returned 0x0 [0248.087] CloseHandle (hObject=0x1e8) returned 1 [0248.089] CloseHandle (hObject=0x1fc) returned 1 [0248.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238980 [0248.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238800 [0248.090] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\msvcp120.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcp120.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfd9c0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0248.102] GetFileType (hFile=0x1fc) returned 0x1 [0248.103] GetLastError () returned 0xb7 [0248.103] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x292ff8 [0248.104] GetLastError () returned 0xb7 [0248.106] CloseHandle (hObject=0x1fc) returned 1 [0248.107] DeleteFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\msvcp120.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcp120.dll")) returned 0 [0248.107] GetLastError () returned 0x20 [0248.107] GetLastError () returned 0x20 [0248.107] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228bd8 [0248.108] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238168 [0248.108] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x237fd8 [0248.108] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x228710 [0248.108] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d90 [0248.108] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cd0 [0248.108] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x2387e0 [0248.108] GetLastError () returned 0x20 [0248.108] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238c90 [0248.108] GetLastError () returned 0x20 [0248.109] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238d70 [0248.109] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214e38 [0248.109] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2380f0 [0248.109] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285bf0 [0248.109] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238820 [0248.109] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0248.109] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101b0 [0248.109] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238960 [0248.109] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0248.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff70 [0248.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238118 [0248.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285098 [0248.110] GetLastError () returned 0x20 [0248.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x2388c0 [0248.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238810 [0248.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238830 [0248.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238810 | out: hHeap=0x1f0000) returned 1 [0248.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388a0 [0248.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238830 | out: hHeap=0x1f0000) returned 1 [0248.111] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388c0 | out: hHeap=0x1f0000) returned 1 [0248.111] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238950 [0248.111] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x20fef8 [0248.111] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238950 | out: hHeap=0x1f0000) returned 1 [0248.111] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x20ff28 [0248.111] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20fef8 | out: hHeap=0x1f0000) returned 1 [0248.111] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388a0 | out: hHeap=0x1f0000) returned 1 [0248.111] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x20fef8 [0248.111] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffa0 [0248.111] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20fef8 | out: hHeap=0x1f0000) returned 1 [0248.112] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20fef8 [0248.112] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffa0 | out: hHeap=0x1f0000) returned 1 [0248.112] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff28 | out: hHeap=0x1f0000) returned 1 [0248.112] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffa0 [0248.112] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204df0 [0248.112] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffa0 | out: hHeap=0x1f0000) returned 1 [0248.112] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e90 [0248.112] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204df0 | out: hHeap=0x1f0000) returned 1 [0248.112] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20fef8 | out: hHeap=0x1f0000) returned 1 [0248.112] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e50 [0248.113] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2384b0 [0248.113] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e50 | out: hHeap=0x1f0000) returned 1 [0248.113] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204f10 [0248.113] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0248.113] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e90 | out: hHeap=0x1f0000) returned 1 [0248.113] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204bd0 [0248.113] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x2067d8 [0248.113] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bd0 | out: hHeap=0x1f0000) returned 1 [0248.113] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238190 [0248.114] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2067d8 | out: hHeap=0x1f0000) returned 1 [0248.114] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f10 | out: hHeap=0x1f0000) returned 1 [0248.114] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238810 [0248.114] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x20fef8 [0248.114] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238810 | out: hHeap=0x1f0000) returned 1 [0248.114] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffd0 [0248.114] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20fef8 | out: hHeap=0x1f0000) returned 1 [0248.114] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204dd0 [0248.114] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffd0 | out: hHeap=0x1f0000) returned 1 [0248.115] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206928 [0248.115] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204dd0 | out: hHeap=0x1f0000) returned 1 [0248.115] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206928 | out: hHeap=0x1f0000) returned 1 [0248.115] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0248.115] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0248.115] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0248.115] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285bf0 | out: hHeap=0x1f0000) returned 1 [0248.116] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380f0 | out: hHeap=0x1f0000) returned 1 [0248.116] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239160 [0248.116] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0248.116] CryptAcquireContextA (in: phProv=0x1cfdaf0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1cfdaf0*=0x2134e8) returned 1 [0248.117] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2382f8 | out: pbBuffer=0x2382f8) returned 1 [0248.117] CryptReleaseContext (hProv=0x2134e8, dwFlags=0x0) returned 1 [0248.117] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0248.118] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238320 [0248.118] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2384b0 [0248.118] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239208 [0248.118] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0248.118] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0248.118] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239208 | out: hHeap=0x1f0000) returned 1 [0248.119] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8e20 [0248.119] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20fef8 [0248.119] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x2149c0 [0248.119] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238168 [0248.119] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2856c8 [0248.119] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d90 [0248.119] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2150a8 [0248.120] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2382a8 [0248.120] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x284f90 [0248.120] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238810 [0248.120] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0248.120] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff28 [0248.120] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238830 [0248.120] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0248.120] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffa0 [0248.121] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffa0 | out: hHeap=0x1f0000) returned 1 [0248.121] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0248.121] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238830 | out: hHeap=0x1f0000) returned 1 [0248.121] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff28 | out: hHeap=0x1f0000) returned 1 [0248.121] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0248.121] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238810 | out: hHeap=0x1f0000) returned 1 [0248.121] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x284f90 | out: hHeap=0x1f0000) returned 1 [0248.121] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0248.121] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2150a8 | out: hHeap=0x1f0000) returned 1 [0248.122] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238d00 [0248.122] GetLastError () returned 0x0 [0248.122] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238f30 [0248.122] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0248.122] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0248.122] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0248.122] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0248.123] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0248.123] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0248.123] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x24e9c0 [0248.123] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285bf0 [0248.123] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0248.123] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0248.123] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0248.123] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0248.124] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x284f90 [0248.124] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0248.124] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0248.124] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22ff38 [0248.124] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x254980 [0248.124] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x233468 [0248.124] QueryPerformanceCounter (in: lpPerformanceCount=0x1cfd640 | out: lpPerformanceCount=0x1cfd640*=40549335255) returned 1 [0248.125] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1cfd680 | out: lpSystemTimeAsFileTime=0x1cfd680) [0248.125] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x2388b0 [0248.125] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380f0 [0248.125] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cb0 [0248.125] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cb0 | out: hHeap=0x1f0000) returned 1 [0248.125] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380f0 | out: hHeap=0x1f0000) returned 1 [0248.126] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380f0 [0248.126] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c50 [0248.126] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c50 | out: hHeap=0x1f0000) returned 1 [0248.126] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380f0 | out: hHeap=0x1f0000) returned 1 [0248.126] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388b0 | out: hHeap=0x1f0000) returned 1 [0248.126] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0248.126] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238cc8 [0248.127] GetLastError () returned 0x0 [0248.127] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0248.127] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0248.127] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0248.127] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2380f0 [0248.127] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238190 [0248.128] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0248.128] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0248.128] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2382f8 [0248.128] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0248.128] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x222ee8 [0248.128] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0248.128] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0248.128] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0248.129] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0248.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0248.129] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381b8 [0248.129] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2382a8 [0248.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0248.129] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0248.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0248.129] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0248.129] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x234b90 [0248.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b90 | out: hHeap=0x1f0000) returned 1 [0248.130] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0248.130] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0248.130] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2100a8 [0248.130] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2288c0 [0248.130] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381b8 [0248.130] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2382a8 [0248.130] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238320 [0248.131] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238348 [0248.131] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0248.131] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0248.131] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0248.131] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381b8 [0248.131] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2382a8 [0248.131] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0248.131] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0248.132] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0248.132] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2067d8 [0248.132] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x2b2cb8 [0248.132] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b2cb8 | out: hHeap=0x1f0000) returned 1 [0248.132] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2067d8 | out: hHeap=0x1f0000) returned 1 [0248.132] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0248.132] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0248.133] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0248.133] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0248.133] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204b90 [0248.133] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0248.133] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aa230 [0248.133] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0248.133] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a9b40 [0248.133] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aa230 | out: hHeap=0x1f0000) returned 1 [0248.134] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238348 | out: hHeap=0x1f0000) returned 1 [0248.134] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0248.134] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2288c0 | out: hHeap=0x1f0000) returned 1 [0248.134] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0248.134] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204b90 | out: hHeap=0x1f0000) returned 1 [0248.134] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2100a8 | out: hHeap=0x1f0000) returned 1 [0248.134] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0248.134] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a9578 [0248.135] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a9578 | out: hHeap=0x1f0000) returned 1 [0248.135] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ee8 | out: hHeap=0x1f0000) returned 1 [0248.135] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0248.135] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0248.135] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0248.135] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0248.135] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380f0 | out: hHeap=0x1f0000) returned 1 [0248.136] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0248.136] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0248.136] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aaa48 [0248.136] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a96a0 [0248.136] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aaa48 | out: hHeap=0x1f0000) returned 1 [0248.136] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a96a0 | out: hHeap=0x1f0000) returned 1 [0248.136] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a9b40 | out: hHeap=0x1f0000) returned 1 [0248.137] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0248.137] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x284f90 | out: hHeap=0x1f0000) returned 1 [0248.588] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24e9c0 | out: hHeap=0x1f0000) returned 1 [0248.588] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x2337b0 [0248.588] GetLastError () returned 0x0 [0248.588] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238970 [0249.013] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238890 [0249.014] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\msvcp120.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcp120.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfd9f0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0249.015] GetFileType (hFile=0x210) returned 0x1 [0249.015] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28dfd0 [0249.015] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1cfd978 | out: lpNewFilePointer=0x0) returned 1 [0249.016] GetLastError () returned 0xb7 [0249.016] CloseHandle (hObject=0x210) returned 1 [0249.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238890 | out: hHeap=0x1f0000) returned 1 [0249.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238970 | out: hHeap=0x1f0000) returned 1 [0249.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285bf0 | out: hHeap=0x1f0000) returned 1 [0249.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2856c8 | out: hHeap=0x1f0000) returned 1 [0249.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0249.018] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d90 | out: hHeap=0x1f0000) returned 1 [0249.018] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2149c0 | out: hHeap=0x1f0000) returned 1 [0249.018] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20fef8 | out: hHeap=0x1f0000) returned 1 [0249.018] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8e20 | out: hHeap=0x1f0000) returned 1 [0249.018] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2337b0 | out: hHeap=0x1f0000) returned 1 [0249.018] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0249.018] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0249.018] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x254980 | out: hHeap=0x1f0000) returned 1 [0249.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233468 | out: hHeap=0x1f0000) returned 1 [0249.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239160 | out: hHeap=0x1f0000) returned 1 [0249.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387e0 | out: hHeap=0x1f0000) returned 1 [0249.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff70 | out: hHeap=0x1f0000) returned 1 [0249.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0249.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238960 | out: hHeap=0x1f0000) returned 1 [0249.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0249.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0249.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238820 | out: hHeap=0x1f0000) returned 1 [0249.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285098 | out: hHeap=0x1f0000) returned 1 [0249.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0249.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214e38 | out: hHeap=0x1f0000) returned 1 [0249.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228710 | out: hHeap=0x1f0000) returned 1 [0249.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0249.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0249.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228bd8 | out: hHeap=0x1f0000) returned 1 [0249.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238800 | out: hHeap=0x1f0000) returned 1 [0249.021] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238980 | out: hHeap=0x1f0000) returned 1 [0249.021] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x290fe8 | out: hHeap=0x1f0000) returned 1 [0249.021] CloseHandle (hObject=0x230) returned 1 [0249.021] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b40 | out: hHeap=0x1f0000) returned 1 [0249.021] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ac0 | out: hHeap=0x1f0000) returned 1 [0249.021] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2370e0 | out: hHeap=0x1f0000) returned 1 [0249.022] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24ce10 | out: hHeap=0x1f0000) returned 1 [0249.022] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0249.022] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c30 | out: hHeap=0x1f0000) returned 1 [0249.022] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28bfc0 | out: hHeap=0x1f0000) returned 1 [0249.022] CloseHandle (hObject=0x1e0) returned 1 [0249.023] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b80 | out: hHeap=0x1f0000) returned 1 [0249.023] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b60 | out: hHeap=0x1f0000) returned 1 [0249.023] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2adbf8 | out: hHeap=0x1f0000) returned 1 [0249.023] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d70 | out: hHeap=0x1f0000) returned 1 [0249.023] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21b7f8 | out: hHeap=0x1f0000) returned 1 [0249.023] CloseHandle (hObject=0x22c) returned 1 [0249.024] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b70 | out: hHeap=0x1f0000) returned 1 [0249.024] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a60 | out: hHeap=0x1f0000) returned 1 [0249.024] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aded8 | out: hHeap=0x1f0000) returned 1 [0249.024] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a50 | out: hHeap=0x1f0000) returned 1 [0249.024] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b30 | out: hHeap=0x1f0000) returned 1 [0249.024] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b90 | out: hHeap=0x1f0000) returned 1 [0249.024] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a90 | out: hHeap=0x1f0000) returned 1 [0249.025] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239be0 | out: hHeap=0x1f0000) returned 1 [0249.025] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25bbb0 | out: hHeap=0x1f0000) returned 1 [0249.025] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232cc0 | out: hHeap=0x1f0000) returned 1 [0249.025] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206838 | out: hHeap=0x1f0000) returned 1 [0249.025] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffb8 | out: hHeap=0x1f0000) returned 1 [0249.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210078 | out: hHeap=0x1f0000) returned 1 [0249.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab498 | out: hHeap=0x1f0000) returned 1 [0249.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25a8a8 | out: hHeap=0x1f0000) returned 1 [0249.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233120 | out: hHeap=0x1f0000) returned 1 [0249.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2390b8 | out: hHeap=0x1f0000) returned 1 [0249.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0249.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d6a0 | out: hHeap=0x1f0000) returned 1 [0249.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228cb0 | out: hHeap=0x1f0000) returned 1 [0249.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0249.026] DeleteFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\msvcp120.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcp120.dll")) returned 1 [0249.028] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1ea0ff2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1ea0ff2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd20449b3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x9b0a0, dwReserved0=0xa000000c, dwReserved1=0x540052, cFileName="msvcp140.dll", cAlternateFileName="")) returned 1 [0249.028] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0249.028] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2365a0 [0249.028] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221540 [0249.028] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2365a0 | out: hHeap=0x1f0000) returned 1 [0249.029] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0249.029] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0249.029] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\msvcp140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcp140.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0249.030] GetFileType (hFile=0x22c) returned 0x1 [0249.030] CloseHandle (hObject=0x22c) returned 1 [0249.030] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0249.030] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\msvcp140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcp140.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1ea0ff2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1ea0ff2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd20449b3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x9b0a0)) returned 1 [0249.031] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0249.031] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0249.031] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\msvcp140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcp140.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1ea0ff2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1ea0ff2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd20449b3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x9b0a0)) returned 1 [0249.031] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0249.031] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0249.031] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0249.031] GetLastError () returned 0x0 [0249.032] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0249.032] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228bd8 [0249.032] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f350 [0249.032] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0249.032] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c20 [0249.032] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0249.032] CryptAcquireContextA (in: phProv=0x1cfdaf0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1cfdaf0*=0x212d78) returned 1 [0249.033] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x237fd8 | out: pbBuffer=0x237fd8) returned 1 [0249.033] CryptReleaseContext (hProv=0x212d78, dwFlags=0x0) returned 1 [0249.033] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0249.034] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x254980 [0249.034] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x233350 [0249.034] QueryPerformanceCounter (in: lpPerformanceCount=0x1cfda84 | out: lpPerformanceCount=0x1cfda84*=40640267722) returned 1 [0249.034] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1cfdac4 | out: lpSystemTimeAsFileTime=0x1cfdac4) [0249.034] QueryPerformanceCounter (in: lpPerformanceCount=0x1cfda84 | out: lpPerformanceCount=0x1cfda84*=40640301161) returned 1 [0249.034] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1cfdac4 | out: lpSystemTimeAsFileTime=0x1cfdac4) [0249.034] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238da8 [0249.034] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x24fd60 [0249.035] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x233120 [0249.035] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x2abd88 [0249.035] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20fef8 [0249.035] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206928 [0249.035] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff70 [0249.035] GetLastError () returned 0x0 [0249.035] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0249.035] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x217038 [0249.035] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0249.035] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x140) returned 0x22d368 [0249.036] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0249.036] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ac0 [0249.036] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a10 [0249.037] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\msvcp140.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcp140.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfd990, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0249.038] GetFileType (hFile=0x22c) returned 0x1 [0249.039] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a50 [0249.039] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b70 [0249.040] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\msvcp140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcp140.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfd9c0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0249.040] GetFileType (hFile=0x1e0) returned 0x1 [0249.041] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204db0 [0249.041] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0249.041] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad1e8 [0249.041] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b40 [0249.042] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b50 [0249.043] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\msvcp140.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcp140.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfd90c, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0249.043] GetFileType (hFile=0x230) returned 0x1 [0249.043] GetLastError () returned 0xb7 [0249.044] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe4) returned 0x21bbb8 [0249.044] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cb0 [0249.044] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f10 [0249.044] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c30 [0249.044] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad638 [0249.044] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b10 [0249.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a60 [0249.045] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\msvcp140.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcp140.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfd90c, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0249.046] GetFileType (hFile=0x210) returned 0x1 [0249.046] GetLastError () returned 0xb7 [0249.046] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e90 [0249.046] GetLastError () returned 0xb7 [0249.047] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e70 [0249.047] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204dd0 [0249.047] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ef0 [0249.047] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb8) returned 0x2374a0 [0249.047] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a70 [0249.047] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b60 [0249.048] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\msvcp140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcp140.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfd904, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0249.049] GetFileType (hFile=0x1d8) returned 0x1 [0249.049] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28bfc0 [0249.049] ReadFile (in: hFile=0x1d8, lpBuffer=0x28bfc0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1cfd860, lpOverlapped=0x0 | out: lpBuffer=0x28bfc0*, lpNumberOfBytesRead=0x1cfd860*=0x1000, lpOverlapped=0x0) returned 1 [0249.339] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24bdf0 [0249.341] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x295008 [0249.341] GetLastError () returned 0x0 [0249.634] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffb8 [0249.635] GetLastError () returned 0x0 [0249.635] CloseHandle (hObject=0x22c) returned 1 [0249.636] CloseHandle (hObject=0x1e0) returned 1 [0249.637] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238890 [0249.637] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387e0 [0249.638] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\msvcp140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcp140.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfd9c0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0250.058] GetFileType (hFile=0x1fc) returned 0x1 [0250.059] GetLastError () returned 0xb7 [0250.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x286f98 [0250.059] GetLastError () returned 0xb7 [0250.061] CloseHandle (hObject=0x1fc) returned 1 [0250.061] DeleteFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\msvcp140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcp140.dll")) returned 0 [0250.062] GetLastError () returned 0x20 [0250.062] GetLastError () returned 0x20 [0250.062] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228cb0 [0250.062] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238078 [0250.062] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238118 [0250.062] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x228908 [0250.063] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c70 [0250.063] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ef0 [0250.063] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x238840 [0250.063] GetLastError () returned 0x20 [0250.063] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x2391d0 [0250.063] GetLastError () returned 0x20 [0250.063] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239198 [0250.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236468 [0250.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238000 [0250.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2852a8 [0250.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238800 [0250.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0250.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210210 [0250.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238850 [0250.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0250.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101b0 [0250.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2383e8 [0250.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2858d8 [0250.065] GetLastError () returned 0x20 [0250.065] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238870 [0250.065] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238970 [0250.065] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238950 [0250.065] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238970 | out: hHeap=0x1f0000) returned 1 [0250.065] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238880 [0250.065] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238950 | out: hHeap=0x1f0000) returned 1 [0250.065] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238870 | out: hHeap=0x1f0000) returned 1 [0250.065] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238870 [0250.065] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101c8 [0250.066] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238870 | out: hHeap=0x1f0000) returned 1 [0250.066] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101e0 [0250.066] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0250.066] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238880 | out: hHeap=0x1f0000) returned 1 [0250.066] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101c8 [0250.066] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff28 [0250.066] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0250.066] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0250.066] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff28 | out: hHeap=0x1f0000) returned 1 [0250.066] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0250.066] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0250.067] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204d70 [0250.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0250.067] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cd0 [0250.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d70 | out: hHeap=0x1f0000) returned 1 [0250.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0250.067] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ef0 [0250.067] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x237fd8 [0250.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ef0 | out: hHeap=0x1f0000) returned 1 [0250.067] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204d30 [0250.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0250.068] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cd0 | out: hHeap=0x1f0000) returned 1 [0250.068] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204db0 [0250.068] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x2068c8 [0250.068] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204db0 | out: hHeap=0x1f0000) returned 1 [0250.068] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238370 [0250.068] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2068c8 | out: hHeap=0x1f0000) returned 1 [0250.068] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d30 | out: hHeap=0x1f0000) returned 1 [0250.068] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238950 [0250.068] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101c8 [0250.069] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238950 | out: hHeap=0x1f0000) returned 1 [0250.069] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0250.069] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0250.069] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204d70 [0250.069] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0250.069] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x2068c8 [0250.069] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d70 | out: hHeap=0x1f0000) returned 1 [0250.069] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2068c8 | out: hHeap=0x1f0000) returned 1 [0250.069] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0250.070] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0250.070] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0250.070] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2852a8 | out: hHeap=0x1f0000) returned 1 [0250.070] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0250.070] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239208 [0250.070] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0250.070] CryptAcquireContextA (in: phProv=0x1cfdaf0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1cfdaf0*=0x213460) returned 1 [0250.071] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238140 | out: pbBuffer=0x238140) returned 1 [0250.071] CryptReleaseContext (hProv=0x213460, dwFlags=0x0) returned 1 [0250.071] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0250.072] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x237fd8 [0250.072] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238140 [0250.072] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238f68 [0250.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0250.072] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0250.073] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238f68 | out: hHeap=0x1f0000) returned 1 [0250.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8d18 [0250.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0250.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x2364d0 [0250.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238078 [0250.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2856c8 [0250.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f50 [0250.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236608 [0250.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2382d0 [0250.074] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2853b0 [0250.074] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238870 [0250.074] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0250.074] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0250.074] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238880 [0250.074] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238348 [0250.074] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210018 [0250.074] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210018 | out: hHeap=0x1f0000) returned 1 [0250.075] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238348 | out: hHeap=0x1f0000) returned 1 [0250.075] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238880 | out: hHeap=0x1f0000) returned 1 [0250.075] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0250.075] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0250.075] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238870 | out: hHeap=0x1f0000) returned 1 [0250.075] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2853b0 | out: hHeap=0x1f0000) returned 1 [0250.075] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0250.075] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236608 | out: hHeap=0x1f0000) returned 1 [0250.075] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239160 [0250.076] GetLastError () returned 0x0 [0250.076] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239278 [0250.076] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0250.076] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0250.076] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0250.076] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0250.076] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0250.077] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0250.077] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x24eb00 [0250.077] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2857d0 [0250.077] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0250.077] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0250.077] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0250.077] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0250.077] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285cf8 [0250.078] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0250.078] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0250.078] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x2300c8 [0250.078] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x25a8a8 [0250.078] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x232ef0 [0250.078] QueryPerformanceCounter (in: lpPerformanceCount=0x1cfd640 | out: lpPerformanceCount=0x1cfd640*=40744717037) returned 1 [0250.078] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1cfd680 | out: lpSystemTimeAsFileTime=0x1cfd680) [0250.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238870 [0250.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0250.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ef0 [0250.079] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ef0 | out: hHeap=0x1f0000) returned 1 [0250.079] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0250.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0250.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cd0 [0250.080] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cd0 | out: hHeap=0x1f0000) returned 1 [0250.080] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0250.080] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238870 | out: hHeap=0x1f0000) returned 1 [0250.080] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0250.080] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239048 [0250.080] GetLastError () returned 0x0 [0250.080] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0250.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0250.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0250.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238348 [0250.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238168 [0250.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0250.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0250.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238370 [0250.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0250.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x222ee8 [0250.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0250.082] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0250.082] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0250.082] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0250.082] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0250.082] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381b8 [0250.082] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x237fd8 [0250.082] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0250.082] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0250.082] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0250.083] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0250.083] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x234b90 [0250.083] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b90 | out: hHeap=0x1f0000) returned 1 [0250.083] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0250.083] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0250.083] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101e0 [0250.083] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228440 [0250.083] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238410 [0250.083] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381b8 [0250.084] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2382d0 [0250.084] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2382f8 [0250.084] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0250.084] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0250.084] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0250.084] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x237fd8 [0250.084] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381b8 [0250.084] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0250.084] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0250.085] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0250.085] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2068c8 [0250.085] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x2b4220 [0250.085] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b4220 | out: hHeap=0x1f0000) returned 1 [0250.085] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2068c8 | out: hHeap=0x1f0000) returned 1 [0250.085] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0250.085] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0250.085] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0250.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0250.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204c50 [0250.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0250.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0250.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0250.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a96a0 [0250.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0250.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0250.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0250.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228440 | out: hHeap=0x1f0000) returned 1 [0250.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0250.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c50 | out: hHeap=0x1f0000) returned 1 [0250.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0250.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0250.087] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a9450 [0250.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a9450 | out: hHeap=0x1f0000) returned 1 [0250.088] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ee8 | out: hHeap=0x1f0000) returned 1 [0250.088] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0250.088] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0250.088] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0250.088] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0250.088] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238348 | out: hHeap=0x1f0000) returned 1 [0250.088] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0250.088] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0250.088] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a8fb0 [0250.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2a97c8 [0250.089] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8fb0 | out: hHeap=0x1f0000) returned 1 [0250.089] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a97c8 | out: hHeap=0x1f0000) returned 1 [0250.089] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a96a0 | out: hHeap=0x1f0000) returned 1 [0250.089] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0250.089] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285cf8 | out: hHeap=0x1f0000) returned 1 [0250.089] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24eb00 | out: hHeap=0x1f0000) returned 1 [0250.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x233698 [0250.089] GetLastError () returned 0x0 [0250.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238870 [0250.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238880 [0250.091] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\msvcp140.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcp140.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfd9f0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0250.091] GetFileType (hFile=0x1fc) returned 0x1 [0250.092] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x286f98 [0250.092] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1cfd978 | out: lpNewFilePointer=0x0) returned 1 [0250.092] GetLastError () returned 0xb7 [0250.093] CloseHandle (hObject=0x1fc) returned 1 [0250.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238880 | out: hHeap=0x1f0000) returned 1 [0250.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238870 | out: hHeap=0x1f0000) returned 1 [0250.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2857d0 | out: hHeap=0x1f0000) returned 1 [0250.094] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2856c8 | out: hHeap=0x1f0000) returned 1 [0250.094] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0250.094] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f50 | out: hHeap=0x1f0000) returned 1 [0250.094] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2364d0 | out: hHeap=0x1f0000) returned 1 [0250.094] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0250.094] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0250.094] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233698 | out: hHeap=0x1f0000) returned 1 [0250.094] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0250.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0250.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25a8a8 | out: hHeap=0x1f0000) returned 1 [0250.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232ef0 | out: hHeap=0x1f0000) returned 1 [0250.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239208 | out: hHeap=0x1f0000) returned 1 [0250.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238840 | out: hHeap=0x1f0000) returned 1 [0250.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0250.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0250.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238850 | out: hHeap=0x1f0000) returned 1 [0250.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0250.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0250.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238800 | out: hHeap=0x1f0000) returned 1 [0250.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2858d8 | out: hHeap=0x1f0000) returned 1 [0250.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0250.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0250.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228908 | out: hHeap=0x1f0000) returned 1 [0250.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0250.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0250.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228cb0 | out: hHeap=0x1f0000) returned 1 [0250.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387e0 | out: hHeap=0x1f0000) returned 1 [0250.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238890 | out: hHeap=0x1f0000) returned 1 [0250.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28bfc0 | out: hHeap=0x1f0000) returned 1 [0250.097] CloseHandle (hObject=0x1d8) returned 1 [0250.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b60 | out: hHeap=0x1f0000) returned 1 [0250.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a70 | out: hHeap=0x1f0000) returned 1 [0250.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2374a0 | out: hHeap=0x1f0000) returned 1 [0250.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24bdf0 | out: hHeap=0x1f0000) returned 1 [0250.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffb8 | out: hHeap=0x1f0000) returned 1 [0250.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e70 | out: hHeap=0x1f0000) returned 1 [0250.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x295008 | out: hHeap=0x1f0000) returned 1 [0250.098] CloseHandle (hObject=0x210) returned 1 [0250.099] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a60 | out: hHeap=0x1f0000) returned 1 [0250.099] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b10 | out: hHeap=0x1f0000) returned 1 [0250.099] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad638 | out: hHeap=0x1f0000) returned 1 [0250.099] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cb0 | out: hHeap=0x1f0000) returned 1 [0250.100] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21bbb8 | out: hHeap=0x1f0000) returned 1 [0250.100] CloseHandle (hObject=0x230) returned 1 [0250.100] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b50 | out: hHeap=0x1f0000) returned 1 [0250.100] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b40 | out: hHeap=0x1f0000) returned 1 [0250.101] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad1e8 | out: hHeap=0x1f0000) returned 1 [0250.101] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b70 | out: hHeap=0x1f0000) returned 1 [0250.101] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a50 | out: hHeap=0x1f0000) returned 1 [0250.101] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a10 | out: hHeap=0x1f0000) returned 1 [0250.101] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ac0 | out: hHeap=0x1f0000) returned 1 [0250.101] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d368 | out: hHeap=0x1f0000) returned 1 [0250.101] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24fd60 | out: hHeap=0x1f0000) returned 1 [0250.101] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233120 | out: hHeap=0x1f0000) returned 1 [0250.101] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206928 | out: hHeap=0x1f0000) returned 1 [0250.101] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff70 | out: hHeap=0x1f0000) returned 1 [0250.102] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20fef8 | out: hHeap=0x1f0000) returned 1 [0250.102] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abd88 | out: hHeap=0x1f0000) returned 1 [0250.102] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x254980 | out: hHeap=0x1f0000) returned 1 [0250.102] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233350 | out: hHeap=0x1f0000) returned 1 [0250.102] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c20 | out: hHeap=0x1f0000) returned 1 [0250.102] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0250.102] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f350 | out: hHeap=0x1f0000) returned 1 [0250.102] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228bd8 | out: hHeap=0x1f0000) returned 1 [0250.102] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0250.103] DeleteFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\msvcp140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcp140.dll")) returned 1 [0250.545] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd890e4d1, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xd890e4d1, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xd981af3f, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xeb3bb, dwReserved0=0xa000000c, dwReserved1=0x540052, cFileName="msvcr120.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="MSVCR1~1.ODV")) returned 1 [0250.545] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21aa10 [0250.545] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236468 [0250.545] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2858d8 [0250.546] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0250.546] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0250.546] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21aa10 | out: hHeap=0x1f0000) returned 1 [0250.547] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\msvcr120.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcr120.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0250.547] GetFileType (hFile=0x1d4) returned 0x1 [0250.547] CloseHandle (hObject=0x1d4) returned 1 [0250.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285ae8 [0250.548] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\msvcr120.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcr120.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd890e4d1, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xd890e4d1, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xd981af3f, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xeb3bb)) returned 1 [0250.548] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285ae8 | out: hHeap=0x1f0000) returned 1 [0250.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2855c0 [0250.549] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\msvcr120.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcr120.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd890e4d1, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xd890e4d1, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xd981af3f, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xeb3bb)) returned 1 [0250.549] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2855c0 | out: hHeap=0x1f0000) returned 1 [0250.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x284f90 [0250.549] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x284f90 | out: hHeap=0x1f0000) returned 1 [0250.549] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd98413d2, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xd98413d2, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xda49deba, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xeffd3, dwReserved0=0xa000000c, dwReserved1=0x540052, cFileName="ucrtbase.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="UCRTBA~1.ODV")) returned 1 [0250.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a038 [0250.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236468 [0250.550] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285bf0 [0250.550] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0250.550] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2858d8 | out: hHeap=0x1f0000) returned 1 [0250.550] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a038 | out: hHeap=0x1f0000) returned 1 [0250.551] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\ucrtbase.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\root\\client\\ucrtbase.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0250.551] GetFileType (hFile=0x1d4) returned 0x1 [0250.551] CloseHandle (hObject=0x1d4) returned 1 [0250.552] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285e00 [0250.552] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\ucrtbase.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\root\\client\\ucrtbase.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd98413d2, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xd98413d2, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xda49deba, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xeffd3)) returned 1 [0250.552] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285e00 | out: hHeap=0x1f0000) returned 1 [0250.552] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2854b8 [0250.553] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\ucrtbase.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\root\\client\\ucrtbase.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd98413d2, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xd98413d2, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xda49deba, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xeffd3)) returned 1 [0250.553] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2854b8 | out: hHeap=0x1f0000) returned 1 [0250.553] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285098 [0250.553] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285098 | out: hHeap=0x1f0000) returned 1 [0250.553] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd2ca2e08, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2ca2e08, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2f0533c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5f4b0, dwReserved0=0xa000000c, dwReserved1=0x540052, cFileName="vccorlib140.dll", cAlternateFileName="VCCORL~1.DLL")) returned 1 [0250.553] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0250.553] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236468 [0250.553] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220cf0 [0250.554] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0250.554] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285bf0 | out: hHeap=0x1f0000) returned 1 [0250.554] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0250.555] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\vccorlib140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\vccorlib140.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0250.555] GetFileType (hFile=0x1d4) returned 0x1 [0250.556] CloseHandle (hObject=0x1d4) returned 1 [0250.557] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0250.557] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\vccorlib140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\vccorlib140.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd2ca2e08, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2ca2e08, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2f0533c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5f4b0)) returned 1 [0250.557] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0250.558] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0250.558] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\vccorlib140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\vccorlib140.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd2ca2e08, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2ca2e08, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2f0533c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5f4b0)) returned 1 [0250.558] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0250.558] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0250.558] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0250.558] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd2424784, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2424784, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd26acf16, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15ab0, dwReserved0=0xa000000c, dwReserved1=0x540052, cFileName="vcruntime140.dll", cAlternateFileName="VCRUNT~1.DLL")) returned 1 [0250.558] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238e88 [0250.559] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236608 [0250.559] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221118 [0250.559] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236608 | out: hHeap=0x1f0000) returned 1 [0250.559] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0250.559] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238e88 | out: hHeap=0x1f0000) returned 1 [0250.560] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\vcruntime140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\vcruntime140.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfe23c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0250.560] GetFileType (hFile=0x1d4) returned 0x1 [0250.561] CloseHandle (hObject=0x1d4) returned 1 [0250.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0250.562] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\vcruntime140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\vcruntime140.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2cc | out: lpFileInformation=0x1cfe2cc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd2424784, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2424784, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd26acf16, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15ab0)) returned 1 [0250.562] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0250.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0250.562] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\vcruntime140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\vcruntime140.dll"), fInfoLevelId=0x0, lpFileInformation=0x1cfe2dc | out: lpFileInformation=0x1cfe2dc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd2424784, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2424784, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd26acf16, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15ab0)) returned 1 [0250.562] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0250.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0250.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0250.563] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd2424784, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2424784, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd26acf16, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15ab0, dwReserved0=0xa000000c, dwReserved1=0x540052, cFileName="vcruntime140.dll", cAlternateFileName="VCRUNT~1.DLL")) returned 0 [0250.603] FindClose (in: hFindFile=0x24ec00 | out: hFindFile=0x24ec00) returned 1 [0250.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0250.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e1c8 | out: hHeap=0x1f0000) returned 1 [0250.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0250.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228a28 | out: hHeap=0x1f0000) returned 1 [0250.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228908 [0250.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0250.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e1c8 [0250.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae660 [0250.605] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\*", lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x540052, cFileName=".", cAlternateFileName="")) returned 0x24ea80 [0250.606] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae4f8 [0250.606] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae660 | out: hHeap=0x1f0000) returned 1 [0250.606] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0250.606] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x540052, cFileName="..", cAlternateFileName="")) returned 1 [0250.606] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae1b0 [0250.606] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae4f8 | out: hHeap=0x1f0000) returned 1 [0250.606] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0250.606] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0250.606] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1113bba3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1113bba3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x540052, cFileName="PUB60COR", cAlternateFileName="")) returned 1 [0250.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0250.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae4f8 [0250.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ce8 [0250.607] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae4f8 | out: hHeap=0x1f0000) returned 1 [0250.607] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae1b0 | out: hHeap=0x1f0000) returned 1 [0250.607] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0250.607] lstrcmpW (lpString1="PUB60COR", lpString2=".") returned 1 [0250.607] lstrcmpW (lpString1="PUB60COR", lpString2="..") returned 1 [0250.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204d90 [0250.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e88 [0250.608] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x104b75c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x540052, cFileName="Publisher", cAlternateFileName="PUBLIS~1")) returned 1 [0250.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0250.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2ae570 [0250.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219478 [0250.608] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae570 | out: hHeap=0x1f0000) returned 1 [0250.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ce8 | out: hHeap=0x1f0000) returned 1 [0250.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0250.609] lstrcmpW (lpString1="Publisher", lpString2=".") returned 1 [0250.609] lstrcmpW (lpString1="Publisher", lpString2="..") returned 1 [0250.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c20 [0250.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213570 [0250.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d90 | out: hHeap=0x1f0000) returned 1 [0250.610] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1cfe474 | out: lpFindFileData=0x1cfe474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x104b75c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x540052, cFileName="Publisher", cAlternateFileName="PUBLIS~1")) returned 0 [0250.610] FindClose (in: hFindFile=0x24ea80 | out: hFindFile=0x24ea80) returned 1 [0250.610] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228638 [0250.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0250.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e828 [0250.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0250.611] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\*", lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1113bba3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1113bba3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName=".", cAlternateFileName="")) returned 0x24e780 [0250.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0250.612] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0250.612] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0250.612] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1113bba3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1113bba3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="..", cAlternateFileName="")) returned 1 [0250.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0250.612] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0250.612] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0250.612] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0250.612] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2340, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="AG00004_.GIF", cAlternateFileName="")) returned 1 [0250.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0250.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0250.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0250.613] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0250.613] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0250.613] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0250.614] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00004_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0250.614] GetFileType (hFile=0x1b0) returned 0x1 [0250.615] CloseHandle (hObject=0x1b0) returned 1 [0250.615] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0250.616] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00004_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2340)) returned 1 [0250.616] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0250.616] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0250.616] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00004_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2340)) returned 1 [0250.616] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0250.616] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0250.616] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0250.617] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c30, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="AG00011_.GIF", cAlternateFileName="")) returned 1 [0250.617] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0250.617] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0250.617] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0250.617] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0250.617] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0250.618] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0250.618] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00011_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00011_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0250.932] GetFileType (hFile=0x1c0) returned 0x1 [0250.932] CloseHandle (hObject=0x1c0) returned 1 [0250.933] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0250.933] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00011_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00011_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c30)) returned 1 [0250.933] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0250.933] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0250.934] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00011_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00011_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c30)) returned 1 [0250.934] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0250.934] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0250.934] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0250.934] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a19, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="AG00021_.GIF", cAlternateFileName="")) returned 1 [0250.934] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0250.934] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0250.935] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0250.935] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0250.935] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0250.935] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0250.936] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00021_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0250.936] GetFileType (hFile=0x1c0) returned 0x1 [0250.937] CloseHandle (hObject=0x1c0) returned 1 [0250.937] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0250.937] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00021_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a19)) returned 1 [0250.938] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0250.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0250.938] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00021_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a19)) returned 1 [0250.938] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0250.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0250.938] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0250.938] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a1c, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="AG00037_.GIF", cAlternateFileName="")) returned 1 [0250.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0250.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0250.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0250.939] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0250.939] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0250.939] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0250.940] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00037_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0250.940] GetFileType (hFile=0x1c0) returned 0x1 [0250.941] CloseHandle (hObject=0x1c0) returned 1 [0250.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0250.941] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00037_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a1c)) returned 1 [0250.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0250.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0250.942] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00037_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a1c)) returned 1 [0250.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0250.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0250.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0250.942] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb58a9e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb58a9e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcb3, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="AG00038_.GIF", cAlternateFileName="")) returned 1 [0250.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0250.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0250.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0250.943] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0250.943] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0250.943] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0250.943] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00038_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0250.944] GetFileType (hFile=0x1c0) returned 0x1 [0250.944] CloseHandle (hObject=0x1c0) returned 1 [0250.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0250.945] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00038_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb58a9e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb58a9e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcb3)) returned 1 [0250.945] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0250.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0250.945] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00038_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb58a9e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb58a9e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcb3)) returned 1 [0250.945] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0250.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0250.946] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0250.946] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb58a9e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fa1, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="AG00040_.GIF", cAlternateFileName="")) returned 1 [0250.946] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0250.946] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0250.946] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0250.946] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0250.946] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0250.946] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0250.947] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00040_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0250.948] GetFileType (hFile=0x1c0) returned 0x1 [0250.948] CloseHandle (hObject=0x1c0) returned 1 [0250.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0250.949] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00040_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb58a9e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fa1)) returned 1 [0250.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0250.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0250.949] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00040_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb58a9e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fa1)) returned 1 [0250.950] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0250.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0250.950] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0250.950] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e06, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="AG00052_.GIF", cAlternateFileName="")) returned 1 [0250.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0250.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0250.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0250.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0250.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0250.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0250.952] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00052_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0250.952] GetFileType (hFile=0x1c0) returned 0x1 [0250.953] CloseHandle (hObject=0x1c0) returned 1 [0250.953] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0250.954] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00052_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e06)) returned 1 [0250.954] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0250.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0250.954] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00052_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e06)) returned 1 [0250.954] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0250.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0250.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0250.955] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e73, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="AG00057_.GIF", cAlternateFileName="")) returned 1 [0250.955] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0250.955] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0250.955] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0250.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0250.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0250.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0250.957] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00057_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0250.957] GetFileType (hFile=0x1c0) returned 0x1 [0250.958] CloseHandle (hObject=0x1c0) returned 1 [0250.958] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0250.958] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00057_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e73)) returned 1 [0250.959] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0250.959] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0250.959] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00057_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e73)) returned 1 [0250.959] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0250.959] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0250.959] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0250.959] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x205, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="AG00090_.GIF", cAlternateFileName="")) returned 1 [0250.959] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0250.960] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0250.960] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0250.960] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0250.960] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0250.960] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0250.961] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00090_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0250.961] GetFileType (hFile=0x1c0) returned 0x1 [0250.962] CloseHandle (hObject=0x1c0) returned 1 [0250.963] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0250.964] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00090_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x205)) returned 1 [0250.964] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0250.964] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0250.964] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00090_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x205)) returned 1 [0250.964] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0250.965] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0250.965] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0250.965] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f6, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="AG00092_.GIF", cAlternateFileName="")) returned 1 [0250.965] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0250.965] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0250.965] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0250.965] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0250.966] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0250.966] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0250.967] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00092_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0250.967] GetFileType (hFile=0x1c0) returned 0x1 [0250.968] CloseHandle (hObject=0x1c0) returned 1 [0250.968] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0250.968] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00092_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f6)) returned 1 [0250.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0250.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0250.969] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00092_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f6)) returned 1 [0250.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0250.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0250.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0250.970] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x319e, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="AG00103_.GIF", cAlternateFileName="")) returned 1 [0250.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0250.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0250.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0250.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0250.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0250.971] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0250.971] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00103_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0250.972] GetFileType (hFile=0x1c0) returned 0x1 [0250.972] CloseHandle (hObject=0x1c0) returned 1 [0250.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0250.973] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00103_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x319e)) returned 1 [0250.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0250.974] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0250.974] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00103_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x319e)) returned 1 [0250.974] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0250.974] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0250.974] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0250.974] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd9c, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="AG00120_.GIF", cAlternateFileName="")) returned 1 [0250.975] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238348 [0250.975] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0250.975] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0250.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0250.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0250.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238348 | out: hHeap=0x1f0000) returned 1 [0250.976] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00120_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0250.977] GetFileType (hFile=0x1c0) returned 0x1 [0250.977] CloseHandle (hObject=0x1c0) returned 1 [0251.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0251.289] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00120_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd9c)) returned 1 [0251.289] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0251.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0251.289] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00120_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd9c)) returned 1 [0251.289] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0251.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0251.289] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0251.289] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc44, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="AG00126_.GIF", cAlternateFileName="")) returned 1 [0251.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0251.290] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0251.290] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0251.290] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0251.290] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0251.290] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0251.290] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00126_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0251.291] GetFileType (hFile=0x224) returned 0x1 [0251.291] CloseHandle (hObject=0x224) returned 1 [0251.292] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0251.292] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00126_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc44)) returned 1 [0251.292] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0251.292] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0251.292] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00126_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc44)) returned 1 [0251.292] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0251.292] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0251.292] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0251.292] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30c2, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="AG00129_.GIF", cAlternateFileName="")) returned 1 [0251.292] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0251.293] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0251.293] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0251.293] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0251.293] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0251.293] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0251.293] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00129_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0251.294] GetFileType (hFile=0x224) returned 0x1 [0251.294] CloseHandle (hObject=0x224) returned 1 [0251.294] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0251.294] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00129_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30c2)) returned 1 [0251.295] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0251.295] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0251.295] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00129_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30c2)) returned 1 [0251.295] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0251.295] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0251.295] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0251.295] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1485, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="AG00130_.GIF", cAlternateFileName="")) returned 1 [0251.295] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0251.295] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0251.295] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0251.295] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0251.295] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0251.296] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0251.296] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00130_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0251.296] GetFileType (hFile=0x224) returned 0x1 [0251.297] CloseHandle (hObject=0x224) returned 1 [0251.297] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0251.297] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00130_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1485)) returned 1 [0251.297] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0251.297] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0251.297] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00130_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1485)) returned 1 [0251.297] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0251.298] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0251.298] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0251.298] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa24, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="AG00135_.GIF", cAlternateFileName="")) returned 1 [0251.298] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0251.298] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0251.298] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0251.298] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0251.298] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0251.298] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0251.299] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00135_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0251.299] GetFileType (hFile=0x224) returned 0x1 [0251.300] CloseHandle (hObject=0x224) returned 1 [0251.300] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0251.300] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00135_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa24)) returned 1 [0251.300] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0251.300] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0251.300] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00135_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa24)) returned 1 [0251.300] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0251.301] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0251.301] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0251.301] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x296f, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="AG00139_.GIF", cAlternateFileName="")) returned 1 [0251.301] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0251.301] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0251.301] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0251.301] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0251.301] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0251.302] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0251.302] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00139_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0251.303] GetFileType (hFile=0x224) returned 0x1 [0251.303] CloseHandle (hObject=0x224) returned 1 [0251.304] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0251.304] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00139_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x296f)) returned 1 [0251.304] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0251.304] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0251.304] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00139_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x296f)) returned 1 [0251.304] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0251.304] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0251.305] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0251.305] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3bcc, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="AG00142_.GIF", cAlternateFileName="")) returned 1 [0251.305] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0251.305] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0251.305] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0251.305] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0251.305] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0251.305] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0251.321] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00142_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0251.321] GetFileType (hFile=0x224) returned 0x1 [0251.322] CloseHandle (hObject=0x224) returned 1 [0251.323] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0251.323] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00142_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3bcc)) returned 1 [0251.323] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0251.323] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0251.323] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00142_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3bcc)) returned 1 [0251.323] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0251.323] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0251.323] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0251.323] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14c3, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="AG00154_.GIF", cAlternateFileName="")) returned 1 [0251.323] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0251.324] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0251.324] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0251.324] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0251.324] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0251.324] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0251.324] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00154_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0251.325] GetFileType (hFile=0x224) returned 0x1 [0251.325] CloseHandle (hObject=0x224) returned 1 [0251.325] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0251.325] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00154_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14c3)) returned 1 [0251.326] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0251.326] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0251.326] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00154_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14c3)) returned 1 [0251.326] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0251.326] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0251.326] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0251.326] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="AG00157_.GIF", cAlternateFileName="")) returned 1 [0251.326] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0251.326] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0251.327] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0251.327] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0251.327] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0251.327] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0251.327] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00157_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0251.328] GetFileType (hFile=0x224) returned 0x1 [0251.328] CloseHandle (hObject=0x224) returned 1 [0251.328] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0251.328] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00157_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x135b)) returned 1 [0251.329] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0251.329] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0251.329] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00157_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x135b)) returned 1 [0251.329] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0251.329] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0251.329] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0251.329] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13a6, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="AG00158_.GIF", cAlternateFileName="")) returned 1 [0251.330] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0251.330] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0251.330] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0251.330] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0251.330] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0251.330] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0251.331] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00158_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0251.331] GetFileType (hFile=0x224) returned 0x1 [0251.331] CloseHandle (hObject=0x224) returned 1 [0251.332] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0251.332] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00158_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13a6)) returned 1 [0251.332] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0251.332] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0251.332] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00158_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13a6)) returned 1 [0251.332] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0251.333] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0251.333] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0251.333] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x47a, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="AG00160_.GIF", cAlternateFileName="")) returned 1 [0251.333] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0251.333] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0251.333] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0251.333] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0251.333] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0251.333] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0251.334] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00160_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0251.334] GetFileType (hFile=0x224) returned 0x1 [0251.335] CloseHandle (hObject=0x224) returned 1 [0251.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0251.335] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00160_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x47a)) returned 1 [0251.335] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0251.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0251.335] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00160_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x47a)) returned 1 [0251.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0251.336] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0251.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0251.336] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d9f, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="AG00161_.GIF", cAlternateFileName="")) returned 1 [0251.336] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0251.336] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0251.336] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0251.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0251.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0251.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0251.337] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00161_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0251.337] GetFileType (hFile=0x224) returned 0x1 [0251.602] CloseHandle (hObject=0x224) returned 1 [0251.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0251.603] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00161_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d9f)) returned 1 [0251.603] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0251.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0251.603] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00161_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d9f)) returned 1 [0251.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0251.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0251.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0251.604] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b48, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="AG00163_.GIF", cAlternateFileName="")) returned 1 [0251.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0251.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0251.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0251.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0251.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0251.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0251.606] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00163_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0251.606] GetFileType (hFile=0x224) returned 0x1 [0251.607] CloseHandle (hObject=0x224) returned 1 [0251.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0251.607] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00163_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b48)) returned 1 [0251.607] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0251.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0251.607] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00163_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b48)) returned 1 [0251.608] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0251.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0251.608] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0251.608] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x33c6, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="AG00164_.GIF", cAlternateFileName="")) returned 1 [0251.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0251.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0251.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0251.608] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0251.608] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0251.608] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0251.609] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00164_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0251.609] GetFileType (hFile=0x224) returned 0x1 [0251.610] CloseHandle (hObject=0x224) returned 1 [0251.610] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0251.610] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00164_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x33c6)) returned 1 [0251.610] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0251.610] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0251.610] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00164_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x33c6)) returned 1 [0251.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0251.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0251.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0251.611] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2186, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="AG00165_.GIF", cAlternateFileName="")) returned 1 [0251.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0251.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0251.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0251.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0251.612] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0251.612] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0251.612] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00165_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0251.612] GetFileType (hFile=0x224) returned 0x1 [0251.613] CloseHandle (hObject=0x224) returned 1 [0251.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0251.613] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00165_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2186)) returned 1 [0251.613] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0251.614] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0251.614] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00165_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2186)) returned 1 [0251.614] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0251.614] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0251.614] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0251.614] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x131e, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="AG00167_.GIF", cAlternateFileName="")) returned 1 [0251.614] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0251.614] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0251.614] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0251.614] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0251.614] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0251.615] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0251.615] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00167_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0251.615] GetFileType (hFile=0x224) returned 0x1 [0251.616] CloseHandle (hObject=0x224) returned 1 [0251.616] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0251.616] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00167_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x131e)) returned 1 [0251.617] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0251.617] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0251.617] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00167_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x131e)) returned 1 [0251.617] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0251.617] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0251.617] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0251.617] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14ff, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="AG00169_.GIF", cAlternateFileName="")) returned 1 [0251.617] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0251.617] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0251.618] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0251.618] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0251.618] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0251.618] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0251.618] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00169_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0251.619] GetFileType (hFile=0x224) returned 0x1 [0251.619] CloseHandle (hObject=0x224) returned 1 [0251.620] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0251.620] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00169_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14ff)) returned 1 [0251.620] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0251.620] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0251.620] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00169_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14ff)) returned 1 [0251.620] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0251.620] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0251.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0251.621] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2420, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="AG00170_.GIF", cAlternateFileName="")) returned 1 [0251.621] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0251.621] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0251.621] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0251.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0251.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0251.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0251.622] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00170_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0251.622] GetFileType (hFile=0x224) returned 0x1 [0251.623] CloseHandle (hObject=0x224) returned 1 [0251.623] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0251.624] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00170_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2420)) returned 1 [0251.624] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0251.624] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0251.624] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00170_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2420)) returned 1 [0251.624] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0251.624] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0251.624] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0251.624] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1398, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="AG00171_.GIF", cAlternateFileName="")) returned 1 [0251.625] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0251.625] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0251.625] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0251.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0251.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0251.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0251.626] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00171_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0251.626] GetFileType (hFile=0x224) returned 0x1 [0251.627] CloseHandle (hObject=0x224) returned 1 [0251.628] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0251.628] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00171_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1398)) returned 1 [0251.628] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0251.628] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0251.628] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00171_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1398)) returned 1 [0251.628] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0251.629] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0251.629] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0251.629] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1126, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="AG00172_.GIF", cAlternateFileName="")) returned 1 [0251.629] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0251.629] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0251.629] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0251.629] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0251.629] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0251.630] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0251.630] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00172_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0251.631] GetFileType (hFile=0x224) returned 0x1 [0251.631] CloseHandle (hObject=0x224) returned 1 [0251.632] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0251.632] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00172_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1126)) returned 1 [0251.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0251.632] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0251.632] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00172_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1126)) returned 1 [0251.633] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0251.633] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0251.633] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0251.633] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf7e, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="AG00174_.GIF", cAlternateFileName="")) returned 1 [0251.633] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0251.633] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0251.634] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0251.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0251.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0251.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0252.259] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00174_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0252.259] GetFileType (hFile=0x1e0) returned 0x1 [0252.260] CloseHandle (hObject=0x1e0) returned 1 [0252.260] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0252.260] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00174_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf7e)) returned 1 [0252.261] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0252.261] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0252.261] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00174_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf7e)) returned 1 [0252.261] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0252.261] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0252.261] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0252.261] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd32, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="AG00175_.GIF", cAlternateFileName="")) returned 1 [0252.261] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0252.261] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0252.262] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0252.262] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0252.262] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0252.262] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0252.263] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00175_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0252.263] GetFileType (hFile=0x1e0) returned 0x1 [0252.263] CloseHandle (hObject=0x1e0) returned 1 [0252.264] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0252.264] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00175_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd32)) returned 1 [0252.264] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0252.264] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0252.264] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00175_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd32)) returned 1 [0252.264] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0252.264] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0252.265] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0252.265] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc30, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="AG00176_.GIF", cAlternateFileName="")) returned 1 [0252.265] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0252.265] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0252.265] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0252.265] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0252.265] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0252.265] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0252.266] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00176_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0252.266] GetFileType (hFile=0x1e0) returned 0x1 [0252.267] CloseHandle (hObject=0x1e0) returned 1 [0252.267] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0252.267] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00176_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc30)) returned 1 [0252.267] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0252.267] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0252.267] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00176_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc30)) returned 1 [0252.268] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0252.268] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0252.268] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0252.268] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbd2, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="AN00010_.WMF", cAlternateFileName="")) returned 1 [0252.268] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0252.268] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0252.268] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0252.268] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0252.268] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0252.268] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0252.269] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00010_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00010_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0252.269] GetFileType (hFile=0x1e0) returned 0x1 [0252.270] CloseHandle (hObject=0x1e0) returned 1 [0252.270] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0252.270] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00010_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00010_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbd2)) returned 1 [0252.270] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0252.270] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0252.270] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00010_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00010_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbd2)) returned 1 [0252.271] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0252.271] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0252.271] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0252.271] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x127e, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="AN00015_.WMF", cAlternateFileName="")) returned 1 [0252.271] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0252.271] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0252.271] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0252.271] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0252.271] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0252.272] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0252.272] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00015_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0252.273] GetFileType (hFile=0x1e0) returned 0x1 [0252.273] CloseHandle (hObject=0x1e0) returned 1 [0252.274] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0252.274] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00015_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x127e)) returned 1 [0252.274] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0252.274] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0252.274] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00015_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x127e)) returned 1 [0252.274] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0252.274] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0252.275] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0252.275] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1634, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="AN00790_.WMF", cAlternateFileName="")) returned 1 [0252.275] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0252.275] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0252.275] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0252.276] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0252.276] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0252.276] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0252.276] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00790_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00790_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0252.276] GetFileType (hFile=0x1e0) returned 0x1 [0252.277] CloseHandle (hObject=0x1e0) returned 1 [0252.277] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0252.277] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00790_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00790_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1634)) returned 1 [0252.277] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0252.277] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0252.277] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00790_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00790_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1634)) returned 1 [0252.278] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0252.278] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0252.278] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0252.278] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5062, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="AN00853_.WMF", cAlternateFileName="")) returned 1 [0252.278] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0252.278] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0252.278] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0252.278] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0252.278] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0252.278] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0252.279] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00853_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00853_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0252.279] GetFileType (hFile=0x1e0) returned 0x1 [0252.280] CloseHandle (hObject=0x1e0) returned 1 [0252.280] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0252.280] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00853_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00853_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5062)) returned 1 [0252.280] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0252.280] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0252.280] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00853_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00853_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5062)) returned 1 [0252.280] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0252.281] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0252.281] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0252.281] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a50, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="AN00914_.WMF", cAlternateFileName="")) returned 1 [0252.281] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0252.281] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0252.281] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0252.281] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0252.281] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0252.281] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0252.282] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00914_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00914_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0252.282] GetFileType (hFile=0x1e0) returned 0x1 [0252.283] CloseHandle (hObject=0x1e0) returned 1 [0252.283] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0252.283] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00914_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00914_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a50)) returned 1 [0252.283] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0252.283] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0252.283] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00914_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00914_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a50)) returned 1 [0252.283] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0252.284] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0252.284] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0252.284] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x385c, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="AN00932_.WMF", cAlternateFileName="")) returned 1 [0252.284] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0252.284] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0252.284] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0252.284] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0252.284] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0252.285] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0252.285] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00932_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00932_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0252.285] GetFileType (hFile=0x1e0) returned 0x1 [0252.286] CloseHandle (hObject=0x1e0) returned 1 [0252.286] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0252.286] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00932_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00932_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x385c)) returned 1 [0252.286] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0252.286] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0252.286] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00932_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00932_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x385c)) returned 1 [0252.286] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0252.286] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0252.286] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0252.286] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ba0, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="AN00965_.WMF", cAlternateFileName="")) returned 1 [0252.287] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0252.287] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0252.287] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0252.287] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0252.287] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0252.287] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0252.287] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00965_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00965_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0252.287] GetFileType (hFile=0x1e0) returned 0x1 [0252.288] CloseHandle (hObject=0x1e0) returned 1 [0252.288] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0252.288] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00965_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00965_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ba0)) returned 1 [0252.288] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0252.288] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0252.289] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00965_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00965_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ba0)) returned 1 [0252.289] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0252.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0252.289] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0252.289] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd10, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="AN01039_.WMF", cAlternateFileName="")) returned 1 [0252.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0252.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0252.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0252.289] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0252.289] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0252.290] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0252.290] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01039_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01039_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0252.290] GetFileType (hFile=0x1e0) returned 0x1 [0252.682] CloseHandle (hObject=0x1e0) returned 1 [0252.682] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0252.682] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01039_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01039_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd10)) returned 1 [0252.683] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0252.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0252.683] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01039_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01039_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd10)) returned 1 [0252.683] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0252.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0252.683] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0252.683] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x63c, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="AN01044_.WMF", cAlternateFileName="")) returned 1 [0252.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0252.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0252.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0252.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0252.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0252.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0252.684] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01044_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01044_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0252.684] GetFileType (hFile=0x1e0) returned 0x1 [0252.685] CloseHandle (hObject=0x1e0) returned 1 [0252.685] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0252.685] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01044_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01044_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x63c)) returned 1 [0252.685] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0252.685] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0252.685] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01044_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01044_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x63c)) returned 1 [0252.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0252.686] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0252.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0252.686] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f20, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="AN01060_.WMF", cAlternateFileName="")) returned 1 [0252.686] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0252.686] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0252.686] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0252.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0252.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0252.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0252.687] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01060_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01060_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0252.687] GetFileType (hFile=0x1e0) returned 0x1 [0252.687] CloseHandle (hObject=0x1e0) returned 1 [0252.687] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0252.688] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01060_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01060_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f20)) returned 1 [0252.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0252.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0252.688] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01060_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01060_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f20)) returned 1 [0252.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0252.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0252.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0252.688] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x728, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="AN01084_.WMF", cAlternateFileName="")) returned 1 [0252.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0252.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0252.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0252.689] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0252.689] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0252.689] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0252.689] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01084_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01084_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0252.689] GetFileType (hFile=0x1e0) returned 0x1 [0252.690] CloseHandle (hObject=0x1e0) returned 1 [0252.690] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0252.690] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01084_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01084_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x728)) returned 1 [0252.690] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0252.690] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0252.691] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01084_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01084_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x728)) returned 1 [0252.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0252.691] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0252.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0252.691] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x66dc, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="AN01173_.WMF", cAlternateFileName="")) returned 1 [0252.691] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0252.691] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0252.691] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0252.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0252.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0252.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0252.692] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01173_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0252.692] GetFileType (hFile=0x1e0) returned 0x1 [0252.692] CloseHandle (hObject=0x1e0) returned 1 [0252.693] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0252.693] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01173_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x66dc)) returned 1 [0252.693] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0252.693] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0252.693] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01173_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x66dc)) returned 1 [0252.693] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0252.693] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0252.693] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0252.693] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6cd2, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="AN01174_.WMF", cAlternateFileName="")) returned 1 [0252.693] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0252.693] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0252.694] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0252.694] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0252.694] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0252.694] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0252.694] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01174_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0252.694] GetFileType (hFile=0x1e0) returned 0x1 [0252.695] CloseHandle (hObject=0x1e0) returned 1 [0252.695] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0252.695] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01174_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6cd2)) returned 1 [0252.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0252.695] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0252.695] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01174_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6cd2)) returned 1 [0252.696] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0252.696] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0252.696] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0252.696] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xea2, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="AN01184_.WMF", cAlternateFileName="")) returned 1 [0252.696] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0252.696] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0252.696] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0252.696] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0252.696] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0252.696] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0252.697] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01184_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0252.698] GetFileType (hFile=0x1e0) returned 0x1 [0252.698] CloseHandle (hObject=0x1e0) returned 1 [0252.698] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0252.698] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01184_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xea2)) returned 1 [0252.699] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0252.699] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0252.699] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01184_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xea2)) returned 1 [0252.699] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0252.699] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0252.699] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0252.699] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16cc, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="AN01216_.WMF", cAlternateFileName="")) returned 1 [0252.699] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0252.699] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0252.699] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0252.700] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0252.700] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0252.700] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0252.700] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01216_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01216_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0252.700] GetFileType (hFile=0x1e0) returned 0x1 [0252.701] CloseHandle (hObject=0x1e0) returned 1 [0252.701] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0252.701] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01216_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01216_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16cc)) returned 1 [0252.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0252.701] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0252.702] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01216_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01216_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16cc)) returned 1 [0252.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0252.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0252.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0252.702] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc4, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="AN01218_.WMF", cAlternateFileName="")) returned 1 [0252.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0252.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0252.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0252.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0252.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0252.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0252.703] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01218_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01218_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0252.703] GetFileType (hFile=0x1e0) returned 0x1 [0252.703] CloseHandle (hObject=0x1e0) returned 1 [0252.704] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0252.704] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01218_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01218_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc4)) returned 1 [0252.704] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0252.704] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0252.704] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01218_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01218_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc4)) returned 1 [0252.704] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0252.704] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0252.704] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0252.705] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xac4, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="AN01251_.WMF", cAlternateFileName="")) returned 1 [0252.705] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0252.705] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0252.705] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0252.705] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0252.705] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0252.705] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0252.706] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01251_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01251_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0252.706] GetFileType (hFile=0x1e0) returned 0x1 [0252.706] CloseHandle (hObject=0x1e0) returned 1 [0252.707] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0252.707] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01251_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01251_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xac4)) returned 1 [0252.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0252.707] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0252.707] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01251_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01251_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xac4)) returned 1 [0252.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0252.707] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0252.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0252.707] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ccc, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="AN01545_.WMF", cAlternateFileName="")) returned 1 [0252.708] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0252.708] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0252.708] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0252.708] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0252.708] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0252.708] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0252.708] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01545_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01545_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0252.709] GetFileType (hFile=0x1e0) returned 0x1 [0252.709] CloseHandle (hObject=0x1e0) returned 1 [0252.709] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0252.709] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01545_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01545_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ccc)) returned 1 [0252.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0252.710] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0252.710] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01545_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01545_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ccc)) returned 1 [0252.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0252.710] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0252.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0252.710] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d74, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="AN02122_.WMF", cAlternateFileName="")) returned 1 [0252.710] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0252.711] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0252.711] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0252.711] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0252.711] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0252.711] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0252.711] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02122_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02122_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0252.712] GetFileType (hFile=0x1e0) returned 0x1 [0252.712] CloseHandle (hObject=0x1e0) returned 1 [0252.712] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0252.712] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02122_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02122_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d74)) returned 1 [0252.713] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0252.713] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0252.713] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02122_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02122_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d74)) returned 1 [0252.713] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0252.713] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0252.713] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0252.713] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19e8, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="AN02559_.WMF", cAlternateFileName="")) returned 1 [0252.714] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0252.714] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0252.714] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0252.714] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0252.714] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0252.714] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0253.032] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02559_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02559_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0253.033] GetFileType (hFile=0x174) returned 0x1 [0253.033] CloseHandle (hObject=0x174) returned 1 [0253.034] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0253.034] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02559_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02559_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19e8)) returned 1 [0253.034] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0253.034] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0253.035] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02559_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02559_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19e8)) returned 1 [0253.035] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0253.035] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0253.035] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0253.035] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc89dc9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x83c, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="AN02724_.WMF", cAlternateFileName="")) returned 1 [0253.035] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0253.035] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0253.035] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0253.035] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0253.036] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0253.036] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0253.036] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02724_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02724_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0253.036] GetFileType (hFile=0x174) returned 0x1 [0253.037] CloseHandle (hObject=0x174) returned 1 [0253.037] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0253.038] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02724_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02724_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc89dc9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x83c)) returned 1 [0253.038] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0253.038] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0253.038] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02724_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02724_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc89dc9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x83c)) returned 1 [0253.038] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0253.038] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0253.039] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0253.039] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2418, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="AN03500_.WMF", cAlternateFileName="")) returned 1 [0253.039] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0253.039] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0253.039] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0253.039] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0253.039] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0253.039] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0253.040] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN03500_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an03500_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0253.040] GetFileType (hFile=0x174) returned 0x1 [0253.041] CloseHandle (hObject=0x174) returned 1 [0253.041] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0253.042] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN03500_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an03500_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2418)) returned 1 [0253.042] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0253.042] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0253.042] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN03500_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an03500_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2418)) returned 1 [0253.042] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0253.042] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0253.043] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0253.043] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x928, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="AN04108_.WMF", cAlternateFileName="")) returned 1 [0253.043] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0253.043] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0253.043] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0253.043] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0253.043] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0253.044] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0253.044] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04108_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04108_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0253.045] GetFileType (hFile=0x174) returned 0x1 [0253.046] CloseHandle (hObject=0x174) returned 1 [0253.047] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0253.047] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04108_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04108_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x928)) returned 1 [0253.047] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0253.047] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0253.047] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04108_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04108_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x928)) returned 1 [0253.047] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0253.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0253.048] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0253.048] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17ac, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="AN04117_.WMF", cAlternateFileName="")) returned 1 [0253.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0253.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0253.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0253.048] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0253.049] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0253.049] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0253.049] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04117_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04117_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0253.050] GetFileType (hFile=0x174) returned 0x1 [0253.050] CloseHandle (hObject=0x174) returned 1 [0253.051] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0253.051] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04117_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04117_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17ac)) returned 1 [0253.051] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0253.051] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0253.051] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04117_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04117_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17ac)) returned 1 [0253.052] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0253.052] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0253.052] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0253.052] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd58, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="AN04134_.WMF", cAlternateFileName="")) returned 1 [0253.052] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0253.052] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0253.053] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0253.053] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0253.053] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0253.053] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0253.054] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04134_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04134_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0253.054] GetFileType (hFile=0x174) returned 0x1 [0253.055] CloseHandle (hObject=0x174) returned 1 [0253.055] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0253.055] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04134_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04134_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd58)) returned 1 [0253.056] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0253.056] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0253.056] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04134_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04134_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd58)) returned 1 [0253.056] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0253.056] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0253.056] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0253.056] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa4c, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="AN04174_.WMF", cAlternateFileName="")) returned 1 [0253.056] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0253.057] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0253.057] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0253.057] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0253.057] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0253.057] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0253.058] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04174_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0253.058] GetFileType (hFile=0x174) returned 0x1 [0253.059] CloseHandle (hObject=0x174) returned 1 [0253.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0253.059] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04174_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa4c)) returned 1 [0253.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0253.060] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0253.060] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04174_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa4c)) returned 1 [0253.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0253.060] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0253.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0253.060] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19ec, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="AN04191_.WMF", cAlternateFileName="")) returned 1 [0253.061] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0253.061] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0253.061] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0253.061] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0253.062] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0253.062] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0253.062] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04191_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04191_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0253.063] GetFileType (hFile=0x174) returned 0x1 [0253.063] CloseHandle (hObject=0x174) returned 1 [0253.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0253.064] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04191_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04191_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19ec)) returned 1 [0253.064] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0253.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0253.064] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04191_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04191_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19ec)) returned 1 [0253.065] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0253.065] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0253.065] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0253.065] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1204, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="AN04195_.WMF", cAlternateFileName="")) returned 1 [0253.065] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0253.065] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0253.065] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0253.066] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0253.066] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0253.066] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0253.067] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04195_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04195_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0253.067] GetFileType (hFile=0x174) returned 0x1 [0253.068] CloseHandle (hObject=0x174) returned 1 [0253.068] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0253.068] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04195_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04195_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1204)) returned 1 [0253.068] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0253.069] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0253.069] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04195_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04195_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1204)) returned 1 [0253.069] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0253.069] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0253.069] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0253.069] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc48, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="AN04196_.WMF", cAlternateFileName="")) returned 1 [0253.069] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0253.070] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0253.070] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0253.070] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0253.070] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0253.070] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0253.071] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04196_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04196_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0253.071] GetFileType (hFile=0x174) returned 0x1 [0253.072] CloseHandle (hObject=0x174) returned 1 [0253.072] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0253.072] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04196_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04196_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc48)) returned 1 [0253.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0253.072] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0253.073] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04196_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04196_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc48)) returned 1 [0253.073] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0253.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0253.073] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0253.073] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1df4, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="AN04206_.WMF", cAlternateFileName="")) returned 1 [0253.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0253.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0253.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0253.074] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0253.074] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0253.074] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0253.074] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04206_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04206_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0253.075] GetFileType (hFile=0x174) returned 0x1 [0253.075] CloseHandle (hObject=0x174) returned 1 [0253.075] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0253.076] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04206_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04206_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1df4)) returned 1 [0253.076] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0253.076] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0253.076] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04206_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04206_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1df4)) returned 1 [0253.500] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0253.500] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0253.500] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0253.500] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x212c, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="AN04225_.WMF", cAlternateFileName="")) returned 1 [0253.500] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0253.500] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0253.500] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0253.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0253.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0253.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0253.501] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04225_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04225_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0253.502] GetFileType (hFile=0x1e8) returned 0x1 [0253.502] CloseHandle (hObject=0x1e8) returned 1 [0253.502] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0253.502] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04225_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04225_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x212c)) returned 1 [0253.503] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0253.503] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0253.503] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04225_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04225_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x212c)) returned 1 [0253.503] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0253.503] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0253.503] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0253.503] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e7c, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="AN04235_.WMF", cAlternateFileName="")) returned 1 [0253.503] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0253.504] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0253.504] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0253.504] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0253.504] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0253.504] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0253.504] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04235_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04235_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0253.505] GetFileType (hFile=0x1e8) returned 0x1 [0253.505] CloseHandle (hObject=0x1e8) returned 1 [0253.506] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0253.506] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04235_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04235_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e7c)) returned 1 [0253.506] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0253.506] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0253.506] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04235_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04235_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e7c)) returned 1 [0253.506] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0253.506] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0253.506] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0253.506] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc89dc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc89dc9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e7c, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="AN04267_.WMF", cAlternateFileName="")) returned 1 [0253.507] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0253.507] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0253.507] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0253.507] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0253.507] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0253.507] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0253.508] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04267_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04267_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0253.508] GetFileType (hFile=0x1e8) returned 0x1 [0253.508] CloseHandle (hObject=0x1e8) returned 1 [0253.509] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0253.509] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04267_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04267_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc89dc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc89dc9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e7c)) returned 1 [0253.509] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0253.509] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0253.509] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04267_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04267_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc89dc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc89dc9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e7c)) returned 1 [0253.510] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0253.510] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0253.510] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0253.510] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e0, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="AN04269_.WMF", cAlternateFileName="")) returned 1 [0253.510] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0253.510] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0253.510] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0253.510] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0253.510] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0253.511] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0253.511] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04269_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04269_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0253.511] GetFileType (hFile=0x1e8) returned 0x1 [0253.512] CloseHandle (hObject=0x1e8) returned 1 [0253.512] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0253.512] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04269_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04269_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e0)) returned 1 [0253.513] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0253.513] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0253.513] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04269_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04269_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e0)) returned 1 [0253.513] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0253.513] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0253.513] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0253.513] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9bc, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="AN04323_.WMF", cAlternateFileName="")) returned 1 [0253.513] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0253.514] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0253.514] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0253.514] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0253.514] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0253.514] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0253.516] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04323_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04323_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0253.516] GetFileType (hFile=0x1e8) returned 0x1 [0253.516] CloseHandle (hObject=0x1e8) returned 1 [0253.517] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0253.517] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04323_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04323_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9bc)) returned 1 [0253.517] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0253.517] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0253.517] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04323_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04323_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9bc)) returned 1 [0253.518] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0253.518] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0253.518] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0253.518] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc89dc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc89dc9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd14, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="AN04326_.WMF", cAlternateFileName="")) returned 1 [0253.518] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0253.518] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0253.518] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0253.518] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0253.519] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0253.519] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0253.520] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04326_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04326_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0253.520] GetFileType (hFile=0x1e8) returned 0x1 [0253.521] CloseHandle (hObject=0x1e8) returned 1 [0253.521] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0253.521] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04326_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04326_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc89dc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc89dc9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd14)) returned 1 [0253.521] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0253.522] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0253.522] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04326_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04326_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc89dc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc89dc9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd14)) returned 1 [0253.522] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0253.522] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0253.522] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0253.522] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10c8, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="AN04332_.WMF", cAlternateFileName="")) returned 1 [0253.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0253.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0253.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0253.523] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0253.523] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0253.523] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0253.524] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04332_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04332_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0253.525] GetFileType (hFile=0x1e8) returned 0x1 [0253.525] CloseHandle (hObject=0x1e8) returned 1 [0253.526] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0253.526] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04332_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04332_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10c8)) returned 1 [0253.526] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0253.526] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0253.526] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04332_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04332_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10c8)) returned 1 [0253.527] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0253.527] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0253.527] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0253.527] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc9c, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="AN04355_.WMF", cAlternateFileName="")) returned 1 [0253.527] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0253.527] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0253.527] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0253.527] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0253.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0253.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0253.528] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04355_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04355_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0253.529] GetFileType (hFile=0x1e8) returned 0x1 [0253.529] CloseHandle (hObject=0x1e8) returned 1 [0253.530] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0253.530] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04355_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04355_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc9c)) returned 1 [0253.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0253.530] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0253.531] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04355_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04355_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc9c)) returned 1 [0253.532] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0253.532] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0253.532] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0253.532] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12c8, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="AN04369_.WMF", cAlternateFileName="")) returned 1 [0253.532] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0253.532] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0253.532] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0253.532] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0253.532] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0253.533] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0253.533] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04369_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04369_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0253.533] GetFileType (hFile=0x1e8) returned 0x1 [0253.534] CloseHandle (hObject=0x1e8) returned 1 [0253.534] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0253.535] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04369_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04369_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12c8)) returned 1 [0253.535] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0253.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0253.535] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04369_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04369_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12c8)) returned 1 [0253.535] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0253.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0253.536] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0253.536] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1384, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="AN04384_.WMF", cAlternateFileName="")) returned 1 [0253.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0253.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0253.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0253.536] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0253.536] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0253.536] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0253.537] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04384_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04384_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0253.538] GetFileType (hFile=0x1e8) returned 0x1 [0253.538] CloseHandle (hObject=0x1e8) returned 1 [0253.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0253.539] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04384_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04384_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1384)) returned 1 [0253.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0253.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0253.539] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04384_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04384_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1384)) returned 1 [0253.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0253.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0253.540] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0253.540] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x138c, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="AN04385_.WMF", cAlternateFileName="")) returned 1 [0253.540] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0253.540] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0253.540] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0253.540] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0253.540] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0253.541] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0253.541] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04385_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04385_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0253.542] GetFileType (hFile=0x1e8) returned 0x1 [0253.542] CloseHandle (hObject=0x1e8) returned 1 [0253.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0253.543] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04385_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04385_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x138c)) returned 1 [0253.543] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0253.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0253.543] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04385_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04385_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x138c)) returned 1 [0253.543] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0253.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0253.544] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0253.544] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1cd8, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="BABY_01.MID", cAlternateFileName="")) returned 1 [0253.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0253.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0253.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0253.544] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0253.544] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0253.544] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0253.545] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BABY_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\baby_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0253.545] GetFileType (hFile=0x1e8) returned 0x1 [0253.546] CloseHandle (hObject=0x1e8) returned 1 [0253.805] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0253.805] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BABY_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\baby_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1cd8)) returned 1 [0253.805] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0253.806] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0253.806] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BABY_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\baby_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1cd8)) returned 1 [0253.806] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0253.806] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0253.806] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0253.806] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1306, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="BD00116_.WMF", cAlternateFileName="")) returned 1 [0253.806] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0253.809] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0253.809] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0253.809] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0253.848] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0253.848] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0253.848] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00116_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00116_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0253.894] GetFileType (hFile=0x1e8) returned 0x1 [0253.895] CloseHandle (hObject=0x1e8) returned 1 [0253.895] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0253.896] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00116_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00116_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1306)) returned 1 [0253.896] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0253.897] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0253.897] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00116_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00116_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1306)) returned 1 [0253.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0253.897] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0253.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0253.897] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6906, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="BD00141_.WMF", cAlternateFileName="")) returned 1 [0253.897] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0253.897] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0253.898] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0253.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0253.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0253.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0253.898] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00141_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00141_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0253.899] GetFileType (hFile=0x1e8) returned 0x1 [0253.899] CloseHandle (hObject=0x1e8) returned 1 [0253.900] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0253.900] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00141_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00141_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6906)) returned 1 [0253.900] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0253.900] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0253.900] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00141_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00141_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6906)) returned 1 [0253.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0253.901] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0253.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0253.901] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7114, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="BD00146_.WMF", cAlternateFileName="")) returned 1 [0253.901] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0253.901] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0253.901] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0253.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0253.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0253.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0253.902] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00146_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00146_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0253.902] GetFileType (hFile=0x1e8) returned 0x1 [0253.903] CloseHandle (hObject=0x1e8) returned 1 [0253.903] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0253.903] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00146_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00146_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7114)) returned 1 [0253.903] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0253.903] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0253.904] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00146_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00146_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7114)) returned 1 [0253.904] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0253.904] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0253.904] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0253.904] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d74, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="BD00155_.WMF", cAlternateFileName="")) returned 1 [0253.904] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0253.904] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0253.904] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0253.904] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0253.904] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0253.904] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0253.905] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00155_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00155_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0253.905] GetFileType (hFile=0x1e8) returned 0x1 [0253.905] CloseHandle (hObject=0x1e8) returned 1 [0253.906] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0253.906] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00155_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00155_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d74)) returned 1 [0253.906] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0253.906] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0253.906] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00155_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00155_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d74)) returned 1 [0253.906] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0253.906] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0253.907] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0253.907] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x57f4, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="BD00160_.WMF", cAlternateFileName="")) returned 1 [0253.907] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0253.907] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0253.907] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0253.907] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0253.907] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0253.907] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0253.908] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00160_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00160_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0253.908] GetFileType (hFile=0x1e8) returned 0x1 [0253.908] CloseHandle (hObject=0x1e8) returned 1 [0253.908] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0253.909] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00160_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00160_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x57f4)) returned 1 [0253.909] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0253.909] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0253.909] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00160_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00160_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x57f4)) returned 1 [0253.909] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0253.909] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0253.909] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0253.909] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3f34, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="BD00173_.WMF", cAlternateFileName="")) returned 1 [0253.909] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0253.909] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0253.910] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0253.910] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0253.910] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0253.910] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0253.910] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00173_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0253.910] GetFileType (hFile=0x1e8) returned 0x1 [0253.911] CloseHandle (hObject=0x1e8) returned 1 [0253.911] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0253.911] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00173_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3f34)) returned 1 [0253.911] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0253.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0253.939] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00173_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3f34)) returned 1 [0253.940] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0253.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0253.940] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0253.940] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4354, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="BD05119_.WMF", cAlternateFileName="")) returned 1 [0253.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0253.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0253.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0253.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0253.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0253.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0253.941] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD05119_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd05119_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0253.942] GetFileType (hFile=0x1e8) returned 0x1 [0253.943] CloseHandle (hObject=0x1e8) returned 1 [0253.944] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0253.944] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD05119_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd05119_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4354)) returned 1 [0253.945] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0253.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0253.945] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD05119_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd05119_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4354)) returned 1 [0253.945] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0253.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0253.945] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0253.945] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ef0, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="BD06102_.WMF", cAlternateFileName="")) returned 1 [0253.946] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0253.946] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0253.946] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0253.946] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0253.946] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0253.946] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0253.947] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06102_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06102_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0253.947] GetFileType (hFile=0x1e8) returned 0x1 [0253.948] CloseHandle (hObject=0x1e8) returned 1 [0253.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0253.949] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06102_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06102_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ef0)) returned 1 [0253.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0253.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0253.949] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06102_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06102_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ef0)) returned 1 [0253.950] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0253.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0253.950] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0253.950] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4124, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="BD06200_.WMF", cAlternateFileName="")) returned 1 [0253.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0253.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0253.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0253.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0253.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0253.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0253.952] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06200_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06200_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0253.952] GetFileType (hFile=0x1e8) returned 0x1 [0253.953] CloseHandle (hObject=0x1e8) returned 1 [0253.953] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0253.954] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06200_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06200_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4124)) returned 1 [0253.954] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0253.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0253.954] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06200_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06200_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4124)) returned 1 [0253.954] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0253.955] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0253.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0253.955] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x687c, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="BD07761_.WMF", cAlternateFileName="")) returned 1 [0253.955] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0253.955] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0253.955] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0253.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0253.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0253.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0253.956] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07761_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07761_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0253.957] GetFileType (hFile=0x1e8) returned 0x1 [0253.957] CloseHandle (hObject=0x1e8) returned 1 [0253.958] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0253.958] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07761_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07761_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x687c)) returned 1 [0254.196] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0254.197] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0254.199] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07761_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07761_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x687c)) returned 1 [0254.203] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0254.207] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0254.229] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0254.229] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x133c, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="BD07804_.WMF", cAlternateFileName="")) returned 1 [0254.230] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0254.230] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0254.230] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0254.230] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0254.231] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0254.231] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0254.492] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07804_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07804_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0254.493] GetFileType (hFile=0x1e8) returned 0x1 [0254.493] CloseHandle (hObject=0x1e8) returned 1 [0254.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0254.493] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07804_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07804_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x133c)) returned 1 [0254.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0254.494] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0254.494] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07804_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07804_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x133c)) returned 1 [0254.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0254.494] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0254.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0254.494] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfe2, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="BD07831_.WMF", cAlternateFileName="")) returned 1 [0254.494] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0254.494] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0254.494] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0254.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0254.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0254.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0254.495] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07831_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07831_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0254.495] GetFileType (hFile=0x1e8) returned 0x1 [0254.495] CloseHandle (hObject=0x1e8) returned 1 [0254.496] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0254.496] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07831_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07831_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfe2)) returned 1 [0254.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0254.496] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0254.496] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07831_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07831_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfe2)) returned 1 [0254.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0254.496] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0254.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0254.496] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5f00, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="BD08758_.WMF", cAlternateFileName="")) returned 1 [0254.497] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0254.497] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0254.497] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0254.497] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0254.497] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0254.497] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0254.497] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08758_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08758_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0254.498] GetFileType (hFile=0x1e8) returned 0x1 [0254.498] CloseHandle (hObject=0x1e8) returned 1 [0254.498] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0254.498] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08758_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08758_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5f00)) returned 1 [0254.498] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0254.498] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0254.499] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08758_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08758_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5f00)) returned 1 [0254.499] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0254.499] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0254.499] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0254.499] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x60ca, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="BD08773_.WMF", cAlternateFileName="")) returned 1 [0254.499] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0254.499] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0254.499] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0254.499] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0254.500] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0254.500] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0254.500] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08773_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08773_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0254.500] GetFileType (hFile=0x1e8) returned 0x1 [0254.501] CloseHandle (hObject=0x1e8) returned 1 [0254.501] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0254.501] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08773_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08773_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x60ca)) returned 1 [0254.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0254.501] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0254.501] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08773_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08773_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x60ca)) returned 1 [0254.502] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0254.502] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0254.502] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0254.502] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbb7c, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="BD08808_.WMF", cAlternateFileName="")) returned 1 [0254.502] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0254.502] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0254.502] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0254.502] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0254.502] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0254.502] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0254.503] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08808_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08808_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0254.503] GetFileType (hFile=0x1e8) returned 0x1 [0254.503] CloseHandle (hObject=0x1e8) returned 1 [0254.504] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0254.504] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08808_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08808_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbb7c)) returned 1 [0254.504] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0254.504] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0254.504] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08808_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08808_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbb7c)) returned 1 [0254.504] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0254.504] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0254.504] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0254.504] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9d0e, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="BD08868_.WMF", cAlternateFileName="")) returned 1 [0254.505] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0254.505] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0254.505] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0254.505] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0254.505] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0254.505] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0254.506] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08868_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08868_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0254.506] GetFileType (hFile=0x1e8) returned 0x1 [0254.507] CloseHandle (hObject=0x1e8) returned 1 [0254.507] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0254.507] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08868_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08868_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9d0e)) returned 1 [0254.507] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0254.507] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0254.507] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08868_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08868_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9d0e)) returned 1 [0254.508] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0254.508] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0254.508] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0254.508] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd4897d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd4897d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbaaa, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="BD09031_.WMF", cAlternateFileName="")) returned 1 [0254.508] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0254.508] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0254.508] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0254.508] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0254.508] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0254.508] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0254.509] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09031_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09031_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0254.509] GetFileType (hFile=0x1e8) returned 0x1 [0254.509] CloseHandle (hObject=0x1e8) returned 1 [0254.510] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0254.510] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09031_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09031_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd4897d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd4897d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbaaa)) returned 1 [0254.510] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0254.510] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0254.510] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09031_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09031_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd4897d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd4897d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbaaa)) returned 1 [0254.510] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0254.510] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0254.510] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0254.510] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x38cc, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="BD09194_.WMF", cAlternateFileName="")) returned 1 [0254.510] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0254.511] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0254.511] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0254.511] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0254.511] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0254.511] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0254.511] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09194_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09194_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0254.512] GetFileType (hFile=0x1e8) returned 0x1 [0254.512] CloseHandle (hObject=0x1e8) returned 1 [0254.512] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0254.513] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09194_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09194_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x38cc)) returned 1 [0254.513] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0254.513] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0254.513] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09194_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09194_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x38cc)) returned 1 [0254.513] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0254.513] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0254.513] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0254.513] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x504a, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="BD09662_.WMF", cAlternateFileName="")) returned 1 [0254.513] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0254.513] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0254.513] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0254.514] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0254.514] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0254.514] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0254.514] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09662_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09662_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0254.514] GetFileType (hFile=0x1e8) returned 0x1 [0254.515] CloseHandle (hObject=0x1e8) returned 1 [0254.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0254.515] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09662_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09662_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x504a)) returned 1 [0254.515] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0254.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0254.515] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09662_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09662_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x504a)) returned 1 [0254.516] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0254.516] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0254.516] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0254.516] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f1e, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="BD09664_.WMF", cAlternateFileName="")) returned 1 [0254.516] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0254.516] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0254.516] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0254.516] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0254.516] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0254.516] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0254.517] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09664_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09664_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0254.517] GetFileType (hFile=0x1e8) returned 0x1 [0254.518] CloseHandle (hObject=0x1e8) returned 1 [0254.518] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0254.518] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09664_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09664_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f1e)) returned 1 [0254.518] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0254.518] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0254.518] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09664_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09664_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f1e)) returned 1 [0254.519] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0254.519] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0254.519] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0254.519] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x34cb, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="BD10890_.GIF", cAlternateFileName="")) returned 1 [0254.519] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0254.519] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0254.519] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0254.519] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0254.519] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0254.519] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0254.520] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10890_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0254.520] GetFileType (hFile=0x1e8) returned 0x1 [0254.520] CloseHandle (hObject=0x1e8) returned 1 [0254.521] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0254.521] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10890_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x34cb)) returned 1 [0254.521] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0254.522] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0254.522] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10890_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x34cb)) returned 1 [0254.522] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0254.522] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0254.522] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0254.522] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4edd, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="BD10972_.GIF", cAlternateFileName="")) returned 1 [0254.522] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0254.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0254.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0254.523] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0254.523] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0254.523] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0254.523] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10972_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0254.524] GetFileType (hFile=0x1e8) returned 0x1 [0254.524] CloseHandle (hObject=0x1e8) returned 1 [0254.524] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0254.524] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10972_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4edd)) returned 1 [0254.524] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0254.525] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0254.525] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10972_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4edd)) returned 1 [0254.525] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0254.525] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0254.525] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0254.525] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4fe6, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="BD19563_.GIF", cAlternateFileName="")) returned 1 [0254.525] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0254.525] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0254.525] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0254.525] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0254.525] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0254.525] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0254.526] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19563_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0254.526] GetFileType (hFile=0x1e8) returned 0x1 [0254.526] CloseHandle (hObject=0x1e8) returned 1 [0254.527] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0254.527] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19563_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4fe6)) returned 1 [0254.527] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0254.527] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0254.527] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19563_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4fe6)) returned 1 [0254.527] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0254.527] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0254.527] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0254.527] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d75, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="BD19582_.GIF", cAlternateFileName="")) returned 1 [0254.528] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0254.528] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0254.528] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0254.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0254.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0254.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0254.529] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19582_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0254.529] GetFileType (hFile=0x1e8) returned 0x1 [0254.530] CloseHandle (hObject=0x1e8) returned 1 [0254.530] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0254.530] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19582_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d75)) returned 1 [0254.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0254.530] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0254.531] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19582_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d75)) returned 1 [0254.531] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0254.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0254.531] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0254.531] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32b6, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="BD19695_.WMF", cAlternateFileName="")) returned 1 [0254.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0254.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0254.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0254.531] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0254.532] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0254.532] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0254.532] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19695_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19695_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0254.533] GetFileType (hFile=0x1e8) returned 0x1 [0254.533] CloseHandle (hObject=0x1e8) returned 1 [0254.533] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0254.534] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19695_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19695_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32b6)) returned 1 [0254.534] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0254.534] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0254.534] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19695_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19695_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32b6)) returned 1 [0254.534] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0254.534] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0254.534] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0254.534] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x25ee, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="BD19827_.WMF", cAlternateFileName="")) returned 1 [0254.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0254.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0254.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0254.535] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0254.535] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0254.535] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0254.535] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19827_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19827_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0254.536] GetFileType (hFile=0x1e8) returned 0x1 [0254.536] CloseHandle (hObject=0x1e8) returned 1 [0254.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0254.536] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19827_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19827_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x25ee)) returned 1 [0255.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0255.528] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0255.529] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19827_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19827_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x25ee)) returned 1 [0255.529] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0255.529] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0255.529] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0255.529] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2244, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="BD19828_.WMF", cAlternateFileName="")) returned 1 [0255.529] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0255.529] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0255.529] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0255.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0255.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0255.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0255.531] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19828_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19828_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0255.570] GetFileType (hFile=0x1e0) returned 0x1 [0255.570] CloseHandle (hObject=0x1e0) returned 1 [0255.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0255.571] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19828_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19828_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2244)) returned 1 [0255.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0255.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0255.571] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19828_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19828_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2244)) returned 1 [0255.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0255.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0255.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0255.572] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3896, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="BD19986_.WMF", cAlternateFileName="")) returned 1 [0255.572] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0255.572] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0255.572] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0255.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0255.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0255.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0255.573] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19986_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19986_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0255.573] GetFileType (hFile=0x1e0) returned 0x1 [0255.573] CloseHandle (hObject=0x1e0) returned 1 [0255.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0255.574] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19986_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19986_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3896)) returned 1 [0255.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0255.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0255.574] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19986_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19986_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3896)) returned 1 [0255.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0255.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0255.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0255.575] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4780, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="BD19988_.WMF", cAlternateFileName="")) returned 1 [0255.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0255.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0255.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0255.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0255.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0255.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0255.576] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19988_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19988_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0255.576] GetFileType (hFile=0x1e0) returned 0x1 [0255.577] CloseHandle (hObject=0x1e0) returned 1 [0255.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0255.577] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19988_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19988_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4780)) returned 1 [0255.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0255.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0255.577] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19988_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19988_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4780)) returned 1 [0255.578] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0255.578] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0255.578] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0255.578] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b32, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="BD20013_.WMF", cAlternateFileName="")) returned 1 [0255.578] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0255.578] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0255.578] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0255.578] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0255.579] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0255.579] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0255.579] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD20013_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd20013_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0255.580] GetFileType (hFile=0x1e0) returned 0x1 [0255.580] CloseHandle (hObject=0x1e0) returned 1 [0255.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0255.581] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD20013_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd20013_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b32)) returned 1 [0255.581] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0255.581] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0255.581] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD20013_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd20013_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b32)) returned 1 [0255.581] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0255.581] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0255.581] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0255.581] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30e8, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="BL00008_.WMF", cAlternateFileName="")) returned 1 [0255.581] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0255.581] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0255.581] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0255.582] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0255.582] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0255.582] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0255.582] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00008_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00008_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0255.583] GetFileType (hFile=0x1e0) returned 0x1 [0255.583] CloseHandle (hObject=0x1e0) returned 1 [0255.584] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0255.584] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00008_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00008_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30e8)) returned 1 [0255.584] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0255.584] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0255.584] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00008_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00008_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30e8)) returned 1 [0255.584] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0255.584] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0255.584] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0255.584] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd4897d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd4897d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x265a, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="BL00012_.WMF", cAlternateFileName="")) returned 1 [0255.584] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0255.585] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0255.585] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0255.585] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0255.585] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0255.585] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0255.586] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00012_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00012_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0255.586] GetFileType (hFile=0x1e0) returned 0x1 [0255.586] CloseHandle (hObject=0x1e0) returned 1 [0255.587] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0255.587] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00012_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00012_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd4897d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd4897d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x265a)) returned 1 [0255.587] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0255.587] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0255.587] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00012_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00012_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd4897d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd4897d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x265a)) returned 1 [0255.588] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0255.588] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0255.588] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0255.588] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1eb6, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="BL00045_.WMF", cAlternateFileName="")) returned 1 [0255.588] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0255.588] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0255.588] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0255.589] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0255.589] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0255.589] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0255.590] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00045_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00045_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0255.590] GetFileType (hFile=0x1e0) returned 0x1 [0255.590] CloseHandle (hObject=0x1e0) returned 1 [0255.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0255.592] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00045_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00045_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1eb6)) returned 1 [0255.592] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0255.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0255.592] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00045_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00045_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1eb6)) returned 1 [0255.593] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0255.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0255.593] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0255.593] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3f4, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="BL00098_.WMF", cAlternateFileName="")) returned 1 [0255.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0255.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0255.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0255.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0255.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0255.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0255.594] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00098_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00098_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0255.595] GetFileType (hFile=0x1e0) returned 0x1 [0255.595] CloseHandle (hObject=0x1e0) returned 1 [0255.596] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0255.596] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00098_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00098_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3f4)) returned 1 [0255.596] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0255.596] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0255.596] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00098_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00098_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3f4)) returned 1 [0255.596] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0255.596] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0255.596] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0255.596] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd4897d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd4897d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x370, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="BL00105_.WMF", cAlternateFileName="")) returned 1 [0255.597] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0255.597] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0255.597] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0255.597] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0255.597] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0255.597] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0255.598] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00105_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00105_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0255.598] GetFileType (hFile=0x1e0) returned 0x1 [0255.598] CloseHandle (hObject=0x1e0) returned 1 [0255.598] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0255.599] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00105_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00105_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd4897d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd4897d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x370)) returned 1 [0255.599] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0255.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0255.599] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00105_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00105_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd4897d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd4897d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x370)) returned 1 [0256.085] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0256.085] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0256.085] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0256.085] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd4897d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd4897d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27a2, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="BL00122_.WMF", cAlternateFileName="")) returned 1 [0256.085] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0256.085] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0256.085] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0256.085] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0256.085] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0256.085] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0256.085] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00122_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00122_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0256.086] GetFileType (hFile=0x21c) returned 0x1 [0256.086] CloseHandle (hObject=0x21c) returned 1 [0256.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0256.086] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00122_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00122_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd4897d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd4897d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27a2)) returned 1 [0256.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0256.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0256.086] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00122_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00122_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd4897d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd4897d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27a2)) returned 1 [0256.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0256.087] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0256.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0256.087] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd5c704c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd5c704c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5b8, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="BL00130_.WMF", cAlternateFileName="")) returned 1 [0256.087] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0256.087] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0256.087] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0256.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0256.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0256.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0256.087] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00130_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00130_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0256.088] GetFileType (hFile=0x21c) returned 0x1 [0256.088] CloseHandle (hObject=0x21c) returned 1 [0256.088] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0256.088] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00130_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00130_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd5c704c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd5c704c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5b8)) returned 1 [0256.088] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0256.088] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0256.088] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00130_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00130_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd5c704c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd5c704c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5b8)) returned 1 [0256.089] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0256.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0256.089] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0256.089] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcdbb058, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcdbb058, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd5c704c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6a0, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="BL00148_.WMF", cAlternateFileName="")) returned 1 [0256.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0256.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0256.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0256.089] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0256.089] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0256.089] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0256.090] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00148_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00148_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0256.090] GetFileType (hFile=0x21c) returned 0x1 [0256.090] CloseHandle (hObject=0x21c) returned 1 [0256.091] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0256.091] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00148_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00148_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcdbb058, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcdbb058, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd5c704c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6a0)) returned 1 [0256.091] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0256.091] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0256.091] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00148_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00148_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcdbb058, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcdbb058, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd5c704c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6a0)) returned 1 [0256.091] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0256.091] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0256.091] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0256.091] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcdbb058, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcdbb058, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd5c704c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5ec, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="BL00152_.WMF", cAlternateFileName="")) returned 1 [0256.091] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0256.091] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0256.091] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0256.091] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0256.092] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0256.092] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0256.092] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00152_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00152_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0256.092] GetFileType (hFile=0x21c) returned 0x1 [0256.093] CloseHandle (hObject=0x21c) returned 1 [0256.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0256.093] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00152_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00152_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcdbb058, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcdbb058, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd5c704c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5ec)) returned 1 [0256.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0256.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0256.093] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00152_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00152_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcdbb058, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcdbb058, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd5c704c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5ec)) returned 1 [0256.094] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0256.094] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0256.094] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0256.094] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcdbb058, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf92, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="BL00194_.WMF", cAlternateFileName="")) returned 1 [0256.094] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0256.094] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0256.094] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0256.094] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0256.094] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0256.094] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0256.095] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00194_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00194_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0256.095] GetFileType (hFile=0x21c) returned 0x1 [0256.095] CloseHandle (hObject=0x21c) returned 1 [0256.096] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0256.096] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00194_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00194_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcdbb058, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf92)) returned 1 [0256.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0256.096] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0256.096] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00194_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00194_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcdbb058, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf92)) returned 1 [0256.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0256.096] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0256.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0256.096] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcdbb058, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f86, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="BL00195_.WMF", cAlternateFileName="")) returned 1 [0256.096] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0256.097] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0256.097] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0256.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0256.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0256.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0256.097] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00195_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00195_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0256.098] GetFileType (hFile=0x21c) returned 0x1 [0256.098] CloseHandle (hObject=0x21c) returned 1 [0256.098] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0256.098] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00195_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00195_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcdbb058, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f86)) returned 1 [0256.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0256.098] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0256.099] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00195_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00195_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcdbb058, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f86)) returned 1 [0256.099] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0256.099] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0256.099] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0256.100] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2458, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="BL00234_.WMF", cAlternateFileName="")) returned 1 [0256.100] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0256.100] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0256.100] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0256.100] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0256.100] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0256.100] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0256.100] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00234_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00234_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0256.101] GetFileType (hFile=0x21c) returned 0x1 [0256.101] CloseHandle (hObject=0x21c) returned 1 [0256.101] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0256.101] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00234_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00234_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2458)) returned 1 [0256.102] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0256.102] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0256.102] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00234_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00234_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2458)) returned 1 [0256.102] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0256.102] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0256.102] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0256.102] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd5c704c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfb8, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="BL00242_.WMF", cAlternateFileName="")) returned 1 [0256.102] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0256.102] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0256.102] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0256.102] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0256.102] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0256.102] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0256.103] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00242_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00242_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0256.103] GetFileType (hFile=0x21c) returned 0x1 [0256.103] CloseHandle (hObject=0x21c) returned 1 [0256.103] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0256.103] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00242_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00242_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd5c704c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfb8)) returned 1 [0256.104] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0256.104] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0256.104] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00242_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00242_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd5c704c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfb8)) returned 1 [0256.104] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0256.104] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0256.104] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0256.104] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcdbb058, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x386c, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="BL00247_.WMF", cAlternateFileName="")) returned 1 [0256.104] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0256.104] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0256.104] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0256.104] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0256.104] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0256.104] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0256.105] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00247_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00247_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0256.105] GetFileType (hFile=0x21c) returned 0x1 [0256.105] CloseHandle (hObject=0x21c) returned 1 [0256.105] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0256.106] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00247_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00247_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcdbb058, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x386c)) returned 1 [0256.106] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0256.106] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0256.106] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00247_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00247_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcdbb058, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x386c)) returned 1 [0256.106] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0256.106] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0256.106] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0256.106] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x600, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="BL00248_.WMF", cAlternateFileName="")) returned 1 [0256.106] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0256.106] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0256.106] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0256.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0256.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0256.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0256.107] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00248_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00248_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0256.107] GetFileType (hFile=0x21c) returned 0x1 [0256.108] CloseHandle (hObject=0x21c) returned 1 [0256.108] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0256.108] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00248_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00248_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x600)) returned 1 [0256.108] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0256.108] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0256.108] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00248_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00248_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x600)) returned 1 [0256.108] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0256.108] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0256.109] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0256.109] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcdbb058, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1264, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="BL00252_.WMF", cAlternateFileName="")) returned 1 [0256.109] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0256.109] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0256.109] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0256.109] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0256.109] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0256.109] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0256.109] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00252_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00252_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0256.110] GetFileType (hFile=0x21c) returned 0x1 [0256.110] CloseHandle (hObject=0x21c) returned 1 [0256.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0256.110] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00252_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00252_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcdbb058, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1264)) returned 1 [0256.111] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0256.111] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0256.111] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00252_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00252_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcdbb058, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1264)) returned 1 [0256.111] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0256.111] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0256.111] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0256.111] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd685b3d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6c8, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="BL00254_.WMF", cAlternateFileName="")) returned 1 [0256.111] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0256.111] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0256.111] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0256.111] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0256.112] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0256.112] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0256.112] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00254_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00254_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0256.112] GetFileType (hFile=0x21c) returned 0x1 [0256.113] CloseHandle (hObject=0x21c) returned 1 [0256.113] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0256.113] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00254_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00254_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd685b3d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6c8)) returned 1 [0256.113] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0256.114] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0256.114] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00254_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00254_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd685b3d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6c8)) returned 1 [0256.114] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0256.114] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0256.114] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0256.114] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30c2, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="BL00261_.WMF", cAlternateFileName="")) returned 1 [0256.114] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0256.114] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0256.114] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0256.114] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0256.114] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0256.115] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0256.116] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00261_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00261_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0256.116] GetFileType (hFile=0x21c) returned 0x1 [0256.116] CloseHandle (hObject=0x21c) returned 1 [0256.117] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0256.117] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00261_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00261_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30c2)) returned 1 [0256.117] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0256.117] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0256.117] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00261_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00261_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30c2)) returned 1 [0256.117] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0256.117] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0256.118] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0256.118] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9fc, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="BL00262_.WMF", cAlternateFileName="")) returned 1 [0256.118] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0256.118] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0256.118] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0256.118] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0256.118] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0256.118] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0256.119] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00262_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00262_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0256.119] GetFileType (hFile=0x21c) returned 0x1 [0256.119] CloseHandle (hObject=0x21c) returned 1 [0256.119] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0256.119] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00262_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00262_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9fc)) returned 1 [0256.120] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0256.120] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0256.120] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00262_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00262_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9fc)) returned 1 [0256.120] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0256.120] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0256.120] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0256.120] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1678, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="BL00265_.WMF", cAlternateFileName="")) returned 1 [0256.120] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0256.120] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0256.120] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0256.121] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0256.121] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0256.121] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0256.121] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00265_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00265_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0256.121] GetFileType (hFile=0x21c) returned 0x1 [0256.122] CloseHandle (hObject=0x21c) returned 1 [0256.122] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0256.122] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00265_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00265_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1678)) returned 1 [0256.122] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0256.123] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0256.123] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00265_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00265_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1678)) returned 1 [0256.123] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0256.123] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0256.123] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0256.123] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa54, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="BL00267_.WMF", cAlternateFileName="")) returned 1 [0256.123] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0256.123] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0256.123] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0256.123] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0256.124] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0256.124] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0256.124] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00267_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00267_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0256.124] GetFileType (hFile=0x21c) returned 0x1 [0256.125] CloseHandle (hObject=0x21c) returned 1 [0256.125] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0256.125] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00267_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00267_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa54)) returned 1 [0256.125] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0256.126] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0256.126] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00267_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00267_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa54)) returned 1 [0256.126] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0256.126] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0256.126] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0256.126] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd5c704c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd5c704c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd5c704c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1498, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="BL00269_.WMF", cAlternateFileName="")) returned 1 [0256.126] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0256.126] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0256.126] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0256.126] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0256.126] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0256.126] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0256.127] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00269_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00269_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0256.127] GetFileType (hFile=0x21c) returned 0x1 [0256.127] CloseHandle (hObject=0x21c) returned 1 [0256.128] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0256.128] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00269_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00269_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd5c704c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd5c704c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd5c704c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1498)) returned 1 [0256.128] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0256.128] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0256.128] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00269_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00269_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd5c704c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd5c704c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd5c704c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1498)) returned 1 [0256.128] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0256.129] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0256.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0256.129] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc8, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="BL00270_.WMF", cAlternateFileName="")) returned 1 [0256.129] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0256.129] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0256.129] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0256.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0256.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0256.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0256.130] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00270_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00270_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0256.498] GetFileType (hFile=0x21c) returned 0x1 [0256.498] CloseHandle (hObject=0x21c) returned 1 [0256.498] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0256.498] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00270_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00270_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc8)) returned 1 [0256.499] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0256.499] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0256.499] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00270_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00270_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc8)) returned 1 [0256.499] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0256.499] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0256.499] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0256.499] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xec4, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="BL00273_.WMF", cAlternateFileName="")) returned 1 [0256.499] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0256.499] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0256.499] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0256.499] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0256.499] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0256.499] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0256.500] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00273_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00273_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0256.503] GetFileType (hFile=0x21c) returned 0x1 [0256.503] CloseHandle (hObject=0x21c) returned 1 [0256.503] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0256.503] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00273_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00273_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xec4)) returned 1 [0256.503] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0256.503] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0256.503] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00273_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00273_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xec4)) returned 1 [0256.504] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0256.504] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0256.504] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0256.504] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd5c704c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd5c704c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1044, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="BL00274_.WMF", cAlternateFileName="")) returned 1 [0256.504] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0256.504] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0256.504] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0256.504] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0256.504] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0256.504] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0256.505] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00274_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00274_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0256.521] GetFileType (hFile=0x21c) returned 0x1 [0256.522] CloseHandle (hObject=0x21c) returned 1 [0256.522] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0256.522] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00274_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00274_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd5c704c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd5c704c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1044)) returned 1 [0256.522] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0256.522] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0256.523] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00274_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00274_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd5c704c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd5c704c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1044)) returned 1 [0256.523] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0256.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0256.523] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0256.523] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd5c704c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd5c704c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="BL00296_.WMF", cAlternateFileName="")) returned 1 [0256.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0256.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0256.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0256.523] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0256.523] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0256.523] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0256.524] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00296_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00296_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0256.524] GetFileType (hFile=0x21c) returned 0x1 [0256.524] CloseHandle (hObject=0x21c) returned 1 [0256.525] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0256.525] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00296_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00296_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd5c704c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd5c704c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32c)) returned 1 [0256.525] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0256.525] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0256.525] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00296_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00296_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd5c704c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd5c704c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32c)) returned 1 [0256.525] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0256.525] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0256.525] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0256.525] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x332e, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="BL00390_.WMF", cAlternateFileName="")) returned 1 [0256.525] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0256.525] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0256.525] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0256.526] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0256.526] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0256.526] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0256.526] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00390_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00390_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0256.526] GetFileType (hFile=0x21c) returned 0x1 [0256.527] CloseHandle (hObject=0x21c) returned 1 [0256.527] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0256.527] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00390_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00390_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x332e)) returned 1 [0256.527] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0256.527] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0256.527] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00390_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00390_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x332e)) returned 1 [0256.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0256.528] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0256.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0256.528] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd685b3d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd685b3d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x69aa, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="BL00392_.WMF", cAlternateFileName="")) returned 1 [0256.528] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0256.528] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0256.528] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0256.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0256.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0256.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0256.529] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00392_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00392_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0256.529] GetFileType (hFile=0x21c) returned 0x1 [0256.529] CloseHandle (hObject=0x21c) returned 1 [0256.529] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0256.529] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00392_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00392_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd685b3d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd685b3d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x69aa)) returned 1 [0256.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0256.530] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0256.530] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00392_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00392_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd685b3d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd685b3d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x69aa)) returned 1 [0256.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0256.530] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0256.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0256.530] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd685b3d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd685b3d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b54, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="BL00524_.WMF", cAlternateFileName="")) returned 1 [0256.530] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0256.530] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0256.530] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0256.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0256.531] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0256.531] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0256.531] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00524_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00524_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0256.531] GetFileType (hFile=0x21c) returned 0x1 [0256.532] CloseHandle (hObject=0x21c) returned 1 [0256.532] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0256.532] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00524_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00524_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd685b3d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd685b3d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b54)) returned 1 [0256.532] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0256.532] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0256.532] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00524_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00524_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd685b3d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd685b3d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b54)) returned 1 [0256.532] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0256.533] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0256.533] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0256.533] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd685b3d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd685b3d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2576, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="BL00525_.WMF", cAlternateFileName="")) returned 1 [0256.533] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0256.533] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0256.533] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0256.533] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0256.533] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0256.533] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0256.534] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00525_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00525_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0256.534] GetFileType (hFile=0x21c) returned 0x1 [0256.534] CloseHandle (hObject=0x21c) returned 1 [0256.534] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0256.535] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00525_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00525_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd685b3d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd685b3d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2576)) returned 1 [0256.535] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0256.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0256.535] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00525_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00525_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd685b3d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd685b3d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2576)) returned 1 [0256.535] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0256.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0256.535] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0256.535] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd65f8ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd65f8ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd685b3d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6ba0, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="BL00526_.WMF", cAlternateFileName="")) returned 1 [0256.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0256.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0256.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0256.536] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0256.536] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0256.536] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0256.536] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00526_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00526_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0256.537] GetFileType (hFile=0x21c) returned 0x1 [0256.537] CloseHandle (hObject=0x21c) returned 1 [0256.537] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0256.538] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00526_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00526_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd65f8ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd65f8ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd685b3d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6ba0)) returned 1 [0256.538] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0256.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0256.538] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00526_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00526_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd65f8ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd65f8ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd685b3d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6ba0)) returned 1 [0256.538] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0256.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0256.538] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0256.538] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2cec, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="BL00648_.WMF", cAlternateFileName="")) returned 1 [0256.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0256.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0256.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0256.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0256.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0256.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0256.539] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00648_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00648_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0256.540] GetFileType (hFile=0x21c) returned 0x1 [0256.540] CloseHandle (hObject=0x21c) returned 1 [0256.540] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0256.540] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00648_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00648_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2cec)) returned 1 [0256.540] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0256.540] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0256.541] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00648_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00648_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2cec)) returned 1 [0256.541] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0256.541] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0256.541] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0256.541] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd685b3d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd685b3d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1138, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="BL00921_.WMF", cAlternateFileName="")) returned 1 [0256.541] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0256.541] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0256.541] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0256.541] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0256.541] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0256.541] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0256.542] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00921_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00921_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0256.542] GetFileType (hFile=0x21c) returned 0x1 [0256.542] CloseHandle (hObject=0x21c) returned 1 [0256.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0256.543] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00921_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00921_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd685b3d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd685b3d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1138)) returned 1 [0256.543] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0256.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0256.543] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00921_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00921_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd685b3d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd685b3d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1138)) returned 1 [0256.543] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0256.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0256.543] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0256.544] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd65f8ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd65f8ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1870, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="BL00923_.WMF", cAlternateFileName="")) returned 1 [0256.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0256.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0256.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0256.544] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0256.544] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0256.544] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0256.544] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00923_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00923_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0256.545] GetFileType (hFile=0x21c) returned 0x1 [0256.545] CloseHandle (hObject=0x21c) returned 1 [0256.545] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0256.545] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00923_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00923_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd65f8ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd65f8ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1870)) returned 1 [0256.545] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0256.545] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0256.545] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00923_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00923_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd65f8ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd65f8ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1870)) returned 1 [0256.545] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0256.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0256.546] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0256.546] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd65f8ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd65f8ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd685b3d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c14, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="BL00932_.WMF", cAlternateFileName="")) returned 1 [0256.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0256.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0256.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0256.546] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0256.546] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0256.546] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0256.546] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00932_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00932_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0256.547] GetFileType (hFile=0x21c) returned 0x1 [0256.547] CloseHandle (hObject=0x21c) returned 1 [0256.547] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0256.547] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00932_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00932_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd65f8ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd65f8ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd685b3d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c14)) returned 1 [0256.547] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0256.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0256.548] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00932_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00932_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd65f8ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd65f8ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd685b3d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c14)) returned 1 [0256.548] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0256.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0256.548] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0256.548] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd65f8ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd65f8ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd685b3d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xeb8, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="BL00985_.WMF", cAlternateFileName="")) returned 1 [0256.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0256.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0256.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0256.548] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0256.548] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0256.549] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0256.549] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00985_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00985_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0256.549] GetFileType (hFile=0x21c) returned 0x1 [0256.550] CloseHandle (hObject=0x21c) returned 1 [0256.550] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0256.550] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00985_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00985_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd65f8ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd65f8ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd685b3d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xeb8)) returned 1 [0256.550] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0256.551] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0256.551] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00985_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00985_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd65f8ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd65f8ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd685b3d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xeb8)) returned 1 [0256.551] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0256.551] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0256.551] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0256.551] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd16, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="BOAT.WMF", cAlternateFileName="")) returned 1 [0256.551] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0256.551] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0256.551] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0256.551] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0256.552] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0256.552] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0256.865] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOAT.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\boat.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0257.040] GetFileType (hFile=0x1ac) returned 0x1 [0257.040] CloseHandle (hObject=0x1ac) returned 1 [0257.041] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0257.041] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOAT.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\boat.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd16)) returned 1 [0257.041] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0257.041] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0257.042] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOAT.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\boat.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd16)) returned 1 [0257.042] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0257.042] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0257.042] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0257.042] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x714c, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="BOATINST.WMF", cAlternateFileName="")) returned 1 [0257.042] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0257.043] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0257.043] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0257.043] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0257.043] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0257.043] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0257.194] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOATINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\boatinst.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0257.194] GetFileType (hFile=0x198) returned 0x1 [0257.194] CloseHandle (hObject=0x198) returned 1 [0257.195] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0257.195] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOATINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\boatinst.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x714c)) returned 1 [0257.195] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0257.195] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0257.195] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOATINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\boatinst.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x714c)) returned 1 [0257.196] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0257.196] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0257.196] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0257.196] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x532, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="BS00076_.WMF", cAlternateFileName="")) returned 1 [0257.196] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0257.196] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0257.196] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0257.196] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0257.196] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0257.197] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0257.197] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00076_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00076_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0257.198] GetFileType (hFile=0x198) returned 0x1 [0257.198] CloseHandle (hObject=0x198) returned 1 [0257.199] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0257.199] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00076_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00076_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x532)) returned 1 [0257.199] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0257.199] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0257.199] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00076_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00076_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x532)) returned 1 [0257.199] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0257.199] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0257.199] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0257.200] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5a4, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="BS00078_.WMF", cAlternateFileName="")) returned 1 [0257.200] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0257.200] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0257.200] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0257.200] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0257.200] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0257.200] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0257.201] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00078_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00078_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0257.201] GetFileType (hFile=0x198) returned 0x1 [0257.201] CloseHandle (hObject=0x198) returned 1 [0257.202] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0257.202] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00078_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00078_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5a4)) returned 1 [0257.202] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0257.202] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0257.202] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00078_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00078_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5a4)) returned 1 [0257.202] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0257.202] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0257.202] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0257.203] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f26, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="BS00092_.WMF", cAlternateFileName="")) returned 1 [0257.203] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0257.203] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0257.203] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0257.203] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0257.203] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0257.203] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0257.204] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00092_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00092_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0257.204] GetFileType (hFile=0x198) returned 0x1 [0257.204] CloseHandle (hObject=0x198) returned 1 [0257.205] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0257.205] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00092_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00092_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f26)) returned 1 [0257.205] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0257.205] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0257.205] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00092_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00092_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f26)) returned 1 [0257.205] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0257.205] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0257.206] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0257.206] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x94a, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="BS00100_.WMF", cAlternateFileName="")) returned 1 [0257.206] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0257.206] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0257.206] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0257.206] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0257.206] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0257.206] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0257.207] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00100_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00100_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0257.207] GetFileType (hFile=0x198) returned 0x1 [0257.208] CloseHandle (hObject=0x198) returned 1 [0257.208] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0257.208] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00100_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00100_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x94a)) returned 1 [0257.208] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0257.209] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0257.210] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00100_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00100_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x94a)) returned 1 [0257.210] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0257.210] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0257.211] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0257.211] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="BS00135_.WMF", cAlternateFileName="")) returned 1 [0257.211] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0257.211] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0257.212] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0257.212] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0257.212] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0257.212] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0257.212] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00135_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00135_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0257.213] GetFileType (hFile=0x198) returned 0x1 [0257.213] CloseHandle (hObject=0x198) returned 1 [0257.214] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0257.214] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00135_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00135_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x414)) returned 1 [0257.214] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0257.214] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0257.214] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00135_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00135_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x414)) returned 1 [0257.215] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0257.215] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0257.215] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0257.215] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x876, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="BS00136_.WMF", cAlternateFileName="")) returned 1 [0257.215] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0257.215] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0257.215] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0257.215] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0257.215] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0257.215] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0257.216] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00136_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00136_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0257.217] GetFileType (hFile=0x198) returned 0x1 [0257.217] CloseHandle (hObject=0x198) returned 1 [0257.217] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0257.217] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00136_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00136_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x876)) returned 1 [0257.218] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0257.218] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0257.218] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00136_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00136_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x876)) returned 1 [0257.218] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0257.218] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0257.218] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0257.218] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6b0, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="BS00145_.WMF", cAlternateFileName="")) returned 1 [0257.219] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0257.219] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0257.219] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0257.219] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0257.219] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0257.219] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0257.220] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00145_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00145_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0257.220] GetFileType (hFile=0x198) returned 0x1 [0257.221] CloseHandle (hObject=0x198) returned 1 [0257.221] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0257.221] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00145_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00145_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6b0)) returned 1 [0257.222] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0257.222] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0257.222] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00145_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00145_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6b0)) returned 1 [0257.222] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0257.222] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0257.222] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0257.222] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20ae, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="BS00174_.WMF", cAlternateFileName="")) returned 1 [0257.223] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0257.223] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0257.223] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0257.223] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0257.223] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0257.223] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0257.224] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00174_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0257.225] GetFileType (hFile=0x198) returned 0x1 [0257.225] CloseHandle (hObject=0x198) returned 1 [0257.226] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0257.226] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00174_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20ae)) returned 1 [0257.226] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0257.226] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0257.226] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00174_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20ae)) returned 1 [0257.226] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0257.226] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0257.226] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0257.227] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1370, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="BS00184_.WMF", cAlternateFileName="")) returned 1 [0257.227] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0257.227] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0257.227] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0257.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0257.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0257.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0257.228] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00184_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0257.228] GetFileType (hFile=0x198) returned 0x1 [0257.229] CloseHandle (hObject=0x198) returned 1 [0257.229] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0257.229] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00184_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1370)) returned 1 [0257.229] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0257.230] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0257.230] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00184_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1370)) returned 1 [0257.230] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0257.230] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0257.230] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0257.230] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31f4, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="BS00186_.WMF", cAlternateFileName="")) returned 1 [0257.230] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0257.230] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0257.231] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0257.231] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0257.231] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0257.231] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0257.231] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00186_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00186_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0257.232] GetFileType (hFile=0x198) returned 0x1 [0257.232] CloseHandle (hObject=0x198) returned 1 [0257.233] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0257.233] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00186_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00186_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31f4)) returned 1 [0257.233] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0257.233] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0257.233] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00186_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00186_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31f4)) returned 1 [0257.233] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0257.233] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0257.234] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0257.234] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc20, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="BS00200_.WMF", cAlternateFileName="")) returned 1 [0257.234] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0257.234] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0257.234] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0257.234] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0257.234] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0257.234] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0257.235] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00200_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00200_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0257.235] GetFileType (hFile=0x198) returned 0x1 [0257.236] CloseHandle (hObject=0x198) returned 1 [0257.236] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0257.236] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00200_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00200_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc20)) returned 1 [0257.237] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0257.237] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0257.237] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00200_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00200_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc20)) returned 1 [0257.237] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0257.237] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0257.237] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0257.237] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x634, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="BS00224_.WMF", cAlternateFileName="")) returned 1 [0257.238] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0257.238] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0257.238] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0257.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0257.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0257.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0257.239] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00224_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00224_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0257.239] GetFileType (hFile=0x198) returned 0x1 [0257.563] CloseHandle (hObject=0x198) returned 1 [0257.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0257.563] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00224_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00224_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x634)) returned 1 [0257.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0257.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0257.564] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00224_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00224_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x634)) returned 1 [0257.564] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0257.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0257.564] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0257.564] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4bc, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="BS00438_.WMF", cAlternateFileName="")) returned 1 [0257.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0257.565] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0257.565] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0257.565] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0257.565] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0257.565] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0257.566] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00438_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00438_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0257.805] GetFileType (hFile=0x1c0) returned 0x1 [0257.806] CloseHandle (hObject=0x1c0) returned 1 [0257.806] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0257.806] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00438_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00438_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4bc)) returned 1 [0257.807] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0257.807] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0257.807] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00438_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00438_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4bc)) returned 1 [0257.807] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0257.807] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0257.807] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0257.807] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x804, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="BS00439_.WMF", cAlternateFileName="")) returned 1 [0257.808] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0257.808] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0257.808] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0257.808] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0257.808] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0257.808] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0257.809] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00439_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00439_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0258.370] GetFileType (hFile=0x1ac) returned 0x1 [0258.371] CloseHandle (hObject=0x1ac) returned 1 [0258.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0258.373] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00439_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00439_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x804)) returned 1 [0258.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0258.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0258.373] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00439_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00439_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x804)) returned 1 [0258.374] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0258.374] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0258.374] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0258.374] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15cc, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="BS00440_.WMF", cAlternateFileName="")) returned 1 [0258.374] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0258.374] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0258.374] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0258.374] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0258.374] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0258.375] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0258.375] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00440_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00440_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0258.598] GetFileType (hFile=0x21c) returned 0x1 [0258.599] CloseHandle (hObject=0x21c) returned 1 [0258.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0258.599] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00440_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00440_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15cc)) returned 1 [0258.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0258.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0258.600] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00440_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00440_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15cc)) returned 1 [0258.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0258.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0258.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0258.600] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdc4, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="BS00441_.WMF", cAlternateFileName="")) returned 1 [0258.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0258.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0258.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0258.601] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0258.601] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0258.601] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0258.602] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00441_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00441_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0258.602] GetFileType (hFile=0x21c) returned 0x1 [0258.603] CloseHandle (hObject=0x21c) returned 1 [0258.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0258.603] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00441_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00441_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdc4)) returned 1 [0258.603] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0258.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0258.604] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00441_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00441_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdc4)) returned 1 [0258.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0258.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0258.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0258.604] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9b8, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="BS00442_.WMF", cAlternateFileName="")) returned 1 [0258.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0258.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0258.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0258.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0258.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0258.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0258.605] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00442_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00442_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0258.606] GetFileType (hFile=0x21c) returned 0x1 [0258.606] CloseHandle (hObject=0x21c) returned 1 [0258.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0258.607] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00442_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00442_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9b8)) returned 1 [0258.607] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0258.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0258.607] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00442_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00442_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9b8)) returned 1 [0258.607] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0258.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0258.607] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0258.608] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x68c, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="BS00443_.WMF", cAlternateFileName="")) returned 1 [0258.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0258.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0258.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0258.608] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0258.608] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0258.608] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0258.609] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00443_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00443_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0258.609] GetFileType (hFile=0x21c) returned 0x1 [0258.609] CloseHandle (hObject=0x21c) returned 1 [0258.610] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0258.610] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00443_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00443_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x68c)) returned 1 [0258.610] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0258.610] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0258.610] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00443_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00443_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x68c)) returned 1 [0258.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0258.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0258.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0258.611] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf38, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="BS00444_.WMF", cAlternateFileName="")) returned 1 [0258.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0258.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0258.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0258.612] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0258.612] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0258.612] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0258.613] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00444_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00444_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0258.613] GetFileType (hFile=0x21c) returned 0x1 [0258.613] CloseHandle (hObject=0x21c) returned 1 [0258.614] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0258.614] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00444_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00444_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf38)) returned 1 [0258.614] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0258.614] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0258.615] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00444_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00444_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf38)) returned 1 [0258.615] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0258.615] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0258.615] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0258.615] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xed4, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="BS00445_.WMF", cAlternateFileName="")) returned 1 [0258.615] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0258.615] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0258.615] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0258.616] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0258.616] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0258.616] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0258.616] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00445_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00445_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0258.617] GetFileType (hFile=0x21c) returned 0x1 [0258.617] CloseHandle (hObject=0x21c) returned 1 [0258.618] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0258.618] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00445_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00445_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xed4)) returned 1 [0258.618] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0258.618] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0258.618] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00445_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00445_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xed4)) returned 1 [0258.618] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0258.618] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0258.618] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0258.619] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x984, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="BS00453_.WMF", cAlternateFileName="")) returned 1 [0258.619] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0258.619] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0258.619] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0258.619] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0258.619] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0258.619] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0258.620] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00453_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00453_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0258.620] GetFileType (hFile=0x21c) returned 0x1 [0258.620] CloseHandle (hObject=0x21c) returned 1 [0258.621] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0258.621] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00453_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00453_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x984)) returned 1 [0258.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0258.621] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0258.621] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00453_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00453_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x984)) returned 1 [0258.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0258.621] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0258.622] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0258.622] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaac, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="BS01080_.WMF", cAlternateFileName="")) returned 1 [0258.622] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0258.622] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0258.622] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0258.622] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0258.622] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0258.622] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0258.623] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01080_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01080_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0258.623] GetFileType (hFile=0x21c) returned 0x1 [0258.623] CloseHandle (hObject=0x21c) returned 1 [0258.624] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0258.624] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01080_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01080_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaac)) returned 1 [0258.624] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0258.624] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0258.624] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01080_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01080_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaac)) returned 1 [0258.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0258.625] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0258.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0258.625] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c08, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="BS01603_.WMF", cAlternateFileName="")) returned 1 [0258.625] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0258.625] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0258.625] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0258.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0258.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0258.626] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0258.626] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01603_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01603_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0258.626] GetFileType (hFile=0x21c) returned 0x1 [0258.628] CloseHandle (hObject=0x21c) returned 1 [0258.628] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0258.629] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01603_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01603_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c08)) returned 1 [0258.629] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0258.629] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0258.629] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01603_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01603_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c08)) returned 1 [0258.629] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0258.629] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0258.630] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0258.630] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xda6, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="BS01634_.WMF", cAlternateFileName="")) returned 1 [0258.630] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0258.630] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0258.630] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0258.630] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0258.630] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0258.630] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0258.631] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01634_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01634_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0258.632] GetFileType (hFile=0x21c) returned 0x1 [0258.632] CloseHandle (hObject=0x21c) returned 1 [0258.633] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0258.633] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01634_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01634_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xda6)) returned 1 [0258.633] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0258.633] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0258.633] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01634_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01634_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xda6)) returned 1 [0258.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0258.634] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0258.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0258.634] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a94, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="BS01635_.WMF", cAlternateFileName="")) returned 1 [0258.634] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0258.634] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0258.634] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0258.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0258.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0258.635] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0258.635] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01635_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01635_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0258.635] GetFileType (hFile=0x21c) returned 0x1 [0258.636] CloseHandle (hObject=0x21c) returned 1 [0258.636] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0258.636] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01635_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01635_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a94)) returned 1 [0258.636] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0258.636] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0258.637] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01635_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01635_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a94)) returned 1 [0258.637] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0258.637] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0258.637] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0258.637] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x752, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="BS01636_.WMF", cAlternateFileName="")) returned 1 [0258.637] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0258.637] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0258.637] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0258.637] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0258.637] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0258.637] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0258.638] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01636_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01636_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0258.638] GetFileType (hFile=0x21c) returned 0x1 [0258.638] CloseHandle (hObject=0x21c) returned 1 [0258.639] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0258.639] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01636_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01636_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x752)) returned 1 [0258.639] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0258.639] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0258.640] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01636_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01636_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x752)) returned 1 [0258.640] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0258.640] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0258.640] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0258.641] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf6c, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="BS01637_.WMF", cAlternateFileName="")) returned 1 [0258.641] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0258.641] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0258.641] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0258.641] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0258.641] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0258.641] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0258.642] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01637_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01637_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0258.643] GetFileType (hFile=0x21c) returned 0x1 [0258.643] CloseHandle (hObject=0x21c) returned 1 [0258.972] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0258.972] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01637_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01637_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf6c)) returned 1 [0258.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0258.972] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0258.972] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01637_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01637_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf6c)) returned 1 [0258.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0258.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0258.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0258.973] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x292a, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="BS01638_.WMF", cAlternateFileName="")) returned 1 [0258.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0258.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0258.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0258.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0258.974] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0258.974] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0258.974] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01638_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01638_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0258.975] GetFileType (hFile=0x21c) returned 0x1 [0258.976] CloseHandle (hObject=0x21c) returned 1 [0258.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0258.977] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01638_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01638_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x292a)) returned 1 [0258.977] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0258.977] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0258.977] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01638_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01638_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x292a)) returned 1 [0258.977] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0258.977] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0258.977] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0258.978] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd744774, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x108c, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="BS01639_.WMF", cAlternateFileName="")) returned 1 [0258.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0258.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0258.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0258.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0258.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0258.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0258.979] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01639_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01639_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0258.980] GetFileType (hFile=0x21c) returned 0x1 [0258.980] CloseHandle (hObject=0x21c) returned 1 [0258.981] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0258.981] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01639_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01639_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd744774, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x108c)) returned 1 [0258.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0258.981] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0258.981] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01639_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01639_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd744774, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x108c)) returned 1 [0258.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0258.982] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0258.982] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0258.982] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x246a, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="CARBN_01.MID", cAlternateFileName="")) returned 1 [0258.982] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0258.982] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0258.982] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0258.982] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0258.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0258.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0258.983] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CARBN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\carbn_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0258.984] GetFileType (hFile=0x21c) returned 0x1 [0258.984] CloseHandle (hObject=0x21c) returned 1 [0258.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0258.985] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CARBN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\carbn_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x246a)) returned 1 [0258.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0258.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0258.985] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CARBN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\carbn_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x246a)) returned 1 [0258.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0258.986] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0258.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0258.986] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd744774, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdec, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="CG1606.WMF", cAlternateFileName="")) returned 1 [0258.986] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0258.988] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0258.988] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0258.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0258.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0258.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0258.988] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CG1606.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cg1606.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0258.989] GetFileType (hFile=0x21c) returned 0x1 [0258.989] CloseHandle (hObject=0x21c) returned 1 [0258.990] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0258.990] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CG1606.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cg1606.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd744774, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdec)) returned 1 [0258.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0258.990] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0258.990] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CG1606.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cg1606.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd744774, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdec)) returned 1 [0258.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0258.990] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0258.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0258.990] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x976, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="CLASSIC1.WMF", cAlternateFileName="")) returned 1 [0258.991] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0258.991] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0258.991] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0258.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0258.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0258.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0258.991] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC1.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\classic1.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0258.992] GetFileType (hFile=0x21c) returned 0x1 [0258.992] CloseHandle (hObject=0x21c) returned 1 [0258.992] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0258.992] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC1.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\classic1.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x976)) returned 1 [0258.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0258.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0258.993] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC1.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\classic1.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x976)) returned 1 [0258.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0258.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0258.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0258.993] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8d6, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="CLASSIC2.WMF", cAlternateFileName="")) returned 1 [0258.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0258.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0258.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0258.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0258.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0258.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0258.994] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC2.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\classic2.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0258.994] GetFileType (hFile=0x21c) returned 0x1 [0258.995] CloseHandle (hObject=0x21c) returned 1 [0258.995] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0258.995] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC2.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\classic2.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8d6)) returned 1 [0258.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0258.995] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0258.995] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC2.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\classic2.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8d6)) returned 1 [0258.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0258.995] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0258.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0258.996] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8d6, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="CLIP.WMF", cAlternateFileName="")) returned 1 [0258.996] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0258.996] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0258.996] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0258.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0258.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0258.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0258.997] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLIP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\clip.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0258.997] GetFileType (hFile=0x21c) returned 0x1 [0258.997] CloseHandle (hObject=0x21c) returned 1 [0258.997] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0258.998] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLIP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\clip.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8d6)) returned 1 [0258.998] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0258.998] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0258.998] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLIP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\clip.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8d6)) returned 1 [0258.998] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0258.998] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0258.998] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0258.998] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b3a, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="CMNTY_01.MID", cAlternateFileName="")) returned 1 [0258.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0258.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0258.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0258.999] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0258.999] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0258.999] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0258.999] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CMNTY_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cmnty_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0259.000] GetFileType (hFile=0x21c) returned 0x1 [0259.000] CloseHandle (hObject=0x21c) returned 1 [0259.000] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0259.000] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CMNTY_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cmnty_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b3a)) returned 1 [0259.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0259.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0259.001] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CMNTY_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cmnty_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b3a)) returned 1 [0259.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0259.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0259.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0259.001] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1496, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="CRANE.WMF", cAlternateFileName="")) returned 1 [0259.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0259.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0259.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0259.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0259.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0259.002] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0259.033] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANE.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\crane.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0259.034] GetFileType (hFile=0x21c) returned 0x1 [0259.034] CloseHandle (hObject=0x21c) returned 1 [0259.035] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0259.035] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANE.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\crane.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1496)) returned 1 [0259.035] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0259.035] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0259.036] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANE.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\crane.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1496)) returned 1 [0259.036] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0259.036] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0259.036] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0259.036] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc18a, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="CRANINST.WMF", cAlternateFileName="")) returned 1 [0259.036] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0259.036] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0259.037] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0259.037] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0259.037] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0259.037] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0259.037] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\craninst.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0259.038] GetFileType (hFile=0x21c) returned 0x1 [0259.038] CloseHandle (hObject=0x21c) returned 1 [0259.039] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0259.039] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\craninst.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc18a)) returned 1 [0259.039] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0259.039] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0259.039] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\craninst.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc18a)) returned 1 [0259.039] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0259.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0259.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0259.040] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb96, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="CUP.WMF", cAlternateFileName="")) returned 1 [0259.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0259.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0259.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0259.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0259.041] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cup.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0259.041] GetFileType (hFile=0x21c) returned 0x1 [0259.042] CloseHandle (hObject=0x21c) returned 1 [0259.042] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0259.042] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cup.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb96)) returned 1 [0259.042] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0259.043] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0259.043] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cup.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb96)) returned 1 [0259.043] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0259.043] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0259.043] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0259.043] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2856, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="CUPINST.WMF", cAlternateFileName="")) returned 1 [0259.043] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0259.044] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0259.044] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0259.044] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0259.044] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0259.044] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0259.045] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUPINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cupinst.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0259.045] GetFileType (hFile=0x21c) returned 0x1 [0259.046] CloseHandle (hObject=0x21c) returned 1 [0259.046] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0259.047] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUPINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cupinst.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2856)) returned 1 [0259.047] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0259.047] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0259.047] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUPINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cupinst.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2856)) returned 1 [0259.047] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0259.047] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0259.047] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0259.047] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7992, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="DD00117_.WMF", cAlternateFileName="")) returned 1 [0259.047] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0259.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0259.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0259.048] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0259.048] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0259.048] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0259.049] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00117_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00117_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0259.049] GetFileType (hFile=0x21c) returned 0x1 [0259.050] CloseHandle (hObject=0x21c) returned 1 [0259.050] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0259.050] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00117_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00117_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7992)) returned 1 [0259.051] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0259.051] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0259.051] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00117_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00117_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7992)) returned 1 [0259.051] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0259.051] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0259.051] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0259.051] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2040, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="DD00121_.WMF", cAlternateFileName="")) returned 1 [0259.051] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0259.051] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0259.489] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0259.489] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0259.489] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0259.489] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0259.670] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00121_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00121_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0259.671] GetFileType (hFile=0x21c) returned 0x1 [0259.671] CloseHandle (hObject=0x21c) returned 1 [0259.671] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0259.671] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00121_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00121_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2040)) returned 1 [0259.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0259.672] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0259.672] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00121_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00121_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2040)) returned 1 [0259.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0259.672] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0259.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0259.672] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x73bc, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="DD00234_.WMF", cAlternateFileName="")) returned 1 [0259.673] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0259.673] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0259.673] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0259.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0259.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0259.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0259.674] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00234_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00234_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0259.674] GetFileType (hFile=0x21c) returned 0x1 [0259.675] CloseHandle (hObject=0x21c) returned 1 [0259.676] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0259.676] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00234_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00234_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x73bc)) returned 1 [0259.676] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0259.676] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0259.676] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00234_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00234_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x73bc)) returned 1 [0259.676] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0259.676] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0259.677] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0259.677] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa82, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="DD00255_.WMF", cAlternateFileName="")) returned 1 [0259.677] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0259.677] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0259.677] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0259.677] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0259.677] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0259.677] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0259.678] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00255_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00255_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0259.679] GetFileType (hFile=0x21c) returned 0x1 [0259.679] CloseHandle (hObject=0x21c) returned 1 [0259.680] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0259.680] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00255_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00255_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa82)) returned 1 [0259.680] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0259.680] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0259.680] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00255_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00255_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa82)) returned 1 [0259.681] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0259.681] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0259.681] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0259.681] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd744774, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb10, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="DD00256_.WMF", cAlternateFileName="")) returned 1 [0259.681] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0259.681] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0259.681] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0259.681] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0259.682] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0259.682] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0259.682] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00256_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00256_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0259.683] GetFileType (hFile=0x21c) returned 0x1 [0259.684] CloseHandle (hObject=0x21c) returned 1 [0259.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0259.684] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00256_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00256_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd744774, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb10)) returned 1 [0259.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0259.685] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0259.685] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00256_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00256_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd744774, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb10)) returned 1 [0259.685] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0259.685] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0259.685] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0259.685] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9456, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="DD00261_.WMF", cAlternateFileName="")) returned 1 [0259.685] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0259.685] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0259.686] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0259.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0259.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0259.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0259.687] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00261_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00261_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0259.687] GetFileType (hFile=0x21c) returned 0x1 [0259.688] CloseHandle (hObject=0x21c) returned 1 [0259.690] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0259.691] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00261_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00261_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9456)) returned 1 [0259.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0259.691] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0259.691] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00261_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00261_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9456)) returned 1 [0259.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0259.691] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0259.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0259.692] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9c5e, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="DD00297_.WMF", cAlternateFileName="")) returned 1 [0259.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0259.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0259.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0259.692] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0259.692] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0259.692] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0259.693] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00297_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00297_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0259.693] GetFileType (hFile=0x21c) returned 0x1 [0259.694] CloseHandle (hObject=0x21c) returned 1 [0259.694] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0259.694] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00297_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00297_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9c5e)) returned 1 [0259.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0259.695] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0259.695] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00297_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00297_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9c5e)) returned 1 [0259.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0259.695] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0259.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0259.695] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x318, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="DD00372_.WMF", cAlternateFileName="")) returned 1 [0259.695] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0259.695] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0259.696] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0259.696] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0259.696] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0259.696] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0259.696] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00372_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00372_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0259.697] GetFileType (hFile=0x21c) returned 0x1 [0259.697] CloseHandle (hObject=0x21c) returned 1 [0259.697] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0259.698] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00372_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00372_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x318)) returned 1 [0259.698] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0259.698] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0259.698] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00372_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00372_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x318)) returned 1 [0259.698] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0259.698] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0259.698] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0259.699] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x44b0, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="DD00405_.WMF", cAlternateFileName="")) returned 1 [0259.699] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0259.699] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0259.699] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0259.699] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0259.699] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0259.699] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0259.700] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00405_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00405_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0259.700] GetFileType (hFile=0x21c) returned 0x1 [0259.701] CloseHandle (hObject=0x21c) returned 1 [0259.701] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0259.701] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00405_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00405_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x44b0)) returned 1 [0259.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0259.701] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0259.702] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00405_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00405_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x44b0)) returned 1 [0259.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0259.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0259.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0259.702] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e94, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="DD00407_.WMF", cAlternateFileName="")) returned 1 [0259.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0259.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0259.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0259.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0259.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0259.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0259.703] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00407_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00407_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0259.703] GetFileType (hFile=0x21c) returned 0x1 [0259.704] CloseHandle (hObject=0x21c) returned 1 [0259.704] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0259.704] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00407_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00407_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e94)) returned 1 [0259.705] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0259.705] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0259.705] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00407_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00407_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e94)) returned 1 [0259.705] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0259.705] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0259.705] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0259.974] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa7f0, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="DD00413_.WMF", cAlternateFileName="")) returned 1 [0259.974] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0259.974] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0259.975] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0259.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0259.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0259.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0259.998] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00413_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00413_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0259.998] GetFileType (hFile=0x1c0) returned 0x1 [0259.999] CloseHandle (hObject=0x1c0) returned 1 [0259.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0260.000] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00413_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00413_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa7f0)) returned 1 [0260.000] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0260.000] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0260.000] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00413_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00413_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa7f0)) returned 1 [0260.000] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0260.000] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0260.000] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0260.001] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa79c, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="DD00414_.WMF", cAlternateFileName="")) returned 1 [0260.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0260.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0260.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0260.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0260.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0260.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0260.002] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00414_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00414_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0260.003] GetFileType (hFile=0x1c0) returned 0x1 [0260.003] CloseHandle (hObject=0x1c0) returned 1 [0260.004] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0260.004] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00414_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00414_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa79c)) returned 1 [0260.004] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0260.004] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0260.004] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00414_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00414_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa79c)) returned 1 [0260.004] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0260.005] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0260.005] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0260.005] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c8, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="DD00419_.WMF", cAlternateFileName="")) returned 1 [0260.005] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0260.005] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0260.005] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0260.005] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0260.005] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0260.006] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0260.006] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00419_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00419_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0260.007] GetFileType (hFile=0x1c0) returned 0x1 [0260.007] CloseHandle (hObject=0x1c0) returned 1 [0260.007] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0260.008] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00419_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00419_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c8)) returned 1 [0260.008] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0260.008] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0260.008] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00419_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00419_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c8)) returned 1 [0260.008] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0260.008] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0260.008] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0260.009] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x78c, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="DD00437_.WMF", cAlternateFileName="")) returned 1 [0260.009] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0260.009] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0260.009] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0260.009] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0260.009] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0260.009] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0260.010] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00437_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00437_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0260.011] GetFileType (hFile=0x1c0) returned 0x1 [0260.011] CloseHandle (hObject=0x1c0) returned 1 [0260.012] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0260.015] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00437_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00437_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x78c)) returned 1 [0260.015] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0260.015] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0260.016] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00437_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00437_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x78c)) returned 1 [0260.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0260.016] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0260.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0260.016] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb88, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="DD00448_.WMF", cAlternateFileName="")) returned 1 [0260.016] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0260.017] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0260.017] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0260.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0260.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0260.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0260.019] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00448_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00448_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0260.019] GetFileType (hFile=0x1c0) returned 0x1 [0260.020] CloseHandle (hObject=0x1c0) returned 1 [0260.020] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0260.021] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00448_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00448_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb88)) returned 1 [0260.021] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0260.021] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0260.021] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00448_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00448_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb88)) returned 1 [0260.021] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0260.021] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0260.022] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0260.022] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2708, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="DD00449_.WMF", cAlternateFileName="")) returned 1 [0260.022] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0260.022] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0260.022] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0260.022] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0260.022] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0260.023] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0260.023] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00449_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00449_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0260.024] GetFileType (hFile=0x1c0) returned 0x1 [0260.024] CloseHandle (hObject=0x1c0) returned 1 [0260.025] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0260.025] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00449_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00449_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2708)) returned 1 [0260.025] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0260.025] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0260.025] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00449_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00449_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2708)) returned 1 [0260.025] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0260.026] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0260.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0260.026] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5130, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="DD00687_.WMF", cAlternateFileName="")) returned 1 [0260.026] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0260.026] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0260.026] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0260.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0260.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0260.027] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0260.027] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00687_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00687_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0260.028] GetFileType (hFile=0x1c0) returned 0x1 [0260.028] CloseHandle (hObject=0x1c0) returned 1 [0260.029] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0260.029] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00687_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00687_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5130)) returned 1 [0260.029] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0260.029] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0260.029] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00687_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00687_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5130)) returned 1 [0260.029] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0260.029] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0260.030] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0260.030] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x600c, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="DD00705_.WMF", cAlternateFileName="")) returned 1 [0260.030] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0260.030] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0260.030] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0260.030] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0260.030] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0260.030] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0260.031] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00705_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00705_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0260.031] GetFileType (hFile=0x1c0) returned 0x1 [0260.032] CloseHandle (hObject=0x1c0) returned 1 [0260.032] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0260.032] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00705_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00705_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x600c)) returned 1 [0260.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0260.033] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0260.033] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00705_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00705_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x600c)) returned 1 [0260.033] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0260.033] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0260.033] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0260.033] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b2, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="DD01015_.WMF", cAlternateFileName="")) returned 1 [0260.034] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0260.034] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0260.034] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0260.034] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0260.034] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0260.034] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0260.445] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01015_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0260.446] GetFileType (hFile=0x198) returned 0x1 [0260.446] CloseHandle (hObject=0x198) returned 1 [0260.447] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0260.447] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01015_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b2)) returned 1 [0260.447] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0260.447] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0260.447] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01015_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b2)) returned 1 [0260.448] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0260.448] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0260.448] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0260.448] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x39e4, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="DD01039_.WMF", cAlternateFileName="")) returned 1 [0260.448] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0260.448] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0260.448] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0260.449] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0260.449] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0260.449] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0260.450] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01039_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01039_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0260.450] GetFileType (hFile=0x198) returned 0x1 [0260.451] CloseHandle (hObject=0x198) returned 1 [0260.451] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0260.452] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01039_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01039_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x39e4)) returned 1 [0260.452] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0260.452] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0260.452] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01039_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01039_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x39e4)) returned 1 [0260.452] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0260.452] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0260.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0260.453] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb709c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe6c, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="DD01138_.WMF", cAlternateFileName="")) returned 1 [0260.453] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0260.453] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0260.453] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0260.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0260.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0260.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0260.454] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01138_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01138_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0260.455] GetFileType (hFile=0x198) returned 0x1 [0260.456] CloseHandle (hObject=0x198) returned 1 [0260.456] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0260.456] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01138_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01138_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb709c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe6c)) returned 1 [0260.457] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0260.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0260.457] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01138_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01138_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb709c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe6c)) returned 1 [0260.457] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0260.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0260.457] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0260.457] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe30, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="DD01139_.WMF", cAlternateFileName="")) returned 1 [0260.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0260.458] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0260.458] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0260.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0260.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0260.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0260.460] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01139_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01139_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0260.460] GetFileType (hFile=0x198) returned 0x1 [0260.461] CloseHandle (hObject=0x198) returned 1 [0260.461] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0260.461] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01139_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01139_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe30)) returned 1 [0260.462] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0260.462] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0260.462] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01139_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01139_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe30)) returned 1 [0260.462] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0260.462] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0260.462] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0260.462] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb709c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe20, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="DD01140_.WMF", cAlternateFileName="")) returned 1 [0260.463] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0260.463] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0260.463] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0260.463] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0260.463] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0260.463] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0260.464] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01140_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01140_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0260.464] GetFileType (hFile=0x198) returned 0x1 [0260.465] CloseHandle (hObject=0x198) returned 1 [0260.465] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0260.465] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01140_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01140_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb709c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe20)) returned 1 [0260.465] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0260.465] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0260.466] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01140_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01140_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb709c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe20)) returned 1 [0260.466] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0260.466] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0260.466] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0260.466] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb709c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x85c, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="DD01143_.WMF", cAlternateFileName="")) returned 1 [0260.466] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0260.466] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0260.466] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0260.467] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0260.467] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0260.467] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0260.467] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01143_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01143_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0260.468] GetFileType (hFile=0x198) returned 0x1 [0260.468] CloseHandle (hObject=0x198) returned 1 [0260.469] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0260.469] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01143_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01143_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb709c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x85c)) returned 1 [0260.469] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0260.469] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0260.469] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01143_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01143_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb709c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x85c)) returned 1 [0260.469] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0260.469] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0260.470] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0260.472] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xadc, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="DD01145_.WMF", cAlternateFileName="")) returned 1 [0260.472] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0260.472] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0260.472] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0260.472] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0260.472] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0260.473] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0260.473] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01145_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01145_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0260.474] GetFileType (hFile=0x198) returned 0x1 [0260.474] CloseHandle (hObject=0x198) returned 1 [0260.474] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0260.474] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01145_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01145_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xadc)) returned 1 [0260.475] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0260.475] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0260.475] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01145_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01145_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xadc)) returned 1 [0260.475] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0260.475] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0260.475] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0260.475] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb709c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaec, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="DD01146_.WMF", cAlternateFileName="")) returned 1 [0260.475] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0260.476] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0260.476] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0260.476] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0260.476] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0260.476] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0260.477] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01146_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01146_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0260.477] GetFileType (hFile=0x198) returned 0x1 [0260.477] CloseHandle (hObject=0x198) returned 1 [0260.478] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0260.478] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01146_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01146_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb709c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaec)) returned 1 [0260.478] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0260.478] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0260.478] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01146_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01146_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb709c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaec)) returned 1 [0260.479] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0260.479] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0260.479] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0260.479] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb90, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="DD01151_.WMF", cAlternateFileName="")) returned 1 [0260.479] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0260.479] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0260.479] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0260.479] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0260.479] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0260.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0260.480] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01151_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01151_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0260.481] GetFileType (hFile=0x198) returned 0x1 [0260.481] CloseHandle (hObject=0x198) returned 1 [0260.481] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0260.482] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01151_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01151_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb90)) returned 1 [0260.482] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0260.482] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0260.482] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01151_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01151_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb90)) returned 1 [0260.482] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0260.482] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0260.482] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0260.482] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb90, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="DD01152_.WMF", cAlternateFileName="")) returned 1 [0260.483] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0260.483] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0260.483] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0260.483] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0260.483] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0260.483] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0260.484] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01152_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01152_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0260.484] GetFileType (hFile=0x198) returned 0x1 [0260.485] CloseHandle (hObject=0x198) returned 1 [0260.485] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0260.485] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01152_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01152_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb90)) returned 1 [0260.485] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0260.485] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0260.486] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01152_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01152_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb90)) returned 1 [0260.486] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0260.486] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0260.486] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0260.486] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe04, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="DD01157_.WMF", cAlternateFileName="")) returned 1 [0260.486] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0260.486] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0260.486] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0260.486] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0260.835] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0260.835] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0260.836] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01157_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01157_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0260.837] GetFileType (hFile=0x174) returned 0x1 [0260.837] CloseHandle (hObject=0x174) returned 1 [0260.838] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0260.838] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01157_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01157_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe04)) returned 1 [0260.839] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0260.839] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0260.839] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01157_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01157_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe04)) returned 1 [0260.839] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0260.839] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0260.839] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0260.839] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b4, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="DD01160_.WMF", cAlternateFileName="")) returned 1 [0260.840] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0260.840] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0260.840] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0260.840] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0260.840] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0260.840] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0260.841] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01160_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01160_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0260.841] GetFileType (hFile=0x174) returned 0x1 [0260.842] CloseHandle (hObject=0x174) returned 1 [0260.843] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0260.843] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01160_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01160_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b4)) returned 1 [0260.843] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0260.843] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0260.843] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01160_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01160_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b4)) returned 1 [0260.844] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0260.844] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0260.844] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0260.844] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8fc, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="DD01162_.WMF", cAlternateFileName="")) returned 1 [0260.844] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0260.844] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0260.845] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0260.845] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0260.845] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0260.845] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0260.846] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01162_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01162_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0260.847] GetFileType (hFile=0x174) returned 0x1 [0260.847] CloseHandle (hObject=0x174) returned 1 [0260.848] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0260.848] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01162_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01162_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8fc)) returned 1 [0260.848] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0260.848] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0260.848] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01162_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01162_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8fc)) returned 1 [0260.849] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0260.849] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0260.849] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0260.849] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8fc, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="DD01163_.WMF", cAlternateFileName="")) returned 1 [0260.849] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0260.849] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0260.849] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0260.850] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0260.850] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0260.850] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0260.851] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01163_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01163_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0260.851] GetFileType (hFile=0x174) returned 0x1 [0260.851] CloseHandle (hObject=0x174) returned 1 [0260.852] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0260.852] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01163_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01163_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8fc)) returned 1 [0260.852] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0260.853] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0260.853] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01163_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01163_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8fc)) returned 1 [0260.853] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0260.853] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0260.853] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0260.853] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x820, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="DD01166_.WMF", cAlternateFileName="")) returned 1 [0260.853] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0260.854] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0260.854] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0260.854] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0260.854] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0260.854] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0260.855] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01166_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01166_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0260.855] GetFileType (hFile=0x174) returned 0x1 [0260.856] CloseHandle (hObject=0x174) returned 1 [0260.857] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0260.857] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01166_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01166_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x820)) returned 1 [0260.857] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0260.857] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0260.857] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01166_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01166_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x820)) returned 1 [0260.858] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0260.858] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0260.858] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0260.858] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x820, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="DD01167_.WMF", cAlternateFileName="")) returned 1 [0260.858] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0260.858] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0260.858] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0260.859] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0260.859] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0260.859] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0260.860] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01167_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01167_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0260.860] GetFileType (hFile=0x174) returned 0x1 [0260.861] CloseHandle (hObject=0x174) returned 1 [0260.862] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0260.862] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01167_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01167_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x820)) returned 1 [0260.862] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0260.863] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0260.863] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01167_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01167_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x820)) returned 1 [0260.863] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0260.863] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0260.863] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0260.863] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7d4, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="DD01168_.WMF", cAlternateFileName="")) returned 1 [0260.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0260.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0260.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0260.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0260.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0260.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0260.865] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01168_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01168_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0260.865] GetFileType (hFile=0x174) returned 0x1 [0260.866] CloseHandle (hObject=0x174) returned 1 [0260.866] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0260.867] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01168_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01168_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7d4)) returned 1 [0260.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0260.867] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0260.867] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01168_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01168_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7d4)) returned 1 [0260.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0260.867] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0260.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0260.868] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e4, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="DD01169_.WMF", cAlternateFileName="")) returned 1 [0260.868] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0260.868] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0260.868] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0260.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0260.869] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0260.869] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0260.870] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01169_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01169_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0260.870] GetFileType (hFile=0x174) returned 0x1 [0260.871] CloseHandle (hObject=0x174) returned 1 [0260.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0260.871] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01169_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01169_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e4)) returned 1 [0260.872] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0260.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0260.872] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01169_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01169_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e4)) returned 1 [0260.872] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0260.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0260.872] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0260.873] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x964, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="DD01170_.WMF", cAlternateFileName="")) returned 1 [0260.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0260.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0260.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0260.873] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0260.873] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0260.873] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0260.874] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01170_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01170_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0260.875] GetFileType (hFile=0x174) returned 0x1 [0260.875] CloseHandle (hObject=0x174) returned 1 [0260.876] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0260.876] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01170_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01170_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x964)) returned 1 [0260.876] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0260.876] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0260.876] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01170_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01170_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x964)) returned 1 [0260.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0260.877] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0260.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0260.877] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x804, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="DD01171_.WMF", cAlternateFileName="")) returned 1 [0261.223] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0261.223] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0261.223] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0261.223] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0261.223] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0261.223] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0261.317] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01171_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01171_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0261.317] GetFileType (hFile=0x1ac) returned 0x1 [0261.318] CloseHandle (hObject=0x1ac) returned 1 [0261.318] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0261.318] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01171_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01171_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x804)) returned 1 [0261.318] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0261.318] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0261.319] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01171_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01171_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x804)) returned 1 [0261.319] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0261.319] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0261.319] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0261.319] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b8, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="DD01172_.WMF", cAlternateFileName="")) returned 1 [0261.319] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0261.319] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0261.319] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0261.319] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0261.319] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0261.320] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0261.320] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01172_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0261.320] GetFileType (hFile=0x1ac) returned 0x1 [0261.321] CloseHandle (hObject=0x1ac) returned 1 [0261.321] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0261.321] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01172_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b8)) returned 1 [0261.321] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0261.321] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0261.321] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01172_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b8)) returned 1 [0261.322] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0261.322] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0261.322] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0261.322] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x70c, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="DD01173_.WMF", cAlternateFileName="")) returned 1 [0261.322] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0261.322] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0261.322] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0261.322] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0261.322] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0261.322] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0261.323] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01173_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0261.325] GetFileType (hFile=0x1ac) returned 0x1 [0261.325] CloseHandle (hObject=0x1ac) returned 1 [0261.326] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0261.326] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01173_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x70c)) returned 1 [0261.326] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0261.326] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0261.326] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01173_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x70c)) returned 1 [0261.326] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0261.327] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0261.327] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0261.327] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x760, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="DD01176_.WMF", cAlternateFileName="")) returned 1 [0261.327] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0261.327] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0261.327] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0261.327] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0261.327] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0261.328] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0261.328] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01176_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01176_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0261.329] GetFileType (hFile=0x1ac) returned 0x1 [0261.329] CloseHandle (hObject=0x1ac) returned 1 [0261.329] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0261.329] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01176_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01176_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x760)) returned 1 [0261.330] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0261.330] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0261.330] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01176_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01176_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x760)) returned 1 [0261.330] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0261.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0261.350] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0261.350] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xed4, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="DD01178_.WMF", cAlternateFileName="")) returned 1 [0261.350] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0261.350] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0261.350] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0261.350] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0261.350] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0261.350] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0261.351] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01178_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01178_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0261.352] GetFileType (hFile=0x1ac) returned 0x1 [0261.352] CloseHandle (hObject=0x1ac) returned 1 [0261.352] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0261.353] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01178_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01178_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xed4)) returned 1 [0261.353] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0261.353] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0261.353] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01178_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01178_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xed4)) returned 1 [0261.353] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0261.353] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0261.353] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0261.353] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e8, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="DD01179_.WMF", cAlternateFileName="")) returned 1 [0261.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0261.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0261.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0261.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0261.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0261.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0261.355] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01179_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01179_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0261.355] GetFileType (hFile=0x1ac) returned 0x1 [0261.356] CloseHandle (hObject=0x1ac) returned 1 [0261.357] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0261.357] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01179_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01179_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e8)) returned 1 [0261.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0261.357] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0261.357] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01179_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01179_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e8)) returned 1 [0261.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0261.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0261.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0261.358] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x824, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="DD01180_.WMF", cAlternateFileName="")) returned 1 [0261.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0261.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0261.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0261.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0261.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0261.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0261.360] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01180_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01180_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0261.360] GetFileType (hFile=0x1ac) returned 0x1 [0261.361] CloseHandle (hObject=0x1ac) returned 1 [0261.361] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0261.361] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01180_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01180_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x824)) returned 1 [0261.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0261.362] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0261.362] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01180_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01180_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x824)) returned 1 [0261.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0261.362] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0261.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0261.362] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5a8, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="DD01181_.WMF", cAlternateFileName="")) returned 1 [0261.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0261.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0261.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0261.363] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0261.363] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0261.363] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0261.364] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01181_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01181_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0261.365] GetFileType (hFile=0x1ac) returned 0x1 [0261.365] CloseHandle (hObject=0x1ac) returned 1 [0261.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0261.366] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01181_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01181_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5a8)) returned 1 [0261.366] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0261.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0261.366] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01181_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01181_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5a8)) returned 1 [0261.367] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0261.367] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0261.367] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0261.367] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbb4, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="DD01182_.WMF", cAlternateFileName="")) returned 1 [0261.367] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0261.367] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0261.367] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0261.368] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0261.368] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0261.368] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0261.369] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01182_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01182_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0261.369] GetFileType (hFile=0x1ac) returned 0x1 [0261.370] CloseHandle (hObject=0x1ac) returned 1 [0261.370] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0261.370] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01182_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01182_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbb4)) returned 1 [0261.370] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0261.371] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0261.371] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01182_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01182_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbb4)) returned 1 [0261.371] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0261.371] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0261.371] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0261.371] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="DD01183_.WMF", cAlternateFileName="")) returned 1 [0261.371] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0261.372] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0261.372] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0261.372] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0261.372] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0261.372] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0261.373] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01183_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01183_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0261.374] GetFileType (hFile=0x1ac) returned 0x1 [0261.374] CloseHandle (hObject=0x1ac) returned 1 [0261.375] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0261.375] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01183_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01183_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8f8)) returned 1 [0261.375] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0261.375] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0261.375] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01183_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01183_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8f8)) returned 1 [0261.375] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0261.375] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0261.376] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0261.376] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2174, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="DD01186_.WMF", cAlternateFileName="")) returned 1 [0261.376] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0261.376] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0261.376] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0261.376] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0261.376] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0261.376] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0261.719] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01186_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01186_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0261.719] GetFileType (hFile=0x198) returned 0x1 [0261.720] CloseHandle (hObject=0x198) returned 1 [0261.720] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0261.720] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01186_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01186_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2174)) returned 1 [0261.721] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0261.721] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0261.722] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01186_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01186_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2174)) returned 1 [0261.722] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0261.722] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0261.722] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0261.722] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6e8, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="DD01366_.WMF", cAlternateFileName="")) returned 1 [0261.722] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0261.722] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0261.723] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0261.723] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0261.723] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0261.723] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0261.724] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01366_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01366_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0261.724] GetFileType (hFile=0x198) returned 0x1 [0261.725] CloseHandle (hObject=0x198) returned 1 [0261.725] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0261.725] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01366_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01366_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6e8)) returned 1 [0261.726] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0261.726] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0261.726] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01366_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01366_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6e8)) returned 1 [0261.726] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0261.726] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0261.726] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0261.726] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="DD01434_.WMF", cAlternateFileName="")) returned 1 [0261.727] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0261.727] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0261.727] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0261.727] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0261.727] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0261.727] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0261.728] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01434_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01434_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0261.728] GetFileType (hFile=0x198) returned 0x1 [0261.729] CloseHandle (hObject=0x198) returned 1 [0261.729] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0261.730] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01434_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01434_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x384)) returned 1 [0261.730] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0261.730] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0261.730] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01434_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01434_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x384)) returned 1 [0261.730] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0261.730] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0261.731] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0261.731] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9dc, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="DD01585_.WMF", cAlternateFileName="")) returned 1 [0261.731] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0261.731] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0261.731] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0261.731] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0261.731] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0261.732] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0261.732] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01585_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01585_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0261.733] GetFileType (hFile=0x198) returned 0x1 [0261.770] CloseHandle (hObject=0x198) returned 1 [0261.771] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0261.771] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01585_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01585_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9dc)) returned 1 [0261.771] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0261.771] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0261.771] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01585_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01585_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9dc)) returned 1 [0261.771] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0261.771] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0261.772] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0261.772] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x914, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="DD01586_.WMF", cAlternateFileName="")) returned 1 [0261.772] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0261.772] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0261.772] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0261.772] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0261.772] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0261.772] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0261.773] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01586_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01586_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0261.773] GetFileType (hFile=0x198) returned 0x1 [0261.774] CloseHandle (hObject=0x198) returned 1 [0261.774] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0261.774] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01586_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01586_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x914)) returned 1 [0261.774] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0261.774] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0261.774] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01586_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01586_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x914)) returned 1 [0261.774] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0261.774] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0261.775] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0261.775] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4a7c, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="DD01628_.WMF", cAlternateFileName="")) returned 1 [0261.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0261.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0261.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0261.775] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0261.775] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0261.775] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0261.775] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01628_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01628_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0261.776] GetFileType (hFile=0x198) returned 0x1 [0261.776] CloseHandle (hObject=0x198) returned 1 [0261.776] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0261.776] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01628_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01628_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4a7c)) returned 1 [0261.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0261.777] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0261.777] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01628_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01628_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4a7c)) returned 1 [0261.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0261.777] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0261.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0261.777] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="DD01629_.WMF", cAlternateFileName="")) returned 1 [0261.777] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0261.777] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0261.777] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0261.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0261.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0261.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0261.778] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01629_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01629_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0261.778] GetFileType (hFile=0x198) returned 0x1 [0261.779] CloseHandle (hObject=0x198) returned 1 [0261.779] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0261.779] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01629_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01629_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x244)) returned 1 [0261.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0261.779] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0261.779] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01629_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01629_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x244)) returned 1 [0261.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0261.779] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0261.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0261.779] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x128, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="DD01630_.WMF", cAlternateFileName="")) returned 1 [0261.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0261.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0261.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0261.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0261.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0261.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0261.780] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01630_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01630_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0261.780] GetFileType (hFile=0x198) returned 0x1 [0261.781] CloseHandle (hObject=0x198) returned 1 [0261.781] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0261.781] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01630_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01630_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x128)) returned 1 [0261.781] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0261.781] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0261.781] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01630_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01630_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x128)) returned 1 [0261.781] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0261.781] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0261.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0261.782] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x228, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="DD01631_.WMF", cAlternateFileName="")) returned 1 [0261.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0261.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0261.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0261.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0261.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0261.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0261.783] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01631_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01631_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0261.783] GetFileType (hFile=0x198) returned 0x1 [0261.783] CloseHandle (hObject=0x198) returned 1 [0261.783] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0261.784] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01631_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01631_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x228)) returned 1 [0261.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0261.784] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0261.784] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01631_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01631_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x228)) returned 1 [0261.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0261.784] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0261.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0261.784] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1034, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="DD01761_.WMF", cAlternateFileName="")) returned 1 [0261.784] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0261.784] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0261.784] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0261.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0261.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0261.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0261.785] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01761_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01761_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0261.785] GetFileType (hFile=0x198) returned 0x1 [0261.785] CloseHandle (hObject=0x198) returned 1 [0261.786] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0261.786] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01761_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01761_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1034)) returned 1 [0261.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0261.786] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0261.786] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01761_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01761_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1034)) returned 1 [0261.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0261.786] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0261.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0261.786] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8fc, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="DD01772_.WMF", cAlternateFileName="")) returned 1 [0261.786] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0261.786] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0261.786] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0261.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0261.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0261.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0261.787] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01772_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01772_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0261.787] GetFileType (hFile=0x198) returned 0x1 [0261.787] CloseHandle (hObject=0x198) returned 1 [0261.787] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0261.787] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01772_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01772_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8fc)) returned 1 [0261.787] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0261.787] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0261.788] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01772_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01772_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8fc)) returned 1 [0261.788] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0261.788] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0261.788] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0261.788] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcb4, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="DD01793_.WMF", cAlternateFileName="")) returned 1 [0261.788] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0261.788] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0261.788] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0261.788] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0261.788] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0261.788] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0261.788] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01793_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01793_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0261.789] GetFileType (hFile=0x198) returned 0x1 [0261.789] CloseHandle (hObject=0x198) returned 1 [0261.789] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0261.789] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01793_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01793_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcb4)) returned 1 [0261.789] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0261.789] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0261.789] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01793_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01793_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcb4)) returned 1 [0261.789] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0261.789] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0261.789] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0261.789] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1815, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="EAST_01.MID", cAlternateFileName="")) returned 1 [0261.790] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0261.790] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0261.790] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0261.790] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0261.790] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0261.790] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0261.790] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EAST_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\east_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0261.791] GetFileType (hFile=0x198) returned 0x1 [0261.791] CloseHandle (hObject=0x198) returned 1 [0261.791] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0261.792] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EAST_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\east_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1815)) returned 1 [0261.792] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0261.792] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0261.792] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EAST_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\east_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1815)) returned 1 [0261.792] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0261.792] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0261.792] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0261.792] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x566, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="ED00010_.WMF", cAlternateFileName="")) returned 1 [0261.792] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0261.792] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0261.792] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0261.792] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0261.792] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0261.792] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0261.793] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00010_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00010_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0261.793] GetFileType (hFile=0x198) returned 0x1 [0261.794] CloseHandle (hObject=0x198) returned 1 [0261.794] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0261.794] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00010_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00010_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x566)) returned 1 [0261.794] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0261.794] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0261.794] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00010_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00010_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x566)) returned 1 [0261.795] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0261.795] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0261.795] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0261.795] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32f2, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="ED00019_.WMF", cAlternateFileName="")) returned 1 [0261.795] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0261.795] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0261.795] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0261.795] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0261.795] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0261.795] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0261.796] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00019_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00019_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0261.796] GetFileType (hFile=0x198) returned 0x1 [0261.796] CloseHandle (hObject=0x198) returned 1 [0261.797] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0261.797] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00019_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00019_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32f2)) returned 1 [0261.797] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0261.797] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0261.797] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00019_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00019_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32f2)) returned 1 [0261.797] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0261.797] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0261.797] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0261.797] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa8c, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="ED00172_.WMF", cAlternateFileName="")) returned 1 [0261.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0261.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0261.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0261.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0261.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0261.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0261.798] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00172_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0261.799] GetFileType (hFile=0x198) returned 0x1 [0262.156] CloseHandle (hObject=0x198) returned 1 [0262.156] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0262.156] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00172_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa8c)) returned 1 [0262.156] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0262.156] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0262.157] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00172_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa8c)) returned 1 [0262.157] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0262.157] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0262.157] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0262.157] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b2e, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="ED00184_.WMF", cAlternateFileName="")) returned 1 [0262.157] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0262.157] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0262.157] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0262.157] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0262.157] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0262.157] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0262.158] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00184_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0262.480] GetFileType (hFile=0x198) returned 0x1 [0262.480] CloseHandle (hObject=0x198) returned 1 [0262.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0262.480] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00184_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b2e)) returned 1 [0262.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0262.481] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0262.481] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00184_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b2e)) returned 1 [0262.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0262.481] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0262.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0262.481] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3670, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="EN00006_.WMF", cAlternateFileName="")) returned 1 [0262.481] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0262.481] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0262.481] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0262.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0262.482] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0262.482] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0262.482] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00006_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00006_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0262.519] GetFileType (hFile=0x174) returned 0x1 [0262.519] CloseHandle (hObject=0x174) returned 1 [0262.520] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0262.520] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00006_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00006_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3670)) returned 1 [0262.520] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0262.520] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0262.520] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00006_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00006_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3670)) returned 1 [0262.520] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0262.520] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0262.520] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0262.521] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b1a, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="EN00202_.WMF", cAlternateFileName="")) returned 1 [0262.521] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0262.521] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0262.521] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0262.521] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0262.521] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0262.521] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0262.522] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00202_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00202_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0262.522] GetFileType (hFile=0x174) returned 0x1 [0262.522] CloseHandle (hObject=0x174) returned 1 [0262.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0262.523] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00202_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00202_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b1a)) returned 1 [0262.523] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0262.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0262.523] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00202_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00202_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b1a)) returned 1 [0262.524] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0262.524] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0262.524] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0262.524] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3044, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="EN00222_.WMF", cAlternateFileName="")) returned 1 [0262.524] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0262.524] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0262.524] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0262.524] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0262.524] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0262.524] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0262.525] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00222_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00222_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0262.525] GetFileType (hFile=0x174) returned 0x1 [0262.526] CloseHandle (hObject=0x174) returned 1 [0262.526] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0262.526] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00222_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00222_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3044)) returned 1 [0262.527] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0262.527] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0262.527] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00222_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00222_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3044)) returned 1 [0262.527] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0262.527] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0262.527] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0262.527] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a7c, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="EN00242_.WMF", cAlternateFileName="")) returned 1 [0262.528] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0262.528] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0262.528] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0262.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0262.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0262.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0262.529] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00242_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00242_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0262.529] GetFileType (hFile=0x174) returned 0x1 [0262.529] CloseHandle (hObject=0x174) returned 1 [0262.530] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0262.530] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00242_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00242_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a7c)) returned 1 [0262.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0262.530] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0262.530] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00242_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00242_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a7c)) returned 1 [0262.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0262.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0262.531] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0262.531] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8e8, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="EN00319_.WMF", cAlternateFileName="")) returned 1 [0262.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0262.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0262.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0262.531] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0262.531] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0262.531] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0262.531] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00319_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00319_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0262.532] GetFileType (hFile=0x174) returned 0x1 [0262.532] CloseHandle (hObject=0x174) returned 1 [0262.532] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0262.533] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00319_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00319_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8e8)) returned 1 [0262.533] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0262.533] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0262.533] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00319_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00319_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8e8)) returned 1 [0262.533] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0262.533] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0262.533] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0262.533] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="EN00320_.WMF", cAlternateFileName="")) returned 1 [0262.533] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0262.534] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0262.534] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0262.534] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0262.534] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0262.534] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0262.534] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00320_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00320_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0262.535] GetFileType (hFile=0x174) returned 0x1 [0262.535] CloseHandle (hObject=0x174) returned 1 [0262.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0262.536] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00320_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00320_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e0)) returned 1 [0262.536] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0262.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0262.536] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00320_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00320_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e0)) returned 1 [0262.536] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0262.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0262.536] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0262.536] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x439c, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="EN00397_.WMF", cAlternateFileName="")) returned 1 [0262.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0262.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0262.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0262.537] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0262.537] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0262.537] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0262.537] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00397_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00397_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0262.537] GetFileType (hFile=0x174) returned 0x1 [0262.538] CloseHandle (hObject=0x174) returned 1 [0262.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0262.538] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00397_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00397_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x439c)) returned 1 [0262.538] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0262.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0262.538] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00397_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00397_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x439c)) returned 1 [0262.538] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0262.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0262.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0262.539] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f08, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="EN00902_.WMF", cAlternateFileName="")) returned 1 [0262.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0262.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0262.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0262.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0262.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0262.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0262.539] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00902_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00902_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0262.540] GetFileType (hFile=0x174) returned 0x1 [0262.540] CloseHandle (hObject=0x174) returned 1 [0262.540] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0262.540] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00902_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00902_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f08)) returned 1 [0262.540] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0262.541] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0262.541] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00902_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00902_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f08)) returned 1 [0262.541] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0262.541] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0262.541] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0262.541] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2942, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="EXPLR_01.MID", cAlternateFileName="")) returned 1 [0262.541] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0262.541] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0262.541] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0262.541] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0262.541] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0262.541] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0262.542] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EXPLR_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\explr_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0262.542] GetFileType (hFile=0x174) returned 0x1 [0262.542] CloseHandle (hObject=0x174) returned 1 [0262.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0262.543] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EXPLR_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\explr_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2942)) returned 1 [0262.543] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0262.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0262.543] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EXPLR_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\explr_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2942)) returned 1 [0262.543] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0262.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0262.544] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0262.544] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12ee, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="FALL_01.MID", cAlternateFileName="")) returned 1 [0262.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0262.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0262.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0262.544] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0262.544] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0262.544] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0262.544] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FALL_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fall_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0262.545] GetFileType (hFile=0x174) returned 0x1 [0262.545] CloseHandle (hObject=0x174) returned 1 [0262.545] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0262.545] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FALL_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fall_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12ee)) returned 1 [0262.546] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0262.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0262.546] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FALL_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fall_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12ee)) returned 1 [0262.546] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0262.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0262.546] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0262.546] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45ba, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="FD00074_.WMF", cAlternateFileName="")) returned 1 [0262.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0262.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0262.547] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0262.547] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0262.547] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0262.547] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0262.547] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00074_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00074_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0262.548] GetFileType (hFile=0x174) returned 0x1 [0262.548] CloseHandle (hObject=0x174) returned 1 [0262.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0262.549] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00074_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00074_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45ba)) returned 1 [0262.549] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0262.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0262.549] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00074_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00074_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45ba)) returned 1 [0262.549] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0262.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0262.549] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0262.549] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2eda, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="FD00076_.WMF", cAlternateFileName="")) returned 1 [0262.550] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0262.550] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0262.550] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0262.550] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0262.550] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0262.550] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0262.551] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00076_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00076_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0262.551] GetFileType (hFile=0x174) returned 0x1 [0262.552] CloseHandle (hObject=0x174) returned 1 [0262.552] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0262.552] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00076_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00076_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2eda)) returned 1 [0262.552] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0262.552] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0262.552] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00076_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00076_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2eda)) returned 1 [0262.553] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0262.553] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0262.553] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0262.553] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7620, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="FD00077_.WMF", cAlternateFileName="")) returned 1 [0262.553] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0262.553] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0262.553] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0262.553] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0262.554] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0262.554] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0263.089] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00077_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00077_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0263.395] GetFileType (hFile=0x1c0) returned 0x1 [0263.396] CloseHandle (hObject=0x1c0) returned 1 [0263.396] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0263.397] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00077_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00077_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7620)) returned 1 [0263.397] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0263.397] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0263.397] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00077_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00077_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7620)) returned 1 [0263.397] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0263.397] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0263.398] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0263.398] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x721c, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="FD00086_.WMF", cAlternateFileName="")) returned 1 [0263.398] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0263.398] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0263.398] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0263.398] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0263.399] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0263.399] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0263.400] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00086_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00086_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0263.703] GetFileType (hFile=0x1ac) returned 0x1 [0263.704] CloseHandle (hObject=0x1ac) returned 1 [0263.704] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0263.704] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00086_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00086_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x721c)) returned 1 [0263.705] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0263.705] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0263.705] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00086_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00086_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x721c)) returned 1 [0263.705] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0263.705] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0263.705] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0263.706] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3772, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="FD00090_.WMF", cAlternateFileName="")) returned 1 [0263.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0263.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0263.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0263.706] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0263.706] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0263.706] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0263.708] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00090_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00090_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0263.708] GetFileType (hFile=0x1ac) returned 0x1 [0263.709] CloseHandle (hObject=0x1ac) returned 1 [0263.709] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0263.709] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00090_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00090_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3772)) returned 1 [0263.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0263.710] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0263.710] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00090_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00090_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3772)) returned 1 [0263.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0263.710] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0263.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0263.711] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc55757, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc55757, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x920e, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="FD00096_.WMF", cAlternateFileName="")) returned 1 [0263.711] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0263.711] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0263.711] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0263.711] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0263.711] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0263.711] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0263.712] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00096_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00096_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0263.713] GetFileType (hFile=0x1ac) returned 0x1 [0263.713] CloseHandle (hObject=0x1ac) returned 1 [0263.714] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0263.714] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00096_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00096_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc55757, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc55757, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x920e)) returned 1 [0263.714] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0263.714] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0263.714] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00096_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00096_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc55757, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc55757, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x920e)) returned 1 [0263.715] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0263.715] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0263.715] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0263.715] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc55757, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc55757, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3df0, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="FD00296_.WMF", cAlternateFileName="")) returned 1 [0263.715] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0263.715] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0263.715] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0263.716] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0263.716] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0263.716] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0263.717] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00296_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00296_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0263.717] GetFileType (hFile=0x1ac) returned 0x1 [0263.718] CloseHandle (hObject=0x1ac) returned 1 [0263.719] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0263.719] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00296_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00296_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc55757, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc55757, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3df0)) returned 1 [0263.719] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0263.719] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0263.719] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00296_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00296_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc55757, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc55757, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3df0)) returned 1 [0263.719] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0263.720] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0263.720] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0263.720] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc7b993, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4712, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="FD00297_.WMF", cAlternateFileName="")) returned 1 [0263.720] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0263.720] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0263.720] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0263.720] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0263.721] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0263.721] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0263.722] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00297_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00297_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0263.722] GetFileType (hFile=0x1ac) returned 0x1 [0263.723] CloseHandle (hObject=0x1ac) returned 1 [0263.724] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0263.724] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00297_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00297_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc7b993, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4712)) returned 1 [0263.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0263.724] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0263.724] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00297_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00297_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc7b993, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4712)) returned 1 [0263.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0263.725] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0263.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0263.725] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb6de, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="FD00306_.WMF", cAlternateFileName="")) returned 1 [0263.725] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0263.725] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0263.725] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0263.726] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0263.726] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0263.726] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0263.727] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00306_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00306_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0263.727] GetFileType (hFile=0x1ac) returned 0x1 [0263.728] CloseHandle (hObject=0x1ac) returned 1 [0263.728] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0263.728] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00306_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00306_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb6de)) returned 1 [0263.729] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0263.729] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0263.729] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00306_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00306_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb6de)) returned 1 [0263.729] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0263.729] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0263.729] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0263.729] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc55757, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17b4, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="FD00336_.WMF", cAlternateFileName="")) returned 1 [0263.730] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0263.730] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0263.730] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0263.730] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0263.730] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0263.730] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0263.731] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00336_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00336_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0263.732] GetFileType (hFile=0x1ac) returned 0x1 [0263.732] CloseHandle (hObject=0x1ac) returned 1 [0263.733] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0263.733] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00336_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00336_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc55757, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17b4)) returned 1 [0263.733] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0263.733] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0263.733] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00336_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00336_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc55757, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17b4)) returned 1 [0263.734] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0263.734] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0263.734] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0263.734] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfea, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="FD00361_.WMF", cAlternateFileName="")) returned 1 [0263.734] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0263.734] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0263.734] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0263.735] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0263.735] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0263.735] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0263.736] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00361_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00361_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0263.736] GetFileType (hFile=0x1ac) returned 0x1 [0263.737] CloseHandle (hObject=0x1ac) returned 1 [0263.737] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0263.737] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00361_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00361_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfea)) returned 1 [0263.737] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0263.737] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0263.738] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00361_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00361_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfea)) returned 1 [0263.738] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0264.136] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0264.137] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0264.137] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc55757, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2168, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="FD00369_.WMF", cAlternateFileName="")) returned 1 [0264.137] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0264.137] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0264.137] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0264.137] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0264.138] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0264.138] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0264.138] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00369_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00369_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0264.139] GetFileType (hFile=0x198) returned 0x1 [0264.140] CloseHandle (hObject=0x198) returned 1 [0264.140] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0264.140] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00369_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00369_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc55757, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2168)) returned 1 [0264.140] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0264.141] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0264.141] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00369_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00369_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc55757, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2168)) returned 1 [0264.141] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0264.141] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0264.141] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0264.141] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20e8, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="FD00382_.WMF", cAlternateFileName="")) returned 1 [0264.141] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0264.142] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0264.142] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0264.142] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0264.142] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0264.142] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0264.143] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00382_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00382_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0264.346] GetFileType (hFile=0x174) returned 0x1 [0264.347] CloseHandle (hObject=0x174) returned 1 [0264.348] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0264.349] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00382_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00382_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20e8)) returned 1 [0264.349] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0264.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0264.350] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00382_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00382_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20e8)) returned 1 [0264.350] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0264.350] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0264.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0264.351] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a40, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="FD00397_.WMF", cAlternateFileName="")) returned 1 [0264.351] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0264.351] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0264.351] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0264.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0264.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0264.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0264.352] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00397_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00397_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0264.353] GetFileType (hFile=0x174) returned 0x1 [0264.353] CloseHandle (hObject=0x174) returned 1 [0264.353] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0264.354] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00397_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00397_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a40)) returned 1 [0264.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0264.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0264.354] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00397_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00397_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a40)) returned 1 [0264.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0264.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0264.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0264.354] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ec6, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="FD00403_.WMF", cAlternateFileName="")) returned 1 [0264.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0264.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0264.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0264.355] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0264.355] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0264.355] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0264.356] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00403_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00403_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0264.356] GetFileType (hFile=0x174) returned 0x1 [0264.357] CloseHandle (hObject=0x174) returned 1 [0264.357] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0264.357] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00403_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00403_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ec6)) returned 1 [0264.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0264.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0264.358] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00403_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00403_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ec6)) returned 1 [0264.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0264.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0264.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0264.358] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2afa, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="FD00414_.WMF", cAlternateFileName="")) returned 1 [0264.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0264.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0264.359] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0264.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0264.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0264.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0264.359] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00414_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00414_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0264.360] GetFileType (hFile=0x174) returned 0x1 [0264.360] CloseHandle (hObject=0x174) returned 1 [0264.361] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0264.361] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00414_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00414_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2afa)) returned 1 [0264.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0264.361] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0264.361] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00414_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00414_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2afa)) returned 1 [0264.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0264.362] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0264.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0264.362] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x400c, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="FD00419_.WMF", cAlternateFileName="")) returned 1 [0264.362] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0264.362] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0264.362] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0264.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0264.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0264.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0264.363] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00419_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00419_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0264.364] GetFileType (hFile=0x174) returned 0x1 [0264.364] CloseHandle (hObject=0x174) returned 1 [0264.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0264.365] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00419_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00419_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x400c)) returned 1 [0264.365] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0264.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0264.365] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00419_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00419_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x400c)) returned 1 [0264.365] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0264.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0264.366] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0264.366] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12bc, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="FD00428_.WMF", cAlternateFileName="")) returned 1 [0264.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0264.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0264.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0264.366] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0264.367] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0264.367] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0264.367] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00428_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00428_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0264.368] GetFileType (hFile=0x174) returned 0x1 [0264.368] CloseHandle (hObject=0x174) returned 1 [0264.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0264.369] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00428_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00428_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12bc)) returned 1 [0264.369] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0264.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0264.369] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00428_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00428_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12bc)) returned 1 [0264.370] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0264.370] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0264.370] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0264.370] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x83c, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="FD00435_.WMF", cAlternateFileName="")) returned 1 [0264.370] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0264.370] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0264.370] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0264.370] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0264.370] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0264.370] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0264.371] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00435_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00435_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0264.371] GetFileType (hFile=0x174) returned 0x1 [0264.371] CloseHandle (hObject=0x174) returned 1 [0264.372] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0264.372] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00435_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00435_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x83c)) returned 1 [0264.372] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0264.372] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0264.372] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00435_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00435_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x83c)) returned 1 [0264.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0264.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0264.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0264.373] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13ea, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="FD00438_.WMF", cAlternateFileName="")) returned 1 [0264.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0264.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0264.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0264.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0264.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0264.374] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0264.374] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00438_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00438_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0264.374] GetFileType (hFile=0x174) returned 0x1 [0264.375] CloseHandle (hObject=0x174) returned 1 [0264.375] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0264.375] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00438_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00438_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13ea)) returned 1 [0264.375] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0264.375] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0264.376] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00438_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00438_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13ea)) returned 1 [0264.376] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0264.376] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0264.376] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0264.376] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x22de, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="FD00455_.WMF", cAlternateFileName="")) returned 1 [0264.376] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0264.376] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0264.376] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0264.376] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0264.377] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0264.377] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0264.377] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00455_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00455_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0264.378] GetFileType (hFile=0x174) returned 0x1 [0264.378] CloseHandle (hObject=0x174) returned 1 [0264.379] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0264.379] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00455_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00455_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x22de)) returned 1 [0264.380] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0264.380] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0264.380] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00455_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00455_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x22de)) returned 1 [0264.380] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0264.380] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0264.380] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0264.380] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43fe, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="FD00459_.WMF", cAlternateFileName="")) returned 1 [0264.380] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0264.381] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0264.381] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0264.381] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0264.381] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0264.381] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0264.382] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00459_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00459_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0264.382] GetFileType (hFile=0x174) returned 0x1 [0264.382] CloseHandle (hObject=0x174) returned 1 [0264.383] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0264.383] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00459_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00459_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43fe)) returned 1 [0264.383] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0264.383] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0264.383] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00459_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00459_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43fe)) returned 1 [0264.383] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0264.384] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0264.384] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0264.384] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5c0, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="FD00543_.WMF", cAlternateFileName="")) returned 1 [0264.384] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0264.384] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0264.384] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0264.384] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0264.384] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0264.384] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0264.385] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00543_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00543_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0264.385] GetFileType (hFile=0x174) returned 0x1 [0264.386] CloseHandle (hObject=0x174) returned 1 [0264.386] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0264.386] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00543_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00543_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5c0)) returned 1 [0264.387] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0264.387] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0264.387] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00543_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00543_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5c0)) returned 1 [0264.387] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0264.387] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0264.387] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0264.387] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x148c, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="FD00544_.WMF", cAlternateFileName="")) returned 1 [0264.387] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0264.387] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0264.387] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0264.388] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0264.388] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0264.388] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0264.388] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00544_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00544_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0264.389] GetFileType (hFile=0x174) returned 0x1 [0264.389] CloseHandle (hObject=0x174) returned 1 [0264.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0264.389] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00544_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00544_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x148c)) returned 1 [0264.390] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0264.390] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0264.390] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00544_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00544_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x148c)) returned 1 [0264.390] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0264.390] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0264.390] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0264.390] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x380, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="FD00564_.WMF", cAlternateFileName="")) returned 1 [0264.390] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0264.390] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0264.391] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0264.391] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0264.391] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0264.391] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0264.391] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00564_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00564_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0264.392] GetFileType (hFile=0x174) returned 0x1 [0264.392] CloseHandle (hObject=0x174) returned 1 [0264.392] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0264.392] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00564_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00564_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x380)) returned 1 [0264.393] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0264.393] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0264.393] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00564_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00564_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x380)) returned 1 [0264.393] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0264.393] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0264.393] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0264.393] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2f0, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="FD00586_.WMF", cAlternateFileName="")) returned 1 [0264.394] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0264.394] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0264.394] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0264.394] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0264.394] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0264.576] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0264.616] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00586_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00586_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0264.616] GetFileType (hFile=0x174) returned 0x1 [0264.617] CloseHandle (hObject=0x174) returned 1 [0264.617] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0264.618] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00586_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00586_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2f0)) returned 1 [0264.618] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0264.618] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0264.618] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00586_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00586_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2f0)) returned 1 [0264.619] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0264.619] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0264.619] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0264.619] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b90, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="FD00775_.WMF", cAlternateFileName="")) returned 1 [0264.619] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0264.619] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0264.619] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0264.620] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0264.620] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0264.620] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0264.621] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00775_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00775_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0264.621] GetFileType (hFile=0x174) returned 0x1 [0264.622] CloseHandle (hObject=0x174) returned 1 [0264.622] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0264.623] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00775_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00775_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b90)) returned 1 [0264.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0264.623] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0264.623] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00775_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00775_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b90)) returned 1 [0264.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0264.624] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0264.624] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0264.624] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2332, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="FD00779_.WMF", cAlternateFileName="")) returned 1 [0264.624] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0264.624] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0264.624] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0264.624] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0264.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0264.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0264.625] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00779_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00779_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0264.626] GetFileType (hFile=0x174) returned 0x1 [0264.626] CloseHandle (hObject=0x174) returned 1 [0264.627] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0264.627] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00779_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00779_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2332)) returned 1 [0264.627] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0264.627] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0264.627] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00779_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00779_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2332)) returned 1 [0264.628] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0264.628] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0264.628] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0264.628] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3690, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="FD00799_.WMF", cAlternateFileName="")) returned 1 [0264.628] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0264.628] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0264.629] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0264.629] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0264.629] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0264.629] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0264.630] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00799_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00799_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0264.630] GetFileType (hFile=0x174) returned 0x1 [0264.631] CloseHandle (hObject=0x174) returned 1 [0264.631] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0264.632] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00799_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00799_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3690)) returned 1 [0264.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0264.632] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0264.632] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00799_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00799_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3690)) returned 1 [0264.633] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0264.633] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0264.633] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0264.633] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa6d0, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="FD00814_.WMF", cAlternateFileName="")) returned 1 [0264.633] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0264.633] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0264.633] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0264.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0264.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0264.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0264.635] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00814_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00814_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0264.635] GetFileType (hFile=0x174) returned 0x1 [0264.636] CloseHandle (hObject=0x174) returned 1 [0264.636] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0264.636] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00814_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00814_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa6d0)) returned 1 [0264.636] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0264.637] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0264.637] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00814_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00814_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa6d0)) returned 1 [0264.637] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0264.637] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0264.637] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0264.637] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b3c, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="FD00965_.WMF", cAlternateFileName="")) returned 1 [0264.637] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0264.638] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0264.638] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0264.638] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0264.638] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0264.638] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0264.639] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00965_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00965_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0264.639] GetFileType (hFile=0x174) returned 0x1 [0264.640] CloseHandle (hObject=0x174) returned 1 [0264.640] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0264.641] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00965_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00965_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b3c)) returned 1 [0264.641] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0264.641] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0264.641] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00965_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00965_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b3c)) returned 1 [0264.641] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0264.641] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0264.642] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0264.642] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x121a, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="FD01074_.WMF", cAlternateFileName="")) returned 1 [0264.642] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0264.642] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0264.642] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0264.642] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0264.642] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0264.643] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0264.644] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01074_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01074_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0264.644] GetFileType (hFile=0x174) returned 0x1 [0264.645] CloseHandle (hObject=0x174) returned 1 [0264.646] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0264.646] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01074_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01074_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x121a)) returned 1 [0264.646] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0264.646] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0264.646] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01074_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01074_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x121a)) returned 1 [0264.647] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0264.647] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0264.647] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0264.647] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x96c, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="FD01084_.WMF", cAlternateFileName="")) returned 1 [0264.647] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0264.647] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0264.647] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0264.648] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0264.648] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0264.648] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0264.649] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01084_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01084_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0264.649] GetFileType (hFile=0x174) returned 0x1 [0264.650] CloseHandle (hObject=0x174) returned 1 [0264.650] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0264.650] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01084_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01084_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x96c)) returned 1 [0264.651] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0264.651] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0264.651] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01084_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01084_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x96c)) returned 1 [0264.651] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0264.651] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0264.651] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0264.651] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1378, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="FD01176_.WMF", cAlternateFileName="")) returned 1 [0264.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0264.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0264.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0264.652] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0264.652] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0264.652] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0264.653] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01176_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01176_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0264.653] GetFileType (hFile=0x174) returned 0x1 [0264.654] CloseHandle (hObject=0x174) returned 1 [0264.654] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0264.654] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01176_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01176_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1378)) returned 1 [0264.654] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0264.654] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0264.655] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01176_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01176_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1378)) returned 1 [0264.655] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0264.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0264.655] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0264.655] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf7c, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="FD01191_.WMF", cAlternateFileName="")) returned 1 [0264.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0264.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0264.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0264.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0264.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0264.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0264.657] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01191_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01191_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0264.657] GetFileType (hFile=0x174) returned 0x1 [0264.657] CloseHandle (hObject=0x174) returned 1 [0264.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0264.658] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01191_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01191_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf7c)) returned 1 [0264.658] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0264.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0264.658] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01191_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01191_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf7c)) returned 1 [0264.658] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0264.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0264.659] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0264.659] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf2a4e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x488, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="FD01193_.WMF", cAlternateFileName="")) returned 1 [0264.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0264.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0264.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0264.659] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0264.659] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0264.659] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0265.083] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01193_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01193_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0265.084] GetFileType (hFile=0x1e8) returned 0x1 [0265.084] CloseHandle (hObject=0x1e8) returned 1 [0265.085] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0265.085] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01193_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01193_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf2a4e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x488)) returned 1 [0265.085] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0265.085] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0265.085] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01193_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01193_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf2a4e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x488)) returned 1 [0265.085] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0265.085] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0265.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0265.086] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf2a4e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x91c, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="FD01196_.WMF", cAlternateFileName="")) returned 1 [0265.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0265.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0265.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0265.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0265.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0265.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0265.087] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01196_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01196_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0265.087] GetFileType (hFile=0x1e8) returned 0x1 [0265.088] CloseHandle (hObject=0x1e8) returned 1 [0265.088] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0265.088] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01196_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01196_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf2a4e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x91c)) returned 1 [0265.088] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0265.088] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0265.089] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01196_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01196_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf2a4e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x91c)) returned 1 [0265.089] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0265.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0265.089] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0265.089] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x284c, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="FD01548_.WMF", cAlternateFileName="")) returned 1 [0265.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0265.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0265.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0265.089] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0265.089] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0265.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0265.090] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01548_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01548_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0265.090] GetFileType (hFile=0x1e8) returned 0x1 [0265.091] CloseHandle (hObject=0x1e8) returned 1 [0265.091] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0265.091] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01548_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01548_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x284c)) returned 1 [0265.091] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0265.091] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0265.091] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01548_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01548_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x284c)) returned 1 [0265.092] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0265.092] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0265.092] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0265.092] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf2a4e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x76ce, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="FD01657_.WMF", cAlternateFileName="")) returned 1 [0265.092] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0265.092] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0265.092] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0265.092] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0265.092] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0265.092] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0265.093] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01657_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01657_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0265.093] GetFileType (hFile=0x1e8) returned 0x1 [0265.093] CloseHandle (hObject=0x1e8) returned 1 [0265.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0265.094] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01657_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01657_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf2a4e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x76ce)) returned 1 [0265.094] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0265.094] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0265.094] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01657_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01657_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf2a4e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x76ce)) returned 1 [0265.094] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0265.094] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0265.094] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0265.094] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4604, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="FD01658_.WMF", cAlternateFileName="")) returned 1 [0265.094] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0265.094] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0265.094] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0265.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0265.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0265.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0265.095] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01658_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01658_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0265.096] GetFileType (hFile=0x1e8) returned 0x1 [0265.096] CloseHandle (hObject=0x1e8) returned 1 [0265.096] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0265.096] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01658_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01658_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4604)) returned 1 [0265.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0265.097] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0265.097] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01658_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01658_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4604)) returned 1 [0265.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0265.097] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0265.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0265.098] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x79cc, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="FD01659_.WMF", cAlternateFileName="")) returned 1 [0265.098] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0265.098] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0265.098] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0265.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0265.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0265.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0265.099] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01659_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01659_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0265.099] GetFileType (hFile=0x1e8) returned 0x1 [0265.099] CloseHandle (hObject=0x1e8) returned 1 [0265.100] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0265.100] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01659_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01659_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x79cc)) returned 1 [0265.100] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0265.100] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0265.100] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01659_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01659_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x79cc)) returned 1 [0265.100] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0265.100] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0265.100] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0265.101] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x329e, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="FD01660_.WMF", cAlternateFileName="")) returned 1 [0265.101] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0265.101] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0265.101] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0265.101] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0265.101] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0265.101] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0265.102] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01660_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01660_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0265.102] GetFileType (hFile=0x1e8) returned 0x1 [0265.102] CloseHandle (hObject=0x1e8) returned 1 [0265.103] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0265.103] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01660_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01660_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x329e)) returned 1 [0265.103] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0265.103] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0265.103] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01660_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01660_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x329e)) returned 1 [0265.103] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0265.104] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0265.104] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0265.104] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9b8, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="FD02068_.WMF", cAlternateFileName="")) returned 1 [0265.104] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0265.104] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0265.104] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0265.104] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0265.104] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0265.104] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0265.105] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02068_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02068_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0265.105] GetFileType (hFile=0x1e8) returned 0x1 [0265.106] CloseHandle (hObject=0x1e8) returned 1 [0265.106] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0265.106] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02068_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02068_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9b8)) returned 1 [0265.106] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0265.106] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0265.106] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02068_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02068_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9b8)) returned 1 [0265.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0265.107] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0265.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0265.107] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x88c, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="FD02071_.WMF", cAlternateFileName="")) returned 1 [0265.107] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0265.107] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0265.107] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0265.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0265.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0265.108] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0265.108] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02071_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02071_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0265.108] GetFileType (hFile=0x1e8) returned 0x1 [0265.109] CloseHandle (hObject=0x1e8) returned 1 [0265.109] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0265.109] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02071_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02071_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x88c)) returned 1 [0265.109] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0265.109] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0265.110] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02071_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02071_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x88c)) returned 1 [0265.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0265.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0265.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0265.110] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x112c, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="FD02075_.WMF", cAlternateFileName="")) returned 1 [0265.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0265.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0265.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0265.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0265.111] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0265.111] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0265.111] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02075_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02075_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0265.112] GetFileType (hFile=0x1e8) returned 0x1 [0265.112] CloseHandle (hObject=0x1e8) returned 1 [0265.112] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0265.113] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02075_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02075_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x112c)) returned 1 [0265.113] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0265.114] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0265.114] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02075_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02075_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x112c)) returned 1 [0265.114] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0265.114] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0265.114] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0265.114] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe70, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="FD02088_.WMF", cAlternateFileName="")) returned 1 [0265.114] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0265.114] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0265.115] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0265.115] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0265.115] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0265.115] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0265.115] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02088_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02088_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0265.116] GetFileType (hFile=0x1e8) returned 0x1 [0265.116] CloseHandle (hObject=0x1e8) returned 1 [0265.116] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0265.116] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02088_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02088_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe70)) returned 1 [0265.117] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0265.117] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0265.117] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02088_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02088_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe70)) returned 1 [0265.117] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0265.117] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0265.117] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0265.117] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x61c, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="FD02097_.WMF", cAlternateFileName="")) returned 1 [0265.117] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0265.117] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0265.118] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0265.118] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0265.118] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0265.118] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0265.118] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02097_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02097_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0265.119] GetFileType (hFile=0x1e8) returned 0x1 [0265.119] CloseHandle (hObject=0x1e8) returned 1 [0265.119] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0265.119] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02097_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02097_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x61c)) returned 1 [0265.120] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0265.120] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0265.120] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02097_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02097_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x61c)) returned 1 [0265.120] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0265.120] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0265.120] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0265.120] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1234, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="FD02115_.WMF", cAlternateFileName="")) returned 1 [0265.120] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0265.120] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0265.120] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0265.120] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0265.120] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0265.121] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0265.121] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02115_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02115_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0265.121] GetFileType (hFile=0x1e8) returned 0x1 [0265.122] CloseHandle (hObject=0x1e8) returned 1 [0265.122] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0265.122] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02115_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02115_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1234)) returned 1 [0265.122] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0265.122] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0265.123] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02115_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02115_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1234)) returned 1 [0265.123] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0265.123] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0265.123] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0265.123] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf94, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="FD02116_.WMF", cAlternateFileName="")) returned 1 [0265.123] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0265.123] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0265.124] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0265.124] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0265.124] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0265.124] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0265.125] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02116_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02116_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0265.125] GetFileType (hFile=0x1e8) returned 0x1 [0265.125] CloseHandle (hObject=0x1e8) returned 1 [0265.126] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0265.126] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02116_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02116_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf94)) returned 1 [0265.126] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0265.126] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0265.126] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02116_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02116_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf94)) returned 1 [0265.127] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0265.127] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0265.127] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0265.127] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa4c, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="FD02141_.WMF", cAlternateFileName="")) returned 1 [0265.127] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0265.127] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0265.127] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0265.127] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0265.127] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0265.127] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0265.128] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02141_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02141_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0265.128] GetFileType (hFile=0x1e8) returned 0x1 [0265.615] CloseHandle (hObject=0x1e8) returned 1 [0265.616] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0265.616] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02141_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02141_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa4c)) returned 1 [0265.616] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0265.616] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0265.616] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02141_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02141_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa4c)) returned 1 [0265.616] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0265.616] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0265.616] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0265.616] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf2a4e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1510, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="FD02153_.WMF", cAlternateFileName="")) returned 1 [0265.617] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0265.617] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0265.617] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0265.617] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0265.617] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0265.617] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0265.761] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02153_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02153_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0265.762] GetFileType (hFile=0x198) returned 0x1 [0265.762] CloseHandle (hObject=0x198) returned 1 [0265.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0265.763] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02153_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02153_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf2a4e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1510)) returned 1 [0265.763] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0265.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0265.763] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02153_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02153_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf2a4e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1510)) returned 1 [0265.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0265.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0265.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0265.764] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x670, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="FD02158_.WMF", cAlternateFileName="")) returned 1 [0265.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0265.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0265.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0265.765] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0265.765] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0265.765] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0265.766] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02158_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02158_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0265.766] GetFileType (hFile=0x198) returned 0x1 [0265.766] CloseHandle (hObject=0x198) returned 1 [0265.767] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0265.767] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02158_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02158_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x670)) returned 1 [0265.767] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0265.767] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0265.767] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02158_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02158_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x670)) returned 1 [0265.768] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0265.768] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0265.768] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0265.768] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc38, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="FD02161_.WMF", cAlternateFileName="")) returned 1 [0265.768] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0265.768] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0265.768] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0265.768] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0265.769] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0265.769] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0265.770] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02161_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02161_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0265.770] GetFileType (hFile=0x198) returned 0x1 [0265.771] CloseHandle (hObject=0x198) returned 1 [0265.771] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0265.771] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02161_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02161_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc38)) returned 1 [0265.771] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0265.771] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0265.771] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02161_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02161_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc38)) returned 1 [0265.772] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0265.772] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0265.772] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0265.772] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32b5, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="FINCL_01.MID", cAlternateFileName="")) returned 1 [0265.772] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0265.772] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0265.772] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0265.772] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0265.772] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0265.773] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0265.773] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fincl_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0265.773] GetFileType (hFile=0x198) returned 0x1 [0265.774] CloseHandle (hObject=0x198) returned 1 [0265.774] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0265.774] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fincl_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32b5)) returned 1 [0265.775] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0265.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0265.775] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fincl_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32b5)) returned 1 [0265.775] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0265.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0265.775] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0265.776] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf2a4e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2466, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="FINCL_02.MID", cAlternateFileName="")) returned 1 [0265.776] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0265.776] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0265.776] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0265.776] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0265.776] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0265.776] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0265.777] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_02.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fincl_02.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0265.778] GetFileType (hFile=0x198) returned 0x1 [0265.778] CloseHandle (hObject=0x198) returned 1 [0265.779] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0265.779] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_02.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fincl_02.mid"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf2a4e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2466)) returned 1 [0265.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0265.779] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0265.779] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_02.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fincl_02.mid"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf2a4e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2466)) returned 1 [0265.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0265.779] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0265.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0265.780] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x816, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="FLAP.WMF", cAlternateFileName="")) returned 1 [0265.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0265.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0265.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0265.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0265.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0265.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0265.781] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FLAP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\flap.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0265.781] GetFileType (hFile=0x198) returned 0x1 [0265.782] CloseHandle (hObject=0x198) returned 1 [0265.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0265.782] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FLAP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\flap.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x816)) returned 1 [0265.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0265.783] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0265.783] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FLAP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\flap.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x816)) returned 1 [0265.783] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0265.783] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0265.783] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0265.783] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d8f, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="GRDEN_01.MID", cAlternateFileName="")) returned 1 [0265.783] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0265.784] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0265.784] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0265.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0265.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0265.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0265.785] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRDEN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\grden_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0265.786] GetFileType (hFile=0x198) returned 0x1 [0265.786] CloseHandle (hObject=0x198) returned 1 [0265.787] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0265.787] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRDEN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\grden_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d8f)) returned 1 [0265.787] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0265.787] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0265.787] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRDEN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\grden_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d8f)) returned 1 [0265.787] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0265.787] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0265.788] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0265.788] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18bb, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="GRID_01.MID", cAlternateFileName="")) returned 1 [0265.788] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0265.788] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0265.788] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0265.788] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0265.788] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0265.788] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0265.789] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRID_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\grid_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0265.789] GetFileType (hFile=0x198) returned 0x1 [0265.790] CloseHandle (hObject=0x198) returned 1 [0265.790] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0265.790] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRID_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\grid_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18bb)) returned 1 [0265.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0265.791] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0265.791] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRID_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\grid_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18bb)) returned 1 [0265.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0265.791] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0265.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0265.791] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xeb4, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="HH00057_.WMF", cAlternateFileName="")) returned 1 [0265.792] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0265.792] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0265.792] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0265.792] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0265.793] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0265.793] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0265.794] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00057_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00057_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0265.794] GetFileType (hFile=0x198) returned 0x1 [0265.795] CloseHandle (hObject=0x198) returned 1 [0265.795] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0265.795] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00057_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00057_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xeb4)) returned 1 [0265.795] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0265.795] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0265.795] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00057_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00057_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xeb4)) returned 1 [0265.796] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0265.796] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0265.796] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0265.796] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9a8, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="HH00084_.WMF", cAlternateFileName="")) returned 1 [0265.796] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0265.796] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0265.796] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0265.796] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0265.796] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0265.796] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0265.797] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00084_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00084_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0265.798] GetFileType (hFile=0x198) returned 0x1 [0265.798] CloseHandle (hObject=0x198) returned 1 [0265.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0265.799] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00084_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00084_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9a8)) returned 1 [0265.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0265.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0265.799] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00084_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00084_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9a8)) returned 1 [0265.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0265.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0265.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0265.800] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b8, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="HH00231_.WMF", cAlternateFileName="")) returned 1 [0265.800] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0265.800] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0265.800] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0265.800] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0265.800] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0265.800] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0266.071] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00231_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00231_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0266.071] GetFileType (hFile=0x198) returned 0x1 [0266.071] CloseHandle (hObject=0x198) returned 1 [0266.072] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0266.072] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00231_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00231_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b8)) returned 1 [0266.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0266.072] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0266.072] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00231_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00231_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b8)) returned 1 [0266.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0266.072] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0266.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0266.072] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x402, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="HH00235_.WMF", cAlternateFileName="")) returned 1 [0266.072] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0266.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0266.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0266.073] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0266.073] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0266.073] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0266.073] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00235_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00235_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0266.074] GetFileType (hFile=0x198) returned 0x1 [0266.074] CloseHandle (hObject=0x198) returned 1 [0266.074] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0266.074] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00235_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00235_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x402)) returned 1 [0266.075] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0266.075] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0266.075] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00235_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00235_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x402)) returned 1 [0266.075] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0266.075] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0266.075] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0266.075] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcd6, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="HH00236_.WMF", cAlternateFileName="")) returned 1 [0266.075] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0266.076] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0266.076] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0266.076] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0266.076] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0266.076] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0266.076] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00236_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00236_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0266.077] GetFileType (hFile=0x198) returned 0x1 [0266.077] CloseHandle (hObject=0x198) returned 1 [0266.078] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0266.078] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00236_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00236_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcd6)) returned 1 [0266.078] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0266.078] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0266.078] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00236_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00236_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcd6)) returned 1 [0266.078] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0266.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0266.079] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0266.079] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7a8, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="HH00241_.WMF", cAlternateFileName="")) returned 1 [0266.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0266.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0266.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0266.079] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0266.079] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0266.079] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0266.080] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00241_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00241_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0266.080] GetFileType (hFile=0x198) returned 0x1 [0266.080] CloseHandle (hObject=0x198) returned 1 [0266.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0266.081] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00241_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00241_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7a8)) returned 1 [0266.081] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0266.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0266.081] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00241_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00241_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7a8)) returned 1 [0266.084] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0266.084] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0266.084] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0266.085] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe4e, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="HH00260_.WMF", cAlternateFileName="")) returned 1 [0266.085] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0266.085] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0266.085] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0266.085] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0266.085] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0266.085] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0266.086] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00260_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00260_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0266.086] GetFileType (hFile=0x198) returned 0x1 [0266.086] CloseHandle (hObject=0x198) returned 1 [0266.087] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0266.087] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00260_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00260_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe4e)) returned 1 [0266.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0266.087] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0266.087] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00260_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00260_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe4e)) returned 1 [0266.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0266.087] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0266.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0266.088] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc8, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="HH00276_.WMF", cAlternateFileName="")) returned 1 [0266.088] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0266.088] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0266.088] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0266.088] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0266.088] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0266.088] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0266.089] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00276_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00276_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0266.089] GetFileType (hFile=0x198) returned 0x1 [0266.089] CloseHandle (hObject=0x198) returned 1 [0266.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0266.090] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00276_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00276_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc8)) returned 1 [0266.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0266.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0266.090] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00276_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00276_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc8)) returned 1 [0266.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0266.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0266.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0266.091] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5f8, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="HH00334_.WMF", cAlternateFileName="")) returned 1 [0266.091] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0266.091] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0266.091] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0266.091] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0266.091] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0266.091] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0266.092] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00334_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00334_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0266.092] GetFileType (hFile=0x198) returned 0x1 [0266.092] CloseHandle (hObject=0x198) returned 1 [0266.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0266.093] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00334_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00334_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5f8)) returned 1 [0266.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0266.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0266.093] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00334_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00334_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5f8)) returned 1 [0266.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0266.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0266.094] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0266.094] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xce2, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="HH00443_.WMF", cAlternateFileName="")) returned 1 [0266.094] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0266.094] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0266.094] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0266.094] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0266.094] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0266.094] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0266.095] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00443_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00443_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0266.095] GetFileType (hFile=0x198) returned 0x1 [0266.096] CloseHandle (hObject=0x198) returned 1 [0266.096] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0266.097] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00443_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00443_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xce2)) returned 1 [0266.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0266.097] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0266.097] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00443_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00443_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xce2)) returned 1 [0266.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0266.098] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0266.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0266.098] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x332, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="HH00513_.WMF", cAlternateFileName="")) returned 1 [0266.098] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0266.098] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0266.098] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0266.099] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0266.099] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0266.099] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0266.100] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00513_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00513_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0266.100] GetFileType (hFile=0x198) returned 0x1 [0266.100] CloseHandle (hObject=0x198) returned 1 [0266.101] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0266.101] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00513_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00513_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x332)) returned 1 [0266.101] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0266.101] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0266.101] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00513_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00513_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x332)) returned 1 [0266.102] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0266.102] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0266.102] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0266.102] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3960, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="HH00524_.WMF", cAlternateFileName="")) returned 1 [0266.102] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0266.102] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0266.102] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0266.102] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0266.103] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0266.103] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0266.103] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00524_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00524_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0266.104] GetFileType (hFile=0x198) returned 0x1 [0266.104] CloseHandle (hObject=0x198) returned 1 [0266.105] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0266.105] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00524_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00524_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3960)) returned 1 [0266.105] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0266.105] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0266.105] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00524_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00524_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3960)) returned 1 [0266.106] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0266.106] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0266.106] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0266.106] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x34e2, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="HH00526_.WMF", cAlternateFileName="")) returned 1 [0266.106] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0266.106] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0266.106] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0266.106] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0266.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0266.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0266.108] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00526_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00526_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0266.108] GetFileType (hFile=0x198) returned 0x1 [0266.108] CloseHandle (hObject=0x198) returned 1 [0266.109] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0266.109] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00526_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00526_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x34e2)) returned 1 [0266.109] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0266.109] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0266.109] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00526_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00526_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x34e2)) returned 1 [0266.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0266.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0266.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0266.110] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16a6, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="HH00527_.WMF", cAlternateFileName="")) returned 1 [0266.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0266.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0266.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0266.111] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0266.111] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0266.111] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0266.112] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00527_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00527_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0266.112] GetFileType (hFile=0x198) returned 0x1 [0266.112] CloseHandle (hObject=0x198) returned 1 [0266.517] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0266.517] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00527_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00527_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16a6)) returned 1 [0266.517] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0266.517] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0266.518] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00527_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00527_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16a6)) returned 1 [0266.518] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0266.518] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0266.518] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0266.518] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe86, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="HH00546_.WMF", cAlternateFileName="")) returned 1 [0266.518] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0266.518] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0266.518] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0266.518] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0266.518] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0266.518] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0266.519] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00546_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00546_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0266.520] GetFileType (hFile=0x1c0) returned 0x1 [0266.520] CloseHandle (hObject=0x1c0) returned 1 [0266.520] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0266.520] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00546_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00546_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe86)) returned 1 [0266.521] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0266.521] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0266.521] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00546_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00546_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe86)) returned 1 [0266.521] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0266.521] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0266.521] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0266.521] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5bc, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="HH00601_.WMF", cAlternateFileName="")) returned 1 [0266.521] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0266.521] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0266.521] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0266.521] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0266.522] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0266.522] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0266.522] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00601_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00601_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0266.522] GetFileType (hFile=0x1c0) returned 0x1 [0266.523] CloseHandle (hObject=0x1c0) returned 1 [0266.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0266.523] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00601_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00601_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5bc)) returned 1 [0266.523] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0266.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0266.524] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00601_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00601_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5bc)) returned 1 [0266.524] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0266.524] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0266.524] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0266.524] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x578, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="HH00602_.WMF", cAlternateFileName="")) returned 1 [0266.524] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0266.524] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0266.524] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0266.524] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0266.525] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0266.525] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0266.525] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00602_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00602_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0266.525] GetFileType (hFile=0x1c0) returned 0x1 [0266.526] CloseHandle (hObject=0x1c0) returned 1 [0266.526] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0266.526] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00602_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00602_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x578)) returned 1 [0266.527] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0266.527] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0266.527] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00602_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00602_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x578)) returned 1 [0266.527] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0266.527] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0266.527] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0266.527] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3158, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="HH00612_.WMF", cAlternateFileName="")) returned 1 [0266.527] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0266.527] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0266.528] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0266.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0266.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0266.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0266.528] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00612_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00612_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0266.529] GetFileType (hFile=0x1c0) returned 0x1 [0266.529] CloseHandle (hObject=0x1c0) returned 1 [0266.529] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0266.529] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00612_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00612_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3158)) returned 1 [0266.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0266.530] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0266.530] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00612_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00612_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3158)) returned 1 [0266.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0266.530] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0266.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0266.530] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2994, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="HH00623_.WMF", cAlternateFileName="")) returned 1 [0266.530] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0266.530] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0266.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0266.531] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0266.531] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0266.531] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0266.531] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00623_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00623_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0266.531] GetFileType (hFile=0x1c0) returned 0x1 [0266.532] CloseHandle (hObject=0x1c0) returned 1 [0266.532] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0266.532] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00623_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00623_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2994)) returned 1 [0266.532] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0266.532] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0266.533] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00623_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00623_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2994)) returned 1 [0266.533] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0266.533] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0266.533] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0266.533] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x844, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="HH00625_.WMF", cAlternateFileName="")) returned 1 [0266.533] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0266.533] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0266.533] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0266.533] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0266.533] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0266.533] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0266.534] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00625_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00625_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0266.534] GetFileType (hFile=0x1c0) returned 0x1 [0266.534] CloseHandle (hObject=0x1c0) returned 1 [0266.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0266.536] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00625_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00625_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x844)) returned 1 [0266.536] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0266.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0266.536] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00625_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00625_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x844)) returned 1 [0266.537] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0266.537] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0266.537] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0266.537] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x620, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="HH00636_.WMF", cAlternateFileName="")) returned 1 [0266.537] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0266.537] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0266.537] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0266.537] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0266.537] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0266.537] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0266.538] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00636_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00636_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0266.538] GetFileType (hFile=0x1c0) returned 0x1 [0266.539] CloseHandle (hObject=0x1c0) returned 1 [0266.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0266.539] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00636_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00636_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x620)) returned 1 [0266.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0266.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0266.539] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00636_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00636_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x620)) returned 1 [0266.540] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0266.540] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0266.540] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0266.540] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ce2, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="HH00669_.WMF", cAlternateFileName="")) returned 1 [0266.540] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0266.540] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0266.540] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0266.540] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0266.540] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0266.541] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0266.541] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00669_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00669_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0266.541] GetFileType (hFile=0x1c0) returned 0x1 [0266.542] CloseHandle (hObject=0x1c0) returned 1 [0266.542] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0266.542] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00669_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00669_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ce2)) returned 1 [0266.543] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0266.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0266.543] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00669_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00669_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ce2)) returned 1 [0266.543] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0266.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0266.543] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0266.543] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2454, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="HH00681_.WMF", cAlternateFileName="")) returned 1 [0266.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0266.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0266.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0266.544] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0266.544] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0266.544] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0266.544] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00681_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00681_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0266.545] GetFileType (hFile=0x1c0) returned 0x1 [0266.545] CloseHandle (hObject=0x1c0) returned 1 [0266.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0266.546] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00681_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00681_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2454)) returned 1 [0266.546] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0266.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0266.546] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00681_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00681_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2454)) returned 1 [0266.546] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0266.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0266.547] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0266.547] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfc0, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="HH00685_.WMF", cAlternateFileName="")) returned 1 [0266.547] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0266.547] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0266.547] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0266.547] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0266.547] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0266.547] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0266.548] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00685_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00685_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0266.548] GetFileType (hFile=0x1c0) returned 0x1 [0266.548] CloseHandle (hObject=0x1c0) returned 1 [0266.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0266.549] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00685_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00685_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfc0)) returned 1 [0266.549] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0266.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0266.549] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00685_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00685_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfc0)) returned 1 [0266.549] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0266.550] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0266.550] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0266.550] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10f4, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="HH00687_.WMF", cAlternateFileName="")) returned 1 [0266.550] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0266.550] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0266.550] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0266.753] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0266.753] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0266.753] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0266.754] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00687_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00687_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0266.755] GetFileType (hFile=0x174) returned 0x1 [0266.755] CloseHandle (hObject=0x174) returned 1 [0266.756] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0266.756] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00687_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00687_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10f4)) returned 1 [0266.756] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0266.756] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0266.756] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00687_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00687_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10f4)) returned 1 [0266.756] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0266.756] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0266.757] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0266.757] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bac, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="HH00688_.WMF", cAlternateFileName="")) returned 1 [0266.757] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0266.757] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0266.757] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0266.757] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0266.757] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0266.757] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0266.758] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00688_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00688_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0267.024] GetFileType (hFile=0x21c) returned 0x1 [0267.025] CloseHandle (hObject=0x21c) returned 1 [0267.025] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0267.026] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00688_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00688_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bac)) returned 1 [0267.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0267.026] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0267.026] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00688_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00688_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bac)) returned 1 [0267.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0267.027] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0267.027] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0267.027] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bba, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="HH00693_.WMF", cAlternateFileName="")) returned 1 [0267.027] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0267.027] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0267.027] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0267.027] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0267.028] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0267.028] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0267.028] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00693_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00693_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0267.029] GetFileType (hFile=0x21c) returned 0x1 [0267.030] CloseHandle (hObject=0x21c) returned 1 [0267.030] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0267.030] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00693_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00693_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bba)) returned 1 [0267.030] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0267.031] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0267.031] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00693_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00693_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bba)) returned 1 [0267.031] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0267.031] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0267.031] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0267.031] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb20, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="HH01013_.WMF", cAlternateFileName="")) returned 1 [0267.031] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0267.032] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0267.032] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0267.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0267.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0267.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0267.033] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01013_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01013_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0267.033] GetFileType (hFile=0x21c) returned 0x1 [0267.034] CloseHandle (hObject=0x21c) returned 1 [0267.035] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0267.036] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01013_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01013_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb20)) returned 1 [0267.036] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0267.036] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0267.036] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01013_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01013_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb20)) returned 1 [0267.036] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0267.036] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0267.037] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0267.037] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x47c, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="HH01015_.WMF", cAlternateFileName="")) returned 1 [0267.037] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0267.037] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0267.037] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0267.037] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0267.037] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0267.037] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0267.038] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01015_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0267.038] GetFileType (hFile=0x21c) returned 0x1 [0267.039] CloseHandle (hObject=0x21c) returned 1 [0267.039] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0267.040] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01015_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x47c)) returned 1 [0267.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0267.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0267.040] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01015_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x47c)) returned 1 [0267.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0267.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0267.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0267.041] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xac4, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="HH01058_.WMF", cAlternateFileName="")) returned 1 [0267.041] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0267.041] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0267.041] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0267.041] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0267.041] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0267.041] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0267.042] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01058_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01058_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0267.043] GetFileType (hFile=0x21c) returned 0x1 [0267.043] CloseHandle (hObject=0x21c) returned 1 [0267.044] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0267.044] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01058_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01058_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xac4)) returned 1 [0267.044] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0267.044] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0267.044] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01058_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01058_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xac4)) returned 1 [0267.045] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0267.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0267.045] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0267.045] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f4, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="HH01065_.WMF", cAlternateFileName="")) returned 1 [0267.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0267.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0267.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0267.045] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0267.046] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0267.046] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0267.046] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01065_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01065_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0267.047] GetFileType (hFile=0x21c) returned 0x1 [0267.047] CloseHandle (hObject=0x21c) returned 1 [0267.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0267.048] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01065_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01065_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f4)) returned 1 [0267.048] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0267.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0267.048] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01065_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01065_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f4)) returned 1 [0267.049] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0267.049] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0267.049] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0267.049] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1388, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="HH01080_.WMF", cAlternateFileName="")) returned 1 [0267.049] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0267.049] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0267.049] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0267.049] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0267.049] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0267.049] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0267.050] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01080_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01080_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0267.051] GetFileType (hFile=0x21c) returned 0x1 [0267.051] CloseHandle (hObject=0x21c) returned 1 [0267.052] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0267.052] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01080_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01080_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1388)) returned 1 [0267.052] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0267.052] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0267.052] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01080_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01080_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1388)) returned 1 [0267.052] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0267.052] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0267.053] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0267.053] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1cac, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="HH01242_.WMF", cAlternateFileName="")) returned 1 [0267.053] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0267.053] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0267.053] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0267.053] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0267.053] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0267.053] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0267.054] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01242_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01242_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0267.054] GetFileType (hFile=0x21c) returned 0x1 [0267.055] CloseHandle (hObject=0x21c) returned 1 [0267.055] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0267.055] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01242_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01242_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1cac)) returned 1 [0267.056] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0267.056] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0267.056] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01242_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01242_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1cac)) returned 1 [0267.056] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0267.056] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0267.056] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0267.056] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3dbe, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="HH01291_.WMF", cAlternateFileName="")) returned 1 [0267.056] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0267.056] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0267.057] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0267.057] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0267.057] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0267.057] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0267.058] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01291_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01291_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0267.058] GetFileType (hFile=0x21c) returned 0x1 [0267.059] CloseHandle (hObject=0x21c) returned 1 [0267.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0267.059] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01291_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01291_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3dbe)) returned 1 [0267.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0267.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0267.060] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01291_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01291_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3dbe)) returned 1 [0267.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0267.060] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0267.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0267.060] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1780, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="HH01329_.WMF", cAlternateFileName="")) returned 1 [0267.060] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0267.060] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0267.060] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0267.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0267.061] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0267.061] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0267.061] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01329_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01329_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0267.062] GetFileType (hFile=0x21c) returned 0x1 [0267.062] CloseHandle (hObject=0x21c) returned 1 [0267.063] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0267.063] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01329_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01329_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1780)) returned 1 [0267.063] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0267.063] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0267.063] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01329_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01329_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1780)) returned 1 [0267.063] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0267.063] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0267.063] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0267.064] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1746, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="HH01461_.WMF", cAlternateFileName="")) returned 1 [0267.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0267.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0267.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0267.064] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0267.064] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0267.064] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0267.065] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01461_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01461_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0267.066] GetFileType (hFile=0x21c) returned 0x1 [0267.302] CloseHandle (hObject=0x21c) returned 1 [0267.302] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0267.303] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01461_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01461_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1746)) returned 1 [0267.303] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0267.303] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0267.303] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01461_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01461_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1746)) returned 1 [0267.303] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0267.304] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0267.304] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0267.304] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c80, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="HH01618_.WMF", cAlternateFileName="")) returned 1 [0267.304] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0267.304] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0267.304] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0267.304] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0267.304] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0267.305] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0267.305] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01618_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01618_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0267.306] GetFileType (hFile=0x21c) returned 0x1 [0267.306] CloseHandle (hObject=0x21c) returned 1 [0267.307] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0267.307] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01618_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01618_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c80)) returned 1 [0267.307] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0267.307] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0267.307] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01618_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01618_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c80)) returned 1 [0267.308] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0267.308] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0267.308] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0267.308] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1526, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="HH01759_.WMF", cAlternateFileName="")) returned 1 [0267.308] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0267.308] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0267.308] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0267.309] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0267.309] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0267.309] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0267.310] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01759_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01759_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0267.310] GetFileType (hFile=0x21c) returned 0x1 [0267.311] CloseHandle (hObject=0x21c) returned 1 [0267.311] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0267.311] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01759_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01759_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1526)) returned 1 [0267.312] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0267.312] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0267.312] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01759_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01759_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1526)) returned 1 [0267.312] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0267.312] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0267.312] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0267.313] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa38, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="HH01875_.WMF", cAlternateFileName="")) returned 1 [0267.313] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0267.313] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0267.313] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0267.313] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0267.313] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0267.314] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0267.314] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01875_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01875_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0267.315] GetFileType (hFile=0x21c) returned 0x1 [0267.316] CloseHandle (hObject=0x21c) returned 1 [0267.317] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0267.317] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01875_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01875_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa38)) returned 1 [0267.317] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0267.317] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0267.317] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01875_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01875_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa38)) returned 1 [0267.318] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0267.318] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0267.318] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0267.318] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6852, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="HH01923_.WMF", cAlternateFileName="")) returned 1 [0267.318] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0267.318] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0267.319] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0267.319] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0267.319] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0267.319] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0267.320] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01923_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01923_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0267.320] GetFileType (hFile=0x21c) returned 0x1 [0267.321] CloseHandle (hObject=0x21c) returned 1 [0267.321] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0267.322] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01923_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01923_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6852)) returned 1 [0267.322] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0267.322] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0267.322] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01923_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01923_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6852)) returned 1 [0267.322] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0267.323] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0267.323] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0267.323] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa90, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="HH02155_.WMF", cAlternateFileName="")) returned 1 [0267.323] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0267.323] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0267.323] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0267.323] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0267.323] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0267.323] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0267.324] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02155_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02155_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0267.324] GetFileType (hFile=0x21c) returned 0x1 [0267.325] CloseHandle (hObject=0x21c) returned 1 [0267.325] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0267.326] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02155_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02155_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa90)) returned 1 [0267.326] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0267.326] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0267.326] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02155_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02155_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa90)) returned 1 [0267.326] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0267.326] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0267.327] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0267.327] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x52c, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="HH02166_.WMF", cAlternateFileName="")) returned 1 [0267.327] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0267.327] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0267.327] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0267.327] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0267.327] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0267.328] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0267.328] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02166_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02166_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0267.329] GetFileType (hFile=0x21c) returned 0x1 [0267.329] CloseHandle (hObject=0x21c) returned 1 [0267.330] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0267.330] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02166_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02166_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x52c)) returned 1 [0267.330] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0267.330] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0267.330] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02166_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02166_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x52c)) returned 1 [0267.330] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0267.330] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0267.331] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0267.331] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1efc, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="HH02282_.WMF", cAlternateFileName="")) returned 1 [0267.331] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0267.331] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0267.331] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0267.331] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0267.331] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0267.331] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0267.354] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02282_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02282_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0267.355] GetFileType (hFile=0x21c) returned 0x1 [0267.355] CloseHandle (hObject=0x21c) returned 1 [0267.356] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0267.356] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02282_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02282_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1efc)) returned 1 [0267.356] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0267.357] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0267.357] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02282_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02282_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1efc)) returned 1 [0267.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0267.357] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0267.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0267.357] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15b0, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="HH02298_.WMF", cAlternateFileName="")) returned 1 [0267.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0267.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0267.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0267.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0267.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0267.360] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0267.361] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02298_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02298_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0267.362] GetFileType (hFile=0x21c) returned 0x1 [0267.743] CloseHandle (hObject=0x21c) returned 1 [0267.744] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0267.744] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02298_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02298_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15b0)) returned 1 [0267.744] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0267.744] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0267.744] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02298_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02298_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15b0)) returned 1 [0267.745] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0267.745] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0267.745] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0267.745] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x136a, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="HH02312_.WMF", cAlternateFileName="")) returned 1 [0267.745] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0267.745] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0267.746] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0267.746] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0267.746] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0267.746] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0267.747] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02312_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02312_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0267.747] GetFileType (hFile=0x21c) returned 0x1 [0267.748] CloseHandle (hObject=0x21c) returned 1 [0267.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0267.749] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02312_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02312_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x136a)) returned 1 [0267.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0267.749] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0267.749] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02312_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02312_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x136a)) returned 1 [0267.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0267.749] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0267.750] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0267.750] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc0a, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="HH02313_.WMF", cAlternateFileName="")) returned 1 [0267.750] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0267.750] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0267.750] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0267.750] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0267.750] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0267.750] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0267.751] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02313_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02313_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0267.752] GetFileType (hFile=0x21c) returned 0x1 [0267.752] CloseHandle (hObject=0x21c) returned 1 [0267.753] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0267.753] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02313_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02313_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc0a)) returned 1 [0267.753] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0267.753] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0267.753] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02313_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02313_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc0a)) returned 1 [0267.754] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0267.754] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0267.754] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0267.754] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5b04, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="HM00005_.WMF", cAlternateFileName="")) returned 1 [0267.754] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0267.754] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0267.754] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0267.754] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0267.755] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0267.755] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0267.755] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00005_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00005_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0267.756] GetFileType (hFile=0x21c) returned 0x1 [0267.756] CloseHandle (hObject=0x21c) returned 1 [0267.756] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0267.757] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00005_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00005_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5b04)) returned 1 [0267.757] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0267.757] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0267.757] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00005_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00005_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5b04)) returned 1 [0267.757] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0267.757] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0267.757] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0267.757] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5664, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="HM00114_.WMF", cAlternateFileName="")) returned 1 [0267.758] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0267.758] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0267.758] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0267.758] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0267.758] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0267.758] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0267.759] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00114_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00114_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0267.759] GetFileType (hFile=0x21c) returned 0x1 [0267.760] CloseHandle (hObject=0x21c) returned 1 [0267.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0267.763] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00114_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00114_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5664)) returned 1 [0267.763] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0267.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0267.764] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00114_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00114_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5664)) returned 1 [0267.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0267.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0267.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0267.764] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3dec, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="HM00116_.WMF", cAlternateFileName="")) returned 1 [0267.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0267.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0267.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0267.765] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0267.765] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0267.765] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0267.765] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00116_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00116_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0267.766] GetFileType (hFile=0x21c) returned 0x1 [0267.766] CloseHandle (hObject=0x21c) returned 1 [0267.767] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0267.767] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00116_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00116_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3dec)) returned 1 [0267.767] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0267.767] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0267.767] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00116_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00116_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3dec)) returned 1 [0267.767] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0267.767] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0267.767] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0267.768] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb10, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="HM00172_.WMF", cAlternateFileName="")) returned 1 [0267.768] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0267.768] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0267.768] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0267.768] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0267.768] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0267.768] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0267.770] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00172_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0267.770] GetFileType (hFile=0x21c) returned 0x1 [0267.771] CloseHandle (hObject=0x21c) returned 1 [0267.771] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0267.771] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00172_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb10)) returned 1 [0267.771] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0267.772] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0267.772] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00172_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb10)) returned 1 [0267.772] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0267.772] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0267.772] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0267.772] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10ca8, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="HM00426_.WMF", cAlternateFileName="")) returned 1 [0267.772] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0267.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0267.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0267.773] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0267.773] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0267.773] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0267.774] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00426_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00426_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0267.774] GetFileType (hFile=0x21c) returned 0x1 [0267.775] CloseHandle (hObject=0x21c) returned 1 [0267.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0267.775] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00426_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00426_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10ca8)) returned 1 [0267.776] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0267.776] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0267.776] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00426_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00426_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10ca8)) returned 1 [0267.776] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0267.776] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0267.776] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0267.776] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c0a, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="HTECH_01.MID", cAlternateFileName="")) returned 1 [0267.777] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0267.777] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0267.777] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0267.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0267.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0267.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0267.778] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HTECH_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\htech_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0267.778] GetFileType (hFile=0x21c) returned 0x1 [0267.779] CloseHandle (hObject=0x21c) returned 1 [0267.779] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0267.779] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HTECH_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\htech_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c0a)) returned 1 [0267.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0267.779] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0267.779] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HTECH_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\htech_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c0a)) returned 1 [0267.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0267.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0267.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0267.780] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x486, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="IN00046_.WMF", cAlternateFileName="")) returned 1 [0267.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0267.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0267.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0267.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0267.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0267.781] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0267.781] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00046_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00046_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0267.781] GetFileType (hFile=0x21c) returned 0x1 [0267.782] CloseHandle (hObject=0x21c) returned 1 [0267.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0267.782] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00046_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00046_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x486)) returned 1 [0267.783] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0267.783] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0267.783] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00046_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00046_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x486)) returned 1 [0267.783] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0267.783] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0267.783] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0267.783] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x318, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="IN00118_.WMF", cAlternateFileName="")) returned 1 [0267.783] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0267.784] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0267.784] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0267.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0267.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0267.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0268.025] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00118_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00118_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0268.025] GetFileType (hFile=0x21c) returned 0x1 [0268.025] CloseHandle (hObject=0x21c) returned 1 [0268.026] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0268.026] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00118_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00118_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x318)) returned 1 [0268.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0268.026] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0268.027] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00118_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00118_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x318)) returned 1 [0268.027] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0268.027] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0268.027] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0268.027] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x432, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="IN00177_.WMF", cAlternateFileName="")) returned 1 [0268.027] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0268.027] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0268.027] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0268.028] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0268.028] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0268.028] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0268.210] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00177_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00177_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0268.210] GetFileType (hFile=0x21c) returned 0x1 [0268.210] CloseHandle (hObject=0x21c) returned 1 [0268.211] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0268.211] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00177_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00177_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x432)) returned 1 [0268.212] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0268.212] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0268.212] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00177_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00177_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x432)) returned 1 [0268.212] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0268.212] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0268.212] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0268.213] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x738, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="IN00204_.WMF", cAlternateFileName="")) returned 1 [0268.213] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0268.213] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0268.213] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0268.213] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0268.213] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0268.213] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0268.213] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00204_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00204_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0268.214] GetFileType (hFile=0x21c) returned 0x1 [0268.214] CloseHandle (hObject=0x21c) returned 1 [0268.215] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0268.215] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00204_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00204_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x738)) returned 1 [0268.215] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0268.215] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0268.215] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00204_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00204_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x738)) returned 1 [0268.216] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0268.216] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0268.216] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0268.216] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2bb6, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="IN00233_.WMF", cAlternateFileName="")) returned 1 [0268.216] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0268.216] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0268.216] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0268.216] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0268.216] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0268.216] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0268.218] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00233_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00233_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0268.218] GetFileType (hFile=0x21c) returned 0x1 [0268.219] CloseHandle (hObject=0x21c) returned 1 [0268.219] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0268.219] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00233_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00233_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2bb6)) returned 1 [0268.219] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0268.219] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0268.219] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00233_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00233_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2bb6)) returned 1 [0268.219] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0268.220] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0268.220] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0268.220] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x764, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="IN00343_.WMF", cAlternateFileName="")) returned 1 [0268.220] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0268.220] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0268.220] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0268.220] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0268.220] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0268.220] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0268.221] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00343_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00343_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0268.221] GetFileType (hFile=0x21c) returned 0x1 [0268.221] CloseHandle (hObject=0x21c) returned 1 [0268.222] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0268.222] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00343_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00343_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x764)) returned 1 [0268.222] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0268.222] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0268.222] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00343_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00343_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x764)) returned 1 [0268.222] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0268.222] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0268.223] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0268.223] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b8, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="IN00346_.WMF", cAlternateFileName="")) returned 1 [0268.223] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0268.223] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0268.223] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0268.223] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0268.223] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0268.223] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0268.224] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00346_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00346_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0268.224] GetFileType (hFile=0x21c) returned 0x1 [0268.224] CloseHandle (hObject=0x21c) returned 1 [0268.225] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0268.225] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00346_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00346_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b8)) returned 1 [0268.225] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0268.225] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0268.225] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00346_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00346_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b8)) returned 1 [0268.225] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0268.225] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0268.225] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0268.225] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x788, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="IN00351_.WMF", cAlternateFileName="")) returned 1 [0268.226] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0268.226] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0268.226] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0268.226] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0268.226] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0268.226] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0268.227] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00351_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00351_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0268.227] GetFileType (hFile=0x21c) returned 0x1 [0268.228] CloseHandle (hObject=0x21c) returned 1 [0268.228] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0268.228] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00351_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00351_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x788)) returned 1 [0268.228] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0268.228] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0268.228] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00351_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00351_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x788)) returned 1 [0268.229] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0268.229] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0268.229] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0268.229] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x23d4, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="IN00557_.WMF", cAlternateFileName="")) returned 1 [0268.229] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0268.229] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0268.229] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0268.229] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0268.229] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0268.229] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0268.230] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00557_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00557_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0268.230] GetFileType (hFile=0x21c) returned 0x1 [0268.231] CloseHandle (hObject=0x21c) returned 1 [0268.231] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0268.231] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00557_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00557_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x23d4)) returned 1 [0268.232] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0268.232] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0268.232] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00557_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00557_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x23d4)) returned 1 [0268.232] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0268.232] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0268.232] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0268.232] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe00f20a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31cc, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="IN00915_.WMF", cAlternateFileName="")) returned 1 [0268.232] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0268.232] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0268.232] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0268.232] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0268.233] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0268.233] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0268.233] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00915_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00915_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0268.234] GetFileType (hFile=0x21c) returned 0x1 [0268.234] CloseHandle (hObject=0x21c) returned 1 [0268.235] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0268.235] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00915_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00915_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe00f20a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31cc)) returned 1 [0268.235] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0268.235] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0268.235] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00915_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00915_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe00f20a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31cc)) returned 1 [0268.235] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0268.236] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0268.236] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0268.236] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe00f20a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b08, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="IN00919_.WMF", cAlternateFileName="")) returned 1 [0268.236] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0268.236] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0268.236] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0268.236] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0268.236] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0268.237] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0268.237] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00919_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00919_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0268.238] GetFileType (hFile=0x21c) returned 0x1 [0268.238] CloseHandle (hObject=0x21c) returned 1 [0268.239] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0268.239] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00919_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00919_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe00f20a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b08)) returned 1 [0268.239] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0268.239] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0268.239] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00919_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00919_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe00f20a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b08)) returned 1 [0268.239] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0268.239] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0268.240] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0268.240] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e8, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="IN00956_.WMF", cAlternateFileName="")) returned 1 [0268.240] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0268.240] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0268.240] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0268.240] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0268.240] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0268.240] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0268.241] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00956_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00956_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0268.241] GetFileType (hFile=0x21c) returned 0x1 [0268.242] CloseHandle (hObject=0x21c) returned 1 [0268.242] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0268.242] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00956_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00956_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e8)) returned 1 [0268.473] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0268.474] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0268.474] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00956_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00956_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e8)) returned 1 [0268.474] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0268.474] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0268.474] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0268.474] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe00f20a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb80, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="IN00957_.WMF", cAlternateFileName="")) returned 1 [0268.474] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0268.474] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0268.475] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0268.475] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0268.475] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0268.475] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0268.634] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00957_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00957_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0268.634] GetFileType (hFile=0x21c) returned 0x1 [0268.635] CloseHandle (hObject=0x21c) returned 1 [0268.635] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0268.635] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00957_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00957_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe00f20a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb80)) returned 1 [0268.636] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0268.636] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0268.636] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00957_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00957_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe00f20a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb80)) returned 1 [0268.636] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0268.636] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0268.636] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0268.637] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe00f20a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2178, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="INDST_01.MID", cAlternateFileName="")) returned 1 [0268.637] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0268.637] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0268.637] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0268.637] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0268.637] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0268.637] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0268.638] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\INDST_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\indst_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0268.639] GetFileType (hFile=0x21c) returned 0x1 [0268.639] CloseHandle (hObject=0x21c) returned 1 [0268.639] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0268.640] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\INDST_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\indst_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe00f20a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2178)) returned 1 [0268.640] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0268.640] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0268.640] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\INDST_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\indst_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe00f20a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2178)) returned 1 [0268.640] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0268.640] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0268.640] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0268.640] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe00f20a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c4, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0075478.GIF", cAlternateFileName="")) returned 1 [0268.641] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0268.641] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0268.641] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0268.641] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0268.641] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0268.641] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0268.642] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0075478.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0075478.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0268.642] GetFileType (hFile=0x21c) returned 0x1 [0268.642] CloseHandle (hObject=0x21c) returned 1 [0268.643] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0268.643] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0075478.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0075478.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe00f20a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c4)) returned 1 [0268.643] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0268.643] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0268.643] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0075478.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0075478.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe00f20a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c4)) returned 1 [0268.644] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0268.644] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0268.644] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0268.644] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2606, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0086384.WMF", cAlternateFileName="")) returned 1 [0268.644] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0268.644] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0268.644] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0268.644] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0268.644] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0268.644] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0268.645] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086384.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086384.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0268.645] GetFileType (hFile=0x21c) returned 0x1 [0268.646] CloseHandle (hObject=0x21c) returned 1 [0268.646] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0268.646] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086384.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086384.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2606)) returned 1 [0268.646] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0268.646] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0268.646] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086384.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086384.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2606)) returned 1 [0268.647] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0268.647] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0268.647] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0268.647] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x257c, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0086420.WMF", cAlternateFileName="")) returned 1 [0268.647] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0268.647] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0268.647] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0268.647] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0268.648] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0268.648] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0268.648] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086420.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086420.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0268.649] GetFileType (hFile=0x21c) returned 0x1 [0268.649] CloseHandle (hObject=0x21c) returned 1 [0268.650] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0268.650] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086420.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086420.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x257c)) returned 1 [0268.650] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0268.650] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0268.650] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086420.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086420.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x257c)) returned 1 [0268.650] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0268.650] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0268.651] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0268.651] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4278, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0086424.WMF", cAlternateFileName="")) returned 1 [0268.651] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0268.651] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0268.651] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0268.651] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0268.651] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0268.651] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0268.652] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086424.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086424.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0268.652] GetFileType (hFile=0x21c) returned 0x1 [0268.652] CloseHandle (hObject=0x21c) returned 1 [0268.653] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0268.653] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086424.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086424.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4278)) returned 1 [0268.653] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0268.653] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0268.653] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086424.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086424.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4278)) returned 1 [0268.653] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0268.653] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0268.653] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0268.653] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5516, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0086426.WMF", cAlternateFileName="")) returned 1 [0268.654] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0268.654] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0268.654] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0268.654] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0268.654] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0268.654] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0268.654] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086426.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086426.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0268.655] GetFileType (hFile=0x21c) returned 0x1 [0268.655] CloseHandle (hObject=0x21c) returned 1 [0268.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0268.655] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086426.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086426.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5516)) returned 1 [0268.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0268.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0268.656] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086426.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086426.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5516)) returned 1 [0268.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0268.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0268.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0268.656] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8a12, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0086428.WMF", cAlternateFileName="")) returned 1 [0268.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0268.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0268.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0268.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0268.657] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0268.657] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0268.657] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086428.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086428.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0268.657] GetFileType (hFile=0x21c) returned 0x1 [0268.658] CloseHandle (hObject=0x21c) returned 1 [0268.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0268.658] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086428.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086428.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8a12)) returned 1 [0268.658] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0268.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0268.659] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086428.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086428.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8a12)) returned 1 [0268.659] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0268.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0268.659] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0268.659] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x829a, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0086432.WMF", cAlternateFileName="")) returned 1 [0268.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0268.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0268.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0268.659] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0268.659] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0268.659] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0268.660] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086432.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086432.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0268.660] GetFileType (hFile=0x21c) returned 0x1 [0268.660] CloseHandle (hObject=0x21c) returned 1 [0268.661] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0268.661] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086432.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086432.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x829a)) returned 1 [0268.661] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0268.661] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0268.661] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086432.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086432.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x829a)) returned 1 [0268.662] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0268.662] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0268.662] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0268.662] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x375e, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0086478.WMF", cAlternateFileName="")) returned 1 [0268.662] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0268.662] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0268.662] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0268.662] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0268.662] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0268.663] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0268.663] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086478.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086478.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0268.663] GetFileType (hFile=0x21c) returned 0x1 [0268.664] CloseHandle (hObject=0x21c) returned 1 [0268.665] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0268.665] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086478.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086478.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x375e)) returned 1 [0268.665] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0268.665] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0268.665] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086478.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086478.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x375e)) returned 1 [0268.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0268.666] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0268.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0268.666] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4dba, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0089945.WMF", cAlternateFileName="")) returned 1 [0268.666] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0268.666] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0268.666] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0268.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0268.667] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0268.667] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0268.667] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089945.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0089945.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0268.668] GetFileType (hFile=0x21c) returned 0x1 [0268.668] CloseHandle (hObject=0x21c) returned 1 [0268.669] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0268.669] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089945.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0089945.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4dba)) returned 1 [0268.669] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0268.669] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0268.669] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089945.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0089945.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4dba)) returned 1 [0268.669] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0268.669] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0268.670] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0268.670] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d40, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0089992.WMF", cAlternateFileName="")) returned 1 [0268.670] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0268.670] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0268.670] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0268.670] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0268.670] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0268.670] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0268.671] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089992.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0089992.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0268.671] GetFileType (hFile=0x21c) returned 0x1 [0268.672] CloseHandle (hObject=0x21c) returned 1 [0268.672] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0268.672] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089992.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0089992.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d40)) returned 1 [0268.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0268.673] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0268.673] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089992.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0089992.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d40)) returned 1 [0268.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0268.673] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0268.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0268.673] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5314, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0090027.WMF", cAlternateFileName="")) returned 1 [0268.674] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0268.674] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0268.674] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0268.674] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0268.674] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0268.674] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0268.675] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090027.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090027.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0268.675] GetFileType (hFile=0x21c) returned 0x1 [0268.676] CloseHandle (hObject=0x21c) returned 1 [0268.676] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0268.676] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090027.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090027.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5314)) returned 1 [0268.676] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0268.677] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0268.677] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090027.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090027.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5314)) returned 1 [0268.677] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0268.677] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0268.677] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0268.677] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb758, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0090087.WMF", cAlternateFileName="")) returned 1 [0268.677] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0268.677] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0268.678] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0268.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0268.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0268.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0268.679] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090087.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090087.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0268.679] GetFileType (hFile=0x21c) returned 0x1 [0268.679] CloseHandle (hObject=0x21c) returned 1 [0269.025] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0269.025] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090087.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090087.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb758)) returned 1 [0269.025] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0269.025] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0269.025] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090087.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090087.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb758)) returned 1 [0269.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0269.026] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0269.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0269.026] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d90, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0090089.WMF", cAlternateFileName="")) returned 1 [0269.026] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0269.026] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0269.026] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0269.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0269.027] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0269.027] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0269.027] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090089.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090089.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0269.028] GetFileType (hFile=0x174) returned 0x1 [0269.028] CloseHandle (hObject=0x174) returned 1 [0269.028] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0269.029] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090089.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090089.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d90)) returned 1 [0269.029] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0269.029] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0269.029] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090089.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090089.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d90)) returned 1 [0269.029] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0269.029] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0269.029] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0269.030] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6e34, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0090149.WMF", cAlternateFileName="")) returned 1 [0269.030] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0269.030] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0269.030] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0269.030] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0269.030] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0269.030] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0269.031] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090149.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090149.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0269.031] GetFileType (hFile=0x174) returned 0x1 [0269.032] CloseHandle (hObject=0x174) returned 1 [0269.032] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0269.032] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090149.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090149.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6e34)) returned 1 [0269.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0269.032] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0269.032] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090149.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090149.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6e34)) returned 1 [0269.033] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0269.033] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0269.033] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0269.033] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x44e6, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0090390.WMF", cAlternateFileName="")) returned 1 [0269.033] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0269.033] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0269.033] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0269.033] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0269.033] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0269.033] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0269.034] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090390.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090390.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0269.034] GetFileType (hFile=0x174) returned 0x1 [0269.035] CloseHandle (hObject=0x174) returned 1 [0269.035] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0269.035] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090390.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090390.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x44e6)) returned 1 [0269.035] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0269.036] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0269.036] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090390.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090390.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x44e6)) returned 1 [0269.036] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0269.036] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0269.036] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0269.036] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd04, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0090777.WMF", cAlternateFileName="")) returned 1 [0269.036] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0269.036] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0269.037] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0269.037] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0269.037] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0269.037] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0269.038] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090777.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090777.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0269.038] GetFileType (hFile=0x174) returned 0x1 [0269.039] CloseHandle (hObject=0x174) returned 1 [0269.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0269.040] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090777.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090777.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd04)) returned 1 [0269.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0269.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0269.040] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090777.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090777.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd04)) returned 1 [0269.041] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0269.041] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0269.041] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0269.041] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5b0, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0090779.WMF", cAlternateFileName="")) returned 1 [0269.041] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0269.041] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0269.041] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0269.042] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0269.042] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0269.042] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0269.043] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090779.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090779.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0269.043] GetFileType (hFile=0x174) returned 0x1 [0269.044] CloseHandle (hObject=0x174) returned 1 [0269.044] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0269.044] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090779.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090779.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5b0)) returned 1 [0269.045] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0269.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0269.045] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090779.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090779.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5b0)) returned 1 [0269.045] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0269.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0269.045] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0269.045] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14c2, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0090781.WMF", cAlternateFileName="")) returned 1 [0269.046] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0269.046] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0269.046] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0269.046] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0269.046] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0269.046] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0269.047] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090781.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090781.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0269.048] GetFileType (hFile=0x174) returned 0x1 [0269.048] CloseHandle (hObject=0x174) returned 1 [0269.049] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0269.049] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090781.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090781.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14c2)) returned 1 [0269.049] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0269.049] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0269.050] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090781.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090781.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14c2)) returned 1 [0269.050] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0269.050] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0269.050] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0269.050] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b16, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0090783.WMF", cAlternateFileName="")) returned 1 [0269.050] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0269.051] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0269.051] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0269.051] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0269.051] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0269.051] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0269.052] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090783.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090783.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0269.276] GetFileType (hFile=0x21c) returned 0x1 [0269.276] CloseHandle (hObject=0x21c) returned 1 [0269.277] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0269.277] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090783.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090783.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b16)) returned 1 [0269.277] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0269.277] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0269.277] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090783.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090783.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b16)) returned 1 [0269.278] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0269.278] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0269.278] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0269.278] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa442, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0093905.WMF", cAlternateFileName="")) returned 1 [0269.278] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0269.278] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0269.279] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0269.279] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0269.279] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0269.279] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0269.280] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0093905.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0093905.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0269.280] GetFileType (hFile=0x21c) returned 0x1 [0269.281] CloseHandle (hObject=0x21c) returned 1 [0269.281] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0269.281] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0093905.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0093905.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa442)) returned 1 [0269.282] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0269.282] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0269.282] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0093905.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0093905.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa442)) returned 1 [0269.282] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0269.282] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0269.282] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0269.282] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x136a, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0098497.WMF", cAlternateFileName="")) returned 1 [0269.283] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0269.283] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0269.283] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0269.283] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0269.283] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0269.283] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0269.284] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0098497.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0098497.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0269.284] GetFileType (hFile=0x21c) returned 0x1 [0269.285] CloseHandle (hObject=0x21c) returned 1 [0269.285] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0269.286] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0098497.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0098497.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x136a)) returned 1 [0269.286] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0269.286] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0269.286] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0098497.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0098497.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x136a)) returned 1 [0269.286] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0269.287] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0269.287] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0269.287] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x60b7, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0099145.JPG", cAlternateFileName="")) returned 1 [0269.287] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0269.287] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0269.287] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0269.287] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0269.288] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0269.288] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0269.289] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099145.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099145.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0269.289] GetFileType (hFile=0x21c) returned 0x1 [0269.290] CloseHandle (hObject=0x21c) returned 1 [0269.290] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0269.291] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099145.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099145.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x60b7)) returned 1 [0269.291] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0269.291] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0269.291] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099145.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099145.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x60b7)) returned 1 [0269.291] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0269.291] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0269.292] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0269.292] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x40d4, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0099146.WMF", cAlternateFileName="")) returned 1 [0269.292] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0269.292] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0269.292] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0269.292] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0269.292] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0269.293] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0269.293] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099146.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0269.294] GetFileType (hFile=0x21c) returned 0x1 [0269.294] CloseHandle (hObject=0x21c) returned 1 [0269.295] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0269.295] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099146.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x40d4)) returned 1 [0269.295] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0269.295] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0269.295] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099146.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x40d4)) returned 1 [0269.296] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0269.296] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0269.296] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0269.296] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5f39, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0099147.JPG", cAlternateFileName="")) returned 1 [0269.296] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0269.296] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0269.297] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0269.297] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0269.297] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0269.297] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0269.298] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099147.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099147.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0269.298] GetFileType (hFile=0x21c) returned 0x1 [0269.299] CloseHandle (hObject=0x21c) returned 1 [0269.299] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0269.300] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099147.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099147.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5f39)) returned 1 [0269.300] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0269.300] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0269.300] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099147.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099147.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5f39)) returned 1 [0269.300] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0269.300] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0269.301] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0269.301] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4752, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0099148.JPG", cAlternateFileName="")) returned 1 [0269.301] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0269.301] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0269.301] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0269.301] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0269.301] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0269.301] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0269.302] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099148.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099148.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0269.303] GetFileType (hFile=0x21c) returned 0x1 [0269.303] CloseHandle (hObject=0x21c) returned 1 [0269.303] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0269.304] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099148.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099148.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4752)) returned 1 [0269.304] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0269.304] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0269.304] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099148.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099148.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4752)) returned 1 [0269.304] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0269.304] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0269.304] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0269.305] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11dfe, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0099149.WMF", cAlternateFileName="")) returned 1 [0269.305] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0269.305] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0269.306] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0269.306] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0269.306] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0269.306] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0269.307] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099149.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099149.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0269.307] GetFileType (hFile=0x21c) returned 0x1 [0269.308] CloseHandle (hObject=0x21c) returned 1 [0269.308] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0269.308] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099149.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099149.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11dfe)) returned 1 [0269.308] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0269.309] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0269.309] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099149.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099149.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11dfe)) returned 1 [0269.309] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0269.309] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0269.309] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0269.309] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x559a, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0099150.JPG", cAlternateFileName="")) returned 1 [0269.309] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0269.310] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0269.310] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0269.310] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0269.310] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0269.310] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0269.311] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099150.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0269.311] GetFileType (hFile=0x21c) returned 0x1 [0269.312] CloseHandle (hObject=0x21c) returned 1 [0269.312] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0269.312] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099150.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x559a)) returned 1 [0269.313] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0269.313] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0269.313] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099150.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x559a)) returned 1 [0269.313] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0269.313] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0269.313] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0269.313] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x65e6, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0099151.WMF", cAlternateFileName="")) returned 1 [0269.314] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0269.314] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0269.314] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0269.314] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0269.314] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0269.314] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0269.315] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099151.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0269.315] GetFileType (hFile=0x21c) returned 0x1 [0269.316] CloseHandle (hObject=0x21c) returned 1 [0269.316] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0269.316] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099151.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x65e6)) returned 1 [0269.317] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0269.317] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0269.317] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099151.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x65e6)) returned 1 [0269.317] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0269.317] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0269.317] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0269.318] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2dae, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0099152.JPG", cAlternateFileName="")) returned 1 [0269.318] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0269.318] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0269.318] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0269.318] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0269.318] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0269.318] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0269.319] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099152.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0269.320] GetFileType (hFile=0x21c) returned 0x1 [0269.650] CloseHandle (hObject=0x21c) returned 1 [0269.651] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0269.651] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099152.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2dae)) returned 1 [0269.651] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0269.651] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0269.652] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099152.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2dae)) returned 1 [0269.652] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0269.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0269.652] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0269.652] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3632, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0099153.WMF", cAlternateFileName="")) returned 1 [0269.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0269.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0269.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0269.653] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0269.653] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0269.653] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0269.654] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099153.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0269.699] GetFileType (hFile=0x198) returned 0x1 [0269.699] CloseHandle (hObject=0x198) returned 1 [0269.700] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0269.700] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099153.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3632)) returned 1 [0269.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0269.701] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0269.701] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099153.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3632)) returned 1 [0269.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0269.703] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0269.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0269.703] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b11, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0099154.JPG", cAlternateFileName="")) returned 1 [0269.703] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0269.704] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0269.704] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0269.704] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0269.704] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0269.704] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0269.962] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099154.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0269.963] GetFileType (hFile=0x198) returned 0x1 [0269.963] CloseHandle (hObject=0x198) returned 1 [0269.964] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0269.964] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099154.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b11)) returned 1 [0269.965] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0269.965] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0269.965] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099154.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b11)) returned 1 [0269.965] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0269.965] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0269.965] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0269.965] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x227a, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0099155.JPG", cAlternateFileName="")) returned 1 [0269.965] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0269.966] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0269.966] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0269.966] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0269.966] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0269.966] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0269.967] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099155.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0269.967] GetFileType (hFile=0x198) returned 0x1 [0269.968] CloseHandle (hObject=0x198) returned 1 [0269.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0269.969] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099155.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x227a)) returned 1 [0269.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0269.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0269.970] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099155.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x227a)) returned 1 [0269.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0269.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0269.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0269.970] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3682, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0099156.JPG", cAlternateFileName="")) returned 1 [0269.971] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0269.971] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0269.971] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0269.971] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0269.971] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0269.971] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0269.972] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099156.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0269.973] GetFileType (hFile=0x198) returned 0x1 [0269.974] CloseHandle (hObject=0x198) returned 1 [0269.974] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0269.974] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099156.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3682)) returned 1 [0269.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0269.975] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0269.975] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099156.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3682)) returned 1 [0269.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0269.975] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0269.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0269.976] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x25c7, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0099157.JPG", cAlternateFileName="")) returned 1 [0269.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0269.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0269.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0269.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0269.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0269.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0269.979] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099157.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0269.979] GetFileType (hFile=0x198) returned 0x1 [0269.980] CloseHandle (hObject=0x198) returned 1 [0269.981] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0269.981] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099157.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x25c7)) returned 1 [0269.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0269.981] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0269.981] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099157.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x25c7)) returned 1 [0269.982] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0269.982] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0269.982] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0269.982] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6630, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0099158.WMF", cAlternateFileName="")) returned 1 [0269.983] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0269.983] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0269.983] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0269.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0269.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0269.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0269.984] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099158.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0269.985] GetFileType (hFile=0x198) returned 0x1 [0269.985] CloseHandle (hObject=0x198) returned 1 [0269.986] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0269.986] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099158.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6630)) returned 1 [0269.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0269.987] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0269.987] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099158.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6630)) returned 1 [0269.987] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0269.987] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0269.987] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0269.987] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6b9a, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0099159.WMF", cAlternateFileName="")) returned 1 [0269.988] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0269.988] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0269.988] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0269.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0269.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0269.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0269.989] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099159.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0269.990] GetFileType (hFile=0x198) returned 0x1 [0269.990] CloseHandle (hObject=0x198) returned 1 [0269.991] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0269.991] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099159.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6b9a)) returned 1 [0269.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0269.992] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0269.992] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099159.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6b9a)) returned 1 [0269.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0270.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0270.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0270.040] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b29, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0099160.JPG", cAlternateFileName="")) returned 1 [0270.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0270.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0270.041] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0270.041] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0270.041] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0270.041] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0270.042] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099160.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0270.043] GetFileType (hFile=0x198) returned 0x1 [0270.044] CloseHandle (hObject=0x198) returned 1 [0270.044] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0270.044] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099160.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b29)) returned 1 [0270.045] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0270.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0270.045] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099160.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b29)) returned 1 [0270.045] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0270.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0270.046] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0270.046] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bf2, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0099161.JPG", cAlternateFileName="")) returned 1 [0270.046] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0270.046] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0270.046] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0270.046] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0270.046] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0270.047] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0270.047] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099161.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0270.048] GetFileType (hFile=0x198) returned 0x1 [0270.048] CloseHandle (hObject=0x198) returned 1 [0270.049] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0270.049] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099161.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bf2)) returned 1 [0270.049] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0270.050] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0270.050] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099161.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bf2)) returned 1 [0270.050] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0270.050] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0270.050] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0270.050] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4cc8, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0099162.JPG", cAlternateFileName="")) returned 1 [0270.051] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0270.051] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0270.051] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0270.051] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0270.051] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0270.051] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0270.052] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099162.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0270.053] GetFileType (hFile=0x198) returned 0x1 [0270.053] CloseHandle (hObject=0x198) returned 1 [0270.054] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0270.054] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099162.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4cc8)) returned 1 [0270.054] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0270.054] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0270.055] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099162.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4cc8)) returned 1 [0270.430] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0270.430] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0270.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0270.431] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5754, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0099163.WMF", cAlternateFileName="")) returned 1 [0270.431] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0270.431] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0270.431] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0270.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0270.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0270.432] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0270.540] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099163.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0270.541] GetFileType (hFile=0x174) returned 0x1 [0270.541] CloseHandle (hObject=0x174) returned 1 [0270.542] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0270.542] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099163.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5754)) returned 1 [0270.542] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0270.542] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0270.543] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099163.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5754)) returned 1 [0270.543] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0270.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0270.543] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0270.543] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x55ba, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0099164.WMF", cAlternateFileName="")) returned 1 [0270.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0270.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0270.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0270.544] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0270.544] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0270.544] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0270.545] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099164.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0270.545] GetFileType (hFile=0x174) returned 0x1 [0270.546] CloseHandle (hObject=0x174) returned 1 [0270.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0270.547] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099164.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x55ba)) returned 1 [0270.547] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0270.547] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0270.547] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099164.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x55ba)) returned 1 [0270.547] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0270.547] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0270.548] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0270.548] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc53a, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0099165.JPG", cAlternateFileName="")) returned 1 [0270.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0270.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0270.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0270.548] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0270.548] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0270.549] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0270.549] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099165.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0270.550] GetFileType (hFile=0x174) returned 0x1 [0270.550] CloseHandle (hObject=0x174) returned 1 [0270.551] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0270.551] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099165.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc53a)) returned 1 [0270.551] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0270.551] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0270.552] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099165.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc53a)) returned 1 [0270.552] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0270.552] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0270.552] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0270.552] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfcff, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0099166.JPG", cAlternateFileName="")) returned 1 [0270.552] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0270.552] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0270.552] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0270.553] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0270.553] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0270.553] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0270.553] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099166.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0270.554] GetFileType (hFile=0x174) returned 0x1 [0270.554] CloseHandle (hObject=0x174) returned 1 [0270.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0270.555] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099166.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfcff)) returned 1 [0270.555] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0270.555] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0270.555] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099166.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfcff)) returned 1 [0270.556] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0270.556] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0270.556] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0270.556] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xabad, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0099167.JPG", cAlternateFileName="")) returned 1 [0270.556] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0270.556] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0270.556] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0270.556] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0270.556] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0270.557] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0270.557] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099167.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0270.558] GetFileType (hFile=0x174) returned 0x1 [0270.558] CloseHandle (hObject=0x174) returned 1 [0270.558] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0270.559] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099167.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xabad)) returned 1 [0270.559] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0270.559] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0270.559] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099167.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xabad)) returned 1 [0270.559] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0270.559] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0270.560] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0270.560] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ed3, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0099168.JPG", cAlternateFileName="")) returned 1 [0270.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0270.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0270.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0270.560] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0270.560] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0270.561] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0270.561] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099168.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0270.562] GetFileType (hFile=0x174) returned 0x1 [0270.562] CloseHandle (hObject=0x174) returned 1 [0270.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0270.563] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099168.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ed3)) returned 1 [0270.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0270.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0270.563] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099168.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ed3)) returned 1 [0270.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0270.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0270.564] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0270.564] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27d0, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0099169.WMF", cAlternateFileName="")) returned 1 [0270.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0270.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0270.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0270.564] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0270.564] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0270.565] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0270.565] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099169.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099169.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0270.566] GetFileType (hFile=0x174) returned 0x1 [0270.566] CloseHandle (hObject=0x174) returned 1 [0270.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0270.567] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099169.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099169.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27d0)) returned 1 [0270.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0270.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0270.567] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099169.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099169.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27d0)) returned 1 [0270.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0270.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0270.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0270.568] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5ee4, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0099170.WMF", cAlternateFileName="")) returned 1 [0270.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0270.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0270.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0270.569] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0270.569] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0270.569] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0270.570] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099170.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0270.570] GetFileType (hFile=0x174) returned 0x1 [0270.571] CloseHandle (hObject=0x174) returned 1 [0270.572] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0270.572] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099170.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5ee4)) returned 1 [0270.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0270.572] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0270.573] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099170.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5ee4)) returned 1 [0270.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0270.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0270.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0270.573] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2232, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0099171.WMF", cAlternateFileName="")) returned 1 [0270.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0270.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0270.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0270.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0270.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0270.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0270.575] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099171.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099171.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0270.575] GetFileType (hFile=0x174) returned 0x1 [0270.576] CloseHandle (hObject=0x174) returned 1 [0270.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0270.576] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099171.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099171.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2232)) returned 1 [0270.576] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0270.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0270.577] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099171.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099171.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2232)) returned 1 [0270.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0270.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0270.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0270.577] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe392, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0099172.WMF", cAlternateFileName="")) returned 1 [0270.578] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0270.578] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0270.578] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0270.578] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0270.578] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0270.578] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0270.579] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099172.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099172.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0270.579] GetFileType (hFile=0x174) returned 0x1 [0270.580] CloseHandle (hObject=0x174) returned 1 [0270.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0270.581] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099172.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099172.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe392)) returned 1 [0270.581] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0270.581] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0270.581] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099172.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099172.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe392)) returned 1 [0270.581] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0270.582] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0270.582] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0270.582] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9114, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0099173.WMF", cAlternateFileName="")) returned 1 [0270.582] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0270.582] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0270.582] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0270.582] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0270.583] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0270.583] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0270.584] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099173.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099173.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0270.584] GetFileType (hFile=0x174) returned 0x1 [0270.584] CloseHandle (hObject=0x174) returned 1 [0270.585] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0270.585] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099173.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099173.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9114)) returned 1 [0270.585] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0270.585] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0270.586] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099173.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099173.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9114)) returned 1 [0270.586] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0270.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0270.891] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0270.892] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1846, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0099174.WMF", cAlternateFileName="")) returned 1 [0270.892] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0270.892] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0270.892] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0270.892] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0270.892] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0270.892] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0270.893] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099174.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099174.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0270.894] GetFileType (hFile=0x21c) returned 0x1 [0270.895] CloseHandle (hObject=0x21c) returned 1 [0270.895] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0270.895] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099174.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099174.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1846)) returned 1 [0270.896] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0270.896] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0270.896] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099174.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099174.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1846)) returned 1 [0270.896] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0270.896] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0270.896] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0270.897] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2610, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0099175.WMF", cAlternateFileName="")) returned 1 [0270.897] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0270.897] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0270.897] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0270.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0270.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0270.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0270.898] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099175.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099175.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0270.899] GetFileType (hFile=0x21c) returned 0x1 [0270.899] CloseHandle (hObject=0x21c) returned 1 [0270.900] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0270.900] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099175.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099175.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2610)) returned 1 [0270.900] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0270.900] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0270.901] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099175.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099175.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2610)) returned 1 [0270.902] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0270.902] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0270.902] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0270.902] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9b8, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0099176.WMF", cAlternateFileName="")) returned 1 [0270.902] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0270.902] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0270.903] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0270.903] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0270.903] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0270.903] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0270.904] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099176.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099176.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0270.904] GetFileType (hFile=0x21c) returned 0x1 [0270.905] CloseHandle (hObject=0x21c) returned 1 [0270.906] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0270.906] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099176.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099176.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9b8)) returned 1 [0270.906] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0270.906] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0270.906] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099176.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099176.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9b8)) returned 1 [0270.907] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0270.907] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0270.907] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0270.907] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x150a, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0099177.WMF", cAlternateFileName="")) returned 1 [0270.907] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0270.907] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0270.907] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0270.908] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0270.908] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0270.908] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0270.909] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099177.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099177.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0270.909] GetFileType (hFile=0x21c) returned 0x1 [0270.910] CloseHandle (hObject=0x21c) returned 1 [0270.910] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0270.911] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099177.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099177.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x150a)) returned 1 [0270.911] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0270.911] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0270.911] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099177.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099177.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x150a)) returned 1 [0270.911] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0270.912] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0270.912] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0270.912] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe16, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0099178.WMF", cAlternateFileName="")) returned 1 [0270.912] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0270.912] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0270.912] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0270.912] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0270.913] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0270.913] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0270.914] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099178.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099178.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0270.914] GetFileType (hFile=0x21c) returned 0x1 [0270.915] CloseHandle (hObject=0x21c) returned 1 [0270.915] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0270.916] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099178.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099178.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe16)) returned 1 [0270.916] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0270.916] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0270.916] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099178.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099178.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe16)) returned 1 [0270.916] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0270.916] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0270.917] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0270.917] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x23c2, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0099179.WMF", cAlternateFileName="")) returned 1 [0270.917] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0270.917] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0270.917] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0270.917] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0270.917] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0270.918] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0270.918] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099179.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099179.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0270.919] GetFileType (hFile=0x21c) returned 0x1 [0270.919] CloseHandle (hObject=0x21c) returned 1 [0270.920] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0270.920] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099179.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099179.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x23c2)) returned 1 [0270.920] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0270.920] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0270.920] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099179.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099179.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x23c2)) returned 1 [0270.920] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0270.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0270.921] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0270.921] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd42, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0099180.WMF", cAlternateFileName="")) returned 1 [0270.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0270.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0270.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0270.921] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0270.922] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0270.922] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0270.923] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099180.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099180.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0270.923] GetFileType (hFile=0x21c) returned 0x1 [0270.924] CloseHandle (hObject=0x21c) returned 1 [0270.924] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0270.924] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099180.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099180.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd42)) returned 1 [0270.924] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0270.925] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0270.925] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099180.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099180.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd42)) returned 1 [0270.925] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0270.925] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0270.925] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0270.925] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ae, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0099181.WMF", cAlternateFileName="")) returned 1 [0270.926] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0270.926] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0270.926] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0270.926] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0270.926] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0270.926] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0270.927] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099181.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099181.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0270.928] GetFileType (hFile=0x21c) returned 0x1 [0270.928] CloseHandle (hObject=0x21c) returned 1 [0270.929] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0270.929] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099181.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099181.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ae)) returned 1 [0270.929] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0270.929] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0270.929] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099181.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099181.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ae)) returned 1 [0270.930] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0270.930] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0270.930] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0270.930] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf00, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0099182.WMF", cAlternateFileName="")) returned 1 [0270.930] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0270.930] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0270.931] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0270.931] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0270.931] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0270.931] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0271.243] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099182.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099182.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0271.243] GetFileType (hFile=0x1c0) returned 0x1 [0271.244] CloseHandle (hObject=0x1c0) returned 1 [0271.245] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0271.245] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099182.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099182.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf00)) returned 1 [0271.245] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0271.245] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0271.246] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099182.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099182.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf00)) returned 1 [0271.246] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0271.246] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0271.246] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0271.246] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1352, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0099183.WMF", cAlternateFileName="")) returned 1 [0271.246] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0271.246] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0271.247] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0271.247] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0271.247] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0271.247] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0271.248] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099183.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099183.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0271.248] GetFileType (hFile=0x1c0) returned 0x1 [0271.248] CloseHandle (hObject=0x1c0) returned 1 [0271.249] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0271.249] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099183.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099183.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1352)) returned 1 [0271.249] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0271.249] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0271.249] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099183.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099183.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1352)) returned 1 [0271.250] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0271.250] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0271.250] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0271.250] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1016, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0099184.WMF", cAlternateFileName="")) returned 1 [0271.250] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0271.250] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0271.250] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0271.250] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0271.250] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0271.251] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0271.251] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099184.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099184.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0271.252] GetFileType (hFile=0x1c0) returned 0x1 [0271.252] CloseHandle (hObject=0x1c0) returned 1 [0271.253] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0271.253] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099184.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099184.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1016)) returned 1 [0271.253] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0271.253] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0271.254] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099184.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099184.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1016)) returned 1 [0271.254] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0271.254] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0271.254] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0271.254] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe56c811, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe56c811, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcd2, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0099185.JPG", cAlternateFileName="")) returned 1 [0271.254] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0271.254] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0271.255] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0271.255] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0271.255] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0271.255] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0271.256] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099185.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099185.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0271.256] GetFileType (hFile=0x1c0) returned 0x1 [0271.257] CloseHandle (hObject=0x1c0) returned 1 [0271.257] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0271.258] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099185.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099185.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe56c811, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe56c811, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcd2)) returned 1 [0271.258] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0271.259] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0271.259] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099185.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099185.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe56c811, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe56c811, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcd2)) returned 1 [0271.259] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0271.260] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0271.260] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0271.260] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe56c811, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe56c811, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe56c811, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4162, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0099186.JPG", cAlternateFileName="")) returned 1 [0271.260] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0271.260] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0271.260] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0271.260] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0271.261] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0271.261] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0271.262] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099186.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099186.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0271.262] GetFileType (hFile=0x1c0) returned 0x1 [0271.263] CloseHandle (hObject=0x1c0) returned 1 [0271.263] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0271.263] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099186.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099186.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe56c811, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe56c811, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe56c811, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4162)) returned 1 [0271.263] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0271.264] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0271.264] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099186.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099186.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe56c811, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe56c811, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe56c811, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4162)) returned 1 [0271.264] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0271.264] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0271.264] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0271.264] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe18c9a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe18c9a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe56c811, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5fd0, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0099187.JPG", cAlternateFileName="")) returned 1 [0271.264] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0271.265] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0271.265] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0271.265] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0271.265] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0271.265] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0271.266] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099187.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099187.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0271.266] GetFileType (hFile=0x1c0) returned 0x1 [0271.267] CloseHandle (hObject=0x1c0) returned 1 [0271.267] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0271.268] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099187.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099187.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe18c9a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe18c9a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe56c811, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5fd0)) returned 1 [0271.268] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0271.268] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0271.268] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099187.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099187.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe18c9a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe18c9a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe56c811, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5fd0)) returned 1 [0271.268] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0271.268] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0271.269] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0271.269] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe18c9a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe18c9a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe56c811, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2378, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0099188.JPG", cAlternateFileName="")) returned 1 [0271.269] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0271.269] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0271.269] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0271.269] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0271.269] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0271.270] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0271.270] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099188.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099188.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0271.271] GetFileType (hFile=0x1c0) returned 0x1 [0271.271] CloseHandle (hObject=0x1c0) returned 1 [0271.272] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0271.272] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099188.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099188.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe18c9a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe18c9a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe56c811, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2378)) returned 1 [0271.272] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0271.272] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0271.273] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099188.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099188.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe18c9a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe18c9a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe56c811, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2378)) returned 1 [0271.273] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0271.273] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0271.273] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0271.273] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe18c9a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f8c, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0099189.JPG", cAlternateFileName="")) returned 1 [0271.273] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0271.273] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0271.298] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0271.299] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0271.299] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0271.299] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0271.300] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099189.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099189.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0271.300] GetFileType (hFile=0x1c0) returned 0x1 [0271.301] CloseHandle (hObject=0x1c0) returned 1 [0271.301] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0271.301] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099189.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099189.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe18c9a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f8c)) returned 1 [0271.302] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0271.302] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0271.302] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099189.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099189.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe18c9a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f8c)) returned 1 [0271.302] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0271.302] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0271.302] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0271.303] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xab74, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0099190.JPG", cAlternateFileName="")) returned 1 [0271.303] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0271.303] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0271.303] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0271.303] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0271.303] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0271.303] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0271.304] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099190.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099190.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0271.304] GetFileType (hFile=0x1c0) returned 0x1 [0271.588] CloseHandle (hObject=0x1c0) returned 1 [0271.588] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0271.588] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099190.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099190.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xab74)) returned 1 [0271.589] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0271.589] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0271.589] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099190.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099190.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xab74)) returned 1 [0271.589] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0271.589] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0271.589] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0271.590] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe56c811, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf39f, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0099191.JPG", cAlternateFileName="")) returned 1 [0271.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0271.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0271.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0271.590] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0271.590] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0271.590] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0271.591] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099191.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099191.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0271.804] GetFileType (hFile=0x1c0) returned 0x1 [0271.805] CloseHandle (hObject=0x1c0) returned 1 [0271.806] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0271.806] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099191.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099191.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe56c811, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf39f)) returned 1 [0271.807] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0271.807] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0271.807] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099191.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099191.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe56c811, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf39f)) returned 1 [0271.853] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0271.853] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0271.854] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0271.854] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe56c811, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x462c, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0099192.GIF", cAlternateFileName="")) returned 1 [0271.854] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0271.854] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0271.854] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0271.854] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0271.854] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0271.854] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0272.123] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099192.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099192.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0272.124] GetFileType (hFile=0x1e8) returned 0x1 [0272.124] CloseHandle (hObject=0x1e8) returned 1 [0272.124] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0272.125] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099192.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099192.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe56c811, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x462c)) returned 1 [0272.125] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0272.125] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0272.125] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099192.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099192.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe56c811, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x462c)) returned 1 [0272.125] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0272.125] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0272.126] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0272.126] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8ada, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0099193.GIF", cAlternateFileName="")) returned 1 [0272.126] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0272.126] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0272.126] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0272.126] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0272.126] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0272.126] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0272.127] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099193.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099193.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0272.127] GetFileType (hFile=0x1e8) returned 0x1 [0272.128] CloseHandle (hObject=0x1e8) returned 1 [0272.128] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0272.128] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099193.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099193.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8ada)) returned 1 [0272.128] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0272.128] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0272.129] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099193.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099193.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8ada)) returned 1 [0272.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0272.129] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0272.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0272.129] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe18c9a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x62b1, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0099194.GIF", cAlternateFileName="")) returned 1 [0272.129] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0272.129] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0272.129] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0272.130] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0272.130] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0272.130] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0272.131] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099194.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099194.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0272.131] GetFileType (hFile=0x1e8) returned 0x1 [0272.131] CloseHandle (hObject=0x1e8) returned 1 [0272.132] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0272.132] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099194.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099194.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe18c9a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x62b1)) returned 1 [0272.132] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0272.132] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0272.132] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099194.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099194.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe18c9a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x62b1)) returned 1 [0272.133] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0272.133] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0272.133] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0272.133] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4dd3, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0099195.GIF", cAlternateFileName="")) returned 1 [0272.133] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0272.133] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0272.134] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0272.134] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0272.134] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0272.134] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0272.135] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099195.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099195.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0272.135] GetFileType (hFile=0x1e8) returned 0x1 [0272.136] CloseHandle (hObject=0x1e8) returned 1 [0272.136] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0272.136] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099195.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099195.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4dd3)) returned 1 [0272.136] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0272.136] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0272.137] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099195.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099195.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4dd3)) returned 1 [0272.137] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0272.137] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0272.137] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0272.137] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3801, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0099196.GIF", cAlternateFileName="")) returned 1 [0272.137] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0272.137] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0272.137] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0272.138] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0272.138] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0272.138] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0272.139] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099196.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099196.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0272.139] GetFileType (hFile=0x1e8) returned 0x1 [0272.140] CloseHandle (hObject=0x1e8) returned 1 [0272.140] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0272.140] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099196.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099196.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3801)) returned 1 [0272.140] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0272.140] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0272.140] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099196.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099196.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3801)) returned 1 [0272.141] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0272.141] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0272.141] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0272.141] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a92, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0099197.GIF", cAlternateFileName="")) returned 1 [0272.141] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0272.141] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0272.141] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0272.142] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0272.142] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0272.142] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0272.142] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099197.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099197.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0272.143] GetFileType (hFile=0x1e8) returned 0x1 [0272.143] CloseHandle (hObject=0x1e8) returned 1 [0272.144] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0272.144] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099197.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099197.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a92)) returned 1 [0272.144] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0272.144] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0272.144] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099197.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099197.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a92)) returned 1 [0272.144] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0272.145] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0272.145] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0272.145] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x148b, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0099198.GIF", cAlternateFileName="")) returned 1 [0272.145] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0272.145] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0272.145] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0272.145] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0272.145] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0272.146] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0272.146] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099198.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099198.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0272.147] GetFileType (hFile=0x1e8) returned 0x1 [0272.147] CloseHandle (hObject=0x1e8) returned 1 [0272.148] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0272.148] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099198.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099198.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x148b)) returned 1 [0272.148] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0272.148] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0272.148] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099198.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099198.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x148b)) returned 1 [0272.148] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0272.149] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0272.149] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0272.149] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x84b7, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0099199.GIF", cAlternateFileName="")) returned 1 [0272.150] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0272.150] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0272.150] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0272.150] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0272.150] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0272.150] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0272.151] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099199.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099199.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0272.151] GetFileType (hFile=0x1e8) returned 0x1 [0272.152] CloseHandle (hObject=0x1e8) returned 1 [0272.152] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0272.153] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099199.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099199.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x84b7)) returned 1 [0272.153] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0272.153] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0272.153] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099199.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099199.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x84b7)) returned 1 [0272.153] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0272.153] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0272.154] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0272.154] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe56c811, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe56c811, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x409f, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0099200.GIF", cAlternateFileName="")) returned 1 [0272.154] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0272.154] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0272.154] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0272.154] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0272.154] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0272.155] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0272.155] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099200.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099200.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0272.156] GetFileType (hFile=0x1e8) returned 0x1 [0272.156] CloseHandle (hObject=0x1e8) returned 1 [0272.157] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0272.157] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099200.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099200.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe56c811, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe56c811, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x409f)) returned 1 [0272.157] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0272.157] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0272.157] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099200.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099200.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe56c811, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe56c811, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x409f)) returned 1 [0272.157] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0272.157] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0272.158] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0272.158] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc8c9, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0099201.GIF", cAlternateFileName="")) returned 1 [0272.158] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0272.158] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0272.158] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0272.158] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0272.158] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0272.159] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0272.159] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099201.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099201.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0272.160] GetFileType (hFile=0x1e8) returned 0x1 [0272.160] CloseHandle (hObject=0x1e8) returned 1 [0272.161] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0272.161] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099201.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099201.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc8c9)) returned 1 [0272.161] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0272.161] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0272.162] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099201.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099201.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc8c9)) returned 1 [0272.162] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0272.162] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0272.162] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0272.162] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1367, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0099202.GIF", cAlternateFileName="")) returned 1 [0272.162] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0272.163] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0272.163] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0272.163] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0272.163] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0272.163] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0272.544] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099202.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099202.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0272.544] GetFileType (hFile=0x174) returned 0x1 [0272.545] CloseHandle (hObject=0x174) returned 1 [0272.545] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0272.546] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099202.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099202.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1367)) returned 1 [0272.546] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0272.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0272.546] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099202.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099202.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1367)) returned 1 [0272.546] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0272.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0272.547] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0272.547] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe56c811, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe56c811, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf40, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0099203.GIF", cAlternateFileName="")) returned 1 [0272.547] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0272.547] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0272.547] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0272.547] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0272.547] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0272.547] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0272.910] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099203.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099203.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0272.910] GetFileType (hFile=0x1e8) returned 0x1 [0272.911] CloseHandle (hObject=0x1e8) returned 1 [0272.911] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0272.911] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099203.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099203.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe56c811, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe56c811, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf40)) returned 1 [0272.912] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0272.912] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0272.912] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099203.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099203.gif"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe56c811, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe56c811, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf40)) returned 1 [0272.912] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0272.912] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0272.912] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0272.913] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe56c811, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe56c811, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45be, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0099204.WMF", cAlternateFileName="")) returned 1 [0272.913] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0272.913] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0272.913] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0272.913] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0272.913] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0272.913] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0272.914] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099204.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099204.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0272.914] GetFileType (hFile=0x1e8) returned 0x1 [0272.915] CloseHandle (hObject=0x1e8) returned 1 [0272.915] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0272.916] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099204.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099204.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe56c811, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe56c811, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45be)) returned 1 [0272.916] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0272.916] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0272.916] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099204.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099204.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe56c811, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe56c811, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45be)) returned 1 [0272.916] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0272.916] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0272.916] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0272.917] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45be, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0099205.WMF", cAlternateFileName="")) returned 1 [0272.917] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0272.917] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0272.917] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0272.917] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0272.917] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0272.917] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0272.918] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099205.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099205.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0272.918] GetFileType (hFile=0x1e8) returned 0x1 [0272.919] CloseHandle (hObject=0x1e8) returned 1 [0272.919] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0272.919] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099205.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099205.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45be)) returned 1 [0272.920] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0272.920] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0272.920] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099205.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099205.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45be)) returned 1 [0272.920] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0272.920] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0272.920] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0272.920] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x133f8, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0101856.BMP", cAlternateFileName="")) returned 1 [0272.920] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0272.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0272.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0272.921] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0272.921] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0272.921] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0272.922] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101856.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101856.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0272.922] GetFileType (hFile=0x1e8) returned 0x1 [0272.923] CloseHandle (hObject=0x1e8) returned 1 [0272.923] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0272.923] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101856.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101856.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x133f8)) returned 1 [0272.923] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0272.923] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0272.924] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101856.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101856.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x133f8)) returned 1 [0272.924] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0272.924] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0272.924] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0272.924] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0101857.BMP", cAlternateFileName="")) returned 1 [0272.924] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0272.924] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0272.924] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0272.925] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0272.925] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0272.925] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0272.925] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101857.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101857.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0272.926] GetFileType (hFile=0x1e8) returned 0x1 [0272.926] CloseHandle (hObject=0x1e8) returned 1 [0272.926] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0272.927] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101857.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101857.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8)) returned 1 [0272.927] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0272.927] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0272.927] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101857.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101857.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8)) returned 1 [0272.927] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0272.927] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0272.927] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0272.927] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0101858.BMP", cAlternateFileName="")) returned 1 [0272.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0272.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0272.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0272.928] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0272.928] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0272.928] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0272.929] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101858.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101858.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0272.929] GetFileType (hFile=0x1e8) returned 0x1 [0272.929] CloseHandle (hObject=0x1e8) returned 1 [0272.931] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0272.931] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101858.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101858.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8)) returned 1 [0272.931] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0272.932] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0272.932] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101858.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101858.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8)) returned 1 [0272.932] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0272.932] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0272.932] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0272.932] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0101859.BMP", cAlternateFileName="")) returned 1 [0272.932] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0272.933] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0272.935] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0272.935] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0272.935] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0272.935] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0272.936] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101859.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101859.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0272.937] GetFileType (hFile=0x1e8) returned 0x1 [0272.937] CloseHandle (hObject=0x1e8) returned 1 [0272.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0272.938] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101859.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101859.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0)) returned 1 [0272.938] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0272.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0272.939] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101859.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101859.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0)) returned 1 [0272.939] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0272.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0272.940] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0272.940] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0101860.BMP", cAlternateFileName="")) returned 1 [0272.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0272.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0272.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0272.940] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0272.940] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0272.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0272.942] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101860.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101860.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0272.942] GetFileType (hFile=0x1e8) returned 0x1 [0272.943] CloseHandle (hObject=0x1e8) returned 1 [0272.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0272.943] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101860.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101860.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8)) returned 1 [0272.944] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0272.944] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0272.944] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101860.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101860.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8)) returned 1 [0272.944] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0272.944] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0272.944] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0272.945] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0101861.BMP", cAlternateFileName="")) returned 1 [0272.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0272.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0272.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0272.945] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0272.945] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0272.946] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0273.401] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101861.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101861.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0273.402] GetFileType (hFile=0x1c0) returned 0x1 [0273.403] CloseHandle (hObject=0x1c0) returned 1 [0273.403] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0273.403] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101861.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101861.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8)) returned 1 [0273.404] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0273.404] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0273.404] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101861.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101861.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8)) returned 1 [0273.404] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0273.404] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0273.404] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0273.405] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0101862.BMP", cAlternateFileName="")) returned 1 [0273.405] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238550 [0273.405] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0273.405] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0273.405] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0273.405] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0273.406] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238550 | out: hHeap=0x1f0000) returned 1 [0273.407] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101862.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101862.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0273.407] GetFileType (hFile=0x1c0) returned 0x1 [0273.408] CloseHandle (hObject=0x1c0) returned 1 [0273.408] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0273.408] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101862.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101862.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8)) returned 1 [0273.409] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0273.409] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0273.409] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101862.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101862.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8)) returned 1 [0273.409] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0273.409] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0273.409] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0273.409] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0101863.BMP", cAlternateFileName="")) returned 1 [0273.410] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238758 [0273.410] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0273.410] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0273.410] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0273.410] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0273.411] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238758 | out: hHeap=0x1f0000) returned 1 [0273.411] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101863.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101863.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0273.412] GetFileType (hFile=0x1c0) returned 0x1 [0273.412] CloseHandle (hObject=0x1c0) returned 1 [0273.413] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0273.413] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101863.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101863.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8)) returned 1 [0273.413] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0273.414] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0273.414] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101863.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101863.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8)) returned 1 [0273.414] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0273.414] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0273.414] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0273.415] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0101864.BMP", cAlternateFileName="")) returned 1 [0273.415] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238730 [0273.415] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0273.415] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0273.415] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0273.415] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0273.416] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238730 | out: hHeap=0x1f0000) returned 1 [0273.419] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101864.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101864.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0273.419] GetFileType (hFile=0x1c0) returned 0x1 [0273.420] CloseHandle (hObject=0x1c0) returned 1 [0273.420] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0273.420] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101864.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101864.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0)) returned 1 [0273.421] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0273.421] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0273.421] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101864.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101864.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0)) returned 1 [0273.421] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0273.421] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0273.421] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0273.422] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0101865.BMP", cAlternateFileName="")) returned 1 [0273.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384d8 [0273.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0273.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0273.422] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0273.422] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0273.423] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384d8 | out: hHeap=0x1f0000) returned 1 [0273.423] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101865.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101865.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0273.424] GetFileType (hFile=0x1c0) returned 0x1 [0273.424] CloseHandle (hObject=0x1c0) returned 1 [0273.425] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0273.425] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101865.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101865.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8)) returned 1 [0273.425] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0273.425] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0273.425] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101865.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101865.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8)) returned 1 [0273.426] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0273.426] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0273.426] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0273.426] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0101866.BMP", cAlternateFileName="")) returned 1 [0273.426] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238780 [0273.426] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0273.427] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0273.427] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0273.427] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0273.427] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238780 | out: hHeap=0x1f0000) returned 1 [0273.428] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101866.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101866.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0273.428] GetFileType (hFile=0x1c0) returned 0x1 [0273.429] CloseHandle (hObject=0x1c0) returned 1 [0273.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0273.430] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101866.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101866.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8)) returned 1 [0273.430] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0273.430] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0273.430] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101866.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101866.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8)) returned 1 [0273.430] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0273.430] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0273.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0273.431] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7f68, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0101867.BMP", cAlternateFileName="")) returned 1 [0273.431] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238668 [0273.431] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0273.431] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0273.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0273.432] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0273.432] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238668 | out: hHeap=0x1f0000) returned 1 [0273.434] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101867.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101867.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0273.434] GetFileType (hFile=0x1c0) returned 0x1 [0273.435] CloseHandle (hObject=0x1c0) returned 1 [0273.435] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0273.435] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101867.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101867.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7f68)) returned 1 [0273.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0273.436] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0273.436] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101867.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101867.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7f68)) returned 1 [0273.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0273.436] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0273.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0273.437] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ee8, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0101980.WMF", cAlternateFileName="")) returned 1 [0273.437] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384d8 [0273.437] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0273.437] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0273.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0273.438] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0273.438] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384d8 | out: hHeap=0x1f0000) returned 1 [0273.439] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101980.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101980.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0273.439] GetFileType (hFile=0x1c0) returned 0x1 [0273.440] CloseHandle (hObject=0x1c0) returned 1 [0273.440] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0273.440] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101980.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101980.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ee8)) returned 1 [0273.440] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0273.441] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0273.441] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101980.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101980.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ee8)) returned 1 [0273.441] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0273.441] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0273.441] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0273.441] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3e74, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0102002.WMF", cAlternateFileName="")) returned 1 [0273.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238550 [0273.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0273.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0273.442] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0273.442] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0273.442] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238550 | out: hHeap=0x1f0000) returned 1 [0273.443] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102002.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102002.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0273.444] GetFileType (hFile=0x1c0) returned 0x1 [0273.444] CloseHandle (hObject=0x1c0) returned 1 [0273.445] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0273.445] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102002.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102002.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3e74)) returned 1 [0273.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0273.445] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0273.445] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102002.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102002.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3e74)) returned 1 [0273.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0273.446] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0273.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0273.446] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6978, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0102594.WMF", cAlternateFileName="")) returned 1 [0273.446] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238730 [0273.446] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0273.446] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0273.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0273.447] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0273.447] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238730 | out: hHeap=0x1f0000) returned 1 [0273.448] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102594.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102594.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0273.699] GetFileType (hFile=0x198) returned 0x1 [0273.700] CloseHandle (hObject=0x198) returned 1 [0273.700] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0273.701] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102594.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102594.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6978)) returned 1 [0273.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0273.701] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0273.701] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102594.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102594.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6978)) returned 1 [0273.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0273.701] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0273.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0273.702] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2bd0, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0102762.WMF", cAlternateFileName="")) returned 1 [0273.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2386b8 [0273.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0273.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0273.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0273.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0273.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2386b8 | out: hHeap=0x1f0000) returned 1 [0273.967] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102762.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102762.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0273.967] GetFileType (hFile=0x198) returned 0x1 [0273.967] CloseHandle (hObject=0x198) returned 1 [0273.968] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0273.968] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102762.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102762.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2bd0)) returned 1 [0273.968] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0273.968] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0273.968] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102762.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102762.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2bd0)) returned 1 [0273.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0273.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0273.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0273.969] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4290, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0102984.WMF", cAlternateFileName="")) returned 1 [0273.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238578 [0273.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0273.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0273.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0273.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0273.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238578 | out: hHeap=0x1f0000) returned 1 [0273.970] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102984.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102984.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0273.970] GetFileType (hFile=0x198) returned 0x1 [0273.971] CloseHandle (hObject=0x198) returned 1 [0273.971] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0273.971] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102984.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102984.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4290)) returned 1 [0273.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0273.972] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0273.972] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102984.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102984.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4290)) returned 1 [0273.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0273.972] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0273.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0273.972] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43c0, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0103058.WMF", cAlternateFileName="")) returned 1 [0273.972] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238618 [0273.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0273.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0273.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0273.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0273.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238618 | out: hHeap=0x1f0000) returned 1 [0273.974] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103058.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103058.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0273.974] GetFileType (hFile=0x198) returned 0x1 [0273.975] CloseHandle (hObject=0x198) returned 1 [0273.975] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0273.975] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103058.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103058.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43c0)) returned 1 [0273.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0273.975] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0273.976] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103058.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103058.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43c0)) returned 1 [0273.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0273.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0273.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0273.976] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3264, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0103262.WMF", cAlternateFileName="")) returned 1 [0273.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2386e0 [0273.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0273.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0273.977] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0273.977] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0273.977] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2386e0 | out: hHeap=0x1f0000) returned 1 [0273.978] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103262.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103262.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0273.978] GetFileType (hFile=0x198) returned 0x1 [0273.978] CloseHandle (hObject=0x198) returned 1 [0273.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0273.979] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103262.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103262.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3264)) returned 1 [0273.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0273.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0273.979] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103262.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103262.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3264)) returned 1 [0273.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0273.980] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0273.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0273.980] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaf94, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0103402.WMF", cAlternateFileName="")) returned 1 [0273.980] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238528 [0273.980] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0273.980] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0273.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0273.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0273.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238528 | out: hHeap=0x1f0000) returned 1 [0273.982] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103402.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103402.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0273.982] GetFileType (hFile=0x198) returned 0x1 [0273.982] CloseHandle (hObject=0x198) returned 1 [0273.983] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0273.983] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103402.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103402.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaf94)) returned 1 [0273.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0273.983] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0273.983] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103402.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103402.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaf94)) returned 1 [0273.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0273.983] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0273.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0273.984] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1714, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0103812.WMF", cAlternateFileName="")) returned 1 [0273.984] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385c8 [0273.984] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0273.984] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0273.984] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0273.984] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0273.984] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385c8 | out: hHeap=0x1f0000) returned 1 [0273.985] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103812.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103812.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0273.985] GetFileType (hFile=0x198) returned 0x1 [0273.985] CloseHandle (hObject=0x198) returned 1 [0273.986] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0273.986] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103812.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103812.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1714)) returned 1 [0273.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0273.986] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0273.986] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103812.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103812.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1714)) returned 1 [0273.987] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0273.987] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0273.987] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0273.987] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5c2c, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0103850.WMF", cAlternateFileName="")) returned 1 [0273.987] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238550 [0273.987] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0273.987] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0273.987] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0273.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0273.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238550 | out: hHeap=0x1f0000) returned 1 [0273.988] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103850.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103850.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0273.989] GetFileType (hFile=0x198) returned 0x1 [0273.989] CloseHandle (hObject=0x198) returned 1 [0273.989] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0273.990] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103850.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103850.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5c2c)) returned 1 [0273.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0273.990] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0273.990] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103850.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103850.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5c2c)) returned 1 [0273.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0273.990] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0273.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0273.991] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1434, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0105230.WMF", cAlternateFileName="")) returned 1 [0273.991] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238640 [0273.991] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0273.991] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0273.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0273.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0273.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238640 | out: hHeap=0x1f0000) returned 1 [0273.992] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105230.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105230.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0273.992] GetFileType (hFile=0x198) returned 0x1 [0273.993] CloseHandle (hObject=0x198) returned 1 [0273.994] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0273.994] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105230.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105230.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1434)) returned 1 [0273.994] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0273.994] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0273.994] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105230.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105230.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1434)) returned 1 [0273.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0273.995] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0273.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0273.995] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0105232.WMF", cAlternateFileName="")) returned 1 [0273.995] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2386e0 [0273.995] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0273.995] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0273.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0273.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0273.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2386e0 | out: hHeap=0x1f0000) returned 1 [0273.996] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105232.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105232.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0273.997] GetFileType (hFile=0x198) returned 0x1 [0273.998] CloseHandle (hObject=0x198) returned 1 [0273.998] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0273.998] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105232.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105232.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1600)) returned 1 [0273.999] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0273.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0273.999] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105232.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105232.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1600)) returned 1 [0273.999] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0273.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0273.999] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0273.999] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd74, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0105234.WMF", cAlternateFileName="")) returned 1 [0274.000] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385a0 [0274.000] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0274.000] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0274.000] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0274.000] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0274.000] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385a0 | out: hHeap=0x1f0000) returned 1 [0274.001] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105234.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105234.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0274.001] GetFileType (hFile=0x198) returned 0x1 [0274.002] CloseHandle (hObject=0x198) returned 1 [0274.002] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0274.002] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105234.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105234.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd74)) returned 1 [0274.002] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0274.002] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0274.002] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105234.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105234.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd74)) returned 1 [0274.003] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0274.003] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0274.003] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0274.003] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4314, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0105238.WMF", cAlternateFileName="")) returned 1 [0274.003] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238578 [0274.003] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0274.003] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0274.003] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0274.003] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0274.003] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238578 | out: hHeap=0x1f0000) returned 1 [0274.004] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105238.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105238.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0274.004] GetFileType (hFile=0x198) returned 0x1 [0274.005] CloseHandle (hObject=0x198) returned 1 [0274.005] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0274.006] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105238.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105238.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4314)) returned 1 [0274.006] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0274.006] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0274.006] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105238.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105238.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4314)) returned 1 [0274.006] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0274.006] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0274.006] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0274.006] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d0c, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0105240.WMF", cAlternateFileName="")) returned 1 [0274.007] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238758 [0274.007] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0274.007] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0274.007] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0274.007] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0274.007] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238758 | out: hHeap=0x1f0000) returned 1 [0274.008] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105240.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105240.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0274.008] GetFileType (hFile=0x198) returned 0x1 [0274.009] CloseHandle (hObject=0x198) returned 1 [0274.009] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0274.009] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105240.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105240.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d0c)) returned 1 [0274.009] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0274.009] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0274.010] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105240.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105240.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d0c)) returned 1 [0274.010] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0274.010] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0274.010] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0274.010] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2bdc, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0105244.WMF", cAlternateFileName="")) returned 1 [0274.010] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238578 [0274.010] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0274.010] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0274.011] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0274.011] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0274.011] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238578 | out: hHeap=0x1f0000) returned 1 [0274.011] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105244.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105244.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0274.012] GetFileType (hFile=0x198) returned 0x1 [0274.012] CloseHandle (hObject=0x198) returned 1 [0274.260] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0274.261] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105244.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105244.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2bdc)) returned 1 [0274.261] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0274.261] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0274.261] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105244.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105244.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2bdc)) returned 1 [0274.261] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0274.261] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0274.261] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0274.261] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b80, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0105246.WMF", cAlternateFileName="")) returned 1 [0274.262] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238500 [0274.262] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0274.262] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0274.262] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0274.262] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0274.262] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238500 | out: hHeap=0x1f0000) returned 1 [0274.263] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105246.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105246.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0274.263] GetFileType (hFile=0x198) returned 0x1 [0274.264] CloseHandle (hObject=0x198) returned 1 [0274.264] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0274.264] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105246.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105246.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b80)) returned 1 [0274.264] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0274.264] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0274.264] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105246.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105246.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b80)) returned 1 [0274.265] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0274.265] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0274.265] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0274.265] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1214, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0105250.WMF", cAlternateFileName="")) returned 1 [0274.265] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238578 [0274.265] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0274.265] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0274.265] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0274.265] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0274.265] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238578 | out: hHeap=0x1f0000) returned 1 [0274.266] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105250.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105250.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0274.266] GetFileType (hFile=0x198) returned 0x1 [0274.266] CloseHandle (hObject=0x198) returned 1 [0274.267] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0274.267] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105250.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105250.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1214)) returned 1 [0274.267] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0274.267] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0274.267] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105250.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105250.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1214)) returned 1 [0274.267] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0274.267] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0274.267] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0274.267] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1714, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0105266.WMF", cAlternateFileName="")) returned 1 [0274.267] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238690 [0274.268] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0274.268] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0274.268] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0274.268] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0274.268] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238690 | out: hHeap=0x1f0000) returned 1 [0274.268] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105266.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105266.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0274.268] GetFileType (hFile=0x198) returned 0x1 [0274.269] CloseHandle (hObject=0x198) returned 1 [0274.269] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0274.269] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105266.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105266.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1714)) returned 1 [0274.270] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0274.270] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0274.270] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105266.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105266.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1714)) returned 1 [0274.270] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0274.270] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0274.271] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0274.271] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4540, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0105272.WMF", cAlternateFileName="")) returned 1 [0274.271] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238578 [0274.271] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0274.271] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0274.271] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0274.272] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0274.272] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238578 | out: hHeap=0x1f0000) returned 1 [0274.272] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105272.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105272.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0274.272] GetFileType (hFile=0x198) returned 0x1 [0274.272] CloseHandle (hObject=0x198) returned 1 [0274.273] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0274.273] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105272.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105272.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4540)) returned 1 [0274.273] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0274.273] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0274.273] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105272.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105272.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4540)) returned 1 [0274.273] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0274.273] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0274.273] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0274.273] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b28, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0105276.WMF", cAlternateFileName="")) returned 1 [0274.273] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238690 [0274.273] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0274.273] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0274.274] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0274.274] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0274.274] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238690 | out: hHeap=0x1f0000) returned 1 [0274.274] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105276.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105276.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0274.274] GetFileType (hFile=0x198) returned 0x1 [0274.274] CloseHandle (hObject=0x198) returned 1 [0274.275] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0274.275] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105276.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105276.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b28)) returned 1 [0274.275] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0274.275] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0274.275] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105276.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105276.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b28)) returned 1 [0274.275] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0274.276] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0274.276] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0274.276] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d14, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0105280.WMF", cAlternateFileName="")) returned 1 [0274.276] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238780 [0274.276] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0274.276] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0274.276] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0274.276] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0274.276] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238780 | out: hHeap=0x1f0000) returned 1 [0274.277] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105280.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105280.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0274.277] GetFileType (hFile=0x198) returned 0x1 [0274.277] CloseHandle (hObject=0x198) returned 1 [0274.278] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0274.278] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105280.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105280.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d14)) returned 1 [0274.278] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0274.278] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0274.278] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105280.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105280.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d14)) returned 1 [0274.278] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0274.278] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0274.278] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0274.278] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12bc, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0105282.WMF", cAlternateFileName="")) returned 1 [0274.278] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238780 [0274.279] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0274.279] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0274.279] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0274.279] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0274.279] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238780 | out: hHeap=0x1f0000) returned 1 [0274.279] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105282.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105282.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0274.279] GetFileType (hFile=0x198) returned 0x1 [0274.280] CloseHandle (hObject=0x198) returned 1 [0274.280] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0274.280] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105282.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105282.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12bc)) returned 1 [0274.280] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0274.280] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0274.280] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105282.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105282.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12bc)) returned 1 [0274.281] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0274.281] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0274.281] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0274.281] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19a8, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0105286.WMF", cAlternateFileName="")) returned 1 [0274.281] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238690 [0274.281] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0274.281] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0274.281] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0274.281] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0274.281] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238690 | out: hHeap=0x1f0000) returned 1 [0274.282] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105286.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105286.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0274.282] GetFileType (hFile=0x198) returned 0x1 [0274.282] CloseHandle (hObject=0x198) returned 1 [0274.282] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0274.282] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105286.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105286.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19a8)) returned 1 [0274.283] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0274.283] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0274.283] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105286.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105286.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19a8)) returned 1 [0274.283] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0274.283] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0274.283] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0274.283] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3dd8, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0105288.WMF", cAlternateFileName="")) returned 1 [0274.283] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238780 [0274.283] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0274.283] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0274.283] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0274.284] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0274.284] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238780 | out: hHeap=0x1f0000) returned 1 [0274.284] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105288.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105288.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0274.284] GetFileType (hFile=0x198) returned 0x1 [0274.285] CloseHandle (hObject=0x198) returned 1 [0274.324] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0274.324] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105288.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105288.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3dd8)) returned 1 [0274.325] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0274.325] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0274.325] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105288.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105288.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3dd8)) returned 1 [0274.325] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0274.325] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0274.325] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0274.326] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a14, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0105292.WMF", cAlternateFileName="")) returned 1 [0274.326] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238780 [0274.326] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0274.326] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0274.326] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0274.326] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0274.327] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238780 | out: hHeap=0x1f0000) returned 1 [0274.327] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105292.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105292.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0274.328] GetFileType (hFile=0x198) returned 0x1 [0274.328] CloseHandle (hObject=0x198) returned 1 [0274.329] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0274.329] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105292.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105292.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a14)) returned 1 [0274.329] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0274.330] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0274.330] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105292.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105292.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a14)) returned 1 [0274.330] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0274.330] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0274.330] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0274.331] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1580, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0105294.WMF", cAlternateFileName="")) returned 1 [0274.331] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238690 [0274.331] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0274.331] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0274.331] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0274.331] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0274.331] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238690 | out: hHeap=0x1f0000) returned 1 [0274.801] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105294.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105294.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0274.802] GetFileType (hFile=0x174) returned 0x1 [0274.802] CloseHandle (hObject=0x174) returned 1 [0274.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0274.802] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105294.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105294.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1580)) returned 1 [0274.803] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0274.803] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0274.803] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105294.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105294.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1580)) returned 1 [0274.803] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0274.803] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0274.803] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0274.803] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18b0, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0105298.WMF", cAlternateFileName="")) returned 1 [0274.803] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0274.803] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0274.803] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0274.803] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0274.803] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0274.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0274.804] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105298.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105298.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0274.804] GetFileType (hFile=0x174) returned 0x1 [0274.805] CloseHandle (hObject=0x174) returned 1 [0274.805] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0274.805] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105298.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105298.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18b0)) returned 1 [0274.805] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0274.806] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0274.806] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105298.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105298.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18b0)) returned 1 [0274.806] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0274.806] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0274.806] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0274.806] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10e0, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0105306.WMF", cAlternateFileName="")) returned 1 [0274.806] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0274.806] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0274.807] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0274.807] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0274.807] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0274.807] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0274.808] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105306.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105306.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0274.808] GetFileType (hFile=0x174) returned 0x1 [0274.808] CloseHandle (hObject=0x174) returned 1 [0274.809] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0274.809] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105306.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105306.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10e0)) returned 1 [0274.809] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0274.809] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0274.809] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105306.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105306.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10e0)) returned 1 [0274.809] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0274.810] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0274.810] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0274.810] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e4, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0105320.WMF", cAlternateFileName="")) returned 1 [0274.810] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0274.810] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0274.810] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0274.810] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0274.810] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0274.810] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0274.811] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105320.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105320.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0274.812] GetFileType (hFile=0x174) returned 0x1 [0274.812] CloseHandle (hObject=0x174) returned 1 [0274.812] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0274.812] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105320.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105320.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e4)) returned 1 [0274.813] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0274.813] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0274.813] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105320.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105320.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e4)) returned 1 [0274.813] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0274.813] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0274.813] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0274.813] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f38, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0105328.WMF", cAlternateFileName="")) returned 1 [0274.813] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0274.813] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0274.814] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0274.814] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0274.814] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0274.814] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0274.815] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105328.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105328.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0274.815] GetFileType (hFile=0x174) returned 0x1 [0274.815] CloseHandle (hObject=0x174) returned 1 [0274.816] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0274.816] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105328.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105328.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f38)) returned 1 [0274.816] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0274.817] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0274.817] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105328.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105328.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f38)) returned 1 [0274.818] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0274.818] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0274.818] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0274.818] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x290c, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0105332.WMF", cAlternateFileName="")) returned 1 [0274.818] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0274.818] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0274.818] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0274.818] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0274.819] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0274.819] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0274.819] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105332.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105332.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0274.820] GetFileType (hFile=0x174) returned 0x1 [0274.820] CloseHandle (hObject=0x174) returned 1 [0274.821] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0274.821] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105332.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105332.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x290c)) returned 1 [0274.821] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0274.821] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0274.822] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105332.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105332.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x290c)) returned 1 [0274.822] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0274.822] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0274.822] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0274.822] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb54, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0105336.WMF", cAlternateFileName="")) returned 1 [0274.822] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0274.822] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0274.823] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0274.823] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0274.823] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0274.823] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0274.824] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105336.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105336.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0274.824] GetFileType (hFile=0x174) returned 0x1 [0274.825] CloseHandle (hObject=0x174) returned 1 [0274.825] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0274.825] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105336.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105336.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb54)) returned 1 [0274.825] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0274.826] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0274.826] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105336.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105336.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb54)) returned 1 [0274.826] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0274.826] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0274.826] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0274.826] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d40, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0105338.WMF", cAlternateFileName="")) returned 1 [0274.826] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0274.827] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0274.827] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0274.827] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0274.827] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0274.827] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0274.828] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105338.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105338.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0274.828] GetFileType (hFile=0x174) returned 0x1 [0274.829] CloseHandle (hObject=0x174) returned 1 [0274.829] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0274.830] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105338.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105338.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d40)) returned 1 [0274.830] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0274.830] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0274.830] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105338.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105338.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d40)) returned 1 [0274.830] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0274.830] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0274.830] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0274.831] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x42a4, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0105348.WMF", cAlternateFileName="")) returned 1 [0274.831] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0274.831] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0274.831] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0274.831] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0274.831] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0274.831] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0275.388] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105348.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105348.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0275.388] GetFileType (hFile=0x21c) returned 0x1 [0275.388] CloseHandle (hObject=0x21c) returned 1 [0275.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0275.389] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105348.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105348.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x42a4)) returned 1 [0275.389] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0275.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0275.389] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105348.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105348.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x42a4)) returned 1 [0275.389] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0275.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0275.389] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0275.389] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x229c, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0105360.WMF", cAlternateFileName="")) returned 1 [0275.390] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0275.390] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0275.390] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0275.390] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0275.390] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0275.390] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0275.390] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105360.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105360.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0275.391] GetFileType (hFile=0x21c) returned 0x1 [0275.391] CloseHandle (hObject=0x21c) returned 1 [0275.391] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0275.391] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105360.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105360.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x229c)) returned 1 [0275.392] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0275.392] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0275.392] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105360.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105360.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x229c)) returned 1 [0275.392] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0275.392] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0275.392] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0275.392] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x305c, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0105368.WMF", cAlternateFileName="")) returned 1 [0275.392] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0275.392] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0275.392] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0275.393] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0275.393] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0275.393] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0275.393] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105368.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105368.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0275.393] GetFileType (hFile=0x21c) returned 0x1 [0275.394] CloseHandle (hObject=0x21c) returned 1 [0275.394] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0275.394] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105368.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105368.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x305c)) returned 1 [0275.395] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0275.395] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0275.395] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105368.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105368.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x305c)) returned 1 [0275.396] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0275.396] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0275.396] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0275.396] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1364, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0105376.WMF", cAlternateFileName="")) returned 1 [0275.396] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0275.396] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0275.396] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0275.396] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0275.396] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0275.396] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0275.397] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105376.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105376.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0275.397] GetFileType (hFile=0x21c) returned 0x1 [0275.397] CloseHandle (hObject=0x21c) returned 1 [0275.398] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0275.398] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105376.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105376.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1364)) returned 1 [0275.398] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0275.398] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0275.398] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105376.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105376.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1364)) returned 1 [0275.398] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0275.398] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0275.398] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0275.398] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1364, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0105378.WMF", cAlternateFileName="")) returned 1 [0275.398] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0275.399] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0275.399] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0275.399] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0275.399] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0275.399] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0275.399] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105378.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105378.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0275.400] GetFileType (hFile=0x21c) returned 0x1 [0275.400] CloseHandle (hObject=0x21c) returned 1 [0275.400] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0275.400] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105378.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105378.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1364)) returned 1 [0275.400] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0275.400] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0275.400] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105378.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105378.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1364)) returned 1 [0275.401] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0275.401] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0275.401] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0275.401] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1210, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0105380.WMF", cAlternateFileName="")) returned 1 [0275.401] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0275.401] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0275.401] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0275.401] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0275.401] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0275.401] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0275.402] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105380.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105380.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0275.402] GetFileType (hFile=0x21c) returned 0x1 [0275.402] CloseHandle (hObject=0x21c) returned 1 [0275.402] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0275.402] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105380.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105380.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1210)) returned 1 [0275.403] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0275.403] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0275.403] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105380.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105380.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1210)) returned 1 [0275.403] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0275.403] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0275.403] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0275.403] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16f8, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0105384.WMF", cAlternateFileName="")) returned 1 [0275.403] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0275.403] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0275.403] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0275.403] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0275.404] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0275.404] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0275.404] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105384.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105384.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0275.404] GetFileType (hFile=0x21c) returned 0x1 [0275.405] CloseHandle (hObject=0x21c) returned 1 [0275.405] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0275.405] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105384.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105384.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16f8)) returned 1 [0275.405] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0275.405] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0275.405] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105384.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105384.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16f8)) returned 1 [0275.405] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0275.406] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0275.406] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0275.406] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x175c, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0105386.WMF", cAlternateFileName="")) returned 1 [0275.406] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0275.406] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0275.406] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0275.406] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0275.406] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0275.406] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0275.406] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105386.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105386.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0275.407] GetFileType (hFile=0x21c) returned 0x1 [0275.407] CloseHandle (hObject=0x21c) returned 1 [0275.407] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0275.407] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105386.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105386.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x175c)) returned 1 [0275.408] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0275.408] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0275.408] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105386.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105386.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x175c)) returned 1 [0275.408] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0275.408] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0275.408] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0275.408] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x203c, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0105388.WMF", cAlternateFileName="")) returned 1 [0275.408] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0275.408] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0275.409] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0275.409] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0275.409] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0275.409] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0275.409] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105388.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105388.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0275.409] GetFileType (hFile=0x21c) returned 0x1 [0275.410] CloseHandle (hObject=0x21c) returned 1 [0275.411] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0275.411] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105388.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105388.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x203c)) returned 1 [0275.411] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0275.411] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0275.411] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105388.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105388.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x203c)) returned 1 [0275.411] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0275.412] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0275.412] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0275.412] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1350, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0105390.WMF", cAlternateFileName="")) returned 1 [0275.412] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0275.412] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0275.412] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0275.412] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0275.412] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0275.412] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0275.412] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105390.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105390.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0275.413] GetFileType (hFile=0x21c) returned 0x1 [0275.413] CloseHandle (hObject=0x21c) returned 1 [0275.413] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0275.413] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105390.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105390.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1350)) returned 1 [0275.414] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0275.414] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0275.414] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105390.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105390.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1350)) returned 1 [0275.414] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0275.414] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0275.414] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0275.414] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b04, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0105396.WMF", cAlternateFileName="")) returned 1 [0275.414] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0275.414] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0275.414] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0275.414] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0275.415] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0275.415] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0275.415] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105396.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105396.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0275.415] GetFileType (hFile=0x21c) returned 0x1 [0275.416] CloseHandle (hObject=0x21c) returned 1 [0275.416] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0275.416] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105396.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105396.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b04)) returned 1 [0275.416] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0275.416] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0275.416] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105396.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105396.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b04)) returned 1 [0275.416] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0275.416] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0275.417] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0275.417] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd00, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0105398.WMF", cAlternateFileName="")) returned 1 [0275.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0275.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0275.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0275.417] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0275.417] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0275.417] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0275.417] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105398.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105398.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0275.418] GetFileType (hFile=0x21c) returned 0x1 [0275.418] CloseHandle (hObject=0x21c) returned 1 [0275.418] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0275.418] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105398.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105398.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd00)) returned 1 [0275.419] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0275.419] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0275.419] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105398.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105398.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd00)) returned 1 [0275.419] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0275.419] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0275.419] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0275.419] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4fdc, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0105410.WMF", cAlternateFileName="")) returned 1 [0275.419] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0275.419] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0275.419] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0275.419] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0275.419] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0275.420] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0275.420] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105410.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105410.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0275.420] GetFileType (hFile=0x21c) returned 0x1 [0275.421] CloseHandle (hObject=0x21c) returned 1 [0275.421] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0275.421] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105410.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105410.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4fdc)) returned 1 [0275.421] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0275.421] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0275.421] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105410.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105410.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4fdc)) returned 1 [0275.422] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0275.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0275.422] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0275.422] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x24b8, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0105412.WMF", cAlternateFileName="")) returned 1 [0275.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0275.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0275.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0275.422] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0275.422] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0275.422] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0275.423] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105412.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105412.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0275.423] GetFileType (hFile=0x21c) returned 0x1 [0275.423] CloseHandle (hObject=0x21c) returned 1 [0275.424] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0275.424] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105412.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105412.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x24b8)) returned 1 [0275.424] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0275.424] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0275.424] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105412.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105412.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x24b8)) returned 1 [0275.424] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0275.424] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0275.424] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0275.424] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1864, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0105414.WMF", cAlternateFileName="")) returned 1 [0275.425] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0275.425] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0275.425] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0275.425] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0275.425] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0275.425] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0275.425] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105414.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105414.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0275.425] GetFileType (hFile=0x21c) returned 0x1 [0275.820] CloseHandle (hObject=0x21c) returned 1 [0275.821] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0275.821] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105414.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105414.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1864)) returned 1 [0275.821] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0275.821] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0275.821] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105414.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105414.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1864)) returned 1 [0275.822] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0275.822] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0275.822] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0275.822] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4928, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0105490.WMF", cAlternateFileName="")) returned 1 [0275.822] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0275.822] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0275.822] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0275.823] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0275.823] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0275.823] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0275.824] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105490.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105490.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0275.824] GetFileType (hFile=0x21c) returned 0x1 [0275.825] CloseHandle (hObject=0x21c) returned 1 [0275.826] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0275.826] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105490.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105490.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4928)) returned 1 [0275.826] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0275.826] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0275.826] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105490.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105490.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4928)) returned 1 [0275.826] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0275.827] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0275.827] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0275.827] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1424, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0105496.WMF", cAlternateFileName="")) returned 1 [0275.827] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0275.827] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0275.827] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0275.828] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0275.828] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0275.828] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0275.829] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105496.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105496.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0275.829] GetFileType (hFile=0x21c) returned 0x1 [0275.830] CloseHandle (hObject=0x21c) returned 1 [0275.830] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0275.830] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105496.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105496.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1424)) returned 1 [0275.831] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0275.831] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0275.831] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105496.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105496.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1424)) returned 1 [0275.832] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0275.832] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0275.833] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0275.833] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1560, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0105502.WMF", cAlternateFileName="")) returned 1 [0275.833] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0275.833] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0275.833] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0275.833] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0275.834] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0275.834] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0275.835] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105502.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105502.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0275.835] GetFileType (hFile=0x21c) returned 0x1 [0275.836] CloseHandle (hObject=0x21c) returned 1 [0275.836] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0275.837] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105502.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105502.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1560)) returned 1 [0275.837] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0275.837] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0275.837] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105502.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105502.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1560)) returned 1 [0275.837] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0275.837] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0275.838] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0275.838] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1034, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0105504.WMF", cAlternateFileName="")) returned 1 [0275.838] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0275.838] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0275.838] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0275.838] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0275.838] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0275.839] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0275.839] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105504.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105504.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0275.840] GetFileType (hFile=0x21c) returned 0x1 [0275.840] CloseHandle (hObject=0x21c) returned 1 [0275.841] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0275.841] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105504.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105504.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1034)) returned 1 [0275.841] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0275.841] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0275.842] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105504.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105504.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1034)) returned 1 [0275.842] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0275.842] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0275.842] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0275.842] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb60, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0105506.WMF", cAlternateFileName="")) returned 1 [0275.843] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0275.843] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0275.843] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0275.843] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0275.843] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0275.844] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0275.844] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105506.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105506.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0275.845] GetFileType (hFile=0x21c) returned 0x1 [0275.845] CloseHandle (hObject=0x21c) returned 1 [0275.846] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0275.846] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105506.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105506.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb60)) returned 1 [0275.846] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0275.846] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0275.846] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105506.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105506.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb60)) returned 1 [0275.847] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0275.847] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0275.847] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0275.847] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7c44, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0105520.WMF", cAlternateFileName="")) returned 1 [0275.847] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0275.847] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0275.847] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0275.847] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0275.848] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0275.848] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0275.849] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105520.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105520.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0275.849] GetFileType (hFile=0x21c) returned 0x1 [0275.850] CloseHandle (hObject=0x21c) returned 1 [0275.850] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0275.850] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105520.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105520.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7c44)) returned 1 [0275.850] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0275.851] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0275.851] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105520.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105520.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7c44)) returned 1 [0275.851] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0275.851] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0275.851] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0275.851] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43b4, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0105526.WMF", cAlternateFileName="")) returned 1 [0275.851] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0275.851] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0275.851] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0275.852] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0275.852] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0275.852] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0275.852] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105526.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105526.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0275.853] GetFileType (hFile=0x21c) returned 0x1 [0275.853] CloseHandle (hObject=0x21c) returned 1 [0275.853] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0275.854] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105526.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105526.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43b4)) returned 1 [0275.854] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0275.854] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0275.854] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105526.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105526.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43b4)) returned 1 [0275.854] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0275.854] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0275.854] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0275.855] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1cd8, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0105530.WMF", cAlternateFileName="")) returned 1 [0275.855] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0275.855] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0275.855] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0275.855] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0275.855] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0275.855] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0275.856] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105530.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105530.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0275.856] GetFileType (hFile=0x21c) returned 0x1 [0275.857] CloseHandle (hObject=0x21c) returned 1 [0275.857] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0275.857] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105530.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105530.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1cd8)) returned 1 [0275.857] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0275.857] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0275.858] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105530.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105530.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1cd8)) returned 1 [0275.858] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0275.858] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0275.858] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0275.858] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x542c, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0105588.WMF", cAlternateFileName="")) returned 1 [0275.858] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0275.858] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0275.858] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0275.858] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0275.859] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0275.859] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0275.859] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105588.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105588.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0275.860] GetFileType (hFile=0x21c) returned 0x1 [0275.860] CloseHandle (hObject=0x21c) returned 1 [0275.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0275.861] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105588.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105588.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x542c)) returned 1 [0275.861] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0275.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0275.861] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105588.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105588.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x542c)) returned 1 [0275.861] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0275.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0275.861] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0275.862] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21e8, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0105600.WMF", cAlternateFileName="")) returned 1 [0275.862] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0275.862] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0275.862] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0275.862] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0275.862] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0275.862] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0275.863] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105600.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105600.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0276.204] GetFileType (hFile=0x1c0) returned 0x1 [0276.205] CloseHandle (hObject=0x1c0) returned 1 [0276.205] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0276.205] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105600.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105600.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21e8)) returned 1 [0276.206] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0276.206] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0276.206] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105600.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105600.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21e8)) returned 1 [0276.206] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0276.206] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0276.206] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0276.206] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x287c, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0105638.WMF", cAlternateFileName="")) returned 1 [0276.207] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0276.207] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0276.207] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0276.207] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0276.207] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0276.208] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0276.692] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105638.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105638.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0276.692] GetFileType (hFile=0x1e0) returned 0x1 [0276.693] CloseHandle (hObject=0x1e0) returned 1 [0276.693] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0276.693] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105638.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105638.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x287c)) returned 1 [0276.693] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0276.694] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0276.694] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105638.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105638.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x287c)) returned 1 [0276.694] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0276.694] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0276.694] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0276.694] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x35f0, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0105710.WMF", cAlternateFileName="")) returned 1 [0276.694] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0276.694] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0276.695] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0276.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0276.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0276.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0276.695] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105710.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105710.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0276.696] GetFileType (hFile=0x1e0) returned 0x1 [0276.696] CloseHandle (hObject=0x1e0) returned 1 [0276.697] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0276.697] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105710.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105710.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x35f0)) returned 1 [0276.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0276.697] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0276.697] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105710.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105710.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x35f0)) returned 1 [0276.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0276.698] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0276.698] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0276.698] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2030, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0105846.WMF", cAlternateFileName="")) returned 1 [0276.698] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0276.698] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0276.698] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0276.698] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0276.698] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0276.699] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0276.699] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105846.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105846.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0276.700] GetFileType (hFile=0x1e0) returned 0x1 [0276.700] CloseHandle (hObject=0x1e0) returned 1 [0276.700] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0276.701] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105846.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105846.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2030)) returned 1 [0276.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0276.701] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0276.701] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105846.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105846.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2030)) returned 1 [0276.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0276.701] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0276.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0276.702] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2dc8, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0105912.WMF", cAlternateFileName="")) returned 1 [0276.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0276.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0276.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0276.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0276.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0276.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0276.703] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105912.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105912.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0276.703] GetFileType (hFile=0x1e0) returned 0x1 [0276.704] CloseHandle (hObject=0x1e0) returned 1 [0276.705] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0276.705] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105912.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105912.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2dc8)) returned 1 [0276.705] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0276.705] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0276.705] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105912.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105912.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2dc8)) returned 1 [0276.705] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0276.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0276.706] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0276.706] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1204, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0105974.WMF", cAlternateFileName="")) returned 1 [0276.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0276.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0276.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0276.706] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0276.706] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0276.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0276.708] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105974.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105974.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0276.709] GetFileType (hFile=0x1e0) returned 0x1 [0276.709] CloseHandle (hObject=0x1e0) returned 1 [0276.710] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0276.710] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105974.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105974.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1204)) returned 1 [0276.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0276.710] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0276.710] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105974.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105974.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1204)) returned 1 [0276.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0276.711] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0276.711] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0276.711] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x274c, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0106020.WMF", cAlternateFileName="")) returned 1 [0276.711] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0276.711] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0276.711] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0276.711] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0276.711] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0276.711] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0276.712] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106020.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106020.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0276.712] GetFileType (hFile=0x1e0) returned 0x1 [0276.713] CloseHandle (hObject=0x1e0) returned 1 [0276.713] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0276.713] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106020.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106020.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x274c)) returned 1 [0276.713] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0276.713] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0276.713] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106020.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106020.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x274c)) returned 1 [0276.714] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0276.714] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0276.714] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0276.714] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16b4, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0106124.WMF", cAlternateFileName="")) returned 1 [0276.714] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0276.714] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0276.714] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0276.714] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0276.714] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0276.715] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0276.715] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106124.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106124.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0276.715] GetFileType (hFile=0x1e0) returned 0x1 [0276.716] CloseHandle (hObject=0x1e0) returned 1 [0276.716] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0276.716] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106124.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106124.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16b4)) returned 1 [0276.717] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0276.717] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0276.717] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106124.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106124.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16b4)) returned 1 [0276.717] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0276.717] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0276.717] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0276.717] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5bfc, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0106146.WMF", cAlternateFileName="")) returned 1 [0276.717] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0276.717] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0276.718] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0276.718] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0276.718] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0276.718] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0276.719] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106146.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106146.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0276.719] GetFileType (hFile=0x1e0) returned 0x1 [0276.719] CloseHandle (hObject=0x1e0) returned 1 [0276.720] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0276.720] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106146.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106146.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5bfc)) returned 1 [0276.720] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0276.720] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0276.720] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106146.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106146.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5bfc)) returned 1 [0276.720] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0276.720] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0276.720] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0276.720] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e7c, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0106208.WMF", cAlternateFileName="")) returned 1 [0276.721] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0276.721] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0276.721] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0276.721] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0276.721] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0276.721] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0276.722] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106208.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106208.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0276.722] GetFileType (hFile=0x1e0) returned 0x1 [0276.723] CloseHandle (hObject=0x1e0) returned 1 [0276.723] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0276.723] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106208.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106208.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e7c)) returned 1 [0276.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0276.724] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0276.724] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106208.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106208.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e7c)) returned 1 [0276.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0276.724] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0276.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0276.724] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c90, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0106222.WMF", cAlternateFileName="")) returned 1 [0276.724] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0276.725] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0276.725] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0276.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0276.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0276.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0276.726] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106222.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106222.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0276.726] GetFileType (hFile=0x1e0) returned 0x1 [0276.726] CloseHandle (hObject=0x1e0) returned 1 [0276.726] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0276.727] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106222.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106222.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c90)) returned 1 [0276.727] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0276.727] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0276.727] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106222.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106222.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c90)) returned 1 [0276.727] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0276.727] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0276.727] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0276.727] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x864, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0106572.WMF", cAlternateFileName="")) returned 1 [0276.727] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0276.728] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0276.728] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0276.728] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0276.728] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0276.728] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0276.728] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106572.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106572.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0276.729] GetFileType (hFile=0x1e0) returned 0x1 [0276.729] CloseHandle (hObject=0x1e0) returned 1 [0276.729] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0276.729] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106572.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106572.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x864)) returned 1 [0276.730] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0276.730] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0276.730] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106572.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106572.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x864)) returned 1 [0276.730] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0276.730] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0276.730] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0276.730] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd04, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0106816.WMF", cAlternateFileName="")) returned 1 [0276.731] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0276.731] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0276.731] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0276.731] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0276.731] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0276.731] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0276.732] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106816.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106816.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0276.732] GetFileType (hFile=0x1e0) returned 0x1 [0276.732] CloseHandle (hObject=0x1e0) returned 1 [0276.733] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0276.733] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106816.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106816.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd04)) returned 1 [0276.733] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0276.733] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0276.733] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106816.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106816.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd04)) returned 1 [0276.734] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0276.734] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0276.734] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0276.734] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x35d8, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0106958.WMF", cAlternateFileName="")) returned 1 [0276.734] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0276.734] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0276.734] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0276.734] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0276.734] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0276.735] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0276.735] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106958.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106958.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0276.735] GetFileType (hFile=0x1e0) returned 0x1 [0276.736] CloseHandle (hObject=0x1e0) returned 1 [0276.736] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0276.736] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106958.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106958.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x35d8)) returned 1 [0276.737] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0276.737] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0276.737] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106958.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106958.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x35d8)) returned 1 [0276.737] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0276.737] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0276.737] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0276.737] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbcc, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0107024.WMF", cAlternateFileName="")) returned 1 [0276.737] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0276.738] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0276.738] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0276.738] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0276.738] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0277.004] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0277.005] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107024.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107024.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0277.005] GetFileType (hFile=0x21c) returned 0x1 [0277.006] CloseHandle (hObject=0x21c) returned 1 [0277.006] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0277.006] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107024.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107024.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbcc)) returned 1 [0277.006] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0277.006] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0277.006] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107024.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107024.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbcc)) returned 1 [0277.006] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0277.006] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0277.007] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0277.007] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1dd0, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0107026.WMF", cAlternateFileName="")) returned 1 [0277.007] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0277.007] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0277.007] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0277.007] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0277.007] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0277.007] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0277.008] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107026.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107026.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0277.008] GetFileType (hFile=0x21c) returned 0x1 [0277.008] CloseHandle (hObject=0x21c) returned 1 [0277.009] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0277.009] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107026.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107026.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1dd0)) returned 1 [0277.009] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0277.009] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0277.009] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107026.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107026.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1dd0)) returned 1 [0277.009] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0277.009] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0277.010] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0277.010] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2358, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0107042.WMF", cAlternateFileName="")) returned 1 [0277.010] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0277.010] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0277.010] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0277.010] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0277.010] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0277.010] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0277.011] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107042.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107042.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0277.011] GetFileType (hFile=0x21c) returned 0x1 [0277.012] CloseHandle (hObject=0x21c) returned 1 [0277.012] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0277.012] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107042.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107042.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2358)) returned 1 [0277.013] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0277.013] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0277.013] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107042.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107042.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2358)) returned 1 [0277.013] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0277.013] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0277.013] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0277.013] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3734, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0107090.WMF", cAlternateFileName="")) returned 1 [0277.013] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0277.014] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0277.014] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0277.014] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0277.014] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0277.014] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0277.015] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107090.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107090.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0277.015] GetFileType (hFile=0x21c) returned 0x1 [0277.015] CloseHandle (hObject=0x21c) returned 1 [0277.016] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0277.016] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107090.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107090.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3734)) returned 1 [0277.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0277.016] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0277.016] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107090.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107090.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3734)) returned 1 [0277.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0277.017] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0277.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0277.017] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x69cc, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0107130.WMF", cAlternateFileName="")) returned 1 [0277.017] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0277.017] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0277.017] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0277.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0277.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0277.018] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0277.018] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107130.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107130.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0277.019] GetFileType (hFile=0x21c) returned 0x1 [0277.019] CloseHandle (hObject=0x21c) returned 1 [0277.021] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0277.021] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107130.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107130.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x69cc)) returned 1 [0277.021] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0277.021] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0277.021] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107130.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107130.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x69cc)) returned 1 [0277.021] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0277.021] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0277.022] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0277.022] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbcfc, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0107132.WMF", cAlternateFileName="")) returned 1 [0277.022] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0277.022] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0277.022] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0277.022] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0277.022] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0277.022] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0277.023] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107132.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107132.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0277.023] GetFileType (hFile=0x21c) returned 0x1 [0277.023] CloseHandle (hObject=0x21c) returned 1 [0277.024] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0277.024] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107132.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107132.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbcfc)) returned 1 [0277.024] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0277.024] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0277.024] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107132.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107132.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbcfc)) returned 1 [0277.025] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0277.025] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0277.025] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0277.025] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbd04, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0107134.WMF", cAlternateFileName="")) returned 1 [0277.025] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0277.025] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0277.025] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0277.025] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0277.025] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0277.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0277.026] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107134.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107134.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0277.026] GetFileType (hFile=0x21c) returned 0x1 [0277.027] CloseHandle (hObject=0x21c) returned 1 [0277.027] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0277.027] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107134.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107134.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbd04)) returned 1 [0277.027] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0277.028] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0277.028] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107134.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107134.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbd04)) returned 1 [0277.028] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0277.028] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0277.028] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0277.028] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4330, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0107138.WMF", cAlternateFileName="")) returned 1 [0277.028] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0277.028] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0277.028] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0277.028] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0277.029] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0277.029] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0277.029] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107138.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107138.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0277.029] GetFileType (hFile=0x21c) returned 0x1 [0277.030] CloseHandle (hObject=0x21c) returned 1 [0277.030] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0277.030] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107138.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107138.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4330)) returned 1 [0277.031] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0277.031] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0277.031] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107138.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107138.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4330)) returned 1 [0277.031] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0277.031] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0277.031] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0277.031] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a94, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0107146.WMF", cAlternateFileName="")) returned 1 [0277.031] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0277.031] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0277.032] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0277.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0277.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0277.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0277.032] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107146.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107146.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0277.033] GetFileType (hFile=0x21c) returned 0x1 [0277.033] CloseHandle (hObject=0x21c) returned 1 [0277.033] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0277.033] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107146.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107146.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a94)) returned 1 [0277.033] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0277.034] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0277.034] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107146.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107146.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a94)) returned 1 [0277.034] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0277.034] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0277.034] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0277.034] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ea8, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0107148.WMF", cAlternateFileName="")) returned 1 [0277.034] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0277.034] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0277.034] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0277.034] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0277.034] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0277.034] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0277.035] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107148.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107148.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0277.035] GetFileType (hFile=0x21c) returned 0x1 [0277.036] CloseHandle (hObject=0x21c) returned 1 [0277.036] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0277.036] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107148.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107148.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ea8)) returned 1 [0277.036] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0277.036] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0277.036] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107148.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107148.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ea8)) returned 1 [0277.037] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0277.037] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0277.037] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0277.037] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3490, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0107150.WMF", cAlternateFileName="")) returned 1 [0277.037] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0277.037] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0277.037] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0277.037] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0277.037] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0277.037] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0277.038] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107150.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107150.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0277.038] GetFileType (hFile=0x21c) returned 0x1 [0277.038] CloseHandle (hObject=0x21c) returned 1 [0277.038] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0277.038] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107150.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107150.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3490)) returned 1 [0277.038] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0277.038] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0277.038] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107150.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107150.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3490)) returned 1 [0277.039] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0277.039] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0277.039] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0277.039] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5804, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0107152.WMF", cAlternateFileName="")) returned 1 [0277.039] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0277.039] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0277.039] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0277.039] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0277.039] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0277.039] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0277.039] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107152.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107152.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0277.040] GetFileType (hFile=0x21c) returned 0x1 [0277.040] CloseHandle (hObject=0x21c) returned 1 [0277.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0277.040] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107152.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107152.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5804)) returned 1 [0277.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0277.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0277.040] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107152.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107152.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5804)) returned 1 [0277.041] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0277.041] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0277.041] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0277.041] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x571c, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0107154.WMF", cAlternateFileName="")) returned 1 [0277.041] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0277.041] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0277.041] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0277.041] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0277.041] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0277.041] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0277.042] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107154.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107154.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0277.042] GetFileType (hFile=0x21c) returned 0x1 [0277.042] CloseHandle (hObject=0x21c) returned 1 [0277.043] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0277.043] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107154.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107154.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x571c)) returned 1 [0277.043] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0277.043] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0277.043] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107154.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107154.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x571c)) returned 1 [0277.043] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0277.043] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0277.043] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0277.043] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x614c, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0107158.WMF", cAlternateFileName="")) returned 1 [0277.044] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0277.044] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0277.044] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0277.044] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0277.044] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0277.044] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0277.045] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107158.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107158.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0277.045] GetFileType (hFile=0x21c) returned 0x1 [0277.045] CloseHandle (hObject=0x21c) returned 1 [0277.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0277.046] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107158.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107158.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x614c)) returned 1 [0277.046] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0277.046] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0277.046] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107158.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107158.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x614c)) returned 1 [0277.046] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0277.046] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0277.046] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0277.046] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ee4, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0107182.WMF", cAlternateFileName="")) returned 1 [0277.046] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0277.046] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0277.047] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0277.047] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0277.047] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0277.047] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0277.047] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107182.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107182.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0277.047] GetFileType (hFile=0x21c) returned 0x1 [0277.048] CloseHandle (hObject=0x21c) returned 1 [0277.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0277.048] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107182.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107182.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ee4)) returned 1 [0277.048] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0277.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0277.048] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107182.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107182.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ee4)) returned 1 [0277.049] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0277.049] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0277.049] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0277.049] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11b8, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0107188.WMF", cAlternateFileName="")) returned 1 [0277.049] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0277.049] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0277.049] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0277.049] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0277.050] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0277.050] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0277.050] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107188.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107188.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0277.051] GetFileType (hFile=0x21c) returned 0x1 [0277.315] CloseHandle (hObject=0x21c) returned 1 [0277.315] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0277.315] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107188.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107188.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11b8)) returned 1 [0277.316] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0277.316] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0277.316] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107188.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107188.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11b8)) returned 1 [0277.317] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0277.317] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0277.317] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0277.317] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x26f0, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0107192.WMF", cAlternateFileName="")) returned 1 [0277.317] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0277.317] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0277.318] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0277.318] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0277.318] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0277.318] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0277.319] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107192.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107192.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0277.319] GetFileType (hFile=0x21c) returned 0x1 [0277.320] CloseHandle (hObject=0x21c) returned 1 [0277.320] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0277.320] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107192.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107192.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x26f0)) returned 1 [0277.320] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0277.320] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0277.321] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107192.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107192.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x26f0)) returned 1 [0277.321] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0277.321] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0277.321] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0277.321] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ef4, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0107254.WMF", cAlternateFileName="")) returned 1 [0277.321] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0277.321] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0277.321] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0277.321] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0277.322] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0277.322] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0277.322] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107254.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107254.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0277.323] GetFileType (hFile=0x21c) returned 0x1 [0277.323] CloseHandle (hObject=0x21c) returned 1 [0277.325] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0277.325] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107254.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107254.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ef4)) returned 1 [0277.325] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0277.325] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0277.325] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107254.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107254.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ef4)) returned 1 [0277.325] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0277.325] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0277.325] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0277.325] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2168, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0107258.WMF", cAlternateFileName="")) returned 1 [0277.326] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0277.326] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0277.326] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0277.326] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0277.326] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0277.326] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0277.327] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107258.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107258.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0277.327] GetFileType (hFile=0x21c) returned 0x1 [0277.328] CloseHandle (hObject=0x21c) returned 1 [0277.328] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0277.328] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107258.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107258.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2168)) returned 1 [0277.328] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0277.328] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0277.329] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107258.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107258.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2168)) returned 1 [0277.329] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0277.329] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0277.329] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0277.329] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f3c, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0107262.WMF", cAlternateFileName="")) returned 1 [0277.329] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0277.329] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0277.329] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0277.330] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0277.330] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0277.330] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0277.330] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107262.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107262.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0277.331] GetFileType (hFile=0x21c) returned 0x1 [0277.331] CloseHandle (hObject=0x21c) returned 1 [0277.332] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0277.332] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107262.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107262.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f3c)) returned 1 [0277.332] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0277.332] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0277.332] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107262.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107262.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f3c)) returned 1 [0277.333] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0277.333] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0277.333] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0277.333] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1498, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0107264.WMF", cAlternateFileName="")) returned 1 [0277.333] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0277.333] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0277.333] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0277.333] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0277.333] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0277.333] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0277.334] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107264.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107264.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0277.334] GetFileType (hFile=0x21c) returned 0x1 [0277.334] CloseHandle (hObject=0x21c) returned 1 [0277.334] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0277.334] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107264.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107264.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1498)) returned 1 [0277.335] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0277.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0277.335] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107264.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107264.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1498)) returned 1 [0277.335] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0277.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0277.335] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0277.335] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16ec, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0107266.WMF", cAlternateFileName="")) returned 1 [0277.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0277.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0277.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0277.335] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0277.335] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0277.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0277.336] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107266.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107266.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0277.336] GetFileType (hFile=0x21c) returned 0x1 [0277.336] CloseHandle (hObject=0x21c) returned 1 [0277.337] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0277.337] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107266.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107266.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16ec)) returned 1 [0277.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0277.337] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0277.337] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107266.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107266.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16ec)) returned 1 [0277.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0277.337] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0277.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0277.337] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b64, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0107280.WMF", cAlternateFileName="")) returned 1 [0277.337] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0277.337] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0277.337] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0277.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0277.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0277.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0277.338] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107280.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107280.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0277.338] GetFileType (hFile=0x21c) returned 0x1 [0277.339] CloseHandle (hObject=0x21c) returned 1 [0277.339] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0277.339] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107280.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107280.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b64)) returned 1 [0277.339] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0277.339] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0277.339] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107280.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107280.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b64)) returned 1 [0277.339] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0277.339] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0277.339] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0277.339] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3734, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0107282.WMF", cAlternateFileName="")) returned 1 [0277.339] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0277.340] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0277.340] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0277.340] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0277.340] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0277.340] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0277.340] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107282.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107282.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0277.341] GetFileType (hFile=0x21c) returned 0x1 [0277.341] CloseHandle (hObject=0x21c) returned 1 [0277.341] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0277.342] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107282.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107282.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3734)) returned 1 [0277.342] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0277.342] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0277.342] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107282.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107282.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3734)) returned 1 [0277.342] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0277.342] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0277.342] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0277.342] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x347c, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0107288.WMF", cAlternateFileName="")) returned 1 [0277.342] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0277.343] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0277.344] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0277.344] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0277.344] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0277.344] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0277.344] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107288.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107288.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0277.344] GetFileType (hFile=0x21c) returned 0x1 [0277.345] CloseHandle (hObject=0x21c) returned 1 [0277.345] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0277.345] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107288.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107288.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x347c)) returned 1 [0277.345] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0277.345] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0277.345] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107288.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107288.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x347c)) returned 1 [0277.346] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0277.346] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0277.346] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0277.346] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3014, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0107290.WMF", cAlternateFileName="")) returned 1 [0277.346] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0277.346] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0277.346] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0277.346] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0277.346] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0277.346] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0277.347] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107290.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107290.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0277.347] GetFileType (hFile=0x21c) returned 0x1 [0277.347] CloseHandle (hObject=0x21c) returned 1 [0277.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0277.347] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107290.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107290.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3014)) returned 1 [0277.619] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0277.619] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0277.619] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107290.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107290.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3014)) returned 1 [0277.619] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0277.619] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0277.620] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0277.620] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x99c, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0107300.WMF", cAlternateFileName="")) returned 1 [0277.620] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0277.620] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0277.620] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0277.620] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0277.620] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0277.620] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0277.789] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107300.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107300.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0277.790] GetFileType (hFile=0x1ac) returned 0x1 [0277.790] CloseHandle (hObject=0x1ac) returned 1 [0277.790] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0277.791] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107300.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107300.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x99c)) returned 1 [0277.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0277.791] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0277.791] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107300.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107300.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x99c)) returned 1 [0277.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0277.791] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0277.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0277.791] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1028, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0107302.WMF", cAlternateFileName="")) returned 1 [0277.791] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0277.791] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0277.791] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0277.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0277.792] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0277.792] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0277.792] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107302.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107302.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0277.792] GetFileType (hFile=0x1ac) returned 0x1 [0277.793] CloseHandle (hObject=0x1ac) returned 1 [0277.793] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0277.793] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107302.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107302.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1028)) returned 1 [0277.793] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0277.793] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0277.793] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107302.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107302.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1028)) returned 1 [0277.793] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0277.793] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0277.794] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0277.794] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3e10, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0107308.WMF", cAlternateFileName="")) returned 1 [0277.794] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0277.794] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0277.794] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0277.794] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0277.794] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0277.794] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0277.795] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107308.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107308.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0277.795] GetFileType (hFile=0x1ac) returned 0x1 [0277.795] CloseHandle (hObject=0x1ac) returned 1 [0277.795] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0277.795] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107308.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107308.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3e10)) returned 1 [0277.796] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0277.796] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0277.796] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107308.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107308.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3e10)) returned 1 [0277.796] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0277.796] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0277.796] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0277.796] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a64, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0107314.WMF", cAlternateFileName="")) returned 1 [0277.796] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0277.796] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0277.796] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0277.796] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0277.797] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0277.797] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0277.797] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107314.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107314.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0277.797] GetFileType (hFile=0x1ac) returned 0x1 [0277.798] CloseHandle (hObject=0x1ac) returned 1 [0277.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0277.798] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107314.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107314.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a64)) returned 1 [0277.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0277.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0277.798] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107314.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107314.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a64)) returned 1 [0277.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0277.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0277.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0277.799] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c18, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0107316.WMF", cAlternateFileName="")) returned 1 [0277.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0277.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0277.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0277.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0277.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0277.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0277.800] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107316.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107316.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0277.800] GetFileType (hFile=0x1ac) returned 0x1 [0277.800] CloseHandle (hObject=0x1ac) returned 1 [0277.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0277.802] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107316.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107316.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c18)) returned 1 [0277.802] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0277.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0277.802] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107316.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107316.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c18)) returned 1 [0277.802] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0277.803] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0277.803] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0277.803] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1984, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0107328.WMF", cAlternateFileName="")) returned 1 [0277.803] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0277.803] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0277.803] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0277.803] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0277.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0277.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0277.804] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107328.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107328.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0277.804] GetFileType (hFile=0x1ac) returned 0x1 [0277.805] CloseHandle (hObject=0x1ac) returned 1 [0277.805] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0277.805] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107328.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107328.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1984)) returned 1 [0277.806] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0277.806] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0277.806] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107328.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107328.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1984)) returned 1 [0277.806] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0277.806] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0277.806] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0277.806] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1094, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0107342.WMF", cAlternateFileName="")) returned 1 [0277.806] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0277.806] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0277.807] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0277.807] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0277.807] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0277.807] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0277.807] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107342.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107342.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0277.808] GetFileType (hFile=0x1ac) returned 0x1 [0277.808] CloseHandle (hObject=0x1ac) returned 1 [0277.808] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0277.808] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107342.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107342.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1094)) returned 1 [0277.809] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0277.809] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0277.809] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107342.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107342.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1094)) returned 1 [0277.809] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0277.809] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0277.809] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0277.809] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13d4, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0107344.WMF", cAlternateFileName="")) returned 1 [0277.809] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0277.809] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0277.809] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0277.809] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0277.810] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0277.810] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0277.810] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107344.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107344.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0277.810] GetFileType (hFile=0x1ac) returned 0x1 [0277.811] CloseHandle (hObject=0x1ac) returned 1 [0277.811] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0277.811] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107344.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107344.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13d4)) returned 1 [0277.811] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0277.811] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0277.812] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107344.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107344.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13d4)) returned 1 [0277.812] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0277.812] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0277.812] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0277.812] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5c78, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0107350.WMF", cAlternateFileName="")) returned 1 [0277.812] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0277.812] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0277.812] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0277.812] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0277.812] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0277.812] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0277.813] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107350.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107350.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0277.813] GetFileType (hFile=0x1ac) returned 0x1 [0277.813] CloseHandle (hObject=0x1ac) returned 1 [0277.813] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0277.813] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107350.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107350.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5c78)) returned 1 [0277.814] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0277.814] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0277.814] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107350.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107350.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5c78)) returned 1 [0277.814] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0277.814] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0277.814] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0277.814] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f1c, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0107358.WMF", cAlternateFileName="")) returned 1 [0277.814] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0277.814] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0277.814] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0277.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0277.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0277.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0277.815] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107358.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107358.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0277.815] GetFileType (hFile=0x1ac) returned 0x1 [0277.816] CloseHandle (hObject=0x1ac) returned 1 [0277.816] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0277.816] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107358.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107358.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f1c)) returned 1 [0277.816] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0277.816] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0277.817] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107358.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107358.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f1c)) returned 1 [0277.817] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0277.817] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0277.817] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0277.817] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x40cc, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0107364.WMF", cAlternateFileName="")) returned 1 [0277.818] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0277.818] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0277.818] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0277.818] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0277.818] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0277.818] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0277.818] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107364.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107364.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0277.818] GetFileType (hFile=0x1ac) returned 0x1 [0277.819] CloseHandle (hObject=0x1ac) returned 1 [0277.819] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0277.819] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107364.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107364.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x40cc)) returned 1 [0277.819] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0277.819] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0277.819] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107364.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107364.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x40cc)) returned 1 [0277.819] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0277.820] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0277.820] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0277.820] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ce4, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0107426.WMF", cAlternateFileName="")) returned 1 [0277.820] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0277.820] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0277.820] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0277.820] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0277.820] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0277.820] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0277.820] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107426.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107426.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0277.821] GetFileType (hFile=0x1ac) returned 0x1 [0277.821] CloseHandle (hObject=0x1ac) returned 1 [0277.821] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0277.821] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107426.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107426.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ce4)) returned 1 [0277.821] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0277.821] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0277.822] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107426.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107426.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ce4)) returned 1 [0277.822] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0277.822] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0277.822] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0277.822] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7680, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0107446.WMF", cAlternateFileName="")) returned 1 [0277.822] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0277.822] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0277.822] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0277.822] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0277.822] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0277.822] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0277.823] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107446.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107446.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0277.823] GetFileType (hFile=0x1ac) returned 0x1 [0277.823] CloseHandle (hObject=0x1ac) returned 1 [0277.824] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0277.824] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107446.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107446.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7680)) returned 1 [0277.824] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0277.824] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0277.824] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107446.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107446.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7680)) returned 1 [0277.824] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0277.824] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0277.824] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0277.824] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1338, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0107450.WMF", cAlternateFileName="")) returned 1 [0277.824] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0277.824] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0277.825] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0277.825] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0277.825] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0277.825] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0277.825] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107450.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107450.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0277.825] GetFileType (hFile=0x1ac) returned 0x1 [0277.826] CloseHandle (hObject=0x1ac) returned 1 [0277.826] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0277.826] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107450.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107450.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1338)) returned 1 [0277.826] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0277.826] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0277.826] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107450.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107450.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1338)) returned 1 [0277.826] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0277.826] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0277.826] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0277.826] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x52e0, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0107452.WMF", cAlternateFileName="")) returned 1 [0277.827] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0277.827] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0277.827] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0277.827] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0277.827] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0277.827] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0277.827] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107452.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107452.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0277.827] GetFileType (hFile=0x1ac) returned 0x1 [0277.828] CloseHandle (hObject=0x1ac) returned 1 [0277.828] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0277.828] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107452.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107452.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x52e0)) returned 1 [0277.828] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0277.828] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0277.828] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107452.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107452.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x52e0)) returned 1 [0277.829] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0277.829] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0277.829] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0277.829] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe8c, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0107456.WMF", cAlternateFileName="")) returned 1 [0277.829] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0277.829] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0277.829] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0277.829] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0277.829] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0277.829] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0277.830] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107456.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107456.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0277.830] GetFileType (hFile=0x1ac) returned 0x1 [0277.830] CloseHandle (hObject=0x1ac) returned 1 [0277.830] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0277.831] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107456.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107456.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe8c)) returned 1 [0277.831] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0277.831] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0277.831] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107456.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107456.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe8c)) returned 1 [0277.831] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0277.831] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0277.831] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0277.831] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdf0, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0107458.WMF", cAlternateFileName="")) returned 1 [0277.831] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0277.831] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0277.831] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0277.832] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0277.832] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0277.832] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0278.304] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107458.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107458.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0278.305] GetFileType (hFile=0x1ac) returned 0x1 [0278.305] CloseHandle (hObject=0x1ac) returned 1 [0278.305] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0278.305] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107458.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107458.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdf0)) returned 1 [0278.305] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0278.306] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0278.306] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107458.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107458.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdf0)) returned 1 [0278.306] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0278.306] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0278.306] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0278.306] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x258c, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0107468.WMF", cAlternateFileName="")) returned 1 [0278.306] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0278.306] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0278.306] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0278.306] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0278.307] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0278.307] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0278.307] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107468.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107468.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0278.307] GetFileType (hFile=0x1ac) returned 0x1 [0278.308] CloseHandle (hObject=0x1ac) returned 1 [0278.308] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0278.308] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107468.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107468.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x258c)) returned 1 [0278.309] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0278.309] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0278.309] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107468.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107468.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x258c)) returned 1 [0278.309] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0278.309] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0278.309] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0278.309] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1788, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0107480.WMF", cAlternateFileName="")) returned 1 [0278.309] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0278.309] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0278.309] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0278.310] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0278.310] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0278.310] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0278.310] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107480.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107480.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0278.311] GetFileType (hFile=0x1ac) returned 0x1 [0278.311] CloseHandle (hObject=0x1ac) returned 1 [0278.311] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0278.311] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107480.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107480.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1788)) returned 1 [0278.311] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0278.312] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0278.312] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107480.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107480.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1788)) returned 1 [0278.312] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0278.312] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0278.312] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0278.312] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe736331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe736331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1374, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0107482.WMF", cAlternateFileName="")) returned 1 [0278.312] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0278.312] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0278.312] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0278.313] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0278.313] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0278.313] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0278.313] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107482.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107482.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0278.314] GetFileType (hFile=0x1ac) returned 0x1 [0278.314] CloseHandle (hObject=0x1ac) returned 1 [0278.315] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0278.315] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107482.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107482.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe736331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe736331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1374)) returned 1 [0278.315] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0278.315] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0278.315] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107482.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107482.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe736331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe736331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1374)) returned 1 [0278.315] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0278.315] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0278.316] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0278.317] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbe0, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0107484.WMF", cAlternateFileName="")) returned 1 [0278.317] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0278.317] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0278.317] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0278.317] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0278.317] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0278.317] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0278.318] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107484.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107484.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0278.318] GetFileType (hFile=0x1ac) returned 0x1 [0278.319] CloseHandle (hObject=0x1ac) returned 1 [0278.319] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0278.319] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107484.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107484.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbe0)) returned 1 [0278.320] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0278.320] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0278.320] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107484.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107484.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbe0)) returned 1 [0278.320] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0278.320] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0278.320] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0278.320] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f40, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0107488.WMF", cAlternateFileName="")) returned 1 [0278.320] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0278.321] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0278.321] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0278.321] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0278.321] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0278.321] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0278.322] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107488.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107488.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0278.322] GetFileType (hFile=0x1ac) returned 0x1 [0278.322] CloseHandle (hObject=0x1ac) returned 1 [0278.323] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0278.323] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107488.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107488.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f40)) returned 1 [0278.323] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0278.323] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0278.323] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107488.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107488.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f40)) returned 1 [0278.323] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0278.323] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0278.323] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0278.323] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4054, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0107490.WMF", cAlternateFileName="")) returned 1 [0278.324] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0278.324] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0278.324] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0278.324] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0278.324] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0278.324] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0278.325] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107490.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107490.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0278.325] GetFileType (hFile=0x1ac) returned 0x1 [0278.325] CloseHandle (hObject=0x1ac) returned 1 [0278.326] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0278.326] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107490.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107490.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4054)) returned 1 [0278.326] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0278.326] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0278.326] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107490.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107490.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4054)) returned 1 [0278.326] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0278.326] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0278.326] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0278.327] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1acc, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0107492.WMF", cAlternateFileName="")) returned 1 [0278.327] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0278.327] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0278.327] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0278.327] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0278.327] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0278.327] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0278.328] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107492.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107492.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0278.328] GetFileType (hFile=0x1ac) returned 0x1 [0278.328] CloseHandle (hObject=0x1ac) returned 1 [0278.329] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0278.329] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107492.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107492.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1acc)) returned 1 [0278.329] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0278.329] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0278.329] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107492.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107492.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1acc)) returned 1 [0278.329] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0278.329] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0278.330] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0278.330] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1918, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0107494.WMF", cAlternateFileName="")) returned 1 [0278.330] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0278.330] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0278.330] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0278.330] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0278.330] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0278.330] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0278.331] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107494.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107494.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0278.331] GetFileType (hFile=0x1ac) returned 0x1 [0278.332] CloseHandle (hObject=0x1ac) returned 1 [0278.332] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0278.332] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107494.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107494.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1918)) returned 1 [0278.332] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0278.332] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0278.333] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107494.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107494.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1918)) returned 1 [0278.333] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0278.333] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0278.333] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0278.333] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x22a0, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0107496.WMF", cAlternateFileName="")) returned 1 [0278.333] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0278.333] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0278.333] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0278.333] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0278.334] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0278.334] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0278.334] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107496.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107496.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0278.335] GetFileType (hFile=0x1ac) returned 0x1 [0278.336] CloseHandle (hObject=0x1ac) returned 1 [0278.336] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0278.337] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107496.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107496.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x22a0)) returned 1 [0278.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0278.337] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0278.337] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107496.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107496.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x22a0)) returned 1 [0278.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0278.337] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0278.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0278.338] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1068, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0107500.WMF", cAlternateFileName="")) returned 1 [0278.338] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0278.338] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0278.338] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0278.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0278.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0278.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0278.339] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107500.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107500.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0278.339] GetFileType (hFile=0x1ac) returned 0x1 [0278.340] CloseHandle (hObject=0x1ac) returned 1 [0278.340] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0278.340] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107500.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107500.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1068)) returned 1 [0278.340] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0278.340] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0278.340] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107500.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107500.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1068)) returned 1 [0278.341] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0278.341] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0278.341] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0278.341] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a54, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0107502.WMF", cAlternateFileName="")) returned 1 [0278.341] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0278.341] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0278.341] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0278.341] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0278.341] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0278.341] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0278.342] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107502.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107502.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0278.342] GetFileType (hFile=0x1ac) returned 0x1 [0278.343] CloseHandle (hObject=0x1ac) returned 1 [0278.343] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0278.343] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107502.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107502.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a54)) returned 1 [0278.343] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0278.343] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0278.344] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107502.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107502.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a54)) returned 1 [0278.344] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0278.344] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0278.344] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0278.344] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c8c, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0107512.WMF", cAlternateFileName="")) returned 1 [0278.344] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0278.344] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0278.344] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0278.344] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0278.345] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0278.345] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0278.345] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107512.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107512.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0278.345] GetFileType (hFile=0x1ac) returned 0x1 [0278.346] CloseHandle (hObject=0x1ac) returned 1 [0278.346] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0278.346] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107512.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107512.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c8c)) returned 1 [0278.346] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0278.346] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0278.347] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107512.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107512.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c8c)) returned 1 [0278.347] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0278.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0278.347] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0278.347] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe78281d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe78281d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2fac, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0107514.WMF", cAlternateFileName="")) returned 1 [0278.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0278.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0278.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0278.347] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0278.347] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0278.347] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0278.348] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107514.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107514.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0278.348] GetFileType (hFile=0x1ac) returned 0x1 [0278.348] CloseHandle (hObject=0x1ac) returned 1 [0278.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0278.349] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107514.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107514.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe78281d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe78281d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2fac)) returned 1 [0278.349] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0278.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0278.349] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107514.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107514.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe78281d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe78281d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2fac)) returned 1 [0278.349] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0278.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0278.350] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0278.350] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe78281d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe78281d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x36b8, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0107516.WMF", cAlternateFileName="")) returned 1 [0278.350] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0278.350] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0278.350] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0278.350] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0278.350] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0278.478] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0278.478] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107516.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107516.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0278.479] GetFileType (hFile=0x1ac) returned 0x1 [0278.479] CloseHandle (hObject=0x1ac) returned 1 [0278.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0278.480] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107516.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107516.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe78281d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe78281d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x36b8)) returned 1 [0278.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0278.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0278.481] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107516.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107516.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe78281d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe78281d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x36b8)) returned 1 [0278.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0278.481] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0278.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0278.481] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe78281d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe78281d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe78281d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f0c, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0107526.WMF", cAlternateFileName="")) returned 1 [0278.481] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0278.481] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0278.481] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0278.482] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0278.482] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0278.482] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0278.482] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107526.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107526.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0278.483] GetFileType (hFile=0x1ac) returned 0x1 [0278.483] CloseHandle (hObject=0x1ac) returned 1 [0278.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0278.484] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107526.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107526.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe78281d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe78281d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe78281d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f0c)) returned 1 [0278.484] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0278.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0278.484] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107526.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107526.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe78281d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe78281d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe78281d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f0c)) returned 1 [0278.484] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0278.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0278.485] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0278.485] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe78281d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe78281d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe78281d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a88, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0107528.WMF", cAlternateFileName="")) returned 1 [0278.485] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0278.485] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0278.485] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0278.485] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0278.485] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0278.485] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0278.486] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107528.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107528.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0278.486] GetFileType (hFile=0x1ac) returned 0x1 [0278.487] CloseHandle (hObject=0x1ac) returned 1 [0278.487] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0278.487] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107528.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107528.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe78281d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe78281d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe78281d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a88)) returned 1 [0278.487] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0278.487] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0278.488] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107528.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107528.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe78281d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe78281d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe78281d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a88)) returned 1 [0278.488] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0278.488] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0278.488] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0278.488] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe736331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe736331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe78281d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6890, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0107544.WMF", cAlternateFileName="")) returned 1 [0278.488] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0278.488] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0278.489] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0278.489] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0278.489] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0278.489] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0278.489] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107544.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107544.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0278.490] GetFileType (hFile=0x1ac) returned 0x1 [0278.490] CloseHandle (hObject=0x1ac) returned 1 [0278.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0278.491] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107544.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107544.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe736331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe736331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe78281d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6890)) returned 1 [0278.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0278.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0278.492] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107544.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107544.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe736331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe736331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe78281d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6890)) returned 1 [0278.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0278.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0278.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0278.492] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe736331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe736331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe75c571, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ba0, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0107658.WMF", cAlternateFileName="")) returned 1 [0278.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0278.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0278.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0278.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0278.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0278.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0278.493] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107658.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107658.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0278.494] GetFileType (hFile=0x1ac) returned 0x1 [0278.494] CloseHandle (hObject=0x1ac) returned 1 [0278.495] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0278.495] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107658.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107658.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe736331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe736331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe75c571, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ba0)) returned 1 [0278.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0278.495] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0278.495] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107658.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107658.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe736331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe736331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe75c571, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ba0)) returned 1 [0278.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0278.495] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0278.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0278.496] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe75c571, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe75c571, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe78281d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12c8, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0107708.WMF", cAlternateFileName="")) returned 1 [0278.496] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0278.496] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0278.496] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0278.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0278.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0278.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0278.497] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107708.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107708.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0278.497] GetFileType (hFile=0x1ac) returned 0x1 [0278.497] CloseHandle (hObject=0x1ac) returned 1 [0278.498] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0278.498] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107708.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107708.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe75c571, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe75c571, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe78281d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12c8)) returned 1 [0278.498] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0278.498] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0278.498] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107708.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107708.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe75c571, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe75c571, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe78281d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12c8)) returned 1 [0278.499] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0278.499] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0278.499] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0278.499] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe736331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe736331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe75c571, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x121c, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0107712.WMF", cAlternateFileName="")) returned 1 [0278.499] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0278.499] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0278.499] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0278.499] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0278.499] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0278.500] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0278.500] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107712.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107712.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0278.500] GetFileType (hFile=0x1ac) returned 0x1 [0278.501] CloseHandle (hObject=0x1ac) returned 1 [0278.501] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0278.501] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107712.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107712.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe736331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe736331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe75c571, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x121c)) returned 1 [0278.502] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0278.502] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0278.502] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107712.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107712.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe736331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe736331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe75c571, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x121c)) returned 1 [0278.502] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0278.502] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0278.502] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0278.502] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe736331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe736331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe78281d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xed8, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0107718.WMF", cAlternateFileName="")) returned 1 [0278.503] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0278.503] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0278.503] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0278.503] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0278.503] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0278.503] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0278.504] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107718.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107718.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0278.504] GetFileType (hFile=0x1ac) returned 0x1 [0278.504] CloseHandle (hObject=0x1ac) returned 1 [0278.505] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0278.505] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107718.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107718.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe736331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe736331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe78281d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xed8)) returned 1 [0278.505] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0278.505] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0278.505] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107718.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107718.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe736331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe736331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe78281d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xed8)) returned 1 [0278.506] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0278.506] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0278.506] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0278.506] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe736331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe736331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2044, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0107722.WMF", cAlternateFileName="")) returned 1 [0278.670] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0278.670] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0278.670] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0278.670] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0278.670] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0278.670] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0278.945] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107722.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107722.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0278.946] GetFileType (hFile=0x1e0) returned 0x1 [0278.946] CloseHandle (hObject=0x1e0) returned 1 [0278.947] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0278.947] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107722.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107722.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe736331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe736331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2044)) returned 1 [0278.947] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0278.947] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0278.947] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107722.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107722.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe736331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe736331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2044)) returned 1 [0278.948] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0278.948] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0278.948] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0278.948] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b68, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0107724.WMF", cAlternateFileName="")) returned 1 [0278.948] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0278.948] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0278.948] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0278.948] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0278.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0278.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0278.949] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107724.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107724.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0278.950] GetFileType (hFile=0x1e0) returned 0x1 [0278.950] CloseHandle (hObject=0x1e0) returned 1 [0278.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0278.950] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107724.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107724.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b68)) returned 1 [0278.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0278.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0278.951] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107724.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107724.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b68)) returned 1 [0278.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0278.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0278.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0278.951] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1574, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0107728.WMF", cAlternateFileName="")) returned 1 [0278.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0278.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0278.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0278.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0278.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0278.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0278.952] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107728.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107728.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0278.953] GetFileType (hFile=0x1e0) returned 0x1 [0278.954] CloseHandle (hObject=0x1e0) returned 1 [0278.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0278.955] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107728.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107728.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1574)) returned 1 [0278.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0278.955] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0278.955] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107728.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107728.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1574)) returned 1 [0278.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0278.955] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0278.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0278.956] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbf4, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0107730.WMF", cAlternateFileName="")) returned 1 [0278.956] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0278.956] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0278.956] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0278.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0278.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0278.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0278.957] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107730.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107730.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0278.958] GetFileType (hFile=0x1e0) returned 0x1 [0278.958] CloseHandle (hObject=0x1e0) returned 1 [0278.958] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0278.959] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107730.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107730.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbf4)) returned 1 [0278.959] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0278.959] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0278.959] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107730.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107730.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbf4)) returned 1 [0278.959] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0278.959] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0278.959] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0278.959] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc44, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0107734.WMF", cAlternateFileName="")) returned 1 [0278.960] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0278.960] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0278.960] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0278.960] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0278.960] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0278.961] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0278.961] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107734.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107734.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0278.962] GetFileType (hFile=0x1e0) returned 0x1 [0278.962] CloseHandle (hObject=0x1e0) returned 1 [0278.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0278.963] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107734.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107734.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc44)) returned 1 [0278.963] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0278.963] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0278.963] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107734.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107734.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc44)) returned 1 [0278.963] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0278.963] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0278.963] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0278.963] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe3c, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0107742.WMF", cAlternateFileName="")) returned 1 [0278.963] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0278.964] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0278.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0278.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0278.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0278.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0278.974] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107742.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107742.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0278.975] GetFileType (hFile=0x1e0) returned 0x1 [0278.977] CloseHandle (hObject=0x1e0) returned 1 [0278.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0278.980] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107742.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107742.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe3c)) returned 1 [0278.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0278.980] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0278.980] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107742.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107742.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe3c)) returned 1 [0278.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0278.980] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0278.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0278.981] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe78281d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe78281d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x138c, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0107744.WMF", cAlternateFileName="")) returned 1 [0278.981] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0278.981] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0278.981] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0278.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0278.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0278.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0278.982] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107744.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107744.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0278.984] GetFileType (hFile=0x1e0) returned 0x1 [0278.984] CloseHandle (hObject=0x1e0) returned 1 [0278.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0278.985] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107744.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107744.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe78281d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe78281d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x138c)) returned 1 [0278.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0278.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0278.986] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107744.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107744.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe78281d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe78281d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x138c)) returned 1 [0278.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0278.986] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0278.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0278.986] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12b4, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0107746.WMF", cAlternateFileName="")) returned 1 [0278.986] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0278.987] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0278.987] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0278.987] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0278.987] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0278.987] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0278.988] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107746.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107746.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0278.988] GetFileType (hFile=0x1e0) returned 0x1 [0278.989] CloseHandle (hObject=0x1e0) returned 1 [0278.990] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0278.990] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107746.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107746.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12b4)) returned 1 [0278.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0278.990] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0278.990] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107746.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107746.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12b4)) returned 1 [0278.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0278.991] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0278.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0278.991] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2020, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0107748.WMF", cAlternateFileName="")) returned 1 [0279.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0279.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0279.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0279.540] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0279.540] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0279.540] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0279.541] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107748.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107748.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0279.542] GetFileType (hFile=0x1e8) returned 0x1 [0279.542] CloseHandle (hObject=0x1e8) returned 1 [0279.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0279.543] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107748.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107748.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2020)) returned 1 [0279.543] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0279.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0279.544] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107748.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107748.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2020)) returned 1 [0279.544] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0279.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0279.544] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0279.544] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x126c, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0107750.WMF", cAlternateFileName="")) returned 1 [0279.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0279.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0279.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0279.545] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0279.545] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0279.545] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0279.546] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107750.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107750.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0279.546] GetFileType (hFile=0x1e8) returned 0x1 [0279.546] CloseHandle (hObject=0x1e8) returned 1 [0279.547] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0279.547] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107750.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107750.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x126c)) returned 1 [0279.547] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0279.547] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0279.547] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107750.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107750.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x126c)) returned 1 [0279.548] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0279.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0279.548] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0279.548] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe78281d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe78281d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4146, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0136865.WMF", cAlternateFileName="")) returned 1 [0279.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0279.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0279.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0279.548] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0279.548] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0279.549] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0279.549] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0136865.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0136865.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0279.549] GetFileType (hFile=0x1e8) returned 0x1 [0279.550] CloseHandle (hObject=0x1e8) returned 1 [0279.550] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0279.550] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0136865.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0136865.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe78281d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe78281d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4146)) returned 1 [0279.551] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0279.551] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0279.551] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0136865.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0136865.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe78281d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe78281d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4146)) returned 1 [0279.551] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0279.551] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0279.551] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0279.551] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9d27, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0144773.JPG", cAlternateFileName="")) returned 1 [0279.551] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0279.551] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0279.552] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0279.552] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0279.552] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0279.552] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0279.553] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0144773.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0144773.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0279.553] GetFileType (hFile=0x1e8) returned 0x1 [0279.554] CloseHandle (hObject=0x1e8) returned 1 [0279.555] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0279.555] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0144773.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0144773.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9d27)) returned 1 [0279.555] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0279.555] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0279.555] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0144773.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0144773.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9d27)) returned 1 [0279.555] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0279.555] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0279.556] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0279.556] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8379, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0145168.JPG", cAlternateFileName="")) returned 1 [0279.556] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0279.556] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0279.556] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0279.556] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0279.556] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0279.556] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0279.557] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145168.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145168.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0279.558] GetFileType (hFile=0x1e8) returned 0x1 [0279.558] CloseHandle (hObject=0x1e8) returned 1 [0279.558] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0279.559] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145168.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145168.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8379)) returned 1 [0279.559] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0279.559] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0279.559] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145168.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145168.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8379)) returned 1 [0279.559] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0279.559] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0279.559] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0279.560] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf0c1, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0145212.JPG", cAlternateFileName="")) returned 1 [0279.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0279.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0279.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0279.560] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0279.560] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0279.560] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0279.561] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145212.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145212.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0279.561] GetFileType (hFile=0x1e8) returned 0x1 [0279.562] CloseHandle (hObject=0x1e8) returned 1 [0279.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0279.562] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145212.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145212.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf0c1)) returned 1 [0279.562] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0279.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0279.563] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145212.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145212.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf0c1)) returned 1 [0279.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0279.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0279.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0279.563] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc056, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0145272.JPG", cAlternateFileName="")) returned 1 [0279.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0279.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0279.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0279.564] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0279.564] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0279.564] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0279.565] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145272.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145272.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0279.570] GetFileType (hFile=0x1e0) returned 0x1 [0279.571] CloseHandle (hObject=0x1e0) returned 1 [0279.572] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0279.572] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145272.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145272.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc056)) returned 1 [0279.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0279.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0279.573] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145272.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145272.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc056)) returned 1 [0279.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0279.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0279.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0279.574] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5285, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0145361.JPG", cAlternateFileName="")) returned 1 [0279.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0279.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0279.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0279.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0279.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0279.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0279.576] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145361.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145361.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0279.576] GetFileType (hFile=0x1e0) returned 0x1 [0279.577] CloseHandle (hObject=0x1e0) returned 1 [0279.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0279.578] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145361.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145361.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5285)) returned 1 [0279.578] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0279.578] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0279.578] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145361.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145361.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5285)) returned 1 [0279.578] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0279.578] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0279.579] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0279.579] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45cb, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0145373.JPG", cAlternateFileName="")) returned 1 [0279.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0279.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0279.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0279.579] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0279.579] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0279.579] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0279.580] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145373.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145373.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0279.580] GetFileType (hFile=0x1e0) returned 0x1 [0279.581] CloseHandle (hObject=0x1e0) returned 1 [0279.581] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0279.581] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145373.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145373.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45cb)) returned 1 [0279.581] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0279.581] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0279.582] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145373.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145373.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45cb)) returned 1 [0279.582] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0279.582] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0279.582] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0279.582] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7c6a, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0145669.JPG", cAlternateFileName="")) returned 1 [0279.582] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0279.582] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0279.582] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0279.582] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0279.583] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0279.583] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0279.583] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145669.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145669.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0279.584] GetFileType (hFile=0x1e0) returned 0x1 [0279.584] CloseHandle (hObject=0x1e0) returned 1 [0279.585] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0279.856] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145669.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145669.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7c6a)) returned 1 [0279.856] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0279.856] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0279.856] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145669.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145669.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7c6a)) returned 1 [0279.856] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0279.857] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0279.857] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0279.857] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8fd4, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0145707.JPG", cAlternateFileName="")) returned 1 [0279.857] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0279.857] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0279.857] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0279.857] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0279.857] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0279.857] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0280.024] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145707.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145707.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0280.024] GetFileType (hFile=0x198) returned 0x1 [0280.025] CloseHandle (hObject=0x198) returned 1 [0280.025] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0280.025] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145707.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145707.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8fd4)) returned 1 [0280.025] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0280.025] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0280.026] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145707.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145707.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8fd4)) returned 1 [0280.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0280.026] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0280.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0280.026] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8fb8, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0145810.JPG", cAlternateFileName="")) returned 1 [0280.026] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0280.026] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0280.026] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0280.027] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0280.027] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0280.027] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0280.027] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145810.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145810.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0280.028] GetFileType (hFile=0x198) returned 0x1 [0280.028] CloseHandle (hObject=0x198) returned 1 [0280.029] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0280.029] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145810.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145810.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8fb8)) returned 1 [0280.029] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0280.029] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0280.029] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145810.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145810.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8fb8)) returned 1 [0280.029] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0280.029] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0280.030] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0280.030] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8a5b, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0145879.JPG", cAlternateFileName="")) returned 1 [0280.030] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0280.030] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0280.030] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0280.030] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0280.030] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0280.031] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0280.031] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145879.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145879.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0280.032] GetFileType (hFile=0x198) returned 0x1 [0280.032] CloseHandle (hObject=0x198) returned 1 [0280.033] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0280.033] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145879.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145879.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8a5b)) returned 1 [0280.033] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0280.033] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0280.033] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145879.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145879.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8a5b)) returned 1 [0280.033] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0280.034] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0280.034] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0280.034] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x84a6, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0145895.JPG", cAlternateFileName="")) returned 1 [0280.034] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0280.034] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0280.034] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0280.034] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0280.035] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0280.035] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0280.036] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145895.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145895.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0280.036] GetFileType (hFile=0x198) returned 0x1 [0280.036] CloseHandle (hObject=0x198) returned 1 [0280.037] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0280.037] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145895.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145895.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x84a6)) returned 1 [0280.037] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0280.037] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0280.038] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145895.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145895.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x84a6)) returned 1 [0280.038] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0280.038] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0280.038] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0280.038] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9a76, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0145904.JPG", cAlternateFileName="")) returned 1 [0280.042] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0280.042] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0280.042] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0280.042] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0280.042] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0280.042] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0280.043] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145904.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145904.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0280.043] GetFileType (hFile=0x198) returned 0x1 [0280.044] CloseHandle (hObject=0x198) returned 1 [0280.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0280.045] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145904.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145904.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9a76)) returned 1 [0280.045] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0280.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0280.045] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145904.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145904.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9a76)) returned 1 [0280.045] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0280.046] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0280.046] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0280.046] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb5ac, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0146142.JPG", cAlternateFileName="")) returned 1 [0280.046] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0280.046] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0280.046] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0280.046] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0280.046] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0280.047] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0280.047] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0146142.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0146142.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0280.048] GetFileType (hFile=0x198) returned 0x1 [0280.048] CloseHandle (hObject=0x198) returned 1 [0280.049] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0280.049] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0146142.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0146142.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb5ac)) returned 1 [0280.049] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0280.049] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0280.049] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0146142.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0146142.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb5ac)) returned 1 [0280.049] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0280.050] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0280.050] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0280.050] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe81b154, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe81b154, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaa9a, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0148309.JPG", cAlternateFileName="")) returned 1 [0280.050] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0280.050] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0280.050] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0280.050] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0280.050] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0280.051] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0280.051] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148309.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148309.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0280.052] GetFileType (hFile=0x198) returned 0x1 [0280.052] CloseHandle (hObject=0x198) returned 1 [0280.053] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0280.053] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148309.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148309.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe81b154, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe81b154, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaa9a)) returned 1 [0280.053] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0280.053] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0280.053] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148309.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148309.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe81b154, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe81b154, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaa9a)) returned 1 [0280.053] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0280.053] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0280.054] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0280.054] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x107d4, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0148757.JPG", cAlternateFileName="")) returned 1 [0280.054] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0280.054] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0280.054] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0280.054] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0280.054] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0280.054] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0280.055] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148757.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148757.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0280.055] GetFileType (hFile=0x198) returned 0x1 [0280.056] CloseHandle (hObject=0x198) returned 1 [0280.056] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0280.056] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148757.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148757.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x107d4)) returned 1 [0280.057] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0280.057] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0280.057] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148757.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148757.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x107d4)) returned 1 [0280.057] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0280.057] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0280.057] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0280.057] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe81b154, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x955d, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0148798.JPG", cAlternateFileName="")) returned 1 [0280.057] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0280.058] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0280.058] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0280.058] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0280.058] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0280.058] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0280.059] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148798.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148798.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0280.059] GetFileType (hFile=0x198) returned 0x1 [0280.059] CloseHandle (hObject=0x198) returned 1 [0280.060] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0280.060] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148798.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148798.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe81b154, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x955d)) returned 1 [0280.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0280.060] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0280.060] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148798.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148798.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe81b154, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x955d)) returned 1 [0280.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0280.060] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0280.061] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0280.061] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7f4eef, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7f4eef, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6b01, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0149018.JPG", cAlternateFileName="")) returned 1 [0280.061] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0280.061] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0280.061] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0280.061] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0280.061] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0280.061] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0280.062] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149018.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0149018.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0280.062] GetFileType (hFile=0x198) returned 0x1 [0280.063] CloseHandle (hObject=0x198) returned 1 [0280.063] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0280.063] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149018.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0149018.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7f4eef, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7f4eef, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6b01)) returned 1 [0280.063] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0280.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0280.064] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149018.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0149018.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7f4eef, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7f4eef, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6b01)) returned 1 [0280.064] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0280.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0280.064] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0280.064] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe81b154, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfd22, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0149118.JPG", cAlternateFileName="")) returned 1 [0280.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0280.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0280.065] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0280.065] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0280.065] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0280.065] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0280.066] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149118.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0149118.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0280.066] GetFileType (hFile=0x198) returned 0x1 [0280.066] CloseHandle (hObject=0x198) returned 1 [0280.067] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0280.067] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149118.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0149118.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe81b154, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfd22)) returned 1 [0280.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0280.067] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0280.067] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149118.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0149118.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe81b154, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfd22)) returned 1 [0280.068] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0280.068] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0280.068] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0280.068] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe81b154, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb544, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0150150.WMF", cAlternateFileName="")) returned 1 [0280.068] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0280.068] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0280.068] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0280.068] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0280.068] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0280.069] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0280.320] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150150.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0150150.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0280.320] GetFileType (hFile=0x198) returned 0x1 [0280.321] CloseHandle (hObject=0x198) returned 1 [0280.321] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0280.322] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150150.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0150150.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe81b154, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb544)) returned 1 [0280.322] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0280.322] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0280.322] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150150.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0150150.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe81b154, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb544)) returned 1 [0280.322] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0280.322] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0280.323] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0280.323] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7f4eef, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x212e, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0150861.WMF", cAlternateFileName="")) returned 1 [0280.323] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0280.323] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0280.323] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0280.323] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0280.324] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0280.324] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0280.325] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150861.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0150861.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0280.325] GetFileType (hFile=0x198) returned 0x1 [0280.325] CloseHandle (hObject=0x198) returned 1 [0280.326] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0280.326] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150861.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0150861.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7f4eef, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x212e)) returned 1 [0280.326] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0280.326] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0280.327] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150861.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0150861.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7f4eef, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x212e)) returned 1 [0280.327] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0280.327] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0280.327] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0280.327] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe867602, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1104, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0151041.WMF", cAlternateFileName="")) returned 1 [0280.327] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0280.327] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0280.328] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0280.328] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0280.328] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0280.328] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0280.329] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151041.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151041.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0280.329] GetFileType (hFile=0x198) returned 0x1 [0280.329] CloseHandle (hObject=0x198) returned 1 [0280.330] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0280.330] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151041.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151041.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe867602, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1104)) returned 1 [0280.330] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0280.330] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0280.331] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151041.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151041.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe867602, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1104)) returned 1 [0280.331] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0280.331] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0280.331] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0280.331] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3c68, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0151045.WMF", cAlternateFileName="")) returned 1 [0280.331] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0280.331] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0280.332] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0280.332] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0280.332] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0280.332] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0280.333] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151045.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151045.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0280.333] GetFileType (hFile=0x198) returned 0x1 [0280.334] CloseHandle (hObject=0x198) returned 1 [0280.334] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0280.334] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151045.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151045.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3c68)) returned 1 [0280.335] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0280.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0280.335] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151045.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151045.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3c68)) returned 1 [0280.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0280.336] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0280.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0280.336] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4844, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0151047.WMF", cAlternateFileName="")) returned 1 [0280.336] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0280.336] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0280.336] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0280.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0280.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0280.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0280.338] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151047.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151047.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0280.338] GetFileType (hFile=0x198) returned 0x1 [0280.339] CloseHandle (hObject=0x198) returned 1 [0280.339] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0280.339] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151047.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151047.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4844)) returned 1 [0280.340] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0280.340] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0280.340] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151047.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151047.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4844)) returned 1 [0280.340] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0280.340] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0280.340] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0280.341] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3928, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0151055.WMF", cAlternateFileName="")) returned 1 [0280.341] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0280.341] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0280.341] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0280.341] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0280.341] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0280.341] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0280.342] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151055.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151055.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0280.343] GetFileType (hFile=0x198) returned 0x1 [0280.343] CloseHandle (hObject=0x198) returned 1 [0280.344] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0280.344] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151055.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151055.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3928)) returned 1 [0280.344] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0280.344] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0280.344] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151055.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151055.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3928)) returned 1 [0280.345] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0280.345] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0280.345] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0280.345] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a60, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0151061.WMF", cAlternateFileName="")) returned 1 [0280.345] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0280.345] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0280.345] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0280.346] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0280.346] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0280.346] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0280.347] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151061.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151061.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0280.347] GetFileType (hFile=0x198) returned 0x1 [0280.348] CloseHandle (hObject=0x198) returned 1 [0280.348] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0280.348] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151061.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151061.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a60)) returned 1 [0280.348] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0280.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0280.349] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151061.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151061.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a60)) returned 1 [0280.349] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0280.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0280.349] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0280.349] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2988, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0151063.WMF", cAlternateFileName="")) returned 1 [0280.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0280.350] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0280.350] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0280.350] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0280.350] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0280.350] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0280.352] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151063.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151063.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0280.353] GetFileType (hFile=0x198) returned 0x1 [0280.353] CloseHandle (hObject=0x198) returned 1 [0280.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0280.354] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151063.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151063.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2988)) returned 1 [0280.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0280.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0280.354] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151063.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151063.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2988)) returned 1 [0280.355] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0280.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0280.355] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0280.355] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3394, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0151067.WMF", cAlternateFileName="")) returned 1 [0280.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0280.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0280.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0280.356] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0280.356] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0280.356] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0280.357] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151067.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151067.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0280.357] GetFileType (hFile=0x198) returned 0x1 [0280.358] CloseHandle (hObject=0x198) returned 1 [0280.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0280.359] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151067.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151067.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3394)) returned 1 [0280.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0280.359] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0280.359] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151067.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151067.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3394)) returned 1 [0280.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0280.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0280.360] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0280.360] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3418, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0151073.WMF", cAlternateFileName="")) returned 1 [0280.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0280.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0280.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0280.360] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0280.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0280.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0280.362] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151073.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151073.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0280.362] GetFileType (hFile=0x198) returned 0x1 [0280.363] CloseHandle (hObject=0x198) returned 1 [0280.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0280.364] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151073.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151073.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3418)) returned 1 [0280.364] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0280.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0280.364] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151073.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151073.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3418)) returned 1 [0280.364] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0280.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0280.365] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0280.365] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0151581.WMF", cAlternateFileName="")) returned 1 [0280.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0280.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0280.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0280.365] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0280.366] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0280.366] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0280.711] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151581.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151581.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0280.712] GetFileType (hFile=0x174) returned 0x1 [0280.712] CloseHandle (hObject=0x174) returned 1 [0280.713] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0280.713] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151581.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151581.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a00)) returned 1 [0280.713] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0280.713] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0280.714] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151581.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151581.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a00)) returned 1 [0280.714] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0280.714] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0280.714] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0280.714] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x610c, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0152414.WMF", cAlternateFileName="")) returned 1 [0280.714] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0280.714] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0280.715] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0280.715] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0280.715] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0280.715] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0280.914] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152414.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152414.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0280.915] GetFileType (hFile=0x1c0) returned 0x1 [0280.915] CloseHandle (hObject=0x1c0) returned 1 [0280.916] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0280.916] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152414.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152414.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x610c)) returned 1 [0280.916] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0280.916] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0280.916] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152414.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152414.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x610c)) returned 1 [0280.916] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0280.916] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0280.917] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0280.917] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe867602, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe867602, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe8d9e20, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3734, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0152430.WMF", cAlternateFileName="")) returned 1 [0280.917] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0280.917] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0280.917] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0280.917] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0280.917] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0280.917] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0280.918] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152430.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152430.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0280.919] GetFileType (hFile=0x1c0) returned 0x1 [0280.919] CloseHandle (hObject=0x1c0) returned 1 [0280.920] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0280.920] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152430.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152430.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe867602, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe867602, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe8d9e20, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3734)) returned 1 [0280.920] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0280.920] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0280.920] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152430.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152430.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe867602, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe867602, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe8d9e20, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3734)) returned 1 [0280.920] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0280.920] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0280.921] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0280.921] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe867602, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe867602, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe88d87c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x406c, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0152432.WMF", cAlternateFileName="")) returned 1 [0280.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0280.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0280.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0280.921] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0280.921] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0280.921] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0280.922] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152432.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152432.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0280.923] GetFileType (hFile=0x1c0) returned 0x1 [0280.923] CloseHandle (hObject=0x1c0) returned 1 [0280.923] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0280.924] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152432.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152432.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe867602, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe867602, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe88d87c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x406c)) returned 1 [0280.924] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0280.924] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0280.924] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152432.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152432.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe867602, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe867602, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe88d87c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x406c)) returned 1 [0280.924] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0280.924] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0280.924] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0280.924] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe867602, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe867602, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe8b3ab6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c4c, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0152436.WMF", cAlternateFileName="")) returned 1 [0280.925] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0280.925] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0280.925] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0280.925] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0280.925] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0280.925] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0280.926] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152436.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152436.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0280.926] GetFileType (hFile=0x1c0) returned 0x1 [0280.927] CloseHandle (hObject=0x1c0) returned 1 [0280.927] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0280.927] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152436.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152436.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe867602, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe867602, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe8b3ab6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c4c)) returned 1 [0280.927] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0280.927] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0280.927] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152436.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152436.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe867602, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe867602, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe8b3ab6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c4c)) returned 1 [0280.928] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0280.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0280.928] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0280.928] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe867602, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe867602, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe867602, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4030, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0152556.WMF", cAlternateFileName="")) returned 1 [0280.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0280.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0280.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0280.928] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0280.928] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0280.929] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0280.930] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152556.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152556.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0280.931] GetFileType (hFile=0x1c0) returned 0x1 [0280.931] CloseHandle (hObject=0x1c0) returned 1 [0280.931] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0280.931] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152556.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152556.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe867602, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe867602, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe867602, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4030)) returned 1 [0280.932] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0280.932] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0280.932] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152556.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152556.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe867602, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe867602, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe867602, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4030)) returned 1 [0280.932] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0280.932] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0280.932] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0280.932] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe867602, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3eb4, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0152558.WMF", cAlternateFileName="")) returned 1 [0280.932] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0280.932] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0280.932] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0280.933] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0280.933] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0280.933] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0280.933] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152558.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152558.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0280.934] GetFileType (hFile=0x1c0) returned 0x1 [0280.934] CloseHandle (hObject=0x1c0) returned 1 [0280.935] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0280.935] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152558.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152558.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe867602, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3eb4)) returned 1 [0280.935] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0280.935] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0280.935] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152558.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152558.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe867602, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3eb4)) returned 1 [0280.935] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0280.935] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0280.936] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0280.936] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a80, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0152560.WMF", cAlternateFileName="")) returned 1 [0280.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0280.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0280.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0280.936] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0280.936] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0280.936] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0280.937] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152560.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152560.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0280.937] GetFileType (hFile=0x1c0) returned 0x1 [0280.937] CloseHandle (hObject=0x1c0) returned 1 [0280.937] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0280.938] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152560.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152560.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a80)) returned 1 [0280.938] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0280.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0280.938] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152560.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152560.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a80)) returned 1 [0280.938] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0280.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0280.938] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0280.938] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe867602, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe867602, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe88d87c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe70, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0152568.WMF", cAlternateFileName="")) returned 1 [0280.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0280.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0280.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0280.939] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0280.939] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0280.939] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0280.939] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152568.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152568.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0280.940] GetFileType (hFile=0x1c0) returned 0x1 [0280.940] CloseHandle (hObject=0x1c0) returned 1 [0280.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0280.941] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152568.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152568.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe867602, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe867602, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe88d87c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe70)) returned 1 [0280.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0280.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0280.941] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152568.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152568.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe867602, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe867602, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe88d87c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe70)) returned 1 [0280.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0280.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0280.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0280.942] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe867602, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd28, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0152570.WMF", cAlternateFileName="")) returned 1 [0280.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0280.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0280.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0280.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0280.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0280.943] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0280.943] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152570.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152570.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0280.944] GetFileType (hFile=0x1c0) returned 0x1 [0280.945] CloseHandle (hObject=0x1c0) returned 1 [0280.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0280.952] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152570.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152570.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe867602, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd28)) returned 1 [0280.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0280.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0280.952] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152570.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152570.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe867602, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd28)) returned 1 [0280.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0280.953] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0280.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0280.953] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe867602, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ab4, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0152590.WMF", cAlternateFileName="")) returned 1 [0280.953] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0280.953] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0280.953] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0280.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0280.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0280.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0280.954] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152590.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152590.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0280.954] GetFileType (hFile=0x1c0) returned 0x1 [0280.955] CloseHandle (hObject=0x1c0) returned 1 [0280.955] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0280.955] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152590.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152590.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe867602, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ab4)) returned 1 [0280.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0280.956] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0280.956] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152590.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152590.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe867602, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ab4)) returned 1 [0280.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0280.956] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0280.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0280.956] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe867602, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18c4, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0152594.WMF", cAlternateFileName="")) returned 1 [0280.957] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0280.957] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0280.957] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0280.957] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0280.957] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0280.957] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0280.958] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152594.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152594.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0280.958] GetFileType (hFile=0x1c0) returned 0x1 [0280.959] CloseHandle (hObject=0x1c0) returned 1 [0280.959] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0280.959] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152594.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152594.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe867602, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18c4)) returned 1 [0280.959] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0280.959] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0280.959] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152594.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152594.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe867602, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18c4)) returned 1 [0280.960] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0281.383] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0281.383] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0281.383] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9261f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9261f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9261f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2628, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0152600.WMF", cAlternateFileName="")) returned 1 [0281.383] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0281.383] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0281.383] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0281.384] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0281.384] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0281.384] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0281.384] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152600.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152600.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0281.386] GetFileType (hFile=0x174) returned 0x1 [0281.387] CloseHandle (hObject=0x174) returned 1 [0281.387] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0281.387] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152600.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152600.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9261f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9261f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9261f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2628)) returned 1 [0281.388] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0281.388] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0281.388] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152600.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152600.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9261f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9261f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9261f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2628)) returned 1 [0281.388] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0281.388] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0281.388] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0281.388] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9261f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9261f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe94c4b9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1884, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0152602.WMF", cAlternateFileName="")) returned 1 [0281.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0281.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0281.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0281.389] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0281.389] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0281.389] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0281.390] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152602.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152602.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0281.396] GetFileType (hFile=0x174) returned 0x1 [0281.397] CloseHandle (hObject=0x174) returned 1 [0281.398] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0281.398] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152602.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152602.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9261f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9261f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe94c4b9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1884)) returned 1 [0281.398] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0281.399] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0281.399] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152602.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152602.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9261f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9261f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe94c4b9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1884)) returned 1 [0281.399] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0281.399] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0281.399] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0281.399] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9261f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9261f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9261f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x40f8, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0152606.WMF", cAlternateFileName="")) returned 1 [0281.399] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0281.400] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0281.400] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0281.400] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0281.400] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0281.400] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0281.401] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152606.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152606.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0281.401] GetFileType (hFile=0x174) returned 0x1 [0281.402] CloseHandle (hObject=0x174) returned 1 [0281.402] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0281.402] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152606.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152606.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9261f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9261f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9261f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x40f8)) returned 1 [0281.403] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0281.403] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0281.403] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152606.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152606.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9261f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9261f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9261f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x40f8)) returned 1 [0281.403] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0281.403] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0281.403] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0281.403] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9261f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9261f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9261f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3094, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0152608.WMF", cAlternateFileName="")) returned 1 [0281.403] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0281.404] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0281.404] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0281.404] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0281.404] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0281.404] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0281.405] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152608.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152608.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0281.405] GetFileType (hFile=0x174) returned 0x1 [0281.406] CloseHandle (hObject=0x174) returned 1 [0281.406] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0281.406] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152608.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152608.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9261f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9261f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9261f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3094)) returned 1 [0281.406] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0281.406] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0281.407] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152608.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152608.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9261f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9261f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9261f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3094)) returned 1 [0281.407] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0281.407] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0281.407] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0281.407] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe8fff80, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe8fff80, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9261f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1748, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0152610.WMF", cAlternateFileName="")) returned 1 [0281.407] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0281.407] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0281.407] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0281.407] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0281.408] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0281.408] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0281.408] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152610.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152610.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0281.409] GetFileType (hFile=0x174) returned 0x1 [0281.409] CloseHandle (hObject=0x174) returned 1 [0281.410] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0281.410] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152610.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152610.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe8fff80, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe8fff80, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9261f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1748)) returned 1 [0281.410] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0281.410] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0281.411] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152610.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152610.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe8fff80, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe8fff80, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9261f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1748)) returned 1 [0281.411] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0281.411] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0281.411] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0281.411] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe88d87c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe88d87c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe8b3ab6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2584, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0152622.WMF", cAlternateFileName="")) returned 1 [0281.411] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0281.411] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0281.411] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0281.412] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0281.412] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0281.412] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0281.412] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152622.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152622.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0281.415] GetFileType (hFile=0x174) returned 0x1 [0281.415] CloseHandle (hObject=0x174) returned 1 [0281.416] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0281.416] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152622.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152622.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe88d87c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe88d87c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe8b3ab6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2584)) returned 1 [0281.416] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0281.416] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0281.416] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152622.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152622.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe88d87c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe88d87c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe8b3ab6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2584)) returned 1 [0281.417] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0281.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0281.417] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0281.417] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe8fff80, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe8fff80, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9261f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6688, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0152626.WMF", cAlternateFileName="")) returned 1 [0281.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0281.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0281.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0281.418] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0281.418] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0281.418] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0281.419] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152626.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152626.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0281.419] GetFileType (hFile=0x174) returned 0x1 [0281.420] CloseHandle (hObject=0x174) returned 1 [0281.420] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0281.420] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152626.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152626.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe8fff80, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe8fff80, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9261f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6688)) returned 1 [0281.420] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0281.421] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0281.421] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152626.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152626.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe8fff80, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe8fff80, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9261f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6688)) returned 1 [0281.421] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0281.421] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0281.421] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0281.421] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe8d9e20, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe8d9e20, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9261f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x785c, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0152628.WMF", cAlternateFileName="")) returned 1 [0281.421] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0281.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0281.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0281.422] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0281.422] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0281.422] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0281.423] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152628.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152628.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0281.423] GetFileType (hFile=0x174) returned 0x1 [0281.423] CloseHandle (hObject=0x174) returned 1 [0281.424] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0281.424] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152628.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152628.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe8d9e20, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe8d9e20, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9261f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x785c)) returned 1 [0281.424] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0281.424] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0281.424] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152628.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152628.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe8d9e20, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe8d9e20, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9261f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x785c)) returned 1 [0281.424] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0281.425] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0281.425] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0281.425] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe8b3ab6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe8b3ab6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe8fff80, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8774, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0152688.WMF", cAlternateFileName="")) returned 1 [0281.425] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0281.425] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0281.425] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0281.425] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0281.425] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0281.425] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0281.426] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152688.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152688.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0281.426] GetFileType (hFile=0x174) returned 0x1 [0281.427] CloseHandle (hObject=0x174) returned 1 [0281.427] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0281.428] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152688.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152688.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe8b3ab6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe8b3ab6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe8fff80, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8774)) returned 1 [0281.428] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0281.428] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0281.428] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152688.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152688.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe8b3ab6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe8b3ab6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe8fff80, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8774)) returned 1 [0281.428] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0281.428] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0281.428] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0281.718] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe88d87c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe88d87c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe8fff80, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f4, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0152690.WMF", cAlternateFileName="")) returned 1 [0281.718] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0281.718] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0281.718] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0281.718] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0281.718] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0281.718] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0281.820] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152690.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152690.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0281.828] GetFileType (hFile=0x1ac) returned 0x1 [0281.829] CloseHandle (hObject=0x1ac) returned 1 [0281.836] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0281.836] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152690.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152690.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe88d87c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe88d87c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe8fff80, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f4)) returned 1 [0281.837] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0281.837] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0281.837] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152690.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152690.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe88d87c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe88d87c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe8fff80, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f4)) returned 1 [0281.838] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0281.838] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0281.838] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0281.838] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x544, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0152694.WMF", cAlternateFileName="")) returned 1 [0281.838] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0281.838] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0281.839] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0281.839] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0281.839] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0281.839] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0281.839] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152694.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152694.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0281.841] GetFileType (hFile=0x174) returned 0x1 [0281.841] CloseHandle (hObject=0x174) returned 1 [0281.842] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0281.842] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152694.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152694.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x544)) returned 1 [0281.842] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0281.842] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0281.842] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152694.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152694.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x544)) returned 1 [0281.842] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0281.843] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0281.843] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0281.843] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c98, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0152696.WMF", cAlternateFileName="")) returned 1 [0281.843] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0281.843] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0281.843] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0281.843] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0281.843] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0281.843] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0281.844] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152696.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152696.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0281.844] GetFileType (hFile=0x174) returned 0x1 [0281.845] CloseHandle (hObject=0x174) returned 1 [0281.845] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0281.845] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152696.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152696.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c98)) returned 1 [0281.845] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0281.845] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0281.845] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152696.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152696.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c98)) returned 1 [0281.845] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0281.846] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0281.846] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0281.846] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea312e2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea312e2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b8, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0152698.WMF", cAlternateFileName="")) returned 1 [0281.846] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0281.846] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0281.846] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0281.846] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0281.846] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0281.846] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0281.847] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152698.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152698.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0281.847] GetFileType (hFile=0x174) returned 0x1 [0281.848] CloseHandle (hObject=0x174) returned 1 [0281.848] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0281.848] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152698.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152698.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea312e2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea312e2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b8)) returned 1 [0281.849] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0281.849] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0281.849] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152698.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152698.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea312e2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea312e2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b8)) returned 1 [0281.849] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0281.849] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0281.849] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0281.849] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9e4dce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9e4dce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b8, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0152702.WMF", cAlternateFileName="")) returned 1 [0281.849] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0281.849] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0281.850] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0281.850] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0281.850] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0281.850] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0281.851] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152702.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152702.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0281.852] GetFileType (hFile=0x174) returned 0x1 [0281.853] CloseHandle (hObject=0x174) returned 1 [0281.853] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0281.853] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152702.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152702.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9e4dce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9e4dce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b8)) returned 1 [0281.853] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0281.853] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0281.853] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152702.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152702.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9e4dce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9e4dce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b8)) returned 1 [0281.854] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0281.854] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0281.854] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0281.854] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9726d1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9726d1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x674, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0152704.WMF", cAlternateFileName="")) returned 1 [0281.854] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0281.854] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0281.854] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0281.854] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0281.854] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0281.855] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0281.855] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152704.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152704.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0281.855] GetFileType (hFile=0x174) returned 0x1 [0281.856] CloseHandle (hObject=0x174) returned 1 [0281.856] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0281.856] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152704.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152704.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9726d1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9726d1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x674)) returned 1 [0281.856] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0281.856] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0281.857] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152704.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152704.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9726d1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9726d1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x674)) returned 1 [0281.857] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0281.857] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0281.857] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0281.857] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9261f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9261f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9726d1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x132c, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0152708.WMF", cAlternateFileName="")) returned 1 [0281.857] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0281.857] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0281.857] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0281.857] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0281.857] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0281.857] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0281.858] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152708.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152708.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0281.858] GetFileType (hFile=0x174) returned 0x1 [0281.858] CloseHandle (hObject=0x174) returned 1 [0281.859] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0281.859] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152708.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152708.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9261f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9261f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9726d1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x132c)) returned 1 [0281.859] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0281.859] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0281.859] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152708.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152708.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9261f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9261f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9726d1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x132c)) returned 1 [0281.859] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0281.859] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0281.859] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0281.859] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe998993, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe998993, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11e4, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0152716.WMF", cAlternateFileName="")) returned 1 [0281.859] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0281.859] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0281.860] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0281.860] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0281.860] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0281.860] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0281.860] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152716.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152716.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0281.860] GetFileType (hFile=0x174) returned 0x1 [0281.861] CloseHandle (hObject=0x174) returned 1 [0281.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0281.861] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152716.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152716.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe998993, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe998993, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11e4)) returned 1 [0281.861] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0281.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0281.861] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152716.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152716.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe998993, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe998993, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11e4)) returned 1 [0281.861] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0281.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0281.862] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0281.862] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe94c4b9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe94c4b9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe998993, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b6c, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0152722.WMF", cAlternateFileName="")) returned 1 [0281.862] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0281.862] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0281.862] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0281.862] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0281.862] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0281.862] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0281.863] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152722.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152722.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0281.863] GetFileType (hFile=0x174) returned 0x1 [0281.863] CloseHandle (hObject=0x174) returned 1 [0281.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0281.864] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152722.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152722.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe94c4b9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe94c4b9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe998993, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b6c)) returned 1 [0281.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0281.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0281.864] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152722.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152722.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe94c4b9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe94c4b9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe998993, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b6c)) returned 1 [0281.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0281.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0281.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0281.864] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9261f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9261f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9e4dce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ec4, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0152876.WMF", cAlternateFileName="")) returned 1 [0281.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0281.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0281.865] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0281.865] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0281.865] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0281.865] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0281.865] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152876.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152876.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0281.866] GetFileType (hFile=0x174) returned 0x1 [0281.866] CloseHandle (hObject=0x174) returned 1 [0281.915] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0281.915] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152876.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152876.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9261f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9261f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9e4dce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ec4)) returned 1 [0281.915] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0281.916] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0281.916] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152876.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152876.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9261f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9261f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9e4dce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ec4)) returned 1 [0281.916] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0281.916] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0281.916] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0281.916] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9261f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9261f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe94c4b9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a28, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0152878.WMF", cAlternateFileName="")) returned 1 [0281.917] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0281.917] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0281.917] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0281.917] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0281.917] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0281.917] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0281.918] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152878.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152878.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0281.919] GetFileType (hFile=0x174) returned 0x1 [0281.919] CloseHandle (hObject=0x174) returned 1 [0281.920] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0281.920] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152878.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152878.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9261f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9261f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe94c4b9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a28)) returned 1 [0281.920] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0281.920] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0281.920] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152878.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152878.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9261f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9261f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe94c4b9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a28)) returned 1 [0281.920] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0281.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0281.921] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0281.921] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2370, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0152882.WMF", cAlternateFileName="")) returned 1 [0281.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0281.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0281.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0281.921] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0281.921] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0281.921] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0281.922] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152882.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152882.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0281.923] GetFileType (hFile=0x174) returned 0x1 [0281.923] CloseHandle (hObject=0x174) returned 1 [0281.924] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0281.924] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152882.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152882.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2370)) returned 1 [0281.924] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0281.924] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0281.924] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152882.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152882.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2370)) returned 1 [0281.924] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0281.924] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0281.924] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0281.925] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b2c, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0152884.WMF", cAlternateFileName="")) returned 1 [0281.925] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0281.925] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0281.925] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0281.925] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0281.925] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0281.925] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0281.926] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152884.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152884.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0281.926] GetFileType (hFile=0x174) returned 0x1 [0281.927] CloseHandle (hObject=0x174) returned 1 [0282.287] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0282.287] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152884.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152884.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b2c)) returned 1 [0282.287] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0282.287] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0282.288] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152884.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152884.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b2c)) returned 1 [0282.289] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0282.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0282.289] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0282.289] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x794, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0152890.WMF", cAlternateFileName="")) returned 1 [0282.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0282.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0282.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0282.290] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0282.290] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0282.290] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0282.291] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152890.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152890.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0282.291] GetFileType (hFile=0x1e0) returned 0x1 [0282.292] CloseHandle (hObject=0x1e0) returned 1 [0282.292] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0282.292] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152890.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152890.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x794)) returned 1 [0282.293] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0282.293] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0282.293] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152890.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152890.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x794)) returned 1 [0282.293] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0282.293] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0282.293] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0282.294] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x29ac, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0152892.WMF", cAlternateFileName="")) returned 1 [0282.294] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0282.294] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0282.294] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0282.294] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0282.294] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0282.295] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0282.296] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152892.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152892.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0282.648] GetFileType (hFile=0x21c) returned 0x1 [0282.648] CloseHandle (hObject=0x21c) returned 1 [0282.650] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0282.650] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152892.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152892.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x29ac)) returned 1 [0282.651] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0282.651] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0282.651] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152892.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152892.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x29ac)) returned 1 [0282.652] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0282.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0282.652] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0282.652] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c54, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0152894.WMF", cAlternateFileName="")) returned 1 [0282.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0282.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0282.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0282.652] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0282.652] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0282.652] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0282.653] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152894.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152894.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0282.653] GetFileType (hFile=0x21c) returned 0x1 [0282.654] CloseHandle (hObject=0x21c) returned 1 [0282.654] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0282.654] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152894.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152894.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c54)) returned 1 [0282.654] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0282.654] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0282.655] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152894.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152894.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c54)) returned 1 [0282.655] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0282.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0282.655] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0282.655] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1190, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0152898.WMF", cAlternateFileName="")) returned 1 [0282.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0282.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0282.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0282.655] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0282.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0282.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0282.656] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152898.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152898.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0282.657] GetFileType (hFile=0x21c) returned 0x1 [0282.657] CloseHandle (hObject=0x21c) returned 1 [0282.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0282.658] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152898.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152898.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1190)) returned 1 [0282.658] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0282.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0282.658] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152898.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152898.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1190)) returned 1 [0282.658] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0282.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0282.659] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0282.659] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x812c, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0153047.WMF", cAlternateFileName="")) returned 1 [0282.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0282.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0282.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0282.659] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0282.659] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0282.659] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0282.660] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153047.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153047.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0282.660] GetFileType (hFile=0x21c) returned 0x1 [0282.660] CloseHandle (hObject=0x21c) returned 1 [0282.661] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0282.661] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153047.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153047.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x812c)) returned 1 [0282.661] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0282.661] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0282.661] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153047.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153047.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x812c)) returned 1 [0282.661] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0282.661] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0282.661] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0282.661] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x778, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0153087.WMF", cAlternateFileName="")) returned 1 [0282.661] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0282.661] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0282.662] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0282.662] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0282.662] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0282.662] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0282.662] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153087.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153087.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0282.662] GetFileType (hFile=0x21c) returned 0x1 [0282.663] CloseHandle (hObject=0x21c) returned 1 [0282.664] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0282.664] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153087.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153087.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x778)) returned 1 [0282.665] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0282.665] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0282.665] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153087.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153087.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x778)) returned 1 [0282.665] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0282.665] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0282.665] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0282.665] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ea8, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0153089.WMF", cAlternateFileName="")) returned 1 [0282.665] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0282.666] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0282.666] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0282.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0282.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0282.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0282.667] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153089.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153089.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0282.667] GetFileType (hFile=0x21c) returned 0x1 [0282.667] CloseHandle (hObject=0x21c) returned 1 [0282.668] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0282.668] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153089.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153089.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ea8)) returned 1 [0282.668] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0282.668] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0282.669] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153089.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153089.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ea8)) returned 1 [0282.669] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0282.669] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0282.669] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0282.669] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fc8, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0153091.WMF", cAlternateFileName="")) returned 1 [0282.669] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0282.669] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0282.669] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0282.670] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0282.670] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0282.670] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0282.671] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153091.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153091.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0282.671] GetFileType (hFile=0x21c) returned 0x1 [0282.672] CloseHandle (hObject=0x21c) returned 1 [0282.672] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0282.672] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153091.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153091.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fc8)) returned 1 [0282.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0282.673] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0282.673] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153091.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153091.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fc8)) returned 1 [0282.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0282.673] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0282.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0282.674] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x22b0, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0153093.WMF", cAlternateFileName="")) returned 1 [0282.674] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0282.674] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0282.674] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0282.674] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0282.674] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0282.674] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0282.675] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153093.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153093.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0282.676] GetFileType (hFile=0x21c) returned 0x1 [0282.676] CloseHandle (hObject=0x21c) returned 1 [0282.677] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0282.677] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153093.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153093.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x22b0)) returned 1 [0282.677] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0282.677] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0282.677] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153093.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153093.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x22b0)) returned 1 [0282.677] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0282.678] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0282.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0282.678] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe78, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0153095.WMF", cAlternateFileName="")) returned 1 [0282.678] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0282.678] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0282.678] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0282.680] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0282.680] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0282.680] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0282.681] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153095.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153095.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0282.682] GetFileType (hFile=0x21c) returned 0x1 [0282.682] CloseHandle (hObject=0x21c) returned 1 [0282.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0282.683] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153095.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153095.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe78)) returned 1 [0282.683] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0282.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0282.683] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153095.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153095.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe78)) returned 1 [0282.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0282.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0282.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0282.684] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc0, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0153265.WMF", cAlternateFileName="")) returned 1 [0282.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0282.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0282.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0282.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0282.685] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0282.685] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0282.685] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153265.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153265.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0282.686] GetFileType (hFile=0x21c) returned 0x1 [0282.686] CloseHandle (hObject=0x21c) returned 1 [0282.687] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0282.687] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153265.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153265.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc0)) returned 1 [0282.687] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0282.687] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0282.687] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153265.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153265.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc0)) returned 1 [0282.687] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0282.687] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0282.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0282.688] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e80, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0153273.WMF", cAlternateFileName="")) returned 1 [0282.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0282.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0282.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0282.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0282.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0282.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0282.689] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153273.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153273.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0282.690] GetFileType (hFile=0x21c) returned 0x1 [0282.690] CloseHandle (hObject=0x21c) returned 1 [0282.690] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0282.691] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153273.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153273.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e80)) returned 1 [0282.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0282.691] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0282.691] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153273.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153273.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e80)) returned 1 [0282.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0282.691] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0282.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0282.691] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8f0c, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0153299.WMF", cAlternateFileName="")) returned 1 [0282.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0282.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0282.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0282.692] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0282.692] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0282.692] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0282.693] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153299.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153299.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0282.693] GetFileType (hFile=0x21c) returned 0x1 [0282.694] CloseHandle (hObject=0x21c) returned 1 [0283.044] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0283.044] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153299.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153299.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8f0c)) returned 1 [0283.044] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0283.044] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0283.044] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153299.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153299.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8f0c)) returned 1 [0283.044] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0283.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0283.045] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0283.045] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7850, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0153302.WMF", cAlternateFileName="")) returned 1 [0283.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0283.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0283.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0283.045] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0283.045] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0283.045] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0283.046] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153302.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153302.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0283.046] GetFileType (hFile=0x1ac) returned 0x1 [0283.047] CloseHandle (hObject=0x1ac) returned 1 [0283.047] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0283.047] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153302.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153302.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7850)) returned 1 [0283.047] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0283.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0283.048] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153302.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153302.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7850)) returned 1 [0283.048] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0283.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0283.048] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0283.048] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9658, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0153305.WMF", cAlternateFileName="")) returned 1 [0283.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0283.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0283.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0283.049] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0283.049] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0283.049] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0283.049] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153305.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153305.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0283.050] GetFileType (hFile=0x1ac) returned 0x1 [0283.050] CloseHandle (hObject=0x1ac) returned 1 [0283.050] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0283.051] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153305.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153305.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9658)) returned 1 [0283.051] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0283.051] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0283.051] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153305.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153305.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9658)) returned 1 [0283.051] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0283.051] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0283.051] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0283.051] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3c58, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0153307.WMF", cAlternateFileName="")) returned 1 [0283.051] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0283.051] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0283.051] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0283.052] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0283.052] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0283.052] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0283.052] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153307.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153307.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0283.052] GetFileType (hFile=0x1ac) returned 0x1 [0283.053] CloseHandle (hObject=0x1ac) returned 1 [0283.053] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0283.053] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153307.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153307.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3c58)) returned 1 [0283.053] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0283.053] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0283.053] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153307.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153307.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3c58)) returned 1 [0283.053] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0283.054] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0283.054] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0283.054] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4238, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0153313.WMF", cAlternateFileName="")) returned 1 [0283.054] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0283.054] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0283.054] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0283.054] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0283.054] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0283.054] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0283.054] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153313.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153313.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0283.055] GetFileType (hFile=0x1ac) returned 0x1 [0283.055] CloseHandle (hObject=0x1ac) returned 1 [0283.055] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0283.056] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153313.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153313.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4238)) returned 1 [0283.056] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0283.056] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0283.056] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153313.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153313.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4238)) returned 1 [0283.056] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0283.056] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0283.056] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0283.056] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4464, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0153398.WMF", cAlternateFileName="")) returned 1 [0283.056] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0283.056] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0283.057] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0283.057] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0283.057] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0283.057] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0283.058] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153398.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153398.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0283.058] GetFileType (hFile=0x1ac) returned 0x1 [0283.058] CloseHandle (hObject=0x1ac) returned 1 [0283.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0283.059] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153398.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153398.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4464)) returned 1 [0283.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0283.060] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0283.060] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153398.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153398.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4464)) returned 1 [0283.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0283.060] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0283.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0283.060] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaa396f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x85d0, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0153508.WMF", cAlternateFileName="")) returned 1 [0283.060] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0283.060] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0283.061] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0283.061] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0283.061] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0283.061] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0283.062] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153508.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153508.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0283.062] GetFileType (hFile=0x1ac) returned 0x1 [0283.062] CloseHandle (hObject=0x1ac) returned 1 [0283.063] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0283.063] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153508.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153508.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaa396f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x85d0)) returned 1 [0283.063] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0283.063] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0283.063] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153508.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153508.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaa396f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x85d0)) returned 1 [0283.064] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0283.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0283.064] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0283.064] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31d0, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0153514.WMF", cAlternateFileName="")) returned 1 [0283.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0283.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0283.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0283.064] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0283.065] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0283.065] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0283.065] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153514.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153514.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0283.066] GetFileType (hFile=0x1ac) returned 0x1 [0283.067] CloseHandle (hObject=0x1ac) returned 1 [0283.067] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0283.067] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153514.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153514.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31d0)) returned 1 [0283.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0283.067] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0283.068] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153514.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153514.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31d0)) returned 1 [0283.068] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0283.068] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0283.068] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0283.068] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d08, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0153516.WMF", cAlternateFileName="")) returned 1 [0283.068] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0283.068] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0283.068] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0283.069] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0283.069] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0283.069] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0283.069] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153516.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153516.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0283.070] GetFileType (hFile=0x1ac) returned 0x1 [0283.070] CloseHandle (hObject=0x1ac) returned 1 [0283.071] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0283.071] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153516.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153516.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d08)) returned 1 [0283.071] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0283.071] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0283.071] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153516.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153516.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d08)) returned 1 [0283.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0283.072] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0283.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0283.072] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30f0, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0153518.WMF", cAlternateFileName="")) returned 1 [0283.072] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0283.072] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0283.072] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0283.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0283.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0283.073] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0283.073] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153518.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153518.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0283.074] GetFileType (hFile=0x1ac) returned 0x1 [0283.074] CloseHandle (hObject=0x1ac) returned 1 [0283.075] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0283.075] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153518.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153518.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30f0)) returned 1 [0283.075] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0283.075] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0283.075] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153518.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153518.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30f0)) returned 1 [0283.076] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0283.076] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0283.076] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0283.076] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x560, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0156537.WMF", cAlternateFileName="")) returned 1 [0283.076] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0283.076] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0283.076] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0283.076] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0283.076] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0283.076] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0283.077] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0156537.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0156537.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0283.077] GetFileType (hFile=0x1ac) returned 0x1 [0283.078] CloseHandle (hObject=0x1ac) returned 1 [0283.078] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0283.078] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0156537.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0156537.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x560)) returned 1 [0283.078] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0283.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0283.079] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0156537.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0156537.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x560)) returned 1 [0283.079] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0283.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0283.079] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0283.079] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb66e, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0157167.WMF", cAlternateFileName="")) returned 1 [0283.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0283.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0283.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0283.080] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0283.080] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0283.080] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0283.080] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157167.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157167.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0283.080] GetFileType (hFile=0x1ac) returned 0x1 [0283.081] CloseHandle (hObject=0x1ac) returned 1 [0283.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0283.081] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157167.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157167.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb66e)) returned 1 [0283.081] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0283.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0283.081] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157167.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157167.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb66e)) returned 1 [0283.082] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0283.082] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0283.082] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0283.082] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x54d4, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0157177.WMF", cAlternateFileName="")) returned 1 [0283.082] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0283.082] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0283.082] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0283.082] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0283.082] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0283.082] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0283.083] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157177.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157177.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0283.083] GetFileType (hFile=0x1ac) returned 0x1 [0283.083] CloseHandle (hObject=0x1ac) returned 1 [0283.084] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0283.084] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157177.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157177.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x54d4)) returned 1 [0283.084] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0283.084] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0283.084] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157177.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157177.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x54d4)) returned 1 [0283.084] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0283.084] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0283.085] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0283.085] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45f8, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0157191.WMF", cAlternateFileName="")) returned 1 [0283.085] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0283.085] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0283.085] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0283.085] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0283.085] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0283.085] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0283.086] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157191.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157191.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0283.086] GetFileType (hFile=0x1ac) returned 0x1 [0283.086] CloseHandle (hObject=0x1ac) returned 1 [0283.087] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0283.087] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157191.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157191.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45f8)) returned 1 [0283.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0283.087] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0283.087] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157191.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157191.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45f8)) returned 1 [0283.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0283.087] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0283.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0283.088] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c84, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0157831.WMF", cAlternateFileName="")) returned 1 [0283.088] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0283.088] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0283.088] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0283.088] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0283.088] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0283.088] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0283.088] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157831.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157831.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0283.089] GetFileType (hFile=0x1ac) returned 0x1 [0283.089] CloseHandle (hObject=0x1ac) returned 1 [0283.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0283.090] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157831.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157831.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c84)) returned 1 [0283.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0283.390] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0283.390] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157831.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157831.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c84)) returned 1 [0283.390] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0283.390] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0283.390] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0283.390] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x48dc, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0158071.WMF", cAlternateFileName="")) returned 1 [0283.390] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0283.390] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0283.390] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0283.391] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0283.391] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0283.391] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0283.391] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0158071.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0158071.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0283.391] GetFileType (hFile=0x174) returned 0x1 [0283.392] CloseHandle (hObject=0x174) returned 1 [0283.392] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0283.392] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0158071.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0158071.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x48dc)) returned 1 [0283.392] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0283.392] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0283.392] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0158071.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0158071.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x48dc)) returned 1 [0283.392] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0283.393] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0283.393] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0283.393] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x462e, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0158477.WMF", cAlternateFileName="")) returned 1 [0283.393] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0283.393] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0283.393] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0283.393] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0283.393] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0283.393] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0283.393] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0158477.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0158477.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0283.554] GetFileType (hFile=0x174) returned 0x1 [0283.555] CloseHandle (hObject=0x174) returned 1 [0283.556] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0283.556] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0158477.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0158477.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x462e)) returned 1 [0283.557] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0283.557] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0283.557] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0158477.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0158477.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x462e)) returned 1 [0283.558] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0283.558] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0283.559] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0283.559] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x72de, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0160590.WMF", cAlternateFileName="")) returned 1 [0283.559] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0283.559] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0283.559] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0283.559] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0283.559] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0283.560] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0283.560] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0160590.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0160590.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0283.561] GetFileType (hFile=0x174) returned 0x1 [0283.561] CloseHandle (hObject=0x174) returned 1 [0283.561] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0283.562] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0160590.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0160590.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x72de)) returned 1 [0283.562] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0283.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0283.562] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0160590.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0160590.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x72de)) returned 1 [0283.562] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0283.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0283.562] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0283.562] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb594, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0164153.JPG", cAlternateFileName="")) returned 1 [0283.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0283.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0283.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0283.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0283.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0283.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0283.564] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0164153.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0164153.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0283.564] GetFileType (hFile=0x174) returned 0x1 [0283.565] CloseHandle (hObject=0x174) returned 1 [0283.565] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0283.565] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0164153.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0164153.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb594)) returned 1 [0283.566] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0283.566] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0283.566] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0164153.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0164153.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb594)) returned 1 [0283.566] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0283.566] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0283.566] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0283.566] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaa396f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaa396f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x51aa, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0168644.WMF", cAlternateFileName="")) returned 1 [0283.566] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0283.566] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0283.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0283.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0283.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0283.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0283.567] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0168644.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0168644.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0283.567] GetFileType (hFile=0x174) returned 0x1 [0283.568] CloseHandle (hObject=0x174) returned 1 [0283.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0283.568] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0168644.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0168644.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaa396f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaa396f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x51aa)) returned 1 [0283.569] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0283.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0283.569] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0168644.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0168644.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaa396f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaa396f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x51aa)) returned 1 [0283.569] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0283.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0283.569] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0283.569] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3888, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0171685.WMF", cAlternateFileName="")) returned 1 [0283.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0283.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0283.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0283.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0283.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0283.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0283.571] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0171685.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0171685.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0283.571] GetFileType (hFile=0x174) returned 0x1 [0283.572] CloseHandle (hObject=0x174) returned 1 [0283.572] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0283.573] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0171685.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0171685.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3888)) returned 1 [0283.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0283.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0283.573] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0171685.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0171685.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3888)) returned 1 [0283.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0283.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0283.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0283.574] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaa396f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ae8, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0171847.WMF", cAlternateFileName="")) returned 1 [0283.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0283.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0283.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0283.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0283.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0283.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0283.576] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0171847.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0171847.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0283.576] GetFileType (hFile=0x174) returned 0x1 [0283.577] CloseHandle (hObject=0x174) returned 1 [0283.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0283.577] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0171847.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0171847.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaa396f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ae8)) returned 1 [0283.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0283.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0283.578] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0171847.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0171847.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaa396f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ae8)) returned 1 [0283.578] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0283.578] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0283.578] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0283.578] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaa396f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaa396f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d18, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0172035.WMF", cAlternateFileName="")) returned 1 [0283.578] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0283.578] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0283.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0283.579] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0283.579] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0283.579] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0283.580] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172035.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0172035.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0283.580] GetFileType (hFile=0x174) returned 0x1 [0283.580] CloseHandle (hObject=0x174) returned 1 [0283.584] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0283.584] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172035.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0172035.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaa396f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaa396f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d18)) returned 1 [0283.585] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0283.585] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0283.585] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172035.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0172035.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaa396f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaa396f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d18)) returned 1 [0283.585] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0283.585] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0283.585] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0283.585] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b74, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0172067.WMF", cAlternateFileName="")) returned 1 [0283.585] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0283.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0283.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0283.586] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0283.586] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0283.586] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0283.587] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172067.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0172067.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0283.587] GetFileType (hFile=0x174) returned 0x1 [0283.588] CloseHandle (hObject=0x174) returned 1 [0283.588] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0283.588] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172067.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0172067.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b74)) returned 1 [0283.588] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0283.589] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0283.589] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172067.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0172067.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b74)) returned 1 [0283.589] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0283.589] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0283.589] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0283.589] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaa396f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3198, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0172193.WMF", cAlternateFileName="")) returned 1 [0283.589] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0283.589] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0283.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0283.590] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0283.590] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0283.590] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0283.591] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172193.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0172193.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0283.591] GetFileType (hFile=0x174) returned 0x1 [0283.592] CloseHandle (hObject=0x174) returned 1 [0283.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0283.592] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172193.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0172193.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaa396f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3198)) returned 1 [0283.592] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0283.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0283.592] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172193.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0172193.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaa396f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3198)) returned 1 [0283.592] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0283.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0283.592] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0283.593] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16e8, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0174315.WMF", cAlternateFileName="")) returned 1 [0283.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0283.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0283.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0283.593] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0283.593] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0283.593] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0283.594] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174315.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174315.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0283.594] GetFileType (hFile=0x174) returned 0x1 [0283.594] CloseHandle (hObject=0x174) returned 1 [0283.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0283.595] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174315.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174315.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16e8)) returned 1 [0283.595] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0283.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0283.595] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174315.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174315.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16e8)) returned 1 [0283.596] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0283.596] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0283.596] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0283.596] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2608, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0174635.WMF", cAlternateFileName="")) returned 1 [0283.596] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0283.596] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0283.596] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0283.596] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0283.596] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0283.597] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0283.597] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174635.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174635.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0283.597] GetFileType (hFile=0x174) returned 0x1 [0283.598] CloseHandle (hObject=0x174) returned 1 [0283.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0283.599] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174635.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174635.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2608)) returned 1 [0283.599] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0283.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0283.599] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174635.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174635.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2608)) returned 1 [0283.599] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0283.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0283.599] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0283.600] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13ec, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0174639.WMF", cAlternateFileName="")) returned 1 [0283.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0283.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0283.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0283.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0283.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0283.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0283.600] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174639.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174639.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0283.601] GetFileType (hFile=0x174) returned 0x1 [0283.601] CloseHandle (hObject=0x174) returned 1 [0283.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0283.601] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174639.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174639.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13ec)) returned 1 [0283.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0283.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0283.602] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174639.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174639.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13ec)) returned 1 [0283.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0283.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0283.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0283.602] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6196, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0174952.JPG", cAlternateFileName="")) returned 1 [0283.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0283.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0283.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0283.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0283.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0283.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0283.603] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174952.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174952.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0283.603] GetFileType (hFile=0x174) returned 0x1 [0283.603] CloseHandle (hObject=0x174) returned 1 [0283.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0283.604] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174952.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174952.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6196)) returned 1 [0283.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0283.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0283.604] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174952.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174952.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6196)) returned 1 [0283.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0283.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0283.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0283.605] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb57d, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0175361.JPG", cAlternateFileName="")) returned 1 [0283.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0283.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0283.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0283.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0283.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0283.935] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0283.936] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175361.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0175361.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0283.952] GetFileType (hFile=0x1e0) returned 0x1 [0283.953] CloseHandle (hObject=0x1e0) returned 1 [0283.957] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0283.957] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175361.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0175361.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb57d)) returned 1 [0283.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0283.958] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0283.958] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175361.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0175361.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb57d)) returned 1 [0283.959] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0283.959] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0283.959] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0283.959] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x38d8, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0175428.JPG", cAlternateFileName="")) returned 1 [0283.959] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0283.960] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0283.960] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0283.960] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0283.960] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0283.960] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0283.961] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175428.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0175428.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0283.962] GetFileType (hFile=0x1e0) returned 0x1 [0283.962] CloseHandle (hObject=0x1e0) returned 1 [0283.963] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0283.963] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175428.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0175428.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x38d8)) returned 1 [0283.963] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0283.963] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0283.963] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175428.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0175428.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x38d8)) returned 1 [0283.963] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0283.964] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0283.964] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0283.964] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb12e, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0177257.JPG", cAlternateFileName="")) returned 1 [0283.964] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0283.964] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0283.964] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0283.964] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0283.964] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0283.964] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0283.966] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177257.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0177257.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0283.966] GetFileType (hFile=0x1e0) returned 0x1 [0283.967] CloseHandle (hObject=0x1e0) returned 1 [0283.967] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0283.967] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177257.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0177257.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb12e)) returned 1 [0283.968] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0283.968] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0283.968] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177257.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0177257.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb12e)) returned 1 [0283.968] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0283.968] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0283.968] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0283.968] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd902, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0177806.JPG", cAlternateFileName="")) returned 1 [0283.968] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0283.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0283.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0283.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0283.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0283.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0283.970] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177806.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0177806.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0283.970] GetFileType (hFile=0x1e0) returned 0x1 [0283.971] CloseHandle (hObject=0x1e0) returned 1 [0283.971] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0283.971] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177806.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0177806.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd902)) returned 1 [0283.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0283.972] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0283.972] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177806.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0177806.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd902)) returned 1 [0283.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0283.972] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0283.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0283.972] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x907d, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0178348.JPG", cAlternateFileName="")) returned 1 [0283.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0283.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0283.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0283.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0283.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0283.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0283.974] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178348.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178348.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0283.974] GetFileType (hFile=0x1e0) returned 0x1 [0283.975] CloseHandle (hObject=0x1e0) returned 1 [0283.975] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0283.975] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178348.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178348.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x907d)) returned 1 [0283.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0283.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0283.976] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178348.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178348.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x907d)) returned 1 [0283.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0283.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0283.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0283.976] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7214, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0178459.JPG", cAlternateFileName="")) returned 1 [0283.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0283.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0283.977] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0283.977] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0283.977] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0283.977] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0283.978] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178459.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178459.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0283.978] GetFileType (hFile=0x1e0) returned 0x1 [0283.979] CloseHandle (hObject=0x1e0) returned 1 [0283.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0283.979] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178459.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178459.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7214)) returned 1 [0283.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0283.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0283.980] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178459.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178459.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7214)) returned 1 [0283.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0283.980] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0283.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0283.980] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x67a3, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0178460.JPG", cAlternateFileName="")) returned 1 [0283.980] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0283.980] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0283.981] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0283.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0283.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0283.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0283.982] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178460.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178460.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0283.982] GetFileType (hFile=0x1e0) returned 0x1 [0283.983] CloseHandle (hObject=0x1e0) returned 1 [0283.983] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0283.984] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178460.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178460.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x67a3)) returned 1 [0283.984] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0283.984] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0283.984] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178460.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178460.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x67a3)) returned 1 [0283.984] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0283.984] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0283.984] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0283.985] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5de2, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0178523.JPG", cAlternateFileName="")) returned 1 [0283.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0283.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0283.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0283.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0283.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0283.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0283.986] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178523.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178523.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0283.986] GetFileType (hFile=0x1e0) returned 0x1 [0283.987] CloseHandle (hObject=0x1e0) returned 1 [0283.988] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0283.988] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178523.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178523.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5de2)) returned 1 [0283.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0283.988] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0283.988] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178523.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178523.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5de2)) returned 1 [0283.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0283.989] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0283.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0283.989] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5b2a, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0178632.JPG", cAlternateFileName="")) returned 1 [0283.989] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0283.989] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0283.989] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0283.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0283.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0283.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0283.991] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178632.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178632.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0283.991] GetFileType (hFile=0x1e0) returned 0x1 [0283.991] CloseHandle (hObject=0x1e0) returned 1 [0283.992] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0283.992] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178632.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178632.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5b2a)) returned 1 [0283.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0283.992] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0283.993] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178632.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178632.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5b2a)) returned 1 [0283.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0283.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0283.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0283.993] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7d26, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0178639.JPG", cAlternateFileName="")) returned 1 [0283.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0283.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0283.994] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0283.994] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0283.994] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0283.994] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0283.995] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178639.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178639.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0283.995] GetFileType (hFile=0x1e0) returned 0x1 [0283.995] CloseHandle (hObject=0x1e0) returned 1 [0283.996] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0284.322] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178639.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178639.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7d26)) returned 1 [0284.322] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0284.323] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0284.323] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178639.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178639.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7d26)) returned 1 [0284.323] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0284.323] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0284.324] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0284.324] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8a0c, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0178932.JPG", cAlternateFileName="")) returned 1 [0284.324] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0284.325] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0284.325] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0284.325] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0284.325] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0284.325] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0284.325] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178932.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178932.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0284.352] GetFileType (hFile=0x198) returned 0x1 [0284.353] CloseHandle (hObject=0x198) returned 1 [0284.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0284.354] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178932.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178932.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8a0c)) returned 1 [0284.355] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0284.356] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0284.356] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178932.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178932.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8a0c)) returned 1 [0284.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0284.357] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0284.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0284.357] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7d6e, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0179963.JPG", cAlternateFileName="")) returned 1 [0284.357] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0284.357] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0284.357] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0284.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0284.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0284.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0284.358] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0179963.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0179963.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0284.359] GetFileType (hFile=0x198) returned 0x1 [0284.359] CloseHandle (hObject=0x198) returned 1 [0284.359] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0284.359] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0179963.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0179963.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7d6e)) returned 1 [0284.360] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0284.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0284.360] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0179963.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0179963.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7d6e)) returned 1 [0284.360] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0284.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0284.360] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0284.360] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x40e7, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0182689.JPG", cAlternateFileName="")) returned 1 [0284.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0284.361] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0284.361] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0284.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0284.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0284.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0284.362] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182689.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182689.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0284.362] GetFileType (hFile=0x198) returned 0x1 [0284.363] CloseHandle (hObject=0x198) returned 1 [0284.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0284.363] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182689.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182689.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x40e7)) returned 1 [0284.363] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0284.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0284.364] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182689.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182689.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x40e7)) returned 1 [0284.364] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0284.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0284.364] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0284.364] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5f48, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0182888.WMF", cAlternateFileName="")) returned 1 [0284.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0284.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0284.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0284.365] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0284.365] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0284.365] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0284.365] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182888.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182888.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0284.366] GetFileType (hFile=0x198) returned 0x1 [0284.366] CloseHandle (hObject=0x198) returned 1 [0284.367] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0284.367] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182888.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182888.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5f48)) returned 1 [0284.367] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0284.367] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0284.367] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182888.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182888.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5f48)) returned 1 [0284.367] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0284.367] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0284.368] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0284.368] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b2e, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0182898.WMF", cAlternateFileName="")) returned 1 [0284.368] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0284.368] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0284.368] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0284.368] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0284.368] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0284.368] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0284.369] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182898.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182898.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0284.369] GetFileType (hFile=0x198) returned 0x1 [0284.370] CloseHandle (hObject=0x198) returned 1 [0284.370] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0284.370] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182898.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182898.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b2e)) returned 1 [0284.370] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0284.371] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0284.371] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182898.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182898.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b2e)) returned 1 [0284.371] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0284.371] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0284.371] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0284.371] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e8e, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0182902.WMF", cAlternateFileName="")) returned 1 [0284.371] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0284.371] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0284.371] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0284.389] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0284.389] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0284.389] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0284.389] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182902.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182902.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0284.390] GetFileType (hFile=0x198) returned 0x1 [0284.390] CloseHandle (hObject=0x198) returned 1 [0284.391] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0284.391] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182902.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182902.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e8e)) returned 1 [0284.391] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0284.391] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0284.391] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182902.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182902.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e8e)) returned 1 [0284.391] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0284.391] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0284.392] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0284.392] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ed2, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0182946.WMF", cAlternateFileName="")) returned 1 [0284.392] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0284.392] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0284.392] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0284.392] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0284.392] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0284.392] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0284.393] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182946.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182946.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0284.393] GetFileType (hFile=0x198) returned 0x1 [0284.393] CloseHandle (hObject=0x198) returned 1 [0284.394] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0284.394] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182946.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182946.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ed2)) returned 1 [0284.394] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0284.394] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0284.394] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182946.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182946.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ed2)) returned 1 [0284.394] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0284.394] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0284.395] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0284.395] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x745c, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0183172.WMF", cAlternateFileName="")) returned 1 [0284.395] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0284.395] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0284.395] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0284.395] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0284.395] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0284.395] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0284.396] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183172.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183172.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0284.396] GetFileType (hFile=0x198) returned 0x1 [0284.396] CloseHandle (hObject=0x198) returned 1 [0284.397] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0284.397] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183172.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183172.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x745c)) returned 1 [0284.397] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0284.397] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0284.397] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183172.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183172.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x745c)) returned 1 [0284.397] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0284.397] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0284.398] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0284.398] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6fd2, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0183174.WMF", cAlternateFileName="")) returned 1 [0284.398] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0284.398] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0284.398] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0284.398] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0284.398] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0284.398] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0284.398] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183174.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183174.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0284.399] GetFileType (hFile=0x198) returned 0x1 [0284.399] CloseHandle (hObject=0x198) returned 1 [0284.399] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0284.400] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183174.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183174.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6fd2)) returned 1 [0284.400] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0284.400] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0284.400] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183174.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183174.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6fd2)) returned 1 [0284.400] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0284.400] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0284.400] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0284.400] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5f6e, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0183198.WMF", cAlternateFileName="")) returned 1 [0284.400] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0284.401] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0284.401] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0284.401] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0284.401] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0284.401] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0284.402] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183198.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183198.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0284.402] GetFileType (hFile=0x198) returned 0x1 [0284.402] CloseHandle (hObject=0x198) returned 1 [0284.403] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0284.403] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183198.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183198.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5f6e)) returned 1 [0284.403] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0284.403] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0284.403] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183198.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183198.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5f6e)) returned 1 [0284.403] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0284.403] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0284.403] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0284.734] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b4a, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0183574.WMF", cAlternateFileName="")) returned 1 [0284.734] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0284.734] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0284.735] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0284.735] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0284.735] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0284.735] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0284.736] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183574.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183574.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0284.759] GetFileType (hFile=0x1c0) returned 0x1 [0284.759] CloseHandle (hObject=0x1c0) returned 1 [0284.761] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0284.761] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183574.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183574.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b4a)) returned 1 [0284.762] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0284.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0284.762] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183574.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183574.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b4a)) returned 1 [0284.763] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0284.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0284.763] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0284.763] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c88, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0185670.WMF", cAlternateFileName="")) returned 1 [0284.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0284.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0284.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0284.763] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0284.763] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0284.763] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0284.764] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185670.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185670.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0284.764] GetFileType (hFile=0x1c0) returned 0x1 [0284.765] CloseHandle (hObject=0x1c0) returned 1 [0284.765] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0284.765] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185670.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185670.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c88)) returned 1 [0284.765] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0284.766] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0284.766] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185670.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185670.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c88)) returned 1 [0284.766] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0284.766] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0284.766] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0284.766] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e46, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0185774.WMF", cAlternateFileName="")) returned 1 [0284.766] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0284.767] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0284.767] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0284.767] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0284.767] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0284.767] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0284.768] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185774.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185774.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0284.768] GetFileType (hFile=0x1c0) returned 0x1 [0284.768] CloseHandle (hObject=0x1c0) returned 1 [0284.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0284.769] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185774.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185774.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e46)) returned 1 [0284.769] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0284.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0284.769] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185774.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185774.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e46)) returned 1 [0284.770] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0284.770] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0284.770] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0284.770] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x69d8, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0185776.WMF", cAlternateFileName="")) returned 1 [0284.770] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0284.770] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0284.770] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0284.770] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0284.771] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0284.771] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0284.771] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185776.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185776.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0284.772] GetFileType (hFile=0x1c0) returned 0x1 [0284.772] CloseHandle (hObject=0x1c0) returned 1 [0284.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0284.773] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185776.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185776.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x69d8)) returned 1 [0284.773] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0284.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0284.773] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185776.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185776.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x69d8)) returned 1 [0284.773] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0284.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0284.773] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0284.774] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x62e0, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0185778.WMF", cAlternateFileName="")) returned 1 [0284.774] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0284.774] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0284.774] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0284.774] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0284.774] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0284.774] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0284.775] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185778.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185778.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0284.775] GetFileType (hFile=0x1c0) returned 0x1 [0284.776] CloseHandle (hObject=0x1c0) returned 1 [0284.776] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0284.777] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185778.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185778.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x62e0)) returned 1 [0284.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0284.777] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0284.777] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185778.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185778.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x62e0)) returned 1 [0284.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0284.777] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0284.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0284.778] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe956, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0185780.WMF", cAlternateFileName="")) returned 1 [0284.778] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0284.778] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0284.778] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0284.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0284.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0284.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0284.778] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185780.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185780.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0284.779] GetFileType (hFile=0x1c0) returned 0x1 [0284.779] CloseHandle (hObject=0x1c0) returned 1 [0284.779] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0284.779] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185780.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185780.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe956)) returned 1 [0284.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0284.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0284.780] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185780.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185780.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe956)) returned 1 [0284.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0284.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0284.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0284.780] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x99a2, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0185786.WMF", cAlternateFileName="")) returned 1 [0284.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0284.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0284.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0284.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0284.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0284.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0284.781] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185786.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185786.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0284.781] GetFileType (hFile=0x1c0) returned 0x1 [0284.781] CloseHandle (hObject=0x1c0) returned 1 [0284.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0284.782] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185786.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185786.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x99a2)) returned 1 [0284.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0284.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0284.782] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185786.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185786.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x99a2)) returned 1 [0284.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0284.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0284.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0284.782] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x50b6, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0185790.WMF", cAlternateFileName="")) returned 1 [0284.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0284.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0284.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0284.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0284.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0284.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0284.783] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185790.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185790.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0284.783] GetFileType (hFile=0x1c0) returned 0x1 [0284.783] CloseHandle (hObject=0x1c0) returned 1 [0284.783] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0284.783] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185790.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185790.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x50b6)) returned 1 [0284.783] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0284.783] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0284.783] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185790.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185790.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x50b6)) returned 1 [0284.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0284.784] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0284.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0284.784] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x650c, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0185796.WMF", cAlternateFileName="")) returned 1 [0284.784] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0284.784] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0284.784] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0284.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0284.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0284.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0284.784] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185796.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185796.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0284.785] GetFileType (hFile=0x1c0) returned 0x1 [0284.785] CloseHandle (hObject=0x1c0) returned 1 [0284.785] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0284.785] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185796.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185796.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x650c)) returned 1 [0284.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0284.785] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0284.786] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185796.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185796.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x650c)) returned 1 [0284.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0284.786] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0284.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0284.786] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8420, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0185798.WMF", cAlternateFileName="")) returned 1 [0284.786] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0284.786] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0284.786] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0284.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0284.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0284.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0284.787] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185798.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185798.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0284.787] GetFileType (hFile=0x1c0) returned 0x1 [0284.787] CloseHandle (hObject=0x1c0) returned 1 [0284.787] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0284.787] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185798.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185798.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8420)) returned 1 [0284.788] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0284.788] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0284.788] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185798.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185798.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8420)) returned 1 [0284.788] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0284.788] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0284.788] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0284.788] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5eae, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0185800.WMF", cAlternateFileName="")) returned 1 [0284.788] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0284.788] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0284.788] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0284.788] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0284.788] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0284.788] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0284.789] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185800.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185800.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0284.789] GetFileType (hFile=0x1c0) returned 0x1 [0284.790] CloseHandle (hObject=0x1c0) returned 1 [0284.790] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0284.790] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185800.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185800.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5eae)) returned 1 [0284.790] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0284.790] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0284.790] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185800.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185800.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5eae)) returned 1 [0284.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0284.791] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0284.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0284.791] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x773a, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0185806.WMF", cAlternateFileName="")) returned 1 [0284.791] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0284.791] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0284.791] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0284.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0284.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0284.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0285.077] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185806.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185806.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0285.096] GetFileType (hFile=0x21c) returned 0x1 [0285.097] CloseHandle (hObject=0x21c) returned 1 [0285.098] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0285.098] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185806.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185806.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x773a)) returned 1 [0285.099] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0285.099] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0285.099] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185806.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185806.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x773a)) returned 1 [0285.100] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0285.100] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0285.100] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0285.100] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b8e, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0185818.WMF", cAlternateFileName="")) returned 1 [0285.100] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0285.100] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0285.100] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0285.100] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0285.100] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0285.101] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0285.101] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185818.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185818.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0285.102] GetFileType (hFile=0x21c) returned 0x1 [0285.102] CloseHandle (hObject=0x21c) returned 1 [0285.102] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0285.103] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185818.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185818.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b8e)) returned 1 [0285.103] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0285.103] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0285.103] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185818.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185818.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b8e)) returned 1 [0285.103] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0285.103] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0285.103] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0285.103] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e74, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0185828.WMF", cAlternateFileName="")) returned 1 [0285.104] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0285.104] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0285.104] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0285.104] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0285.104] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0285.104] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0285.105] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185828.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185828.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0285.105] GetFileType (hFile=0x21c) returned 0x1 [0285.106] CloseHandle (hObject=0x21c) returned 1 [0285.106] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0285.106] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185828.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185828.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e74)) returned 1 [0285.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0285.107] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0285.107] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185828.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185828.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e74)) returned 1 [0285.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0285.107] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0285.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0285.107] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2182, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0185834.WMF", cAlternateFileName="")) returned 1 [0285.107] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0285.107] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0285.108] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0285.108] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0285.108] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0285.108] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0285.108] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185834.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185834.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0285.109] GetFileType (hFile=0x21c) returned 0x1 [0285.109] CloseHandle (hObject=0x21c) returned 1 [0285.109] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0285.109] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185834.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185834.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2182)) returned 1 [0285.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0285.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0285.110] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185834.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185834.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2182)) returned 1 [0285.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0285.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0285.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0285.110] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x37e4, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0185842.WMF", cAlternateFileName="")) returned 1 [0285.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0285.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0285.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0285.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0285.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0285.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0285.111] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185842.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185842.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0285.111] GetFileType (hFile=0x21c) returned 0x1 [0285.111] CloseHandle (hObject=0x21c) returned 1 [0285.112] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0285.112] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185842.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185842.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x37e4)) returned 1 [0285.112] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0285.112] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0285.113] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185842.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185842.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x37e4)) returned 1 [0285.113] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0285.113] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0285.113] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0285.113] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21da, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0186346.WMF", cAlternateFileName="")) returned 1 [0285.113] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0285.113] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0285.113] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0285.113] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0285.113] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0285.113] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0285.114] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186346.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186346.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0285.114] GetFileType (hFile=0x21c) returned 0x1 [0285.114] CloseHandle (hObject=0x21c) returned 1 [0285.114] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0285.114] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186346.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186346.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21da)) returned 1 [0285.115] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0285.115] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0285.115] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186346.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186346.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21da)) returned 1 [0285.115] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0285.115] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0285.115] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0285.115] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x843a, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0186360.WMF", cAlternateFileName="")) returned 1 [0285.115] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0285.115] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0285.115] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0285.115] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0285.115] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0285.116] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0285.116] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186360.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186360.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0285.116] GetFileType (hFile=0x21c) returned 0x1 [0285.117] CloseHandle (hObject=0x21c) returned 1 [0285.117] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0285.117] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186360.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186360.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x843a)) returned 1 [0285.117] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0285.117] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0285.117] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186360.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186360.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x843a)) returned 1 [0285.117] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0285.117] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0285.117] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0285.118] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x44fe, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0186362.WMF", cAlternateFileName="")) returned 1 [0285.118] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0285.118] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0285.118] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0285.118] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0285.118] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0285.118] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0285.119] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186362.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186362.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0285.119] GetFileType (hFile=0x21c) returned 0x1 [0285.119] CloseHandle (hObject=0x21c) returned 1 [0285.120] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0285.120] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186362.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186362.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x44fe)) returned 1 [0285.120] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0285.121] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0285.121] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186362.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186362.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x44fe)) returned 1 [0285.121] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0285.121] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0285.121] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0285.121] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4724, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0186364.WMF", cAlternateFileName="")) returned 1 [0285.121] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0285.121] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0285.121] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0285.121] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0285.121] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0285.122] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0285.122] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186364.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186364.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0285.122] GetFileType (hFile=0x21c) returned 0x1 [0285.123] CloseHandle (hObject=0x21c) returned 1 [0285.123] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0285.123] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186364.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186364.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4724)) returned 1 [0285.124] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0285.124] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0285.124] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186364.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186364.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4724)) returned 1 [0285.124] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0285.124] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0285.124] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0285.124] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19c4, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0187647.WMF", cAlternateFileName="")) returned 1 [0285.124] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0285.125] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0285.125] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0285.125] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0285.125] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0285.125] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0285.126] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187647.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187647.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0285.126] GetFileType (hFile=0x21c) returned 0x1 [0285.127] CloseHandle (hObject=0x21c) returned 1 [0285.127] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0285.127] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187647.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187647.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19c4)) returned 1 [0285.127] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0285.127] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0285.128] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187647.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187647.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19c4)) returned 1 [0285.128] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0285.128] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0285.128] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0285.128] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1500, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0187815.WMF", cAlternateFileName="")) returned 1 [0285.128] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0285.128] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0285.128] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0285.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0285.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0285.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0285.129] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187815.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187815.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0285.130] GetFileType (hFile=0x21c) returned 0x1 [0285.130] CloseHandle (hObject=0x21c) returned 1 [0285.130] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0285.131] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187815.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187815.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1500)) returned 1 [0285.131] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0285.131] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0285.131] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187815.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187815.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1500)) returned 1 [0285.131] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0285.131] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0285.131] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0285.131] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d7c, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0187817.WMF", cAlternateFileName="")) returned 1 [0285.132] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0285.132] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0285.132] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0285.132] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0285.132] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0285.132] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0285.133] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187817.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187817.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0285.133] GetFileType (hFile=0x21c) returned 0x1 [0285.134] CloseHandle (hObject=0x21c) returned 1 [0285.134] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0285.134] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187817.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187817.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d7c)) returned 1 [0285.134] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0285.134] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0285.134] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187817.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187817.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d7c)) returned 1 [0285.135] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0285.135] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0285.135] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0285.135] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2870, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0187819.WMF", cAlternateFileName="")) returned 1 [0285.135] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0285.135] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0285.135] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0285.135] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0285.505] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0285.505] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0285.506] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187819.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187819.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0285.557] GetFileType (hFile=0x174) returned 0x1 [0285.557] CloseHandle (hObject=0x174) returned 1 [0285.558] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0285.558] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187819.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187819.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2870)) returned 1 [0285.558] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0285.558] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0285.559] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187819.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187819.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2870)) returned 1 [0285.559] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0285.559] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0285.559] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0285.559] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d4c, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0187825.WMF", cAlternateFileName="")) returned 1 [0285.559] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0285.559] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0285.559] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0285.560] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0285.560] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0285.560] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0285.561] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187825.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187825.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0285.561] GetFileType (hFile=0x174) returned 0x1 [0285.561] CloseHandle (hObject=0x174) returned 1 [0285.561] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0285.562] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187825.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187825.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d4c)) returned 1 [0285.562] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0285.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0285.562] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187825.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187825.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d4c)) returned 1 [0285.562] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0285.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0285.562] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0285.562] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3040, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0187829.WMF", cAlternateFileName="")) returned 1 [0285.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0285.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0285.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0285.562] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0285.562] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0285.562] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0285.563] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187829.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187829.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0285.563] GetFileType (hFile=0x174) returned 0x1 [0285.563] CloseHandle (hObject=0x174) returned 1 [0285.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0285.563] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187829.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187829.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3040)) returned 1 [0285.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0285.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0285.564] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187829.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187829.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3040)) returned 1 [0285.564] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0285.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0285.564] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0285.564] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2480, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0187835.WMF", cAlternateFileName="")) returned 1 [0285.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0285.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0285.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0285.564] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0285.564] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0285.564] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0285.564] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187835.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187835.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0285.565] GetFileType (hFile=0x174) returned 0x1 [0285.565] CloseHandle (hObject=0x174) returned 1 [0285.565] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0285.565] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187835.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187835.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2480)) returned 1 [0285.565] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0285.566] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0285.566] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187835.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187835.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2480)) returned 1 [0285.566] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0285.566] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0285.566] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0285.566] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3fe2, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0187837.WMF", cAlternateFileName="")) returned 1 [0285.566] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0285.566] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0285.566] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0285.566] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0285.566] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0285.566] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0285.567] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187837.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187837.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0285.567] GetFileType (hFile=0x174) returned 0x1 [0285.567] CloseHandle (hObject=0x174) returned 1 [0285.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0285.567] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187837.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187837.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3fe2)) returned 1 [0285.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0285.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0285.568] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187837.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187837.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3fe2)) returned 1 [0285.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0285.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0285.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0285.568] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14fc, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0187839.WMF", cAlternateFileName="")) returned 1 [0285.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0285.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0285.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0285.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0285.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0285.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0285.568] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187839.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187839.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0285.569] GetFileType (hFile=0x174) returned 0x1 [0285.569] CloseHandle (hObject=0x174) returned 1 [0285.572] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0285.572] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187839.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187839.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14fc)) returned 1 [0285.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0285.572] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0285.572] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187839.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187839.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14fc)) returned 1 [0285.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0285.572] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0285.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0285.572] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bcc, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0187847.WMF", cAlternateFileName="")) returned 1 [0285.572] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0285.572] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0285.572] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0285.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0285.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0285.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0285.573] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187847.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187847.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0285.573] GetFileType (hFile=0x174) returned 0x1 [0285.573] CloseHandle (hObject=0x174) returned 1 [0285.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0285.574] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187847.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187847.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bcc)) returned 1 [0285.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0285.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0285.574] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187847.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187847.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bcc)) returned 1 [0285.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0285.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0285.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0285.574] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d94, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0187849.WMF", cAlternateFileName="")) returned 1 [0285.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0285.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0285.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0285.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0285.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0285.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0285.575] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187849.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187849.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0285.575] GetFileType (hFile=0x174) returned 0x1 [0285.575] CloseHandle (hObject=0x174) returned 1 [0285.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0285.576] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187849.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187849.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d94)) returned 1 [0285.576] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0285.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0285.576] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187849.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187849.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d94)) returned 1 [0285.576] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0285.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0285.576] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0285.576] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x221c, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0187851.WMF", cAlternateFileName="")) returned 1 [0285.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0285.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0285.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0285.576] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0285.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0285.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0285.577] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187851.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187851.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0285.577] GetFileType (hFile=0x174) returned 0x1 [0285.577] CloseHandle (hObject=0x174) returned 1 [0285.578] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0285.578] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187851.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187851.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x221c)) returned 1 [0285.578] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0285.578] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0285.578] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187851.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187851.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x221c)) returned 1 [0285.578] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0285.578] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0285.578] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0285.578] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaac, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0187859.WMF", cAlternateFileName="")) returned 1 [0285.578] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0285.578] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0285.578] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0285.578] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0285.579] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0285.579] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0285.579] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187859.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187859.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0285.579] GetFileType (hFile=0x174) returned 0x1 [0285.579] CloseHandle (hObject=0x174) returned 1 [0285.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0285.580] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187859.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187859.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaac)) returned 1 [0285.580] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0285.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0285.580] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187859.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187859.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaac)) returned 1 [0285.580] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0285.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0285.580] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0285.580] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2394, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0187861.WMF", cAlternateFileName="")) returned 1 [0285.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0285.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0285.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0285.581] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0285.581] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0285.581] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0285.581] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187861.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187861.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0285.581] GetFileType (hFile=0x174) returned 0x1 [0285.582] CloseHandle (hObject=0x174) returned 1 [0285.582] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0285.582] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187861.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187861.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2394)) returned 1 [0285.582] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0285.582] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0285.582] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187861.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187861.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2394)) returned 1 [0285.582] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0285.582] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0285.582] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0285.582] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a44, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0187863.WMF", cAlternateFileName="")) returned 1 [0285.582] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0285.583] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0285.583] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0285.583] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0285.583] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0285.583] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0285.583] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187863.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187863.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0285.583] GetFileType (hFile=0x174) returned 0x1 [0285.584] CloseHandle (hObject=0x174) returned 1 [0285.584] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0285.584] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187863.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187863.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a44)) returned 1 [0285.584] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0285.584] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0285.584] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187863.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187863.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a44)) returned 1 [0285.584] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0285.584] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0285.585] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0285.585] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1258, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0187881.WMF", cAlternateFileName="")) returned 1 [0285.585] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0285.585] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0285.585] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0285.585] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0285.585] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0285.585] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0285.585] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187881.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187881.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0285.586] GetFileType (hFile=0x174) returned 0x1 [0285.586] CloseHandle (hObject=0x174) returned 1 [0285.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0285.586] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187881.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187881.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1258)) returned 1 [0285.586] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0285.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0285.586] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187881.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187881.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1258)) returned 1 [0285.587] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0285.587] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0285.587] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0285.587] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x834, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0187883.WMF", cAlternateFileName="")) returned 1 [0285.587] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0285.587] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0285.587] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0285.587] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0285.587] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0285.587] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0285.587] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187883.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187883.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0285.588] GetFileType (hFile=0x174) returned 0x1 [0285.588] CloseHandle (hObject=0x174) returned 1 [0285.588] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0285.588] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187883.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187883.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x834)) returned 1 [0285.590] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0285.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0285.590] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187883.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187883.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x834)) returned 1 [0285.590] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0285.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0285.590] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0285.590] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15f4, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0187893.WMF", cAlternateFileName="")) returned 1 [0285.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0285.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0285.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0285.590] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0285.591] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0285.591] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0285.591] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187893.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187893.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0285.591] GetFileType (hFile=0x174) returned 0x1 [0285.592] CloseHandle (hObject=0x174) returned 1 [0285.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0285.592] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187893.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187893.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15f4)) returned 1 [0285.592] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0285.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0285.592] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187893.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187893.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15f4)) returned 1 [0285.592] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0285.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0285.592] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0285.593] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd90, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0187895.WMF", cAlternateFileName="")) returned 1 [0285.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0285.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0285.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0285.593] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0285.593] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0285.593] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0285.593] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187895.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187895.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0285.593] GetFileType (hFile=0x174) returned 0x1 [0285.594] CloseHandle (hObject=0x174) returned 1 [0285.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0285.594] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187895.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187895.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd90)) returned 1 [0285.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0285.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0285.594] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187895.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187895.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd90)) returned 1 [0285.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0285.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0285.595] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0285.595] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1388, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0187921.WMF", cAlternateFileName="")) returned 1 [0285.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0285.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0285.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0285.595] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0285.595] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0285.595] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0285.595] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187921.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187921.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0285.596] GetFileType (hFile=0x174) returned 0x1 [0285.596] CloseHandle (hObject=0x174) returned 1 [0285.596] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0285.596] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187921.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187921.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1388)) returned 1 [0285.597] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0285.597] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0285.597] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187921.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187921.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1388)) returned 1 [0285.597] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0285.597] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0285.597] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0285.597] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x29dc, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0188511.WMF", cAlternateFileName="")) returned 1 [0285.597] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0285.597] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0285.597] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0285.597] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0285.598] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0285.598] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0285.598] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188511.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188511.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0285.598] GetFileType (hFile=0x174) returned 0x1 [0285.599] CloseHandle (hObject=0x174) returned 1 [0285.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0285.599] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188511.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188511.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x29dc)) returned 1 [0285.599] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0285.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0285.599] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188511.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188511.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x29dc)) returned 1 [0285.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0285.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0285.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0285.600] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3004, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0188513.WMF", cAlternateFileName="")) returned 1 [0285.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0285.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0285.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0285.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0285.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0285.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0285.601] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188513.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188513.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0285.601] GetFileType (hFile=0x174) returned 0x1 [0285.601] CloseHandle (hObject=0x174) returned 1 [0285.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0285.602] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188513.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188513.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3004)) returned 1 [0285.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0285.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0285.602] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188513.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188513.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3004)) returned 1 [0285.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0285.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0285.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0285.602] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16c0, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0188519.WMF", cAlternateFileName="")) returned 1 [0285.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0285.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0285.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0285.603] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0285.603] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0285.603] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0285.603] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188519.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188519.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0285.603] GetFileType (hFile=0x174) returned 0x1 [0285.604] CloseHandle (hObject=0x174) returned 1 [0285.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0285.604] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188519.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188519.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16c0)) returned 1 [0285.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0285.975] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0285.975] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188519.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188519.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16c0)) returned 1 [0285.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0285.975] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0285.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0285.976] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b5c, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0188587.WMF", cAlternateFileName="")) returned 1 [0285.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0285.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0285.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0285.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0285.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0285.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0285.977] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188587.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188587.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0285.984] GetFileType (hFile=0x174) returned 0x1 [0285.984] CloseHandle (hObject=0x174) returned 1 [0285.984] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0285.984] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188587.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188587.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b5c)) returned 1 [0285.984] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0285.984] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0285.985] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188587.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188587.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b5c)) returned 1 [0285.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0285.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0285.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0285.985] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3e9e, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0188667.WMF", cAlternateFileName="")) returned 1 [0285.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0285.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0285.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0285.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0285.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0285.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0285.986] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188667.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188667.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0286.034] GetFileType (hFile=0x174) returned 0x1 [0286.034] CloseHandle (hObject=0x174) returned 1 [0286.035] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0286.035] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188667.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188667.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3e9e)) returned 1 [0286.035] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0286.035] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0286.035] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188667.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188667.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3e9e)) returned 1 [0286.035] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0286.035] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0286.035] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0286.036] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x73a2, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0188669.WMF", cAlternateFileName="")) returned 1 [0286.036] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238050 [0286.036] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2129c0 [0286.036] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0286.036] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2129c0 | out: hHeap=0x1f0000) returned 1 [0286.036] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0286.036] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238050 | out: hHeap=0x1f0000) returned 1 [0286.037] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188669.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188669.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0286.037] GetFileType (hFile=0x174) returned 0x1 [0286.037] CloseHandle (hObject=0x174) returned 1 [0286.037] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0286.038] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188669.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188669.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x73a2)) returned 1 [0286.038] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0286.038] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0286.038] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188669.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188669.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x73a2)) returned 1 [0286.038] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0286.038] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0286.038] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0286.038] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x336a, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0188679.WMF", cAlternateFileName="")) returned 1 [0286.038] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0286.038] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2120b8 [0286.038] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0286.038] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2120b8 | out: hHeap=0x1f0000) returned 1 [0286.039] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0286.039] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0286.039] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188679.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188679.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0286.039] GetFileType (hFile=0x174) returned 0x1 [0286.039] CloseHandle (hObject=0x174) returned 1 [0286.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0286.040] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188679.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188679.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x336a)) returned 1 [0286.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0286.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0286.040] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188679.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188679.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x336a)) returned 1 [0286.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0286.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0286.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0286.040] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ca4, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0195248.WMF", cAlternateFileName="")) returned 1 [0286.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0286.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212718 [0286.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0286.041] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212718 | out: hHeap=0x1f0000) returned 1 [0286.041] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0286.041] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0286.041] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195248.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195248.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0286.041] GetFileType (hFile=0x174) returned 0x1 [0286.042] CloseHandle (hObject=0x174) returned 1 [0286.042] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0286.042] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195248.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195248.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ca4)) returned 1 [0286.042] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0286.043] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0286.043] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195248.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195248.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ca4)) returned 1 [0286.043] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0286.043] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0286.043] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0286.043] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11b6, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0195254.WMF", cAlternateFileName="")) returned 1 [0286.043] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238050 [0286.043] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2119d0 [0286.043] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0286.043] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2119d0 | out: hHeap=0x1f0000) returned 1 [0286.043] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0286.044] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238050 | out: hHeap=0x1f0000) returned 1 [0286.044] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195254.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195254.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0286.044] GetFileType (hFile=0x174) returned 0x1 [0286.045] CloseHandle (hObject=0x174) returned 1 [0286.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0286.045] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195254.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195254.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11b6)) returned 1 [0286.045] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0286.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0286.045] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195254.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195254.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11b6)) returned 1 [0286.045] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0286.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0286.046] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0286.046] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x207a, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0195260.WMF", cAlternateFileName="")) returned 1 [0286.046] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0286.046] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d00 [0286.046] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0286.046] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d00 | out: hHeap=0x1f0000) returned 1 [0286.046] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0286.046] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0286.047] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195260.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195260.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0286.047] GetFileType (hFile=0x174) returned 0x1 [0286.047] CloseHandle (hObject=0x174) returned 1 [0286.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0286.048] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195260.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195260.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x207a)) returned 1 [0286.048] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0286.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0286.048] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195260.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195260.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x207a)) returned 1 [0286.048] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0286.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0286.048] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0286.048] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x72f8, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0195320.WMF", cAlternateFileName="")) returned 1 [0286.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238050 [0286.049] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211ae0 [0286.049] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0286.049] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211ae0 | out: hHeap=0x1f0000) returned 1 [0286.049] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0286.049] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238050 | out: hHeap=0x1f0000) returned 1 [0286.050] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195320.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195320.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0286.050] GetFileType (hFile=0x174) returned 0x1 [0286.050] CloseHandle (hObject=0x174) returned 1 [0286.051] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0286.051] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195320.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195320.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x72f8)) returned 1 [0286.051] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0286.051] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0286.051] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195320.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195320.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x72f8)) returned 1 [0286.051] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0286.051] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0286.051] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0286.053] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5350, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0195342.WMF", cAlternateFileName="")) returned 1 [0286.054] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0286.054] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211ae0 [0286.054] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0286.054] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211ae0 | out: hHeap=0x1f0000) returned 1 [0286.054] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0286.054] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0286.054] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195342.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195342.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0286.055] GetFileType (hFile=0x174) returned 0x1 [0286.055] CloseHandle (hObject=0x174) returned 1 [0286.055] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0286.055] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195342.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195342.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5350)) returned 1 [0286.055] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0286.055] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0286.056] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195342.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195342.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5350)) returned 1 [0286.056] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0286.056] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0286.056] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0286.056] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x48be, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0195428.WMF", cAlternateFileName="")) returned 1 [0286.056] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0286.056] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2127a0 [0286.056] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0286.056] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2127a0 | out: hHeap=0x1f0000) returned 1 [0286.056] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0286.057] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0286.057] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195428.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195428.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0286.058] GetFileType (hFile=0x174) returned 0x1 [0286.058] CloseHandle (hObject=0x174) returned 1 [0286.058] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0286.058] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195428.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195428.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x48be)) returned 1 [0286.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0286.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0286.059] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195428.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195428.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x48be)) returned 1 [0286.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0286.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0286.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0286.059] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe60, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0195772.WMF", cAlternateFileName="")) returned 1 [0286.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0286.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211a58 [0286.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0286.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211a58 | out: hHeap=0x1f0000) returned 1 [0286.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0286.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0286.060] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195772.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195772.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0286.060] GetFileType (hFile=0x174) returned 0x1 [0286.061] CloseHandle (hObject=0x174) returned 1 [0286.061] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0286.061] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195772.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195772.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe60)) returned 1 [0286.061] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0286.062] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0286.062] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195772.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195772.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe60)) returned 1 [0286.062] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0286.062] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0286.062] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0286.062] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbbc, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0195788.WMF", cAlternateFileName="")) returned 1 [0286.062] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0286.062] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211b68 [0286.062] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0286.062] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b68 | out: hHeap=0x1f0000) returned 1 [0286.062] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0286.063] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0286.063] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195788.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195788.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0286.063] GetFileType (hFile=0x174) returned 0x1 [0286.064] CloseHandle (hObject=0x174) returned 1 [0286.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0286.064] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195788.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195788.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbbc)) returned 1 [0286.064] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0286.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0286.064] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195788.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195788.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbbc)) returned 1 [0286.065] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0286.065] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0286.065] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0286.066] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x128e, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0196060.WMF", cAlternateFileName="")) returned 1 [0286.066] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0286.066] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2124f8 [0286.066] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0286.066] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2124f8 | out: hHeap=0x1f0000) returned 1 [0286.066] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0286.066] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0286.066] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196060.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196060.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0286.067] GetFileType (hFile=0x174) returned 0x1 [0286.067] CloseHandle (hObject=0x174) returned 1 [0286.067] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0286.068] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196060.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196060.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x128e)) returned 1 [0286.068] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0286.068] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0286.068] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196060.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196060.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x128e)) returned 1 [0286.068] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0286.068] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0286.068] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0286.068] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14ce, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0196110.WMF", cAlternateFileName="")) returned 1 [0286.069] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0286.069] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d00 [0286.069] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0286.069] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d00 | out: hHeap=0x1f0000) returned 1 [0286.069] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0286.069] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0286.070] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196110.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196110.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0286.070] GetFileType (hFile=0x174) returned 0x1 [0286.071] CloseHandle (hObject=0x174) returned 1 [0286.072] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0286.073] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196110.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196110.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14ce)) returned 1 [0286.073] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0286.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0286.073] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196110.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196110.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14ce)) returned 1 [0286.073] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0286.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0286.264] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0286.264] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xef2, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0196142.WMF", cAlternateFileName="")) returned 1 [0286.264] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0286.264] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212030 [0286.264] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0286.264] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212030 | out: hHeap=0x1f0000) returned 1 [0286.264] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0286.264] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0286.308] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196142.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196142.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0286.308] GetFileType (hFile=0x1ac) returned 0x1 [0286.309] CloseHandle (hObject=0x1ac) returned 1 [0286.309] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0286.310] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196142.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196142.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xef2)) returned 1 [0286.310] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0286.310] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0286.310] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196142.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196142.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xef2)) returned 1 [0286.310] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0286.310] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0286.310] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0286.310] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3586, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0196354.WMF", cAlternateFileName="")) returned 1 [0286.310] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0286.311] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212360 [0286.311] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0286.311] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212360 | out: hHeap=0x1f0000) returned 1 [0286.311] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0286.311] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0286.311] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196354.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196354.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0286.312] GetFileType (hFile=0x1ac) returned 0x1 [0286.312] CloseHandle (hObject=0x1ac) returned 1 [0286.312] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0286.313] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196354.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196354.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3586)) returned 1 [0286.313] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0286.313] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0286.313] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196354.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196354.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3586)) returned 1 [0286.313] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0286.313] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0286.313] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0286.313] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b00, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0196358.WMF", cAlternateFileName="")) returned 1 [0286.313] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0286.314] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211fa8 [0286.314] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0286.314] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211fa8 | out: hHeap=0x1f0000) returned 1 [0286.314] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0286.314] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0286.314] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196358.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196358.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0286.315] GetFileType (hFile=0x1ac) returned 0x1 [0286.315] CloseHandle (hObject=0x1ac) returned 1 [0286.315] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0286.316] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196358.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196358.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b00)) returned 1 [0286.316] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0286.316] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0286.316] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196358.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196358.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b00)) returned 1 [0286.316] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0286.316] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0286.316] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0286.316] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x164c, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0196364.WMF", cAlternateFileName="")) returned 1 [0286.317] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0286.317] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212030 [0286.317] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0286.317] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212030 | out: hHeap=0x1f0000) returned 1 [0286.317] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0286.317] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0286.318] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196364.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196364.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0286.318] GetFileType (hFile=0x1ac) returned 0x1 [0286.318] CloseHandle (hObject=0x1ac) returned 1 [0286.319] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0286.319] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196364.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196364.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x164c)) returned 1 [0286.319] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0286.319] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0286.319] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196364.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196364.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x164c)) returned 1 [0286.319] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0286.319] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0286.319] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0286.319] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9d26, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0197979.WMF", cAlternateFileName="")) returned 1 [0286.320] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0286.320] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2122d8 [0286.320] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0286.320] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2122d8 | out: hHeap=0x1f0000) returned 1 [0286.320] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0286.320] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0286.320] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0197979.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0197979.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0286.321] GetFileType (hFile=0x1ac) returned 0x1 [0286.321] CloseHandle (hObject=0x1ac) returned 1 [0286.321] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0286.321] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0197979.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0197979.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9d26)) returned 1 [0286.321] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0286.322] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0286.322] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0197979.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0197979.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9d26)) returned 1 [0286.322] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0286.322] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0286.322] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0286.322] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x668c, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0197983.WMF", cAlternateFileName="")) returned 1 [0286.322] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0286.322] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211f20 [0286.322] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0286.322] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211f20 | out: hHeap=0x1f0000) returned 1 [0286.323] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0286.323] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0286.324] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0197983.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0197983.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0286.325] GetFileType (hFile=0x1ac) returned 0x1 [0286.325] CloseHandle (hObject=0x1ac) returned 1 [0286.325] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0286.326] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0197983.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0197983.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x668c)) returned 1 [0286.326] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0286.326] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0286.326] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0197983.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0197983.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x668c)) returned 1 [0286.326] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0286.326] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0286.326] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0286.326] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x849c, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0198016.WMF", cAlternateFileName="")) returned 1 [0286.326] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0286.326] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212360 [0286.326] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0286.327] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212360 | out: hHeap=0x1f0000) returned 1 [0286.327] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0286.327] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0286.327] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198016.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198016.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0286.327] GetFileType (hFile=0x1ac) returned 0x1 [0286.328] CloseHandle (hObject=0x1ac) returned 1 [0286.328] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0286.328] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198016.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198016.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x849c)) returned 1 [0286.328] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0286.328] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0286.328] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198016.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198016.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x849c)) returned 1 [0286.328] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0286.328] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0286.328] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0286.328] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5cae, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0198020.WMF", cAlternateFileName="")) returned 1 [0286.329] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0286.329] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212140 [0286.329] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0286.329] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212140 | out: hHeap=0x1f0000) returned 1 [0286.329] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0286.329] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0286.329] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198020.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198020.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0286.329] GetFileType (hFile=0x1ac) returned 0x1 [0286.330] CloseHandle (hObject=0x1ac) returned 1 [0286.330] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0286.330] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198020.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198020.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5cae)) returned 1 [0286.330] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0286.330] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0286.330] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198020.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198020.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5cae)) returned 1 [0286.330] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0286.330] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0286.331] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0286.331] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8860, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0198021.WMF", cAlternateFileName="")) returned 1 [0286.331] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0286.331] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2123e8 [0286.331] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0286.331] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2123e8 | out: hHeap=0x1f0000) returned 1 [0286.331] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0286.331] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0286.331] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198021.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198021.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0286.332] GetFileType (hFile=0x1ac) returned 0x1 [0286.332] CloseHandle (hObject=0x1ac) returned 1 [0286.332] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0286.332] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198021.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198021.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8860)) returned 1 [0286.332] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0286.332] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0286.332] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198021.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198021.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8860)) returned 1 [0286.332] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0286.333] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0286.333] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0286.333] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6624, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0198022.WMF", cAlternateFileName="")) returned 1 [0286.333] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238050 [0286.333] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211fa8 [0286.333] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0286.333] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211fa8 | out: hHeap=0x1f0000) returned 1 [0286.333] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0286.333] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238050 | out: hHeap=0x1f0000) returned 1 [0286.333] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198022.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198022.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0286.334] GetFileType (hFile=0x1ac) returned 0x1 [0286.334] CloseHandle (hObject=0x1ac) returned 1 [0286.334] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0286.334] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198022.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198022.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6624)) returned 1 [0286.334] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0286.334] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0286.335] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198022.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198022.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6624)) returned 1 [0286.335] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0286.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0286.335] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0286.335] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3cce, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0198025.WMF", cAlternateFileName="")) returned 1 [0286.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0286.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d00 [0286.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0286.335] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d00 | out: hHeap=0x1f0000) returned 1 [0286.335] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0286.335] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0286.336] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198025.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198025.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0286.336] GetFileType (hFile=0x1ac) returned 0x1 [0286.336] CloseHandle (hObject=0x1ac) returned 1 [0286.336] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0286.337] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198025.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198025.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3cce)) returned 1 [0286.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0286.337] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0286.337] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198025.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198025.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3cce)) returned 1 [0286.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0286.337] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0286.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0286.337] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd6b4, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0198102.WMF", cAlternateFileName="")) returned 1 [0286.337] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0286.337] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2123e8 [0286.337] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0286.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2123e8 | out: hHeap=0x1f0000) returned 1 [0286.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0286.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0286.338] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198102.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198102.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0286.338] GetFileType (hFile=0x1ac) returned 0x1 [0286.339] CloseHandle (hObject=0x1ac) returned 1 [0286.339] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0286.339] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198102.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198102.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd6b4)) returned 1 [0286.340] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0286.340] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0286.340] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198102.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198102.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd6b4)) returned 1 [0286.340] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0286.340] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0286.340] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0286.340] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa520, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0198113.WMF", cAlternateFileName="")) returned 1 [0286.340] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0286.340] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2124f8 [0286.340] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0286.340] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2124f8 | out: hHeap=0x1f0000) returned 1 [0286.340] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0286.340] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0286.341] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198113.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198113.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0286.341] GetFileType (hFile=0x1ac) returned 0x1 [0286.341] CloseHandle (hObject=0x1ac) returned 1 [0286.342] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0286.342] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198113.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198113.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa520)) returned 1 [0286.342] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0286.342] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0286.342] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198113.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198113.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa520)) returned 1 [0286.342] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0286.342] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0286.342] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0286.342] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa3b2, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0198226.WMF", cAlternateFileName="")) returned 1 [0286.343] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0286.343] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212360 [0286.343] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0286.343] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212360 | out: hHeap=0x1f0000) returned 1 [0286.343] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0286.343] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0286.343] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198226.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198226.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0286.343] GetFileType (hFile=0x1ac) returned 0x1 [0286.344] CloseHandle (hObject=0x1ac) returned 1 [0286.344] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0286.344] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198226.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198226.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa3b2)) returned 1 [0286.344] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0286.344] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0286.344] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198226.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198226.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa3b2)) returned 1 [0286.344] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0286.344] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0286.344] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0286.345] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa69e, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0198234.WMF", cAlternateFileName="")) returned 1 [0286.345] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0286.345] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212608 [0286.345] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0286.345] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212608 | out: hHeap=0x1f0000) returned 1 [0286.345] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0286.345] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0286.345] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198234.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198234.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0286.346] GetFileType (hFile=0x1ac) returned 0x1 [0286.346] CloseHandle (hObject=0x1ac) returned 1 [0286.346] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0286.346] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198234.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198234.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa69e)) returned 1 [0286.346] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0286.346] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0286.346] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198234.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198234.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa69e)) returned 1 [0286.346] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0286.346] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0286.346] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0286.346] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6f9c, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0198372.WMF", cAlternateFileName="")) returned 1 [0286.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0286.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0286.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0286.347] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0286.347] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0286.347] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0286.347] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198372.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198372.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0286.347] GetFileType (hFile=0x1ac) returned 0x1 [0286.348] CloseHandle (hObject=0x1ac) returned 1 [0286.348] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0286.348] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198372.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198372.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6f9c)) returned 1 [0286.348] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0286.348] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0286.348] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198372.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198372.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6f9c)) returned 1 [0286.348] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0286.348] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0286.349] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0286.349] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9d6c, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0198377.WMF", cAlternateFileName="")) returned 1 [0286.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0286.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212470 [0286.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0286.349] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212470 | out: hHeap=0x1f0000) returned 1 [0286.349] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0286.349] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0286.349] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198377.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198377.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0286.349] GetFileType (hFile=0x1ac) returned 0x1 [0286.350] CloseHandle (hObject=0x1ac) returned 1 [0286.350] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0286.350] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198377.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198377.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9d6c)) returned 1 [0286.350] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0286.350] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0286.350] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198377.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198377.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9d6c)) returned 1 [0286.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0286.351] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0286.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0286.351] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc20c, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0198447.WMF", cAlternateFileName="")) returned 1 [0286.351] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0286.351] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0286.351] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0286.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0286.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0286.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0286.352] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198447.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198447.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0286.352] GetFileType (hFile=0x1ac) returned 0x1 [0286.352] CloseHandle (hObject=0x1ac) returned 1 [0286.353] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0286.353] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198447.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198447.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc20c)) returned 1 [0286.353] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0286.353] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0286.353] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198447.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198447.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc20c)) returned 1 [0286.353] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0286.353] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0286.353] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0286.353] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xae08, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0198494.WMF", cAlternateFileName="")) returned 1 [0286.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0286.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212828 [0286.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0286.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212828 | out: hHeap=0x1f0000) returned 1 [0286.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0286.731] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0286.731] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198494.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198494.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0286.732] GetFileType (hFile=0x1c0) returned 0x1 [0286.732] CloseHandle (hObject=0x1c0) returned 1 [0286.732] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0286.733] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198494.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198494.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xae08)) returned 1 [0286.733] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0286.733] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0286.733] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198494.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198494.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xae08)) returned 1 [0286.733] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0286.733] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0286.733] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0286.733] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe17a, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0198712.WMF", cAlternateFileName="")) returned 1 [0286.733] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0286.734] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0286.734] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0286.734] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0286.734] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0286.734] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0286.735] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198712.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198712.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0286.735] GetFileType (hFile=0x1c0) returned 0x1 [0286.735] CloseHandle (hObject=0x1c0) returned 1 [0286.736] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0286.736] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198712.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198712.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe17a)) returned 1 [0286.736] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0286.736] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0286.736] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198712.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198712.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe17a)) returned 1 [0286.736] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0286.737] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0286.737] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0286.737] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x714e, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0199279.WMF", cAlternateFileName="")) returned 1 [0286.737] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0286.737] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2122d8 [0286.737] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0286.737] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2122d8 | out: hHeap=0x1f0000) returned 1 [0286.737] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0286.737] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0286.738] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199279.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199279.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0286.738] GetFileType (hFile=0x1c0) returned 0x1 [0286.739] CloseHandle (hObject=0x1c0) returned 1 [0286.739] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0286.740] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199279.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199279.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x714e)) returned 1 [0286.740] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0286.740] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0286.740] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199279.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199279.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x714e)) returned 1 [0286.740] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0286.740] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0286.740] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0286.740] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7c4e, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0199303.WMF", cAlternateFileName="")) returned 1 [0286.741] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0286.741] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211e10 [0286.741] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0286.741] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e10 | out: hHeap=0x1f0000) returned 1 [0286.741] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0286.741] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0286.742] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199303.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199303.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0286.742] GetFileType (hFile=0x1c0) returned 0x1 [0286.742] CloseHandle (hObject=0x1c0) returned 1 [0286.743] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0286.743] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199303.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199303.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7c4e)) returned 1 [0286.743] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0286.743] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0286.743] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199303.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199303.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7c4e)) returned 1 [0286.743] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0286.744] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0286.744] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0286.744] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc37e, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0199307.WMF", cAlternateFileName="")) returned 1 [0286.744] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0286.744] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212718 [0286.744] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0286.744] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212718 | out: hHeap=0x1f0000) returned 1 [0286.744] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0286.744] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0286.745] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199307.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199307.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0286.746] GetFileType (hFile=0x1c0) returned 0x1 [0286.746] CloseHandle (hObject=0x1c0) returned 1 [0286.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0286.747] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199307.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199307.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc37e)) returned 1 [0286.747] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0286.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0286.747] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199307.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199307.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc37e)) returned 1 [0286.747] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0286.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0286.747] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0286.748] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x662a, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0199423.WMF", cAlternateFileName="")) returned 1 [0286.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0286.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212470 [0286.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0286.748] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212470 | out: hHeap=0x1f0000) returned 1 [0286.748] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0286.748] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0286.749] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199423.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199423.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0286.749] GetFileType (hFile=0x1c0) returned 0x1 [0286.749] CloseHandle (hObject=0x1c0) returned 1 [0286.750] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0286.750] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199423.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199423.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x662a)) returned 1 [0286.750] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0286.750] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0286.750] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199423.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199423.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x662a)) returned 1 [0286.750] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0286.750] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0286.751] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0286.751] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4124, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0199429.WMF", cAlternateFileName="")) returned 1 [0286.751] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0286.751] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0286.751] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0286.751] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0286.751] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0286.751] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0286.752] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199429.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199429.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0286.752] GetFileType (hFile=0x1c0) returned 0x1 [0286.752] CloseHandle (hObject=0x1c0) returned 1 [0286.753] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0286.753] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199429.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199429.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4124)) returned 1 [0286.753] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0286.753] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0286.753] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199429.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199429.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4124)) returned 1 [0286.753] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0286.753] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0286.753] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0286.753] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13c4, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0199465.WMF", cAlternateFileName="")) returned 1 [0286.753] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0286.753] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211e10 [0286.754] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0286.754] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e10 | out: hHeap=0x1f0000) returned 1 [0286.754] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0286.754] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0286.754] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199465.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199465.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0286.756] GetFileType (hFile=0x1c0) returned 0x1 [0286.756] CloseHandle (hObject=0x1c0) returned 1 [0286.756] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0286.756] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199465.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199465.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13c4)) returned 1 [0286.756] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0286.756] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0286.757] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199465.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199465.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13c4)) returned 1 [0286.757] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0286.757] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0286.757] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0286.757] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x35bc, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0199469.WMF", cAlternateFileName="")) returned 1 [0286.757] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0286.757] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0286.757] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0286.757] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0286.757] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0286.757] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0286.757] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199469.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199469.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0286.758] GetFileType (hFile=0x1c0) returned 0x1 [0286.758] CloseHandle (hObject=0x1c0) returned 1 [0286.758] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0286.758] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199469.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199469.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x35bc)) returned 1 [0286.758] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0286.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0286.759] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199469.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199469.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x35bc)) returned 1 [0286.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0286.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0286.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0286.759] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a18, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0199473.WMF", cAlternateFileName="")) returned 1 [0286.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0286.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2128b0 [0286.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0286.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2128b0 | out: hHeap=0x1f0000) returned 1 [0286.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0286.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0286.760] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199473.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199473.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0286.760] GetFileType (hFile=0x1c0) returned 0x1 [0286.760] CloseHandle (hObject=0x1c0) returned 1 [0286.761] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0286.762] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199473.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199473.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a18)) returned 1 [0286.762] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0286.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0286.762] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199473.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199473.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a18)) returned 1 [0286.762] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0286.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0286.762] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0286.762] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1484, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0199475.WMF", cAlternateFileName="")) returned 1 [0286.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0286.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0286.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0286.762] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0286.762] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0286.763] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0286.763] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199475.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199475.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0286.763] GetFileType (hFile=0x1c0) returned 0x1 [0286.763] CloseHandle (hObject=0x1c0) returned 1 [0286.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0286.764] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199475.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199475.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1484)) returned 1 [0286.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0286.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0286.764] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199475.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199475.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1484)) returned 1 [0286.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0286.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0286.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0286.764] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27b4, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0199483.WMF", cAlternateFileName="")) returned 1 [0286.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0286.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2129c0 [0286.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0286.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2129c0 | out: hHeap=0x1f0000) returned 1 [0286.765] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0286.765] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0286.765] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199483.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199483.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0286.765] GetFileType (hFile=0x1c0) returned 0x1 [0286.766] CloseHandle (hObject=0x1c0) returned 1 [0286.766] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0286.766] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199483.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199483.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27b4)) returned 1 [0286.766] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0286.766] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0286.766] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199483.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199483.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27b4)) returned 1 [0286.766] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0286.766] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0286.766] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0286.766] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x302c, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0199609.WMF", cAlternateFileName="")) returned 1 [0286.766] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0286.767] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211fa8 [0286.767] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0286.767] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211fa8 | out: hHeap=0x1f0000) returned 1 [0286.767] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0286.767] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0286.767] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199609.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199609.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0286.768] GetFileType (hFile=0x1c0) returned 0x1 [0286.768] CloseHandle (hObject=0x1c0) returned 1 [0286.768] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0286.769] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199609.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199609.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x302c)) returned 1 [0286.769] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0286.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0286.769] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199609.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199609.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x302c)) returned 1 [0286.769] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0286.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0286.769] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0286.769] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2004, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0200151.WMF", cAlternateFileName="")) returned 1 [0286.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0286.770] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211b68 [0286.770] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0286.770] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b68 | out: hHeap=0x1f0000) returned 1 [0286.770] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0286.770] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0286.771] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200151.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200151.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0286.771] GetFileType (hFile=0x1c0) returned 0x1 [0286.771] CloseHandle (hObject=0x1c0) returned 1 [0287.092] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0287.092] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200151.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200151.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2004)) returned 1 [0287.092] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0287.092] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0287.092] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200151.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200151.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2004)) returned 1 [0287.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0287.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0287.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0287.093] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c0c, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0200163.WMF", cAlternateFileName="")) returned 1 [0287.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0287.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2123e8 [0287.094] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0287.094] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2123e8 | out: hHeap=0x1f0000) returned 1 [0287.094] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0287.094] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0287.095] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200163.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200163.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0287.097] GetFileType (hFile=0x1e0) returned 0x1 [0287.097] CloseHandle (hObject=0x1e0) returned 1 [0287.098] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0287.098] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200163.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200163.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c0c)) returned 1 [0287.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0287.098] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0287.098] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200163.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200163.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c0c)) returned 1 [0287.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0287.098] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0287.099] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0287.099] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14c0, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0200183.WMF", cAlternateFileName="")) returned 1 [0287.099] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0287.099] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2119d0 [0287.099] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0287.100] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2119d0 | out: hHeap=0x1f0000) returned 1 [0287.100] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0287.100] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0287.100] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200183.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200183.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0287.101] GetFileType (hFile=0x1e0) returned 0x1 [0287.101] CloseHandle (hObject=0x1e0) returned 1 [0287.101] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0287.101] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200183.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200183.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14c0)) returned 1 [0287.102] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0287.102] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0287.102] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200183.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200183.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14c0)) returned 1 [0287.102] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0287.102] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0287.102] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0287.102] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f7c, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0200189.WMF", cAlternateFileName="")) returned 1 [0287.102] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0287.102] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2120b8 [0287.102] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0287.103] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2120b8 | out: hHeap=0x1f0000) returned 1 [0287.103] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0287.103] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0287.104] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200189.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200189.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0287.104] GetFileType (hFile=0x1e0) returned 0x1 [0287.105] CloseHandle (hObject=0x1e0) returned 1 [0287.106] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0287.106] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200189.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200189.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f7c)) returned 1 [0287.106] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0287.107] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0287.107] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200189.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200189.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f7c)) returned 1 [0287.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0287.107] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0287.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0287.107] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7a46, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0200273.WMF", cAlternateFileName="")) returned 1 [0287.107] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0287.107] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0287.107] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0287.108] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0287.108] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0287.108] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0287.108] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200273.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200273.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0287.109] GetFileType (hFile=0x1e0) returned 0x1 [0287.109] CloseHandle (hObject=0x1e0) returned 1 [0287.109] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0287.110] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200273.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200273.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7a46)) returned 1 [0287.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0287.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0287.110] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200273.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200273.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7a46)) returned 1 [0287.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0287.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0287.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0287.110] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c0a, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0200279.WMF", cAlternateFileName="")) returned 1 [0287.111] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0287.111] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2119d0 [0287.111] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0287.111] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2119d0 | out: hHeap=0x1f0000) returned 1 [0287.111] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0287.111] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0287.112] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200279.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200279.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0287.113] GetFileType (hFile=0x1e0) returned 0x1 [0287.113] CloseHandle (hObject=0x1e0) returned 1 [0287.114] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0287.114] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200279.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200279.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c0a)) returned 1 [0287.114] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0287.114] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0287.114] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200279.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200279.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c0a)) returned 1 [0287.114] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0287.114] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0287.115] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0287.115] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa0b0, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0200289.WMF", cAlternateFileName="")) returned 1 [0287.115] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0287.115] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212030 [0287.115] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0287.115] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212030 | out: hHeap=0x1f0000) returned 1 [0287.115] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0287.115] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0287.116] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200289.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200289.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0287.116] GetFileType (hFile=0x1e0) returned 0x1 [0287.117] CloseHandle (hObject=0x1e0) returned 1 [0287.117] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0287.117] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200289.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200289.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa0b0)) returned 1 [0287.117] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0287.117] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0287.118] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200289.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200289.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa0b0)) returned 1 [0287.118] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0287.118] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0287.118] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0287.118] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f08, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0200377.WMF", cAlternateFileName="")) returned 1 [0287.118] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0287.118] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211ae0 [0287.118] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0287.118] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211ae0 | out: hHeap=0x1f0000) returned 1 [0287.118] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0287.118] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0287.119] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200377.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200377.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0287.119] GetFileType (hFile=0x1e0) returned 0x1 [0287.120] CloseHandle (hObject=0x1e0) returned 1 [0287.120] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0287.121] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200377.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200377.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f08)) returned 1 [0287.121] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0287.121] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0287.121] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200377.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200377.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f08)) returned 1 [0287.121] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0287.121] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0287.121] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0287.122] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5398, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0200383.WMF", cAlternateFileName="")) returned 1 [0287.122] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0287.122] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2127a0 [0287.122] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0287.122] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2127a0 | out: hHeap=0x1f0000) returned 1 [0287.123] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0287.123] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0287.124] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200383.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200383.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0287.124] GetFileType (hFile=0x1e0) returned 0x1 [0287.126] CloseHandle (hObject=0x1e0) returned 1 [0287.126] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0287.126] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200383.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200383.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5398)) returned 1 [0287.127] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0287.127] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0287.127] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200383.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200383.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5398)) returned 1 [0287.127] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0287.127] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0287.127] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0287.128] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x366e, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0200467.WMF", cAlternateFileName="")) returned 1 [0287.128] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0287.128] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211948 [0287.128] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0287.128] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211948 | out: hHeap=0x1f0000) returned 1 [0287.128] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0287.128] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0287.129] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200467.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200467.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0287.135] GetFileType (hFile=0x1e0) returned 0x1 [0287.135] CloseHandle (hObject=0x1e0) returned 1 [0287.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0287.458] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200467.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200467.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x366e)) returned 1 [0287.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0287.458] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0287.458] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200467.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200467.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x366e)) returned 1 [0287.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0287.458] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0287.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0287.459] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x273e, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0200521.WMF", cAlternateFileName="")) returned 1 [0287.459] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0287.459] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2120b8 [0287.459] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0287.459] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2120b8 | out: hHeap=0x1f0000) returned 1 [0287.459] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0287.459] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0287.459] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200521.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200521.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0287.465] GetFileType (hFile=0x1e0) returned 0x1 [0287.465] CloseHandle (hObject=0x1e0) returned 1 [0287.465] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0287.465] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200521.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200521.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x273e)) returned 1 [0287.466] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0287.466] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0287.466] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200521.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200521.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x273e)) returned 1 [0287.466] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0287.466] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0287.466] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0287.466] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf36, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0200611.WMF", cAlternateFileName="")) returned 1 [0287.466] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0287.466] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2124f8 [0287.466] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0287.466] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2124f8 | out: hHeap=0x1f0000) returned 1 [0287.467] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0287.467] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0287.467] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200611.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200611.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0287.467] GetFileType (hFile=0x1e0) returned 0x1 [0287.468] CloseHandle (hObject=0x1e0) returned 1 [0287.468] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0287.468] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200611.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200611.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf36)) returned 1 [0287.468] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0287.468] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0287.469] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200611.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200611.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf36)) returned 1 [0287.469] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0287.469] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0287.469] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0287.469] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa50e, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0202045.JPG", cAlternateFileName="")) returned 1 [0287.469] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0287.469] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212470 [0287.469] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0287.469] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212470 | out: hHeap=0x1f0000) returned 1 [0287.469] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0287.469] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0287.470] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0202045.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0202045.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0287.470] GetFileType (hFile=0x1e0) returned 0x1 [0287.470] CloseHandle (hObject=0x1e0) returned 1 [0287.471] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0287.471] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0202045.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0202045.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa50e)) returned 1 [0287.471] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0287.471] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0287.471] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0202045.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0202045.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa50e)) returned 1 [0287.471] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0287.471] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0287.472] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0287.472] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6e74, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0211981.WMF", cAlternateFileName="")) returned 1 [0287.472] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0287.472] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211b68 [0287.472] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0287.472] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b68 | out: hHeap=0x1f0000) returned 1 [0287.472] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0287.472] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0287.473] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0211981.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0211981.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0287.473] GetFileType (hFile=0x1e0) returned 0x1 [0287.473] CloseHandle (hObject=0x1e0) returned 1 [0287.474] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0287.474] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0211981.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0211981.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6e74)) returned 1 [0287.474] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0287.474] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0287.474] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0211981.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0211981.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6e74)) returned 1 [0287.474] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0287.474] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0287.474] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0287.474] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x180e, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0212299.WMF", cAlternateFileName="")) returned 1 [0287.474] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609a0 [0287.475] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212360 [0287.475] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0287.475] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212360 | out: hHeap=0x1f0000) returned 1 [0287.475] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0287.475] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0287.475] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212299.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212299.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0287.475] GetFileType (hFile=0x1e0) returned 0x1 [0287.476] CloseHandle (hObject=0x1e0) returned 1 [0287.476] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0287.476] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212299.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212299.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x180e)) returned 1 [0287.476] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0287.477] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0287.477] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212299.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212299.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x180e)) returned 1 [0287.477] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0287.477] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0287.477] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0287.477] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x25cc, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0212601.WMF", cAlternateFileName="")) returned 1 [0287.477] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0287.477] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211b68 [0287.477] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0287.477] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b68 | out: hHeap=0x1f0000) returned 1 [0287.477] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0287.478] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0287.478] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212601.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212601.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0287.478] GetFileType (hFile=0x1e0) returned 0x1 [0287.479] CloseHandle (hObject=0x1e0) returned 1 [0287.479] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0287.479] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212601.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212601.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x25cc)) returned 1 [0287.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0287.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0287.480] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212601.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212601.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x25cc)) returned 1 [0287.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0287.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0287.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0287.480] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x199a, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0212685.WMF", cAlternateFileName="")) returned 1 [0287.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0287.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211bf0 [0287.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0287.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211bf0 | out: hHeap=0x1f0000) returned 1 [0287.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0287.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0287.481] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212685.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212685.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0287.481] GetFileType (hFile=0x1e0) returned 0x1 [0287.482] CloseHandle (hObject=0x1e0) returned 1 [0287.482] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0287.482] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212685.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212685.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x199a)) returned 1 [0287.483] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0287.483] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0287.483] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212685.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212685.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x199a)) returned 1 [0287.483] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0287.483] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0287.483] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0287.483] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x80c, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0212751.WMF", cAlternateFileName="")) returned 1 [0287.483] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0287.483] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212140 [0287.483] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0287.484] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212140 | out: hHeap=0x1f0000) returned 1 [0287.484] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0287.484] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0287.484] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212751.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212751.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0287.485] GetFileType (hFile=0x1e0) returned 0x1 [0287.485] CloseHandle (hObject=0x1e0) returned 1 [0287.485] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0287.486] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212751.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212751.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x80c)) returned 1 [0287.486] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0287.486] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0287.486] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212751.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212751.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x80c)) returned 1 [0287.486] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0287.486] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0287.487] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0287.487] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d4a, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0212953.WMF", cAlternateFileName="")) returned 1 [0287.487] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0287.487] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d88 [0287.487] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0287.487] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d88 | out: hHeap=0x1f0000) returned 1 [0287.487] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0287.487] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0287.488] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212953.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212953.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0287.488] GetFileType (hFile=0x1e0) returned 0x1 [0287.488] CloseHandle (hObject=0x1e0) returned 1 [0287.489] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0287.489] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212953.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212953.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d4a)) returned 1 [0287.489] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0287.489] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0287.489] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212953.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212953.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d4a)) returned 1 [0287.489] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0287.489] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0287.490] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0287.490] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa5c, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0213243.WMF", cAlternateFileName="")) returned 1 [0287.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0287.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212140 [0287.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0287.490] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212140 | out: hHeap=0x1f0000) returned 1 [0287.490] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0287.490] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0287.491] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0213243.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0213243.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0287.491] GetFileType (hFile=0x1e0) returned 0x1 [0287.491] CloseHandle (hObject=0x1e0) returned 1 [0287.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0287.492] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0213243.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0213243.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa5c)) returned 1 [0287.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0287.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0287.492] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0213243.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0213243.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa5c)) returned 1 [0287.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0287.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0287.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0287.492] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf00, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0213449.WMF", cAlternateFileName="")) returned 1 [0287.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0287.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d88 [0287.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0287.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d88 | out: hHeap=0x1f0000) returned 1 [0287.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0287.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0287.494] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0213449.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0213449.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0287.494] GetFileType (hFile=0x1e0) returned 0x1 [0287.494] CloseHandle (hObject=0x1e0) returned 1 [0287.751] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0287.751] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0213449.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0213449.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf00)) returned 1 [0287.752] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0287.752] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0287.752] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0213449.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0213449.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf00)) returned 1 [0287.752] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0287.752] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0287.752] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0287.753] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7cb6, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0214934.WMF", cAlternateFileName="")) returned 1 [0287.753] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0287.753] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211b68 [0287.753] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0287.753] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b68 | out: hHeap=0x1f0000) returned 1 [0287.753] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0287.753] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0287.943] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0214934.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0214934.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0287.943] GetFileType (hFile=0x198) returned 0x1 [0287.944] CloseHandle (hObject=0x198) returned 1 [0287.944] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0287.944] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0214934.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0214934.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7cb6)) returned 1 [0287.944] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0287.944] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0287.944] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0214934.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0214934.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7cb6)) returned 1 [0287.945] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0287.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0287.945] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0287.945] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaefa, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0214948.WMF", cAlternateFileName="")) returned 1 [0287.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0287.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2127a0 [0287.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0287.945] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2127a0 | out: hHeap=0x1f0000) returned 1 [0287.945] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0287.945] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0287.946] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0214948.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0214948.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0287.946] GetFileType (hFile=0x198) returned 0x1 [0287.947] CloseHandle (hObject=0x198) returned 1 [0287.947] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0287.947] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0214948.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0214948.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaefa)) returned 1 [0287.948] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0287.948] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0287.948] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0214948.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0214948.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaefa)) returned 1 [0287.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0287.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0287.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0287.951] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d6c, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0215070.WMF", cAlternateFileName="")) returned 1 [0287.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0287.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211f20 [0287.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0287.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211f20 | out: hHeap=0x1f0000) returned 1 [0287.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0287.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0287.952] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215070.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215070.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0287.953] GetFileType (hFile=0x198) returned 0x1 [0287.953] CloseHandle (hObject=0x198) returned 1 [0287.953] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0287.954] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215070.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215070.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d6c)) returned 1 [0287.954] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0287.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0287.954] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215070.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215070.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d6c)) returned 1 [0287.954] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0287.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0287.954] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0287.954] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f50, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0215076.WMF", cAlternateFileName="")) returned 1 [0287.955] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0287.955] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211a58 [0287.955] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0287.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211a58 | out: hHeap=0x1f0000) returned 1 [0287.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0287.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0287.956] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215076.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215076.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0287.956] GetFileType (hFile=0x198) returned 0x1 [0287.956] CloseHandle (hObject=0x198) returned 1 [0287.957] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0287.957] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215076.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215076.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f50)) returned 1 [0287.957] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0287.957] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0287.957] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215076.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215076.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f50)) returned 1 [0287.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0287.958] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0287.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0287.958] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x81ce, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0215210.WMF", cAlternateFileName="")) returned 1 [0287.958] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260630 [0287.958] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212250 [0287.958] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0287.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212250 | out: hHeap=0x1f0000) returned 1 [0287.959] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0287.959] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260630 | out: hHeap=0x1f0000) returned 1 [0287.959] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215210.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215210.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0287.960] GetFileType (hFile=0x198) returned 0x1 [0287.960] CloseHandle (hObject=0x198) returned 1 [0287.961] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0287.961] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215210.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215210.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x81ce)) returned 1 [0287.961] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0287.961] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0287.961] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215210.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215210.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x81ce)) returned 1 [0287.961] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0287.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0287.962] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0287.962] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x244a, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0215709.WMF", cAlternateFileName="")) returned 1 [0287.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0287.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0287.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0287.962] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0287.963] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0287.963] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0288.013] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215709.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215709.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0288.014] GetFileType (hFile=0x198) returned 0x1 [0288.014] CloseHandle (hObject=0x198) returned 1 [0288.014] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0288.014] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215709.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215709.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x244a)) returned 1 [0288.015] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0288.015] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0288.015] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215709.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215709.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x244a)) returned 1 [0288.015] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0288.015] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0288.015] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0288.015] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45a2, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0215710.WMF", cAlternateFileName="")) returned 1 [0288.015] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0288.015] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2129c0 [0288.015] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0288.015] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2129c0 | out: hHeap=0x1f0000) returned 1 [0288.015] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0288.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0288.016] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215710.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215710.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0288.016] GetFileType (hFile=0x198) returned 0x1 [0288.018] CloseHandle (hObject=0x198) returned 1 [0288.018] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0288.018] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215710.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215710.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45a2)) returned 1 [0288.018] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0288.019] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0288.019] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215710.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215710.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45a2)) returned 1 [0288.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0288.019] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0288.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0288.019] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15f2, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0215718.WMF", cAlternateFileName="")) returned 1 [0288.019] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0288.020] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211bf0 [0288.020] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0288.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211bf0 | out: hHeap=0x1f0000) returned 1 [0288.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0288.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0288.021] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215718.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215718.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0288.021] GetFileType (hFile=0x198) returned 0x1 [0288.021] CloseHandle (hObject=0x198) returned 1 [0288.022] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0288.022] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215718.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215718.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15f2)) returned 1 [0288.022] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0288.022] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0288.022] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215718.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215718.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15f2)) returned 1 [0288.023] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0288.023] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0288.023] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0288.023] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa783, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0216112.JPG", cAlternateFileName="")) returned 1 [0288.023] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0288.023] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2129c0 [0288.023] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0288.024] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2129c0 | out: hHeap=0x1f0000) returned 1 [0288.025] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0288.025] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0288.025] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216112.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216112.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0288.025] GetFileType (hFile=0x198) returned 0x1 [0288.026] CloseHandle (hObject=0x198) returned 1 [0288.026] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0288.027] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216112.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216112.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa783)) returned 1 [0288.027] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0288.028] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0288.028] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216112.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216112.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa783)) returned 1 [0288.028] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0288.028] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0288.028] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0288.028] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec9380a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5474, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0216153.JPG", cAlternateFileName="")) returned 1 [0288.028] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0288.028] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2120b8 [0288.028] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0288.028] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2120b8 | out: hHeap=0x1f0000) returned 1 [0288.028] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0288.028] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0288.029] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216153.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216153.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0288.368] GetFileType (hFile=0x198) returned 0x1 [0288.369] CloseHandle (hObject=0x198) returned 1 [0288.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0288.369] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216153.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216153.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec9380a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5474)) returned 1 [0288.369] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0288.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0288.369] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216153.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216153.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec9380a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5474)) returned 1 [0288.369] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0288.370] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0288.370] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0288.370] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa488, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0216540.WMF", cAlternateFileName="")) returned 1 [0288.370] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0288.370] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211e10 [0288.370] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0288.370] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e10 | out: hHeap=0x1f0000) returned 1 [0288.370] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0288.370] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0288.371] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216540.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216540.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0288.410] GetFileType (hFile=0x198) returned 0x1 [0288.410] CloseHandle (hObject=0x198) returned 1 [0288.411] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0288.411] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216540.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216540.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa488)) returned 1 [0288.411] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0288.411] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0288.411] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216540.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216540.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa488)) returned 1 [0288.411] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0288.411] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0288.411] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0288.412] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec9380a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x60dc, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0216570.WMF", cAlternateFileName="")) returned 1 [0288.412] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0288.412] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212938 [0288.412] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0288.412] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212938 | out: hHeap=0x1f0000) returned 1 [0288.412] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0288.412] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0288.413] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216570.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216570.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0288.790] GetFileType (hFile=0x21c) returned 0x1 [0288.790] CloseHandle (hObject=0x21c) returned 1 [0288.790] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0288.790] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216570.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216570.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec9380a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x60dc)) returned 1 [0288.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0288.791] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0288.791] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216570.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216570.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec9380a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x60dc)) returned 1 [0288.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0288.791] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0288.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0288.791] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec9380a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f46, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0216600.WMF", cAlternateFileName="")) returned 1 [0288.791] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0288.791] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212938 [0288.792] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0288.792] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212938 | out: hHeap=0x1f0000) returned 1 [0288.792] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0288.792] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0288.792] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216600.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216600.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0288.793] GetFileType (hFile=0x21c) returned 0x1 [0288.793] CloseHandle (hObject=0x21c) returned 1 [0288.793] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0288.794] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216600.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216600.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec9380a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f46)) returned 1 [0288.794] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0288.794] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0288.794] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216600.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216600.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec9380a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f46)) returned 1 [0288.794] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0288.794] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0288.794] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0288.794] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x24e2, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0216612.WMF", cAlternateFileName="")) returned 1 [0288.795] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0288.795] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211b68 [0288.795] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0288.795] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b68 | out: hHeap=0x1f0000) returned 1 [0288.795] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0288.795] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0288.796] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216612.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216612.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0288.796] GetFileType (hFile=0x21c) returned 0x1 [0288.796] CloseHandle (hObject=0x21c) returned 1 [0288.796] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0288.797] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216612.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216612.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x24e2)) returned 1 [0288.797] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0288.797] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0288.797] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216612.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216612.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x24e2)) returned 1 [0288.797] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0288.797] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0288.797] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0288.797] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9b3a, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0216874.WMF", cAlternateFileName="")) returned 1 [0288.797] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0288.797] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2123e8 [0288.797] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0288.797] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2123e8 | out: hHeap=0x1f0000) returned 1 [0288.797] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0288.797] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0288.798] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216874.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216874.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0288.798] GetFileType (hFile=0x21c) returned 0x1 [0288.798] CloseHandle (hObject=0x21c) returned 1 [0288.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0288.799] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216874.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216874.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9b3a)) returned 1 [0288.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0288.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0288.799] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216874.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216874.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9b3a)) returned 1 [0288.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0288.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0288.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0288.799] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1484, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0217262.WMF", cAlternateFileName="")) returned 1 [0288.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0288.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211e10 [0288.800] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0288.800] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e10 | out: hHeap=0x1f0000) returned 1 [0288.800] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0288.800] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0288.800] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0217262.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0217262.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0288.800] GetFileType (hFile=0x21c) returned 0x1 [0288.801] CloseHandle (hObject=0x21c) returned 1 [0288.801] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0288.801] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0217262.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0217262.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1484)) returned 1 [0288.802] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0288.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0288.802] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0217262.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0217262.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1484)) returned 1 [0288.802] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0288.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0288.802] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0288.802] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd9a, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0217302.WMF", cAlternateFileName="")) returned 1 [0288.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0288.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2123e8 [0288.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0288.802] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2123e8 | out: hHeap=0x1f0000) returned 1 [0288.802] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0288.802] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0288.803] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0217302.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0217302.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0288.803] GetFileType (hFile=0x21c) returned 0x1 [0288.804] CloseHandle (hObject=0x21c) returned 1 [0288.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0288.804] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0217302.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0217302.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd9a)) returned 1 [0288.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0288.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0288.804] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0217302.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0217302.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd9a)) returned 1 [0288.805] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0288.805] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0288.805] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0288.805] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ca8, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0217872.WMF", cAlternateFileName="")) returned 1 [0288.805] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0288.806] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d00 [0288.806] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0288.806] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d00 | out: hHeap=0x1f0000) returned 1 [0288.806] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0288.806] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0288.807] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0217872.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0217872.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0288.807] GetFileType (hFile=0x21c) returned 0x1 [0288.807] CloseHandle (hObject=0x21c) returned 1 [0288.808] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0288.808] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0217872.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0217872.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ca8)) returned 1 [0288.808] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0288.808] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0288.809] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0217872.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0217872.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ca8)) returned 1 [0288.809] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0288.809] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0288.809] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0288.809] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8ad6, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0227419.JPG", cAlternateFileName="")) returned 1 [0288.809] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0288.809] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212938 [0288.809] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0288.810] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212938 | out: hHeap=0x1f0000) returned 1 [0288.810] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0288.810] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0288.810] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0227419.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0227419.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0288.811] GetFileType (hFile=0x21c) returned 0x1 [0288.811] CloseHandle (hObject=0x21c) returned 1 [0288.811] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0288.812] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0227419.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0227419.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8ad6)) returned 1 [0288.812] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0288.812] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0288.812] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0227419.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0227419.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8ad6)) returned 1 [0288.812] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0288.812] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0288.812] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0288.812] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe2e9, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0227558.JPG", cAlternateFileName="")) returned 1 [0288.812] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0288.813] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2128b0 [0288.813] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0288.813] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2128b0 | out: hHeap=0x1f0000) returned 1 [0288.813] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0288.813] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0288.814] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0227558.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0227558.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0288.814] GetFileType (hFile=0x21c) returned 0x1 [0288.814] CloseHandle (hObject=0x21c) returned 1 [0288.815] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0288.815] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0227558.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0227558.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe2e9)) returned 1 [0288.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0288.815] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0288.815] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0227558.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0227558.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe2e9)) returned 1 [0288.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0288.816] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0288.816] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0288.816] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x65a6, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0228823.WMF", cAlternateFileName="")) returned 1 [0288.816] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0288.816] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212140 [0288.816] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0288.816] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212140 | out: hHeap=0x1f0000) returned 1 [0288.816] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0288.817] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0288.817] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0228823.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0228823.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0288.817] GetFileType (hFile=0x21c) returned 0x1 [0288.818] CloseHandle (hObject=0x21c) returned 1 [0288.818] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0288.819] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0228823.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0228823.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x65a6)) returned 1 [0288.819] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0288.819] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0288.819] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0228823.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0228823.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x65a6)) returned 1 [0288.819] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0288.819] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0288.819] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0288.819] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec9380a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x918c, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0228959.WMF", cAlternateFileName="")) returned 1 [0288.820] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0288.820] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0288.820] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0288.820] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0288.820] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0288.820] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0288.821] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0228959.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0228959.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0288.822] GetFileType (hFile=0x21c) returned 0x1 [0288.822] CloseHandle (hObject=0x21c) returned 1 [0288.823] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0288.823] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0228959.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0228959.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec9380a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x918c)) returned 1 [0288.823] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0288.823] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0288.823] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0228959.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0228959.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec9380a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x918c)) returned 1 [0288.823] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0288.823] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0288.824] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0288.824] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1daa, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0230553.WMF", cAlternateFileName="")) returned 1 [0288.824] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0288.824] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211fa8 [0288.824] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0288.824] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211fa8 | out: hHeap=0x1f0000) returned 1 [0288.824] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0288.824] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0288.825] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0230553.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0230553.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0288.825] GetFileType (hFile=0x21c) returned 0x1 [0288.826] CloseHandle (hObject=0x21c) returned 1 [0288.826] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0288.827] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0230553.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0230553.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1daa)) returned 1 [0288.827] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0288.827] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0288.827] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0230553.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0230553.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1daa)) returned 1 [0288.827] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0288.827] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0288.827] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0288.827] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec9380a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1066, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0230558.WMF", cAlternateFileName="")) returned 1 [0288.828] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0288.828] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212140 [0288.828] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0288.828] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212140 | out: hHeap=0x1f0000) returned 1 [0288.828] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0288.828] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0288.829] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0230558.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0230558.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0288.829] GetFileType (hFile=0x21c) returned 0x1 [0288.829] CloseHandle (hObject=0x21c) returned 1 [0288.830] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0288.830] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0230558.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0230558.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec9380a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1066)) returned 1 [0288.830] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0288.830] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0288.830] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0230558.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0230558.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec9380a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1066)) returned 1 [0288.830] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0288.830] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0288.831] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0288.831] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x332a, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0232171.WMF", cAlternateFileName="")) returned 1 [0288.831] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0288.831] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211948 [0288.831] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0288.831] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211948 | out: hHeap=0x1f0000) returned 1 [0288.831] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0288.831] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0288.832] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232171.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232171.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0288.832] GetFileType (hFile=0x21c) returned 0x1 [0288.832] CloseHandle (hObject=0x21c) returned 1 [0288.833] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0288.833] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232171.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232171.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x332a)) returned 1 [0288.833] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0288.833] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0288.833] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232171.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232171.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x332a)) returned 1 [0288.833] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0288.833] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0288.834] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0288.834] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec9380a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6bc2, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0232393.WMF", cAlternateFileName="")) returned 1 [0288.834] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0288.834] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211bf0 [0288.834] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0288.834] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211bf0 | out: hHeap=0x1f0000) returned 1 [0288.834] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0288.834] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0288.835] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232393.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232393.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0288.835] GetFileType (hFile=0x21c) returned 0x1 [0288.835] CloseHandle (hObject=0x21c) returned 1 [0288.836] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0288.836] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232393.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232393.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec9380a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6bc2)) returned 1 [0288.836] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0288.836] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0288.836] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232393.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232393.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec9380a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6bc2)) returned 1 [0288.836] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0288.986] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0288.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0288.986] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa086, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0232395.WMF", cAlternateFileName="")) returned 1 [0288.986] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260630 [0288.986] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2128b0 [0288.986] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0288.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2128b0 | out: hHeap=0x1f0000) returned 1 [0288.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0288.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260630 | out: hHeap=0x1f0000) returned 1 [0289.101] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232395.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232395.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.101] GetFileType (hFile=0x198) returned 0x1 [0289.102] CloseHandle (hObject=0x198) returned 1 [0289.102] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0289.102] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232395.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232395.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa086)) returned 1 [0289.103] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0289.103] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0289.103] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232395.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232395.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa086)) returned 1 [0289.103] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0289.103] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0289.103] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0289.103] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec9380a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x380a, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0232795.WMF", cAlternateFileName="")) returned 1 [0289.103] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0289.103] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212718 [0289.104] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0289.104] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212718 | out: hHeap=0x1f0000) returned 1 [0289.104] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0289.104] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0289.104] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232795.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232795.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.105] GetFileType (hFile=0x198) returned 0x1 [0289.105] CloseHandle (hObject=0x198) returned 1 [0289.106] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0289.106] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232795.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232795.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec9380a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x380a)) returned 1 [0289.106] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0289.106] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0289.106] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232795.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232795.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec9380a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x380a)) returned 1 [0289.106] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0289.106] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0289.106] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0289.107] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x899c, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0232797.WMF", cAlternateFileName="")) returned 1 [0289.107] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0289.107] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2129c0 [0289.107] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0289.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2129c0 | out: hHeap=0x1f0000) returned 1 [0289.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0289.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0289.108] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232797.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232797.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.108] GetFileType (hFile=0x198) returned 0x1 [0289.108] CloseHandle (hObject=0x198) returned 1 [0289.109] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0289.109] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232797.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232797.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x899c)) returned 1 [0289.109] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0289.109] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0289.109] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232797.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232797.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x899c)) returned 1 [0289.109] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0289.109] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0289.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0289.110] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4de6, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0232803.WMF", cAlternateFileName="")) returned 1 [0289.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0289.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211e98 [0289.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0289.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e98 | out: hHeap=0x1f0000) returned 1 [0289.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0289.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0289.111] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232803.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232803.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.111] GetFileType (hFile=0x198) returned 0x1 [0289.112] CloseHandle (hObject=0x198) returned 1 [0289.112] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0289.112] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232803.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232803.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4de6)) returned 1 [0289.112] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0289.112] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0289.113] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232803.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232803.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4de6)) returned 1 [0289.113] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0289.113] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0289.113] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0289.113] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x26e8, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0233512.WMF", cAlternateFileName="")) returned 1 [0289.113] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260630 [0289.113] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212030 [0289.113] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0289.113] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212030 | out: hHeap=0x1f0000) returned 1 [0289.113] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0289.114] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260630 | out: hHeap=0x1f0000) returned 1 [0289.114] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0233512.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0233512.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.114] GetFileType (hFile=0x198) returned 0x1 [0289.115] CloseHandle (hObject=0x198) returned 1 [0289.115] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0289.115] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0233512.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0233512.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x26e8)) returned 1 [0289.116] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0289.116] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0289.116] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0233512.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0233512.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x26e8)) returned 1 [0289.116] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0289.116] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0289.116] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0289.116] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x312c, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0233665.WMF", cAlternateFileName="")) returned 1 [0289.116] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0289.117] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211e98 [0289.117] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0289.117] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e98 | out: hHeap=0x1f0000) returned 1 [0289.117] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0289.117] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0289.118] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0233665.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0233665.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.118] GetFileType (hFile=0x198) returned 0x1 [0289.119] CloseHandle (hObject=0x198) returned 1 [0289.119] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0289.119] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0233665.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0233665.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x312c)) returned 1 [0289.120] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0289.120] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0289.120] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0233665.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0233665.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x312c)) returned 1 [0289.120] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0289.120] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0289.120] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0289.120] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x975e, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0233992.WMF", cAlternateFileName="")) returned 1 [0289.121] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0289.121] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2119d0 [0289.121] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0289.121] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2119d0 | out: hHeap=0x1f0000) returned 1 [0289.121] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0289.121] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0289.122] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0233992.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0233992.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.122] GetFileType (hFile=0x198) returned 0x1 [0289.122] CloseHandle (hObject=0x198) returned 1 [0289.123] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0289.123] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0233992.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0233992.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x975e)) returned 1 [0289.123] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0289.123] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0289.123] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0233992.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0233992.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x975e)) returned 1 [0289.124] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0289.124] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0289.124] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0289.124] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcec6, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0234000.WMF", cAlternateFileName="")) returned 1 [0289.124] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0289.124] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212608 [0289.124] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0289.124] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212608 | out: hHeap=0x1f0000) returned 1 [0289.124] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0289.124] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0289.125] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0234000.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0234000.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.125] GetFileType (hFile=0x198) returned 0x1 [0289.126] CloseHandle (hObject=0x198) returned 1 [0289.126] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0289.126] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0234000.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0234000.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcec6)) returned 1 [0289.126] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0289.126] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0289.127] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0234000.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0234000.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcec6)) returned 1 [0289.127] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0289.127] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0289.127] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0289.127] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b40, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0234001.WMF", cAlternateFileName="")) returned 1 [0289.127] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0289.127] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212250 [0289.127] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0289.127] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212250 | out: hHeap=0x1f0000) returned 1 [0289.127] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0289.128] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0289.128] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0234001.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0234001.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.128] GetFileType (hFile=0x198) returned 0x1 [0289.129] CloseHandle (hObject=0x198) returned 1 [0289.129] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0289.129] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0234001.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0234001.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b40)) returned 1 [0289.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0289.129] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0289.130] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0234001.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0234001.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b40)) returned 1 [0289.130] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0289.130] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0289.130] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0289.130] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x80d4, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0234376.WMF", cAlternateFileName="")) returned 1 [0289.130] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0289.130] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2123e8 [0289.130] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0289.130] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2123e8 | out: hHeap=0x1f0000) returned 1 [0289.131] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0289.131] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0289.131] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0234376.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0234376.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.131] GetFileType (hFile=0x198) returned 0x1 [0289.132] CloseHandle (hObject=0x198) returned 1 [0289.132] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0289.132] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0234376.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0234376.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x80d4)) returned 1 [0289.133] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0289.133] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0289.133] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0234376.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0234376.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x80d4)) returned 1 [0289.434] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0289.434] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0289.434] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0289.434] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcba0, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0237225.WMF", cAlternateFileName="")) returned 1 [0289.434] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605b8 [0289.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212470 [0289.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0289.442] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212470 | out: hHeap=0x1f0000) returned 1 [0289.442] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0289.442] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0289.443] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237225.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0237225.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.443] GetFileType (hFile=0x198) returned 0x1 [0289.444] CloseHandle (hObject=0x198) returned 1 [0289.444] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0289.444] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237225.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0237225.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcba0)) returned 1 [0289.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0289.445] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0289.445] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237225.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0237225.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcba0)) returned 1 [0289.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0289.445] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0289.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0289.445] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5700, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0237228.WMF", cAlternateFileName="")) returned 1 [0289.445] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0289.445] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212938 [0289.445] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0289.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212938 | out: hHeap=0x1f0000) returned 1 [0289.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0289.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0289.446] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237228.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0237228.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.447] GetFileType (hFile=0x198) returned 0x1 [0289.447] CloseHandle (hObject=0x198) returned 1 [0289.447] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0289.448] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237228.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0237228.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5700)) returned 1 [0289.448] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0289.448] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0289.448] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237228.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0237228.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5700)) returned 1 [0289.448] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0289.448] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0289.448] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0289.448] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x60c2, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0237336.WMF", cAlternateFileName="")) returned 1 [0289.448] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0289.449] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212360 [0289.449] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0289.449] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212360 | out: hHeap=0x1f0000) returned 1 [0289.449] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0289.449] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0289.449] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237336.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0237336.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.450] GetFileType (hFile=0x198) returned 0x1 [0289.450] CloseHandle (hObject=0x198) returned 1 [0289.451] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0289.451] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237336.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0237336.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x60c2)) returned 1 [0289.451] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0289.451] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0289.451] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237336.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0237336.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x60c2)) returned 1 [0289.451] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0289.451] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0289.451] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0289.451] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x51be, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0237759.WMF", cAlternateFileName="")) returned 1 [0289.452] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0289.452] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0289.452] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0289.452] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0289.452] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0289.452] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0289.453] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237759.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0237759.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.453] GetFileType (hFile=0x198) returned 0x1 [0289.453] CloseHandle (hObject=0x198) returned 1 [0289.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0289.454] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237759.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0237759.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x51be)) returned 1 [0289.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0289.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0289.454] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237759.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0237759.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x51be)) returned 1 [0289.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0289.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0289.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0289.454] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x59a0, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0238333.WMF", cAlternateFileName="")) returned 1 [0289.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0289.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211948 [0289.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0289.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211948 | out: hHeap=0x1f0000) returned 1 [0289.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0289.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0289.456] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238333.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0238333.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.456] GetFileType (hFile=0x198) returned 0x1 [0289.456] CloseHandle (hObject=0x198) returned 1 [0289.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0289.457] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238333.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0238333.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x59a0)) returned 1 [0289.457] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0289.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0289.457] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238333.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0238333.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x59a0)) returned 1 [0289.457] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0289.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0289.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0289.458] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1334, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0238927.WMF", cAlternateFileName="")) returned 1 [0289.458] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0289.458] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0289.458] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0289.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0289.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0289.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0289.459] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238927.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0238927.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.459] GetFileType (hFile=0x198) returned 0x1 [0289.459] CloseHandle (hObject=0x198) returned 1 [0289.459] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0289.459] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238927.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0238927.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1334)) returned 1 [0289.460] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0289.460] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0289.460] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238927.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0238927.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1334)) returned 1 [0289.460] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0289.460] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0289.460] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0289.460] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d3c, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0238959.WMF", cAlternateFileName="")) returned 1 [0289.460] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0289.460] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212360 [0289.460] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0289.460] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212360 | out: hHeap=0x1f0000) returned 1 [0289.461] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0289.461] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0289.461] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238959.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0238959.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.462] GetFileType (hFile=0x198) returned 0x1 [0289.463] CloseHandle (hObject=0x198) returned 1 [0289.463] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0289.463] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238959.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0238959.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d3c)) returned 1 [0289.463] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0289.463] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0289.464] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238959.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0238959.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d3c)) returned 1 [0289.464] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0289.464] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0289.464] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0289.464] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13b8, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0238983.WMF", cAlternateFileName="")) returned 1 [0289.464] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605b8 [0289.464] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2124f8 [0289.464] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0289.464] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2124f8 | out: hHeap=0x1f0000) returned 1 [0289.464] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0289.464] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0289.465] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238983.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0238983.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.465] GetFileType (hFile=0x198) returned 0x1 [0289.465] CloseHandle (hObject=0x198) returned 1 [0289.466] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0289.466] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238983.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0238983.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13b8)) returned 1 [0289.466] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0289.466] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0289.466] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238983.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0238983.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13b8)) returned 1 [0289.466] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0289.466] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0289.466] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0289.466] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1284, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0239057.WMF", cAlternateFileName="")) returned 1 [0289.466] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0289.467] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2119d0 [0289.467] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0289.467] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2119d0 | out: hHeap=0x1f0000) returned 1 [0289.467] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0289.467] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0289.467] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239057.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239057.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.468] GetFileType (hFile=0x198) returned 0x1 [0289.468] CloseHandle (hObject=0x198) returned 1 [0289.468] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0289.468] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239057.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239057.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1284)) returned 1 [0289.468] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0289.468] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0289.468] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239057.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239057.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1284)) returned 1 [0289.469] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0289.469] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0289.469] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0289.469] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16fc, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0239063.WMF", cAlternateFileName="")) returned 1 [0289.469] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0289.469] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212608 [0289.469] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0289.469] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212608 | out: hHeap=0x1f0000) returned 1 [0289.469] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0289.469] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0289.469] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239063.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239063.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.470] GetFileType (hFile=0x198) returned 0x1 [0289.470] CloseHandle (hObject=0x198) returned 1 [0289.470] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0289.470] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239063.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239063.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16fc)) returned 1 [0289.470] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0289.471] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0289.471] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239063.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239063.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16fc)) returned 1 [0289.471] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0289.471] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0289.471] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0289.471] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1294, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0239079.WMF", cAlternateFileName="")) returned 1 [0289.471] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0289.471] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212828 [0289.471] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0289.471] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212828 | out: hHeap=0x1f0000) returned 1 [0289.471] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0289.471] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0289.472] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239079.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239079.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.472] GetFileType (hFile=0x198) returned 0x1 [0289.473] CloseHandle (hObject=0x198) returned 1 [0289.473] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0289.473] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239079.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239079.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1294)) returned 1 [0289.473] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0289.473] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0289.473] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239079.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239079.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1294)) returned 1 [0289.474] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0289.474] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0289.474] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0289.474] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1464, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0239191.WMF", cAlternateFileName="")) returned 1 [0289.474] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0289.474] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2119d0 [0289.474] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0289.474] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2119d0 | out: hHeap=0x1f0000) returned 1 [0289.474] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0289.474] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0289.475] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239191.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239191.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.476] GetFileType (hFile=0x198) returned 0x1 [0289.476] CloseHandle (hObject=0x198) returned 1 [0289.735] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0289.735] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239191.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239191.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1464)) returned 1 [0289.735] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0289.735] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0289.735] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239191.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239191.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1464)) returned 1 [0289.735] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0289.735] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0289.736] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0289.736] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8424, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0239611.WMF", cAlternateFileName="")) returned 1 [0289.736] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0289.736] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212580 [0289.736] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0289.736] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212580 | out: hHeap=0x1f0000) returned 1 [0289.736] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0289.736] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0289.932] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239611.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239611.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.932] GetFileType (hFile=0x198) returned 0x1 [0289.933] CloseHandle (hObject=0x198) returned 1 [0289.933] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0289.933] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239611.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239611.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8424)) returned 1 [0289.934] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0289.934] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0289.934] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239611.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239611.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8424)) returned 1 [0289.934] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0289.934] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0289.934] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0289.934] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1314, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0239935.WMF", cAlternateFileName="")) returned 1 [0289.935] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605b8 [0289.935] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212828 [0289.935] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0289.935] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212828 | out: hHeap=0x1f0000) returned 1 [0289.935] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0289.935] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0289.936] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239935.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239935.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.936] GetFileType (hFile=0x198) returned 0x1 [0289.937] CloseHandle (hObject=0x198) returned 1 [0289.937] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0289.937] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239935.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239935.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1314)) returned 1 [0289.937] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0289.937] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0289.938] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239935.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239935.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1314)) returned 1 [0289.938] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0289.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0289.938] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0289.938] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1418, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0239941.WMF", cAlternateFileName="")) returned 1 [0289.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0289.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212030 [0289.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0289.939] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212030 | out: hHeap=0x1f0000) returned 1 [0289.939] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0289.939] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0289.939] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239941.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239941.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.940] GetFileType (hFile=0x198) returned 0x1 [0289.940] CloseHandle (hObject=0x198) returned 1 [0289.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0289.941] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239941.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239941.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1418)) returned 1 [0289.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0289.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0289.941] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239941.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239941.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1418)) returned 1 [0289.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0289.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0289.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0289.942] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1998, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0239943.WMF", cAlternateFileName="")) returned 1 [0289.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605b8 [0289.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2124f8 [0289.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0289.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2124f8 | out: hHeap=0x1f0000) returned 1 [0289.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0289.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0289.943] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239943.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239943.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.943] GetFileType (hFile=0x198) returned 0x1 [0289.944] CloseHandle (hObject=0x198) returned 1 [0289.944] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0289.944] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239943.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239943.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1998)) returned 1 [0289.944] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0289.944] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0289.944] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239943.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239943.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1998)) returned 1 [0289.945] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0289.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0289.945] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0289.945] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c40, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0239951.WMF", cAlternateFileName="")) returned 1 [0289.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605b8 [0289.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2128b0 [0289.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0289.945] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2128b0 | out: hHeap=0x1f0000) returned 1 [0289.946] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0289.946] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0289.947] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239951.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239951.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.947] GetFileType (hFile=0x198) returned 0x1 [0289.947] CloseHandle (hObject=0x198) returned 1 [0289.948] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0289.948] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239951.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239951.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c40)) returned 1 [0289.948] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0289.948] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0289.948] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239951.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239951.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c40)) returned 1 [0289.948] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0289.948] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0289.948] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0289.948] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bc8, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0239953.WMF", cAlternateFileName="")) returned 1 [0289.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0289.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212140 [0289.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0289.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212140 | out: hHeap=0x1f0000) returned 1 [0289.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0289.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0289.950] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239953.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239953.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.950] GetFileType (hFile=0x198) returned 0x1 [0289.950] CloseHandle (hObject=0x198) returned 1 [0289.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0289.951] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239953.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239953.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bc8)) returned 1 [0289.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0289.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0289.951] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239953.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239953.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bc8)) returned 1 [0289.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0289.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0289.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0289.952] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1348, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0239955.WMF", cAlternateFileName="")) returned 1 [0289.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0289.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211b68 [0289.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0289.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b68 | out: hHeap=0x1f0000) returned 1 [0289.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0289.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0289.953] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239955.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239955.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.953] GetFileType (hFile=0x198) returned 0x1 [0289.953] CloseHandle (hObject=0x198) returned 1 [0289.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0289.954] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239955.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239955.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1348)) returned 1 [0289.954] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0289.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0289.954] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239955.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239955.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1348)) returned 1 [0289.954] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0289.955] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0289.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0289.955] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1720, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0239965.WMF", cAlternateFileName="")) returned 1 [0289.955] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0289.955] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211bf0 [0289.955] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0289.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211bf0 | out: hHeap=0x1f0000) returned 1 [0289.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0289.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0289.956] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239965.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239965.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.956] GetFileType (hFile=0x198) returned 0x1 [0289.957] CloseHandle (hObject=0x198) returned 1 [0289.957] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0289.957] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239965.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239965.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1720)) returned 1 [0289.957] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0289.957] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0289.958] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239965.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239965.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1720)) returned 1 [0289.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0289.958] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0289.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0289.958] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x154c, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0239967.WMF", cAlternateFileName="")) returned 1 [0289.958] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0289.958] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211e10 [0289.958] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0289.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e10 | out: hHeap=0x1f0000) returned 1 [0289.959] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0289.959] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0289.959] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239967.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239967.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.959] GetFileType (hFile=0x198) returned 0x1 [0289.960] CloseHandle (hObject=0x198) returned 1 [0289.960] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0289.960] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239967.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239967.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x154c)) returned 1 [0289.960] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0289.960] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0289.961] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239967.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239967.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x154c)) returned 1 [0289.961] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0289.961] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0289.961] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0289.961] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13e8, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0239973.WMF", cAlternateFileName="")) returned 1 [0289.961] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605b8 [0289.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212580 [0289.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0289.962] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212580 | out: hHeap=0x1f0000) returned 1 [0289.962] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0289.962] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0289.963] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239973.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239973.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.963] GetFileType (hFile=0x198) returned 0x1 [0289.964] CloseHandle (hObject=0x198) returned 1 [0289.964] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0289.964] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239973.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239973.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13e8)) returned 1 [0289.964] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0289.964] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0289.964] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239973.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239973.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13e8)) returned 1 [0289.965] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0289.965] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0289.965] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0289.965] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xed05f07, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xed05f07, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xed05f07, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xda0, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0239975.WMF", cAlternateFileName="")) returned 1 [0289.965] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0289.965] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2119d0 [0289.965] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0289.965] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2119d0 | out: hHeap=0x1f0000) returned 1 [0289.965] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0289.965] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0289.966] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239975.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239975.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.966] GetFileType (hFile=0x198) returned 0x1 [0289.967] CloseHandle (hObject=0x198) returned 1 [0289.967] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0289.967] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239975.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239975.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xed05f07, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xed05f07, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xed05f07, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xda0)) returned 1 [0289.967] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0289.967] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0289.967] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239975.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239975.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xed05f07, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xed05f07, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xed05f07, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xda0)) returned 1 [0289.968] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0289.968] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0289.968] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0289.968] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xed05f07, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xed05f07, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf2fbd2e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcd8, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0239997.WMF", cAlternateFileName="")) returned 1 [0289.968] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0289.968] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0289.968] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0289.968] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0289.968] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0289.968] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0289.969] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239997.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239997.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.969] GetFileType (hFile=0x198) returned 0x1 [0289.969] CloseHandle (hObject=0x198) returned 1 [0289.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0289.970] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239997.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239997.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xed05f07, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xed05f07, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf2fbd2e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcd8)) returned 1 [0289.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0289.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0289.970] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239997.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239997.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xed05f07, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xed05f07, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf2fbd2e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcd8)) returned 1 [0289.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0289.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0289.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0289.970] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xed05f07, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1df8, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0240157.WMF", cAlternateFileName="")) returned 1 [0289.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605b8 [0289.971] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2122d8 [0289.971] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0289.971] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2122d8 | out: hHeap=0x1f0000) returned 1 [0289.971] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0289.971] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0289.971] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240157.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0240157.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.972] GetFileType (hFile=0x198) returned 0x1 [0289.972] CloseHandle (hObject=0x198) returned 1 [0289.972] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0289.972] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240157.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0240157.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xed05f07, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1df8)) returned 1 [0289.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0289.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0289.973] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240157.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0240157.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xed05f07, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1df8)) returned 1 [0289.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0289.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0289.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0289.973] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xed05f07, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa410, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0240175.WMF", cAlternateFileName="")) returned 1 [0289.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0289.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2129c0 [0289.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0289.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2129c0 | out: hHeap=0x1f0000) returned 1 [0289.974] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0289.974] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0289.974] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240175.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0240175.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.974] GetFileType (hFile=0x198) returned 0x1 [0289.975] CloseHandle (hObject=0x198) returned 1 [0289.975] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0289.975] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240175.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0240175.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xed05f07, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa410)) returned 1 [0289.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0289.975] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0289.975] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240175.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0240175.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xed05f07, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa410)) returned 1 [0289.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0289.975] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0289.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0289.976] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xed05f07, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdc4, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0240189.WMF", cAlternateFileName="")) returned 1 [0289.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0289.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211b68 [0289.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0289.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b68 | out: hHeap=0x1f0000) returned 1 [0289.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0289.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0289.976] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240189.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0240189.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.976] GetFileType (hFile=0x198) returned 0x1 [0289.977] CloseHandle (hObject=0x198) returned 1 [0290.260] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0290.260] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240189.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0240189.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xed05f07, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdc4)) returned 1 [0290.260] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0290.261] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0290.261] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240189.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0240189.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xed05f07, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdc4)) returned 1 [0290.261] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0290.261] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0290.261] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0290.261] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1476, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0240291.WMF", cAlternateFileName="")) returned 1 [0290.566] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0290.566] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211ae0 [0290.566] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0290.566] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211ae0 | out: hHeap=0x1f0000) returned 1 [0290.566] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0290.566] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0290.570] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240291.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0240291.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0290.571] GetFileType (hFile=0x198) returned 0x1 [0290.571] CloseHandle (hObject=0x198) returned 1 [0290.572] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0290.572] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240291.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0240291.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1476)) returned 1 [0290.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0290.572] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0290.572] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240291.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0240291.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1476)) returned 1 [0290.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0290.572] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0290.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0290.572] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xed05f07, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x92e, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0241019.WMF", cAlternateFileName="")) returned 1 [0290.572] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0290.572] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212828 [0290.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0290.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212828 | out: hHeap=0x1f0000) returned 1 [0290.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0290.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0290.573] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241019.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241019.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0290.573] GetFileType (hFile=0x198) returned 0x1 [0290.574] CloseHandle (hObject=0x198) returned 1 [0290.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0290.574] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241019.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241019.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xed05f07, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x92e)) returned 1 [0290.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0290.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0290.575] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241019.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241019.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xed05f07, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x92e)) returned 1 [0290.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0290.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0290.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0290.575] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa4e, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0241037.WMF", cAlternateFileName="")) returned 1 [0290.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0290.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211bf0 [0290.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0290.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211bf0 | out: hHeap=0x1f0000) returned 1 [0290.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0290.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0290.576] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241037.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241037.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0290.576] GetFileType (hFile=0x198) returned 0x1 [0290.576] CloseHandle (hObject=0x198) returned 1 [0290.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0290.577] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241037.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241037.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa4e)) returned 1 [0290.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0290.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0290.577] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241037.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241037.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa4e)) returned 1 [0290.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0290.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0290.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0290.577] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x926, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0241041.WMF", cAlternateFileName="")) returned 1 [0290.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0290.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0290.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0290.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0290.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0290.578] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0290.578] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241041.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241041.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0290.578] GetFileType (hFile=0x198) returned 0x1 [0290.578] CloseHandle (hObject=0x198) returned 1 [0290.578] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0290.579] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241041.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241041.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x926)) returned 1 [0290.579] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0290.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0290.579] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241041.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241041.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x926)) returned 1 [0290.579] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0290.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0290.579] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0290.579] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xab2, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0241043.WMF", cAlternateFileName="")) returned 1 [0290.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0290.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211a58 [0290.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0290.579] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211a58 | out: hHeap=0x1f0000) returned 1 [0290.579] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0290.579] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0290.580] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241043.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241043.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0290.645] GetFileType (hFile=0x1b0) returned 0x1 [0290.646] CloseHandle (hObject=0x1b0) returned 1 [0290.646] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0290.646] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241043.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241043.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xab2)) returned 1 [0290.646] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0290.646] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0290.646] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241043.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241043.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xab2)) returned 1 [0290.647] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0290.647] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0290.647] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0290.647] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34834b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf34834b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x82a, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0241077.WMF", cAlternateFileName="")) returned 1 [0290.647] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0290.647] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212030 [0290.647] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0290.647] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212030 | out: hHeap=0x1f0000) returned 1 [0290.647] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0290.647] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0290.648] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241077.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241077.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0290.652] GetFileType (hFile=0x1b0) returned 0x1 [0290.653] CloseHandle (hObject=0x1b0) returned 1 [0290.653] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0290.653] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241077.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241077.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34834b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf34834b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x82a)) returned 1 [0290.653] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0290.654] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0290.654] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241077.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241077.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34834b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf34834b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x82a)) returned 1 [0290.654] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0290.654] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0290.654] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0290.654] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34834b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf34834b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcbe, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0241773.WMF", cAlternateFileName="")) returned 1 [0290.654] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0290.654] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211b68 [0290.654] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0290.654] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b68 | out: hHeap=0x1f0000) returned 1 [0290.654] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0290.654] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0290.655] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241773.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241773.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0290.658] GetFileType (hFile=0x1b0) returned 0x1 [0290.659] CloseHandle (hObject=0x1b0) returned 1 [0290.671] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0290.671] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241773.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241773.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34834b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf34834b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcbe)) returned 1 [0290.671] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0290.672] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0290.672] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241773.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241773.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34834b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf34834b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcbe)) returned 1 [0290.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0290.672] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0290.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0290.672] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34834b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf34834b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7b2, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0241781.WMF", cAlternateFileName="")) returned 1 [0290.672] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0290.672] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d00 [0290.675] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0290.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d00 | out: hHeap=0x1f0000) returned 1 [0290.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0290.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0290.675] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241781.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241781.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0290.676] GetFileType (hFile=0x1b0) returned 0x1 [0290.676] CloseHandle (hObject=0x1b0) returned 1 [0290.676] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0290.676] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241781.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241781.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34834b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf34834b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7b2)) returned 1 [0290.676] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0290.676] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0290.677] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241781.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241781.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34834b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf34834b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7b2)) returned 1 [0290.677] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0290.677] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0290.677] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0290.677] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34834b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf34834b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7938, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0250504.WMF", cAlternateFileName="")) returned 1 [0290.677] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0290.677] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212828 [0290.677] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0290.677] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212828 | out: hHeap=0x1f0000) returned 1 [0290.677] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0290.677] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0290.677] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0250504.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0250504.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0290.678] GetFileType (hFile=0x1b0) returned 0x1 [0290.678] CloseHandle (hObject=0x1b0) returned 1 [0290.678] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0290.678] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0250504.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0250504.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34834b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf34834b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7938)) returned 1 [0290.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0290.678] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0290.678] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0250504.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0250504.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34834b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf34834b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7938)) returned 1 [0290.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0290.678] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0290.679] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0290.679] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf2fbd2e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf2fbd2e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf34834b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6958, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0250997.WMF", cAlternateFileName="")) returned 1 [0290.679] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0290.679] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0290.679] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0290.679] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0290.679] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0290.679] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0290.679] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0250997.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0250997.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0290.679] GetFileType (hFile=0x1b0) returned 0x1 [0290.679] CloseHandle (hObject=0x1b0) returned 1 [0290.680] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0290.680] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0250997.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0250997.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf2fbd2e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf2fbd2e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf34834b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6958)) returned 1 [0290.680] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0290.680] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0290.680] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0250997.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0250997.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf2fbd2e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf2fbd2e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf34834b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6958)) returned 1 [0290.680] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0290.680] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0290.680] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0290.680] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xed05f07, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xed05f07, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf34834b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1100c, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0251007.WMF", cAlternateFileName="")) returned 1 [0290.680] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0290.680] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211948 [0290.680] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0290.680] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211948 | out: hHeap=0x1f0000) returned 1 [0290.680] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0290.681] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0290.681] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0251007.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0251007.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0290.681] GetFileType (hFile=0x1b0) returned 0x1 [0290.681] CloseHandle (hObject=0x1b0) returned 1 [0290.681] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0290.681] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0251007.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0251007.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xed05f07, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xed05f07, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf34834b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1100c)) returned 1 [0290.681] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0290.682] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0290.682] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0251007.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0251007.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xed05f07, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xed05f07, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf34834b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1100c)) returned 1 [0290.682] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0290.682] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0290.682] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0290.682] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34834b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf34834b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf34834b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xae2, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0252629.WMF", cAlternateFileName="")) returned 1 [0290.682] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0290.682] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2129c0 [0290.682] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0290.682] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2129c0 | out: hHeap=0x1f0000) returned 1 [0290.682] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0290.682] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0290.683] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0252629.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0252629.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0290.683] GetFileType (hFile=0x1b0) returned 0x1 [0290.683] CloseHandle (hObject=0x1b0) returned 1 [0290.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0290.683] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0252629.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0252629.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34834b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf34834b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf34834b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xae2)) returned 1 [0290.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0290.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0290.684] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0252629.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0252629.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34834b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf34834b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf34834b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xae2)) returned 1 [0290.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0290.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0290.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0290.684] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf2fbd2e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf2fbd2e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf34834b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf56, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0252669.WMF", cAlternateFileName="")) returned 1 [0290.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0290.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2122d8 [0290.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0290.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2122d8 | out: hHeap=0x1f0000) returned 1 [0290.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0290.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0290.685] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0252669.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0252669.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0290.685] GetFileType (hFile=0x1b0) returned 0x1 [0290.685] CloseHandle (hObject=0x1b0) returned 1 [0290.685] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0290.685] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0252669.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0252669.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf2fbd2e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf2fbd2e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf34834b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf56)) returned 1 [0290.685] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0290.686] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0290.686] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0252669.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0252669.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf2fbd2e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf2fbd2e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf34834b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf56)) returned 1 [0290.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0290.686] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0290.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0290.686] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xed05f07, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xed05f07, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf34834b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf6a, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0278702.WMF", cAlternateFileName="")) returned 1 [0290.686] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0290.686] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2119d0 [0290.686] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0291.078] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2119d0 | out: hHeap=0x1f0000) returned 1 [0291.078] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0291.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0291.087] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0278702.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0278702.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0291.087] GetFileType (hFile=0x198) returned 0x1 [0291.088] CloseHandle (hObject=0x198) returned 1 [0291.088] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0291.088] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0278702.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0278702.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xed05f07, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xed05f07, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf34834b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf6a)) returned 1 [0291.089] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0291.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0291.089] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0278702.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0278702.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xed05f07, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xed05f07, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf34834b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf6a)) returned 1 [0291.089] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0291.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0291.089] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0291.089] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xed05f07, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xed05f07, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf2fbd2e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4330, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0279644.WMF", cAlternateFileName="")) returned 1 [0291.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0291.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211c78 [0291.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0291.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211c78 | out: hHeap=0x1f0000) returned 1 [0291.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0291.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0291.091] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0279644.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0279644.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0291.091] GetFileType (hFile=0x198) returned 0x1 [0291.092] CloseHandle (hObject=0x198) returned 1 [0291.092] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0291.092] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0279644.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0279644.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xed05f07, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xed05f07, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf2fbd2e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4330)) returned 1 [0291.092] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0291.092] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0291.093] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0279644.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0279644.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xed05f07, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xed05f07, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf2fbd2e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4330)) returned 1 [0291.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0291.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0291.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0291.093] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11dee, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0280468.WMF", cAlternateFileName="")) returned 1 [0291.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0291.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212718 [0291.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0291.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212718 | out: hHeap=0x1f0000) returned 1 [0291.094] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0291.094] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0291.094] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0280468.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0280468.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0291.094] GetFileType (hFile=0x198) returned 0x1 [0291.095] CloseHandle (hObject=0x198) returned 1 [0291.095] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0291.095] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0280468.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0280468.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11dee)) returned 1 [0291.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0291.095] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0291.095] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0280468.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0280468.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11dee)) returned 1 [0291.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0291.096] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0291.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0291.096] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x94c4, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0281008.WMF", cAlternateFileName="")) returned 1 [0291.096] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0291.096] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212470 [0291.096] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0291.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212470 | out: hHeap=0x1f0000) returned 1 [0291.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0291.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0291.097] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281008.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281008.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0291.097] GetFileType (hFile=0x198) returned 0x1 [0291.097] CloseHandle (hObject=0x198) returned 1 [0291.098] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0291.098] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281008.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281008.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x94c4)) returned 1 [0291.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0291.098] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0291.098] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281008.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281008.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x94c4)) returned 1 [0291.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0291.098] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0291.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0291.098] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb5b4, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0281243.WMF", cAlternateFileName="")) returned 1 [0291.098] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0291.098] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d00 [0291.099] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0291.099] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d00 | out: hHeap=0x1f0000) returned 1 [0291.099] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0291.099] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0291.099] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281243.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281243.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0291.099] GetFileType (hFile=0x198) returned 0x1 [0291.100] CloseHandle (hObject=0x198) returned 1 [0291.100] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0291.100] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281243.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281243.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb5b4)) returned 1 [0291.100] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0291.100] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0291.100] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281243.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281243.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb5b4)) returned 1 [0291.101] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0291.101] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0291.101] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0291.101] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31dc, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0281630.WMF", cAlternateFileName="")) returned 1 [0291.101] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0291.101] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2120b8 [0291.101] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0291.101] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2120b8 | out: hHeap=0x1f0000) returned 1 [0291.101] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0291.101] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0291.102] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281630.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281630.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0291.103] GetFileType (hFile=0x198) returned 0x1 [0291.103] CloseHandle (hObject=0x198) returned 1 [0291.103] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0291.103] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281630.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281630.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31dc)) returned 1 [0291.103] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0291.103] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0291.104] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281630.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281630.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31dc)) returned 1 [0291.104] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0291.104] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0291.104] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0291.104] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3854, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0281632.WMF", cAlternateFileName="")) returned 1 [0291.104] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0291.104] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2119d0 [0291.104] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0291.104] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2119d0 | out: hHeap=0x1f0000) returned 1 [0291.104] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0291.104] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0291.105] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281632.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281632.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0291.463] GetFileType (hFile=0x198) returned 0x1 [0291.463] CloseHandle (hObject=0x198) returned 1 [0291.464] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0291.464] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281632.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281632.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3854)) returned 1 [0291.464] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0291.464] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0291.464] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281632.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281632.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3854)) returned 1 [0291.465] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0291.465] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0291.465] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0291.465] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34834b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf34834b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e88, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0281638.WMF", cAlternateFileName="")) returned 1 [0291.465] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a68 [0291.465] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211ae0 [0291.465] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0291.465] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211ae0 | out: hHeap=0x1f0000) returned 1 [0291.465] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0291.466] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a68 | out: hHeap=0x1f0000) returned 1 [0291.791] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281638.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281638.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0291.791] GetFileType (hFile=0x19c) returned 0x1 [0291.791] CloseHandle (hObject=0x19c) returned 1 [0291.792] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0291.792] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281638.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281638.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34834b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf34834b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e88)) returned 1 [0291.792] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0291.792] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0291.793] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281638.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281638.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34834b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf34834b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e88)) returned 1 [0291.793] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0291.793] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0291.793] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0291.793] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30f2, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0281640.WMF", cAlternateFileName="")) returned 1 [0291.793] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0291.793] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212938 [0291.794] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0291.794] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212938 | out: hHeap=0x1f0000) returned 1 [0291.794] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0291.794] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0291.794] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281640.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281640.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0291.795] GetFileType (hFile=0x19c) returned 0x1 [0291.795] CloseHandle (hObject=0x19c) returned 1 [0291.796] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0291.796] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281640.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281640.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30f2)) returned 1 [0291.796] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0291.796] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0291.796] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281640.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281640.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30f2)) returned 1 [0291.797] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0291.797] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0291.797] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0291.797] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3c9e, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0282126.WMF", cAlternateFileName="")) returned 1 [0291.797] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609a0 [0291.797] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212250 [0291.797] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0291.797] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212250 | out: hHeap=0x1f0000) returned 1 [0291.797] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0291.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0291.798] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0282126.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0282126.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0291.799] GetFileType (hFile=0x19c) returned 0x1 [0291.799] CloseHandle (hObject=0x19c) returned 1 [0291.800] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0291.800] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0282126.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0282126.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3c9e)) returned 1 [0291.800] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0291.800] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0291.800] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0282126.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0282126.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3c9e)) returned 1 [0291.800] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0291.801] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0291.801] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0291.801] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8166, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0282928.WMF", cAlternateFileName="")) returned 1 [0291.801] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0291.801] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212580 [0291.801] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0291.801] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212580 | out: hHeap=0x1f0000) returned 1 [0291.801] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0291.801] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0291.802] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0282928.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0282928.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0291.803] GetFileType (hFile=0x19c) returned 0x1 [0291.803] CloseHandle (hObject=0x19c) returned 1 [0291.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0291.804] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0282928.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0282928.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8166)) returned 1 [0291.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0291.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0291.804] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0282928.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0282928.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8166)) returned 1 [0291.805] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0291.805] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0291.805] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0291.805] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34834b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf34834b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3700, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0282932.WMF", cAlternateFileName="")) returned 1 [0291.806] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0291.806] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0291.806] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0291.806] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0291.806] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0291.806] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0291.807] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0282932.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0282932.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0291.807] GetFileType (hFile=0x19c) returned 0x1 [0291.808] CloseHandle (hObject=0x19c) returned 1 [0291.808] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0291.808] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0282932.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0282932.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34834b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf34834b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3700)) returned 1 [0291.809] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0291.809] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0291.809] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0282932.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0282932.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34834b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf34834b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3700)) returned 1 [0291.809] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0291.809] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0291.809] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0291.810] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x388a, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0285462.WMF", cAlternateFileName="")) returned 1 [0291.810] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0291.810] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212828 [0291.810] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0291.810] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212828 | out: hHeap=0x1f0000) returned 1 [0291.810] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0291.810] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0291.811] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285462.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285462.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0291.811] GetFileType (hFile=0x19c) returned 0x1 [0291.812] CloseHandle (hObject=0x19c) returned 1 [0291.812] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0291.812] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285462.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285462.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x388a)) returned 1 [0291.812] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0291.813] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0291.813] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285462.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285462.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x388a)) returned 1 [0291.813] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0291.813] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0291.813] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0291.813] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2440, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0285484.WMF", cAlternateFileName="")) returned 1 [0291.813] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0291.813] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212718 [0291.814] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0291.814] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212718 | out: hHeap=0x1f0000) returned 1 [0291.814] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0291.814] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0291.815] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285484.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285484.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0291.815] GetFileType (hFile=0x19c) returned 0x1 [0291.815] CloseHandle (hObject=0x19c) returned 1 [0291.816] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0291.816] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285484.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285484.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2440)) returned 1 [0291.816] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0291.816] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0291.817] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285484.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285484.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2440)) returned 1 [0291.817] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0291.817] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0291.817] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0291.817] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x795c, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0285780.WMF", cAlternateFileName="")) returned 1 [0291.817] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260888 [0291.817] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212828 [0291.817] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0291.818] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212828 | out: hHeap=0x1f0000) returned 1 [0291.818] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0291.818] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0291.818] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285780.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285780.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0291.819] GetFileType (hFile=0x19c) returned 0x1 [0291.819] CloseHandle (hObject=0x19c) returned 1 [0291.819] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0291.819] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285780.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285780.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x795c)) returned 1 [0291.820] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0291.820] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0291.820] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285780.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285780.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x795c)) returned 1 [0291.820] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0291.820] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0291.820] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0291.820] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x523e, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0285782.WMF", cAlternateFileName="")) returned 1 [0291.860] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260770 [0291.860] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d00 [0291.860] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0291.861] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d00 | out: hHeap=0x1f0000) returned 1 [0291.861] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0291.861] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0291.862] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285782.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285782.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0291.862] GetFileType (hFile=0x19c) returned 0x1 [0291.863] CloseHandle (hObject=0x19c) returned 1 [0291.863] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0291.863] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285782.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285782.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x523e)) returned 1 [0291.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0291.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0291.864] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285782.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285782.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x523e)) returned 1 [0291.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0291.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0291.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0291.864] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2eb4, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0285792.WMF", cAlternateFileName="")) returned 1 [0291.865] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0291.865] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211ae0 [0291.865] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0291.865] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211ae0 | out: hHeap=0x1f0000) returned 1 [0291.865] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0291.865] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0291.866] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285792.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285792.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0291.866] GetFileType (hFile=0x19c) returned 0x1 [0291.867] CloseHandle (hObject=0x19c) returned 1 [0291.867] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0291.867] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285792.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285792.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2eb4)) returned 1 [0292.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0292.067] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0292.067] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285792.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285792.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2eb4)) returned 1 [0292.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0292.067] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0292.068] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0292.068] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3550, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0285796.WMF", cAlternateFileName="")) returned 1 [0292.068] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0292.068] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d00 [0292.068] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0292.068] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d00 | out: hHeap=0x1f0000) returned 1 [0292.068] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0292.068] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0292.082] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285796.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285796.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0292.082] GetFileType (hFile=0x1c0) returned 0x1 [0292.083] CloseHandle (hObject=0x1c0) returned 1 [0292.083] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0292.083] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285796.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285796.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3550)) returned 1 [0292.083] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0292.083] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0292.084] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285796.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285796.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3550)) returned 1 [0292.084] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0292.084] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0292.084] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0292.084] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x23f4, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0285808.WMF", cAlternateFileName="")) returned 1 [0292.084] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0292.084] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212608 [0292.084] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0292.084] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212608 | out: hHeap=0x1f0000) returned 1 [0292.085] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0292.085] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0292.085] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285808.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285808.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0292.086] GetFileType (hFile=0x1c0) returned 0x1 [0292.086] CloseHandle (hObject=0x1c0) returned 1 [0292.087] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0292.087] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285808.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285808.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x23f4)) returned 1 [0292.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0292.087] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0292.087] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285808.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285808.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x23f4)) returned 1 [0292.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0292.088] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0292.088] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0292.088] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2210, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0285820.WMF", cAlternateFileName="")) returned 1 [0292.088] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0292.088] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211b68 [0292.088] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0292.088] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b68 | out: hHeap=0x1f0000) returned 1 [0292.088] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0292.088] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0292.089] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285820.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285820.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0292.089] GetFileType (hFile=0x1c0) returned 0x1 [0292.090] CloseHandle (hObject=0x1c0) returned 1 [0292.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0292.090] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285820.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285820.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2210)) returned 1 [0292.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0292.091] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0292.091] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285820.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285820.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2210)) returned 1 [0292.091] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0292.091] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0292.091] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0292.091] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21a0, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0285822.WMF", cAlternateFileName="")) returned 1 [0292.091] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0292.091] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211f20 [0292.092] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0292.092] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211f20 | out: hHeap=0x1f0000) returned 1 [0292.092] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0292.092] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0292.092] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285822.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285822.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0292.092] GetFileType (hFile=0x1c0) returned 0x1 [0292.093] CloseHandle (hObject=0x1c0) returned 1 [0292.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0292.093] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285822.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285822.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21a0)) returned 1 [0292.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0292.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0292.094] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285822.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285822.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21a0)) returned 1 [0292.094] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0292.094] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0292.094] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0292.094] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7898, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0287018.WMF", cAlternateFileName="")) returned 1 [0292.094] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0292.094] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211bf0 [0292.095] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0292.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211bf0 | out: hHeap=0x1f0000) returned 1 [0292.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0292.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0292.096] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287018.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287018.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0292.096] GetFileType (hFile=0x1c0) returned 0x1 [0292.096] CloseHandle (hObject=0x1c0) returned 1 [0292.097] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0292.097] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287018.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287018.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7898)) returned 1 [0292.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0292.097] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0292.097] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287018.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287018.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7898)) returned 1 [0292.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0292.097] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0292.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0292.097] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x931a, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0287019.WMF", cAlternateFileName="")) returned 1 [0292.098] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0292.098] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212828 [0292.098] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0292.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212828 | out: hHeap=0x1f0000) returned 1 [0292.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0292.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0292.099] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287019.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287019.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0292.099] GetFileType (hFile=0x1c0) returned 0x1 [0292.099] CloseHandle (hObject=0x1c0) returned 1 [0292.100] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0292.100] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287019.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287019.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x931a)) returned 1 [0292.100] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0292.100] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0292.100] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287019.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287019.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x931a)) returned 1 [0292.101] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0292.101] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0292.101] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0292.101] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x80d8, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0287020.WMF", cAlternateFileName="")) returned 1 [0292.101] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0292.101] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211e10 [0292.101] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0292.101] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e10 | out: hHeap=0x1f0000) returned 1 [0292.101] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0292.102] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0292.103] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287020.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287020.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0292.103] GetFileType (hFile=0x1c0) returned 0x1 [0292.104] CloseHandle (hObject=0x1c0) returned 1 [0292.104] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0292.104] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287020.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287020.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x80d8)) returned 1 [0292.104] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0292.105] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0292.105] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287020.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287020.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x80d8)) returned 1 [0292.105] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0292.105] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0292.105] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0292.105] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc6d2, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0287024.WMF", cAlternateFileName="")) returned 1 [0292.105] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0292.105] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211948 [0292.106] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0292.106] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211948 | out: hHeap=0x1f0000) returned 1 [0292.106] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0292.106] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0292.107] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287024.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287024.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0292.107] GetFileType (hFile=0x1c0) returned 0x1 [0292.107] CloseHandle (hObject=0x1c0) returned 1 [0292.108] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0292.108] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287024.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287024.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc6d2)) returned 1 [0292.108] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0292.108] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0292.108] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287024.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287024.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc6d2)) returned 1 [0292.108] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0292.108] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0292.108] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0292.108] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcd10, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0287408.WMF", cAlternateFileName="")) returned 1 [0292.109] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0292.109] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2127a0 [0292.109] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0292.109] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2127a0 | out: hHeap=0x1f0000) returned 1 [0292.109] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0292.109] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0292.109] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287408.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287408.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0292.110] GetFileType (hFile=0x1c0) returned 0x1 [0292.110] CloseHandle (hObject=0x1c0) returned 1 [0292.111] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0292.111] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287408.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287408.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcd10)) returned 1 [0292.111] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0292.111] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0292.111] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287408.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287408.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcd10)) returned 1 [0292.111] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0292.111] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0292.112] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0292.112] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa80c, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0287415.WMF", cAlternateFileName="")) returned 1 [0292.112] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260888 [0292.112] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211fa8 [0292.112] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0292.112] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211fa8 | out: hHeap=0x1f0000) returned 1 [0292.112] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0292.112] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0292.113] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287415.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287415.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0292.113] GetFileType (hFile=0x1c0) returned 0x1 [0292.114] CloseHandle (hObject=0x1c0) returned 1 [0292.114] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0292.115] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287415.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287415.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa80c)) returned 1 [0292.115] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0292.115] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0292.115] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287415.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287415.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa80c)) returned 1 [0292.115] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0292.115] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0292.116] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0292.116] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd6bc, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0287417.WMF", cAlternateFileName="")) returned 1 [0292.116] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0292.116] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211948 [0292.116] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0292.116] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211948 | out: hHeap=0x1f0000) returned 1 [0292.116] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0292.117] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0292.370] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287417.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287417.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0292.371] GetFileType (hFile=0x1e0) returned 0x1 [0292.371] CloseHandle (hObject=0x1e0) returned 1 [0292.371] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0292.371] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287417.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287417.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd6bc)) returned 1 [0292.372] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0292.372] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0292.372] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287417.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287417.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd6bc)) returned 1 [0292.372] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0292.372] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0292.372] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0292.372] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x89a4, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0287641.JPG", cAlternateFileName="")) returned 1 [0292.372] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0292.372] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211b68 [0292.372] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0292.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b68 | out: hHeap=0x1f0000) returned 1 [0292.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0292.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0292.373] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287641.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287641.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0292.373] GetFileType (hFile=0x1e0) returned 0x1 [0292.374] CloseHandle (hObject=0x1e0) returned 1 [0292.374] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0292.374] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287641.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287641.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x89a4)) returned 1 [0292.374] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0292.375] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0292.375] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287641.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287641.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x89a4)) returned 1 [0292.375] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0292.375] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0292.375] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0292.375] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x42d1, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0287642.JPG", cAlternateFileName="")) returned 1 [0292.375] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0292.375] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2127a0 [0292.375] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0292.375] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2127a0 | out: hHeap=0x1f0000) returned 1 [0292.375] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0292.376] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0292.376] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287642.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287642.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0292.376] GetFileType (hFile=0x1e0) returned 0x1 [0292.377] CloseHandle (hObject=0x1e0) returned 1 [0292.377] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0292.377] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287642.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287642.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x42d1)) returned 1 [0292.377] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0292.377] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0292.377] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287642.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287642.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x42d1)) returned 1 [0292.377] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0292.377] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0292.378] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0292.378] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3e91, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0287643.JPG", cAlternateFileName="")) returned 1 [0292.378] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0292.378] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211ae0 [0292.378] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0292.378] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211ae0 | out: hHeap=0x1f0000) returned 1 [0292.378] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0292.378] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0292.379] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287643.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287643.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0292.379] GetFileType (hFile=0x1e0) returned 0x1 [0292.379] CloseHandle (hObject=0x1e0) returned 1 [0292.379] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0292.380] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287643.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287643.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3e91)) returned 1 [0292.380] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0292.380] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0292.380] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287643.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287643.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3e91)) returned 1 [0292.380] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0292.380] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0292.380] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0292.380] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43c5, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0287644.JPG", cAlternateFileName="")) returned 1 [0292.380] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0292.380] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211b68 [0292.380] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0292.381] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b68 | out: hHeap=0x1f0000) returned 1 [0292.381] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0292.381] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0292.381] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287644.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287644.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0292.381] GetFileType (hFile=0x1e0) returned 0x1 [0292.382] CloseHandle (hObject=0x1e0) returned 1 [0292.382] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0292.382] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287644.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287644.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43c5)) returned 1 [0292.382] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0292.382] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0292.383] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287644.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287644.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43c5)) returned 1 [0292.383] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0292.383] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0292.383] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0292.383] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8d86, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0287645.JPG", cAlternateFileName="")) returned 1 [0292.384] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260838 [0292.384] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212470 [0292.384] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0292.384] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212470 | out: hHeap=0x1f0000) returned 1 [0292.384] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0292.384] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260838 | out: hHeap=0x1f0000) returned 1 [0292.384] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287645.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287645.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0292.385] GetFileType (hFile=0x1e0) returned 0x1 [0292.385] CloseHandle (hObject=0x1e0) returned 1 [0292.385] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0292.386] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287645.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287645.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8d86)) returned 1 [0292.386] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0292.386] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0292.386] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287645.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287645.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8d86)) returned 1 [0292.386] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0292.386] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0292.386] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0292.386] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d21, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0289430.JPG", cAlternateFileName="")) returned 1 [0292.386] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0292.386] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211e98 [0292.387] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0292.387] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e98 | out: hHeap=0x1f0000) returned 1 [0292.387] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0292.387] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0292.387] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0289430.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0289430.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0292.388] GetFileType (hFile=0x1e0) returned 0x1 [0292.388] CloseHandle (hObject=0x1e0) returned 1 [0292.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0292.389] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0289430.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0289430.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d21)) returned 1 [0292.389] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0292.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0292.389] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0289430.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0289430.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d21)) returned 1 [0292.389] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0292.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0292.389] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0292.390] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9e8a, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0290548.WMF", cAlternateFileName="")) returned 1 [0292.390] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260518 [0292.390] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211fa8 [0292.390] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0292.390] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211fa8 | out: hHeap=0x1f0000) returned 1 [0292.390] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0292.390] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0292.391] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0290548.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0290548.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0292.391] GetFileType (hFile=0x1e0) returned 0x1 [0292.391] CloseHandle (hObject=0x1e0) returned 1 [0292.392] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0292.392] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0290548.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0290548.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9e8a)) returned 1 [0292.392] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0292.392] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0292.392] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0290548.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0290548.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9e8a)) returned 1 [0292.392] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0292.392] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0292.393] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0292.393] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2590, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0291794.WMF", cAlternateFileName="")) returned 1 [0292.393] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0292.393] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212938 [0292.393] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0292.393] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212938 | out: hHeap=0x1f0000) returned 1 [0292.393] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0292.393] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0292.394] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0291794.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0291794.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0292.394] GetFileType (hFile=0x1e0) returned 0x1 [0292.394] CloseHandle (hObject=0x1e0) returned 1 [0292.395] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0292.395] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0291794.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0291794.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2590)) returned 1 [0292.395] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0292.395] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0292.395] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0291794.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0291794.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2590)) returned 1 [0292.395] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0292.395] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0292.396] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0292.396] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20e4, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0292248.WMF", cAlternateFileName="")) returned 1 [0292.396] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0292.396] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212608 [0292.396] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0292.396] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212608 | out: hHeap=0x1f0000) returned 1 [0292.396] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0292.396] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0292.397] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292248.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292248.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0292.397] GetFileType (hFile=0x1e0) returned 0x1 [0292.397] CloseHandle (hObject=0x1e0) returned 1 [0292.398] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0292.398] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292248.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292248.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20e4)) returned 1 [0292.398] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0292.398] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0292.398] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292248.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292248.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20e4)) returned 1 [0292.398] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0292.399] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0292.399] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0292.415] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7aa6, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0292270.WMF", cAlternateFileName="")) returned 1 [0292.415] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0292.415] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211fa8 [0292.415] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0292.415] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211fa8 | out: hHeap=0x1f0000) returned 1 [0292.416] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0292.416] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0292.416] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292270.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292270.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0292.417] GetFileType (hFile=0x1e0) returned 0x1 [0292.417] CloseHandle (hObject=0x1e0) returned 1 [0292.418] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0292.418] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292270.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292270.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7aa6)) returned 1 [0292.418] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0292.418] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0292.419] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292270.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292270.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7aa6)) returned 1 [0292.419] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0292.419] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0292.419] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0292.419] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b64, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0292272.WMF", cAlternateFileName="")) returned 1 [0292.419] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0292.419] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0292.420] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0292.420] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0292.420] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0292.420] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0292.421] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292272.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292272.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0292.421] GetFileType (hFile=0x1e0) returned 0x1 [0292.421] CloseHandle (hObject=0x1e0) returned 1 [0292.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0292.422] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292272.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292272.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b64)) returned 1 [0292.422] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0292.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0292.422] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292272.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292272.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b64)) returned 1 [0292.423] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0292.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0292.423] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0292.423] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3658, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0292278.WMF", cAlternateFileName="")) returned 1 [0292.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0292.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211f20 [0292.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0292.423] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211f20 | out: hHeap=0x1f0000) returned 1 [0292.424] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0292.424] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0292.424] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292278.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292278.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0292.425] GetFileType (hFile=0x1e0) returned 0x1 [0292.425] CloseHandle (hObject=0x1e0) returned 1 [0292.426] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0292.426] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292278.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292278.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3658)) returned 1 [0292.426] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0292.426] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0292.426] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292278.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292278.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3658)) returned 1 [0292.426] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0292.426] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0292.426] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0292.427] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b56, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0292286.WMF", cAlternateFileName="")) returned 1 [0292.427] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0292.427] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d88 [0292.427] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0292.427] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d88 | out: hHeap=0x1f0000) returned 1 [0292.427] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0292.427] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0292.428] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292286.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292286.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0292.428] GetFileType (hFile=0x1e0) returned 0x1 [0292.429] CloseHandle (hObject=0x1e0) returned 1 [0292.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0292.429] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292286.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292286.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b56)) returned 1 [0292.429] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0292.430] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0292.430] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292286.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292286.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b56)) returned 1 [0292.430] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0292.700] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0292.705] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0292.705] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12a6, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0293800.WMF", cAlternateFileName="")) returned 1 [0292.705] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0292.705] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211fa8 [0292.705] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0292.705] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211fa8 | out: hHeap=0x1f0000) returned 1 [0292.705] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0292.705] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0292.706] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0293800.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0293800.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0292.706] GetFileType (hFile=0x1c0) returned 0x1 [0292.707] CloseHandle (hObject=0x1c0) returned 1 [0292.707] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0292.707] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0293800.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0293800.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12a6)) returned 1 [0292.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0292.707] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0292.707] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0293800.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0293800.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12a6)) returned 1 [0292.708] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0292.708] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0292.708] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0292.708] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17be, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0293832.WMF", cAlternateFileName="")) returned 1 [0292.708] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0292.708] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212828 [0292.708] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0292.708] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212828 | out: hHeap=0x1f0000) returned 1 [0292.708] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0292.708] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0292.709] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0293832.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0293832.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0292.709] GetFileType (hFile=0x1c0) returned 0x1 [0292.710] CloseHandle (hObject=0x1c0) returned 1 [0292.710] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0292.710] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0293832.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0293832.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17be)) returned 1 [0292.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0292.710] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0292.710] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0293832.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0293832.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17be)) returned 1 [0292.711] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0292.711] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0292.711] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0292.711] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x37de, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0294989.WMF", cAlternateFileName="")) returned 1 [0292.711] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0292.711] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211f20 [0292.711] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0292.711] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211f20 | out: hHeap=0x1f0000) returned 1 [0292.711] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0292.711] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0292.712] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0294989.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0294989.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0292.712] GetFileType (hFile=0x1c0) returned 0x1 [0292.713] CloseHandle (hObject=0x1c0) returned 1 [0292.714] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0292.714] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0294989.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0294989.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x37de)) returned 1 [0292.714] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0292.714] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0292.714] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0294989.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0294989.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x37de)) returned 1 [0292.715] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0292.715] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0292.715] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0292.715] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6180, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0294991.WMF", cAlternateFileName="")) returned 1 [0292.715] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0292.715] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211948 [0292.715] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0292.716] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211948 | out: hHeap=0x1f0000) returned 1 [0292.716] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0292.716] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0292.717] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0294991.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0294991.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0292.717] GetFileType (hFile=0x1c0) returned 0x1 [0292.717] CloseHandle (hObject=0x1c0) returned 1 [0292.718] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0292.718] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0294991.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0294991.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6180)) returned 1 [0292.718] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0292.718] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0292.718] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0294991.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0294991.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6180)) returned 1 [0292.719] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0292.719] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0292.719] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0292.719] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21b2, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0295069.WMF", cAlternateFileName="")) returned 1 [0292.719] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0292.719] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d88 [0292.719] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0292.719] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d88 | out: hHeap=0x1f0000) returned 1 [0292.719] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0292.720] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0292.720] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0295069.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0295069.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0292.720] GetFileType (hFile=0x1c0) returned 0x1 [0292.721] CloseHandle (hObject=0x1c0) returned 1 [0292.721] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0292.721] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0295069.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0295069.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21b2)) returned 1 [0292.722] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0292.722] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0292.722] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0295069.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0295069.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21b2)) returned 1 [0292.722] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0292.722] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0292.722] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0292.722] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe42c, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0296277.WMF", cAlternateFileName="")) returned 1 [0292.722] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0292.723] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2123e8 [0292.723] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0292.723] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2123e8 | out: hHeap=0x1f0000) returned 1 [0292.723] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0292.723] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0292.723] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0296277.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0296277.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0292.724] GetFileType (hFile=0x1c0) returned 0x1 [0292.724] CloseHandle (hObject=0x1c0) returned 1 [0292.724] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0292.724] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0296277.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0296277.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe42c)) returned 1 [0292.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0292.725] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0292.725] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0296277.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0296277.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe42c)) returned 1 [0292.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0292.725] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0292.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0292.725] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1088e, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0296279.WMF", cAlternateFileName="")) returned 1 [0292.725] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0292.725] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212828 [0292.725] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0292.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212828 | out: hHeap=0x1f0000) returned 1 [0292.726] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0292.726] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0292.726] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0296279.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0296279.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0292.726] GetFileType (hFile=0x1c0) returned 0x1 [0292.727] CloseHandle (hObject=0x1c0) returned 1 [0292.727] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0292.727] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0296279.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0296279.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1088e)) returned 1 [0292.727] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0292.727] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0292.727] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0296279.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0296279.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1088e)) returned 1 [0292.728] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0292.728] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0292.728] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0292.728] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x107ec, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0296288.WMF", cAlternateFileName="")) returned 1 [0292.728] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260518 [0292.728] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0292.728] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0292.728] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0292.728] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0292.728] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0292.729] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0296288.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0296288.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0292.729] GetFileType (hFile=0x1c0) returned 0x1 [0292.729] CloseHandle (hObject=0x1c0) returned 1 [0292.730] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0292.730] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0296288.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0296288.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x107ec)) returned 1 [0292.730] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0292.730] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0292.730] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0296288.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0296288.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x107ec)) returned 1 [0292.731] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0292.731] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0292.731] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0292.731] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x59ce, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0297229.WMF", cAlternateFileName="")) returned 1 [0292.731] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0292.731] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212140 [0292.732] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0292.732] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212140 | out: hHeap=0x1f0000) returned 1 [0292.732] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0292.732] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0292.732] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297229.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297229.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0292.733] GetFileType (hFile=0x1c0) returned 0x1 [0292.733] CloseHandle (hObject=0x1c0) returned 1 [0292.733] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0292.733] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297229.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297229.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x59ce)) returned 1 [0292.734] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0292.734] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0292.734] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297229.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297229.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x59ce)) returned 1 [0292.734] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0292.734] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0292.734] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0292.734] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d24, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0297269.WMF", cAlternateFileName="")) returned 1 [0292.734] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260770 [0292.735] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2127a0 [0292.735] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0292.735] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2127a0 | out: hHeap=0x1f0000) returned 1 [0292.735] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0292.735] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0292.736] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297269.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297269.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0292.736] GetFileType (hFile=0x1c0) returned 0x1 [0292.736] CloseHandle (hObject=0x1c0) returned 1 [0292.737] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0292.737] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297269.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297269.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d24)) returned 1 [0292.737] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0292.737] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0292.737] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297269.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297269.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d24)) returned 1 [0292.737] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0292.737] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0292.738] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0292.738] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4236, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0297725.WMF", cAlternateFileName="")) returned 1 [0292.738] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0292.738] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d00 [0292.738] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0292.738] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d00 | out: hHeap=0x1f0000) returned 1 [0292.738] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0292.738] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0292.739] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297725.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297725.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0292.739] GetFileType (hFile=0x1c0) returned 0x1 [0292.740] CloseHandle (hObject=0x1c0) returned 1 [0292.740] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0292.740] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297725.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297725.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4236)) returned 1 [0292.741] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0292.741] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0292.741] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297725.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297725.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4236)) returned 1 [0292.741] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0292.741] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0292.741] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0292.741] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf406dcf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3c9c, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0297727.WMF", cAlternateFileName="")) returned 1 [0292.741] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0292.741] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212938 [0292.742] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0292.742] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212938 | out: hHeap=0x1f0000) returned 1 [0292.742] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0292.742] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0293.137] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297727.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297727.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0293.137] GetFileType (hFile=0x1c0) returned 0x1 [0293.137] CloseHandle (hObject=0x1c0) returned 1 [0293.138] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0293.138] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297727.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297727.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf406dcf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3c9c)) returned 1 [0293.138] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0293.138] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0293.138] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297727.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297727.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf406dcf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3c9c)) returned 1 [0293.139] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0293.139] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0293.139] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0293.139] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf406dcf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x493e, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0297757.WMF", cAlternateFileName="")) returned 1 [0293.139] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0293.139] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0293.139] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0293.139] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0293.139] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0293.139] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0293.140] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297757.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297757.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0293.140] GetFileType (hFile=0x1c0) returned 0x1 [0293.141] CloseHandle (hObject=0x1c0) returned 1 [0293.141] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0293.141] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297757.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297757.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf406dcf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x493e)) returned 1 [0293.142] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0293.142] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0293.142] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297757.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297757.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf406dcf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x493e)) returned 1 [0293.142] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0293.142] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0293.142] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0293.142] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4960, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0297759.WMF", cAlternateFileName="")) returned 1 [0293.143] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0293.143] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211ae0 [0293.143] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0293.143] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211ae0 | out: hHeap=0x1f0000) returned 1 [0293.143] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0293.143] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0293.144] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297759.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297759.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0293.144] GetFileType (hFile=0x1c0) returned 0x1 [0293.144] CloseHandle (hObject=0x1c0) returned 1 [0293.145] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0293.145] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297759.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297759.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4960)) returned 1 [0293.145] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0293.145] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0293.145] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297759.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297759.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4960)) returned 1 [0293.145] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0293.145] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0293.145] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0293.146] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4584, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0300862.WMF", cAlternateFileName="")) returned 1 [0293.146] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609a0 [0293.146] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212030 [0293.146] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0293.146] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212030 | out: hHeap=0x1f0000) returned 1 [0293.146] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0293.146] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0293.147] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0300862.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0300862.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0293.147] GetFileType (hFile=0x1c0) returned 0x1 [0293.148] CloseHandle (hObject=0x1c0) returned 1 [0293.148] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0293.148] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0300862.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0300862.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4584)) returned 1 [0293.148] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0293.148] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0293.148] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0300862.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0300862.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4584)) returned 1 [0293.149] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0293.149] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0293.149] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0293.149] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b0e, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0301044.WMF", cAlternateFileName="")) returned 1 [0293.149] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0293.149] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211f20 [0293.149] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0293.149] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211f20 | out: hHeap=0x1f0000) returned 1 [0293.149] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0293.150] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0293.150] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301044.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0301044.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0293.150] GetFileType (hFile=0x1c0) returned 0x1 [0293.151] CloseHandle (hObject=0x1c0) returned 1 [0293.151] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0293.151] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301044.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0301044.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b0e)) returned 1 [0293.152] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0293.152] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0293.152] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301044.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0301044.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b0e)) returned 1 [0293.153] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0293.153] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0293.153] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0293.153] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ae8, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0301052.WMF", cAlternateFileName="")) returned 1 [0293.153] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0293.153] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0293.153] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0293.153] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0293.153] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0293.153] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0293.154] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301052.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0301052.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0293.154] GetFileType (hFile=0x1c0) returned 0x1 [0293.155] CloseHandle (hObject=0x1c0) returned 1 [0293.155] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0293.155] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301052.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0301052.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ae8)) returned 1 [0293.155] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0293.155] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0293.156] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301052.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0301052.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ae8)) returned 1 [0293.156] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0293.156] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0293.156] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0293.156] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4a5a, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0301418.WMF", cAlternateFileName="")) returned 1 [0293.156] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605b8 [0293.156] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2120b8 [0293.156] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0293.156] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2120b8 | out: hHeap=0x1f0000) returned 1 [0293.157] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0293.157] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0293.157] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301418.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0301418.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0293.157] GetFileType (hFile=0x1c0) returned 0x1 [0293.158] CloseHandle (hObject=0x1c0) returned 1 [0293.158] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0293.158] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301418.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0301418.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4a5a)) returned 1 [0293.159] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0293.159] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0293.159] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301418.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0301418.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4a5a)) returned 1 [0293.159] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0293.159] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0293.159] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0293.159] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4dfa, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0301432.WMF", cAlternateFileName="")) returned 1 [0293.159] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0293.159] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211a58 [0293.160] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0293.160] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211a58 | out: hHeap=0x1f0000) returned 1 [0293.160] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0293.160] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0293.161] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301432.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0301432.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0293.161] GetFileType (hFile=0x1c0) returned 0x1 [0293.161] CloseHandle (hObject=0x1c0) returned 1 [0293.162] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0293.162] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301432.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0301432.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4dfa)) returned 1 [0293.162] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0293.162] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0293.162] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301432.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0301432.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4dfa)) returned 1 [0293.163] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0293.163] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0293.163] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0293.163] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe20, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0304371.WMF", cAlternateFileName="")) returned 1 [0293.163] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0293.163] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212828 [0293.163] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0293.163] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212828 | out: hHeap=0x1f0000) returned 1 [0293.164] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0293.164] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0293.164] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304371.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304371.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0293.165] GetFileType (hFile=0x1c0) returned 0x1 [0293.165] CloseHandle (hObject=0x1c0) returned 1 [0293.165] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0293.166] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304371.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304371.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe20)) returned 1 [0293.166] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0293.166] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0293.166] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304371.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304371.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe20)) returned 1 [0293.166] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0293.166] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0293.166] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0293.167] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x103e, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0304405.WMF", cAlternateFileName="")) returned 1 [0293.167] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0293.167] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212470 [0293.167] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0293.167] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212470 | out: hHeap=0x1f0000) returned 1 [0293.167] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0293.167] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0293.168] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304405.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304405.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0293.169] GetFileType (hFile=0x1c0) returned 0x1 [0293.169] CloseHandle (hObject=0x1c0) returned 1 [0293.169] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0293.170] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304405.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304405.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x103e)) returned 1 [0293.170] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0293.170] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0293.170] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304405.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304405.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x103e)) returned 1 [0293.170] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0293.170] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0293.170] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0293.171] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4a0e, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0304853.WMF", cAlternateFileName="")) returned 1 [0293.171] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0293.171] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2128b0 [0293.171] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0293.171] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2128b0 | out: hHeap=0x1f0000) returned 1 [0293.171] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0293.171] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0293.172] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304853.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304853.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0293.172] GetFileType (hFile=0x1c0) returned 0x1 [0293.172] CloseHandle (hObject=0x1c0) returned 1 [0293.173] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0293.173] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304853.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304853.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4a0e)) returned 1 [0293.173] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0293.173] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0293.173] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304853.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304853.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4a0e)) returned 1 [0293.173] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0293.173] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0293.173] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0293.173] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2cf8, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0304861.WMF", cAlternateFileName="")) returned 1 [0293.173] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0293.174] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212718 [0293.174] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0293.174] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212718 | out: hHeap=0x1f0000) returned 1 [0293.174] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0293.174] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0293.174] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304861.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304861.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0293.174] GetFileType (hFile=0x1c0) returned 0x1 [0293.175] CloseHandle (hObject=0x1c0) returned 1 [0293.175] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0293.175] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304861.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304861.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2cf8)) returned 1 [0293.175] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0293.176] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0293.176] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304861.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304861.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2cf8)) returned 1 [0293.176] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0293.176] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0293.176] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0293.176] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f8e, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0304875.WMF", cAlternateFileName="")) returned 1 [0293.176] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0293.176] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211ae0 [0293.176] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0293.176] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211ae0 | out: hHeap=0x1f0000) returned 1 [0293.177] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0293.177] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0293.177] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304875.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304875.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0293.178] GetFileType (hFile=0x1c0) returned 0x1 [0293.178] CloseHandle (hObject=0x1c0) returned 1 [0293.179] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0293.179] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304875.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304875.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f8e)) returned 1 [0293.179] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0293.179] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0293.179] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304875.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304875.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f8e)) returned 1 [0293.179] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0293.180] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0293.180] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0293.180] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x29c4, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0309480.JPG", cAlternateFileName="")) returned 1 [0293.180] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0293.180] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2129c0 [0293.180] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0293.181] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2129c0 | out: hHeap=0x1f0000) returned 1 [0293.181] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0293.181] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0293.181] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309480.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309480.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0293.182] GetFileType (hFile=0x1c0) returned 0x1 [0293.182] CloseHandle (hObject=0x1c0) returned 1 [0293.183] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0293.183] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309480.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309480.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x29c4)) returned 1 [0293.183] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0293.375] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0293.375] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309480.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309480.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x29c4)) returned 1 [0293.375] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0293.375] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0293.375] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0293.375] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf406dcf, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf406dcf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x544c, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0309567.JPG", cAlternateFileName="")) returned 1 [0293.375] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260770 [0293.375] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212250 [0293.376] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0293.376] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212250 | out: hHeap=0x1f0000) returned 1 [0293.376] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0293.376] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0293.376] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309567.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309567.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0293.377] GetFileType (hFile=0x1e0) returned 0x1 [0293.377] CloseHandle (hObject=0x1e0) returned 1 [0293.377] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0293.378] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309567.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309567.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf406dcf, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf406dcf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x544c)) returned 1 [0293.378] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0293.378] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0293.378] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309567.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309567.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf406dcf, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf406dcf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x544c)) returned 1 [0293.378] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0293.378] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0293.378] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0293.378] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf406dcf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9a8b, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0309585.JPG", cAlternateFileName="")) returned 1 [0293.378] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0293.379] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d00 [0293.379] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0293.379] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d00 | out: hHeap=0x1f0000) returned 1 [0293.379] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0293.379] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0293.434] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309585.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309585.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0293.434] GetFileType (hFile=0x1b0) returned 0x1 [0293.434] CloseHandle (hObject=0x1b0) returned 1 [0293.435] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0293.435] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309585.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309585.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf406dcf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9a8b)) returned 1 [0293.435] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0293.435] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0293.435] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309585.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309585.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf406dcf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9a8b)) returned 1 [0293.435] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0293.435] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0293.435] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0293.435] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf406dcf, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf406dcf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x81f0, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0309598.JPG", cAlternateFileName="")) returned 1 [0293.436] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0293.436] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2128b0 [0293.436] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0293.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2128b0 | out: hHeap=0x1f0000) returned 1 [0293.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0293.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0293.437] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309598.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309598.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0293.437] GetFileType (hFile=0x1b0) returned 0x1 [0293.437] CloseHandle (hObject=0x1b0) returned 1 [0293.437] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0293.438] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309598.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309598.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf406dcf, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf406dcf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x81f0)) returned 1 [0293.438] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0293.438] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0293.438] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309598.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309598.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf406dcf, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf406dcf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x81f0)) returned 1 [0293.438] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0293.438] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0293.438] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0293.438] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf406dcf, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf406dcf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaabb, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0309664.JPG", cAlternateFileName="")) returned 1 [0293.439] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0293.439] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211c78 [0293.439] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0293.439] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211c78 | out: hHeap=0x1f0000) returned 1 [0293.439] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0293.439] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0293.440] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309664.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309664.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0293.440] GetFileType (hFile=0x1b0) returned 0x1 [0293.440] CloseHandle (hObject=0x1b0) returned 1 [0293.440] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0293.441] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309664.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309664.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf406dcf, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf406dcf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaabb)) returned 1 [0293.441] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0293.441] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0293.441] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309664.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309664.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf406dcf, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf406dcf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaabb)) returned 1 [0293.441] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0293.441] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0293.441] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0293.441] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf406dcf, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf406dcf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ada, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0309705.JPG", cAlternateFileName="")) returned 1 [0293.441] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0293.441] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211f20 [0293.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0293.442] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211f20 | out: hHeap=0x1f0000) returned 1 [0293.442] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0293.442] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0293.442] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309705.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309705.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0293.442] GetFileType (hFile=0x1b0) returned 0x1 [0293.443] CloseHandle (hObject=0x1b0) returned 1 [0293.443] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0293.443] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309705.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309705.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf406dcf, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf406dcf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ada)) returned 1 [0293.443] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0293.443] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0293.444] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309705.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309705.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf406dcf, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf406dcf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ada)) returned 1 [0293.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0293.444] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0293.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0293.444] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf406dcf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0309902.WMF", cAlternateFileName="")) returned 1 [0293.444] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0293.444] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2119d0 [0293.444] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0293.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2119d0 | out: hHeap=0x1f0000) returned 1 [0293.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0293.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0293.445] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309902.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309902.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0293.446] GetFileType (hFile=0x1b0) returned 0x1 [0293.446] CloseHandle (hObject=0x1b0) returned 1 [0293.446] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0293.446] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309902.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309902.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf406dcf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a00)) returned 1 [0293.447] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0293.447] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0293.447] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309902.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309902.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf406dcf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a00)) returned 1 [0293.447] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0293.447] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0293.447] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0293.447] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20e4, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0309904.WMF", cAlternateFileName="")) returned 1 [0293.447] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0293.447] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d00 [0293.448] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0293.448] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d00 | out: hHeap=0x1f0000) returned 1 [0293.448] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0293.448] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0293.448] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309904.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309904.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0293.449] GetFileType (hFile=0x1b0) returned 0x1 [0293.449] CloseHandle (hObject=0x1b0) returned 1 [0293.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0293.450] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309904.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309904.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20e4)) returned 1 [0293.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0293.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0293.450] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309904.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309904.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20e4)) returned 1 [0293.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0293.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0293.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0293.450] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b38, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0309920.WMF", cAlternateFileName="")) returned 1 [0293.451] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0293.451] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2129c0 [0293.451] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0293.451] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2129c0 | out: hHeap=0x1f0000) returned 1 [0293.451] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0293.451] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0293.452] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309920.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309920.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0293.452] GetFileType (hFile=0x1b0) returned 0x1 [0293.453] CloseHandle (hObject=0x1b0) returned 1 [0293.453] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0293.453] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309920.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309920.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b38)) returned 1 [0293.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0293.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0293.455] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309920.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309920.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b38)) returned 1 [0293.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0293.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0293.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0293.455] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x911a, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0313896.JPG", cAlternateFileName="")) returned 1 [0293.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0293.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212828 [0293.456] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0293.456] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212828 | out: hHeap=0x1f0000) returned 1 [0293.456] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0293.456] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0293.457] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313896.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313896.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0293.457] GetFileType (hFile=0x1b0) returned 0x1 [0293.457] CloseHandle (hObject=0x1b0) returned 1 [0293.458] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0293.458] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313896.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313896.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x911a)) returned 1 [0293.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0293.458] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0293.458] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313896.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313896.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x911a)) returned 1 [0293.459] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0293.459] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0293.459] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0293.459] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa75a, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0313965.JPG", cAlternateFileName="")) returned 1 [0293.459] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0293.459] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211bf0 [0293.459] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0293.460] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211bf0 | out: hHeap=0x1f0000) returned 1 [0293.460] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0293.460] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0293.460] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313965.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313965.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0293.461] GetFileType (hFile=0x1b0) returned 0x1 [0293.461] CloseHandle (hObject=0x1b0) returned 1 [0293.462] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0293.462] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313965.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313965.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa75a)) returned 1 [0293.462] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0293.462] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0293.462] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313965.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313965.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa75a)) returned 1 [0293.462] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0293.462] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0293.463] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0293.463] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x81ab, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0313970.JPG", cAlternateFileName="")) returned 1 [0293.463] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0293.463] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212140 [0293.463] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0293.463] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212140 | out: hHeap=0x1f0000) returned 1 [0293.463] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0293.463] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0293.464] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313970.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313970.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0293.703] GetFileType (hFile=0x1b0) returned 0x1 [0293.704] CloseHandle (hObject=0x1b0) returned 1 [0293.704] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0293.704] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313970.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313970.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x81ab)) returned 1 [0293.704] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0293.704] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0293.704] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313970.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313970.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x81ab)) returned 1 [0293.704] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0293.704] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0293.705] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0293.705] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb9d1, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0313974.JPG", cAlternateFileName="")) returned 1 [0293.705] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0293.705] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212140 [0293.705] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0293.705] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212140 | out: hHeap=0x1f0000) returned 1 [0293.705] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0293.705] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0293.705] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313974.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313974.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0293.705] GetFileType (hFile=0x1b0) returned 0x1 [0293.706] CloseHandle (hObject=0x1b0) returned 1 [0293.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0293.706] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313974.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313974.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb9d1)) returned 1 [0293.706] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0293.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0293.706] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313974.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313974.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb9d1)) returned 1 [0293.706] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0293.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0293.706] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0293.706] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x40f2, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0314068.JPG", cAlternateFileName="")) returned 1 [0293.707] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0293.707] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2120b8 [0293.707] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0293.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2120b8 | out: hHeap=0x1f0000) returned 1 [0293.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0293.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0293.708] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0314068.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0314068.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0293.708] GetFileType (hFile=0x1b0) returned 0x1 [0293.708] CloseHandle (hObject=0x1b0) returned 1 [0293.709] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0293.709] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0314068.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0314068.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x40f2)) returned 1 [0293.709] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0293.709] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0293.709] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0314068.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0314068.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x40f2)) returned 1 [0293.709] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0293.709] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0293.709] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0293.710] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b02, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0315580.JPG", cAlternateFileName="")) returned 1 [0293.710] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0293.710] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212030 [0293.710] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0293.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212030 | out: hHeap=0x1f0000) returned 1 [0293.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0293.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0293.711] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0315580.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0315580.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0293.711] GetFileType (hFile=0x1b0) returned 0x1 [0293.712] CloseHandle (hObject=0x1b0) returned 1 [0293.712] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0293.712] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0315580.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0315580.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b02)) returned 1 [0293.712] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0293.712] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0293.713] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0315580.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0315580.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b02)) returned 1 [0293.713] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0293.713] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0293.713] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0293.713] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x423a, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0315612.JPG", cAlternateFileName="")) returned 1 [0293.713] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0293.713] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211ae0 [0293.713] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0293.713] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211ae0 | out: hHeap=0x1f0000) returned 1 [0293.714] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0293.714] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0293.714] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0315612.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0315612.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0293.715] GetFileType (hFile=0x1b0) returned 0x1 [0293.716] CloseHandle (hObject=0x1b0) returned 1 [0293.716] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0293.716] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0315612.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0315612.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x423a)) returned 1 [0293.716] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0293.716] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0293.717] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0315612.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0315612.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x423a)) returned 1 [0293.717] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0293.717] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0293.717] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0293.717] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4180, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0318448.WMF", cAlternateFileName="")) returned 1 [0293.717] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0293.717] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212470 [0293.717] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0293.718] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212470 | out: hHeap=0x1f0000) returned 1 [0293.718] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0293.718] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0293.718] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0318448.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0318448.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0293.719] GetFileType (hFile=0x1b0) returned 0x1 [0293.719] CloseHandle (hObject=0x1b0) returned 1 [0293.720] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0293.720] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0318448.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0318448.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4180)) returned 1 [0293.720] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0293.720] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0293.720] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0318448.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0318448.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4180)) returned 1 [0293.721] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0293.721] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0293.721] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0293.721] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2dfa, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0318804.WMF", cAlternateFileName="")) returned 1 [0293.721] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0293.721] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0293.721] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0293.722] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0293.722] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0293.722] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0293.723] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0318804.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0318804.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0293.723] GetFileType (hFile=0x1b0) returned 0x1 [0293.724] CloseHandle (hObject=0x1b0) returned 1 [0293.724] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0293.724] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0318804.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0318804.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2dfa)) returned 1 [0293.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0293.725] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0293.725] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0318804.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0318804.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2dfa)) returned 1 [0293.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0293.725] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0293.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0293.725] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x28be, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0318810.WMF", cAlternateFileName="")) returned 1 [0293.725] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0293.725] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212360 [0293.726] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0293.726] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212360 | out: hHeap=0x1f0000) returned 1 [0293.726] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0293.726] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0293.727] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0318810.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0318810.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0293.728] GetFileType (hFile=0x1b0) returned 0x1 [0293.728] CloseHandle (hObject=0x1b0) returned 1 [0293.729] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0293.729] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0318810.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0318810.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x28be)) returned 1 [0293.729] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0293.729] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0293.729] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0318810.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0318810.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x28be)) returned 1 [0293.729] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0293.729] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0293.730] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0293.730] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x24d7, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0321179.JPG", cAlternateFileName="")) returned 1 [0293.730] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0293.730] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211e98 [0293.731] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0293.731] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e98 | out: hHeap=0x1f0000) returned 1 [0293.731] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0293.731] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0293.732] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0321179.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0321179.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0293.732] GetFileType (hFile=0x1b0) returned 0x1 [0293.733] CloseHandle (hObject=0x1b0) returned 1 [0293.733] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0293.733] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0321179.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0321179.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x24d7)) returned 1 [0293.733] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0293.734] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0293.734] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0321179.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0321179.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x24d7)) returned 1 [0293.734] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0293.734] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0293.734] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0293.734] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ff8, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0324694.WMF", cAlternateFileName="")) returned 1 [0293.734] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0293.734] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211bf0 [0293.735] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0293.735] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211bf0 | out: hHeap=0x1f0000) returned 1 [0293.735] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0293.735] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0293.736] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0324694.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0324694.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0293.736] GetFileType (hFile=0x1b0) returned 0x1 [0293.736] CloseHandle (hObject=0x1b0) returned 1 [0293.737] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0293.737] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0324694.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0324694.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ff8)) returned 1 [0293.737] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0293.737] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0293.737] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0324694.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0324694.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ff8)) returned 1 [0293.737] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0293.737] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0293.738] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0293.738] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e7e, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0324704.WMF", cAlternateFileName="")) returned 1 [0293.738] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0293.738] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2123e8 [0293.738] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0293.738] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2123e8 | out: hHeap=0x1f0000) returned 1 [0293.738] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0293.738] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0293.739] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0324704.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0324704.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0293.739] GetFileType (hFile=0x1b0) returned 0x1 [0293.740] CloseHandle (hObject=0x1b0) returned 1 [0293.740] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0293.740] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0324704.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0324704.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e7e)) returned 1 [0293.740] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0293.740] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0293.741] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0324704.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0324704.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e7e)) returned 1 [0293.741] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0293.741] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0293.741] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0293.741] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3260, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0337280.JPG", cAlternateFileName="")) returned 1 [0293.741] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0293.741] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212470 [0293.741] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0293.742] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212470 | out: hHeap=0x1f0000) returned 1 [0293.742] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0293.742] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0293.742] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0337280.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0337280.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0293.743] GetFileType (hFile=0x1b0) returned 0x1 [0293.743] CloseHandle (hObject=0x1b0) returned 1 [0293.744] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0293.744] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0337280.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0337280.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3260)) returned 1 [0293.744] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0293.744] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0293.744] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0337280.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0337280.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3260)) returned 1 [0293.745] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0293.745] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0293.745] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0293.745] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27d4, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0341328.JPG", cAlternateFileName="")) returned 1 [0293.745] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0293.745] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212030 [0293.745] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0293.745] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212030 | out: hHeap=0x1f0000) returned 1 [0293.746] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0294.024] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0294.024] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341328.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341328.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0294.024] GetFileType (hFile=0x1b0) returned 0x1 [0294.025] CloseHandle (hObject=0x1b0) returned 1 [0294.025] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0294.025] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341328.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341328.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27d4)) returned 1 [0294.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0294.026] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0294.026] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341328.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341328.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27d4)) returned 1 [0294.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0294.026] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0294.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0294.026] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2cdd, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0341344.JPG", cAlternateFileName="")) returned 1 [0294.292] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0294.292] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0294.292] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0294.292] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0294.292] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0294.292] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0294.293] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341344.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341344.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0294.293] GetFileType (hFile=0x1c0) returned 0x1 [0294.294] CloseHandle (hObject=0x1c0) returned 1 [0294.294] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0294.295] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341344.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341344.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2cdd)) returned 1 [0294.295] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0294.295] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0294.295] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341344.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341344.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2cdd)) returned 1 [0294.295] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0294.295] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0294.295] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0294.295] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c6d, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0341439.JPG", cAlternateFileName="")) returned 1 [0294.295] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0294.296] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211ae0 [0294.296] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0294.296] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211ae0 | out: hHeap=0x1f0000) returned 1 [0294.296] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0294.296] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0294.297] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341439.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341439.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0294.297] GetFileType (hFile=0x1c0) returned 0x1 [0294.297] CloseHandle (hObject=0x1c0) returned 1 [0294.298] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0294.298] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341439.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341439.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c6d)) returned 1 [0294.298] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0294.298] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0294.298] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341439.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341439.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c6d)) returned 1 [0294.299] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0294.299] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0294.299] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0294.299] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ad8, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0341447.JPG", cAlternateFileName="")) returned 1 [0294.299] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0294.300] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d00 [0294.300] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0294.300] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d00 | out: hHeap=0x1f0000) returned 1 [0294.300] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0294.300] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0294.301] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341447.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341447.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0294.301] GetFileType (hFile=0x1c0) returned 0x1 [0294.301] CloseHandle (hObject=0x1c0) returned 1 [0294.302] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0294.302] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341447.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341447.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ad8)) returned 1 [0294.302] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0294.302] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0294.302] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341447.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341447.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ad8)) returned 1 [0294.302] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0294.303] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0294.303] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0294.303] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x52c3, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0341448.JPG", cAlternateFileName="")) returned 1 [0294.303] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0294.303] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0294.303] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0294.303] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0294.303] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0294.303] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0294.304] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341448.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341448.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0294.304] GetFileType (hFile=0x1c0) returned 0x1 [0294.305] CloseHandle (hObject=0x1c0) returned 1 [0294.305] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0294.305] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341448.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341448.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x52c3)) returned 1 [0294.306] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0294.306] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0294.306] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341448.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341448.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x52c3)) returned 1 [0294.306] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0294.306] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0294.306] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0294.306] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7457, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0341455.JPG", cAlternateFileName="")) returned 1 [0294.306] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260888 [0294.306] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211bf0 [0294.307] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0294.307] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211bf0 | out: hHeap=0x1f0000) returned 1 [0294.307] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0294.307] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0294.308] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341455.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341455.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0294.308] GetFileType (hFile=0x1c0) returned 0x1 [0294.308] CloseHandle (hObject=0x1c0) returned 1 [0294.309] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0294.309] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341455.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341455.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7457)) returned 1 [0294.309] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0294.309] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0294.309] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341455.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341455.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7457)) returned 1 [0294.309] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0294.310] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0294.310] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0294.310] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa9e2, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0341475.JPG", cAlternateFileName="")) returned 1 [0294.310] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0294.310] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d88 [0294.310] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0294.310] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d88 | out: hHeap=0x1f0000) returned 1 [0294.310] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0294.310] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0294.311] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341475.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341475.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0294.311] GetFileType (hFile=0x1c0) returned 0x1 [0294.311] CloseHandle (hObject=0x1c0) returned 1 [0294.312] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0294.312] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341475.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341475.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa9e2)) returned 1 [0294.312] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0294.312] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0294.312] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341475.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341475.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa9e2)) returned 1 [0294.312] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0294.312] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0294.313] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0294.313] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ee3, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0341499.JPG", cAlternateFileName="")) returned 1 [0294.313] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0294.313] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d88 [0294.313] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0294.313] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d88 | out: hHeap=0x1f0000) returned 1 [0294.313] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0294.313] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0294.314] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341499.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341499.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0294.314] GetFileType (hFile=0x1c0) returned 0x1 [0294.315] CloseHandle (hObject=0x1c0) returned 1 [0294.315] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0294.315] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341499.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341499.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ee3)) returned 1 [0294.315] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0294.315] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0294.315] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341499.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341499.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ee3)) returned 1 [0294.315] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0294.315] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0294.315] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0294.315] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f8a, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0341534.JPG", cAlternateFileName="")) returned 1 [0294.316] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0294.316] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2119d0 [0294.316] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0294.316] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2119d0 | out: hHeap=0x1f0000) returned 1 [0294.316] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0294.316] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0294.316] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341534.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341534.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0294.316] GetFileType (hFile=0x1c0) returned 0x1 [0294.317] CloseHandle (hObject=0x1c0) returned 1 [0294.317] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0294.317] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341534.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341534.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f8a)) returned 1 [0294.317] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0294.317] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0294.317] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341534.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341534.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f8a)) returned 1 [0294.317] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0294.317] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0294.318] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0294.318] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5a56, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0341551.JPG", cAlternateFileName="")) returned 1 [0294.318] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0294.318] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212140 [0294.318] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0294.318] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212140 | out: hHeap=0x1f0000) returned 1 [0294.318] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0294.318] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0294.319] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341551.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341551.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0294.319] GetFileType (hFile=0x1c0) returned 0x1 [0294.319] CloseHandle (hObject=0x1c0) returned 1 [0294.320] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0294.320] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341551.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341551.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5a56)) returned 1 [0294.320] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0294.320] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0294.320] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341551.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341551.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5a56)) returned 1 [0294.320] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0294.320] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0294.320] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0294.320] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6f43, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0341554.JPG", cAlternateFileName="")) returned 1 [0294.321] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0294.321] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211ae0 [0294.321] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0294.321] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211ae0 | out: hHeap=0x1f0000) returned 1 [0294.321] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0294.321] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0294.322] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341554.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341554.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0294.322] GetFileType (hFile=0x1c0) returned 0x1 [0294.322] CloseHandle (hObject=0x1c0) returned 1 [0294.323] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0294.323] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341554.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341554.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6f43)) returned 1 [0294.323] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0294.323] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0294.323] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341554.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341554.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6f43)) returned 1 [0294.324] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0294.324] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0294.324] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0294.324] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6aa8, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0341557.JPG", cAlternateFileName="")) returned 1 [0294.324] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0294.324] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211bf0 [0294.324] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0294.324] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211bf0 | out: hHeap=0x1f0000) returned 1 [0294.324] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0294.324] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0294.325] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341557.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341557.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0294.325] GetFileType (hFile=0x1c0) returned 0x1 [0294.326] CloseHandle (hObject=0x1c0) returned 1 [0294.326] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0294.326] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341557.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341557.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6aa8)) returned 1 [0294.327] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0294.327] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0294.327] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341557.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341557.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6aa8)) returned 1 [0294.327] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0294.327] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0294.327] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0294.327] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6873, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0341559.JPG", cAlternateFileName="")) returned 1 [0294.328] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0294.328] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2124f8 [0294.328] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0294.328] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2124f8 | out: hHeap=0x1f0000) returned 1 [0294.328] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0294.328] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0294.329] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341559.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341559.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0294.329] GetFileType (hFile=0x1c0) returned 0x1 [0294.329] CloseHandle (hObject=0x1c0) returned 1 [0294.329] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0294.697] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341559.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341559.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6873)) returned 1 [0294.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0294.697] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0294.697] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341559.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341559.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6873)) returned 1 [0294.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0294.698] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0294.698] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0294.698] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa497, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0341561.JPG", cAlternateFileName="")) returned 1 [0294.698] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0294.698] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211e98 [0294.698] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0294.698] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e98 | out: hHeap=0x1f0000) returned 1 [0294.698] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0294.698] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0294.699] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341561.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341561.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0294.699] GetFileType (hFile=0x198) returned 0x1 [0294.699] CloseHandle (hObject=0x198) returned 1 [0294.700] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0294.700] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341561.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341561.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa497)) returned 1 [0294.700] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0294.700] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0294.700] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341561.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341561.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa497)) returned 1 [0294.700] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0294.701] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0294.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0294.701] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e7b, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0341634.JPG", cAlternateFileName="")) returned 1 [0294.701] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0294.701] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212938 [0294.701] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0294.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212938 | out: hHeap=0x1f0000) returned 1 [0294.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0294.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0294.702] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341634.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341634.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0294.702] GetFileType (hFile=0x198) returned 0x1 [0294.702] CloseHandle (hObject=0x198) returned 1 [0294.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0294.703] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341634.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341634.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e7b)) returned 1 [0294.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0294.703] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0294.703] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341634.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341634.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e7b)) returned 1 [0294.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0294.703] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0294.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0294.703] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3615, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0341636.JPG", cAlternateFileName="")) returned 1 [0294.703] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0294.703] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212360 [0294.703] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0294.704] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212360 | out: hHeap=0x1f0000) returned 1 [0294.704] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0294.704] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0294.704] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341636.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341636.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0294.704] GetFileType (hFile=0x198) returned 0x1 [0294.705] CloseHandle (hObject=0x198) returned 1 [0294.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0294.706] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341636.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341636.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3615)) returned 1 [0294.706] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0294.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0294.706] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341636.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341636.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3615)) returned 1 [0294.706] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0294.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0294.706] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0294.706] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2026, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0341645.JPG", cAlternateFileName="")) returned 1 [0294.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0294.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0294.707] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0294.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0294.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0294.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0294.707] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341645.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341645.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0294.707] GetFileType (hFile=0x198) returned 0x1 [0294.708] CloseHandle (hObject=0x198) returned 1 [0294.708] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0294.708] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341645.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341645.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2026)) returned 1 [0294.708] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0294.709] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0294.709] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341645.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341645.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2026)) returned 1 [0294.709] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0294.709] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0294.709] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0294.709] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3df7, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0341653.JPG", cAlternateFileName="")) returned 1 [0294.709] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0294.709] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211fa8 [0294.709] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0294.709] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211fa8 | out: hHeap=0x1f0000) returned 1 [0294.709] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0294.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0294.710] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341653.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341653.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0294.710] GetFileType (hFile=0x198) returned 0x1 [0294.711] CloseHandle (hObject=0x198) returned 1 [0294.711] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0294.711] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341653.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341653.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3df7)) returned 1 [0294.711] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0294.711] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0294.711] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341653.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341653.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3df7)) returned 1 [0294.712] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0294.712] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0294.712] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0294.712] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d7f, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0341654.JPG", cAlternateFileName="")) returned 1 [0294.712] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0294.712] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211b68 [0294.712] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0294.712] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b68 | out: hHeap=0x1f0000) returned 1 [0294.712] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0294.712] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0294.713] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341654.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341654.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0294.713] GetFileType (hFile=0x198) returned 0x1 [0294.713] CloseHandle (hObject=0x198) returned 1 [0294.714] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0294.714] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341654.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341654.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d7f)) returned 1 [0294.714] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0294.714] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0294.714] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341654.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341654.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d7f)) returned 1 [0294.714] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0294.714] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0294.714] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0294.714] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ec6, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0341738.JPG", cAlternateFileName="")) returned 1 [0294.714] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0294.715] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2119d0 [0294.715] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0294.715] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2119d0 | out: hHeap=0x1f0000) returned 1 [0294.715] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0294.715] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0294.715] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341738.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341738.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0294.715] GetFileType (hFile=0x198) returned 0x1 [0294.716] CloseHandle (hObject=0x198) returned 1 [0294.716] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0294.716] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341738.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341738.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ec6)) returned 1 [0294.716] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0294.716] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0294.717] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341738.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341738.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ec6)) returned 1 [0294.717] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0294.717] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0294.717] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0294.717] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x49ba, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0341742.JPG", cAlternateFileName="")) returned 1 [0294.717] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0294.717] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212140 [0294.717] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0294.717] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212140 | out: hHeap=0x1f0000) returned 1 [0294.717] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0294.717] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0294.718] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341742.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341742.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0294.718] GetFileType (hFile=0x198) returned 0x1 [0294.718] CloseHandle (hObject=0x198) returned 1 [0294.719] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0294.719] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341742.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341742.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x49ba)) returned 1 [0294.719] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0294.719] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0294.719] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341742.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341742.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x49ba)) returned 1 [0294.719] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0294.719] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0294.719] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0294.719] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10bdc, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0382836.JPG", cAlternateFileName="")) returned 1 [0294.719] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0294.719] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212140 [0294.720] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0294.720] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212140 | out: hHeap=0x1f0000) returned 1 [0294.720] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0294.720] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0294.721] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382836.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382836.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0294.721] GetFileType (hFile=0x198) returned 0x1 [0294.721] CloseHandle (hObject=0x198) returned 1 [0294.722] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0294.722] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382836.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382836.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10bdc)) returned 1 [0294.722] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0294.722] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0294.722] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382836.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382836.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10bdc)) returned 1 [0294.722] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0294.722] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0294.722] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0294.722] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ce5a, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0382925.JPG", cAlternateFileName="")) returned 1 [0294.722] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0294.722] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211fa8 [0294.723] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0294.723] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211fa8 | out: hHeap=0x1f0000) returned 1 [0294.723] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0294.723] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0294.723] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382925.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382925.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0294.723] GetFileType (hFile=0x198) returned 0x1 [0294.724] CloseHandle (hObject=0x198) returned 1 [0294.724] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0294.724] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382925.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382925.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ce5a)) returned 1 [0294.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0294.724] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0294.724] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382925.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382925.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ce5a)) returned 1 [0294.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0294.725] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0294.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0294.725] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1672c, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0382926.JPG", cAlternateFileName="")) returned 1 [0294.725] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260838 [0294.725] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212030 [0294.725] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0294.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212030 | out: hHeap=0x1f0000) returned 1 [0294.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0294.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260838 | out: hHeap=0x1f0000) returned 1 [0294.726] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382926.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382926.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0294.726] GetFileType (hFile=0x198) returned 0x1 [0294.727] CloseHandle (hObject=0x198) returned 1 [0294.727] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0294.727] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382926.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382926.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1672c)) returned 1 [0294.728] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0294.728] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0294.728] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382926.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382926.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1672c)) returned 1 [0294.728] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0294.728] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0294.728] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0294.728] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf49f727, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf49f727, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f86c, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0382927.JPG", cAlternateFileName="")) returned 1 [0294.729] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0294.729] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211b68 [0294.729] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0294.729] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b68 | out: hHeap=0x1f0000) returned 1 [0294.729] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0294.729] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0294.730] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382927.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382927.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0294.730] GetFileType (hFile=0x198) returned 0x1 [0294.730] CloseHandle (hObject=0x198) returned 1 [0294.731] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0294.731] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382927.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382927.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf49f727, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf49f727, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f86c)) returned 1 [0294.731] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0294.731] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0294.731] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382927.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382927.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf49f727, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf49f727, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f86c)) returned 1 [0294.732] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0294.732] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0294.732] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0294.732] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b83a, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0382930.JPG", cAlternateFileName="")) returned 1 [0294.732] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0294.732] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212140 [0294.732] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0294.733] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212140 | out: hHeap=0x1f0000) returned 1 [0294.733] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0294.733] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0294.733] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382930.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382930.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0294.734] GetFileType (hFile=0x198) returned 0x1 [0294.734] CloseHandle (hObject=0x198) returned 1 [0294.735] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0294.735] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382930.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382930.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b83a)) returned 1 [0294.735] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0294.735] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0294.735] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382930.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382930.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b83a)) returned 1 [0294.735] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0294.735] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0294.736] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0294.736] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1df43, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0382931.JPG", cAlternateFileName="")) returned 1 [0295.167] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0295.167] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0295.167] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0295.168] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0295.168] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0295.168] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0295.169] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382931.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382931.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0295.169] GetFileType (hFile=0x1e0) returned 0x1 [0295.169] CloseHandle (hObject=0x1e0) returned 1 [0295.170] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0295.170] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382931.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382931.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1df43)) returned 1 [0295.170] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0295.170] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0295.170] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382931.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382931.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1df43)) returned 1 [0295.171] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0295.171] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0295.171] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0295.171] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x184d3, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0382938.JPG", cAlternateFileName="")) returned 1 [0295.171] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0295.171] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0295.171] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0295.171] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0295.172] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0295.172] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0295.172] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382938.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382938.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0295.173] GetFileType (hFile=0x1e0) returned 0x1 [0295.173] CloseHandle (hObject=0x1e0) returned 1 [0295.174] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0295.174] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382938.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382938.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x184d3)) returned 1 [0295.174] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0295.174] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0295.175] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382938.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382938.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x184d3)) returned 1 [0295.175] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0295.175] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0295.175] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0295.175] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1aba5, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0382939.JPG", cAlternateFileName="")) returned 1 [0295.175] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260518 [0295.175] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2129c0 [0295.176] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0295.176] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2129c0 | out: hHeap=0x1f0000) returned 1 [0295.176] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0295.176] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0295.177] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382939.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382939.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0295.177] GetFileType (hFile=0x1e0) returned 0x1 [0295.177] CloseHandle (hObject=0x1e0) returned 1 [0295.178] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0295.178] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382939.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382939.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1aba5)) returned 1 [0295.178] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0295.178] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0295.179] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382939.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382939.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1aba5)) returned 1 [0295.179] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0295.179] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0295.179] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0295.179] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1653a, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0382942.JPG", cAlternateFileName="")) returned 1 [0295.179] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0295.179] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2120b8 [0295.180] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0295.180] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2120b8 | out: hHeap=0x1f0000) returned 1 [0295.180] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0295.180] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0295.181] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382942.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382942.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0295.181] GetFileType (hFile=0x1e0) returned 0x1 [0295.181] CloseHandle (hObject=0x1e0) returned 1 [0295.182] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0295.182] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382942.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382942.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1653a)) returned 1 [0295.182] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0295.182] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0295.182] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382942.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382942.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1653a)) returned 1 [0295.183] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0295.183] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0295.183] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0295.183] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf49f727, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf49f727, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13e1d, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0382944.JPG", cAlternateFileName="")) returned 1 [0295.183] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0295.183] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2123e8 [0295.183] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0295.183] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2123e8 | out: hHeap=0x1f0000) returned 1 [0295.184] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0295.184] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0295.184] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382944.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382944.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0295.185] GetFileType (hFile=0x1e0) returned 0x1 [0295.185] CloseHandle (hObject=0x1e0) returned 1 [0295.186] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0295.186] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382944.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382944.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf49f727, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf49f727, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13e1d)) returned 1 [0295.186] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0295.186] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0295.186] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382944.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382944.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf49f727, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf49f727, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13e1d)) returned 1 [0295.186] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0295.186] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0295.186] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0295.187] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1531c, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0382947.JPG", cAlternateFileName="")) returned 1 [0295.187] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0295.187] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0295.187] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0295.187] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0295.187] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0295.187] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0295.188] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382947.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382947.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0295.188] GetFileType (hFile=0x1e0) returned 0x1 [0295.188] CloseHandle (hObject=0x1e0) returned 1 [0295.189] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0295.189] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382947.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382947.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1531c)) returned 1 [0295.189] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0295.189] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0295.189] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382947.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382947.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1531c)) returned 1 [0295.189] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0295.189] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0295.190] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0295.190] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ad37, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0382948.JPG", cAlternateFileName="")) returned 1 [0295.190] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0295.190] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2123e8 [0295.190] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0295.190] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2123e8 | out: hHeap=0x1f0000) returned 1 [0295.190] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0295.190] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0295.191] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382948.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382948.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0295.191] GetFileType (hFile=0x1e0) returned 0x1 [0295.192] CloseHandle (hObject=0x1e0) returned 1 [0295.192] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0295.192] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382948.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382948.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ad37)) returned 1 [0295.192] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0295.193] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0295.193] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382948.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382948.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ad37)) returned 1 [0295.193] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0295.193] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0295.193] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0295.193] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x178d2, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0382950.JPG", cAlternateFileName="")) returned 1 [0295.193] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0295.193] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211ae0 [0295.193] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0295.193] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211ae0 | out: hHeap=0x1f0000) returned 1 [0295.194] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0295.194] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0295.194] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382950.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382950.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0295.194] GetFileType (hFile=0x1e0) returned 0x1 [0295.195] CloseHandle (hObject=0x1e0) returned 1 [0295.195] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0295.195] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382950.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382950.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x178d2)) returned 1 [0295.195] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0295.195] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0295.195] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382950.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382950.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x178d2)) returned 1 [0295.195] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0295.195] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0295.196] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0295.196] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17749, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0382952.JPG", cAlternateFileName="")) returned 1 [0295.196] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609a0 [0295.196] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211ae0 [0295.196] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0295.196] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211ae0 | out: hHeap=0x1f0000) returned 1 [0295.196] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0295.196] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0295.197] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382952.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382952.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0295.197] GetFileType (hFile=0x1e0) returned 0x1 [0295.197] CloseHandle (hObject=0x1e0) returned 1 [0295.197] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0295.198] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382952.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382952.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17749)) returned 1 [0295.198] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0295.198] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0295.198] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382952.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382952.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17749)) returned 1 [0295.198] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0295.198] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0295.198] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0295.198] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x110c9494, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x110c9494, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110ef705, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15a7f, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0382954.JPG", cAlternateFileName="")) returned 1 [0295.198] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260770 [0295.198] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2127a0 [0295.198] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0295.199] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2127a0 | out: hHeap=0x1f0000) returned 1 [0295.199] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0295.199] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0295.199] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382954.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382954.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0295.199] GetFileType (hFile=0x1e0) returned 0x1 [0295.200] CloseHandle (hObject=0x1e0) returned 1 [0295.200] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0295.200] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382954.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382954.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x110c9494, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x110c9494, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110ef705, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15a7f)) returned 1 [0295.200] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0295.200] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0295.200] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382954.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382954.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x110c9494, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x110c9494, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110ef705, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15a7f)) returned 1 [0295.201] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0295.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0295.201] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0295.201] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15fef, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0382955.JPG", cAlternateFileName="")) returned 1 [0295.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0295.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212140 [0295.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0295.201] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212140 | out: hHeap=0x1f0000) returned 1 [0295.201] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0295.201] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0295.202] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382955.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382955.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0295.202] GetFileType (hFile=0x1e0) returned 0x1 [0295.202] CloseHandle (hObject=0x1e0) returned 1 [0295.203] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0295.203] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382955.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382955.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15fef)) returned 1 [0295.203] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0295.203] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0295.203] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382955.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382955.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15fef)) returned 1 [0295.203] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0295.203] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0295.203] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0295.203] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a9ed, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0382957.JPG", cAlternateFileName="")) returned 1 [0295.203] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0295.203] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211b68 [0295.204] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0295.204] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b68 | out: hHeap=0x1f0000) returned 1 [0295.204] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0295.204] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0295.204] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382957.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382957.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0295.204] GetFileType (hFile=0x1e0) returned 0x1 [0295.677] CloseHandle (hObject=0x1e0) returned 1 [0295.677] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0295.677] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382957.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382957.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a9ed)) returned 1 [0295.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0295.678] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0295.678] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382957.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382957.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a9ed)) returned 1 [0295.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0295.678] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0295.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0295.678] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x193e7, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0382958.JPG", cAlternateFileName="")) returned 1 [0295.678] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605b8 [0295.678] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2124f8 [0295.679] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0295.679] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2124f8 | out: hHeap=0x1f0000) returned 1 [0295.679] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0295.679] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0295.679] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382958.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382958.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0295.680] GetFileType (hFile=0x1e0) returned 0x1 [0295.680] CloseHandle (hObject=0x1e0) returned 1 [0295.681] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0295.681] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382958.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382958.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x193e7)) returned 1 [0295.681] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0295.681] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0295.681] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382958.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382958.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x193e7)) returned 1 [0295.681] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0295.681] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0295.681] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0295.682] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14f8a, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0382959.JPG", cAlternateFileName="")) returned 1 [0295.682] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0295.682] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d00 [0295.682] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0295.682] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d00 | out: hHeap=0x1f0000) returned 1 [0295.682] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0295.682] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0295.683] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382959.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382959.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0295.683] GetFileType (hFile=0x1e0) returned 0x1 [0295.684] CloseHandle (hObject=0x1e0) returned 1 [0295.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0295.684] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382959.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382959.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14f8a)) returned 1 [0295.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0295.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0295.684] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382959.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382959.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14f8a)) returned 1 [0295.685] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0295.685] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0295.685] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0295.685] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a3f4, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0382960.JPG", cAlternateFileName="")) returned 1 [0295.685] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0295.685] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212030 [0295.685] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0295.685] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212030 | out: hHeap=0x1f0000) returned 1 [0295.685] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0295.685] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0295.686] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382960.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382960.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0295.686] GetFileType (hFile=0x1e0) returned 0x1 [0295.686] CloseHandle (hObject=0x1e0) returned 1 [0295.686] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0295.686] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382960.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382960.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a3f4)) returned 1 [0295.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0295.686] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0295.686] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382960.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382960.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a3f4)) returned 1 [0295.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0295.686] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0295.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0295.687] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18ac4, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0382961.JPG", cAlternateFileName="")) returned 1 [0295.687] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0295.687] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212360 [0295.687] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0295.687] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212360 | out: hHeap=0x1f0000) returned 1 [0295.687] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0295.687] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0295.687] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382961.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382961.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0295.687] GetFileType (hFile=0x1e0) returned 0x1 [0295.687] CloseHandle (hObject=0x1e0) returned 1 [0295.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0295.688] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382961.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382961.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18ac4)) returned 1 [0295.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0295.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0295.688] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382961.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382961.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18ac4)) returned 1 [0295.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0295.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0295.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0295.688] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bef7, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0382962.JPG", cAlternateFileName="")) returned 1 [0295.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609a0 [0295.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211fa8 [0295.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0295.689] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211fa8 | out: hHeap=0x1f0000) returned 1 [0295.689] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0295.689] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0295.689] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382962.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382962.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0295.689] GetFileType (hFile=0x1e0) returned 0x1 [0295.689] CloseHandle (hObject=0x1e0) returned 1 [0295.689] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0295.689] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382962.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382962.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bef7)) returned 1 [0295.690] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0295.690] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0295.690] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382962.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382962.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bef7)) returned 1 [0295.690] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0295.690] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0295.690] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0295.690] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17dee, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0382963.JPG", cAlternateFileName="")) returned 1 [0295.690] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0295.690] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212030 [0295.690] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0295.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212030 | out: hHeap=0x1f0000) returned 1 [0295.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0295.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0295.691] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382963.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382963.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0295.691] GetFileType (hFile=0x1e0) returned 0x1 [0295.691] CloseHandle (hObject=0x1e0) returned 1 [0295.691] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0295.691] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382963.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382963.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17dee)) returned 1 [0295.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0295.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0295.692] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382963.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382963.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17dee)) returned 1 [0295.692] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0295.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0295.692] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0295.692] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bb02, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0382965.JPG", cAlternateFileName="")) returned 1 [0295.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0295.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2120b8 [0295.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0295.692] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2120b8 | out: hHeap=0x1f0000) returned 1 [0295.692] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0295.692] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0295.692] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382965.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382965.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0295.692] GetFileType (hFile=0x1e0) returned 0x1 [0295.693] CloseHandle (hObject=0x1e0) returned 1 [0295.693] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0295.693] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382965.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382965.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bb02)) returned 1 [0295.693] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0295.693] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0295.693] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382965.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382965.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bb02)) returned 1 [0295.693] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0295.693] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0295.693] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0295.693] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18888, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0382966.JPG", cAlternateFileName="")) returned 1 [0295.693] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0295.693] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211f20 [0295.693] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0295.693] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211f20 | out: hHeap=0x1f0000) returned 1 [0295.693] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0295.694] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0295.694] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382966.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382966.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0295.694] GetFileType (hFile=0x1e0) returned 0x1 [0295.694] CloseHandle (hObject=0x1e0) returned 1 [0295.694] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0295.694] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382966.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382966.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18888)) returned 1 [0295.694] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0295.694] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0295.694] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382966.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382966.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18888)) returned 1 [0295.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0295.695] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0295.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0295.695] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16d08, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0382967.JPG", cAlternateFileName="")) returned 1 [0295.695] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0295.695] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212360 [0295.695] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0295.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212360 | out: hHeap=0x1f0000) returned 1 [0295.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0295.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0295.695] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382967.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382967.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0295.696] GetFileType (hFile=0x1e0) returned 0x1 [0295.696] CloseHandle (hObject=0x1e0) returned 1 [0295.696] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0295.696] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382967.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382967.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16d08)) returned 1 [0295.696] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0295.696] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0295.696] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382967.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382967.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16d08)) returned 1 [0295.696] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0295.696] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0295.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0295.697] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b75f, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0382968.JPG", cAlternateFileName="")) returned 1 [0295.697] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0295.697] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211bf0 [0295.697] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0295.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211bf0 | out: hHeap=0x1f0000) returned 1 [0295.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0295.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0295.697] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382968.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382968.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0295.698] GetFileType (hFile=0x1e0) returned 0x1 [0295.698] CloseHandle (hObject=0x1e0) returned 1 [0295.698] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0295.698] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382968.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382968.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b75f)) returned 1 [0295.698] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0295.698] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0295.698] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382968.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382968.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b75f)) returned 1 [0295.698] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0295.699] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0295.699] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0295.699] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1779f, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0382969.JPG", cAlternateFileName="")) returned 1 [0295.699] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0295.699] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2123e8 [0295.699] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0295.699] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2123e8 | out: hHeap=0x1f0000) returned 1 [0295.699] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0295.699] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0295.699] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382969.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382969.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0295.700] GetFileType (hFile=0x1e0) returned 0x1 [0295.700] CloseHandle (hObject=0x1e0) returned 1 [0295.700] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0295.700] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382969.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382969.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1779f)) returned 1 [0295.700] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0295.700] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0295.700] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382969.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382969.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1779f)) returned 1 [0295.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0295.701] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0295.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0295.701] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15b94, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0382970.JPG", cAlternateFileName="")) returned 1 [0295.701] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0295.701] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211fa8 [0295.701] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0295.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211fa8 | out: hHeap=0x1f0000) returned 1 [0295.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0295.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0295.701] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382970.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382970.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0295.702] GetFileType (hFile=0x1e0) returned 0x1 [0295.702] CloseHandle (hObject=0x1e0) returned 1 [0295.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0295.702] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382970.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382970.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15b94)) returned 1 [0295.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0295.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0295.703] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382970.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382970.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15b94)) returned 1 [0295.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0295.703] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0295.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0295.703] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x190e9, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0384862.JPG", cAlternateFileName="")) returned 1 [0295.703] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0295.703] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0295.703] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0295.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0295.704] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0295.704] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0295.704] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384862.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384862.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0295.705] GetFileType (hFile=0x1e0) returned 0x1 [0295.705] CloseHandle (hObject=0x1e0) returned 1 [0295.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0295.706] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384862.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384862.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x190e9)) returned 1 [0295.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0295.707] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0295.707] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384862.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384862.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x190e9)) returned 1 [0295.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0295.707] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0295.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0295.707] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17b79, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0384885.JPG", cAlternateFileName="")) returned 1 [0295.707] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0295.708] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2124f8 [0295.708] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0295.708] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2124f8 | out: hHeap=0x1f0000) returned 1 [0295.708] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0295.708] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0295.709] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384885.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384885.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0295.709] GetFileType (hFile=0x1e0) returned 0x1 [0295.709] CloseHandle (hObject=0x1e0) returned 1 [0295.710] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0295.710] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384885.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384885.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17b79)) returned 1 [0295.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0295.710] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0295.710] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384885.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384885.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17b79)) returned 1 [0295.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0295.710] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0295.711] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0295.711] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14033, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0384888.JPG", cAlternateFileName="")) returned 1 [0295.711] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0295.711] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2124f8 [0295.711] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0295.711] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2124f8 | out: hHeap=0x1f0000) returned 1 [0295.711] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0295.711] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0295.712] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384888.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384888.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0295.712] GetFileType (hFile=0x1e0) returned 0x1 [0295.713] CloseHandle (hObject=0x1e0) returned 1 [0295.713] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0295.713] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384888.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384888.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14033)) returned 1 [0295.713] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0295.714] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0295.714] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384888.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384888.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14033)) returned 1 [0295.714] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0295.714] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0295.714] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0295.714] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd8f6, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0384895.JPG", cAlternateFileName="")) returned 1 [0295.714] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0295.714] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212360 [0295.715] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0295.715] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212360 | out: hHeap=0x1f0000) returned 1 [0295.715] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0295.715] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0295.716] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384895.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384895.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0295.716] GetFileType (hFile=0x1e0) returned 0x1 [0295.716] CloseHandle (hObject=0x1e0) returned 1 [0295.717] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0295.717] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384895.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384895.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd8f6)) returned 1 [0295.717] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0295.717] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0295.717] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384895.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384895.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd8f6)) returned 1 [0295.717] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0295.717] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0295.718] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0295.718] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11780, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0384900.JPG", cAlternateFileName="")) returned 1 [0295.718] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0295.718] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212608 [0295.718] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0295.718] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212608 | out: hHeap=0x1f0000) returned 1 [0295.718] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0295.718] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0295.719] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384900.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384900.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0295.719] GetFileType (hFile=0x1e0) returned 0x1 [0295.720] CloseHandle (hObject=0x1e0) returned 1 [0296.080] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0296.080] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384900.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384900.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11780)) returned 1 [0296.081] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0296.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0296.081] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384900.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384900.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11780)) returned 1 [0296.081] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0296.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0296.081] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0296.081] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x787a, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0386120.JPG", cAlternateFileName="")) returned 1 [0296.082] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0296.082] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0296.082] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0296.082] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0296.082] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0296.082] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0296.083] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386120.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386120.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0296.246] GetFileType (hFile=0x1ac) returned 0x1 [0296.246] CloseHandle (hObject=0x1ac) returned 1 [0296.246] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0296.246] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386120.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386120.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x787a)) returned 1 [0296.247] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0296.247] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0296.247] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386120.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386120.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x787a)) returned 1 [0296.247] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0296.247] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0296.247] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0296.247] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa91e, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0386267.JPG", cAlternateFileName="")) returned 1 [0296.247] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0296.247] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212470 [0296.248] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0296.248] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212470 | out: hHeap=0x1f0000) returned 1 [0296.248] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0296.248] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0296.249] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386267.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386267.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0296.249] GetFileType (hFile=0x1ac) returned 0x1 [0296.249] CloseHandle (hObject=0x1ac) returned 1 [0296.250] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0296.250] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386267.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386267.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa91e)) returned 1 [0296.250] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0296.250] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0296.250] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386267.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386267.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa91e)) returned 1 [0296.251] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0296.251] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0296.251] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0296.251] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b43, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0386270.JPG", cAlternateFileName="")) returned 1 [0296.251] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0296.251] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0296.251] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0296.252] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0296.252] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0296.252] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0296.253] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386270.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386270.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0296.253] GetFileType (hFile=0x1ac) returned 0x1 [0296.254] CloseHandle (hObject=0x1ac) returned 1 [0296.254] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0296.254] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386270.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386270.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b43)) returned 1 [0296.254] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0296.254] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0296.254] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386270.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386270.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b43)) returned 1 [0296.254] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0296.255] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0296.255] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0296.255] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x396a, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0386485.JPG", cAlternateFileName="")) returned 1 [0296.255] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0296.255] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212828 [0296.255] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0296.255] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212828 | out: hHeap=0x1f0000) returned 1 [0296.255] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0296.255] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0296.256] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386485.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386485.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0296.256] GetFileType (hFile=0x1ac) returned 0x1 [0296.256] CloseHandle (hObject=0x1ac) returned 1 [0296.257] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0296.257] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386485.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386485.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x396a)) returned 1 [0296.257] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0296.257] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0296.257] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386485.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386485.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x396a)) returned 1 [0296.257] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0296.257] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0296.258] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0296.258] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x693e, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0386764.JPG", cAlternateFileName="")) returned 1 [0296.258] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0296.258] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212250 [0296.258] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0296.258] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212250 | out: hHeap=0x1f0000) returned 1 [0296.258] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0296.258] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0296.258] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386764.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386764.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0296.259] GetFileType (hFile=0x1ac) returned 0x1 [0296.259] CloseHandle (hObject=0x1ac) returned 1 [0296.259] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0296.259] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386764.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386764.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x693e)) returned 1 [0296.260] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0296.260] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0296.260] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386764.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386764.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x693e)) returned 1 [0296.260] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0296.260] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0296.260] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0296.260] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcb0a, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0387337.JPG", cAlternateFileName="")) returned 1 [0296.260] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0296.260] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212718 [0296.261] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0296.261] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212718 | out: hHeap=0x1f0000) returned 1 [0296.261] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0296.261] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0296.262] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387337.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387337.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0296.262] GetFileType (hFile=0x1ac) returned 0x1 [0296.262] CloseHandle (hObject=0x1ac) returned 1 [0296.263] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0296.263] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387337.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387337.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcb0a)) returned 1 [0296.263] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0296.263] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0296.263] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387337.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387337.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcb0a)) returned 1 [0296.263] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0296.263] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0296.264] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0296.264] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6cec, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0387578.JPG", cAlternateFileName="")) returned 1 [0296.264] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0296.264] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211e10 [0296.264] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0296.264] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e10 | out: hHeap=0x1f0000) returned 1 [0296.264] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0296.264] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0296.265] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387578.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387578.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0296.265] GetFileType (hFile=0x1ac) returned 0x1 [0296.266] CloseHandle (hObject=0x1ac) returned 1 [0296.266] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0296.266] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387578.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387578.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6cec)) returned 1 [0296.267] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0296.267] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0296.267] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387578.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387578.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6cec)) returned 1 [0296.267] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0296.267] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0296.268] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0296.268] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x98c7, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0387591.JPG", cAlternateFileName="")) returned 1 [0296.268] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0296.268] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212718 [0296.268] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0296.268] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212718 | out: hHeap=0x1f0000) returned 1 [0296.268] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0296.268] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0296.269] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387591.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387591.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0296.269] GetFileType (hFile=0x1ac) returned 0x1 [0296.270] CloseHandle (hObject=0x1ac) returned 1 [0296.270] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0296.270] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387591.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387591.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x98c7)) returned 1 [0296.270] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0296.271] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0296.271] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387591.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387591.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x98c7)) returned 1 [0296.271] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0296.271] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0296.271] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0296.271] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb9bf, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0387604.JPG", cAlternateFileName="")) returned 1 [0296.271] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0296.271] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212470 [0296.271] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0296.271] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212470 | out: hHeap=0x1f0000) returned 1 [0296.272] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0296.272] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0296.272] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387604.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387604.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0296.272] GetFileType (hFile=0x1ac) returned 0x1 [0296.273] CloseHandle (hObject=0x1ac) returned 1 [0296.273] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0296.273] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387604.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387604.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb9bf)) returned 1 [0296.273] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0296.273] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0296.273] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387604.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387604.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb9bf)) returned 1 [0296.273] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0296.274] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0296.274] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0296.274] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x98ec, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0387882.JPG", cAlternateFileName="")) returned 1 [0296.274] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0296.274] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0296.274] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0296.274] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0296.274] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0296.274] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0296.274] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387882.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387882.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0296.275] GetFileType (hFile=0x1ac) returned 0x1 [0296.275] CloseHandle (hObject=0x1ac) returned 1 [0296.275] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0296.275] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387882.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387882.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x98ec)) returned 1 [0296.276] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0296.276] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0296.276] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387882.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387882.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x98ec)) returned 1 [0296.276] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0296.276] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0296.276] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0296.276] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7df3, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0387895.JPG", cAlternateFileName="")) returned 1 [0296.276] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0296.276] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212250 [0296.276] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0296.277] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212250 | out: hHeap=0x1f0000) returned 1 [0296.277] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0296.277] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0296.277] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387895.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387895.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0296.278] GetFileType (hFile=0x1ac) returned 0x1 [0296.278] CloseHandle (hObject=0x1ac) returned 1 [0296.278] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0296.279] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387895.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387895.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7df3)) returned 1 [0296.279] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0296.279] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0296.279] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387895.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387895.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7df3)) returned 1 [0296.279] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0296.279] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0296.279] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0296.279] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x351c, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0390072.JPG", cAlternateFileName="")) returned 1 [0296.279] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0296.279] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0296.280] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0296.280] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0296.280] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0296.280] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0296.280] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0390072.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0390072.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0296.281] GetFileType (hFile=0x1ac) returned 0x1 [0296.281] CloseHandle (hObject=0x1ac) returned 1 [0296.281] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0296.282] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0390072.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0390072.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x351c)) returned 1 [0296.282] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0296.282] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0296.282] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0390072.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0390072.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x351c)) returned 1 [0296.282] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0296.282] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0296.282] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0296.282] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31883, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0400001.PNG", cAlternateFileName="")) returned 1 [0296.282] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0296.282] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2128b0 [0296.283] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0296.283] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2128b0 | out: hHeap=0x1f0000) returned 1 [0296.283] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0296.283] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0296.283] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400001.PNG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400001.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0296.283] GetFileType (hFile=0x1ac) returned 0x1 [0296.284] CloseHandle (hObject=0x1ac) returned 1 [0296.284] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0296.284] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400001.PNG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400001.png"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31883)) returned 1 [0296.284] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0296.284] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0296.284] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400001.PNG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400001.png"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31883)) returned 1 [0296.284] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0296.284] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0296.285] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0296.285] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15d49, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0400002.PNG", cAlternateFileName="")) returned 1 [0296.285] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0296.285] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0296.285] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0296.285] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0296.285] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0296.285] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0296.684] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400002.PNG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400002.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0296.685] GetFileType (hFile=0x1e0) returned 0x1 [0296.685] CloseHandle (hObject=0x1e0) returned 1 [0296.686] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0296.686] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400002.PNG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400002.png"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15d49)) returned 1 [0296.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0296.686] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0296.686] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400002.PNG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400002.png"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15d49)) returned 1 [0296.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0296.686] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0296.687] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0296.687] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e836, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0400003.PNG", cAlternateFileName="")) returned 1 [0296.687] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260838 [0296.687] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2129c0 [0296.687] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0296.687] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2129c0 | out: hHeap=0x1f0000) returned 1 [0296.687] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0296.687] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260838 | out: hHeap=0x1f0000) returned 1 [0296.688] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400003.PNG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400003.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0296.708] GetFileType (hFile=0x1ac) returned 0x1 [0296.709] CloseHandle (hObject=0x1ac) returned 1 [0296.709] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0296.709] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400003.PNG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400003.png"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e836)) returned 1 [0296.709] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0296.710] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0296.710] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400003.PNG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400003.png"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e836)) returned 1 [0296.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0296.710] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0296.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0296.710] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19a5d, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0400004.PNG", cAlternateFileName="")) returned 1 [0296.710] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0296.710] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211fa8 [0296.710] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0296.711] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211fa8 | out: hHeap=0x1f0000) returned 1 [0296.711] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0296.711] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0296.711] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400004.PNG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400004.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0296.885] GetFileType (hFile=0x1ac) returned 0x1 [0296.886] CloseHandle (hObject=0x1ac) returned 1 [0296.886] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0296.886] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400004.PNG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400004.png"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19a5d)) returned 1 [0296.886] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0296.886] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0296.886] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400004.PNG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400004.png"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19a5d)) returned 1 [0296.886] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0296.887] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0296.887] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0296.887] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17742, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="J0400005.PNG", cAlternateFileName="")) returned 1 [0296.887] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0296.887] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211b68 [0296.887] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0296.887] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b68 | out: hHeap=0x1f0000) returned 1 [0296.887] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0296.887] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0297.018] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400005.PNG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400005.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0297.018] GetFileType (hFile=0x1ac) returned 0x1 [0297.019] CloseHandle (hObject=0x1ac) returned 1 [0297.019] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0297.019] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400005.PNG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400005.png"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17742)) returned 1 [0297.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0297.019] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0297.020] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400005.PNG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400005.png"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17742)) returned 1 [0297.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0297.020] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0297.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0297.020] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2645, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="JAVA_01.MID", cAlternateFileName="")) returned 1 [0297.020] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0297.020] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2123e8 [0297.020] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0297.021] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2123e8 | out: hHeap=0x1f0000) returned 1 [0297.021] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0297.021] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0297.021] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JAVA_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\java_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0297.022] GetFileType (hFile=0x1ac) returned 0x1 [0297.022] CloseHandle (hObject=0x1ac) returned 1 [0297.023] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0297.023] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JAVA_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\java_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2645)) returned 1 [0297.023] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0297.023] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0297.023] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JAVA_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\java_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2645)) returned 1 [0297.023] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0297.024] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0297.024] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0297.024] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16d3, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="JNGLE_01.MID", cAlternateFileName="")) returned 1 [0297.024] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0297.024] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2119d0 [0297.024] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0297.024] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2119d0 | out: hHeap=0x1f0000) returned 1 [0297.024] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0297.025] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0297.025] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JNGLE_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\jngle_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0297.026] GetFileType (hFile=0x1ac) returned 0x1 [0297.026] CloseHandle (hObject=0x1ac) returned 1 [0297.027] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0297.027] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JNGLE_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\jngle_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16d3)) returned 1 [0297.027] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0297.027] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0297.027] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JNGLE_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\jngle_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16d3)) returned 1 [0297.028] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0297.028] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0297.028] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0297.028] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15f6, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="MP00021_.WMF", cAlternateFileName="")) returned 1 [0297.028] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0297.028] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2120b8 [0297.028] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0297.029] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2120b8 | out: hHeap=0x1f0000) returned 1 [0297.029] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0297.029] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0297.030] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MP00021_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\mp00021_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0297.030] GetFileType (hFile=0x1ac) returned 0x1 [0297.031] CloseHandle (hObject=0x1ac) returned 1 [0297.031] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0297.031] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MP00021_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\mp00021_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15f6)) returned 1 [0297.031] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0297.032] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0297.032] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MP00021_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\mp00021_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15f6)) returned 1 [0297.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0297.032] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0297.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0297.032] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1090, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="MP00132_.WMF", cAlternateFileName="")) returned 1 [0297.033] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0297.033] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211948 [0297.033] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0297.034] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211948 | out: hHeap=0x1f0000) returned 1 [0297.034] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0297.034] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0297.035] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MP00132_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\mp00132_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0297.035] GetFileType (hFile=0x1ac) returned 0x1 [0297.036] CloseHandle (hObject=0x1ac) returned 1 [0297.036] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0297.036] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MP00132_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\mp00132_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1090)) returned 1 [0297.037] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0297.037] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0297.037] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MP00132_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\mp00132_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1090)) returned 1 [0297.037] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0297.037] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0297.037] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0297.038] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31e2, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="MP00646_.WMF", cAlternateFileName="")) returned 1 [0297.038] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0297.038] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2119d0 [0297.038] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0297.038] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2119d0 | out: hHeap=0x1f0000) returned 1 [0297.038] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0297.038] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0297.039] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MP00646_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\mp00646_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0297.039] GetFileType (hFile=0x1ac) returned 0x1 [0297.040] CloseHandle (hObject=0x1ac) returned 1 [0297.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0297.041] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MP00646_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\mp00646_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31e2)) returned 1 [0297.041] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0297.041] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0297.041] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MP00646_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\mp00646_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31e2)) returned 1 [0297.041] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0297.041] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0297.042] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0297.042] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ae0, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="MUSIC_01.MID", cAlternateFileName="")) returned 1 [0297.042] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0297.042] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212030 [0297.042] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0297.042] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212030 | out: hHeap=0x1f0000) returned 1 [0297.042] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0297.043] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0297.043] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MUSIC_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\music_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0297.044] GetFileType (hFile=0x1ac) returned 0x1 [0297.044] CloseHandle (hObject=0x1ac) returned 1 [0297.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0297.045] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MUSIC_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\music_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ae0)) returned 1 [0297.045] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0297.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0297.045] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MUSIC_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\music_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ae0)) returned 1 [0297.045] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0297.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0297.046] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0297.046] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5044, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="NA00042_.WMF", cAlternateFileName="")) returned 1 [0297.046] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0297.046] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2120b8 [0297.046] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0297.046] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2120b8 | out: hHeap=0x1f0000) returned 1 [0297.046] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0297.046] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0297.047] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00042_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00042_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0297.048] GetFileType (hFile=0x1ac) returned 0x1 [0297.048] CloseHandle (hObject=0x1ac) returned 1 [0297.049] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0297.049] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00042_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00042_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5044)) returned 1 [0297.049] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0297.050] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0297.050] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00042_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00042_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5044)) returned 1 [0297.050] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0297.050] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0297.050] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0297.050] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a42, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="NA00057_.WMF", cAlternateFileName="")) returned 1 [0297.051] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0297.051] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211a58 [0297.051] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0297.051] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211a58 | out: hHeap=0x1f0000) returned 1 [0297.051] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0297.051] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0297.052] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00057_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00057_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0297.052] GetFileType (hFile=0x1ac) returned 0x1 [0297.053] CloseHandle (hObject=0x1ac) returned 1 [0297.053] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0297.054] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00057_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00057_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a42)) returned 1 [0297.054] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0297.054] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0297.054] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00057_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00057_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a42)) returned 1 [0297.054] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0297.054] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0297.055] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0297.055] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xeaa, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="NA00058_.WMF", cAlternateFileName="")) returned 1 [0297.055] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0297.055] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212608 [0297.055] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0297.055] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212608 | out: hHeap=0x1f0000) returned 1 [0297.055] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0297.055] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0297.056] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00058_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00058_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0297.056] GetFileType (hFile=0x1ac) returned 0x1 [0297.057] CloseHandle (hObject=0x1ac) returned 1 [0297.057] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0297.058] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00058_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00058_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xeaa)) returned 1 [0297.058] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0297.058] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0297.058] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00058_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00058_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xeaa)) returned 1 [0297.058] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0297.058] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0297.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0297.059] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1324, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="NA00068_.WMF", cAlternateFileName="")) returned 1 [0297.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0297.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2120b8 [0297.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0297.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2120b8 | out: hHeap=0x1f0000) returned 1 [0297.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0297.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0297.060] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00068_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00068_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0297.061] GetFileType (hFile=0x1ac) returned 0x1 [0297.061] CloseHandle (hObject=0x1ac) returned 1 [0297.062] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0297.062] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00068_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00068_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1324)) returned 1 [0297.062] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0297.062] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0297.062] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00068_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00068_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1324)) returned 1 [0297.063] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0297.063] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0297.063] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0297.063] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1384, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="NA00238_.WMF", cAlternateFileName="")) returned 1 [0297.063] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0297.063] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2124f8 [0297.063] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0297.064] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2124f8 | out: hHeap=0x1f0000) returned 1 [0297.064] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0297.064] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0297.482] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00238_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00238_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0297.483] GetFileType (hFile=0x1e0) returned 0x1 [0297.483] CloseHandle (hObject=0x1e0) returned 1 [0297.483] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0297.483] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00238_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00238_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1384)) returned 1 [0297.484] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0297.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0297.484] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00238_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00238_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1384)) returned 1 [0297.484] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0297.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0297.484] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0297.484] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x864, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="NA00330_.WMF", cAlternateFileName="")) returned 1 [0297.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260770 [0297.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212470 [0297.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0297.485] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212470 | out: hHeap=0x1f0000) returned 1 [0297.485] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0297.485] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0297.485] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00330_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00330_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0297.486] GetFileType (hFile=0x1e0) returned 0x1 [0297.487] CloseHandle (hObject=0x1e0) returned 1 [0297.487] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0297.488] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00330_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00330_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x864)) returned 1 [0297.488] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0297.488] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0297.488] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00330_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00330_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x864)) returned 1 [0297.488] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0297.488] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0297.488] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0297.488] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1172, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="NA00388_.WMF", cAlternateFileName="")) returned 1 [0297.488] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260770 [0297.489] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211b68 [0297.489] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0297.489] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b68 | out: hHeap=0x1f0000) returned 1 [0297.489] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0297.489] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0297.489] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00388_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00388_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0297.489] GetFileType (hFile=0x1e0) returned 0x1 [0297.490] CloseHandle (hObject=0x1e0) returned 1 [0297.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0297.490] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00388_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00388_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1172)) returned 1 [0297.490] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0297.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0297.490] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00388_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00388_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1172)) returned 1 [0297.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0297.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0297.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0297.491] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20ca, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="NA00389_.WMF", cAlternateFileName="")) returned 1 [0297.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609a0 [0297.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212360 [0297.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0297.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212360 | out: hHeap=0x1f0000) returned 1 [0297.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0297.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0297.492] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00389_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00389_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0297.492] GetFileType (hFile=0x1e0) returned 0x1 [0297.492] CloseHandle (hObject=0x1e0) returned 1 [0297.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0297.493] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00389_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00389_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20ca)) returned 1 [0297.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0297.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0297.493] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00389_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00389_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20ca)) returned 1 [0297.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0297.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0297.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0297.493] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21c2, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="NA00390_.WMF", cAlternateFileName="")) returned 1 [0297.494] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260770 [0297.494] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211b68 [0297.494] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0297.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b68 | out: hHeap=0x1f0000) returned 1 [0297.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0297.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0297.495] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00390_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00390_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0297.495] GetFileType (hFile=0x1e0) returned 0x1 [0297.495] CloseHandle (hObject=0x1e0) returned 1 [0297.496] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0297.496] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00390_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00390_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21c2)) returned 1 [0297.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0297.496] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0297.496] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00390_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00390_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21c2)) returned 1 [0297.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0297.496] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0297.497] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0297.497] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21ec, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="NA00391_.WMF", cAlternateFileName="")) returned 1 [0297.497] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0297.497] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212938 [0297.497] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0297.497] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212938 | out: hHeap=0x1f0000) returned 1 [0297.497] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0297.497] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0297.498] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00391_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00391_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0297.498] GetFileType (hFile=0x1e0) returned 0x1 [0297.499] CloseHandle (hObject=0x1e0) returned 1 [0297.499] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0297.499] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00391_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00391_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21ec)) returned 1 [0297.499] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0297.500] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0297.500] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00391_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00391_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21ec)) returned 1 [0297.500] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0297.500] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0297.500] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0297.500] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ad4, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="NA00394_.WMF", cAlternateFileName="")) returned 1 [0297.500] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260770 [0297.501] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212938 [0297.501] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0297.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212938 | out: hHeap=0x1f0000) returned 1 [0297.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0297.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0297.504] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00394_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00394_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0297.504] GetFileType (hFile=0x1e0) returned 0x1 [0297.505] CloseHandle (hObject=0x1e0) returned 1 [0297.505] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0297.505] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00394_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00394_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ad4)) returned 1 [0297.506] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0297.506] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0297.506] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00394_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00394_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ad4)) returned 1 [0297.506] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0297.506] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0297.506] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0297.506] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x194a, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="NA00395_.WMF", cAlternateFileName="")) returned 1 [0297.506] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0297.506] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211fa8 [0297.506] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0297.506] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211fa8 | out: hHeap=0x1f0000) returned 1 [0297.507] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0297.507] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0297.507] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00395_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00395_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0297.507] GetFileType (hFile=0x1e0) returned 0x1 [0297.508] CloseHandle (hObject=0x1e0) returned 1 [0297.508] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0297.508] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00395_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00395_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x194a)) returned 1 [0297.508] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0297.509] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0297.509] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00395_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00395_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x194a)) returned 1 [0297.509] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0297.509] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0297.509] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0297.509] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x38c6, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="NA00396_.WMF", cAlternateFileName="")) returned 1 [0297.509] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0297.509] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212140 [0297.509] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0297.510] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212140 | out: hHeap=0x1f0000) returned 1 [0297.510] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0297.510] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0297.510] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00396_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00396_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0297.511] GetFileType (hFile=0x1e0) returned 0x1 [0297.511] CloseHandle (hObject=0x1e0) returned 1 [0297.511] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0297.512] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00396_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00396_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x38c6)) returned 1 [0297.512] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0297.512] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0297.512] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00396_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00396_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x38c6)) returned 1 [0297.512] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0297.512] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0297.512] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0297.512] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x173e, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="NA00417_.WMF", cAlternateFileName="")) returned 1 [0297.512] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0297.513] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d88 [0297.513] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0297.513] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d88 | out: hHeap=0x1f0000) returned 1 [0297.513] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0297.513] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0297.513] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00417_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00417_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0297.514] GetFileType (hFile=0x1e0) returned 0x1 [0297.514] CloseHandle (hObject=0x1e0) returned 1 [0297.514] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0297.515] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00417_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00417_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x173e)) returned 1 [0297.515] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0297.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0297.515] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00417_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00417_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x173e)) returned 1 [0297.515] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0297.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0297.515] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0297.516] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4696, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="NA00433_.WMF", cAlternateFileName="")) returned 1 [0297.516] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0297.516] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211b68 [0297.516] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0297.516] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b68 | out: hHeap=0x1f0000) returned 1 [0297.516] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0297.516] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0297.517] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00433_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00433_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1cfde20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0297.778] GetFileType (hFile=0x1e0) returned 0x1 [0297.826] CloseHandle (hObject=0x1e0) returned 1 [0297.826] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0297.826] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00433_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00433_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdeb4 | out: lpFileInformation=0x1cfdeb4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4696)) returned 1 [0297.827] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0297.827] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0297.827] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00433_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00433_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1cfdebc | out: lpFileInformation=0x1cfdebc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4696)) returned 1 [0297.827] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0297.827] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0297.827] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0297.827] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1cfe058 | out: lpFindFileData=0x1cfe058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2f38, dwReserved0=0x20002, dwReserved1=0x2ae46e, cFileName="NA00438_.WMF", cAlternateFileName="")) returned 1 [0297.827] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0297.827] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211bf0 [0297.827] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0297.827] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211bf0 | out: hHeap=0x1f0000) returned 1 [0297.827] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0297.827] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 Thread: id = 149 os_tid = 0xe64 [0192.461] GetLastError () returned 0x57 [0192.462] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x364) returned 0x226660 [0192.462] SetLastError (dwErrCode=0x57) [0192.462] GetCurrentThreadId () returned 0xe64 [0192.462] GetCurrentThreadId () returned 0xe64 [0192.463] RtlWakeConditionVariable (in: ConditionVariable=0x2065fc | out: ConditionVariable=0x2065fc) [0192.466] FindFirstFileW (in: lpFileName="C:\\\\*", lpFindFileData=0x1fdfba8 | out: lpFindFileData=0x1fdfba8*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="$GetCurrent", cAlternateFileName="$GETCU~1")) returned 0x2142d0 [0192.467] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20bc60 [0192.467] lstrcmpW (lpString1="$GetCurrent", lpString2=".") returned -1 [0192.467] lstrcmpW (lpString1="$GetCurrent", lpString2="..") returned -1 [0192.467] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x205130 [0192.467] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20bbc0 [0192.467] FindNextFileW (in: hFindFile=0x2142d0, lpFindFileData=0x1fdfba8 | out: lpFindFileData=0x1fdfba8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="$Recycle.Bin", cAlternateFileName="")) returned 1 [0192.470] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20bb70 [0192.470] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf38 [0192.471] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20bc60 | out: hHeap=0x1f0000) returned 1 [0192.471] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20bb70 | out: hHeap=0x1f0000) returned 1 [0192.471] lstrcmpW (lpString1="$Recycle.Bin", lpString2=".") returned -1 [0192.471] lstrcmpW (lpString1="$Recycle.Bin", lpString2="..") returned -1 [0192.471] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0192.471] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1ff090 [0192.471] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205130 | out: hHeap=0x1f0000) returned 1 [0192.471] FindNextFileW (in: hFindFile=0x2142d0, lpFindFileData=0x1fdfba8 | out: lpFindFileData=0x1fdfba8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x85776261, ftCreationTime.dwHighDateTime=0x1d3276f, ftLastAccessTime.dwLowDateTime=0x85776261, ftLastAccessTime.dwHighDateTime=0x1d3276f, ftLastWriteTime.dwLowDateTime=0x85776261, ftLastWriteTime.dwHighDateTime=0x1d3276f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="$WINRE_BACKUP_PARTITION.MARKER", cAlternateFileName="$WINRE~1.MAR")) returned 1 [0192.472] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x213c60 [0192.472] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x215860 [0192.472] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf38 | out: hHeap=0x1f0000) returned 1 [0192.472] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213c60 | out: hHeap=0x1f0000) returned 1 [0192.473] CreateFileW (lpFileName="C:\\\\$WINRE_BACKUP_PARTITION.MARKER" (normalized: "c:\\$winre_backup_partition.marker"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf970, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc [0192.473] GetFileType (hFile=0x1cc) returned 0x1 [0192.473] CloseHandle (hObject=0x1cc) returned 1 [0192.474] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x20b478 [0192.474] GetFileAttributesExW (in: lpFileName="C:\\\\$WINRE_BACKUP_PARTITION.MARKER" (normalized: "c:\\$winre_backup_partition.marker"), fInfoLevelId=0x0, lpFileInformation=0x1fdfa04 | out: lpFileInformation=0x1fdfa04*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x85776261, ftCreationTime.dwHighDateTime=0x1d3276f, ftLastAccessTime.dwLowDateTime=0x85776261, ftLastAccessTime.dwHighDateTime=0x1d3276f, ftLastWriteTime.dwLowDateTime=0x85776261, ftLastWriteTime.dwHighDateTime=0x1d3276f, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0192.474] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b478 | out: hHeap=0x1f0000) returned 1 [0192.474] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x20b478 [0192.474] GetFileAttributesExW (in: lpFileName="C:\\\\$WINRE_BACKUP_PARTITION.MARKER" (normalized: "c:\\$winre_backup_partition.marker"), fInfoLevelId=0x0, lpFileInformation=0x1fdfa0c | out: lpFileInformation=0x1fdfa0c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x85776261, ftCreationTime.dwHighDateTime=0x1d3276f, ftLastAccessTime.dwLowDateTime=0x85776261, ftLastAccessTime.dwHighDateTime=0x1d3276f, ftLastWriteTime.dwLowDateTime=0x85776261, ftLastWriteTime.dwHighDateTime=0x1d3276f, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0192.474] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b478 | out: hHeap=0x1f0000) returned 1 [0192.474] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x20b478 [0192.475] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b478 | out: hHeap=0x1f0000) returned 1 [0192.475] FindNextFileW (in: hFindFile=0x2142d0, lpFindFileData=0x1fdfba8 | out: lpFindFileData=0x1fdfba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf39a4e7e, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf74cd515, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="588bce7c90097ed212", cAlternateFileName="588BCE~1")) returned 1 [0192.475] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf38 [0192.475] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215860 | out: hHeap=0x1f0000) returned 1 [0192.475] lstrcmpW (lpString1="588bce7c90097ed212", lpString2=".") returned 1 [0192.475] lstrcmpW (lpString1="588bce7c90097ed212", lpString2="..") returned 1 [0192.475] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x48) returned 0x225bf8 [0192.475] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228000 [0192.475] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0192.475] FindNextFileW (in: hFindFile=0x2142d0, lpFindFileData=0x1fdfba8 | out: lpFindFileData=0x1fdfba8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6fa258, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6fa258, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Boot", cAlternateFileName="")) returned 1 [0192.475] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20bb70 [0192.475] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf38 | out: hHeap=0x1f0000) returned 1 [0192.476] lstrcmpW (lpString1="Boot", lpString2=".") returned 1 [0192.476] lstrcmpW (lpString1="Boot", lpString2="..") returned 1 [0192.476] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x215860 [0192.476] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20bad0 [0192.476] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225bf8 | out: hHeap=0x1f0000) returned 1 [0192.476] FindNextFileW (in: hFindFile=0x2142d0, lpFindFileData=0x1fdfba8 | out: lpFindFileData=0x1fdfba8*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xe47a48a8, ftCreationTime.dwHighDateTime=0x1d112ea, ftLastAccessTime.dwLowDateTime=0xef6fa258, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfb90936b, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0x607da, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr", cAlternateFileName="")) returned 1 [0192.476] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20bc60 [0192.476] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20bb70 | out: hHeap=0x1f0000) returned 1 [0192.476] CreateFileW (lpFileName="C:\\\\bootmgr" (normalized: "c:\\bootmgr"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf970, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0192.477] GetLastError () returned 0x5 [0192.477] GetLastError () returned 0x5 [0192.477] SetLastError (dwErrCode=0x5) [0192.477] GetLastError () returned 0x5 [0192.477] SetLastError (dwErrCode=0x5) [0192.477] GetLastError () returned 0x5 [0192.478] SetLastError (dwErrCode=0x5) [0192.478] FindNextFileW (in: hFindFile=0x2142d0, lpFindFileData=0x1fdfba8 | out: lpFindFileData=0x1fdfba8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xe5533ee0, ftCreationTime.dwHighDateTime=0x1d112ea, ftLastAccessTime.dwLowDateTime=0xef9d0a0c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x1, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTNXT", cAlternateFileName="")) returned 1 [0192.478] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20bd00 [0192.478] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20bc60 | out: hHeap=0x1f0000) returned 1 [0192.478] CreateFileW (lpFileName="C:\\\\BOOTNXT" (normalized: "c:\\bootnxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf970, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc [0192.479] GetFileType (hFile=0x1cc) returned 0x1 [0192.479] CloseHandle (hObject=0x1cc) returned 1 [0192.479] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20bcd8 [0192.480] GetFileAttributesExW (in: lpFileName="C:\\\\BOOTNXT" (normalized: "c:\\bootnxt"), fInfoLevelId=0x0, lpFileInformation=0x1fdfa04 | out: lpFileInformation=0x1fdfa04*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xe5533ee0, ftCreationTime.dwHighDateTime=0x1d112ea, ftLastAccessTime.dwLowDateTime=0xef9d0a0c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x1)) returned 1 [0192.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20bcd8 | out: hHeap=0x1f0000) returned 1 [0192.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20bb70 [0192.480] GetFileAttributesExW (in: lpFileName="C:\\\\BOOTNXT" (normalized: "c:\\bootnxt"), fInfoLevelId=0x0, lpFileInformation=0x1fdfa0c | out: lpFileInformation=0x1fdfa0c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xe5533ee0, ftCreationTime.dwHighDateTime=0x1d112ea, ftLastAccessTime.dwLowDateTime=0xef9d0a0c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x1)) returned 1 [0192.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20bb70 | out: hHeap=0x1f0000) returned 1 [0192.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20bbe8 [0192.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20bbe8 | out: hHeap=0x1f0000) returned 1 [0192.481] FindNextFileW (in: hFindFile=0x2142d0, lpFindFileData=0x1fdfba8 | out: lpFindFileData=0x1fdfba8*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xc4ee267e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4ee267e, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xf1c63cdd, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTSECT.BAK", cAlternateFileName="")) returned 1 [0192.481] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20bcd8 [0192.481] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2280e0 [0192.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20bd00 | out: hHeap=0x1f0000) returned 1 [0192.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20bcd8 | out: hHeap=0x1f0000) returned 1 [0192.481] CreateFileW (lpFileName="C:\\\\BOOTSECT.BAK" (normalized: "c:\\bootsect.bak"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf970, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0192.482] GetLastError () returned 0x5 [0192.482] GetLastError () returned 0x5 [0192.482] SetLastError (dwErrCode=0x5) [0192.482] GetLastError () returned 0x5 [0192.482] SetLastError (dwErrCode=0x5) [0192.482] GetLastError () returned 0x5 [0192.483] SetLastError (dwErrCode=0x5) [0192.483] FindNextFileW (in: hFindFile=0x2142d0, lpFindFileData=0x1fdfba8 | out: lpFindFileData=0x1fdfba8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xe99f01ae, ftCreationTime.dwHighDateTime=0x1d32708, ftLastAccessTime.dwLowDateTime=0xe99f01ae, ftLastAccessTime.dwHighDateTime=0x1d32708, ftLastWriteTime.dwLowDateTime=0xe99f01ae, ftLastWriteTime.dwHighDateTime=0x1d32708, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents and Settings", cAlternateFileName="DOCUME~1")) returned 1 [0192.483] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228070 [0192.483] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x213c60 [0192.483] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2280e0 | out: hHeap=0x1f0000) returned 1 [0192.483] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228070 | out: hHeap=0x1f0000) returned 1 [0192.483] lstrcmpW (lpString1="Documents and Settings", lpString2=".") returned 1 [0192.483] lstrcmpW (lpString1="Documents and Settings", lpString2="..") returned 1 [0192.483] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x228378 [0192.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228c20 [0192.484] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215860 | out: hHeap=0x1f0000) returned 1 [0192.485] FindNextFileW (in: hFindFile=0x2142d0, lpFindFileData=0x1fdfba8 | out: lpFindFileData=0x1fdfba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc1969407, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ESD", cAlternateFileName="")) returned 1 [0192.485] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213c60 | out: hHeap=0x1f0000) returned 1 [0192.485] lstrcmpW (lpString1="ESD", lpString2=".") returned 1 [0192.485] lstrcmpW (lpString1="ESD", lpString2="..") returned 1 [0192.485] FindNextFileW (in: hFindFile=0x2142d0, lpFindFileData=0x1fdfba8 | out: lpFindFileData=0x1fdfba8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x7ef2dddf, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x7ef2dddf, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x96715303, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x332fe000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hiberfil.sys", cAlternateFileName="")) returned 1 [0192.485] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20bcd8 [0192.485] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227f20 [0192.485] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20bcd8 | out: hHeap=0x1f0000) returned 1 [0192.486] CreateFileW (lpFileName="C:\\\\hiberfil.sys" (normalized: "c:\\hiberfil.sys"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf970, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0192.486] GetLastError () returned 0x20 [0192.486] GetLastError () returned 0x20 [0192.486] SetLastError (dwErrCode=0x20) [0192.486] GetLastError () returned 0x20 [0192.486] SetLastError (dwErrCode=0x20) [0192.487] GetLastError () returned 0x20 [0192.487] SetLastError (dwErrCode=0x20) [0192.487] FindNextFileW (in: hFindFile=0x2142d0, lpFindFileData=0x1fdfba8 | out: lpFindFileData=0x1fdfba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf1d773, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xa03727f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xfd9ec80, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Logs", cAlternateFileName="")) returned 1 [0192.487] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20bc60 [0192.487] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227f20 | out: hHeap=0x1f0000) returned 1 [0192.487] lstrcmpW (lpString1="Logs", lpString2=".") returned 1 [0192.487] lstrcmpW (lpString1="Logs", lpString2="..") returned 1 [0192.487] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd8) returned 0x229418 [0192.487] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20bb70 [0192.488] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228378 | out: hHeap=0x1f0000) returned 1 [0192.488] FindNextFileW (in: hFindFile=0x2142d0, lpFindFileData=0x1fdfba8 | out: lpFindFileData=0x1fdfba8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6e97b025, ftCreationTime.dwHighDateTime=0x1d3275c, ftLastAccessTime.dwLowDateTime=0x6e97b025, ftLastAccessTime.dwHighDateTime=0x1d3275c, ftLastWriteTime.dwLowDateTime=0x98f4eb01, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x28000000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pagefile.sys", cAlternateFileName="")) returned 1 [0192.488] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20bcd8 [0192.488] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227d28 [0192.488] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20bc60 | out: hHeap=0x1f0000) returned 1 [0192.488] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20bcd8 | out: hHeap=0x1f0000) returned 1 [0192.488] CreateFileW (lpFileName="C:\\\\pagefile.sys" (normalized: "c:\\pagefile.sys"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf970, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0192.488] GetLastError () returned 0x20 [0192.489] GetLastError () returned 0x20 [0192.489] SetLastError (dwErrCode=0x20) [0192.489] GetLastError () returned 0x20 [0192.489] SetLastError (dwErrCode=0x20) [0192.489] GetLastError () returned 0x20 [0192.489] SetLastError (dwErrCode=0x20) [0192.489] FindNextFileW (in: hFindFile=0x2142d0, lpFindFileData=0x1fdfba8 | out: lpFindFileData=0x1fdfba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa03748ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17b3dd09, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PerfLogs", cAlternateFileName="")) returned 1 [0192.489] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20bbe8 [0192.489] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227d28 | out: hHeap=0x1f0000) returned 1 [0192.489] lstrcmpW (lpString1="PerfLogs", lpString2=".") returned 1 [0192.490] lstrcmpW (lpString1="PerfLogs", lpString2="..") returned 1 [0192.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20bc60 [0192.490] FindNextFileW (in: hFindFile=0x2142d0, lpFindFileData=0x1fdfba8 | out: lpFindFileData=0x1fdfba8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3ac6234, ftLastAccessTime.dwHighDateTime=0x1d5c65b, ftLastWriteTime.dwLowDateTime=0x3ac6234, ftLastWriteTime.dwHighDateTime=0x1d5c65b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Program Files", cAlternateFileName="PROGRA~1")) returned 1 [0192.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20bcd8 [0192.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227e08 [0192.490] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20bbe8 | out: hHeap=0x1f0000) returned 1 [0192.490] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20bcd8 | out: hHeap=0x1f0000) returned 1 [0192.490] lstrcmpW (lpString1="Program Files", lpString2=".") returned 1 [0192.490] lstrcmpW (lpString1="Program Files", lpString2="..") returned 1 [0192.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227f58 [0192.491] FindNextFileW (in: hFindFile=0x2142d0, lpFindFileData=0x1fdfba8 | out: lpFindFileData=0x1fdfba8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe7511354, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe7511354, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Program Files (x86)", cAlternateFileName="PROGRA~2")) returned 1 [0192.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2280e0 [0192.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227e08 | out: hHeap=0x1f0000) returned 1 [0192.491] lstrcmpW (lpString1="Program Files (x86)", lpString2=".") returned 1 [0192.491] lstrcmpW (lpString1="Program Files (x86)", lpString2="..") returned 1 [0192.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x138) returned 0x2294f8 [0192.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227c48 [0192.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0192.491] FindNextFileW (in: hFindFile=0x2142d0, lpFindFileData=0x1fdfba8 | out: lpFindFileData=0x1fdfba8*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x450f4738, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x450f4738, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ProgramData", cAlternateFileName="PROGRA~3")) returned 1 [0192.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20baa8 [0192.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2280e0 | out: hHeap=0x1f0000) returned 1 [0192.491] lstrcmpW (lpString1="ProgramData", lpString2=".") returned 1 [0192.492] lstrcmpW (lpString1="ProgramData", lpString2="..") returned 1 [0192.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20bbe8 [0192.492] FindNextFileW (in: hFindFile=0x2142d0, lpFindFileData=0x1fdfba8 | out: lpFindFileData=0x1fdfba8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28e9c3a2, ftCreationTime.dwHighDateTime=0x1d32795, ftLastAccessTime.dwLowDateTime=0x1044dfc5, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x1044dfc5, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Recovery", cAlternateFileName="")) returned 1 [0192.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20bcd8 [0192.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20baa8 | out: hHeap=0x1f0000) returned 1 [0192.492] lstrcmpW (lpString1="Recovery", lpString2=".") returned 1 [0192.492] lstrcmpW (lpString1="Recovery", lpString2="..") returned 1 [0192.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20baa8 [0192.492] FindNextFileW (in: hFindFile=0x2142d0, lpFindFileData=0x1fdfba8 | out: lpFindFileData=0x1fdfba8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6ead2556, ftCreationTime.dwHighDateTime=0x1d3275c, ftLastAccessTime.dwLowDateTime=0x6ead2556, ftLastAccessTime.dwHighDateTime=0x1d3275c, ftLastWriteTime.dwLowDateTime=0x98f74cd7, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x10000000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="swapfile.sys", cAlternateFileName="")) returned 1 [0192.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20bd00 [0192.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ba0 [0192.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20bcd8 | out: hHeap=0x1f0000) returned 1 [0192.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20bd00 | out: hHeap=0x1f0000) returned 1 [0192.493] CreateFileW (lpFileName="C:\\\\swapfile.sys" (normalized: "c:\\swapfile.sys"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf970, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0192.493] GetLastError () returned 0x20 [0192.493] GetLastError () returned 0x20 [0192.494] SetLastError (dwErrCode=0x20) [0192.494] GetLastError () returned 0x20 [0192.494] SetLastError (dwErrCode=0x20) [0192.494] GetLastError () returned 0x20 [0192.494] SetLastError (dwErrCode=0x20) [0192.494] FindNextFileW (in: hFindFile=0x2142d0, lpFindFileData=0x1fdfba8 | out: lpFindFileData=0x1fdfba8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x6e16f135, ftCreationTime.dwHighDateTime=0x1d3275c, ftLastAccessTime.dwLowDateTime=0xb1ff7ba5, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xb1ff7ba5, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="System Volume Information", cAlternateFileName="SYSTEM~1")) returned 1 [0192.494] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228680 [0192.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ba0 | out: hHeap=0x1f0000) returned 1 [0192.494] lstrcmpW (lpString1="System Volume Information", lpString2=".") returned 1 [0192.494] lstrcmpW (lpString1="System Volume Information", lpString2="..") returned 1 [0192.495] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228560 [0192.495] FindNextFileW (in: hFindFile=0x2142d0, lpFindFileData=0x1fdfba8 | out: lpFindFileData=0x1fdfba8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x475bb883, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x475bb883, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 1 [0192.495] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20bd28 [0192.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228680 | out: hHeap=0x1f0000) returned 1 [0192.495] lstrcmpW (lpString1="Users", lpString2=".") returned 1 [0192.495] lstrcmpW (lpString1="Users", lpString2="..") returned 1 [0192.495] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c8) returned 0x229638 [0192.495] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20bcd8 [0192.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2294f8 | out: hHeap=0x1f0000) returned 1 [0192.495] FindNextFileW (in: hFindFile=0x2142d0, lpFindFileData=0x1fdfba8 | out: lpFindFileData=0x1fdfba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0xc838b81d, ftLastAccessTime.dwHighDateTime=0x1d41dc3, ftLastWriteTime.dwLowDateTime=0xc838b81d, ftLastWriteTime.dwHighDateTime=0x1d41dc3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0192.495] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20bd00 [0192.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20bd28 | out: hHeap=0x1f0000) returned 1 [0192.495] lstrcmpW (lpString1="Windows", lpString2=".") returned 1 [0192.495] lstrcmpW (lpString1="Windows", lpString2="..") returned 1 [0192.496] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20bd28 [0192.496] FindNextFileW (in: hFindFile=0x2142d0, lpFindFileData=0x1fdfba8 | out: lpFindFileData=0x1fdfba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea34fa37, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xccdc86a8, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xccdc86a8, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows10Upgrade", cAlternateFileName="WINDOW~1")) returned 1 [0192.496] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2280a8 [0192.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20bd00 | out: hHeap=0x1f0000) returned 1 [0192.496] lstrcmpW (lpString1="Windows10Upgrade", lpString2=".") returned 1 [0192.496] lstrcmpW (lpString1="Windows10Upgrade", lpString2="..") returned 1 [0192.496] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227f90 [0192.496] FindNextFileW (in: hFindFile=0x2142d0, lpFindFileData=0x1fdfba8 | out: lpFindFileData=0x1fdfba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea34fa37, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xccdc86a8, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xccdc86a8, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows10Upgrade", cAlternateFileName="WINDOW~1")) returned 0 [0192.496] FindClose (in: hFindFile=0x2142d0 | out: hFindFile=0x2142d0) returned 1 [0192.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229298 [0192.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b840 [0192.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x232b80 [0192.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228150 [0192.660] FindFirstFileW (in: lpFileName="C:\\\\$GetCurrent\\*", lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x214190 [0192.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2281f8 [0192.660] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228150 | out: hHeap=0x1f0000) returned 1 [0192.660] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0192.660] FindNextFileW (in: hFindFile=0x214190, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0192.661] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0192.661] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2281f8 | out: hHeap=0x1f0000) returned 1 [0192.661] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0192.661] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0192.661] FindNextFileW (in: hFindFile=0x214190, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0xbc173b97, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xbc173b97, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Logs", cAlternateFileName="")) returned 1 [0192.661] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227d60 [0192.661] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0192.662] lstrcmpW (lpString1="Logs", lpString2=".") returned 1 [0192.662] lstrcmpW (lpString1="Logs", lpString2="..") returned 1 [0192.662] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x205130 [0192.662] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228150 [0192.662] FindNextFileW (in: hFindFile=0x214190, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SafeOS", cAlternateFileName="")) returned 1 [0192.662] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227e40 [0192.662] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227d60 | out: hHeap=0x1f0000) returned 1 [0192.662] lstrcmpW (lpString1="SafeOS", lpString2=".") returned 1 [0192.662] lstrcmpW (lpString1="SafeOS", lpString2="..") returned 1 [0192.662] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2281f8 [0192.663] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227e78 [0192.663] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205130 | out: hHeap=0x1f0000) returned 1 [0192.663] FindNextFileW (in: hFindFile=0x214190, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SafeOS", cAlternateFileName="")) returned 0 [0192.663] FindClose (in: hFindFile=0x214190 | out: hFindFile=0x214190) returned 1 [0192.663] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229058 [0192.663] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b868 [0192.663] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x232d18 [0192.664] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0192.664] FindFirstFileW (in: lpFileName="C:\\\\$GetCurrent\\Logs\\*", lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0xbc173b97, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xbc173b97, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x773bbccb, dwReserved1=0x1f7676, cFileName=".", cAlternateFileName="")) returned 0x214150 [0192.664] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228268 [0192.664] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0192.664] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0192.664] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0xbc173b97, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xbc173b97, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x773bbccb, dwReserved1=0x1f7676, cFileName="..", cAlternateFileName="")) returned 1 [0192.664] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227fc8 [0192.664] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228268 | out: hHeap=0x1f0000) returned 1 [0192.664] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0192.665] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0192.665] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x542c8aac, ftLastAccessTime.dwHighDateTime=0x1d3273a, ftLastWriteTime.dwLowDateTime=0xbc4f075d, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x1, dwReserved0=0x773bbccb, dwReserved1=0x1f7676, cFileName="downlevel_2017_09_07_02_02_39_766.log", cAlternateFileName="DOWNLE~1.LOG")) returned 1 [0192.665] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22d470 [0192.665] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228230 [0192.665] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229c70 [0192.665] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228230 | out: hHeap=0x1f0000) returned 1 [0192.665] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227fc8 | out: hHeap=0x1f0000) returned 1 [0192.665] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d470 | out: hHeap=0x1f0000) returned 1 [0192.665] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x38) returned 0x2148d0 [0192.666] CreateFileW (lpFileName="C:\\\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log" (normalized: "c:\\$getcurrent\\logs\\downlevel_2017_09_07_02_02_39_766.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1dc [0192.666] GetFileType (hFile=0x1dc) returned 0x1 [0192.666] CloseHandle (hObject=0x1dc) returned 1 [0192.666] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a600 [0192.666] GetFileAttributesExW (in: lpFileName="C:\\\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log" (normalized: "c:\\$getcurrent\\logs\\downlevel_2017_09_07_02_02_39_766.log"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1cc | out: lpFileInformation=0x1fdf1cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x542c8aac, ftLastAccessTime.dwHighDateTime=0x1d3273a, ftLastWriteTime.dwLowDateTime=0xbc4f075d, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x1)) returned 1 [0192.667] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a600 | out: hHeap=0x1f0000) returned 1 [0192.667] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a1c0 [0192.667] GetFileAttributesExW (in: lpFileName="C:\\\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log" (normalized: "c:\\$getcurrent\\logs\\downlevel_2017_09_07_02_02_39_766.log"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1d4 | out: lpFileInformation=0x1fdf1d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x542c8aac, ftLastAccessTime.dwHighDateTime=0x1d3273a, ftLastWriteTime.dwLowDateTime=0xbc4f075d, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x1)) returned 1 [0192.667] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a1c0 | out: hHeap=0x1f0000) returned 1 [0192.667] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229cf8 [0192.667] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229cf8 | out: hHeap=0x1f0000) returned 1 [0192.667] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc17291e, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xbc17291e, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xbc1889f5, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xa6c2, dwReserved0=0x773bbccb, dwReserved1=0x1f7676, cFileName="downlevel_2017_09_07_02_02_39_766.log.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="DOWNLE~1.ODV")) returned 1 [0192.667] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x2007c8 [0192.667] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228230 [0192.667] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x232eb0 [0192.667] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228230 | out: hHeap=0x1f0000) returned 1 [0192.667] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229c70 | out: hHeap=0x1f0000) returned 1 [0192.667] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2007c8 | out: hHeap=0x1f0000) returned 1 [0192.668] CreateFileW (lpFileName="C:\\\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\$getcurrent\\logs\\downlevel_2017_09_07_02_02_39_766.log.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1dc [0192.668] GetFileType (hFile=0x1dc) returned 0x1 [0192.668] CloseHandle (hObject=0x1dc) returned 1 [0192.669] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x230b90 [0192.669] GetFileAttributesExW (in: lpFileName="C:\\\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\$getcurrent\\logs\\downlevel_2017_09_07_02_02_39_766.log.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1cc | out: lpFileInformation=0x1fdf1cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc17291e, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xbc17291e, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xbc1889f5, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xa6c2)) returned 1 [0192.669] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230b90 | out: hHeap=0x1f0000) returned 1 [0192.669] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x230b90 [0192.669] GetFileAttributesExW (in: lpFileName="C:\\\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\$getcurrent\\logs\\downlevel_2017_09_07_02_02_39_766.log.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1d4 | out: lpFileInformation=0x1fdf1d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc17291e, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xbc17291e, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xbc1889f5, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xa6c2)) returned 1 [0192.669] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230b90 | out: hHeap=0x1f0000) returned 1 [0192.669] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x230b90 [0192.669] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230b90 | out: hHeap=0x1f0000) returned 1 [0192.669] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x973abb0f, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x980eecb6, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1774, dwReserved0=0x773bbccb, dwReserved1=0x1f7676, cFileName="oobe_2017_09_07_03_08_57_737.log", cAlternateFileName="OOBE_2~1.LOG")) returned 1 [0192.670] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22d470 [0192.670] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228230 [0192.670] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x215060 [0192.670] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228230 | out: hHeap=0x1f0000) returned 1 [0192.670] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232eb0 | out: hHeap=0x1f0000) returned 1 [0192.670] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d470 | out: hHeap=0x1f0000) returned 1 [0192.670] CreateFileW (lpFileName="C:\\\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log" (normalized: "c:\\$getcurrent\\logs\\oobe_2017_09_07_03_08_57_737.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1dc [0192.670] GetFileType (hFile=0x1dc) returned 0x1 [0192.671] CloseHandle (hObject=0x1dc) returned 1 [0192.671] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x214f70 [0192.671] GetFileAttributesExW (in: lpFileName="C:\\\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log" (normalized: "c:\\$getcurrent\\logs\\oobe_2017_09_07_03_08_57_737.log"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1cc | out: lpFileInformation=0x1fdf1cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x973abb0f, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x980eecb6, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1774)) returned 1 [0192.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f70 | out: hHeap=0x1f0000) returned 1 [0192.672] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x214d18 [0192.672] GetFileAttributesExW (in: lpFileName="C:\\\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log" (normalized: "c:\\$getcurrent\\logs\\oobe_2017_09_07_03_08_57_737.log"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1d4 | out: lpFileInformation=0x1fdf1d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x973abb0f, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x980eecb6, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1774)) returned 1 [0192.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d18 | out: hHeap=0x1f0000) returned 1 [0192.672] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x214ac0 [0192.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214ac0 | out: hHeap=0x1f0000) returned 1 [0192.673] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c5a0a89, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x9c5a0a89, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xbb3747bd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x773bbccb, dwReserved1=0x1f7676, cFileName="PartnerSetupCompleteResult.log", cAlternateFileName="PARTNE~1.LOG")) returned 1 [0192.673] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2290e8 [0192.674] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228230 [0192.674] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x214e80 [0192.674] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228230 | out: hHeap=0x1f0000) returned 1 [0192.674] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215060 | out: hHeap=0x1f0000) returned 1 [0192.674] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2290e8 | out: hHeap=0x1f0000) returned 1 [0192.674] CreateFileW (lpFileName="C:\\\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log" (normalized: "c:\\$getcurrent\\logs\\partnersetupcompleteresult.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1dc [0192.674] GetFileType (hFile=0x1dc) returned 0x1 [0192.675] CloseHandle (hObject=0x1dc) returned 1 [0192.675] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x214ef8 [0192.675] GetFileAttributesExW (in: lpFileName="C:\\\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log" (normalized: "c:\\$getcurrent\\logs\\partnersetupcompleteresult.log"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1cc | out: lpFileInformation=0x1fdf1cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c5a0a89, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x9c5a0a89, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xbb3747bd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x28)) returned 1 [0192.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214ef8 | out: hHeap=0x1f0000) returned 1 [0192.675] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x214f70 [0192.675] GetFileAttributesExW (in: lpFileName="C:\\\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log" (normalized: "c:\\$getcurrent\\logs\\partnersetupcompleteresult.log"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1d4 | out: lpFileInformation=0x1fdf1d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c5a0a89, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x9c5a0a89, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xbb3747bd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x28)) returned 1 [0192.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f70 | out: hHeap=0x1f0000) returned 1 [0192.675] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x214958 [0192.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214958 | out: hHeap=0x1f0000) returned 1 [0192.675] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c5a0a89, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x9c5a0a89, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xbb3747bd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x773bbccb, dwReserved1=0x1f7676, cFileName="PartnerSetupCompleteResult.log", cAlternateFileName="PARTNE~1.LOG")) returned 0 [0192.675] FindClose (in: hFindFile=0x214150 | out: hFindFile=0x214150) returned 1 [0192.676] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214e80 | out: hHeap=0x1f0000) returned 1 [0192.676] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232d18 | out: hHeap=0x1f0000) returned 1 [0192.676] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b868 | out: hHeap=0x1f0000) returned 1 [0192.676] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229058 | out: hHeap=0x1f0000) returned 1 [0192.676] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229370 [0192.676] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b868 [0192.676] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2271f0 [0192.676] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2292e0 [0192.676] FindFirstFileW (in: lpFileName="C:\\\\$GetCurrent\\SafeOS\\*", lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x1f7676, cFileName=".", cAlternateFileName="")) returned 0x214150 [0192.676] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227d60 [0192.676] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225ce8 [0192.676] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227d60 | out: hHeap=0x1f0000) returned 1 [0192.676] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2292e0 | out: hHeap=0x1f0000) returned 1 [0192.676] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0192.677] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x1f7676, cFileName="..", cAlternateFileName="")) returned 1 [0192.677] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0192.677] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x226328 [0192.677] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0192.677] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225ce8 | out: hHeap=0x1f0000) returned 1 [0192.677] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0192.677] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0192.677] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9568f13f, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x9568f13f, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0xfb529700, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x232c8, dwReserved0=0x201, dwReserved1=0x1f7676, cFileName="GetCurrentOOBE.dll", cAlternateFileName="GETCUR~1.DLL")) returned 1 [0192.677] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0192.678] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227d60 [0192.678] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a908 [0192.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227d60 | out: hHeap=0x1f0000) returned 1 [0192.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226328 | out: hHeap=0x1f0000) returned 1 [0192.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0192.678] CreateFileW (lpFileName="C:\\\\$GetCurrent\\SafeOS\\GetCurrentOOBE.dll" (normalized: "c:\\$getcurrent\\safeos\\getcurrentoobe.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1dc [0192.678] GetFileType (hFile=0x1dc) returned 0x1 [0192.678] CloseHandle (hObject=0x1dc) returned 1 [0192.679] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a9d8 [0192.679] GetFileAttributesExW (in: lpFileName="C:\\\\$GetCurrent\\SafeOS\\GetCurrentOOBE.dll" (normalized: "c:\\$getcurrent\\safeos\\getcurrentoobe.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1cc | out: lpFileInformation=0x1fdf1cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9568f13f, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x9568f13f, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0xfb529700, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x232c8)) returned 1 [0192.679] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a9d8 | out: hHeap=0x1f0000) returned 1 [0192.679] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22af88 [0192.679] GetFileAttributesExW (in: lpFileName="C:\\\\$GetCurrent\\SafeOS\\GetCurrentOOBE.dll" (normalized: "c:\\$getcurrent\\safeos\\getcurrentoobe.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1d4 | out: lpFileInformation=0x1fdf1d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9568f13f, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x9568f13f, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0xfb529700, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x232c8)) returned 1 [0192.679] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22af88 | out: hHeap=0x1f0000) returned 1 [0192.679] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ab78 [0192.679] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab78 | out: hHeap=0x1f0000) returned 1 [0192.680] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956819aa, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x956819aa, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x980eecb6, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x9c, dwReserved0=0x201, dwReserved1=0x1f7676, cFileName="GetCurrentRollback.ini", cAlternateFileName="GETCUR~1.INI")) returned 1 [0192.680] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227bd8 [0192.680] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228230 [0192.680] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22aa40 [0192.680] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228230 | out: hHeap=0x1f0000) returned 1 [0192.680] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a908 | out: hHeap=0x1f0000) returned 1 [0192.680] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227bd8 | out: hHeap=0x1f0000) returned 1 [0192.680] CreateFileW (lpFileName="C:\\\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini" (normalized: "c:\\$getcurrent\\safeos\\getcurrentrollback.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1dc [0192.680] GetFileType (hFile=0x1dc) returned 0x1 [0192.681] CloseHandle (hObject=0x1dc) returned 1 [0192.681] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a970 [0192.681] GetFileAttributesExW (in: lpFileName="C:\\\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini" (normalized: "c:\\$getcurrent\\safeos\\getcurrentrollback.ini"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1cc | out: lpFileInformation=0x1fdf1cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956819aa, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x956819aa, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x980eecb6, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x9c)) returned 1 [0192.681] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a970 | out: hHeap=0x1f0000) returned 1 [0192.681] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22acb0 [0192.681] GetFileAttributesExW (in: lpFileName="C:\\\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini" (normalized: "c:\\$getcurrent\\safeos\\getcurrentrollback.ini"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1d4 | out: lpFileInformation=0x1fdf1d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956819aa, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x956819aa, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x980eecb6, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x9c)) returned 1 [0192.681] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22acb0 | out: hHeap=0x1f0000) returned 1 [0192.681] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ab78 [0192.681] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab78 | out: hHeap=0x1f0000) returned 1 [0192.682] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x54acc791, ftLastAccessTime.dwHighDateTime=0x1d3273a, ftLastWriteTime.dwLowDateTime=0x54acc791, ftLastWriteTime.dwHighDateTime=0x1d3273a, nFileSizeHigh=0x0, nFileSizeLow=0x241, dwReserved0=0x201, dwReserved1=0x1f7676, cFileName="PartnerSetupComplete.cmd", cAlternateFileName="PARTNE~1.CMD")) returned 1 [0192.682] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228d40 [0192.682] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0192.682] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ab78 [0192.682] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0192.682] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aa40 | out: hHeap=0x1f0000) returned 1 [0192.682] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228d40 | out: hHeap=0x1f0000) returned 1 [0192.682] CreateFileW (lpFileName="C:\\\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\partnersetupcomplete.cmd"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1dc [0192.682] GetFileType (hFile=0x1dc) returned 0x1 [0192.683] CloseHandle (hObject=0x1dc) returned 1 [0192.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22af20 [0192.683] GetFileAttributesExW (in: lpFileName="C:\\\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\partnersetupcomplete.cmd"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1cc | out: lpFileInformation=0x1fdf1cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x54acc791, ftLastAccessTime.dwHighDateTime=0x1d3273a, ftLastWriteTime.dwLowDateTime=0x54acc791, ftLastWriteTime.dwHighDateTime=0x1d3273a, nFileSizeHigh=0x0, nFileSizeLow=0x241)) returned 1 [0192.683] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22af20 | out: hHeap=0x1f0000) returned 1 [0192.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ad18 [0192.683] GetFileAttributesExW (in: lpFileName="C:\\\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\partnersetupcomplete.cmd"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1d4 | out: lpFileInformation=0x1fdf1d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x54acc791, ftLastAccessTime.dwHighDateTime=0x1d3273a, ftLastWriteTime.dwLowDateTime=0x54acc791, ftLastWriteTime.dwHighDateTime=0x1d3273a, nFileSizeHigh=0x0, nFileSizeLow=0x241)) returned 1 [0192.683] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ad18 | out: hHeap=0x1f0000) returned 1 [0192.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22acb0 [0192.683] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22acb0 | out: hHeap=0x1f0000) returned 1 [0192.683] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9575af11, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9577d1ec, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x4a, dwReserved0=0x201, dwReserved1=0x1f7676, cFileName="preoobe.cmd", cAlternateFileName="")) returned 1 [0192.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b4a8 [0192.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228230 [0192.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22d470 [0192.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228230 | out: hHeap=0x1f0000) returned 1 [0192.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab78 | out: hHeap=0x1f0000) returned 1 [0192.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b4a8 | out: hHeap=0x1f0000) returned 1 [0192.684] CreateFileW (lpFileName="C:\\\\$GetCurrent\\SafeOS\\preoobe.cmd" (normalized: "c:\\$getcurrent\\safeos\\preoobe.cmd"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1dc [0192.685] GetFileType (hFile=0x1dc) returned 0x1 [0192.685] CloseHandle (hObject=0x1dc) returned 1 [0192.685] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2252e8 [0192.685] GetFileAttributesExW (in: lpFileName="C:\\\\$GetCurrent\\SafeOS\\preoobe.cmd" (normalized: "c:\\$getcurrent\\safeos\\preoobe.cmd"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1cc | out: lpFileInformation=0x1fdf1cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9575af11, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9577d1ec, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x4a)) returned 1 [0192.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2252e8 | out: hHeap=0x1f0000) returned 1 [0192.686] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2252e8 [0192.686] GetFileAttributesExW (in: lpFileName="C:\\\\$GetCurrent\\SafeOS\\preoobe.cmd" (normalized: "c:\\$getcurrent\\safeos\\preoobe.cmd"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1d4 | out: lpFileInformation=0x1fdf1d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9575af11, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9577d1ec, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x4a)) returned 1 [0192.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2252e8 | out: hHeap=0x1f0000) returned 1 [0192.686] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2252e8 [0192.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2252e8 | out: hHeap=0x1f0000) returned 1 [0192.686] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x957833a7, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x957833a7, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9578472e, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x133, dwReserved0=0x201, dwReserved1=0x1f7676, cFileName="SetupComplete.cmd", cAlternateFileName="SETUPC~1.CMD")) returned 1 [0192.686] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0192.686] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228230 [0192.686] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22aeb8 [0192.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228230 | out: hHeap=0x1f0000) returned 1 [0192.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d470 | out: hHeap=0x1f0000) returned 1 [0192.687] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0192.687] CreateFileW (lpFileName="C:\\\\$GetCurrent\\SafeOS\\SetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\setupcomplete.cmd"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1dc [0192.687] GetFileType (hFile=0x1dc) returned 0x1 [0192.687] CloseHandle (hObject=0x1dc) returned 1 [0192.687] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a970 [0192.687] GetFileAttributesExW (in: lpFileName="C:\\\\$GetCurrent\\SafeOS\\SetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\setupcomplete.cmd"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1cc | out: lpFileInformation=0x1fdf1cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x957833a7, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x957833a7, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9578472e, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x133)) returned 1 [0192.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a970 | out: hHeap=0x1f0000) returned 1 [0192.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ab78 [0192.688] GetFileAttributesExW (in: lpFileName="C:\\\\$GetCurrent\\SafeOS\\SetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\setupcomplete.cmd"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1d4 | out: lpFileInformation=0x1fdf1d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x957833a7, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x957833a7, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9578472e, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x133)) returned 1 [0192.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab78 | out: hHeap=0x1f0000) returned 1 [0192.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a908 [0192.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a908 | out: hHeap=0x1f0000) returned 1 [0192.688] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x957833a7, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x957833a7, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9578472e, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x133, dwReserved0=0x201, dwReserved1=0x1f7676, cFileName="SetupComplete.cmd", cAlternateFileName="SETUPC~1.CMD")) returned 0 [0192.688] FindClose (in: hFindFile=0x214150 | out: hFindFile=0x214150) returned 1 [0192.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aeb8 | out: hHeap=0x1f0000) returned 1 [0192.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2271f0 | out: hHeap=0x1f0000) returned 1 [0192.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b868 | out: hHeap=0x1f0000) returned 1 [0192.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229370 | out: hHeap=0x1f0000) returned 1 [0192.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227e40 | out: hHeap=0x1f0000) returned 1 [0192.689] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228150 | out: hHeap=0x1f0000) returned 1 [0192.689] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227e78 | out: hHeap=0x1f0000) returned 1 [0192.689] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2281f8 | out: hHeap=0x1f0000) returned 1 [0192.689] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232b80 | out: hHeap=0x1f0000) returned 1 [0192.689] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b840 | out: hHeap=0x1f0000) returned 1 [0192.689] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229298 | out: hHeap=0x1f0000) returned 1 [0192.689] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229370 [0192.689] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b840 [0192.689] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x227850 [0192.689] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227d60 [0192.689] FindFirstFileW (in: lpFileName="C:\\\\$Recycle.Bin\\*", lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2142d0 [0192.690] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227bd8 [0192.690] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227d60 | out: hHeap=0x1f0000) returned 1 [0192.690] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0192.690] FindNextFileW (in: hFindFile=0x2142d0, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0192.690] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2281f8 [0192.690] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227bd8 | out: hHeap=0x1f0000) returned 1 [0192.690] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0192.690] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0192.690] FindNextFileW (in: hFindFile=0x2142d0, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18", cAlternateFileName="")) returned 1 [0192.690] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b868 [0192.690] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228150 [0192.690] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x226238 [0192.690] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228150 | out: hHeap=0x1f0000) returned 1 [0192.690] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2281f8 | out: hHeap=0x1f0000) returned 1 [0192.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b868 | out: hHeap=0x1f0000) returned 1 [0192.691] lstrcmpW (lpString1="S-1-5-18", lpString2=".") returned 1 [0192.691] lstrcmpW (lpString1="S-1-5-18", lpString2="..") returned 1 [0192.691] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x205130 [0192.691] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2290e8 [0192.691] FindNextFileW (in: hFindFile=0x2142d0, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x11a5eef8, ftLastAccessTime.dwHighDateTime=0x1d3375b, ftLastWriteTime.dwLowDateTime=0x11a5eef8, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-1051304884-625712362-2192934891-1000", cAlternateFileName="S-1-5-~1")) returned 1 [0192.691] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ade8 [0192.691] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227d60 [0192.691] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a468 [0192.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227d60 | out: hHeap=0x1f0000) returned 1 [0192.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226238 | out: hHeap=0x1f0000) returned 1 [0192.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ade8 | out: hHeap=0x1f0000) returned 1 [0192.691] lstrcmpW (lpString1="S-1-5-21-1051304884-625712362-2192934891-1000", lpString2=".") returned 1 [0192.691] lstrcmpW (lpString1="S-1-5-21-1051304884-625712362-2192934891-1000", lpString2="..") returned 1 [0192.691] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2281f8 [0192.691] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a4f0 [0192.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205130 | out: hHeap=0x1f0000) returned 1 [0192.692] FindNextFileW (in: hFindFile=0x2142d0, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x11a5eef8, ftLastAccessTime.dwHighDateTime=0x1d3375b, ftLastWriteTime.dwLowDateTime=0x11a5eef8, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-1051304884-625712362-2192934891-1000", cAlternateFileName="S-1-5-~1")) returned 0 [0192.692] FindClose (in: hFindFile=0x2142d0 | out: hFindFile=0x2142d0) returned 1 [0192.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229298 [0192.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b868 [0192.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x226ec0 [0192.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228f38 [0192.692] FindFirstFileW (in: lpFileName="C:\\\\$Recycle.Bin\\S-1-5-18\\*", lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x227df8, cFileName=".", cAlternateFileName="")) returned 0x214150 [0192.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228ea8 [0192.692] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228f38 | out: hHeap=0x1f0000) returned 1 [0192.692] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0192.693] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x227df8, cFileName="..", cAlternateFileName="")) returned 1 [0192.693] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2291c0 [0192.693] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228ea8 | out: hHeap=0x1f0000) returned 1 [0192.693] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0192.693] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0192.693] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x20002, dwReserved1=0x227df8, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0192.693] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b458 [0192.693] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229058 [0192.693] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x22af20 [0192.693] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229058 | out: hHeap=0x1f0000) returned 1 [0192.693] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2291c0 | out: hHeap=0x1f0000) returned 1 [0192.693] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b458 | out: hHeap=0x1f0000) returned 1 [0192.694] CreateFileW (lpFileName="C:\\\\$Recycle.Bin\\S-1-5-18\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-18\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1dc [0192.694] GetFileType (hFile=0x1dc) returned 0x1 [0192.694] CloseHandle (hObject=0x1dc) returned 1 [0192.694] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22d470 [0192.694] GetFileAttributesExW (in: lpFileName="C:\\\\$Recycle.Bin\\S-1-5-18\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-18\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1cc | out: lpFileInformation=0x1fdf1cc*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x81)) returned 1 [0192.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d470 | out: hHeap=0x1f0000) returned 1 [0192.695] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22d470 [0192.695] GetFileAttributesExW (in: lpFileName="C:\\\\$Recycle.Bin\\S-1-5-18\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-18\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1d4 | out: lpFileInformation=0x1fdf1d4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x81)) returned 1 [0192.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d470 | out: hHeap=0x1f0000) returned 1 [0192.695] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22d470 [0192.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d470 | out: hHeap=0x1f0000) returned 1 [0192.695] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x20002, dwReserved1=0x227df8, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0192.695] FindClose (in: hFindFile=0x214150 | out: hFindFile=0x214150) returned 1 [0192.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22af20 | out: hHeap=0x1f0000) returned 1 [0192.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226ec0 | out: hHeap=0x1f0000) returned 1 [0192.696] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b868 | out: hHeap=0x1f0000) returned 1 [0192.696] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229298 | out: hHeap=0x1f0000) returned 1 [0192.696] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228d40 [0192.696] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b868 [0192.696] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x226ec0 [0192.696] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x228378 [0192.696] FindFirstFileW (in: lpFileName="C:\\\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\*", lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x11a5eef8, ftLastAccessTime.dwHighDateTime=0x1d3375b, ftLastWriteTime.dwLowDateTime=0x11a5eef8, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x227df8, cFileName=".", cAlternateFileName="")) returned 0x2147d0 [0192.696] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229a50 [0192.696] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230b90 [0192.696] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229a50 | out: hHeap=0x1f0000) returned 1 [0192.696] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228378 | out: hHeap=0x1f0000) returned 1 [0192.696] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0192.696] FindNextFileW (in: hFindFile=0x2147d0, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x11a5eef8, ftLastAccessTime.dwHighDateTime=0x1d3375b, ftLastWriteTime.dwLowDateTime=0x11a5eef8, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x227df8, cFileName="..", cAlternateFileName="")) returned 1 [0192.696] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229c70 [0192.696] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230c58 [0192.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229c70 | out: hHeap=0x1f0000) returned 1 [0192.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230b90 | out: hHeap=0x1f0000) returned 1 [0192.697] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0192.697] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0192.697] FindNextFileW (in: hFindFile=0x2147d0, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcb9438a8, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xcb9438a8, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x20002, dwReserved1=0x227df8, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0192.697] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b7c8 [0192.697] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a600 [0192.697] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230b90 [0192.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a600 | out: hHeap=0x1f0000) returned 1 [0192.770] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230c58 | out: hHeap=0x1f0000) returned 1 [0192.770] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b7c8 | out: hHeap=0x1f0000) returned 1 [0192.786] CreateFileW (lpFileName="C:\\\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0192.787] GetFileType (hFile=0x1d8) returned 0x1 [0192.787] CloseHandle (hObject=0x1d8) returned 1 [0192.787] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21aa10 [0192.787] GetFileAttributesExW (in: lpFileName="C:\\\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1cc | out: lpFileInformation=0x1fdf1cc*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcb9438a8, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xcb9438a8, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x81)) returned 1 [0192.787] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21aa10 | out: hHeap=0x1f0000) returned 1 [0192.787] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a0e0 [0192.787] GetFileAttributesExW (in: lpFileName="C:\\\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1d4 | out: lpFileInformation=0x1fdf1d4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcb9438a8, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xcb9438a8, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x81)) returned 1 [0192.787] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a0e0 | out: hHeap=0x1f0000) returned 1 [0192.787] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219ee8 [0192.787] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219ee8 | out: hHeap=0x1f0000) returned 1 [0192.787] FindNextFileW (in: hFindFile=0x2147d0, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcb9438a8, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xcb9438a8, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x20002, dwReserved1=0x227df8, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0192.787] FindClose (in: hFindFile=0x2147d0 | out: hFindFile=0x2147d0) returned 1 [0192.787] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230b90 | out: hHeap=0x1f0000) returned 1 [0192.787] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226ec0 | out: hHeap=0x1f0000) returned 1 [0192.787] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b868 | out: hHeap=0x1f0000) returned 1 [0192.787] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228d40 | out: hHeap=0x1f0000) returned 1 [0192.787] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a468 | out: hHeap=0x1f0000) returned 1 [0192.788] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2290e8 | out: hHeap=0x1f0000) returned 1 [0192.788] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a4f0 | out: hHeap=0x1f0000) returned 1 [0192.788] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2281f8 | out: hHeap=0x1f0000) returned 1 [0192.788] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227850 | out: hHeap=0x1f0000) returned 1 [0192.788] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b840 | out: hHeap=0x1f0000) returned 1 [0192.788] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229370 | out: hHeap=0x1f0000) returned 1 [0192.788] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234308 [0192.788] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b9f8 [0192.788] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2271f0 [0192.788] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233c90 [0192.788] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\*", lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf39a4e7e, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf74cd515, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x214590 [0192.789] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0192.789] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x2261e8 [0192.789] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0192.789] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233c90 | out: hHeap=0x1f0000) returned 1 [0192.789] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0192.789] FindNextFileW (in: hFindFile=0x214590, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf39a4e7e, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf74cd515, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0192.789] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227fc8 [0192.789] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x226148 [0192.789] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227fc8 | out: hHeap=0x1f0000) returned 1 [0192.789] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2261e8 | out: hHeap=0x1f0000) returned 1 [0192.789] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0192.789] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0192.789] FindNextFileW (in: hFindFile=0x214590, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1025", cAlternateFileName="")) returned 1 [0192.789] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228188 [0192.789] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225f68 [0192.789] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228188 | out: hHeap=0x1f0000) returned 1 [0192.789] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226148 | out: hHeap=0x1f0000) returned 1 [0192.789] lstrcmpW (lpString1="1025", lpString2=".") returned 1 [0192.789] lstrcmpW (lpString1="1025", lpString2="..") returned 1 [0192.789] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x2051f0 [0192.789] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2340c8 [0192.790] FindNextFileW (in: hFindFile=0x214590, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1028", cAlternateFileName="")) returned 1 [0192.790] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227e40 [0192.790] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x2260a8 [0192.790] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227e40 | out: hHeap=0x1f0000) returned 1 [0192.790] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225f68 | out: hHeap=0x1f0000) returned 1 [0192.790] lstrcmpW (lpString1="1028", lpString2=".") returned 1 [0192.790] lstrcmpW (lpString1="1028", lpString2="..") returned 1 [0192.790] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227fc8 [0192.790] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234470 [0192.790] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2051f0 | out: hHeap=0x1f0000) returned 1 [0192.790] FindNextFileW (in: hFindFile=0x214590, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1029", cAlternateFileName="")) returned 1 [0192.790] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227e40 [0192.790] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x226328 [0192.790] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227e40 | out: hHeap=0x1f0000) returned 1 [0192.790] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2260a8 | out: hHeap=0x1f0000) returned 1 [0192.790] lstrcmpW (lpString1="1029", lpString2=".") returned 1 [0192.790] lstrcmpW (lpString1="1029", lpString2="..") returned 1 [0192.790] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x48) returned 0x226148 [0192.790] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233c90 [0192.790] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227fc8 | out: hHeap=0x1f0000) returned 1 [0192.790] FindNextFileW (in: hFindFile=0x214590, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1030", cAlternateFileName="")) returned 1 [0192.790] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227fc8 [0192.790] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225ba8 [0192.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227fc8 | out: hHeap=0x1f0000) returned 1 [0192.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226328 | out: hHeap=0x1f0000) returned 1 [0192.791] lstrcmpW (lpString1="1030", lpString2=".") returned 1 [0192.791] lstrcmpW (lpString1="1030", lpString2="..") returned 1 [0192.791] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a9d8 [0192.791] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234110 [0192.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226148 | out: hHeap=0x1f0000) returned 1 [0192.791] FindNextFileW (in: hFindFile=0x214590, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1031", cAlternateFileName="")) returned 1 [0192.791] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227fc8 [0192.791] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225e78 [0192.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227fc8 | out: hHeap=0x1f0000) returned 1 [0192.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225ba8 | out: hHeap=0x1f0000) returned 1 [0192.791] lstrcmpW (lpString1="1031", lpString2=".") returned 1 [0192.791] lstrcmpW (lpString1="1031", lpString2="..") returned 1 [0192.791] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x228378 [0192.791] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233df8 [0192.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a9d8 | out: hHeap=0x1f0000) returned 1 [0192.791] FindNextFileW (in: hFindFile=0x214590, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1032", cAlternateFileName="")) returned 1 [0192.791] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228150 [0192.791] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225ba8 [0192.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228150 | out: hHeap=0x1f0000) returned 1 [0192.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225e78 | out: hHeap=0x1f0000) returned 1 [0192.791] lstrcmpW (lpString1="1032", lpString2=".") returned 1 [0192.791] lstrcmpW (lpString1="1032", lpString2="..") returned 1 [0192.791] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234158 [0192.791] FindNextFileW (in: hFindFile=0x214590, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0192.792] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227e40 [0192.792] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225bf8 [0192.792] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227e40 | out: hHeap=0x1f0000) returned 1 [0192.792] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225ba8 | out: hHeap=0x1f0000) returned 1 [0192.792] lstrcmpW (lpString1="1033", lpString2=".") returned 1 [0192.792] lstrcmpW (lpString1="1033", lpString2="..") returned 1 [0192.792] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd8) returned 0x22d368 [0192.792] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233cd8 [0192.792] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228378 | out: hHeap=0x1f0000) returned 1 [0192.792] FindNextFileW (in: hFindFile=0x214590, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1035", cAlternateFileName="")) returned 1 [0192.792] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227fc8 [0192.792] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225e78 [0192.792] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227fc8 | out: hHeap=0x1f0000) returned 1 [0192.792] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225bf8 | out: hHeap=0x1f0000) returned 1 [0192.792] lstrcmpW (lpString1="1035", lpString2=".") returned 1 [0192.792] lstrcmpW (lpString1="1035", lpString2="..") returned 1 [0192.792] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233e40 [0192.792] FindNextFileW (in: hFindFile=0x214590, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1036", cAlternateFileName="")) returned 1 [0192.792] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228150 [0192.792] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225f18 [0192.792] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228150 | out: hHeap=0x1f0000) returned 1 [0192.792] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225e78 | out: hHeap=0x1f0000) returned 1 [0192.792] lstrcmpW (lpString1="1036", lpString2=".") returned 1 [0192.793] lstrcmpW (lpString1="1036", lpString2="..") returned 1 [0192.793] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234038 [0192.793] FindNextFileW (in: hFindFile=0x214590, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1037", cAlternateFileName="")) returned 1 [0192.793] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228150 [0192.793] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225dd8 [0192.793] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228150 | out: hHeap=0x1f0000) returned 1 [0192.793] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225f18 | out: hHeap=0x1f0000) returned 1 [0192.793] lstrcmpW (lpString1="1037", lpString2=".") returned 1 [0192.793] lstrcmpW (lpString1="1037", lpString2="..") returned 1 [0192.793] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x138) returned 0x229418 [0192.793] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234350 [0192.793] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d368 | out: hHeap=0x1f0000) returned 1 [0192.793] FindNextFileW (in: hFindFile=0x214590, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1038", cAlternateFileName="")) returned 1 [0192.793] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227fc8 [0192.793] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x226058 [0192.793] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227fc8 | out: hHeap=0x1f0000) returned 1 [0192.793] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225dd8 | out: hHeap=0x1f0000) returned 1 [0192.794] lstrcmpW (lpString1="1038", lpString2=".") returned 1 [0192.794] lstrcmpW (lpString1="1038", lpString2="..") returned 1 [0192.794] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234428 [0192.794] FindNextFileW (in: hFindFile=0x214590, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1040", cAlternateFileName="")) returned 1 [0192.794] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0192.794] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x2260a8 [0192.794] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0192.794] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226058 | out: hHeap=0x1f0000) returned 1 [0192.794] lstrcmpW (lpString1="1040", lpString2=".") returned 1 [0192.794] lstrcmpW (lpString1="1040", lpString2="..") returned 1 [0192.794] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2341a0 [0192.794] FindNextFileW (in: hFindFile=0x214590, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1041", cAlternateFileName="")) returned 1 [0192.794] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228150 [0192.794] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225e78 [0192.794] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228150 | out: hHeap=0x1f0000) returned 1 [0192.794] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2260a8 | out: hHeap=0x1f0000) returned 1 [0192.794] lstrcmpW (lpString1="1041", lpString2=".") returned 1 [0192.794] lstrcmpW (lpString1="1041", lpString2="..") returned 1 [0192.794] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233c48 [0192.795] FindNextFileW (in: hFindFile=0x214590, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1042", cAlternateFileName="")) returned 1 [0192.795] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228150 [0192.795] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225c48 [0192.795] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228150 | out: hHeap=0x1f0000) returned 1 [0192.795] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225e78 | out: hHeap=0x1f0000) returned 1 [0192.795] lstrcmpW (lpString1="1042", lpString2=".") returned 1 [0192.795] lstrcmpW (lpString1="1042", lpString2="..") returned 1 [0192.795] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c8) returned 0x225048 [0192.795] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233e88 [0192.795] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0192.795] FindNextFileW (in: hFindFile=0x214590, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1043", cAlternateFileName="")) returned 1 [0192.795] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228038 [0192.795] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225dd8 [0192.795] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228038 | out: hHeap=0x1f0000) returned 1 [0192.795] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225c48 | out: hHeap=0x1f0000) returned 1 [0192.795] lstrcmpW (lpString1="1043", lpString2=".") returned 1 [0192.795] lstrcmpW (lpString1="1043", lpString2="..") returned 1 [0192.795] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233ed0 [0192.795] FindNextFileW (in: hFindFile=0x214590, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1044", cAlternateFileName="")) returned 1 [0192.795] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0192.795] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225e78 [0192.796] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0192.796] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225dd8 | out: hHeap=0x1f0000) returned 1 [0192.796] lstrcmpW (lpString1="1044", lpString2=".") returned 1 [0192.796] lstrcmpW (lpString1="1044", lpString2="..") returned 1 [0192.796] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234278 [0192.796] FindNextFileW (in: hFindFile=0x214590, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1045", cAlternateFileName="")) returned 1 [0192.796] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227e40 [0192.796] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225ce8 [0192.796] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227e40 | out: hHeap=0x1f0000) returned 1 [0192.796] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225e78 | out: hHeap=0x1f0000) returned 1 [0192.796] lstrcmpW (lpString1="1045", lpString2=".") returned 1 [0192.796] lstrcmpW (lpString1="1045", lpString2="..") returned 1 [0192.796] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234398 [0192.796] FindNextFileW (in: hFindFile=0x214590, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1046", cAlternateFileName="")) returned 1 [0192.796] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227bd8 [0192.796] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x2260a8 [0192.796] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227bd8 | out: hHeap=0x1f0000) returned 1 [0192.796] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225ce8 | out: hHeap=0x1f0000) returned 1 [0192.796] lstrcmpW (lpString1="1046", lpString2=".") returned 1 [0192.796] lstrcmpW (lpString1="1046", lpString2="..") returned 1 [0192.796] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2342c0 [0192.797] FindNextFileW (in: hFindFile=0x214590, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1049", cAlternateFileName="")) returned 1 [0192.797] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0192.797] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x2260f8 [0192.797] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0192.797] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2260a8 | out: hHeap=0x1f0000) returned 1 [0192.797] lstrcmpW (lpString1="1049", lpString2=".") returned 1 [0192.797] lstrcmpW (lpString1="1049", lpString2="..") returned 1 [0192.797] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233f18 [0192.797] FindNextFileW (in: hFindFile=0x214590, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1053", cAlternateFileName="")) returned 1 [0192.797] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0192.797] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x2260a8 [0192.797] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0192.797] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2260f8 | out: hHeap=0x1f0000) returned 1 [0192.797] lstrcmpW (lpString1="1053", lpString2=".") returned 1 [0192.797] lstrcmpW (lpString1="1053", lpString2="..") returned 1 [0192.797] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2a0) returned 0x230b90 [0192.797] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233bb8 [0192.797] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225048 | out: hHeap=0x1f0000) returned 1 [0192.797] FindNextFileW (in: hFindFile=0x214590, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1055", cAlternateFileName="")) returned 1 [0192.797] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228150 [0192.797] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225d88 [0192.797] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228150 | out: hHeap=0x1f0000) returned 1 [0192.797] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2260a8 | out: hHeap=0x1f0000) returned 1 [0192.797] lstrcmpW (lpString1="1055", lpString2=".") returned 1 [0192.798] lstrcmpW (lpString1="1055", lpString2="..") returned 1 [0192.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233c00 [0192.798] FindNextFileW (in: hFindFile=0x214590, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2052", cAlternateFileName="")) returned 1 [0192.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0192.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x2261e8 [0192.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0192.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225d88 | out: hHeap=0x1f0000) returned 1 [0192.798] lstrcmpW (lpString1="2052", lpString2=".") returned 1 [0192.798] lstrcmpW (lpString1="2052", lpString2="..") returned 1 [0192.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233f60 [0192.798] FindNextFileW (in: hFindFile=0x214590, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2070", cAlternateFileName="")) returned 1 [0192.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228150 [0192.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x226148 [0192.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228150 | out: hHeap=0x1f0000) returned 1 [0192.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2261e8 | out: hHeap=0x1f0000) returned 1 [0192.798] lstrcmpW (lpString1="2070", lpString2=".") returned 1 [0192.798] lstrcmpW (lpString1="2070", lpString2="..") returned 1 [0192.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234980 [0192.798] FindNextFileW (in: hFindFile=0x214590, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3076", cAlternateFileName="")) returned 1 [0192.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228150 [0192.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225fb8 [0192.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228150 | out: hHeap=0x1f0000) returned 1 [0192.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226148 | out: hHeap=0x1f0000) returned 1 [0192.799] lstrcmpW (lpString1="3076", lpString2=".") returned 1 [0192.799] lstrcmpW (lpString1="3076", lpString2="..") returned 1 [0192.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234a10 [0192.799] FindNextFileW (in: hFindFile=0x214590, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3082", cAlternateFileName="")) returned 1 [0192.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0192.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x226288 [0192.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0192.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225fb8 | out: hHeap=0x1f0000) returned 1 [0192.799] lstrcmpW (lpString1="3082", lpString2=".") returned 1 [0192.799] lstrcmpW (lpString1="3082", lpString2="..") returned 1 [0192.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2349c8 [0192.799] FindNextFileW (in: hFindFile=0x214590, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Client", cAlternateFileName="")) returned 1 [0192.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227fc8 [0192.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x2262d8 [0192.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227fc8 | out: hHeap=0x1f0000) returned 1 [0192.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226288 | out: hHeap=0x1f0000) returned 1 [0192.799] lstrcmpW (lpString1="Client", lpString2=".") returned 1 [0192.799] lstrcmpW (lpString1="Client", lpString2="..") returned 1 [0192.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234860 [0192.799] FindNextFileW (in: hFindFile=0x214590, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbc518d00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbc518d00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbc518d00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x3ef6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DHtmlHeader.html", cAlternateFileName="DHTMLH~1.HTM")) returned 1 [0192.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0192.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228150 [0192.800] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x215860 [0192.800] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228150 | out: hHeap=0x1f0000) returned 1 [0192.800] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2262d8 | out: hHeap=0x1f0000) returned 1 [0192.800] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0192.800] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\DHtmlHeader.html" (normalized: "c:\\588bce7c90097ed212\\dhtmlheader.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0192.800] GetFileType (hFile=0x1d8) returned 0x1 [0192.800] CloseHandle (hObject=0x1d8) returned 1 [0192.800] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x21ae50 [0192.801] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\DHtmlHeader.html" (normalized: "c:\\588bce7c90097ed212\\dhtmlheader.html"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbc518d00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbc518d00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbc518d00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x3ef6)) returned 1 [0192.801] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ae50 | out: hHeap=0x1f0000) returned 1 [0192.801] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x21ae50 [0192.801] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\DHtmlHeader.html" (normalized: "c:\\588bce7c90097ed212\\dhtmlheader.html"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbc518d00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbc518d00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbc518d00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x3ef6)) returned 1 [0192.801] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ae50 | out: hHeap=0x1f0000) returned 1 [0192.801] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x21ae50 [0192.801] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ae50 | out: hHeap=0x1f0000) returned 1 [0192.801] FindNextFileW (in: hFindFile=0x214590, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x159d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayIcon.ico", cAlternateFileName="DISPLA~1.ICO")) returned 1 [0192.801] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b818 [0192.801] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228150 [0192.801] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x21ae50 [0192.801] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228150 | out: hHeap=0x1f0000) returned 1 [0192.801] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215860 | out: hHeap=0x1f0000) returned 1 [0192.801] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b818 | out: hHeap=0x1f0000) returned 1 [0192.802] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\DisplayIcon.ico" (normalized: "c:\\588bce7c90097ed212\\displayicon.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0192.802] GetFileType (hFile=0x1d8) returned 0x1 [0192.802] CloseHandle (hObject=0x1d8) returned 1 [0192.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x215860 [0192.802] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\DisplayIcon.ico" (normalized: "c:\\588bce7c90097ed212\\displayicon.ico"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x159d5)) returned 1 [0192.802] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215860 | out: hHeap=0x1f0000) returned 1 [0192.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x215860 [0192.802] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\DisplayIcon.ico" (normalized: "c:\\588bce7c90097ed212\\displayicon.ico"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x159d5)) returned 1 [0192.803] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215860 | out: hHeap=0x1f0000) returned 1 [0192.803] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x215860 [0192.803] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215860 | out: hHeap=0x1f0000) returned 1 [0192.803] FindNextFileW (in: hFindFile=0x214590, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Extended", cAlternateFileName="")) returned 1 [0192.803] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b818 [0192.803] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0192.803] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225fb8 [0192.803] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0192.803] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ae50 | out: hHeap=0x1f0000) returned 1 [0192.803] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b818 | out: hHeap=0x1f0000) returned 1 [0192.803] lstrcmpW (lpString1="Extended", lpString2=".") returned 1 [0192.803] lstrcmpW (lpString1="Extended", lpString2="..") returned 1 [0192.803] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346f8 [0192.803] FindNextFileW (in: hFindFile=0x214590, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Graphics", cAlternateFileName="")) returned 1 [0192.803] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b818 [0192.803] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228150 [0192.803] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x2262d8 [0192.803] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228150 | out: hHeap=0x1f0000) returned 1 [0192.803] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225fb8 | out: hHeap=0x1f0000) returned 1 [0192.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b818 | out: hHeap=0x1f0000) returned 1 [0192.804] lstrcmpW (lpString1="Graphics", lpString2=".") returned 1 [0192.804] lstrcmpW (lpString1="Graphics", lpString2="..") returned 1 [0192.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234938 [0192.804] FindNextFileW (in: hFindFile=0x214590, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x87910600, ftCreationTime.dwHighDateTime=0x1ca2a27, ftLastAccessTime.dwLowDateTime=0x87910600, ftLastAccessTime.dwHighDateTime=0x1ca2a27, ftLastWriteTime.dwLowDateTime=0x87910600, ftLastWriteTime.dwHighDateTime=0x1ca2a27, nFileSizeHigh=0x0, nFileSizeLow=0xe2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="header.bmp", cAlternateFileName="")) returned 1 [0192.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b840 [0192.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228150 [0192.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x215860 [0192.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228150 | out: hHeap=0x1f0000) returned 1 [0192.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2262d8 | out: hHeap=0x1f0000) returned 1 [0192.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b840 | out: hHeap=0x1f0000) returned 1 [0192.804] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\header.bmp" (normalized: "c:\\588bce7c90097ed212\\header.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0192.804] GetFileType (hFile=0x1d8) returned 0x1 [0192.804] CloseHandle (hObject=0x1d8) returned 1 [0192.805] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x21ae50 [0192.805] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\header.bmp" (normalized: "c:\\588bce7c90097ed212\\header.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x87910600, ftCreationTime.dwHighDateTime=0x1ca2a27, ftLastAccessTime.dwLowDateTime=0x87910600, ftLastAccessTime.dwHighDateTime=0x1ca2a27, ftLastWriteTime.dwLowDateTime=0x87910600, ftLastWriteTime.dwHighDateTime=0x1ca2a27, nFileSizeHigh=0x0, nFileSizeLow=0xe2c)) returned 1 [0192.805] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ae50 | out: hHeap=0x1f0000) returned 1 [0192.805] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x21ae50 [0192.805] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\header.bmp" (normalized: "c:\\588bce7c90097ed212\\header.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x87910600, ftCreationTime.dwHighDateTime=0x1ca2a27, ftLastAccessTime.dwLowDateTime=0x87910600, ftLastAccessTime.dwHighDateTime=0x1ca2a27, ftLastWriteTime.dwLowDateTime=0x87910600, ftLastWriteTime.dwHighDateTime=0x1ca2a27, nFileSizeHigh=0x0, nFileSizeLow=0xe2c)) returned 1 [0192.805] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ae50 | out: hHeap=0x1f0000) returned 1 [0192.805] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x21ae50 [0192.805] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ae50 | out: hHeap=0x1f0000) returned 1 [0192.805] FindNextFileW (in: hFindFile=0x214590, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x66ea7e00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0x66ea7e00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0x66ea7e00, ftLastWriteTime.dwHighDateTime=0x1cac6e3, nFileSizeHigh=0x0, nFileSizeLow=0xad1384b, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfx_Core.mzz", cAlternateFileName="NETFX_~1.MZZ")) returned 1 [0192.805] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b818 [0192.805] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227e40 [0192.805] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x21ae50 [0192.805] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227e40 | out: hHeap=0x1f0000) returned 1 [0192.806] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215860 | out: hHeap=0x1f0000) returned 1 [0192.806] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b818 | out: hHeap=0x1f0000) returned 1 [0192.806] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\netfx_Core.mzz" (normalized: "c:\\588bce7c90097ed212\\netfx_core.mzz"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0192.806] GetFileType (hFile=0x1d8) returned 0x1 [0192.807] CloseHandle (hObject=0x1d8) returned 1 [0192.807] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x215860 [0192.807] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\netfx_Core.mzz" (normalized: "c:\\588bce7c90097ed212\\netfx_core.mzz"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x66ea7e00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0x66ea7e00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0x66ea7e00, ftLastWriteTime.dwHighDateTime=0x1cac6e3, nFileSizeHigh=0x0, nFileSizeLow=0xad1384b)) returned 1 [0192.807] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215860 | out: hHeap=0x1f0000) returned 1 [0192.807] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x215860 [0192.807] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\netfx_Core.mzz" (normalized: "c:\\588bce7c90097ed212\\netfx_core.mzz"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x66ea7e00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0x66ea7e00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0x66ea7e00, ftLastWriteTime.dwHighDateTime=0x1cac6e3, nFileSizeHigh=0x0, nFileSizeLow=0xad1384b)) returned 1 [0192.807] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215860 | out: hHeap=0x1f0000) returned 1 [0192.807] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x215860 [0192.807] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215860 | out: hHeap=0x1f0000) returned 1 [0192.808] FindNextFileW (in: hFindFile=0x214590, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xc183da00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0xc183da00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0xc183da00, ftLastWriteTime.dwHighDateTime=0x1cac6e3, nFileSizeHigh=0x0, nFileSizeLow=0x1d0200, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfx_Core_x64.msi", cAlternateFileName="NETFX_~1.MSI")) returned 1 [0192.808] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227fc8 [0192.808] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228038 [0192.808] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a8a0 [0192.808] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228038 | out: hHeap=0x1f0000) returned 1 [0192.808] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ae50 | out: hHeap=0x1f0000) returned 1 [0192.808] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227fc8 | out: hHeap=0x1f0000) returned 1 [0192.809] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\netfx_Core_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0192.809] GetFileType (hFile=0x1d8) returned 0x1 [0192.809] CloseHandle (hObject=0x1d8) returned 1 [0192.809] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ac48 [0192.810] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\netfx_Core_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x64.msi"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xc183da00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0xc183da00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0xc183da00, ftLastWriteTime.dwHighDateTime=0x1cac6e3, nFileSizeHigh=0x0, nFileSizeLow=0x1d0200)) returned 1 [0192.810] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ac48 | out: hHeap=0x1f0000) returned 1 [0192.810] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ac48 [0192.810] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\netfx_Core_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x64.msi"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xc183da00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0xc183da00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0xc183da00, ftLastWriteTime.dwHighDateTime=0x1cac6e3, nFileSizeHigh=0x0, nFileSizeLow=0x1d0200)) returned 1 [0192.810] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ac48 | out: hHeap=0x1f0000) returned 1 [0192.810] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a838 [0192.811] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a838 | out: hHeap=0x1f0000) returned 1 [0192.811] FindNextFileW (in: hFindFile=0x214590, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x4c130c00, ftCreationTime.dwHighDateTime=0x1cac6d9, ftLastAccessTime.dwLowDateTime=0x4c130c00, ftLastAccessTime.dwHighDateTime=0x1cac6d9, ftLastWriteTime.dwLowDateTime=0x4c130c00, ftLastWriteTime.dwHighDateTime=0x1cac6d9, nFileSizeHigh=0x0, nFileSizeLow=0x11c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfx_Core_x86.msi", cAlternateFileName="NETFX_~2.MSI")) returned 1 [0192.811] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228150 [0192.811] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0192.811] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a908 [0192.811] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0192.811] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a8a0 | out: hHeap=0x1f0000) returned 1 [0192.811] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228150 | out: hHeap=0x1f0000) returned 1 [0192.811] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\netfx_Core_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x86.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0192.812] GetFileType (hFile=0x1d8) returned 0x1 [0192.812] CloseHandle (hObject=0x1d8) returned 1 [0192.812] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ab78 [0192.812] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\netfx_Core_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x86.msi"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x4c130c00, ftCreationTime.dwHighDateTime=0x1cac6d9, ftLastAccessTime.dwLowDateTime=0x4c130c00, ftLastAccessTime.dwHighDateTime=0x1cac6d9, ftLastWriteTime.dwLowDateTime=0x4c130c00, ftLastWriteTime.dwHighDateTime=0x1cac6d9, nFileSizeHigh=0x0, nFileSizeLow=0x11c000)) returned 1 [0192.812] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab78 | out: hHeap=0x1f0000) returned 1 [0192.812] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22aaa8 [0192.812] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\netfx_Core_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x86.msi"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x4c130c00, ftCreationTime.dwHighDateTime=0x1cac6d9, ftLastAccessTime.dwLowDateTime=0x4c130c00, ftLastAccessTime.dwHighDateTime=0x1cac6d9, ftLastWriteTime.dwLowDateTime=0x4c130c00, ftLastWriteTime.dwHighDateTime=0x1cac6d9, nFileSizeHigh=0x0, nFileSizeLow=0x11c000)) returned 1 [0192.812] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aaa8 | out: hHeap=0x1f0000) returned 1 [0192.813] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22aaa8 [0192.813] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aaa8 | out: hHeap=0x1f0000) returned 1 [0192.813] FindNextFileW (in: hFindFile=0x214590, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf74cd515, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf74cd515, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf7cd9415, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x29222c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfx_Extended.mzz", cAlternateFileName="NETFX_~2.MZZ")) returned 1 [0192.813] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228150 [0192.813] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227e40 [0192.813] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ab78 [0192.813] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227e40 | out: hHeap=0x1f0000) returned 1 [0192.813] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a908 | out: hHeap=0x1f0000) returned 1 [0192.813] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228150 | out: hHeap=0x1f0000) returned 1 [0192.813] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\netfx_Extended.mzz" (normalized: "c:\\588bce7c90097ed212\\netfx_extended.mzz"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0192.813] GetFileType (hFile=0x1d8) returned 0x1 [0192.814] CloseHandle (hObject=0x1d8) returned 1 [0192.814] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22abe0 [0192.814] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\netfx_Extended.mzz" (normalized: "c:\\588bce7c90097ed212\\netfx_extended.mzz"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf74cd515, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf74cd515, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf7cd9415, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x29222c7)) returned 1 [0192.814] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22abe0 | out: hHeap=0x1f0000) returned 1 [0192.814] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a838 [0192.814] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\netfx_Extended.mzz" (normalized: "c:\\588bce7c90097ed212\\netfx_extended.mzz"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf74cd515, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf74cd515, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf7cd9415, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x29222c7)) returned 1 [0192.814] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a838 | out: hHeap=0x1f0000) returned 1 [0192.815] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22acb0 [0192.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22acb0 | out: hHeap=0x1f0000) returned 1 [0192.815] FindNextFileW (in: hFindFile=0x214590, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2dbe0800, ftCreationTime.dwHighDateTime=0x1cac6fb, ftLastAccessTime.dwLowDateTime=0x2dbe0800, ftLastAccessTime.dwHighDateTime=0x1cac6fb, ftLastWriteTime.dwLowDateTime=0x2dbe0800, ftLastWriteTime.dwHighDateTime=0x1cac6fb, nFileSizeHigh=0x0, nFileSizeLow=0xd5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfx_Extended_x64.msi", cAlternateFileName="NETFX_~3.MSI")) returned 1 [0192.815] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228150 [0192.815] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0192.815] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22af20 [0192.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0192.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab78 | out: hHeap=0x1f0000) returned 1 [0192.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228150 | out: hHeap=0x1f0000) returned 1 [0192.815] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\netfx_Extended_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0192.815] GetFileType (hFile=0x1d8) returned 0x1 [0192.816] CloseHandle (hObject=0x1d8) returned 1 [0192.816] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22aeb8 [0192.816] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\netfx_Extended_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x64.msi"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2dbe0800, ftCreationTime.dwHighDateTime=0x1cac6fb, ftLastAccessTime.dwLowDateTime=0x2dbe0800, ftLastAccessTime.dwHighDateTime=0x1cac6fb, ftLastWriteTime.dwLowDateTime=0x2dbe0800, ftLastWriteTime.dwHighDateTime=0x1cac6fb, nFileSizeHigh=0x0, nFileSizeLow=0xd5000)) returned 1 [0192.816] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aeb8 | out: hHeap=0x1f0000) returned 1 [0192.816] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22acb0 [0192.816] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\netfx_Extended_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x64.msi"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2dbe0800, ftCreationTime.dwHighDateTime=0x1cac6fb, ftLastAccessTime.dwLowDateTime=0x2dbe0800, ftLastAccessTime.dwHighDateTime=0x1cac6fb, ftLastWriteTime.dwLowDateTime=0x2dbe0800, ftLastWriteTime.dwHighDateTime=0x1cac6fb, nFileSizeHigh=0x0, nFileSizeLow=0xd5000)) returned 1 [0192.816] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22acb0 | out: hHeap=0x1f0000) returned 1 [0192.816] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22aa40 [0192.816] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aa40 | out: hHeap=0x1f0000) returned 1 [0192.816] GetLastError () returned 0x0 [0192.817] SetLastError (dwErrCode=0x0) [0192.817] GetLastError () returned 0x0 [0192.817] SetLastError (dwErrCode=0x0) [0192.817] AreFileApisANSI () returned 1 [0192.817] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58420, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0192.817] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58420, cbMultiByte=4, lpWideCharStr=0x1fdf720, cchWideChar=4 | out: lpWideCharStr=".exe") returned 4 [0192.817] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b818 [0192.817] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234a58 [0192.817] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2276b8 [0192.817] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22af88 [0192.817] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228150 [0192.817] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b840 [0192.817] CryptAcquireContextA (in: phProv=0x1fdee08, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1fdee08*=0x22a3e0) returned 1 [0192.822] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x22b840 | out: pbBuffer=0x22b840) returned 1 [0192.822] CryptReleaseContext (hProv=0x22a3e0, dwFlags=0x0) returned 1 [0192.822] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b840 | out: hHeap=0x1f0000) returned 1 [0192.822] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x22bac8 [0192.822] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x217038 [0192.823] QueryPerformanceCounter (in: lpPerformanceCount=0x1fded9c | out: lpPerformanceCount=0x1fded9c*=35019144122) returned 1 [0192.823] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1fdeddc | out: lpSystemTimeAsFileTime=0x1fdeddc) [0192.823] QueryPerformanceCounter (in: lpPerformanceCount=0x1fded9c | out: lpPerformanceCount=0x1fded9c*=35019165605) returned 1 [0192.823] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1fdeddc | out: lpSystemTimeAsFileTime=0x1fdeddc) [0192.990] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x227ba0 [0192.990] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x24d680 [0193.191] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x24e898 [0193.191] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x24e9a8 [0193.191] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffb8 [0193.191] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206838 [0193.191] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffd0 [0193.191] GetLastError () returned 0x0 [0193.192] SetLastError (dwErrCode=0x0) [0193.192] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ba0 | out: hHeap=0x1f0000) returned 1 [0193.192] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x215060 [0193.192] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x239be0 [0193.192] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215060 | out: hHeap=0x1f0000) returned 1 [0193.192] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x106) returned 0x24ea78 [0193.192] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239be0 | out: hHeap=0x1f0000) returned 1 [0193.192] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c610 [0193.192] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c600 [0193.193] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x38) returned 0x214190 [0193.193] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\netfx_Extended_x64.msi.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x64.msi.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdeca8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0193.194] GetFileType (hFile=0x200) returned 0x1 [0193.194] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c720 [0193.194] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c5e0 [0193.194] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x38) returned 0x214210 [0193.195] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\netfx_Extended_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdecd8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0193.195] GetFileType (hFile=0x204) returned 0x1 [0193.195] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205130 [0193.195] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205150 [0193.195] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x239be0 [0193.196] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c590 [0193.196] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c620 [0193.196] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x38) returned 0x214410 [0193.197] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\netfx_Extended_x64.msi.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x64.msi.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdec24, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0193.197] GetFileType (hFile=0x208) returned 0x1 [0193.197] GetLastError () returned 0xb7 [0193.197] SetLastError (dwErrCode=0xb7) [0193.197] GetLastError () returned 0xb7 [0193.198] SetLastError (dwErrCode=0xb7) [0193.198] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205130 | out: hHeap=0x1f0000) returned 1 [0193.198] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205150 | out: hHeap=0x1f0000) returned 1 [0193.198] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe4) returned 0x24eb88 [0193.198] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205130 [0193.198] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205150 [0193.198] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204df0 [0193.198] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x24ec78 [0193.198] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c700 [0193.198] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c5f0 [0193.199] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x38) returned 0x214490 [0193.199] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\netfx_Extended_x64.msi.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x64.msi.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdec24, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x20c [0193.199] GetFileType (hFile=0x20c) returned 0x1 [0193.200] GetLastError () returned 0xb7 [0193.200] SetLastError (dwErrCode=0xb7) [0193.200] GetLastError () returned 0xb7 [0193.200] SetLastError (dwErrCode=0xb7) [0193.200] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205150 | out: hHeap=0x1f0000) returned 1 [0193.201] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204df0 | out: hHeap=0x1f0000) returned 1 [0193.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bf0 [0193.201] GetLastError () returned 0xb7 [0193.201] SetLastError (dwErrCode=0xb7) [0193.201] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bf0 | out: hHeap=0x1f0000) returned 1 [0193.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204dd0 [0193.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cf0 [0193.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e10 [0193.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb8) returned 0x24ed30 [0193.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c630 [0193.202] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c6a0 [0193.204] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x38) returned 0x2144d0 [0193.205] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\netfx_Extended_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x64.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdec1c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0193.206] GetFileType (hFile=0x210) returned 0x1 [0193.207] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x23ddc8 [0193.207] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdeb78, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdeb78*=0x1000, lpOverlapped=0x0) returned 1 [0193.283] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24f370 [0193.284] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x23bdb8 [0193.284] GetLastError () returned 0x0 [0193.284] SetLastError (dwErrCode=0x0) [0193.284] GetLastError () returned 0x0 [0193.285] SetLastError (dwErrCode=0x0) [0193.285] GetLastError () returned 0x0 [0193.285] SetLastError (dwErrCode=0x0) [0193.285] GetLastError () returned 0x0 [0193.286] SetLastError (dwErrCode=0x0) [0193.286] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0193.288] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0193.290] GetLastError () returned 0x0 [0193.290] SetLastError (dwErrCode=0x0) [0193.290] GetLastError () returned 0x0 [0193.290] SetLastError (dwErrCode=0x0) [0193.291] GetLastError () returned 0x0 [0193.291] SetLastError (dwErrCode=0x0) [0193.291] GetLastError () returned 0x0 [0193.292] SetLastError (dwErrCode=0x0) [0193.292] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0193.293] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0193.294] GetLastError () returned 0x0 [0193.294] SetLastError (dwErrCode=0x0) [0193.295] GetLastError () returned 0x0 [0193.295] SetLastError (dwErrCode=0x0) [0193.295] GetLastError () returned 0x0 [0193.295] SetLastError (dwErrCode=0x0) [0193.296] GetLastError () returned 0x0 [0193.296] SetLastError (dwErrCode=0x0) [0193.296] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0193.297] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0193.297] GetLastError () returned 0x0 [0193.297] SetLastError (dwErrCode=0x0) [0193.297] GetLastError () returned 0x0 [0193.298] SetLastError (dwErrCode=0x0) [0193.298] GetLastError () returned 0x0 [0193.298] SetLastError (dwErrCode=0x0) [0193.298] GetLastError () returned 0x0 [0193.298] SetLastError (dwErrCode=0x0) [0193.299] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0193.299] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0193.300] GetLastError () returned 0x0 [0193.300] SetLastError (dwErrCode=0x0) [0193.300] GetLastError () returned 0x0 [0193.301] SetLastError (dwErrCode=0x0) [0193.301] GetLastError () returned 0x0 [0193.301] SetLastError (dwErrCode=0x0) [0193.302] GetLastError () returned 0x0 [0193.302] SetLastError (dwErrCode=0x0) [0193.302] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0193.303] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0193.304] GetLastError () returned 0x0 [0193.304] SetLastError (dwErrCode=0x0) [0193.304] GetLastError () returned 0x0 [0193.305] SetLastError (dwErrCode=0x0) [0193.305] GetLastError () returned 0x0 [0193.305] SetLastError (dwErrCode=0x0) [0193.306] GetLastError () returned 0x0 [0193.306] SetLastError (dwErrCode=0x0) [0193.306] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0193.307] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0193.308] GetLastError () returned 0x0 [0193.308] SetLastError (dwErrCode=0x0) [0193.308] GetLastError () returned 0x0 [0193.308] SetLastError (dwErrCode=0x0) [0193.309] GetLastError () returned 0x0 [0193.309] SetLastError (dwErrCode=0x0) [0193.310] GetLastError () returned 0x0 [0193.310] SetLastError (dwErrCode=0x0) [0193.310] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0193.311] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0193.312] GetLastError () returned 0x0 [0193.312] SetLastError (dwErrCode=0x0) [0193.313] GetLastError () returned 0x0 [0193.313] SetLastError (dwErrCode=0x0) [0193.313] GetLastError () returned 0x0 [0193.313] SetLastError (dwErrCode=0x0) [0193.314] GetLastError () returned 0x0 [0193.314] SetLastError (dwErrCode=0x0) [0193.314] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0193.315] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0193.315] GetLastError () returned 0x0 [0193.316] SetLastError (dwErrCode=0x0) [0193.316] GetLastError () returned 0x0 [0193.316] SetLastError (dwErrCode=0x0) [0193.317] GetLastError () returned 0x0 [0193.317] SetLastError (dwErrCode=0x0) [0193.317] GetLastError () returned 0x0 [0193.317] SetLastError (dwErrCode=0x0) [0193.318] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0193.318] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0193.319] GetLastError () returned 0x0 [0193.319] SetLastError (dwErrCode=0x0) [0193.319] GetLastError () returned 0x0 [0193.319] SetLastError (dwErrCode=0x0) [0193.320] GetLastError () returned 0x0 [0193.320] SetLastError (dwErrCode=0x0) [0193.321] GetLastError () returned 0x0 [0193.321] SetLastError (dwErrCode=0x0) [0193.321] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0193.322] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0193.322] GetLastError () returned 0x0 [0193.323] SetLastError (dwErrCode=0x0) [0193.323] GetLastError () returned 0x0 [0193.323] SetLastError (dwErrCode=0x0) [0193.324] GetLastError () returned 0x0 [0193.324] SetLastError (dwErrCode=0x0) [0193.324] GetLastError () returned 0x0 [0193.324] SetLastError (dwErrCode=0x0) [0193.325] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0193.325] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0193.326] GetLastError () returned 0x0 [0193.326] SetLastError (dwErrCode=0x0) [0193.327] GetLastError () returned 0x0 [0193.327] SetLastError (dwErrCode=0x0) [0193.640] GetLastError () returned 0x0 [0193.640] SetLastError (dwErrCode=0x0) [0193.640] GetLastError () returned 0x0 [0193.640] SetLastError (dwErrCode=0x0) [0193.640] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0193.641] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0193.641] GetLastError () returned 0x0 [0193.641] SetLastError (dwErrCode=0x0) [0193.641] GetLastError () returned 0x0 [0193.641] SetLastError (dwErrCode=0x0) [0193.641] GetLastError () returned 0x0 [0193.642] SetLastError (dwErrCode=0x0) [0193.642] GetLastError () returned 0x0 [0193.642] SetLastError (dwErrCode=0x0) [0193.642] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0193.642] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0193.642] GetLastError () returned 0x0 [0193.642] SetLastError (dwErrCode=0x0) [0193.643] GetLastError () returned 0x0 [0193.643] SetLastError (dwErrCode=0x0) [0193.643] GetLastError () returned 0x0 [0193.643] SetLastError (dwErrCode=0x0) [0193.643] GetLastError () returned 0x0 [0193.643] SetLastError (dwErrCode=0x0) [0193.643] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0193.644] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0193.644] GetLastError () returned 0x0 [0193.644] SetLastError (dwErrCode=0x0) [0193.644] GetLastError () returned 0x0 [0193.644] SetLastError (dwErrCode=0x0) [0193.644] GetLastError () returned 0x0 [0193.644] SetLastError (dwErrCode=0x0) [0193.644] GetLastError () returned 0x0 [0193.644] SetLastError (dwErrCode=0x0) [0193.645] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0193.645] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0193.645] GetLastError () returned 0x0 [0193.645] SetLastError (dwErrCode=0x0) [0193.645] GetLastError () returned 0x0 [0193.645] SetLastError (dwErrCode=0x0) [0193.646] GetLastError () returned 0x0 [0193.646] SetLastError (dwErrCode=0x0) [0193.646] GetLastError () returned 0x0 [0193.646] SetLastError (dwErrCode=0x0) [0193.646] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0193.646] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0193.647] GetLastError () returned 0x0 [0193.647] SetLastError (dwErrCode=0x0) [0193.647] GetLastError () returned 0x0 [0193.647] SetLastError (dwErrCode=0x0) [0193.647] GetLastError () returned 0x0 [0193.647] SetLastError (dwErrCode=0x0) [0193.647] GetLastError () returned 0x0 [0193.647] SetLastError (dwErrCode=0x0) [0193.647] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0193.647] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0193.648] GetLastError () returned 0x0 [0193.648] SetLastError (dwErrCode=0x0) [0193.648] GetLastError () returned 0x0 [0193.648] SetLastError (dwErrCode=0x0) [0193.648] GetLastError () returned 0x0 [0193.648] SetLastError (dwErrCode=0x0) [0193.648] GetLastError () returned 0x0 [0193.648] SetLastError (dwErrCode=0x0) [0193.648] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0193.648] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0193.649] GetLastError () returned 0x0 [0193.649] SetLastError (dwErrCode=0x0) [0193.649] GetLastError () returned 0x0 [0193.649] SetLastError (dwErrCode=0x0) [0193.649] GetLastError () returned 0x0 [0193.649] SetLastError (dwErrCode=0x0) [0193.649] GetLastError () returned 0x0 [0193.649] SetLastError (dwErrCode=0x0) [0193.649] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0193.650] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0193.650] GetLastError () returned 0x0 [0193.650] SetLastError (dwErrCode=0x0) [0193.650] GetLastError () returned 0x0 [0193.650] SetLastError (dwErrCode=0x0) [0193.650] GetLastError () returned 0x0 [0193.650] SetLastError (dwErrCode=0x0) [0193.650] GetLastError () returned 0x0 [0193.650] SetLastError (dwErrCode=0x0) [0193.651] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0193.651] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0193.651] GetLastError () returned 0x0 [0193.651] SetLastError (dwErrCode=0x0) [0193.651] GetLastError () returned 0x0 [0193.651] SetLastError (dwErrCode=0x0) [0193.651] GetLastError () returned 0x0 [0193.651] SetLastError (dwErrCode=0x0) [0193.652] GetLastError () returned 0x0 [0193.652] SetLastError (dwErrCode=0x0) [0193.652] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0193.652] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0193.652] GetLastError () returned 0x0 [0193.652] SetLastError (dwErrCode=0x0) [0193.652] GetLastError () returned 0x0 [0193.652] SetLastError (dwErrCode=0x0) [0193.652] GetLastError () returned 0x0 [0193.652] SetLastError (dwErrCode=0x0) [0193.653] GetLastError () returned 0x0 [0193.653] SetLastError (dwErrCode=0x0) [0193.653] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0193.653] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0193.653] GetLastError () returned 0x0 [0193.653] SetLastError (dwErrCode=0x0) [0193.654] GetLastError () returned 0x0 [0193.654] SetLastError (dwErrCode=0x0) [0193.654] GetLastError () returned 0x0 [0193.654] SetLastError (dwErrCode=0x0) [0193.655] GetLastError () returned 0x0 [0193.655] SetLastError (dwErrCode=0x0) [0193.655] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0193.655] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0193.656] GetLastError () returned 0x0 [0193.656] SetLastError (dwErrCode=0x0) [0193.656] GetLastError () returned 0x0 [0193.658] SetLastError (dwErrCode=0x0) [0193.659] GetLastError () returned 0x0 [0193.659] SetLastError (dwErrCode=0x0) [0193.659] GetLastError () returned 0x0 [0193.659] SetLastError (dwErrCode=0x0) [0193.660] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0193.660] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0193.661] GetLastError () returned 0x0 [0193.661] SetLastError (dwErrCode=0x0) [0193.661] GetLastError () returned 0x0 [0193.661] SetLastError (dwErrCode=0x0) [0193.661] GetLastError () returned 0x0 [0193.662] SetLastError (dwErrCode=0x0) [0193.662] GetLastError () returned 0x0 [0193.662] SetLastError (dwErrCode=0x0) [0193.662] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0193.662] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0193.663] GetLastError () returned 0x0 [0193.663] SetLastError (dwErrCode=0x0) [0193.663] GetLastError () returned 0x0 [0193.663] SetLastError (dwErrCode=0x0) [0193.663] GetLastError () returned 0x0 [0193.663] SetLastError (dwErrCode=0x0) [0193.663] GetLastError () returned 0x0 [0193.663] SetLastError (dwErrCode=0x0) [0193.664] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0193.664] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0193.664] GetLastError () returned 0x0 [0193.664] SetLastError (dwErrCode=0x0) [0193.664] GetLastError () returned 0x0 [0193.664] SetLastError (dwErrCode=0x0) [0193.664] GetLastError () returned 0x0 [0193.665] SetLastError (dwErrCode=0x0) [0193.665] GetLastError () returned 0x0 [0193.665] SetLastError (dwErrCode=0x0) [0193.665] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0193.665] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0193.665] GetLastError () returned 0x0 [0193.666] SetLastError (dwErrCode=0x0) [0193.666] GetLastError () returned 0x0 [0193.666] SetLastError (dwErrCode=0x0) [0193.666] GetLastError () returned 0x0 [0193.666] SetLastError (dwErrCode=0x0) [0193.666] GetLastError () returned 0x0 [0193.666] SetLastError (dwErrCode=0x0) [0193.666] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0193.667] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0193.667] GetLastError () returned 0x0 [0193.667] SetLastError (dwErrCode=0x0) [0193.667] GetLastError () returned 0x0 [0193.667] SetLastError (dwErrCode=0x0) [0193.667] GetLastError () returned 0x0 [0193.667] SetLastError (dwErrCode=0x0) [0193.667] GetLastError () returned 0x0 [0193.668] SetLastError (dwErrCode=0x0) [0193.668] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0193.668] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0193.668] GetLastError () returned 0x0 [0193.668] SetLastError (dwErrCode=0x0) [0193.668] GetLastError () returned 0x0 [0193.669] SetLastError (dwErrCode=0x0) [0193.669] GetLastError () returned 0x0 [0193.669] SetLastError (dwErrCode=0x0) [0193.669] GetLastError () returned 0x0 [0193.669] SetLastError (dwErrCode=0x0) [0193.669] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0193.669] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0193.670] GetLastError () returned 0x0 [0193.670] SetLastError (dwErrCode=0x0) [0193.670] GetLastError () returned 0x0 [0193.670] SetLastError (dwErrCode=0x0) [0193.670] GetLastError () returned 0x0 [0193.670] SetLastError (dwErrCode=0x0) [0193.670] GetLastError () returned 0x0 [0193.670] SetLastError (dwErrCode=0x0) [0193.670] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0193.671] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0193.671] GetLastError () returned 0x0 [0193.671] SetLastError (dwErrCode=0x0) [0193.671] GetLastError () returned 0x0 [0193.672] SetLastError (dwErrCode=0x0) [0193.672] GetLastError () returned 0x0 [0193.672] SetLastError (dwErrCode=0x0) [0193.672] GetLastError () returned 0x0 [0193.672] SetLastError (dwErrCode=0x0) [0193.672] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0193.672] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0193.673] GetLastError () returned 0x0 [0193.673] SetLastError (dwErrCode=0x0) [0193.673] GetLastError () returned 0x0 [0193.673] SetLastError (dwErrCode=0x0) [0193.673] GetLastError () returned 0x0 [0193.673] SetLastError (dwErrCode=0x0) [0193.673] GetLastError () returned 0x0 [0193.673] SetLastError (dwErrCode=0x0) [0193.673] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0193.674] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0193.674] GetLastError () returned 0x0 [0193.674] SetLastError (dwErrCode=0x0) [0193.674] GetLastError () returned 0x0 [0193.674] SetLastError (dwErrCode=0x0) [0193.674] GetLastError () returned 0x0 [0193.674] SetLastError (dwErrCode=0x0) [0193.675] GetLastError () returned 0x0 [0193.675] SetLastError (dwErrCode=0x0) [0193.675] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0193.675] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0193.675] GetLastError () returned 0x0 [0193.675] SetLastError (dwErrCode=0x0) [0193.675] GetLastError () returned 0x0 [0193.676] SetLastError (dwErrCode=0x0) [0193.676] GetLastError () returned 0x0 [0193.676] SetLastError (dwErrCode=0x0) [0193.676] GetLastError () returned 0x0 [0193.676] SetLastError (dwErrCode=0x0) [0193.676] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0193.676] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0193.677] GetLastError () returned 0x0 [0193.677] SetLastError (dwErrCode=0x0) [0193.677] GetLastError () returned 0x0 [0193.677] SetLastError (dwErrCode=0x0) [0193.677] GetLastError () returned 0x0 [0193.677] SetLastError (dwErrCode=0x0) [0193.678] GetLastError () returned 0x0 [0193.678] SetLastError (dwErrCode=0x0) [0193.678] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0193.678] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0193.679] GetLastError () returned 0x0 [0193.679] SetLastError (dwErrCode=0x0) [0193.679] GetLastError () returned 0x0 [0193.679] SetLastError (dwErrCode=0x0) [0193.679] GetLastError () returned 0x0 [0193.679] SetLastError (dwErrCode=0x0) [0193.679] GetLastError () returned 0x0 [0193.680] SetLastError (dwErrCode=0x0) [0193.680] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0193.680] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0193.680] GetLastError () returned 0x0 [0193.681] SetLastError (dwErrCode=0x0) [0193.681] GetLastError () returned 0x0 [0193.681] SetLastError (dwErrCode=0x0) [0193.681] GetLastError () returned 0x0 [0193.681] SetLastError (dwErrCode=0x0) [0193.681] GetLastError () returned 0x0 [0193.681] SetLastError (dwErrCode=0x0) [0193.681] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0193.681] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0193.682] GetLastError () returned 0x0 [0193.682] SetLastError (dwErrCode=0x0) [0193.682] GetLastError () returned 0x0 [0193.682] SetLastError (dwErrCode=0x0) [0193.682] GetLastError () returned 0x0 [0193.682] SetLastError (dwErrCode=0x0) [0193.682] GetLastError () returned 0x0 [0193.682] SetLastError (dwErrCode=0x0) [0193.682] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0193.682] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0193.683] GetLastError () returned 0x0 [0193.683] SetLastError (dwErrCode=0x0) [0193.683] GetLastError () returned 0x0 [0193.683] SetLastError (dwErrCode=0x0) [0193.683] GetLastError () returned 0x0 [0193.683] SetLastError (dwErrCode=0x0) [0193.683] GetLastError () returned 0x0 [0193.683] SetLastError (dwErrCode=0x0) [0193.683] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0193.684] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0193.684] GetLastError () returned 0x0 [0193.684] SetLastError (dwErrCode=0x0) [0193.684] GetLastError () returned 0x0 [0193.684] SetLastError (dwErrCode=0x0) [0193.684] GetLastError () returned 0x0 [0193.685] SetLastError (dwErrCode=0x0) [0193.685] GetLastError () returned 0x0 [0193.685] SetLastError (dwErrCode=0x0) [0193.685] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0193.685] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0193.685] GetLastError () returned 0x0 [0193.685] SetLastError (dwErrCode=0x0) [0193.685] GetLastError () returned 0x0 [0193.686] SetLastError (dwErrCode=0x0) [0193.686] GetLastError () returned 0x0 [0193.686] SetLastError (dwErrCode=0x0) [0193.686] GetLastError () returned 0x0 [0193.686] SetLastError (dwErrCode=0x0) [0193.686] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0193.686] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0193.897] GetLastError () returned 0x0 [0193.897] SetLastError (dwErrCode=0x0) [0193.897] GetLastError () returned 0x0 [0193.897] SetLastError (dwErrCode=0x0) [0193.897] GetLastError () returned 0x0 [0193.897] SetLastError (dwErrCode=0x0) [0193.897] GetLastError () returned 0x0 [0193.897] SetLastError (dwErrCode=0x0) [0193.897] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0193.897] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0193.898] GetLastError () returned 0x0 [0193.898] SetLastError (dwErrCode=0x0) [0193.898] GetLastError () returned 0x0 [0193.898] SetLastError (dwErrCode=0x0) [0193.898] GetLastError () returned 0x0 [0193.898] SetLastError (dwErrCode=0x0) [0193.898] GetLastError () returned 0x0 [0193.898] SetLastError (dwErrCode=0x0) [0193.898] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0193.898] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0193.898] GetLastError () returned 0x0 [0193.898] SetLastError (dwErrCode=0x0) [0193.899] GetLastError () returned 0x0 [0193.899] SetLastError (dwErrCode=0x0) [0193.899] GetLastError () returned 0x0 [0193.899] SetLastError (dwErrCode=0x0) [0193.899] GetLastError () returned 0x0 [0193.899] SetLastError (dwErrCode=0x0) [0193.899] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0193.900] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0193.900] GetLastError () returned 0x0 [0193.900] SetLastError (dwErrCode=0x0) [0193.900] GetLastError () returned 0x0 [0193.900] SetLastError (dwErrCode=0x0) [0193.900] GetLastError () returned 0x0 [0193.900] SetLastError (dwErrCode=0x0) [0193.901] GetLastError () returned 0x0 [0193.901] SetLastError (dwErrCode=0x0) [0193.901] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0193.939] WriteFile (hFile=0x20c, lpBuffer=0x23bdb8, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0) [0193.939] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0193.940] GetLastError () returned 0x0 [0193.940] SetLastError (dwErrCode=0x0) [0193.940] GetLastError () returned 0x0 [0193.940] SetLastError (dwErrCode=0x0) [0193.940] GetLastError () returned 0x0 [0193.940] SetLastError (dwErrCode=0x0) [0193.940] GetLastError () returned 0x0 [0193.940] SetLastError (dwErrCode=0x0) [0193.940] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0193.940] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0193.941] GetLastError () returned 0x0 [0193.941] SetLastError (dwErrCode=0x0) [0193.941] GetLastError () returned 0x0 [0193.941] SetLastError (dwErrCode=0x0) [0193.941] GetLastError () returned 0x0 [0193.941] SetLastError (dwErrCode=0x0) [0193.941] GetLastError () returned 0x0 [0193.941] SetLastError (dwErrCode=0x0) [0193.941] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0193.941] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0193.942] GetLastError () returned 0x0 [0193.942] SetLastError (dwErrCode=0x0) [0193.942] GetLastError () returned 0x0 [0193.942] SetLastError (dwErrCode=0x0) [0193.942] GetLastError () returned 0x0 [0193.942] SetLastError (dwErrCode=0x0) [0193.942] GetLastError () returned 0x0 [0193.942] SetLastError (dwErrCode=0x0) [0193.942] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0193.942] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0193.943] GetLastError () returned 0x0 [0193.943] SetLastError (dwErrCode=0x0) [0193.943] GetLastError () returned 0x0 [0193.943] SetLastError (dwErrCode=0x0) [0193.943] GetLastError () returned 0x0 [0193.943] SetLastError (dwErrCode=0x0) [0193.943] GetLastError () returned 0x0 [0193.943] SetLastError (dwErrCode=0x0) [0193.943] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0193.943] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0193.943] GetLastError () returned 0x0 [0193.944] SetLastError (dwErrCode=0x0) [0193.944] GetLastError () returned 0x0 [0193.944] SetLastError (dwErrCode=0x0) [0193.944] GetLastError () returned 0x0 [0193.944] SetLastError (dwErrCode=0x0) [0193.944] GetLastError () returned 0x0 [0193.944] SetLastError (dwErrCode=0x0) [0193.944] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0193.944] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0193.944] GetLastError () returned 0x0 [0193.944] SetLastError (dwErrCode=0x0) [0193.945] GetLastError () returned 0x0 [0193.945] SetLastError (dwErrCode=0x0) [0193.945] GetLastError () returned 0x0 [0193.945] SetLastError (dwErrCode=0x0) [0193.945] GetLastError () returned 0x0 [0193.945] SetLastError (dwErrCode=0x0) [0193.945] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0193.945] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0193.945] GetLastError () returned 0x0 [0193.945] SetLastError (dwErrCode=0x0) [0193.945] GetLastError () returned 0x0 [0193.946] SetLastError (dwErrCode=0x0) [0193.946] GetLastError () returned 0x0 [0193.946] SetLastError (dwErrCode=0x0) [0193.946] GetLastError () returned 0x0 [0193.946] SetLastError (dwErrCode=0x0) [0193.946] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0193.946] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0193.946] GetLastError () returned 0x0 [0193.947] SetLastError (dwErrCode=0x0) [0193.947] GetLastError () returned 0x0 [0193.947] SetLastError (dwErrCode=0x0) [0193.947] GetLastError () returned 0x0 [0193.947] SetLastError (dwErrCode=0x0) [0193.947] GetLastError () returned 0x0 [0193.947] SetLastError (dwErrCode=0x0) [0193.947] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0193.947] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0193.948] GetLastError () returned 0x0 [0193.948] SetLastError (dwErrCode=0x0) [0193.948] GetLastError () returned 0x0 [0193.948] SetLastError (dwErrCode=0x0) [0193.948] GetLastError () returned 0x0 [0193.948] SetLastError (dwErrCode=0x0) [0193.948] GetLastError () returned 0x0 [0193.948] SetLastError (dwErrCode=0x0) [0193.948] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0193.948] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0193.949] GetLastError () returned 0x0 [0193.949] SetLastError (dwErrCode=0x0) [0193.949] GetLastError () returned 0x0 [0193.949] SetLastError (dwErrCode=0x0) [0193.949] GetLastError () returned 0x0 [0193.949] SetLastError (dwErrCode=0x0) [0193.949] GetLastError () returned 0x0 [0193.949] SetLastError (dwErrCode=0x0) [0193.949] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0193.949] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0193.950] GetLastError () returned 0x0 [0193.950] SetLastError (dwErrCode=0x0) [0193.950] GetLastError () returned 0x0 [0193.950] SetLastError (dwErrCode=0x0) [0193.950] GetLastError () returned 0x0 [0193.950] SetLastError (dwErrCode=0x0) [0193.950] GetLastError () returned 0x0 [0193.950] SetLastError (dwErrCode=0x0) [0193.950] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0193.951] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0193.951] GetLastError () returned 0x0 [0193.951] SetLastError (dwErrCode=0x0) [0193.951] GetLastError () returned 0x0 [0193.951] SetLastError (dwErrCode=0x0) [0193.951] GetLastError () returned 0x0 [0193.951] SetLastError (dwErrCode=0x0) [0193.951] GetLastError () returned 0x0 [0193.951] SetLastError (dwErrCode=0x0) [0193.951] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0193.951] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0193.952] GetLastError () returned 0x0 [0193.952] SetLastError (dwErrCode=0x0) [0193.952] GetLastError () returned 0x0 [0193.952] SetLastError (dwErrCode=0x0) [0193.952] GetLastError () returned 0x0 [0193.952] SetLastError (dwErrCode=0x0) [0193.952] GetLastError () returned 0x0 [0193.952] SetLastError (dwErrCode=0x0) [0193.952] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0193.952] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0193.953] GetLastError () returned 0x0 [0193.953] SetLastError (dwErrCode=0x0) [0193.953] GetLastError () returned 0x0 [0193.953] SetLastError (dwErrCode=0x0) [0193.953] GetLastError () returned 0x0 [0193.953] SetLastError (dwErrCode=0x0) [0193.953] GetLastError () returned 0x0 [0193.953] SetLastError (dwErrCode=0x0) [0193.953] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0193.953] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0193.954] GetLastError () returned 0x0 [0193.954] SetLastError (dwErrCode=0x0) [0193.954] GetLastError () returned 0x0 [0193.954] SetLastError (dwErrCode=0x0) [0193.954] GetLastError () returned 0x0 [0193.954] SetLastError (dwErrCode=0x0) [0193.954] GetLastError () returned 0x0 [0193.954] SetLastError (dwErrCode=0x0) [0193.954] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0193.954] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0193.955] GetLastError () returned 0x0 [0193.955] SetLastError (dwErrCode=0x0) [0193.955] GetLastError () returned 0x0 [0193.955] SetLastError (dwErrCode=0x0) [0193.955] GetLastError () returned 0x0 [0193.955] SetLastError (dwErrCode=0x0) [0193.955] GetLastError () returned 0x0 [0193.955] SetLastError (dwErrCode=0x0) [0193.955] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0193.955] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0193.956] GetLastError () returned 0x0 [0193.956] SetLastError (dwErrCode=0x0) [0193.956] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0193.956] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0193.957] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0193.957] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0193.957] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0193.957] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0193.959] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0193.960] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0193.960] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0193.960] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0193.960] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0193.961] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0193.961] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0193.961] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0193.961] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0193.961] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0193.962] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0193.962] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0193.962] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0193.963] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0193.963] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0193.963] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0193.963] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0193.964] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0193.964] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0193.964] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0193.965] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0193.965] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0193.965] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0193.965] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0193.966] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0193.968] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0193.969] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0193.969] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0193.969] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0193.969] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0193.970] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0193.970] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0193.970] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0193.970] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0193.971] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0193.971] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0193.971] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0193.971] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0193.972] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0193.972] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0193.972] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0193.972] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0193.973] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0193.973] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0193.973] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0193.973] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0193.973] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0193.974] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0193.974] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0193.974] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0193.975] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0193.975] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0193.975] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0193.976] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0193.976] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0193.976] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0194.301] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0194.301] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0194.302] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0194.302] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0194.302] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0194.302] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0194.303] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0194.303] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0194.303] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0194.304] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0194.304] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0194.304] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0194.305] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0194.305] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0194.305] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0194.305] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0194.306] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0194.306] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0194.306] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0194.306] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0194.307] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0194.307] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0194.307] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0194.307] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0194.308] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0194.308] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0194.308] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0194.308] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0194.309] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0194.309] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0194.309] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0194.310] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0194.310] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0194.313] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0194.313] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0194.313] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0194.314] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0194.314] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0194.314] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0194.314] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0194.315] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0194.315] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0194.315] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0194.315] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0194.316] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0194.316] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0194.316] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0194.316] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0194.317] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0194.317] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0194.317] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0194.317] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0194.317] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0194.317] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0194.318] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0194.318] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0194.318] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0194.318] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0194.319] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0194.319] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0194.319] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0194.319] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0194.319] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0194.319] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0194.320] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0194.320] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0194.320] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0194.321] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0194.321] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0194.321] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0194.321] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0194.321] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0194.323] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0194.323] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0194.323] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0194.323] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0194.324] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0194.324] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0194.324] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0194.324] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0194.325] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0194.325] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0194.325] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0194.325] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0194.325] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0194.326] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0194.326] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0194.326] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0194.326] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0194.327] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0194.327] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0194.327] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0194.328] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0194.329] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0194.329] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0194.329] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0194.329] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0194.432] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0194.433] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0194.433] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0194.433] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0194.433] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0194.434] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0194.434] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0194.434] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0194.434] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0194.435] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0194.435] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0194.435] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0194.435] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0194.436] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0194.436] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0194.436] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0194.436] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0194.436] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0194.437] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0194.437] GetLastError () returned 0x0 [0194.437] SetLastError (dwErrCode=0x0) [0194.438] GetLastError () returned 0x0 [0194.438] SetLastError (dwErrCode=0x0) [0194.438] GetLastError () returned 0x0 [0194.438] SetLastError (dwErrCode=0x0) [0194.438] GetLastError () returned 0x0 [0194.438] SetLastError (dwErrCode=0x0) [0194.439] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0194.439] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0194.439] GetLastError () returned 0x0 [0194.439] SetLastError (dwErrCode=0x0) [0194.440] GetLastError () returned 0x0 [0194.440] SetLastError (dwErrCode=0x0) [0194.440] GetLastError () returned 0x0 [0194.440] SetLastError (dwErrCode=0x0) [0194.440] GetLastError () returned 0x0 [0194.440] SetLastError (dwErrCode=0x0) [0194.441] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0194.441] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0194.441] GetLastError () returned 0x0 [0194.441] SetLastError (dwErrCode=0x0) [0194.442] GetLastError () returned 0x0 [0194.442] SetLastError (dwErrCode=0x0) [0194.442] GetLastError () returned 0x0 [0194.442] SetLastError (dwErrCode=0x0) [0194.442] GetLastError () returned 0x0 [0194.442] SetLastError (dwErrCode=0x0) [0194.443] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0194.443] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0194.443] GetLastError () returned 0x0 [0194.443] SetLastError (dwErrCode=0x0) [0194.444] GetLastError () returned 0x0 [0194.444] SetLastError (dwErrCode=0x0) [0194.444] GetLastError () returned 0x0 [0194.444] SetLastError (dwErrCode=0x0) [0194.444] GetLastError () returned 0x0 [0194.444] SetLastError (dwErrCode=0x0) [0194.444] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0194.445] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0194.445] GetLastError () returned 0x0 [0194.445] SetLastError (dwErrCode=0x0) [0194.445] GetLastError () returned 0x0 [0194.446] SetLastError (dwErrCode=0x0) [0194.446] GetLastError () returned 0x0 [0194.446] SetLastError (dwErrCode=0x0) [0194.446] GetLastError () returned 0x0 [0194.446] SetLastError (dwErrCode=0x0) [0194.446] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0194.446] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0194.447] GetLastError () returned 0x0 [0194.447] SetLastError (dwErrCode=0x0) [0194.447] GetLastError () returned 0x0 [0194.447] SetLastError (dwErrCode=0x0) [0194.447] GetLastError () returned 0x0 [0194.447] SetLastError (dwErrCode=0x0) [0194.448] GetLastError () returned 0x0 [0194.448] SetLastError (dwErrCode=0x0) [0194.448] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0194.448] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0194.448] GetLastError () returned 0x0 [0194.448] SetLastError (dwErrCode=0x0) [0194.449] GetLastError () returned 0x0 [0194.449] SetLastError (dwErrCode=0x0) [0194.449] GetLastError () returned 0x0 [0194.449] SetLastError (dwErrCode=0x0) [0194.449] GetLastError () returned 0x0 [0194.449] SetLastError (dwErrCode=0x0) [0194.449] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0194.450] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0194.450] GetLastError () returned 0x0 [0194.450] SetLastError (dwErrCode=0x0) [0194.450] GetLastError () returned 0x0 [0194.450] SetLastError (dwErrCode=0x0) [0194.450] GetLastError () returned 0x0 [0194.451] SetLastError (dwErrCode=0x0) [0194.451] GetLastError () returned 0x0 [0194.451] SetLastError (dwErrCode=0x0) [0194.451] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0194.451] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0194.451] GetLastError () returned 0x0 [0194.451] SetLastError (dwErrCode=0x0) [0194.452] GetLastError () returned 0x0 [0194.452] SetLastError (dwErrCode=0x0) [0194.452] GetLastError () returned 0x0 [0194.452] SetLastError (dwErrCode=0x0) [0194.452] GetLastError () returned 0x0 [0194.452] SetLastError (dwErrCode=0x0) [0194.718] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0194.719] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0194.719] GetLastError () returned 0x0 [0194.719] SetLastError (dwErrCode=0x0) [0194.720] GetLastError () returned 0x0 [0194.720] SetLastError (dwErrCode=0x0) [0194.720] GetLastError () returned 0x0 [0194.720] SetLastError (dwErrCode=0x0) [0194.720] GetLastError () returned 0x0 [0194.721] SetLastError (dwErrCode=0x0) [0194.721] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0194.721] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0194.722] GetLastError () returned 0x0 [0194.722] SetLastError (dwErrCode=0x0) [0194.722] GetLastError () returned 0x0 [0194.722] SetLastError (dwErrCode=0x0) [0194.723] GetLastError () returned 0x0 [0194.723] SetLastError (dwErrCode=0x0) [0194.723] GetLastError () returned 0x0 [0194.723] SetLastError (dwErrCode=0x0) [0194.723] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0194.724] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0194.724] GetLastError () returned 0x0 [0194.724] SetLastError (dwErrCode=0x0) [0194.725] GetLastError () returned 0x0 [0194.725] SetLastError (dwErrCode=0x0) [0194.725] GetLastError () returned 0x0 [0194.725] SetLastError (dwErrCode=0x0) [0194.725] GetLastError () returned 0x0 [0194.725] SetLastError (dwErrCode=0x0) [0194.726] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0194.726] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0194.726] GetLastError () returned 0x0 [0194.726] SetLastError (dwErrCode=0x0) [0194.727] GetLastError () returned 0x0 [0194.727] SetLastError (dwErrCode=0x0) [0194.727] GetLastError () returned 0x0 [0194.727] SetLastError (dwErrCode=0x0) [0194.727] GetLastError () returned 0x0 [0194.727] SetLastError (dwErrCode=0x0) [0194.727] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0194.728] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0194.728] GetLastError () returned 0x0 [0194.728] SetLastError (dwErrCode=0x0) [0194.729] GetLastError () returned 0x0 [0194.729] SetLastError (dwErrCode=0x0) [0194.729] GetLastError () returned 0x0 [0194.729] SetLastError (dwErrCode=0x0) [0194.729] GetLastError () returned 0x0 [0194.729] SetLastError (dwErrCode=0x0) [0194.730] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0194.730] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0194.730] GetLastError () returned 0x0 [0194.730] SetLastError (dwErrCode=0x0) [0194.730] GetLastError () returned 0x0 [0194.731] SetLastError (dwErrCode=0x0) [0194.731] GetLastError () returned 0x0 [0194.731] SetLastError (dwErrCode=0x0) [0194.731] GetLastError () returned 0x0 [0194.731] SetLastError (dwErrCode=0x0) [0194.731] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0194.732] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0194.732] GetLastError () returned 0x0 [0194.732] SetLastError (dwErrCode=0x0) [0194.732] GetLastError () returned 0x0 [0194.732] SetLastError (dwErrCode=0x0) [0194.732] GetLastError () returned 0x0 [0194.732] SetLastError (dwErrCode=0x0) [0194.733] GetLastError () returned 0x0 [0194.733] SetLastError (dwErrCode=0x0) [0194.733] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0194.733] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0194.735] GetLastError () returned 0x0 [0194.735] SetLastError (dwErrCode=0x0) [0194.735] GetLastError () returned 0x0 [0194.735] SetLastError (dwErrCode=0x0) [0194.735] GetLastError () returned 0x0 [0194.735] SetLastError (dwErrCode=0x0) [0194.736] GetLastError () returned 0x0 [0194.736] SetLastError (dwErrCode=0x0) [0194.736] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0194.736] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0194.737] GetLastError () returned 0x0 [0194.737] SetLastError (dwErrCode=0x0) [0194.737] GetLastError () returned 0x0 [0194.737] SetLastError (dwErrCode=0x0) [0194.737] GetLastError () returned 0x0 [0194.737] SetLastError (dwErrCode=0x0) [0194.738] GetLastError () returned 0x0 [0194.738] SetLastError (dwErrCode=0x0) [0194.738] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0194.738] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0194.739] GetLastError () returned 0x0 [0194.739] SetLastError (dwErrCode=0x0) [0194.739] GetLastError () returned 0x0 [0194.739] SetLastError (dwErrCode=0x0) [0194.740] GetLastError () returned 0x0 [0194.740] SetLastError (dwErrCode=0x0) [0194.740] GetLastError () returned 0x0 [0194.740] SetLastError (dwErrCode=0x0) [0194.740] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0194.741] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0194.741] GetLastError () returned 0x0 [0194.741] SetLastError (dwErrCode=0x0) [0194.741] GetLastError () returned 0x0 [0194.742] SetLastError (dwErrCode=0x0) [0194.742] GetLastError () returned 0x0 [0194.742] SetLastError (dwErrCode=0x0) [0194.742] GetLastError () returned 0x0 [0194.742] SetLastError (dwErrCode=0x0) [0194.742] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0194.743] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0194.743] GetLastError () returned 0x0 [0194.743] SetLastError (dwErrCode=0x0) [0194.744] GetLastError () returned 0x0 [0194.744] SetLastError (dwErrCode=0x0) [0194.744] GetLastError () returned 0x0 [0194.744] SetLastError (dwErrCode=0x0) [0194.744] GetLastError () returned 0x0 [0194.744] SetLastError (dwErrCode=0x0) [0194.745] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0194.745] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0194.745] GetLastError () returned 0x0 [0194.745] SetLastError (dwErrCode=0x0) [0194.746] GetLastError () returned 0x0 [0194.746] SetLastError (dwErrCode=0x0) [0194.746] GetLastError () returned 0x0 [0194.746] SetLastError (dwErrCode=0x0) [0194.746] GetLastError () returned 0x0 [0194.746] SetLastError (dwErrCode=0x0) [0194.746] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0194.747] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0194.747] GetLastError () returned 0x0 [0194.747] SetLastError (dwErrCode=0x0) [0194.747] GetLastError () returned 0x0 [0194.748] SetLastError (dwErrCode=0x0) [0194.748] GetLastError () returned 0x0 [0194.748] SetLastError (dwErrCode=0x0) [0194.748] GetLastError () returned 0x0 [0194.748] SetLastError (dwErrCode=0x0) [0194.748] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0194.750] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0194.750] GetLastError () returned 0x0 [0194.751] SetLastError (dwErrCode=0x0) [0194.751] GetLastError () returned 0x0 [0194.751] SetLastError (dwErrCode=0x0) [0194.751] GetLastError () returned 0x0 [0194.751] SetLastError (dwErrCode=0x0) [0194.751] GetLastError () returned 0x0 [0194.751] SetLastError (dwErrCode=0x0) [0194.752] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0194.752] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0194.752] GetLastError () returned 0x0 [0194.752] SetLastError (dwErrCode=0x0) [0194.753] GetLastError () returned 0x0 [0194.753] SetLastError (dwErrCode=0x0) [0194.753] GetLastError () returned 0x0 [0194.753] SetLastError (dwErrCode=0x0) [0194.753] GetLastError () returned 0x0 [0194.753] SetLastError (dwErrCode=0x0) [0194.753] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0194.753] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0194.754] GetLastError () returned 0x0 [0194.754] SetLastError (dwErrCode=0x0) [0194.754] GetLastError () returned 0x0 [0194.754] SetLastError (dwErrCode=0x0) [0194.754] GetLastError () returned 0x0 [0194.754] SetLastError (dwErrCode=0x0) [0194.754] GetLastError () returned 0x0 [0194.754] SetLastError (dwErrCode=0x0) [0194.754] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0194.755] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0194.755] GetLastError () returned 0x0 [0194.755] SetLastError (dwErrCode=0x0) [0194.755] GetLastError () returned 0x0 [0194.755] SetLastError (dwErrCode=0x0) [0194.755] GetLastError () returned 0x0 [0194.755] SetLastError (dwErrCode=0x0) [0194.755] GetLastError () returned 0x0 [0194.756] SetLastError (dwErrCode=0x0) [0194.756] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0194.756] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0194.756] GetLastError () returned 0x0 [0194.756] SetLastError (dwErrCode=0x0) [0194.756] GetLastError () returned 0x0 [0194.756] SetLastError (dwErrCode=0x0) [0194.756] GetLastError () returned 0x0 [0194.756] SetLastError (dwErrCode=0x0) [0194.757] GetLastError () returned 0x0 [0194.757] SetLastError (dwErrCode=0x0) [0194.757] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0194.757] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0194.757] GetLastError () returned 0x0 [0194.757] SetLastError (dwErrCode=0x0) [0194.757] GetLastError () returned 0x0 [0194.757] SetLastError (dwErrCode=0x0) [0194.757] GetLastError () returned 0x0 [0194.757] SetLastError (dwErrCode=0x0) [0194.758] GetLastError () returned 0x0 [0194.758] SetLastError (dwErrCode=0x0) [0194.758] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0194.758] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0194.758] GetLastError () returned 0x0 [0194.758] SetLastError (dwErrCode=0x0) [0194.758] GetLastError () returned 0x0 [0194.758] SetLastError (dwErrCode=0x0) [0194.758] GetLastError () returned 0x0 [0194.759] SetLastError (dwErrCode=0x0) [0194.759] GetLastError () returned 0x0 [0194.759] SetLastError (dwErrCode=0x0) [0194.759] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0194.759] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0194.759] GetLastError () returned 0x0 [0194.759] SetLastError (dwErrCode=0x0) [0194.759] GetLastError () returned 0x0 [0194.759] SetLastError (dwErrCode=0x0) [0194.759] GetLastError () returned 0x0 [0194.759] SetLastError (dwErrCode=0x0) [0194.759] GetLastError () returned 0x0 [0194.759] SetLastError (dwErrCode=0x0) [0194.759] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0194.760] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0194.760] GetLastError () returned 0x0 [0194.760] SetLastError (dwErrCode=0x0) [0194.760] GetLastError () returned 0x0 [0194.760] SetLastError (dwErrCode=0x0) [0194.760] GetLastError () returned 0x0 [0194.760] SetLastError (dwErrCode=0x0) [0194.760] GetLastError () returned 0x0 [0194.760] SetLastError (dwErrCode=0x0) [0194.760] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0194.760] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0194.761] GetLastError () returned 0x0 [0194.761] SetLastError (dwErrCode=0x0) [0194.761] GetLastError () returned 0x0 [0194.761] SetLastError (dwErrCode=0x0) [0194.761] GetLastError () returned 0x0 [0194.761] SetLastError (dwErrCode=0x0) [0194.761] GetLastError () returned 0x0 [0194.761] SetLastError (dwErrCode=0x0) [0194.761] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0194.761] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0194.762] GetLastError () returned 0x0 [0194.762] SetLastError (dwErrCode=0x0) [0194.762] GetLastError () returned 0x0 [0194.762] SetLastError (dwErrCode=0x0) [0194.762] GetLastError () returned 0x0 [0194.762] SetLastError (dwErrCode=0x0) [0194.762] GetLastError () returned 0x0 [0194.762] SetLastError (dwErrCode=0x0) [0194.762] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0194.762] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0194.762] GetLastError () returned 0x0 [0194.763] SetLastError (dwErrCode=0x0) [0194.763] GetLastError () returned 0x0 [0194.763] SetLastError (dwErrCode=0x0) [0194.763] GetLastError () returned 0x0 [0194.763] SetLastError (dwErrCode=0x0) [0194.763] GetLastError () returned 0x0 [0194.763] SetLastError (dwErrCode=0x0) [0194.763] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0194.763] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0194.763] GetLastError () returned 0x0 [0194.763] SetLastError (dwErrCode=0x0) [0194.763] GetLastError () returned 0x0 [0194.763] SetLastError (dwErrCode=0x0) [0194.764] GetLastError () returned 0x0 [0194.764] SetLastError (dwErrCode=0x0) [0194.764] GetLastError () returned 0x0 [0194.764] SetLastError (dwErrCode=0x0) [0194.764] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0194.764] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0194.764] GetLastError () returned 0x0 [0194.764] SetLastError (dwErrCode=0x0) [0194.764] GetLastError () returned 0x0 [0194.764] SetLastError (dwErrCode=0x0) [0194.764] GetLastError () returned 0x0 [0194.764] SetLastError (dwErrCode=0x0) [0194.765] GetLastError () returned 0x0 [0194.765] SetLastError (dwErrCode=0x0) [0194.765] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0195.158] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0195.159] GetLastError () returned 0x0 [0195.159] SetLastError (dwErrCode=0x0) [0195.160] GetLastError () returned 0x0 [0195.160] SetLastError (dwErrCode=0x0) [0195.160] GetLastError () returned 0x0 [0195.160] SetLastError (dwErrCode=0x0) [0195.160] GetLastError () returned 0x0 [0195.160] SetLastError (dwErrCode=0x0) [0195.160] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0195.160] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0195.161] GetLastError () returned 0x0 [0195.161] SetLastError (dwErrCode=0x0) [0195.161] GetLastError () returned 0x0 [0195.161] SetLastError (dwErrCode=0x0) [0195.161] GetLastError () returned 0x0 [0195.161] SetLastError (dwErrCode=0x0) [0195.162] GetLastError () returned 0x0 [0195.162] SetLastError (dwErrCode=0x0) [0195.162] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0195.162] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0195.162] GetLastError () returned 0x0 [0195.162] SetLastError (dwErrCode=0x0) [0195.163] GetLastError () returned 0x0 [0195.163] SetLastError (dwErrCode=0x0) [0195.163] GetLastError () returned 0x0 [0195.163] SetLastError (dwErrCode=0x0) [0195.163] GetLastError () returned 0x0 [0195.163] SetLastError (dwErrCode=0x0) [0195.163] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0195.163] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0195.164] GetLastError () returned 0x0 [0195.164] SetLastError (dwErrCode=0x0) [0195.164] GetLastError () returned 0x0 [0195.164] SetLastError (dwErrCode=0x0) [0195.164] GetLastError () returned 0x0 [0195.164] SetLastError (dwErrCode=0x0) [0195.164] GetLastError () returned 0x0 [0195.164] SetLastError (dwErrCode=0x0) [0195.164] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0195.164] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0195.165] GetLastError () returned 0x0 [0195.165] SetLastError (dwErrCode=0x0) [0195.165] GetLastError () returned 0x0 [0195.165] SetLastError (dwErrCode=0x0) [0195.165] GetLastError () returned 0x0 [0195.165] SetLastError (dwErrCode=0x0) [0195.165] GetLastError () returned 0x0 [0195.165] SetLastError (dwErrCode=0x0) [0195.165] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0195.166] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0195.167] GetLastError () returned 0x0 [0195.167] SetLastError (dwErrCode=0x0) [0195.167] GetLastError () returned 0x0 [0195.167] SetLastError (dwErrCode=0x0) [0195.167] GetLastError () returned 0x0 [0195.167] SetLastError (dwErrCode=0x0) [0195.167] GetLastError () returned 0x0 [0195.168] SetLastError (dwErrCode=0x0) [0195.168] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0195.168] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0195.168] GetLastError () returned 0x0 [0195.168] SetLastError (dwErrCode=0x0) [0195.168] GetLastError () returned 0x0 [0195.168] SetLastError (dwErrCode=0x0) [0195.168] GetLastError () returned 0x0 [0195.168] SetLastError (dwErrCode=0x0) [0195.168] GetLastError () returned 0x0 [0195.168] SetLastError (dwErrCode=0x0) [0195.169] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0195.169] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0195.169] GetLastError () returned 0x0 [0195.169] SetLastError (dwErrCode=0x0) [0195.169] GetLastError () returned 0x0 [0195.169] SetLastError (dwErrCode=0x0) [0195.170] GetLastError () returned 0x0 [0195.170] SetLastError (dwErrCode=0x0) [0195.170] GetLastError () returned 0x0 [0195.170] SetLastError (dwErrCode=0x0) [0195.170] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0195.170] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0195.171] GetLastError () returned 0x0 [0195.171] SetLastError (dwErrCode=0x0) [0195.172] GetLastError () returned 0x0 [0195.172] SetLastError (dwErrCode=0x0) [0195.172] GetLastError () returned 0x0 [0195.172] SetLastError (dwErrCode=0x0) [0195.172] GetLastError () returned 0x0 [0195.172] SetLastError (dwErrCode=0x0) [0195.172] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0195.173] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0195.173] GetLastError () returned 0x0 [0195.173] SetLastError (dwErrCode=0x0) [0195.173] GetLastError () returned 0x0 [0195.173] SetLastError (dwErrCode=0x0) [0195.174] GetLastError () returned 0x0 [0195.174] SetLastError (dwErrCode=0x0) [0195.174] GetLastError () returned 0x0 [0195.174] SetLastError (dwErrCode=0x0) [0195.174] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0195.174] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0195.175] GetLastError () returned 0x0 [0195.175] SetLastError (dwErrCode=0x0) [0195.175] GetLastError () returned 0x0 [0195.175] SetLastError (dwErrCode=0x0) [0195.175] GetLastError () returned 0x0 [0195.175] SetLastError (dwErrCode=0x0) [0195.175] GetLastError () returned 0x0 [0195.175] SetLastError (dwErrCode=0x0) [0195.175] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0195.175] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0195.176] GetLastError () returned 0x0 [0195.176] SetLastError (dwErrCode=0x0) [0195.176] GetLastError () returned 0x0 [0195.176] SetLastError (dwErrCode=0x0) [0195.176] GetLastError () returned 0x0 [0195.176] SetLastError (dwErrCode=0x0) [0195.177] GetLastError () returned 0x0 [0195.177] SetLastError (dwErrCode=0x0) [0195.177] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0195.177] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0195.177] GetLastError () returned 0x0 [0195.177] SetLastError (dwErrCode=0x0) [0195.177] GetLastError () returned 0x0 [0195.178] SetLastError (dwErrCode=0x0) [0195.178] GetLastError () returned 0x0 [0195.178] SetLastError (dwErrCode=0x0) [0195.178] GetLastError () returned 0x0 [0195.178] SetLastError (dwErrCode=0x0) [0195.178] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0195.178] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0195.179] GetLastError () returned 0x0 [0195.179] SetLastError (dwErrCode=0x0) [0195.179] GetLastError () returned 0x0 [0195.179] SetLastError (dwErrCode=0x0) [0195.179] GetLastError () returned 0x0 [0195.179] SetLastError (dwErrCode=0x0) [0195.179] GetLastError () returned 0x0 [0195.179] SetLastError (dwErrCode=0x0) [0195.180] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0195.180] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0195.180] GetLastError () returned 0x0 [0195.180] SetLastError (dwErrCode=0x0) [0195.180] GetLastError () returned 0x0 [0195.181] SetLastError (dwErrCode=0x0) [0195.181] GetLastError () returned 0x0 [0195.181] SetLastError (dwErrCode=0x0) [0195.181] GetLastError () returned 0x0 [0195.181] SetLastError (dwErrCode=0x0) [0195.181] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0195.181] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0195.181] GetLastError () returned 0x0 [0195.182] SetLastError (dwErrCode=0x0) [0195.182] GetLastError () returned 0x0 [0195.182] SetLastError (dwErrCode=0x0) [0195.182] GetLastError () returned 0x0 [0195.182] SetLastError (dwErrCode=0x0) [0195.182] GetLastError () returned 0x0 [0195.182] SetLastError (dwErrCode=0x0) [0195.182] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0195.182] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0195.183] GetLastError () returned 0x0 [0195.183] SetLastError (dwErrCode=0x0) [0195.183] GetLastError () returned 0x0 [0195.183] SetLastError (dwErrCode=0x0) [0195.183] GetLastError () returned 0x0 [0195.183] SetLastError (dwErrCode=0x0) [0195.183] GetLastError () returned 0x0 [0195.183] SetLastError (dwErrCode=0x0) [0195.183] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0195.184] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0195.184] GetLastError () returned 0x0 [0195.184] SetLastError (dwErrCode=0x0) [0195.184] GetLastError () returned 0x0 [0195.184] SetLastError (dwErrCode=0x0) [0195.184] GetLastError () returned 0x0 [0195.184] SetLastError (dwErrCode=0x0) [0195.184] GetLastError () returned 0x0 [0195.184] SetLastError (dwErrCode=0x0) [0195.184] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0195.185] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0195.185] GetLastError () returned 0x0 [0195.185] SetLastError (dwErrCode=0x0) [0195.185] GetLastError () returned 0x0 [0195.185] SetLastError (dwErrCode=0x0) [0195.185] GetLastError () returned 0x0 [0195.186] SetLastError (dwErrCode=0x0) [0195.186] GetLastError () returned 0x0 [0195.186] SetLastError (dwErrCode=0x0) [0195.186] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0195.186] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0195.186] GetLastError () returned 0x0 [0195.186] SetLastError (dwErrCode=0x0) [0195.187] GetLastError () returned 0x0 [0195.187] SetLastError (dwErrCode=0x0) [0195.187] GetLastError () returned 0x0 [0195.187] SetLastError (dwErrCode=0x0) [0195.187] GetLastError () returned 0x0 [0195.187] SetLastError (dwErrCode=0x0) [0195.187] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0195.187] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0195.188] GetLastError () returned 0x0 [0195.188] SetLastError (dwErrCode=0x0) [0195.188] GetLastError () returned 0x0 [0195.188] SetLastError (dwErrCode=0x0) [0195.188] GetLastError () returned 0x0 [0195.188] SetLastError (dwErrCode=0x0) [0195.188] GetLastError () returned 0x0 [0195.188] SetLastError (dwErrCode=0x0) [0195.188] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0195.189] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0195.189] GetLastError () returned 0x0 [0195.189] SetLastError (dwErrCode=0x0) [0195.189] GetLastError () returned 0x0 [0195.189] SetLastError (dwErrCode=0x0) [0195.189] GetLastError () returned 0x0 [0195.189] SetLastError (dwErrCode=0x0) [0195.189] GetLastError () returned 0x0 [0195.189] SetLastError (dwErrCode=0x0) [0195.189] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0195.190] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0195.190] GetLastError () returned 0x0 [0195.190] SetLastError (dwErrCode=0x0) [0195.190] GetLastError () returned 0x0 [0195.190] SetLastError (dwErrCode=0x0) [0195.190] GetLastError () returned 0x0 [0195.190] SetLastError (dwErrCode=0x0) [0195.191] GetLastError () returned 0x0 [0195.191] SetLastError (dwErrCode=0x0) [0195.191] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0195.191] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0195.191] GetLastError () returned 0x0 [0195.191] SetLastError (dwErrCode=0x0) [0195.191] GetLastError () returned 0x0 [0195.191] SetLastError (dwErrCode=0x0) [0195.191] GetLastError () returned 0x0 [0195.192] SetLastError (dwErrCode=0x0) [0195.192] GetLastError () returned 0x0 [0195.192] SetLastError (dwErrCode=0x0) [0195.192] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0195.192] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0195.192] GetLastError () returned 0x0 [0195.192] SetLastError (dwErrCode=0x0) [0195.193] GetLastError () returned 0x0 [0195.193] SetLastError (dwErrCode=0x0) [0195.193] GetLastError () returned 0x0 [0195.193] SetLastError (dwErrCode=0x0) [0195.193] GetLastError () returned 0x0 [0195.193] SetLastError (dwErrCode=0x0) [0195.193] ReadFile (in: hFile=0x210, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x1fdec08*=0x0, lpOverlapped=0x0) returned 1 [0195.193] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20fef8 [0195.193] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fde9bc, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fde9bc*=0x1000, lpOverlapped=0x0) returned 1 [0195.194] GetLastError () returned 0x0 [0195.194] SetLastError (dwErrCode=0x0) [0195.194] WriteFile (in: hFile=0x20c, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fdeafc, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdeafc*=0x10, lpOverlapped=0x0) returned 1 [0195.520] GetLastError () returned 0x0 [0195.520] SetLastError (dwErrCode=0x0) [0195.520] GetLastError () returned 0x0 [0195.520] SetLastError (dwErrCode=0x0) [0195.520] GetLastError () returned 0x0 [0195.520] SetLastError (dwErrCode=0x0) [0195.520] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cf0 | out: hHeap=0x1f0000) returned 1 [0195.520] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e10 | out: hHeap=0x1f0000) returned 1 [0195.520] CloseHandle (hObject=0x200) returned 1 [0195.548] CloseHandle (hObject=0x204) returned 1 [0195.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c5b0 [0195.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c5a0 [0195.550] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\netfx_Extended_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x64.msi"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdecd8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0195.561] GetFileType (hFile=0x204) returned 0x1 [0195.562] GetLastError () returned 0xb7 [0195.562] SetLastError (dwErrCode=0xb7) [0195.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x242df0 [0195.562] GetLastError () returned 0xb7 [0195.563] SetLastError (dwErrCode=0xb7) [0195.563] WriteFile (in: hFile=0x204, lpBuffer=0x1fdd96c*, nNumberOfBytesToWrite=0x1, lpNumberOfBytesWritten=0x1fdd964, lpOverlapped=0x0 | out: lpBuffer=0x1fdd96c*, lpNumberOfBytesWritten=0x1fdd964*=0x1, lpOverlapped=0x0) returned 1 [0195.565] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x242df0 | out: hHeap=0x1f0000) returned 1 [0195.565] CloseHandle (hObject=0x204) returned 1 [0195.565] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\netfx_Extended_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x64.msi")) returned 0 [0195.566] GetLastError () returned 0x20 [0195.566] GetLastError () returned 0x20 [0195.566] SetLastError (dwErrCode=0x20) [0195.566] GetLastError () returned 0x20 [0195.566] SetLastError (dwErrCode=0x20) [0195.566] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215990 [0195.788] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b7c8 [0195.788] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b2f0 [0195.788] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x215ca8 [0195.788] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205150 [0195.788] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x2051f0 [0195.788] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x21c4c0 [0195.788] GetLastError () returned 0x20 [0195.788] SetLastError (dwErrCode=0x20) [0195.788] GetLastError () returned 0x20 [0195.788] SetLastError (dwErrCode=0x20) [0195.788] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205150 | out: hHeap=0x1f0000) returned 1 [0195.788] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2051f0 | out: hHeap=0x1f0000) returned 1 [0195.788] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x2282d8 [0195.789] GetLastError () returned 0x20 [0195.789] SetLastError (dwErrCode=0x20) [0195.789] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282d8 | out: hHeap=0x1f0000) returned 1 [0195.789] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x228310 [0195.789] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a838 [0195.789] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x22b750 [0195.789] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x22d368 [0195.789] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c4f0 [0195.789] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b778 [0195.789] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210090 [0195.789] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c420 [0195.789] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b4d0 [0195.789] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210018 [0195.790] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x22b318 [0195.790] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x20d778 [0195.790] GetLastError () returned 0x20 [0195.790] SetLastError (dwErrCode=0x20) [0195.790] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228310 | out: hHeap=0x1f0000) returned 1 [0195.790] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x21c430 [0195.790] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x21c440 [0195.790] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c450 [0195.790] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c440 | out: hHeap=0x1f0000) returned 1 [0195.790] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c440 [0195.790] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c450 | out: hHeap=0x1f0000) returned 1 [0195.790] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c430 | out: hHeap=0x1f0000) returned 1 [0195.790] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c430 [0195.790] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101c8 [0195.790] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c430 | out: hHeap=0x1f0000) returned 1 [0195.790] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101e0 [0195.790] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0195.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c440 | out: hHeap=0x1f0000) returned 1 [0195.791] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101f8 [0195.791] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210258 [0195.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101f8 | out: hHeap=0x1f0000) returned 1 [0195.791] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0195.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0195.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0195.791] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210210 [0195.791] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204fb0 [0195.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0195.791] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205150 [0195.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204fb0 | out: hHeap=0x1f0000) returned 1 [0195.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0195.791] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204fb0 [0195.791] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x22b340 [0195.792] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204fb0 | out: hHeap=0x1f0000) returned 1 [0195.792] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x2052d0 [0195.792] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b340 | out: hHeap=0x1f0000) returned 1 [0195.792] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205150 | out: hHeap=0x1f0000) returned 1 [0195.792] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x205150 [0195.792] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206898 [0195.792] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205150 | out: hHeap=0x1f0000) returned 1 [0195.792] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x22b5c0 [0195.792] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206898 | out: hHeap=0x1f0000) returned 1 [0195.792] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2052d0 | out: hHeap=0x1f0000) returned 1 [0195.792] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c430 [0195.792] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210228 [0195.792] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c430 | out: hHeap=0x1f0000) returned 1 [0195.792] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101f8 [0195.792] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210228 | out: hHeap=0x1f0000) returned 1 [0195.793] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x205150 [0195.793] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101f8 | out: hHeap=0x1f0000) returned 1 [0195.793] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206898 [0195.793] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205150 | out: hHeap=0x1f0000) returned 1 [0195.793] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206898 | out: hHeap=0x1f0000) returned 1 [0195.793] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b5c0 | out: hHeap=0x1f0000) returned 1 [0195.793] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b7c8 | out: hHeap=0x1f0000) returned 1 [0195.793] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0195.793] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d368 | out: hHeap=0x1f0000) returned 1 [0195.793] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b750 | out: hHeap=0x1f0000) returned 1 [0195.793] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282d8 [0195.793] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b6b0 [0195.793] CryptAcquireContextA (in: phProv=0x1fdee08, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1fdee08*=0x22a3e0) returned 1 [0195.796] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x22b6b0 | out: pbBuffer=0x22b6b0) returned 1 [0195.796] CryptReleaseContext (hProv=0x22a3e0, dwFlags=0x0) returned 1 [0195.796] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b6b0 | out: hHeap=0x1f0000) returned 1 [0195.796] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b5e8 [0195.796] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b750 [0195.796] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282a0 [0195.797] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b5e8 | out: hHeap=0x1f0000) returned 1 [0195.797] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0195.797] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0195.797] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x239560 [0195.797] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210210 [0195.797] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x22a9d8 [0195.797] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x22b5c0 [0195.797] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x22d368 [0195.797] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x2052d0 [0195.797] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ab78 [0195.797] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x22b5e8 [0195.797] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x25fd40 [0195.797] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c430 [0195.797] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b340 [0195.797] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0195.797] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c440 [0195.797] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b638 [0195.797] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0195.797] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0195.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b638 | out: hHeap=0x1f0000) returned 1 [0195.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c440 | out: hHeap=0x1f0000) returned 1 [0195.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0195.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b340 | out: hHeap=0x1f0000) returned 1 [0195.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c430 | out: hHeap=0x1f0000) returned 1 [0195.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25fd40 | out: hHeap=0x1f0000) returned 1 [0195.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b5e8 | out: hHeap=0x1f0000) returned 1 [0195.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab78 | out: hHeap=0x1f0000) returned 1 [0195.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x228310 [0195.798] GetLastError () returned 0x0 [0195.798] SetLastError (dwErrCode=0x0) [0195.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228310 | out: hHeap=0x1f0000) returned 1 [0195.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x228310 [0195.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0195.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0195.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0195.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0195.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0195.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0195.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x221420 [0195.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x25fd40 [0195.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0195.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0195.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0195.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0195.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x25fe48 [0195.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0195.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0195.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fe70 [0195.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x24fd60 [0195.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x225150 [0195.799] QueryPerformanceCounter (in: lpPerformanceCount=0x1fde958 | out: lpPerformanceCount=0x1fde958*=35316833888) returned 1 [0195.800] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1fde998 | out: lpSystemTimeAsFileTime=0x1fde998) [0195.800] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x21c430 [0195.800] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b5e8 [0195.800] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x2052f0 [0195.800] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2052f0 | out: hHeap=0x1f0000) returned 1 [0195.800] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b5e8 | out: hHeap=0x1f0000) returned 1 [0195.800] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b5e8 [0195.800] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x2052f0 [0195.800] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2052f0 | out: hHeap=0x1f0000) returned 1 [0195.800] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b5e8 | out: hHeap=0x1f0000) returned 1 [0195.800] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c430 | out: hHeap=0x1f0000) returned 1 [0195.800] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0195.800] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x2282a0 [0195.800] GetLastError () returned 0x0 [0195.800] SetLastError (dwErrCode=0x0) [0195.801] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0195.801] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0195.801] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0195.801] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0195.801] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b5e8 [0195.801] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b638 [0195.801] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0195.801] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0195.801] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b7c8 [0195.801] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0195.801] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x222ee8 [0195.801] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0195.801] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2608b0 [0195.801] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0195.801] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x24fa20 [0195.801] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608b0 | out: hHeap=0x1f0000) returned 1 [0195.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b6b0 [0195.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b340 [0195.802] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b6b0 | out: hHeap=0x1f0000) returned 1 [0195.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0195.802] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b340 | out: hHeap=0x1f0000) returned 1 [0195.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2608b0 [0195.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x234b90 [0195.802] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b90 | out: hHeap=0x1f0000) returned 1 [0195.802] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608b0 | out: hHeap=0x1f0000) returned 1 [0195.802] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24fa20 | out: hHeap=0x1f0000) returned 1 [0195.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101f8 [0195.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215d38 [0195.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b340 [0195.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b6b0 [0195.803] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b840 [0195.803] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b868 [0195.803] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b6b0 | out: hHeap=0x1f0000) returned 1 [0195.803] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b340 | out: hHeap=0x1f0000) returned 1 [0195.803] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2608b0 [0195.803] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b6b0 [0195.803] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b340 [0195.803] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b6b0 | out: hHeap=0x1f0000) returned 1 [0195.803] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0195.803] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b340 | out: hHeap=0x1f0000) returned 1 [0195.803] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206958 [0195.803] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x234b90 [0195.803] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b90 | out: hHeap=0x1f0000) returned 1 [0195.803] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206958 | out: hHeap=0x1f0000) returned 1 [0195.803] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b7c8 | out: hHeap=0x1f0000) returned 1 [0195.803] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0195.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0195.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608b0 | out: hHeap=0x1f0000) returned 1 [0195.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x205330 [0195.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0195.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0195.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b638 | out: hHeap=0x1f0000) returned 1 [0195.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x236ed0 [0195.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0195.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b868 | out: hHeap=0x1f0000) returned 1 [0195.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b840 | out: hHeap=0x1f0000) returned 1 [0195.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215d38 | out: hHeap=0x1f0000) returned 1 [0195.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0195.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205330 | out: hHeap=0x1f0000) returned 1 [0195.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101f8 | out: hHeap=0x1f0000) returned 1 [0195.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0195.805] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x236c80 [0195.805] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236c80 | out: hHeap=0x1f0000) returned 1 [0195.805] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ee8 | out: hHeap=0x1f0000) returned 1 [0195.805] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0195.805] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0195.805] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0195.805] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0195.805] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b5e8 | out: hHeap=0x1f0000) returned 1 [0195.805] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0195.805] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0195.805] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x236da8 [0195.805] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x237370 [0195.805] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236da8 | out: hHeap=0x1f0000) returned 1 [0195.805] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237370 | out: hHeap=0x1f0000) returned 1 [0195.805] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236ed0 | out: hHeap=0x1f0000) returned 1 [0195.806] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0195.806] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25fe48 | out: hHeap=0x1f0000) returned 1 [0195.806] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221420 | out: hHeap=0x1f0000) returned 1 [0195.806] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x225260 [0195.806] GetLastError () returned 0x0 [0195.806] SetLastError (dwErrCode=0x0) [0195.806] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228310 | out: hHeap=0x1f0000) returned 1 [0195.806] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c430 [0195.806] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c440 [0195.807] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\netfx_Extended_x64.msi.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x64.msi.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1fded08, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8 [0195.807] GetFileType (hFile=0x1c8) returned 0x1 [0195.807] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x241de8 [0195.808] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1fdec90 | out: lpNewFilePointer=0x0) returned 1 [0195.808] GetLastError () returned 0xb7 [0195.808] SetLastError (dwErrCode=0xb7) [0195.808] GetLastError () returned 0xb7 [0195.808] SetLastError (dwErrCode=0xb7) [0195.808] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1fded54 | out: lpNewFilePointer=0x0) returned 1 [0195.808] WriteFile (in: hFile=0x1c8, lpBuffer=0x241de8*, nNumberOfBytesToWrite=0x103, lpNumberOfBytesWritten=0x1fdedb8, lpOverlapped=0x0 | out: lpBuffer=0x241de8*, lpNumberOfBytesWritten=0x1fdedb8*=0x103, lpOverlapped=0x0) returned 1 [0195.809] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x241de8 | out: hHeap=0x1f0000) returned 1 [0195.809] CloseHandle (hObject=0x1c8) returned 1 [0196.214] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c440 | out: hHeap=0x1f0000) returned 1 [0196.214] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c430 | out: hHeap=0x1f0000) returned 1 [0196.214] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25fd40 | out: hHeap=0x1f0000) returned 1 [0196.214] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d368 | out: hHeap=0x1f0000) returned 1 [0196.214] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b5c0 | out: hHeap=0x1f0000) returned 1 [0196.214] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2052d0 | out: hHeap=0x1f0000) returned 1 [0196.214] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a9d8 | out: hHeap=0x1f0000) returned 1 [0196.214] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0196.214] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239560 | out: hHeap=0x1f0000) returned 1 [0196.214] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225260 | out: hHeap=0x1f0000) returned 1 [0196.215] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b750 | out: hHeap=0x1f0000) returned 1 [0196.215] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0196.215] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24fd60 | out: hHeap=0x1f0000) returned 1 [0196.215] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225150 | out: hHeap=0x1f0000) returned 1 [0196.215] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282d8 | out: hHeap=0x1f0000) returned 1 [0196.215] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c4c0 | out: hHeap=0x1f0000) returned 1 [0196.215] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210018 | out: hHeap=0x1f0000) returned 1 [0196.215] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b4d0 | out: hHeap=0x1f0000) returned 1 [0196.215] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c420 | out: hHeap=0x1f0000) returned 1 [0196.215] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210090 | out: hHeap=0x1f0000) returned 1 [0196.216] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b778 | out: hHeap=0x1f0000) returned 1 [0196.216] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c4f0 | out: hHeap=0x1f0000) returned 1 [0196.216] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20d778 | out: hHeap=0x1f0000) returned 1 [0196.216] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b318 | out: hHeap=0x1f0000) returned 1 [0196.216] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a838 | out: hHeap=0x1f0000) returned 1 [0196.216] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215ca8 | out: hHeap=0x1f0000) returned 1 [0196.216] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b2f0 | out: hHeap=0x1f0000) returned 1 [0196.216] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0196.216] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215990 | out: hHeap=0x1f0000) returned 1 [0196.216] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5a0 | out: hHeap=0x1f0000) returned 1 [0196.216] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5b0 | out: hHeap=0x1f0000) returned 1 [0196.216] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x23ddc8 | out: hHeap=0x1f0000) returned 1 [0196.217] CloseHandle (hObject=0x210) returned 1 [0196.217] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c6a0 | out: hHeap=0x1f0000) returned 1 [0196.217] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c630 | out: hHeap=0x1f0000) returned 1 [0196.217] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24ed30 | out: hHeap=0x1f0000) returned 1 [0196.217] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f370 | out: hHeap=0x1f0000) returned 1 [0196.218] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20fef8 | out: hHeap=0x1f0000) returned 1 [0196.218] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204dd0 | out: hHeap=0x1f0000) returned 1 [0196.218] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x23bdb8 | out: hHeap=0x1f0000) returned 1 [0196.218] CloseHandle (hObject=0x20c) returned 1 [0196.218] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5f0 | out: hHeap=0x1f0000) returned 1 [0196.219] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c700 | out: hHeap=0x1f0000) returned 1 [0196.219] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24ec78 | out: hHeap=0x1f0000) returned 1 [0196.219] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205130 | out: hHeap=0x1f0000) returned 1 [0196.219] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24eb88 | out: hHeap=0x1f0000) returned 1 [0196.219] CloseHandle (hObject=0x208) returned 1 [0196.219] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c620 | out: hHeap=0x1f0000) returned 1 [0196.220] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c590 | out: hHeap=0x1f0000) returned 1 [0196.220] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239be0 | out: hHeap=0x1f0000) returned 1 [0196.220] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5e0 | out: hHeap=0x1f0000) returned 1 [0196.220] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c720 | out: hHeap=0x1f0000) returned 1 [0196.220] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c600 | out: hHeap=0x1f0000) returned 1 [0196.220] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c610 | out: hHeap=0x1f0000) returned 1 [0196.220] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24ea78 | out: hHeap=0x1f0000) returned 1 [0196.220] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24d680 | out: hHeap=0x1f0000) returned 1 [0196.220] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24e898 | out: hHeap=0x1f0000) returned 1 [0196.220] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206838 | out: hHeap=0x1f0000) returned 1 [0196.220] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffd0 | out: hHeap=0x1f0000) returned 1 [0196.220] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffb8 | out: hHeap=0x1f0000) returned 1 [0196.220] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24e9a8 | out: hHeap=0x1f0000) returned 1 [0196.221] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22bac8 | out: hHeap=0x1f0000) returned 1 [0196.221] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0196.221] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228150 | out: hHeap=0x1f0000) returned 1 [0196.221] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22af88 | out: hHeap=0x1f0000) returned 1 [0196.221] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2276b8 | out: hHeap=0x1f0000) returned 1 [0196.221] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234a58 | out: hHeap=0x1f0000) returned 1 [0196.221] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b818 | out: hHeap=0x1f0000) returned 1 [0196.221] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\netfx_Extended_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x64.msi")) returned 1 [0196.223] FindNextFileW (in: hFindFile=0x214590, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc749eed, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xbc749eed, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xbda8efca, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x79113, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfx_Extended_x86.msi.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="NETFX_~1.ODV")) returned 1 [0196.223] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x239be0 [0196.223] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0196.223] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2351d8 [0196.223] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0196.224] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22af20 | out: hHeap=0x1f0000) returned 1 [0196.224] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239be0 | out: hHeap=0x1f0000) returned 1 [0196.224] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\netfx_Extended_x86.msi.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x86.msi.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0196.224] GetFileType (hFile=0x208) returned 0x1 [0196.225] CloseHandle (hObject=0x208) returned 1 [0196.225] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x25fd40 [0196.225] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\netfx_Extended_x86.msi.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x86.msi.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc749eed, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xbc749eed, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xbda8efca, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x79113)) returned 1 [0196.226] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25fd40 | out: hHeap=0x1f0000) returned 1 [0196.226] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x25fd40 [0196.226] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\netfx_Extended_x86.msi.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x86.msi.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc749eed, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xbc749eed, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xbda8efca, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x79113)) returned 1 [0196.226] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25fd40 | out: hHeap=0x1f0000) returned 1 [0196.226] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x25fd40 [0196.226] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25fd40 | out: hHeap=0x1f0000) returned 1 [0196.226] FindNextFileW (in: hFindFile=0x214590, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a0f7400, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x4a0f7400, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0xbe4bbd88, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x1, dwReserved0=0x0, dwReserved1=0x0, cFileName="ParameterInfo.xml", cAlternateFileName="PARAME~1.XML")) returned 1 [0196.226] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d280 [0196.226] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0196.226] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ad80 [0196.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0196.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2351d8 | out: hHeap=0x1f0000) returned 1 [0196.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d280 | out: hHeap=0x1f0000) returned 1 [0196.227] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\ParameterInfo.xml" (normalized: "c:\\588bce7c90097ed212\\parameterinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0196.227] GetFileType (hFile=0x208) returned 0x1 [0196.228] CloseHandle (hObject=0x208) returned 1 [0196.228] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22af20 [0196.228] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\ParameterInfo.xml" (normalized: "c:\\588bce7c90097ed212\\parameterinfo.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a0f7400, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x4a0f7400, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0xbe4bbd88, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x1)) returned 1 [0196.229] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22af20 | out: hHeap=0x1f0000) returned 1 [0196.229] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22af20 [0196.229] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\ParameterInfo.xml" (normalized: "c:\\588bce7c90097ed212\\parameterinfo.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a0f7400, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x4a0f7400, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0xbe4bbd88, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x1)) returned 1 [0196.229] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22af20 | out: hHeap=0x1f0000) returned 1 [0196.229] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22af20 [0196.229] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22af20 | out: hHeap=0x1f0000) returned 1 [0196.229] FindNextFileW (in: hFindFile=0x214590, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbda8efca, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xbda8efca, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xbe4e2073, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x427c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="ParameterInfo.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="PARAME~1.ODV")) returned 1 [0196.229] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x239be0 [0196.229] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cfa8 [0196.229] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2351d8 [0196.230] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cfa8 | out: hHeap=0x1f0000) returned 1 [0196.230] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ad80 | out: hHeap=0x1f0000) returned 1 [0196.230] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239be0 | out: hHeap=0x1f0000) returned 1 [0196.230] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\ParameterInfo.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\parameterinfo.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0196.231] GetFileType (hFile=0x208) returned 0x1 [0196.231] CloseHandle (hObject=0x208) returned 1 [0196.231] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x25fd40 [0196.231] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\ParameterInfo.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\parameterinfo.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbda8efca, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xbda8efca, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xbe4e2073, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x427c1)) returned 1 [0196.232] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25fd40 | out: hHeap=0x1f0000) returned 1 [0196.232] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x25fd40 [0196.232] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\ParameterInfo.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\parameterinfo.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbda8efca, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xbda8efca, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xbe4e2073, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x427c1)) returned 1 [0196.232] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25fd40 | out: hHeap=0x1f0000) returned 1 [0196.232] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x25fd40 [0196.232] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25fd40 | out: hHeap=0x1f0000) returned 1 [0196.232] FindNextFileW (in: hFindFile=0x214590, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x19dedd00, ftCreationTime.dwHighDateTime=0x1ca2a1b, ftLastAccessTime.dwLowDateTime=0x19dedd00, ftLastAccessTime.dwHighDateTime=0x1ca2a1b, ftLastWriteTime.dwLowDateTime=0x19dedd00, ftLastWriteTime.dwHighDateTime=0x1ca2a1b, nFileSizeHigh=0x0, nFileSizeLow=0x2d200, dwReserved0=0x0, dwReserved1=0x0, cFileName="RGB9RAST_x64.msi", cAlternateFileName="RGB9RA~1.MSI")) returned 1 [0196.232] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cfa8 [0196.232] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0196.232] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239b38 [0196.232] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0196.233] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2351d8 | out: hHeap=0x1f0000) returned 1 [0196.233] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cfa8 | out: hHeap=0x1f0000) returned 1 [0196.233] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\RGB9RAST_x64.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0196.233] GetFileType (hFile=0x208) returned 0x1 [0196.234] CloseHandle (hObject=0x208) returned 1 [0196.234] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239928 [0196.234] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\RGB9RAST_x64.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x64.msi"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x19dedd00, ftCreationTime.dwHighDateTime=0x1ca2a1b, ftLastAccessTime.dwLowDateTime=0x19dedd00, ftLastAccessTime.dwHighDateTime=0x1ca2a1b, ftLastWriteTime.dwLowDateTime=0x19dedd00, ftLastWriteTime.dwHighDateTime=0x1ca2a1b, nFileSizeHigh=0x0, nFileSizeLow=0x2d200)) returned 1 [0196.234] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239928 | out: hHeap=0x1f0000) returned 1 [0196.234] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239508 [0196.234] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\RGB9RAST_x64.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x64.msi"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x19dedd00, ftCreationTime.dwHighDateTime=0x1ca2a1b, ftLastAccessTime.dwLowDateTime=0x19dedd00, ftLastAccessTime.dwHighDateTime=0x1ca2a1b, ftLastWriteTime.dwLowDateTime=0x19dedd00, ftLastWriteTime.dwHighDateTime=0x1ca2a1b, nFileSizeHigh=0x0, nFileSizeLow=0x2d200)) returned 1 [0196.234] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239508 | out: hHeap=0x1f0000) returned 1 [0196.234] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239400 [0196.234] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239400 | out: hHeap=0x1f0000) returned 1 [0196.235] FindNextFileW (in: hFindFile=0x214590, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x177c8300, ftCreationTime.dwHighDateTime=0x1ca2a1b, ftLastAccessTime.dwLowDateTime=0x177c8300, ftLastAccessTime.dwHighDateTime=0x1ca2a1b, ftLastWriteTime.dwLowDateTime=0x177c8300, ftLastWriteTime.dwHighDateTime=0x1ca2a1b, nFileSizeHigh=0x0, nFileSizeLow=0x17200, dwReserved0=0x0, dwReserved1=0x0, cFileName="RGB9Rast_x86.msi", cAlternateFileName="RGB9RA~2.MSI")) returned 1 [0196.235] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0196.235] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d280 [0196.235] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239560 [0196.235] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d280 | out: hHeap=0x1f0000) returned 1 [0196.235] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239b38 | out: hHeap=0x1f0000) returned 1 [0196.235] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0196.235] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\RGB9Rast_x86.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x86.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0196.235] GetFileType (hFile=0x208) returned 0x1 [0196.236] CloseHandle (hObject=0x208) returned 1 [0196.236] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2395b8 [0196.236] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\RGB9Rast_x86.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x86.msi"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x177c8300, ftCreationTime.dwHighDateTime=0x1ca2a1b, ftLastAccessTime.dwLowDateTime=0x177c8300, ftLastAccessTime.dwHighDateTime=0x1ca2a1b, ftLastWriteTime.dwLowDateTime=0x177c8300, ftLastWriteTime.dwHighDateTime=0x1ca2a1b, nFileSizeHigh=0x0, nFileSizeLow=0x17200)) returned 1 [0196.236] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2395b8 | out: hHeap=0x1f0000) returned 1 [0196.236] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239610 [0196.236] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\RGB9Rast_x86.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x86.msi"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x177c8300, ftCreationTime.dwHighDateTime=0x1ca2a1b, ftLastAccessTime.dwLowDateTime=0x177c8300, ftLastAccessTime.dwHighDateTime=0x1ca2a1b, ftLastWriteTime.dwLowDateTime=0x177c8300, ftLastWriteTime.dwHighDateTime=0x1ca2a1b, nFileSizeHigh=0x0, nFileSizeLow=0x17200)) returned 1 [0196.236] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239610 | out: hHeap=0x1f0000) returned 1 [0196.236] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239400 [0196.236] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239400 | out: hHeap=0x1f0000) returned 1 [0196.237] FindNextFileW (in: hFindFile=0x214590, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x13148, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.exe", cAlternateFileName="")) returned 1 [0196.237] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0196.237] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cfa8 [0196.237] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239b38 [0196.237] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cfa8 | out: hHeap=0x1f0000) returned 1 [0196.237] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239560 | out: hHeap=0x1f0000) returned 1 [0196.237] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0196.237] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Setup.exe" (normalized: "c:\\588bce7c90097ed212\\setup.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0196.237] GetFileType (hFile=0x208) returned 0x1 [0196.238] CloseHandle (hObject=0x208) returned 1 [0196.238] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2395b8 [0196.536] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Setup.exe" (normalized: "c:\\588bce7c90097ed212\\setup.exe"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x13148)) returned 1 [0196.536] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2395b8 | out: hHeap=0x1f0000) returned 1 [0196.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239668 [0196.536] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Setup.exe" (normalized: "c:\\588bce7c90097ed212\\setup.exe"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x13148)) returned 1 [0196.536] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239668 | out: hHeap=0x1f0000) returned 1 [0196.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239560 [0196.536] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239560 | out: hHeap=0x1f0000) returned 1 [0196.536] FindNextFileW (in: hFindFile=0x214590, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0xc5158, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupEngine.dll", cAlternateFileName="SETUPE~1.DLL")) returned 1 [0196.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0196.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf38 [0196.537] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239770 [0196.537] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf38 | out: hHeap=0x1f0000) returned 1 [0196.537] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239b38 | out: hHeap=0x1f0000) returned 1 [0196.537] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0196.537] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\SetupEngine.dll" (normalized: "c:\\588bce7c90097ed212\\setupengine.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0196.537] GetFileType (hFile=0x210) returned 0x1 [0196.538] CloseHandle (hObject=0x210) returned 1 [0196.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239928 [0196.538] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\SetupEngine.dll" (normalized: "c:\\588bce7c90097ed212\\setupengine.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0xc5158)) returned 1 [0196.538] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239928 | out: hHeap=0x1f0000) returned 1 [0196.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2399d8 [0196.539] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\SetupEngine.dll" (normalized: "c:\\588bce7c90097ed212\\setupengine.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0xc5158)) returned 1 [0196.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2399d8 | out: hHeap=0x1f0000) returned 1 [0196.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239a30 [0196.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239a30 | out: hHeap=0x1f0000) returned 1 [0196.539] GetLastError () returned 0x0 [0196.539] SetLastError (dwErrCode=0x0) [0196.539] AreFileApisANSI () returned 1 [0196.539] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58420, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0196.539] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58420, cbMultiByte=4, lpWideCharStr=0x1fdf720, cchWideChar=4 | out: lpWideCharStr=".exe") returned 4 [0196.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0196.540] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215990 [0196.540] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e4f8 [0196.540] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239458 [0196.540] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d280 [0196.540] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0196.540] CryptAcquireContextA (in: phProv=0x1fdee08, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1fdee08*=0x229d80) returned 1 [0196.543] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238280 | out: pbBuffer=0x238280) returned 1 [0196.543] CryptReleaseContext (hProv=0x229d80, dwFlags=0x0) returned 1 [0196.543] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0196.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x25e1c0 [0196.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x234da0 [0196.543] QueryPerformanceCounter (in: lpPerformanceCount=0x1fded9c | out: lpPerformanceCount=0x1fded9c*=35391187163) returned 1 [0196.543] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1fdeddc | out: lpSystemTimeAsFileTime=0x1fdeddc) [0196.543] QueryPerformanceCounter (in: lpPerformanceCount=0x1fded9c | out: lpPerformanceCount=0x1fded9c*=35391211064) returned 1 [0196.543] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1fdeddc | out: lpSystemTimeAsFileTime=0x1fdeddc) [0196.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x21cf38 [0196.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x2595a0 [0196.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x234eb0 [0196.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x2356d0 [0196.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210210 [0196.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2068c8 [0196.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0196.544] GetLastError () returned 0x0 [0196.544] SetLastError (dwErrCode=0x0) [0196.544] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf38 | out: hHeap=0x1f0000) returned 1 [0196.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a9d8 [0196.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a2d8 [0196.545] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a9d8 | out: hHeap=0x1f0000) returned 1 [0196.545] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xee) returned 0x24fa20 [0196.545] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a2d8 | out: hHeap=0x1f0000) returned 1 [0196.545] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c450 [0196.545] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c470 [0196.546] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\SetupEngine.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\setupengine.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdeca8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0196.546] GetFileType (hFile=0x210) returned 0x1 [0196.547] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c490 [0196.547] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c650 [0196.548] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\SetupEngine.dll" (normalized: "c:\\588bce7c90097ed212\\setupengine.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdecd8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8 [0196.548] GetFileType (hFile=0x1c8) returned 0x1 [0196.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x2052f0 [0196.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205330 [0196.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x22d428 [0196.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c670 [0196.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c710 [0196.549] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\SetupEngine.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\setupengine.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdec24, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0196.550] GetFileType (hFile=0x1fc) returned 0x1 [0196.550] GetLastError () returned 0xb7 [0196.550] SetLastError (dwErrCode=0xb7) [0196.550] GetLastError () returned 0xb7 [0196.550] SetLastError (dwErrCode=0xb7) [0196.550] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2052f0 | out: hHeap=0x1f0000) returned 1 [0196.550] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205330 | out: hHeap=0x1f0000) returned 1 [0196.550] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe4) returned 0x24fb18 [0196.551] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ff0 [0196.551] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x2052f0 [0196.551] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205330 [0196.551] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x226388 [0196.551] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c630 [0196.551] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c690 [0196.552] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\SetupEngine.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\setupengine.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdec24, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1dc [0196.552] GetFileType (hFile=0x1dc) returned 0x1 [0196.552] GetLastError () returned 0xb7 [0196.553] SetLastError (dwErrCode=0xb7) [0196.553] GetLastError () returned 0xb7 [0196.553] SetLastError (dwErrCode=0xb7) [0196.553] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2052f0 | out: hHeap=0x1f0000) returned 1 [0196.553] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205330 | out: hHeap=0x1f0000) returned 1 [0196.553] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x2052f0 [0196.553] GetLastError () returned 0xb7 [0196.553] SetLastError (dwErrCode=0xb7) [0196.553] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2052f0 | out: hHeap=0x1f0000) returned 1 [0196.553] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x2052f0 [0196.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205330 [0196.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f10 [0196.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb8) returned 0x24fc08 [0196.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c6d0 [0196.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c6f0 [0196.555] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\SetupEngine.dll" (normalized: "c:\\588bce7c90097ed212\\setupengine.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdec1c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc [0196.555] GetFileType (hFile=0x1cc) returned 0x1 [0196.556] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x242df0 [0196.556] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdeb78, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdeb78*=0x1000, lpOverlapped=0x0) returned 1 [0196.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24add0 [0196.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x23bdb8 [0196.560] GetLastError () returned 0x0 [0196.561] SetLastError (dwErrCode=0x0) [0196.561] GetLastError () returned 0x0 [0196.561] SetLastError (dwErrCode=0x0) [0196.561] GetLastError () returned 0x0 [0196.561] SetLastError (dwErrCode=0x0) [0196.561] GetLastError () returned 0x0 [0196.562] SetLastError (dwErrCode=0x0) [0196.562] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0196.563] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0196.565] GetLastError () returned 0x0 [0196.565] SetLastError (dwErrCode=0x0) [0196.566] GetLastError () returned 0x0 [0196.566] SetLastError (dwErrCode=0x0) [0196.566] GetLastError () returned 0x0 [0196.567] SetLastError (dwErrCode=0x0) [0196.567] GetLastError () returned 0x0 [0196.567] SetLastError (dwErrCode=0x0) [0196.568] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0196.568] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0196.569] GetLastError () returned 0x0 [0196.569] SetLastError (dwErrCode=0x0) [0196.569] GetLastError () returned 0x0 [0196.569] SetLastError (dwErrCode=0x0) [0196.570] GetLastError () returned 0x0 [0196.570] SetLastError (dwErrCode=0x0) [0196.570] GetLastError () returned 0x0 [0196.571] SetLastError (dwErrCode=0x0) [0196.571] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0196.572] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0196.572] GetLastError () returned 0x0 [0196.572] SetLastError (dwErrCode=0x0) [0196.573] GetLastError () returned 0x0 [0196.573] SetLastError (dwErrCode=0x0) [0196.573] GetLastError () returned 0x0 [0196.573] SetLastError (dwErrCode=0x0) [0196.574] GetLastError () returned 0x0 [0196.574] SetLastError (dwErrCode=0x0) [0196.574] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0196.575] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0196.576] GetLastError () returned 0x0 [0196.576] SetLastError (dwErrCode=0x0) [0196.576] GetLastError () returned 0x0 [0196.576] SetLastError (dwErrCode=0x0) [0196.577] GetLastError () returned 0x0 [0196.577] SetLastError (dwErrCode=0x0) [0196.577] GetLastError () returned 0x0 [0196.577] SetLastError (dwErrCode=0x0) [0196.578] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0196.578] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0196.579] GetLastError () returned 0x0 [0196.579] SetLastError (dwErrCode=0x0) [0196.579] GetLastError () returned 0x0 [0196.579] SetLastError (dwErrCode=0x0) [0196.580] GetLastError () returned 0x0 [0196.580] SetLastError (dwErrCode=0x0) [0196.580] GetLastError () returned 0x0 [0196.580] SetLastError (dwErrCode=0x0) [0196.581] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0196.581] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0196.582] GetLastError () returned 0x0 [0196.843] SetLastError (dwErrCode=0x0) [0196.843] GetLastError () returned 0x0 [0196.843] SetLastError (dwErrCode=0x0) [0196.843] GetLastError () returned 0x0 [0196.843] SetLastError (dwErrCode=0x0) [0196.843] GetLastError () returned 0x0 [0196.843] SetLastError (dwErrCode=0x0) [0196.844] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0196.844] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0196.844] GetLastError () returned 0x0 [0196.844] SetLastError (dwErrCode=0x0) [0196.844] GetLastError () returned 0x0 [0196.844] SetLastError (dwErrCode=0x0) [0196.845] GetLastError () returned 0x0 [0196.845] SetLastError (dwErrCode=0x0) [0196.845] GetLastError () returned 0x0 [0196.845] SetLastError (dwErrCode=0x0) [0196.845] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0196.845] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0196.846] GetLastError () returned 0x0 [0196.846] SetLastError (dwErrCode=0x0) [0196.846] GetLastError () returned 0x0 [0196.846] SetLastError (dwErrCode=0x0) [0196.846] GetLastError () returned 0x0 [0196.846] SetLastError (dwErrCode=0x0) [0196.847] GetLastError () returned 0x0 [0196.847] SetLastError (dwErrCode=0x0) [0196.847] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0196.848] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0196.848] GetLastError () returned 0x0 [0196.848] SetLastError (dwErrCode=0x0) [0196.848] GetLastError () returned 0x0 [0196.848] SetLastError (dwErrCode=0x0) [0196.849] GetLastError () returned 0x0 [0196.849] SetLastError (dwErrCode=0x0) [0196.849] GetLastError () returned 0x0 [0196.849] SetLastError (dwErrCode=0x0) [0196.849] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0196.849] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0196.850] GetLastError () returned 0x0 [0196.850] SetLastError (dwErrCode=0x0) [0196.850] GetLastError () returned 0x0 [0196.850] SetLastError (dwErrCode=0x0) [0196.850] GetLastError () returned 0x0 [0196.850] SetLastError (dwErrCode=0x0) [0196.851] GetLastError () returned 0x0 [0196.851] SetLastError (dwErrCode=0x0) [0196.851] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0196.852] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0196.852] GetLastError () returned 0x0 [0196.852] SetLastError (dwErrCode=0x0) [0196.852] GetLastError () returned 0x0 [0196.852] SetLastError (dwErrCode=0x0) [0196.853] GetLastError () returned 0x0 [0196.853] SetLastError (dwErrCode=0x0) [0196.853] GetLastError () returned 0x0 [0196.853] SetLastError (dwErrCode=0x0) [0196.854] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0196.854] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0196.854] GetLastError () returned 0x0 [0196.854] SetLastError (dwErrCode=0x0) [0196.855] GetLastError () returned 0x0 [0196.855] SetLastError (dwErrCode=0x0) [0196.855] GetLastError () returned 0x0 [0196.855] SetLastError (dwErrCode=0x0) [0196.855] GetLastError () returned 0x0 [0196.855] SetLastError (dwErrCode=0x0) [0196.855] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0196.856] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0196.856] GetLastError () returned 0x0 [0196.856] SetLastError (dwErrCode=0x0) [0196.857] GetLastError () returned 0x0 [0196.857] SetLastError (dwErrCode=0x0) [0196.857] GetLastError () returned 0x0 [0196.857] SetLastError (dwErrCode=0x0) [0196.857] GetLastError () returned 0x0 [0196.857] SetLastError (dwErrCode=0x0) [0196.858] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0196.860] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0196.860] GetLastError () returned 0x0 [0196.860] SetLastError (dwErrCode=0x0) [0196.860] GetLastError () returned 0x0 [0196.861] SetLastError (dwErrCode=0x0) [0196.861] GetLastError () returned 0x0 [0196.861] SetLastError (dwErrCode=0x0) [0196.861] GetLastError () returned 0x0 [0196.861] SetLastError (dwErrCode=0x0) [0196.861] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0196.862] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0196.862] GetLastError () returned 0x0 [0196.862] SetLastError (dwErrCode=0x0) [0196.862] GetLastError () returned 0x0 [0196.863] SetLastError (dwErrCode=0x0) [0196.863] GetLastError () returned 0x0 [0196.863] SetLastError (dwErrCode=0x0) [0196.863] GetLastError () returned 0x0 [0196.863] SetLastError (dwErrCode=0x0) [0196.863] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0196.864] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0196.864] GetLastError () returned 0x0 [0196.864] SetLastError (dwErrCode=0x0) [0196.864] GetLastError () returned 0x0 [0196.864] SetLastError (dwErrCode=0x0) [0196.865] GetLastError () returned 0x0 [0196.865] SetLastError (dwErrCode=0x0) [0196.865] GetLastError () returned 0x0 [0196.865] SetLastError (dwErrCode=0x0) [0196.865] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0196.865] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0196.866] GetLastError () returned 0x0 [0196.866] SetLastError (dwErrCode=0x0) [0196.866] GetLastError () returned 0x0 [0196.866] SetLastError (dwErrCode=0x0) [0196.866] GetLastError () returned 0x0 [0196.866] SetLastError (dwErrCode=0x0) [0196.866] GetLastError () returned 0x0 [0196.866] SetLastError (dwErrCode=0x0) [0196.867] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0196.867] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0196.867] GetLastError () returned 0x0 [0196.867] SetLastError (dwErrCode=0x0) [0196.868] GetLastError () returned 0x0 [0196.868] SetLastError (dwErrCode=0x0) [0196.868] GetLastError () returned 0x0 [0196.868] SetLastError (dwErrCode=0x0) [0196.868] GetLastError () returned 0x0 [0196.868] SetLastError (dwErrCode=0x0) [0196.869] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0196.869] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0196.870] GetLastError () returned 0x0 [0196.870] SetLastError (dwErrCode=0x0) [0196.870] GetLastError () returned 0x0 [0196.870] SetLastError (dwErrCode=0x0) [0196.870] GetLastError () returned 0x0 [0196.870] SetLastError (dwErrCode=0x0) [0196.870] GetLastError () returned 0x0 [0196.870] SetLastError (dwErrCode=0x0) [0196.871] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0196.871] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0196.871] GetLastError () returned 0x0 [0196.871] SetLastError (dwErrCode=0x0) [0196.872] GetLastError () returned 0x0 [0196.872] SetLastError (dwErrCode=0x0) [0196.872] GetLastError () returned 0x0 [0196.872] SetLastError (dwErrCode=0x0) [0196.872] GetLastError () returned 0x0 [0196.872] SetLastError (dwErrCode=0x0) [0196.872] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0196.873] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0196.873] GetLastError () returned 0x0 [0196.873] SetLastError (dwErrCode=0x0) [0196.873] GetLastError () returned 0x0 [0196.873] SetLastError (dwErrCode=0x0) [0196.873] GetLastError () returned 0x0 [0196.873] SetLastError (dwErrCode=0x0) [0196.874] GetLastError () returned 0x0 [0196.874] SetLastError (dwErrCode=0x0) [0196.874] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0196.874] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0196.874] GetLastError () returned 0x0 [0196.875] SetLastError (dwErrCode=0x0) [0196.875] GetLastError () returned 0x0 [0196.875] SetLastError (dwErrCode=0x0) [0196.875] GetLastError () returned 0x0 [0196.875] SetLastError (dwErrCode=0x0) [0196.875] GetLastError () returned 0x0 [0196.875] SetLastError (dwErrCode=0x0) [0196.875] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0196.876] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0196.876] GetLastError () returned 0x0 [0196.876] SetLastError (dwErrCode=0x0) [0196.876] GetLastError () returned 0x0 [0196.876] SetLastError (dwErrCode=0x0) [0196.877] GetLastError () returned 0x0 [0196.877] SetLastError (dwErrCode=0x0) [0196.877] GetLastError () returned 0x0 [0196.877] SetLastError (dwErrCode=0x0) [0196.877] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0196.877] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0196.878] GetLastError () returned 0x0 [0196.878] SetLastError (dwErrCode=0x0) [0196.878] GetLastError () returned 0x0 [0196.878] SetLastError (dwErrCode=0x0) [0196.878] GetLastError () returned 0x0 [0196.878] SetLastError (dwErrCode=0x0) [0196.878] GetLastError () returned 0x0 [0196.878] SetLastError (dwErrCode=0x0) [0197.069] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0197.069] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0197.069] GetLastError () returned 0x0 [0197.070] SetLastError (dwErrCode=0x0) [0197.070] GetLastError () returned 0x0 [0197.070] SetLastError (dwErrCode=0x0) [0197.070] GetLastError () returned 0x0 [0197.070] SetLastError (dwErrCode=0x0) [0197.070] GetLastError () returned 0x0 [0197.070] SetLastError (dwErrCode=0x0) [0197.070] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0197.070] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0197.071] GetLastError () returned 0x0 [0197.071] SetLastError (dwErrCode=0x0) [0197.071] GetLastError () returned 0x0 [0197.071] SetLastError (dwErrCode=0x0) [0197.071] GetLastError () returned 0x0 [0197.071] SetLastError (dwErrCode=0x0) [0197.071] GetLastError () returned 0x0 [0197.071] SetLastError (dwErrCode=0x0) [0197.072] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0197.072] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0197.072] GetLastError () returned 0x0 [0197.072] SetLastError (dwErrCode=0x0) [0197.072] GetLastError () returned 0x0 [0197.072] SetLastError (dwErrCode=0x0) [0197.072] GetLastError () returned 0x0 [0197.072] SetLastError (dwErrCode=0x0) [0197.072] GetLastError () returned 0x0 [0197.072] SetLastError (dwErrCode=0x0) [0197.072] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0197.073] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0197.073] GetLastError () returned 0x0 [0197.073] SetLastError (dwErrCode=0x0) [0197.073] GetLastError () returned 0x0 [0197.073] SetLastError (dwErrCode=0x0) [0197.073] GetLastError () returned 0x0 [0197.073] SetLastError (dwErrCode=0x0) [0197.073] GetLastError () returned 0x0 [0197.074] SetLastError (dwErrCode=0x0) [0197.074] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0197.074] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0197.074] GetLastError () returned 0x0 [0197.074] SetLastError (dwErrCode=0x0) [0197.074] GetLastError () returned 0x0 [0197.074] SetLastError (dwErrCode=0x0) [0197.074] GetLastError () returned 0x0 [0197.075] SetLastError (dwErrCode=0x0) [0197.075] GetLastError () returned 0x0 [0197.075] SetLastError (dwErrCode=0x0) [0197.075] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0197.075] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0197.075] GetLastError () returned 0x0 [0197.075] SetLastError (dwErrCode=0x0) [0197.075] GetLastError () returned 0x0 [0197.075] SetLastError (dwErrCode=0x0) [0197.076] GetLastError () returned 0x0 [0197.076] SetLastError (dwErrCode=0x0) [0197.076] GetLastError () returned 0x0 [0197.076] SetLastError (dwErrCode=0x0) [0197.076] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0197.076] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0197.076] GetLastError () returned 0x0 [0197.076] SetLastError (dwErrCode=0x0) [0197.076] GetLastError () returned 0x0 [0197.077] SetLastError (dwErrCode=0x0) [0197.077] GetLastError () returned 0x0 [0197.077] SetLastError (dwErrCode=0x0) [0197.077] GetLastError () returned 0x0 [0197.077] SetLastError (dwErrCode=0x0) [0197.077] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0197.077] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0197.078] GetLastError () returned 0x0 [0197.078] SetLastError (dwErrCode=0x0) [0197.078] GetLastError () returned 0x0 [0197.078] SetLastError (dwErrCode=0x0) [0197.078] GetLastError () returned 0x0 [0197.078] SetLastError (dwErrCode=0x0) [0197.078] GetLastError () returned 0x0 [0197.078] SetLastError (dwErrCode=0x0) [0197.078] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0197.079] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0197.079] GetLastError () returned 0x0 [0197.079] SetLastError (dwErrCode=0x0) [0197.079] GetLastError () returned 0x0 [0197.079] SetLastError (dwErrCode=0x0) [0197.079] GetLastError () returned 0x0 [0197.079] SetLastError (dwErrCode=0x0) [0197.079] GetLastError () returned 0x0 [0197.080] SetLastError (dwErrCode=0x0) [0197.080] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0197.080] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0197.080] GetLastError () returned 0x0 [0197.080] SetLastError (dwErrCode=0x0) [0197.080] GetLastError () returned 0x0 [0197.081] SetLastError (dwErrCode=0x0) [0197.081] GetLastError () returned 0x0 [0197.081] SetLastError (dwErrCode=0x0) [0197.081] GetLastError () returned 0x0 [0197.081] SetLastError (dwErrCode=0x0) [0197.081] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0197.081] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0197.085] GetLastError () returned 0x0 [0197.085] SetLastError (dwErrCode=0x0) [0197.085] GetLastError () returned 0x0 [0197.086] SetLastError (dwErrCode=0x0) [0197.086] GetLastError () returned 0x0 [0197.086] SetLastError (dwErrCode=0x0) [0197.086] GetLastError () returned 0x0 [0197.086] SetLastError (dwErrCode=0x0) [0197.086] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0197.086] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0197.087] GetLastError () returned 0x0 [0197.087] SetLastError (dwErrCode=0x0) [0197.087] GetLastError () returned 0x0 [0197.087] SetLastError (dwErrCode=0x0) [0197.088] GetLastError () returned 0x0 [0197.088] SetLastError (dwErrCode=0x0) [0197.088] GetLastError () returned 0x0 [0197.088] SetLastError (dwErrCode=0x0) [0197.088] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0197.088] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0197.089] GetLastError () returned 0x0 [0197.089] SetLastError (dwErrCode=0x0) [0197.089] GetLastError () returned 0x0 [0197.089] SetLastError (dwErrCode=0x0) [0197.089] GetLastError () returned 0x0 [0197.089] SetLastError (dwErrCode=0x0) [0197.089] GetLastError () returned 0x0 [0197.090] SetLastError (dwErrCode=0x0) [0197.090] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0197.090] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0197.090] GetLastError () returned 0x0 [0197.091] SetLastError (dwErrCode=0x0) [0197.091] GetLastError () returned 0x0 [0197.091] SetLastError (dwErrCode=0x0) [0197.091] GetLastError () returned 0x0 [0197.091] SetLastError (dwErrCode=0x0) [0197.091] GetLastError () returned 0x0 [0197.091] SetLastError (dwErrCode=0x0) [0197.091] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0197.092] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0197.092] GetLastError () returned 0x0 [0197.092] SetLastError (dwErrCode=0x0) [0197.092] GetLastError () returned 0x0 [0197.092] SetLastError (dwErrCode=0x0) [0197.093] GetLastError () returned 0x0 [0197.093] SetLastError (dwErrCode=0x0) [0197.093] GetLastError () returned 0x0 [0197.093] SetLastError (dwErrCode=0x0) [0197.093] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0197.093] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0197.094] GetLastError () returned 0x0 [0197.094] SetLastError (dwErrCode=0x0) [0197.094] GetLastError () returned 0x0 [0197.094] SetLastError (dwErrCode=0x0) [0197.094] GetLastError () returned 0x0 [0197.094] SetLastError (dwErrCode=0x0) [0197.094] GetLastError () returned 0x0 [0197.095] SetLastError (dwErrCode=0x0) [0197.095] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0197.095] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0197.095] GetLastError () returned 0x0 [0197.095] SetLastError (dwErrCode=0x0) [0197.096] GetLastError () returned 0x0 [0197.096] SetLastError (dwErrCode=0x0) [0197.096] GetLastError () returned 0x0 [0197.096] SetLastError (dwErrCode=0x0) [0197.096] GetLastError () returned 0x0 [0197.096] SetLastError (dwErrCode=0x0) [0197.096] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0197.097] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0197.097] GetLastError () returned 0x0 [0197.097] SetLastError (dwErrCode=0x0) [0197.097] GetLastError () returned 0x0 [0197.097] SetLastError (dwErrCode=0x0) [0197.100] GetLastError () returned 0x0 [0197.100] SetLastError (dwErrCode=0x0) [0197.100] GetLastError () returned 0x0 [0197.100] SetLastError (dwErrCode=0x0) [0197.100] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0197.101] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0197.101] GetLastError () returned 0x0 [0197.101] SetLastError (dwErrCode=0x0) [0197.101] GetLastError () returned 0x0 [0197.101] SetLastError (dwErrCode=0x0) [0197.101] GetLastError () returned 0x0 [0197.102] SetLastError (dwErrCode=0x0) [0197.102] GetLastError () returned 0x0 [0197.102] SetLastError (dwErrCode=0x0) [0197.102] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0197.102] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0197.103] GetLastError () returned 0x0 [0197.103] SetLastError (dwErrCode=0x0) [0197.103] GetLastError () returned 0x0 [0197.103] SetLastError (dwErrCode=0x0) [0197.103] GetLastError () returned 0x0 [0197.103] SetLastError (dwErrCode=0x0) [0197.103] GetLastError () returned 0x0 [0197.103] SetLastError (dwErrCode=0x0) [0197.104] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0197.104] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0197.104] GetLastError () returned 0x0 [0197.104] SetLastError (dwErrCode=0x0) [0197.104] GetLastError () returned 0x0 [0197.105] SetLastError (dwErrCode=0x0) [0197.105] GetLastError () returned 0x0 [0197.105] SetLastError (dwErrCode=0x0) [0197.105] GetLastError () returned 0x0 [0197.105] SetLastError (dwErrCode=0x0) [0197.105] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0197.107] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0197.107] GetLastError () returned 0x0 [0197.108] SetLastError (dwErrCode=0x0) [0197.108] GetLastError () returned 0x0 [0197.108] SetLastError (dwErrCode=0x0) [0197.108] GetLastError () returned 0x0 [0197.108] SetLastError (dwErrCode=0x0) [0197.109] GetLastError () returned 0x0 [0197.109] SetLastError (dwErrCode=0x0) [0197.109] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0197.110] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0197.110] GetLastError () returned 0x0 [0197.110] SetLastError (dwErrCode=0x0) [0197.111] GetLastError () returned 0x0 [0197.111] SetLastError (dwErrCode=0x0) [0197.112] GetLastError () returned 0x0 [0197.112] SetLastError (dwErrCode=0x0) [0197.112] GetLastError () returned 0x0 [0197.112] SetLastError (dwErrCode=0x0) [0197.113] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0197.444] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0197.444] GetLastError () returned 0x0 [0197.444] SetLastError (dwErrCode=0x0) [0197.444] GetLastError () returned 0x0 [0197.444] SetLastError (dwErrCode=0x0) [0197.444] GetLastError () returned 0x0 [0197.445] SetLastError (dwErrCode=0x0) [0197.445] GetLastError () returned 0x0 [0197.445] SetLastError (dwErrCode=0x0) [0197.445] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0197.445] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0197.446] GetLastError () returned 0x0 [0197.446] SetLastError (dwErrCode=0x0) [0197.446] GetLastError () returned 0x0 [0197.446] SetLastError (dwErrCode=0x0) [0197.446] GetLastError () returned 0x0 [0197.446] SetLastError (dwErrCode=0x0) [0197.446] GetLastError () returned 0x0 [0197.446] SetLastError (dwErrCode=0x0) [0197.446] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0197.447] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0197.447] GetLastError () returned 0x0 [0197.447] SetLastError (dwErrCode=0x0) [0197.447] GetLastError () returned 0x0 [0197.447] SetLastError (dwErrCode=0x0) [0197.448] GetLastError () returned 0x0 [0197.448] SetLastError (dwErrCode=0x0) [0197.448] GetLastError () returned 0x0 [0197.448] SetLastError (dwErrCode=0x0) [0197.448] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0197.448] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0197.449] GetLastError () returned 0x0 [0197.449] SetLastError (dwErrCode=0x0) [0197.449] GetLastError () returned 0x0 [0197.449] SetLastError (dwErrCode=0x0) [0197.449] GetLastError () returned 0x0 [0197.449] SetLastError (dwErrCode=0x0) [0197.449] GetLastError () returned 0x0 [0197.449] SetLastError (dwErrCode=0x0) [0197.449] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0197.450] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0197.450] GetLastError () returned 0x0 [0197.450] SetLastError (dwErrCode=0x0) [0197.450] GetLastError () returned 0x0 [0197.450] SetLastError (dwErrCode=0x0) [0197.450] GetLastError () returned 0x0 [0197.450] SetLastError (dwErrCode=0x0) [0197.451] GetLastError () returned 0x0 [0197.451] SetLastError (dwErrCode=0x0) [0197.451] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0197.455] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0197.456] GetLastError () returned 0x0 [0197.456] SetLastError (dwErrCode=0x0) [0197.456] GetLastError () returned 0x0 [0197.456] SetLastError (dwErrCode=0x0) [0197.456] GetLastError () returned 0x0 [0197.457] SetLastError (dwErrCode=0x0) [0197.457] GetLastError () returned 0x0 [0197.457] SetLastError (dwErrCode=0x0) [0197.457] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0197.457] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0197.458] GetLastError () returned 0x0 [0197.458] SetLastError (dwErrCode=0x0) [0197.458] GetLastError () returned 0x0 [0197.458] SetLastError (dwErrCode=0x0) [0197.458] GetLastError () returned 0x0 [0197.458] SetLastError (dwErrCode=0x0) [0197.459] GetLastError () returned 0x0 [0197.459] SetLastError (dwErrCode=0x0) [0197.459] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0197.459] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0197.460] GetLastError () returned 0x0 [0197.460] SetLastError (dwErrCode=0x0) [0197.460] GetLastError () returned 0x0 [0197.460] SetLastError (dwErrCode=0x0) [0197.460] GetLastError () returned 0x0 [0197.460] SetLastError (dwErrCode=0x0) [0197.461] GetLastError () returned 0x0 [0197.461] SetLastError (dwErrCode=0x0) [0197.461] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0197.461] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0197.462] GetLastError () returned 0x0 [0197.462] SetLastError (dwErrCode=0x0) [0197.462] GetLastError () returned 0x0 [0197.462] SetLastError (dwErrCode=0x0) [0197.462] GetLastError () returned 0x0 [0197.462] SetLastError (dwErrCode=0x0) [0197.462] GetLastError () returned 0x0 [0197.462] SetLastError (dwErrCode=0x0) [0197.463] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0197.463] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0197.463] GetLastError () returned 0x0 [0197.463] SetLastError (dwErrCode=0x0) [0197.464] GetLastError () returned 0x0 [0197.464] SetLastError (dwErrCode=0x0) [0197.464] GetLastError () returned 0x0 [0197.464] SetLastError (dwErrCode=0x0) [0197.464] GetLastError () returned 0x0 [0197.464] SetLastError (dwErrCode=0x0) [0197.464] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0197.465] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0197.465] GetLastError () returned 0x0 [0197.465] SetLastError (dwErrCode=0x0) [0197.465] GetLastError () returned 0x0 [0197.466] SetLastError (dwErrCode=0x0) [0197.466] GetLastError () returned 0x0 [0197.466] SetLastError (dwErrCode=0x0) [0197.466] GetLastError () returned 0x0 [0197.466] SetLastError (dwErrCode=0x0) [0197.471] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0197.471] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0197.471] GetLastError () returned 0x0 [0197.471] SetLastError (dwErrCode=0x0) [0197.471] GetLastError () returned 0x0 [0197.471] SetLastError (dwErrCode=0x0) [0197.472] GetLastError () returned 0x0 [0197.472] SetLastError (dwErrCode=0x0) [0197.472] GetLastError () returned 0x0 [0197.472] SetLastError (dwErrCode=0x0) [0197.472] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0197.472] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0197.473] GetLastError () returned 0x0 [0197.473] SetLastError (dwErrCode=0x0) [0197.473] GetLastError () returned 0x0 [0197.473] SetLastError (dwErrCode=0x0) [0197.473] GetLastError () returned 0x0 [0197.473] SetLastError (dwErrCode=0x0) [0197.473] GetLastError () returned 0x0 [0197.473] SetLastError (dwErrCode=0x0) [0197.474] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0197.474] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0197.474] GetLastError () returned 0x0 [0197.474] SetLastError (dwErrCode=0x0) [0197.475] GetLastError () returned 0x0 [0197.475] SetLastError (dwErrCode=0x0) [0197.475] GetLastError () returned 0x0 [0197.475] SetLastError (dwErrCode=0x0) [0197.475] GetLastError () returned 0x0 [0197.475] SetLastError (dwErrCode=0x0) [0197.475] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0197.476] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0197.476] GetLastError () returned 0x0 [0197.476] SetLastError (dwErrCode=0x0) [0197.476] GetLastError () returned 0x0 [0197.476] SetLastError (dwErrCode=0x0) [0197.476] GetLastError () returned 0x0 [0197.476] SetLastError (dwErrCode=0x0) [0197.477] GetLastError () returned 0x0 [0197.477] SetLastError (dwErrCode=0x0) [0197.477] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0197.477] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0197.478] GetLastError () returned 0x0 [0197.478] SetLastError (dwErrCode=0x0) [0197.478] GetLastError () returned 0x0 [0197.478] SetLastError (dwErrCode=0x0) [0197.478] GetLastError () returned 0x0 [0197.478] SetLastError (dwErrCode=0x0) [0197.479] GetLastError () returned 0x0 [0197.479] SetLastError (dwErrCode=0x0) [0197.479] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0197.479] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0197.480] GetLastError () returned 0x0 [0197.480] SetLastError (dwErrCode=0x0) [0197.480] GetLastError () returned 0x0 [0197.480] SetLastError (dwErrCode=0x0) [0197.481] GetLastError () returned 0x0 [0197.481] SetLastError (dwErrCode=0x0) [0197.481] GetLastError () returned 0x0 [0197.481] SetLastError (dwErrCode=0x0) [0197.481] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0197.481] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0197.484] GetLastError () returned 0x0 [0197.484] SetLastError (dwErrCode=0x0) [0197.484] GetLastError () returned 0x0 [0197.484] SetLastError (dwErrCode=0x0) [0197.484] GetLastError () returned 0x0 [0197.484] SetLastError (dwErrCode=0x0) [0197.485] GetLastError () returned 0x0 [0197.485] SetLastError (dwErrCode=0x0) [0197.485] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0197.485] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0197.485] GetLastError () returned 0x0 [0197.485] SetLastError (dwErrCode=0x0) [0197.485] GetLastError () returned 0x0 [0197.485] SetLastError (dwErrCode=0x0) [0197.485] GetLastError () returned 0x0 [0197.485] SetLastError (dwErrCode=0x0) [0197.486] GetLastError () returned 0x0 [0197.486] SetLastError (dwErrCode=0x0) [0197.486] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0197.778] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0197.778] GetLastError () returned 0x0 [0197.779] SetLastError (dwErrCode=0x0) [0197.779] GetLastError () returned 0x0 [0197.779] SetLastError (dwErrCode=0x0) [0197.780] GetLastError () returned 0x0 [0197.780] SetLastError (dwErrCode=0x0) [0197.780] GetLastError () returned 0x0 [0197.780] SetLastError (dwErrCode=0x0) [0197.780] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0197.781] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0197.781] GetLastError () returned 0x0 [0197.781] SetLastError (dwErrCode=0x0) [0197.782] GetLastError () returned 0x0 [0197.782] SetLastError (dwErrCode=0x0) [0197.782] GetLastError () returned 0x0 [0197.782] SetLastError (dwErrCode=0x0) [0197.783] GetLastError () returned 0x0 [0197.783] SetLastError (dwErrCode=0x0) [0197.783] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0197.783] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0197.784] GetLastError () returned 0x0 [0197.784] SetLastError (dwErrCode=0x0) [0197.784] GetLastError () returned 0x0 [0197.784] SetLastError (dwErrCode=0x0) [0197.785] GetLastError () returned 0x0 [0197.785] SetLastError (dwErrCode=0x0) [0197.785] GetLastError () returned 0x0 [0197.785] SetLastError (dwErrCode=0x0) [0197.785] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0197.786] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0197.786] GetLastError () returned 0x0 [0197.786] SetLastError (dwErrCode=0x0) [0197.786] GetLastError () returned 0x0 [0197.787] SetLastError (dwErrCode=0x0) [0197.787] GetLastError () returned 0x0 [0197.787] SetLastError (dwErrCode=0x0) [0197.787] GetLastError () returned 0x0 [0197.787] SetLastError (dwErrCode=0x0) [0197.788] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0197.788] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0197.788] GetLastError () returned 0x0 [0197.788] SetLastError (dwErrCode=0x0) [0197.788] GetLastError () returned 0x0 [0197.788] SetLastError (dwErrCode=0x0) [0197.788] GetLastError () returned 0x0 [0197.788] SetLastError (dwErrCode=0x0) [0197.788] GetLastError () returned 0x0 [0197.789] SetLastError (dwErrCode=0x0) [0197.789] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0197.789] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0197.789] GetLastError () returned 0x0 [0197.789] SetLastError (dwErrCode=0x0) [0197.789] GetLastError () returned 0x0 [0197.790] SetLastError (dwErrCode=0x0) [0197.790] GetLastError () returned 0x0 [0197.790] SetLastError (dwErrCode=0x0) [0197.790] GetLastError () returned 0x0 [0197.790] SetLastError (dwErrCode=0x0) [0197.790] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0197.790] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0197.791] GetLastError () returned 0x0 [0197.791] SetLastError (dwErrCode=0x0) [0197.791] GetLastError () returned 0x0 [0197.791] SetLastError (dwErrCode=0x0) [0197.791] GetLastError () returned 0x0 [0197.791] SetLastError (dwErrCode=0x0) [0197.791] GetLastError () returned 0x0 [0197.791] SetLastError (dwErrCode=0x0) [0197.791] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0197.792] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0197.792] GetLastError () returned 0x0 [0197.792] SetLastError (dwErrCode=0x0) [0197.792] GetLastError () returned 0x0 [0197.792] SetLastError (dwErrCode=0x0) [0197.792] GetLastError () returned 0x0 [0197.793] SetLastError (dwErrCode=0x0) [0197.793] GetLastError () returned 0x0 [0197.793] SetLastError (dwErrCode=0x0) [0197.793] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0197.793] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0197.793] GetLastError () returned 0x0 [0197.793] SetLastError (dwErrCode=0x0) [0197.794] GetLastError () returned 0x0 [0197.794] SetLastError (dwErrCode=0x0) [0197.794] GetLastError () returned 0x0 [0197.794] SetLastError (dwErrCode=0x0) [0197.794] GetLastError () returned 0x0 [0197.794] SetLastError (dwErrCode=0x0) [0197.794] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0197.794] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0197.796] GetLastError () returned 0x0 [0197.796] SetLastError (dwErrCode=0x0) [0197.796] GetLastError () returned 0x0 [0197.796] SetLastError (dwErrCode=0x0) [0197.796] GetLastError () returned 0x0 [0197.796] SetLastError (dwErrCode=0x0) [0197.796] GetLastError () returned 0x0 [0197.796] SetLastError (dwErrCode=0x0) [0197.796] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0197.797] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0197.797] GetLastError () returned 0x0 [0197.797] SetLastError (dwErrCode=0x0) [0197.797] GetLastError () returned 0x0 [0197.797] SetLastError (dwErrCode=0x0) [0197.797] GetLastError () returned 0x0 [0197.797] SetLastError (dwErrCode=0x0) [0197.797] GetLastError () returned 0x0 [0197.797] SetLastError (dwErrCode=0x0) [0197.798] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0197.800] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0197.801] GetLastError () returned 0x0 [0197.801] SetLastError (dwErrCode=0x0) [0197.801] GetLastError () returned 0x0 [0197.801] SetLastError (dwErrCode=0x0) [0197.801] GetLastError () returned 0x0 [0197.801] SetLastError (dwErrCode=0x0) [0197.801] GetLastError () returned 0x0 [0197.802] SetLastError (dwErrCode=0x0) [0197.802] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0197.802] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0197.802] GetLastError () returned 0x0 [0197.803] SetLastError (dwErrCode=0x0) [0197.803] GetLastError () returned 0x0 [0197.803] SetLastError (dwErrCode=0x0) [0197.803] GetLastError () returned 0x0 [0197.803] SetLastError (dwErrCode=0x0) [0197.803] GetLastError () returned 0x0 [0197.803] SetLastError (dwErrCode=0x0) [0197.803] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0197.804] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0197.804] GetLastError () returned 0x0 [0197.804] SetLastError (dwErrCode=0x0) [0197.804] GetLastError () returned 0x0 [0197.804] SetLastError (dwErrCode=0x0) [0197.804] GetLastError () returned 0x0 [0197.804] SetLastError (dwErrCode=0x0) [0197.804] GetLastError () returned 0x0 [0197.805] SetLastError (dwErrCode=0x0) [0197.805] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0197.805] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0197.806] GetLastError () returned 0x0 [0197.806] SetLastError (dwErrCode=0x0) [0197.806] GetLastError () returned 0x0 [0197.806] SetLastError (dwErrCode=0x0) [0197.806] GetLastError () returned 0x0 [0197.806] SetLastError (dwErrCode=0x0) [0197.806] GetLastError () returned 0x0 [0197.807] SetLastError (dwErrCode=0x0) [0197.807] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0197.807] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0197.808] GetLastError () returned 0x0 [0197.808] SetLastError (dwErrCode=0x0) [0197.808] GetLastError () returned 0x0 [0197.808] SetLastError (dwErrCode=0x0) [0197.808] GetLastError () returned 0x0 [0197.808] SetLastError (dwErrCode=0x0) [0197.808] GetLastError () returned 0x0 [0197.808] SetLastError (dwErrCode=0x0) [0197.808] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0197.808] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0197.809] GetLastError () returned 0x0 [0197.809] SetLastError (dwErrCode=0x0) [0197.809] GetLastError () returned 0x0 [0197.809] SetLastError (dwErrCode=0x0) [0197.809] GetLastError () returned 0x0 [0197.809] SetLastError (dwErrCode=0x0) [0197.809] GetLastError () returned 0x0 [0197.809] SetLastError (dwErrCode=0x0) [0197.810] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0197.810] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0197.810] GetLastError () returned 0x0 [0197.810] SetLastError (dwErrCode=0x0) [0197.810] GetLastError () returned 0x0 [0197.810] SetLastError (dwErrCode=0x0) [0197.811] GetLastError () returned 0x0 [0197.811] SetLastError (dwErrCode=0x0) [0197.811] GetLastError () returned 0x0 [0197.811] SetLastError (dwErrCode=0x0) [0197.811] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0197.811] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0197.812] GetLastError () returned 0x0 [0197.812] SetLastError (dwErrCode=0x0) [0198.169] GetLastError () returned 0x0 [0198.169] SetLastError (dwErrCode=0x0) [0198.169] GetLastError () returned 0x0 [0198.169] SetLastError (dwErrCode=0x0) [0198.169] GetLastError () returned 0x0 [0198.169] SetLastError (dwErrCode=0x0) [0198.170] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0198.170] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0198.171] GetLastError () returned 0x0 [0198.171] SetLastError (dwErrCode=0x0) [0198.171] GetLastError () returned 0x0 [0198.171] SetLastError (dwErrCode=0x0) [0198.171] GetLastError () returned 0x0 [0198.171] SetLastError (dwErrCode=0x0) [0198.171] GetLastError () returned 0x0 [0198.171] SetLastError (dwErrCode=0x0) [0198.171] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0198.172] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0198.172] GetLastError () returned 0x0 [0198.172] SetLastError (dwErrCode=0x0) [0198.172] GetLastError () returned 0x0 [0198.172] SetLastError (dwErrCode=0x0) [0198.173] GetLastError () returned 0x0 [0198.173] SetLastError (dwErrCode=0x0) [0198.173] GetLastError () returned 0x0 [0198.173] SetLastError (dwErrCode=0x0) [0198.173] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0198.173] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0198.174] GetLastError () returned 0x0 [0198.174] SetLastError (dwErrCode=0x0) [0198.174] GetLastError () returned 0x0 [0198.174] SetLastError (dwErrCode=0x0) [0198.174] GetLastError () returned 0x0 [0198.174] SetLastError (dwErrCode=0x0) [0198.174] GetLastError () returned 0x0 [0198.175] SetLastError (dwErrCode=0x0) [0198.175] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0198.175] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0198.175] GetLastError () returned 0x0 [0198.175] SetLastError (dwErrCode=0x0) [0198.175] GetLastError () returned 0x0 [0198.175] SetLastError (dwErrCode=0x0) [0198.176] GetLastError () returned 0x0 [0198.176] SetLastError (dwErrCode=0x0) [0198.176] GetLastError () returned 0x0 [0198.176] SetLastError (dwErrCode=0x0) [0198.176] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0198.176] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0198.176] GetLastError () returned 0x0 [0198.177] SetLastError (dwErrCode=0x0) [0198.177] GetLastError () returned 0x0 [0198.177] SetLastError (dwErrCode=0x0) [0198.177] GetLastError () returned 0x0 [0198.177] SetLastError (dwErrCode=0x0) [0198.177] GetLastError () returned 0x0 [0198.177] SetLastError (dwErrCode=0x0) [0198.177] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0198.178] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0198.178] GetLastError () returned 0x0 [0198.178] SetLastError (dwErrCode=0x0) [0198.178] GetLastError () returned 0x0 [0198.178] SetLastError (dwErrCode=0x0) [0198.178] GetLastError () returned 0x0 [0198.179] SetLastError (dwErrCode=0x0) [0198.179] GetLastError () returned 0x0 [0198.179] SetLastError (dwErrCode=0x0) [0198.179] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0198.179] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0198.180] GetLastError () returned 0x0 [0198.180] SetLastError (dwErrCode=0x0) [0198.180] GetLastError () returned 0x0 [0198.180] SetLastError (dwErrCode=0x0) [0198.180] GetLastError () returned 0x0 [0198.180] SetLastError (dwErrCode=0x0) [0198.180] GetLastError () returned 0x0 [0198.180] SetLastError (dwErrCode=0x0) [0198.180] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0198.181] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0198.181] GetLastError () returned 0x0 [0198.181] SetLastError (dwErrCode=0x0) [0198.181] GetLastError () returned 0x0 [0198.181] SetLastError (dwErrCode=0x0) [0198.181] GetLastError () returned 0x0 [0198.181] SetLastError (dwErrCode=0x0) [0198.181] GetLastError () returned 0x0 [0198.182] SetLastError (dwErrCode=0x0) [0198.182] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0198.182] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0198.182] GetLastError () returned 0x0 [0198.182] SetLastError (dwErrCode=0x0) [0198.182] GetLastError () returned 0x0 [0198.182] SetLastError (dwErrCode=0x0) [0198.183] GetLastError () returned 0x0 [0198.183] SetLastError (dwErrCode=0x0) [0198.183] GetLastError () returned 0x0 [0198.183] SetLastError (dwErrCode=0x0) [0198.183] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0198.183] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0198.184] GetLastError () returned 0x0 [0198.184] SetLastError (dwErrCode=0x0) [0198.184] GetLastError () returned 0x0 [0198.184] SetLastError (dwErrCode=0x0) [0198.184] GetLastError () returned 0x0 [0198.184] SetLastError (dwErrCode=0x0) [0198.184] GetLastError () returned 0x0 [0198.184] SetLastError (dwErrCode=0x0) [0198.184] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0198.185] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0198.185] GetLastError () returned 0x0 [0198.185] SetLastError (dwErrCode=0x0) [0198.185] GetLastError () returned 0x0 [0198.185] SetLastError (dwErrCode=0x0) [0198.186] GetLastError () returned 0x0 [0198.186] SetLastError (dwErrCode=0x0) [0198.186] GetLastError () returned 0x0 [0198.186] SetLastError (dwErrCode=0x0) [0198.186] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0198.186] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0198.187] GetLastError () returned 0x0 [0198.187] SetLastError (dwErrCode=0x0) [0198.188] GetLastError () returned 0x0 [0198.188] SetLastError (dwErrCode=0x0) [0198.188] GetLastError () returned 0x0 [0198.188] SetLastError (dwErrCode=0x0) [0198.188] GetLastError () returned 0x0 [0198.188] SetLastError (dwErrCode=0x0) [0198.188] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0198.188] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0198.189] GetLastError () returned 0x0 [0198.189] SetLastError (dwErrCode=0x0) [0198.189] GetLastError () returned 0x0 [0198.189] SetLastError (dwErrCode=0x0) [0198.189] GetLastError () returned 0x0 [0198.189] SetLastError (dwErrCode=0x0) [0198.189] GetLastError () returned 0x0 [0198.189] SetLastError (dwErrCode=0x0) [0198.189] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0198.190] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0198.190] GetLastError () returned 0x0 [0198.190] SetLastError (dwErrCode=0x0) [0198.190] GetLastError () returned 0x0 [0198.190] SetLastError (dwErrCode=0x0) [0198.190] GetLastError () returned 0x0 [0198.191] SetLastError (dwErrCode=0x0) [0198.191] GetLastError () returned 0x0 [0198.191] SetLastError (dwErrCode=0x0) [0198.191] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0198.191] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0198.191] GetLastError () returned 0x0 [0198.192] SetLastError (dwErrCode=0x0) [0198.192] GetLastError () returned 0x0 [0198.192] SetLastError (dwErrCode=0x0) [0198.192] GetLastError () returned 0x0 [0198.192] SetLastError (dwErrCode=0x0) [0198.192] GetLastError () returned 0x0 [0198.192] SetLastError (dwErrCode=0x0) [0198.192] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0198.193] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0198.193] GetLastError () returned 0x0 [0198.193] SetLastError (dwErrCode=0x0) [0198.193] GetLastError () returned 0x0 [0198.193] SetLastError (dwErrCode=0x0) [0198.193] GetLastError () returned 0x0 [0198.193] SetLastError (dwErrCode=0x0) [0198.193] GetLastError () returned 0x0 [0198.194] SetLastError (dwErrCode=0x0) [0198.194] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0198.194] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0198.194] GetLastError () returned 0x0 [0198.194] SetLastError (dwErrCode=0x0) [0198.194] GetLastError () returned 0x0 [0198.195] SetLastError (dwErrCode=0x0) [0198.195] GetLastError () returned 0x0 [0198.195] SetLastError (dwErrCode=0x0) [0198.195] GetLastError () returned 0x0 [0198.195] SetLastError (dwErrCode=0x0) [0198.195] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0198.195] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0198.196] GetLastError () returned 0x0 [0198.196] SetLastError (dwErrCode=0x0) [0198.196] GetLastError () returned 0x0 [0198.196] SetLastError (dwErrCode=0x0) [0198.196] GetLastError () returned 0x0 [0198.196] SetLastError (dwErrCode=0x0) [0198.196] GetLastError () returned 0x0 [0198.196] SetLastError (dwErrCode=0x0) [0198.196] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0198.197] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0198.197] GetLastError () returned 0x0 [0198.197] SetLastError (dwErrCode=0x0) [0198.197] GetLastError () returned 0x0 [0198.197] SetLastError (dwErrCode=0x0) [0198.197] GetLastError () returned 0x0 [0198.197] SetLastError (dwErrCode=0x0) [0198.198] GetLastError () returned 0x0 [0198.198] SetLastError (dwErrCode=0x0) [0198.198] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0198.198] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0198.199] GetLastError () returned 0x0 [0198.199] SetLastError (dwErrCode=0x0) [0198.199] GetLastError () returned 0x0 [0198.199] SetLastError (dwErrCode=0x0) [0198.199] GetLastError () returned 0x0 [0198.199] SetLastError (dwErrCode=0x0) [0198.199] GetLastError () returned 0x0 [0198.199] SetLastError (dwErrCode=0x0) [0198.199] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0198.199] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0198.200] GetLastError () returned 0x0 [0198.200] SetLastError (dwErrCode=0x0) [0198.200] GetLastError () returned 0x0 [0198.200] SetLastError (dwErrCode=0x0) [0198.200] GetLastError () returned 0x0 [0198.200] SetLastError (dwErrCode=0x0) [0198.200] GetLastError () returned 0x0 [0198.200] SetLastError (dwErrCode=0x0) [0198.200] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0198.201] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0198.420] GetLastError () returned 0x0 [0198.420] SetLastError (dwErrCode=0x0) [0198.420] GetLastError () returned 0x0 [0198.420] SetLastError (dwErrCode=0x0) [0198.420] GetLastError () returned 0x0 [0198.421] SetLastError (dwErrCode=0x0) [0198.421] GetLastError () returned 0x0 [0198.421] SetLastError (dwErrCode=0x0) [0198.421] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0198.421] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0198.421] GetLastError () returned 0x0 [0198.421] SetLastError (dwErrCode=0x0) [0198.422] GetLastError () returned 0x0 [0198.422] SetLastError (dwErrCode=0x0) [0198.422] GetLastError () returned 0x0 [0198.422] SetLastError (dwErrCode=0x0) [0198.422] GetLastError () returned 0x0 [0198.422] SetLastError (dwErrCode=0x0) [0198.422] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0198.422] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0198.422] GetLastError () returned 0x0 [0198.423] SetLastError (dwErrCode=0x0) [0198.423] GetLastError () returned 0x0 [0198.423] SetLastError (dwErrCode=0x0) [0198.423] GetLastError () returned 0x0 [0198.423] SetLastError (dwErrCode=0x0) [0198.423] GetLastError () returned 0x0 [0198.423] SetLastError (dwErrCode=0x0) [0198.423] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0198.424] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0198.425] GetLastError () returned 0x0 [0198.425] SetLastError (dwErrCode=0x0) [0198.425] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0198.425] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0198.426] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0198.426] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0198.426] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0198.426] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0198.426] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0198.427] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0198.427] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0198.427] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0198.427] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0198.428] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0198.428] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0198.428] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0198.428] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0198.429] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0198.429] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0198.429] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0198.430] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0198.430] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0198.430] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0198.430] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0198.431] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0198.431] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0198.431] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0198.432] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0198.432] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0198.432] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0198.432] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0198.433] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0198.433] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0198.433] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0198.433] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0198.434] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0198.434] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0198.434] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0198.434] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0198.434] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0198.436] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0198.436] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0198.436] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0198.437] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0198.437] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0198.437] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0198.437] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0198.438] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0198.438] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0198.438] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0198.438] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0198.439] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0198.439] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0198.439] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0198.439] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0198.439] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0198.440] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0198.440] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0198.440] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0198.440] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0198.440] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0198.441] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0198.441] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0198.441] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0198.441] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0198.443] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0198.444] GetLastError () returned 0x0 [0198.444] SetLastError (dwErrCode=0x0) [0198.444] GetLastError () returned 0x0 [0198.444] SetLastError (dwErrCode=0x0) [0198.444] GetLastError () returned 0x0 [0198.444] SetLastError (dwErrCode=0x0) [0198.444] GetLastError () returned 0x0 [0198.444] SetLastError (dwErrCode=0x0) [0198.445] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0198.445] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0198.445] GetLastError () returned 0x0 [0198.445] SetLastError (dwErrCode=0x0) [0198.446] GetLastError () returned 0x0 [0198.446] SetLastError (dwErrCode=0x0) [0198.446] GetLastError () returned 0x0 [0198.446] SetLastError (dwErrCode=0x0) [0198.446] GetLastError () returned 0x0 [0198.446] SetLastError (dwErrCode=0x0) [0198.447] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0198.447] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0198.447] GetLastError () returned 0x0 [0198.447] SetLastError (dwErrCode=0x0) [0198.447] GetLastError () returned 0x0 [0198.447] SetLastError (dwErrCode=0x0) [0198.448] GetLastError () returned 0x0 [0198.448] SetLastError (dwErrCode=0x0) [0198.448] GetLastError () returned 0x0 [0198.448] SetLastError (dwErrCode=0x0) [0198.448] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0198.448] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0198.449] GetLastError () returned 0x0 [0198.449] SetLastError (dwErrCode=0x0) [0198.449] GetLastError () returned 0x0 [0198.449] SetLastError (dwErrCode=0x0) [0198.450] GetLastError () returned 0x0 [0198.450] SetLastError (dwErrCode=0x0) [0198.450] GetLastError () returned 0x0 [0198.450] SetLastError (dwErrCode=0x0) [0198.450] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0198.450] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0198.451] GetLastError () returned 0x0 [0198.451] SetLastError (dwErrCode=0x0) [0198.451] GetLastError () returned 0x0 [0198.451] SetLastError (dwErrCode=0x0) [0198.452] GetLastError () returned 0x0 [0198.452] SetLastError (dwErrCode=0x0) [0198.452] GetLastError () returned 0x0 [0198.452] SetLastError (dwErrCode=0x0) [0198.452] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0198.453] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0198.453] GetLastError () returned 0x0 [0198.453] SetLastError (dwErrCode=0x0) [0198.453] GetLastError () returned 0x0 [0198.453] SetLastError (dwErrCode=0x0) [0198.454] GetLastError () returned 0x0 [0198.454] SetLastError (dwErrCode=0x0) [0198.454] GetLastError () returned 0x0 [0198.454] SetLastError (dwErrCode=0x0) [0198.454] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0198.455] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0198.455] GetLastError () returned 0x0 [0198.455] SetLastError (dwErrCode=0x0) [0198.455] GetLastError () returned 0x0 [0198.455] SetLastError (dwErrCode=0x0) [0198.456] GetLastError () returned 0x0 [0198.456] SetLastError (dwErrCode=0x0) [0198.456] GetLastError () returned 0x0 [0198.456] SetLastError (dwErrCode=0x0) [0198.456] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0198.457] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0198.457] GetLastError () returned 0x0 [0198.457] SetLastError (dwErrCode=0x0) [0198.457] GetLastError () returned 0x0 [0198.458] SetLastError (dwErrCode=0x0) [0198.458] GetLastError () returned 0x0 [0198.458] SetLastError (dwErrCode=0x0) [0198.458] GetLastError () returned 0x0 [0198.458] SetLastError (dwErrCode=0x0) [0198.458] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0198.459] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0198.459] GetLastError () returned 0x0 [0198.459] SetLastError (dwErrCode=0x0) [0198.460] GetLastError () returned 0x0 [0198.460] SetLastError (dwErrCode=0x0) [0198.460] GetLastError () returned 0x0 [0198.460] SetLastError (dwErrCode=0x0) [0198.460] GetLastError () returned 0x0 [0198.460] SetLastError (dwErrCode=0x0) [0198.461] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0198.461] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0198.461] GetLastError () returned 0x0 [0198.461] SetLastError (dwErrCode=0x0) [0198.461] GetLastError () returned 0x0 [0198.461] SetLastError (dwErrCode=0x0) [0198.462] GetLastError () returned 0x0 [0198.462] SetLastError (dwErrCode=0x0) [0198.462] GetLastError () returned 0x0 [0198.462] SetLastError (dwErrCode=0x0) [0198.462] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0198.462] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0198.463] GetLastError () returned 0x0 [0198.463] SetLastError (dwErrCode=0x0) [0198.463] GetLastError () returned 0x0 [0198.463] SetLastError (dwErrCode=0x0) [0198.463] GetLastError () returned 0x0 [0198.463] SetLastError (dwErrCode=0x0) [0198.464] GetLastError () returned 0x0 [0198.464] SetLastError (dwErrCode=0x0) [0198.464] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0198.464] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0198.465] GetLastError () returned 0x0 [0198.465] SetLastError (dwErrCode=0x0) [0198.465] GetLastError () returned 0x0 [0198.465] SetLastError (dwErrCode=0x0) [0198.465] GetLastError () returned 0x0 [0198.465] SetLastError (dwErrCode=0x0) [0198.466] GetLastError () returned 0x0 [0198.466] SetLastError (dwErrCode=0x0) [0198.466] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0198.884] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0198.884] GetLastError () returned 0x0 [0198.884] SetLastError (dwErrCode=0x0) [0198.884] GetLastError () returned 0x0 [0198.884] SetLastError (dwErrCode=0x0) [0198.885] GetLastError () returned 0x0 [0198.885] SetLastError (dwErrCode=0x0) [0198.885] GetLastError () returned 0x0 [0198.885] SetLastError (dwErrCode=0x0) [0198.886] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0198.886] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0198.887] GetLastError () returned 0x0 [0198.887] SetLastError (dwErrCode=0x0) [0198.887] GetLastError () returned 0x0 [0198.887] SetLastError (dwErrCode=0x0) [0198.888] GetLastError () returned 0x0 [0198.888] SetLastError (dwErrCode=0x0) [0198.888] GetLastError () returned 0x0 [0198.888] SetLastError (dwErrCode=0x0) [0198.889] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0198.889] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0198.889] GetLastError () returned 0x0 [0198.889] SetLastError (dwErrCode=0x0) [0198.889] GetLastError () returned 0x0 [0198.889] SetLastError (dwErrCode=0x0) [0198.890] GetLastError () returned 0x0 [0198.890] SetLastError (dwErrCode=0x0) [0198.890] GetLastError () returned 0x0 [0198.890] SetLastError (dwErrCode=0x0) [0198.890] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0198.890] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0198.890] GetLastError () returned 0x0 [0198.890] SetLastError (dwErrCode=0x0) [0198.891] GetLastError () returned 0x0 [0198.891] SetLastError (dwErrCode=0x0) [0198.891] GetLastError () returned 0x0 [0198.891] SetLastError (dwErrCode=0x0) [0198.891] GetLastError () returned 0x0 [0198.891] SetLastError (dwErrCode=0x0) [0198.891] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0198.891] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0198.892] GetLastError () returned 0x0 [0198.892] SetLastError (dwErrCode=0x0) [0198.892] GetLastError () returned 0x0 [0198.892] SetLastError (dwErrCode=0x0) [0198.892] GetLastError () returned 0x0 [0198.892] SetLastError (dwErrCode=0x0) [0198.892] GetLastError () returned 0x0 [0198.892] SetLastError (dwErrCode=0x0) [0198.893] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0198.893] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0198.893] GetLastError () returned 0x0 [0198.893] SetLastError (dwErrCode=0x0) [0198.893] GetLastError () returned 0x0 [0198.893] SetLastError (dwErrCode=0x0) [0198.893] GetLastError () returned 0x0 [0198.893] SetLastError (dwErrCode=0x0) [0198.894] GetLastError () returned 0x0 [0198.894] SetLastError (dwErrCode=0x0) [0198.894] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0198.894] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0198.894] GetLastError () returned 0x0 [0198.895] SetLastError (dwErrCode=0x0) [0198.895] GetLastError () returned 0x0 [0198.895] SetLastError (dwErrCode=0x0) [0198.895] GetLastError () returned 0x0 [0198.895] SetLastError (dwErrCode=0x0) [0198.895] GetLastError () returned 0x0 [0198.895] SetLastError (dwErrCode=0x0) [0198.895] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0198.896] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0198.896] GetLastError () returned 0x0 [0198.896] SetLastError (dwErrCode=0x0) [0198.896] GetLastError () returned 0x0 [0198.896] SetLastError (dwErrCode=0x0) [0198.896] GetLastError () returned 0x0 [0198.896] SetLastError (dwErrCode=0x0) [0198.897] GetLastError () returned 0x0 [0198.897] SetLastError (dwErrCode=0x0) [0198.897] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0198.897] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0198.897] GetLastError () returned 0x0 [0198.897] SetLastError (dwErrCode=0x0) [0198.898] GetLastError () returned 0x0 [0198.898] SetLastError (dwErrCode=0x0) [0198.898] GetLastError () returned 0x0 [0198.898] SetLastError (dwErrCode=0x0) [0198.898] GetLastError () returned 0x0 [0198.898] SetLastError (dwErrCode=0x0) [0198.898] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0198.899] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0198.899] GetLastError () returned 0x0 [0198.899] SetLastError (dwErrCode=0x0) [0198.899] GetLastError () returned 0x0 [0198.899] SetLastError (dwErrCode=0x0) [0198.900] GetLastError () returned 0x0 [0198.900] SetLastError (dwErrCode=0x0) [0198.900] GetLastError () returned 0x0 [0198.900] SetLastError (dwErrCode=0x0) [0198.900] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0198.901] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0198.901] GetLastError () returned 0x0 [0198.901] SetLastError (dwErrCode=0x0) [0198.902] GetLastError () returned 0x0 [0198.902] SetLastError (dwErrCode=0x0) [0198.902] GetLastError () returned 0x0 [0198.902] SetLastError (dwErrCode=0x0) [0198.902] GetLastError () returned 0x0 [0198.902] SetLastError (dwErrCode=0x0) [0198.903] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0198.903] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0198.904] GetLastError () returned 0x0 [0198.904] SetLastError (dwErrCode=0x0) [0198.904] GetLastError () returned 0x0 [0198.904] SetLastError (dwErrCode=0x0) [0198.904] GetLastError () returned 0x0 [0198.904] SetLastError (dwErrCode=0x0) [0198.905] GetLastError () returned 0x0 [0198.905] SetLastError (dwErrCode=0x0) [0198.905] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0198.905] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0198.906] GetLastError () returned 0x0 [0198.906] SetLastError (dwErrCode=0x0) [0198.906] GetLastError () returned 0x0 [0198.906] SetLastError (dwErrCode=0x0) [0198.906] GetLastError () returned 0x0 [0198.906] SetLastError (dwErrCode=0x0) [0198.906] GetLastError () returned 0x0 [0198.906] SetLastError (dwErrCode=0x0) [0198.907] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0198.907] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0198.907] GetLastError () returned 0x0 [0198.907] SetLastError (dwErrCode=0x0) [0198.907] GetLastError () returned 0x0 [0198.907] SetLastError (dwErrCode=0x0) [0198.907] GetLastError () returned 0x0 [0198.907] SetLastError (dwErrCode=0x0) [0198.907] GetLastError () returned 0x0 [0198.908] SetLastError (dwErrCode=0x0) [0198.908] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0198.908] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0198.908] GetLastError () returned 0x0 [0198.908] SetLastError (dwErrCode=0x0) [0198.908] GetLastError () returned 0x0 [0198.908] SetLastError (dwErrCode=0x0) [0198.908] GetLastError () returned 0x0 [0198.909] SetLastError (dwErrCode=0x0) [0198.909] GetLastError () returned 0x0 [0198.909] SetLastError (dwErrCode=0x0) [0198.909] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0198.909] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0198.909] GetLastError () returned 0x0 [0198.909] SetLastError (dwErrCode=0x0) [0198.909] GetLastError () returned 0x0 [0198.909] SetLastError (dwErrCode=0x0) [0198.910] GetLastError () returned 0x0 [0198.910] SetLastError (dwErrCode=0x0) [0198.910] GetLastError () returned 0x0 [0198.910] SetLastError (dwErrCode=0x0) [0198.910] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0198.910] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0198.910] GetLastError () returned 0x0 [0198.911] SetLastError (dwErrCode=0x0) [0198.911] GetLastError () returned 0x0 [0198.911] SetLastError (dwErrCode=0x0) [0198.911] GetLastError () returned 0x0 [0198.911] SetLastError (dwErrCode=0x0) [0198.911] GetLastError () returned 0x0 [0198.911] SetLastError (dwErrCode=0x0) [0198.911] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0198.911] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0198.914] GetLastError () returned 0x0 [0198.914] SetLastError (dwErrCode=0x0) [0198.914] GetLastError () returned 0x0 [0198.914] SetLastError (dwErrCode=0x0) [0198.914] GetLastError () returned 0x0 [0198.914] SetLastError (dwErrCode=0x0) [0198.914] GetLastError () returned 0x0 [0198.914] SetLastError (dwErrCode=0x0) [0198.914] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0198.914] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0198.915] GetLastError () returned 0x0 [0198.915] SetLastError (dwErrCode=0x0) [0198.915] GetLastError () returned 0x0 [0198.915] SetLastError (dwErrCode=0x0) [0198.915] GetLastError () returned 0x0 [0198.915] SetLastError (dwErrCode=0x0) [0198.915] GetLastError () returned 0x0 [0198.915] SetLastError (dwErrCode=0x0) [0198.915] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0198.915] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0198.916] GetLastError () returned 0x0 [0198.916] SetLastError (dwErrCode=0x0) [0198.916] GetLastError () returned 0x0 [0198.916] SetLastError (dwErrCode=0x0) [0198.916] GetLastError () returned 0x0 [0198.916] SetLastError (dwErrCode=0x0) [0198.916] GetLastError () returned 0x0 [0198.916] SetLastError (dwErrCode=0x0) [0198.916] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0198.917] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0198.917] GetLastError () returned 0x0 [0198.917] SetLastError (dwErrCode=0x0) [0198.917] GetLastError () returned 0x0 [0198.917] SetLastError (dwErrCode=0x0) [0198.917] GetLastError () returned 0x0 [0198.917] SetLastError (dwErrCode=0x0) [0198.917] GetLastError () returned 0x0 [0198.917] SetLastError (dwErrCode=0x0) [0198.918] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0198.918] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0198.918] GetLastError () returned 0x0 [0198.918] SetLastError (dwErrCode=0x0) [0198.918] GetLastError () returned 0x0 [0198.918] SetLastError (dwErrCode=0x0) [0198.918] GetLastError () returned 0x0 [0198.918] SetLastError (dwErrCode=0x0) [0198.918] GetLastError () returned 0x0 [0198.918] SetLastError (dwErrCode=0x0) [0198.918] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0198.919] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0198.919] GetLastError () returned 0x0 [0198.919] SetLastError (dwErrCode=0x0) [0198.919] GetLastError () returned 0x0 [0198.919] SetLastError (dwErrCode=0x0) [0198.919] GetLastError () returned 0x0 [0198.919] SetLastError (dwErrCode=0x0) [0198.919] GetLastError () returned 0x0 [0198.919] SetLastError (dwErrCode=0x0) [0198.919] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0198.920] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0199.270] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0199.270] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0199.270] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0199.270] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0199.271] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0199.271] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0199.271] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0199.272] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0199.272] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0199.272] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0199.273] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0199.273] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0199.273] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0199.273] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0199.274] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0199.274] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0199.274] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0199.275] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0199.275] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0199.275] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0199.276] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0199.276] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0199.276] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0199.276] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0199.277] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0199.277] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0199.277] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0199.278] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0199.278] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0199.278] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0199.278] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0199.279] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0199.281] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0199.281] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0199.281] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0199.281] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0199.282] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x1000, lpOverlapped=0x0) returned 1 [0199.282] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0199.282] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x158, lpOverlapped=0x0) returned 1 [0199.283] ReadFile (in: hFile=0x1cc, lpBuffer=0x242df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec08, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesRead=0x1fdec08*=0x0, lpOverlapped=0x0) returned 1 [0199.283] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1fdea4c, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdea4c*=0x1000, lpOverlapped=0x0) returned 1 [0199.283] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210000 [0199.284] GetLastError () returned 0x0 [0199.284] WriteFile (in: hFile=0x1dc, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x168, lpNumberOfBytesWritten=0x1fdeafc, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x1fdeafc*=0x168, lpOverlapped=0x0) returned 1 [0199.284] GetLastError () returned 0x0 [0199.284] CloseHandle (hObject=0x210) returned 1 [0199.539] CloseHandle (hObject=0x1c8) returned 1 [0199.540] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c620 [0199.540] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c640 [0199.540] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\SetupEngine.dll" (normalized: "c:\\588bce7c90097ed212\\setupengine.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdecd8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8 [0199.551] GetFileType (hFile=0x1c8) returned 0x1 [0199.551] GetLastError () returned 0xb7 [0199.551] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x23ddc8 [0199.551] GetLastError () returned 0xb7 [0199.551] WriteFile (in: hFile=0x1c8, lpBuffer=0x1fdd96c*, nNumberOfBytesToWrite=0x1, lpNumberOfBytesWritten=0x1fdd964, lpOverlapped=0x0 | out: lpBuffer=0x1fdd96c*, lpNumberOfBytesWritten=0x1fdd964*=0x1, lpOverlapped=0x0) returned 1 [0199.552] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x23ddc8 | out: hHeap=0x1f0000) returned 1 [0199.552] CloseHandle (hObject=0x1c8) returned 1 [0199.553] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\SetupEngine.dll" (normalized: "c:\\588bce7c90097ed212\\setupengine.dll")) returned 0 [0199.553] GetLastError () returned 0x20 [0199.553] GetLastError () returned 0x20 [0199.553] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2168c0 [0199.553] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381b8 [0199.553] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238690 [0199.553] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x2166c8 [0199.553] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bf0 [0199.553] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f30 [0199.553] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x21c6a0 [0199.553] GetLastError () returned 0x20 [0199.553] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x21cf00 [0199.553] GetLastError () returned 0x20 [0199.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x21cf00 [0199.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214e38 [0199.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238758 [0199.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x235db8 [0199.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c6b0 [0199.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22ba98 [0199.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20fef8 [0199.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c4e0 [0199.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b3e0 [0199.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff28 [0199.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x22b638 [0199.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x234b90 [0199.554] GetLastError () returned 0x20 [0199.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x21c520 [0199.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x21c4f0 [0199.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c410 [0199.554] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c4f0 | out: hHeap=0x1f0000) returned 1 [0199.555] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c4b0 [0199.555] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c410 | out: hHeap=0x1f0000) returned 1 [0199.555] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c520 | out: hHeap=0x1f0000) returned 1 [0199.555] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c4f0 [0199.555] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x20ff70 [0199.555] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c4f0 | out: hHeap=0x1f0000) returned 1 [0199.555] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x20ffa0 [0199.555] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff70 | out: hHeap=0x1f0000) returned 1 [0199.555] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c4b0 | out: hHeap=0x1f0000) returned 1 [0199.555] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210018 [0199.555] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff70 [0199.555] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210018 | out: hHeap=0x1f0000) returned 1 [0199.555] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210018 [0199.555] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff70 | out: hHeap=0x1f0000) returned 1 [0199.555] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffa0 | out: hHeap=0x1f0000) returned 1 [0199.555] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff70 [0199.555] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204ef0 [0199.555] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff70 | out: hHeap=0x1f0000) returned 1 [0199.555] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e30 [0199.556] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ef0 | out: hHeap=0x1f0000) returned 1 [0199.556] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210018 | out: hHeap=0x1f0000) returned 1 [0199.556] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0199.556] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x22b5c0 [0199.556] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d70 | out: hHeap=0x1f0000) returned 1 [0199.556] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204ef0 [0199.556] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b5c0 | out: hHeap=0x1f0000) returned 1 [0199.556] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e30 | out: hHeap=0x1f0000) returned 1 [0199.556] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204d30 [0199.556] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206868 [0199.556] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d30 | out: hHeap=0x1f0000) returned 1 [0199.556] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x22b750 [0199.556] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206868 | out: hHeap=0x1f0000) returned 1 [0199.556] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ef0 | out: hHeap=0x1f0000) returned 1 [0199.556] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c430 [0199.556] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x20ff70 [0199.556] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c430 | out: hHeap=0x1f0000) returned 1 [0199.556] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffa0 [0199.557] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff70 | out: hHeap=0x1f0000) returned 1 [0199.557] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204df0 [0199.557] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffa0 | out: hHeap=0x1f0000) returned 1 [0199.557] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206868 [0199.557] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204df0 | out: hHeap=0x1f0000) returned 1 [0199.557] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206868 | out: hHeap=0x1f0000) returned 1 [0199.557] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b750 | out: hHeap=0x1f0000) returned 1 [0199.557] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0199.557] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0199.557] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235db8 | out: hHeap=0x1f0000) returned 1 [0199.557] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238758 | out: hHeap=0x1f0000) returned 1 [0199.557] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0199.557] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b750 [0199.557] CryptAcquireContextA (in: phProv=0x1fdee08, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1fdee08*=0x229ad8) returned 1 [0199.559] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x22b750 | out: pbBuffer=0x22b750) returned 1 [0199.559] CryptReleaseContext (hProv=0x229ad8, dwFlags=0x0) returned 1 [0199.559] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b750 | out: hHeap=0x1f0000) returned 1 [0199.559] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b2f0 [0199.559] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b368 [0199.559] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf70 [0199.559] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b2f0 | out: hHeap=0x1f0000) returned 1 [0199.559] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0199.559] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf70 | out: hHeap=0x1f0000) returned 1 [0199.559] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2399d8 [0199.559] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff70 [0199.559] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x214dd0 [0199.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x22b750 [0199.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x234c98 [0199.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d90 [0199.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214f70 [0199.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x22b5e8 [0199.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x235db8 [0199.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c460 [0199.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b778 [0199.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210018 [0199.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c4b0 [0199.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b7c8 [0199.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffa0 [0199.560] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffa0 | out: hHeap=0x1f0000) returned 1 [0199.560] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b7c8 | out: hHeap=0x1f0000) returned 1 [0199.560] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c4b0 | out: hHeap=0x1f0000) returned 1 [0199.561] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210018 | out: hHeap=0x1f0000) returned 1 [0199.561] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b778 | out: hHeap=0x1f0000) returned 1 [0199.561] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c460 | out: hHeap=0x1f0000) returned 1 [0199.561] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235db8 | out: hHeap=0x1f0000) returned 1 [0199.561] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b5e8 | out: hHeap=0x1f0000) returned 1 [0199.561] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f70 | out: hHeap=0x1f0000) returned 1 [0199.561] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x21d050 [0199.561] GetLastError () returned 0x0 [0199.561] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x21d050 [0199.561] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0199.561] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0199.561] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0199.561] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0199.561] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0199.561] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0199.561] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x24eb00 [0199.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x235db8 [0199.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0199.562] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0199.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0199.562] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0199.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x25fd40 [0199.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0199.562] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0199.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f830 [0199.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x251068 [0199.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x25fe48 [0199.562] QueryPerformanceCounter (in: lpPerformanceCount=0x1fde958 | out: lpPerformanceCount=0x1fde958*=35693107198) returned 1 [0199.562] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1fde998 | out: lpSystemTimeAsFileTime=0x1fde998) [0199.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x21c4f0 [0199.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b7c8 [0199.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204dd0 [0199.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204dd0 | out: hHeap=0x1f0000) returned 1 [0199.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b7c8 | out: hHeap=0x1f0000) returned 1 [0199.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b5c0 [0199.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cb0 [0199.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cb0 | out: hHeap=0x1f0000) returned 1 [0199.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b5c0 | out: hHeap=0x1f0000) returned 1 [0199.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c4f0 | out: hHeap=0x1f0000) returned 1 [0199.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0199.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x21cf70 [0199.563] GetLastError () returned 0x0 [0199.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0199.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0199.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0199.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b778 [0199.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b458 [0199.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0199.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0199.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b5c0 [0199.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0199.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x222ee8 [0199.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0199.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x230e38 [0199.564] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0199.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x230860 [0199.564] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230e38 | out: hHeap=0x1f0000) returned 1 [0199.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b5e8 [0199.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b7c8 [0199.564] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b5e8 | out: hHeap=0x1f0000) returned 1 [0199.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0199.564] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b7c8 | out: hHeap=0x1f0000) returned 1 [0199.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x230e38 [0199.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x260498 [0199.564] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260498 | out: hHeap=0x1f0000) returned 1 [0199.564] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230e38 | out: hHeap=0x1f0000) returned 1 [0199.564] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230860 | out: hHeap=0x1f0000) returned 1 [0199.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210018 [0199.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216320 [0199.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b4d0 [0199.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b5e8 [0199.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b7c8 [0199.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b2f0 [0199.564] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b5e8 | out: hHeap=0x1f0000) returned 1 [0199.564] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b4d0 | out: hHeap=0x1f0000) returned 1 [0199.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x230e38 [0199.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b4d0 [0199.565] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b318 [0199.565] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b4d0 | out: hHeap=0x1f0000) returned 1 [0199.565] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0199.565] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b318 | out: hHeap=0x1f0000) returned 1 [0199.565] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206868 [0199.565] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x260498 [0199.565] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260498 | out: hHeap=0x1f0000) returned 1 [0199.565] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206868 | out: hHeap=0x1f0000) returned 1 [0199.565] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b5c0 | out: hHeap=0x1f0000) returned 1 [0199.565] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2360f0 [0199.565] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0199.565] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230e38 | out: hHeap=0x1f0000) returned 1 [0199.565] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204ef0 [0199.565] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x236340 [0199.565] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x237370 [0199.565] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b458 | out: hHeap=0x1f0000) returned 1 [0199.565] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2375c0 [0199.565] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237370 | out: hHeap=0x1f0000) returned 1 [0199.565] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b2f0 | out: hHeap=0x1f0000) returned 1 [0199.565] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b7c8 | out: hHeap=0x1f0000) returned 1 [0199.566] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216320 | out: hHeap=0x1f0000) returned 1 [0199.566] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236340 | out: hHeap=0x1f0000) returned 1 [0199.566] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ef0 | out: hHeap=0x1f0000) returned 1 [0199.566] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210018 | out: hHeap=0x1f0000) returned 1 [0199.566] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0199.566] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x236468 [0199.566] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0199.566] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ee8 | out: hHeap=0x1f0000) returned 1 [0199.566] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0199.566] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2360f0 | out: hHeap=0x1f0000) returned 1 [0199.566] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0199.566] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0199.566] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b778 | out: hHeap=0x1f0000) returned 1 [0199.566] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0199.566] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0199.566] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x235fc8 [0199.566] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2376e8 [0199.566] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235fc8 | out: hHeap=0x1f0000) returned 1 [0199.566] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2376e8 | out: hHeap=0x1f0000) returned 1 [0199.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2375c0 | out: hHeap=0x1f0000) returned 1 [0199.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0199.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25fd40 | out: hHeap=0x1f0000) returned 1 [0199.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24eb00 | out: hHeap=0x1f0000) returned 1 [0199.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x230e38 [0199.567] GetLastError () returned 0x0 [0199.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c4f0 [0199.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c460 [0199.567] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\SetupEngine.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\setupengine.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1fded08, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8 [0199.568] GetFileType (hFile=0x1c8) returned 0x1 [0199.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x23ddc8 [0199.568] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1fdec90 | out: lpNewFilePointer=0x0) returned 1 [0199.568] GetLastError () returned 0xb7 [0199.568] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1fded54 | out: lpNewFilePointer=0x0) returned 1 [0199.568] WriteFile (in: hFile=0x1c8, lpBuffer=0x23ddc8*, nNumberOfBytesToWrite=0x103, lpNumberOfBytesWritten=0x1fdedb8, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesWritten=0x1fdedb8*=0x103, lpOverlapped=0x0) returned 1 [0199.569] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x23ddc8 | out: hHeap=0x1f0000) returned 1 [0199.569] CloseHandle (hObject=0x1c8) returned 1 [0199.892] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c460 | out: hHeap=0x1f0000) returned 1 [0199.892] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c4f0 | out: hHeap=0x1f0000) returned 1 [0199.892] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235db8 | out: hHeap=0x1f0000) returned 1 [0199.892] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234c98 | out: hHeap=0x1f0000) returned 1 [0199.892] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b750 | out: hHeap=0x1f0000) returned 1 [0199.892] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d90 | out: hHeap=0x1f0000) returned 1 [0199.892] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214dd0 | out: hHeap=0x1f0000) returned 1 [0199.893] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff70 | out: hHeap=0x1f0000) returned 1 [0199.893] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2399d8 | out: hHeap=0x1f0000) returned 1 [0199.893] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230e38 | out: hHeap=0x1f0000) returned 1 [0199.893] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b368 | out: hHeap=0x1f0000) returned 1 [0199.893] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0199.893] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x251068 | out: hHeap=0x1f0000) returned 1 [0199.893] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25fe48 | out: hHeap=0x1f0000) returned 1 [0199.893] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0199.893] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c6a0 | out: hHeap=0x1f0000) returned 1 [0199.893] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff28 | out: hHeap=0x1f0000) returned 1 [0199.893] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b3e0 | out: hHeap=0x1f0000) returned 1 [0199.893] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c4e0 | out: hHeap=0x1f0000) returned 1 [0199.894] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20fef8 | out: hHeap=0x1f0000) returned 1 [0199.894] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ba98 | out: hHeap=0x1f0000) returned 1 [0199.894] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c6b0 | out: hHeap=0x1f0000) returned 1 [0199.894] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b90 | out: hHeap=0x1f0000) returned 1 [0199.894] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b638 | out: hHeap=0x1f0000) returned 1 [0199.894] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214e38 | out: hHeap=0x1f0000) returned 1 [0199.894] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2166c8 | out: hHeap=0x1f0000) returned 1 [0199.894] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238690 | out: hHeap=0x1f0000) returned 1 [0199.894] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0199.894] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2168c0 | out: hHeap=0x1f0000) returned 1 [0199.894] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c640 | out: hHeap=0x1f0000) returned 1 [0199.895] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c620 | out: hHeap=0x1f0000) returned 1 [0199.895] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x242df0 | out: hHeap=0x1f0000) returned 1 [0199.895] CloseHandle (hObject=0x1cc) returned 1 [0199.895] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c6f0 | out: hHeap=0x1f0000) returned 1 [0199.895] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c6d0 | out: hHeap=0x1f0000) returned 1 [0199.895] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24fc08 | out: hHeap=0x1f0000) returned 1 [0199.896] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24add0 | out: hHeap=0x1f0000) returned 1 [0199.896] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210000 | out: hHeap=0x1f0000) returned 1 [0199.896] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2052f0 | out: hHeap=0x1f0000) returned 1 [0199.896] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x23bdb8 | out: hHeap=0x1f0000) returned 1 [0199.896] CloseHandle (hObject=0x1dc) returned 1 [0199.896] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c690 | out: hHeap=0x1f0000) returned 1 [0199.896] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c630 | out: hHeap=0x1f0000) returned 1 [0199.896] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226388 | out: hHeap=0x1f0000) returned 1 [0199.896] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ff0 | out: hHeap=0x1f0000) returned 1 [0199.896] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24fb18 | out: hHeap=0x1f0000) returned 1 [0199.897] CloseHandle (hObject=0x1fc) returned 1 [0199.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c710 | out: hHeap=0x1f0000) returned 1 [0199.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c670 | out: hHeap=0x1f0000) returned 1 [0199.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d428 | out: hHeap=0x1f0000) returned 1 [0199.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c650 | out: hHeap=0x1f0000) returned 1 [0199.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c490 | out: hHeap=0x1f0000) returned 1 [0199.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c470 | out: hHeap=0x1f0000) returned 1 [0199.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c450 | out: hHeap=0x1f0000) returned 1 [0199.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24fa20 | out: hHeap=0x1f0000) returned 1 [0199.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2595a0 | out: hHeap=0x1f0000) returned 1 [0199.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234eb0 | out: hHeap=0x1f0000) returned 1 [0199.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2068c8 | out: hHeap=0x1f0000) returned 1 [0199.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0199.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0199.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2356d0 | out: hHeap=0x1f0000) returned 1 [0199.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25e1c0 | out: hHeap=0x1f0000) returned 1 [0199.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234da0 | out: hHeap=0x1f0000) returned 1 [0199.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d280 | out: hHeap=0x1f0000) returned 1 [0199.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239458 | out: hHeap=0x1f0000) returned 1 [0199.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e4f8 | out: hHeap=0x1f0000) returned 1 [0199.899] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215990 | out: hHeap=0x1f0000) returned 1 [0199.899] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0199.899] DeleteFileW (lpFileName="C:\\\\588bce7c90097ed212\\SetupEngine.dll" (normalized: "c:\\588bce7c90097ed212\\setupengine.dll")) returned 1 [0199.900] FindNextFileW (in: hFindFile=0x214590, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x48150, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupUi.dll", cAlternateFileName="")) returned 1 [0199.900] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0199.900] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0199.900] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2397c8 [0199.900] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0199.900] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239770 | out: hHeap=0x1f0000) returned 1 [0199.900] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0199.901] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\SetupUi.dll" (normalized: "c:\\588bce7c90097ed212\\setupui.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0199.901] GetLastError () returned 0x2 [0199.901] GetLastError () returned 0x2 [0199.901] FindNextFileW (in: hFindFile=0x214590, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5381000, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x5381000, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x5381000, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x75a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupUi.xsd", cAlternateFileName="")) returned 1 [0199.901] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260540 [0199.901] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228230 [0199.901] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2399d8 [0199.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228230 | out: hHeap=0x1f0000) returned 1 [0199.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2397c8 | out: hHeap=0x1f0000) returned 1 [0199.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0199.901] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\SetupUi.xsd" (normalized: "c:\\588bce7c90097ed212\\setupui.xsd"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0199.901] GetFileType (hFile=0x1fc) returned 0x1 [0199.902] CloseHandle (hObject=0x1fc) returned 1 [0199.902] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239718 [0199.902] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\SetupUi.xsd" (normalized: "c:\\588bce7c90097ed212\\setupui.xsd"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5381000, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x5381000, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x5381000, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x75a8)) returned 1 [0199.902] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239718 | out: hHeap=0x1f0000) returned 1 [0199.902] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239610 [0199.902] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\SetupUi.xsd" (normalized: "c:\\588bce7c90097ed212\\setupui.xsd"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5381000, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x5381000, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x5381000, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x75a8)) returned 1 [0199.902] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239610 | out: hHeap=0x1f0000) returned 1 [0199.902] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239ae0 [0199.903] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239ae0 | out: hHeap=0x1f0000) returned 1 [0199.903] FindNextFileW (in: hFindFile=0x214590, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x6519be00, ftCreationTime.dwHighDateTime=0x1cac6d5, ftLastAccessTime.dwLowDateTime=0x6519be00, ftLastAccessTime.dwHighDateTime=0x1cac6d5, ftLastWriteTime.dwLowDateTime=0x6519be00, ftLastWriteTime.dwHighDateTime=0x1cac6d5, nFileSizeHigh=0x0, nFileSizeLow=0x17758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupUtility.exe", cAlternateFileName="SETUPU~1.EXE")) returned 1 [0199.903] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0199.903] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0199.903] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239668 [0199.903] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0199.903] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2399d8 | out: hHeap=0x1f0000) returned 1 [0199.903] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0199.903] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\SetupUtility.exe" (normalized: "c:\\588bce7c90097ed212\\setuputility.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0199.904] GetFileType (hFile=0x1fc) returned 0x1 [0199.904] CloseHandle (hObject=0x1fc) returned 1 [0199.904] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239718 [0199.904] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\SetupUtility.exe" (normalized: "c:\\588bce7c90097ed212\\setuputility.exe"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x6519be00, ftCreationTime.dwHighDateTime=0x1cac6d5, ftLastAccessTime.dwLowDateTime=0x6519be00, ftLastAccessTime.dwHighDateTime=0x1cac6d5, ftLastWriteTime.dwLowDateTime=0x6519be00, ftLastWriteTime.dwHighDateTime=0x1cac6d5, nFileSizeHigh=0x0, nFileSizeLow=0x17758)) returned 1 [0199.904] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239718 | out: hHeap=0x1f0000) returned 1 [0199.904] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2399d8 [0199.904] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\SetupUtility.exe" (normalized: "c:\\588bce7c90097ed212\\setuputility.exe"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x6519be00, ftCreationTime.dwHighDateTime=0x1cac6d5, ftLastAccessTime.dwLowDateTime=0x6519be00, ftLastAccessTime.dwHighDateTime=0x1cac6d5, ftLastWriteTime.dwLowDateTime=0x6519be00, ftLastWriteTime.dwHighDateTime=0x1cac6d5, nFileSizeHigh=0x0, nFileSizeLow=0x17758)) returned 1 [0199.904] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2399d8 | out: hHeap=0x1f0000) returned 1 [0199.904] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239770 [0199.905] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239770 | out: hHeap=0x1f0000) returned 1 [0199.905] FindNextFileW (in: hFindFile=0x214590, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0xa078, dwReserved0=0x0, dwReserved1=0x0, cFileName="SplashScreen.bmp", cAlternateFileName="SPLASH~1.BMP")) returned 1 [0199.905] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228230 [0199.905] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0199.905] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2399d8 [0199.905] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0199.905] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239668 | out: hHeap=0x1f0000) returned 1 [0199.905] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228230 | out: hHeap=0x1f0000) returned 1 [0199.905] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\SplashScreen.bmp" (normalized: "c:\\588bce7c90097ed212\\splashscreen.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0199.905] GetFileType (hFile=0x1fc) returned 0x1 [0199.906] CloseHandle (hObject=0x1fc) returned 1 [0199.906] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2396c0 [0199.906] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\SplashScreen.bmp" (normalized: "c:\\588bce7c90097ed212\\splashscreen.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0xa078)) returned 1 [0199.906] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2396c0 | out: hHeap=0x1f0000) returned 1 [0199.906] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239ae0 [0199.906] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\SplashScreen.bmp" (normalized: "c:\\588bce7c90097ed212\\splashscreen.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0xa078)) returned 1 [0199.906] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239ae0 | out: hHeap=0x1f0000) returned 1 [0199.906] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2397c8 [0199.906] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2397c8 | out: hHeap=0x1f0000) returned 1 [0199.906] FindNextFileW (in: hFindFile=0x214590, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x143bc400, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0x143bc400, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0x143bc400, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x23420, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1 [0199.906] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260540 [0199.907] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228230 [0199.907] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2397c8 [0199.907] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228230 | out: hHeap=0x1f0000) returned 1 [0199.907] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2399d8 | out: hHeap=0x1f0000) returned 1 [0199.907] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0199.907] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\sqmapi.dll" (normalized: "c:\\588bce7c90097ed212\\sqmapi.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0199.907] GetFileType (hFile=0x1fc) returned 0x1 [0199.907] CloseHandle (hObject=0x1fc) returned 1 [0199.908] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2399d8 [0199.908] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\sqmapi.dll" (normalized: "c:\\588bce7c90097ed212\\sqmapi.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x143bc400, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0x143bc400, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0x143bc400, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x23420)) returned 1 [0199.908] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2399d8 | out: hHeap=0x1f0000) returned 1 [0199.908] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2399d8 [0199.908] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\sqmapi.dll" (normalized: "c:\\588bce7c90097ed212\\sqmapi.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x143bc400, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0x143bc400, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0x143bc400, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x23420)) returned 1 [0199.908] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2399d8 | out: hHeap=0x1f0000) returned 1 [0199.908] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2399d8 [0199.908] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2399d8 | out: hHeap=0x1f0000) returned 1 [0199.908] FindNextFileW (in: hFindFile=0x214590, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x3704, dwReserved0=0x0, dwReserved1=0x0, cFileName="Strings.xml", cAlternateFileName="")) returned 1 [0199.908] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260540 [0199.908] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228230 [0199.908] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239668 [0199.908] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228230 | out: hHeap=0x1f0000) returned 1 [0199.908] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2397c8 | out: hHeap=0x1f0000) returned 1 [0199.908] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0199.909] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Strings.xml" (normalized: "c:\\588bce7c90097ed212\\strings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0199.909] GetFileType (hFile=0x1fc) returned 0x1 [0199.909] CloseHandle (hObject=0x1fc) returned 1 [0199.909] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239610 [0199.909] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Strings.xml" (normalized: "c:\\588bce7c90097ed212\\strings.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x3704)) returned 1 [0199.909] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239610 | out: hHeap=0x1f0000) returned 1 [0199.909] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239ae0 [0199.909] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Strings.xml" (normalized: "c:\\588bce7c90097ed212\\strings.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x3704)) returned 1 [0199.910] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239ae0 | out: hHeap=0x1f0000) returned 1 [0199.910] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2396c0 [0199.910] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2396c0 | out: hHeap=0x1f0000) returned 1 [0199.910] FindNextFileW (in: hFindFile=0x214590, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x97f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 1 [0199.910] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0199.910] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0199.910] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239770 [0199.910] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0199.910] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239668 | out: hHeap=0x1f0000) returned 1 [0199.910] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0199.910] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\uiinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0199.911] GetFileType (hFile=0x1fc) returned 0x1 [0199.911] CloseHandle (hObject=0x1fc) returned 1 [0199.911] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2399d8 [0199.911] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\uiinfo.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x97f2)) returned 1 [0199.911] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2399d8 | out: hHeap=0x1f0000) returned 1 [0199.911] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2399d8 [0199.911] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\uiinfo.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x97f2)) returned 1 [0199.911] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2399d8 | out: hHeap=0x1f0000) returned 1 [0199.911] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239ae0 [0199.912] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239ae0 | out: hHeap=0x1f0000) returned 1 [0199.912] FindNextFileW (in: hFindFile=0x214590, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x87910600, ftCreationTime.dwHighDateTime=0x1ca2a27, ftLastAccessTime.dwLowDateTime=0x87910600, ftLastAccessTime.dwHighDateTime=0x1ca2a27, ftLastWriteTime.dwLowDateTime=0x87910600, ftLastWriteTime.dwHighDateTime=0x1ca2a27, nFileSizeHigh=0x0, nFileSizeLow=0x19688, dwReserved0=0x0, dwReserved1=0x0, cFileName="watermark.bmp", cAlternateFileName="WATERM~1.BMP")) returned 1 [0199.912] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0199.912] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0199.912] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239400 [0199.912] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0199.912] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239770 | out: hHeap=0x1f0000) returned 1 [0199.912] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0199.913] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\watermark.bmp" (normalized: "c:\\588bce7c90097ed212\\watermark.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0199.913] GetFileType (hFile=0x1fc) returned 0x1 [0199.913] CloseHandle (hObject=0x1fc) returned 1 [0199.914] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239770 [0199.914] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\watermark.bmp" (normalized: "c:\\588bce7c90097ed212\\watermark.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x87910600, ftCreationTime.dwHighDateTime=0x1ca2a27, ftLastAccessTime.dwLowDateTime=0x87910600, ftLastAccessTime.dwHighDateTime=0x1ca2a27, ftLastWriteTime.dwLowDateTime=0x87910600, ftLastWriteTime.dwHighDateTime=0x1ca2a27, nFileSizeHigh=0x0, nFileSizeLow=0x19688)) returned 1 [0199.914] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239770 | out: hHeap=0x1f0000) returned 1 [0199.914] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239b38 [0199.914] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\watermark.bmp" (normalized: "c:\\588bce7c90097ed212\\watermark.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x87910600, ftCreationTime.dwHighDateTime=0x1ca2a27, ftLastAccessTime.dwLowDateTime=0x87910600, ftLastAccessTime.dwHighDateTime=0x1ca2a27, ftLastWriteTime.dwLowDateTime=0x87910600, ftLastWriteTime.dwHighDateTime=0x1ca2a27, nFileSizeHigh=0x0, nFileSizeLow=0x19688)) returned 1 [0199.914] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239b38 | out: hHeap=0x1f0000) returned 1 [0199.914] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2399d8 [0199.914] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2399d8 | out: hHeap=0x1f0000) returned 1 [0199.914] FindNextFileW (in: hFindFile=0x214590, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2120bc00, ftCreationTime.dwHighDateTime=0x1cac6c9, ftLastAccessTime.dwLowDateTime=0x2120bc00, ftLastAccessTime.dwHighDateTime=0x1cac6c9, ftLastWriteTime.dwLowDateTime=0x2120bc00, ftLastWriteTime.dwHighDateTime=0x1cac6c9, nFileSizeHigh=0x0, nFileSizeLow=0x4f5113, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.0-KB956250-v6001-x64.msu", cAlternateFileName="WINDOW~1.MSU")) returned 1 [0199.914] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239508 [0199.914] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0199.914] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a578 [0199.914] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0199.914] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239400 | out: hHeap=0x1f0000) returned 1 [0199.915] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239508 | out: hHeap=0x1f0000) returned 1 [0199.915] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x64.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x64.msu"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0199.915] GetFileType (hFile=0x1fc) returned 0x1 [0199.915] CloseHandle (hObject=0x1fc) returned 1 [0199.915] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a0b0 [0199.915] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x64.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x64.msu"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2120bc00, ftCreationTime.dwHighDateTime=0x1cac6c9, ftLastAccessTime.dwLowDateTime=0x2120bc00, ftLastAccessTime.dwHighDateTime=0x1cac6c9, ftLastWriteTime.dwLowDateTime=0x2120bc00, ftLastWriteTime.dwHighDateTime=0x1cac6c9, nFileSizeHigh=0x0, nFileSizeLow=0x4f5113)) returned 1 [0199.916] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a0b0 | out: hHeap=0x1f0000) returned 1 [0199.916] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229b60 [0199.916] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x64.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x64.msu"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2120bc00, ftCreationTime.dwHighDateTime=0x1cac6c9, ftLastAccessTime.dwLowDateTime=0x2120bc00, ftLastAccessTime.dwHighDateTime=0x1cac6c9, ftLastWriteTime.dwLowDateTime=0x2120bc00, ftLastWriteTime.dwHighDateTime=0x1cac6c9, nFileSizeHigh=0x0, nFileSizeLow=0x4f5113)) returned 1 [0199.916] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229b60 | out: hHeap=0x1f0000) returned 1 [0199.916] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a2d0 [0199.916] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a2d0 | out: hHeap=0x1f0000) returned 1 [0199.916] FindNextFileW (in: hFindFile=0x214590, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x1bbe7400, ftCreationTime.dwHighDateTime=0x1cac6bf, ftLastAccessTime.dwLowDateTime=0x1bbe7400, ftLastAccessTime.dwHighDateTime=0x1cac6bf, ftLastWriteTime.dwLowDateTime=0x1bbe7400, ftLastWriteTime.dwHighDateTime=0x1cac6bf, nFileSizeHigh=0x0, nFileSizeLow=0x217520, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.0-KB956250-v6001-x86.msu", cAlternateFileName="WINDOW~2.MSU")) returned 1 [0199.916] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2399d8 [0199.916] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228230 [0199.916] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a3e0 [0199.916] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228230 | out: hHeap=0x1f0000) returned 1 [0199.916] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a578 | out: hHeap=0x1f0000) returned 1 [0199.916] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2399d8 | out: hHeap=0x1f0000) returned 1 [0199.917] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x86.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x86.msu"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0199.917] GetFileType (hFile=0x1fc) returned 0x1 [0199.917] CloseHandle (hObject=0x1fc) returned 1 [0199.917] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229cf8 [0199.918] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x86.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x86.msu"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x1bbe7400, ftCreationTime.dwHighDateTime=0x1cac6bf, ftLastAccessTime.dwLowDateTime=0x1bbe7400, ftLastAccessTime.dwHighDateTime=0x1cac6bf, ftLastWriteTime.dwLowDateTime=0x1bbe7400, ftLastWriteTime.dwHighDateTime=0x1cac6bf, nFileSizeHigh=0x0, nFileSizeLow=0x217520)) returned 1 [0199.918] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229cf8 | out: hHeap=0x1f0000) returned 1 [0199.918] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2299c8 [0199.918] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x86.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x86.msu"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x1bbe7400, ftCreationTime.dwHighDateTime=0x1cac6bf, ftLastAccessTime.dwLowDateTime=0x1bbe7400, ftLastAccessTime.dwHighDateTime=0x1cac6bf, ftLastWriteTime.dwLowDateTime=0x1bbe7400, ftLastWriteTime.dwHighDateTime=0x1cac6bf, nFileSizeHigh=0x0, nFileSizeLow=0x217520)) returned 1 [0199.918] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2299c8 | out: hHeap=0x1f0000) returned 1 [0199.918] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a710 [0199.918] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a710 | out: hHeap=0x1f0000) returned 1 [0199.918] FindNextFileW (in: hFindFile=0x214590, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5b8e5700, ftCreationTime.dwHighDateTime=0x1cac6d1, ftLastAccessTime.dwLowDateTime=0x5b8e5700, ftLastAccessTime.dwHighDateTime=0x1cac6d1, ftLastWriteTime.dwLowDateTime=0x5b8e5700, ftLastWriteTime.dwHighDateTime=0x1cac6d1, nFileSizeHigh=0x0, nFileSizeLow=0x4db1ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB958488-v6001-x64.msu", cAlternateFileName="WINDOW~3.MSU")) returned 1 [0199.918] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239b38 [0199.918] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0199.919] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2299c8 [0199.919] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0199.919] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a3e0 | out: hHeap=0x1f0000) returned 1 [0199.919] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239b38 | out: hHeap=0x1f0000) returned 1 [0199.919] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x64.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x64.msu"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0199.920] GetFileType (hFile=0x1fc) returned 0x1 [0200.201] CloseHandle (hObject=0x1fc) returned 1 [0200.202] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a248 [0200.202] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x64.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x64.msu"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5b8e5700, ftCreationTime.dwHighDateTime=0x1cac6d1, ftLastAccessTime.dwLowDateTime=0x5b8e5700, ftLastAccessTime.dwHighDateTime=0x1cac6d1, ftLastWriteTime.dwLowDateTime=0x5b8e5700, ftLastWriteTime.dwHighDateTime=0x1cac6d1, nFileSizeHigh=0x0, nFileSizeLow=0x4db1ce)) returned 1 [0200.202] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a248 | out: hHeap=0x1f0000) returned 1 [0200.202] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a578 [0200.202] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x64.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x64.msu"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5b8e5700, ftCreationTime.dwHighDateTime=0x1cac6d1, ftLastAccessTime.dwLowDateTime=0x5b8e5700, ftLastAccessTime.dwHighDateTime=0x1cac6d1, ftLastWriteTime.dwLowDateTime=0x5b8e5700, ftLastWriteTime.dwHighDateTime=0x1cac6d1, nFileSizeHigh=0x0, nFileSizeLow=0x4db1ce)) returned 1 [0200.202] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a578 | out: hHeap=0x1f0000) returned 1 [0200.202] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a578 [0200.203] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a578 | out: hHeap=0x1f0000) returned 1 [0200.203] FindNextFileW (in: hFindFile=0x214590, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd0ac5d00, ftCreationTime.dwHighDateTime=0x1cac6ce, ftLastAccessTime.dwLowDateTime=0xd0ac5d00, ftLastAccessTime.dwHighDateTime=0x1cac6ce, ftLastWriteTime.dwLowDateTime=0xd0ac5d00, ftLastWriteTime.dwHighDateTime=0x1cac6ce, nFileSizeHigh=0x0, nFileSizeLow=0x20acf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB958488-v6001-x86.msu", cAlternateFileName="WINDOW~4.MSU")) returned 1 [0200.203] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239a30 [0200.203] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282d8 [0200.203] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a1c0 [0200.203] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282d8 | out: hHeap=0x1f0000) returned 1 [0200.203] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2299c8 | out: hHeap=0x1f0000) returned 1 [0200.203] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239a30 | out: hHeap=0x1f0000) returned 1 [0200.203] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x86.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x86.msu"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0200.204] GetFileType (hFile=0x1fc) returned 0x1 [0200.204] CloseHandle (hObject=0x1fc) returned 1 [0200.204] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229c70 [0200.204] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x86.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x86.msu"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd0ac5d00, ftCreationTime.dwHighDateTime=0x1cac6ce, ftLastAccessTime.dwLowDateTime=0xd0ac5d00, ftLastAccessTime.dwHighDateTime=0x1cac6ce, ftLastWriteTime.dwLowDateTime=0xd0ac5d00, ftLastWriteTime.dwHighDateTime=0x1cac6ce, nFileSizeHigh=0x0, nFileSizeLow=0x20acf9)) returned 1 [0200.204] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229c70 | out: hHeap=0x1f0000) returned 1 [0200.204] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229f18 [0200.204] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x86.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x86.msu"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd0ac5d00, ftCreationTime.dwHighDateTime=0x1cac6ce, ftLastAccessTime.dwLowDateTime=0xd0ac5d00, ftLastAccessTime.dwHighDateTime=0x1cac6ce, ftLastWriteTime.dwLowDateTime=0xd0ac5d00, ftLastWriteTime.dwHighDateTime=0x1cac6ce, nFileSizeHigh=0x0, nFileSizeLow=0x20acf9)) returned 1 [0200.205] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229f18 | out: hHeap=0x1f0000) returned 1 [0200.205] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a710 [0200.205] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a710 | out: hHeap=0x1f0000) returned 1 [0200.205] FindNextFileW (in: hFindFile=0x214590, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd0ac5d00, ftCreationTime.dwHighDateTime=0x1cac6ce, ftLastAccessTime.dwLowDateTime=0xd0ac5d00, ftLastAccessTime.dwHighDateTime=0x1cac6ce, ftLastWriteTime.dwLowDateTime=0xd0ac5d00, ftLastWriteTime.dwHighDateTime=0x1cac6ce, nFileSizeHigh=0x0, nFileSizeLow=0x20acf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB958488-v6001-x86.msu", cAlternateFileName="WINDOW~4.MSU")) returned 0 [0200.205] FindClose (in: hFindFile=0x214590 | out: hFindFile=0x214590) returned 1 [0200.205] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234aa0 [0200.205] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0200.205] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d6a0 [0200.205] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2344b8 [0200.206] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1025\\*", lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e9c0 [0200.206] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234230 [0200.206] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2344b8 | out: hHeap=0x1f0000) returned 1 [0200.206] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0200.206] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0200.206] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2344b8 [0200.206] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234230 | out: hHeap=0x1f0000) returned 1 [0200.206] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0200.206] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0200.206] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x1d8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0200.207] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0200.207] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233fa8 [0200.207] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x214f70 [0200.207] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233fa8 | out: hHeap=0x1f0000) returned 1 [0200.207] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2344b8 | out: hHeap=0x1f0000) returned 1 [0200.207] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0200.207] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1025\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1025\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0200.207] GetFileType (hFile=0x1fc) returned 0x1 [0200.208] CloseHandle (hObject=0x1fc) returned 1 [0200.208] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2394b0 [0200.208] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1025\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1025\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1cc | out: lpFileInformation=0x1fdf1cc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x1d8f)) returned 1 [0200.208] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2394b0 | out: hHeap=0x1f0000) returned 1 [0200.208] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239458 [0200.208] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1025\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1025\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1d4 | out: lpFileInformation=0x1fdf1d4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x1d8f)) returned 1 [0200.208] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239458 | out: hHeap=0x1f0000) returned 1 [0200.208] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239a30 [0200.208] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239a30 | out: hHeap=0x1f0000) returned 1 [0200.208] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x121e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0200.208] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282d8 [0200.208] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2344b8 [0200.209] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214e38 [0200.209] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2344b8 | out: hHeap=0x1f0000) returned 1 [0200.209] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f70 | out: hHeap=0x1f0000) returned 1 [0200.209] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282d8 | out: hHeap=0x1f0000) returned 1 [0200.209] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1025\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1025\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0200.209] GetFileType (hFile=0x1fc) returned 0x1 [0200.209] CloseHandle (hObject=0x1fc) returned 1 [0200.209] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214ea0 [0200.210] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1025\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1025\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1cc | out: lpFileInformation=0x1fdf1cc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x121e6)) returned 1 [0200.210] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214ea0 | out: hHeap=0x1f0000) returned 1 [0200.210] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214ea0 [0200.210] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1025\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1025\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1d4 | out: lpFileInformation=0x1fdf1d4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x121e6)) returned 1 [0200.210] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214ea0 | out: hHeap=0x1f0000) returned 1 [0200.211] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214958 [0200.211] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214958 | out: hHeap=0x1f0000) returned 1 [0200.211] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0200.211] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228310 [0200.211] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2344b8 [0200.211] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2149c0 [0200.211] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2344b8 | out: hHeap=0x1f0000) returned 1 [0200.211] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214e38 | out: hHeap=0x1f0000) returned 1 [0200.211] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228310 | out: hHeap=0x1f0000) returned 1 [0200.211] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1025\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1025\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0200.212] GetFileType (hFile=0x1fc) returned 0x1 [0200.212] CloseHandle (hObject=0x1fc) returned 1 [0200.212] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214af8 [0200.212] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1025\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1025\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1cc | out: lpFileInformation=0x1fdf1cc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358)) returned 1 [0200.212] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214af8 | out: hHeap=0x1f0000) returned 1 [0200.212] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214e38 [0200.212] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1025\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1025\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1d4 | out: lpFileInformation=0x1fdf1d4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358)) returned 1 [0200.212] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214e38 | out: hHeap=0x1f0000) returned 1 [0200.212] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214dd0 [0200.212] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214dd0 | out: hHeap=0x1f0000) returned 1 [0200.213] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0200.213] FindClose (in: hFindFile=0x24e9c0 | out: hFindFile=0x24e9c0) returned 1 [0200.213] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2149c0 | out: hHeap=0x1f0000) returned 1 [0200.213] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d6a0 | out: hHeap=0x1f0000) returned 1 [0200.213] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0200.213] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234aa0 | out: hHeap=0x1f0000) returned 1 [0200.213] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234aa0 [0200.213] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0200.213] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d6a0 [0200.213] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2344b8 [0200.213] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1028\\*", lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ebc0 [0200.213] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2343e0 [0200.213] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2344b8 | out: hHeap=0x1f0000) returned 1 [0200.214] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0200.214] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0200.214] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2344b8 [0200.214] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2343e0 | out: hHeap=0x1f0000) returned 1 [0200.214] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0200.214] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0200.214] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x18a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0200.214] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0200.214] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233db0 [0200.214] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x214fd8 [0200.214] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233db0 | out: hHeap=0x1f0000) returned 1 [0200.214] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2344b8 | out: hHeap=0x1f0000) returned 1 [0200.214] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0200.214] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1028\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1028\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0200.215] GetFileType (hFile=0x1fc) returned 0x1 [0200.215] CloseHandle (hObject=0x1fc) returned 1 [0200.215] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239770 [0200.215] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1028\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1028\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1cc | out: lpFileInformation=0x1fdf1cc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x18a5)) returned 1 [0200.215] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239770 | out: hHeap=0x1f0000) returned 1 [0200.215] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2395b8 [0200.215] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1028\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1028\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1d4 | out: lpFileInformation=0x1fdf1d4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x18a5)) returned 1 [0200.216] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2395b8 | out: hHeap=0x1f0000) returned 1 [0200.216] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239a30 [0200.216] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239a30 | out: hHeap=0x1f0000) returned 1 [0200.216] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed90, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0200.216] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228310 [0200.216] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2344b8 [0200.216] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214e38 [0200.216] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2344b8 | out: hHeap=0x1f0000) returned 1 [0200.216] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214fd8 | out: hHeap=0x1f0000) returned 1 [0200.217] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228310 | out: hHeap=0x1f0000) returned 1 [0200.218] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1028\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1028\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0200.218] GetFileType (hFile=0x1fc) returned 0x1 [0200.218] CloseHandle (hObject=0x1fc) returned 1 [0200.219] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a90 [0200.219] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1028\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1028\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1cc | out: lpFileInformation=0x1fdf1cc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed90)) returned 1 [0200.219] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a90 | out: hHeap=0x1f0000) returned 1 [0200.219] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a90 [0200.219] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1028\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1028\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1d4 | out: lpFileInformation=0x1fdf1d4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed90)) returned 1 [0200.219] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a90 | out: hHeap=0x1f0000) returned 1 [0200.219] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2149c0 [0200.219] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2149c0 | out: hHeap=0x1f0000) returned 1 [0200.220] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0200.220] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228310 [0200.220] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2344b8 [0200.220] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214bc8 [0200.220] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2344b8 | out: hHeap=0x1f0000) returned 1 [0200.220] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214e38 | out: hHeap=0x1f0000) returned 1 [0200.220] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228310 | out: hHeap=0x1f0000) returned 1 [0200.221] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1028\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1028\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0200.221] GetFileType (hFile=0x1fc) returned 0x1 [0200.221] CloseHandle (hObject=0x1fc) returned 1 [0200.221] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214ea0 [0200.221] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1028\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1028\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1cc | out: lpFileInformation=0x1fdf1cc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758)) returned 1 [0200.221] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214ea0 | out: hHeap=0x1f0000) returned 1 [0200.221] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a90 [0200.222] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1028\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1028\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1d4 | out: lpFileInformation=0x1fdf1d4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758)) returned 1 [0200.222] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a90 | out: hHeap=0x1f0000) returned 1 [0200.222] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2149c0 [0200.222] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2149c0 | out: hHeap=0x1f0000) returned 1 [0200.222] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0200.222] FindClose (in: hFindFile=0x24ebc0 | out: hFindFile=0x24ebc0) returned 1 [0200.222] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214bc8 | out: hHeap=0x1f0000) returned 1 [0200.222] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d6a0 | out: hHeap=0x1f0000) returned 1 [0200.222] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0200.222] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234aa0 | out: hHeap=0x1f0000) returned 1 [0200.223] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234aa0 [0200.223] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0200.223] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d6a0 [0200.223] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2344b8 [0200.223] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1029\\*", lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e980 [0200.223] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233db0 [0200.223] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2344b8 | out: hHeap=0x1f0000) returned 1 [0200.223] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0200.223] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0200.223] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2344b8 [0200.224] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233db0 | out: hHeap=0x1f0000) returned 1 [0200.224] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0200.224] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0200.224] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0200.224] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0200.224] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233db0 [0200.224] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x214a28 [0200.224] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233db0 | out: hHeap=0x1f0000) returned 1 [0200.224] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2344b8 | out: hHeap=0x1f0000) returned 1 [0200.224] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0200.225] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1029\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1029\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0200.225] GetFileType (hFile=0x1fc) returned 0x1 [0200.225] CloseHandle (hObject=0x1fc) returned 1 [0200.225] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239508 [0200.226] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1029\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1029\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1cc | out: lpFileInformation=0x1fdf1cc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe8e)) returned 1 [0200.226] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239508 | out: hHeap=0x1f0000) returned 1 [0200.226] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239a30 [0200.226] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1029\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1029\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1d4 | out: lpFileInformation=0x1fdf1d4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe8e)) returned 1 [0200.226] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239a30 | out: hHeap=0x1f0000) returned 1 [0200.226] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239ae0 [0200.226] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239ae0 | out: hHeap=0x1f0000) returned 1 [0200.226] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13c4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0200.226] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228310 [0200.226] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2344b8 [0200.227] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214dd0 [0200.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2344b8 | out: hHeap=0x1f0000) returned 1 [0200.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a28 | out: hHeap=0x1f0000) returned 1 [0200.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228310 | out: hHeap=0x1f0000) returned 1 [0200.227] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1029\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1029\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0200.227] GetFileType (hFile=0x1fc) returned 0x1 [0200.228] CloseHandle (hObject=0x1fc) returned 1 [0200.228] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214fd8 [0200.228] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1029\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1029\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1cc | out: lpFileInformation=0x1fdf1cc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13c4a)) returned 1 [0200.228] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214fd8 | out: hHeap=0x1f0000) returned 1 [0200.228] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214e38 [0200.229] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1029\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1029\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1d4 | out: lpFileInformation=0x1fdf1d4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13c4a)) returned 1 [0200.229] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214e38 | out: hHeap=0x1f0000) returned 1 [0200.229] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214fd8 [0200.229] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214fd8 | out: hHeap=0x1f0000) returned 1 [0200.229] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0200.229] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228310 [0200.229] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2344b8 [0200.229] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a90 [0200.229] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2344b8 | out: hHeap=0x1f0000) returned 1 [0200.229] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214dd0 | out: hHeap=0x1f0000) returned 1 [0200.229] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228310 | out: hHeap=0x1f0000) returned 1 [0200.230] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1029\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1029\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0200.230] GetFileType (hFile=0x1fc) returned 0x1 [0200.230] CloseHandle (hObject=0x1fc) returned 1 [0200.231] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a28 [0200.231] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1029\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1029\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1cc | out: lpFileInformation=0x1fdf1cc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758)) returned 1 [0200.231] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a28 | out: hHeap=0x1f0000) returned 1 [0200.231] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c98 [0200.231] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1029\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1029\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1d4 | out: lpFileInformation=0x1fdf1d4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758)) returned 1 [0200.231] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c98 | out: hHeap=0x1f0000) returned 1 [0200.231] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214958 [0200.232] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214958 | out: hHeap=0x1f0000) returned 1 [0200.232] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0200.232] FindClose (in: hFindFile=0x24e980 | out: hFindFile=0x24e980) returned 1 [0200.232] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a90 | out: hHeap=0x1f0000) returned 1 [0200.232] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d6a0 | out: hHeap=0x1f0000) returned 1 [0200.232] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0200.232] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234aa0 | out: hHeap=0x1f0000) returned 1 [0200.233] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234aa0 [0200.233] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260680 [0200.233] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d6a0 [0200.233] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2344b8 [0200.233] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1030\\*", lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e900 [0200.233] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233fa8 [0200.233] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2344b8 | out: hHeap=0x1f0000) returned 1 [0200.233] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0200.233] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0200.233] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2344b8 [0200.233] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233fa8 | out: hHeap=0x1f0000) returned 1 [0200.233] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0200.234] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0200.234] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xcf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0200.234] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0200.234] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234230 [0200.234] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x214f70 [0200.234] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234230 | out: hHeap=0x1f0000) returned 1 [0200.234] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2344b8 | out: hHeap=0x1f0000) returned 1 [0200.234] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0200.234] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1030\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1030\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0200.234] GetFileType (hFile=0x1fc) returned 0x1 [0200.235] CloseHandle (hObject=0x1fc) returned 1 [0200.235] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2394b0 [0200.235] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1030\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1030\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1cc | out: lpFileInformation=0x1fdf1cc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xcf2)) returned 1 [0200.235] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2394b0 | out: hHeap=0x1f0000) returned 1 [0200.235] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2397c8 [0200.235] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1030\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1030\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1d4 | out: lpFileInformation=0x1fdf1d4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xcf2)) returned 1 [0200.236] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2397c8 | out: hHeap=0x1f0000) returned 1 [0200.236] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239718 [0200.236] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239718 | out: hHeap=0x1f0000) returned 1 [0200.236] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12fb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0200.236] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228310 [0200.236] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2344b8 [0200.236] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c30 [0200.236] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2344b8 | out: hHeap=0x1f0000) returned 1 [0200.236] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f70 | out: hHeap=0x1f0000) returned 1 [0200.236] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228310 | out: hHeap=0x1f0000) returned 1 [0200.237] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1030\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1030\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0200.237] GetFileType (hFile=0x1fc) returned 0x1 [0200.237] CloseHandle (hObject=0x1fc) returned 1 [0200.237] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2149c0 [0200.237] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1030\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1030\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1cc | out: lpFileInformation=0x1fdf1cc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12fb4)) returned 1 [0200.237] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2149c0 | out: hHeap=0x1f0000) returned 1 [0200.237] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214dd0 [0200.238] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1030\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1030\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1d4 | out: lpFileInformation=0x1fdf1d4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12fb4)) returned 1 [0200.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214dd0 | out: hHeap=0x1f0000) returned 1 [0200.238] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214fd8 [0200.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214fd8 | out: hHeap=0x1f0000) returned 1 [0200.238] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0200.238] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228310 [0200.238] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2344b8 [0200.238] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214ea0 [0200.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2344b8 | out: hHeap=0x1f0000) returned 1 [0200.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c30 | out: hHeap=0x1f0000) returned 1 [0200.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228310 | out: hHeap=0x1f0000) returned 1 [0200.238] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1030\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1030\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0200.239] GetFileType (hFile=0x1fc) returned 0x1 [0200.239] CloseHandle (hObject=0x1fc) returned 1 [0200.239] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2150a8 [0200.239] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1030\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1030\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1cc | out: lpFileInformation=0x1fdf1cc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758)) returned 1 [0200.239] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2150a8 | out: hHeap=0x1f0000) returned 1 [0200.239] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214958 [0200.239] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1030\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1030\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1d4 | out: lpFileInformation=0x1fdf1d4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758)) returned 1 [0200.239] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214958 | out: hHeap=0x1f0000) returned 1 [0200.239] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a28 [0200.240] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a28 | out: hHeap=0x1f0000) returned 1 [0200.240] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0200.240] FindClose (in: hFindFile=0x24e900 | out: hFindFile=0x24e900) returned 1 [0200.240] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214ea0 | out: hHeap=0x1f0000) returned 1 [0200.240] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d6a0 | out: hHeap=0x1f0000) returned 1 [0200.240] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260680 | out: hHeap=0x1f0000) returned 1 [0200.240] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234aa0 | out: hHeap=0x1f0000) returned 1 [0200.240] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234aa0 [0200.240] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0200.240] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d6a0 [0200.240] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2344b8 [0200.240] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1031\\*", lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e940 [0200.240] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233db0 [0200.240] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2344b8 | out: hHeap=0x1f0000) returned 1 [0200.240] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0200.241] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0200.241] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2344b8 [0200.241] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233db0 | out: hHeap=0x1f0000) returned 1 [0200.241] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0200.241] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0200.241] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xd5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0200.241] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0200.241] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233db0 [0200.241] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x214dd0 [0200.241] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233db0 | out: hHeap=0x1f0000) returned 1 [0200.241] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2344b8 | out: hHeap=0x1f0000) returned 1 [0200.241] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0200.242] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1031\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1031\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0200.242] GetFileType (hFile=0x1fc) returned 0x1 [0200.242] CloseHandle (hObject=0x1fc) returned 1 [0200.243] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239a30 [0200.243] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1031\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1031\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1cc | out: lpFileInformation=0x1fdf1cc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xd5b)) returned 1 [0200.243] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239a30 | out: hHeap=0x1f0000) returned 1 [0200.243] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239a30 [0200.243] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1031\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1031\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1d4 | out: lpFileInformation=0x1fdf1d4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xd5b)) returned 1 [0200.243] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239a30 | out: hHeap=0x1f0000) returned 1 [0200.243] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239718 [0200.243] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239718 | out: hHeap=0x1f0000) returned 1 [0200.243] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x141aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0200.243] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282d8 [0200.244] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2344b8 [0200.244] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a28 [0200.244] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2344b8 | out: hHeap=0x1f0000) returned 1 [0200.244] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214dd0 | out: hHeap=0x1f0000) returned 1 [0200.244] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282d8 | out: hHeap=0x1f0000) returned 1 [0200.244] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1031\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1031\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0200.244] GetFileType (hFile=0x1fc) returned 0x1 [0200.245] CloseHandle (hObject=0x1fc) returned 1 [0200.245] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c98 [0200.245] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1031\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1031\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1cc | out: lpFileInformation=0x1fdf1cc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x141aa)) returned 1 [0200.246] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c98 | out: hHeap=0x1f0000) returned 1 [0200.246] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214bc8 [0200.246] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1031\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1031\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1d4 | out: lpFileInformation=0x1fdf1d4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x141aa)) returned 1 [0200.246] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214bc8 | out: hHeap=0x1f0000) returned 1 [0200.246] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c98 [0200.246] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c98 | out: hHeap=0x1f0000) returned 1 [0200.246] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0200.246] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282d8 [0200.246] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2344b8 [0200.246] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214af8 [0200.246] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2344b8 | out: hHeap=0x1f0000) returned 1 [0200.246] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a28 | out: hHeap=0x1f0000) returned 1 [0200.247] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282d8 | out: hHeap=0x1f0000) returned 1 [0200.247] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1031\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1031\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0200.247] GetFileType (hFile=0x1fc) returned 0x1 [0200.248] CloseHandle (hObject=0x1fc) returned 1 [0200.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214f70 [0200.536] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1031\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1031\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1cc | out: lpFileInformation=0x1fdf1cc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958)) returned 1 [0200.536] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f70 | out: hHeap=0x1f0000) returned 1 [0200.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214e38 [0200.536] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1031\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1031\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1d4 | out: lpFileInformation=0x1fdf1d4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958)) returned 1 [0200.536] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214e38 | out: hHeap=0x1f0000) returned 1 [0200.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214bc8 [0200.536] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214bc8 | out: hHeap=0x1f0000) returned 1 [0200.537] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0200.537] FindClose (in: hFindFile=0x24e940 | out: hFindFile=0x24e940) returned 1 [0200.537] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214af8 | out: hHeap=0x1f0000) returned 1 [0200.537] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d6a0 | out: hHeap=0x1f0000) returned 1 [0200.537] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0200.537] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234aa0 | out: hHeap=0x1f0000) returned 1 [0200.537] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229178 [0200.537] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0200.537] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x236e20 [0200.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228e60 [0200.538] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1032\\*", lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e600 [0200.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229130 [0200.538] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228e60 | out: hHeap=0x1f0000) returned 1 [0200.538] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0200.538] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0200.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228e60 [0200.538] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229130 | out: hHeap=0x1f0000) returned 1 [0200.539] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0200.539] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0200.539] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x22ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0200.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238348 [0200.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228ea8 [0200.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x214ea0 [0200.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228ea8 | out: hHeap=0x1f0000) returned 1 [0200.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228e60 | out: hHeap=0x1f0000) returned 1 [0200.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238348 | out: hHeap=0x1f0000) returned 1 [0200.540] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1032\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1032\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0200.540] GetFileType (hFile=0x218) returned 0x1 [0200.541] CloseHandle (hObject=0x218) returned 1 [0200.541] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2396c0 [0200.541] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1032\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1032\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1cc | out: lpFileInformation=0x1fdf1cc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x22ac)) returned 1 [0200.541] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2396c0 | out: hHeap=0x1f0000) returned 1 [0200.541] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239668 [0200.541] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1032\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1032\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1d4 | out: lpFileInformation=0x1fdf1d4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x22ac)) returned 1 [0200.542] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239668 | out: hHeap=0x1f0000) returned 1 [0200.542] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239b38 [0200.542] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239b38 | out: hHeap=0x1f0000) returned 1 [0200.542] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1510c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0200.542] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0200.542] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229130 [0200.542] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a90 [0200.542] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229130 | out: hHeap=0x1f0000) returned 1 [0200.543] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214ea0 | out: hHeap=0x1f0000) returned 1 [0200.543] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0200.543] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1032\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1032\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0200.544] GetFileType (hFile=0x218) returned 0x1 [0200.544] CloseHandle (hObject=0x218) returned 1 [0200.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c98 [0200.544] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1032\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1032\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1cc | out: lpFileInformation=0x1fdf1cc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1510c)) returned 1 [0200.545] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c98 | out: hHeap=0x1f0000) returned 1 [0200.545] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214dd0 [0200.545] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1032\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1032\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1d4 | out: lpFileInformation=0x1fdf1d4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1510c)) returned 1 [0200.546] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214dd0 | out: hHeap=0x1f0000) returned 1 [0200.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214dd0 [0200.546] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214dd0 | out: hHeap=0x1f0000) returned 1 [0200.546] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0200.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228230 [0200.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228e60 [0200.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c98 [0200.546] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228e60 | out: hHeap=0x1f0000) returned 1 [0200.546] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a90 | out: hHeap=0x1f0000) returned 1 [0200.546] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228230 | out: hHeap=0x1f0000) returned 1 [0200.547] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1032\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1032\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0200.547] GetFileType (hFile=0x218) returned 0x1 [0200.547] CloseHandle (hObject=0x218) returned 1 [0200.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214958 [0200.548] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1032\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1032\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1cc | out: lpFileInformation=0x1fdf1cc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58)) returned 1 [0200.548] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214958 | out: hHeap=0x1f0000) returned 1 [0200.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214dd0 [0200.548] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1032\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1032\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1d4 | out: lpFileInformation=0x1fdf1d4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58)) returned 1 [0200.548] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214dd0 | out: hHeap=0x1f0000) returned 1 [0200.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x215040 [0200.548] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215040 | out: hHeap=0x1f0000) returned 1 [0200.548] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0200.548] FindClose (in: hFindFile=0x24e600 | out: hFindFile=0x24e600) returned 1 [0200.549] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c98 | out: hHeap=0x1f0000) returned 1 [0200.549] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236e20 | out: hHeap=0x1f0000) returned 1 [0200.549] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0200.549] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229178 | out: hHeap=0x1f0000) returned 1 [0200.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229058 [0200.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0200.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x236e20 [0200.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229130 [0200.549] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1033\\*", lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e640 [0200.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228e60 [0200.549] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229130 | out: hHeap=0x1f0000) returned 1 [0200.549] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0200.550] FindNextFileW (in: hFindFile=0x24e640, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0200.550] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229130 [0200.550] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228e60 | out: hHeap=0x1f0000) returned 1 [0200.550] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0200.550] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0200.550] FindNextFileW (in: hFindFile=0x24e640, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd723cc00, ftCreationTime.dwHighDateTime=0x1cabb47, ftLastAccessTime.dwLowDateTime=0xd723cc00, ftLastAccessTime.dwHighDateTime=0x1cabb47, ftLastWriteTime.dwLowDateTime=0xd723cc00, ftLastWriteTime.dwHighDateTime=0x1cabb47, nFileSizeHigh=0x0, nFileSizeLow=0xc74, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0200.550] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380f0 [0200.550] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228e60 [0200.550] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x214f70 [0200.551] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228e60 | out: hHeap=0x1f0000) returned 1 [0200.551] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229130 | out: hHeap=0x1f0000) returned 1 [0200.551] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380f0 | out: hHeap=0x1f0000) returned 1 [0200.551] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1033\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1033\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0200.551] GetFileType (hFile=0x218) returned 0x1 [0200.552] CloseHandle (hObject=0x218) returned 1 [0200.552] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239a30 [0200.552] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1033\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1033\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1cc | out: lpFileInformation=0x1fdf1cc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd723cc00, ftCreationTime.dwHighDateTime=0x1cabb47, ftLastAccessTime.dwLowDateTime=0xd723cc00, ftLastAccessTime.dwHighDateTime=0x1cabb47, ftLastWriteTime.dwLowDateTime=0xd723cc00, ftLastWriteTime.dwHighDateTime=0x1cabb47, nFileSizeHigh=0x0, nFileSizeLow=0xc74)) returned 1 [0200.552] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239a30 | out: hHeap=0x1f0000) returned 1 [0200.552] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2396c0 [0200.553] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1033\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1033\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1d4 | out: lpFileInformation=0x1fdf1d4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd723cc00, ftCreationTime.dwHighDateTime=0x1cabb47, ftLastAccessTime.dwLowDateTime=0xd723cc00, ftLastAccessTime.dwHighDateTime=0x1cabb47, ftLastWriteTime.dwLowDateTime=0xd723cc00, ftLastWriteTime.dwHighDateTime=0x1cabb47, nFileSizeHigh=0x0, nFileSizeLow=0xc74)) returned 1 [0200.553] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2396c0 | out: hHeap=0x1f0000) returned 1 [0200.553] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239508 [0200.553] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239508 | out: hHeap=0x1f0000) returned 1 [0200.553] FindNextFileW (in: hFindFile=0x24e640, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x47ad1a00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x47ad1a00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x47ad1a00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12db0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0200.553] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228150 [0200.553] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228e60 [0200.553] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2150a8 [0200.553] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228e60 | out: hHeap=0x1f0000) returned 1 [0200.553] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f70 | out: hHeap=0x1f0000) returned 1 [0200.553] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228150 | out: hHeap=0x1f0000) returned 1 [0200.554] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1033\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1033\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0200.554] GetFileType (hFile=0x218) returned 0x1 [0200.555] CloseHandle (hObject=0x218) returned 1 [0200.555] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a28 [0200.555] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1033\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1033\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1cc | out: lpFileInformation=0x1fdf1cc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x47ad1a00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x47ad1a00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x47ad1a00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12db0)) returned 1 [0200.555] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a28 | out: hHeap=0x1f0000) returned 1 [0200.555] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214e38 [0200.555] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1033\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1033\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1d4 | out: lpFileInformation=0x1fdf1d4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x47ad1a00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x47ad1a00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x47ad1a00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12db0)) returned 1 [0200.555] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214e38 | out: hHeap=0x1f0000) returned 1 [0200.556] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214fd8 [0200.556] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214fd8 | out: hHeap=0x1f0000) returned 1 [0200.556] FindNextFileW (in: hFindFile=0x24e640, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0200.556] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228150 [0200.556] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228e60 [0200.556] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214f70 [0200.556] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228e60 | out: hHeap=0x1f0000) returned 1 [0200.556] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2150a8 | out: hHeap=0x1f0000) returned 1 [0200.556] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228150 | out: hHeap=0x1f0000) returned 1 [0200.557] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1033\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1033\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0200.557] GetFileType (hFile=0x218) returned 0x1 [0200.557] CloseHandle (hObject=0x218) returned 1 [0200.558] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214e38 [0200.558] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1033\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1033\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1cc | out: lpFileInformation=0x1fdf1cc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358)) returned 1 [0200.558] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214e38 | out: hHeap=0x1f0000) returned 1 [0200.558] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214bc8 [0200.558] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1033\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1033\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1d4 | out: lpFileInformation=0x1fdf1d4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358)) returned 1 [0200.558] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214bc8 | out: hHeap=0x1f0000) returned 1 [0200.558] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c98 [0200.558] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c98 | out: hHeap=0x1f0000) returned 1 [0200.558] FindNextFileW (in: hFindFile=0x24e640, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0200.558] FindClose (in: hFindFile=0x24e640 | out: hFindFile=0x24e640) returned 1 [0200.559] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f70 | out: hHeap=0x1f0000) returned 1 [0200.559] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236e20 | out: hHeap=0x1f0000) returned 1 [0200.559] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0200.559] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229058 | out: hHeap=0x1f0000) returned 1 [0200.559] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228e60 [0200.559] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0200.559] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x236e20 [0200.559] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228ea8 [0200.559] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1035\\*", lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24eb40 [0200.559] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229058 [0200.559] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228ea8 | out: hHeap=0x1f0000) returned 1 [0200.560] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0200.560] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0200.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228ea8 [0200.560] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229058 | out: hHeap=0x1f0000) returned 1 [0200.560] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0200.560] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0200.560] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe76, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0200.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0200.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229058 [0200.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x214f70 [0200.560] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229058 | out: hHeap=0x1f0000) returned 1 [0200.561] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228ea8 | out: hHeap=0x1f0000) returned 1 [0200.561] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0200.561] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1035\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1035\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0200.562] GetFileType (hFile=0x218) returned 0x1 [0200.562] CloseHandle (hObject=0x218) returned 1 [0200.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239ae0 [0200.562] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1035\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1035\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1cc | out: lpFileInformation=0x1fdf1cc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe76)) returned 1 [0200.562] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239ae0 | out: hHeap=0x1f0000) returned 1 [0200.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239508 [0200.562] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1035\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1035\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1d4 | out: lpFileInformation=0x1fdf1d4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe76)) returned 1 [0200.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239508 | out: hHeap=0x1f0000) returned 1 [0200.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2394b0 [0200.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2394b0 | out: hHeap=0x1f0000) returned 1 [0200.563] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12cde, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0200.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0200.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228ea8 [0200.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a28 [0200.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228ea8 | out: hHeap=0x1f0000) returned 1 [0200.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f70 | out: hHeap=0x1f0000) returned 1 [0200.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0200.563] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1035\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1035\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0200.564] GetFileType (hFile=0x218) returned 0x1 [0200.564] CloseHandle (hObject=0x218) returned 1 [0200.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214e38 [0200.564] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1035\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1035\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1cc | out: lpFileInformation=0x1fdf1cc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12cde)) returned 1 [0200.564] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214e38 | out: hHeap=0x1f0000) returned 1 [0200.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214ea0 [0200.565] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1035\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1035\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1d4 | out: lpFileInformation=0x1fdf1d4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12cde)) returned 1 [0200.565] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214ea0 | out: hHeap=0x1f0000) returned 1 [0200.565] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214e38 [0200.565] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214e38 | out: hHeap=0x1f0000) returned 1 [0200.565] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0200.565] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228150 [0200.565] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228ea8 [0200.565] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214dd0 [0200.565] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228ea8 | out: hHeap=0x1f0000) returned 1 [0200.566] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a28 | out: hHeap=0x1f0000) returned 1 [0200.566] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228150 | out: hHeap=0x1f0000) returned 1 [0200.566] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1035\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1035\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0200.566] GetFileType (hFile=0x218) returned 0x1 [0200.567] CloseHandle (hObject=0x218) returned 1 [0200.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2149c0 [0200.567] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1035\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1035\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1cc | out: lpFileInformation=0x1fdf1cc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758)) returned 1 [0200.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2149c0 | out: hHeap=0x1f0000) returned 1 [0200.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214af8 [0200.567] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1035\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1035\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1d4 | out: lpFileInformation=0x1fdf1d4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758)) returned 1 [0200.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214af8 | out: hHeap=0x1f0000) returned 1 [0200.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214e38 [0200.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214e38 | out: hHeap=0x1f0000) returned 1 [0200.568] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0200.568] FindClose (in: hFindFile=0x24eb40 | out: hFindFile=0x24eb40) returned 1 [0200.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214dd0 | out: hHeap=0x1f0000) returned 1 [0200.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236e20 | out: hHeap=0x1f0000) returned 1 [0200.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0200.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228e60 | out: hHeap=0x1f0000) returned 1 [0200.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229178 [0200.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0200.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x235fc8 [0200.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228e60 [0200.568] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1036\\*", lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ec80 [0200.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229058 [0200.569] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228e60 | out: hHeap=0x1f0000) returned 1 [0200.569] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0200.569] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0200.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229130 [0200.569] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229058 | out: hHeap=0x1f0000) returned 1 [0200.569] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0200.569] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0200.569] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xdc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0200.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0200.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228e60 [0200.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x214f70 [0200.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228e60 | out: hHeap=0x1f0000) returned 1 [0200.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229130 | out: hHeap=0x1f0000) returned 1 [0200.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0200.570] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1036\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1036\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0200.571] GetFileType (hFile=0x218) returned 0x1 [0200.571] CloseHandle (hObject=0x218) returned 1 [0200.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239668 [0200.571] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1036\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1036\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1cc | out: lpFileInformation=0x1fdf1cc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xdc6)) returned 1 [0200.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239668 | out: hHeap=0x1f0000) returned 1 [0200.572] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239b38 [0200.572] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1036\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1036\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1d4 | out: lpFileInformation=0x1fdf1d4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xdc6)) returned 1 [0200.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239b38 | out: hHeap=0x1f0000) returned 1 [0200.572] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239610 [0200.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239610 | out: hHeap=0x1f0000) returned 1 [0200.572] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x14412, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0200.572] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228150 [0200.572] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228e60 [0200.572] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c30 [0200.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228e60 | out: hHeap=0x1f0000) returned 1 [0200.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f70 | out: hHeap=0x1f0000) returned 1 [0200.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228150 | out: hHeap=0x1f0000) returned 1 [0200.573] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1036\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1036\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0200.573] GetFileType (hFile=0x218) returned 0x1 [0200.574] CloseHandle (hObject=0x218) returned 1 [0200.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214e38 [0200.574] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1036\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1036\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1cc | out: lpFileInformation=0x1fdf1cc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x14412)) returned 1 [0200.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214e38 | out: hHeap=0x1f0000) returned 1 [0200.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a90 [0200.575] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1036\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1036\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1d4 | out: lpFileInformation=0x1fdf1d4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x14412)) returned 1 [0200.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a90 | out: hHeap=0x1f0000) returned 1 [0200.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a90 [0200.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a90 | out: hHeap=0x1f0000) returned 1 [0200.575] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0200.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0200.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228ea8 [0200.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214dd0 [0200.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228ea8 | out: hHeap=0x1f0000) returned 1 [0200.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c30 | out: hHeap=0x1f0000) returned 1 [0200.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0200.936] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1036\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1036\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0200.936] GetFileType (hFile=0x1e0) returned 0x1 [0200.937] CloseHandle (hObject=0x1e0) returned 1 [0200.937] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214b60 [0200.937] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1036\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1036\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1cc | out: lpFileInformation=0x1fdf1cc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958)) returned 1 [0200.938] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214b60 | out: hHeap=0x1f0000) returned 1 [0200.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214ea0 [0200.938] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1036\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1036\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1d4 | out: lpFileInformation=0x1fdf1d4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958)) returned 1 [0200.938] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214ea0 | out: hHeap=0x1f0000) returned 1 [0200.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a90 [0200.938] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a90 | out: hHeap=0x1f0000) returned 1 [0200.939] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0200.939] FindClose (in: hFindFile=0x24ec80 | out: hFindFile=0x24ec80) returned 1 [0200.939] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214dd0 | out: hHeap=0x1f0000) returned 1 [0200.939] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235fc8 | out: hHeap=0x1f0000) returned 1 [0200.939] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0200.939] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229178 | out: hHeap=0x1f0000) returned 1 [0200.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222178 [0200.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0200.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22ee88 [0200.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2221c0 [0200.940] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1037\\*", lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e640 [0200.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221ef0 [0200.940] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2221c0 | out: hHeap=0x1f0000) returned 1 [0200.940] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0200.940] FindNextFileW (in: hFindFile=0x24e640, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0200.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2221c0 [0200.940] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221ef0 | out: hHeap=0x1f0000) returned 1 [0200.941] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0200.941] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0200.941] FindNextFileW (in: hFindFile=0x24e640, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x1ac3, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0200.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0200.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221ef0 [0200.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x215040 [0200.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221ef0 | out: hHeap=0x1f0000) returned 1 [0200.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2221c0 | out: hHeap=0x1f0000) returned 1 [0200.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0200.942] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1037\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1037\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0200.942] GetFileType (hFile=0x1e0) returned 0x1 [0200.943] CloseHandle (hObject=0x1e0) returned 1 [0200.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2394b0 [0200.943] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1037\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1037\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1cc | out: lpFileInformation=0x1fdf1cc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x1ac3)) returned 1 [0200.944] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2394b0 | out: hHeap=0x1f0000) returned 1 [0200.944] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239508 [0200.944] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1037\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1037\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1d4 | out: lpFileInformation=0x1fdf1d4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x1ac3)) returned 1 [0200.944] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239508 | out: hHeap=0x1f0000) returned 1 [0200.944] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239928 [0200.944] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239928 | out: hHeap=0x1f0000) returned 1 [0200.944] FindNextFileW (in: hFindFile=0x24e640, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1198c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0200.944] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282a0 [0200.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221ef0 [0200.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d68 [0200.945] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221ef0 | out: hHeap=0x1f0000) returned 1 [0200.945] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215040 | out: hHeap=0x1f0000) returned 1 [0200.945] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0200.946] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1037\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1037\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0200.946] GetFileType (hFile=0x1e0) returned 0x1 [0200.946] CloseHandle (hObject=0x1e0) returned 1 [0200.947] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214dd0 [0200.947] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1037\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1037\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1cc | out: lpFileInformation=0x1fdf1cc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1198c)) returned 1 [0200.947] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214dd0 | out: hHeap=0x1f0000) returned 1 [0200.947] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214fd8 [0200.947] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1037\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1037\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1d4 | out: lpFileInformation=0x1fdf1d4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1198c)) returned 1 [0200.947] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214fd8 | out: hHeap=0x1f0000) returned 1 [0200.948] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214dd0 [0200.948] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214dd0 | out: hHeap=0x1f0000) returned 1 [0200.948] FindNextFileW (in: hFindFile=0x24e640, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4158, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0200.948] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282a0 [0200.948] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221ef0 [0200.948] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214dd0 [0200.948] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221ef0 | out: hHeap=0x1f0000) returned 1 [0200.948] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d68 | out: hHeap=0x1f0000) returned 1 [0200.948] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0200.949] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1037\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1037\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0200.949] GetFileType (hFile=0x1e0) returned 0x1 [0200.950] CloseHandle (hObject=0x1e0) returned 1 [0200.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a90 [0200.950] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1037\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1037\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1cc | out: lpFileInformation=0x1fdf1cc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4158)) returned 1 [0200.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a90 | out: hHeap=0x1f0000) returned 1 [0200.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a28 [0200.951] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1037\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1037\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1d4 | out: lpFileInformation=0x1fdf1d4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4158)) returned 1 [0200.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a28 | out: hHeap=0x1f0000) returned 1 [0200.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d68 [0200.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d68 | out: hHeap=0x1f0000) returned 1 [0200.952] FindNextFileW (in: hFindFile=0x24e640, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4158, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0200.952] FindClose (in: hFindFile=0x24e640 | out: hFindFile=0x24e640) returned 1 [0200.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214dd0 | out: hHeap=0x1f0000) returned 1 [0200.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ee88 | out: hHeap=0x1f0000) returned 1 [0200.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0200.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222178 | out: hHeap=0x1f0000) returned 1 [0200.953] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222178 [0200.953] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0200.953] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e030 [0200.953] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221ef0 [0200.953] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1038\\*", lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ed00 [0200.953] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2221c0 [0200.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221ef0 | out: hHeap=0x1f0000) returned 1 [0200.953] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0200.954] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0200.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221ef0 [0200.954] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2221c0 | out: hHeap=0x1f0000) returned 1 [0200.954] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0200.954] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0200.954] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x109e, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0200.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0200.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2221c0 [0200.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x214a90 [0200.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2221c0 | out: hHeap=0x1f0000) returned 1 [0200.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221ef0 | out: hHeap=0x1f0000) returned 1 [0200.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0200.955] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1038\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1038\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0200.956] GetFileType (hFile=0x1e0) returned 0x1 [0200.958] CloseHandle (hObject=0x1e0) returned 1 [0200.958] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239a30 [0200.958] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1038\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1038\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1cc | out: lpFileInformation=0x1fdf1cc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x109e)) returned 1 [0200.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239a30 | out: hHeap=0x1f0000) returned 1 [0200.959] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2394b0 [0200.959] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1038\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1038\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1d4 | out: lpFileInformation=0x1fdf1d4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x109e)) returned 1 [0200.959] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2394b0 | out: hHeap=0x1f0000) returned 1 [0200.959] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2397c8 [0200.959] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2397c8 | out: hHeap=0x1f0000) returned 1 [0200.959] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x151aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0200.959] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282a0 [0200.959] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2221c0 [0200.960] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d68 [0200.960] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2221c0 | out: hHeap=0x1f0000) returned 1 [0200.960] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a90 | out: hHeap=0x1f0000) returned 1 [0200.960] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0200.961] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1038\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1038\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0200.961] GetFileType (hFile=0x1e0) returned 0x1 [0200.961] CloseHandle (hObject=0x1e0) returned 1 [0200.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c30 [0200.962] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1038\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1038\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1cc | out: lpFileInformation=0x1fdf1cc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x151aa)) returned 1 [0200.962] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c30 | out: hHeap=0x1f0000) returned 1 [0200.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2149c0 [0200.962] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1038\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1038\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1d4 | out: lpFileInformation=0x1fdf1d4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x151aa)) returned 1 [0200.963] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2149c0 | out: hHeap=0x1f0000) returned 1 [0200.963] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214dd0 [0200.963] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214dd0 | out: hHeap=0x1f0000) returned 1 [0200.963] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0200.963] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282a0 [0200.963] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221ef0 [0200.963] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c30 [0200.963] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221ef0 | out: hHeap=0x1f0000) returned 1 [0200.963] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d68 | out: hHeap=0x1f0000) returned 1 [0200.963] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0200.964] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1038\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1038\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0200.964] GetFileType (hFile=0x1e0) returned 0x1 [0200.965] CloseHandle (hObject=0x1e0) returned 1 [0200.965] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214ea0 [0200.966] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1038\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1038\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1cc | out: lpFileInformation=0x1fdf1cc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958)) returned 1 [0200.966] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214ea0 | out: hHeap=0x1f0000) returned 1 [0200.966] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2150a8 [0200.966] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1038\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1038\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1d4 | out: lpFileInformation=0x1fdf1d4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958)) returned 1 [0200.966] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2150a8 | out: hHeap=0x1f0000) returned 1 [0200.966] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214958 [0200.966] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214958 | out: hHeap=0x1f0000) returned 1 [0200.968] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0200.968] FindClose (in: hFindFile=0x24ed00 | out: hFindFile=0x24ed00) returned 1 [0200.968] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c30 | out: hHeap=0x1f0000) returned 1 [0200.968] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e030 | out: hHeap=0x1f0000) returned 1 [0200.968] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0200.968] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222178 | out: hHeap=0x1f0000) returned 1 [0200.968] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221ef0 [0200.968] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0200.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e9c0 [0200.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222178 [0200.969] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1040\\*", lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e5c0 [0200.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2221c0 [0200.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222178 | out: hHeap=0x1f0000) returned 1 [0200.969] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0200.969] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0200.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222178 [0200.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2221c0 | out: hHeap=0x1f0000) returned 1 [0200.970] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0200.970] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0200.970] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0200.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0200.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2221c0 [0200.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x214d68 [0200.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2221c0 | out: hHeap=0x1f0000) returned 1 [0200.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222178 | out: hHeap=0x1f0000) returned 1 [0200.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0200.971] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1040\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1040\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0200.971] GetFileType (hFile=0x1e0) returned 0x1 [0200.972] CloseHandle (hObject=0x1e0) returned 1 [0200.972] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2397c8 [0200.972] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1040\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1040\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1cc | out: lpFileInformation=0x1fdf1cc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe3b)) returned 1 [0200.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2397c8 | out: hHeap=0x1f0000) returned 1 [0200.972] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239a30 [0200.972] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1040\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1040\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1d4 | out: lpFileInformation=0x1fdf1d4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe3b)) returned 1 [0200.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239a30 | out: hHeap=0x1f0000) returned 1 [0200.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239928 [0200.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239928 | out: hHeap=0x1f0000) returned 1 [0200.973] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x138bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0200.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282a0 [0200.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222178 [0200.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214ea0 [0200.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222178 | out: hHeap=0x1f0000) returned 1 [0200.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d68 | out: hHeap=0x1f0000) returned 1 [0200.974] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0200.974] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1040\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1040\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0200.974] GetFileType (hFile=0x1e0) returned 0x1 [0200.975] CloseHandle (hObject=0x1e0) returned 1 [0200.975] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a28 [0200.975] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1040\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1040\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1cc | out: lpFileInformation=0x1fdf1cc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x138bc)) returned 1 [0200.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a28 | out: hHeap=0x1f0000) returned 1 [0200.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d68 [0200.976] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1040\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1040\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1d4 | out: lpFileInformation=0x1fdf1d4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x138bc)) returned 1 [0200.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d68 | out: hHeap=0x1f0000) returned 1 [0200.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214bc8 [0200.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214bc8 | out: hHeap=0x1f0000) returned 1 [0200.976] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0200.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282a0 [0200.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222178 [0200.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2149c0 [0200.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222178 | out: hHeap=0x1f0000) returned 1 [0200.977] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214ea0 | out: hHeap=0x1f0000) returned 1 [0200.977] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0200.977] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1040\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1040\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0200.977] GetFileType (hFile=0x1e0) returned 0x1 [0200.978] CloseHandle (hObject=0x1e0) returned 1 [0200.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a28 [0200.978] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1040\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1040\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1cc | out: lpFileInformation=0x1fdf1cc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758)) returned 1 [0200.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a28 | out: hHeap=0x1f0000) returned 1 [0200.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214958 [0200.978] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1040\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1040\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1d4 | out: lpFileInformation=0x1fdf1d4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758)) returned 1 [0200.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214958 | out: hHeap=0x1f0000) returned 1 [0200.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214958 [0200.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214958 | out: hHeap=0x1f0000) returned 1 [0200.979] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0200.979] FindClose (in: hFindFile=0x24e5c0 | out: hFindFile=0x24e5c0) returned 1 [0200.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2149c0 | out: hHeap=0x1f0000) returned 1 [0200.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e9c0 | out: hHeap=0x1f0000) returned 1 [0200.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0200.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221ef0 | out: hHeap=0x1f0000) returned 1 [0200.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222178 [0200.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238348 [0200.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e030 [0200.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221ef0 [0200.979] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1041\\*", lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e840 [0200.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2221c0 [0200.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221ef0 | out: hHeap=0x1f0000) returned 1 [0200.980] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0200.980] FindNextFileW (in: hFindFile=0x24e840, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0200.980] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221ef0 [0200.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2221c0 | out: hHeap=0x1f0000) returned 1 [0200.980] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0200.980] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0200.980] FindNextFileW (in: hFindFile=0x24e840, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x278d, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0200.980] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0200.980] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2221c0 [0200.980] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x214958 [0200.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2221c0 | out: hHeap=0x1f0000) returned 1 [0200.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221ef0 | out: hHeap=0x1f0000) returned 1 [0200.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0200.981] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1041\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1041\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0200.981] GetFileType (hFile=0x1e0) returned 0x1 [0200.981] CloseHandle (hObject=0x1e0) returned 1 [0200.982] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239928 [0200.982] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1041\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1041\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1cc | out: lpFileInformation=0x1fdf1cc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x278d)) returned 1 [0200.982] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239928 | out: hHeap=0x1f0000) returned 1 [0200.982] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239928 [0201.220] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1041\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1041\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1d4 | out: lpFileInformation=0x1fdf1d4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x278d)) returned 1 [0201.220] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239928 | out: hHeap=0x1f0000) returned 1 [0201.220] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239668 [0201.220] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239668 | out: hHeap=0x1f0000) returned 1 [0201.220] FindNextFileW (in: hFindFile=0x24e840, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x10a82, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0201.221] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228310 [0201.221] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221d88 [0201.221] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214f70 [0201.221] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221d88 | out: hHeap=0x1f0000) returned 1 [0201.221] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214958 | out: hHeap=0x1f0000) returned 1 [0201.221] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228310 | out: hHeap=0x1f0000) returned 1 [0201.222] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1041\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1041\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0201.222] GetFileType (hFile=0x210) returned 0x1 [0201.223] CloseHandle (hObject=0x210) returned 1 [0201.223] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d68 [0201.223] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1041\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1041\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1cc | out: lpFileInformation=0x1fdf1cc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x10a82)) returned 1 [0201.223] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d68 | out: hHeap=0x1f0000) returned 1 [0201.224] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a90 [0201.224] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1041\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1041\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1d4 | out: lpFileInformation=0x1fdf1d4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x10a82)) returned 1 [0201.224] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a90 | out: hHeap=0x1f0000) returned 1 [0201.224] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c98 [0201.224] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c98 | out: hHeap=0x1f0000) returned 1 [0201.224] FindNextFileW (in: hFindFile=0x24e840, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0201.224] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282a0 [0201.225] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221d88 [0201.225] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214fd8 [0201.225] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221d88 | out: hHeap=0x1f0000) returned 1 [0201.225] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f70 | out: hHeap=0x1f0000) returned 1 [0201.225] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0201.226] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1041\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1041\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0201.226] GetFileType (hFile=0x210) returned 0x1 [0201.226] CloseHandle (hObject=0x210) returned 1 [0201.227] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x215040 [0201.227] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1041\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1041\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1cc | out: lpFileInformation=0x1fdf1cc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3d58)) returned 1 [0201.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215040 | out: hHeap=0x1f0000) returned 1 [0201.227] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c98 [0201.227] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1041\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1041\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1d4 | out: lpFileInformation=0x1fdf1d4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3d58)) returned 1 [0201.228] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c98 | out: hHeap=0x1f0000) returned 1 [0201.228] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214958 [0201.228] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214958 | out: hHeap=0x1f0000) returned 1 [0201.228] FindNextFileW (in: hFindFile=0x24e840, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0201.228] FindClose (in: hFindFile=0x24e840 | out: hFindFile=0x24e840) returned 1 [0201.228] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214fd8 | out: hHeap=0x1f0000) returned 1 [0201.228] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e030 | out: hHeap=0x1f0000) returned 1 [0201.228] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238348 | out: hHeap=0x1f0000) returned 1 [0201.229] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222178 | out: hHeap=0x1f0000) returned 1 [0201.229] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222178 [0201.229] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0201.229] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e9c0 [0201.229] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221d88 [0201.229] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1042\\*", lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24eb00 [0201.230] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2229e8 [0201.230] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221d88 | out: hHeap=0x1f0000) returned 1 [0201.230] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0201.230] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.230] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221d88 [0201.230] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2229e8 | out: hHeap=0x1f0000) returned 1 [0201.230] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0201.231] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0201.231] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x318f, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0201.231] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0201.231] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2229e8 [0201.231] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x214d68 [0201.231] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2229e8 | out: hHeap=0x1f0000) returned 1 [0201.231] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221d88 | out: hHeap=0x1f0000) returned 1 [0201.232] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0201.232] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1042\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1042\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0201.233] GetFileType (hFile=0x210) returned 0x1 [0201.233] CloseHandle (hObject=0x210) returned 1 [0201.234] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2395b8 [0201.234] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1042\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1042\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1cc | out: lpFileInformation=0x1fdf1cc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x318f)) returned 1 [0201.234] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2395b8 | out: hHeap=0x1f0000) returned 1 [0201.234] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239a30 [0201.234] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1042\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1042\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1d4 | out: lpFileInformation=0x1fdf1d4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x318f)) returned 1 [0201.234] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239a30 | out: hHeap=0x1f0000) returned 1 [0201.235] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239a30 [0201.235] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239a30 | out: hHeap=0x1f0000) returned 1 [0201.235] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xfed6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0201.235] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228310 [0201.235] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221d88 [0201.235] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c30 [0201.235] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221d88 | out: hHeap=0x1f0000) returned 1 [0201.235] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d68 | out: hHeap=0x1f0000) returned 1 [0201.235] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228310 | out: hHeap=0x1f0000) returned 1 [0201.236] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1042\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1042\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0201.236] GetFileType (hFile=0x210) returned 0x1 [0201.237] CloseHandle (hObject=0x210) returned 1 [0201.237] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214e38 [0201.238] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1042\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1042\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1cc | out: lpFileInformation=0x1fdf1cc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xfed6)) returned 1 [0201.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214e38 | out: hHeap=0x1f0000) returned 1 [0201.238] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2150a8 [0201.238] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1042\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1042\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1d4 | out: lpFileInformation=0x1fdf1d4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xfed6)) returned 1 [0201.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2150a8 | out: hHeap=0x1f0000) returned 1 [0201.238] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a28 [0201.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a28 | out: hHeap=0x1f0000) returned 1 [0201.239] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0201.239] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282d8 [0201.239] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221d88 [0201.239] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214dd0 [0201.239] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221d88 | out: hHeap=0x1f0000) returned 1 [0201.239] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c30 | out: hHeap=0x1f0000) returned 1 [0201.239] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282d8 | out: hHeap=0x1f0000) returned 1 [0201.240] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1042\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1042\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0201.241] GetFileType (hFile=0x210) returned 0x1 [0201.241] CloseHandle (hObject=0x210) returned 1 [0201.242] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214f70 [0201.242] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1042\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1042\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1cc | out: lpFileInformation=0x1fdf1cc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3b58)) returned 1 [0201.242] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f70 | out: hHeap=0x1f0000) returned 1 [0201.242] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214f70 [0201.243] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1042\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1042\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1d4 | out: lpFileInformation=0x1fdf1d4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3b58)) returned 1 [0201.243] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f70 | out: hHeap=0x1f0000) returned 1 [0201.243] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214e38 [0201.243] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214e38 | out: hHeap=0x1f0000) returned 1 [0201.243] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0201.243] FindClose (in: hFindFile=0x24eb00 | out: hFindFile=0x24eb00) returned 1 [0201.244] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214dd0 | out: hHeap=0x1f0000) returned 1 [0201.244] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e9c0 | out: hHeap=0x1f0000) returned 1 [0201.244] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0201.244] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222178 | out: hHeap=0x1f0000) returned 1 [0201.244] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222178 [0201.244] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0201.244] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e030 [0201.244] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221d88 [0201.245] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1043\\*", lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e940 [0201.245] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2225f8 [0201.245] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221d88 | out: hHeap=0x1f0000) returned 1 [0201.245] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0201.245] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.245] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221d88 [0201.246] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2225f8 | out: hHeap=0x1f0000) returned 1 [0201.246] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0201.246] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0201.246] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xdda, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0201.246] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0201.246] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222b08 [0201.246] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x214d68 [0201.246] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222b08 | out: hHeap=0x1f0000) returned 1 [0201.247] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221d88 | out: hHeap=0x1f0000) returned 1 [0201.247] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0201.247] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1043\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1043\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0201.248] GetFileType (hFile=0x210) returned 0x1 [0201.249] CloseHandle (hObject=0x210) returned 1 [0201.249] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2394b0 [0201.249] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1043\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1043\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1cc | out: lpFileInformation=0x1fdf1cc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xdda)) returned 1 [0201.249] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2394b0 | out: hHeap=0x1f0000) returned 1 [0201.249] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239a30 [0201.250] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1043\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1043\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1d4 | out: lpFileInformation=0x1fdf1d4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xdda)) returned 1 [0201.250] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239a30 | out: hHeap=0x1f0000) returned 1 [0201.250] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239a30 [0201.250] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239a30 | out: hHeap=0x1f0000) returned 1 [0201.250] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13712, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0201.250] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228310 [0201.250] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221d88 [0201.251] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214bc8 [0201.251] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221d88 | out: hHeap=0x1f0000) returned 1 [0201.251] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d68 | out: hHeap=0x1f0000) returned 1 [0201.251] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228310 | out: hHeap=0x1f0000) returned 1 [0201.252] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1043\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1043\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0201.252] GetFileType (hFile=0x210) returned 0x1 [0201.253] CloseHandle (hObject=0x210) returned 1 [0201.253] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2149c0 [0201.253] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1043\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1043\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1cc | out: lpFileInformation=0x1fdf1cc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13712)) returned 1 [0201.253] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2149c0 | out: hHeap=0x1f0000) returned 1 [0201.253] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a28 [0201.253] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1043\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1043\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1d4 | out: lpFileInformation=0x1fdf1d4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13712)) returned 1 [0201.254] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a28 | out: hHeap=0x1f0000) returned 1 [0201.254] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214e38 [0201.254] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214e38 | out: hHeap=0x1f0000) returned 1 [0201.254] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0201.254] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228310 [0201.254] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221d88 [0201.254] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214af8 [0201.254] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221d88 | out: hHeap=0x1f0000) returned 1 [0201.255] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214bc8 | out: hHeap=0x1f0000) returned 1 [0201.255] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228310 | out: hHeap=0x1f0000) returned 1 [0201.255] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1043\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1043\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0201.256] GetFileType (hFile=0x210) returned 0x1 [0201.256] CloseHandle (hObject=0x210) returned 1 [0201.256] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214ea0 [0201.256] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1043\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1043\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1cc | out: lpFileInformation=0x1fdf1cc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58)) returned 1 [0201.257] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214ea0 | out: hHeap=0x1f0000) returned 1 [0201.257] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214dd0 [0201.257] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1043\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1043\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1d4 | out: lpFileInformation=0x1fdf1d4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58)) returned 1 [0201.257] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214dd0 | out: hHeap=0x1f0000) returned 1 [0201.257] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2149c0 [0201.257] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2149c0 | out: hHeap=0x1f0000) returned 1 [0201.257] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0201.257] FindClose (in: hFindFile=0x24e940 | out: hFindFile=0x24e940) returned 1 [0201.258] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214af8 | out: hHeap=0x1f0000) returned 1 [0201.258] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e030 | out: hHeap=0x1f0000) returned 1 [0201.258] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0201.258] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222178 | out: hHeap=0x1f0000) returned 1 [0201.258] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222178 [0201.258] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380f0 [0201.258] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22eb58 [0201.258] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221d88 [0201.259] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1044\\*", lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ea00 [0201.259] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2225f8 [0201.259] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221d88 | out: hHeap=0x1f0000) returned 1 [0201.259] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0201.259] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.259] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221d88 [0201.259] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2225f8 | out: hHeap=0x1f0000) returned 1 [0201.259] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0201.260] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0201.260] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xbe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0201.260] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238438 [0201.260] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2229e8 [0201.260] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x214ea0 [0201.260] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2229e8 | out: hHeap=0x1f0000) returned 1 [0201.260] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221d88 | out: hHeap=0x1f0000) returned 1 [0201.260] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238438 | out: hHeap=0x1f0000) returned 1 [0201.261] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1044\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1044\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0201.261] GetFileType (hFile=0x210) returned 0x1 [0201.261] CloseHandle (hObject=0x210) returned 1 [0201.262] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239928 [0201.262] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1044\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1044\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1cc | out: lpFileInformation=0x1fdf1cc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xbe6)) returned 1 [0201.262] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239928 | out: hHeap=0x1f0000) returned 1 [0201.262] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239b38 [0201.262] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1044\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1044\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1d4 | out: lpFileInformation=0x1fdf1d4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xbe6)) returned 1 [0201.262] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239b38 | out: hHeap=0x1f0000) returned 1 [0201.263] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239718 [0201.263] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239718 | out: hHeap=0x1f0000) returned 1 [0201.263] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x135c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0201.263] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282d8 [0201.263] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221d88 [0201.263] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214f70 [0201.263] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221d88 | out: hHeap=0x1f0000) returned 1 [0201.263] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214ea0 | out: hHeap=0x1f0000) returned 1 [0201.263] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282d8 | out: hHeap=0x1f0000) returned 1 [0201.264] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1044\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1044\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0201.446] GetFileType (hFile=0x200) returned 0x1 [0201.446] CloseHandle (hObject=0x200) returned 1 [0201.447] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214fd8 [0201.447] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1044\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1044\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1cc | out: lpFileInformation=0x1fdf1cc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x135c0)) returned 1 [0201.447] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214fd8 | out: hHeap=0x1f0000) returned 1 [0201.447] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c30 [0201.447] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1044\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1044\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1d4 | out: lpFileInformation=0x1fdf1d4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x135c0)) returned 1 [0201.448] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c30 | out: hHeap=0x1f0000) returned 1 [0201.448] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214e38 [0201.448] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214e38 | out: hHeap=0x1f0000) returned 1 [0201.448] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0201.448] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227fc8 [0201.448] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221ef0 [0201.448] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d68 [0201.448] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221ef0 | out: hHeap=0x1f0000) returned 1 [0201.448] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f70 | out: hHeap=0x1f0000) returned 1 [0201.448] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227fc8 | out: hHeap=0x1f0000) returned 1 [0201.545] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1044\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1044\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0201.546] GetFileType (hFile=0x210) returned 0x1 [0201.546] CloseHandle (hObject=0x210) returned 1 [0201.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2149c0 [0201.546] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1044\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1044\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1cc | out: lpFileInformation=0x1fdf1cc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558)) returned 1 [0201.546] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2149c0 | out: hHeap=0x1f0000) returned 1 [0201.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214dd0 [0201.546] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1044\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1044\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1d4 | out: lpFileInformation=0x1fdf1d4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558)) returned 1 [0201.546] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214dd0 | out: hHeap=0x1f0000) returned 1 [0201.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214b60 [0201.547] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214b60 | out: hHeap=0x1f0000) returned 1 [0201.547] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0201.547] FindClose (in: hFindFile=0x24ea00 | out: hFindFile=0x24ea00) returned 1 [0201.547] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d68 | out: hHeap=0x1f0000) returned 1 [0201.547] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22eb58 | out: hHeap=0x1f0000) returned 1 [0201.547] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380f0 | out: hHeap=0x1f0000) returned 1 [0201.547] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222178 | out: hHeap=0x1f0000) returned 1 [0201.547] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2221c0 [0201.547] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380f0 [0201.547] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e4f8 [0201.547] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221ef0 [0201.548] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1045\\*", lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e640 [0201.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222178 [0201.548] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221ef0 | out: hHeap=0x1f0000) returned 1 [0201.548] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0201.548] FindNextFileW (in: hFindFile=0x24e640, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221ef0 [0201.548] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222178 | out: hHeap=0x1f0000) returned 1 [0201.548] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0201.548] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0201.549] FindNextFileW (in: hFindFile=0x24e640, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xfc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0201.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0201.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222178 [0201.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x214f70 [0201.549] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222178 | out: hHeap=0x1f0000) returned 1 [0201.549] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221ef0 | out: hHeap=0x1f0000) returned 1 [0201.549] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0201.550] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1045\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1045\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0201.550] GetFileType (hFile=0x210) returned 0x1 [0201.550] CloseHandle (hObject=0x210) returned 1 [0201.551] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239458 [0201.551] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1045\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1045\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1cc | out: lpFileInformation=0x1fdf1cc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xfc8)) returned 1 [0201.551] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239458 | out: hHeap=0x1f0000) returned 1 [0201.551] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2396c0 [0201.551] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1045\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1045\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1d4 | out: lpFileInformation=0x1fdf1d4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xfc8)) returned 1 [0201.551] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2396c0 | out: hHeap=0x1f0000) returned 1 [0201.551] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239610 [0201.551] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239610 | out: hHeap=0x1f0000) returned 1 [0201.551] FindNextFileW (in: hFindFile=0x24e640, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x141c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0201.551] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228230 [0201.552] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221ef0 [0201.552] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214fd8 [0201.552] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221ef0 | out: hHeap=0x1f0000) returned 1 [0201.552] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f70 | out: hHeap=0x1f0000) returned 1 [0201.552] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228230 | out: hHeap=0x1f0000) returned 1 [0201.553] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1045\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1045\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0201.554] GetFileType (hFile=0x210) returned 0x1 [0201.554] CloseHandle (hObject=0x210) returned 1 [0201.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214dd0 [0201.554] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1045\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1045\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1cc | out: lpFileInformation=0x1fdf1cc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x141c6)) returned 1 [0201.554] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214dd0 | out: hHeap=0x1f0000) returned 1 [0201.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d68 [0201.555] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1045\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1045\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1d4 | out: lpFileInformation=0x1fdf1d4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x141c6)) returned 1 [0201.555] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d68 | out: hHeap=0x1f0000) returned 1 [0201.555] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214dd0 [0201.555] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214dd0 | out: hHeap=0x1f0000) returned 1 [0201.555] FindNextFileW (in: hFindFile=0x24e640, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0201.555] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227fc8 [0201.555] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221ef0 [0201.555] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d68 [0201.555] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221ef0 | out: hHeap=0x1f0000) returned 1 [0201.555] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214fd8 | out: hHeap=0x1f0000) returned 1 [0201.555] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227fc8 | out: hHeap=0x1f0000) returned 1 [0201.556] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1045\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1045\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0201.556] GetFileType (hFile=0x210) returned 0x1 [0201.556] CloseHandle (hObject=0x210) returned 1 [0201.557] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2150a8 [0201.557] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1045\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1045\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1cc | out: lpFileInformation=0x1fdf1cc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758)) returned 1 [0201.557] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2150a8 | out: hHeap=0x1f0000) returned 1 [0201.557] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214dd0 [0201.557] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1045\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1045\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1d4 | out: lpFileInformation=0x1fdf1d4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758)) returned 1 [0201.557] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214dd0 | out: hHeap=0x1f0000) returned 1 [0201.558] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a90 [0201.558] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a90 | out: hHeap=0x1f0000) returned 1 [0201.558] FindNextFileW (in: hFindFile=0x24e640, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0201.558] FindClose (in: hFindFile=0x24e640 | out: hFindFile=0x24e640) returned 1 [0201.559] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d68 | out: hHeap=0x1f0000) returned 1 [0201.559] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e4f8 | out: hHeap=0x1f0000) returned 1 [0201.559] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380f0 | out: hHeap=0x1f0000) returned 1 [0201.559] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2221c0 | out: hHeap=0x1f0000) returned 1 [0201.559] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221ef0 [0201.559] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380f0 [0201.559] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e9c0 [0201.559] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222178 [0201.559] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1046\\*", lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e600 [0201.559] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2221c0 [0201.559] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222178 | out: hHeap=0x1f0000) returned 1 [0201.559] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0201.559] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.559] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222178 [0201.560] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2221c0 | out: hHeap=0x1f0000) returned 1 [0201.560] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0201.560] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0201.560] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe63, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0201.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0201.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2221c0 [0201.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x214c98 [0201.560] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2221c0 | out: hHeap=0x1f0000) returned 1 [0201.560] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222178 | out: hHeap=0x1f0000) returned 1 [0201.560] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0201.561] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1046\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1046\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0201.561] GetFileType (hFile=0x210) returned 0x1 [0201.561] CloseHandle (hObject=0x210) returned 1 [0201.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239718 [0201.562] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1046\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1046\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1cc | out: lpFileInformation=0x1fdf1cc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe63)) returned 1 [0201.562] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239718 | out: hHeap=0x1f0000) returned 1 [0201.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239508 [0201.562] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1046\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1046\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1d4 | out: lpFileInformation=0x1fdf1d4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe63)) returned 1 [0201.562] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239508 | out: hHeap=0x1f0000) returned 1 [0201.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239a30 [0201.562] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239a30 | out: hHeap=0x1f0000) returned 1 [0201.562] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13b62, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0201.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0201.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222178 [0201.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214f70 [0201.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222178 | out: hHeap=0x1f0000) returned 1 [0201.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c98 | out: hHeap=0x1f0000) returned 1 [0201.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0201.563] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1046\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1046\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0201.563] GetFileType (hFile=0x210) returned 0x1 [0201.564] CloseHandle (hObject=0x210) returned 1 [0201.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2149c0 [0201.564] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1046\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1046\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1cc | out: lpFileInformation=0x1fdf1cc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13b62)) returned 1 [0201.564] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2149c0 | out: hHeap=0x1f0000) returned 1 [0201.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c98 [0201.564] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1046\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1046\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1d4 | out: lpFileInformation=0x1fdf1d4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13b62)) returned 1 [0201.564] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c98 | out: hHeap=0x1f0000) returned 1 [0201.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c30 [0201.564] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c30 | out: hHeap=0x1f0000) returned 1 [0201.564] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0201.565] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0201.565] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222178 [0201.565] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a28 [0201.565] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222178 | out: hHeap=0x1f0000) returned 1 [0201.565] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f70 | out: hHeap=0x1f0000) returned 1 [0201.565] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0201.565] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1046\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1046\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0201.566] GetFileType (hFile=0x210) returned 0x1 [0201.566] CloseHandle (hObject=0x210) returned 1 [0201.566] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2150a8 [0201.566] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1046\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1046\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1cc | out: lpFileInformation=0x1fdf1cc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758)) returned 1 [0201.566] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2150a8 | out: hHeap=0x1f0000) returned 1 [0201.566] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c30 [0201.566] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1046\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1046\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1d4 | out: lpFileInformation=0x1fdf1d4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758)) returned 1 [0201.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c30 | out: hHeap=0x1f0000) returned 1 [0201.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214ea0 [0201.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214ea0 | out: hHeap=0x1f0000) returned 1 [0201.567] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0201.567] FindClose (in: hFindFile=0x24e600 | out: hFindFile=0x24e600) returned 1 [0201.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a28 | out: hHeap=0x1f0000) returned 1 [0201.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e9c0 | out: hHeap=0x1f0000) returned 1 [0201.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380f0 | out: hHeap=0x1f0000) returned 1 [0201.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221ef0 | out: hHeap=0x1f0000) returned 1 [0201.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221ef0 [0201.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380f0 [0201.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f350 [0201.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222178 [0201.568] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1049\\*", lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e6c0 [0201.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2221c0 [0201.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222178 | out: hHeap=0x1f0000) returned 1 [0201.568] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0201.568] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222178 [0201.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2221c0 | out: hHeap=0x1f0000) returned 1 [0201.568] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0201.568] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0201.568] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xd4b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0201.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0201.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2221c0 [0201.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x214c98 [0201.569] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2221c0 | out: hHeap=0x1f0000) returned 1 [0201.569] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222178 | out: hHeap=0x1f0000) returned 1 [0201.569] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0201.569] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1049\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1049\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0201.569] GetFileType (hFile=0x210) returned 0x1 [0201.570] CloseHandle (hObject=0x210) returned 1 [0201.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239928 [0201.570] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1049\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1049\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1cc | out: lpFileInformation=0x1fdf1cc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xd4b8)) returned 1 [0201.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239928 | out: hHeap=0x1f0000) returned 1 [0201.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239770 [0201.570] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1049\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1049\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1d4 | out: lpFileInformation=0x1fdf1d4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xd4b8)) returned 1 [0201.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239770 | out: hHeap=0x1f0000) returned 1 [0201.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2397c8 [0201.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2397c8 | out: hHeap=0x1f0000) returned 1 [0201.571] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13e4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0201.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0201.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222178 [0201.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d68 [0201.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222178 | out: hHeap=0x1f0000) returned 1 [0201.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c98 | out: hHeap=0x1f0000) returned 1 [0201.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0201.572] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1049\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1049\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0201.572] GetFileType (hFile=0x210) returned 0x1 [0201.572] CloseHandle (hObject=0x210) returned 1 [0201.572] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214dd0 [0201.572] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1049\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1049\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1cc | out: lpFileInformation=0x1fdf1cc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13e4a)) returned 1 [0201.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214dd0 | out: hHeap=0x1f0000) returned 1 [0201.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214ea0 [0201.573] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1049\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1049\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1d4 | out: lpFileInformation=0x1fdf1d4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13e4a)) returned 1 [0201.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214ea0 | out: hHeap=0x1f0000) returned 1 [0201.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a28 [0201.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a28 | out: hHeap=0x1f0000) returned 1 [0201.573] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0201.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228230 [0201.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222178 [0201.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214af8 [0201.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222178 | out: hHeap=0x1f0000) returned 1 [0201.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d68 | out: hHeap=0x1f0000) returned 1 [0201.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228230 | out: hHeap=0x1f0000) returned 1 [0201.574] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1049\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1049\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0201.574] GetFileType (hFile=0x210) returned 0x1 [0201.574] CloseHandle (hObject=0x210) returned 1 [0201.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214bc8 [0201.575] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1049\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1049\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1cc | out: lpFileInformation=0x1fdf1cc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758)) returned 1 [0201.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214bc8 | out: hHeap=0x1f0000) returned 1 [0201.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2149c0 [0201.575] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1049\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1049\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1d4 | out: lpFileInformation=0x1fdf1d4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758)) returned 1 [0201.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2149c0 | out: hHeap=0x1f0000) returned 1 [0201.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a28 [0201.576] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a28 | out: hHeap=0x1f0000) returned 1 [0201.576] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0201.576] FindClose (in: hFindFile=0x24e6c0 | out: hFindFile=0x24e6c0) returned 1 [0201.576] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214af8 | out: hHeap=0x1f0000) returned 1 [0201.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f350 | out: hHeap=0x1f0000) returned 1 [0201.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380f0 | out: hHeap=0x1f0000) returned 1 [0201.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221ef0 | out: hHeap=0x1f0000) returned 1 [0201.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222178 [0201.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380f0 [0201.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22eb58 [0201.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221ef0 [0201.577] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1053\\*", lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ebc0 [0201.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2221c0 [0201.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221ef0 | out: hHeap=0x1f0000) returned 1 [0201.578] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0201.578] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.578] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221ef0 [0201.578] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2221c0 | out: hHeap=0x1f0000) returned 1 [0201.578] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0201.578] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0201.578] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xf19, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0201.578] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0201.578] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2221c0 [0201.578] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x214f70 [0201.578] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2221c0 | out: hHeap=0x1f0000) returned 1 [0201.578] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221ef0 | out: hHeap=0x1f0000) returned 1 [0201.578] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0201.579] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1053\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1053\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0201.579] GetFileType (hFile=0x210) returned 0x1 [0201.579] CloseHandle (hObject=0x210) returned 1 [0201.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239458 [0201.580] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1053\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1053\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1cc | out: lpFileInformation=0x1fdf1cc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xf19)) returned 1 [0201.580] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239458 | out: hHeap=0x1f0000) returned 1 [0201.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239400 [0201.580] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1053\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1053\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1d4 | out: lpFileInformation=0x1fdf1d4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xf19)) returned 1 [0201.580] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239400 | out: hHeap=0x1f0000) returned 1 [0201.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239928 [0201.580] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239928 | out: hHeap=0x1f0000) returned 1 [0201.581] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12f70, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0201.581] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228150 [0201.581] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221ef0 [0201.581] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214fd8 [0201.581] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221ef0 | out: hHeap=0x1f0000) returned 1 [0201.581] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f70 | out: hHeap=0x1f0000) returned 1 [0201.581] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228150 | out: hHeap=0x1f0000) returned 1 [0201.582] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1053\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1053\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0201.582] GetFileType (hFile=0x210) returned 0x1 [0201.582] CloseHandle (hObject=0x210) returned 1 [0201.583] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214f70 [0201.583] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1053\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1053\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1cc | out: lpFileInformation=0x1fdf1cc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12f70)) returned 1 [0201.583] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f70 | out: hHeap=0x1f0000) returned 1 [0201.583] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214ea0 [0201.583] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1053\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1053\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1d4 | out: lpFileInformation=0x1fdf1d4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12f70)) returned 1 [0201.583] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214ea0 | out: hHeap=0x1f0000) returned 1 [0201.583] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d68 [0201.583] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d68 | out: hHeap=0x1f0000) returned 1 [0201.584] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0201.584] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0201.584] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221ef0 [0201.584] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2149c0 [0201.584] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221ef0 | out: hHeap=0x1f0000) returned 1 [0201.584] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214fd8 | out: hHeap=0x1f0000) returned 1 [0201.584] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0201.585] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1053\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1053\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0201.585] GetFileType (hFile=0x210) returned 0x1 [0201.585] CloseHandle (hObject=0x210) returned 1 [0201.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a28 [0201.586] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1053\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1053\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1cc | out: lpFileInformation=0x1fdf1cc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558)) returned 1 [0201.586] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a28 | out: hHeap=0x1f0000) returned 1 [0201.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214f70 [0201.586] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1053\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1053\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1d4 | out: lpFileInformation=0x1fdf1d4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558)) returned 1 [0201.586] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f70 | out: hHeap=0x1f0000) returned 1 [0201.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x215040 [0201.586] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215040 | out: hHeap=0x1f0000) returned 1 [0201.587] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0201.587] FindClose (in: hFindFile=0x24ebc0 | out: hFindFile=0x24ebc0) returned 1 [0201.587] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2149c0 | out: hHeap=0x1f0000) returned 1 [0201.587] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22eb58 | out: hHeap=0x1f0000) returned 1 [0201.587] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380f0 | out: hHeap=0x1f0000) returned 1 [0201.587] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222178 | out: hHeap=0x1f0000) returned 1 [0201.587] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221ef0 [0201.587] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380f0 [0201.587] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d6a0 [0201.588] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222178 [0201.588] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1055\\*", lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e940 [0201.588] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2221c0 [0201.588] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222178 | out: hHeap=0x1f0000) returned 1 [0201.588] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0201.588] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.588] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222178 [0201.588] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2221c0 | out: hHeap=0x1f0000) returned 1 [0201.589] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0201.589] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0201.589] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xf13, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0201.589] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0201.589] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2221c0 [0201.589] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x214af8 [0201.589] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2221c0 | out: hHeap=0x1f0000) returned 1 [0201.589] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222178 | out: hHeap=0x1f0000) returned 1 [0201.589] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0201.590] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1055\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1055\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0201.590] GetFileType (hFile=0x210) returned 0x1 [0201.590] CloseHandle (hObject=0x210) returned 1 [0201.591] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239458 [0201.591] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1055\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1055\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1cc | out: lpFileInformation=0x1fdf1cc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xf13)) returned 1 [0201.591] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239458 | out: hHeap=0x1f0000) returned 1 [0201.591] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239770 [0201.591] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1055\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1055\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1d4 | out: lpFileInformation=0x1fdf1d4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xf13)) returned 1 [0201.591] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239770 | out: hHeap=0x1f0000) returned 1 [0201.591] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239610 [0201.965] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239610 | out: hHeap=0x1f0000) returned 1 [0201.965] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12c12, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0201.965] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228150 [0201.965] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222b08 [0201.965] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214fd8 [0201.965] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222b08 | out: hHeap=0x1f0000) returned 1 [0201.965] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214af8 | out: hHeap=0x1f0000) returned 1 [0201.965] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228150 | out: hHeap=0x1f0000) returned 1 [0201.966] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1055\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1055\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0201.966] GetFileType (hFile=0x210) returned 0x1 [0201.966] CloseHandle (hObject=0x210) returned 1 [0201.967] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214ea0 [0201.967] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1055\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1055\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1cc | out: lpFileInformation=0x1fdf1cc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12c12)) returned 1 [0201.967] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214ea0 | out: hHeap=0x1f0000) returned 1 [0201.967] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c30 [0201.967] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1055\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1055\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1d4 | out: lpFileInformation=0x1fdf1d4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12c12)) returned 1 [0201.967] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c30 | out: hHeap=0x1f0000) returned 1 [0201.967] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214e38 [0201.967] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214e38 | out: hHeap=0x1f0000) returned 1 [0201.967] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0201.967] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228230 [0201.967] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2225f8 [0201.967] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214bc8 [0201.967] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2225f8 | out: hHeap=0x1f0000) returned 1 [0201.967] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214fd8 | out: hHeap=0x1f0000) returned 1 [0201.968] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228230 | out: hHeap=0x1f0000) returned 1 [0201.968] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1055\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1055\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0201.968] GetFileType (hFile=0x210) returned 0x1 [0201.968] CloseHandle (hObject=0x210) returned 1 [0201.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c98 [0201.969] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1055\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1055\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1cc | out: lpFileInformation=0x1fdf1cc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558)) returned 1 [0201.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c98 | out: hHeap=0x1f0000) returned 1 [0201.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214dd0 [0201.969] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1055\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1055\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1d4 | out: lpFileInformation=0x1fdf1d4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558)) returned 1 [0201.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214dd0 | out: hHeap=0x1f0000) returned 1 [0201.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214f70 [0201.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f70 | out: hHeap=0x1f0000) returned 1 [0201.969] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0201.970] FindClose (in: hFindFile=0x24e940 | out: hFindFile=0x24e940) returned 1 [0201.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214bc8 | out: hHeap=0x1f0000) returned 1 [0201.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d6a0 | out: hHeap=0x1f0000) returned 1 [0201.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380f0 | out: hHeap=0x1f0000) returned 1 [0201.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221ef0 | out: hHeap=0x1f0000) returned 1 [0201.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221ef0 [0201.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380f0 [0201.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22ee88 [0201.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222a30 [0201.970] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\2052\\*", lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e840 [0201.971] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2229e8 [0201.971] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222a30 | out: hHeap=0x1f0000) returned 1 [0201.971] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0201.971] FindNextFileW (in: hFindFile=0x24e840, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.971] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2225f8 [0201.971] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2229e8 | out: hHeap=0x1f0000) returned 1 [0201.971] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0201.971] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0201.971] FindNextFileW (in: hFindFile=0x24e840, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x16c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0201.971] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238618 [0201.971] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2229e8 [0201.971] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x2149c0 [0201.971] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2229e8 | out: hHeap=0x1f0000) returned 1 [0201.971] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2225f8 | out: hHeap=0x1f0000) returned 1 [0201.971] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238618 | out: hHeap=0x1f0000) returned 1 [0201.972] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\2052\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2052\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0201.972] GetFileType (hFile=0x210) returned 0x1 [0201.972] CloseHandle (hObject=0x210) returned 1 [0201.972] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239400 [0201.972] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\2052\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2052\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1cc | out: lpFileInformation=0x1fdf1cc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x16c3)) returned 1 [0201.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239400 | out: hHeap=0x1f0000) returned 1 [0201.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2397c8 [0201.973] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\2052\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2052\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1d4 | out: lpFileInformation=0x1fdf1d4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x16c3)) returned 1 [0201.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2397c8 | out: hHeap=0x1f0000) returned 1 [0201.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2394b0 [0201.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2394b0 | out: hHeap=0x1f0000) returned 1 [0201.973] FindNextFileW (in: hFindFile=0x24e840, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0201.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228230 [0201.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222b08 [0201.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c30 [0201.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222b08 | out: hHeap=0x1f0000) returned 1 [0201.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2149c0 | out: hHeap=0x1f0000) returned 1 [0201.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228230 | out: hHeap=0x1f0000) returned 1 [0201.973] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\2052\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2052\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0201.974] GetFileType (hFile=0x210) returned 0x1 [0201.974] CloseHandle (hObject=0x210) returned 1 [0201.974] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214e38 [0201.974] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\2052\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2052\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1cc | out: lpFileInformation=0x1fdf1cc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed0c)) returned 1 [0201.974] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214e38 | out: hHeap=0x1f0000) returned 1 [0201.974] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214bc8 [0201.974] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\2052\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2052\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1d4 | out: lpFileInformation=0x1fdf1d4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed0c)) returned 1 [0201.974] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214bc8 | out: hHeap=0x1f0000) returned 1 [0201.974] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2149c0 [0201.974] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2149c0 | out: hHeap=0x1f0000) returned 1 [0201.974] FindNextFileW (in: hFindFile=0x24e840, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0201.974] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228150 [0201.974] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2229e8 [0201.975] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x215040 [0201.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2229e8 | out: hHeap=0x1f0000) returned 1 [0201.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c30 | out: hHeap=0x1f0000) returned 1 [0201.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228150 | out: hHeap=0x1f0000) returned 1 [0201.975] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\2052\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2052\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0201.975] GetFileType (hFile=0x210) returned 0x1 [0201.975] CloseHandle (hObject=0x210) returned 1 [0201.975] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214fd8 [0201.976] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\2052\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2052\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1cc | out: lpFileInformation=0x1fdf1cc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758)) returned 1 [0201.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214fd8 | out: hHeap=0x1f0000) returned 1 [0201.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214af8 [0201.976] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\2052\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2052\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1d4 | out: lpFileInformation=0x1fdf1d4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758)) returned 1 [0201.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214af8 | out: hHeap=0x1f0000) returned 1 [0201.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214ea0 [0201.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214ea0 | out: hHeap=0x1f0000) returned 1 [0201.976] FindNextFileW (in: hFindFile=0x24e840, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0201.976] FindClose (in: hFindFile=0x24e840 | out: hFindFile=0x24e840) returned 1 [0201.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215040 | out: hHeap=0x1f0000) returned 1 [0201.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ee88 | out: hHeap=0x1f0000) returned 1 [0201.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380f0 | out: hHeap=0x1f0000) returned 1 [0201.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221ef0 | out: hHeap=0x1f0000) returned 1 [0201.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221ef0 [0201.977] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380f0 [0201.977] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e1c8 [0201.977] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2229e8 [0201.977] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\2070\\*", lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e780 [0201.977] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222b08 [0201.977] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2229e8 | out: hHeap=0x1f0000) returned 1 [0201.977] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0201.977] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.977] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2229e8 [0201.977] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222b08 | out: hHeap=0x1f0000) returned 1 [0201.977] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0201.977] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0201.977] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xfaf, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0201.977] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238618 [0201.977] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2225f8 [0201.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x214f70 [0201.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2225f8 | out: hHeap=0x1f0000) returned 1 [0201.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2229e8 | out: hHeap=0x1f0000) returned 1 [0201.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238618 | out: hHeap=0x1f0000) returned 1 [0201.978] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\2070\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2070\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0201.978] GetFileType (hFile=0x210) returned 0x1 [0201.979] CloseHandle (hObject=0x210) returned 1 [0201.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239ae0 [0201.979] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\2070\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2070\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1cc | out: lpFileInformation=0x1fdf1cc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xfaf)) returned 1 [0201.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239ae0 | out: hHeap=0x1f0000) returned 1 [0201.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239a30 [0201.979] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\2070\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2070\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1d4 | out: lpFileInformation=0x1fdf1d4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xfaf)) returned 1 [0201.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239a30 | out: hHeap=0x1f0000) returned 1 [0201.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239928 [0201.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239928 | out: hHeap=0x1f0000) returned 1 [0201.979] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1397e, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0201.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0201.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2225f8 [0201.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214bc8 [0201.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2225f8 | out: hHeap=0x1f0000) returned 1 [0201.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f70 | out: hHeap=0x1f0000) returned 1 [0201.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0201.980] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\2070\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2070\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0201.980] GetFileType (hFile=0x210) returned 0x1 [0201.980] CloseHandle (hObject=0x210) returned 1 [0201.980] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c98 [0201.980] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\2070\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2070\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1cc | out: lpFileInformation=0x1fdf1cc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1397e)) returned 1 [0201.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c98 | out: hHeap=0x1f0000) returned 1 [0201.981] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214f70 [0201.981] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\2070\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2070\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1d4 | out: lpFileInformation=0x1fdf1d4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1397e)) returned 1 [0201.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f70 | out: hHeap=0x1f0000) returned 1 [0201.981] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214f70 [0201.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f70 | out: hHeap=0x1f0000) returned 1 [0201.981] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0201.981] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228150 [0201.981] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2229e8 [0201.981] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214b60 [0201.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2229e8 | out: hHeap=0x1f0000) returned 1 [0201.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214bc8 | out: hHeap=0x1f0000) returned 1 [0201.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228150 | out: hHeap=0x1f0000) returned 1 [0201.982] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\2070\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2070\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0201.982] GetFileType (hFile=0x210) returned 0x1 [0201.982] CloseHandle (hObject=0x210) returned 1 [0201.983] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214dd0 [0201.983] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\2070\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2070\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1cc | out: lpFileInformation=0x1fdf1cc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958)) returned 1 [0201.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214dd0 | out: hHeap=0x1f0000) returned 1 [0201.983] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d68 [0201.983] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\2070\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2070\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1d4 | out: lpFileInformation=0x1fdf1d4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958)) returned 1 [0201.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d68 | out: hHeap=0x1f0000) returned 1 [0201.983] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2149c0 [0201.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2149c0 | out: hHeap=0x1f0000) returned 1 [0201.983] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0201.983] FindClose (in: hFindFile=0x24e780 | out: hFindFile=0x24e780) returned 1 [0201.984] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214b60 | out: hHeap=0x1f0000) returned 1 [0201.984] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e1c8 | out: hHeap=0x1f0000) returned 1 [0201.984] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380f0 | out: hHeap=0x1f0000) returned 1 [0201.984] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221ef0 | out: hHeap=0x1f0000) returned 1 [0201.984] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221ef0 [0201.984] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380f0 [0201.984] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f350 [0201.984] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2229e8 [0201.984] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\3076\\*", lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24eb40 [0201.984] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222a30 [0201.984] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2229e8 | out: hHeap=0x1f0000) returned 1 [0201.984] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0201.984] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.984] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2229e8 [0201.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222a30 | out: hHeap=0x1f0000) returned 1 [0201.985] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0201.985] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0201.985] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x18a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0201.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384d8 [0201.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222b08 [0201.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x214c98 [0201.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222b08 | out: hHeap=0x1f0000) returned 1 [0201.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2229e8 | out: hHeap=0x1f0000) returned 1 [0201.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384d8 | out: hHeap=0x1f0000) returned 1 [0201.986] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\3076\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3076\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0201.986] GetFileType (hFile=0x210) returned 0x1 [0201.986] CloseHandle (hObject=0x210) returned 1 [0201.986] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239458 [0201.986] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\3076\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3076\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1cc | out: lpFileInformation=0x1fdf1cc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x18a5)) returned 1 [0201.987] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239458 | out: hHeap=0x1f0000) returned 1 [0201.987] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239a30 [0201.987] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\3076\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3076\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1d4 | out: lpFileInformation=0x1fdf1d4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x18a5)) returned 1 [0201.987] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239a30 | out: hHeap=0x1f0000) returned 1 [0201.987] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239458 [0201.987] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239458 | out: hHeap=0x1f0000) returned 1 [0201.987] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed90, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0201.987] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0201.987] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2229e8 [0201.988] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214ea0 [0201.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2229e8 | out: hHeap=0x1f0000) returned 1 [0201.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c98 | out: hHeap=0x1f0000) returned 1 [0201.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0201.988] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\3076\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3076\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0201.989] GetFileType (hFile=0x210) returned 0x1 [0201.989] CloseHandle (hObject=0x210) returned 1 [0201.989] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214fd8 [0201.989] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\3076\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3076\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1cc | out: lpFileInformation=0x1fdf1cc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed90)) returned 1 [0201.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214fd8 | out: hHeap=0x1f0000) returned 1 [0201.989] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214f70 [0201.990] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\3076\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3076\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1d4 | out: lpFileInformation=0x1fdf1d4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed90)) returned 1 [0201.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f70 | out: hHeap=0x1f0000) returned 1 [0201.990] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214dd0 [0201.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214dd0 | out: hHeap=0x1f0000) returned 1 [0201.990] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0201.990] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228230 [0201.990] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2229e8 [0201.990] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214f70 [0201.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2229e8 | out: hHeap=0x1f0000) returned 1 [0201.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214ea0 | out: hHeap=0x1f0000) returned 1 [0201.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228230 | out: hHeap=0x1f0000) returned 1 [0201.991] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\3076\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\3076\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0201.991] GetFileType (hFile=0x210) returned 0x1 [0201.991] CloseHandle (hObject=0x210) returned 1 [0201.992] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d68 [0201.992] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\3076\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\3076\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1cc | out: lpFileInformation=0x1fdf1cc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758)) returned 1 [0201.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d68 | out: hHeap=0x1f0000) returned 1 [0201.992] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d68 [0201.992] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\3076\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\3076\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1d4 | out: lpFileInformation=0x1fdf1d4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758)) returned 1 [0201.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d68 | out: hHeap=0x1f0000) returned 1 [0201.992] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2150a8 [0201.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2150a8 | out: hHeap=0x1f0000) returned 1 [0201.992] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0201.992] FindClose (in: hFindFile=0x24eb40 | out: hFindFile=0x24eb40) returned 1 [0201.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f70 | out: hHeap=0x1f0000) returned 1 [0201.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f350 | out: hHeap=0x1f0000) returned 1 [0201.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380f0 | out: hHeap=0x1f0000) returned 1 [0201.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221ef0 | out: hHeap=0x1f0000) returned 1 [0201.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221ef0 [0201.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380f0 [0201.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e9c0 [0201.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2229e8 [0201.994] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\3082\\*", lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e700 [0201.994] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222b08 [0201.994] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2229e8 | out: hHeap=0x1f0000) returned 1 [0201.994] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0201.994] FindNextFileW (in: hFindFile=0x24e700, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.994] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2229e8 [0201.994] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222b08 | out: hHeap=0x1f0000) returned 1 [0201.994] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0201.994] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0201.994] FindNextFileW (in: hFindFile=0x24e700, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xbfd, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0201.994] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384d8 [0201.995] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222a30 [0201.995] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x214b60 [0201.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222a30 | out: hHeap=0x1f0000) returned 1 [0201.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2229e8 | out: hHeap=0x1f0000) returned 1 [0201.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384d8 | out: hHeap=0x1f0000) returned 1 [0201.995] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\3082\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3082\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0201.995] GetFileType (hFile=0x210) returned 0x1 [0201.996] CloseHandle (hObject=0x210) returned 1 [0201.996] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239ae0 [0201.996] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\3082\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3082\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1cc | out: lpFileInformation=0x1fdf1cc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xbfd)) returned 1 [0201.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239ae0 | out: hHeap=0x1f0000) returned 1 [0201.996] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239718 [0201.997] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\3082\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3082\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1d4 | out: lpFileInformation=0x1fdf1d4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xbfd)) returned 1 [0201.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239718 | out: hHeap=0x1f0000) returned 1 [0201.997] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239718 [0201.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239718 | out: hHeap=0x1f0000) returned 1 [0201.997] FindNextFileW (in: hFindFile=0x24e700, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1387c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0201.997] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0201.997] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2229e8 [0201.997] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214dd0 [0201.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2229e8 | out: hHeap=0x1f0000) returned 1 [0201.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214b60 | out: hHeap=0x1f0000) returned 1 [0202.220] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0202.220] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\3082\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3082\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0202.221] GetFileType (hFile=0x214) returned 0x1 [0202.221] CloseHandle (hObject=0x214) returned 1 [0202.221] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214af8 [0202.221] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\3082\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3082\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1cc | out: lpFileInformation=0x1fdf1cc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1387c)) returned 1 [0202.221] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214af8 | out: hHeap=0x1f0000) returned 1 [0202.221] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214f70 [0202.221] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\3082\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3082\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1d4 | out: lpFileInformation=0x1fdf1d4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1387c)) returned 1 [0202.222] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f70 | out: hHeap=0x1f0000) returned 1 [0202.222] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2149c0 [0202.222] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2149c0 | out: hHeap=0x1f0000) returned 1 [0202.222] FindNextFileW (in: hFindFile=0x24e700, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0202.222] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0202.222] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2221c0 [0202.222] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214e38 [0202.222] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2221c0 | out: hHeap=0x1f0000) returned 1 [0202.222] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214dd0 | out: hHeap=0x1f0000) returned 1 [0202.222] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0202.222] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\3082\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\3082\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0202.223] GetFileType (hFile=0x214) returned 0x1 [0202.223] CloseHandle (hObject=0x214) returned 1 [0202.223] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c98 [0202.223] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\3082\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\3082\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1cc | out: lpFileInformation=0x1fdf1cc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958)) returned 1 [0202.223] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c98 | out: hHeap=0x1f0000) returned 1 [0202.223] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a28 [0202.223] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\3082\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\3082\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1d4 | out: lpFileInformation=0x1fdf1d4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958)) returned 1 [0202.223] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a28 | out: hHeap=0x1f0000) returned 1 [0202.223] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2150a8 [0202.223] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2150a8 | out: hHeap=0x1f0000) returned 1 [0202.223] FindNextFileW (in: hFindFile=0x24e700, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0202.223] FindClose (in: hFindFile=0x24e700 | out: hFindFile=0x24e700) returned 1 [0202.224] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214e38 | out: hHeap=0x1f0000) returned 1 [0202.224] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e9c0 | out: hHeap=0x1f0000) returned 1 [0202.224] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380f0 | out: hHeap=0x1f0000) returned 1 [0202.224] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221ef0 | out: hHeap=0x1f0000) returned 1 [0202.224] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221ef0 [0202.224] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380f0 [0202.224] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d6a0 [0202.224] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2221c0 [0202.224] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\Client\\*", lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ed40 [0202.224] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2225f8 [0202.224] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2221c0 | out: hHeap=0x1f0000) returned 1 [0202.224] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0202.224] FindNextFileW (in: hFindFile=0x24ed40, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.224] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2221c0 [0202.224] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x214a28 [0202.224] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2221c0 | out: hHeap=0x1f0000) returned 1 [0202.224] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2225f8 | out: hHeap=0x1f0000) returned 1 [0202.224] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0202.224] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0202.224] FindNextFileW (in: hFindFile=0x24ed40, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce2bc00, ftCreationTime.dwHighDateTime=0x1cac6d5, ftLastAccessTime.dwLowDateTime=0xce2bc00, ftLastAccessTime.dwHighDateTime=0x1cac6d5, ftLastWriteTime.dwLowDateTime=0xce2bc00, ftLastWriteTime.dwHighDateTime=0x1cac6d5, nFileSizeHigh=0x0, nFileSizeLow=0x31444, dwReserved0=0x0, dwReserved1=0x0, cFileName="Parameterinfo.xml", cAlternateFileName="PARAME~1.XML")) returned 1 [0202.224] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228150 [0202.225] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222b08 [0202.225] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a90 [0202.225] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222b08 | out: hHeap=0x1f0000) returned 1 [0202.225] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a28 | out: hHeap=0x1f0000) returned 1 [0202.225] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228150 | out: hHeap=0x1f0000) returned 1 [0202.225] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Client\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\parameterinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0202.225] GetFileType (hFile=0x214) returned 0x1 [0202.225] CloseHandle (hObject=0x214) returned 1 [0202.225] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214ea0 [0202.225] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Client\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\parameterinfo.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1cc | out: lpFileInformation=0x1fdf1cc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce2bc00, ftCreationTime.dwHighDateTime=0x1cac6d5, ftLastAccessTime.dwLowDateTime=0xce2bc00, ftLastAccessTime.dwHighDateTime=0x1cac6d5, ftLastWriteTime.dwLowDateTime=0xce2bc00, ftLastWriteTime.dwHighDateTime=0x1cac6d5, nFileSizeHigh=0x0, nFileSizeLow=0x31444)) returned 1 [0202.225] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214ea0 | out: hHeap=0x1f0000) returned 1 [0202.226] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a28 [0202.226] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Client\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\parameterinfo.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1d4 | out: lpFileInformation=0x1fdf1d4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce2bc00, ftCreationTime.dwHighDateTime=0x1cac6d5, ftLastAccessTime.dwLowDateTime=0xce2bc00, ftLastAccessTime.dwHighDateTime=0x1cac6d5, ftLastWriteTime.dwLowDateTime=0xce2bc00, ftLastWriteTime.dwHighDateTime=0x1cac6d5, nFileSizeHigh=0x0, nFileSizeLow=0x31444)) returned 1 [0202.226] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a28 | out: hHeap=0x1f0000) returned 1 [0202.226] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a28 [0202.226] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a28 | out: hHeap=0x1f0000) returned 1 [0202.226] FindNextFileW (in: hFindFile=0x24ed40, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x9882, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 1 [0202.226] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238618 [0202.226] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2225f8 [0202.226] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d68 [0202.226] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2225f8 | out: hHeap=0x1f0000) returned 1 [0202.226] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a90 | out: hHeap=0x1f0000) returned 1 [0202.226] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238618 | out: hHeap=0x1f0000) returned 1 [0202.226] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Client\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\uiinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0202.226] GetFileType (hFile=0x214) returned 0x1 [0202.227] CloseHandle (hObject=0x214) returned 1 [0202.227] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214fd8 [0202.227] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Client\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\uiinfo.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1cc | out: lpFileInformation=0x1fdf1cc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x9882)) returned 1 [0202.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214fd8 | out: hHeap=0x1f0000) returned 1 [0202.227] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a90 [0202.227] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Client\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\uiinfo.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1d4 | out: lpFileInformation=0x1fdf1d4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x9882)) returned 1 [0202.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a90 | out: hHeap=0x1f0000) returned 1 [0202.227] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214fd8 [0202.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214fd8 | out: hHeap=0x1f0000) returned 1 [0202.227] FindNextFileW (in: hFindFile=0x24ed40, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x9882, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 0 [0202.227] FindClose (in: hFindFile=0x24ed40 | out: hFindFile=0x24ed40) returned 1 [0202.228] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d68 | out: hHeap=0x1f0000) returned 1 [0202.228] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d6a0 | out: hHeap=0x1f0000) returned 1 [0202.228] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380f0 | out: hHeap=0x1f0000) returned 1 [0202.228] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221ef0 | out: hHeap=0x1f0000) returned 1 [0202.228] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2221c0 [0202.228] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380f0 [0202.228] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e4f8 [0202.228] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2395b8 [0202.228] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\Extended\\*", lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e880 [0202.228] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239718 [0202.228] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2395b8 | out: hHeap=0x1f0000) returned 1 [0202.228] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0202.228] FindNextFileW (in: hFindFile=0x24e880, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.228] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239a30 [0202.228] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239718 | out: hHeap=0x1f0000) returned 1 [0202.228] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0202.229] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0202.229] FindNextFileW (in: hFindFile=0x24e880, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2a714f00, ftCreationTime.dwHighDateTime=0x1cac6f0, ftLastAccessTime.dwLowDateTime=0x2a714f00, ftLastAccessTime.dwHighDateTime=0x1cac6f0, ftLastWriteTime.dwLowDateTime=0x2a714f00, ftLastWriteTime.dwHighDateTime=0x1cac6f0, nFileSizeHigh=0x0, nFileSizeLow=0x16c82, dwReserved0=0x0, dwReserved1=0x0, cFileName="Parameterinfo.xml", cAlternateFileName="PARAME~1.XML")) returned 1 [0202.229] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0202.229] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2397c8 [0202.229] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217550 [0202.229] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2397c8 | out: hHeap=0x1f0000) returned 1 [0202.229] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239a30 | out: hHeap=0x1f0000) returned 1 [0202.229] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0202.229] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Extended\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\parameterinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0202.229] GetFileType (hFile=0x214) returned 0x1 [0202.230] CloseHandle (hObject=0x214) returned 1 [0202.230] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a928 [0202.230] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Extended\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\parameterinfo.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1cc | out: lpFileInformation=0x1fdf1cc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2a714f00, ftCreationTime.dwHighDateTime=0x1cac6f0, ftLastAccessTime.dwLowDateTime=0x2a714f00, ftLastAccessTime.dwHighDateTime=0x1cac6f0, ftLastWriteTime.dwLowDateTime=0x2a714f00, ftLastWriteTime.dwHighDateTime=0x1cac6f0, nFileSizeHigh=0x0, nFileSizeLow=0x16c82)) returned 1 [0202.230] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a928 | out: hHeap=0x1f0000) returned 1 [0202.230] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ae50 [0202.230] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Extended\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\parameterinfo.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1d4 | out: lpFileInformation=0x1fdf1d4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2a714f00, ftCreationTime.dwHighDateTime=0x1cac6f0, ftLastAccessTime.dwLowDateTime=0x2a714f00, ftLastAccessTime.dwHighDateTime=0x1cac6f0, ftLastWriteTime.dwLowDateTime=0x2a714f00, ftLastWriteTime.dwHighDateTime=0x1cac6f0, nFileSizeHigh=0x0, nFileSizeLow=0x16c82)) returned 1 [0202.230] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ae50 | out: hHeap=0x1f0000) returned 1 [0202.230] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22aa90 [0202.230] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aa90 | out: hHeap=0x1f0000) returned 1 [0202.230] FindNextFileW (in: hFindFile=0x24e880, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x988a, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 1 [0202.230] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238618 [0202.230] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239668 [0202.231] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217650 [0202.231] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239668 | out: hHeap=0x1f0000) returned 1 [0202.231] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217550 | out: hHeap=0x1f0000) returned 1 [0202.231] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238618 | out: hHeap=0x1f0000) returned 1 [0202.231] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Extended\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\uiinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0202.231] GetFileType (hFile=0x214) returned 0x1 [0202.232] CloseHandle (hObject=0x214) returned 1 [0202.232] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c30 [0202.232] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Extended\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\uiinfo.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1cc | out: lpFileInformation=0x1fdf1cc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x988a)) returned 1 [0202.232] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c30 | out: hHeap=0x1f0000) returned 1 [0202.233] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c30 [0202.233] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Extended\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\uiinfo.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1d4 | out: lpFileInformation=0x1fdf1d4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x988a)) returned 1 [0202.234] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c30 | out: hHeap=0x1f0000) returned 1 [0202.234] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d68 [0202.234] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d68 | out: hHeap=0x1f0000) returned 1 [0202.234] FindNextFileW (in: hFindFile=0x24e880, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x988a, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 0 [0202.234] FindClose (in: hFindFile=0x24e880 | out: hFindFile=0x24e880) returned 1 [0202.234] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217650 | out: hHeap=0x1f0000) returned 1 [0202.234] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e4f8 | out: hHeap=0x1f0000) returned 1 [0202.234] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380f0 | out: hHeap=0x1f0000) returned 1 [0202.234] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2221c0 | out: hHeap=0x1f0000) returned 1 [0202.234] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221ef0 [0202.234] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380f0 [0202.234] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22ee88 [0202.234] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239a30 [0202.234] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\*", lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ec40 [0202.235] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239610 [0202.235] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239a30 | out: hHeap=0x1f0000) returned 1 [0202.235] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0202.235] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.235] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239ae0 [0202.235] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239610 | out: hHeap=0x1f0000) returned 1 [0202.235] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0202.235] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0202.235] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Print.ico", cAlternateFileName="")) returned 1 [0202.235] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238618 [0202.235] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2396c0 [0202.235] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x2177d0 [0202.235] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2396c0 | out: hHeap=0x1f0000) returned 1 [0202.235] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239ae0 | out: hHeap=0x1f0000) returned 1 [0202.235] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238618 | out: hHeap=0x1f0000) returned 1 [0202.236] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Print.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\print.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0202.236] GetFileType (hFile=0x214) returned 0x1 [0202.236] CloseHandle (hObject=0x214) returned 1 [0202.237] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c98 [0202.237] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Print.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\print.ico"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1cc | out: lpFileInformation=0x1fdf1cc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e)) returned 1 [0202.237] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c98 | out: hHeap=0x1f0000) returned 1 [0202.237] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214dd0 [0202.237] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Print.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\print.ico"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1d4 | out: lpFileInformation=0x1fdf1d4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e)) returned 1 [0202.237] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214dd0 | out: hHeap=0x1f0000) returned 1 [0202.237] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214dd0 [0202.237] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214dd0 | out: hHeap=0x1f0000) returned 1 [0202.237] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate1.ico", cAlternateFileName="")) returned 1 [0202.237] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238758 [0202.237] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239ae0 [0202.237] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217c50 [0202.237] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239ae0 | out: hHeap=0x1f0000) returned 1 [0202.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2177d0 | out: hHeap=0x1f0000) returned 1 [0202.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238758 | out: hHeap=0x1f0000) returned 1 [0202.238] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate1.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate1.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0202.238] GetFileType (hFile=0x214) returned 0x1 [0202.238] CloseHandle (hObject=0x214) returned 1 [0202.239] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214958 [0202.239] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate1.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate1.ico"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1cc | out: lpFileInformation=0x1fdf1cc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1 [0202.239] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214958 | out: hHeap=0x1f0000) returned 1 [0202.239] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c98 [0202.239] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate1.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate1.ico"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1d4 | out: lpFileInformation=0x1fdf1d4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1 [0202.239] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c98 | out: hHeap=0x1f0000) returned 1 [0202.239] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x215040 [0202.239] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215040 | out: hHeap=0x1f0000) returned 1 [0202.239] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate2.ico", cAlternateFileName="")) returned 1 [0202.239] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385a0 [0202.239] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239928 [0202.239] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217650 [0202.240] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239928 | out: hHeap=0x1f0000) returned 1 [0202.240] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217c50 | out: hHeap=0x1f0000) returned 1 [0202.240] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385a0 | out: hHeap=0x1f0000) returned 1 [0202.240] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate2.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate2.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0202.240] GetFileType (hFile=0x214) returned 0x1 [0202.240] CloseHandle (hObject=0x214) returned 1 [0202.240] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214fd8 [0202.241] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate2.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate2.ico"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1cc | out: lpFileInformation=0x1fdf1cc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1 [0202.241] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214fd8 | out: hHeap=0x1f0000) returned 1 [0202.241] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214e38 [0202.241] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate2.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate2.ico"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1d4 | out: lpFileInformation=0x1fdf1d4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1 [0202.241] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214e38 | out: hHeap=0x1f0000) returned 1 [0202.241] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214ea0 [0202.241] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214ea0 | out: hHeap=0x1f0000) returned 1 [0202.241] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate3.ico", cAlternateFileName="")) returned 1 [0202.241] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385a0 [0202.241] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239928 [0202.241] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x218150 [0202.241] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239928 | out: hHeap=0x1f0000) returned 1 [0202.241] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217650 | out: hHeap=0x1f0000) returned 1 [0202.241] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385a0 | out: hHeap=0x1f0000) returned 1 [0202.242] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate3.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate3.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0202.242] GetFileType (hFile=0x214) returned 0x1 [0202.242] CloseHandle (hObject=0x214) returned 1 [0202.242] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214ea0 [0202.242] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate3.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate3.ico"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1cc | out: lpFileInformation=0x1fdf1cc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1 [0202.243] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214ea0 | out: hHeap=0x1f0000) returned 1 [0202.243] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214bc8 [0202.243] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate3.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate3.ico"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1d4 | out: lpFileInformation=0x1fdf1d4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1 [0202.243] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214bc8 | out: hHeap=0x1f0000) returned 1 [0202.243] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a28 [0202.243] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a28 | out: hHeap=0x1f0000) returned 1 [0202.243] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate4.ico", cAlternateFileName="")) returned 1 [0202.243] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238708 [0202.243] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239ae0 [0202.243] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x218450 [0202.243] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239ae0 | out: hHeap=0x1f0000) returned 1 [0202.243] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218150 | out: hHeap=0x1f0000) returned 1 [0202.243] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238708 | out: hHeap=0x1f0000) returned 1 [0202.244] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate4.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate4.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0202.244] GetFileType (hFile=0x214) returned 0x1 [0202.244] CloseHandle (hObject=0x214) returned 1 [0202.244] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a28 [0202.244] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate4.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate4.ico"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1cc | out: lpFileInformation=0x1fdf1cc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1 [0202.244] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a28 | out: hHeap=0x1f0000) returned 1 [0202.244] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214e38 [0202.244] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate4.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate4.ico"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1d4 | out: lpFileInformation=0x1fdf1d4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1 [0202.244] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214e38 | out: hHeap=0x1f0000) returned 1 [0202.245] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214fd8 [0202.245] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214fd8 | out: hHeap=0x1f0000) returned 1 [0202.245] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate5.ico", cAlternateFileName="")) returned 1 [0202.245] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238708 [0202.245] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239ae0 [0202.245] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x218150 [0202.245] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239ae0 | out: hHeap=0x1f0000) returned 1 [0202.245] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218450 | out: hHeap=0x1f0000) returned 1 [0202.245] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238708 | out: hHeap=0x1f0000) returned 1 [0202.245] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate5.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate5.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0202.245] GetFileType (hFile=0x214) returned 0x1 [0202.246] CloseHandle (hObject=0x214) returned 1 [0202.246] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214e38 [0202.246] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate5.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate5.ico"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1cc | out: lpFileInformation=0x1fdf1cc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1 [0202.246] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214e38 | out: hHeap=0x1f0000) returned 1 [0202.246] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214b60 [0202.246] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate5.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate5.ico"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1d4 | out: lpFileInformation=0x1fdf1d4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1 [0202.246] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214b60 | out: hHeap=0x1f0000) returned 1 [0202.246] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214af8 [0202.246] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214af8 | out: hHeap=0x1f0000) returned 1 [0202.246] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate6.ico", cAlternateFileName="")) returned 1 [0202.246] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238708 [0202.247] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239718 [0202.247] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217550 [0202.247] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239718 | out: hHeap=0x1f0000) returned 1 [0202.247] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218150 | out: hHeap=0x1f0000) returned 1 [0202.247] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238708 | out: hHeap=0x1f0000) returned 1 [0202.247] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate6.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate6.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0202.247] GetFileType (hFile=0x214) returned 0x1 [0202.247] CloseHandle (hObject=0x214) returned 1 [0202.248] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214f70 [0202.248] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate6.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate6.ico"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1cc | out: lpFileInformation=0x1fdf1cc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1 [0202.248] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f70 | out: hHeap=0x1f0000) returned 1 [0202.248] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214ea0 [0202.248] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate6.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate6.ico"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1d4 | out: lpFileInformation=0x1fdf1d4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1 [0202.248] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214ea0 | out: hHeap=0x1f0000) returned 1 [0202.248] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d68 [0202.248] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d68 | out: hHeap=0x1f0000) returned 1 [0202.248] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate7.ico", cAlternateFileName="")) returned 1 [0202.248] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385a0 [0202.248] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239ae0 [0202.248] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x218150 [0202.249] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239ae0 | out: hHeap=0x1f0000) returned 1 [0202.249] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217550 | out: hHeap=0x1f0000) returned 1 [0202.249] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385a0 | out: hHeap=0x1f0000) returned 1 [0202.249] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate7.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate7.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0202.249] GetFileType (hFile=0x214) returned 0x1 [0202.249] CloseHandle (hObject=0x214) returned 1 [0202.250] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214f70 [0202.250] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate7.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate7.ico"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1cc | out: lpFileInformation=0x1fdf1cc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1 [0202.250] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f70 | out: hHeap=0x1f0000) returned 1 [0202.250] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2149c0 [0202.250] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate7.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate7.ico"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1d4 | out: lpFileInformation=0x1fdf1d4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1 [0202.250] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2149c0 | out: hHeap=0x1f0000) returned 1 [0202.250] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2149c0 [0202.250] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2149c0 | out: hHeap=0x1f0000) returned 1 [0202.250] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate8.ico", cAlternateFileName="")) returned 1 [0202.250] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384d8 [0202.250] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239a30 [0202.250] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217750 [0202.250] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239a30 | out: hHeap=0x1f0000) returned 1 [0202.251] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218150 | out: hHeap=0x1f0000) returned 1 [0202.251] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384d8 | out: hHeap=0x1f0000) returned 1 [0202.251] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate8.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate8.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0202.251] GetFileType (hFile=0x214) returned 0x1 [0202.251] CloseHandle (hObject=0x214) returned 1 [0202.252] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214e38 [0202.252] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate8.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate8.ico"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1cc | out: lpFileInformation=0x1fdf1cc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1 [0202.252] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214e38 | out: hHeap=0x1f0000) returned 1 [0202.252] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214ea0 [0202.252] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate8.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate8.ico"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1d4 | out: lpFileInformation=0x1fdf1d4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1 [0202.252] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214ea0 | out: hHeap=0x1f0000) returned 1 [0202.252] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214e38 [0202.252] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214e38 | out: hHeap=0x1f0000) returned 1 [0202.253] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Save.ico", cAlternateFileName="")) returned 1 [0202.253] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238708 [0202.253] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239400 [0202.253] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217ed0 [0202.253] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239400 | out: hHeap=0x1f0000) returned 1 [0202.253] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217750 | out: hHeap=0x1f0000) returned 1 [0202.253] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238708 | out: hHeap=0x1f0000) returned 1 [0202.253] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Save.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\save.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0202.254] GetFileType (hFile=0x214) returned 0x1 [0202.254] CloseHandle (hObject=0x214) returned 1 [0202.254] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2149c0 [0202.254] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Save.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\save.ico"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1cc | out: lpFileInformation=0x1fdf1cc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e)) returned 1 [0202.254] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2149c0 | out: hHeap=0x1f0000) returned 1 [0202.254] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214af8 [0202.254] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Save.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\save.ico"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1d4 | out: lpFileInformation=0x1fdf1d4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e)) returned 1 [0202.255] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214af8 | out: hHeap=0x1f0000) returned 1 [0202.255] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214e38 [0202.255] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214e38 | out: hHeap=0x1f0000) returned 1 [0202.255] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x8f66, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.ico", cAlternateFileName="")) returned 1 [0202.255] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238618 [0202.255] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239770 [0202.255] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x218250 [0202.255] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239770 | out: hHeap=0x1f0000) returned 1 [0202.255] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217ed0 | out: hHeap=0x1f0000) returned 1 [0202.255] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238618 | out: hHeap=0x1f0000) returned 1 [0202.256] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Setup.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\setup.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0202.256] GetFileType (hFile=0x214) returned 0x1 [0202.256] CloseHandle (hObject=0x214) returned 1 [0202.256] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2149c0 [0202.256] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Setup.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\setup.ico"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1cc | out: lpFileInformation=0x1fdf1cc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x8f66)) returned 1 [0202.256] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2149c0 | out: hHeap=0x1f0000) returned 1 [0202.257] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214b60 [0202.257] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Setup.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\setup.ico"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1d4 | out: lpFileInformation=0x1fdf1d4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x8f66)) returned 1 [0202.257] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214b60 | out: hHeap=0x1f0000) returned 1 [0202.257] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a90 [0202.257] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a90 | out: hHeap=0x1f0000) returned 1 [0202.257] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5b5e7f00, ftCreationTime.dwHighDateTime=0x1ca927c, ftLastAccessTime.dwLowDateTime=0x5b5e7f00, ftLastAccessTime.dwHighDateTime=0x1ca927c, ftLastWriteTime.dwLowDateTime=0x5b5e7f00, ftLastWriteTime.dwHighDateTime=0x1ca927c, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0x0, cFileName="stop.ico", cAlternateFileName="")) returned 1 [0202.257] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238708 [0202.257] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239668 [0202.257] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x2183d0 [0202.257] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239668 | out: hHeap=0x1f0000) returned 1 [0202.257] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218250 | out: hHeap=0x1f0000) returned 1 [0202.257] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238708 | out: hHeap=0x1f0000) returned 1 [0202.258] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\stop.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\stop.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0202.258] GetFileType (hFile=0x214) returned 0x1 [0202.258] CloseHandle (hObject=0x214) returned 1 [0202.259] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c98 [0202.259] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\stop.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\stop.ico"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1cc | out: lpFileInformation=0x1fdf1cc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5b5e7f00, ftCreationTime.dwHighDateTime=0x1ca927c, ftLastAccessTime.dwLowDateTime=0x5b5e7f00, ftLastAccessTime.dwHighDateTime=0x1ca927c, ftLastWriteTime.dwLowDateTime=0x5b5e7f00, ftLastWriteTime.dwHighDateTime=0x1ca927c, nFileSizeHigh=0x0, nFileSizeLow=0x2796)) returned 1 [0202.259] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c98 | out: hHeap=0x1f0000) returned 1 [0202.259] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214f70 [0202.259] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\stop.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\stop.ico"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1d4 | out: lpFileInformation=0x1fdf1d4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5b5e7f00, ftCreationTime.dwHighDateTime=0x1ca927c, ftLastAccessTime.dwLowDateTime=0x5b5e7f00, ftLastAccessTime.dwHighDateTime=0x1ca927c, ftLastWriteTime.dwLowDateTime=0x5b5e7f00, ftLastWriteTime.dwHighDateTime=0x1ca927c, nFileSizeHigh=0x0, nFileSizeLow=0x2796)) returned 1 [0202.259] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f70 | out: hHeap=0x1f0000) returned 1 [0202.259] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214bc8 [0202.259] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214bc8 | out: hHeap=0x1f0000) returned 1 [0202.259] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SysReqMet.ico", cAlternateFileName="SYSREQ~1.ICO")) returned 1 [0202.259] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238708 [0202.259] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239a30 [0202.259] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217b50 [0202.259] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239a30 | out: hHeap=0x1f0000) returned 1 [0202.260] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2183d0 | out: hHeap=0x1f0000) returned 1 [0202.260] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238708 | out: hHeap=0x1f0000) returned 1 [0202.260] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\SysReqMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqmet.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0202.260] GetFileType (hFile=0x214) returned 0x1 [0202.260] CloseHandle (hObject=0x214) returned 1 [0202.261] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214e38 [0202.261] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\SysReqMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqmet.ico"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1cc | out: lpFileInformation=0x1fdf1cc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e)) returned 1 [0202.261] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214e38 | out: hHeap=0x1f0000) returned 1 [0202.261] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a90 [0202.261] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\SysReqMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqmet.ico"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1d4 | out: lpFileInformation=0x1fdf1d4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e)) returned 1 [0202.261] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a90 | out: hHeap=0x1f0000) returned 1 [0202.261] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a90 [0202.261] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a90 | out: hHeap=0x1f0000) returned 1 [0202.261] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SysReqNotMet.ico", cAlternateFileName="SYSREQ~2.ICO")) returned 1 [0202.262] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0202.262] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239458 [0202.262] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217cd0 [0202.262] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239458 | out: hHeap=0x1f0000) returned 1 [0202.262] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217b50 | out: hHeap=0x1f0000) returned 1 [0202.262] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0202.263] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqnotmet.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0202.263] GetFileType (hFile=0x214) returned 0x1 [0202.263] CloseHandle (hObject=0x214) returned 1 [0202.428] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ab08 [0202.428] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqnotmet.ico"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1cc | out: lpFileInformation=0x1fdf1cc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e)) returned 1 [0202.428] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab08 | out: hHeap=0x1f0000) returned 1 [0202.428] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ae50 [0202.428] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqnotmet.ico"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1d4 | out: lpFileInformation=0x1fdf1d4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e)) returned 1 [0202.428] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ae50 | out: hHeap=0x1f0000) returned 1 [0202.428] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22aa90 [0202.428] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aa90 | out: hHeap=0x1f0000) returned 1 [0202.429] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0x0, cFileName="warn.ico", cAlternateFileName="")) returned 1 [0202.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385f0 [0202.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239458 [0202.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x218150 [0202.429] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239458 | out: hHeap=0x1f0000) returned 1 [0202.429] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217cd0 | out: hHeap=0x1f0000) returned 1 [0202.429] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385f0 | out: hHeap=0x1f0000) returned 1 [0202.429] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\warn.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\warn.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0202.429] GetFileType (hFile=0x214) returned 0x1 [0202.430] CloseHandle (hObject=0x214) returned 1 [0202.430] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214e38 [0202.430] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\warn.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\warn.ico"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1cc | out: lpFileInformation=0x1fdf1cc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x2796)) returned 1 [0202.430] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214e38 | out: hHeap=0x1f0000) returned 1 [0202.430] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214e38 [0202.430] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\warn.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\warn.ico"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1d4 | out: lpFileInformation=0x1fdf1d4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x2796)) returned 1 [0202.430] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214e38 | out: hHeap=0x1f0000) returned 1 [0202.430] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214dd0 [0202.430] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214dd0 | out: hHeap=0x1f0000) returned 1 [0202.430] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0x0, cFileName="warn.ico", cAlternateFileName="")) returned 0 [0202.430] FindClose (in: hFindFile=0x24ec40 | out: hFindFile=0x24ec40) returned 1 [0202.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218150 | out: hHeap=0x1f0000) returned 1 [0202.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ee88 | out: hHeap=0x1f0000) returned 1 [0202.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380f0 | out: hHeap=0x1f0000) returned 1 [0202.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221ef0 | out: hHeap=0x1f0000) returned 1 [0202.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a1c0 | out: hHeap=0x1f0000) returned 1 [0202.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2340c8 | out: hHeap=0x1f0000) returned 1 [0202.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234470 | out: hHeap=0x1f0000) returned 1 [0202.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233c90 | out: hHeap=0x1f0000) returned 1 [0202.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234110 | out: hHeap=0x1f0000) returned 1 [0202.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233df8 | out: hHeap=0x1f0000) returned 1 [0202.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234158 | out: hHeap=0x1f0000) returned 1 [0202.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233cd8 | out: hHeap=0x1f0000) returned 1 [0202.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233e40 | out: hHeap=0x1f0000) returned 1 [0202.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234038 | out: hHeap=0x1f0000) returned 1 [0202.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234350 | out: hHeap=0x1f0000) returned 1 [0202.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234428 | out: hHeap=0x1f0000) returned 1 [0202.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2341a0 | out: hHeap=0x1f0000) returned 1 [0202.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233c48 | out: hHeap=0x1f0000) returned 1 [0202.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233e88 | out: hHeap=0x1f0000) returned 1 [0202.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233ed0 | out: hHeap=0x1f0000) returned 1 [0202.432] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234278 | out: hHeap=0x1f0000) returned 1 [0202.432] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234398 | out: hHeap=0x1f0000) returned 1 [0202.432] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2342c0 | out: hHeap=0x1f0000) returned 1 [0202.432] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233f18 | out: hHeap=0x1f0000) returned 1 [0202.432] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233bb8 | out: hHeap=0x1f0000) returned 1 [0202.432] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233c00 | out: hHeap=0x1f0000) returned 1 [0202.432] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233f60 | out: hHeap=0x1f0000) returned 1 [0202.432] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234980 | out: hHeap=0x1f0000) returned 1 [0202.432] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234a10 | out: hHeap=0x1f0000) returned 1 [0202.432] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2349c8 | out: hHeap=0x1f0000) returned 1 [0202.432] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234860 | out: hHeap=0x1f0000) returned 1 [0202.432] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346f8 | out: hHeap=0x1f0000) returned 1 [0202.432] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234938 | out: hHeap=0x1f0000) returned 1 [0202.432] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230b90 | out: hHeap=0x1f0000) returned 1 [0202.432] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2271f0 | out: hHeap=0x1f0000) returned 1 [0202.432] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b9f8 | out: hHeap=0x1f0000) returned 1 [0202.432] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234308 | out: hHeap=0x1f0000) returned 1 [0202.432] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221ef0 [0202.432] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380f0 [0202.433] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e1c8 [0202.433] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238708 [0202.433] FindFirstFileW (in: lpFileName="C:\\\\Boot\\*", lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9d311c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef9d311c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ec80 [0202.433] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385a0 [0202.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238708 | out: hHeap=0x1f0000) returned 1 [0202.433] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0202.433] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9d311c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef9d311c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.433] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238708 [0202.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385a0 | out: hHeap=0x1f0000) returned 1 [0202.433] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0202.433] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0202.433] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xac3efa99, ftLastAccessTime.dwHighDateTime=0x1d4d5d3, ftLastWriteTime.dwLowDateTime=0xac3efa99, ftLastWriteTime.dwHighDateTime=0x1d4d5d3, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD", cAlternateFileName="")) returned 1 [0202.433] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238758 [0202.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238708 | out: hHeap=0x1f0000) returned 1 [0202.433] CreateFileW (lpFileName="C:\\\\Boot\\BCD" (normalized: "c:\\boot\\bcd"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.434] GetLastError () returned 0x20 [0202.434] GetLastError () returned 0x20 [0202.434] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG", cAlternateFileName="")) returned 1 [0202.434] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238708 [0202.434] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228150 [0202.434] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238708 | out: hHeap=0x1f0000) returned 1 [0202.434] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238758 | out: hHeap=0x1f0000) returned 1 [0202.434] CreateFileW (lpFileName="C:\\\\Boot\\BCD.LOG" (normalized: "c:\\boot\\bcd.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.435] GetLastError () returned 0x20 [0202.435] GetLastError () returned 0x20 [0202.435] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG1", cAlternateFileName="BCD~1.LOG")) returned 1 [0202.435] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238708 [0202.435] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238758 [0202.435] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227fc8 [0202.435] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238758 | out: hHeap=0x1f0000) returned 1 [0202.435] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228150 | out: hHeap=0x1f0000) returned 1 [0202.435] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238708 | out: hHeap=0x1f0000) returned 1 [0202.435] CreateFileW (lpFileName="C:\\\\Boot\\BCD.LOG1" (normalized: "c:\\boot\\bcd.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0202.435] GetFileType (hFile=0x214) returned 0x1 [0202.436] CloseHandle (hObject=0x214) returned 1 [0202.436] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0202.436] GetFileAttributesExW (in: lpFileName="C:\\\\Boot\\BCD.LOG1" (normalized: "c:\\boot\\bcd.log1"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0202.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0202.436] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228150 [0202.436] GetFileAttributesExW (in: lpFileName="C:\\\\Boot\\BCD.LOG1" (normalized: "c:\\boot\\bcd.log1"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0202.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228150 | out: hHeap=0x1f0000) returned 1 [0202.436] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0202.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0202.436] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG2", cAlternateFileName="BCD~2.LOG")) returned 1 [0202.436] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385a0 [0202.436] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385f0 [0202.436] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228150 [0202.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385f0 | out: hHeap=0x1f0000) returned 1 [0202.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227fc8 | out: hHeap=0x1f0000) returned 1 [0202.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385a0 | out: hHeap=0x1f0000) returned 1 [0202.437] CreateFileW (lpFileName="C:\\\\Boot\\BCD.LOG2" (normalized: "c:\\boot\\bcd.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0202.437] GetFileType (hFile=0x214) returned 0x1 [0202.437] CloseHandle (hObject=0x214) returned 1 [0202.437] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0202.437] GetFileAttributesExW (in: lpFileName="C:\\\\Boot\\BCD.LOG2" (normalized: "c:\\boot\\bcd.log2"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0202.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0202.437] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0202.438] GetFileAttributesExW (in: lpFileName="C:\\\\Boot\\BCD.LOG2" (normalized: "c:\\boot\\bcd.log2"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0202.438] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0202.438] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228230 [0202.438] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228230 | out: hHeap=0x1f0000) returned 1 [0202.438] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg-BG", cAlternateFileName="")) returned 1 [0202.438] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384d8 [0202.438] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228150 | out: hHeap=0x1f0000) returned 1 [0202.438] lstrcmpW (lpString1="bg-BG", lpString2=".") returned 1 [0202.438] lstrcmpW (lpString1="bg-BG", lpString2="..") returned 1 [0202.438] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204dd0 [0202.438] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238708 [0202.438] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef4e6d79, ftCreationTime.dwHighDateTime=0x1d3273d, ftLastAccessTime.dwLowDateTime=0xef4e6d79, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x175a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootspaces.dll", cAlternateFileName="BOOTSP~1.DLL")) returned 1 [0202.438] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238758 [0202.438] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385a0 [0202.438] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0202.438] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385a0 | out: hHeap=0x1f0000) returned 1 [0202.438] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384d8 | out: hHeap=0x1f0000) returned 1 [0202.438] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238758 | out: hHeap=0x1f0000) returned 1 [0202.439] CreateFileW (lpFileName="C:\\\\Boot\\bootspaces.dll" (normalized: "c:\\boot\\bootspaces.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.440] GetLastError () returned 0x5 [0202.440] GetLastError () returned 0x5 [0202.440] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xef703e94, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTSTAT.DAT", cAlternateFileName="")) returned 1 [0202.440] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238758 [0202.440] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384d8 [0202.440] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227fc8 [0202.440] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384d8 | out: hHeap=0x1f0000) returned 1 [0202.440] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0202.440] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238758 | out: hHeap=0x1f0000) returned 1 [0202.441] CreateFileW (lpFileName="C:\\\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0202.441] GetFileType (hFile=0x214) returned 0x1 [0202.441] CloseHandle (hObject=0x214) returned 1 [0202.441] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228150 [0202.442] GetFileAttributesExW (in: lpFileName="C:\\\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xef703e94, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1 [0202.442] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228150 | out: hHeap=0x1f0000) returned 1 [0202.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0202.442] GetFileAttributesExW (in: lpFileName="C:\\\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xef703e94, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1 [0202.442] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0202.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0202.442] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0202.442] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef4fcd12, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x185a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootvhd.dll", cAlternateFileName="")) returned 1 [0202.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238758 [0202.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385f0 [0202.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0202.442] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385f0 | out: hHeap=0x1f0000) returned 1 [0202.442] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227fc8 | out: hHeap=0x1f0000) returned 1 [0202.442] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238758 | out: hHeap=0x1f0000) returned 1 [0202.443] CreateFileW (lpFileName="C:\\\\Boot\\bootvhd.dll" (normalized: "c:\\boot\\bootvhd.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.443] GetLastError () returned 0x5 [0202.443] GetLastError () returned 0x5 [0202.443] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef511a4c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-CZ", cAlternateFileName="")) returned 1 [0202.443] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385a0 [0202.443] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0202.443] lstrcmpW (lpString1="cs-CZ", lpString2=".") returned 1 [0202.443] lstrcmpW (lpString1="cs-CZ", lpString2="..") returned 1 [0202.443] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227fc8 [0202.443] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384d8 [0202.443] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204dd0 | out: hHeap=0x1f0000) returned 1 [0202.443] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0008dbb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5252b3, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-DK", cAlternateFileName="")) returned 1 [0202.443] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385f0 [0202.443] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385a0 | out: hHeap=0x1f0000) returned 1 [0202.443] lstrcmpW (lpString1="da-DK", lpString2=".") returned 1 [0202.443] lstrcmpW (lpString1="da-DK", lpString2="..") returned 1 [0202.443] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x48) returned 0x225e78 [0202.444] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385a0 [0202.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227fc8 | out: hHeap=0x1f0000) returned 1 [0202.444] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0009692, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef538bee, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-DE", cAlternateFileName="")) returned 1 [0202.444] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238618 [0202.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385f0 | out: hHeap=0x1f0000) returned 1 [0202.444] lstrcmpW (lpString1="de-DE", lpString2=".") returned 1 [0202.444] lstrcmpW (lpString1="de-DE", lpString2="..") returned 1 [0202.444] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214b60 [0202.444] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385f0 [0202.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225e78 | out: hHeap=0x1f0000) returned 1 [0202.444] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef555ff8, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el-GR", cAlternateFileName="")) returned 1 [0202.444] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238758 [0202.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238618 | out: hHeap=0x1f0000) returned 1 [0202.444] lstrcmpW (lpString1="el-GR", lpString2=".") returned 1 [0202.444] lstrcmpW (lpString1="el-GR", lpString2="..") returned 1 [0202.444] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0202.444] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238618 [0202.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214b60 | out: hHeap=0x1f0000) returned 1 [0202.445] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc482dc87, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-GB", cAlternateFileName="")) returned 1 [0202.445] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0202.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238758 | out: hHeap=0x1f0000) returned 1 [0202.445] lstrcmpW (lpString1="en-GB", lpString2=".") returned 1 [0202.445] lstrcmpW (lpString1="en-GB", lpString2="..") returned 1 [0202.445] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0202.445] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef57d0f5, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0202.445] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0202.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0202.445] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0202.445] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0202.445] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd8) returned 0x229528 [0202.445] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0202.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0202.445] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000b9ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef586d37, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-ES", cAlternateFileName="")) returned 1 [0202.445] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604c8 [0202.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0202.445] lstrcmpW (lpString1="es-ES", lpString2=".") returned 1 [0202.445] lstrcmpW (lpString1="es-ES", lpString2="..") returned 1 [0202.445] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0202.445] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000c12e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc4853f40, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-MX", cAlternateFileName="")) returned 1 [0202.446] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606f8 [0202.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604c8 | out: hHeap=0x1f0000) returned 1 [0202.446] lstrcmpW (lpString1="es-MX", lpString2=".") returned 1 [0202.446] lstrcmpW (lpString1="es-MX", lpString2="..") returned 1 [0202.446] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0202.446] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc487a0b9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et-EE", cAlternateFileName="")) returned 1 [0202.446] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2607c0 [0202.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606f8 | out: hHeap=0x1f0000) returned 1 [0202.446] lstrcmpW (lpString1="et-EE", lpString2=".") returned 1 [0202.446] lstrcmpW (lpString1="et-EE", lpString2="..") returned 1 [0202.446] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x138) returned 0x260188 [0202.446] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605b8 [0202.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229528 | out: hHeap=0x1f0000) returned 1 [0202.446] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000cf3a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef59a5b1, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-FI", cAlternateFileName="")) returned 1 [0202.446] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260720 [0202.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607c0 | out: hHeap=0x1f0000) returned 1 [0202.446] lstrcmpW (lpString1="fi-FI", lpString2=".") returned 1 [0202.446] lstrcmpW (lpString1="fi-FI", lpString2="..") returned 1 [0202.446] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609a0 [0202.446] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0109451, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef999ae4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 1 [0202.446] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0202.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260720 | out: hHeap=0x1f0000) returned 1 [0202.446] lstrcmpW (lpString1="Fonts", lpString2=".") returned 1 [0202.447] lstrcmpW (lpString1="Fonts", lpString2="..") returned 1 [0202.447] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606f8 [0202.447] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-CA", cAlternateFileName="")) returned 1 [0202.447] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608b0 [0202.447] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0202.447] lstrcmpW (lpString1="fr-CA", lpString2=".") returned 1 [0202.447] lstrcmpW (lpString1="fr-CA", lpString2="..") returned 1 [0202.447] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604c8 [0202.447] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010bc12, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ade2b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-FR", cAlternateFileName="")) returned 1 [0202.447] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0202.447] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608b0 | out: hHeap=0x1f0000) returned 1 [0202.447] lstrcmpW (lpString1="fr-FR", lpString2=".") returned 1 [0202.447] lstrcmpW (lpString1="fr-FR", lpString2="..") returned 1 [0202.447] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c8) returned 0x25fd40 [0202.447] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260720 [0202.447] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260188 | out: hHeap=0x1f0000) returned 1 [0202.447] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-HR", cAlternateFileName="")) returned 1 [0202.447] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605e0 [0202.447] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0202.447] lstrcmpW (lpString1="hr-HR", lpString2=".") returned 1 [0202.447] lstrcmpW (lpString1="hr-HR", lpString2="..") returned 1 [0202.447] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608b0 [0202.447] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010c5ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5c171b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-HU", cAlternateFileName="")) returned 1 [0202.447] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0202.448] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605e0 | out: hHeap=0x1f0000) returned 1 [0202.448] lstrcmpW (lpString1="hu-HU", lpString2=".") returned 1 [0202.448] lstrcmpW (lpString1="hu-HU", lpString2="..") returned 1 [0202.448] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0202.448] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010ccad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5d8ab4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-IT", cAlternateFileName="")) returned 1 [0202.448] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0202.448] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0202.448] lstrcmpW (lpString1="it-IT", lpString2=".") returned 1 [0202.448] lstrcmpW (lpString1="it-IT", lpString2="..") returned 1 [0202.448] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0202.448] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010d0c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ed6c6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-JP", cAlternateFileName="")) returned 1 [0202.448] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605e0 [0202.448] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0202.448] lstrcmpW (lpString1="ja-JP", lpString2=".") returned 1 [0202.448] lstrcmpW (lpString1="ja-JP", lpString2="..") returned 1 [0202.448] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260658 [0202.448] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef5fc210, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-KR", cAlternateFileName="")) returned 1 [0202.448] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0202.448] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605e0 | out: hHeap=0x1f0000) returned 1 [0202.448] lstrcmpW (lpString1="ko-KR", lpString2=".") returned 1 [0202.448] lstrcmpW (lpString1="ko-KR", lpString2="..") returned 1 [0202.448] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260770 [0202.448] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt-LT", cAlternateFileName="")) returned 1 [0202.448] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260540 [0202.448] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0202.449] lstrcmpW (lpString1="lt-LT", lpString2=".") returned 1 [0202.449] lstrcmpW (lpString1="lt-LT", lpString2="..") returned 1 [0202.449] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2a0) returned 0x20d888 [0202.449] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260888 [0202.449] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25fd40 | out: hHeap=0x1f0000) returned 1 [0202.449] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv-LV", cAlternateFileName="")) returned 1 [0202.449] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605e0 [0202.449] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0202.449] lstrcmpW (lpString1="lv-LV", lpString2=".") returned 1 [0202.449] lstrcmpW (lpString1="lv-LV", lpString2="..") returned 1 [0202.449] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260798 [0202.449] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6196d8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfbcf473f, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0xc63a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe", cAlternateFileName="")) returned 1 [0202.449] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0202.449] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0202.449] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0202.449] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0202.449] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605e0 | out: hHeap=0x1f0000) returned 1 [0202.449] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0202.449] CreateFileW (lpFileName="C:\\\\Boot\\memtest.exe" (normalized: "c:\\boot\\memtest.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.450] GetLastError () returned 0x5 [0202.450] GetLastError () returned 0x5 [0202.450] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e138, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef62cf52, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-NO", cAlternateFileName="")) returned 1 [0202.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260838 [0202.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0202.450] lstrcmpW (lpString1="nb-NO", lpString2=".") returned 1 [0202.450] lstrcmpW (lpString1="nb-NO", lpString2="..") returned 1 [0202.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260540 [0202.450] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e4fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6407cf, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-NL", cAlternateFileName="")) returned 1 [0202.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605e0 [0202.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260838 | out: hHeap=0x1f0000) returned 1 [0202.450] lstrcmpW (lpString1="nl-NL", lpString2=".") returned 1 [0202.450] lstrcmpW (lpString1="nl-NL", lpString2="..") returned 1 [0202.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2607c0 [0202.450] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef65403a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-PL", cAlternateFileName="")) returned 1 [0202.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0202.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605e0 | out: hHeap=0x1f0000) returned 1 [0202.450] lstrcmpW (lpString1="pl-PL", lpString2=".") returned 1 [0202.450] lstrcmpW (lpString1="pl-PL", lpString2="..") returned 1 [0202.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260518 [0202.450] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6678d6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6678d6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-BR", cAlternateFileName="")) returned 1 [0202.451] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0202.451] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0202.451] lstrcmpW (lpString1="pt-BR", lpString2=".") returned 1 [0202.451] lstrcmpW (lpString1="pt-BR", lpString2="..") returned 1 [0202.451] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0202.451] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f167, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6714dc, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-PT", cAlternateFileName="")) returned 1 [0202.451] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0202.451] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0202.451] lstrcmpW (lpString1="pt-PT", lpString2=".") returned 1 [0202.451] lstrcmpW (lpString1="pt-PT", lpString2="..") returned 1 [0202.451] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2607e8 [0202.451] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f640, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef684d85, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="qps-ploc", cAlternateFileName="")) returned 1 [0202.451] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605e0 [0202.451] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260838 [0202.451] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228150 [0202.451] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260838 | out: hHeap=0x1f0000) returned 1 [0202.451] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0202.451] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605e0 | out: hHeap=0x1f0000) returned 1 [0202.451] lstrcmpW (lpString1="qps-ploc", lpString2=".") returned 1 [0202.451] lstrcmpW (lpString1="qps-ploc", lpString2="..") returned 1 [0202.451] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228230 [0202.451] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ab61e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9abff9, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resources", cAlternateFileName="RESOUR~1")) returned 1 [0202.451] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0202.452] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260900 [0202.452] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0202.452] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260900 | out: hHeap=0x1f0000) returned 1 [0202.452] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228150 | out: hHeap=0x1f0000) returned 1 [0202.452] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0202.452] lstrcmpW (lpString1="Resources", lpString2=".") returned 1 [0202.452] lstrcmpW (lpString1="Resources", lpString2="..") returned 1 [0202.452] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228150 [0202.452] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-RO", cAlternateFileName="")) returned 1 [0202.452] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0202.452] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0202.452] lstrcmpW (lpString1="ro-RO", lpString2=".") returned 1 [0202.452] lstrcmpW (lpString1="ro-RO", lpString2="..") returned 1 [0202.452] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3f0) returned 0x222ee8 [0202.452] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260838 [0202.452] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20d888 | out: hHeap=0x1f0000) returned 1 [0202.452] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef698608, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-RU", cAlternateFileName="")) returned 1 [0202.452] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0202.452] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0202.452] lstrcmpW (lpString1="ru-RU", lpString2=".") returned 1 [0202.452] lstrcmpW (lpString1="ru-RU", lpString2="..") returned 1 [0202.453] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0202.453] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-SK", cAlternateFileName="")) returned 1 [0202.453] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260900 [0202.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0202.453] lstrcmpW (lpString1="sk-SK", lpString2=".") returned 1 [0202.453] lstrcmpW (lpString1="sk-SK", lpString2="..") returned 1 [0202.453] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605e0 [0202.453] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-SI", cAlternateFileName="")) returned 1 [0202.453] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0202.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260900 | out: hHeap=0x1f0000) returned 1 [0202.453] lstrcmpW (lpString1="sl-SI", lpString2=".") returned 1 [0202.453] lstrcmpW (lpString1="sl-SI", lpString2="..") returned 1 [0202.453] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260900 [0202.453] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0x5168548b, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-Latn-CS", cAlternateFileName="SR-LAT~1")) returned 1 [0202.453] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260630 [0202.453] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0202.453] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0202.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0202.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0202.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260630 | out: hHeap=0x1f0000) returned 1 [0202.454] lstrcmpW (lpString1="sr-Latn-CS", lpString2=".") returned 1 [0202.454] lstrcmpW (lpString1="sr-Latn-CS", lpString2="..") returned 1 [0202.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227fc8 [0202.454] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-Latn-RS", cAlternateFileName="SR-LAT~2")) returned 1 [0202.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0202.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0202.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf70 [0202.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0202.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0202.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0202.454] lstrcmpW (lpString1="sr-Latn-RS", lpString2=".") returned 1 [0202.454] lstrcmpW (lpString1="sr-Latn-RS", lpString2="..") returned 1 [0202.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0202.454] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01adf43, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6a2250, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-SE", cAlternateFileName="")) returned 1 [0202.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0202.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf70 | out: hHeap=0x1f0000) returned 1 [0202.454] lstrcmpW (lpString1="sv-SE", lpString2=".") returned 1 [0202.454] lstrcmpW (lpString1="sv-SE", lpString2="..") returned 1 [0202.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0202.454] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206504, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6b5aca, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-TR", cAlternateFileName="")) returned 1 [0202.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0202.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0202.455] lstrcmpW (lpString1="tr-TR", lpString2=".") returned 1 [0202.455] lstrcmpW (lpString1="tr-TR", lpString2="..") returned 1 [0202.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0202.455] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206a30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk-UA", cAlternateFileName="")) returned 1 [0202.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0202.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0202.455] lstrcmpW (lpString1="uk-UA", lpString2=".") returned 1 [0202.455] lstrcmpW (lpString1="uk-UA", lpString2="..") returned 1 [0202.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260630 [0202.455] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef6c9427, ftCreationTime.dwHighDateTime=0x1d3273d, ftLastAccessTime.dwLowDateTime=0xef6c9427, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x1236, dwReserved0=0x0, dwReserved1=0x0, cFileName="updaterevokesipolicy.p7b", cAlternateFileName="UPDATE~1.P7B")) returned 1 [0202.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2221c0 [0202.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0202.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239400 [0202.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0202.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0202.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2221c0 | out: hHeap=0x1f0000) returned 1 [0202.456] CreateFileW (lpFileName="C:\\\\Boot\\updaterevokesipolicy.p7b" (normalized: "c:\\boot\\updaterevokesipolicy.p7b"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.456] GetLastError () returned 0x5 [0202.456] GetLastError () returned 0x5 [0202.456] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207100, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6d7e9a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CN", cAlternateFileName="")) returned 1 [0202.456] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0202.456] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239400 | out: hHeap=0x1f0000) returned 1 [0202.456] lstrcmpW (lpString1="zh-CN", lpString2=".") returned 1 [0202.456] lstrcmpW (lpString1="zh-CN", lpString2="..") returned 1 [0202.456] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0202.457] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207675, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x518ea25e, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-HK", cAlternateFileName="")) returned 1 [0202.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0202.457] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0202.457] lstrcmpW (lpString1="zh-HK", lpString2=".") returned 1 [0202.457] lstrcmpW (lpString1="zh-HK", lpString2="..") returned 1 [0202.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0202.457] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 1 [0202.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a68 [0202.457] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0202.457] lstrcmpW (lpString1="zh-TW", lpString2=".") returned 1 [0202.457] lstrcmpW (lpString1="zh-TW", lpString2="..") returned 1 [0202.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0202.457] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 0 [0202.457] FindClose (in: hFindFile=0x24ec80 | out: hFindFile=0x24ec80) returned 1 [0202.458] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2221c0 [0202.458] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c20 [0202.458] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22eb58 [0202.458] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d280 [0202.458] FindFirstFileW (in: lpFileName="C:\\\\Boot\\bg-BG\\*", lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e900 [0202.458] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a18 [0202.458] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2f0 [0202.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a18 | out: hHeap=0x1f0000) returned 1 [0202.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d280 | out: hHeap=0x1f0000) returned 1 [0202.458] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0202.458] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.458] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c70 [0202.458] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf38 [0202.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c70 | out: hHeap=0x1f0000) returned 1 [0202.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0202.459] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0202.459] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0202.459] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210bba74, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0202.459] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a18 [0202.459] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b08 [0202.459] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222b08 [0202.459] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b08 | out: hHeap=0x1f0000) returned 1 [0202.459] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf38 | out: hHeap=0x1f0000) returned 1 [0202.459] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a18 | out: hHeap=0x1f0000) returned 1 [0202.459] CreateFileW (lpFileName="C:\\\\Boot\\bg-BG\\bootmgr.exe.mui" (normalized: "c:\\boot\\bg-bg\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.459] GetLastError () returned 0x5 [0202.459] GetLastError () returned 0x5 [0202.459] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210bba74, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0202.459] FindClose (in: hFindFile=0x24e900 | out: hFindFile=0x24e900) returned 1 [0202.460] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222b08 | out: hHeap=0x1f0000) returned 1 [0202.460] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22eb58 | out: hHeap=0x1f0000) returned 1 [0202.460] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c20 | out: hHeap=0x1f0000) returned 1 [0202.460] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2221c0 | out: hHeap=0x1f0000) returned 1 [0202.460] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2221c0 [0202.460] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0202.460] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f020 [0202.460] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d280 [0202.460] FindFirstFileW (in: lpFileName="C:\\\\Boot\\cs-CZ\\*", lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef511a4c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24eb40 [0202.461] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a90 [0202.461] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf38 [0202.461] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a90 | out: hHeap=0x1f0000) returned 1 [0202.461] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d280 | out: hHeap=0x1f0000) returned 1 [0202.461] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0202.461] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef511a4c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.461] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0202.461] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d280 [0202.461] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0202.461] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf38 | out: hHeap=0x1f0000) returned 1 [0202.461] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0202.461] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0202.461] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47e189c, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2109581d, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0202.461] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b08 [0202.461] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609c8 [0202.461] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2229e8 [0202.462] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609c8 | out: hHeap=0x1f0000) returned 1 [0202.462] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d280 | out: hHeap=0x1f0000) returned 1 [0202.462] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b08 | out: hHeap=0x1f0000) returned 1 [0202.462] CreateFileW (lpFileName="C:\\\\Boot\\cs-CZ\\bootmgr.exe.mui" (normalized: "c:\\boot\\cs-cz\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.462] GetLastError () returned 0x5 [0202.462] GetLastError () returned 0x5 [0202.462] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f1d4cf, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0202.462] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609c8 [0202.462] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bd0 [0202.462] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222a30 [0202.462] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bd0 | out: hHeap=0x1f0000) returned 1 [0202.462] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2229e8 | out: hHeap=0x1f0000) returned 1 [0202.463] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609c8 | out: hHeap=0x1f0000) returned 1 [0202.463] CreateFileW (lpFileName="C:\\\\Boot\\cs-CZ\\memtest.exe.mui" (normalized: "c:\\boot\\cs-cz\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.463] GetLastError () returned 0x5 [0202.463] GetLastError () returned 0x5 [0202.463] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f1d4cf, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0202.463] FindClose (in: hFindFile=0x24eb40 | out: hFindFile=0x24eb40) returned 1 [0202.463] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222a30 | out: hHeap=0x1f0000) returned 1 [0202.463] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f020 | out: hHeap=0x1f0000) returned 1 [0202.463] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0202.464] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2221c0 | out: hHeap=0x1f0000) returned 1 [0202.464] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2221c0 [0202.464] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c48 [0202.464] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22eb58 [0202.464] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf38 [0202.464] FindFirstFileW (in: lpFileName="C:\\\\Boot\\da-DK\\*", lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0008dbb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5252b3, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24eb40 [0202.464] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609f0 [0202.464] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf70 [0202.464] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609f0 | out: hHeap=0x1f0000) returned 1 [0202.464] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf38 | out: hHeap=0x1f0000) returned 1 [0202.464] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0202.464] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0008dbb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5252b3, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.464] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609c8 [0202.464] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d280 [0202.465] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609c8 | out: hHeap=0x1f0000) returned 1 [0202.465] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf70 | out: hHeap=0x1f0000) returned 1 [0202.465] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0202.465] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0202.465] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47e189c, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12760, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0202.465] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a18 [0202.465] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c70 [0202.465] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222a30 [0202.465] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c70 | out: hHeap=0x1f0000) returned 1 [0202.465] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d280 | out: hHeap=0x1f0000) returned 1 [0202.465] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a18 | out: hHeap=0x1f0000) returned 1 [0202.465] CreateFileW (lpFileName="C:\\\\Boot\\da-DK\\bootmgr.exe.mui" (normalized: "c:\\boot\\da-dk\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.466] GetLastError () returned 0x5 [0202.466] GetLastError () returned 0x5 [0202.466] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5252b3, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2ef7268, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0202.466] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ba8 [0202.466] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0202.466] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222b08 [0202.466] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0202.466] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222a30 | out: hHeap=0x1f0000) returned 1 [0202.466] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ba8 | out: hHeap=0x1f0000) returned 1 [0202.466] CreateFileW (lpFileName="C:\\\\Boot\\da-DK\\memtest.exe.mui" (normalized: "c:\\boot\\da-dk\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.467] GetLastError () returned 0x5 [0202.467] GetLastError () returned 0x5 [0202.467] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5252b3, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2ef7268, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0202.467] FindClose (in: hFindFile=0x24eb40 | out: hFindFile=0x24eb40) returned 1 [0202.467] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222b08 | out: hHeap=0x1f0000) returned 1 [0202.467] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22eb58 | out: hHeap=0x1f0000) returned 1 [0202.467] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0202.467] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2221c0 | out: hHeap=0x1f0000) returned 1 [0202.467] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2221c0 [0202.467] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b80 [0202.467] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e360 [0202.467] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf38 [0202.467] FindFirstFileW (in: lpFileName="C:\\\\Boot\\de-DE\\*", lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0009692, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef538bee, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e780 [0202.467] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bd0 [0202.468] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d280 [0202.468] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bd0 | out: hHeap=0x1f0000) returned 1 [0202.468] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf38 | out: hHeap=0x1f0000) returned 1 [0202.468] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0202.468] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0009692, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef538bee, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.468] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b08 [0202.468] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2f0 [0202.468] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b08 | out: hHeap=0x1f0000) returned 1 [0202.468] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d280 | out: hHeap=0x1f0000) returned 1 [0202.468] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0202.468] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0202.468] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48079da, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13560, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0202.468] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0202.468] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609f0 [0202.468] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2225f8 [0202.468] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609f0 | out: hHeap=0x1f0000) returned 1 [0202.468] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0202.468] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0202.469] CreateFileW (lpFileName="C:\\\\Boot\\de-DE\\bootmgr.exe.mui" (normalized: "c:\\boot\\de-de\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.469] GetLastError () returned 0x5 [0202.469] GetLastError () returned 0x5 [0202.469] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef538bee, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2ef7268, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0202.469] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bd0 [0202.469] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0202.469] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2229e8 [0202.469] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0202.469] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2225f8 | out: hHeap=0x1f0000) returned 1 [0202.469] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bd0 | out: hHeap=0x1f0000) returned 1 [0202.470] CreateFileW (lpFileName="C:\\\\Boot\\de-DE\\memtest.exe.mui" (normalized: "c:\\boot\\de-de\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.470] GetLastError () returned 0x5 [0202.470] GetLastError () returned 0x5 [0202.470] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef538bee, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2ef7268, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0202.470] FindClose (in: hFindFile=0x24e780 | out: hFindFile=0x24e780) returned 1 [0202.470] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2229e8 | out: hHeap=0x1f0000) returned 1 [0202.470] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e360 | out: hHeap=0x1f0000) returned 1 [0202.470] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b80 | out: hHeap=0x1f0000) returned 1 [0202.470] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2221c0 | out: hHeap=0x1f0000) returned 1 [0202.470] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2221c0 [0202.471] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ab8 [0202.471] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e360 [0202.471] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf38 [0202.471] FindFirstFileW (in: lpFileName="C:\\\\Boot\\el-GR\\*", lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef555ff8, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ebc0 [0202.471] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ae0 [0202.471] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d280 [0202.471] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ae0 | out: hHeap=0x1f0000) returned 1 [0202.471] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf38 | out: hHeap=0x1f0000) returned 1 [0202.471] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0202.471] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef555ff8, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.471] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ae0 [0202.471] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf38 [0202.471] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ae0 | out: hHeap=0x1f0000) returned 1 [0202.471] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d280 | out: hHeap=0x1f0000) returned 1 [0202.471] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0202.472] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0202.472] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13960, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0202.472] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b80 [0202.472] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b58 [0202.472] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2229e8 [0202.472] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b58 | out: hHeap=0x1f0000) returned 1 [0202.472] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf38 | out: hHeap=0x1f0000) returned 1 [0202.652] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b80 | out: hHeap=0x1f0000) returned 1 [0202.653] CreateFileW (lpFileName="C:\\\\Boot\\el-GR\\bootmgr.exe.mui" (normalized: "c:\\boot\\el-gr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.653] GetLastError () returned 0x5 [0202.653] GetLastError () returned 0x5 [0202.653] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb5a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0202.653] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0202.653] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a18 [0202.653] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233c48 [0202.653] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a18 | out: hHeap=0x1f0000) returned 1 [0202.653] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2229e8 | out: hHeap=0x1f0000) returned 1 [0202.653] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0202.654] CreateFileW (lpFileName="C:\\\\Boot\\el-GR\\memtest.exe.mui" (normalized: "c:\\boot\\el-gr\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.654] GetLastError () returned 0x5 [0202.654] GetLastError () returned 0x5 [0202.654] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb5a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0202.654] FindClose (in: hFindFile=0x24ebc0 | out: hFindFile=0x24ebc0) returned 1 [0202.654] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233c48 | out: hHeap=0x1f0000) returned 1 [0202.654] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e360 | out: hHeap=0x1f0000) returned 1 [0202.654] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ab8 | out: hHeap=0x1f0000) returned 1 [0202.654] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2221c0 | out: hHeap=0x1f0000) returned 1 [0202.654] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234470 [0202.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a90 [0202.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e9c0 [0202.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2f0 [0202.655] FindFirstFileW (in: lpFileName="C:\\\\Boot\\en-GB\\*", lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc482dc87, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e780 [0202.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ae0 [0202.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf38 [0202.655] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ae0 | out: hHeap=0x1f0000) returned 1 [0202.655] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0202.655] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0202.655] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc482dc87, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b08 [0202.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2f0 [0202.655] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b08 | out: hHeap=0x1f0000) returned 1 [0202.655] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf38 | out: hHeap=0x1f0000) returned 1 [0202.655] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0202.655] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0202.655] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12158, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0202.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a18 [0202.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b80 [0202.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234308 [0202.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b80 | out: hHeap=0x1f0000) returned 1 [0202.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0202.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a18 | out: hHeap=0x1f0000) returned 1 [0202.656] CreateFileW (lpFileName="C:\\\\Boot\\en-GB\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-gb\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.656] GetLastError () returned 0x5 [0202.656] GetLastError () returned 0x5 [0202.656] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12158, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0202.656] FindClose (in: hFindFile=0x24e780 | out: hFindFile=0x24e780) returned 1 [0202.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234308 | out: hHeap=0x1f0000) returned 1 [0202.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e9c0 | out: hHeap=0x1f0000) returned 1 [0202.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a90 | out: hHeap=0x1f0000) returned 1 [0202.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234470 | out: hHeap=0x1f0000) returned 1 [0202.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233c48 [0202.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a90 [0202.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e360 [0202.657] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2f0 [0202.657] FindFirstFileW (in: lpFileName="C:\\\\Boot\\en-US\\*", lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef57d0f5, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ec80 [0202.657] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a18 [0202.657] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf38 [0202.657] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a18 | out: hHeap=0x1f0000) returned 1 [0202.657] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0202.657] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0202.657] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef57d0f5, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.657] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b58 [0202.657] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2f0 [0202.657] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b58 | out: hHeap=0x1f0000) returned 1 [0202.657] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf38 | out: hHeap=0x1f0000) returned 1 [0202.657] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0202.657] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0202.657] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef569843, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0x327294d0, ftLastWriteTime.dwHighDateTime=0x1d2a030, nFileSizeHigh=0x0, nFileSizeLow=0x121a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0202.657] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b30 [0202.657] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ba8 [0202.657] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234110 [0202.657] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ba8 | out: hHeap=0x1f0000) returned 1 [0202.657] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0202.658] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b30 | out: hHeap=0x1f0000) returned 1 [0202.658] CreateFileW (lpFileName="C:\\\\Boot\\en-US\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-us\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.658] GetLastError () returned 0x5 [0202.658] GetLastError () returned 0x5 [0202.658] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xafa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0202.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c20 [0202.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b30 [0202.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234080 [0202.658] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b30 | out: hHeap=0x1f0000) returned 1 [0202.658] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234110 | out: hHeap=0x1f0000) returned 1 [0202.658] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c20 | out: hHeap=0x1f0000) returned 1 [0202.658] CreateFileW (lpFileName="C:\\\\Boot\\en-US\\memtest.exe.mui" (normalized: "c:\\boot\\en-us\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.658] GetLastError () returned 0x5 [0202.658] GetLastError () returned 0x5 [0202.659] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xafa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0202.659] FindClose (in: hFindFile=0x24ec80 | out: hFindFile=0x24ec80) returned 1 [0202.659] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234080 | out: hHeap=0x1f0000) returned 1 [0202.659] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e360 | out: hHeap=0x1f0000) returned 1 [0202.659] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a90 | out: hHeap=0x1f0000) returned 1 [0202.659] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233c48 | out: hHeap=0x1f0000) returned 1 [0202.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234398 [0202.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b30 [0202.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e4f8 [0202.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf38 [0202.659] FindFirstFileW (in: lpFileName="C:\\\\Boot\\es-ES\\*", lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000b9ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef586d37, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e700 [0202.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ba8 [0202.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf70 [0202.659] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ba8 | out: hHeap=0x1f0000) returned 1 [0202.659] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf38 | out: hHeap=0x1f0000) returned 1 [0202.659] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0202.659] FindNextFileW (in: hFindFile=0x24e700, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000b9ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef586d37, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609c8 [0202.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf38 [0202.660] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609c8 | out: hHeap=0x1f0000) returned 1 [0202.660] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf70 | out: hHeap=0x1f0000) returned 1 [0202.660] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0202.660] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0202.660] FindNextFileW (in: hFindFile=0x24e700, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4853f40, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0202.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a90 [0202.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0202.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234428 [0202.660] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0202.660] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf38 | out: hHeap=0x1f0000) returned 1 [0202.660] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a90 | out: hHeap=0x1f0000) returned 1 [0202.660] CreateFileW (lpFileName="C:\\\\Boot\\es-ES\\bootmgr.exe.mui" (normalized: "c:\\boot\\es-es\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.660] GetLastError () returned 0x5 [0202.660] GetLastError () returned 0x5 [0202.660] FindNextFileW (in: hFindFile=0x24e700, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef586d37, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0202.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ae0 [0202.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a90 [0202.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233f60 [0202.660] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a90 | out: hHeap=0x1f0000) returned 1 [0202.660] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234428 | out: hHeap=0x1f0000) returned 1 [0202.661] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ae0 | out: hHeap=0x1f0000) returned 1 [0202.661] CreateFileW (lpFileName="C:\\\\Boot\\es-ES\\memtest.exe.mui" (normalized: "c:\\boot\\es-es\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.661] GetLastError () returned 0x5 [0202.661] GetLastError () returned 0x5 [0202.661] FindNextFileW (in: hFindFile=0x24e700, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef586d37, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0202.661] FindClose (in: hFindFile=0x24e700 | out: hFindFile=0x24e700) returned 1 [0202.661] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233f60 | out: hHeap=0x1f0000) returned 1 [0202.661] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e4f8 | out: hHeap=0x1f0000) returned 1 [0202.661] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b30 | out: hHeap=0x1f0000) returned 1 [0202.661] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234398 | out: hHeap=0x1f0000) returned 1 [0202.661] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233d20 [0202.661] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b58 [0202.661] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22ee88 [0202.662] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf38 [0202.662] FindFirstFileW (in: lpFileName="C:\\\\Boot\\es-MX\\*", lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000c12e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc4853f40, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ebc0 [0202.662] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b30 [0202.662] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf70 [0202.662] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b30 | out: hHeap=0x1f0000) returned 1 [0202.662] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf38 | out: hHeap=0x1f0000) returned 1 [0202.662] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0202.662] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000c12e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc4853f40, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.662] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b08 [0202.662] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2f0 [0202.662] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b08 | out: hHeap=0x1f0000) returned 1 [0202.662] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf70 | out: hHeap=0x1f0000) returned 1 [0202.662] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0202.662] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0202.662] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4853f40, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0202.662] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ae0 [0202.662] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b08 [0202.662] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233c48 [0202.662] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b08 | out: hHeap=0x1f0000) returned 1 [0202.663] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0202.663] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ae0 | out: hHeap=0x1f0000) returned 1 [0202.663] CreateFileW (lpFileName="C:\\\\Boot\\es-MX\\bootmgr.exe.mui" (normalized: "c:\\boot\\es-mx\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.663] GetLastError () returned 0x5 [0202.663] GetLastError () returned 0x5 [0202.663] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4853f40, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0202.663] FindClose (in: hFindFile=0x24ebc0 | out: hFindFile=0x24ebc0) returned 1 [0202.663] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233c48 | out: hHeap=0x1f0000) returned 1 [0202.663] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ee88 | out: hHeap=0x1f0000) returned 1 [0202.663] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b58 | out: hHeap=0x1f0000) returned 1 [0202.663] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233d20 | out: hHeap=0x1f0000) returned 1 [0202.663] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234080 [0202.663] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c70 [0202.663] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22ee88 [0202.664] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf38 [0202.664] FindFirstFileW (in: lpFileName="C:\\\\Boot\\et-EE\\*", lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc487a0b9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ebc0 [0202.664] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a90 [0202.664] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2f0 [0202.664] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a90 | out: hHeap=0x1f0000) returned 1 [0202.664] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf38 | out: hHeap=0x1f0000) returned 1 [0202.664] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0202.664] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc487a0b9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.664] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609c8 [0202.664] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf38 [0202.664] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609c8 | out: hHeap=0x1f0000) returned 1 [0202.664] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0202.664] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0202.664] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0202.664] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12560, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0202.664] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a18 [0202.664] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b80 [0202.664] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234230 [0202.664] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b80 | out: hHeap=0x1f0000) returned 1 [0202.664] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf38 | out: hHeap=0x1f0000) returned 1 [0202.664] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a18 | out: hHeap=0x1f0000) returned 1 [0202.665] CreateFileW (lpFileName="C:\\\\Boot\\et-EE\\bootmgr.exe.mui" (normalized: "c:\\boot\\et-ee\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.665] GetLastError () returned 0x5 [0202.665] GetLastError () returned 0x5 [0202.665] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12560, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0202.665] FindClose (in: hFindFile=0x24ebc0 | out: hFindFile=0x24ebc0) returned 1 [0202.665] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234230 | out: hHeap=0x1f0000) returned 1 [0202.665] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ee88 | out: hHeap=0x1f0000) returned 1 [0202.665] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c70 | out: hHeap=0x1f0000) returned 1 [0202.665] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234080 | out: hHeap=0x1f0000) returned 1 [0202.665] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233bb8 [0202.665] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bd0 [0202.665] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e360 [0202.665] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf38 [0202.666] FindFirstFileW (in: lpFileName="C:\\\\Boot\\fi-FI\\*", lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000cf3a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef59a5b1, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e6c0 [0202.666] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b08 [0202.666] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2f0 [0202.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b08 | out: hHeap=0x1f0000) returned 1 [0202.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf38 | out: hHeap=0x1f0000) returned 1 [0202.666] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0202.666] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000cf3a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef59a5b1, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.666] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b08 [0202.666] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf38 [0202.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b08 | out: hHeap=0x1f0000) returned 1 [0202.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0202.666] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0202.666] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0202.666] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2096e751, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0202.666] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609c8 [0202.666] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a18 [0202.666] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233fa8 [0202.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a18 | out: hHeap=0x1f0000) returned 1 [0202.667] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf38 | out: hHeap=0x1f0000) returned 1 [0202.667] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609c8 | out: hHeap=0x1f0000) returned 1 [0202.667] CreateFileW (lpFileName="C:\\\\Boot\\fi-FI\\bootmgr.exe.mui" (normalized: "c:\\boot\\fi-fi\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.667] GetLastError () returned 0x5 [0202.667] GetLastError () returned 0x5 [0202.667] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef59a5b1, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0202.667] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0202.667] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c20 [0202.667] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233f60 [0202.667] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c20 | out: hHeap=0x1f0000) returned 1 [0202.667] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233fa8 | out: hHeap=0x1f0000) returned 1 [0202.667] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0202.667] CreateFileW (lpFileName="C:\\\\Boot\\fi-FI\\memtest.exe.mui" (normalized: "c:\\boot\\fi-fi\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.667] GetLastError () returned 0x5 [0202.668] GetLastError () returned 0x5 [0202.668] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef59a5b1, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0202.668] FindClose (in: hFindFile=0x24e6c0 | out: hFindFile=0x24e6c0) returned 1 [0202.668] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233f60 | out: hHeap=0x1f0000) returned 1 [0202.668] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e360 | out: hHeap=0x1f0000) returned 1 [0202.668] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bd0 | out: hHeap=0x1f0000) returned 1 [0202.668] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233bb8 | out: hHeap=0x1f0000) returned 1 [0202.668] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233ff0 [0202.668] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a90 [0202.668] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e360 [0202.668] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf38 [0202.668] FindFirstFileW (in: lpFileName="C:\\\\Boot\\Fonts\\*", lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0109451, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef999ae4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e6c0 [0202.669] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bd0 [0202.669] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf70 [0202.669] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bd0 | out: hHeap=0x1f0000) returned 1 [0202.669] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf38 | out: hHeap=0x1f0000) returned 1 [0202.669] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0202.669] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0109451, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef999ae4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.669] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609c8 [0202.669] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2f0 [0202.670] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609c8 | out: hHeap=0x1f0000) returned 1 [0202.670] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf70 | out: hHeap=0x1f0000) returned 1 [0202.670] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0202.670] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0202.670] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef782dd9, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x386467, dwReserved0=0x0, dwReserved1=0x0, cFileName="chs_boot.ttf", cAlternateFileName="")) returned 1 [0202.670] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609c8 [0202.670] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b80 [0202.670] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234230 [0202.670] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b80 | out: hHeap=0x1f0000) returned 1 [0202.670] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0202.670] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609c8 | out: hHeap=0x1f0000) returned 1 [0202.670] CreateFileW (lpFileName="C:\\\\Boot\\Fonts\\chs_boot.ttf" (normalized: "c:\\boot\\fonts\\chs_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.671] GetLastError () returned 0x5 [0202.671] GetLastError () returned 0x5 [0202.671] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4a1dbea, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef81cc08, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x3b2e0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="cht_boot.ttf", cAlternateFileName="")) returned 1 [0202.671] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0202.671] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b08 [0202.671] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233e88 [0202.671] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b08 | out: hHeap=0x1f0000) returned 1 [0202.671] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234230 | out: hHeap=0x1f0000) returned 1 [0202.671] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0202.671] CreateFileW (lpFileName="C:\\\\Boot\\Fonts\\cht_boot.ttf" (normalized: "c:\\boot\\fonts\\cht_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.672] GetLastError () returned 0x5 [0202.672] GetLastError () returned 0x5 [0202.672] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4a902c2, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8771a7, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x1e4d4b, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpn_boot.ttf", cAlternateFileName="")) returned 1 [0202.673] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0202.673] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ae0 [0202.673] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233c00 [0202.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ae0 | out: hHeap=0x1f0000) returned 1 [0202.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233e88 | out: hHeap=0x1f0000) returned 1 [0202.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0202.673] CreateFileW (lpFileName="C:\\\\Boot\\Fonts\\jpn_boot.ttf" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.675] GetLastError () returned 0x5 [0202.675] GetLastError () returned 0x5 [0202.675] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b4eed5, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8c4060, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x243588, dwReserved0=0x0, dwReserved1=0x0, cFileName="kor_boot.ttf", cAlternateFileName="")) returned 1 [0202.675] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609c8 [0202.675] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b80 [0202.675] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234230 [0202.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b80 | out: hHeap=0x1f0000) returned 1 [0202.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233c00 | out: hHeap=0x1f0000) returned 1 [0202.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609c8 | out: hHeap=0x1f0000) returned 1 [0202.676] CreateFileW (lpFileName="C:\\\\Boot\\Fonts\\kor_boot.ttf" (normalized: "c:\\boot\\fonts\\kor_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.677] GetLastError () returned 0x5 [0202.677] GetLastError () returned 0x5 [0202.677] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b9b37e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8e28b4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2ab6f, dwReserved0=0x0, dwReserved1=0x0, cFileName="malgunn_boot.ttf", cAlternateFileName="MALGUN~1.TTF")) returned 1 [0202.677] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2f0 [0202.677] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0202.677] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233e88 [0202.677] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0202.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234230 | out: hHeap=0x1f0000) returned 1 [0202.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0202.678] CreateFileW (lpFileName="C:\\\\Boot\\Fonts\\malgunn_boot.ttf" (normalized: "c:\\boot\\fonts\\malgunn_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.679] GetLastError () returned 0x5 [0202.679] GetLastError () returned 0x5 [0202.679] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b9b37e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8f4db4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2b506, dwReserved0=0x0, dwReserved1=0x0, cFileName="malgun_boot.ttf", cAlternateFileName="MALGUN~2.TTF")) returned 1 [0202.679] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ab8 [0202.679] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ba8 [0202.679] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234428 [0202.679] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ba8 | out: hHeap=0x1f0000) returned 1 [0202.679] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233e88 | out: hHeap=0x1f0000) returned 1 [0202.680] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ab8 | out: hHeap=0x1f0000) returned 1 [0202.680] CreateFileW (lpFileName="C:\\\\Boot\\Fonts\\malgun_boot.ttf" (normalized: "c:\\boot\\fonts\\malgun_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.681] GetLastError () returned 0x5 [0202.681] GetLastError () returned 0x5 [0202.681] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b9b37e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9072c7, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2318a, dwReserved0=0x0, dwReserved1=0x0, cFileName="meiryon_boot.ttf", cAlternateFileName="MEIRYO~1.TTF")) returned 1 [0202.681] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf38 [0202.681] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0202.681] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233c48 [0202.681] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0202.682] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234428 | out: hHeap=0x1f0000) returned 1 [0202.682] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf38 | out: hHeap=0x1f0000) returned 1 [0202.682] CreateFileW (lpFileName="C:\\\\Boot\\Fonts\\meiryon_boot.ttf" (normalized: "c:\\boot\\fonts\\meiryon_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.686] GetLastError () returned 0x5 [0202.686] GetLastError () returned 0x5 [0202.686] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4bc156a, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef918492, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2380b, dwReserved0=0x0, dwReserved1=0x0, cFileName="meiryo_boot.ttf", cAlternateFileName="MEIRYO~2.TTF")) returned 1 [0202.686] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a18 [0202.686] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b80 [0202.686] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234308 [0202.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b80 | out: hHeap=0x1f0000) returned 1 [0202.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233c48 | out: hHeap=0x1f0000) returned 1 [0202.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a18 | out: hHeap=0x1f0000) returned 1 [0202.687] CreateFileW (lpFileName="C:\\\\Boot\\Fonts\\meiryo_boot.ttf" (normalized: "c:\\boot\\fonts\\meiryo_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.688] GetLastError () returned 0x5 [0202.688] GetLastError () returned 0x5 [0202.688] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4bc156a, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef92a947, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x27a1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="msjhn_boot.ttf", cAlternateFileName="MSJHN_~1.TTF")) returned 1 [0202.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c48 [0202.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c70 [0202.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234038 [0202.689] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c70 | out: hHeap=0x1f0000) returned 1 [0202.689] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234308 | out: hHeap=0x1f0000) returned 1 [0202.689] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0202.689] CreateFileW (lpFileName="C:\\\\Boot\\Fonts\\msjhn_boot.ttf" (normalized: "c:\\boot\\fonts\\msjhn_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.690] GetLastError () returned 0x5 [0202.690] GetLastError () returned 0x5 [0202.690] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef93ce3b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x281fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="msjh_boot.ttf", cAlternateFileName="MSJH_B~1.TTF")) returned 1 [0202.690] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609c8 [0202.690] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b58 [0202.690] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233fa8 [0202.690] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b58 | out: hHeap=0x1f0000) returned 1 [0202.690] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234038 | out: hHeap=0x1f0000) returned 1 [0202.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609c8 | out: hHeap=0x1f0000) returned 1 [0202.949] CreateFileW (lpFileName="C:\\\\Boot\\Fonts\\msjh_boot.ttf" (normalized: "c:\\boot\\fonts\\msjh_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.949] GetLastError () returned 0x5 [0202.949] GetLastError () returned 0x5 [0202.949] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef94dfcd, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x25b3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="msyhn_boot.ttf", cAlternateFileName="MSYHN_~1.TTF")) returned 1 [0202.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c48 [0202.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ab8 [0202.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2341a0 [0202.950] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ab8 | out: hHeap=0x1f0000) returned 1 [0202.950] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233fa8 | out: hHeap=0x1f0000) returned 1 [0202.950] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0202.950] CreateFileW (lpFileName="C:\\\\Boot\\Fonts\\msyhn_boot.ttf" (normalized: "c:\\boot\\fonts\\msyhn_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.950] GetLastError () returned 0x5 [0202.950] GetLastError () returned 0x5 [0202.950] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef95f141, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x26255, dwReserved0=0x0, dwReserved1=0x0, cFileName="msyh_boot.ttf", cAlternateFileName="MSYH_B~1.TTF")) returned 1 [0202.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609c8 [0202.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c48 [0202.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234158 [0202.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0202.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2341a0 | out: hHeap=0x1f0000) returned 1 [0202.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609c8 | out: hHeap=0x1f0000) returned 1 [0202.951] CreateFileW (lpFileName="C:\\\\Boot\\Fonts\\msyh_boot.ttf" (normalized: "c:\\boot\\fonts\\msyh_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.951] GetLastError () returned 0x5 [0202.951] GetLastError () returned 0x5 [0202.951] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef96ef3e, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xaf3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="segmono_boot.ttf", cAlternateFileName="SEGMON~1.TTF")) returned 1 [0202.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0202.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bd0 [0202.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233df8 [0202.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bd0 | out: hHeap=0x1f0000) returned 1 [0202.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234158 | out: hHeap=0x1f0000) returned 1 [0202.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0202.952] CreateFileW (lpFileName="C:\\\\Boot\\Fonts\\segmono_boot.ttf" (normalized: "c:\\boot\\fonts\\segmono_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.952] GetLastError () returned 0x5 [0202.952] GetLastError () returned 0x5 [0202.952] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c0da69, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef97d9ab, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x14f66, dwReserved0=0x0, dwReserved1=0x0, cFileName="segoen_slboot.ttf", cAlternateFileName="SEGOEN~1.TTF")) returned 1 [0202.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d210 [0202.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c20 [0202.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239980 [0202.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c20 | out: hHeap=0x1f0000) returned 1 [0202.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233df8 | out: hHeap=0x1f0000) returned 1 [0202.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d210 | out: hHeap=0x1f0000) returned 1 [0202.953] CreateFileW (lpFileName="C:\\\\Boot\\Fonts\\segoen_slboot.ttf" (normalized: "c:\\boot\\fonts\\segoen_slboot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.953] GetLastError () returned 0x5 [0202.953] GetLastError () returned 0x5 [0202.953] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef98c419, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x150a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="segoe_slboot.ttf", cAlternateFileName="SEGOE_~1.TTF")) returned 1 [0202.953] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0202.953] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ae0 [0202.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233c90 [0202.954] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ae0 | out: hHeap=0x1f0000) returned 1 [0202.954] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239980 | out: hHeap=0x1f0000) returned 1 [0202.954] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0202.954] CreateFileW (lpFileName="C:\\\\Boot\\Fonts\\segoe_slboot.ttf" (normalized: "c:\\boot\\fonts\\segoe_slboot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.954] GetLastError () returned 0x5 [0202.954] GetLastError () returned 0x5 [0202.954] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef999ae4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xbfc3, dwReserved0=0x0, dwReserved1=0x0, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 1 [0202.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c48 [0202.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c70 [0202.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233ed0 [0202.954] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c70 | out: hHeap=0x1f0000) returned 1 [0202.954] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233c90 | out: hHeap=0x1f0000) returned 1 [0202.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0202.955] CreateFileW (lpFileName="C:\\\\Boot\\Fonts\\wgl4_boot.ttf" (normalized: "c:\\boot\\fonts\\wgl4_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.955] GetLastError () returned 0x5 [0202.955] GetLastError () returned 0x5 [0202.955] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef999ae4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xbfc3, dwReserved0=0x0, dwReserved1=0x0, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 0 [0202.955] FindClose (in: hFindFile=0x24e6c0 | out: hFindFile=0x24e6c0) returned 1 [0202.957] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233ed0 | out: hHeap=0x1f0000) returned 1 [0202.957] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e360 | out: hHeap=0x1f0000) returned 1 [0202.957] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a90 | out: hHeap=0x1f0000) returned 1 [0202.957] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233ff0 | out: hHeap=0x1f0000) returned 1 [0202.957] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233fa8 [0202.957] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bd0 [0202.957] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e828 [0202.957] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d280 [0202.957] FindFirstFileW (in: lpFileName="C:\\\\Boot\\fr-CA\\*", lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ecc0 [0202.957] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0202.957] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d210 [0202.957] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0202.957] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d280 | out: hHeap=0x1f0000) returned 1 [0202.957] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0202.957] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.958] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a90 [0202.958] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0202.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a90 | out: hHeap=0x1f0000) returned 1 [0202.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d210 | out: hHeap=0x1f0000) returned 1 [0202.958] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0202.958] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0202.958] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13560, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0202.958] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a90 [0202.958] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0202.958] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234308 [0202.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0202.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0202.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a90 | out: hHeap=0x1f0000) returned 1 [0202.959] CreateFileW (lpFileName="C:\\\\Boot\\fr-CA\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-ca\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.959] GetLastError () returned 0x5 [0202.959] GetLastError () returned 0x5 [0202.959] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13560, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0202.959] FindClose (in: hFindFile=0x24ecc0 | out: hFindFile=0x24ecc0) returned 1 [0202.960] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234308 | out: hHeap=0x1f0000) returned 1 [0202.960] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e828 | out: hHeap=0x1f0000) returned 1 [0202.960] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bd0 | out: hHeap=0x1f0000) returned 1 [0202.960] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233fa8 | out: hHeap=0x1f0000) returned 1 [0202.960] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233bb8 [0202.960] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609f0 [0202.960] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22ee88 [0202.960] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0202.960] FindFirstFileW (in: lpFileName="C:\\\\Boot\\fr-FR\\*", lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010bc12, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ade2b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ea00 [0202.960] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b58 [0202.960] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d210 [0202.960] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b58 | out: hHeap=0x1f0000) returned 1 [0202.961] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0202.961] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0202.961] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010bc12, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ade2b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.961] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bd0 [0202.961] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0202.961] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bd0 | out: hHeap=0x1f0000) returned 1 [0202.961] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d210 | out: hHeap=0x1f0000) returned 1 [0202.961] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0202.961] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0202.961] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2096e751, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13558, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0202.961] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c20 [0202.961] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bd0 [0202.961] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233c90 [0202.961] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bd0 | out: hHeap=0x1f0000) returned 1 [0202.961] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0202.961] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c20 | out: hHeap=0x1f0000) returned 1 [0202.962] CreateFileW (lpFileName="C:\\\\Boot\\fr-FR\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-fr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.962] GetLastError () returned 0x5 [0202.962] GetLastError () returned 0x5 [0202.962] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5ade2b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0202.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a18 [0202.963] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609c8 [0202.963] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234278 [0202.963] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609c8 | out: hHeap=0x1f0000) returned 1 [0202.963] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233c90 | out: hHeap=0x1f0000) returned 1 [0202.963] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a18 | out: hHeap=0x1f0000) returned 1 [0202.963] CreateFileW (lpFileName="C:\\\\Boot\\fr-FR\\memtest.exe.mui" (normalized: "c:\\boot\\fr-fr\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.964] GetLastError () returned 0x5 [0202.964] GetLastError () returned 0x5 [0202.964] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5ade2b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0202.964] FindClose (in: hFindFile=0x24ea00 | out: hFindFile=0x24ea00) returned 1 [0202.964] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234278 | out: hHeap=0x1f0000) returned 1 [0202.965] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ee88 | out: hHeap=0x1f0000) returned 1 [0202.965] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609f0 | out: hHeap=0x1f0000) returned 1 [0202.965] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233bb8 | out: hHeap=0x1f0000) returned 1 [0202.965] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234428 [0202.965] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b80 [0202.965] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f020 [0202.965] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d210 [0202.965] FindFirstFileW (in: lpFileName="C:\\\\Boot\\hr-HR\\*", lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24eb40 [0202.965] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bd0 [0202.965] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0202.965] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bd0 | out: hHeap=0x1f0000) returned 1 [0202.965] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d210 | out: hHeap=0x1f0000) returned 1 [0202.965] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0202.966] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.966] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ae0 [0202.966] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d210 [0202.966] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ae0 | out: hHeap=0x1f0000) returned 1 [0202.966] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0202.966] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0202.966] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0202.966] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0202.966] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b30 [0202.966] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0202.966] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234230 [0202.966] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0202.967] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d210 | out: hHeap=0x1f0000) returned 1 [0202.967] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b30 | out: hHeap=0x1f0000) returned 1 [0202.967] CreateFileW (lpFileName="C:\\\\Boot\\hr-HR\\bootmgr.exe.mui" (normalized: "c:\\boot\\hr-hr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.967] GetLastError () returned 0x5 [0202.967] GetLastError () returned 0x5 [0202.968] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0202.968] FindClose (in: hFindFile=0x24eb40 | out: hFindFile=0x24eb40) returned 1 [0202.968] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234230 | out: hHeap=0x1f0000) returned 1 [0202.968] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f020 | out: hHeap=0x1f0000) returned 1 [0202.968] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b80 | out: hHeap=0x1f0000) returned 1 [0202.968] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234428 | out: hHeap=0x1f0000) returned 1 [0202.968] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233ff0 [0202.968] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b30 [0202.968] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f020 [0202.968] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d210 [0202.969] FindFirstFileW (in: lpFileName="C:\\\\Boot\\hu-HU\\*", lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010c5ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5c171b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ecc0 [0202.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a90 [0202.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d280 [0202.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a90 | out: hHeap=0x1f0000) returned 1 [0202.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d210 | out: hHeap=0x1f0000) returned 1 [0202.969] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0202.969] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010c5ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5c171b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bd0 [0202.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0202.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bd0 | out: hHeap=0x1f0000) returned 1 [0202.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d280 | out: hHeap=0x1f0000) returned 1 [0202.970] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0202.970] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0202.970] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13360, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0202.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c70 [0202.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ab8 [0202.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233fa8 [0202.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ab8 | out: hHeap=0x1f0000) returned 1 [0202.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0202.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c70 | out: hHeap=0x1f0000) returned 1 [0202.971] CreateFileW (lpFileName="C:\\\\Boot\\hu-HU\\bootmgr.exe.mui" (normalized: "c:\\boot\\hu-hu\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.971] GetLastError () returned 0x5 [0202.971] GetLastError () returned 0x5 [0202.971] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5c171b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39d81d8, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb398, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0202.971] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c20 [0202.971] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bd0 [0202.971] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233e88 [0202.971] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bd0 | out: hHeap=0x1f0000) returned 1 [0202.971] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233fa8 | out: hHeap=0x1f0000) returned 1 [0202.971] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c20 | out: hHeap=0x1f0000) returned 1 [0202.972] CreateFileW (lpFileName="C:\\\\Boot\\hu-HU\\memtest.exe.mui" (normalized: "c:\\boot\\hu-hu\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.972] GetLastError () returned 0x5 [0202.972] GetLastError () returned 0x5 [0202.972] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5c171b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39d81d8, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb398, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0202.972] FindClose (in: hFindFile=0x24ecc0 | out: hFindFile=0x24ecc0) returned 1 [0202.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233e88 | out: hHeap=0x1f0000) returned 1 [0202.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f020 | out: hHeap=0x1f0000) returned 1 [0202.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b30 | out: hHeap=0x1f0000) returned 1 [0202.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233ff0 | out: hHeap=0x1f0000) returned 1 [0202.972] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234308 [0202.972] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ae0 [0202.972] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e360 [0202.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d210 [0202.973] FindFirstFileW (in: lpFileName="C:\\\\Boot\\it-IT\\*", lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010ccad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5d8ab4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e780 [0202.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b58 [0202.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0202.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b58 | out: hHeap=0x1f0000) returned 1 [0202.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d210 | out: hHeap=0x1f0000) returned 1 [0202.973] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0202.973] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010ccad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5d8ab4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609f0 [0202.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d210 [0202.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609f0 | out: hHeap=0x1f0000) returned 1 [0202.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0202.973] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0202.973] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0202.973] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0202.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c70 [0202.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a90 [0202.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234110 [0202.974] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a90 | out: hHeap=0x1f0000) returned 1 [0202.974] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d210 | out: hHeap=0x1f0000) returned 1 [0202.974] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c70 | out: hHeap=0x1f0000) returned 1 [0202.974] CreateFileW (lpFileName="C:\\\\Boot\\it-IT\\bootmgr.exe.mui" (normalized: "c:\\boot\\it-it\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.974] GetLastError () returned 0x5 [0202.974] GetLastError () returned 0x5 [0202.974] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5d8ab4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf30285aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0202.974] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b30 [0202.974] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0202.974] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233f60 [0202.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0202.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234110 | out: hHeap=0x1f0000) returned 1 [0202.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b30 | out: hHeap=0x1f0000) returned 1 [0202.975] CreateFileW (lpFileName="C:\\\\Boot\\it-IT\\memtest.exe.mui" (normalized: "c:\\boot\\it-it\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.975] GetLastError () returned 0x5 [0202.975] GetLastError () returned 0x5 [0202.975] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5d8ab4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf30285aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0202.975] FindClose (in: hFindFile=0x24e780 | out: hFindFile=0x24e780) returned 1 [0202.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233f60 | out: hHeap=0x1f0000) returned 1 [0202.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e360 | out: hHeap=0x1f0000) returned 1 [0202.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ae0 | out: hHeap=0x1f0000) returned 1 [0202.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234308 | out: hHeap=0x1f0000) returned 1 [0202.975] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2342c0 [0202.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b30 [0202.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e828 [0202.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0202.976] FindFirstFileW (in: lpFileName="C:\\\\Boot\\ja-JP\\*", lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010d0c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ed6c6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ec40 [0202.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b80 [0202.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d210 [0202.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b80 | out: hHeap=0x1f0000) returned 1 [0202.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0202.976] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0202.976] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010d0c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ed6c6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ab8 [0202.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d280 [0202.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ab8 | out: hHeap=0x1f0000) returned 1 [0202.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d210 | out: hHeap=0x1f0000) returned 1 [0202.976] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0202.976] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0202.976] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48c6596, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21212f9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x10760, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0202.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a90 [0202.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c20 [0202.977] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233cd8 [0202.977] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c20 | out: hHeap=0x1f0000) returned 1 [0202.977] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d280 | out: hHeap=0x1f0000) returned 1 [0202.977] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a90 | out: hHeap=0x1f0000) returned 1 [0202.977] CreateFileW (lpFileName="C:\\\\Boot\\ja-JP\\bootmgr.exe.mui" (normalized: "c:\\boot\\ja-jp\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.977] GetLastError () returned 0x5 [0202.977] GetLastError () returned 0x5 [0202.977] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5ed6c6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf300233f, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa798, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0202.977] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b58 [0202.977] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b80 [0202.977] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234350 [0202.977] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b80 | out: hHeap=0x1f0000) returned 1 [0202.977] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233cd8 | out: hHeap=0x1f0000) returned 1 [0202.977] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b58 | out: hHeap=0x1f0000) returned 1 [0202.978] CreateFileW (lpFileName="C:\\\\Boot\\ja-JP\\memtest.exe.mui" (normalized: "c:\\boot\\ja-jp\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.978] GetLastError () returned 0x5 [0202.978] GetLastError () returned 0x5 [0202.978] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5ed6c6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf300233f, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa798, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0202.978] FindClose (in: hFindFile=0x24ec40 | out: hFindFile=0x24ec40) returned 1 [0202.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234350 | out: hHeap=0x1f0000) returned 1 [0202.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e828 | out: hHeap=0x1f0000) returned 1 [0202.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b30 | out: hHeap=0x1f0000) returned 1 [0202.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2342c0 | out: hHeap=0x1f0000) returned 1 [0202.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234230 [0202.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b58 [0202.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e4f8 [0202.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d210 [0202.979] FindFirstFileW (in: lpFileName="C:\\\\Boot\\ko-KR\\*", lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef5fc210, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ea40 [0202.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c70 [0202.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d280 [0202.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c70 | out: hHeap=0x1f0000) returned 1 [0202.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d210 | out: hHeap=0x1f0000) returned 1 [0202.979] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0202.979] FindNextFileW (in: hFindFile=0x24ea40, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef5fc210, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b30 [0202.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0202.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b30 | out: hHeap=0x1f0000) returned 1 [0202.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d280 | out: hHeap=0x1f0000) returned 1 [0202.979] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0202.979] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0202.979] FindNextFileW (in: hFindFile=0x24ea40, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x211c6af1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x10560, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0202.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0202.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a18 [0202.980] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234278 [0202.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a18 | out: hHeap=0x1f0000) returned 1 [0202.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0202.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0202.980] CreateFileW (lpFileName="C:\\\\Boot\\ko-KR\\bootmgr.exe.mui" (normalized: "c:\\boot\\ko-kr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.980] GetLastError () returned 0x5 [0202.980] GetLastError () returned 0x5 [0202.980] FindNextFileW (in: hFindFile=0x24ea40, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fdc0d7, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa7a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0202.980] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ab8 [0202.980] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609c8 [0202.980] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233d68 [0202.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609c8 | out: hHeap=0x1f0000) returned 1 [0202.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234278 | out: hHeap=0x1f0000) returned 1 [0202.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ab8 | out: hHeap=0x1f0000) returned 1 [0202.981] CreateFileW (lpFileName="C:\\\\Boot\\ko-KR\\memtest.exe.mui" (normalized: "c:\\boot\\ko-kr\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.981] GetLastError () returned 0x5 [0202.981] GetLastError () returned 0x5 [0202.981] FindNextFileW (in: hFindFile=0x24ea40, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fdc0d7, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa7a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0202.982] FindClose (in: hFindFile=0x24ea40 | out: hFindFile=0x24ea40) returned 1 [0202.982] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233d68 | out: hHeap=0x1f0000) returned 1 [0202.982] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e4f8 | out: hHeap=0x1f0000) returned 1 [0202.982] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b58 | out: hHeap=0x1f0000) returned 1 [0202.982] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234230 | out: hHeap=0x1f0000) returned 1 [0202.982] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2342c0 [0202.982] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c70 [0202.982] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e828 [0202.982] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0202.982] FindFirstFileW (in: lpFileName="C:\\\\Boot\\lt-LT\\*", lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e940 [0202.982] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a90 [0202.982] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d210 [0202.982] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a90 | out: hHeap=0x1f0000) returned 1 [0202.982] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0202.982] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0202.982] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.983] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0202.983] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0202.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0202.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d210 | out: hHeap=0x1f0000) returned 1 [0202.983] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0202.983] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0202.983] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2117a634, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12760, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0202.983] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609f0 [0202.983] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bd0 [0202.983] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234080 [0202.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bd0 | out: hHeap=0x1f0000) returned 1 [0202.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0202.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609f0 | out: hHeap=0x1f0000) returned 1 [0202.983] CreateFileW (lpFileName="C:\\\\Boot\\lt-LT\\bootmgr.exe.mui" (normalized: "c:\\boot\\lt-lt\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.984] GetLastError () returned 0x5 [0202.984] GetLastError () returned 0x5 [0202.984] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2117a634, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12760, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0202.984] FindClose (in: hFindFile=0x24e940 | out: hFindFile=0x24e940) returned 1 [0202.984] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234080 | out: hHeap=0x1f0000) returned 1 [0202.984] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e828 | out: hHeap=0x1f0000) returned 1 [0202.984] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c70 | out: hHeap=0x1f0000) returned 1 [0202.984] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2342c0 | out: hHeap=0x1f0000) returned 1 [0202.984] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233f60 [0202.984] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b30 [0202.984] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e828 [0202.984] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0202.984] FindFirstFileW (in: lpFileName="C:\\\\Boot\\lv-LV\\*", lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e640 [0202.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a18 [0202.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d210 [0202.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a18 | out: hHeap=0x1f0000) returned 1 [0202.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0202.985] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0202.985] FindNextFileW (in: hFindFile=0x24e640, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c20 [0202.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0202.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c20 | out: hHeap=0x1f0000) returned 1 [0202.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d210 | out: hHeap=0x1f0000) returned 1 [0202.985] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0202.985] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0202.985] FindNextFileW (in: hFindFile=0x24e640, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2117a634, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12758, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0202.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c70 [0202.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bd0 [0202.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233df8 [0202.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bd0 | out: hHeap=0x1f0000) returned 1 [0202.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0202.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c70 | out: hHeap=0x1f0000) returned 1 [0202.986] CreateFileW (lpFileName="C:\\\\Boot\\lv-LV\\bootmgr.exe.mui" (normalized: "c:\\boot\\lv-lv\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.986] GetLastError () returned 0x5 [0202.986] GetLastError () returned 0x5 [0202.986] FindNextFileW (in: hFindFile=0x24e640, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2117a634, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12758, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0202.986] FindClose (in: hFindFile=0x24e640 | out: hFindFile=0x24e640) returned 1 [0202.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233df8 | out: hHeap=0x1f0000) returned 1 [0202.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e828 | out: hHeap=0x1f0000) returned 1 [0202.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b30 | out: hHeap=0x1f0000) returned 1 [0202.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233f60 | out: hHeap=0x1f0000) returned 1 [0202.986] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234428 [0202.986] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609c8 [0202.987] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22eb58 [0202.987] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0202.987] FindFirstFileW (in: lpFileName="C:\\\\Boot\\nb-NO\\*", lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e138, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef62cf52, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ebc0 [0202.987] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0202.987] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d210 [0202.987] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0202.987] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0202.987] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0202.987] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e138, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef62cf52, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.987] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b30 [0202.987] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0202.987] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b30 | out: hHeap=0x1f0000) returned 1 [0202.987] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d210 | out: hHeap=0x1f0000) returned 1 [0202.987] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0202.988] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0202.988] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x211543da, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12760, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0202.988] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bd0 [0202.988] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0202.988] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233ff0 [0202.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0202.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0202.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bd0 | out: hHeap=0x1f0000) returned 1 [0202.988] CreateFileW (lpFileName="C:\\\\Boot\\nb-NO\\bootmgr.exe.mui" (normalized: "c:\\boot\\nb-no\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.988] GetLastError () returned 0x5 [0202.988] GetLastError () returned 0x5 [0202.989] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef62cf52, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fb5e6c, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0202.989] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b58 [0202.989] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b30 [0202.989] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2342c0 [0202.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b30 | out: hHeap=0x1f0000) returned 1 [0202.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233ff0 | out: hHeap=0x1f0000) returned 1 [0202.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b58 | out: hHeap=0x1f0000) returned 1 [0202.989] CreateFileW (lpFileName="C:\\\\Boot\\nb-NO\\memtest.exe.mui" (normalized: "c:\\boot\\nb-no\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.990] GetLastError () returned 0x5 [0202.990] GetLastError () returned 0x5 [0202.990] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef62cf52, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fb5e6c, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0202.990] FindClose (in: hFindFile=0x24ebc0 | out: hFindFile=0x24ebc0) returned 1 [0202.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2342c0 | out: hHeap=0x1f0000) returned 1 [0202.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22eb58 | out: hHeap=0x1f0000) returned 1 [0202.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609c8 | out: hHeap=0x1f0000) returned 1 [0202.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234428 | out: hHeap=0x1f0000) returned 1 [0202.990] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234470 [0202.990] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b30 [0202.990] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e360 [0202.990] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d210 [0202.990] FindFirstFileW (in: lpFileName="C:\\\\Boot\\nl-NL\\*", lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e4fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6407cf, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e940 [0202.991] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c20 [0202.991] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0202.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c20 | out: hHeap=0x1f0000) returned 1 [0202.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d210 | out: hHeap=0x1f0000) returned 1 [0202.991] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0202.991] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e4fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6407cf, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.991] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a90 [0202.991] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d210 [0202.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a90 | out: hHeap=0x1f0000) returned 1 [0202.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0202.991] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0202.991] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0202.991] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x211543da, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13160, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0202.991] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b58 [0202.992] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609f0 [0202.992] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234230 [0202.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609f0 | out: hHeap=0x1f0000) returned 1 [0202.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d210 | out: hHeap=0x1f0000) returned 1 [0202.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b58 | out: hHeap=0x1f0000) returned 1 [0202.992] CreateFileW (lpFileName="C:\\\\Boot\\nl-NL\\bootmgr.exe.mui" (normalized: "c:\\boot\\nl-nl\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.992] GetLastError () returned 0x5 [0202.992] GetLastError () returned 0x5 [0202.992] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6407cf, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fb5e6c, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0202.992] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b58 [0202.992] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609c8 [0202.992] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234278 [0202.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609c8 | out: hHeap=0x1f0000) returned 1 [0202.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234230 | out: hHeap=0x1f0000) returned 1 [0202.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b58 | out: hHeap=0x1f0000) returned 1 [0202.993] CreateFileW (lpFileName="C:\\\\Boot\\nl-NL\\memtest.exe.mui" (normalized: "c:\\boot\\nl-nl\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.993] GetLastError () returned 0x5 [0202.993] GetLastError () returned 0x5 [0202.993] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6407cf, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fb5e6c, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0202.994] FindClose (in: hFindFile=0x24e940 | out: hFindFile=0x24e940) returned 1 [0202.994] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234278 | out: hHeap=0x1f0000) returned 1 [0202.994] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e360 | out: hHeap=0x1f0000) returned 1 [0202.994] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b30 | out: hHeap=0x1f0000) returned 1 [0202.994] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234470 | out: hHeap=0x1f0000) returned 1 [0202.994] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234080 [0202.994] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bd0 [0202.994] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d838 [0202.994] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0202.994] FindFirstFileW (in: lpFileName="C:\\\\Boot\\pl-PL\\*", lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef65403a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e880 [0202.995] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609f0 [0202.995] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d210 [0202.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609f0 | out: hHeap=0x1f0000) returned 1 [0203.324] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0203.324] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0203.324] FindNextFileW (in: hFindFile=0x24e880, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef65403a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0203.324] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609c8 [0203.324] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0203.325] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609c8 | out: hHeap=0x1f0000) returned 1 [0203.325] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d210 | out: hHeap=0x1f0000) returned 1 [0203.325] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0203.325] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0203.325] FindNextFileW (in: hFindFile=0x24e880, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2112e17f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f58, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0203.325] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609c8 [0203.325] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b58 [0203.325] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234230 [0203.325] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b58 | out: hHeap=0x1f0000) returned 1 [0203.325] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0203.325] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609c8 | out: hHeap=0x1f0000) returned 1 [0203.326] CreateFileW (lpFileName="C:\\\\Boot\\pl-PL\\bootmgr.exe.mui" (normalized: "c:\\boot\\pl-pl\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0203.326] GetLastError () returned 0x5 [0203.326] GetLastError () returned 0x5 [0203.327] FindNextFileW (in: hFindFile=0x24e880, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0203.327] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0203.327] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c20 [0203.327] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233e88 [0203.327] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c20 | out: hHeap=0x1f0000) returned 1 [0203.327] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234230 | out: hHeap=0x1f0000) returned 1 [0203.327] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0203.327] CreateFileW (lpFileName="C:\\\\Boot\\pl-PL\\memtest.exe.mui" (normalized: "c:\\boot\\pl-pl\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0203.328] GetLastError () returned 0x5 [0203.328] GetLastError () returned 0x5 [0203.328] FindNextFileW (in: hFindFile=0x24e880, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0203.328] FindClose (in: hFindFile=0x24e880 | out: hFindFile=0x24e880) returned 1 [0203.328] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233e88 | out: hHeap=0x1f0000) returned 1 [0203.328] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d838 | out: hHeap=0x1f0000) returned 1 [0203.328] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bd0 | out: hHeap=0x1f0000) returned 1 [0203.328] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234080 | out: hHeap=0x1f0000) returned 1 [0203.328] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233df8 [0203.328] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bd0 [0203.329] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f1b8 [0203.329] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0203.329] FindFirstFileW (in: lpFileName="C:\\\\Boot\\pt-BR\\*", lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6678d6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6678d6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e740 [0203.329] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609f0 [0203.329] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227f20 [0203.329] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609f0 | out: hHeap=0x1f0000) returned 1 [0203.330] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0203.330] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0203.330] FindNextFileW (in: hFindFile=0x24e740, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6678d6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6678d6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0203.330] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b80 [0203.330] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0203.330] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b80 | out: hHeap=0x1f0000) returned 1 [0203.330] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227f20 | out: hHeap=0x1f0000) returned 1 [0203.330] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0203.330] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0203.330] FindNextFileW (in: hFindFile=0x24e740, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2112e17f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0203.330] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b58 [0203.330] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c48 [0203.330] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2343e0 [0203.331] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0203.331] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0203.331] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b58 | out: hHeap=0x1f0000) returned 1 [0203.331] CreateFileW (lpFileName="C:\\\\Boot\\pt-BR\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-br\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0203.331] GetLastError () returned 0x5 [0203.331] GetLastError () returned 0x5 [0203.331] FindNextFileW (in: hFindFile=0x24e740, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65dc94, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0203.331] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609f0 [0203.331] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609c8 [0203.331] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233ff0 [0203.332] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609c8 | out: hHeap=0x1f0000) returned 1 [0203.332] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2343e0 | out: hHeap=0x1f0000) returned 1 [0203.332] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609f0 | out: hHeap=0x1f0000) returned 1 [0203.332] CreateFileW (lpFileName="C:\\\\Boot\\pt-BR\\memtest.exe.mui" (normalized: "c:\\boot\\pt-br\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0203.332] GetLastError () returned 0x5 [0203.332] GetLastError () returned 0x5 [0203.332] FindNextFileW (in: hFindFile=0x24e740, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65dc94, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0203.332] FindClose (in: hFindFile=0x24e740 | out: hFindFile=0x24e740) returned 1 [0203.332] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233ff0 | out: hHeap=0x1f0000) returned 1 [0203.333] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f1b8 | out: hHeap=0x1f0000) returned 1 [0203.333] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bd0 | out: hHeap=0x1f0000) returned 1 [0203.333] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233df8 | out: hHeap=0x1f0000) returned 1 [0203.333] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234110 [0203.333] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c48 [0203.333] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e360 [0203.333] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0203.333] FindFirstFileW (in: lpFileName="C:\\\\Boot\\pt-PT\\*", lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f167, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6714dc, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e600 [0203.333] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c20 [0203.333] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227f20 [0203.333] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c20 | out: hHeap=0x1f0000) returned 1 [0203.333] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0203.333] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0203.334] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f167, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6714dc, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0203.334] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b30 [0203.334] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0203.334] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b30 | out: hHeap=0x1f0000) returned 1 [0203.334] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227f20 | out: hHeap=0x1f0000) returned 1 [0203.334] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0203.334] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0203.334] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2112e17f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0203.334] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a90 [0203.334] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bd0 [0203.334] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2342c0 [0203.334] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bd0 | out: hHeap=0x1f0000) returned 1 [0203.334] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0203.334] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a90 | out: hHeap=0x1f0000) returned 1 [0203.335] CreateFileW (lpFileName="C:\\\\Boot\\pt-PT\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-pt\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0203.335] GetLastError () returned 0x5 [0203.335] GetLastError () returned 0x5 [0203.335] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6714dc, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0203.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bd0 [0203.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0203.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233e88 [0203.335] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0203.335] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2342c0 | out: hHeap=0x1f0000) returned 1 [0203.335] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bd0 | out: hHeap=0x1f0000) returned 1 [0203.336] CreateFileW (lpFileName="C:\\\\Boot\\pt-PT\\memtest.exe.mui" (normalized: "c:\\boot\\pt-pt\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0203.336] GetLastError () returned 0x5 [0203.336] GetLastError () returned 0x5 [0203.336] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6714dc, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0203.336] FindClose (in: hFindFile=0x24e600 | out: hFindFile=0x24e600) returned 1 [0203.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233e88 | out: hHeap=0x1f0000) returned 1 [0203.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e360 | out: hHeap=0x1f0000) returned 1 [0203.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0203.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234110 | out: hHeap=0x1f0000) returned 1 [0203.337] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233c90 [0203.337] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b80 [0203.337] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f1b8 [0203.337] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0203.337] FindFirstFileW (in: lpFileName="C:\\\\Boot\\qps-ploc\\*", lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f640, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef684d85, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e6c0 [0203.337] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227f20 [0203.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0203.337] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0203.337] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f640, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef684d85, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0203.337] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0203.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227f20 | out: hHeap=0x1f0000) returned 1 [0203.338] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0203.338] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0203.338] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12160, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0203.338] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c20 [0203.338] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227f20 [0203.338] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239a88 [0203.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227f20 | out: hHeap=0x1f0000) returned 1 [0203.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0203.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c20 | out: hHeap=0x1f0000) returned 1 [0203.339] CreateFileW (lpFileName="C:\\\\Boot\\qps-ploc\\bootmgr.exe.mui" (normalized: "c:\\boot\\qps-ploc\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0203.339] GetLastError () returned 0x5 [0203.339] GetLastError () returned 0x5 [0203.339] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef684d85, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfbd1a998, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0xd398, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0203.339] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0203.339] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0203.339] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239668 [0203.339] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0203.339] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239a88 | out: hHeap=0x1f0000) returned 1 [0203.339] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0203.340] CreateFileW (lpFileName="C:\\\\Boot\\qps-ploc\\memtest.exe.mui" (normalized: "c:\\boot\\qps-ploc\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0203.340] GetLastError () returned 0x5 [0203.340] GetLastError () returned 0x5 [0203.340] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef684d85, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfbd1a998, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0xd398, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0203.340] FindClose (in: hFindFile=0x24e6c0 | out: hFindFile=0x24e6c0) returned 1 [0203.340] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239668 | out: hHeap=0x1f0000) returned 1 [0203.340] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f1b8 | out: hHeap=0x1f0000) returned 1 [0203.340] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b80 | out: hHeap=0x1f0000) returned 1 [0203.340] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233c90 | out: hHeap=0x1f0000) returned 1 [0203.341] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233e88 [0203.341] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0203.341] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22ee88 [0203.341] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0203.341] FindFirstFileW (in: lpFileName="C:\\\\Boot\\Resources\\*", lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ab61e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9abff9, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e640 [0203.341] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227f20 [0203.341] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0203.341] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0203.341] FindNextFileW (in: hFindFile=0x24e640, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ab61e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9abff9, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0203.341] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0203.341] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227f20 | out: hHeap=0x1f0000) returned 1 [0203.342] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0203.342] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0203.342] FindNextFileW (in: hFindFile=0x24e640, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9abff9, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef597530, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x169a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootres.dll", cAlternateFileName="")) returned 1 [0203.342] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b30 [0203.342] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227f20 [0203.342] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225c48 [0203.342] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227f20 | out: hHeap=0x1f0000) returned 1 [0203.342] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0203.342] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b30 | out: hHeap=0x1f0000) returned 1 [0203.343] CreateFileW (lpFileName="C:\\\\Boot\\Resources\\bootres.dll" (normalized: "c:\\boot\\resources\\bootres.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0203.343] GetLastError () returned 0x5 [0203.343] GetLastError () returned 0x5 [0203.343] FindNextFileW (in: hFindFile=0x24e640, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9baa67, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0203.343] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0203.343] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225e78 [0203.343] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0203.343] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225c48 | out: hHeap=0x1f0000) returned 1 [0203.343] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0203.344] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0203.344] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x2052d0 [0203.344] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2341a0 [0203.344] FindNextFileW (in: hFindFile=0x24e640, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9baa67, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0 [0203.344] FindClose (in: hFindFile=0x24e640 | out: hFindFile=0x24e640) returned 1 [0203.344] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233c90 [0203.344] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a90 [0203.344] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d6a0 [0203.344] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233c00 [0203.344] FindFirstFileW (in: lpFileName="C:\\\\Boot\\Resources\\en-US\\*", lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9baa67, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e700 [0203.344] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234428 [0203.344] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233c00 | out: hHeap=0x1f0000) returned 1 [0203.345] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0203.345] FindNextFileW (in: hFindFile=0x24e700, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9baa67, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0203.345] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234350 [0203.345] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234428 | out: hHeap=0x1f0000) returned 1 [0203.345] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0203.345] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0203.345] FindNextFileW (in: hFindFile=0x24e700, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9baa67, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0x31acad58, ftLastWriteTime.dwHighDateTime=0x1d2a030, nFileSizeHigh=0x0, nFileSizeLow=0x2fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootres.dll.mui", cAlternateFileName="BOOTRE~1.MUI")) returned 1 [0203.345] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bd0 [0203.345] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233d68 [0203.345] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214e38 [0203.345] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233d68 | out: hHeap=0x1f0000) returned 1 [0203.345] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234350 | out: hHeap=0x1f0000) returned 1 [0203.345] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bd0 | out: hHeap=0x1f0000) returned 1 [0203.346] CreateFileW (lpFileName="C:\\\\Boot\\Resources\\en-US\\bootres.dll.mui" (normalized: "c:\\boot\\resources\\en-us\\bootres.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fded1c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0203.346] GetLastError () returned 0x5 [0203.346] GetLastError () returned 0x5 [0203.346] FindNextFileW (in: hFindFile=0x24e700, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9baa67, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0x31acad58, ftLastWriteTime.dwHighDateTime=0x1d2a030, nFileSizeHigh=0x0, nFileSizeLow=0x2fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootres.dll.mui", cAlternateFileName="BOOTRE~1.MUI")) returned 0 [0203.346] FindClose (in: hFindFile=0x24e700 | out: hFindFile=0x24e700) returned 1 [0203.346] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214e38 | out: hHeap=0x1f0000) returned 1 [0203.346] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d6a0 | out: hHeap=0x1f0000) returned 1 [0203.346] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a90 | out: hHeap=0x1f0000) returned 1 [0203.346] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233c90 | out: hHeap=0x1f0000) returned 1 [0203.346] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225e78 | out: hHeap=0x1f0000) returned 1 [0203.347] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2341a0 | out: hHeap=0x1f0000) returned 1 [0203.347] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2052d0 | out: hHeap=0x1f0000) returned 1 [0203.347] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ee88 | out: hHeap=0x1f0000) returned 1 [0203.347] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0203.347] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233e88 | out: hHeap=0x1f0000) returned 1 [0203.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233bb8 [0203.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b80 [0203.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e360 [0203.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0203.347] FindFirstFileW (in: lpFileName="C:\\\\Boot\\ro-RO\\*", lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e780 [0203.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bd0 [0203.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227f20 [0203.347] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bd0 | out: hHeap=0x1f0000) returned 1 [0203.347] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0203.348] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0203.348] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0203.348] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b30 [0203.348] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0203.348] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b30 | out: hHeap=0x1f0000) returned 1 [0203.348] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227f20 | out: hHeap=0x1f0000) returned 1 [0203.348] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0203.348] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0203.348] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12960, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0203.348] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0203.348] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609f0 [0203.348] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234398 [0203.348] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609f0 | out: hHeap=0x1f0000) returned 1 [0203.348] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0203.348] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0203.349] CreateFileW (lpFileName="C:\\\\Boot\\ro-RO\\bootmgr.exe.mui" (normalized: "c:\\boot\\ro-ro\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0203.349] GetLastError () returned 0x5 [0203.349] GetLastError () returned 0x5 [0203.349] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12960, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0203.349] FindClose (in: hFindFile=0x24e780 | out: hFindFile=0x24e780) returned 1 [0203.349] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234398 | out: hHeap=0x1f0000) returned 1 [0203.349] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e360 | out: hHeap=0x1f0000) returned 1 [0203.349] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b80 | out: hHeap=0x1f0000) returned 1 [0203.349] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233bb8 | out: hHeap=0x1f0000) returned 1 [0203.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234230 [0203.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0203.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22eb58 [0203.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0203.349] FindFirstFileW (in: lpFileName="C:\\\\Boot\\ru-RU\\*", lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef698608, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e880 [0203.350] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b30 [0203.350] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227f20 [0203.350] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b30 | out: hHeap=0x1f0000) returned 1 [0203.350] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0203.350] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0203.350] FindNextFileW (in: hFindFile=0x24e880, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef698608, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0203.350] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bd0 [0203.350] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0203.350] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bd0 | out: hHeap=0x1f0000) returned 1 [0203.350] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227f20 | out: hHeap=0x1f0000) returned 1 [0203.350] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0203.350] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0203.350] FindNextFileW (in: hFindFile=0x24e880, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0203.350] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0203.351] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c20 [0203.351] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233f18 [0203.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c20 | out: hHeap=0x1f0000) returned 1 [0203.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0203.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0203.351] CreateFileW (lpFileName="C:\\\\Boot\\ru-RU\\bootmgr.exe.mui" (normalized: "c:\\boot\\ru-ru\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0203.351] GetLastError () returned 0x5 [0203.351] GetLastError () returned 0x5 [0203.351] FindNextFileW (in: hFindFile=0x24e880, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f699a6, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xafa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0203.351] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b80 [0203.351] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b58 [0203.351] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233d68 [0203.352] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b58 | out: hHeap=0x1f0000) returned 1 [0203.352] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233f18 | out: hHeap=0x1f0000) returned 1 [0203.352] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b80 | out: hHeap=0x1f0000) returned 1 [0203.352] CreateFileW (lpFileName="C:\\\\Boot\\ru-RU\\memtest.exe.mui" (normalized: "c:\\boot\\ru-ru\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0203.352] GetLastError () returned 0x5 [0203.352] GetLastError () returned 0x5 [0203.352] FindNextFileW (in: hFindFile=0x24e880, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f699a6, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xafa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0203.352] FindClose (in: hFindFile=0x24e880 | out: hFindFile=0x24e880) returned 1 [0203.352] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233d68 | out: hHeap=0x1f0000) returned 1 [0203.353] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22eb58 | out: hHeap=0x1f0000) returned 1 [0203.353] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0203.353] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234230 | out: hHeap=0x1f0000) returned 1 [0203.353] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233d68 [0203.353] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609f0 [0203.353] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d6a0 [0203.353] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227f20 [0203.353] FindFirstFileW (in: lpFileName="C:\\\\Boot\\sk-SK\\*", lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e840 [0203.353] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b58 [0203.353] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0203.353] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b58 | out: hHeap=0x1f0000) returned 1 [0203.353] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227f20 | out: hHeap=0x1f0000) returned 1 [0203.353] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0203.353] FindNextFileW (in: hFindFile=0x24e840, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0203.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0203.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227f20 [0203.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0203.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0203.354] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0203.354] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0203.354] FindNextFileW (in: hFindFile=0x24e840, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0203.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609c8 [0203.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c70 [0203.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233fa8 [0203.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c70 | out: hHeap=0x1f0000) returned 1 [0203.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227f20 | out: hHeap=0x1f0000) returned 1 [0203.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609c8 | out: hHeap=0x1f0000) returned 1 [0203.354] CreateFileW (lpFileName="C:\\\\Boot\\sk-SK\\bootmgr.exe.mui" (normalized: "c:\\boot\\sk-sk\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0203.355] GetLastError () returned 0x5 [0203.355] GetLastError () returned 0x5 [0203.355] FindNextFileW (in: hFindFile=0x24e840, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0203.355] FindClose (in: hFindFile=0x24e840 | out: hFindFile=0x24e840) returned 1 [0203.355] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233fa8 | out: hHeap=0x1f0000) returned 1 [0203.355] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d6a0 | out: hHeap=0x1f0000) returned 1 [0203.355] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609f0 | out: hHeap=0x1f0000) returned 1 [0203.355] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233d68 | out: hHeap=0x1f0000) returned 1 [0203.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233c90 [0203.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b80 [0203.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22ee88 [0203.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0203.355] FindFirstFileW (in: lpFileName="C:\\\\Boot\\sl-SI\\*", lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e7c0 [0203.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ab8 [0203.356] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227f20 [0203.356] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ab8 | out: hHeap=0x1f0000) returned 1 [0203.356] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0203.356] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0203.356] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0203.356] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c20 [0203.356] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0203.356] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c20 | out: hHeap=0x1f0000) returned 1 [0203.356] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227f20 | out: hHeap=0x1f0000) returned 1 [0203.356] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0203.356] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0203.356] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0203.356] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bd0 [0203.356] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b58 [0203.356] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234110 [0203.356] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b58 | out: hHeap=0x1f0000) returned 1 [0203.356] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0203.356] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bd0 | out: hHeap=0x1f0000) returned 1 [0203.357] CreateFileW (lpFileName="C:\\\\Boot\\sl-SI\\bootmgr.exe.mui" (normalized: "c:\\boot\\sl-si\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0203.357] GetLastError () returned 0x5 [0203.357] GetLastError () returned 0x5 [0203.357] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0203.357] FindClose (in: hFindFile=0x24e7c0 | out: hFindFile=0x24e7c0) returned 1 [0203.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234110 | out: hHeap=0x1f0000) returned 1 [0203.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ee88 | out: hHeap=0x1f0000) returned 1 [0203.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b80 | out: hHeap=0x1f0000) returned 1 [0203.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233c90 | out: hHeap=0x1f0000) returned 1 [0203.357] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234080 [0203.357] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bd0 [0203.357] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e828 [0203.357] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227f20 [0203.357] FindFirstFileW (in: lpFileName="C:\\\\Boot\\sr-Latn-CS\\*", lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0x5168548b, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e9c0 [0203.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0203.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227f20 | out: hHeap=0x1f0000) returned 1 [0203.358] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0203.358] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0x5168548b, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0203.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227f20 [0203.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0203.358] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0203.358] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0203.358] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21212f9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0203.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b30 [0203.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0203.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239560 [0203.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0203.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227f20 | out: hHeap=0x1f0000) returned 1 [0203.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b30 | out: hHeap=0x1f0000) returned 1 [0203.359] CreateFileW (lpFileName="C:\\\\Boot\\sr-Latn-CS\\bootmgr.exe.mui" (normalized: "c:\\boot\\sr-latn-cs\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0203.359] GetLastError () returned 0x5 [0203.359] GetLastError () returned 0x5 [0203.359] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0xe318f070, ftLastWriteTime.dwHighDateTime=0x1d112e1, nFileSizeHigh=0x0, nFileSizeLow=0xaf58, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0203.359] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0203.359] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0203.359] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239718 [0203.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0203.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239560 | out: hHeap=0x1f0000) returned 1 [0203.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0203.360] CreateFileW (lpFileName="C:\\\\Boot\\sr-Latn-CS\\memtest.exe.mui" (normalized: "c:\\boot\\sr-latn-cs\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0203.360] GetLastError () returned 0x5 [0203.360] GetLastError () returned 0x5 [0203.360] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0xe318f070, ftLastWriteTime.dwHighDateTime=0x1d112e1, nFileSizeHigh=0x0, nFileSizeLow=0xaf58, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0203.360] FindClose (in: hFindFile=0x24e9c0 | out: hFindFile=0x24e9c0) returned 1 [0203.360] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239718 | out: hHeap=0x1f0000) returned 1 [0203.360] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e828 | out: hHeap=0x1f0000) returned 1 [0203.360] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bd0 | out: hHeap=0x1f0000) returned 1 [0203.360] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234080 | out: hHeap=0x1f0000) returned 1 [0203.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233bb8 [0203.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0203.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e360 [0203.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0203.360] FindFirstFileW (in: lpFileName="C:\\\\Boot\\sr-Latn-RS\\*", lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ea40 [0203.674] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1ff058 [0203.674] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0203.674] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0203.674] FindNextFileW (in: hFindFile=0x24ea40, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0203.674] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1feed0 [0203.674] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1ff058 | out: hHeap=0x1f0000) returned 1 [0203.674] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0203.674] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0203.674] FindNextFileW (in: hFindFile=0x24ea40, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21212f9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0203.674] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c48 [0203.674] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1ff058 [0203.674] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2399d8 [0203.674] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1ff058 | out: hHeap=0x1f0000) returned 1 [0203.674] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1feed0 | out: hHeap=0x1f0000) returned 1 [0203.674] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0203.675] CreateFileW (lpFileName="C:\\\\Boot\\sr-Latn-RS\\bootmgr.exe.mui" (normalized: "c:\\boot\\sr-latn-rs\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0203.675] GetLastError () returned 0x5 [0203.675] GetLastError () returned 0x5 [0203.675] FindNextFileW (in: hFindFile=0x24ea40, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21212f9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0203.675] FindClose (in: hFindFile=0x24ea40 | out: hFindFile=0x24ea40) returned 1 [0203.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2399d8 | out: hHeap=0x1f0000) returned 1 [0203.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e360 | out: hHeap=0x1f0000) returned 1 [0203.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0203.676] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233bb8 | out: hHeap=0x1f0000) returned 1 [0203.676] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233df8 [0203.676] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0203.676] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22ee88 [0203.676] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1feed0 [0203.676] FindFirstFileW (in: lpFileName="C:\\\\Boot\\sv-SE\\*", lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01adf43, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6a2250, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e900 [0203.676] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c48 [0203.676] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0203.676] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0203.676] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1feed0 | out: hHeap=0x1f0000) returned 1 [0203.676] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0203.676] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01adf43, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6a2250, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0203.676] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c48 [0203.676] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fefe8 [0203.676] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0203.676] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0203.676] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0203.677] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0203.677] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12960, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0203.677] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c48 [0203.677] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c70 [0203.677] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234428 [0203.677] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c70 | out: hHeap=0x1f0000) returned 1 [0203.677] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fefe8 | out: hHeap=0x1f0000) returned 1 [0203.677] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0203.677] CreateFileW (lpFileName="C:\\\\Boot\\sv-SE\\bootmgr.exe.mui" (normalized: "c:\\boot\\sv-se\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0203.677] GetLastError () returned 0x5 [0203.677] GetLastError () returned 0x5 [0203.677] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6a2250, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f699a6, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xaf98, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0203.677] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c48 [0203.677] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c70 [0203.677] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234350 [0203.677] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c70 | out: hHeap=0x1f0000) returned 1 [0203.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234428 | out: hHeap=0x1f0000) returned 1 [0203.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0203.678] CreateFileW (lpFileName="C:\\\\Boot\\sv-SE\\memtest.exe.mui" (normalized: "c:\\boot\\sv-se\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0203.678] GetLastError () returned 0x5 [0203.678] GetLastError () returned 0x5 [0203.678] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6a2250, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f699a6, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xaf98, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0203.678] FindClose (in: hFindFile=0x24e900 | out: hFindFile=0x24e900) returned 1 [0203.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234350 | out: hHeap=0x1f0000) returned 1 [0203.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ee88 | out: hHeap=0x1f0000) returned 1 [0203.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0203.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233df8 | out: hHeap=0x1f0000) returned 1 [0203.678] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234428 [0203.678] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c70 [0203.679] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d508 [0203.679] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1feed0 [0203.679] FindFirstFileW (in: lpFileName="C:\\\\Boot\\tr-TR\\*", lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206504, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6b5aca, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24eac0 [0203.679] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c48 [0203.679] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fefe8 [0203.679] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0203.679] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1feed0 | out: hHeap=0x1f0000) returned 1 [0203.679] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0203.679] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206504, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6b5aca, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0203.679] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c48 [0203.679] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1ff058 [0203.679] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0203.679] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fefe8 | out: hHeap=0x1f0000) returned 1 [0203.679] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0203.679] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0203.679] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210e1cce, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12558, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0203.679] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0203.679] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c48 [0203.679] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233cd8 [0203.680] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0203.680] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1ff058 | out: hHeap=0x1f0000) returned 1 [0203.680] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0203.680] CreateFileW (lpFileName="C:\\\\Boot\\tr-TR\\bootmgr.exe.mui" (normalized: "c:\\boot\\tr-tr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0203.680] GetLastError () returned 0x5 [0203.680] GetLastError () returned 0x5 [0203.680] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6b5aca, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f4373a, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0203.680] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609c8 [0203.680] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c48 [0203.680] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233ff0 [0203.680] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0203.680] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233cd8 | out: hHeap=0x1f0000) returned 1 [0203.680] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609c8 | out: hHeap=0x1f0000) returned 1 [0203.681] CreateFileW (lpFileName="C:\\\\Boot\\tr-TR\\memtest.exe.mui" (normalized: "c:\\boot\\tr-tr\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0203.681] GetLastError () returned 0x5 [0203.681] GetLastError () returned 0x5 [0203.681] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6b5aca, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f4373a, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0203.681] FindClose (in: hFindFile=0x24eac0 | out: hFindFile=0x24eac0) returned 1 [0203.681] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233ff0 | out: hHeap=0x1f0000) returned 1 [0203.681] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d508 | out: hHeap=0x1f0000) returned 1 [0203.681] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c70 | out: hHeap=0x1f0000) returned 1 [0203.681] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234428 | out: hHeap=0x1f0000) returned 1 [0203.681] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233bb8 [0203.681] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c70 [0203.681] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e360 [0203.681] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0203.681] FindFirstFileW (in: lpFileName="C:\\\\Boot\\uk-UA\\*", lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206a30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ec80 [0203.682] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c48 [0203.682] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1feed0 [0203.682] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0203.682] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0203.682] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0203.682] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206a30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0203.682] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c48 [0203.682] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0203.682] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0203.682] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1feed0 | out: hHeap=0x1f0000) returned 1 [0203.682] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0203.682] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0203.682] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210e1cce, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0203.682] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c48 [0203.682] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609c8 [0203.682] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233c90 [0203.682] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609c8 | out: hHeap=0x1f0000) returned 1 [0203.682] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0203.682] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0203.683] CreateFileW (lpFileName="C:\\\\Boot\\uk-UA\\bootmgr.exe.mui" (normalized: "c:\\boot\\uk-ua\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0203.683] GetLastError () returned 0x5 [0203.683] GetLastError () returned 0x5 [0203.683] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210e1cce, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0203.683] FindClose (in: hFindFile=0x24ec80 | out: hFindFile=0x24ec80) returned 1 [0203.683] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233c90 | out: hHeap=0x1f0000) returned 1 [0203.683] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e360 | out: hHeap=0x1f0000) returned 1 [0203.683] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c70 | out: hHeap=0x1f0000) returned 1 [0203.683] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233bb8 | out: hHeap=0x1f0000) returned 1 [0203.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233db0 [0203.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c48 [0203.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d508 [0203.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1feed0 [0203.683] FindFirstFileW (in: lpFileName="C:\\\\Boot\\zh-CN\\*", lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207100, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6d7e9a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e980 [0203.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c70 [0203.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fefe8 [0203.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c70 | out: hHeap=0x1f0000) returned 1 [0203.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1feed0 | out: hHeap=0x1f0000) returned 1 [0203.684] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0203.684] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207100, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6d7e9a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0203.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c70 [0203.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1ff058 [0203.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c70 | out: hHeap=0x1f0000) returned 1 [0203.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fefe8 | out: hHeap=0x1f0000) returned 1 [0203.684] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0203.684] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0203.684] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xf960, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0203.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0203.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c70 [0203.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233ff0 [0203.685] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c70 | out: hHeap=0x1f0000) returned 1 [0203.685] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1ff058 | out: hHeap=0x1f0000) returned 1 [0203.685] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0203.685] CreateFileW (lpFileName="C:\\\\Boot\\zh-CN\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-cn\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0203.685] GetLastError () returned 0x5 [0203.685] GetLastError () returned 0x5 [0203.685] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6d7e9a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa5a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0203.685] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c70 [0203.685] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609c8 [0203.685] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234110 [0203.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609c8 | out: hHeap=0x1f0000) returned 1 [0203.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233ff0 | out: hHeap=0x1f0000) returned 1 [0203.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c70 | out: hHeap=0x1f0000) returned 1 [0203.686] CreateFileW (lpFileName="C:\\\\Boot\\zh-CN\\memtest.exe.mui" (normalized: "c:\\boot\\zh-cn\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0203.686] GetLastError () returned 0x5 [0203.686] GetLastError () returned 0x5 [0203.686] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6d7e9a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa5a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0203.686] FindClose (in: hFindFile=0x24e980 | out: hFindFile=0x24e980) returned 1 [0203.687] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234110 | out: hHeap=0x1f0000) returned 1 [0203.687] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d508 | out: hHeap=0x1f0000) returned 1 [0203.687] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0203.687] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233db0 | out: hHeap=0x1f0000) returned 1 [0203.687] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234350 [0203.687] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c48 [0203.687] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22ee88 [0203.687] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fefe8 [0203.687] FindFirstFileW (in: lpFileName="C:\\\\Boot\\zh-HK\\*", lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207675, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x518ea25e, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e7c0 [0203.687] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c70 [0203.687] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1feed0 [0203.687] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c70 | out: hHeap=0x1f0000) returned 1 [0203.687] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fefe8 | out: hHeap=0x1f0000) returned 1 [0203.687] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0203.687] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207675, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x518ea25e, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0203.687] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c70 [0203.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1ff058 [0203.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c70 | out: hHeap=0x1f0000) returned 1 [0203.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1feed0 | out: hHeap=0x1f0000) returned 1 [0203.688] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0203.688] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0203.688] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xf958, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0203.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0203.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c70 [0203.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233c90 [0203.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c70 | out: hHeap=0x1f0000) returned 1 [0203.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1ff058 | out: hHeap=0x1f0000) returned 1 [0203.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0203.688] CreateFileW (lpFileName="C:\\\\Boot\\zh-HK\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-hk\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0203.688] GetLastError () returned 0x5 [0203.689] GetLastError () returned 0x5 [0203.689] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x518ea25e, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0xe31db522, ftLastWriteTime.dwHighDateTime=0x1d112e1, nFileSizeHigh=0x0, nFileSizeLow=0xa558, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0203.689] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c70 [0203.689] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609c8 [0203.689] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234428 [0203.689] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609c8 | out: hHeap=0x1f0000) returned 1 [0203.689] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233c90 | out: hHeap=0x1f0000) returned 1 [0203.689] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c70 | out: hHeap=0x1f0000) returned 1 [0203.690] CreateFileW (lpFileName="C:\\\\Boot\\zh-HK\\memtest.exe.mui" (normalized: "c:\\boot\\zh-hk\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0203.690] GetLastError () returned 0x5 [0203.690] GetLastError () returned 0x5 [0203.690] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x518ea25e, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0xe31db522, ftLastWriteTime.dwHighDateTime=0x1d112e1, nFileSizeHigh=0x0, nFileSizeLow=0xa558, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0203.690] FindClose (in: hFindFile=0x24e7c0 | out: hFindFile=0x24e7c0) returned 1 [0203.690] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234428 | out: hHeap=0x1f0000) returned 1 [0203.690] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ee88 | out: hHeap=0x1f0000) returned 1 [0203.690] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0203.690] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234350 | out: hHeap=0x1f0000) returned 1 [0203.690] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233ff0 [0203.691] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0203.691] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d508 [0203.691] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1feed0 [0203.691] FindFirstFileW (in: lpFileName="C:\\\\Boot\\zh-TW\\*", lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ea40 [0203.691] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c48 [0203.691] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1ff058 [0203.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0203.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1feed0 | out: hHeap=0x1f0000) returned 1 [0203.691] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0203.691] FindNextFileW (in: hFindFile=0x24ea40, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0203.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c48 [0203.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1feed0 [0203.692] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0203.692] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1ff058 | out: hHeap=0x1f0000) returned 1 [0203.692] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0203.692] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0203.692] FindNextFileW (in: hFindFile=0x24ea40, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xf960, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0203.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c48 [0203.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c70 [0203.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2341a0 [0203.692] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c70 | out: hHeap=0x1f0000) returned 1 [0203.692] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1feed0 | out: hHeap=0x1f0000) returned 1 [0203.693] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0203.693] CreateFileW (lpFileName="C:\\\\Boot\\zh-TW\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-tw\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0203.693] GetLastError () returned 0x5 [0203.693] GetLastError () returned 0x5 [0203.693] FindNextFileW (in: hFindFile=0x24ea40, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa598, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0203.693] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c48 [0203.694] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c70 [0203.694] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234350 [0203.694] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c70 | out: hHeap=0x1f0000) returned 1 [0203.694] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2341a0 | out: hHeap=0x1f0000) returned 1 [0203.694] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0203.694] CreateFileW (lpFileName="C:\\\\Boot\\zh-TW\\memtest.exe.mui" (normalized: "c:\\boot\\zh-tw\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0203.694] GetLastError () returned 0x5 [0203.694] GetLastError () returned 0x5 [0203.694] FindNextFileW (in: hFindFile=0x24ea40, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa598, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0203.695] FindClose (in: hFindFile=0x24ea40 | out: hFindFile=0x24ea40) returned 1 [0203.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234350 | out: hHeap=0x1f0000) returned 1 [0203.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d508 | out: hHeap=0x1f0000) returned 1 [0203.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0203.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233ff0 | out: hHeap=0x1f0000) returned 1 [0203.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a68 | out: hHeap=0x1f0000) returned 1 [0203.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238708 | out: hHeap=0x1f0000) returned 1 [0203.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384d8 | out: hHeap=0x1f0000) returned 1 [0203.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385a0 | out: hHeap=0x1f0000) returned 1 [0203.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385f0 | out: hHeap=0x1f0000) returned 1 [0203.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238618 | out: hHeap=0x1f0000) returned 1 [0203.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0203.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0203.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0203.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0203.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0203.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0203.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606f8 | out: hHeap=0x1f0000) returned 1 [0203.696] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604c8 | out: hHeap=0x1f0000) returned 1 [0203.696] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260720 | out: hHeap=0x1f0000) returned 1 [0203.696] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608b0 | out: hHeap=0x1f0000) returned 1 [0203.696] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0203.696] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0203.696] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260658 | out: hHeap=0x1f0000) returned 1 [0203.696] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0203.696] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0203.696] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260798 | out: hHeap=0x1f0000) returned 1 [0203.696] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0203.696] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607c0 | out: hHeap=0x1f0000) returned 1 [0203.696] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0203.696] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0203.696] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607e8 | out: hHeap=0x1f0000) returned 1 [0203.696] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228230 | out: hHeap=0x1f0000) returned 1 [0203.696] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228150 | out: hHeap=0x1f0000) returned 1 [0203.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260838 | out: hHeap=0x1f0000) returned 1 [0203.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0203.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605e0 | out: hHeap=0x1f0000) returned 1 [0203.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260900 | out: hHeap=0x1f0000) returned 1 [0203.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227fc8 | out: hHeap=0x1f0000) returned 1 [0203.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0203.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0203.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0203.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260630 | out: hHeap=0x1f0000) returned 1 [0203.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0203.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0203.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0203.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ee8 | out: hHeap=0x1f0000) returned 1 [0203.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e1c8 | out: hHeap=0x1f0000) returned 1 [0203.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380f0 | out: hHeap=0x1f0000) returned 1 [0203.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221ef0 | out: hHeap=0x1f0000) returned 1 [0203.697] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234350 [0203.697] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0203.698] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22ee88 [0203.698] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233e88 [0203.698] FindFirstFileW (in: lpFileName="C:\\\\Documents and Settings\\*", lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="Ɛ")) returned 0xffffffff [0203.698] GetLastError () returned 0x5 [0203.698] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x1fdf47c | out: lpMode=0x1fdf47c) returned 0 [0203.698] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="畦正i", cchWideChar=2, lpMultiByteStr=0x1fde06c, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ç\x95¦æ­£", lpUsedDefaultChar=0x0) returned 6 [0203.698] WriteFile (in: hFile=0x90, lpBuffer=0x1fde06c, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x1fde064, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x1fde064, lpOverlapped=0x0) returned 0 [0203.699] GetLastError () returned 0x6 [0203.699] GetLastError () returned 0x6 [0203.699] lstrcmpW (lpString1="zh-TW", lpString2=".") returned 1 [0203.699] lstrcmpW (lpString1="zh-TW", lpString2="..") returned 1 [0203.699] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x205330 [0203.699] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239508 [0203.699] FindNextFileW (in: hFindFile=0xffffffff, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="Ɛ")) returned 0 [0203.699] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0203.699] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233ed0 [0203.699] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0203.699] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e360 [0203.699] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239668 [0203.699] FindFirstFileW (in: lpFileName="C:\\\\Documents and Settings\\zh-TW\\*", lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0xc0000022, ftCreationTime.dwLowDateTime=0x7726971a, ftCreationTime.dwHighDateTime=0x2297b8, ftLastAccessTime.dwLowDateTime=0x229698, ftLastAccessTime.dwHighDateTime=0x7726964e, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x3c003c, nFileSizeLow=0x233ff0, dwReserved0=0x20002, dwReserved1=0x23402c, cFileName="8:㺈#ǽt.ex", cAlternateFileName="\"ǽⷾ眽Ə")) returned 0xffffffff [0203.700] GetLastError () returned 0x3 [0203.700] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x1fdf060 | out: lpMode=0x1fdf060) returned 0 [0203.700] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="畦正s.dll.mui", cchWideChar=2, lpMultiByteStr=0x1fddc50, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ç\x95¦æ­£", lpUsedDefaultChar=0x0) returned 6 [0203.700] WriteFile (in: hFile=0x90, lpBuffer=0x1fddc50, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x1fddc48, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x1fddc48, lpOverlapped=0x0) returned 0 [0203.700] GetLastError () returned 0x6 [0203.700] GetLastError () returned 0x6 [0203.700] CreateFileW (lpFileName="C:\\\\Documents and Settings\\zh-TW\\8:㺈#ǽt.ex" (normalized: "c:\\documents and settings\\zh-tw\\8:㺈#ǽt.ex"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0203.700] GetLastError () returned 0x3 [0203.700] GetLastError () returned 0x3 [0203.700] FindNextFileW (in: hFindFile=0xffffffff, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0xc0000022, ftCreationTime.dwLowDateTime=0x7726971a, ftCreationTime.dwHighDateTime=0x2297b8, ftLastAccessTime.dwLowDateTime=0x229698, ftLastAccessTime.dwHighDateTime=0x7726964e, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x3c003c, nFileSizeLow=0x233ff0, dwReserved0=0x20002, dwReserved1=0x23402c, cFileName="8:㺈#ǽt.ex", cAlternateFileName="\"ǽⷾ眽Ə")) returned 0 [0203.700] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0203.700] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2182d0 | out: hHeap=0x1f0000) returned 1 [0203.700] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e360 | out: hHeap=0x1f0000) returned 1 [0203.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0203.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233ed0 | out: hHeap=0x1f0000) returned 1 [0203.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214fd8 | out: hHeap=0x1f0000) returned 1 [0203.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239508 | out: hHeap=0x1f0000) returned 1 [0203.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205330 | out: hHeap=0x1f0000) returned 1 [0203.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ee88 | out: hHeap=0x1f0000) returned 1 [0203.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0203.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234350 | out: hHeap=0x1f0000) returned 1 [0203.701] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234350 [0203.701] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2607e8 [0203.701] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e1c8 [0203.701] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260630 [0203.701] FindFirstFileW (in: lpFileName="C:\\\\ESD\\*", lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc1969407, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ecc0 [0203.701] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608b0 [0203.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260630 | out: hHeap=0x1f0000) returned 1 [0203.702] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0203.702] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc1969407, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0203.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0203.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608b0 | out: hHeap=0x1f0000) returned 1 [0203.702] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0203.702] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0203.702] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc1969407, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0203.702] FindClose (in: hFindFile=0x24ecc0 | out: hFindFile=0x24ecc0) returned 1 [0203.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0203.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e1c8 | out: hHeap=0x1f0000) returned 1 [0203.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607e8 | out: hHeap=0x1f0000) returned 1 [0203.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234350 | out: hHeap=0x1f0000) returned 1 [0203.703] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234110 [0203.703] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260888 [0203.703] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22dd00 [0203.703] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260770 [0203.703] FindFirstFileW (in: lpFileName="C:\\\\Logs\\*", lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf1d773, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xa03727f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xfd9ec80, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ea00 [0203.703] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260540 [0203.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0203.703] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0203.703] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf1d773, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xa03727f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xfd9ec80, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0203.704] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0203.704] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0203.704] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0203.704] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0203.705] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5052fa31, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5052fa31, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Application.evtx", cAlternateFileName="APPLIC~1.EVT")) returned 1 [0203.705] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1ff058 [0203.705] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0203.705] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2341a0 [0203.705] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0203.705] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0203.705] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1ff058 | out: hHeap=0x1f0000) returned 1 [0203.705] CreateFileW (lpFileName="C:\\\\Logs\\Application.evtx" (normalized: "c:\\logs\\application.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0203.706] GetFileType (hFile=0x204) returned 0x1 [0203.706] CloseHandle (hObject=0x204) returned 1 [0203.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233e88 [0203.706] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Application.evtx" (normalized: "c:\\logs\\application.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5052fa31, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5052fa31, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.706] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233e88 | out: hHeap=0x1f0000) returned 1 [0203.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233c00 [0203.706] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Application.evtx" (normalized: "c:\\logs\\application.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5052fa31, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5052fa31, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.706] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233c00 | out: hHeap=0x1f0000) returned 1 [0203.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233db0 [0203.706] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233db0 | out: hHeap=0x1f0000) returned 1 [0203.707] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505ee5f0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505ee5f0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="HardwareEvents.evtx", cAlternateFileName="HARDWA~1.EVT")) returned 1 [0203.707] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1feed0 [0203.707] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2607e8 [0203.707] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234350 [0203.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607e8 | out: hHeap=0x1f0000) returned 1 [0203.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2341a0 | out: hHeap=0x1f0000) returned 1 [0203.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1feed0 | out: hHeap=0x1f0000) returned 1 [0203.707] CreateFileW (lpFileName="C:\\\\Logs\\HardwareEvents.evtx" (normalized: "c:\\logs\\hardwareevents.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0203.707] GetFileType (hFile=0x204) returned 0x1 [0203.708] CloseHandle (hObject=0x204) returned 1 [0203.708] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233db0 [0203.708] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\HardwareEvents.evtx" (normalized: "c:\\logs\\hardwareevents.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505ee5f0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505ee5f0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.708] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233db0 | out: hHeap=0x1f0000) returned 1 [0203.708] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234398 [0203.708] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\HardwareEvents.evtx" (normalized: "c:\\logs\\hardwareevents.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505ee5f0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505ee5f0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.708] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234398 | out: hHeap=0x1f0000) returned 1 [0203.708] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234158 [0203.709] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234158 | out: hHeap=0x1f0000) returned 1 [0203.709] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505a2134, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505a2134, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer.evtx", cAlternateFileName="INTERN~1.EVT")) returned 1 [0203.709] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1ff058 [0203.709] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260540 [0203.709] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233ff0 [0203.709] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0203.709] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234350 | out: hHeap=0x1f0000) returned 1 [0203.709] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1ff058 | out: hHeap=0x1f0000) returned 1 [0203.709] CreateFileW (lpFileName="C:\\\\Logs\\Internet Explorer.evtx" (normalized: "c:\\logs\\internet explorer.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0203.709] GetFileType (hFile=0x204) returned 0x1 [0203.710] CloseHandle (hObject=0x204) returned 1 [0203.710] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234350 [0203.710] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Internet Explorer.evtx" (normalized: "c:\\logs\\internet explorer.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505a2134, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505a2134, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234350 | out: hHeap=0x1f0000) returned 1 [0203.710] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234158 [0203.710] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Internet Explorer.evtx" (normalized: "c:\\logs\\internet explorer.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505a2134, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505a2134, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234158 | out: hHeap=0x1f0000) returned 1 [0203.710] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234350 [0203.711] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234350 | out: hHeap=0x1f0000) returned 1 [0203.711] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5057bed8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5057bed8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Key Management Service.evtx", cAlternateFileName="KEYMAN~1.EVT")) returned 1 [0203.711] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234350 [0203.711] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260518 [0203.711] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239508 [0203.711] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0203.711] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233ff0 | out: hHeap=0x1f0000) returned 1 [0203.711] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234350 | out: hHeap=0x1f0000) returned 1 [0203.711] CreateFileW (lpFileName="C:\\\\Logs\\Key Management Service.evtx" (normalized: "c:\\logs\\key management service.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0203.712] GetFileType (hFile=0x204) returned 0x1 [0203.712] CloseHandle (hObject=0x204) returned 1 [0203.712] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239668 [0203.712] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Key Management Service.evtx" (normalized: "c:\\logs\\key management service.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5057bed8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5057bed8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.713] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239668 | out: hHeap=0x1f0000) returned 1 [0203.713] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239668 [0203.713] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Key Management Service.evtx" (normalized: "c:\\logs\\key management service.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5057bed8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5057bed8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.713] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239668 | out: hHeap=0x1f0000) returned 1 [0203.713] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239668 [0203.713] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239668 | out: hHeap=0x1f0000) returned 1 [0203.713] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc1dbd7c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc1dbd7c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Client-Licensing-Platform%4Admin.evtx", cAlternateFileName="MICROS~1.EVT")) returned 1 [0203.713] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214ea0 [0203.713] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606f8 [0203.713] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229f18 [0203.713] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606f8 | out: hHeap=0x1f0000) returned 1 [0203.713] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239508 | out: hHeap=0x1f0000) returned 1 [0203.713] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214ea0 | out: hHeap=0x1f0000) returned 1 [0203.714] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx" (normalized: "c:\\logs\\microsoft-client-licensing-platform%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0203.714] GetFileType (hFile=0x204) returned 0x1 [0203.714] CloseHandle (hObject=0x204) returned 1 [0203.714] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a3e0 [0203.715] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx" (normalized: "c:\\logs\\microsoft-client-licensing-platform%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc1dbd7c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc1dbd7c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.715] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a3e0 | out: hHeap=0x1f0000) returned 1 [0203.715] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a4f0 [0203.715] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx" (normalized: "c:\\logs\\microsoft-client-licensing-platform%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc1dbd7c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc1dbd7c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.715] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a4f0 | out: hHeap=0x1f0000) returned 1 [0203.715] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229fa0 [0203.715] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229fa0 | out: hHeap=0x1f0000) returned 1 [0203.715] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca5d836e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca5d836e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx", cAlternateFileName="MICROS~2.EVT")) returned 1 [0203.715] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a038 [0203.715] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0203.715] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261440 [0203.715] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0203.716] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229f18 | out: hHeap=0x1f0000) returned 1 [0203.716] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a038 | out: hHeap=0x1f0000) returned 1 [0203.716] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx" (normalized: "c:\\logs\\microsoft-windows-application-experience%4program-compatibility-assistant.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0203.716] GetFileType (hFile=0x204) returned 0x1 [0203.717] CloseHandle (hObject=0x204) returned 1 [0203.717] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2610a8 [0203.717] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx" (normalized: "c:\\logs\\microsoft-windows-application-experience%4program-compatibility-assistant.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca5d836e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca5d836e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.717] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2610a8 | out: hHeap=0x1f0000) returned 1 [0203.717] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261388 [0203.717] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx" (normalized: "c:\\logs\\microsoft-windows-application-experience%4program-compatibility-assistant.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca5d836e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca5d836e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.718] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261388 | out: hHeap=0x1f0000) returned 1 [0203.718] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2610a8 [0203.718] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2610a8 | out: hHeap=0x1f0000) returned 1 [0203.718] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9206ac5, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9206ac5, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xf9c0f529, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx", cAlternateFileName="MICROS~3.EVT")) returned 1 [0203.718] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0203.718] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260518 [0203.718] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261388 [0203.718] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0203.718] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261440 | out: hHeap=0x1f0000) returned 1 [0203.718] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0203.719] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-applicationresourcemanagementsystem%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0203.719] GetFileType (hFile=0x204) returned 0x1 [0203.719] CloseHandle (hObject=0x204) returned 1 [0203.720] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2612d0 [0203.720] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-applicationresourcemanagementsystem%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9206ac5, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9206ac5, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xf9c0f529, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000)) returned 1 [0203.720] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2612d0 | out: hHeap=0x1f0000) returned 1 [0203.961] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261440 [0203.961] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-applicationresourcemanagementsystem%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9206ac5, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9206ac5, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xf9c0f529, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000)) returned 1 [0203.962] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261440 | out: hHeap=0x1f0000) returned 1 [0203.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261160 [0203.962] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261160 | out: hHeap=0x1f0000) returned 1 [0203.962] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4143825, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4143825, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppLocker%4EXE and DLL.evtx", cAlternateFileName="MICROS~4.EVT")) returned 1 [0203.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c98 [0203.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609c8 [0203.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22af40 [0203.962] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609c8 | out: hHeap=0x1f0000) returned 1 [0203.962] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261388 | out: hHeap=0x1f0000) returned 1 [0203.962] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c98 | out: hHeap=0x1f0000) returned 1 [0203.962] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-AppLocker%4EXE and DLL.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4exe and dll.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0203.963] GetFileType (hFile=0x204) returned 0x1 [0203.963] CloseHandle (hObject=0x204) returned 1 [0203.963] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ace8 [0203.963] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppLocker%4EXE and DLL.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4exe and dll.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4143825, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4143825, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.963] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ace8 | out: hHeap=0x1f0000) returned 1 [0203.963] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ace8 [0203.963] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppLocker%4EXE and DLL.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4exe and dll.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4143825, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4143825, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.964] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ace8 | out: hHeap=0x1f0000) returned 1 [0203.964] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ace8 [0203.964] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ace8 | out: hHeap=0x1f0000) returned 1 [0203.964] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4169a7a, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4169a7a, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppLocker%4MSI and Script.evtx", cAlternateFileName="MI2EEA~1.EVT")) returned 1 [0203.964] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a928 [0203.964] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a68 [0203.964] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229e08 [0203.964] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a68 | out: hHeap=0x1f0000) returned 1 [0203.964] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22af40 | out: hHeap=0x1f0000) returned 1 [0203.964] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a928 | out: hHeap=0x1f0000) returned 1 [0203.965] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-AppLocker%4MSI and Script.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4msi and script.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0203.965] GetFileType (hFile=0x204) returned 0x1 [0203.965] CloseHandle (hObject=0x204) returned 1 [0203.965] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229be8 [0203.965] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppLocker%4MSI and Script.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4msi and script.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4169a7a, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4169a7a, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.965] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229be8 | out: hHeap=0x1f0000) returned 1 [0203.966] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229a50 [0203.966] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppLocker%4MSI and Script.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4msi and script.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4169a7a, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4169a7a, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.966] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229a50 | out: hHeap=0x1f0000) returned 1 [0203.966] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a248 [0203.966] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a248 | out: hHeap=0x1f0000) returned 1 [0203.966] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd418fcc3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd418fcc3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx", cAlternateFileName="MI07E1~1.EVT")) returned 1 [0203.966] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a248 [0203.966] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c48 [0203.966] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0203.966] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0203.966] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229e08 | out: hHeap=0x1f0000) returned 1 [0203.966] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a248 | out: hHeap=0x1f0000) returned 1 [0203.967] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-deployment.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0203.967] GetFileType (hFile=0x204) returned 0x1 [0203.967] CloseHandle (hObject=0x204) returned 1 [0203.967] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0203.968] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-deployment.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd418fcc3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd418fcc3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.968] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0203.968] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0203.968] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-deployment.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd418fcc3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd418fcc3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.968] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0203.968] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0203.968] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0203.968] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd418fcc3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd418fcc3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx", cAlternateFileName="MI8196~1.EVT")) returned 1 [0203.968] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a710 [0203.968] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c48 [0203.968] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0203.968] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0203.968] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0203.968] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a710 | out: hHeap=0x1f0000) returned 1 [0203.969] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-execution.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0203.969] GetFileType (hFile=0x204) returned 0x1 [0203.969] CloseHandle (hObject=0x204) returned 1 [0203.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0203.969] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-execution.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd418fcc3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd418fcc3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0203.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0203.969] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-execution.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd418fcc3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd418fcc3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0203.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0203.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0203.970] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd41b5f2d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd41b5f2d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppModel-Runtime%4Admin.evtx", cAlternateFileName="MIE36C~1.EVT")) returned 1 [0203.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c98 [0203.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609c8 [0203.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a9a0 [0203.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609c8 | out: hHeap=0x1f0000) returned 1 [0203.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0203.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c98 | out: hHeap=0x1f0000) returned 1 [0203.971] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-AppModel-Runtime%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-appmodel-runtime%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0203.971] GetFileType (hFile=0x204) returned 0x1 [0203.971] CloseHandle (hObject=0x204) returned 1 [0203.971] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22af40 [0203.971] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppModel-Runtime%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-appmodel-runtime%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd41b5f2d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd41b5f2d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.971] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22af40 | out: hHeap=0x1f0000) returned 1 [0203.971] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ace8 [0203.971] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppModel-Runtime%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-appmodel-runtime%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd41b5f2d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd41b5f2d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ace8 | out: hHeap=0x1f0000) returned 1 [0203.972] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22aa90 [0203.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aa90 | out: hHeap=0x1f0000) returned 1 [0203.972] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd389efbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd389efbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppReadiness%4Admin.evtx", cAlternateFileName="MIC5CB~1.EVT")) returned 1 [0203.972] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d00 [0203.972] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ab8 [0203.972] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a928 [0203.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ab8 | out: hHeap=0x1f0000) returned 1 [0203.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a9a0 | out: hHeap=0x1f0000) returned 1 [0203.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d00 | out: hHeap=0x1f0000) returned 1 [0203.972] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-AppReadiness%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0203.973] GetFileType (hFile=0x204) returned 0x1 [0203.973] CloseHandle (hObject=0x204) returned 1 [0203.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22af40 [0203.973] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppReadiness%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd389efbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd389efbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22af40 | out: hHeap=0x1f0000) returned 1 [0203.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a9a0 [0203.973] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppReadiness%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd389efbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd389efbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a9a0 | out: hHeap=0x1f0000) returned 1 [0203.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22abf8 [0203.974] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22abf8 | out: hHeap=0x1f0000) returned 1 [0203.974] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd38c5212, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd38c5212, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x111000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppReadiness%4Operational.evtx", cAlternateFileName="MIF8AA~1.EVT")) returned 1 [0203.974] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a838 [0203.974] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ae0 [0203.974] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229f18 [0203.974] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ae0 | out: hHeap=0x1f0000) returned 1 [0203.974] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a928 | out: hHeap=0x1f0000) returned 1 [0203.974] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a838 | out: hHeap=0x1f0000) returned 1 [0203.974] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-AppReadiness%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0203.974] GetFileType (hFile=0x204) returned 0x1 [0203.974] CloseHandle (hObject=0x204) returned 1 [0203.975] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229e08 [0203.975] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppReadiness%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd38c5212, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd38c5212, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x111000)) returned 1 [0203.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229e08 | out: hHeap=0x1f0000) returned 1 [0203.975] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2299c8 [0203.975] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppReadiness%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd38c5212, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd38c5212, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x111000)) returned 1 [0203.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2299c8 | out: hHeap=0x1f0000) returned 1 [0203.975] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a028 [0203.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a028 | out: hHeap=0x1f0000) returned 1 [0203.975] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4143825, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4143825, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppXDeployment%4Operational.evtx", cAlternateFileName="MI34FE~1.EVT")) returned 1 [0203.975] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22af40 [0203.975] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c48 [0203.975] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229d80 [0203.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0203.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229f18 | out: hHeap=0x1f0000) returned 1 [0203.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22af40 | out: hHeap=0x1f0000) returned 1 [0203.976] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-AppXDeployment%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeployment%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0203.976] GetFileType (hFile=0x204) returned 0x1 [0203.976] CloseHandle (hObject=0x204) returned 1 [0203.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a2d0 [0203.976] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppXDeployment%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeployment%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4143825, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4143825, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a2d0 | out: hHeap=0x1f0000) returned 1 [0203.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a688 [0203.977] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppXDeployment%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeployment%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4143825, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4143825, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.977] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a688 | out: hHeap=0x1f0000) returned 1 [0203.977] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2299c8 [0203.977] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2299c8 | out: hHeap=0x1f0000) returned 1 [0203.977] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5af3554f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5af3554f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x211000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppXDeploymentServer%4Operational.evtx", cAlternateFileName="MIA24C~1.EVT")) returned 1 [0203.977] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a3e0 [0203.977] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0203.977] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0203.977] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0203.977] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229d80 | out: hHeap=0x1f0000) returned 1 [0203.977] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a3e0 | out: hHeap=0x1f0000) returned 1 [0203.978] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0203.978] GetFileType (hFile=0x204) returned 0x1 [0203.978] CloseHandle (hObject=0x204) returned 1 [0203.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0203.978] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5af3554f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5af3554f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x211000)) returned 1 [0203.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0203.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0203.979] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5af3554f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5af3554f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x211000)) returned 1 [0203.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0203.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0203.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0203.979] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5af3554f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5af3554f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx", cAlternateFileName="MIDBEC~1.EVT")) returned 1 [0203.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ace8 [0203.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0203.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0203.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0203.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0203.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ace8 | out: hHeap=0x1f0000) returned 1 [0203.980] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4restricted.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0203.980] GetFileType (hFile=0x204) returned 0x1 [0203.980] CloseHandle (hObject=0x204) returned 1 [0203.980] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0203.980] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4restricted.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5af3554f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5af3554f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0203.980] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0203.981] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4restricted.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5af3554f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5af3554f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0203.981] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0203.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0203.981] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85798667, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x85798667, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppxPackaging%4Operational.evtx", cAlternateFileName="MI54F1~1.EVT")) returned 1 [0203.981] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ab80 [0203.981] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0203.981] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a3e0 [0203.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0203.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0203.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab80 | out: hHeap=0x1f0000) returned 1 [0203.982] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-AppxPackaging%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxpackaging%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0203.982] GetFileType (hFile=0x204) returned 0x1 [0203.982] CloseHandle (hObject=0x204) returned 1 [0203.982] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229f18 [0203.982] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppxPackaging%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxpackaging%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85798667, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x85798667, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.982] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229f18 | out: hHeap=0x1f0000) returned 1 [0203.982] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229f18 [0203.982] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppxPackaging%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxpackaging%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85798667, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x85798667, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229f18 | out: hHeap=0x1f0000) returned 1 [0203.983] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229cf8 [0203.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229cf8 | out: hHeap=0x1f0000) returned 1 [0203.983] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd74d25ab, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd74d25ab, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx", cAlternateFileName="MI111F~1.EVT")) returned 1 [0203.983] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0203.983] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b30 [0203.983] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219d98 [0203.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b30 | out: hHeap=0x1f0000) returned 1 [0203.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a3e0 | out: hHeap=0x1f0000) returned 1 [0203.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0203.983] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-backgroundtaskinfrastructure%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0203.983] GetFileType (hFile=0x204) returned 0x1 [0203.984] CloseHandle (hObject=0x204) returned 1 [0203.984] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219e40 [0203.984] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-backgroundtaskinfrastructure%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd74d25ab, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd74d25ab, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.984] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219e40 | out: hHeap=0x1f0000) returned 1 [0203.984] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219c48 [0203.984] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-backgroundtaskinfrastructure%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd74d25ab, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd74d25ab, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.984] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219c48 | out: hHeap=0x1f0000) returned 1 [0203.984] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219c48 [0203.984] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219c48 | out: hHeap=0x1f0000) returned 1 [0203.984] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1f96ca4, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xe1f96ca4, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Bits-Client%4Operational.evtx", cAlternateFileName="MI9465~1.EVT")) returned 1 [0203.984] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214ea0 [0203.984] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ba8 [0203.984] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2299c8 [0203.984] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ba8 | out: hHeap=0x1f0000) returned 1 [0203.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219d98 | out: hHeap=0x1f0000) returned 1 [0203.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214ea0 | out: hHeap=0x1f0000) returned 1 [0203.985] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Bits-Client%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-bits-client%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0203.985] GetFileType (hFile=0x204) returned 0x1 [0203.985] CloseHandle (hObject=0x204) returned 1 [0203.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229f18 [0203.985] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Bits-Client%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-bits-client%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1f96ca4, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xe1f96ca4, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229f18 | out: hHeap=0x1f0000) returned 1 [0203.986] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229a50 [0203.986] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Bits-Client%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-bits-client%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1f96ca4, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xe1f96ca4, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229a50 | out: hHeap=0x1f0000) returned 1 [0203.986] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229e08 [0203.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229e08 | out: hHeap=0x1f0000) returned 1 [0203.986] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8783aa15, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8783aa15, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-CodeIntegrity%4Operational.evtx", cAlternateFileName="MI03A7~1.EVT")) returned 1 [0203.987] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a838 [0203.987] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ae0 [0203.987] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229830 [0203.987] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ae0 | out: hHeap=0x1f0000) returned 1 [0203.987] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2299c8 | out: hHeap=0x1f0000) returned 1 [0203.987] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a838 | out: hHeap=0x1f0000) returned 1 [0203.987] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-CodeIntegrity%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-codeintegrity%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0203.987] GetFileType (hFile=0x204) returned 0x1 [0203.988] CloseHandle (hObject=0x204) returned 1 [0203.988] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a4f0 [0203.988] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-CodeIntegrity%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-codeintegrity%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8783aa15, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8783aa15, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a4f0 | out: hHeap=0x1f0000) returned 1 [0203.988] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a4f0 [0203.988] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-CodeIntegrity%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-codeintegrity%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8783aa15, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8783aa15, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a4f0 | out: hHeap=0x1f0000) returned 1 [0203.988] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229f18 [0203.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229f18 | out: hHeap=0x1f0000) returned 1 [0203.988] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c3c71c5, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8c3c71c5, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx", cAlternateFileName="MI5CA2~1.EVT")) returned 1 [0203.989] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a688 [0203.989] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a68 [0203.989] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a6c8 [0203.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a68 | out: hHeap=0x1f0000) returned 1 [0203.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229830 | out: hHeap=0x1f0000) returned 1 [0203.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a688 | out: hHeap=0x1f0000) returned 1 [0203.989] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-coresystem-smsrouter-events%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0203.989] GetFileType (hFile=0x204) returned 0x1 [0203.989] CloseHandle (hObject=0x204) returned 1 [0203.990] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a380 [0203.990] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-coresystem-smsrouter-events%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c3c71c5, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8c3c71c5, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a380 | out: hHeap=0x1f0000) returned 1 [0203.990] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219ee8 [0203.990] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-coresystem-smsrouter-events%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c3c71c5, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8c3c71c5, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219ee8 | out: hHeap=0x1f0000) returned 1 [0203.990] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a380 [0203.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a380 | out: hHeap=0x1f0000) returned 1 [0203.990] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc9231, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cc9231, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx", cAlternateFileName="MI5FD1~1.EVT")) returned 1 [0203.990] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a928 [0203.990] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ba8 [0203.990] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a4f0 [0203.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ba8 | out: hHeap=0x1f0000) returned 1 [0203.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a6c8 | out: hHeap=0x1f0000) returned 1 [0203.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a928 | out: hHeap=0x1f0000) returned 1 [0203.991] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4backupkeysvc.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0203.991] GetFileType (hFile=0x204) returned 0x1 [0203.991] CloseHandle (hObject=0x204) returned 1 [0203.991] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a600 [0203.991] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4backupkeysvc.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc9231, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cc9231, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a600 | out: hHeap=0x1f0000) returned 1 [0203.991] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229f18 [0203.991] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4backupkeysvc.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc9231, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cc9231, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229f18 | out: hHeap=0x1f0000) returned 1 [0203.992] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229830 [0203.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229830 | out: hHeap=0x1f0000) returned 1 [0203.992] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ca2fbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ca2fbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Crypto-DPAPI%4Operational.evtx", cAlternateFileName="MI8BDF~1.EVT")) returned 1 [0203.992] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ab80 [0203.992] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b30 [0203.992] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a248 [0203.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b30 | out: hHeap=0x1f0000) returned 1 [0203.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a4f0 | out: hHeap=0x1f0000) returned 1 [0203.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab80 | out: hHeap=0x1f0000) returned 1 [0203.992] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0203.992] GetFileType (hFile=0x204) returned 0x1 [0203.993] CloseHandle (hObject=0x204) returned 1 [0203.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229cf8 [0203.993] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ca2fbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ca2fbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229cf8 | out: hHeap=0x1f0000) returned 1 [0203.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2299c8 [0203.993] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ca2fbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ca2fbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2299c8 | out: hHeap=0x1f0000) returned 1 [0203.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a578 [0203.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a578 | out: hHeap=0x1f0000) returned 1 [0203.993] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c3ed420, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8c3ed420, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx", cAlternateFileName="MIAEBD~1.EVT")) returned 1 [0203.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a620 [0203.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ba8 [0203.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2612d0 [0203.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ba8 | out: hHeap=0x1f0000) returned 1 [0203.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a248 | out: hHeap=0x1f0000) returned 1 [0203.994] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a620 | out: hHeap=0x1f0000) returned 1 [0203.994] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-devicemanagement-enterprise-diagnostics-provider%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0203.994] GetFileType (hFile=0x204) returned 0x1 [0203.994] CloseHandle (hObject=0x204) returned 1 [0203.994] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2614f8 [0203.994] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-devicemanagement-enterprise-diagnostics-provider%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c3ed420, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8c3ed420, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x101000)) returned 1 [0203.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2614f8 | out: hHeap=0x1f0000) returned 1 [0203.995] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261160 [0203.995] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-devicemanagement-enterprise-diagnostics-provider%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c3ed420, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8c3ed420, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x101000)) returned 1 [0203.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261160 | out: hHeap=0x1f0000) returned 1 [0203.995] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261440 [0203.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261440 | out: hHeap=0x1f0000) returned 1 [0203.995] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cef47f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cef47f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-DeviceSetupManager%4Admin.evtx", cAlternateFileName="MIA726~1.EVT")) returned 1 [0203.995] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22af40 [0203.995] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c48 [0203.995] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a3e0 [0203.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0203.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2612d0 | out: hHeap=0x1f0000) returned 1 [0203.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22af40 | out: hHeap=0x1f0000) returned 1 [0203.995] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-DeviceSetupManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0203.996] GetFileType (hFile=0x204) returned 0x1 [0203.996] CloseHandle (hObject=0x204) returned 1 [0203.996] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229cf8 [0203.996] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-DeviceSetupManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cef47f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cef47f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229cf8 | out: hHeap=0x1f0000) returned 1 [0203.996] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2299c8 [0203.996] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-DeviceSetupManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cef47f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cef47f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2299c8 | out: hHeap=0x1f0000) returned 1 [0203.996] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a688 [0203.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a688 | out: hHeap=0x1f0000) returned 1 [0203.996] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc9231, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cc9231, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-DeviceSetupManager%4Operational.evtx", cAlternateFileName="MI08CB~1.EVT")) returned 1 [0203.996] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22af40 [0203.997] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ab8 [0203.997] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2299c8 [0203.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ab8 | out: hHeap=0x1f0000) returned 1 [0203.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a3e0 | out: hHeap=0x1f0000) returned 1 [0203.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22af40 | out: hHeap=0x1f0000) returned 1 [0203.997] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-DeviceSetupManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0203.997] GetFileType (hFile=0x204) returned 0x1 [0203.997] CloseHandle (hObject=0x204) returned 1 [0203.997] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a248 [0203.998] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-DeviceSetupManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc9231, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cc9231, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.998] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a248 | out: hHeap=0x1f0000) returned 1 [0203.998] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a578 [0203.998] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-DeviceSetupManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc9231, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cc9231, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.998] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a578 | out: hHeap=0x1f0000) returned 1 [0203.998] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a578 [0203.998] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a578 | out: hHeap=0x1f0000) returned 1 [0203.998] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc967f17e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc967f17e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Dhcp-Client%4Admin.evtx", cAlternateFileName="MI8270~1.EVT")) returned 1 [0203.998] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214fd8 [0203.998] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c48 [0203.998] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ace8 [0203.998] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0203.998] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2299c8 | out: hHeap=0x1f0000) returned 1 [0203.998] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214fd8 | out: hHeap=0x1f0000) returned 1 [0203.998] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Dhcp-Client%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-dhcp-client%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0203.999] GetFileType (hFile=0x204) returned 0x1 [0203.999] CloseHandle (hObject=0x204) returned 1 [0203.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22aa90 [0203.999] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Dhcp-Client%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-dhcp-client%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc967f17e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc967f17e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.999] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aa90 | out: hHeap=0x1f0000) returned 1 [0203.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22af40 [0203.999] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Dhcp-Client%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-dhcp-client%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc967f17e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc967f17e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.999] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22af40 | out: hHeap=0x1f0000) returned 1 [0203.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a928 [0203.999] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a928 | out: hHeap=0x1f0000) returned 1 [0203.999] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc96cb64b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc96cb64b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Dhcpv6-Client%4Admin.evtx", cAlternateFileName="MIEBFF~1.EVT")) returned 1 [0204.000] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c98 [0204.000] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b58 [0204.000] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22af40 [0204.000] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b58 | out: hHeap=0x1f0000) returned 1 [0204.000] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ace8 | out: hHeap=0x1f0000) returned 1 [0204.000] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c98 | out: hHeap=0x1f0000) returned 1 [0204.000] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-dhcpv6-client%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0204.000] GetFileType (hFile=0x204) returned 0x1 [0204.000] CloseHandle (hObject=0x204) returned 1 [0204.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22abf8 [0204.001] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-dhcpv6-client%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc96cb64b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc96cb64b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22abf8 | out: hHeap=0x1f0000) returned 1 [0204.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ace8 [0204.001] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-dhcpv6-client%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc96cb64b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc96cb64b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ace8 | out: hHeap=0x1f0000) returned 1 [0204.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a838 [0204.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a838 | out: hHeap=0x1f0000) returned 1 [0204.330] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca64aa7b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca64aa7b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Diagnosis-DPS%4Operational.evtx", cAlternateFileName="MI9F85~1.EVT")) returned 1 [0204.330] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a838 [0204.330] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ae0 [0204.330] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a4f0 [0204.330] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ae0 | out: hHeap=0x1f0000) returned 1 [0204.330] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22af40 | out: hHeap=0x1f0000) returned 1 [0204.330] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a838 | out: hHeap=0x1f0000) returned 1 [0204.331] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-diagnosis-dps%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0204.331] GetFileType (hFile=0x210) returned 0x1 [0204.331] CloseHandle (hObject=0x210) returned 1 [0204.332] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2299c8 [0204.332] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-diagnosis-dps%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca64aa7b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca64aa7b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.332] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2299c8 | out: hHeap=0x1f0000) returned 1 [0204.332] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2299c8 [0204.332] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-diagnosis-dps%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca64aa7b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca64aa7b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.332] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2299c8 | out: hHeap=0x1f0000) returned 1 [0204.332] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a3e0 [0204.332] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a3e0 | out: hHeap=0x1f0000) returned 1 [0204.332] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd9ec80, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xfd9ec80, ftLastAccessTime.dwHighDateTime=0x1d1a04f, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Diagnostics-Performance%4Operational.evtx", cAlternateFileName="MIBE3D~1.EVT")) returned 1 [0204.333] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229a50 [0204.333] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c70 [0204.333] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0204.333] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c70 | out: hHeap=0x1f0000) returned 1 [0204.333] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a4f0 | out: hHeap=0x1f0000) returned 1 [0204.333] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229a50 | out: hHeap=0x1f0000) returned 1 [0204.333] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-diagnostics-performance%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0204.334] GetFileType (hFile=0x210) returned 0x1 [0204.334] CloseHandle (hObject=0x210) returned 1 [0204.334] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0204.334] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-diagnostics-performance%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd9ec80, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xfd9ec80, ftLastAccessTime.dwHighDateTime=0x1d1a04f, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.335] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0204.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0204.335] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-diagnostics-performance%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd9ec80, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xfd9ec80, ftLastAccessTime.dwHighDateTime=0x1d1a04f, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.335] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0204.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0204.335] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0204.335] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9658ef3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9658ef3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-GroupPolicy%4Operational.evtx", cAlternateFileName="MIE38D~1.EVT")) returned 1 [0204.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214ea0 [0204.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ae0 [0204.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2299c8 [0204.335] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ae0 | out: hHeap=0x1f0000) returned 1 [0204.335] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0204.335] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214ea0 | out: hHeap=0x1f0000) returned 1 [0204.336] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-GroupPolicy%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-grouppolicy%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0204.336] GetFileType (hFile=0x210) returned 0x1 [0204.336] CloseHandle (hObject=0x210) returned 1 [0204.337] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229b60 [0204.337] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-GroupPolicy%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-grouppolicy%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9658ef3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9658ef3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229b60 | out: hHeap=0x1f0000) returned 1 [0204.337] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a248 [0204.337] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-GroupPolicy%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-grouppolicy%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9658ef3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9658ef3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a248 | out: hHeap=0x1f0000) returned 1 [0204.337] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229fa0 [0204.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229fa0 | out: hHeap=0x1f0000) returned 1 [0204.337] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9dcc480, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9dcc480, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-HotspotAuth%4Operational.evtx", cAlternateFileName="MIE386~1.EVT")) returned 1 [0204.337] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x215040 [0204.337] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609f0 [0204.337] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a248 [0204.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609f0 | out: hHeap=0x1f0000) returned 1 [0204.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2299c8 | out: hHeap=0x1f0000) returned 1 [0204.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215040 | out: hHeap=0x1f0000) returned 1 [0204.338] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-HotspotAuth%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-hotspotauth%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0204.338] GetFileType (hFile=0x210) returned 0x1 [0204.339] CloseHandle (hObject=0x210) returned 1 [0204.339] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a2d0 [0204.339] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-HotspotAuth%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-hotspotauth%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9dcc480, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9dcc480, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.339] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a2d0 | out: hHeap=0x1f0000) returned 1 [0204.339] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a2d0 [0204.340] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-HotspotAuth%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-hotspotauth%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9dcc480, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9dcc480, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.340] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a2d0 | out: hHeap=0x1f0000) returned 1 [0204.340] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229a50 [0204.340] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229a50 | out: hHeap=0x1f0000) returned 1 [0204.340] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50b4bacf, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50b4bacf, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx", cAlternateFileName="MI6B25~1.EVT")) returned 1 [0204.340] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ace8 [0204.340] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c70 [0204.340] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a600 [0204.340] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c70 | out: hHeap=0x1f0000) returned 1 [0204.341] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a248 | out: hHeap=0x1f0000) returned 1 [0204.341] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ace8 | out: hHeap=0x1f0000) returned 1 [0204.341] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-hyper-v-guest-drivers%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0204.342] GetFileType (hFile=0x210) returned 0x1 [0204.342] CloseHandle (hObject=0x210) returned 1 [0204.342] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229ad8 [0204.342] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-hyper-v-guest-drivers%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50b4bacf, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50b4bacf, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.343] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229ad8 | out: hHeap=0x1f0000) returned 1 [0204.343] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a710 [0204.343] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-hyper-v-guest-drivers%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50b4bacf, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50b4bacf, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.343] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a710 | out: hHeap=0x1f0000) returned 1 [0204.343] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a248 [0204.343] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a248 | out: hHeap=0x1f0000) returned 1 [0204.343] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb66288f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb66288f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-International%4Operational.evtx", cAlternateFileName="MI854A~1.EVT")) returned 1 [0204.343] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ace8 [0204.343] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0204.344] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229cf8 [0204.344] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0204.344] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a600 | out: hHeap=0x1f0000) returned 1 [0204.344] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ace8 | out: hHeap=0x1f0000) returned 1 [0204.344] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-International%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-international%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0204.344] GetFileType (hFile=0x210) returned 0x1 [0204.345] CloseHandle (hObject=0x210) returned 1 [0204.345] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a248 [0204.345] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-International%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-international%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb66288f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb66288f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.345] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a248 | out: hHeap=0x1f0000) returned 1 [0204.346] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a248 [0204.346] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-International%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-international%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb66288f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb66288f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.346] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a248 | out: hHeap=0x1f0000) returned 1 [0204.346] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2299c8 [0204.346] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2299c8 | out: hHeap=0x1f0000) returned 1 [0204.346] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x506ad1ac, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x506ad1ac, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-Boot%4Operational.evtx", cAlternateFileName="MI32CE~1.EVT")) returned 1 [0204.346] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214ea0 [0204.346] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c70 [0204.346] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229d80 [0204.346] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c70 | out: hHeap=0x1f0000) returned 1 [0204.347] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229cf8 | out: hHeap=0x1f0000) returned 1 [0204.347] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214ea0 | out: hHeap=0x1f0000) returned 1 [0204.347] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-Boot%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-boot%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0204.347] GetFileType (hFile=0x210) returned 0x1 [0204.348] CloseHandle (hObject=0x210) returned 1 [0204.348] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a2d0 [0204.348] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-Boot%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-boot%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x506ad1ac, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x506ad1ac, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.348] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a2d0 | out: hHeap=0x1f0000) returned 1 [0204.348] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229ad8 [0204.348] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-Boot%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-boot%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x506ad1ac, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x506ad1ac, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.348] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229ad8 | out: hHeap=0x1f0000) returned 1 [0204.348] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2299c8 [0204.348] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2299c8 | out: hHeap=0x1f0000) returned 1 [0204.349] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ca2fbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ca2fbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-EventTracing%4Admin.evtx", cAlternateFileName="MIA934~1.EVT")) returned 1 [0204.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22af40 [0204.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b30 [0204.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a248 [0204.349] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b30 | out: hHeap=0x1f0000) returned 1 [0204.349] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229d80 | out: hHeap=0x1f0000) returned 1 [0204.349] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22af40 | out: hHeap=0x1f0000) returned 1 [0204.349] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-eventtracing%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0204.350] GetFileType (hFile=0x210) returned 0x1 [0204.350] CloseHandle (hObject=0x210) returned 1 [0204.350] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a2d0 [0204.350] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-eventtracing%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ca2fbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ca2fbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.350] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a2d0 | out: hHeap=0x1f0000) returned 1 [0204.350] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a2d0 [0204.351] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-eventtracing%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ca2fbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ca2fbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a2d0 | out: hHeap=0x1f0000) returned 1 [0204.351] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229be8 [0204.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229be8 | out: hHeap=0x1f0000) returned 1 [0204.351] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5071f8b0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5071f8b0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-PnP%4Configuration.evtx", cAlternateFileName="MIB32D~1.EVT")) returned 1 [0204.351] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ab08 [0204.351] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ba8 [0204.351] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229be8 [0204.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ba8 | out: hHeap=0x1f0000) returned 1 [0204.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a248 | out: hHeap=0x1f0000) returned 1 [0204.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab08 | out: hHeap=0x1f0000) returned 1 [0204.351] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-PnP%4Configuration.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-pnp%4configuration.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0204.352] GetFileType (hFile=0x210) returned 0x1 [0204.352] CloseHandle (hObject=0x210) returned 1 [0204.352] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229a50 [0204.352] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-PnP%4Configuration.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-pnp%4configuration.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5071f8b0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5071f8b0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000)) returned 1 [0204.352] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229a50 | out: hHeap=0x1f0000) returned 1 [0204.352] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a248 [0204.352] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-PnP%4Configuration.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-pnp%4configuration.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5071f8b0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5071f8b0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000)) returned 1 [0204.352] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a248 | out: hHeap=0x1f0000) returned 1 [0204.352] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a578 [0204.352] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a578 | out: hHeap=0x1f0000) returned 1 [0204.352] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8ebf6d7, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc8ebf6d7, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx", cAlternateFileName="MICA77~1.EVT")) returned 1 [0204.352] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a028 [0204.352] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ba8 [0204.352] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0204.353] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ba8 | out: hHeap=0x1f0000) returned 1 [0204.353] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229be8 | out: hHeap=0x1f0000) returned 1 [0204.353] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a028 | out: hHeap=0x1f0000) returned 1 [0204.353] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-power%4thermal-operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0204.353] GetFileType (hFile=0x210) returned 0x1 [0204.353] CloseHandle (hObject=0x210) returned 1 [0204.353] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0204.353] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-power%4thermal-operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8ebf6d7, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc8ebf6d7, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.353] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0204.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0204.354] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-power%4thermal-operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8ebf6d7, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc8ebf6d7, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0204.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0204.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0204.354] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5090f75d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5090f75d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx", cAlternateFileName="MI1E8D~1.EVT")) returned 1 [0204.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22abf8 [0204.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b30 [0204.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229ad8 [0204.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b30 | out: hHeap=0x1f0000) returned 1 [0204.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0204.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22abf8 | out: hHeap=0x1f0000) returned 1 [0204.354] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-shimengine%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0204.354] GetFileType (hFile=0x210) returned 0x1 [0204.355] CloseHandle (hObject=0x210) returned 1 [0204.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229a50 [0204.355] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-shimengine%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5090f75d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5090f75d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.355] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229a50 | out: hHeap=0x1f0000) returned 1 [0204.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229f18 [0204.355] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-shimengine%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5090f75d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5090f75d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.355] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229f18 | out: hHeap=0x1f0000) returned 1 [0204.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229830 [0204.355] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229830 | out: hHeap=0x1f0000) returned 1 [0204.355] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd75102f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcd75102f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx", cAlternateFileName="MID067~1.EVT")) returned 1 [0204.356] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a9a0 [0204.356] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a68 [0204.356] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a3e0 [0204.356] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a68 | out: hHeap=0x1f0000) returned 1 [0204.356] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229ad8 | out: hHeap=0x1f0000) returned 1 [0204.356] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a9a0 | out: hHeap=0x1f0000) returned 1 [0204.356] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-storemgr%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0204.356] GetFileType (hFile=0x210) returned 0x1 [0204.357] CloseHandle (hObject=0x210) returned 1 [0204.357] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a0b0 [0204.357] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-storemgr%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd75102f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcd75102f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a0b0 | out: hHeap=0x1f0000) returned 1 [0204.357] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229cf8 [0204.357] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-storemgr%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd75102f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcd75102f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229cf8 | out: hHeap=0x1f0000) returned 1 [0204.357] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229cf8 [0204.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229cf8 | out: hHeap=0x1f0000) returned 1 [0204.357] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50be4414, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50be4414, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-WHEA%4Errors.evtx", cAlternateFileName="MIDE4D~1.EVT")) returned 1 [0204.357] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214af8 [0204.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b58 [0204.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22af40 [0204.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b58 | out: hHeap=0x1f0000) returned 1 [0204.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a3e0 | out: hHeap=0x1f0000) returned 1 [0204.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214af8 | out: hHeap=0x1f0000) returned 1 [0204.358] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-WHEA%4Errors.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4errors.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0204.358] GetFileType (hFile=0x210) returned 0x1 [0204.358] CloseHandle (hObject=0x210) returned 1 [0204.359] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a928 [0204.359] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-WHEA%4Errors.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4errors.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50be4414, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50be4414, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a928 | out: hHeap=0x1f0000) returned 1 [0204.359] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22abf8 [0204.359] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-WHEA%4Errors.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4errors.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50be4414, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50be4414, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22abf8 | out: hHeap=0x1f0000) returned 1 [0204.359] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ab08 [0204.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab08 | out: hHeap=0x1f0000) returned 1 [0204.359] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50be4414, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50be4414, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-WHEA%4Operational.evtx", cAlternateFileName="MI36C5~1.EVT")) returned 1 [0204.359] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d00 [0204.359] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ba8 [0204.359] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229e08 [0204.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ba8 | out: hHeap=0x1f0000) returned 1 [0204.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22af40 | out: hHeap=0x1f0000) returned 1 [0204.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d00 | out: hHeap=0x1f0000) returned 1 [0204.360] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-WHEA%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0204.360] GetFileType (hFile=0x210) returned 0x1 [0204.360] CloseHandle (hObject=0x210) returned 1 [0204.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2299c8 [0204.360] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-WHEA%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50be4414, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50be4414, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.360] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2299c8 | out: hHeap=0x1f0000) returned 1 [0204.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a028 [0204.360] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-WHEA%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50be4414, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50be4414, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a028 | out: hHeap=0x1f0000) returned 1 [0204.361] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a4f0 [0204.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a4f0 | out: hHeap=0x1f0000) returned 1 [0204.361] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59547c37, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x59547c37, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Known Folders API Service.evtx", cAlternateFileName="MI86D6~1.EVT")) returned 1 [0204.361] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ab08 [0204.361] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c70 [0204.361] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a2d0 [0204.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c70 | out: hHeap=0x1f0000) returned 1 [0204.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229e08 | out: hHeap=0x1f0000) returned 1 [0204.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab08 | out: hHeap=0x1f0000) returned 1 [0204.361] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Known Folders API Service.evtx" (normalized: "c:\\logs\\microsoft-windows-known folders api service.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0204.362] GetFileType (hFile=0x210) returned 0x1 [0204.362] CloseHandle (hObject=0x210) returned 1 [0204.362] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a688 [0204.362] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Known Folders API Service.evtx" (normalized: "c:\\logs\\microsoft-windows-known folders api service.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59547c37, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x59547c37, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a688 | out: hHeap=0x1f0000) returned 1 [0204.362] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2299c8 [0204.362] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Known Folders API Service.evtx" (normalized: "c:\\logs\\microsoft-windows-known folders api service.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59547c37, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x59547c37, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2299c8 | out: hHeap=0x1f0000) returned 1 [0204.362] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2299c8 [0204.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2299c8 | out: hHeap=0x1f0000) returned 1 [0204.362] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbb7386e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcbb7386e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-LiveId%4Operational.evtx", cAlternateFileName="MI4C58~1.EVT")) returned 1 [0204.362] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214ea0 [0204.362] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ba8 [0204.362] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a928 [0204.363] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ba8 | out: hHeap=0x1f0000) returned 1 [0204.363] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a2d0 | out: hHeap=0x1f0000) returned 1 [0204.363] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214ea0 | out: hHeap=0x1f0000) returned 1 [0204.363] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-LiveId%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-liveid%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0204.363] GetFileType (hFile=0x210) returned 0x1 [0204.363] CloseHandle (hObject=0x210) returned 1 [0204.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22af40 [0204.363] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-LiveId%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-liveid%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbb7386e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcbb7386e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.363] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22af40 | out: hHeap=0x1f0000) returned 1 [0204.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a9a0 [0204.363] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-LiveId%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-liveid%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbb7386e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcbb7386e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.363] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a9a0 | out: hHeap=0x1f0000) returned 1 [0204.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a9a0 [0204.364] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a9a0 | out: hHeap=0x1f0000) returned 1 [0204.364] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc93d06f0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc93d06f0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-MUI%4Admin.evtx", cAlternateFileName="MI30D3~1.EVT")) returned 1 [0204.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239928 [0204.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c70 [0204.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214ea0 [0204.364] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c70 | out: hHeap=0x1f0000) returned 1 [0204.364] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a928 | out: hHeap=0x1f0000) returned 1 [0204.364] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239928 | out: hHeap=0x1f0000) returned 1 [0204.364] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-MUI%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-mui%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0204.364] GetFileType (hFile=0x210) returned 0x1 [0204.364] CloseHandle (hObject=0x210) returned 1 [0204.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x215040 [0204.364] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-MUI%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-mui%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc93d06f0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc93d06f0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.365] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215040 | out: hHeap=0x1f0000) returned 1 [0204.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2149c0 [0204.365] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-MUI%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-mui%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc93d06f0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc93d06f0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.365] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2149c0 | out: hHeap=0x1f0000) returned 1 [0204.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214af8 [0204.365] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214af8 | out: hHeap=0x1f0000) returned 1 [0204.365] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc93aa49b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc93aa49b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-MUI%4Operational.evtx", cAlternateFileName="MI6F01~1.EVT")) returned 1 [0204.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239508 [0204.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c48 [0204.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ab08 [0204.365] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0204.365] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214ea0 | out: hHeap=0x1f0000) returned 1 [0204.365] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239508 | out: hHeap=0x1f0000) returned 1 [0204.365] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-MUI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-mui%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0204.365] GetFileType (hFile=0x210) returned 0x1 [0204.365] CloseHandle (hObject=0x210) returned 1 [0204.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ab80 [0204.366] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-MUI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-mui%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc93aa49b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc93aa49b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.366] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab80 | out: hHeap=0x1f0000) returned 1 [0204.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22aa90 [0204.366] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-MUI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-mui%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc93aa49b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc93aa49b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.366] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aa90 | out: hHeap=0x1f0000) returned 1 [0204.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ab80 [0204.366] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab80 | out: hHeap=0x1f0000) returned 1 [0204.366] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9d33b19, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9d33b19, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-NCSI%4Operational.evtx", cAlternateFileName="MI483C~1.EVT")) returned 1 [0204.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a90 [0204.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c48 [0204.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a928 [0204.366] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0204.366] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab08 | out: hHeap=0x1f0000) returned 1 [0204.366] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a90 | out: hHeap=0x1f0000) returned 1 [0204.367] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-NCSI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-ncsi%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0204.367] GetFileType (hFile=0x210) returned 0x1 [0204.367] CloseHandle (hObject=0x210) returned 1 [0204.367] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a838 [0204.367] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-NCSI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-ncsi%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9d33b19, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9d33b19, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.367] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a838 | out: hHeap=0x1f0000) returned 1 [0204.367] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a838 [0204.367] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-NCSI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-ncsi%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9d33b19, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9d33b19, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.367] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a838 | out: hHeap=0x1f0000) returned 1 [0204.367] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22af40 [0204.367] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22af40 | out: hHeap=0x1f0000) returned 1 [0204.367] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbcf0ff2, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcbcf0ff2, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-NetworkProfile%4Operational.evtx", cAlternateFileName="MIFC66~1.EVT")) returned 1 [0204.368] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a9a0 [0204.368] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0204.368] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229f18 [0204.368] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0204.368] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a928 | out: hHeap=0x1f0000) returned 1 [0204.368] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a9a0 | out: hHeap=0x1f0000) returned 1 [0204.368] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-NetworkProfile%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-networkprofile%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0204.368] GetFileType (hFile=0x210) returned 0x1 [0204.368] CloseHandle (hObject=0x210) returned 1 [0204.368] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2299c8 [0204.369] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-NetworkProfile%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-networkprofile%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbcf0ff2, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcbcf0ff2, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.369] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2299c8 | out: hHeap=0x1f0000) returned 1 [0204.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229e08 [0204.369] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-NetworkProfile%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-networkprofile%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbcf0ff2, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcbcf0ff2, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.369] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229e08 | out: hHeap=0x1f0000) returned 1 [0204.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229fa0 [0204.369] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229fa0 | out: hHeap=0x1f0000) returned 1 [0204.369] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ab3154, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ab3154, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Ntfs%4Operational.evtx", cAlternateFileName="MI6E98~1.EVT")) returned 1 [0204.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2149c0 [0204.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b30 [0204.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22af40 [0204.369] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b30 | out: hHeap=0x1f0000) returned 1 [0204.369] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229f18 | out: hHeap=0x1f0000) returned 1 [0204.369] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2149c0 | out: hHeap=0x1f0000) returned 1 [0204.370] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Ntfs%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-ntfs%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0204.370] GetFileType (hFile=0x210) returned 0x1 [0204.370] CloseHandle (hObject=0x210) returned 1 [0204.370] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a838 [0204.370] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Ntfs%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-ntfs%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ab3154, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ab3154, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.370] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a838 | out: hHeap=0x1f0000) returned 1 [0204.370] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22aa90 [0204.370] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Ntfs%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-ntfs%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ab3154, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ab3154, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.370] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aa90 | out: hHeap=0x1f0000) returned 1 [0204.370] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22aa90 [0204.370] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aa90 | out: hHeap=0x1f0000) returned 1 [0204.370] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ad9393, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ad9393, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Ntfs%4WHC.evtx", cAlternateFileName="MIB2AC~1.EVT")) returned 1 [0204.370] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239508 [0204.370] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c48 [0204.371] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214ea0 [0204.371] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0204.371] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22af40 | out: hHeap=0x1f0000) returned 1 [0204.371] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239508 | out: hHeap=0x1f0000) returned 1 [0204.371] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Ntfs%4WHC.evtx" (normalized: "c:\\logs\\microsoft-windows-ntfs%4whc.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0204.371] GetFileType (hFile=0x210) returned 0x1 [0204.371] CloseHandle (hObject=0x210) returned 1 [0204.371] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214af8 [0204.371] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Ntfs%4WHC.evtx" (normalized: "c:\\logs\\microsoft-windows-ntfs%4whc.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ad9393, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ad9393, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.372] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214af8 | out: hHeap=0x1f0000) returned 1 [0204.372] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d00 [0204.372] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Ntfs%4WHC.evtx" (normalized: "c:\\logs\\microsoft-windows-ntfs%4whc.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ad9393, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ad9393, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.372] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d00 | out: hHeap=0x1f0000) returned 1 [0204.372] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214f08 [0204.372] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f08 | out: hHeap=0x1f0000) returned 1 [0204.372] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca5fe5cb, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca5fe5cb, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx", cAlternateFileName="MI6AFE~1.EVT")) returned 1 [0204.372] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a8c0 [0204.372] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b58 [0204.372] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261668 [0204.372] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b58 | out: hHeap=0x1f0000) returned 1 [0204.372] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214ea0 | out: hHeap=0x1f0000) returned 1 [0204.372] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a8c0 | out: hHeap=0x1f0000) returned 1 [0204.372] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx" (normalized: "c:\\logs\\microsoft-windows-program-compatibility-assistant%4compatafterupgrade.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0204.372] GetFileType (hFile=0x210) returned 0x1 [0204.372] CloseHandle (hObject=0x210) returned 1 [0204.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2612d0 [0204.373] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx" (normalized: "c:\\logs\\microsoft-windows-program-compatibility-assistant%4compatafterupgrade.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca5fe5cb, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca5fe5cb, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2612d0 | out: hHeap=0x1f0000) returned 1 [0204.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x260ff0 [0204.373] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx" (normalized: "c:\\logs\\microsoft-windows-program-compatibility-assistant%4compatafterupgrade.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca5fe5cb, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca5fe5cb, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ff0 | out: hHeap=0x1f0000) returned 1 [0204.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2612d0 [0204.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2612d0 | out: hHeap=0x1f0000) returned 1 [0204.373] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe24cdef0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xe24cdef0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-ReadyBoost%4Operational.evtx", cAlternateFileName="MIB9D2~1.EVT")) returned 1 [0204.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214ea0 [0204.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c48 [0204.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22aa90 [0204.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0204.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261668 | out: hHeap=0x1f0000) returned 1 [0204.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214ea0 | out: hHeap=0x1f0000) returned 1 [0204.374] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-ReadyBoost%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-readyboost%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0204.374] GetFileType (hFile=0x210) returned 0x1 [0204.374] CloseHandle (hObject=0x210) returned 1 [0204.374] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a928 [0204.374] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-ReadyBoost%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-readyboost%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe24cdef0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xe24cdef0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.374] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a928 | out: hHeap=0x1f0000) returned 1 [0204.374] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22af40 [0204.374] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-ReadyBoost%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-readyboost%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe24cdef0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xe24cdef0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.374] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22af40 | out: hHeap=0x1f0000) returned 1 [0204.375] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ace8 [0204.375] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ace8 | out: hHeap=0x1f0000) returned 1 [0204.375] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd125335f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd125335f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx", cAlternateFileName="MI7A67~1.EVT")) returned 1 [0204.375] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0204.375] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c48 [0204.375] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a038 [0204.375] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0204.375] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aa90 | out: hHeap=0x1f0000) returned 1 [0204.375] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0204.375] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-resource-exhaustion-detector%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0204.375] GetFileType (hFile=0x210) returned 0x1 [0204.375] CloseHandle (hObject=0x210) returned 1 [0204.376] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a818 [0204.376] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-resource-exhaustion-detector%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd125335f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd125335f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.376] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a818 | out: hHeap=0x1f0000) returned 1 [0204.376] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a770 [0204.376] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-resource-exhaustion-detector%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd125335f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd125335f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.376] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a770 | out: hHeap=0x1f0000) returned 1 [0204.376] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a0e0 [0204.376] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a0e0 | out: hHeap=0x1f0000) returned 1 [0204.676] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1fe2941, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd1fe2941, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SettingSync%4Debug.evtx", cAlternateFileName="MI3773~1.EVT")) returned 1 [0204.676] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x215040 [0204.676] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0204.676] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a838 [0204.676] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0204.676] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a038 | out: hHeap=0x1f0000) returned 1 [0204.677] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215040 | out: hHeap=0x1f0000) returned 1 [0204.677] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-SettingSync%4Debug.evtx" (normalized: "c:\\logs\\microsoft-windows-settingsync%4debug.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0204.677] GetFileType (hFile=0x204) returned 0x1 [0204.677] CloseHandle (hObject=0x204) returned 1 [0204.678] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a928 [0204.678] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-SettingSync%4Debug.evtx" (normalized: "c:\\logs\\microsoft-windows-settingsync%4debug.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1fe2941, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd1fe2941, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000)) returned 1 [0204.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a928 | out: hHeap=0x1f0000) returned 1 [0204.678] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22aa90 [0204.678] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-SettingSync%4Debug.evtx" (normalized: "c:\\logs\\microsoft-windows-settingsync%4debug.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1fe2941, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd1fe2941, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000)) returned 1 [0204.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aa90 | out: hHeap=0x1f0000) returned 1 [0204.678] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a928 [0204.679] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a928 | out: hHeap=0x1f0000) returned 1 [0204.679] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1fe2941, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd1fe2941, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SettingSync%4Operational.evtx", cAlternateFileName="MI36AA~1.EVT")) returned 1 [0204.679] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x215040 [0204.679] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609c8 [0204.679] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a578 [0204.679] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609c8 | out: hHeap=0x1f0000) returned 1 [0204.679] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a838 | out: hHeap=0x1f0000) returned 1 [0204.679] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215040 | out: hHeap=0x1f0000) returned 1 [0204.680] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-SettingSync%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-settingsync%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0204.680] GetFileType (hFile=0x204) returned 0x1 [0204.680] CloseHandle (hObject=0x204) returned 1 [0204.681] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a600 [0204.681] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-SettingSync%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-settingsync%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1fe2941, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd1fe2941, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.681] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a600 | out: hHeap=0x1f0000) returned 1 [0204.681] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a4f0 [0204.681] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-SettingSync%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-settingsync%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1fe2941, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd1fe2941, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.681] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a4f0 | out: hHeap=0x1f0000) returned 1 [0204.681] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229e08 [0204.681] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229e08 | out: hHeap=0x1f0000) returned 1 [0204.682] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3852b12, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd3852b12, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Shell-Core%4ActionCenter.evtx", cAlternateFileName="MI2E2E~1.EVT")) returned 1 [0204.682] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x215040 [0204.682] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609c8 [0204.682] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a600 [0204.682] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609c8 | out: hHeap=0x1f0000) returned 1 [0204.682] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a578 | out: hHeap=0x1f0000) returned 1 [0204.682] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215040 | out: hHeap=0x1f0000) returned 1 [0204.683] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Shell-Core%4ActionCenter.evtx" (normalized: "c:\\logs\\microsoft-windows-shell-core%4actioncenter.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0204.683] GetFileType (hFile=0x204) returned 0x1 [0204.683] CloseHandle (hObject=0x204) returned 1 [0204.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229f18 [0204.683] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Shell-Core%4ActionCenter.evtx" (normalized: "c:\\logs\\microsoft-windows-shell-core%4actioncenter.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3852b12, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd3852b12, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229f18 | out: hHeap=0x1f0000) returned 1 [0204.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a4f0 [0204.684] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Shell-Core%4ActionCenter.evtx" (normalized: "c:\\logs\\microsoft-windows-shell-core%4actioncenter.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3852b12, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd3852b12, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a4f0 | out: hHeap=0x1f0000) returned 1 [0204.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a248 [0204.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a248 | out: hHeap=0x1f0000) returned 1 [0204.684] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3852b12, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd3852b12, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Shell-Core%4Operational.evtx", cAlternateFileName="MI1C6C~1.EVT")) returned 1 [0204.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x215040 [0204.685] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ba8 [0204.685] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a928 [0204.685] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ba8 | out: hHeap=0x1f0000) returned 1 [0204.685] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a600 | out: hHeap=0x1f0000) returned 1 [0204.685] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215040 | out: hHeap=0x1f0000) returned 1 [0204.685] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Shell-Core%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-shell-core%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0204.686] GetFileType (hFile=0x204) returned 0x1 [0204.686] CloseHandle (hObject=0x204) returned 1 [0204.686] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a838 [0204.687] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Shell-Core%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-shell-core%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3852b12, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd3852b12, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.687] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a838 | out: hHeap=0x1f0000) returned 1 [0204.687] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a838 [0204.687] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Shell-Core%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-shell-core%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3852b12, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd3852b12, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.687] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a838 | out: hHeap=0x1f0000) returned 1 [0204.687] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a9a0 [0204.687] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a9a0 | out: hHeap=0x1f0000) returned 1 [0204.687] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97d66c8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97d66c8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SmbClient%4Connectivity.evtx", cAlternateFileName="MI00FB~1.EVT")) returned 1 [0204.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x215040 [0204.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609f0 [0204.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a838 [0204.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609f0 | out: hHeap=0x1f0000) returned 1 [0204.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a928 | out: hHeap=0x1f0000) returned 1 [0204.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215040 | out: hHeap=0x1f0000) returned 1 [0204.689] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-SmbClient%4Connectivity.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4connectivity.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0204.689] GetFileType (hFile=0x204) returned 0x1 [0204.690] CloseHandle (hObject=0x204) returned 1 [0204.690] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22aa90 [0204.690] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-SmbClient%4Connectivity.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4connectivity.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97d66c8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97d66c8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.690] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aa90 | out: hHeap=0x1f0000) returned 1 [0204.690] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a928 [0204.691] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-SmbClient%4Connectivity.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4connectivity.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97d66c8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97d66c8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a928 | out: hHeap=0x1f0000) returned 1 [0204.691] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a928 [0204.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a928 | out: hHeap=0x1f0000) returned 1 [0204.691] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97b042f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97b042f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SMBClient%4Operational.evtx", cAlternateFileName="MID8B0~1.EVT")) returned 1 [0204.691] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x215040 [0204.691] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609c8 [0204.691] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22aa90 [0204.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609c8 | out: hHeap=0x1f0000) returned 1 [0204.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a838 | out: hHeap=0x1f0000) returned 1 [0204.692] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215040 | out: hHeap=0x1f0000) returned 1 [0204.692] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-SMBClient%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0204.692] GetFileType (hFile=0x204) returned 0x1 [0204.693] CloseHandle (hObject=0x204) returned 1 [0204.693] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22abf8 [0204.693] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-SMBClient%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97b042f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97b042f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.693] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22abf8 | out: hHeap=0x1f0000) returned 1 [0204.694] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a928 [0204.694] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-SMBClient%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97b042f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97b042f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.694] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a928 | out: hHeap=0x1f0000) returned 1 [0204.694] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a9a0 [0204.694] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a9a0 | out: hHeap=0x1f0000) returned 1 [0204.694] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97d66c8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97d66c8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SmbClient%4Security.evtx", cAlternateFileName="MI8CEE~1.EVT")) returned 1 [0204.694] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x215040 [0204.694] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ba8 [0204.695] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22abf8 [0204.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ba8 | out: hHeap=0x1f0000) returned 1 [0204.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aa90 | out: hHeap=0x1f0000) returned 1 [0204.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215040 | out: hHeap=0x1f0000) returned 1 [0204.695] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-SmbClient%4Security.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4security.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0204.696] GetFileType (hFile=0x204) returned 0x1 [0204.696] CloseHandle (hObject=0x204) returned 1 [0204.696] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a838 [0204.696] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-SmbClient%4Security.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4security.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97d66c8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97d66c8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.696] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a838 | out: hHeap=0x1f0000) returned 1 [0204.696] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a838 [0204.697] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-SmbClient%4Security.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4security.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97d66c8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97d66c8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a838 | out: hHeap=0x1f0000) returned 1 [0204.697] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a838 [0204.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a838 | out: hHeap=0x1f0000) returned 1 [0204.697] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb1ea1c9, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb1ea1c9, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SMBServer%4Audit.evtx", cAlternateFileName="MIE3AD~1.EVT")) returned 1 [0204.697] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c390 [0204.697] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ba8 [0204.698] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22aa90 [0204.698] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ba8 | out: hHeap=0x1f0000) returned 1 [0204.698] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22abf8 | out: hHeap=0x1f0000) returned 1 [0204.698] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c390 | out: hHeap=0x1f0000) returned 1 [0204.698] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-SMBServer%4Audit.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4audit.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0204.698] GetFileType (hFile=0x204) returned 0x1 [0204.699] CloseHandle (hObject=0x204) returned 1 [0204.699] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a838 [0204.699] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-SMBServer%4Audit.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4audit.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb1ea1c9, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb1ea1c9, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.699] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a838 | out: hHeap=0x1f0000) returned 1 [0204.700] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a838 [0204.700] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-SMBServer%4Audit.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4audit.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb1ea1c9, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb1ea1c9, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.700] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a838 | out: hHeap=0x1f0000) returned 1 [0204.700] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a928 [0204.700] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a928 | out: hHeap=0x1f0000) returned 1 [0204.700] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb19dd19, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb19dd19, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SMBServer%4Connectivity.evtx", cAlternateFileName="MI8248~1.EVT")) returned 1 [0204.700] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x215040 [0204.700] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609c8 [0204.700] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a838 [0204.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609c8 | out: hHeap=0x1f0000) returned 1 [0204.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aa90 | out: hHeap=0x1f0000) returned 1 [0204.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215040 | out: hHeap=0x1f0000) returned 1 [0204.701] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-SMBServer%4Connectivity.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4connectivity.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0204.701] GetFileType (hFile=0x204) returned 0x1 [0204.702] CloseHandle (hObject=0x204) returned 1 [0204.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a928 [0204.702] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-SMBServer%4Connectivity.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4connectivity.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb19dd19, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb19dd19, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a928 | out: hHeap=0x1f0000) returned 1 [0204.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ab08 [0204.703] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-SMBServer%4Connectivity.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4connectivity.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb19dd19, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb19dd19, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab08 | out: hHeap=0x1f0000) returned 1 [0204.703] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a928 [0204.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a928 | out: hHeap=0x1f0000) returned 1 [0204.703] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb151873, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb151873, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SMBServer%4Operational.evtx", cAlternateFileName="MI4B6B~1.EVT")) returned 1 [0204.703] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a90 [0204.703] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ba8 [0204.703] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22aa90 [0204.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ba8 | out: hHeap=0x1f0000) returned 1 [0204.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a838 | out: hHeap=0x1f0000) returned 1 [0204.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a90 | out: hHeap=0x1f0000) returned 1 [0204.704] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-SMBServer%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0204.704] GetFileType (hFile=0x204) returned 0x1 [0204.705] CloseHandle (hObject=0x204) returned 1 [0204.705] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22abf8 [0204.705] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-SMBServer%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb151873, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb151873, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.705] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22abf8 | out: hHeap=0x1f0000) returned 1 [0204.705] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a838 [0204.706] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-SMBServer%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb151873, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb151873, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.706] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a838 | out: hHeap=0x1f0000) returned 1 [0204.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a928 [0204.706] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a928 | out: hHeap=0x1f0000) returned 1 [0204.706] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb177aca, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb177aca, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SMBServer%4Security.evtx", cAlternateFileName="MI7709~1.EVT")) returned 1 [0204.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214af8 [0204.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0204.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ab08 [0204.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0204.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aa90 | out: hHeap=0x1f0000) returned 1 [0204.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214af8 | out: hHeap=0x1f0000) returned 1 [0204.707] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-SMBServer%4Security.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4security.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0204.708] GetFileType (hFile=0x204) returned 0x1 [0204.708] CloseHandle (hObject=0x204) returned 1 [0204.708] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a838 [0204.708] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-SMBServer%4Security.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4security.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb177aca, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb177aca, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.709] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a838 | out: hHeap=0x1f0000) returned 1 [0204.709] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a838 [0204.709] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-SMBServer%4Security.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4security.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb177aca, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb177aca, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.709] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a838 | out: hHeap=0x1f0000) returned 1 [0204.709] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a838 [0204.709] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a838 | out: hHeap=0x1f0000) returned 1 [0204.709] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd751ea61, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd751ea61, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Store%4Operational.evtx", cAlternateFileName="MICEDD~1.EVT")) returned 1 [0204.709] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a90 [0204.709] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ba8 [0204.709] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a928 [0204.709] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ba8 | out: hHeap=0x1f0000) returned 1 [0204.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab08 | out: hHeap=0x1f0000) returned 1 [0204.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a90 | out: hHeap=0x1f0000) returned 1 [0204.710] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Store%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-store%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0204.710] GetFileType (hFile=0x204) returned 0x1 [0204.711] CloseHandle (hObject=0x204) returned 1 [0204.711] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ab08 [0204.711] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Store%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-store%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd751ea61, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd751ea61, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.711] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab08 | out: hHeap=0x1f0000) returned 1 [0204.711] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22aa90 [0204.711] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Store%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-store%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd751ea61, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd751ea61, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.711] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aa90 | out: hHeap=0x1f0000) returned 1 [0204.712] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a9a0 [0204.712] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a9a0 | out: hHeap=0x1f0000) returned 1 [0204.712] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd0763ff, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcd0763ff, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-TaskScheduler%4Maintenance.evtx", cAlternateFileName="MIE2F0~1.EVT")) returned 1 [0204.712] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a838 [0204.712] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ba8 [0204.712] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a2d0 [0204.712] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ba8 | out: hHeap=0x1f0000) returned 1 [0204.712] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a928 | out: hHeap=0x1f0000) returned 1 [0204.712] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a838 | out: hHeap=0x1f0000) returned 1 [0204.713] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-TaskScheduler%4Maintenance.evtx" (normalized: "c:\\logs\\microsoft-windows-taskscheduler%4maintenance.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0204.713] GetFileType (hFile=0x204) returned 0x1 [0204.713] CloseHandle (hObject=0x204) returned 1 [0204.713] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a248 [0204.714] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-TaskScheduler%4Maintenance.evtx" (normalized: "c:\\logs\\microsoft-windows-taskscheduler%4maintenance.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd0763ff, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcd0763ff, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.714] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a248 | out: hHeap=0x1f0000) returned 1 [0204.714] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a4f0 [0204.714] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-TaskScheduler%4Maintenance.evtx" (normalized: "c:\\logs\\microsoft-windows-taskscheduler%4maintenance.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd0763ff, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcd0763ff, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.714] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a4f0 | out: hHeap=0x1f0000) returned 1 [0204.714] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a688 [0204.714] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a688 | out: hHeap=0x1f0000) returned 1 [0204.714] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5089d037, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5089d037, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx", cAlternateFileName="MIAB1D~1.EVT")) returned 1 [0204.714] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0204.714] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b30 [0204.715] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21ab60 [0204.715] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b30 | out: hHeap=0x1f0000) returned 1 [0204.715] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a2d0 | out: hHeap=0x1f0000) returned 1 [0204.715] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0204.715] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0204.715] GetFileType (hFile=0x204) returned 0x1 [0204.716] CloseHandle (hObject=0x204) returned 1 [0204.716] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a4d0 [0204.716] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5089d037, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5089d037, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.716] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a4d0 | out: hHeap=0x1f0000) returned 1 [0204.716] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219ee8 [0204.716] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5089d037, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5089d037, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.716] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219ee8 | out: hHeap=0x1f0000) returned 1 [0204.716] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219e40 [0204.716] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219e40 | out: hHeap=0x1f0000) returned 1 [0204.717] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x508c32a6, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x508c32a6, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx", cAlternateFileName="MI62D3~1.EVT")) returned 1 [0204.717] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a6c8 [0204.717] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b08 [0204.717] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261388 [0204.717] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b08 | out: hHeap=0x1f0000) returned 1 [0204.717] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ab60 | out: hHeap=0x1f0000) returned 1 [0204.717] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a6c8 | out: hHeap=0x1f0000) returned 1 [0204.718] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0204.718] GetFileType (hFile=0x204) returned 0x1 [0204.718] CloseHandle (hObject=0x204) returned 1 [0204.718] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261160 [0204.718] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x508c32a6, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x508c32a6, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.719] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261160 | out: hHeap=0x1f0000) returned 1 [0204.719] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2615b0 [0204.719] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x508c32a6, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x508c32a6, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.719] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2615b0 | out: hHeap=0x1f0000) returned 1 [0204.719] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261440 [0204.719] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261440 | out: hHeap=0x1f0000) returned 1 [0204.719] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc14341c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc14341c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx", cAlternateFileName="MIEC03~1.EVT")) returned 1 [0204.719] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0204.719] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ab8 [0204.719] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a2d8 [0204.719] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ab8 | out: hHeap=0x1f0000) returned 1 [0204.720] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261388 | out: hHeap=0x1f0000) returned 1 [0204.720] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0204.979] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0204.979] GetFileType (hFile=0x218) returned 0x1 [0204.979] CloseHandle (hObject=0x218) returned 1 [0204.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219ee8 [0204.979] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc14341c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc14341c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219ee8 | out: hHeap=0x1f0000) returned 1 [0204.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a8c0 [0204.980] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc14341c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc14341c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a8c0 | out: hHeap=0x1f0000) returned 1 [0204.980] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219d98 [0204.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219d98 | out: hHeap=0x1f0000) returned 1 [0204.980] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc1b5b23, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc1b5b23, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx", cAlternateFileName="MI1F5D~1.EVT")) returned 1 [0204.980] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a818 [0204.980] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0204.980] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x260ff0 [0204.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0204.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a2d8 | out: hHeap=0x1f0000) returned 1 [0204.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a818 | out: hHeap=0x1f0000) returned 1 [0204.980] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0204.981] GetFileType (hFile=0x218) returned 0x1 [0204.981] CloseHandle (hObject=0x218) returned 1 [0204.981] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261388 [0204.981] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc1b5b23, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc1b5b23, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261388 | out: hHeap=0x1f0000) returned 1 [0204.981] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261388 [0204.981] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc1b5b23, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc1b5b23, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261388 | out: hHeap=0x1f0000) returned 1 [0204.981] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2614f8 [0204.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2614f8 | out: hHeap=0x1f0000) returned 1 [0204.981] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd74ac348, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd74ac348, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-TWinUI%4Operational.evtx", cAlternateFileName="MIA925~1.EVT")) returned 1 [0204.981] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c30 [0204.981] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0204.981] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0204.982] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0204.982] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ff0 | out: hHeap=0x1f0000) returned 1 [0204.982] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c30 | out: hHeap=0x1f0000) returned 1 [0204.982] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-TWinUI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-twinui%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0204.982] GetFileType (hFile=0x218) returned 0x1 [0204.982] CloseHandle (hObject=0x218) returned 1 [0204.983] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21ff68 [0204.983] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-TWinUI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-twinui%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd74ac348, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd74ac348, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ff68 | out: hHeap=0x1f0000) returned 1 [0204.983] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2203a0 [0204.983] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-TWinUI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-twinui%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd74ac348, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd74ac348, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2203a0 | out: hHeap=0x1f0000) returned 1 [0204.983] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0204.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0204.983] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50aff605, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50aff605, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-User Profile Service%4Operational.evtx", cAlternateFileName="MI4D4C~1.EVT")) returned 1 [0204.983] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a688 [0204.983] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a68 [0204.983] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0204.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a68 | out: hHeap=0x1f0000) returned 1 [0204.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0204.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a688 | out: hHeap=0x1f0000) returned 1 [0204.984] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-User Profile Service%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-user profile service%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0204.984] GetFileType (hFile=0x218) returned 0x1 [0204.984] CloseHandle (hObject=0x218) returned 1 [0204.984] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0204.984] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-User Profile Service%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-user profile service%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50aff605, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50aff605, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.984] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0204.984] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0204.984] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-User Profile Service%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-user profile service%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50aff605, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50aff605, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.984] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0204.984] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0204.984] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0204.984] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50981e6e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50981e6e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-UserPnp%4ActionCenter.evtx", cAlternateFileName="MI5FF0~1.EVT")) returned 1 [0204.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c30 [0204.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609c8 [0204.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2202b0 [0204.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609c8 | out: hHeap=0x1f0000) returned 1 [0204.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0204.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c30 | out: hHeap=0x1f0000) returned 1 [0204.985] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-UserPnp%4ActionCenter.evtx" (normalized: "c:\\logs\\microsoft-windows-userpnp%4actioncenter.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0204.985] GetFileType (hFile=0x218) returned 0x1 [0204.985] CloseHandle (hObject=0x218) returned 1 [0204.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0204.985] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-UserPnp%4ActionCenter.evtx" (normalized: "c:\\logs\\microsoft-windows-userpnp%4actioncenter.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50981e6e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50981e6e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0204.986] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0204.986] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-UserPnp%4ActionCenter.evtx" (normalized: "c:\\logs\\microsoft-windows-userpnp%4actioncenter.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50981e6e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50981e6e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0204.986] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0204.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0204.986] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5095bc04, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5095bc04, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-UserPnp%4DeviceInstall.evtx", cAlternateFileName="MIBD88~1.EVT")) returned 1 [0204.986] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c30 [0204.986] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0204.986] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220328 [0204.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0204.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2202b0 | out: hHeap=0x1f0000) returned 1 [0204.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c30 | out: hHeap=0x1f0000) returned 1 [0204.986] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-UserPnp%4DeviceInstall.evtx" (normalized: "c:\\logs\\microsoft-windows-userpnp%4deviceinstall.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0204.987] GetFileType (hFile=0x218) returned 0x1 [0204.987] CloseHandle (hObject=0x218) returned 1 [0204.987] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0204.987] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-UserPnp%4DeviceInstall.evtx" (normalized: "c:\\logs\\microsoft-windows-userpnp%4deviceinstall.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5095bc04, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5095bc04, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.987] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0204.987] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0204.987] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-UserPnp%4DeviceInstall.evtx" (normalized: "c:\\logs\\microsoft-windows-userpnp%4deviceinstall.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5095bc04, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5095bc04, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.987] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0204.987] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220490 [0204.987] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220490 | out: hHeap=0x1f0000) returned 1 [0204.987] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50b97f64, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50b97f64, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx", cAlternateFileName="MICC17~1.EVT")) returned 1 [0204.988] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a0b0 [0204.988] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609c8 [0204.988] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0204.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609c8 | out: hHeap=0x1f0000) returned 1 [0204.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220328 | out: hHeap=0x1f0000) returned 1 [0204.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a0b0 | out: hHeap=0x1f0000) returned 1 [0204.988] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-volumesnapshot-driver%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0204.988] GetFileType (hFile=0x218) returned 0x1 [0204.988] CloseHandle (hObject=0x218) returned 1 [0204.989] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0204.989] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-volumesnapshot-driver%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50b97f64, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50b97f64, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0204.989] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0204.989] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-volumesnapshot-driver%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50b97f64, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50b97f64, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0204.989] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0204.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0204.989] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc986efe1, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc986efe1, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Wcmsvc%4Operational.evtx", cAlternateFileName="MI72BF~1.EVT")) returned 1 [0204.989] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c30 [0204.989] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0204.989] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f7e8 [0204.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0204.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0204.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c30 | out: hHeap=0x1f0000) returned 1 [0204.990] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Wcmsvc%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-wcmsvc%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0204.990] GetFileType (hFile=0x218) returned 0x1 [0204.990] CloseHandle (hObject=0x218) returned 1 [0204.991] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0204.991] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Wcmsvc%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-wcmsvc%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc986efe1, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc986efe1, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0204.991] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2202b0 [0204.991] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Wcmsvc%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-wcmsvc%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc986efe1, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc986efe1, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2202b0 | out: hHeap=0x1f0000) returned 1 [0204.991] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fa40 [0204.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fa40 | out: hHeap=0x1f0000) returned 1 [0204.991] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb426548, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb426548, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Windows Defender%4Operational.evtx", cAlternateFileName="MI7501~1.EVT")) returned 1 [0204.991] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe00 [0204.991] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ab8 [0204.991] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229ad8 [0204.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ab8 | out: hHeap=0x1f0000) returned 1 [0204.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f7e8 | out: hHeap=0x1f0000) returned 1 [0204.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe00 | out: hHeap=0x1f0000) returned 1 [0204.992] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Windows Defender%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-windows defender%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0204.992] GetFileType (hFile=0x218) returned 0x1 [0204.992] CloseHandle (hObject=0x218) returned 1 [0204.992] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a0b0 [0204.992] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Windows Defender%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-windows defender%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb426548, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb426548, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a0b0 | out: hHeap=0x1f0000) returned 1 [0204.992] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a688 [0204.992] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Windows Defender%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-windows defender%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb426548, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb426548, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a688 | out: hHeap=0x1f0000) returned 1 [0204.992] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229e08 [0204.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229e08 | out: hHeap=0x1f0000) returned 1 [0204.992] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb4729e7, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb4729e7, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Windows Defender%4WHC.evtx", cAlternateFileName="MIF226~1.EVT")) returned 1 [0204.992] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c30 [0204.992] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ab8 [0204.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2203a0 [0204.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ab8 | out: hHeap=0x1f0000) returned 1 [0204.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229ad8 | out: hHeap=0x1f0000) returned 1 [0204.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c30 | out: hHeap=0x1f0000) returned 1 [0204.993] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Windows Defender%4WHC.evtx" (normalized: "c:\\logs\\microsoft-windows-windows defender%4whc.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0204.993] GetFileType (hFile=0x218) returned 0x1 [0204.993] CloseHandle (hObject=0x218) returned 1 [0204.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0204.993] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Windows Defender%4WHC.evtx" (normalized: "c:\\logs\\microsoft-windows-windows defender%4whc.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb4729e7, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb4729e7, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0204.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0204.993] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Windows Defender%4WHC.evtx" (normalized: "c:\\logs\\microsoft-windows-windows defender%4whc.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb4729e7, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb4729e7, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.994] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0204.994] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0204.994] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0204.994] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4b19353, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4b19353, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx", cAlternateFileName="MIDCC7~1.EVT")) returned 1 [0204.994] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2610a8 [0204.994] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609f0 [0204.994] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fc18 [0204.994] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609f0 | out: hHeap=0x1f0000) returned 1 [0204.994] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2203a0 | out: hHeap=0x1f0000) returned 1 [0204.994] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2610a8 | out: hHeap=0x1f0000) returned 1 [0204.994] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4connectionsecurity.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0204.995] GetFileType (hFile=0x218) returned 0x1 [0204.995] CloseHandle (hObject=0x218) returned 1 [0204.995] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fe70 [0204.995] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4connectionsecurity.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4b19353, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4b19353, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0204.995] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fda8 [0204.995] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4connectionsecurity.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4b19353, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4b19353, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0204.995] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x2303e8 [0204.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0204.996] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9c9b1b6, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9c9b1b6, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx", cAlternateFileName="MI7771~1.EVT")) returned 1 [0204.996] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a380 [0204.996] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609f0 [0204.996] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2614f8 [0204.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609f0 | out: hHeap=0x1f0000) returned 1 [0204.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0204.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a380 | out: hHeap=0x1f0000) returned 1 [0204.996] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4firewall.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0204.997] GetFileType (hFile=0x218) returned 0x1 [0204.997] CloseHandle (hObject=0x218) returned 1 [0204.997] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261388 [0204.997] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4firewall.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9c9b1b6, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9c9b1b6, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000)) returned 1 [0204.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261388 | out: hHeap=0x1f0000) returned 1 [0204.997] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261668 [0204.997] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4firewall.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9c9b1b6, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9c9b1b6, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000)) returned 1 [0204.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261668 | out: hHeap=0x1f0000) returned 1 [0204.997] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261388 [0204.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261388 | out: hHeap=0x1f0000) returned 1 [0204.997] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9df26e9, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9df26e9, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx", cAlternateFileName="MI4667~1.EVT")) returned 1 [0204.997] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a2d0 [0204.998] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a68 [0204.998] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0204.998] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a68 | out: hHeap=0x1f0000) returned 1 [0204.998] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2614f8 | out: hHeap=0x1f0000) returned 1 [0204.998] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a2d0 | out: hHeap=0x1f0000) returned 1 [0204.998] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx" (normalized: "c:\\logs\\microsoft-windows-wininet-config%4proxyconfigchanged.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0204.999] GetFileType (hFile=0x218) returned 0x1 [0204.999] CloseHandle (hObject=0x218) returned 1 [0204.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0204.999] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx" (normalized: "c:\\logs\\microsoft-windows-wininet-config%4proxyconfigchanged.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9df26e9, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9df26e9, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.999] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0204.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0204.999] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx" (normalized: "c:\\logs\\microsoft-windows-wininet-config%4proxyconfigchanged.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9df26e9, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9df26e9, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.999] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0204.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0204.999] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0205.000] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd122d184, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd122d184, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Winlogon%4Operational.evtx", cAlternateFileName="MID6AB~1.EVT")) returned 1 [0205.000] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c30 [0205.000] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609c8 [0205.000] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2202b0 [0205.000] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609c8 | out: hHeap=0x1f0000) returned 1 [0205.000] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0205.000] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c30 | out: hHeap=0x1f0000) returned 1 [0205.000] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Winlogon%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-winlogon%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0205.000] GetFileType (hFile=0x218) returned 0x1 [0205.001] CloseHandle (hObject=0x218) returned 1 [0205.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fc98 [0205.001] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Winlogon%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-winlogon%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd122d184, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd122d184, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0205.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fc98 | out: hHeap=0x1f0000) returned 1 [0205.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0205.001] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Winlogon%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-winlogon%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd122d184, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd122d184, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0205.002] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0205.002] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0205.002] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0205.002] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf164b9b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcf164b9b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-WMI-Activity%4Operational.evtx", cAlternateFileName="MIFF83~1.EVT")) returned 1 [0205.002] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0205.002] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ab8 [0205.002] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229b60 [0205.002] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ab8 | out: hHeap=0x1f0000) returned 1 [0205.002] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2202b0 | out: hHeap=0x1f0000) returned 1 [0205.002] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0205.003] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-WMI-Activity%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-wmi-activity%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0205.003] GetFileType (hFile=0x218) returned 0x1 [0205.003] CloseHandle (hObject=0x218) returned 1 [0205.003] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a688 [0205.003] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-WMI-Activity%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-wmi-activity%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf164b9b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcf164b9b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000)) returned 1 [0205.003] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a688 | out: hHeap=0x1f0000) returned 1 [0205.004] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2299c8 [0205.004] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-WMI-Activity%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-wmi-activity%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf164b9b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcf164b9b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000)) returned 1 [0205.004] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2299c8 | out: hHeap=0x1f0000) returned 1 [0205.004] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2299c8 [0205.004] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2299c8 | out: hHeap=0x1f0000) returned 1 [0205.004] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50555c8d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50555c8d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xc2f39201, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x111103, dwReserved0=0x0, dwReserved1=0x0, cFileName="Security.evtx.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="SECURI~1.ODV")) returned 1 [0205.004] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a8c0 [0205.004] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0205.004] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261440 [0205.004] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0205.004] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229b60 | out: hHeap=0x1f0000) returned 1 [0205.004] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a8c0 | out: hHeap=0x1f0000) returned 1 [0205.005] CreateFileW (lpFileName="C:\\\\Logs\\Security.evtx.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\logs\\security.evtx.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0205.005] GetFileType (hFile=0x218) returned 0x1 [0205.005] CloseHandle (hObject=0x218) returned 1 [0205.005] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261388 [0205.005] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Security.evtx.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\logs\\security.evtx.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50555c8d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50555c8d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xc2f39201, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x111103)) returned 1 [0205.005] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261388 | out: hHeap=0x1f0000) returned 1 [0205.006] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261160 [0205.006] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Security.evtx.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\logs\\security.evtx.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50555c8d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50555c8d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xc2f39201, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x111103)) returned 1 [0205.006] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261160 | out: hHeap=0x1f0000) returned 1 [0205.006] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261388 [0205.006] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261388 | out: hHeap=0x1f0000) returned 1 [0205.006] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95a6db2c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x95a6db2c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.evtx", cAlternateFileName="SETUP~1.EVT")) returned 1 [0205.006] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609c8 [0205.006] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609f0 [0205.006] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0205.006] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609f0 | out: hHeap=0x1f0000) returned 1 [0205.006] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261440 | out: hHeap=0x1f0000) returned 1 [0205.006] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609c8 | out: hHeap=0x1f0000) returned 1 [0205.006] CreateFileW (lpFileName="C:\\\\Logs\\Setup.evtx" (normalized: "c:\\logs\\setup.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0205.006] GetFileType (hFile=0x218) returned 0x1 [0205.007] CloseHandle (hObject=0x218) returned 1 [0205.007] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0205.007] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Setup.evtx" (normalized: "c:\\logs\\setup.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95a6db2c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x95a6db2c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0205.007] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0205.007] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf70 [0205.007] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Setup.evtx" (normalized: "c:\\logs\\setup.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95a6db2c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x95a6db2c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0205.007] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf70 | out: hHeap=0x1f0000) returned 1 [0205.007] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0205.007] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0205.007] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505097c4, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505097c4, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xc359f9dc, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x111103, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.evtx", cAlternateFileName="SYSTEM~1.EVT")) returned 1 [0205.007] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0205.007] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609f0 [0205.007] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2f0 [0205.007] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609f0 | out: hHeap=0x1f0000) returned 1 [0205.007] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0205.007] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0205.008] CreateFileW (lpFileName="C:\\\\Logs\\System.evtx" (normalized: "c:\\logs\\system.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0205.008] GetFileType (hFile=0x218) returned 0x1 [0205.008] CloseHandle (hObject=0x218) returned 1 [0205.008] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0205.008] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\System.evtx" (normalized: "c:\\logs\\system.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505097c4, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505097c4, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xc359f9dc, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x111103)) returned 1 [0205.008] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0205.008] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0205.008] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\System.evtx" (normalized: "c:\\logs\\system.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505097c4, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505097c4, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xc359f9dc, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x111103)) returned 1 [0205.009] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0205.009] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0205.009] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0205.009] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50555c8d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50555c8d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows PowerShell.evtx", cAlternateFileName="WINDOW~1.EVT")) returned 1 [0205.009] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0205.009] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609c8 [0205.009] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22bdb8 [0205.009] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609c8 | out: hHeap=0x1f0000) returned 1 [0205.009] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0205.009] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0205.009] CreateFileW (lpFileName="C:\\\\Logs\\Windows PowerShell.evtx" (normalized: "c:\\logs\\windows powershell.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0205.009] GetFileType (hFile=0x218) returned 0x1 [0205.010] CloseHandle (hObject=0x218) returned 1 [0205.010] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22bec0 [0205.010] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Windows PowerShell.evtx" (normalized: "c:\\logs\\windows powershell.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50555c8d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50555c8d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0205.010] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22bec0 | out: hHeap=0x1f0000) returned 1 [0205.010] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22bec0 [0205.010] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Windows PowerShell.evtx" (normalized: "c:\\logs\\windows powershell.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50555c8d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50555c8d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0205.010] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22bec0 | out: hHeap=0x1f0000) returned 1 [0205.010] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22bec0 [0205.010] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22bec0 | out: hHeap=0x1f0000) returned 1 [0205.010] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50555c8d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50555c8d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows PowerShell.evtx", cAlternateFileName="WINDOW~1.EVT")) returned 0 [0205.011] FindClose (in: hFindFile=0x24ea00 | out: hFindFile=0x24ea00) returned 1 [0205.011] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22bdb8 | out: hHeap=0x1f0000) returned 1 [0205.011] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22dd00 | out: hHeap=0x1f0000) returned 1 [0205.011] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0205.011] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234110 | out: hHeap=0x1f0000) returned 1 [0205.011] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233e40 [0205.011] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605e0 [0205.011] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d508 [0205.011] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0205.011] FindFirstFileW (in: lpFileName="C:\\\\PerfLogs\\*", lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa03748ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17b3dd09, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e640 [0205.011] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606f8 [0205.011] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0205.011] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0205.011] FindNextFileW (in: hFindFile=0x24e640, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa03748ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17b3dd09, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0205.012] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0205.012] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606f8 | out: hHeap=0x1f0000) returned 1 [0205.012] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0205.012] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0205.012] FindNextFileW (in: hFindFile=0x24e640, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa03748ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17b3dd09, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0205.012] FindClose (in: hFindFile=0x24e640 | out: hFindFile=0x24e640) returned 1 [0205.012] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0205.012] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d508 | out: hHeap=0x1f0000) returned 1 [0205.012] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605e0 | out: hHeap=0x1f0000) returned 1 [0205.012] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233e40 | out: hHeap=0x1f0000) returned 1 [0205.012] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233e40 [0205.012] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260720 [0205.013] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22eb58 [0205.013] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2f0 [0205.013] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\*", lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3ac6234, ftLastAccessTime.dwHighDateTime=0x1d5c65b, ftLastWriteTime.dwLowDateTime=0x3ac6234, ftLastWriteTime.dwHighDateTime=0x1d5c65b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24eac0 [0205.013] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0205.013] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0205.013] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0205.013] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3ac6234, ftLastAccessTime.dwHighDateTime=0x1d5c65b, ftLastWriteTime.dwLowDateTime=0x3ac6234, ftLastWriteTime.dwHighDateTime=0x1d5c65b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0205.013] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2f0 [0205.013] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0205.014] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0205.014] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0205.014] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4aadd873, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common Files", cAlternateFileName="COMMON~1")) returned 1 [0205.014] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260838 [0205.014] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0205.014] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225c98 [0205.014] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0205.014] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0205.014] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260838 | out: hHeap=0x1f0000) returned 1 [0205.014] lstrcmpW (lpString1="Common Files", lpString2=".") returned 1 [0205.014] lstrcmpW (lpString1="Common Files", lpString2="..") returned 1 [0205.014] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x2051f0 [0205.015] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234080 [0205.015] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1a307d95, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5d0779b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5d0779b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0205.015] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0205.015] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0205.015] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225ce8 [0205.015] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0205.015] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225c98 | out: hHeap=0x1f0000) returned 1 [0205.015] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0205.015] CreateFileW (lpFileName="C:\\\\Program Files\\desktop.ini" (normalized: "c:\\program files\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf554, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0205.016] GetFileType (hFile=0x218) returned 0x1 [0205.016] CloseHandle (hObject=0x218) returned 1 [0205.016] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234110 [0205.016] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\desktop.ini" (normalized: "c:\\program files\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5e4 | out: lpFileInformation=0x1fdf5e4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1a307d95, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5d0779b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5d0779b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xae)) returned 1 [0205.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234110 | out: hHeap=0x1f0000) returned 1 [0205.016] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234110 [0205.016] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\desktop.ini" (normalized: "c:\\program files\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1fdf5f4 | out: lpFileInformation=0x1fdf5f4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1a307d95, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5d0779b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5d0779b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xae)) returned 1 [0205.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234110 | out: hHeap=0x1f0000) returned 1 [0205.016] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234110 [0205.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234110 | out: hHeap=0x1f0000) returned 1 [0205.016] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfbf3a0e6, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xfbf3a0e6, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0205.016] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0205.017] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf70 [0205.017] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22bdb8 [0205.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf70 | out: hHeap=0x1f0000) returned 1 [0205.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225ce8 | out: hHeap=0x1f0000) returned 1 [0205.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0205.312] lstrcmpW (lpString1="Internet Explorer", lpString2=".") returned 1 [0205.313] lstrcmpW (lpString1="Internet Explorer", lpString2="..") returned 1 [0205.313] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0205.313] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22bec0 [0205.313] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2051f0 | out: hHeap=0x1f0000) returned 1 [0205.313] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xfc0fdd55, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xfc0fdd55, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 1 [0205.313] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf70 [0205.313] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22bdb8 | out: hHeap=0x1f0000) returned 1 [0205.313] lstrcmpW (lpString1="Java", lpString2=".") returned 1 [0205.313] lstrcmpW (lpString1="Java", lpString2="..") returned 1 [0205.313] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x48) returned 0x225f68 [0205.313] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cfa8 [0205.313] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0205.320] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf8a30151, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xf8a30151, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office", cAlternateFileName="MICROS~2")) returned 1 [0205.320] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0205.320] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1feed0 [0205.321] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22bf18 [0205.321] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1feed0 | out: hHeap=0x1f0000) returned 1 [0205.321] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf70 | out: hHeap=0x1f0000) returned 1 [0205.334] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0205.334] lstrcmpW (lpString1="Microsoft Office", lpString2=".") returned 1 [0205.334] lstrcmpW (lpString1="Microsoft Office", lpString2="..") returned 1 [0205.334] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c30 [0205.334] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22bdb8 [0205.334] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225f68 | out: hHeap=0x1f0000) returned 1 [0205.352] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82e68d8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc03f299, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xfc03f299, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office 15", cAlternateFileName="MICROS~1")) returned 1 [0205.352] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0205.352] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1ff058 [0205.352] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c5f8 [0205.352] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1ff058 | out: hHeap=0x1f0000) returned 1 [0205.352] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22bf18 | out: hHeap=0x1f0000) returned 1 [0205.353] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0205.353] lstrcmpW (lpString1="Microsoft Office 15", lpString2=".") returned 1 [0205.353] lstrcmpW (lpString1="Microsoft Office 15", lpString2="..") returned 1 [0205.353] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0205.353] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22bf18 [0205.353] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c30 | out: hHeap=0x1f0000) returned 1 [0205.353] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xe99e772e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfbfccb69, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xfbfccb69, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla Firefox", cAlternateFileName="MOZILL~1")) returned 1 [0205.353] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2607e8 [0205.353] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0205.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c968 [0205.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0205.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c5f8 | out: hHeap=0x1f0000) returned 1 [0205.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607e8 | out: hHeap=0x1f0000) returned 1 [0205.354] lstrcmpW (lpString1="Mozilla Firefox", lpString2=".") returned 1 [0205.354] lstrcmpW (lpString1="Mozilla Firefox", lpString2="..") returned 1 [0205.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c9c0 [0205.354] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x709c717f, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x709c717f, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x709c717f, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSBuild", cAlternateFileName="")) returned 1 [0205.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1feed0 [0205.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225bf8 [0205.355] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1feed0 | out: hHeap=0x1f0000) returned 1 [0205.355] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c968 | out: hHeap=0x1f0000) returned 1 [0205.355] lstrcmpW (lpString1="MSBuild", lpString2=".") returned 1 [0205.355] lstrcmpW (lpString1="MSBuild", lpString2="..") returned 1 [0205.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd8) returned 0x229528 [0205.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234620 [0205.355] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0205.356] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x709ed3a7, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0xfc0b18a4, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xfc0b18a4, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reference Assemblies", cAlternateFileName="REFERE~1")) returned 1 [0205.356] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1ff058 [0205.356] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1feed0 [0205.356] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c700 [0205.356] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1feed0 | out: hHeap=0x1f0000) returned 1 [0205.356] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225bf8 | out: hHeap=0x1f0000) returned 1 [0205.356] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1ff058 | out: hHeap=0x1f0000) returned 1 [0205.356] lstrcmpW (lpString1="Reference Assemblies", lpString2=".") returned 1 [0205.356] lstrcmpW (lpString1="Reference Assemblies", lpString2="..") returned 1 [0205.356] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22ca18 [0205.357] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x59f2f4b4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xfbf5a454, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xfbf5a454, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rempl", cAlternateFileName="")) returned 1 [0205.357] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0205.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c700 | out: hHeap=0x1f0000) returned 1 [0205.357] lstrcmpW (lpString1="rempl", lpString2=".") returned 1 [0205.357] lstrcmpW (lpString1="rempl", lpString2="..") returned 1 [0205.357] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1feed0 [0205.357] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xd2709a20, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xfc066938, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xfc066938, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Uninstall Information", cAlternateFileName="UNINST~1")) returned 1 [0205.357] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fefe8 [0205.357] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1ff058 [0205.357] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22ca70 [0205.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1ff058 | out: hHeap=0x1f0000) returned 1 [0205.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0205.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fefe8 | out: hHeap=0x1f0000) returned 1 [0205.358] lstrcmpW (lpString1="Uninstall Information", lpString2=".") returned 1 [0205.358] lstrcmpW (lpString1="Uninstall Information", lpString2="..") returned 1 [0205.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x138) returned 0x220918 [0205.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c860 [0205.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229528 | out: hHeap=0x1f0000) returned 1 [0205.358] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x4c509d45, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa747f43e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x749f4454, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UNP", cAlternateFileName="")) returned 1 [0205.359] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0205.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ca70 | out: hHeap=0x1f0000) returned 1 [0205.359] lstrcmpW (lpString1="UNP", lpString2=".") returned 1 [0205.359] lstrcmpW (lpString1="UNP", lpString2="..") returned 1 [0205.359] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fefe8 [0205.359] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc066938, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xfc066938, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Defender", cAlternateFileName="WINDOW~1")) returned 1 [0205.359] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1ff058 [0205.359] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0205.359] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c8b8 [0205.360] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0205.360] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0205.360] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1ff058 | out: hHeap=0x1f0000) returned 1 [0205.360] lstrcmpW (lpString1="Windows Defender", lpString2=".") returned 1 [0205.360] lstrcmpW (lpString1="Windows Defender", lpString2="..") returned 1 [0205.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c910 [0205.360] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xfbe9d08f, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xfbe9d08f, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Defender Advanced Threat Protection", cAlternateFileName="WIF4A9~1")) returned 1 [0205.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c30 [0205.361] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0205.361] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0205.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0205.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0205.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c30 | out: hHeap=0x1f0000) returned 1 [0205.361] lstrcmpW (lpString1="Windows Defender Advanced Threat Protection", lpString2=".") returned 1 [0205.361] lstrcmpW (lpString1="Windows Defender Advanced Threat Protection", lpString2="..") returned 1 [0205.361] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213240 [0205.361] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa90b6918, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Mail", cAlternateFileName="WINDOW~2")) returned 1 [0205.362] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605b8 [0205.362] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0205.362] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225c98 [0205.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0205.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0205.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0205.362] lstrcmpW (lpString1="Windows Mail", lpString2=".") returned 1 [0205.362] lstrcmpW (lpString1="Windows Mail", lpString2="..") returned 1 [0205.362] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c8) returned 0x223018 [0205.362] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234938 [0205.363] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220918 | out: hHeap=0x1f0000) returned 1 [0205.363] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e4faee, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xfbfa67b3, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xfbfa67b3, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media Player", cAlternateFileName="WI54FB~1")) returned 1 [0205.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf70 [0205.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0205.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c5f8 [0205.363] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0205.363] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225c98 | out: hHeap=0x1f0000) returned 1 [0205.363] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf70 | out: hHeap=0x1f0000) returned 1 [0205.363] lstrcmpW (lpString1="Windows Media Player", lpString2=".") returned 1 [0205.363] lstrcmpW (lpString1="Windows Media Player", lpString2="..") returned 1 [0205.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c700 [0205.364] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfbfccb69, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xfbfccb69, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Multimedia Platform", cAlternateFileName="WINDOW~3")) returned 1 [0205.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234668 [0205.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0205.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c30 [0205.364] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0205.364] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c5f8 | out: hHeap=0x1f0000) returned 1 [0205.364] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234668 | out: hHeap=0x1f0000) returned 1 [0205.364] lstrcmpW (lpString1="Windows Multimedia Platform", lpString2=".") returned 1 [0205.364] lstrcmpW (lpString1="Windows Multimedia Platform", lpString2="..") returned 1 [0205.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235b10 [0205.365] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xf8bf9d3e, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xf8bf9d3e, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows NT", cAlternateFileName="WINDOW~4")) returned 1 [0205.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260658 [0205.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0205.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225ce8 [0205.365] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0205.365] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c30 | out: hHeap=0x1f0000) returned 1 [0205.365] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260658 | out: hHeap=0x1f0000) returned 1 [0205.365] lstrcmpW (lpString1="Windows NT", lpString2=".") returned 1 [0205.365] lstrcmpW (lpString1="Windows NT", lpString2="..") returned 1 [0205.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2348a8 [0205.366] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc08b6a0, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xfc08b6a0, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Photo Viewer", cAlternateFileName="WI8A19~1")) returned 1 [0205.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0205.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf70 [0205.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c650 [0205.366] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf70 | out: hHeap=0x1f0000) returned 1 [0205.366] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225ce8 | out: hHeap=0x1f0000) returned 1 [0205.366] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0205.366] lstrcmpW (lpString1="Windows Photo Viewer", lpString2=".") returned 1 [0205.367] lstrcmpW (lpString1="Windows Photo Viewer", lpString2="..") returned 1 [0205.367] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c968 [0205.367] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfbfccb69, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xfbfccb69, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Portable Devices", cAlternateFileName="WIBFE5~1")) returned 1 [0205.367] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234818 [0205.367] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0205.367] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235c48 [0205.367] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0205.367] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c650 | out: hHeap=0x1f0000) returned 1 [0205.367] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234818 | out: hHeap=0x1f0000) returned 1 [0205.367] lstrcmpW (lpString1="Windows Portable Devices", lpString2=".") returned 1 [0205.368] lstrcmpW (lpString1="Windows Portable Devices", lpString2="..") returned 1 [0205.368] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235d18 [0205.368] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfbe9d08f, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xfbe9d08f, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Security", cAlternateFileName="WIDB62~1")) returned 1 [0205.368] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0205.368] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf70 [0205.368] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c808 [0205.368] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf70 | out: hHeap=0x1f0000) returned 1 [0205.368] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235c48 | out: hHeap=0x1f0000) returned 1 [0205.368] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0205.369] lstrcmpW (lpString1="Windows Security", lpString2=".") returned 1 [0205.369] lstrcmpW (lpString1="Windows Security", lpString2="..") returned 1 [0205.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2a0) returned 0x25fd40 [0205.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c5f8 [0205.369] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223018 | out: hHeap=0x1f0000) returned 1 [0205.369] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92aed1a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bb043c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="WI4223~1")) returned 1 [0205.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605b8 [0205.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0205.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22ca70 [0205.369] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0205.369] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c808 | out: hHeap=0x1f0000) returned 1 [0205.370] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0205.370] lstrcmpW (lpString1="Windows Sidebar", lpString2=".") returned 1 [0205.370] lstrcmpW (lpString1="Windows Sidebar", lpString2="..") returned 1 [0205.370] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c650 [0205.370] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x8da88b6d, ftLastAccessTime.dwHighDateTime=0x1d3274e, ftLastWriteTime.dwLowDateTime=0x8da88b6d, ftLastWriteTime.dwHighDateTime=0x1d3274e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsApps", cAlternateFileName="WI7DB9~1")) returned 1 [0205.370] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260900 [0205.370] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0205.370] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x2260a8 [0205.370] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0205.370] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ca70 | out: hHeap=0x1f0000) returned 1 [0205.370] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260900 | out: hHeap=0x1f0000) returned 1 [0205.370] lstrcmpW (lpString1="WindowsApps", lpString2=".") returned 1 [0205.370] lstrcmpW (lpString1="WindowsApps", lpString2="..") returned 1 [0205.370] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234668 [0205.370] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc0fdd55, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xfc0fdd55, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsPowerShell", cAlternateFileName="WID5B1~1")) returned 1 [0205.370] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0205.371] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0205.371] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c6a8 [0205.371] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0205.371] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2260a8 | out: hHeap=0x1f0000) returned 1 [0205.371] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0205.371] lstrcmpW (lpString1="WindowsPowerShell", lpString2=".") returned 1 [0205.371] lstrcmpW (lpString1="WindowsPowerShell", lpString2="..") returned 1 [0205.371] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c758 [0205.371] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1fdf78c | out: lpFindFileData=0x1fdf78c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc0fdd55, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xfc0fdd55, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsPowerShell", cAlternateFileName="WID5B1~1")) returned 0 [0205.371] FindClose (in: hFindFile=0x24eac0 | out: hFindFile=0x24eac0) returned 1 [0205.371] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234590 [0205.372] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0205.372] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d508 [0205.372] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c8b8 [0205.372] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\*", lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4aadd873, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1f0000, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24eb40 [0205.372] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234788 [0205.372] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x2358a0 [0205.372] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234788 | out: hHeap=0x1f0000) returned 1 [0205.372] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0205.372] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0205.373] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4aadd873, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1f0000, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0205.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2345d8 [0205.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x235d80 [0205.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2345d8 | out: hHeap=0x1f0000) returned 1 [0205.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2358a0 | out: hHeap=0x1f0000) returned 1 [0205.373] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0205.373] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0205.373] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x4aab75fe, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0xa0417b85, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1f0000, dwReserved1=0x0, cFileName="DESIGNER", cAlternateFileName="")) returned 1 [0205.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609a0 [0205.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234818 [0205.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x235cb0 [0205.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234818 | out: hHeap=0x1f0000) returned 1 [0205.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235d80 | out: hHeap=0x1f0000) returned 1 [0205.374] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0205.374] lstrcmpW (lpString1="DESIGNER", lpString2=".") returned 1 [0205.374] lstrcmpW (lpString1="DESIGNER", lpString2="..") returned 1 [0205.374] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x205290 [0205.374] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c7b0 [0205.374] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa04663f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1f0000, dwReserved1=0x0, cFileName="microsoft shared", cAlternateFileName="MICROS~1")) returned 1 [0205.374] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0205.374] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234788 [0205.374] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235908 [0205.374] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234788 | out: hHeap=0x1f0000) returned 1 [0205.374] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235cb0 | out: hHeap=0x1f0000) returned 1 [0205.374] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0205.375] lstrcmpW (lpString1="microsoft shared", lpString2=".") returned 1 [0205.375] lstrcmpW (lpString1="microsoft shared", lpString2="..") returned 1 [0205.375] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0205.375] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236260 [0205.375] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205290 | out: hHeap=0x1f0000) returned 1 [0205.375] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c11068, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1f0000, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0205.375] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0205.375] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234ae8 [0205.375] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x236330 [0205.375] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234ae8 | out: hHeap=0x1f0000) returned 1 [0205.375] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235908 | out: hHeap=0x1f0000) returned 1 [0205.375] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0205.375] lstrcmpW (lpString1="Services", lpString2=".") returned 1 [0205.376] lstrcmpW (lpString1="Services", lpString2="..") returned 1 [0205.376] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x48) returned 0x226058 [0205.376] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22ca70 [0205.376] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0205.376] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c5f95f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1f0000, dwReserved1=0x0, cFileName="System", cAlternateFileName="")) returned 1 [0205.376] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2344b8 [0205.376] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x236398 [0205.376] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2344b8 | out: hHeap=0x1f0000) returned 1 [0205.376] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236330 | out: hHeap=0x1f0000) returned 1 [0205.377] lstrcmpW (lpString1="System", lpString2=".") returned 1 [0205.377] lstrcmpW (lpString1="System", lpString2="..") returned 1 [0205.377] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236330 [0205.377] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c808 [0205.377] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226058 | out: hHeap=0x1f0000) returned 1 [0205.377] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c5f95f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1f0000, dwReserved1=0x0, cFileName="System", cAlternateFileName="")) returned 0 [0205.377] FindClose (in: hFindFile=0x24eb40 | out: hFindFile=0x24eb40) returned 1 [0205.377] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2345d8 [0205.377] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0205.377] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22dd00 [0205.377] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236058 [0205.377] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\DESIGNER\\*", lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x4aab75fe, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0xa0417b85, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x225bec, dwReserved1=0x420040, cFileName=".", cAlternateFileName="")) returned 0x24e9c0 [0205.378] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235ff0 [0205.378] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236058 | out: hHeap=0x1f0000) returned 1 [0205.378] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0205.378] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x4aab75fe, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0xa0417b85, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x225bec, dwReserved1=0x420040, cFileName="..", cAlternateFileName="")) returned 1 [0205.378] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235970 [0205.378] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235ff0 | out: hHeap=0x1f0000) returned 1 [0205.378] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0205.378] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0205.378] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c8c3a00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4aadd873, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5c8c3a00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x3e70, dwReserved0=0x225bec, dwReserved1=0x420040, cFileName="MSADDNDR.OLB", cAlternateFileName="")) returned 1 [0205.378] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606f8 [0205.378] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235b78 [0205.378] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220cf0 [0205.378] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0205.379] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235970 | out: hHeap=0x1f0000) returned 1 [0205.379] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606f8 | out: hHeap=0x1f0000) returned 1 [0205.379] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB" (normalized: "c:\\program files\\common files\\designer\\msaddndr.olb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fded1c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0205.379] GetFileType (hFile=0x218) returned 0x1 [0205.380] CloseHandle (hObject=0x218) returned 1 [0205.380] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0205.380] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB" (normalized: "c:\\program files\\common files\\designer\\msaddndr.olb"), fInfoLevelId=0x0, lpFileInformation=0x1fdedac | out: lpFileInformation=0x1fdedac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c8c3a00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4aadd873, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5c8c3a00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x3e70)) returned 1 [0205.380] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0205.380] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd88 [0205.380] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB" (normalized: "c:\\program files\\common files\\designer\\msaddndr.olb"), fInfoLevelId=0x0, lpFileInformation=0x1fdedbc | out: lpFileInformation=0x1fdedbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c8c3a00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4aadd873, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5c8c3a00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x3e70)) returned 1 [0205.380] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd88 | out: hHeap=0x1f0000) returned 1 [0205.380] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0205.380] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0205.381] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c8c3a00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4aadd873, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5c8c3a00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x3e70, dwReserved0=0x225bec, dwReserved1=0x420040, cFileName="MSADDNDR.OLB", cAlternateFileName="")) returned 0 [0205.381] FindClose (in: hFindFile=0x24e9c0 | out: hFindFile=0x24e9c0) returned 1 [0205.381] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0205.381] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22dd00 | out: hHeap=0x1f0000) returned 1 [0205.381] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0205.381] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2345d8 | out: hHeap=0x1f0000) returned 1 [0205.381] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2345d8 [0205.381] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260630 [0205.381] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22dd00 [0205.381] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fc98 [0205.381] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\*", lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa04663f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x225bec, dwReserved1=0x420040, cFileName=".", cAlternateFileName="")) returned 0x24eac0 [0205.381] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0205.382] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fc98 | out: hHeap=0x1f0000) returned 1 [0205.382] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0205.382] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa04663f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x225bec, dwReserved1=0x420040, cFileName="..", cAlternateFileName="")) returned 1 [0205.382] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0205.382] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0205.382] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0205.382] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0205.382] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbf6c42af, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x81028f76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x81028f76, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x225bec, dwReserved1=0x420040, cFileName="ClickToRun", cAlternateFileName="CLICKT~1")) returned 1 [0205.382] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0205.382] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0205.382] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218818 [0205.382] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0205.382] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0205.382] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0205.382] lstrcmpW (lpString1="ClickToRun", lpString2=".") returned 1 [0205.382] lstrcmpW (lpString1="ClickToRun", lpString2="..") returned 1 [0205.382] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204ff0 [0205.382] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0205.382] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb3e1c92c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb3e1c92c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x225bec, dwReserved1=0x420040, cFileName="ink", cAlternateFileName="")) returned 1 [0205.382] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0205.383] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218818 | out: hHeap=0x1f0000) returned 1 [0205.383] lstrcmpW (lpString1="ink", lpString2=".") returned 1 [0205.383] lstrcmpW (lpString1="ink", lpString2="..") returned 1 [0205.383] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0205.383] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2203a0 [0205.383] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ff0 | out: hHeap=0x1f0000) returned 1 [0205.383] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa098a4c6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71143a45, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x225bec, dwReserved1=0x420040, cFileName="MSInfo", cAlternateFileName="")) returned 1 [0205.383] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220058 [0205.383] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0205.383] lstrcmpW (lpString1="MSInfo", lpString2=".") returned 1 [0205.383] lstrcmpW (lpString1="MSInfo", lpString2="..") returned 1 [0205.383] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x48) returned 0x226288 [0205.383] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220508 [0205.383] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0205.383] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd9f60362, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd9f60362, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x225bec, dwReserved1=0x420040, cFileName="OFFICE16", cAlternateFileName="")) returned 1 [0205.383] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0205.383] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0205.383] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x2191b8 [0205.383] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0205.384] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220058 | out: hHeap=0x1f0000) returned 1 [0205.384] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0205.384] lstrcmpW (lpString1="OFFICE16", lpString2=".") returned 1 [0205.384] lstrcmpW (lpString1="OFFICE16", lpString2="..") returned 1 [0205.384] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235c48 [0205.384] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0205.384] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226288 | out: hHeap=0x1f0000) returned 1 [0205.384] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd99442a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd99442a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x225bec, dwReserved1=0x420040, cFileName="OfficeSoftwareProtectionPlatform", cAlternateFileName="OFFICE~1")) returned 1 [0205.384] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c8b8 [0205.384] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220490 [0205.384] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261388 [0205.384] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220490 | out: hHeap=0x1f0000) returned 1 [0205.384] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2191b8 | out: hHeap=0x1f0000) returned 1 [0205.385] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0205.385] lstrcmpW (lpString1="OfficeSoftwareProtectionPlatform", lpString2=".") returned 1 [0205.385] lstrcmpW (lpString1="OfficeSoftwareProtectionPlatform", lpString2="..") returned 1 [0205.385] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0205.385] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261440 [0205.385] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235c48 | out: hHeap=0x1f0000) returned 1 [0205.385] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4accd6e1, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4accd6e1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x225bec, dwReserved1=0x420040, cFileName="Source Engine", cAlternateFileName="SOURCE~1")) returned 1 [0205.385] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605e0 [0205.385] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0205.385] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x2188c8 [0205.385] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0205.385] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261388 | out: hHeap=0x1f0000) returned 1 [0205.385] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605e0 | out: hHeap=0x1f0000) returned 1 [0205.385] lstrcmpW (lpString1="Source Engine", lpString2=".") returned 1 [0205.386] lstrcmpW (lpString1="Source Engine", lpString2="..") returned 1 [0205.386] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213790 [0205.386] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b5538f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x225bec, dwReserved1=0x420040, cFileName="Stationery", cAlternateFileName="STATIO~1")) returned 1 [0205.386] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260798 [0205.386] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fa40 [0205.386] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219478 [0205.386] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fa40 | out: hHeap=0x1f0000) returned 1 [0205.386] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2188c8 | out: hHeap=0x1f0000) returned 1 [0205.386] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260798 | out: hHeap=0x1f0000) returned 1 [0205.386] lstrcmpW (lpString1="Stationery", lpString2=".") returned 1 [0205.386] lstrcmpW (lpString1="Stationery", lpString2="..") returned 1 [0205.386] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd8) returned 0x229528 [0205.386] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0205.386] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0205.386] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b56882, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x225bec, dwReserved1=0x420040, cFileName="TextConv", cAlternateFileName="")) returned 1 [0205.386] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608b0 [0205.386] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0205.386] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219058 [0205.387] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0205.387] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219478 | out: hHeap=0x1f0000) returned 1 [0205.387] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608b0 | out: hHeap=0x1f0000) returned 1 [0205.387] lstrcmpW (lpString1="TextConv", lpString2=".") returned 1 [0205.387] lstrcmpW (lpString1="TextConv", lpString2="..") returned 1 [0205.387] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2134e8 [0205.387] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b57d42, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x225bec, dwReserved1=0x420040, cFileName="Triedit", cAlternateFileName="")) returned 1 [0205.387] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fc98 [0205.387] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219058 | out: hHeap=0x1f0000) returned 1 [0205.387] lstrcmpW (lpString1="Triedit", lpString2=".") returned 1 [0205.387] lstrcmpW (lpString1="Triedit", lpString2="..") returned 1 [0205.387] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd88 [0205.387] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xbcd0fab8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xa0b594b8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2ce22546, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x225bec, dwReserved1=0x420040, cFileName="VC", cAlternateFileName="")) returned 1 [0205.387] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0205.387] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fc98 | out: hHeap=0x1f0000) returned 1 [0205.387] lstrcmpW (lpString1="VC", lpString2=".") returned 1 [0205.387] lstrcmpW (lpString1="VC", lpString2="..") returned 1 [0205.387] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x138) returned 0x220918 [0205.388] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0205.388] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229528 | out: hHeap=0x1f0000) returned 1 [0205.388] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b59a78, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x225bec, dwReserved1=0x420040, cFileName="VGX", cAlternateFileName="")) returned 1 [0205.388] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0205.388] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0205.388] lstrcmpW (lpString1="VGX", lpString2=".") returned 1 [0205.388] lstrcmpW (lpString1="VGX", lpString2="..") returned 1 [0205.388] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f7e8 [0205.388] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49ecb94e, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ae972f5, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x225bec, dwReserved1=0x420040, cFileName="VSTO", cAlternateFileName="")) returned 1 [0205.388] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fc98 [0205.388] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0205.388] lstrcmpW (lpString1="VSTO", lpString2=".") returned 1 [0205.388] lstrcmpW (lpString1="VSTO", lpString2="..") returned 1 [0205.388] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0205.388] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49ecb94e, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ae972f5, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x225bec, dwReserved1=0x420040, cFileName="VSTO", cAlternateFileName="")) returned 0 [0205.388] FindClose (in: hFindFile=0x24eac0 | out: hFindFile=0x24eac0) returned 1 [0205.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2347d0 [0205.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260838 [0205.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x227520 [0205.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213680 [0205.389] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\*", lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbf6c42af, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x81028f76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc40ccad7, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x220406, cFileName=".", cAlternateFileName="")) returned 0x24ecc0 [0205.581] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213570 [0205.581] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213680 | out: hHeap=0x1f0000) returned 1 [0205.581] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0205.581] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbf6c42af, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x81028f76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc40ccad7, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="..", cAlternateFileName="")) returned 1 [0205.581] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2135f8 [0205.582] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213570 | out: hHeap=0x1f0000) returned 1 [0205.582] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0205.582] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0205.582] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x809e6bf5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x809e6bf5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="api-ms-win-core-file-l1-2-0.dll", cAlternateFileName="API-MS~1.DLL")) returned 1 [0205.582] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346b0 [0205.582] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f10 [0205.582] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f9c0 [0205.582] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f10 | out: hHeap=0x1f0000) returned 1 [0205.582] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2135f8 | out: hHeap=0x1f0000) returned 1 [0205.582] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346b0 | out: hHeap=0x1f0000) returned 1 [0205.583] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l1-2-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0205.583] GetFileType (hFile=0x218) returned 0x1 [0205.584] CloseHandle (hObject=0x218) returned 1 [0205.584] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x2300c8 [0205.584] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l1-2-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x809e6bf5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x809e6bf5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x48c0)) returned 1 [0205.585] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0205.585] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fa88 [0205.585] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l1-2-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x809e6bf5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x809e6bf5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x48c0)) returned 1 [0205.585] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0205.585] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x2300c8 [0205.585] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0205.585] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x809e6bf5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x809e6bf5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="api-ms-win-core-file-l2-1-0.dll", cAlternateFileName="API-MS~2.DLL")) returned 1 [0205.585] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346b0 [0205.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213570 [0205.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fce0 [0205.586] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213570 | out: hHeap=0x1f0000) returned 1 [0205.586] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0205.586] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346b0 | out: hHeap=0x1f0000) returned 1 [0205.587] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l2-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l2-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0205.587] GetFileType (hFile=0x218) returned 0x1 [0205.588] CloseHandle (hObject=0x218) returned 1 [0205.588] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f6a0 [0205.588] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l2-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l2-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x809e6bf5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x809e6bf5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x48c0)) returned 1 [0205.588] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0205.588] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x230000 [0205.588] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l2-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l2-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x809e6bf5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x809e6bf5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x48c0)) returned 1 [0205.589] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0205.589] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x230190 [0205.589] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0205.589] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x52c0, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="api-ms-win-core-localization-l1-2-0.dll", cAlternateFileName="API-MS~3.DLL")) returned 1 [0205.589] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c8b8 [0205.589] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0205.589] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x2007c8 [0205.589] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0205.589] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0205.590] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0205.590] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-localization-l1-2-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0205.591] GetFileType (hFile=0x218) returned 0x1 [0205.591] CloseHandle (hObject=0x218) returned 1 [0205.591] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x2008a0 [0205.592] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-localization-l1-2-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x52c0)) returned 1 [0205.592] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2008a0 | out: hHeap=0x1f0000) returned 1 [0205.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x2008a0 [0205.592] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-localization-l1-2-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x52c0)) returned 1 [0205.592] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2008a0 | out: hHeap=0x1f0000) returned 1 [0205.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x2008a0 [0205.592] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2008a0 | out: hHeap=0x1f0000) returned 1 [0205.592] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="api-ms-win-core-processthreads-l1-1-1.dll", cAlternateFileName="API-MS~4.DLL")) returned 1 [0205.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235b78 [0205.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213570 [0205.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x2008a0 [0205.593] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213570 | out: hHeap=0x1f0000) returned 1 [0205.593] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2007c8 | out: hHeap=0x1f0000) returned 1 [0205.593] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0205.594] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-processthreads-l1-1-1.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0205.594] GetFileType (hFile=0x218) returned 0x1 [0205.594] CloseHandle (hObject=0x218) returned 1 [0205.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x2007c8 [0205.595] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-processthreads-l1-1-1.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0)) returned 1 [0205.595] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2007c8 | out: hHeap=0x1f0000) returned 1 [0205.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x2007c8 [0205.596] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-processthreads-l1-1-1.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0)) returned 1 [0205.596] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2007c8 | out: hHeap=0x1f0000) returned 1 [0205.596] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x2007c8 [0205.596] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2007c8 | out: hHeap=0x1f0000) returned 1 [0205.596] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="api-ms-win-core-synch-l1-2-0.dll", cAlternateFileName="APF10C~1.DLL")) returned 1 [0205.596] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c8b8 [0205.596] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0205.597] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f9c0 [0205.597] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0205.597] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2008a0 | out: hHeap=0x1f0000) returned 1 [0205.597] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0205.598] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-synch-l1-2-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0205.598] GetFileType (hFile=0x218) returned 0x1 [0205.598] CloseHandle (hObject=0x218) returned 1 [0205.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x230000 [0205.599] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-synch-l1-2-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0)) returned 1 [0205.599] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0205.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fc18 [0205.599] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-synch-l1-2-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0)) returned 1 [0205.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0205.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22ff38 [0205.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0205.600] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="api-ms-win-core-timezone-l1-1-0.dll", cAlternateFileName="AP7902~1.DLL")) returned 1 [0205.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c8b8 [0205.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213570 [0205.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x230000 [0205.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213570 | out: hHeap=0x1f0000) returned 1 [0205.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0205.601] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0205.601] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-timezone-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-timezone-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0205.602] GetFileType (hFile=0x218) returned 0x1 [0205.602] CloseHandle (hObject=0x218) returned 1 [0205.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x2300c8 [0205.602] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-timezone-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-timezone-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x48c0)) returned 1 [0205.603] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0205.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f9c0 [0205.603] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-timezone-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-timezone-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x48c0)) returned 1 [0205.603] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0205.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f6a0 [0205.603] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0205.603] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x2d60, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="api-ms-win-core-xstate-l2-1-0.dll", cAlternateFileName="APA632~1.DLL")) returned 1 [0205.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c8b8 [0205.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213818 [0205.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x230258 [0205.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213818 | out: hHeap=0x1f0000) returned 1 [0205.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0205.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0205.605] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-xstate-l2-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-xstate-l2-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0205.605] GetFileType (hFile=0x218) returned 0x1 [0205.605] CloseHandle (hObject=0x218) returned 1 [0205.606] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f768 [0205.606] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-xstate-l2-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-xstate-l2-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x2d60)) returned 1 [0205.606] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0205.606] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f510 [0205.606] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-xstate-l2-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-xstate-l2-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x2d60)) returned 1 [0205.606] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0205.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fda8 [0205.607] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0205.607] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="api-ms-win-crt-conio-l1-1-0.dll", cAlternateFileName="AP5C76~1.DLL")) returned 1 [0205.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2348f0 [0205.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212c68 [0205.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f9c0 [0205.607] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212c68 | out: hHeap=0x1f0000) returned 1 [0205.607] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0205.607] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2348f0 | out: hHeap=0x1f0000) returned 1 [0205.608] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-conio-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-conio-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0205.608] GetFileType (hFile=0x218) returned 0x1 [0205.609] CloseHandle (hObject=0x218) returned 1 [0205.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fe70 [0205.609] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-conio-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-conio-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0)) returned 1 [0205.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0205.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22ff38 [0205.609] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-conio-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-conio-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0)) returned 1 [0205.610] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0205.610] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fc18 [0205.610] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0205.610] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x58c0, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="api-ms-win-crt-convert-l1-1-0.dll", cAlternateFileName="APFD9C~1.DLL")) returned 1 [0205.610] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c8b8 [0205.610] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2135f8 [0205.610] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fe70 [0205.610] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2135f8 | out: hHeap=0x1f0000) returned 1 [0205.610] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0205.610] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0205.611] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-convert-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0205.612] GetFileType (hFile=0x218) returned 0x1 [0205.612] CloseHandle (hObject=0x218) returned 1 [0205.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f768 [0205.613] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-convert-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x58c0)) returned 1 [0205.613] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0205.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f830 [0205.613] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-convert-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x58c0)) returned 1 [0205.613] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0205.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f5d8 [0205.614] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0205.614] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="api-ms-win-crt-environment-l1-1-0.dll", cAlternateFileName="APC00F~1.DLL")) returned 1 [0205.614] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c8b8 [0205.614] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213570 [0205.614] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x2007c8 [0205.614] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213570 | out: hHeap=0x1f0000) returned 1 [0205.614] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0205.614] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0205.615] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-environment-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0205.615] GetFileType (hFile=0x218) returned 0x1 [0205.616] CloseHandle (hObject=0x218) returned 1 [0205.616] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x200978 [0205.616] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-environment-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0)) returned 1 [0205.616] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x200978 | out: hHeap=0x1f0000) returned 1 [0205.617] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x2008a0 [0205.617] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-environment-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0)) returned 1 [0205.617] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2008a0 | out: hHeap=0x1f0000) returned 1 [0205.617] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x2008a0 [0205.617] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2008a0 | out: hHeap=0x1f0000) returned 1 [0205.617] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x50c0, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="api-ms-win-crt-filesystem-l1-1-0.dll", cAlternateFileName="AP0479~1.DLL")) returned 1 [0205.617] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c8b8 [0205.617] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0205.617] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f830 [0205.617] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0205.617] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2007c8 | out: hHeap=0x1f0000) returned 1 [0205.617] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0205.618] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-filesystem-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-filesystem-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0205.618] GetFileType (hFile=0x218) returned 0x1 [0205.619] CloseHandle (hObject=0x218) returned 1 [0205.619] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fa88 [0205.619] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-filesystem-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-filesystem-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x50c0)) returned 1 [0205.620] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0205.620] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x230000 [0205.620] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-filesystem-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-filesystem-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x50c0)) returned 1 [0205.620] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0205.620] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f9c0 [0205.620] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0205.620] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="api-ms-win-crt-heap-l1-1-0.dll", cAlternateFileName="AP23C9~1.DLL")) returned 1 [0205.620] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234a58 [0205.621] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212c68 [0205.621] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x2300c8 [0205.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212c68 | out: hHeap=0x1f0000) returned 1 [0205.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0205.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234a58 | out: hHeap=0x1f0000) returned 1 [0205.622] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-heap-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-heap-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0205.622] GetFileType (hFile=0x218) returned 0x1 [0205.622] CloseHandle (hObject=0x218) returned 1 [0205.623] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fe70 [0205.623] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-heap-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-heap-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0)) returned 1 [0205.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0205.623] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fce0 [0205.623] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-heap-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-heap-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0)) returned 1 [0205.624] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0205.624] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fe70 [0205.624] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0205.624] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="api-ms-win-crt-locale-l1-1-0.dll", cAlternateFileName="APCB40~1.DLL")) returned 1 [0205.624] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c8b8 [0205.624] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213680 [0205.624] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fce0 [0205.624] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213680 | out: hHeap=0x1f0000) returned 1 [0205.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0205.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0205.625] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-locale-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-locale-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0205.625] GetFileType (hFile=0x218) returned 0x1 [0205.626] CloseHandle (hObject=0x218) returned 1 [0205.924] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f510 [0205.924] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-locale-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-locale-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0)) returned 1 [0205.924] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0205.925] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fe70 [0205.925] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-locale-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-locale-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0)) returned 1 [0205.925] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0205.925] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f768 [0205.925] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0205.925] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x6cc0, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="api-ms-win-crt-math-l1-1-0.dll", cAlternateFileName="APAE51~1.DLL")) returned 1 [0205.925] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346b0 [0205.925] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212c68 [0205.926] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22ff38 [0205.926] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212c68 | out: hHeap=0x1f0000) returned 1 [0205.926] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0205.926] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346b0 | out: hHeap=0x1f0000) returned 1 [0205.926] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-math-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-math-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0205.927] GetFileType (hFile=0x210) returned 0x1 [0205.927] CloseHandle (hObject=0x210) returned 1 [0205.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fa88 [0205.928] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-math-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-math-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x6cc0)) returned 1 [0205.928] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0205.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f830 [0205.928] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-math-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-math-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x6cc0)) returned 1 [0205.928] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0205.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f9c0 [0205.928] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0205.929] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x68c0, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="api-ms-win-crt-multibyte-l1-1-0.dll", cAlternateFileName="AP972F~1.DLL")) returned 1 [0205.929] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c8b8 [0205.929] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213818 [0205.929] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fa88 [0205.929] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213818 | out: hHeap=0x1f0000) returned 1 [0205.929] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0205.929] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0205.930] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-multibyte-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-multibyte-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0205.930] GetFileType (hFile=0x210) returned 0x1 [0205.930] CloseHandle (hObject=0x210) returned 1 [0205.931] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f9c0 [0205.931] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-multibyte-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-multibyte-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x68c0)) returned 1 [0205.931] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0205.931] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f9c0 [0205.931] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-multibyte-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-multibyte-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x68c0)) returned 1 [0205.931] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0205.931] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x230190 [0205.931] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0205.931] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x114c0, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="api-ms-win-crt-private-l1-1-0.dll", cAlternateFileName="AP7D9E~1.DLL")) returned 1 [0205.932] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c8b8 [0205.932] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213570 [0205.932] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x230190 [0205.932] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213570 | out: hHeap=0x1f0000) returned 1 [0205.932] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0205.932] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0205.932] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-private-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-private-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0205.932] GetFileType (hFile=0x210) returned 0x1 [0205.933] CloseHandle (hObject=0x210) returned 1 [0205.933] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f5d8 [0205.933] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-private-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-private-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x114c0)) returned 1 [0205.933] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0205.933] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fce0 [0205.933] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-private-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-private-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x114c0)) returned 1 [0205.934] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0205.934] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fb50 [0205.934] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0205.934] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="api-ms-win-crt-process-l1-1-0.dll", cAlternateFileName="APFCAD~1.DLL")) returned 1 [0205.934] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c8b8 [0205.934] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213570 [0205.934] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fb50 [0205.934] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213570 | out: hHeap=0x1f0000) returned 1 [0205.934] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0205.934] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0205.935] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-process-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-process-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0205.935] GetFileType (hFile=0x210) returned 0x1 [0205.935] CloseHandle (hObject=0x210) returned 1 [0205.935] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f5d8 [0205.936] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-process-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-process-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0)) returned 1 [0205.936] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0205.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fce0 [0205.936] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-process-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-process-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0)) returned 1 [0205.936] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0205.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x230190 [0205.936] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0205.936] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x5ac0, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="api-ms-win-crt-runtime-l1-1-0.dll", cAlternateFileName="AP8F34~1.DLL")) returned 1 [0205.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c8b8 [0205.937] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0205.937] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22ff38 [0205.937] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0205.937] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0205.937] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0205.938] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-runtime-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-runtime-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0205.938] GetFileType (hFile=0x210) returned 0x1 [0205.938] CloseHandle (hObject=0x210) returned 1 [0205.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f830 [0205.938] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-runtime-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-runtime-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x5ac0)) returned 1 [0205.939] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0205.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f510 [0205.939] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-runtime-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-runtime-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x5ac0)) returned 1 [0205.939] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0205.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f6a0 [0205.939] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0205.939] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x60c0, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="api-ms-win-crt-stdio-l1-1-0.dll", cAlternateFileName="APD1B7~1.DLL")) returned 1 [0205.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2348f0 [0205.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213570 [0205.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f768 [0205.940] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213570 | out: hHeap=0x1f0000) returned 1 [0205.940] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0205.940] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2348f0 | out: hHeap=0x1f0000) returned 1 [0205.940] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-stdio-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-stdio-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0205.940] GetFileType (hFile=0x210) returned 0x1 [0205.941] CloseHandle (hObject=0x210) returned 1 [0205.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x230000 [0205.941] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-stdio-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-stdio-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x60c0)) returned 1 [0205.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0205.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f6a0 [0205.941] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-stdio-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-stdio-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x60c0)) returned 1 [0205.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0205.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f6a0 [0205.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0205.942] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x60c0, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="api-ms-win-crt-string-l1-1-0.dll", cAlternateFileName="APBF0F~1.DLL")) returned 1 [0205.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c8b8 [0205.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213818 [0205.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fce0 [0205.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213818 | out: hHeap=0x1f0000) returned 1 [0205.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0205.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0205.942] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-string-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-string-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0205.943] GetFileType (hFile=0x210) returned 0x1 [0205.943] CloseHandle (hObject=0x210) returned 1 [0205.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x2300c8 [0205.943] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-string-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-string-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x60c0)) returned 1 [0205.943] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0205.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f510 [0205.943] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-string-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-string-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x60c0)) returned 1 [0205.944] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0205.944] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f768 [0205.944] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0205.944] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x52c0, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="api-ms-win-crt-time-l1-1-0.dll", cAlternateFileName="AP5E4C~1.DLL")) returned 1 [0205.944] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2349c8 [0205.944] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213680 [0205.944] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fb50 [0205.944] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213680 | out: hHeap=0x1f0000) returned 1 [0205.944] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0205.944] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2349c8 | out: hHeap=0x1f0000) returned 1 [0205.945] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-time-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-time-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0205.945] GetFileType (hFile=0x210) returned 0x1 [0205.945] CloseHandle (hObject=0x210) returned 1 [0205.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x230320 [0205.945] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-time-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-time-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x52c0)) returned 1 [0205.946] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0205.946] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fa88 [0205.946] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-time-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-time-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x52c0)) returned 1 [0205.946] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0205.946] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f510 [0205.946] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0205.946] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="api-ms-win-crt-utility-l1-1-0.dll", cAlternateFileName="AP80F4~1.DLL")) returned 1 [0205.946] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c8b8 [0205.946] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f10 [0205.946] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f768 [0205.946] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f10 | out: hHeap=0x1f0000) returned 1 [0205.946] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0205.946] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0205.947] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-utility-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-utility-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0205.947] GetFileType (hFile=0x210) returned 0x1 [0205.947] CloseHandle (hObject=0x210) returned 1 [0205.947] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f510 [0205.947] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-utility-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-utility-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0)) returned 1 [0205.947] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0205.948] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f510 [0205.948] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-utility-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-utility-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0)) returned 1 [0205.948] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0205.948] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x230000 [0205.948] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0205.948] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb979f700, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x27c40, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="ApiClient.dll", cAlternateFileName="APICLI~1.DLL")) returned 1 [0205.948] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260540 [0205.948] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0205.948] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0205.948] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0205.948] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0205.948] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0205.949] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ApiClient.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\apiclient.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0205.949] GetLastError () returned 0x20 [0205.949] GetLastError () returned 0x20 [0205.950] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9bc01200, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0xa02d8, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="AppVCatalog.dll", cAlternateFileName="APPVCA~1.DLL")) returned 1 [0205.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260518 [0205.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213570 [0205.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0205.950] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213570 | out: hHeap=0x1f0000) returned 1 [0205.950] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0205.950] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0205.951] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVCatalog.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvcatalog.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0205.951] GetLastError () returned 0x20 [0205.951] GetLastError () returned 0x20 [0205.951] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x1f5ad8, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="appvcleaner.exe", cAlternateFileName="APPVCL~1.EXE")) returned 1 [0205.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0205.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0205.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0205.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0205.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0205.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0205.953] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\appvcleaner.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvcleaner.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0205.953] GetFileType (hFile=0x210) returned 0x1 [0205.953] CloseHandle (hObject=0x210) returned 1 [0205.953] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a0e0 [0205.954] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\appvcleaner.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvcleaner.exe"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x1f5ad8)) returned 1 [0205.954] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a0e0 | out: hHeap=0x1f0000) returned 1 [0205.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a0e0 [0205.954] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\appvcleaner.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvcleaner.exe"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x1f5ad8)) returned 1 [0205.954] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a0e0 | out: hHeap=0x1f0000) returned 1 [0205.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a6c8 [0205.954] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a6c8 | out: hHeap=0x1f0000) returned 1 [0205.954] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a330a6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a330a6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x4b0d8, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="AppVFileSystemMetadata.dll", cAlternateFileName="APPVFI~1.DLL")) returned 1 [0205.956] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346b0 [0205.956] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213570 [0205.956] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0205.957] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213570 | out: hHeap=0x1f0000) returned 1 [0205.957] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0205.957] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346b0 | out: hHeap=0x1f0000) returned 1 [0205.957] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVFileSystemMetadata.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvfilesystemmetadata.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0205.957] GetLastError () returned 0x20 [0205.957] GetLastError () returned 0x20 [0205.957] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a330a6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a330a6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x2052d8, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="AppVIntegration.dll", cAlternateFileName="APPVIN~1.DLL")) returned 1 [0205.957] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf70 [0205.957] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0205.958] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0205.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0205.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0205.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf70 | out: hHeap=0x1f0000) returned 1 [0205.958] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIntegration.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvintegration.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0205.958] GetLastError () returned 0x20 [0205.958] GetLastError () returned 0x20 [0205.958] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a59305, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a59305, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x726d8, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="AppVIsvApi.dll", cAlternateFileName="APPVIS~1.DLL")) returned 1 [0205.958] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606f8 [0205.958] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0205.959] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0205.959] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0205.959] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0205.959] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606f8 | out: hHeap=0x1f0000) returned 1 [0205.959] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvApi.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvapi.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0205.959] GetLastError () returned 0x20 [0205.959] GetLastError () returned 0x20 [0205.959] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a7f55d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a7f55d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe1b7300, ftLastWriteTime.dwHighDateTime=0x1d0d7a5, nFileSizeHigh=0x0, nFileSizeLow=0x60ea0, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="AppvIsvStream32.dll", cAlternateFileName="APPVIS~2.DLL")) returned 1 [0205.959] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0205.959] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0205.959] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0205.960] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0205.960] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0205.960] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0205.960] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream32.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0205.960] GetFileType (hFile=0x210) returned 0x1 [0205.961] CloseHandle (hObject=0x210) returned 1 [0205.961] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219d98 [0205.961] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream32.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a7f55d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a7f55d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe1b7300, ftLastWriteTime.dwHighDateTime=0x1d0d7a5, nFileSizeHigh=0x0, nFileSizeLow=0x60ea0)) returned 1 [0205.961] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219d98 | out: hHeap=0x1f0000) returned 1 [0205.961] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a230 [0205.961] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream32.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a7f55d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a7f55d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe1b7300, ftLastWriteTime.dwHighDateTime=0x1d0d7a5, nFileSizeHigh=0x0, nFileSizeLow=0x60ea0)) returned 1 [0205.961] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a230 | out: hHeap=0x1f0000) returned 1 [0205.961] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21ab60 [0205.961] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ab60 | out: hHeap=0x1f0000) returned 1 [0205.962] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc40ccad7, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xc40ccad7, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xc418b762, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x60eb0, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="AppvIsvStream32.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="APPVIS~1.ODV")) returned 1 [0205.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261668 [0205.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0205.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120) returned 0x210958 [0205.962] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0205.962] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0205.962] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261668 | out: hHeap=0x1f0000) returned 1 [0205.963] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream32.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream32.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0205.963] GetFileType (hFile=0x210) returned 0x1 [0205.963] CloseHandle (hObject=0x210) returned 1 [0205.964] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120) returned 0x210ba8 [0205.964] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream32.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream32.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc40ccad7, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xc40ccad7, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xc418b762, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x60eb0)) returned 1 [0205.964] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0205.964] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120) returned 0x210708 [0205.964] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream32.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream32.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc40ccad7, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xc40ccad7, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xc418b762, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x60eb0)) returned 1 [0205.964] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0205.964] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120) returned 0x211048 [0205.964] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0205.964] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a7f55d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a7f55d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb5e67000, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x73aa0, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="AppvIsvStream64.dll", cAlternateFileName="APPVIS~3.DLL")) returned 1 [0205.965] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf70 [0205.965] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213818 [0205.965] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0205.965] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213818 | out: hHeap=0x1f0000) returned 1 [0205.965] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0205.965] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf70 | out: hHeap=0x1f0000) returned 1 [0205.966] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream64.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0205.966] GetFileType (hFile=0x210) returned 0x1 [0205.966] CloseHandle (hObject=0x210) returned 1 [0205.967] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21aa10 [0205.967] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream64.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a7f55d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a7f55d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb5e67000, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x73aa0)) returned 1 [0205.967] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21aa10 | out: hHeap=0x1f0000) returned 1 [0205.967] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a818 [0205.967] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream64.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a7f55d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a7f55d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb5e67000, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x73aa0)) returned 1 [0205.967] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a818 | out: hHeap=0x1f0000) returned 1 [0205.967] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a770 [0205.967] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a770 | out: hHeap=0x1f0000) returned 1 [0205.968] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a7f55d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a7f55d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x336d8, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="AppVIsvStreamingManager.dll", cAlternateFileName="APPVIS~4.DLL")) returned 1 [0205.968] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234980 [0205.968] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f10 [0205.968] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0205.968] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f10 | out: hHeap=0x1f0000) returned 1 [0205.968] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0205.968] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234980 | out: hHeap=0x1f0000) returned 1 [0205.968] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvStreamingManager.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstreamingmanager.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0205.969] GetLastError () returned 0x20 [0205.969] GetLastError () returned 0x20 [0205.969] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80aa57b9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80aa57b9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x1566d8, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="AppVIsvSubsystemController.dll", cAlternateFileName="AP213A~1.DLL")) returned 1 [0205.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234548 [0205.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213570 [0205.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x230320 [0205.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213570 | out: hHeap=0x1f0000) returned 1 [0205.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0205.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234548 | out: hHeap=0x1f0000) returned 1 [0205.970] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvSubsystemController.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystemcontroller.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0206.299] GetLastError () returned 0x20 [0206.299] GetLastError () returned 0x20 [0206.300] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80aa57b9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80aa57b9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x18d60800, ftLastWriteTime.dwHighDateTime=0x1d0d7a5, nFileSizeHigh=0x0, nFileSizeLow=0x1ae0a8, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="AppvIsvSubsystems32.dll", cAlternateFileName="AP3342~1.DLL")) returned 1 [0206.300] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1ff058 [0206.300] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212c68 [0206.300] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0206.300] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212c68 | out: hHeap=0x1f0000) returned 1 [0206.300] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0206.300] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1ff058 | out: hHeap=0x1f0000) returned 1 [0206.300] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems32.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0206.301] GetFileType (hFile=0x1d8) returned 0x1 [0206.301] CloseHandle (hObject=0x1d8) returned 1 [0206.301] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261668 [0206.302] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems32.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80aa57b9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80aa57b9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x18d60800, ftLastWriteTime.dwHighDateTime=0x1d0d7a5, nFileSizeHigh=0x0, nFileSizeLow=0x1ae0a8)) returned 1 [0206.302] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261668 | out: hHeap=0x1f0000) returned 1 [0206.302] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261668 [0206.302] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems32.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80aa57b9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80aa57b9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x18d60800, ftLastWriteTime.dwHighDateTime=0x1d0d7a5, nFileSizeHigh=0x0, nFileSizeLow=0x1ae0a8)) returned 1 [0206.302] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261668 | out: hHeap=0x1f0000) returned 1 [0206.302] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261668 [0206.302] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261668 | out: hHeap=0x1f0000) returned 1 [0206.302] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80acba0b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80acba0b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbbdc5100, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x22e0a8, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="AppvIsvSubsystems64.dll", cAlternateFileName="AP4400~1.DLL")) returned 1 [0206.302] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1ff058 [0206.302] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2135f8 [0206.302] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0206.303] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2135f8 | out: hHeap=0x1f0000) returned 1 [0206.303] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0206.303] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1ff058 | out: hHeap=0x1f0000) returned 1 [0206.303] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems64.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0206.303] GetFileType (hFile=0x1d8) returned 0x1 [0206.303] CloseHandle (hObject=0x1d8) returned 1 [0206.304] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261668 [0206.304] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems64.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80acba0b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80acba0b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbbdc5100, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x22e0a8)) returned 1 [0206.304] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261668 | out: hHeap=0x1f0000) returned 1 [0206.304] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261668 [0206.304] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems64.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80acba0b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80acba0b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbbdc5100, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x22e0a8)) returned 1 [0206.304] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261668 | out: hHeap=0x1f0000) returned 1 [0206.304] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261668 [0206.304] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261668 | out: hHeap=0x1f0000) returned 1 [0206.304] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80af1c6a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80af1c6a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x8a8d8, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="AppVIsvVirtualization.dll", cAlternateFileName="AP485B~1.DLL")) returned 1 [0206.304] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2348f0 [0206.304] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2135f8 [0206.304] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0206.304] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2135f8 | out: hHeap=0x1f0000) returned 1 [0206.304] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0206.304] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2348f0 | out: hHeap=0x1f0000) returned 1 [0206.305] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvVirtualization.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvvirtualization.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0206.305] GetLastError () returned 0x20 [0206.305] GetLastError () returned 0x20 [0206.305] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80af1c6a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80af1c6a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x12cad8, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="AppVManifest.dll", cAlternateFileName="APPVMA~1.DLL")) returned 1 [0206.305] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1ff058 [0206.305] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2135f8 [0206.305] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0206.305] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2135f8 | out: hHeap=0x1f0000) returned 1 [0206.305] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0206.306] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1ff058 | out: hHeap=0x1f0000) returned 1 [0206.306] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVManifest.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvmanifest.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0206.306] GetLastError () returned 0x20 [0206.306] GetLastError () returned 0x20 [0206.306] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b17ebf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b17ebf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0xe76d8, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="AppVOrchestration.dll", cAlternateFileName="APPVOR~1.DLL")) returned 1 [0206.306] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1ff058 [0206.306] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2135f8 [0206.306] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0206.306] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2135f8 | out: hHeap=0x1f0000) returned 1 [0206.306] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0206.306] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1ff058 | out: hHeap=0x1f0000) returned 1 [0206.307] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVOrchestration.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvorchestration.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0206.307] GetLastError () returned 0x20 [0206.307] GetLastError () returned 0x20 [0206.307] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b17ebf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b17ebf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x13c4d8, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="AppVPolicy.dll", cAlternateFileName="APPVPO~1.DLL")) returned 1 [0206.307] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260540 [0206.307] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f10 [0206.307] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0206.307] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f10 | out: hHeap=0x1f0000) returned 1 [0206.307] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0206.308] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0206.308] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVPolicy.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvpolicy.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0206.308] GetLastError () returned 0x20 [0206.308] GetLastError () returned 0x20 [0206.308] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b17ebf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b17ebf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9e226c00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x7d0d8, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="AppVScripting.dll", cAlternateFileName="APPVSC~1.DLL")) returned 1 [0206.308] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1ff058 [0206.308] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212c68 [0206.308] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0206.308] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212c68 | out: hHeap=0x1f0000) returned 1 [0206.308] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0206.308] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1ff058 | out: hHeap=0x1f0000) returned 1 [0206.309] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVScripting.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvscripting.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0206.309] GetFileType (hFile=0x1d8) returned 0x1 [0206.309] CloseHandle (hObject=0x1d8) returned 1 [0206.309] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a188 [0206.309] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVScripting.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvscripting.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b17ebf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b17ebf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9e226c00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x7d0d8)) returned 1 [0206.309] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a188 | out: hHeap=0x1f0000) returned 1 [0206.310] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a380 [0206.310] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVScripting.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvscripting.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b17ebf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b17ebf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9e226c00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x7d0d8)) returned 1 [0206.310] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a380 | out: hHeap=0x1f0000) returned 1 [0206.310] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a038 [0206.310] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a038 | out: hHeap=0x1f0000) returned 1 [0206.310] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b3e121, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b3e121, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9e226c00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x406d8, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="AppVShNotify.exe", cAlternateFileName="APPVSH~1.EXE")) returned 1 [0206.310] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1ff058 [0206.310] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2135f8 [0206.310] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0206.310] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2135f8 | out: hHeap=0x1f0000) returned 1 [0206.310] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0206.310] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1ff058 | out: hHeap=0x1f0000) returned 1 [0206.311] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVShNotify.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvshnotify.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0206.311] GetFileType (hFile=0x1d8) returned 0x1 [0206.311] CloseHandle (hObject=0x1d8) returned 1 [0206.311] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a770 [0206.311] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVShNotify.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvshnotify.exe"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b3e121, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b3e121, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9e226c00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x406d8)) returned 1 [0206.311] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a770 | out: hHeap=0x1f0000) returned 1 [0206.311] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a0e0 [0206.311] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVShNotify.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvshnotify.exe"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b3e121, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b3e121, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9e226c00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x406d8)) returned 1 [0206.312] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a0e0 | out: hHeap=0x1f0000) returned 1 [0206.312] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a818 [0206.312] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a818 | out: hHeap=0x1f0000) returned 1 [0206.312] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b3e121, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b3e121, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x14115400, ftLastWriteTime.dwHighDateTime=0x1d0d7a5, nFileSizeHigh=0x0, nFileSizeLow=0xc84c0, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="C2R32.dll", cAlternateFileName="")) returned 1 [0206.312] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260540 [0206.312] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2135f8 [0206.312] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0206.312] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2135f8 | out: hHeap=0x1f0000) returned 1 [0206.312] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0206.312] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0206.312] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r32.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0206.312] GetFileType (hFile=0x1d8) returned 0x1 [0206.313] CloseHandle (hObject=0x1d8) returned 1 [0206.313] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0206.313] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r32.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b3e121, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b3e121, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x14115400, ftLastWriteTime.dwHighDateTime=0x1d0d7a5, nFileSizeHigh=0x0, nFileSizeLow=0xc84c0)) returned 1 [0206.313] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0206.313] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0206.313] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r32.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b3e121, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b3e121, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x14115400, ftLastWriteTime.dwHighDateTime=0x1d0d7a5, nFileSizeHigh=0x0, nFileSizeLow=0xc84c0)) returned 1 [0206.313] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0206.313] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0206.313] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0206.313] GetLastError () returned 0x0 [0206.313] CryptAcquireContextA (in: phProv=0x1fde1b8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1fde1b8*=0x212ad0) returned 1 [0206.317] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x260590 | out: pbBuffer=0x260590) returned 1 [0206.317] CryptReleaseContext (hProv=0x212ad0, dwFlags=0x0) returned 1 [0206.317] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0206.318] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x25a8a8 [0206.318] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x220748 [0206.318] QueryPerformanceCounter (in: lpPerformanceCount=0x1fde14c | out: lpPerformanceCount=0x1fde14c*=36368674758) returned 1 [0206.318] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1fde18c | out: lpSystemTimeAsFileTime=0x1fde18c) [0206.318] QueryPerformanceCounter (in: lpPerformanceCount=0x1fde14c | out: lpPerformanceCount=0x1fde14c*=36368704225) returned 1 [0206.318] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1fde18c | out: lpSystemTimeAsFileTime=0x1fde18c) [0206.318] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x21cf70 [0206.318] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x252370 [0206.319] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x222ee8 [0206.319] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x222ff8 [0206.319] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210078 [0206.319] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206838 [0206.319] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffa0 [0206.319] GetLastError () returned 0x0 [0206.319] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R32.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r32.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde058, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0206.320] GetFileType (hFile=0x1d8) returned 0x1 [0206.320] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c6f0 [0206.320] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c650 [0206.321] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r32.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde088, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0206.321] GetFileType (hFile=0x1c0) returned 0x1 [0206.321] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ff0 [0206.321] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205150 [0206.321] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261668 [0206.321] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c660 [0206.322] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c5b0 [0206.322] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R32.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r32.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1fddfd4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0206.322] GetFileType (hFile=0x1d4) returned 0x1 [0206.322] GetLastError () returned 0xb7 [0206.323] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R32.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r32.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1fddfd4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0206.323] GetFileType (hFile=0x1f4) returned 0x1 [0206.323] GetLastError () returned 0xb7 [0206.323] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r32.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x1fddfcc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0206.323] GetFileType (hFile=0x1e8) returned 0x1 [0206.324] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x245e08 [0206.324] ReadFile (in: hFile=0x1e8, lpBuffer=0x245e08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fddf28, lpOverlapped=0x0 | out: lpBuffer=0x245e08*, lpNumberOfBytesRead=0x1fddf28*=0x1000, lpOverlapped=0x0) returned 1 [0206.327] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24bdf0 [0206.329] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x243df8 [0206.329] GetLastError () returned 0x0 [0207.008] CloseHandle (hObject=0x1d8) returned 1 [0207.219] CloseHandle (hObject=0x1c0) returned 1 [0207.220] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c710 [0207.220] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c680 [0207.220] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r32.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde088, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0207.244] GetFileType (hFile=0x218) returned 0x1 [0207.245] GetLastError () returned 0xb7 [0207.248] CloseHandle (hObject=0x218) returned 1 [0207.248] DeleteFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r32.dll")) returned 0 [0207.248] GetLastError () returned 0x20 [0207.249] GetLastError () returned 0x20 [0207.249] CryptAcquireContextA (in: phProv=0x1fde1b8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1fde1b8*=0x2124f8) returned 1 [0207.252] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2609a0 | out: pbBuffer=0x2609a0) returned 1 [0207.253] CryptReleaseContext (hProv=0x2124f8, dwFlags=0x0) returned 1 [0207.253] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0207.253] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260928 [0207.253] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2606d0 [0207.253] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0207.253] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0207.253] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0207.253] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0207.253] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x263860 [0207.254] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210090 [0207.254] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x235768 [0207.254] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260748 [0207.254] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x20d998 [0207.254] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x2052d0 [0207.254] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235aa8 [0207.254] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2608b0 [0207.254] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2600f0 [0207.254] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c5e0 [0207.255] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0207.255] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210018 [0207.255] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c5f0 [0207.255] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606f8 [0207.255] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2100a8 [0207.255] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2100a8 | out: hHeap=0x1f0000) returned 1 [0207.255] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606f8 | out: hHeap=0x1f0000) returned 1 [0207.255] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5f0 | out: hHeap=0x1f0000) returned 1 [0207.255] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210018 | out: hHeap=0x1f0000) returned 1 [0207.256] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0207.256] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5e0 | out: hHeap=0x1f0000) returned 1 [0207.256] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2600f0 | out: hHeap=0x1f0000) returned 1 [0207.256] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608b0 | out: hHeap=0x1f0000) returned 1 [0207.256] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235aa8 | out: hHeap=0x1f0000) returned 1 [0207.256] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x21d050 [0207.256] GetLastError () returned 0x0 [0207.257] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1fddd48 | out: lpSystemTimeAsFileTime=0x1fddd48) [0207.257] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x21c5e0 [0207.257] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0207.257] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x2052f0 [0207.257] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2052f0 | out: hHeap=0x1f0000) returned 1 [0207.257] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0207.257] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606f8 [0207.257] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x2052f0 [0207.257] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2052f0 | out: hHeap=0x1f0000) returned 1 [0207.258] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606f8 | out: hHeap=0x1f0000) returned 1 [0207.258] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5e0 | out: hHeap=0x1f0000) returned 1 [0207.258] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0207.258] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x2282a0 [0207.258] GetLastError () returned 0x0 [0207.258] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R32.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r32.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde0b8, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0207.259] GetFileType (hFile=0x218) returned 0x1 [0207.259] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x247e18 [0207.259] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1fde040 | out: lpNewFilePointer=0x0) returned 1 [0207.260] GetLastError () returned 0xb7 [0207.260] CloseHandle (hObject=0x218) returned 1 [0207.261] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5f0 | out: hHeap=0x1f0000) returned 1 [0207.261] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5e0 | out: hHeap=0x1f0000) returned 1 [0207.261] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2600f0 | out: hHeap=0x1f0000) returned 1 [0207.261] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20d998 | out: hHeap=0x1f0000) returned 1 [0207.261] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0207.261] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2052d0 | out: hHeap=0x1f0000) returned 1 [0207.261] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235768 | out: hHeap=0x1f0000) returned 1 [0207.261] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210090 | out: hHeap=0x1f0000) returned 1 [0207.261] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263860 | out: hHeap=0x1f0000) returned 1 [0207.262] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2245b8 | out: hHeap=0x1f0000) returned 1 [0207.262] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0207.262] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0207.262] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25bbb0 | out: hHeap=0x1f0000) returned 1 [0207.262] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2648e8 | out: hHeap=0x1f0000) returned 1 [0207.262] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf70 | out: hHeap=0x1f0000) returned 1 [0207.262] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c6d0 | out: hHeap=0x1f0000) returned 1 [0207.262] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210000 | out: hHeap=0x1f0000) returned 1 [0207.262] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0207.263] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5d0 | out: hHeap=0x1f0000) returned 1 [0207.263] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffe8 | out: hHeap=0x1f0000) returned 1 [0207.263] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260658 | out: hHeap=0x1f0000) returned 1 [0207.263] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c720 | out: hHeap=0x1f0000) returned 1 [0207.263] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25ffe8 | out: hHeap=0x1f0000) returned 1 [0207.263] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0207.263] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2361f8 | out: hHeap=0x1f0000) returned 1 [0207.263] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2349c8 | out: hHeap=0x1f0000) returned 1 [0207.263] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0207.263] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0207.264] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234860 | out: hHeap=0x1f0000) returned 1 [0207.264] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c680 | out: hHeap=0x1f0000) returned 1 [0207.264] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c710 | out: hHeap=0x1f0000) returned 1 [0207.264] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x245e08 | out: hHeap=0x1f0000) returned 1 [0207.264] CloseHandle (hObject=0x1e8) returned 1 [0207.265] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c610 | out: hHeap=0x1f0000) returned 1 [0207.265] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c600 | out: hHeap=0x1f0000) returned 1 [0207.265] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220858 | out: hHeap=0x1f0000) returned 1 [0207.265] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24bdf0 | out: hHeap=0x1f0000) returned 1 [0207.265] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffd0 | out: hHeap=0x1f0000) returned 1 [0207.265] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ff0 | out: hHeap=0x1f0000) returned 1 [0207.265] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x243df8 | out: hHeap=0x1f0000) returned 1 [0207.265] CloseHandle (hObject=0x1f4) returned 1 [0207.266] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5c0 | out: hHeap=0x1f0000) returned 1 [0207.266] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c560 | out: hHeap=0x1f0000) returned 1 [0207.266] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ff0 | out: hHeap=0x1f0000) returned 1 [0207.266] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205150 | out: hHeap=0x1f0000) returned 1 [0207.266] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2230c8 | out: hHeap=0x1f0000) returned 1 [0207.267] CloseHandle (hObject=0x1d4) returned 1 [0207.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5b0 | out: hHeap=0x1f0000) returned 1 [0207.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c660 | out: hHeap=0x1f0000) returned 1 [0207.581] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261668 | out: hHeap=0x1f0000) returned 1 [0207.582] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c650 | out: hHeap=0x1f0000) returned 1 [0207.582] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c6f0 | out: hHeap=0x1f0000) returned 1 [0207.582] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c690 | out: hHeap=0x1f0000) returned 1 [0207.582] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c6a0 | out: hHeap=0x1f0000) returned 1 [0207.583] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b90 | out: hHeap=0x1f0000) returned 1 [0207.583] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x252370 | out: hHeap=0x1f0000) returned 1 [0207.586] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ee8 | out: hHeap=0x1f0000) returned 1 [0207.586] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206838 | out: hHeap=0x1f0000) returned 1 [0207.586] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffa0 | out: hHeap=0x1f0000) returned 1 [0207.586] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210078 | out: hHeap=0x1f0000) returned 1 [0207.586] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ff8 | out: hHeap=0x1f0000) returned 1 [0207.586] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25a8a8 | out: hHeap=0x1f0000) returned 1 [0207.586] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220748 | out: hHeap=0x1f0000) returned 1 [0207.586] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1ff058 | out: hHeap=0x1f0000) returned 1 [0207.586] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0207.587] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226d28 | out: hHeap=0x1f0000) returned 1 [0207.587] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2348f0 | out: hHeap=0x1f0000) returned 1 [0207.587] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0207.587] DeleteFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r32.dll")) returned 1 [0207.589] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b3e121, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b3e121, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb4b54300, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x127260, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="C2R64.dll", cAlternateFileName="")) returned 1 [0207.589] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260888 [0207.589] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212718 [0207.589] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0207.589] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212718 | out: hHeap=0x1f0000) returned 1 [0207.589] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0207.589] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0207.590] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r64.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0207.590] GetFileType (hFile=0x1d4) returned 0x1 [0207.590] CloseHandle (hObject=0x1d4) returned 1 [0207.591] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0207.591] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r64.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b3e121, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b3e121, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb4b54300, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x127260)) returned 1 [0207.591] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0207.591] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0207.591] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r64.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b3e121, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b3e121, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb4b54300, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x127260)) returned 1 [0207.591] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0207.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0207.592] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0207.592] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b64383, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b64383, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8ee04f00, ftLastWriteTime.dwHighDateTime=0x1d0d67f, nFileSizeHigh=0x0, nFileSizeLow=0x1028, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="C2RHeartbeatConfig.xml", cAlternateFileName="C2RHEA~1.XML")) returned 1 [0207.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0207.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211b68 [0207.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0207.592] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b68 | out: hHeap=0x1f0000) returned 1 [0207.592] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0207.592] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0207.593] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RHeartbeatConfig.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rheartbeatconfig.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0207.593] GetFileType (hFile=0x1d4) returned 0x1 [0207.594] CloseHandle (hObject=0x1d4) returned 1 [0207.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2627d0 [0207.594] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RHeartbeatConfig.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rheartbeatconfig.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b64383, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b64383, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8ee04f00, ftLastWriteTime.dwHighDateTime=0x1d0d67f, nFileSizeHigh=0x0, nFileSizeLow=0x1028)) returned 1 [0207.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2627d0 | out: hHeap=0x1f0000) returned 1 [0207.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x262c20 [0207.594] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RHeartbeatConfig.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rheartbeatconfig.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b64383, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b64383, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8ee04f00, ftLastWriteTime.dwHighDateTime=0x1d0d67f, nFileSizeHigh=0x0, nFileSizeLow=0x1028)) returned 1 [0207.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262c20 | out: hHeap=0x1f0000) returned 1 [0207.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x262940 [0207.595] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262940 | out: hHeap=0x1f0000) returned 1 [0207.595] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x808dbb6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x808dbb6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb3841600, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0xdc4b8, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="C2RUI.en-us.dll", cAlternateFileName="C2RUIE~1.DLL")) returned 1 [0207.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260518 [0207.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211948 [0207.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0207.595] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211948 | out: hHeap=0x1f0000) returned 1 [0207.595] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0207.595] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0207.596] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RUI.en-us.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rui.en-us.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0207.596] GetFileType (hFile=0x1d4) returned 0x1 [0207.597] CloseHandle (hObject=0x1d4) returned 1 [0207.597] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a4d0 [0207.597] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RUI.en-us.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rui.en-us.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x808dbb6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x808dbb6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb3841600, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0xdc4b8)) returned 1 [0207.597] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a4d0 | out: hHeap=0x1f0000) returned 1 [0207.597] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219f90 [0207.598] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RUI.en-us.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rui.en-us.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x808dbb6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x808dbb6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb3841600, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0xdc4b8)) returned 1 [0207.598] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219f90 | out: hHeap=0x1f0000) returned 1 [0207.598] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a4d0 [0207.598] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a4d0 | out: hHeap=0x1f0000) returned 1 [0207.598] GetLastError () returned 0x0 [0207.599] CryptAcquireContextA (in: phProv=0x1fde1b8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1fde1b8*=0x212250) returned 1 [0207.602] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2604f0 | out: pbBuffer=0x2604f0) returned 1 [0207.603] CryptReleaseContext (hProv=0x212250, dwFlags=0x0) returned 1 [0207.603] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0207.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x264f88 [0207.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2245b8 [0207.603] QueryPerformanceCounter (in: lpPerformanceCount=0x1fde14c | out: lpPerformanceCount=0x1fde14c*=36497191024) returned 1 [0207.603] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1fde18c | out: lpSystemTimeAsFileTime=0x1fde18c) [0207.603] QueryPerformanceCounter (in: lpPerformanceCount=0x1fde14c | out: lpPerformanceCount=0x1fde14c*=36497227707) returned 1 [0207.604] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1fde18c | out: lpSystemTimeAsFileTime=0x1fde18c) [0207.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x227ee8 [0207.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x26e7c8 [0207.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x223e10 [0207.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x220748 [0207.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffa0 [0207.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206838 [0207.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210078 [0207.604] GetLastError () returned 0x0 [0207.604] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RUI.en-us.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rui.en-us.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde058, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0207.605] GetFileType (hFile=0x1d4) returned 0x1 [0207.606] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c660 [0207.606] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c690 [0207.607] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RUI.en-us.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rui.en-us.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde088, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0207.607] GetFileType (hFile=0x1fc) returned 0x1 [0207.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ff0 [0207.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205150 [0207.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2627d0 [0207.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c6a0 [0207.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c6f0 [0207.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x38) returned 0x24e640 [0207.609] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RUI.en-us.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rui.en-us.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1fddfd4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0207.609] GetFileType (hFile=0x21c) returned 0x1 [0207.610] GetLastError () returned 0xb7 [0207.610] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RUI.en-us.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rui.en-us.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1fddfd4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0207.611] GetFileType (hFile=0x220) returned 0x1 [0207.611] GetLastError () returned 0xb7 [0207.612] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RUI.en-us.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rui.en-us.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x1fddfcc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0207.612] GetFileType (hFile=0x224) returned 0x1 [0207.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x247e18 [0207.612] ReadFile (in: hFile=0x224, lpBuffer=0x247e18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fddf28, lpOverlapped=0x0 | out: lpBuffer=0x247e18*, lpNumberOfBytesRead=0x1fddf28*=0x1000, lpOverlapped=0x0) returned 1 [0207.886] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24a9c8 [0207.886] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x289fb0 [0207.886] GetLastError () returned 0x0 [0208.374] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210000 [0208.375] GetLastError () returned 0x0 [0208.375] CloseHandle (hObject=0x1d4) returned 1 [0208.697] CloseHandle (hObject=0x1fc) returned 1 [0208.697] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c410 [0208.697] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c520 [0208.698] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RUI.en-us.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rui.en-us.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde088, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0208.710] GetFileType (hFile=0x1fc) returned 0x1 [0208.711] GetLastError () returned 0xb7 [0208.713] CloseHandle (hObject=0x1fc) returned 1 [0208.714] DeleteFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RUI.en-us.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rui.en-us.dll")) returned 0 [0208.714] GetLastError () returned 0x20 [0208.714] GetLastError () returned 0x20 [0208.714] CryptAcquireContextA (in: phProv=0x1fde1b8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1fde1b8*=0x211c78) returned 1 [0209.090] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x260928 | out: pbBuffer=0x260928) returned 1 [0209.090] CryptReleaseContext (hProv=0x211c78, dwFlags=0x0) returned 1 [0209.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0209.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260590 [0209.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260928 [0209.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2387d8 [0209.091] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0209.091] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0209.091] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387d8 | out: hHeap=0x1f0000) returned 1 [0209.091] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x264200 [0209.091] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff28 [0209.091] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x235de8 [0209.091] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260568 [0209.091] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2648e8 [0209.091] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205210 [0209.091] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235700 [0209.092] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260658 [0209.092] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x217038 [0209.092] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c4c0 [0209.092] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0209.092] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff70 [0209.092] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c4e0 [0209.092] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606f8 [0209.092] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffd0 [0209.092] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffd0 | out: hHeap=0x1f0000) returned 1 [0209.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606f8 | out: hHeap=0x1f0000) returned 1 [0209.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c4e0 | out: hHeap=0x1f0000) returned 1 [0209.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff70 | out: hHeap=0x1f0000) returned 1 [0209.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0209.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c4c0 | out: hHeap=0x1f0000) returned 1 [0209.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0209.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260658 | out: hHeap=0x1f0000) returned 1 [0209.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0209.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238a40 [0209.093] GetLastError () returned 0x0 [0209.094] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1fddd48 | out: lpSystemTimeAsFileTime=0x1fddd48) [0209.094] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x21c4c0 [0209.094] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0209.094] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205150 [0209.094] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205150 | out: hHeap=0x1f0000) returned 1 [0209.094] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0209.095] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260658 [0209.095] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205150 [0209.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205150 | out: hHeap=0x1f0000) returned 1 [0209.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260658 | out: hHeap=0x1f0000) returned 1 [0209.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c4c0 | out: hHeap=0x1f0000) returned 1 [0209.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0209.095] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x2387d8 [0209.095] GetLastError () returned 0x0 [0209.095] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RUI.en-us.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rui.en-us.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde0b8, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0209.096] GetFileType (hFile=0x210) returned 0x1 [0209.096] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x286f98 [0209.096] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1fde040 | out: lpNewFilePointer=0x0) returned 1 [0209.097] GetLastError () returned 0xb7 [0209.097] CloseHandle (hObject=0x210) returned 1 [0209.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c4e0 | out: hHeap=0x1f0000) returned 1 [0209.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c4c0 | out: hHeap=0x1f0000) returned 1 [0209.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0209.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2648e8 | out: hHeap=0x1f0000) returned 1 [0209.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0209.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205210 | out: hHeap=0x1f0000) returned 1 [0209.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235de8 | out: hHeap=0x1f0000) returned 1 [0209.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff28 | out: hHeap=0x1f0000) returned 1 [0209.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x264200 | out: hHeap=0x1f0000) returned 1 [0209.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223f28 | out: hHeap=0x1f0000) returned 1 [0209.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0209.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0209.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x266290 | out: hHeap=0x1f0000) returned 1 [0209.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2244a0 | out: hHeap=0x1f0000) returned 1 [0209.099] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0209.099] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c4f0 | out: hHeap=0x1f0000) returned 1 [0209.099] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0209.099] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0209.099] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c370 | out: hHeap=0x1f0000) returned 1 [0209.099] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0209.099] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0209.099] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c530 | out: hHeap=0x1f0000) returned 1 [0209.099] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b018 | out: hHeap=0x1f0000) returned 1 [0209.099] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0209.099] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235cb0 | out: hHeap=0x1f0000) returned 1 [0209.099] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234548 | out: hHeap=0x1f0000) returned 1 [0209.100] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608b0 | out: hHeap=0x1f0000) returned 1 [0209.100] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0209.100] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346b0 | out: hHeap=0x1f0000) returned 1 [0209.100] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c520 | out: hHeap=0x1f0000) returned 1 [0209.100] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c410 | out: hHeap=0x1f0000) returned 1 [0209.100] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x247e18 | out: hHeap=0x1f0000) returned 1 [0209.100] CloseHandle (hObject=0x224) returned 1 [0209.101] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c490 | out: hHeap=0x1f0000) returned 1 [0209.101] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c470 | out: hHeap=0x1f0000) returned 1 [0209.101] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226388 | out: hHeap=0x1f0000) returned 1 [0209.101] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24a9c8 | out: hHeap=0x1f0000) returned 1 [0209.101] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210000 | out: hHeap=0x1f0000) returned 1 [0209.101] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c30 | out: hHeap=0x1f0000) returned 1 [0209.101] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x289fb0 | out: hHeap=0x1f0000) returned 1 [0209.102] CloseHandle (hObject=0x220) returned 1 [0209.102] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c450 | out: hHeap=0x1f0000) returned 1 [0209.102] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c440 | out: hHeap=0x1f0000) returned 1 [0209.102] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261800 | out: hHeap=0x1f0000) returned 1 [0209.102] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ff0 | out: hHeap=0x1f0000) returned 1 [0209.103] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229528 | out: hHeap=0x1f0000) returned 1 [0209.103] CloseHandle (hObject=0x21c) returned 1 [0209.103] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c6f0 | out: hHeap=0x1f0000) returned 1 [0209.103] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c6a0 | out: hHeap=0x1f0000) returned 1 [0209.103] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2627d0 | out: hHeap=0x1f0000) returned 1 [0209.103] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c690 | out: hHeap=0x1f0000) returned 1 [0209.104] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c660 | out: hHeap=0x1f0000) returned 1 [0209.104] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5b0 | out: hHeap=0x1f0000) returned 1 [0209.104] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c650 | out: hHeap=0x1f0000) returned 1 [0209.104] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ee8 | out: hHeap=0x1f0000) returned 1 [0209.104] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x26e7c8 | out: hHeap=0x1f0000) returned 1 [0209.104] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223e10 | out: hHeap=0x1f0000) returned 1 [0209.104] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206838 | out: hHeap=0x1f0000) returned 1 [0209.104] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210078 | out: hHeap=0x1f0000) returned 1 [0209.104] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffa0 | out: hHeap=0x1f0000) returned 1 [0209.104] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220748 | out: hHeap=0x1f0000) returned 1 [0209.104] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x264f88 | out: hHeap=0x1f0000) returned 1 [0209.104] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2245b8 | out: hHeap=0x1f0000) returned 1 [0209.104] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0209.104] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a230 | out: hHeap=0x1f0000) returned 1 [0209.104] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226d28 | out: hHeap=0x1f0000) returned 1 [0209.104] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234ae8 | out: hHeap=0x1f0000) returned 1 [0209.104] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0209.104] DeleteFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RUI.en-us.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rui.en-us.dll")) returned 1 [0209.106] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b64383, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b64383, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x514a8, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="concrt140.dll", cAlternateFileName="CONCRT~1.DLL")) returned 1 [0209.106] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0209.106] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2124f8 [0209.106] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0209.106] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2124f8 | out: hHeap=0x1f0000) returned 1 [0209.106] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0209.106] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0209.107] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\concrt140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\concrt140.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0209.107] GetFileType (hFile=0x21c) returned 0x1 [0209.107] CloseHandle (hObject=0x21c) returned 1 [0209.107] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219ee8 [0209.108] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\concrt140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\concrt140.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b64383, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b64383, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x514a8)) returned 1 [0209.108] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219ee8 | out: hHeap=0x1f0000) returned 1 [0209.108] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a380 [0209.108] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\concrt140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\concrt140.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b64383, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b64383, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x514a8)) returned 1 [0209.108] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a380 | out: hHeap=0x1f0000) returned 1 [0209.108] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a968 [0209.108] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a968 | out: hHeap=0x1f0000) returned 1 [0209.108] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b64383, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b64383, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbd783a00, ftLastWriteTime.dwHighDateTime=0x1d0d7e5, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="i640.hash", cAlternateFileName="I640~1.HAS")) returned 1 [0209.108] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260888 [0209.108] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211e10 [0209.108] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0209.109] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e10 | out: hHeap=0x1f0000) returned 1 [0209.109] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0209.109] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0209.109] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i640.hash" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\i640.hash"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0209.109] GetFileType (hFile=0x21c) returned 0x1 [0209.109] CloseHandle (hObject=0x21c) returned 1 [0209.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0209.110] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i640.hash" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\i640.hash"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b64383, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b64383, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbd783a00, ftLastWriteTime.dwHighDateTime=0x1d0d7e5, nFileSizeHigh=0x0, nFileSizeLow=0x66)) returned 1 [0209.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0209.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0209.110] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i640.hash" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\i640.hash"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b64383, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b64383, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbd783a00, ftLastWriteTime.dwHighDateTime=0x1d0d7e5, nFileSizeHigh=0x0, nFileSizeLow=0x66)) returned 1 [0209.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0209.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0209.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0209.111] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x808dbb6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x808dbb6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbc470d00, ftLastWriteTime.dwHighDateTime=0x1d0d7e5, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="i641033.hash", cAlternateFileName="I64103~1.HAS")) returned 1 [0209.111] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0209.111] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0209.111] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0209.111] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0209.111] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0209.111] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0209.111] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i641033.hash" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\i641033.hash"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0209.111] GetFileType (hFile=0x21c) returned 0x1 [0209.112] CloseHandle (hObject=0x21c) returned 1 [0209.112] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0209.112] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i641033.hash" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\i641033.hash"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x808dbb6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x808dbb6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbc470d00, ftLastWriteTime.dwHighDateTime=0x1d0d7e5, nFileSizeHigh=0x0, nFileSizeLow=0x66)) returned 1 [0209.112] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0209.112] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0209.112] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i641033.hash" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\i641033.hash"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x808dbb6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x808dbb6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbc470d00, ftLastWriteTime.dwHighDateTime=0x1d0d7e5, nFileSizeHigh=0x0, nFileSizeLow=0x66)) returned 1 [0209.112] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0209.112] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0209.113] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0209.113] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b64383, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b64383, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbe3eab00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x10ae80, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="IntegratedOffice.exe", cAlternateFileName="INTEGR~1.EXE")) returned 1 [0209.113] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0209.113] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2120b8 [0209.113] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0209.113] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2120b8 | out: hHeap=0x1f0000) returned 1 [0209.113] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0209.113] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0209.113] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\IntegratedOffice.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\integratedoffice.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0209.114] GetFileType (hFile=0x21c) returned 0x1 [0209.114] CloseHandle (hObject=0x21c) returned 1 [0209.114] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a038 [0209.114] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\IntegratedOffice.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\integratedoffice.exe"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b64383, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b64383, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbe3eab00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x10ae80)) returned 1 [0209.114] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a038 | out: hHeap=0x1f0000) returned 1 [0209.114] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a968 [0209.114] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\IntegratedOffice.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\integratedoffice.exe"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b64383, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b64383, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbe3eab00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x10ae80)) returned 1 [0209.114] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a968 | out: hHeap=0x1f0000) returned 1 [0209.115] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219d98 [0209.115] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219d98 | out: hHeap=0x1f0000) returned 1 [0209.115] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b8a5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b8a5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xa2e72000, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x578d8, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="MavInject32.exe", cAlternateFileName="MAVINJ~1.EXE")) returned 1 [0209.115] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260888 [0209.115] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0209.115] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0209.115] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0209.115] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0209.115] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0209.115] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\MavInject32.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mavinject32.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0209.116] GetFileType (hFile=0x21c) returned 0x1 [0209.116] CloseHandle (hObject=0x21c) returned 1 [0209.116] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a4d0 [0209.116] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\MavInject32.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mavinject32.exe"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b8a5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b8a5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xa2e72000, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x578d8)) returned 1 [0209.116] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a4d0 | out: hHeap=0x1f0000) returned 1 [0209.116] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21aa10 [0209.116] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\MavInject32.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mavinject32.exe"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b8a5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b8a5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xa2e72000, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x578d8)) returned 1 [0209.116] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21aa10 | out: hHeap=0x1f0000) returned 1 [0209.117] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a4d0 [0209.117] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a4d0 | out: hHeap=0x1f0000) returned 1 [0209.117] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b8a5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b8a5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8745c00, ftLastWriteTime.dwHighDateTime=0x1d0d7aa, nFileSizeHigh=0x0, nFileSizeLow=0x2ffa60, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="mso20win32client.dll", cAlternateFileName="MSO20W~1.DLL")) returned 1 [0209.117] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0209.117] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211ae0 [0209.117] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0209.117] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211ae0 | out: hHeap=0x1f0000) returned 1 [0209.117] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0209.117] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0209.118] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso20win32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso20win32client.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0209.118] GetLastError () returned 0x20 [0209.118] GetLastError () returned 0x20 [0209.118] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80bb0837, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80bb0837, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xad6b600, ftLastWriteTime.dwHighDateTime=0x1d0d7aa, nFileSizeHigh=0x0, nFileSizeLow=0x475e60, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="mso30win32client.dll", cAlternateFileName="MSO30W~1.DLL")) returned 1 [0209.118] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0209.118] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212250 [0209.118] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0209.119] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212250 | out: hHeap=0x1f0000) returned 1 [0209.119] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0209.119] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0209.119] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso30win32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso30win32client.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0209.119] GetLastError () returned 0x20 [0209.119] GetLastError () returned 0x20 [0209.119] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80bfccf1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80bfccf1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb7179d00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x307ac0, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="mso40uires.dll", cAlternateFileName="MSO40U~1.DLL")) returned 1 [0209.119] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260658 [0209.120] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0209.120] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0209.120] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0209.120] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0209.120] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260658 | out: hHeap=0x1f0000) returned 1 [0209.120] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uires.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso40uires.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0209.120] GetLastError () returned 0x20 [0209.120] GetLastError () returned 0x20 [0209.120] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80c22f4a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80c22f4a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x10cc9700, ftLastWriteTime.dwHighDateTime=0x1d0d7aa, nFileSizeHigh=0x0, nFileSizeLow=0x8e6060, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="mso40uiwin32client.dll", cAlternateFileName="MSO40U~2.DLL")) returned 1 [0209.121] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0209.121] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0209.121] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0209.121] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0209.121] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0209.121] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0209.121] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uiwin32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso40uiwin32client.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0209.122] GetLastError () returned 0x20 [0209.122] GetLastError () returned 0x20 [0209.122] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x808dbb6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x808dbb6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x11fdc400, ftLastWriteTime.dwHighDateTime=0x1d0d7aa, nFileSizeHigh=0x0, nFileSizeLow=0xee60, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="msointl30.en-us.dll", cAlternateFileName="MSOINT~1.DLL")) returned 1 [0209.122] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0209.122] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2129c0 [0209.122] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0209.122] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2129c0 | out: hHeap=0x1f0000) returned 1 [0209.122] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0209.122] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0209.123] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msointl30.en-us.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msointl30.en-us.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0209.123] GetFileType (hFile=0x21c) returned 0x1 [0209.123] CloseHandle (hObject=0x21c) returned 1 [0209.123] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a6c8 [0209.124] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msointl30.en-us.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msointl30.en-us.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x808dbb6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x808dbb6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x11fdc400, ftLastWriteTime.dwHighDateTime=0x1d0d7aa, nFileSizeHigh=0x0, nFileSizeLow=0xee60)) returned 1 [0209.124] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a6c8 | out: hHeap=0x1f0000) returned 1 [0209.124] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219e40 [0209.124] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msointl30.en-us.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msointl30.en-us.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x808dbb6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x808dbb6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x11fdc400, ftLastWriteTime.dwHighDateTime=0x1d0d7aa, nFileSizeHigh=0x0, nFileSizeLow=0xee60)) returned 1 [0209.124] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219e40 | out: hHeap=0x1f0000) returned 1 [0209.124] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a8c0 [0209.124] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a8c0 | out: hHeap=0x1f0000) returned 1 [0209.124] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80c9565a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80c9565a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1909ea00, ftLastWriteTime.dwHighDateTime=0x1d098bf, nFileSizeHigh=0x0, nFileSizeLow=0xa12a8, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="msvcp120.dll", cAlternateFileName="")) returned 1 [0209.124] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608b0 [0209.124] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2129c0 [0209.124] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0209.124] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2129c0 | out: hHeap=0x1f0000) returned 1 [0209.124] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0209.124] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608b0 | out: hHeap=0x1f0000) returned 1 [0209.125] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp120.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msvcp120.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0209.125] GetLastError () returned 0x20 [0209.125] GetLastError () returned 0x20 [0209.125] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80cbb8b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80cbb8b2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x9b0a0, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="msvcp140.dll", cAlternateFileName="")) returned 1 [0209.125] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260658 [0209.125] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2128b0 [0209.125] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0209.125] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2128b0 | out: hHeap=0x1f0000) returned 1 [0209.125] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0209.126] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260658 | out: hHeap=0x1f0000) returned 1 [0209.126] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msvcp140.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0209.126] GetLastError () returned 0x20 [0209.126] GetLastError () returned 0x20 [0209.126] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80cbb8b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80cbb8b2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1b6c4400, ftLastWriteTime.dwHighDateTime=0x1d098bf, nFileSizeHigh=0x0, nFileSizeLow=0xeb2a8, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="msvcr120.dll", cAlternateFileName="")) returned 1 [0209.126] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260658 [0209.126] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211c78 [0209.126] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0209.126] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211c78 | out: hHeap=0x1f0000) returned 1 [0209.127] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0209.127] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260658 | out: hHeap=0x1f0000) returned 1 [0209.127] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcr120.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msvcr120.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0209.127] GetLastError () returned 0x20 [0209.127] GetLastError () returned 0x20 [0209.127] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80cbb8b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80cbb8b2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb7179d00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x5b1068, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="OfficeC2RClient.exe", cAlternateFileName="OFFICE~1.EXE")) returned 1 [0209.127] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0209.127] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211e10 [0209.127] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0209.128] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e10 | out: hHeap=0x1f0000) returned 1 [0209.128] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0209.128] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0209.128] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RClient.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rclient.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0209.128] GetFileType (hFile=0x21c) returned 0x1 [0209.128] CloseHandle (hObject=0x21c) returned 1 [0209.129] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a188 [0209.129] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RClient.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rclient.exe"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80cbb8b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80cbb8b2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb7179d00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x5b1068)) returned 1 [0209.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a188 | out: hHeap=0x1f0000) returned 1 [0209.129] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a230 [0209.129] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RClient.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rclient.exe"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80cbb8b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80cbb8b2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb7179d00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x5b1068)) returned 1 [0209.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a230 | out: hHeap=0x1f0000) returned 1 [0209.129] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219f90 [0209.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219f90 | out: hHeap=0x1f0000) returned 1 [0209.129] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d07d85, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d07d85, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb7179d00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0xf34d8, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="OfficeC2RCom.dll", cAlternateFileName="OFFICE~1.DLL")) returned 1 [0209.129] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0209.129] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212360 [0209.129] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0209.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212360 | out: hHeap=0x1f0000) returned 1 [0209.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0209.130] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0209.130] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RCom.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rcom.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0209.130] GetFileType (hFile=0x21c) returned 0x1 [0209.130] CloseHandle (hObject=0x21c) returned 1 [0209.131] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219ee8 [0209.131] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RCom.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rcom.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d07d85, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d07d85, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb7179d00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0xf34d8)) returned 1 [0209.131] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219ee8 | out: hHeap=0x1f0000) returned 1 [0209.131] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a620 [0209.131] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RCom.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rcom.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d07d85, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d07d85, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb7179d00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0xf34d8)) returned 1 [0209.131] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a620 | out: hHeap=0x1f0000) returned 1 [0209.131] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a6c8 [0209.131] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a6c8 | out: hHeap=0x1f0000) returned 1 [0209.132] GetLastError () returned 0x0 [0209.132] CryptAcquireContextA (in: phProv=0x1fde1b8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1fde1b8*=0x2122d8) returned 1 [0209.489] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x260590 | out: pbBuffer=0x260590) returned 1 [0209.489] CryptReleaseContext (hProv=0x2122d8, dwFlags=0x0) returned 1 [0209.489] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0209.489] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x26d4c0 [0209.489] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2244a0 [0209.490] QueryPerformanceCounter (in: lpPerformanceCount=0x1fde14c | out: lpPerformanceCount=0x1fde14c*=36685846801) returned 1 [0209.490] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1fde18c | out: lpSystemTimeAsFileTime=0x1fde18c) [0209.490] QueryPerformanceCounter (in: lpPerformanceCount=0x1fde14c | out: lpPerformanceCount=0x1fde14c*=36685872155) returned 1 [0209.490] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1fde18c | out: lpSystemTimeAsFileTime=0x1fde18c) [0209.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x21cf00 [0209.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x267598 [0209.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x224900 [0209.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x22b018 [0209.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffb8 [0209.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206808 [0209.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffd0 [0209.491] GetLastError () returned 0x0 [0209.491] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RCom.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rcom.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde058, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0209.492] GetFileType (hFile=0x21c) returned 0x1 [0209.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c6a0 [0209.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c4e0 [0209.493] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RCom.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rcom.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde088, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0209.494] GetFileType (hFile=0x1c0) returned 0x1 [0209.494] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204fb0 [0209.494] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205330 [0209.494] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2625a8 [0209.494] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c490 [0209.494] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c4b0 [0209.495] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RCom.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rcom.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1fddfd4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0209.495] GetFileType (hFile=0x1f4) returned 0x1 [0209.495] GetLastError () returned 0xb7 [0209.495] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RCom.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rcom.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1fddfd4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0209.495] GetFileType (hFile=0x1e0) returned 0x1 [0209.496] GetLastError () returned 0xb7 [0209.496] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RCom.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rcom.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x1fddfcc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0209.496] GetFileType (hFile=0x204) returned 0x1 [0209.496] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28cfc8 [0209.496] ReadFile (in: hFile=0x204, lpBuffer=0x28cfc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fddf28, lpOverlapped=0x0 | out: lpBuffer=0x28cfc8*, lpNumberOfBytesRead=0x1fddf28*=0x1000, lpOverlapped=0x0) returned 1 [0209.499] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24a9c8 [0209.499] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28dfd0 [0209.500] GetLastError () returned 0x0 [0209.843] CloseHandle (hObject=0x21c) [0209.843] CloseHandle (hObject=0x21c) returned 1 [0209.843] CloseHandle (hObject=0x1c0) returned 1 [0209.844] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389f0 [0209.844] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ad0 [0209.844] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RCom.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rcom.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde088, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0209.856] GetFileType (hFile=0x1c0) returned 0x1 [0209.856] GetLastError () returned 0xb7 [0209.858] CloseHandle (hObject=0x1c0) returned 1 [0209.858] DeleteFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RCom.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rcom.dll")) returned 0 [0209.858] GetLastError () returned 0x20 [0209.858] GetLastError () returned 0x20 [0209.859] CryptAcquireContextA (in: phProv=0x1fde1b8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1fde1b8*=0x2121c8) returned 1 [0209.866] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x260658 | out: pbBuffer=0x260658) returned 1 [0209.866] CryptReleaseContext (hProv=0x2121c8, dwFlags=0x0) returned 1 [0209.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260658 | out: hHeap=0x1f0000) returned 1 [0209.867] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260658 [0209.867] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2604c8 [0209.867] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x234ec8 [0209.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260658 | out: hHeap=0x1f0000) returned 1 [0210.212] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0210.212] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234ec8 | out: hHeap=0x1f0000) returned 1 [0210.212] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x263ee8 [0210.212] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff70 [0210.212] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x235de8 [0210.212] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2606f8 [0210.212] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x237038 [0210.212] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205210 [0210.212] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2357d0 [0210.212] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2606a8 [0210.212] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x236e28 [0210.212] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a60 [0210.212] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0210.213] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffe8 [0210.213] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a30 [0210.213] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0210.213] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210258 [0210.213] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0210.213] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0210.213] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a30 | out: hHeap=0x1f0000) returned 1 [0210.213] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffe8 | out: hHeap=0x1f0000) returned 1 [0210.213] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0210.213] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a60 | out: hHeap=0x1f0000) returned 1 [0210.213] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236e28 | out: hHeap=0x1f0000) returned 1 [0210.213] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0210.213] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2357d0 | out: hHeap=0x1f0000) returned 1 [0210.213] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x234f00 [0210.213] GetLastError () returned 0x0 [0210.214] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1fddd48 | out: lpSystemTimeAsFileTime=0x1fddd48) [0210.214] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238a30 [0210.214] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605e0 [0210.214] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205290 [0210.214] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205290 | out: hHeap=0x1f0000) returned 1 [0210.214] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605e0 | out: hHeap=0x1f0000) returned 1 [0210.214] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260658 [0210.214] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205290 [0210.214] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205290 | out: hHeap=0x1f0000) returned 1 [0210.214] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260658 | out: hHeap=0x1f0000) returned 1 [0210.214] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a30 | out: hHeap=0x1f0000) returned 1 [0210.214] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0210.214] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x234d40 [0210.214] GetLastError () returned 0x0 [0210.215] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RCom.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rcom.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde0b8, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0210.215] GetFileType (hFile=0x210) returned 0x1 [0210.215] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x290fe8 [0210.215] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1fde040 | out: lpNewFilePointer=0x0) returned 1 [0210.215] GetLastError () returned 0xb7 [0210.216] CloseHandle (hObject=0x210) returned 1 [0210.216] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b00 | out: hHeap=0x1f0000) returned 1 [0210.216] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b70 | out: hHeap=0x1f0000) returned 1 [0210.216] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237a88 | out: hHeap=0x1f0000) returned 1 [0210.216] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237038 | out: hHeap=0x1f0000) returned 1 [0210.216] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606f8 | out: hHeap=0x1f0000) returned 1 [0210.216] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205210 | out: hHeap=0x1f0000) returned 1 [0210.216] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235de8 | out: hHeap=0x1f0000) returned 1 [0210.216] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff70 | out: hHeap=0x1f0000) returned 1 [0210.216] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263ee8 | out: hHeap=0x1f0000) returned 1 [0210.216] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224040 | out: hHeap=0x1f0000) returned 1 [0210.216] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604c8 | out: hHeap=0x1f0000) returned 1 [0210.216] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0210.216] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x269ba8 | out: hHeap=0x1f0000) returned 1 [0210.216] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2246d0 | out: hHeap=0x1f0000) returned 1 [0210.217] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0210.217] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b90 | out: hHeap=0x1f0000) returned 1 [0210.217] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210090 | out: hHeap=0x1f0000) returned 1 [0210.217] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0210.217] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b50 | out: hHeap=0x1f0000) returned 1 [0210.217] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffa0 | out: hHeap=0x1f0000) returned 1 [0210.217] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0210.217] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a00 | out: hHeap=0x1f0000) returned 1 [0210.217] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237248 | out: hHeap=0x1f0000) returned 1 [0210.217] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0210.217] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235c48 | out: hHeap=0x1f0000) returned 1 [0210.217] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234740 | out: hHeap=0x1f0000) returned 1 [0210.217] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0210.217] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0210.217] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234980 | out: hHeap=0x1f0000) returned 1 [0210.218] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ad0 | out: hHeap=0x1f0000) returned 1 [0210.218] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389f0 | out: hHeap=0x1f0000) returned 1 [0210.218] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28cfc8 | out: hHeap=0x1f0000) returned 1 [0210.218] CloseHandle (hObject=0x204) returned 1 [0210.218] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c420 | out: hHeap=0x1f0000) returned 1 [0210.218] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c530 | out: hHeap=0x1f0000) returned 1 [0210.218] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x264e20 | out: hHeap=0x1f0000) returned 1 [0210.218] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24a9c8 | out: hHeap=0x1f0000) returned 1 [0210.218] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff28 | out: hHeap=0x1f0000) returned 1 [0210.219] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d90 | out: hHeap=0x1f0000) returned 1 [0210.219] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28dfd0 | out: hHeap=0x1f0000) returned 1 [0210.219] CloseHandle (hObject=0x1e0) returned 1 [0210.219] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c370 | out: hHeap=0x1f0000) returned 1 [0210.219] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c410 | out: hHeap=0x1f0000) returned 1 [0210.219] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2620a0 | out: hHeap=0x1f0000) returned 1 [0210.219] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205330 | out: hHeap=0x1f0000) returned 1 [0210.219] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0210.220] CloseHandle (hObject=0x1f4) returned 1 [0210.220] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c4b0 | out: hHeap=0x1f0000) returned 1 [0210.220] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c490 | out: hHeap=0x1f0000) returned 1 [0210.220] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2625a8 | out: hHeap=0x1f0000) returned 1 [0210.220] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c4e0 | out: hHeap=0x1f0000) returned 1 [0210.220] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c6a0 | out: hHeap=0x1f0000) returned 1 [0210.220] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c690 | out: hHeap=0x1f0000) returned 1 [0210.220] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5b0 | out: hHeap=0x1f0000) returned 1 [0210.220] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0210.220] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x267598 | out: hHeap=0x1f0000) returned 1 [0210.220] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224900 | out: hHeap=0x1f0000) returned 1 [0210.221] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206808 | out: hHeap=0x1f0000) returned 1 [0210.221] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffd0 | out: hHeap=0x1f0000) returned 1 [0210.221] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffb8 | out: hHeap=0x1f0000) returned 1 [0210.221] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b018 | out: hHeap=0x1f0000) returned 1 [0210.221] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x26d4c0 | out: hHeap=0x1f0000) returned 1 [0210.221] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2244a0 | out: hHeap=0x1f0000) returned 1 [0210.221] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0210.221] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ab60 | out: hHeap=0x1f0000) returned 1 [0210.221] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226d28 | out: hHeap=0x1f0000) returned 1 [0210.221] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234a58 | out: hHeap=0x1f0000) returned 1 [0210.221] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0210.221] DeleteFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RCom.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rcom.dll")) returned 1 [0210.223] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d07d85, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d07d85, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbd0d7e00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x2a5e58, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="OfficeClickToRun.exe", cAlternateFileName="OFFICE~2.EXE")) returned 1 [0210.223] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x234de8 [0210.224] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2120b8 [0210.224] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0210.224] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2120b8 | out: hHeap=0x1f0000) returned 1 [0210.224] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0210.224] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234de8 | out: hHeap=0x1f0000) returned 1 [0210.224] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeClickToRun.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeclicktorun.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0210.224] GetLastError () returned 0x20 [0210.225] GetLastError () returned 0x20 [0210.225] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d542e1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d542e1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x3f141b52, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x12ae, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="OfficeUpdateSchedule.xml", cAlternateFileName="OFFICE~1.XML")) returned 1 [0210.225] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234818 [0210.225] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0210.225] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0210.225] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0210.225] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0210.225] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234818 | out: hHeap=0x1f0000) returned 1 [0210.225] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeUpdateSchedule.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeupdateschedule.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0210.226] GetFileType (hFile=0x1f4) returned 0x1 [0210.226] CloseHandle (hObject=0x1f4) returned 1 [0210.226] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x262210 [0210.226] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeUpdateSchedule.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeupdateschedule.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d542e1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d542e1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x3f141b52, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x12ae)) returned 1 [0210.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262210 | out: hHeap=0x1f0000) returned 1 [0210.227] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2629f8 [0210.227] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeUpdateSchedule.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeupdateschedule.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d542e1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d542e1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x3f141b52, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x12ae)) returned 1 [0210.228] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2629f8 | out: hHeap=0x1f0000) returned 1 [0210.228] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x262158 [0210.228] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262158 | out: hHeap=0x1f0000) returned 1 [0210.228] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d542e1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d542e1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x3fa7ec8f, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x1162, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="ServiceWatcherSchedule.xml", cAlternateFileName="SERVIC~1.XML")) returned 1 [0210.228] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234ae8 [0210.228] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212938 [0210.228] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0210.228] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212938 | out: hHeap=0x1f0000) returned 1 [0210.228] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0210.228] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234ae8 | out: hHeap=0x1f0000) returned 1 [0210.229] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ServiceWatcherSchedule.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\servicewatcherschedule.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0210.229] GetFileType (hFile=0x1f4) returned 0x1 [0210.229] CloseHandle (hObject=0x1f4) returned 1 [0210.230] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261800 [0210.230] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ServiceWatcherSchedule.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\servicewatcherschedule.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d542e1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d542e1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x3fa7ec8f, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x1162)) returned 1 [0210.230] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261800 | out: hHeap=0x1f0000) returned 1 [0210.230] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x262d90 [0210.230] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ServiceWatcherSchedule.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\servicewatcherschedule.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d542e1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d542e1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x3fa7ec8f, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x1162)) returned 1 [0210.230] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262d90 | out: hHeap=0x1f0000) returned 1 [0210.230] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261a28 [0210.230] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261a28 | out: hHeap=0x1f0000) returned 1 [0210.230] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d542e1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d542e1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbe3eab00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x101458, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="StreamServer.dll", cAlternateFileName="STREAM~1.DLL")) returned 1 [0210.230] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x234e20 [0210.231] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211ae0 [0210.231] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0210.231] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211ae0 | out: hHeap=0x1f0000) returned 1 [0210.231] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0210.231] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234e20 | out: hHeap=0x1f0000) returned 1 [0210.231] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\StreamServer.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\streamserver.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0210.232] GetLastError () returned 0x20 [0210.232] GetLastError () returned 0x20 [0210.232] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d542e1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d542e1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0xefec0, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="ucrtbase.dll", cAlternateFileName="")) returned 1 [0210.232] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0210.232] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212828 [0210.232] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0210.232] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212828 | out: hHeap=0x1f0000) returned 1 [0210.232] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0210.233] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0210.233] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ucrtbase.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\ucrtbase.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0210.234] GetFileType (hFile=0x1f4) returned 0x1 [0210.234] CloseHandle (hObject=0x1f4) returned 1 [0210.234] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0210.234] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ucrtbase.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\ucrtbase.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d542e1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d542e1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0xefec0)) returned 1 [0210.235] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0210.235] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0210.235] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ucrtbase.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\ucrtbase.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d542e1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d542e1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0xefec0)) returned 1 [0210.235] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0210.235] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0210.235] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0210.235] GetLastError () returned 0x0 [0210.235] CryptAcquireContextA (in: phProv=0x1fde1b8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1fde1b8*=0x2122d8) returned 1 [0210.460] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x260770 | out: pbBuffer=0x260770) returned 1 [0210.460] CryptReleaseContext (hProv=0x2122d8, dwFlags=0x0) returned 1 [0210.460] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0210.460] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x26c1b8 [0210.460] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x223cf8 [0210.460] QueryPerformanceCounter (in: lpPerformanceCount=0x1fde14c | out: lpPerformanceCount=0x1fde14c*=36782904930) returned 1 [0210.460] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1fde18c | out: lpSystemTimeAsFileTime=0x1fde18c) [0210.460] QueryPerformanceCounter (in: lpPerformanceCount=0x1fde14c | out: lpPerformanceCount=0x1fde14c*=36782927382) returned 1 [0210.460] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1fde18c | out: lpSystemTimeAsFileTime=0x1fde18c) [0210.461] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x234c28 [0210.461] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x26d4c0 [0210.461] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2246d0 [0210.461] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x229528 [0210.461] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff70 [0210.461] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206868 [0210.461] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffa0 [0210.461] GetLastError () returned 0x0 [0210.461] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ucrtbase.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\ucrtbase.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde058, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x234 [0210.594] GetFileType (hFile=0x234) returned 0x1 [0210.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a90 [0210.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b20 [0210.595] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ucrtbase.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\ucrtbase.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde088, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x238 [0210.596] GetFileType (hFile=0x238) returned 0x1 [0210.596] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204fb0 [0210.596] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205210 [0210.596] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261ae0 [0210.596] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b70 [0210.597] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b90 [0210.597] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ucrtbase.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\ucrtbase.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1fddfd4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0210.597] GetFileType (hFile=0x23c) returned 0x1 [0210.598] GetLastError () returned 0xb7 [0210.598] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ucrtbase.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\ucrtbase.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1fddfd4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0210.598] GetFileType (hFile=0x230) returned 0x1 [0210.598] GetLastError () returned 0xb7 [0210.598] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ucrtbase.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\ucrtbase.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x1fddfcc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0210.599] GetFileType (hFile=0x22c) returned 0x1 [0210.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28dfd0 [0210.599] ReadFile (in: hFile=0x22c, lpBuffer=0x28dfd0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fddf28, lpOverlapped=0x0 | out: lpBuffer=0x28dfd0*, lpNumberOfBytesRead=0x1fddf28*=0x1000, lpOverlapped=0x0) returned 1 [0211.123] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24ca08 [0211.124] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28afb8 [0211.124] GetLastError () returned 0x0 [0212.394] CloseHandle (hObject=0x234) returned 1 [0212.826] CloseHandle (hObject=0x238) returned 1 [0212.826] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238930 [0212.826] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387e0 [0212.920] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ucrtbase.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\ucrtbase.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde088, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0212.933] GetFileType (hFile=0x1e0) returned 0x1 [0212.933] GetLastError () returned 0xb7 [0212.934] CloseHandle (hObject=0x1e0) returned 1 [0212.935] DeleteFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ucrtbase.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\ucrtbase.dll")) returned 0 [0212.935] GetLastError () returned 0x20 [0212.935] GetLastError () returned 0x20 [0212.935] CryptAcquireContextA (in: phProv=0x1fde1b8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1fde1b8*=0x211d88) returned 1 [0212.942] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2608d8 | out: pbBuffer=0x2608d8) returned 1 [0212.942] CryptReleaseContext (hProv=0x211d88, dwFlags=0x0) returned 1 [0212.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0212.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260928 [0212.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2605e0 [0212.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x234d08 [0212.943] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0212.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0212.943] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234d08 | out: hHeap=0x1f0000) returned 1 [0212.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2640f8 [0212.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101b0 [0212.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x235be0 [0212.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260770 [0212.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x236d20 [0212.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c50 [0212.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235c48 [0212.944] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2606d0 [0212.944] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x237878 [0212.944] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238890 [0212.944] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605b8 [0212.944] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0212.944] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238960 [0212.944] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0212.944] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0212.944] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0212.944] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0212.944] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238960 | out: hHeap=0x1f0000) returned 1 [0212.944] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0212.944] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0212.944] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238890 | out: hHeap=0x1f0000) returned 1 [0212.945] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237878 | out: hHeap=0x1f0000) returned 1 [0212.945] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0212.945] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235c48 | out: hHeap=0x1f0000) returned 1 [0212.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x234cd0 [0212.945] GetLastError () returned 0x0 [0212.945] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1fddd48 | out: lpSystemTimeAsFileTime=0x1fddd48) [0212.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238840 [0212.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0212.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bb0 [0212.945] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bb0 | out: hHeap=0x1f0000) returned 1 [0212.945] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0212.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0212.946] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e30 [0212.946] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e30 | out: hHeap=0x1f0000) returned 1 [0212.946] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0212.946] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238840 | out: hHeap=0x1f0000) returned 1 [0212.946] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0212.946] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x234e20 [0212.946] GetLastError () returned 0x0 [0212.946] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ucrtbase.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\ucrtbase.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde0b8, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0212.946] GetFileType (hFile=0x1e0) returned 0x1 [0212.947] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x288fa8 [0212.947] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1fde040 | out: lpNewFilePointer=0x0) returned 1 [0212.947] GetLastError () returned 0xb7 [0212.947] CloseHandle (hObject=0x1e0) returned 1 [0212.948] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238810 | out: hHeap=0x1f0000) returned 1 [0212.948] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238860 | out: hHeap=0x1f0000) returned 1 [0212.948] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237248 | out: hHeap=0x1f0000) returned 1 [0212.948] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236d20 | out: hHeap=0x1f0000) returned 1 [0212.948] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0212.948] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c50 | out: hHeap=0x1f0000) returned 1 [0212.948] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235be0 | out: hHeap=0x1f0000) returned 1 [0212.948] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0212.948] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2640f8 | out: hHeap=0x1f0000) returned 1 [0212.948] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224040 | out: hHeap=0x1f0000) returned 1 [0212.948] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605e0 | out: hHeap=0x1f0000) returned 1 [0212.948] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0212.948] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x266290 | out: hHeap=0x1f0000) returned 1 [0212.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223f28 | out: hHeap=0x1f0000) returned 1 [0212.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234bb8 | out: hHeap=0x1f0000) returned 1 [0212.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238880 | out: hHeap=0x1f0000) returned 1 [0212.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0212.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0212.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238980 | out: hHeap=0x1f0000) returned 1 [0212.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210240 | out: hHeap=0x1f0000) returned 1 [0212.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0212.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388e0 | out: hHeap=0x1f0000) returned 1 [0212.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236f30 | out: hHeap=0x1f0000) returned 1 [0212.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606f8 | out: hHeap=0x1f0000) returned 1 [0212.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236190 | out: hHeap=0x1f0000) returned 1 [0212.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346b0 | out: hHeap=0x1f0000) returned 1 [0212.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604c8 | out: hHeap=0x1f0000) returned 1 [0212.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0212.950] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234740 | out: hHeap=0x1f0000) returned 1 [0212.950] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387e0 | out: hHeap=0x1f0000) returned 1 [0212.950] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238930 | out: hHeap=0x1f0000) returned 1 [0212.950] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28dfd0 | out: hHeap=0x1f0000) returned 1 [0212.950] CloseHandle (hObject=0x22c) returned 1 [0212.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b40 | out: hHeap=0x1f0000) returned 1 [0212.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b30 | out: hHeap=0x1f0000) returned 1 [0212.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a74e0 | out: hHeap=0x1f0000) returned 1 [0212.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24ca08 | out: hHeap=0x1f0000) returned 1 [0212.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffd0 | out: hHeap=0x1f0000) returned 1 [0212.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205210 | out: hHeap=0x1f0000) returned 1 [0212.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28afb8 | out: hHeap=0x1f0000) returned 1 [0212.951] CloseHandle (hObject=0x230) returned 1 [0212.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a30 | out: hHeap=0x1f0000) returned 1 [0212.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a00 | out: hHeap=0x1f0000) returned 1 [0212.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262158 | out: hHeap=0x1f0000) returned 1 [0212.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205330 | out: hHeap=0x1f0000) returned 1 [0212.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220b38 | out: hHeap=0x1f0000) returned 1 [0212.952] CloseHandle (hObject=0x23c) returned 1 [0212.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b90 | out: hHeap=0x1f0000) returned 1 [0212.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b70 | out: hHeap=0x1f0000) returned 1 [0212.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261ae0 | out: hHeap=0x1f0000) returned 1 [0212.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b20 | out: hHeap=0x1f0000) returned 1 [0212.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a90 | out: hHeap=0x1f0000) returned 1 [0212.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b80 | out: hHeap=0x1f0000) returned 1 [0212.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ad0 | out: hHeap=0x1f0000) returned 1 [0212.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237dd0 | out: hHeap=0x1f0000) returned 1 [0212.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x26d4c0 | out: hHeap=0x1f0000) returned 1 [0212.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2246d0 | out: hHeap=0x1f0000) returned 1 [0212.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206868 | out: hHeap=0x1f0000) returned 1 [0212.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffa0 | out: hHeap=0x1f0000) returned 1 [0212.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff70 | out: hHeap=0x1f0000) returned 1 [0212.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229528 | out: hHeap=0x1f0000) returned 1 [0212.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x26c1b8 | out: hHeap=0x1f0000) returned 1 [0212.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223cf8 | out: hHeap=0x1f0000) returned 1 [0212.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234d78 | out: hHeap=0x1f0000) returned 1 [0212.954] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0212.954] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2276b8 | out: hHeap=0x1f0000) returned 1 [0212.954] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234a58 | out: hHeap=0x1f0000) returned 1 [0212.954] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0212.954] DeleteFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ucrtbase.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\ucrtbase.dll")) returned 1 [0212.955] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d7a486, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d7a486, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x5f4b0, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="vccorlib140.dll", cAlternateFileName="VCCORL~1.DLL")) returned 1 [0212.956] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0212.956] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2127a0 [0212.956] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0212.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2127a0 | out: hHeap=0x1f0000) returned 1 [0212.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0212.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0212.956] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vccorlib140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\vccorlib140.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0212.957] GetFileType (hFile=0x23c) returned 0x1 [0212.957] CloseHandle (hObject=0x23c) returned 1 [0212.957] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a4d0 [0212.957] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vccorlib140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\vccorlib140.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d7a486, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d7a486, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x5f4b0)) returned 1 [0212.957] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a4d0 | out: hHeap=0x1f0000) returned 1 [0212.957] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21aab8 [0212.958] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vccorlib140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\vccorlib140.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d7a486, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d7a486, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x5f4b0)) returned 1 [0212.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21aab8 | out: hHeap=0x1f0000) returned 1 [0212.958] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21ab60 [0212.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ab60 | out: hHeap=0x1f0000) returned 1 [0212.958] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d7a486, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d7a486, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x15ab0, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="vcruntime140.dll", cAlternateFileName="VCRUNT~1.DLL")) returned 1 [0212.958] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x234e90 [0212.958] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211fa8 [0212.958] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0212.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211fa8 | out: hHeap=0x1f0000) returned 1 [0212.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0212.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234e90 | out: hHeap=0x1f0000) returned 1 [0212.959] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vcruntime140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\vcruntime140.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0212.959] GetLastError () returned 0x20 [0212.959] GetLastError () returned 0x20 [0212.959] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d7a486, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d7a486, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x15ab0, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="vcruntime140.dll", cAlternateFileName="VCRUNT~1.DLL")) returned 0 [0212.960] FindClose (in: hFindFile=0x24ecc0 | out: hFindFile=0x24ecc0) returned 1 [0212.960] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0212.960] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227520 | out: hHeap=0x1f0000) returned 1 [0212.960] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260838 | out: hHeap=0x1f0000) returned 1 [0212.960] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2347d0 | out: hHeap=0x1f0000) returned 1 [0212.960] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234b30 [0212.960] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0212.960] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x227520 [0212.961] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0212.961] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\*", lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb3e1c92c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb3e1c92c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x220406, cFileName=".", cAlternateFileName="")) returned 0x24e680 [0212.961] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0212.961] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0212.961] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0212.961] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb3e1c92c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb3e1c92c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="..", cAlternateFileName="")) returned 1 [0212.961] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21ff68 [0212.961] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0212.961] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0212.962] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0212.962] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d100bae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe462e472, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe462e472, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xc137d, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="Alphabet.xml", cAlternateFileName="")) returned 1 [0212.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260518 [0212.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0212.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218fa8 [0212.962] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0212.962] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ff68 | out: hHeap=0x1f0000) returned 1 [0212.962] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0212.963] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\alphabet.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0212.963] GetLastError () returned 0x5 [0212.963] GetLastError () returned 0x5 [0212.963] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05532b6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="ar-SA", cAlternateFileName="")) returned 1 [0212.963] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0212.963] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218a28 [0212.963] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0212.963] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218fa8 | out: hHeap=0x1f0000) returned 1 [0212.963] lstrcmpW (lpString1="ar-SA", lpString2=".") returned 1 [0212.964] lstrcmpW (lpString1="ar-SA", lpString2="..") returned 1 [0212.964] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x2051f0 [0212.964] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d88 [0212.964] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0553f37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="bg-BG", cAlternateFileName="")) returned 1 [0212.964] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fef0 [0212.964] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218fa8 [0212.964] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fef0 | out: hHeap=0x1f0000) returned 1 [0212.964] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218a28 | out: hHeap=0x1f0000) returned 1 [0212.964] lstrcmpW (lpString1="bg-BG", lpString2=".") returned 1 [0212.964] lstrcmpW (lpString1="bg-BG", lpString2="..") returned 1 [0212.964] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x234c98 [0212.964] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2123e8 [0212.964] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2051f0 | out: hHeap=0x1f0000) returned 1 [0212.964] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe46546cb, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe46546cb, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x69a5, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="Content.xml", cAlternateFileName="")) returned 1 [0212.964] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0212.965] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0212.965] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218b88 [0212.965] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0212.965] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218fa8 | out: hHeap=0x1f0000) returned 1 [0212.965] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0212.965] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\content.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0212.965] GetLastError () returned 0x5 [0212.965] GetLastError () returned 0x5 [0212.966] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0554b83, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="cs-CZ", cAlternateFileName="")) returned 1 [0213.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21ffe0 [0213.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218fa8 [0213.355] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ffe0 | out: hHeap=0x1f0000) returned 1 [0213.355] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218b88 | out: hHeap=0x1f0000) returned 1 [0213.355] lstrcmpW (lpString1="cs-CZ", lpString2=".") returned 1 [0213.355] lstrcmpW (lpString1="cs-CZ", lpString2="..") returned 1 [0213.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x48) returned 0x225dd8 [0213.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213570 [0213.355] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234c98 | out: hHeap=0x1f0000) returned 1 [0213.355] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05550d5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="da-DK", cAlternateFileName="")) returned 1 [0213.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0213.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x2188c8 [0213.355] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0213.355] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218fa8 | out: hHeap=0x1f0000) returned 1 [0213.355] lstrcmpW (lpString1="da-DK", lpString2=".") returned 1 [0213.355] lstrcmpW (lpString1="da-DK", lpString2="..") returned 1 [0213.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236128 [0213.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213680 [0213.355] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225dd8 | out: hHeap=0x1f0000) returned 1 [0213.355] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0555b2c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="de-DE", cAlternateFileName="")) returned 1 [0213.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0213.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218978 [0213.355] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0213.355] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2188c8 | out: hHeap=0x1f0000) returned 1 [0213.355] lstrcmpW (lpString1="de-DE", lpString2=".") returned 1 [0213.356] lstrcmpW (lpString1="de-DE", lpString2="..") returned 1 [0213.356] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0213.356] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0213.356] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236128 | out: hHeap=0x1f0000) returned 1 [0213.356] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa055662c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="el-GR", cAlternateFileName="")) returned 1 [0213.356] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0213.356] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219058 [0213.356] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0213.356] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218978 | out: hHeap=0x1f0000) returned 1 [0213.356] lstrcmpW (lpString1="el-GR", lpString2=".") returned 1 [0213.356] lstrcmpW (lpString1="el-GR", lpString2="..") returned 1 [0213.356] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212a48 [0213.356] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0557085, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="en-GB", cAlternateFileName="")) returned 1 [0213.356] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0213.356] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x2191b8 [0213.356] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0213.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219058 | out: hHeap=0x1f0000) returned 1 [0213.357] lstrcmpW (lpString1="en-GB", lpString2=".") returned 1 [0213.357] lstrcmpW (lpString1="en-GB", lpString2="..") returned 1 [0213.357] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd8) returned 0x24f5d8 [0213.357] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0213.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0213.357] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05dd09d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe8231541, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="en-US", cAlternateFileName="")) returned 1 [0213.357] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fa40 [0213.357] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ce8 [0213.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fa40 | out: hHeap=0x1f0000) returned 1 [0213.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2191b8 | out: hHeap=0x1f0000) returned 1 [0213.357] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0213.357] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0213.357] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0213.357] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05ddf5c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="es-ES", cAlternateFileName="")) returned 1 [0213.357] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0213.357] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218d98 [0213.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0213.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ce8 | out: hHeap=0x1f0000) returned 1 [0213.357] lstrcmpW (lpString1="es-ES", lpString2=".") returned 1 [0213.357] lstrcmpW (lpString1="es-ES", lpString2="..") returned 1 [0213.357] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212be0 [0213.357] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05dea14, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="es-MX", cAlternateFileName="")) returned 1 [0213.357] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fef0 [0213.357] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218b88 [0213.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fef0 | out: hHeap=0x1f0000) returned 1 [0213.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218d98 | out: hHeap=0x1f0000) returned 1 [0213.358] lstrcmpW (lpString1="es-MX", lpString2=".") returned 1 [0213.358] lstrcmpW (lpString1="es-MX", lpString2="..") returned 1 [0213.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x138) returned 0x22b0f8 [0213.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212c68 [0213.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f5d8 | out: hHeap=0x1f0000) returned 1 [0213.358] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05df011, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="et-EE", cAlternateFileName="")) returned 1 [0213.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2202b0 [0213.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218558 [0213.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2202b0 | out: hHeap=0x1f0000) returned 1 [0213.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218b88 | out: hHeap=0x1f0000) returned 1 [0213.358] lstrcmpW (lpString1="et-EE", lpString2=".") returned 1 [0213.358] lstrcmpW (lpString1="et-EE", lpString2="..") returned 1 [0213.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212cf0 [0213.358] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05df7b6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="fi-FI", cAlternateFileName="")) returned 1 [0213.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220058 [0213.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x2188c8 [0213.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220058 | out: hHeap=0x1f0000) returned 1 [0213.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218558 | out: hHeap=0x1f0000) returned 1 [0213.358] lstrcmpW (lpString1="fi-FI", lpString2=".") returned 1 [0213.358] lstrcmpW (lpString1="fi-FI", lpString2="..") returned 1 [0213.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0213.358] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8f49e8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd11f8841, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd11f8841, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x186b84, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="FlickAnimation.avi", cAlternateFileName="")) returned 1 [0213.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x234d78 [0213.359] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2202b0 [0213.359] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218d98 [0213.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2202b0 | out: hHeap=0x1f0000) returned 1 [0213.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2188c8 | out: hHeap=0x1f0000) returned 1 [0213.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234d78 | out: hHeap=0x1f0000) returned 1 [0213.359] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\FlickAnimation.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flickanimation.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.360] GetLastError () returned 0x5 [0213.360] GetLastError () returned 0x5 [0213.360] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8f49e8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd121ea9a, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd121ea9a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xc4800, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="FlickLearningWizard.exe", cAlternateFileName="")) returned 1 [0213.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x234de8 [0213.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0213.361] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x2188c8 [0213.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0213.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218d98 | out: hHeap=0x1f0000) returned 1 [0213.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234de8 | out: hHeap=0x1f0000) returned 1 [0213.361] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\FlickLearningWizard.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flicklearningwizard.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.361] GetLastError () returned 0x5 [0213.361] GetLastError () returned 0x5 [0213.361] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0635c03, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="fr-CA", cAlternateFileName="")) returned 1 [0213.361] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220328 [0213.361] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218978 [0213.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220328 | out: hHeap=0x1f0000) returned 1 [0213.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2188c8 | out: hHeap=0x1f0000) returned 1 [0213.361] lstrcmpW (lpString1="fr-CA", lpString2=".") returned 1 [0213.362] lstrcmpW (lpString1="fr-CA", lpString2="..") returned 1 [0213.362] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0213.362] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06369df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="fr-FR", cAlternateFileName="")) returned 1 [0213.362] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220058 [0213.362] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218b88 [0213.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220058 | out: hHeap=0x1f0000) returned 1 [0213.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218978 | out: hHeap=0x1f0000) returned 1 [0213.362] lstrcmpW (lpString1="fr-FR", lpString2=".") returned 1 [0213.362] lstrcmpW (lpString1="fr-FR", lpString2="..") returned 1 [0213.362] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c8) returned 0x220748 [0213.362] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e88 [0213.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b0f8 | out: hHeap=0x1f0000) returned 1 [0213.362] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0637839, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="fsdefinitions", cAlternateFileName="FSDEFI~1")) returned 1 [0213.362] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bd0 [0213.362] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0213.362] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218558 [0213.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0213.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218b88 | out: hHeap=0x1f0000) returned 1 [0213.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bd0 | out: hHeap=0x1f0000) returned 1 [0213.362] lstrcmpW (lpString1="fsdefinitions", lpString2=".") returned 1 [0213.362] lstrcmpW (lpString1="fsdefinitions", lpString2="..") returned 1 [0213.362] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0213.363] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cf9a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="he-IL", cAlternateFileName="")) returned 1 [0213.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0213.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219318 [0213.363] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0213.363] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218558 | out: hHeap=0x1f0000) returned 1 [0213.363] lstrcmpW (lpString1="he-IL", lpString2=".") returned 1 [0213.363] lstrcmpW (lpString1="he-IL", lpString2="..") returned 1 [0213.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a468 [0213.363] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cfce2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="hr-HR", cAlternateFileName="")) returned 1 [0213.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0213.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218b88 [0213.363] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0213.363] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219318 | out: hHeap=0x1f0000) returned 1 [0213.363] lstrcmpW (lpString1="hr-HR", lpString2=".") returned 1 [0213.363] lstrcmpW (lpString1="hr-HR", lpString2="..") returned 1 [0213.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a688 [0213.363] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06d0656, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="hu-HU", cAlternateFileName="")) returned 1 [0213.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0213.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ce8 [0213.363] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0213.363] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218b88 | out: hHeap=0x1f0000) returned 1 [0213.363] lstrcmpW (lpString1="hu-HU", lpString2=".") returned 1 [0213.363] lstrcmpW (lpString1="hu-HU", lpString2="..") returned 1 [0213.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229d80 [0213.364] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8ce781, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe382bd1f, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe382bd1f, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xb620, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="hwrcommonlm.dat", cAlternateFileName="")) returned 1 [0213.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a18 [0213.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fab8 [0213.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218558 [0213.364] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fab8 | out: hHeap=0x1f0000) returned 1 [0213.364] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ce8 | out: hHeap=0x1f0000) returned 1 [0213.364] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a18 | out: hHeap=0x1f0000) returned 1 [0213.364] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\hwrcommonlm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrcommonlm.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.364] GetLastError () returned 0x5 [0213.364] GetLastError () returned 0x5 [0213.365] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6eba2ec1, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0xa07693a9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6eba2ec1, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="HWRCustomization", cAlternateFileName="HWRCUS~1")) returned 1 [0213.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x234d08 [0213.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2202b0 [0213.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ce8 [0213.365] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2202b0 | out: hHeap=0x1f0000) returned 1 [0213.365] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218558 | out: hHeap=0x1f0000) returned 1 [0213.365] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234d08 | out: hHeap=0x1f0000) returned 1 [0213.365] lstrcmpW (lpString1="HWRCustomization", lpString2=".") returned 1 [0213.365] lstrcmpW (lpString1="HWRCustomization", lpString2="..") returned 1 [0213.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0213.365] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85c57278, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xb269cdea, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb269cdea, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x79bc0, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="hwrenclm.dat", cAlternateFileName="")) returned 1 [0213.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bd0 [0213.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0213.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218d98 [0213.365] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0213.365] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ce8 | out: hHeap=0x1f0000) returned 1 [0213.366] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bd0 | out: hHeap=0x1f0000) returned 1 [0213.366] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\hwrenclm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrenclm.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.366] GetLastError () returned 0x5 [0213.366] GetLastError () returned 0x5 [0213.366] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8ce781, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe38781cd, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe38781cd, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x10cb30, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="hwrlatinlm.dat", cAlternateFileName="")) returned 1 [0213.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bd0 [0213.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0213.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218558 [0213.366] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0213.366] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218d98 | out: hHeap=0x1f0000) returned 1 [0213.366] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bd0 | out: hHeap=0x1f0000) returned 1 [0213.367] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\hwrlatinlm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrlatinlm.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.367] GetLastError () returned 0x5 [0213.367] GetLastError () returned 0x5 [0213.367] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85cc99ae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xb28b2edf, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb28b2edf, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x2662f0, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="hwrusalm.dat", cAlternateFileName="")) returned 1 [0213.367] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bd0 [0213.367] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0213.367] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218608 [0213.367] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0213.367] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218558 | out: hHeap=0x1f0000) returned 1 [0213.367] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bd0 | out: hHeap=0x1f0000) returned 1 [0213.367] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusalm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusalm.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.368] GetLastError () returned 0x5 [0213.368] GetLastError () returned 0x5 [0213.368] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85cc99ae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xb281a570, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb281a570, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x339380, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="hwrusash.dat", cAlternateFileName="")) returned 1 [0213.368] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0213.368] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0213.368] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x2188c8 [0213.368] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0213.368] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218608 | out: hHeap=0x1f0000) returned 1 [0213.368] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0213.368] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusash.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusash.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.368] GetLastError () returned 0x5 [0213.368] GetLastError () returned 0x5 [0213.369] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e38953f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e38953f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e38953f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x58400, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="InkDiv.dll", cAlternateFileName="")) returned 1 [0213.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bd0 [0213.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0213.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218b88 [0213.369] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0213.369] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2188c8 | out: hHeap=0x1f0000) returned 1 [0213.369] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bd0 | out: hHeap=0x1f0000) returned 1 [0213.369] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\InkDiv.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inkdiv.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.369] GetLastError () returned 0x5 [0213.369] GetLastError () returned 0x5 [0213.369] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e38953f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e38953f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e38953f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1ecc00, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="InkObj.dll", cAlternateFileName="")) returned 1 [0213.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bd0 [0213.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0213.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219058 [0213.369] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0213.370] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218b88 | out: hHeap=0x1f0000) returned 1 [0213.370] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bd0 | out: hHeap=0x1f0000) returned 1 [0213.370] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\InkObj.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inkobj.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.370] GetLastError () returned 0x5 [0213.370] GetLastError () returned 0x5 [0213.370] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d14d081, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe467a929, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe467a929, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x59a00, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="InputPersonalization.exe", cAlternateFileName="")) returned 1 [0213.370] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2343e0 [0213.370] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0213.370] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x2191b8 [0213.370] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0213.370] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219058 | out: hHeap=0x1f0000) returned 1 [0213.370] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2343e0 | out: hHeap=0x1f0000) returned 1 [0213.370] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\InputPersonalization.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inputpersonalization.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.371] GetLastError () returned 0x5 [0213.371] GetLastError () returned 0x5 [0213.371] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x972, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="ipsar.xml", cAlternateFileName="")) returned 1 [0213.371] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a18 [0213.371] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0213.371] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x2188c8 [0213.371] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0213.371] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2191b8 | out: hHeap=0x1f0000) returned 1 [0213.371] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a18 | out: hHeap=0x1f0000) returned 1 [0213.371] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipsar.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsar.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.372] GetLastError () returned 0x5 [0213.372] GetLastError () returned 0x5 [0213.372] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa20, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="ipscat.xml", cAlternateFileName="")) returned 1 [0213.372] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a18 [0213.372] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0213.372] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218558 [0213.372] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0213.372] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2188c8 | out: hHeap=0x1f0000) returned 1 [0213.372] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a18 | out: hHeap=0x1f0000) returned 1 [0213.372] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipscat.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscat.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.373] GetLastError () returned 0x5 [0213.373] GetLastError () returned 0x5 [0213.373] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x99e, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="ipschs.xml", cAlternateFileName="")) returned 1 [0213.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a18 [0213.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220490 [0213.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x2188c8 [0213.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220490 | out: hHeap=0x1f0000) returned 1 [0213.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218558 | out: hHeap=0x1f0000) returned 1 [0213.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a18 | out: hHeap=0x1f0000) returned 1 [0213.373] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipschs.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipschs.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.373] GetLastError () returned 0x5 [0213.373] GetLastError () returned 0x5 [0213.373] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x984, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="ipscht.xml", cAlternateFileName="")) returned 1 [0213.374] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bd0 [0213.374] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2202b0 [0213.374] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218b88 [0213.374] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2202b0 | out: hHeap=0x1f0000) returned 1 [0213.374] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2188c8 | out: hHeap=0x1f0000) returned 1 [0213.374] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bd0 | out: hHeap=0x1f0000) returned 1 [0213.374] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipscht.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscht.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.374] GetLastError () returned 0x5 [0213.374] GetLastError () returned 0x5 [0213.374] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9fc, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="ipscsy.xml", cAlternateFileName="")) returned 1 [0213.374] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ab8 [0213.374] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0213.374] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x2191b8 [0213.374] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0213.374] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218b88 | out: hHeap=0x1f0000) returned 1 [0213.374] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ab8 | out: hHeap=0x1f0000) returned 1 [0213.375] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipscsy.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscsy.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.375] GetLastError () returned 0x5 [0213.375] GetLastError () returned 0x5 [0213.375] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9d2, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="ipsdan.xml", cAlternateFileName="")) returned 1 [0213.375] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bd0 [0213.375] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe00 [0213.375] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ce8 [0213.375] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe00 | out: hHeap=0x1f0000) returned 1 [0213.375] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2191b8 | out: hHeap=0x1f0000) returned 1 [0213.375] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bd0 | out: hHeap=0x1f0000) returned 1 [0213.375] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdan.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdan.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.375] GetLastError () returned 0x5 [0213.375] GetLastError () returned 0x5 [0213.375] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa38, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="ipsdeu.xml", cAlternateFileName="")) returned 1 [0213.375] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ab8 [0213.375] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0213.376] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x2188c8 [0213.376] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0213.376] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ce8 | out: hHeap=0x1f0000) returned 1 [0213.376] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ab8 | out: hHeap=0x1f0000) returned 1 [0213.376] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdeu.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdeu.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.376] GetLastError () returned 0x5 [0213.376] GetLastError () returned 0x5 [0213.376] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa3a, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="ipsel.xml", cAlternateFileName="")) returned 1 [0213.376] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ab8 [0213.376] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0213.376] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218b88 [0213.376] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0213.376] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2188c8 | out: hHeap=0x1f0000) returned 1 [0213.376] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ab8 | out: hHeap=0x1f0000) returned 1 [0213.376] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipsel.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsel.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.377] GetLastError () returned 0x5 [0213.377] GetLastError () returned 0x5 [0213.377] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa12, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="ipsen.xml", cAlternateFileName="")) returned 1 [0213.377] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bd0 [0213.377] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0213.377] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219268 [0213.377] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0213.377] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218b88 | out: hHeap=0x1f0000) returned 1 [0213.377] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bd0 | out: hHeap=0x1f0000) returned 1 [0213.377] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipsen.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsen.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.377] GetLastError () returned 0x5 [0213.377] GetLastError () returned 0x5 [0213.377] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xbd0, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="ipsesp.xml", cAlternateFileName="")) returned 1 [0213.377] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ab8 [0213.378] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2202b0 [0213.378] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219318 [0213.378] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2202b0 | out: hHeap=0x1f0000) returned 1 [0213.378] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219268 | out: hHeap=0x1f0000) returned 1 [0213.378] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ab8 | out: hHeap=0x1f0000) returned 1 [0213.378] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipsesp.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsesp.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.379] GetLastError () returned 0x5 [0213.379] GetLastError () returned 0x5 [0213.379] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d14d081, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d14d081, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d14d081, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="IPSEventLogMsg.dll", cAlternateFileName="")) returned 1 [0213.379] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x234e20 [0213.379] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0213.379] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218558 [0213.379] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0213.380] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219318 | out: hHeap=0x1f0000) returned 1 [0213.380] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234e20 | out: hHeap=0x1f0000) returned 1 [0213.380] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\IPSEventLogMsg.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipseventlogmsg.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.380] GetLastError () returned 0x5 [0213.380] GetLastError () returned 0x5 [0213.380] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d100bae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d100bae, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa62, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="ipsfin.xml", cAlternateFileName="")) returned 1 [0213.380] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a18 [0213.380] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fab8 [0213.381] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218b88 [0213.381] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fab8 | out: hHeap=0x1f0000) returned 1 [0213.381] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218558 | out: hHeap=0x1f0000) returned 1 [0213.381] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a18 | out: hHeap=0x1f0000) returned 1 [0213.381] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipsfin.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfin.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.381] GetLastError () returned 0x5 [0213.381] GetLastError () returned 0x5 [0213.381] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa44, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="ipsfra.xml", cAlternateFileName="")) returned 1 [0213.381] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a18 [0213.382] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21ff68 [0213.382] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218a28 [0213.382] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ff68 | out: hHeap=0x1f0000) returned 1 [0213.382] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218b88 | out: hHeap=0x1f0000) returned 1 [0213.382] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a18 | out: hHeap=0x1f0000) returned 1 [0213.382] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipsfra.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfra.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.383] GetLastError () returned 0x5 [0213.383] GetLastError () returned 0x5 [0213.383] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9e4, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="ipshe.xml", cAlternateFileName="")) returned 1 [0213.383] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0213.383] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fa40 [0213.383] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ef8 [0213.383] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fa40 | out: hHeap=0x1f0000) returned 1 [0213.383] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218a28 | out: hHeap=0x1f0000) returned 1 [0213.383] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0213.384] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipshe.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshe.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.384] GetLastError () returned 0x5 [0213.384] GetLastError () returned 0x5 [0213.384] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9d6, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="ipshi.xml", cAlternateFileName="")) returned 1 [0213.384] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bd0 [0213.384] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0213.384] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ce8 [0213.384] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0213.384] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ef8 | out: hHeap=0x1f0000) returned 1 [0213.384] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bd0 | out: hHeap=0x1f0000) returned 1 [0213.385] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipshi.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshi.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.385] GetLastError () returned 0x5 [0213.385] GetLastError () returned 0x5 [0213.385] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c96711d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa5c, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="ipshrv.xml", cAlternateFileName="")) returned 1 [0213.386] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0213.386] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0213.386] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218b88 [0213.386] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0213.386] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ce8 | out: hHeap=0x1f0000) returned 1 [0213.386] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0213.387] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipshrv.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshrv.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.387] GetLastError () returned 0x5 [0213.387] GetLastError () returned 0x5 [0213.387] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d14d081, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d14d081, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d14d081, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa0a, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="ipsid.xml", cAlternateFileName="")) returned 1 [0213.738] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ab8 [0213.738] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0213.738] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218768 [0213.738] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0213.738] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218b88 | out: hHeap=0x1f0000) returned 1 [0213.738] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ab8 | out: hHeap=0x1f0000) returned 1 [0213.779] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipsid.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsid.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.779] GetLastError () returned 0x5 [0213.779] GetLastError () returned 0x5 [0213.779] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9de, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="ipsita.xml", cAlternateFileName="")) returned 1 [0213.779] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606f8 [0213.779] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fef0 [0213.779] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219318 [0213.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fef0 | out: hHeap=0x1f0000) returned 1 [0213.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218768 | out: hHeap=0x1f0000) returned 1 [0213.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606f8 | out: hHeap=0x1f0000) returned 1 [0213.780] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipsita.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsita.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.780] GetLastError () returned 0x5 [0213.780] GetLastError () returned 0x5 [0213.780] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c96711d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c96711d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c96711d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9da, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="ipsjpn.xml", cAlternateFileName="")) returned 1 [0213.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0213.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0213.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218558 [0213.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0213.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219318 | out: hHeap=0x1f0000) returned 1 [0213.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0213.781] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipsjpn.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsjpn.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.782] GetLastError () returned 0x5 [0213.782] GetLastError () returned 0x5 [0213.783] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d100bae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d100bae, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d100bae, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa08, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="ipskor.xml", cAlternateFileName="")) returned 1 [0213.783] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605b8 [0213.783] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0213.783] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218818 [0213.783] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0213.783] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218558 | out: hHeap=0x1f0000) returned 1 [0213.783] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0213.783] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipskor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipskor.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.783] GetLastError () returned 0x5 [0213.783] GetLastError () returned 0x5 [0213.783] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe462e472, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe462e472, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xa400, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="IpsMigrationPlugin.dll", cAlternateFileName="")) returned 1 [0213.783] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0213.783] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0213.783] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218768 [0213.783] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0213.783] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218818 | out: hHeap=0x1f0000) returned 1 [0213.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0213.784] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\IpsMigrationPlugin.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsmigrationplugin.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.784] GetLastError () returned 0x5 [0213.784] GetLastError () returned 0x5 [0213.784] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d100bae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d100bae, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d100bae, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa42, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="ipsnld.xml", cAlternateFileName="")) returned 1 [0213.784] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0213.784] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fa40 [0213.784] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218b88 [0213.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fa40 | out: hHeap=0x1f0000) returned 1 [0213.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218768 | out: hHeap=0x1f0000) returned 1 [0213.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0213.785] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnld.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnld.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.785] GetLastError () returned 0x5 [0213.785] GetLastError () returned 0x5 [0213.785] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d100bae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d100bae, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d100bae, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa14, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="ipsnor.xml", cAlternateFileName="")) returned 1 [0213.785] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0213.785] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0213.785] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x2188c8 [0213.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0213.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218b88 | out: hHeap=0x1f0000) returned 1 [0213.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0213.785] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnor.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.785] GetLastError () returned 0x5 [0213.785] GetLastError () returned 0x5 [0213.785] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d100bae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d100bae, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d100bae, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa28, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="ipsplk.xml", cAlternateFileName="")) returned 1 [0213.785] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2607c0 [0213.786] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2202b0 [0213.786] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218768 [0213.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2202b0 | out: hHeap=0x1f0000) returned 1 [0213.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2188c8 | out: hHeap=0x1f0000) returned 1 [0213.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607c0 | out: hHeap=0x1f0000) returned 1 [0213.786] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipsplk.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsplk.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.786] GetLastError () returned 0x5 [0213.786] GetLastError () returned 0x5 [0213.786] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe46546cb, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe46546cb, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x1ec00, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="IpsPlugin.dll", cAlternateFileName="")) returned 1 [0213.786] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0213.786] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220058 [0213.786] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ce8 [0213.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220058 | out: hHeap=0x1f0000) returned 1 [0213.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218768 | out: hHeap=0x1f0000) returned 1 [0213.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0213.787] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\IpsPlugin.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsplugin.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.787] GetLastError () returned 0x5 [0213.787] GetLastError () returned 0x5 [0213.787] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x8c6, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="ipsptb.xml", cAlternateFileName="")) returned 1 [0213.787] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260518 [0213.787] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0213.787] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x2191b8 [0213.787] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0213.787] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ce8 | out: hHeap=0x1f0000) returned 1 [0213.787] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0213.788] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptb.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.788] GetLastError () returned 0x5 [0213.788] GetLastError () returned 0x5 [0213.788] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x8c0, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="ipsptg.xml", cAlternateFileName="")) returned 1 [0213.788] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0213.788] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0213.788] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218818 [0213.788] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0213.788] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2191b8 | out: hHeap=0x1f0000) returned 1 [0213.788] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0213.789] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptg.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptg.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.789] GetLastError () returned 0x5 [0213.789] GetLastError () returned 0x5 [0213.789] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c96711d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c96711d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c96711d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa54, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="ipsrom.xml", cAlternateFileName="")) returned 1 [0213.789] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0213.789] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0213.789] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218558 [0213.789] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0213.789] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218818 | out: hHeap=0x1f0000) returned 1 [0213.789] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0213.790] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipsrom.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsrom.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.790] GetLastError () returned 0x5 [0213.790] GetLastError () returned 0x5 [0213.790] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9ee, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="ipsrus.xml", cAlternateFileName="")) returned 1 [0213.790] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0213.790] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0213.790] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218768 [0213.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0213.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218558 | out: hHeap=0x1f0000) returned 1 [0213.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0213.791] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipsrus.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsrus.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.791] GetLastError () returned 0x5 [0213.791] GetLastError () returned 0x5 [0213.791] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa08, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="ipssrb.xml", cAlternateFileName="")) returned 1 [0213.792] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0213.792] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2202b0 [0213.792] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218d98 [0213.792] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2202b0 | out: hHeap=0x1f0000) returned 1 [0213.792] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218768 | out: hHeap=0x1f0000) returned 1 [0213.792] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0213.792] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssrb.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.793] GetLastError () returned 0x5 [0213.793] GetLastError () returned 0x5 [0213.793] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa24, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="ipssrl.xml", cAlternateFileName="")) returned 1 [0213.793] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0213.793] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0213.793] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218558 [0213.793] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0213.793] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218d98 | out: hHeap=0x1f0000) returned 1 [0213.793] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0213.794] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssrl.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.794] GetLastError () returned 0x5 [0213.794] GetLastError () returned 0x5 [0213.794] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9d8, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="ipssve.xml", cAlternateFileName="")) returned 1 [0213.794] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260900 [0213.794] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21ffe0 [0213.794] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x2191b8 [0213.794] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ffe0 | out: hHeap=0x1f0000) returned 1 [0213.794] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218558 | out: hHeap=0x1f0000) returned 1 [0213.794] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260900 | out: hHeap=0x1f0000) returned 1 [0213.795] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipssve.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssve.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.795] GetLastError () returned 0x5 [0213.795] GetLastError () returned 0x5 [0213.795] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xaa0, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="ipstr.xml", cAlternateFileName="")) returned 1 [0213.795] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0213.795] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0213.795] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219318 [0213.795] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0213.795] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2191b8 | out: hHeap=0x1f0000) returned 1 [0213.795] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0213.796] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipstr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipstr.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.796] GetLastError () returned 0x5 [0213.796] GetLastError () returned 0x5 [0213.796] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0769b1e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="it-IT", cAlternateFileName="")) returned 1 [0213.796] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220328 [0213.796] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218558 [0213.797] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220328 | out: hHeap=0x1f0000) returned 1 [0213.797] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219318 | out: hHeap=0x1f0000) returned 1 [0213.797] lstrcmpW (lpString1="it-IT", lpString2=".") returned 1 [0213.797] lstrcmpW (lpString1="it-IT", lpString2="..") returned 1 [0213.797] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2a0) returned 0x22b018 [0213.797] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x285e78 [0213.797] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220748 | out: hHeap=0x1f0000) returned 1 [0213.797] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076a026, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="ja-JP", cAlternateFileName="")) returned 1 [0213.797] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0213.797] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x2191b8 [0213.797] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0213.797] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218558 | out: hHeap=0x1f0000) returned 1 [0213.797] lstrcmpW (lpString1="ja-JP", lpString2=".") returned 1 [0213.798] lstrcmpW (lpString1="ja-JP", lpString2="..") returned 1 [0213.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x285df0 [0213.798] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076a7a6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="ko-KR", cAlternateFileName="")) returned 1 [0213.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21ff68 [0213.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218768 [0213.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ff68 | out: hHeap=0x1f0000) returned 1 [0213.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2191b8 | out: hHeap=0x1f0000) returned 1 [0213.798] lstrcmpW (lpString1="ko-KR", lpString2=".") returned 1 [0213.798] lstrcmpW (lpString1="ko-KR", lpString2="..") returned 1 [0213.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x285020 [0213.798] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076afd8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="LanguageModel", cAlternateFileName="LANGUA~1")) returned 1 [0213.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260658 [0213.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0213.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ce8 [0213.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0213.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218768 | out: hHeap=0x1f0000) returned 1 [0213.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260658 | out: hHeap=0x1f0000) returned 1 [0213.799] lstrcmpW (lpString1="LanguageModel", lpString2=".") returned 1 [0213.799] lstrcmpW (lpString1="LanguageModel", lpString2="..") returned 1 [0213.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0213.799] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076b52b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="lt-LT", cAlternateFileName="")) returned 1 [0213.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0213.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219318 [0213.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0213.800] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ce8 | out: hHeap=0x1f0000) returned 1 [0213.801] lstrcmpW (lpString1="lt-LT", lpString2=".") returned 1 [0213.801] lstrcmpW (lpString1="lt-LT", lpString2="..") returned 1 [0213.801] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x285350 [0213.801] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076ba6e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="lv-LV", cAlternateFileName="")) returned 1 [0213.801] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0213.801] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x2188c8 [0213.801] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0213.801] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219318 | out: hHeap=0x1f0000) returned 1 [0213.801] lstrcmpW (lpString1="lv-LV", lpString2=".") returned 1 [0213.801] lstrcmpW (lpString1="lv-LV", lpString2="..") returned 1 [0213.801] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2850a8 [0213.801] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a4376e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1f30e81, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1f30e81, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x19f200, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="micaut.dll", cAlternateFileName="")) returned 1 [0213.801] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260770 [0213.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21ffe0 [0213.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218978 [0213.802] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ffe0 | out: hHeap=0x1f0000) returned 1 [0213.802] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2188c8 | out: hHeap=0x1f0000) returned 1 [0213.802] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0213.802] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\micaut.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\micaut.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.803] GetLastError () returned 0x5 [0213.803] GetLastError () returned 0x5 [0213.804] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463d4edd, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xc2004e62, ftLastAccessTime.dwHighDateTime=0x1d2fa0a, ftLastWriteTime.dwLowDateTime=0x463d4edd, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x7b000, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="Microsoft.Ink.dll", cAlternateFileName="")) returned 1 [0213.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0213.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0213.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218b88 [0213.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0213.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218978 | out: hHeap=0x1f0000) returned 1 [0213.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0213.805] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\Microsoft.Ink.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\microsoft.ink.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.805] GetLastError () returned 0x5 [0213.805] GetLastError () returned 0x5 [0213.805] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a4376e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd51e08b5, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd51e08b5, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x178200, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="mip.exe", cAlternateFileName="")) returned 1 [0213.805] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21ffe0 [0213.805] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218fa8 [0213.805] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ffe0 | out: hHeap=0x1f0000) returned 1 [0213.805] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218b88 | out: hHeap=0x1f0000) returned 1 [0213.806] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\mip.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mip.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.806] GetLastError () returned 0x5 [0213.806] GetLastError () returned 0x5 [0213.806] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a1d507, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xde1acd8d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xde1acd8d, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x612e00, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="mraut.dll", cAlternateFileName="")) returned 1 [0213.806] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0213.806] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0213.806] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218818 [0213.806] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0213.806] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218fa8 | out: hHeap=0x1f0000) returned 1 [0213.806] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0213.807] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\mraut.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mraut.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.807] GetLastError () returned 0x5 [0213.807] GetLastError () returned 0x5 [0213.807] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c3a52f7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3c3a52f7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3c3a52f7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc800, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="mshwgst.dll", cAlternateFileName="")) returned 1 [0213.807] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2607c0 [0213.807] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0213.807] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x2188c8 [0213.807] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0213.807] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218818 | out: hHeap=0x1f0000) returned 1 [0213.807] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607c0 | out: hHeap=0x1f0000) returned 1 [0213.808] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\mshwgst.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mshwgst.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.808] GetLastError () returned 0x5 [0213.808] GetLastError () returned 0x5 [0213.808] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8ce781, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe3805ad4, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe3805ad4, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x106a00, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="mshwLatin.dll", cAlternateFileName="")) returned 1 [0213.808] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260658 [0213.808] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0213.808] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219058 [0213.808] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0213.808] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2188c8 | out: hHeap=0x1f0000) returned 1 [0213.808] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260658 | out: hHeap=0x1f0000) returned 1 [0213.808] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\mshwLatin.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mshwlatin.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.809] GetLastError () returned 0x5 [0213.809] GetLastError () returned 0x5 [0213.809] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076bff5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="nb-NO", cAlternateFileName="")) returned 1 [0213.809] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0213.809] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x2191b8 [0213.809] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0213.809] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219058 | out: hHeap=0x1f0000) returned 1 [0213.809] lstrcmpW (lpString1="nb-NO", lpString2=".") returned 1 [0213.809] lstrcmpW (lpString1="nb-NO", lpString2="..") returned 1 [0213.809] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2855f8 [0213.809] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076c75d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="nl-NL", cAlternateFileName="")) returned 1 [0213.809] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fa40 [0213.809] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ce8 [0213.809] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fa40 | out: hHeap=0x1f0000) returned 1 [0213.809] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2191b8 | out: hHeap=0x1f0000) returned 1 [0213.809] lstrcmpW (lpString1="nl-NL", lpString2=".") returned 1 [0213.809] lstrcmpW (lpString1="nl-NL", lpString2="..") returned 1 [0213.810] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2852c8 [0213.810] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d57c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="pl-PL", cAlternateFileName="")) returned 1 [0213.810] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0213.810] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219318 [0213.810] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0213.810] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ce8 | out: hHeap=0x1f0000) returned 1 [0213.810] lstrcmpW (lpString1="pl-PL", lpString2=".") returned 1 [0213.810] lstrcmpW (lpString1="pl-PL", lpString2="..") returned 1 [0213.810] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x284f98 [0213.810] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d988, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="pt-BR", cAlternateFileName="")) returned 1 [0213.810] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220490 [0213.810] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x2191b8 [0213.810] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220490 | out: hHeap=0x1f0000) returned 1 [0213.810] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219318 | out: hHeap=0x1f0000) returned 1 [0213.810] lstrcmpW (lpString1="pt-BR", lpString2=".") returned 1 [0213.810] lstrcmpW (lpString1="pt-BR", lpString2="..") returned 1 [0213.810] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3f0) returned 0x230860 [0213.810] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x285f88 [0213.811] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b018 | out: hHeap=0x1f0000) returned 1 [0213.811] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ddb8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="pt-PT", cAlternateFileName="")) returned 1 [0213.811] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0213.811] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218978 [0213.811] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0213.811] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2191b8 | out: hHeap=0x1f0000) returned 1 [0213.811] lstrcmpW (lpString1="pt-PT", lpString2=".") returned 1 [0213.811] lstrcmpW (lpString1="pt-PT", lpString2="..") returned 1 [0213.811] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2853d8 [0213.811] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e0f5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="ro-RO", cAlternateFileName="")) returned 1 [0213.811] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220058 [0213.811] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218768 [0213.811] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220058 | out: hHeap=0x1f0000) returned 1 [0213.811] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218978 | out: hHeap=0x1f0000) returned 1 [0213.811] lstrcmpW (lpString1="ro-RO", lpString2=".") returned 1 [0213.811] lstrcmpW (lpString1="ro-RO", lpString2="..") returned 1 [0213.811] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x285f00 [0213.812] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e38953f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e38953f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e38953f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2b600, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="rtscom.dll", cAlternateFileName="")) returned 1 [0213.812] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260770 [0213.812] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0213.812] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218d98 [0213.812] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0213.812] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218768 | out: hHeap=0x1f0000) returned 1 [0213.812] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0213.812] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\rtscom.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\rtscom.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.812] GetLastError () returned 0x5 [0213.812] GetLastError () returned 0x5 [0213.813] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e4d1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="ru-RU", cAlternateFileName="")) returned 1 [0213.813] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21ffe0 [0213.813] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218768 [0213.813] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ffe0 | out: hHeap=0x1f0000) returned 1 [0213.813] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218d98 | out: hHeap=0x1f0000) returned 1 [0213.813] lstrcmpW (lpString1="ru-RU", lpString2=".") returned 1 [0213.813] lstrcmpW (lpString1="ru-RU", lpString2="..") returned 1 [0213.813] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2854e8 [0213.813] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe46546cb, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe46546cb, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xb3200, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="ShapeCollector.exe", cAlternateFileName="")) returned 1 [0213.813] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0213.813] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220328 [0213.813] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218818 [0213.813] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220328 | out: hHeap=0x1f0000) returned 1 [0213.813] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218768 | out: hHeap=0x1f0000) returned 1 [0213.814] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0213.814] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ShapeCollector.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\shapecollector.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.814] GetLastError () returned 0x5 [0213.814] GetLastError () returned 0x5 [0213.814] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e8a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="sk-SK", cAlternateFileName="")) returned 1 [0213.814] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220058 [0213.814] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218b88 [0213.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220058 | out: hHeap=0x1f0000) returned 1 [0213.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218818 | out: hHeap=0x1f0000) returned 1 [0213.815] lstrcmpW (lpString1="sk-SK", lpString2=".") returned 1 [0213.815] lstrcmpW (lpString1="sk-SK", lpString2="..") returned 1 [0213.815] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2858a0 [0213.815] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ec25, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="sl-SI", cAlternateFileName="")) returned 1 [0213.815] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21ffe0 [0214.217] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218768 [0214.217] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ffe0 | out: hHeap=0x1f0000) returned 1 [0214.217] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218b88 | out: hHeap=0x1f0000) returned 1 [0214.217] lstrcmpW (lpString1="sl-SI", lpString2=".") returned 1 [0214.217] lstrcmpW (lpString1="sl-SI", lpString2="..") returned 1 [0214.217] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286de0 [0214.217] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c7ae2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="sr-Latn-RS", cAlternateFileName="SR-LAT~1")) returned 1 [0214.217] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0214.217] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe00 [0214.218] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219318 [0214.218] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe00 | out: hHeap=0x1f0000) returned 1 [0214.218] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218768 | out: hHeap=0x1f0000) returned 1 [0214.218] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0214.218] lstrcmpW (lpString1="sr-Latn-RS", lpString2=".") returned 1 [0214.218] lstrcmpW (lpString1="sr-Latn-RS", lpString2="..") returned 1 [0214.218] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286a28 [0214.218] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c820e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="sv-SE", cAlternateFileName="")) returned 1 [0214.218] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0214.218] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218b88 [0214.218] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0214.219] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219318 | out: hHeap=0x1f0000) returned 1 [0214.219] lstrcmpW (lpString1="sv-SE", lpString2=".") returned 1 [0214.219] lstrcmpW (lpString1="sv-SE", lpString2="..") returned 1 [0214.219] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286b38 [0214.219] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d14d081, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe467a929, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe467a929, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xa400, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="TabIpsps.dll", cAlternateFileName="")) returned 1 [0214.219] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0214.219] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe00 [0214.219] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x2188c8 [0214.219] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe00 | out: hHeap=0x1f0000) returned 1 [0214.219] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218b88 | out: hHeap=0x1f0000) returned 1 [0214.219] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0214.220] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\TabIpsps.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabipsps.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.220] GetLastError () returned 0x5 [0214.221] GetLastError () returned 0x5 [0214.221] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463d4edd, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x779da8e5, ftLastAccessTime.dwHighDateTime=0x1d2fa0a, ftLastWriteTime.dwLowDateTime=0x463d4edd, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x3e9600, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="tabskb.dll", cAlternateFileName="")) returned 1 [0214.221] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605e0 [0214.221] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0214.221] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218768 [0214.222] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0214.222] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2188c8 | out: hHeap=0x1f0000) returned 1 [0214.222] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605e0 | out: hHeap=0x1f0000) returned 1 [0214.222] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\tabskb.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabskb.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.223] GetLastError () returned 0x5 [0214.223] GetLastError () returned 0x5 [0214.223] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1a8750a, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1a8750a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x5f780, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="TabTip.exe", cAlternateFileName="")) returned 1 [0214.223] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260838 [0214.223] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe00 [0214.223] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219318 [0214.223] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe00 | out: hHeap=0x1f0000) returned 1 [0214.223] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218768 | out: hHeap=0x1f0000) returned 1 [0214.224] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260838 | out: hHeap=0x1f0000) returned 1 [0214.224] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\TabTip.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabtip.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.224] GetLastError () returned 0x5 [0214.224] GetLastError () returned 0x5 [0214.225] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8602, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="th-TH", cAlternateFileName="")) returned 1 [0214.225] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0214.225] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218d98 [0214.225] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0214.225] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219318 | out: hHeap=0x1f0000) returned 1 [0214.225] lstrcmpW (lpString1="th-TH", lpString2=".") returned 1 [0214.225] lstrcmpW (lpString1="th-TH", lpString2="..") returned 1 [0214.225] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286230 [0214.226] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1aad768, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1aad768, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x109400, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="TipRes.dll", cAlternateFileName="")) returned 1 [0214.226] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2607c0 [0214.226] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0214.226] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219478 [0214.226] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0214.226] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218d98 | out: hHeap=0x1f0000) returned 1 [0214.226] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607c0 | out: hHeap=0x1f0000) returned 1 [0214.227] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\TipRes.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipres.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.227] GetLastError () returned 0x5 [0214.227] GetLastError () returned 0x5 [0214.227] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x5600, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="tipresx.dll", cAlternateFileName="")) returned 1 [0214.227] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260658 [0214.228] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0214.228] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ce8 [0214.228] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0214.228] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219478 | out: hHeap=0x1f0000) returned 1 [0214.228] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260658 | out: hHeap=0x1f0000) returned 1 [0214.229] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\tipresx.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipresx.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.229] GetLastError () returned 0x5 [0214.229] GetLastError () returned 0x5 [0214.229] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79680792, ftCreationTime.dwHighDateTime=0x1d32794, ftLastAccessTime.dwLowDateTime=0x79680792, ftLastAccessTime.dwHighDateTime=0x1d32794, ftLastWriteTime.dwLowDateTime=0x79680792, ftLastWriteTime.dwHighDateTime=0x1d32794, nFileSizeHigh=0x0, nFileSizeLow=0x101200, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="tipskins.dll", cAlternateFileName="")) returned 1 [0214.229] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0214.229] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220328 [0214.229] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218768 [0214.230] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220328 | out: hHeap=0x1f0000) returned 1 [0214.230] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ce8 | out: hHeap=0x1f0000) returned 1 [0214.230] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0214.230] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\tipskins.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipskins.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.231] GetLastError () returned 0x5 [0214.231] GetLastError () returned 0x5 [0214.231] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7965a52d, ftCreationTime.dwHighDateTime=0x1d32794, ftLastAccessTime.dwLowDateTime=0x7965a52d, ftLastAccessTime.dwHighDateTime=0x1d32794, ftLastWriteTime.dwLowDateTime=0x7965a52d, ftLastWriteTime.dwHighDateTime=0x1d32794, nFileSizeHigh=0x0, nFileSizeLow=0x9e1a0, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="tiptsf.dll", cAlternateFileName="")) returned 1 [0214.231] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260838 [0214.231] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe00 [0214.231] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218b88 [0214.231] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe00 | out: hHeap=0x1f0000) returned 1 [0214.231] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218768 | out: hHeap=0x1f0000) returned 1 [0214.231] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260838 | out: hHeap=0x1f0000) returned 1 [0214.232] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\tiptsf.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tiptsf.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.232] GetLastError () returned 0x5 [0214.232] GetLastError () returned 0x5 [0214.232] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463d4edd, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x6ebfe576, ftLastAccessTime.dwHighDateTime=0x1d2fa0a, ftLastWriteTime.dwLowDateTime=0x463d4edd, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x17a00, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="tpcps.dll", cAlternateFileName="")) returned 1 [0214.232] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2607c0 [0214.232] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0214.232] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x2191b8 [0214.232] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0214.232] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218b88 | out: hHeap=0x1f0000) returned 1 [0214.233] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607c0 | out: hHeap=0x1f0000) returned 1 [0214.233] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\tpcps.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tpcps.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.233] GetLastError () returned 0x5 [0214.233] GetLastError () returned 0x5 [0214.234] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c896f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="tr-TR", cAlternateFileName="")) returned 1 [0214.234] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0214.234] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218768 [0214.234] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0214.234] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2191b8 | out: hHeap=0x1f0000) returned 1 [0214.234] lstrcmpW (lpString1="tr-TR", lpString2=".") returned 1 [0214.234] lstrcmpW (lpString1="tr-TR", lpString2="..") returned 1 [0214.234] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286bc0 [0214.234] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8ed8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="uk-UA", cAlternateFileName="")) returned 1 [0214.235] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fef0 [0214.235] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218608 [0214.235] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fef0 | out: hHeap=0x1f0000) returned 1 [0214.235] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218768 | out: hHeap=0x1f0000) returned 1 [0214.235] lstrcmpW (lpString1="uk-UA", lpString2=".") returned 1 [0214.235] lstrcmpW (lpString1="uk-UA", lpString2="..") returned 1 [0214.235] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2862b8 [0214.235] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c93df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="zh-CN", cAlternateFileName="")) returned 1 [0214.235] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0214.235] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219478 [0214.235] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0214.236] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218608 | out: hHeap=0x1f0000) returned 1 [0214.236] lstrcmpW (lpString1="zh-CN", lpString2=".") returned 1 [0214.236] lstrcmpW (lpString1="zh-CN", lpString2="..") returned 1 [0214.236] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286098 [0214.236] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c97fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="zh-TW", cAlternateFileName="")) returned 1 [0214.236] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0214.236] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218608 [0214.236] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0214.236] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219478 | out: hHeap=0x1f0000) returned 1 [0214.236] lstrcmpW (lpString1="zh-TW", lpString2=".") returned 1 [0214.237] lstrcmpW (lpString1="zh-TW", lpString2="..") returned 1 [0214.237] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286340 [0214.237] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c97fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="zh-TW", cAlternateFileName="")) returned 0 [0214.237] FindClose (in: hFindFile=0x24e680 | out: hFindFile=0x24e680) returned 1 [0214.237] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234a58 [0214.237] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0214.237] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x226d28 [0214.237] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2863c8 [0214.238] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\*", lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05532b6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ea80 [0214.238] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286670 [0214.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2863c8 | out: hHeap=0x1f0000) returned 1 [0214.238] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0214.238] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05532b6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.238] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286560 [0214.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286670 | out: hHeap=0x1f0000) returned 1 [0214.238] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0214.238] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0214.239] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0214.239] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0214.239] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286cd0 [0214.239] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0214.239] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286cd0 | out: hHeap=0x1f0000) returned 1 [0214.239] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286560 | out: hHeap=0x1f0000) returned 1 [0214.239] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0214.240] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ar-sa\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.240] GetLastError () returned 0x5 [0214.240] GetLastError () returned 0x5 [0214.240] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0214.240] FindClose (in: hFindFile=0x24ea80 | out: hFindFile=0x24ea80) returned 1 [0214.240] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0214.241] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226d28 | out: hHeap=0x1f0000) returned 1 [0214.241] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0214.241] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234a58 | out: hHeap=0x1f0000) returned 1 [0214.241] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234740 [0214.241] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260770 [0214.241] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2276b8 [0214.241] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2863c8 [0214.241] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\*", lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0553f37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e900 [0214.242] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286780 [0214.242] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2863c8 | out: hHeap=0x1f0000) returned 1 [0214.242] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0214.242] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0553f37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.242] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2863c8 [0214.242] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286780 | out: hHeap=0x1f0000) returned 1 [0214.242] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0214.242] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0214.243] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0214.243] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0214.243] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286450 [0214.243] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0214.243] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286450 | out: hHeap=0x1f0000) returned 1 [0214.243] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2863c8 | out: hHeap=0x1f0000) returned 1 [0214.243] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0214.244] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\bg-bg\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.244] GetLastError () returned 0x5 [0214.244] GetLastError () returned 0x5 [0214.244] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0214.244] FindClose (in: hFindFile=0x24e900 | out: hFindFile=0x24e900) returned 1 [0214.245] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0214.245] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2276b8 | out: hHeap=0x1f0000) returned 1 [0214.245] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0214.245] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234740 | out: hHeap=0x1f0000) returned 1 [0214.245] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234a58 [0214.245] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260540 [0214.245] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x226ec0 [0214.245] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286cd0 [0214.245] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\*", lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0554b83, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e5c0 [0214.246] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286ab0 [0214.246] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286cd0 | out: hHeap=0x1f0000) returned 1 [0214.246] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0214.246] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0554b83, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.246] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2861a8 [0214.246] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286ab0 | out: hHeap=0x1f0000) returned 1 [0214.246] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0214.246] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0214.246] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e316e09, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e316e09, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e316e09, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0214.247] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0214.247] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2863c8 [0214.247] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0214.247] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2863c8 | out: hHeap=0x1f0000) returned 1 [0214.247] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2861a8 | out: hHeap=0x1f0000) returned 1 [0214.247] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0214.248] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\cs-cz\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.248] GetLastError () returned 0x5 [0214.248] GetLastError () returned 0x5 [0214.248] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e316e09, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e316e09, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e316e09, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0214.248] FindClose (in: hFindFile=0x24e5c0 | out: hFindFile=0x24e5c0) returned 1 [0214.248] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0214.248] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226ec0 | out: hHeap=0x1f0000) returned 1 [0214.249] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0214.249] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234a58 | out: hHeap=0x1f0000) returned 1 [0214.249] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346b0 [0214.249] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0214.249] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2276b8 [0214.249] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2865e8 [0214.249] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\*", lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05550d5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e600 [0214.249] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286450 [0214.249] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2865e8 | out: hHeap=0x1f0000) returned 1 [0214.249] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0214.249] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05550d5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.250] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286890 [0214.250] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286450 | out: hHeap=0x1f0000) returned 1 [0214.250] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0214.250] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0214.250] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2f0ba2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2f0ba2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2f0ba2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0214.250] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2607e8 [0214.250] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2864d8 [0214.250] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0214.250] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2864d8 | out: hHeap=0x1f0000) returned 1 [0214.250] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286890 | out: hHeap=0x1f0000) returned 1 [0214.250] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607e8 | out: hHeap=0x1f0000) returned 1 [0214.251] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\da-dk\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.251] GetLastError () returned 0x5 [0214.251] GetLastError () returned 0x5 [0214.251] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2f0ba2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2f0ba2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2f0ba2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0214.252] FindClose (in: hFindFile=0x24e600 | out: hFindFile=0x24e600) returned 1 [0214.252] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0214.252] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2276b8 | out: hHeap=0x1f0000) returned 1 [0214.252] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0214.252] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346b0 | out: hHeap=0x1f0000) returned 1 [0214.252] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346b0 [0214.252] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0214.252] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2276b8 [0214.252] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2864d8 [0214.253] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\de-DE\\*", lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0555b2c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e680 [0214.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2863c8 [0214.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2864d8 | out: hHeap=0x1f0000) returned 1 [0214.539] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0214.539] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0555b2c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286d58 [0214.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2863c8 | out: hHeap=0x1f0000) returned 1 [0214.539] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0214.540] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0214.540] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2f0ba2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2f0ba2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2f0ba2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0214.540] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606f8 [0214.540] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286890 [0214.540] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0214.540] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286890 | out: hHeap=0x1f0000) returned 1 [0214.540] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286d58 | out: hHeap=0x1f0000) returned 1 [0214.540] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606f8 | out: hHeap=0x1f0000) returned 1 [0214.541] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\de-DE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\de-de\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.541] GetLastError () returned 0x5 [0214.541] GetLastError () returned 0x5 [0214.541] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2f0ba2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2f0ba2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2f0ba2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0214.541] FindClose (in: hFindFile=0x24e680 | out: hFindFile=0x24e680) returned 1 [0214.542] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0214.542] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2276b8 | out: hHeap=0x1f0000) returned 1 [0214.542] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0214.542] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346b0 | out: hHeap=0x1f0000) returned 1 [0214.542] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234a58 [0214.542] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260540 [0214.542] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2276b8 [0214.542] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2861a8 [0214.542] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\el-GR\\*", lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa055662c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e8c0 [0214.542] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286450 [0214.542] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2861a8 | out: hHeap=0x1f0000) returned 1 [0214.543] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0214.543] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa055662c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286c48 [0214.543] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286450 | out: hHeap=0x1f0000) returned 1 [0214.543] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0214.543] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0214.543] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0214.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260798 [0214.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2863c8 [0214.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0214.543] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2863c8 | out: hHeap=0x1f0000) returned 1 [0214.543] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286c48 | out: hHeap=0x1f0000) returned 1 [0214.544] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260798 | out: hHeap=0x1f0000) returned 1 [0214.544] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\el-GR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\el-gr\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.544] GetLastError () returned 0x5 [0214.544] GetLastError () returned 0x5 [0214.544] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0214.544] FindClose (in: hFindFile=0x24e8c0 | out: hFindFile=0x24e8c0) returned 1 [0214.545] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0214.545] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2276b8 | out: hHeap=0x1f0000) returned 1 [0214.545] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0214.545] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234a58 | out: hHeap=0x1f0000) returned 1 [0214.545] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346b0 [0214.545] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0214.545] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2276b8 [0214.545] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2866f8 [0214.545] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-GB\\*", lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0557085, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e8c0 [0214.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2861a8 [0214.546] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2866f8 | out: hHeap=0x1f0000) returned 1 [0214.546] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0214.546] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0557085, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2863c8 [0214.546] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2861a8 | out: hHeap=0x1f0000) returned 1 [0214.546] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0214.546] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0214.546] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0214.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260540 [0214.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2861a8 [0214.547] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0214.547] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2861a8 | out: hHeap=0x1f0000) returned 1 [0214.547] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2863c8 | out: hHeap=0x1f0000) returned 1 [0214.547] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0214.547] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-GB\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-gb\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.547] GetLastError () returned 0x5 [0214.548] GetLastError () returned 0x5 [0214.548] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0214.548] FindClose (in: hFindFile=0x24e8c0 | out: hFindFile=0x24e8c0) returned 1 [0214.548] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0214.548] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2276b8 | out: hHeap=0x1f0000) returned 1 [0214.548] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0214.548] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346b0 | out: hHeap=0x1f0000) returned 1 [0214.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234860 [0214.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2607c0 [0214.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2276b8 [0214.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286c48 [0214.549] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\*", lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05dd09d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe8231541, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24eac0 [0214.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2861a8 [0214.549] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286c48 | out: hHeap=0x1f0000) returned 1 [0214.549] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0214.549] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05dd09d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe8231541, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286670 [0214.549] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2861a8 | out: hHeap=0x1f0000) returned 1 [0214.549] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0214.550] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0214.550] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1a3b058, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1a3b058, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x1b2d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="boxed-correct.avi", cAlternateFileName="")) returned 1 [0214.550] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0214.550] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2863c8 [0214.550] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0214.550] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2863c8 | out: hHeap=0x1f0000) returned 1 [0214.550] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286670 | out: hHeap=0x1f0000) returned 1 [0214.550] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0214.550] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-correct.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.551] GetLastError () returned 0x5 [0214.551] GetLastError () returned 0x5 [0214.551] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1a612b1, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1a612b1, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xbf28, dwReserved0=0x0, dwReserved1=0x0, cFileName="boxed-delete.avi", cAlternateFileName="")) returned 1 [0214.551] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2f0 [0214.551] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2866f8 [0214.551] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0214.551] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2866f8 | out: hHeap=0x1f0000) returned 1 [0214.551] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0214.551] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0214.552] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-delete.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.552] GetLastError () returned 0x5 [0214.552] GetLastError () returned 0x5 [0214.552] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a1d507, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1aad768, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1aad768, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xb61e, dwReserved0=0x0, dwReserved1=0x0, cFileName="boxed-join.avi", cAlternateFileName="")) returned 1 [0214.552] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0214.552] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286c48 [0214.552] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0214.552] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286c48 | out: hHeap=0x1f0000) returned 1 [0214.552] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0214.552] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0214.553] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-join.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.553] GetLastError () returned 0x5 [0214.553] GetLastError () returned 0x5 [0214.553] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1a8750a, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1a8750a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x148de, dwReserved0=0x0, dwReserved1=0x0, cFileName="boxed-split.avi", cAlternateFileName="")) returned 1 [0214.553] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0214.553] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2861a8 [0214.553] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0214.553] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2861a8 | out: hHeap=0x1f0000) returned 1 [0214.554] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0214.554] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0214.554] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-split.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.554] GetLastError () returned 0x5 [0214.554] GetLastError () returned 0x5 [0214.554] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1a8750a, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1a8750a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x2bfcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="correct.avi", cAlternateFileName="")) returned 1 [0214.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609a0 [0214.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286c48 [0214.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0214.554] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286c48 | out: hHeap=0x1f0000) returned 1 [0214.554] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0214.554] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0214.555] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\correct.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.555] GetLastError () returned 0x5 [0214.555] GetLastError () returned 0x5 [0214.555] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1a612b1, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1a612b1, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x32e18, dwReserved0=0x0, dwReserved1=0x0, cFileName="delete.avi", cAlternateFileName="")) returned 1 [0214.555] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609a0 [0214.555] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2866f8 [0214.555] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0214.555] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2866f8 | out: hHeap=0x1f0000) returned 1 [0214.555] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0214.555] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0214.556] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\delete.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.556] GetLastError () returned 0x5 [0214.556] GetLastError () returned 0x5 [0214.556] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3da3ec5f, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7bf3d600, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="FlickLearningWizard.exe.mui", cAlternateFileName="")) returned 1 [0214.556] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234788 [0214.556] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286d58 [0214.556] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0214.556] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286d58 | out: hHeap=0x1f0000) returned 1 [0214.556] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0214.556] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234788 | out: hHeap=0x1f0000) returned 1 [0214.556] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\FlickLearningWizard.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\flicklearningwizard.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.556] GetLastError () returned 0x5 [0214.556] GetLastError () returned 0x5 [0214.557] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dab1374, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7e563000, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkObj.dll.mui", cAlternateFileName="")) returned 1 [0214.557] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609a0 [0214.557] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286c48 [0214.557] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0214.557] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286c48 | out: hHeap=0x1f0000) returned 1 [0214.557] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0214.557] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0214.557] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InkObj.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inkobj.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.557] GetLastError () returned 0x5 [0214.557] GetLastError () returned 0x5 [0214.557] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d9f27a8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7f875d00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="InputPersonalization.exe.mui", cAlternateFileName="")) returned 1 [0214.557] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346b0 [0214.557] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2861a8 [0214.557] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0214.557] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2861a8 | out: hHeap=0x1f0000) returned 1 [0214.558] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0214.558] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346b0 | out: hHeap=0x1f0000) returned 1 [0214.558] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InputPersonalization.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inputpersonalization.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.558] GetLastError () returned 0x5 [0214.558] GetLastError () returned 0x5 [0214.558] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d9f27a8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7f875d00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x5a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPSEventLogMsg.dll.mui", cAlternateFileName="")) returned 1 [0214.558] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0214.558] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286450 [0214.558] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0214.558] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286450 | out: hHeap=0x1f0000) returned 1 [0214.558] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0214.558] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0214.559] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IPSEventLogMsg.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ipseventlogmsg.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.559] GetLastError () returned 0x5 [0214.559] GetLastError () returned 0x5 [0214.559] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3da18a06, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x80b88a00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IpsMigrationPlugin.dll.mui", cAlternateFileName="")) returned 1 [0214.559] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346b0 [0214.559] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2863c8 [0214.559] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0214.559] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2863c8 | out: hHeap=0x1f0000) returned 1 [0214.559] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0214.559] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346b0 | out: hHeap=0x1f0000) returned 1 [0214.559] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IpsMigrationPlugin.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ipsmigrationplugin.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.559] GetLastError () returned 0x5 [0214.559] GetLastError () returned 0x5 [0214.559] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a1d507, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1af9c24, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1af9c24, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x30d3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="join.avi", cAlternateFileName="")) returned 1 [0214.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260798 [0214.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286c48 [0214.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0214.560] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286c48 | out: hHeap=0x1f0000) returned 1 [0214.560] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0214.560] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260798 | out: hHeap=0x1f0000) returned 1 [0214.560] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\join.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.560] GetLastError () returned 0x5 [0214.560] GetLastError () returned 0x5 [0214.560] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dad75cd, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7e563000, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0x0, dwReserved1=0x0, cFileName="micaut.dll.mui", cAlternateFileName="")) returned 1 [0214.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0214.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2861a8 [0214.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0214.560] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2861a8 | out: hHeap=0x1f0000) returned 1 [0214.560] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0214.560] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0214.561] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\micaut.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\micaut.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.561] GetLastError () returned 0x5 [0214.561] GetLastError () returned 0x5 [0214.561] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3da8b116, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7d250300, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mip.exe.mui", cAlternateFileName="")) returned 1 [0214.561] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260798 [0214.561] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286c48 [0214.561] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0214.561] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286c48 | out: hHeap=0x1f0000) returned 1 [0214.561] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0214.561] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260798 | out: hHeap=0x1f0000) returned 1 [0214.561] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\mip.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\mip.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.562] GetLastError () returned 0x5 [0214.562] GetLastError () returned 0x5 [0214.562] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3da18a06, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x80b88a00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mshwLatin.dll.mui", cAlternateFileName="")) returned 1 [0214.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0214.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2863c8 [0214.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0214.562] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2863c8 | out: hHeap=0x1f0000) returned 1 [0214.562] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0214.562] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0214.562] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\mshwLatin.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\mshwlatin.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.562] GetLastError () returned 0x5 [0214.562] GetLastError () returned 0x5 [0214.562] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dab1374, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7e563000, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtscom.dll.mui", cAlternateFileName="")) returned 1 [0214.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609a0 [0214.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2864d8 [0214.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0214.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2864d8 | out: hHeap=0x1f0000) returned 1 [0214.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0214.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0214.563] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\rtscom.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\rtscom.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.563] GetLastError () returned 0x5 [0214.563] GetLastError () returned 0x5 [0214.563] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3da18a06, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7f875d00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xac00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShapeCollector.exe.mui", cAlternateFileName="")) returned 1 [0214.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0214.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286c48 [0214.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0214.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286c48 | out: hHeap=0x1f0000) returned 1 [0214.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0214.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0214.564] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\ShapeCollector.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\shapecollector.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.564] GetLastError () returned 0x5 [0214.564] GetLastError () returned 0x5 [0214.564] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1a8750a, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1a8750a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x2c6cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="split.avi", cAlternateFileName="")) returned 1 [0214.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0214.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2866f8 [0214.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0214.564] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2866f8 | out: hHeap=0x1f0000) returned 1 [0214.564] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0214.564] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0214.564] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\split.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.564] GetLastError () returned 0x5 [0214.564] GetLastError () returned 0x5 [0214.565] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dad75cd, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7e563000, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="tabskb.dll.mui", cAlternateFileName="")) returned 1 [0214.565] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0214.565] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2863c8 [0214.565] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0214.565] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2863c8 | out: hHeap=0x1f0000) returned 1 [0214.565] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0214.565] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0214.565] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\tabskb.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tabskb.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.566] GetLastError () returned 0x5 [0214.566] GetLastError () returned 0x5 [0214.566] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3da8b116, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7d250300, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TabTip.exe.mui", cAlternateFileName="")) returned 1 [0214.566] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0214.566] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286d58 [0214.566] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0214.566] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286d58 | out: hHeap=0x1f0000) returned 1 [0214.566] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0214.566] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0214.566] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TabTip.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tabtip.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.566] GetLastError () returned 0x5 [0214.567] GetLastError () returned 0x5 [0214.567] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ffe6194, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7c896e00, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0x6200, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipRes.dll.mui", cAlternateFileName="")) returned 1 [0214.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0214.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2863c8 [0214.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0214.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2863c8 | out: hHeap=0x1f0000) returned 1 [0214.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0214.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0214.567] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TipRes.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipres.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.567] GetLastError () returned 0x5 [0214.567] GetLastError () returned 0x5 [0214.567] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0214.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0214.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286890 [0214.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0214.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286890 | out: hHeap=0x1f0000) returned 1 [0214.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0214.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0214.568] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.568] GetLastError () returned 0x5 [0214.568] GetLastError () returned 0x5 [0214.568] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dad75cd, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7d250300, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipTsf.dll.mui", cAlternateFileName="")) returned 1 [0214.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260900 [0214.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286c48 [0214.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0214.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286c48 | out: hHeap=0x1f0000) returned 1 [0214.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0214.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260900 | out: hHeap=0x1f0000) returned 1 [0214.569] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TipTsf.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tiptsf.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.569] GetLastError () returned 0x5 [0214.569] GetLastError () returned 0x5 [0214.569] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dad75cd, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7d250300, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipTsf.dll.mui", cAlternateFileName="")) returned 0 [0214.569] FindClose (in: hFindFile=0x24eac0 | out: hFindFile=0x24eac0) returned 1 [0214.569] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0214.569] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2276b8 | out: hHeap=0x1f0000) returned 1 [0214.569] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607c0 | out: hHeap=0x1f0000) returned 1 [0214.569] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234860 | out: hHeap=0x1f0000) returned 1 [0214.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346b0 [0214.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0214.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2276b8 [0214.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286890 [0214.569] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\es-ES\\*", lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05ddf5c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e8c0 [0214.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286c48 [0214.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286890 | out: hHeap=0x1f0000) returned 1 [0214.570] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0214.570] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05ddf5c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2863c8 [0214.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286c48 | out: hHeap=0x1f0000) returned 1 [0214.570] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0214.570] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0214.570] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0214.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609a0 [0214.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286c48 [0214.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0214.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286c48 | out: hHeap=0x1f0000) returned 1 [0214.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2863c8 | out: hHeap=0x1f0000) returned 1 [0214.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0214.571] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\es-ES\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-es\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.571] GetLastError () returned 0x5 [0214.571] GetLastError () returned 0x5 [0214.571] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0214.571] FindClose (in: hFindFile=0x24e8c0 | out: hFindFile=0x24e8c0) returned 1 [0214.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0214.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2276b8 | out: hHeap=0x1f0000) returned 1 [0214.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0214.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346b0 | out: hHeap=0x1f0000) returned 1 [0214.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234980 [0214.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604c8 [0214.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2276b8 [0214.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286c48 [0214.571] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\es-MX\\*", lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05dea14, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e8c0 [0214.572] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286450 [0214.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286c48 | out: hHeap=0x1f0000) returned 1 [0214.572] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0214.572] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05dea14, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.572] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2864d8 [0214.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286450 | out: hHeap=0x1f0000) returned 1 [0214.572] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0214.572] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0214.572] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2a46df, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2a46df, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2a46df, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0214.572] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0214.572] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2863c8 [0214.572] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0214.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2863c8 | out: hHeap=0x1f0000) returned 1 [0214.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2864d8 | out: hHeap=0x1f0000) returned 1 [0214.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0214.573] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\es-MX\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-mx\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.573] GetLastError () returned 0x5 [0214.573] GetLastError () returned 0x5 [0214.573] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2a46df, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2a46df, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2a46df, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0214.573] FindClose (in: hFindFile=0x24e8c0 | out: hFindFile=0x24e8c0) returned 1 [0214.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0214.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2276b8 | out: hHeap=0x1f0000) returned 1 [0214.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604c8 | out: hHeap=0x1f0000) returned 1 [0214.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234980 | out: hHeap=0x1f0000) returned 1 [0214.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234860 [0214.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0214.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2276b8 [0214.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2861a8 [0214.574] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\et-EE\\*", lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05df011, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e6c0 [0214.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286c48 [0214.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2861a8 | out: hHeap=0x1f0000) returned 1 [0214.574] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0214.574] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05df011, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2861a8 [0214.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286c48 | out: hHeap=0x1f0000) returned 1 [0214.574] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0214.574] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0214.574] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0214.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0214.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286890 [0214.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0214.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286890 | out: hHeap=0x1f0000) returned 1 [0214.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2861a8 | out: hHeap=0x1f0000) returned 1 [0214.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0214.575] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\et-EE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\et-ee\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.575] GetLastError () returned 0x5 [0214.575] GetLastError () returned 0x5 [0214.575] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0214.575] FindClose (in: hFindFile=0x24e6c0 | out: hFindFile=0x24e6c0) returned 1 [0214.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0214.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2276b8 | out: hHeap=0x1f0000) returned 1 [0214.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0214.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234860 | out: hHeap=0x1f0000) returned 1 [0214.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346b0 [0214.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0214.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2276b8 [0214.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2863c8 [0214.576] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fi-FI\\*", lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05df7b6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24eb00 [0214.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286670 [0214.576] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2863c8 | out: hHeap=0x1f0000) returned 1 [0214.576] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0214.576] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05df7b6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2861a8 [0214.576] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286670 | out: hHeap=0x1f0000) returned 1 [0214.576] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0214.576] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0214.576] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e100c60, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e100c60, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e100c60, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0214.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2607c0 [0214.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2864d8 [0214.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0214.576] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2864d8 | out: hHeap=0x1f0000) returned 1 [0214.576] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2861a8 | out: hHeap=0x1f0000) returned 1 [0214.576] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607c0 | out: hHeap=0x1f0000) returned 1 [0214.577] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fi-FI\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fi-fi\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.577] GetLastError () returned 0x5 [0214.577] GetLastError () returned 0x5 [0214.577] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e100c60, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e100c60, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e100c60, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0214.577] FindClose (in: hFindFile=0x24eb00 | out: hFindFile=0x24eb00) returned 1 [0214.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0214.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2276b8 | out: hHeap=0x1f0000) returned 1 [0214.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0214.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346b0 | out: hHeap=0x1f0000) returned 1 [0214.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234a58 [0214.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260518 [0214.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2276b8 [0214.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286890 [0214.577] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fr-CA\\*", lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0635c03, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e8c0 [0214.578] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2863c8 [0214.578] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286890 | out: hHeap=0x1f0000) returned 1 [0214.578] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0214.578] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0635c03, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.578] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2861a8 [0214.578] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2863c8 | out: hHeap=0x1f0000) returned 1 [0214.578] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0214.578] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0214.578] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e126ecb, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e126ecb, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e126ecb, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0214.578] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604c8 [0214.578] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2863c8 [0214.578] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0214.578] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2863c8 | out: hHeap=0x1f0000) returned 1 [0214.578] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2861a8 | out: hHeap=0x1f0000) returned 1 [0214.578] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604c8 | out: hHeap=0x1f0000) returned 1 [0214.578] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fr-CA\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fr-ca\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.579] GetLastError () returned 0x5 [0214.579] GetLastError () returned 0x5 [0214.579] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e126ecb, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e126ecb, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e126ecb, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0214.579] FindClose (in: hFindFile=0x24e8c0 | out: hFindFile=0x24e8c0) returned 1 [0214.579] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0214.579] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2276b8 | out: hHeap=0x1f0000) returned 1 [0214.579] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0214.579] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234a58 | out: hHeap=0x1f0000) returned 1 [0214.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234ae8 [0214.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260518 [0214.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2276b8 [0214.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286890 [0214.579] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fr-FR\\*", lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06369df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e8c0 [0214.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286670 [0214.580] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286890 | out: hHeap=0x1f0000) returned 1 [0214.580] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0214.580] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06369df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2861a8 [0214.580] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286670 | out: hHeap=0x1f0000) returned 1 [0214.580] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0214.580] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0214.580] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e100c60, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e100c60, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e100c60, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0214.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0214.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2863c8 [0214.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0214.580] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2863c8 | out: hHeap=0x1f0000) returned 1 [0214.580] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2861a8 | out: hHeap=0x1f0000) returned 1 [0214.580] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0214.580] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fr-FR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fr-fr\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.580] GetLastError () returned 0x5 [0214.581] GetLastError () returned 0x5 [0214.581] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e100c60, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e100c60, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e100c60, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0215.007] FindClose (in: hFindFile=0x24e8c0 | out: hFindFile=0x24e8c0) returned 1 [0215.007] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0215.007] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2276b8 | out: hHeap=0x1f0000) returned 1 [0215.007] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0215.007] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234ae8 | out: hHeap=0x1f0000) returned 1 [0215.007] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234818 [0215.007] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0215.007] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x261cc0 [0215.007] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0215.008] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\*", lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0637839, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e9c0 [0215.008] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0215.008] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0215.008] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0215.008] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0637839, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.008] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0215.008] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0215.008] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0215.008] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0215.008] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0638633, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="auxpad", cAlternateFileName="")) returned 1 [0215.008] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0215.009] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x236818 [0215.009] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0215.009] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0215.009] lstrcmpW (lpString1="auxpad", lpString2=".") returned 1 [0215.009] lstrcmpW (lpString1="auxpad", lpString2="..") returned 1 [0215.009] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x205150 [0215.009] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a4d0 [0215.009] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="auxpad.xml", cAlternateFileName="")) returned 1 [0215.009] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260900 [0215.009] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0215.009] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x229418 [0215.009] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0215.009] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236818 | out: hHeap=0x1f0000) returned 1 [0215.009] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260900 | out: hHeap=0x1f0000) returned 1 [0215.010] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.010] GetLastError () returned 0x5 [0215.010] GetLastError () returned 0x5 [0215.010] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0638c00, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="insert", cAlternateFileName="")) returned 1 [0215.010] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0215.011] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x236818 [0215.011] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0215.011] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0215.011] lstrcmpW (lpString1="insert", lpString2=".") returned 1 [0215.011] lstrcmpW (lpString1="insert", lpString2="..") returned 1 [0215.011] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2f0 [0215.011] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219e40 [0215.011] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205150 | out: hHeap=0x1f0000) returned 1 [0215.011] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="insert.xml", cAlternateFileName="")) returned 1 [0215.011] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260838 [0215.011] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0215.011] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x229418 [0215.011] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0215.011] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236818 | out: hHeap=0x1f0000) returned 1 [0215.012] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260838 | out: hHeap=0x1f0000) returned 1 [0215.012] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\insert.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.012] GetLastError () returned 0x5 [0215.012] GetLastError () returned 0x5 [0215.012] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa063932e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="keypad", cAlternateFileName="")) returned 1 [0215.012] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0215.012] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x236818 [0215.013] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0215.013] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0215.013] lstrcmpW (lpString1="keypad", lpString2=".") returned 1 [0215.013] lstrcmpW (lpString1="keypad", lpString2="..") returned 1 [0215.013] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x48) returned 0x226288 [0215.013] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a230 [0215.013] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0215.013] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="keypad.xml", cAlternateFileName="")) returned 1 [0215.013] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260658 [0215.013] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0215.013] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x229418 [0215.013] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0215.014] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236818 | out: hHeap=0x1f0000) returned 1 [0215.014] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260658 | out: hHeap=0x1f0000) returned 1 [0215.014] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.014] GetLastError () returned 0x5 [0215.014] GetLastError () returned 0x5 [0215.015] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cd023, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="main", cAlternateFileName="")) returned 1 [0215.015] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0215.015] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0215.015] lstrcmpW (lpString1="main", lpString2=".") returned 1 [0215.015] lstrcmpW (lpString1="main", lpString2="..") returned 1 [0215.015] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235b78 [0215.015] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0215.015] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226288 | out: hHeap=0x1f0000) returned 1 [0215.015] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xadda, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.xml", cAlternateFileName="")) returned 1 [0215.015] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260518 [0215.015] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0215.015] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x236818 [0215.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0215.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0215.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0215.016] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.016] GetLastError () returned 0x5 [0215.016] GetLastError () returned 0x5 [0215.016] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cdb88, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskclearui", cAlternateFileName="OSKCLE~1")) returned 1 [0215.017] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260518 [0215.017] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0215.017] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x229418 [0215.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0215.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236818 | out: hHeap=0x1f0000) returned 1 [0215.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0215.017] lstrcmpW (lpString1="oskclearui", lpString2=".") returned 1 [0215.017] lstrcmpW (lpString1="oskclearui", lpString2="..") returned 1 [0215.017] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0215.017] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219ee8 [0215.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0215.017] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskclearui.xml", cAlternateFileName="")) returned 1 [0215.017] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0215.018] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0215.018] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x236818 [0215.018] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0215.018] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0215.018] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0215.023] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskclearui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.023] GetLastError () returned 0x5 [0215.023] GetLastError () returned 0x5 [0215.024] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ce328, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskmenu", cAlternateFileName="")) returned 1 [0215.024] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0215.024] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x229418 [0215.024] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0215.024] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236818 | out: hHeap=0x1f0000) returned 1 [0215.024] lstrcmpW (lpString1="oskmenu", lpString2=".") returned 1 [0215.024] lstrcmpW (lpString1="oskmenu", lpString2="..") returned 1 [0215.024] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x232ba8 [0215.024] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3fbc74, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskmenu.xml", cAlternateFileName="")) returned 1 [0215.024] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260900 [0215.024] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0215.024] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x236818 [0215.024] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0215.024] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0215.024] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260900 | out: hHeap=0x1f0000) returned 1 [0215.025] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.025] GetLastError () returned 0x5 [0215.025] GetLastError () returned 0x5 [0215.025] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ce7a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknav", cAlternateFileName="")) returned 1 [0215.025] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0215.025] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x229418 [0215.025] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0215.025] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236818 | out: hHeap=0x1f0000) returned 1 [0215.025] lstrcmpW (lpString1="osknav", lpString2=".") returned 1 [0215.025] lstrcmpW (lpString1="osknav", lpString2="..") returned 1 [0215.026] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd8) returned 0x236818 [0215.026] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x233430 [0215.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0215.026] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3fbc74, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknav.xml", cAlternateFileName="")) returned 1 [0215.026] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260900 [0215.026] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0215.026] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x2294f8 [0215.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0215.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0215.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260900 | out: hHeap=0x1f0000) returned 1 [0215.027] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknav.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.027] GetLastError () returned 0x5 [0215.027] GetLastError () returned 0x5 [0215.027] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ceb7f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknumpad", cAlternateFileName="OSKNUM~1")) returned 1 [0215.027] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260540 [0215.027] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0215.027] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x229418 [0215.027] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0215.027] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2294f8 | out: hHeap=0x1f0000) returned 1 [0215.027] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0215.027] lstrcmpW (lpString1="osknumpad", lpString2=".") returned 1 [0215.027] lstrcmpW (lpString1="osknumpad", lpString2="..") returned 1 [0215.028] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x233970 [0215.028] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknumpad.xml", cAlternateFileName="")) returned 1 [0215.028] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605b8 [0215.028] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0215.028] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x2294f8 [0215.028] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0215.028] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0215.028] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0215.028] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.029] GetLastError () returned 0x5 [0215.029] GetLastError () returned 0x5 [0215.029] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cef41, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskpred", cAlternateFileName="")) returned 1 [0215.029] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0215.029] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x229418 [0215.029] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0215.029] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2294f8 | out: hHeap=0x1f0000) returned 1 [0215.029] lstrcmpW (lpString1="oskpred", lpString2=".") returned 1 [0215.029] lstrcmpW (lpString1="oskpred", lpString2="..") returned 1 [0215.029] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x233628 [0215.029] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskpred.xml", cAlternateFileName="")) returned 1 [0215.030] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260770 [0215.030] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0215.030] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x2294f8 [0215.030] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0215.030] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0215.030] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0215.030] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.030] GetLastError () returned 0x5 [0215.030] GetLastError () returned 0x5 [0215.030] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cf371, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="symbols", cAlternateFileName="")) returned 1 [0215.031] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0215.031] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x229418 [0215.031] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0215.031] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2294f8 | out: hHeap=0x1f0000) returned 1 [0215.031] lstrcmpW (lpString1="symbols", lpString2=".") returned 1 [0215.031] lstrcmpW (lpString1="symbols", lpString2="..") returned 1 [0215.031] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x138) returned 0x2294f8 [0215.031] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x232ef0 [0215.031] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236818 | out: hHeap=0x1f0000) returned 1 [0215.031] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x24f, dwReserved0=0x0, dwReserved1=0x0, cFileName="symbols.xml", cAlternateFileName="")) returned 1 [0215.031] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0215.032] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0215.032] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x236818 [0215.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0215.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0215.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0215.032] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.033] GetLastError () returned 0x5 [0215.033] GetLastError () returned 0x5 [0215.033] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x24f, dwReserved0=0x0, dwReserved1=0x0, cFileName="symbols.xml", cAlternateFileName="")) returned 0 [0215.033] FindClose (in: hFindFile=0x24e9c0 | out: hFindFile=0x24e9c0) returned 1 [0215.033] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234500 [0215.033] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605e0 [0215.033] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2634a8 [0215.034] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x233580 [0215.034] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\*", lpFindFileData=0x1fde300 | out: lpFindFileData=0x1fde300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0638633, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e680 [0215.034] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x233a18 [0215.034] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233580 | out: hHeap=0x1f0000) returned 1 [0215.034] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0215.035] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1fde300 | out: lpFindFileData=0x1fde300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0638633, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.035] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x233580 [0215.035] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233a18 | out: hHeap=0x1f0000) returned 1 [0215.035] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0215.035] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0215.035] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1fde300 | out: lpFindFileData=0x1fde300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x59a, dwReserved0=0x0, dwReserved1=0x0, cFileName="auxbase.xml", cAlternateFileName="")) returned 1 [0215.035] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260770 [0215.035] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x2336d0 [0215.035] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xee) returned 0x22b018 [0215.035] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2336d0 | out: hHeap=0x1f0000) returned 1 [0215.035] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233580 | out: hHeap=0x1f0000) returned 1 [0215.036] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0215.036] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde0c8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.036] GetLastError () returned 0x5 [0215.036] GetLastError () returned 0x5 [0215.036] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1fde300 | out: lpFindFileData=0x1fde300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x59a, dwReserved0=0x0, dwReserved1=0x0, cFileName="auxbase.xml", cAlternateFileName="")) returned 0 [0215.036] FindClose (in: hFindFile=0x24e680 | out: hFindFile=0x24e680) returned 1 [0215.037] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b018 | out: hHeap=0x1f0000) returned 1 [0215.037] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2634a8 | out: hHeap=0x1f0000) returned 1 [0215.037] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605e0 | out: hHeap=0x1f0000) returned 1 [0215.037] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234500 | out: hHeap=0x1f0000) returned 1 [0215.037] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234788 [0215.037] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260900 [0215.037] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262980 [0215.037] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x2336d0 [0215.037] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\*", lpFindFileData=0x1fde300 | out: lpFindFileData=0x1fde300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0638c00, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ea00 [0215.037] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x233580 [0215.038] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2336d0 | out: hHeap=0x1f0000) returned 1 [0215.038] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0215.038] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1fde300 | out: lpFindFileData=0x1fde300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0638c00, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.038] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x233820 [0215.038] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233580 | out: hHeap=0x1f0000) returned 1 [0215.038] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0215.038] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0215.038] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1fde300 | out: lpFindFileData=0x1fde300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x387, dwReserved0=0x0, dwReserved1=0x0, cFileName="insertbase.xml", cAlternateFileName="")) returned 1 [0215.038] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0215.038] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x233778 [0215.038] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xee) returned 0x22b018 [0215.038] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233778 | out: hHeap=0x1f0000) returned 1 [0215.038] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233820 | out: hHeap=0x1f0000) returned 1 [0215.038] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0215.039] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\insertbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\insert\\insertbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde0c8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.039] GetLastError () returned 0x5 [0215.039] GetLastError () returned 0x5 [0215.039] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1fde300 | out: lpFindFileData=0x1fde300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x387, dwReserved0=0x0, dwReserved1=0x0, cFileName="insertbase.xml", cAlternateFileName="")) returned 0 [0215.039] FindClose (in: hFindFile=0x24ea00 | out: hFindFile=0x24ea00) returned 1 [0215.039] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b018 | out: hHeap=0x1f0000) returned 1 [0215.039] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262980 | out: hHeap=0x1f0000) returned 1 [0215.039] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260900 | out: hHeap=0x1f0000) returned 1 [0215.039] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234788 | out: hHeap=0x1f0000) returned 1 [0215.039] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234740 [0215.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2607c0 [0215.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262fe0 [0215.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x233778 [0215.040] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\*", lpFindFileData=0x1fde300 | out: lpFindFileData=0x1fde300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa063932e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e5c0 [0215.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x2334d8 [0215.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233778 | out: hHeap=0x1f0000) returned 1 [0215.040] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0215.040] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1fde300 | out: lpFindFileData=0x1fde300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa063932e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x233238 [0215.041] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2334d8 | out: hHeap=0x1f0000) returned 1 [0215.041] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0215.041] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0215.041] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1fde300 | out: lpFindFileData=0x1fde300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x180, dwReserved0=0x0, dwReserved1=0x0, cFileName="ea.xml", cAlternateFileName="")) returned 1 [0215.041] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x2334d8 [0215.041] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233238 | out: hHeap=0x1f0000) returned 1 [0215.041] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde0c8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.041] GetLastError () returned 0x5 [0215.041] GetLastError () returned 0x5 [0215.041] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1fde300 | out: lpFindFileData=0x1fde300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x387, dwReserved0=0x0, dwReserved1=0x0, cFileName="keypadbase.xml", cAlternateFileName="")) returned 1 [0215.042] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260838 [0215.042] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x233580 [0215.042] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xee) returned 0x22b018 [0215.042] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233580 | out: hHeap=0x1f0000) returned 1 [0215.042] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2334d8 | out: hHeap=0x1f0000) returned 1 [0215.042] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260838 | out: hHeap=0x1f0000) returned 1 [0215.042] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde0c8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.042] GetLastError () returned 0x5 [0215.043] GetLastError () returned 0x5 [0215.043] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1fde300 | out: lpFindFileData=0x1fde300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x188, dwReserved0=0x0, dwReserved1=0x0, cFileName="kor-kor.xml", cAlternateFileName="")) returned 1 [0215.043] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0215.043] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x233238 [0215.043] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xee) returned 0x22b110 [0215.043] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233238 | out: hHeap=0x1f0000) returned 1 [0215.043] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b018 | out: hHeap=0x1f0000) returned 1 [0215.043] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0215.043] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde0c8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.044] GetLastError () returned 0x5 [0215.044] GetLastError () returned 0x5 [0215.044] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1fde300 | out: lpFindFileData=0x1fde300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x188, dwReserved0=0x0, dwReserved1=0x0, cFileName="kor-kor.xml", cAlternateFileName="")) returned 0 [0215.044] FindClose (in: hFindFile=0x24e5c0 | out: hFindFile=0x24e5c0) returned 1 [0215.044] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b110 | out: hHeap=0x1f0000) returned 1 [0215.044] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262fe0 | out: hHeap=0x1f0000) returned 1 [0215.044] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607c0 | out: hHeap=0x1f0000) returned 1 [0215.045] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234740 | out: hHeap=0x1f0000) returned 1 [0215.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234a10 [0215.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0215.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x263310 [0215.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x233a18 [0215.045] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\*", lpFindFileData=0x1fde300 | out: lpFindFileData=0x1fde300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cd023, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e9c0 [0215.046] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0215.046] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x229418 [0215.046] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0215.046] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233a18 | out: hHeap=0x1f0000) returned 1 [0215.046] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0215.046] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1fde300 | out: lpFindFileData=0x1fde300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cd023, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.046] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0215.046] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x22b018 [0215.046] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0215.046] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0215.046] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0215.047] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0215.047] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1fde300 | out: lpFindFileData=0x1fde300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd05, dwReserved0=0x0, dwReserved1=0x0, cFileName="base.xml", cAlternateFileName="")) returned 1 [0215.047] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260658 [0215.047] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0215.047] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x229418 [0215.047] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0215.047] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b018 | out: hHeap=0x1f0000) returned 1 [0215.047] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260658 | out: hHeap=0x1f0000) returned 1 [0215.047] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde0c8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.047] GetLastError () returned 0x5 [0215.047] GetLastError () returned 0x5 [0215.048] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1fde300 | out: lpFindFileData=0x1fde300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xf7, dwReserved0=0x0, dwReserved1=0x0, cFileName="baseAltGr_rtl.xml", cAlternateFileName="")) returned 1 [0215.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0215.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0215.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x22b018 [0215.048] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0215.048] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0215.048] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0215.048] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\baseAltGr_rtl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\basealtgr_rtl.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde0c8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.048] GetLastError () returned 0x5 [0215.048] GetLastError () returned 0x5 [0215.048] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1fde300 | out: lpFindFileData=0x1fde300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xdc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_altgr.xml", cAlternateFileName="")) returned 1 [0215.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605e0 [0215.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0215.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x229418 [0215.049] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0215.049] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b018 | out: hHeap=0x1f0000) returned 1 [0215.049] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605e0 | out: hHeap=0x1f0000) returned 1 [0215.049] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_altgr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_altgr.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde0c8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.049] GetLastError () returned 0x5 [0215.049] GetLastError () returned 0x5 [0215.049] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1fde300 | out: lpFindFileData=0x1fde300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xdc9, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_ca.xml", cAlternateFileName="")) returned 1 [0215.049] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608b0 [0215.049] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0215.049] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x220748 [0215.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0215.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0215.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608b0 | out: hHeap=0x1f0000) returned 1 [0215.450] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_ca.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_ca.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde0c8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.450] GetLastError () returned 0x5 [0215.450] GetLastError () returned 0x5 [0215.451] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1fde300 | out: lpFindFileData=0x1fde300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_heb.xml", cAlternateFileName="")) returned 1 [0215.451] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238488 [0215.451] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0215.451] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x229418 [0215.451] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0215.451] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220748 | out: hHeap=0x1f0000) returned 1 [0215.451] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238488 | out: hHeap=0x1f0000) returned 1 [0215.451] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_heb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_heb.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde0c8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.451] GetLastError () returned 0x5 [0215.452] GetLastError () returned 0x5 [0215.452] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1fde300 | out: lpFindFileData=0x1fde300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x324, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_jpn.xml", cAlternateFileName="")) returned 1 [0215.452] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0215.452] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0215.452] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x220748 [0215.452] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0215.452] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0215.452] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0215.452] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_jpn.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_jpn.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde0c8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.452] GetLastError () returned 0x5 [0215.452] GetLastError () returned 0x5 [0215.452] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1fde300 | out: lpFindFileData=0x1fde300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_kor.xml", cAlternateFileName="")) returned 1 [0215.453] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0215.453] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0215.453] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x229418 [0215.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0215.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220748 | out: hHeap=0x1f0000) returned 1 [0215.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0215.453] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_kor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_kor.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde0c8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.453] GetLastError () returned 0x5 [0215.453] GetLastError () returned 0x5 [0215.453] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1fde300 | out: lpFindFileData=0x1fde300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x269, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_rtl.xml", cAlternateFileName="")) returned 1 [0215.453] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0215.453] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0215.453] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x220748 [0215.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0215.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0215.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0215.454] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_rtl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_rtl.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde0c8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.454] GetLastError () returned 0x5 [0215.454] GetLastError () returned 0x5 [0215.454] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1fde300 | out: lpFindFileData=0x1fde300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x40e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp.xml", cAlternateFileName="")) returned 1 [0215.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238438 [0215.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0215.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x229418 [0215.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0215.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220748 | out: hHeap=0x1f0000) returned 1 [0215.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238438 | out: hHeap=0x1f0000) returned 1 [0215.455] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\ja-jp.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\ja-jp.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde0c8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.455] GetLastError () returned 0x5 [0215.455] GetLastError () returned 0x5 [0215.455] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1fde300 | out: lpFindFileData=0x1fde300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3af9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-kr.xml", cAlternateFileName="")) returned 1 [0215.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380f0 [0215.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0215.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x220748 [0215.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0215.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0215.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380f0 | out: hHeap=0x1f0000) returned 1 [0215.456] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\ko-kr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\ko-kr.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde0c8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.456] GetLastError () returned 0x5 [0215.456] GetLastError () returned 0x5 [0215.456] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1fde300 | out: lpFindFileData=0x1fde300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x264b, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-changjei.xml", cAlternateFileName="")) returned 1 [0215.456] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0215.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0215.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x229418 [0215.457] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0215.457] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220748 | out: hHeap=0x1f0000) returned 1 [0215.457] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0215.457] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-changjei.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-changjei.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde0c8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.457] GetLastError () returned 0x5 [0215.457] GetLastError () returned 0x5 [0215.457] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1fde300 | out: lpFindFileData=0x1fde300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3fbc74, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2b3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-dayi.xml", cAlternateFileName="")) returned 1 [0215.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0215.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0215.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x220748 [0215.457] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0215.457] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0215.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0215.458] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-dayi.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-dayi.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde0c8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.458] GetLastError () returned 0x5 [0215.458] GetLastError () returned 0x5 [0215.458] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1fde300 | out: lpFindFileData=0x1fde300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2ac3, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-phonetic.xml", cAlternateFileName="")) returned 1 [0215.458] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380c8 [0215.458] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0215.458] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x229418 [0215.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0215.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220748 | out: hHeap=0x1f0000) returned 1 [0215.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380c8 | out: hHeap=0x1f0000) returned 1 [0215.459] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde0c8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.459] GetLastError () returned 0x5 [0215.459] GetLastError () returned 0x5 [0215.459] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1fde300 | out: lpFindFileData=0x1fde300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2ac3, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-phonetic.xml", cAlternateFileName="")) returned 0 [0215.459] FindClose (in: hFindFile=0x24e9c0 | out: hFindFile=0x24e9c0) returned 1 [0215.460] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0215.460] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263310 | out: hHeap=0x1f0000) returned 1 [0215.460] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0215.460] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234a10 | out: hHeap=0x1f0000) returned 1 [0215.460] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234500 [0215.460] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238438 [0215.461] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2617f8 [0215.461] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x233ac0 [0215.461] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\*", lpFindFileData=0x1fde300 | out: lpFindFileData=0x1fde300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cdb88, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ed40 [0215.461] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x2336d0 [0215.461] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233ac0 | out: hHeap=0x1f0000) returned 1 [0215.461] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0215.461] FindNextFileW (in: hFindFile=0x24ed40, lpFindFileData=0x1fde300 | out: lpFindFileData=0x1fde300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cdb88, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.461] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x232da0 [0215.461] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2336d0 | out: hHeap=0x1f0000) returned 1 [0215.461] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0215.461] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0215.461] FindNextFileW (in: hFindFile=0x24ed40, lpFindFileData=0x1fde300 | out: lpFindFileData=0x1fde300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskclearuibase.xml", cAlternateFileName="")) returned 1 [0215.461] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282a0 [0215.461] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x232f98 [0215.461] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xee) returned 0x220a58 [0215.461] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232f98 | out: hHeap=0x1f0000) returned 1 [0215.461] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232da0 | out: hHeap=0x1f0000) returned 1 [0215.462] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0215.462] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\oskclearuibase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\oskclearuibase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde0c8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.462] GetLastError () returned 0x5 [0215.462] GetLastError () returned 0x5 [0215.462] FindNextFileW (in: hFindFile=0x24ed40, lpFindFileData=0x1fde300 | out: lpFindFileData=0x1fde300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskclearuibase.xml", cAlternateFileName="")) returned 0 [0215.462] FindClose (in: hFindFile=0x24ed40 | out: hFindFile=0x24ed40) returned 1 [0215.462] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220a58 | out: hHeap=0x1f0000) returned 1 [0215.462] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2617f8 | out: hHeap=0x1f0000) returned 1 [0215.463] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238438 | out: hHeap=0x1f0000) returned 1 [0215.463] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234500 | out: hHeap=0x1f0000) returned 1 [0215.463] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2344b8 [0215.463] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0215.463] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262cb0 [0215.463] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x2334d8 [0215.463] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\*", lpFindFileData=0x1fde300 | out: lpFindFileData=0x1fde300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ce328, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ea80 [0215.463] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x232da0 [0215.463] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2334d8 | out: hHeap=0x1f0000) returned 1 [0215.463] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0215.463] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1fde300 | out: lpFindFileData=0x1fde300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ce328, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.463] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x232cf8 [0215.463] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232da0 | out: hHeap=0x1f0000) returned 1 [0215.463] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0215.463] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0215.463] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1fde300 | out: lpFindFileData=0x1fde300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskmenubase.xml", cAlternateFileName="")) returned 1 [0215.463] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238438 [0215.464] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x232f98 [0215.464] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xee) returned 0x220a58 [0215.464] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232f98 | out: hHeap=0x1f0000) returned 1 [0215.464] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232cf8 | out: hHeap=0x1f0000) returned 1 [0215.464] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238438 | out: hHeap=0x1f0000) returned 1 [0215.464] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde0c8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.464] GetLastError () returned 0x5 [0215.464] GetLastError () returned 0x5 [0215.464] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1fde300 | out: lpFindFileData=0x1fde300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskmenubase.xml", cAlternateFileName="")) returned 0 [0215.464] FindClose (in: hFindFile=0x24ea80 | out: hFindFile=0x24ea80) returned 1 [0215.465] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220a58 | out: hHeap=0x1f0000) returned 1 [0215.465] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262cb0 | out: hHeap=0x1f0000) returned 1 [0215.465] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0215.465] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2344b8 | out: hHeap=0x1f0000) returned 1 [0215.465] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2348f0 [0215.465] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0215.465] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2627e8 [0215.465] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x2334d8 [0215.465] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav\\*", lpFindFileData=0x1fde300 | out: lpFindFileData=0x1fde300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ce7a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ed00 [0215.465] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x233778 [0215.465] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2334d8 | out: hHeap=0x1f0000) returned 1 [0215.465] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0215.465] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1fde300 | out: lpFindFileData=0x1fde300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ce7a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.466] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x233ac0 [0215.466] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233778 | out: hHeap=0x1f0000) returned 1 [0215.466] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0215.466] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0215.466] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1fde300 | out: lpFindFileData=0x1fde300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x42d, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknavbase.xml", cAlternateFileName="")) returned 1 [0215.466] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0215.466] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x232c50 [0215.466] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xee) returned 0x220a58 [0215.466] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232c50 | out: hHeap=0x1f0000) returned 1 [0215.466] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233ac0 | out: hHeap=0x1f0000) returned 1 [0215.466] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0215.466] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav\\osknavbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknav\\osknavbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde0c8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.467] GetLastError () returned 0x5 [0215.467] GetLastError () returned 0x5 [0215.467] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1fde300 | out: lpFindFileData=0x1fde300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x42d, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknavbase.xml", cAlternateFileName="")) returned 0 [0215.467] FindClose (in: hFindFile=0x24ed00 | out: hFindFile=0x24ed00) returned 1 [0215.467] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220a58 | out: hHeap=0x1f0000) returned 1 [0215.467] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2627e8 | out: hHeap=0x1f0000) returned 1 [0215.467] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0215.467] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2348f0 | out: hHeap=0x1f0000) returned 1 [0215.467] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234980 [0215.467] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238438 [0215.467] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262650 [0215.467] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x232f98 [0215.467] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\*", lpFindFileData=0x1fde300 | out: lpFindFileData=0x1fde300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ceb7f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e7c0 [0215.468] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x232c50 [0215.468] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232f98 | out: hHeap=0x1f0000) returned 1 [0215.468] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0215.468] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x1fde300 | out: lpFindFileData=0x1fde300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ceb7f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.468] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x233190 [0215.468] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232c50 | out: hHeap=0x1f0000) returned 1 [0215.468] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0215.468] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0215.468] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x1fde300 | out: lpFindFileData=0x1fde300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x73d, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknumpadbase.xml", cAlternateFileName="")) returned 1 [0215.468] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282a0 [0215.468] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x2332e0 [0215.468] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xee) returned 0x220a58 [0215.468] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2332e0 | out: hHeap=0x1f0000) returned 1 [0215.469] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233190 | out: hHeap=0x1f0000) returned 1 [0215.469] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0215.469] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde0c8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.469] GetLastError () returned 0x5 [0215.469] GetLastError () returned 0x5 [0215.469] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x1fde300 | out: lpFindFileData=0x1fde300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x73d, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknumpadbase.xml", cAlternateFileName="")) returned 0 [0215.469] FindClose (in: hFindFile=0x24e7c0 | out: hFindFile=0x24e7c0) returned 1 [0215.470] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220a58 | out: hHeap=0x1f0000) returned 1 [0215.470] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262650 | out: hHeap=0x1f0000) returned 1 [0215.470] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238438 | out: hHeap=0x1f0000) returned 1 [0215.470] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234980 | out: hHeap=0x1f0000) returned 1 [0215.470] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234a10 [0215.470] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0215.470] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2634a8 [0215.470] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x2334d8 [0215.470] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\*", lpFindFileData=0x1fde300 | out: lpFindFileData=0x1fde300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cef41, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ea80 [0215.470] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x233ac0 [0215.471] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2334d8 | out: hHeap=0x1f0000) returned 1 [0215.471] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0215.471] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1fde300 | out: lpFindFileData=0x1fde300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cef41, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.471] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x233190 [0215.471] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233ac0 | out: hHeap=0x1f0000) returned 1 [0215.471] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0215.471] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0215.471] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1fde300 | out: lpFindFileData=0x1fde300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x39c, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskpredbase.xml", cAlternateFileName="")) returned 1 [0215.471] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0215.472] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x232e48 [0215.472] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xee) returned 0x220a58 [0215.472] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232e48 | out: hHeap=0x1f0000) returned 1 [0215.472] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233190 | out: hHeap=0x1f0000) returned 1 [0215.472] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0215.473] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde0c8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.473] GetLastError () returned 0x5 [0215.473] GetLastError () returned 0x5 [0215.473] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1fde300 | out: lpFindFileData=0x1fde300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x39c, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskpredbase.xml", cAlternateFileName="")) returned 0 [0215.473] FindClose (in: hFindFile=0x24ea80 | out: hFindFile=0x24ea80) returned 1 [0215.474] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220a58 | out: hHeap=0x1f0000) returned 1 [0215.474] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2634a8 | out: hHeap=0x1f0000) returned 1 [0215.474] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0215.474] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234a10 | out: hHeap=0x1f0000) returned 1 [0215.474] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346b0 [0215.474] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0215.474] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262fe0 [0215.474] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x232cf8 [0215.474] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\*", lpFindFileData=0x1fde300 | out: lpFindFileData=0x1fde300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cf371, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24eb40 [0215.475] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x233190 [0215.475] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232cf8 | out: hHeap=0x1f0000) returned 1 [0215.475] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0215.475] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x1fde300 | out: lpFindFileData=0x1fde300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cf371, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.475] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x232e48 [0215.475] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233190 | out: hHeap=0x1f0000) returned 1 [0215.475] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0215.475] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0215.475] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x1fde300 | out: lpFindFileData=0x1fde300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3fbc74, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ea-sym.xml", cAlternateFileName="")) returned 1 [0215.475] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0215.475] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x232f98 [0215.475] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xee) returned 0x220a58 [0215.475] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232f98 | out: hHeap=0x1f0000) returned 1 [0215.476] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232e48 | out: hHeap=0x1f0000) returned 1 [0215.476] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0215.476] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde0c8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.476] GetLastError () returned 0x5 [0215.476] GetLastError () returned 0x5 [0215.476] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x1fde300 | out: lpFindFileData=0x1fde300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x325, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp-sym.xml", cAlternateFileName="")) returned 1 [0215.476] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0215.476] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x233040 [0215.476] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xee) returned 0x217038 [0215.477] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233040 | out: hHeap=0x1f0000) returned 1 [0215.477] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220a58 | out: hHeap=0x1f0000) returned 1 [0215.477] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0215.477] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde0c8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.477] GetLastError () returned 0x5 [0215.477] GetLastError () returned 0x5 [0215.477] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x1fde300 | out: lpFindFileData=0x1fde300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xeef, dwReserved0=0x0, dwReserved1=0x0, cFileName="symbase.xml", cAlternateFileName="")) returned 1 [0215.478] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0215.478] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x232e48 [0215.478] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xee) returned 0x220a58 [0215.478] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232e48 | out: hHeap=0x1f0000) returned 1 [0215.478] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0215.478] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0215.478] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde0c8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.478] GetLastError () returned 0x5 [0215.479] GetLastError () returned 0x5 [0215.479] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x1fde300 | out: lpFindFileData=0x1fde300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xeef, dwReserved0=0x0, dwReserved1=0x0, cFileName="symbase.xml", cAlternateFileName="")) returned 0 [0215.479] FindClose (in: hFindFile=0x24eb40 | out: hFindFile=0x24eb40) returned 1 [0215.479] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220a58 | out: hHeap=0x1f0000) returned 1 [0215.479] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262fe0 | out: hHeap=0x1f0000) returned 1 [0215.479] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0215.479] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346b0 | out: hHeap=0x1f0000) returned 1 [0215.479] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236818 | out: hHeap=0x1f0000) returned 1 [0215.479] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a4d0 | out: hHeap=0x1f0000) returned 1 [0215.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219e40 | out: hHeap=0x1f0000) returned 1 [0215.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a230 | out: hHeap=0x1f0000) returned 1 [0215.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0215.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219ee8 | out: hHeap=0x1f0000) returned 1 [0215.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232ba8 | out: hHeap=0x1f0000) returned 1 [0215.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233430 | out: hHeap=0x1f0000) returned 1 [0215.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233970 | out: hHeap=0x1f0000) returned 1 [0215.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233628 | out: hHeap=0x1f0000) returned 1 [0215.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232ef0 | out: hHeap=0x1f0000) returned 1 [0215.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2294f8 | out: hHeap=0x1f0000) returned 1 [0215.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261cc0 | out: hHeap=0x1f0000) returned 1 [0215.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0215.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234818 | out: hHeap=0x1f0000) returned 1 [0215.481] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346b0 [0215.481] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238438 [0215.481] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x261b28 [0215.481] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2863c8 [0215.481] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\he-IL\\*", lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cf9a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24eb80 [0215.481] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286c48 [0215.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2863c8 | out: hHeap=0x1f0000) returned 1 [0215.482] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0215.482] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cf9a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.482] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2863c8 [0215.482] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286c48 | out: hHeap=0x1f0000) returned 1 [0215.482] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0215.482] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0215.482] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c3a52f7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3c3a52f7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3c3a52f7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0215.482] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0215.482] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286c48 [0215.482] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0215.482] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286c48 | out: hHeap=0x1f0000) returned 1 [0215.482] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2863c8 | out: hHeap=0x1f0000) returned 1 [0215.482] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0215.483] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\he-IL\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\he-il\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.483] GetLastError () returned 0x5 [0215.483] GetLastError () returned 0x5 [0215.483] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c3a52f7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3c3a52f7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3c3a52f7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0215.483] FindClose (in: hFindFile=0x24eb80 | out: hFindFile=0x24eb80) returned 1 [0215.483] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0215.483] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261b28 | out: hHeap=0x1f0000) returned 1 [0215.484] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238438 | out: hHeap=0x1f0000) returned 1 [0215.484] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346b0 | out: hHeap=0x1f0000) returned 1 [0215.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346f8 [0215.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0215.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262650 [0215.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2861a8 [0215.484] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\hr-HR\\*", lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cfce2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ec40 [0215.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286c48 [0215.484] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2861a8 | out: hHeap=0x1f0000) returned 1 [0215.485] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0215.485] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cfce2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.485] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2861a8 [0215.485] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286c48 | out: hHeap=0x1f0000) returned 1 [0215.485] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0215.485] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0215.485] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c3a52f7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3c3a52f7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3c3a52f7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0215.485] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0215.485] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286670 [0215.485] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0215.485] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286670 | out: hHeap=0x1f0000) returned 1 [0215.485] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2861a8 | out: hHeap=0x1f0000) returned 1 [0215.485] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0215.486] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\hr-HR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hr-hr\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.486] GetLastError () returned 0x5 [0215.486] GetLastError () returned 0x5 [0215.486] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c3a52f7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3c3a52f7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3c3a52f7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0215.486] FindClose (in: hFindFile=0x24ec40 | out: hFindFile=0x24ec40) returned 1 [0215.487] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0215.487] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262650 | out: hHeap=0x1f0000) returned 1 [0215.487] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0215.487] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346f8 | out: hHeap=0x1f0000) returned 1 [0215.487] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234500 [0215.487] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0215.487] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2634a8 [0215.754] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2866f8 [0215.754] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\hu-HU\\*", lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06d0656, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e7c0 [0215.755] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286890 [0215.755] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2866f8 | out: hHeap=0x1f0000) returned 1 [0215.755] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0215.755] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06d0656, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.755] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286450 [0215.755] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286890 | out: hHeap=0x1f0000) returned 1 [0215.755] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0215.755] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0215.755] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c3a52f7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3c3a52f7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3c3a52f7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0215.755] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0215.755] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286d58 [0215.756] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0215.756] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286d58 | out: hHeap=0x1f0000) returned 1 [0215.756] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286450 | out: hHeap=0x1f0000) returned 1 [0215.756] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0215.756] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\hu-HU\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hu-hu\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.756] GetLastError () returned 0x5 [0215.756] GetLastError () returned 0x5 [0215.756] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c3a52f7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3c3a52f7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3c3a52f7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0215.757] FindClose (in: hFindFile=0x24e7c0 | out: hFindFile=0x24e7c0) returned 1 [0215.757] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0215.757] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2634a8 | out: hHeap=0x1f0000) returned 1 [0215.757] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0215.757] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234500 | out: hHeap=0x1f0000) returned 1 [0215.757] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2348f0 [0215.757] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0215.757] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2617f8 [0215.757] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0215.757] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\HWRCustomization\\*", lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6eba2ec1, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0xa07693a9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6eba2ec1, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e7c0 [0215.758] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0215.758] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0215.758] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0215.758] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6eba2ec1, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0xa07693a9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6eba2ec1, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.758] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0215.758] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0215.758] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0215.758] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0215.758] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6eba2ec1, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0xa07693a9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6eba2ec1, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0215.758] FindClose (in: hFindFile=0x24e7c0 | out: hFindFile=0x24e7c0) returned 1 [0215.758] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0215.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2617f8 | out: hHeap=0x1f0000) returned 1 [0215.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0215.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2348f0 | out: hHeap=0x1f0000) returned 1 [0215.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2348f0 [0215.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0215.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262e48 [0215.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286450 [0215.759] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\it-IT\\*", lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0769b1e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e6c0 [0215.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2864d8 [0215.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286450 | out: hHeap=0x1f0000) returned 1 [0215.759] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0215.759] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0769b1e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286d58 [0215.760] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2864d8 | out: hHeap=0x1f0000) returned 1 [0215.760] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0215.760] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0215.760] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e9592f9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e9592f9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e9592f9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0215.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0215.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286670 [0215.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0215.760] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286670 | out: hHeap=0x1f0000) returned 1 [0215.760] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286d58 | out: hHeap=0x1f0000) returned 1 [0215.760] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0215.761] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\it-IT\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\it-it\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.761] GetLastError () returned 0x5 [0215.761] GetLastError () returned 0x5 [0215.761] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e9592f9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e9592f9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e9592f9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0215.762] FindClose (in: hFindFile=0x24e6c0 | out: hFindFile=0x24e6c0) returned 1 [0215.762] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0215.762] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262e48 | out: hHeap=0x1f0000) returned 1 [0215.762] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0215.762] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2348f0 | out: hHeap=0x1f0000) returned 1 [0215.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234500 [0215.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0215.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x263178 [0215.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2861a8 [0215.762] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ja-JP\\*", lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076a026, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e900 [0215.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286d58 [0215.763] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2861a8 | out: hHeap=0x1f0000) returned 1 [0215.763] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0215.763] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076a026, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286890 [0215.763] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286d58 | out: hHeap=0x1f0000) returned 1 [0215.763] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0215.763] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0215.763] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e9592f9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e9592f9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e9592f9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0215.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0215.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286d58 [0215.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0215.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286d58 | out: hHeap=0x1f0000) returned 1 [0215.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286890 | out: hHeap=0x1f0000) returned 1 [0215.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0215.764] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ja-JP\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ja-jp\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.764] GetLastError () returned 0x5 [0215.765] GetLastError () returned 0x5 [0215.765] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e9592f9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e9592f9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e9592f9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0215.765] FindClose (in: hFindFile=0x24e900 | out: hFindFile=0x24e900) returned 1 [0215.765] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0215.765] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263178 | out: hHeap=0x1f0000) returned 1 [0215.765] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0215.765] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234500 | out: hHeap=0x1f0000) returned 1 [0215.765] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234aa0 [0215.765] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0215.765] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x261e58 [0215.765] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2866f8 [0215.766] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ko-KR\\*", lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076a7a6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ed00 [0215.766] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286d58 [0215.766] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2866f8 | out: hHeap=0x1f0000) returned 1 [0215.766] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0215.766] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076a7a6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.766] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286450 [0215.766] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286d58 | out: hHeap=0x1f0000) returned 1 [0215.766] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0215.766] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0215.766] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0215.767] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0215.767] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2864d8 [0215.767] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0215.767] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2864d8 | out: hHeap=0x1f0000) returned 1 [0215.767] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286450 | out: hHeap=0x1f0000) returned 1 [0215.767] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0215.767] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ko-KR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ko-kr\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.768] GetLastError () returned 0x5 [0215.768] GetLastError () returned 0x5 [0215.768] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0215.768] FindClose (in: hFindFile=0x24ed00 | out: hFindFile=0x24ed00) returned 1 [0215.769] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0215.769] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261e58 | out: hHeap=0x1f0000) returned 1 [0215.769] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0215.769] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234aa0 | out: hHeap=0x1f0000) returned 1 [0215.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234788 [0215.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0215.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2617f8 [0215.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0215.769] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\LanguageModel\\*", lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076afd8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ea80 [0215.770] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0215.770] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0215.770] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0215.770] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076afd8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.770] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0215.770] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0215.770] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0215.770] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0215.770] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3fbc74, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="chstic.dgml", cAlternateFileName="")) returned 1 [0215.770] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0215.770] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0215.770] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x220838 [0215.770] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0215.770] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0215.770] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0215.771] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\LanguageModel\\chstic.dgml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\languagemodel\\chstic.dgml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.771] GetLastError () returned 0x5 [0215.771] GetLastError () returned 0x5 [0215.771] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3fbc74, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="chstic.dgml", cAlternateFileName="")) returned 0 [0215.771] FindClose (in: hFindFile=0x24ea80 | out: hFindFile=0x24ea80) returned 1 [0215.771] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220838 | out: hHeap=0x1f0000) returned 1 [0215.771] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2617f8 | out: hHeap=0x1f0000) returned 1 [0215.771] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0215.771] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234788 | out: hHeap=0x1f0000) returned 1 [0215.771] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2348f0 [0215.772] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0215.772] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x261e58 [0215.772] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286450 [0215.772] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\lt-LT\\*", lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076b52b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e900 [0215.772] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286d58 [0215.772] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286450 | out: hHeap=0x1f0000) returned 1 [0215.772] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0215.772] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076b52b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.772] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286890 [0215.772] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286d58 | out: hHeap=0x1f0000) returned 1 [0215.772] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0215.772] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0215.772] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0215.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0215.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286d58 [0215.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0215.773] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286d58 | out: hHeap=0x1f0000) returned 1 [0215.773] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286890 | out: hHeap=0x1f0000) returned 1 [0215.773] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0215.773] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\lt-LT\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lt-lt\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.774] GetLastError () returned 0x5 [0215.774] GetLastError () returned 0x5 [0215.774] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0215.774] FindClose (in: hFindFile=0x24e900 | out: hFindFile=0x24e900) returned 1 [0215.774] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0215.774] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261e58 | out: hHeap=0x1f0000) returned 1 [0215.774] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0215.774] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2348f0 | out: hHeap=0x1f0000) returned 1 [0215.774] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234788 [0215.774] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0215.774] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262e48 [0215.774] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286d58 [0215.775] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\lv-LV\\*", lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076ba6e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e900 [0215.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2861a8 [0215.775] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286d58 | out: hHeap=0x1f0000) returned 1 [0215.775] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0215.775] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076ba6e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286890 [0215.775] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2861a8 | out: hHeap=0x1f0000) returned 1 [0215.775] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0215.775] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0215.775] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0215.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0215.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286d58 [0215.776] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0215.776] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286d58 | out: hHeap=0x1f0000) returned 1 [0215.776] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286890 | out: hHeap=0x1f0000) returned 1 [0215.776] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0215.776] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\lv-LV\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lv-lv\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.776] GetLastError () returned 0x5 [0215.777] GetLastError () returned 0x5 [0215.777] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0215.777] FindClose (in: hFindFile=0x24e900 | out: hFindFile=0x24e900) returned 1 [0215.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0215.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262e48 | out: hHeap=0x1f0000) returned 1 [0215.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0215.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234788 | out: hHeap=0x1f0000) returned 1 [0215.777] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234788 [0215.777] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0215.777] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262e48 [0215.777] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286450 [0215.778] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\nb-NO\\*", lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076bff5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ec40 [0215.778] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2865e8 [0215.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286450 | out: hHeap=0x1f0000) returned 1 [0215.778] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0215.778] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076bff5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.778] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2861a8 [0215.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2865e8 | out: hHeap=0x1f0000) returned 1 [0215.778] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0215.778] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0215.778] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e90ce26, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e90ce26, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e90ce26, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0215.778] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0215.778] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286450 [0215.779] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0215.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286450 | out: hHeap=0x1f0000) returned 1 [0215.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2861a8 | out: hHeap=0x1f0000) returned 1 [0215.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0215.779] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\nb-NO\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nb-no\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.779] GetLastError () returned 0x5 [0215.779] GetLastError () returned 0x5 [0215.780] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e90ce26, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e90ce26, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e90ce26, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0215.780] FindClose (in: hFindFile=0x24ec40 | out: hFindFile=0x24ec40) returned 1 [0215.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0215.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262e48 | out: hHeap=0x1f0000) returned 1 [0215.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0215.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234788 | out: hHeap=0x1f0000) returned 1 [0215.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234788 [0215.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0215.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262fe0 [0215.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286450 [0215.780] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\nl-NL\\*", lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076c75d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e900 [0215.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2861a8 [0215.781] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286450 | out: hHeap=0x1f0000) returned 1 [0215.781] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0215.781] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076c75d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.781] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286450 [0215.781] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2861a8 | out: hHeap=0x1f0000) returned 1 [0215.781] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0215.781] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0215.781] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0215.781] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0215.781] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286d58 [0215.781] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0215.781] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286d58 | out: hHeap=0x1f0000) returned 1 [0215.781] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286450 | out: hHeap=0x1f0000) returned 1 [0215.781] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0215.782] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\nl-NL\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nl-nl\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.782] GetLastError () returned 0x5 [0215.782] GetLastError () returned 0x5 [0215.782] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0215.782] FindClose (in: hFindFile=0x24e900 | out: hFindFile=0x24e900) returned 1 [0215.783] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0215.783] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262fe0 | out: hHeap=0x1f0000) returned 1 [0215.783] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0215.783] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234788 | out: hHeap=0x1f0000) returned 1 [0215.783] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234788 [0215.783] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0215.783] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2617f8 [0215.783] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286450 [0215.783] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\pl-PL\\*", lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d57c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e6c0 [0215.783] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2864d8 [0215.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286450 | out: hHeap=0x1f0000) returned 1 [0215.784] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0215.784] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d57c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.784] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2861a8 [0215.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2864d8 | out: hHeap=0x1f0000) returned 1 [0215.784] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0215.784] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0215.784] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e8e6bbf, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e8e6bbf, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e8e6bbf, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0215.784] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0215.784] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2865e8 [0215.784] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0215.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2865e8 | out: hHeap=0x1f0000) returned 1 [0215.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2861a8 | out: hHeap=0x1f0000) returned 1 [0215.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0215.785] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\pl-PL\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pl-pl\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.785] GetLastError () returned 0x5 [0215.785] GetLastError () returned 0x5 [0215.785] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e8e6bbf, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e8e6bbf, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e8e6bbf, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0215.785] FindClose (in: hFindFile=0x24e6c0 | out: hFindFile=0x24e6c0) returned 1 [0215.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0215.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2617f8 | out: hHeap=0x1f0000) returned 1 [0215.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0215.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234788 | out: hHeap=0x1f0000) returned 1 [0215.786] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2349c8 [0215.786] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0215.786] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262e48 [0215.786] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2861a8 [0215.786] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\pt-BR\\*", lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d988, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ed40 [0215.787] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286d58 [0215.787] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2861a8 | out: hHeap=0x1f0000) returned 1 [0215.787] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0215.787] FindNextFileW (in: hFindFile=0x24ed40, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d988, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.787] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2861a8 [0215.787] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286d58 | out: hHeap=0x1f0000) returned 1 [0215.787] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0215.787] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0215.787] FindNextFileW (in: hFindFile=0x24ed40, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e8e6bbf, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e8e6bbf, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e8e6bbf, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0215.787] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0215.787] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286d58 [0215.787] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0215.788] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286d58 | out: hHeap=0x1f0000) returned 1 [0215.788] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2861a8 | out: hHeap=0x1f0000) returned 1 [0215.788] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0215.788] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\pt-BR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-br\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.788] GetLastError () returned 0x5 [0215.788] GetLastError () returned 0x5 [0215.788] FindNextFileW (in: hFindFile=0x24ed40, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e8e6bbf, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e8e6bbf, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e8e6bbf, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0215.789] FindClose (in: hFindFile=0x24ed40 | out: hFindFile=0x24ed40) returned 1 [0215.789] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0215.789] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262e48 | out: hHeap=0x1f0000) returned 1 [0215.789] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0215.789] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2349c8 | out: hHeap=0x1f0000) returned 1 [0215.789] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234500 [0215.789] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0215.789] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x263310 [0215.789] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286d58 [0215.789] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\pt-PT\\*", lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ddb8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e5c0 [0215.790] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2861a8 [0215.790] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286d58 | out: hHeap=0x1f0000) returned 1 [0215.790] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0215.790] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ddb8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.790] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286450 [0215.790] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2861a8 | out: hHeap=0x1f0000) returned 1 [0215.790] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0215.790] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0215.790] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e8e6bbf, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e8e6bbf, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e8e6bbf, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0215.790] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0215.790] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2865e8 [0215.790] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0215.790] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2865e8 | out: hHeap=0x1f0000) returned 1 [0215.790] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286450 | out: hHeap=0x1f0000) returned 1 [0215.790] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0215.791] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\pt-PT\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-pt\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.791] GetLastError () returned 0x5 [0215.791] GetLastError () returned 0x5 [0215.791] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e8e6bbf, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e8e6bbf, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e8e6bbf, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0215.791] FindClose (in: hFindFile=0x24e5c0 | out: hFindFile=0x24e5c0) returned 1 [0215.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0215.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263310 | out: hHeap=0x1f0000) returned 1 [0215.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0215.792] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234500 | out: hHeap=0x1f0000) returned 1 [0215.792] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234788 [0215.792] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0215.792] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262e48 [0215.792] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286d58 [0215.792] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ro-RO\\*", lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e0f5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ec40 [0215.793] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2861a8 [0215.793] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286d58 | out: hHeap=0x1f0000) returned 1 [0215.793] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0215.793] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e0f5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.793] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286670 [0215.793] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2861a8 | out: hHeap=0x1f0000) returned 1 [0215.794] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0215.794] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0215.794] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0215.794] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0215.794] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286d58 [0215.794] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0215.794] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286d58 | out: hHeap=0x1f0000) returned 1 [0215.794] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286670 | out: hHeap=0x1f0000) returned 1 [0215.794] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0215.794] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ro-RO\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ro-ro\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.795] GetLastError () returned 0x5 [0215.795] GetLastError () returned 0x5 [0215.795] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0215.795] FindClose (in: hFindFile=0x24ec40 | out: hFindFile=0x24ec40) returned 1 [0215.795] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0215.795] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262e48 | out: hHeap=0x1f0000) returned 1 [0215.795] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0215.795] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234788 | out: hHeap=0x1f0000) returned 1 [0215.795] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2348f0 [0215.796] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0215.796] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262e48 [0215.796] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286d58 [0215.796] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ru-RU\\*", lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e4d1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ecc0 [0215.796] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2861a8 [0215.796] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286d58 | out: hHeap=0x1f0000) returned 1 [0215.796] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0215.796] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e4d1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.797] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286450 [0215.797] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2861a8 | out: hHeap=0x1f0000) returned 1 [0215.797] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0215.797] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0215.797] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0215.797] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0215.797] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2861a8 [0215.797] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0215.797] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2861a8 | out: hHeap=0x1f0000) returned 1 [0215.797] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286450 | out: hHeap=0x1f0000) returned 1 [0215.797] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0215.797] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ru-RU\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ru-ru\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.797] GetLastError () returned 0x5 [0215.798] GetLastError () returned 0x5 [0215.798] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0215.798] FindClose (in: hFindFile=0x24ecc0 | out: hFindFile=0x24ecc0) returned 1 [0215.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0215.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262e48 | out: hHeap=0x1f0000) returned 1 [0215.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0215.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2348f0 | out: hHeap=0x1f0000) returned 1 [0215.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234a10 [0215.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0215.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x261e58 [0215.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2861a8 [0215.798] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\sk-SK\\*", lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e8a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e5c0 [0215.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2864d8 [0215.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2861a8 | out: hHeap=0x1f0000) returned 1 [0215.799] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0215.799] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e8a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286d58 [0215.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2864d8 | out: hHeap=0x1f0000) returned 1 [0215.799] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0215.799] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0215.799] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e38953f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e38953f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e38953f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0215.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0215.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2861a8 [0215.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0215.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2861a8 | out: hHeap=0x1f0000) returned 1 [0215.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286d58 | out: hHeap=0x1f0000) returned 1 [0215.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0215.799] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\sk-SK\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sk-sk\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0216.033] GetLastError () returned 0x5 [0216.033] GetLastError () returned 0x5 [0216.034] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e38953f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e38953f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e38953f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0216.034] FindClose (in: hFindFile=0x24e5c0 | out: hFindFile=0x24e5c0) returned 1 [0216.034] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0216.034] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261e58 | out: hHeap=0x1f0000) returned 1 [0216.035] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0216.035] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234a10 | out: hHeap=0x1f0000) returned 1 [0216.035] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2349c8 [0216.035] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0216.035] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2617f8 [0216.035] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2863c8 [0216.035] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\sl-SI\\*", lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ec25, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24eb00 [0216.035] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2865e8 [0216.035] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2863c8 | out: hHeap=0x1f0000) returned 1 [0216.035] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0216.035] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ec25, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0216.036] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286670 [0216.036] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2865e8 | out: hHeap=0x1f0000) returned 1 [0216.036] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0216.036] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0216.036] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0216.036] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0216.036] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2863c8 [0216.036] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0216.036] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2863c8 | out: hHeap=0x1f0000) returned 1 [0216.036] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286670 | out: hHeap=0x1f0000) returned 1 [0216.036] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0216.237] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\sl-SI\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sl-si\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0216.237] GetLastError () returned 0x5 [0216.237] GetLastError () returned 0x5 [0216.237] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0216.237] FindClose (in: hFindFile=0x24eb00 | out: hFindFile=0x24eb00) returned 1 [0216.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0216.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2617f8 | out: hHeap=0x1f0000) returned 1 [0216.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0216.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2349c8 | out: hHeap=0x1f0000) returned 1 [0216.238] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234aa0 [0216.238] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0216.238] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262188 [0216.238] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0216.238] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\sr-Latn-RS\\*", lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c7ae2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e8c0 [0216.239] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2859b0 [0216.239] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0216.239] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2859b0 | out: hHeap=0x1f0000) returned 1 [0216.239] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0216.239] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0216.239] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c7ae2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0216.239] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x285928 [0216.239] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0216.239] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285928 | out: hHeap=0x1f0000) returned 1 [0216.239] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0216.239] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0216.239] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0216.239] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0216.240] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238528 [0216.240] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2851b8 [0216.240] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0216.240] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2851b8 | out: hHeap=0x1f0000) returned 1 [0216.240] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0216.240] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238528 | out: hHeap=0x1f0000) returned 1 [0216.240] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\sr-Latn-RS\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sr-latn-rs\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0216.241] GetLastError () returned 0x5 [0216.241] GetLastError () returned 0x5 [0216.241] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0216.241] FindClose (in: hFindFile=0x24e8c0 | out: hFindFile=0x24e8c0) returned 1 [0216.241] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0216.241] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262188 | out: hHeap=0x1f0000) returned 1 [0216.241] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0216.241] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234aa0 | out: hHeap=0x1f0000) returned 1 [0216.241] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234aa0 [0216.242] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0216.242] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x261b28 [0216.242] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x285928 [0216.242] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\sv-SE\\*", lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c820e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24eac0 [0216.242] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286010 [0216.242] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285928 | out: hHeap=0x1f0000) returned 1 [0216.242] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0216.242] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c820e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0216.242] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x285790 [0216.242] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286010 | out: hHeap=0x1f0000) returned 1 [0216.243] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0216.243] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0216.243] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0216.243] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2386b8 [0216.243] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x285bd0 [0216.243] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0216.243] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285bd0 | out: hHeap=0x1f0000) returned 1 [0216.243] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285790 | out: hHeap=0x1f0000) returned 1 [0216.243] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2386b8 | out: hHeap=0x1f0000) returned 1 [0216.244] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\sv-SE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sv-se\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0216.244] GetLastError () returned 0x5 [0216.244] GetLastError () returned 0x5 [0216.244] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0216.244] FindClose (in: hFindFile=0x24eac0 | out: hFindFile=0x24eac0) returned 1 [0216.245] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0216.245] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261b28 | out: hHeap=0x1f0000) returned 1 [0216.245] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0216.245] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234aa0 | out: hHeap=0x1f0000) returned 1 [0216.245] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234980 [0216.245] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0216.245] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2617f8 [0216.245] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2851b8 [0216.245] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\th-TH\\*", lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8602, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ed40 [0216.245] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x285680 [0216.245] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2851b8 | out: hHeap=0x1f0000) returned 1 [0216.246] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0216.246] FindNextFileW (in: hFindFile=0x24ed40, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8602, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0216.246] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x285790 [0216.246] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285680 | out: hHeap=0x1f0000) returned 1 [0216.246] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0216.246] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0216.246] FindNextFileW (in: hFindFile=0x24ed40, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0216.246] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238550 [0216.246] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286010 [0216.246] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0216.246] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286010 | out: hHeap=0x1f0000) returned 1 [0216.247] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285790 | out: hHeap=0x1f0000) returned 1 [0216.247] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238550 | out: hHeap=0x1f0000) returned 1 [0216.247] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\th-TH\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\th-th\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0216.247] GetLastError () returned 0x5 [0216.247] GetLastError () returned 0x5 [0216.248] FindNextFileW (in: hFindFile=0x24ed40, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0216.248] FindClose (in: hFindFile=0x24ed40 | out: hFindFile=0x24ed40) returned 1 [0216.248] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0216.248] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2617f8 | out: hHeap=0x1f0000) returned 1 [0216.248] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0216.248] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234980 | out: hHeap=0x1f0000) returned 1 [0216.248] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2348f0 [0216.248] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0216.249] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2617f8 [0216.249] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x285460 [0216.249] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\tr-TR\\*", lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c896f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e8c0 [0216.249] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286010 [0216.249] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285460 | out: hHeap=0x1f0000) returned 1 [0216.249] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0216.249] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c896f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0216.249] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x285460 [0216.249] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286010 | out: hHeap=0x1f0000) returned 1 [0216.249] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0216.250] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0216.250] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0216.250] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238618 [0216.250] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286010 [0216.250] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0216.250] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286010 | out: hHeap=0x1f0000) returned 1 [0216.250] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285460 | out: hHeap=0x1f0000) returned 1 [0216.250] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238618 | out: hHeap=0x1f0000) returned 1 [0216.251] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\tr-TR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tr-tr\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0216.251] GetLastError () returned 0x5 [0216.251] GetLastError () returned 0x5 [0216.251] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0216.251] FindClose (in: hFindFile=0x24e8c0 | out: hFindFile=0x24e8c0) returned 1 [0216.252] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0216.252] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2617f8 | out: hHeap=0x1f0000) returned 1 [0216.252] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0216.252] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2348f0 | out: hHeap=0x1f0000) returned 1 [0216.252] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2344b8 [0216.252] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0216.252] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2617f8 [0216.252] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286010 [0216.252] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\uk-UA\\*", lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8ed8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e5c0 [0216.252] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x285130 [0216.253] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286010 | out: hHeap=0x1f0000) returned 1 [0216.253] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0216.253] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8ed8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0216.253] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x285b48 [0216.253] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285130 | out: hHeap=0x1f0000) returned 1 [0216.253] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0216.254] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0216.254] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0216.254] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238528 [0216.254] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x285460 [0216.254] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0216.254] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285460 | out: hHeap=0x1f0000) returned 1 [0216.254] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285b48 | out: hHeap=0x1f0000) returned 1 [0216.254] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238528 | out: hHeap=0x1f0000) returned 1 [0216.255] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\uk-UA\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\uk-ua\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0216.255] GetLastError () returned 0x5 [0216.255] GetLastError () returned 0x5 [0216.255] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0216.255] FindClose (in: hFindFile=0x24e5c0 | out: hFindFile=0x24e5c0) returned 1 [0216.255] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0216.255] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2617f8 | out: hHeap=0x1f0000) returned 1 [0216.256] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0216.256] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2344b8 | out: hHeap=0x1f0000) returned 1 [0216.256] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346b0 [0216.256] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0216.256] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x261e58 [0216.256] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x285928 [0216.256] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\zh-CN\\*", lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c93df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e8c0 [0216.256] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x285240 [0216.256] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285928 | out: hHeap=0x1f0000) returned 1 [0216.256] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0216.257] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c93df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0216.257] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x285928 [0216.257] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285240 | out: hHeap=0x1f0000) returned 1 [0216.257] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0216.257] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0216.257] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e100c60, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e100c60, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e100c60, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0216.257] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238528 [0216.257] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x285460 [0216.257] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0216.257] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285460 | out: hHeap=0x1f0000) returned 1 [0216.257] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285928 | out: hHeap=0x1f0000) returned 1 [0216.257] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238528 | out: hHeap=0x1f0000) returned 1 [0216.258] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\zh-CN\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-cn\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0216.258] GetLastError () returned 0x5 [0216.258] GetLastError () returned 0x5 [0216.258] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e100c60, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e100c60, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e100c60, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0216.258] FindClose (in: hFindFile=0x24e8c0 | out: hFindFile=0x24e8c0) returned 1 [0216.259] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0216.259] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261e58 | out: hHeap=0x1f0000) returned 1 [0216.259] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0216.259] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346b0 | out: hHeap=0x1f0000) returned 1 [0216.259] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346b0 [0216.259] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0216.259] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2617f8 [0216.259] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x285818 [0216.259] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\zh-TW\\*", lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c97fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24eb80 [0216.259] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x285d68 [0216.260] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285818 | out: hHeap=0x1f0000) returned 1 [0216.260] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0216.260] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c97fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0216.260] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286010 [0216.260] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285d68 | out: hHeap=0x1f0000) returned 1 [0216.260] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0216.260] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0216.260] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e0daa01, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e0daa01, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e100c60, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0216.260] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238730 [0216.260] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x285460 [0216.260] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0216.260] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285460 | out: hHeap=0x1f0000) returned 1 [0216.260] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286010 | out: hHeap=0x1f0000) returned 1 [0216.260] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238730 | out: hHeap=0x1f0000) returned 1 [0216.261] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\zh-TW\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-tw\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0216.261] GetLastError () returned 0x5 [0216.261] GetLastError () returned 0x5 [0216.261] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e0daa01, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e0daa01, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e100c60, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0216.261] FindClose (in: hFindFile=0x24eb80 | out: hFindFile=0x24eb80) returned 1 [0216.261] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0216.261] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2617f8 | out: hHeap=0x1f0000) returned 1 [0216.261] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0216.261] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346b0 | out: hHeap=0x1f0000) returned 1 [0216.262] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218608 | out: hHeap=0x1f0000) returned 1 [0216.262] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d88 | out: hHeap=0x1f0000) returned 1 [0216.262] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2123e8 | out: hHeap=0x1f0000) returned 1 [0216.262] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213570 | out: hHeap=0x1f0000) returned 1 [0216.262] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213680 | out: hHeap=0x1f0000) returned 1 [0216.262] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0216.262] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212a48 | out: hHeap=0x1f0000) returned 1 [0216.262] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0216.262] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0216.262] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212be0 | out: hHeap=0x1f0000) returned 1 [0216.262] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212c68 | out: hHeap=0x1f0000) returned 1 [0216.263] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212cf0 | out: hHeap=0x1f0000) returned 1 [0216.263] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0216.263] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0216.263] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e88 | out: hHeap=0x1f0000) returned 1 [0216.263] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0216.263] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a468 | out: hHeap=0x1f0000) returned 1 [0216.263] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a688 | out: hHeap=0x1f0000) returned 1 [0216.263] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229d80 | out: hHeap=0x1f0000) returned 1 [0216.263] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0216.263] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285e78 | out: hHeap=0x1f0000) returned 1 [0216.263] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285df0 | out: hHeap=0x1f0000) returned 1 [0216.263] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285020 | out: hHeap=0x1f0000) returned 1 [0216.263] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0216.264] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285350 | out: hHeap=0x1f0000) returned 1 [0216.264] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2850a8 | out: hHeap=0x1f0000) returned 1 [0216.264] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2855f8 | out: hHeap=0x1f0000) returned 1 [0216.264] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2852c8 | out: hHeap=0x1f0000) returned 1 [0216.264] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x284f98 | out: hHeap=0x1f0000) returned 1 [0216.264] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285f88 | out: hHeap=0x1f0000) returned 1 [0216.264] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2853d8 | out: hHeap=0x1f0000) returned 1 [0216.264] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285f00 | out: hHeap=0x1f0000) returned 1 [0216.264] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2854e8 | out: hHeap=0x1f0000) returned 1 [0216.264] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2858a0 | out: hHeap=0x1f0000) returned 1 [0216.264] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286de0 | out: hHeap=0x1f0000) returned 1 [0216.264] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286a28 | out: hHeap=0x1f0000) returned 1 [0216.264] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286b38 | out: hHeap=0x1f0000) returned 1 [0216.264] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286230 | out: hHeap=0x1f0000) returned 1 [0216.265] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286bc0 | out: hHeap=0x1f0000) returned 1 [0216.265] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2862b8 | out: hHeap=0x1f0000) returned 1 [0216.265] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286098 | out: hHeap=0x1f0000) returned 1 [0216.265] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286340 | out: hHeap=0x1f0000) returned 1 [0216.265] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230860 | out: hHeap=0x1f0000) returned 1 [0216.265] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227520 | out: hHeap=0x1f0000) returned 1 [0216.265] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0216.265] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b30 | out: hHeap=0x1f0000) returned 1 [0216.265] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346b0 [0216.265] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0216.265] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262cb0 [0216.265] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0216.265] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\MSInfo\\*", lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa098a4c6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71143a45, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x220406, cFileName=".", cAlternateFileName="")) returned 0x24e8c0 [0216.265] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2202b0 [0216.266] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ce8 [0216.266] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2202b0 | out: hHeap=0x1f0000) returned 1 [0216.266] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0216.266] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0216.266] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa098a4c6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71143a45, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="..", cAlternateFileName="")) returned 1 [0216.266] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220058 [0216.266] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218558 [0216.266] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220058 | out: hHeap=0x1f0000) returned 1 [0216.266] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ce8 | out: hHeap=0x1f0000) returned 1 [0216.266] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0216.266] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0216.266] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa098aa4a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="en-US", cAlternateFileName="")) returned 1 [0216.266] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fa40 [0216.266] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219058 [0216.266] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fa40 | out: hHeap=0x1f0000) returned 1 [0216.266] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218558 | out: hHeap=0x1f0000) returned 1 [0216.267] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0216.267] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0216.267] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x205290 [0216.267] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213570 [0216.267] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463aec8d, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x63793f1, ftLastAccessTime.dwHighDateTime=0x1d2fa0a, ftLastWriteTime.dwLowDateTime=0x463aec8d, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x5a600, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="msinfo32.exe", cAlternateFileName="")) returned 1 [0216.267] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238528 [0216.267] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0216.267] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x2191b8 [0216.267] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0216.267] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219058 | out: hHeap=0x1f0000) returned 1 [0216.267] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238528 | out: hHeap=0x1f0000) returned 1 [0216.268] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\MSInfo\\msinfo32.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\msinfo32.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0216.268] GetLastError () returned 0x5 [0216.268] GetLastError () returned 0x5 [0216.268] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463aec8d, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x63793f1, ftLastAccessTime.dwHighDateTime=0x1d2fa0a, ftLastWriteTime.dwLowDateTime=0x463aec8d, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x5a600, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="msinfo32.exe", cAlternateFileName="")) returned 0 [0216.268] FindClose (in: hFindFile=0x24e8c0 | out: hFindFile=0x24e8c0) returned 1 [0216.418] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2347d0 [0216.418] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238668 [0216.418] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x261b28 [0216.419] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0216.419] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\MSInfo\\en-US\\*", lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa098aa4a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24eb80 [0216.419] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2132c8 [0216.419] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0216.419] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0216.419] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa098aa4a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0216.420] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e88 [0216.420] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2132c8 | out: hHeap=0x1f0000) returned 1 [0216.420] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0216.420] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0216.420] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb38282, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x73430dfb, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x261f2e00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x7800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe.mui", cAlternateFileName="")) returned 1 [0216.420] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x231000 [0216.420] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0216.420] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0216.420] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0216.421] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e88 | out: hHeap=0x1f0000) returned 1 [0216.421] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x231000 | out: hHeap=0x1f0000) returned 1 [0216.465] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\MSInfo\\en-US\\msinfo32.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\en-us\\msinfo32.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0216.465] GetLastError () returned 0x5 [0216.465] GetLastError () returned 0x5 [0216.465] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb38282, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x73430dfb, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x261f2e00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x7800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe.mui", cAlternateFileName="")) returned 0 [0216.465] FindClose (in: hFindFile=0x24eb80 | out: hFindFile=0x24eb80) returned 1 [0216.465] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0216.465] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261b28 | out: hHeap=0x1f0000) returned 1 [0216.466] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238668 | out: hHeap=0x1f0000) returned 1 [0216.466] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2347d0 | out: hHeap=0x1f0000) returned 1 [0216.466] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2191b8 | out: hHeap=0x1f0000) returned 1 [0216.466] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213570 | out: hHeap=0x1f0000) returned 1 [0216.466] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205290 | out: hHeap=0x1f0000) returned 1 [0216.466] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262cb0 | out: hHeap=0x1f0000) returned 1 [0216.466] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0216.466] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346b0 | out: hHeap=0x1f0000) returned 1 [0216.466] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346b0 [0216.466] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b4d0 [0216.466] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262188 [0216.466] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2132c8 [0216.466] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\*", lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca480c48, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xca480c48, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x220406, cFileName=".", cAlternateFileName="")) returned 0x24eb80 [0216.467] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0216.467] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2132c8 | out: hHeap=0x1f0000) returned 1 [0216.467] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0216.467] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca480c48, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xca480c48, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="..", cAlternateFileName="")) returned 1 [0216.467] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0216.467] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0216.467] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0216.467] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0216.467] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9e7b530, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xca70935b, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x1, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="LICLUA.EXE", cAlternateFileName="")) returned 1 [0216.467] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b598 [0216.467] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0216.467] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0216.467] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0216.468] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0216.468] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b598 | out: hHeap=0x1f0000) returned 1 [0216.468] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\LICLUA.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\liclua.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0216.468] GetFileType (hFile=0x23c) returned 0x1 [0216.468] CloseHandle (hObject=0x23c) returned 1 [0216.468] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0216.468] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\LICLUA.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\liclua.exe"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9e7b530, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xca70935b, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x1)) returned 1 [0216.469] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0216.469] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0216.469] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\LICLUA.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\liclua.exe"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9e7b530, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xca70935b, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x1)) returned 1 [0216.469] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0216.469] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0216.469] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0216.469] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca3031b3, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xca3031b3, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xca6bcdcb, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x58ce0, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="LICLUA.EXE.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="LICLUA~1.ODV")) returned 1 [0216.469] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a968 [0216.469] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2135f8 [0216.469] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x224388 [0216.469] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2135f8 | out: hHeap=0x1f0000) returned 1 [0216.469] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0216.469] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a968 | out: hHeap=0x1f0000) returned 1 [0216.469] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\LICLUA.EXE.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\liclua.exe.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0216.470] GetFileType (hFile=0x23c) returned 0x1 [0216.470] CloseHandle (hObject=0x23c) returned 1 [0216.470] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x224900 [0216.470] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\LICLUA.EXE.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\liclua.exe.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca3031b3, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xca3031b3, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xca6bcdcb, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x58ce0)) returned 1 [0216.470] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224900 | out: hHeap=0x1f0000) returned 1 [0216.470] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x2247e8 [0216.470] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\LICLUA.EXE.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\liclua.exe.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca3031b3, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xca3031b3, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xca6bcdcb, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x58ce0)) returned 1 [0216.470] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2247e8 | out: hHeap=0x1f0000) returned 1 [0216.470] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x2247e8 [0216.470] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2247e8 | out: hHeap=0x1f0000) returned 1 [0216.470] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9f60362, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc70656d5, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xc70656d5, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="Office Setup Controller", cAlternateFileName="OFFICE~1")) returned 1 [0216.470] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2f0 [0216.470] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2133d8 [0216.471] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0216.471] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2133d8 | out: hHeap=0x1f0000) returned 1 [0216.471] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224388 | out: hHeap=0x1f0000) returned 1 [0216.471] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0216.471] lstrcmpW (lpString1="Office Setup Controller", lpString2=".") returned 1 [0216.471] lstrcmpW (lpString1="Office Setup Controller", lpString2="..") returned 1 [0216.471] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x205130 [0216.471] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261160 [0216.471] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9f60362, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc70656d5, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xc70656d5, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="Office Setup Controller", cAlternateFileName="OFFICE~1")) returned 0 [0216.471] FindClose (in: hFindFile=0x24eb80 | out: hFindFile=0x24eb80) returned 1 [0216.471] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346f8 [0216.471] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b340 [0216.471] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x261b28 [0216.471] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2610a8 [0216.472] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\*", lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9f60362, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc70656d5, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xc70656d5, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ea80 [0216.472] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261218 [0216.472] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2610a8 | out: hHeap=0x1f0000) returned 1 [0216.472] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0216.472] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9f60362, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc70656d5, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xc70656d5, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0216.472] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261388 [0216.472] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261218 | out: hHeap=0x1f0000) returned 1 [0216.472] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0216.473] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0216.473] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69e1fe00, ftCreationTime.dwHighDateTime=0x1d0d79d, ftLastAccessTime.dwLowDateTime=0xd9ff8cc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x69e1fe00, ftLastWriteTime.dwHighDateTime=0x1d0d79d, nFileSizeHigh=0x0, nFileSizeLow=0x168258, dwReserved0=0x0, dwReserved1=0x0, cFileName="pidgenx.dll", cAlternateFileName="")) returned 1 [0216.473] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b598 [0216.473] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2610a8 [0216.473] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x106) returned 0x223cf8 [0216.473] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2610a8 | out: hHeap=0x1f0000) returned 1 [0216.473] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261388 | out: hHeap=0x1f0000) returned 1 [0216.473] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b598 | out: hHeap=0x1f0000) returned 1 [0216.474] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pidgenx.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pidgenx.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0216.474] GetFileType (hFile=0x23c) returned 0x1 [0216.474] CloseHandle (hObject=0x23c) returned 1 [0216.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f830 [0216.490] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pidgenx.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pidgenx.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69e1fe00, ftCreationTime.dwHighDateTime=0x1d0d79d, ftLastAccessTime.dwLowDateTime=0xd9ff8cc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x69e1fe00, ftLastWriteTime.dwHighDateTime=0x1d0d79d, nFileSizeHigh=0x0, nFileSizeLow=0x168258)) returned 1 [0216.519] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0216.519] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x2300c8 [0216.519] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pidgenx.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pidgenx.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69e1fe00, ftCreationTime.dwHighDateTime=0x1d0d79d, ftLastAccessTime.dwLowDateTime=0xd9ff8cc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x69e1fe00, ftLastWriteTime.dwHighDateTime=0x1d0d79d, nFileSizeHigh=0x0, nFileSizeLow=0x168258)) returned 1 [0216.520] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0216.520] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f6a0 [0216.520] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0216.520] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6774927, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xc6774927, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xc6e4f79c, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x903ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig-office.xrm-ms.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="PKEYCO~1.ODV")) returned 1 [0216.520] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f830 [0216.520] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2610a8 [0216.520] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x160) returned 0x220a58 [0216.520] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2610a8 | out: hHeap=0x1f0000) returned 1 [0216.521] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223cf8 | out: hHeap=0x1f0000) returned 1 [0216.521] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0216.521] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig-office.xrm-ms.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pkeyconfig-office.xrm-ms.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0216.522] GetFileType (hFile=0x1e0) returned 0x1 [0216.522] CloseHandle (hObject=0x1e0) returned 1 [0216.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x160) returned 0x229418 [0216.523] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig-office.xrm-ms.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pkeyconfig-office.xrm-ms.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6774927, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xc6774927, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xc6e4f79c, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x903ce)) returned 1 [0216.523] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0216.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x160) returned 0x229418 [0216.523] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig-office.xrm-ms.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pkeyconfig-office.xrm-ms.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6774927, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xc6774927, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xc6e4f79c, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x903ce)) returned 1 [0216.523] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0216.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x160) returned 0x229418 [0216.524] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0216.524] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9ff8cc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig.companion.dll", cAlternateFileName="PKEYCO~1.DLL")) returned 1 [0216.524] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234548 [0216.524] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261668 [0216.524] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x106) returned 0x2247e8 [0216.524] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261668 | out: hHeap=0x1f0000) returned 1 [0216.524] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220a58 | out: hHeap=0x1f0000) returned 1 [0216.524] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234548 | out: hHeap=0x1f0000) returned 1 [0216.525] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig.companion.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pkeyconfig.companion.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0216.525] GetFileType (hFile=0x1e0) returned 0x1 [0216.526] CloseHandle (hObject=0x1e0) returned 1 [0216.526] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0216.526] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig.companion.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pkeyconfig.companion.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9ff8cc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x48c0)) returned 1 [0216.526] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0216.526] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0216.526] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig.companion.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pkeyconfig.companion.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9ff8cc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x48c0)) returned 1 [0216.527] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0216.527] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0216.527] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0216.527] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9ff8cc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig.companion.dll", cAlternateFileName="PKEYCO~1.DLL")) returned 0 [0216.527] FindClose (in: hFindFile=0x24ea80 | out: hFindFile=0x24ea80) returned 1 [0216.527] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2247e8 | out: hHeap=0x1f0000) returned 1 [0216.527] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261b28 | out: hHeap=0x1f0000) returned 1 [0216.527] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b340 | out: hHeap=0x1f0000) returned 1 [0216.527] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346f8 | out: hHeap=0x1f0000) returned 1 [0216.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0216.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261160 | out: hHeap=0x1f0000) returned 1 [0216.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205130 | out: hHeap=0x1f0000) returned 1 [0216.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262188 | out: hHeap=0x1f0000) returned 1 [0216.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b4d0 | out: hHeap=0x1f0000) returned 1 [0216.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346b0 | out: hHeap=0x1f0000) returned 1 [0216.528] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234980 [0216.528] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b7a0 [0216.528] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262188 [0216.528] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2610a8 [0216.528] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\OfficeSoftwareProtectionPlatform\\*", lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd99442a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd99442a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x220406, cFileName=".", cAlternateFileName="")) returned 0x24e8c0 [0216.529] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261668 [0216.529] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2610a8 | out: hHeap=0x1f0000) returned 1 [0216.529] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0216.529] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd99442a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd99442a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="..", cAlternateFileName="")) returned 1 [0216.529] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2610a8 [0216.529] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261668 | out: hHeap=0x1f0000) returned 1 [0216.529] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0216.529] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0216.529] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd99442a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd99442a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="..", cAlternateFileName="")) returned 0 [0216.529] FindClose (in: hFindFile=0x24e8c0 | out: hFindFile=0x24e8c0) returned 1 [0216.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2610a8 | out: hHeap=0x1f0000) returned 1 [0216.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262188 | out: hHeap=0x1f0000) returned 1 [0216.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b7a0 | out: hHeap=0x1f0000) returned 1 [0216.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234980 | out: hHeap=0x1f0000) returned 1 [0216.530] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234548 [0216.530] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b458 [0216.530] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262650 [0216.530] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212cf0 [0216.530] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Source Engine\\*", lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4accd6e1, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4accd6e1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x220406, cFileName=".", cAlternateFileName="")) returned 0x24ed00 [0216.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0216.531] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212cf0 | out: hHeap=0x1f0000) returned 1 [0216.531] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0216.531] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4accd6e1, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4accd6e1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="..", cAlternateFileName="")) returned 1 [0216.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0216.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0216.531] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0216.531] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0216.531] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0216.532] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0216.532] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4accd6e1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x3ba48, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="OSE.EXE", cAlternateFileName="")) returned 1 [0216.532] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0216.532] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0216.532] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0216.532] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0216.533] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Source Engine\\OSE.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\source engine\\ose.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0216.533] GetFileType (hFile=0x1e0) returned 0x1 [0216.533] CloseHandle (hObject=0x1e0) returned 1 [0216.534] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0216.534] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Source Engine\\OSE.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\source engine\\ose.exe"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4accd6e1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x3ba48)) returned 1 [0216.535] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0216.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0216.535] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Source Engine\\OSE.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\source engine\\ose.exe"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4accd6e1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x3ba48)) returned 1 [0216.535] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0216.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0216.535] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0216.535] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4accd6e1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x3ba48, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="OSE.EXE", cAlternateFileName="")) returned 0 [0216.535] FindClose (in: hFindFile=0x24ed00 | out: hFindFile=0x24ed00) returned 1 [0216.536] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0216.536] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262650 | out: hHeap=0x1f0000) returned 1 [0216.536] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b458 | out: hHeap=0x1f0000) returned 1 [0216.536] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234548 | out: hHeap=0x1f0000) returned 1 [0216.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234788 [0216.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b778 [0216.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262188 [0216.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212cf0 [0216.536] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\*", lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b5538f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x220406, cFileName=".", cAlternateFileName="")) returned 0x24ec40 [0216.537] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0216.537] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212cf0 | out: hHeap=0x1f0000) returned 1 [0216.537] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0216.537] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b5538f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="..", cAlternateFileName="")) returned 1 [0216.537] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0216.537] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0216.537] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0216.538] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0216.538] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xff, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="Bears.htm", cAlternateFileName="")) returned 1 [0216.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b4d0 [0216.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2132c8 [0216.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0216.538] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2132c8 | out: hHeap=0x1f0000) returned 1 [0216.538] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0216.538] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b4d0 | out: hHeap=0x1f0000) returned 1 [0216.539] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0216.539] GetLastError () returned 0x5 [0216.539] GetLastError () returned 0x5 [0216.540] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x432, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="Bears.jpg", cAlternateFileName="")) returned 1 [0216.540] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b7a0 [0216.540] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213570 [0216.540] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0216.540] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213570 | out: hHeap=0x1f0000) returned 1 [0216.540] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0216.540] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b7a0 | out: hHeap=0x1f0000) returned 1 [0216.541] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0216.542] GetLastError () returned 0x5 [0216.542] GetLastError () returned 0x5 [0216.543] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1a3ecc0a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5d2da05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5d2da05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x285, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0216.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b638 [0216.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e88 [0216.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0216.543] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e88 | out: hHeap=0x1f0000) returned 1 [0216.543] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0216.543] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b638 | out: hHeap=0x1f0000) returned 1 [0216.544] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\Desktop.ini" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0216.544] GetFileType (hFile=0x1e0) returned 0x1 [0216.545] CloseHandle (hObject=0x1e0) returned 1 [0216.545] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0216.545] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\Desktop.ini" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1a3ecc0a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5d2da05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5d2da05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x285)) returned 1 [0216.545] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0216.545] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0216.545] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\Desktop.ini" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1a3ecc0a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5d2da05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5d2da05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x285)) returned 1 [0216.546] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0216.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0216.546] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0216.546] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="Garden.htm", cAlternateFileName="")) returned 1 [0216.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b2f0 [0216.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0216.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0216.546] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0216.546] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0216.547] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b2f0 | out: hHeap=0x1f0000) returned 1 [0216.547] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0216.547] GetLastError () returned 0x5 [0216.547] GetLastError () returned 0x5 [0216.547] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x5d3f, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="Garden.jpg", cAlternateFileName="")) returned 1 [0216.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b5c0 [0216.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213680 [0216.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0216.548] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213680 | out: hHeap=0x1f0000) returned 1 [0216.548] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0216.548] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b5c0 | out: hHeap=0x1f0000) returned 1 [0216.548] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0216.549] GetLastError () returned 0x5 [0216.549] GetLastError () returned 0x5 [0216.549] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="Green Bubbles.htm", cAlternateFileName="")) returned 1 [0216.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0216.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212c68 [0216.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0216.549] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212c68 | out: hHeap=0x1f0000) returned 1 [0216.709] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0216.709] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0216.798] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\Green Bubbles.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\green bubbles.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0216.799] GetLastError () returned 0x5 [0216.799] GetLastError () returned 0x5 [0216.799] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1906, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="GreenBubbles.jpg", cAlternateFileName="")) returned 1 [0216.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0216.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0216.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0216.800] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0216.800] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0216.800] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0216.800] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\GreenBubbles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\greenbubbles.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0216.801] GetLastError () returned 0x5 [0216.801] GetLastError () returned 0x5 [0216.801] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xeb, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="Hand Prints.htm", cAlternateFileName="")) returned 1 [0216.801] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b458 [0216.801] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f10 [0216.801] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0216.801] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f10 | out: hHeap=0x1f0000) returned 1 [0216.802] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0216.802] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b458 | out: hHeap=0x1f0000) returned 1 [0216.802] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\Hand Prints.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\hand prints.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0216.802] GetLastError () returned 0x5 [0216.802] GetLastError () returned 0x5 [0216.802] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x107e, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="HandPrints.jpg", cAlternateFileName="")) returned 1 [0216.803] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b2f0 [0216.803] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0216.803] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0216.803] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0216.803] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0216.803] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b2f0 | out: hHeap=0x1f0000) returned 1 [0216.803] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\handprints.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0216.804] GetLastError () returned 0x5 [0216.804] GetLastError () returned 0x5 [0216.804] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="Orange Circles.htm", cAlternateFileName="")) returned 1 [0216.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0216.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0216.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0216.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0216.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0216.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0216.805] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\Orange Circles.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orange circles.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0216.805] GetLastError () returned 0x5 [0216.805] GetLastError () returned 0x5 [0216.805] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d5a533, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d5a533, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d5a533, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x18ed, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="OrangeCircles.jpg", cAlternateFileName="")) returned 1 [0216.805] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0216.805] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0216.806] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0216.806] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0216.806] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0216.806] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0216.806] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\OrangeCircles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orangecircles.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0216.806] GetLastError () returned 0x5 [0216.806] GetLastError () returned 0x5 [0216.806] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="Peacock.htm", cAlternateFileName="")) returned 1 [0216.806] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b2f0 [0216.806] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0216.806] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0216.806] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0216.807] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0216.807] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b2f0 | out: hHeap=0x1f0000) returned 1 [0216.807] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0216.807] GetLastError () returned 0x5 [0216.807] GetLastError () returned 0x5 [0216.807] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x13fb, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="Peacock.jpg", cAlternateFileName="")) returned 1 [0216.807] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b340 [0216.807] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213680 [0216.807] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0216.807] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213680 | out: hHeap=0x1f0000) returned 1 [0216.807] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0216.808] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b340 | out: hHeap=0x1f0000) returned 1 [0216.808] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0216.808] GetLastError () returned 0x5 [0216.808] GetLastError () returned 0x5 [0216.808] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96dccc65, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="Roses.htm", cAlternateFileName="")) returned 1 [0216.808] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b2f0 [0216.808] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2133d8 [0216.808] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0216.809] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2133d8 | out: hHeap=0x1f0000) returned 1 [0216.809] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0216.809] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b2f0 | out: hHeap=0x1f0000) returned 1 [0216.809] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0216.809] GetLastError () returned 0x5 [0216.809] GetLastError () returned 0x5 [0216.810] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96dccc65, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96dccc65, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96dccc65, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x780, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="Roses.jpg", cAlternateFileName="")) returned 1 [0216.810] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b5c0 [0216.810] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213570 [0216.810] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0216.810] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213570 | out: hHeap=0x1f0000) returned 1 [0216.810] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0216.810] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b5c0 | out: hHeap=0x1f0000) returned 1 [0216.810] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0216.811] GetLastError () returned 0x5 [0216.811] GetLastError () returned 0x5 [0216.811] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="Shades of Blue.htm", cAlternateFileName="")) returned 1 [0216.811] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0216.811] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213570 [0216.811] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0216.811] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213570 | out: hHeap=0x1f0000) returned 1 [0216.811] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0216.812] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0216.812] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\Shades of Blue.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shades of blue.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0216.812] GetLastError () returned 0x5 [0216.812] GetLastError () returned 0x5 [0216.812] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x127e, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="ShadesOfBlue.jpg", cAlternateFileName="")) returned 1 [0216.812] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0216.813] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213818 [0216.813] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0216.813] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213818 | out: hHeap=0x1f0000) returned 1 [0216.813] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0216.813] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0216.813] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\ShadesOfBlue.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shadesofblue.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0216.813] GetLastError () returned 0x5 [0216.813] GetLastError () returned 0x5 [0216.814] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d5a533, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d5a533, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d5a533, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="Soft Blue.htm", cAlternateFileName="")) returned 1 [0216.814] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b340 [0216.814] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0216.814] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0216.814] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0216.814] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0216.814] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b340 | out: hHeap=0x1f0000) returned 1 [0216.814] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\Soft Blue.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\soft blue.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0216.815] GetLastError () returned 0x5 [0216.815] GetLastError () returned 0x5 [0216.815] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2949, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="SoftBlue.jpg", cAlternateFileName="")) returned 1 [0216.815] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b5c0 [0216.815] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2132c8 [0216.815] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0216.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2132c8 | out: hHeap=0x1f0000) returned 1 [0216.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0216.816] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b5c0 | out: hHeap=0x1f0000) returned 1 [0216.816] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\softblue.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0216.816] GetLastError () returned 0x5 [0216.816] GetLastError () returned 0x5 [0216.816] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="Stars.htm", cAlternateFileName="")) returned 1 [0216.816] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b2f0 [0216.817] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2135f8 [0216.817] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0216.817] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2135f8 | out: hHeap=0x1f0000) returned 1 [0216.817] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0216.817] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b2f0 | out: hHeap=0x1f0000) returned 1 [0216.817] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0216.818] GetLastError () returned 0x5 [0216.818] GetLastError () returned 0x5 [0216.818] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1d51, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="Stars.jpg", cAlternateFileName="")) returned 1 [0216.818] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b2f0 [0216.818] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212cf0 [0216.818] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0216.818] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212cf0 | out: hHeap=0x1f0000) returned 1 [0216.818] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0216.818] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b2f0 | out: hHeap=0x1f0000) returned 1 [0216.819] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0216.819] GetLastError () returned 0x5 [0216.819] GetLastError () returned 0x5 [0216.819] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1d51, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="Stars.jpg", cAlternateFileName="")) returned 0 [0216.819] FindClose (in: hFindFile=0x24ec40 | out: hFindFile=0x24ec40) returned 1 [0216.820] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0216.820] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262188 | out: hHeap=0x1f0000) returned 1 [0216.820] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b778 | out: hHeap=0x1f0000) returned 1 [0216.820] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234788 | out: hHeap=0x1f0000) returned 1 [0216.820] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346f8 [0216.820] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b778 [0216.820] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x261b28 [0216.820] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e88 [0216.820] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\TextConv\\*", lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b56882, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x220406, cFileName=".", cAlternateFileName="")) returned 0x24e9c0 [0216.821] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212c68 [0216.821] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e88 | out: hHeap=0x1f0000) returned 1 [0216.821] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0216.821] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b56882, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="..", cAlternateFileName="")) returned 1 [0216.821] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0216.821] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212c68 | out: hHeap=0x1f0000) returned 1 [0216.821] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0216.821] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0216.821] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b5787e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="en-US", cAlternateFileName="")) returned 1 [0216.822] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0216.822] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0216.822] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0216.822] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0216.822] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204e50 [0216.822] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2132c8 [0216.822] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b5787e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="en-US", cAlternateFileName="")) returned 0 [0216.822] FindClose (in: hFindFile=0x24e9c0 | out: hFindFile=0x24e9c0) returned 1 [0216.822] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234860 [0216.823] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b458 [0216.823] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x263640 [0216.823] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0216.823] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\TextConv\\en-US\\*", lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b5787e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2131a8, dwReserved1=0x760074, cFileName=".", cAlternateFileName="")) returned 0x24e680 [0216.823] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0216.823] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0216.823] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0216.824] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0216.824] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0216.824] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b5787e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2131a8, dwReserved1=0x760074, cFileName="..", cAlternateFileName="")) returned 1 [0216.824] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0216.824] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0216.824] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0216.824] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0216.824] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0216.824] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0216.824] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b5787e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2131a8, dwReserved1=0x760074, cFileName="..", cAlternateFileName="")) returned 0 [0216.825] FindClose (in: hFindFile=0x24e680 | out: hFindFile=0x24e680) returned 1 [0216.825] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0216.825] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263640 | out: hHeap=0x1f0000) returned 1 [0216.825] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b458 | out: hHeap=0x1f0000) returned 1 [0216.825] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234860 | out: hHeap=0x1f0000) returned 1 [0216.825] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0216.825] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2132c8 | out: hHeap=0x1f0000) returned 1 [0216.826] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e50 | out: hHeap=0x1f0000) returned 1 [0216.826] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261b28 | out: hHeap=0x1f0000) returned 1 [0216.826] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b778 | out: hHeap=0x1f0000) returned 1 [0216.826] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346f8 | out: hHeap=0x1f0000) returned 1 [0216.826] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234980 [0216.826] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b5c0 [0216.826] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x263640 [0216.826] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0216.826] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Triedit\\*", lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b57d42, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x220406, cFileName=".", cAlternateFileName="")) returned 0x24ec40 [0216.827] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213570 [0216.827] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0216.827] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0216.827] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b57d42, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="..", cAlternateFileName="")) returned 1 [0216.827] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0216.827] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213570 | out: hHeap=0x1f0000) returned 1 [0216.827] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0216.827] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0216.828] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b58502, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="en-US", cAlternateFileName="")) returned 1 [0216.828] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213570 [0216.828] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0216.828] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0216.828] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0216.828] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204bf0 [0216.828] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2135f8 [0216.828] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b58502, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="en-US", cAlternateFileName="")) returned 0 [0216.828] FindClose (in: hFindFile=0x24ec40 | out: hFindFile=0x24ec40) returned 1 [0216.829] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234818 [0216.829] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b778 [0216.829] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x261b28 [0216.829] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2133d8 [0216.829] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Triedit\\en-US\\*", lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b58502, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x212f86, dwReserved1=0x740072, cFileName=".", cAlternateFileName="")) returned 0x24e5c0 [0216.829] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0216.829] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2133d8 | out: hHeap=0x1f0000) returned 1 [0216.830] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0216.830] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b58502, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x212f86, dwReserved1=0x740072, cFileName="..", cAlternateFileName="")) returned 1 [0216.830] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2132c8 [0216.830] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0216.830] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2132c8 | out: hHeap=0x1f0000) returned 1 [0216.830] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0216.830] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0216.830] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0216.830] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b58502, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x212f86, dwReserved1=0x740072, cFileName="..", cAlternateFileName="")) returned 0 [0216.830] FindClose (in: hFindFile=0x24e5c0 | out: hFindFile=0x24e5c0) returned 1 [0217.155] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0217.155] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261b28 | out: hHeap=0x1f0000) returned 1 [0217.155] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b778 | out: hHeap=0x1f0000) returned 1 [0217.155] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234818 | out: hHeap=0x1f0000) returned 1 [0217.155] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213570 | out: hHeap=0x1f0000) returned 1 [0217.155] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2135f8 | out: hHeap=0x1f0000) returned 1 [0217.155] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bf0 | out: hHeap=0x1f0000) returned 1 [0217.155] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263640 | out: hHeap=0x1f0000) returned 1 [0217.156] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b5c0 | out: hHeap=0x1f0000) returned 1 [0217.156] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234980 | out: hHeap=0x1f0000) returned 1 [0217.156] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346f8 [0217.156] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b638 [0217.156] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2627e8 [0217.156] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0217.156] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VC\\*", lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xbcd0fab8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xa0b594b8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2ce22546, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x220406, cFileName=".", cAlternateFileName="")) returned 0x24e8c0 [0217.156] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0217.157] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0217.157] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0217.157] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xbcd0fab8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xa0b594b8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2ce22546, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="..", cAlternateFileName="")) returned 1 [0217.157] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0217.157] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0217.160] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0217.160] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0217.160] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8127e00, ftCreationTime.dwHighDateTime=0x1cbd076, ftLastAccessTime.dwLowDateTime=0xcd0a4098, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xd8127e00, ftLastWriteTime.dwHighDateTime=0x1cbd076, nFileSizeHigh=0x0, nFileSizeLow=0xf1b50, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="msdia100.dll", cAlternateFileName="")) returned 1 [0217.161] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b4d0 [0217.161] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0217.161] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x2188c8 [0217.161] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0217.161] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0217.161] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b4d0 | out: hHeap=0x1f0000) returned 1 [0217.162] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VC\\msdia100.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia100.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0217.162] GetFileType (hFile=0x21c) returned 0x1 [0217.162] CloseHandle (hObject=0x21c) returned 1 [0217.163] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2132c8 [0217.163] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VC\\msdia100.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia100.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8127e00, ftCreationTime.dwHighDateTime=0x1cbd076, ftLastAccessTime.dwLowDateTime=0xcd0a4098, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xd8127e00, ftLastWriteTime.dwHighDateTime=0x1cbd076, nFileSizeHigh=0x0, nFileSizeLow=0xf1b50)) returned 1 [0217.163] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2132c8 | out: hHeap=0x1f0000) returned 1 [0217.163] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0217.163] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VC\\msdia100.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia100.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8127e00, ftCreationTime.dwHighDateTime=0x1cbd076, ftLastAccessTime.dwLowDateTime=0xcd0a4098, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xd8127e00, ftLastWriteTime.dwHighDateTime=0x1cbd076, nFileSizeHigh=0x0, nFileSizeLow=0xf1b50)) returned 1 [0217.163] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0217.163] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213570 [0217.163] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213570 | out: hHeap=0x1f0000) returned 1 [0217.163] GetLastError () returned 0x0 [0217.164] CryptAcquireContextA (in: phProv=0x1fde1b8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1fde1b8*=0x213818) returned 1 [0217.171] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x22b598 | out: pbBuffer=0x22b598) returned 1 [0217.171] CryptReleaseContext (hProv=0x213818, dwFlags=0x0) returned 1 [0217.171] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b598 | out: hHeap=0x1f0000) returned 1 [0217.171] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x2595a0 [0217.171] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x223e10 [0217.171] QueryPerformanceCounter (in: lpPerformanceCount=0x1fde14c | out: lpPerformanceCount=0x1fde14c*=37453994416) returned 1 [0217.171] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1fde18c | out: lpSystemTimeAsFileTime=0x1fde18c) [0217.171] QueryPerformanceCounter (in: lpPerformanceCount=0x1fde14c | out: lpPerformanceCount=0x1fde14c*=37454014988) returned 1 [0217.171] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1fde18c | out: lpSystemTimeAsFileTime=0x1fde18c) [0217.171] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x227dd0 [0217.172] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x255c88 [0217.172] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x224a18 [0217.172] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x2372d0 [0217.172] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210078 [0217.172] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206808 [0217.172] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20fef8 [0217.172] GetLastError () returned 0x0 [0217.172] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VC\\msdia100.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia100.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde058, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0217.173] GetFileType (hFile=0x21c) returned 0x1 [0217.173] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ab0 [0217.173] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a10 [0217.174] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VC\\msdia100.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia100.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde088, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0217.174] GetFileType (hFile=0x210) returned 0x1 [0217.174] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c70 [0217.174] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f30 [0217.174] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261668 [0217.174] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b40 [0217.175] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a60 [0217.175] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VC\\msdia100.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia100.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1fddfd4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1bc [0217.175] GetFileType (hFile=0x1bc) returned 0x1 [0217.175] GetLastError () returned 0xb7 [0217.175] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VC\\msdia100.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia100.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1fddfd4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0217.176] GetFileType (hFile=0x1b0) returned 0x1 [0217.176] GetLastError () returned 0xb7 [0217.176] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VC\\msdia100.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia100.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x1fddfcc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0217.176] GetFileType (hFile=0x22c) returned 0x1 [0217.177] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28dfd0 [0217.177] ReadFile (in: hFile=0x22c, lpBuffer=0x28dfd0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fddf28, lpOverlapped=0x0 | out: lpBuffer=0x28dfd0*, lpNumberOfBytesRead=0x1fddf28*=0x1000, lpOverlapped=0x0) returned 1 [0217.182] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24c600 [0217.183] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x288fa8 [0217.183] GetLastError () returned 0x0 [0217.764] CloseHandle (hObject=0x21c) returned 1 [0217.765] CloseHandle (hObject=0x210) returned 1 [0217.765] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388e0 [0217.766] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389c0 [0217.766] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VC\\msdia100.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia100.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde088, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0218.059] GetFileType (hFile=0x1e8) returned 0x1 [0218.059] GetLastError () returned 0xb7 [0218.061] CloseHandle (hObject=0x1e8) returned 1 [0218.061] DeleteFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VC\\msdia100.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia100.dll")) returned 0 [0218.061] GetLastError () returned 0x20 [0218.061] GetLastError () returned 0x20 [0218.062] CryptAcquireContextA (in: phProv=0x1fde1b8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1fde1b8*=0x2130a8) returned 1 [0218.063] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238438 | out: pbBuffer=0x238438) returned 1 [0218.063] CryptReleaseContext (hProv=0x2130a8, dwFlags=0x0) returned 1 [0218.063] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238438 | out: hHeap=0x1f0000) returned 1 [0218.063] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2380a0 [0218.063] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2380c8 [0218.063] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0218.063] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0218.063] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0218.063] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0218.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2aa2d0 [0218.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0218.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x235768 [0218.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238230 [0218.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2316d8 [0218.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d90 [0218.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235e50 [0218.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238438 [0218.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2315d0 [0218.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238af0 [0218.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238488 [0218.065] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210240 [0218.065] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b00 [0218.065] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0218.065] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101b0 [0218.065] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0218.065] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0218.065] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b00 | out: hHeap=0x1f0000) returned 1 [0218.065] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210240 | out: hHeap=0x1f0000) returned 1 [0218.065] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238488 | out: hHeap=0x1f0000) returned 1 [0218.066] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238af0 | out: hHeap=0x1f0000) returned 1 [0218.066] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2315d0 | out: hHeap=0x1f0000) returned 1 [0218.066] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238438 | out: hHeap=0x1f0000) returned 1 [0218.066] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235e50 | out: hHeap=0x1f0000) returned 1 [0218.066] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x21cf00 [0218.066] GetLastError () returned 0x0 [0218.066] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1fddd48 | out: lpSystemTimeAsFileTime=0x1fddd48) [0218.066] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238b30 [0218.067] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0218.067] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bf0 [0218.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bf0 | out: hHeap=0x1f0000) returned 1 [0218.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0218.067] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0218.067] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ef0 [0218.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ef0 | out: hHeap=0x1f0000) returned 1 [0218.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0218.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b30 | out: hHeap=0x1f0000) returned 1 [0218.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0218.067] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x21d2f0 [0218.067] GetLastError () returned 0x0 [0218.157] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VC\\msdia100.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia100.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde0b8, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x238 [0218.157] GetFileType (hFile=0x238) returned 0x1 [0218.158] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x294000 [0218.158] SetFilePointerEx (in: hFile=0x238, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1fde040 | out: lpNewFilePointer=0x0) returned 1 [0218.158] GetLastError () returned 0xb7 [0218.158] CloseHandle (hObject=0x238) returned 1 [0218.159] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b00 | out: hHeap=0x1f0000) returned 1 [0218.159] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238af0 | out: hHeap=0x1f0000) returned 1 [0218.159] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2313c0 | out: hHeap=0x1f0000) returned 1 [0218.159] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2316d8 | out: hHeap=0x1f0000) returned 1 [0218.159] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0218.159] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d90 | out: hHeap=0x1f0000) returned 1 [0218.159] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235768 | out: hHeap=0x1f0000) returned 1 [0218.159] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0218.159] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aa2d0 | out: hHeap=0x1f0000) returned 1 [0218.159] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2246d0 | out: hHeap=0x1f0000) returned 1 [0218.159] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380c8 | out: hHeap=0x1f0000) returned 1 [0218.159] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0218.159] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24fd60 | out: hHeap=0x1f0000) returned 1 [0218.159] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2245b8 | out: hHeap=0x1f0000) returned 1 [0218.160] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1ff058 | out: hHeap=0x1f0000) returned 1 [0218.160] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a00 | out: hHeap=0x1f0000) returned 1 [0218.160] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffd0 | out: hHeap=0x1f0000) returned 1 [0218.160] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0218.160] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ac0 | out: hHeap=0x1f0000) returned 1 [0218.160] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210090 | out: hHeap=0x1f0000) returned 1 [0218.160] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0218.160] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b80 | out: hHeap=0x1f0000) returned 1 [0218.160] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2311b0 | out: hHeap=0x1f0000) returned 1 [0218.160] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0218.160] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235de8 | out: hHeap=0x1f0000) returned 1 [0218.160] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234a58 | out: hHeap=0x1f0000) returned 1 [0218.160] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0218.160] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0218.160] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2348f0 | out: hHeap=0x1f0000) returned 1 [0218.160] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389c0 | out: hHeap=0x1f0000) returned 1 [0218.160] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388e0 | out: hHeap=0x1f0000) returned 1 [0218.161] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28dfd0 | out: hHeap=0x1f0000) returned 1 [0218.161] CloseHandle (hObject=0x22c) returned 1 [0218.161] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a30 | out: hHeap=0x1f0000) returned 1 [0218.161] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389e0 | out: hHeap=0x1f0000) returned 1 [0218.161] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233868 | out: hHeap=0x1f0000) returned 1 [0218.161] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24c600 | out: hHeap=0x1f0000) returned 1 [0218.161] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210000 | out: hHeap=0x1f0000) returned 1 [0218.161] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e50 | out: hHeap=0x1f0000) returned 1 [0218.161] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x288fa8 | out: hHeap=0x1f0000) returned 1 [0218.161] CloseHandle (hObject=0x1b0) returned 1 [0218.162] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ba0 | out: hHeap=0x1f0000) returned 1 [0218.162] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a40 | out: hHeap=0x1f0000) returned 1 [0218.162] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ff0 | out: hHeap=0x1f0000) returned 1 [0218.162] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c90 | out: hHeap=0x1f0000) returned 1 [0218.162] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0218.163] CloseHandle (hObject=0x1bc) returned 1 [0218.163] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a60 | out: hHeap=0x1f0000) returned 1 [0218.163] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b40 | out: hHeap=0x1f0000) returned 1 [0218.163] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261668 | out: hHeap=0x1f0000) returned 1 [0218.163] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a10 | out: hHeap=0x1f0000) returned 1 [0218.163] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ab0 | out: hHeap=0x1f0000) returned 1 [0218.163] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b90 | out: hHeap=0x1f0000) returned 1 [0218.163] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a80 | out: hHeap=0x1f0000) returned 1 [0218.163] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0218.163] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x255c88 | out: hHeap=0x1f0000) returned 1 [0218.163] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224a18 | out: hHeap=0x1f0000) returned 1 [0218.164] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206808 | out: hHeap=0x1f0000) returned 1 [0218.164] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20fef8 | out: hHeap=0x1f0000) returned 1 [0218.164] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210078 | out: hHeap=0x1f0000) returned 1 [0218.164] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2372d0 | out: hHeap=0x1f0000) returned 1 [0218.164] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2595a0 | out: hHeap=0x1f0000) returned 1 [0218.164] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223e10 | out: hHeap=0x1f0000) returned 1 [0218.164] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0218.164] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2133d8 | out: hHeap=0x1f0000) returned 1 [0218.164] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262980 | out: hHeap=0x1f0000) returned 1 [0218.164] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346b0 | out: hHeap=0x1f0000) returned 1 [0218.164] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b4d0 | out: hHeap=0x1f0000) returned 1 [0218.164] DeleteFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VC\\msdia100.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia100.dll")) returned 1 [0218.166] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfe87c00, ftCreationTime.dwHighDateTime=0x1cbfe36, ftLastAccessTime.dwLowDateTime=0x2ce22546, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xcfe87c00, ftLastWriteTime.dwHighDateTime=0x1cbfe36, nFileSizeHigh=0x0, nFileSizeLow=0xd0d50, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="msdia90.dll", cAlternateFileName="")) returned 1 [0218.166] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0218.166] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fef0 [0218.166] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ce8 [0218.167] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fef0 | out: hHeap=0x1f0000) returned 1 [0218.167] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2188c8 | out: hHeap=0x1f0000) returned 1 [0218.167] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0218.167] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VC\\msdia90.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia90.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1bc [0218.167] GetFileType (hFile=0x1bc) returned 0x1 [0218.168] CloseHandle (hObject=0x1bc) returned 1 [0218.168] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212cf0 [0218.168] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VC\\msdia90.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia90.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfe87c00, ftCreationTime.dwHighDateTime=0x1cbfe36, ftLastAccessTime.dwLowDateTime=0x2ce22546, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xcfe87c00, ftLastWriteTime.dwHighDateTime=0x1cbfe36, nFileSizeHigh=0x0, nFileSizeLow=0xd0d50)) returned 1 [0218.168] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212cf0 | out: hHeap=0x1f0000) returned 1 [0218.168] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0218.168] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VC\\msdia90.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia90.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfe87c00, ftCreationTime.dwHighDateTime=0x1cbfe36, ftLastAccessTime.dwLowDateTime=0x2ce22546, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xcfe87c00, ftLastWriteTime.dwHighDateTime=0x1cbfe36, nFileSizeHigh=0x0, nFileSizeLow=0xd0d50)) returned 1 [0218.168] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0218.168] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0218.168] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0218.168] GetLastError () returned 0x0 [0218.169] CryptAcquireContextA (in: phProv=0x1fde1b8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1fde1b8*=0x2135f8) returned 1 [0218.170] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238438 | out: pbBuffer=0x238438) returned 1 [0218.170] CryptReleaseContext (hProv=0x2135f8, dwFlags=0x0) returned 1 [0218.170] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238438 | out: hHeap=0x1f0000) returned 1 [0218.170] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x255c88 [0218.170] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2245b8 [0218.170] QueryPerformanceCounter (in: lpPerformanceCount=0x1fde14c | out: lpPerformanceCount=0x1fde14c*=37553892012) returned 1 [0218.170] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1fde18c | out: lpSystemTimeAsFileTime=0x1fde18c) [0218.170] QueryPerformanceCounter (in: lpPerformanceCount=0x1fde14c | out: lpPerformanceCount=0x1fde14c*=37553917037) returned 1 [0218.170] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1fde18c | out: lpSystemTimeAsFileTime=0x1fde18c) [0218.170] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x21d2f0 [0218.171] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x24fd60 [0218.171] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x224900 [0218.171] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x237af0 [0218.171] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffd0 [0218.171] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2067d8 [0218.171] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210078 [0218.171] GetLastError () returned 0x0 [0218.171] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VC\\msdia90.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia90.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde058, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1bc [0218.174] GetFileType (hFile=0x1bc) returned 0x1 [0218.175] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a10 [0218.175] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b80 [0218.175] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VC\\msdia90.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia90.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde088, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0218.175] GetFileType (hFile=0x1b0) returned 0x1 [0218.176] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f10 [0218.176] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c70 [0218.176] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x286ae8 [0218.176] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a30 [0218.176] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a60 [0218.177] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VC\\msdia90.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia90.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1fddfd4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0218.177] GetFileType (hFile=0x22c) returned 0x1 [0218.177] GetLastError () returned 0xb7 [0218.178] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VC\\msdia90.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia90.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1fddfd4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x238 [0218.178] GetFileType (hFile=0x238) returned 0x1 [0218.178] GetLastError () returned 0xb7 [0218.178] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VC\\msdia90.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia90.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x1fddfcc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0218.179] GetFileType (hFile=0x1e8) returned 0x1 [0218.179] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x288fa8 [0218.179] ReadFile (in: hFile=0x1e8, lpBuffer=0x288fa8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fddf28, lpOverlapped=0x0 | out: lpBuffer=0x288fa8*, lpNumberOfBytesRead=0x1fddf28*=0x1000, lpOverlapped=0x0) returned 1 [0218.189] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x249db0 [0218.189] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x292ff8 [0218.189] GetLastError () returned 0x0 [0218.550] CloseHandle (hObject=0x1bc) returned 1 [0218.850] CloseHandle (hObject=0x1b0) returned 1 [0218.851] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b20 [0218.851] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b60 [0218.852] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VC\\msdia90.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia90.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde088, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0218.865] GetFileType (hFile=0x1b0) returned 0x1 [0218.865] GetLastError () returned 0xb7 [0218.867] CloseHandle (hObject=0x1b0) returned 1 [0218.868] DeleteFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VC\\msdia90.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia90.dll")) returned 0 [0218.868] GetLastError () returned 0x20 [0218.868] GetLastError () returned 0x20 [0218.868] CryptAcquireContextA (in: phProv=0x1fde1b8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1fde1b8*=0x212a48) returned 1 [0218.869] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2380f0 | out: pbBuffer=0x2380f0) returned 1 [0218.869] CryptReleaseContext (hProv=0x212a48, dwFlags=0x0) returned 1 [0218.869] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380f0 | out: hHeap=0x1f0000) returned 1 [0218.869] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238168 [0218.869] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2380f0 [0218.869] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1ff058 [0218.869] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0218.870] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0218.870] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1ff058 | out: hHeap=0x1f0000) returned 1 [0218.870] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x22c8b8 [0218.870] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210018 [0218.870] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x235cb0 [0218.870] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238140 [0218.870] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2316d8 [0218.870] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d30 [0218.870] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235c48 [0218.870] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238168 [0218.870] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2317e0 [0218.870] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238980 [0218.870] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0218.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffb8 [0218.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238910 [0218.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0218.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101b0 [0218.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0218.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0218.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238910 | out: hHeap=0x1f0000) returned 1 [0218.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffb8 | out: hHeap=0x1f0000) returned 1 [0218.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0218.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238980 | out: hHeap=0x1f0000) returned 1 [0218.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2317e0 | out: hHeap=0x1f0000) returned 1 [0218.872] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0218.872] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235c48 | out: hHeap=0x1f0000) returned 1 [0218.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x1ff058 [0218.872] GetLastError () returned 0x0 [0218.872] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1fddd48 | out: lpSystemTimeAsFileTime=0x1fddd48) [0218.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x2388a0 [0218.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0218.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204db0 [0218.872] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204db0 | out: hHeap=0x1f0000) returned 1 [0218.873] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0218.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0218.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cb0 [0218.873] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cb0 | out: hHeap=0x1f0000) returned 1 [0218.873] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0218.873] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388a0 | out: hHeap=0x1f0000) returned 1 [0218.873] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0218.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x21cf70 [0218.873] GetLastError () returned 0x0 [0218.874] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VC\\msdia90.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia90.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde0b8, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0218.874] GetFileType (hFile=0x1b0) returned 0x1 [0218.874] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28dfd0 [0218.874] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1fde040 | out: lpNewFilePointer=0x0) returned 1 [0218.875] GetLastError () returned 0xb7 [0218.875] CloseHandle (hObject=0x1b0) returned 1 [0218.876] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238960 | out: hHeap=0x1f0000) returned 1 [0218.876] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388a0 | out: hHeap=0x1f0000) returned 1 [0218.876] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2311b0 | out: hHeap=0x1f0000) returned 1 [0218.876] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2316d8 | out: hHeap=0x1f0000) returned 1 [0218.876] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0218.876] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d30 | out: hHeap=0x1f0000) returned 1 [0218.876] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235cb0 | out: hHeap=0x1f0000) returned 1 [0218.876] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210018 | out: hHeap=0x1f0000) returned 1 [0218.876] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0218.876] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224270 | out: hHeap=0x1f0000) returned 1 [0218.876] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380f0 | out: hHeap=0x1f0000) returned 1 [0218.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0218.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x251068 | out: hHeap=0x1f0000) returned 1 [0218.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223be0 | out: hHeap=0x1f0000) returned 1 [0218.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0218.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389f0 | out: hHeap=0x1f0000) returned 1 [0218.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffa0 | out: hHeap=0x1f0000) returned 1 [0218.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0218.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ba0 | out: hHeap=0x1f0000) returned 1 [0218.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff70 | out: hHeap=0x1f0000) returned 1 [0218.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0218.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b70 | out: hHeap=0x1f0000) returned 1 [0218.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2314c8 | out: hHeap=0x1f0000) returned 1 [0218.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0218.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235be0 | out: hHeap=0x1f0000) returned 1 [0218.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234980 | out: hHeap=0x1f0000) returned 1 [0218.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0218.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0218.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2344b8 | out: hHeap=0x1f0000) returned 1 [0218.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b60 | out: hHeap=0x1f0000) returned 1 [0218.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b20 | out: hHeap=0x1f0000) returned 1 [0218.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x288fa8 | out: hHeap=0x1f0000) returned 1 [0218.879] CloseHandle (hObject=0x1e8) returned 1 [0218.879] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a40 | out: hHeap=0x1f0000) returned 1 [0218.879] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b40 | out: hHeap=0x1f0000) returned 1 [0218.879] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233328 | out: hHeap=0x1f0000) returned 1 [0218.879] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x249db0 | out: hHeap=0x1f0000) returned 1 [0218.879] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2100a8 | out: hHeap=0x1f0000) returned 1 [0218.879] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d70 | out: hHeap=0x1f0000) returned 1 [0218.879] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x292ff8 | out: hHeap=0x1f0000) returned 1 [0218.880] CloseHandle (hObject=0x238) returned 1 [0218.880] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b00 | out: hHeap=0x1f0000) returned 1 [0218.880] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ab0 | out: hHeap=0x1f0000) returned 1 [0218.880] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286698 | out: hHeap=0x1f0000) returned 1 [0218.880] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204df0 | out: hHeap=0x1f0000) returned 1 [0218.880] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0218.881] CloseHandle (hObject=0x22c) returned 1 [0218.881] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a60 | out: hHeap=0x1f0000) returned 1 [0218.881] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a30 | out: hHeap=0x1f0000) returned 1 [0218.881] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286ae8 | out: hHeap=0x1f0000) returned 1 [0218.881] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b80 | out: hHeap=0x1f0000) returned 1 [0218.882] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a10 | out: hHeap=0x1f0000) returned 1 [0218.882] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238af0 | out: hHeap=0x1f0000) returned 1 [0218.882] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389e0 | out: hHeap=0x1f0000) returned 1 [0218.882] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239be0 | out: hHeap=0x1f0000) returned 1 [0218.882] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24fd60 | out: hHeap=0x1f0000) returned 1 [0218.882] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224900 | out: hHeap=0x1f0000) returned 1 [0218.882] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2067d8 | out: hHeap=0x1f0000) returned 1 [0218.882] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210078 | out: hHeap=0x1f0000) returned 1 [0218.882] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffd0 | out: hHeap=0x1f0000) returned 1 [0218.882] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237af0 | out: hHeap=0x1f0000) returned 1 [0218.882] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x255c88 | out: hHeap=0x1f0000) returned 1 [0218.882] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2245b8 | out: hHeap=0x1f0000) returned 1 [0218.882] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0219.144] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213818 | out: hHeap=0x1f0000) returned 1 [0219.144] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262980 | out: hHeap=0x1f0000) returned 1 [0219.144] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2348f0 | out: hHeap=0x1f0000) returned 1 [0219.144] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0219.144] DeleteFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VC\\msdia90.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia90.dll")) returned 1 [0219.145] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfe87c00, ftCreationTime.dwHighDateTime=0x1cbfe36, ftLastAccessTime.dwLowDateTime=0x2ce22546, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xcfe87c00, ftLastWriteTime.dwHighDateTime=0x1cbfe36, nFileSizeHigh=0x0, nFileSizeLow=0xd0d50, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="msdia90.dll", cAlternateFileName="")) returned 0 [0219.145] FindClose (in: hFindFile=0x24e8c0 | out: hFindFile=0x24e8c0) returned 1 [0219.146] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ce8 | out: hHeap=0x1f0000) returned 1 [0219.146] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2627e8 | out: hHeap=0x1f0000) returned 1 [0219.146] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b638 | out: hHeap=0x1f0000) returned 1 [0219.146] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346f8 | out: hHeap=0x1f0000) returned 1 [0219.146] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234818 [0219.146] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0219.146] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2617f8 [0219.146] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0219.147] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VGX\\*", lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b59a78, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x220406, cFileName=".", cAlternateFileName="")) returned 0x24ea00 [0219.147] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0219.147] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0219.147] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0219.147] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b59a78, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="..", cAlternateFileName="")) returned 1 [0219.147] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fab8 [0219.147] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0219.147] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0219.147] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0219.147] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a69a2a7, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xb3fd6e56, ftLastAccessTime.dwHighDateTime=0x1d2fa09, ftLastWriteTime.dwLowDateTime=0x4a69a2a7, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0xf1000, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="VGX.dll", cAlternateFileName="")) returned 1 [0219.147] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0219.147] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ce8 [0219.148] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0219.148] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fab8 | out: hHeap=0x1f0000) returned 1 [0219.148] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VGX\\VGX.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vgx\\vgx.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.148] GetLastError () returned 0x5 [0219.148] GetLastError () returned 0x5 [0219.148] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a69a2a7, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xb3fd6e56, ftLastAccessTime.dwHighDateTime=0x1d2fa09, ftLastWriteTime.dwLowDateTime=0x4a69a2a7, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0xf1000, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="VGX.dll", cAlternateFileName="")) returned 0 [0219.149] FindClose (in: hFindFile=0x24ea00 | out: hFindFile=0x24ea00) returned 1 [0219.149] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ce8 | out: hHeap=0x1f0000) returned 1 [0219.149] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2617f8 | out: hHeap=0x1f0000) returned 1 [0219.149] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0219.149] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234818 | out: hHeap=0x1f0000) returned 1 [0219.149] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234980 [0219.149] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0219.149] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2617f8 [0219.149] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0219.149] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\*", lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49ecb94e, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ae972f5, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x220406, cFileName=".", cAlternateFileName="")) returned 0x24ecc0 [0219.150] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0219.150] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0219.150] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0219.150] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49ecb94e, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ae972f5, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="..", cAlternateFileName="")) returned 1 [0219.150] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220328 [0219.150] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0219.150] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0219.150] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0219.150] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0xcbb54451, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xcbb54451, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="10.0", cAlternateFileName="")) returned 1 [0219.150] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0219.150] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218608 [0219.150] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0219.150] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220328 | out: hHeap=0x1f0000) returned 1 [0219.151] lstrcmpW (lpString1="10.0", lpString2=".") returned 1 [0219.151] lstrcmpW (lpString1="10.0", lpString2="..") returned 1 [0219.151] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204c10 [0219.151] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213570 [0219.151] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x29080, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="vstoee.dll", cAlternateFileName="")) returned 1 [0219.151] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0219.151] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0219.151] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218768 [0219.151] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0219.151] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218608 | out: hHeap=0x1f0000) returned 1 [0219.151] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0219.152] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x238 [0219.152] GetFileType (hFile=0x238) returned 0x1 [0219.152] CloseHandle (hObject=0x238) returned 1 [0219.153] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212a48 [0219.153] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x29080)) returned 1 [0219.153] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212a48 | out: hHeap=0x1f0000) returned 1 [0219.153] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0219.153] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x29080)) returned 1 [0219.153] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0219.153] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0219.153] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0219.153] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6340300, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0xd6340300, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x4298, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="vstoee100.tlb", cAlternateFileName="VSTOEE~1.TLB")) returned 1 [0219.153] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0219.154] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220238 [0219.154] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218818 [0219.154] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220238 | out: hHeap=0x1f0000) returned 1 [0219.154] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218768 | out: hHeap=0x1f0000) returned 1 [0219.154] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0219.154] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee100.tlb" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee100.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x238 [0219.154] GetFileType (hFile=0x238) returned 0x1 [0219.154] CloseHandle (hObject=0x238) returned 1 [0219.155] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0219.155] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee100.tlb" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee100.tlb"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6340300, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0xd6340300, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x4298)) returned 1 [0219.155] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0219.155] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0219.155] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee100.tlb" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee100.tlb"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6340300, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0xd6340300, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x4298)) returned 1 [0219.155] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0219.155] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0219.155] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0219.155] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6340300, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0xd6340300, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x5898, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="vstoee90.tlb", cAlternateFileName="")) returned 1 [0219.155] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0219.155] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0219.155] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x2188c8 [0219.155] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0219.156] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218818 | out: hHeap=0x1f0000) returned 1 [0219.156] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0219.156] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee90.tlb" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee90.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x238 [0219.156] GetFileType (hFile=0x238) returned 0x1 [0219.156] CloseHandle (hObject=0x238) returned 1 [0219.156] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0219.157] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee90.tlb" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee90.tlb"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6340300, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0xd6340300, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x5898)) returned 1 [0219.157] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0219.157] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0219.157] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee90.tlb" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee90.tlb"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6340300, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0xd6340300, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x5898)) returned 1 [0219.157] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0219.157] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0219.157] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0219.157] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6340300, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0xd6340300, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x5898, dwReserved0=0x20002, dwReserved1=0x220406, cFileName="vstoee90.tlb", cAlternateFileName="")) returned 0 [0219.157] FindClose (in: hFindFile=0x24ecc0 | out: hFindFile=0x24ecc0) returned 1 [0219.157] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234a10 [0219.157] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0219.157] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x263178 [0219.157] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213818 [0219.158] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\*", lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0xcbb54451, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xcbb54451, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24eb80 [0219.158] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e88 [0219.158] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213818 | out: hHeap=0x1f0000) returned 1 [0219.158] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0219.158] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0xcbb54451, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xcbb54451, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.158] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0219.158] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e88 | out: hHeap=0x1f0000) returned 1 [0219.158] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0219.158] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0219.158] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4a6fdac8, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0219.158] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0219.158] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0219.158] lstrcmpW (lpString1="1033", lpString2=".") returned 1 [0219.158] lstrcmpW (lpString1="1033", lpString2="..") returned 1 [0219.158] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204ef0 [0219.158] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2133d8 [0219.159] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x18888, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOInstaller.exe", cAlternateFileName="VSTOIN~1.EXE")) returned 1 [0219.159] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0219.159] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0219.159] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0219.159] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0219.159] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0219.159] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0219.159] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x238 [0219.159] GetFileType (hFile=0x238) returned 0x1 [0219.160] CloseHandle (hObject=0x238) returned 1 [0219.160] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219d98 [0219.160] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.exe"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x18888)) returned 1 [0219.160] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219d98 | out: hHeap=0x1f0000) returned 1 [0219.160] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a968 [0219.160] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.exe"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x18888)) returned 1 [0219.160] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a968 | out: hHeap=0x1f0000) returned 1 [0219.160] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a188 [0219.160] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a188 | out: hHeap=0x1f0000) returned 1 [0219.160] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb046382, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xcb046382, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xcbb54451, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x59b83, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOLoader.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="VSTOLO~1.ODV")) returned 1 [0219.160] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21aa10 [0219.160] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2135f8 [0219.160] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120) returned 0x211170 [0219.160] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2135f8 | out: hHeap=0x1f0000) returned 1 [0219.160] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0219.160] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21aa10 | out: hHeap=0x1f0000) returned 1 [0219.161] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOLoader.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoloader.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x238 [0219.161] GetFileType (hFile=0x238) returned 0x1 [0219.161] CloseHandle (hObject=0x238) returned 1 [0219.161] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120) returned 0x2104b8 [0219.161] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOLoader.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoloader.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb046382, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xcb046382, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xcbb54451, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x59b83)) returned 1 [0219.161] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0219.162] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120) returned 0x210830 [0219.162] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOLoader.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoloader.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb046382, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xcb046382, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xcbb54451, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x59b83)) returned 1 [0219.162] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0219.162] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120) returned 0x210958 [0219.162] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0219.162] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0xbee8, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOMessageProvider.dll", cAlternateFileName="VSTOME~1.DLL")) returned 1 [0219.162] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0219.162] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2132c8 [0219.162] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0219.163] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2132c8 | out: hHeap=0x1f0000) returned 1 [0219.163] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0219.163] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0219.163] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOMessageProvider.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstomessageprovider.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x238 [0219.164] GetFileType (hFile=0x238) returned 0x1 [0219.164] CloseHandle (hObject=0x238) returned 1 [0219.164] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261160 [0219.165] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOMessageProvider.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstomessageprovider.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0xbee8)) returned 1 [0219.165] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261160 | out: hHeap=0x1f0000) returned 1 [0219.165] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261668 [0219.165] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOMessageProvider.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstomessageprovider.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0xbee8)) returned 1 [0219.165] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261668 | out: hHeap=0x1f0000) returned 1 [0219.165] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261160 [0219.165] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261160 | out: hHeap=0x1f0000) returned 1 [0219.165] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0xbee8, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOMessageProvider.dll", cAlternateFileName="VSTOME~1.DLL")) returned 0 [0219.165] FindClose (in: hFindFile=0x24eb80 | out: hFindFile=0x24eb80) returned 1 [0219.165] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346b0 [0219.165] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0219.165] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x261b28 [0219.165] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0219.166] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\*", lpFindFileData=0x1fde300 | out: lpFindFileData=0x1fde300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4a6fdac8, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ed00 [0219.166] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212a48 [0219.166] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0219.166] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212a48 | out: hHeap=0x1f0000) returned 1 [0219.166] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0219.166] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0219.166] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1fde300 | out: lpFindFileData=0x1fde300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4a6fdac8, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.166] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0219.166] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0219.166] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0219.166] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0219.166] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0219.167] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0219.167] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1fde300 | out: lpFindFileData=0x1fde300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a6d7a0a, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x30a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOInstallerUI.dll", cAlternateFileName="VSTOIN~1.DLL")) returned 1 [0219.167] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf70 [0219.167] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212cf0 [0219.167] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0219.167] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212cf0 | out: hHeap=0x1f0000) returned 1 [0219.167] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0219.167] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf70 | out: hHeap=0x1f0000) returned 1 [0219.167] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOInstallerUI.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoinstallerui.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde0c8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x238 [0219.168] GetFileType (hFile=0x238) returned 0x1 [0219.168] CloseHandle (hObject=0x238) returned 1 [0219.168] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2610a8 [0219.168] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOInstallerUI.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoinstallerui.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde15c | out: lpFileInformation=0x1fde15c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a6d7a0a, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x30a0)) returned 1 [0219.168] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2610a8 | out: hHeap=0x1f0000) returned 1 [0219.168] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261388 [0219.168] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOInstallerUI.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoinstallerui.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde164 | out: lpFileInformation=0x1fde164*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a6d7a0a, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x30a0)) returned 1 [0219.168] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261388 | out: hHeap=0x1f0000) returned 1 [0219.169] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261218 [0219.169] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261218 | out: hHeap=0x1f0000) returned 1 [0219.169] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1fde300 | out: lpFindFileData=0x1fde300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x5080, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOLoaderUI.dll", cAlternateFileName="VSTOLO~1.DLL")) returned 1 [0219.169] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0219.169] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2135f8 [0219.169] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0219.169] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2135f8 | out: hHeap=0x1f0000) returned 1 [0219.169] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0219.169] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0219.169] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOLoaderUI.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoloaderui.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde0c8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x238 [0219.170] GetFileType (hFile=0x238) returned 0x1 [0219.170] CloseHandle (hObject=0x238) returned 1 [0219.170] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a4d0 [0219.170] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOLoaderUI.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoloaderui.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde15c | out: lpFileInformation=0x1fde15c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x5080)) returned 1 [0219.170] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a4d0 | out: hHeap=0x1f0000) returned 1 [0219.170] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219cf0 [0219.170] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOLoaderUI.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoloaderui.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde164 | out: lpFileInformation=0x1fde164*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x5080)) returned 1 [0219.170] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219cf0 | out: hHeap=0x1f0000) returned 1 [0219.170] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a4d0 [0219.170] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a4d0 | out: hHeap=0x1f0000) returned 1 [0219.170] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1fde300 | out: lpFindFileData=0x1fde300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x5080, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOLoaderUI.dll", cAlternateFileName="VSTOLO~1.DLL")) returned 0 [0219.171] FindClose (in: hFindFile=0x24ed00 | out: hFindFile=0x24ed00) returned 1 [0219.171] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0219.171] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261b28 | out: hHeap=0x1f0000) returned 1 [0219.171] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0219.171] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346b0 | out: hHeap=0x1f0000) returned 1 [0219.171] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0219.171] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2133d8 | out: hHeap=0x1f0000) returned 1 [0219.171] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ef0 | out: hHeap=0x1f0000) returned 1 [0219.171] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263178 | out: hHeap=0x1f0000) returned 1 [0219.171] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0219.171] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234a10 | out: hHeap=0x1f0000) returned 1 [0219.171] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2188c8 | out: hHeap=0x1f0000) returned 1 [0219.171] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213570 | out: hHeap=0x1f0000) returned 1 [0219.171] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c10 | out: hHeap=0x1f0000) returned 1 [0219.171] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2617f8 | out: hHeap=0x1f0000) returned 1 [0219.171] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0219.171] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234980 | out: hHeap=0x1f0000) returned 1 [0219.171] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fc98 | out: hHeap=0x1f0000) returned 1 [0219.171] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0219.171] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2203a0 | out: hHeap=0x1f0000) returned 1 [0219.172] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220508 | out: hHeap=0x1f0000) returned 1 [0219.172] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0219.172] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261440 | out: hHeap=0x1f0000) returned 1 [0219.172] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213790 | out: hHeap=0x1f0000) returned 1 [0219.172] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0219.172] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2134e8 | out: hHeap=0x1f0000) returned 1 [0219.172] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd88 | out: hHeap=0x1f0000) returned 1 [0219.172] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0219.172] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f7e8 | out: hHeap=0x1f0000) returned 1 [0219.172] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0219.172] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220918 | out: hHeap=0x1f0000) returned 1 [0219.172] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22dd00 | out: hHeap=0x1f0000) returned 1 [0219.172] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260630 | out: hHeap=0x1f0000) returned 1 [0219.172] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2345d8 | out: hHeap=0x1f0000) returned 1 [0219.172] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234aa0 [0219.172] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0219.172] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2617f8 [0219.172] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235908 [0219.173] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\Services\\*", lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c11068, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x225bec, dwReserved1=0x420040, cFileName=".", cAlternateFileName="")) returned 0x24e980 [0219.173] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236058 [0219.173] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235908 | out: hHeap=0x1f0000) returned 1 [0219.173] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0219.173] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c11068, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x225bec, dwReserved1=0x420040, cFileName="..", cAlternateFileName="")) returned 1 [0219.173] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235f88 [0219.173] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236058 | out: hHeap=0x1f0000) returned 1 [0219.173] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0219.173] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0219.173] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440ad34a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440ad34a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440ad34a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa8e, dwReserved0=0x225bec, dwReserved1=0x420040, cFileName="verisign.bmp", cAlternateFileName="")) returned 1 [0219.173] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0219.173] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235768 [0219.173] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220c58 [0219.173] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235768 | out: hHeap=0x1f0000) returned 1 [0219.173] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235f88 | out: hHeap=0x1f0000) returned 1 [0219.173] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0219.174] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\Services\\verisign.bmp" (normalized: "c:\\program files\\common files\\services\\verisign.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fded1c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.174] GetLastError () returned 0x5 [0219.174] GetLastError () returned 0x5 [0219.174] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440ad34a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440ad34a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440ad34a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa8e, dwReserved0=0x225bec, dwReserved1=0x420040, cFileName="verisign.bmp", cAlternateFileName="")) returned 0 [0219.174] FindClose (in: hFindFile=0x24e980 | out: hFindFile=0x24e980) returned 1 [0219.174] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0219.174] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2617f8 | out: hHeap=0x1f0000) returned 1 [0219.174] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0219.174] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234aa0 | out: hHeap=0x1f0000) returned 1 [0219.174] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234ae8 [0219.174] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0219.174] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x261e58 [0219.174] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c8b8 [0219.174] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\System\\*", lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c5f95f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x225bec, dwReserved1=0x420040, cFileName=".", cAlternateFileName="")) returned 0x24e8c0 [0219.175] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2856d0 [0219.175] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0219.175] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0219.175] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c5f95f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x225bec, dwReserved1=0x420040, cFileName="..", cAlternateFileName="")) returned 1 [0219.175] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x285678 [0219.175] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217750 [0219.175] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285678 | out: hHeap=0x1f0000) returned 1 [0219.175] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2856d0 | out: hHeap=0x1f0000) returned 1 [0219.175] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0219.175] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0219.175] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0cb0a3f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x225bec, dwReserved1=0x420040, cFileName="ado", cAlternateFileName="")) returned 1 [0219.175] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c8b8 [0219.175] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x2182d0 [0219.175] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0219.175] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217750 | out: hHeap=0x1f0000) returned 1 [0219.175] lstrcmpW (lpString1="ado", lpString2=".") returned 1 [0219.175] lstrcmpW (lpString1="ado", lpString2="..") returned 1 [0219.176] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204f10 [0219.176] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235a40 [0219.176] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d5a533, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d5a533, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d5a533, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x225bec, dwReserved1=0x420040, cFileName="DirectDB.dll", cAlternateFileName="")) returned 1 [0219.176] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0219.176] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c8b8 [0219.176] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x2181d0 [0219.176] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0219.176] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2182d0 | out: hHeap=0x1f0000) returned 1 [0219.176] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0219.176] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\DirectDB.dll" (normalized: "c:\\program files\\common files\\system\\directdb.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fded1c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.176] GetLastError () returned 0x5 [0219.176] GetLastError () returned 0x5 [0219.176] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb3579, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x225bec, dwReserved1=0x420040, cFileName="en-US", cAlternateFileName="")) returned 1 [0219.176] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c8b8 [0219.176] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217c50 [0219.176] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0219.176] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2181d0 | out: hHeap=0x1f0000) returned 1 [0219.176] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0219.176] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0219.176] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0219.177] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235768 [0219.177] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f10 | out: hHeap=0x1f0000) returned 1 [0219.177] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d7f179, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x225bec, dwReserved1=0x420040, cFileName="msadc", cAlternateFileName="")) returned 1 [0219.177] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c8b8 [0219.177] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x218450 [0219.177] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0219.177] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217c50 | out: hHeap=0x1f0000) returned 1 [0219.177] lstrcmpW (lpString1="msadc", lpString2=".") returned 1 [0219.177] lstrcmpW (lpString1="msadc", lpString2="..") returned 1 [0219.177] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x48) returned 0x2261e8 [0219.177] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235908 [0219.177] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0219.177] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d8186d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x225bec, dwReserved1=0x420040, cFileName="Ole DB", cAlternateFileName="OLEDB~1")) returned 1 [0219.177] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c8b8 [0219.177] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x2175d0 [0219.177] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0219.177] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218450 | out: hHeap=0x1f0000) returned 1 [0219.177] lstrcmpW (lpString1="Ole DB", lpString2=".") returned 1 [0219.177] lstrcmpW (lpString1="Ole DB", lpString2="..") returned 1 [0219.177] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235de8 [0219.177] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235f88 [0219.503] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2261e8 | out: hHeap=0x1f0000) returned 1 [0219.504] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440d35a9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440d35a9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440d35a9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd0a00, dwReserved0=0x225bec, dwReserved1=0x420040, cFileName="wab32.dll", cAlternateFileName="")) returned 1 [0219.504] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0219.505] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8740 [0219.505] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x218450 [0219.505] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8740 | out: hHeap=0x1f0000) returned 1 [0219.505] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2175d0 | out: hHeap=0x1f0000) returned 1 [0219.505] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0219.505] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\wab32.dll" (normalized: "c:\\program files\\common files\\system\\wab32.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fded1c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.506] GetLastError () returned 0x5 [0219.506] GetLastError () returned 0x5 [0219.506] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440d35a9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440d35a9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440d35a9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xeb600, dwReserved0=0x225bec, dwReserved1=0x420040, cFileName="wab32res.dll", cAlternateFileName="")) returned 1 [0219.506] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0219.506] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8cc0 [0219.506] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x218150 [0219.506] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8cc0 | out: hHeap=0x1f0000) returned 1 [0219.507] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218450 | out: hHeap=0x1f0000) returned 1 [0219.507] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0219.507] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\wab32res.dll" (normalized: "c:\\program files\\common files\\system\\wab32res.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fded1c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.507] GetLastError () returned 0x5 [0219.507] GetLastError () returned 0x5 [0219.507] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440d35a9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440d35a9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440d35a9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xeb600, dwReserved0=0x225bec, dwReserved1=0x420040, cFileName="wab32res.dll", cAlternateFileName="")) returned 0 [0219.508] FindClose (in: hFindFile=0x24e8c0 | out: hFindFile=0x24e8c0) returned 1 [0219.508] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234548 [0219.508] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0219.508] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262cb0 [0219.508] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236058 [0219.509] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\System\\ado\\*", lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0cb0a3f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e980 [0219.510] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2359d8 [0219.510] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236058 | out: hHeap=0x1f0000) returned 1 [0219.510] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0219.510] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0cb0a3f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.510] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235be0 [0219.510] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2359d8 | out: hHeap=0x1f0000) returned 1 [0219.510] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0219.510] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0219.510] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52a0c6a1, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x52a0c6a1, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x52a0c6a1, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3a08, dwReserved0=0x0, dwReserved1=0x0, cFileName="adojavas.inc", cAlternateFileName="")) returned 1 [0219.510] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0219.510] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236058 [0219.510] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221708 [0219.511] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236058 | out: hHeap=0x1f0000) returned 1 [0219.511] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235be0 | out: hHeap=0x1f0000) returned 1 [0219.511] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0219.511] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\ado\\adojavas.inc" (normalized: "c:\\program files\\common files\\system\\ado\\adojavas.inc"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.511] GetLastError () returned 0x5 [0219.511] GetLastError () returned 0x5 [0219.511] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x529e643a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x529e643a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x529e643a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3b5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="adovbs.inc", cAlternateFileName="")) returned 1 [0219.511] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0219.511] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235700 [0219.511] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221670 [0219.511] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0219.511] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0219.512] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0219.512] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\ado\\adovbs.inc" (normalized: "c:\\program files\\common files\\system\\ado\\adovbs.inc"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.512] GetLastError () returned 0x5 [0219.512] GetLastError () returned 0x5 [0219.512] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb2730, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0219.512] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235970 [0219.512] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0219.512] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0219.512] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0219.512] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204c10 [0219.513] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2357d0 [0219.513] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43854cb5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43854cb5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43854cb5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msader15.dll", cAlternateFileName="")) returned 1 [0219.513] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0219.513] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235e50 [0219.513] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221968 [0219.513] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235e50 | out: hHeap=0x1f0000) returned 1 [0219.513] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235970 | out: hHeap=0x1f0000) returned 1 [0219.513] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0219.513] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\ado\\msader15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msader15.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.513] GetLastError () returned 0x5 [0219.513] GetLastError () returned 0x5 [0219.513] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463fb128, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xced4b5c5, ftLastAccessTime.dwHighDateTime=0x1d2fa09, ftLastWriteTime.dwLowDateTime=0x463fb128, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x12d400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado15.dll", cAlternateFileName="")) returned 1 [0219.513] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0219.514] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235970 [0219.514] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220d88 [0219.514] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235970 | out: hHeap=0x1f0000) returned 1 [0219.514] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0219.514] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0219.514] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\ado\\msado15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msado15.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.514] GetLastError () returned 0x5 [0219.514] GetLastError () returned 0x5 [0219.515] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41cc3017, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41cc3017, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41cc3017, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado20.tlb", cAlternateFileName="")) returned 1 [0219.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0219.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2360c0 [0219.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2214a8 [0219.515] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2360c0 | out: hHeap=0x1f0000) returned 1 [0219.515] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0219.515] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0219.515] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\ado\\msado20.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado20.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.516] GetLastError () returned 0x5 [0219.516] GetLastError () returned 0x5 [0219.516] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41cc3017, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41cc3017, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41cc3017, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd200, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado21.tlb", cAlternateFileName="")) returned 1 [0219.516] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0219.516] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235f20 [0219.516] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2215d8 [0219.516] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235f20 | out: hHeap=0x1f0000) returned 1 [0219.516] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0219.516] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0219.516] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\ado\\msado21.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado21.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.517] GetLastError () returned 0x5 [0219.517] GetLastError () returned 0x5 [0219.517] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41cc3017, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41cc3017, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41cc3017, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado25.tlb", cAlternateFileName="")) returned 1 [0219.517] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0219.517] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235700 [0219.517] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220eb8 [0219.517] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0219.517] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0219.517] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0219.518] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\ado\\msado25.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado25.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.518] GetLastError () returned 0x5 [0219.518] GetLastError () returned 0x5 [0219.518] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41cc3017, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41cc3017, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41cc3017, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x11400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado26.tlb", cAlternateFileName="")) returned 1 [0219.518] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0219.518] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235838 [0219.518] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220cf0 [0219.518] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235838 | out: hHeap=0x1f0000) returned 1 [0219.518] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0219.518] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0219.518] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\ado\\msado26.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado26.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.519] GetLastError () returned 0x5 [0219.519] GetLastError () returned 0x5 [0219.519] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41cc3017, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41cc3017, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41cc3017, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x11600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado27.tlb", cAlternateFileName="")) returned 1 [0219.519] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0219.519] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236128 [0219.519] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221a98 [0219.519] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236128 | out: hHeap=0x1f0000) returned 1 [0219.519] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0219.519] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0219.519] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\ado\\msado27.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado27.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.519] GetLastError () returned 0x5 [0219.519] GetLastError () returned 0x5 [0219.520] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c6f28a5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4c6f28a5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4c6f28a5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x11400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado28.tlb", cAlternateFileName="")) returned 1 [0219.520] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0219.520] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235700 [0219.520] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221708 [0219.520] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0219.520] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0219.520] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0219.520] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\ado\\msado28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado28.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.520] GetLastError () returned 0x5 [0219.520] GetLastError () returned 0x5 [0219.520] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c6f28a5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4c6f28a5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4c6f28a5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x11400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado60.tlb", cAlternateFileName="")) returned 1 [0219.520] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0219.520] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2359d8 [0219.521] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220cf0 [0219.521] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2359d8 | out: hHeap=0x1f0000) returned 1 [0219.521] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0219.521] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0219.521] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\ado\\msado60.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado60.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.569] GetLastError () returned 0x5 [0219.569] GetLastError () returned 0x5 [0219.569] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463fb128, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xd005e363, ftLastAccessTime.dwHighDateTime=0x1d2fa09, ftLastWriteTime.dwLowDateTime=0x463fb128, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x58e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadomd.dll", cAlternateFileName="")) returned 1 [0219.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0219.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236190 [0219.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2215d8 [0219.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236190 | out: hHeap=0x1f0000) returned 1 [0219.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0219.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0219.571] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\ado\\msadomd.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadomd.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.571] GetLastError () returned 0x5 [0219.571] GetLastError () returned 0x5 [0219.571] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x437960ad, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x437960ad, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x437960ad, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadomd28.tlb", cAlternateFileName="")) returned 1 [0219.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0219.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235700 [0219.572] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221080 [0219.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0219.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0219.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0219.572] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\ado\\msadomd28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msadomd28.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.573] GetLastError () returned 0x5 [0219.573] GetLastError () returned 0x5 [0219.573] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41da7e83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41da7e83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41da7e83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb200, dwReserved0=0x0, dwReserved1=0x0, cFileName="msador15.dll", cAlternateFileName="")) returned 1 [0219.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0219.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236058 [0219.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220fe8 [0219.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236058 | out: hHeap=0x1f0000) returned 1 [0219.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0219.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0219.574] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\ado\\msador15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msador15.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.575] GetLastError () returned 0x5 [0219.575] GetLastError () returned 0x5 [0219.575] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x438ed65e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x438ed65e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x438ed65e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x8c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msador28.tlb", cAlternateFileName="")) returned 1 [0219.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0219.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235e50 [0219.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2212e0 [0219.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235e50 | out: hHeap=0x1f0000) returned 1 [0219.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0219.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0219.576] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\ado\\msador28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msador28.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.576] GetLastError () returned 0x5 [0219.576] GetLastError () returned 0x5 [0219.577] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463fb128, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xc5b43065, ftLastAccessTime.dwHighDateTime=0x1d2fa09, ftLastWriteTime.dwLowDateTime=0x463fb128, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x62e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadox.dll", cAlternateFileName="")) returned 1 [0219.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0219.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2360c0 [0219.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220f50 [0219.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2360c0 | out: hHeap=0x1f0000) returned 1 [0219.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0219.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0219.578] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\ado\\msadox.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadox.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.578] GetLastError () returned 0x5 [0219.578] GetLastError () returned 0x5 [0219.578] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43c5ad98, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43c5ad98, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43c5ad98, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadox28.tlb", cAlternateFileName="")) returned 1 [0219.578] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0219.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235e50 [0219.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221670 [0219.579] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235e50 | out: hHeap=0x1f0000) returned 1 [0219.579] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0219.579] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0219.579] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\ado\\msadox28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msadox28.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.580] GetLastError () returned 0x5 [0219.580] GetLastError () returned 0x5 [0219.580] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x437960ad, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x437960ad, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x437960ad, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x16400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadrh15.dll", cAlternateFileName="")) returned 1 [0219.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0219.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235be0 [0219.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2215d8 [0219.580] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235be0 | out: hHeap=0x1f0000) returned 1 [0219.580] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0219.581] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0219.581] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\ado\\msadrh15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadrh15.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.581] GetLastError () returned 0x5 [0219.581] GetLastError () returned 0x5 [0219.582] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x437960ad, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x437960ad, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x437960ad, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x16400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadrh15.dll", cAlternateFileName="")) returned 0 [0219.582] FindClose (in: hFindFile=0x24e980 | out: hFindFile=0x24e980) returned 1 [0219.583] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234980 [0219.583] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0219.583] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x263178 [0219.583] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fef0 [0219.583] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\System\\ado\\en-US\\*", lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb2730, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ec40 [0219.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2203a0 [0219.763] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fef0 | out: hHeap=0x1f0000) returned 1 [0219.763] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0219.763] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb2730, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2201c0 [0219.763] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2203a0 | out: hHeap=0x1f0000) returned 1 [0219.763] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0219.763] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0219.763] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b9483e2, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb3fb1900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msader15.dll.mui", cAlternateFileName="")) returned 1 [0219.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0219.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220508 [0219.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219478 [0219.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220508 | out: hHeap=0x1f0000) returned 1 [0219.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2201c0 | out: hHeap=0x1f0000) returned 1 [0219.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0219.850] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\ado\\en-US\\msader15.dll.mui" (normalized: "c:\\program files\\common files\\system\\ado\\en-us\\msader15.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.851] GetLastError () returned 0x5 [0219.851] GetLastError () returned 0x5 [0219.851] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b9483e2, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb3fb1900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msader15.dll.mui", cAlternateFileName="")) returned 0 [0219.851] FindClose (in: hFindFile=0x24ec40 | out: hFindFile=0x24ec40) returned 1 [0219.851] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219478 | out: hHeap=0x1f0000) returned 1 [0219.851] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263178 | out: hHeap=0x1f0000) returned 1 [0219.851] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0219.851] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234980 | out: hHeap=0x1f0000) returned 1 [0219.851] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0219.851] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2357d0 | out: hHeap=0x1f0000) returned 1 [0219.851] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c10 | out: hHeap=0x1f0000) returned 1 [0219.852] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262cb0 | out: hHeap=0x1f0000) returned 1 [0219.852] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0219.852] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234548 | out: hHeap=0x1f0000) returned 1 [0219.852] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234818 [0219.852] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0219.852] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262fe0 [0219.852] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236058 [0219.852] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\System\\en-US\\*", lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb3579, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e8c0 [0219.852] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235e50 [0219.852] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236058 | out: hHeap=0x1f0000) returned 1 [0219.852] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0219.852] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb3579, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.853] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2362c8 [0219.853] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235e50 | out: hHeap=0x1f0000) returned 1 [0219.853] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0219.853] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0219.853] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dd86035, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x755f99d9, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x75fdf500, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32res.dll.mui", cAlternateFileName="")) returned 1 [0219.853] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282a0 [0219.853] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235970 [0219.853] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220cf0 [0219.853] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235970 | out: hHeap=0x1f0000) returned 1 [0219.853] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2362c8 | out: hHeap=0x1f0000) returned 1 [0219.854] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0219.854] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\en-US\\wab32res.dll.mui" (normalized: "c:\\program files\\common files\\system\\en-us\\wab32res.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.854] GetLastError () returned 0x5 [0219.854] GetLastError () returned 0x5 [0219.855] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dd86035, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x755f99d9, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x75fdf500, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32res.dll.mui", cAlternateFileName="")) returned 0 [0219.855] FindClose (in: hFindFile=0x24e8c0 | out: hFindFile=0x24e8c0) returned 1 [0219.855] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0219.855] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262fe0 | out: hHeap=0x1f0000) returned 1 [0219.855] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0219.855] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234818 | out: hHeap=0x1f0000) returned 1 [0219.855] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234818 [0219.856] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0219.856] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x263178 [0219.856] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2358a0 [0219.856] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\System\\msadc\\*", lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d7f179, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e8c0 [0219.856] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2357d0 [0219.856] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2358a0 | out: hHeap=0x1f0000) returned 1 [0219.856] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0219.856] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d7f179, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.857] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235e50 [0219.857] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2357d0 | out: hHeap=0x1f0000) returned 1 [0219.857] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0219.857] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0219.857] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41da7e83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41da7e83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41da7e83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x276, dwReserved0=0x0, dwReserved1=0x0, cFileName="adcjavas.inc", cAlternateFileName="")) returned 1 [0219.857] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0219.857] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2361f8 [0219.857] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221118 [0219.857] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2361f8 | out: hHeap=0x1f0000) returned 1 [0219.857] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235e50 | out: hHeap=0x1f0000) returned 1 [0219.858] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0219.858] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\msadc\\adcjavas.inc" (normalized: "c:\\program files\\common files\\system\\msadc\\adcjavas.inc"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.858] GetLastError () returned 0x5 [0219.858] GetLastError () returned 0x5 [0219.859] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41dce0ea, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41dce0ea, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41dce0ea, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x26f, dwReserved0=0x0, dwReserved1=0x0, cFileName="adcvbs.inc", cAlternateFileName="")) returned 1 [0219.859] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0219.859] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235e50 [0219.859] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220cf0 [0219.859] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235e50 | out: hHeap=0x1f0000) returned 1 [0219.859] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0219.859] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0219.860] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\msadc\\adcvbs.inc" (normalized: "c:\\program files\\common files\\system\\msadc\\adcvbs.inc"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.860] GetLastError () returned 0x5 [0219.860] GetLastError () returned 0x5 [0219.860] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d805e9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0219.860] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235c48 [0219.860] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221a00 [0219.860] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235c48 | out: hHeap=0x1f0000) returned 1 [0219.860] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0219.860] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0219.861] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0219.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204ef0 [0219.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fc20 [0219.861] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41da7e83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41da7e83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41da7e83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa9c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadce.dll", cAlternateFileName="")) returned 1 [0219.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0219.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2357d0 [0219.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221708 [0219.861] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2357d0 | out: hHeap=0x1f0000) returned 1 [0219.861] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0219.861] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0219.862] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\msadc\\msadce.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadce.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.862] GetLastError () returned 0x5 [0219.862] GetLastError () returned 0x5 [0219.862] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41dce0ea, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41dce0ea, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41dce0ea, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcer.dll", cAlternateFileName="")) returned 1 [0219.862] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0219.862] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2358a0 [0219.862] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221a00 [0219.862] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2358a0 | out: hHeap=0x1f0000) returned 1 [0219.862] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0219.862] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0219.863] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\msadc\\msadcer.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadcer.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.863] GetLastError () returned 0x5 [0219.863] GetLastError () returned 0x5 [0219.863] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41da7e83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41da7e83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41da7e83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3b400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadco.dll", cAlternateFileName="")) returned 1 [0219.863] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0219.863] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236058 [0219.863] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221248 [0219.863] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236058 | out: hHeap=0x1f0000) returned 1 [0219.863] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0219.863] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0219.864] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\msadc\\msadco.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadco.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.864] GetLastError () returned 0x5 [0219.864] GetLastError () returned 0x5 [0219.864] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41da7e83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41da7e83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41da7e83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcor.dll", cAlternateFileName="")) returned 1 [0219.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0219.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2362c8 [0219.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220d88 [0219.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2362c8 | out: hHeap=0x1f0000) returned 1 [0219.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0219.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0219.865] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\msadc\\msadcor.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadcor.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.865] GetLastError () returned 0x5 [0219.865] GetLastError () returned 0x5 [0219.865] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440870df, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440870df, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440870df, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x44400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadds.dll", cAlternateFileName="")) returned 1 [0219.865] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0219.865] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236058 [0219.865] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2211b0 [0219.865] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236058 | out: hHeap=0x1f0000) returned 1 [0219.865] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0219.865] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0219.866] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\msadc\\msadds.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadds.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.866] GetLastError () returned 0x5 [0219.866] GetLastError () returned 0x5 [0219.866] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44060e78, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x44060e78, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x44060e78, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msaddsr.dll", cAlternateFileName="")) returned 1 [0219.866] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0219.866] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2357d0 [0219.866] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220eb8 [0219.866] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2357d0 | out: hHeap=0x1f0000) returned 1 [0219.866] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0219.866] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0219.867] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\msadc\\msaddsr.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msaddsr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.867] GetLastError () returned 0x5 [0219.867] GetLastError () returned 0x5 [0219.867] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41d5b9b4, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41d5b9b4, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41d5b9b4, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaprsr.dll", cAlternateFileName="")) returned 1 [0219.867] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0219.867] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235b78 [0219.867] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221248 [0219.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0219.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0219.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0219.868] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\msadc\\msdaprsr.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaprsr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.868] GetLastError () returned 0x5 [0219.868] GetLastError () returned 0x5 [0219.868] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41d5b9b4, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41d5b9b4, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41d5b9b4, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x57000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaprst.dll", cAlternateFileName="")) returned 1 [0219.868] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0219.868] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235e50 [0219.868] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220c58 [0219.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235e50 | out: hHeap=0x1f0000) returned 1 [0219.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0219.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0219.868] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\msadc\\msdaprst.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaprst.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.869] GetLastError () returned 0x5 [0219.869] GetLastError () returned 0x5 [0219.869] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44060e78, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x44060e78, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x44060e78, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x36200, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdarem.dll", cAlternateFileName="")) returned 1 [0219.869] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0219.869] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235f20 [0219.869] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221a98 [0219.869] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235f20 | out: hHeap=0x1f0000) returned 1 [0219.869] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0219.869] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0219.869] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\msadc\\msdarem.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdarem.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.870] GetLastError () returned 0x5 [0219.870] GetLastError () returned 0x5 [0219.870] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4403ac10, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4403ac10, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4403ac10, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaremr.dll", cAlternateFileName="")) returned 1 [0219.870] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0219.870] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235aa8 [0219.870] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2217a0 [0219.870] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235aa8 | out: hHeap=0x1f0000) returned 1 [0219.870] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0219.870] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0219.870] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\msadc\\msdaremr.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaremr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.870] GetLastError () returned 0x5 [0219.870] GetLastError () returned 0x5 [0219.871] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440870df, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440870df, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440870df, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x7c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdfmap.dll", cAlternateFileName="")) returned 1 [0219.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0219.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235c48 [0219.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220fe8 [0219.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235c48 | out: hHeap=0x1f0000) returned 1 [0219.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0219.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0219.871] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\msadc\\msdfmap.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdfmap.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.871] GetLastError () returned 0x5 [0219.871] GetLastError () returned 0x5 [0219.872] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440870df, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440870df, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440870df, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x7c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdfmap.dll", cAlternateFileName="")) returned 0 [0219.872] FindClose (in: hFindFile=0x24e8c0 | out: hFindFile=0x24e8c0) returned 1 [0219.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234980 [0219.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0219.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262cb0 [0219.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f770 [0219.872] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\System\\msadc\\en-US\\*", lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d805e9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e8c0 [0219.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0219.872] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f770 | out: hHeap=0x1f0000) returned 1 [0219.873] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0219.873] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d805e9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0219.873] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0219.873] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0219.873] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0219.873] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b99489e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb198bf00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcer.dll.mui", cAlternateFileName="")) returned 1 [0219.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0219.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0219.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218978 [0219.873] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0219.873] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0219.873] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0219.874] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\msadc\\en-US\\msadcer.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msadcer.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.874] GetLastError () returned 0x5 [0219.874] GetLastError () returned 0x5 [0219.874] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b9e0d51, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb2c9ec00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcor.dll.mui", cAlternateFileName="")) returned 1 [0219.874] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0219.874] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0219.874] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218b88 [0219.874] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0219.874] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218978 | out: hHeap=0x1f0000) returned 1 [0219.874] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0219.875] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\msadc\\en-US\\msadcor.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msadcor.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.875] GetLastError () returned 0x5 [0219.875] GetLastError () returned 0x5 [0219.875] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ba9f918, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb198bf00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x3800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msaddsr.dll.mui", cAlternateFileName="")) returned 1 [0219.875] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0219.875] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220238 [0219.875] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218608 [0219.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220238 | out: hHeap=0x1f0000) returned 1 [0219.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218b88 | out: hHeap=0x1f0000) returned 1 [0219.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0219.876] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\msadc\\en-US\\msaddsr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msaddsr.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.876] GetLastError () returned 0x5 [0219.876] GetLastError () returned 0x5 [0219.876] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ba9f918, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb198bf00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaprsr.dll.mui", cAlternateFileName="")) returned 1 [0219.876] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282a0 [0219.876] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220490 [0219.876] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218fa8 [0219.876] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220490 | out: hHeap=0x1f0000) returned 1 [0219.876] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218608 | out: hHeap=0x1f0000) returned 1 [0219.876] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0219.876] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaprsr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msdaprsr.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.877] GetLastError () returned 0x5 [0219.877] GetLastError () returned 0x5 [0219.877] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb38282, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb198bf00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaremr.dll.mui", cAlternateFileName="")) returned 1 [0219.877] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282a0 [0219.877] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0219.877] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218978 [0219.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0219.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218fa8 | out: hHeap=0x1f0000) returned 1 [0219.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0219.877] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaremr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msdaremr.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.878] GetLastError () returned 0x5 [0219.878] GetLastError () returned 0x5 [0219.878] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb38282, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb198bf00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaremr.dll.mui", cAlternateFileName="")) returned 0 [0219.878] FindClose (in: hFindFile=0x24e8c0 | out: hFindFile=0x24e8c0) returned 1 [0219.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218978 | out: hHeap=0x1f0000) returned 1 [0219.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262cb0 | out: hHeap=0x1f0000) returned 1 [0219.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0219.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234980 | out: hHeap=0x1f0000) returned 1 [0219.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0219.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fc20 | out: hHeap=0x1f0000) returned 1 [0219.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ef0 | out: hHeap=0x1f0000) returned 1 [0219.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263178 | out: hHeap=0x1f0000) returned 1 [0219.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0219.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234818 | out: hHeap=0x1f0000) returned 1 [0219.878] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234aa0 [0219.878] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0219.879] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2634a8 [0219.879] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2362c8 [0219.879] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\System\\Ole DB\\*", lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d8186d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e8c0 [0219.879] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2357d0 [0219.879] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2362c8 | out: hHeap=0x1f0000) returned 1 [0219.879] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0219.879] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d8186d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.879] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2359d8 [0219.879] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2357d0 | out: hHeap=0x1f0000) returned 1 [0219.879] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0219.879] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0219.879] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d8245b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0219.879] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2358a0 [0219.879] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2215d8 [0219.879] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2358a0 | out: hHeap=0x1f0000) returned 1 [0219.879] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2359d8 | out: hHeap=0x1f0000) returned 1 [0219.879] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0219.880] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0219.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204bf0 [0219.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220328 [0219.880] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440870df, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440870df, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440870df, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x18600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaosp.dll", cAlternateFileName="")) returned 1 [0219.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238488 [0219.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235e50 [0219.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220d88 [0219.880] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235e50 | out: hHeap=0x1f0000) returned 1 [0219.880] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0219.880] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238488 | out: hHeap=0x1f0000) returned 1 [0219.880] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\Ole DB\\msdaosp.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdaosp.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.881] GetLastError () returned 0x5 [0219.881] GetLastError () returned 0x5 [0219.881] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440870df, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440870df, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440870df, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x5be00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaps.dll", cAlternateFileName="")) returned 1 [0219.881] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0219.881] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235f20 [0219.881] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220e20 [0219.881] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235f20 | out: hHeap=0x1f0000) returned 1 [0219.881] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0219.881] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0219.882] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\Ole DB\\msdaps.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdaps.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.882] GetLastError () returned 0x5 [0219.882] GetLastError () returned 0x5 [0219.882] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41d0f4ea, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41d0f4ea, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41d0f4ea, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xaa800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdasql.dll", cAlternateFileName="")) returned 1 [0219.882] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0219.882] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2362c8 [0219.882] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220fe8 [0219.882] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2362c8 | out: hHeap=0x1f0000) returned 1 [0219.882] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0219.882] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0219.883] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\Ole DB\\msdasql.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdasql.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.883] GetLastError () returned 0x5 [0219.883] GetLastError () returned 0x5 [0219.883] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41d0f4ea, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41d0f4ea, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41d0f4ea, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdasqlr.dll", cAlternateFileName="")) returned 1 [0219.883] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0219.883] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236128 [0219.883] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221a98 [0219.883] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236128 | out: hHeap=0x1f0000) returned 1 [0219.883] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0219.883] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0219.883] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\Ole DB\\msdasqlr.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdasqlr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.884] GetLastError () returned 0x5 [0219.884] GetLastError () returned 0x5 [0219.884] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41d0f4ea, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41d0f4ea, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41d0f4ea, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1ca00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdatl3.dll", cAlternateFileName="")) returned 1 [0219.884] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0219.884] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2362c8 [0219.884] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220d88 [0219.884] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2362c8 | out: hHeap=0x1f0000) returned 1 [0219.884] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0219.884] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0219.884] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\Ole DB\\msdatl3.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdatl3.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.885] GetLastError () returned 0x5 [0219.885] GetLastError () returned 0x5 [0219.885] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41d0f4ea, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41d0f4ea, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41d0f4ea, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msxactps.dll", cAlternateFileName="")) returned 1 [0219.885] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0219.885] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235c48 [0219.885] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2218d0 [0219.885] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235c48 | out: hHeap=0x1f0000) returned 1 [0219.885] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0219.885] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0219.885] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\Ole DB\\msxactps.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msxactps.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.886] GetLastError () returned 0x5 [0219.886] GetLastError () returned 0x5 [0219.886] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41ce9283, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41ce9283, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41ce9283, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledb32.dll", cAlternateFileName="")) returned 1 [0219.886] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0219.886] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236058 [0219.886] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221080 [0219.886] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236058 | out: hHeap=0x1f0000) returned 1 [0219.886] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0219.886] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0219.887] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\Ole DB\\oledb32.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\oledb32.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.887] GetLastError () returned 0x5 [0219.887] GetLastError () returned 0x5 [0219.887] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41ce9283, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41ce9283, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41ce9283, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x13000, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledb32r.dll", cAlternateFileName="")) returned 1 [0219.887] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0219.887] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235e50 [0219.887] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2215d8 [0219.888] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235e50 | out: hHeap=0x1f0000) returned 1 [0219.888] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0219.888] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0219.888] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\Ole DB\\oledb32r.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\oledb32r.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.888] GetLastError () returned 0x5 [0219.888] GetLastError () returned 0x5 [0219.889] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41ce9283, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41ce9283, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41ce9283, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x264c, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledbjvs.inc", cAlternateFileName="")) returned 1 [0219.889] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0219.889] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2357d0 [0219.889] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2211b0 [0219.889] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2357d0 | out: hHeap=0x1f0000) returned 1 [0219.889] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0219.889] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0219.889] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\Ole DB\\oledbjvs.inc" (normalized: "c:\\program files\\common files\\system\\ole db\\oledbjvs.inc"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.890] GetLastError () returned 0x5 [0219.890] GetLastError () returned 0x5 [0219.890] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41cc3017, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41cc3017, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41cc3017, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x26f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledbvbs.inc", cAlternateFileName="")) returned 1 [0219.890] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0219.890] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2360c0 [0219.890] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221118 [0219.890] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2360c0 | out: hHeap=0x1f0000) returned 1 [0219.890] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0219.890] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0219.891] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\Ole DB\\oledbvbs.inc" (normalized: "c:\\program files\\common files\\system\\ole db\\oledbvbs.inc"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.897] GetLastError () returned 0x5 [0219.897] GetLastError () returned 0x5 [0219.897] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43c80ffc, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43c80ffc, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43c80ffc, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqloledb.dll", cAlternateFileName="")) returned 1 [0219.897] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0219.897] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236058 [0219.897] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221670 [0219.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236058 | out: hHeap=0x1f0000) returned 1 [0219.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0219.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0219.898] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\Ole DB\\sqloledb.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqloledb.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0220.144] GetLastError () returned 0x5 [0220.144] GetLastError () returned 0x5 [0220.144] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43c80ffc, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43c80ffc, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43c80ffc, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqloledb.rll", cAlternateFileName="")) returned 1 [0220.144] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0220.144] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235aa8 [0220.144] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220e20 [0220.144] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235aa8 | out: hHeap=0x1f0000) returned 1 [0220.145] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0220.145] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0220.145] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\Ole DB\\sqloledb.rll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqloledb.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0220.145] GetLastError () returned 0x5 [0220.146] GetLastError () returned 0x5 [0220.146] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43854cb5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43854cb5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43854cb5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x4fa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.dll", cAlternateFileName="")) returned 1 [0220.146] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0220.146] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235aa8 [0220.146] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2215d8 [0220.146] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235aa8 | out: hHeap=0x1f0000) returned 1 [0220.147] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0220.147] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0220.147] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\Ole DB\\sqlxmlx.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqlxmlx.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0220.148] GetLastError () returned 0x5 [0220.148] GetLastError () returned 0x5 [0220.148] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43854cb5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43854cb5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43854cb5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.rll", cAlternateFileName="")) returned 1 [0220.148] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238438 [0220.148] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235aa8 [0220.148] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221670 [0220.148] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235aa8 | out: hHeap=0x1f0000) returned 1 [0220.149] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0220.149] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238438 | out: hHeap=0x1f0000) returned 1 [0220.149] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\Ole DB\\sqlxmlx.rll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqlxmlx.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0220.150] GetLastError () returned 0x5 [0220.150] GetLastError () returned 0x5 [0220.150] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43854cb5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43854cb5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43854cb5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.rll", cAlternateFileName="")) returned 0 [0220.150] FindClose (in: hFindFile=0x24e8c0 | out: hFindFile=0x24e8c0) returned 1 [0220.151] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2341a0 [0220.151] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0220.151] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262e48 [0220.151] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0220.151] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\System\\Ole DB\\en-US\\*", lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d8245b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ec40 [0220.151] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2201c0 [0220.151] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0220.151] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0220.151] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d8245b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.152] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0220.152] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2201c0 | out: hHeap=0x1f0000) returned 1 [0220.152] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0220.152] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0220.152] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb38282, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb3fb1900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdasqlr.dll.mui", cAlternateFileName="")) returned 1 [0220.152] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c58 [0220.152] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220490 [0220.152] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218818 [0220.152] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220490 | out: hHeap=0x1f0000) returned 1 [0220.153] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0220.153] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c58 | out: hHeap=0x1f0000) returned 1 [0220.153] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\Ole DB\\en-US\\msdasqlr.dll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\msdasqlr.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0220.153] GetLastError () returned 0x5 [0220.154] GetLastError () returned 0x5 [0220.154] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b9e0d51, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb3fb1900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xbc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledb32r.dll.mui", cAlternateFileName="")) returned 1 [0220.154] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238f68 [0220.154] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2202b0 [0220.154] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218768 [0220.154] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2202b0 | out: hHeap=0x1f0000) returned 1 [0220.154] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218818 | out: hHeap=0x1f0000) returned 1 [0220.154] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238f68 | out: hHeap=0x1f0000) returned 1 [0220.155] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\Ole DB\\en-US\\oledb32r.dll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\oledb32r.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0220.155] GetLastError () returned 0x5 [0220.155] GetLastError () returned 0x5 [0220.155] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb38282, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb3fb1900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xac00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqloledb.rll.mui", cAlternateFileName="")) returned 1 [0220.155] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238fa0 [0220.155] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0220.155] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218818 [0220.155] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0220.155] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218768 | out: hHeap=0x1f0000) returned 1 [0220.156] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238fa0 | out: hHeap=0x1f0000) returned 1 [0220.156] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\Ole DB\\en-US\\sqloledb.rll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\sqloledb.rll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0220.156] GetLastError () returned 0x5 [0220.156] GetLastError () returned 0x5 [0220.156] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ba9f918, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb65d7300, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.rll.mui", cAlternateFileName="")) returned 1 [0220.156] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0220.156] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2201c0 [0220.157] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218b88 [0220.157] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2201c0 | out: hHeap=0x1f0000) returned 1 [0220.157] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218818 | out: hHeap=0x1f0000) returned 1 [0220.157] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0220.157] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\Ole DB\\en-US\\sqlxmlx.rll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\sqlxmlx.rll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0220.158] GetLastError () returned 0x5 [0220.158] GetLastError () returned 0x5 [0220.158] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ba9f918, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb65d7300, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.rll.mui", cAlternateFileName="")) returned 0 [0220.158] FindClose (in: hFindFile=0x24ec40 | out: hFindFile=0x24ec40) returned 1 [0220.158] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218b88 | out: hHeap=0x1f0000) returned 1 [0220.158] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262e48 | out: hHeap=0x1f0000) returned 1 [0220.159] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0220.159] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2341a0 | out: hHeap=0x1f0000) returned 1 [0220.159] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0220.159] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220328 | out: hHeap=0x1f0000) returned 1 [0220.159] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bf0 | out: hHeap=0x1f0000) returned 1 [0220.159] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2634a8 | out: hHeap=0x1f0000) returned 1 [0220.159] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0220.159] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234aa0 | out: hHeap=0x1f0000) returned 1 [0220.159] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218150 | out: hHeap=0x1f0000) returned 1 [0220.160] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235a40 | out: hHeap=0x1f0000) returned 1 [0220.160] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235768 | out: hHeap=0x1f0000) returned 1 [0220.160] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235908 | out: hHeap=0x1f0000) returned 1 [0220.160] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235f88 | out: hHeap=0x1f0000) returned 1 [0220.160] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235de8 | out: hHeap=0x1f0000) returned 1 [0220.160] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261e58 | out: hHeap=0x1f0000) returned 1 [0220.160] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0220.160] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234ae8 | out: hHeap=0x1f0000) returned 1 [0220.160] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236398 | out: hHeap=0x1f0000) returned 1 [0220.160] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c7b0 | out: hHeap=0x1f0000) returned 1 [0220.160] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236260 | out: hHeap=0x1f0000) returned 1 [0220.160] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ca70 | out: hHeap=0x1f0000) returned 1 [0220.161] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c808 | out: hHeap=0x1f0000) returned 1 [0220.161] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236330 | out: hHeap=0x1f0000) returned 1 [0220.161] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d508 | out: hHeap=0x1f0000) returned 1 [0220.161] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0220.161] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234590 | out: hHeap=0x1f0000) returned 1 [0220.161] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234500 [0220.161] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0220.161] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2634a8 [0220.161] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8d70 [0220.161] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Internet Explorer\\*", lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfbf3a0e6, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xfbf3a0e6, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1f0000, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ec00 [0220.162] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8008 [0220.162] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d70 | out: hHeap=0x1f0000) returned 1 [0220.162] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0220.162] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfbf3a0e6, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xfbf3a0e6, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1f0000, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.162] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8d70 [0220.163] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8008 | out: hHeap=0x1f0000) returned 1 [0220.163] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0220.163] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0220.163] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d83d92, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa21685bc, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1f0000, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0220.163] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a84d8 [0220.163] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217ad0 [0220.163] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a84d8 | out: hHeap=0x1f0000) returned 1 [0220.163] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d70 | out: hHeap=0x1f0000) returned 1 [0220.164] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0220.164] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0220.164] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204e70 [0220.164] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235838 [0220.164] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a4ec31b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a4ec31b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a4ec31b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd000, dwReserved0=0x1f0000, dwReserved1=0x0, cFileName="ExtExport.exe", cAlternateFileName="")) returned 1 [0220.164] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0220.164] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8d70 [0220.164] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x218250 [0220.164] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d70 | out: hHeap=0x1f0000) returned 1 [0220.165] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217ad0 | out: hHeap=0x1f0000) returned 1 [0220.165] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0220.165] CreateFileW (lpFileName="C:\\\\Program Files\\Internet Explorer\\ExtExport.exe" (normalized: "c:\\program files\\internet explorer\\extexport.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0220.166] GetLastError () returned 0x5 [0220.166] GetLastError () returned 0x5 [0220.166] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a9b1003, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a9b1003, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a9b1003, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd400, dwReserved0=0x1f0000, dwReserved1=0x0, cFileName="hmmapi.dll", cAlternateFileName="")) returned 1 [0220.166] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0220.166] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8d70 [0220.166] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x2175d0 [0220.166] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d70 | out: hHeap=0x1f0000) returned 1 [0220.167] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218250 | out: hHeap=0x1f0000) returned 1 [0220.167] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0220.167] CreateFileW (lpFileName="C:\\\\Program Files\\Internet Explorer\\hmmapi.dll" (normalized: "c:\\program files\\internet explorer\\hmmapi.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0220.168] GetLastError () returned 0x5 [0220.168] GetLastError () returned 0x5 [0220.168] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a49fe45, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a49fe45, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a49fe45, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x7d000, dwReserved0=0x1f0000, dwReserved1=0x0, cFileName="iediagcmd.exe", cAlternateFileName="")) returned 1 [0220.168] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0220.168] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8d70 [0220.168] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x218050 [0220.168] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d70 | out: hHeap=0x1f0000) returned 1 [0220.168] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2175d0 | out: hHeap=0x1f0000) returned 1 [0220.169] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0220.169] CreateFileW (lpFileName="C:\\\\Program Files\\Internet Explorer\\iediagcmd.exe" (normalized: "c:\\program files\\internet explorer\\iediagcmd.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0220.169] GetLastError () returned 0x5 [0220.170] GetLastError () returned 0x5 [0220.170] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a70c9a1, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xbc534b5e, ftLastAccessTime.dwHighDateTime=0x1d2fa09, ftLastWriteTime.dwLowDateTime=0x4a70c9a1, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x7a800, dwReserved0=0x1f0000, dwReserved1=0x0, cFileName="ieinstal.exe", cAlternateFileName="")) returned 1 [0220.170] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0220.170] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8d70 [0220.170] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217e50 [0220.170] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d70 | out: hHeap=0x1f0000) returned 1 [0220.170] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218050 | out: hHeap=0x1f0000) returned 1 [0220.170] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0220.171] CreateFileW (lpFileName="C:\\\\Program Files\\Internet Explorer\\ieinstal.exe" (normalized: "c:\\program files\\internet explorer\\ieinstal.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0220.171] GetLastError () returned 0x5 [0220.171] GetLastError () returned 0x5 [0220.172] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a49fe45, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a49fe45, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a49fe45, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x36c00, dwReserved0=0x1f0000, dwReserved1=0x0, cFileName="ielowutil.exe", cAlternateFileName="")) returned 1 [0220.172] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0220.172] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8d70 [0220.172] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x2177d0 [0220.172] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d70 | out: hHeap=0x1f0000) returned 1 [0220.172] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217e50 | out: hHeap=0x1f0000) returned 1 [0220.172] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0220.173] CreateFileW (lpFileName="C:\\\\Program Files\\Internet Explorer\\ielowutil.exe" (normalized: "c:\\program files\\internet explorer\\ielowutil.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0220.173] GetLastError () returned 0x5 [0220.173] GetLastError () returned 0x5 [0220.173] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a49fe45, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a49fe45, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a4c60b4, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x63800, dwReserved0=0x1f0000, dwReserved1=0x0, cFileName="IEShims.dll", cAlternateFileName="")) returned 1 [0220.173] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0220.174] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8d70 [0220.174] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x2175d0 [0220.174] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d70 | out: hHeap=0x1f0000) returned 1 [0220.174] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2177d0 | out: hHeap=0x1f0000) returned 1 [0220.174] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0220.175] CreateFileW (lpFileName="C:\\\\Program Files\\Internet Explorer\\IEShims.dll" (normalized: "c:\\program files\\internet explorer\\ieshims.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0220.175] GetLastError () returned 0x5 [0220.175] GetLastError () returned 0x5 [0220.175] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa182b3a4, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa1c0b0e4, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x8ca44c00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xc9340, dwReserved0=0x1f0000, dwReserved1=0x0, cFileName="iexplore.exe", cAlternateFileName="")) returned 1 [0220.175] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0220.176] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8d70 [0220.176] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x2183d0 [0220.176] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d70 | out: hHeap=0x1f0000) returned 1 [0220.176] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2175d0 | out: hHeap=0x1f0000) returned 1 [0220.176] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0220.177] CreateFileW (lpFileName="C:\\\\Program Files\\Internet Explorer\\iexplore.exe" (normalized: "c:\\program files\\internet explorer\\iexplore.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0220.177] GetLastError () returned 0x5 [0220.177] GetLastError () returned 0x5 [0220.177] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d846d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a485593, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1f0000, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0220.177] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8d70 [0220.459] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x218350 [0220.459] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d70 | out: hHeap=0x1f0000) returned 1 [0220.459] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2183d0 | out: hHeap=0x1f0000) returned 1 [0220.459] lstrcmpW (lpString1="images", lpString2=".") returned 1 [0220.459] lstrcmpW (lpString1="images", lpString2="..") returned 1 [0220.459] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238d38 [0220.460] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235be0 [0220.460] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e70 | out: hHeap=0x1f0000) returned 1 [0220.460] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18998f0, ftCreationTime.dwHighDateTime=0x1d5a06a, ftLastAccessTime.dwLowDateTime=0x9edacdc0, ftLastAccessTime.dwHighDateTime=0x1d54126, ftLastWriteTime.dwLowDateTime=0x9edacdc0, ftLastWriteTime.dwHighDateTime=0x1d54126, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x1f0000, dwReserved1=0x0, cFileName="leechftp.exe", cAlternateFileName="")) returned 1 [0220.460] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238668 [0220.460] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8d70 [0220.460] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x218150 [0220.460] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d70 | out: hHeap=0x1f0000) returned 1 [0220.460] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218350 | out: hHeap=0x1f0000) returned 1 [0220.460] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238668 | out: hHeap=0x1f0000) returned 1 [0220.460] CreateFileW (lpFileName="C:\\\\Program Files\\Internet Explorer\\leechftp.exe" (normalized: "c:\\program files\\internet explorer\\leechftp.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0220.461] GetLastError () returned 0x20 [0220.461] GetLastError () returned 0x20 [0220.461] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2132d, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb77a1634, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb77a1634, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1f0000, dwReserved1=0x0, cFileName="SIGNUP", cAlternateFileName="")) returned 1 [0220.461] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8d70 [0220.461] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217fd0 [0220.461] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d70 | out: hHeap=0x1f0000) returned 1 [0220.461] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218150 | out: hHeap=0x1f0000) returned 1 [0220.461] lstrcmpW (lpString1="SIGNUP", lpString2=".") returned 1 [0220.461] lstrcmpW (lpString1="SIGNUP", lpString2="..") returned 1 [0220.461] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x48) returned 0x225ec8 [0220.461] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2362c8 [0220.461] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238d38 | out: hHeap=0x1f0000) returned 1 [0220.461] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a9b1003, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a9b1003, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a9b1003, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc218, dwReserved0=0x1f0000, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1 [0220.462] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238500 [0220.462] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8d70 [0220.462] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217c50 [0220.462] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d70 | out: hHeap=0x1f0000) returned 1 [0220.462] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217fd0 | out: hHeap=0x1f0000) returned 1 [0220.462] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238500 | out: hHeap=0x1f0000) returned 1 [0220.462] CreateFileW (lpFileName="C:\\\\Program Files\\Internet Explorer\\sqmapi.dll" (normalized: "c:\\program files\\internet explorer\\sqmapi.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0220.463] GetLastError () returned 0x5 [0220.463] GetLastError () returned 0x5 [0220.463] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a9b1003, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a9b1003, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a9b1003, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc218, dwReserved0=0x1f0000, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 0 [0220.463] FindClose (in: hFindFile=0x24ec00 | out: hFindFile=0x24ec00) returned 1 [0220.463] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234b30 [0220.463] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2386e0 [0220.463] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x261e58 [0220.463] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235c48 [0220.464] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Internet Explorer\\en-US\\*", lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d83d92, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa21685bc, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e8c0 [0220.464] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236398 [0220.464] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235c48 | out: hHeap=0x1f0000) returned 1 [0220.464] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0220.464] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d83d92, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa21685bc, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.464] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235a40 [0220.464] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236398 | out: hHeap=0x1f0000) returned 1 [0220.464] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0220.464] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0220.464] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b2dfe94, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x68e10600, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="hmmapi.dll.mui", cAlternateFileName="")) returned 1 [0220.464] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238528 [0220.464] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235d80 [0220.464] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2212e0 [0220.464] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235d80 | out: hHeap=0x1f0000) returned 1 [0220.465] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235a40 | out: hHeap=0x1f0000) returned 1 [0220.465] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238528 | out: hHeap=0x1f0000) returned 1 [0220.465] CreateFileW (lpFileName="C:\\\\Program Files\\Internet Explorer\\en-US\\hmmapi.dll.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\hmmapi.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fded1c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0220.465] GetLastError () returned 0x5 [0220.465] GetLastError () returned 0x5 [0220.465] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b3c4cb5, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x75fdf500, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ieinstal.exe.mui", cAlternateFileName="")) returned 1 [0220.466] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2390f0 [0220.466] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235a40 [0220.466] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2211b0 [0220.466] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235a40 | out: hHeap=0x1f0000) returned 1 [0220.466] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0220.466] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2390f0 | out: hHeap=0x1f0000) returned 1 [0220.466] CreateFileW (lpFileName="C:\\\\Program Files\\Internet Explorer\\en-US\\ieinstal.exe.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\ieinstal.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fded1c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0220.466] GetLastError () returned 0x5 [0220.467] GetLastError () returned 0x5 [0220.467] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b2212c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x74ccc800, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="iexplore.exe.mui", cAlternateFileName="")) returned 1 [0220.467] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c20 [0220.467] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235c48 [0220.467] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221540 [0220.467] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235c48 | out: hHeap=0x1f0000) returned 1 [0220.467] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0220.467] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c20 | out: hHeap=0x1f0000) returned 1 [0220.467] CreateFileW (lpFileName="C:\\\\Program Files\\Internet Explorer\\en-US\\iexplore.exe.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\iexplore.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fded1c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0220.468] GetLastError () returned 0x5 [0220.468] GetLastError () returned 0x5 [0220.468] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b2212c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x74ccc800, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="iexplore.exe.mui", cAlternateFileName="")) returned 0 [0220.468] FindClose (in: hFindFile=0x24e8c0 | out: hFindFile=0x24e8c0) returned 1 [0220.468] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0220.468] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261e58 | out: hHeap=0x1f0000) returned 1 [0220.468] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2386e0 | out: hHeap=0x1f0000) returned 1 [0220.468] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b30 | out: hHeap=0x1f0000) returned 1 [0220.468] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234b30 [0220.468] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385f0 [0220.469] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x263310 [0220.469] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235d80 [0220.469] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Internet Explorer\\images\\*", lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d846d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a485593, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e600 [0220.469] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235a40 [0220.469] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235d80 | out: hHeap=0x1f0000) returned 1 [0220.469] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0220.469] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d846d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a485593, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.469] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236398 [0220.469] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235a40 | out: hHeap=0x1f0000) returned 1 [0220.469] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0220.469] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0220.470] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a55ea4d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a55ea4d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a55ea4d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1536, dwReserved0=0x0, dwReserved1=0x0, cFileName="bing.ico", cAlternateFileName="")) returned 1 [0220.470] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238730 [0220.470] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235c48 [0220.470] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2217a0 [0220.470] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235c48 | out: hHeap=0x1f0000) returned 1 [0220.470] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236398 | out: hHeap=0x1f0000) returned 1 [0220.470] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238730 | out: hHeap=0x1f0000) returned 1 [0220.470] CreateFileW (lpFileName="C:\\\\Program Files\\Internet Explorer\\images\\bing.ico" (normalized: "c:\\program files\\internet explorer\\images\\bing.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fded1c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0220.471] GetLastError () returned 0x5 [0220.471] GetLastError () returned 0x5 [0220.471] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a55ea4d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a55ea4d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a55ea4d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1536, dwReserved0=0x0, dwReserved1=0x0, cFileName="bing.ico", cAlternateFileName="")) returned 0 [0220.471] FindClose (in: hFindFile=0x24e600 | out: hFindFile=0x24e600) returned 1 [0220.471] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0220.471] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263310 | out: hHeap=0x1f0000) returned 1 [0220.471] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385f0 | out: hHeap=0x1f0000) returned 1 [0220.471] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b30 | out: hHeap=0x1f0000) returned 1 [0220.471] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234b30 [0220.471] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238708 [0220.471] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x263310 [0220.471] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235a40 [0220.472] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Internet Explorer\\SIGNUP\\*", lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2132d, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb77a1634, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb77a1634, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e8c0 [0220.472] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236128 [0220.472] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235a40 | out: hHeap=0x1f0000) returned 1 [0220.472] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0220.472] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2132d, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb77a1634, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb77a1634, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.472] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235c48 [0220.472] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236128 | out: hHeap=0x1f0000) returned 1 [0220.472] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0220.472] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0220.472] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30c952e, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x970b4468, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x970b4468, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="install.ins", cAlternateFileName="")) returned 1 [0220.472] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385c8 [0220.472] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235f88 [0220.472] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221a00 [0220.473] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235f88 | out: hHeap=0x1f0000) returned 1 [0220.473] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235c48 | out: hHeap=0x1f0000) returned 1 [0220.473] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385c8 | out: hHeap=0x1f0000) returned 1 [0220.473] CreateFileW (lpFileName="C:\\\\Program Files\\Internet Explorer\\SIGNUP\\install.ins" (normalized: "c:\\program files\\internet explorer\\signup\\install.ins"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fded1c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0220.473] GetFileType (hFile=0x214) returned 0x1 [0220.474] CloseHandle (hObject=0x214) returned 1 [0220.474] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0220.474] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Internet Explorer\\SIGNUP\\install.ins" (normalized: "c:\\program files\\internet explorer\\signup\\install.ins"), fInfoLevelId=0x0, lpFileInformation=0x1fdedac | out: lpFileInformation=0x1fdedac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30c952e, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x970b4468, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x970b4468, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1c4)) returned 1 [0220.475] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0220.475] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2201c0 [0220.475] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Internet Explorer\\SIGNUP\\install.ins" (normalized: "c:\\program files\\internet explorer\\signup\\install.ins"), fInfoLevelId=0x0, lpFileInformation=0x1fdedbc | out: lpFileInformation=0x1fdedbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30c952e, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x970b4468, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x970b4468, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1c4)) returned 1 [0220.475] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2201c0 | out: hHeap=0x1f0000) returned 1 [0220.475] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220508 [0220.475] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220508 | out: hHeap=0x1f0000) returned 1 [0220.476] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30c952e, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x970b4468, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x970b4468, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="install.ins", cAlternateFileName="")) returned 0 [0220.476] FindClose (in: hFindFile=0x24e8c0 | out: hFindFile=0x24e8c0) returned 1 [0220.476] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0220.476] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263310 | out: hHeap=0x1f0000) returned 1 [0220.476] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238708 | out: hHeap=0x1f0000) returned 1 [0220.476] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b30 | out: hHeap=0x1f0000) returned 1 [0220.476] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217c50 | out: hHeap=0x1f0000) returned 1 [0220.476] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235838 | out: hHeap=0x1f0000) returned 1 [0220.477] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235be0 | out: hHeap=0x1f0000) returned 1 [0220.477] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2362c8 | out: hHeap=0x1f0000) returned 1 [0220.477] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225ec8 | out: hHeap=0x1f0000) returned 1 [0220.477] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2634a8 | out: hHeap=0x1f0000) returned 1 [0220.477] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0220.477] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234500 | out: hHeap=0x1f0000) returned 1 [0220.477] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234b30 [0220.477] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0220.477] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x263310 [0220.477] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234590 [0220.478] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Java\\*", lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xfc0fdd55, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xfc0fdd55, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1f0000, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e8c0 [0220.478] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238ec0 [0220.478] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225ec8 [0220.478] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ec0 | out: hHeap=0x1f0000) returned 1 [0220.478] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234590 | out: hHeap=0x1f0000) returned 1 [0220.478] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0220.478] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xfc0fdd55, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xfc0fdd55, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1f0000, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.479] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c20 [0220.479] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225e28 [0220.479] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c20 | out: hHeap=0x1f0000) returned 1 [0220.479] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225ec8 | out: hHeap=0x1f0000) returned 1 [0220.479] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0220.479] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0220.479] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe863e770, ftCreationTime.dwHighDateTime=0x1d5bbaf, ftLastAccessTime.dwLowDateTime=0xdf5500e0, ftLastAccessTime.dwHighDateTime=0x1d543b1, ftLastWriteTime.dwLowDateTime=0xdf5500e0, ftLastWriteTime.dwHighDateTime=0x1d543b1, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x1f0000, dwReserved1=0x0, cFileName="fling.exe", cAlternateFileName="")) returned 1 [0220.479] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238500 [0220.479] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238ec0 [0220.479] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8d70 [0220.479] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ec0 | out: hHeap=0x1f0000) returned 1 [0220.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225e28 | out: hHeap=0x1f0000) returned 1 [0220.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238500 | out: hHeap=0x1f0000) returned 1 [0220.480] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\fling.exe" (normalized: "c:\\program files\\java\\fling.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0220.481] GetLastError () returned 0x20 [0220.481] GetLastError () returned 0x20 [0220.481] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0de2f82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xafba0b05, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1f0000, dwReserved1=0x0, cFileName="jre1.8.0_144", cAlternateFileName="JRE18~1.0_1")) returned 1 [0220.481] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238640 [0220.481] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238f68 [0220.481] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8060 [0220.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238f68 | out: hHeap=0x1f0000) returned 1 [0220.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d70 | out: hHeap=0x1f0000) returned 1 [0220.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238640 | out: hHeap=0x1f0000) returned 1 [0220.481] lstrcmpW (lpString1="jre1.8.0_144", lpString2=".") returned 1 [0220.482] lstrcmpW (lpString1="jre1.8.0_144", lpString2="..") returned 1 [0220.482] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204bd0 [0220.482] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8d70 [0220.482] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd40ccbe0, ftCreationTime.dwHighDateTime=0x1d5b441, ftLastAccessTime.dwLowDateTime=0x1d073180, ftLastAccessTime.dwHighDateTime=0x1d5785d, ftLastWriteTime.dwLowDateTime=0x1d073180, ftLastWriteTime.dwHighDateTime=0x1d5785d, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x1f0000, dwReserved1=0x0, cFileName="spcwin.exe", cAlternateFileName="")) returned 1 [0220.482] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238500 [0220.482] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238d38 [0220.482] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a85e0 [0220.482] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238d38 | out: hHeap=0x1f0000) returned 1 [0220.482] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8060 | out: hHeap=0x1f0000) returned 1 [0220.482] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238500 | out: hHeap=0x1f0000) returned 1 [0220.483] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\spcwin.exe" (normalized: "c:\\program files\\java\\spcwin.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0220.483] GetLastError () returned 0x20 [0220.483] GetLastError () returned 0x20 [0220.483] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6e87e20, ftCreationTime.dwHighDateTime=0x1d5c516, ftLastAccessTime.dwLowDateTime=0xe9906d70, ftLastAccessTime.dwHighDateTime=0x1d5b1d3, ftLastWriteTime.dwLowDateTime=0xe9906d70, ftLastWriteTime.dwHighDateTime=0x1d5b1d3, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x1f0000, dwReserved1=0x0, cFileName="whatsapp.exe", cAlternateFileName="")) returned 1 [0220.483] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238690 [0220.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2391d0 [0220.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8480 [0220.484] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2391d0 | out: hHeap=0x1f0000) returned 1 [0220.484] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a85e0 | out: hHeap=0x1f0000) returned 1 [0220.484] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238690 | out: hHeap=0x1f0000) returned 1 [0220.485] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\whatsapp.exe" (normalized: "c:\\program files\\java\\whatsapp.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0220.485] GetLastError () returned 0x20 [0220.485] GetLastError () returned 0x20 [0220.485] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd80b1130, ftCreationTime.dwHighDateTime=0x1d53dd5, ftLastAccessTime.dwLowDateTime=0x7a6c97a0, ftLastAccessTime.dwHighDateTime=0x1d56068, ftLastWriteTime.dwLowDateTime=0x7a6c97a0, ftLastWriteTime.dwHighDateTime=0x1d56068, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x1f0000, dwReserved1=0x0, cFileName="winscp.exe", cAlternateFileName="")) returned 1 [0220.485] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238640 [0220.485] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238d38 [0220.485] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a83d0 [0220.485] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238d38 | out: hHeap=0x1f0000) returned 1 [0220.486] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8480 | out: hHeap=0x1f0000) returned 1 [0220.486] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238640 | out: hHeap=0x1f0000) returned 1 [0220.486] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\winscp.exe" (normalized: "c:\\program files\\java\\winscp.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0220.486] GetLastError () returned 0x20 [0220.487] GetLastError () returned 0x20 [0220.487] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd80b1130, ftCreationTime.dwHighDateTime=0x1d53dd5, ftLastAccessTime.dwLowDateTime=0x7a6c97a0, ftLastAccessTime.dwHighDateTime=0x1d56068, ftLastWriteTime.dwLowDateTime=0x7a6c97a0, ftLastWriteTime.dwHighDateTime=0x1d56068, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x1f0000, dwReserved1=0x0, cFileName="winscp.exe", cAlternateFileName="")) returned 0 [0220.487] FindClose (in: hFindFile=0x24e8c0 | out: hFindFile=0x24e8c0) returned 1 [0220.487] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2344b8 [0220.487] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385f0 [0220.487] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2634a8 [0220.487] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a82c8 [0220.487] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\*", lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0de2f82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xafba0b05, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24eac0 [0220.488] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8950 [0220.488] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a82c8 | out: hHeap=0x1f0000) returned 1 [0220.488] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0220.488] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0de2f82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xafba0b05, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.488] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a82c8 [0220.488] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8950 | out: hHeap=0x1f0000) returned 1 [0220.488] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0220.488] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0220.488] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xccdf4921, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xccdf4921, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bin", cAlternateFileName="")) returned 1 [0220.488] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8270 [0220.488] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a82c8 | out: hHeap=0x1f0000) returned 1 [0220.488] lstrcmpW (lpString1="bin", lpString2=".") returned 1 [0220.489] lstrcmpW (lpString1="bin", lpString2="..") returned 1 [0220.489] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204d30 [0220.489] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a85e0 [0220.489] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xcac, dwReserved0=0x0, dwReserved1=0x0, cFileName="COPYRIGHT", cAlternateFileName="COPYRI~1")) returned 1 [0220.489] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238550 [0220.489] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a87f0 [0220.489] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x2178d0 [0220.489] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a87f0 | out: hHeap=0x1f0000) returned 1 [0220.489] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8270 | out: hHeap=0x1f0000) returned 1 [0220.489] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238550 | out: hHeap=0x1f0000) returned 1 [0220.490] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT" (normalized: "c:\\program files\\java\\jre1.8.0_144\\copyright"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fded1c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0220.490] GetFileType (hFile=0x214) returned 0x1 [0220.490] CloseHandle (hObject=0x214) returned 1 [0220.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235768 [0220.491] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT" (normalized: "c:\\program files\\java\\jre1.8.0_144\\copyright"), fInfoLevelId=0x0, lpFileInformation=0x1fdedac | out: lpFileInformation=0x1fdedac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xcac)) returned 1 [0220.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235768 | out: hHeap=0x1f0000) returned 1 [0220.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2362c8 [0220.491] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT" (normalized: "c:\\program files\\java\\jre1.8.0_144\\copyright"), fInfoLevelId=0x0, lpFileInformation=0x1fdedbc | out: lpFileInformation=0x1fdedbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xcac)) returned 1 [0220.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2362c8 | out: hHeap=0x1f0000) returned 1 [0220.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2362c8 [0220.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2362c8 | out: hHeap=0x1f0000) returned 1 [0220.491] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe1f09, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xaa80821a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lib", cAlternateFileName="")) returned 1 [0220.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8480 [0220.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2178d0 | out: hHeap=0x1f0000) returned 1 [0220.492] lstrcmpW (lpString1="lib", lpString2=".") returned 1 [0220.492] lstrcmpW (lpString1="lib", lpString2="..") returned 1 [0220.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2390f0 [0220.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8a00 [0220.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d30 | out: hHeap=0x1f0000) returned 1 [0220.492] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x0, dwReserved1=0x0, cFileName="LICENSE", cAlternateFileName="")) returned 1 [0220.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a89a8 [0220.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x2175d0 [0220.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a89a8 | out: hHeap=0x1f0000) returned 1 [0220.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8480 | out: hHeap=0x1f0000) returned 1 [0220.493] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\LICENSE" (normalized: "c:\\program files\\java\\jre1.8.0_144\\license"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fded1c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0220.493] GetFileType (hFile=0x214) returned 0x1 [0220.493] CloseHandle (hObject=0x214) returned 1 [0220.494] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236398 [0220.494] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\LICENSE" (normalized: "c:\\program files\\java\\jre1.8.0_144\\license"), fInfoLevelId=0x0, lpFileInformation=0x1fdedac | out: lpFileInformation=0x1fdedac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x28)) returned 1 [0220.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236398 | out: hHeap=0x1f0000) returned 1 [0220.494] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235a40 [0220.494] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\LICENSE" (normalized: "c:\\program files\\java\\jre1.8.0_144\\license"), fInfoLevelId=0x0, lpFileInformation=0x1fdedbc | out: lpFileInformation=0x1fdedbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x28)) returned 1 [0220.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235a40 | out: hHeap=0x1f0000) returned 1 [0220.494] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235f20 [0220.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235f20 | out: hHeap=0x1f0000) returned 1 [0220.495] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="README.txt", cAlternateFileName="")) returned 1 [0220.495] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238550 [0220.495] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a88a0 [0220.495] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217650 [0220.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a88a0 | out: hHeap=0x1f0000) returned 1 [0220.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2175d0 | out: hHeap=0x1f0000) returned 1 [0220.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238550 | out: hHeap=0x1f0000) returned 1 [0220.496] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\README.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\readme.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fded1c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0220.496] GetFileType (hFile=0x214) returned 0x1 [0220.496] CloseHandle (hObject=0x214) returned 1 [0220.497] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235838 [0220.497] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\README.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\readme.txt"), fInfoLevelId=0x0, lpFileInformation=0x1fdedac | out: lpFileInformation=0x1fdedac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2e)) returned 1 [0220.497] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235838 | out: hHeap=0x1f0000) returned 1 [0220.497] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235a40 [0220.497] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\README.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\readme.txt"), fInfoLevelId=0x0, lpFileInformation=0x1fdedbc | out: lpFileInformation=0x1fdedbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2e)) returned 1 [0220.497] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235a40 | out: hHeap=0x1f0000) returned 1 [0220.497] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235838 [0220.498] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235838 | out: hHeap=0x1f0000) returned 1 [0220.498] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x210, dwReserved0=0x0, dwReserved1=0x0, cFileName="release", cAlternateFileName="")) returned 1 [0220.498] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a81c0 [0220.498] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x2182d0 [0220.498] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a81c0 | out: hHeap=0x1f0000) returned 1 [0220.498] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217650 | out: hHeap=0x1f0000) returned 1 [0220.499] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\release" (normalized: "c:\\program files\\java\\jre1.8.0_144\\release"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fded1c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0220.499] GetFileType (hFile=0x214) returned 0x1 [0220.499] CloseHandle (hObject=0x214) returned 1 [0220.500] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235a40 [0220.500] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\release" (normalized: "c:\\program files\\java\\jre1.8.0_144\\release"), fInfoLevelId=0x0, lpFileInformation=0x1fdedac | out: lpFileInformation=0x1fdedac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x210)) returned 1 [0220.500] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235a40 | out: hHeap=0x1f0000) returned 1 [0220.500] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235be0 [0220.500] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\release" (normalized: "c:\\program files\\java\\jre1.8.0_144\\release"), fInfoLevelId=0x0, lpFileInformation=0x1fdedbc | out: lpFileInformation=0x1fdedbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x210)) returned 1 [0220.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235be0 | out: hHeap=0x1f0000) returned 1 [0220.501] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2362c8 [0220.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2362c8 | out: hHeap=0x1f0000) returned 1 [0220.501] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf9bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="THIRDPARTYLICENSEREADME-JAVAFX.txt", cAlternateFileName="THIRDP~1.TXT")) returned 1 [0220.501] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8950 [0220.501] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a82c8 [0220.501] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0220.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a82c8 | out: hHeap=0x1f0000) returned 1 [0220.502] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2182d0 | out: hHeap=0x1f0000) returned 1 [0220.502] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8950 | out: hHeap=0x1f0000) returned 1 [0220.502] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme-javafx.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fded1c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0220.503] GetFileType (hFile=0x214) returned 0x1 [0220.503] CloseHandle (hObject=0x214) returned 1 [0220.503] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0220.504] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme-javafx.txt"), fInfoLevelId=0x0, lpFileInformation=0x1fdedac | out: lpFileInformation=0x1fdedac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf9bd)) returned 1 [0220.504] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0220.504] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0220.504] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme-javafx.txt"), fInfoLevelId=0x0, lpFileInformation=0x1fdedbc | out: lpFileInformation=0x1fdedbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf9bd)) returned 1 [0220.504] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0220.504] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0220.504] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0220.504] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2371c, dwReserved0=0x0, dwReserved1=0x0, cFileName="THIRDPARTYLICENSEREADME.txt", cAlternateFileName="THIRDP~2.TXT")) returned 1 [0220.504] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234500 [0220.504] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8950 [0220.504] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0220.504] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8950 | out: hHeap=0x1f0000) returned 1 [0220.505] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0220.505] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234500 | out: hHeap=0x1f0000) returned 1 [0220.505] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fded1c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0220.505] GetFileType (hFile=0x214) returned 0x1 [0220.767] CloseHandle (hObject=0x214) returned 1 [0220.776] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0220.776] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme.txt"), fInfoLevelId=0x0, lpFileInformation=0x1fdedac | out: lpFileInformation=0x1fdedac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2371c)) returned 1 [0220.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0220.777] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0220.777] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme.txt"), fInfoLevelId=0x0, lpFileInformation=0x1fdedbc | out: lpFileInformation=0x1fdedbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2371c)) returned 1 [0220.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0220.777] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0220.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0220.777] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Welcome.html", cAlternateFileName="WELCOM~1.HTM")) returned 1 [0220.777] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0220.778] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8008 [0220.778] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217cd0 [0220.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8008 | out: hHeap=0x1f0000) returned 1 [0220.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0220.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0220.779] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\Welcome.html" (normalized: "c:\\program files\\java\\jre1.8.0_144\\welcome.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fded1c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0220.779] GetFileType (hFile=0x214) returned 0x1 [0220.780] CloseHandle (hObject=0x214) returned 1 [0220.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0220.780] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\Welcome.html" (normalized: "c:\\program files\\java\\jre1.8.0_144\\welcome.html"), fInfoLevelId=0x0, lpFileInformation=0x1fdedac | out: lpFileInformation=0x1fdedac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3bb)) returned 1 [0220.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0220.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fa40 [0220.780] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\Welcome.html" (normalized: "c:\\program files\\java\\jre1.8.0_144\\welcome.html"), fInfoLevelId=0x0, lpFileInformation=0x1fdedbc | out: lpFileInformation=0x1fdedbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3bb)) returned 1 [0220.781] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fa40 | out: hHeap=0x1f0000) returned 1 [0220.781] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0220.781] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0220.781] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Welcome.html", cAlternateFileName="WELCOM~1.HTM")) returned 0 [0220.781] FindClose (in: hFindFile=0x24eac0 | out: hFindFile=0x24eac0) returned 1 [0220.781] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233cd8 [0220.781] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0220.781] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x261e58 [0220.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235a40 [0220.782] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\*", lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xccdf4921, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xcd1880f0, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e8c0 [0220.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235f20 [0220.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235a40 | out: hHeap=0x1f0000) returned 1 [0220.782] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0220.782] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xccdf4921, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xcd1880f0, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236260 [0220.783] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235f20 | out: hHeap=0x1f0000) returned 1 [0220.783] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0220.783] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0220.783] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xccdf4921, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x172543, dwReserved0=0x0, dwReserved1=0x0, cFileName="awt.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="AWTDLL~1.ODV")) returned 1 [0220.783] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0220.783] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235f20 [0220.783] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x22d368 [0220.783] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235f20 | out: hHeap=0x1f0000) returned 1 [0220.783] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236260 | out: hHeap=0x1f0000) returned 1 [0220.783] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0220.784] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\awt.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\awt.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0220.784] GetFileType (hFile=0x214) returned 0x1 [0220.785] CloseHandle (hObject=0x214) returned 1 [0220.785] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2366d8 [0220.785] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\awt.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\awt.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xccdf4921, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x172543)) returned 1 [0220.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0220.785] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2366d8 [0220.786] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\awt.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\awt.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xccdf4921, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x172543)) returned 1 [0220.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0220.786] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2366d8 [0220.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0220.786] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bci.dll", cAlternateFileName="")) returned 1 [0220.786] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235908 [0220.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d368 | out: hHeap=0x1f0000) returned 1 [0220.787] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\bci.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\bci.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0220.787] GetFileType (hFile=0x214) returned 0x1 [0220.788] CloseHandle (hObject=0x214) returned 1 [0220.788] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2358a0 [0220.788] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\bci.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\bci.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4240)) returned 1 [0220.788] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2358a0 | out: hHeap=0x1f0000) returned 1 [0220.788] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235838 [0220.788] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\bci.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\bci.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4240)) returned 1 [0220.788] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235838 | out: hHeap=0x1f0000) returned 1 [0220.789] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2361f8 [0220.789] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2361f8 | out: hHeap=0x1f0000) returned 1 [0220.789] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x27040, dwReserved0=0x0, dwReserved1=0x0, cFileName="dcpr.dll", cAlternateFileName="")) returned 1 [0220.789] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0220.789] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235f20 [0220.789] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220eb8 [0220.789] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235f20 | out: hHeap=0x1f0000) returned 1 [0220.789] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235908 | out: hHeap=0x1f0000) returned 1 [0220.789] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0220.790] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\dcpr.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dcpr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0220.790] GetFileType (hFile=0x214) returned 0x1 [0220.790] CloseHandle (hObject=0x214) returned 1 [0220.790] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220508 [0220.790] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\dcpr.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dcpr.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x27040)) returned 1 [0220.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220508 | out: hHeap=0x1f0000) returned 1 [0220.791] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2202b0 [0220.791] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\dcpr.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dcpr.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x27040)) returned 1 [0220.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2202b0 | out: hHeap=0x1f0000) returned 1 [0220.791] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2202b0 [0220.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2202b0 | out: hHeap=0x1f0000) returned 1 [0220.791] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x15040, dwReserved0=0x0, dwReserved1=0x0, cFileName="decora_sse.dll", cAlternateFileName="DECORA~1.DLL")) returned 1 [0220.791] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0220.791] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235f20 [0220.792] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2214a8 [0220.792] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235f20 | out: hHeap=0x1f0000) returned 1 [0220.792] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0220.792] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0220.792] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\decora_sse.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\decora_sse.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0220.793] GetFileType (hFile=0x214) returned 0x1 [0220.793] CloseHandle (hObject=0x214) returned 1 [0220.794] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0220.794] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\decora_sse.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\decora_sse.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x15040)) returned 1 [0220.794] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0220.794] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0220.794] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\decora_sse.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\decora_sse.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x15040)) returned 1 [0220.794] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0220.794] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fc98 [0220.794] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fc98 | out: hHeap=0x1f0000) returned 1 [0220.795] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0a0bb4, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xca0a0bb4, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xca4ccf22, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x8f953, dwReserved0=0x0, dwReserved1=0x0, cFileName="deploy.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="DEPLOY~1.ODV")) returned 1 [0220.795] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219d98 [0220.795] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235700 [0220.795] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x22d368 [0220.795] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0220.795] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0220.795] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219d98 | out: hHeap=0x1f0000) returned 1 [0220.796] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\deploy.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\deploy.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0220.796] GetFileType (hFile=0x214) returned 0x1 [0220.796] CloseHandle (hObject=0x214) returned 1 [0220.797] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x2366d8 [0220.797] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\deploy.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\deploy.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0a0bb4, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xca0a0bb4, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xca4ccf22, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x8f953)) returned 1 [0220.797] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0220.797] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x2366d8 [0220.797] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\deploy.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\deploy.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0a0bb4, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xca0a0bb4, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xca4ccf22, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x8f953)) returned 1 [0220.797] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0220.797] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x2366d8 [0220.797] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0220.797] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2891a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dtplugin", cAlternateFileName="")) returned 1 [0220.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0220.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235f20 [0220.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2218d0 [0220.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235f20 | out: hHeap=0x1f0000) returned 1 [0220.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d368 | out: hHeap=0x1f0000) returned 1 [0220.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0220.798] lstrcmpW (lpString1="dtplugin", lpString2=".") returned 1 [0220.798] lstrcmpW (lpString1="dtplugin", lpString2="..") returned 1 [0220.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204f30 [0220.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2202b0 [0220.798] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7440, dwReserved0=0x0, dwReserved1=0x0, cFileName="dt_shmem.dll", cAlternateFileName="")) returned 1 [0220.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0220.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235a40 [0220.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221968 [0220.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235a40 | out: hHeap=0x1f0000) returned 1 [0220.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0220.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0220.799] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_shmem.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dt_shmem.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0220.800] GetFileType (hFile=0x214) returned 0x1 [0220.800] CloseHandle (hObject=0x214) returned 1 [0220.800] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fc98 [0220.801] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_shmem.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dt_shmem.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7440)) returned 1 [0220.801] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fc98 | out: hHeap=0x1f0000) returned 1 [0220.801] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0220.801] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_shmem.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dt_shmem.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7440)) returned 1 [0220.801] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0220.801] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fc98 [0220.801] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fc98 | out: hHeap=0x1f0000) returned 1 [0220.801] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x6040, dwReserved0=0x0, dwReserved1=0x0, cFileName="dt_socket.dll", cAlternateFileName="DT_SOC~1.DLL")) returned 1 [0220.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238438 [0220.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235d80 [0220.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221708 [0220.802] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235d80 | out: hHeap=0x1f0000) returned 1 [0220.802] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0220.802] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238438 | out: hHeap=0x1f0000) returned 1 [0220.803] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_socket.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dt_socket.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0220.803] GetFileType (hFile=0x214) returned 0x1 [0220.804] CloseHandle (hObject=0x214) returned 1 [0220.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0220.804] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_socket.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dt_socket.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x6040)) returned 1 [0220.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0220.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f7e8 [0220.804] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_socket.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dt_socket.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x6040)) returned 1 [0220.805] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f7e8 | out: hHeap=0x1f0000) returned 1 [0220.805] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2201c0 [0220.805] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2201c0 | out: hHeap=0x1f0000) returned 1 [0220.805] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x21440, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.dll", cAlternateFileName="")) returned 1 [0220.805] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0220.805] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235be0 [0220.805] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2215d8 [0220.805] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235be0 | out: hHeap=0x1f0000) returned 1 [0220.805] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0220.805] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0220.806] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\eula.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\eula.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0220.806] GetFileType (hFile=0x214) returned 0x1 [0220.806] CloseHandle (hObject=0x214) returned 1 [0220.806] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0220.806] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\eula.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\eula.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x21440)) returned 1 [0220.807] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0220.807] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220328 [0220.807] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\eula.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\eula.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x21440)) returned 1 [0220.807] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220328 | out: hHeap=0x1f0000) returned 1 [0220.807] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220328 [0220.807] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220328 | out: hHeap=0x1f0000) returned 1 [0220.807] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xccb924da, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xccb924da, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xcd161ded, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x43153, dwReserved0=0x0, dwReserved1=0x0, cFileName="fontmanager.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="FONTMA~1.ODV")) returned 1 [0220.807] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a4d0 [0220.807] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235d80 [0220.807] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x22d368 [0220.807] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235d80 | out: hHeap=0x1f0000) returned 1 [0220.807] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0220.807] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a4d0 | out: hHeap=0x1f0000) returned 1 [0220.808] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\fontmanager.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\fontmanager.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0220.808] GetFileType (hFile=0x214) returned 0x1 [0220.808] CloseHandle (hObject=0x214) returned 1 [0220.808] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x2366d8 [0220.808] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\fontmanager.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\fontmanager.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xccb924da, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xccb924da, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xcd161ded, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x43153)) returned 1 [0220.809] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0220.809] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x2366d8 [0220.809] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\fontmanager.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\fontmanager.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xccb924da, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xccb924da, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xcd161ded, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x43153)) returned 1 [0220.809] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0220.809] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x2366d8 [0220.809] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0220.809] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2da40, dwReserved0=0x0, dwReserved1=0x0, cFileName="fxplugins.dll", cAlternateFileName="FXPLUG~1.DLL")) returned 1 [0220.809] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0220.809] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236058 [0220.809] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221378 [0220.809] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236058 | out: hHeap=0x1f0000) returned 1 [0220.809] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d368 | out: hHeap=0x1f0000) returned 1 [0220.809] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0220.810] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\fxplugins.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\fxplugins.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0220.810] GetFileType (hFile=0x214) returned 0x1 [0220.810] CloseHandle (hObject=0x214) returned 1 [0220.810] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220508 [0220.811] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\fxplugins.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\fxplugins.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2da40)) returned 1 [0220.811] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220508 | out: hHeap=0x1f0000) returned 1 [0220.811] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2201c0 [0220.811] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\fxplugins.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\fxplugins.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2da40)) returned 1 [0220.811] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2201c0 | out: hHeap=0x1f0000) returned 1 [0220.811] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0220.811] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0220.811] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x40e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="glass.dll", cAlternateFileName="")) returned 1 [0220.811] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0220.811] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235d80 [0220.811] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220c58 [0220.811] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235d80 | out: hHeap=0x1f0000) returned 1 [0220.812] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0220.812] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0220.812] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\glass.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\glass.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0220.812] GetFileType (hFile=0x214) returned 0x1 [0220.813] CloseHandle (hObject=0x214) returned 1 [0220.813] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2203a0 [0220.813] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\glass.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\glass.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x40e40)) returned 1 [0220.813] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2203a0 | out: hHeap=0x1f0000) returned 1 [0220.813] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2201c0 [0220.814] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\glass.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\glass.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x40e40)) returned 1 [0220.814] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2201c0 | out: hHeap=0x1f0000) returned 1 [0220.814] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220508 [0220.814] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220508 | out: hHeap=0x1f0000) returned 1 [0220.814] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd1880f0, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xcd1880f0, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xcd1880f0, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="glass.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="GLASSD~1.ODV")) returned 1 [0220.814] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21aab8 [0220.814] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235d80 [0220.814] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x22d368 [0220.814] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235d80 | out: hHeap=0x1f0000) returned 1 [0220.814] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0220.814] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21aab8 | out: hHeap=0x1f0000) returned 1 [0220.815] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\glass.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\glass.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0220.815] GetFileType (hFile=0x214) returned 0x1 [0220.816] CloseHandle (hObject=0x214) returned 1 [0220.987] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x2367d0 [0220.987] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\glass.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\glass.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd1880f0, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xcd1880f0, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xcd1880f0, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x40e50)) returned 1 [0220.987] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2367d0 | out: hHeap=0x1f0000) returned 1 [0220.987] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x2367d0 [0220.988] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\glass.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\glass.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd1880f0, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xcd1880f0, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xcd1880f0, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x40e50)) returned 1 [0220.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2367d0 | out: hHeap=0x1f0000) returned 1 [0220.988] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x2367d0 [0220.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2367d0 | out: hHeap=0x1f0000) returned 1 [0220.988] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x6f440, dwReserved0=0x0, dwReserved1=0x0, cFileName="glib-lite.dll", cAlternateFileName="GLIB-L~1.DLL")) returned 1 [0220.988] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0220.988] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235a40 [0220.988] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221540 [0220.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235a40 | out: hHeap=0x1f0000) returned 1 [0220.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d368 | out: hHeap=0x1f0000) returned 1 [0220.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0221.092] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\glib-lite.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\glib-lite.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1bc [0221.093] GetFileType (hFile=0x1bc) returned 0x1 [0221.093] CloseHandle (hObject=0x1bc) returned 1 [0221.094] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f770 [0221.094] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\glib-lite.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\glib-lite.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x6f440)) returned 1 [0221.094] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f770 | out: hHeap=0x1f0000) returned 1 [0221.094] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0221.094] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\glib-lite.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\glib-lite.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x6f440)) returned 1 [0221.094] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0221.094] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220508 [0221.094] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220508 | out: hHeap=0x1f0000) returned 1 [0221.094] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca8f9084, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xca8f9084, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xcb10f519, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x97553, dwReserved0=0x0, dwReserved1=0x0, cFileName="gstreamer-lite.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="GSTREA~1.ODV")) returned 1 [0221.095] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2610a8 [0221.095] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235a40 [0221.095] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285098 [0221.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235a40 | out: hHeap=0x1f0000) returned 1 [0221.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0221.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2610a8 | out: hHeap=0x1f0000) returned 1 [0221.096] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\gstreamer-lite.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\gstreamer-lite.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1bc [0221.096] GetFileType (hFile=0x1bc) returned 0x1 [0221.096] CloseHandle (hObject=0x1bc) returned 1 [0221.097] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2855c0 [0221.097] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\gstreamer-lite.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\gstreamer-lite.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca8f9084, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xca8f9084, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xcb10f519, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x97553)) returned 1 [0221.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2855c0 | out: hHeap=0x1f0000) returned 1 [0221.097] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2859e0 [0221.097] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\gstreamer-lite.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\gstreamer-lite.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca8f9084, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xca8f9084, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xcb10f519, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x97553)) returned 1 [0221.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2859e0 | out: hHeap=0x1f0000) returned 1 [0221.098] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2854b8 [0221.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2854b8 | out: hHeap=0x1f0000) returned 1 [0221.098] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x26a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="hprof.dll", cAlternateFileName="")) returned 1 [0221.098] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0221.098] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236398 [0221.098] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221248 [0221.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236398 | out: hHeap=0x1f0000) returned 1 [0221.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285098 | out: hHeap=0x1f0000) returned 1 [0221.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0221.099] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\hprof.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\hprof.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1bc [0221.099] GetFileType (hFile=0x1bc) returned 0x1 [0221.100] CloseHandle (hObject=0x1bc) returned 1 [0221.100] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0221.100] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\hprof.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\hprof.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x26a40)) returned 1 [0221.100] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0221.100] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fc98 [0221.100] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\hprof.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\hprof.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x26a40)) returned 1 [0221.101] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fc98 | out: hHeap=0x1f0000) returned 1 [0221.101] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0221.101] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0221.101] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1e240, dwReserved0=0x0, dwReserved1=0x0, cFileName="instrument.dll", cAlternateFileName="INSTRU~1.DLL")) returned 1 [0221.101] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0221.101] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235768 [0221.101] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220fe8 [0221.101] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235768 | out: hHeap=0x1f0000) returned 1 [0221.101] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0221.102] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0221.102] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\instrument.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\instrument.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1bc [0221.102] GetFileType (hFile=0x1bc) returned 0x1 [0221.103] CloseHandle (hObject=0x1bc) returned 1 [0221.103] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220508 [0221.103] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\instrument.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\instrument.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1e240)) returned 1 [0221.103] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220508 | out: hHeap=0x1f0000) returned 1 [0221.103] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fc98 [0221.104] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\instrument.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\instrument.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1e240)) returned 1 [0221.104] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fc98 | out: hHeap=0x1f0000) returned 1 [0221.104] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220580 [0221.104] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220580 | out: hHeap=0x1f0000) returned 1 [0221.104] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="j2pcsc.dll", cAlternateFileName="")) returned 1 [0221.104] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0221.104] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2360c0 [0221.104] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221118 [0221.104] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2360c0 | out: hHeap=0x1f0000) returned 1 [0221.104] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0221.104] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0221.105] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pcsc.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\j2pcsc.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1bc [0221.105] GetFileType (hFile=0x1bc) returned 0x1 [0221.106] CloseHandle (hObject=0x1bc) returned 1 [0221.106] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220508 [0221.106] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pcsc.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\j2pcsc.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4a40)) returned 1 [0221.106] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220508 | out: hHeap=0x1f0000) returned 1 [0221.106] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220328 [0221.106] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pcsc.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\j2pcsc.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4a40)) returned 1 [0221.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220328 | out: hHeap=0x1f0000) returned 1 [0221.107] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0221.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0221.107] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf840, dwReserved0=0x0, dwReserved1=0x0, cFileName="j2pkcs11.dll", cAlternateFileName="")) returned 1 [0221.107] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0221.107] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235f88 [0221.107] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221a00 [0221.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235f88 | out: hHeap=0x1f0000) returned 1 [0221.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0221.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0221.108] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pkcs11.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\j2pkcs11.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1bc [0221.108] GetFileType (hFile=0x1bc) returned 0x1 [0221.108] CloseHandle (hObject=0x1bc) returned 1 [0221.109] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0221.109] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pkcs11.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\j2pkcs11.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf840)) returned 1 [0221.109] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0221.109] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2201c0 [0221.109] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pkcs11.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\j2pkcs11.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf840)) returned 1 [0221.109] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2201c0 | out: hHeap=0x1f0000) returned 1 [0221.109] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220508 [0221.109] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220508 | out: hHeap=0x1f0000) returned 1 [0221.109] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5240, dwReserved0=0x0, dwReserved1=0x0, cFileName="jaas_nt.dll", cAlternateFileName="")) returned 1 [0221.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0221.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236330 [0221.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220eb8 [0221.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236330 | out: hHeap=0x1f0000) returned 1 [0221.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0221.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0221.110] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jaas_nt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jaas_nt.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1bc [0221.111] GetFileType (hFile=0x1bc) returned 0x1 [0221.111] CloseHandle (hObject=0x1bc) returned 1 [0221.111] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220328 [0221.111] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jaas_nt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jaas_nt.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5240)) returned 1 [0221.112] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220328 | out: hHeap=0x1f0000) returned 1 [0221.112] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0221.112] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jaas_nt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jaas_nt.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5240)) returned 1 [0221.112] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0221.112] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f7e8 [0221.112] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f7e8 | out: hHeap=0x1f0000) returned 1 [0221.112] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8640, dwReserved0=0x0, dwReserved1=0x0, cFileName="jabswitch.exe", cAlternateFileName="JABSWI~1.EXE")) returned 1 [0221.112] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0221.112] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235b78 [0221.113] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220c58 [0221.113] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0221.113] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0221.113] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0221.113] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jabswitch.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jabswitch.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1bc [0221.114] GetFileType (hFile=0x1bc) returned 0x1 [0221.114] CloseHandle (hObject=0x1bc) returned 1 [0221.114] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f7e8 [0221.114] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jabswitch.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jabswitch.exe"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8640)) returned 1 [0221.115] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f7e8 | out: hHeap=0x1f0000) returned 1 [0221.115] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0221.115] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jabswitch.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jabswitch.exe"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8640)) returned 1 [0221.116] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0221.116] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f770 [0221.116] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f770 | out: hHeap=0x1f0000) returned 1 [0221.116] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="java-rmi.exe", cAlternateFileName="")) returned 1 [0221.116] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0221.116] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235de8 [0221.116] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220d88 [0221.116] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235de8 | out: hHeap=0x1f0000) returned 1 [0221.116] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0221.116] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0221.117] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\java-rmi.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java-rmi.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1bc [0221.117] GetFileType (hFile=0x1bc) returned 0x1 [0221.117] CloseHandle (hObject=0x1bc) returned 1 [0221.118] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0221.118] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\java-rmi.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java-rmi.exe"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e40)) returned 1 [0221.118] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0221.118] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0221.118] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\java-rmi.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java-rmi.exe"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e40)) returned 1 [0221.118] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0221.118] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0221.118] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0221.118] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x27040, dwReserved0=0x0, dwReserved1=0x0, cFileName="java.dll", cAlternateFileName="")) returned 1 [0221.119] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0221.119] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235d80 [0221.119] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220f50 [0221.119] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235d80 | out: hHeap=0x1f0000) returned 1 [0221.119] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0221.119] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0221.119] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\java.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1bc [0221.119] GetFileType (hFile=0x1bc) returned 0x1 [0221.120] CloseHandle (hObject=0x1bc) returned 1 [0221.120] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0221.120] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\java.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x27040)) returned 1 [0221.120] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0221.120] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fc98 [0221.120] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\java.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x27040)) returned 1 [0221.120] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fc98 | out: hHeap=0x1f0000) returned 1 [0221.120] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0221.121] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0221.121] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x32840, dwReserved0=0x0, dwReserved1=0x0, cFileName="java.exe", cAlternateFileName="")) returned 1 [0221.121] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0221.121] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235f20 [0221.121] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221968 [0221.121] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235f20 | out: hHeap=0x1f0000) returned 1 [0221.121] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0221.121] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0221.121] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\java.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1bc [0221.122] GetFileType (hFile=0x1bc) returned 0x1 [0221.122] CloseHandle (hObject=0x1bc) returned 1 [0221.122] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0221.122] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\java.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java.exe"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x32840)) returned 1 [0221.122] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0221.123] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0221.123] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\java.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java.exe"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x32840)) returned 1 [0221.123] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0221.123] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0221.123] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0221.123] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x22c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="JavaAccessBridge-64.dll", cAlternateFileName="JAVAAC~1.DLL")) returned 1 [0221.123] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239128 [0221.123] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235a40 [0221.123] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2214a8 [0221.123] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235a40 | out: hHeap=0x1f0000) returned 1 [0221.123] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0221.123] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239128 | out: hHeap=0x1f0000) returned 1 [0221.124] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\JavaAccessBridge-64.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaaccessbridge-64.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1bc [0221.124] GetFileType (hFile=0x1bc) returned 0x1 [0221.124] CloseHandle (hObject=0x1bc) returned 1 [0221.124] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0221.124] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\JavaAccessBridge-64.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaaccessbridge-64.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x22c40)) returned 1 [0221.125] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0221.125] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0221.125] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\JavaAccessBridge-64.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaaccessbridge-64.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x22c40)) returned 1 [0221.125] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0221.125] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0221.125] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0221.125] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2dc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="javacpl.cpl", cAlternateFileName="")) returned 1 [0221.125] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0221.125] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236330 [0221.125] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221a98 [0221.125] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236330 | out: hHeap=0x1f0000) returned 1 [0221.125] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0221.125] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0221.126] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.cpl" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javacpl.cpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1bc [0221.126] GetFileType (hFile=0x1bc) returned 0x1 [0221.126] CloseHandle (hObject=0x1bc) returned 1 [0221.127] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fc98 [0221.127] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.cpl" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javacpl.cpl"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2dc00)) returned 1 [0221.127] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fc98 | out: hHeap=0x1f0000) returned 1 [0221.127] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0221.127] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.cpl" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javacpl.cpl"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2dc00)) returned 1 [0221.127] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0221.127] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0221.127] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0221.127] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="javacpl.exe", cAlternateFileName="")) returned 1 [0221.127] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0221.128] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235838 [0221.128] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221838 [0221.128] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235838 | out: hHeap=0x1f0000) returned 1 [0221.128] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0221.128] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0221.128] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javacpl.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1bc [0221.128] GetFileType (hFile=0x1bc) returned 0x1 [0221.129] CloseHandle (hObject=0x1bc) returned 1 [0221.129] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0221.129] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javacpl.exe"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13a40)) returned 1 [0221.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0221.129] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0221.129] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javacpl.exe"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13a40)) returned 1 [0221.130] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0221.130] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0221.130] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0221.130] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x10e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="javafx_font.dll", cAlternateFileName="JAVAFX~1.DLL")) returned 1 [0221.130] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0221.130] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235a40 [0221.130] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221a98 [0221.130] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235a40 | out: hHeap=0x1f0000) returned 1 [0221.130] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0221.130] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0221.421] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_font.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0221.421] GetFileType (hFile=0x1b0) returned 0x1 [0221.421] CloseHandle (hObject=0x1b0) returned 1 [0221.421] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2203a0 [0221.421] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_font.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x10e40)) returned 1 [0221.421] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2203a0 | out: hHeap=0x1f0000) returned 1 [0221.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0221.422] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_font.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x10e40)) returned 1 [0221.422] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0221.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0221.422] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0221.422] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb5f6fbf, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xcb5f6fbf, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xcba95670, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x83753, dwReserved0=0x0, dwReserved1=0x0, cFileName="javafx_font_t2k.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="JAVAFX~1.ODV")) returned 1 [0221.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261388 [0221.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236330 [0221.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285ae8 [0221.422] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236330 | out: hHeap=0x1f0000) returned 1 [0221.422] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0221.422] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261388 | out: hHeap=0x1f0000) returned 1 [0221.423] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font_t2k.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_font_t2k.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0221.423] GetFileType (hFile=0x1b0) returned 0x1 [0221.423] CloseHandle (hObject=0x1b0) returned 1 [0221.424] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x284f90 [0221.424] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font_t2k.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_font_t2k.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb5f6fbf, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xcb5f6fbf, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xcba95670, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x83753)) returned 1 [0221.424] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x284f90 | out: hHeap=0x1f0000) returned 1 [0221.424] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2852a8 [0221.424] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font_t2k.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_font_t2k.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb5f6fbf, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xcb5f6fbf, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xcba95670, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x83753)) returned 1 [0221.424] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2852a8 | out: hHeap=0x1f0000) returned 1 [0221.424] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285098 [0221.424] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285098 | out: hHeap=0x1f0000) returned 1 [0221.424] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1f440, dwReserved0=0x0, dwReserved1=0x0, cFileName="javafx_iio.dll", cAlternateFileName="JAVAFX~3.DLL")) returned 1 [0221.424] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0221.425] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235b78 [0221.425] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221b30 [0221.425] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0221.425] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285ae8 | out: hHeap=0x1f0000) returned 1 [0221.425] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0221.425] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_iio.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_iio.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0221.425] GetFileType (hFile=0x1b0) returned 0x1 [0221.425] CloseHandle (hObject=0x1b0) returned 1 [0221.426] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fab8 [0221.426] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_iio.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_iio.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1f440)) returned 1 [0221.426] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fab8 | out: hHeap=0x1f0000) returned 1 [0221.426] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd88 [0221.426] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_iio.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_iio.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1f440)) returned 1 [0221.426] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd88 | out: hHeap=0x1f0000) returned 1 [0221.426] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f7e8 [0221.426] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f7e8 | out: hHeap=0x1f0000) returned 1 [0221.426] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x32840, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaw.exe", cAlternateFileName="")) returned 1 [0221.426] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0221.426] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235768 [0221.426] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221378 [0221.427] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235768 | out: hHeap=0x1f0000) returned 1 [0221.427] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0221.427] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0221.427] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\javaw.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaw.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0221.427] GetFileType (hFile=0x1b0) returned 0x1 [0221.427] CloseHandle (hObject=0x1b0) returned 1 [0221.427] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0221.428] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\javaw.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaw.exe"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x32840)) returned 1 [0221.428] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0221.428] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220508 [0221.428] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\javaw.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaw.exe"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x32840)) returned 1 [0221.428] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220508 | out: hHeap=0x1f0000) returned 1 [0221.428] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2203a0 [0221.428] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2203a0 | out: hHeap=0x1f0000) returned 1 [0221.428] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e040, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaws.exe", cAlternateFileName="")) returned 1 [0221.428] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0221.428] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235aa8 [0221.428] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220cf0 [0221.428] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235aa8 | out: hHeap=0x1f0000) returned 1 [0221.428] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0221.428] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0221.429] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\javaws.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaws.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0221.429] GetFileType (hFile=0x1b0) returned 0x1 [0221.429] CloseHandle (hObject=0x1b0) returned 1 [0221.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0221.429] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\javaws.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaws.exe"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e040)) returned 1 [0221.429] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0221.430] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0221.430] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\javaws.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaws.exe"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e040)) returned 1 [0221.430] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0221.430] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220508 [0221.430] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220508 | out: hHeap=0x1f0000) returned 1 [0221.430] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7440, dwReserved0=0x0, dwReserved1=0x0, cFileName="java_crw_demo.dll", cAlternateFileName="JAVA_C~1.DLL")) returned 1 [0221.430] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c90 [0221.430] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235a40 [0221.430] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220eb8 [0221.430] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235a40 | out: hHeap=0x1f0000) returned 1 [0221.430] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0221.430] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c90 | out: hHeap=0x1f0000) returned 1 [0221.431] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\java_crw_demo.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java_crw_demo.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0221.431] GetFileType (hFile=0x1b0) returned 0x1 [0221.431] CloseHandle (hObject=0x1b0) returned 1 [0221.431] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0221.431] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\java_crw_demo.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java_crw_demo.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7440)) returned 1 [0221.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0221.431] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212be0 [0221.431] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\java_crw_demo.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java_crw_demo.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7440)) returned 1 [0221.432] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212be0 | out: hHeap=0x1f0000) returned 1 [0221.432] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0221.432] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0221.432] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3840, dwReserved0=0x0, dwReserved1=0x0, cFileName="jawt.dll", cAlternateFileName="")) returned 1 [0221.432] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0221.432] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236260 [0221.432] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221248 [0221.432] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236260 | out: hHeap=0x1f0000) returned 1 [0221.432] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0221.432] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0221.432] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jawt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jawt.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0221.433] GetFileType (hFile=0x1b0) returned 0x1 [0221.433] CloseHandle (hObject=0x1b0) returned 1 [0221.433] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0221.433] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jawt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jawt.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3840)) returned 1 [0221.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0221.433] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0221.433] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jawt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jawt.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3840)) returned 1 [0221.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0221.433] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0221.434] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0221.434] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="JAWTAccessBridge-64.dll", cAlternateFileName="JAWTAC~1.DLL")) returned 1 [0221.434] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238f30 [0221.434] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2360c0 [0221.434] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220eb8 [0221.434] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2360c0 | out: hHeap=0x1f0000) returned 1 [0221.434] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0221.434] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238f30 | out: hHeap=0x1f0000) returned 1 [0221.434] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\JAWTAccessBridge-64.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jawtaccessbridge-64.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0221.434] GetFileType (hFile=0x1b0) returned 0x1 [0221.435] CloseHandle (hObject=0x1b0) returned 1 [0221.435] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2132c8 [0221.435] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\JAWTAccessBridge-64.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jawtaccessbridge-64.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3c40)) returned 1 [0221.435] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2132c8 | out: hHeap=0x1f0000) returned 1 [0221.435] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212be0 [0221.435] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\JAWTAccessBridge-64.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jawtaccessbridge-64.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3c40)) returned 1 [0221.435] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212be0 | out: hHeap=0x1f0000) returned 1 [0221.435] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0221.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0221.436] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x31440, dwReserved0=0x0, dwReserved1=0x0, cFileName="jdwp.dll", cAlternateFileName="")) returned 1 [0221.436] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0221.436] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235b78 [0221.436] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220e20 [0221.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0221.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0221.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0221.436] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jdwp.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jdwp.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0221.436] GetFileType (hFile=0x1b0) returned 0x1 [0221.437] CloseHandle (hObject=0x1b0) returned 1 [0221.437] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220580 [0221.437] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jdwp.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jdwp.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x31440)) returned 1 [0221.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220580 | out: hHeap=0x1f0000) returned 1 [0221.437] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220328 [0221.437] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jdwp.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jdwp.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x31440)) returned 1 [0221.438] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220328 | out: hHeap=0x1f0000) returned 1 [0221.438] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220328 [0221.438] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220328 | out: hHeap=0x1f0000) returned 1 [0221.438] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x6840, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfr.dll", cAlternateFileName="")) returned 1 [0221.438] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235768 [0221.438] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0221.438] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jfr.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0221.438] GetFileType (hFile=0x1b0) returned 0x1 [0221.439] CloseHandle (hObject=0x1b0) returned 1 [0221.439] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236190 [0221.439] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jfr.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfr.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x6840)) returned 1 [0221.439] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236190 | out: hHeap=0x1f0000) returned 1 [0221.439] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235b78 [0221.439] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jfr.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfr.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x6840)) returned 1 [0221.439] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0221.439] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2358a0 [0221.439] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2358a0 | out: hHeap=0x1f0000) returned 1 [0221.439] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x22240, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfxmedia.dll", cAlternateFileName="")) returned 1 [0221.439] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0221.440] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235b78 [0221.440] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221968 [0221.440] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0221.440] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235768 | out: hHeap=0x1f0000) returned 1 [0221.440] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0221.440] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jfxmedia.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfxmedia.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0221.440] GetFileType (hFile=0x1b0) returned 0x1 [0221.441] CloseHandle (hObject=0x1b0) returned 1 [0221.441] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2201c0 [0221.441] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jfxmedia.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfxmedia.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x22240)) returned 1 [0221.441] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2201c0 | out: hHeap=0x1f0000) returned 1 [0221.441] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0221.441] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jfxmedia.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfxmedia.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x22240)) returned 1 [0221.441] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0221.441] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f7e8 [0221.441] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f7e8 | out: hHeap=0x1f0000) returned 1 [0221.441] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7511d3f, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7511d3f, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa75aa64d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2794a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfxwebkit.dll", cAlternateFileName="JFXWEB~1.DLL")) returned 1 [0221.441] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0221.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235f88 [0221.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221080 [0221.442] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235f88 | out: hHeap=0x1f0000) returned 1 [0221.442] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0221.442] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0221.442] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jfxwebkit.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfxwebkit.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0221.442] GetFileType (hFile=0x1b0) returned 0x1 [0221.442] CloseHandle (hObject=0x1b0) returned 1 [0221.443] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0221.443] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jfxwebkit.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfxwebkit.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7511d3f, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7511d3f, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa75aa64d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2794a40)) returned 1 [0221.443] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0221.443] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0221.443] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jfxwebkit.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfxwebkit.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7511d3f, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7511d3f, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa75aa64d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2794a40)) returned 1 [0221.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0221.444] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220328 [0221.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220328 | out: hHeap=0x1f0000) returned 1 [0221.444] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa75aa64d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa75aa64d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa75aa64d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="jjs.exe", cAlternateFileName="")) returned 1 [0221.444] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2358a0 [0221.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0221.445] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jjs.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jjs.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0221.445] GetFileType (hFile=0x1b0) returned 0x1 [0221.445] CloseHandle (hObject=0x1b0) returned 1 [0221.445] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235de8 [0221.445] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jjs.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jjs.exe"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa75aa64d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa75aa64d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa75aa64d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e40)) returned 1 [0221.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235de8 | out: hHeap=0x1f0000) returned 1 [0221.446] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236330 [0221.446] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jjs.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jjs.exe"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa75aa64d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa75aa64d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa75aa64d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e40)) returned 1 [0221.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236330 | out: hHeap=0x1f0000) returned 1 [0221.446] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235de8 [0221.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235de8 | out: hHeap=0x1f0000) returned 1 [0221.446] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa75aa64d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa75aa64d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa75aa64d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2aa40, dwReserved0=0x0, dwReserved1=0x0, cFileName="jli.dll", cAlternateFileName="")) returned 1 [0221.446] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236398 [0221.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2358a0 | out: hHeap=0x1f0000) returned 1 [0221.446] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jli.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jli.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0221.447] GetFileType (hFile=0x1b0) returned 0x1 [0221.447] CloseHandle (hObject=0x1b0) returned 1 [0221.447] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235700 [0221.447] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jli.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jli.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa75aa64d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa75aa64d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa75aa64d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2aa40)) returned 1 [0221.447] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0221.447] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236260 [0221.447] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jli.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jli.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa75aa64d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa75aa64d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa75aa64d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2aa40)) returned 1 [0221.448] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236260 | out: hHeap=0x1f0000) returned 1 [0221.448] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235b78 [0221.448] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0221.448] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa75aa64d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa75aa64d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa897bfc2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x48440, dwReserved0=0x0, dwReserved1=0x0, cFileName="jp2iexp.dll", cAlternateFileName="")) returned 1 [0221.448] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0221.448] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235768 [0221.448] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221080 [0221.448] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235768 | out: hHeap=0x1f0000) returned 1 [0221.448] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236398 | out: hHeap=0x1f0000) returned 1 [0221.448] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0221.449] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2iexp.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2iexp.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0221.449] GetFileType (hFile=0x1b0) returned 0x1 [0221.450] CloseHandle (hObject=0x1b0) returned 1 [0221.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220328 [0221.450] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2iexp.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2iexp.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa75aa64d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa75aa64d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa897bfc2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x48440)) returned 1 [0221.451] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220328 | out: hHeap=0x1f0000) returned 1 [0221.451] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0221.451] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2iexp.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2iexp.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa75aa64d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa75aa64d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa897bfc2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x48440)) returned 1 [0221.451] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0221.451] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220580 [0221.451] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220580 | out: hHeap=0x1f0000) returned 1 [0221.451] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa897bfc2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa897bfc2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89a2223, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1b640, dwReserved0=0x0, dwReserved1=0x0, cFileName="jp2launcher.exe", cAlternateFileName="JP2LAU~1.EXE")) returned 1 [0221.452] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0221.452] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235c48 [0221.452] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221118 [0221.452] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235c48 | out: hHeap=0x1f0000) returned 1 [0221.452] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0221.452] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0221.453] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2launcher.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2launcher.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0221.453] GetFileType (hFile=0x1b0) returned 0x1 [0221.454] CloseHandle (hObject=0x1b0) returned 1 [0221.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2201c0 [0221.454] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2launcher.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2launcher.exe"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa897bfc2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa897bfc2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89a2223, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1b640)) returned 1 [0221.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2201c0 | out: hHeap=0x1f0000) returned 1 [0221.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fc98 [0221.455] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2launcher.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2launcher.exe"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa897bfc2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa897bfc2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89a2223, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1b640)) returned 1 [0221.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fc98 | out: hHeap=0x1f0000) returned 1 [0221.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0221.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0221.455] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89a2223, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89a2223, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89a2223, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="jp2native.dll", cAlternateFileName="JP2NAT~1.DLL")) returned 1 [0221.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238438 [0221.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235700 [0221.456] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221080 [0221.456] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0221.456] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0221.456] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238438 | out: hHeap=0x1f0000) returned 1 [0221.457] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2native.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2native.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0221.457] GetFileType (hFile=0x1b0) returned 0x1 [0221.458] CloseHandle (hObject=0x1b0) returned 1 [0221.458] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0221.458] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2native.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2native.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89a2223, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89a2223, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89a2223, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e40)) returned 1 [0221.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0221.458] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fab8 [0221.459] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2native.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2native.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89a2223, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89a2223, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89a2223, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e40)) returned 1 [0221.714] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fab8 | out: hHeap=0x1f0000) returned 1 [0221.714] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0221.714] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0221.714] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89a2223, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89a2223, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89a2223, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39840, dwReserved0=0x0, dwReserved1=0x0, cFileName="jp2ssv.dll", cAlternateFileName="")) returned 1 [0221.714] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0221.715] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235a40 [0221.715] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221b30 [0221.715] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235a40 | out: hHeap=0x1f0000) returned 1 [0221.715] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0221.715] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0221.716] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2ssv.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2ssv.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0221.716] GetFileType (hFile=0x1b0) returned 0x1 [0221.717] CloseHandle (hObject=0x1b0) returned 1 [0221.717] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0221.717] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2ssv.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2ssv.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89a2223, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89a2223, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89a2223, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39840)) returned 1 [0221.717] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0221.718] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220508 [0221.718] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2ssv.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2ssv.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89a2223, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89a2223, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89a2223, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39840)) returned 1 [0221.718] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220508 | out: hHeap=0x1f0000) returned 1 [0221.718] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fa40 [0221.718] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fa40 | out: hHeap=0x1f0000) returned 1 [0221.718] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89a2223, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89a2223, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2d640, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpeg.dll", cAlternateFileName="")) returned 1 [0221.718] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0221.718] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235eb8 [0221.719] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220cf0 [0221.719] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235eb8 | out: hHeap=0x1f0000) returned 1 [0221.719] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0221.719] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0221.720] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jpeg.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jpeg.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0221.720] GetFileType (hFile=0x1b0) returned 0x1 [0221.720] CloseHandle (hObject=0x1b0) returned 1 [0221.721] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd88 [0221.721] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jpeg.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jpeg.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89a2223, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89a2223, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2d640)) returned 1 [0221.721] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd88 | out: hHeap=0x1f0000) returned 1 [0221.721] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2203a0 [0221.721] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jpeg.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jpeg.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89a2223, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89a2223, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2d640)) returned 1 [0221.721] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2203a0 | out: hHeap=0x1f0000) returned 1 [0221.722] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220238 [0221.722] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220238 | out: hHeap=0x1f0000) returned 1 [0221.722] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4840, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsdt.dll", cAlternateFileName="")) returned 1 [0221.722] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238488 [0221.722] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235ff0 [0221.722] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2217a0 [0221.722] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235ff0 | out: hHeap=0x1f0000) returned 1 [0221.722] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0221.723] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238488 | out: hHeap=0x1f0000) returned 1 [0221.723] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jsdt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsdt.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0221.724] GetFileType (hFile=0x1b0) returned 0x1 [0221.724] CloseHandle (hObject=0x1b0) returned 1 [0221.725] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0221.725] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jsdt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsdt.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4840)) returned 1 [0221.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0221.725] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0221.726] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jsdt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsdt.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4840)) returned 1 [0221.726] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0221.726] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2201c0 [0221.726] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2201c0 | out: hHeap=0x1f0000) returned 1 [0221.726] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsound.dll", cAlternateFileName="")) returned 1 [0221.726] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0221.726] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235aa8 [0221.726] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221708 [0221.727] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235aa8 | out: hHeap=0x1f0000) returned 1 [0221.727] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0221.727] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0221.728] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jsound.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsound.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0221.728] GetFileType (hFile=0x1b0) returned 0x1 [0221.729] CloseHandle (hObject=0x1b0) returned 1 [0221.729] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0221.729] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jsound.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsound.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8a40)) returned 1 [0221.729] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0221.729] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220508 [0221.729] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jsound.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsound.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8a40)) returned 1 [0221.730] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220508 | out: hHeap=0x1f0000) returned 1 [0221.730] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fc98 [0221.730] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fc98 | out: hHeap=0x1f0000) returned 1 [0221.730] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsoundds.dll", cAlternateFileName="")) returned 1 [0221.730] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238488 [0221.730] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236190 [0221.730] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221a98 [0221.730] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236190 | out: hHeap=0x1f0000) returned 1 [0221.731] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0221.731] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238488 | out: hHeap=0x1f0000) returned 1 [0221.731] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jsoundds.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsoundds.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0221.731] GetFileType (hFile=0x1b0) returned 0x1 [0221.732] CloseHandle (hObject=0x1b0) returned 1 [0221.732] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0221.732] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jsoundds.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsoundds.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7a40)) returned 1 [0221.732] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0221.732] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fc98 [0221.733] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jsoundds.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsoundds.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7a40)) returned 1 [0221.733] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fc98 | out: hHeap=0x1f0000) returned 1 [0221.733] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0221.733] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0221.733] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x35e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="kcms.dll", cAlternateFileName="")) returned 1 [0221.733] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0221.733] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235700 [0221.733] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221118 [0221.733] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0221.734] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0221.734] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0221.734] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\kcms.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\kcms.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0221.734] GetFileType (hFile=0x1b0) returned 0x1 [0221.735] CloseHandle (hObject=0x1b0) returned 1 [0221.735] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd88 [0221.735] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\kcms.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\kcms.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x35e40)) returned 1 [0221.735] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd88 | out: hHeap=0x1f0000) returned 1 [0221.735] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0221.736] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\kcms.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\kcms.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x35e40)) returned 1 [0221.736] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0221.736] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0221.736] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0221.736] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="keytool.exe", cAlternateFileName="")) returned 1 [0221.736] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0221.736] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235838 [0221.736] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221410 [0221.736] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235838 | out: hHeap=0x1f0000) returned 1 [0221.736] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0221.736] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0221.737] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\keytool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\keytool.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0221.737] GetFileType (hFile=0x1b0) returned 0x1 [0221.738] CloseHandle (hObject=0x1b0) returned 1 [0221.738] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0221.738] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\keytool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\keytool.exe"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1 [0221.738] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0221.738] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fc98 [0221.738] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\keytool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\keytool.exe"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1 [0221.738] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fc98 | out: hHeap=0x1f0000) returned 1 [0221.739] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220508 [0221.739] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220508 | out: hHeap=0x1f0000) returned 1 [0221.739] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="kinit.exe", cAlternateFileName="")) returned 1 [0221.739] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0221.739] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235700 [0221.739] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221378 [0221.739] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0221.739] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0221.739] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0221.740] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\kinit.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\kinit.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0221.740] GetFileType (hFile=0x1b0) returned 0x1 [0221.741] CloseHandle (hObject=0x1b0) returned 1 [0221.741] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0221.741] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\kinit.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\kinit.exe"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1 [0221.742] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0221.742] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0221.742] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\kinit.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\kinit.exe"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1 [0221.742] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0221.742] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0221.742] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0221.742] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="klist.exe", cAlternateFileName="")) returned 1 [0221.742] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0221.742] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235be0 [0221.743] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2215d8 [0221.743] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235be0 | out: hHeap=0x1f0000) returned 1 [0221.743] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0221.743] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0221.744] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\klist.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\klist.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0221.744] GetFileType (hFile=0x1b0) returned 0x1 [0221.744] CloseHandle (hObject=0x1b0) returned 1 [0221.745] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd88 [0221.745] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\klist.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\klist.exe"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1 [0221.745] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd88 | out: hHeap=0x1f0000) returned 1 [0221.745] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fab8 [0221.745] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\klist.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\klist.exe"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1 [0221.745] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fab8 | out: hHeap=0x1f0000) returned 1 [0221.746] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0221.746] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0221.746] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="ktab.exe", cAlternateFileName="")) returned 1 [0221.746] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0221.746] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2360c0 [0221.746] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220f50 [0221.746] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2360c0 | out: hHeap=0x1f0000) returned 1 [0221.746] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0221.747] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0221.747] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\ktab.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ktab.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0221.748] GetFileType (hFile=0x1b0) returned 0x1 [0221.748] CloseHandle (hObject=0x1b0) returned 1 [0221.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f7e8 [0221.749] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\ktab.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ktab.exe"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1 [0221.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f7e8 | out: hHeap=0x1f0000) returned 1 [0221.749] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220508 [0221.749] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\ktab.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ktab.exe"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1 [0221.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220508 | out: hHeap=0x1f0000) returned 1 [0221.749] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220508 [0221.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220508 | out: hHeap=0x1f0000) returned 1 [0221.750] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39040, dwReserved0=0x0, dwReserved1=0x0, cFileName="lcms.dll", cAlternateFileName="")) returned 1 [0221.750] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0221.750] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236058 [0221.750] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221a98 [0221.750] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236058 | out: hHeap=0x1f0000) returned 1 [0221.750] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0221.750] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0221.751] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\lcms.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\lcms.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0221.751] GetFileType (hFile=0x1b0) returned 0x1 [0221.752] CloseHandle (hObject=0x1b0) returned 1 [0221.752] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f770 [0221.752] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\lcms.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\lcms.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39040)) returned 1 [0221.752] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f770 | out: hHeap=0x1f0000) returned 1 [0221.753] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220580 [0221.753] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\lcms.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\lcms.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39040)) returned 1 [0221.753] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220580 | out: hHeap=0x1f0000) returned 1 [0221.753] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fab8 [0221.753] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fab8 | out: hHeap=0x1f0000) returned 1 [0221.753] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x9040, dwReserved0=0x0, dwReserved1=0x0, cFileName="management.dll", cAlternateFileName="MANAGE~1.DLL")) returned 1 [0221.753] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0221.753] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235f20 [0221.754] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220f50 [0221.754] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235f20 | out: hHeap=0x1f0000) returned 1 [0221.754] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0221.754] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0221.755] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\management.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\management.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0221.755] GetFileType (hFile=0x1b0) returned 0x1 [0221.755] CloseHandle (hObject=0x1b0) returned 1 [0221.988] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220580 [0221.988] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\management.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\management.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x9040)) returned 1 [0221.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220580 | out: hHeap=0x1f0000) returned 1 [0221.988] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0221.988] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\management.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\management.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x9040)) returned 1 [0221.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0221.988] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0221.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0221.988] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc41ec25, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xcc41ec25, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xcca3ad23, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x9fb53, dwReserved0=0x0, dwReserved1=0x0, cFileName="mlib_image.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="MLIB_I~1.ODV")) returned 1 [0221.988] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a620 [0221.988] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236058 [0221.988] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x217038 [0221.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236058 | out: hHeap=0x1f0000) returned 1 [0221.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0221.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a620 | out: hHeap=0x1f0000) returned 1 [0221.989] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\mlib_image.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\mlib_image.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0221.989] GetFileType (hFile=0x21c) returned 0x1 [0221.989] CloseHandle (hObject=0x21c) returned 1 [0221.990] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x22d368 [0221.990] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\mlib_image.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\mlib_image.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc41ec25, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xcc41ec25, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xcca3ad23, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x9fb53)) returned 1 [0221.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d368 | out: hHeap=0x1f0000) returned 1 [0221.991] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x22d368 [0221.991] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\mlib_image.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\mlib_image.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc41ec25, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xcc41ec25, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xcca3ad23, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x9fb53)) returned 1 [0221.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d368 | out: hHeap=0x1f0000) returned 1 [0221.991] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x22d368 [0221.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d368 | out: hHeap=0x1f0000) returned 1 [0221.991] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcca3ad23, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xcca3ad23, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xcd48308f, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xa13b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcp120.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="MSVCP1~1.ODV")) returned 1 [0221.991] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a6c8 [0221.991] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235de8 [0221.991] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x22d368 [0221.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235de8 | out: hHeap=0x1f0000) returned 1 [0221.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0221.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a6c8 | out: hHeap=0x1f0000) returned 1 [0221.992] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcp120.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcp120.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0221.992] GetFileType (hFile=0x21c) returned 0x1 [0221.993] CloseHandle (hObject=0x21c) returned 1 [0221.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x217038 [0221.993] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcp120.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcp120.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcca3ad23, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xcca3ad23, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xcd48308f, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xa13b3)) returned 1 [0221.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0221.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x217038 [0221.993] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcp120.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcp120.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcca3ad23, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xcca3ad23, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xcd48308f, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xa13b3)) returned 1 [0221.994] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0221.994] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x217038 [0221.994] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0221.994] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xca750, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr100.dll", cAlternateFileName="")) returned 1 [0221.994] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0221.994] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236190 [0221.994] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221540 [0221.994] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236190 | out: hHeap=0x1f0000) returned 1 [0221.994] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d368 | out: hHeap=0x1f0000) returned 1 [0221.994] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0221.995] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr100.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcr100.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0221.995] GetFileType (hFile=0x21c) returned 0x1 [0221.996] CloseHandle (hObject=0x21c) returned 1 [0221.996] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0221.996] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr100.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcr100.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xca750)) returned 1 [0221.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0221.996] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220508 [0221.996] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr100.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcr100.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xca750)) returned 1 [0221.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220508 | out: hHeap=0x1f0000) returned 1 [0221.997] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0221.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0221.997] GetLastError () returned 0x0 [0221.997] CryptAcquireContextA (in: phProv=0x1fde1b8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1fde1b8*=0x211d88) returned 1 [0221.998] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238118 | out: pbBuffer=0x238118) returned 1 [0221.998] CryptReleaseContext (hProv=0x211d88, dwFlags=0x0) returned 1 [0221.998] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0221.998] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x254980 [0221.998] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x237068 [0221.998] QueryPerformanceCounter (in: lpPerformanceCount=0x1fde14c | out: lpPerformanceCount=0x1fde14c*=37936733793) returned 1 [0221.999] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1fde18c | out: lpSystemTimeAsFileTime=0x1fde18c) [0221.999] QueryPerformanceCounter (in: lpPerformanceCount=0x1fde14c | out: lpPerformanceCount=0x1fde14c*=37936763935) returned 1 [0221.999] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1fde18c | out: lpSystemTimeAsFileTime=0x1fde18c) [0221.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238c20 [0221.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x255c88 [0221.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x237928 [0221.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x233638 [0221.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff70 [0221.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2067d8 [0221.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20fef8 [0222.000] GetLastError () returned 0x0 [0222.000] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr100.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcr100.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde058, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0222.199] GetFileType (hFile=0x174) returned 0x1 [0222.200] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389e0 [0222.200] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b20 [0222.201] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr100.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcr100.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde088, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0222.201] GetFileType (hFile=0x1e8) returned 0x1 [0222.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204db0 [0222.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e70 [0222.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261388 [0222.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ac0 [0222.202] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b10 [0222.202] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr100.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcr100.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1fddfd4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0222.202] GetFileType (hFile=0x1b0) returned 0x1 [0222.203] GetLastError () returned 0xb7 [0222.203] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr100.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcr100.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1fddfd4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1bc [0222.203] GetFileType (hFile=0x1bc) returned 0x1 [0222.204] GetLastError () returned 0xb7 [0222.204] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr100.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcr100.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x1fddfcc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0222.204] GetFileType (hFile=0x230) returned 0x1 [0222.204] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28efd8 [0222.205] ReadFile (in: hFile=0x230, lpBuffer=0x28efd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fddf28, lpOverlapped=0x0 | out: lpBuffer=0x28efd8*, lpNumberOfBytesRead=0x1fddf28*=0x1000, lpOverlapped=0x0) returned 1 [0222.207] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24a9c8 [0222.208] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x287fa0 [0222.208] GetLastError () returned 0x0 [0222.651] CloseHandle (hObject=0x174) returned 1 [0222.673] CloseHandle (hObject=0x1e8) returned 1 [0222.674] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238930 [0222.674] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238840 [0222.674] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr100.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcr100.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde088, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0222.685] GetFileType (hFile=0x1e8) returned 0x1 [0222.685] GetLastError () returned 0xb7 [0222.687] CloseHandle (hObject=0x1e8) returned 1 [0222.687] DeleteFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr100.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcr100.dll")) returned 0 [0222.687] GetLastError () returned 0x20 [0222.688] GetLastError () returned 0x20 [0222.942] CryptAcquireContextA (in: phProv=0x1fde1b8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1fde1b8*=0x212690) returned 1 [0222.943] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238140 | out: pbBuffer=0x238140) returned 1 [0222.943] CryptReleaseContext (hProv=0x212690, dwFlags=0x0) returned 1 [0222.943] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0222.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238140 [0222.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2382a8 [0222.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239160 [0222.943] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0222.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0222.943] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239160 | out: hHeap=0x1f0000) returned 1 [0222.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8480 [0222.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210078 [0222.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x235768 [0222.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238140 [0222.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2854b8 [0222.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204b90 [0222.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235c48 [0222.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2384d8 [0222.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285e00 [0222.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b30 [0222.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238668 [0222.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2100a8 [0222.944] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ae0 [0222.944] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238690 [0222.944] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0222.944] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0222.944] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238690 | out: hHeap=0x1f0000) returned 1 [0222.944] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ae0 | out: hHeap=0x1f0000) returned 1 [0222.944] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2100a8 | out: hHeap=0x1f0000) returned 1 [0222.944] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238668 | out: hHeap=0x1f0000) returned 1 [0222.944] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b30 | out: hHeap=0x1f0000) returned 1 [0222.944] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285e00 | out: hHeap=0x1f0000) returned 1 [0222.944] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384d8 | out: hHeap=0x1f0000) returned 1 [0222.944] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235c48 | out: hHeap=0x1f0000) returned 1 [0222.944] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238cc8 [0222.944] GetLastError () returned 0x0 [0222.944] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1fddd48 | out: lpSystemTimeAsFileTime=0x1fddd48) [0222.944] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238ae0 [0222.944] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238618 [0222.944] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e30 [0222.944] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e30 | out: hHeap=0x1f0000) returned 1 [0222.944] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238618 | out: hHeap=0x1f0000) returned 1 [0222.944] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238730 [0222.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d30 [0222.945] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d30 | out: hHeap=0x1f0000) returned 1 [0222.945] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238730 | out: hHeap=0x1f0000) returned 1 [0222.945] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ae0 | out: hHeap=0x1f0000) returned 1 [0222.945] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0222.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238de0 [0222.945] GetLastError () returned 0x0 [0222.945] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr100.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcr100.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde0b8, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0222.945] GetFileType (hFile=0x1c0) returned 0x1 [0222.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x291ff0 [0222.945] SetFilePointerEx (in: hFile=0x1c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1fde040 | out: lpNewFilePointer=0x0) returned 1 [0222.946] GetLastError () returned 0xb7 [0222.946] CloseHandle (hObject=0x1c0) returned 1 [0222.946] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ae0 | out: hHeap=0x1f0000) returned 1 [0222.946] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a40 | out: hHeap=0x1f0000) returned 1 [0222.946] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x284f90 | out: hHeap=0x1f0000) returned 1 [0222.946] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2854b8 | out: hHeap=0x1f0000) returned 1 [0222.946] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0222.946] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204b90 | out: hHeap=0x1f0000) returned 1 [0222.946] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235768 | out: hHeap=0x1f0000) returned 1 [0222.946] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210078 | out: hHeap=0x1f0000) returned 1 [0222.946] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8480 | out: hHeap=0x1f0000) returned 1 [0222.946] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236f50 | out: hHeap=0x1f0000) returned 1 [0222.946] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0222.946] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0222.946] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x258298 | out: hHeap=0x1f0000) returned 1 [0222.947] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2375e0 | out: hHeap=0x1f0000) returned 1 [0222.947] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238d38 | out: hHeap=0x1f0000) returned 1 [0222.947] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ad0 | out: hHeap=0x1f0000) returned 1 [0222.947] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffd0 | out: hHeap=0x1f0000) returned 1 [0222.947] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0222.947] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238aa0 | out: hHeap=0x1f0000) returned 1 [0222.947] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffa0 | out: hHeap=0x1f0000) returned 1 [0222.947] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0222.947] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389f0 | out: hHeap=0x1f0000) returned 1 [0222.947] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2852a8 | out: hHeap=0x1f0000) returned 1 [0222.947] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0222.947] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235de8 | out: hHeap=0x1f0000) returned 1 [0222.947] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234aa0 | out: hHeap=0x1f0000) returned 1 [0222.947] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0222.947] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0222.947] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234818 | out: hHeap=0x1f0000) returned 1 [0222.947] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238840 | out: hHeap=0x1f0000) returned 1 [0222.947] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238930 | out: hHeap=0x1f0000) returned 1 [0222.947] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28efd8 | out: hHeap=0x1f0000) returned 1 [0222.947] CloseHandle (hObject=0x230) returned 1 [0222.948] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b60 | out: hHeap=0x1f0000) returned 1 [0222.948] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b50 | out: hHeap=0x1f0000) returned 1 [0222.948] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2248a0 | out: hHeap=0x1f0000) returned 1 [0222.948] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24a9c8 | out: hHeap=0x1f0000) returned 1 [0222.948] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0222.948] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c30 | out: hHeap=0x1f0000) returned 1 [0222.948] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x287fa0 | out: hHeap=0x1f0000) returned 1 [0222.948] CloseHandle (hObject=0x1bc) returned 1 [0222.948] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a90 | out: hHeap=0x1f0000) returned 1 [0222.948] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b00 | out: hHeap=0x1f0000) returned 1 [0222.948] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261668 | out: hHeap=0x1f0000) returned 1 [0222.948] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e90 | out: hHeap=0x1f0000) returned 1 [0222.948] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0222.948] CloseHandle (hObject=0x1b0) returned 1 [0222.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b10 | out: hHeap=0x1f0000) returned 1 [0222.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ac0 | out: hHeap=0x1f0000) returned 1 [0222.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261388 | out: hHeap=0x1f0000) returned 1 [0222.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b20 | out: hHeap=0x1f0000) returned 1 [0222.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389e0 | out: hHeap=0x1f0000) returned 1 [0222.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a30 | out: hHeap=0x1f0000) returned 1 [0222.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a20 | out: hHeap=0x1f0000) returned 1 [0222.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0222.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x255c88 | out: hHeap=0x1f0000) returned 1 [0222.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237928 | out: hHeap=0x1f0000) returned 1 [0222.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2067d8 | out: hHeap=0x1f0000) returned 1 [0222.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20fef8 | out: hHeap=0x1f0000) returned 1 [0222.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff70 | out: hHeap=0x1f0000) returned 1 [0222.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233638 | out: hHeap=0x1f0000) returned 1 [0222.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x254980 | out: hHeap=0x1f0000) returned 1 [0222.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237068 | out: hHeap=0x1f0000) returned 1 [0222.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239208 | out: hHeap=0x1f0000) returned 1 [0222.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f7e8 | out: hHeap=0x1f0000) returned 1 [0222.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261b28 | out: hHeap=0x1f0000) returned 1 [0222.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2341a0 | out: hHeap=0x1f0000) returned 1 [0222.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0222.950] DeleteFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr100.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcr100.dll")) returned 1 [0222.951] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xeb2a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr120.dll", cAlternateFileName="")) returned 1 [0222.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0222.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236330 [0222.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221378 [0222.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236330 | out: hHeap=0x1f0000) returned 1 [0222.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0222.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0222.951] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr120.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcr120.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0222.952] GetFileType (hFile=0x1b0) returned 0x1 [0222.952] CloseHandle (hObject=0x1b0) returned 1 [0222.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f7e8 [0222.952] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr120.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcr120.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xeb2a0)) returned 1 [0222.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f7e8 | out: hHeap=0x1f0000) returned 1 [0222.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220508 [0222.952] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr120.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcr120.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xeb2a0)) returned 1 [0222.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220508 | out: hHeap=0x1f0000) returned 1 [0222.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220508 [0222.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220508 | out: hHeap=0x1f0000) returned 1 [0222.952] GetLastError () returned 0x0 [0222.953] CryptAcquireContextA (in: phProv=0x1fde1b8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1fde1b8*=0x2129c0) returned 1 [0222.953] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238140 | out: pbBuffer=0x238140) returned 1 [0222.953] CryptReleaseContext (hProv=0x2129c0, dwFlags=0x0) returned 1 [0222.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0222.953] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x252370 [0222.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2376f8 [0222.954] QueryPerformanceCounter (in: lpPerformanceCount=0x1fde14c | out: lpPerformanceCount=0x1fde14c*=38032252921) returned 1 [0222.954] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1fde18c | out: lpSystemTimeAsFileTime=0x1fde18c) [0222.954] QueryPerformanceCounter (in: lpPerformanceCount=0x1fde14c | out: lpPerformanceCount=0x1fde14c*=38032268557) returned 1 [0222.954] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1fde18c | out: lpSystemTimeAsFileTime=0x1fde18c) [0222.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238de0 [0222.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x258298 [0222.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x237928 [0222.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x232fb8 [0222.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff70 [0222.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206628 [0222.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20fef8 [0222.954] GetLastError () returned 0x0 [0222.954] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr120.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcr120.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde058, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0222.955] GetFileType (hFile=0x1b0) returned 0x1 [0222.955] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238aa0 [0222.956] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a30 [0222.956] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr120.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcr120.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde088, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1bc [0222.957] GetFileType (hFile=0x1bc) returned 0x1 [0222.957] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cf0 [0222.957] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204df0 [0222.957] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261218 [0222.957] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b60 [0222.957] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b30 [0222.957] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr120.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcr120.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1fddfd4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0222.958] GetFileType (hFile=0x230) returned 0x1 [0222.958] GetLastError () returned 0xb7 [0222.958] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr120.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcr120.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1fddfd4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0222.959] GetFileType (hFile=0x1c0) returned 0x1 [0222.959] GetLastError () returned 0xb7 [0222.959] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr120.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcr120.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x1fddfcc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0222.959] GetFileType (hFile=0x1f4) returned 0x1 [0222.959] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28cfc8 [0222.959] ReadFile (in: hFile=0x1f4, lpBuffer=0x28cfc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fddf28, lpOverlapped=0x0 | out: lpBuffer=0x28cfc8*, lpNumberOfBytesRead=0x1fddf28*=0x1000, lpOverlapped=0x0) returned 1 [0222.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x249db0 [0222.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28dfd0 [0222.962] GetLastError () returned 0x0 [0223.189] CloseHandle (hObject=0x1b0) returned 1 [0223.704] CloseHandle (hObject=0x1bc) returned 1 [0223.704] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a40 [0223.705] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ab0 [0223.705] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr120.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcr120.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde088, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1bc [0223.715] GetFileType (hFile=0x1bc) returned 0x1 [0223.716] GetLastError () returned 0xb7 [0223.717] CloseHandle (hObject=0x1bc) returned 1 [0223.718] DeleteFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr120.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcr120.dll")) returned 0 [0223.718] GetLastError () returned 0x20 [0223.718] GetLastError () returned 0x20 [0223.718] CryptAcquireContextA (in: phProv=0x1fde1b8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1fde1b8*=0x212690) returned 1 [0223.719] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238208 | out: pbBuffer=0x238208) returned 1 [0223.719] CryptReleaseContext (hProv=0x212690, dwFlags=0x0) returned 1 [0223.719] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0223.719] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238208 [0223.719] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238398 [0223.719] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238e18 [0223.720] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0223.720] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0223.720] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238e18 | out: hHeap=0x1f0000) returned 1 [0223.720] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8480 [0223.720] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0223.720] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x235838 [0223.720] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238208 [0223.720] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x284f90 [0223.720] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d30 [0223.720] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235aa8 [0223.720] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238780 [0223.720] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2856c8 [0223.720] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b00 [0223.720] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384d8 [0223.720] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0223.720] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389f0 [0223.721] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238500 [0223.721] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210258 [0223.721] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0223.721] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238500 | out: hHeap=0x1f0000) returned 1 [0223.721] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389f0 | out: hHeap=0x1f0000) returned 1 [0223.721] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0223.721] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384d8 | out: hHeap=0x1f0000) returned 1 [0223.721] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b00 | out: hHeap=0x1f0000) returned 1 [0223.721] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2856c8 | out: hHeap=0x1f0000) returned 1 [0223.721] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238780 | out: hHeap=0x1f0000) returned 1 [0223.721] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235aa8 | out: hHeap=0x1f0000) returned 1 [0223.721] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238fd8 [0223.721] GetLastError () returned 0x0 [0223.722] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1fddd48 | out: lpSystemTimeAsFileTime=0x1fddd48) [0223.722] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238b00 [0223.722] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238690 [0223.722] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ef0 [0223.722] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ef0 | out: hHeap=0x1f0000) returned 1 [0223.722] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238690 | out: hHeap=0x1f0000) returned 1 [0223.722] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238618 [0223.722] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cb0 [0223.722] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cb0 | out: hHeap=0x1f0000) returned 1 [0223.722] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238618 | out: hHeap=0x1f0000) returned 1 [0223.722] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b00 | out: hHeap=0x1f0000) returned 1 [0223.722] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0223.722] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238d70 [0223.722] GetLastError () returned 0x0 [0223.722] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr120.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcr120.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde0b8, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1bc [0223.723] GetFileType (hFile=0x1bc) returned 0x1 [0223.723] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28ffe0 [0223.723] SetFilePointerEx (in: hFile=0x1bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1fde040 | out: lpNewFilePointer=0x0) returned 1 [0223.723] GetLastError () returned 0xb7 [0223.723] CloseHandle (hObject=0x1bc) returned 1 [0223.723] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389f0 | out: hHeap=0x1f0000) returned 1 [0223.723] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b00 | out: hHeap=0x1f0000) returned 1 [0223.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2858d8 | out: hHeap=0x1f0000) returned 1 [0223.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x284f90 | out: hHeap=0x1f0000) returned 1 [0223.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0223.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d30 | out: hHeap=0x1f0000) returned 1 [0223.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235838 | out: hHeap=0x1f0000) returned 1 [0223.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0223.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8480 | out: hHeap=0x1f0000) returned 1 [0223.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237810 | out: hHeap=0x1f0000) returned 1 [0223.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0223.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0223.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25ceb8 | out: hHeap=0x1f0000) returned 1 [0223.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237180 | out: hHeap=0x1f0000) returned 1 [0223.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2392b0 | out: hHeap=0x1f0000) returned 1 [0223.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ba0 | out: hHeap=0x1f0000) returned 1 [0223.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0223.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0223.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ad0 | out: hHeap=0x1f0000) returned 1 [0223.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0223.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0223.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389e0 | out: hHeap=0x1f0000) returned 1 [0223.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2857d0 | out: hHeap=0x1f0000) returned 1 [0223.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238550 | out: hHeap=0x1f0000) returned 1 [0223.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235768 | out: hHeap=0x1f0000) returned 1 [0223.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228b00 | out: hHeap=0x1f0000) returned 1 [0223.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0223.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0223.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228908 | out: hHeap=0x1f0000) returned 1 [0223.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ab0 | out: hHeap=0x1f0000) returned 1 [0223.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a40 | out: hHeap=0x1f0000) returned 1 [0223.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28cfc8 | out: hHeap=0x1f0000) returned 1 [0223.725] CloseHandle (hObject=0x1f4) returned 1 [0223.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b50 | out: hHeap=0x1f0000) returned 1 [0223.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b40 | out: hHeap=0x1f0000) returned 1 [0223.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224360 | out: hHeap=0x1f0000) returned 1 [0223.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x249db0 | out: hHeap=0x1f0000) returned 1 [0223.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffa0 | out: hHeap=0x1f0000) returned 1 [0223.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204dd0 | out: hHeap=0x1f0000) returned 1 [0223.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28dfd0 | out: hHeap=0x1f0000) returned 1 [0223.725] CloseHandle (hObject=0x1c0) returned 1 [0223.726] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b20 | out: hHeap=0x1f0000) returned 1 [0223.726] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ac0 | out: hHeap=0x1f0000) returned 1 [0223.726] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261388 | out: hHeap=0x1f0000) returned 1 [0223.726] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bb0 | out: hHeap=0x1f0000) returned 1 [0223.726] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0223.726] CloseHandle (hObject=0x230) returned 1 [0223.726] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b30 | out: hHeap=0x1f0000) returned 1 [0223.726] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b60 | out: hHeap=0x1f0000) returned 1 [0223.726] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261218 | out: hHeap=0x1f0000) returned 1 [0223.726] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a30 | out: hHeap=0x1f0000) returned 1 [0223.726] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238aa0 | out: hHeap=0x1f0000) returned 1 [0223.726] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a90 | out: hHeap=0x1f0000) returned 1 [0223.726] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a20 | out: hHeap=0x1f0000) returned 1 [0223.726] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0223.726] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x258298 | out: hHeap=0x1f0000) returned 1 [0223.727] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237928 | out: hHeap=0x1f0000) returned 1 [0223.727] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206628 | out: hHeap=0x1f0000) returned 1 [0223.727] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20fef8 | out: hHeap=0x1f0000) returned 1 [0223.727] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff70 | out: hHeap=0x1f0000) returned 1 [0223.727] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232fb8 | out: hHeap=0x1f0000) returned 1 [0223.727] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x252370 | out: hHeap=0x1f0000) returned 1 [0223.727] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2376f8 | out: hHeap=0x1f0000) returned 1 [0223.727] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2391d0 | out: hHeap=0x1f0000) returned 1 [0223.727] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220580 | out: hHeap=0x1f0000) returned 1 [0223.727] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e360 | out: hHeap=0x1f0000) returned 1 [0223.727] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2341a0 | out: hHeap=0x1f0000) returned 1 [0223.727] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0223.727] DeleteFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr120.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcr120.dll")) returned 1 [0223.728] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x17a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="net.dll", cAlternateFileName="")) returned 1 [0223.728] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235768 [0223.728] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0223.729] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\net.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\net.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0223.729] GetFileType (hFile=0x230) returned 0x1 [0223.729] CloseHandle (hObject=0x230) returned 1 [0223.729] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235aa8 [0223.729] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\net.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\net.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x17a40)) returned 1 [0223.729] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235aa8 | out: hHeap=0x1f0000) returned 1 [0223.729] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235b78 [0223.730] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\net.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\net.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x17a40)) returned 1 [0223.730] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0223.730] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235838 [0223.730] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235838 | out: hHeap=0x1f0000) returned 1 [0223.730] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xec40, dwReserved0=0x0, dwReserved1=0x0, cFileName="nio.dll", cAlternateFileName="")) returned 1 [0223.730] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235838 [0223.730] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235768 | out: hHeap=0x1f0000) returned 1 [0223.730] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\nio.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\nio.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0223.730] GetFileType (hFile=0x230) returned 0x1 [0223.731] CloseHandle (hObject=0x230) returned 1 [0223.731] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235aa8 [0223.731] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\nio.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\nio.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xec40)) returned 1 [0223.731] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235aa8 | out: hHeap=0x1f0000) returned 1 [0223.731] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235768 [0223.731] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\nio.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\nio.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xec40)) returned 1 [0223.731] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235768 | out: hHeap=0x1f0000) returned 1 [0223.731] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235aa8 [0223.731] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235aa8 | out: hHeap=0x1f0000) returned 1 [0223.731] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="npt.dll", cAlternateFileName="")) returned 1 [0223.731] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235de8 [0223.731] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235838 | out: hHeap=0x1f0000) returned 1 [0223.732] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\npt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\npt.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0223.732] GetFileType (hFile=0x230) returned 0x1 [0223.732] CloseHandle (hObject=0x230) returned 1 [0223.732] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235768 [0223.732] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\npt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\npt.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4a40)) returned 1 [0223.732] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235768 | out: hHeap=0x1f0000) returned 1 [0223.732] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235eb8 [0223.732] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\npt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\npt.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4a40)) returned 1 [0223.732] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235eb8 | out: hHeap=0x1f0000) returned 1 [0223.733] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235d80 [0223.733] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235d80 | out: hHeap=0x1f0000) returned 1 [0223.733] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="orbd.exe", cAlternateFileName="")) returned 1 [0223.733] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0223.733] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235d80 [0223.733] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221410 [0223.733] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235d80 | out: hHeap=0x1f0000) returned 1 [0223.733] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235de8 | out: hHeap=0x1f0000) returned 1 [0223.733] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0223.733] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\orbd.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\orbd.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0223.733] GetFileType (hFile=0x230) returned 0x1 [0223.733] CloseHandle (hObject=0x230) returned 1 [0223.734] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0223.734] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\orbd.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\orbd.exe"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1 [0223.734] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0223.734] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0223.734] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\orbd.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\orbd.exe"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1 [0223.734] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0223.734] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f770 [0223.734] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f770 | out: hHeap=0x1f0000) returned 1 [0223.734] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="pack200.exe", cAlternateFileName="")) returned 1 [0223.734] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0223.734] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236190 [0223.734] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2214a8 [0223.734] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236190 | out: hHeap=0x1f0000) returned 1 [0223.734] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0223.734] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0223.951] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\pack200.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\pack200.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0223.952] GetFileType (hFile=0x230) returned 0x1 [0223.952] CloseHandle (hObject=0x230) returned 1 [0223.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f7e8 [0223.952] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\pack200.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\pack200.exe"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1 [0223.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f7e8 | out: hHeap=0x1f0000) returned 1 [0223.953] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0223.953] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\pack200.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\pack200.exe"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1 [0223.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0223.953] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0223.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0223.953] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2a2bf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin2", cAlternateFileName="")) returned 1 [0223.953] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235eb8 [0223.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0223.953] lstrcmpW (lpString1="plugin2", lpString2=".") returned 1 [0223.953] lstrcmpW (lpString1="plugin2", lpString2="..") returned 1 [0223.953] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238d38 [0223.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235a40 [0223.954] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f30 | out: hHeap=0x1f0000) returned 1 [0223.954] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="policytool.exe", cAlternateFileName="POLICY~1.EXE")) returned 1 [0223.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0223.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235768 [0223.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220eb8 [0223.954] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235768 | out: hHeap=0x1f0000) returned 1 [0223.954] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235eb8 | out: hHeap=0x1f0000) returned 1 [0223.954] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0223.955] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\policytool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\policytool.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0223.955] GetFileType (hFile=0x230) returned 0x1 [0223.955] CloseHandle (hObject=0x230) returned 1 [0223.955] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220508 [0223.955] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\policytool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\policytool.exe"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1 [0223.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220508 | out: hHeap=0x1f0000) returned 1 [0223.956] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0223.957] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\policytool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\policytool.exe"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1 [0223.957] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0223.957] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0223.957] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0223.957] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xe040, dwReserved0=0x0, dwReserved1=0x0, cFileName="prism_common.dll", cAlternateFileName="PRISM_~1.DLL")) returned 1 [0223.957] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238f68 [0223.957] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235aa8 [0223.957] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221248 [0223.957] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235aa8 | out: hHeap=0x1f0000) returned 1 [0223.957] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0223.957] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238f68 | out: hHeap=0x1f0000) returned 1 [0223.957] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_common.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_common.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0223.958] GetFileType (hFile=0x230) returned 0x1 [0223.958] CloseHandle (hObject=0x230) returned 1 [0223.959] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d88 [0223.959] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_common.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_common.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xe040)) returned 1 [0223.959] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d88 | out: hHeap=0x1f0000) returned 1 [0223.959] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212828 [0223.960] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_common.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_common.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xe040)) returned 1 [0223.960] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212828 | out: hHeap=0x1f0000) returned 1 [0223.960] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211bf0 [0223.960] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211bf0 | out: hHeap=0x1f0000) returned 1 [0223.960] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1fe40, dwReserved0=0x0, dwReserved1=0x0, cFileName="prism_d3d.dll", cAlternateFileName="PRISM_~2.DLL")) returned 1 [0223.960] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0223.960] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235aa8 [0223.960] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220fe8 [0223.960] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235aa8 | out: hHeap=0x1f0000) returned 1 [0223.961] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0223.961] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0223.962] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_d3d.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_d3d.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0223.962] GetFileType (hFile=0x230) returned 0x1 [0223.962] CloseHandle (hObject=0x230) returned 1 [0223.963] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fab8 [0223.963] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_d3d.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_d3d.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1fe40)) returned 1 [0223.963] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fab8 | out: hHeap=0x1f0000) returned 1 [0223.963] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0223.963] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_d3d.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_d3d.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1fe40)) returned 1 [0223.963] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0223.963] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0223.964] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0223.964] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x17e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="prism_sw.dll", cAlternateFileName="")) returned 1 [0223.964] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0223.964] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235768 [0223.964] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2218d0 [0223.964] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235768 | out: hHeap=0x1f0000) returned 1 [0223.964] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0223.964] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0223.965] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_sw.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_sw.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0223.965] GetFileType (hFile=0x230) returned 0x1 [0223.965] CloseHandle (hObject=0x230) returned 1 [0223.965] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fa40 [0223.965] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_sw.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_sw.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x17e40)) returned 1 [0223.965] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fa40 | out: hHeap=0x1f0000) returned 1 [0223.965] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0223.966] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_sw.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_sw.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x17e40)) returned 1 [0223.966] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0223.966] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2201c0 [0223.966] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2201c0 | out: hHeap=0x1f0000) returned 1 [0223.966] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.dll", cAlternateFileName="")) returned 1 [0223.966] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0223.966] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235eb8 [0223.967] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221378 [0223.967] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235eb8 | out: hHeap=0x1f0000) returned 1 [0223.967] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0223.967] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0223.967] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\resource.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\resource.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0223.968] GetFileType (hFile=0x230) returned 0x1 [0223.968] CloseHandle (hObject=0x230) returned 1 [0223.968] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0223.968] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\resource.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\resource.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3c40)) returned 1 [0223.968] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0223.968] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220238 [0223.968] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\resource.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\resource.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3c40)) returned 1 [0223.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220238 | out: hHeap=0x1f0000) returned 1 [0223.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fab8 [0223.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fab8 | out: hHeap=0x1f0000) returned 1 [0223.969] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="rmid.exe", cAlternateFileName="")) returned 1 [0223.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0223.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236190 [0223.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2217a0 [0223.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236190 | out: hHeap=0x1f0000) returned 1 [0223.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0223.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0223.970] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\rmid.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\rmid.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0223.970] GetFileType (hFile=0x230) returned 0x1 [0223.970] CloseHandle (hObject=0x230) returned 1 [0223.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd88 [0223.971] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\rmid.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\rmid.exe"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e40)) returned 1 [0223.971] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd88 | out: hHeap=0x1f0000) returned 1 [0223.971] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0223.971] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\rmid.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\rmid.exe"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e40)) returned 1 [0223.971] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0223.971] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0223.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0223.972] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8af971e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="rmiregistry.exe", cAlternateFileName="RMIREG~1.EXE")) returned 1 [0223.972] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0223.972] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235aa8 [0223.972] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2218d0 [0223.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235aa8 | out: hHeap=0x1f0000) returned 1 [0223.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0223.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0223.972] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\rmiregistry.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\rmiregistry.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0223.972] GetFileType (hFile=0x230) returned 0x1 [0223.973] CloseHandle (hObject=0x230) returned 1 [0223.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0223.973] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\rmiregistry.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\rmiregistry.exe"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8af971e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1 [0223.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0223.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220238 [0223.973] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\rmiregistry.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\rmiregistry.exe"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8af971e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1 [0223.974] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220238 | out: hHeap=0x1f0000) returned 1 [0223.974] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0223.974] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0223.974] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8af971e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2b6c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xab35b530, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="server", cAlternateFileName="")) returned 1 [0223.974] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235768 [0223.974] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0223.974] lstrcmpW (lpString1="server", lpString2=".") returned 1 [0223.974] lstrcmpW (lpString1="server", lpString2="..") returned 1 [0223.974] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x48) returned 0x225ba8 [0223.974] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235ff0 [0223.974] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238d38 | out: hHeap=0x1f0000) returned 1 [0223.974] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="servertool.exe", cAlternateFileName="SERVER~1.EXE")) returned 1 [0223.974] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0223.974] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235aa8 [0223.974] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221248 [0223.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235aa8 | out: hHeap=0x1f0000) returned 1 [0223.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235768 | out: hHeap=0x1f0000) returned 1 [0223.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0223.975] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\servertool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\servertool.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0223.975] GetFileType (hFile=0x230) returned 0x1 [0223.975] CloseHandle (hObject=0x230) returned 1 [0223.975] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f7e8 [0223.976] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\servertool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\servertool.exe"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1 [0223.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f7e8 | out: hHeap=0x1f0000) returned 1 [0223.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0223.976] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\servertool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\servertool.exe"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1 [0223.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0223.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd88 [0223.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd88 | out: hHeap=0x1f0000) returned 1 [0223.977] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x32040, dwReserved0=0x0, dwReserved1=0x0, cFileName="splashscreen.dll", cAlternateFileName="SPLASH~1.DLL")) returned 1 [0223.977] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238fa0 [0223.977] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235768 [0223.977] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221670 [0223.977] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235768 | out: hHeap=0x1f0000) returned 1 [0223.977] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0223.977] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238fa0 | out: hHeap=0x1f0000) returned 1 [0223.977] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\splashscreen.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\splashscreen.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0223.977] GetFileType (hFile=0x230) returned 0x1 [0223.978] CloseHandle (hObject=0x230) returned 1 [0223.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0223.978] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\splashscreen.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\splashscreen.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x32040)) returned 1 [0223.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0223.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d88 [0223.978] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\splashscreen.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\splashscreen.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x32040)) returned 1 [0223.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d88 | out: hHeap=0x1f0000) returned 1 [0223.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0223.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0223.979] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdef13a3, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xcdef13a3, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xce60b224, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x8bb53, dwReserved0=0x0, dwReserved1=0x0, cFileName="ssv.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="SSVDLL~1.ODV")) returned 1 [0223.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0223.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235d80 [0223.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0223.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235d80 | out: hHeap=0x1f0000) returned 1 [0223.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0223.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0223.980] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\ssv.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ssv.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0223.980] GetFileType (hFile=0x230) returned 0x1 [0223.980] CloseHandle (hObject=0x230) returned 1 [0223.980] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x22d368 [0223.981] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\ssv.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ssv.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdef13a3, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xcdef13a3, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xce60b224, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x8bb53)) returned 1 [0223.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d368 | out: hHeap=0x1f0000) returned 1 [0223.981] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x22d368 [0223.981] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\ssv.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ssv.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdef13a3, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xcdef13a3, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xce60b224, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x8bb53)) returned 1 [0223.982] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d368 | out: hHeap=0x1f0000) returned 1 [0223.982] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x22d368 [0223.982] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d368 | out: hHeap=0x1f0000) returned 1 [0223.982] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x11240, dwReserved0=0x0, dwReserved1=0x0, cFileName="ssvagent.exe", cAlternateFileName="")) returned 1 [0223.982] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0223.982] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235768 [0223.982] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220d88 [0223.982] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235768 | out: hHeap=0x1f0000) returned 1 [0223.982] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0223.982] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0223.983] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\ssvagent.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ssvagent.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0223.983] GetFileType (hFile=0x230) returned 0x1 [0223.983] CloseHandle (hObject=0x230) returned 1 [0223.983] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0223.983] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\ssvagent.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ssvagent.exe"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x11240)) returned 1 [0223.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0223.983] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd88 [0223.983] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\ssvagent.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ssvagent.exe"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x11240)) returned 1 [0223.984] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd88 | out: hHeap=0x1f0000) returned 1 [0223.984] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220238 [0223.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220238 | out: hHeap=0x1f0000) returned 1 [0223.985] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x21240, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunec.dll", cAlternateFileName="")) returned 1 [0223.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0223.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235be0 [0223.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221118 [0223.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235be0 | out: hHeap=0x1f0000) returned 1 [0223.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0223.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0223.986] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\sunec.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\sunec.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0223.986] GetFileType (hFile=0x230) returned 0x1 [0223.986] CloseHandle (hObject=0x230) returned 1 [0223.987] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd88 [0223.987] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\sunec.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\sunec.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x21240)) returned 1 [0223.987] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd88 | out: hHeap=0x1f0000) returned 1 [0223.987] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f7e8 [0223.987] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\sunec.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\sunec.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x21240)) returned 1 [0223.987] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f7e8 | out: hHeap=0x1f0000) returned 1 [0223.987] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd88 [0223.987] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd88 | out: hHeap=0x1f0000) returned 1 [0223.987] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunmscapi.dll", cAlternateFileName="SUNMSC~1.DLL")) returned 1 [0223.987] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0223.987] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235d80 [0223.987] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2218d0 [0223.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235d80 | out: hHeap=0x1f0000) returned 1 [0223.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0223.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0223.988] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\sunmscapi.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\sunmscapi.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0223.988] GetFileType (hFile=0x230) returned 0x1 [0223.988] CloseHandle (hObject=0x230) returned 1 [0223.988] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fa40 [0223.989] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\sunmscapi.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\sunmscapi.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7c40)) returned 1 [0223.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fa40 | out: hHeap=0x1f0000) returned 1 [0223.989] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220508 [0223.989] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\sunmscapi.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\sunmscapi.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7c40)) returned 1 [0223.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220508 | out: hHeap=0x1f0000) returned 1 [0223.989] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd88 [0223.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd88 | out: hHeap=0x1f0000) returned 1 [0223.989] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e440, dwReserved0=0x0, dwReserved1=0x0, cFileName="t2k.dll", cAlternateFileName="")) returned 1 [0223.989] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236058 [0223.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0223.990] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\t2k.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\t2k.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0223.990] GetFileType (hFile=0x230) returned 0x1 [0223.990] CloseHandle (hObject=0x230) returned 1 [0223.990] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236190 [0223.990] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\t2k.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\t2k.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e440)) returned 1 [0223.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236190 | out: hHeap=0x1f0000) returned 1 [0223.990] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235b78 [0223.990] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\t2k.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\t2k.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e440)) returned 1 [0223.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0224.253] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235768 [0224.253] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235768 | out: hHeap=0x1f0000) returned 1 [0224.253] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="tnameserv.exe", cAlternateFileName="TNAMES~1.EXE")) returned 1 [0224.253] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0224.253] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236190 [0224.253] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221670 [0224.254] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236190 | out: hHeap=0x1f0000) returned 1 [0224.254] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236058 | out: hHeap=0x1f0000) returned 1 [0224.254] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0224.503] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\tnameserv.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\tnameserv.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0224.503] GetFileType (hFile=0x230) returned 0x1 [0224.503] CloseHandle (hObject=0x230) returned 1 [0224.504] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0224.504] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\tnameserv.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\tnameserv.exe"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1 [0224.504] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0224.504] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220508 [0224.504] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\tnameserv.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\tnameserv.exe"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1 [0224.504] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220508 | out: hHeap=0x1f0000) returned 1 [0224.504] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0224.504] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0224.504] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13840, dwReserved0=0x0, dwReserved1=0x0, cFileName="unpack.dll", cAlternateFileName="")) returned 1 [0224.504] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0224.504] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236058 [0224.504] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221248 [0224.505] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236058 | out: hHeap=0x1f0000) returned 1 [0224.505] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0224.505] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0224.505] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\unpack.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0224.505] GetFileType (hFile=0x230) returned 0x1 [0224.506] CloseHandle (hObject=0x230) returned 1 [0224.506] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220328 [0224.506] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\unpack.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13840)) returned 1 [0224.506] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220328 | out: hHeap=0x1f0000) returned 1 [0224.506] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0224.506] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\unpack.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13840)) returned 1 [0224.506] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0224.506] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220328 [0224.507] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220328 | out: hHeap=0x1f0000) returned 1 [0224.507] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x30240, dwReserved0=0x0, dwReserved1=0x0, cFileName="unpack200.exe", cAlternateFileName="UNPACK~1.EXE")) returned 1 [0224.507] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0224.507] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235c48 [0224.507] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2212e0 [0224.507] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235c48 | out: hHeap=0x1f0000) returned 1 [0224.507] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0224.507] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0224.508] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack200.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\unpack200.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0224.508] GetFileType (hFile=0x230) returned 0x1 [0224.508] CloseHandle (hObject=0x230) returned 1 [0224.508] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f770 [0224.508] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack200.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\unpack200.exe"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x30240)) returned 1 [0224.509] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f770 | out: hHeap=0x1f0000) returned 1 [0224.509] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f770 [0224.509] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack200.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\unpack200.exe"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x30240)) returned 1 [0224.509] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f770 | out: hHeap=0x1f0000) returned 1 [0224.509] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f7e8 [0224.509] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f7e8 | out: hHeap=0x1f0000) returned 1 [0224.509] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc040, dwReserved0=0x0, dwReserved1=0x0, cFileName="verify.dll", cAlternateFileName="")) returned 1 [0224.509] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0224.509] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235eb8 [0224.509] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2214a8 [0224.509] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235eb8 | out: hHeap=0x1f0000) returned 1 [0224.510] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0224.510] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0224.510] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\verify.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\verify.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0224.510] GetFileType (hFile=0x230) returned 0x1 [0224.510] CloseHandle (hObject=0x230) returned 1 [0224.511] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0224.511] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\verify.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\verify.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc040)) returned 1 [0224.511] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0224.511] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220580 [0224.511] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\verify.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\verify.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc040)) returned 1 [0224.511] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220580 | out: hHeap=0x1f0000) returned 1 [0224.511] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0224.512] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0224.512] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="w2k_lsa_auth.dll", cAlternateFileName="W2K_LS~1.DLL")) returned 1 [0224.512] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238e50 [0224.512] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235eb8 [0224.512] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221968 [0224.512] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235eb8 | out: hHeap=0x1f0000) returned 1 [0224.512] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0224.512] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238e50 | out: hHeap=0x1f0000) returned 1 [0224.513] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\w2k_lsa_auth.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\w2k_lsa_auth.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0224.513] GetFileType (hFile=0x230) returned 0x1 [0224.513] CloseHandle (hObject=0x230) returned 1 [0224.513] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2119d0 [0224.514] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\w2k_lsa_auth.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\w2k_lsa_auth.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5e40)) returned 1 [0224.514] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2119d0 | out: hHeap=0x1f0000) returned 1 [0224.514] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211c78 [0224.514] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\w2k_lsa_auth.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\w2k_lsa_auth.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5e40)) returned 1 [0224.514] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211c78 | out: hHeap=0x1f0000) returned 1 [0224.514] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d88 [0224.514] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d88 | out: hHeap=0x1f0000) returned 1 [0224.514] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1ae40, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsAccessBridge-64.dll", cAlternateFileName="WINDOW~1.DLL")) returned 1 [0224.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2285a8 [0224.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235b78 [0224.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0224.515] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0224.515] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0224.515] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2285a8 | out: hHeap=0x1f0000) returned 1 [0224.516] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\WindowsAccessBridge-64.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\windowsaccessbridge-64.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0224.516] GetFileType (hFile=0x230) returned 0x1 [0224.516] CloseHandle (hObject=0x230) returned 1 [0224.516] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0224.517] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\WindowsAccessBridge-64.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\windowsaccessbridge-64.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1ae40)) returned 1 [0224.517] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0224.517] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0224.517] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\WindowsAccessBridge-64.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\windowsaccessbridge-64.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1ae40)) returned 1 [0224.517] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0224.517] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0224.517] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0224.548] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2f040, dwReserved0=0x0, dwReserved1=0x0, cFileName="wsdetect.dll", cAlternateFileName="")) returned 1 [0224.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0224.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235c48 [0224.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221540 [0224.548] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235c48 | out: hHeap=0x1f0000) returned 1 [0224.549] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0224.549] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0224.550] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\wsdetect.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\wsdetect.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0224.550] GetFileType (hFile=0x230) returned 0x1 [0224.551] CloseHandle (hObject=0x230) returned 1 [0224.551] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220328 [0224.551] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\wsdetect.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\wsdetect.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2f040)) returned 1 [0224.551] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220328 | out: hHeap=0x1f0000) returned 1 [0224.551] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0224.551] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\wsdetect.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\wsdetect.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2f040)) returned 1 [0224.552] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0224.552] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fa40 [0224.552] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fa40 | out: hHeap=0x1f0000) returned 1 [0224.552] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13040, dwReserved0=0x0, dwReserved1=0x0, cFileName="zip.dll", cAlternateFileName="")) returned 1 [0224.552] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235768 [0224.552] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0224.553] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\zip.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\zip.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0224.553] GetFileType (hFile=0x230) returned 0x1 [0224.553] CloseHandle (hObject=0x230) returned 1 [0224.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2358a0 [0224.554] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\zip.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\zip.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13040)) returned 1 [0224.554] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2358a0 | out: hHeap=0x1f0000) returned 1 [0224.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236058 [0224.554] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\zip.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\zip.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13040)) returned 1 [0224.554] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236058 | out: hHeap=0x1f0000) returned 1 [0224.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235f20 [0224.555] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235f20 | out: hHeap=0x1f0000) returned 1 [0224.555] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13040, dwReserved0=0x0, dwReserved1=0x0, cFileName="zip.dll", cAlternateFileName="")) returned 0 [0224.555] FindClose (in: hFindFile=0x24e8c0 | out: hFindFile=0x24e8c0) returned 1 [0224.555] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228638 [0224.555] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0224.555] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22db68 [0224.556] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220580 [0224.556] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\*", lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xcec73804, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xcec73804, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ed40 [0224.556] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0224.556] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220580 | out: hHeap=0x1f0000) returned 1 [0224.556] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0224.556] FindNextFileW (in: hFindFile=0x24ed40, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xcec73804, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xcec73804, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0224.556] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0224.556] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0224.556] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0224.557] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0224.557] FindNextFileW (in: hFindFile=0x24ed40, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xfa840, dwReserved0=0x0, dwReserved1=0x0, cFileName="deployJava1.dll", cAlternateFileName="DEPLOY~1.DLL")) returned 1 [0224.557] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238488 [0224.557] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0224.557] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218768 [0224.557] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0224.557] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0224.557] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238488 | out: hHeap=0x1f0000) returned 1 [0224.558] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\deployJava1.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\deployjava1.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0224.558] GetFileType (hFile=0x230) returned 0x1 [0224.559] CloseHandle (hObject=0x230) returned 1 [0224.559] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0224.559] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\deployJava1.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\deployjava1.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xfa840)) returned 1 [0224.559] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0224.559] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0224.559] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\deployJava1.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\deployjava1.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xfa840)) returned 1 [0224.560] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0224.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0224.560] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0224.560] GetLastError () returned 0x0 [0224.560] CryptAcquireContextA (in: phProv=0x1fddd98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1fddd98*=0x212140) returned 1 [0224.561] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238488 | out: pbBuffer=0x238488) returned 1 [0224.561] CryptReleaseContext (hProv=0x212140, dwFlags=0x0) returned 1 [0224.561] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238488 | out: hHeap=0x1f0000) returned 1 [0224.561] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x2595a0 [0224.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2376f8 [0224.562] QueryPerformanceCounter (in: lpPerformanceCount=0x1fddd2c | out: lpPerformanceCount=0x1fddd2c*=38193066452) returned 1 [0224.562] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1fddd6c | out: lpSystemTimeAsFileTime=0x1fddd6c) [0224.562] QueryPerformanceCounter (in: lpPerformanceCount=0x1fddd2c | out: lpPerformanceCount=0x1fddd2c*=38193109199) returned 1 [0224.562] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1fddd6c | out: lpSystemTimeAsFileTime=0x1fddd6c) [0224.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238f68 [0224.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x251068 [0224.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x236f50 [0224.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x232e18 [0224.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff28 [0224.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206628 [0224.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff70 [0224.563] GetLastError () returned 0x0 [0224.564] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\deployJava1.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\deployjava1.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1fddc38, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0224.573] GetFileType (hFile=0x230) returned 0x1 [0224.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389e0 [0224.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ad0 [0224.575] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\deployJava1.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\deployjava1.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fddc68, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0224.575] GetFileType (hFile=0x1c0) returned 0x1 [0224.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cf0 [0224.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e70 [0224.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261160 [0224.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a50 [0224.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389f0 [0224.577] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\deployJava1.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\deployjava1.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1fddbb4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0224.577] GetFileType (hFile=0x1f4) returned 0x1 [0224.578] GetLastError () returned 0xb7 [0224.578] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\deployJava1.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\deployjava1.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1fddbb4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1bc [0224.578] GetFileType (hFile=0x1bc) returned 0x1 [0224.579] GetLastError () returned 0xb7 [0224.579] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\deployJava1.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\deployjava1.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x1fddbac, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0224.579] GetFileType (hFile=0x174) returned 0x1 [0224.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28ffe0 [0224.893] ReadFile (in: hFile=0x174, lpBuffer=0x28ffe0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fddb08, lpOverlapped=0x0 | out: lpBuffer=0x28ffe0*, lpNumberOfBytesRead=0x1fddb08*=0x1000, lpOverlapped=0x0) returned 1 [0224.897] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24b9e8 [0224.898] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28afb8 [0224.898] GetLastError () returned 0x0 [0225.322] CloseHandle (hObject=0x230) returned 1 [0225.322] CloseHandle (hObject=0x1c0) returned 1 [0225.323] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238af0 [0225.323] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b90 [0225.324] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\deployJava1.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\deployjava1.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1fddc68, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0225.337] GetFileType (hFile=0x1c0) returned 0x1 [0225.337] GetLastError () returned 0xb7 [0225.339] CloseHandle (hObject=0x1c0) returned 1 [0225.339] DeleteFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\deployJava1.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\deployjava1.dll")) returned 0 [0225.340] GetLastError () returned 0x20 [0225.340] GetLastError () returned 0x20 [0225.340] CryptAcquireContextA (in: phProv=0x1fddd98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1fddd98*=0x2128b0) returned 1 [0225.341] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238398 | out: pbBuffer=0x238398) returned 1 [0225.341] CryptReleaseContext (hProv=0x2128b0, dwFlags=0x0) returned 1 [0225.341] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0225.341] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238398 [0225.342] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238410 [0225.342] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239208 [0225.342] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0225.342] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0225.342] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239208 | out: hHeap=0x1f0000) returned 1 [0225.342] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8110 [0225.342] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210258 [0225.343] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x236058 [0225.343] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238398 [0225.343] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285cf8 [0225.343] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ef0 [0225.343] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2358a0 [0225.343] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238528 [0225.344] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285098 [0225.344] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a90 [0225.344] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385a0 [0225.344] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0225.344] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b30 [0225.344] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384d8 [0225.344] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210198 [0225.345] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0225.345] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384d8 | out: hHeap=0x1f0000) returned 1 [0225.345] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b30 | out: hHeap=0x1f0000) returned 1 [0225.345] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0225.345] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385a0 | out: hHeap=0x1f0000) returned 1 [0225.345] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a90 | out: hHeap=0x1f0000) returned 1 [0225.345] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285098 | out: hHeap=0x1f0000) returned 1 [0225.345] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238528 | out: hHeap=0x1f0000) returned 1 [0225.347] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2358a0 | out: hHeap=0x1f0000) returned 1 [0225.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238e50 [0225.347] GetLastError () returned 0x0 [0225.347] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1fdd928 | out: lpSystemTimeAsFileTime=0x1fdd928) [0225.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238a90 [0225.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238730 [0225.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204db0 [0225.348] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204db0 | out: hHeap=0x1f0000) returned 1 [0225.348] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238730 | out: hHeap=0x1f0000) returned 1 [0225.348] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384d8 [0225.348] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204db0 [0225.348] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204db0 | out: hHeap=0x1f0000) returned 1 [0225.348] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384d8 | out: hHeap=0x1f0000) returned 1 [0225.348] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a90 | out: hHeap=0x1f0000) returned 1 [0225.348] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0225.348] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238d38 [0225.349] GetLastError () returned 0x0 [0225.349] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\deployJava1.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\deployjava1.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1fddc98, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0225.349] GetFileType (hFile=0x1c0) returned 0x1 [0225.350] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28bfc0 [0225.350] SetFilePointerEx (in: hFile=0x1c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1fddc20 | out: lpNewFilePointer=0x0) returned 1 [0225.351] GetLastError () returned 0xb7 [0225.351] CloseHandle (hObject=0x1c0) returned 1 [0225.352] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a90 | out: hHeap=0x1f0000) returned 1 [0225.352] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b40 | out: hHeap=0x1f0000) returned 1 [0225.352] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2856c8 | out: hHeap=0x1f0000) returned 1 [0225.352] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285cf8 | out: hHeap=0x1f0000) returned 1 [0225.352] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0225.352] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ef0 | out: hHeap=0x1f0000) returned 1 [0225.352] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236058 | out: hHeap=0x1f0000) returned 1 [0225.352] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0225.353] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8110 | out: hHeap=0x1f0000) returned 1 [0225.353] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237810 | out: hHeap=0x1f0000) returned 1 [0225.353] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0225.353] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0225.353] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25bbb0 | out: hHeap=0x1f0000) returned 1 [0225.353] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237298 | out: hHeap=0x1f0000) returned 1 [0225.353] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238d00 | out: hHeap=0x1f0000) returned 1 [0225.353] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b00 | out: hHeap=0x1f0000) returned 1 [0225.353] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210018 | out: hHeap=0x1f0000) returned 1 [0225.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0225.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a80 | out: hHeap=0x1f0000) returned 1 [0225.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffd0 | out: hHeap=0x1f0000) returned 1 [0225.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238488 | out: hHeap=0x1f0000) returned 1 [0225.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b60 | out: hHeap=0x1f0000) returned 1 [0225.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285ae8 | out: hHeap=0x1f0000) returned 1 [0225.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238780 | out: hHeap=0x1f0000) returned 1 [0225.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235f20 | out: hHeap=0x1f0000) returned 1 [0225.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228680 | out: hHeap=0x1f0000) returned 1 [0225.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0225.355] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0225.355] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228a70 | out: hHeap=0x1f0000) returned 1 [0225.355] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b90 | out: hHeap=0x1f0000) returned 1 [0225.355] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238af0 | out: hHeap=0x1f0000) returned 1 [0225.355] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28ffe0 | out: hHeap=0x1f0000) returned 1 [0225.355] CloseHandle (hObject=0x174) returned 1 [0225.355] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a70 | out: hHeap=0x1f0000) returned 1 [0225.356] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a40 | out: hHeap=0x1f0000) returned 1 [0225.356] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224960 | out: hHeap=0x1f0000) returned 1 [0225.356] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24b9e8 | out: hHeap=0x1f0000) returned 1 [0225.356] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffb8 | out: hHeap=0x1f0000) returned 1 [0225.356] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c70 | out: hHeap=0x1f0000) returned 1 [0225.356] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28afb8 | out: hHeap=0x1f0000) returned 1 [0225.356] CloseHandle (hObject=0x1bc) returned 1 [0225.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ac0 | out: hHeap=0x1f0000) returned 1 [0225.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a30 | out: hHeap=0x1f0000) returned 1 [0225.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2610a8 | out: hHeap=0x1f0000) returned 1 [0225.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c50 | out: hHeap=0x1f0000) returned 1 [0225.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21bf68 | out: hHeap=0x1f0000) returned 1 [0225.357] CloseHandle (hObject=0x1f4) returned 1 [0225.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389f0 | out: hHeap=0x1f0000) returned 1 [0225.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a50 | out: hHeap=0x1f0000) returned 1 [0225.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261160 | out: hHeap=0x1f0000) returned 1 [0225.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ad0 | out: hHeap=0x1f0000) returned 1 [0225.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389e0 | out: hHeap=0x1f0000) returned 1 [0225.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b10 | out: hHeap=0x1f0000) returned 1 [0225.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ba0 | out: hHeap=0x1f0000) returned 1 [0225.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d368 | out: hHeap=0x1f0000) returned 1 [0225.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x251068 | out: hHeap=0x1f0000) returned 1 [0225.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236f50 | out: hHeap=0x1f0000) returned 1 [0225.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206628 | out: hHeap=0x1f0000) returned 1 [0225.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff70 | out: hHeap=0x1f0000) returned 1 [0225.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff28 | out: hHeap=0x1f0000) returned 1 [0225.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232e18 | out: hHeap=0x1f0000) returned 1 [0225.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2595a0 | out: hHeap=0x1f0000) returned 1 [0225.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2376f8 | out: hHeap=0x1f0000) returned 1 [0225.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ef8 | out: hHeap=0x1f0000) returned 1 [0225.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0225.360] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e1c8 | out: hHeap=0x1f0000) returned 1 [0225.360] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228998 | out: hHeap=0x1f0000) returned 1 [0225.360] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0225.360] DeleteFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\deployJava1.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\deployjava1.dll")) returned 1 [0225.737] FindNextFileW (in: hFindFile=0x24ed40, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xcec73804, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x11a743, dwReserved0=0x0, dwReserved1=0x0, cFileName="npdeployJava1.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="NPDEPL~1.ODV")) returned 1 [0225.737] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2610a8 [0225.737] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0225.737] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x237298 [0225.737] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0225.737] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218768 | out: hHeap=0x1f0000) returned 1 [0225.737] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2610a8 | out: hHeap=0x1f0000) returned 1 [0225.738] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\npdeployJava1.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\npdeployjava1.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0225.738] GetFileType (hFile=0x1f4) returned 0x1 [0225.738] CloseHandle (hObject=0x1f4) returned 1 [0225.739] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x2374c8 [0225.739] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\npdeployJava1.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\npdeployjava1.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xcec73804, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x11a743)) returned 1 [0225.739] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2374c8 | out: hHeap=0x1f0000) returned 1 [0225.739] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x2376f8 [0225.739] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\npdeployJava1.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\npdeployjava1.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xcec73804, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x11a743)) returned 1 [0225.739] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2376f8 | out: hHeap=0x1f0000) returned 1 [0225.739] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x2373b0 [0225.740] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2373b0 | out: hHeap=0x1f0000) returned 1 [0225.740] FindNextFileW (in: hFindFile=0x24ed40, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xcec73804, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x11a743, dwReserved0=0x0, dwReserved1=0x0, cFileName="npdeployJava1.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="NPDEPL~1.ODV")) returned 0 [0225.740] FindClose (in: hFindFile=0x24ed40 | out: hFindFile=0x24ed40) returned 1 [0225.740] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237298 | out: hHeap=0x1f0000) returned 1 [0225.740] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22db68 | out: hHeap=0x1f0000) returned 1 [0225.740] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0225.740] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228638 | out: hHeap=0x1f0000) returned 1 [0225.740] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228830 [0225.740] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238488 [0225.741] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f1b8 [0225.741] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0225.741] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\*", lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2a2bf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e680 [0225.741] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd88 [0225.741] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0225.741] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0225.741] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2a2bf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0225.741] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f7e8 [0225.741] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd88 | out: hHeap=0x1f0000) returned 1 [0225.742] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0225.742] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0225.742] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xca750, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr100.dll", cAlternateFileName="")) returned 1 [0225.742] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0225.742] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0225.742] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218818 [0225.742] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0225.742] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f7e8 | out: hHeap=0x1f0000) returned 1 [0225.742] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0225.743] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\msvcr100.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\plugin2\\msvcr100.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0225.743] GetFileType (hFile=0x1f4) returned 0x1 [0225.743] CloseHandle (hObject=0x1f4) returned 1 [0225.744] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213818 [0225.744] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\msvcr100.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\plugin2\\msvcr100.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xca750)) returned 1 [0225.744] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213818 | out: hHeap=0x1f0000) returned 1 [0225.744] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0225.744] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\msvcr100.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\plugin2\\msvcr100.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xca750)) returned 1 [0225.744] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0225.744] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0225.744] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0225.744] GetLastError () returned 0x0 [0225.745] CryptAcquireContextA (in: phProv=0x1fddd98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1fddd98*=0x212b58) returned 1 [0225.745] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2380a0 | out: pbBuffer=0x2380a0) returned 1 [0225.745] CryptReleaseContext (hProv=0x212b58, dwFlags=0x0) returned 1 [0225.745] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0225.746] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x251068 [0225.746] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x236f50 [0225.746] QueryPerformanceCounter (in: lpPerformanceCount=0x1fddd2c | out: lpPerformanceCount=0x1fddd2c*=38311461259) returned 1 [0225.746] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1fddd6c | out: lpSystemTimeAsFileTime=0x1fddd6c) [0225.746] QueryPerformanceCounter (in: lpPerformanceCount=0x1fddd2c | out: lpPerformanceCount=0x1fddd2c*=38311487366) returned 1 [0225.746] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1fddd6c | out: lpSystemTimeAsFileTime=0x1fddd6c) [0225.746] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239278 [0225.746] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x258298 [0225.746] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x237180 [0225.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x233708 [0225.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff70 [0225.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206928 [0225.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210018 [0225.747] GetLastError () returned 0x0 [0225.747] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\msvcr100.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\plugin2\\msvcr100.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1fddc38, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0225.748] GetFileType (hFile=0x1f4) returned 0x1 [0225.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b80 [0225.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a40 [0225.749] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\msvcr100.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\plugin2\\msvcr100.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fddc68, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1bc [0225.749] GetFileType (hFile=0x1bc) returned 0x1 [0225.749] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ef0 [0225.749] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0225.749] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261440 [0225.749] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b70 [0225.750] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a50 [0225.750] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\msvcr100.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\plugin2\\msvcr100.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1fddbb4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0225.751] GetFileType (hFile=0x174) returned 0x1 [0225.751] GetLastError () returned 0xb7 [0225.751] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\msvcr100.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\plugin2\\msvcr100.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1fddbb4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0225.751] GetFileType (hFile=0x1c0) returned 0x1 [0225.752] GetLastError () returned 0xb7 [0225.752] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\msvcr100.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\plugin2\\msvcr100.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x1fddbac, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0225.752] GetFileType (hFile=0x230) returned 0x1 [0225.752] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28cfc8 [0225.753] ReadFile (in: hFile=0x230, lpBuffer=0x28cfc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fddb08, lpOverlapped=0x0 | out: lpBuffer=0x28cfc8*, lpNumberOfBytesRead=0x1fddb08*=0x1000, lpOverlapped=0x0) returned 1 [0225.755] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24b9e8 [0225.755] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x288fa8 [0225.756] GetLastError () returned 0x0 [0226.130] CloseHandle (hObject=0x1f4) returned 1 [0226.157] CloseHandle (hObject=0x1bc) returned 1 [0226.157] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389e0 [0226.157] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a60 [0226.502] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\msvcr100.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\plugin2\\msvcr100.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1fddc68, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0226.513] GetFileType (hFile=0x1d8) returned 0x1 [0226.513] GetLastError () returned 0xb7 [0226.515] CloseHandle (hObject=0x1d8) returned 1 [0226.516] DeleteFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\msvcr100.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\plugin2\\msvcr100.dll")) returned 0 [0226.516] GetLastError () returned 0x20 [0226.516] GetLastError () returned 0x20 [0226.516] CryptAcquireContextA (in: phProv=0x1fddd98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1fddd98*=0x212f10) returned 1 [0226.521] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238208 | out: pbBuffer=0x238208) returned 1 [0226.522] CryptReleaseContext (hProv=0x212f10, dwFlags=0x0) returned 1 [0226.522] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0226.522] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238208 [0226.522] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238398 [0226.522] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2392b0 [0226.522] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0226.522] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0226.522] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2392b0 | out: hHeap=0x1f0000) returned 1 [0226.522] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8530 [0226.522] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffb8 [0226.522] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x235de8 [0226.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238208 [0226.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285e00 [0226.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c10 [0226.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235f20 [0226.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2385a0 [0226.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2857d0 [0226.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238af0 [0226.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238618 [0226.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffd0 [0226.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b00 [0226.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238550 [0226.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0226.523] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0226.523] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238550 | out: hHeap=0x1f0000) returned 1 [0226.524] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b00 | out: hHeap=0x1f0000) returned 1 [0226.524] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffd0 | out: hHeap=0x1f0000) returned 1 [0226.524] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238618 | out: hHeap=0x1f0000) returned 1 [0226.524] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238af0 | out: hHeap=0x1f0000) returned 1 [0226.524] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2857d0 | out: hHeap=0x1f0000) returned 1 [0226.524] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385a0 | out: hHeap=0x1f0000) returned 1 [0226.524] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235f20 | out: hHeap=0x1f0000) returned 1 [0226.524] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238da8 [0226.524] GetLastError () returned 0x0 [0226.524] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1fdd928 | out: lpSystemTimeAsFileTime=0x1fdd928) [0226.524] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238af0 [0226.525] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238550 [0226.525] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204db0 [0226.525] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204db0 | out: hHeap=0x1f0000) returned 1 [0226.525] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238550 | out: hHeap=0x1f0000) returned 1 [0226.525] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384d8 [0226.525] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c50 [0226.525] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c50 | out: hHeap=0x1f0000) returned 1 [0226.525] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384d8 | out: hHeap=0x1f0000) returned 1 [0226.525] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238af0 | out: hHeap=0x1f0000) returned 1 [0226.525] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0226.525] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239208 [0226.526] GetLastError () returned 0x0 [0226.526] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\msvcr100.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\plugin2\\msvcr100.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1fddc98, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0226.526] GetFileType (hFile=0x1d8) returned 0x1 [0226.527] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x289fb0 [0226.527] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1fddc20 | out: lpNewFilePointer=0x0) returned 1 [0226.527] GetLastError () returned 0xb7 [0226.527] CloseHandle (hObject=0x1d8) returned 1 [0226.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b00 | out: hHeap=0x1f0000) returned 1 [0226.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238af0 | out: hHeap=0x1f0000) returned 1 [0226.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2858d8 | out: hHeap=0x1f0000) returned 1 [0226.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285e00 | out: hHeap=0x1f0000) returned 1 [0226.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0226.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c10 | out: hHeap=0x1f0000) returned 1 [0226.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235de8 | out: hHeap=0x1f0000) returned 1 [0226.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffb8 | out: hHeap=0x1f0000) returned 1 [0226.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8530 | out: hHeap=0x1f0000) returned 1 [0226.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236e38 | out: hHeap=0x1f0000) returned 1 [0226.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0226.529] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0226.529] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25e1c0 | out: hHeap=0x1f0000) returned 1 [0226.529] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2373b0 | out: hHeap=0x1f0000) returned 1 [0226.529] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238f68 | out: hHeap=0x1f0000) returned 1 [0226.529] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a70 | out: hHeap=0x1f0000) returned 1 [0226.529] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210078 | out: hHeap=0x1f0000) returned 1 [0226.529] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238730 | out: hHeap=0x1f0000) returned 1 [0226.529] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238aa0 | out: hHeap=0x1f0000) returned 1 [0226.529] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffa0 | out: hHeap=0x1f0000) returned 1 [0226.529] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238578 | out: hHeap=0x1f0000) returned 1 [0226.529] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ae0 | out: hHeap=0x1f0000) returned 1 [0226.529] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2852a8 | out: hHeap=0x1f0000) returned 1 [0226.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2386e0 | out: hHeap=0x1f0000) returned 1 [0226.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235c48 | out: hHeap=0x1f0000) returned 1 [0226.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2286c8 | out: hHeap=0x1f0000) returned 1 [0226.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0226.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0226.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2285a8 | out: hHeap=0x1f0000) returned 1 [0226.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a60 | out: hHeap=0x1f0000) returned 1 [0226.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389e0 | out: hHeap=0x1f0000) returned 1 [0226.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28cfc8 | out: hHeap=0x1f0000) returned 1 [0226.530] CloseHandle (hObject=0x230) returned 1 [0226.531] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b50 | out: hHeap=0x1f0000) returned 1 [0226.531] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ba0 | out: hHeap=0x1f0000) returned 1 [0226.531] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224420 | out: hHeap=0x1f0000) returned 1 [0226.531] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24b9e8 | out: hHeap=0x1f0000) returned 1 [0226.531] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20fef8 | out: hHeap=0x1f0000) returned 1 [0226.531] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ef0 | out: hHeap=0x1f0000) returned 1 [0226.532] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x288fa8 | out: hHeap=0x1f0000) returned 1 [0226.532] CloseHandle (hObject=0x1c0) returned 1 [0226.532] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a30 | out: hHeap=0x1f0000) returned 1 [0226.532] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b90 | out: hHeap=0x1f0000) returned 1 [0226.532] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2614f8 | out: hHeap=0x1f0000) returned 1 [0226.532] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cf0 | out: hHeap=0x1f0000) returned 1 [0226.533] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d368 | out: hHeap=0x1f0000) returned 1 [0226.533] CloseHandle (hObject=0x174) returned 1 [0226.534] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a50 | out: hHeap=0x1f0000) returned 1 [0226.534] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b70 | out: hHeap=0x1f0000) returned 1 [0226.534] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261440 | out: hHeap=0x1f0000) returned 1 [0226.534] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a40 | out: hHeap=0x1f0000) returned 1 [0226.534] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b80 | out: hHeap=0x1f0000) returned 1 [0226.534] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ab0 | out: hHeap=0x1f0000) returned 1 [0226.534] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a10 | out: hHeap=0x1f0000) returned 1 [0226.535] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21bf68 | out: hHeap=0x1f0000) returned 1 [0226.535] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x258298 | out: hHeap=0x1f0000) returned 1 [0226.535] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237180 | out: hHeap=0x1f0000) returned 1 [0226.535] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206928 | out: hHeap=0x1f0000) returned 1 [0226.535] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210018 | out: hHeap=0x1f0000) returned 1 [0226.535] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff70 | out: hHeap=0x1f0000) returned 1 [0226.535] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233708 | out: hHeap=0x1f0000) returned 1 [0226.535] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x251068 | out: hHeap=0x1f0000) returned 1 [0226.535] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236f50 | out: hHeap=0x1f0000) returned 1 [0226.535] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238f30 | out: hHeap=0x1f0000) returned 1 [0226.535] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0226.536] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f020 | out: hHeap=0x1f0000) returned 1 [0226.536] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2284d0 | out: hHeap=0x1f0000) returned 1 [0226.536] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0226.536] DeleteFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\msvcr100.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\plugin2\\msvcr100.dll")) returned 1 [0226.537] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39440, dwReserved0=0x0, dwReserved1=0x0, cFileName="npjp2.dll", cAlternateFileName="")) returned 1 [0226.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0226.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220580 [0226.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219268 [0226.538] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220580 | out: hHeap=0x1f0000) returned 1 [0226.538] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218818 | out: hHeap=0x1f0000) returned 1 [0226.538] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0226.539] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\npjp2.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\plugin2\\npjp2.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0226.539] GetFileType (hFile=0x174) returned 0x1 [0226.540] CloseHandle (hObject=0x174) returned 1 [0226.540] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0226.540] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\npjp2.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\plugin2\\npjp2.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39440)) returned 1 [0226.540] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0226.541] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213680 [0226.541] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\npjp2.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\plugin2\\npjp2.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39440)) returned 1 [0226.541] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213680 | out: hHeap=0x1f0000) returned 1 [0226.541] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2132c8 [0226.541] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2132c8 | out: hHeap=0x1f0000) returned 1 [0226.541] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39440, dwReserved0=0x0, dwReserved1=0x0, cFileName="npjp2.dll", cAlternateFileName="")) returned 0 [0226.541] FindClose (in: hFindFile=0x24e680 | out: hFindFile=0x24e680) returned 1 [0226.542] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219268 | out: hHeap=0x1f0000) returned 1 [0226.542] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f1b8 | out: hHeap=0x1f0000) returned 1 [0226.542] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238488 | out: hHeap=0x1f0000) returned 1 [0226.542] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228830 | out: hHeap=0x1f0000) returned 1 [0226.542] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2284d0 [0226.542] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0226.542] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d6a0 [0226.542] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0226.543] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\*", lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8af971e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2b6c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xab35b530, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ec80 [0226.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235c48 [0226.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221968 [0226.543] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235c48 | out: hHeap=0x1f0000) returned 1 [0226.543] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0226.543] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0226.544] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8af971e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2b6c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xab35b530, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235c48 [0226.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220cf0 [0226.544] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235c48 | out: hHeap=0x1f0000) returned 1 [0226.544] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0226.544] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0226.545] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0226.545] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xab35b530, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xab35b530, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xabaa88bc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x11d0000, dwReserved0=0x0, dwReserved1=0x0, cFileName="classes.jsa", cAlternateFileName="")) returned 1 [0226.545] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0226.545] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235c48 [0226.545] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221540 [0226.545] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235c48 | out: hHeap=0x1f0000) returned 1 [0226.545] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0226.545] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0226.546] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\classes.jsa" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\classes.jsa"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0226.547] GetLastError () returned 0x5 [0226.547] GetLastError () returned 0x5 [0226.547] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b1f9e6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b1f9e6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b1f9e6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x866c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="jvm.dll", cAlternateFileName="")) returned 1 [0226.547] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235c48 [0226.547] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221248 [0226.548] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235c48 | out: hHeap=0x1f0000) returned 1 [0226.548] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0226.549] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\jvm.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\jvm.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1bc [0227.023] GetFileType (hFile=0x1bc) returned 0x1 [0227.024] CloseHandle (hObject=0x1bc) returned 1 [0227.024] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21ffe0 [0227.024] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\jvm.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\jvm.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b1f9e6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b1f9e6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xd0a6b53b, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x866d43)) returned 1 [0227.025] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ffe0 | out: hHeap=0x1f0000) returned 1 [0227.025] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0227.025] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\jvm.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\jvm.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b1f9e6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b1f9e6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xd0a6b53b, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x866d43)) returned 1 [0227.025] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0227.025] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0227.025] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0227.026] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b1f9e6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b1f9e6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b1f9e6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x58f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Xusage.txt", cAlternateFileName="")) returned 1 [0227.026] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0227.026] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235aa8 [0227.026] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220d88 [0227.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235aa8 | out: hHeap=0x1f0000) returned 1 [0227.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0227.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0227.027] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\xusage.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1bc [0227.027] GetFileType (hFile=0x1bc) returned 0x1 [0227.027] CloseHandle (hObject=0x1bc) returned 1 [0227.028] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213680 [0227.028] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\xusage.txt"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b1f9e6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b1f9e6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b1f9e6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x58f)) returned 1 [0227.028] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213680 | out: hHeap=0x1f0000) returned 1 [0227.028] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2133d8 [0227.028] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\xusage.txt"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b1f9e6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b1f9e6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b1f9e6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x58f)) returned 1 [0227.029] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2133d8 | out: hHeap=0x1f0000) returned 1 [0227.029] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213818 [0227.029] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213818 | out: hHeap=0x1f0000) returned 1 [0227.029] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b1f9e6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b1f9e6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b1f9e6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x58f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Xusage.txt", cAlternateFileName="")) returned 0 [0227.029] FindClose (in: hFindFile=0x24ec80 | out: hFindFile=0x24ec80) returned 1 [0227.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0227.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d6a0 | out: hHeap=0x1f0000) returned 1 [0227.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0227.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2284d0 | out: hHeap=0x1f0000) returned 1 [0227.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235768 | out: hHeap=0x1f0000) returned 1 [0227.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2202b0 | out: hHeap=0x1f0000) returned 1 [0227.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235a40 | out: hHeap=0x1f0000) returned 1 [0227.033] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235ff0 | out: hHeap=0x1f0000) returned 1 [0227.033] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225ba8 | out: hHeap=0x1f0000) returned 1 [0227.033] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261e58 | out: hHeap=0x1f0000) returned 1 [0227.033] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0227.033] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233cd8 | out: hHeap=0x1f0000) returned 1 [0227.033] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2288c0 [0227.033] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0227.033] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e4f8 [0227.034] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235ff0 [0227.034] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\*", lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe1f09, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xaa80821a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e780 [0227.034] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236260 [0227.034] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235ff0 | out: hHeap=0x1f0000) returned 1 [0227.035] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0227.035] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe1f09, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xaa80821a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0227.035] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235a40 [0227.035] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236260 | out: hHeap=0x1f0000) returned 1 [0227.035] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0227.035] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0227.035] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x95, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.properties", cAlternateFileName="ACCESS~1.PRO")) returned 1 [0227.035] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228cb0 [0227.035] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235aa8 [0227.036] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0227.036] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235aa8 | out: hHeap=0x1f0000) returned 1 [0227.036] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235a40 | out: hHeap=0x1f0000) returned 1 [0227.036] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228cb0 | out: hHeap=0x1f0000) returned 1 [0227.036] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\accessibility.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\accessibility.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1bc [0227.037] GetFileType (hFile=0x1bc) returned 0x1 [0227.037] CloseHandle (hObject=0x1bc) returned 1 [0227.037] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0227.037] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\accessibility.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\accessibility.properties"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x95)) returned 1 [0227.038] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0227.038] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0227.038] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\accessibility.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\accessibility.properties"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x95)) returned 1 [0227.038] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0227.038] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0227.038] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0227.038] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0227.039] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0227.039] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe451d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64", cAlternateFileName="")) returned 1 [0227.039] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236260 [0227.039] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0227.039] lstrcmpW (lpString1="amd64", lpString2=".") returned 1 [0227.039] lstrcmpW (lpString1="amd64", lpString2="..") returned 1 [0227.039] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204e90 [0227.039] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235768 [0227.039] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105ca28, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="applet", cAlternateFileName="")) returned 1 [0227.039] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235a40 [0227.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236260 | out: hHeap=0x1f0000) returned 1 [0227.040] lstrcmpW (lpString1="applet", lpString2=".") returned 1 [0227.040] lstrcmpW (lpString1="applet", lpString2="..") returned 1 [0227.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239160 [0227.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235f20 [0227.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e90 | out: hHeap=0x1f0000) returned 1 [0227.040] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x562, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendars.properties", cAlternateFileName="CALEND~1.PRO")) returned 1 [0227.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238e18 [0227.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235ff0 [0227.041] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220e20 [0227.041] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235ff0 | out: hHeap=0x1f0000) returned 1 [0227.041] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235a40 | out: hHeap=0x1f0000) returned 1 [0227.041] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238e18 | out: hHeap=0x1f0000) returned 1 [0227.041] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\calendars.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\calendars.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1bc [0227.042] GetFileType (hFile=0x1bc) returned 0x1 [0227.042] CloseHandle (hObject=0x1bc) returned 1 [0227.043] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f10 [0227.043] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\calendars.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\calendars.properties"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x562)) returned 1 [0227.043] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f10 | out: hHeap=0x1f0000) returned 1 [0227.043] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0227.043] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\calendars.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\calendars.properties"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x562)) returned 1 [0227.043] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0227.043] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0227.044] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0227.044] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0227.044] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0227.044] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa7bbd53, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xaa7bbd53, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xaa80821a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2e56fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="charsets.jar", cAlternateFileName="")) returned 1 [0227.044] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0227.044] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235a40 [0227.044] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221a00 [0227.044] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235a40 | out: hHeap=0x1f0000) returned 1 [0227.044] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0227.045] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0227.045] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\charsets.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\charsets.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1bc [0227.046] GetFileType (hFile=0x1bc) returned 0x1 [0227.047] CloseHandle (hObject=0x1bc) returned 1 [0227.047] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0227.047] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\charsets.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\charsets.jar"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa7bbd53, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xaa7bbd53, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xaa80821a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2e56fa)) returned 1 [0227.048] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0227.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0227.048] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\charsets.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\charsets.jar"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa7bbd53, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xaa7bbd53, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xaa80821a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2e56fa)) returned 1 [0227.048] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0227.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fc98 [0227.048] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fc98 | out: hHeap=0x1f0000) returned 1 [0227.048] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x14983, dwReserved0=0x0, dwReserved1=0x0, cFileName="classlist", cAlternateFileName="CLASSL~1")) returned 1 [0227.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0227.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235f88 [0227.049] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220e20 [0227.049] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235f88 | out: hHeap=0x1f0000) returned 1 [0227.049] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0227.049] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0227.050] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\classlist" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\classlist"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1bc [0227.050] GetFileType (hFile=0x1bc) returned 0x1 [0227.051] CloseHandle (hObject=0x1bc) returned 1 [0227.051] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220580 [0227.051] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\classlist" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\classlist"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x14983)) returned 1 [0227.051] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220580 | out: hHeap=0x1f0000) returned 1 [0227.051] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fb30 [0227.051] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\classlist" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\classlist"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x14983)) returned 1 [0227.051] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fb30 | out: hHeap=0x1f0000) returned 1 [0227.052] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fa40 [0227.052] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fa40 | out: hHeap=0x1f0000) returned 1 [0227.052] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105e2a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cmm", cAlternateFileName="")) returned 1 [0227.052] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235a40 [0227.052] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0227.052] lstrcmpW (lpString1="cmm", lpString2=".") returned 1 [0227.052] lstrcmpW (lpString1="cmm", lpString2="..") returned 1 [0227.052] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x48) returned 0x226328 [0227.052] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235f88 [0227.052] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239160 | out: hHeap=0x1f0000) returned 1 [0227.052] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x15ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="content-types.properties", cAlternateFileName="CONTEN~1.PRO")) returned 1 [0227.052] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2286c8 [0227.053] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235aa8 [0227.053] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0227.053] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235aa8 | out: hHeap=0x1f0000) returned 1 [0227.053] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235a40 | out: hHeap=0x1f0000) returned 1 [0227.053] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2286c8 | out: hHeap=0x1f0000) returned 1 [0227.053] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\content-types.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\content-types.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1bc [0227.054] GetFileType (hFile=0x1bc) returned 0x1 [0227.054] CloseHandle (hObject=0x1bc) returned 1 [0227.055] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0227.055] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\content-types.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\content-types.properties"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x15ac)) returned 1 [0227.055] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0227.055] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0227.055] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\content-types.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\content-types.properties"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x15ac)) returned 1 [0227.056] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0227.056] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0227.056] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0227.056] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0227.056] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0227.056] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x101a, dwReserved0=0x0, dwReserved1=0x0, cFileName="currency.data", cAlternateFileName="CURREN~1.DAT")) returned 1 [0227.056] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0227.056] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235700 [0227.056] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2215d8 [0227.057] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0227.057] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0227.057] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0227.058] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\currency.data" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\currency.data"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1bc [0227.058] GetFileType (hFile=0x1bc) returned 0x1 [0227.058] CloseHandle (hObject=0x1bc) returned 1 [0227.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0227.059] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\currency.data" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\currency.data"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x101a)) returned 1 [0227.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0227.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fb30 [0227.059] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\currency.data" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\currency.data"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x101a)) returned 1 [0227.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fb30 | out: hHeap=0x1f0000) returned 1 [0227.060] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fef0 [0227.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fef0 | out: hHeap=0x1f0000) returned 1 [0227.060] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa10e432c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="deploy", cAlternateFileName="")) returned 1 [0227.060] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236260 [0227.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0227.060] lstrcmpW (lpString1="deploy", lpString2=".") returned 1 [0227.060] lstrcmpW (lpString1="deploy", lpString2="..") returned 1 [0227.061] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235ff0 [0227.061] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235a40 [0227.061] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226328 | out: hHeap=0x1f0000) returned 1 [0227.061] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ed9405, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8ed9405, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa900a6f7, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4ce7de, dwReserved0=0x0, dwReserved1=0x0, cFileName="deploy.jar", cAlternateFileName="")) returned 1 [0227.061] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238488 [0227.061] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235700 [0227.061] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220fe8 [0227.061] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0227.061] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236260 | out: hHeap=0x1f0000) returned 1 [0227.062] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238488 | out: hHeap=0x1f0000) returned 1 [0227.062] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0227.364] GetFileType (hFile=0x1f4) returned 0x1 [0227.365] CloseHandle (hObject=0x1f4) returned 1 [0227.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0227.365] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy.jar"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ed9405, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8ed9405, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa900a6f7, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4ce7de)) returned 1 [0227.366] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0227.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220328 [0227.366] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy.jar"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ed9405, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8ed9405, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa900a6f7, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4ce7de)) returned 1 [0227.366] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220328 | out: hHeap=0x1f0000) returned 1 [0227.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f770 [0227.366] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f770 | out: hHeap=0x1f0000) returned 1 [0227.377] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa11bdb26, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xaa8ed01b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ext", cAlternateFileName="")) returned 1 [0227.377] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2360c0 [0227.378] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0227.378] lstrcmpW (lpString1="ext", lpString2=".") returned 1 [0227.378] lstrcmpW (lpString1="ext", lpString2="..") returned 1 [0227.378] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0227.378] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236128 [0227.378] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235ff0 | out: hHeap=0x1f0000) returned 1 [0227.378] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf58, dwReserved0=0x0, dwReserved1=0x0, cFileName="flavormap.properties", cAlternateFileName="FLAVOR~1.PRO")) returned 1 [0227.378] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238d00 [0227.378] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2357d0 [0227.379] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220e20 [0227.379] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2357d0 | out: hHeap=0x1f0000) returned 1 [0227.379] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2360c0 | out: hHeap=0x1f0000) returned 1 [0227.379] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238d00 | out: hHeap=0x1f0000) returned 1 [0227.379] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\flavormap.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0227.383] GetFileType (hFile=0x1f4) returned 0x1 [0227.384] CloseHandle (hObject=0x1f4) returned 1 [0227.384] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e88 [0227.384] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\flavormap.properties"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf58)) returned 1 [0227.385] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e88 | out: hHeap=0x1f0000) returned 1 [0227.385] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0227.385] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\flavormap.properties"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf58)) returned 1 [0227.385] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0227.385] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0227.385] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0227.385] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0227.385] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0227.385] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xeba, dwReserved0=0x0, dwReserved1=0x0, cFileName="fontconfig.bfc", cAlternateFileName="FONTCO~1.BFC")) returned 1 [0227.386] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0227.386] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236330 [0227.386] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221968 [0227.386] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236330 | out: hHeap=0x1f0000) returned 1 [0227.386] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0227.386] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0227.387] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.bfc"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0227.388] GetFileType (hFile=0x1f4) returned 0x1 [0227.388] CloseHandle (hObject=0x1f4) returned 1 [0227.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220238 [0227.389] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.bfc"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xeba)) returned 1 [0227.389] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220238 | out: hHeap=0x1f0000) returned 1 [0227.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2201c0 [0227.389] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.bfc"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xeba)) returned 1 [0227.389] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2201c0 | out: hHeap=0x1f0000) returned 1 [0227.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fc20 [0227.390] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fc20 | out: hHeap=0x1f0000) returned 1 [0227.390] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2948, dwReserved0=0x0, dwReserved1=0x0, cFileName="fontconfig.properties.src", cAlternateFileName="FONTCO~1.SRC")) returned 1 [0227.390] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228518 [0227.390] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236330 [0227.390] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0227.390] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236330 | out: hHeap=0x1f0000) returned 1 [0227.390] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0227.390] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228518 | out: hHeap=0x1f0000) returned 1 [0227.391] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.properties.src"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0227.391] GetFileType (hFile=0x1f4) returned 0x1 [0227.392] CloseHandle (hObject=0x1f4) returned 1 [0227.393] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0227.393] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.properties.src"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2948)) returned 1 [0227.393] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0227.394] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0227.394] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.properties.src"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2948)) returned 1 [0227.394] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0227.394] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0227.394] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0227.394] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa122f229, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fonts", cAlternateFileName="")) returned 1 [0227.394] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235b78 [0227.394] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0227.394] lstrcmpW (lpString1="fonts", lpString2=".") returned 1 [0227.394] lstrcmpW (lpString1="fonts", lpString2="..") returned 1 [0227.394] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235c48 [0227.395] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x368a, dwReserved0=0x0, dwReserved1=0x0, cFileName="hijrah-config-umalqura.properties", cAlternateFileName="HIJRAH~1.PRO")) returned 1 [0227.395] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a88f8 [0227.395] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235ff0 [0227.395] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a188 [0227.395] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235ff0 | out: hHeap=0x1f0000) returned 1 [0227.395] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0227.395] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a88f8 | out: hHeap=0x1f0000) returned 1 [0227.396] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0227.397] GetFileType (hFile=0x1f4) returned 0x1 [0227.397] CloseHandle (hObject=0x1f4) returned 1 [0227.398] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a8c0 [0227.398] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x368a)) returned 1 [0227.398] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a8c0 | out: hHeap=0x1f0000) returned 1 [0227.398] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219e40 [0227.398] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x368a)) returned 1 [0227.398] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219e40 | out: hHeap=0x1f0000) returned 1 [0227.398] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a818 [0227.398] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0227.399] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a818 | out: hHeap=0x1f0000) returned 1 [0227.399] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0227.399] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa12313ee, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0227.399] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235ff0 [0227.399] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a188 | out: hHeap=0x1f0000) returned 1 [0227.399] lstrcmpW (lpString1="images", lpString2=".") returned 1 [0227.399] lstrcmpW (lpString1="images", lpString2="..") returned 1 [0227.399] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd8) returned 0x217038 [0227.399] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2360c0 [0227.399] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0227.399] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x38, dwReserved0=0x0, dwReserved1=0x0, cFileName="javafx.properties", cAlternateFileName="JAVAFX~1.PRO")) returned 1 [0227.399] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c20 [0227.399] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235700 [0227.400] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2211b0 [0227.400] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0227.400] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235ff0 | out: hHeap=0x1f0000) returned 1 [0227.400] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c20 | out: hHeap=0x1f0000) returned 1 [0227.400] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\javafx.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javafx.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0227.401] GetFileType (hFile=0x1f4) returned 0x1 [0227.402] CloseHandle (hObject=0x1f4) returned 1 [0227.402] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0227.402] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\javafx.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javafx.properties"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x38)) returned 1 [0227.403] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0227.403] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213818 [0227.403] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\javafx.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javafx.properties"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x38)) returned 1 [0227.403] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213818 | out: hHeap=0x1f0000) returned 1 [0227.403] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0227.403] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0227.403] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0227.403] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0227.403] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8e40a9d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8e40a9d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8e66d0e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xe6827, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaws.jar", cAlternateFileName="")) returned 1 [0227.404] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0227.404] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235ff0 [0227.404] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221b30 [0227.404] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235ff0 | out: hHeap=0x1f0000) returned 1 [0227.404] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0227.404] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0227.404] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javaws.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0227.405] GetFileType (hFile=0x1f4) returned 0x1 [0227.406] CloseHandle (hObject=0x1f4) returned 1 [0227.406] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21ffe0 [0227.406] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javaws.jar"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8e40a9d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8e40a9d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8e66d0e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xe6827)) returned 1 [0227.406] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ffe0 | out: hHeap=0x1f0000) returned 1 [0227.406] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21ffe0 [0227.406] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javaws.jar"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8e40a9d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8e40a9d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8e66d0e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xe6827)) returned 1 [0227.407] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ffe0 | out: hHeap=0x1f0000) returned 1 [0227.407] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe00 [0227.407] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe00 | out: hHeap=0x1f0000) returned 1 [0227.407] GetLastError () returned 0x0 [0227.407] CryptAcquireContextA (in: phProv=0x1fde1b8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1fde1b8*=0x213790) returned 1 [0227.409] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2381b8 | out: pbBuffer=0x2381b8) returned 1 [0227.409] CryptReleaseContext (hProv=0x213790, dwFlags=0x0) returned 1 [0227.409] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0227.409] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x255c88 [0227.409] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x236d20 [0227.409] QueryPerformanceCounter (in: lpPerformanceCount=0x1fde14c | out: lpPerformanceCount=0x1fde14c*=38477793798) returned 1 [0227.409] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1fde18c | out: lpSystemTimeAsFileTime=0x1fde18c) [0227.409] QueryPerformanceCounter (in: lpPerformanceCount=0x1fde14c | out: lpPerformanceCount=0x1fde14c*=38477824883) returned 1 [0227.409] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1fde18c | out: lpSystemTimeAsFileTime=0x1fde18c) [0227.410] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238d00 [0227.410] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x2595a0 [0227.410] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x237298 [0227.410] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x2333c8 [0227.410] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffa0 [0227.410] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2068c8 [0227.410] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffd0 [0227.410] GetLastError () returned 0x0 [0227.410] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javaws.jar.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde058, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0227.411] GetFileType (hFile=0x1f4) returned 0x1 [0227.412] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ac0 [0227.412] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b90 [0227.412] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javaws.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde088, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0227.413] GetFileType (hFile=0x174) returned 0x1 [0227.413] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cb0 [0227.413] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c30 [0227.413] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad1e8 [0227.413] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b30 [0227.414] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b60 [0227.414] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javaws.jar.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1fddfd4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0227.414] GetFileType (hFile=0x1c0) returned 0x1 [0227.415] GetLastError () returned 0xb7 [0227.415] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javaws.jar.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1fddfd4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0227.415] GetFileType (hFile=0x230) returned 0x1 [0227.416] GetLastError () returned 0xb7 [0227.416] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javaws.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x1fddfcc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0227.416] GetFileType (hFile=0x1d8) returned 0x1 [0227.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28bfc0 [0227.417] ReadFile (in: hFile=0x1d8, lpBuffer=0x28bfc0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fddf28, lpOverlapped=0x0 | out: lpBuffer=0x28bfc0*, lpNumberOfBytesRead=0x1fddf28*=0x1000, lpOverlapped=0x0) returned 1 [0227.694] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24bdf0 [0227.694] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28efd8 [0227.694] GetLastError () returned 0x0 [0228.418] CloseHandle (hObject=0x1f4) returned 1 [0228.842] CloseHandle (hObject=0x174) returned 1 [0228.842] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b20 [0228.843] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389f0 [0228.843] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javaws.jar"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde088, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0228.856] GetFileType (hFile=0x174) returned 0x1 [0228.857] GetLastError () returned 0xb7 [0228.858] CloseHandle (hObject=0x174) returned 1 [0228.858] DeleteFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javaws.jar")) returned 0 [0228.858] GetLastError () returned 0x20 [0228.858] GetLastError () returned 0x20 [0228.859] CryptAcquireContextA (in: phProv=0x1fde1b8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1fde1b8*=0x212e88) returned 1 [0228.859] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238410 | out: pbBuffer=0x238410) returned 1 [0228.859] CryptReleaseContext (hProv=0x212e88, dwFlags=0x0) returned 1 [0228.859] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0228.860] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2382f8 [0228.860] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238078 [0228.860] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239010 [0228.860] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0228.860] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0228.860] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239010 | out: hHeap=0x1f0000) returned 1 [0228.860] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8690 [0228.860] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210210 [0228.860] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x235ff0 [0228.860] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2382f8 [0228.860] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285e00 [0228.860] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204b90 [0228.860] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2359d8 [0228.860] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238320 [0228.860] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2856c8 [0228.860] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238aa0 [0228.860] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0228.860] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210258 [0228.860] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389e0 [0228.860] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238690 [0228.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210198 [0228.861] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0228.861] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238690 | out: hHeap=0x1f0000) returned 1 [0228.861] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389e0 | out: hHeap=0x1f0000) returned 1 [0228.861] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0228.861] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0228.861] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238aa0 | out: hHeap=0x1f0000) returned 1 [0228.861] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2856c8 | out: hHeap=0x1f0000) returned 1 [0228.861] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0228.861] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2359d8 | out: hHeap=0x1f0000) returned 1 [0228.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239160 [0228.861] GetLastError () returned 0x0 [0228.861] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1fddd48 | out: lpSystemTimeAsFileTime=0x1fddd48) [0228.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238a80 [0228.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0228.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f50 [0228.862] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f50 | out: hHeap=0x1f0000) returned 1 [0228.862] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0228.862] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0228.862] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e90 [0228.862] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e90 | out: hHeap=0x1f0000) returned 1 [0228.862] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0228.862] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a80 | out: hHeap=0x1f0000) returned 1 [0228.862] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0228.862] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238e18 [0228.862] GetLastError () returned 0x0 [0228.862] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javaws.jar.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde0b8, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0228.862] GetFileType (hFile=0x174) returned 0x1 [0228.863] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28ffe0 [0228.863] SetFilePointerEx (in: hFile=0x174, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1fde040 | out: lpNewFilePointer=0x0) returned 1 [0228.863] GetLastError () returned 0xb7 [0228.863] CloseHandle (hObject=0x174) returned 1 [0228.863] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a60 | out: hHeap=0x1f0000) returned 1 [0228.863] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389e0 | out: hHeap=0x1f0000) returned 1 [0228.863] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2852a8 | out: hHeap=0x1f0000) returned 1 [0228.863] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285e00 | out: hHeap=0x1f0000) returned 1 [0228.863] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0228.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204b90 | out: hHeap=0x1f0000) returned 1 [0228.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235ff0 | out: hHeap=0x1f0000) returned 1 [0228.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0228.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8690 | out: hHeap=0x1f0000) returned 1 [0228.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2376f8 | out: hHeap=0x1f0000) returned 1 [0228.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0228.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0228.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x251068 | out: hHeap=0x1f0000) returned 1 [0228.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237b58 | out: hHeap=0x1f0000) returned 1 [0228.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2390b8 | out: hHeap=0x1f0000) returned 1 [0228.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a10 | out: hHeap=0x1f0000) returned 1 [0228.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210018 | out: hHeap=0x1f0000) returned 1 [0228.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0228.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a70 | out: hHeap=0x1f0000) returned 1 [0228.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffb8 | out: hHeap=0x1f0000) returned 1 [0228.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0228.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ba0 | out: hHeap=0x1f0000) returned 1 [0228.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285cf8 | out: hHeap=0x1f0000) returned 1 [0228.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0228.865] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0228.865] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2285f0 | out: hHeap=0x1f0000) returned 1 [0228.865] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0228.865] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0228.865] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228950 | out: hHeap=0x1f0000) returned 1 [0228.865] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389f0 | out: hHeap=0x1f0000) returned 1 [0228.865] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b20 | out: hHeap=0x1f0000) returned 1 [0228.865] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28bfc0 | out: hHeap=0x1f0000) returned 1 [0228.865] CloseHandle (hObject=0x1d8) returned 1 [0228.865] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b00 | out: hHeap=0x1f0000) returned 1 [0228.865] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b70 | out: hHeap=0x1f0000) returned 1 [0228.865] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2241e0 | out: hHeap=0x1f0000) returned 1 [0228.865] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24bdf0 | out: hHeap=0x1f0000) returned 1 [0228.865] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210078 | out: hHeap=0x1f0000) returned 1 [0228.865] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d70 | out: hHeap=0x1f0000) returned 1 [0228.865] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28efd8 | out: hHeap=0x1f0000) returned 1 [0228.866] CloseHandle (hObject=0x230) returned 1 [0228.866] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a00 | out: hHeap=0x1f0000) returned 1 [0228.866] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238af0 | out: hHeap=0x1f0000) returned 1 [0228.866] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad078 | out: hHeap=0x1f0000) returned 1 [0228.866] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c70 | out: hHeap=0x1f0000) returned 1 [0228.866] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d368 | out: hHeap=0x1f0000) returned 1 [0228.867] CloseHandle (hObject=0x1c0) returned 1 [0228.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b60 | out: hHeap=0x1f0000) returned 1 [0228.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b30 | out: hHeap=0x1f0000) returned 1 [0228.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad1e8 | out: hHeap=0x1f0000) returned 1 [0228.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b90 | out: hHeap=0x1f0000) returned 1 [0228.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ac0 | out: hHeap=0x1f0000) returned 1 [0228.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ae0 | out: hHeap=0x1f0000) returned 1 [0228.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a40 | out: hHeap=0x1f0000) returned 1 [0228.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0228.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2595a0 | out: hHeap=0x1f0000) returned 1 [0228.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237298 | out: hHeap=0x1f0000) returned 1 [0228.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2068c8 | out: hHeap=0x1f0000) returned 1 [0228.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffd0 | out: hHeap=0x1f0000) returned 1 [0228.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffa0 | out: hHeap=0x1f0000) returned 1 [0228.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2333c8 | out: hHeap=0x1f0000) returned 1 [0228.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x255c88 | out: hHeap=0x1f0000) returned 1 [0228.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236d20 | out: hHeap=0x1f0000) returned 1 [0228.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238da8 | out: hHeap=0x1f0000) returned 1 [0228.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0228.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f1b8 | out: hHeap=0x1f0000) returned 1 [0228.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228878 | out: hHeap=0x1f0000) returned 1 [0228.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0228.868] DeleteFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javaws.jar")) returned 1 [0228.869] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1c6de, dwReserved0=0x0, dwReserved1=0x0, cFileName="jce.jar", cAlternateFileName="")) returned 1 [0228.869] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235700 [0228.869] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0228.870] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jce.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0228.870] GetFileType (hFile=0x1c0) returned 0x1 [0228.870] CloseHandle (hObject=0x1c0) returned 1 [0228.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2357d0 [0228.871] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jce.jar"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1c6de)) returned 1 [0228.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2357d0 | out: hHeap=0x1f0000) returned 1 [0228.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2359d8 [0228.871] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jce.jar"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1c6de)) returned 1 [0228.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2359d8 | out: hHeap=0x1f0000) returned 1 [0228.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235ff0 [0228.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235ff0 | out: hHeap=0x1f0000) returned 1 [0228.871] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1295634, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfr", cAlternateFileName="")) returned 1 [0228.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2359d8 [0228.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0228.871] lstrcmpW (lpString1="jfr", lpString2=".") returned 1 [0228.871] lstrcmpW (lpString1="jfr", lpString2="..") returned 1 [0228.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235ff0 [0228.872] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x88dc5, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfr.jar", cAlternateFileName="")) returned 1 [0228.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236058 [0228.872] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2359d8 | out: hHeap=0x1f0000) returned 1 [0228.872] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0228.873] GetFileType (hFile=0x1c0) returned 0x1 [0228.873] CloseHandle (hObject=0x1c0) returned 1 [0228.874] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236190 [0228.874] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr.jar"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x88dc5)) returned 1 [0228.874] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236190 | out: hHeap=0x1f0000) returned 1 [0228.874] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235700 [0228.874] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr.jar"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x88dc5)) returned 1 [0228.874] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0228.874] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236190 [0228.874] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236190 | out: hHeap=0x1f0000) returned 1 [0228.874] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x848c, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfxswt.jar", cAlternateFileName="")) returned 1 [0228.874] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0228.874] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236190 [0228.874] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221540 [0228.874] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236190 | out: hHeap=0x1f0000) returned 1 [0228.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236058 | out: hHeap=0x1f0000) returned 1 [0228.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0228.875] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfxswt.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0228.876] GetFileType (hFile=0x1c0) returned 0x1 [0228.876] CloseHandle (hObject=0x1c0) returned 1 [0228.876] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220328 [0228.876] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfxswt.jar"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x848c)) returned 1 [0228.876] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220328 | out: hHeap=0x1f0000) returned 1 [0228.876] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21ff68 [0228.876] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfxswt.jar"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x848c)) returned 1 [0228.876] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ff68 | out: hHeap=0x1f0000) returned 1 [0228.877] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fa40 [0228.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fa40 | out: hHeap=0x1f0000) returned 1 [0228.877] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa76f896, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xaa76f896, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xaa76f896, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8eb80, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsse.jar", cAlternateFileName="")) returned 1 [0228.877] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0228.877] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236058 [0228.877] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221a98 [0228.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236058 | out: hHeap=0x1f0000) returned 1 [0228.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0228.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0228.877] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jsse.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0228.878] GetFileType (hFile=0x1c0) returned 0x1 [0228.878] CloseHandle (hObject=0x1c0) returned 1 [0228.878] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220238 [0228.878] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jsse.jar"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa76f896, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xaa76f896, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xaa76f896, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8eb80)) returned 1 [0228.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220238 | out: hHeap=0x1f0000) returned 1 [0228.878] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0228.878] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jsse.jar"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa76f896, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xaa76f896, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xaa76f896, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8eb80)) returned 1 [0228.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0228.879] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21ff68 [0228.879] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ff68 | out: hHeap=0x1f0000) returned 1 [0228.879] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1082, dwReserved0=0x0, dwReserved1=0x0, cFileName="jvm.hprof.txt", cAlternateFileName="JVMHPR~1.TXT")) returned 1 [0228.879] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0228.879] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236058 [0228.879] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221540 [0228.879] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236058 | out: hHeap=0x1f0000) returned 1 [0228.879] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0228.879] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0228.879] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jvm.hprof.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0228.879] GetFileType (hFile=0x1c0) returned 0x1 [0228.880] CloseHandle (hObject=0x1c0) returned 1 [0229.444] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd88 [0229.444] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jvm.hprof.txt"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1082)) returned 1 [0229.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd88 | out: hHeap=0x1f0000) returned 1 [0229.444] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21ffe0 [0229.445] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jvm.hprof.txt"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1082)) returned 1 [0229.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ffe0 | out: hHeap=0x1f0000) returned 1 [0229.445] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0229.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0229.445] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x997, dwReserved0=0x0, dwReserved1=0x0, cFileName="logging.properties", cAlternateFileName="LOGGIN~1.PRO")) returned 1 [0229.445] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238e50 [0229.445] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2357d0 [0229.445] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221410 [0229.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2357d0 | out: hHeap=0x1f0000) returned 1 [0229.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0229.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238e50 | out: hHeap=0x1f0000) returned 1 [0229.446] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\logging.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\logging.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0229.447] GetFileType (hFile=0x1d8) returned 0x1 [0229.447] CloseHandle (hObject=0x1d8) returned 1 [0229.448] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f10 [0229.448] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\logging.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\logging.properties"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x997)) returned 1 [0229.448] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f10 | out: hHeap=0x1f0000) returned 1 [0229.448] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0229.448] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\logging.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\logging.properties"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x997)) returned 1 [0229.448] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0229.449] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2132c8 [0229.449] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0229.449] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2132c8 | out: hHeap=0x1f0000) returned 1 [0229.449] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0229.449] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1389711, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="management", cAlternateFileName="MANAGE~1")) returned 1 [0229.449] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0229.449] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236330 [0229.449] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2217a0 [0229.449] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236330 | out: hHeap=0x1f0000) returned 1 [0229.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0229.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0229.450] lstrcmpW (lpString1="management", lpString2=".") returned 1 [0229.450] lstrcmpW (lpString1="management", lpString2="..") returned 1 [0229.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0229.450] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x17d, dwReserved0=0x0, dwReserved1=0x0, cFileName="management-agent.jar", cAlternateFileName="MANAGE~1.JAR")) returned 1 [0229.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c20 [0229.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236330 [0229.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220fe8 [0229.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236330 | out: hHeap=0x1f0000) returned 1 [0229.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0229.451] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c20 | out: hHeap=0x1f0000) returned 1 [0229.451] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\management-agent.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management-agent.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0229.452] GetFileType (hFile=0x1d8) returned 0x1 [0229.453] CloseHandle (hObject=0x1d8) returned 1 [0229.453] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0229.453] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\management-agent.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management-agent.jar"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x17d)) returned 1 [0229.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0229.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0229.454] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\management-agent.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management-agent.jar"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x17d)) returned 1 [0229.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0229.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f10 [0229.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f10 | out: hHeap=0x1f0000) returned 1 [0229.454] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x84e, dwReserved0=0x0, dwReserved1=0x0, cFileName="meta-index", cAlternateFileName="META-I~1")) returned 1 [0229.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0229.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236330 [0229.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2211b0 [0229.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236330 | out: hHeap=0x1f0000) returned 1 [0229.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0229.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0229.455] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\meta-index" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\meta-index"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0229.456] GetFileType (hFile=0x1d8) returned 0x1 [0229.456] CloseHandle (hObject=0x1d8) returned 1 [0229.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0229.457] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\meta-index" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\meta-index"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x84e)) returned 1 [0229.457] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0229.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0229.457] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\meta-index" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\meta-index"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x84e)) returned 1 [0229.457] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0229.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21ffe0 [0229.457] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ffe0 | out: hHeap=0x1f0000) returned 1 [0229.457] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1170, dwReserved0=0x0, dwReserved1=0x0, cFileName="net.properties", cAlternateFileName="NET~1.PRO")) returned 1 [0229.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0229.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236330 [0229.458] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220cf0 [0229.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236330 | out: hHeap=0x1f0000) returned 1 [0229.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0229.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0229.459] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\net.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\net.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0229.459] GetFileType (hFile=0x1d8) returned 0x1 [0229.460] CloseHandle (hObject=0x1d8) returned 1 [0229.460] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0229.460] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\net.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\net.properties"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1170)) returned 1 [0229.460] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0229.460] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0229.460] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\net.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\net.properties"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1170)) returned 1 [0229.461] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0229.461] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220058 [0229.461] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0229.461] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220058 | out: hHeap=0x1f0000) returned 1 [0229.461] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0229.461] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8d81efe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8d81efe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8df45fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1d588b, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin.jar", cAlternateFileName="")) returned 1 [0229.461] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0229.461] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236330 [0229.461] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2218d0 [0229.462] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236330 | out: hHeap=0x1f0000) returned 1 [0229.462] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0229.462] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0229.462] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\plugin.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\plugin.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0229.463] GetFileType (hFile=0x1d8) returned 0x1 [0229.463] CloseHandle (hObject=0x1d8) returned 1 [0229.464] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2201c0 [0229.464] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\plugin.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\plugin.jar"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8d81efe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8d81efe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8df45fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1d588b)) returned 1 [0229.464] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2201c0 | out: hHeap=0x1f0000) returned 1 [0229.464] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fc98 [0229.464] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\plugin.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\plugin.jar"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8d81efe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8d81efe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8df45fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1d588b)) returned 1 [0229.464] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fc98 | out: hHeap=0x1f0000) returned 1 [0229.464] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21ffe0 [0229.464] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ffe0 | out: hHeap=0x1f0000) returned 1 [0229.464] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xaec, dwReserved0=0x0, dwReserved1=0x0, cFileName="psfont.properties.ja", cAlternateFileName="PSFONT~1.JA")) returned 1 [0229.465] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238f68 [0229.465] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236330 [0229.465] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220eb8 [0229.465] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236330 | out: hHeap=0x1f0000) returned 1 [0229.465] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0229.465] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238f68 | out: hHeap=0x1f0000) returned 1 [0229.466] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\psfont.properties.ja" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfont.properties.ja"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0229.467] GetFileType (hFile=0x1d8) returned 0x1 [0229.467] CloseHandle (hObject=0x1d8) returned 1 [0229.468] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212be0 [0229.468] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\psfont.properties.ja" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfont.properties.ja"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xaec)) returned 1 [0229.468] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212be0 | out: hHeap=0x1f0000) returned 1 [0229.468] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0229.468] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\psfont.properties.ja" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfont.properties.ja"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xaec)) returned 1 [0229.468] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0229.469] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213680 [0229.469] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213680 | out: hHeap=0x1f0000) returned 1 [0229.469] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2899, dwReserved0=0x0, dwReserved1=0x0, cFileName="psfontj2d.properties", cAlternateFileName="PSFONT~1.PRO")) returned 1 [0229.469] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2392b0 [0229.469] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236330 [0229.469] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221248 [0229.469] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236330 | out: hHeap=0x1f0000) returned 1 [0229.469] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0229.469] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2392b0 | out: hHeap=0x1f0000) returned 1 [0229.470] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\psfontj2d.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfontj2d.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0229.470] GetFileType (hFile=0x1d8) returned 0x1 [0229.471] CloseHandle (hObject=0x1d8) returned 1 [0229.471] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0229.471] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\psfontj2d.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfontj2d.properties"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2899)) returned 1 [0229.472] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0229.472] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f10 [0229.472] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\psfontj2d.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfontj2d.properties"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2899)) returned 1 [0229.472] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f10 | out: hHeap=0x1f0000) returned 1 [0229.472] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0229.472] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0229.472] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0229.473] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0229.473] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x354add, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.jar", cAlternateFileName="RESOUR~1.JAR")) returned 1 [0229.473] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0229.473] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2357d0 [0229.473] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220eb8 [0229.473] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2357d0 | out: hHeap=0x1f0000) returned 1 [0229.473] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0229.473] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0229.475] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\resources.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\resources.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0229.475] GetFileType (hFile=0x1d8) returned 0x1 [0229.476] CloseHandle (hObject=0x1d8) returned 1 [0229.476] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fa40 [0229.476] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\resources.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\resources.jar"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x354add)) returned 1 [0229.476] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fa40 | out: hHeap=0x1f0000) returned 1 [0229.476] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220328 [0229.476] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\resources.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\resources.jar"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x354add)) returned 1 [0229.477] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220328 | out: hHeap=0x1f0000) returned 1 [0229.477] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220328 [0229.477] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220328 | out: hHeap=0x1f0000) returned 1 [0229.477] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa90a30aa, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa90a30aa, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xaa7233eb, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x340865b, dwReserved0=0x0, dwReserved1=0x0, cFileName="rt.jar", cAlternateFileName="")) returned 1 [0229.477] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236330 [0229.477] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0229.478] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\rt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\rt.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0229.479] GetFileType (hFile=0x1d8) returned 0x1 [0229.479] CloseHandle (hObject=0x1d8) returned 1 [0229.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2357d0 [0229.480] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\rt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\rt.jar"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa90a30aa, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa90a30aa, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xaa7233eb, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x340865b)) returned 1 [0229.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2357d0 | out: hHeap=0x1f0000) returned 1 [0229.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2357d0 [0229.480] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\rt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\rt.jar"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa90a30aa, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa90a30aa, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xaa7233eb, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x340865b)) returned 1 [0229.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2357d0 | out: hHeap=0x1f0000) returned 1 [0229.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2357d0 [0229.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2357d0 | out: hHeap=0x1f0000) returned 1 [0229.481] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1418338, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="security", cAlternateFileName="")) returned 1 [0229.481] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0229.481] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2357d0 [0229.481] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221378 [0229.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2357d0 | out: hHeap=0x1f0000) returned 1 [0229.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236330 | out: hHeap=0x1f0000) returned 1 [0229.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0229.481] lstrcmpW (lpString1="security", lpString2=".") returned 1 [0229.482] lstrcmpW (lpString1="security", lpString2="..") returned 1 [0229.482] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x138) returned 0x239be0 [0229.482] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fc20 [0229.482] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0229.482] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="sound.properties", cAlternateFileName="SOUND~1.PRO")) returned 1 [0229.482] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2390b8 [0229.482] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2359d8 [0229.482] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221540 [0229.482] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2359d8 | out: hHeap=0x1f0000) returned 1 [0229.482] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0229.482] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2390b8 | out: hHeap=0x1f0000) returned 1 [0229.483] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\sound.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\sound.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0229.751] GetFileType (hFile=0x224) returned 0x1 [0229.751] CloseHandle (hObject=0x224) returned 1 [0229.752] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213680 [0229.752] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\sound.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\sound.properties"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4ba)) returned 1 [0229.752] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213680 | out: hHeap=0x1f0000) returned 1 [0229.752] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2133d8 [0229.752] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\sound.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\sound.properties"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4ba)) returned 1 [0229.752] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2133d8 | out: hHeap=0x1f0000) returned 1 [0229.752] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213818 [0229.753] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0229.753] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213818 | out: hHeap=0x1f0000) returned 1 [0229.753] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0229.753] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x19c1c, dwReserved0=0x0, dwReserved1=0x0, cFileName="tzdb.dat", cAlternateFileName="")) returned 1 [0229.753] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0229.753] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236260 [0229.753] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220eb8 [0229.753] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236260 | out: hHeap=0x1f0000) returned 1 [0229.753] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0229.753] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0229.754] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\tzdb.dat" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzdb.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0229.754] GetFileType (hFile=0x224) returned 0x1 [0229.754] CloseHandle (hObject=0x224) returned 1 [0229.755] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21ffe0 [0229.755] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\tzdb.dat" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzdb.dat"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x19c1c)) returned 1 [0229.755] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ffe0 | out: hHeap=0x1f0000) returned 1 [0229.755] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0229.756] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\tzdb.dat" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzdb.dat"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x19c1c)) returned 1 [0229.756] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0229.756] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe00 [0229.756] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe00 | out: hHeap=0x1f0000) returned 1 [0229.756] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x20d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tzmappings", cAlternateFileName="TZMAPP~1")) returned 1 [0229.756] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0229.756] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236260 [0229.756] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221838 [0229.756] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236260 | out: hHeap=0x1f0000) returned 1 [0229.756] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0229.756] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0229.757] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\tzmappings" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzmappings"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0229.757] GetFileType (hFile=0x224) returned 0x1 [0229.757] CloseHandle (hObject=0x224) returned 1 [0229.758] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fab8 [0229.758] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\tzmappings" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzmappings"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x20d0)) returned 1 [0229.758] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fab8 | out: hHeap=0x1f0000) returned 1 [0229.758] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fb30 [0229.758] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\tzmappings" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzmappings"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x20d0)) returned 1 [0229.758] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fb30 | out: hHeap=0x1f0000) returned 1 [0229.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fa40 [0229.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fa40 | out: hHeap=0x1f0000) returned 1 [0229.759] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x20d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tzmappings", cAlternateFileName="TZMAPP~1")) returned 0 [0229.759] FindClose (in: hFindFile=0x24e780 | out: hFindFile=0x24e780) returned 1 [0229.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228cf8 [0229.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0229.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f1b8 [0229.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236260 [0229.760] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\*", lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe451d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ed00 [0229.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236330 [0229.760] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236260 | out: hHeap=0x1f0000) returned 1 [0229.760] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0229.760] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe451d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0229.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236260 [0229.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221410 [0229.761] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236260 | out: hHeap=0x1f0000) returned 1 [0229.761] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236330 | out: hHeap=0x1f0000) returned 1 [0229.761] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0229.761] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0229.761] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x27a, dwReserved0=0x0, dwReserved1=0x0, cFileName="jvm.cfg", cAlternateFileName="")) returned 1 [0229.761] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236260 [0229.761] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220eb8 [0229.761] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236260 | out: hHeap=0x1f0000) returned 1 [0229.761] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0229.762] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0229.762] GetFileType (hFile=0x224) returned 0x1 [0229.763] CloseHandle (hObject=0x224) returned 1 [0229.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0229.763] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x27a)) returned 1 [0229.763] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0229.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fc98 [0229.763] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x27a)) returned 1 [0229.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fc98 | out: hHeap=0x1f0000) returned 1 [0229.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0229.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0229.764] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x27a, dwReserved0=0x0, dwReserved1=0x0, cFileName="jvm.cfg", cAlternateFileName="")) returned 0 [0229.764] FindClose (in: hFindFile=0x24ed00 | out: hFindFile=0x24ed00) returned 1 [0229.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0229.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f1b8 | out: hHeap=0x1f0000) returned 1 [0229.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0229.765] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228cf8 | out: hHeap=0x1f0000) returned 1 [0229.765] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228a28 [0229.765] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0229.765] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f1b8 [0229.765] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220058 [0229.765] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\applet\\*", lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105ca28, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e780 [0229.765] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236260 [0229.765] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220c58 [0229.766] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236260 | out: hHeap=0x1f0000) returned 1 [0229.766] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220058 | out: hHeap=0x1f0000) returned 1 [0229.766] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0229.766] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105ca28, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0229.766] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236260 [0229.766] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221410 [0229.766] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236260 | out: hHeap=0x1f0000) returned 1 [0229.766] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0229.766] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0229.766] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0229.766] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105ca28, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0229.766] FindClose (in: hFindFile=0x24e780 | out: hFindFile=0x24e780) returned 1 [0229.767] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0229.767] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f1b8 | out: hHeap=0x1f0000) returned 1 [0229.767] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0229.767] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228a28 | out: hHeap=0x1f0000) returned 1 [0229.767] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228830 [0229.767] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0229.767] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f1b8 [0229.767] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236330 [0229.767] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\*", lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105e2a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e9c0 [0229.768] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236260 [0229.768] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236330 | out: hHeap=0x1f0000) returned 1 [0229.768] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0229.768] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105e2a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0229.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236330 [0229.769] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236260 | out: hHeap=0x1f0000) returned 1 [0229.769] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0229.769] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0229.769] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc824, dwReserved0=0x0, dwReserved1=0x0, cFileName="CIEXYZ.pf", cAlternateFileName="")) returned 1 [0229.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0229.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236260 [0229.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2211b0 [0229.769] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236260 | out: hHeap=0x1f0000) returned 1 [0229.769] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236330 | out: hHeap=0x1f0000) returned 1 [0229.769] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0229.770] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\CIEXYZ.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\ciexyz.pf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0229.770] GetFileType (hFile=0x224) returned 0x1 [0229.770] CloseHandle (hObject=0x224) returned 1 [0229.770] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fef0 [0229.770] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\CIEXYZ.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\ciexyz.pf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc824)) returned 1 [0229.771] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fef0 | out: hHeap=0x1f0000) returned 1 [0229.771] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fef0 [0229.771] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\CIEXYZ.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\ciexyz.pf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc824)) returned 1 [0229.771] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fef0 | out: hHeap=0x1f0000) returned 1 [0229.771] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd88 [0229.771] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd88 | out: hHeap=0x1f0000) returned 1 [0229.772] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x278, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRAY.pf", cAlternateFileName="")) returned 1 [0229.772] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236330 [0229.772] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2218d0 [0229.772] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236330 | out: hHeap=0x1f0000) returned 1 [0229.772] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0229.772] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\GRAY.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\gray.pf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0229.772] GetFileType (hFile=0x224) returned 0x1 [0229.773] CloseHandle (hObject=0x224) returned 1 [0229.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220238 [0229.773] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\GRAY.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\gray.pf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x278)) returned 1 [0229.773] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220238 | out: hHeap=0x1f0000) returned 1 [0229.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2201c0 [0229.773] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\GRAY.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\gray.pf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x278)) returned 1 [0229.773] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2201c0 | out: hHeap=0x1f0000) returned 1 [0229.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fc98 [0229.773] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fc98 | out: hHeap=0x1f0000) returned 1 [0229.773] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x0, dwReserved1=0x0, cFileName="LINEAR_RGB.pf", cAlternateFileName="LINEAR~1.PF")) returned 1 [0229.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0229.774] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236330 [0229.774] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220d88 [0229.774] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236330 | out: hHeap=0x1f0000) returned 1 [0229.774] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0229.774] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0229.774] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\LINEAR_RGB.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\linear_rgb.pf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0229.775] GetFileType (hFile=0x224) returned 0x1 [0229.776] CloseHandle (hObject=0x224) returned 1 [0229.776] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2133d8 [0229.776] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\LINEAR_RGB.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\linear_rgb.pf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x414)) returned 1 [0229.776] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2133d8 | out: hHeap=0x1f0000) returned 1 [0229.776] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0229.776] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\LINEAR_RGB.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\linear_rgb.pf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x414)) returned 1 [0229.776] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0229.776] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0229.776] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0229.777] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4302a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PYCC.pf", cAlternateFileName="")) returned 1 [0229.777] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236260 [0229.777] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220eb8 [0229.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236260 | out: hHeap=0x1f0000) returned 1 [0229.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0229.777] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\pycc.pf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0229.777] GetFileType (hFile=0x224) returned 0x1 [0229.778] CloseHandle (hObject=0x224) returned 1 [0229.778] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2201c0 [0229.778] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\pycc.pf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4302a)) returned 1 [0229.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2201c0 | out: hHeap=0x1f0000) returned 1 [0229.778] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220508 [0229.778] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\pycc.pf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4302a)) returned 1 [0229.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220508 | out: hHeap=0x1f0000) returned 1 [0229.778] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0229.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0229.778] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc48, dwReserved0=0x0, dwReserved1=0x0, cFileName="sRGB.pf", cAlternateFileName="")) returned 1 [0229.779] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236260 [0229.779] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220d88 [0229.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236260 | out: hHeap=0x1f0000) returned 1 [0229.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0229.779] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\sRGB.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\srgb.pf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0229.779] GetFileType (hFile=0x224) returned 0x1 [0229.780] CloseHandle (hObject=0x224) returned 1 [0229.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fc98 [0229.780] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\sRGB.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\srgb.pf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc48)) returned 1 [0229.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fc98 | out: hHeap=0x1f0000) returned 1 [0229.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe00 [0229.780] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\sRGB.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\srgb.pf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc48)) returned 1 [0229.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe00 | out: hHeap=0x1f0000) returned 1 [0229.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0229.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0229.780] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc48, dwReserved0=0x0, dwReserved1=0x0, cFileName="sRGB.pf", cAlternateFileName="")) returned 0 [0229.780] FindClose (in: hFindFile=0x24e9c0 | out: hFindFile=0x24e9c0) returned 1 [0229.781] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0229.781] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f1b8 | out: hHeap=0x1f0000) returned 1 [0229.781] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0229.781] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228830 | out: hHeap=0x1f0000) returned 1 [0229.781] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228cf8 [0229.781] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0229.781] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22dd00 [0229.781] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0229.781] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\*", lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa10e432c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e8c0 [0230.256] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236058 [0230.256] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220c58 [0230.256] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236058 | out: hHeap=0x1f0000) returned 1 [0230.256] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0230.256] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0230.256] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa10e432c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0230.256] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236058 [0230.256] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221b30 [0230.257] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236058 | out: hHeap=0x1f0000) returned 1 [0230.257] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0230.257] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0230.257] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0230.257] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x374c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ffjcext.zip", cAlternateFileName="")) returned 1 [0230.257] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0230.257] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236058 [0230.257] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2211b0 [0230.257] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236058 | out: hHeap=0x1f0000) returned 1 [0230.257] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0230.257] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0230.258] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0230.259] GetFileType (hFile=0x1e0) returned 0x1 [0230.260] CloseHandle (hObject=0x1e0) returned 1 [0230.260] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213680 [0230.260] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x374c)) returned 1 [0230.260] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213680 | out: hHeap=0x1f0000) returned 1 [0230.260] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212a48 [0230.260] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x374c)) returned 1 [0230.261] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212a48 | out: hHeap=0x1f0000) returned 1 [0230.261] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212cf0 [0230.261] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212cf0 | out: hHeap=0x1f0000) returned 1 [0230.261] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xb2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.properties", cAlternateFileName="MESSAG~1.PRO")) returned 1 [0230.261] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238e88 [0230.261] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235b78 [0230.261] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0230.261] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0230.261] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0230.261] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238e88 | out: hHeap=0x1f0000) returned 1 [0230.262] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0230.262] GetFileType (hFile=0x1e0) returned 0x1 [0230.263] CloseHandle (hObject=0x1e0) returned 1 [0230.270] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0230.271] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages.properties"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xb2c)) returned 1 [0230.272] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0230.272] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0230.272] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages.properties"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xb2c)) returned 1 [0230.272] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0230.272] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0230.272] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0230.272] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0230.272] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0230.272] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xcea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_de.properties", cAlternateFileName="MESSAG~2.PRO")) returned 1 [0230.272] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238de0 [0230.272] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235b78 [0230.272] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0230.272] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0230.273] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0230.273] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238de0 | out: hHeap=0x1f0000) returned 1 [0230.273] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0230.273] GetFileType (hFile=0x1e0) returned 0x1 [0230.274] CloseHandle (hObject=0x1e0) returned 1 [0230.274] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0230.274] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xcea)) returned 1 [0230.274] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0230.274] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0230.274] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xcea)) returned 1 [0230.274] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0230.275] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0230.275] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0230.275] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0230.275] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0230.275] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xe10, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_es.properties", cAlternateFileName="MESSAG~3.PRO")) returned 1 [0230.275] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2391d0 [0230.275] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236058 [0230.275] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0230.275] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236058 | out: hHeap=0x1f0000) returned 1 [0230.275] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0230.275] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2391d0 | out: hHeap=0x1f0000) returned 1 [0230.276] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0230.277] GetFileType (hFile=0x1e0) returned 0x1 [0230.277] CloseHandle (hObject=0x1e0) returned 1 [0230.278] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0230.278] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xe10)) returned 1 [0230.278] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0230.278] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0230.278] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xe10)) returned 1 [0230.278] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0230.278] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0230.278] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0230.278] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0230.278] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0230.278] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xd51, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_fr.properties", cAlternateFileName="MESSAG~4.PRO")) returned 1 [0230.279] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238cc8 [0230.279] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236058 [0230.279] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0230.279] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236058 | out: hHeap=0x1f0000) returned 1 [0230.279] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0230.279] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238cc8 | out: hHeap=0x1f0000) returned 1 [0230.279] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0230.280] GetFileType (hFile=0x1e0) returned 0x1 [0230.280] CloseHandle (hObject=0x1e0) returned 1 [0230.280] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0230.280] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xd51)) returned 1 [0230.280] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0230.280] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0230.281] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xd51)) returned 1 [0230.281] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0230.281] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0230.281] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0230.281] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0230.281] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0230.281] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc97, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_it.properties", cAlternateFileName="MEC9EA~1.PRO")) returned 1 [0230.281] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238e50 [0230.281] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235b78 [0230.281] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0230.281] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0230.281] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0230.281] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238e50 | out: hHeap=0x1f0000) returned 1 [0230.282] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0230.282] GetFileType (hFile=0x1e0) returned 0x1 [0230.282] CloseHandle (hObject=0x1e0) returned 1 [0230.283] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0230.283] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc97)) returned 1 [0230.283] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0230.283] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0230.283] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc97)) returned 1 [0230.283] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0230.283] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0230.284] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0230.284] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0230.284] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0230.284] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x18cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_ja.properties", cAlternateFileName="ME4AF1~1.PRO")) returned 1 [0230.284] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c20 [0230.284] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236330 [0230.284] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0230.284] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236330 | out: hHeap=0x1f0000) returned 1 [0230.284] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0230.284] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c20 | out: hHeap=0x1f0000) returned 1 [0230.285] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0230.740] GetFileType (hFile=0x230) returned 0x1 [0230.741] CloseHandle (hObject=0x230) returned 1 [0230.741] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0230.742] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x18cd)) returned 1 [0230.742] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0230.742] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0230.742] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x18cd)) returned 1 [0230.742] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0230.743] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0230.743] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0230.743] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0230.743] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0230.743] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1650, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_ko.properties", cAlternateFileName="ME1706~1.PRO")) returned 1 [0230.743] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238e18 [0230.743] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235b78 [0230.744] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0230.744] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0230.744] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0230.744] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238e18 | out: hHeap=0x1f0000) returned 1 [0230.745] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0230.745] GetFileType (hFile=0x230) returned 0x1 [0230.746] CloseHandle (hObject=0x230) returned 1 [0230.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0230.747] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1650)) returned 1 [0230.747] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0230.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0230.747] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1650)) returned 1 [0230.747] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0230.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0230.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0230.748] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0230.748] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0230.748] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xcd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_pt_BR.properties", cAlternateFileName="MED1E1~1.PRO")) returned 1 [0230.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2284d0 [0230.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236058 [0230.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a380 [0230.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236058 | out: hHeap=0x1f0000) returned 1 [0230.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0230.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2284d0 | out: hHeap=0x1f0000) returned 1 [0230.750] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_pt_BR.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_pt_br.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0230.751] GetFileType (hFile=0x230) returned 0x1 [0230.752] CloseHandle (hObject=0x230) returned 1 [0230.752] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a230 [0230.753] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_pt_BR.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_pt_br.properties"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xcd5)) returned 1 [0230.753] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a230 | out: hHeap=0x1f0000) returned 1 [0230.753] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a578 [0230.753] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_pt_BR.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_pt_br.properties"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xcd5)) returned 1 [0230.753] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a578 | out: hHeap=0x1f0000) returned 1 [0230.753] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219c48 [0230.754] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0230.754] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219c48 | out: hHeap=0x1f0000) returned 1 [0230.754] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0230.754] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xd51, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_sv.properties", cAlternateFileName="ME0541~1.PRO")) returned 1 [0230.754] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239198 [0230.754] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236058 [0230.755] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0230.755] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236058 | out: hHeap=0x1f0000) returned 1 [0230.755] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a380 | out: hHeap=0x1f0000) returned 1 [0230.756] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239198 | out: hHeap=0x1f0000) returned 1 [0230.756] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0230.757] GetFileType (hFile=0x230) returned 0x1 [0230.758] CloseHandle (hObject=0x230) returned 1 [0230.758] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0230.758] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xd51)) returned 1 [0230.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0230.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0230.759] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xd51)) returned 1 [0230.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0230.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0230.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0230.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0230.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0230.760] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xfe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_zh_CN.properties", cAlternateFileName="ME40CD~1.PRO")) returned 1 [0230.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228638 [0230.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235b78 [0230.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219c48 [0230.760] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0230.760] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0230.760] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228638 | out: hHeap=0x1f0000) returned 1 [0230.761] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_CN.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_cn.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0230.762] GetFileType (hFile=0x230) returned 0x1 [0230.762] CloseHandle (hObject=0x230) returned 1 [0230.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a620 [0230.763] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_CN.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_cn.properties"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xfe8)) returned 1 [0230.763] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a620 | out: hHeap=0x1f0000) returned 1 [0230.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219cf0 [0230.763] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_CN.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_cn.properties"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xfe8)) returned 1 [0230.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219cf0 | out: hHeap=0x1f0000) returned 1 [0230.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a380 [0230.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0230.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a380 | out: hHeap=0x1f0000) returned 1 [0230.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0230.764] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_zh_HK.properties", cAlternateFileName="MEB8B5~1.PRO")) returned 1 [0230.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228950 [0230.765] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235b78 [0230.765] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a230 [0230.765] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0230.765] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219c48 | out: hHeap=0x1f0000) returned 1 [0230.765] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228950 | out: hHeap=0x1f0000) returned 1 [0230.766] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_HK.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_hk.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0230.767] GetFileType (hFile=0x230) returned 0x1 [0230.768] CloseHandle (hObject=0x230) returned 1 [0230.768] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a038 [0230.768] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_HK.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_hk.properties"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xea8)) returned 1 [0230.768] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a038 | out: hHeap=0x1f0000) returned 1 [0230.768] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21aa10 [0230.768] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_HK.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_hk.properties"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xea8)) returned 1 [0230.769] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21aa10 | out: hHeap=0x1f0000) returned 1 [0230.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219e40 [0230.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0230.769] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219e40 | out: hHeap=0x1f0000) returned 1 [0230.769] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0230.769] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_zh_TW.properties", cAlternateFileName="MECC18~1.PRO")) returned 1 [0230.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228638 [0230.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235b78 [0230.770] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a818 [0230.770] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0230.770] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a230 | out: hHeap=0x1f0000) returned 1 [0230.770] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228638 | out: hHeap=0x1f0000) returned 1 [0230.771] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_TW.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_tw.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0230.771] GetFileType (hFile=0x230) returned 0x1 [0230.772] CloseHandle (hObject=0x230) returned 1 [0230.772] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a8c0 [0230.773] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_TW.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_tw.properties"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xea8)) returned 1 [0230.773] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a8c0 | out: hHeap=0x1f0000) returned 1 [0230.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219d98 [0230.773] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_TW.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_tw.properties"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xea8)) returned 1 [0230.773] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219d98 | out: hHeap=0x1f0000) returned 1 [0230.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219f90 [0230.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0230.773] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219f90 | out: hHeap=0x1f0000) returned 1 [0230.774] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0230.774] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x218e, dwReserved0=0x0, dwReserved1=0x0, cFileName="splash.gif", cAlternateFileName="")) returned 1 [0230.774] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0230.774] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235b78 [0230.774] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220f50 [0230.774] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0230.774] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a818 | out: hHeap=0x1f0000) returned 1 [0230.775] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0230.775] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0230.776] GetFileType (hFile=0x230) returned 0x1 [0230.776] CloseHandle (hObject=0x230) returned 1 [0230.776] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0230.776] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x218e)) returned 1 [0230.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0230.777] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0230.777] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x218e)) returned 1 [0230.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0230.777] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2132c8 [0230.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2132c8 | out: hHeap=0x1f0000) returned 1 [0230.777] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3bac, dwReserved0=0x0, dwReserved1=0x0, cFileName="splash@2x.gif", cAlternateFileName="SPLASH~1.GIF")) returned 1 [0230.777] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0230.778] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236260 [0230.778] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221410 [0230.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236260 | out: hHeap=0x1f0000) returned 1 [0230.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0230.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0230.778] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0231.499] GetFileType (hFile=0x1e0) returned 0x1 [0231.499] CloseHandle (hObject=0x1e0) returned 1 [0231.500] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0231.500] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3bac)) returned 1 [0231.500] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0231.500] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0231.500] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3bac)) returned 1 [0231.500] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0231.500] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213680 [0231.500] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213680 | out: hHeap=0x1f0000) returned 1 [0231.500] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1e7d, dwReserved0=0x0, dwReserved1=0x0, cFileName="splash_11-lic.gif", cAlternateFileName="SPLASH~2.GIF")) returned 1 [0231.500] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c90 [0231.501] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236058 [0231.501] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0231.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236058 | out: hHeap=0x1f0000) returned 1 [0231.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0231.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c90 | out: hHeap=0x1f0000) returned 1 [0231.502] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0231.503] GetFileType (hFile=0x1e0) returned 0x1 [0231.503] CloseHandle (hObject=0x1e0) returned 1 [0231.504] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0231.504] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1e7d)) returned 1 [0231.504] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0231.504] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0231.504] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1e7d)) returned 1 [0231.505] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0231.505] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0231.505] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0231.505] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2fda, dwReserved0=0x0, dwReserved1=0x0, cFileName="splash_11@2x-lic.gif", cAlternateFileName="SPLASH~3.GIF")) returned 1 [0231.505] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239160 [0231.506] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235b78 [0231.506] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0231.506] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0231.506] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0231.506] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239160 | out: hHeap=0x1f0000) returned 1 [0231.507] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0231.507] GetFileType (hFile=0x1e0) returned 0x1 [0231.507] CloseHandle (hObject=0x1e0) returned 1 [0231.508] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0231.508] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2fda)) returned 1 [0231.508] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0231.508] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0231.508] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2fda)) returned 1 [0231.509] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0231.509] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0231.509] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0231.509] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2fda, dwReserved0=0x0, dwReserved1=0x0, cFileName="splash_11@2x-lic.gif", cAlternateFileName="SPLASH~3.GIF")) returned 0 [0231.509] FindClose (in: hFindFile=0x24e8c0 | out: hFindFile=0x24e8c0) returned 1 [0231.510] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0231.510] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22dd00 | out: hHeap=0x1f0000) returned 1 [0231.510] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0231.510] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228cf8 | out: hHeap=0x1f0000) returned 1 [0231.510] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2286c8 [0231.510] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0231.510] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f1b8 [0231.510] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235b78 [0231.510] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\*", lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa11bdb26, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xaa8ed01b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e780 [0231.514] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236058 [0231.515] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0231.515] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0231.515] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa11bdb26, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xaa8ed01b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0231.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235b78 [0231.515] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236058 | out: hHeap=0x1f0000) returned 1 [0231.515] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0231.515] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0231.516] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2de78, dwReserved0=0x0, dwReserved1=0x0, cFileName="access-bridge-64.jar", cAlternateFileName="ACCESS~1.JAR")) returned 1 [0231.516] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238d70 [0231.516] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236058 [0231.516] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0231.516] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236058 | out: hHeap=0x1f0000) returned 1 [0231.516] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0231.516] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238d70 | out: hHeap=0x1f0000) returned 1 [0231.517] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0231.518] GetFileType (hFile=0x1e0) returned 0x1 [0231.519] CloseHandle (hObject=0x1e0) returned 1 [0231.519] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0231.519] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2de78)) returned 1 [0231.519] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0231.520] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0231.520] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2de78)) returned 1 [0231.520] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0231.520] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0231.520] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0231.520] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8bb82c9, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3ae816, dwReserved0=0x0, dwReserved1=0x0, cFileName="cldrdata.jar", cAlternateFileName="")) returned 1 [0231.520] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0231.520] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236058 [0231.520] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2212e0 [0231.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236058 | out: hHeap=0x1f0000) returned 1 [0231.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0231.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0231.529] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0231.529] GetFileType (hFile=0x1e0) returned 0x1 [0231.529] CloseHandle (hObject=0x1e0) returned 1 [0231.530] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213680 [0231.530] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8bb82c9, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3ae816)) returned 1 [0231.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213680 | out: hHeap=0x1f0000) returned 1 [0231.530] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212cf0 [0231.530] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8bb82c9, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3ae816)) returned 1 [0231.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212cf0 | out: hHeap=0x1f0000) returned 1 [0231.530] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0231.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0231.530] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bb82c9, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8bb82c9, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8bb82c9, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x205e, dwReserved0=0x0, dwReserved1=0x0, cFileName="dnsns.jar", cAlternateFileName="")) returned 1 [0231.530] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0231.530] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236058 [0231.530] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220eb8 [0231.531] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236058 | out: hHeap=0x1f0000) returned 1 [0231.531] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0231.531] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0231.531] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\dnsns.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0231.531] GetFileType (hFile=0x1e0) returned 0x1 [0231.532] CloseHandle (hObject=0x1e0) returned 1 [0231.532] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f7e8 [0231.532] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\dnsns.jar"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bb82c9, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8bb82c9, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8bb82c9, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x205e)) returned 1 [0231.532] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f7e8 | out: hHeap=0x1f0000) returned 1 [0231.532] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0231.532] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\dnsns.jar"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bb82c9, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8bb82c9, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8bb82c9, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x205e)) returned 1 [0231.532] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0231.532] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fa40 [0231.532] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fa40 | out: hHeap=0x1f0000) returned 1 [0231.533] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bb82c9, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8bb82c9, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8bb82c9, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xade4, dwReserved0=0x0, dwReserved1=0x0, cFileName="jaccess.jar", cAlternateFileName="")) returned 1 [0231.533] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0231.533] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236260 [0231.533] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2211b0 [0231.533] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236260 | out: hHeap=0x1f0000) returned 1 [0231.533] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0231.533] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0231.533] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jaccess.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0231.535] GetFileType (hFile=0x1e0) returned 0x1 [0231.535] CloseHandle (hObject=0x1e0) returned 1 [0231.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fef0 [0231.535] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jaccess.jar"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bb82c9, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8bb82c9, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8bb82c9, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xade4)) returned 1 [0231.536] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fef0 | out: hHeap=0x1f0000) returned 1 [0231.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fef0 [0231.536] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jaccess.jar"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bb82c9, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8bb82c9, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8bb82c9, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xade4)) returned 1 [0231.536] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fef0 | out: hHeap=0x1f0000) returned 1 [0231.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd88 [0231.536] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd88 | out: hHeap=0x1f0000) returned 1 [0231.537] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bb82c9, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8bb82c9, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1166a99, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfxrt.jar", cAlternateFileName="")) returned 1 [0231.537] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0231.537] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236260 [0231.537] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221248 [0231.537] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236260 | out: hHeap=0x1f0000) returned 1 [0231.537] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0231.537] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0231.537] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0231.538] GetFileType (hFile=0x1e0) returned 0x1 [0231.538] CloseHandle (hObject=0x1e0) returned 1 [0231.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0231.539] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bb82c9, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8bb82c9, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1166a99)) returned 1 [0231.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0231.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220328 [0231.539] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bb82c9, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8bb82c9, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1166a99)) returned 1 [0231.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220328 | out: hHeap=0x1f0000) returned 1 [0231.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0231.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0231.539] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa8546b2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xaa8546b2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xaa8ed01b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x21a46d, dwReserved0=0x0, dwReserved1=0x0, cFileName="localedata.jar", cAlternateFileName="LOCALE~1.JAR")) returned 1 [0231.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0231.540] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235b78 [0231.540] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2218d0 [0231.540] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0231.540] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0231.540] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0231.540] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\localedata.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0232.001] GetFileType (hFile=0x23c) returned 0x1 [0232.001] CloseHandle (hObject=0x23c) returned 1 [0232.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0232.001] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\localedata.jar"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa8546b2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xaa8546b2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xaa8ed01b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x21a46d)) returned 1 [0232.002] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0232.002] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0232.002] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\localedata.jar"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa8546b2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xaa8546b2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xaa8ed01b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x21a46d)) returned 1 [0232.002] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0232.002] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0232.003] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0232.003] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="meta-index", cAlternateFileName="META-I~1")) returned 1 [0232.003] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0232.003] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236608 [0232.003] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221708 [0232.003] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236608 | out: hHeap=0x1f0000) returned 1 [0232.003] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0232.003] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0232.038] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\meta-index"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0232.039] GetFileType (hFile=0x200) returned 0x1 [0232.039] CloseHandle (hObject=0x200) returned 1 [0232.039] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220508 [0232.039] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\meta-index"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5b5)) returned 1 [0232.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220508 | out: hHeap=0x1f0000) returned 1 [0232.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0232.040] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\meta-index"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5b5)) returned 1 [0232.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0232.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0232.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0232.040] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1edd4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="nashorn.jar", cAlternateFileName="")) returned 1 [0232.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2386e0 [0232.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d00 [0232.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221248 [0232.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d00 | out: hHeap=0x1f0000) returned 1 [0232.041] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0232.041] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2386e0 | out: hHeap=0x1f0000) returned 1 [0232.041] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\nashorn.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0232.042] GetFileType (hFile=0x200) returned 0x1 [0232.043] CloseHandle (hObject=0x200) returned 1 [0232.043] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220328 [0232.043] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\nashorn.jar"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1edd4e)) returned 1 [0232.043] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220328 | out: hHeap=0x1f0000) returned 1 [0232.043] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220490 [0232.043] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\nashorn.jar"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1edd4e)) returned 1 [0232.044] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220490 | out: hHeap=0x1f0000) returned 1 [0232.044] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0232.044] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0232.044] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xa4c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunec.jar", cAlternateFileName="")) returned 1 [0232.044] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238500 [0232.044] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d00 [0232.044] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2211b0 [0232.044] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d00 | out: hHeap=0x1f0000) returned 1 [0232.044] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0232.044] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238500 | out: hHeap=0x1f0000) returned 1 [0232.045] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunec.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0232.046] GetFileType (hFile=0x200) returned 0x1 [0232.046] CloseHandle (hObject=0x200) returned 1 [0232.047] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f770 [0232.047] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunec.jar"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xa4c9)) returned 1 [0232.047] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f770 | out: hHeap=0x1f0000) returned 1 [0232.047] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21ff68 [0232.047] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunec.jar"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xa4c9)) returned 1 [0232.047] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ff68 | out: hHeap=0x1f0000) returned 1 [0232.047] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0232.047] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0232.047] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x44661, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunjce_provider.jar", cAlternateFileName="SUNJCE~1.JAR")) returned 1 [0232.047] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239010 [0232.047] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d00 [0232.047] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2214a8 [0232.048] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d00 | out: hHeap=0x1f0000) returned 1 [0232.048] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0232.048] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239010 | out: hHeap=0x1f0000) returned 1 [0232.048] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0232.049] GetFileType (hFile=0x200) returned 0x1 [0232.049] CloseHandle (hObject=0x200) returned 1 [0232.050] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0232.050] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x44661)) returned 1 [0232.050] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0232.050] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0232.050] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x44661)) returned 1 [0232.050] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0232.050] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0232.050] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0232.050] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7fbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunmscapi.jar", cAlternateFileName="SUNMSC~1.JAR")) returned 1 [0232.050] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238578 [0232.050] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214b60 [0232.050] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2211b0 [0232.051] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214b60 | out: hHeap=0x1f0000) returned 1 [0232.051] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0232.051] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238578 | out: hHeap=0x1f0000) returned 1 [0232.051] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0232.052] GetFileType (hFile=0x200) returned 0x1 [0232.052] CloseHandle (hObject=0x200) returned 1 [0232.053] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0232.053] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7fbb)) returned 1 [0232.053] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0232.053] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0232.053] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7fbb)) returned 1 [0232.053] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0232.053] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0232.053] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0232.053] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3d5bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunpkcs11.jar", cAlternateFileName="SUNPKC~1.JAR")) returned 1 [0232.054] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238780 [0232.054] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d00 [0232.054] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221248 [0232.054] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d00 | out: hHeap=0x1f0000) returned 1 [0232.054] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0232.054] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238780 | out: hHeap=0x1f0000) returned 1 [0232.054] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0232.055] GetFileType (hFile=0x200) returned 0x1 [0232.055] CloseHandle (hObject=0x200) returned 1 [0232.055] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0232.055] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3d5bf)) returned 1 [0232.055] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0232.055] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213680 [0232.056] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3d5bf)) returned 1 [0232.056] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213680 | out: hHeap=0x1f0000) returned 1 [0232.056] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0232.056] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0232.056] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x10d3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="zipfs.jar", cAlternateFileName="")) returned 1 [0232.056] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238550 [0232.056] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2150a8 [0232.056] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221410 [0232.056] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2150a8 | out: hHeap=0x1f0000) returned 1 [0232.056] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0232.056] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238550 | out: hHeap=0x1f0000) returned 1 [0232.057] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\zipfs.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0232.057] GetFileType (hFile=0x200) returned 0x1 [0232.057] CloseHandle (hObject=0x200) returned 1 [0232.057] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe00 [0232.058] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\zipfs.jar"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x10d3c)) returned 1 [0232.058] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe00 | out: hHeap=0x1f0000) returned 1 [0232.058] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0232.058] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\zipfs.jar"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x10d3c)) returned 1 [0232.058] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0232.058] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0232.058] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0232.058] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x10d3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="zipfs.jar", cAlternateFileName="")) returned 0 [0232.058] FindClose (in: hFindFile=0x24e780 | out: hFindFile=0x24e780) returned 1 [0232.058] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0232.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f1b8 | out: hHeap=0x1f0000) returned 1 [0232.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0232.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2286c8 | out: hHeap=0x1f0000) returned 1 [0232.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228a28 [0232.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0232.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f1b8 [0232.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214f08 [0232.059] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\*", lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa122f229, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e900 [0232.066] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d00 [0232.066] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f08 | out: hHeap=0x1f0000) returned 1 [0232.066] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0232.066] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa122f229, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0232.066] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2150a8 [0232.067] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220e20 [0232.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2150a8 | out: hHeap=0x1f0000) returned 1 [0232.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d00 | out: hHeap=0x1f0000) returned 1 [0232.067] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0232.067] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0232.067] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x12588, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaBrightDemiBold.ttf", cAlternateFileName="LUCIDA~1.TTF")) returned 1 [0232.067] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2287a0 [0232.067] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a90 [0232.067] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0232.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a90 | out: hHeap=0x1f0000) returned 1 [0232.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0232.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2287a0 | out: hHeap=0x1f0000) returned 1 [0232.068] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemibold.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0232.069] GetFileType (hFile=0x1e0) returned 0x1 [0232.069] CloseHandle (hObject=0x1e0) returned 1 [0232.069] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0232.069] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemibold.ttf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x12588)) returned 1 [0232.069] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0232.069] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0232.069] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemibold.ttf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x12588)) returned 1 [0232.070] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0232.070] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0232.070] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0232.070] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x12574, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaBrightDemiItalic.ttf", cAlternateFileName="LUCIDA~2.TTF")) returned 1 [0232.070] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2287e8 [0232.070] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d00 [0232.070] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a2d8 [0232.070] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d00 | out: hHeap=0x1f0000) returned 1 [0232.070] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0232.070] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2287e8 | out: hHeap=0x1f0000) returned 1 [0232.070] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiItalic.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemiitalic.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0232.071] GetFileType (hFile=0x1e0) returned 0x1 [0232.071] CloseHandle (hObject=0x1e0) returned 1 [0232.071] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219cf0 [0232.071] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiItalic.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemiitalic.ttf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x12574)) returned 1 [0232.071] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219cf0 | out: hHeap=0x1f0000) returned 1 [0232.071] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21aa10 [0232.072] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiItalic.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemiitalic.ttf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x12574)) returned 1 [0232.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21aa10 | out: hHeap=0x1f0000) returned 1 [0232.072] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21ab60 [0232.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ab60 | out: hHeap=0x1f0000) returned 1 [0232.072] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13bd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaBrightItalic.ttf", cAlternateFileName="LUCIDA~3.TTF")) returned 1 [0232.072] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239080 [0232.072] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d00 [0232.072] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0232.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d00 | out: hHeap=0x1f0000) returned 1 [0232.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a2d8 | out: hHeap=0x1f0000) returned 1 [0232.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239080 | out: hHeap=0x1f0000) returned 1 [0232.073] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightItalic.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightitalic.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0232.073] GetFileType (hFile=0x1e0) returned 0x1 [0232.073] CloseHandle (hObject=0x1e0) returned 1 [0232.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0232.074] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightItalic.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightitalic.ttf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13bd8)) returned 1 [0232.074] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0232.074] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0232.074] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightItalic.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightitalic.ttf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13bd8)) returned 1 [0232.074] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0232.074] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0232.074] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0232.074] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5434c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaBrightRegular.ttf", cAlternateFileName="LUCIDA~4.TTF")) returned 1 [0232.074] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239198 [0232.074] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d68 [0232.074] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0232.074] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d68 | out: hHeap=0x1f0000) returned 1 [0232.075] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0232.075] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239198 | out: hHeap=0x1f0000) returned 1 [0232.075] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightregular.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0232.117] GetFileType (hFile=0x174) returned 0x1 [0232.118] CloseHandle (hObject=0x174) returned 1 [0232.118] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0232.118] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightregular.ttf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5434c)) returned 1 [0232.118] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0232.118] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0232.119] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightregular.ttf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5434c)) returned 1 [0232.119] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0232.119] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0232.119] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0232.119] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4d9c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaSansDemiBold.ttf", cAlternateFileName="LU38C7~1.TTF")) returned 1 [0232.119] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238f30 [0232.119] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2150a8 [0232.119] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0232.120] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2150a8 | out: hHeap=0x1f0000) returned 1 [0232.120] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0232.120] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238f30 | out: hHeap=0x1f0000) returned 1 [0232.120] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansdemibold.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0232.121] GetFileType (hFile=0x174) returned 0x1 [0232.121] CloseHandle (hObject=0x174) returned 1 [0232.122] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0232.122] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansdemibold.ttf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4d9c8)) returned 1 [0232.122] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0232.122] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0232.122] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansdemibold.ttf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4d9c8)) returned 1 [0232.123] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0232.123] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0232.123] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0232.123] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xaa77c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaSansRegular.ttf", cAlternateFileName="LU761B~1.TTF")) returned 1 [0232.123] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238f68 [0232.123] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214fd8 [0232.123] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0232.123] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214fd8 | out: hHeap=0x1f0000) returned 1 [0232.123] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0232.124] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238f68 | out: hHeap=0x1f0000) returned 1 [0232.124] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansregular.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0232.124] GetFileType (hFile=0x174) returned 0x1 [0232.125] CloseHandle (hObject=0x174) returned 1 [0232.125] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0232.125] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansregular.ttf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xaa77c)) returned 1 [0232.126] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0232.126] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0232.126] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansregular.ttf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xaa77c)) returned 1 [0232.126] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0232.126] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0232.126] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0232.126] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39254, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaTypewriterBold.ttf", cAlternateFileName="LUE73B~1.TTF")) returned 1 [0232.126] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228638 [0232.126] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214af8 [0232.126] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0232.126] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214af8 | out: hHeap=0x1f0000) returned 1 [0232.127] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0232.127] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228638 | out: hHeap=0x1f0000) returned 1 [0232.127] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterbold.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0232.128] GetFileType (hFile=0x174) returned 0x1 [0232.128] CloseHandle (hObject=0x174) returned 1 [0232.129] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0232.129] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterbold.ttf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39254)) returned 1 [0232.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0232.129] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0232.130] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterbold.ttf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39254)) returned 1 [0232.130] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0232.597] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0232.598] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0232.598] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3b40c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaTypewriterRegular.ttf", cAlternateFileName="LUDBAB~1.TTF")) returned 1 [0232.598] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228cf8 [0232.598] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214f08 [0232.598] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a038 [0232.598] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f08 | out: hHeap=0x1f0000) returned 1 [0232.598] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0232.598] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228cf8 | out: hHeap=0x1f0000) returned 1 [0232.598] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterregular.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0232.599] GetFileType (hFile=0x210) returned 0x1 [0232.599] CloseHandle (hObject=0x210) returned 1 [0232.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a6c8 [0232.600] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterregular.ttf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3b40c)) returned 1 [0232.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a6c8 | out: hHeap=0x1f0000) returned 1 [0232.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219f90 [0232.600] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterregular.ttf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3b40c)) returned 1 [0232.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219f90 | out: hHeap=0x1f0000) returned 1 [0232.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219cf0 [0232.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219cf0 | out: hHeap=0x1f0000) returned 1 [0232.600] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3b40c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaTypewriterRegular.ttf", cAlternateFileName="LUDBAB~1.TTF")) returned 0 [0232.600] FindClose (in: hFindFile=0x24e900 | out: hFindFile=0x24e900) returned 1 [0232.601] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a038 | out: hHeap=0x1f0000) returned 1 [0232.601] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f1b8 | out: hHeap=0x1f0000) returned 1 [0232.601] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0232.601] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228a28 | out: hHeap=0x1f0000) returned 1 [0232.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2285a8 [0232.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0232.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f1b8 [0232.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0232.601] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\*", lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa12313ee, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e8c0 [0232.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214b60 [0232.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221410 [0232.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214b60 | out: hHeap=0x1f0000) returned 1 [0232.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0232.602] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0232.602] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa12313ee, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0232.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214b60 [0232.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220fe8 [0232.603] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214b60 | out: hHeap=0x1f0000) returned 1 [0232.603] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0232.603] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0232.603] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0232.603] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa129361a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cursors", cAlternateFileName="")) returned 1 [0232.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214b60 [0232.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2217a0 [0232.603] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214b60 | out: hHeap=0x1f0000) returned 1 [0232.603] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0232.603] lstrcmpW (lpString1="cursors", lpString2=".") returned 1 [0232.603] lstrcmpW (lpString1="cursors", lpString2="..") returned 1 [0232.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204bb0 [0232.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fa40 [0232.604] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa129361a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cursors", cAlternateFileName="")) returned 0 [0232.604] FindClose (in: hFindFile=0x24e8c0 | out: hFindFile=0x24e8c0) returned 1 [0232.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228b48 [0232.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0232.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22db68 [0232.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0232.604] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\*", lpFindFileData=0x1fde300 | out: lpFindFileData=0x1fde300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa129361a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x22ae4c, cFileName=".", cAlternateFileName="")) returned 0x24ea80 [0232.631] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0232.631] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219268 [0232.631] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0232.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0232.632] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0232.632] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1fde300 | out: lpFindFileData=0x1fde300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa129361a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x22ae4c, cFileName="..", cAlternateFileName="")) returned 1 [0232.632] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2201c0 [0232.632] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219058 [0232.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2201c0 | out: hHeap=0x1f0000) returned 1 [0232.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219268 | out: hHeap=0x1f0000) returned 1 [0232.632] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0232.632] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0232.632] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1fde300 | out: lpFindFileData=0x1fde300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x500, dwReserved0=0x20002, dwReserved1=0x22ae4c, cFileName="cursors.properties", cAlternateFileName="CURSOR~1.PRO")) returned 1 [0232.632] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2392b0 [0232.632] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fb30 [0232.632] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218768 [0232.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fb30 | out: hHeap=0x1f0000) returned 1 [0232.633] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219058 | out: hHeap=0x1f0000) returned 1 [0232.633] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2392b0 | out: hHeap=0x1f0000) returned 1 [0232.633] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde0c8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0232.634] GetFileType (hFile=0x1ac) returned 0x1 [0232.634] CloseHandle (hObject=0x1ac) returned 1 [0232.634] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219d98 [0232.634] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties"), fInfoLevelId=0x0, lpFileInformation=0x1fde15c | out: lpFileInformation=0x1fde15c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x500)) returned 1 [0232.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219d98 | out: hHeap=0x1f0000) returned 1 [0232.634] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a4d0 [0232.635] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties"), fInfoLevelId=0x0, lpFileInformation=0x1fde164 | out: lpFileInformation=0x1fde164*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x500)) returned 1 [0232.635] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a4d0 | out: hHeap=0x1f0000) returned 1 [0232.635] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a380 [0232.635] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0232.635] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a380 | out: hHeap=0x1f0000) returned 1 [0232.635] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0232.635] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1fde300 | out: lpFindFileData=0x1fde300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x20002, dwReserved1=0x22ae4c, cFileName="invalid32x32.gif", cAlternateFileName="INVALI~1.GIF")) returned 1 [0232.635] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238ef8 [0232.635] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fef0 [0232.635] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218818 [0232.635] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fef0 | out: hHeap=0x1f0000) returned 1 [0232.635] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218768 | out: hHeap=0x1f0000) returned 1 [0232.635] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ef8 | out: hHeap=0x1f0000) returned 1 [0232.636] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde0c8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0232.636] GetFileType (hFile=0x1ac) returned 0x1 [0232.637] CloseHandle (hObject=0x1ac) returned 1 [0232.637] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0232.637] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde15c | out: lpFileInformation=0x1fde15c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99)) returned 1 [0232.637] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0232.637] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0232.637] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde164 | out: lpFileInformation=0x1fde164*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99)) returned 1 [0232.638] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0232.638] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0232.638] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0232.638] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1fde300 | out: lpFindFileData=0x1fde300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xa5, dwReserved0=0x20002, dwReserved1=0x22ae4c, cFileName="win32_CopyDrop32x32.gif", cAlternateFileName="WIN32_~1.GIF")) returned 1 [0232.638] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238d38 [0232.638] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0232.638] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218b88 [0232.639] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0232.639] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218818 | out: hHeap=0x1f0000) returned 1 [0232.639] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238d38 | out: hHeap=0x1f0000) returned 1 [0232.640] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copydrop32x32.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde0c8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0232.640] GetFileType (hFile=0x1ac) returned 0x1 [0232.641] CloseHandle (hObject=0x1ac) returned 1 [0232.641] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219e40 [0232.641] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copydrop32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde15c | out: lpFileInformation=0x1fde15c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xa5)) returned 1 [0232.641] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219e40 | out: hHeap=0x1f0000) returned 1 [0232.641] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21aab8 [0232.641] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copydrop32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde164 | out: lpFileInformation=0x1fde164*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xa5)) returned 1 [0232.642] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21aab8 | out: hHeap=0x1f0000) returned 1 [0232.642] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219f90 [0232.642] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219f90 | out: hHeap=0x1f0000) returned 1 [0232.642] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1fde300 | out: lpFindFileData=0x1fde300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x20002, dwReserved1=0x22ae4c, cFileName="win32_CopyNoDrop32x32.gif", cAlternateFileName="WIN32_~2.GIF")) returned 1 [0232.642] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228638 [0232.642] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fef0 [0232.642] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad2a0 [0232.642] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fef0 | out: hHeap=0x1f0000) returned 1 [0232.642] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218b88 | out: hHeap=0x1f0000) returned 1 [0232.642] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228638 | out: hHeap=0x1f0000) returned 1 [0232.643] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copynodrop32x32.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde0c8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0232.643] GetFileType (hFile=0x1ac) returned 0x1 [0232.644] CloseHandle (hObject=0x1ac) returned 1 [0232.644] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad358 [0232.644] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copynodrop32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde15c | out: lpFileInformation=0x1fde15c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99)) returned 1 [0232.644] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad358 | out: hHeap=0x1f0000) returned 1 [0232.644] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2add68 [0232.644] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copynodrop32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde164 | out: lpFileInformation=0x1fde164*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99)) returned 1 [0232.644] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2add68 | out: hHeap=0x1f0000) returned 1 [0232.645] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad9d0 [0232.645] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad9d0 | out: hHeap=0x1f0000) returned 1 [0232.645] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1fde300 | out: lpFindFileData=0x1fde300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xa8, dwReserved0=0x20002, dwReserved1=0x22ae4c, cFileName="win32_LinkDrop32x32.gif", cAlternateFileName="WIN32_~3.GIF")) returned 1 [0232.645] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239278 [0232.645] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220238 [0232.645] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218768 [0232.645] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220238 | out: hHeap=0x1f0000) returned 1 [0232.645] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad2a0 | out: hHeap=0x1f0000) returned 1 [0232.645] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239278 | out: hHeap=0x1f0000) returned 1 [0232.646] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linkdrop32x32.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde0c8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0232.646] GetFileType (hFile=0x1ac) returned 0x1 [0232.646] CloseHandle (hObject=0x1ac) returned 1 [0232.647] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a968 [0232.647] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linkdrop32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde15c | out: lpFileInformation=0x1fde15c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xa8)) returned 1 [0232.647] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a968 | out: hHeap=0x1f0000) returned 1 [0232.647] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219ee8 [0232.647] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linkdrop32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde164 | out: lpFileInformation=0x1fde164*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xa8)) returned 1 [0232.647] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219ee8 | out: hHeap=0x1f0000) returned 1 [0232.647] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219c48 [0232.647] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219c48 | out: hHeap=0x1f0000) returned 1 [0232.647] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1fde300 | out: lpFindFileData=0x1fde300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x20002, dwReserved1=0x22ae4c, cFileName="win32_LinkNoDrop32x32.gif", cAlternateFileName="WIN32_~4.GIF")) returned 1 [0232.647] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228638 [0232.648] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0232.648] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad6f0 [0232.648] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0232.648] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218768 | out: hHeap=0x1f0000) returned 1 [0232.648] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228638 | out: hHeap=0x1f0000) returned 1 [0232.648] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linknodrop32x32.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde0c8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0232.649] GetFileType (hFile=0x1ac) returned 0x1 [0232.649] CloseHandle (hObject=0x1ac) returned 1 [0232.649] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad638 [0232.649] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linknodrop32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde15c | out: lpFileInformation=0x1fde15c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99)) returned 1 [0232.650] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad638 | out: hHeap=0x1f0000) returned 1 [0232.650] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad7a8 [0232.650] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linknodrop32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde164 | out: lpFileInformation=0x1fde164*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99)) returned 1 [0232.650] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad7a8 | out: hHeap=0x1f0000) returned 1 [0232.650] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad130 [0232.650] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad130 | out: hHeap=0x1f0000) returned 1 [0232.650] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1fde300 | out: lpFindFileData=0x1fde300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x93, dwReserved0=0x20002, dwReserved1=0x22ae4c, cFileName="win32_MoveDrop32x32.gif", cAlternateFileName="WI06CF~1.GIF")) returned 1 [0232.650] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238de0 [0232.650] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0232.650] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218768 [0232.650] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0232.650] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad6f0 | out: hHeap=0x1f0000) returned 1 [0232.651] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238de0 | out: hHeap=0x1f0000) returned 1 [0232.651] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movedrop32x32.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde0c8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0232.651] GetFileType (hFile=0x1ac) returned 0x1 [0232.652] CloseHandle (hObject=0x1ac) returned 1 [0232.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21aa10 [0232.652] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movedrop32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde15c | out: lpFileInformation=0x1fde15c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x93)) returned 1 [0232.652] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21aa10 | out: hHeap=0x1f0000) returned 1 [0232.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a968 [0232.652] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movedrop32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde164 | out: lpFileInformation=0x1fde164*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x93)) returned 1 [0232.653] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a968 | out: hHeap=0x1f0000) returned 1 [0232.653] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a8c0 [0232.653] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a8c0 | out: hHeap=0x1f0000) returned 1 [0232.653] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1fde300 | out: lpFindFileData=0x1fde300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x20002, dwReserved1=0x22ae4c, cFileName="win32_MoveNoDrop32x32.gif", cAlternateFileName="WIE2D6~1.GIF")) returned 1 [0232.653] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228a70 [0232.653] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220058 [0232.653] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad638 [0232.653] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220058 | out: hHeap=0x1f0000) returned 1 [0232.653] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218768 | out: hHeap=0x1f0000) returned 1 [0232.653] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228a70 | out: hHeap=0x1f0000) returned 1 [0233.065] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movenodrop32x32.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde0c8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1bc [0233.531] GetFileType (hFile=0x1bc) returned 0x1 [0233.532] CloseHandle (hObject=0x1bc) returned 1 [0233.532] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad358 [0233.533] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movenodrop32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde15c | out: lpFileInformation=0x1fde15c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99)) returned 1 [0233.533] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad358 | out: hHeap=0x1f0000) returned 1 [0233.533] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad860 [0233.533] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movenodrop32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde164 | out: lpFileInformation=0x1fde164*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99)) returned 1 [0233.533] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad860 | out: hHeap=0x1f0000) returned 1 [0233.533] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad2a0 [0233.533] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad2a0 | out: hHeap=0x1f0000) returned 1 [0233.533] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1fde300 | out: lpFindFileData=0x1fde300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x20002, dwReserved1=0x22ae4c, cFileName="win32_MoveNoDrop32x32.gif", cAlternateFileName="WIE2D6~1.GIF")) returned 0 [0233.534] FindClose (in: hFindFile=0x24ea80 | out: hFindFile=0x24ea80) returned 1 [0233.534] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad638 | out: hHeap=0x1f0000) returned 1 [0233.534] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22db68 | out: hHeap=0x1f0000) returned 1 [0233.534] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0233.534] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228b48 | out: hHeap=0x1f0000) returned 1 [0233.534] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0233.534] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fa40 | out: hHeap=0x1f0000) returned 1 [0233.534] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bb0 | out: hHeap=0x1f0000) returned 1 [0233.535] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f1b8 | out: hHeap=0x1f0000) returned 1 [0233.535] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0233.535] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2285a8 | out: hHeap=0x1f0000) returned 1 [0233.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228a70 [0233.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0233.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262e48 [0233.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214dd0 [0233.535] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\*", lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1295634, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e980 [0233.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214e38 [0233.536] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214dd0 | out: hHeap=0x1f0000) returned 1 [0233.536] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0233.536] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1295634, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0233.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214dd0 [0233.536] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214e38 | out: hHeap=0x1f0000) returned 1 [0233.536] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0233.536] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0233.536] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="default.jfc", cAlternateFileName="")) returned 1 [0233.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0233.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214e38 [0233.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220d88 [0233.537] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214e38 | out: hHeap=0x1f0000) returned 1 [0233.537] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214dd0 | out: hHeap=0x1f0000) returned 1 [0233.537] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0233.537] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\default.jfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\default.jfc"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1bc [0233.538] GetFileType (hFile=0x1bc) returned 0x1 [0233.538] CloseHandle (hObject=0x1bc) returned 1 [0233.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0233.539] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\default.jfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\default.jfc"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e8d)) returned 1 [0233.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0233.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0233.539] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\default.jfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\default.jfc"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e8d)) returned 1 [0233.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0233.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2203a0 [0233.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2203a0 | out: hHeap=0x1f0000) returned 1 [0233.539] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e61, dwReserved0=0x0, dwReserved1=0x0, cFileName="profile.jfc", cAlternateFileName="")) returned 1 [0233.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0233.540] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214dd0 [0233.540] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220e20 [0233.540] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214dd0 | out: hHeap=0x1f0000) returned 1 [0233.540] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0233.540] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0233.541] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\profile.jfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\profile.jfc"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1bc [0233.541] GetFileType (hFile=0x1bc) returned 0x1 [0233.541] CloseHandle (hObject=0x1bc) returned 1 [0233.542] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0233.542] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\profile.jfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\profile.jfc"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e61)) returned 1 [0233.542] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0233.542] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe00 [0233.542] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\profile.jfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\profile.jfc"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e61)) returned 1 [0233.543] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe00 | out: hHeap=0x1f0000) returned 1 [0233.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0233.543] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0233.543] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e61, dwReserved0=0x0, dwReserved1=0x0, cFileName="profile.jfc", cAlternateFileName="")) returned 0 [0233.543] FindClose (in: hFindFile=0x24e980 | out: hFindFile=0x24e980) returned 1 [0233.543] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0233.543] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262e48 | out: hHeap=0x1f0000) returned 1 [0233.543] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0233.544] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228a70 | out: hHeap=0x1f0000) returned 1 [0233.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228c68 [0233.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0233.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x261cc0 [0233.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0233.544] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\*", lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1389711, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e8c0 [0233.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fef0 [0233.562] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0233.562] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0233.562] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1389711, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0233.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0233.562] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fef0 | out: hHeap=0x1f0000) returned 1 [0233.562] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0233.563] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0233.563] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="jmxremote.access", cAlternateFileName="JMXREM~1.ACC")) returned 1 [0233.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238fa0 [0233.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220580 [0233.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218768 [0233.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220580 | out: hHeap=0x1f0000) returned 1 [0233.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0233.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238fa0 | out: hHeap=0x1f0000) returned 1 [0233.564] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.access" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.access"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0233.565] GetFileType (hFile=0x23c) returned 0x1 [0233.566] CloseHandle (hObject=0x23c) returned 1 [0233.566] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0233.567] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.access" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.access"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf9e)) returned 1 [0233.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0233.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0233.567] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.access" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.access"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf9e)) returned 1 [0233.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0233.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0233.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0233.567] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xb28, dwReserved0=0x0, dwReserved1=0x0, cFileName="jmxremote.password.template", cAlternateFileName="JMXREM~1.TEM")) returned 1 [0233.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228a70 [0233.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fa40 [0233.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218b88 [0233.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fa40 | out: hHeap=0x1f0000) returned 1 [0233.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218768 | out: hHeap=0x1f0000) returned 1 [0233.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228a70 | out: hHeap=0x1f0000) returned 1 [0233.568] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0233.569] GetFileType (hFile=0x23c) returned 0x1 [0233.570] CloseHandle (hObject=0x23c) returned 1 [0233.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219ee8 [0233.570] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xb28)) returned 1 [0233.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219ee8 | out: hHeap=0x1f0000) returned 1 [0233.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a380 [0233.571] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xb28)) returned 1 [0233.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a380 | out: hHeap=0x1f0000) returned 1 [0233.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a230 [0233.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2386b8 [0233.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a230 | out: hHeap=0x1f0000) returned 1 [0233.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2386b8 | out: hHeap=0x1f0000) returned 1 [0233.572] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3926, dwReserved0=0x0, dwReserved1=0x0, cFileName="management.properties", cAlternateFileName="MANAGE~1.PRO")) returned 1 [0233.572] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2391d0 [0233.572] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe00 [0233.572] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219478 [0233.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe00 | out: hHeap=0x1f0000) returned 1 [0233.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218b88 | out: hHeap=0x1f0000) returned 1 [0233.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2391d0 | out: hHeap=0x1f0000) returned 1 [0233.573] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\management.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\management.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0233.574] GetFileType (hFile=0x23c) returned 0x1 [0233.574] CloseHandle (hObject=0x23c) returned 1 [0233.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a038 [0233.575] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\management.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\management.properties"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3926)) returned 1 [0233.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a038 | out: hHeap=0x1f0000) returned 1 [0233.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a770 [0233.575] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\management.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\management.properties"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3926)) returned 1 [0233.576] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a770 | out: hHeap=0x1f0000) returned 1 [0233.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21aa10 [0233.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385a0 [0233.576] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21aa10 | out: hHeap=0x1f0000) returned 1 [0233.576] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385a0 | out: hHeap=0x1f0000) returned 1 [0233.576] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xd30, dwReserved0=0x0, dwReserved1=0x0, cFileName="snmp.acl.template", cAlternateFileName="SNMPAC~1.TEM")) returned 1 [0233.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c20 [0233.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fa40 [0233.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219318 [0233.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fa40 | out: hHeap=0x1f0000) returned 1 [0233.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219478 | out: hHeap=0x1f0000) returned 1 [0233.578] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c20 | out: hHeap=0x1f0000) returned 1 [0233.578] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\snmp.acl.template" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\snmp.acl.template"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0233.578] GetFileType (hFile=0x23c) returned 0x1 [0233.579] CloseHandle (hObject=0x23c) returned 1 [0233.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0233.579] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\snmp.acl.template" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\snmp.acl.template"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xd30)) returned 1 [0233.579] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0233.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0233.580] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\snmp.acl.template" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\snmp.acl.template"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xd30)) returned 1 [0233.580] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0233.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0233.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238758 [0233.580] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0233.580] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238758 | out: hHeap=0x1f0000) returned 1 [0233.580] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xd30, dwReserved0=0x0, dwReserved1=0x0, cFileName="snmp.acl.template", cAlternateFileName="SNMPAC~1.TEM")) returned 0 [0233.580] FindClose (in: hFindFile=0x24e8c0 | out: hFindFile=0x24e8c0) returned 1 [0233.581] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219318 | out: hHeap=0x1f0000) returned 1 [0233.581] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261cc0 | out: hHeap=0x1f0000) returned 1 [0233.581] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0233.581] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228c68 | out: hHeap=0x1f0000) returned 1 [0233.581] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228a70 [0233.581] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0233.581] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2627e8 [0233.581] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220058 [0233.581] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\*", lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1418338, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24eb00 [0234.470] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2203a0 [0234.470] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220058 | out: hHeap=0x1f0000) returned 1 [0234.470] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0234.470] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1418338, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0234.470] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fb30 [0234.470] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2203a0 | out: hHeap=0x1f0000) returned 1 [0234.470] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0234.470] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0234.471] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xfd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="blacklist", cAlternateFileName="BLACKL~1")) returned 1 [0234.471] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0234.471] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe00 [0234.471] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218558 [0234.471] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe00 | out: hHeap=0x1f0000) returned 1 [0234.471] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fb30 | out: hHeap=0x1f0000) returned 1 [0234.471] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0234.471] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklist" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklist"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0234.472] GetFileType (hFile=0x204) returned 0x1 [0234.472] CloseHandle (hObject=0x204) returned 1 [0234.473] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0234.473] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklist" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklist"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xfd6)) returned 1 [0234.473] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0234.473] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0234.473] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklist" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklist"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xfd6)) returned 1 [0234.473] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0234.473] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0234.473] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0234.473] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="blacklisted.certs", cAlternateFileName="BLACKL~1.CER")) returned 1 [0234.473] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239048 [0234.473] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe00 [0234.474] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ce8 [0234.474] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe00 | out: hHeap=0x1f0000) returned 1 [0234.474] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218558 | out: hHeap=0x1f0000) returned 1 [0234.474] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239048 | out: hHeap=0x1f0000) returned 1 [0234.474] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklisted.certs" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklisted.certs"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0234.475] GetFileType (hFile=0x204) returned 0x1 [0234.475] CloseHandle (hObject=0x204) returned 1 [0234.475] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0234.475] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklisted.certs" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklisted.certs"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e5)) returned 1 [0234.476] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0234.476] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0234.476] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklisted.certs" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklisted.certs"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e5)) returned 1 [0234.476] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0234.476] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0234.476] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0234.476] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1c0eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="cacerts", cAlternateFileName="")) returned 1 [0234.476] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0234.476] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218fa8 [0234.476] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0234.476] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ce8 | out: hHeap=0x1f0000) returned 1 [0234.477] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\cacerts" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\cacerts"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0234.478] GetFileType (hFile=0x204) returned 0x1 [0234.478] CloseHandle (hObject=0x204) returned 1 [0234.478] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2132c8 [0234.478] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\cacerts" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\cacerts"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1c0eb)) returned 1 [0234.479] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2132c8 | out: hHeap=0x1f0000) returned 1 [0234.479] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0234.479] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\cacerts" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\cacerts"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1c0eb)) returned 1 [0234.479] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0234.479] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2132c8 [0234.479] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2132c8 | out: hHeap=0x1f0000) returned 1 [0234.479] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x9a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="java.policy", cAlternateFileName="JAVA~1.POL")) returned 1 [0234.479] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609a0 [0234.479] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f770 [0234.479] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x2191b8 [0234.479] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f770 | out: hHeap=0x1f0000) returned 1 [0234.479] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218fa8 | out: hHeap=0x1f0000) returned 1 [0234.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0234.480] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.policy" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\java.policy"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0234.481] GetFileType (hFile=0x204) returned 0x1 [0234.482] CloseHandle (hObject=0x204) returned 1 [0234.482] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213680 [0234.482] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.policy" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\java.policy"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x9a2)) returned 1 [0234.482] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213680 | out: hHeap=0x1f0000) returned 1 [0234.482] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2132c8 [0234.482] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.policy" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\java.policy"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x9a2)) returned 1 [0234.482] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2132c8 | out: hHeap=0x1f0000) returned 1 [0234.482] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0234.483] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0234.483] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8eac, dwReserved0=0x0, dwReserved1=0x0, cFileName="java.security", cAlternateFileName="JAVA~1.SEC")) returned 1 [0234.483] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0234.483] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0234.483] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218558 [0234.483] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0234.483] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2191b8 | out: hHeap=0x1f0000) returned 1 [0234.483] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0234.483] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.security" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\java.security"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0234.484] GetFileType (hFile=0x204) returned 0x1 [0234.484] CloseHandle (hObject=0x204) returned 1 [0234.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0234.484] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.security" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\java.security"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8eac)) returned 1 [0234.485] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0234.485] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0234.485] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.security" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\java.security"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8eac)) returned 1 [0234.485] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0234.485] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212c68 [0234.485] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0234.485] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212c68 | out: hHeap=0x1f0000) returned 1 [0234.485] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0234.485] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x62, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaws.policy", cAlternateFileName="JAVAWS~1.POL")) returned 1 [0234.485] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0234.485] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fef0 [0234.485] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x2191b8 [0234.486] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fef0 | out: hHeap=0x1f0000) returned 1 [0234.486] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218558 | out: hHeap=0x1f0000) returned 1 [0234.486] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0234.486] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\javaws.policy" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\javaws.policy"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0234.486] GetFileType (hFile=0x204) returned 0x1 [0234.487] CloseHandle (hObject=0x204) returned 1 [0234.487] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f10 [0234.487] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\javaws.policy" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\javaws.policy"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x62)) returned 1 [0234.487] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f10 | out: hHeap=0x1f0000) returned 1 [0234.487] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2132c8 [0234.487] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\javaws.policy" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\javaws.policy"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x62)) returned 1 [0234.488] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2132c8 | out: hHeap=0x1f0000) returned 1 [0234.488] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0234.488] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0234.488] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xdc7, dwReserved0=0x0, dwReserved1=0x0, cFileName="local_policy.jar", cAlternateFileName="LOCAL_~1.JAR")) returned 1 [0234.488] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239278 [0234.488] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220490 [0234.488] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218558 [0234.488] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220490 | out: hHeap=0x1f0000) returned 1 [0234.488] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2191b8 | out: hHeap=0x1f0000) returned 1 [0234.488] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239278 | out: hHeap=0x1f0000) returned 1 [0234.488] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\local_policy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\local_policy.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0234.489] GetFileType (hFile=0x204) returned 0x1 [0234.489] CloseHandle (hObject=0x204) returned 1 [0234.489] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0234.489] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\local_policy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\local_policy.jar"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xdc7)) returned 1 [0234.490] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0234.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0234.490] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\local_policy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\local_policy.jar"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xdc7)) returned 1 [0234.490] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0234.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0234.490] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0234.490] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="trusted.libraries", cAlternateFileName="TRUSTE~1.LIB")) returned 1 [0234.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2392b0 [0234.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220490 [0234.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x2191b8 [0234.490] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220490 | out: hHeap=0x1f0000) returned 1 [0234.490] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218558 | out: hHeap=0x1f0000) returned 1 [0234.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2392b0 | out: hHeap=0x1f0000) returned 1 [0234.491] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\trusted.libraries" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\trusted.libraries"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0234.491] GetFileType (hFile=0x204) returned 0x1 [0234.492] CloseHandle (hObject=0x204) returned 1 [0234.735] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0234.736] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\trusted.libraries" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\trusted.libraries"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0234.736] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0234.736] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0234.736] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\trusted.libraries" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\trusted.libraries"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0234.736] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0234.736] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0234.736] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0234.737] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0234.737] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0234.737] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xbd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="US_export_policy.jar", cAlternateFileName="US_EXP~1.JAR")) returned 1 [0234.737] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239048 [0234.737] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0234.737] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219478 [0234.737] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0234.737] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2191b8 | out: hHeap=0x1f0000) returned 1 [0234.738] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239048 | out: hHeap=0x1f0000) returned 1 [0234.738] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\US_export_policy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\us_export_policy.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0234.739] GetFileType (hFile=0x230) returned 0x1 [0234.739] CloseHandle (hObject=0x230) returned 1 [0234.740] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0234.740] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\US_export_policy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\us_export_policy.jar"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xbd2)) returned 1 [0234.740] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0234.740] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0234.740] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\US_export_policy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\us_export_policy.jar"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xbd2)) returned 1 [0234.741] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0234.741] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0234.741] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0234.741] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xbd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="US_export_policy.jar", cAlternateFileName="US_EXP~1.JAR")) returned 0 [0234.741] FindClose (in: hFindFile=0x24eb00 | out: hFindFile=0x24eb00) returned 1 [0234.742] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219478 | out: hHeap=0x1f0000) returned 1 [0234.742] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2627e8 | out: hHeap=0x1f0000) returned 1 [0234.742] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0234.742] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228a70 | out: hHeap=0x1f0000) returned 1 [0234.742] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0234.742] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235768 | out: hHeap=0x1f0000) returned 1 [0234.742] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235f20 | out: hHeap=0x1f0000) returned 1 [0234.743] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235f88 | out: hHeap=0x1f0000) returned 1 [0234.743] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235a40 | out: hHeap=0x1f0000) returned 1 [0234.744] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236128 | out: hHeap=0x1f0000) returned 1 [0234.744] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235c48 | out: hHeap=0x1f0000) returned 1 [0234.744] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2360c0 | out: hHeap=0x1f0000) returned 1 [0234.744] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235ff0 | out: hHeap=0x1f0000) returned 1 [0234.744] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0234.744] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fc20 | out: hHeap=0x1f0000) returned 1 [0234.744] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239be0 | out: hHeap=0x1f0000) returned 1 [0234.744] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e4f8 | out: hHeap=0x1f0000) returned 1 [0234.744] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0234.745] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2288c0 | out: hHeap=0x1f0000) returned 1 [0234.745] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217cd0 | out: hHeap=0x1f0000) returned 1 [0234.745] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a85e0 | out: hHeap=0x1f0000) returned 1 [0234.745] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8a00 | out: hHeap=0x1f0000) returned 1 [0234.745] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2390f0 | out: hHeap=0x1f0000) returned 1 [0234.745] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2634a8 | out: hHeap=0x1f0000) returned 1 [0234.745] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385f0 | out: hHeap=0x1f0000) returned 1 [0234.745] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2344b8 | out: hHeap=0x1f0000) returned 1 [0234.746] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a83d0 | out: hHeap=0x1f0000) returned 1 [0234.746] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d70 | out: hHeap=0x1f0000) returned 1 [0234.746] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bd0 | out: hHeap=0x1f0000) returned 1 [0234.746] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263310 | out: hHeap=0x1f0000) returned 1 [0234.746] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0234.746] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b30 | out: hHeap=0x1f0000) returned 1 [0234.746] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228cf8 [0234.746] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605e0 [0234.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x261e58 [0234.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8d70 [0234.747] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\*", lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf8a30151, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xf8a30151, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1f0000, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e780 [0234.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8848 [0234.747] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d70 | out: hHeap=0x1f0000) returned 1 [0234.747] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0234.748] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf8a30151, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xf8a30151, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1f0000, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0234.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8d70 [0234.748] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8848 | out: hHeap=0x1f0000) returned 1 [0234.748] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0234.748] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0234.748] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d6778e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9dfb986, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf9e9425d, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x5ab2f7, dwReserved0=0x1f0000, dwReserved1=0x0, cFileName="AppXManifest.xml", cAlternateFileName="APPXMA~1.XML")) returned 1 [0234.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2390b8 [0234.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a80b8 [0234.749] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217ed0 [0234.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a80b8 | out: hHeap=0x1f0000) returned 1 [0234.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d70 | out: hHeap=0x1f0000) returned 1 [0234.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2390b8 | out: hHeap=0x1f0000) returned 1 [0234.750] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\AppXManifest.xml" (normalized: "c:\\program files\\microsoft office\\appxmanifest.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0234.750] GetFileType (hFile=0x230) returned 0x1 [0234.751] CloseHandle (hObject=0x230) returned 1 [0234.751] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2203a0 [0234.751] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\AppXManifest.xml" (normalized: "c:\\program files\\microsoft office\\appxmanifest.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1cc | out: lpFileInformation=0x1fdf1cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d6778e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9dfb986, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf9e9425d, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x5ab2f7)) returned 1 [0234.752] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2203a0 | out: hHeap=0x1f0000) returned 1 [0234.752] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2201c0 [0234.752] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\AppXManifest.xml" (normalized: "c:\\program files\\microsoft office\\appxmanifest.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1d4 | out: lpFileInformation=0x1fdf1d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d6778e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9dfb986, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf9e9425d, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x5ab2f7)) returned 1 [0234.752] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2201c0 | out: hHeap=0x1f0000) returned 1 [0234.752] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0234.752] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0234.752] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3888fc00, ftCreationTime.dwHighDateTime=0x1d5b2f9, ftLastAccessTime.dwLowDateTime=0xda731ce0, ftLastAccessTime.dwHighDateTime=0x1d58468, ftLastWriteTime.dwLowDateTime=0xda731ce0, ftLastWriteTime.dwHighDateTime=0x1d58468, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x1f0000, dwReserved1=0x0, cFileName="dresses representations super.exe", cAlternateFileName="DRESSE~1.EXE")) returned 1 [0234.753] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8d70 [0234.753] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a87f0 [0234.753] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0234.753] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a87f0 | out: hHeap=0x1f0000) returned 1 [0234.753] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217ed0 | out: hHeap=0x1f0000) returned 1 [0234.753] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d70 | out: hHeap=0x1f0000) returned 1 [0234.754] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\dresses representations super.exe" (normalized: "c:\\program files\\microsoft office\\dresses representations super.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0234.754] GetLastError () returned 0x20 [0234.754] GetLastError () returned 0x20 [0234.755] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83543a09, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x119, dwReserved0=0x1f0000, dwReserved1=0x0, cFileName="FileSystemMetadata.xml", cAlternateFileName="FILESY~1.XML")) returned 1 [0234.755] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238f68 [0234.755] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8d70 [0234.755] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213570 [0234.755] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d70 | out: hHeap=0x1f0000) returned 1 [0234.755] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0234.756] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238f68 | out: hHeap=0x1f0000) returned 1 [0234.756] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\FileSystemMetadata.xml" (normalized: "c:\\program files\\microsoft office\\filesystemmetadata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fdf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0234.757] GetFileType (hFile=0x230) returned 0x1 [0234.757] CloseHandle (hObject=0x230) returned 1 [0234.758] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2133d8 [0234.758] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\FileSystemMetadata.xml" (normalized: "c:\\program files\\microsoft office\\filesystemmetadata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1cc | out: lpFileInformation=0x1fdf1cc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83543a09, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x119)) returned 1 [0234.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2133d8 | out: hHeap=0x1f0000) returned 1 [0234.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0234.759] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\FileSystemMetadata.xml" (normalized: "c:\\program files\\microsoft office\\filesystemmetadata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdf1d4 | out: lpFileInformation=0x1fdf1d4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83543a09, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x119)) returned 1 [0234.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0234.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0234.760] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0234.760] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9e7b530, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa146f18e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda9a8629, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1f0000, dwReserved1=0x0, cFileName="Office16", cAlternateFileName="")) returned 1 [0234.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260540 [0234.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8d70 [0234.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217650 [0234.760] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d70 | out: hHeap=0x1f0000) returned 1 [0234.760] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213570 | out: hHeap=0x1f0000) returned 1 [0234.760] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0234.761] lstrcmpW (lpString1="Office16", lpString2=".") returned 1 [0234.761] lstrcmpW (lpString1="Office16", lpString2="..") returned 1 [0234.761] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204d70 [0234.761] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b04b8 [0234.761] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf982bd9c, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1f0000, dwReserved1=0x0, cFileName="PackageManifests", cAlternateFileName="PACKAG~1")) returned 1 [0234.761] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239048 [0234.761] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8d70 [0234.761] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217ad0 [0234.762] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d70 | out: hHeap=0x1f0000) returned 1 [0234.762] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217650 | out: hHeap=0x1f0000) returned 1 [0234.762] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239048 | out: hHeap=0x1f0000) returned 1 [0234.762] lstrcmpW (lpString1="PackageManifests", lpString2=".") returned 1 [0234.762] lstrcmpW (lpString1="PackageManifests", lpString2="..") returned 1 [0234.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239278 [0234.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220058 [0234.763] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d70 | out: hHeap=0x1f0000) returned 1 [0234.763] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1f0000, dwReserved1=0x0, cFileName="root", cAlternateFileName="")) returned 1 [0234.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8d70 [0234.763] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217ad0 | out: hHeap=0x1f0000) returned 1 [0234.763] lstrcmpW (lpString1="root", lpString2=".") returned 1 [0234.763] lstrcmpW (lpString1="root", lpString2="..") returned 1 [0234.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x48) returned 0x226238 [0234.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a7fb0 [0234.763] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239278 | out: hHeap=0x1f0000) returned 1 [0234.764] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1fdf370 | out: lpFindFileData=0x1fdf370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1f0000, dwReserved1=0x0, cFileName="root", cAlternateFileName="")) returned 0 [0234.764] FindClose (in: hFindFile=0x24e780 | out: hFindFile=0x24e780) returned 1 [0234.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228638 [0234.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0234.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2627e8 [0234.765] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0248 [0234.765] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office16\\*", lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9e7b530, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa146f18e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda9a8629, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e780 [0234.766] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0c70 [0234.766] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0248 | out: hHeap=0x1f0000) returned 1 [0234.766] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0234.766] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9e7b530, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa146f18e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda9a8629, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0234.767] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0380 [0234.767] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0c70 | out: hHeap=0x1f0000) returned 1 [0234.767] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0234.767] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0234.767] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd502d600, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0xd9e7b530, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd502d600, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x2a9c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPP.HTM", cAlternateFileName="")) returned 1 [0234.767] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2607e8 [0234.767] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0c08 [0234.767] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2217a0 [0234.768] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0c08 | out: hHeap=0x1f0000) returned 1 [0234.768] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0380 | out: hHeap=0x1f0000) returned 1 [0234.768] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607e8 | out: hHeap=0x1f0000) returned 1 [0234.768] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fded1c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0234.769] GetFileType (hFile=0x230) returned 0x1 [0234.769] CloseHandle (hObject=0x230) returned 1 [0234.770] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0234.770] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.htm"), fInfoLevelId=0x0, lpFileInformation=0x1fdedac | out: lpFileInformation=0x1fdedac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd502d600, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0xd9e7b530, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd502d600, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x2a9c0)) returned 1 [0234.770] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0234.770] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0234.770] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.htm"), fInfoLevelId=0x0, lpFileInformation=0x1fdedbc | out: lpFileInformation=0x1fdedbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd502d600, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0xd9e7b530, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd502d600, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x2a9c0)) returned 1 [0234.770] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0234.770] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2202b0 [0234.771] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2202b0 | out: hHeap=0x1f0000) returned 1 [0234.771] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9ea17a8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x17103, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPP.VBS", cAlternateFileName="")) returned 1 [0234.771] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260838 [0234.771] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0c08 [0234.771] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221a00 [0234.771] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0c08 | out: hHeap=0x1f0000) returned 1 [0234.771] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0234.771] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260838 | out: hHeap=0x1f0000) returned 1 [0234.772] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.vbs"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fded1c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0234.772] GetFileType (hFile=0x230) returned 0x1 [0234.773] CloseHandle (hObject=0x230) returned 1 [0234.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fef0 [0234.773] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.vbs"), fInfoLevelId=0x0, lpFileInformation=0x1fdedac | out: lpFileInformation=0x1fdedac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9ea17a8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x17103)) returned 1 [0234.773] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fef0 | out: hHeap=0x1f0000) returned 1 [0234.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0234.773] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.vbs"), fInfoLevelId=0x0, lpFileInformation=0x1fdedbc | out: lpFileInformation=0x1fdedbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9ea17a8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x17103)) returned 1 [0234.773] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0234.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fef0 [0234.773] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fef0 | out: hHeap=0x1f0000) returned 1 [0234.774] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9f60362, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x6a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPREARM.EXE", cAlternateFileName="OSPPRE~1.EXE")) returned 1 [0234.774] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2607c0 [0234.774] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0ba0 [0235.227] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221118 [0235.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0ba0 | out: hHeap=0x1f0000) returned 1 [0235.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0235.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607c0 | out: hHeap=0x1f0000) returned 1 [0235.275] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\Office16\\OSPPREARM.EXE" (normalized: "c:\\program files\\microsoft office\\office16\\ospprearm.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fded1c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0235.277] GetFileType (hFile=0x22c) returned 0x1 [0235.277] CloseHandle (hObject=0x22c) returned 1 [0235.278] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0235.278] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office16\\OSPPREARM.EXE" (normalized: "c:\\program files\\microsoft office\\office16\\ospprearm.exe"), fInfoLevelId=0x0, lpFileInformation=0x1fdedac | out: lpFileInformation=0x1fdedac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9f60362, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x6a40)) returned 1 [0235.279] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0235.279] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0235.279] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office16\\OSPPREARM.EXE" (normalized: "c:\\program files\\microsoft office\\office16\\ospprearm.exe"), fInfoLevelId=0x0, lpFileInformation=0x1fdedbc | out: lpFileInformation=0x1fdedbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9f60362, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x6a40)) returned 1 [0235.279] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0235.279] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213790 [0235.280] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213790 | out: hHeap=0x1f0000) returned 1 [0235.280] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd502d600, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0xda9a8629, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd502d600, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x8df0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SLERROR.XML", cAlternateFileName="")) returned 1 [0235.280] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608b0 [0235.280] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0930 [0235.280] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221540 [0235.280] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0930 | out: hHeap=0x1f0000) returned 1 [0235.281] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0235.281] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608b0 | out: hHeap=0x1f0000) returned 1 [0235.282] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML" (normalized: "c:\\program files\\microsoft office\\office16\\slerror.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fded1c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0235.282] GetFileType (hFile=0x22c) returned 0x1 [0235.283] CloseHandle (hObject=0x22c) returned 1 [0235.283] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220490 [0235.284] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML" (normalized: "c:\\program files\\microsoft office\\office16\\slerror.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdedac | out: lpFileInformation=0x1fdedac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd502d600, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0xda9a8629, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd502d600, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x8df0)) returned 1 [0235.284] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220490 | out: hHeap=0x1f0000) returned 1 [0235.284] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd88 [0235.284] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML" (normalized: "c:\\program files\\microsoft office\\office16\\slerror.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdedbc | out: lpFileInformation=0x1fdedbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd502d600, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0xda9a8629, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd502d600, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x8df0)) returned 1 [0235.284] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd88 | out: hHeap=0x1f0000) returned 1 [0235.285] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0235.285] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0235.285] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd502d600, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0xda9a8629, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd502d600, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x8df0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SLERROR.XML", cAlternateFileName="")) returned 0 [0235.285] FindClose (in: hFindFile=0x24e780 | out: hFindFile=0x24e780) returned 1 [0235.286] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0235.286] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2627e8 | out: hHeap=0x1f0000) returned 1 [0235.286] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0235.286] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228638 | out: hHeap=0x1f0000) returned 1 [0235.286] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228518 [0235.286] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260798 [0235.286] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x263178 [0235.287] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fef0 [0235.287] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\*", lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf982bd9c, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e8c0 [0235.307] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0235.307] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fef0 | out: hHeap=0x1f0000) returned 1 [0235.307] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0235.307] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf982bd9c, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0235.310] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f7e8 [0235.310] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0235.310] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0235.310] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0235.311] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834f7581, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834f7581, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5e91c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml", cAlternateFileName="APA05A~1.XML")) returned 1 [0235.311] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0235.311] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2201c0 [0235.311] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x239be0 [0235.311] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2201c0 | out: hHeap=0x1f0000) returned 1 [0235.311] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f7e8 | out: hHeap=0x1f0000) returned 1 [0235.312] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0235.312] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fded1c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0235.313] GetFileType (hFile=0x22c) returned 0x1 [0235.314] CloseHandle (hObject=0x22c) returned 1 [0235.315] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x229418 [0235.315] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdedac | out: lpFileInformation=0x1fdedac*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834f7581, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834f7581, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5e91c)) returned 1 [0235.315] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0235.315] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x229418 [0235.315] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdedbc | out: lpFileInformation=0x1fdedbc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834f7581, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834f7581, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5e91c)) returned 1 [0235.316] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0235.316] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x229418 [0235.316] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0235.316] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8351d7a8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8351d7a8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e3474a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml", cAlternateFileName="APAD0B~1.XML")) returned 1 [0235.316] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220490 [0235.316] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0235.317] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x229418 [0235.317] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0235.317] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239be0 | out: hHeap=0x1f0000) returned 1 [0235.317] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220490 | out: hHeap=0x1f0000) returned 1 [0235.318] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fded1c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0235.319] GetFileType (hFile=0x22c) returned 0x1 [0235.320] CloseHandle (hObject=0x22c) returned 1 [0235.320] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x229500 [0235.320] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdedac | out: lpFileInformation=0x1fdedac*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8351d7a8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8351d7a8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e3474a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5fd)) returned 1 [0235.321] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229500 | out: hHeap=0x1f0000) returned 1 [0235.682] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x20c408 [0235.682] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdedbc | out: lpFileInformation=0x1fdedbc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8351d7a8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8351d7a8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e3474a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5fd)) returned 1 [0235.682] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20c408 | out: hHeap=0x1f0000) returned 1 [0235.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x20c408 [0235.683] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20c408 | out: hHeap=0x1f0000) returned 1 [0235.683] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x838fd5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x838fd5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xc3863, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml", cAlternateFileName="APEDE2~1.XML")) returned 1 [0235.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0235.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0235.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x20c408 [0235.683] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0235.683] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0235.683] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0235.684] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fded1c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0235.686] GetFileType (hFile=0x23c) returned 0x1 [0235.686] CloseHandle (hObject=0x23c) returned 1 [0235.687] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x22d368 [0235.687] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdedac | out: lpFileInformation=0x1fdedac*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x838fd5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x838fd5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xc3863)) returned 1 [0235.687] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d368 | out: hHeap=0x1f0000) returned 1 [0235.687] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x22d368 [0235.688] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdedbc | out: lpFileInformation=0x1fdedbc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x838fd5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x838fd5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xc3863)) returned 1 [0235.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d368 | out: hHeap=0x1f0000) returned 1 [0235.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x22d368 [0235.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d368 | out: hHeap=0x1f0000) returned 1 [0235.688] GetLastError () returned 0x0 [0235.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0235.689] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2287e8 [0235.689] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2627e8 [0235.689] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x22d368 [0235.689] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239160 [0235.689] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0235.689] CryptAcquireContextA (in: phProv=0x1fde5d0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1fde5d0*=0x2132c8) returned 1 [0235.690] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x260978 | out: pbBuffer=0x260978) returned 1 [0235.690] CryptReleaseContext (hProv=0x2132c8, dwFlags=0x0) returned 1 [0235.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0235.691] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x2595a0 [0235.691] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2aece8 [0235.691] QueryPerformanceCounter (in: lpPerformanceCount=0x1fde564 | out: lpPerformanceCount=0x1fde564*=39305990904) returned 1 [0235.691] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1fde5a4 | out: lpSystemTimeAsFileTime=0x1fde5a4) [0235.691] QueryPerformanceCounter (in: lpPerformanceCount=0x1fde564 | out: lpPerformanceCount=0x1fde564*=39306028248) returned 1 [0235.692] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1fde5a4 | out: lpSystemTimeAsFileTime=0x1fde5a4) [0235.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239278 [0235.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x266290 [0235.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2afb20 [0235.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x232ba8 [0235.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f920 [0235.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206628 [0235.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f950 [0235.693] GetLastError () returned 0x0 [0235.693] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x21bc20 [0235.693] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x166) returned 0x229418 [0235.693] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21bc20 | out: hHeap=0x1f0000) returned 1 [0235.693] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387e0 [0235.884] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389e0 [0235.885] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0000-1000-0000000ff1ce.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde470, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0235.886] GetFileType (hFile=0x174) returned 0x1 [0235.886] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a10 [0235.887] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ab0 [0235.887] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4a0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0235.887] GetFileType (hFile=0x1d8) returned 0x1 [0235.888] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cb0 [0235.888] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c30 [0235.888] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad410 [0235.888] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a40 [0235.888] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ac0 [0235.889] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0000-1000-0000000ff1ce.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde3ec, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0235.890] GetFileType (hFile=0x1b0) returned 0x1 [0235.890] GetLastError () returned 0xb7 [0235.890] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe4) returned 0x217038 [0235.890] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c70 [0235.890] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e30 [0235.891] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0235.891] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad6f0 [0235.891] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b20 [0235.891] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b70 [0235.892] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0000-1000-0000000ff1ce.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde3ec, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0235.892] GetFileType (hFile=0x204) returned 0x1 [0235.892] GetLastError () returned 0xb7 [0235.892] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e70 [0235.892] GetLastError () returned 0xb7 [0235.892] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cb0 [0235.893] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d10 [0235.893] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0235.893] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb8) returned 0x223ca0 [0235.893] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a30 [0235.893] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ad0 [0235.894] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde3e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0235.894] GetFileType (hFile=0x1c0) returned 0x1 [0235.894] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28ffe0 [0235.894] ReadFile (in: hFile=0x1c0, lpBuffer=0x28ffe0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fde340, lpOverlapped=0x0 | out: lpBuffer=0x28ffe0*, lpNumberOfBytesRead=0x1fde340*=0x1000, lpOverlapped=0x0) returned 1 [0235.898] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24a9c8 [0235.900] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x288fa8 [0235.900] GetLastError () returned 0x0 [0236.265] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f650 [0236.266] GetLastError () returned 0x0 [0236.266] CloseHandle (hObject=0x174) returned 1 [0236.267] CloseHandle (hObject=0x1d8) returned 1 [0236.268] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238910 [0236.268] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388c0 [0236.269] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4a0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0236.282] GetFileType (hFile=0x1d8) returned 0x1 [0236.283] GetLastError () returned 0xb7 [0236.283] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28dfd0 [0236.283] GetLastError () returned 0xb7 [0236.285] CloseHandle (hObject=0x1d8) returned 1 [0236.285] DeleteFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0000-1000-0000000ff1ce.xml")) returned 0 [0236.286] GetLastError () returned 0x20 [0236.286] GetLastError () returned 0x20 [0236.286] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228830 [0236.286] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260860 [0236.286] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260540 [0236.287] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x228440 [0236.287] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f50 [0236.287] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c90 [0236.287] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x2387f0 [0236.287] GetLastError () returned 0x20 [0236.287] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239080 [0236.287] GetLastError () returned 0x20 [0236.288] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238e50 [0236.288] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0790 [0236.288] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2604c8 [0236.288] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2854b8 [0236.288] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238880 [0236.288] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260838 [0236.288] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f8c0 [0236.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238800 [0236.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0236.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f740 [0236.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260568 [0236.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x284f90 [0236.289] GetLastError () returned 0x20 [0236.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238900 [0236.290] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238810 [0236.290] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388d0 [0236.290] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238810 | out: hHeap=0x1f0000) returned 1 [0236.290] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238810 [0236.290] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388d0 | out: hHeap=0x1f0000) returned 1 [0236.290] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238900 | out: hHeap=0x1f0000) returned 1 [0236.290] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388d0 [0236.291] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f620 [0236.291] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388d0 | out: hHeap=0x1f0000) returned 1 [0236.291] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f7a0 [0236.291] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f620 | out: hHeap=0x1f0000) returned 1 [0236.291] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238810 | out: hHeap=0x1f0000) returned 1 [0236.291] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f620 [0236.291] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f7b8 [0236.292] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f620 | out: hHeap=0x1f0000) returned 1 [0236.292] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f788 [0236.292] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f7b8 | out: hHeap=0x1f0000) returned 1 [0236.292] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f7a0 | out: hHeap=0x1f0000) returned 1 [0236.292] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f8d8 [0236.292] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204c30 [0236.292] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f8d8 | out: hHeap=0x1f0000) returned 1 [0236.292] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bf0 [0236.293] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c30 | out: hHeap=0x1f0000) returned 1 [0236.293] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f788 | out: hHeap=0x1f0000) returned 1 [0236.293] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f50 [0236.293] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260888 [0236.293] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f50 | out: hHeap=0x1f0000) returned 1 [0236.293] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204e70 [0236.293] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0236.293] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bf0 | out: hHeap=0x1f0000) returned 1 [0236.294] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204bb0 [0236.294] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206838 [0236.294] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bb0 | out: hHeap=0x1f0000) returned 1 [0236.294] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260608 [0236.294] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206838 | out: hHeap=0x1f0000) returned 1 [0236.294] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e70 | out: hHeap=0x1f0000) returned 1 [0236.294] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238900 [0236.294] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f788 [0236.295] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238900 | out: hHeap=0x1f0000) returned 1 [0236.295] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f728 [0236.295] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f788 | out: hHeap=0x1f0000) returned 1 [0236.295] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204f50 [0236.295] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f728 | out: hHeap=0x1f0000) returned 1 [0236.295] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206658 [0236.295] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f50 | out: hHeap=0x1f0000) returned 1 [0236.296] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206658 | out: hHeap=0x1f0000) returned 1 [0236.296] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0236.296] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0236.296] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab208 [0236.296] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2854b8 | out: hHeap=0x1f0000) returned 1 [0236.296] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604c8 | out: hHeap=0x1f0000) returned 1 [0236.296] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238d00 [0236.296] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604c8 [0236.297] CryptAcquireContextA (in: phProv=0x1fde5d0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1fde5d0*=0x212b58) returned 1 [0236.666] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2604c8 | out: pbBuffer=0x2604c8) returned 1 [0236.666] CryptReleaseContext (hProv=0x212b58, dwFlags=0x0) returned 1 [0236.667] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604c8 | out: hHeap=0x1f0000) returned 1 [0236.667] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260978 [0236.667] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2604c8 [0236.667] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2390b8 [0236.667] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0236.667] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac6d8 [0236.667] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2390b8 | out: hHeap=0x1f0000) returned 1 [0236.668] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8a58 [0236.668] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f6b0 [0236.668] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x2b0930 [0236.668] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260978 [0236.668] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285098 [0236.668] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204db0 [0236.668] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0318 [0236.668] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260518 [0236.669] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2852a8 [0236.669] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238970 [0236.669] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ba8 [0236.669] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f6c8 [0236.669] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238aa0 [0236.669] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609f0 [0236.669] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f638 [0236.670] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f638 | out: hHeap=0x1f0000) returned 1 [0236.670] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609f0 | out: hHeap=0x1f0000) returned 1 [0236.670] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238aa0 | out: hHeap=0x1f0000) returned 1 [0236.670] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f6c8 | out: hHeap=0x1f0000) returned 1 [0236.670] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ba8 | out: hHeap=0x1f0000) returned 1 [0236.670] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238970 | out: hHeap=0x1f0000) returned 1 [0236.670] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2852a8 | out: hHeap=0x1f0000) returned 1 [0236.670] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0236.670] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0318 | out: hHeap=0x1f0000) returned 1 [0236.671] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238e18 [0236.671] GetLastError () returned 0x0 [0236.671] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238c20 [0236.671] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abec0 [0236.671] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abec0 | out: hHeap=0x1f0000) returned 1 [0236.671] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abc70 [0236.672] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac360 [0236.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abc70 | out: hHeap=0x1f0000) returned 1 [0236.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac360 | out: hHeap=0x1f0000) returned 1 [0236.672] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x24e9c0 [0236.672] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2856c8 [0236.672] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab0e0 [0236.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab0e0 | out: hHeap=0x1f0000) returned 1 [0236.672] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac360 [0236.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac360 | out: hHeap=0x1f0000) returned 1 [0236.673] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2857d0 [0236.673] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2acb78 [0236.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2acb78 | out: hHeap=0x1f0000) returned 1 [0236.673] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f510 [0236.673] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x26d4c0 [0236.673] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2ae540 [0236.673] QueryPerformanceCounter (in: lpPerformanceCount=0x1fde120 | out: lpPerformanceCount=0x1fde120*=39404233353) returned 1 [0236.674] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1fde160 | out: lpSystemTimeAsFileTime=0x1fde160) [0236.674] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238970 [0236.674] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260518 [0236.674] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c30 [0236.674] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c30 | out: hHeap=0x1f0000) returned 1 [0236.674] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0236.674] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260518 [0236.675] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f70 [0236.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f70 | out: hHeap=0x1f0000) returned 1 [0236.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0236.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238970 | out: hHeap=0x1f0000) returned 1 [0236.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0236.675] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239208 [0236.675] GetLastError () returned 0x0 [0236.676] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aba20 [0236.676] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac488 [0236.676] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab0e0 [0236.676] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260518 [0236.676] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260a40 [0236.676] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab8f8 [0236.676] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab580 [0236.676] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260b08 [0236.676] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac928 [0236.677] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x234b90 [0236.677] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab6a8 [0236.677] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x220748 [0236.677] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab6a8 | out: hHeap=0x1f0000) returned 1 [0236.677] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x220968 [0236.677] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220748 | out: hHeap=0x1f0000) returned 1 [0236.677] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260bd0 [0236.677] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2609f0 [0236.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bd0 | out: hHeap=0x1f0000) returned 1 [0236.678] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab6a8 [0236.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609f0 | out: hHeap=0x1f0000) returned 1 [0236.678] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x220748 [0236.678] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x2647e0 [0236.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2647e0 | out: hHeap=0x1f0000) returned 1 [0236.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220748 | out: hHeap=0x1f0000) returned 1 [0236.679] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220968 | out: hHeap=0x1f0000) returned 1 [0236.679] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f638 [0236.679] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228950 [0236.679] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260b30 [0236.679] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260a68 [0236.679] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260b58 [0236.679] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260ba8 [0236.680] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a68 | out: hHeap=0x1f0000) returned 1 [0236.680] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b30 | out: hHeap=0x1f0000) returned 1 [0236.680] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x220748 [0236.680] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260bd0 [0236.681] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260c70 [0236.681] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bd0 | out: hHeap=0x1f0000) returned 1 [0236.681] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac5b0 [0236.682] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c70 | out: hHeap=0x1f0000) returned 1 [0236.682] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206808 [0236.682] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x2a8fb0 [0236.682] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8fb0 | out: hHeap=0x1f0000) returned 1 [0236.682] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206808 | out: hHeap=0x1f0000) returned 1 [0236.682] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b08 | out: hHeap=0x1f0000) returned 1 [0236.682] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abb48 [0236.683] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac5b0 | out: hHeap=0x1f0000) returned 1 [0236.683] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220748 | out: hHeap=0x1f0000) returned 1 [0236.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204d10 [0236.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abc70 [0236.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abec0 [0236.683] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0236.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac238 [0236.683] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abec0 | out: hHeap=0x1f0000) returned 1 [0236.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ba8 | out: hHeap=0x1f0000) returned 1 [0236.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b58 | out: hHeap=0x1f0000) returned 1 [0236.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228950 | out: hHeap=0x1f0000) returned 1 [0236.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abc70 | out: hHeap=0x1f0000) returned 1 [0236.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d10 | out: hHeap=0x1f0000) returned 1 [0236.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f638 | out: hHeap=0x1f0000) returned 1 [0236.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab6a8 | out: hHeap=0x1f0000) returned 1 [0236.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2acca0 [0236.685] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2acca0 | out: hHeap=0x1f0000) returned 1 [0236.685] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b90 | out: hHeap=0x1f0000) returned 1 [0236.685] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac928 | out: hHeap=0x1f0000) returned 1 [0236.685] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abb48 | out: hHeap=0x1f0000) returned 1 [0236.685] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab580 | out: hHeap=0x1f0000) returned 1 [0236.685] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab8f8 | out: hHeap=0x1f0000) returned 1 [0236.685] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0236.685] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab0e0 | out: hHeap=0x1f0000) returned 1 [0236.685] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac488 | out: hHeap=0x1f0000) returned 1 [0236.685] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac360 [0236.686] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac488 [0236.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac360 | out: hHeap=0x1f0000) returned 1 [0236.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac488 | out: hHeap=0x1f0000) returned 1 [0236.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac238 | out: hHeap=0x1f0000) returned 1 [0236.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aba20 | out: hHeap=0x1f0000) returned 1 [0236.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2857d0 | out: hHeap=0x1f0000) returned 1 [0236.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24e9c0 | out: hHeap=0x1f0000) returned 1 [0236.686] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x2afc38 [0236.686] GetLastError () returned 0x0 [0236.687] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238970 [0236.687] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ae0 [0236.688] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0000-1000-0000000ff1ce.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4d0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0236.689] GetFileType (hFile=0x22c) returned 0x1 [0236.689] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28afb8 [0236.690] SetFilePointerEx (in: hFile=0x22c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1fde458 | out: lpNewFilePointer=0x0) returned 1 [0236.690] GetLastError () returned 0xb7 [0236.690] CloseHandle (hObject=0x22c) returned 1 [0236.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ae0 | out: hHeap=0x1f0000) returned 1 [0236.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238970 | out: hHeap=0x1f0000) returned 1 [0236.692] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2856c8 | out: hHeap=0x1f0000) returned 1 [0236.692] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285098 | out: hHeap=0x1f0000) returned 1 [0236.692] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0236.692] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204db0 | out: hHeap=0x1f0000) returned 1 [0236.692] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0930 | out: hHeap=0x1f0000) returned 1 [0236.692] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f6b0 | out: hHeap=0x1f0000) returned 1 [0236.692] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8a58 | out: hHeap=0x1f0000) returned 1 [0236.692] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2afc38 | out: hHeap=0x1f0000) returned 1 [0236.692] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604c8 | out: hHeap=0x1f0000) returned 1 [0236.693] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac6d8 | out: hHeap=0x1f0000) returned 1 [0236.693] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x26d4c0 | out: hHeap=0x1f0000) returned 1 [0236.693] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae540 | out: hHeap=0x1f0000) returned 1 [0236.693] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238d00 | out: hHeap=0x1f0000) returned 1 [0236.693] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387f0 | out: hHeap=0x1f0000) returned 1 [0236.693] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f740 | out: hHeap=0x1f0000) returned 1 [0236.693] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0236.693] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238800 | out: hHeap=0x1f0000) returned 1 [0236.693] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f8c0 | out: hHeap=0x1f0000) returned 1 [0236.694] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260838 | out: hHeap=0x1f0000) returned 1 [0236.694] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238880 | out: hHeap=0x1f0000) returned 1 [0236.694] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x284f90 | out: hHeap=0x1f0000) returned 1 [0236.694] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0236.694] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0790 | out: hHeap=0x1f0000) returned 1 [0236.694] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228440 | out: hHeap=0x1f0000) returned 1 [0236.694] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0236.694] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab208 | out: hHeap=0x1f0000) returned 1 [0236.694] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228830 | out: hHeap=0x1f0000) returned 1 [0236.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388c0 | out: hHeap=0x1f0000) returned 1 [0236.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238910 | out: hHeap=0x1f0000) returned 1 [0236.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28ffe0 | out: hHeap=0x1f0000) returned 1 [0236.695] CloseHandle (hObject=0x1c0) returned 1 [0236.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ad0 | out: hHeap=0x1f0000) returned 1 [0236.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a30 | out: hHeap=0x1f0000) returned 1 [0236.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223ca0 | out: hHeap=0x1f0000) returned 1 [0236.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24a9c8 | out: hHeap=0x1f0000) returned 1 [0236.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f650 | out: hHeap=0x1f0000) returned 1 [0236.696] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cb0 | out: hHeap=0x1f0000) returned 1 [0236.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x288fa8 | out: hHeap=0x1f0000) returned 1 [0236.697] CloseHandle (hObject=0x204) returned 1 [0236.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b70 | out: hHeap=0x1f0000) returned 1 [0236.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b20 | out: hHeap=0x1f0000) returned 1 [0236.698] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad6f0 | out: hHeap=0x1f0000) returned 1 [0236.698] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c70 | out: hHeap=0x1f0000) returned 1 [0236.698] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0236.698] CloseHandle (hObject=0x1b0) returned 1 [0236.699] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ac0 | out: hHeap=0x1f0000) returned 1 [0236.699] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a40 | out: hHeap=0x1f0000) returned 1 [0236.699] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad410 | out: hHeap=0x1f0000) returned 1 [0236.699] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ab0 | out: hHeap=0x1f0000) returned 1 [0236.699] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a10 | out: hHeap=0x1f0000) returned 1 [0236.699] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389e0 | out: hHeap=0x1f0000) returned 1 [0236.699] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387e0 | out: hHeap=0x1f0000) returned 1 [0236.699] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0236.699] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x266290 | out: hHeap=0x1f0000) returned 1 [0236.700] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2afb20 | out: hHeap=0x1f0000) returned 1 [0236.700] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206628 | out: hHeap=0x1f0000) returned 1 [0236.700] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f950 | out: hHeap=0x1f0000) returned 1 [0236.700] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f920 | out: hHeap=0x1f0000) returned 1 [0236.700] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232ba8 | out: hHeap=0x1f0000) returned 1 [0236.700] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2595a0 | out: hHeap=0x1f0000) returned 1 [0236.700] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aece8 | out: hHeap=0x1f0000) returned 1 [0236.700] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239160 | out: hHeap=0x1f0000) returned 1 [0236.700] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d368 | out: hHeap=0x1f0000) returned 1 [0236.700] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2627e8 | out: hHeap=0x1f0000) returned 1 [0236.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2287e8 | out: hHeap=0x1f0000) returned 1 [0236.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0236.701] DeleteFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0000-1000-0000000ff1ce.xml")) returned 1 [0236.702] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP51DE~1.XML")) returned 1 [0236.703] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0236.703] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0236.703] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0236.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0236.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20c408 | out: hHeap=0x1f0000) returned 1 [0236.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0236.704] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fded1c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0236.704] GetFileType (hFile=0x1b0) returned 0x1 [0236.705] CloseHandle (hObject=0x1b0) returned 1 [0236.705] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x20c3b0 [0236.705] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdedac | out: lpFileInformation=0x1fdedac*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0236.706] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20c3b0 | out: hHeap=0x1f0000) returned 1 [0236.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x20c3b0 [0236.706] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdedbc | out: lpFileInformation=0x1fdedbc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0236.706] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20c3b0 | out: hHeap=0x1f0000) returned 1 [0236.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x20c3b0 [0236.706] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20c3b0 | out: hHeap=0x1f0000) returned 1 [0236.706] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83485006, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83485006, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x79381, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml", cAlternateFileName="APPXMA~4.XML")) returned 1 [0236.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21ffe0 [0236.707] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe00 [0236.707] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x20c3b0 [0236.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe00 | out: hHeap=0x1f0000) returned 1 [0236.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0236.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ffe0 | out: hHeap=0x1f0000) returned 1 [0236.708] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fded1c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0237.025] GetFileType (hFile=0x174) returned 0x1 [0237.026] CloseHandle (hObject=0x174) returned 1 [0237.026] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0237.026] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdedac | out: lpFileInformation=0x1fdedac*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83485006, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83485006, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x79381)) returned 1 [0237.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0237.026] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0237.027] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdedbc | out: lpFileInformation=0x1fdedbc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83485006, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83485006, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x79381)) returned 1 [0237.027] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0237.027] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0237.027] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0237.027] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ecd099, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml", cAlternateFileName="APCEE5~1.XML")) returned 1 [0237.027] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21ffe0 [0237.027] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0237.027] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0237.028] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0237.028] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20c3b0 | out: hHeap=0x1f0000) returned 1 [0237.028] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ffe0 | out: hHeap=0x1f0000) returned 1 [0237.028] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fded1c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0237.029] GetFileType (hFile=0x174) returned 0x1 [0237.029] CloseHandle (hObject=0x174) returned 1 [0237.029] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2350b0 [0237.030] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdedac | out: lpFileInformation=0x1fdedac*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ecd099, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0237.030] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2350b0 | out: hHeap=0x1f0000) returned 1 [0237.030] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2350b0 [0237.030] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdedbc | out: lpFileInformation=0x1fdedbc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ecd099, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0237.030] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2350b0 | out: hHeap=0x1f0000) returned 1 [0237.030] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2350b0 [0237.031] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2350b0 | out: hHeap=0x1f0000) returned 1 [0237.031] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e3474a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e3474a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3df10, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP557F~1.XML")) returned 1 [0237.031] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0237.031] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21ffe0 [0237.031] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2350b0 [0237.031] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ffe0 | out: hHeap=0x1f0000) returned 1 [0237.031] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0237.031] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0237.032] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fded1c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0237.033] GetFileType (hFile=0x174) returned 0x1 [0237.034] CloseHandle (hObject=0x174) returned 1 [0237.034] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0237.034] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdedac | out: lpFileInformation=0x1fdedac*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e3474a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e3474a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3df10)) returned 1 [0237.034] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0237.035] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0237.035] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdedbc | out: lpFileInformation=0x1fdedbc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e3474a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e3474a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3df10)) returned 1 [0237.035] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0237.035] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0237.035] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0237.035] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml", cAlternateFileName="APE193~1.XML")) returned 1 [0237.035] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe00 [0237.035] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f770 [0237.035] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0237.035] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f770 | out: hHeap=0x1f0000) returned 1 [0237.036] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2350b0 | out: hHeap=0x1f0000) returned 1 [0237.036] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe00 | out: hHeap=0x1f0000) returned 1 [0237.036] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fded1c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0237.038] GetFileType (hFile=0x174) returned 0x1 [0237.038] CloseHandle (hObject=0x174) returned 1 [0237.039] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2350b0 [0237.039] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdedac | out: lpFileInformation=0x1fdedac*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0237.039] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2350b0 | out: hHeap=0x1f0000) returned 1 [0237.039] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2350b0 [0237.039] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdedbc | out: lpFileInformation=0x1fdedbc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0237.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2350b0 | out: hHeap=0x1f0000) returned 1 [0237.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2350b0 [0237.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2350b0 | out: hHeap=0x1f0000) returned 1 [0237.040] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e3474a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x112a4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml", cAlternateFileName="APC1E2~1.XML")) returned 1 [0237.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0237.041] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0237.041] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2350b0 [0237.041] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0237.041] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0237.041] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0237.042] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fded1c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0237.042] GetFileType (hFile=0x174) returned 0x1 [0237.043] CloseHandle (hObject=0x174) returned 1 [0237.043] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0237.043] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdedac | out: lpFileInformation=0x1fdedac*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e3474a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x112a4e)) returned 1 [0237.044] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0237.044] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0237.044] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdedbc | out: lpFileInformation=0x1fdedbc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e3474a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x112a4e)) returned 1 [0237.044] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0237.044] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0237.045] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0237.045] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4bfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml", cAlternateFileName="APC422~1.XML")) returned 1 [0237.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220508 [0237.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0237.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0237.045] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0237.045] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2350b0 | out: hHeap=0x1f0000) returned 1 [0237.045] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220508 | out: hHeap=0x1f0000) returned 1 [0237.046] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fded1c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0237.048] GetFileType (hFile=0x174) returned 0x1 [0237.048] CloseHandle (hObject=0x174) returned 1 [0237.049] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2350b0 [0237.049] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdedac | out: lpFileInformation=0x1fdedac*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4bfb)) returned 1 [0237.049] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2350b0 | out: hHeap=0x1f0000) returned 1 [0237.049] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2350b0 [0237.049] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdedbc | out: lpFileInformation=0x1fdedbc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4bfb)) returned 1 [0237.049] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2350b0 | out: hHeap=0x1f0000) returned 1 [0237.049] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2350b0 [0237.050] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2350b0 | out: hHeap=0x1f0000) returned 1 [0237.050] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84391d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xba5e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP2169~1.XML")) returned 1 [0237.050] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0237.050] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220508 [0237.050] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2350b0 [0237.050] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220508 | out: hHeap=0x1f0000) returned 1 [0237.050] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0237.050] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0237.051] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fded1c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0237.052] GetFileType (hFile=0x174) returned 0x1 [0237.053] CloseHandle (hObject=0x174) returned 1 [0237.053] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0237.053] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdedac | out: lpFileInformation=0x1fdedac*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84391d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xba5e3)) returned 1 [0237.054] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0237.054] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0237.054] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdedbc | out: lpFileInformation=0x1fdedbc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84391d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xba5e3)) returned 1 [0237.054] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0237.054] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0237.054] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0237.055] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP7BBA~1.XML")) returned 1 [0237.055] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2201c0 [0237.055] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0237.055] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0237.056] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0237.056] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2350b0 | out: hHeap=0x1f0000) returned 1 [0237.056] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2201c0 | out: hHeap=0x1f0000) returned 1 [0237.057] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fded1c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0237.057] GetFileType (hFile=0x174) returned 0x1 [0237.058] CloseHandle (hObject=0x174) returned 1 [0237.058] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2350b0 [0237.058] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdedac | out: lpFileInformation=0x1fdedac*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0237.058] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2350b0 | out: hHeap=0x1f0000) returned 1 [0237.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2350b0 [0237.059] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdedbc | out: lpFileInformation=0x1fdedbc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0237.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2350b0 | out: hHeap=0x1f0000) returned 1 [0237.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2350b0 [0237.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2350b0 | out: hHeap=0x1f0000) returned 1 [0237.059] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e0e651, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e0e651, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml", cAlternateFileName="APEF10~1.XML")) returned 1 [0237.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220508 [0237.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220328 [0237.060] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2350b0 [0237.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220328 | out: hHeap=0x1f0000) returned 1 [0237.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0237.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220508 | out: hHeap=0x1f0000) returned 1 [0237.061] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fded1c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0237.061] GetFileType (hFile=0x174) returned 0x1 [0237.062] CloseHandle (hObject=0x174) returned 1 [0237.062] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0237.062] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdedac | out: lpFileInformation=0x1fdedac*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e0e651, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e0e651, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0237.063] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0237.063] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0237.063] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdedbc | out: lpFileInformation=0x1fdedbc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e0e651, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e0e651, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0237.063] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0237.063] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0237.063] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0237.063] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x838fd5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x838fd5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x863, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml", cAlternateFileName="AP5F49~1.XML")) returned 1 [0237.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220580 [0237.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0237.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0237.064] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0237.064] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2350b0 | out: hHeap=0x1f0000) returned 1 [0237.064] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220580 | out: hHeap=0x1f0000) returned 1 [0237.065] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-040c-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fded1c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0237.065] GetFileType (hFile=0x174) returned 0x1 [0237.066] CloseHandle (hObject=0x174) returned 1 [0237.066] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2350b0 [0237.067] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-040c-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdedac | out: lpFileInformation=0x1fdedac*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x838fd5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x838fd5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x863)) returned 1 [0237.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2350b0 | out: hHeap=0x1f0000) returned 1 [0237.067] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2350b0 [0237.067] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-040c-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdedbc | out: lpFileInformation=0x1fdedbc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x838fd5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x838fd5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x863)) returned 1 [0237.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2350b0 | out: hHeap=0x1f0000) returned 1 [0237.067] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2350b0 [0237.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2350b0 | out: hHeap=0x1f0000) returned 1 [0237.068] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83ea71ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83ea71ba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x863, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml", cAlternateFileName="APB0FE~1.XML")) returned 1 [0237.068] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0237.068] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2202b0 [0237.068] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2350b0 [0237.068] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2202b0 | out: hHeap=0x1f0000) returned 1 [0237.068] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0237.068] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0237.069] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0c0a-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fded1c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0237.070] GetFileType (hFile=0x174) returned 0x1 [0237.070] CloseHandle (hObject=0x174) returned 1 [0237.462] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0237.462] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0c0a-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdedac | out: lpFileInformation=0x1fdedac*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83ea71ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83ea71ba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x863)) returned 1 [0237.462] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0237.462] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0237.462] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0c0a-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdedbc | out: lpFileInformation=0x1fdedbc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83ea71ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83ea71ba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x863)) returned 1 [0237.463] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0237.463] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0237.463] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0237.463] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf982bd9c, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf982bd9c, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x34b4b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP8AF5~1.XML")) returned 1 [0237.463] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fc20 [0237.463] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd88 [0237.463] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0237.464] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd88 | out: hHeap=0x1f0000) returned 1 [0237.464] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2350b0 | out: hHeap=0x1f0000) returned 1 [0237.464] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fc20 | out: hHeap=0x1f0000) returned 1 [0237.465] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0027-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fded1c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0237.466] GetFileType (hFile=0x23c) returned 0x1 [0237.466] CloseHandle (hObject=0x23c) returned 1 [0237.467] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2350b0 [0237.467] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0027-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdedac | out: lpFileInformation=0x1fdedac*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf982bd9c, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf982bd9c, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x34b4b)) returned 1 [0237.467] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2350b0 | out: hHeap=0x1f0000) returned 1 [0237.467] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2350b0 [0237.468] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0027-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdedbc | out: lpFileInformation=0x1fdedbc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf982bd9c, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf982bd9c, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x34b4b)) returned 1 [0237.468] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2350b0 | out: hHeap=0x1f0000) returned 1 [0237.468] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2350b0 [0237.468] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2350b0 | out: hHeap=0x1f0000) returned 1 [0237.468] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e3474a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml", cAlternateFileName="APF26A~1.XML")) returned 1 [0237.468] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe00 [0237.468] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2202b0 [0237.468] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2350b0 [0237.469] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2202b0 | out: hHeap=0x1f0000) returned 1 [0237.469] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0237.469] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe00 | out: hHeap=0x1f0000) returned 1 [0237.469] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-002c-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fded1c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0237.471] GetFileType (hFile=0x23c) returned 0x1 [0237.471] CloseHandle (hObject=0x23c) returned 1 [0237.472] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0237.472] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-002c-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdedac | out: lpFileInformation=0x1fdedac*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e3474a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0237.472] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0237.472] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0237.472] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-002c-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdedbc | out: lpFileInformation=0x1fdedbc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e3474a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0237.472] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0237.473] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0237.473] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0237.473] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xbf2f172d, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0xbf2f172d, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xbf33deae, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml", cAlternateFileName="APC553~1.XML")) returned 1 [0237.473] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0237.473] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220508 [0237.473] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0237.473] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220508 | out: hHeap=0x1f0000) returned 1 [0237.473] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2350b0 | out: hHeap=0x1f0000) returned 1 [0237.474] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0237.474] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0054-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fded1c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0237.476] GetFileType (hFile=0x23c) returned 0x1 [0237.476] CloseHandle (hObject=0x23c) returned 1 [0237.477] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2350b0 [0237.477] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0054-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdedac | out: lpFileInformation=0x1fdedac*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xbf2f172d, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0xbf2f172d, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xbf33deae, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0237.478] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2350b0 | out: hHeap=0x1f0000) returned 1 [0237.478] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2350b0 [0237.478] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0054-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdedbc | out: lpFileInformation=0x1fdedbc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xbf2f172d, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0xbf2f172d, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xbf33deae, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0237.478] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2350b0 | out: hHeap=0x1f0000) returned 1 [0237.479] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2350b0 [0237.479] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2350b0 | out: hHeap=0x1f0000) returned 1 [0237.479] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xbf2f172d, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0xbf2f172d, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xbf2f172d, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x53d21, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP9FA1~1.XML")) returned 1 [0237.479] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0237.479] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f770 [0237.479] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2350b0 [0237.479] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f770 | out: hHeap=0x1f0000) returned 1 [0237.479] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0237.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0237.480] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0057-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fded1c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0237.481] GetFileType (hFile=0x23c) returned 0x1 [0237.482] CloseHandle (hObject=0x23c) returned 1 [0237.482] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0237.482] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0057-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdedac | out: lpFileInformation=0x1fdedac*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xbf2f172d, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0xbf2f172d, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xbf2f172d, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x53d21)) returned 1 [0237.483] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0237.483] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0237.483] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0057-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdedbc | out: lpFileInformation=0x1fdedbc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xbf2f172d, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0xbf2f172d, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xbf2f172d, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x53d21)) returned 1 [0237.483] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0237.483] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0237.483] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0237.484] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3a41, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP330B~1.XML")) returned 1 [0237.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0237.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0237.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0237.485] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0237.485] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2350b0 | out: hHeap=0x1f0000) returned 1 [0237.485] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0237.486] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-006e-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fded1c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0237.486] GetFileType (hFile=0x23c) returned 0x1 [0237.487] CloseHandle (hObject=0x23c) returned 1 [0237.488] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2350b0 [0237.488] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-006e-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdedac | out: lpFileInformation=0x1fdedac*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3a41)) returned 1 [0237.488] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2350b0 | out: hHeap=0x1f0000) returned 1 [0237.488] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2350b0 [0237.488] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-006e-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdedbc | out: lpFileInformation=0x1fdedbc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3a41)) returned 1 [0237.488] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2350b0 | out: hHeap=0x1f0000) returned 1 [0237.489] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2350b0 [0237.489] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2350b0 | out: hHeap=0x1f0000) returned 1 [0237.489] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83543a09, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x573e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml", cAlternateFileName="APPXMA~1.XML")) returned 1 [0237.489] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fc20 [0237.489] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21ffe0 [0237.489] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2350b0 [0237.489] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ffe0 | out: hHeap=0x1f0000) returned 1 [0237.490] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0237.490] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fc20 | out: hHeap=0x1f0000) returned 1 [0237.490] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fded1c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0237.492] GetFileType (hFile=0x23c) returned 0x1 [0237.492] CloseHandle (hObject=0x23c) returned 1 [0237.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0237.493] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdedac | out: lpFileInformation=0x1fdedac*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83543a09, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x573e5)) returned 1 [0237.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0237.494] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0237.494] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdedbc | out: lpFileInformation=0x1fdedbc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83543a09, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x573e5)) returned 1 [0237.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0237.494] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0237.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0237.494] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e3474a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e3474a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP6206~1.XML")) returned 1 [0237.494] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f770 [0237.495] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0237.495] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0237.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0237.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2350b0 | out: hHeap=0x1f0000) returned 1 [0237.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f770 | out: hHeap=0x1f0000) returned 1 [0237.496] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fded1c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0237.496] GetFileType (hFile=0x23c) returned 0x1 [0237.497] CloseHandle (hObject=0x23c) returned 1 [0237.497] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2350b0 [0237.498] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdedac | out: lpFileInformation=0x1fdedac*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e3474a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e3474a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0237.498] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2350b0 | out: hHeap=0x1f0000) returned 1 [0237.498] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2350b0 [0237.498] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdedbc | out: lpFileInformation=0x1fdedbc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e3474a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e3474a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0237.498] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2350b0 | out: hHeap=0x1f0000) returned 1 [0237.498] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2350b0 [0237.499] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2350b0 | out: hHeap=0x1f0000) returned 1 [0237.499] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8351d7a8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xfdea, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml", cAlternateFileName="APD1EA~1.XML")) returned 1 [0237.499] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21ffe0 [0237.499] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220580 [0237.499] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2350b0 [0237.499] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220580 | out: hHeap=0x1f0000) returned 1 [0237.499] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0237.500] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ffe0 | out: hHeap=0x1f0000) returned 1 [0237.500] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fded1c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0237.771] GetFileType (hFile=0x1e0) returned 0x1 [0237.771] CloseHandle (hObject=0x1e0) returned 1 [0237.771] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0237.771] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdedac | out: lpFileInformation=0x1fdedac*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8351d7a8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xfdea)) returned 1 [0237.771] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0237.772] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0237.772] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdedbc | out: lpFileInformation=0x1fdedbc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8351d7a8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xfdea)) returned 1 [0237.772] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0237.772] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0237.772] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0237.772] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83ea71ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83ea71ba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP6EFE~1.XML")) returned 1 [0237.772] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0237.772] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21ffe0 [0237.772] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0237.773] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ffe0 | out: hHeap=0x1f0000) returned 1 [0237.773] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2350b0 | out: hHeap=0x1f0000) returned 1 [0237.773] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0237.773] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fded1c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0237.774] GetFileType (hFile=0x1e0) returned 0x1 [0237.774] CloseHandle (hObject=0x1e0) returned 1 [0237.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x229418 [0237.775] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdedac | out: lpFileInformation=0x1fdedac*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83ea71ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83ea71ba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0237.775] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0237.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x229418 [0237.775] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdedbc | out: lpFileInformation=0x1fdedbc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83ea71ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83ea71ba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0237.776] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0237.776] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x229418 [0237.776] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0237.776] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf982bd9c, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf98c485a, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml", cAlternateFileName="APB63F~1.XML")) returned 1 [0237.776] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fc20 [0237.776] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21ffe0 [0237.776] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x229418 [0237.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ffe0 | out: hHeap=0x1f0000) returned 1 [0237.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0237.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fc20 | out: hHeap=0x1f0000) returned 1 [0237.777] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00b4-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fded1c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0237.779] GetFileType (hFile=0x1e0) returned 0x1 [0237.779] CloseHandle (hObject=0x1e0) returned 1 [0237.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0237.780] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00b4-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdedac | out: lpFileInformation=0x1fdedac*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf982bd9c, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf98c485a, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0237.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0237.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0237.780] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00b4-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdedbc | out: lpFileInformation=0x1fdedbc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf982bd9c, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf98c485a, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0237.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0237.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0237.781] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0237.781] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml", cAlternateFileName="APB913~1.XML")) returned 1 [0237.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0237.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe00 [0237.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0237.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe00 | out: hHeap=0x1f0000) returned 1 [0237.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0237.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0237.783] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fded1c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0237.783] GetFileType (hFile=0x1e0) returned 0x1 [0237.784] CloseHandle (hObject=0x1e0) returned 1 [0237.784] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x229418 [0237.784] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdedac | out: lpFileInformation=0x1fdedac*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2400)) returned 1 [0237.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0237.784] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x229418 [0237.785] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdedbc | out: lpFileInformation=0x1fdedbc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2400)) returned 1 [0237.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0237.785] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x229418 [0237.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0237.785] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x838fd5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x838fd5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP4637~1.XML")) returned 1 [0237.785] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f770 [0237.785] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21ffe0 [0237.785] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x229418 [0237.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ffe0 | out: hHeap=0x1f0000) returned 1 [0237.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0237.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f770 | out: hHeap=0x1f0000) returned 1 [0237.786] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fded1c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0237.787] GetFileType (hFile=0x1e0) returned 0x1 [0237.787] CloseHandle (hObject=0x1e0) returned 1 [0237.787] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0237.788] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdedac | out: lpFileInformation=0x1fdedac*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x838fd5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x838fd5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0237.788] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0237.788] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0237.788] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdedbc | out: lpFileInformation=0x1fdedbc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x838fd5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x838fd5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0237.788] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0237.788] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0237.788] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0237.788] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x618a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP2FE2~1.XML")) returned 1 [0237.788] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fa40 [0237.788] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0237.788] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0237.789] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0237.789] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0237.789] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fa40 | out: hHeap=0x1f0000) returned 1 [0237.789] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fded1c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0237.789] GetFileType (hFile=0x1e0) returned 0x1 [0237.790] CloseHandle (hObject=0x1e0) returned 1 [0237.790] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x229418 [0237.790] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdedac | out: lpFileInformation=0x1fdedac*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x618a8)) returned 1 [0237.790] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0237.790] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x229418 [0237.791] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdedbc | out: lpFileInformation=0x1fdedbc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x618a8)) returned 1 [0237.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0237.791] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x229418 [0237.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0237.791] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP2C4B~1.XML")) returned 1 [0237.791] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0237.791] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0237.791] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x229418 [0237.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0237.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0237.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0237.792] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fded1c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0237.792] GetFileType (hFile=0x1e0) returned 0x1 [0237.793] CloseHandle (hObject=0x1e0) returned 1 [0237.793] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0237.793] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdedac | out: lpFileInformation=0x1fdedac*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0237.793] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0237.794] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0237.794] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdedbc | out: lpFileInformation=0x1fdedbc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0237.794] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0237.794] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0237.794] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0237.794] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml", cAlternateFileName="APF00A~1.XML")) returned 1 [0237.794] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0237.794] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21ffe0 [0237.794] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0237.794] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ffe0 | out: hHeap=0x1f0000) returned 1 [0237.794] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0237.794] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0237.795] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fded1c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0237.796] GetFileType (hFile=0x1e0) returned 0x1 [0237.796] CloseHandle (hObject=0x1e0) returned 1 [0237.797] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x229418 [0237.798] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdedac | out: lpFileInformation=0x1fdedac*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5aa)) returned 1 [0237.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0237.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x229418 [0237.798] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdedbc | out: lpFileInformation=0x1fdedbc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5aa)) returned 1 [0237.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0237.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x229418 [0237.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0237.798] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x834ab261, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml", cAlternateFileName="APPXMA~2.XML")) returned 1 [0237.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0237.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0237.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x229418 [0237.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0237.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0237.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0237.800] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fded1c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0237.800] GetFileType (hFile=0x1e0) returned 0x1 [0237.801] CloseHandle (hObject=0x1e0) returned 1 [0237.801] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0237.801] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdedac | out: lpFileInformation=0x1fdedac*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x834ab261, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0237.801] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0237.801] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0237.801] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdedbc | out: lpFileInformation=0x1fdedbc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x834ab261, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0237.802] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0237.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0237.802] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0237.802] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xeaa, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP202C~1.XML")) returned 1 [0237.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0237.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0237.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0237.803] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0237.803] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0237.803] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0237.804] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fded1c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0237.804] GetFileType (hFile=0x1e0) returned 0x1 [0237.805] CloseHandle (hObject=0x1e0) returned 1 [0237.805] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x229418 [0237.805] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdedac | out: lpFileInformation=0x1fdedac*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xeaa)) returned 1 [0237.805] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0237.806] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x229418 [0237.806] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdedbc | out: lpFileInformation=0x1fdedbc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xeaa)) returned 1 [0237.806] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0237.806] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x229418 [0237.806] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0237.806] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84391d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml", cAlternateFileName="APBC30~1.XML")) returned 1 [0237.806] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd88 [0237.806] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0237.807] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x229418 [0237.807] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0237.807] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0237.807] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd88 | out: hHeap=0x1f0000) returned 1 [0237.808] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fded1c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0237.808] GetFileType (hFile=0x1e0) returned 0x1 [0237.809] CloseHandle (hObject=0x1e0) returned 1 [0237.809] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0237.809] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdedac | out: lpFileInformation=0x1fdedac*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84391d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0237.809] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0237.810] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0237.810] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdedbc | out: lpFileInformation=0x1fdedbc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84391d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0237.810] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0237.810] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0237.810] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0237.810] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml", cAlternateFileName="APCB35~1.XML")) returned 1 [0237.810] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220328 [0237.810] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0237.811] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0237.811] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0237.811] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0237.811] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220328 | out: hHeap=0x1f0000) returned 1 [0237.812] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0115-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fded1c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0238.233] GetFileType (hFile=0x1e8) returned 0x1 [0238.234] CloseHandle (hObject=0x1e8) returned 1 [0238.234] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x229418 [0238.235] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0115-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdedac | out: lpFileInformation=0x1fdedac*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0238.235] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0238.235] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x229418 [0238.235] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0115-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdedbc | out: lpFileInformation=0x1fdedbc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0238.235] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0238.235] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x229418 [0238.236] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0238.236] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP5E1E~1.XML")) returned 1 [0238.236] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0238.236] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0238.236] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x229418 [0238.236] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0238.236] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0238.237] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0238.237] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0117-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fded1c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0238.238] GetFileType (hFile=0x1e8) returned 0x1 [0238.239] CloseHandle (hObject=0x1e8) returned 1 [0238.239] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0238.239] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0117-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdedac | out: lpFileInformation=0x1fdedac*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0238.239] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0238.239] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0238.239] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0117-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdedbc | out: lpFileInformation=0x1fdedbc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0238.240] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0238.240] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0238.240] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0238.240] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83485006, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83485006, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x834ab261, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x80e56, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml", cAlternateFileName="APPXMA~3.XML")) returned 1 [0238.240] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f7e8 [0238.240] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0238.240] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0238.240] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0238.240] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0238.240] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f7e8 | out: hHeap=0x1f0000) returned 1 [0238.241] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012a-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fded1c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0238.241] GetFileType (hFile=0x1e8) returned 0x1 [0238.241] CloseHandle (hObject=0x1e8) returned 1 [0238.242] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x229418 [0238.242] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012a-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdedac | out: lpFileInformation=0x1fdedac*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83485006, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83485006, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x834ab261, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x80e56)) returned 1 [0238.242] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0238.242] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x229418 [0238.242] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012a-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdedbc | out: lpFileInformation=0x1fdedbc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83485006, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83485006, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x834ab261, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x80e56)) returned 1 [0238.242] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0238.242] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x229418 [0238.242] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0238.243] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml", cAlternateFileName="APE0B7~1.XML")) returned 1 [0238.243] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220508 [0238.243] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2201c0 [0238.243] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x229418 [0238.243] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2201c0 | out: hHeap=0x1f0000) returned 1 [0238.243] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0238.243] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220508 | out: hHeap=0x1f0000) returned 1 [0238.243] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012b-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fded1c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0238.244] GetFileType (hFile=0x1e8) returned 0x1 [0238.244] CloseHandle (hObject=0x1e8) returned 1 [0238.244] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0238.244] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012b-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdedac | out: lpFileInformation=0x1fdedac*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0238.245] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0238.245] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0238.245] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012b-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdedbc | out: lpFileInformation=0x1fdedbc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0238.245] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0238.245] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0238.245] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0238.245] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83ea71ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83ea71ba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd2f, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP8BF9~1.XML")) returned 1 [0238.245] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220328 [0238.245] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f770 [0238.246] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0238.246] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f770 | out: hHeap=0x1f0000) returned 1 [0238.246] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0238.246] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220328 | out: hHeap=0x1f0000) returned 1 [0238.246] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-3101-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fded1c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0238.247] GetFileType (hFile=0x1e8) returned 0x1 [0238.247] CloseHandle (hObject=0x1e8) returned 1 [0238.248] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x229418 [0238.248] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-3101-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdedac | out: lpFileInformation=0x1fdedac*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83ea71ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83ea71ba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd2f)) returned 1 [0238.248] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0238.248] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x229418 [0238.248] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-3101-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdedbc | out: lpFileInformation=0x1fdedbc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83ea71ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83ea71ba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd2f)) returned 1 [0238.248] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0238.248] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x229418 [0238.249] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0238.249] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834f7581, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834f7581, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x212876, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.common.xml", cAlternateFileName="AP3FD6~1.XML")) returned 1 [0238.249] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c20 [0238.249] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0238.249] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218b88 [0238.249] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0238.249] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0238.250] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c20 | out: hHeap=0x1f0000) returned 1 [0238.251] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.common.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fded1c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0238.251] GetFileType (hFile=0x1e8) returned 0x1 [0238.252] CloseHandle (hObject=0x1e8) returned 1 [0238.252] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219e40 [0238.252] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.common.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdedac | out: lpFileInformation=0x1fdedac*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834f7581, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834f7581, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x212876)) returned 1 [0238.252] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219e40 | out: hHeap=0x1f0000) returned 1 [0238.253] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219ee8 [0238.253] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.common.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdedbc | out: lpFileInformation=0x1fdedbc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834f7581, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834f7581, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x212876)) returned 1 [0238.253] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219ee8 | out: hHeap=0x1f0000) returned 1 [0238.253] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219f90 [0238.253] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219f90 | out: hHeap=0x1f0000) returned 1 [0238.253] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84391d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2667, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifestLoc.en-us.xml", cAlternateFileName="AP942B~1.XML")) returned 1 [0238.253] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228a28 [0238.253] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe00 [0238.253] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ce8 [0238.253] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe00 | out: hHeap=0x1f0000) returned 1 [0238.253] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218b88 | out: hHeap=0x1f0000) returned 1 [0238.254] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228a28 | out: hHeap=0x1f0000) returned 1 [0238.254] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifestloc.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fded1c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0238.254] GetFileType (hFile=0x1e8) returned 0x1 [0238.255] CloseHandle (hObject=0x1e8) returned 1 [0238.255] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a968 [0238.255] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifestloc.en-us.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdedac | out: lpFileInformation=0x1fdedac*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84391d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2667)) returned 1 [0238.255] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a968 | out: hHeap=0x1f0000) returned 1 [0238.255] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a038 [0238.255] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifestloc.en-us.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdedbc | out: lpFileInformation=0x1fdedbc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84391d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2667)) returned 1 [0238.256] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a038 | out: hHeap=0x1f0000) returned 1 [0238.256] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a2d8 [0238.256] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a2d8 | out: hHeap=0x1f0000) returned 1 [0238.256] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x175, dwReserved0=0x0, dwReserved1=0x0, cFileName="AuthoredExtensions.xml", cAlternateFileName="AUTHOR~1.XML")) returned 1 [0238.256] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c20 [0238.256] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0238.256] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218d98 [0238.256] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0238.256] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ce8 | out: hHeap=0x1f0000) returned 1 [0238.256] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c20 | out: hHeap=0x1f0000) returned 1 [0238.257] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\authoredextensions.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fded1c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0238.257] GetFileType (hFile=0x1e8) returned 0x1 [0238.258] CloseHandle (hObject=0x1e8) returned 1 [0238.258] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a038 [0238.258] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\authoredextensions.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdedac | out: lpFileInformation=0x1fdedac*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x175)) returned 1 [0238.258] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a038 | out: hHeap=0x1f0000) returned 1 [0238.259] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219d98 [0238.259] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\authoredextensions.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fdedbc | out: lpFileInformation=0x1fdedbc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x175)) returned 1 [0238.259] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219d98 | out: hHeap=0x1f0000) returned 1 [0238.259] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a230 [0238.259] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a230 | out: hHeap=0x1f0000) returned 1 [0238.259] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x175, dwReserved0=0x0, dwReserved1=0x0, cFileName="AuthoredExtensions.xml", cAlternateFileName="AUTHOR~1.XML")) returned 0 [0238.259] FindClose (in: hFindFile=0x24e8c0 | out: hFindFile=0x24e8c0) returned 1 [0238.260] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218d98 | out: hHeap=0x1f0000) returned 1 [0238.260] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263178 | out: hHeap=0x1f0000) returned 1 [0238.260] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260798 | out: hHeap=0x1f0000) returned 1 [0238.260] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228518 | out: hHeap=0x1f0000) returned 1 [0238.260] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2287e8 [0238.260] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606f8 [0238.260] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262fe0 [0238.260] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b00a8 [0238.261] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\*", lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ec80 [0238.261] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b02b0 [0238.261] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b00a8 | out: hHeap=0x1f0000) returned 1 [0238.261] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0238.261] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0238.261] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0860 [0238.261] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b02b0 | out: hHeap=0x1f0000) returned 1 [0238.262] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0238.262] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0238.262] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86813dc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2ca2e08, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2ca2e08, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="client", cAlternateFileName="")) returned 1 [0238.262] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b03e8 [0238.262] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0860 | out: hHeap=0x1f0000) returned 1 [0238.262] lstrcmpW (lpString1="client", lpString2=".") returned 1 [0238.262] lstrcmpW (lpString1="client", lpString2="..") returned 1 [0238.262] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204df0 [0238.262] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0a68 [0238.262] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLIPART", cAlternateFileName="")) returned 1 [0238.263] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0520 [0238.263] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b03e8 | out: hHeap=0x1f0000) returned 1 [0238.263] lstrcmpW (lpString1="CLIPART", lpString2=".") returned 1 [0238.263] lstrcmpW (lpString1="CLIPART", lpString2="..") returned 1 [0238.263] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238e18 [0238.263] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0860 [0238.263] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204df0 | out: hHeap=0x1f0000) returned 1 [0238.263] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x114a91d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114a91d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Document Themes 16", cAlternateFileName="DOCUME~1")) returned 1 [0238.263] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239278 [0238.263] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b00a8 [0238.263] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2218d0 [0238.263] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b00a8 | out: hHeap=0x1f0000) returned 1 [0238.264] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0520 | out: hHeap=0x1f0000) returned 1 [0238.264] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239278 | out: hHeap=0x1f0000) returned 1 [0238.264] lstrcmpW (lpString1="Document Themes 16", lpString2=".") returned 1 [0238.264] lstrcmpW (lpString1="Document Themes 16", lpString2="..") returned 1 [0238.264] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x48) returned 0x225ec8 [0238.264] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213680 [0238.264] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238e18 | out: hHeap=0x1f0000) returned 1 [0238.264] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x114f5747, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114f5747, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flattener", cAlternateFileName="FLATTE~1")) returned 1 [0238.264] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0238.264] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0790 [0238.265] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220cf0 [0238.265] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0790 | out: hHeap=0x1f0000) returned 1 [0238.265] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0238.265] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0238.265] lstrcmpW (lpString1="Flattener", lpString2=".") returned 1 [0238.266] lstrcmpW (lpString1="Flattener", lpString2="..") returned 1 [0238.266] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0588 [0238.266] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f7e8 [0238.266] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225ec8 | out: hHeap=0x1f0000) returned 1 [0238.266] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x115da4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115da4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fre", cAlternateFileName="")) returned 1 [0238.266] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b06c0 [0238.266] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0238.266] lstrcmpW (lpString1="fre", lpString2=".") returned 1 [0238.266] lstrcmpW (lpString1="fre", lpString2="..") returned 1 [0238.267] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0238.267] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0790 [0238.267] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0588 | out: hHeap=0x1f0000) returned 1 [0238.267] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1f5fb21, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b2abe77, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b2abe77, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Integration", cAlternateFileName="INTEGR~1")) returned 1 [0238.267] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0238.267] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b08c8 [0238.267] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2214a8 [0238.267] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b08c8 | out: hHeap=0x1f0000) returned 1 [0238.267] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b06c0 | out: hHeap=0x1f0000) returned 1 [0238.267] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0238.268] lstrcmpW (lpString1="Integration", lpString2=".") returned 1 [0238.268] lstrcmpW (lpString1="Integration", lpString2="..") returned 1 [0238.268] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220580 [0238.268] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe2687c83, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee308135, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xee308135, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Licenses16", cAlternateFileName="LICENS~1")) returned 1 [0238.268] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0238.268] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0110 [0238.268] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221968 [0238.268] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0110 | out: hHeap=0x1f0000) returned 1 [0238.268] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0238.268] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0238.268] lstrcmpW (lpString1="Licenses16", lpString2=".") returned 1 [0238.268] lstrcmpW (lpString1="Licenses16", lpString2="..") returned 1 [0238.269] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd8) returned 0x236818 [0238.269] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21ffe0 [0238.269] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0238.269] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee45f66d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x983c2c8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="loc", cAlternateFileName="")) returned 1 [0238.269] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b08c8 [0238.269] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0238.269] lstrcmpW (lpString1="loc", lpString2=".") returned 1 [0238.269] lstrcmpW (lpString1="loc", lpString2="..") returned 1 [0238.269] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b00a8 [0238.269] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mcxml", cAlternateFileName="")) returned 1 [0238.270] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0450 [0238.270] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b08c8 | out: hHeap=0x1f0000) returned 1 [0238.270] lstrcmpW (lpString1="mcxml", lpString2=".") returned 1 [0238.270] lstrcmpW (lpString1="mcxml", lpString2="..") returned 1 [0238.270] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0c70 [0238.270] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3c29db74, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c29db74, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office16", cAlternateFileName="")) returned 1 [0238.270] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260798 [0238.270] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b06c0 [0238.270] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2212e0 [0238.270] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b06c0 | out: hHeap=0x1f0000) returned 1 [0238.270] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0450 | out: hHeap=0x1f0000) returned 1 [0238.270] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260798 | out: hHeap=0x1f0000) returned 1 [0238.270] lstrcmpW (lpString1="Office16", lpString2=".") returned 1 [0238.270] lstrcmpW (lpString1="Office16", lpString2="..") returned 1 [0238.270] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x138) returned 0x20c3b0 [0238.270] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f770 [0238.270] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236818 | out: hHeap=0x1f0000) returned 1 [0238.270] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b1a0d3d, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b1a0d3d, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rsod", cAlternateFileName="")) returned 1 [0238.271] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0b38 [0238.271] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0238.271] lstrcmpW (lpString1="rsod", lpString2=".") returned 1 [0238.271] lstrcmpW (lpString1="rsod", lpString2="..") returned 1 [0238.271] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0110 [0238.271] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xb48c20e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb48c20e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stationery", cAlternateFileName="STATIO~1")) returned 1 [0238.271] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0238.271] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0ba0 [0238.271] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221410 [0238.271] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0ba0 | out: hHeap=0x1f0000) returned 1 [0238.271] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0b38 | out: hHeap=0x1f0000) returned 1 [0238.271] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0238.272] lstrcmpW (lpString1="Stationery", lpString2=".") returned 1 [0238.272] lstrcmpW (lpString1="Stationery", lpString2="..") returned 1 [0238.272] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0238.272] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0238.272] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2607c0 [0238.272] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0ad0 [0238.272] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220c58 [0238.272] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0ad0 | out: hHeap=0x1f0000) returned 1 [0238.737] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0238.739] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607c0 | out: hHeap=0x1f0000) returned 1 [0238.739] lstrcmpW (lpString1="Templates", lpString2=".") returned 1 [0238.781] lstrcmpW (lpString1="Templates", lpString2="..") returned 1 [0238.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220508 [0238.782] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VFS", cAlternateFileName="")) returned 1 [0238.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0a00 [0238.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0238.782] lstrcmpW (lpString1="VFS", lpString2=".") returned 1 [0238.782] lstrcmpW (lpString1="VFS", lpString2="..") returned 1 [0238.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c8) returned 0x231f50 [0238.783] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0178 [0238.783] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20c3b0 | out: hHeap=0x1f0000) returned 1 [0238.783] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x1fdef54 | out: lpFindFileData=0x1fdef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VFS", cAlternateFileName="")) returned 0 [0238.783] FindClose (in: hFindFile=0x24ec80 | out: hFindFile=0x24ec80) returned 1 [0238.784] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228a70 [0238.784] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b08 [0238.784] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2634a8 [0238.784] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0238.784] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\*", lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86813dc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2ca2e08, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2ca2e08, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x2b0166, cFileName=".", cAlternateFileName="")) returned 0x24ea80 [0238.786] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0520 [0238.786] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220c58 [0238.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0520 | out: hHeap=0x1f0000) returned 1 [0238.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0238.786] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0238.787] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86813dc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2ca2e08, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2ca2e08, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20002, dwReserved1=0x2b0166, cFileName="..", cAlternateFileName="")) returned 1 [0238.787] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0b38 [0238.787] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221118 [0238.787] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0b38 | out: hHeap=0x1f0000) returned 1 [0238.787] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0238.788] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0238.788] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0238.788] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0715cb9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0715cb9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0952017, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x20002, dwReserved1=0x2b0166, cFileName="api-ms-win-core-file-l1-2-0.dll", cAlternateFileName="API-MS~1.DLL")) returned 1 [0238.788] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228b00 [0238.788] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b08c8 [0238.788] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219d98 [0238.788] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b08c8 | out: hHeap=0x1f0000) returned 1 [0238.789] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0238.789] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228b00 | out: hHeap=0x1f0000) returned 1 [0238.790] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-file-l1-2-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0238.791] GetFileType (hFile=0x210) returned 0x1 [0238.791] CloseHandle (hObject=0x210) returned 1 [0238.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219f90 [0238.799] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-file-l1-2-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0715cb9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0715cb9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0952017, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0)) returned 1 [0238.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219f90 | out: hHeap=0x1f0000) returned 1 [0238.800] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a4d0 [0238.800] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-file-l1-2-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0715cb9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0715cb9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0952017, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0)) returned 1 [0238.800] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a4d0 | out: hHeap=0x1f0000) returned 1 [0238.800] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a2d8 [0238.800] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a2d8 | out: hHeap=0x1f0000) returned 1 [0238.800] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0952017, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0952017, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0a832cb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x20002, dwReserved1=0x2b0166, cFileName="api-ms-win-core-file-l2-1-0.dll", cAlternateFileName="API-MS~3.DLL")) returned 1 [0238.800] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2286c8 [0238.801] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0b38 [0238.801] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a8c0 [0238.801] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0b38 | out: hHeap=0x1f0000) returned 1 [0238.801] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219d98 | out: hHeap=0x1f0000) returned 1 [0238.801] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2286c8 | out: hHeap=0x1f0000) returned 1 [0238.802] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l2-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-file-l2-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0238.802] GetFileType (hFile=0x210) returned 0x1 [0238.803] CloseHandle (hObject=0x210) returned 1 [0238.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a968 [0238.804] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l2-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-file-l2-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0952017, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0952017, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0a832cb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0)) returned 1 [0238.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a968 | out: hHeap=0x1f0000) returned 1 [0238.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a188 [0238.804] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l2-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-file-l2-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0952017, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0952017, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0a832cb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0)) returned 1 [0238.805] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a188 | out: hHeap=0x1f0000) returned 1 [0238.805] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a4d0 [0238.805] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a4d0 | out: hHeap=0x1f0000) returned 1 [0238.805] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd089348e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd089348e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd09c4608, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x52c0, dwReserved0=0x20002, dwReserved1=0x2b0166, cFileName="api-ms-win-core-localization-l1-2-0.dll", cAlternateFileName="API-MS~2.DLL")) returned 1 [0238.805] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8740 [0238.805] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0930 [0238.805] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad078 [0238.806] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0930 | out: hHeap=0x1f0000) returned 1 [0238.806] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a8c0 | out: hHeap=0x1f0000) returned 1 [0238.806] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8740 | out: hHeap=0x1f0000) returned 1 [0238.807] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-localization-l1-2-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0238.807] GetFileType (hFile=0x210) returned 0x1 [0238.808] CloseHandle (hObject=0x210) returned 1 [0238.808] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2add68 [0238.809] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-localization-l1-2-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd089348e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd089348e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd09c4608, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x52c0)) returned 1 [0238.809] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2add68 | out: hHeap=0x1f0000) returned 1 [0238.809] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad2a0 [0238.809] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-localization-l1-2-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd089348e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd089348e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd09c4608, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x52c0)) returned 1 [0238.809] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad2a0 | out: hHeap=0x1f0000) returned 1 [0238.809] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad6f0 [0238.809] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad6f0 | out: hHeap=0x1f0000) returned 1 [0238.810] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd115de42, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd115de42, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd158a009, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x20002, dwReserved1=0x2b0166, cFileName="api-ms-win-core-processthreads-l1-1-1.dll", cAlternateFileName="AP750A~1.DLL")) returned 1 [0238.810] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0b38 [0238.810] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b01e0 [0238.810] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22ff38 [0238.810] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b01e0 | out: hHeap=0x1f0000) returned 1 [0238.810] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad078 | out: hHeap=0x1f0000) returned 1 [0238.810] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0b38 | out: hHeap=0x1f0000) returned 1 [0238.811] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-processthreads-l1-1-1.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0238.812] GetFileType (hFile=0x210) returned 0x1 [0238.813] CloseHandle (hObject=0x210) returned 1 [0238.813] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f8f8 [0238.813] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-processthreads-l1-1-1.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd115de42, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd115de42, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd158a009, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0)) returned 1 [0238.814] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0238.814] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f5d8 [0238.814] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-processthreads-l1-1-1.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd115de42, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd115de42, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd158a009, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0)) returned 1 [0238.814] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0238.814] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f9c0 [0238.814] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0238.814] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0d0baf0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0d0baf0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0eaf4e3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x20002, dwReserved1=0x2b0166, cFileName="api-ms-win-core-synch-l1-2-0.dll", cAlternateFileName="APF10C~1.DLL")) returned 1 [0238.815] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a80b8 [0238.815] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b08c8 [0238.815] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a230 [0238.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b08c8 | out: hHeap=0x1f0000) returned 1 [0238.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0238.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a80b8 | out: hHeap=0x1f0000) returned 1 [0238.816] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-synch-l1-2-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0238.817] GetFileType (hFile=0x210) returned 0x1 [0238.817] CloseHandle (hObject=0x210) returned 1 [0238.818] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a2d8 [0238.818] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-synch-l1-2-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0d0baf0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0d0baf0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0eaf4e3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0)) returned 1 [0238.818] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a2d8 | out: hHeap=0x1f0000) returned 1 [0238.818] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21aab8 [0238.818] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-synch-l1-2-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0d0baf0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0d0baf0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0eaf4e3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0)) returned 1 [0238.819] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21aab8 | out: hHeap=0x1f0000) returned 1 [0238.819] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a2d8 [0238.819] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a2d8 | out: hHeap=0x1f0000) returned 1 [0238.819] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0c4cdf5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0c4cdf5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0df0820, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x20002, dwReserved1=0x2b0166, cFileName="api-ms-win-core-timezone-l1-1-0.dll", cAlternateFileName="AP7902~1.DLL")) returned 1 [0238.819] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8950 [0238.819] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b01e0 [0238.819] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad410 [0238.820] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b01e0 | out: hHeap=0x1f0000) returned 1 [0238.820] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a230 | out: hHeap=0x1f0000) returned 1 [0238.820] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8950 | out: hHeap=0x1f0000) returned 1 [0238.821] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-timezone-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-timezone-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0238.821] GetFileType (hFile=0x210) returned 0x1 [0238.822] CloseHandle (hObject=0x210) returned 1 [0238.822] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad918 [0238.822] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-timezone-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-timezone-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0c4cdf5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0c4cdf5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0df0820, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0)) returned 1 [0238.823] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad918 | out: hHeap=0x1f0000) returned 1 [0238.823] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad2a0 [0238.823] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-timezone-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-timezone-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0c4cdf5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0c4cdf5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0df0820, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0)) returned 1 [0238.823] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad2a0 | out: hHeap=0x1f0000) returned 1 [0238.823] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad078 [0238.823] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad078 | out: hHeap=0x1f0000) returned 1 [0238.823] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0c26cd1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0c26cd1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0e62fac, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d60, dwReserved0=0x20002, dwReserved1=0x2b0166, cFileName="api-ms-win-core-xstate-l2-1-0.dll", cAlternateFileName="APA632~1.DLL")) returned 1 [0238.824] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8950 [0238.824] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0380 [0238.824] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2adb40 [0238.824] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0380 | out: hHeap=0x1f0000) returned 1 [0238.824] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad410 | out: hHeap=0x1f0000) returned 1 [0238.824] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8950 | out: hHeap=0x1f0000) returned 1 [0238.825] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-xstate-l2-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-xstate-l2-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0238.826] GetFileType (hFile=0x210) returned 0x1 [0238.826] CloseHandle (hObject=0x210) returned 1 [0238.827] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2adbf8 [0238.827] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-xstate-l2-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-xstate-l2-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0c26cd1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0c26cd1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0e62fac, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d60)) returned 1 [0238.827] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2adbf8 | out: hHeap=0x1f0000) returned 1 [0238.827] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad2a0 [0238.827] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-xstate-l2-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-xstate-l2-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0c26cd1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0c26cd1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0e62fac, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d60)) returned 1 [0238.827] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad2a0 | out: hHeap=0x1f0000) returned 1 [0238.827] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad580 [0239.188] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad580 | out: hHeap=0x1f0000) returned 1 [0239.188] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd289cda7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd289cda7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2a1a592, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x20002, dwReserved1=0x2b0166, cFileName="api-ms-win-crt-conio-l1-1-0.dll", cAlternateFileName="AP5C76~1.DLL")) returned 1 [0239.188] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228a28 [0239.188] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0998 [0239.188] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a6c8 [0239.188] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0998 | out: hHeap=0x1f0000) returned 1 [0239.188] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2adb40 | out: hHeap=0x1f0000) returned 1 [0239.188] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228a28 | out: hHeap=0x1f0000) returned 1 [0239.189] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-conio-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-conio-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0239.190] GetFileType (hFile=0x220) returned 0x1 [0239.190] CloseHandle (hObject=0x220) returned 1 [0239.190] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21aa10 [0239.191] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-conio-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-conio-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd289cda7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd289cda7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2a1a592, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0)) returned 1 [0239.191] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21aa10 | out: hHeap=0x1f0000) returned 1 [0239.191] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a380 [0239.191] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-conio-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-conio-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd289cda7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd289cda7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2a1a592, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0)) returned 1 [0239.191] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a380 | out: hHeap=0x1f0000) returned 1 [0239.191] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219ee8 [0239.191] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219ee8 | out: hHeap=0x1f0000) returned 1 [0239.192] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0b8e391, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0b8e391, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0d7e20c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x58c0, dwReserved0=0x20002, dwReserved1=0x2b0166, cFileName="api-ms-win-crt-convert-l1-1-0.dll", cAlternateFileName="APFD9C~1.DLL")) returned 1 [0239.192] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8480 [0239.192] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b05f0 [0239.192] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ada88 [0239.192] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b05f0 | out: hHeap=0x1f0000) returned 1 [0239.192] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a6c8 | out: hHeap=0x1f0000) returned 1 [0239.192] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8480 | out: hHeap=0x1f0000) returned 1 [0239.193] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-convert-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0239.194] GetFileType (hFile=0x220) returned 0x1 [0239.194] CloseHandle (hObject=0x220) returned 1 [0239.194] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad580 [0239.195] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-convert-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0b8e391, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0b8e391, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0d7e20c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x58c0)) returned 1 [0239.195] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad580 | out: hHeap=0x1f0000) returned 1 [0239.195] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad1e8 [0239.195] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-convert-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0b8e391, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0b8e391, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0d7e20c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x58c0)) returned 1 [0239.195] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad1e8 | out: hHeap=0x1f0000) returned 1 [0239.195] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad410 [0239.195] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad410 | out: hHeap=0x1f0000) returned 1 [0239.195] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0aa952a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0aa952a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0bda864, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x20002, dwReserved1=0x2b0166, cFileName="api-ms-win-crt-environment-l1-1-0.dll", cAlternateFileName="APC00F~1.DLL")) returned 1 [0239.196] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a88f8 [0239.196] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0ba0 [0239.196] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2adcb0 [0239.196] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0ba0 | out: hHeap=0x1f0000) returned 1 [0239.196] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ada88 | out: hHeap=0x1f0000) returned 1 [0239.196] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a88f8 | out: hHeap=0x1f0000) returned 1 [0239.196] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-environment-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0239.197] GetFileType (hFile=0x220) returned 0x1 [0239.197] CloseHandle (hObject=0x220) returned 1 [0239.198] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad918 [0239.198] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-environment-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0aa952a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0aa952a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0bda864, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0)) returned 1 [0239.198] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad918 | out: hHeap=0x1f0000) returned 1 [0239.198] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ade20 [0239.198] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-environment-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0aa952a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0aa952a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0bda864, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0)) returned 1 [0239.198] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ade20 | out: hHeap=0x1f0000) returned 1 [0239.198] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad7a8 [0239.198] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad7a8 | out: hHeap=0x1f0000) returned 1 [0239.198] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0aa952a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0aa952a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0c99389, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x50c0, dwReserved0=0x20002, dwReserved1=0x2b0166, cFileName="api-ms-win-crt-filesystem-l1-1-0.dll", cAlternateFileName="API-MS~4.DLL")) returned 1 [0239.199] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8530 [0239.199] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0ad0 [0239.199] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad1e8 [0239.199] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0ad0 | out: hHeap=0x1f0000) returned 1 [0239.199] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2adcb0 | out: hHeap=0x1f0000) returned 1 [0239.199] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8530 | out: hHeap=0x1f0000) returned 1 [0239.200] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-filesystem-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-filesystem-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0239.200] GetFileType (hFile=0x220) returned 0x1 [0239.200] CloseHandle (hObject=0x220) returned 1 [0239.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad7a8 [0239.201] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-filesystem-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-filesystem-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0aa952a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0aa952a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0c99389, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x50c0)) returned 1 [0239.201] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad7a8 | out: hHeap=0x1f0000) returned 1 [0239.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad638 [0239.201] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-filesystem-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-filesystem-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0aa952a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0aa952a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0c99389, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x50c0)) returned 1 [0239.201] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad638 | out: hHeap=0x1f0000) returned 1 [0239.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad7a8 [0239.201] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad7a8 | out: hHeap=0x1f0000) returned 1 [0239.202] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0af5a16, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0af5a16, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0c4cdf5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x20002, dwReserved1=0x2b0166, cFileName="api-ms-win-crt-heap-l1-1-0.dll", cAlternateFileName="AP23C9~1.DLL")) returned 1 [0239.202] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228878 [0239.202] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2affd8 [0239.202] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219e40 [0239.202] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2affd8 | out: hHeap=0x1f0000) returned 1 [0239.202] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad1e8 | out: hHeap=0x1f0000) returned 1 [0239.202] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228878 | out: hHeap=0x1f0000) returned 1 [0239.202] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-heap-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-heap-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0239.204] GetFileType (hFile=0x220) returned 0x1 [0239.204] CloseHandle (hObject=0x220) returned 1 [0239.204] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a4d0 [0239.205] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-heap-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-heap-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0af5a16, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0af5a16, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0c4cdf5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0)) returned 1 [0239.205] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a4d0 | out: hHeap=0x1f0000) returned 1 [0239.205] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219ee8 [0239.205] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-heap-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-heap-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0af5a16, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0af5a16, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0c4cdf5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0)) returned 1 [0239.205] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219ee8 | out: hHeap=0x1f0000) returned 1 [0239.205] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a188 [0239.205] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a188 | out: hHeap=0x1f0000) returned 1 [0239.205] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1e086ac, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1e086ac, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2365abe, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x20002, dwReserved1=0x2b0166, cFileName="api-ms-win-crt-locale-l1-1-0.dll", cAlternateFileName="APCB40~1.DLL")) returned 1 [0239.205] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8270 [0239.206] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0318 [0239.206] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a8c0 [0239.206] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0318 | out: hHeap=0x1f0000) returned 1 [0239.206] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219e40 | out: hHeap=0x1f0000) returned 1 [0239.206] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8270 | out: hHeap=0x1f0000) returned 1 [0239.206] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-locale-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-locale-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0239.207] GetFileType (hFile=0x220) returned 0x1 [0239.207] CloseHandle (hObject=0x220) returned 1 [0239.208] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219e40 [0239.208] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-locale-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-locale-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1e086ac, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1e086ac, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2365abe, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0)) returned 1 [0239.208] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219e40 | out: hHeap=0x1f0000) returned 1 [0239.208] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a818 [0239.208] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-locale-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-locale-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1e086ac, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1e086ac, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2365abe, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0)) returned 1 [0239.208] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a818 | out: hHeap=0x1f0000) returned 1 [0239.208] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a230 [0239.208] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a230 | out: hHeap=0x1f0000) returned 1 [0239.209] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1137cdf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1137cdf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1d23858, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6cc0, dwReserved0=0x20002, dwReserved1=0x2b0166, cFileName="api-ms-win-crt-math-l1-1-0.dll", cAlternateFileName="APAE51~1.DLL")) returned 1 [0239.209] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228878 [0239.209] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0318 [0239.209] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a968 [0239.209] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0318 | out: hHeap=0x1f0000) returned 1 [0239.210] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a8c0 | out: hHeap=0x1f0000) returned 1 [0239.210] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228878 | out: hHeap=0x1f0000) returned 1 [0239.210] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-math-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-math-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0239.211] GetFileType (hFile=0x220) returned 0x1 [0239.211] CloseHandle (hObject=0x220) returned 1 [0239.212] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219c48 [0239.212] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-math-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-math-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1137cdf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1137cdf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1d23858, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6cc0)) returned 1 [0239.212] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219c48 | out: hHeap=0x1f0000) returned 1 [0239.212] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a0e0 [0239.212] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-math-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-math-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1137cdf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1137cdf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1d23858, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6cc0)) returned 1 [0239.212] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a0e0 | out: hHeap=0x1f0000) returned 1 [0239.213] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a6c8 [0239.213] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a6c8 | out: hHeap=0x1f0000) returned 1 [0239.213] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1006983, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1006983, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1242d5d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x68c0, dwReserved0=0x20002, dwReserved1=0x2b0166, cFileName="api-ms-win-crt-multibyte-l1-1-0.dll", cAlternateFileName="AP972F~1.DLL")) returned 1 [0239.213] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8530 [0239.213] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2affd8 [0239.213] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad130 [0239.213] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2affd8 | out: hHeap=0x1f0000) returned 1 [0239.213] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a968 | out: hHeap=0x1f0000) returned 1 [0239.214] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8530 | out: hHeap=0x1f0000) returned 1 [0239.214] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-multibyte-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-multibyte-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0239.215] GetFileType (hFile=0x220) returned 0x1 [0239.215] CloseHandle (hObject=0x220) returned 1 [0239.215] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2aded8 [0239.216] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-multibyte-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-multibyte-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1006983, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1006983, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1242d5d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x68c0)) returned 1 [0239.216] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aded8 | out: hHeap=0x1f0000) returned 1 [0239.216] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad918 [0239.216] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-multibyte-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-multibyte-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1006983, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1006983, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1242d5d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x68c0)) returned 1 [0239.216] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad918 | out: hHeap=0x1f0000) returned 1 [0239.216] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad918 [0239.217] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad918 | out: hHeap=0x1f0000) returned 1 [0239.217] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0f9426a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0f9426a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd121c9ea, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x114c0, dwReserved0=0x20002, dwReserved1=0x2b0166, cFileName="api-ms-win-crt-private-l1-1-0.dll", cAlternateFileName="AP7D9E~1.DLL")) returned 1 [0239.217] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a88f8 [0239.217] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0588 [0239.217] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad078 [0239.217] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0588 | out: hHeap=0x1f0000) returned 1 [0239.217] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad130 | out: hHeap=0x1f0000) returned 1 [0239.218] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a88f8 | out: hHeap=0x1f0000) returned 1 [0239.218] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-private-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-private-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0239.219] GetFileType (hFile=0x220) returned 0x1 [0239.219] CloseHandle (hObject=0x220) returned 1 [0239.220] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad410 [0239.220] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-private-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-private-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0f9426a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0f9426a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd121c9ea, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x114c0)) returned 1 [0239.220] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad410 | out: hHeap=0x1f0000) returned 1 [0239.220] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad580 [0239.221] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-private-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-private-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0f9426a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0f9426a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd121c9ea, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x114c0)) returned 1 [0239.221] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad580 | out: hHeap=0x1f0000) returned 1 [0239.221] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad638 [0239.221] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad638 | out: hHeap=0x1f0000) returned 1 [0239.221] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0f9426a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0f9426a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd139a18a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x20002, dwReserved1=0x2b0166, cFileName="api-ms-win-crt-process-l1-1-0.dll", cAlternateFileName="APFCAD~1.DLL")) returned 1 [0239.221] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a84d8 [0239.222] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0380 [0239.222] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad7a8 [0239.222] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0380 | out: hHeap=0x1f0000) returned 1 [0239.222] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad078 | out: hHeap=0x1f0000) returned 1 [0239.222] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a84d8 | out: hHeap=0x1f0000) returned 1 [0239.223] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-process-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-process-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0239.223] GetFileType (hFile=0x220) returned 0x1 [0239.224] CloseHandle (hObject=0x220) returned 1 [0239.224] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2add68 [0239.224] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-process-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-process-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0f9426a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0f9426a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd139a18a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0)) returned 1 [0239.225] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2add68 | out: hHeap=0x1f0000) returned 1 [0239.225] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad580 [0239.225] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-process-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-process-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0f9426a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0f9426a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd139a18a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0)) returned 1 [0239.225] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad580 | out: hHeap=0x1f0000) returned 1 [0239.225] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad2a0 [0239.225] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad2a0 | out: hHeap=0x1f0000) returned 1 [0239.225] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0eaf4e3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0eaf4e3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd11d067c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5ac0, dwReserved0=0x20002, dwReserved1=0x2b0166, cFileName="api-ms-win-crt-runtime-l1-1-0.dll", cAlternateFileName="AP8F34~1.DLL")) returned 1 [0239.226] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8110 [0239.226] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0ad0 [0239.226] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad078 [0239.226] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0ad0 | out: hHeap=0x1f0000) returned 1 [0239.226] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad7a8 | out: hHeap=0x1f0000) returned 1 [0239.226] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8110 | out: hHeap=0x1f0000) returned 1 [0239.227] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-runtime-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-runtime-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0239.228] GetFileType (hFile=0x220) returned 0x1 [0239.228] CloseHandle (hObject=0x220) returned 1 [0239.229] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2aded8 [0239.229] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-runtime-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-runtime-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0eaf4e3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0eaf4e3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd11d067c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5ac0)) returned 1 [0239.229] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aded8 | out: hHeap=0x1f0000) returned 1 [0239.229] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2add68 [0239.229] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-runtime-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-runtime-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0eaf4e3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0eaf4e3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd11d067c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5ac0)) returned 1 [0239.229] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2add68 | out: hHeap=0x1f0000) returned 1 [0239.230] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad130 [0239.230] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad130 | out: hHeap=0x1f0000) returned 1 [0239.230] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0dca676, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0dca676, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1078ffd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x60c0, dwReserved0=0x20002, dwReserved1=0x2b0166, cFileName="api-ms-win-crt-stdio-l1-1-0.dll", cAlternateFileName="APD1B7~1.DLL")) returned 1 [0239.230] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228518 [0239.230] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0520 [0239.230] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a0e0 [0239.230] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0520 | out: hHeap=0x1f0000) returned 1 [0239.231] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad078 | out: hHeap=0x1f0000) returned 1 [0239.231] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228518 | out: hHeap=0x1f0000) returned 1 [0239.231] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-stdio-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-stdio-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0239.232] GetFileType (hFile=0x220) returned 0x1 [0239.233] CloseHandle (hObject=0x220) returned 1 [0239.233] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a038 [0239.233] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-stdio-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-stdio-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0dca676, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0dca676, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1078ffd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x60c0)) returned 1 [0239.233] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a038 | out: hHeap=0x1f0000) returned 1 [0239.234] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a230 [0239.234] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-stdio-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-stdio-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0dca676, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0dca676, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1078ffd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x60c0)) returned 1 [0239.689] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a230 | out: hHeap=0x1f0000) returned 1 [0239.689] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a620 [0239.689] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a620 | out: hHeap=0x1f0000) returned 1 [0239.689] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0eaf4e3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0eaf4e3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd10c55e8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x60c0, dwReserved0=0x20002, dwReserved1=0x2b0166, cFileName="api-ms-win-crt-string-l1-1-0.dll", cAlternateFileName="APBF0F~1.DLL")) returned 1 [0239.690] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a84d8 [0239.690] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b05f0 [0239.690] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a620 [0239.690] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b05f0 | out: hHeap=0x1f0000) returned 1 [0239.690] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a0e0 | out: hHeap=0x1f0000) returned 1 [0239.690] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a84d8 | out: hHeap=0x1f0000) returned 1 [0239.691] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-string-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-string-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0239.691] GetFileType (hFile=0x1d4) returned 0x1 [0239.692] CloseHandle (hObject=0x1d4) returned 1 [0239.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a770 [0239.692] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-string-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-string-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0eaf4e3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0eaf4e3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd10c55e8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x60c0)) returned 1 [0239.693] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a770 | out: hHeap=0x1f0000) returned 1 [0239.693] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a038 [0239.693] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-string-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-string-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0eaf4e3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0eaf4e3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd10c55e8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x60c0)) returned 1 [0239.693] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a038 | out: hHeap=0x1f0000) returned 1 [0239.693] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219c48 [0239.693] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219c48 | out: hHeap=0x1f0000) returned 1 [0239.693] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0dca676, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0dca676, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0f9426a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x52c0, dwReserved0=0x20002, dwReserved1=0x2b0166, cFileName="api-ms-win-crt-time-l1-1-0.dll", cAlternateFileName="AP5E4C~1.DLL")) returned 1 [0239.693] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2286c8 [0239.693] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0658 [0239.694] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a188 [0239.694] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0658 | out: hHeap=0x1f0000) returned 1 [0239.694] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a620 | out: hHeap=0x1f0000) returned 1 [0239.694] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2286c8 | out: hHeap=0x1f0000) returned 1 [0239.695] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-time-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-time-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0239.695] GetFileType (hFile=0x1d4) returned 0x1 [0239.696] CloseHandle (hObject=0x1d4) returned 1 [0239.696] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a4d0 [0239.696] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-time-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-time-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0dca676, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0dca676, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0f9426a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x52c0)) returned 1 [0239.696] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a4d0 | out: hHeap=0x1f0000) returned 1 [0239.696] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a578 [0239.697] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-time-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-time-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0dca676, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0dca676, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0f9426a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x52c0)) returned 1 [0239.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a578 | out: hHeap=0x1f0000) returned 1 [0239.697] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a230 [0239.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a230 | out: hHeap=0x1f0000) returned 1 [0239.697] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1b7fe91, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1b7fe91, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1ec71c8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x20002, dwReserved1=0x2b0166, cFileName="api-ms-win-crt-utility-l1-1-0.dll", cAlternateFileName="AP80F4~1.DLL")) returned 1 [0239.697] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a84d8 [0239.697] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0998 [0239.697] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad078 [0239.698] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0998 | out: hHeap=0x1f0000) returned 1 [0239.698] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a188 | out: hHeap=0x1f0000) returned 1 [0239.698] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a84d8 | out: hHeap=0x1f0000) returned 1 [0239.699] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-utility-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-utility-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0239.699] GetFileType (hFile=0x1d4) returned 0x1 [0239.700] CloseHandle (hObject=0x1d4) returned 1 [0239.700] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2add68 [0239.700] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-utility-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-utility-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1b7fe91, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1b7fe91, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1ec71c8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0)) returned 1 [0239.700] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2add68 | out: hHeap=0x1f0000) returned 1 [0239.700] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2aded8 [0239.701] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-utility-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-utility-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1b7fe91, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1b7fe91, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1ec71c8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0)) returned 1 [0239.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aded8 | out: hHeap=0x1f0000) returned 1 [0239.701] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad410 [0239.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad410 | out: hHeap=0x1f0000) returned 1 [0239.701] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1b59cda, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1b59cda, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1f1370b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x34ad8, dwReserved0=0x20002, dwReserved1=0x2b0166, cFileName="AppVDllSurrogate32.exe", cAlternateFileName="APPVDL~2.EXE")) returned 1 [0239.701] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239010 [0239.701] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0ad0 [0239.701] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0239.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0ad0 | out: hHeap=0x1f0000) returned 1 [0239.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad078 | out: hHeap=0x1f0000) returned 1 [0239.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239010 | out: hHeap=0x1f0000) returned 1 [0239.702] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate32.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvdllsurrogate32.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0239.703] GetFileType (hFile=0x1d4) returned 0x1 [0239.703] CloseHandle (hObject=0x1d4) returned 1 [0239.703] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0239.703] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate32.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvdllsurrogate32.exe"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1b59cda, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1b59cda, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1f1370b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x34ad8)) returned 1 [0239.704] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0239.704] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0239.704] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate32.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvdllsurrogate32.exe"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1b59cda, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1b59cda, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1f1370b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x34ad8)) returned 1 [0239.704] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0239.704] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0239.704] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0239.704] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd153dc41, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd153dc41, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1e2e85a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3e4d8, dwReserved0=0x20002, dwReserved1=0x2b0166, cFileName="AppVDllSurrogate64.exe", cAlternateFileName="APPVDL~1.EXE")) returned 1 [0239.704] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2391d0 [0239.704] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0040 [0239.704] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0239.704] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0040 | out: hHeap=0x1f0000) returned 1 [0239.705] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0239.705] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2391d0 | out: hHeap=0x1f0000) returned 1 [0239.705] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate64.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvdllsurrogate64.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0239.705] GetFileType (hFile=0x1d4) returned 0x1 [0239.706] CloseHandle (hObject=0x1d4) returned 1 [0239.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0239.706] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate64.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvdllsurrogate64.exe"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd153dc41, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd153dc41, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1e2e85a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3e4d8)) returned 1 [0239.706] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0239.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0239.706] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate64.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvdllsurrogate64.exe"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd153dc41, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd153dc41, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1e2e85a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3e4d8)) returned 1 [0239.706] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0239.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0239.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0239.707] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x86813dc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86813dc4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86813dc4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2b0166, cFileName="AppvIsvStream32.dll", cAlternateFileName="APPVIS~1.DLL")) returned 1 [0239.707] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c20 [0239.707] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b06c0 [0239.707] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0239.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b06c0 | out: hHeap=0x1f0000) returned 1 [0239.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0239.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c20 | out: hHeap=0x1f0000) returned 1 [0239.707] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\AppvIsvStream32.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvisvstream32.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0239.708] GetLastError () returned 0x2 [0239.708] GetLastError () returned 0x2 [0239.709] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x86813dc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86813dc4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86813dc4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2b0166, cFileName="AppvIsvStream64.dll", cAlternateFileName="APPVIS~2.DLL")) returned 1 [0239.709] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238d00 [0239.709] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b01e0 [0239.709] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0239.709] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b01e0 | out: hHeap=0x1f0000) returned 1 [0239.709] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0239.709] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238d00 | out: hHeap=0x1f0000) returned 1 [0239.709] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\AppvIsvStream64.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvisvstream64.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0239.712] GetLastError () returned 0x2 [0239.712] GetLastError () returned 0x2 [0239.712] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x86813dc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86813dc4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86813dc4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2b0166, cFileName="AppvIsvSubsystems32.dll", cAlternateFileName="APPVIS~3.DLL")) returned 1 [0239.712] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238f30 [0239.712] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0728 [0239.713] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0239.713] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0728 | out: hHeap=0x1f0000) returned 1 [0239.713] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0239.713] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238f30 | out: hHeap=0x1f0000) returned 1 [0239.713] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\AppvIsvSubsystems32.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvisvsubsystems32.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0239.713] GetLastError () returned 0x2 [0239.714] GetLastError () returned 0x2 [0239.714] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x8683a0f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8683a0f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8683a0f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2b0166, cFileName="AppvIsvSubsystems64.dll", cAlternateFileName="APPVIS~4.DLL")) returned 1 [0239.714] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238d00 [0239.714] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0450 [0239.714] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0239.714] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0450 | out: hHeap=0x1f0000) returned 1 [0239.714] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0239.714] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238d00 | out: hHeap=0x1f0000) returned 1 [0239.715] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\AppvIsvSubsystems64.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvisvsubsystems64.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0239.715] GetLastError () returned 0x2 [0239.715] GetLastError () returned 0x2 [0239.715] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd153dc41, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd153dc41, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1e7acf5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x69630, dwReserved0=0xa000000c, dwReserved1=0x2b0166, cFileName="AppVLP.exe", cAlternateFileName="")) returned 1 [0239.715] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0239.715] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0040 [0239.715] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220eb8 [0239.715] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0040 | out: hHeap=0x1f0000) returned 1 [0239.715] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0239.715] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0239.716] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\AppVLP.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvlp.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0239.716] GetFileType (hFile=0x1d4) returned 0x1 [0239.717] CloseHandle (hObject=0x1d4) returned 1 [0239.717] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0239.717] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\AppVLP.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvlp.exe"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd153dc41, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd153dc41, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1e7acf5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x69630)) returned 1 [0239.717] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0239.717] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2132c8 [0239.717] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\AppVLP.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvlp.exe"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd153dc41, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd153dc41, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1e7acf5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x69630)) returned 1 [0239.718] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2132c8 | out: hHeap=0x1f0000) returned 1 [0239.718] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213818 [0239.718] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213818 | out: hHeap=0x1f0000) returned 1 [0239.718] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x8683a0f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8683a0f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8683a0f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2b0166, cFileName="C2R32.dll", cAlternateFileName="")) returned 1 [0239.718] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0239.718] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0998 [0239.718] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221118 [0239.718] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0998 | out: hHeap=0x1f0000) returned 1 [0239.719] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0239.719] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0239.719] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\C2R32.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\c2r32.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0239.720] GetLastError () returned 0x2 [0239.720] GetLastError () returned 0x2 [0239.720] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x8683a0f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8683a0f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8683a0f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2b0166, cFileName="C2R64.dll", cAlternateFileName="")) returned 1 [0239.720] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0239.720] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0450 [0239.720] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221378 [0239.720] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0450 | out: hHeap=0x1f0000) returned 1 [0239.720] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0239.721] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0239.721] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\C2R64.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\c2r64.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0239.722] GetLastError () returned 0x2 [0239.722] GetLastError () returned 0x2 [0239.722] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd11f68b6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd11f68b6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd191da0e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x514a8, dwReserved0=0xa000000c, dwReserved1=0x2b0166, cFileName="concrt140.dll", cAlternateFileName="CONCRT~1.DLL")) returned 1 [0239.722] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0239.722] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0998 [0239.722] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2212e0 [0239.722] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0998 | out: hHeap=0x1f0000) returned 1 [0239.722] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0239.722] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0239.723] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\concrt140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\concrt140.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0239.724] GetFileType (hFile=0x1d4) returned 0x1 [0239.724] CloseHandle (hObject=0x1d4) returned 1 [0239.724] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212a48 [0239.724] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\concrt140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\concrt140.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd11f68b6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd11f68b6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd191da0e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x514a8)) returned 1 [0239.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212a48 | out: hHeap=0x1f0000) returned 1 [0239.725] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0239.725] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\concrt140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\concrt140.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd11f68b6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd11f68b6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd191da0e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x514a8)) returned 1 [0239.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0239.725] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0239.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0239.725] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1242d5d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1242d5d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1bcc41c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5644a0, dwReserved0=0xa000000c, dwReserved1=0x2b0166, cFileName="mfc140u.dll", cAlternateFileName="")) returned 1 [0239.726] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605b8 [0239.726] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2affd8 [0239.726] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220fe8 [0239.726] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2affd8 | out: hHeap=0x1f0000) returned 1 [0239.726] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0239.726] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0239.727] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\mfc140u.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\mfc140u.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0239.727] GetFileType (hFile=0x1d4) returned 0x1 [0239.728] CloseHandle (hObject=0x1d4) returned 1 [0239.728] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0239.728] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\mfc140u.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\mfc140u.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1242d5d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1242d5d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1bcc41c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5644a0)) returned 1 [0239.729] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0239.729] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0239.729] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\mfc140u.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\mfc140u.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1242d5d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1242d5d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1bcc41c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5644a0)) returned 1 [0239.729] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0239.729] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213570 [0239.729] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213570 | out: hHeap=0x1f0000) returned 1 [0239.729] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1f5fb21, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1f5fb21, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd244aa14, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xa12a8, dwReserved0=0xa000000c, dwReserved1=0x2b0166, cFileName="msvcp120.dll", cAlternateFileName="")) returned 1 [0239.729] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0239.729] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0ad0 [0239.730] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221968 [0239.730] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0ad0 | out: hHeap=0x1f0000) returned 1 [0239.730] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0239.730] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0239.730] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\msvcp120.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcp120.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0239.731] GetFileType (hFile=0x1d4) returned 0x1 [0239.731] CloseHandle (hObject=0x1d4) returned 1 [0239.732] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f10 [0239.732] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\msvcp120.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcp120.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1f5fb21, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1f5fb21, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd244aa14, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xa12a8)) returned 1 [0239.732] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f10 | out: hHeap=0x1f0000) returned 1 [0239.732] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0239.732] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\msvcp120.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcp120.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1f5fb21, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1f5fb21, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd244aa14, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xa12a8)) returned 1 [0239.733] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0239.733] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0239.733] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0239.733] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1ea0ff2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1ea0ff2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd20449b3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x9b0a0, dwReserved0=0xa000000c, dwReserved1=0x2b0166, cFileName="msvcp140.dll", cAlternateFileName="")) returned 1 [0239.733] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604c8 [0239.733] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b02b0 [0239.733] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221708 [0239.733] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b02b0 | out: hHeap=0x1f0000) returned 1 [0239.733] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0239.733] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604c8 | out: hHeap=0x1f0000) returned 1 [0240.000] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\msvcp140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcp140.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0240.001] GetFileType (hFile=0x230) returned 0x1 [0240.001] CloseHandle (hObject=0x230) returned 1 [0240.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0240.001] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\msvcp140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcp140.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1ea0ff2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1ea0ff2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd20449b3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x9b0a0)) returned 1 [0240.002] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0240.002] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0240.002] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\msvcp140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcp140.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1ea0ff2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1ea0ff2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd20449b3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x9b0a0)) returned 1 [0240.002] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0240.002] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0240.002] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0240.002] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1e7acf5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1e7acf5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1fac086, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xeb2a8, dwReserved0=0xa000000c, dwReserved1=0x2b0166, cFileName="msvcr120.dll", cAlternateFileName="")) returned 1 [0240.002] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260838 [0240.002] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0998 [0240.002] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221080 [0240.002] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0998 | out: hHeap=0x1f0000) returned 1 [0240.003] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0240.003] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260838 | out: hHeap=0x1f0000) returned 1 [0240.003] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\msvcr120.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcr120.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0240.003] GetFileType (hFile=0x230) returned 0x1 [0240.004] CloseHandle (hObject=0x230) returned 1 [0240.004] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0240.004] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\msvcr120.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcr120.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1e7acf5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1e7acf5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1fac086, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xeb2a8)) returned 1 [0240.004] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0240.004] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e88 [0240.004] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\msvcr120.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcr120.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1e7acf5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1e7acf5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1fac086, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xeb2a8)) returned 1 [0240.005] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e88 | out: hHeap=0x1f0000) returned 1 [0240.005] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0240.005] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0240.005] GetLastError () returned 0x0 [0240.005] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0240.005] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228a28 [0240.005] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2627e8 [0240.005] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0240.005] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239278 [0240.005] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260838 [0240.005] CryptAcquireContextA (in: phProv=0x1fde1b8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1fde1b8*=0x213790) returned 1 [0240.006] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x260838 | out: pbBuffer=0x260838) returned 1 [0240.006] CryptReleaseContext (hProv=0x213790, dwFlags=0x0) returned 1 [0240.007] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260838 | out: hHeap=0x1f0000) returned 1 [0240.007] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x269ba8 [0240.007] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2afe68 [0240.007] QueryPerformanceCounter (in: lpPerformanceCount=0x1fde14c | out: lpPerformanceCount=0x1fde14c*=39737564868) returned 1 [0240.007] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1fde18c | out: lpSystemTimeAsFileTime=0x1fde18c) [0240.007] QueryPerformanceCounter (in: lpPerformanceCount=0x1fde14c | out: lpPerformanceCount=0x1fde14c*=39737595854) returned 1 [0240.007] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1fde18c | out: lpSystemTimeAsFileTime=0x1fde18c) [0240.007] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x2392b0 [0240.007] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x26fad0 [0240.007] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2af8f0 [0240.007] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x233498 [0240.008] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f7e8 [0240.008] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206628 [0240.008] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f698 [0240.008] GetLastError () returned 0x0 [0240.008] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0240.008] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x236818 [0240.008] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0240.008] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x140) returned 0x22d368 [0240.008] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236818 | out: hHeap=0x1f0000) returned 1 [0240.008] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238920 [0240.009] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238820 [0240.009] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\msvcr120.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcr120.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde058, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0240.010] GetFileType (hFile=0x230) returned 0x1 [0240.010] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238930 [0240.014] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238940 [0240.014] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\msvcr120.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcr120.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde088, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0240.014] GetFileType (hFile=0x220) returned 0x1 [0240.014] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d10 [0240.014] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cf0 [0240.014] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad860 [0240.015] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238950 [0240.015] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238850 [0240.016] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\msvcr120.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcr120.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1fddfd4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0240.016] GetFileType (hFile=0x1d4) returned 0x1 [0240.016] GetLastError () returned 0xb7 [0240.017] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe4) returned 0x239be0 [0240.017] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d10 [0240.017] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204dd0 [0240.017] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ef0 [0240.017] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad1e8 [0240.017] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238860 [0240.017] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238870 [0240.018] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\msvcr120.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcr120.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1fddfd4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0240.018] GetFileType (hFile=0x1f4) returned 0x1 [0240.018] GetLastError () returned 0xb7 [0240.019] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c90 [0240.019] GetLastError () returned 0xb7 [0240.019] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ef0 [0240.019] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f50 [0240.019] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c30 [0240.019] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb8) returned 0x236f60 [0240.019] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b40 [0240.019] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a70 [0240.020] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\msvcr120.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcr120.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x1fddfcc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0240.020] GetFileType (hFile=0x204) returned 0x1 [0240.020] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28bfc0 [0240.020] ReadFile (in: hFile=0x204, lpBuffer=0x28bfc0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fddf28, lpOverlapped=0x0 | out: lpBuffer=0x28bfc0*, lpNumberOfBytesRead=0x1fddf28*=0x1000, lpOverlapped=0x0) returned 1 [0240.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24a9c8 [0240.049] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28efd8 [0240.049] GetLastError () returned 0x0 [0240.639] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f9c8 [0240.640] GetLastError () returned 0x0 [0240.905] CloseHandle (hObject=0x230) returned 1 [0240.907] CloseHandle (hObject=0x220) returned 1 [0240.907] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2387e0 [0240.908] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238810 [0240.917] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\msvcr120.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcr120.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde088, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0240.933] GetFileType (hFile=0x220) returned 0x1 [0240.934] GetLastError () returned 0xb7 [0240.934] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x290fe8 [0240.934] GetLastError () returned 0xb7 [0240.936] CloseHandle (hObject=0x220) returned 1 [0240.936] DeleteFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\msvcr120.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcr120.dll")) returned 0 [0240.937] GetLastError () returned 0x20 [0240.937] GetLastError () returned 0x20 [0240.937] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228908 [0240.937] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260540 [0240.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260568 [0240.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x228998 [0240.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f50 [0240.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c30 [0240.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x238990 [0240.938] GetLastError () returned 0x20 [0240.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238e18 [0240.938] GetLastError () returned 0x20 [0240.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238e50 [0240.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0998 [0240.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2605b8 [0240.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2851a0 [0240.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389b0 [0240.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609a0 [0240.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f998 [0240.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238830 [0240.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0240.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f9b0 [0240.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260748 [0240.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2853b0 [0240.940] GetLastError () returned 0x20 [0240.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238a90 [0240.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238b00 [0240.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b60 [0240.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b00 | out: hHeap=0x1f0000) returned 1 [0240.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238aa0 [0240.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b60 | out: hHeap=0x1f0000) returned 1 [0240.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a90 | out: hHeap=0x1f0000) returned 1 [0240.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a60 [0240.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f860 [0240.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a60 | out: hHeap=0x1f0000) returned 1 [0240.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f680 [0240.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f860 | out: hHeap=0x1f0000) returned 1 [0240.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238aa0 | out: hHeap=0x1f0000) returned 1 [0240.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f668 [0240.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f890 [0240.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f668 | out: hHeap=0x1f0000) returned 1 [0240.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f620 [0240.943] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f890 | out: hHeap=0x1f0000) returned 1 [0240.943] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f680 | out: hHeap=0x1f0000) returned 1 [0240.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f890 [0240.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204f10 [0240.943] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f890 | out: hHeap=0x1f0000) returned 1 [0240.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e50 [0240.943] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f10 | out: hHeap=0x1f0000) returned 1 [0240.944] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f620 | out: hHeap=0x1f0000) returned 1 [0240.944] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f10 [0240.944] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260630 [0240.944] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f10 | out: hHeap=0x1f0000) returned 1 [0240.944] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204bb0 [0240.944] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260630 | out: hHeap=0x1f0000) returned 1 [0240.944] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e50 | out: hHeap=0x1f0000) returned 1 [0240.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204bd0 [0240.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206928 [0240.945] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bd0 | out: hHeap=0x1f0000) returned 1 [0240.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260630 [0240.945] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206928 | out: hHeap=0x1f0000) returned 1 [0240.945] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bb0 | out: hHeap=0x1f0000) returned 1 [0240.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a30 [0240.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f6e0 [0240.946] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a30 | out: hHeap=0x1f0000) returned 1 [0240.946] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f6b0 [0240.946] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f6e0 | out: hHeap=0x1f0000) returned 1 [0240.946] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204d30 [0240.946] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f6b0 | out: hHeap=0x1f0000) returned 1 [0240.946] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x2068c8 [0240.946] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d30 | out: hHeap=0x1f0000) returned 1 [0240.946] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2068c8 | out: hHeap=0x1f0000) returned 1 [0240.947] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260630 | out: hHeap=0x1f0000) returned 1 [0240.947] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0240.947] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0240.947] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2851a0 | out: hHeap=0x1f0000) returned 1 [0240.947] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0240.947] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238ef8 [0240.947] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260770 [0240.947] CryptAcquireContextA (in: phProv=0x1fde1b8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1fde1b8*=0x213818) returned 1 [0240.949] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x260770 | out: pbBuffer=0x260770) returned 1 [0240.949] CryptReleaseContext (hProv=0x213818, dwFlags=0x0) returned 1 [0240.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0240.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260838 [0240.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260540 [0240.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238f30 [0240.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260838 | out: hHeap=0x1f0000) returned 1 [0240.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0240.950] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238f30 | out: hHeap=0x1f0000) returned 1 [0240.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8e20 [0240.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f620 [0240.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x2b06c0 [0240.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2605b8 [0240.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2857d0 [0240.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d90 [0240.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0c08 [0240.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260630 [0240.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285098 [0240.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ba0 [0240.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260658 [0240.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f770 [0240.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ae0 [0240.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260838 [0240.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f788 [0240.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f788 | out: hHeap=0x1f0000) returned 1 [0240.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260838 | out: hHeap=0x1f0000) returned 1 [0240.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ae0 | out: hHeap=0x1f0000) returned 1 [0240.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f770 | out: hHeap=0x1f0000) returned 1 [0240.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260658 | out: hHeap=0x1f0000) returned 1 [0240.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ba0 | out: hHeap=0x1f0000) returned 1 [0240.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285098 | out: hHeap=0x1f0000) returned 1 [0240.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260630 | out: hHeap=0x1f0000) returned 1 [0240.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0c08 | out: hHeap=0x1f0000) returned 1 [0240.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238cc8 [0241.282] GetLastError () returned 0x0 [0241.282] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238e50 [0241.282] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0241.283] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0241.283] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0241.283] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0241.283] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0241.283] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0241.283] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x24e5c0 [0241.283] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2851a0 [0241.283] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0241.284] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0241.284] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0241.284] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0241.284] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x284f90 [0241.284] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0241.284] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0241.284] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x230190 [0241.284] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x276d00 [0241.284] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2afc38 [0241.284] QueryPerformanceCounter (in: lpPerformanceCount=0x1fddd08 | out: lpPerformanceCount=0x1fddd08*=39865340654) returned 1 [0241.285] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1fddd48 | out: lpSystemTimeAsFileTime=0x1fddd48) [0241.285] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238b50 [0241.285] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260770 [0241.285] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bd0 [0241.285] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bd0 | out: hHeap=0x1f0000) returned 1 [0241.285] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0241.285] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0241.285] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cf0 [0241.285] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cf0 | out: hHeap=0x1f0000) returned 1 [0241.286] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0241.286] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b50 | out: hHeap=0x1f0000) returned 1 [0241.286] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0241.286] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238f30 [0241.286] GetLastError () returned 0x0 [0241.286] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0241.286] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0241.286] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0241.286] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260770 [0241.286] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260950 [0241.287] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0241.287] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0241.287] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260b30 [0241.287] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0241.287] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x222ee8 [0241.287] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0241.287] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x22b018 [0241.287] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0241.287] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x25ffe8 [0241.287] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b018 | out: hHeap=0x1f0000) returned 1 [0241.287] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260a18 [0241.288] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2609f0 [0241.288] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a18 | out: hHeap=0x1f0000) returned 1 [0241.288] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0241.288] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609f0 | out: hHeap=0x1f0000) returned 1 [0241.288] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x22b018 [0241.288] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x234b90 [0241.288] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b90 | out: hHeap=0x1f0000) returned 1 [0241.288] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b018 | out: hHeap=0x1f0000) returned 1 [0241.288] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25ffe8 | out: hHeap=0x1f0000) returned 1 [0241.288] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f8a8 [0241.288] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228cb0 [0241.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260b58 [0241.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260ba8 [0241.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260a40 [0241.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260c20 [0241.289] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ba8 | out: hHeap=0x1f0000) returned 1 [0241.289] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b58 | out: hHeap=0x1f0000) returned 1 [0241.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x22b018 [0241.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260c48 [0241.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260c70 [0241.289] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0241.290] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0241.290] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c70 | out: hHeap=0x1f0000) returned 1 [0241.290] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2067d8 [0241.290] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x2a9840 [0241.290] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a9840 | out: hHeap=0x1f0000) returned 1 [0241.290] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2067d8 | out: hHeap=0x1f0000) returned 1 [0241.290] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b30 | out: hHeap=0x1f0000) returned 1 [0241.290] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac360 [0241.290] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0241.291] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b018 | out: hHeap=0x1f0000) returned 1 [0241.291] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204bb0 [0241.291] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aafb8 [0241.291] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab6a8 [0241.291] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0241.291] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac6d8 [0241.291] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab6a8 | out: hHeap=0x1f0000) returned 1 [0241.291] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c20 | out: hHeap=0x1f0000) returned 1 [0241.291] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0241.292] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228cb0 | out: hHeap=0x1f0000) returned 1 [0241.292] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aafb8 | out: hHeap=0x1f0000) returned 1 [0241.292] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bb0 | out: hHeap=0x1f0000) returned 1 [0241.292] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f8a8 | out: hHeap=0x1f0000) returned 1 [0241.292] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0241.292] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac110 [0241.292] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac110 | out: hHeap=0x1f0000) returned 1 [0241.292] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ee8 | out: hHeap=0x1f0000) returned 1 [0241.292] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0241.293] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac360 | out: hHeap=0x1f0000) returned 1 [0241.293] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0241.293] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0241.293] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0241.293] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0241.293] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0241.293] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aca50 [0241.293] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abec0 [0241.293] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aca50 | out: hHeap=0x1f0000) returned 1 [0241.294] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abec0 | out: hHeap=0x1f0000) returned 1 [0241.294] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac6d8 | out: hHeap=0x1f0000) returned 1 [0241.294] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0241.294] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x284f90 | out: hHeap=0x1f0000) returned 1 [0241.294] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24e5c0 | out: hHeap=0x1f0000) returned 1 [0241.294] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x2ae770 [0241.294] GetLastError () returned 0x0 [0241.295] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b50 [0241.541] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a00 [0241.542] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\msvcr120.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcr120.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde0b8, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0241.543] GetFileType (hFile=0x1e0) returned 0x1 [0241.578] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28dfd0 [0241.578] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1fde040 | out: lpNewFilePointer=0x0) returned 1 [0241.579] GetLastError () returned 0xb7 [0241.579] CloseHandle (hObject=0x1e0) returned 1 [0241.580] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a00 | out: hHeap=0x1f0000) returned 1 [0241.580] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b50 | out: hHeap=0x1f0000) returned 1 [0241.580] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2851a0 | out: hHeap=0x1f0000) returned 1 [0241.580] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2857d0 | out: hHeap=0x1f0000) returned 1 [0241.581] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0241.581] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d90 | out: hHeap=0x1f0000) returned 1 [0241.581] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b06c0 | out: hHeap=0x1f0000) returned 1 [0241.581] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f620 | out: hHeap=0x1f0000) returned 1 [0241.581] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8e20 | out: hHeap=0x1f0000) returned 1 [0241.581] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae770 | out: hHeap=0x1f0000) returned 1 [0241.581] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0241.581] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0241.581] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x276d00 | out: hHeap=0x1f0000) returned 1 [0241.582] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2afc38 | out: hHeap=0x1f0000) returned 1 [0241.582] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ef8 | out: hHeap=0x1f0000) returned 1 [0241.582] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238990 | out: hHeap=0x1f0000) returned 1 [0241.582] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f9b0 | out: hHeap=0x1f0000) returned 1 [0241.582] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0241.582] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238830 | out: hHeap=0x1f0000) returned 1 [0241.582] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f998 | out: hHeap=0x1f0000) returned 1 [0241.582] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0241.582] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389b0 | out: hHeap=0x1f0000) returned 1 [0241.583] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2853b0 | out: hHeap=0x1f0000) returned 1 [0241.583] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0241.583] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0998 | out: hHeap=0x1f0000) returned 1 [0241.583] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228998 | out: hHeap=0x1f0000) returned 1 [0241.583] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0241.583] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0241.583] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228908 | out: hHeap=0x1f0000) returned 1 [0241.583] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238810 | out: hHeap=0x1f0000) returned 1 [0241.583] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387e0 | out: hHeap=0x1f0000) returned 1 [0241.584] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28bfc0 | out: hHeap=0x1f0000) returned 1 [0241.584] CloseHandle (hObject=0x204) returned 1 [0241.585] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a70 | out: hHeap=0x1f0000) returned 1 [0241.585] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b40 | out: hHeap=0x1f0000) returned 1 [0241.585] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236f60 | out: hHeap=0x1f0000) returned 1 [0241.585] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24a9c8 | out: hHeap=0x1f0000) returned 1 [0241.585] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f9c8 | out: hHeap=0x1f0000) returned 1 [0241.585] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ef0 | out: hHeap=0x1f0000) returned 1 [0241.586] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28efd8 | out: hHeap=0x1f0000) returned 1 [0241.586] CloseHandle (hObject=0x1f4) returned 1 [0241.587] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238870 | out: hHeap=0x1f0000) returned 1 [0241.587] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238860 | out: hHeap=0x1f0000) returned 1 [0241.587] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad1e8 | out: hHeap=0x1f0000) returned 1 [0241.587] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d10 | out: hHeap=0x1f0000) returned 1 [0241.587] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239be0 | out: hHeap=0x1f0000) returned 1 [0241.587] CloseHandle (hObject=0x1d4) returned 1 [0241.588] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238850 | out: hHeap=0x1f0000) returned 1 [0241.588] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238950 | out: hHeap=0x1f0000) returned 1 [0241.588] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad860 | out: hHeap=0x1f0000) returned 1 [0241.589] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238940 | out: hHeap=0x1f0000) returned 1 [0241.589] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238930 | out: hHeap=0x1f0000) returned 1 [0241.589] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238820 | out: hHeap=0x1f0000) returned 1 [0241.589] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238920 | out: hHeap=0x1f0000) returned 1 [0241.589] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d368 | out: hHeap=0x1f0000) returned 1 [0241.589] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x26fad0 | out: hHeap=0x1f0000) returned 1 [0241.589] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2af8f0 | out: hHeap=0x1f0000) returned 1 [0241.589] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206628 | out: hHeap=0x1f0000) returned 1 [0241.590] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f698 | out: hHeap=0x1f0000) returned 1 [0241.590] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f7e8 | out: hHeap=0x1f0000) returned 1 [0241.590] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233498 | out: hHeap=0x1f0000) returned 1 [0241.590] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x269ba8 | out: hHeap=0x1f0000) returned 1 [0241.590] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2afe68 | out: hHeap=0x1f0000) returned 1 [0241.590] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239278 | out: hHeap=0x1f0000) returned 1 [0241.590] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0241.591] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2627e8 | out: hHeap=0x1f0000) returned 1 [0241.591] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228a28 | out: hHeap=0x1f0000) returned 1 [0241.591] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0241.591] DeleteFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\msvcr120.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcr120.dll")) returned 1 [0241.593] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1e2e85a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1e2e85a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1f5fb21, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xefec0, dwReserved0=0xa000000c, dwReserved1=0x2b0166, cFileName="ucrtbase.dll", cAlternateFileName="")) returned 1 [0241.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609a0 [0241.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b03e8 [0241.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220cf0 [0241.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b03e8 | out: hHeap=0x1f0000) returned 1 [0241.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0241.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0241.595] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\ucrtbase.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\ucrtbase.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0241.596] GetFileType (hFile=0x1d4) returned 0x1 [0241.597] CloseHandle (hObject=0x1d4) returned 1 [0241.597] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0241.597] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\ucrtbase.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\ucrtbase.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1e2e85a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1e2e85a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1f5fb21, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xefec0)) returned 1 [0241.597] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0241.598] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213790 [0241.598] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\ucrtbase.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\ucrtbase.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1e2e85a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1e2e85a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1f5fb21, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xefec0)) returned 1 [0241.598] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213790 | out: hHeap=0x1f0000) returned 1 [0241.598] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0241.598] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0241.598] GetLastError () returned 0x0 [0241.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0241.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228998 [0241.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2627e8 [0241.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0241.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238ef8 [0241.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260540 [0241.600] CryptAcquireContextA (in: phProv=0x1fde1b8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1fde1b8*=0x213130) returned 1 [0241.601] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x260540 | out: pbBuffer=0x260540) returned 1 [0241.601] CryptReleaseContext (hProv=0x213130, dwFlags=0x0) returned 1 [0241.601] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0241.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x270dd8 [0241.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2af5a8 [0241.602] QueryPerformanceCounter (in: lpPerformanceCount=0x1fde14c | out: lpPerformanceCount=0x1fde14c*=39897090486) returned 1 [0241.602] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1fde18c | out: lpSystemTimeAsFileTime=0x1fde18c) [0241.602] QueryPerformanceCounter (in: lpPerformanceCount=0x1fde14c | out: lpPerformanceCount=0x1fde14c*=39897146730) returned 1 [0241.603] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1fde18c | out: lpSystemTimeAsFileTime=0x1fde18c) [0241.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238fd8 [0241.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x26fad0 [0241.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2afb20 [0241.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x232e18 [0241.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f740 [0241.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206808 [0241.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f890 [0241.604] GetLastError () returned 0x0 [0241.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0241.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x22b188 [0241.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0241.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x140) returned 0x20c3a8 [0241.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b188 | out: hHeap=0x1f0000) returned 1 [0241.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238920 [0241.606] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238930 [0241.607] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\ucrtbase.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\root\\client\\ucrtbase.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde058, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0241.608] GetFileType (hFile=0x1d4) returned 0x1 [0241.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238940 [0242.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a70 [0242.002] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\ucrtbase.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\ucrtbase.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde088, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1a4 [0242.002] GetFileType (hFile=0x1a4) returned 0x1 [0242.003] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d90 [0242.003] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204b90 [0242.003] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad2a0 [0242.003] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ac0 [0242.003] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ad0 [0242.004] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\ucrtbase.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\root\\client\\ucrtbase.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1fddfd4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0242.005] GetFileType (hFile=0x200) returned 0x1 [0242.005] GetLastError () returned 0xb7 [0242.005] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe4) returned 0x22d368 [0242.005] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c30 [0242.006] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204b90 [0242.006] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cd0 [0242.006] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad4c8 [0242.006] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a60 [0242.006] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b50 [0242.007] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\ucrtbase.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\root\\client\\ucrtbase.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1fddfd4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0242.007] GetFileType (hFile=0x1e8) returned 0x1 [0242.007] GetLastError () returned 0xb7 [0242.007] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c50 [0242.007] GetLastError () returned 0xb7 [0242.007] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bf0 [0242.008] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e90 [0242.008] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cd0 [0242.008] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb8) returned 0x2373e0 [0242.008] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ae0 [0242.008] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a80 [0242.009] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\ucrtbase.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\ucrtbase.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x1fddfcc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0242.009] GetFileType (hFile=0x1fc) returned 0x1 [0242.009] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28cfc8 [0242.009] ReadFile (in: hFile=0x1fc, lpBuffer=0x28cfc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fddf28, lpOverlapped=0x0 | out: lpBuffer=0x28cfc8*, lpNumberOfBytesRead=0x1fddf28*=0x1000, lpOverlapped=0x0) returned 1 [0242.037] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x249db0 [0242.038] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x287fa0 [0242.038] GetLastError () returned 0x0 [0242.511] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f9b0 [0242.511] GetLastError () returned 0x0 [0242.512] CloseHandle (hObject=0x1d4) returned 1 [0242.513] CloseHandle (hObject=0x1a4) returned 1 [0242.513] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389c0 [0242.513] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238960 [0242.536] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\ucrtbase.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\ucrtbase.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde088, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0242.582] GetFileType (hFile=0x22c) returned 0x1 [0242.582] GetLastError () returned 0xb7 [0242.583] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x291ff0 [0242.583] GetLastError () returned 0xb7 [0242.585] CloseHandle (hObject=0x22c) returned 1 [0242.585] DeleteFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\ucrtbase.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\ucrtbase.dll")) returned 0 [0242.585] GetLastError () returned 0x20 [0242.585] GetLastError () returned 0x20 [0242.585] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228b00 [0242.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260518 [0242.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2605b8 [0242.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x228b48 [0242.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cd0 [0242.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c50 [0242.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x238b30 [0242.586] GetLastError () returned 0x20 [0242.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239010 [0242.586] GetLastError () returned 0x20 [0242.587] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238e18 [0242.587] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b05f0 [0242.587] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260770 [0242.587] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285ae8 [0242.587] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a10 [0242.587] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0242.587] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f6b0 [0242.587] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b40 [0242.587] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260630 [0242.587] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f8f0 [0242.587] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260658 [0242.588] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285cf8 [0242.588] GetLastError () returned 0x20 [0242.588] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238a40 [0242.588] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238aa0 [0242.588] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b90 [0242.588] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238aa0 | out: hHeap=0x1f0000) returned 1 [0242.588] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238aa0 [0242.588] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b90 | out: hHeap=0x1f0000) returned 1 [0242.588] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a40 | out: hHeap=0x1f0000) returned 1 [0242.588] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a50 [0242.589] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f8a8 [0242.589] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a50 | out: hHeap=0x1f0000) returned 1 [0242.589] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f620 [0242.589] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f8a8 | out: hHeap=0x1f0000) returned 1 [0242.589] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238aa0 | out: hHeap=0x1f0000) returned 1 [0242.589] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f8a8 [0242.589] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f8c0 [0242.589] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f8a8 | out: hHeap=0x1f0000) returned 1 [0242.589] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f818 [0242.589] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f8c0 | out: hHeap=0x1f0000) returned 1 [0242.590] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f620 | out: hHeap=0x1f0000) returned 1 [0242.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f860 [0242.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204bb0 [0242.590] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f860 | out: hHeap=0x1f0000) returned 1 [0242.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bd0 [0242.590] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bb0 | out: hHeap=0x1f0000) returned 1 [0242.590] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f818 | out: hHeap=0x1f0000) returned 1 [0242.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c50 [0242.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260888 [0242.590] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c50 | out: hHeap=0x1f0000) returned 1 [0242.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204cb0 [0242.591] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0242.591] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bd0 | out: hHeap=0x1f0000) returned 1 [0242.591] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204c50 [0242.591] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x2067d8 [0242.591] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c50 | out: hHeap=0x1f0000) returned 1 [0242.591] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260888 [0242.591] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2067d8 | out: hHeap=0x1f0000) returned 1 [0242.591] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cb0 | out: hHeap=0x1f0000) returned 1 [0242.591] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b60 [0242.591] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f6c8 [0242.591] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b60 | out: hHeap=0x1f0000) returned 1 [0242.591] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f7e8 [0242.591] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f6c8 | out: hHeap=0x1f0000) returned 1 [0242.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204dd0 [0242.592] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f7e8 | out: hHeap=0x1f0000) returned 1 [0242.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206838 [0242.592] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204dd0 | out: hHeap=0x1f0000) returned 1 [0242.592] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206838 | out: hHeap=0x1f0000) returned 1 [0242.592] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0242.592] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0242.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0242.592] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285ae8 | out: hHeap=0x1f0000) returned 1 [0242.592] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0242.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2391d0 [0242.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260888 [0242.593] CryptAcquireContextA (in: phProv=0x1fde1b8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1fde1b8*=0x2132c8) returned 1 [0242.594] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x260888 | out: pbBuffer=0x260888) returned 1 [0242.594] CryptReleaseContext (hProv=0x2132c8, dwFlags=0x0) returned 1 [0242.595] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0242.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260518 [0242.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260770 [0242.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c20 [0242.595] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0242.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0242.595] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c20 | out: hHeap=0x1f0000) returned 1 [0242.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8dc8 [0242.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f7a0 [0242.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x2b0658 [0242.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260518 [0242.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2852a8 [0242.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c50 [0242.596] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0318 [0242.596] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260888 [0242.596] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2854b8 [0242.596] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b60 [0242.596] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0242.596] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f848 [0242.596] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b70 [0242.596] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c48 [0242.596] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f7b8 [0242.596] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f7b8 | out: hHeap=0x1f0000) returned 1 [0242.596] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0242.596] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b70 | out: hHeap=0x1f0000) returned 1 [0242.596] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f848 | out: hHeap=0x1f0000) returned 1 [0242.597] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0242.597] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b60 | out: hHeap=0x1f0000) returned 1 [0242.597] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2854b8 | out: hHeap=0x1f0000) returned 1 [0242.597] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0242.597] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0318 | out: hHeap=0x1f0000) returned 1 [0242.597] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239208 [0242.597] GetLastError () returned 0x0 [0242.597] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238e50 [0242.597] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0242.597] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0242.597] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0242.597] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0242.598] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0242.598] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0242.598] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x24e980 [0242.598] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2857d0 [0242.598] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0242.598] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0242.598] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0242.598] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0242.598] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2859e0 [0242.598] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0242.599] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0242.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x230320 [0242.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x267598 [0242.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2ae9a0 [0242.599] QueryPerformanceCounter (in: lpPerformanceCount=0x1fddd08 | out: lpPerformanceCount=0x1fddd08*=39996792078) returned 1 [0242.599] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x1fddd48 | out: lpSystemTimeAsFileTime=0x1fddd48) [0242.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238a40 [0242.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260888 [0242.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204dd0 [0242.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204dd0 | out: hHeap=0x1f0000) returned 1 [0242.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0242.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260888 [0242.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cb0 [0242.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cb0 | out: hHeap=0x1f0000) returned 1 [0242.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0242.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a40 | out: hHeap=0x1f0000) returned 1 [0242.601] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0242.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239010 [0242.601] GetLastError () returned 0x0 [0242.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0242.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0242.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0242.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260888 [0242.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2608d8 [0242.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0242.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0242.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260a18 [0242.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0242.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x222ee8 [0242.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0242.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0242.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0242.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x25ffe8 [0242.603] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0242.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260c48 [0242.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260b58 [0242.603] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0242.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0242.603] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b58 | out: hHeap=0x1f0000) returned 1 [0242.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0242.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x234b90 [0242.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b90 | out: hHeap=0x1f0000) returned 1 [0242.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0242.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25ffe8 | out: hHeap=0x1f0000) returned 1 [0242.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f758 [0242.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228638 [0242.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260c48 [0242.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260c70 [0242.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2609f0 [0242.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260a40 [0242.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c70 | out: hHeap=0x1f0000) returned 1 [0242.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0242.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0242.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260a68 [0242.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260c48 [0242.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a68 | out: hHeap=0x1f0000) returned 1 [0242.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0242.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0242.606] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206928 [0242.606] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x2aa0d0 [0242.606] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aa0d0 | out: hHeap=0x1f0000) returned 1 [0242.606] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206928 | out: hHeap=0x1f0000) returned 1 [0242.606] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a18 | out: hHeap=0x1f0000) returned 1 [0242.606] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac5b0 [0242.606] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0242.606] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0242.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204e70 [0242.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac110 [0242.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aca50 [0242.607] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0242.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abec0 [0242.607] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aca50 | out: hHeap=0x1f0000) returned 1 [0242.607] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0242.607] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609f0 | out: hHeap=0x1f0000) returned 1 [0242.607] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228638 | out: hHeap=0x1f0000) returned 1 [0242.607] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac110 | out: hHeap=0x1f0000) returned 1 [0242.608] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e70 | out: hHeap=0x1f0000) returned 1 [0242.608] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f758 | out: hHeap=0x1f0000) returned 1 [0242.608] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0242.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab6a8 [0242.608] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab6a8 | out: hHeap=0x1f0000) returned 1 [0242.608] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ee8 | out: hHeap=0x1f0000) returned 1 [0242.608] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0242.608] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac5b0 | out: hHeap=0x1f0000) returned 1 [0242.608] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0242.608] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0242.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0242.892] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0242.892] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0242.892] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac800 [0242.892] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab208 [0242.892] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac800 | out: hHeap=0x1f0000) returned 1 [0242.893] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab208 | out: hHeap=0x1f0000) returned 1 [0242.893] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abec0 | out: hHeap=0x1f0000) returned 1 [0242.893] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0242.893] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2859e0 | out: hHeap=0x1f0000) returned 1 [0242.893] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24e980 | out: hHeap=0x1f0000) returned 1 [0242.893] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x2af490 [0242.893] GetLastError () returned 0x0 [0242.893] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c660 [0242.894] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c6d0 [0242.894] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\ucrtbase.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\root\\client\\ucrtbase.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde0b8, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0242.895] GetFileType (hFile=0x224) returned 0x1 [0242.895] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28dfd0 [0242.895] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1fde040 | out: lpNewFilePointer=0x0) returned 1 [0242.895] GetLastError () returned 0xb7 [0242.896] CloseHandle (hObject=0x224) returned 1 [0242.896] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c6d0 | out: hHeap=0x1f0000) returned 1 [0242.896] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c660 | out: hHeap=0x1f0000) returned 1 [0242.896] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2857d0 | out: hHeap=0x1f0000) returned 1 [0242.896] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2852a8 | out: hHeap=0x1f0000) returned 1 [0242.896] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0242.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c50 | out: hHeap=0x1f0000) returned 1 [0242.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0658 | out: hHeap=0x1f0000) returned 1 [0242.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f7a0 | out: hHeap=0x1f0000) returned 1 [0242.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8dc8 | out: hHeap=0x1f0000) returned 1 [0242.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2af490 | out: hHeap=0x1f0000) returned 1 [0242.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0242.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0242.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x267598 | out: hHeap=0x1f0000) returned 1 [0242.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae9a0 | out: hHeap=0x1f0000) returned 1 [0242.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2391d0 | out: hHeap=0x1f0000) returned 1 [0242.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b30 | out: hHeap=0x1f0000) returned 1 [0242.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f8f0 | out: hHeap=0x1f0000) returned 1 [0242.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260630 | out: hHeap=0x1f0000) returned 1 [0242.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b40 | out: hHeap=0x1f0000) returned 1 [0242.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f6b0 | out: hHeap=0x1f0000) returned 1 [0242.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0242.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a10 | out: hHeap=0x1f0000) returned 1 [0242.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285cf8 | out: hHeap=0x1f0000) returned 1 [0242.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260658 | out: hHeap=0x1f0000) returned 1 [0242.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b05f0 | out: hHeap=0x1f0000) returned 1 [0242.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228b48 | out: hHeap=0x1f0000) returned 1 [0242.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0242.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0242.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228b00 | out: hHeap=0x1f0000) returned 1 [0242.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238960 | out: hHeap=0x1f0000) returned 1 [0242.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389c0 | out: hHeap=0x1f0000) returned 1 [0242.899] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28cfc8 | out: hHeap=0x1f0000) returned 1 [0242.899] CloseHandle (hObject=0x1fc) returned 1 [0242.899] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a80 | out: hHeap=0x1f0000) returned 1 [0242.899] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ae0 | out: hHeap=0x1f0000) returned 1 [0242.899] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2373e0 | out: hHeap=0x1f0000) returned 1 [0242.899] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x249db0 | out: hHeap=0x1f0000) returned 1 [0242.899] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f9b0 | out: hHeap=0x1f0000) returned 1 [0242.900] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bf0 | out: hHeap=0x1f0000) returned 1 [0242.900] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x287fa0 | out: hHeap=0x1f0000) returned 1 [0242.900] CloseHandle (hObject=0x1e8) returned 1 [0242.900] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b50 | out: hHeap=0x1f0000) returned 1 [0242.900] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a60 | out: hHeap=0x1f0000) returned 1 [0242.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad4c8 | out: hHeap=0x1f0000) returned 1 [0242.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c30 | out: hHeap=0x1f0000) returned 1 [0242.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d368 | out: hHeap=0x1f0000) returned 1 [0242.901] CloseHandle (hObject=0x200) returned 1 [0242.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ad0 | out: hHeap=0x1f0000) returned 1 [0242.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ac0 | out: hHeap=0x1f0000) returned 1 [0242.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad2a0 | out: hHeap=0x1f0000) returned 1 [0242.902] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a70 | out: hHeap=0x1f0000) returned 1 [0242.902] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238940 | out: hHeap=0x1f0000) returned 1 [0242.902] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238930 | out: hHeap=0x1f0000) returned 1 [0242.902] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238920 | out: hHeap=0x1f0000) returned 1 [0242.902] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20c3a8 | out: hHeap=0x1f0000) returned 1 [0242.902] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x26fad0 | out: hHeap=0x1f0000) returned 1 [0242.902] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2afb20 | out: hHeap=0x1f0000) returned 1 [0242.902] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206808 | out: hHeap=0x1f0000) returned 1 [0242.902] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f890 | out: hHeap=0x1f0000) returned 1 [0242.902] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f740 | out: hHeap=0x1f0000) returned 1 [0242.902] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232e18 | out: hHeap=0x1f0000) returned 1 [0242.903] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x270dd8 | out: hHeap=0x1f0000) returned 1 [0242.903] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2af5a8 | out: hHeap=0x1f0000) returned 1 [0242.903] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ef8 | out: hHeap=0x1f0000) returned 1 [0242.903] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0242.903] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2627e8 | out: hHeap=0x1f0000) returned 1 [0242.903] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228998 | out: hHeap=0x1f0000) returned 1 [0242.903] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0242.903] DeleteFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\ucrtbase.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\ucrtbase.dll")) returned 1 [0242.906] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd2ca2e08, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2ca2e08, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2f0533c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5f4b0, dwReserved0=0xa000000c, dwReserved1=0x2b0166, cFileName="vccorlib140.dll", cAlternateFileName="VCCORL~1.DLL")) returned 1 [0242.907] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0242.907] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b05f0 [0242.907] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221118 [0242.907] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b05f0 | out: hHeap=0x1f0000) returned 1 [0242.907] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0242.907] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0242.908] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\vccorlib140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\vccorlib140.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0242.908] GetFileType (hFile=0x200) returned 0x1 [0242.909] CloseHandle (hObject=0x200) returned 1 [0242.909] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212be0 [0242.909] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\vccorlib140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\vccorlib140.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd2ca2e08, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2ca2e08, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2f0533c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5f4b0)) returned 1 [0242.909] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212be0 | out: hHeap=0x1f0000) returned 1 [0242.910] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0242.910] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\vccorlib140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\vccorlib140.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd2ca2e08, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2ca2e08, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2f0533c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5f4b0)) returned 1 [0242.910] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0242.910] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2134e8 [0242.910] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2134e8 | out: hHeap=0x1f0000) returned 1 [0242.910] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd2424784, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2424784, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd26acf16, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15ab0, dwReserved0=0xa000000c, dwReserved1=0x2b0166, cFileName="vcruntime140.dll", cAlternateFileName="VCRUNT~1.DLL")) returned 1 [0242.910] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238cc8 [0242.910] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0ad0 [0242.910] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220c58 [0242.911] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0ad0 | out: hHeap=0x1f0000) returned 1 [0242.911] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0242.911] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238cc8 | out: hHeap=0x1f0000) returned 1 [0242.911] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\vcruntime140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\vcruntime140.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0242.912] GetFileType (hFile=0x200) returned 0x1 [0242.912] CloseHandle (hObject=0x200) returned 1 [0242.912] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212be0 [0242.912] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\vcruntime140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\vcruntime140.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde994 | out: lpFileInformation=0x1fde994*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd2424784, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2424784, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd26acf16, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15ab0)) returned 1 [0242.912] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212be0 | out: hHeap=0x1f0000) returned 1 [0242.913] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212cf0 [0242.913] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\vcruntime140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\vcruntime140.dll"), fInfoLevelId=0x0, lpFileInformation=0x1fde99c | out: lpFileInformation=0x1fde99c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd2424784, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2424784, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd26acf16, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15ab0)) returned 1 [0242.913] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212cf0 | out: hHeap=0x1f0000) returned 1 [0242.913] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0242.913] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0242.913] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd2424784, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2424784, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd26acf16, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15ab0, dwReserved0=0xa000000c, dwReserved1=0x2b0166, cFileName="vcruntime140.dll", cAlternateFileName="VCRUNT~1.DLL")) returned 0 [0242.913] FindClose (in: hFindFile=0x24ea80 | out: hFindFile=0x24ea80) returned 1 [0242.914] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0242.914] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2634a8 | out: hHeap=0x1f0000) returned 1 [0242.914] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b08 | out: hHeap=0x1f0000) returned 1 [0242.914] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228a70 | out: hHeap=0x1f0000) returned 1 [0242.914] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2284d0 [0242.914] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0242.914] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2634a8 [0242.914] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0242.914] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\*", lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2b0166, cFileName=".", cAlternateFileName="")) returned 0x24eb40 [0242.914] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0242.914] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0242.915] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0242.915] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2b0166, cFileName="..", cAlternateFileName="")) returned 1 [0242.915] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0242.915] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0242.915] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0242.915] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0242.915] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1113bba3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1113bba3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2b0166, cFileName="PUB60COR", cAlternateFileName="")) returned 1 [0242.915] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b30 [0242.915] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0242.915] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219318 [0242.915] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0242.915] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0242.915] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b30 | out: hHeap=0x1f0000) returned 1 [0242.916] lstrcmpW (lpString1="PUB60COR", lpString2=".") returned 1 [0242.916] lstrcmpW (lpString1="PUB60COR", lpString2="..") returned 1 [0242.916] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204e50 [0242.916] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213818 [0242.916] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x104b75c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2b0166, cFileName="Publisher", cAlternateFileName="PUBLIS~1")) returned 1 [0242.916] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a68 [0242.916] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0242.916] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ef8 [0242.916] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0242.916] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219318 | out: hHeap=0x1f0000) returned 1 [0242.916] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a68 | out: hHeap=0x1f0000) returned 1 [0242.916] lstrcmpW (lpString1="Publisher", lpString2=".") returned 1 [0242.916] lstrcmpW (lpString1="Publisher", lpString2="..") returned 1 [0242.917] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238ef8 [0242.917] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212c68 [0242.917] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e50 | out: hHeap=0x1f0000) returned 1 [0242.917] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x1fdeb38 | out: lpFindFileData=0x1fdeb38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x104b75c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2b0166, cFileName="Publisher", cAlternateFileName="PUBLIS~1")) returned 0 [0242.917] FindClose (in: hFindFile=0x24eb40 | out: hFindFile=0x24eb40) returned 1 [0242.917] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228998 [0242.917] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ba8 [0242.917] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2627e8 [0242.918] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0242.918] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\*", lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1113bba3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1113bba3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName=".", cAlternateFileName="")) returned 0x24e8c0 [0242.918] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0242.918] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0242.918] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0242.918] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1113bba3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1113bba3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="..", cAlternateFileName="")) returned 1 [0242.918] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0242.918] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0242.919] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0242.919] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0242.919] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2340, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="AG00004_.GIF", cAlternateFileName="")) returned 1 [0242.919] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a68 [0242.919] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212a48 [0242.919] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0242.919] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212a48 | out: hHeap=0x1f0000) returned 1 [0242.919] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0242.919] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a68 | out: hHeap=0x1f0000) returned 1 [0242.920] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00004_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0242.920] GetFileType (hFile=0x200) returned 0x1 [0242.920] CloseHandle (hObject=0x200) returned 1 [0242.920] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0242.921] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00004_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2340)) returned 1 [0242.921] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0242.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0242.921] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00004_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2340)) returned 1 [0242.921] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0242.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0242.921] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0242.921] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c30, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="AG00011_.GIF", cAlternateFileName="")) returned 1 [0242.922] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bd0 [0242.922] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0242.922] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0242.922] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0242.922] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0242.922] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bd0 | out: hHeap=0x1f0000) returned 1 [0242.922] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00011_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00011_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0242.923] GetFileType (hFile=0x200) returned 0x1 [0242.923] CloseHandle (hObject=0x200) returned 1 [0242.923] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0242.923] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00011_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00011_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c30)) returned 1 [0242.924] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0242.924] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0242.924] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00011_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00011_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c30)) returned 1 [0242.924] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0242.924] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0242.924] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0242.924] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a19, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="AG00021_.GIF", cAlternateFileName="")) returned 1 [0242.924] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a68 [0242.924] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0242.924] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0242.925] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0242.925] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0242.925] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a68 | out: hHeap=0x1f0000) returned 1 [0242.925] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00021_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0242.926] GetFileType (hFile=0x200) returned 0x1 [0242.926] CloseHandle (hObject=0x200) returned 1 [0242.926] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0242.926] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00021_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a19)) returned 1 [0242.926] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0242.927] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0242.927] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00021_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a19)) returned 1 [0242.927] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0242.927] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0242.927] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0242.927] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a1c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="AG00037_.GIF", cAlternateFileName="")) returned 1 [0242.927] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a68 [0242.927] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212a48 [0242.927] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0242.928] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212a48 | out: hHeap=0x1f0000) returned 1 [0242.928] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0242.928] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a68 | out: hHeap=0x1f0000) returned 1 [0242.928] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00037_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0242.928] GetFileType (hFile=0x200) returned 0x1 [0242.929] CloseHandle (hObject=0x200) returned 1 [0242.929] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0242.929] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00037_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a1c)) returned 1 [0242.929] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0242.930] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0242.930] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00037_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a1c)) returned 1 [0242.930] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0242.930] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0242.930] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0242.930] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb58a9e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb58a9e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcb3, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="AG00038_.GIF", cAlternateFileName="")) returned 1 [0242.930] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a68 [0242.930] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0242.931] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0242.931] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0242.931] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0242.931] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a68 | out: hHeap=0x1f0000) returned 1 [0242.932] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00038_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0242.932] GetFileType (hFile=0x200) returned 0x1 [0242.932] CloseHandle (hObject=0x200) returned 1 [0242.933] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0242.933] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00038_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb58a9e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb58a9e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcb3)) returned 1 [0242.933] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0242.933] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0242.933] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00038_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb58a9e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb58a9e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcb3)) returned 1 [0242.933] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0242.933] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0242.933] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0242.934] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb58a9e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fa1, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="AG00040_.GIF", cAlternateFileName="")) returned 1 [0242.934] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b08 [0242.934] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0242.934] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0242.934] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0242.934] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0242.934] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b08 | out: hHeap=0x1f0000) returned 1 [0242.935] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00040_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0242.935] GetFileType (hFile=0x200) returned 0x1 [0242.935] CloseHandle (hObject=0x200) returned 1 [0242.935] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0242.936] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00040_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb58a9e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fa1)) returned 1 [0242.936] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0242.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0242.936] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00040_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb58a9e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fa1)) returned 1 [0242.936] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0242.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0243.160] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0243.160] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e06, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="AG00052_.GIF", cAlternateFileName="")) returned 1 [0243.160] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260658 [0243.160] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0243.160] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0243.160] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0243.160] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0243.160] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260658 | out: hHeap=0x1f0000) returned 1 [0243.161] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00052_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0243.161] GetFileType (hFile=0x1d8) returned 0x1 [0243.161] CloseHandle (hObject=0x1d8) returned 1 [0243.162] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0243.162] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00052_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e06)) returned 1 [0243.162] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0243.162] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0243.162] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00052_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e06)) returned 1 [0243.162] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0243.162] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0243.162] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0243.162] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e73, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="AG00057_.GIF", cAlternateFileName="")) returned 1 [0243.162] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260518 [0243.162] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0243.163] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0243.163] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0243.163] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0243.163] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0243.163] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00057_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0243.163] GetFileType (hFile=0x1d8) returned 0x1 [0243.164] CloseHandle (hObject=0x1d8) returned 1 [0243.164] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0243.164] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00057_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e73)) returned 1 [0243.164] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0243.164] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0243.164] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00057_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e73)) returned 1 [0243.164] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0243.164] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0243.164] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0243.164] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x205, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="AG00090_.GIF", cAlternateFileName="")) returned 1 [0243.164] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260518 [0243.165] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0243.165] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0243.165] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0243.165] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0243.165] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0243.165] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00090_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0243.165] GetFileType (hFile=0x1d8) returned 0x1 [0243.166] CloseHandle (hObject=0x1d8) returned 1 [0243.166] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0243.166] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00090_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x205)) returned 1 [0243.166] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0243.166] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0243.166] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00090_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x205)) returned 1 [0243.166] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0243.166] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0243.166] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0243.166] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f6, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="AG00092_.GIF", cAlternateFileName="")) returned 1 [0243.166] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260630 [0243.166] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0243.167] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0243.167] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0243.167] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0243.167] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260630 | out: hHeap=0x1f0000) returned 1 [0243.167] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00092_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0243.167] GetFileType (hFile=0x1d8) returned 0x1 [0243.168] CloseHandle (hObject=0x1d8) returned 1 [0243.168] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0243.168] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00092_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f6)) returned 1 [0243.168] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0243.168] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0243.168] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00092_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f6)) returned 1 [0243.168] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0243.168] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0243.168] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0243.169] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x319e, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="AG00103_.GIF", cAlternateFileName="")) returned 1 [0243.169] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0243.169] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0243.169] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0243.169] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0243.169] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0243.169] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0243.169] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00103_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0243.169] GetFileType (hFile=0x1d8) returned 0x1 [0243.170] CloseHandle (hObject=0x1d8) returned 1 [0243.170] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0243.170] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00103_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x319e)) returned 1 [0243.170] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0243.170] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0243.170] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00103_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x319e)) returned 1 [0243.170] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0243.170] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0243.170] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0243.171] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd9c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="AG00120_.GIF", cAlternateFileName="")) returned 1 [0243.171] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0243.172] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0243.172] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0243.172] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0243.172] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0243.172] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0243.172] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00120_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0243.172] GetFileType (hFile=0x1d8) returned 0x1 [0243.173] CloseHandle (hObject=0x1d8) returned 1 [0243.173] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0243.173] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00120_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd9c)) returned 1 [0243.173] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0243.173] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0243.173] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00120_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd9c)) returned 1 [0243.173] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0243.173] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0243.173] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0243.173] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc44, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="AG00126_.GIF", cAlternateFileName="")) returned 1 [0243.173] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260518 [0243.174] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212a48 [0243.174] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0243.174] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212a48 | out: hHeap=0x1f0000) returned 1 [0243.174] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0243.174] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0243.174] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00126_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0243.174] GetFileType (hFile=0x1d8) returned 0x1 [0243.175] CloseHandle (hObject=0x1d8) returned 1 [0243.175] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0243.175] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00126_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc44)) returned 1 [0243.175] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0243.175] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0243.175] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00126_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc44)) returned 1 [0243.176] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0243.176] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0243.176] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0243.176] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30c2, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="AG00129_.GIF", cAlternateFileName="")) returned 1 [0243.176] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0243.176] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e88 [0243.176] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0243.176] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e88 | out: hHeap=0x1f0000) returned 1 [0243.176] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0243.176] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0243.177] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00129_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0243.177] GetFileType (hFile=0x1d8) returned 0x1 [0243.177] CloseHandle (hObject=0x1d8) returned 1 [0243.178] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0243.178] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00129_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30c2)) returned 1 [0243.178] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0243.178] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0243.178] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00129_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30c2)) returned 1 [0243.178] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0243.178] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0243.178] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0243.178] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1485, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="AG00130_.GIF", cAlternateFileName="")) returned 1 [0243.179] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0243.179] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0243.179] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0243.179] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0243.179] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0243.179] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0243.179] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00130_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0243.179] GetFileType (hFile=0x1d8) returned 0x1 [0243.180] CloseHandle (hObject=0x1d8) returned 1 [0243.180] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0243.180] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00130_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1485)) returned 1 [0243.180] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0243.180] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0243.180] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00130_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1485)) returned 1 [0243.181] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0243.181] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0243.181] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0243.181] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa24, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="AG00135_.GIF", cAlternateFileName="")) returned 1 [0243.181] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0243.181] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212a48 [0243.181] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0243.181] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212a48 | out: hHeap=0x1f0000) returned 1 [0243.181] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0243.181] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0243.182] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00135_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0243.182] GetFileType (hFile=0x1d8) returned 0x1 [0243.182] CloseHandle (hObject=0x1d8) returned 1 [0243.182] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0243.182] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00135_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa24)) returned 1 [0243.183] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0243.183] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0243.183] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00135_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa24)) returned 1 [0243.183] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0243.183] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0243.183] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0243.183] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x296f, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="AG00139_.GIF", cAlternateFileName="")) returned 1 [0243.183] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260888 [0243.183] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0243.183] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0243.183] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0243.184] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0243.184] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0243.184] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00139_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0243.184] GetFileType (hFile=0x1d8) returned 0x1 [0243.184] CloseHandle (hObject=0x1d8) returned 1 [0243.185] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0243.185] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00139_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x296f)) returned 1 [0243.185] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0243.185] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0243.185] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00139_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x296f)) returned 1 [0243.185] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0243.185] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0243.185] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0243.185] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3bcc, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="AG00142_.GIF", cAlternateFileName="")) returned 1 [0243.186] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0243.186] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2132c8 [0243.186] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0243.186] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2132c8 | out: hHeap=0x1f0000) returned 1 [0243.186] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0243.186] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0243.187] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00142_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0243.187] GetFileType (hFile=0x1d8) returned 0x1 [0243.188] CloseHandle (hObject=0x1d8) returned 1 [0243.188] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0243.188] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00142_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3bcc)) returned 1 [0243.188] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0243.188] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0243.188] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00142_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3bcc)) returned 1 [0243.189] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0243.189] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0243.189] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0243.189] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14c3, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="AG00154_.GIF", cAlternateFileName="")) returned 1 [0243.189] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260518 [0243.189] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0243.189] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0243.189] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0243.189] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0243.189] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0243.190] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00154_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0243.190] GetFileType (hFile=0x1d8) returned 0x1 [0243.190] CloseHandle (hObject=0x1d8) returned 1 [0243.190] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0243.190] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00154_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14c3)) returned 1 [0243.190] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0243.190] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0243.191] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00154_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14c3)) returned 1 [0243.191] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0243.191] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0243.191] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0243.191] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="AG00157_.GIF", cAlternateFileName="")) returned 1 [0243.191] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260888 [0243.191] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0243.191] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0243.191] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0243.191] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0243.191] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0243.192] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00157_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0243.192] GetFileType (hFile=0x1d8) returned 0x1 [0243.192] CloseHandle (hObject=0x1d8) returned 1 [0243.192] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0243.192] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00157_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x135b)) returned 1 [0243.193] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0243.193] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0243.193] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00157_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x135b)) returned 1 [0243.193] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0243.193] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0243.193] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0243.193] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13a6, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="AG00158_.GIF", cAlternateFileName="")) returned 1 [0243.193] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260770 [0243.193] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0243.193] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0243.193] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0243.193] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0243.193] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0243.194] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00158_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0243.194] GetFileType (hFile=0x1d8) returned 0x1 [0243.194] CloseHandle (hObject=0x1d8) returned 1 [0243.195] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0243.195] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00158_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13a6)) returned 1 [0243.195] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0243.195] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0243.195] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00158_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13a6)) returned 1 [0243.195] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0243.195] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0243.195] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0243.195] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x47a, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="AG00160_.GIF", cAlternateFileName="")) returned 1 [0243.195] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260770 [0243.196] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0243.196] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0243.196] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0243.196] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0243.196] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0243.196] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00160_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0243.197] GetFileType (hFile=0x1d8) returned 0x1 [0243.197] CloseHandle (hObject=0x1d8) returned 1 [0243.197] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0243.197] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00160_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x47a)) returned 1 [0243.197] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0243.197] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0243.198] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00160_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x47a)) returned 1 [0243.198] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0243.198] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0243.198] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0243.198] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d9f, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="AG00161_.GIF", cAlternateFileName="")) returned 1 [0243.198] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0243.198] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0243.198] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0243.198] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0243.198] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0243.198] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0243.199] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00161_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0243.199] GetFileType (hFile=0x1d8) returned 0x1 [0243.199] CloseHandle (hObject=0x1d8) returned 1 [0243.199] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0243.200] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00161_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d9f)) returned 1 [0243.200] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0243.200] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0243.200] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00161_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d9f)) returned 1 [0243.200] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0243.200] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0243.200] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0243.200] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b48, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="AG00163_.GIF", cAlternateFileName="")) returned 1 [0243.200] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260518 [0243.200] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212cf0 [0243.200] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0243.201] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212cf0 | out: hHeap=0x1f0000) returned 1 [0243.201] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0243.201] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0243.201] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00163_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0243.201] GetFileType (hFile=0x1d8) returned 0x1 [0243.202] CloseHandle (hObject=0x1d8) returned 1 [0243.202] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0243.485] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00163_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b48)) returned 1 [0243.485] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0243.486] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0243.486] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00163_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b48)) returned 1 [0243.486] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0243.486] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0243.486] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0243.486] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x33c6, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="AG00164_.GIF", cAlternateFileName="")) returned 1 [0243.486] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0243.486] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212cf0 [0243.487] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0243.487] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212cf0 | out: hHeap=0x1f0000) returned 1 [0243.487] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0243.487] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0243.488] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00164_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0243.488] GetFileType (hFile=0x1e0) returned 0x1 [0243.489] CloseHandle (hObject=0x1e0) returned 1 [0243.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0243.490] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00164_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x33c6)) returned 1 [0243.490] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0243.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0243.490] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00164_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x33c6)) returned 1 [0243.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0243.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0243.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0243.491] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2186, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="AG00165_.GIF", cAlternateFileName="")) returned 1 [0243.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0243.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212a48 [0243.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0243.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212a48 | out: hHeap=0x1f0000) returned 1 [0243.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0243.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0243.492] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00165_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0243.493] GetFileType (hFile=0x1e0) returned 0x1 [0243.493] CloseHandle (hObject=0x1e0) returned 1 [0243.494] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0243.494] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00165_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2186)) returned 1 [0243.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0243.494] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0243.494] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00165_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2186)) returned 1 [0243.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0243.494] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0243.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0243.494] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x131e, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="AG00167_.GIF", cAlternateFileName="")) returned 1 [0243.494] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260518 [0243.495] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e88 [0243.495] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0243.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e88 | out: hHeap=0x1f0000) returned 1 [0243.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0243.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0243.496] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00167_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0243.496] GetFileType (hFile=0x1e0) returned 0x1 [0243.496] CloseHandle (hObject=0x1e0) returned 1 [0243.497] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0243.497] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00167_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x131e)) returned 1 [0243.497] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0243.497] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0243.497] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00167_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x131e)) returned 1 [0243.497] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0243.497] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0243.497] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0243.498] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14ff, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="AG00169_.GIF", cAlternateFileName="")) returned 1 [0243.498] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0243.498] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212cf0 [0243.498] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0243.498] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212cf0 | out: hHeap=0x1f0000) returned 1 [0243.498] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0243.498] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0243.500] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00169_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0243.500] GetFileType (hFile=0x1e0) returned 0x1 [0243.500] CloseHandle (hObject=0x1e0) returned 1 [0243.501] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0243.501] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00169_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14ff)) returned 1 [0243.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0243.501] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0243.501] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00169_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14ff)) returned 1 [0243.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0243.501] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0243.502] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0243.502] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2420, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="AG00170_.GIF", cAlternateFileName="")) returned 1 [0243.502] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260518 [0243.502] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0243.502] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0243.502] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0243.502] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0243.502] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0243.503] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00170_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0243.503] GetFileType (hFile=0x1e0) returned 0x1 [0243.504] CloseHandle (hObject=0x1e0) returned 1 [0243.504] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0243.505] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00170_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2420)) returned 1 [0243.505] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0243.505] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0243.505] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00170_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2420)) returned 1 [0243.505] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0243.505] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0243.506] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0243.506] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1398, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="AG00171_.GIF", cAlternateFileName="")) returned 1 [0243.506] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0243.506] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2132c8 [0243.506] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0243.506] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2132c8 | out: hHeap=0x1f0000) returned 1 [0243.506] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0243.506] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0243.507] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00171_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0243.508] GetFileType (hFile=0x1e0) returned 0x1 [0243.510] CloseHandle (hObject=0x1e0) returned 1 [0243.511] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0243.511] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00171_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1398)) returned 1 [0243.511] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0243.511] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0243.511] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00171_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1398)) returned 1 [0243.512] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0243.512] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0243.512] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0243.512] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1126, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="AG00172_.GIF", cAlternateFileName="")) returned 1 [0243.512] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0243.512] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212a48 [0243.512] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0243.513] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212a48 | out: hHeap=0x1f0000) returned 1 [0243.513] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0243.513] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0243.514] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00172_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0243.514] GetFileType (hFile=0x1e0) returned 0x1 [0243.516] CloseHandle (hObject=0x1e0) returned 1 [0243.517] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0243.517] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00172_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1126)) returned 1 [0243.517] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0243.517] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0243.517] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00172_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1126)) returned 1 [0243.518] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0243.518] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0243.518] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0243.518] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf7e, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="AG00174_.GIF", cAlternateFileName="")) returned 1 [0243.518] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605b8 [0243.518] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0243.518] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0243.519] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0243.519] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0243.519] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0243.520] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00174_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0243.520] GetFileType (hFile=0x1e0) returned 0x1 [0243.521] CloseHandle (hObject=0x1e0) returned 1 [0243.521] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0243.521] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00174_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf7e)) returned 1 [0243.521] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0243.522] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0243.522] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00174_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf7e)) returned 1 [0243.522] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0243.522] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0243.522] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0243.522] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd32, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="AG00175_.GIF", cAlternateFileName="")) returned 1 [0243.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0243.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0243.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0243.523] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0243.523] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0243.523] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0243.524] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00175_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0243.524] GetFileType (hFile=0x1e0) returned 0x1 [0243.525] CloseHandle (hObject=0x1e0) returned 1 [0243.525] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0243.526] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00175_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd32)) returned 1 [0243.526] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0243.526] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0243.526] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00175_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd32)) returned 1 [0243.526] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0243.526] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0243.527] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0243.527] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc30, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="AG00176_.GIF", cAlternateFileName="")) returned 1 [0243.527] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0243.527] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0243.527] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0243.527] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0243.527] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0243.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0243.947] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00176_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0243.947] GetFileType (hFile=0x230) returned 0x1 [0243.948] CloseHandle (hObject=0x230) returned 1 [0243.948] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0243.951] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00176_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc30)) returned 1 [0243.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0243.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0243.951] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00176_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc30)) returned 1 [0243.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0243.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0243.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0243.952] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbd2, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="AN00010_.WMF", cAlternateFileName="")) returned 1 [0243.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0243.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212cf0 [0243.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0243.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212cf0 | out: hHeap=0x1f0000) returned 1 [0243.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0243.957] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0243.957] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00010_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00010_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0243.958] GetFileType (hFile=0x230) returned 0x1 [0243.958] CloseHandle (hObject=0x230) returned 1 [0243.959] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0243.959] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00010_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00010_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbd2)) returned 1 [0243.960] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0243.960] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0243.960] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00010_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00010_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbd2)) returned 1 [0243.960] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0243.961] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0243.961] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0243.961] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x127e, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="AN00015_.WMF", cAlternateFileName="")) returned 1 [0243.961] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0243.961] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0243.961] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0243.961] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0243.962] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0243.962] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0243.963] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00015_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0243.963] GetFileType (hFile=0x230) returned 0x1 [0243.964] CloseHandle (hObject=0x230) returned 1 [0243.965] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0243.965] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00015_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x127e)) returned 1 [0243.965] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0243.965] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0243.965] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00015_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x127e)) returned 1 [0243.966] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0243.966] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0243.966] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0243.966] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1634, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="AN00790_.WMF", cAlternateFileName="")) returned 1 [0243.966] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0243.966] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212cf0 [0243.966] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0243.966] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212cf0 | out: hHeap=0x1f0000) returned 1 [0243.966] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0243.966] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0243.967] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00790_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00790_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0243.967] GetFileType (hFile=0x230) returned 0x1 [0243.967] CloseHandle (hObject=0x230) returned 1 [0243.968] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0243.968] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00790_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00790_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1634)) returned 1 [0243.968] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0243.968] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0243.968] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00790_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00790_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1634)) returned 1 [0243.968] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0243.968] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0243.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0243.969] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5062, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="AN00853_.WMF", cAlternateFileName="")) returned 1 [0243.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260630 [0243.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0243.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0243.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0243.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0243.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260630 | out: hHeap=0x1f0000) returned 1 [0243.970] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00853_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00853_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0243.970] GetFileType (hFile=0x230) returned 0x1 [0243.970] CloseHandle (hObject=0x230) returned 1 [0243.971] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0243.971] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00853_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00853_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5062)) returned 1 [0243.971] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0243.971] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0243.971] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00853_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00853_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5062)) returned 1 [0243.971] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0243.971] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0243.971] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0243.971] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a50, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="AN00914_.WMF", cAlternateFileName="")) returned 1 [0243.972] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0243.972] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0243.972] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0243.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0243.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0243.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0243.972] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00914_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00914_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0243.973] GetFileType (hFile=0x230) returned 0x1 [0243.973] CloseHandle (hObject=0x230) returned 1 [0243.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0243.973] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00914_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00914_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a50)) returned 1 [0243.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0243.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0243.974] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00914_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00914_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a50)) returned 1 [0243.974] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0243.974] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0243.974] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0243.974] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x385c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="AN00932_.WMF", cAlternateFileName="")) returned 1 [0243.974] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260770 [0243.974] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0243.974] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0243.974] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0243.974] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0243.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0243.975] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00932_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00932_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0243.975] GetFileType (hFile=0x230) returned 0x1 [0243.975] CloseHandle (hObject=0x230) returned 1 [0243.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0243.976] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00932_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00932_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x385c)) returned 1 [0243.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0243.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0243.976] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00932_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00932_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x385c)) returned 1 [0243.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0243.977] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0243.977] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0243.977] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ba0, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="AN00965_.WMF", cAlternateFileName="")) returned 1 [0243.977] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0243.977] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0243.977] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0243.977] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0243.977] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0243.977] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0243.978] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00965_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00965_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0243.978] GetFileType (hFile=0x230) returned 0x1 [0243.978] CloseHandle (hObject=0x230) returned 1 [0243.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0243.979] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00965_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00965_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ba0)) returned 1 [0243.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0243.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0243.979] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00965_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00965_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ba0)) returned 1 [0243.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0243.980] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0243.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0243.980] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd10, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="AN01039_.WMF", cAlternateFileName="")) returned 1 [0243.980] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0243.980] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0243.980] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0243.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0243.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0243.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0243.981] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01039_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01039_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0243.982] GetFileType (hFile=0x230) returned 0x1 [0243.982] CloseHandle (hObject=0x230) returned 1 [0243.982] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0243.982] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01039_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01039_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd10)) returned 1 [0243.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0243.983] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0243.983] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01039_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01039_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd10)) returned 1 [0243.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0243.983] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0243.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0243.983] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x63c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="AN01044_.WMF", cAlternateFileName="")) returned 1 [0243.983] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0243.983] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0243.983] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0243.984] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0243.984] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0243.984] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0243.984] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01044_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01044_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0243.984] GetFileType (hFile=0x230) returned 0x1 [0243.985] CloseHandle (hObject=0x230) returned 1 [0243.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0243.985] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01044_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01044_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x63c)) returned 1 [0243.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0243.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0243.985] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01044_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01044_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x63c)) returned 1 [0243.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0243.986] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0243.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0243.986] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f20, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="AN01060_.WMF", cAlternateFileName="")) returned 1 [0243.986] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0243.986] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2132c8 [0243.986] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0243.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2132c8 | out: hHeap=0x1f0000) returned 1 [0243.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0243.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0243.987] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01060_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01060_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0243.987] GetFileType (hFile=0x230) returned 0x1 [0243.987] CloseHandle (hObject=0x230) returned 1 [0243.988] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0243.988] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01060_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01060_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f20)) returned 1 [0243.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0243.988] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0243.988] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01060_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01060_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f20)) returned 1 [0243.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0243.988] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0243.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0243.988] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x728, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="AN01084_.WMF", cAlternateFileName="")) returned 1 [0243.988] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260630 [0243.988] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213570 [0243.989] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0243.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213570 | out: hHeap=0x1f0000) returned 1 [0243.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0243.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260630 | out: hHeap=0x1f0000) returned 1 [0243.989] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01084_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01084_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0243.990] GetFileType (hFile=0x230) returned 0x1 [0243.990] CloseHandle (hObject=0x230) returned 1 [0243.990] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0243.990] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01084_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01084_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x728)) returned 1 [0243.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0243.991] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0243.991] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01084_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01084_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x728)) returned 1 [0243.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0243.991] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0243.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0243.991] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x66dc, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="AN01173_.WMF", cAlternateFileName="")) returned 1 [0243.991] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0243.991] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0243.991] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0243.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0243.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0243.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0243.992] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01173_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0243.992] GetFileType (hFile=0x230) returned 0x1 [0243.993] CloseHandle (hObject=0x230) returned 1 [0243.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0243.993] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01173_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x66dc)) returned 1 [0243.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0243.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0243.993] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01173_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x66dc)) returned 1 [0243.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0243.994] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0243.994] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0243.994] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6cd2, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="AN01174_.WMF", cAlternateFileName="")) returned 1 [0243.994] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0243.994] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0243.994] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0243.994] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0243.994] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0243.994] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0243.995] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01174_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0243.995] GetFileType (hFile=0x230) returned 0x1 [0243.995] CloseHandle (hObject=0x230) returned 1 [0243.996] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0243.996] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01174_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6cd2)) returned 1 [0243.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0244.332] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0244.333] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01174_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6cd2)) returned 1 [0244.333] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0244.333] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0244.333] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0244.333] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xea2, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="AN01184_.WMF", cAlternateFileName="")) returned 1 [0244.333] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260888 [0244.333] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0244.334] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0244.334] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0244.334] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0244.334] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0244.335] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01184_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0244.335] GetFileType (hFile=0x23c) returned 0x1 [0244.335] CloseHandle (hObject=0x23c) returned 1 [0244.336] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0244.336] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01184_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xea2)) returned 1 [0244.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0244.336] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0244.336] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01184_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xea2)) returned 1 [0244.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0244.336] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0244.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0244.337] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16cc, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="AN01216_.WMF", cAlternateFileName="")) returned 1 [0244.337] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609a0 [0244.337] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0244.337] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0244.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0244.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0244.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0244.338] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01216_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01216_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0244.338] GetFileType (hFile=0x23c) returned 0x1 [0244.339] CloseHandle (hObject=0x23c) returned 1 [0244.339] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0244.339] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01216_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01216_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16cc)) returned 1 [0244.340] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0244.340] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0244.340] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01216_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01216_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16cc)) returned 1 [0244.340] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0244.340] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0244.340] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0244.340] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc4, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="AN01218_.WMF", cAlternateFileName="")) returned 1 [0244.340] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0244.340] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0244.341] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0244.341] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0244.341] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0244.341] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0244.341] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01218_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01218_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0244.342] GetFileType (hFile=0x23c) returned 0x1 [0244.342] CloseHandle (hObject=0x23c) returned 1 [0244.342] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0244.343] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01218_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01218_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc4)) returned 1 [0244.343] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0244.343] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0244.343] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01218_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01218_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc4)) returned 1 [0244.343] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0244.343] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0244.343] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0244.343] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xac4, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="AN01251_.WMF", cAlternateFileName="")) returned 1 [0244.344] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260888 [0244.344] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2134e8 [0244.344] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0244.344] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2134e8 | out: hHeap=0x1f0000) returned 1 [0244.344] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0244.344] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0244.345] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01251_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01251_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0244.345] GetFileType (hFile=0x23c) returned 0x1 [0244.345] CloseHandle (hObject=0x23c) returned 1 [0244.345] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0244.346] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01251_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01251_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xac4)) returned 1 [0244.346] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0244.346] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0244.346] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01251_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01251_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xac4)) returned 1 [0244.346] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0244.346] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0244.346] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0244.346] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ccc, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="AN01545_.WMF", cAlternateFileName="")) returned 1 [0244.346] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260888 [0244.346] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0244.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0244.347] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0244.347] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0244.347] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0244.347] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01545_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01545_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0244.347] GetFileType (hFile=0x23c) returned 0x1 [0244.348] CloseHandle (hObject=0x23c) returned 1 [0244.348] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0244.348] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01545_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01545_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ccc)) returned 1 [0244.348] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0244.348] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0244.348] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01545_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01545_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ccc)) returned 1 [0244.349] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0244.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0244.349] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0244.349] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d74, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="AN02122_.WMF", cAlternateFileName="")) returned 1 [0244.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0244.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0244.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0244.349] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0244.349] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0244.349] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0244.350] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02122_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02122_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0244.350] GetFileType (hFile=0x23c) returned 0x1 [0244.351] CloseHandle (hObject=0x23c) returned 1 [0244.351] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0244.351] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02122_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02122_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d74)) returned 1 [0244.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0244.351] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0244.351] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02122_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02122_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d74)) returned 1 [0244.352] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0244.352] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0244.352] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0244.352] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19e8, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="AN02559_.WMF", cAlternateFileName="")) returned 1 [0244.352] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0244.352] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0244.352] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0244.352] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0244.352] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0244.352] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0244.353] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02559_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02559_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0244.353] GetFileType (hFile=0x23c) returned 0x1 [0244.353] CloseHandle (hObject=0x23c) returned 1 [0244.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0244.354] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02559_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02559_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19e8)) returned 1 [0244.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0244.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0244.354] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02559_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02559_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19e8)) returned 1 [0244.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0244.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0244.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0244.354] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc89dc9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x83c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="AN02724_.WMF", cAlternateFileName="")) returned 1 [0244.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0244.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2134e8 [0244.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0244.355] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2134e8 | out: hHeap=0x1f0000) returned 1 [0244.355] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0244.355] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0244.356] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02724_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02724_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0244.356] GetFileType (hFile=0x23c) returned 0x1 [0244.356] CloseHandle (hObject=0x23c) returned 1 [0244.356] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0244.356] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02724_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02724_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc89dc9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x83c)) returned 1 [0244.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0244.357] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0244.357] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02724_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02724_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc89dc9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x83c)) returned 1 [0244.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0244.357] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0244.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0244.357] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2418, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="AN03500_.WMF", cAlternateFileName="")) returned 1 [0244.357] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0244.357] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0244.357] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0244.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0244.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0244.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0244.358] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN03500_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an03500_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0244.358] GetFileType (hFile=0x23c) returned 0x1 [0244.359] CloseHandle (hObject=0x23c) returned 1 [0244.359] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0244.359] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN03500_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an03500_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2418)) returned 1 [0244.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0244.359] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0244.359] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN03500_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an03500_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2418)) returned 1 [0244.360] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0244.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0244.360] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0244.360] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x928, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="AN04108_.WMF", cAlternateFileName="")) returned 1 [0244.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0244.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0244.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0244.360] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0244.360] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0244.360] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0244.361] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04108_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04108_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0244.361] GetFileType (hFile=0x23c) returned 0x1 [0244.361] CloseHandle (hObject=0x23c) returned 1 [0244.361] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0244.361] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04108_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04108_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x928)) returned 1 [0244.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0244.362] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0244.362] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04108_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04108_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x928)) returned 1 [0244.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0244.362] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0244.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0244.362] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17ac, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="AN04117_.WMF", cAlternateFileName="")) returned 1 [0244.362] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260888 [0244.362] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2132c8 [0244.362] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0244.363] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2132c8 | out: hHeap=0x1f0000) returned 1 [0244.363] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0244.363] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0244.363] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04117_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04117_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0244.363] GetFileType (hFile=0x23c) returned 0x1 [0244.364] CloseHandle (hObject=0x23c) returned 1 [0244.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0244.364] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04117_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04117_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17ac)) returned 1 [0244.364] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0244.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0244.365] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04117_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04117_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17ac)) returned 1 [0244.365] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0244.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0244.365] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0244.365] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd58, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="AN04134_.WMF", cAlternateFileName="")) returned 1 [0244.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0244.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0244.666] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0244.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0244.667] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0244.667] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0245.038] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04134_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04134_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0245.038] GetFileType (hFile=0x230) returned 0x1 [0245.039] CloseHandle (hObject=0x230) returned 1 [0245.039] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0245.039] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04134_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04134_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd58)) returned 1 [0245.039] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0245.039] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0245.040] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04134_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04134_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd58)) returned 1 [0245.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0245.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0245.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0245.040] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa4c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="AN04174_.WMF", cAlternateFileName="")) returned 1 [0245.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0245.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e88 [0245.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0245.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e88 | out: hHeap=0x1f0000) returned 1 [0245.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0245.041] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0245.041] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04174_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0245.041] GetFileType (hFile=0x230) returned 0x1 [0245.042] CloseHandle (hObject=0x230) returned 1 [0245.042] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0245.042] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04174_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa4c)) returned 1 [0245.042] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0245.042] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0245.043] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04174_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa4c)) returned 1 [0245.043] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0245.043] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0245.043] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0245.043] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19ec, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="AN04191_.WMF", cAlternateFileName="")) returned 1 [0245.043] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238488 [0245.043] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212cf0 [0245.043] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0245.044] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212cf0 | out: hHeap=0x1f0000) returned 1 [0245.044] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0245.044] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238488 | out: hHeap=0x1f0000) returned 1 [0245.044] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04191_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04191_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0245.045] GetFileType (hFile=0x230) returned 0x1 [0245.045] CloseHandle (hObject=0x230) returned 1 [0245.046] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0245.046] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04191_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04191_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19ec)) returned 1 [0245.046] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0245.046] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0245.046] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04191_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04191_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19ec)) returned 1 [0245.046] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0245.047] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0245.047] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0245.047] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1204, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="AN04195_.WMF", cAlternateFileName="")) returned 1 [0245.047] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238488 [0245.047] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0245.047] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0245.047] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0245.048] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0245.048] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238488 | out: hHeap=0x1f0000) returned 1 [0245.048] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04195_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04195_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0245.048] GetFileType (hFile=0x230) returned 0x1 [0245.049] CloseHandle (hObject=0x230) returned 1 [0245.049] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0245.049] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04195_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04195_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1204)) returned 1 [0245.050] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0245.050] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0245.050] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04195_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04195_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1204)) returned 1 [0245.050] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0245.050] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0245.050] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0245.051] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc48, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="AN04196_.WMF", cAlternateFileName="")) returned 1 [0245.051] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0245.051] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0245.051] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0245.051] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0245.051] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0245.051] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0245.052] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04196_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04196_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0245.052] GetFileType (hFile=0x230) returned 0x1 [0245.053] CloseHandle (hObject=0x230) returned 1 [0245.053] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0245.054] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04196_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04196_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc48)) returned 1 [0245.054] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0245.054] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0245.054] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04196_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04196_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc48)) returned 1 [0245.054] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0245.054] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0245.100] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0245.100] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1df4, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="AN04206_.WMF", cAlternateFileName="")) returned 1 [0245.100] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0245.100] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2132c8 [0245.101] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0245.101] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2132c8 | out: hHeap=0x1f0000) returned 1 [0245.101] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0245.101] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0245.102] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04206_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04206_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0245.102] GetFileType (hFile=0x230) returned 0x1 [0245.103] CloseHandle (hObject=0x230) returned 1 [0245.103] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0245.103] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04206_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04206_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1df4)) returned 1 [0245.103] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0245.104] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0245.104] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04206_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04206_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1df4)) returned 1 [0245.104] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0245.104] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0245.104] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0245.104] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x212c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="AN04225_.WMF", cAlternateFileName="")) returned 1 [0245.104] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0245.105] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0245.105] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0245.105] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0245.105] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0245.105] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0245.106] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04225_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04225_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0245.106] GetFileType (hFile=0x230) returned 0x1 [0245.107] CloseHandle (hObject=0x230) returned 1 [0245.107] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0245.107] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04225_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04225_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x212c)) returned 1 [0245.108] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0245.108] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0245.108] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04225_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04225_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x212c)) returned 1 [0245.108] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0245.108] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0245.108] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0245.108] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e7c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="AN04235_.WMF", cAlternateFileName="")) returned 1 [0245.109] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0245.109] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0245.109] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0245.109] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0245.109] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0245.109] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0245.110] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04235_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04235_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0245.110] GetFileType (hFile=0x230) returned 0x1 [0245.111] CloseHandle (hObject=0x230) returned 1 [0245.111] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0245.111] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04235_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04235_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e7c)) returned 1 [0245.112] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0245.112] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0245.112] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04235_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04235_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e7c)) returned 1 [0245.112] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0245.112] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0245.112] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0245.112] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc89dc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc89dc9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e7c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="AN04267_.WMF", cAlternateFileName="")) returned 1 [0245.113] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0245.113] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0245.113] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0245.113] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0245.113] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0245.113] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0245.114] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04267_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04267_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0245.114] GetFileType (hFile=0x230) returned 0x1 [0245.115] CloseHandle (hObject=0x230) returned 1 [0245.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0245.418] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04267_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04267_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc89dc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc89dc9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e7c)) returned 1 [0245.422] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0245.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0245.422] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04267_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04267_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc89dc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc89dc9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e7c)) returned 1 [0245.423] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0245.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0245.423] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0245.423] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e0, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="AN04269_.WMF", cAlternateFileName="")) returned 1 [0245.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0245.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2134e8 [0245.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0245.423] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2134e8 | out: hHeap=0x1f0000) returned 1 [0245.424] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0245.424] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0245.424] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04269_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04269_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0245.442] GetFileType (hFile=0x1d8) returned 0x1 [0245.442] CloseHandle (hObject=0x1d8) returned 1 [0245.443] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0245.443] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04269_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04269_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e0)) returned 1 [0245.443] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0245.444] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0245.444] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04269_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04269_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e0)) returned 1 [0245.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0245.444] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0245.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0245.444] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9bc, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="AN04323_.WMF", cAlternateFileName="")) returned 1 [0245.444] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0245.445] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0245.445] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0245.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0245.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0245.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0245.446] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04323_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04323_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0245.446] GetFileType (hFile=0x1d8) returned 0x1 [0245.447] CloseHandle (hObject=0x1d8) returned 1 [0245.448] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0245.448] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04323_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04323_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9bc)) returned 1 [0245.448] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0245.448] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0245.448] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04323_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04323_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9bc)) returned 1 [0245.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0245.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0245.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0245.493] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc89dc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc89dc9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd14, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="AN04326_.WMF", cAlternateFileName="")) returned 1 [0245.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0245.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0245.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0245.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0245.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0245.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0245.494] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04326_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04326_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0245.495] GetFileType (hFile=0x1fc) returned 0x1 [0245.496] CloseHandle (hObject=0x1fc) returned 1 [0245.496] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0245.496] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04326_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04326_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc89dc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc89dc9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd14)) returned 1 [0245.497] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0245.497] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0245.497] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04326_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04326_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc89dc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc89dc9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd14)) returned 1 [0245.497] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0245.497] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0245.497] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0245.498] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10c8, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="AN04332_.WMF", cAlternateFileName="")) returned 1 [0245.498] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0245.498] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0245.498] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0245.498] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0245.498] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0245.499] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0245.499] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04332_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04332_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0245.500] GetFileType (hFile=0x1fc) returned 0x1 [0245.500] CloseHandle (hObject=0x1fc) returned 1 [0245.501] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0245.501] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04332_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04332_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10c8)) returned 1 [0245.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0245.501] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0245.502] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04332_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04332_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10c8)) returned 1 [0245.502] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0245.502] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0245.502] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0245.502] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc9c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="AN04355_.WMF", cAlternateFileName="")) returned 1 [0245.502] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0245.503] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0245.503] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0245.503] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0245.503] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0245.503] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0245.504] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04355_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04355_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0245.504] GetFileType (hFile=0x1fc) returned 0x1 [0245.505] CloseHandle (hObject=0x1fc) returned 1 [0245.505] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0245.506] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04355_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04355_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc9c)) returned 1 [0245.507] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0245.507] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0245.507] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04355_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04355_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc9c)) returned 1 [0245.507] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0245.507] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0245.507] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0245.508] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12c8, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="AN04369_.WMF", cAlternateFileName="")) returned 1 [0245.508] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0245.508] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212cf0 [0245.508] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0245.508] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212cf0 | out: hHeap=0x1f0000) returned 1 [0245.508] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0245.509] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0245.510] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04369_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04369_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0245.510] GetFileType (hFile=0x1fc) returned 0x1 [0245.510] CloseHandle (hObject=0x1fc) returned 1 [0245.511] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0245.511] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04369_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04369_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12c8)) returned 1 [0245.511] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0245.512] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0245.512] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04369_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04369_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12c8)) returned 1 [0245.512] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0245.512] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0245.512] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0245.512] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1384, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="AN04384_.WMF", cAlternateFileName="")) returned 1 [0245.513] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0245.513] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0245.513] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0245.513] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0245.513] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0245.513] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0245.514] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04384_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04384_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0245.515] GetFileType (hFile=0x1fc) returned 0x1 [0245.516] CloseHandle (hObject=0x1fc) returned 1 [0245.516] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0245.516] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04384_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04384_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1384)) returned 1 [0245.517] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0245.517] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0245.517] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04384_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04384_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1384)) returned 1 [0245.517] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0245.518] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0245.518] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0245.518] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x138c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="AN04385_.WMF", cAlternateFileName="")) returned 1 [0245.518] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0245.518] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0245.518] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0245.519] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0245.519] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0245.519] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0245.520] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04385_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04385_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0245.520] GetFileType (hFile=0x1fc) returned 0x1 [0245.521] CloseHandle (hObject=0x1fc) returned 1 [0245.929] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0245.930] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04385_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04385_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x138c)) returned 1 [0245.930] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0245.930] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0245.930] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04385_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04385_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x138c)) returned 1 [0245.931] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0245.931] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0245.931] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0245.931] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1cd8, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="BABY_01.MID", cAlternateFileName="")) returned 1 [0245.931] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0245.931] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0245.932] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0245.932] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0245.932] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0245.932] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0245.933] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BABY_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\baby_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0245.933] GetFileType (hFile=0x220) returned 0x1 [0245.934] CloseHandle (hObject=0x220) returned 1 [0245.935] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0245.935] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BABY_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\baby_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1cd8)) returned 1 [0245.935] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0245.935] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0245.935] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BABY_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\baby_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1cd8)) returned 1 [0245.936] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0245.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0245.936] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0245.936] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1306, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="BD00116_.WMF", cAlternateFileName="")) returned 1 [0245.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0245.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213570 [0245.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0245.936] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213570 | out: hHeap=0x1f0000) returned 1 [0245.937] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0245.937] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0245.938] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00116_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00116_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0245.938] GetFileType (hFile=0x220) returned 0x1 [0245.939] CloseHandle (hObject=0x220) returned 1 [0245.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0245.939] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00116_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00116_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1306)) returned 1 [0245.940] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0245.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0245.940] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00116_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00116_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1306)) returned 1 [0245.940] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0245.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0245.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0245.941] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6906, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="BD00141_.WMF", cAlternateFileName="")) returned 1 [0245.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0245.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212cf0 [0245.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0245.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212cf0 | out: hHeap=0x1f0000) returned 1 [0245.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0245.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0245.943] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00141_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00141_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0245.943] GetFileType (hFile=0x220) returned 0x1 [0245.944] CloseHandle (hObject=0x220) returned 1 [0245.944] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0245.945] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00141_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00141_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6906)) returned 1 [0245.945] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0245.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0245.945] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00141_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00141_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6906)) returned 1 [0245.945] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0245.946] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0245.946] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0245.946] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7114, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="BD00146_.WMF", cAlternateFileName="")) returned 1 [0245.946] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0245.946] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0245.946] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0245.947] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0245.947] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0245.947] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0245.948] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00146_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00146_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0245.948] GetFileType (hFile=0x220) returned 0x1 [0245.949] CloseHandle (hObject=0x220) returned 1 [0245.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0245.949] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00146_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00146_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7114)) returned 1 [0245.950] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0245.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0245.950] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00146_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00146_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7114)) returned 1 [0245.950] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0245.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0245.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0245.951] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d74, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="BD00155_.WMF", cAlternateFileName="")) returned 1 [0245.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0245.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0245.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0245.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0245.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0245.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0245.952] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00155_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00155_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0245.952] GetFileType (hFile=0x220) returned 0x1 [0245.953] CloseHandle (hObject=0x220) returned 1 [0245.953] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0245.954] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00155_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00155_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d74)) returned 1 [0245.954] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0245.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0245.954] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00155_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00155_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d74)) returned 1 [0245.954] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0245.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0245.954] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0245.955] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x57f4, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="BD00160_.WMF", cAlternateFileName="")) returned 1 [0245.955] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0245.955] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0245.955] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0245.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0245.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0245.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0245.956] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00160_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00160_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0245.956] GetFileType (hFile=0x220) returned 0x1 [0245.957] CloseHandle (hObject=0x220) returned 1 [0245.957] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0245.958] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00160_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00160_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x57f4)) returned 1 [0245.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0245.958] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0245.958] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00160_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00160_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x57f4)) returned 1 [0245.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0245.958] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0245.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0245.959] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3f34, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="BD00173_.WMF", cAlternateFileName="")) returned 1 [0245.959] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0245.959] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0245.959] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0245.959] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0245.960] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0245.960] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0245.960] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00173_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0245.961] GetFileType (hFile=0x220) returned 0x1 [0245.961] CloseHandle (hObject=0x220) returned 1 [0245.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0245.962] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00173_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3f34)) returned 1 [0245.962] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0245.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0245.962] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00173_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3f34)) returned 1 [0245.962] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0245.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0245.962] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0245.963] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4354, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="BD05119_.WMF", cAlternateFileName="")) returned 1 [0245.963] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0245.963] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0245.963] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0245.963] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0245.963] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0245.963] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0245.964] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD05119_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd05119_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0245.964] GetFileType (hFile=0x220) returned 0x1 [0245.964] CloseHandle (hObject=0x220) returned 1 [0245.965] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0245.965] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD05119_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd05119_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4354)) returned 1 [0245.965] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0245.965] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0245.965] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD05119_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd05119_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4354)) returned 1 [0245.966] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0245.966] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0245.966] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0245.966] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ef0, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="BD06102_.WMF", cAlternateFileName="")) returned 1 [0245.966] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0245.966] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0245.966] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0245.966] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0245.966] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0245.966] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0245.967] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06102_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06102_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0245.967] GetFileType (hFile=0x220) returned 0x1 [0245.968] CloseHandle (hObject=0x220) returned 1 [0245.968] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0245.968] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06102_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06102_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ef0)) returned 1 [0245.968] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0245.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0245.969] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06102_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06102_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ef0)) returned 1 [0245.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0245.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0245.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0245.969] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4124, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="BD06200_.WMF", cAlternateFileName="")) returned 1 [0245.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0245.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0245.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0245.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0245.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0245.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0245.971] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06200_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06200_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0245.971] GetFileType (hFile=0x220) returned 0x1 [0245.971] CloseHandle (hObject=0x220) returned 1 [0245.972] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0245.972] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06200_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06200_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4124)) returned 1 [0245.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0245.972] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0245.972] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06200_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06200_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4124)) returned 1 [0245.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0245.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0245.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0245.973] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x687c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="BD07761_.WMF", cAlternateFileName="")) returned 1 [0245.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0245.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0245.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0245.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0245.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0245.974] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0245.974] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07761_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07761_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0245.974] GetFileType (hFile=0x220) returned 0x1 [0246.346] CloseHandle (hObject=0x220) returned 1 [0246.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0246.347] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07761_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07761_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x687c)) returned 1 [0246.347] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0246.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0246.347] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07761_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07761_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x687c)) returned 1 [0246.348] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0246.348] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0246.348] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0246.348] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x133c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="BD07804_.WMF", cAlternateFileName="")) returned 1 [0246.348] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0246.348] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213570 [0246.348] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0246.348] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213570 | out: hHeap=0x1f0000) returned 1 [0246.348] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0246.348] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0246.349] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07804_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07804_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0246.349] GetFileType (hFile=0x220) returned 0x1 [0246.349] CloseHandle (hObject=0x220) returned 1 [0246.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0246.349] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07804_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07804_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x133c)) returned 1 [0246.350] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0246.351] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0246.351] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07804_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07804_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x133c)) returned 1 [0246.352] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0246.352] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0246.352] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0246.352] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfe2, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="BD07831_.WMF", cAlternateFileName="")) returned 1 [0246.352] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0246.352] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0246.352] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0246.352] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0246.352] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0246.352] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0246.353] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07831_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07831_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0246.353] GetFileType (hFile=0x220) returned 0x1 [0246.353] CloseHandle (hObject=0x220) returned 1 [0246.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0246.354] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07831_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07831_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfe2)) returned 1 [0246.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0246.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0246.354] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07831_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07831_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfe2)) returned 1 [0246.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0246.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0246.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0246.354] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5f00, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="BD08758_.WMF", cAlternateFileName="")) returned 1 [0246.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238348 [0246.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0246.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0246.355] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0246.355] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0246.355] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238348 | out: hHeap=0x1f0000) returned 1 [0246.355] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08758_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08758_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0246.356] GetFileType (hFile=0x220) returned 0x1 [0246.356] CloseHandle (hObject=0x220) returned 1 [0246.356] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0246.356] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08758_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08758_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5f00)) returned 1 [0246.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0246.357] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0246.357] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08758_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08758_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5f00)) returned 1 [0246.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0246.357] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0246.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0246.357] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x60ca, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="BD08773_.WMF", cAlternateFileName="")) returned 1 [0246.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0246.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0246.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0246.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0246.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0246.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0246.359] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08773_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08773_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0246.359] GetFileType (hFile=0x220) returned 0x1 [0246.359] CloseHandle (hObject=0x220) returned 1 [0246.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0246.360] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08773_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08773_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x60ca)) returned 1 [0246.360] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0246.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0246.360] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08773_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08773_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x60ca)) returned 1 [0246.360] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0246.361] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0246.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0246.361] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbb7c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="BD08808_.WMF", cAlternateFileName="")) returned 1 [0246.361] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0246.361] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0246.361] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0246.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0246.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0246.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0246.362] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08808_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08808_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0246.363] GetFileType (hFile=0x220) returned 0x1 [0246.363] CloseHandle (hObject=0x220) returned 1 [0246.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0246.363] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08808_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08808_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbb7c)) returned 1 [0246.364] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0246.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0246.364] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08808_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08808_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbb7c)) returned 1 [0246.364] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0246.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0246.364] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0246.364] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9d0e, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="BD08868_.WMF", cAlternateFileName="")) returned 1 [0246.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0246.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0246.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0246.365] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0246.365] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0246.365] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0246.366] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08868_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08868_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0246.367] GetFileType (hFile=0x220) returned 0x1 [0246.367] CloseHandle (hObject=0x220) returned 1 [0246.368] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0246.368] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08868_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08868_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9d0e)) returned 1 [0246.368] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0246.368] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0246.368] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08868_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08868_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9d0e)) returned 1 [0246.369] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0246.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0246.369] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0246.369] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd4897d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd4897d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbaaa, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="BD09031_.WMF", cAlternateFileName="")) returned 1 [0246.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380f0 [0246.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0246.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0246.370] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0246.370] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0246.370] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380f0 | out: hHeap=0x1f0000) returned 1 [0246.371] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09031_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09031_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0246.371] GetFileType (hFile=0x220) returned 0x1 [0246.372] CloseHandle (hObject=0x220) returned 1 [0246.372] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0246.373] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09031_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09031_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd4897d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd4897d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbaaa)) returned 1 [0246.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0246.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0246.373] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09031_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09031_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd4897d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd4897d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbaaa)) returned 1 [0246.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0246.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0246.374] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0246.374] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x38cc, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="BD09194_.WMF", cAlternateFileName="")) returned 1 [0246.374] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0246.374] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0246.374] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0246.374] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0246.374] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0246.374] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0246.375] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09194_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09194_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0246.376] GetFileType (hFile=0x220) returned 0x1 [0246.376] CloseHandle (hObject=0x220) returned 1 [0246.377] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0246.377] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09194_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09194_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x38cc)) returned 1 [0246.377] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0246.377] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0246.377] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09194_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09194_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x38cc)) returned 1 [0246.377] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0246.377] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0246.378] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0246.378] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x504a, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="BD09662_.WMF", cAlternateFileName="")) returned 1 [0246.378] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0246.378] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0246.378] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0246.378] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0246.378] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0246.379] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0246.379] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09662_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09662_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0246.379] GetFileType (hFile=0x220) returned 0x1 [0246.380] CloseHandle (hObject=0x220) returned 1 [0246.380] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0246.380] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09662_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09662_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x504a)) returned 1 [0246.381] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0246.381] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0246.381] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09662_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09662_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x504a)) returned 1 [0246.726] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0246.726] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0246.726] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0246.726] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f1e, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="BD09664_.WMF", cAlternateFileName="")) returned 1 [0246.744] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0246.744] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0246.744] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0246.745] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0246.745] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0246.745] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0247.055] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09664_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09664_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0247.055] GetFileType (hFile=0x1e8) returned 0x1 [0247.055] CloseHandle (hObject=0x1e8) returned 1 [0247.056] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0247.056] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09664_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09664_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f1e)) returned 1 [0247.056] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0247.056] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0247.057] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09664_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09664_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f1e)) returned 1 [0247.057] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0247.057] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0247.057] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0247.057] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x34cb, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="BD10890_.GIF", cAlternateFileName="")) returned 1 [0247.057] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0247.057] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0247.058] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0247.058] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0247.058] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0247.058] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0247.059] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10890_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0247.059] GetFileType (hFile=0x1e8) returned 0x1 [0247.059] CloseHandle (hObject=0x1e8) returned 1 [0247.060] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0247.060] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10890_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x34cb)) returned 1 [0247.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0247.060] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0247.060] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10890_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x34cb)) returned 1 [0247.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0247.061] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0247.061] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0247.061] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4edd, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="BD10972_.GIF", cAlternateFileName="")) returned 1 [0247.061] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0247.061] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0247.061] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0247.061] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0247.061] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0247.062] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0247.062] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10972_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0247.062] GetFileType (hFile=0x1e8) returned 0x1 [0247.063] CloseHandle (hObject=0x1e8) returned 1 [0247.063] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0247.064] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10972_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4edd)) returned 1 [0247.064] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0247.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0247.064] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10972_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4edd)) returned 1 [0247.064] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0247.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0247.064] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0247.064] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4fe6, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="BD19563_.GIF", cAlternateFileName="")) returned 1 [0247.065] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0247.065] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0247.065] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0247.065] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0247.065] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0247.065] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0247.066] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19563_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0247.066] GetFileType (hFile=0x1e8) returned 0x1 [0247.067] CloseHandle (hObject=0x1e8) returned 1 [0247.067] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0247.067] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19563_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4fe6)) returned 1 [0247.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0247.067] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0247.068] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19563_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4fe6)) returned 1 [0247.068] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0247.068] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0247.068] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0247.068] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d75, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="BD19582_.GIF", cAlternateFileName="")) returned 1 [0247.068] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0247.068] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0247.069] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0247.069] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0247.069] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0247.069] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0247.070] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19582_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0247.071] GetFileType (hFile=0x1e8) returned 0x1 [0247.072] CloseHandle (hObject=0x1e8) returned 1 [0247.072] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0247.072] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19582_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d75)) returned 1 [0247.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0247.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0247.073] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19582_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d75)) returned 1 [0247.073] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0247.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0247.073] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0247.073] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32b6, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="BD19695_.WMF", cAlternateFileName="")) returned 1 [0247.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0247.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0247.074] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0247.074] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0247.074] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0247.074] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0247.075] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19695_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19695_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0247.075] GetFileType (hFile=0x1e8) returned 0x1 [0247.075] CloseHandle (hObject=0x1e8) returned 1 [0247.076] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0247.076] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19695_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19695_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32b6)) returned 1 [0247.076] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0247.076] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0247.076] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19695_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19695_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32b6)) returned 1 [0247.076] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0247.076] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0247.077] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0247.077] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x25ee, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="BD19827_.WMF", cAlternateFileName="")) returned 1 [0247.077] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0247.077] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0247.077] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0247.077] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0247.077] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0247.077] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0247.078] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19827_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19827_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0247.078] GetFileType (hFile=0x1e8) returned 0x1 [0247.079] CloseHandle (hObject=0x1e8) returned 1 [0247.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0247.079] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19827_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19827_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x25ee)) returned 1 [0247.079] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0247.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0247.079] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19827_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19827_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x25ee)) returned 1 [0247.080] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0247.080] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0247.080] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0247.080] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2244, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="BD19828_.WMF", cAlternateFileName="")) returned 1 [0247.080] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0247.080] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2134e8 [0247.080] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0247.080] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2134e8 | out: hHeap=0x1f0000) returned 1 [0247.081] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0247.081] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0247.081] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19828_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19828_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0247.082] GetFileType (hFile=0x1e8) returned 0x1 [0247.082] CloseHandle (hObject=0x1e8) returned 1 [0247.083] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0247.083] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19828_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19828_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2244)) returned 1 [0247.083] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0247.083] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0247.083] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19828_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19828_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2244)) returned 1 [0247.083] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0247.083] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0247.083] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0247.083] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3896, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="BD19986_.WMF", cAlternateFileName="")) returned 1 [0247.084] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0247.084] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0247.084] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0247.084] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0247.084] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0247.084] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0247.085] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19986_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19986_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0247.085] GetFileType (hFile=0x1e8) returned 0x1 [0247.085] CloseHandle (hObject=0x1e8) returned 1 [0247.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0247.086] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19986_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19986_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3896)) returned 1 [0247.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0247.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0247.086] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19986_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19986_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3896)) returned 1 [0247.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0247.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0247.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0247.086] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4780, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="BD19988_.WMF", cAlternateFileName="")) returned 1 [0247.087] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0247.087] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0247.087] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0247.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0247.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0247.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0247.088] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19988_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19988_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0247.088] GetFileType (hFile=0x1e8) returned 0x1 [0247.089] CloseHandle (hObject=0x1e8) returned 1 [0247.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0247.089] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19988_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19988_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4780)) returned 1 [0247.089] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0247.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0247.089] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19988_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19988_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4780)) returned 1 [0247.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0247.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0247.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0247.090] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b32, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="BD20013_.WMF", cAlternateFileName="")) returned 1 [0247.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0247.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0247.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0247.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0247.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0247.091] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0247.091] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD20013_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd20013_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0247.091] GetFileType (hFile=0x1e8) returned 0x1 [0247.092] CloseHandle (hObject=0x1e8) returned 1 [0247.092] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0247.092] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD20013_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd20013_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b32)) returned 1 [0247.092] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0247.092] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0247.092] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD20013_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd20013_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b32)) returned 1 [0247.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0247.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0247.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0247.093] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30e8, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="BL00008_.WMF", cAlternateFileName="")) returned 1 [0247.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0247.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e88 [0247.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0247.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e88 | out: hHeap=0x1f0000) returned 1 [0247.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0247.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0247.094] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00008_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00008_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0247.094] GetFileType (hFile=0x1e8) returned 0x1 [0247.095] CloseHandle (hObject=0x1e8) returned 1 [0247.095] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0247.095] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00008_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00008_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30e8)) returned 1 [0247.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0247.095] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0247.096] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00008_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00008_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30e8)) returned 1 [0247.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0247.096] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0247.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0247.096] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd4897d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd4897d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x265a, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="BL00012_.WMF", cAlternateFileName="")) returned 1 [0247.096] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0247.096] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0247.096] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0247.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0247.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0247.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0247.097] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00012_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00012_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0247.097] GetFileType (hFile=0x1e8) returned 0x1 [0247.098] CloseHandle (hObject=0x1e8) returned 1 [0247.098] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0247.098] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00012_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00012_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd4897d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd4897d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x265a)) returned 1 [0247.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0247.098] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0247.099] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00012_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00012_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd4897d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd4897d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x265a)) returned 1 [0247.099] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0247.099] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0247.099] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0247.099] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1eb6, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="BL00045_.WMF", cAlternateFileName="")) returned 1 [0247.099] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0247.099] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0247.099] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0247.100] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0247.100] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0247.522] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0247.523] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00045_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00045_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0247.523] GetFileType (hFile=0x224) returned 0x1 [0247.523] CloseHandle (hObject=0x224) returned 1 [0247.524] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0247.524] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00045_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00045_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1eb6)) returned 1 [0247.524] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0247.524] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0247.524] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00045_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00045_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1eb6)) returned 1 [0247.524] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0247.525] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0247.525] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0247.525] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3f4, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="BL00098_.WMF", cAlternateFileName="")) returned 1 [0247.525] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380f0 [0247.525] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0247.525] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0247.525] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0247.525] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0247.526] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380f0 | out: hHeap=0x1f0000) returned 1 [0247.526] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00098_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00098_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0247.526] GetFileType (hFile=0x224) returned 0x1 [0247.527] CloseHandle (hObject=0x224) returned 1 [0247.527] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0247.528] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00098_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00098_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3f4)) returned 1 [0247.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0247.528] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0247.528] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00098_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00098_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3f4)) returned 1 [0247.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0247.528] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0247.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0247.528] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd4897d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd4897d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x370, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="BL00105_.WMF", cAlternateFileName="")) returned 1 [0247.528] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0247.529] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0247.529] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0247.529] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0247.529] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0247.529] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0247.529] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00105_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00105_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0247.530] GetFileType (hFile=0x224) returned 0x1 [0247.530] CloseHandle (hObject=0x224) returned 1 [0247.530] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0247.530] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00105_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00105_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd4897d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd4897d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x370)) returned 1 [0247.531] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0247.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0247.531] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00105_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00105_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd4897d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd4897d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x370)) returned 1 [0247.531] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0247.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0247.531] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0247.531] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd4897d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd4897d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27a2, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="BL00122_.WMF", cAlternateFileName="")) returned 1 [0247.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0247.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0247.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0247.532] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0247.532] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0247.532] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0247.532] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00122_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00122_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0247.533] GetFileType (hFile=0x224) returned 0x1 [0247.533] CloseHandle (hObject=0x224) returned 1 [0247.534] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0247.534] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00122_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00122_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd4897d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd4897d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27a2)) returned 1 [0247.534] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0247.534] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0247.534] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00122_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00122_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd4897d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd4897d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27a2)) returned 1 [0247.534] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0247.534] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0247.535] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0247.535] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd5c704c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd5c704c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5b8, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="BL00130_.WMF", cAlternateFileName="")) returned 1 [0247.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0247.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0247.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0247.535] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0247.535] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0247.535] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0247.536] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00130_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00130_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0247.536] GetFileType (hFile=0x224) returned 0x1 [0247.536] CloseHandle (hObject=0x224) returned 1 [0247.537] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0247.537] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00130_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00130_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd5c704c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd5c704c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5b8)) returned 1 [0247.537] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0247.537] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0247.537] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00130_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00130_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd5c704c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd5c704c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5b8)) returned 1 [0247.537] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0247.537] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0247.538] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0247.538] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcdbb058, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcdbb058, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd5c704c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6a0, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="BL00148_.WMF", cAlternateFileName="")) returned 1 [0247.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0247.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2134e8 [0247.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0247.538] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2134e8 | out: hHeap=0x1f0000) returned 1 [0247.538] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0247.540] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0247.541] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00148_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00148_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0247.541] GetFileType (hFile=0x224) returned 0x1 [0247.542] CloseHandle (hObject=0x224) returned 1 [0247.542] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0247.542] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00148_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00148_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcdbb058, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcdbb058, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd5c704c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6a0)) returned 1 [0247.542] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0247.542] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0247.543] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00148_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00148_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcdbb058, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcdbb058, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd5c704c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6a0)) returned 1 [0247.543] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0247.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0247.543] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0247.543] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcdbb058, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcdbb058, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd5c704c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5ec, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="BL00152_.WMF", cAlternateFileName="")) returned 1 [0247.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0247.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213570 [0247.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0247.546] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213570 | out: hHeap=0x1f0000) returned 1 [0247.547] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0247.547] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0247.547] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00152_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00152_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0247.548] GetFileType (hFile=0x224) returned 0x1 [0247.548] CloseHandle (hObject=0x224) returned 1 [0247.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0247.549] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00152_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00152_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcdbb058, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcdbb058, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd5c704c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5ec)) returned 1 [0247.549] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0247.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0247.549] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00152_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00152_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcdbb058, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcdbb058, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd5c704c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5ec)) returned 1 [0247.549] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0247.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0247.550] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0247.550] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcdbb058, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf92, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="BL00194_.WMF", cAlternateFileName="")) returned 1 [0247.550] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0247.550] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2134e8 [0247.550] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0247.550] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2134e8 | out: hHeap=0x1f0000) returned 1 [0247.550] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0247.551] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0247.551] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00194_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00194_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0247.552] GetFileType (hFile=0x224) returned 0x1 [0247.552] CloseHandle (hObject=0x224) returned 1 [0247.553] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0247.553] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00194_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00194_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcdbb058, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf92)) returned 1 [0247.553] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0247.553] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0247.553] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00194_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00194_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcdbb058, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf92)) returned 1 [0247.554] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0247.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0247.554] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0247.554] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcdbb058, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f86, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="BL00195_.WMF", cAlternateFileName="")) returned 1 [0247.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0247.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213570 [0247.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0247.554] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213570 | out: hHeap=0x1f0000) returned 1 [0247.555] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0247.555] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0247.555] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00195_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00195_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0247.556] GetFileType (hFile=0x224) returned 0x1 [0247.556] CloseHandle (hObject=0x224) returned 1 [0247.557] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0247.557] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00195_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00195_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcdbb058, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f86)) returned 1 [0247.557] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0247.557] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0247.557] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00195_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00195_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcdbb058, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f86)) returned 1 [0247.557] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0247.557] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0247.558] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0247.558] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2458, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="BL00234_.WMF", cAlternateFileName="")) returned 1 [0247.558] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0247.558] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0247.558] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0247.558] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0247.558] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0247.558] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0247.559] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00234_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00234_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0247.559] GetFileType (hFile=0x224) returned 0x1 [0247.559] CloseHandle (hObject=0x224) returned 1 [0247.559] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0247.559] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00234_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00234_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2458)) returned 1 [0247.560] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0247.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0247.560] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00234_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00234_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2458)) returned 1 [0247.560] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0247.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0247.560] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0247.560] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd5c704c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfb8, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="BL00242_.WMF", cAlternateFileName="")) returned 1 [0247.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0247.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e88 [0247.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0247.560] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e88 | out: hHeap=0x1f0000) returned 1 [0247.561] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0247.561] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0247.561] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00242_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00242_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0247.561] GetFileType (hFile=0x224) returned 0x1 [0247.562] CloseHandle (hObject=0x224) returned 1 [0247.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0247.562] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00242_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00242_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd5c704c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfb8)) returned 1 [0247.562] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0247.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0247.563] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00242_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00242_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd5c704c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfb8)) returned 1 [0247.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0247.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0247.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0247.563] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcdbb058, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x386c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="BL00247_.WMF", cAlternateFileName="")) returned 1 [0247.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0247.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0247.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0247.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0247.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0247.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0247.564] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00247_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00247_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0247.564] GetFileType (hFile=0x224) returned 0x1 [0247.565] CloseHandle (hObject=0x224) returned 1 [0247.566] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0247.566] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00247_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00247_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcdbb058, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x386c)) returned 1 [0247.566] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0247.566] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0247.566] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00247_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00247_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcdbb058, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x386c)) returned 1 [0247.566] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0247.566] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0247.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0247.567] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x600, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="BL00248_.WMF", cAlternateFileName="")) returned 1 [0247.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0247.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0247.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0247.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0247.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0247.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0247.568] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00248_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00248_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0247.568] GetFileType (hFile=0x224) returned 0x1 [0248.011] CloseHandle (hObject=0x224) returned 1 [0248.012] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0248.012] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00248_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00248_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x600)) returned 1 [0248.012] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0248.012] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0248.012] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00248_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00248_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x600)) returned 1 [0248.013] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0248.013] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0248.013] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0248.013] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcdbb058, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1264, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="BL00252_.WMF", cAlternateFileName="")) returned 1 [0248.013] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0248.013] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0248.013] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0248.013] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0248.014] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0248.014] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0248.051] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00252_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00252_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0248.051] GetFileType (hFile=0x224) returned 0x1 [0248.052] CloseHandle (hObject=0x224) returned 1 [0248.052] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0248.052] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00252_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00252_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcdbb058, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1264)) returned 1 [0248.053] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0248.053] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0248.053] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00252_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00252_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcdbb058, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1264)) returned 1 [0248.053] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0248.053] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0248.053] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0248.054] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd685b3d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6c8, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="BL00254_.WMF", cAlternateFileName="")) returned 1 [0248.054] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0248.054] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0248.054] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0248.054] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0248.054] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0248.054] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0248.055] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00254_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00254_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0248.056] GetFileType (hFile=0x224) returned 0x1 [0248.057] CloseHandle (hObject=0x224) returned 1 [0248.057] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0248.057] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00254_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00254_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd685b3d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6c8)) returned 1 [0248.058] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0248.058] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0248.058] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00254_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00254_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd685b3d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6c8)) returned 1 [0248.058] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0248.058] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0248.058] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0248.059] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30c2, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="BL00261_.WMF", cAlternateFileName="")) returned 1 [0248.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0248.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2134e8 [0248.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0248.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2134e8 | out: hHeap=0x1f0000) returned 1 [0248.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0248.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0248.060] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00261_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00261_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0248.061] GetFileType (hFile=0x224) returned 0x1 [0248.061] CloseHandle (hObject=0x224) returned 1 [0248.062] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0248.062] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00261_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00261_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30c2)) returned 1 [0248.062] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0248.062] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0248.062] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00261_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00261_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30c2)) returned 1 [0248.063] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0248.063] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0248.063] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0248.063] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9fc, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="BL00262_.WMF", cAlternateFileName="")) returned 1 [0248.063] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238348 [0248.063] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e88 [0248.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0248.064] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e88 | out: hHeap=0x1f0000) returned 1 [0248.064] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0248.064] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238348 | out: hHeap=0x1f0000) returned 1 [0248.065] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00262_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00262_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0248.065] GetFileType (hFile=0x224) returned 0x1 [0248.066] CloseHandle (hObject=0x224) returned 1 [0248.067] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0248.067] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00262_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00262_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9fc)) returned 1 [0248.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0248.067] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0248.067] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00262_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00262_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9fc)) returned 1 [0248.068] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0248.068] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0248.068] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0248.068] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1678, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="BL00265_.WMF", cAlternateFileName="")) returned 1 [0248.068] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0248.068] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0248.069] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0248.069] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0248.069] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0248.069] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0248.070] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00265_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00265_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0248.070] GetFileType (hFile=0x224) returned 0x1 [0248.071] CloseHandle (hObject=0x224) returned 1 [0248.071] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0248.072] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00265_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00265_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1678)) returned 1 [0248.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0248.072] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0248.072] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00265_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00265_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1678)) returned 1 [0248.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0248.072] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0248.073] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0248.073] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa54, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="BL00267_.WMF", cAlternateFileName="")) returned 1 [0248.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0248.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2134e8 [0248.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0248.073] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2134e8 | out: hHeap=0x1f0000) returned 1 [0248.073] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0248.074] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0248.074] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00267_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00267_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0248.075] GetFileType (hFile=0x224) returned 0x1 [0248.075] CloseHandle (hObject=0x224) returned 1 [0248.076] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0248.076] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00267_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00267_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa54)) returned 1 [0248.076] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0248.076] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0248.077] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00267_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00267_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa54)) returned 1 [0248.077] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0248.077] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0248.077] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0248.077] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd5c704c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd5c704c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd5c704c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1498, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="BL00269_.WMF", cAlternateFileName="")) returned 1 [0248.077] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0248.077] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2134e8 [0248.078] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0248.078] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2134e8 | out: hHeap=0x1f0000) returned 1 [0248.078] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0248.078] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0248.079] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00269_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00269_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0248.542] GetFileType (hFile=0x210) returned 0x1 [0248.542] CloseHandle (hObject=0x210) returned 1 [0248.542] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0248.543] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00269_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00269_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd5c704c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd5c704c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd5c704c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1498)) returned 1 [0248.543] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0248.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0248.543] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00269_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00269_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd5c704c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd5c704c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd5c704c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1498)) returned 1 [0248.543] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0248.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0248.543] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0248.543] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc8, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="BL00270_.WMF", cAlternateFileName="")) returned 1 [0248.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0248.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0248.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0248.544] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0248.544] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0248.544] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0248.544] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00270_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00270_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0248.544] GetFileType (hFile=0x210) returned 0x1 [0248.545] CloseHandle (hObject=0x210) returned 1 [0248.545] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0248.545] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00270_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00270_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc8)) returned 1 [0248.545] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0248.545] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0248.545] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00270_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00270_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc8)) returned 1 [0248.545] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0248.545] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0248.545] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0248.546] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xec4, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="BL00273_.WMF", cAlternateFileName="")) returned 1 [0248.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0248.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0248.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0248.546] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0248.546] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0248.546] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0248.546] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00273_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00273_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0248.547] GetFileType (hFile=0x210) returned 0x1 [0248.547] CloseHandle (hObject=0x210) returned 1 [0248.547] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0248.547] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00273_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00273_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xec4)) returned 1 [0248.547] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0248.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0248.548] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00273_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00273_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xec4)) returned 1 [0248.548] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0248.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0248.548] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0248.548] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd5c704c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd5c704c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1044, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="BL00274_.WMF", cAlternateFileName="")) returned 1 [0248.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0248.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0248.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0248.548] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0248.548] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0248.549] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0248.549] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00274_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00274_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0248.549] GetFileType (hFile=0x210) returned 0x1 [0248.550] CloseHandle (hObject=0x210) returned 1 [0248.550] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0248.550] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00274_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00274_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd5c704c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd5c704c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1044)) returned 1 [0248.550] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0248.550] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0248.550] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00274_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00274_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd5c704c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd5c704c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1044)) returned 1 [0248.550] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0248.550] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0248.550] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0248.551] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd5c704c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd5c704c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="BL00296_.WMF", cAlternateFileName="")) returned 1 [0248.551] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0248.551] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0248.551] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0248.551] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0248.551] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0248.551] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0248.551] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00296_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00296_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0248.552] GetFileType (hFile=0x210) returned 0x1 [0248.552] CloseHandle (hObject=0x210) returned 1 [0248.552] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0248.552] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00296_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00296_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd5c704c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd5c704c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32c)) returned 1 [0248.553] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0248.553] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0248.553] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00296_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00296_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd5c704c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd5c704c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32c)) returned 1 [0248.553] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0248.553] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0248.553] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0248.553] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x332e, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="BL00390_.WMF", cAlternateFileName="")) returned 1 [0248.553] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0248.553] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0248.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0248.554] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0248.554] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0248.554] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0248.554] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00390_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00390_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0248.555] GetFileType (hFile=0x210) returned 0x1 [0248.555] CloseHandle (hObject=0x210) returned 1 [0248.555] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0248.555] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00390_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00390_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x332e)) returned 1 [0248.556] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0248.556] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0248.556] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00390_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00390_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x332e)) returned 1 [0248.556] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0248.557] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0248.557] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0248.557] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd685b3d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd685b3d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x69aa, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="BL00392_.WMF", cAlternateFileName="")) returned 1 [0248.557] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0248.557] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0248.557] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0248.557] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0248.557] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0248.557] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0248.558] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00392_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00392_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0248.558] GetFileType (hFile=0x210) returned 0x1 [0248.559] CloseHandle (hObject=0x210) returned 1 [0248.559] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0248.559] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00392_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00392_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd685b3d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd685b3d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x69aa)) returned 1 [0248.559] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0248.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0248.560] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00392_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00392_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd685b3d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd685b3d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x69aa)) returned 1 [0248.560] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0248.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0248.560] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0248.560] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd685b3d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd685b3d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b54, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="BL00524_.WMF", cAlternateFileName="")) returned 1 [0248.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0248.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0248.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0248.560] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0248.560] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0248.561] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0248.561] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00524_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00524_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0248.561] GetFileType (hFile=0x210) returned 0x1 [0248.562] CloseHandle (hObject=0x210) returned 1 [0248.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0248.562] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00524_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00524_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd685b3d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd685b3d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b54)) returned 1 [0248.562] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0248.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0248.562] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00524_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00524_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd685b3d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd685b3d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b54)) returned 1 [0248.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0248.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0248.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0248.563] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd685b3d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd685b3d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2576, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="BL00525_.WMF", cAlternateFileName="")) returned 1 [0248.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0248.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0248.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0248.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0248.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0248.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0248.564] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00525_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00525_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0248.564] GetFileType (hFile=0x210) returned 0x1 [0248.565] CloseHandle (hObject=0x210) returned 1 [0248.565] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0248.565] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00525_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00525_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd685b3d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd685b3d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2576)) returned 1 [0248.565] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0248.565] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0248.565] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00525_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00525_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd685b3d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd685b3d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2576)) returned 1 [0248.566] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0248.566] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0248.566] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0248.566] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd65f8ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd65f8ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd685b3d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6ba0, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="BL00526_.WMF", cAlternateFileName="")) returned 1 [0248.566] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0248.566] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0248.566] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0248.566] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0248.566] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0248.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0248.567] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00526_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00526_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0248.567] GetFileType (hFile=0x210) returned 0x1 [0248.568] CloseHandle (hObject=0x210) returned 1 [0248.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0248.568] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00526_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00526_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd65f8ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd65f8ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd685b3d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6ba0)) returned 1 [0248.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0248.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0248.569] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00526_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00526_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd65f8ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd65f8ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd685b3d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6ba0)) returned 1 [0248.569] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0248.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0248.569] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0248.569] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2cec, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="BL00648_.WMF", cAlternateFileName="")) returned 1 [0248.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0248.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0248.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0248.569] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0248.569] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0248.569] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0248.570] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00648_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00648_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0248.570] GetFileType (hFile=0x210) returned 0x1 [0248.570] CloseHandle (hObject=0x210) returned 1 [0248.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0248.571] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00648_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00648_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2cec)) returned 1 [0248.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0248.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0248.571] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00648_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00648_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2cec)) returned 1 [0248.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0248.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0248.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0248.571] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd685b3d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd685b3d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1138, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="BL00921_.WMF", cAlternateFileName="")) returned 1 [0248.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0248.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0248.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0248.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0248.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0248.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0248.573] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00921_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00921_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0248.574] GetFileType (hFile=0x210) returned 0x1 [0248.574] CloseHandle (hObject=0x210) returned 1 [0248.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0248.574] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00921_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00921_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd685b3d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd685b3d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1138)) returned 1 [0248.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0248.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0248.575] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00921_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00921_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd685b3d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd685b3d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1138)) returned 1 [0248.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0248.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0248.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0248.575] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd65f8ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd65f8ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1870, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="BL00923_.WMF", cAlternateFileName="")) returned 1 [0248.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0248.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0248.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0248.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0248.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0248.576] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0248.576] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00923_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00923_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0248.576] GetFileType (hFile=0x210) returned 0x1 [0248.577] CloseHandle (hObject=0x210) returned 1 [0248.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0248.577] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00923_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00923_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd65f8ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd65f8ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1870)) returned 1 [0248.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0248.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0248.577] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00923_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00923_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd65f8ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd65f8ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1870)) returned 1 [0248.578] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0248.578] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0248.578] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0248.578] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd65f8ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd65f8ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd685b3d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c14, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="BL00932_.WMF", cAlternateFileName="")) returned 1 [0248.578] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0248.578] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213570 [0248.578] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0248.578] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213570 | out: hHeap=0x1f0000) returned 1 [0248.578] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0248.578] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0248.578] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00932_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00932_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0248.579] GetFileType (hFile=0x210) returned 0x1 [0248.579] CloseHandle (hObject=0x210) returned 1 [0248.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0248.579] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00932_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00932_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd65f8ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd65f8ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd685b3d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c14)) returned 1 [0248.580] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0248.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0248.580] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00932_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00932_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd65f8ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd65f8ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd685b3d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c14)) returned 1 [0248.580] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0248.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0248.580] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0248.580] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd65f8ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd65f8ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd685b3d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xeb8, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="BL00985_.WMF", cAlternateFileName="")) returned 1 [0248.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0248.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0248.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0248.580] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0248.580] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0248.581] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0248.581] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00985_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00985_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0248.581] GetFileType (hFile=0x210) returned 0x1 [0248.581] CloseHandle (hObject=0x210) returned 1 [0248.582] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0248.582] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00985_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00985_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd65f8ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd65f8ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd685b3d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xeb8)) returned 1 [0248.582] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0248.582] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0248.582] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00985_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00985_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd65f8ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd65f8ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd685b3d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xeb8)) returned 1 [0248.582] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0248.582] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0248.582] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0248.582] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd16, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="BOAT.WMF", cAlternateFileName="")) returned 1 [0248.582] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0248.583] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0248.583] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0248.583] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0248.583] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0248.583] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0248.583] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOAT.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\boat.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0248.583] GetFileType (hFile=0x210) returned 0x1 [0248.584] CloseHandle (hObject=0x210) returned 1 [0248.584] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0248.584] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOAT.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\boat.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd16)) returned 1 [0248.584] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0248.584] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0248.584] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOAT.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\boat.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd16)) returned 1 [0248.585] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0248.585] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0248.585] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0248.585] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x714c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="BOATINST.WMF", cAlternateFileName="")) returned 1 [0248.585] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0248.585] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0248.585] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0248.585] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0248.585] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0248.585] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0248.586] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOATINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\boatinst.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0248.586] GetFileType (hFile=0x210) returned 0x1 [0248.586] CloseHandle (hObject=0x210) returned 1 [0248.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0248.586] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOATINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\boatinst.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x714c)) returned 1 [0248.587] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0248.587] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0248.587] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOATINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\boatinst.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x714c)) returned 1 [0248.587] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0248.587] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0248.587] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0248.587] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x532, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="BS00076_.WMF", cAlternateFileName="")) returned 1 [0248.587] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0248.587] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0249.145] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0249.145] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0249.146] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0249.146] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0249.147] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00076_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00076_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0249.147] GetFileType (hFile=0x1c0) returned 0x1 [0249.147] CloseHandle (hObject=0x1c0) returned 1 [0249.148] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0249.148] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00076_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00076_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x532)) returned 1 [0249.148] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0249.148] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0249.148] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00076_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00076_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x532)) returned 1 [0249.149] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0249.149] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0249.149] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0249.149] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5a4, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="BS00078_.WMF", cAlternateFileName="")) returned 1 [0249.149] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0249.149] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0249.149] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0249.149] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0249.150] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0249.150] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0249.151] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00078_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00078_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0249.151] GetFileType (hFile=0x1c0) returned 0x1 [0249.152] CloseHandle (hObject=0x1c0) returned 1 [0249.152] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0249.152] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00078_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00078_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5a4)) returned 1 [0249.152] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0249.153] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0249.153] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00078_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00078_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5a4)) returned 1 [0249.153] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0249.153] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0249.153] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0249.153] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f26, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="BS00092_.WMF", cAlternateFileName="")) returned 1 [0249.153] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0249.153] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0249.154] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0249.154] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0249.154] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0249.154] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0249.155] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00092_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00092_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0249.155] GetFileType (hFile=0x1c0) returned 0x1 [0249.155] CloseHandle (hObject=0x1c0) returned 1 [0249.156] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0249.156] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00092_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00092_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f26)) returned 1 [0249.156] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0249.156] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0249.156] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00092_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00092_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f26)) returned 1 [0249.157] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0249.157] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0249.157] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0249.157] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x94a, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="BS00100_.WMF", cAlternateFileName="")) returned 1 [0249.157] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0249.157] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0249.157] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0249.157] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0249.157] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0249.185] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0249.186] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00100_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00100_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0249.186] GetFileType (hFile=0x1c0) returned 0x1 [0249.187] CloseHandle (hObject=0x1c0) returned 1 [0249.187] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0249.187] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00100_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00100_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x94a)) returned 1 [0249.187] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0249.188] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0249.188] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00100_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00100_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x94a)) returned 1 [0249.188] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0249.188] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0249.188] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0249.188] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="BS00135_.WMF", cAlternateFileName="")) returned 1 [0249.188] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0249.189] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0249.189] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0249.189] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0249.189] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0249.189] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0249.190] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00135_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00135_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0249.190] GetFileType (hFile=0x1c0) returned 0x1 [0249.191] CloseHandle (hObject=0x1c0) returned 1 [0249.191] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0249.191] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00135_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00135_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x414)) returned 1 [0249.191] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0249.191] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0249.191] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00135_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00135_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x414)) returned 1 [0249.192] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0249.192] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0249.192] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0249.192] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x876, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="BS00136_.WMF", cAlternateFileName="")) returned 1 [0249.192] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0249.192] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0249.192] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0249.192] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0249.193] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0249.193] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0249.194] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00136_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00136_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0249.194] GetFileType (hFile=0x1c0) returned 0x1 [0249.194] CloseHandle (hObject=0x1c0) returned 1 [0249.195] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0249.195] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00136_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00136_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x876)) returned 1 [0249.195] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0249.195] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0249.195] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00136_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00136_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x876)) returned 1 [0249.196] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0249.196] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0249.196] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0249.196] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6b0, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="BS00145_.WMF", cAlternateFileName="")) returned 1 [0249.196] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0249.196] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0249.196] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0249.196] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0249.196] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0249.197] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0249.198] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00145_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00145_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0249.198] GetFileType (hFile=0x1c0) returned 0x1 [0249.199] CloseHandle (hObject=0x1c0) returned 1 [0249.199] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0249.199] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00145_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00145_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6b0)) returned 1 [0249.199] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0249.199] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0249.200] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00145_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00145_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6b0)) returned 1 [0249.200] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0249.200] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0249.200] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0249.200] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20ae, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="BS00174_.WMF", cAlternateFileName="")) returned 1 [0249.200] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0249.200] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0249.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0249.201] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0249.201] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0249.201] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0249.202] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00174_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0249.202] GetFileType (hFile=0x1c0) returned 0x1 [0249.203] CloseHandle (hObject=0x1c0) returned 1 [0249.203] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0249.203] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00174_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20ae)) returned 1 [0249.203] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0249.204] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0249.204] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00174_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20ae)) returned 1 [0249.204] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0249.204] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0249.204] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0249.204] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1370, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="BS00184_.WMF", cAlternateFileName="")) returned 1 [0249.204] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0249.205] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0249.205] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0249.205] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0249.205] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0249.205] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0249.206] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00184_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0249.206] GetFileType (hFile=0x1c0) returned 0x1 [0249.207] CloseHandle (hObject=0x1c0) returned 1 [0249.207] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0249.208] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00184_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1370)) returned 1 [0249.208] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0249.208] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0249.208] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00184_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1370)) returned 1 [0249.208] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0249.208] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0249.208] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0249.208] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31f4, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="BS00186_.WMF", cAlternateFileName="")) returned 1 [0249.209] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0249.209] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0249.209] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0249.209] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0249.209] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0249.209] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0249.211] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00186_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00186_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0249.211] GetFileType (hFile=0x1c0) returned 0x1 [0249.211] CloseHandle (hObject=0x1c0) returned 1 [0249.212] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0249.212] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00186_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00186_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31f4)) returned 1 [0249.212] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0249.212] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0249.502] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00186_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00186_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31f4)) returned 1 [0249.502] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0249.502] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0249.502] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0249.503] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc20, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="BS00200_.WMF", cAlternateFileName="")) returned 1 [0249.503] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0249.503] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0249.503] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0249.503] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0249.503] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0249.503] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0249.504] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00200_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00200_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0249.504] GetFileType (hFile=0x1fc) returned 0x1 [0249.505] CloseHandle (hObject=0x1fc) returned 1 [0249.505] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0249.505] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00200_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00200_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc20)) returned 1 [0249.506] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0249.506] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0249.506] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00200_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00200_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc20)) returned 1 [0249.506] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0249.506] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0249.506] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0249.506] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x634, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="BS00224_.WMF", cAlternateFileName="")) returned 1 [0249.507] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0249.507] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0249.507] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0249.507] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0249.507] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0249.507] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0249.508] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00224_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00224_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0249.508] GetFileType (hFile=0x1fc) returned 0x1 [0249.509] CloseHandle (hObject=0x1fc) returned 1 [0249.509] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0249.509] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00224_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00224_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x634)) returned 1 [0249.510] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0249.510] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0249.510] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00224_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00224_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x634)) returned 1 [0249.510] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0249.510] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0249.510] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0249.510] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4bc, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="BS00438_.WMF", cAlternateFileName="")) returned 1 [0249.510] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0249.511] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0249.511] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0249.511] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0249.511] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0249.511] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0249.512] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00438_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00438_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0249.512] GetFileType (hFile=0x1fc) returned 0x1 [0249.513] CloseHandle (hObject=0x1fc) returned 1 [0249.513] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0249.513] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00438_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00438_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4bc)) returned 1 [0249.513] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0249.513] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0249.514] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00438_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00438_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4bc)) returned 1 [0249.514] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0249.514] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0249.514] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0249.514] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x804, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="BS00439_.WMF", cAlternateFileName="")) returned 1 [0249.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0249.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0249.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0249.515] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0249.515] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0249.515] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0249.516] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00439_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00439_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0249.516] GetFileType (hFile=0x1fc) returned 0x1 [0249.517] CloseHandle (hObject=0x1fc) returned 1 [0249.518] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0249.518] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00439_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00439_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x804)) returned 1 [0249.518] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0249.518] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0249.518] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00439_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00439_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x804)) returned 1 [0249.519] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0249.519] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0249.519] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0249.519] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15cc, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="BS00440_.WMF", cAlternateFileName="")) returned 1 [0249.519] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0249.519] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0249.519] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0249.520] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0249.520] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0249.520] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0249.521] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00440_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00440_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0249.521] GetFileType (hFile=0x1fc) returned 0x1 [0249.522] CloseHandle (hObject=0x1fc) returned 1 [0249.522] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0249.522] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00440_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00440_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15cc)) returned 1 [0249.523] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0249.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0249.523] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00440_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00440_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15cc)) returned 1 [0249.523] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0249.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0249.523] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0249.523] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdc4, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="BS00441_.WMF", cAlternateFileName="")) returned 1 [0249.524] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0249.524] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0249.524] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0249.524] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0249.524] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0249.524] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0249.525] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00441_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00441_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0249.526] GetFileType (hFile=0x1fc) returned 0x1 [0249.526] CloseHandle (hObject=0x1fc) returned 1 [0249.527] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0249.527] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00441_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00441_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdc4)) returned 1 [0249.527] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0249.527] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0249.527] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00441_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00441_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdc4)) returned 1 [0249.527] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0249.528] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0249.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0249.528] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9b8, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="BS00442_.WMF", cAlternateFileName="")) returned 1 [0249.528] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0249.528] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0249.528] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0249.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0249.529] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0249.529] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0249.529] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00442_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00442_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0249.530] GetFileType (hFile=0x1fc) returned 0x1 [0249.530] CloseHandle (hObject=0x1fc) returned 1 [0249.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0249.531] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00442_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00442_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9b8)) returned 1 [0249.531] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0249.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0249.531] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00442_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00442_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9b8)) returned 1 [0249.532] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0249.532] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0249.532] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0249.532] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x68c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="BS00443_.WMF", cAlternateFileName="")) returned 1 [0249.532] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0249.532] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0249.532] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0249.533] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0249.533] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0249.533] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0249.534] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00443_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00443_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0249.534] GetFileType (hFile=0x1fc) returned 0x1 [0249.535] CloseHandle (hObject=0x1fc) returned 1 [0249.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0249.535] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00443_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00443_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x68c)) returned 1 [0249.536] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0249.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0249.536] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00443_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00443_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x68c)) returned 1 [0249.536] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0249.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0249.536] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0249.536] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf38, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="BS00444_.WMF", cAlternateFileName="")) returned 1 [0249.537] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0249.537] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0249.537] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0249.537] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0249.537] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0249.537] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0249.538] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00444_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00444_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0249.538] GetFileType (hFile=0x1fc) returned 0x1 [0249.539] CloseHandle (hObject=0x1fc) returned 1 [0249.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0249.539] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00444_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00444_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf38)) returned 1 [0249.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0249.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0249.540] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00444_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00444_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf38)) returned 1 [0249.540] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0249.540] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0249.540] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0249.540] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xed4, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="BS00445_.WMF", cAlternateFileName="")) returned 1 [0249.540] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0249.890] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0249.890] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0249.890] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0249.890] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0249.890] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0249.891] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00445_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00445_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0249.891] GetFileType (hFile=0x22c) returned 0x1 [0249.892] CloseHandle (hObject=0x22c) returned 1 [0249.892] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0249.892] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00445_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00445_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xed4)) returned 1 [0249.892] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0249.892] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0249.892] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00445_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00445_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xed4)) returned 1 [0249.893] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0249.893] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0249.893] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0249.893] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x984, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="BS00453_.WMF", cAlternateFileName="")) returned 1 [0249.893] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0249.893] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0249.893] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0249.893] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0249.893] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0249.893] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0249.894] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00453_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00453_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0249.894] GetFileType (hFile=0x22c) returned 0x1 [0249.894] CloseHandle (hObject=0x22c) returned 1 [0249.895] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0249.895] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00453_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00453_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x984)) returned 1 [0249.895] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0249.895] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0249.895] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00453_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00453_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x984)) returned 1 [0249.895] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0249.895] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0249.895] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0249.895] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaac, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="BS01080_.WMF", cAlternateFileName="")) returned 1 [0249.895] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0249.896] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0249.896] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0249.896] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0249.896] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0249.896] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0249.896] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01080_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01080_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0249.897] GetFileType (hFile=0x22c) returned 0x1 [0249.897] CloseHandle (hObject=0x22c) returned 1 [0249.897] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0249.898] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01080_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01080_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaac)) returned 1 [0249.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0249.898] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0249.898] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01080_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01080_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaac)) returned 1 [0249.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0249.898] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0249.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0249.899] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c08, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="BS01603_.WMF", cAlternateFileName="")) returned 1 [0249.899] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0249.899] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0249.899] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0249.899] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0249.899] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0249.899] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0249.901] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01603_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01603_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0249.901] GetFileType (hFile=0x22c) returned 0x1 [0249.902] CloseHandle (hObject=0x22c) returned 1 [0249.902] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0249.902] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01603_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01603_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c08)) returned 1 [0249.902] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0249.902] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0249.903] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01603_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01603_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c08)) returned 1 [0249.903] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0249.903] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0249.903] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0249.903] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xda6, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="BS01634_.WMF", cAlternateFileName="")) returned 1 [0249.903] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0249.903] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0249.903] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0249.903] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0249.903] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0249.904] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0249.904] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01634_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01634_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0249.905] GetFileType (hFile=0x22c) returned 0x1 [0249.905] CloseHandle (hObject=0x22c) returned 1 [0249.906] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0249.906] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01634_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01634_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xda6)) returned 1 [0249.906] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0249.906] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0249.906] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01634_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01634_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xda6)) returned 1 [0249.906] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0249.907] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0249.907] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0249.907] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a94, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="BS01635_.WMF", cAlternateFileName="")) returned 1 [0249.907] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0249.907] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0249.907] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0249.907] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0249.908] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0249.908] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0249.908] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01635_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01635_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0249.909] GetFileType (hFile=0x22c) returned 0x1 [0249.909] CloseHandle (hObject=0x22c) returned 1 [0249.910] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0249.910] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01635_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01635_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a94)) returned 1 [0249.910] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0249.910] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0249.910] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01635_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01635_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a94)) returned 1 [0249.911] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0249.911] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0249.911] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0249.911] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x752, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="BS01636_.WMF", cAlternateFileName="")) returned 1 [0249.911] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0249.911] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0249.912] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0249.912] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0249.912] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0249.912] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0249.913] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01636_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01636_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0249.913] GetFileType (hFile=0x22c) returned 0x1 [0249.914] CloseHandle (hObject=0x22c) returned 1 [0249.914] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0249.914] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01636_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01636_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x752)) returned 1 [0249.915] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0249.915] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0249.915] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01636_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01636_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x752)) returned 1 [0249.915] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0249.915] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0249.917] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0249.917] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf6c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="BS01637_.WMF", cAlternateFileName="")) returned 1 [0249.917] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238348 [0249.917] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0249.917] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0249.917] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0249.918] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0249.918] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238348 | out: hHeap=0x1f0000) returned 1 [0249.918] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01637_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01637_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0249.919] GetFileType (hFile=0x22c) returned 0x1 [0249.919] CloseHandle (hObject=0x22c) returned 1 [0249.920] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0249.920] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01637_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01637_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf6c)) returned 1 [0249.920] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0249.920] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0249.921] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01637_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01637_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf6c)) returned 1 [0249.921] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0249.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0249.921] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0249.921] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x292a, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="BS01638_.WMF", cAlternateFileName="")) returned 1 [0249.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0249.922] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0249.922] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0249.922] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0249.922] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0249.922] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0249.923] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01638_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01638_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0249.924] GetFileType (hFile=0x22c) returned 0x1 [0249.924] CloseHandle (hObject=0x22c) returned 1 [0249.924] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0249.925] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01638_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01638_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x292a)) returned 1 [0249.925] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0249.925] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0249.925] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01638_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01638_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x292a)) returned 1 [0249.925] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0249.925] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0249.926] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0249.926] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd744774, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x108c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="BS01639_.WMF", cAlternateFileName="")) returned 1 [0249.926] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0249.926] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0249.926] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0249.926] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0249.926] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0249.926] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0249.927] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01639_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01639_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0249.927] GetFileType (hFile=0x22c) returned 0x1 [0249.928] CloseHandle (hObject=0x22c) returned 1 [0249.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0249.929] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01639_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01639_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd744774, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x108c)) returned 1 [0249.929] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0249.929] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0249.929] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01639_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01639_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd744774, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x108c)) returned 1 [0249.929] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0249.929] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0249.930] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0249.930] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x246a, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="CARBN_01.MID", cAlternateFileName="")) returned 1 [0249.930] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0249.930] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0249.930] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0249.930] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0249.930] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0249.930] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0250.284] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CARBN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\carbn_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0250.284] GetFileType (hFile=0x1b0) returned 0x1 [0250.285] CloseHandle (hObject=0x1b0) returned 1 [0250.285] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0250.285] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CARBN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\carbn_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x246a)) returned 1 [0250.286] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0250.286] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0250.286] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CARBN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\carbn_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x246a)) returned 1 [0250.286] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0250.286] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0250.286] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0250.286] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd744774, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdec, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="CG1606.WMF", cAlternateFileName="")) returned 1 [0250.287] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0250.287] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0250.287] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0250.287] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0250.287] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0250.287] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0250.288] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CG1606.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cg1606.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0250.288] GetFileType (hFile=0x1b0) returned 0x1 [0250.289] CloseHandle (hObject=0x1b0) returned 1 [0250.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0250.289] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CG1606.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cg1606.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd744774, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdec)) returned 1 [0250.289] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0250.290] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0250.290] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CG1606.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cg1606.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd744774, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdec)) returned 1 [0250.290] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0250.290] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0250.290] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0250.291] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x976, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="CLASSIC1.WMF", cAlternateFileName="")) returned 1 [0250.291] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0250.291] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0250.291] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0250.291] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0250.292] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0250.292] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0250.293] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC1.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\classic1.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0250.293] GetFileType (hFile=0x1b0) returned 0x1 [0250.293] CloseHandle (hObject=0x1b0) returned 1 [0250.294] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0250.294] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC1.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\classic1.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x976)) returned 1 [0250.294] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0250.294] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0250.294] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC1.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\classic1.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x976)) returned 1 [0250.295] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0250.295] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0250.295] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0250.295] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8d6, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="CLASSIC2.WMF", cAlternateFileName="")) returned 1 [0250.295] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0250.295] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0250.295] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0250.296] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0250.296] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0250.296] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0250.297] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC2.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\classic2.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0250.297] GetFileType (hFile=0x1b0) returned 0x1 [0250.297] CloseHandle (hObject=0x1b0) returned 1 [0250.298] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0250.298] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC2.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\classic2.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8d6)) returned 1 [0250.298] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0250.298] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0250.298] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC2.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\classic2.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8d6)) returned 1 [0250.298] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0250.299] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0250.299] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0250.299] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8d6, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="CLIP.WMF", cAlternateFileName="")) returned 1 [0250.299] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0250.299] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0250.299] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0250.299] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0250.299] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0250.299] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0250.300] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLIP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\clip.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0250.300] GetFileType (hFile=0x1b0) returned 0x1 [0250.301] CloseHandle (hObject=0x1b0) returned 1 [0250.301] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0250.301] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLIP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\clip.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8d6)) returned 1 [0250.301] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0250.302] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0250.302] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLIP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\clip.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8d6)) returned 1 [0250.302] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0250.302] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0250.302] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0250.302] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b3a, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="CMNTY_01.MID", cAlternateFileName="")) returned 1 [0250.302] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0250.302] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e88 [0250.302] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0250.303] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e88 | out: hHeap=0x1f0000) returned 1 [0250.303] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0250.303] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0250.303] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CMNTY_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cmnty_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0250.304] GetFileType (hFile=0x1b0) returned 0x1 [0250.304] CloseHandle (hObject=0x1b0) returned 1 [0250.304] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0250.305] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CMNTY_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cmnty_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b3a)) returned 1 [0250.305] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0250.305] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0250.305] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CMNTY_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cmnty_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b3a)) returned 1 [0250.305] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0250.305] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0250.305] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0250.305] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1496, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="CRANE.WMF", cAlternateFileName="")) returned 1 [0250.306] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0250.306] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0250.306] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0250.306] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0250.322] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0250.323] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0250.323] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANE.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\crane.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0250.324] GetFileType (hFile=0x1b0) returned 0x1 [0250.324] CloseHandle (hObject=0x1b0) returned 1 [0250.325] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0250.325] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANE.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\crane.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1496)) returned 1 [0250.325] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0250.325] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0250.326] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANE.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\crane.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1496)) returned 1 [0250.326] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0250.326] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0250.326] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0250.326] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc18a, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="CRANINST.WMF", cAlternateFileName="")) returned 1 [0250.326] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0250.327] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0250.327] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0250.327] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0250.327] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0250.327] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0250.328] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\craninst.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0250.328] GetFileType (hFile=0x1b0) returned 0x1 [0250.329] CloseHandle (hObject=0x1b0) returned 1 [0250.329] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0250.330] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\craninst.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc18a)) returned 1 [0250.330] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0250.330] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0250.330] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\craninst.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc18a)) returned 1 [0250.330] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0250.330] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0250.331] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0250.331] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb96, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="CUP.WMF", cAlternateFileName="")) returned 1 [0250.331] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e88 [0250.331] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0250.331] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e88 | out: hHeap=0x1f0000) returned 1 [0250.331] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0250.332] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cup.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0250.333] GetFileType (hFile=0x1b0) returned 0x1 [0250.333] CloseHandle (hObject=0x1b0) returned 1 [0250.334] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0250.334] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cup.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb96)) returned 1 [0250.334] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0250.334] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0250.335] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cup.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb96)) returned 1 [0250.335] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0250.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0250.335] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0250.335] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2856, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="CUPINST.WMF", cAlternateFileName="")) returned 1 [0250.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0250.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213570 [0250.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0250.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213570 | out: hHeap=0x1f0000) returned 1 [0250.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0250.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0250.337] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUPINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cupinst.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0250.337] GetFileType (hFile=0x1b0) returned 0x1 [0250.448] CloseHandle (hObject=0x1b0) returned 1 [0250.449] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0250.449] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUPINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cupinst.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2856)) returned 1 [0250.449] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0250.449] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0250.449] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUPINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cupinst.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2856)) returned 1 [0250.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0250.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0250.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0250.450] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7992, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="DD00117_.WMF", cAlternateFileName="")) returned 1 [0250.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0250.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0250.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0250.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0250.451] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0250.451] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0250.451] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00117_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00117_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0250.452] GetFileType (hFile=0x1b0) returned 0x1 [0250.452] CloseHandle (hObject=0x1b0) returned 1 [0250.453] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0250.453] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00117_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00117_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7992)) returned 1 [0250.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0250.453] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0250.453] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00117_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00117_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7992)) returned 1 [0250.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0250.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0250.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0250.454] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2040, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="DD00121_.WMF", cAlternateFileName="")) returned 1 [0250.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0250.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0250.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0250.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0250.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0250.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0250.455] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00121_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00121_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0250.455] GetFileType (hFile=0x1b0) returned 0x1 [0250.456] CloseHandle (hObject=0x1b0) returned 1 [0250.456] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0250.456] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00121_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00121_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2040)) returned 1 [0250.456] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0250.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0250.457] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00121_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00121_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2040)) returned 1 [0250.457] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0250.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0250.457] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0250.457] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x73bc, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="DD00234_.WMF", cAlternateFileName="")) returned 1 [0250.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0250.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0250.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0250.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0250.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0250.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0250.458] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00234_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00234_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0250.458] GetFileType (hFile=0x1b0) returned 0x1 [0250.459] CloseHandle (hObject=0x1b0) returned 1 [0250.459] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0250.459] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00234_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00234_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x73bc)) returned 1 [0250.460] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0250.460] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0250.460] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00234_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00234_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x73bc)) returned 1 [0250.460] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0250.460] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0250.460] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0250.460] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa82, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="DD00255_.WMF", cAlternateFileName="")) returned 1 [0250.460] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0250.460] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0250.460] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0250.460] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0250.460] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0250.461] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0250.461] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00255_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00255_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0250.461] GetFileType (hFile=0x1b0) returned 0x1 [0250.461] CloseHandle (hObject=0x1b0) returned 1 [0250.462] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0250.462] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00255_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00255_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa82)) returned 1 [0250.462] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0250.462] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0250.462] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00255_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00255_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa82)) returned 1 [0250.462] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0250.462] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0250.464] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0250.464] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd744774, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb10, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="DD00256_.WMF", cAlternateFileName="")) returned 1 [0250.464] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0250.464] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0250.464] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0250.464] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0250.464] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0250.464] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0250.464] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00256_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00256_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0250.465] GetFileType (hFile=0x1b0) returned 0x1 [0250.465] CloseHandle (hObject=0x1b0) returned 1 [0250.465] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0250.465] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00256_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00256_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd744774, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb10)) returned 1 [0250.465] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0250.465] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0250.466] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00256_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00256_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd744774, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb10)) returned 1 [0250.466] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0250.466] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0250.466] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0250.466] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9456, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="DD00261_.WMF", cAlternateFileName="")) returned 1 [0250.466] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0250.466] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0250.466] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0250.466] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0250.467] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0250.467] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0250.467] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00261_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00261_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0250.467] GetFileType (hFile=0x1b0) returned 0x1 [0250.468] CloseHandle (hObject=0x1b0) returned 1 [0250.468] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0250.468] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00261_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00261_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9456)) returned 1 [0250.468] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0250.468] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0250.469] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00261_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00261_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9456)) returned 1 [0250.469] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0250.469] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0250.469] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0250.469] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9c5e, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="DD00297_.WMF", cAlternateFileName="")) returned 1 [0250.469] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0250.469] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0250.469] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0250.470] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0250.470] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0250.470] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0250.471] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00297_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00297_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0250.471] GetFileType (hFile=0x1b0) returned 0x1 [0250.471] CloseHandle (hObject=0x1b0) returned 1 [0250.472] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0250.472] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00297_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00297_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9c5e)) returned 1 [0250.472] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0250.472] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0250.472] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00297_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00297_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9c5e)) returned 1 [0250.472] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0250.473] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0250.473] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0250.473] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x318, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="DD00372_.WMF", cAlternateFileName="")) returned 1 [0250.473] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0250.473] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0250.473] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0250.473] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0250.473] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0250.474] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0250.474] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00372_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00372_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0250.476] GetFileType (hFile=0x1b0) returned 0x1 [0250.477] CloseHandle (hObject=0x1b0) returned 1 [0250.477] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0250.477] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00372_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00372_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x318)) returned 1 [0250.477] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0250.478] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0250.478] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00372_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00372_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x318)) returned 1 [0250.478] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0250.479] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0250.479] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0250.479] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x44b0, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="DD00405_.WMF", cAlternateFileName="")) returned 1 [0250.479] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0250.479] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0250.479] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0250.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0250.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0250.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0250.480] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00405_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00405_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0250.481] GetFileType (hFile=0x1b0) returned 0x1 [0250.481] CloseHandle (hObject=0x1b0) returned 1 [0250.481] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0250.481] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00405_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00405_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x44b0)) returned 1 [0250.482] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0250.482] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0250.482] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00405_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00405_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x44b0)) returned 1 [0250.482] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0250.482] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0250.482] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0250.482] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e94, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="DD00407_.WMF", cAlternateFileName="")) returned 1 [0250.482] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0250.482] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0250.482] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0250.483] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0250.483] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0250.483] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0250.483] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00407_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00407_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0250.483] GetFileType (hFile=0x1b0) returned 0x1 [0250.484] CloseHandle (hObject=0x1b0) returned 1 [0250.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0250.484] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00407_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00407_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e94)) returned 1 [0250.484] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0250.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0250.484] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00407_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00407_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e94)) returned 1 [0250.485] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0250.485] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0250.485] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0250.485] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa7f0, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="DD00413_.WMF", cAlternateFileName="")) returned 1 [0250.485] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0250.485] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0250.485] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0250.485] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0250.485] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0250.486] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0250.486] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00413_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00413_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0250.486] GetFileType (hFile=0x1b0) returned 0x1 [0250.487] CloseHandle (hObject=0x1b0) returned 1 [0250.487] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0250.488] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00413_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00413_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa7f0)) returned 1 [0250.488] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0250.488] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0250.488] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00413_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00413_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa7f0)) returned 1 [0250.488] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0250.488] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0250.488] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0250.488] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa79c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="DD00414_.WMF", cAlternateFileName="")) returned 1 [0250.489] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0250.489] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0250.489] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0250.489] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0250.489] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0250.489] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0250.490] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00414_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00414_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0250.490] GetFileType (hFile=0x1b0) returned 0x1 [0250.491] CloseHandle (hObject=0x1b0) returned 1 [0250.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0250.491] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00414_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00414_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa79c)) returned 1 [0250.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0250.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0250.491] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00414_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00414_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa79c)) returned 1 [0250.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0250.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0250.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0250.492] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c8, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="DD00419_.WMF", cAlternateFileName="")) returned 1 [0250.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0250.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0250.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0250.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0250.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0250.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0250.493] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00419_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00419_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0250.493] GetFileType (hFile=0x1b0) returned 0x1 [0250.494] CloseHandle (hObject=0x1b0) returned 1 [0250.494] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0250.494] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00419_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00419_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c8)) returned 1 [0250.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0250.495] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0250.495] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00419_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00419_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c8)) returned 1 [0250.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0250.495] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0250.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0250.495] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x78c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="DD00437_.WMF", cAlternateFileName="")) returned 1 [0250.495] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0250.496] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0250.496] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0250.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0250.760] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0250.760] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0250.761] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00437_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00437_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0250.761] GetFileType (hFile=0x1d8) returned 0x1 [0250.761] CloseHandle (hObject=0x1d8) returned 1 [0250.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0250.762] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00437_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00437_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x78c)) returned 1 [0250.762] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0250.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0250.762] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00437_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00437_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x78c)) returned 1 [0250.762] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0250.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0250.763] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0250.763] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb88, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="DD00448_.WMF", cAlternateFileName="")) returned 1 [0250.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0250.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0250.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0250.763] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0250.763] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0250.763] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0250.764] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00448_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00448_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0250.764] GetFileType (hFile=0x1d8) returned 0x1 [0250.765] CloseHandle (hObject=0x1d8) returned 1 [0250.766] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0250.766] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00448_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00448_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb88)) returned 1 [0250.766] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0250.766] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0250.766] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00448_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00448_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb88)) returned 1 [0250.766] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0250.767] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0250.767] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0250.767] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2708, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="DD00449_.WMF", cAlternateFileName="")) returned 1 [0250.767] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0250.767] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0250.767] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0250.767] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0250.767] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0250.768] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0250.768] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00449_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00449_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0250.769] GetFileType (hFile=0x1d8) returned 0x1 [0250.769] CloseHandle (hObject=0x1d8) returned 1 [0250.770] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0250.770] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00449_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00449_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2708)) returned 1 [0250.770] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0250.770] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0250.770] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00449_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00449_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2708)) returned 1 [0250.770] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0250.770] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0250.771] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0250.771] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5130, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="DD00687_.WMF", cAlternateFileName="")) returned 1 [0250.771] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0250.771] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0250.771] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0250.771] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0250.771] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0250.771] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0250.772] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00687_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00687_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0250.772] GetFileType (hFile=0x1d8) returned 0x1 [0250.773] CloseHandle (hObject=0x1d8) returned 1 [0250.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0250.773] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00687_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00687_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5130)) returned 1 [0250.774] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0250.774] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0250.774] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00687_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00687_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5130)) returned 1 [0250.774] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0250.774] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0250.774] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0250.774] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x600c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="DD00705_.WMF", cAlternateFileName="")) returned 1 [0250.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0250.776] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0250.776] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0250.776] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0250.776] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0250.776] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0250.777] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00705_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00705_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0250.777] GetFileType (hFile=0x1d8) returned 0x1 [0250.777] CloseHandle (hObject=0x1d8) returned 1 [0250.778] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0250.778] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00705_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00705_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x600c)) returned 1 [0250.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0250.778] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0250.778] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00705_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00705_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x600c)) returned 1 [0250.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0250.779] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0250.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0250.779] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b2, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="DD01015_.WMF", cAlternateFileName="")) returned 1 [0250.779] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0250.779] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0250.779] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0250.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0250.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0250.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0250.780] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01015_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0250.780] GetFileType (hFile=0x1d8) returned 0x1 [0250.781] CloseHandle (hObject=0x1d8) returned 1 [0250.781] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0250.781] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01015_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b2)) returned 1 [0250.781] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0250.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0250.782] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01015_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b2)) returned 1 [0250.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0250.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0250.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0250.782] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x39e4, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="DD01039_.WMF", cAlternateFileName="")) returned 1 [0250.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0250.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0250.783] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0250.783] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0250.783] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0250.783] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0250.784] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01039_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01039_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0250.784] GetFileType (hFile=0x1d8) returned 0x1 [0250.784] CloseHandle (hObject=0x1d8) returned 1 [0250.785] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0250.785] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01039_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01039_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x39e4)) returned 1 [0250.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0250.785] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0250.785] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01039_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01039_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x39e4)) returned 1 [0250.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0250.785] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0250.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0250.785] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb709c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe6c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="DD01138_.WMF", cAlternateFileName="")) returned 1 [0250.786] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0250.786] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0250.786] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0250.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0250.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0250.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0250.787] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01138_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01138_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0250.787] GetFileType (hFile=0x1d8) returned 0x1 [0250.788] CloseHandle (hObject=0x1d8) returned 1 [0250.788] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0250.788] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01138_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01138_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb709c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe6c)) returned 1 [0250.788] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0250.788] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0250.789] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01138_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01138_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb709c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe6c)) returned 1 [0250.789] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0250.789] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0250.789] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0250.789] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe30, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="DD01139_.WMF", cAlternateFileName="")) returned 1 [0250.789] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0250.789] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0250.789] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0250.790] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0250.790] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0250.790] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0250.791] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01139_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01139_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0250.791] GetFileType (hFile=0x1d8) returned 0x1 [0250.792] CloseHandle (hObject=0x1d8) returned 1 [0250.792] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0250.793] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01139_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01139_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe30)) returned 1 [0250.793] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0250.794] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0250.794] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01139_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01139_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe30)) returned 1 [0250.794] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0250.794] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0250.794] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0250.794] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb709c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe20, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="DD01140_.WMF", cAlternateFileName="")) returned 1 [0250.794] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0250.794] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0250.795] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0250.795] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0250.795] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0250.795] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0250.796] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01140_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01140_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0250.796] GetFileType (hFile=0x1d8) returned 0x1 [0250.796] CloseHandle (hObject=0x1d8) returned 1 [0250.797] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0250.797] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01140_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01140_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb709c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe20)) returned 1 [0250.797] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0250.797] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0250.797] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01140_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01140_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb709c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe20)) returned 1 [0250.797] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0250.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0250.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0250.798] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb709c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x85c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="DD01143_.WMF", cAlternateFileName="")) returned 1 [0250.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0250.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0250.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0250.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0250.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0250.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0250.800] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01143_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01143_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0250.800] GetFileType (hFile=0x1d8) returned 0x1 [0250.800] CloseHandle (hObject=0x1d8) returned 1 [0250.801] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0250.801] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01143_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01143_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb709c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x85c)) returned 1 [0250.801] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0250.801] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0250.801] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01143_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01143_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb709c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x85c)) returned 1 [0250.801] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0250.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0250.802] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0250.802] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xadc, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="DD01145_.WMF", cAlternateFileName="")) returned 1 [0250.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0250.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0250.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0250.802] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0250.802] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0250.802] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0250.803] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01145_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01145_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0250.996] GetFileType (hFile=0x210) returned 0x1 [0250.997] CloseHandle (hObject=0x210) returned 1 [0250.997] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0250.997] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01145_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01145_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xadc)) returned 1 [0250.998] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0250.998] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0250.998] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01145_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01145_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xadc)) returned 1 [0250.998] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0250.998] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0250.998] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0250.999] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb709c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaec, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="DD01146_.WMF", cAlternateFileName="")) returned 1 [0250.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0250.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0250.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0250.999] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0250.999] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0250.999] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0251.201] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01146_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01146_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0251.201] GetFileType (hFile=0x1e0) returned 0x1 [0251.202] CloseHandle (hObject=0x1e0) returned 1 [0251.202] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0251.202] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01146_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01146_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb709c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaec)) returned 1 [0251.203] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0251.203] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0251.203] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01146_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01146_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb709c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaec)) returned 1 [0251.203] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0251.203] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0251.203] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0251.203] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb90, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="DD01151_.WMF", cAlternateFileName="")) returned 1 [0251.203] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0251.203] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0251.204] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0251.204] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0251.204] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0251.204] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0251.204] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01151_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01151_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0251.205] GetFileType (hFile=0x1e0) returned 0x1 [0251.205] CloseHandle (hObject=0x1e0) returned 1 [0251.205] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0251.205] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01151_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01151_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb90)) returned 1 [0251.206] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0251.206] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0251.206] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01151_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01151_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb90)) returned 1 [0251.206] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0251.206] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0251.206] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0251.206] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb90, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="DD01152_.WMF", cAlternateFileName="")) returned 1 [0251.206] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0251.206] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0251.207] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0251.207] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0251.207] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0251.207] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0251.207] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01152_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01152_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0251.208] GetFileType (hFile=0x1e0) returned 0x1 [0251.208] CloseHandle (hObject=0x1e0) returned 1 [0251.208] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0251.208] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01152_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01152_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb90)) returned 1 [0251.209] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0251.209] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0251.209] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01152_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01152_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb90)) returned 1 [0251.209] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0251.209] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0251.209] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0251.209] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe04, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="DD01157_.WMF", cAlternateFileName="")) returned 1 [0251.209] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0251.210] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0251.210] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0251.210] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0251.211] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0251.211] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0251.212] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01157_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01157_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0251.212] GetFileType (hFile=0x1e0) returned 0x1 [0251.213] CloseHandle (hObject=0x1e0) returned 1 [0251.213] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0251.213] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01157_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01157_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe04)) returned 1 [0251.213] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0251.213] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0251.214] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01157_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01157_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe04)) returned 1 [0251.214] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0251.214] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0251.214] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0251.215] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b4, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="DD01160_.WMF", cAlternateFileName="")) returned 1 [0251.215] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0251.215] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0251.215] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0251.215] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0251.215] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0251.215] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0251.216] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01160_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01160_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0251.232] GetFileType (hFile=0x200) returned 0x1 [0251.233] CloseHandle (hObject=0x200) returned 1 [0251.261] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0251.262] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01160_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01160_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b4)) returned 1 [0251.262] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0251.262] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0251.262] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01160_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01160_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b4)) returned 1 [0251.263] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0251.263] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0251.263] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0251.263] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8fc, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="DD01162_.WMF", cAlternateFileName="")) returned 1 [0251.263] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0251.263] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0251.263] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0251.263] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0251.263] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0251.263] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0251.264] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01162_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01162_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0251.264] GetFileType (hFile=0x224) returned 0x1 [0251.265] CloseHandle (hObject=0x224) returned 1 [0251.265] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0251.265] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01162_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01162_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8fc)) returned 1 [0251.265] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0251.265] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0251.265] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01162_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01162_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8fc)) returned 1 [0251.265] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0251.265] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0251.265] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0251.266] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8fc, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="DD01163_.WMF", cAlternateFileName="")) returned 1 [0251.266] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0251.266] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0251.266] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0251.266] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0251.266] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0251.266] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0251.266] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01163_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01163_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0251.267] GetFileType (hFile=0x224) returned 0x1 [0251.267] CloseHandle (hObject=0x224) returned 1 [0251.267] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0251.268] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01163_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01163_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8fc)) returned 1 [0251.268] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0251.268] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0251.268] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01163_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01163_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8fc)) returned 1 [0251.268] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0251.268] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0251.268] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0251.268] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x820, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="DD01166_.WMF", cAlternateFileName="")) returned 1 [0251.268] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0251.268] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0251.268] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0251.269] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0251.269] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0251.269] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0251.269] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01166_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01166_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0251.269] GetFileType (hFile=0x224) returned 0x1 [0251.270] CloseHandle (hObject=0x224) returned 1 [0251.270] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0251.270] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01166_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01166_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x820)) returned 1 [0251.270] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0251.270] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0251.270] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01166_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01166_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x820)) returned 1 [0251.271] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0251.271] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0251.271] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0251.271] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x820, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="DD01167_.WMF", cAlternateFileName="")) returned 1 [0251.271] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0251.271] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0251.271] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0251.271] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0251.271] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0251.271] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0251.271] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01167_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01167_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0251.272] GetFileType (hFile=0x224) returned 0x1 [0251.272] CloseHandle (hObject=0x224) returned 1 [0251.272] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0251.272] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01167_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01167_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x820)) returned 1 [0251.272] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0251.272] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0251.273] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01167_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01167_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x820)) returned 1 [0251.273] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0251.273] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0251.273] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0251.273] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7d4, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="DD01168_.WMF", cAlternateFileName="")) returned 1 [0251.273] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0251.273] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0251.273] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0251.273] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0251.273] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0251.273] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0251.274] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01168_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01168_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0251.286] GetFileType (hFile=0x224) returned 0x1 [0251.287] CloseHandle (hObject=0x224) returned 1 [0251.287] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0251.287] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01168_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01168_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7d4)) returned 1 [0251.288] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0251.288] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0251.288] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01168_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01168_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7d4)) returned 1 [0251.541] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0251.541] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0251.541] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0251.541] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e4, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="DD01169_.WMF", cAlternateFileName="")) returned 1 [0251.541] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0251.542] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0251.542] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0251.542] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0251.542] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0251.542] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0251.542] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01169_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01169_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0251.543] GetFileType (hFile=0x23c) returned 0x1 [0251.544] CloseHandle (hObject=0x23c) returned 1 [0251.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0251.544] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01169_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01169_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e4)) returned 1 [0251.544] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0251.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0251.544] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01169_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01169_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e4)) returned 1 [0251.545] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0251.545] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0251.545] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0251.545] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x964, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="DD01170_.WMF", cAlternateFileName="")) returned 1 [0251.545] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0251.545] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0251.545] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0251.545] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0251.545] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0251.545] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0251.546] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01170_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01170_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0251.547] GetFileType (hFile=0x23c) returned 0x1 [0251.547] CloseHandle (hObject=0x23c) returned 1 [0251.547] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0251.548] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01170_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01170_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x964)) returned 1 [0251.548] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0251.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0251.548] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01170_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01170_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x964)) returned 1 [0251.548] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0251.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0251.548] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0251.548] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x804, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="DD01171_.WMF", cAlternateFileName="")) returned 1 [0251.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0251.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0251.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0251.549] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0251.549] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0251.549] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0251.550] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01171_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01171_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0251.550] GetFileType (hFile=0x23c) returned 0x1 [0251.551] CloseHandle (hObject=0x23c) returned 1 [0251.551] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0251.551] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01171_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01171_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x804)) returned 1 [0251.551] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0251.552] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0251.552] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01171_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01171_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x804)) returned 1 [0251.552] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0251.552] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0251.552] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0251.552] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b8, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="DD01172_.WMF", cAlternateFileName="")) returned 1 [0251.552] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0251.552] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0251.552] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0251.552] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0251.552] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0251.553] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0251.553] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01172_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0251.553] GetFileType (hFile=0x23c) returned 0x1 [0251.554] CloseHandle (hObject=0x23c) returned 1 [0251.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0251.554] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01172_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b8)) returned 1 [0251.554] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0251.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0251.554] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01172_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b8)) returned 1 [0251.554] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0251.555] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0251.555] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0251.555] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x70c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="DD01173_.WMF", cAlternateFileName="")) returned 1 [0251.555] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0251.555] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0251.555] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0251.555] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0251.555] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0251.555] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0251.556] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01173_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0251.560] GetFileType (hFile=0x23c) returned 0x1 [0251.560] CloseHandle (hObject=0x23c) returned 1 [0251.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0251.560] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01173_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x70c)) returned 1 [0251.561] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0251.561] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0251.561] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01173_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x70c)) returned 1 [0251.561] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0251.561] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0251.561] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0251.561] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x760, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="DD01176_.WMF", cAlternateFileName="")) returned 1 [0251.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0251.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0251.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0251.562] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0251.562] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0251.562] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0251.563] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01176_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01176_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0251.564] GetFileType (hFile=0x23c) returned 0x1 [0251.564] CloseHandle (hObject=0x23c) returned 1 [0251.565] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0251.565] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01176_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01176_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x760)) returned 1 [0251.565] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0251.565] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0251.565] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01176_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01176_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x760)) returned 1 [0251.565] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0251.565] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0251.566] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0251.566] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xed4, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="DD01178_.WMF", cAlternateFileName="")) returned 1 [0251.566] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0251.566] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0251.566] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0251.566] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0251.566] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0251.566] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0251.567] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01178_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01178_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0251.568] GetFileType (hFile=0x23c) returned 0x1 [0251.568] CloseHandle (hObject=0x23c) returned 1 [0251.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0251.569] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01178_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01178_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xed4)) returned 1 [0251.569] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0251.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0251.569] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01178_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01178_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xed4)) returned 1 [0251.569] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0251.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0251.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0251.570] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e8, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="DD01179_.WMF", cAlternateFileName="")) returned 1 [0251.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0251.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0251.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0251.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0251.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0251.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0251.571] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01179_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01179_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0251.572] GetFileType (hFile=0x23c) returned 0x1 [0251.573] CloseHandle (hObject=0x23c) returned 1 [0251.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0251.573] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01179_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01179_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e8)) returned 1 [0251.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0251.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0251.574] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01179_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01179_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e8)) returned 1 [0251.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0251.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0251.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0251.574] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x824, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="DD01180_.WMF", cAlternateFileName="")) returned 1 [0251.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0251.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0251.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0251.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0251.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0251.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0251.575] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01180_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01180_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0251.963] GetFileType (hFile=0x1e0) returned 0x1 [0251.964] CloseHandle (hObject=0x1e0) returned 1 [0251.964] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0251.965] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01180_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01180_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x824)) returned 1 [0251.965] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0251.965] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0251.965] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01180_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01180_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x824)) returned 1 [0251.965] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0251.965] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0251.966] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0251.966] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5a8, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="DD01181_.WMF", cAlternateFileName="")) returned 1 [0251.966] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238348 [0251.966] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0251.966] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0251.966] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0251.967] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0251.967] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238348 | out: hHeap=0x1f0000) returned 1 [0252.228] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01181_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01181_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0252.229] GetFileType (hFile=0x1e0) returned 0x1 [0252.229] CloseHandle (hObject=0x1e0) returned 1 [0252.229] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0252.230] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01181_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01181_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5a8)) returned 1 [0252.230] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0252.230] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0252.230] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01181_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01181_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5a8)) returned 1 [0252.230] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0252.230] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0252.230] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0252.230] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbb4, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="DD01182_.WMF", cAlternateFileName="")) returned 1 [0252.231] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0252.231] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0252.231] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0252.231] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0252.231] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0252.231] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0252.232] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01182_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01182_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0252.232] GetFileType (hFile=0x1e0) returned 0x1 [0252.233] CloseHandle (hObject=0x1e0) returned 1 [0252.233] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0252.233] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01182_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01182_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbb4)) returned 1 [0252.233] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0252.234] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0252.234] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01182_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01182_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbb4)) returned 1 [0252.234] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0252.234] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0252.234] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0252.234] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="DD01183_.WMF", cAlternateFileName="")) returned 1 [0252.234] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0252.234] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0252.235] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0252.235] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0252.235] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0252.235] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0252.236] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01183_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01183_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0252.236] GetFileType (hFile=0x1e0) returned 0x1 [0252.237] CloseHandle (hObject=0x1e0) returned 1 [0252.237] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0252.237] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01183_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01183_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8f8)) returned 1 [0252.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0252.238] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0252.238] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01183_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01183_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8f8)) returned 1 [0252.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0252.238] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0252.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0252.238] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2174, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="DD01186_.WMF", cAlternateFileName="")) returned 1 [0252.239] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0252.239] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0252.239] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0252.239] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0252.239] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0252.239] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0252.240] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01186_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01186_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0252.240] GetFileType (hFile=0x1e0) returned 0x1 [0252.241] CloseHandle (hObject=0x1e0) returned 1 [0252.241] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0252.241] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01186_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01186_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2174)) returned 1 [0252.241] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0252.241] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0252.241] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01186_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01186_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2174)) returned 1 [0252.242] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0252.242] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0252.242] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0252.242] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6e8, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="DD01366_.WMF", cAlternateFileName="")) returned 1 [0252.242] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0252.242] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0252.242] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0252.242] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0252.242] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0252.242] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0252.243] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01366_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01366_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0252.243] GetFileType (hFile=0x1e0) returned 0x1 [0252.244] CloseHandle (hObject=0x1e0) returned 1 [0252.244] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0252.244] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01366_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01366_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6e8)) returned 1 [0252.245] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0252.245] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0252.245] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01366_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01366_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6e8)) returned 1 [0252.245] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0252.245] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0252.245] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0252.245] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="DD01434_.WMF", cAlternateFileName="")) returned 1 [0252.245] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0252.245] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0252.245] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0252.245] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0252.245] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0252.246] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0252.246] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01434_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01434_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0252.246] GetFileType (hFile=0x1e0) returned 0x1 [0252.247] CloseHandle (hObject=0x1e0) returned 1 [0252.247] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0252.247] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01434_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01434_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x384)) returned 1 [0252.247] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0252.247] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0252.247] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01434_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01434_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x384)) returned 1 [0252.247] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0252.247] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0252.247] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0252.248] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9dc, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="DD01585_.WMF", cAlternateFileName="")) returned 1 [0252.248] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0252.248] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0252.248] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0252.248] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0252.248] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0252.248] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0252.248] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01585_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01585_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0252.249] GetFileType (hFile=0x1e0) returned 0x1 [0252.249] CloseHandle (hObject=0x1e0) returned 1 [0252.249] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0252.249] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01585_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01585_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9dc)) returned 1 [0252.249] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0252.249] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0252.249] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01585_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01585_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9dc)) returned 1 [0252.250] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0252.250] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0252.250] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0252.250] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x914, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="DD01586_.WMF", cAlternateFileName="")) returned 1 [0252.250] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0252.250] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0252.250] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0252.250] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0252.250] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0252.250] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0252.251] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01586_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01586_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0252.251] GetFileType (hFile=0x1e0) returned 0x1 [0252.251] CloseHandle (hObject=0x1e0) returned 1 [0252.252] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0252.252] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01586_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01586_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x914)) returned 1 [0252.252] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0252.252] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0252.252] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01586_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01586_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x914)) returned 1 [0252.252] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0252.252] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0252.252] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0252.253] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4a7c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="DD01628_.WMF", cAlternateFileName="")) returned 1 [0252.253] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0252.253] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0252.253] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0252.253] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0252.253] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0252.253] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0252.254] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01628_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01628_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0252.254] GetFileType (hFile=0x1e0) returned 0x1 [0252.255] CloseHandle (hObject=0x1e0) returned 1 [0252.255] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0252.255] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01628_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01628_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4a7c)) returned 1 [0252.255] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0252.255] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0252.256] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01628_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01628_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4a7c)) returned 1 [0252.256] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0252.256] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0252.256] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0252.256] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="DD01629_.WMF", cAlternateFileName="")) returned 1 [0252.256] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0252.256] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0252.256] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0252.257] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0252.257] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0252.257] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0252.257] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01629_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01629_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0252.292] GetFileType (hFile=0x1ac) returned 0x1 [0252.292] CloseHandle (hObject=0x1ac) returned 1 [0252.293] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0252.293] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01629_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01629_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x244)) returned 1 [0252.293] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0252.293] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0252.293] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01629_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01629_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x244)) returned 1 [0252.293] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0252.293] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0252.294] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0252.294] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x128, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="DD01630_.WMF", cAlternateFileName="")) returned 1 [0252.426] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0252.426] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0252.427] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0252.427] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0252.427] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0252.427] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0252.427] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01630_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01630_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0252.427] GetFileType (hFile=0x198) returned 0x1 [0252.428] CloseHandle (hObject=0x198) returned 1 [0252.428] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0252.428] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01630_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01630_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x128)) returned 1 [0252.428] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0252.428] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0252.428] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01630_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01630_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x128)) returned 1 [0252.429] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0252.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0252.429] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0252.429] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x228, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="DD01631_.WMF", cAlternateFileName="")) returned 1 [0252.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0252.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0252.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0252.429] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0252.429] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0252.429] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0252.430] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01631_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01631_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0252.430] GetFileType (hFile=0x198) returned 0x1 [0252.430] CloseHandle (hObject=0x198) returned 1 [0252.430] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0252.431] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01631_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01631_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x228)) returned 1 [0252.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0252.431] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0252.431] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01631_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01631_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x228)) returned 1 [0252.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0252.431] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0252.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0252.432] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1034, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="DD01761_.WMF", cAlternateFileName="")) returned 1 [0252.432] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0252.432] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0252.432] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0252.432] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0252.432] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0252.432] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0252.433] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01761_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01761_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0252.433] GetFileType (hFile=0x198) returned 0x1 [0252.434] CloseHandle (hObject=0x198) returned 1 [0252.434] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0252.434] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01761_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01761_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1034)) returned 1 [0252.434] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0252.434] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0252.435] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01761_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01761_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1034)) returned 1 [0252.435] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0252.435] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0252.435] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0252.435] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8fc, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="DD01772_.WMF", cAlternateFileName="")) returned 1 [0252.435] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0252.435] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0252.435] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0252.435] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0252.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0252.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0252.436] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01772_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01772_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0252.436] GetFileType (hFile=0x198) returned 0x1 [0252.437] CloseHandle (hObject=0x198) returned 1 [0252.437] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0252.437] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01772_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01772_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8fc)) returned 1 [0252.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0252.438] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0252.438] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01772_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01772_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8fc)) returned 1 [0252.438] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0252.438] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0252.438] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0252.438] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcb4, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="DD01793_.WMF", cAlternateFileName="")) returned 1 [0252.438] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0252.438] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0252.439] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0252.439] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0252.439] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0252.439] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0252.440] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01793_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01793_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0252.440] GetFileType (hFile=0x198) returned 0x1 [0252.440] CloseHandle (hObject=0x198) returned 1 [0252.441] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0252.441] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01793_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01793_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcb4)) returned 1 [0252.441] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0252.441] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0252.441] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01793_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01793_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcb4)) returned 1 [0252.442] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0252.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0252.442] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0252.442] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1815, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="EAST_01.MID", cAlternateFileName="")) returned 1 [0252.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0252.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0252.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0252.442] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0252.443] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0252.443] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0252.443] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EAST_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\east_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0252.444] GetFileType (hFile=0x198) returned 0x1 [0252.444] CloseHandle (hObject=0x198) returned 1 [0252.445] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0252.445] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EAST_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\east_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1815)) returned 1 [0252.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0252.445] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0252.445] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EAST_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\east_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1815)) returned 1 [0252.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0252.446] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0252.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0252.446] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x566, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="ED00010_.WMF", cAlternateFileName="")) returned 1 [0252.446] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0252.446] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0252.446] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0252.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0252.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0252.447] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0252.448] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00010_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00010_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0252.448] GetFileType (hFile=0x198) returned 0x1 [0252.448] CloseHandle (hObject=0x198) returned 1 [0252.449] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0252.449] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00010_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00010_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x566)) returned 1 [0252.449] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0252.449] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0252.449] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00010_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00010_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x566)) returned 1 [0252.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0252.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0252.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0252.450] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32f2, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="ED00019_.WMF", cAlternateFileName="")) returned 1 [0252.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0252.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0252.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0252.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0252.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0252.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0252.451] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00019_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00019_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0252.451] GetFileType (hFile=0x198) returned 0x1 [0252.451] CloseHandle (hObject=0x198) returned 1 [0252.452] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0252.452] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00019_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00019_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32f2)) returned 1 [0252.452] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0252.452] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0252.452] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00019_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00019_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32f2)) returned 1 [0252.452] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0252.452] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0252.452] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0252.453] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa8c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="ED00172_.WMF", cAlternateFileName="")) returned 1 [0252.453] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0252.453] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0252.453] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0252.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0252.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0252.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0252.454] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00172_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0252.454] GetFileType (hFile=0x198) returned 0x1 [0252.454] CloseHandle (hObject=0x198) returned 1 [0252.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0252.455] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00172_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa8c)) returned 1 [0252.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0252.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0252.455] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00172_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa8c)) returned 1 [0252.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0252.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0252.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0252.455] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b2e, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="ED00184_.WMF", cAlternateFileName="")) returned 1 [0252.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0252.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0252.456] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0252.456] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0252.456] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0252.456] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0252.456] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00184_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0252.456] GetFileType (hFile=0x198) returned 0x1 [0252.457] CloseHandle (hObject=0x198) returned 1 [0252.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0252.457] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00184_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b2e)) returned 1 [0252.457] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0252.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0252.457] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00184_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b2e)) returned 1 [0252.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0252.458] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0252.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0252.458] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3670, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="EN00006_.WMF", cAlternateFileName="")) returned 1 [0252.458] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0252.458] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0252.458] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0252.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0252.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0252.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0252.459] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00006_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00006_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0253.171] GetFileType (hFile=0x1e8) returned 0x1 [0253.171] CloseHandle (hObject=0x1e8) returned 1 [0253.171] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0253.172] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00006_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00006_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3670)) returned 1 [0253.172] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0253.172] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0253.172] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00006_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00006_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3670)) returned 1 [0253.172] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0253.172] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0253.172] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0253.172] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b1a, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="EN00202_.WMF", cAlternateFileName="")) returned 1 [0253.172] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0253.172] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0253.173] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0253.173] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0253.173] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0253.173] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0253.173] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00202_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00202_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0253.174] GetFileType (hFile=0x1e8) returned 0x1 [0253.174] CloseHandle (hObject=0x1e8) returned 1 [0253.174] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0253.174] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00202_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00202_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b1a)) returned 1 [0253.175] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0253.175] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0253.175] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00202_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00202_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b1a)) returned 1 [0253.175] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0253.175] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0253.175] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0253.175] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3044, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="EN00222_.WMF", cAlternateFileName="")) returned 1 [0253.175] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0253.175] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0253.176] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0253.176] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0253.176] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0253.176] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0253.177] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00222_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00222_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0253.177] GetFileType (hFile=0x1e8) returned 0x1 [0253.177] CloseHandle (hObject=0x1e8) returned 1 [0253.178] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0253.178] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00222_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00222_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3044)) returned 1 [0253.178] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0253.178] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0253.178] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00222_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00222_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3044)) returned 1 [0253.178] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0253.179] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0253.179] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0253.179] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a7c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="EN00242_.WMF", cAlternateFileName="")) returned 1 [0253.179] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0253.179] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0253.179] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0253.179] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0253.179] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0253.179] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0253.180] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00242_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00242_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0253.180] GetFileType (hFile=0x1e8) returned 0x1 [0253.181] CloseHandle (hObject=0x1e8) returned 1 [0253.181] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0253.181] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00242_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00242_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a7c)) returned 1 [0253.182] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0253.182] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0253.182] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00242_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00242_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a7c)) returned 1 [0253.183] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0253.183] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0253.183] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0253.183] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8e8, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="EN00319_.WMF", cAlternateFileName="")) returned 1 [0253.183] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0253.183] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0253.183] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0253.183] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0253.183] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0253.183] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0253.184] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00319_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00319_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0253.184] GetFileType (hFile=0x1e8) returned 0x1 [0253.185] CloseHandle (hObject=0x1e8) returned 1 [0253.185] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0253.185] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00319_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00319_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8e8)) returned 1 [0253.185] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0253.186] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0253.186] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00319_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00319_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8e8)) returned 1 [0253.186] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0253.186] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0253.186] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0253.187] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="EN00320_.WMF", cAlternateFileName="")) returned 1 [0253.187] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0253.187] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0253.187] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0253.187] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0253.187] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0253.187] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0253.188] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00320_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00320_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0253.188] GetFileType (hFile=0x1e8) returned 0x1 [0253.189] CloseHandle (hObject=0x1e8) returned 1 [0253.189] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0253.189] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00320_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00320_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e0)) returned 1 [0253.189] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0253.189] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0253.190] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00320_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00320_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e0)) returned 1 [0253.190] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0253.190] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0253.190] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0253.190] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x439c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="EN00397_.WMF", cAlternateFileName="")) returned 1 [0253.190] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0253.190] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0253.190] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0253.191] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0253.191] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0253.191] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0253.192] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00397_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00397_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0253.192] GetFileType (hFile=0x1e8) returned 0x1 [0253.192] CloseHandle (hObject=0x1e8) returned 1 [0253.193] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0253.193] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00397_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00397_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x439c)) returned 1 [0253.193] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0253.193] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0253.193] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00397_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00397_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x439c)) returned 1 [0253.194] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0253.194] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0253.194] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0253.194] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f08, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="EN00902_.WMF", cAlternateFileName="")) returned 1 [0253.194] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0253.194] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0253.194] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0253.194] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0253.195] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0253.195] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0253.195] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00902_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00902_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0253.196] GetFileType (hFile=0x1e8) returned 0x1 [0253.196] CloseHandle (hObject=0x1e8) returned 1 [0253.196] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0253.197] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00902_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00902_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f08)) returned 1 [0253.197] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0253.197] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0253.197] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00902_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00902_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f08)) returned 1 [0253.197] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0253.197] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0253.197] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0253.197] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2942, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="EXPLR_01.MID", cAlternateFileName="")) returned 1 [0253.198] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0253.198] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0253.198] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0253.198] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0253.198] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0253.198] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0253.199] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EXPLR_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\explr_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0253.199] GetFileType (hFile=0x1e8) returned 0x1 [0253.199] CloseHandle (hObject=0x1e8) returned 1 [0253.200] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0253.200] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EXPLR_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\explr_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2942)) returned 1 [0253.200] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0253.200] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0253.200] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EXPLR_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\explr_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2942)) returned 1 [0253.201] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0253.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0253.201] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0253.201] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12ee, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="FALL_01.MID", cAlternateFileName="")) returned 1 [0253.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0253.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0253.202] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0253.202] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0253.202] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0253.202] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0253.203] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FALL_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fall_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0253.203] GetFileType (hFile=0x1e8) returned 0x1 [0253.203] CloseHandle (hObject=0x1e8) returned 1 [0253.204] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0253.204] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FALL_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fall_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12ee)) returned 1 [0253.204] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0253.204] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0253.204] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FALL_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fall_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12ee)) returned 1 [0253.205] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0253.205] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0253.205] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0253.205] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45ba, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="FD00074_.WMF", cAlternateFileName="")) returned 1 [0253.205] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0253.205] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0253.205] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0253.206] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0253.206] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0253.206] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0253.207] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00074_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00074_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0253.207] GetFileType (hFile=0x1e8) returned 0x1 [0253.207] CloseHandle (hObject=0x1e8) returned 1 [0253.208] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0253.208] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00074_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00074_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45ba)) returned 1 [0253.208] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0253.208] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0253.209] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00074_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00074_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45ba)) returned 1 [0253.209] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0253.209] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0253.209] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0253.209] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2eda, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="FD00076_.WMF", cAlternateFileName="")) returned 1 [0253.209] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0253.209] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0253.210] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0253.210] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0253.210] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0253.211] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0253.212] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00076_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00076_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0253.213] GetFileType (hFile=0x1e8) returned 0x1 [0253.213] CloseHandle (hObject=0x1e8) returned 1 [0253.214] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0253.214] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00076_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00076_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2eda)) returned 1 [0253.214] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0253.214] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0253.215] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00076_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00076_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2eda)) returned 1 [0253.215] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0253.215] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0253.215] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0253.215] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7620, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="FD00077_.WMF", cAlternateFileName="")) returned 1 [0253.215] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0253.215] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0253.215] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0253.216] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0253.216] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0253.216] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0253.217] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00077_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00077_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0253.588] GetFileType (hFile=0x1ac) returned 0x1 [0253.588] CloseHandle (hObject=0x1ac) returned 1 [0253.589] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0253.589] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00077_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00077_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7620)) returned 1 [0253.589] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0253.589] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0253.589] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00077_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00077_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7620)) returned 1 [0253.589] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0253.589] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0253.589] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0253.589] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x721c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="FD00086_.WMF", cAlternateFileName="")) returned 1 [0253.589] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0253.589] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0253.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0253.590] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0253.590] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0253.590] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0253.590] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00086_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00086_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0253.590] GetFileType (hFile=0x1ac) returned 0x1 [0253.591] CloseHandle (hObject=0x1ac) returned 1 [0253.591] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0253.591] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00086_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00086_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x721c)) returned 1 [0253.591] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0253.591] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0253.591] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00086_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00086_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x721c)) returned 1 [0253.592] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0253.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0253.592] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0253.592] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3772, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="FD00090_.WMF", cAlternateFileName="")) returned 1 [0253.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0253.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0253.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0253.592] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0253.592] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0253.592] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0253.593] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00090_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00090_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0253.594] GetFileType (hFile=0x1ac) returned 0x1 [0253.594] CloseHandle (hObject=0x1ac) returned 1 [0253.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0253.594] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00090_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00090_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3772)) returned 1 [0253.595] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0253.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0253.595] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00090_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00090_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3772)) returned 1 [0253.595] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0253.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0253.595] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0253.595] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc55757, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc55757, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x920e, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="FD00096_.WMF", cAlternateFileName="")) returned 1 [0253.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0253.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0253.596] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0253.596] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0253.596] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0253.596] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0253.597] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00096_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00096_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0253.597] GetFileType (hFile=0x1ac) returned 0x1 [0253.597] CloseHandle (hObject=0x1ac) returned 1 [0253.598] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0253.598] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00096_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00096_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc55757, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc55757, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x920e)) returned 1 [0253.598] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0253.598] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0253.598] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00096_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00096_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc55757, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc55757, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x920e)) returned 1 [0253.598] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0253.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0253.599] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0253.599] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc55757, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc55757, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3df0, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="FD00296_.WMF", cAlternateFileName="")) returned 1 [0253.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0253.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0253.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0253.599] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0253.599] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0253.599] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0253.600] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00296_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00296_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0253.600] GetFileType (hFile=0x1ac) returned 0x1 [0253.600] CloseHandle (hObject=0x1ac) returned 1 [0253.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0253.601] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00296_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00296_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc55757, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc55757, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3df0)) returned 1 [0253.601] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0253.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0253.601] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00296_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00296_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc55757, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc55757, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3df0)) returned 1 [0253.601] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0253.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0253.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0253.602] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc7b993, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4712, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="FD00297_.WMF", cAlternateFileName="")) returned 1 [0253.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0253.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0253.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0253.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0253.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0253.603] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0253.603] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00297_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00297_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0253.603] GetFileType (hFile=0x1ac) returned 0x1 [0253.604] CloseHandle (hObject=0x1ac) returned 1 [0253.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0253.604] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00297_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00297_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc7b993, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4712)) returned 1 [0253.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0253.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0253.605] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00297_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00297_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc7b993, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4712)) returned 1 [0253.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0253.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0253.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0253.605] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb6de, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="FD00306_.WMF", cAlternateFileName="")) returned 1 [0253.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0253.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0253.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0253.606] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0253.606] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0253.606] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0253.607] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00306_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00306_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0253.607] GetFileType (hFile=0x1ac) returned 0x1 [0253.607] CloseHandle (hObject=0x1ac) returned 1 [0253.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0253.608] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00306_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00306_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb6de)) returned 1 [0253.608] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0253.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0253.609] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00306_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00306_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb6de)) returned 1 [0253.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0253.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0253.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0253.610] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc55757, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17b4, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="FD00336_.WMF", cAlternateFileName="")) returned 1 [0253.610] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0253.610] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0253.610] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0253.610] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0253.610] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0253.610] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0253.611] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00336_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00336_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0253.611] GetFileType (hFile=0x1ac) returned 0x1 [0253.611] CloseHandle (hObject=0x1ac) returned 1 [0253.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0253.612] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00336_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00336_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc55757, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17b4)) returned 1 [0253.613] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0253.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0253.613] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00336_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00336_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc55757, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17b4)) returned 1 [0253.613] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0253.614] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0253.614] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0253.614] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfea, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="FD00361_.WMF", cAlternateFileName="")) returned 1 [0253.614] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0253.614] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0253.614] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0253.614] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0253.614] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0253.614] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0253.615] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00361_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00361_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0253.615] GetFileType (hFile=0x1ac) returned 0x1 [0253.615] CloseHandle (hObject=0x1ac) returned 1 [0253.617] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0253.617] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00361_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00361_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfea)) returned 1 [0253.617] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0253.617] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0253.617] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00361_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00361_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfea)) returned 1 [0253.617] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0253.617] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0253.617] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0253.618] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc55757, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2168, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="FD00369_.WMF", cAlternateFileName="")) returned 1 [0253.618] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0253.618] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0253.618] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0253.618] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0253.619] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0253.619] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0253.619] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00369_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00369_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0253.619] GetFileType (hFile=0x1ac) returned 0x1 [0253.620] CloseHandle (hObject=0x1ac) returned 1 [0253.620] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0253.620] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00369_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00369_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc55757, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2168)) returned 1 [0253.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0253.621] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0253.621] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00369_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00369_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc55757, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2168)) returned 1 [0253.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0253.621] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0253.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0253.622] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20e8, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="FD00382_.WMF", cAlternateFileName="")) returned 1 [0253.622] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0253.622] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0253.622] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0253.622] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0253.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0253.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0253.624] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00382_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00382_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0253.624] GetFileType (hFile=0x1ac) returned 0x1 [0253.967] CloseHandle (hObject=0x1ac) returned 1 [0253.967] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0253.967] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00382_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00382_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20e8)) returned 1 [0253.968] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0253.968] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0253.968] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00382_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00382_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20e8)) returned 1 [0253.968] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0253.968] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0253.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0253.969] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a40, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="FD00397_.WMF", cAlternateFileName="")) returned 1 [0253.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0253.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0253.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0253.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0253.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0253.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0253.970] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00397_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00397_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0253.971] GetFileType (hFile=0x1ac) returned 0x1 [0253.971] CloseHandle (hObject=0x1ac) returned 1 [0253.972] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0253.972] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00397_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00397_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a40)) returned 1 [0253.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0253.972] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0253.973] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00397_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00397_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a40)) returned 1 [0253.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0253.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0253.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0253.973] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ec6, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="FD00403_.WMF", cAlternateFileName="")) returned 1 [0254.241] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0254.242] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0254.242] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0254.242] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0254.242] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0254.242] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0254.631] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00403_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00403_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0254.631] GetFileType (hFile=0x174) returned 0x1 [0254.632] CloseHandle (hObject=0x174) returned 1 [0254.632] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0254.632] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00403_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00403_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ec6)) returned 1 [0254.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0254.632] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0254.632] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00403_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00403_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ec6)) returned 1 [0254.633] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0254.633] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0254.633] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0254.633] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2afa, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="FD00414_.WMF", cAlternateFileName="")) returned 1 [0254.633] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0254.633] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0254.633] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0254.633] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0254.633] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0254.633] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0254.634] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00414_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00414_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0254.634] GetFileType (hFile=0x174) returned 0x1 [0254.634] CloseHandle (hObject=0x174) returned 1 [0254.634] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0254.635] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00414_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00414_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2afa)) returned 1 [0254.635] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0254.635] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0254.635] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00414_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00414_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2afa)) returned 1 [0254.635] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0254.635] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0254.635] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0254.635] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x400c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="FD00419_.WMF", cAlternateFileName="")) returned 1 [0254.635] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0254.635] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0254.635] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0254.635] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0254.636] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0254.636] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0254.636] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00419_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00419_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0254.637] GetFileType (hFile=0x174) returned 0x1 [0254.637] CloseHandle (hObject=0x174) returned 1 [0254.637] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0254.637] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00419_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00419_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x400c)) returned 1 [0254.637] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0254.637] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0254.638] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00419_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00419_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x400c)) returned 1 [0254.638] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0254.638] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0254.638] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0254.638] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12bc, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="FD00428_.WMF", cAlternateFileName="")) returned 1 [0254.638] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0254.638] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0254.638] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0254.638] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0254.638] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0254.638] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0254.639] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00428_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00428_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0254.641] GetFileType (hFile=0x174) returned 0x1 [0254.641] CloseHandle (hObject=0x174) returned 1 [0254.641] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0254.641] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00428_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00428_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12bc)) returned 1 [0254.641] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0254.641] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0254.641] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00428_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00428_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12bc)) returned 1 [0254.642] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0254.642] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0254.642] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0254.642] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x83c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="FD00435_.WMF", cAlternateFileName="")) returned 1 [0254.642] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0254.642] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0254.642] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0254.642] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0254.642] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0254.642] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0254.642] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00435_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00435_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0254.643] GetFileType (hFile=0x174) returned 0x1 [0254.643] CloseHandle (hObject=0x174) returned 1 [0254.643] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0254.643] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00435_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00435_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x83c)) returned 1 [0254.644] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0254.644] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0254.644] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00435_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00435_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x83c)) returned 1 [0254.644] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0254.644] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0254.644] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0254.644] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13ea, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="FD00438_.WMF", cAlternateFileName="")) returned 1 [0254.644] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0254.644] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0254.644] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0254.644] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0254.644] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0254.644] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0254.645] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00438_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00438_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0254.645] GetFileType (hFile=0x174) returned 0x1 [0254.645] CloseHandle (hObject=0x174) returned 1 [0254.646] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0254.646] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00438_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00438_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13ea)) returned 1 [0254.647] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0254.647] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0254.647] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00438_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00438_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13ea)) returned 1 [0254.647] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0254.647] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0254.647] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0254.647] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x22de, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="FD00455_.WMF", cAlternateFileName="")) returned 1 [0254.647] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0254.647] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0254.647] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0254.647] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0254.647] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0254.648] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0254.648] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00455_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00455_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0254.649] GetFileType (hFile=0x174) returned 0x1 [0254.649] CloseHandle (hObject=0x174) returned 1 [0254.651] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0254.651] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00455_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00455_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x22de)) returned 1 [0254.651] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0254.651] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0254.652] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00455_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00455_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x22de)) returned 1 [0254.652] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0254.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0254.652] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0254.652] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43fe, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="FD00459_.WMF", cAlternateFileName="")) returned 1 [0254.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0254.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0254.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0254.652] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0254.652] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0254.652] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0254.653] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00459_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00459_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0254.653] GetFileType (hFile=0x174) returned 0x1 [0254.653] CloseHandle (hObject=0x174) returned 1 [0254.653] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0254.653] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00459_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00459_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43fe)) returned 1 [0254.653] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0254.654] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0254.654] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00459_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00459_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43fe)) returned 1 [0254.654] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0254.654] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0254.654] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0254.654] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5c0, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="FD00543_.WMF", cAlternateFileName="")) returned 1 [0254.654] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0254.654] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0254.654] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0254.654] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0254.654] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0254.654] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0254.655] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00543_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00543_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0254.655] GetFileType (hFile=0x174) returned 0x1 [0254.655] CloseHandle (hObject=0x174) returned 1 [0254.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0254.655] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00543_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00543_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5c0)) returned 1 [0254.655] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0254.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0254.656] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00543_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00543_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5c0)) returned 1 [0254.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0254.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0254.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0254.656] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x148c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="FD00544_.WMF", cAlternateFileName="")) returned 1 [0254.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0254.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0254.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0254.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0254.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0254.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0254.657] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00544_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00544_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0254.657] GetFileType (hFile=0x174) returned 0x1 [0254.657] CloseHandle (hObject=0x174) returned 1 [0254.657] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0254.658] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00544_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00544_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x148c)) returned 1 [0254.658] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0254.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0254.658] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00544_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00544_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x148c)) returned 1 [0254.658] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0254.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0254.658] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0254.658] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x380, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="FD00564_.WMF", cAlternateFileName="")) returned 1 [0254.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0254.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0254.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0254.658] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0254.658] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0254.658] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0254.659] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00564_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00564_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0254.659] GetFileType (hFile=0x174) returned 0x1 [0254.659] CloseHandle (hObject=0x174) returned 1 [0254.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0254.660] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00564_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00564_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x380)) returned 1 [0254.660] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0254.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0254.660] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00564_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00564_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x380)) returned 1 [0254.660] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0254.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0254.660] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0254.660] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2f0, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="FD00586_.WMF", cAlternateFileName="")) returned 1 [0254.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0254.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0254.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0254.660] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0254.661] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0254.661] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0254.661] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00586_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00586_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0254.689] GetFileType (hFile=0x174) returned 0x1 [0254.689] CloseHandle (hObject=0x174) returned 1 [0254.690] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0254.691] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00586_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00586_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2f0)) returned 1 [0254.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0254.691] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0254.691] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00586_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00586_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2f0)) returned 1 [0254.706] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0254.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0254.706] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0254.706] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b90, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="FD00775_.WMF", cAlternateFileName="")) returned 1 [0254.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0254.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0254.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0254.706] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0254.706] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0254.706] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0254.707] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00775_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00775_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0254.707] GetFileType (hFile=0x174) returned 0x1 [0254.708] CloseHandle (hObject=0x174) returned 1 [0254.708] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0254.708] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00775_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00775_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b90)) returned 1 [0254.708] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0254.708] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0255.026] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00775_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00775_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b90)) returned 1 [0255.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0255.026] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0255.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0255.026] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2332, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="FD00779_.WMF", cAlternateFileName="")) returned 1 [0255.026] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0255.026] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0255.026] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0255.027] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0255.027] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0255.027] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0255.141] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00779_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00779_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0255.141] GetFileType (hFile=0x21c) returned 0x1 [0255.141] CloseHandle (hObject=0x21c) returned 1 [0255.142] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0255.142] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00779_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00779_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2332)) returned 1 [0255.142] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0255.142] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0255.142] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00779_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00779_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2332)) returned 1 [0255.142] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0255.143] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0255.143] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0255.143] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3690, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="FD00799_.WMF", cAlternateFileName="")) returned 1 [0255.143] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0255.143] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0255.143] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0255.143] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0255.143] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0255.143] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0255.144] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00799_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00799_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0255.144] GetFileType (hFile=0x21c) returned 0x1 [0255.144] CloseHandle (hObject=0x21c) returned 1 [0255.144] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0255.145] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00799_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00799_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3690)) returned 1 [0255.145] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0255.145] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0255.145] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00799_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00799_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3690)) returned 1 [0255.145] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0255.145] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0255.145] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0255.145] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa6d0, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="FD00814_.WMF", cAlternateFileName="")) returned 1 [0255.145] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0255.145] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0255.146] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0255.146] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0255.146] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0255.146] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0255.147] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00814_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00814_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0255.225] GetFileType (hFile=0x198) returned 0x1 [0255.226] CloseHandle (hObject=0x198) returned 1 [0255.226] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0255.226] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00814_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00814_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa6d0)) returned 1 [0255.226] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0255.226] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0255.226] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00814_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00814_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa6d0)) returned 1 [0255.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0255.227] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0255.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0255.227] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b3c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="FD00965_.WMF", cAlternateFileName="")) returned 1 [0255.227] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0255.227] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0255.227] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0255.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0255.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0255.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0255.228] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00965_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00965_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0255.228] GetFileType (hFile=0x198) returned 0x1 [0255.229] CloseHandle (hObject=0x198) returned 1 [0255.229] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0255.229] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00965_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00965_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b3c)) returned 1 [0255.229] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0255.229] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0255.229] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00965_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00965_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b3c)) returned 1 [0255.229] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0255.229] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0255.230] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0255.230] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x121a, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="FD01074_.WMF", cAlternateFileName="")) returned 1 [0255.230] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0255.230] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0255.230] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0255.230] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0255.230] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0255.230] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0255.230] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01074_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01074_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0255.231] GetFileType (hFile=0x198) returned 0x1 [0255.231] CloseHandle (hObject=0x198) returned 1 [0255.231] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0255.231] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01074_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01074_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x121a)) returned 1 [0255.231] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0255.231] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0255.232] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01074_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01074_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x121a)) returned 1 [0255.232] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0255.232] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0255.232] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0255.232] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x96c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="FD01084_.WMF", cAlternateFileName="")) returned 1 [0255.232] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0255.232] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0255.232] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0255.232] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0255.232] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0255.232] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0255.233] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01084_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01084_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0255.233] GetFileType (hFile=0x198) returned 0x1 [0255.233] CloseHandle (hObject=0x198) returned 1 [0255.234] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0255.234] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01084_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01084_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x96c)) returned 1 [0255.234] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0255.234] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0255.234] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01084_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01084_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x96c)) returned 1 [0255.234] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0255.234] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0255.234] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0255.234] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1378, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="FD01176_.WMF", cAlternateFileName="")) returned 1 [0255.234] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0255.235] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0255.235] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0255.236] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0255.236] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0255.236] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0255.236] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01176_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01176_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0255.236] GetFileType (hFile=0x198) returned 0x1 [0255.237] CloseHandle (hObject=0x198) returned 1 [0255.237] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0255.237] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01176_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01176_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1378)) returned 1 [0255.237] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0255.237] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0255.238] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01176_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01176_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1378)) returned 1 [0255.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0255.238] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0255.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0255.238] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf7c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="FD01191_.WMF", cAlternateFileName="")) returned 1 [0255.238] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0255.238] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0255.238] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0255.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0255.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0255.239] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0255.239] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01191_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01191_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0255.239] GetFileType (hFile=0x198) returned 0x1 [0255.240] CloseHandle (hObject=0x198) returned 1 [0255.241] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0255.241] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01191_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01191_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf7c)) returned 1 [0255.241] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0255.241] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0255.241] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01191_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01191_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf7c)) returned 1 [0255.241] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0255.241] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0255.241] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0255.241] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf2a4e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x488, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="FD01193_.WMF", cAlternateFileName="")) returned 1 [0255.241] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0255.241] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0255.242] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0255.242] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0255.242] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0255.242] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0255.242] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01193_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01193_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0255.244] GetFileType (hFile=0x198) returned 0x1 [0255.244] CloseHandle (hObject=0x198) returned 1 [0255.244] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0255.244] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01193_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01193_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf2a4e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x488)) returned 1 [0255.245] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0255.245] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0255.245] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01193_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01193_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf2a4e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x488)) returned 1 [0255.245] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0255.245] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0255.245] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0255.245] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf2a4e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x91c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="FD01196_.WMF", cAlternateFileName="")) returned 1 [0255.245] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0255.245] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0255.245] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0255.246] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0255.246] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0255.246] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0255.246] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01196_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01196_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0255.247] GetFileType (hFile=0x198) returned 0x1 [0255.247] CloseHandle (hObject=0x198) returned 1 [0255.247] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0255.247] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01196_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01196_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf2a4e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x91c)) returned 1 [0255.248] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0255.248] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0255.248] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01196_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01196_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf2a4e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x91c)) returned 1 [0255.248] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0255.248] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0255.248] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0255.248] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x284c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="FD01548_.WMF", cAlternateFileName="")) returned 1 [0255.248] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0255.248] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0255.248] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0255.248] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0255.249] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0255.249] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0255.249] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01548_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01548_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0255.250] GetFileType (hFile=0x198) returned 0x1 [0255.251] CloseHandle (hObject=0x198) returned 1 [0255.251] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0255.251] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01548_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01548_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x284c)) returned 1 [0255.251] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0255.251] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0255.251] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01548_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01548_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x284c)) returned 1 [0255.252] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0255.252] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0255.252] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0255.252] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf2a4e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x76ce, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="FD01657_.WMF", cAlternateFileName="")) returned 1 [0255.252] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0255.252] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0255.252] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0255.252] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0255.252] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0255.252] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0255.253] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01657_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01657_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0255.253] GetFileType (hFile=0x198) returned 0x1 [0255.254] CloseHandle (hObject=0x198) returned 1 [0255.254] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0255.254] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01657_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01657_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf2a4e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x76ce)) returned 1 [0255.254] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0255.254] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0255.254] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01657_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01657_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf2a4e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x76ce)) returned 1 [0255.255] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0255.255] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0255.255] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0255.255] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4604, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="FD01658_.WMF", cAlternateFileName="")) returned 1 [0255.255] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0255.255] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0255.255] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0255.255] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0255.256] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0255.256] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0255.257] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01658_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01658_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0255.257] GetFileType (hFile=0x198) returned 0x1 [0255.257] CloseHandle (hObject=0x198) returned 1 [0255.258] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0255.258] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01658_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01658_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4604)) returned 1 [0255.258] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0255.258] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0255.258] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01658_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01658_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4604)) returned 1 [0255.258] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0255.259] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0255.259] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0255.259] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x79cc, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="FD01659_.WMF", cAlternateFileName="")) returned 1 [0255.259] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0255.259] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0255.259] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0255.259] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0255.259] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0255.259] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0255.260] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01659_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01659_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0255.631] GetFileType (hFile=0x1e0) returned 0x1 [0255.631] CloseHandle (hObject=0x1e0) returned 1 [0255.631] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0255.632] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01659_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01659_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x79cc)) returned 1 [0255.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0255.632] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0255.632] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01659_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01659_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x79cc)) returned 1 [0255.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0255.632] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0255.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0255.632] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x329e, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="FD01660_.WMF", cAlternateFileName="")) returned 1 [0255.632] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0255.632] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0255.632] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0255.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0255.633] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0255.633] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0255.633] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01660_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01660_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0255.633] GetFileType (hFile=0x1e0) returned 0x1 [0255.633] CloseHandle (hObject=0x1e0) returned 1 [0255.634] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0255.634] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01660_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01660_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x329e)) returned 1 [0255.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0255.634] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0255.634] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01660_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01660_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x329e)) returned 1 [0255.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0255.634] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0255.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0255.634] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9b8, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="FD02068_.WMF", cAlternateFileName="")) returned 1 [0255.634] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0255.635] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0255.635] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0255.635] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0255.635] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0255.635] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0255.635] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02068_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02068_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0255.635] GetFileType (hFile=0x1e0) returned 0x1 [0255.636] CloseHandle (hObject=0x1e0) returned 1 [0255.636] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0255.636] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02068_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02068_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9b8)) returned 1 [0255.636] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0255.636] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0255.636] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02068_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02068_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9b8)) returned 1 [0255.637] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0255.637] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0255.637] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0255.637] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x88c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="FD02071_.WMF", cAlternateFileName="")) returned 1 [0255.637] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0255.637] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0255.637] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0255.637] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0255.637] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0255.637] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0255.638] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02071_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02071_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0255.638] GetFileType (hFile=0x1e0) returned 0x1 [0255.638] CloseHandle (hObject=0x1e0) returned 1 [0255.638] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0255.639] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02071_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02071_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x88c)) returned 1 [0255.639] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0255.639] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0255.639] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02071_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02071_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x88c)) returned 1 [0255.639] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0255.639] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0255.639] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0255.639] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x112c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="FD02075_.WMF", cAlternateFileName="")) returned 1 [0255.639] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0255.639] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0255.639] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0255.639] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0255.639] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0255.640] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0255.640] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02075_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02075_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0255.640] GetFileType (hFile=0x1e0) returned 0x1 [0255.641] CloseHandle (hObject=0x1e0) returned 1 [0255.641] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0255.641] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02075_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02075_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x112c)) returned 1 [0255.641] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0255.641] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0255.641] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02075_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02075_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x112c)) returned 1 [0255.642] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0255.642] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0255.642] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0255.642] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe70, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="FD02088_.WMF", cAlternateFileName="")) returned 1 [0255.642] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0255.642] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0255.642] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0255.642] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0255.642] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0255.643] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0255.643] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02088_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02088_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0255.643] GetFileType (hFile=0x1e0) returned 0x1 [0255.644] CloseHandle (hObject=0x1e0) returned 1 [0255.644] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0255.644] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02088_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02088_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe70)) returned 1 [0255.644] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0255.645] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0255.645] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02088_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02088_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe70)) returned 1 [0255.645] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0255.645] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0255.645] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0255.645] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x61c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="FD02097_.WMF", cAlternateFileName="")) returned 1 [0255.645] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0255.645] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0255.646] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0255.646] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0255.646] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0255.646] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0255.647] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02097_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02097_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0255.647] GetFileType (hFile=0x1e0) returned 0x1 [0255.648] CloseHandle (hObject=0x1e0) returned 1 [0255.648] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0255.648] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02097_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02097_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x61c)) returned 1 [0255.648] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0255.648] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0255.648] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02097_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02097_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x61c)) returned 1 [0255.649] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0255.649] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0255.649] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0255.649] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1234, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="FD02115_.WMF", cAlternateFileName="")) returned 1 [0255.649] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0255.649] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0255.649] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0255.649] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0255.649] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0255.649] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0255.650] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02115_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02115_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0255.650] GetFileType (hFile=0x1e0) returned 0x1 [0255.651] CloseHandle (hObject=0x1e0) returned 1 [0255.651] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0255.651] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02115_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02115_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1234)) returned 1 [0255.651] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0255.651] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0255.652] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02115_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02115_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1234)) returned 1 [0255.652] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0255.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0255.652] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0255.652] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf94, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="FD02116_.WMF", cAlternateFileName="")) returned 1 [0255.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0255.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0255.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0255.652] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0255.653] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0255.653] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0255.653] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02116_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02116_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0255.653] GetFileType (hFile=0x1e0) returned 0x1 [0255.654] CloseHandle (hObject=0x1e0) returned 1 [0255.654] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0255.654] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02116_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02116_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf94)) returned 1 [0255.654] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0255.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0255.655] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02116_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02116_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf94)) returned 1 [0255.655] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0255.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0255.655] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0255.655] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa4c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="FD02141_.WMF", cAlternateFileName="")) returned 1 [0255.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0255.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0255.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0255.655] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0255.655] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0255.655] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0255.656] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02141_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02141_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0255.656] GetFileType (hFile=0x1e0) returned 0x1 [0255.656] CloseHandle (hObject=0x1e0) returned 1 [0255.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0255.657] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02141_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02141_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa4c)) returned 1 [0255.657] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0255.657] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0255.657] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02141_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02141_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa4c)) returned 1 [0255.657] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0255.657] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0255.657] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0255.657] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf2a4e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1510, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="FD02153_.WMF", cAlternateFileName="")) returned 1 [0255.657] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0255.657] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0255.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0255.658] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0255.658] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0255.658] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0255.658] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02153_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02153_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0255.659] GetFileType (hFile=0x1e0) returned 0x1 [0255.659] CloseHandle (hObject=0x1e0) returned 1 [0255.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0255.659] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02153_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02153_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf2a4e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1510)) returned 1 [0255.659] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0255.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0255.660] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02153_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02153_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf2a4e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1510)) returned 1 [0255.660] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0255.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0255.660] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0255.660] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x670, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="FD02158_.WMF", cAlternateFileName="")) returned 1 [0255.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0255.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0255.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0255.660] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0255.660] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0255.660] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0255.661] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02158_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02158_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0255.662] GetFileType (hFile=0x1e0) returned 0x1 [0255.663] CloseHandle (hObject=0x1e0) returned 1 [0255.663] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0255.663] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02158_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02158_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x670)) returned 1 [0255.663] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0255.663] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0255.663] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02158_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02158_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x670)) returned 1 [0255.663] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0255.664] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0255.664] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0255.664] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc38, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="FD02161_.WMF", cAlternateFileName="")) returned 1 [0255.664] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0255.664] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0255.664] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0255.664] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0255.664] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0255.664] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0255.664] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02161_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02161_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0255.665] GetFileType (hFile=0x1e0) returned 0x1 [0255.665] CloseHandle (hObject=0x1e0) returned 1 [0255.666] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0255.666] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02161_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02161_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc38)) returned 1 [0255.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0255.666] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0255.666] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02161_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02161_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc38)) returned 1 [0255.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0255.666] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0255.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0255.666] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32b5, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="FINCL_01.MID", cAlternateFileName="")) returned 1 [0255.666] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0255.666] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0255.666] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0255.667] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0255.667] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0255.667] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0255.667] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fincl_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0255.667] GetFileType (hFile=0x1e0) returned 0x1 [0255.668] CloseHandle (hObject=0x1e0) returned 1 [0255.668] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0255.668] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fincl_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32b5)) returned 1 [0255.668] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0255.668] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0255.668] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fincl_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32b5)) returned 1 [0255.669] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0255.669] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0255.669] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0255.669] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf2a4e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2466, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="FINCL_02.MID", cAlternateFileName="")) returned 1 [0255.669] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0255.669] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0255.669] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0255.669] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0255.669] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0255.669] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0255.670] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_02.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fincl_02.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0255.670] GetFileType (hFile=0x1e0) returned 0x1 [0255.670] CloseHandle (hObject=0x1e0) returned 1 [0255.671] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0255.671] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_02.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fincl_02.mid"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf2a4e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2466)) returned 1 [0255.671] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0255.671] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0255.671] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_02.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fincl_02.mid"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf2a4e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2466)) returned 1 [0255.671] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0255.671] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0255.671] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0255.671] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x816, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="FLAP.WMF", cAlternateFileName="")) returned 1 [0255.671] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0255.671] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0255.672] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0255.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0255.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0255.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0255.672] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FLAP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\flap.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0255.673] GetFileType (hFile=0x1e0) returned 0x1 [0255.674] CloseHandle (hObject=0x1e0) returned 1 [0255.674] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0255.674] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FLAP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\flap.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x816)) returned 1 [0255.674] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0255.674] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0255.674] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FLAP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\flap.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x816)) returned 1 [0255.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0255.675] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0255.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0255.675] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d8f, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="GRDEN_01.MID", cAlternateFileName="")) returned 1 [0255.675] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0255.675] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0255.675] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0255.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0255.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0255.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0255.676] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRDEN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\grden_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0255.676] GetFileType (hFile=0x1e0) returned 0x1 [0255.676] CloseHandle (hObject=0x1e0) returned 1 [0255.677] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0255.677] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRDEN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\grden_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d8f)) returned 1 [0255.677] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0255.677] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0255.677] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRDEN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\grden_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d8f)) returned 1 [0256.172] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0256.172] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0256.172] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0256.172] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18bb, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="GRID_01.MID", cAlternateFileName="")) returned 1 [0256.172] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0256.172] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0256.172] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0256.172] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0256.172] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0256.173] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0256.173] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRID_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\grid_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0256.173] GetFileType (hFile=0x174) returned 0x1 [0256.173] CloseHandle (hObject=0x174) returned 1 [0256.174] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0256.174] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRID_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\grid_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18bb)) returned 1 [0256.174] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0256.174] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0256.174] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRID_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\grid_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18bb)) returned 1 [0256.174] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0256.174] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0256.174] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0256.174] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xeb4, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="HH00057_.WMF", cAlternateFileName="")) returned 1 [0256.174] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0256.174] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0256.174] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0256.175] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0256.175] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0256.175] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0256.175] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00057_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00057_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0256.175] GetFileType (hFile=0x174) returned 0x1 [0256.176] CloseHandle (hObject=0x174) returned 1 [0256.176] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0256.176] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00057_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00057_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xeb4)) returned 1 [0256.176] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0256.176] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0256.176] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00057_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00057_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xeb4)) returned 1 [0256.176] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0256.176] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0256.176] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0256.177] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9a8, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="HH00084_.WMF", cAlternateFileName="")) returned 1 [0256.177] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0256.177] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0256.177] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0256.177] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0256.177] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0256.177] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0256.178] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00084_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00084_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0256.178] GetFileType (hFile=0x174) returned 0x1 [0256.178] CloseHandle (hObject=0x174) returned 1 [0256.178] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0256.178] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00084_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00084_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9a8)) returned 1 [0256.178] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0256.179] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0256.179] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00084_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00084_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9a8)) returned 1 [0256.179] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0256.179] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0256.179] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0256.179] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b8, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="HH00231_.WMF", cAlternateFileName="")) returned 1 [0256.179] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0256.179] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0256.179] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0256.179] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0256.179] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0256.179] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0256.180] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00231_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00231_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0256.180] GetFileType (hFile=0x174) returned 0x1 [0256.180] CloseHandle (hObject=0x174) returned 1 [0256.180] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0256.181] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00231_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00231_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b8)) returned 1 [0256.181] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0256.181] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0256.181] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00231_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00231_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b8)) returned 1 [0256.181] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0256.181] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0256.181] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0256.181] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x402, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="HH00235_.WMF", cAlternateFileName="")) returned 1 [0256.181] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0256.181] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0256.182] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0256.182] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0256.182] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0256.182] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0256.182] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00235_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00235_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0256.183] GetFileType (hFile=0x174) returned 0x1 [0256.183] CloseHandle (hObject=0x174) returned 1 [0256.183] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0256.183] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00235_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00235_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x402)) returned 1 [0256.183] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0256.183] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0256.184] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00235_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00235_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x402)) returned 1 [0256.184] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0256.184] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0256.184] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0256.184] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcd6, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="HH00236_.WMF", cAlternateFileName="")) returned 1 [0256.184] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0256.184] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0256.184] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0256.184] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0256.184] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0256.185] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0256.185] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00236_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00236_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0256.185] GetFileType (hFile=0x174) returned 0x1 [0256.186] CloseHandle (hObject=0x174) returned 1 [0256.186] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0256.186] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00236_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00236_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcd6)) returned 1 [0256.186] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0256.186] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0256.186] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00236_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00236_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcd6)) returned 1 [0256.186] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0256.187] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0256.187] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0256.187] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7a8, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="HH00241_.WMF", cAlternateFileName="")) returned 1 [0256.187] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0256.187] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0256.187] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0256.187] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0256.187] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0256.187] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0256.188] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00241_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00241_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0256.188] GetFileType (hFile=0x174) returned 0x1 [0256.188] CloseHandle (hObject=0x174) returned 1 [0256.188] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0256.188] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00241_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00241_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7a8)) returned 1 [0256.188] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0256.189] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0256.189] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00241_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00241_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7a8)) returned 1 [0256.189] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0256.189] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0256.189] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0256.189] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe4e, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="HH00260_.WMF", cAlternateFileName="")) returned 1 [0256.189] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0256.189] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0256.189] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0256.189] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0256.189] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0256.189] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0256.190] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00260_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00260_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0256.195] GetFileType (hFile=0x174) returned 0x1 [0256.195] CloseHandle (hObject=0x174) returned 1 [0256.195] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0256.195] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00260_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00260_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe4e)) returned 1 [0256.196] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0256.196] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0256.196] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00260_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00260_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe4e)) returned 1 [0256.196] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0256.196] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0256.196] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0256.196] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc8, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="HH00276_.WMF", cAlternateFileName="")) returned 1 [0256.196] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0256.196] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0256.196] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0256.196] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0256.196] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0256.196] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0256.197] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00276_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00276_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0256.198] GetFileType (hFile=0x174) returned 0x1 [0256.198] CloseHandle (hObject=0x174) returned 1 [0256.198] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0256.198] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00276_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00276_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc8)) returned 1 [0256.198] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0256.198] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0256.199] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00276_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00276_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc8)) returned 1 [0256.199] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0256.199] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0256.199] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0256.199] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5f8, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="HH00334_.WMF", cAlternateFileName="")) returned 1 [0256.199] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0256.199] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0256.199] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0256.199] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0256.199] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0256.199] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0256.199] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00334_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00334_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0256.200] GetFileType (hFile=0x174) returned 0x1 [0256.200] CloseHandle (hObject=0x174) returned 1 [0256.200] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0256.200] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00334_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00334_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5f8)) returned 1 [0256.201] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0256.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0256.201] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00334_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00334_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5f8)) returned 1 [0256.201] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0256.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0256.201] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0256.201] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xce2, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="HH00443_.WMF", cAlternateFileName="")) returned 1 [0256.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0256.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0256.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0256.201] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0256.201] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0256.201] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0256.201] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00443_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00443_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0256.203] GetFileType (hFile=0x174) returned 0x1 [0256.203] CloseHandle (hObject=0x174) returned 1 [0256.203] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0256.203] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00443_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00443_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xce2)) returned 1 [0256.203] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0256.203] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0256.203] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00443_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00443_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xce2)) returned 1 [0256.203] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0256.203] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0256.203] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0256.203] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x332, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="HH00513_.WMF", cAlternateFileName="")) returned 1 [0256.204] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0256.204] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0256.204] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0256.204] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0256.204] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0256.204] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0256.204] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00513_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00513_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0256.204] GetFileType (hFile=0x174) returned 0x1 [0256.204] CloseHandle (hObject=0x174) returned 1 [0256.204] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0256.205] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00513_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00513_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x332)) returned 1 [0256.205] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0256.205] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0256.205] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00513_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00513_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x332)) returned 1 [0256.205] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0256.205] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0256.205] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0256.205] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3960, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="HH00524_.WMF", cAlternateFileName="")) returned 1 [0256.205] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0256.205] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0256.205] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0256.205] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0256.205] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0256.205] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0256.205] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00524_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00524_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0256.206] GetFileType (hFile=0x174) returned 0x1 [0256.206] CloseHandle (hObject=0x174) returned 1 [0256.206] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0256.206] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00524_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00524_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3960)) returned 1 [0256.206] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0256.206] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0256.206] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00524_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00524_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3960)) returned 1 [0256.206] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0256.206] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0256.206] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0256.206] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x34e2, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="HH00526_.WMF", cAlternateFileName="")) returned 1 [0256.206] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0256.206] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0256.207] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0256.207] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0256.207] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0256.207] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0256.207] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00526_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00526_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0256.569] GetFileType (hFile=0x21c) returned 0x1 [0256.569] CloseHandle (hObject=0x21c) returned 1 [0256.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0256.570] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00526_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00526_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x34e2)) returned 1 [0256.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0256.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0256.570] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00526_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00526_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x34e2)) returned 1 [0256.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0256.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0256.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0256.571] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16a6, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="HH00527_.WMF", cAlternateFileName="")) returned 1 [0256.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0256.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0256.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0256.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0256.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0256.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0256.819] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00527_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00527_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0256.819] GetFileType (hFile=0x174) returned 0x1 [0256.819] CloseHandle (hObject=0x174) returned 1 [0256.820] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0256.820] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00527_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00527_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16a6)) returned 1 [0256.820] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0256.820] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0256.820] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00527_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00527_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16a6)) returned 1 [0256.820] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0256.820] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0256.821] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0256.821] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe86, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="HH00546_.WMF", cAlternateFileName="")) returned 1 [0256.821] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0256.821] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0256.821] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0256.821] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0256.821] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0256.822] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0256.822] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00546_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00546_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0256.823] GetFileType (hFile=0x174) returned 0x1 [0256.823] CloseHandle (hObject=0x174) returned 1 [0256.824] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0256.824] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00546_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00546_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe86)) returned 1 [0256.824] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0256.824] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0256.824] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00546_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00546_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe86)) returned 1 [0256.824] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0256.824] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0256.825] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0256.825] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5bc, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="HH00601_.WMF", cAlternateFileName="")) returned 1 [0256.825] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0256.825] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0256.825] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0256.825] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0256.825] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0256.826] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0256.826] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00601_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00601_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0256.827] GetFileType (hFile=0x174) returned 0x1 [0256.827] CloseHandle (hObject=0x174) returned 1 [0256.828] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0256.828] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00601_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00601_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5bc)) returned 1 [0256.828] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0256.828] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0256.828] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00601_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00601_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5bc)) returned 1 [0256.829] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0256.829] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0256.829] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0256.829] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x578, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="HH00602_.WMF", cAlternateFileName="")) returned 1 [0256.829] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0256.829] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0256.829] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0256.830] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0256.830] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0256.830] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0256.830] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00602_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00602_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0256.831] GetFileType (hFile=0x174) returned 0x1 [0256.831] CloseHandle (hObject=0x174) returned 1 [0256.832] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0256.832] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00602_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00602_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x578)) returned 1 [0256.832] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0256.832] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0256.832] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00602_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00602_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x578)) returned 1 [0256.833] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0256.833] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0256.833] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0256.833] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3158, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="HH00612_.WMF", cAlternateFileName="")) returned 1 [0256.833] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0256.833] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0256.833] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0256.833] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0256.834] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0256.834] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0256.835] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00612_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00612_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0256.835] GetFileType (hFile=0x174) returned 0x1 [0256.836] CloseHandle (hObject=0x174) returned 1 [0256.836] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0256.836] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00612_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00612_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3158)) returned 1 [0256.837] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0256.837] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0256.837] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00612_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00612_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3158)) returned 1 [0256.837] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0256.837] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0256.837] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0256.838] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2994, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="HH00623_.WMF", cAlternateFileName="")) returned 1 [0256.838] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0256.838] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0256.838] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0256.838] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0256.838] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0256.838] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0256.839] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00623_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00623_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0256.840] GetFileType (hFile=0x174) returned 0x1 [0256.840] CloseHandle (hObject=0x174) returned 1 [0256.841] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0256.841] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00623_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00623_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2994)) returned 1 [0256.841] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0256.841] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0256.841] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00623_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00623_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2994)) returned 1 [0256.842] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0256.842] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0256.842] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0256.842] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x844, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="HH00625_.WMF", cAlternateFileName="")) returned 1 [0256.842] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0256.842] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0256.842] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0256.843] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0256.843] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0256.843] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0256.844] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00625_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00625_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0256.844] GetFileType (hFile=0x174) returned 0x1 [0256.844] CloseHandle (hObject=0x174) returned 1 [0256.845] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0256.845] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00625_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00625_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x844)) returned 1 [0256.845] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0256.846] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0256.846] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00625_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00625_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x844)) returned 1 [0256.846] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0256.846] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0256.846] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0256.846] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x620, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="HH00636_.WMF", cAlternateFileName="")) returned 1 [0256.846] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0256.846] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0256.847] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0256.847] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0256.847] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0256.847] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0256.848] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00636_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00636_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0256.848] GetFileType (hFile=0x174) returned 0x1 [0256.848] CloseHandle (hObject=0x174) returned 1 [0256.849] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0256.849] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00636_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00636_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x620)) returned 1 [0256.849] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0256.850] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0256.850] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00636_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00636_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x620)) returned 1 [0256.850] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0256.850] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0256.850] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0256.850] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ce2, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="HH00669_.WMF", cAlternateFileName="")) returned 1 [0256.850] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0256.851] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0256.851] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0256.851] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0256.851] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0256.851] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0256.852] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00669_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00669_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0256.852] GetFileType (hFile=0x174) returned 0x1 [0256.852] CloseHandle (hObject=0x174) returned 1 [0256.852] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0256.853] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00669_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00669_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ce2)) returned 1 [0256.853] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0256.853] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0256.853] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00669_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00669_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ce2)) returned 1 [0256.853] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0256.853] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0256.853] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0256.853] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2454, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="HH00681_.WMF", cAlternateFileName="")) returned 1 [0256.854] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0256.854] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0256.854] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0256.854] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0256.854] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0256.854] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0256.855] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00681_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00681_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0256.855] GetFileType (hFile=0x174) returned 0x1 [0256.855] CloseHandle (hObject=0x174) returned 1 [0256.856] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0256.856] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00681_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00681_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2454)) returned 1 [0256.856] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0256.856] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0256.856] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00681_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00681_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2454)) returned 1 [0256.856] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0256.857] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0256.857] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0256.857] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfc0, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="HH00685_.WMF", cAlternateFileName="")) returned 1 [0256.857] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0256.857] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0256.857] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0256.857] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0256.857] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0256.857] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0256.858] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00685_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00685_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0256.858] GetFileType (hFile=0x174) returned 0x1 [0256.859] CloseHandle (hObject=0x174) returned 1 [0256.859] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0256.859] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00685_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00685_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfc0)) returned 1 [0256.859] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0256.859] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0256.859] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00685_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00685_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfc0)) returned 1 [0256.860] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0256.860] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0256.860] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0256.860] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10f4, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="HH00687_.WMF", cAlternateFileName="")) returned 1 [0256.860] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0256.860] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0256.860] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0256.860] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0256.860] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0256.860] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0256.861] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00687_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00687_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0256.861] GetFileType (hFile=0x174) returned 0x1 [0256.862] CloseHandle (hObject=0x174) returned 1 [0256.862] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0256.862] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00687_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00687_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10f4)) returned 1 [0256.862] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0256.862] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0256.863] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00687_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00687_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10f4)) returned 1 [0256.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0256.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0256.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0256.864] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bac, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="HH00688_.WMF", cAlternateFileName="")) returned 1 [0256.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0256.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0256.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0256.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0256.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0256.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0257.287] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00688_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00688_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0257.288] GetFileType (hFile=0x1e8) returned 0x1 [0257.288] CloseHandle (hObject=0x1e8) returned 1 [0257.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0257.289] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00688_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00688_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bac)) returned 1 [0257.289] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0257.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0257.290] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00688_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00688_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bac)) returned 1 [0257.290] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0257.290] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0257.290] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0257.290] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bba, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="HH00693_.WMF", cAlternateFileName="")) returned 1 [0257.290] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0257.290] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0257.290] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0257.291] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0257.291] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0257.291] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0257.292] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00693_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00693_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0257.292] GetFileType (hFile=0x1e8) returned 0x1 [0257.292] CloseHandle (hObject=0x1e8) returned 1 [0257.293] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0257.293] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00693_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00693_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bba)) returned 1 [0257.293] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0257.293] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0257.293] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00693_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00693_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bba)) returned 1 [0257.293] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0257.293] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0257.293] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0257.294] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb20, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="HH01013_.WMF", cAlternateFileName="")) returned 1 [0257.294] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0257.294] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0257.294] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0257.294] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0257.294] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0257.294] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0257.294] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01013_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01013_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0257.295] GetFileType (hFile=0x1e8) returned 0x1 [0257.295] CloseHandle (hObject=0x1e8) returned 1 [0257.295] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0257.295] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01013_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01013_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb20)) returned 1 [0257.295] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0257.295] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0257.296] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01013_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01013_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb20)) returned 1 [0257.296] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0257.296] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0257.296] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0257.296] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x47c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="HH01015_.WMF", cAlternateFileName="")) returned 1 [0257.296] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0257.296] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0257.296] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0257.296] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0257.296] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0257.297] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0257.297] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01015_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0257.297] GetFileType (hFile=0x1e8) returned 0x1 [0257.298] CloseHandle (hObject=0x1e8) returned 1 [0257.298] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0257.298] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01015_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x47c)) returned 1 [0257.299] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0257.299] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0257.299] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01015_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x47c)) returned 1 [0257.299] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0257.299] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0257.299] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0257.299] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xac4, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="HH01058_.WMF", cAlternateFileName="")) returned 1 [0257.299] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0257.299] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0257.300] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0257.300] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0257.300] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0257.300] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0257.301] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01058_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01058_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0257.301] GetFileType (hFile=0x1e8) returned 0x1 [0257.301] CloseHandle (hObject=0x1e8) returned 1 [0257.302] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0257.303] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01058_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01058_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xac4)) returned 1 [0257.303] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0257.303] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0257.303] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01058_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01058_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xac4)) returned 1 [0257.303] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0257.303] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0257.304] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0257.304] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f4, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="HH01065_.WMF", cAlternateFileName="")) returned 1 [0257.304] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0257.304] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0257.304] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0257.304] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0257.304] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0257.305] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0257.305] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01065_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01065_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0257.306] GetFileType (hFile=0x1e8) returned 0x1 [0257.306] CloseHandle (hObject=0x1e8) returned 1 [0257.306] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0257.307] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01065_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01065_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f4)) returned 1 [0257.307] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0257.307] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0257.307] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01065_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01065_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f4)) returned 1 [0257.307] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0257.307] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0257.307] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0257.307] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1388, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="HH01080_.WMF", cAlternateFileName="")) returned 1 [0257.308] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0257.308] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0257.308] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0257.308] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0257.308] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0257.308] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0257.309] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01080_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01080_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0257.309] GetFileType (hFile=0x1e8) returned 0x1 [0257.310] CloseHandle (hObject=0x1e8) returned 1 [0257.310] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0257.310] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01080_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01080_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1388)) returned 1 [0257.310] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0257.310] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0257.311] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01080_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01080_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1388)) returned 1 [0257.311] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0257.311] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0257.311] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0257.311] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1cac, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="HH01242_.WMF", cAlternateFileName="")) returned 1 [0257.311] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0257.311] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0257.311] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0257.312] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0257.312] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0257.312] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0257.312] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01242_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01242_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0257.313] GetFileType (hFile=0x1e8) returned 0x1 [0257.313] CloseHandle (hObject=0x1e8) returned 1 [0257.314] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0257.314] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01242_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01242_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1cac)) returned 1 [0257.314] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0257.314] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0257.314] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01242_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01242_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1cac)) returned 1 [0257.315] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0257.315] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0257.315] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0257.315] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3dbe, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="HH01291_.WMF", cAlternateFileName="")) returned 1 [0257.315] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0257.315] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0257.315] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0257.316] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0257.316] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0257.316] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0257.317] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01291_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01291_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0257.317] GetFileType (hFile=0x1e8) returned 0x1 [0257.576] CloseHandle (hObject=0x1e8) returned 1 [0257.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0257.577] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01291_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01291_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3dbe)) returned 1 [0257.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0257.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0257.578] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01291_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01291_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3dbe)) returned 1 [0257.578] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0257.578] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0257.578] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0257.578] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1780, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="HH01329_.WMF", cAlternateFileName="")) returned 1 [0257.578] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0257.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0257.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0257.579] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0257.579] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0257.579] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0257.580] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01329_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01329_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0257.580] GetFileType (hFile=0x1e8) returned 0x1 [0257.581] CloseHandle (hObject=0x1e8) returned 1 [0257.581] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0257.582] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01329_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01329_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1780)) returned 1 [0257.582] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0257.582] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0257.582] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01329_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01329_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1780)) returned 1 [0257.582] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0257.582] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0257.583] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0257.583] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1746, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="HH01461_.WMF", cAlternateFileName="")) returned 1 [0257.583] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0257.583] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0257.583] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0257.584] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0257.584] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0257.584] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0257.585] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01461_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01461_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0257.585] GetFileType (hFile=0x1e8) returned 0x1 [0257.586] CloseHandle (hObject=0x1e8) returned 1 [0257.587] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0257.587] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01461_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01461_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1746)) returned 1 [0257.587] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0257.587] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0257.587] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01461_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01461_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1746)) returned 1 [0257.587] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0257.588] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0257.588] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0257.588] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c80, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="HH01618_.WMF", cAlternateFileName="")) returned 1 [0257.588] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0257.588] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0257.588] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0257.588] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0257.588] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0257.588] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0257.589] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01618_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01618_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0257.589] GetFileType (hFile=0x1e8) returned 0x1 [0257.590] CloseHandle (hObject=0x1e8) returned 1 [0257.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0257.591] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01618_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01618_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c80)) returned 1 [0257.591] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0257.591] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0257.591] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01618_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01618_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c80)) returned 1 [0257.591] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0257.591] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0257.592] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0257.592] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1526, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="HH01759_.WMF", cAlternateFileName="")) returned 1 [0257.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0257.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0257.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0257.592] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0257.592] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0257.593] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0257.593] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01759_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01759_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0257.594] GetFileType (hFile=0x1e8) returned 0x1 [0257.594] CloseHandle (hObject=0x1e8) returned 1 [0257.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0257.595] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01759_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01759_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1526)) returned 1 [0257.595] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0257.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0257.595] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01759_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01759_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1526)) returned 1 [0257.596] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0257.596] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0257.596] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0257.596] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa38, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="HH01875_.WMF", cAlternateFileName="")) returned 1 [0257.596] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0257.596] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0257.596] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0257.597] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0257.597] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0257.597] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0257.598] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01875_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01875_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0257.598] GetFileType (hFile=0x1e8) returned 0x1 [0257.599] CloseHandle (hObject=0x1e8) returned 1 [0257.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0257.600] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01875_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01875_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa38)) returned 1 [0257.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0257.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0257.600] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01875_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01875_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa38)) returned 1 [0257.601] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0257.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0257.601] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0257.601] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6852, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="HH01923_.WMF", cAlternateFileName="")) returned 1 [0257.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0257.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0257.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0257.601] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0257.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0257.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0257.602] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01923_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01923_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0257.603] GetFileType (hFile=0x1e8) returned 0x1 [0257.603] CloseHandle (hObject=0x1e8) returned 1 [0257.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0257.604] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01923_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01923_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6852)) returned 1 [0257.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0257.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0257.604] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01923_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01923_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6852)) returned 1 [0257.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0257.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0257.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0257.605] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa90, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="HH02155_.WMF", cAlternateFileName="")) returned 1 [0257.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0257.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0257.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0257.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0257.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0257.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0257.606] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02155_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02155_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0257.606] GetFileType (hFile=0x1e8) returned 0x1 [0257.607] CloseHandle (hObject=0x1e8) returned 1 [0257.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0257.607] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02155_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02155_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa90)) returned 1 [0257.608] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0257.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0257.608] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02155_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02155_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa90)) returned 1 [0257.608] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0257.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0257.608] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0257.608] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x52c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="HH02166_.WMF", cAlternateFileName="")) returned 1 [0257.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0257.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0257.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0257.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0257.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0257.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0257.610] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02166_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02166_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0257.610] GetFileType (hFile=0x1e8) returned 0x1 [0257.610] CloseHandle (hObject=0x1e8) returned 1 [0257.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0257.611] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02166_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02166_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x52c)) returned 1 [0257.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0257.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0257.611] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02166_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02166_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x52c)) returned 1 [0257.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0257.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0257.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0257.611] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1efc, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="HH02282_.WMF", cAlternateFileName="")) returned 1 [0257.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0257.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0257.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0257.612] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0257.612] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0257.612] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0257.613] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02282_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02282_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0257.613] GetFileType (hFile=0x1e8) returned 0x1 [0257.614] CloseHandle (hObject=0x1e8) returned 1 [0257.614] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0257.614] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02282_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02282_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1efc)) returned 1 [0257.614] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0257.614] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0257.810] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02282_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02282_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1efc)) returned 1 [0257.810] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0257.810] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0257.810] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0257.810] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15b0, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="HH02298_.WMF", cAlternateFileName="")) returned 1 [0257.810] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0257.810] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0257.811] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0257.811] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0257.811] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0257.811] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0257.813] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02298_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02298_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0257.813] GetFileType (hFile=0x1c0) returned 0x1 [0257.814] CloseHandle (hObject=0x1c0) returned 1 [0257.814] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0257.814] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02298_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02298_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15b0)) returned 1 [0257.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0257.815] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0257.815] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02298_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02298_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15b0)) returned 1 [0257.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0257.815] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0257.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0257.815] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x136a, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="HH02312_.WMF", cAlternateFileName="")) returned 1 [0257.816] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0257.816] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0257.816] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0257.816] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0257.816] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0257.816] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0257.817] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02312_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02312_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0257.817] GetFileType (hFile=0x1c0) returned 0x1 [0257.818] CloseHandle (hObject=0x1c0) returned 1 [0257.819] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0257.819] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02312_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02312_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x136a)) returned 1 [0257.819] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0257.819] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0257.819] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02312_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02312_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x136a)) returned 1 [0257.820] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0257.820] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0257.820] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0257.820] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc0a, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="HH02313_.WMF", cAlternateFileName="")) returned 1 [0257.820] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0257.820] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0257.820] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0257.820] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0257.821] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0257.821] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0257.821] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02313_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02313_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0257.822] GetFileType (hFile=0x1c0) returned 0x1 [0257.822] CloseHandle (hObject=0x1c0) returned 1 [0257.823] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0257.823] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02313_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02313_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc0a)) returned 1 [0257.823] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0257.823] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0257.823] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02313_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02313_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc0a)) returned 1 [0257.823] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0257.824] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0257.824] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0257.824] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5b04, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="HM00005_.WMF", cAlternateFileName="")) returned 1 [0257.824] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0257.824] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0257.824] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0257.824] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0257.824] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0257.825] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0257.825] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00005_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00005_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0257.826] GetFileType (hFile=0x1c0) returned 0x1 [0257.826] CloseHandle (hObject=0x1c0) returned 1 [0257.826] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0257.827] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00005_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00005_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5b04)) returned 1 [0257.827] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0257.827] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0257.827] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00005_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00005_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5b04)) returned 1 [0257.827] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0257.827] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0257.827] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0257.827] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5664, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="HM00114_.WMF", cAlternateFileName="")) returned 1 [0257.828] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0257.828] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0257.828] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0257.828] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0257.828] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0257.828] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0257.829] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00114_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00114_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0258.316] GetFileType (hFile=0x1ac) returned 0x1 [0258.316] CloseHandle (hObject=0x1ac) returned 1 [0258.317] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0258.317] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00114_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00114_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5664)) returned 1 [0258.317] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0258.317] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0258.317] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00114_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00114_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5664)) returned 1 [0258.318] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0258.318] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0258.318] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0258.318] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3dec, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="HM00116_.WMF", cAlternateFileName="")) returned 1 [0258.318] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0258.318] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0258.318] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0258.319] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0258.319] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0258.319] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0258.320] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00116_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00116_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0258.320] GetFileType (hFile=0x1ac) returned 0x1 [0258.321] CloseHandle (hObject=0x1ac) returned 1 [0258.321] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0258.321] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00116_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00116_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3dec)) returned 1 [0258.322] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0258.322] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0258.322] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00116_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00116_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3dec)) returned 1 [0258.322] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0258.322] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0258.322] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0258.322] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb10, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="HM00172_.WMF", cAlternateFileName="")) returned 1 [0258.322] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0258.322] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0258.323] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0258.323] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0258.323] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0258.323] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0258.324] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00172_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0258.345] GetFileType (hFile=0x1ac) returned 0x1 [0258.346] CloseHandle (hObject=0x1ac) returned 1 [0258.346] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0258.347] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00172_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb10)) returned 1 [0258.347] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0258.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0258.347] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00172_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb10)) returned 1 [0258.347] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0258.348] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0258.348] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0258.348] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10ca8, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="HM00426_.WMF", cAlternateFileName="")) returned 1 [0258.348] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0258.348] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0258.348] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0258.348] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0258.348] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0258.348] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0258.349] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00426_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00426_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0258.350] GetFileType (hFile=0x1ac) returned 0x1 [0258.350] CloseHandle (hObject=0x1ac) returned 1 [0258.351] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0258.351] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00426_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00426_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10ca8)) returned 1 [0258.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0258.351] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0258.351] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00426_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00426_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10ca8)) returned 1 [0258.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0258.351] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0258.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0258.351] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c0a, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="HTECH_01.MID", cAlternateFileName="")) returned 1 [0258.352] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0258.352] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0258.352] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0258.352] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0258.352] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0258.352] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0258.353] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HTECH_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\htech_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0258.353] GetFileType (hFile=0x1ac) returned 0x1 [0258.354] CloseHandle (hObject=0x1ac) returned 1 [0258.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0258.354] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HTECH_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\htech_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c0a)) returned 1 [0258.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0258.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0258.355] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HTECH_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\htech_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c0a)) returned 1 [0258.355] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0258.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0258.355] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0258.355] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x486, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="IN00046_.WMF", cAlternateFileName="")) returned 1 [0258.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0258.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0258.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0258.355] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0258.356] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0258.356] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0258.356] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00046_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00046_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0258.679] GetFileType (hFile=0x174) returned 0x1 [0258.679] CloseHandle (hObject=0x174) returned 1 [0258.680] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0258.680] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00046_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00046_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x486)) returned 1 [0258.680] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0258.680] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0258.680] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00046_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00046_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x486)) returned 1 [0258.680] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0258.680] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0258.681] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0258.681] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x318, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="IN00118_.WMF", cAlternateFileName="")) returned 1 [0258.681] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0258.681] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0258.681] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0258.681] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0258.681] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0258.681] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0258.682] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00118_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00118_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0258.682] GetFileType (hFile=0x174) returned 0x1 [0258.683] CloseHandle (hObject=0x174) returned 1 [0258.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0258.683] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00118_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00118_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x318)) returned 1 [0258.683] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0258.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0258.684] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00118_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00118_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x318)) returned 1 [0258.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0258.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0258.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0258.684] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x432, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="IN00177_.WMF", cAlternateFileName="")) returned 1 [0258.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0258.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0258.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0258.685] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0258.685] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0258.685] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0258.685] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00177_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00177_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0258.686] GetFileType (hFile=0x174) returned 0x1 [0258.686] CloseHandle (hObject=0x174) returned 1 [0258.687] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0258.687] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00177_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00177_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x432)) returned 1 [0258.687] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0258.687] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0258.687] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00177_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00177_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x432)) returned 1 [0258.687] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0258.687] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0258.687] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0258.687] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x738, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="IN00204_.WMF", cAlternateFileName="")) returned 1 [0258.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0258.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0258.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0258.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0258.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0258.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0258.689] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00204_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00204_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0258.689] GetFileType (hFile=0x174) returned 0x1 [0258.689] CloseHandle (hObject=0x174) returned 1 [0258.690] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0258.690] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00204_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00204_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x738)) returned 1 [0258.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0258.691] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0258.691] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00204_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00204_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x738)) returned 1 [0258.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0258.691] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0258.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0258.691] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2bb6, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="IN00233_.WMF", cAlternateFileName="")) returned 1 [0258.691] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0258.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0258.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0258.692] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0258.692] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0258.692] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0258.693] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00233_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00233_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0258.693] GetFileType (hFile=0x174) returned 0x1 [0258.694] CloseHandle (hObject=0x174) returned 1 [0258.694] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0258.694] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00233_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00233_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2bb6)) returned 1 [0258.694] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0258.695] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0258.695] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00233_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00233_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2bb6)) returned 1 [0258.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0258.695] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0258.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0258.695] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x764, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="IN00343_.WMF", cAlternateFileName="")) returned 1 [0258.695] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0258.696] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0258.696] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0258.696] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0258.696] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0258.696] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0258.697] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00343_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00343_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0258.697] GetFileType (hFile=0x174) returned 0x1 [0258.698] CloseHandle (hObject=0x174) returned 1 [0258.698] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0258.698] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00343_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00343_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x764)) returned 1 [0258.699] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0258.699] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0258.699] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00343_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00343_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x764)) returned 1 [0258.699] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0258.699] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0258.699] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0258.700] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b8, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="IN00346_.WMF", cAlternateFileName="")) returned 1 [0258.700] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0258.700] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0258.700] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0258.700] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0258.700] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0258.700] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0258.701] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00346_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00346_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0258.701] GetFileType (hFile=0x174) returned 0x1 [0258.702] CloseHandle (hObject=0x174) returned 1 [0258.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0258.702] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00346_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00346_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b8)) returned 1 [0258.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0258.703] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0258.703] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00346_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00346_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b8)) returned 1 [0258.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0258.703] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0258.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0258.703] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x788, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="IN00351_.WMF", cAlternateFileName="")) returned 1 [0258.703] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0258.704] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0258.704] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0258.704] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0258.704] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0258.704] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0258.705] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00351_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00351_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0258.705] GetFileType (hFile=0x174) returned 0x1 [0258.706] CloseHandle (hObject=0x174) returned 1 [0258.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0258.706] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00351_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00351_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x788)) returned 1 [0258.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0258.707] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0258.707] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00351_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00351_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x788)) returned 1 [0258.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0258.707] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0258.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0258.707] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x23d4, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="IN00557_.WMF", cAlternateFileName="")) returned 1 [0258.707] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0258.708] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0258.708] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0258.708] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0258.708] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0258.708] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0258.709] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00557_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00557_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0258.710] GetFileType (hFile=0x174) returned 0x1 [0258.710] CloseHandle (hObject=0x174) returned 1 [0258.711] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0258.711] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00557_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00557_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x23d4)) returned 1 [0258.711] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0258.711] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0258.711] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00557_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00557_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x23d4)) returned 1 [0258.711] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0258.712] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0258.712] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0258.712] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe00f20a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31cc, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="IN00915_.WMF", cAlternateFileName="")) returned 1 [0258.712] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0258.712] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0258.712] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0258.712] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0258.713] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0258.713] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0258.714] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00915_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00915_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0259.053] GetFileType (hFile=0x21c) returned 0x1 [0259.053] CloseHandle (hObject=0x21c) returned 1 [0259.053] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0259.054] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00915_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00915_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe00f20a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31cc)) returned 1 [0259.054] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0259.054] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0259.054] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00915_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00915_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe00f20a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31cc)) returned 1 [0259.054] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0259.054] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0259.054] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0259.055] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe00f20a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b08, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="IN00919_.WMF", cAlternateFileName="")) returned 1 [0259.055] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0259.055] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0259.055] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0259.055] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0259.055] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0259.055] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0259.056] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00919_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00919_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0259.057] GetFileType (hFile=0x21c) returned 0x1 [0259.057] CloseHandle (hObject=0x21c) returned 1 [0259.058] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0259.058] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00919_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00919_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe00f20a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b08)) returned 1 [0259.058] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0259.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0259.059] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00919_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00919_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe00f20a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b08)) returned 1 [0259.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0259.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0259.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0259.059] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e8, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="IN00956_.WMF", cAlternateFileName="")) returned 1 [0259.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0259.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0259.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0259.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0259.061] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0259.061] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0259.061] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00956_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00956_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0259.062] GetFileType (hFile=0x21c) returned 0x1 [0259.062] CloseHandle (hObject=0x21c) returned 1 [0259.063] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0259.063] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00956_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00956_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e8)) returned 1 [0259.063] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0259.063] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0259.063] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00956_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00956_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e8)) returned 1 [0259.064] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0259.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0259.064] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0259.064] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe00f20a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb80, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="IN00957_.WMF", cAlternateFileName="")) returned 1 [0259.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0259.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0259.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0259.064] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0259.064] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0259.077] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0259.077] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00957_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00957_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0259.078] GetFileType (hFile=0x21c) returned 0x1 [0259.078] CloseHandle (hObject=0x21c) returned 1 [0259.078] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0259.079] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00957_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00957_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe00f20a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb80)) returned 1 [0259.079] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0259.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0259.079] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00957_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00957_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe00f20a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb80)) returned 1 [0259.079] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0259.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0259.079] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0259.079] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe00f20a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2178, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="INDST_01.MID", cAlternateFileName="")) returned 1 [0259.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0259.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0259.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0259.079] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0259.079] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0259.080] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0259.080] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\INDST_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\indst_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0259.080] GetFileType (hFile=0x21c) returned 0x1 [0259.081] CloseHandle (hObject=0x21c) returned 1 [0259.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0259.081] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\INDST_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\indst_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe00f20a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2178)) returned 1 [0259.081] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0259.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0259.081] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\INDST_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\indst_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe00f20a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2178)) returned 1 [0259.082] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0259.082] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0259.082] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0259.082] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe00f20a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c4, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0075478.GIF", cAlternateFileName="")) returned 1 [0259.082] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0259.082] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0259.082] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0259.082] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0259.082] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0259.082] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0259.083] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0075478.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0075478.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0259.083] GetFileType (hFile=0x21c) returned 0x1 [0259.084] CloseHandle (hObject=0x21c) returned 1 [0259.084] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0259.084] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0075478.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0075478.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe00f20a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c4)) returned 1 [0259.084] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0259.084] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0259.085] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0075478.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0075478.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe00f20a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c4)) returned 1 [0259.085] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0259.085] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0259.085] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0259.085] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2606, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0086384.WMF", cAlternateFileName="")) returned 1 [0259.085] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0259.085] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0259.085] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0259.085] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0259.085] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0259.085] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0259.086] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086384.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086384.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0259.088] GetFileType (hFile=0x21c) returned 0x1 [0259.088] CloseHandle (hObject=0x21c) returned 1 [0259.088] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0259.088] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086384.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086384.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2606)) returned 1 [0259.089] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0259.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0259.089] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086384.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086384.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2606)) returned 1 [0259.089] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0259.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0259.089] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0259.089] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x257c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0086420.WMF", cAlternateFileName="")) returned 1 [0259.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0259.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0259.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0259.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0259.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0259.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0259.090] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086420.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086420.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0259.091] GetFileType (hFile=0x21c) returned 0x1 [0259.091] CloseHandle (hObject=0x21c) returned 1 [0259.092] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0259.092] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086420.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086420.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x257c)) returned 1 [0259.092] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0259.092] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0259.092] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086420.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086420.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x257c)) returned 1 [0259.092] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0259.092] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0259.092] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0259.093] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4278, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0086424.WMF", cAlternateFileName="")) returned 1 [0259.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0259.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0259.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0259.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0259.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0259.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0259.094] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086424.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086424.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0259.095] GetFileType (hFile=0x21c) returned 0x1 [0259.127] CloseHandle (hObject=0x21c) returned 1 [0259.128] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0259.128] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086424.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086424.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4278)) returned 1 [0259.128] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0259.128] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0259.128] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086424.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086424.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4278)) returned 1 [0259.128] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0259.129] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0259.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0259.129] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5516, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0086426.WMF", cAlternateFileName="")) returned 1 [0259.129] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0259.129] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0259.129] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0259.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0259.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0259.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0259.130] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086426.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086426.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0259.131] GetFileType (hFile=0x21c) returned 0x1 [0259.131] CloseHandle (hObject=0x21c) returned 1 [0259.132] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0259.132] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086426.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086426.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5516)) returned 1 [0259.132] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0259.132] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0259.132] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086426.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086426.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5516)) returned 1 [0259.132] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0259.132] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0259.133] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0259.133] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8a12, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0086428.WMF", cAlternateFileName="")) returned 1 [0259.133] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0259.133] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0259.133] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0259.133] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0259.133] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0259.133] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0259.134] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086428.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086428.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0259.135] GetFileType (hFile=0x21c) returned 0x1 [0259.135] CloseHandle (hObject=0x21c) returned 1 [0259.135] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0259.135] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086428.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086428.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8a12)) returned 1 [0259.136] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0259.136] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0259.136] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086428.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086428.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8a12)) returned 1 [0259.136] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0259.136] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0259.136] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0259.136] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x829a, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0086432.WMF", cAlternateFileName="")) returned 1 [0259.136] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0259.137] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0259.137] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0259.137] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0259.137] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0259.137] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0259.138] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086432.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086432.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0259.493] GetFileType (hFile=0x1c0) returned 0x1 [0259.494] CloseHandle (hObject=0x1c0) returned 1 [0259.494] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0259.494] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086432.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086432.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x829a)) returned 1 [0259.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0259.494] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0259.495] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086432.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086432.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x829a)) returned 1 [0259.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0259.495] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0259.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0259.495] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x375e, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0086478.WMF", cAlternateFileName="")) returned 1 [0259.495] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0259.495] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0259.495] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0259.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0259.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0259.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0259.785] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086478.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086478.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0259.785] GetFileType (hFile=0x19c) returned 0x1 [0259.785] CloseHandle (hObject=0x19c) returned 1 [0259.786] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0259.786] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086478.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086478.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x375e)) returned 1 [0259.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0259.786] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0259.786] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086478.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086478.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x375e)) returned 1 [0259.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0259.787] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0259.787] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0259.787] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4dba, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0089945.WMF", cAlternateFileName="")) returned 1 [0259.787] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0259.787] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0259.787] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0259.787] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0259.787] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0259.787] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0259.788] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089945.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0089945.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0259.788] GetFileType (hFile=0x19c) returned 0x1 [0259.789] CloseHandle (hObject=0x19c) returned 1 [0259.789] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0259.789] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089945.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0089945.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4dba)) returned 1 [0259.789] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0259.789] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0259.790] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089945.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0089945.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4dba)) returned 1 [0259.790] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0259.790] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0259.790] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0259.790] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d40, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0089992.WMF", cAlternateFileName="")) returned 1 [0259.790] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0259.790] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0259.790] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0259.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0259.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0259.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0259.791] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089992.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0089992.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0259.792] GetFileType (hFile=0x19c) returned 0x1 [0259.792] CloseHandle (hObject=0x19c) returned 1 [0259.792] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0259.793] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089992.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0089992.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d40)) returned 1 [0259.793] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0259.793] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0259.793] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089992.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0089992.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d40)) returned 1 [0259.793] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0259.793] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0259.793] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0259.793] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5314, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0090027.WMF", cAlternateFileName="")) returned 1 [0259.794] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0259.794] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0259.794] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0259.794] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0259.794] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0259.794] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0259.795] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090027.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090027.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0259.795] GetFileType (hFile=0x19c) returned 0x1 [0259.796] CloseHandle (hObject=0x19c) returned 1 [0259.796] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0259.797] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090027.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090027.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5314)) returned 1 [0259.797] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0259.797] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0259.797] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090027.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090027.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5314)) returned 1 [0259.797] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0259.797] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0259.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0259.798] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb758, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0090087.WMF", cAlternateFileName="")) returned 1 [0259.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0259.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0259.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0259.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0259.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0259.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0259.800] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090087.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090087.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0259.801] GetFileType (hFile=0x19c) returned 0x1 [0259.801] CloseHandle (hObject=0x19c) returned 1 [0259.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0259.802] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090087.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090087.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb758)) returned 1 [0259.802] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0259.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0259.803] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090087.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090087.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb758)) returned 1 [0259.803] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0259.803] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0259.803] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0259.803] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d90, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0090089.WMF", cAlternateFileName="")) returned 1 [0259.803] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0259.803] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0259.803] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0259.803] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0259.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0259.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0259.804] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090089.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090089.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0259.805] GetFileType (hFile=0x19c) returned 0x1 [0259.805] CloseHandle (hObject=0x19c) returned 1 [0259.806] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0259.806] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090089.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090089.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d90)) returned 1 [0259.806] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0259.806] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0259.806] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090089.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090089.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d90)) returned 1 [0259.806] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0259.806] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0259.807] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0259.807] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6e34, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0090149.WMF", cAlternateFileName="")) returned 1 [0259.807] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0259.807] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0259.807] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0259.807] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0259.807] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0259.807] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0259.808] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090149.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090149.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0259.809] GetFileType (hFile=0x19c) returned 0x1 [0259.809] CloseHandle (hObject=0x19c) returned 1 [0259.809] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0259.809] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090149.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090149.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6e34)) returned 1 [0259.810] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0259.810] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0259.810] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090149.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090149.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6e34)) returned 1 [0259.810] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0259.810] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0259.810] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0259.810] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x44e6, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0090390.WMF", cAlternateFileName="")) returned 1 [0259.810] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0259.810] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0259.811] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0259.811] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0259.811] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0259.811] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0259.811] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090390.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090390.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0259.812] GetFileType (hFile=0x19c) returned 0x1 [0259.812] CloseHandle (hObject=0x19c) returned 1 [0259.813] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0259.813] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090390.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090390.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x44e6)) returned 1 [0259.813] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0259.813] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0259.813] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090390.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090390.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x44e6)) returned 1 [0259.813] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0259.814] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0259.814] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0259.814] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd04, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0090777.WMF", cAlternateFileName="")) returned 1 [0259.814] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0259.814] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0259.814] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0259.814] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0259.814] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0259.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0259.816] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090777.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090777.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0259.817] GetFileType (hFile=0x19c) returned 0x1 [0259.818] CloseHandle (hObject=0x19c) returned 1 [0259.818] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0259.818] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090777.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090777.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd04)) returned 1 [0259.818] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0259.818] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0259.819] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090777.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090777.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd04)) returned 1 [0259.819] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0259.819] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0259.819] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0259.819] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5b0, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0090779.WMF", cAlternateFileName="")) returned 1 [0259.819] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0259.819] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0259.819] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0259.820] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0259.820] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0259.820] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0259.821] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090779.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090779.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0259.821] GetFileType (hFile=0x19c) returned 0x1 [0259.822] CloseHandle (hObject=0x19c) returned 1 [0259.822] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0259.822] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090779.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090779.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5b0)) returned 1 [0259.822] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0259.823] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0259.823] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090779.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090779.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5b0)) returned 1 [0259.823] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0259.823] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0259.823] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0259.823] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14c2, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0090781.WMF", cAlternateFileName="")) returned 1 [0259.823] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0259.824] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0259.824] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0259.824] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0259.824] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0259.824] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0259.825] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090781.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090781.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0259.825] GetFileType (hFile=0x19c) returned 0x1 [0259.826] CloseHandle (hObject=0x19c) returned 1 [0259.826] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0259.826] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090781.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090781.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14c2)) returned 1 [0259.827] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0259.827] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0259.827] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090781.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090781.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14c2)) returned 1 [0259.827] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0259.827] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0259.827] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0259.827] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b16, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0090783.WMF", cAlternateFileName="")) returned 1 [0259.827] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0259.827] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0259.827] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0259.828] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0259.828] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0259.828] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0259.829] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090783.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090783.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0259.829] GetFileType (hFile=0x19c) returned 0x1 [0259.829] CloseHandle (hObject=0x19c) returned 1 [0259.830] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0259.830] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090783.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090783.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b16)) returned 1 [0259.830] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0259.830] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0259.830] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090783.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090783.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b16)) returned 1 [0259.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0259.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0259.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0259.980] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa442, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0093905.WMF", cAlternateFileName="")) returned 1 [0259.980] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0259.980] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0259.980] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0259.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0259.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0259.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0260.127] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0093905.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0093905.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0260.127] GetFileType (hFile=0x1c0) returned 0x1 [0260.128] CloseHandle (hObject=0x1c0) returned 1 [0260.129] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0260.129] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0093905.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0093905.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa442)) returned 1 [0260.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0260.129] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0260.129] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0093905.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0093905.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa442)) returned 1 [0260.130] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0260.130] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0260.130] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0260.130] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x136a, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0098497.WMF", cAlternateFileName="")) returned 1 [0260.130] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0260.130] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0260.130] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0260.131] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0260.131] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0260.131] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0260.132] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0098497.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0098497.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0260.132] GetFileType (hFile=0x1c0) returned 0x1 [0260.133] CloseHandle (hObject=0x1c0) returned 1 [0260.133] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0260.134] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0098497.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0098497.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x136a)) returned 1 [0260.134] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0260.134] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0260.134] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0098497.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0098497.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x136a)) returned 1 [0260.134] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0260.134] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0260.135] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0260.135] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x60b7, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0099145.JPG", cAlternateFileName="")) returned 1 [0260.135] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0260.135] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0260.135] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0260.135] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0260.135] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0260.136] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0260.136] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099145.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099145.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0260.137] GetFileType (hFile=0x1c0) returned 0x1 [0260.137] CloseHandle (hObject=0x1c0) returned 1 [0260.138] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0260.138] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099145.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099145.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x60b7)) returned 1 [0260.138] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0260.138] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0260.139] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099145.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099145.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x60b7)) returned 1 [0260.139] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0260.139] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0260.139] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0260.139] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x40d4, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0099146.WMF", cAlternateFileName="")) returned 1 [0260.139] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0260.139] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0260.140] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0260.140] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0260.140] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0260.140] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0260.141] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099146.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0260.141] GetFileType (hFile=0x1c0) returned 0x1 [0260.142] CloseHandle (hObject=0x1c0) returned 1 [0260.142] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0260.142] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099146.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x40d4)) returned 1 [0260.143] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0260.144] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0260.144] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099146.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x40d4)) returned 1 [0260.144] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0260.144] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0260.144] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0260.144] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5f39, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0099147.JPG", cAlternateFileName="")) returned 1 [0260.144] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0260.144] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0260.145] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0260.145] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0260.145] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0260.145] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0260.146] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099147.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099147.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0260.146] GetFileType (hFile=0x1c0) returned 0x1 [0260.146] CloseHandle (hObject=0x1c0) returned 1 [0260.147] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0260.147] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099147.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099147.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5f39)) returned 1 [0260.147] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0260.147] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0260.147] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099147.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099147.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5f39)) returned 1 [0260.147] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0260.147] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0260.147] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0260.148] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4752, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0099148.JPG", cAlternateFileName="")) returned 1 [0260.148] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0260.148] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0260.148] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0260.148] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0260.148] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0260.148] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0260.149] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099148.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099148.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0260.149] GetFileType (hFile=0x1c0) returned 0x1 [0260.149] CloseHandle (hObject=0x1c0) returned 1 [0260.150] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0260.150] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099148.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099148.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4752)) returned 1 [0260.150] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0260.150] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0260.150] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099148.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099148.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4752)) returned 1 [0260.150] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0260.150] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0260.150] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0260.150] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11dfe, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0099149.WMF", cAlternateFileName="")) returned 1 [0260.150] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0260.151] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0260.151] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0260.151] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0260.151] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0260.151] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0260.151] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099149.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099149.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0260.151] GetFileType (hFile=0x1c0) returned 0x1 [0260.152] CloseHandle (hObject=0x1c0) returned 1 [0260.152] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0260.152] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099149.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099149.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11dfe)) returned 1 [0260.152] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0260.152] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0260.152] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099149.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099149.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11dfe)) returned 1 [0260.152] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0260.153] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0260.153] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0260.153] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x559a, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0099150.JPG", cAlternateFileName="")) returned 1 [0260.155] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0260.155] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0260.155] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0260.155] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0260.155] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0260.155] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0260.156] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099150.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0260.161] GetFileType (hFile=0x1c0) returned 0x1 [0260.162] CloseHandle (hObject=0x1c0) returned 1 [0260.162] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0260.162] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099150.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x559a)) returned 1 [0260.162] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0260.163] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0260.163] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099150.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x559a)) returned 1 [0260.163] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0260.163] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0260.163] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0260.163] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x65e6, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0099151.WMF", cAlternateFileName="")) returned 1 [0260.163] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0260.163] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0260.164] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0260.164] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0260.164] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0260.164] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0260.165] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099151.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0260.165] GetFileType (hFile=0x1c0) returned 0x1 [0260.166] CloseHandle (hObject=0x1c0) returned 1 [0260.166] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0260.166] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099151.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x65e6)) returned 1 [0260.167] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0260.167] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0260.167] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099151.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x65e6)) returned 1 [0260.167] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0260.167] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0260.167] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0260.167] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2dae, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0099152.JPG", cAlternateFileName="")) returned 1 [0260.167] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0260.168] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0260.168] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0260.168] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0260.168] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0260.168] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0260.169] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099152.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0260.169] GetFileType (hFile=0x1c0) returned 0x1 [0260.170] CloseHandle (hObject=0x1c0) returned 1 [0260.170] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0260.171] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099152.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2dae)) returned 1 [0260.171] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0260.171] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0260.171] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099152.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2dae)) returned 1 [0260.171] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0260.171] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0260.171] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0260.171] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3632, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0099153.WMF", cAlternateFileName="")) returned 1 [0260.172] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0260.172] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0260.172] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0260.172] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0260.172] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0260.172] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0260.173] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099153.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0260.173] GetFileType (hFile=0x1c0) returned 0x1 [0260.514] CloseHandle (hObject=0x1c0) returned 1 [0260.516] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0260.516] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099153.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3632)) returned 1 [0260.517] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0260.517] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0260.517] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099153.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3632)) returned 1 [0260.517] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0260.517] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0260.517] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0260.517] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b11, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0099154.JPG", cAlternateFileName="")) returned 1 [0260.518] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0260.518] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0260.518] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0260.519] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0260.519] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0260.519] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0260.520] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099154.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0260.520] GetFileType (hFile=0x1c0) returned 0x1 [0260.520] CloseHandle (hObject=0x1c0) returned 1 [0260.521] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0260.521] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099154.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b11)) returned 1 [0260.521] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0260.521] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0260.522] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099154.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b11)) returned 1 [0260.522] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0260.522] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0260.522] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0260.522] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x227a, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0099155.JPG", cAlternateFileName="")) returned 1 [0260.522] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0260.522] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0260.522] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0260.523] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0260.523] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0260.523] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0260.524] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099155.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0260.524] GetFileType (hFile=0x1c0) returned 0x1 [0260.524] CloseHandle (hObject=0x1c0) returned 1 [0260.525] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0260.525] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099155.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x227a)) returned 1 [0260.525] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0260.525] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0260.526] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099155.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x227a)) returned 1 [0260.526] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0260.526] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0260.526] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0260.526] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3682, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0099156.JPG", cAlternateFileName="")) returned 1 [0260.526] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0260.527] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0260.527] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0260.527] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0260.527] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0260.527] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0260.528] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099156.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0260.528] GetFileType (hFile=0x1c0) returned 0x1 [0260.529] CloseHandle (hObject=0x1c0) returned 1 [0260.529] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0260.530] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099156.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3682)) returned 1 [0260.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0260.530] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0260.530] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099156.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3682)) returned 1 [0260.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0260.530] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0260.531] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0260.531] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x25c7, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0099157.JPG", cAlternateFileName="")) returned 1 [0260.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0260.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0260.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0260.531] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0260.531] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0260.532] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0260.533] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099157.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0260.533] GetFileType (hFile=0x1c0) returned 0x1 [0260.534] CloseHandle (hObject=0x1c0) returned 1 [0260.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0260.535] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099157.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x25c7)) returned 1 [0260.535] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0260.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0260.535] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099157.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x25c7)) returned 1 [0260.536] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0260.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0260.536] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0260.536] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6630, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0099158.WMF", cAlternateFileName="")) returned 1 [0260.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0260.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0260.537] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0260.537] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0260.537] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0260.537] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0260.538] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099158.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0260.538] GetFileType (hFile=0x1c0) returned 0x1 [0260.539] CloseHandle (hObject=0x1c0) returned 1 [0260.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0260.539] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099158.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6630)) returned 1 [0260.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0260.540] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0260.540] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099158.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6630)) returned 1 [0260.540] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0260.540] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0260.540] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0260.540] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6b9a, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0099159.WMF", cAlternateFileName="")) returned 1 [0260.540] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0260.541] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0260.541] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0260.541] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0260.541] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0260.541] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0260.542] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099159.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0260.542] GetFileType (hFile=0x1c0) returned 0x1 [0260.543] CloseHandle (hObject=0x1c0) returned 1 [0260.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0260.543] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099159.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6b9a)) returned 1 [0260.544] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0260.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0260.544] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099159.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6b9a)) returned 1 [0260.544] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0260.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0260.544] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0260.544] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b29, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0099160.JPG", cAlternateFileName="")) returned 1 [0260.545] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0260.545] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0260.545] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0260.545] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0260.545] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0260.545] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0260.546] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099160.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0260.547] GetFileType (hFile=0x1c0) returned 0x1 [0260.547] CloseHandle (hObject=0x1c0) returned 1 [0260.547] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0260.548] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099160.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b29)) returned 1 [0260.548] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0260.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0260.548] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099160.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b29)) returned 1 [0260.548] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0260.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0260.548] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0260.548] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bf2, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0099161.JPG", cAlternateFileName="")) returned 1 [0260.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0260.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0260.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0260.549] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0260.879] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0260.879] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0260.879] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099161.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0260.880] GetFileType (hFile=0x174) returned 0x1 [0260.880] CloseHandle (hObject=0x174) returned 1 [0260.881] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0260.881] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099161.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bf2)) returned 1 [0260.881] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0260.881] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0260.881] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099161.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bf2)) returned 1 [0260.881] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0260.882] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0260.882] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0260.882] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4cc8, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0099162.JPG", cAlternateFileName="")) returned 1 [0260.882] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0260.882] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0260.882] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0260.882] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0260.882] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0260.882] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0260.883] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099162.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0260.883] GetFileType (hFile=0x174) returned 0x1 [0260.884] CloseHandle (hObject=0x174) returned 1 [0260.884] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0260.884] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099162.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4cc8)) returned 1 [0260.885] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0260.885] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0260.885] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099162.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4cc8)) returned 1 [0260.885] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0260.885] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0260.885] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0260.885] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5754, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0099163.WMF", cAlternateFileName="")) returned 1 [0260.885] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0260.886] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0260.886] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0260.886] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0260.886] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0260.886] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0260.887] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099163.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0260.887] GetFileType (hFile=0x174) returned 0x1 [0260.887] CloseHandle (hObject=0x174) returned 1 [0260.888] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0260.888] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099163.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5754)) returned 1 [0260.888] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0260.888] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0260.888] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099163.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5754)) returned 1 [0260.888] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0260.888] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0260.888] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0260.889] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x55ba, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0099164.WMF", cAlternateFileName="")) returned 1 [0260.889] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0260.889] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0260.889] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0260.889] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0260.889] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0260.889] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0260.890] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099164.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0260.890] GetFileType (hFile=0x174) returned 0x1 [0260.890] CloseHandle (hObject=0x174) returned 1 [0260.891] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0260.891] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099164.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x55ba)) returned 1 [0260.891] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0260.891] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0260.891] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099164.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x55ba)) returned 1 [0260.891] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0260.891] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0260.892] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0260.892] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc53a, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0099165.JPG", cAlternateFileName="")) returned 1 [0260.892] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0260.892] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0260.892] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0260.892] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0260.892] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0260.892] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0260.893] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099165.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0260.893] GetFileType (hFile=0x174) returned 0x1 [0260.894] CloseHandle (hObject=0x174) returned 1 [0260.894] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0260.894] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099165.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc53a)) returned 1 [0260.894] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0260.894] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0260.894] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099165.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc53a)) returned 1 [0260.895] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0260.895] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0260.895] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0260.895] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfcff, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0099166.JPG", cAlternateFileName="")) returned 1 [0260.895] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0260.895] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0260.895] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0260.895] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0260.895] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0260.895] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0260.896] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099166.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0260.896] GetFileType (hFile=0x174) returned 0x1 [0260.896] CloseHandle (hObject=0x174) returned 1 [0260.896] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0260.897] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099166.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfcff)) returned 1 [0260.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0260.897] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0260.897] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099166.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfcff)) returned 1 [0260.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0260.897] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0260.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0260.897] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xabad, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0099167.JPG", cAlternateFileName="")) returned 1 [0260.897] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0260.897] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0260.897] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0260.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0260.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0260.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0260.898] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099167.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0260.898] GetFileType (hFile=0x174) returned 0x1 [0260.899] CloseHandle (hObject=0x174) returned 1 [0260.899] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0260.899] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099167.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xabad)) returned 1 [0260.899] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0260.899] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0260.899] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099167.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xabad)) returned 1 [0260.899] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0260.899] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0260.900] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0260.900] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ed3, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0099168.JPG", cAlternateFileName="")) returned 1 [0260.900] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0260.900] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0260.900] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0260.900] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0260.900] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0260.900] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0260.901] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099168.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0260.901] GetFileType (hFile=0x174) returned 0x1 [0260.901] CloseHandle (hObject=0x174) returned 1 [0260.902] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0260.902] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099168.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ed3)) returned 1 [0260.902] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0260.902] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0260.902] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099168.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ed3)) returned 1 [0260.902] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0260.902] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0260.902] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0260.903] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27d0, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0099169.WMF", cAlternateFileName="")) returned 1 [0260.903] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0260.903] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0260.903] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0260.903] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0260.903] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0260.903] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0260.904] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099169.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099169.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0260.904] GetFileType (hFile=0x174) returned 0x1 [0260.905] CloseHandle (hObject=0x174) returned 1 [0260.905] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0260.905] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099169.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099169.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27d0)) returned 1 [0260.905] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0260.905] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0260.906] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099169.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099169.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27d0)) returned 1 [0260.906] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0260.906] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0260.906] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0260.906] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5ee4, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0099170.WMF", cAlternateFileName="")) returned 1 [0260.906] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0260.906] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0260.906] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0260.907] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0260.907] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0260.907] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0260.907] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099170.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0260.908] GetFileType (hFile=0x174) returned 0x1 [0260.908] CloseHandle (hObject=0x174) returned 1 [0260.909] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0260.909] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099170.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5ee4)) returned 1 [0260.909] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0260.909] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0260.909] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099170.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5ee4)) returned 1 [0260.910] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0260.910] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0260.910] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0260.910] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2232, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0099171.WMF", cAlternateFileName="")) returned 1 [0260.910] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0260.910] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0260.910] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0260.910] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0260.911] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0260.911] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0260.911] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099171.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099171.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0260.912] GetFileType (hFile=0x174) returned 0x1 [0260.912] CloseHandle (hObject=0x174) returned 1 [0260.912] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0260.913] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099171.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099171.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2232)) returned 1 [0260.913] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0260.913] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0260.913] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099171.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099171.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2232)) returned 1 [0260.913] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0260.913] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0260.913] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0260.914] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe392, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0099172.WMF", cAlternateFileName="")) returned 1 [0260.914] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0260.914] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0260.914] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0260.914] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0260.914] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0260.914] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0260.915] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099172.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099172.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0260.915] GetFileType (hFile=0x174) returned 0x1 [0260.916] CloseHandle (hObject=0x174) returned 1 [0260.916] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0260.916] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099172.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099172.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe392)) returned 1 [0260.916] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0260.917] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0260.917] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099172.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099172.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe392)) returned 1 [0260.917] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0260.917] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0260.917] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0260.917] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9114, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0099173.WMF", cAlternateFileName="")) returned 1 [0260.917] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0260.917] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0260.917] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0260.918] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0260.918] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0260.918] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0260.918] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099173.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099173.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0260.919] GetFileType (hFile=0x174) returned 0x1 [0260.920] CloseHandle (hObject=0x174) returned 1 [0260.920] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0260.920] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099173.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099173.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9114)) returned 1 [0260.920] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0260.920] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0260.921] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099173.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099173.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9114)) returned 1 [0260.921] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0260.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0260.921] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0260.921] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1846, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0099174.WMF", cAlternateFileName="")) returned 1 [0260.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0260.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0260.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0260.921] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0260.921] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0260.922] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0260.922] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099174.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099174.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0260.923] GetFileType (hFile=0x174) returned 0x1 [0260.923] CloseHandle (hObject=0x174) returned 1 [0260.923] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0260.924] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099174.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099174.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1846)) returned 1 [0260.924] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0261.227] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0261.302] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099174.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099174.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1846)) returned 1 [0261.302] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0261.302] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0261.302] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0261.302] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2610, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0099175.WMF", cAlternateFileName="")) returned 1 [0261.303] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0261.303] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0261.303] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0261.303] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0261.303] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0261.303] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0261.566] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099175.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099175.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0261.566] GetFileType (hFile=0x1ac) returned 0x1 [0261.566] CloseHandle (hObject=0x1ac) returned 1 [0261.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0261.567] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099175.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099175.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2610)) returned 1 [0261.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0261.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0261.567] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099175.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099175.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2610)) returned 1 [0261.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0261.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0261.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0261.568] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9b8, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0099176.WMF", cAlternateFileName="")) returned 1 [0261.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0261.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0261.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0261.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0261.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0261.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0261.569] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099176.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099176.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0261.569] GetFileType (hFile=0x1ac) returned 0x1 [0261.569] CloseHandle (hObject=0x1ac) returned 1 [0261.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0261.570] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099176.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099176.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9b8)) returned 1 [0261.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0261.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0261.570] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099176.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099176.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9b8)) returned 1 [0261.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0261.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0261.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0261.570] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x150a, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0099177.WMF", cAlternateFileName="")) returned 1 [0261.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0261.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0261.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0261.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0261.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0261.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0261.571] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099177.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099177.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0261.572] GetFileType (hFile=0x1ac) returned 0x1 [0261.572] CloseHandle (hObject=0x1ac) returned 1 [0261.572] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0261.572] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099177.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099177.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x150a)) returned 1 [0261.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0261.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0261.573] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099177.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099177.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x150a)) returned 1 [0261.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0261.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0261.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0261.573] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe16, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0099178.WMF", cAlternateFileName="")) returned 1 [0261.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0261.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0261.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0261.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0261.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0261.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0261.574] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099178.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099178.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0261.574] GetFileType (hFile=0x1ac) returned 0x1 [0261.575] CloseHandle (hObject=0x1ac) returned 1 [0261.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0261.575] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099178.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099178.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe16)) returned 1 [0261.576] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0261.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0261.576] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099178.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099178.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe16)) returned 1 [0261.576] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0261.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0261.576] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0261.576] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x23c2, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0099179.WMF", cAlternateFileName="")) returned 1 [0261.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0261.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0261.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0261.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0261.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0261.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0261.578] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099179.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099179.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0261.578] GetFileType (hFile=0x1ac) returned 0x1 [0261.591] CloseHandle (hObject=0x1ac) returned 1 [0261.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0261.592] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099179.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099179.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x23c2)) returned 1 [0261.592] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0261.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0261.592] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099179.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099179.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x23c2)) returned 1 [0261.593] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0261.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0261.593] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0261.593] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd42, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0099180.WMF", cAlternateFileName="")) returned 1 [0261.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0261.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0261.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0261.593] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0261.593] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0261.593] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0261.594] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099180.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099180.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0261.594] GetFileType (hFile=0x1ac) returned 0x1 [0261.971] CloseHandle (hObject=0x1ac) returned 1 [0261.972] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0261.972] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099180.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099180.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd42)) returned 1 [0261.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0261.972] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0261.972] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099180.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099180.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd42)) returned 1 [0261.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0261.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0261.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0261.973] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ae, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0099181.WMF", cAlternateFileName="")) returned 1 [0261.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0261.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0261.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0261.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0261.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0261.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0261.974] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099181.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099181.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0261.974] GetFileType (hFile=0x1ac) returned 0x1 [0261.974] CloseHandle (hObject=0x1ac) returned 1 [0261.975] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0261.975] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099181.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099181.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ae)) returned 1 [0261.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0261.975] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0261.975] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099181.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099181.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ae)) returned 1 [0261.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0261.975] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0261.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0261.975] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf00, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0099182.WMF", cAlternateFileName="")) returned 1 [0261.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0261.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0261.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0261.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0261.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0261.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0261.976] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099182.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099182.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0261.977] GetFileType (hFile=0x1ac) returned 0x1 [0261.977] CloseHandle (hObject=0x1ac) returned 1 [0261.977] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0261.978] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099182.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099182.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf00)) returned 1 [0261.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0261.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0261.978] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099182.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099182.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf00)) returned 1 [0261.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0261.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0261.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0261.978] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1352, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0099183.WMF", cAlternateFileName="")) returned 1 [0261.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0261.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0261.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0261.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0261.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0261.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0261.980] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099183.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099183.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0261.980] GetFileType (hFile=0x1ac) returned 0x1 [0261.981] CloseHandle (hObject=0x1ac) returned 1 [0261.981] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0261.981] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099183.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099183.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1352)) returned 1 [0261.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0261.981] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0261.982] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099183.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099183.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1352)) returned 1 [0261.982] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0261.982] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0261.982] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0261.982] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1016, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0099184.WMF", cAlternateFileName="")) returned 1 [0261.982] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0261.982] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0261.982] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0261.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0261.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0261.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0261.983] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099184.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099184.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0261.984] GetFileType (hFile=0x1ac) returned 0x1 [0261.984] CloseHandle (hObject=0x1ac) returned 1 [0261.984] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0261.984] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099184.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099184.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1016)) returned 1 [0261.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0261.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0261.985] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099184.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099184.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1016)) returned 1 [0261.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0261.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0261.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0261.985] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe56c811, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe56c811, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcd2, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0099185.JPG", cAlternateFileName="")) returned 1 [0261.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0261.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0261.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0261.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0261.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0261.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0261.986] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099185.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099185.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0261.986] GetFileType (hFile=0x1ac) returned 0x1 [0261.988] CloseHandle (hObject=0x1ac) returned 1 [0261.989] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0261.989] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099185.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099185.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe56c811, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe56c811, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcd2)) returned 1 [0261.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0261.989] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0261.989] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099185.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099185.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe56c811, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe56c811, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcd2)) returned 1 [0261.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0261.989] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0261.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0261.990] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe56c811, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe56c811, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe56c811, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4162, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0099186.JPG", cAlternateFileName="")) returned 1 [0261.990] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0261.990] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0261.990] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0261.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0261.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0261.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0261.990] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099186.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099186.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0261.991] GetFileType (hFile=0x1ac) returned 0x1 [0261.991] CloseHandle (hObject=0x1ac) returned 1 [0261.991] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0261.991] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099186.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099186.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe56c811, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe56c811, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe56c811, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4162)) returned 1 [0261.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0261.992] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0261.992] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099186.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099186.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe56c811, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe56c811, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe56c811, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4162)) returned 1 [0261.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0261.992] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0261.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0261.992] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe18c9a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe18c9a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe56c811, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5fd0, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0099187.JPG", cAlternateFileName="")) returned 1 [0261.992] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0261.992] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0261.992] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0261.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0261.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0261.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0261.993] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099187.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099187.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0261.993] GetFileType (hFile=0x1ac) returned 0x1 [0261.993] CloseHandle (hObject=0x1ac) returned 1 [0261.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0261.993] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099187.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099187.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe18c9a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe18c9a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe56c811, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5fd0)) returned 1 [0261.994] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0261.994] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0261.994] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099187.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099187.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe18c9a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe18c9a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe56c811, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5fd0)) returned 1 [0261.994] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0261.994] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0261.994] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0261.994] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe18c9a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe18c9a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe56c811, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2378, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0099188.JPG", cAlternateFileName="")) returned 1 [0261.994] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0261.994] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0261.994] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0261.994] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0261.994] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0261.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0261.995] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099188.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099188.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0261.995] GetFileType (hFile=0x1ac) returned 0x1 [0261.995] CloseHandle (hObject=0x1ac) returned 1 [0261.996] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0261.996] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099188.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099188.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe18c9a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe18c9a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe56c811, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2378)) returned 1 [0261.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0261.996] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0261.996] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099188.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099188.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe18c9a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe18c9a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe56c811, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2378)) returned 1 [0261.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0261.996] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0261.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0261.996] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe18c9a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f8c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0099189.JPG", cAlternateFileName="")) returned 1 [0261.996] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0261.997] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0261.997] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0261.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0261.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0261.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0261.997] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099189.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099189.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0261.997] GetFileType (hFile=0x1ac) returned 0x1 [0261.998] CloseHandle (hObject=0x1ac) returned 1 [0261.998] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0261.998] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099189.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099189.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe18c9a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f8c)) returned 1 [0261.998] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0261.998] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0261.998] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099189.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099189.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe18c9a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f8c)) returned 1 [0261.998] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0261.998] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0261.998] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0261.998] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xab74, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0099190.JPG", cAlternateFileName="")) returned 1 [0261.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0261.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0261.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0261.999] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0261.999] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0261.999] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0261.999] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099190.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099190.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0261.999] GetFileType (hFile=0x1ac) returned 0x1 [0262.000] CloseHandle (hObject=0x1ac) returned 1 [0262.000] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0262.000] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099190.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099190.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xab74)) returned 1 [0262.000] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0262.000] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0262.000] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099190.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099190.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xab74)) returned 1 [0262.000] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0262.000] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0262.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0262.001] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe56c811, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf39f, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0099191.JPG", cAlternateFileName="")) returned 1 [0262.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0262.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0262.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0262.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0262.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0262.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0262.002] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099191.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099191.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0262.002] GetFileType (hFile=0x1ac) returned 0x1 [0262.002] CloseHandle (hObject=0x1ac) returned 1 [0262.003] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0262.003] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099191.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099191.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe56c811, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf39f)) returned 1 [0262.004] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0262.004] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0262.004] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099191.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099191.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe56c811, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf39f)) returned 1 [0262.004] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0262.004] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0262.004] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0262.004] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe56c811, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x462c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0099192.GIF", cAlternateFileName="")) returned 1 [0262.004] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0262.004] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0262.004] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0262.005] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0262.005] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0262.005] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0262.005] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099192.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099192.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0262.006] GetFileType (hFile=0x1ac) returned 0x1 [0262.006] CloseHandle (hObject=0x1ac) returned 1 [0262.006] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0262.007] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099192.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099192.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe56c811, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x462c)) returned 1 [0262.007] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0262.007] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0262.007] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099192.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099192.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe56c811, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x462c)) returned 1 [0262.007] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0262.007] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0262.007] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0262.007] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8ada, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0099193.GIF", cAlternateFileName="")) returned 1 [0262.008] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0262.008] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0262.008] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0262.008] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0262.008] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0262.008] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0262.009] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099193.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099193.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0262.009] GetFileType (hFile=0x1ac) returned 0x1 [0262.010] CloseHandle (hObject=0x1ac) returned 1 [0262.010] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0262.010] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099193.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099193.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8ada)) returned 1 [0262.010] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0262.010] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0262.011] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099193.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099193.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8ada)) returned 1 [0262.011] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0262.011] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0262.011] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0262.011] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe18c9a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x62b1, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0099194.GIF", cAlternateFileName="")) returned 1 [0262.011] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0262.011] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0262.011] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0262.011] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0262.012] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0262.012] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0262.012] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099194.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099194.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0262.013] GetFileType (hFile=0x1ac) returned 0x1 [0262.013] CloseHandle (hObject=0x1ac) returned 1 [0262.013] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0262.013] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099194.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099194.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe18c9a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x62b1)) returned 1 [0262.014] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0262.014] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0262.014] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099194.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099194.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe18c9a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x62b1)) returned 1 [0262.014] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0262.014] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0262.014] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0262.014] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4dd3, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0099195.GIF", cAlternateFileName="")) returned 1 [0262.014] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0262.014] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0262.015] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0262.015] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0262.015] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0262.015] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0262.015] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099195.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099195.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0262.016] GetFileType (hFile=0x1ac) returned 0x1 [0262.016] CloseHandle (hObject=0x1ac) returned 1 [0262.016] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0262.016] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099195.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099195.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4dd3)) returned 1 [0262.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0262.017] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0262.017] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099195.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099195.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4dd3)) returned 1 [0262.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0262.017] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0262.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0262.017] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3801, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0099196.GIF", cAlternateFileName="")) returned 1 [0262.017] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0262.017] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0262.017] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0262.425] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0262.425] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0262.425] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0262.425] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099196.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099196.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0262.426] GetFileType (hFile=0x198) returned 0x1 [0262.426] CloseHandle (hObject=0x198) returned 1 [0262.426] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0262.427] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099196.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099196.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3801)) returned 1 [0262.427] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0262.427] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0262.427] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099196.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099196.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3801)) returned 1 [0262.427] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0262.427] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0262.427] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0262.427] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a92, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0099197.GIF", cAlternateFileName="")) returned 1 [0262.427] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0262.428] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0262.428] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0262.428] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0262.428] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0262.428] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0262.428] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099197.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099197.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0262.429] GetFileType (hFile=0x198) returned 0x1 [0262.429] CloseHandle (hObject=0x198) returned 1 [0262.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0262.429] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099197.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099197.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a92)) returned 1 [0262.430] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0262.430] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0262.430] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099197.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099197.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a92)) returned 1 [0262.430] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0262.430] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0262.430] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0262.430] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x148b, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0099198.GIF", cAlternateFileName="")) returned 1 [0262.430] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0262.430] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0262.431] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0262.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0262.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0262.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0262.431] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099198.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099198.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0262.431] GetFileType (hFile=0x198) returned 0x1 [0262.432] CloseHandle (hObject=0x198) returned 1 [0262.432] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0262.432] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099198.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099198.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x148b)) returned 1 [0262.432] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0262.432] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0262.432] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099198.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099198.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x148b)) returned 1 [0262.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0262.433] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0262.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0262.433] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x84b7, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0099199.GIF", cAlternateFileName="")) returned 1 [0262.433] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0262.433] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0262.433] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0262.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0262.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0262.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0262.434] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099199.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099199.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0262.434] GetFileType (hFile=0x198) returned 0x1 [0262.434] CloseHandle (hObject=0x198) returned 1 [0262.435] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0262.435] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099199.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099199.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x84b7)) returned 1 [0262.435] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0262.435] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0262.435] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099199.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099199.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x84b7)) returned 1 [0262.435] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0262.435] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0262.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0262.436] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe56c811, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe56c811, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x409f, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0099200.GIF", cAlternateFileName="")) returned 1 [0262.436] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0262.436] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0262.436] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0262.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0262.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0262.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0262.437] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099200.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099200.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0262.437] GetFileType (hFile=0x198) returned 0x1 [0262.437] CloseHandle (hObject=0x198) returned 1 [0262.437] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0262.437] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099200.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099200.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe56c811, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe56c811, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x409f)) returned 1 [0262.438] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0262.438] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0262.438] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099200.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099200.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe56c811, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe56c811, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x409f)) returned 1 [0262.438] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0262.438] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0262.438] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0262.438] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc8c9, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0099201.GIF", cAlternateFileName="")) returned 1 [0262.438] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0262.438] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0262.438] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0262.438] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0262.439] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0262.439] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0262.439] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099201.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099201.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0262.439] GetFileType (hFile=0x198) returned 0x1 [0262.440] CloseHandle (hObject=0x198) returned 1 [0262.441] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0262.441] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099201.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099201.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc8c9)) returned 1 [0262.441] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0262.441] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0262.441] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099201.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099201.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc8c9)) returned 1 [0262.441] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0262.441] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0262.442] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0262.442] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1367, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0099202.GIF", cAlternateFileName="")) returned 1 [0262.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0262.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0262.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0262.442] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0262.442] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0262.442] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0262.443] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099202.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099202.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0262.443] GetFileType (hFile=0x198) returned 0x1 [0262.443] CloseHandle (hObject=0x198) returned 1 [0262.444] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0262.444] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099202.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099202.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1367)) returned 1 [0262.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0262.444] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0262.444] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099202.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099202.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1367)) returned 1 [0262.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0262.444] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0262.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0262.445] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe56c811, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe56c811, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf40, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0099203.GIF", cAlternateFileName="")) returned 1 [0262.445] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0262.445] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0262.445] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0262.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0262.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0262.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0262.446] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099203.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099203.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0262.446] GetFileType (hFile=0x198) returned 0x1 [0262.447] CloseHandle (hObject=0x198) returned 1 [0262.447] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0262.447] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099203.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099203.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe56c811, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe56c811, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf40)) returned 1 [0262.447] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0262.447] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0262.448] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099203.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099203.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe56c811, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe56c811, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf40)) returned 1 [0262.448] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0262.448] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0262.448] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0262.448] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe56c811, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe56c811, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45be, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0099204.WMF", cAlternateFileName="")) returned 1 [0262.448] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0262.448] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0262.448] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0262.448] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0262.449] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0262.449] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0262.449] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099204.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099204.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0262.473] GetFileType (hFile=0x198) returned 0x1 [0262.473] CloseHandle (hObject=0x198) returned 1 [0262.475] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0262.475] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099204.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099204.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe56c811, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe56c811, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45be)) returned 1 [0262.476] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0262.476] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0262.476] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099204.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099204.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe56c811, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe56c811, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45be)) returned 1 [0262.476] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0262.476] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0262.476] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0262.476] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45be, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0099205.WMF", cAlternateFileName="")) returned 1 [0262.477] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0262.477] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0262.477] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0262.477] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0262.477] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0262.477] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0262.477] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099205.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099205.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0262.554] GetFileType (hFile=0x174) returned 0x1 [0262.555] CloseHandle (hObject=0x174) returned 1 [0262.555] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0262.555] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099205.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099205.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45be)) returned 1 [0262.556] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0262.556] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0262.556] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099205.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099205.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45be)) returned 1 [0262.556] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0262.556] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0262.556] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0262.556] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x133f8, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0101856.BMP", cAlternateFileName="")) returned 1 [0262.557] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0262.557] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0262.557] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0262.557] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0262.557] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0262.557] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0262.558] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101856.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101856.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0262.558] GetFileType (hFile=0x174) returned 0x1 [0262.558] CloseHandle (hObject=0x174) returned 1 [0262.559] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0262.559] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101856.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101856.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x133f8)) returned 1 [0262.559] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0262.559] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0262.559] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101856.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101856.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x133f8)) returned 1 [0262.559] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0262.559] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0262.560] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0262.560] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0101857.BMP", cAlternateFileName="")) returned 1 [0262.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0262.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0262.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0262.560] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0262.560] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0262.560] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0262.561] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101857.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101857.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0262.561] GetFileType (hFile=0x174) returned 0x1 [0262.561] CloseHandle (hObject=0x174) returned 1 [0262.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0262.562] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101857.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101857.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8)) returned 1 [0262.562] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0262.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0262.562] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101857.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101857.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8)) returned 1 [0262.562] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0262.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0262.562] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0262.562] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0101858.BMP", cAlternateFileName="")) returned 1 [0262.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0262.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0262.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0262.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0262.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0262.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0262.563] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101858.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101858.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0262.563] GetFileType (hFile=0x174) returned 0x1 [0262.564] CloseHandle (hObject=0x174) returned 1 [0262.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0262.564] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101858.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101858.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8)) returned 1 [0262.564] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0262.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0262.564] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101858.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101858.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8)) returned 1 [0262.564] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0262.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0262.565] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0262.565] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0101859.BMP", cAlternateFileName="")) returned 1 [0262.565] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0262.565] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0262.565] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0262.565] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0262.565] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0262.565] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0262.566] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101859.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101859.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0262.566] GetFileType (hFile=0x174) returned 0x1 [0262.566] CloseHandle (hObject=0x174) returned 1 [0262.566] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0262.567] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101859.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101859.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0)) returned 1 [0262.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0262.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0262.567] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101859.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101859.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0)) returned 1 [0262.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0262.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0262.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0262.567] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0101860.BMP", cAlternateFileName="")) returned 1 [0262.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0262.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0262.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0262.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0262.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0262.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0262.568] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101860.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101860.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0262.568] GetFileType (hFile=0x174) returned 0x1 [0262.569] CloseHandle (hObject=0x174) returned 1 [0262.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0262.569] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101860.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101860.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8)) returned 1 [0262.569] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0262.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0262.569] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101860.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101860.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8)) returned 1 [0262.569] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0262.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0262.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0262.570] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0101861.BMP", cAlternateFileName="")) returned 1 [0262.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0262.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0262.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0262.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0262.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0262.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0262.570] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101861.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101861.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0262.571] GetFileType (hFile=0x174) returned 0x1 [0262.571] CloseHandle (hObject=0x174) returned 1 [0262.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0262.572] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101861.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101861.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8)) returned 1 [0262.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0262.572] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0262.572] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101861.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101861.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8)) returned 1 [0262.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0262.572] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0262.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0262.572] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0101862.BMP", cAlternateFileName="")) returned 1 [0262.572] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0262.572] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0262.572] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0262.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0262.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0262.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0262.573] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101862.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101862.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0262.573] GetFileType (hFile=0x174) returned 0x1 [0262.574] CloseHandle (hObject=0x174) returned 1 [0262.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0262.574] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101862.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101862.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8)) returned 1 [0262.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0262.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0262.574] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101862.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101862.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8)) returned 1 [0262.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0262.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0262.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0262.575] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0101863.BMP", cAlternateFileName="")) returned 1 [0262.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0262.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0262.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0262.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0262.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0262.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0262.576] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101863.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101863.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0262.576] GetFileType (hFile=0x174) returned 0x1 [0262.576] CloseHandle (hObject=0x174) returned 1 [0262.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0262.577] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101863.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101863.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8)) returned 1 [0262.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0262.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0262.577] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101863.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101863.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8)) returned 1 [0262.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0262.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0262.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0262.577] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0101864.BMP", cAlternateFileName="")) returned 1 [0262.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0262.578] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0262.578] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0262.578] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0262.578] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0262.578] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0262.578] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101864.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101864.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0262.579] GetFileType (hFile=0x174) returned 0x1 [0262.579] CloseHandle (hObject=0x174) returned 1 [0262.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0262.579] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101864.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101864.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0)) returned 1 [0262.579] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0262.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0262.580] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101864.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101864.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0)) returned 1 [0262.580] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0262.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0262.580] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0262.580] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0101865.BMP", cAlternateFileName="")) returned 1 [0262.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0262.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0262.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0262.581] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0262.581] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0262.606] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0262.619] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101865.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101865.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0262.620] GetFileType (hFile=0x174) returned 0x1 [0262.621] CloseHandle (hObject=0x174) returned 1 [0262.621] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0262.621] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101865.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101865.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8)) returned 1 [0262.622] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0262.622] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0262.622] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101865.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101865.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8)) returned 1 [0262.622] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0262.622] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0262.622] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0262.623] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0101866.BMP", cAlternateFileName="")) returned 1 [0262.623] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0262.623] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0262.623] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0262.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0262.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0262.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0262.624] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101866.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101866.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0262.625] GetFileType (hFile=0x174) returned 0x1 [0262.625] CloseHandle (hObject=0x174) returned 1 [0263.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0263.089] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101866.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101866.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8)) returned 1 [0263.089] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0263.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0263.090] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101866.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101866.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8)) returned 1 [0263.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0263.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0263.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0263.139] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7f68, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0101867.BMP", cAlternateFileName="")) returned 1 [0263.139] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0263.139] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0263.140] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0263.140] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0263.140] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0263.141] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0263.142] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101867.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101867.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0263.142] GetFileType (hFile=0x198) returned 0x1 [0263.144] CloseHandle (hObject=0x198) returned 1 [0263.144] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0263.144] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101867.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101867.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7f68)) returned 1 [0263.145] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0263.145] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0263.145] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101867.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101867.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7f68)) returned 1 [0263.145] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0263.145] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0263.146] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0263.147] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ee8, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0101980.WMF", cAlternateFileName="")) returned 1 [0263.645] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0263.645] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0263.645] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0263.645] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0263.645] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0263.646] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0263.646] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101980.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101980.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0263.647] GetFileType (hFile=0x1ac) returned 0x1 [0263.647] CloseHandle (hObject=0x1ac) returned 1 [0263.647] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0263.647] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101980.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101980.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ee8)) returned 1 [0263.648] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0263.648] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0263.648] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101980.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101980.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ee8)) returned 1 [0263.648] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0263.648] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0263.648] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0263.648] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3e74, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0102002.WMF", cAlternateFileName="")) returned 1 [0263.648] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0263.649] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0263.649] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0263.649] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0263.649] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0263.649] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0263.650] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102002.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102002.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0263.650] GetFileType (hFile=0x1ac) returned 0x1 [0263.650] CloseHandle (hObject=0x1ac) returned 1 [0263.651] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0263.651] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102002.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102002.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3e74)) returned 1 [0263.651] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0263.651] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0263.651] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102002.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102002.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3e74)) returned 1 [0263.651] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0263.651] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0263.652] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0263.652] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6978, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0102594.WMF", cAlternateFileName="")) returned 1 [0263.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0263.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0263.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0263.652] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0263.652] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0263.652] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0263.653] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102594.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102594.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0263.653] GetFileType (hFile=0x1ac) returned 0x1 [0263.653] CloseHandle (hObject=0x1ac) returned 1 [0263.653] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0263.654] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102594.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102594.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6978)) returned 1 [0263.654] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0263.654] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0263.654] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102594.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102594.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6978)) returned 1 [0263.654] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0263.654] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0263.654] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0263.654] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2bd0, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0102762.WMF", cAlternateFileName="")) returned 1 [0263.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0263.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0263.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0263.655] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0263.655] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0263.655] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0263.655] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102762.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102762.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0263.656] GetFileType (hFile=0x1ac) returned 0x1 [0263.656] CloseHandle (hObject=0x1ac) returned 1 [0263.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0263.656] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102762.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102762.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2bd0)) returned 1 [0263.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0263.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0263.657] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102762.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102762.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2bd0)) returned 1 [0263.657] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0263.657] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0263.657] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0263.657] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4290, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0102984.WMF", cAlternateFileName="")) returned 1 [0263.657] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0263.657] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0263.657] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0263.657] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0263.657] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0263.657] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0263.658] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102984.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102984.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0263.658] GetFileType (hFile=0x1ac) returned 0x1 [0263.659] CloseHandle (hObject=0x1ac) returned 1 [0263.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0263.659] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102984.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102984.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4290)) returned 1 [0263.659] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0263.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0263.659] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102984.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102984.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4290)) returned 1 [0263.659] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0263.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0263.660] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0263.661] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43c0, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0103058.WMF", cAlternateFileName="")) returned 1 [0263.661] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0263.661] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0263.661] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0263.661] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0263.661] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0263.661] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0263.662] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103058.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103058.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0263.662] GetFileType (hFile=0x1ac) returned 0x1 [0263.662] CloseHandle (hObject=0x1ac) returned 1 [0263.663] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0263.663] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103058.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103058.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43c0)) returned 1 [0263.663] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0263.663] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0263.663] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103058.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103058.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43c0)) returned 1 [0263.663] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0263.663] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0263.663] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0263.663] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3264, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0103262.WMF", cAlternateFileName="")) returned 1 [0263.663] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0263.663] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0263.663] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0263.664] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0263.664] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0263.664] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0263.664] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103262.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103262.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0263.664] GetFileType (hFile=0x1ac) returned 0x1 [0263.665] CloseHandle (hObject=0x1ac) returned 1 [0263.665] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0263.665] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103262.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103262.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3264)) returned 1 [0263.665] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0263.665] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0263.665] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103262.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103262.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3264)) returned 1 [0263.665] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0263.666] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0263.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0263.666] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaf94, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0103402.WMF", cAlternateFileName="")) returned 1 [0263.666] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0263.666] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0263.666] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0263.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0263.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0263.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0263.666] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103402.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103402.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0263.669] GetFileType (hFile=0x1ac) returned 0x1 [0263.669] CloseHandle (hObject=0x1ac) returned 1 [0263.670] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0263.670] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103402.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103402.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaf94)) returned 1 [0263.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0263.675] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0263.675] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103402.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103402.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaf94)) returned 1 [0263.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0263.675] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0263.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0263.675] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1714, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0103812.WMF", cAlternateFileName="")) returned 1 [0263.675] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0263.675] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0263.676] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0263.676] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0263.676] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0263.676] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0263.677] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103812.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103812.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0263.677] GetFileType (hFile=0x1ac) returned 0x1 [0263.677] CloseHandle (hObject=0x1ac) returned 1 [0263.678] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0263.678] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103812.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103812.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1714)) returned 1 [0263.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0263.678] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0263.678] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103812.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103812.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1714)) returned 1 [0263.679] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0263.679] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0263.679] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0263.679] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5c2c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0103850.WMF", cAlternateFileName="")) returned 1 [0263.679] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0263.679] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0263.679] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0263.679] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0263.679] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0263.679] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0263.680] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103850.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103850.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0263.681] GetFileType (hFile=0x1ac) returned 0x1 [0263.681] CloseHandle (hObject=0x1ac) returned 1 [0263.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0263.683] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103850.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103850.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5c2c)) returned 1 [0263.683] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0263.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0263.683] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103850.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103850.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5c2c)) returned 1 [0263.692] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0263.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0263.692] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0263.693] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1434, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0105230.WMF", cAlternateFileName="")) returned 1 [0263.693] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0263.693] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0263.693] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0263.693] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0263.693] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0263.693] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0263.694] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105230.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105230.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0263.694] GetFileType (hFile=0x1ac) returned 0x1 [0263.695] CloseHandle (hObject=0x1ac) returned 1 [0263.695] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0263.695] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105230.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105230.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1434)) returned 1 [0263.696] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0263.696] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0263.696] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105230.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105230.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1434)) returned 1 [0263.696] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0263.696] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0263.696] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0263.697] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0105232.WMF", cAlternateFileName="")) returned 1 [0263.697] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0263.697] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0263.697] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0263.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0263.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0263.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0263.698] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105232.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105232.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0263.698] GetFileType (hFile=0x1ac) returned 0x1 [0263.699] CloseHandle (hObject=0x1ac) returned 1 [0263.699] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0263.700] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105232.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105232.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1600)) returned 1 [0263.700] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0263.700] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0263.700] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105232.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105232.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1600)) returned 1 [0263.700] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0263.700] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0263.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0263.701] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd74, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0105234.WMF", cAlternateFileName="")) returned 1 [0263.701] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0263.701] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0263.701] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0263.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0263.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0263.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0263.702] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105234.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105234.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0264.048] GetFileType (hFile=0x198) returned 0x1 [0264.049] CloseHandle (hObject=0x198) returned 1 [0264.049] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0264.049] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105234.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105234.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd74)) returned 1 [0264.050] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0264.050] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0264.079] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105234.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105234.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd74)) returned 1 [0264.079] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0264.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0264.080] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0264.080] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4314, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0105238.WMF", cAlternateFileName="")) returned 1 [0264.080] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0264.080] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0264.080] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0264.080] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0264.081] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0264.082] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0264.083] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105238.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105238.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0264.083] GetFileType (hFile=0x198) returned 0x1 [0264.084] CloseHandle (hObject=0x198) returned 1 [0264.084] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0264.084] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105238.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105238.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4314)) returned 1 [0264.085] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0264.085] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0264.085] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105238.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105238.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4314)) returned 1 [0264.085] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0264.085] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0264.085] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0264.086] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d0c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0105240.WMF", cAlternateFileName="")) returned 1 [0264.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0264.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0264.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0264.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0264.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0264.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0264.087] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105240.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105240.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0264.088] GetFileType (hFile=0x198) returned 0x1 [0264.088] CloseHandle (hObject=0x198) returned 1 [0264.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0264.089] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105240.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105240.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d0c)) returned 1 [0264.089] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0264.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0264.089] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105240.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105240.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d0c)) returned 1 [0264.089] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0264.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0264.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0264.090] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2bdc, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0105244.WMF", cAlternateFileName="")) returned 1 [0264.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0264.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0264.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0264.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0264.091] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0264.091] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0264.092] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105244.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105244.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0264.092] GetFileType (hFile=0x198) returned 0x1 [0264.093] CloseHandle (hObject=0x198) returned 1 [0264.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0264.094] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105244.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105244.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2bdc)) returned 1 [0264.094] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0264.094] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0264.094] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105244.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105244.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2bdc)) returned 1 [0264.094] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0264.094] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0264.094] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0264.094] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b80, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0105246.WMF", cAlternateFileName="")) returned 1 [0264.095] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0264.095] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0264.095] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0264.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0264.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0264.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0264.096] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105246.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105246.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0264.096] GetFileType (hFile=0x198) returned 0x1 [0264.097] CloseHandle (hObject=0x198) returned 1 [0264.097] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0264.097] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105246.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105246.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b80)) returned 1 [0264.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0264.098] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0264.098] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105246.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105246.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b80)) returned 1 [0264.099] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0264.099] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0264.099] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0264.099] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1214, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0105250.WMF", cAlternateFileName="")) returned 1 [0264.099] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0264.099] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0264.099] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0264.099] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0264.100] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0264.100] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0264.100] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105250.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105250.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0264.101] GetFileType (hFile=0x198) returned 0x1 [0264.101] CloseHandle (hObject=0x198) returned 1 [0264.102] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0264.102] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105250.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105250.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1214)) returned 1 [0264.102] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0264.102] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0264.102] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105250.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105250.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1214)) returned 1 [0264.102] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0264.102] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0264.103] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0264.103] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1714, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0105266.WMF", cAlternateFileName="")) returned 1 [0264.103] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0264.103] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0264.103] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0264.103] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0264.103] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0264.103] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0264.104] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105266.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105266.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0264.104] GetFileType (hFile=0x198) returned 0x1 [0264.105] CloseHandle (hObject=0x198) returned 1 [0264.105] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0264.105] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105266.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105266.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1714)) returned 1 [0264.105] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0264.105] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0264.105] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105266.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105266.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1714)) returned 1 [0264.106] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0264.106] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0264.106] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0264.106] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4540, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0105272.WMF", cAlternateFileName="")) returned 1 [0264.106] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0264.106] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0264.106] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0264.106] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0264.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0264.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0264.107] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105272.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105272.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0264.108] GetFileType (hFile=0x198) returned 0x1 [0264.108] CloseHandle (hObject=0x198) returned 1 [0264.108] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0264.109] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105272.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105272.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4540)) returned 1 [0264.109] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0264.109] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0264.109] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105272.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105272.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4540)) returned 1 [0264.109] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0264.109] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0264.109] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0264.109] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b28, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0105276.WMF", cAlternateFileName="")) returned 1 [0264.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0264.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0264.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0264.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0264.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0264.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0264.111] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105276.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105276.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0264.111] GetFileType (hFile=0x198) returned 0x1 [0264.111] CloseHandle (hObject=0x198) returned 1 [0264.112] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0264.112] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105276.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105276.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b28)) returned 1 [0264.112] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0264.112] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0264.112] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105276.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105276.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b28)) returned 1 [0264.112] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0264.112] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0264.112] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0264.113] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d14, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0105280.WMF", cAlternateFileName="")) returned 1 [0264.113] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0264.447] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0264.448] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0264.448] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0264.448] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0264.448] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0265.043] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105280.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105280.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0265.043] GetFileType (hFile=0x1e8) returned 0x1 [0265.044] CloseHandle (hObject=0x1e8) returned 1 [0265.044] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0265.044] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105280.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105280.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d14)) returned 1 [0265.045] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0265.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0265.045] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105280.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105280.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d14)) returned 1 [0265.045] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0265.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0265.045] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0265.046] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12bc, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0105282.WMF", cAlternateFileName="")) returned 1 [0265.046] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0265.046] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0265.046] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0265.046] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0265.046] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0265.046] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0265.047] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105282.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105282.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0265.047] GetFileType (hFile=0x1e8) returned 0x1 [0265.048] CloseHandle (hObject=0x1e8) returned 1 [0265.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0265.048] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105282.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105282.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12bc)) returned 1 [0265.049] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0265.049] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0265.049] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105282.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105282.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12bc)) returned 1 [0265.049] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0265.049] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0265.049] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0265.049] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19a8, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0105286.WMF", cAlternateFileName="")) returned 1 [0265.049] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0265.049] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0265.050] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0265.050] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0265.050] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0265.050] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0265.051] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105286.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105286.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0265.054] GetFileType (hFile=0x1e8) returned 0x1 [0265.054] CloseHandle (hObject=0x1e8) returned 1 [0265.055] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0265.055] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105286.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105286.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19a8)) returned 1 [0265.063] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0265.063] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0265.063] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105286.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105286.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19a8)) returned 1 [0265.063] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0265.063] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0265.064] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0265.064] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3dd8, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0105288.WMF", cAlternateFileName="")) returned 1 [0265.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0265.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0265.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0265.064] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0265.064] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0265.064] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0265.065] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105288.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105288.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0265.065] GetFileType (hFile=0x1e8) returned 0x1 [0265.067] CloseHandle (hObject=0x1e8) returned 1 [0265.067] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0265.067] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105288.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105288.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3dd8)) returned 1 [0265.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0265.067] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0265.067] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105288.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105288.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3dd8)) returned 1 [0265.068] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0265.068] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0265.068] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0265.068] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a14, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0105292.WMF", cAlternateFileName="")) returned 1 [0265.068] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0265.068] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0265.068] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0265.068] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0265.068] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0265.069] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0265.069] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105292.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105292.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0265.069] GetFileType (hFile=0x1e8) returned 0x1 [0265.070] CloseHandle (hObject=0x1e8) returned 1 [0265.070] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0265.070] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105292.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105292.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a14)) returned 1 [0265.070] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0265.070] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0265.071] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105292.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105292.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a14)) returned 1 [0265.071] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0265.071] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0265.071] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0265.071] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1580, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0105294.WMF", cAlternateFileName="")) returned 1 [0265.071] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0265.071] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0265.071] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0265.071] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0265.071] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0265.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0265.072] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105294.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105294.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0265.072] GetFileType (hFile=0x1e8) returned 0x1 [0265.073] CloseHandle (hObject=0x1e8) returned 1 [0265.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0265.073] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105294.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105294.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1580)) returned 1 [0265.073] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0265.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0265.073] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105294.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105294.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1580)) returned 1 [0265.074] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0265.074] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0265.074] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0265.074] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18b0, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0105298.WMF", cAlternateFileName="")) returned 1 [0265.074] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0265.074] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0265.074] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0265.074] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0265.074] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0265.074] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0265.075] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105298.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105298.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0265.075] GetFileType (hFile=0x1e8) returned 0x1 [0265.075] CloseHandle (hObject=0x1e8) returned 1 [0265.076] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0265.076] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105298.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105298.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18b0)) returned 1 [0265.076] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0265.076] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0265.076] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105298.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105298.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18b0)) returned 1 [0265.076] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0265.076] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0265.076] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0265.076] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10e0, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0105306.WMF", cAlternateFileName="")) returned 1 [0265.076] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0265.076] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0265.077] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0265.077] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0265.077] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0265.077] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0265.077] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105306.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105306.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0265.077] GetFileType (hFile=0x1e8) returned 0x1 [0265.078] CloseHandle (hObject=0x1e8) returned 1 [0265.078] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0265.078] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105306.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105306.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10e0)) returned 1 [0265.078] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0265.078] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0265.079] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105306.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105306.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10e0)) returned 1 [0265.079] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0265.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0265.079] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0265.079] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e4, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0105320.WMF", cAlternateFileName="")) returned 1 [0265.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0265.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0265.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0265.079] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0265.079] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0265.080] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0265.080] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105320.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105320.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0265.080] GetFileType (hFile=0x1e8) returned 0x1 [0265.081] CloseHandle (hObject=0x1e8) returned 1 [0265.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0265.081] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105320.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105320.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e4)) returned 1 [0265.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0265.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0265.568] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105320.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105320.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e4)) returned 1 [0265.569] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0265.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0265.569] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0265.569] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f38, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0105328.WMF", cAlternateFileName="")) returned 1 [0265.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0265.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0265.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0265.569] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0265.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0265.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0265.570] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105328.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105328.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0265.571] GetFileType (hFile=0x1ac) returned 0x1 [0265.571] CloseHandle (hObject=0x1ac) returned 1 [0265.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0265.572] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105328.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105328.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f38)) returned 1 [0265.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0265.572] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0265.572] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105328.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105328.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f38)) returned 1 [0265.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0265.572] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0265.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0265.572] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x290c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0105332.WMF", cAlternateFileName="")) returned 1 [0265.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0265.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0265.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0265.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0265.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0265.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0265.574] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105332.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105332.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0265.574] GetFileType (hFile=0x1ac) returned 0x1 [0265.574] CloseHandle (hObject=0x1ac) returned 1 [0265.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0265.575] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105332.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105332.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x290c)) returned 1 [0265.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0265.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0265.575] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105332.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105332.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x290c)) returned 1 [0265.576] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0265.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0265.576] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0265.576] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb54, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0105336.WMF", cAlternateFileName="")) returned 1 [0265.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0265.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0265.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0265.576] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0265.576] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0265.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0265.577] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105336.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105336.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0265.578] GetFileType (hFile=0x1ac) returned 0x1 [0265.578] CloseHandle (hObject=0x1ac) returned 1 [0265.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0265.579] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105336.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105336.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb54)) returned 1 [0265.579] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0265.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0265.579] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105336.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105336.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb54)) returned 1 [0265.579] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0265.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0265.580] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0265.580] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d40, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0105338.WMF", cAlternateFileName="")) returned 1 [0265.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0265.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0265.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0265.580] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0265.580] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0265.580] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0265.581] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105338.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105338.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0265.581] GetFileType (hFile=0x1ac) returned 0x1 [0265.582] CloseHandle (hObject=0x1ac) returned 1 [0265.583] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0265.583] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105338.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105338.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d40)) returned 1 [0265.583] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0265.583] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0265.583] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105338.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105338.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d40)) returned 1 [0265.583] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0265.584] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0265.584] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0265.584] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x42a4, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0105348.WMF", cAlternateFileName="")) returned 1 [0265.584] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0265.584] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0265.584] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0265.584] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0265.585] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0265.585] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0265.585] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105348.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105348.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0265.586] GetFileType (hFile=0x1ac) returned 0x1 [0265.586] CloseHandle (hObject=0x1ac) returned 1 [0265.587] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0265.587] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105348.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105348.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x42a4)) returned 1 [0265.587] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0265.587] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0265.587] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105348.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105348.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x42a4)) returned 1 [0265.587] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0265.588] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0265.588] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0265.588] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x229c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0105360.WMF", cAlternateFileName="")) returned 1 [0265.588] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0265.588] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0265.588] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0265.588] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0265.588] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0265.589] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0265.589] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105360.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105360.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0265.589] GetFileType (hFile=0x1ac) returned 0x1 [0265.590] CloseHandle (hObject=0x1ac) returned 1 [0265.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0265.591] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105360.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105360.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x229c)) returned 1 [0265.591] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0265.591] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0265.591] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105360.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105360.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x229c)) returned 1 [0265.591] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0265.591] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0265.591] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0265.591] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x305c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0105368.WMF", cAlternateFileName="")) returned 1 [0265.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0265.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0265.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0265.592] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0265.592] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0265.592] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0265.593] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105368.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105368.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0265.593] GetFileType (hFile=0x1ac) returned 0x1 [0265.594] CloseHandle (hObject=0x1ac) returned 1 [0265.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0265.594] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105368.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105368.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x305c)) returned 1 [0265.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0265.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0265.594] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105368.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105368.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x305c)) returned 1 [0265.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0265.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0265.595] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0265.595] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1364, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0105376.WMF", cAlternateFileName="")) returned 1 [0265.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0265.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0265.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0265.595] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0265.595] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0265.595] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0265.596] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105376.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105376.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0265.596] GetFileType (hFile=0x1ac) returned 0x1 [0265.596] CloseHandle (hObject=0x1ac) returned 1 [0265.597] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0265.597] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105376.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105376.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1364)) returned 1 [0265.597] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0265.597] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0265.597] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105376.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105376.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1364)) returned 1 [0265.598] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0265.598] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0265.598] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0265.598] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1364, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0105378.WMF", cAlternateFileName="")) returned 1 [0265.598] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0265.598] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0265.598] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0265.599] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0265.599] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0265.599] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0265.599] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105378.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105378.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0265.599] GetFileType (hFile=0x1ac) returned 0x1 [0265.600] CloseHandle (hObject=0x1ac) returned 1 [0265.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0265.600] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105378.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105378.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1364)) returned 1 [0265.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0265.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0265.601] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105378.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105378.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1364)) returned 1 [0265.601] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0265.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0265.601] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0265.601] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1210, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0105380.WMF", cAlternateFileName="")) returned 1 [0265.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0265.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0265.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0265.601] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0265.601] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0265.601] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0265.602] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105380.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105380.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0265.602] GetFileType (hFile=0x1ac) returned 0x1 [0265.602] CloseHandle (hObject=0x1ac) returned 1 [0265.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0265.603] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105380.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105380.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1210)) returned 1 [0265.603] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0265.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0265.603] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105380.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105380.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1210)) returned 1 [0265.603] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0265.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0265.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0265.604] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16f8, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0105384.WMF", cAlternateFileName="")) returned 1 [0265.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0265.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0265.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0265.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0265.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0265.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0265.605] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105384.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105384.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0265.605] GetFileType (hFile=0x1ac) returned 0x1 [0265.606] CloseHandle (hObject=0x1ac) returned 1 [0265.606] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0265.606] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105384.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105384.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16f8)) returned 1 [0265.606] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0265.606] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0265.606] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105384.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105384.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16f8)) returned 1 [0265.607] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0265.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0265.607] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0265.607] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x175c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0105386.WMF", cAlternateFileName="")) returned 1 [0265.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0265.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0265.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0265.607] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0265.607] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0265.607] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0265.608] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105386.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105386.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0265.608] GetFileType (hFile=0x1ac) returned 0x1 [0265.609] CloseHandle (hObject=0x1ac) returned 1 [0265.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0265.609] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105386.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105386.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x175c)) returned 1 [0265.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0265.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0265.610] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105386.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105386.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x175c)) returned 1 [0265.610] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0265.610] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0265.610] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0265.610] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x203c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0105388.WMF", cAlternateFileName="")) returned 1 [0265.610] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0265.610] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0265.610] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0265.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0265.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0265.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0265.611] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105388.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105388.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0265.611] GetFileType (hFile=0x1ac) returned 0x1 [0265.612] CloseHandle (hObject=0x1ac) returned 1 [0265.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0265.612] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105388.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105388.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x203c)) returned 1 [0265.612] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0265.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0265.613] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105388.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105388.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x203c)) returned 1 [0265.613] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0265.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0265.613] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0265.613] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1350, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0105390.WMF", cAlternateFileName="")) returned 1 [0265.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0265.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0265.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0265.614] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0265.614] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0265.614] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0265.900] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105390.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105390.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0265.900] GetFileType (hFile=0x198) returned 0x1 [0265.900] CloseHandle (hObject=0x198) returned 1 [0265.900] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0265.900] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105390.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105390.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1350)) returned 1 [0265.900] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0265.901] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0265.901] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105390.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105390.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1350)) returned 1 [0265.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0265.901] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0265.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0265.901] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b04, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0105396.WMF", cAlternateFileName="")) returned 1 [0265.901] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0265.901] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0265.901] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0265.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0265.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0265.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0266.266] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105396.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105396.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0266.266] GetFileType (hFile=0x198) returned 0x1 [0266.267] CloseHandle (hObject=0x198) returned 1 [0266.267] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0266.267] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105396.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105396.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b04)) returned 1 [0266.267] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0266.267] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0266.267] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105396.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105396.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b04)) returned 1 [0266.267] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0266.267] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0266.267] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0266.267] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd00, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0105398.WMF", cAlternateFileName="")) returned 1 [0266.268] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0266.268] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0266.268] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0266.268] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0266.268] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0266.268] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0266.268] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105398.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105398.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0266.268] GetFileType (hFile=0x198) returned 0x1 [0266.269] CloseHandle (hObject=0x198) returned 1 [0266.269] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0266.269] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105398.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105398.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd00)) returned 1 [0266.270] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0266.270] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0266.270] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105398.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105398.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd00)) returned 1 [0266.270] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0266.270] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0266.270] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0266.270] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4fdc, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0105410.WMF", cAlternateFileName="")) returned 1 [0266.270] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0266.271] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0266.271] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0266.271] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0266.271] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0266.271] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0266.271] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105410.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105410.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0266.271] GetFileType (hFile=0x198) returned 0x1 [0266.272] CloseHandle (hObject=0x198) returned 1 [0266.272] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0266.272] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105410.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105410.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4fdc)) returned 1 [0266.272] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0266.272] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0266.272] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105410.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105410.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4fdc)) returned 1 [0266.272] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0266.272] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0266.272] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0266.272] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x24b8, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0105412.WMF", cAlternateFileName="")) returned 1 [0266.273] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0266.273] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0266.273] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0266.273] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0266.273] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0266.273] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0266.273] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105412.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105412.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0266.274] GetFileType (hFile=0x198) returned 0x1 [0266.274] CloseHandle (hObject=0x198) returned 1 [0266.274] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0266.274] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105412.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105412.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x24b8)) returned 1 [0266.274] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0266.274] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0266.275] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105412.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105412.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x24b8)) returned 1 [0266.275] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0266.275] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0266.275] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0266.275] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1864, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0105414.WMF", cAlternateFileName="")) returned 1 [0266.275] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0266.275] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0266.275] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0266.275] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0266.275] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0266.275] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0266.276] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105414.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105414.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0266.276] GetFileType (hFile=0x198) returned 0x1 [0266.276] CloseHandle (hObject=0x198) returned 1 [0266.277] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0266.277] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105414.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105414.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1864)) returned 1 [0266.277] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0266.277] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0266.277] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105414.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105414.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1864)) returned 1 [0266.277] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0266.277] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0266.277] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0266.277] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4928, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0105490.WMF", cAlternateFileName="")) returned 1 [0266.277] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0266.277] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0266.278] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0266.278] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0266.278] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0266.278] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0266.278] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105490.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105490.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0266.278] GetFileType (hFile=0x198) returned 0x1 [0266.279] CloseHandle (hObject=0x198) returned 1 [0266.279] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0266.279] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105490.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105490.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4928)) returned 1 [0266.279] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0266.279] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0266.279] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105490.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105490.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4928)) returned 1 [0266.280] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0266.280] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0266.280] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0266.280] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1424, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0105496.WMF", cAlternateFileName="")) returned 1 [0266.280] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0266.280] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0266.280] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0266.280] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0266.280] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0266.280] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0266.281] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105496.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105496.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0266.281] GetFileType (hFile=0x198) returned 0x1 [0266.281] CloseHandle (hObject=0x198) returned 1 [0266.281] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0266.281] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105496.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105496.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1424)) returned 1 [0266.282] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0266.282] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0266.282] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105496.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105496.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1424)) returned 1 [0266.282] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0266.282] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0266.282] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0266.282] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1560, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0105502.WMF", cAlternateFileName="")) returned 1 [0266.282] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0266.282] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0266.282] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0266.282] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0266.282] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0266.283] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0266.283] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105502.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105502.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0266.283] GetFileType (hFile=0x198) returned 0x1 [0266.284] CloseHandle (hObject=0x198) returned 1 [0266.284] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0266.284] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105502.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105502.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1560)) returned 1 [0266.284] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0266.284] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0266.284] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105502.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105502.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1560)) returned 1 [0266.284] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0266.285] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0266.285] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0266.285] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1034, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0105504.WMF", cAlternateFileName="")) returned 1 [0266.285] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0266.285] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0266.286] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0266.286] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0266.286] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0266.286] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0266.286] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105504.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105504.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0266.286] GetFileType (hFile=0x198) returned 0x1 [0266.287] CloseHandle (hObject=0x198) returned 1 [0266.287] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0266.287] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105504.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105504.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1034)) returned 1 [0266.287] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0266.287] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0266.287] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105504.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105504.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1034)) returned 1 [0266.288] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0266.288] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0266.288] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0266.288] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb60, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0105506.WMF", cAlternateFileName="")) returned 1 [0266.288] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0266.288] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0266.288] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0266.288] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0266.288] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0266.288] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0266.289] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105506.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105506.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0266.289] GetFileType (hFile=0x198) returned 0x1 [0266.289] CloseHandle (hObject=0x198) returned 1 [0266.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0266.289] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105506.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105506.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb60)) returned 1 [0266.290] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0266.290] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0266.290] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105506.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105506.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb60)) returned 1 [0266.290] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0266.290] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0266.290] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0266.290] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7c44, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0105520.WMF", cAlternateFileName="")) returned 1 [0266.290] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0266.290] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0266.290] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0266.291] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0266.291] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0266.291] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0266.291] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105520.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105520.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0266.291] GetFileType (hFile=0x198) returned 0x1 [0266.292] CloseHandle (hObject=0x198) returned 1 [0266.292] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0266.292] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105520.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105520.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7c44)) returned 1 [0266.292] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0266.292] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0266.292] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105520.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105520.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7c44)) returned 1 [0266.293] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0266.293] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0266.293] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0266.293] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43b4, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0105526.WMF", cAlternateFileName="")) returned 1 [0266.293] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0266.293] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0266.293] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0266.293] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0266.293] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0266.293] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0266.294] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105526.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105526.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0266.294] GetFileType (hFile=0x198) returned 0x1 [0266.294] CloseHandle (hObject=0x198) returned 1 [0266.295] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0266.295] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105526.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105526.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43b4)) returned 1 [0266.295] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0266.295] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0266.295] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105526.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105526.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43b4)) returned 1 [0266.295] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0266.296] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0266.296] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0266.296] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1cd8, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0105530.WMF", cAlternateFileName="")) returned 1 [0266.296] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0266.296] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0266.296] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0266.296] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0266.296] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0266.296] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0266.297] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105530.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105530.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0266.297] GetFileType (hFile=0x198) returned 0x1 [0266.297] CloseHandle (hObject=0x198) returned 1 [0266.298] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0266.298] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105530.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105530.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1cd8)) returned 1 [0266.298] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0266.298] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0266.298] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105530.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105530.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1cd8)) returned 1 [0266.298] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0266.298] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0266.299] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0266.299] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x542c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0105588.WMF", cAlternateFileName="")) returned 1 [0266.299] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0266.299] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0266.299] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0266.299] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0266.299] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0266.299] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0266.300] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105588.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105588.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0266.300] GetFileType (hFile=0x198) returned 0x1 [0266.648] CloseHandle (hObject=0x198) returned 1 [0266.648] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0266.649] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105588.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105588.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x542c)) returned 1 [0266.649] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0266.649] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0266.649] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105588.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105588.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x542c)) returned 1 [0266.649] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0266.649] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0266.649] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0266.649] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21e8, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0105600.WMF", cAlternateFileName="")) returned 1 [0266.649] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0266.649] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0266.650] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0266.650] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0266.650] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0266.650] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0266.650] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105600.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105600.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0266.650] GetFileType (hFile=0x198) returned 0x1 [0266.651] CloseHandle (hObject=0x198) returned 1 [0266.651] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0266.651] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105600.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105600.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21e8)) returned 1 [0266.651] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0266.651] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0266.652] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105600.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105600.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21e8)) returned 1 [0266.652] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0266.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0266.652] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0266.652] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x287c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0105638.WMF", cAlternateFileName="")) returned 1 [0266.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0266.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0266.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0266.652] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0266.652] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0266.652] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0266.653] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105638.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105638.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0266.653] GetFileType (hFile=0x198) returned 0x1 [0266.654] CloseHandle (hObject=0x198) returned 1 [0266.654] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0266.654] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105638.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105638.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x287c)) returned 1 [0266.654] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0266.654] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0266.655] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105638.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105638.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x287c)) returned 1 [0266.655] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0266.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0266.655] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0266.655] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x35f0, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0105710.WMF", cAlternateFileName="")) returned 1 [0266.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0266.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0266.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0266.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0266.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0266.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0266.656] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105710.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105710.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0266.657] GetFileType (hFile=0x198) returned 0x1 [0266.657] CloseHandle (hObject=0x198) returned 1 [0266.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0266.658] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105710.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105710.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x35f0)) returned 1 [0266.658] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0266.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0266.658] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105710.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105710.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x35f0)) returned 1 [0266.658] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0266.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0266.659] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0266.659] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2030, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0105846.WMF", cAlternateFileName="")) returned 1 [0266.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0266.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0266.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0266.659] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0266.659] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0266.660] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0266.661] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105846.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105846.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0266.661] GetFileType (hFile=0x198) returned 0x1 [0266.661] CloseHandle (hObject=0x198) returned 1 [0266.662] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0266.662] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105846.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105846.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2030)) returned 1 [0266.662] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0266.662] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0266.662] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105846.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105846.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2030)) returned 1 [0266.663] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0266.663] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0266.663] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0266.663] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2dc8, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0105912.WMF", cAlternateFileName="")) returned 1 [0266.663] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0266.663] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0266.663] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0266.663] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0266.663] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0266.663] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0266.664] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105912.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105912.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0266.664] GetFileType (hFile=0x198) returned 0x1 [0266.665] CloseHandle (hObject=0x198) returned 1 [0266.665] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0266.665] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105912.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105912.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2dc8)) returned 1 [0266.665] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0266.665] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0266.665] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105912.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105912.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2dc8)) returned 1 [0266.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0266.666] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0266.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0266.666] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1204, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0105974.WMF", cAlternateFileName="")) returned 1 [0266.666] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0266.666] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0266.666] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0266.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0266.667] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0266.667] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0266.667] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105974.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105974.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0266.668] GetFileType (hFile=0x198) returned 0x1 [0266.668] CloseHandle (hObject=0x198) returned 1 [0266.668] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0266.668] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105974.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105974.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1204)) returned 1 [0266.669] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0266.669] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0266.669] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105974.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105974.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1204)) returned 1 [0266.669] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0266.669] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0266.669] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0266.669] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x274c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0106020.WMF", cAlternateFileName="")) returned 1 [0266.670] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0266.670] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0266.670] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0266.670] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0266.670] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0266.670] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0266.671] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106020.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106020.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0266.671] GetFileType (hFile=0x198) returned 0x1 [0266.671] CloseHandle (hObject=0x198) returned 1 [0266.672] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0266.672] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106020.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106020.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x274c)) returned 1 [0266.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0266.672] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0266.672] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106020.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106020.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x274c)) returned 1 [0266.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0266.673] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0266.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0266.673] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16b4, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0106124.WMF", cAlternateFileName="")) returned 1 [0266.673] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0266.673] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0266.673] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0266.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0266.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0266.674] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0266.674] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106124.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106124.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0266.674] GetFileType (hFile=0x198) returned 0x1 [0266.675] CloseHandle (hObject=0x198) returned 1 [0266.676] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0266.676] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106124.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106124.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16b4)) returned 1 [0266.676] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0266.676] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0266.677] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106124.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106124.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16b4)) returned 1 [0266.677] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0266.677] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0266.677] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0266.677] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5bfc, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0106146.WMF", cAlternateFileName="")) returned 1 [0266.677] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0266.677] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0266.677] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0266.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0266.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0266.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0266.678] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106146.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106146.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0266.679] GetFileType (hFile=0x198) returned 0x1 [0266.679] CloseHandle (hObject=0x198) returned 1 [0266.680] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0266.680] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106146.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106146.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5bfc)) returned 1 [0266.680] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0266.680] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0266.680] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106146.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106146.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5bfc)) returned 1 [0266.680] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0266.680] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0266.681] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0266.681] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e7c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0106208.WMF", cAlternateFileName="")) returned 1 [0266.681] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0266.681] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0266.681] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0266.681] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0266.681] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0266.682] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0266.682] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106208.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106208.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0266.683] GetFileType (hFile=0x198) returned 0x1 [0266.683] CloseHandle (hObject=0x198) returned 1 [0266.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0266.684] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106208.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106208.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e7c)) returned 1 [0266.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0266.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0266.684] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106208.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106208.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e7c)) returned 1 [0266.685] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0266.685] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0266.685] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0266.685] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c90, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0106222.WMF", cAlternateFileName="")) returned 1 [0266.685] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0266.685] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0266.685] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0266.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0266.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0266.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0266.687] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106222.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106222.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0266.687] GetFileType (hFile=0x198) returned 0x1 [0266.687] CloseHandle (hObject=0x198) returned 1 [0266.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0266.688] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106222.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106222.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c90)) returned 1 [0266.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0266.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0266.688] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106222.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106222.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c90)) returned 1 [0266.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0266.689] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0266.689] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0266.689] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x864, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0106572.WMF", cAlternateFileName="")) returned 1 [0266.689] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0266.689] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0266.689] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0266.689] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0266.689] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0266.689] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0266.690] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106572.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106572.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0266.690] GetFileType (hFile=0x198) returned 0x1 [0266.691] CloseHandle (hObject=0x198) returned 1 [0266.879] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0266.879] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106572.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106572.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x864)) returned 1 [0266.880] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0266.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0266.880] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106572.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106572.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x864)) returned 1 [0266.880] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0266.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0266.881] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0266.881] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd04, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0106816.WMF", cAlternateFileName="")) returned 1 [0266.881] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0266.881] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0266.881] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0266.881] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0266.881] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0266.882] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0266.882] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106816.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106816.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0266.883] GetFileType (hFile=0x174) returned 0x1 [0266.883] CloseHandle (hObject=0x174) returned 1 [0266.884] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0266.884] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106816.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106816.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd04)) returned 1 [0266.884] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0266.885] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0266.885] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106816.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106816.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd04)) returned 1 [0266.885] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0266.885] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0266.885] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0266.885] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x35d8, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0106958.WMF", cAlternateFileName="")) returned 1 [0266.885] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0266.886] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0266.886] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0266.886] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0266.886] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0266.886] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0266.887] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106958.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106958.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0266.887] GetFileType (hFile=0x174) returned 0x1 [0266.888] CloseHandle (hObject=0x174) returned 1 [0266.889] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0266.889] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106958.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106958.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x35d8)) returned 1 [0266.889] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0266.889] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0266.889] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106958.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106958.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x35d8)) returned 1 [0266.890] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0266.890] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0266.890] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0266.890] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbcc, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0107024.WMF", cAlternateFileName="")) returned 1 [0266.890] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0266.890] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0266.890] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0266.891] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0266.891] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0266.891] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0266.892] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107024.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107024.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0266.892] GetFileType (hFile=0x174) returned 0x1 [0266.893] CloseHandle (hObject=0x174) returned 1 [0266.893] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0266.893] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107024.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107024.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbcc)) returned 1 [0266.893] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0266.894] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0266.894] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107024.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107024.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbcc)) returned 1 [0266.894] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0266.894] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0266.895] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0266.895] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1dd0, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0107026.WMF", cAlternateFileName="")) returned 1 [0266.895] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0266.895] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0266.895] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0266.895] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0266.895] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0266.895] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0266.896] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107026.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107026.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0266.896] GetFileType (hFile=0x174) returned 0x1 [0266.897] CloseHandle (hObject=0x174) returned 1 [0266.897] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0266.897] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107026.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107026.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1dd0)) returned 1 [0266.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0266.897] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0266.898] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107026.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107026.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1dd0)) returned 1 [0266.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0266.898] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0266.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0266.898] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2358, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0107042.WMF", cAlternateFileName="")) returned 1 [0266.898] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0266.898] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0266.898] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0266.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0266.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0266.899] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0266.899] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107042.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107042.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0266.899] GetFileType (hFile=0x174) returned 0x1 [0266.900] CloseHandle (hObject=0x174) returned 1 [0266.900] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0266.900] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107042.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107042.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2358)) returned 1 [0266.900] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0266.900] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0266.901] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107042.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107042.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2358)) returned 1 [0266.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0266.901] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0266.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0266.901] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3734, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0107090.WMF", cAlternateFileName="")) returned 1 [0266.901] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0266.901] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0266.901] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0266.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0266.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0266.902] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0266.902] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107090.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107090.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0266.902] GetFileType (hFile=0x174) returned 0x1 [0266.903] CloseHandle (hObject=0x174) returned 1 [0266.903] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0266.903] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107090.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107090.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3734)) returned 1 [0266.904] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0266.904] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0266.904] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107090.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107090.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3734)) returned 1 [0266.904] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0266.904] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0266.904] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0266.904] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x69cc, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0107130.WMF", cAlternateFileName="")) returned 1 [0266.904] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0266.904] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0266.905] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0266.905] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0266.905] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0266.905] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0266.905] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107130.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107130.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0266.906] GetFileType (hFile=0x174) returned 0x1 [0266.906] CloseHandle (hObject=0x174) returned 1 [0266.906] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0266.907] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107130.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107130.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x69cc)) returned 1 [0266.907] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0266.907] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0266.907] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107130.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107130.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x69cc)) returned 1 [0266.907] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0266.907] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0266.907] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0266.907] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbcfc, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0107132.WMF", cAlternateFileName="")) returned 1 [0266.907] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0266.908] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0266.908] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0266.908] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0266.908] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0266.908] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0266.908] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107132.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107132.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0266.909] GetFileType (hFile=0x174) returned 0x1 [0266.909] CloseHandle (hObject=0x174) returned 1 [0266.909] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0266.909] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107132.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107132.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbcfc)) returned 1 [0266.910] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0266.910] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0266.911] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107132.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107132.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbcfc)) returned 1 [0266.911] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0266.911] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0266.911] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0266.911] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbd04, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0107134.WMF", cAlternateFileName="")) returned 1 [0266.911] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0266.911] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0266.911] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0266.911] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0266.911] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0266.911] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0266.912] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107134.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107134.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0266.912] GetFileType (hFile=0x174) returned 0x1 [0266.912] CloseHandle (hObject=0x174) returned 1 [0266.913] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0266.913] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107134.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107134.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbd04)) returned 1 [0266.913] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0266.913] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0266.913] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107134.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107134.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbd04)) returned 1 [0266.913] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0266.913] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0266.913] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0266.913] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4330, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0107138.WMF", cAlternateFileName="")) returned 1 [0266.914] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0266.914] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0266.914] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0266.914] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0266.914] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0266.914] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0266.915] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107138.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107138.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0266.915] GetFileType (hFile=0x174) returned 0x1 [0266.915] CloseHandle (hObject=0x174) returned 1 [0266.915] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0266.916] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107138.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107138.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4330)) returned 1 [0266.916] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0266.916] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0266.916] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107138.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107138.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4330)) returned 1 [0266.916] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0266.916] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0266.916] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0266.916] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a94, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0107146.WMF", cAlternateFileName="")) returned 1 [0266.916] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0266.916] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0266.916] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0266.916] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0266.917] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0266.917] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0266.917] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107146.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107146.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0266.917] GetFileType (hFile=0x174) returned 0x1 [0266.918] CloseHandle (hObject=0x174) returned 1 [0266.918] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0266.918] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107146.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107146.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a94)) returned 1 [0266.918] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0266.918] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0266.918] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107146.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107146.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a94)) returned 1 [0266.918] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0266.918] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0266.919] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0266.919] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ea8, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0107148.WMF", cAlternateFileName="")) returned 1 [0266.919] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0266.919] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0266.919] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0266.919] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0266.919] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0266.919] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0266.920] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107148.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107148.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0266.960] GetFileType (hFile=0x21c) returned 0x1 [0266.960] CloseHandle (hObject=0x21c) returned 1 [0266.961] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0266.961] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107148.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107148.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ea8)) returned 1 [0266.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0266.992] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0266.993] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107148.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107148.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ea8)) returned 1 [0266.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0266.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0266.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0266.993] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3490, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0107150.WMF", cAlternateFileName="")) returned 1 [0266.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0266.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0266.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0266.994] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0266.994] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0266.994] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0266.995] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107150.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107150.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0266.995] GetFileType (hFile=0x21c) returned 0x1 [0266.996] CloseHandle (hObject=0x21c) returned 1 [0266.996] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0266.996] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107150.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107150.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3490)) returned 1 [0266.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0266.997] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0266.997] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107150.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107150.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3490)) returned 1 [0266.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0266.997] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0266.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0266.997] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5804, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0107152.WMF", cAlternateFileName="")) returned 1 [0266.997] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0266.998] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0266.998] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0266.998] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0266.998] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0266.998] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0266.999] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107152.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107152.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0266.999] GetFileType (hFile=0x21c) returned 0x1 [0267.000] CloseHandle (hObject=0x21c) returned 1 [0267.000] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0267.000] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107152.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107152.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5804)) returned 1 [0267.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0267.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0267.001] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107152.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107152.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5804)) returned 1 [0267.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0267.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0267.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0267.001] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x571c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0107154.WMF", cAlternateFileName="")) returned 1 [0267.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0267.002] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0267.002] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0267.002] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0267.002] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0267.002] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0267.003] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107154.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107154.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0267.003] GetFileType (hFile=0x21c) returned 0x1 [0267.004] CloseHandle (hObject=0x21c) returned 1 [0267.005] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0267.005] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107154.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107154.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x571c)) returned 1 [0267.005] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0267.005] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0267.005] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107154.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107154.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x571c)) returned 1 [0267.006] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0267.006] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0267.006] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0267.006] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x614c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0107158.WMF", cAlternateFileName="")) returned 1 [0267.006] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0267.006] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0267.006] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0267.006] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0267.006] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0267.006] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0267.007] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107158.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107158.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0267.007] GetFileType (hFile=0x21c) returned 0x1 [0267.008] CloseHandle (hObject=0x21c) returned 1 [0267.008] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0267.008] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107158.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107158.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x614c)) returned 1 [0267.008] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0267.009] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0267.009] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107158.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107158.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x614c)) returned 1 [0267.009] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0267.009] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0267.009] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0267.009] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ee4, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0107182.WMF", cAlternateFileName="")) returned 1 [0267.009] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0267.009] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0267.010] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0267.010] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0267.010] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0267.010] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0267.011] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107182.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107182.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0267.011] GetFileType (hFile=0x21c) returned 0x1 [0267.011] CloseHandle (hObject=0x21c) returned 1 [0267.012] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0267.012] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107182.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107182.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ee4)) returned 1 [0267.012] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0267.012] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0267.013] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107182.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107182.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ee4)) returned 1 [0267.013] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0267.013] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0267.013] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0267.013] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11b8, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0107188.WMF", cAlternateFileName="")) returned 1 [0267.013] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0267.013] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0267.013] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0267.014] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0267.014] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0267.014] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0267.015] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107188.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107188.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0267.015] GetFileType (hFile=0x21c) returned 0x1 [0267.015] CloseHandle (hObject=0x21c) returned 1 [0267.016] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0267.016] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107188.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107188.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11b8)) returned 1 [0267.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0267.016] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0267.017] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107188.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107188.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11b8)) returned 1 [0267.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0267.017] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0267.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0267.017] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x26f0, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0107192.WMF", cAlternateFileName="")) returned 1 [0267.017] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0267.018] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0267.018] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0267.018] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0267.018] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0267.018] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0267.019] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107192.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107192.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0267.020] GetFileType (hFile=0x21c) returned 0x1 [0267.020] CloseHandle (hObject=0x21c) returned 1 [0267.021] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0267.021] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107192.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107192.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x26f0)) returned 1 [0267.021] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0267.021] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0267.021] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107192.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107192.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x26f0)) returned 1 [0267.022] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0267.022] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0267.022] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0267.022] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ef4, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0107254.WMF", cAlternateFileName="")) returned 1 [0267.022] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0267.022] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0267.022] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0267.022] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0267.023] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0267.023] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0267.024] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107254.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107254.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0267.582] GetFileType (hFile=0x19c) returned 0x1 [0267.583] CloseHandle (hObject=0x19c) returned 1 [0267.583] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0267.583] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107254.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107254.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ef4)) returned 1 [0267.583] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0267.584] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0267.584] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107254.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107254.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ef4)) returned 1 [0267.584] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0267.584] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0267.584] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0267.584] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2168, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0107258.WMF", cAlternateFileName="")) returned 1 [0267.584] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0267.584] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0267.585] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0267.585] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0267.585] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0267.585] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0267.586] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107258.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107258.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0267.586] GetFileType (hFile=0x19c) returned 0x1 [0267.586] CloseHandle (hObject=0x19c) returned 1 [0267.587] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0267.587] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107258.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107258.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2168)) returned 1 [0267.587] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0267.587] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0267.587] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107258.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107258.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2168)) returned 1 [0267.587] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0267.588] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0267.588] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0267.588] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f3c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0107262.WMF", cAlternateFileName="")) returned 1 [0267.588] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0267.588] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0267.588] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0267.588] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0267.588] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0267.588] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0267.589] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107262.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107262.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0267.589] GetFileType (hFile=0x19c) returned 0x1 [0267.590] CloseHandle (hObject=0x19c) returned 1 [0267.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0267.590] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107262.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107262.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f3c)) returned 1 [0267.590] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0267.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0267.591] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107262.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107262.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f3c)) returned 1 [0267.591] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0267.591] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0267.591] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0267.591] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1498, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0107264.WMF", cAlternateFileName="")) returned 1 [0267.591] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0267.591] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0267.591] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0267.591] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0267.592] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0267.592] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0267.592] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107264.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107264.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0267.593] GetFileType (hFile=0x19c) returned 0x1 [0267.593] CloseHandle (hObject=0x19c) returned 1 [0267.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0267.594] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107264.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107264.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1498)) returned 1 [0267.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0267.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0267.594] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107264.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107264.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1498)) returned 1 [0267.595] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0267.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0267.595] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0267.595] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16ec, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0107266.WMF", cAlternateFileName="")) returned 1 [0267.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0267.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0267.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0267.595] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0267.596] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0267.596] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0267.597] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107266.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107266.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0267.597] GetFileType (hFile=0x19c) returned 0x1 [0267.598] CloseHandle (hObject=0x19c) returned 1 [0267.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0267.599] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107266.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107266.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16ec)) returned 1 [0267.599] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0267.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0267.600] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107266.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107266.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16ec)) returned 1 [0267.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0267.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0267.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0267.600] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b64, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0107280.WMF", cAlternateFileName="")) returned 1 [0267.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0267.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0267.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0267.601] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0267.601] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0267.601] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0267.602] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107280.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107280.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0267.602] GetFileType (hFile=0x19c) returned 0x1 [0267.603] CloseHandle (hObject=0x19c) returned 1 [0267.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0267.604] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107280.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107280.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b64)) returned 1 [0267.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0267.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0267.604] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107280.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107280.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b64)) returned 1 [0267.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0267.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0267.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0267.605] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3734, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0107282.WMF", cAlternateFileName="")) returned 1 [0267.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0267.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0267.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0267.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0267.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0267.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0267.606] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107282.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107282.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0267.606] GetFileType (hFile=0x19c) returned 0x1 [0267.607] CloseHandle (hObject=0x19c) returned 1 [0267.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0267.608] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107282.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107282.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3734)) returned 1 [0267.608] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0267.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0267.608] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107282.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107282.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3734)) returned 1 [0267.608] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0267.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0267.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0267.609] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x347c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0107288.WMF", cAlternateFileName="")) returned 1 [0267.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0267.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0267.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0267.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0267.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0267.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0267.610] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107288.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107288.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0267.610] GetFileType (hFile=0x19c) returned 0x1 [0267.611] CloseHandle (hObject=0x19c) returned 1 [0267.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0267.611] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107288.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107288.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x347c)) returned 1 [0267.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0267.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0267.612] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107288.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107288.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x347c)) returned 1 [0267.612] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0267.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0267.612] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0267.612] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3014, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0107290.WMF", cAlternateFileName="")) returned 1 [0267.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0267.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0267.696] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0267.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0267.881] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0267.881] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0267.987] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107290.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107290.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0267.988] GetFileType (hFile=0x21c) returned 0x1 [0267.988] CloseHandle (hObject=0x21c) returned 1 [0267.989] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0267.989] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107290.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107290.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3014)) returned 1 [0267.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0267.989] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0267.990] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107290.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107290.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3014)) returned 1 [0267.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0267.990] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0267.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0267.990] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x99c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0107300.WMF", cAlternateFileName="")) returned 1 [0267.990] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0267.991] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0267.991] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0267.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0267.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0267.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0267.992] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107300.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107300.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0267.993] GetFileType (hFile=0x21c) returned 0x1 [0267.994] CloseHandle (hObject=0x21c) returned 1 [0267.994] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0267.995] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107300.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107300.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x99c)) returned 1 [0267.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0267.995] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0267.995] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107300.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107300.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x99c)) returned 1 [0267.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0267.995] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0267.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0267.996] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1028, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0107302.WMF", cAlternateFileName="")) returned 1 [0267.996] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0267.996] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0267.996] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0267.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0267.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0267.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0267.998] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107302.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107302.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0267.998] GetFileType (hFile=0x21c) returned 0x1 [0267.999] CloseHandle (hObject=0x21c) returned 1 [0267.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0267.999] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107302.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107302.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1028)) returned 1 [0267.999] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0268.000] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0268.000] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107302.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107302.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1028)) returned 1 [0268.000] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0268.000] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0268.000] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0268.000] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3e10, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0107308.WMF", cAlternateFileName="")) returned 1 [0268.000] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0268.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0268.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0268.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0268.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0268.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0268.002] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107308.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107308.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0268.002] GetFileType (hFile=0x21c) returned 0x1 [0268.003] CloseHandle (hObject=0x21c) returned 1 [0268.003] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0268.004] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107308.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107308.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3e10)) returned 1 [0268.004] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0268.004] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0268.004] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107308.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107308.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3e10)) returned 1 [0268.004] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0268.004] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0268.005] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0268.005] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a64, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0107314.WMF", cAlternateFileName="")) returned 1 [0268.005] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0268.005] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0268.005] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0268.005] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0268.005] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0268.006] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0268.006] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107314.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107314.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0268.007] GetFileType (hFile=0x21c) returned 0x1 [0268.007] CloseHandle (hObject=0x21c) returned 1 [0268.008] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0268.008] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107314.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107314.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a64)) returned 1 [0268.009] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0268.009] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0268.009] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107314.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107314.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a64)) returned 1 [0268.009] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0268.009] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0268.009] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0268.010] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c18, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0107316.WMF", cAlternateFileName="")) returned 1 [0268.010] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0268.010] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0268.010] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0268.010] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0268.010] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0268.011] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0268.011] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107316.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107316.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0268.012] GetFileType (hFile=0x21c) returned 0x1 [0268.012] CloseHandle (hObject=0x21c) returned 1 [0268.013] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0268.013] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107316.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107316.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c18)) returned 1 [0268.013] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0268.013] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0268.013] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107316.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107316.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c18)) returned 1 [0268.013] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0268.013] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0268.014] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0268.014] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1984, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0107328.WMF", cAlternateFileName="")) returned 1 [0268.014] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0268.014] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0268.014] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0268.014] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0268.014] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0268.014] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0268.015] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107328.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107328.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0268.015] GetFileType (hFile=0x21c) returned 0x1 [0268.016] CloseHandle (hObject=0x21c) returned 1 [0268.016] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0268.016] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107328.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107328.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1984)) returned 1 [0268.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0268.017] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0268.017] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107328.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107328.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1984)) returned 1 [0268.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0268.017] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0268.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0268.017] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1094, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0107342.WMF", cAlternateFileName="")) returned 1 [0268.017] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0268.018] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0268.018] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0268.018] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0268.018] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0268.018] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0268.019] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107342.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107342.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0268.019] GetFileType (hFile=0x21c) returned 0x1 [0268.019] CloseHandle (hObject=0x21c) returned 1 [0268.020] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0268.020] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107342.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107342.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1094)) returned 1 [0268.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0268.020] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0268.020] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107342.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107342.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1094)) returned 1 [0268.021] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0268.021] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0268.021] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0268.021] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13d4, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0107344.WMF", cAlternateFileName="")) returned 1 [0268.021] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0268.021] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0268.021] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0268.021] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0268.021] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0268.022] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0268.022] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107344.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107344.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0268.023] GetFileType (hFile=0x21c) returned 0x1 [0268.023] CloseHandle (hObject=0x21c) returned 1 [0268.368] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0268.368] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107344.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107344.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13d4)) returned 1 [0268.368] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0268.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0268.369] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107344.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107344.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13d4)) returned 1 [0268.369] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0268.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0268.369] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0268.369] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5c78, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0107350.WMF", cAlternateFileName="")) returned 1 [0268.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0268.370] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0268.370] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0268.370] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0268.370] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0268.370] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0268.500] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107350.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107350.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0268.501] GetFileType (hFile=0x198) returned 0x1 [0268.501] CloseHandle (hObject=0x198) returned 1 [0268.502] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0268.502] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107350.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107350.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5c78)) returned 1 [0268.502] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0268.502] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0268.502] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107350.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107350.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5c78)) returned 1 [0268.503] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0268.503] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0268.503] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0268.503] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f1c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0107358.WMF", cAlternateFileName="")) returned 1 [0268.503] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0268.503] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0268.503] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0268.503] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0268.504] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0268.504] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0268.505] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107358.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107358.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0268.505] GetFileType (hFile=0x198) returned 0x1 [0268.505] CloseHandle (hObject=0x198) returned 1 [0268.506] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0268.506] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107358.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107358.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f1c)) returned 1 [0268.506] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0268.507] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0268.507] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107358.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107358.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f1c)) returned 1 [0268.507] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0268.507] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0268.507] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0268.507] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x40cc, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0107364.WMF", cAlternateFileName="")) returned 1 [0268.508] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0268.508] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0268.508] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0268.509] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0268.509] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0268.509] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0268.510] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107364.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107364.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0268.510] GetFileType (hFile=0x198) returned 0x1 [0268.511] CloseHandle (hObject=0x198) returned 1 [0268.511] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0268.511] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107364.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107364.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x40cc)) returned 1 [0268.512] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0268.512] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0268.512] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107364.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107364.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x40cc)) returned 1 [0268.512] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0268.512] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0268.512] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0268.512] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ce4, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0107426.WMF", cAlternateFileName="")) returned 1 [0268.513] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0268.513] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0268.513] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0268.513] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0268.513] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0268.513] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0268.514] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107426.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107426.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0268.514] GetFileType (hFile=0x198) returned 0x1 [0268.515] CloseHandle (hObject=0x198) returned 1 [0268.516] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0268.516] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107426.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107426.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ce4)) returned 1 [0268.516] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0268.516] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0268.516] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107426.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107426.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ce4)) returned 1 [0268.517] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0268.517] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0268.517] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0268.517] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7680, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0107446.WMF", cAlternateFileName="")) returned 1 [0268.517] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0268.517] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0268.517] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0268.518] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0268.518] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0268.518] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0268.519] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107446.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107446.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0268.519] GetFileType (hFile=0x198) returned 0x1 [0268.520] CloseHandle (hObject=0x198) returned 1 [0268.521] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0268.521] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107446.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107446.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7680)) returned 1 [0268.521] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0268.521] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0268.521] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107446.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107446.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7680)) returned 1 [0268.521] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0268.521] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0268.522] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0268.522] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1338, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0107450.WMF", cAlternateFileName="")) returned 1 [0268.522] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0268.522] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0268.522] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0268.522] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0268.522] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0268.523] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0268.523] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107450.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107450.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0268.523] GetFileType (hFile=0x198) returned 0x1 [0268.524] CloseHandle (hObject=0x198) returned 1 [0268.525] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0268.525] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107450.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107450.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1338)) returned 1 [0268.525] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0268.525] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0268.525] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107450.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107450.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1338)) returned 1 [0268.526] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0268.526] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0268.526] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0268.526] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x52e0, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0107452.WMF", cAlternateFileName="")) returned 1 [0268.526] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0268.526] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0268.526] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0268.526] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0268.526] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0268.527] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0268.527] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107452.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107452.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0268.528] GetFileType (hFile=0x198) returned 0x1 [0268.528] CloseHandle (hObject=0x198) returned 1 [0268.528] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0268.529] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107452.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107452.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x52e0)) returned 1 [0268.529] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0268.529] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0268.529] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107452.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107452.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x52e0)) returned 1 [0268.529] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0268.529] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0268.529] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0268.530] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe8c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0107456.WMF", cAlternateFileName="")) returned 1 [0268.530] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0268.530] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0268.530] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0268.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0268.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0268.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0268.531] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107456.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107456.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0268.531] GetFileType (hFile=0x198) returned 0x1 [0268.532] CloseHandle (hObject=0x198) returned 1 [0268.532] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0268.533] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107456.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107456.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe8c)) returned 1 [0268.533] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0268.533] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0268.533] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107456.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107456.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe8c)) returned 1 [0268.533] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0268.533] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0268.534] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0268.534] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdf0, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0107458.WMF", cAlternateFileName="")) returned 1 [0268.534] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0268.534] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0268.534] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0268.534] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0268.534] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0268.534] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0268.535] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107458.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107458.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0268.536] GetFileType (hFile=0x198) returned 0x1 [0268.536] CloseHandle (hObject=0x198) returned 1 [0268.537] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0268.537] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107458.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107458.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdf0)) returned 1 [0268.537] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0268.537] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0268.537] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107458.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107458.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdf0)) returned 1 [0268.537] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0268.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0268.538] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0268.538] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x258c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0107468.WMF", cAlternateFileName="")) returned 1 [0268.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0268.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0268.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0268.538] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0268.538] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0268.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0268.822] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107468.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107468.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0268.823] GetFileType (hFile=0x198) returned 0x1 [0268.823] CloseHandle (hObject=0x198) returned 1 [0268.823] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0268.824] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107468.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107468.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x258c)) returned 1 [0268.824] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0268.824] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0268.824] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107468.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107468.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x258c)) returned 1 [0268.824] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0268.824] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0268.824] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0268.824] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1788, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0107480.WMF", cAlternateFileName="")) returned 1 [0268.824] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0268.825] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0268.825] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0268.825] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0268.825] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0268.825] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0268.826] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107480.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107480.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0268.826] GetFileType (hFile=0x198) returned 0x1 [0268.827] CloseHandle (hObject=0x198) returned 1 [0268.827] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0268.827] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107480.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107480.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1788)) returned 1 [0268.827] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0268.827] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0268.828] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107480.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107480.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1788)) returned 1 [0268.828] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0268.828] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0268.828] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0268.828] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe736331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe736331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1374, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0107482.WMF", cAlternateFileName="")) returned 1 [0268.828] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0268.828] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0268.829] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0268.829] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0268.829] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0268.829] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0268.830] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107482.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107482.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0268.872] GetFileType (hFile=0x21c) returned 0x1 [0268.872] CloseHandle (hObject=0x21c) returned 1 [0268.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0268.873] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107482.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107482.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe736331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe736331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1374)) returned 1 [0268.873] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0268.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0268.873] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107482.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107482.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe736331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe736331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1374)) returned 1 [0268.874] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0268.874] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0268.874] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0268.874] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbe0, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0107484.WMF", cAlternateFileName="")) returned 1 [0268.874] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0268.874] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0268.874] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0268.874] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0268.874] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0268.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0268.875] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107484.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107484.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0268.876] GetFileType (hFile=0x21c) returned 0x1 [0268.876] CloseHandle (hObject=0x21c) returned 1 [0268.877] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0268.877] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107484.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107484.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbe0)) returned 1 [0268.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0268.877] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0268.877] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107484.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107484.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbe0)) returned 1 [0268.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0268.878] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0268.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0268.878] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f40, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0107488.WMF", cAlternateFileName="")) returned 1 [0268.878] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0268.878] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0268.878] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0268.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0268.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0268.879] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0268.879] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107488.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107488.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0268.880] GetFileType (hFile=0x21c) returned 0x1 [0268.880] CloseHandle (hObject=0x21c) returned 1 [0268.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0268.881] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107488.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107488.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f40)) returned 1 [0268.881] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0268.881] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0268.881] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107488.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107488.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f40)) returned 1 [0268.881] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0268.881] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0268.881] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0268.881] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4054, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0107490.WMF", cAlternateFileName="")) returned 1 [0268.881] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0268.882] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0268.882] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0268.882] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0268.882] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0268.882] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0268.883] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107490.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107490.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0268.884] GetFileType (hFile=0x21c) returned 0x1 [0268.884] CloseHandle (hObject=0x21c) returned 1 [0268.884] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0268.885] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107490.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107490.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4054)) returned 1 [0268.885] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0268.885] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0268.885] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107490.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107490.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4054)) returned 1 [0268.885] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0268.885] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0268.885] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0268.886] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1acc, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0107492.WMF", cAlternateFileName="")) returned 1 [0268.886] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0268.886] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0268.886] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0268.886] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0268.886] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0268.886] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0268.887] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107492.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107492.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0268.931] GetFileType (hFile=0x174) returned 0x1 [0268.932] CloseHandle (hObject=0x174) returned 1 [0268.933] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0268.933] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107492.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107492.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1acc)) returned 1 [0268.933] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0268.933] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0268.933] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107492.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107492.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1acc)) returned 1 [0268.934] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0268.934] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0268.934] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0268.934] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1918, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0107494.WMF", cAlternateFileName="")) returned 1 [0268.934] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0268.935] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0268.935] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0268.935] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0268.935] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0268.935] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0268.936] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107494.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107494.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0268.937] GetFileType (hFile=0x174) returned 0x1 [0268.938] CloseHandle (hObject=0x174) returned 1 [0268.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0268.938] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107494.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107494.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1918)) returned 1 [0268.939] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0268.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0268.939] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107494.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107494.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1918)) returned 1 [0268.939] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0268.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0268.939] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0268.940] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x22a0, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0107496.WMF", cAlternateFileName="")) returned 1 [0268.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0268.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0268.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0268.940] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0268.940] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0268.940] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0268.941] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107496.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107496.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0268.942] GetFileType (hFile=0x174) returned 0x1 [0268.943] CloseHandle (hObject=0x174) returned 1 [0268.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0268.944] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107496.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107496.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x22a0)) returned 1 [0268.944] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0268.944] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0268.944] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107496.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107496.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x22a0)) returned 1 [0268.944] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0268.944] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0268.945] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0268.945] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1068, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0107500.WMF", cAlternateFileName="")) returned 1 [0268.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0268.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0268.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0268.945] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0269.174] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0269.174] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0269.175] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107500.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107500.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0269.175] GetFileType (hFile=0x19c) returned 0x1 [0269.176] CloseHandle (hObject=0x19c) returned 1 [0269.177] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0269.177] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107500.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107500.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1068)) returned 1 [0269.177] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0269.177] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0269.177] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107500.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107500.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1068)) returned 1 [0269.177] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0269.178] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0269.178] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0269.178] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a54, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0107502.WMF", cAlternateFileName="")) returned 1 [0269.178] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0269.178] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0269.178] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0269.179] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0269.179] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0269.179] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0269.180] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107502.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107502.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0269.181] GetFileType (hFile=0x19c) returned 0x1 [0269.181] CloseHandle (hObject=0x19c) returned 1 [0269.182] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0269.182] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107502.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107502.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a54)) returned 1 [0269.182] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0269.182] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0269.182] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107502.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107502.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a54)) returned 1 [0269.182] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0269.183] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0269.183] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0269.183] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c8c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0107512.WMF", cAlternateFileName="")) returned 1 [0269.183] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0269.183] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0269.183] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0269.183] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0269.184] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0269.184] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0269.185] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107512.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107512.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0269.185] GetFileType (hFile=0x19c) returned 0x1 [0269.185] CloseHandle (hObject=0x19c) returned 1 [0269.186] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0269.186] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107512.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107512.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c8c)) returned 1 [0269.187] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0269.187] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0269.187] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107512.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107512.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c8c)) returned 1 [0269.187] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0269.187] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0269.187] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0269.187] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe78281d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe78281d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2fac, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0107514.WMF", cAlternateFileName="")) returned 1 [0269.188] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0269.188] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0269.188] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0269.188] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0269.188] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0269.188] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0269.189] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107514.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107514.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0269.189] GetFileType (hFile=0x19c) returned 0x1 [0269.190] CloseHandle (hObject=0x19c) returned 1 [0269.190] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0269.191] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107514.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107514.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe78281d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe78281d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2fac)) returned 1 [0269.191] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0269.191] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0269.191] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107514.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107514.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe78281d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe78281d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2fac)) returned 1 [0269.191] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0269.191] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0269.192] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0269.192] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe78281d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe78281d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x36b8, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0107516.WMF", cAlternateFileName="")) returned 1 [0269.192] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0269.192] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0269.192] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0269.192] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0269.192] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0269.192] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0269.193] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107516.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107516.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0269.322] GetFileType (hFile=0x1ac) returned 0x1 [0269.322] CloseHandle (hObject=0x1ac) returned 1 [0269.323] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0269.323] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107516.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107516.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe78281d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe78281d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x36b8)) returned 1 [0269.323] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0269.324] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0269.324] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107516.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107516.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe78281d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe78281d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x36b8)) returned 1 [0269.324] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0269.324] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0269.324] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0269.324] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe78281d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe78281d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe78281d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f0c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0107526.WMF", cAlternateFileName="")) returned 1 [0269.325] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0269.325] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0269.325] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0269.325] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0269.325] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0269.325] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0269.326] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107526.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107526.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0269.328] GetFileType (hFile=0x1ac) returned 0x1 [0269.329] CloseHandle (hObject=0x1ac) returned 1 [0269.329] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0269.330] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107526.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107526.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe78281d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe78281d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe78281d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f0c)) returned 1 [0269.330] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0269.330] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0269.330] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107526.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107526.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe78281d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe78281d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe78281d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f0c)) returned 1 [0269.330] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0269.330] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0269.331] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0269.331] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe78281d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe78281d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe78281d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a88, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0107528.WMF", cAlternateFileName="")) returned 1 [0269.331] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0269.331] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0269.331] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0269.331] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0269.331] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0269.332] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0269.332] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107528.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107528.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0269.333] GetFileType (hFile=0x1ac) returned 0x1 [0269.333] CloseHandle (hObject=0x1ac) returned 1 [0269.334] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0269.334] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107528.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107528.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe78281d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe78281d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe78281d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a88)) returned 1 [0269.334] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0269.334] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0269.334] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107528.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107528.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe78281d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe78281d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe78281d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a88)) returned 1 [0269.335] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0269.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0269.335] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0269.335] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe736331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe736331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe78281d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6890, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0107544.WMF", cAlternateFileName="")) returned 1 [0269.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0269.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0269.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0269.335] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0269.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0269.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0269.361] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107544.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107544.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0269.362] GetFileType (hFile=0x1ac) returned 0x1 [0269.363] CloseHandle (hObject=0x1ac) returned 1 [0269.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0269.364] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107544.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107544.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe736331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe736331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe78281d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6890)) returned 1 [0269.364] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0269.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0269.364] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107544.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107544.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe736331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe736331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe78281d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6890)) returned 1 [0269.364] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0269.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0269.365] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0269.365] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe736331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe736331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe75c571, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ba0, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0107658.WMF", cAlternateFileName="")) returned 1 [0269.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0269.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0269.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0269.365] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0269.366] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0269.366] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0269.367] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107658.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107658.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0269.371] GetFileType (hFile=0x1ac) returned 0x1 [0269.371] CloseHandle (hObject=0x1ac) returned 1 [0269.372] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0269.372] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107658.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107658.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe736331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe736331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe75c571, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ba0)) returned 1 [0269.372] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0269.372] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0269.373] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107658.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107658.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe736331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe736331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe75c571, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ba0)) returned 1 [0269.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0269.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0269.374] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0269.374] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe75c571, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe75c571, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe78281d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12c8, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0107708.WMF", cAlternateFileName="")) returned 1 [0269.374] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0269.374] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0269.375] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0269.375] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0269.375] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0269.375] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0269.376] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107708.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107708.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0269.415] GetFileType (hFile=0x1e8) returned 0x1 [0269.416] CloseHandle (hObject=0x1e8) returned 1 [0269.416] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0269.417] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107708.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107708.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe75c571, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe75c571, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe78281d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12c8)) returned 1 [0269.417] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0269.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0269.417] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107708.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107708.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe75c571, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe75c571, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe78281d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12c8)) returned 1 [0269.417] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0269.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0269.418] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0269.418] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe736331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe736331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe75c571, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x121c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0107712.WMF", cAlternateFileName="")) returned 1 [0269.418] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0269.418] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0269.418] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0269.418] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0269.418] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0269.419] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0269.420] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107712.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107712.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0269.420] GetFileType (hFile=0x1e8) returned 0x1 [0269.421] CloseHandle (hObject=0x1e8) returned 1 [0269.421] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0269.422] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107712.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107712.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe736331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe736331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe75c571, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x121c)) returned 1 [0269.422] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0269.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0269.422] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107712.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107712.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe736331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe736331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe75c571, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x121c)) returned 1 [0269.422] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0269.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0269.423] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0269.423] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe736331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe736331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe78281d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xed8, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0107718.WMF", cAlternateFileName="")) returned 1 [0269.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0269.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0269.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0269.423] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0269.424] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0269.424] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0269.425] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107718.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107718.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0269.425] GetFileType (hFile=0x1e8) returned 0x1 [0269.426] CloseHandle (hObject=0x1e8) returned 1 [0269.426] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0269.426] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107718.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107718.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe736331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe736331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe78281d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xed8)) returned 1 [0269.427] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0269.427] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0269.427] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107718.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107718.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe736331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe736331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe78281d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xed8)) returned 1 [0269.427] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0269.427] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0269.427] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0269.427] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe736331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe736331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2044, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0107722.WMF", cAlternateFileName="")) returned 1 [0269.462] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0269.462] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0269.462] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0269.462] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0269.462] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0269.462] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0269.463] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107722.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107722.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0269.463] GetFileType (hFile=0x1e8) returned 0x1 [0269.464] CloseHandle (hObject=0x1e8) returned 1 [0269.465] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0269.465] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107722.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107722.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe736331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe736331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2044)) returned 1 [0269.465] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0269.465] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0269.465] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107722.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107722.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe736331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe736331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2044)) returned 1 [0269.465] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0269.466] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0269.466] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0269.466] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b68, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0107724.WMF", cAlternateFileName="")) returned 1 [0269.466] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0269.466] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0269.466] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0269.466] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0269.466] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0269.467] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0269.467] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107724.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107724.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0269.469] GetFileType (hFile=0x1e8) returned 0x1 [0269.469] CloseHandle (hObject=0x1e8) returned 1 [0269.470] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0269.470] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107724.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107724.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b68)) returned 1 [0269.470] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0269.470] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0269.470] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107724.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107724.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b68)) returned 1 [0269.470] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0269.471] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0269.471] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0269.471] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1574, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0107728.WMF", cAlternateFileName="")) returned 1 [0269.471] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0269.471] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0269.471] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0269.471] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0269.472] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0269.472] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0269.472] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107728.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107728.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0269.473] GetFileType (hFile=0x1e8) returned 0x1 [0269.473] CloseHandle (hObject=0x1e8) returned 1 [0269.474] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0269.474] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107728.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107728.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1574)) returned 1 [0269.474] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0269.474] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0269.474] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107728.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107728.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1574)) returned 1 [0269.475] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0269.475] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0269.475] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0269.475] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbf4, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0107730.WMF", cAlternateFileName="")) returned 1 [0269.475] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0269.475] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0269.475] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0269.476] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0269.476] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0269.476] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0269.477] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107730.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107730.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0269.478] GetFileType (hFile=0x1e8) returned 0x1 [0269.478] CloseHandle (hObject=0x1e8) returned 1 [0269.479] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0269.479] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107730.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107730.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbf4)) returned 1 [0269.479] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0269.479] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0269.479] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107730.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107730.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbf4)) returned 1 [0269.479] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0269.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0269.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0269.480] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc44, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0107734.WMF", cAlternateFileName="")) returned 1 [0269.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0269.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0269.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0269.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0269.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0269.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0269.481] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107734.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107734.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0269.483] GetFileType (hFile=0x1e8) returned 0x1 [0269.483] CloseHandle (hObject=0x1e8) returned 1 [0269.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0269.484] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107734.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107734.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc44)) returned 1 [0269.484] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0269.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0269.484] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107734.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107734.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc44)) returned 1 [0269.484] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0269.485] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0269.485] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0269.485] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe3c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0107742.WMF", cAlternateFileName="")) returned 1 [0269.485] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0269.485] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0269.485] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0269.485] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0269.485] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0269.485] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0269.486] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107742.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107742.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0269.489] GetFileType (hFile=0x1e8) returned 0x1 [0269.490] CloseHandle (hObject=0x1e8) returned 1 [0269.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0269.490] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107742.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107742.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe3c)) returned 1 [0269.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0269.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0269.491] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107742.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107742.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe3c)) returned 1 [0269.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0269.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0269.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0269.491] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe78281d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe78281d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x138c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0107744.WMF", cAlternateFileName="")) returned 1 [0269.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0269.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0269.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0269.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0269.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0269.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0269.493] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107744.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107744.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0269.494] GetFileType (hFile=0x1e8) returned 0x1 [0269.495] CloseHandle (hObject=0x1e8) returned 1 [0269.495] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0269.495] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107744.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107744.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe78281d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe78281d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x138c)) returned 1 [0269.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0269.496] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0269.496] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107744.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107744.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe78281d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe78281d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x138c)) returned 1 [0269.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0269.496] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0269.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0269.496] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12b4, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0107746.WMF", cAlternateFileName="")) returned 1 [0269.496] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0269.496] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0269.497] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0269.497] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0269.497] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0269.497] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0269.498] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107746.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107746.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0269.498] GetFileType (hFile=0x1e8) returned 0x1 [0269.499] CloseHandle (hObject=0x1e8) returned 1 [0269.499] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0269.499] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107746.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107746.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12b4)) returned 1 [0269.499] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0269.499] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0269.500] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107746.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107746.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12b4)) returned 1 [0269.500] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0269.500] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0269.500] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0269.500] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2020, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0107748.WMF", cAlternateFileName="")) returned 1 [0269.500] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0269.500] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0269.500] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0269.500] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0269.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0269.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0269.501] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107748.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107748.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0269.705] GetFileType (hFile=0x198) returned 0x1 [0269.705] CloseHandle (hObject=0x198) returned 1 [0269.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0269.706] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107748.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107748.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2020)) returned 1 [0269.706] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0269.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0269.706] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107748.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107748.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2020)) returned 1 [0269.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0269.707] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0269.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0269.707] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x126c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0107750.WMF", cAlternateFileName="")) returned 1 [0269.707] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0269.707] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0269.707] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0269.708] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0269.708] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0269.708] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0269.899] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107750.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107750.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0269.900] GetFileType (hFile=0x198) returned 0x1 [0269.900] CloseHandle (hObject=0x198) returned 1 [0269.901] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0269.901] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107750.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107750.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x126c)) returned 1 [0269.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0269.901] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0269.901] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107750.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107750.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x126c)) returned 1 [0269.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0269.901] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0269.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0269.902] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe78281d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe78281d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4146, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0136865.WMF", cAlternateFileName="")) returned 1 [0269.902] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0269.902] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0269.902] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0269.902] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0269.902] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0269.902] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0269.903] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0136865.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0136865.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0269.903] GetFileType (hFile=0x198) returned 0x1 [0269.904] CloseHandle (hObject=0x198) returned 1 [0269.904] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0269.904] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0136865.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0136865.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe78281d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe78281d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4146)) returned 1 [0269.905] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0269.905] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0269.905] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0136865.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0136865.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe78281d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe78281d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4146)) returned 1 [0269.905] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0269.905] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0269.905] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0269.905] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9d27, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0144773.JPG", cAlternateFileName="")) returned 1 [0269.905] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0269.906] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0269.906] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0269.906] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0269.906] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0269.906] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0269.907] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0144773.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0144773.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0269.908] GetFileType (hFile=0x198) returned 0x1 [0269.908] CloseHandle (hObject=0x198) returned 1 [0269.909] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0269.909] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0144773.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0144773.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9d27)) returned 1 [0269.909] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0269.909] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0269.909] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0144773.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0144773.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9d27)) returned 1 [0269.910] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0269.910] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0269.910] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0269.910] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8379, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0145168.JPG", cAlternateFileName="")) returned 1 [0269.910] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0269.910] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0269.911] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0269.911] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0269.911] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0269.911] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0269.912] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145168.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145168.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0269.914] GetFileType (hFile=0x198) returned 0x1 [0269.915] CloseHandle (hObject=0x198) returned 1 [0269.915] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0269.916] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145168.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145168.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8379)) returned 1 [0269.916] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0269.916] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0269.916] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145168.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145168.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8379)) returned 1 [0269.916] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0269.916] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0269.917] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0269.917] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf0c1, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0145212.JPG", cAlternateFileName="")) returned 1 [0269.917] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0269.917] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0269.917] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0269.917] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0269.917] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0269.917] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0269.918] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145212.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145212.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0269.919] GetFileType (hFile=0x198) returned 0x1 [0269.919] CloseHandle (hObject=0x198) returned 1 [0269.920] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0269.920] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145212.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145212.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf0c1)) returned 1 [0269.920] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0269.920] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0269.920] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145212.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145212.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf0c1)) returned 1 [0269.920] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0269.920] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0269.921] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0269.921] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc056, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0145272.JPG", cAlternateFileName="")) returned 1 [0269.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0269.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0269.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0269.921] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0269.921] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0269.922] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0269.922] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145272.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145272.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0269.923] GetFileType (hFile=0x198) returned 0x1 [0269.923] CloseHandle (hObject=0x198) returned 1 [0269.924] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0269.924] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145272.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145272.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc056)) returned 1 [0269.924] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0269.924] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0269.924] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145272.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145272.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc056)) returned 1 [0269.924] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0269.924] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0269.924] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0269.924] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5285, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0145361.JPG", cAlternateFileName="")) returned 1 [0269.924] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0269.925] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0269.925] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0269.925] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0269.925] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0269.925] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0269.926] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145361.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145361.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0269.926] GetFileType (hFile=0x198) returned 0x1 [0269.927] CloseHandle (hObject=0x198) returned 1 [0269.927] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0269.927] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145361.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145361.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5285)) returned 1 [0269.927] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0269.927] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0269.927] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145361.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145361.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5285)) returned 1 [0269.928] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0269.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0269.928] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0269.928] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45cb, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0145373.JPG", cAlternateFileName="")) returned 1 [0269.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0269.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0269.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0269.928] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0269.928] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0269.928] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0269.929] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145373.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145373.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0269.931] GetFileType (hFile=0x198) returned 0x1 [0269.931] CloseHandle (hObject=0x198) returned 1 [0269.931] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0269.931] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145373.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145373.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45cb)) returned 1 [0269.932] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0269.932] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0269.932] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145373.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145373.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45cb)) returned 1 [0269.932] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0269.932] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0269.932] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0269.932] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7c6a, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0145669.JPG", cAlternateFileName="")) returned 1 [0269.932] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0269.932] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0269.932] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0269.933] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0269.933] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0269.933] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0269.933] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145669.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145669.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0269.934] GetFileType (hFile=0x198) returned 0x1 [0269.934] CloseHandle (hObject=0x198) returned 1 [0269.935] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0269.935] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145669.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145669.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7c6a)) returned 1 [0269.935] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0269.935] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0269.935] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145669.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145669.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7c6a)) returned 1 [0269.935] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0269.935] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0269.936] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0269.936] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8fd4, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0145707.JPG", cAlternateFileName="")) returned 1 [0269.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0269.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0269.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0269.936] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0269.936] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0269.936] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0269.937] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145707.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145707.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0270.096] GetFileType (hFile=0x198) returned 0x1 [0270.097] CloseHandle (hObject=0x198) returned 1 [0270.097] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0270.098] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145707.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145707.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8fd4)) returned 1 [0270.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0270.098] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0270.098] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145707.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145707.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8fd4)) returned 1 [0270.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0270.099] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0270.099] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0270.099] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8fb8, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0145810.JPG", cAlternateFileName="")) returned 1 [0270.099] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0270.099] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0270.099] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0270.100] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0270.100] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0270.100] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0270.101] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145810.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145810.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0270.101] GetFileType (hFile=0x198) returned 0x1 [0270.102] CloseHandle (hObject=0x198) returned 1 [0270.103] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0270.103] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145810.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145810.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8fb8)) returned 1 [0270.103] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0270.104] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0270.104] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145810.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145810.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8fb8)) returned 1 [0270.104] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0270.104] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0270.104] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0270.104] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8a5b, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0145879.JPG", cAlternateFileName="")) returned 1 [0270.105] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0270.105] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0270.105] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0270.105] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0270.105] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0270.105] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0270.106] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145879.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145879.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0270.107] GetFileType (hFile=0x198) returned 0x1 [0270.107] CloseHandle (hObject=0x198) returned 1 [0270.108] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0270.108] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145879.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145879.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8a5b)) returned 1 [0270.108] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0270.108] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0270.108] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145879.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145879.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8a5b)) returned 1 [0270.109] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0270.109] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0270.109] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0270.109] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x84a6, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0145895.JPG", cAlternateFileName="")) returned 1 [0270.109] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0270.109] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0270.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0270.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0270.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0270.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0270.111] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145895.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145895.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0270.111] GetFileType (hFile=0x198) returned 0x1 [0270.112] CloseHandle (hObject=0x198) returned 1 [0270.112] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0270.113] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145895.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145895.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x84a6)) returned 1 [0270.113] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0270.113] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0270.113] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145895.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145895.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x84a6)) returned 1 [0270.113] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0270.113] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0270.114] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0270.114] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9a76, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0145904.JPG", cAlternateFileName="")) returned 1 [0270.114] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0270.114] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0270.114] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0270.114] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0270.115] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0270.115] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0270.116] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145904.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145904.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0270.116] GetFileType (hFile=0x198) returned 0x1 [0270.117] CloseHandle (hObject=0x198) returned 1 [0270.117] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0270.118] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145904.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145904.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9a76)) returned 1 [0270.119] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0270.119] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0270.119] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145904.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145904.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9a76)) returned 1 [0270.119] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0270.119] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0270.119] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0270.120] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb5ac, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0146142.JPG", cAlternateFileName="")) returned 1 [0270.120] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0270.120] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0270.120] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0270.120] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0270.120] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0270.120] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0270.121] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0146142.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0146142.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0270.122] GetFileType (hFile=0x198) returned 0x1 [0270.123] CloseHandle (hObject=0x198) returned 1 [0270.123] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0270.123] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0146142.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0146142.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb5ac)) returned 1 [0270.124] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0270.124] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0270.124] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0146142.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0146142.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb5ac)) returned 1 [0270.124] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0270.124] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0270.125] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0270.125] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe81b154, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe81b154, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaa9a, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0148309.JPG", cAlternateFileName="")) returned 1 [0270.125] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0270.125] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0270.125] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0270.125] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0270.126] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0270.126] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0270.127] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148309.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148309.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0270.127] GetFileType (hFile=0x198) returned 0x1 [0270.128] CloseHandle (hObject=0x198) returned 1 [0270.128] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0270.128] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148309.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148309.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe81b154, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe81b154, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaa9a)) returned 1 [0270.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0270.129] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0270.129] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148309.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148309.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe81b154, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe81b154, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaa9a)) returned 1 [0270.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0270.129] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0270.130] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0270.130] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x107d4, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0148757.JPG", cAlternateFileName="")) returned 1 [0270.130] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0270.130] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0270.130] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0270.130] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0270.130] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0270.131] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0270.132] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148757.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148757.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0270.433] GetFileType (hFile=0x19c) returned 0x1 [0270.433] CloseHandle (hObject=0x19c) returned 1 [0270.434] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0270.434] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148757.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148757.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x107d4)) returned 1 [0270.434] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0270.434] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0270.434] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148757.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148757.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x107d4)) returned 1 [0270.435] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0270.435] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0270.435] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0270.435] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe81b154, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x955d, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0148798.JPG", cAlternateFileName="")) returned 1 [0270.435] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0270.435] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0270.435] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0270.435] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0270.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0270.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0270.587] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148798.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148798.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0270.588] GetFileType (hFile=0x174) returned 0x1 [0270.589] CloseHandle (hObject=0x174) returned 1 [0270.589] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0270.589] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148798.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148798.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe81b154, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x955d)) returned 1 [0270.589] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0270.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0270.590] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148798.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148798.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe81b154, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x955d)) returned 1 [0270.590] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0270.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0270.590] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0270.590] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7f4eef, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7f4eef, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6b01, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0149018.JPG", cAlternateFileName="")) returned 1 [0270.591] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0270.591] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0270.591] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0270.591] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0270.591] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0270.591] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0270.592] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149018.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0149018.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0270.593] GetFileType (hFile=0x174) returned 0x1 [0270.593] CloseHandle (hObject=0x174) returned 1 [0270.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0270.594] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149018.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0149018.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7f4eef, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7f4eef, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6b01)) returned 1 [0270.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0270.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0270.595] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149018.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0149018.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7f4eef, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7f4eef, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6b01)) returned 1 [0270.595] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0270.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0270.595] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0270.595] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe81b154, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfd22, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0149118.JPG", cAlternateFileName="")) returned 1 [0270.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0270.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0270.596] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0270.596] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0270.596] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0270.596] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0270.597] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149118.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0149118.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0270.597] GetFileType (hFile=0x174) returned 0x1 [0270.598] CloseHandle (hObject=0x174) returned 1 [0270.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0270.599] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149118.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0149118.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe81b154, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfd22)) returned 1 [0270.599] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0270.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0270.599] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149118.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0149118.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe81b154, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfd22)) returned 1 [0270.599] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0270.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0270.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0270.600] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe81b154, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb544, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0150150.WMF", cAlternateFileName="")) returned 1 [0270.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0270.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0270.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0270.601] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0270.601] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0270.601] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0270.603] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150150.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0150150.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0270.603] GetFileType (hFile=0x174) returned 0x1 [0270.604] CloseHandle (hObject=0x174) returned 1 [0270.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0270.605] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150150.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0150150.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe81b154, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb544)) returned 1 [0270.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0270.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0270.605] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150150.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0150150.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe81b154, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb544)) returned 1 [0270.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0270.606] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0270.606] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0270.606] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7f4eef, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x212e, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0150861.WMF", cAlternateFileName="")) returned 1 [0270.606] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0270.606] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0270.606] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0270.607] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0270.607] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0270.607] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0270.608] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150861.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0150861.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0270.608] GetFileType (hFile=0x174) returned 0x1 [0270.609] CloseHandle (hObject=0x174) returned 1 [0270.610] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0270.610] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150861.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0150861.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7f4eef, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x212e)) returned 1 [0270.610] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0270.610] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0270.610] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150861.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0150861.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7f4eef, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x212e)) returned 1 [0270.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0270.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0270.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0270.611] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe867602, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1104, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0151041.WMF", cAlternateFileName="")) returned 1 [0270.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0270.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0270.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0270.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0270.612] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0270.612] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0270.612] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151041.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151041.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0270.614] GetFileType (hFile=0x174) returned 0x1 [0270.614] CloseHandle (hObject=0x174) returned 1 [0270.615] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0270.615] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151041.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151041.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe867602, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1104)) returned 1 [0270.615] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0270.615] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0270.615] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151041.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151041.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe867602, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1104)) returned 1 [0270.616] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0270.616] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0270.616] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0270.616] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3c68, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0151045.WMF", cAlternateFileName="")) returned 1 [0270.616] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0270.616] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0270.616] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0270.617] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0270.617] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0270.617] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0270.618] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151045.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151045.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0270.618] GetFileType (hFile=0x174) returned 0x1 [0270.619] CloseHandle (hObject=0x174) returned 1 [0270.619] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0270.619] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151045.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151045.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3c68)) returned 1 [0270.619] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0270.620] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0270.620] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151045.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151045.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3c68)) returned 1 [0270.620] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0270.620] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0270.620] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0270.932] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4844, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0151047.WMF", cAlternateFileName="")) returned 1 [0270.932] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0270.932] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0270.932] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0270.932] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0270.933] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0270.933] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0271.042] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151047.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151047.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0271.042] GetFileType (hFile=0x1c0) returned 0x1 [0271.043] CloseHandle (hObject=0x1c0) returned 1 [0271.043] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0271.043] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151047.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151047.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4844)) returned 1 [0271.044] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0271.044] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0271.044] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151047.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151047.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4844)) returned 1 [0271.044] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0271.044] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0271.044] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0271.044] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3928, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0151055.WMF", cAlternateFileName="")) returned 1 [0271.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0271.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0271.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0271.045] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0271.045] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0271.045] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0271.046] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151055.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151055.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0271.046] GetFileType (hFile=0x1c0) returned 0x1 [0271.047] CloseHandle (hObject=0x1c0) returned 1 [0271.047] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0271.048] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151055.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151055.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3928)) returned 1 [0271.048] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0271.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0271.048] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151055.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151055.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3928)) returned 1 [0271.048] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0271.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0271.048] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0271.048] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a60, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0151061.WMF", cAlternateFileName="")) returned 1 [0271.049] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0271.049] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0271.049] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0271.049] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0271.049] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0271.049] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0271.050] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151061.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151061.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0271.050] GetFileType (hFile=0x1c0) returned 0x1 [0271.051] CloseHandle (hObject=0x1c0) returned 1 [0271.051] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0271.051] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151061.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151061.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a60)) returned 1 [0271.051] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0271.052] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0271.052] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151061.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151061.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a60)) returned 1 [0271.052] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0271.052] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0271.052] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0271.052] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2988, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0151063.WMF", cAlternateFileName="")) returned 1 [0271.052] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0271.052] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0271.053] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0271.053] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0271.053] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0271.053] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0271.054] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151063.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151063.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0271.054] GetFileType (hFile=0x1c0) returned 0x1 [0271.055] CloseHandle (hObject=0x1c0) returned 1 [0271.055] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0271.056] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151063.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151063.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2988)) returned 1 [0271.056] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0271.056] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0271.056] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151063.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151063.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2988)) returned 1 [0271.056] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0271.056] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0271.056] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0271.057] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3394, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0151067.WMF", cAlternateFileName="")) returned 1 [0271.057] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0271.057] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0271.057] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0271.057] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0271.057] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0271.057] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0271.058] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151067.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151067.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0271.058] GetFileType (hFile=0x1c0) returned 0x1 [0271.059] CloseHandle (hObject=0x1c0) returned 1 [0271.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0271.059] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151067.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151067.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3394)) returned 1 [0271.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0271.060] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0271.060] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151067.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151067.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3394)) returned 1 [0271.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0271.060] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0271.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0271.060] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3418, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0151073.WMF", cAlternateFileName="")) returned 1 [0271.061] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0271.061] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0271.061] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0271.061] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0271.061] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0271.061] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0271.062] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151073.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151073.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0271.063] GetFileType (hFile=0x1c0) returned 0x1 [0271.063] CloseHandle (hObject=0x1c0) returned 1 [0271.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0271.064] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151073.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151073.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3418)) returned 1 [0271.064] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0271.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0271.064] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151073.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151073.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3418)) returned 1 [0271.064] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0271.065] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0271.065] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0271.065] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0151581.WMF", cAlternateFileName="")) returned 1 [0271.065] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0271.065] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0271.065] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0271.065] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0271.065] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0271.065] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0271.066] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151581.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151581.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0271.067] GetFileType (hFile=0x1c0) returned 0x1 [0271.068] CloseHandle (hObject=0x1c0) returned 1 [0271.068] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0271.068] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151581.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151581.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a00)) returned 1 [0271.068] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0271.069] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0271.069] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151581.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151581.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a00)) returned 1 [0271.069] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0271.069] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0271.069] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0271.069] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x610c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0152414.WMF", cAlternateFileName="")) returned 1 [0271.069] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0271.069] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0271.070] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0271.070] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0271.070] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0271.070] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0271.071] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152414.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152414.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0271.072] GetFileType (hFile=0x1c0) returned 0x1 [0271.072] CloseHandle (hObject=0x1c0) returned 1 [0271.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0271.073] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152414.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152414.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x610c)) returned 1 [0271.073] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0271.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0271.073] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152414.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152414.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x610c)) returned 1 [0271.074] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0271.074] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0271.074] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0271.074] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe867602, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe867602, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe8d9e20, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3734, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0152430.WMF", cAlternateFileName="")) returned 1 [0271.074] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0271.074] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0271.074] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0271.074] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0271.075] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0271.075] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0271.075] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152430.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152430.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0271.446] GetFileType (hFile=0x19c) returned 0x1 [0271.446] CloseHandle (hObject=0x19c) returned 1 [0271.447] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0271.447] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152430.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152430.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe867602, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe867602, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe8d9e20, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3734)) returned 1 [0271.447] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0271.447] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0271.447] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152430.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152430.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe867602, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe867602, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe8d9e20, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3734)) returned 1 [0271.448] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0271.448] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0271.448] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0271.448] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe867602, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe867602, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe88d87c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x406c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0152432.WMF", cAlternateFileName="")) returned 1 [0271.448] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0271.448] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0271.448] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0271.448] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0271.448] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0271.448] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0271.449] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152432.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152432.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0271.449] GetFileType (hFile=0x19c) returned 0x1 [0271.450] CloseHandle (hObject=0x19c) returned 1 [0271.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0271.450] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152432.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152432.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe867602, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe867602, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe88d87c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x406c)) returned 1 [0271.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0271.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0271.450] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152432.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152432.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe867602, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe867602, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe88d87c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x406c)) returned 1 [0271.451] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0271.451] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0271.451] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0271.451] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe867602, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe867602, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe8b3ab6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c4c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0152436.WMF", cAlternateFileName="")) returned 1 [0271.451] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0271.451] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0271.451] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0271.451] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0271.451] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0271.451] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0271.452] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152436.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152436.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0271.452] GetFileType (hFile=0x19c) returned 0x1 [0271.453] CloseHandle (hObject=0x19c) returned 1 [0271.453] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0271.454] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152436.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152436.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe867602, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe867602, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe8b3ab6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c4c)) returned 1 [0271.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0271.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0271.454] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152436.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152436.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe867602, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe867602, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe8b3ab6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c4c)) returned 1 [0271.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0271.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0271.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0271.455] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe867602, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe867602, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe867602, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4030, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0152556.WMF", cAlternateFileName="")) returned 1 [0271.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0271.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0271.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0271.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0271.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0271.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0271.456] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152556.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152556.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0271.456] GetFileType (hFile=0x19c) returned 0x1 [0271.457] CloseHandle (hObject=0x19c) returned 1 [0271.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0271.457] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152556.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152556.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe867602, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe867602, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe867602, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4030)) returned 1 [0271.457] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0271.458] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0271.458] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152556.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152556.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe867602, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe867602, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe867602, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4030)) returned 1 [0271.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0271.458] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0271.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0271.458] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe867602, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3eb4, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0152558.WMF", cAlternateFileName="")) returned 1 [0271.458] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0271.459] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0271.459] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0271.459] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0271.459] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0271.459] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0271.460] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152558.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152558.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0271.460] GetFileType (hFile=0x19c) returned 0x1 [0271.461] CloseHandle (hObject=0x19c) returned 1 [0271.462] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0271.462] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152558.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152558.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe867602, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3eb4)) returned 1 [0271.462] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0271.462] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0271.462] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152558.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152558.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe867602, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3eb4)) returned 1 [0271.462] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0271.463] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0271.463] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0271.463] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a80, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0152560.WMF", cAlternateFileName="")) returned 1 [0271.463] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0271.463] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0271.463] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0271.463] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0271.464] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0271.464] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0271.465] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152560.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152560.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0271.465] GetFileType (hFile=0x19c) returned 0x1 [0271.465] CloseHandle (hObject=0x19c) returned 1 [0271.466] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0271.466] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152560.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152560.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a80)) returned 1 [0271.466] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0271.466] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0271.467] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152560.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152560.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a80)) returned 1 [0271.467] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0271.467] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0271.467] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0271.467] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe867602, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe867602, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe88d87c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe70, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0152568.WMF", cAlternateFileName="")) returned 1 [0271.467] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0271.467] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0271.467] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0271.468] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0271.468] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0271.468] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0271.469] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152568.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152568.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0271.469] GetFileType (hFile=0x19c) returned 0x1 [0271.470] CloseHandle (hObject=0x19c) returned 1 [0271.470] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0271.470] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152568.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152568.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe867602, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe867602, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe88d87c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe70)) returned 1 [0271.471] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0271.471] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0271.471] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152568.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152568.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe867602, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe867602, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe88d87c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe70)) returned 1 [0271.471] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0271.471] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0271.471] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0271.471] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe867602, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd28, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0152570.WMF", cAlternateFileName="")) returned 1 [0271.472] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0271.472] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0271.472] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0271.472] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0271.472] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0271.472] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0271.473] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152570.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152570.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0271.473] GetFileType (hFile=0x19c) returned 0x1 [0271.474] CloseHandle (hObject=0x19c) returned 1 [0271.475] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0271.475] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152570.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152570.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe867602, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd28)) returned 1 [0271.475] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0271.475] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0271.475] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152570.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152570.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe867602, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd28)) returned 1 [0271.475] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0271.476] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0271.476] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0271.476] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe867602, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ab4, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0152590.WMF", cAlternateFileName="")) returned 1 [0271.476] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0271.476] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0271.476] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0271.476] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0271.476] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0271.478] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0271.479] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152590.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152590.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0271.479] GetFileType (hFile=0x19c) returned 0x1 [0271.480] CloseHandle (hObject=0x19c) returned 1 [0271.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0271.480] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152590.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152590.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe867602, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ab4)) returned 1 [0271.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0271.481] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0271.481] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152590.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152590.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe867602, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ab4)) returned 1 [0271.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0271.481] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0271.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0271.481] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe867602, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18c4, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0152594.WMF", cAlternateFileName="")) returned 1 [0271.482] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0271.482] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0271.482] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0271.482] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0271.482] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0271.482] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0271.483] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152594.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152594.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0271.484] GetFileType (hFile=0x19c) returned 0x1 [0271.484] CloseHandle (hObject=0x19c) returned 1 [0271.485] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0271.485] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152594.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152594.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe867602, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18c4)) returned 1 [0271.485] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0271.485] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0271.485] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152594.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152594.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe867602, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18c4)) returned 1 [0271.485] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0271.486] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0271.486] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0271.486] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9261f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9261f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9261f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2628, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0152600.WMF", cAlternateFileName="")) returned 1 [0271.486] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0271.486] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0271.486] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0271.486] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0271.486] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0271.487] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0271.487] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152600.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152600.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0271.489] GetFileType (hFile=0x19c) returned 0x1 [0271.490] CloseHandle (hObject=0x19c) returned 1 [0271.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0271.490] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152600.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152600.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9261f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9261f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9261f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2628)) returned 1 [0271.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0271.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0271.491] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152600.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152600.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9261f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9261f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9261f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2628)) returned 1 [0271.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0271.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0271.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0271.491] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9261f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9261f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe94c4b9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1884, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0152602.WMF", cAlternateFileName="")) returned 1 [0271.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0271.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0271.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0271.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0271.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0271.641] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0271.641] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152602.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152602.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0271.861] GetFileType (hFile=0x1c0) returned 0x1 [0271.862] CloseHandle (hObject=0x1c0) returned 1 [0271.862] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0271.862] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152602.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152602.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9261f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9261f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe94c4b9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1884)) returned 1 [0271.862] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0271.862] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0271.863] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152602.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152602.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9261f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9261f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe94c4b9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1884)) returned 1 [0271.863] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0271.863] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0271.863] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0271.863] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9261f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9261f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9261f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x40f8, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0152606.WMF", cAlternateFileName="")) returned 1 [0271.863] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0271.863] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0271.863] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0271.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0271.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0271.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0272.540] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152606.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152606.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0272.541] GetFileType (hFile=0x174) returned 0x1 [0272.541] CloseHandle (hObject=0x174) returned 1 [0272.542] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0272.542] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152606.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152606.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9261f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9261f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9261f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x40f8)) returned 1 [0272.542] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0272.542] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0272.542] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152606.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152606.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9261f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9261f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9261f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x40f8)) returned 1 [0272.543] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0272.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0272.543] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0272.543] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9261f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9261f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9261f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3094, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0152608.WMF", cAlternateFileName="")) returned 1 [0272.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0272.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0272.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0272.543] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0272.544] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0272.544] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0272.693] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152608.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152608.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0272.693] GetFileType (hFile=0x19c) returned 0x1 [0272.694] CloseHandle (hObject=0x19c) returned 1 [0272.694] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0272.694] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152608.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152608.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9261f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9261f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9261f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3094)) returned 1 [0272.694] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0272.694] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0272.694] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152608.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152608.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9261f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9261f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9261f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3094)) returned 1 [0272.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0272.695] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0272.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0272.695] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe8fff80, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe8fff80, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9261f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1748, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0152610.WMF", cAlternateFileName="")) returned 1 [0272.695] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0272.695] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0272.695] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0272.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0272.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0272.698] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0272.705] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152610.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152610.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0272.706] GetFileType (hFile=0x19c) returned 0x1 [0272.706] CloseHandle (hObject=0x19c) returned 1 [0272.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0272.707] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152610.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152610.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe8fff80, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe8fff80, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9261f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1748)) returned 1 [0272.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0272.707] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0272.707] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152610.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152610.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe8fff80, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe8fff80, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9261f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1748)) returned 1 [0272.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0272.707] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0272.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0272.707] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe88d87c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe88d87c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe8b3ab6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2584, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0152622.WMF", cAlternateFileName="")) returned 1 [0272.707] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0272.708] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0272.708] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0272.708] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0272.708] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0272.708] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0272.709] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152622.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152622.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0272.709] GetFileType (hFile=0x19c) returned 0x1 [0272.709] CloseHandle (hObject=0x19c) returned 1 [0272.710] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0272.710] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152622.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152622.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe88d87c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe88d87c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe8b3ab6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2584)) returned 1 [0272.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0272.710] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0272.710] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152622.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152622.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe88d87c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe88d87c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe8b3ab6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2584)) returned 1 [0272.711] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0272.711] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0272.711] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0272.711] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe8fff80, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe8fff80, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9261f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6688, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0152626.WMF", cAlternateFileName="")) returned 1 [0272.712] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0272.712] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0272.712] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0272.712] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0272.712] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0272.712] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0272.713] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152626.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152626.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0272.713] GetFileType (hFile=0x19c) returned 0x1 [0272.714] CloseHandle (hObject=0x19c) returned 1 [0272.714] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0272.714] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152626.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152626.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe8fff80, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe8fff80, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9261f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6688)) returned 1 [0272.715] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0272.715] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0272.715] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152626.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152626.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe8fff80, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe8fff80, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9261f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6688)) returned 1 [0272.715] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0272.715] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0272.715] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0272.715] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe8d9e20, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe8d9e20, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9261f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x785c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0152628.WMF", cAlternateFileName="")) returned 1 [0272.715] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0272.715] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0272.716] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0272.716] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0272.716] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0272.716] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0272.717] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152628.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152628.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0272.717] GetFileType (hFile=0x19c) returned 0x1 [0272.718] CloseHandle (hObject=0x19c) returned 1 [0272.718] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0272.718] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152628.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152628.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe8d9e20, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe8d9e20, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9261f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x785c)) returned 1 [0272.718] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0272.718] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0272.719] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152628.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152628.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe8d9e20, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe8d9e20, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9261f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x785c)) returned 1 [0272.719] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0272.719] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0272.719] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0272.719] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe8b3ab6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe8b3ab6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe8fff80, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8774, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0152688.WMF", cAlternateFileName="")) returned 1 [0272.719] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0272.719] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0272.719] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0272.720] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0272.720] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0272.720] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0272.720] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152688.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152688.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0272.721] GetFileType (hFile=0x19c) returned 0x1 [0272.721] CloseHandle (hObject=0x19c) returned 1 [0272.722] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0272.722] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152688.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152688.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe8b3ab6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe8b3ab6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe8fff80, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8774)) returned 1 [0272.722] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0272.722] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0272.722] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152688.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152688.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe8b3ab6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe8b3ab6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe8fff80, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8774)) returned 1 [0272.723] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0272.723] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0272.723] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0272.723] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe88d87c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe88d87c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe8fff80, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f4, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0152690.WMF", cAlternateFileName="")) returned 1 [0272.723] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0272.723] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0272.723] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0272.723] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0272.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0272.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0272.724] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152690.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152690.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0272.725] GetFileType (hFile=0x19c) returned 0x1 [0272.725] CloseHandle (hObject=0x19c) returned 1 [0272.726] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0272.726] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152690.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152690.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe88d87c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe88d87c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe8fff80, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f4)) returned 1 [0272.726] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0272.726] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0272.726] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152690.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152690.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe88d87c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe88d87c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe8fff80, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f4)) returned 1 [0272.727] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0272.727] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0272.727] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0272.728] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x544, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0152694.WMF", cAlternateFileName="")) returned 1 [0272.728] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0272.728] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0272.728] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0272.728] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0272.728] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0272.728] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0272.729] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152694.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152694.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0272.729] GetFileType (hFile=0x19c) returned 0x1 [0272.730] CloseHandle (hObject=0x19c) returned 1 [0272.731] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0272.731] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152694.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152694.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x544)) returned 1 [0272.731] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0272.731] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0272.731] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152694.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152694.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x544)) returned 1 [0272.732] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0272.732] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0272.732] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0272.732] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c98, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0152696.WMF", cAlternateFileName="")) returned 1 [0272.732] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0272.732] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0272.732] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0272.732] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0272.733] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0272.733] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0272.734] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152696.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152696.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0272.734] GetFileType (hFile=0x19c) returned 0x1 [0272.735] CloseHandle (hObject=0x19c) returned 1 [0272.735] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0272.735] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152696.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152696.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c98)) returned 1 [0272.736] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0272.736] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0272.736] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152696.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152696.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c98)) returned 1 [0272.736] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0272.736] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0272.736] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0272.736] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea312e2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea312e2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b8, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0152698.WMF", cAlternateFileName="")) returned 1 [0272.737] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0272.737] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0272.737] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0272.737] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0272.737] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0272.737] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0272.738] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152698.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152698.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0272.738] GetFileType (hFile=0x19c) returned 0x1 [0272.739] CloseHandle (hObject=0x19c) returned 1 [0272.739] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0272.739] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152698.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152698.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea312e2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea312e2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b8)) returned 1 [0272.740] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0272.740] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0272.740] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152698.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152698.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea312e2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea312e2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b8)) returned 1 [0272.740] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0272.740] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0272.740] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0272.740] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9e4dce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9e4dce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b8, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0152702.WMF", cAlternateFileName="")) returned 1 [0272.741] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0272.741] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0272.741] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0272.741] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0272.741] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0272.741] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0272.742] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152702.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152702.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0272.742] GetFileType (hFile=0x19c) returned 0x1 [0273.097] CloseHandle (hObject=0x19c) returned 1 [0273.097] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0273.097] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152702.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152702.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9e4dce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9e4dce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b8)) returned 1 [0273.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0273.098] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0273.098] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152702.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152702.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9e4dce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9e4dce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b8)) returned 1 [0273.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0273.098] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0273.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0273.098] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9726d1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9726d1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x674, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0152704.WMF", cAlternateFileName="")) returned 1 [0273.098] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0273.099] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0273.099] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0273.099] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0273.099] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0273.099] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0273.355] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152704.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152704.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0273.356] GetFileType (hFile=0x1c0) returned 0x1 [0273.356] CloseHandle (hObject=0x1c0) returned 1 [0273.356] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0273.357] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152704.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152704.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9726d1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9726d1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x674)) returned 1 [0273.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0273.357] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0273.357] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152704.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152704.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9726d1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9726d1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x674)) returned 1 [0273.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0273.357] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0273.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0273.358] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9261f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9261f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9726d1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x132c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0152708.WMF", cAlternateFileName="")) returned 1 [0273.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238550 [0273.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0273.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0273.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0273.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0273.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238550 | out: hHeap=0x1f0000) returned 1 [0273.359] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152708.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152708.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0273.360] GetFileType (hFile=0x1c0) returned 0x1 [0273.360] CloseHandle (hObject=0x1c0) returned 1 [0273.361] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0273.361] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152708.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152708.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9261f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9261f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9726d1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x132c)) returned 1 [0273.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0273.361] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0273.361] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152708.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152708.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9261f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9261f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9726d1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x132c)) returned 1 [0273.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0273.361] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0273.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0273.362] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe998993, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe998993, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11e4, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0152716.WMF", cAlternateFileName="")) returned 1 [0273.362] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238730 [0273.362] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0273.362] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0273.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0273.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0273.363] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238730 | out: hHeap=0x1f0000) returned 1 [0273.363] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152716.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152716.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0273.364] GetFileType (hFile=0x1c0) returned 0x1 [0273.364] CloseHandle (hObject=0x1c0) returned 1 [0273.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0273.365] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152716.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152716.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe998993, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe998993, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11e4)) returned 1 [0273.365] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0273.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0273.365] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152716.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152716.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe998993, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe998993, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11e4)) returned 1 [0273.365] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0273.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0273.366] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0273.366] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe94c4b9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe94c4b9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe998993, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b6c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0152722.WMF", cAlternateFileName="")) returned 1 [0273.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238550 [0273.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0273.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0273.366] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0273.366] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0273.367] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238550 | out: hHeap=0x1f0000) returned 1 [0273.368] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152722.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152722.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0273.368] GetFileType (hFile=0x1c0) returned 0x1 [0273.369] CloseHandle (hObject=0x1c0) returned 1 [0273.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0273.369] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152722.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152722.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe94c4b9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe94c4b9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe998993, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b6c)) returned 1 [0273.370] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0273.370] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0273.371] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152722.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152722.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe94c4b9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe94c4b9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe998993, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b6c)) returned 1 [0273.371] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0273.371] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0273.371] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0273.371] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9261f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9261f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9e4dce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ec4, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0152876.WMF", cAlternateFileName="")) returned 1 [0273.371] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385f0 [0273.371] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0273.372] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0273.372] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0273.372] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0273.372] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385f0 | out: hHeap=0x1f0000) returned 1 [0273.373] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152876.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152876.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0273.373] GetFileType (hFile=0x1c0) returned 0x1 [0273.374] CloseHandle (hObject=0x1c0) returned 1 [0273.375] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0273.375] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152876.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152876.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9261f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9261f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9e4dce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ec4)) returned 1 [0273.375] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0273.375] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0273.375] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152876.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152876.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9261f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9261f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9e4dce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ec4)) returned 1 [0273.375] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0273.376] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0273.376] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0273.376] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9261f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9261f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe94c4b9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a28, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0152878.WMF", cAlternateFileName="")) returned 1 [0273.376] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238690 [0273.376] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0273.376] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0273.377] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0273.377] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0273.377] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238690 | out: hHeap=0x1f0000) returned 1 [0273.378] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152878.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152878.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0273.378] GetFileType (hFile=0x1c0) returned 0x1 [0273.379] CloseHandle (hObject=0x1c0) returned 1 [0273.379] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0273.379] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152878.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152878.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9261f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9261f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe94c4b9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a28)) returned 1 [0273.380] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0273.380] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0273.380] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152878.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152878.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9261f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9261f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe94c4b9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a28)) returned 1 [0273.380] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0273.380] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0273.381] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0273.381] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2370, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0152882.WMF", cAlternateFileName="")) returned 1 [0273.381] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385f0 [0273.381] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0273.381] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0273.381] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0273.381] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0273.382] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385f0 | out: hHeap=0x1f0000) returned 1 [0273.382] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152882.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152882.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0273.383] GetFileType (hFile=0x1c0) returned 0x1 [0273.383] CloseHandle (hObject=0x1c0) returned 1 [0273.384] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0273.384] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152882.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152882.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2370)) returned 1 [0273.384] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0273.385] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0273.385] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152882.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152882.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2370)) returned 1 [0273.385] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0273.386] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0273.386] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0273.386] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b2c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0152884.WMF", cAlternateFileName="")) returned 1 [0273.386] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238730 [0273.386] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0273.387] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0273.387] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0273.387] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0273.387] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238730 | out: hHeap=0x1f0000) returned 1 [0273.388] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152884.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152884.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0273.388] GetFileType (hFile=0x1c0) returned 0x1 [0273.389] CloseHandle (hObject=0x1c0) returned 1 [0273.390] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0273.390] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152884.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152884.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b2c)) returned 1 [0273.390] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0273.390] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0273.390] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152884.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152884.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b2c)) returned 1 [0273.390] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0273.391] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0273.391] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0273.391] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x794, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0152890.WMF", cAlternateFileName="")) returned 1 [0273.391] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238690 [0273.391] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0273.391] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0273.391] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0273.392] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0273.392] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238690 | out: hHeap=0x1f0000) returned 1 [0273.393] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152890.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152890.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0273.393] GetFileType (hFile=0x1c0) returned 0x1 [0273.394] CloseHandle (hObject=0x1c0) returned 1 [0273.394] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0273.394] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152890.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152890.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x794)) returned 1 [0273.395] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0273.395] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0273.395] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152890.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152890.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x794)) returned 1 [0273.395] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0273.395] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0273.395] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0273.395] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x29ac, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0152892.WMF", cAlternateFileName="")) returned 1 [0273.396] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385c8 [0273.396] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0273.396] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0273.396] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0273.396] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0273.396] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385c8 | out: hHeap=0x1f0000) returned 1 [0273.397] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152892.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152892.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0273.398] GetFileType (hFile=0x1c0) returned 0x1 [0273.398] CloseHandle (hObject=0x1c0) returned 1 [0273.399] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0273.399] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152892.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152892.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x29ac)) returned 1 [0273.399] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0273.399] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0273.399] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152892.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152892.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x29ac)) returned 1 [0273.399] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0273.400] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0273.400] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0273.400] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c54, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0152894.WMF", cAlternateFileName="")) returned 1 [0273.400] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2386b8 [0273.400] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0273.400] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0273.400] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0273.401] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0273.699] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2386b8 | out: hHeap=0x1f0000) returned 1 [0273.800] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152894.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152894.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0273.801] GetFileType (hFile=0x198) returned 0x1 [0273.801] CloseHandle (hObject=0x198) returned 1 [0273.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0273.802] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152894.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152894.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c54)) returned 1 [0273.802] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0273.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0273.802] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152894.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152894.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c54)) returned 1 [0273.803] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0273.803] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0273.803] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0273.803] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1190, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0152898.WMF", cAlternateFileName="")) returned 1 [0273.803] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238618 [0273.803] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0273.803] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0273.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0273.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0273.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238618 | out: hHeap=0x1f0000) returned 1 [0273.805] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152898.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152898.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0273.805] GetFileType (hFile=0x198) returned 0x1 [0273.806] CloseHandle (hObject=0x198) returned 1 [0273.806] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0273.806] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152898.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152898.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1190)) returned 1 [0273.806] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0273.807] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0273.807] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152898.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152898.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1190)) returned 1 [0273.807] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0273.808] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0273.808] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0273.808] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x812c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0153047.WMF", cAlternateFileName="")) returned 1 [0273.808] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238690 [0273.808] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0273.808] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0273.808] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0273.808] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0273.809] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238690 | out: hHeap=0x1f0000) returned 1 [0273.809] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153047.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153047.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0273.810] GetFileType (hFile=0x198) returned 0x1 [0273.810] CloseHandle (hObject=0x198) returned 1 [0273.811] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0273.811] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153047.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153047.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x812c)) returned 1 [0273.811] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0273.811] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0273.811] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153047.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153047.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x812c)) returned 1 [0273.812] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0273.812] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0273.812] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0273.812] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x778, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0153087.WMF", cAlternateFileName="")) returned 1 [0273.812] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385f0 [0273.812] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0273.812] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0273.812] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0273.813] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0273.813] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385f0 | out: hHeap=0x1f0000) returned 1 [0273.813] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153087.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153087.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0273.814] GetFileType (hFile=0x198) returned 0x1 [0273.814] CloseHandle (hObject=0x198) returned 1 [0273.815] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0273.815] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153087.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153087.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x778)) returned 1 [0273.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0273.815] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0273.815] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153087.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153087.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x778)) returned 1 [0273.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0273.816] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0273.816] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0273.816] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ea8, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0153089.WMF", cAlternateFileName="")) returned 1 [0273.816] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238578 [0273.816] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0273.816] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0273.816] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0273.816] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0273.817] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238578 | out: hHeap=0x1f0000) returned 1 [0273.817] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153089.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153089.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0273.818] GetFileType (hFile=0x198) returned 0x1 [0273.818] CloseHandle (hObject=0x198) returned 1 [0273.818] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0273.819] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153089.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153089.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ea8)) returned 1 [0273.819] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0273.819] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0273.819] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153089.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153089.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ea8)) returned 1 [0273.819] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0273.819] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0273.819] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0273.819] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fc8, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0153091.WMF", cAlternateFileName="")) returned 1 [0273.819] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238690 [0273.820] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0273.820] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0273.820] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0273.820] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0273.820] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238690 | out: hHeap=0x1f0000) returned 1 [0273.821] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153091.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153091.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0273.821] GetFileType (hFile=0x198) returned 0x1 [0273.821] CloseHandle (hObject=0x198) returned 1 [0273.822] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0273.822] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153091.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153091.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fc8)) returned 1 [0273.822] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0273.822] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0273.822] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153091.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153091.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fc8)) returned 1 [0273.822] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0273.822] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0273.823] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0273.823] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x22b0, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0153093.WMF", cAlternateFileName="")) returned 1 [0273.823] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2386b8 [0273.823] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0273.823] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0273.824] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0273.824] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0273.824] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2386b8 | out: hHeap=0x1f0000) returned 1 [0273.824] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153093.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153093.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0273.825] GetFileType (hFile=0x198) returned 0x1 [0273.825] CloseHandle (hObject=0x198) returned 1 [0273.825] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0273.825] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153093.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153093.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x22b0)) returned 1 [0273.826] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0273.826] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0273.826] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153093.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153093.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x22b0)) returned 1 [0273.826] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0273.826] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0273.826] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0273.826] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe78, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0153095.WMF", cAlternateFileName="")) returned 1 [0273.826] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238668 [0273.826] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0273.826] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0273.826] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0273.826] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0273.826] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238668 | out: hHeap=0x1f0000) returned 1 [0273.827] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153095.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153095.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0273.827] GetFileType (hFile=0x198) returned 0x1 [0273.828] CloseHandle (hObject=0x198) returned 1 [0273.828] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0273.828] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153095.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153095.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe78)) returned 1 [0273.828] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0273.828] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0273.828] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153095.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153095.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe78)) returned 1 [0273.829] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0273.829] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0273.829] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0273.829] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc0, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0153265.WMF", cAlternateFileName="")) returned 1 [0273.829] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2386e0 [0273.829] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0273.829] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0273.829] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0273.829] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0273.829] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2386e0 | out: hHeap=0x1f0000) returned 1 [0273.830] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153265.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153265.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0273.830] GetFileType (hFile=0x198) returned 0x1 [0273.831] CloseHandle (hObject=0x198) returned 1 [0273.831] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0273.831] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153265.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153265.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc0)) returned 1 [0273.831] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0273.831] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0273.831] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153265.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153265.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc0)) returned 1 [0273.832] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0273.832] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0273.832] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0273.832] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e80, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0153273.WMF", cAlternateFileName="")) returned 1 [0273.832] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238640 [0273.832] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0273.832] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0273.832] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0273.832] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0273.832] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238640 | out: hHeap=0x1f0000) returned 1 [0273.833] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153273.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153273.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0273.833] GetFileType (hFile=0x198) returned 0x1 [0273.834] CloseHandle (hObject=0x198) returned 1 [0273.834] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0273.834] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153273.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153273.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e80)) returned 1 [0273.834] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0273.834] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0273.834] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153273.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153273.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e80)) returned 1 [0273.835] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0273.835] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0273.835] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0273.835] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8f0c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0153299.WMF", cAlternateFileName="")) returned 1 [0273.835] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238690 [0273.835] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0273.835] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0273.835] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0273.835] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0273.836] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238690 | out: hHeap=0x1f0000) returned 1 [0273.836] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153299.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153299.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0273.837] GetFileType (hFile=0x198) returned 0x1 [0273.837] CloseHandle (hObject=0x198) returned 1 [0273.837] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0273.838] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153299.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153299.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8f0c)) returned 1 [0273.838] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0273.838] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0273.838] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153299.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153299.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8f0c)) returned 1 [0273.838] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0274.145] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0274.145] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0274.145] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7850, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0153302.WMF", cAlternateFileName="")) returned 1 [0274.145] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238780 [0274.146] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0274.146] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0274.146] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0274.146] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0274.146] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238780 | out: hHeap=0x1f0000) returned 1 [0274.147] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153302.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153302.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0274.147] GetFileType (hFile=0x174) returned 0x1 [0274.148] CloseHandle (hObject=0x174) returned 1 [0274.148] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0274.148] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153302.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153302.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7850)) returned 1 [0274.148] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0274.149] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0274.149] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153302.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153302.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7850)) returned 1 [0274.149] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0274.149] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0274.149] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0274.149] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9658, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0153305.WMF", cAlternateFileName="")) returned 1 [0274.149] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238780 [0274.150] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0274.150] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0274.150] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0274.150] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0274.150] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238780 | out: hHeap=0x1f0000) returned 1 [0274.151] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153305.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153305.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0274.151] GetFileType (hFile=0x174) returned 0x1 [0274.152] CloseHandle (hObject=0x174) returned 1 [0274.152] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0274.152] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153305.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153305.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9658)) returned 1 [0274.153] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0274.153] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0274.153] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153305.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153305.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9658)) returned 1 [0274.153] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0274.153] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0274.153] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0274.153] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3c58, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0153307.WMF", cAlternateFileName="")) returned 1 [0274.154] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238780 [0274.154] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0274.154] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0274.154] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0274.154] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0274.154] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238780 | out: hHeap=0x1f0000) returned 1 [0274.155] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153307.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153307.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0274.156] GetFileType (hFile=0x174) returned 0x1 [0274.156] CloseHandle (hObject=0x174) returned 1 [0274.157] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0274.157] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153307.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153307.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3c58)) returned 1 [0274.157] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0274.157] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0274.157] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153307.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153307.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3c58)) returned 1 [0274.157] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0274.158] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0274.158] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0274.158] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4238, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0153313.WMF", cAlternateFileName="")) returned 1 [0274.158] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238578 [0274.158] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0274.158] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0274.158] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0274.158] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0274.159] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238578 | out: hHeap=0x1f0000) returned 1 [0274.159] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153313.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153313.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0274.160] GetFileType (hFile=0x174) returned 0x1 [0274.160] CloseHandle (hObject=0x174) returned 1 [0274.161] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0274.161] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153313.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153313.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4238)) returned 1 [0274.161] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0274.161] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0274.161] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153313.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153313.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4238)) returned 1 [0274.162] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0274.162] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0274.162] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0274.162] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4464, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0153398.WMF", cAlternateFileName="")) returned 1 [0274.162] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384d8 [0274.162] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0274.162] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0274.163] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0274.163] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0274.163] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384d8 | out: hHeap=0x1f0000) returned 1 [0274.163] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153398.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153398.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0274.164] GetFileType (hFile=0x174) returned 0x1 [0274.164] CloseHandle (hObject=0x174) returned 1 [0274.165] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0274.165] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153398.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153398.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4464)) returned 1 [0274.165] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0274.165] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0274.165] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153398.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153398.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4464)) returned 1 [0274.165] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0274.165] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0274.166] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0274.166] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaa396f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x85d0, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0153508.WMF", cAlternateFileName="")) returned 1 [0274.166] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238690 [0274.166] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0274.166] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0274.166] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0274.166] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0274.166] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238690 | out: hHeap=0x1f0000) returned 1 [0274.167] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153508.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153508.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0274.167] GetFileType (hFile=0x174) returned 0x1 [0274.168] CloseHandle (hObject=0x174) returned 1 [0274.168] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0274.168] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153508.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153508.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaa396f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x85d0)) returned 1 [0274.168] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0274.168] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0274.169] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153508.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153508.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaa396f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x85d0)) returned 1 [0274.169] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0274.169] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0274.169] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0274.169] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31d0, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0153514.WMF", cAlternateFileName="")) returned 1 [0274.169] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238780 [0274.169] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0274.169] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0274.169] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0274.169] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0274.169] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238780 | out: hHeap=0x1f0000) returned 1 [0274.170] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153514.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153514.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0274.170] GetFileType (hFile=0x174) returned 0x1 [0274.170] CloseHandle (hObject=0x174) returned 1 [0274.171] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0274.171] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153514.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153514.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31d0)) returned 1 [0274.171] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0274.171] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0274.171] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153514.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153514.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31d0)) returned 1 [0274.171] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0274.172] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0274.172] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0274.172] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d08, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0153516.WMF", cAlternateFileName="")) returned 1 [0274.172] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238780 [0274.172] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0274.172] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0274.172] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0274.172] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0274.172] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238780 | out: hHeap=0x1f0000) returned 1 [0274.173] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153516.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153516.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0274.173] GetFileType (hFile=0x174) returned 0x1 [0274.174] CloseHandle (hObject=0x174) returned 1 [0274.174] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0274.174] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153516.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153516.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d08)) returned 1 [0274.175] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0274.175] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0274.175] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153516.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153516.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d08)) returned 1 [0274.175] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0274.175] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0274.175] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0274.175] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30f0, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0153518.WMF", cAlternateFileName="")) returned 1 [0274.177] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238578 [0274.177] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0274.177] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0274.177] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0274.177] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0274.177] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238578 | out: hHeap=0x1f0000) returned 1 [0274.178] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153518.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153518.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0274.178] GetFileType (hFile=0x174) returned 0x1 [0274.179] CloseHandle (hObject=0x174) returned 1 [0274.179] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0274.180] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153518.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153518.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30f0)) returned 1 [0274.180] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0274.180] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0274.180] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153518.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153518.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30f0)) returned 1 [0274.180] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0274.180] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0274.181] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0274.181] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x560, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0156537.WMF", cAlternateFileName="")) returned 1 [0274.181] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238780 [0274.181] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0274.181] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0274.181] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0274.181] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0274.181] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238780 | out: hHeap=0x1f0000) returned 1 [0274.182] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0156537.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0156537.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0274.182] GetFileType (hFile=0x174) returned 0x1 [0274.183] CloseHandle (hObject=0x174) returned 1 [0274.183] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0274.183] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0156537.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0156537.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x560)) returned 1 [0274.184] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0274.184] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0274.184] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0156537.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0156537.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x560)) returned 1 [0274.184] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0274.184] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0274.184] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0274.184] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb66e, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0157167.WMF", cAlternateFileName="")) returned 1 [0274.185] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238780 [0274.185] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0274.185] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0274.185] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0274.185] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0274.185] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238780 | out: hHeap=0x1f0000) returned 1 [0274.186] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157167.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157167.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0274.186] GetFileType (hFile=0x174) returned 0x1 [0274.187] CloseHandle (hObject=0x174) returned 1 [0274.187] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0274.187] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157167.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157167.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb66e)) returned 1 [0274.188] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0274.188] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0274.188] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157167.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157167.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb66e)) returned 1 [0274.188] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0274.188] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0274.188] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0274.188] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x54d4, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0157177.WMF", cAlternateFileName="")) returned 1 [0274.189] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238780 [0274.189] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0274.189] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0274.189] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0274.189] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0274.189] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238780 | out: hHeap=0x1f0000) returned 1 [0274.190] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157177.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157177.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0274.190] GetFileType (hFile=0x174) returned 0x1 [0274.191] CloseHandle (hObject=0x174) returned 1 [0274.191] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0274.191] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157177.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157177.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x54d4)) returned 1 [0274.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0274.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0274.455] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157177.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157177.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x54d4)) returned 1 [0274.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0274.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0274.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0274.455] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45f8, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0157191.WMF", cAlternateFileName="")) returned 1 [0274.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238780 [0274.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0274.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0274.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0274.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0274.456] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238780 | out: hHeap=0x1f0000) returned 1 [0274.712] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157191.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157191.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0274.712] GetFileType (hFile=0x174) returned 0x1 [0274.713] CloseHandle (hObject=0x174) returned 1 [0274.713] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0274.713] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157191.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157191.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45f8)) returned 1 [0274.714] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0274.714] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0274.714] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157191.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157191.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45f8)) returned 1 [0274.714] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0274.714] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0274.714] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0274.714] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c84, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0157831.WMF", cAlternateFileName="")) returned 1 [0274.714] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0274.714] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0274.715] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0274.715] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0274.715] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0274.715] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0274.716] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157831.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157831.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0274.716] GetFileType (hFile=0x174) returned 0x1 [0274.716] CloseHandle (hObject=0x174) returned 1 [0274.716] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0274.717] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157831.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157831.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c84)) returned 1 [0274.717] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0274.717] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0274.717] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157831.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157831.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c84)) returned 1 [0274.717] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0274.717] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0274.717] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0274.717] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x48dc, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0158071.WMF", cAlternateFileName="")) returned 1 [0274.718] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0274.718] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0274.718] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0274.718] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0274.718] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0274.718] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0274.719] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0158071.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0158071.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0274.719] GetFileType (hFile=0x174) returned 0x1 [0274.720] CloseHandle (hObject=0x174) returned 1 [0274.720] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0274.720] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0158071.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0158071.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x48dc)) returned 1 [0274.720] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0274.720] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0274.720] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0158071.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0158071.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x48dc)) returned 1 [0274.721] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0274.721] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0274.721] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0274.721] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x462e, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0158477.WMF", cAlternateFileName="")) returned 1 [0274.721] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0274.721] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0274.721] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0274.721] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0274.721] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0274.722] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0274.722] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0158477.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0158477.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0274.723] GetFileType (hFile=0x174) returned 0x1 [0274.724] CloseHandle (hObject=0x174) returned 1 [0274.724] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0274.724] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0158477.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0158477.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x462e)) returned 1 [0274.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0274.724] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0274.725] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0158477.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0158477.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x462e)) returned 1 [0274.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0274.725] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0274.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0274.725] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x72de, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0160590.WMF", cAlternateFileName="")) returned 1 [0274.725] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0274.725] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0274.725] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0274.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0274.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0274.726] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0274.726] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0160590.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0160590.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0274.726] GetFileType (hFile=0x174) returned 0x1 [0274.727] CloseHandle (hObject=0x174) returned 1 [0274.727] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0274.727] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0160590.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0160590.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x72de)) returned 1 [0274.727] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0274.727] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0274.727] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0160590.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0160590.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x72de)) returned 1 [0274.727] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0274.727] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0274.728] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0274.728] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb594, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0164153.JPG", cAlternateFileName="")) returned 1 [0274.728] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0274.728] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0274.728] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0274.728] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0274.728] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0274.728] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0274.729] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0164153.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0164153.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0274.729] GetFileType (hFile=0x174) returned 0x1 [0274.729] CloseHandle (hObject=0x174) returned 1 [0274.729] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0274.730] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0164153.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0164153.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb594)) returned 1 [0274.730] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0274.730] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0274.730] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0164153.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0164153.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb594)) returned 1 [0274.730] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0274.730] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0274.730] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0274.730] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaa396f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaa396f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x51aa, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0168644.WMF", cAlternateFileName="")) returned 1 [0274.730] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0274.730] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0274.730] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0274.730] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0274.731] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0274.731] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0274.731] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0168644.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0168644.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0274.731] GetFileType (hFile=0x174) returned 0x1 [0274.732] CloseHandle (hObject=0x174) returned 1 [0274.732] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0274.732] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0168644.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0168644.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaa396f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaa396f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x51aa)) returned 1 [0274.732] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0274.732] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0274.732] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0168644.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0168644.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaa396f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaa396f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x51aa)) returned 1 [0274.733] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0274.733] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0274.733] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0274.733] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3888, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0171685.WMF", cAlternateFileName="")) returned 1 [0274.733] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0274.733] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0274.733] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0274.733] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0274.733] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0274.733] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0274.734] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0171685.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0171685.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0274.734] GetFileType (hFile=0x174) returned 0x1 [0274.735] CloseHandle (hObject=0x174) returned 1 [0274.735] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0274.735] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0171685.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0171685.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3888)) returned 1 [0274.735] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0274.736] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0274.736] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0171685.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0171685.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3888)) returned 1 [0274.736] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0274.736] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0274.736] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0274.736] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaa396f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ae8, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0171847.WMF", cAlternateFileName="")) returned 1 [0274.736] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0274.736] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0274.736] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0274.737] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0274.737] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0274.737] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0274.737] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0171847.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0171847.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0274.738] GetFileType (hFile=0x174) returned 0x1 [0274.738] CloseHandle (hObject=0x174) returned 1 [0274.786] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0274.786] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0171847.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0171847.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaa396f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ae8)) returned 1 [0274.787] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0274.787] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0274.787] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0171847.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0171847.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaa396f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ae8)) returned 1 [0274.787] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0274.787] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0274.787] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0274.787] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaa396f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaa396f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d18, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0172035.WMF", cAlternateFileName="")) returned 1 [0274.788] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0274.788] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0274.788] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0274.788] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0274.788] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0274.788] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0274.789] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172035.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0172035.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0274.789] GetFileType (hFile=0x174) returned 0x1 [0274.790] CloseHandle (hObject=0x174) returned 1 [0274.790] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0274.790] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172035.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0172035.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaa396f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaa396f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d18)) returned 1 [0274.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0274.791] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0274.791] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172035.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0172035.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaa396f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaa396f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d18)) returned 1 [0274.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0274.791] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0274.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0274.792] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b74, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0172067.WMF", cAlternateFileName="")) returned 1 [0274.792] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0274.792] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0274.792] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0274.792] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0274.792] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0274.792] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0274.793] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172067.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0172067.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0274.793] GetFileType (hFile=0x174) returned 0x1 [0274.794] CloseHandle (hObject=0x174) returned 1 [0274.794] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0274.795] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172067.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0172067.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b74)) returned 1 [0274.795] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0274.795] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0274.795] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172067.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0172067.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b74)) returned 1 [0274.795] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0274.795] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0274.796] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0274.796] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaa396f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3198, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0172193.WMF", cAlternateFileName="")) returned 1 [0274.796] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0274.796] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0274.796] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0274.796] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0274.796] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0274.797] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0274.797] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172193.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0172193.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0274.797] GetFileType (hFile=0x174) returned 0x1 [0274.798] CloseHandle (hObject=0x174) returned 1 [0274.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0274.799] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172193.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0172193.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaa396f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3198)) returned 1 [0274.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0274.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0274.799] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172193.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0172193.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaa396f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3198)) returned 1 [0274.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0274.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0274.800] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0274.800] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16e8, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0174315.WMF", cAlternateFileName="")) returned 1 [0274.800] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0274.800] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0274.800] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0274.800] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0274.800] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0274.800] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0275.138] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174315.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174315.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0275.139] GetFileType (hFile=0x1c0) returned 0x1 [0275.139] CloseHandle (hObject=0x1c0) returned 1 [0275.140] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0275.140] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174315.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174315.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16e8)) returned 1 [0275.140] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0275.140] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0275.140] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174315.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174315.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16e8)) returned 1 [0275.140] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0275.141] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0275.141] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0275.141] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2608, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0174635.WMF", cAlternateFileName="")) returned 1 [0275.141] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0275.141] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0275.141] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0275.141] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0275.141] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0275.142] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0275.142] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174635.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174635.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0275.143] GetFileType (hFile=0x1c0) returned 0x1 [0275.143] CloseHandle (hObject=0x1c0) returned 1 [0275.144] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0275.144] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174635.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174635.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2608)) returned 1 [0275.144] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0275.144] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0275.145] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174635.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174635.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2608)) returned 1 [0275.145] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0275.146] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0275.146] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0275.146] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13ec, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0174639.WMF", cAlternateFileName="")) returned 1 [0275.146] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0275.146] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0275.146] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0275.146] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0275.147] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0275.147] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0275.148] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174639.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174639.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0275.148] GetFileType (hFile=0x1c0) returned 0x1 [0275.149] CloseHandle (hObject=0x1c0) returned 1 [0275.149] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0275.149] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174639.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174639.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13ec)) returned 1 [0275.149] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0275.150] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0275.150] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174639.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174639.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13ec)) returned 1 [0275.150] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0275.150] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0275.150] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0275.150] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6196, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0174952.JPG", cAlternateFileName="")) returned 1 [0275.151] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0275.151] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0275.151] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0275.151] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0275.151] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0275.151] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0275.152] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174952.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174952.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0275.153] GetFileType (hFile=0x1c0) returned 0x1 [0275.153] CloseHandle (hObject=0x1c0) returned 1 [0275.154] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0275.154] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174952.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174952.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6196)) returned 1 [0275.154] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0275.154] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0275.155] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174952.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174952.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6196)) returned 1 [0275.155] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0275.155] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0275.155] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0275.155] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb57d, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0175361.JPG", cAlternateFileName="")) returned 1 [0275.155] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0275.155] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0275.156] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0275.156] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0275.156] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0275.156] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0275.157] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175361.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0175361.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0275.157] GetFileType (hFile=0x1c0) returned 0x1 [0275.158] CloseHandle (hObject=0x1c0) returned 1 [0275.158] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0275.159] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175361.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0175361.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb57d)) returned 1 [0275.159] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0275.159] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0275.159] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175361.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0175361.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb57d)) returned 1 [0275.159] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0275.160] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0275.160] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0275.160] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x38d8, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0175428.JPG", cAlternateFileName="")) returned 1 [0275.160] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0275.161] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0275.161] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0275.161] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0275.161] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0275.161] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0275.162] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175428.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0175428.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0275.163] GetFileType (hFile=0x1c0) returned 0x1 [0275.163] CloseHandle (hObject=0x1c0) returned 1 [0275.164] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0275.164] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175428.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0175428.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x38d8)) returned 1 [0275.164] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0275.164] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0275.164] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175428.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0175428.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x38d8)) returned 1 [0275.165] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0275.165] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0275.165] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0275.165] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb12e, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0177257.JPG", cAlternateFileName="")) returned 1 [0275.165] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0275.165] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0275.165] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0275.166] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0275.166] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0275.166] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0275.167] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177257.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0177257.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0275.167] GetFileType (hFile=0x1c0) returned 0x1 [0275.168] CloseHandle (hObject=0x1c0) returned 1 [0275.168] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0275.168] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177257.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0177257.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb12e)) returned 1 [0275.169] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0275.169] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0275.169] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177257.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0177257.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb12e)) returned 1 [0275.169] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0275.169] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0275.169] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0275.169] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd902, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0177806.JPG", cAlternateFileName="")) returned 1 [0275.170] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0275.170] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0275.170] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0275.170] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0275.170] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0275.170] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0275.171] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177806.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0177806.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0275.172] GetFileType (hFile=0x1c0) returned 0x1 [0275.172] CloseHandle (hObject=0x1c0) returned 1 [0275.173] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0275.173] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177806.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0177806.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd902)) returned 1 [0275.173] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0275.173] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0275.173] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177806.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0177806.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd902)) returned 1 [0275.174] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0275.174] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0275.174] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0275.174] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x907d, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0178348.JPG", cAlternateFileName="")) returned 1 [0275.174] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0275.174] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0275.174] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0275.175] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0275.175] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0275.175] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0275.598] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178348.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178348.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0275.598] GetFileType (hFile=0x224) returned 0x1 [0275.599] CloseHandle (hObject=0x224) returned 1 [0275.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0275.599] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178348.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178348.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x907d)) returned 1 [0275.599] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0275.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0275.600] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178348.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178348.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x907d)) returned 1 [0275.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0275.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0275.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0275.600] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7214, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0178459.JPG", cAlternateFileName="")) returned 1 [0275.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0275.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0275.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0275.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0275.601] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0275.601] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0275.601] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178459.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178459.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0275.602] GetFileType (hFile=0x224) returned 0x1 [0275.602] CloseHandle (hObject=0x224) returned 1 [0275.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0275.603] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178459.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178459.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7214)) returned 1 [0275.603] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0275.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0275.603] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178459.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178459.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7214)) returned 1 [0275.603] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0275.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0275.603] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0275.603] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x67a3, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0178460.JPG", cAlternateFileName="")) returned 1 [0275.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0275.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0275.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0275.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0275.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0275.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0275.605] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178460.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178460.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0275.605] GetFileType (hFile=0x224) returned 0x1 [0275.605] CloseHandle (hObject=0x224) returned 1 [0275.606] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0275.606] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178460.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178460.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x67a3)) returned 1 [0275.606] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0275.606] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0275.607] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178460.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178460.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x67a3)) returned 1 [0275.607] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0275.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0275.607] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0275.607] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5de2, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0178523.JPG", cAlternateFileName="")) returned 1 [0275.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0275.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0275.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0275.607] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0275.608] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0275.608] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0275.608] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178523.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178523.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0275.608] GetFileType (hFile=0x224) returned 0x1 [0275.609] CloseHandle (hObject=0x224) returned 1 [0275.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0275.609] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178523.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178523.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5de2)) returned 1 [0275.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0275.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0275.610] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178523.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178523.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5de2)) returned 1 [0275.610] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0275.610] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0275.610] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0275.610] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5b2a, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0178632.JPG", cAlternateFileName="")) returned 1 [0275.610] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0275.610] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0275.610] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0275.610] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0275.610] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0275.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0275.611] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178632.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178632.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0275.612] GetFileType (hFile=0x224) returned 0x1 [0275.612] CloseHandle (hObject=0x224) returned 1 [0275.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0275.613] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178632.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178632.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5b2a)) returned 1 [0275.613] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0275.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0275.613] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178632.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178632.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5b2a)) returned 1 [0275.614] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0275.614] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0275.614] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0275.614] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7d26, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0178639.JPG", cAlternateFileName="")) returned 1 [0275.614] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0275.614] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0275.615] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0275.615] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0275.615] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0275.615] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0275.616] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178639.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178639.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0275.616] GetFileType (hFile=0x224) returned 0x1 [0275.616] CloseHandle (hObject=0x224) returned 1 [0275.617] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0275.617] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178639.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178639.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7d26)) returned 1 [0275.617] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0275.617] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0275.617] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178639.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178639.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7d26)) returned 1 [0275.617] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0275.617] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0275.617] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0275.618] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8a0c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0178932.JPG", cAlternateFileName="")) returned 1 [0275.618] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0275.618] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0275.618] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0275.618] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0275.618] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0275.618] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0275.619] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178932.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178932.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0275.619] GetFileType (hFile=0x224) returned 0x1 [0275.619] CloseHandle (hObject=0x224) returned 1 [0275.620] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0275.620] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178932.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178932.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8a0c)) returned 1 [0275.620] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0275.620] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0275.620] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178932.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178932.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8a0c)) returned 1 [0275.620] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0275.620] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0275.620] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0275.620] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7d6e, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0179963.JPG", cAlternateFileName="")) returned 1 [0275.621] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0275.621] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0275.621] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0275.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0275.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0275.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0275.621] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0179963.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0179963.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0275.621] GetFileType (hFile=0x224) returned 0x1 [0275.622] CloseHandle (hObject=0x224) returned 1 [0275.622] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0275.622] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0179963.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0179963.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7d6e)) returned 1 [0275.622] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0275.622] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0275.622] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0179963.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0179963.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7d6e)) returned 1 [0275.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0275.623] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0275.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0275.623] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x40e7, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0182689.JPG", cAlternateFileName="")) returned 1 [0275.623] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0275.623] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0275.623] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0275.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0275.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0275.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0275.624] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182689.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182689.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0275.624] GetFileType (hFile=0x224) returned 0x1 [0275.624] CloseHandle (hObject=0x224) returned 1 [0275.624] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0275.624] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182689.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182689.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x40e7)) returned 1 [0275.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0275.625] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0275.625] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182689.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182689.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x40e7)) returned 1 [0275.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0275.625] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0275.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0275.625] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5f48, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0182888.WMF", cAlternateFileName="")) returned 1 [0275.625] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0275.625] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0275.625] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0275.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0275.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0275.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0275.626] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182888.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182888.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0275.626] GetFileType (hFile=0x224) returned 0x1 [0275.626] CloseHandle (hObject=0x224) returned 1 [0275.627] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0275.627] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182888.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182888.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5f48)) returned 1 [0275.627] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0275.627] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0275.627] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182888.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182888.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5f48)) returned 1 [0275.627] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0275.627] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0275.627] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0275.627] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b2e, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0182898.WMF", cAlternateFileName="")) returned 1 [0275.628] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0275.628] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0275.628] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0275.628] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0275.628] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0275.628] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0275.629] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182898.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182898.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0276.020] GetFileType (hFile=0x1c0) returned 0x1 [0276.021] CloseHandle (hObject=0x1c0) returned 1 [0276.021] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0276.021] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182898.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182898.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b2e)) returned 1 [0276.021] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0276.022] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0276.022] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182898.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182898.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b2e)) returned 1 [0276.022] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0276.022] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0276.022] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0276.022] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e8e, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0182902.WMF", cAlternateFileName="")) returned 1 [0276.022] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0276.022] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0276.023] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0276.023] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0276.023] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0276.023] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0276.023] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182902.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182902.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0276.024] GetFileType (hFile=0x1c0) returned 0x1 [0276.024] CloseHandle (hObject=0x1c0) returned 1 [0276.025] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0276.025] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182902.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182902.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e8e)) returned 1 [0276.025] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0276.025] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0276.025] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182902.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182902.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e8e)) returned 1 [0276.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0276.026] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0276.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0276.026] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ed2, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0182946.WMF", cAlternateFileName="")) returned 1 [0276.026] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0276.026] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0276.026] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0276.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0276.027] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0276.027] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0276.027] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182946.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182946.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0276.028] GetFileType (hFile=0x1c0) returned 0x1 [0276.028] CloseHandle (hObject=0x1c0) returned 1 [0276.029] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0276.029] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182946.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182946.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ed2)) returned 1 [0276.029] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0276.029] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0276.029] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182946.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182946.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ed2)) returned 1 [0276.029] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0276.029] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0276.030] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0276.030] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x745c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0183172.WMF", cAlternateFileName="")) returned 1 [0276.030] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0276.030] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0276.030] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0276.030] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0276.030] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0276.030] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0276.031] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183172.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183172.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0276.031] GetFileType (hFile=0x1c0) returned 0x1 [0276.032] CloseHandle (hObject=0x1c0) returned 1 [0276.032] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0276.032] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183172.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183172.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x745c)) returned 1 [0276.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0276.032] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0276.032] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183172.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183172.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x745c)) returned 1 [0276.033] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0276.033] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0276.033] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0276.033] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6fd2, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0183174.WMF", cAlternateFileName="")) returned 1 [0276.033] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0276.033] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0276.033] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0276.033] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0276.033] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0276.033] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0276.034] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183174.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183174.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0276.034] GetFileType (hFile=0x1c0) returned 0x1 [0276.035] CloseHandle (hObject=0x1c0) returned 1 [0276.035] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0276.036] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183174.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183174.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6fd2)) returned 1 [0276.036] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0276.036] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0276.036] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183174.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183174.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6fd2)) returned 1 [0276.036] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0276.036] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0276.036] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0276.037] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5f6e, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0183198.WMF", cAlternateFileName="")) returned 1 [0276.037] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0276.037] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0276.037] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0276.037] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0276.037] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0276.037] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0276.038] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183198.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183198.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0276.038] GetFileType (hFile=0x1c0) returned 0x1 [0276.039] CloseHandle (hObject=0x1c0) returned 1 [0276.039] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0276.039] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183198.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183198.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5f6e)) returned 1 [0276.039] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0276.039] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0276.039] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183198.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183198.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5f6e)) returned 1 [0276.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0276.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0276.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0276.040] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b4a, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0183574.WMF", cAlternateFileName="")) returned 1 [0276.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0276.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0276.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0276.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0276.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0276.041] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0276.041] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183574.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183574.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0276.041] GetFileType (hFile=0x1c0) returned 0x1 [0276.042] CloseHandle (hObject=0x1c0) returned 1 [0276.042] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0276.042] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183574.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183574.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b4a)) returned 1 [0276.043] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0276.043] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0276.043] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183574.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183574.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b4a)) returned 1 [0276.043] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0276.043] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0276.043] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0276.043] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c88, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0185670.WMF", cAlternateFileName="")) returned 1 [0276.043] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0276.044] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0276.044] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0276.044] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0276.044] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0276.044] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0276.045] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185670.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185670.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0276.045] GetFileType (hFile=0x1c0) returned 0x1 [0276.045] CloseHandle (hObject=0x1c0) returned 1 [0276.046] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0276.046] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185670.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185670.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c88)) returned 1 [0276.046] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0276.046] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0276.046] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185670.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185670.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c88)) returned 1 [0276.046] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0276.047] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0276.047] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0276.047] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e46, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0185774.WMF", cAlternateFileName="")) returned 1 [0276.047] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0276.047] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0276.047] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0276.047] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0276.047] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0276.048] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0276.048] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185774.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185774.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0276.049] GetFileType (hFile=0x1c0) returned 0x1 [0276.050] CloseHandle (hObject=0x1c0) returned 1 [0276.050] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0276.051] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185774.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185774.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e46)) returned 1 [0276.051] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0276.051] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0276.051] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185774.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185774.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e46)) returned 1 [0276.052] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0276.052] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0276.052] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0276.052] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x69d8, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0185776.WMF", cAlternateFileName="")) returned 1 [0276.052] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0276.052] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0276.052] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0276.052] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0276.053] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0276.053] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0276.053] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185776.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185776.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0276.054] GetFileType (hFile=0x1c0) returned 0x1 [0276.054] CloseHandle (hObject=0x1c0) returned 1 [0276.055] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0276.055] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185776.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185776.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x69d8)) returned 1 [0276.055] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0276.055] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0276.056] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185776.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185776.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x69d8)) returned 1 [0276.056] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0276.056] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0276.056] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0276.056] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x62e0, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0185778.WMF", cAlternateFileName="")) returned 1 [0276.056] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0276.056] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0276.056] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0276.057] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0276.057] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0276.057] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0276.058] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185778.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185778.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0276.058] GetFileType (hFile=0x1c0) returned 0x1 [0276.059] CloseHandle (hObject=0x1c0) returned 1 [0276.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0276.059] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185778.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185778.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x62e0)) returned 1 [0276.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0276.060] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0276.060] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185778.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185778.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x62e0)) returned 1 [0276.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0276.060] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0276.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0276.060] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe956, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0185780.WMF", cAlternateFileName="")) returned 1 [0276.060] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0276.061] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0276.061] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0276.061] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0276.061] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0276.061] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0276.062] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185780.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185780.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0276.063] GetFileType (hFile=0x1c0) returned 0x1 [0276.063] CloseHandle (hObject=0x1c0) returned 1 [0276.063] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0276.064] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185780.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185780.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe956)) returned 1 [0276.064] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0276.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0276.064] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185780.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185780.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe956)) returned 1 [0276.064] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0276.065] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0276.065] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0276.065] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x99a2, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0185786.WMF", cAlternateFileName="")) returned 1 [0276.065] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0276.065] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0276.065] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0276.065] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0276.066] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0276.066] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0276.379] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185786.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185786.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0276.380] GetFileType (hFile=0x21c) returned 0x1 [0276.380] CloseHandle (hObject=0x21c) returned 1 [0276.380] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0276.381] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185786.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185786.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x99a2)) returned 1 [0276.381] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0276.381] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0276.381] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185786.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185786.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x99a2)) returned 1 [0276.381] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0276.381] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0276.381] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0276.381] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x50b6, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0185790.WMF", cAlternateFileName="")) returned 1 [0276.382] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0276.382] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0276.382] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0276.382] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0276.382] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0276.382] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0276.645] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185790.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185790.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0276.646] GetFileType (hFile=0x1e0) returned 0x1 [0276.646] CloseHandle (hObject=0x1e0) returned 1 [0276.646] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0276.646] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185790.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185790.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x50b6)) returned 1 [0276.646] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0276.646] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0276.647] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185790.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185790.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x50b6)) returned 1 [0276.647] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0276.647] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0276.647] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0276.647] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x650c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0185796.WMF", cAlternateFileName="")) returned 1 [0276.647] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0276.647] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0276.647] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0276.647] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0276.647] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0276.647] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0276.648] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185796.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185796.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0276.648] GetFileType (hFile=0x1e0) returned 0x1 [0276.648] CloseHandle (hObject=0x1e0) returned 1 [0276.648] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0276.649] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185796.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185796.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x650c)) returned 1 [0276.649] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0276.649] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0276.649] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185796.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185796.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x650c)) returned 1 [0276.649] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0276.649] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0276.649] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0276.649] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8420, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0185798.WMF", cAlternateFileName="")) returned 1 [0276.649] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0276.649] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0276.649] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0276.649] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0276.650] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0276.650] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0276.650] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185798.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185798.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0276.650] GetFileType (hFile=0x1e0) returned 0x1 [0276.650] CloseHandle (hObject=0x1e0) returned 1 [0276.650] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0276.651] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185798.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185798.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8420)) returned 1 [0276.651] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0276.651] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0276.651] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185798.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185798.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8420)) returned 1 [0276.651] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0276.651] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0276.651] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0276.651] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5eae, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0185800.WMF", cAlternateFileName="")) returned 1 [0276.651] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0276.651] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0276.651] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0276.652] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0276.652] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0276.652] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0276.652] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185800.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185800.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0276.652] GetFileType (hFile=0x1e0) returned 0x1 [0276.653] CloseHandle (hObject=0x1e0) returned 1 [0276.653] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0276.653] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185800.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185800.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5eae)) returned 1 [0276.653] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0276.653] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0276.653] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185800.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185800.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5eae)) returned 1 [0276.653] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0276.653] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0276.653] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0276.653] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x773a, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0185806.WMF", cAlternateFileName="")) returned 1 [0276.653] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0276.653] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0276.654] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0276.654] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0276.654] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0276.654] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0276.654] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185806.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185806.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0276.654] GetFileType (hFile=0x1e0) returned 0x1 [0276.655] CloseHandle (hObject=0x1e0) returned 1 [0276.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0276.655] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185806.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185806.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x773a)) returned 1 [0276.655] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0276.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0276.655] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185806.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185806.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x773a)) returned 1 [0276.655] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0276.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0276.655] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0276.656] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b8e, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0185818.WMF", cAlternateFileName="")) returned 1 [0276.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0276.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0276.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0276.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0276.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0276.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0276.656] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185818.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185818.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0276.657] GetFileType (hFile=0x1e0) returned 0x1 [0276.657] CloseHandle (hObject=0x1e0) returned 1 [0276.657] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0276.657] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185818.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185818.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b8e)) returned 1 [0276.658] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0276.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0276.658] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185818.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185818.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b8e)) returned 1 [0276.658] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0276.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0276.658] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0276.658] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e74, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0185828.WMF", cAlternateFileName="")) returned 1 [0276.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0276.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0276.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0276.659] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0276.659] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0276.659] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0276.659] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185828.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185828.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0276.659] GetFileType (hFile=0x1e0) returned 0x1 [0276.660] CloseHandle (hObject=0x1e0) returned 1 [0276.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0276.661] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185828.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185828.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e74)) returned 1 [0276.661] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0276.661] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0276.661] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185828.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185828.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e74)) returned 1 [0276.661] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0276.661] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0276.661] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0276.661] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2182, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0185834.WMF", cAlternateFileName="")) returned 1 [0276.662] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0276.662] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0276.662] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0276.662] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0276.662] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0276.662] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0276.662] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185834.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185834.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0276.662] GetFileType (hFile=0x1e0) returned 0x1 [0276.663] CloseHandle (hObject=0x1e0) returned 1 [0276.663] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0276.663] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185834.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185834.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2182)) returned 1 [0276.663] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0276.664] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0276.664] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185834.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185834.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2182)) returned 1 [0276.664] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0276.664] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0276.664] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0276.664] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x37e4, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0185842.WMF", cAlternateFileName="")) returned 1 [0276.664] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0276.664] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0276.664] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0276.665] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0276.665] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0276.665] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0276.665] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185842.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185842.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0276.666] GetFileType (hFile=0x1e0) returned 0x1 [0276.666] CloseHandle (hObject=0x1e0) returned 1 [0276.666] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0276.666] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185842.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185842.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x37e4)) returned 1 [0276.667] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0276.667] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0276.667] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185842.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185842.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x37e4)) returned 1 [0276.667] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0276.667] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0276.667] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0276.668] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21da, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0186346.WMF", cAlternateFileName="")) returned 1 [0276.668] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0276.668] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0276.668] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0276.668] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0276.668] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0276.668] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0276.669] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186346.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186346.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0276.669] GetFileType (hFile=0x1e0) returned 0x1 [0276.670] CloseHandle (hObject=0x1e0) returned 1 [0276.670] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0276.671] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186346.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186346.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21da)) returned 1 [0276.671] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0276.671] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0276.671] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186346.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186346.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21da)) returned 1 [0276.671] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0276.671] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0276.671] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0276.671] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x843a, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0186360.WMF", cAlternateFileName="")) returned 1 [0276.672] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0276.672] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0276.672] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0276.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0276.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0276.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0276.673] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186360.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186360.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0276.673] GetFileType (hFile=0x1e0) returned 0x1 [0276.674] CloseHandle (hObject=0x1e0) returned 1 [0276.674] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0276.674] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186360.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186360.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x843a)) returned 1 [0276.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0276.675] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0276.675] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186360.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186360.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x843a)) returned 1 [0276.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0276.675] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0276.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0276.675] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x44fe, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0186362.WMF", cAlternateFileName="")) returned 1 [0276.675] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0276.676] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0276.676] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0276.676] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0276.676] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0276.677] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0276.677] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186362.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186362.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0276.678] GetFileType (hFile=0x1e0) returned 0x1 [0276.678] CloseHandle (hObject=0x1e0) returned 1 [0276.679] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0276.679] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186362.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186362.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x44fe)) returned 1 [0276.679] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0276.679] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0276.679] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186362.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186362.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x44fe)) returned 1 [0276.679] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0276.679] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0276.680] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0276.680] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4724, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0186364.WMF", cAlternateFileName="")) returned 1 [0276.680] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0276.680] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0276.680] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0276.680] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0276.680] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0276.680] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0276.681] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186364.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186364.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0276.682] GetFileType (hFile=0x1e0) returned 0x1 [0276.682] CloseHandle (hObject=0x1e0) returned 1 [0276.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0276.683] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186364.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186364.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4724)) returned 1 [0276.683] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0276.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0276.683] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186364.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186364.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4724)) returned 1 [0276.683] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0276.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0276.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0276.684] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19c4, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0187647.WMF", cAlternateFileName="")) returned 1 [0276.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0276.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0276.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0276.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0276.685] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0276.685] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0276.686] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187647.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187647.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0276.686] GetFileType (hFile=0x1e0) returned 0x1 [0276.687] CloseHandle (hObject=0x1e0) returned 1 [0276.687] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0276.687] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187647.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187647.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19c4)) returned 1 [0276.687] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0276.687] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0276.688] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187647.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187647.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19c4)) returned 1 [0276.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0276.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0276.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0276.688] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1500, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0187815.WMF", cAlternateFileName="")) returned 1 [0276.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0276.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0276.689] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0276.689] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0276.689] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0276.689] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0276.690] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187815.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187815.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0276.690] GetFileType (hFile=0x1e0) returned 0x1 [0276.691] CloseHandle (hObject=0x1e0) returned 1 [0276.691] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0276.691] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187815.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187815.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1500)) returned 1 [0276.948] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0276.948] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0276.948] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187815.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187815.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1500)) returned 1 [0276.948] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0276.948] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0276.948] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0276.948] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d7c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0187817.WMF", cAlternateFileName="")) returned 1 [0276.948] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0276.948] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0276.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0276.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0276.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0276.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0276.950] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187817.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187817.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0276.950] GetFileType (hFile=0x21c) returned 0x1 [0276.950] CloseHandle (hObject=0x21c) returned 1 [0276.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0276.951] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187817.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187817.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d7c)) returned 1 [0276.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0276.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0276.951] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187817.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187817.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d7c)) returned 1 [0276.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0276.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0276.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0276.952] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2870, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0187819.WMF", cAlternateFileName="")) returned 1 [0276.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0276.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0276.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0276.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0276.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0276.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0276.953] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187819.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187819.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0276.953] GetFileType (hFile=0x21c) returned 0x1 [0276.954] CloseHandle (hObject=0x21c) returned 1 [0276.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0276.954] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187819.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187819.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2870)) returned 1 [0276.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0276.955] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0276.955] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187819.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187819.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2870)) returned 1 [0276.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0276.955] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0276.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0276.955] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d4c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0187825.WMF", cAlternateFileName="")) returned 1 [0276.955] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0276.956] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0276.956] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0276.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0276.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0276.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0276.957] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187825.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187825.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0276.957] GetFileType (hFile=0x21c) returned 0x1 [0276.958] CloseHandle (hObject=0x21c) returned 1 [0276.958] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0276.958] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187825.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187825.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d4c)) returned 1 [0276.959] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0276.959] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0276.959] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187825.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187825.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d4c)) returned 1 [0276.959] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0276.959] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0276.959] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0276.959] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3040, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0187829.WMF", cAlternateFileName="")) returned 1 [0276.959] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0276.960] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0276.960] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0276.960] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0276.960] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0276.960] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0276.960] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187829.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187829.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0276.961] GetFileType (hFile=0x21c) returned 0x1 [0276.973] CloseHandle (hObject=0x21c) returned 1 [0276.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0276.974] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187829.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187829.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3040)) returned 1 [0276.974] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0276.974] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0276.974] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187829.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187829.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3040)) returned 1 [0276.974] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0276.974] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0276.974] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0276.974] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2480, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0187835.WMF", cAlternateFileName="")) returned 1 [0276.975] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0276.975] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0276.975] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0276.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0276.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0276.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0276.976] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187835.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187835.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0276.976] GetFileType (hFile=0x21c) returned 0x1 [0276.977] CloseHandle (hObject=0x21c) returned 1 [0276.977] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0276.977] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187835.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187835.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2480)) returned 1 [0276.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0276.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0276.978] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187835.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187835.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2480)) returned 1 [0276.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0276.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0276.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0276.978] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3fe2, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0187837.WMF", cAlternateFileName="")) returned 1 [0276.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0276.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0276.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0276.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0276.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0276.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0276.980] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187837.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187837.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0276.980] GetFileType (hFile=0x21c) returned 0x1 [0276.981] CloseHandle (hObject=0x21c) returned 1 [0276.981] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0276.981] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187837.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187837.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3fe2)) returned 1 [0276.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0276.981] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0276.981] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187837.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187837.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3fe2)) returned 1 [0276.982] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0276.982] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0276.982] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0276.982] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14fc, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0187839.WMF", cAlternateFileName="")) returned 1 [0276.982] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0276.982] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0276.982] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0276.982] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0276.982] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0276.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0276.983] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187839.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187839.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0276.983] GetFileType (hFile=0x21c) returned 0x1 [0276.984] CloseHandle (hObject=0x21c) returned 1 [0276.984] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0276.984] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187839.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187839.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14fc)) returned 1 [0276.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0276.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0276.985] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187839.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187839.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14fc)) returned 1 [0276.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0276.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0276.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0276.985] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bcc, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0187847.WMF", cAlternateFileName="")) returned 1 [0276.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0276.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0276.986] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0276.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0276.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0276.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0276.987] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187847.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187847.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0276.987] GetFileType (hFile=0x21c) returned 0x1 [0276.987] CloseHandle (hObject=0x21c) returned 1 [0276.988] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0276.988] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187847.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187847.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bcc)) returned 1 [0276.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0276.988] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0276.989] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187847.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187847.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bcc)) returned 1 [0276.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0276.989] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0276.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0276.989] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d94, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0187849.WMF", cAlternateFileName="")) returned 1 [0276.989] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0276.990] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0276.990] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0276.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0276.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0276.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0276.991] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187849.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187849.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0276.991] GetFileType (hFile=0x21c) returned 0x1 [0276.991] CloseHandle (hObject=0x21c) returned 1 [0276.992] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0276.992] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187849.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187849.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d94)) returned 1 [0276.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0276.992] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0276.992] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187849.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187849.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d94)) returned 1 [0276.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0276.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0276.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0276.993] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x221c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0187851.WMF", cAlternateFileName="")) returned 1 [0276.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0276.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0276.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0276.994] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0276.994] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0276.994] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0276.994] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187851.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187851.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0276.995] GetFileType (hFile=0x21c) returned 0x1 [0276.995] CloseHandle (hObject=0x21c) returned 1 [0276.996] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0276.996] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187851.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187851.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x221c)) returned 1 [0276.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0276.996] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0276.996] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187851.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187851.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x221c)) returned 1 [0276.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0276.997] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0276.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0276.997] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaac, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0187859.WMF", cAlternateFileName="")) returned 1 [0276.997] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0276.997] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0276.997] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0276.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0276.998] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0276.998] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0276.998] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187859.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187859.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0276.999] GetFileType (hFile=0x21c) returned 0x1 [0276.999] CloseHandle (hObject=0x21c) returned 1 [0277.000] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0277.000] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187859.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187859.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaac)) returned 1 [0277.000] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0277.000] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0277.000] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187859.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187859.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaac)) returned 1 [0277.000] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0277.000] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0277.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0277.001] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2394, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0187861.WMF", cAlternateFileName="")) returned 1 [0277.255] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0277.255] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0277.255] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0277.255] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0277.256] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0277.256] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0277.256] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187861.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187861.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0277.257] GetFileType (hFile=0x19c) returned 0x1 [0277.257] CloseHandle (hObject=0x19c) returned 1 [0277.258] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0277.258] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187861.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187861.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2394)) returned 1 [0277.258] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0277.258] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0277.258] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187861.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187861.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2394)) returned 1 [0277.259] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0277.259] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0277.259] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0277.259] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a44, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0187863.WMF", cAlternateFileName="")) returned 1 [0277.259] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0277.259] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0277.259] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0277.259] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0277.259] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0277.260] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0277.260] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187863.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187863.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0277.261] GetFileType (hFile=0x19c) returned 0x1 [0277.261] CloseHandle (hObject=0x19c) returned 1 [0277.262] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0277.262] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187863.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187863.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a44)) returned 1 [0277.262] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0277.262] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0277.262] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187863.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187863.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a44)) returned 1 [0277.262] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0277.262] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0277.263] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0277.263] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1258, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0187881.WMF", cAlternateFileName="")) returned 1 [0277.263] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0277.263] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0277.263] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0277.263] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0277.263] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0277.263] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0277.264] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187881.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187881.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0277.264] GetFileType (hFile=0x19c) returned 0x1 [0277.265] CloseHandle (hObject=0x19c) returned 1 [0277.265] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0277.265] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187881.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187881.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1258)) returned 1 [0277.266] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0277.266] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0277.266] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187881.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187881.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1258)) returned 1 [0277.266] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0277.266] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0277.266] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0277.266] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x834, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0187883.WMF", cAlternateFileName="")) returned 1 [0277.503] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0277.504] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0277.504] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0277.504] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0277.505] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0277.505] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0277.505] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187883.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187883.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0277.505] GetFileType (hFile=0x21c) returned 0x1 [0277.506] CloseHandle (hObject=0x21c) returned 1 [0277.506] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0277.506] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187883.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187883.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x834)) returned 1 [0277.506] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0277.506] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0277.506] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187883.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187883.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x834)) returned 1 [0277.506] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0277.507] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0277.507] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0277.507] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15f4, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0187893.WMF", cAlternateFileName="")) returned 1 [0277.507] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0277.507] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0277.507] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0277.507] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0277.507] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0277.507] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0277.507] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187893.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187893.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0277.508] GetFileType (hFile=0x21c) returned 0x1 [0277.508] CloseHandle (hObject=0x21c) returned 1 [0277.508] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0277.509] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187893.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187893.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15f4)) returned 1 [0277.509] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0277.509] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0277.509] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187893.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187893.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15f4)) returned 1 [0277.509] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0277.509] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0277.509] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0277.509] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd90, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0187895.WMF", cAlternateFileName="")) returned 1 [0277.510] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0277.510] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0277.510] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0277.510] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0277.510] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0277.510] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0277.511] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187895.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187895.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0277.511] GetFileType (hFile=0x21c) returned 0x1 [0277.511] CloseHandle (hObject=0x21c) returned 1 [0277.512] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0277.512] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187895.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187895.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd90)) returned 1 [0277.512] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0277.512] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0277.512] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187895.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187895.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd90)) returned 1 [0277.512] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0277.512] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0277.512] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0277.513] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1388, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0187921.WMF", cAlternateFileName="")) returned 1 [0277.513] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0277.513] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0277.513] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0277.513] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0277.513] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0277.513] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0277.514] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187921.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187921.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0277.514] GetFileType (hFile=0x21c) returned 0x1 [0277.515] CloseHandle (hObject=0x21c) returned 1 [0277.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0277.515] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187921.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187921.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1388)) returned 1 [0277.515] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0277.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0277.515] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187921.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187921.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1388)) returned 1 [0277.516] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0277.516] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0277.516] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0277.516] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x29dc, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0188511.WMF", cAlternateFileName="")) returned 1 [0277.516] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0277.516] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0277.516] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0277.516] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0277.517] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0277.517] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0277.517] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188511.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188511.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0277.518] GetFileType (hFile=0x21c) returned 0x1 [0277.518] CloseHandle (hObject=0x21c) returned 1 [0277.519] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0277.519] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188511.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188511.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x29dc)) returned 1 [0277.519] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0277.519] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0277.520] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188511.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188511.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x29dc)) returned 1 [0277.520] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0277.520] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0277.520] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0277.521] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3004, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0188513.WMF", cAlternateFileName="")) returned 1 [0277.521] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0277.521] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0277.521] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0277.521] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0277.521] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0277.521] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0277.522] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188513.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188513.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0277.523] GetFileType (hFile=0x21c) returned 0x1 [0277.523] CloseHandle (hObject=0x21c) returned 1 [0277.524] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0277.524] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188513.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188513.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3004)) returned 1 [0277.524] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0277.524] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0277.525] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188513.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188513.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3004)) returned 1 [0277.525] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0277.525] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0277.525] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0277.525] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16c0, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0188519.WMF", cAlternateFileName="")) returned 1 [0277.525] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0277.525] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0277.526] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0277.526] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0277.526] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0277.526] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0277.527] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188519.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188519.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0277.527] GetFileType (hFile=0x21c) returned 0x1 [0277.528] CloseHandle (hObject=0x21c) returned 1 [0277.528] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0277.529] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188519.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188519.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16c0)) returned 1 [0277.529] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0277.529] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0277.529] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188519.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188519.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16c0)) returned 1 [0277.529] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0277.529] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0277.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0277.530] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b5c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0188587.WMF", cAlternateFileName="")) returned 1 [0277.530] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0277.530] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0277.530] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0277.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0277.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0277.531] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0277.532] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188587.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188587.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0277.532] GetFileType (hFile=0x21c) returned 0x1 [0277.533] CloseHandle (hObject=0x21c) returned 1 [0277.533] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0277.533] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188587.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188587.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b5c)) returned 1 [0277.534] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0277.534] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0277.534] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188587.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188587.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b5c)) returned 1 [0277.534] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0277.534] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0277.534] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0277.535] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3e9e, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0188667.WMF", cAlternateFileName="")) returned 1 [0277.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0277.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0277.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0277.536] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0277.536] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0277.536] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0277.537] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188667.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188667.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0277.537] GetFileType (hFile=0x21c) returned 0x1 [0277.537] CloseHandle (hObject=0x21c) returned 1 [0277.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0277.538] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188667.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188667.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3e9e)) returned 1 [0277.538] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0277.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0277.538] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188667.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188667.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3e9e)) returned 1 [0277.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0277.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0277.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0277.539] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x73a2, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0188669.WMF", cAlternateFileName="")) returned 1 [0277.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0277.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0277.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0277.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0277.540] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0277.540] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0277.541] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188669.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188669.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0277.541] GetFileType (hFile=0x21c) returned 0x1 [0277.541] CloseHandle (hObject=0x21c) returned 1 [0277.542] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0277.542] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188669.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188669.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x73a2)) returned 1 [0277.542] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0277.542] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0277.542] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188669.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188669.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x73a2)) returned 1 [0277.543] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0277.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0277.543] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0277.543] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x336a, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0188679.WMF", cAlternateFileName="")) returned 1 [0277.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0277.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0277.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0277.544] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0277.544] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0277.544] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0277.545] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188679.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188679.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0277.545] GetFileType (hFile=0x21c) returned 0x1 [0277.545] CloseHandle (hObject=0x21c) returned 1 [0277.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0277.546] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188679.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188679.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x336a)) returned 1 [0277.546] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0277.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0277.546] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188679.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188679.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x336a)) returned 1 [0277.547] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0277.547] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0277.547] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0277.547] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ca4, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0195248.WMF", cAlternateFileName="")) returned 1 [0277.547] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0277.547] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0277.547] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0277.548] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0277.548] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0277.548] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0277.549] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195248.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195248.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0277.549] GetFileType (hFile=0x21c) returned 0x1 [0277.550] CloseHandle (hObject=0x21c) returned 1 [0277.550] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0277.550] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195248.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195248.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ca4)) returned 1 [0277.551] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0277.765] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0277.765] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195248.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195248.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ca4)) returned 1 [0277.765] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0277.765] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0277.765] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0277.765] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11b6, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0195254.WMF", cAlternateFileName="")) returned 1 [0277.765] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0277.765] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0277.766] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0277.766] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0277.766] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0277.766] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0277.905] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195254.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195254.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0277.905] GetFileType (hFile=0x19c) returned 0x1 [0277.905] CloseHandle (hObject=0x19c) returned 1 [0277.905] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0277.905] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195254.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195254.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11b6)) returned 1 [0277.906] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0277.906] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0277.906] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195254.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195254.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11b6)) returned 1 [0277.906] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0277.906] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0277.906] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0277.906] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x207a, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0195260.WMF", cAlternateFileName="")) returned 1 [0277.906] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0277.906] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0277.906] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0277.906] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0277.906] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0277.906] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0277.907] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195260.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195260.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0277.907] GetFileType (hFile=0x19c) returned 0x1 [0277.907] CloseHandle (hObject=0x19c) returned 1 [0277.907] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0277.907] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195260.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195260.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x207a)) returned 1 [0277.907] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0277.907] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0277.908] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195260.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195260.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x207a)) returned 1 [0277.908] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0277.908] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0277.908] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0277.908] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x72f8, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0195320.WMF", cAlternateFileName="")) returned 1 [0277.908] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0277.908] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0277.908] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0277.908] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0277.908] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0277.908] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0277.908] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195320.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195320.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0277.909] GetFileType (hFile=0x19c) returned 0x1 [0277.909] CloseHandle (hObject=0x19c) returned 1 [0277.909] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0277.909] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195320.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195320.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x72f8)) returned 1 [0277.909] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0277.909] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0277.910] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195320.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195320.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x72f8)) returned 1 [0277.910] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0277.910] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0277.910] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0277.910] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5350, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0195342.WMF", cAlternateFileName="")) returned 1 [0277.913] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0277.913] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0277.913] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0277.913] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0277.913] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0277.913] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0277.913] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195342.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195342.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0277.914] GetFileType (hFile=0x19c) returned 0x1 [0277.914] CloseHandle (hObject=0x19c) returned 1 [0277.914] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0277.914] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195342.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195342.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5350)) returned 1 [0277.914] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0277.914] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0277.914] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195342.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195342.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5350)) returned 1 [0277.914] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0277.915] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0277.915] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0277.915] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x48be, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0195428.WMF", cAlternateFileName="")) returned 1 [0277.915] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0277.915] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0277.915] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0277.915] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0277.915] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0277.915] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0277.915] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195428.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195428.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0277.915] GetFileType (hFile=0x19c) returned 0x1 [0277.916] CloseHandle (hObject=0x19c) returned 1 [0277.916] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0277.916] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195428.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195428.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x48be)) returned 1 [0277.916] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0277.916] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0277.916] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195428.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195428.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x48be)) returned 1 [0277.916] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0277.917] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0277.917] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0277.917] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe60, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0195772.WMF", cAlternateFileName="")) returned 1 [0277.917] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0277.917] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0277.917] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0277.917] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0277.917] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0277.917] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0277.917] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195772.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195772.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0277.918] GetFileType (hFile=0x19c) returned 0x1 [0277.918] CloseHandle (hObject=0x19c) returned 1 [0277.918] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0277.918] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195772.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195772.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe60)) returned 1 [0277.918] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0277.918] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0277.918] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195772.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195772.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe60)) returned 1 [0277.919] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0277.919] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0277.919] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0277.919] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbbc, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0195788.WMF", cAlternateFileName="")) returned 1 [0277.919] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0277.919] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0277.919] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0277.919] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0277.919] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0277.919] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0277.920] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195788.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195788.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0277.920] GetFileType (hFile=0x19c) returned 0x1 [0277.920] CloseHandle (hObject=0x19c) returned 1 [0277.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0277.921] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195788.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195788.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbbc)) returned 1 [0277.921] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0277.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0277.921] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195788.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195788.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbbc)) returned 1 [0277.921] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0277.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0277.921] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0277.921] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x128e, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0196060.WMF", cAlternateFileName="")) returned 1 [0277.922] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0277.922] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0277.922] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0277.922] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0277.922] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0277.922] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0277.923] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196060.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196060.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0277.923] GetFileType (hFile=0x19c) returned 0x1 [0277.923] CloseHandle (hObject=0x19c) returned 1 [0277.924] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0277.924] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196060.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196060.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x128e)) returned 1 [0277.924] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0277.924] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0277.924] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196060.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196060.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x128e)) returned 1 [0277.924] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0277.924] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0277.925] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0277.925] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14ce, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0196110.WMF", cAlternateFileName="")) returned 1 [0277.925] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0277.925] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0277.925] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0277.925] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0277.925] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0277.925] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0277.926] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196110.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196110.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0277.927] GetFileType (hFile=0x19c) returned 0x1 [0277.927] CloseHandle (hObject=0x19c) returned 1 [0277.927] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0277.928] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196110.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196110.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14ce)) returned 1 [0277.928] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0277.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0277.928] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196110.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196110.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14ce)) returned 1 [0277.928] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0277.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0277.928] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0277.928] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xef2, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0196142.WMF", cAlternateFileName="")) returned 1 [0277.929] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0277.929] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0277.929] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0277.929] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0277.929] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0277.929] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0277.930] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196142.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196142.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0277.930] GetFileType (hFile=0x19c) returned 0x1 [0277.930] CloseHandle (hObject=0x19c) returned 1 [0277.931] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0277.931] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196142.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196142.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xef2)) returned 1 [0277.931] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0277.931] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0277.931] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196142.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196142.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xef2)) returned 1 [0277.931] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0277.931] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0277.932] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0277.932] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3586, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0196354.WMF", cAlternateFileName="")) returned 1 [0277.932] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0277.932] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0277.932] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0277.932] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0277.932] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0277.932] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0277.933] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196354.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196354.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0277.933] GetFileType (hFile=0x19c) returned 0x1 [0277.934] CloseHandle (hObject=0x19c) returned 1 [0277.934] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0277.934] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196354.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196354.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3586)) returned 1 [0277.934] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0277.934] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0277.934] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196354.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196354.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3586)) returned 1 [0277.935] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0277.935] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0277.935] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0277.935] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b00, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0196358.WMF", cAlternateFileName="")) returned 1 [0277.935] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0277.935] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0277.935] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0277.935] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0277.935] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0277.935] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0277.936] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196358.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196358.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0277.936] GetFileType (hFile=0x19c) returned 0x1 [0277.937] CloseHandle (hObject=0x19c) returned 1 [0277.937] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0277.937] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196358.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196358.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b00)) returned 1 [0277.938] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0277.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0277.938] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196358.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196358.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b00)) returned 1 [0277.938] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0277.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0277.938] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0277.938] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x164c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0196364.WMF", cAlternateFileName="")) returned 1 [0277.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0277.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0277.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0277.938] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0277.939] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0277.939] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0277.939] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196364.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196364.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0277.939] GetFileType (hFile=0x19c) returned 0x1 [0277.940] CloseHandle (hObject=0x19c) returned 1 [0277.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0277.940] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196364.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196364.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x164c)) returned 1 [0277.940] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0277.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0277.940] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196364.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196364.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x164c)) returned 1 [0277.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0277.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0277.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0277.941] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9d26, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0197979.WMF", cAlternateFileName="")) returned 1 [0277.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0277.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0277.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0277.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0277.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0277.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0278.164] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0197979.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0197979.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0278.164] GetFileType (hFile=0x19c) returned 0x1 [0278.165] CloseHandle (hObject=0x19c) returned 1 [0278.165] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0278.165] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0197979.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0197979.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9d26)) returned 1 [0278.165] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0278.165] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0278.166] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0197979.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0197979.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9d26)) returned 1 [0278.166] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0278.166] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0278.166] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0278.166] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x668c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0197983.WMF", cAlternateFileName="")) returned 1 [0278.166] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0278.166] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0278.167] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0278.167] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0278.167] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0278.167] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0278.168] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0197983.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0197983.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0278.168] GetFileType (hFile=0x19c) returned 0x1 [0278.168] CloseHandle (hObject=0x19c) returned 1 [0278.169] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0278.169] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0197983.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0197983.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x668c)) returned 1 [0278.169] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0278.169] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0278.169] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0197983.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0197983.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x668c)) returned 1 [0278.170] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0278.170] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0278.170] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0278.170] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x849c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0198016.WMF", cAlternateFileName="")) returned 1 [0278.170] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0278.170] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0278.170] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0278.171] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0278.171] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0278.171] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0278.171] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198016.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198016.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0278.172] GetFileType (hFile=0x19c) returned 0x1 [0278.172] CloseHandle (hObject=0x19c) returned 1 [0278.172] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0278.173] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198016.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198016.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x849c)) returned 1 [0278.173] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0278.173] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0278.173] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198016.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198016.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x849c)) returned 1 [0278.173] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0278.173] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0278.173] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0278.174] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5cae, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0198020.WMF", cAlternateFileName="")) returned 1 [0278.174] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0278.174] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0278.174] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0278.174] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0278.174] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0278.174] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0278.175] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198020.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198020.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0278.175] GetFileType (hFile=0x19c) returned 0x1 [0278.175] CloseHandle (hObject=0x19c) returned 1 [0278.176] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0278.176] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198020.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198020.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5cae)) returned 1 [0278.176] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0278.176] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0278.176] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198020.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198020.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5cae)) returned 1 [0278.176] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0278.176] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0278.176] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0278.177] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8860, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0198021.WMF", cAlternateFileName="")) returned 1 [0278.177] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0278.177] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0278.177] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0278.177] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0278.177] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0278.177] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0278.178] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198021.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198021.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0278.178] GetFileType (hFile=0x19c) returned 0x1 [0278.179] CloseHandle (hObject=0x19c) returned 1 [0278.180] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0278.180] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198021.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198021.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8860)) returned 1 [0278.180] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0278.180] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0278.180] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198021.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198021.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8860)) returned 1 [0278.180] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0278.181] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0278.181] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0278.181] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6624, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0198022.WMF", cAlternateFileName="")) returned 1 [0278.181] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0278.181] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0278.181] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0278.181] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0278.181] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0278.181] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0278.182] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198022.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198022.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0278.182] GetFileType (hFile=0x19c) returned 0x1 [0278.183] CloseHandle (hObject=0x19c) returned 1 [0278.183] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0278.183] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198022.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198022.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6624)) returned 1 [0278.183] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0278.183] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0278.183] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198022.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198022.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6624)) returned 1 [0278.184] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0278.184] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0278.184] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0278.184] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3cce, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0198025.WMF", cAlternateFileName="")) returned 1 [0278.184] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0278.184] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0278.184] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0278.184] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0278.184] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0278.185] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0278.185] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198025.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198025.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0278.185] GetFileType (hFile=0x19c) returned 0x1 [0278.186] CloseHandle (hObject=0x19c) returned 1 [0278.186] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0278.186] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198025.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198025.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3cce)) returned 1 [0278.187] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0278.187] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0278.187] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198025.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198025.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3cce)) returned 1 [0278.187] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0278.187] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0278.187] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0278.187] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd6b4, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0198102.WMF", cAlternateFileName="")) returned 1 [0278.187] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0278.188] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0278.188] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0278.188] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0278.188] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0278.188] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0278.189] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198102.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198102.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0278.189] GetFileType (hFile=0x19c) returned 0x1 [0278.190] CloseHandle (hObject=0x19c) returned 1 [0278.190] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0278.190] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198102.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198102.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd6b4)) returned 1 [0278.191] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0278.191] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0278.191] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198102.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198102.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd6b4)) returned 1 [0278.191] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0278.191] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0278.191] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0278.191] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa520, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0198113.WMF", cAlternateFileName="")) returned 1 [0278.191] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0278.191] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0278.191] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0278.192] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0278.192] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0278.192] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0278.192] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198113.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198113.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0278.193] GetFileType (hFile=0x19c) returned 0x1 [0278.193] CloseHandle (hObject=0x19c) returned 1 [0278.194] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0278.194] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198113.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198113.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa520)) returned 1 [0278.194] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0278.194] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0278.194] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198113.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198113.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa520)) returned 1 [0278.195] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0278.195] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0278.195] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0278.195] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa3b2, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0198226.WMF", cAlternateFileName="")) returned 1 [0278.195] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0278.195] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0278.195] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0278.195] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0278.196] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0278.196] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0278.196] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198226.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198226.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0278.197] GetFileType (hFile=0x19c) returned 0x1 [0278.197] CloseHandle (hObject=0x19c) returned 1 [0278.197] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0278.197] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198226.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198226.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa3b2)) returned 1 [0278.198] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0278.198] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0278.198] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198226.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198226.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa3b2)) returned 1 [0278.198] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0278.198] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0278.198] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0278.198] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa69e, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0198234.WMF", cAlternateFileName="")) returned 1 [0278.198] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0278.199] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0278.199] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0278.199] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0278.199] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0278.199] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0278.200] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198234.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198234.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0278.200] GetFileType (hFile=0x19c) returned 0x1 [0278.201] CloseHandle (hObject=0x19c) returned 1 [0278.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0278.201] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198234.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198234.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa69e)) returned 1 [0278.201] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0278.202] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0278.202] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198234.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198234.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa69e)) returned 1 [0278.202] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0278.202] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0278.202] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0278.202] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6f9c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0198372.WMF", cAlternateFileName="")) returned 1 [0278.202] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0278.203] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0278.203] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0278.203] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0278.203] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0278.203] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0278.204] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198372.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198372.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0278.204] GetFileType (hFile=0x19c) returned 0x1 [0278.205] CloseHandle (hObject=0x19c) returned 1 [0278.205] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0278.205] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198372.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198372.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6f9c)) returned 1 [0278.206] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0278.206] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0278.206] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198372.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198372.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6f9c)) returned 1 [0278.206] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0278.206] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0278.206] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0278.206] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9d6c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0198377.WMF", cAlternateFileName="")) returned 1 [0278.206] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0278.207] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0278.207] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0278.207] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0278.207] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0278.207] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0278.208] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198377.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198377.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0278.208] GetFileType (hFile=0x19c) returned 0x1 [0278.209] CloseHandle (hObject=0x19c) returned 1 [0278.209] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0278.209] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198377.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198377.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9d6c)) returned 1 [0278.209] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0278.210] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0278.467] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198377.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198377.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9d6c)) returned 1 [0278.467] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0278.468] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0278.468] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0278.468] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc20c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0198447.WMF", cAlternateFileName="")) returned 1 [0278.468] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0278.468] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0278.468] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0278.468] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0278.468] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0278.468] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0278.469] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198447.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198447.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0278.671] GetFileType (hFile=0x1ac) returned 0x1 [0278.671] CloseHandle (hObject=0x1ac) returned 1 [0278.671] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0278.672] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198447.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198447.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc20c)) returned 1 [0278.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0278.672] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0278.672] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198447.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198447.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc20c)) returned 1 [0278.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0278.672] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0278.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0278.673] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xae08, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0198494.WMF", cAlternateFileName="")) returned 1 [0278.673] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0278.673] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0278.673] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0278.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0278.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0278.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0278.898] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198494.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198494.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0278.899] GetFileType (hFile=0x1e0) returned 0x1 [0278.899] CloseHandle (hObject=0x1e0) returned 1 [0278.900] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0278.900] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198494.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198494.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xae08)) returned 1 [0278.900] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0278.900] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0278.900] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198494.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198494.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xae08)) returned 1 [0278.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0278.901] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0278.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0278.901] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe17a, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0198712.WMF", cAlternateFileName="")) returned 1 [0278.901] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0278.901] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0278.901] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0278.902] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0278.902] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0278.902] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0278.903] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198712.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198712.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0278.903] GetFileType (hFile=0x1e0) returned 0x1 [0278.904] CloseHandle (hObject=0x1e0) returned 1 [0278.904] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0278.904] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198712.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198712.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe17a)) returned 1 [0278.904] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0278.904] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0278.905] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198712.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198712.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe17a)) returned 1 [0278.905] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0278.905] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0278.905] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0278.905] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x714e, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0199279.WMF", cAlternateFileName="")) returned 1 [0278.905] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0278.905] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0278.905] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0278.906] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0278.906] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0278.906] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0278.906] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199279.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199279.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0278.907] GetFileType (hFile=0x1e0) returned 0x1 [0278.907] CloseHandle (hObject=0x1e0) returned 1 [0278.908] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0278.908] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199279.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199279.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x714e)) returned 1 [0278.908] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0278.908] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0278.908] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199279.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199279.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x714e)) returned 1 [0278.908] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0278.908] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0278.909] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0278.909] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7c4e, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0199303.WMF", cAlternateFileName="")) returned 1 [0278.909] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0278.909] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0278.909] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0278.909] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0278.909] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0278.909] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0278.910] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199303.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199303.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0278.910] GetFileType (hFile=0x1e0) returned 0x1 [0278.911] CloseHandle (hObject=0x1e0) returned 1 [0278.911] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0278.912] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199303.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199303.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7c4e)) returned 1 [0278.912] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0278.912] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0278.912] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199303.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199303.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7c4e)) returned 1 [0278.912] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0278.912] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0278.912] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0278.913] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc37e, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0199307.WMF", cAlternateFileName="")) returned 1 [0278.913] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0278.913] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0278.913] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0278.914] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0278.914] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0278.914] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0278.915] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199307.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199307.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0278.915] GetFileType (hFile=0x1e0) returned 0x1 [0278.915] CloseHandle (hObject=0x1e0) returned 1 [0278.916] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0278.916] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199307.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199307.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc37e)) returned 1 [0278.916] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0278.916] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0278.916] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199307.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199307.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc37e)) returned 1 [0278.917] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0278.917] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0278.917] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0278.917] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x662a, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0199423.WMF", cAlternateFileName="")) returned 1 [0278.917] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0278.917] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0278.917] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0278.917] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0278.918] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0278.918] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0278.919] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199423.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199423.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0278.919] GetFileType (hFile=0x1e0) returned 0x1 [0278.919] CloseHandle (hObject=0x1e0) returned 1 [0278.920] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0278.920] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199423.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199423.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x662a)) returned 1 [0278.920] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0278.920] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0278.920] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199423.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199423.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x662a)) returned 1 [0278.921] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0278.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0278.921] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0278.921] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4124, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0199429.WMF", cAlternateFileName="")) returned 1 [0278.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0278.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0278.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0278.922] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0278.922] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0278.922] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0278.923] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199429.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199429.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0278.923] GetFileType (hFile=0x1e0) returned 0x1 [0278.924] CloseHandle (hObject=0x1e0) returned 1 [0278.924] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0278.924] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199429.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199429.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4124)) returned 1 [0278.924] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0278.925] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0278.925] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199429.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199429.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4124)) returned 1 [0278.925] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0278.925] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0278.925] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0278.925] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13c4, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0199465.WMF", cAlternateFileName="")) returned 1 [0278.925] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0278.926] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0278.926] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0278.926] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0278.926] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0278.926] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0278.927] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199465.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199465.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0278.927] GetFileType (hFile=0x1e0) returned 0x1 [0278.928] CloseHandle (hObject=0x1e0) returned 1 [0278.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0278.928] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199465.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199465.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13c4)) returned 1 [0278.929] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0278.929] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0278.929] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199465.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199465.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13c4)) returned 1 [0278.929] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0278.929] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0278.930] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0278.930] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x35bc, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0199469.WMF", cAlternateFileName="")) returned 1 [0278.930] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0278.930] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0278.930] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0278.930] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0278.930] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0278.930] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0278.931] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199469.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199469.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0278.931] GetFileType (hFile=0x1e0) returned 0x1 [0278.932] CloseHandle (hObject=0x1e0) returned 1 [0278.932] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0278.932] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199469.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199469.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x35bc)) returned 1 [0278.932] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0278.932] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0278.933] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199469.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199469.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x35bc)) returned 1 [0278.933] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0278.933] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0278.933] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0278.933] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a18, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0199473.WMF", cAlternateFileName="")) returned 1 [0278.933] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0278.933] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0278.933] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0278.934] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0278.934] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0278.934] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0278.934] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199473.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199473.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0278.935] GetFileType (hFile=0x1e0) returned 0x1 [0278.935] CloseHandle (hObject=0x1e0) returned 1 [0278.935] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0278.936] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199473.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199473.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a18)) returned 1 [0278.936] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0278.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0278.936] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199473.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199473.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a18)) returned 1 [0278.936] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0278.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0278.936] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0278.936] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1484, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0199475.WMF", cAlternateFileName="")) returned 1 [0278.937] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0278.937] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0278.937] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0278.937] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0278.937] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0278.937] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0278.938] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199475.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199475.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0278.938] GetFileType (hFile=0x1e0) returned 0x1 [0278.939] CloseHandle (hObject=0x1e0) returned 1 [0278.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0278.939] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199475.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199475.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1484)) returned 1 [0278.939] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0278.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0278.940] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199475.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199475.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1484)) returned 1 [0278.940] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0278.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0278.940] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0278.940] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27b4, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0199483.WMF", cAlternateFileName="")) returned 1 [0278.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0278.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0278.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0278.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0278.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0278.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0278.941] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199483.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199483.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0278.942] GetFileType (hFile=0x1e0) returned 0x1 [0278.942] CloseHandle (hObject=0x1e0) returned 1 [0278.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0278.943] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199483.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199483.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27b4)) returned 1 [0278.943] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0278.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0278.943] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199483.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199483.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27b4)) returned 1 [0278.943] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0278.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0278.943] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0278.943] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x302c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0199609.WMF", cAlternateFileName="")) returned 1 [0278.944] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0278.944] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0278.944] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0278.944] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0278.944] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0279.352] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0279.384] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199609.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199609.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0279.385] GetFileType (hFile=0x198) returned 0x1 [0279.385] CloseHandle (hObject=0x198) returned 1 [0279.386] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0279.386] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199609.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199609.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x302c)) returned 1 [0279.386] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0279.386] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0279.386] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199609.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199609.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x302c)) returned 1 [0279.387] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0279.387] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0279.387] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0279.387] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2004, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0200151.WMF", cAlternateFileName="")) returned 1 [0279.387] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0279.387] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0279.387] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0279.388] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0279.388] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0279.388] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0279.389] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200151.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200151.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0279.389] GetFileType (hFile=0x198) returned 0x1 [0279.389] CloseHandle (hObject=0x198) returned 1 [0279.390] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0279.390] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200151.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200151.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2004)) returned 1 [0279.390] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0279.390] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0279.391] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200151.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200151.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2004)) returned 1 [0279.391] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0279.391] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0279.391] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0279.391] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c0c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0200163.WMF", cAlternateFileName="")) returned 1 [0279.391] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0279.391] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0279.391] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0279.392] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0279.392] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0279.392] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0279.393] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200163.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200163.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0279.393] GetFileType (hFile=0x198) returned 0x1 [0279.393] CloseHandle (hObject=0x198) returned 1 [0279.394] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0279.394] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200163.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200163.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c0c)) returned 1 [0279.394] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0279.394] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0279.394] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200163.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200163.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c0c)) returned 1 [0279.395] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0279.395] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0279.395] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0279.395] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14c0, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0200183.WMF", cAlternateFileName="")) returned 1 [0279.395] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0279.395] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0279.395] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0279.396] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0279.396] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0279.396] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0279.397] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200183.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200183.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0279.397] GetFileType (hFile=0x198) returned 0x1 [0279.398] CloseHandle (hObject=0x198) returned 1 [0279.398] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0279.398] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200183.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200183.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14c0)) returned 1 [0279.398] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0279.398] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0279.399] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200183.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200183.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14c0)) returned 1 [0279.399] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0279.399] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0279.399] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0279.399] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f7c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0200189.WMF", cAlternateFileName="")) returned 1 [0279.399] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0279.399] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0279.399] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0279.400] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0279.400] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0279.400] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0279.401] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200189.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200189.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0279.401] GetFileType (hFile=0x198) returned 0x1 [0279.402] CloseHandle (hObject=0x198) returned 1 [0279.402] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0279.402] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200189.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200189.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f7c)) returned 1 [0279.402] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0279.403] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0279.403] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200189.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200189.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f7c)) returned 1 [0279.403] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0279.403] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0279.405] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0279.405] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7a46, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0200273.WMF", cAlternateFileName="")) returned 1 [0279.406] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0279.406] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0279.406] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0279.406] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0279.406] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0279.406] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0279.407] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200273.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200273.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0279.407] GetFileType (hFile=0x198) returned 0x1 [0279.408] CloseHandle (hObject=0x198) returned 1 [0279.409] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0279.409] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200273.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200273.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7a46)) returned 1 [0279.410] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0279.410] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0279.410] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200273.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200273.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7a46)) returned 1 [0279.410] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0279.410] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0279.411] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0279.411] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c0a, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0200279.WMF", cAlternateFileName="")) returned 1 [0279.411] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0279.411] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0279.411] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0279.411] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0279.411] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0279.412] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0279.412] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200279.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200279.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0279.413] GetFileType (hFile=0x198) returned 0x1 [0279.414] CloseHandle (hObject=0x198) returned 1 [0279.415] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0279.415] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200279.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200279.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c0a)) returned 1 [0279.415] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0279.416] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0279.416] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200279.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200279.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c0a)) returned 1 [0279.416] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0279.416] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0279.416] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0279.416] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa0b0, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0200289.WMF", cAlternateFileName="")) returned 1 [0279.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0279.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0279.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0279.417] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0279.417] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0279.417] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0279.418] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200289.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200289.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0279.419] GetFileType (hFile=0x198) returned 0x1 [0279.419] CloseHandle (hObject=0x198) returned 1 [0279.420] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0279.420] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200289.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200289.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa0b0)) returned 1 [0279.420] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0279.420] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0279.421] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200289.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200289.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa0b0)) returned 1 [0279.421] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0279.421] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0279.421] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0279.421] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f08, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0200377.WMF", cAlternateFileName="")) returned 1 [0279.421] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0279.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0279.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0279.422] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0279.422] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0279.422] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0279.423] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200377.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200377.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0279.423] GetFileType (hFile=0x198) returned 0x1 [0279.424] CloseHandle (hObject=0x198) returned 1 [0279.424] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0279.425] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200377.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200377.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f08)) returned 1 [0279.425] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0279.425] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0279.425] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200377.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200377.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f08)) returned 1 [0279.425] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0279.425] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0279.426] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0279.426] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5398, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0200383.WMF", cAlternateFileName="")) returned 1 [0279.426] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0279.426] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0279.426] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0279.426] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0279.426] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0279.427] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0279.428] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200383.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200383.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0279.428] GetFileType (hFile=0x198) returned 0x1 [0279.795] CloseHandle (hObject=0x198) returned 1 [0279.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0279.803] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200383.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200383.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5398)) returned 1 [0279.803] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0279.803] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0279.803] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200383.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200383.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5398)) returned 1 [0279.803] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0279.803] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0279.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0279.804] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x366e, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0200467.WMF", cAlternateFileName="")) returned 1 [0279.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0279.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0279.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0279.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0279.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0279.805] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0280.070] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200467.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200467.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0280.070] GetFileType (hFile=0x198) returned 0x1 [0280.071] CloseHandle (hObject=0x198) returned 1 [0280.071] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0280.072] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200467.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200467.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x366e)) returned 1 [0280.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0280.072] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0280.072] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200467.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200467.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x366e)) returned 1 [0280.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0280.072] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0280.073] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0280.073] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x273e, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0200521.WMF", cAlternateFileName="")) returned 1 [0280.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0280.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0280.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0280.073] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0280.073] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0280.073] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0280.074] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200521.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200521.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0280.074] GetFileType (hFile=0x198) returned 0x1 [0280.075] CloseHandle (hObject=0x198) returned 1 [0280.075] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0280.076] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200521.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200521.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x273e)) returned 1 [0280.076] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0280.076] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0280.076] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200521.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200521.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x273e)) returned 1 [0280.076] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0280.077] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0280.077] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0280.077] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf36, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0200611.WMF", cAlternateFileName="")) returned 1 [0280.077] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0280.077] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0280.077] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0280.077] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0280.077] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0280.078] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0280.079] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200611.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200611.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0280.079] GetFileType (hFile=0x198) returned 0x1 [0280.079] CloseHandle (hObject=0x198) returned 1 [0280.080] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0280.080] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200611.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200611.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf36)) returned 1 [0280.081] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0280.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0280.081] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200611.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200611.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf36)) returned 1 [0280.081] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0280.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0280.081] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0280.082] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa50e, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0202045.JPG", cAlternateFileName="")) returned 1 [0280.082] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0280.082] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0280.082] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0280.082] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0280.082] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0280.083] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0280.083] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0202045.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0202045.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0280.084] GetFileType (hFile=0x198) returned 0x1 [0280.084] CloseHandle (hObject=0x198) returned 1 [0280.085] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0280.086] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0202045.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0202045.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa50e)) returned 1 [0280.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0280.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0280.086] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0202045.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0202045.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa50e)) returned 1 [0280.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0280.087] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0280.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0280.087] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6e74, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0211981.WMF", cAlternateFileName="")) returned 1 [0280.087] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0280.087] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0280.087] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0280.088] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0280.088] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0280.088] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0280.089] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0211981.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0211981.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0280.089] GetFileType (hFile=0x198) returned 0x1 [0280.090] CloseHandle (hObject=0x198) returned 1 [0280.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0280.091] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0211981.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0211981.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6e74)) returned 1 [0280.091] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0280.091] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0280.091] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0211981.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0211981.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6e74)) returned 1 [0280.091] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0280.091] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0280.092] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0280.092] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x180e, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0212299.WMF", cAlternateFileName="")) returned 1 [0280.092] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0280.092] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0280.092] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0280.092] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0280.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0280.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0280.094] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212299.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212299.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0280.094] GetFileType (hFile=0x198) returned 0x1 [0280.095] CloseHandle (hObject=0x198) returned 1 [0280.095] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0280.095] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212299.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212299.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x180e)) returned 1 [0280.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0280.096] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0280.096] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212299.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212299.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x180e)) returned 1 [0280.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0280.096] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0280.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0280.097] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x25cc, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0212601.WMF", cAlternateFileName="")) returned 1 [0280.097] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0280.097] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0280.097] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0280.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0280.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0280.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0280.099] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212601.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212601.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0280.099] GetFileType (hFile=0x198) returned 0x1 [0280.099] CloseHandle (hObject=0x198) returned 1 [0280.100] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0280.100] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212601.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212601.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x25cc)) returned 1 [0280.100] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0280.101] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0280.101] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212601.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212601.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x25cc)) returned 1 [0280.101] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0280.101] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0280.101] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0280.101] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x199a, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0212685.WMF", cAlternateFileName="")) returned 1 [0280.102] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0280.102] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0280.102] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0280.102] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0280.102] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0280.102] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0280.103] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212685.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212685.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0280.103] GetFileType (hFile=0x198) returned 0x1 [0280.104] CloseHandle (hObject=0x198) returned 1 [0280.104] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0280.105] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212685.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212685.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x199a)) returned 1 [0280.105] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0280.105] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0280.105] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212685.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212685.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x199a)) returned 1 [0280.105] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0280.105] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0280.106] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0280.106] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x80c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0212751.WMF", cAlternateFileName="")) returned 1 [0280.106] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0280.106] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0280.106] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0280.106] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0280.106] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0280.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0280.108] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212751.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212751.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0280.108] GetFileType (hFile=0x198) returned 0x1 [0280.109] CloseHandle (hObject=0x198) returned 1 [0280.109] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0280.109] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212751.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212751.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x80c)) returned 1 [0280.109] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0280.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0280.110] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212751.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212751.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x80c)) returned 1 [0280.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0280.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0280.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0280.110] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d4a, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0212953.WMF", cAlternateFileName="")) returned 1 [0280.111] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0280.111] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0280.111] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0280.111] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0280.111] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0280.111] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0280.112] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212953.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212953.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0280.112] GetFileType (hFile=0x198) returned 0x1 [0280.113] CloseHandle (hObject=0x198) returned 1 [0280.113] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0280.114] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212953.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212953.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d4a)) returned 1 [0280.114] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0280.114] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0280.114] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212953.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212953.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d4a)) returned 1 [0280.114] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0280.114] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0280.114] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0280.115] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa5c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0213243.WMF", cAlternateFileName="")) returned 1 [0280.115] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0280.115] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0280.115] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0280.115] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0280.115] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0280.115] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0280.403] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0213243.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0213243.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0280.403] GetFileType (hFile=0x174) returned 0x1 [0280.404] CloseHandle (hObject=0x174) returned 1 [0280.404] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0280.404] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0213243.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0213243.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa5c)) returned 1 [0280.405] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0280.405] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0280.405] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0213243.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0213243.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa5c)) returned 1 [0280.405] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0280.405] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0280.405] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0280.405] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf00, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0213449.WMF", cAlternateFileName="")) returned 1 [0280.406] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0280.406] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0280.406] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0280.406] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0280.406] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0280.406] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0281.031] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0213449.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0213449.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0281.031] GetFileType (hFile=0x1e0) returned 0x1 [0281.031] CloseHandle (hObject=0x1e0) returned 1 [0281.032] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0281.032] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0213449.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0213449.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf00)) returned 1 [0281.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0281.032] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0281.032] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0213449.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0213449.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf00)) returned 1 [0281.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0281.032] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0281.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0281.032] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7cb6, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0214934.WMF", cAlternateFileName="")) returned 1 [0281.032] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0281.032] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0281.033] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0281.033] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0281.033] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0281.033] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0281.033] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0214934.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0214934.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0281.033] GetFileType (hFile=0x1e0) returned 0x1 [0281.033] CloseHandle (hObject=0x1e0) returned 1 [0281.034] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0281.034] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0214934.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0214934.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7cb6)) returned 1 [0281.034] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0281.034] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0281.034] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0214934.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0214934.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7cb6)) returned 1 [0281.034] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0281.034] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0281.034] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0281.034] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaefa, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0214948.WMF", cAlternateFileName="")) returned 1 [0281.034] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0281.034] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0281.035] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0281.035] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0281.035] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0281.035] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0281.035] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0214948.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0214948.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0281.035] GetFileType (hFile=0x1e0) returned 0x1 [0281.036] CloseHandle (hObject=0x1e0) returned 1 [0281.036] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0281.036] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0214948.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0214948.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaefa)) returned 1 [0281.036] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0281.036] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0281.036] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0214948.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0214948.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaefa)) returned 1 [0281.036] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0281.036] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0281.036] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0281.037] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d6c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0215070.WMF", cAlternateFileName="")) returned 1 [0281.037] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0281.037] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0281.037] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0281.037] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0281.037] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0281.037] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0281.037] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215070.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215070.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0281.037] GetFileType (hFile=0x1e0) returned 0x1 [0281.038] CloseHandle (hObject=0x1e0) returned 1 [0281.039] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0281.039] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215070.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215070.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d6c)) returned 1 [0281.039] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0281.039] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0281.039] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215070.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215070.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d6c)) returned 1 [0281.039] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0281.039] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0281.039] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0281.039] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f50, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0215076.WMF", cAlternateFileName="")) returned 1 [0281.039] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0281.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0281.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0281.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0281.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0281.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0281.040] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215076.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215076.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0281.041] GetFileType (hFile=0x1e0) returned 0x1 [0281.041] CloseHandle (hObject=0x1e0) returned 1 [0281.041] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0281.041] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215076.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215076.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f50)) returned 1 [0281.042] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0281.042] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0281.042] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215076.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215076.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f50)) returned 1 [0281.042] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0281.042] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0281.042] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0281.042] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x81ce, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0215210.WMF", cAlternateFileName="")) returned 1 [0281.042] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0281.042] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0281.042] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0281.043] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0281.043] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0281.043] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0281.043] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215210.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215210.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0281.044] GetFileType (hFile=0x1e0) returned 0x1 [0281.044] CloseHandle (hObject=0x1e0) returned 1 [0281.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0281.045] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215210.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215210.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x81ce)) returned 1 [0281.045] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0281.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0281.045] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215210.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215210.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x81ce)) returned 1 [0281.045] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0281.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0281.045] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0281.045] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x244a, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0215709.WMF", cAlternateFileName="")) returned 1 [0281.046] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0281.046] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0281.046] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0281.046] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0281.046] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0281.046] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0281.046] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215709.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215709.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0281.046] GetFileType (hFile=0x1e0) returned 0x1 [0281.047] CloseHandle (hObject=0x1e0) returned 1 [0281.047] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0281.047] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215709.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215709.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x244a)) returned 1 [0281.047] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0281.047] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0281.047] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215709.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215709.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x244a)) returned 1 [0281.047] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0281.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0281.048] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0281.048] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45a2, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0215710.WMF", cAlternateFileName="")) returned 1 [0281.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0281.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0281.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0281.048] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0281.048] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0281.048] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0281.048] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215710.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215710.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0281.049] GetFileType (hFile=0x1e0) returned 0x1 [0281.049] CloseHandle (hObject=0x1e0) returned 1 [0281.049] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0281.049] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215710.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215710.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45a2)) returned 1 [0281.050] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0281.050] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0281.050] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215710.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215710.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45a2)) returned 1 [0281.050] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0281.050] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0281.050] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0281.050] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15f2, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0215718.WMF", cAlternateFileName="")) returned 1 [0281.050] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0281.050] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0281.050] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0281.051] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0281.051] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0281.051] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0281.051] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215718.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215718.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0281.051] GetFileType (hFile=0x1e0) returned 0x1 [0281.052] CloseHandle (hObject=0x1e0) returned 1 [0281.052] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0281.052] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215718.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215718.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15f2)) returned 1 [0281.053] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0281.053] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0281.053] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215718.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215718.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15f2)) returned 1 [0281.053] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0281.053] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0281.053] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0281.053] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa783, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0216112.JPG", cAlternateFileName="")) returned 1 [0281.053] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0281.053] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0281.054] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0281.055] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0281.055] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0281.055] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0281.056] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216112.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216112.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0281.056] GetFileType (hFile=0x1e0) returned 0x1 [0281.056] CloseHandle (hObject=0x1e0) returned 1 [0281.057] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0281.057] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216112.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216112.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa783)) returned 1 [0281.057] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0281.057] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0281.057] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216112.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216112.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa783)) returned 1 [0281.057] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0281.057] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0281.058] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0281.058] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec9380a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5474, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0216153.JPG", cAlternateFileName="")) returned 1 [0281.058] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0281.058] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0281.058] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0281.058] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0281.058] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0281.058] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0281.059] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216153.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216153.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0281.059] GetFileType (hFile=0x1e0) returned 0x1 [0281.060] CloseHandle (hObject=0x1e0) returned 1 [0281.060] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0281.060] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216153.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216153.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec9380a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5474)) returned 1 [0281.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0281.061] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0281.061] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216153.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216153.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec9380a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5474)) returned 1 [0281.061] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0281.061] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0281.061] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0281.061] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa488, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0216540.WMF", cAlternateFileName="")) returned 1 [0281.061] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0281.061] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0281.062] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0281.062] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0281.062] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0281.062] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0281.063] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216540.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216540.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0281.063] GetFileType (hFile=0x1e0) returned 0x1 [0281.063] CloseHandle (hObject=0x1e0) returned 1 [0281.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0281.064] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216540.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216540.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa488)) returned 1 [0281.064] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0281.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0281.064] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216540.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216540.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa488)) returned 1 [0281.064] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0281.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0281.064] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0281.065] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec9380a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x60dc, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0216570.WMF", cAlternateFileName="")) returned 1 [0281.065] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0281.065] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0281.065] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0281.065] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0281.065] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0281.065] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0281.066] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216570.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216570.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0281.066] GetFileType (hFile=0x1e0) returned 0x1 [0281.066] CloseHandle (hObject=0x1e0) returned 1 [0281.066] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0281.067] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216570.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216570.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec9380a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x60dc)) returned 1 [0281.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0281.067] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0281.067] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216570.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216570.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec9380a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x60dc)) returned 1 [0281.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0281.067] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0281.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0281.067] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec9380a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f46, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0216600.WMF", cAlternateFileName="")) returned 1 [0281.067] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0281.067] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0281.067] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0281.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0281.068] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0281.068] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0281.068] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216600.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216600.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0281.068] GetFileType (hFile=0x1e0) returned 0x1 [0281.068] CloseHandle (hObject=0x1e0) returned 1 [0281.069] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0281.069] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216600.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216600.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec9380a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f46)) returned 1 [0281.069] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0281.069] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0281.069] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216600.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216600.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec9380a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f46)) returned 1 [0281.508] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0281.508] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0281.508] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0281.508] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x24e2, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0216612.WMF", cAlternateFileName="")) returned 1 [0281.508] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0281.508] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0281.508] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0281.509] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0281.509] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0281.509] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0281.509] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216612.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216612.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0281.510] GetFileType (hFile=0x174) returned 0x1 [0281.510] CloseHandle (hObject=0x174) returned 1 [0281.511] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0281.511] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216612.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216612.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x24e2)) returned 1 [0281.511] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0281.511] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0281.511] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216612.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216612.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x24e2)) returned 1 [0281.511] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0281.512] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0281.512] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0281.512] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9b3a, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0216874.WMF", cAlternateFileName="")) returned 1 [0281.512] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0281.512] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0281.512] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0281.512] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0281.512] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0281.512] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0281.513] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216874.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216874.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0281.513] GetFileType (hFile=0x174) returned 0x1 [0281.514] CloseHandle (hObject=0x174) returned 1 [0281.514] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0281.514] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216874.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216874.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9b3a)) returned 1 [0281.514] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0281.514] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0281.515] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216874.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216874.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9b3a)) returned 1 [0281.515] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0281.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0281.515] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0281.515] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1484, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0217262.WMF", cAlternateFileName="")) returned 1 [0281.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0281.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0281.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0281.515] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0281.515] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0281.516] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0281.516] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0217262.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0217262.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0281.516] GetFileType (hFile=0x174) returned 0x1 [0281.517] CloseHandle (hObject=0x174) returned 1 [0281.517] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0281.517] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0217262.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0217262.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1484)) returned 1 [0281.517] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0281.517] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0281.517] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0217262.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0217262.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1484)) returned 1 [0281.518] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0281.518] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0281.518] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0281.518] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd9a, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0217302.WMF", cAlternateFileName="")) returned 1 [0281.518] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0281.518] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0281.518] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0281.518] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0281.518] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0281.518] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0281.519] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0217302.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0217302.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0281.519] GetFileType (hFile=0x174) returned 0x1 [0281.520] CloseHandle (hObject=0x174) returned 1 [0281.520] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0281.520] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0217302.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0217302.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd9a)) returned 1 [0281.520] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0281.520] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0281.520] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0217302.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0217302.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd9a)) returned 1 [0281.520] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0281.521] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0281.521] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0281.521] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ca8, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0217872.WMF", cAlternateFileName="")) returned 1 [0281.521] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0281.521] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0281.521] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0281.521] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0281.521] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0281.521] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0281.522] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0217872.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0217872.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0281.522] GetFileType (hFile=0x174) returned 0x1 [0281.523] CloseHandle (hObject=0x174) returned 1 [0281.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0281.523] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0217872.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0217872.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ca8)) returned 1 [0281.524] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0281.524] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0281.524] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0217872.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0217872.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ca8)) returned 1 [0281.524] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0281.524] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0281.524] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0281.524] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8ad6, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0227419.JPG", cAlternateFileName="")) returned 1 [0281.524] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0281.524] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0281.524] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0281.524] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0281.525] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0281.525] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0281.525] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0227419.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0227419.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0281.525] GetFileType (hFile=0x174) returned 0x1 [0281.526] CloseHandle (hObject=0x174) returned 1 [0281.526] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0281.526] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0227419.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0227419.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8ad6)) returned 1 [0281.526] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0281.526] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0281.527] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0227419.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0227419.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8ad6)) returned 1 [0281.527] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0281.527] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0281.527] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0281.527] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe2e9, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0227558.JPG", cAlternateFileName="")) returned 1 [0281.527] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0281.527] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0281.527] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0281.527] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0281.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0281.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0281.528] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0227558.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0227558.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0281.528] GetFileType (hFile=0x174) returned 0x1 [0281.529] CloseHandle (hObject=0x174) returned 1 [0281.529] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0281.529] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0227558.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0227558.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe2e9)) returned 1 [0281.529] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0281.529] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0281.530] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0227558.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0227558.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe2e9)) returned 1 [0281.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0281.530] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0281.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0281.530] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x65a6, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0228823.WMF", cAlternateFileName="")) returned 1 [0281.530] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0281.530] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0281.530] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0281.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0281.531] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0281.531] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0281.531] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0228823.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0228823.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0281.532] GetFileType (hFile=0x174) returned 0x1 [0281.532] CloseHandle (hObject=0x174) returned 1 [0281.532] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0281.532] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0228823.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0228823.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x65a6)) returned 1 [0281.533] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0281.533] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0281.533] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0228823.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0228823.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x65a6)) returned 1 [0281.533] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0281.533] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0281.533] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0281.533] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec9380a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x918c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0228959.WMF", cAlternateFileName="")) returned 1 [0281.533] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0281.534] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0281.534] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0281.534] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0281.534] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0281.534] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0281.534] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0228959.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0228959.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0281.535] GetFileType (hFile=0x174) returned 0x1 [0281.535] CloseHandle (hObject=0x174) returned 1 [0281.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0281.536] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0228959.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0228959.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec9380a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x918c)) returned 1 [0281.536] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0281.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0281.536] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0228959.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0228959.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec9380a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x918c)) returned 1 [0281.536] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0281.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0281.536] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0281.536] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1daa, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0230553.WMF", cAlternateFileName="")) returned 1 [0281.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0281.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0281.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0281.537] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0281.537] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0281.537] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0281.537] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0230553.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0230553.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0281.537] GetFileType (hFile=0x174) returned 0x1 [0281.538] CloseHandle (hObject=0x174) returned 1 [0281.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0281.538] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0230553.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0230553.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1daa)) returned 1 [0281.538] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0281.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0281.539] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0230553.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0230553.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1daa)) returned 1 [0281.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0281.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0281.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0281.541] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec9380a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1066, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0230558.WMF", cAlternateFileName="")) returned 1 [0281.541] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0281.541] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0281.541] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0281.541] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0281.541] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0281.541] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0281.542] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0230558.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0230558.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0281.542] GetFileType (hFile=0x174) returned 0x1 [0281.543] CloseHandle (hObject=0x174) returned 1 [0281.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0281.543] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0230558.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0230558.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec9380a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1066)) returned 1 [0281.543] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0281.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0281.543] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0230558.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0230558.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec9380a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1066)) returned 1 [0281.543] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0281.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0281.544] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0281.544] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x332a, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0232171.WMF", cAlternateFileName="")) returned 1 [0281.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0281.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0281.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0281.544] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0281.544] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0281.544] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0281.545] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232171.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232171.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0281.545] GetFileType (hFile=0x174) returned 0x1 [0281.546] CloseHandle (hObject=0x174) returned 1 [0281.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0281.546] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232171.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232171.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x332a)) returned 1 [0281.547] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0281.547] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0281.547] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232171.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232171.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x332a)) returned 1 [0281.547] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0281.547] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0281.547] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0281.547] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec9380a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6bc2, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0232393.WMF", cAlternateFileName="")) returned 1 [0281.547] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0281.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0281.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0281.548] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0281.548] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0281.548] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0281.549] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232393.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232393.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0281.549] GetFileType (hFile=0x174) returned 0x1 [0281.550] CloseHandle (hObject=0x174) returned 1 [0281.550] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0281.550] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232393.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232393.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec9380a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6bc2)) returned 1 [0281.550] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0281.550] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0281.550] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232393.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232393.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec9380a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6bc2)) returned 1 [0281.551] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0281.551] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0281.551] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0281.551] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa086, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0232395.WMF", cAlternateFileName="")) returned 1 [0281.551] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0281.551] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0281.551] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0281.551] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0281.552] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0281.552] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0281.552] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232395.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232395.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0281.553] GetFileType (hFile=0x174) returned 0x1 [0281.553] CloseHandle (hObject=0x174) returned 1 [0281.933] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0281.933] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232395.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232395.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa086)) returned 1 [0281.933] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0281.933] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0281.933] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232395.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232395.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa086)) returned 1 [0281.933] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0281.934] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0281.934] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0281.934] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec9380a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x380a, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0232795.WMF", cAlternateFileName="")) returned 1 [0281.934] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0281.934] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0281.934] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0281.934] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0281.934] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0281.935] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0282.117] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232795.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232795.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0282.117] GetFileType (hFile=0x1ac) returned 0x1 [0282.118] CloseHandle (hObject=0x1ac) returned 1 [0282.118] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0282.118] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232795.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232795.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec9380a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x380a)) returned 1 [0282.118] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0282.119] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0282.119] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232795.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232795.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec9380a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x380a)) returned 1 [0282.119] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0282.119] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0282.119] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0282.119] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x899c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0232797.WMF", cAlternateFileName="")) returned 1 [0282.119] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0282.119] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0282.120] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0282.120] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0282.120] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0282.120] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0282.121] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232797.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232797.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0282.121] GetFileType (hFile=0x1ac) returned 0x1 [0282.121] CloseHandle (hObject=0x1ac) returned 1 [0282.122] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0282.122] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232797.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232797.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x899c)) returned 1 [0282.122] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0282.122] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0282.122] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232797.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232797.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x899c)) returned 1 [0282.123] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0282.123] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0282.123] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0282.123] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4de6, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0232803.WMF", cAlternateFileName="")) returned 1 [0282.123] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0282.123] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0282.123] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0282.124] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0282.124] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0282.124] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0282.124] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232803.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232803.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0282.125] GetFileType (hFile=0x1ac) returned 0x1 [0282.125] CloseHandle (hObject=0x1ac) returned 1 [0282.126] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0282.126] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232803.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232803.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4de6)) returned 1 [0282.126] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0282.126] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0282.126] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232803.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232803.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4de6)) returned 1 [0282.126] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0282.127] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0282.127] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0282.127] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x26e8, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0233512.WMF", cAlternateFileName="")) returned 1 [0282.127] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0282.127] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0282.127] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0282.127] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0282.127] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0282.127] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0282.128] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0233512.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0233512.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0282.128] GetFileType (hFile=0x1ac) returned 0x1 [0282.129] CloseHandle (hObject=0x1ac) returned 1 [0282.130] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0282.130] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0233512.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0233512.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x26e8)) returned 1 [0282.130] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0282.130] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0282.130] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0233512.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0233512.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x26e8)) returned 1 [0282.130] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0282.131] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0282.131] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0282.131] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x312c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0233665.WMF", cAlternateFileName="")) returned 1 [0282.131] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0282.131] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0282.131] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0282.131] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0282.131] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0282.131] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0282.133] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0233665.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0233665.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0282.133] GetFileType (hFile=0x1ac) returned 0x1 [0282.133] CloseHandle (hObject=0x1ac) returned 1 [0282.134] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0282.134] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0233665.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0233665.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x312c)) returned 1 [0282.134] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0282.134] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0282.134] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0233665.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0233665.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x312c)) returned 1 [0282.135] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0282.135] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0282.135] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0282.135] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x975e, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0233992.WMF", cAlternateFileName="")) returned 1 [0282.135] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0282.135] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0282.135] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0282.135] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0282.135] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0282.135] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0282.136] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0233992.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0233992.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0282.136] GetFileType (hFile=0x1ac) returned 0x1 [0282.137] CloseHandle (hObject=0x1ac) returned 1 [0282.137] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0282.137] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0233992.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0233992.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x975e)) returned 1 [0282.138] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0282.138] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0282.138] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0233992.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0233992.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x975e)) returned 1 [0282.138] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0282.138] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0282.138] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0282.138] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcec6, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0234000.WMF", cAlternateFileName="")) returned 1 [0282.138] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0282.139] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0282.139] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0282.139] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0282.139] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0282.139] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0282.140] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0234000.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0234000.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0282.140] GetFileType (hFile=0x1ac) returned 0x1 [0282.140] CloseHandle (hObject=0x1ac) returned 1 [0282.141] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0282.141] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0234000.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0234000.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcec6)) returned 1 [0282.141] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0282.141] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0282.141] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0234000.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0234000.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcec6)) returned 1 [0282.141] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0282.141] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0282.142] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0282.142] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b40, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0234001.WMF", cAlternateFileName="")) returned 1 [0282.142] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0282.142] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0282.142] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0282.142] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0282.142] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0282.142] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0282.143] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0234001.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0234001.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0282.143] GetFileType (hFile=0x1ac) returned 0x1 [0282.144] CloseHandle (hObject=0x1ac) returned 1 [0282.144] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0282.144] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0234001.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0234001.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b40)) returned 1 [0282.144] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0282.145] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0282.145] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0234001.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0234001.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b40)) returned 1 [0282.145] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0282.145] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0282.145] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0282.145] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x80d4, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0234376.WMF", cAlternateFileName="")) returned 1 [0282.145] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0282.145] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0282.146] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0282.146] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0282.146] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0282.146] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0282.147] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0234376.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0234376.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0282.147] GetFileType (hFile=0x1ac) returned 0x1 [0282.148] CloseHandle (hObject=0x1ac) returned 1 [0282.148] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0282.149] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0234376.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0234376.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x80d4)) returned 1 [0282.149] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0282.149] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0282.149] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0234376.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0234376.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x80d4)) returned 1 [0282.149] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0282.149] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0282.149] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0282.150] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcba0, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0237225.WMF", cAlternateFileName="")) returned 1 [0282.150] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0282.150] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0282.150] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0282.150] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0282.150] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0282.150] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0282.151] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237225.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0237225.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0282.151] GetFileType (hFile=0x1ac) returned 0x1 [0282.152] CloseHandle (hObject=0x1ac) returned 1 [0282.152] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0282.152] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237225.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0237225.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcba0)) returned 1 [0282.152] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0282.152] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0282.152] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237225.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0237225.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcba0)) returned 1 [0282.153] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0282.153] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0282.153] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0282.153] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5700, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0237228.WMF", cAlternateFileName="")) returned 1 [0282.153] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0282.153] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0282.153] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0282.153] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0282.153] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0282.153] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0282.154] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237228.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0237228.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0282.154] GetFileType (hFile=0x1ac) returned 0x1 [0282.155] CloseHandle (hObject=0x1ac) returned 1 [0282.155] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0282.155] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237228.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0237228.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5700)) returned 1 [0282.155] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0282.155] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0282.155] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237228.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0237228.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5700)) returned 1 [0282.155] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0282.155] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0282.156] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0282.156] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x60c2, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0237336.WMF", cAlternateFileName="")) returned 1 [0282.156] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0282.156] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0282.156] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0282.156] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0282.156] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0282.156] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0282.157] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237336.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0237336.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0282.157] GetFileType (hFile=0x1ac) returned 0x1 [0282.157] CloseHandle (hObject=0x1ac) returned 1 [0282.157] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0282.157] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237336.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0237336.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x60c2)) returned 1 [0282.158] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0282.158] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0282.158] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237336.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0237336.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x60c2)) returned 1 [0282.158] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0282.158] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0282.158] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0282.158] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x51be, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0237759.WMF", cAlternateFileName="")) returned 1 [0282.158] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0282.158] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0282.158] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0282.158] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0282.159] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0282.159] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0282.159] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237759.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0237759.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0282.159] GetFileType (hFile=0x1ac) returned 0x1 [0282.159] CloseHandle (hObject=0x1ac) returned 1 [0282.160] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0282.160] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237759.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0237759.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x51be)) returned 1 [0282.160] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0282.160] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0282.160] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237759.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0237759.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x51be)) returned 1 [0282.160] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0282.160] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0282.160] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0282.161] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x59a0, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0238333.WMF", cAlternateFileName="")) returned 1 [0282.161] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0282.161] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0282.161] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0282.161] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0282.161] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0282.161] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0282.161] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238333.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0238333.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0282.162] GetFileType (hFile=0x1ac) returned 0x1 [0282.162] CloseHandle (hObject=0x1ac) returned 1 [0282.162] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0282.162] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238333.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0238333.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x59a0)) returned 1 [0282.162] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0282.162] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0282.163] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238333.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0238333.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x59a0)) returned 1 [0282.163] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0282.467] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0282.467] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0282.467] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1334, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0238927.WMF", cAlternateFileName="")) returned 1 [0282.467] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0282.467] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0282.468] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0282.468] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0282.468] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0282.468] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0282.469] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238927.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0238927.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0282.469] GetFileType (hFile=0x1e0) returned 0x1 [0282.469] CloseHandle (hObject=0x1e0) returned 1 [0282.470] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0282.470] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238927.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0238927.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1334)) returned 1 [0282.470] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0282.470] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0282.470] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238927.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0238927.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1334)) returned 1 [0282.471] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0282.471] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0282.471] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0282.471] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d3c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0238959.WMF", cAlternateFileName="")) returned 1 [0282.471] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0282.471] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0282.471] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0282.471] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0282.471] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0282.471] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0282.472] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238959.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0238959.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0282.472] GetFileType (hFile=0x1e0) returned 0x1 [0282.473] CloseHandle (hObject=0x1e0) returned 1 [0282.473] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0282.473] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238959.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0238959.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d3c)) returned 1 [0282.474] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0282.474] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0282.474] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238959.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0238959.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d3c)) returned 1 [0282.474] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0282.474] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0282.474] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0282.474] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13b8, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0238983.WMF", cAlternateFileName="")) returned 1 [0282.474] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0282.474] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0282.475] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0282.475] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0282.475] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0282.475] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0282.520] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238983.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0238983.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0282.520] GetFileType (hFile=0x1e0) returned 0x1 [0282.521] CloseHandle (hObject=0x1e0) returned 1 [0282.521] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0282.522] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238983.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0238983.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13b8)) returned 1 [0282.522] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0282.522] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0282.522] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238983.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0238983.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13b8)) returned 1 [0282.523] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0282.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0282.523] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0282.523] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1284, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0239057.WMF", cAlternateFileName="")) returned 1 [0282.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0282.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0282.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0282.523] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0282.523] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0282.524] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0282.524] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239057.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239057.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0282.524] GetFileType (hFile=0x1e0) returned 0x1 [0282.525] CloseHandle (hObject=0x1e0) returned 1 [0282.525] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0282.525] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239057.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239057.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1284)) returned 1 [0282.526] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0282.526] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0282.526] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239057.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239057.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1284)) returned 1 [0282.526] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0282.526] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0282.526] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0282.526] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16fc, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0239063.WMF", cAlternateFileName="")) returned 1 [0282.526] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0282.526] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0282.527] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0282.527] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0282.527] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0282.527] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0282.527] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239063.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239063.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0282.528] GetFileType (hFile=0x1e0) returned 0x1 [0282.528] CloseHandle (hObject=0x1e0) returned 1 [0282.528] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0282.528] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239063.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239063.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16fc)) returned 1 [0282.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0282.529] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0282.529] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239063.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239063.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16fc)) returned 1 [0282.529] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0282.529] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0282.529] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0282.529] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1294, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0239079.WMF", cAlternateFileName="")) returned 1 [0282.529] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0282.529] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0282.529] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0282.529] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0282.529] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0282.529] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0282.530] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239079.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239079.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0282.530] GetFileType (hFile=0x1e0) returned 0x1 [0282.530] CloseHandle (hObject=0x1e0) returned 1 [0282.530] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0282.531] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239079.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239079.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1294)) returned 1 [0282.531] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0282.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0282.531] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239079.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239079.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1294)) returned 1 [0282.531] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0282.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0282.531] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0282.531] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1464, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0239191.WMF", cAlternateFileName="")) returned 1 [0282.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0282.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0282.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0282.531] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0282.532] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0282.532] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0282.532] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239191.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239191.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0282.532] GetFileType (hFile=0x1e0) returned 0x1 [0282.532] CloseHandle (hObject=0x1e0) returned 1 [0282.533] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0282.533] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239191.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239191.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1464)) returned 1 [0282.533] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0282.533] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0282.533] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239191.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239191.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1464)) returned 1 [0282.533] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0282.533] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0282.533] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0282.533] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8424, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0239611.WMF", cAlternateFileName="")) returned 1 [0282.533] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0282.533] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0282.533] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0282.534] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0282.534] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0282.534] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0282.534] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239611.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239611.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0282.534] GetFileType (hFile=0x1e0) returned 0x1 [0282.535] CloseHandle (hObject=0x1e0) returned 1 [0282.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0282.535] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239611.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239611.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8424)) returned 1 [0282.535] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0282.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0282.535] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239611.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239611.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8424)) returned 1 [0282.535] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0282.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0282.536] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0282.536] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1314, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0239935.WMF", cAlternateFileName="")) returned 1 [0282.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0282.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0282.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0282.536] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0282.536] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0282.536] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0282.537] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239935.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239935.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0282.537] GetFileType (hFile=0x1e0) returned 0x1 [0282.537] CloseHandle (hObject=0x1e0) returned 1 [0282.537] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0282.537] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239935.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239935.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1314)) returned 1 [0282.538] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0282.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0282.538] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239935.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239935.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1314)) returned 1 [0282.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0282.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0282.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0282.539] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1418, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0239941.WMF", cAlternateFileName="")) returned 1 [0282.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0282.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0282.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0282.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0282.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0282.540] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0282.540] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239941.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239941.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0282.540] GetFileType (hFile=0x1e0) returned 0x1 [0282.540] CloseHandle (hObject=0x1e0) returned 1 [0282.541] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0282.541] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239941.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239941.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1418)) returned 1 [0282.541] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0282.541] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0282.541] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239941.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239941.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1418)) returned 1 [0282.541] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0282.541] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0282.541] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0282.541] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1998, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0239943.WMF", cAlternateFileName="")) returned 1 [0282.542] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0282.542] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0282.542] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0282.542] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0282.542] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0282.542] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0282.542] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239943.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239943.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0282.542] GetFileType (hFile=0x1e0) returned 0x1 [0282.543] CloseHandle (hObject=0x1e0) returned 1 [0282.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0282.543] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239943.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239943.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1998)) returned 1 [0282.543] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0282.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0282.544] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239943.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239943.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1998)) returned 1 [0282.544] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0282.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0282.544] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0282.544] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c40, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0239951.WMF", cAlternateFileName="")) returned 1 [0282.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0282.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0282.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0282.544] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0282.544] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0282.545] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0282.545] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239951.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239951.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0282.545] GetFileType (hFile=0x1e0) returned 0x1 [0282.545] CloseHandle (hObject=0x1e0) returned 1 [0282.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0282.546] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239951.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239951.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c40)) returned 1 [0282.546] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0282.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0282.546] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239951.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239951.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c40)) returned 1 [0282.546] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0282.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0282.546] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0282.547] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bc8, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0239953.WMF", cAlternateFileName="")) returned 1 [0282.547] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0282.547] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0282.547] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0282.547] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0282.547] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0282.547] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0282.547] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239953.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239953.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0282.548] GetFileType (hFile=0x1e0) returned 0x1 [0282.548] CloseHandle (hObject=0x1e0) returned 1 [0282.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0282.548] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239953.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239953.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bc8)) returned 1 [0282.548] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0282.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0282.549] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239953.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239953.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bc8)) returned 1 [0282.549] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0282.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0282.549] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0282.549] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1348, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0239955.WMF", cAlternateFileName="")) returned 1 [0282.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0282.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0282.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0282.549] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0282.549] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0282.549] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0282.550] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239955.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239955.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0282.550] GetFileType (hFile=0x1e0) returned 0x1 [0282.550] CloseHandle (hObject=0x1e0) returned 1 [0282.551] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0282.551] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239955.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239955.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1348)) returned 1 [0282.551] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0282.551] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0282.551] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239955.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239955.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1348)) returned 1 [0282.551] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0282.551] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0282.551] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0282.551] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1720, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0239965.WMF", cAlternateFileName="")) returned 1 [0282.551] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0282.552] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0282.552] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0282.552] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0282.552] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0282.552] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0282.552] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239965.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239965.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0282.553] GetFileType (hFile=0x1e0) returned 0x1 [0282.553] CloseHandle (hObject=0x1e0) returned 1 [0282.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0282.554] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239965.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239965.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1720)) returned 1 [0282.554] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0282.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0282.554] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239965.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239965.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1720)) returned 1 [0282.554] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0282.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0282.554] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0282.555] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x154c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0239967.WMF", cAlternateFileName="")) returned 1 [0282.555] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0282.555] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0282.555] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0282.555] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0282.555] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0282.555] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0282.872] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239967.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239967.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0282.872] GetFileType (hFile=0x198) returned 0x1 [0282.872] CloseHandle (hObject=0x198) returned 1 [0282.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0282.872] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239967.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239967.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x154c)) returned 1 [0282.873] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0282.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0282.873] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239967.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239967.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x154c)) returned 1 [0282.873] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0282.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0282.873] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0282.873] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13e8, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0239973.WMF", cAlternateFileName="")) returned 1 [0282.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0282.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0282.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0282.873] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0282.873] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0282.873] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0282.874] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239973.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239973.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0282.874] GetFileType (hFile=0x198) returned 0x1 [0282.874] CloseHandle (hObject=0x198) returned 1 [0282.874] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0282.875] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239973.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239973.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13e8)) returned 1 [0282.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0282.875] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0282.875] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239973.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239973.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13e8)) returned 1 [0282.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0282.875] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0282.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0282.875] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xed05f07, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xed05f07, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xed05f07, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xda0, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0239975.WMF", cAlternateFileName="")) returned 1 [0282.875] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0282.875] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0282.875] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0282.876] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0282.876] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0282.876] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0282.876] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239975.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239975.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0282.876] GetFileType (hFile=0x198) returned 0x1 [0282.877] CloseHandle (hObject=0x198) returned 1 [0282.877] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0282.877] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239975.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239975.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xed05f07, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xed05f07, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xed05f07, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xda0)) returned 1 [0282.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0282.877] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0282.877] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239975.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239975.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xed05f07, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xed05f07, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xed05f07, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xda0)) returned 1 [0282.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0282.877] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0282.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0282.878] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xed05f07, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xed05f07, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf2fbd2e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcd8, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0239997.WMF", cAlternateFileName="")) returned 1 [0282.878] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0282.878] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0282.878] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0282.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0282.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0282.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0282.878] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239997.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239997.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0282.879] GetFileType (hFile=0x198) returned 0x1 [0282.879] CloseHandle (hObject=0x198) returned 1 [0282.879] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0282.879] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239997.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239997.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xed05f07, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xed05f07, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf2fbd2e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcd8)) returned 1 [0282.879] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0282.879] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0282.879] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239997.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239997.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xed05f07, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xed05f07, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf2fbd2e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcd8)) returned 1 [0282.879] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0282.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0282.880] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0282.880] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xed05f07, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1df8, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0240157.WMF", cAlternateFileName="")) returned 1 [0282.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0282.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0282.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0282.880] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0282.880] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0282.880] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0282.880] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240157.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0240157.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0282.881] GetFileType (hFile=0x198) returned 0x1 [0282.881] CloseHandle (hObject=0x198) returned 1 [0282.881] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0282.881] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240157.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0240157.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xed05f07, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1df8)) returned 1 [0282.881] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0282.881] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0282.881] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240157.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0240157.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xed05f07, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1df8)) returned 1 [0282.883] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0282.883] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0282.883] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0282.883] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xed05f07, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa410, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0240175.WMF", cAlternateFileName="")) returned 1 [0282.883] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0282.883] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0282.883] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0282.883] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0282.883] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0282.883] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0282.884] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240175.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0240175.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0282.884] GetFileType (hFile=0x198) returned 0x1 [0282.884] CloseHandle (hObject=0x198) returned 1 [0282.884] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0282.884] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240175.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0240175.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xed05f07, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa410)) returned 1 [0282.885] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0282.885] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0282.885] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240175.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0240175.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xed05f07, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa410)) returned 1 [0282.885] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0282.885] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0282.885] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0282.885] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xed05f07, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdc4, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0240189.WMF", cAlternateFileName="")) returned 1 [0282.885] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0282.885] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0282.885] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0282.885] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0282.885] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0282.885] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0282.886] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240189.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0240189.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0282.886] GetFileType (hFile=0x198) returned 0x1 [0282.886] CloseHandle (hObject=0x198) returned 1 [0282.886] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0282.887] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240189.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0240189.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xed05f07, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdc4)) returned 1 [0282.887] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0282.887] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0282.887] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240189.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0240189.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xed05f07, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdc4)) returned 1 [0282.887] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0282.887] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0282.887] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0282.887] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1476, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0240291.WMF", cAlternateFileName="")) returned 1 [0282.887] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0282.887] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0282.888] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0282.888] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0282.888] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0282.888] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0282.888] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240291.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0240291.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0282.888] GetFileType (hFile=0x198) returned 0x1 [0282.889] CloseHandle (hObject=0x198) returned 1 [0282.889] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0282.889] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240291.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0240291.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1476)) returned 1 [0282.889] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0282.889] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0282.889] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240291.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0240291.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1476)) returned 1 [0282.889] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0282.889] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0282.889] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0282.890] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xed05f07, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x92e, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0241019.WMF", cAlternateFileName="")) returned 1 [0282.890] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0282.890] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0282.890] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0282.890] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0282.890] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0282.890] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0282.890] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241019.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241019.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0282.890] GetFileType (hFile=0x198) returned 0x1 [0282.891] CloseHandle (hObject=0x198) returned 1 [0282.891] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0282.891] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241019.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241019.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xed05f07, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x92e)) returned 1 [0282.891] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0282.891] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0282.891] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241019.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241019.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xed05f07, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x92e)) returned 1 [0282.891] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0282.892] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0282.892] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0282.892] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa4e, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0241037.WMF", cAlternateFileName="")) returned 1 [0282.892] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0282.892] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0282.892] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0282.892] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0282.892] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0282.892] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0282.892] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241037.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241037.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0282.893] GetFileType (hFile=0x198) returned 0x1 [0282.893] CloseHandle (hObject=0x198) returned 1 [0282.893] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0282.893] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241037.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241037.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa4e)) returned 1 [0282.893] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0282.893] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0282.893] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241037.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241037.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa4e)) returned 1 [0282.894] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0282.894] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0282.894] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0282.894] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x926, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0241041.WMF", cAlternateFileName="")) returned 1 [0282.894] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0282.894] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0282.894] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0282.894] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0282.894] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0282.894] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0282.895] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241041.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241041.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0282.895] GetFileType (hFile=0x198) returned 0x1 [0282.895] CloseHandle (hObject=0x198) returned 1 [0282.895] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0282.896] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241041.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241041.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x926)) returned 1 [0282.896] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0282.896] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0282.896] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241041.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241041.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x926)) returned 1 [0282.896] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0282.896] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0282.896] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0282.896] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xab2, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0241043.WMF", cAlternateFileName="")) returned 1 [0282.896] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0282.896] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0282.896] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0282.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0282.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0282.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0282.897] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241043.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241043.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0282.898] GetFileType (hFile=0x198) returned 0x1 [0282.898] CloseHandle (hObject=0x198) returned 1 [0282.898] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0282.898] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241043.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241043.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xab2)) returned 1 [0282.899] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0282.899] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0282.899] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241043.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241043.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xab2)) returned 1 [0282.899] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0282.899] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0282.899] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0282.899] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34834b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf34834b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x82a, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0241077.WMF", cAlternateFileName="")) returned 1 [0282.899] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0282.899] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0282.899] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0282.899] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0282.900] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0282.900] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0282.900] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241077.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241077.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0282.900] GetFileType (hFile=0x198) returned 0x1 [0282.900] CloseHandle (hObject=0x198) returned 1 [0282.901] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0282.901] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241077.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241077.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34834b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf34834b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x82a)) returned 1 [0282.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0282.901] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0282.901] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241077.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241077.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34834b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf34834b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x82a)) returned 1 [0282.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0282.901] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0282.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0282.901] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34834b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf34834b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcbe, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0241773.WMF", cAlternateFileName="")) returned 1 [0282.902] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0282.902] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0282.902] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0282.902] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0282.902] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0282.902] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0282.902] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241773.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241773.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0282.903] GetFileType (hFile=0x198) returned 0x1 [0282.903] CloseHandle (hObject=0x198) returned 1 [0282.903] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0282.903] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241773.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241773.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34834b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf34834b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcbe)) returned 1 [0282.903] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0282.904] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0282.904] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241773.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241773.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34834b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf34834b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcbe)) returned 1 [0282.904] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0282.904] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0282.904] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0282.904] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34834b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf34834b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7b2, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0241781.WMF", cAlternateFileName="")) returned 1 [0282.904] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0282.904] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0282.904] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0282.904] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0282.904] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0282.904] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0282.905] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241781.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241781.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0282.905] GetFileType (hFile=0x198) returned 0x1 [0282.906] CloseHandle (hObject=0x198) returned 1 [0282.907] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0282.907] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241781.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241781.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34834b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf34834b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7b2)) returned 1 [0282.907] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0282.907] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0282.907] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241781.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241781.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34834b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf34834b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7b2)) returned 1 [0282.907] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0282.907] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0282.907] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0282.908] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34834b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf34834b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7938, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0250504.WMF", cAlternateFileName="")) returned 1 [0282.908] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0282.908] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0282.908] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0282.908] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0282.908] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0282.908] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0282.909] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0250504.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0250504.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0282.909] GetFileType (hFile=0x198) returned 0x1 [0282.909] CloseHandle (hObject=0x198) returned 1 [0282.909] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0282.909] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0250504.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0250504.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34834b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf34834b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7938)) returned 1 [0282.910] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0282.910] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0282.910] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0250504.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0250504.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34834b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf34834b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7938)) returned 1 [0282.910] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0282.910] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0282.910] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0282.910] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf2fbd2e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf2fbd2e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf34834b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6958, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0250997.WMF", cAlternateFileName="")) returned 1 [0282.910] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0282.910] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0282.910] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0282.911] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0282.911] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0282.911] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0282.911] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0250997.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0250997.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0282.911] GetFileType (hFile=0x198) returned 0x1 [0282.912] CloseHandle (hObject=0x198) returned 1 [0282.912] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0282.912] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0250997.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0250997.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf2fbd2e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf2fbd2e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf34834b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6958)) returned 1 [0282.912] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0282.912] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0282.912] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0250997.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0250997.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf2fbd2e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf2fbd2e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf34834b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6958)) returned 1 [0282.913] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0282.913] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0282.913] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0282.913] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xed05f07, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xed05f07, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf34834b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1100c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0251007.WMF", cAlternateFileName="")) returned 1 [0283.278] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0283.278] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0283.278] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0283.278] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0283.278] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0283.278] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0283.279] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0251007.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0251007.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0283.279] GetFileType (hFile=0x21c) returned 0x1 [0283.279] CloseHandle (hObject=0x21c) returned 1 [0283.279] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0283.279] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0251007.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0251007.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xed05f07, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xed05f07, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf34834b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1100c)) returned 1 [0283.280] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0283.280] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0283.280] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0251007.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0251007.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xed05f07, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xed05f07, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf34834b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1100c)) returned 1 [0283.280] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0283.280] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0283.280] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0283.280] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34834b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf34834b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf34834b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xae2, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0252629.WMF", cAlternateFileName="")) returned 1 [0283.280] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0283.280] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0283.280] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0283.280] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0283.280] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0283.280] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0283.281] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0252629.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0252629.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0283.281] GetFileType (hFile=0x21c) returned 0x1 [0283.281] CloseHandle (hObject=0x21c) returned 1 [0283.281] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0283.282] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0252629.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0252629.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34834b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf34834b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf34834b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xae2)) returned 1 [0283.282] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0283.282] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0283.282] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0252629.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0252629.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34834b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf34834b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf34834b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xae2)) returned 1 [0283.282] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0283.282] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0283.282] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0283.282] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf2fbd2e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf2fbd2e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf34834b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf56, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0252669.WMF", cAlternateFileName="")) returned 1 [0283.282] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0283.282] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0283.282] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0283.283] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0283.283] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0283.283] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0283.283] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0252669.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0252669.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0283.283] GetFileType (hFile=0x21c) returned 0x1 [0283.284] CloseHandle (hObject=0x21c) returned 1 [0283.284] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0283.284] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0252669.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0252669.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf2fbd2e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf2fbd2e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf34834b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf56)) returned 1 [0283.284] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0283.284] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0283.284] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0252669.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0252669.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf2fbd2e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf2fbd2e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf34834b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf56)) returned 1 [0283.284] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0283.284] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0283.284] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0283.285] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xed05f07, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xed05f07, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf34834b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf6a, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0278702.WMF", cAlternateFileName="")) returned 1 [0283.285] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0283.285] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0283.285] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0283.285] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0283.285] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0283.285] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0283.286] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0278702.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0278702.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0283.286] GetFileType (hFile=0x21c) returned 0x1 [0283.286] CloseHandle (hObject=0x21c) returned 1 [0283.286] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0283.286] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0278702.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0278702.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xed05f07, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xed05f07, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf34834b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf6a)) returned 1 [0283.287] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0283.287] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0283.287] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0278702.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0278702.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xed05f07, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xed05f07, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf34834b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf6a)) returned 1 [0283.287] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0283.287] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0283.287] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0283.287] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xed05f07, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xed05f07, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf2fbd2e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4330, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0279644.WMF", cAlternateFileName="")) returned 1 [0283.287] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0283.287] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0283.287] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0283.287] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0283.287] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0283.287] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0283.288] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0279644.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0279644.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0283.288] GetFileType (hFile=0x21c) returned 0x1 [0283.288] CloseHandle (hObject=0x21c) returned 1 [0283.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0283.289] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0279644.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0279644.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xed05f07, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xed05f07, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf2fbd2e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4330)) returned 1 [0283.289] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0283.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0283.289] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0279644.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0279644.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xed05f07, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xed05f07, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf2fbd2e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4330)) returned 1 [0283.289] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0283.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0283.289] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0283.289] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11dee, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0280468.WMF", cAlternateFileName="")) returned 1 [0283.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0283.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0283.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0283.289] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0283.290] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0283.290] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0283.290] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0280468.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0280468.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0283.290] GetFileType (hFile=0x21c) returned 0x1 [0283.290] CloseHandle (hObject=0x21c) returned 1 [0283.291] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0283.291] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0280468.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0280468.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11dee)) returned 1 [0283.291] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0283.291] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0283.291] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0280468.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0280468.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11dee)) returned 1 [0283.291] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0283.291] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0283.291] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0283.291] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x94c4, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0281008.WMF", cAlternateFileName="")) returned 1 [0283.291] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0283.291] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0283.291] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0283.292] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0283.292] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0283.292] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0283.293] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281008.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281008.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0283.294] GetFileType (hFile=0x21c) returned 0x1 [0283.295] CloseHandle (hObject=0x21c) returned 1 [0283.295] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0283.295] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281008.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281008.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x94c4)) returned 1 [0283.296] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0283.296] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0283.296] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281008.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281008.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x94c4)) returned 1 [0283.296] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0283.296] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0283.296] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0283.296] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb5b4, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0281243.WMF", cAlternateFileName="")) returned 1 [0283.296] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0283.296] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0283.296] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0283.296] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0283.296] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0283.297] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0283.297] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281243.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281243.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0283.297] GetFileType (hFile=0x21c) returned 0x1 [0283.297] CloseHandle (hObject=0x21c) returned 1 [0283.297] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0283.298] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281243.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281243.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb5b4)) returned 1 [0283.298] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0283.298] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0283.298] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281243.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281243.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb5b4)) returned 1 [0283.298] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0283.298] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0283.298] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0283.298] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31dc, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0281630.WMF", cAlternateFileName="")) returned 1 [0283.298] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0283.298] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0283.298] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0283.299] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0283.299] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0283.299] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0283.299] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281630.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281630.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0283.299] GetFileType (hFile=0x21c) returned 0x1 [0283.300] CloseHandle (hObject=0x21c) returned 1 [0283.300] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0283.300] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281630.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281630.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31dc)) returned 1 [0283.300] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0283.300] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0283.300] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281630.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281630.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31dc)) returned 1 [0283.300] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0283.300] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0283.301] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0283.301] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3854, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0281632.WMF", cAlternateFileName="")) returned 1 [0283.301] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0283.301] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0283.301] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0283.301] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0283.301] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0283.301] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0283.301] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281632.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281632.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0283.302] GetFileType (hFile=0x21c) returned 0x1 [0283.302] CloseHandle (hObject=0x21c) returned 1 [0283.302] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0283.302] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281632.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281632.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3854)) returned 1 [0283.302] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0283.303] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0283.303] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281632.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281632.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3854)) returned 1 [0283.303] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0283.303] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0283.303] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0283.303] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34834b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf34834b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e88, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0281638.WMF", cAlternateFileName="")) returned 1 [0283.303] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0283.303] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0283.303] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0283.303] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0283.303] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0283.303] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0283.304] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281638.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281638.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0283.304] GetFileType (hFile=0x21c) returned 0x1 [0283.304] CloseHandle (hObject=0x21c) returned 1 [0283.304] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0283.304] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281638.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281638.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34834b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf34834b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e88)) returned 1 [0283.305] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0283.305] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0283.305] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281638.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281638.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34834b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf34834b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e88)) returned 1 [0283.305] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0283.305] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0283.305] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0283.305] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30f2, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0281640.WMF", cAlternateFileName="")) returned 1 [0283.305] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0283.305] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0283.305] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0283.305] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0283.305] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0283.306] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0283.306] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281640.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281640.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0283.306] GetFileType (hFile=0x21c) returned 0x1 [0283.306] CloseHandle (hObject=0x21c) returned 1 [0283.307] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0283.307] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281640.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281640.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30f2)) returned 1 [0283.307] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0283.307] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0283.307] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281640.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281640.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30f2)) returned 1 [0283.307] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0283.307] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0283.307] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0283.307] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3c9e, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0282126.WMF", cAlternateFileName="")) returned 1 [0283.307] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0283.308] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0283.308] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0283.308] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0283.308] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0283.308] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0283.308] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0282126.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0282126.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0283.308] GetFileType (hFile=0x21c) returned 0x1 [0283.309] CloseHandle (hObject=0x21c) returned 1 [0283.309] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0283.309] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0282126.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0282126.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3c9e)) returned 1 [0283.309] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0283.309] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0283.309] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0282126.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0282126.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3c9e)) returned 1 [0283.310] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0283.310] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0283.310] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0283.310] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8166, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0282928.WMF", cAlternateFileName="")) returned 1 [0283.310] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0283.310] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0283.310] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0283.310] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0283.310] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0283.310] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0283.311] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0282928.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0282928.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0283.311] GetFileType (hFile=0x21c) returned 0x1 [0283.311] CloseHandle (hObject=0x21c) returned 1 [0283.311] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0283.311] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0282928.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0282928.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8166)) returned 1 [0283.312] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0283.312] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0283.312] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0282928.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0282928.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8166)) returned 1 [0283.312] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0283.312] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0283.312] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0283.312] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34834b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf34834b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3700, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0282932.WMF", cAlternateFileName="")) returned 1 [0283.312] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0283.312] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0283.312] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0283.312] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0283.313] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0283.313] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0283.313] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0282932.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0282932.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0283.313] GetFileType (hFile=0x21c) returned 0x1 [0283.314] CloseHandle (hObject=0x21c) returned 1 [0283.314] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0283.314] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0282932.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0282932.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34834b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf34834b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3700)) returned 1 [0283.314] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0283.314] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0283.314] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0282932.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0282932.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34834b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf34834b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3700)) returned 1 [0283.314] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0283.314] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0283.314] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0283.315] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x388a, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0285462.WMF", cAlternateFileName="")) returned 1 [0283.315] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0283.315] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0283.315] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0283.315] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0283.315] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0283.315] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0283.315] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285462.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285462.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0283.317] GetFileType (hFile=0x21c) returned 0x1 [0283.317] CloseHandle (hObject=0x21c) returned 1 [0283.318] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0283.318] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285462.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285462.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x388a)) returned 1 [0283.318] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0283.318] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0283.318] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285462.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285462.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x388a)) returned 1 [0283.318] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0283.318] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0283.318] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0283.318] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2440, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0285484.WMF", cAlternateFileName="")) returned 1 [0283.318] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0283.319] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0283.319] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0283.319] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0283.319] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0283.319] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0283.319] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285484.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285484.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0283.715] GetFileType (hFile=0x174) returned 0x1 [0283.716] CloseHandle (hObject=0x174) returned 1 [0283.717] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0283.717] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285484.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285484.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2440)) returned 1 [0283.717] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0283.717] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0283.717] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285484.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285484.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2440)) returned 1 [0283.718] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0283.718] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0283.718] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0283.718] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x795c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0285780.WMF", cAlternateFileName="")) returned 1 [0283.718] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0283.718] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0283.718] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0283.718] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0283.719] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0283.719] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0283.720] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285780.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285780.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0283.720] GetFileType (hFile=0x174) returned 0x1 [0283.720] CloseHandle (hObject=0x174) returned 1 [0283.721] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0283.721] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285780.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285780.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x795c)) returned 1 [0283.721] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0283.721] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0283.722] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285780.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285780.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x795c)) returned 1 [0283.722] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0283.722] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0283.722] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0283.722] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x523e, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0285782.WMF", cAlternateFileName="")) returned 1 [0283.722] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0283.723] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0283.723] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0283.723] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0283.723] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0283.723] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0283.724] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285782.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285782.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0283.724] GetFileType (hFile=0x174) returned 0x1 [0283.725] CloseHandle (hObject=0x174) returned 1 [0283.725] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0283.726] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285782.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285782.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x523e)) returned 1 [0283.726] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0283.726] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0283.726] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285782.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285782.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x523e)) returned 1 [0283.726] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0283.726] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0283.727] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0283.727] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2eb4, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0285792.WMF", cAlternateFileName="")) returned 1 [0283.727] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0283.727] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0283.727] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0283.727] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0283.728] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0283.728] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0283.729] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285792.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285792.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0283.729] GetFileType (hFile=0x174) returned 0x1 [0283.730] CloseHandle (hObject=0x174) returned 1 [0283.730] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0283.730] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285792.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285792.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2eb4)) returned 1 [0283.732] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0283.732] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0283.732] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285792.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285792.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2eb4)) returned 1 [0283.732] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0283.732] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0283.732] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0283.733] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3550, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0285796.WMF", cAlternateFileName="")) returned 1 [0283.733] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0283.733] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0283.733] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0283.733] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0283.733] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0283.733] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0283.734] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285796.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285796.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0283.735] GetFileType (hFile=0x174) returned 0x1 [0283.735] CloseHandle (hObject=0x174) returned 1 [0283.736] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0283.736] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285796.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285796.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3550)) returned 1 [0283.736] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0283.736] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0283.736] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285796.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285796.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3550)) returned 1 [0283.736] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0283.737] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0283.737] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0283.737] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x23f4, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0285808.WMF", cAlternateFileName="")) returned 1 [0283.737] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0283.737] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0283.737] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0283.737] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0283.738] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0283.738] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0283.739] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285808.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285808.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0283.739] GetFileType (hFile=0x174) returned 0x1 [0283.740] CloseHandle (hObject=0x174) returned 1 [0283.740] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0283.740] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285808.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285808.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x23f4)) returned 1 [0283.740] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0283.741] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0283.741] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285808.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285808.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x23f4)) returned 1 [0283.741] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0283.741] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0283.741] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0283.741] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2210, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0285820.WMF", cAlternateFileName="")) returned 1 [0283.741] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0283.742] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0283.742] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0283.742] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0283.742] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0283.742] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0283.743] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285820.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285820.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0283.743] GetFileType (hFile=0x174) returned 0x1 [0283.744] CloseHandle (hObject=0x174) returned 1 [0283.744] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0283.745] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285820.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285820.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2210)) returned 1 [0283.745] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0283.745] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0283.745] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285820.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285820.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2210)) returned 1 [0283.745] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0283.745] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0283.746] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0283.746] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21a0, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0285822.WMF", cAlternateFileName="")) returned 1 [0283.746] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0283.746] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0283.746] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0283.746] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0283.747] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0283.747] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0283.748] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285822.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285822.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0284.077] GetFileType (hFile=0x174) returned 0x1 [0284.078] CloseHandle (hObject=0x174) returned 1 [0284.078] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0284.078] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285822.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285822.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21a0)) returned 1 [0284.078] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0284.078] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0284.079] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285822.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285822.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21a0)) returned 1 [0284.079] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0284.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0284.079] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0284.079] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7898, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0287018.WMF", cAlternateFileName="")) returned 1 [0284.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0284.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0284.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0284.079] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0284.079] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0284.080] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0284.080] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287018.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287018.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0284.081] GetFileType (hFile=0x174) returned 0x1 [0284.081] CloseHandle (hObject=0x174) returned 1 [0284.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0284.082] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287018.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287018.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7898)) returned 1 [0284.082] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0284.082] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0284.082] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287018.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287018.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7898)) returned 1 [0284.082] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0284.082] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0284.082] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0284.083] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x931a, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0287019.WMF", cAlternateFileName="")) returned 1 [0284.083] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0284.083] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0284.083] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0284.083] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0284.083] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0284.083] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0284.084] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287019.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287019.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0284.084] GetFileType (hFile=0x174) returned 0x1 [0284.085] CloseHandle (hObject=0x174) returned 1 [0284.085] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0284.085] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287019.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287019.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x931a)) returned 1 [0284.085] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0284.085] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0284.086] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287019.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287019.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x931a)) returned 1 [0284.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0284.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0284.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0284.086] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x80d8, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0287020.WMF", cAlternateFileName="")) returned 1 [0284.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0284.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0284.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0284.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0284.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0284.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0284.087] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287020.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287020.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0284.088] GetFileType (hFile=0x174) returned 0x1 [0284.088] CloseHandle (hObject=0x174) returned 1 [0284.088] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0284.088] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287020.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287020.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x80d8)) returned 1 [0284.089] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0284.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0284.089] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287020.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287020.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x80d8)) returned 1 [0284.089] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0284.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0284.089] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0284.089] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc6d2, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0287024.WMF", cAlternateFileName="")) returned 1 [0284.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0284.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0284.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0284.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0284.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0284.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0284.091] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287024.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287024.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0284.091] GetFileType (hFile=0x174) returned 0x1 [0284.091] CloseHandle (hObject=0x174) returned 1 [0284.092] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0284.092] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287024.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287024.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc6d2)) returned 1 [0284.092] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0284.092] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0284.092] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287024.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287024.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc6d2)) returned 1 [0284.092] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0284.092] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0284.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0284.093] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcd10, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0287408.WMF", cAlternateFileName="")) returned 1 [0284.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0284.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0284.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0284.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0284.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0284.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0284.094] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287408.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287408.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0284.094] GetFileType (hFile=0x174) returned 0x1 [0284.095] CloseHandle (hObject=0x174) returned 1 [0284.095] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0284.095] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287408.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287408.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcd10)) returned 1 [0284.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0284.095] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0284.095] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287408.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287408.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcd10)) returned 1 [0284.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0284.096] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0284.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0284.096] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa80c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0287415.WMF", cAlternateFileName="")) returned 1 [0284.096] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0284.096] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0284.096] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0284.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0284.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0284.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0284.097] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287415.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287415.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0284.097] GetFileType (hFile=0x174) returned 0x1 [0284.098] CloseHandle (hObject=0x174) returned 1 [0284.098] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0284.098] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287415.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287415.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa80c)) returned 1 [0284.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0284.098] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0284.099] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287415.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287415.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa80c)) returned 1 [0284.099] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0284.099] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0284.099] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0284.099] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd6bc, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0287417.WMF", cAlternateFileName="")) returned 1 [0284.099] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0284.099] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0284.099] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0284.100] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0284.100] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0284.100] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0284.100] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287417.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287417.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0284.101] GetFileType (hFile=0x174) returned 0x1 [0284.101] CloseHandle (hObject=0x174) returned 1 [0284.102] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0284.102] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287417.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287417.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd6bc)) returned 1 [0284.102] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0284.102] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0284.102] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287417.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287417.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd6bc)) returned 1 [0284.103] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0284.103] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0284.103] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0284.103] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x89a4, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0287641.JPG", cAlternateFileName="")) returned 1 [0284.103] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0284.103] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0284.103] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0284.103] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0284.104] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0284.104] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0284.104] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287641.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287641.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0284.105] GetFileType (hFile=0x174) returned 0x1 [0284.105] CloseHandle (hObject=0x174) returned 1 [0284.106] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0284.106] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287641.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287641.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x89a4)) returned 1 [0284.106] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0284.106] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0284.107] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287641.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287641.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x89a4)) returned 1 [0284.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0284.107] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0284.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0284.107] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x42d1, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0287642.JPG", cAlternateFileName="")) returned 1 [0284.107] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0284.107] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0284.107] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0284.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0284.108] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0284.108] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0284.108] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287642.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287642.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0284.108] GetFileType (hFile=0x174) returned 0x1 [0284.109] CloseHandle (hObject=0x174) returned 1 [0284.109] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0284.109] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287642.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287642.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x42d1)) returned 1 [0284.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0284.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0284.110] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287642.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287642.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x42d1)) returned 1 [0284.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0284.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0284.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0284.110] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3e91, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0287643.JPG", cAlternateFileName="")) returned 1 [0284.111] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0284.111] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0284.111] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0284.111] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0284.111] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0284.112] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0284.112] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287643.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287643.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0284.112] GetFileType (hFile=0x174) returned 0x1 [0284.113] CloseHandle (hObject=0x174) returned 1 [0284.113] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0284.114] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287643.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287643.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3e91)) returned 1 [0284.114] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0284.114] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0284.114] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287643.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287643.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3e91)) returned 1 [0284.114] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0284.114] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0284.114] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0284.115] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43c5, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0287644.JPG", cAlternateFileName="")) returned 1 [0284.115] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0284.115] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0284.115] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0284.115] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0284.115] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0284.115] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0284.116] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287644.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287644.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0284.116] GetFileType (hFile=0x174) returned 0x1 [0284.117] CloseHandle (hObject=0x174) returned 1 [0284.117] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0284.118] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287644.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287644.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43c5)) returned 1 [0284.118] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0284.118] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0284.118] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287644.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287644.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43c5)) returned 1 [0284.118] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0284.118] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0284.119] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0284.119] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8d86, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0287645.JPG", cAlternateFileName="")) returned 1 [0284.119] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0284.119] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0284.119] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0284.119] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0284.119] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0284.120] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0284.120] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287645.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287645.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0284.120] GetFileType (hFile=0x174) returned 0x1 [0284.121] CloseHandle (hObject=0x174) returned 1 [0284.476] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0284.476] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287645.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287645.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8d86)) returned 1 [0284.476] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0284.476] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0284.476] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287645.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287645.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8d86)) returned 1 [0284.476] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0284.476] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0284.477] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0284.477] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d21, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0289430.JPG", cAlternateFileName="")) returned 1 [0284.477] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0284.477] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0284.477] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0284.477] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0284.477] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0284.477] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0284.478] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0289430.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0289430.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0284.478] GetFileType (hFile=0x198) returned 0x1 [0284.478] CloseHandle (hObject=0x198) returned 1 [0284.478] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0284.478] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0289430.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0289430.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d21)) returned 1 [0284.478] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0284.478] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0284.479] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0289430.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0289430.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d21)) returned 1 [0284.479] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0284.479] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0284.479] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0284.480] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9e8a, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0290548.WMF", cAlternateFileName="")) returned 1 [0284.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0284.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0284.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0284.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0284.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0284.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0284.480] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0290548.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0290548.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0284.480] GetFileType (hFile=0x198) returned 0x1 [0284.481] CloseHandle (hObject=0x198) returned 1 [0284.481] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0284.481] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0290548.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0290548.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9e8a)) returned 1 [0284.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0284.481] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0284.481] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0290548.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0290548.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9e8a)) returned 1 [0284.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0284.481] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0284.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0284.481] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2590, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0291794.WMF", cAlternateFileName="")) returned 1 [0284.481] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0284.481] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0284.482] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0284.482] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0284.482] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0284.482] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0284.482] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0291794.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0291794.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0284.482] GetFileType (hFile=0x198) returned 0x1 [0284.482] CloseHandle (hObject=0x198) returned 1 [0284.483] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0284.483] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0291794.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0291794.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2590)) returned 1 [0284.483] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0284.483] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0284.483] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0291794.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0291794.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2590)) returned 1 [0284.483] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0284.483] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0284.483] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0284.483] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20e4, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0292248.WMF", cAlternateFileName="")) returned 1 [0284.483] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0284.483] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0284.483] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0284.521] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0284.521] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0284.521] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0284.522] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292248.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292248.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0284.522] GetFileType (hFile=0x198) returned 0x1 [0284.522] CloseHandle (hObject=0x198) returned 1 [0284.522] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0284.523] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292248.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292248.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20e4)) returned 1 [0284.523] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0284.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0284.523] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292248.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292248.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20e4)) returned 1 [0284.523] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0284.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0284.524] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0284.524] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7aa6, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0292270.WMF", cAlternateFileName="")) returned 1 [0284.524] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0284.524] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0284.524] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0284.524] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0284.524] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0284.524] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0284.524] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292270.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292270.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0284.524] GetFileType (hFile=0x198) returned 0x1 [0284.525] CloseHandle (hObject=0x198) returned 1 [0284.525] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0284.525] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292270.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292270.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7aa6)) returned 1 [0284.525] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0284.525] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0284.525] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292270.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292270.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7aa6)) returned 1 [0284.525] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0284.525] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0284.525] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0284.525] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b64, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0292272.WMF", cAlternateFileName="")) returned 1 [0284.526] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0284.526] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0284.526] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0284.526] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0284.526] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0284.526] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0284.526] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292272.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292272.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0284.527] GetFileType (hFile=0x198) returned 0x1 [0284.527] CloseHandle (hObject=0x198) returned 1 [0284.527] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0284.527] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292272.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292272.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b64)) returned 1 [0284.527] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0284.527] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0284.527] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292272.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292272.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b64)) returned 1 [0284.527] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0284.527] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0284.527] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0284.527] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3658, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0292278.WMF", cAlternateFileName="")) returned 1 [0284.528] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0284.528] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0284.528] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0284.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0284.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0284.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0284.529] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292278.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292278.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0284.529] GetFileType (hFile=0x198) returned 0x1 [0284.529] CloseHandle (hObject=0x198) returned 1 [0284.529] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0284.529] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292278.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292278.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3658)) returned 1 [0284.529] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0284.529] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0284.529] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292278.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292278.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3658)) returned 1 [0284.529] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0284.529] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0284.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0284.530] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b56, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0292286.WMF", cAlternateFileName="")) returned 1 [0284.530] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0284.530] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0284.530] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0284.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0284.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0284.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0284.530] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292286.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292286.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0284.530] GetFileType (hFile=0x198) returned 0x1 [0284.530] CloseHandle (hObject=0x198) returned 1 [0284.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0284.531] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292286.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292286.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b56)) returned 1 [0284.531] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0284.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0284.531] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292286.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292286.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b56)) returned 1 [0284.532] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0284.532] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0284.532] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0284.532] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12a6, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0293800.WMF", cAlternateFileName="")) returned 1 [0284.532] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0284.532] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0284.532] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0284.532] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0284.532] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0284.532] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0284.532] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0293800.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0293800.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0284.532] GetFileType (hFile=0x198) returned 0x1 [0284.533] CloseHandle (hObject=0x198) returned 1 [0284.533] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0284.533] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0293800.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0293800.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12a6)) returned 1 [0284.533] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0284.533] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0284.533] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0293800.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0293800.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12a6)) returned 1 [0284.533] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0284.533] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0284.533] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0284.533] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17be, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0293832.WMF", cAlternateFileName="")) returned 1 [0284.533] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0284.533] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0284.533] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0284.533] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0284.534] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0284.534] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0284.534] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0293832.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0293832.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0284.809] GetFileType (hFile=0x1c0) returned 0x1 [0284.809] CloseHandle (hObject=0x1c0) returned 1 [0284.809] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0284.810] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0293832.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0293832.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17be)) returned 1 [0284.810] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0284.810] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0284.810] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0293832.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0293832.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17be)) returned 1 [0284.810] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0284.810] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0284.810] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0284.810] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x37de, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0294989.WMF", cAlternateFileName="")) returned 1 [0284.811] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0284.811] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0284.811] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0284.811] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0284.811] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0284.811] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0284.811] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0294989.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0294989.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0284.813] GetFileType (hFile=0x1c0) returned 0x1 [0284.813] CloseHandle (hObject=0x1c0) returned 1 [0284.814] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0284.814] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0294989.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0294989.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x37de)) returned 1 [0284.814] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0284.814] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0284.814] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0294989.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0294989.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x37de)) returned 1 [0284.814] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0284.815] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0284.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0284.815] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6180, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0294991.WMF", cAlternateFileName="")) returned 1 [0284.815] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0284.815] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0284.815] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0284.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0284.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0284.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0284.816] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0294991.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0294991.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0284.817] GetFileType (hFile=0x1c0) returned 0x1 [0284.817] CloseHandle (hObject=0x1c0) returned 1 [0284.818] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0284.818] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0294991.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0294991.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6180)) returned 1 [0284.818] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0284.818] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0284.818] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0294991.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0294991.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6180)) returned 1 [0284.818] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0284.818] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0284.819] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0284.819] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21b2, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0295069.WMF", cAlternateFileName="")) returned 1 [0284.819] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0284.819] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0284.819] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0284.819] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0284.819] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0284.819] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0284.820] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0295069.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0295069.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0284.821] GetFileType (hFile=0x1c0) returned 0x1 [0284.822] CloseHandle (hObject=0x1c0) returned 1 [0284.822] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0284.822] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0295069.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0295069.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21b2)) returned 1 [0284.822] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0284.822] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0284.823] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0295069.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0295069.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21b2)) returned 1 [0284.823] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0284.823] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0284.823] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0284.824] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe42c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0296277.WMF", cAlternateFileName="")) returned 1 [0284.824] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0284.824] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0284.824] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0284.824] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0284.824] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0284.824] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0284.825] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0296277.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0296277.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0284.826] GetFileType (hFile=0x1c0) returned 0x1 [0284.827] CloseHandle (hObject=0x1c0) returned 1 [0284.827] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0284.827] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0296277.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0296277.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe42c)) returned 1 [0284.827] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0284.828] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0284.828] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0296277.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0296277.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe42c)) returned 1 [0284.828] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0284.828] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0284.828] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0284.828] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1088e, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0296279.WMF", cAlternateFileName="")) returned 1 [0284.828] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0284.828] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0284.828] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0284.829] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0284.829] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0284.829] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0284.829] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0296279.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0296279.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0284.830] GetFileType (hFile=0x1c0) returned 0x1 [0284.830] CloseHandle (hObject=0x1c0) returned 1 [0284.831] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0284.831] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0296279.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0296279.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1088e)) returned 1 [0284.831] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0284.831] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0284.831] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0296279.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0296279.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1088e)) returned 1 [0284.831] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0284.831] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0284.832] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0284.832] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x107ec, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0296288.WMF", cAlternateFileName="")) returned 1 [0284.832] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0284.832] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0284.832] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0284.832] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0284.832] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0284.832] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0284.833] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0296288.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0296288.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0284.833] GetFileType (hFile=0x1c0) returned 0x1 [0284.834] CloseHandle (hObject=0x1c0) returned 1 [0284.834] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0284.834] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0296288.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0296288.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x107ec)) returned 1 [0284.835] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0284.835] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0284.835] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0296288.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0296288.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x107ec)) returned 1 [0284.835] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0284.835] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0284.835] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0284.835] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x59ce, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0297229.WMF", cAlternateFileName="")) returned 1 [0284.835] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0284.835] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0284.836] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0284.836] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0284.836] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0284.836] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0284.837] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297229.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297229.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0284.838] GetFileType (hFile=0x1c0) returned 0x1 [0284.839] CloseHandle (hObject=0x1c0) returned 1 [0284.839] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0284.840] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297229.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297229.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x59ce)) returned 1 [0284.840] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0284.840] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0284.840] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297229.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297229.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x59ce)) returned 1 [0284.840] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0284.840] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0284.840] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0284.841] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d24, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0297269.WMF", cAlternateFileName="")) returned 1 [0284.841] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0284.841] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0284.841] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0284.841] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0284.841] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0284.841] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0284.842] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297269.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297269.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0285.221] GetFileType (hFile=0x21c) returned 0x1 [0285.222] CloseHandle (hObject=0x21c) returned 1 [0285.222] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0285.222] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297269.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297269.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d24)) returned 1 [0285.222] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0285.223] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0285.223] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297269.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297269.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d24)) returned 1 [0285.223] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0285.223] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0285.223] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0285.223] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4236, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0297725.WMF", cAlternateFileName="")) returned 1 [0285.223] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0285.223] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0285.223] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0285.223] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0285.223] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0285.224] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0285.224] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297725.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297725.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0285.224] GetFileType (hFile=0x21c) returned 0x1 [0285.224] CloseHandle (hObject=0x21c) returned 1 [0285.225] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0285.225] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297725.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297725.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4236)) returned 1 [0285.225] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0285.225] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0285.225] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297725.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297725.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4236)) returned 1 [0285.225] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0285.225] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0285.225] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0285.225] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf406dcf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3c9c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0297727.WMF", cAlternateFileName="")) returned 1 [0285.225] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0285.225] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0285.226] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0285.226] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0285.226] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0285.226] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0285.226] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297727.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297727.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0285.226] GetFileType (hFile=0x21c) returned 0x1 [0285.226] CloseHandle (hObject=0x21c) returned 1 [0285.227] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0285.227] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297727.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297727.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf406dcf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3c9c)) returned 1 [0285.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0285.227] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0285.227] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297727.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297727.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf406dcf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3c9c)) returned 1 [0285.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0285.227] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0285.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0285.227] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf406dcf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x493e, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0297757.WMF", cAlternateFileName="")) returned 1 [0285.227] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0285.228] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0285.228] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0285.228] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0285.228] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0285.228] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0285.228] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297757.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297757.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0285.228] GetFileType (hFile=0x21c) returned 0x1 [0285.229] CloseHandle (hObject=0x21c) returned 1 [0285.229] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0285.229] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297757.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297757.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf406dcf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x493e)) returned 1 [0285.229] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0285.230] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0285.230] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297757.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297757.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf406dcf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x493e)) returned 1 [0285.230] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0285.230] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0285.230] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0285.230] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4960, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0297759.WMF", cAlternateFileName="")) returned 1 [0285.230] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0285.230] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0285.230] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0285.230] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0285.230] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0285.230] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0285.231] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297759.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297759.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0285.231] GetFileType (hFile=0x21c) returned 0x1 [0285.231] CloseHandle (hObject=0x21c) returned 1 [0285.231] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0285.231] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297759.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297759.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4960)) returned 1 [0285.231] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0285.231] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0285.231] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297759.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297759.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4960)) returned 1 [0285.232] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0285.232] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0285.232] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0285.232] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4584, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0300862.WMF", cAlternateFileName="")) returned 1 [0285.232] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0285.232] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0285.232] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0285.232] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0285.232] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0285.232] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0285.233] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0300862.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0300862.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0285.233] GetFileType (hFile=0x21c) returned 0x1 [0285.233] CloseHandle (hObject=0x21c) returned 1 [0285.233] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0285.233] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0300862.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0300862.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4584)) returned 1 [0285.233] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0285.233] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0285.233] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0300862.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0300862.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4584)) returned 1 [0285.234] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0285.234] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0285.234] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0285.234] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b0e, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0301044.WMF", cAlternateFileName="")) returned 1 [0285.234] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0285.234] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0285.234] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0285.234] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0285.234] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0285.234] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0285.234] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301044.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0301044.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0285.234] GetFileType (hFile=0x21c) returned 0x1 [0285.235] CloseHandle (hObject=0x21c) returned 1 [0285.235] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0285.235] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301044.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0301044.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b0e)) returned 1 [0285.235] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0285.235] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0285.235] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301044.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0301044.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b0e)) returned 1 [0285.235] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0285.235] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0285.235] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0285.235] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ae8, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0301052.WMF", cAlternateFileName="")) returned 1 [0285.235] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0285.236] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0285.236] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0285.236] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0285.236] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0285.236] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0285.236] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301052.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0301052.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0285.236] GetFileType (hFile=0x21c) returned 0x1 [0285.237] CloseHandle (hObject=0x21c) returned 1 [0285.237] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0285.237] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301052.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0301052.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ae8)) returned 1 [0285.237] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0285.237] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0285.237] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301052.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0301052.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ae8)) returned 1 [0285.237] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0285.237] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0285.237] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0285.237] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4a5a, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0301418.WMF", cAlternateFileName="")) returned 1 [0285.237] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0285.238] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0285.238] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0285.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0285.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0285.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0285.238] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301418.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0301418.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0285.238] GetFileType (hFile=0x21c) returned 0x1 [0285.239] CloseHandle (hObject=0x21c) returned 1 [0285.239] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0285.239] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301418.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0301418.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4a5a)) returned 1 [0285.239] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0285.239] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0285.240] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301418.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0301418.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4a5a)) returned 1 [0285.240] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0285.240] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0285.240] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0285.240] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4dfa, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0301432.WMF", cAlternateFileName="")) returned 1 [0285.240] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0285.240] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0285.240] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0285.240] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0285.240] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0285.240] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0285.241] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301432.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0301432.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0285.241] GetFileType (hFile=0x21c) returned 0x1 [0285.241] CloseHandle (hObject=0x21c) returned 1 [0285.241] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0285.241] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301432.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0301432.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4dfa)) returned 1 [0285.242] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0285.242] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0285.242] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301432.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0301432.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4dfa)) returned 1 [0285.242] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0285.242] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0285.242] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0285.242] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe20, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0304371.WMF", cAlternateFileName="")) returned 1 [0285.242] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0285.242] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0285.242] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0285.242] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0285.242] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0285.242] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0285.243] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304371.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304371.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0285.243] GetFileType (hFile=0x21c) returned 0x1 [0285.243] CloseHandle (hObject=0x21c) returned 1 [0285.243] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0285.243] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304371.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304371.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe20)) returned 1 [0285.244] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0285.244] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0285.244] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304371.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304371.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe20)) returned 1 [0285.244] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0285.244] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0285.244] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0285.244] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x103e, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0304405.WMF", cAlternateFileName="")) returned 1 [0285.244] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0285.244] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0285.244] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0285.244] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0285.244] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0285.244] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0285.245] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304405.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304405.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0285.246] GetFileType (hFile=0x21c) returned 0x1 [0285.246] CloseHandle (hObject=0x21c) returned 1 [0285.246] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0285.246] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304405.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304405.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x103e)) returned 1 [0285.246] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0285.246] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0285.246] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304405.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304405.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x103e)) returned 1 [0285.247] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0285.247] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0285.247] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0285.247] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4a0e, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0304853.WMF", cAlternateFileName="")) returned 1 [0285.247] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0285.247] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0285.247] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0285.247] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0285.247] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0285.247] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0285.247] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304853.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304853.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0285.637] GetFileType (hFile=0x1ac) returned 0x1 [0285.637] CloseHandle (hObject=0x1ac) returned 1 [0285.638] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0285.638] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304853.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304853.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4a0e)) returned 1 [0285.638] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0285.638] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0285.638] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304853.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304853.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4a0e)) returned 1 [0285.638] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0285.638] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0285.639] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0285.639] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2cf8, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0304861.WMF", cAlternateFileName="")) returned 1 [0285.639] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0285.639] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0285.639] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0285.639] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0285.639] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0285.639] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0285.640] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304861.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304861.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0285.641] GetFileType (hFile=0x1ac) returned 0x1 [0285.642] CloseHandle (hObject=0x1ac) returned 1 [0285.642] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0285.642] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304861.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304861.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2cf8)) returned 1 [0285.642] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0285.642] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0285.642] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304861.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304861.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2cf8)) returned 1 [0285.643] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0285.643] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0285.643] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0285.643] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f8e, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0304875.WMF", cAlternateFileName="")) returned 1 [0285.643] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0285.643] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0285.643] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0285.643] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0285.643] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0285.643] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0285.644] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304875.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304875.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0285.645] GetFileType (hFile=0x1ac) returned 0x1 [0285.645] CloseHandle (hObject=0x1ac) returned 1 [0285.646] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0285.646] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304875.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304875.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f8e)) returned 1 [0285.646] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0285.646] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0285.646] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304875.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304875.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f8e)) returned 1 [0285.646] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0285.646] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0285.646] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0285.646] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x29c4, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0309480.JPG", cAlternateFileName="")) returned 1 [0285.646] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0285.647] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0285.647] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0285.647] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0285.647] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0285.647] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0285.647] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309480.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309480.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0285.648] GetFileType (hFile=0x1ac) returned 0x1 [0285.649] CloseHandle (hObject=0x1ac) returned 1 [0285.649] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0285.649] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309480.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309480.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x29c4)) returned 1 [0285.649] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0285.649] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0285.649] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309480.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309480.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x29c4)) returned 1 [0285.649] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0285.650] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0285.650] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0285.650] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf406dcf, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf406dcf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x544c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0309567.JPG", cAlternateFileName="")) returned 1 [0285.650] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0285.650] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0285.650] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0285.650] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0285.650] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0285.650] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0285.650] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309567.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309567.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0285.652] GetFileType (hFile=0x1ac) returned 0x1 [0285.652] CloseHandle (hObject=0x1ac) returned 1 [0285.653] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0285.653] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309567.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309567.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf406dcf, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf406dcf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x544c)) returned 1 [0285.653] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0285.653] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0285.653] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309567.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309567.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf406dcf, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf406dcf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x544c)) returned 1 [0285.653] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0285.653] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0285.653] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0285.653] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf406dcf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9a8b, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0309585.JPG", cAlternateFileName="")) returned 1 [0285.653] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0285.653] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0285.653] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0285.654] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0285.654] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0285.654] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0285.654] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309585.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309585.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0285.655] GetFileType (hFile=0x1ac) returned 0x1 [0285.656] CloseHandle (hObject=0x1ac) returned 1 [0285.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0285.656] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309585.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309585.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf406dcf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9a8b)) returned 1 [0285.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0285.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0285.656] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309585.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309585.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf406dcf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9a8b)) returned 1 [0285.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0285.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0285.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0285.656] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf406dcf, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf406dcf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x81f0, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0309598.JPG", cAlternateFileName="")) returned 1 [0285.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0285.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0285.657] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0285.657] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0285.657] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0285.657] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0285.657] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309598.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309598.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0285.657] GetFileType (hFile=0x1ac) returned 0x1 [0285.658] CloseHandle (hObject=0x1ac) returned 1 [0285.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0285.658] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309598.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309598.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf406dcf, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf406dcf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x81f0)) returned 1 [0285.658] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0285.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0285.658] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309598.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309598.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf406dcf, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf406dcf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x81f0)) returned 1 [0285.659] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0285.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0285.659] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0285.659] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf406dcf, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf406dcf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaabb, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0309664.JPG", cAlternateFileName="")) returned 1 [0285.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0285.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0285.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0285.659] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0285.659] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0285.659] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0285.660] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309664.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309664.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0285.661] GetFileType (hFile=0x1ac) returned 0x1 [0285.661] CloseHandle (hObject=0x1ac) returned 1 [0285.661] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0285.661] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309664.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309664.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf406dcf, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf406dcf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaabb)) returned 1 [0285.662] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0285.662] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0285.662] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309664.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309664.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf406dcf, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf406dcf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaabb)) returned 1 [0285.662] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0285.662] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0285.662] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0285.662] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf406dcf, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf406dcf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ada, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0309705.JPG", cAlternateFileName="")) returned 1 [0285.662] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0285.662] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0285.662] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0285.662] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0285.663] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0285.663] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0285.663] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309705.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309705.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0285.664] GetFileType (hFile=0x1ac) returned 0x1 [0285.665] CloseHandle (hObject=0x1ac) returned 1 [0285.665] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0285.665] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309705.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309705.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf406dcf, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf406dcf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ada)) returned 1 [0285.665] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0285.665] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0285.665] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309705.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309705.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf406dcf, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf406dcf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ada)) returned 1 [0285.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0285.666] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0285.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0285.666] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf406dcf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0309902.WMF", cAlternateFileName="")) returned 1 [0285.666] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0285.666] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0285.666] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0285.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0285.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0285.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0285.667] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309902.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309902.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0285.672] GetFileType (hFile=0x1ac) returned 0x1 [0285.672] CloseHandle (hObject=0x1ac) returned 1 [0285.672] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0285.672] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309902.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309902.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf406dcf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a00)) returned 1 [0285.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0285.673] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0285.673] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309902.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309902.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf406dcf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a00)) returned 1 [0285.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0285.673] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0285.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0285.673] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20e4, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0309904.WMF", cAlternateFileName="")) returned 1 [0285.673] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0285.673] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0285.673] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0285.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0285.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0285.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0285.674] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309904.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309904.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0285.675] GetFileType (hFile=0x1ac) returned 0x1 [0285.675] CloseHandle (hObject=0x1ac) returned 1 [0285.676] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0285.676] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309904.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309904.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20e4)) returned 1 [0285.676] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0285.676] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0285.676] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309904.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309904.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20e4)) returned 1 [0285.676] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0285.676] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0285.676] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0285.676] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b38, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0309920.WMF", cAlternateFileName="")) returned 1 [0285.676] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0285.676] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0285.676] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0285.677] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0285.677] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0285.677] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0285.677] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309920.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309920.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0285.678] GetFileType (hFile=0x1ac) returned 0x1 [0285.678] CloseHandle (hObject=0x1ac) returned 1 [0285.678] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0285.678] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309920.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309920.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b38)) returned 1 [0285.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0285.678] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0285.678] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309920.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309920.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b38)) returned 1 [0285.679] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0285.679] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0285.679] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0285.679] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x911a, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0313896.JPG", cAlternateFileName="")) returned 1 [0285.679] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0285.679] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0285.679] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0285.679] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0285.679] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0285.679] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0285.680] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313896.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313896.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0285.681] GetFileType (hFile=0x1ac) returned 0x1 [0285.681] CloseHandle (hObject=0x1ac) returned 1 [0285.682] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0285.682] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313896.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313896.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x911a)) returned 1 [0285.682] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0285.682] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0285.682] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313896.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313896.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x911a)) returned 1 [0285.682] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0285.682] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0285.683] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0285.683] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa75a, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0313965.JPG", cAlternateFileName="")) returned 1 [0285.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0285.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0285.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0285.683] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0285.683] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0285.683] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0285.684] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313965.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313965.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0285.684] GetFileType (hFile=0x1ac) returned 0x1 [0285.684] CloseHandle (hObject=0x1ac) returned 1 [0285.685] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0285.685] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313965.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313965.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa75a)) returned 1 [0285.685] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0285.685] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0285.685] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313965.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313965.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa75a)) returned 1 [0285.685] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0285.685] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0285.685] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0285.685] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x81ab, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0313970.JPG", cAlternateFileName="")) returned 1 [0285.685] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0285.685] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0285.686] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0285.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0285.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0285.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0285.686] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313970.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313970.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0285.687] GetFileType (hFile=0x1ac) returned 0x1 [0285.688] CloseHandle (hObject=0x1ac) returned 1 [0285.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0285.688] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313970.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313970.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x81ab)) returned 1 [0285.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0285.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0285.689] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313970.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313970.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x81ab)) returned 1 [0285.689] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0285.689] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0285.689] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0285.689] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb9d1, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0313974.JPG", cAlternateFileName="")) returned 1 [0285.689] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0285.689] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0285.689] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0285.689] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0285.689] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0285.689] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0285.690] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313974.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313974.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0285.692] GetFileType (hFile=0x1c0) returned 0x1 [0285.693] CloseHandle (hObject=0x1c0) returned 1 [0285.693] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0285.693] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313974.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313974.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb9d1)) returned 1 [0285.693] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0285.693] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0285.693] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313974.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313974.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb9d1)) returned 1 [0285.693] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0285.693] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0285.694] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0285.694] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x40f2, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0314068.JPG", cAlternateFileName="")) returned 1 [0285.694] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0285.694] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0285.694] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0285.694] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0285.694] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0285.694] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0285.694] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0314068.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0314068.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0285.695] GetFileType (hFile=0x1c0) returned 0x1 [0285.695] CloseHandle (hObject=0x1c0) returned 1 [0285.695] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0285.695] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0314068.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0314068.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x40f2)) returned 1 [0285.696] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0285.696] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0285.696] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0314068.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0314068.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x40f2)) returned 1 [0285.696] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0285.696] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0285.696] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0285.696] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b02, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0315580.JPG", cAlternateFileName="")) returned 1 [0285.696] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0285.696] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0285.696] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0285.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0285.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0285.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0285.697] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0315580.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0315580.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0285.697] GetFileType (hFile=0x1c0) returned 0x1 [0285.698] CloseHandle (hObject=0x1c0) returned 1 [0285.698] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0285.699] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0315580.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0315580.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b02)) returned 1 [0285.699] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0285.699] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0285.699] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0315580.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0315580.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b02)) returned 1 [0285.699] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0285.699] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0285.699] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0285.699] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x423a, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0315612.JPG", cAlternateFileName="")) returned 1 [0285.699] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0285.699] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0285.699] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0285.700] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0285.700] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0285.700] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0285.700] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0315612.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0315612.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0285.701] GetFileType (hFile=0x1c0) returned 0x1 [0285.701] CloseHandle (hObject=0x1c0) returned 1 [0285.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0285.702] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0315612.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0315612.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x423a)) returned 1 [0285.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0285.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0285.702] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0315612.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0315612.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x423a)) returned 1 [0285.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0285.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0285.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0285.702] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4180, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0318448.WMF", cAlternateFileName="")) returned 1 [0285.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0285.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0285.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0285.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0285.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0285.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0285.703] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0318448.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0318448.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0285.703] GetFileType (hFile=0x1c0) returned 0x1 [0285.704] CloseHandle (hObject=0x1c0) returned 1 [0285.704] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0285.704] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0318448.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0318448.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4180)) returned 1 [0285.704] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0285.704] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0285.704] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0318448.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0318448.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4180)) returned 1 [0285.704] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0285.704] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0285.704] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0285.704] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2dfa, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0318804.WMF", cAlternateFileName="")) returned 1 [0285.704] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0285.705] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0285.705] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0285.705] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0285.705] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0285.705] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0285.705] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0318804.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0318804.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0286.105] GetFileType (hFile=0x174) returned 0x1 [0286.106] CloseHandle (hObject=0x174) returned 1 [0286.106] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0286.106] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0318804.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0318804.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2dfa)) returned 1 [0286.106] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0286.106] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0286.106] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0318804.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0318804.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2dfa)) returned 1 [0286.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0286.107] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0286.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0286.107] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x28be, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0318810.WMF", cAlternateFileName="")) returned 1 [0286.107] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0286.107] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212828 [0286.107] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0286.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212828 | out: hHeap=0x1f0000) returned 1 [0286.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0286.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0286.265] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0318810.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0318810.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0286.266] GetFileType (hFile=0x1ac) returned 0x1 [0286.266] CloseHandle (hObject=0x1ac) returned 1 [0286.266] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0286.266] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0318810.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0318810.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x28be)) returned 1 [0286.266] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0286.266] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0286.266] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0318810.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0318810.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x28be)) returned 1 [0286.266] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0286.267] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0286.267] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0286.267] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x24d7, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0321179.JPG", cAlternateFileName="")) returned 1 [0286.267] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238050 [0286.267] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211ae0 [0286.267] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0286.267] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211ae0 | out: hHeap=0x1f0000) returned 1 [0286.267] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0286.267] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238050 | out: hHeap=0x1f0000) returned 1 [0286.267] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0321179.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0321179.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0286.267] GetFileType (hFile=0x1ac) returned 0x1 [0286.268] CloseHandle (hObject=0x1ac) returned 1 [0286.268] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0286.268] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0321179.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0321179.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x24d7)) returned 1 [0286.268] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0286.268] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0286.268] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0321179.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0321179.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x24d7)) returned 1 [0286.268] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0286.268] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0286.269] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0286.269] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ff8, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0324694.WMF", cAlternateFileName="")) returned 1 [0286.269] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0286.269] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211ae0 [0286.269] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0286.269] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211ae0 | out: hHeap=0x1f0000) returned 1 [0286.269] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0286.269] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0286.269] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0324694.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0324694.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0286.269] GetFileType (hFile=0x1ac) returned 0x1 [0286.270] CloseHandle (hObject=0x1ac) returned 1 [0286.270] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0286.270] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0324694.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0324694.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ff8)) returned 1 [0286.270] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0286.270] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0286.270] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0324694.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0324694.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ff8)) returned 1 [0286.270] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0286.271] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0286.271] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0286.271] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e7e, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0324704.WMF", cAlternateFileName="")) returned 1 [0286.271] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0286.271] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2127a0 [0286.271] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0286.271] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2127a0 | out: hHeap=0x1f0000) returned 1 [0286.271] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0286.271] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0286.271] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0324704.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0324704.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0286.271] GetFileType (hFile=0x1ac) returned 0x1 [0286.272] CloseHandle (hObject=0x1ac) returned 1 [0286.272] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0286.272] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0324704.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0324704.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e7e)) returned 1 [0286.272] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0286.272] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0286.272] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0324704.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0324704.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e7e)) returned 1 [0286.273] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0286.273] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0286.273] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0286.273] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3260, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0337280.JPG", cAlternateFileName="")) returned 1 [0286.273] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0286.273] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211a58 [0286.273] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0286.273] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211a58 | out: hHeap=0x1f0000) returned 1 [0286.273] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0286.273] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0286.274] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0337280.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0337280.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0286.274] GetFileType (hFile=0x1ac) returned 0x1 [0286.274] CloseHandle (hObject=0x1ac) returned 1 [0286.275] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0286.275] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0337280.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0337280.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3260)) returned 1 [0286.275] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0286.275] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0286.275] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0337280.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0337280.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3260)) returned 1 [0286.275] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0286.275] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0286.275] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0286.275] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27d4, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0341328.JPG", cAlternateFileName="")) returned 1 [0286.276] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0286.276] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211b68 [0286.276] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0286.276] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b68 | out: hHeap=0x1f0000) returned 1 [0286.276] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0286.276] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0286.277] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341328.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341328.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0286.277] GetFileType (hFile=0x1ac) returned 0x1 [0286.277] CloseHandle (hObject=0x1ac) returned 1 [0286.277] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0286.278] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341328.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341328.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27d4)) returned 1 [0286.278] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0286.278] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0286.278] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341328.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341328.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27d4)) returned 1 [0286.278] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0286.278] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0286.278] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0286.278] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2cdd, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0341344.JPG", cAlternateFileName="")) returned 1 [0286.278] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0286.278] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2124f8 [0286.279] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0286.279] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2124f8 | out: hHeap=0x1f0000) returned 1 [0286.279] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0286.279] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0286.279] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341344.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341344.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0286.279] GetFileType (hFile=0x1ac) returned 0x1 [0286.279] CloseHandle (hObject=0x1ac) returned 1 [0286.280] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0286.280] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341344.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341344.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2cdd)) returned 1 [0286.280] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0286.280] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0286.280] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341344.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341344.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2cdd)) returned 1 [0286.280] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0286.280] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0286.280] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0286.280] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c6d, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0341439.JPG", cAlternateFileName="")) returned 1 [0286.281] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0286.281] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d00 [0286.281] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0286.281] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d00 | out: hHeap=0x1f0000) returned 1 [0286.281] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0286.281] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0286.281] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341439.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341439.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0286.282] GetFileType (hFile=0x1ac) returned 0x1 [0286.282] CloseHandle (hObject=0x1ac) returned 1 [0286.282] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0286.282] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341439.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341439.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c6d)) returned 1 [0286.282] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0286.282] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0286.282] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341439.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341439.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c6d)) returned 1 [0286.283] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0286.283] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0286.283] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0286.283] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ad8, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0341447.JPG", cAlternateFileName="")) returned 1 [0286.283] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0286.283] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212030 [0286.283] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0286.283] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212030 | out: hHeap=0x1f0000) returned 1 [0286.283] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0286.283] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0286.284] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341447.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341447.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0286.284] GetFileType (hFile=0x1ac) returned 0x1 [0286.284] CloseHandle (hObject=0x1ac) returned 1 [0286.285] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0286.285] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341447.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341447.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ad8)) returned 1 [0286.285] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0286.285] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0286.285] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341447.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341447.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ad8)) returned 1 [0286.285] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0286.285] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0286.285] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0286.285] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x52c3, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0341448.JPG", cAlternateFileName="")) returned 1 [0286.285] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0286.286] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212360 [0286.286] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0286.286] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212360 | out: hHeap=0x1f0000) returned 1 [0286.286] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0286.286] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0286.287] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341448.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341448.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0286.287] GetFileType (hFile=0x1ac) returned 0x1 [0286.287] CloseHandle (hObject=0x1ac) returned 1 [0286.288] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0286.288] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341448.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341448.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x52c3)) returned 1 [0286.288] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0286.288] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0286.288] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341448.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341448.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x52c3)) returned 1 [0286.288] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0286.288] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0286.289] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0286.289] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7457, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0341455.JPG", cAlternateFileName="")) returned 1 [0286.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0286.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211fa8 [0286.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0286.289] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211fa8 | out: hHeap=0x1f0000) returned 1 [0286.289] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0286.289] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0286.290] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341455.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341455.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0286.290] GetFileType (hFile=0x1ac) returned 0x1 [0286.291] CloseHandle (hObject=0x1ac) returned 1 [0286.291] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0286.292] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341455.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341455.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7457)) returned 1 [0286.292] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0286.292] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0286.293] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341455.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341455.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7457)) returned 1 [0286.293] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0286.293] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0286.293] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0286.293] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa9e2, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0341475.JPG", cAlternateFileName="")) returned 1 [0286.293] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0286.293] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212030 [0286.293] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0286.294] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212030 | out: hHeap=0x1f0000) returned 1 [0286.294] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0286.294] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0286.295] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341475.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341475.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0286.295] GetFileType (hFile=0x1ac) returned 0x1 [0286.295] CloseHandle (hObject=0x1ac) returned 1 [0286.296] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0286.296] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341475.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341475.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa9e2)) returned 1 [0286.296] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0286.296] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0286.296] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341475.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341475.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa9e2)) returned 1 [0286.296] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0286.296] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0286.296] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0286.296] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ee3, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0341499.JPG", cAlternateFileName="")) returned 1 [0286.297] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0286.297] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2122d8 [0286.297] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0286.297] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2122d8 | out: hHeap=0x1f0000) returned 1 [0286.297] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0286.297] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0286.298] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341499.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341499.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0286.298] GetFileType (hFile=0x1ac) returned 0x1 [0286.299] CloseHandle (hObject=0x1ac) returned 1 [0286.299] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0286.299] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341499.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341499.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ee3)) returned 1 [0286.299] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0286.299] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0286.300] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341499.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341499.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ee3)) returned 1 [0286.300] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0286.300] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0286.300] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0286.300] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f8a, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0341534.JPG", cAlternateFileName="")) returned 1 [0286.300] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0286.300] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211f20 [0286.300] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0286.301] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211f20 | out: hHeap=0x1f0000) returned 1 [0286.301] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0286.301] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0286.302] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341534.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341534.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0286.302] GetFileType (hFile=0x1ac) returned 0x1 [0286.302] CloseHandle (hObject=0x1ac) returned 1 [0286.303] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0286.303] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341534.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341534.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f8a)) returned 1 [0286.303] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0286.303] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0286.303] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341534.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341534.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f8a)) returned 1 [0286.303] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0286.303] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0286.303] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0286.304] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5a56, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0341551.JPG", cAlternateFileName="")) returned 1 [0286.304] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0286.304] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212360 [0286.304] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0286.304] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212360 | out: hHeap=0x1f0000) returned 1 [0286.304] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0286.304] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0286.305] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341551.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341551.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0286.305] GetFileType (hFile=0x1ac) returned 0x1 [0286.306] CloseHandle (hObject=0x1ac) returned 1 [0286.306] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0286.306] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341551.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341551.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5a56)) returned 1 [0286.306] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0286.306] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0286.307] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341551.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341551.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5a56)) returned 1 [0286.307] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0286.307] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0286.307] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0286.307] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6f43, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0341554.JPG", cAlternateFileName="")) returned 1 [0286.712] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0286.712] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212140 [0286.712] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0286.712] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212140 | out: hHeap=0x1f0000) returned 1 [0286.712] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0286.712] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0286.713] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341554.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341554.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0286.713] GetFileType (hFile=0x1c0) returned 0x1 [0286.714] CloseHandle (hObject=0x1c0) returned 1 [0286.714] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0286.714] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341554.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341554.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6f43)) returned 1 [0286.715] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0286.715] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0286.715] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341554.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341554.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6f43)) returned 1 [0286.715] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0286.715] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0286.715] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0286.715] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6aa8, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0341557.JPG", cAlternateFileName="")) returned 1 [0286.715] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0286.715] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2123e8 [0286.715] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0286.715] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2123e8 | out: hHeap=0x1f0000) returned 1 [0286.715] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0286.716] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0286.716] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341557.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341557.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0286.716] GetFileType (hFile=0x1c0) returned 0x1 [0286.717] CloseHandle (hObject=0x1c0) returned 1 [0286.717] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0286.717] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341557.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341557.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6aa8)) returned 1 [0286.717] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0286.717] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0286.717] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341557.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341557.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6aa8)) returned 1 [0286.717] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0286.718] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0286.718] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0286.718] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6873, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0341559.JPG", cAlternateFileName="")) returned 1 [0286.718] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0286.718] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211fa8 [0286.718] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0286.718] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211fa8 | out: hHeap=0x1f0000) returned 1 [0286.718] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0286.718] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0286.719] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341559.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341559.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0286.719] GetFileType (hFile=0x1c0) returned 0x1 [0286.719] CloseHandle (hObject=0x1c0) returned 1 [0286.719] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0286.719] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341559.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341559.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6873)) returned 1 [0286.720] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0286.720] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0286.720] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341559.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341559.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6873)) returned 1 [0286.720] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0286.720] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0286.720] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0286.720] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa497, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0341561.JPG", cAlternateFileName="")) returned 1 [0286.720] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0286.720] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d00 [0286.720] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0286.721] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d00 | out: hHeap=0x1f0000) returned 1 [0286.721] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0286.721] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0286.721] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341561.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341561.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0286.721] GetFileType (hFile=0x1c0) returned 0x1 [0286.722] CloseHandle (hObject=0x1c0) returned 1 [0286.722] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0286.722] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341561.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341561.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa497)) returned 1 [0286.722] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0286.722] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0286.723] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341561.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341561.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa497)) returned 1 [0286.723] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0286.723] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0286.723] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0286.723] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e7b, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0341634.JPG", cAlternateFileName="")) returned 1 [0286.723] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0286.723] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2123e8 [0286.723] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0286.723] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2123e8 | out: hHeap=0x1f0000) returned 1 [0286.723] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0286.723] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0286.724] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341634.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341634.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0286.724] GetFileType (hFile=0x1c0) returned 0x1 [0286.724] CloseHandle (hObject=0x1c0) returned 1 [0286.725] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0286.725] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341634.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341634.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e7b)) returned 1 [0286.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0286.725] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0286.725] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341634.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341634.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e7b)) returned 1 [0286.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0286.725] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0286.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0286.726] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3615, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0341636.JPG", cAlternateFileName="")) returned 1 [0286.726] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0286.726] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2124f8 [0286.726] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0286.726] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2124f8 | out: hHeap=0x1f0000) returned 1 [0286.726] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0286.726] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0286.727] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341636.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341636.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0286.727] GetFileType (hFile=0x1c0) returned 0x1 [0286.727] CloseHandle (hObject=0x1c0) returned 1 [0286.728] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0286.728] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341636.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341636.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3615)) returned 1 [0286.728] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0286.728] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0286.728] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341636.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341636.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3615)) returned 1 [0286.728] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0286.728] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0286.729] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0286.729] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2026, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0341645.JPG", cAlternateFileName="")) returned 1 [0286.729] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0286.729] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212360 [0286.729] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0286.730] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212360 | out: hHeap=0x1f0000) returned 1 [0286.730] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0286.730] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0286.730] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341645.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341645.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0286.777] GetFileType (hFile=0x1c0) returned 0x1 [0286.778] CloseHandle (hObject=0x1c0) returned 1 [0286.778] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0286.778] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341645.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341645.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2026)) returned 1 [0286.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0286.778] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0286.778] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341645.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341645.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2026)) returned 1 [0286.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0286.778] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0286.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0286.779] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3df7, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0341653.JPG", cAlternateFileName="")) returned 1 [0286.779] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0286.779] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212608 [0286.779] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0286.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212608 | out: hHeap=0x1f0000) returned 1 [0286.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0286.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0286.779] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341653.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341653.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0286.781] GetFileType (hFile=0x1c0) returned 0x1 [0286.781] CloseHandle (hObject=0x1c0) returned 1 [0286.781] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0286.781] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341653.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341653.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3df7)) returned 1 [0286.781] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0286.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0286.782] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341653.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341653.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3df7)) returned 1 [0286.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0286.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0286.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0286.782] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d7f, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0341654.JPG", cAlternateFileName="")) returned 1 [0286.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0286.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0286.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0286.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0286.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0286.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0286.783] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341654.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341654.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0286.785] GetFileType (hFile=0x1c0) returned 0x1 [0286.785] CloseHandle (hObject=0x1c0) returned 1 [0286.785] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0286.785] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341654.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341654.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d7f)) returned 1 [0286.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0286.786] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0286.786] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341654.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341654.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d7f)) returned 1 [0286.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0286.786] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0286.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0286.786] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ec6, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0341738.JPG", cAlternateFileName="")) returned 1 [0286.786] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0286.786] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212470 [0286.786] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0286.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212470 | out: hHeap=0x1f0000) returned 1 [0286.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0286.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0286.787] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341738.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341738.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0286.787] GetFileType (hFile=0x1c0) returned 0x1 [0286.788] CloseHandle (hObject=0x1c0) returned 1 [0286.788] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0286.788] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341738.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341738.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ec6)) returned 1 [0286.788] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0286.788] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0286.788] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341738.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341738.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ec6)) returned 1 [0286.788] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0286.788] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0286.788] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0286.789] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x49ba, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0341742.JPG", cAlternateFileName="")) returned 1 [0286.789] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0286.789] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0286.789] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0286.789] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0286.789] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0286.789] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0286.789] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341742.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341742.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0286.790] GetFileType (hFile=0x1c0) returned 0x1 [0286.790] CloseHandle (hObject=0x1c0) returned 1 [0286.790] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0286.790] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341742.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341742.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x49ba)) returned 1 [0286.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0286.791] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0286.791] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341742.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341742.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x49ba)) returned 1 [0286.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0286.791] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0286.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0286.791] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10bdc, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0382836.JPG", cAlternateFileName="")) returned 1 [0286.791] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0286.791] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212828 [0286.791] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0286.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212828 | out: hHeap=0x1f0000) returned 1 [0286.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0286.792] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0286.792] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382836.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382836.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0286.793] GetFileType (hFile=0x1c0) returned 0x1 [0286.793] CloseHandle (hObject=0x1c0) returned 1 [0286.793] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0286.793] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382836.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382836.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10bdc)) returned 1 [0286.793] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0286.793] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0286.794] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382836.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382836.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10bdc)) returned 1 [0286.794] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0286.794] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0286.794] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0286.794] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ce5a, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0382925.JPG", cAlternateFileName="")) returned 1 [0286.794] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0286.794] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0286.794] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0286.794] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0286.794] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0286.794] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0286.795] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382925.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382925.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0286.795] GetFileType (hFile=0x1c0) returned 0x1 [0286.795] CloseHandle (hObject=0x1c0) returned 1 [0286.795] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0286.795] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382925.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382925.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ce5a)) returned 1 [0286.796] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0286.796] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0286.796] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382925.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382925.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ce5a)) returned 1 [0286.796] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0286.796] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0286.796] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0286.796] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1672c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0382926.JPG", cAlternateFileName="")) returned 1 [0286.796] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0286.796] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2122d8 [0286.796] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0286.796] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2122d8 | out: hHeap=0x1f0000) returned 1 [0286.796] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0286.796] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0286.797] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382926.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382926.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0286.797] GetFileType (hFile=0x1c0) returned 0x1 [0286.797] CloseHandle (hObject=0x1c0) returned 1 [0286.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0286.798] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382926.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382926.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1672c)) returned 1 [0286.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0286.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0286.798] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382926.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382926.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1672c)) returned 1 [0286.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0286.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0286.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0286.799] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf49f727, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf49f727, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f86c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0382927.JPG", cAlternateFileName="")) returned 1 [0286.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0286.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211e10 [0286.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0286.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e10 | out: hHeap=0x1f0000) returned 1 [0286.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0286.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0286.800] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382927.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382927.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0286.801] GetFileType (hFile=0x1c0) returned 0x1 [0286.801] CloseHandle (hObject=0x1c0) returned 1 [0286.801] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0286.801] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382927.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382927.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf49f727, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf49f727, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f86c)) returned 1 [0286.802] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0286.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0286.802] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382927.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382927.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf49f727, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf49f727, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f86c)) returned 1 [0286.802] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0286.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0286.802] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0286.802] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b83a, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0382930.JPG", cAlternateFileName="")) returned 1 [0286.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0286.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212718 [0286.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0286.803] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212718 | out: hHeap=0x1f0000) returned 1 [0286.803] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0286.803] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0286.803] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382930.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382930.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0286.804] GetFileType (hFile=0x1c0) returned 0x1 [0286.805] CloseHandle (hObject=0x1c0) returned 1 [0286.805] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0286.805] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382930.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382930.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b83a)) returned 1 [0286.805] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0286.805] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0286.805] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382930.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382930.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b83a)) returned 1 [0286.806] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0286.806] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0286.806] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0286.806] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1df43, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0382931.JPG", cAlternateFileName="")) returned 1 [0286.806] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0286.806] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212470 [0286.806] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0286.806] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212470 | out: hHeap=0x1f0000) returned 1 [0286.807] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0286.807] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0286.808] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382931.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382931.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0286.809] GetFileType (hFile=0x1c0) returned 0x1 [0286.809] CloseHandle (hObject=0x1c0) returned 1 [0286.810] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0286.810] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382931.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382931.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1df43)) returned 1 [0286.810] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0286.810] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0286.810] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382931.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382931.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1df43)) returned 1 [0286.811] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0286.811] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0286.811] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0286.811] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x184d3, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0382938.JPG", cAlternateFileName="")) returned 1 [0286.811] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0286.811] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0286.811] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0286.811] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0286.812] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0286.812] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0286.812] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382938.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382938.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0287.172] GetFileType (hFile=0x21c) returned 0x1 [0287.172] CloseHandle (hObject=0x21c) returned 1 [0287.173] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0287.173] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382938.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382938.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x184d3)) returned 1 [0287.173] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0287.173] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0287.174] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382938.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382938.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x184d3)) returned 1 [0287.174] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0287.174] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0287.174] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0287.174] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1aba5, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0382939.JPG", cAlternateFileName="")) returned 1 [0287.174] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0287.175] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211e10 [0287.175] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0287.175] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e10 | out: hHeap=0x1f0000) returned 1 [0287.175] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0287.175] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0287.176] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382939.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382939.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0287.176] GetFileType (hFile=0x21c) returned 0x1 [0287.177] CloseHandle (hObject=0x21c) returned 1 [0287.178] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0287.178] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382939.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382939.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1aba5)) returned 1 [0287.178] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0287.178] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0287.178] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382939.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382939.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1aba5)) returned 1 [0287.178] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0287.179] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0287.179] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0287.179] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1653a, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0382942.JPG", cAlternateFileName="")) returned 1 [0287.179] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0287.179] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0287.179] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0287.179] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0287.180] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0287.180] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0287.181] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382942.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382942.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0287.181] GetFileType (hFile=0x21c) returned 0x1 [0287.182] CloseHandle (hObject=0x21c) returned 1 [0287.183] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0287.183] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382942.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382942.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1653a)) returned 1 [0287.184] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0287.184] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0287.184] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382942.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382942.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1653a)) returned 1 [0287.184] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0287.184] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0287.184] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0287.184] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf49f727, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf49f727, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13e1d, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0382944.JPG", cAlternateFileName="")) returned 1 [0287.185] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0287.185] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2128b0 [0287.185] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0287.185] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2128b0 | out: hHeap=0x1f0000) returned 1 [0287.185] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0287.185] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0287.186] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382944.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382944.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0287.186] GetFileType (hFile=0x21c) returned 0x1 [0287.187] CloseHandle (hObject=0x21c) returned 1 [0287.187] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0287.188] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382944.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382944.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf49f727, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf49f727, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13e1d)) returned 1 [0287.188] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0287.188] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0287.188] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382944.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382944.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf49f727, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf49f727, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13e1d)) returned 1 [0287.188] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0287.188] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0287.189] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0287.189] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1531c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0382947.JPG", cAlternateFileName="")) returned 1 [0287.189] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0287.189] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0287.189] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0287.189] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0287.189] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0287.189] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0287.190] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382947.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382947.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0287.191] GetFileType (hFile=0x21c) returned 0x1 [0287.191] CloseHandle (hObject=0x21c) returned 1 [0287.192] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0287.192] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382947.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382947.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1531c)) returned 1 [0287.192] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0287.192] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0287.192] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382947.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382947.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1531c)) returned 1 [0287.192] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0287.193] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0287.193] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0287.193] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ad37, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0382948.JPG", cAlternateFileName="")) returned 1 [0287.193] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0287.193] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211948 [0287.193] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0287.193] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211948 | out: hHeap=0x1f0000) returned 1 [0287.193] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0287.194] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0287.194] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382948.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382948.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0287.195] GetFileType (hFile=0x21c) returned 0x1 [0287.195] CloseHandle (hObject=0x21c) returned 1 [0287.196] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0287.196] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382948.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382948.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ad37)) returned 1 [0287.196] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0287.196] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0287.196] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382948.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382948.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ad37)) returned 1 [0287.196] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0287.196] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0287.197] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0287.197] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x178d2, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0382950.JPG", cAlternateFileName="")) returned 1 [0287.197] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0287.197] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211fa8 [0287.197] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0287.197] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211fa8 | out: hHeap=0x1f0000) returned 1 [0287.197] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0287.198] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0287.199] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382950.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382950.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0287.199] GetFileType (hFile=0x21c) returned 0x1 [0287.200] CloseHandle (hObject=0x21c) returned 1 [0287.200] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0287.201] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382950.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382950.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x178d2)) returned 1 [0287.201] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0287.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0287.201] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382950.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382950.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x178d2)) returned 1 [0287.201] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0287.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0287.202] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0287.202] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17749, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0382952.JPG", cAlternateFileName="")) returned 1 [0287.202] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0287.202] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211b68 [0287.202] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0287.202] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b68 | out: hHeap=0x1f0000) returned 1 [0287.203] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0287.203] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0287.203] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382952.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382952.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0287.204] GetFileType (hFile=0x21c) returned 0x1 [0287.204] CloseHandle (hObject=0x21c) returned 1 [0287.205] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0287.205] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382952.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382952.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17749)) returned 1 [0287.205] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0287.205] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0287.206] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382952.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382952.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17749)) returned 1 [0287.206] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0287.206] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0287.206] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0287.206] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x110c9494, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x110c9494, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110ef705, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15a7f, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0382954.JPG", cAlternateFileName="")) returned 1 [0287.207] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0287.207] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2123e8 [0287.207] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0287.207] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2123e8 | out: hHeap=0x1f0000) returned 1 [0287.207] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0287.207] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0287.208] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382954.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382954.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0287.496] GetFileType (hFile=0x1e0) returned 0x1 [0287.497] CloseHandle (hObject=0x1e0) returned 1 [0287.497] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0287.497] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382954.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382954.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x110c9494, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x110c9494, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110ef705, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15a7f)) returned 1 [0287.498] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0287.498] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0287.498] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382954.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382954.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x110c9494, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x110c9494, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110ef705, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15a7f)) returned 1 [0287.498] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0287.498] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0287.498] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0287.498] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15fef, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0382955.JPG", cAlternateFileName="")) returned 1 [0287.498] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0287.498] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2119d0 [0287.499] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0287.499] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2119d0 | out: hHeap=0x1f0000) returned 1 [0287.499] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0287.499] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0287.499] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382955.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382955.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0287.501] GetFileType (hFile=0x1e0) returned 0x1 [0287.501] CloseHandle (hObject=0x1e0) returned 1 [0287.501] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0287.502] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382955.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382955.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15fef)) returned 1 [0287.502] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0287.502] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0287.502] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382955.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382955.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15fef)) returned 1 [0287.502] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0287.502] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0287.502] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0287.502] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a9ed, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0382957.JPG", cAlternateFileName="")) returned 1 [0287.502] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0287.503] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2120b8 [0287.503] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0287.503] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2120b8 | out: hHeap=0x1f0000) returned 1 [0287.503] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0287.503] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0287.504] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382957.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382957.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0287.505] GetFileType (hFile=0x1e0) returned 0x1 [0287.505] CloseHandle (hObject=0x1e0) returned 1 [0287.506] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0287.506] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382957.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382957.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a9ed)) returned 1 [0287.506] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0287.506] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0287.506] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382957.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382957.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a9ed)) returned 1 [0287.506] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0287.506] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0287.506] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0287.507] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x193e7, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0382958.JPG", cAlternateFileName="")) returned 1 [0287.507] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0287.507] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0287.507] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0287.507] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0287.507] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0287.507] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0287.508] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382958.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382958.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0287.508] GetFileType (hFile=0x1e0) returned 0x1 [0287.509] CloseHandle (hObject=0x1e0) returned 1 [0287.509] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0287.509] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382958.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382958.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x193e7)) returned 1 [0287.510] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0287.510] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0287.510] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382958.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382958.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x193e7)) returned 1 [0287.510] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0287.510] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0287.510] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0287.510] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14f8a, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0382959.JPG", cAlternateFileName="")) returned 1 [0287.511] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0287.511] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2119d0 [0287.511] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0287.511] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2119d0 | out: hHeap=0x1f0000) returned 1 [0287.511] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0287.511] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0287.512] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382959.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382959.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0287.513] GetFileType (hFile=0x1e0) returned 0x1 [0287.513] CloseHandle (hObject=0x1e0) returned 1 [0287.513] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0287.514] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382959.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382959.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14f8a)) returned 1 [0287.514] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0287.514] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0287.514] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382959.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382959.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14f8a)) returned 1 [0287.514] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0287.514] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0287.514] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0287.515] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a3f4, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0382960.JPG", cAlternateFileName="")) returned 1 [0287.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0287.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212030 [0287.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0287.515] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212030 | out: hHeap=0x1f0000) returned 1 [0287.515] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0287.515] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0287.516] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382960.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382960.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0287.517] GetFileType (hFile=0x1e0) returned 0x1 [0287.517] CloseHandle (hObject=0x1e0) returned 1 [0287.518] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0287.518] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382960.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382960.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a3f4)) returned 1 [0287.518] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0287.518] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0287.518] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382960.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382960.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a3f4)) returned 1 [0287.518] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0287.518] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0287.518] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0287.518] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18ac4, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0382961.JPG", cAlternateFileName="")) returned 1 [0287.519] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0287.519] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211ae0 [0287.519] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0287.519] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211ae0 | out: hHeap=0x1f0000) returned 1 [0287.519] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0287.519] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0287.519] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382961.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382961.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0287.520] GetFileType (hFile=0x1e0) returned 0x1 [0287.520] CloseHandle (hObject=0x1e0) returned 1 [0287.521] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0287.521] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382961.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382961.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18ac4)) returned 1 [0287.521] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0287.521] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0287.521] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382961.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382961.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18ac4)) returned 1 [0287.521] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0287.521] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0287.521] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0287.521] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bef7, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0382962.JPG", cAlternateFileName="")) returned 1 [0287.521] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0287.521] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2127a0 [0287.521] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0287.521] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2127a0 | out: hHeap=0x1f0000) returned 1 [0287.521] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0287.521] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0287.522] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382962.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382962.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0287.522] GetFileType (hFile=0x1e0) returned 0x1 [0287.522] CloseHandle (hObject=0x1e0) returned 1 [0287.522] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0287.522] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382962.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382962.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bef7)) returned 1 [0287.523] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0287.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0287.523] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382962.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382962.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bef7)) returned 1 [0287.523] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0287.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0287.523] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0287.523] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17dee, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0382963.JPG", cAlternateFileName="")) returned 1 [0287.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0287.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2129c0 [0287.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0287.523] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2129c0 | out: hHeap=0x1f0000) returned 1 [0287.523] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0287.523] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0287.524] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382963.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382963.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0287.524] GetFileType (hFile=0x1e0) returned 0x1 [0287.524] CloseHandle (hObject=0x1e0) returned 1 [0287.525] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0287.525] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382963.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382963.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17dee)) returned 1 [0287.525] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0287.525] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0287.525] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382963.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382963.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17dee)) returned 1 [0287.525] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0287.525] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0287.525] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0287.525] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bb02, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0382965.JPG", cAlternateFileName="")) returned 1 [0287.525] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0287.525] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2120b8 [0287.525] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0287.525] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2120b8 | out: hHeap=0x1f0000) returned 1 [0287.525] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0287.525] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0287.526] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382965.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382965.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0287.527] GetFileType (hFile=0x1e0) returned 0x1 [0287.528] CloseHandle (hObject=0x1e0) returned 1 [0287.528] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0287.528] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382965.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382965.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bb02)) returned 1 [0287.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0287.528] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0287.528] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382965.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382965.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bb02)) returned 1 [0287.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0287.528] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0287.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0287.528] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18888, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0382966.JPG", cAlternateFileName="")) returned 1 [0287.528] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0287.528] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2124f8 [0287.528] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0287.529] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2124f8 | out: hHeap=0x1f0000) returned 1 [0287.529] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0287.529] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0287.529] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382966.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382966.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0287.529] GetFileType (hFile=0x1e0) returned 0x1 [0287.529] CloseHandle (hObject=0x1e0) returned 1 [0287.530] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0287.530] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382966.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382966.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18888)) returned 1 [0287.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0287.530] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0287.530] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382966.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382966.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18888)) returned 1 [0287.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0287.530] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0287.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0287.530] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16d08, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0382967.JPG", cAlternateFileName="")) returned 1 [0287.530] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0287.530] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212470 [0287.530] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0287.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212470 | out: hHeap=0x1f0000) returned 1 [0287.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0287.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0287.531] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382967.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382967.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0287.767] GetFileType (hFile=0x198) returned 0x1 [0287.767] CloseHandle (hObject=0x198) returned 1 [0287.768] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0287.768] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382967.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382967.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16d08)) returned 1 [0287.768] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0287.768] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0287.768] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382967.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382967.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16d08)) returned 1 [0287.768] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0287.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0287.769] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0287.769] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b75f, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0382968.JPG", cAlternateFileName="")) returned 1 [0287.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0287.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211b68 [0287.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0287.769] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b68 | out: hHeap=0x1f0000) returned 1 [0287.769] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0287.769] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0287.842] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382968.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382968.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0287.843] GetFileType (hFile=0x198) returned 0x1 [0287.843] CloseHandle (hObject=0x198) returned 1 [0287.844] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0287.844] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382968.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382968.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b75f)) returned 1 [0287.844] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0287.844] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0287.844] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382968.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382968.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b75f)) returned 1 [0287.844] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0287.845] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0287.845] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0287.845] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1779f, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0382969.JPG", cAlternateFileName="")) returned 1 [0287.845] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0287.845] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212360 [0287.845] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0287.845] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212360 | out: hHeap=0x1f0000) returned 1 [0287.845] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0287.846] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0287.846] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382969.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382969.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0287.847] GetFileType (hFile=0x198) returned 0x1 [0287.848] CloseHandle (hObject=0x198) returned 1 [0287.848] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0287.848] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382969.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382969.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1779f)) returned 1 [0287.848] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0287.848] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0287.848] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382969.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382969.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1779f)) returned 1 [0287.849] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0287.849] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0287.849] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0287.849] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15b94, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0382970.JPG", cAlternateFileName="")) returned 1 [0287.849] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0287.849] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211b68 [0287.849] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0287.849] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b68 | out: hHeap=0x1f0000) returned 1 [0287.849] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0287.849] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0287.850] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382970.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382970.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0287.851] GetFileType (hFile=0x198) returned 0x1 [0287.851] CloseHandle (hObject=0x198) returned 1 [0287.852] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0287.852] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382970.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382970.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15b94)) returned 1 [0287.852] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0287.852] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0287.852] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382970.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382970.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15b94)) returned 1 [0287.852] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0287.852] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0287.853] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0287.853] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x190e9, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0384862.JPG", cAlternateFileName="")) returned 1 [0287.853] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0287.853] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211bf0 [0287.853] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0287.853] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211bf0 | out: hHeap=0x1f0000) returned 1 [0287.853] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0287.853] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0287.854] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384862.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384862.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0287.855] GetFileType (hFile=0x198) returned 0x1 [0287.855] CloseHandle (hObject=0x198) returned 1 [0287.855] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0287.856] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384862.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384862.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x190e9)) returned 1 [0287.856] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0287.856] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0287.856] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384862.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384862.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x190e9)) returned 1 [0287.856] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0287.856] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0287.856] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0287.856] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17b79, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0384885.JPG", cAlternateFileName="")) returned 1 [0287.856] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0287.856] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212140 [0287.857] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0287.857] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212140 | out: hHeap=0x1f0000) returned 1 [0287.857] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0287.857] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0287.857] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384885.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384885.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0287.858] GetFileType (hFile=0x198) returned 0x1 [0287.858] CloseHandle (hObject=0x198) returned 1 [0287.858] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0287.858] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384885.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384885.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17b79)) returned 1 [0287.858] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0287.859] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0287.859] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384885.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384885.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17b79)) returned 1 [0287.859] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0287.859] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0287.859] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0287.859] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14033, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0384888.JPG", cAlternateFileName="")) returned 1 [0287.859] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0287.859] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d88 [0287.859] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0287.859] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d88 | out: hHeap=0x1f0000) returned 1 [0287.859] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0287.859] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0287.860] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384888.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384888.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0287.860] GetFileType (hFile=0x198) returned 0x1 [0287.860] CloseHandle (hObject=0x198) returned 1 [0287.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0287.861] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384888.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384888.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14033)) returned 1 [0287.861] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0287.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0287.861] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384888.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384888.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14033)) returned 1 [0287.861] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0287.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0287.861] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0287.861] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd8f6, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0384895.JPG", cAlternateFileName="")) returned 1 [0287.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0287.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212140 [0287.862] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0287.862] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212140 | out: hHeap=0x1f0000) returned 1 [0287.862] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0287.862] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0287.862] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384895.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384895.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0287.863] GetFileType (hFile=0x198) returned 0x1 [0287.863] CloseHandle (hObject=0x198) returned 1 [0287.863] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0287.864] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384895.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384895.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd8f6)) returned 1 [0287.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0287.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0287.864] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384895.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384895.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd8f6)) returned 1 [0287.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0287.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0287.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0287.864] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11780, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0384900.JPG", cAlternateFileName="")) returned 1 [0287.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0287.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d88 [0287.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0287.865] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d88 | out: hHeap=0x1f0000) returned 1 [0287.865] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0287.865] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0287.865] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384900.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384900.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0287.866] GetFileType (hFile=0x198) returned 0x1 [0287.867] CloseHandle (hObject=0x198) returned 1 [0287.867] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0287.867] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384900.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384900.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11780)) returned 1 [0287.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0287.867] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0287.867] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384900.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384900.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11780)) returned 1 [0287.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0287.867] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0287.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0287.868] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x787a, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0386120.JPG", cAlternateFileName="")) returned 1 [0287.868] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0287.868] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211b68 [0287.868] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0287.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b68 | out: hHeap=0x1f0000) returned 1 [0287.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0287.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0287.868] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386120.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386120.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0287.869] GetFileType (hFile=0x198) returned 0x1 [0287.869] CloseHandle (hObject=0x198) returned 1 [0287.870] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0287.870] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386120.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386120.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x787a)) returned 1 [0287.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0287.875] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0287.876] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386120.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386120.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x787a)) returned 1 [0287.876] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0287.876] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0287.876] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0287.876] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa91e, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0386267.JPG", cAlternateFileName="")) returned 1 [0287.876] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0287.876] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2127a0 [0287.876] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0287.876] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2127a0 | out: hHeap=0x1f0000) returned 1 [0287.876] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0287.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0287.877] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386267.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386267.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0287.878] GetFileType (hFile=0x198) returned 0x1 [0287.878] CloseHandle (hObject=0x198) returned 1 [0287.878] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0287.878] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386267.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386267.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa91e)) returned 1 [0287.879] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0287.879] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0287.879] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386267.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386267.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa91e)) returned 1 [0287.879] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0287.879] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0287.879] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0287.879] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b43, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0386270.JPG", cAlternateFileName="")) returned 1 [0287.879] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0287.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211f20 [0287.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0287.880] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211f20 | out: hHeap=0x1f0000) returned 1 [0287.880] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0287.880] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0287.880] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386270.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386270.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0287.926] GetFileType (hFile=0x198) returned 0x1 [0287.926] CloseHandle (hObject=0x198) returned 1 [0287.927] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0287.927] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386270.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386270.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b43)) returned 1 [0287.927] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0287.927] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0287.927] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386270.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386270.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b43)) returned 1 [0287.927] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0287.927] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0287.928] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0287.928] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x396a, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0386485.JPG", cAlternateFileName="")) returned 1 [0287.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0287.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211a58 [0287.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0287.928] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211a58 | out: hHeap=0x1f0000) returned 1 [0287.928] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0287.928] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0287.929] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386485.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386485.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0287.929] GetFileType (hFile=0x198) returned 0x1 [0287.930] CloseHandle (hObject=0x198) returned 1 [0287.930] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0287.930] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386485.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386485.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x396a)) returned 1 [0287.931] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0287.931] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0287.931] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386485.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386485.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x396a)) returned 1 [0287.931] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0287.931] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0287.931] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0287.931] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x693e, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0386764.JPG", cAlternateFileName="")) returned 1 [0287.932] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260630 [0287.932] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212250 [0287.932] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0287.932] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212250 | out: hHeap=0x1f0000) returned 1 [0287.932] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0287.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260630 | out: hHeap=0x1f0000) returned 1 [0287.942] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386764.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386764.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0288.031] GetFileType (hFile=0x21c) returned 0x1 [0288.032] CloseHandle (hObject=0x21c) returned 1 [0288.032] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0288.032] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386764.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386764.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x693e)) returned 1 [0288.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0288.032] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0288.032] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386764.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386764.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x693e)) returned 1 [0288.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0288.032] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0288.033] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0288.033] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcb0a, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0387337.JPG", cAlternateFileName="")) returned 1 [0288.061] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0288.061] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0288.061] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0288.061] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0288.061] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0288.061] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0288.061] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387337.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387337.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0288.062] GetFileType (hFile=0x21c) returned 0x1 [0288.062] CloseHandle (hObject=0x21c) returned 1 [0288.063] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0288.063] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387337.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387337.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcb0a)) returned 1 [0288.063] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0288.063] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0288.063] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387337.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387337.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcb0a)) returned 1 [0288.063] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0288.063] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0288.063] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0288.063] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6cec, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0387578.JPG", cAlternateFileName="")) returned 1 [0288.063] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0288.063] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2129c0 [0288.063] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0288.063] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2129c0 | out: hHeap=0x1f0000) returned 1 [0288.063] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0288.064] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0288.064] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387578.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387578.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0288.064] GetFileType (hFile=0x21c) returned 0x1 [0288.065] CloseHandle (hObject=0x21c) returned 1 [0288.065] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0288.065] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387578.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387578.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6cec)) returned 1 [0288.065] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0288.065] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0288.065] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387578.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387578.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6cec)) returned 1 [0288.065] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0288.065] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0288.065] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0288.066] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x98c7, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0387591.JPG", cAlternateFileName="")) returned 1 [0288.066] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0288.066] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211bf0 [0288.066] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0288.066] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211bf0 | out: hHeap=0x1f0000) returned 1 [0288.066] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0288.066] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0288.066] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387591.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387591.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0288.067] GetFileType (hFile=0x21c) returned 0x1 [0288.067] CloseHandle (hObject=0x21c) returned 1 [0288.067] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0288.067] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387591.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387591.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x98c7)) returned 1 [0288.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0288.067] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0288.067] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387591.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387591.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x98c7)) returned 1 [0288.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0288.067] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0288.068] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0288.068] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb9bf, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0387604.JPG", cAlternateFileName="")) returned 1 [0288.068] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0288.068] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2129c0 [0288.068] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0288.068] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2129c0 | out: hHeap=0x1f0000) returned 1 [0288.068] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0288.068] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0288.068] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387604.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387604.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0288.069] GetFileType (hFile=0x21c) returned 0x1 [0288.069] CloseHandle (hObject=0x21c) returned 1 [0288.069] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0288.069] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387604.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387604.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb9bf)) returned 1 [0288.069] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0288.069] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0288.069] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387604.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387604.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb9bf)) returned 1 [0288.070] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0288.070] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0288.070] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0288.070] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x98ec, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0387882.JPG", cAlternateFileName="")) returned 1 [0288.070] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0288.070] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2120b8 [0288.070] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0288.070] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2120b8 | out: hHeap=0x1f0000) returned 1 [0288.070] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0288.070] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0288.071] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387882.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387882.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0288.072] GetFileType (hFile=0x21c) returned 0x1 [0288.072] CloseHandle (hObject=0x21c) returned 1 [0288.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0288.073] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387882.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387882.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x98ec)) returned 1 [0288.073] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0288.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0288.073] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387882.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387882.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x98ec)) returned 1 [0288.074] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0288.074] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0288.074] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0288.074] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7df3, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0387895.JPG", cAlternateFileName="")) returned 1 [0288.074] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0288.074] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211e10 [0288.074] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0288.074] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e10 | out: hHeap=0x1f0000) returned 1 [0288.075] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0288.075] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0288.075] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387895.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387895.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0288.076] GetFileType (hFile=0x21c) returned 0x1 [0288.077] CloseHandle (hObject=0x21c) returned 1 [0288.077] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0288.077] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387895.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387895.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7df3)) returned 1 [0288.078] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0288.078] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0288.078] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387895.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387895.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7df3)) returned 1 [0288.078] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0288.078] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0288.078] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0288.078] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x351c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0390072.JPG", cAlternateFileName="")) returned 1 [0288.078] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0288.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212938 [0288.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0288.079] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212938 | out: hHeap=0x1f0000) returned 1 [0288.079] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0288.079] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0288.080] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0390072.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0390072.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0288.080] GetFileType (hFile=0x21c) returned 0x1 [0288.081] CloseHandle (hObject=0x21c) returned 1 [0288.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0288.081] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0390072.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0390072.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x351c)) returned 1 [0288.082] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0288.082] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0288.082] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0390072.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0390072.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x351c)) returned 1 [0288.082] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0288.082] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0288.082] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0288.082] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31883, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0400001.PNG", cAlternateFileName="")) returned 1 [0288.082] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0288.082] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212938 [0288.083] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0288.083] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212938 | out: hHeap=0x1f0000) returned 1 [0288.083] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0288.083] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0288.084] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400001.PNG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400001.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0288.085] GetFileType (hFile=0x21c) returned 0x1 [0288.085] CloseHandle (hObject=0x21c) returned 1 [0288.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0288.086] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400001.PNG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400001.png"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31883)) returned 1 [0288.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0288.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0288.086] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400001.PNG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400001.png"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31883)) returned 1 [0288.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0288.087] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0288.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0288.087] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15d49, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0400002.PNG", cAlternateFileName="")) returned 1 [0288.088] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0288.088] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211b68 [0288.088] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0288.088] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b68 | out: hHeap=0x1f0000) returned 1 [0288.088] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0288.088] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0288.089] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400002.PNG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400002.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0288.090] GetFileType (hFile=0x21c) returned 0x1 [0288.090] CloseHandle (hObject=0x21c) returned 1 [0288.091] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0288.091] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400002.PNG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400002.png"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15d49)) returned 1 [0288.091] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0288.091] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0288.091] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400002.PNG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400002.png"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15d49)) returned 1 [0288.091] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0288.091] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0288.092] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0288.092] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e836, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0400003.PNG", cAlternateFileName="")) returned 1 [0288.393] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0288.394] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2123e8 [0288.394] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0288.394] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2123e8 | out: hHeap=0x1f0000) returned 1 [0288.394] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0288.394] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0288.395] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400003.PNG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400003.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0288.397] GetFileType (hFile=0x198) returned 0x1 [0288.397] CloseHandle (hObject=0x198) returned 1 [0288.398] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0288.398] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400003.PNG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400003.png"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e836)) returned 1 [0288.398] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0288.398] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0288.398] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400003.PNG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400003.png"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e836)) returned 1 [0288.399] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0288.399] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0288.399] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0288.399] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19a5d, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0400004.PNG", cAlternateFileName="")) returned 1 [0288.399] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0288.399] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211e10 [0288.399] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0288.400] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e10 | out: hHeap=0x1f0000) returned 1 [0288.400] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0288.400] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0288.401] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400004.PNG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400004.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0288.401] GetFileType (hFile=0x198) returned 0x1 [0288.402] CloseHandle (hObject=0x198) returned 1 [0288.402] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0288.403] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400004.PNG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400004.png"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19a5d)) returned 1 [0288.403] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0288.403] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0288.403] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400004.PNG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400004.png"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19a5d)) returned 1 [0288.403] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0288.403] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0288.403] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0288.403] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17742, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="J0400005.PNG", cAlternateFileName="")) returned 1 [0288.404] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0288.404] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2123e8 [0288.404] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0288.404] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2123e8 | out: hHeap=0x1f0000) returned 1 [0288.404] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0288.404] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0288.405] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400005.PNG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400005.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0288.406] GetFileType (hFile=0x198) returned 0x1 [0288.406] CloseHandle (hObject=0x198) returned 1 [0288.406] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0288.407] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400005.PNG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400005.png"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17742)) returned 1 [0288.407] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0288.407] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0288.407] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400005.PNG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400005.png"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17742)) returned 1 [0288.407] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0288.407] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0288.407] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0288.408] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2645, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="JAVA_01.MID", cAlternateFileName="")) returned 1 [0288.408] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0288.408] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d00 [0288.408] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0288.408] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d00 | out: hHeap=0x1f0000) returned 1 [0288.408] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0288.408] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0288.409] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JAVA_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\java_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0288.732] GetFileType (hFile=0x21c) returned 0x1 [0288.733] CloseHandle (hObject=0x21c) returned 1 [0288.733] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0288.733] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JAVA_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\java_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2645)) returned 1 [0288.733] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0288.733] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0288.734] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JAVA_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\java_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2645)) returned 1 [0288.734] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0288.734] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0288.734] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0288.734] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16d3, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="JNGLE_01.MID", cAlternateFileName="")) returned 1 [0288.734] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0288.734] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212938 [0288.734] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0288.734] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212938 | out: hHeap=0x1f0000) returned 1 [0288.734] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0288.734] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0288.735] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JNGLE_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\jngle_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0288.735] GetFileType (hFile=0x21c) returned 0x1 [0288.735] CloseHandle (hObject=0x21c) returned 1 [0288.736] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0288.736] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JNGLE_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\jngle_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16d3)) returned 1 [0288.736] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0288.736] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0288.736] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JNGLE_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\jngle_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16d3)) returned 1 [0288.736] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0288.736] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0288.737] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0288.737] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15f6, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="MP00021_.WMF", cAlternateFileName="")) returned 1 [0288.737] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0288.737] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2128b0 [0288.737] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0288.737] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2128b0 | out: hHeap=0x1f0000) returned 1 [0288.737] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0288.737] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0288.738] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MP00021_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\mp00021_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0288.738] GetFileType (hFile=0x21c) returned 0x1 [0288.738] CloseHandle (hObject=0x21c) returned 1 [0288.738] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0288.739] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MP00021_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\mp00021_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15f6)) returned 1 [0288.739] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0288.739] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0288.739] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MP00021_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\mp00021_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15f6)) returned 1 [0288.739] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0288.739] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0288.739] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0288.739] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1090, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="MP00132_.WMF", cAlternateFileName="")) returned 1 [0288.739] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0288.739] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212140 [0288.739] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0288.739] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212140 | out: hHeap=0x1f0000) returned 1 [0288.739] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0288.740] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0288.740] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MP00132_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\mp00132_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0288.740] GetFileType (hFile=0x21c) returned 0x1 [0288.741] CloseHandle (hObject=0x21c) returned 1 [0288.741] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0288.741] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MP00132_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\mp00132_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1090)) returned 1 [0288.741] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0288.741] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0288.741] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MP00132_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\mp00132_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1090)) returned 1 [0288.741] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0288.741] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0288.742] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0288.742] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31e2, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="MP00646_.WMF", cAlternateFileName="")) returned 1 [0288.742] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0288.742] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0288.742] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0288.742] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0288.742] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0288.742] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0288.743] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MP00646_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\mp00646_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0288.743] GetFileType (hFile=0x21c) returned 0x1 [0288.744] CloseHandle (hObject=0x21c) returned 1 [0288.744] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0288.744] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MP00646_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\mp00646_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31e2)) returned 1 [0288.745] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0288.745] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0288.745] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MP00646_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\mp00646_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31e2)) returned 1 [0288.745] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0288.745] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0288.745] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0288.745] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ae0, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="MUSIC_01.MID", cAlternateFileName="")) returned 1 [0288.745] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0288.746] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211fa8 [0288.746] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0288.746] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211fa8 | out: hHeap=0x1f0000) returned 1 [0288.746] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0288.746] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0288.747] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MUSIC_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\music_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0288.747] GetFileType (hFile=0x21c) returned 0x1 [0288.747] CloseHandle (hObject=0x21c) returned 1 [0288.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0288.748] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MUSIC_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\music_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ae0)) returned 1 [0288.748] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0288.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0288.748] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MUSIC_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\music_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ae0)) returned 1 [0288.748] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0288.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0288.748] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0288.748] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5044, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA00042_.WMF", cAlternateFileName="")) returned 1 [0288.749] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0288.749] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212140 [0288.749] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0288.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212140 | out: hHeap=0x1f0000) returned 1 [0288.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0288.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0288.750] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00042_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00042_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0288.750] GetFileType (hFile=0x21c) returned 0x1 [0288.750] CloseHandle (hObject=0x21c) returned 1 [0288.751] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0288.751] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00042_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00042_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5044)) returned 1 [0288.751] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0288.751] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0288.751] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00042_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00042_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5044)) returned 1 [0288.751] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0288.751] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0288.752] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0288.752] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a42, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA00057_.WMF", cAlternateFileName="")) returned 1 [0288.752] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0288.752] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211948 [0288.752] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0288.752] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211948 | out: hHeap=0x1f0000) returned 1 [0288.752] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0288.752] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0288.753] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00057_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00057_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0288.753] GetFileType (hFile=0x21c) returned 0x1 [0288.754] CloseHandle (hObject=0x21c) returned 1 [0288.754] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0288.754] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00057_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00057_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a42)) returned 1 [0288.754] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0288.754] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0288.754] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00057_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00057_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a42)) returned 1 [0288.755] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0288.755] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0288.755] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0288.755] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xeaa, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA00058_.WMF", cAlternateFileName="")) returned 1 [0288.755] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0288.755] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211bf0 [0288.755] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0288.755] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211bf0 | out: hHeap=0x1f0000) returned 1 [0288.755] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0288.755] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0288.756] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00058_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00058_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0288.756] GetFileType (hFile=0x21c) returned 0x1 [0288.756] CloseHandle (hObject=0x21c) returned 1 [0288.757] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0288.757] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00058_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00058_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xeaa)) returned 1 [0288.757] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0288.757] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0288.757] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00058_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00058_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xeaa)) returned 1 [0288.757] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0288.757] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0288.757] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0288.757] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1324, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA00068_.WMF", cAlternateFileName="")) returned 1 [0288.757] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260630 [0288.758] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2128b0 [0288.758] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0288.758] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2128b0 | out: hHeap=0x1f0000) returned 1 [0288.758] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0288.758] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260630 | out: hHeap=0x1f0000) returned 1 [0288.759] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00068_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00068_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0288.759] GetFileType (hFile=0x21c) returned 0x1 [0288.760] CloseHandle (hObject=0x21c) returned 1 [0288.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0288.760] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00068_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00068_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1324)) returned 1 [0288.760] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0288.761] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0288.761] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00068_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00068_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1324)) returned 1 [0288.761] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0288.761] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0288.761] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0288.761] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1384, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA00238_.WMF", cAlternateFileName="")) returned 1 [0288.761] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0288.761] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212718 [0288.761] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0288.761] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212718 | out: hHeap=0x1f0000) returned 1 [0288.762] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0288.762] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0288.762] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00238_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00238_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0288.763] GetFileType (hFile=0x21c) returned 0x1 [0288.763] CloseHandle (hObject=0x21c) returned 1 [0288.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0288.764] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00238_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00238_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1384)) returned 1 [0288.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0288.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0288.764] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00238_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00238_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1384)) returned 1 [0288.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0288.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0288.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0288.764] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x864, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA00330_.WMF", cAlternateFileName="")) returned 1 [0288.765] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0288.765] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2129c0 [0288.765] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0288.765] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2129c0 | out: hHeap=0x1f0000) returned 1 [0288.765] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0288.765] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0288.766] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00330_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00330_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0288.766] GetFileType (hFile=0x21c) returned 0x1 [0288.766] CloseHandle (hObject=0x21c) returned 1 [0288.767] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0288.767] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00330_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00330_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x864)) returned 1 [0288.767] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0288.767] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0288.767] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00330_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00330_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x864)) returned 1 [0288.767] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0288.768] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0288.768] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0288.768] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1172, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA00388_.WMF", cAlternateFileName="")) returned 1 [0288.768] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0288.768] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211e98 [0288.768] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0288.768] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e98 | out: hHeap=0x1f0000) returned 1 [0288.768] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0288.768] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0288.769] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00388_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00388_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0288.769] GetFileType (hFile=0x21c) returned 0x1 [0288.770] CloseHandle (hObject=0x21c) returned 1 [0288.770] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0288.770] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00388_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00388_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1172)) returned 1 [0288.770] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0288.771] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0288.771] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00388_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00388_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1172)) returned 1 [0288.771] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0288.771] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0288.771] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0288.771] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20ca, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA00389_.WMF", cAlternateFileName="")) returned 1 [0288.771] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260630 [0288.771] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212030 [0288.771] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0288.771] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212030 | out: hHeap=0x1f0000) returned 1 [0288.772] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0288.772] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260630 | out: hHeap=0x1f0000) returned 1 [0288.772] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00389_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00389_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0288.979] GetFileType (hFile=0x198) returned 0x1 [0288.979] CloseHandle (hObject=0x198) returned 1 [0288.980] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0288.980] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00389_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00389_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20ca)) returned 1 [0288.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0288.980] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0288.980] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00389_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00389_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20ca)) returned 1 [0288.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0288.980] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0288.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0288.980] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21c2, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA00390_.WMF", cAlternateFileName="")) returned 1 [0288.981] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0288.981] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211e98 [0288.981] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0288.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e98 | out: hHeap=0x1f0000) returned 1 [0288.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0288.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0289.071] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00390_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00390_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.402] GetFileType (hFile=0x198) returned 0x1 [0289.403] CloseHandle (hObject=0x198) returned 1 [0289.403] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0289.403] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00390_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00390_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21c2)) returned 1 [0289.403] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0289.403] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0289.404] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00390_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00390_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21c2)) returned 1 [0289.404] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0289.404] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0289.404] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0289.404] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21ec, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA00391_.WMF", cAlternateFileName="")) returned 1 [0289.404] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0289.404] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2119d0 [0289.404] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0289.404] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2119d0 | out: hHeap=0x1f0000) returned 1 [0289.405] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0289.405] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0289.405] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00391_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00391_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.406] GetFileType (hFile=0x198) returned 0x1 [0289.406] CloseHandle (hObject=0x198) returned 1 [0289.406] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0289.406] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00391_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00391_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21ec)) returned 1 [0289.407] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0289.407] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0289.407] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00391_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00391_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21ec)) returned 1 [0289.407] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0289.407] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0289.407] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0289.407] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ad4, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA00394_.WMF", cAlternateFileName="")) returned 1 [0289.407] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0289.407] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212608 [0289.408] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0289.408] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212608 | out: hHeap=0x1f0000) returned 1 [0289.408] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0289.408] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0289.408] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00394_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00394_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.408] GetFileType (hFile=0x198) returned 0x1 [0289.409] CloseHandle (hObject=0x198) returned 1 [0289.409] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0289.409] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00394_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00394_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ad4)) returned 1 [0289.410] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0289.410] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0289.410] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00394_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00394_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ad4)) returned 1 [0289.410] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0289.410] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0289.410] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0289.410] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x194a, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA00395_.WMF", cAlternateFileName="")) returned 1 [0289.410] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0289.410] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212250 [0289.411] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0289.411] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212250 | out: hHeap=0x1f0000) returned 1 [0289.411] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0289.411] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0289.411] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00395_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00395_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.412] GetFileType (hFile=0x198) returned 0x1 [0289.412] CloseHandle (hObject=0x198) returned 1 [0289.412] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0289.412] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00395_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00395_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x194a)) returned 1 [0289.412] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0289.412] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0289.412] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00395_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00395_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x194a)) returned 1 [0289.413] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0289.413] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0289.413] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0289.413] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x38c6, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA00396_.WMF", cAlternateFileName="")) returned 1 [0289.413] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0289.413] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2123e8 [0289.413] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0289.413] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2123e8 | out: hHeap=0x1f0000) returned 1 [0289.413] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0289.413] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0289.413] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00396_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00396_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.414] GetFileType (hFile=0x198) returned 0x1 [0289.414] CloseHandle (hObject=0x198) returned 1 [0289.414] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0289.414] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00396_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00396_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x38c6)) returned 1 [0289.415] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0289.415] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0289.415] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00396_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00396_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x38c6)) returned 1 [0289.415] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0289.415] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0289.415] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0289.415] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x173e, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA00417_.WMF", cAlternateFileName="")) returned 1 [0289.415] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0289.415] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212470 [0289.416] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0289.416] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212470 | out: hHeap=0x1f0000) returned 1 [0289.416] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0289.416] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0289.416] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00417_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00417_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.416] GetFileType (hFile=0x198) returned 0x1 [0289.417] CloseHandle (hObject=0x198) returned 1 [0289.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0289.417] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00417_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00417_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x173e)) returned 1 [0289.417] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0289.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0289.417] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00417_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00417_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x173e)) returned 1 [0289.417] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0289.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0289.417] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0289.417] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4696, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA00433_.WMF", cAlternateFileName="")) returned 1 [0289.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0289.418] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212938 [0289.418] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0289.418] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212938 | out: hHeap=0x1f0000) returned 1 [0289.418] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0289.418] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0289.418] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00433_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00433_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.419] GetFileType (hFile=0x198) returned 0x1 [0289.419] CloseHandle (hObject=0x198) returned 1 [0289.419] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0289.419] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00433_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00433_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4696)) returned 1 [0289.419] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0289.419] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0289.420] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00433_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00433_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4696)) returned 1 [0289.420] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0289.420] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0289.420] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0289.420] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2f38, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA00438_.WMF", cAlternateFileName="")) returned 1 [0289.420] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0289.420] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212360 [0289.420] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0289.420] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212360 | out: hHeap=0x1f0000) returned 1 [0289.420] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0289.420] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0289.421] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00438_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00438_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.421] GetFileType (hFile=0x198) returned 0x1 [0289.421] CloseHandle (hObject=0x198) returned 1 [0289.421] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0289.421] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00438_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00438_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2f38)) returned 1 [0289.421] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0289.421] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0289.421] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00438_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00438_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2f38)) returned 1 [0289.422] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0289.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0289.422] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0289.422] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14bc, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA00452_.WMF", cAlternateFileName="")) returned 1 [0289.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0289.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0289.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0289.422] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0289.422] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0289.422] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0289.422] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00452_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00452_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.422] GetFileType (hFile=0x198) returned 0x1 [0289.423] CloseHandle (hObject=0x198) returned 1 [0289.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0289.423] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00452_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00452_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14bc)) returned 1 [0289.423] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0289.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0289.423] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00452_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00452_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14bc)) returned 1 [0289.423] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0289.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0289.423] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0289.423] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1580, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA00454_.WMF", cAlternateFileName="")) returned 1 [0289.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0289.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211948 [0289.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0289.423] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211948 | out: hHeap=0x1f0000) returned 1 [0289.424] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0289.424] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0289.424] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00454_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00454_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.424] GetFileType (hFile=0x198) returned 0x1 [0289.424] CloseHandle (hObject=0x198) returned 1 [0289.424] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0289.424] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00454_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00454_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1580)) returned 1 [0289.425] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0289.425] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0289.425] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00454_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00454_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1580)) returned 1 [0289.425] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0289.425] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0289.425] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0289.425] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27a4, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA00458_.WMF", cAlternateFileName="")) returned 1 [0289.425] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0289.425] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0289.425] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0289.425] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0289.425] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0289.425] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0289.425] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00458_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00458_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.426] GetFileType (hFile=0x198) returned 0x1 [0289.426] CloseHandle (hObject=0x198) returned 1 [0289.426] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0289.426] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00458_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00458_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27a4)) returned 1 [0289.426] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0289.426] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0289.426] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00458_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00458_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27a4)) returned 1 [0289.426] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0289.427] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0289.427] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0289.427] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f6c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA00462_.WMF", cAlternateFileName="")) returned 1 [0289.427] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0289.427] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212360 [0289.427] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0289.427] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212360 | out: hHeap=0x1f0000) returned 1 [0289.427] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0289.427] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0289.428] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00462_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00462_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.428] GetFileType (hFile=0x198) returned 0x1 [0289.428] CloseHandle (hObject=0x198) returned 1 [0289.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0289.429] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00462_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00462_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f6c)) returned 1 [0289.429] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0289.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0289.429] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00462_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00462_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f6c)) returned 1 [0289.429] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0289.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0289.429] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0289.429] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc10, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA00487_.WMF", cAlternateFileName="")) returned 1 [0289.430] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0289.430] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2124f8 [0289.430] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0289.430] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2124f8 | out: hHeap=0x1f0000) returned 1 [0289.430] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0289.734] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0289.978] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00487_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00487_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0289.978] GetFileType (hFile=0x21c) returned 0x1 [0289.978] CloseHandle (hObject=0x21c) returned 1 [0289.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0289.979] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00487_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00487_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc10)) returned 1 [0289.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0289.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0289.979] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00487_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00487_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc10)) returned 1 [0289.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0289.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0289.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0289.979] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x938, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA00494_.WMF", cAlternateFileName="")) returned 1 [0289.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0289.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2119d0 [0289.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0289.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2119d0 | out: hHeap=0x1f0000) returned 1 [0289.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0289.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0289.980] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00494_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00494_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0289.980] GetFileType (hFile=0x21c) returned 0x1 [0289.980] CloseHandle (hObject=0x21c) returned 1 [0289.981] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0289.981] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00494_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00494_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x938)) returned 1 [0289.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0289.981] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0289.981] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00494_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00494_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x938)) returned 1 [0289.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0289.981] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0289.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0289.981] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb60, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA00512_.WMF", cAlternateFileName="")) returned 1 [0289.981] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0289.981] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212608 [0289.982] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0289.982] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212608 | out: hHeap=0x1f0000) returned 1 [0289.982] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0289.982] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0289.982] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00512_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00512_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0289.982] GetFileType (hFile=0x21c) returned 0x1 [0289.982] CloseHandle (hObject=0x21c) returned 1 [0289.983] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0289.983] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00512_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00512_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb60)) returned 1 [0289.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0289.983] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0289.983] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00512_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00512_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb60)) returned 1 [0289.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0289.983] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0289.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0289.983] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6efa, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA00523_.WMF", cAlternateFileName="")) returned 1 [0289.983] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0289.984] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212828 [0289.984] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0289.984] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212828 | out: hHeap=0x1f0000) returned 1 [0289.984] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0289.984] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0289.984] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00523_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00523_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0289.984] GetFileType (hFile=0x21c) returned 0x1 [0289.984] CloseHandle (hObject=0x21c) returned 1 [0289.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0289.985] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00523_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00523_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6efa)) returned 1 [0289.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0289.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0289.985] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00523_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00523_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6efa)) returned 1 [0289.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0289.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0289.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0289.985] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5880, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA00525_.WMF", cAlternateFileName="")) returned 1 [0289.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0289.986] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2119d0 [0289.986] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0289.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2119d0 | out: hHeap=0x1f0000) returned 1 [0289.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0289.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0289.986] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00525_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00525_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0289.986] GetFileType (hFile=0x21c) returned 0x1 [0289.987] CloseHandle (hObject=0x21c) returned 1 [0289.987] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0289.987] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00525_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00525_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5880)) returned 1 [0289.987] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0289.987] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0289.987] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00525_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00525_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5880)) returned 1 [0289.987] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0289.987] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0289.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0289.988] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x477c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA00530_.WMF", cAlternateFileName="")) returned 1 [0289.988] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0289.988] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212580 [0289.988] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0289.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212580 | out: hHeap=0x1f0000) returned 1 [0289.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0289.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0289.989] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00530_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00530_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0289.989] GetFileType (hFile=0x21c) returned 0x1 [0289.989] CloseHandle (hObject=0x21c) returned 1 [0289.990] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0289.990] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00530_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00530_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x477c)) returned 1 [0289.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0289.990] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0289.990] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00530_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00530_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x477c)) returned 1 [0289.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0289.990] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0289.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0289.991] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x530, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA00532_.WMF", cAlternateFileName="")) returned 1 [0289.991] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605b8 [0289.991] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212828 [0289.991] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0289.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212828 | out: hHeap=0x1f0000) returned 1 [0289.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0289.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0289.992] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00532_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00532_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0289.992] GetFileType (hFile=0x21c) returned 0x1 [0289.993] CloseHandle (hObject=0x21c) returned 1 [0289.994] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0289.994] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00532_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00532_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x530)) returned 1 [0289.994] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0289.994] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0289.994] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00532_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00532_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x530)) returned 1 [0289.994] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0289.994] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0289.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0289.995] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7d14, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA00538_.WMF", cAlternateFileName="")) returned 1 [0289.995] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0289.995] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212030 [0289.995] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0289.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212030 | out: hHeap=0x1f0000) returned 1 [0289.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0289.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0289.996] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00538_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00538_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0289.996] GetFileType (hFile=0x21c) returned 0x1 [0289.997] CloseHandle (hObject=0x21c) returned 1 [0289.997] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0289.997] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00538_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00538_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7d14)) returned 1 [0289.998] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0289.998] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0289.998] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00538_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00538_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7d14)) returned 1 [0289.998] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0289.998] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0289.998] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0289.998] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x64c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA00641_.WMF", cAlternateFileName="")) returned 1 [0289.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605b8 [0289.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2124f8 [0289.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0289.999] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2124f8 | out: hHeap=0x1f0000) returned 1 [0289.999] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0289.999] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0290.000] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00641_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00641_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0290.000] GetFileType (hFile=0x21c) returned 0x1 [0290.000] CloseHandle (hObject=0x21c) returned 1 [0290.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0290.001] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00641_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00641_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x64c)) returned 1 [0290.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0290.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0290.001] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00641_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00641_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x64c)) returned 1 [0290.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0290.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0290.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0290.002] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7658, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA00784_.WMF", cAlternateFileName="")) returned 1 [0290.002] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605b8 [0290.002] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2128b0 [0290.002] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0290.002] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2128b0 | out: hHeap=0x1f0000) returned 1 [0290.002] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0290.002] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0290.002] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00784_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00784_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0290.003] GetFileType (hFile=0x21c) returned 0x1 [0290.003] CloseHandle (hObject=0x21c) returned 1 [0290.003] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0290.003] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00784_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00784_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7658)) returned 1 [0290.003] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0290.003] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0290.003] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00784_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00784_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7658)) returned 1 [0290.004] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0290.004] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0290.004] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0290.004] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x23f8, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA00798_.WMF", cAlternateFileName="")) returned 1 [0290.004] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0290.004] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212140 [0290.004] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0290.004] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212140 | out: hHeap=0x1f0000) returned 1 [0290.004] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0290.004] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0290.005] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00798_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00798_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0290.005] GetFileType (hFile=0x21c) returned 0x1 [0290.005] CloseHandle (hObject=0x21c) returned 1 [0290.005] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0290.005] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00798_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00798_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x23f8)) returned 1 [0290.006] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0290.006] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0290.006] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00798_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00798_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x23f8)) returned 1 [0290.006] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0290.006] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0290.006] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0290.006] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x788, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA00806_.WMF", cAlternateFileName="")) returned 1 [0290.006] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0290.006] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211b68 [0290.007] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0290.007] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b68 | out: hHeap=0x1f0000) returned 1 [0290.007] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0290.007] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0290.008] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00806_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00806_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0290.009] GetFileType (hFile=0x21c) returned 0x1 [0290.010] CloseHandle (hObject=0x21c) returned 1 [0290.010] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0290.010] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00806_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00806_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x788)) returned 1 [0290.010] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0290.011] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0290.011] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00806_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00806_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x788)) returned 1 [0290.011] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0290.011] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0290.011] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0290.011] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xba4, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA00807_.WMF", cAlternateFileName="")) returned 1 [0290.011] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0290.011] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211bf0 [0290.011] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0290.012] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211bf0 | out: hHeap=0x1f0000) returned 1 [0290.012] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0290.012] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0290.012] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00807_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00807_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0290.013] GetFileType (hFile=0x21c) returned 0x1 [0290.014] CloseHandle (hObject=0x21c) returned 1 [0290.014] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0290.015] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00807_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00807_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xba4)) returned 1 [0290.015] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0290.015] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0290.015] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00807_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00807_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xba4)) returned 1 [0290.015] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0290.015] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0290.015] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0290.016] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x514, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA00808_.WMF", cAlternateFileName="")) returned 1 [0290.016] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0290.016] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211e10 [0290.016] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0290.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e10 | out: hHeap=0x1f0000) returned 1 [0290.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0290.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0290.017] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00808_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00808_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0290.018] GetFileType (hFile=0x21c) returned 0x1 [0290.018] CloseHandle (hObject=0x21c) returned 1 [0290.019] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0290.019] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00808_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00808_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x514)) returned 1 [0290.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0290.019] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0290.020] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00808_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00808_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x514)) returned 1 [0290.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0290.020] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0290.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0290.020] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x608, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA00809_.WMF", cAlternateFileName="")) returned 1 [0290.020] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605b8 [0290.020] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212580 [0290.021] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0290.021] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212580 | out: hHeap=0x1f0000) returned 1 [0290.021] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0290.021] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0290.022] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00809_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00809_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0290.022] GetFileType (hFile=0x21c) returned 0x1 [0290.023] CloseHandle (hObject=0x21c) returned 1 [0290.023] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0290.023] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00809_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00809_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x608)) returned 1 [0290.023] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0290.024] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0290.262] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00809_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00809_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x608)) returned 1 [0290.262] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0290.262] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0290.262] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0290.262] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd58, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA00810_.WMF", cAlternateFileName="")) returned 1 [0290.262] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0290.262] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2119d0 [0290.262] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0290.262] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2119d0 | out: hHeap=0x1f0000) returned 1 [0290.263] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0290.263] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0290.263] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00810_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00810_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0290.264] GetFileType (hFile=0x198) returned 0x1 [0290.264] CloseHandle (hObject=0x198) returned 1 [0290.264] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0290.265] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00810_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00810_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd58)) returned 1 [0290.265] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0290.265] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0290.265] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00810_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00810_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd58)) returned 1 [0290.265] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0290.265] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0290.265] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0290.265] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3210, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA00932_.WMF", cAlternateFileName="")) returned 1 [0290.265] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0290.265] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0290.266] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0290.266] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0290.266] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0290.266] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0290.267] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00932_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00932_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0290.267] GetFileType (hFile=0x198) returned 0x1 [0290.267] CloseHandle (hObject=0x198) returned 1 [0290.268] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0290.268] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00932_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00932_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3210)) returned 1 [0290.268] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0290.268] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0290.268] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00932_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00932_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3210)) returned 1 [0290.268] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0290.269] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0290.269] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0290.269] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x110c9494, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x110c9494, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110ef705, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7c46, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA01064_.WMF", cAlternateFileName="")) returned 1 [0290.269] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260518 [0290.269] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2122d8 [0290.269] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0290.269] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2122d8 | out: hHeap=0x1f0000) returned 1 [0290.269] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0290.269] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0290.270] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01064_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01064_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0290.270] GetFileType (hFile=0x198) returned 0x1 [0290.270] CloseHandle (hObject=0x198) returned 1 [0290.271] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0290.271] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01064_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01064_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x110c9494, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x110c9494, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110ef705, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7c46)) returned 1 [0290.271] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0290.271] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0290.271] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01064_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01064_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x110c9494, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x110c9494, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110ef705, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7c46)) returned 1 [0290.271] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0290.271] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0290.271] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0290.272] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x54a8, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA01066_.WMF", cAlternateFileName="")) returned 1 [0290.272] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260770 [0290.272] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2129c0 [0290.272] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0290.272] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2129c0 | out: hHeap=0x1f0000) returned 1 [0290.272] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0290.272] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0290.272] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01066_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01066_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0290.273] GetFileType (hFile=0x198) returned 0x1 [0290.273] CloseHandle (hObject=0x198) returned 1 [0290.274] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0290.274] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01066_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01066_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x54a8)) returned 1 [0290.274] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0290.275] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0290.275] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01066_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01066_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x54a8)) returned 1 [0290.275] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0290.275] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0290.275] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0290.275] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a7e, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA01069_.WMF", cAlternateFileName="")) returned 1 [0290.275] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0290.275] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211b68 [0290.275] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0290.276] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b68 | out: hHeap=0x1f0000) returned 1 [0290.276] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0290.276] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0290.276] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01069_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01069_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0290.277] GetFileType (hFile=0x198) returned 0x1 [0290.277] CloseHandle (hObject=0x198) returned 1 [0290.277] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0290.278] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01069_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01069_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a7e)) returned 1 [0290.278] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0290.278] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0290.278] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01069_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01069_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a7e)) returned 1 [0290.278] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0290.278] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0290.279] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0290.279] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA01123_.WMF", cAlternateFileName="")) returned 1 [0290.279] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609a0 [0290.279] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211ae0 [0290.279] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0290.279] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211ae0 | out: hHeap=0x1f0000) returned 1 [0290.279] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0290.279] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0290.280] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01123_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01123_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0290.280] GetFileType (hFile=0x198) returned 0x1 [0290.281] CloseHandle (hObject=0x198) returned 1 [0290.281] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0290.281] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01123_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01123_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e00)) returned 1 [0290.281] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0290.281] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0290.281] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01123_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01123_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e00)) returned 1 [0290.281] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0290.282] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0290.282] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0290.282] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb70, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA01126_.WMF", cAlternateFileName="")) returned 1 [0290.282] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0290.282] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212828 [0290.282] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0290.282] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212828 | out: hHeap=0x1f0000) returned 1 [0290.282] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0290.282] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0290.283] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01126_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01126_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0290.283] GetFileType (hFile=0x198) returned 0x1 [0290.284] CloseHandle (hObject=0x198) returned 1 [0290.284] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0290.284] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01126_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01126_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb70)) returned 1 [0290.284] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0290.284] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0290.285] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01126_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01126_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb70)) returned 1 [0290.285] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0290.285] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0290.285] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0290.285] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16a0, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA01130_.WMF", cAlternateFileName="")) returned 1 [0290.285] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609a0 [0290.285] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211bf0 [0290.285] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0290.286] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211bf0 | out: hHeap=0x1f0000) returned 1 [0290.286] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0290.286] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0290.286] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01130_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01130_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0290.286] GetFileType (hFile=0x198) returned 0x1 [0290.287] CloseHandle (hObject=0x198) returned 1 [0290.287] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0290.287] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01130_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01130_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16a0)) returned 1 [0290.288] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0290.288] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0290.288] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01130_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01130_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16a0)) returned 1 [0290.288] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0290.288] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0290.288] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0290.288] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16d8, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA01141_.WMF", cAlternateFileName="")) returned 1 [0290.288] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0290.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0290.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0290.289] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0290.289] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0290.289] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0290.290] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01141_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01141_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0290.884] GetFileType (hFile=0x1b0) returned 0x1 [0290.884] CloseHandle (hObject=0x1b0) returned 1 [0290.884] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0290.884] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01141_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01141_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16d8)) returned 1 [0290.884] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0290.884] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0290.884] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01141_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01141_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16d8)) returned 1 [0290.885] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0290.885] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0290.885] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0290.885] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f38, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA01148_.WMF", cAlternateFileName="")) returned 1 [0290.885] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b30 [0290.885] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211ae0 [0290.885] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0290.885] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211ae0 | out: hHeap=0x1f0000) returned 1 [0290.885] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0290.885] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b30 | out: hHeap=0x1f0000) returned 1 [0290.886] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01148_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01148_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0290.886] GetFileType (hFile=0x1b0) returned 0x1 [0290.886] CloseHandle (hObject=0x1b0) returned 1 [0290.886] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0290.886] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01148_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01148_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f38)) returned 1 [0290.886] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0290.886] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0290.887] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01148_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01148_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f38)) returned 1 [0290.887] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0290.887] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0290.887] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0290.887] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1248, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA01149_.WMF", cAlternateFileName="")) returned 1 [0290.887] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c70 [0290.887] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212030 [0290.887] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0290.887] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212030 | out: hHeap=0x1f0000) returned 1 [0290.887] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0290.887] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c70 | out: hHeap=0x1f0000) returned 1 [0290.888] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01149_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01149_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0290.888] GetFileType (hFile=0x1b0) returned 0x1 [0290.889] CloseHandle (hObject=0x1b0) returned 1 [0290.889] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0290.889] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01149_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01149_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1248)) returned 1 [0290.889] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0290.889] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0290.889] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01149_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01149_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1248)) returned 1 [0290.890] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0290.890] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0290.890] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0290.890] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x110c9494, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x110c9494, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110ef705, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2230, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA01152_.WMF", cAlternateFileName="")) returned 1 [0290.890] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609f0 [0290.890] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211b68 [0290.890] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0290.890] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b68 | out: hHeap=0x1f0000) returned 1 [0290.890] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0290.890] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609f0 | out: hHeap=0x1f0000) returned 1 [0290.891] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01152_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01152_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0290.891] GetFileType (hFile=0x1b0) returned 0x1 [0290.892] CloseHandle (hObject=0x1b0) returned 1 [0290.892] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0290.892] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01152_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01152_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x110c9494, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x110c9494, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110ef705, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2230)) returned 1 [0290.892] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0290.892] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0290.893] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01152_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01152_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x110c9494, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x110c9494, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110ef705, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2230)) returned 1 [0290.893] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0290.893] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0290.893] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0290.893] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10386305, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10386305, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103ac532, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15b0, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA01154_.WMF", cAlternateFileName="")) returned 1 [0290.893] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a68 [0290.893] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d00 [0290.893] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0290.894] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d00 | out: hHeap=0x1f0000) returned 1 [0290.894] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0290.894] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a68 | out: hHeap=0x1f0000) returned 1 [0290.894] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01154_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01154_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0290.895] GetFileType (hFile=0x1b0) returned 0x1 [0290.895] CloseHandle (hObject=0x1b0) returned 1 [0290.896] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0290.896] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01154_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01154_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10386305, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10386305, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103ac532, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15b0)) returned 1 [0290.896] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0290.896] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0290.896] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01154_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01154_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10386305, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10386305, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103ac532, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15b0)) returned 1 [0290.896] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0290.897] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0290.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0290.897] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1858, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA01157_.WMF", cAlternateFileName="")) returned 1 [0290.897] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bd0 [0290.897] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212828 [0290.897] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0290.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212828 | out: hHeap=0x1f0000) returned 1 [0290.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0290.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bd0 | out: hHeap=0x1f0000) returned 1 [0290.898] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01157_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01157_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0290.898] GetFileType (hFile=0x1b0) returned 0x1 [0291.175] CloseHandle (hObject=0x1b0) returned 1 [0291.175] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0291.175] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01157_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01157_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1858)) returned 1 [0291.176] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0291.176] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0291.176] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01157_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01157_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1858)) returned 1 [0291.176] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0291.176] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0291.176] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0291.176] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101e2909, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101e2909, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101e2909, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c74, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA01158_.WMF", cAlternateFileName="")) returned 1 [0291.176] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b08 [0291.176] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0291.177] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0291.177] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0291.177] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0291.177] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b08 | out: hHeap=0x1f0000) returned 1 [0291.178] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01158_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01158_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0291.178] GetFileType (hFile=0x1b0) returned 0x1 [0291.178] CloseHandle (hObject=0x1b0) returned 1 [0291.179] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0291.179] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01158_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01158_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101e2909, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101e2909, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101e2909, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c74)) returned 1 [0291.179] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0291.179] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0291.180] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01158_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01158_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101e2909, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101e2909, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101e2909, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c74)) returned 1 [0291.180] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0291.180] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0291.180] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0291.180] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102a14ae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102a14ae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102a14ae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1694, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA01161_.WMF", cAlternateFileName="")) returned 1 [0291.181] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bd0 [0291.181] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211948 [0291.181] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0291.181] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211948 | out: hHeap=0x1f0000) returned 1 [0291.181] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0291.181] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bd0 | out: hHeap=0x1f0000) returned 1 [0291.182] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01161_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01161_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0291.182] GetFileType (hFile=0x1b0) returned 0x1 [0291.183] CloseHandle (hObject=0x1b0) returned 1 [0291.183] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0291.183] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01161_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01161_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102a14ae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102a14ae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102a14ae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1694)) returned 1 [0291.184] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0291.184] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0291.184] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01161_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01161_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102a14ae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102a14ae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102a14ae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1694)) returned 1 [0291.184] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0291.184] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0291.184] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0291.184] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5d0a20, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5d0a20, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5f6d6e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa04, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA01164_.WMF", cAlternateFileName="")) returned 1 [0291.184] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b08 [0291.185] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2129c0 [0291.185] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0291.185] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2129c0 | out: hHeap=0x1f0000) returned 1 [0291.185] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0291.185] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b08 | out: hHeap=0x1f0000) returned 1 [0291.186] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01164_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01164_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0291.186] GetFileType (hFile=0x1b0) returned 0x1 [0291.186] CloseHandle (hObject=0x1b0) returned 1 [0291.187] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0291.187] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01164_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01164_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5d0a20, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5d0a20, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5f6d6e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa04)) returned 1 [0291.187] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0291.187] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0291.187] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01164_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01164_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5d0a20, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5d0a20, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5f6d6e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa04)) returned 1 [0291.188] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0291.188] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0291.188] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0291.188] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5d0a20, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x70f0, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA01293_.WMF", cAlternateFileName="")) returned 1 [0291.188] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609f0 [0291.188] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2122d8 [0291.188] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0291.188] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2122d8 | out: hHeap=0x1f0000) returned 1 [0291.188] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0291.189] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609f0 | out: hHeap=0x1f0000) returned 1 [0291.189] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01293_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01293_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0291.189] GetFileType (hFile=0x1b0) returned 0x1 [0291.190] CloseHandle (hObject=0x1b0) returned 1 [0291.190] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0291.190] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01293_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01293_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5d0a20, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x70f0)) returned 1 [0291.190] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0291.190] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0291.191] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01293_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01293_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5d0a20, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x70f0)) returned 1 [0291.191] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0291.191] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0291.191] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0291.191] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16ae, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA01354_.WMF", cAlternateFileName="")) returned 1 [0291.191] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c70 [0291.191] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2119d0 [0291.191] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0291.191] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2119d0 | out: hHeap=0x1f0000) returned 1 [0291.192] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0291.192] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c70 | out: hHeap=0x1f0000) returned 1 [0291.192] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01354_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01354_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0291.192] GetFileType (hFile=0x1b0) returned 0x1 [0291.193] CloseHandle (hObject=0x1b0) returned 1 [0291.193] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0291.193] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01354_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01354_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16ae)) returned 1 [0291.193] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0291.194] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0291.194] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01354_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01354_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16ae)) returned 1 [0291.194] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0291.194] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0291.194] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0291.194] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4732, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA01356_.WMF", cAlternateFileName="")) returned 1 [0291.194] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b30 [0291.194] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211c78 [0291.194] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0291.194] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211c78 | out: hHeap=0x1f0000) returned 1 [0291.195] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0291.195] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b30 | out: hHeap=0x1f0000) returned 1 [0291.195] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01356_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01356_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0291.196] GetFileType (hFile=0x1b0) returned 0x1 [0291.197] CloseHandle (hObject=0x1b0) returned 1 [0291.197] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0291.197] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01356_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01356_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4732)) returned 1 [0291.197] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0291.198] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0291.198] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01356_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01356_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4732)) returned 1 [0291.198] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0291.198] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0291.198] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0291.198] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6bf6, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA01357_.WMF", cAlternateFileName="")) returned 1 [0291.198] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c20 [0291.199] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212718 [0291.199] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0291.199] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212718 | out: hHeap=0x1f0000) returned 1 [0291.199] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0291.199] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c20 | out: hHeap=0x1f0000) returned 1 [0291.200] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01357_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01357_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0291.200] GetFileType (hFile=0x1b0) returned 0x1 [0291.201] CloseHandle (hObject=0x1b0) returned 1 [0291.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0291.201] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01357_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01357_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6bf6)) returned 1 [0291.201] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0291.202] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0291.202] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01357_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01357_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6bf6)) returned 1 [0291.202] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0291.202] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0291.202] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0291.202] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf61cf5d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf61cf5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf61cf5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd6e, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA01358_.WMF", cAlternateFileName="")) returned 1 [0291.203] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b08 [0291.203] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212470 [0291.203] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0291.203] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212470 | out: hHeap=0x1f0000) returned 1 [0291.203] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0291.203] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b08 | out: hHeap=0x1f0000) returned 1 [0291.204] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01358_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01358_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0291.204] GetFileType (hFile=0x1b0) returned 0x1 [0291.205] CloseHandle (hObject=0x1b0) returned 1 [0291.205] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0291.205] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01358_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01358_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf61cf5d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf61cf5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf61cf5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd6e)) returned 1 [0291.205] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0291.206] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0291.206] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01358_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01358_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf61cf5d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf61cf5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf61cf5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd6e)) returned 1 [0291.206] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0291.206] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0291.206] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0291.206] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5f6d6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5f6d6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5f6d6e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b74, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA01361_.WMF", cAlternateFileName="")) returned 1 [0291.206] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b30 [0291.207] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d00 [0291.207] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0291.207] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d00 | out: hHeap=0x1f0000) returned 1 [0291.207] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0291.207] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b30 | out: hHeap=0x1f0000) returned 1 [0291.208] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01361_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01361_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0291.208] GetFileType (hFile=0x1b0) returned 0x1 [0291.208] CloseHandle (hObject=0x1b0) returned 1 [0291.209] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0291.209] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01361_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01361_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5f6d6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5f6d6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5f6d6e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b74)) returned 1 [0291.209] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0291.209] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0291.209] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01361_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01361_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5f6d6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5f6d6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5f6d6e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b74)) returned 1 [0291.209] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0291.209] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0291.209] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0291.210] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5f6d6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5f6d6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5f6d6e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x40412, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA01368_.WMF", cAlternateFileName="")) returned 1 [0291.210] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609f0 [0291.210] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2120b8 [0291.210] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0291.211] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2120b8 | out: hHeap=0x1f0000) returned 1 [0291.211] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0291.507] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609f0 | out: hHeap=0x1f0000) returned 1 [0291.699] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01368_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01368_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0291.700] GetFileType (hFile=0x1c0) returned 0x1 [0291.700] CloseHandle (hObject=0x1c0) returned 1 [0291.700] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0291.700] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01368_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01368_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5f6d6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5f6d6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5f6d6e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x40412)) returned 1 [0291.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0291.701] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0291.701] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01368_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01368_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5f6d6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5f6d6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5f6d6e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x40412)) returned 1 [0291.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0291.701] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0291.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0291.701] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5f6d6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5f6d6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5f6d6e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b16e, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA01421_.WMF", cAlternateFileName="")) returned 1 [0291.701] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0291.701] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2119d0 [0291.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0291.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2119d0 | out: hHeap=0x1f0000) returned 1 [0291.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0291.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0291.702] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01421_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01421_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0291.702] GetFileType (hFile=0x1c0) returned 0x1 [0291.703] CloseHandle (hObject=0x1c0) returned 1 [0291.703] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0291.703] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01421_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01421_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5f6d6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5f6d6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5f6d6e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b16e)) returned 1 [0291.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0291.703] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0291.703] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01421_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01421_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5f6d6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5f6d6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5f6d6e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b16e)) returned 1 [0291.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0291.704] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0291.704] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0291.704] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x100fdad1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x100fdad1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e82, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA01468_.WMF", cAlternateFileName="")) returned 1 [0291.704] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0291.704] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211ae0 [0291.704] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0291.704] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211ae0 | out: hHeap=0x1f0000) returned 1 [0291.704] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0291.704] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0291.705] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01468_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01468_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0291.705] GetFileType (hFile=0x1c0) returned 0x1 [0291.705] CloseHandle (hObject=0x1c0) returned 1 [0291.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0291.706] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01468_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01468_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x100fdad1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x100fdad1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e82)) returned 1 [0291.706] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0291.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0291.706] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01468_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01468_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x100fdad1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x100fdad1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e82)) returned 1 [0291.706] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0291.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0291.706] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0291.707] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5d0a20, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5d0a20, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5f6d6e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ada, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA01470_.WMF", cAlternateFileName="")) returned 1 [0291.707] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0291.707] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212938 [0291.707] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0291.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212938 | out: hHeap=0x1f0000) returned 1 [0291.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0291.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0291.707] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01470_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01470_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0291.708] GetFileType (hFile=0x1c0) returned 0x1 [0291.708] CloseHandle (hObject=0x1c0) returned 1 [0291.708] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0291.708] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01470_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01470_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5d0a20, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5d0a20, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5f6d6e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ada)) returned 1 [0291.709] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0291.709] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0291.709] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01470_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01470_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5d0a20, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5d0a20, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5f6d6e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ada)) returned 1 [0291.709] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0291.709] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0291.709] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0291.709] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5f6d6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5f6d6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5f6d6e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2028, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA01472_.WMF", cAlternateFileName="")) returned 1 [0291.709] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609a0 [0291.709] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212250 [0291.709] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0291.709] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212250 | out: hHeap=0x1f0000) returned 1 [0291.709] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0291.709] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0291.710] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01472_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01472_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0291.710] GetFileType (hFile=0x1c0) returned 0x1 [0291.710] CloseHandle (hObject=0x1c0) returned 1 [0291.711] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0291.711] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01472_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01472_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5f6d6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5f6d6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5f6d6e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2028)) returned 1 [0291.711] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0291.711] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0291.711] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01472_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01472_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5f6d6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5f6d6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5f6d6e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2028)) returned 1 [0291.711] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0291.711] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0291.711] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0291.711] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1027b233, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1027b233, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102a14ae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x28ae, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA01473_.WMF", cAlternateFileName="")) returned 1 [0291.712] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0291.712] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212580 [0291.712] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0291.712] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212580 | out: hHeap=0x1f0000) returned 1 [0291.712] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0291.712] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0291.713] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01473_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01473_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0291.713] GetFileType (hFile=0x1c0) returned 0x1 [0291.713] CloseHandle (hObject=0x1c0) returned 1 [0291.713] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0291.713] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01473_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01473_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1027b233, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1027b233, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102a14ae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x28ae)) returned 1 [0291.714] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0291.714] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0291.714] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01473_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01473_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1027b233, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1027b233, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102a14ae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x28ae)) returned 1 [0291.715] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0291.715] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0291.715] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0291.715] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102a14ae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102a14ae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102a14ae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x349c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA01474_.WMF", cAlternateFileName="")) returned 1 [0291.715] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0291.715] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0291.715] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0291.715] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0291.716] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0291.716] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0291.716] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01474_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01474_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0291.716] GetFileType (hFile=0x1c0) returned 0x1 [0291.717] CloseHandle (hObject=0x1c0) returned 1 [0291.717] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0291.717] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01474_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01474_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102a14ae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102a14ae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102a14ae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x349c)) returned 1 [0291.717] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0291.717] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0291.717] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01474_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01474_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102a14ae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102a14ae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102a14ae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x349c)) returned 1 [0291.717] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0291.717] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0291.717] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0291.718] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xce0, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA01627_.WMF", cAlternateFileName="")) returned 1 [0291.718] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0291.718] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212828 [0291.718] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0291.718] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212828 | out: hHeap=0x1f0000) returned 1 [0291.718] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0291.718] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0291.718] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01627_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01627_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0291.718] GetFileType (hFile=0x1c0) returned 0x1 [0291.719] CloseHandle (hObject=0x1c0) returned 1 [0291.719] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0291.719] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01627_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01627_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xce0)) returned 1 [0291.719] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0291.719] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0291.719] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01627_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01627_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xce0)) returned 1 [0291.720] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0291.720] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0291.720] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0291.720] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf61cf5d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf61cf5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf61cf5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb9e, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA01680_.WMF", cAlternateFileName="")) returned 1 [0291.720] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0291.720] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212718 [0291.720] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0291.720] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212718 | out: hHeap=0x1f0000) returned 1 [0291.720] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0291.720] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0291.720] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01680_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01680_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0291.721] GetFileType (hFile=0x1c0) returned 0x1 [0291.721] CloseHandle (hObject=0x1c0) returned 1 [0291.721] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0291.721] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01680_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01680_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf61cf5d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf61cf5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf61cf5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb9e)) returned 1 [0291.721] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0291.722] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0291.722] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01680_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01680_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf61cf5d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf61cf5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf61cf5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb9e)) returned 1 [0291.722] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0291.722] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0291.722] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0291.722] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf61cf5d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf61cf5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf61cf5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc88, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA01682_.WMF", cAlternateFileName="")) returned 1 [0291.722] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260888 [0291.722] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212828 [0291.722] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0291.722] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212828 | out: hHeap=0x1f0000) returned 1 [0291.722] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0291.722] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0291.723] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01682_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01682_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0291.723] GetFileType (hFile=0x1c0) returned 0x1 [0291.723] CloseHandle (hObject=0x1c0) returned 1 [0291.724] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0291.724] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01682_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01682_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf61cf5d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf61cf5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf61cf5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc88)) returned 1 [0291.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0291.724] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0291.724] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01682_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01682_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf61cf5d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf61cf5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf61cf5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc88)) returned 1 [0291.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0291.724] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0291.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0291.725] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5f6d6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5f6d6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf61cf5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14c4, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA01701_.WMF", cAlternateFileName="")) returned 1 [0291.725] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260770 [0291.725] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d00 [0291.725] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0291.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d00 | out: hHeap=0x1f0000) returned 1 [0291.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0291.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0291.726] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01701_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01701_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0291.726] GetFileType (hFile=0x1c0) returned 0x1 [0291.726] CloseHandle (hObject=0x1c0) returned 1 [0291.727] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0291.727] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01701_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01701_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5f6d6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5f6d6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf61cf5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14c4)) returned 1 [0291.727] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0291.727] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0291.727] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01701_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01701_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5f6d6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5f6d6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf61cf5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14c4)) returned 1 [0291.727] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0291.727] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0291.728] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0291.728] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5f6d6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5f6d6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5f6d6e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x460, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA01848_.WMF", cAlternateFileName="")) returned 1 [0291.728] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0291.728] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211ae0 [0291.728] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0291.728] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211ae0 | out: hHeap=0x1f0000) returned 1 [0291.728] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0291.728] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0291.729] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01848_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01848_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0291.729] GetFileType (hFile=0x1c0) returned 0x1 [0291.730] CloseHandle (hObject=0x1c0) returned 1 [0291.730] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0291.730] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01848_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01848_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5f6d6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5f6d6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5f6d6e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x460)) returned 1 [0291.731] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0291.731] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0291.731] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01848_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01848_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5f6d6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5f6d6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5f6d6e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x460)) returned 1 [0291.731] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0291.731] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0291.731] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0291.731] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf61cf5d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf61cf5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf61cf5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x270, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA01849_.WMF", cAlternateFileName="")) returned 1 [0291.731] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0291.731] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d00 [0291.732] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0291.732] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d00 | out: hHeap=0x1f0000) returned 1 [0291.732] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0291.732] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0291.732] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01849_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01849_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0291.733] GetFileType (hFile=0x1c0) returned 0x1 [0291.733] CloseHandle (hObject=0x1c0) returned 1 [0291.733] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0291.733] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01849_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01849_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf61cf5d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf61cf5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf61cf5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x270)) returned 1 [0291.734] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0291.734] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0291.734] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01849_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01849_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf61cf5d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf61cf5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf61cf5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x270)) returned 1 [0291.734] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0291.734] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0291.734] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0291.734] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5f6d6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5f6d6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf61cf5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1138, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA01852_.WMF", cAlternateFileName="")) returned 1 [0291.734] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0291.735] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212608 [0291.735] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0291.735] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212608 | out: hHeap=0x1f0000) returned 1 [0291.735] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0291.735] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0291.736] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01852_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01852_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0291.737] GetFileType (hFile=0x1c0) returned 0x1 [0291.737] CloseHandle (hObject=0x1c0) returned 1 [0291.738] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0291.738] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01852_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01852_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5f6d6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5f6d6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf61cf5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1138)) returned 1 [0291.738] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0291.738] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0291.738] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01852_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01852_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5f6d6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5f6d6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf61cf5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1138)) returned 1 [0291.738] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0291.738] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0291.739] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0291.739] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5f6d6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5f6d6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf61cf5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10c8, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA01858_.WMF", cAlternateFileName="")) returned 1 [0291.739] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0291.739] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211b68 [0291.739] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0291.739] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b68 | out: hHeap=0x1f0000) returned 1 [0291.739] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0291.739] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0291.740] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01858_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01858_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0291.741] GetFileType (hFile=0x1c0) returned 0x1 [0291.741] CloseHandle (hObject=0x1c0) returned 1 [0291.741] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0291.741] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01858_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01858_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5f6d6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5f6d6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf61cf5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10c8)) returned 1 [0291.742] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0291.742] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0291.742] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01858_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01858_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5f6d6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5f6d6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf61cf5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10c8)) returned 1 [0291.742] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0291.742] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0291.742] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0291.742] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5f6d6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5f6d6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5f6d6e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdb8, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA01866_.WMF", cAlternateFileName="")) returned 1 [0291.742] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0291.743] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211f20 [0291.743] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0291.743] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211f20 | out: hHeap=0x1f0000) returned 1 [0291.743] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0291.743] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0291.744] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01866_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01866_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0291.744] GetFileType (hFile=0x1c0) returned 0x1 [0292.058] CloseHandle (hObject=0x1c0) returned 1 [0292.058] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0292.059] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01866_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01866_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5f6d6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5f6d6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5f6d6e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdb8)) returned 1 [0292.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0292.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0292.059] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01866_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01866_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5f6d6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5f6d6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5f6d6e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdb8)) returned 1 [0292.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0292.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0292.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0292.059] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5f6d6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5f6d6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf61cf5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27e0, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA02009_.WMF", cAlternateFileName="")) returned 1 [0292.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0292.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211bf0 [0292.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0292.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211bf0 | out: hHeap=0x1f0000) returned 1 [0292.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0292.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0292.060] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02009_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02009_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0292.060] GetFileType (hFile=0x1c0) returned 0x1 [0292.061] CloseHandle (hObject=0x1c0) returned 1 [0292.061] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0292.061] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02009_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02009_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5f6d6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5f6d6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf61cf5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27e0)) returned 1 [0292.061] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0292.061] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0292.061] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02009_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02009_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5f6d6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5f6d6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf61cf5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27e0)) returned 1 [0292.062] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0292.062] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0292.062] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0292.062] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf68f613, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf68f613, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf68f613, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x918, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA02041_.WMF", cAlternateFileName="")) returned 1 [0292.062] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0292.062] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212828 [0292.062] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0292.062] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212828 | out: hHeap=0x1f0000) returned 1 [0292.062] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0292.062] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0292.063] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02041_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02041_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0292.063] GetFileType (hFile=0x1c0) returned 0x1 [0292.063] CloseHandle (hObject=0x1c0) returned 1 [0292.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0292.064] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02041_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02041_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf68f613, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf68f613, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf68f613, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x918)) returned 1 [0292.064] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0292.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0292.064] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02041_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02041_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf68f613, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf68f613, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf68f613, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x918)) returned 1 [0292.064] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0292.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0292.064] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0292.065] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf68f613, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf68f613, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf68f613, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA02066_.WMF", cAlternateFileName="")) returned 1 [0292.065] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0292.065] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211e10 [0292.065] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0292.065] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e10 | out: hHeap=0x1f0000) returned 1 [0292.065] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0292.065] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0292.066] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02066_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02066_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0292.074] GetFileType (hFile=0x1c0) returned 0x1 [0292.074] CloseHandle (hObject=0x1c0) returned 1 [0292.074] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0292.075] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02066_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02066_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf68f613, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf68f613, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf68f613, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43c)) returned 1 [0292.075] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0292.075] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0292.075] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02066_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02066_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf68f613, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf68f613, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf68f613, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43c)) returned 1 [0292.075] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0292.075] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0292.075] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0292.075] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf66941e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf66941e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf66941e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x474, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA02091_.WMF", cAlternateFileName="")) returned 1 [0292.075] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0292.075] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211948 [0292.076] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0292.076] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211948 | out: hHeap=0x1f0000) returned 1 [0292.076] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0292.076] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0292.149] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02091_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02091_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0292.152] GetFileType (hFile=0x1c0) returned 0x1 [0292.153] CloseHandle (hObject=0x1c0) returned 1 [0292.154] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0292.154] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02091_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02091_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf66941e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf66941e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf66941e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x474)) returned 1 [0292.156] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0292.156] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0292.156] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02091_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02091_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf66941e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf66941e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf66941e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x474)) returned 1 [0292.157] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0292.157] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0292.157] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0292.157] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf66941e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf66941e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf66941e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x66c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA02092_.WMF", cAlternateFileName="")) returned 1 [0292.157] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0292.157] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2127a0 [0292.158] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0292.158] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2127a0 | out: hHeap=0x1f0000) returned 1 [0292.158] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0292.158] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0292.159] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02092_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02092_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0292.160] GetFileType (hFile=0x1c0) returned 0x1 [0292.160] CloseHandle (hObject=0x1c0) returned 1 [0292.161] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0292.162] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02092_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02092_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf66941e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf66941e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf66941e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x66c)) returned 1 [0292.162] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0292.162] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0292.162] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02092_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02092_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf66941e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf66941e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf66941e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x66c)) returned 1 [0292.162] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0292.162] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0292.162] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0292.163] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf643165, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf643165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf643165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a0, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA02093_.WMF", cAlternateFileName="")) returned 1 [0292.163] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260888 [0292.163] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211fa8 [0292.163] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0292.163] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211fa8 | out: hHeap=0x1f0000) returned 1 [0292.163] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0292.163] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0292.164] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02093_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02093_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0292.166] GetFileType (hFile=0x1c0) returned 0x1 [0292.166] CloseHandle (hObject=0x1c0) returned 1 [0292.167] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0292.167] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02093_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02093_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf643165, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf643165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf643165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a0)) returned 1 [0292.167] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0292.167] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0292.168] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02093_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02093_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf643165, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf643165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf643165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a0)) returned 1 [0292.168] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0292.168] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0292.168] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0292.168] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf61cf5d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf61cf5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf61cf5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fe8, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA02124_.WMF", cAlternateFileName="")) returned 1 [0292.168] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0292.168] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211948 [0292.169] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0292.169] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211948 | out: hHeap=0x1f0000) returned 1 [0292.169] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0292.169] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0292.170] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02124_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02124_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0292.171] GetFileType (hFile=0x1c0) returned 0x1 [0292.171] CloseHandle (hObject=0x1c0) returned 1 [0292.172] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0292.172] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02124_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02124_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf61cf5d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf61cf5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf61cf5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fe8)) returned 1 [0292.172] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0292.172] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0292.172] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02124_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02124_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf61cf5d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf61cf5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf61cf5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fe8)) returned 1 [0292.173] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0292.173] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0292.173] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0292.173] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf643165, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf643165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf643165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4816, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA02125_.WMF", cAlternateFileName="")) returned 1 [0292.173] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0292.173] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211b68 [0292.173] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0292.174] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b68 | out: hHeap=0x1f0000) returned 1 [0292.174] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0292.174] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0292.175] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02125_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02125_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0292.175] GetFileType (hFile=0x1c0) returned 0x1 [0292.176] CloseHandle (hObject=0x1c0) returned 1 [0292.176] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0292.176] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02125_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02125_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf643165, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf643165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf643165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4816)) returned 1 [0292.177] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0292.177] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0292.177] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02125_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02125_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf643165, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf643165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf643165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4816)) returned 1 [0292.177] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0292.177] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0292.177] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0292.178] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7c50, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA02126_.WMF", cAlternateFileName="")) returned 1 [0292.178] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0292.178] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2127a0 [0292.178] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0292.178] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2127a0 | out: hHeap=0x1f0000) returned 1 [0292.178] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0292.178] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0292.179] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02126_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02126_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0292.189] GetFileType (hFile=0x1c0) returned 0x1 [0292.190] CloseHandle (hObject=0x1c0) returned 1 [0292.190] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0292.190] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02126_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02126_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7c50)) returned 1 [0292.191] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0292.191] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0292.191] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02126_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02126_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7c50)) returned 1 [0292.191] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0292.191] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0292.191] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0292.191] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf61cf5d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf61cf5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf61cf5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfe4, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA02127_.WMF", cAlternateFileName="")) returned 1 [0292.192] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0292.192] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211ae0 [0292.192] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0292.192] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211ae0 | out: hHeap=0x1f0000) returned 1 [0292.192] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0292.192] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0292.193] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02127_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02127_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0292.194] GetFileType (hFile=0x1c0) returned 0x1 [0292.194] CloseHandle (hObject=0x1c0) returned 1 [0292.195] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0292.195] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02127_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02127_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf61cf5d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf61cf5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf61cf5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfe4)) returned 1 [0292.195] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0292.195] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0292.195] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02127_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02127_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf61cf5d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf61cf5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf61cf5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfe4)) returned 1 [0292.196] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0292.478] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0292.478] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0292.478] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf61cf5d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf61cf5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf61cf5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd00, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA02262_.WMF", cAlternateFileName="")) returned 1 [0292.478] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0292.478] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211b68 [0292.478] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0292.478] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b68 | out: hHeap=0x1f0000) returned 1 [0292.478] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0292.478] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0292.479] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02262_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02262_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0292.479] GetFileType (hFile=0x1e0) returned 0x1 [0292.480] CloseHandle (hObject=0x1e0) returned 1 [0292.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0292.480] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02262_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02262_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf61cf5d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf61cf5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf61cf5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd00)) returned 1 [0292.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0292.481] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0292.481] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02262_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02262_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf61cf5d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf61cf5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf61cf5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd00)) returned 1 [0292.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0292.481] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0292.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0292.481] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x100fdad1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x100fdad1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x100fdad1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8e0, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA02264_.WMF", cAlternateFileName="")) returned 1 [0292.481] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0292.481] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212470 [0292.481] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0292.482] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212470 | out: hHeap=0x1f0000) returned 1 [0292.482] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0292.482] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0292.482] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02264_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02264_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0292.482] GetFileType (hFile=0x1e0) returned 0x1 [0292.483] CloseHandle (hObject=0x1e0) returned 1 [0292.489] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0292.489] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02264_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02264_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x100fdad1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x100fdad1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x100fdad1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8e0)) returned 1 [0292.489] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0292.489] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0292.489] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02264_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02264_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x100fdad1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x100fdad1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x100fdad1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8e0)) returned 1 [0292.490] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0292.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0292.490] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0292.490] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe14, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA02356_.WMF", cAlternateFileName="")) returned 1 [0292.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0292.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211e98 [0292.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0292.490] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e98 | out: hHeap=0x1f0000) returned 1 [0292.490] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0292.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0292.491] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02356_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02356_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0292.493] GetFileType (hFile=0x1e0) returned 0x1 [0292.494] CloseHandle (hObject=0x1e0) returned 1 [0292.494] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0292.494] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02356_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02356_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe14)) returned 1 [0292.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0292.495] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0292.495] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02356_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02356_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe14)) returned 1 [0292.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0292.495] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0292.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0292.495] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17c4, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA02361_.WMF", cAlternateFileName="")) returned 1 [0292.495] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260518 [0292.495] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211fa8 [0292.496] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0292.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211fa8 | out: hHeap=0x1f0000) returned 1 [0292.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0292.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0292.497] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02361_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02361_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0292.498] GetFileType (hFile=0x1e0) returned 0x1 [0292.498] CloseHandle (hObject=0x1e0) returned 1 [0292.498] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0292.499] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02361_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02361_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17c4)) returned 1 [0292.499] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0292.499] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0292.499] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02361_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02361_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17c4)) returned 1 [0292.499] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0292.499] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0292.499] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0292.500] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd28, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA02368_.WMF", cAlternateFileName="")) returned 1 [0292.500] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0292.500] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212938 [0292.500] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0292.500] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212938 | out: hHeap=0x1f0000) returned 1 [0292.500] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0292.500] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0292.501] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02368_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02368_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0292.502] GetFileType (hFile=0x1e0) returned 0x1 [0292.502] CloseHandle (hObject=0x1e0) returned 1 [0292.502] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0292.503] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02368_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02368_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd28)) returned 1 [0292.503] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0292.503] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0292.503] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02368_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02368_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd28)) returned 1 [0292.503] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0292.503] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0292.503] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0292.503] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf68f613, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf68f613, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc74, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA02371_.WMF", cAlternateFileName="")) returned 1 [0292.504] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0292.504] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212608 [0292.504] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0292.504] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212608 | out: hHeap=0x1f0000) returned 1 [0292.504] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0292.504] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0292.504] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02371_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02371_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0292.505] GetFileType (hFile=0x1e0) returned 0x1 [0292.506] CloseHandle (hObject=0x1e0) returned 1 [0292.506] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0292.506] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02371_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02371_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf68f613, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf68f613, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc74)) returned 1 [0292.506] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0292.506] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0292.506] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02371_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02371_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf68f613, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf68f613, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc74)) returned 1 [0292.507] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0292.507] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0292.507] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0292.507] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf68f613, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf68f613, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf68f613, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcec, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA02373_.WMF", cAlternateFileName="")) returned 1 [0292.507] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0292.507] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211fa8 [0292.507] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0292.507] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211fa8 | out: hHeap=0x1f0000) returned 1 [0292.507] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0292.507] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0292.508] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02373_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02373_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0292.510] GetFileType (hFile=0x1e0) returned 0x1 [0292.510] CloseHandle (hObject=0x1e0) returned 1 [0292.510] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0292.511] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02373_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02373_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf68f613, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf68f613, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf68f613, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcec)) returned 1 [0292.511] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0292.511] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0292.511] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02373_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02373_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf68f613, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf68f613, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf68f613, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcec)) returned 1 [0292.511] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0292.511] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0292.511] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0292.511] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbd8, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA02384_.WMF", cAlternateFileName="")) returned 1 [0292.511] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0292.511] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0292.512] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0292.512] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0292.512] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0292.512] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0292.512] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02384_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02384_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0292.513] GetFileType (hFile=0x1e0) returned 0x1 [0292.513] CloseHandle (hObject=0x1e0) returned 1 [0292.513] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0292.513] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02384_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02384_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbd8)) returned 1 [0292.514] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0292.514] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0292.514] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02384_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02384_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbd8)) returned 1 [0292.514] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0292.514] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0292.514] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0292.514] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf68f613, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf68f613, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf68f613, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x948, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA02386_.WMF", cAlternateFileName="")) returned 1 [0292.514] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0292.514] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211f20 [0292.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0292.515] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211f20 | out: hHeap=0x1f0000) returned 1 [0292.515] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0292.515] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0292.515] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02386_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02386_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0292.516] GetFileType (hFile=0x1e0) returned 0x1 [0292.516] CloseHandle (hObject=0x1e0) returned 1 [0292.516] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0292.516] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02386_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02386_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf68f613, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf68f613, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf68f613, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x948)) returned 1 [0292.516] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0292.517] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0292.517] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02386_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02386_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf68f613, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf68f613, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf68f613, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x948)) returned 1 [0292.517] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0292.517] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0292.517] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0292.517] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc84, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA02388_.WMF", cAlternateFileName="")) returned 1 [0292.547] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0292.551] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d88 [0292.552] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0292.552] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d88 | out: hHeap=0x1f0000) returned 1 [0292.552] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0292.552] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0292.552] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02388_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02388_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0292.553] GetFileType (hFile=0x1e0) returned 0x1 [0292.553] CloseHandle (hObject=0x1e0) returned 1 [0292.553] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0292.554] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02388_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02388_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc84)) returned 1 [0292.554] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0292.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0292.554] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02388_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02388_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc84)) returned 1 [0292.554] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0292.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0292.554] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0292.555] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf68f613, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf68f613, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf68f613, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb2c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA02389_.WMF", cAlternateFileName="")) returned 1 [0292.555] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0292.555] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211fa8 [0292.555] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0292.555] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211fa8 | out: hHeap=0x1f0000) returned 1 [0292.556] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0292.556] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0292.556] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02389_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02389_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0292.557] GetFileType (hFile=0x1e0) returned 0x1 [0292.557] CloseHandle (hObject=0x1e0) returned 1 [0292.558] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0292.558] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02389_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02389_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf68f613, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf68f613, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf68f613, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb2c)) returned 1 [0292.558] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0292.558] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0292.558] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02389_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02389_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf68f613, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf68f613, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf68f613, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb2c)) returned 1 [0292.558] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0292.559] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0292.559] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0292.559] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe64, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA02390_.WMF", cAlternateFileName="")) returned 1 [0292.559] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609a0 [0292.559] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212828 [0292.559] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0292.559] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212828 | out: hHeap=0x1f0000) returned 1 [0292.559] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0292.560] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0292.560] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02390_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02390_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0292.560] GetFileType (hFile=0x1e0) returned 0x1 [0292.561] CloseHandle (hObject=0x1e0) returned 1 [0292.561] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0292.561] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02390_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02390_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe64)) returned 1 [0292.562] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0292.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0292.562] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02390_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02390_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe64)) returned 1 [0292.562] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0292.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0292.562] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0292.562] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e98, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA02398_.WMF", cAlternateFileName="")) returned 1 [0292.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0292.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211f20 [0292.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0292.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211f20 | out: hHeap=0x1f0000) returned 1 [0292.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0292.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0292.564] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02398_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02398_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0292.750] GetFileType (hFile=0x1c0) returned 0x1 [0292.750] CloseHandle (hObject=0x1c0) returned 1 [0292.751] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0292.751] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02398_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02398_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e98)) returned 1 [0292.751] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0292.751] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0292.751] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02398_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02398_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e98)) returned 1 [0292.751] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0292.751] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0292.751] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0292.752] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd24, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA02400_.WMF", cAlternateFileName="")) returned 1 [0292.752] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0292.752] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211948 [0292.752] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0292.752] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211948 | out: hHeap=0x1f0000) returned 1 [0292.752] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0292.752] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0293.040] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02400_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02400_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0293.040] GetFileType (hFile=0x1c0) returned 0x1 [0293.040] CloseHandle (hObject=0x1c0) returned 1 [0293.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0293.041] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02400_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02400_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd24)) returned 1 [0293.041] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0293.041] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0293.041] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02400_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02400_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd24)) returned 1 [0293.041] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0293.043] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0293.043] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0293.043] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2120, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA02404_.WMF", cAlternateFileName="")) returned 1 [0293.043] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0293.043] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d88 [0293.043] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0293.043] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d88 | out: hHeap=0x1f0000) returned 1 [0293.043] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0293.044] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0293.045] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02404_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02404_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0293.046] GetFileType (hFile=0x1c0) returned 0x1 [0293.046] CloseHandle (hObject=0x1c0) returned 1 [0293.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0293.048] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02404_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02404_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2120)) returned 1 [0293.049] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0293.049] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0293.049] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02404_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02404_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2120)) returned 1 [0293.054] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0293.054] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0293.054] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0293.055] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5080, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA02405_.WMF", cAlternateFileName="")) returned 1 [0293.055] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0293.055] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2123e8 [0293.055] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0293.055] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2123e8 | out: hHeap=0x1f0000) returned 1 [0293.055] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0293.055] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0293.056] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02405_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02405_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0293.056] GetFileType (hFile=0x1c0) returned 0x1 [0293.057] CloseHandle (hObject=0x1c0) returned 1 [0293.057] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0293.058] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02405_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02405_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5080)) returned 1 [0293.058] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0293.058] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0293.058] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02405_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02405_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5080)) returned 1 [0293.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0293.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0293.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0293.059] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fc8, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA02407_.WMF", cAlternateFileName="")) returned 1 [0293.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0293.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212828 [0293.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0293.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212828 | out: hHeap=0x1f0000) returned 1 [0293.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0293.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0293.060] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02407_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02407_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0293.061] GetFileType (hFile=0x1c0) returned 0x1 [0293.062] CloseHandle (hObject=0x1c0) returned 1 [0293.062] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0293.063] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02407_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02407_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fc8)) returned 1 [0293.063] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0293.063] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0293.063] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02407_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02407_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fc8)) returned 1 [0293.071] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0293.071] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0293.071] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0293.071] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x28ec, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA02413_.WMF", cAlternateFileName="")) returned 1 [0293.071] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260518 [0293.071] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0293.071] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0293.071] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0293.071] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0293.071] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0293.072] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02413_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02413_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0293.072] GetFileType (hFile=0x1c0) returned 0x1 [0293.072] CloseHandle (hObject=0x1c0) returned 1 [0293.072] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0293.072] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02413_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02413_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x28ec)) returned 1 [0293.073] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0293.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0293.073] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02413_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02413_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x28ec)) returned 1 [0293.073] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0293.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0293.073] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0293.073] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb24, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA02417_.WMF", cAlternateFileName="")) returned 1 [0293.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0293.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212140 [0293.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0293.074] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212140 | out: hHeap=0x1f0000) returned 1 [0293.074] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0293.074] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0293.075] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02417_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02417_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0293.075] GetFileType (hFile=0x1c0) returned 0x1 [0293.075] CloseHandle (hObject=0x1c0) returned 1 [0293.076] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0293.076] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02417_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02417_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb24)) returned 1 [0293.076] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0293.076] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0293.076] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02417_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02417_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb24)) returned 1 [0293.076] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0293.076] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0293.076] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0293.076] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2fb8, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA02423_.WMF", cAlternateFileName="")) returned 1 [0293.077] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260770 [0293.077] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2127a0 [0293.077] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0293.077] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2127a0 | out: hHeap=0x1f0000) returned 1 [0293.077] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0293.077] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0293.078] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02423_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02423_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0293.079] GetFileType (hFile=0x1c0) returned 0x1 [0293.079] CloseHandle (hObject=0x1c0) returned 1 [0293.080] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0293.080] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02423_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02423_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2fb8)) returned 1 [0293.081] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0293.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0293.081] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02423_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02423_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2fb8)) returned 1 [0293.088] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0293.088] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0293.088] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0293.089] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x53c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA02424_.WMF", cAlternateFileName="")) returned 1 [0293.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0293.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d00 [0293.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0293.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d00 | out: hHeap=0x1f0000) returned 1 [0293.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0293.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0293.092] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02424_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02424_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0293.092] GetFileType (hFile=0x1c0) returned 0x1 [0293.093] CloseHandle (hObject=0x1c0) returned 1 [0293.094] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0293.094] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02424_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02424_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x53c)) returned 1 [0293.094] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0293.094] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0293.095] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02424_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02424_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x53c)) returned 1 [0293.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0293.095] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0293.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0293.096] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1948, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA02426_.WMF", cAlternateFileName="")) returned 1 [0293.096] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0293.096] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212938 [0293.096] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0293.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212938 | out: hHeap=0x1f0000) returned 1 [0293.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0293.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0293.097] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02426_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02426_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0293.098] GetFileType (hFile=0x1c0) returned 0x1 [0293.099] CloseHandle (hObject=0x1c0) returned 1 [0293.352] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0293.352] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02426_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02426_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1948)) returned 1 [0293.637] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0293.637] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0293.637] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02426_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02426_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1948)) returned 1 [0293.638] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0293.638] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0293.638] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0293.638] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c2c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA02431_.WMF", cAlternateFileName="")) returned 1 [0293.638] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0293.638] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0293.638] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0293.638] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0293.638] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0293.638] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0293.639] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02431_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02431_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0293.639] GetFileType (hFile=0x198) returned 0x1 [0293.640] CloseHandle (hObject=0x198) returned 1 [0293.640] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0293.640] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02431_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02431_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c2c)) returned 1 [0293.640] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0293.640] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0293.640] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02431_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02431_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c2c)) returned 1 [0293.640] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0293.640] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0293.641] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0293.641] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xff8, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA02435_.WMF", cAlternateFileName="")) returned 1 [0293.641] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609a0 [0293.641] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211b68 [0293.641] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0293.641] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b68 | out: hHeap=0x1f0000) returned 1 [0293.641] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0293.641] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0293.642] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02435_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02435_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0293.642] GetFileType (hFile=0x198) returned 0x1 [0293.642] CloseHandle (hObject=0x198) returned 1 [0293.643] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0293.643] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02435_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02435_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xff8)) returned 1 [0293.643] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0293.643] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0293.643] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02435_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02435_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xff8)) returned 1 [0293.643] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0293.643] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0293.643] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0293.643] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1434, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA02439_.WMF", cAlternateFileName="")) returned 1 [0293.644] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609a0 [0293.644] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212030 [0293.644] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0293.644] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212030 | out: hHeap=0x1f0000) returned 1 [0293.644] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0293.644] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0293.645] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02439_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02439_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0293.645] GetFileType (hFile=0x198) returned 0x1 [0293.645] CloseHandle (hObject=0x198) returned 1 [0293.645] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0293.646] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02439_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02439_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1434)) returned 1 [0293.646] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0293.646] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0293.646] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02439_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02439_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1434)) returned 1 [0293.646] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0293.646] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0293.646] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0293.646] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3218, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA02441_.WMF", cAlternateFileName="")) returned 1 [0293.646] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0293.647] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211f20 [0293.647] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0293.647] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211f20 | out: hHeap=0x1f0000) returned 1 [0293.647] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0293.647] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0293.647] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02441_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02441_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0293.648] GetFileType (hFile=0x198) returned 0x1 [0293.648] CloseHandle (hObject=0x198) returned 1 [0293.648] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0293.648] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02441_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02441_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3218)) returned 1 [0293.648] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0293.648] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0293.648] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02441_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02441_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3218)) returned 1 [0293.649] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0293.649] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0293.649] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0293.649] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x55c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA02443_.WMF", cAlternateFileName="")) returned 1 [0293.649] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260518 [0293.649] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0293.649] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0293.649] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0293.649] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0293.649] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0293.650] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02443_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02443_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0293.650] GetFileType (hFile=0x198) returned 0x1 [0293.650] CloseHandle (hObject=0x198) returned 1 [0293.651] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0293.651] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02443_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02443_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x55c)) returned 1 [0293.651] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0293.651] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0293.651] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02443_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02443_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x55c)) returned 1 [0293.651] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0293.651] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0293.651] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0293.652] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x88c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA02444_.WMF", cAlternateFileName="")) returned 1 [0293.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605b8 [0293.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2120b8 [0293.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0293.652] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2120b8 | out: hHeap=0x1f0000) returned 1 [0293.653] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0293.653] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0293.653] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02444_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02444_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0293.654] GetFileType (hFile=0x198) returned 0x1 [0293.654] CloseHandle (hObject=0x198) returned 1 [0293.654] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0293.654] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02444_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02444_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x88c)) returned 1 [0293.655] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0293.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0293.655] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02444_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02444_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x88c)) returned 1 [0293.655] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0293.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0293.655] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0293.655] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa34, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA02446_.WMF", cAlternateFileName="")) returned 1 [0293.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0293.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211a58 [0293.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0293.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211a58 | out: hHeap=0x1f0000) returned 1 [0293.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0293.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0293.656] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02446_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02446_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0293.656] GetFileType (hFile=0x198) returned 0x1 [0293.657] CloseHandle (hObject=0x198) returned 1 [0293.657] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0293.657] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02446_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02446_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa34)) returned 1 [0293.657] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0293.657] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0293.657] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02446_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02446_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa34)) returned 1 [0293.658] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0293.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0293.658] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0293.658] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8a0, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA02448_.WMF", cAlternateFileName="")) returned 1 [0293.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0293.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212828 [0293.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0293.658] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212828 | out: hHeap=0x1f0000) returned 1 [0293.658] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0293.658] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0293.659] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02448_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02448_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0293.659] GetFileType (hFile=0x198) returned 0x1 [0293.659] CloseHandle (hObject=0x198) returned 1 [0293.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0293.660] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02448_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02448_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8a0)) returned 1 [0293.660] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0293.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0293.660] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02448_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02448_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8a0)) returned 1 [0293.660] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0293.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0293.660] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0293.660] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc28, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA02450_.WMF", cAlternateFileName="")) returned 1 [0293.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0293.661] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212470 [0293.661] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0293.661] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212470 | out: hHeap=0x1f0000) returned 1 [0293.661] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0293.661] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0293.661] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02450_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02450_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0293.662] GetFileType (hFile=0x198) returned 0x1 [0293.662] CloseHandle (hObject=0x198) returned 1 [0293.662] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0293.662] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02450_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02450_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc28)) returned 1 [0293.662] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0293.663] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0293.663] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02450_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02450_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc28)) returned 1 [0293.663] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0293.663] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0293.663] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0293.663] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf74e1ae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf74e1ae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf74e1ae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd70, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA02451_.WMF", cAlternateFileName="")) returned 1 [0293.663] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0293.663] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2128b0 [0293.663] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0293.663] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2128b0 | out: hHeap=0x1f0000) returned 1 [0293.663] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0293.664] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0293.664] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02451_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02451_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0293.664] GetFileType (hFile=0x198) returned 0x1 [0293.664] CloseHandle (hObject=0x198) returned 1 [0293.665] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0293.665] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02451_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02451_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf74e1ae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf74e1ae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf74e1ae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd70)) returned 1 [0293.665] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0293.665] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0293.665] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02451_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02451_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf74e1ae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf74e1ae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf74e1ae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd70)) returned 1 [0293.665] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0293.666] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0293.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0293.666] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf701d25, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf701d25, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf701d25, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd3c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NA02453_.WMF", cAlternateFileName="")) returned 1 [0293.666] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260518 [0293.666] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212718 [0293.666] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0293.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212718 | out: hHeap=0x1f0000) returned 1 [0293.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0293.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0293.667] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02453_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02453_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0293.667] GetFileType (hFile=0x198) returned 0x1 [0293.668] CloseHandle (hObject=0x198) returned 1 [0293.668] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0293.668] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02453_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02453_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf701d25, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf701d25, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf701d25, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd3c)) returned 1 [0293.669] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0293.669] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0293.669] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02453_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02453_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf701d25, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf701d25, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf701d25, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd3c)) returned 1 [0293.669] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0293.669] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0293.669] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0293.669] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf701d25, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf701d25, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf701d25, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1750, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="NBOOK_01.MID", cAlternateFileName="")) returned 1 [0293.669] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0293.669] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211ae0 [0293.669] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0293.670] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211ae0 | out: hHeap=0x1f0000) returned 1 [0293.670] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0293.670] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0293.670] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NBOOK_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\nbook_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0293.939] GetFileType (hFile=0x1b0) returned 0x1 [0293.939] CloseHandle (hObject=0x1b0) returned 1 [0293.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0293.940] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NBOOK_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\nbook_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf701d25, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf701d25, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf701d25, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1750)) returned 1 [0293.940] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0293.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0293.941] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NBOOK_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\nbook_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf701d25, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf701d25, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf701d25, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1750)) returned 1 [0293.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0293.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0293.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0293.941] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf701d25, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1540, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="OCEAN_01.MID", cAlternateFileName="")) returned 1 [0293.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0293.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2129c0 [0293.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0293.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2129c0 | out: hHeap=0x1f0000) returned 1 [0293.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0293.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0293.943] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OCEAN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ocean_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0293.944] GetFileType (hFile=0x1b0) returned 0x1 [0293.944] CloseHandle (hObject=0x1b0) returned 1 [0293.944] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0293.945] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OCEAN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ocean_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf701d25, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1540)) returned 1 [0293.945] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0293.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0293.945] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OCEAN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ocean_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf701d25, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1540)) returned 1 [0293.945] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0293.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0293.946] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0293.946] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19f4, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="OUTDR_01.MID", cAlternateFileName="")) returned 1 [0293.946] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260770 [0293.946] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212250 [0293.946] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0293.946] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212250 | out: hHeap=0x1f0000) returned 1 [0293.946] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0293.946] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0293.947] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OUTDR_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\outdr_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0293.949] GetFileType (hFile=0x1b0) returned 0x1 [0293.950] CloseHandle (hObject=0x1b0) returned 1 [0293.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0293.950] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OUTDR_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\outdr_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19f4)) returned 1 [0293.950] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0293.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0293.950] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OUTDR_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\outdr_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19f4)) returned 1 [0293.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0293.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0293.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0293.951] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a6b, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="PAPER_01.MID", cAlternateFileName="")) returned 1 [0293.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0293.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d00 [0293.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0293.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d00 | out: hHeap=0x1f0000) returned 1 [0293.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0293.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0293.952] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PAPER_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\paper_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0293.954] GetFileType (hFile=0x1b0) returned 0x1 [0293.954] CloseHandle (hObject=0x1b0) returned 1 [0293.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0293.954] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PAPER_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\paper_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a6b)) returned 1 [0293.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0293.955] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0293.955] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PAPER_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\paper_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a6b)) returned 1 [0293.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0293.955] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0293.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0293.955] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x195b, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="PARNT_01.MID", cAlternateFileName="")) returned 1 [0293.955] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0293.955] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2128b0 [0293.955] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0293.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2128b0 | out: hHeap=0x1f0000) returned 1 [0293.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0293.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0293.956] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0293.957] GetFileType (hFile=0x1b0) returned 0x1 [0293.957] CloseHandle (hObject=0x1b0) returned 1 [0293.957] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0293.958] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x195b)) returned 1 [0293.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0293.958] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0293.958] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x195b)) returned 1 [0293.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0293.958] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0293.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0293.958] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1652, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="PARNT_02.MID", cAlternateFileName="")) returned 1 [0293.959] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0293.959] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211c78 [0293.959] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0293.959] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211c78 | out: hHeap=0x1f0000) returned 1 [0293.959] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0293.959] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0293.960] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_02.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_02.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0293.961] GetFileType (hFile=0x1b0) returned 0x1 [0293.962] CloseHandle (hObject=0x1b0) returned 1 [0293.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0293.962] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_02.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_02.mid"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1652)) returned 1 [0293.962] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0293.963] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0293.963] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_02.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_02.mid"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1652)) returned 1 [0293.963] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0293.963] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0293.963] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0293.963] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x215a, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="PARNT_03.MID", cAlternateFileName="")) returned 1 [0293.963] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0293.963] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211f20 [0293.964] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0293.964] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211f20 | out: hHeap=0x1f0000) returned 1 [0293.964] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0293.964] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0293.967] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_03.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_03.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0293.968] GetFileType (hFile=0x1b0) returned 0x1 [0293.968] CloseHandle (hObject=0x1b0) returned 1 [0293.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0293.969] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_03.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_03.mid"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x215a)) returned 1 [0293.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0293.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0293.969] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_03.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_03.mid"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x215a)) returned 1 [0293.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0293.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0293.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0293.970] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17b6, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="PARNT_04.MID", cAlternateFileName="")) returned 1 [0293.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0293.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2119d0 [0293.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0293.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2119d0 | out: hHeap=0x1f0000) returned 1 [0293.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0293.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0293.971] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_04.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_04.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0293.971] GetFileType (hFile=0x1b0) returned 0x1 [0293.972] CloseHandle (hObject=0x1b0) returned 1 [0293.972] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0293.972] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_04.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_04.mid"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17b6)) returned 1 [0293.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0293.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0293.973] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_04.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_04.mid"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17b6)) returned 1 [0293.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0293.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0293.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0293.973] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x100fdad1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x100fdad1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10149fbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1784, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="PARNT_05.MID", cAlternateFileName="")) returned 1 [0293.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0293.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d00 [0293.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0293.974] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d00 | out: hHeap=0x1f0000) returned 1 [0293.974] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0293.974] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0293.974] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_05.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_05.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0294.330] GetFileType (hFile=0x1c0) returned 0x1 [0294.330] CloseHandle (hObject=0x1c0) returned 1 [0294.331] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0294.331] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_05.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_05.mid"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x100fdad1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x100fdad1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10149fbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1784)) returned 1 [0294.331] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0294.331] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0294.331] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_05.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_05.mid"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x100fdad1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x100fdad1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10149fbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1784)) returned 1 [0294.331] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0294.332] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0294.332] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0294.332] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x100fdad1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x100fdad1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e58, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="PARNT_06.MID", cAlternateFileName="")) returned 1 [0294.332] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0294.332] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2129c0 [0294.332] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0294.332] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2129c0 | out: hHeap=0x1f0000) returned 1 [0294.332] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0294.332] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0294.332] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_06.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_06.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0294.333] GetFileType (hFile=0x1c0) returned 0x1 [0294.333] CloseHandle (hObject=0x1c0) returned 1 [0294.333] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0294.333] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_06.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_06.mid"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x100fdad1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x100fdad1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e58)) returned 1 [0294.333] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0294.334] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0294.334] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_06.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_06.mid"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x100fdad1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x100fdad1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e58)) returned 1 [0294.334] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0294.334] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0294.334] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0294.334] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x100fdad1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x100fdad1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19a4, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="PARNT_07.MID", cAlternateFileName="")) returned 1 [0294.334] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0294.334] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212828 [0294.334] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0294.334] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212828 | out: hHeap=0x1f0000) returned 1 [0294.335] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0294.335] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0294.335] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_07.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_07.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0294.335] GetFileType (hFile=0x1c0) returned 0x1 [0294.335] CloseHandle (hObject=0x1c0) returned 1 [0294.336] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0294.336] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_07.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_07.mid"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x100fdad1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x100fdad1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19a4)) returned 1 [0294.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0294.336] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0294.336] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_07.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_07.mid"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x100fdad1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x100fdad1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19a4)) returned 1 [0294.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0294.336] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0294.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0294.336] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x100fdad1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x100fdad1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x100fdad1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1cb3, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="PARNT_08.MID", cAlternateFileName="")) returned 1 [0294.337] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260888 [0294.337] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211bf0 [0294.337] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0294.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211bf0 | out: hHeap=0x1f0000) returned 1 [0294.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0294.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0294.337] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_08.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_08.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0294.337] GetFileType (hFile=0x1c0) returned 0x1 [0294.338] CloseHandle (hObject=0x1c0) returned 1 [0294.338] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0294.338] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_08.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_08.mid"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x100fdad1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x100fdad1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x100fdad1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1cb3)) returned 1 [0294.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0294.338] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0294.338] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_08.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_08.mid"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x100fdad1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x100fdad1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x100fdad1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1cb3)) returned 1 [0294.339] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0294.339] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0294.339] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0294.339] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x100fdad1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x100fdad1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10149fbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a6c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="PARNT_09.MID", cAlternateFileName="")) returned 1 [0294.339] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0294.339] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212140 [0294.339] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0294.339] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212140 | out: hHeap=0x1f0000) returned 1 [0294.339] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0294.339] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0294.340] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_09.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_09.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0294.340] GetFileType (hFile=0x1c0) returned 0x1 [0294.340] CloseHandle (hObject=0x1c0) returned 1 [0294.340] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0294.340] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_09.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_09.mid"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x100fdad1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x100fdad1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10149fbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a6c)) returned 1 [0294.341] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0294.341] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0294.341] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_09.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_09.mid"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x100fdad1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x100fdad1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10149fbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a6c)) returned 1 [0294.341] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0294.341] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0294.341] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0294.341] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf74e1ae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf74e1ae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x100fdad1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1511, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="PARNT_10.MID", cAlternateFileName="")) returned 1 [0294.341] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0294.341] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212140 [0294.341] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0294.341] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212140 | out: hHeap=0x1f0000) returned 1 [0294.342] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0294.342] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0294.342] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_10.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_10.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0294.342] GetFileType (hFile=0x1c0) returned 0x1 [0294.342] CloseHandle (hObject=0x1c0) returned 1 [0294.343] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0294.343] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_10.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_10.mid"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf74e1ae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf74e1ae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x100fdad1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1511)) returned 1 [0294.343] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0294.343] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0294.343] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_10.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_10.mid"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf74e1ae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf74e1ae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x100fdad1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1511)) returned 1 [0294.343] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0294.343] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0294.343] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0294.343] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x100fdad1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x100fdad1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x100fdad1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6140, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="PE00013_.WMF", cAlternateFileName="")) returned 1 [0294.344] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0294.344] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2120b8 [0294.344] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0294.344] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2120b8 | out: hHeap=0x1f0000) returned 1 [0294.344] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0294.344] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0294.344] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00013_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00013_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0294.345] GetFileType (hFile=0x1c0) returned 0x1 [0294.345] CloseHandle (hObject=0x1c0) returned 1 [0294.346] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0294.346] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00013_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00013_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x100fdad1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x100fdad1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x100fdad1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6140)) returned 1 [0294.346] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0294.346] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0294.347] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00013_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00013_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x100fdad1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x100fdad1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x100fdad1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6140)) returned 1 [0294.347] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0294.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0294.347] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0294.347] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x100fdad1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x100fdad1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x100fdad1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x411a, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="PE00014_.WMF", cAlternateFileName="")) returned 1 [0294.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0294.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212030 [0294.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0294.347] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212030 | out: hHeap=0x1f0000) returned 1 [0294.348] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0294.348] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0294.348] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00014_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00014_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0294.348] GetFileType (hFile=0x1c0) returned 0x1 [0294.349] CloseHandle (hObject=0x1c0) returned 1 [0294.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0294.350] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00014_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00014_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x100fdad1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x100fdad1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x100fdad1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x411a)) returned 1 [0294.350] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0294.350] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0294.350] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00014_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00014_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x100fdad1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x100fdad1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x100fdad1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x411a)) returned 1 [0294.350] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0294.350] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0294.350] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0294.350] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x100fdad1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x100fdad1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x100fdad1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d5c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="PE00034_.WMF", cAlternateFileName="")) returned 1 [0294.351] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0294.351] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211ae0 [0294.351] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0294.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211ae0 | out: hHeap=0x1f0000) returned 1 [0294.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0294.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0294.352] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00034_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00034_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0294.352] GetFileType (hFile=0x1c0) returned 0x1 [0294.353] CloseHandle (hObject=0x1c0) returned 1 [0294.353] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0294.353] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00034_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00034_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x100fdad1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x100fdad1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x100fdad1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d5c)) returned 1 [0294.353] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0294.353] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0294.354] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00034_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00034_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x100fdad1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x100fdad1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x100fdad1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d5c)) returned 1 [0294.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0294.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0294.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0294.354] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1003f0d3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1003f0d3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x100fdad1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="PE00049_.WMF", cAlternateFileName="")) returned 1 [0294.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0294.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212470 [0294.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0294.355] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212470 | out: hHeap=0x1f0000) returned 1 [0294.355] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0294.355] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0294.356] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00049_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00049_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0294.356] GetFileType (hFile=0x1c0) returned 0x1 [0294.356] CloseHandle (hObject=0x1c0) returned 1 [0294.357] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0294.357] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00049_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00049_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1003f0d3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1003f0d3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x100fdad1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1 [0294.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0294.357] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0294.357] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00049_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00049_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1003f0d3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1003f0d3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x100fdad1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1 [0294.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0294.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0294.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0294.358] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4d18, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="PE00050_.WMF", cAlternateFileName="")) returned 1 [0294.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0294.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0294.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0294.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0294.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0294.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0294.359] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00050_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00050_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0294.359] GetFileType (hFile=0x1c0) returned 0x1 [0294.360] CloseHandle (hObject=0x1c0) returned 1 [0294.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0294.360] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00050_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00050_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4d18)) returned 1 [0294.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0294.361] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0294.361] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00050_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00050_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4d18)) returned 1 [0294.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0294.362] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0294.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0294.362] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x47ec, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="PE00052_.WMF", cAlternateFileName="")) returned 1 [0294.362] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0294.362] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212360 [0294.362] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0294.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212360 | out: hHeap=0x1f0000) returned 1 [0294.363] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0294.363] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0294.363] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00052_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00052_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0294.364] GetFileType (hFile=0x1c0) returned 0x1 [0294.364] CloseHandle (hObject=0x1c0) returned 1 [0294.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0294.364] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00052_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00052_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x47ec)) returned 1 [0294.365] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0294.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0294.365] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00052_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00052_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x47ec)) returned 1 [0294.365] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0294.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0294.365] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0294.365] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b4, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="PE00231_.WMF", cAlternateFileName="")) returned 1 [0294.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0294.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211e98 [0294.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0294.366] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e98 | out: hHeap=0x1f0000) returned 1 [0294.366] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0294.366] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0294.366] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00231_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00231_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0294.646] GetFileType (hFile=0x198) returned 0x1 [0294.647] CloseHandle (hObject=0x198) returned 1 [0294.647] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0294.647] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00231_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00231_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b4)) returned 1 [0294.647] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0294.647] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0294.648] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00231_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00231_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b4)) returned 1 [0294.648] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0294.648] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0294.648] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0294.648] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaf4, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="PE00272_.WMF", cAlternateFileName="")) returned 1 [0294.648] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0294.648] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211b68 [0294.648] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0294.649] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b68 | out: hHeap=0x1f0000) returned 1 [0294.649] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0294.649] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0294.650] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00272_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00272_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0294.650] GetFileType (hFile=0x198) returned 0x1 [0294.650] CloseHandle (hObject=0x198) returned 1 [0294.651] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0294.651] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00272_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00272_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaf4)) returned 1 [0294.651] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0294.651] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0294.651] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00272_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00272_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaf4)) returned 1 [0294.652] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0294.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0294.652] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0294.652] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5aa4, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="PE00468_.WMF", cAlternateFileName="")) returned 1 [0294.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0294.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2123e8 [0294.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0294.652] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2123e8 | out: hHeap=0x1f0000) returned 1 [0294.652] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0294.653] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0294.653] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00468_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00468_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0294.653] GetFileType (hFile=0x198) returned 0x1 [0294.654] CloseHandle (hObject=0x198) returned 1 [0294.654] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0294.654] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00468_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00468_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5aa4)) returned 1 [0294.655] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0294.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0294.655] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00468_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00468_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5aa4)) returned 1 [0294.655] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0294.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0294.655] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0294.655] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10149fbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1cf8, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="PE00478_.WMF", cAlternateFileName="")) returned 1 [0294.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0294.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212470 [0294.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0294.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212470 | out: hHeap=0x1f0000) returned 1 [0294.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0294.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0294.657] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00478_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00478_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0294.657] GetFileType (hFile=0x198) returned 0x1 [0294.658] CloseHandle (hObject=0x198) returned 1 [0294.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0294.659] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00478_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00478_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10149fbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1cf8)) returned 1 [0294.659] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0294.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0294.659] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00478_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00478_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10149fbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1cf8)) returned 1 [0294.659] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0294.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0294.659] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0294.659] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4124, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="PE00485_.WMF", cAlternateFileName="")) returned 1 [0294.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0294.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212030 [0294.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0294.660] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212030 | out: hHeap=0x1f0000) returned 1 [0294.660] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0294.660] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0294.661] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00485_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00485_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0294.661] GetFileType (hFile=0x198) returned 0x1 [0294.661] CloseHandle (hObject=0x198) returned 1 [0294.661] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0294.661] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00485_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00485_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4124)) returned 1 [0294.662] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0294.662] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0294.662] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00485_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00485_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4124)) returned 1 [0294.662] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0294.662] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0294.662] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0294.662] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1402c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="PE00489_.WMF", cAlternateFileName="")) returned 1 [0294.662] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0294.663] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0294.663] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0294.663] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0294.663] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0294.663] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0294.664] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00489_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00489_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0294.664] GetFileType (hFile=0x198) returned 0x1 [0294.664] CloseHandle (hObject=0x198) returned 1 [0294.665] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0294.665] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00489_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00489_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1402c)) returned 1 [0294.665] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0294.665] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0294.665] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00489_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00489_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1402c)) returned 1 [0294.665] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0294.665] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0294.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0294.666] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ee4, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="PE00531_.WMF", cAlternateFileName="")) returned 1 [0294.666] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0294.666] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211ae0 [0294.666] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0294.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211ae0 | out: hHeap=0x1f0000) returned 1 [0294.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0294.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0294.667] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00531_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00531_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0294.667] GetFileType (hFile=0x198) returned 0x1 [0294.668] CloseHandle (hObject=0x198) returned 1 [0294.668] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0294.668] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00531_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00531_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ee4)) returned 1 [0294.669] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0294.669] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0294.669] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00531_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00531_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ee4)) returned 1 [0294.669] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0294.669] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0294.669] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0294.669] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8da8, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="PE00542_.WMF", cAlternateFileName="")) returned 1 [0294.670] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0294.670] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d00 [0294.670] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0294.670] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d00 | out: hHeap=0x1f0000) returned 1 [0294.670] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0294.670] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0294.671] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00542_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00542_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0294.671] GetFileType (hFile=0x198) returned 0x1 [0294.672] CloseHandle (hObject=0x198) returned 1 [0294.672] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0294.672] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00542_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00542_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8da8)) returned 1 [0294.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0294.672] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0294.673] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00542_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00542_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8da8)) returned 1 [0294.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0294.673] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0294.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0294.673] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10149fbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x140c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="PE00555_.WMF", cAlternateFileName="")) returned 1 [0294.673] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0294.673] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0294.674] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0294.674] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0294.674] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0294.674] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0294.675] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00555_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00555_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0295.092] GetFileType (hFile=0x1ac) returned 0x1 [0295.093] CloseHandle (hObject=0x1ac) returned 1 [0295.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0295.093] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00555_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00555_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10149fbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x140c)) returned 1 [0295.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0295.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0295.093] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00555_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00555_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10149fbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x140c)) returned 1 [0295.094] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0295.094] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0295.094] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0295.094] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x26b0, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="PE00559_.WMF", cAlternateFileName="")) returned 1 [0295.094] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260888 [0295.094] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211bf0 [0295.094] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0295.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211bf0 | out: hHeap=0x1f0000) returned 1 [0295.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0295.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0295.096] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00559_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00559_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0295.096] GetFileType (hFile=0x1ac) returned 0x1 [0295.097] CloseHandle (hObject=0x1ac) returned 1 [0295.097] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0295.097] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00559_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00559_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x26b0)) returned 1 [0295.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0295.097] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0295.098] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00559_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00559_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x26b0)) returned 1 [0295.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0295.098] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0295.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0295.098] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5670, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="PE00563_.WMF", cAlternateFileName="")) returned 1 [0295.098] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0295.098] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d88 [0295.098] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0295.099] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d88 | out: hHeap=0x1f0000) returned 1 [0295.099] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0295.099] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0295.100] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00563_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00563_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0295.100] GetFileType (hFile=0x1ac) returned 0x1 [0295.101] CloseHandle (hObject=0x1ac) returned 1 [0295.101] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0295.101] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00563_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00563_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5670)) returned 1 [0295.101] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0295.101] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0295.102] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00563_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00563_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5670)) returned 1 [0295.102] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0295.102] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0295.102] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0295.102] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ae6, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="PE00578_.WMF", cAlternateFileName="")) returned 1 [0295.102] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0295.102] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d88 [0295.102] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0295.103] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d88 | out: hHeap=0x1f0000) returned 1 [0295.103] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0295.103] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0295.104] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00578_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00578_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0295.104] GetFileType (hFile=0x1ac) returned 0x1 [0295.104] CloseHandle (hObject=0x1ac) returned 1 [0295.105] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0295.105] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00578_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00578_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ae6)) returned 1 [0295.105] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0295.105] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0295.105] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00578_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00578_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ae6)) returned 1 [0295.105] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0295.106] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0295.106] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0295.106] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1928, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="PE00608_.WMF", cAlternateFileName="")) returned 1 [0295.106] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0295.106] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2119d0 [0295.106] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0295.106] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2119d0 | out: hHeap=0x1f0000) returned 1 [0295.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0295.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0295.107] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00608_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00608_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0295.108] GetFileType (hFile=0x1ac) returned 0x1 [0295.108] CloseHandle (hObject=0x1ac) returned 1 [0295.108] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0295.109] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00608_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00608_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1928)) returned 1 [0295.109] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0295.109] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0295.109] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00608_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00608_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1928)) returned 1 [0295.109] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0295.109] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0295.109] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0295.110] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4cea, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="PE00633_.WMF", cAlternateFileName="")) returned 1 [0295.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0295.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212140 [0295.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0295.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212140 | out: hHeap=0x1f0000) returned 1 [0295.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0295.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0295.112] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00633_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00633_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0295.112] GetFileType (hFile=0x1ac) returned 0x1 [0295.113] CloseHandle (hObject=0x1ac) returned 1 [0295.113] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0295.113] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00633_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00633_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4cea)) returned 1 [0295.113] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0295.114] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0295.114] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00633_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00633_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4cea)) returned 1 [0295.114] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0295.114] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0295.114] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0295.114] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb12c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="PE00640_.WMF", cAlternateFileName="")) returned 1 [0295.114] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0295.114] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211ae0 [0295.115] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0295.115] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211ae0 | out: hHeap=0x1f0000) returned 1 [0295.115] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0295.115] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0295.116] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00640_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00640_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0295.116] GetFileType (hFile=0x1ac) returned 0x1 [0295.116] CloseHandle (hObject=0x1ac) returned 1 [0295.117] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0295.117] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00640_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00640_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb12c)) returned 1 [0295.117] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0295.117] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0295.117] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00640_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00640_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb12c)) returned 1 [0295.117] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0295.118] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0295.118] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0295.118] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10149fbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6028, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="PE00668_.WMF", cAlternateFileName="")) returned 1 [0295.118] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0295.118] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211b68 [0295.118] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0295.118] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b68 | out: hHeap=0x1f0000) returned 1 [0295.118] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0295.118] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0295.119] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00668_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00668_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0295.119] GetFileType (hFile=0x1ac) returned 0x1 [0295.120] CloseHandle (hObject=0x1ac) returned 1 [0295.120] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0295.120] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00668_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00668_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10149fbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6028)) returned 1 [0295.120] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0295.120] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0295.121] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00668_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00668_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10149fbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6028)) returned 1 [0295.121] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0295.121] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0295.121] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0295.121] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x108a, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="PE00685_.WMF", cAlternateFileName="")) returned 1 [0295.121] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0295.121] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2124f8 [0295.121] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0295.121] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2124f8 | out: hHeap=0x1f0000) returned 1 [0295.122] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0295.122] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0295.122] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00685_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00685_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0295.123] GetFileType (hFile=0x1ac) returned 0x1 [0295.123] CloseHandle (hObject=0x1ac) returned 1 [0295.123] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0295.124] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00685_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00685_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x108a)) returned 1 [0295.124] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0295.124] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0295.124] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00685_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00685_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x108a)) returned 1 [0295.124] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0295.124] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0295.124] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0295.124] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x112e, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="PE00686_.WMF", cAlternateFileName="")) returned 1 [0295.125] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0295.125] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211e98 [0295.125] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0295.125] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e98 | out: hHeap=0x1f0000) returned 1 [0295.125] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0295.125] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0295.126] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00686_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00686_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0295.126] GetFileType (hFile=0x1ac) returned 0x1 [0295.674] CloseHandle (hObject=0x1ac) returned 1 [0295.675] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0295.675] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00686_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00686_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x112e)) returned 1 [0295.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0295.675] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0295.675] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00686_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00686_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x112e)) returned 1 [0295.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0295.675] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0295.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0295.675] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1138, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="PE00693_.WMF", cAlternateFileName="")) returned 1 [0295.676] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0295.676] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212938 [0295.676] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0295.676] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212938 | out: hHeap=0x1f0000) returned 1 [0295.676] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0295.676] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0295.677] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00693_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00693_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0295.963] GetFileType (hFile=0x1ac) returned 0x1 [0295.964] CloseHandle (hObject=0x1ac) returned 1 [0295.964] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0295.964] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00693_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00693_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1138)) returned 1 [0295.965] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0295.965] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0295.965] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00693_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00693_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1138)) returned 1 [0295.965] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0295.965] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0295.965] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0295.965] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3926, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="PE00720_.WMF", cAlternateFileName="")) returned 1 [0295.965] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0295.965] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212360 [0295.965] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0295.966] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212360 | out: hHeap=0x1f0000) returned 1 [0295.966] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0295.966] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0295.966] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00720_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00720_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0295.967] GetFileType (hFile=0x1ac) returned 0x1 [0295.967] CloseHandle (hObject=0x1ac) returned 1 [0295.968] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0295.968] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00720_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00720_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3926)) returned 1 [0295.968] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0295.968] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0295.968] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00720_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00720_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3926)) returned 1 [0295.968] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0295.968] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0295.968] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0295.969] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10149fbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1afc, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="PE00723_.WMF", cAlternateFileName="")) returned 1 [0295.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0295.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0295.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0295.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0295.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0295.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0295.969] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00723_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00723_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0295.970] GetFileType (hFile=0x1ac) returned 0x1 [0295.971] CloseHandle (hObject=0x1ac) returned 1 [0295.971] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0295.972] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00723_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00723_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10149fbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1afc)) returned 1 [0295.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0295.972] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0295.972] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00723_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00723_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10149fbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1afc)) returned 1 [0295.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0295.972] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0295.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0295.972] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10149fbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb1a4, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="PE00726_.WMF", cAlternateFileName="")) returned 1 [0295.972] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0295.972] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211fa8 [0295.972] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0295.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211fa8 | out: hHeap=0x1f0000) returned 1 [0295.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0295.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0295.973] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00726_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00726_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0295.974] GetFileType (hFile=0x1ac) returned 0x1 [0295.974] CloseHandle (hObject=0x1ac) returned 1 [0295.974] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0295.975] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00726_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00726_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10149fbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb1a4)) returned 1 [0295.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0295.975] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0295.975] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00726_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00726_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10149fbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb1a4)) returned 1 [0295.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0295.975] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0295.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0295.975] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10149fbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9e2c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="PE00737_.WMF", cAlternateFileName="")) returned 1 [0295.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0295.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211b68 [0295.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0295.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b68 | out: hHeap=0x1f0000) returned 1 [0295.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0295.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0295.976] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00737_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00737_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0295.977] GetFileType (hFile=0x1ac) returned 0x1 [0295.977] CloseHandle (hObject=0x1ac) returned 1 [0295.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0295.978] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00737_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00737_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10149fbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9e2c)) returned 1 [0295.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0295.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0295.978] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00737_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00737_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10149fbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9e2c)) returned 1 [0295.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0295.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0295.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0295.978] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10149fbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ca0, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="PE00833_.WMF", cAlternateFileName="")) returned 1 [0295.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0295.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2119d0 [0295.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0295.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2119d0 | out: hHeap=0x1f0000) returned 1 [0295.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0295.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0295.979] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00833_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00833_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0295.980] GetFileType (hFile=0x1ac) returned 0x1 [0295.980] CloseHandle (hObject=0x1ac) returned 1 [0295.981] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0295.981] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00833_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00833_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10149fbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ca0)) returned 1 [0295.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0295.981] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0295.981] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00833_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00833_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10149fbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ca0)) returned 1 [0295.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0295.981] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0295.982] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0295.982] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1908, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="PE00898_.WMF", cAlternateFileName="")) returned 1 [0295.983] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0295.983] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212140 [0295.984] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0295.984] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212140 | out: hHeap=0x1f0000) returned 1 [0295.984] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0295.984] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0295.984] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00898_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00898_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0295.985] GetFileType (hFile=0x1ac) returned 0x1 [0295.985] CloseHandle (hObject=0x1ac) returned 1 [0295.986] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0295.986] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00898_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00898_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1908)) returned 1 [0295.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0295.987] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0295.987] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00898_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00898_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1908)) returned 1 [0295.987] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0295.987] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0295.987] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0295.987] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3100, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="PE00934_.WMF", cAlternateFileName="")) returned 1 [0295.987] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0295.987] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212140 [0295.987] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0295.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212140 | out: hHeap=0x1f0000) returned 1 [0295.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0295.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0295.988] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00934_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00934_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0295.989] GetFileType (hFile=0x1ac) returned 0x1 [0295.989] CloseHandle (hObject=0x1ac) returned 1 [0295.989] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0295.989] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00934_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00934_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3100)) returned 1 [0295.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0295.990] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0295.990] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00934_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00934_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3100)) returned 1 [0295.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0295.990] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0295.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0295.990] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10149fbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2904, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="PE00998_.WMF", cAlternateFileName="")) returned 1 [0295.990] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0295.991] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211fa8 [0295.991] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0295.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211fa8 | out: hHeap=0x1f0000) returned 1 [0295.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0295.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0295.991] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00998_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00998_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0295.992] GetFileType (hFile=0x1ac) returned 0x1 [0295.992] CloseHandle (hObject=0x1ac) returned 1 [0295.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0295.993] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00998_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00998_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10149fbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2904)) returned 1 [0295.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0295.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0295.993] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00998_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00998_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10149fbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2904)) returned 1 [0295.994] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0295.994] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0295.994] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0295.994] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10149fbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x984, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="PE01160_.WMF", cAlternateFileName="")) returned 1 [0295.994] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260838 [0295.994] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212030 [0295.995] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0295.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212030 | out: hHeap=0x1f0000) returned 1 [0295.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0295.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260838 | out: hHeap=0x1f0000) returned 1 [0295.996] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01160_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe01160_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0295.996] GetFileType (hFile=0x1ac) returned 0x1 [0295.997] CloseHandle (hObject=0x1ac) returned 1 [0295.997] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0295.997] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01160_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe01160_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10149fbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x984)) returned 1 [0295.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0295.998] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0295.998] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01160_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe01160_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10149fbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x984)) returned 1 [0295.998] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0295.998] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0295.998] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0295.998] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x59c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="PE01172_.WMF", cAlternateFileName="")) returned 1 [0295.998] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0295.998] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211b68 [0295.998] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0295.999] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b68 | out: hHeap=0x1f0000) returned 1 [0295.999] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0295.999] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0296.000] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe01172_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0296.001] GetFileType (hFile=0x1ac) returned 0x1 [0296.001] CloseHandle (hObject=0x1ac) returned 1 [0296.239] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0296.239] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe01172_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x59c)) returned 1 [0296.240] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0296.240] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0296.240] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe01172_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x59c)) returned 1 [0296.240] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0296.240] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0296.240] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0296.240] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3f9c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="PE01191_.WMF", cAlternateFileName="")) returned 1 [0296.240] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0296.240] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212140 [0296.240] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0296.241] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212140 | out: hHeap=0x1f0000) returned 1 [0296.241] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0296.241] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0296.241] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01191_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe01191_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0296.242] GetFileType (hFile=0x1ac) returned 0x1 [0296.242] CloseHandle (hObject=0x1ac) returned 1 [0296.242] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0296.243] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01191_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe01191_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3f9c)) returned 1 [0296.243] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0296.243] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0296.243] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01191_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe01191_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3f9c)) returned 1 [0296.243] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0296.243] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0296.243] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0296.243] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1418, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="PE01661_.WMF", cAlternateFileName="")) returned 1 [0296.244] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0296.244] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0296.244] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0296.244] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0296.244] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0296.244] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0296.245] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01661_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe01661_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0296.371] GetFileType (hFile=0x1ac) returned 0x1 [0296.372] CloseHandle (hObject=0x1ac) returned 1 [0296.372] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0296.372] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01661_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe01661_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1418)) returned 1 [0296.372] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0296.372] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0296.373] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01661_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe01661_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1418)) returned 1 [0296.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0296.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0296.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0296.373] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdda, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="PE01797_.WMF", cAlternateFileName="")) returned 1 [0296.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0296.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0296.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0296.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0296.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0296.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0296.374] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01797_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe01797_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0296.375] GetFileType (hFile=0x1ac) returned 0x1 [0296.375] CloseHandle (hObject=0x1ac) returned 1 [0296.375] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0296.376] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01797_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe01797_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdda)) returned 1 [0296.376] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0296.376] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0296.376] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01797_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe01797_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdda)) returned 1 [0296.376] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0296.376] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0296.376] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0296.377] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x23d4, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="PE02120_.WMF", cAlternateFileName="")) returned 1 [0296.377] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260518 [0296.377] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2129c0 [0296.377] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0296.377] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2129c0 | out: hHeap=0x1f0000) returned 1 [0296.377] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0296.378] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0296.378] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02120_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02120_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0296.379] GetFileType (hFile=0x1ac) returned 0x1 [0296.380] CloseHandle (hObject=0x1ac) returned 1 [0296.380] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0296.380] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02120_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02120_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x23d4)) returned 1 [0296.380] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0296.380] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0296.380] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02120_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02120_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x23d4)) returned 1 [0296.381] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0296.381] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0296.381] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0296.381] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fc4, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="PE02169_.WMF", cAlternateFileName="")) returned 1 [0296.381] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0296.381] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2120b8 [0296.381] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0296.381] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2120b8 | out: hHeap=0x1f0000) returned 1 [0296.381] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0296.381] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0296.382] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02169_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02169_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0296.382] GetFileType (hFile=0x1ac) returned 0x1 [0296.382] CloseHandle (hObject=0x1ac) returned 1 [0296.383] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0296.383] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02169_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02169_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fc4)) returned 1 [0296.383] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0296.383] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0296.383] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02169_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02169_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fc4)) returned 1 [0296.383] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0296.383] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0296.383] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0296.383] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x75e2, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="PE02262_.WMF", cAlternateFileName="")) returned 1 [0296.384] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0296.384] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2123e8 [0296.384] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0296.384] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2123e8 | out: hHeap=0x1f0000) returned 1 [0296.384] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0296.384] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0296.384] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02262_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02262_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0296.385] GetFileType (hFile=0x1ac) returned 0x1 [0296.385] CloseHandle (hObject=0x1ac) returned 1 [0296.385] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0296.385] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02262_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02262_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x75e2)) returned 1 [0296.385] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0296.385] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0296.385] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02262_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02262_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x75e2)) returned 1 [0296.386] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0296.386] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0296.386] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0296.386] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x824e, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="PE02263_.WMF", cAlternateFileName="")) returned 1 [0296.386] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0296.386] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0296.386] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0296.386] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0296.386] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0296.386] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0296.386] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02263_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02263_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0296.387] GetFileType (hFile=0x1ac) returned 0x1 [0296.388] CloseHandle (hObject=0x1ac) returned 1 [0296.388] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0296.388] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02263_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02263_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x824e)) returned 1 [0296.388] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0296.388] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0296.388] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02263_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02263_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x824e)) returned 1 [0296.388] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0296.388] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0296.389] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0296.389] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x62b2, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="PE02265_.WMF", cAlternateFileName="")) returned 1 [0296.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0296.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2123e8 [0296.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0296.389] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2123e8 | out: hHeap=0x1f0000) returned 1 [0296.389] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0296.389] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0296.389] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02265_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02265_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0296.390] GetFileType (hFile=0x1ac) returned 0x1 [0296.390] CloseHandle (hObject=0x1ac) returned 1 [0296.391] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0296.391] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02265_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02265_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x62b2)) returned 1 [0296.391] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0296.391] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0296.391] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02265_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02265_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x62b2)) returned 1 [0296.391] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0296.391] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0296.391] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0296.391] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x78e0, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="PE02267_.WMF", cAlternateFileName="")) returned 1 [0296.391] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0296.391] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211ae0 [0296.391] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0296.392] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211ae0 | out: hHeap=0x1f0000) returned 1 [0296.392] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0296.392] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0296.393] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02267_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02267_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0296.393] GetFileType (hFile=0x1ac) returned 0x1 [0296.393] CloseHandle (hObject=0x1ac) returned 1 [0296.393] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0296.394] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02267_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02267_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x78e0)) returned 1 [0296.394] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0296.394] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0296.394] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02267_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02267_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x78e0)) returned 1 [0296.394] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0296.394] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0296.394] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0296.394] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6f26, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="PE02270_.WMF", cAlternateFileName="")) returned 1 [0296.394] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609a0 [0296.394] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211ae0 [0296.394] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0296.394] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211ae0 | out: hHeap=0x1f0000) returned 1 [0296.394] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0296.394] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0296.395] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02270_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02270_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0296.396] GetFileType (hFile=0x1ac) returned 0x1 [0296.396] CloseHandle (hObject=0x1ac) returned 1 [0296.396] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0296.396] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02270_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02270_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6f26)) returned 1 [0296.396] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0296.396] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0296.396] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02270_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02270_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6f26)) returned 1 [0296.396] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0296.396] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0296.396] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0296.396] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb9c4, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="PE02278_.WMF", cAlternateFileName="")) returned 1 [0296.396] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260770 [0296.397] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2127a0 [0296.397] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0296.397] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2127a0 | out: hHeap=0x1f0000) returned 1 [0296.397] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0296.397] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0296.397] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02278_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02278_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0296.398] GetFileType (hFile=0x1ac) returned 0x1 [0296.398] CloseHandle (hObject=0x1ac) returned 1 [0296.398] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0296.398] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02278_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02278_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb9c4)) returned 1 [0296.398] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0296.399] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0296.399] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02278_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02278_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb9c4)) returned 1 [0296.399] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0296.399] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0296.399] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0296.399] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6928, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="PE02280_.WMF", cAlternateFileName="")) returned 1 [0296.399] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0296.399] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212140 [0296.399] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0296.399] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212140 | out: hHeap=0x1f0000) returned 1 [0296.399] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0296.399] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0296.400] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02280_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02280_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0296.400] GetFileType (hFile=0x1ac) returned 0x1 [0296.400] CloseHandle (hObject=0x1ac) returned 1 [0296.400] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0296.401] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02280_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02280_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6928)) returned 1 [0296.401] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0296.401] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0296.401] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02280_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02280_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6928)) returned 1 [0296.401] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0296.401] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0296.401] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0296.401] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7400, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="PE02282_.WMF", cAlternateFileName="")) returned 1 [0296.401] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0296.401] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211b68 [0296.401] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0296.401] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b68 | out: hHeap=0x1f0000) returned 1 [0296.401] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0296.401] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0296.402] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02282_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02282_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0296.402] GetFileType (hFile=0x1ac) returned 0x1 [0296.402] CloseHandle (hObject=0x1ac) returned 1 [0296.402] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0296.402] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02282_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02282_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7400)) returned 1 [0296.403] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0296.403] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0296.403] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02282_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02282_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7400)) returned 1 [0296.403] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0296.403] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0296.403] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0296.403] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4090, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="PE02285_.WMF", cAlternateFileName="")) returned 1 [0296.403] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605b8 [0296.403] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2124f8 [0296.403] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0296.403] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2124f8 | out: hHeap=0x1f0000) returned 1 [0296.403] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0296.403] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0296.403] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02285_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02285_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0296.404] GetFileType (hFile=0x1ac) returned 0x1 [0296.404] CloseHandle (hObject=0x1ac) returned 1 [0296.404] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0296.404] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02285_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02285_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4090)) returned 1 [0296.404] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0296.404] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0296.405] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02285_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02285_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4090)) returned 1 [0296.405] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0296.405] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0296.405] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0296.405] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4584, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="PE02287_.WMF", cAlternateFileName="")) returned 1 [0296.405] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0296.405] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d00 [0296.405] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0296.405] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d00 | out: hHeap=0x1f0000) returned 1 [0296.405] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0296.405] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0296.405] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02287_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02287_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0296.406] GetFileType (hFile=0x1ac) returned 0x1 [0296.406] CloseHandle (hObject=0x1ac) returned 1 [0296.406] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0296.406] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02287_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02287_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4584)) returned 1 [0296.406] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0296.406] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0296.406] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02287_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02287_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4584)) returned 1 [0296.407] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0296.407] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0296.407] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0296.407] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x76e0, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="PE02288_.WMF", cAlternateFileName="")) returned 1 [0296.407] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0296.407] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212030 [0296.407] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0296.407] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212030 | out: hHeap=0x1f0000) returned 1 [0296.407] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0296.407] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0296.407] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02288_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02288_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0296.690] GetFileType (hFile=0x1ac) returned 0x1 [0296.690] CloseHandle (hObject=0x1ac) returned 1 [0296.690] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0296.691] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02288_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02288_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x76e0)) returned 1 [0296.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0296.691] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0296.691] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02288_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02288_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x76e0)) returned 1 [0296.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0296.691] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0296.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0296.691] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5850, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="PE02293_.WMF", cAlternateFileName="")) returned 1 [0296.691] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0296.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212360 [0296.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0296.692] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212360 | out: hHeap=0x1f0000) returned 1 [0296.692] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0296.692] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0296.692] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02293_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02293_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0296.693] GetFileType (hFile=0x1ac) returned 0x1 [0296.693] CloseHandle (hObject=0x1ac) returned 1 [0296.693] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0296.693] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02293_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02293_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5850)) returned 1 [0296.694] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0296.694] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0296.694] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02293_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02293_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5850)) returned 1 [0296.694] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0296.694] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0296.694] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0296.694] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5328, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="PE02296_.WMF", cAlternateFileName="")) returned 1 [0296.695] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609a0 [0296.695] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211fa8 [0296.695] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0296.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211fa8 | out: hHeap=0x1f0000) returned 1 [0296.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0296.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0296.696] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02296_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02296_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0296.696] GetFileType (hFile=0x1ac) returned 0x1 [0296.697] CloseHandle (hObject=0x1ac) returned 1 [0296.697] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0296.697] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02296_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02296_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5328)) returned 1 [0296.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0296.697] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0296.698] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02296_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02296_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5328)) returned 1 [0296.698] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0296.698] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0296.698] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0296.698] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8c0, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="PE02369_.WMF", cAlternateFileName="")) returned 1 [0296.698] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0296.698] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212030 [0296.698] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0296.699] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212030 | out: hHeap=0x1f0000) returned 1 [0296.699] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0296.699] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0296.699] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02369_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02369_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0296.700] GetFileType (hFile=0x1ac) returned 0x1 [0296.700] CloseHandle (hObject=0x1ac) returned 1 [0296.700] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0296.701] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02369_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02369_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8c0)) returned 1 [0296.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0296.701] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0296.701] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02369_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02369_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8c0)) returned 1 [0296.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0296.701] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0296.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0296.701] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101e2909, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101e2909, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101e2909, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x39f8, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="PE02522_.WMF", cAlternateFileName="")) returned 1 [0296.701] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0296.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2120b8 [0296.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0296.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2120b8 | out: hHeap=0x1f0000) returned 1 [0296.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0296.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0296.703] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02522_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02522_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0296.881] GetFileType (hFile=0x1ac) returned 0x1 [0296.881] CloseHandle (hObject=0x1ac) returned 1 [0296.882] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0296.882] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02522_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02522_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101e2909, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101e2909, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101e2909, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x39f8)) returned 1 [0296.884] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0296.884] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0296.884] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02522_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02522_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101e2909, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101e2909, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101e2909, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x39f8)) returned 1 [0296.884] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0296.884] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0296.884] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0296.884] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d2a, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="PE02950_.WMF", cAlternateFileName="")) returned 1 [0296.884] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0296.884] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211f20 [0296.884] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0296.885] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211f20 | out: hHeap=0x1f0000) returned 1 [0296.885] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0296.885] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0297.065] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02950_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02950_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0297.065] GetFileType (hFile=0x1ac) returned 0x1 [0297.066] CloseHandle (hObject=0x1ac) returned 1 [0297.066] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0297.066] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02950_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02950_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d2a)) returned 1 [0297.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0297.067] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0297.067] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02950_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02950_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d2a)) returned 1 [0297.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0297.067] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0297.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0297.067] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc70, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="PE02957_.WMF", cAlternateFileName="")) returned 1 [0297.068] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0297.068] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212360 [0297.068] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0297.068] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212360 | out: hHeap=0x1f0000) returned 1 [0297.068] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0297.068] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0297.069] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02957_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02957_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0297.069] GetFileType (hFile=0x1ac) returned 0x1 [0297.070] CloseHandle (hObject=0x1ac) returned 1 [0297.070] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0297.070] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02957_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02957_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc70)) returned 1 [0297.070] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0297.070] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0297.071] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02957_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02957_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc70)) returned 1 [0297.071] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0297.071] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0297.071] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0297.071] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x614, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="PE03236_.WMF", cAlternateFileName="")) returned 1 [0297.071] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0297.071] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211bf0 [0297.071] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0297.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211bf0 | out: hHeap=0x1f0000) returned 1 [0297.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0297.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0297.072] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03236_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03236_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0297.073] GetFileType (hFile=0x1ac) returned 0x1 [0297.073] CloseHandle (hObject=0x1ac) returned 1 [0297.074] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0297.074] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03236_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03236_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x614)) returned 1 [0297.074] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0297.074] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0297.074] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03236_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03236_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x614)) returned 1 [0297.074] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0297.074] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0297.074] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0297.075] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b4, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="PE03241_.WMF", cAlternateFileName="")) returned 1 [0297.075] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0297.075] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2123e8 [0297.075] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0297.075] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2123e8 | out: hHeap=0x1f0000) returned 1 [0297.075] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0297.075] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0297.076] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03241_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03241_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0297.076] GetFileType (hFile=0x1ac) returned 0x1 [0297.077] CloseHandle (hObject=0x1ac) returned 1 [0297.077] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0297.077] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03241_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03241_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b4)) returned 1 [0297.077] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0297.077] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0297.078] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03241_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03241_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b4)) returned 1 [0297.078] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0297.078] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0297.078] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0297.078] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101bc6d0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3380, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="PE03257_.WMF", cAlternateFileName="")) returned 1 [0297.078] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0297.078] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211fa8 [0297.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0297.079] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211fa8 | out: hHeap=0x1f0000) returned 1 [0297.079] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0297.079] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0297.080] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03257_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03257_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0297.081] GetFileType (hFile=0x1ac) returned 0x1 [0297.081] CloseHandle (hObject=0x1ac) returned 1 [0297.082] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0297.082] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03257_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03257_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101bc6d0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3380)) returned 1 [0297.082] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0297.082] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0297.082] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03257_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03257_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101bc6d0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3380)) returned 1 [0297.082] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0297.082] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0297.082] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0297.083] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x692, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="PE03331_.WMF", cAlternateFileName="")) returned 1 [0297.083] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0297.083] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0297.083] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0297.083] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0297.083] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0297.083] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0297.084] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03331_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03331_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0297.084] GetFileType (hFile=0x1ac) returned 0x1 [0297.085] CloseHandle (hObject=0x1ac) returned 1 [0297.085] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0297.085] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03331_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03331_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x692)) returned 1 [0297.085] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0297.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0297.086] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03331_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03331_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x692)) returned 1 [0297.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0297.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0297.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0297.086] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x282c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="PE03339_.WMF", cAlternateFileName="")) returned 1 [0297.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0297.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2124f8 [0297.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0297.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2124f8 | out: hHeap=0x1f0000) returned 1 [0297.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0297.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0297.087] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03339_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03339_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0297.088] GetFileType (hFile=0x1ac) returned 0x1 [0297.088] CloseHandle (hObject=0x1ac) returned 1 [0297.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0297.089] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03339_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03339_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x282c)) returned 1 [0297.089] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0297.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0297.089] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03339_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03339_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x282c)) returned 1 [0297.089] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0297.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0297.089] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0297.090] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2108, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="PE03451_.WMF", cAlternateFileName="")) returned 1 [0297.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0297.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2124f8 [0297.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0297.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2124f8 | out: hHeap=0x1f0000) returned 1 [0297.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0297.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0297.091] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03451_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03451_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0297.091] GetFileType (hFile=0x1ac) returned 0x1 [0297.092] CloseHandle (hObject=0x1ac) returned 1 [0297.092] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0297.092] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03451_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03451_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2108)) returned 1 [0297.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0297.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0297.093] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03451_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03451_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2108)) returned 1 [0297.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0297.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0297.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0297.094] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f24, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="PE03453_.WMF", cAlternateFileName="")) returned 1 [0297.094] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0297.094] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212360 [0297.094] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0297.094] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212360 | out: hHeap=0x1f0000) returned 1 [0297.094] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0297.094] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0297.095] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03453_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03453_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0297.096] GetFileType (hFile=0x1ac) returned 0x1 [0297.096] CloseHandle (hObject=0x1ac) returned 1 [0297.097] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0297.097] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03453_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03453_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f24)) returned 1 [0297.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0297.097] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0297.097] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03453_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03453_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f24)) returned 1 [0297.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0297.098] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0297.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0297.098] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101bc6d0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2178, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="PE03459_.WMF", cAlternateFileName="")) returned 1 [0297.098] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0297.098] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212608 [0297.098] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0297.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212608 | out: hHeap=0x1f0000) returned 1 [0297.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0297.099] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0297.099] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03459_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03459_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0297.100] GetFileType (hFile=0x1ac) returned 0x1 [0297.100] CloseHandle (hObject=0x1ac) returned 1 [0297.100] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0297.100] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03459_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03459_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101bc6d0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2178)) returned 1 [0297.101] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0297.101] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0297.101] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03459_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03459_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101bc6d0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2178)) returned 1 [0297.101] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0297.101] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0297.101] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0297.101] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101bc6d0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1664, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="PE03464_.WMF", cAlternateFileName="")) returned 1 [0297.101] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0297.101] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0297.102] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0297.102] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0297.102] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0297.102] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0297.102] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03464_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03464_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0297.102] GetFileType (hFile=0x1ac) returned 0x1 [0297.103] CloseHandle (hObject=0x1ac) returned 1 [0297.103] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0297.103] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03464_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03464_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101bc6d0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1664)) returned 1 [0297.103] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0297.104] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0297.104] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03464_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03464_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101bc6d0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1664)) returned 1 [0297.104] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0297.104] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0297.104] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0297.104] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101bc6d0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x41a0, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="PE03466_.WMF", cAlternateFileName="")) returned 1 [0297.104] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0297.104] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212470 [0297.104] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0297.104] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212470 | out: hHeap=0x1f0000) returned 1 [0297.105] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0297.105] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0297.105] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03466_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03466_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0297.106] GetFileType (hFile=0x1ac) returned 0x1 [0297.106] CloseHandle (hObject=0x1ac) returned 1 [0297.107] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0297.107] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03466_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03466_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101bc6d0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x41a0)) returned 1 [0297.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0297.107] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0297.107] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03466_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03466_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101bc6d0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x41a0)) returned 1 [0297.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0297.108] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0297.108] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0297.108] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101bc6d0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3998, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="PE03470_.WMF", cAlternateFileName="")) returned 1 [0297.108] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0297.108] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0297.108] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0297.108] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0297.108] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0297.108] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0297.109] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03470_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03470_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0297.110] GetFileType (hFile=0x1ac) returned 0x1 [0297.110] CloseHandle (hObject=0x1ac) returned 1 [0297.111] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0297.333] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03470_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03470_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101bc6d0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3998)) returned 1 [0297.333] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0297.333] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0297.333] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03470_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03470_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101bc6d0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3998)) returned 1 [0297.334] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0297.334] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0297.334] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0297.334] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101bc6d0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xec4, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="PE03513_.WMF", cAlternateFileName="")) returned 1 [0297.334] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0297.334] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212828 [0297.334] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0297.334] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212828 | out: hHeap=0x1f0000) returned 1 [0297.334] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0297.334] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0297.528] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03513_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03513_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0297.528] GetFileType (hFile=0x1ac) returned 0x1 [0297.529] CloseHandle (hObject=0x1ac) returned 1 [0297.529] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0297.529] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03513_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03513_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101bc6d0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xec4)) returned 1 [0297.529] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0297.530] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0297.530] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03513_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03513_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101bc6d0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xec4)) returned 1 [0297.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0297.530] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0297.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0297.530] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1027b233, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1027b233, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1027b233, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1868, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="PE03668_.WMF", cAlternateFileName="")) returned 1 [0297.530] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0297.530] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212250 [0297.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0297.531] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212250 | out: hHeap=0x1f0000) returned 1 [0297.531] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0297.531] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0297.531] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03668_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03668_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0297.532] GetFileType (hFile=0x1ac) returned 0x1 [0297.532] CloseHandle (hObject=0x1ac) returned 1 [0297.533] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0297.533] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03668_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03668_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1027b233, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1027b233, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1027b233, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1868)) returned 1 [0297.534] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0297.534] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0297.534] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03668_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03668_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1027b233, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1027b233, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1027b233, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1868)) returned 1 [0297.534] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0297.534] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0297.534] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0297.534] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101e2909, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9fc, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="PE03731_.WMF", cAlternateFileName="")) returned 1 [0297.534] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0297.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212718 [0297.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0297.535] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212718 | out: hHeap=0x1f0000) returned 1 [0297.535] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0297.535] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0297.536] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03731_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03731_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0297.898] GetFileType (hFile=0x1e0) returned 0x1 [0297.899] CloseHandle (hObject=0x1e0) returned 1 [0297.900] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0297.900] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03731_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03731_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101e2909, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9fc)) returned 1 [0297.900] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0297.900] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0297.901] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03731_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03731_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101e2909, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9fc)) returned 1 [0297.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0297.901] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0297.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0297.901] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101e2909, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x78a, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="PE03795_.WMF", cAlternateFileName="")) returned 1 [0297.901] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0297.901] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211e10 [0297.901] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0297.902] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e10 | out: hHeap=0x1f0000) returned 1 [0297.902] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0297.902] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0297.941] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03795_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03795_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0297.941] GetFileType (hFile=0x1e0) returned 0x1 [0297.941] CloseHandle (hObject=0x1e0) returned 1 [0297.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0297.942] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03795_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03795_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101e2909, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x78a)) returned 1 [0297.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0297.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0297.942] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03795_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03795_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101e2909, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x78a)) returned 1 [0297.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0297.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0297.943] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0297.943] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101bc6d0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1020, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="PE04050_.WMF", cAlternateFileName="")) returned 1 [0297.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0297.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212718 [0297.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0297.943] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212718 | out: hHeap=0x1f0000) returned 1 [0297.943] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0297.943] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0297.944] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE04050_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe04050_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0297.944] GetFileType (hFile=0x1e0) returned 0x1 [0297.945] CloseHandle (hObject=0x1e0) returned 1 [0297.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0297.945] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE04050_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe04050_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101bc6d0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1020)) returned 1 [0297.945] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0297.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0297.946] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE04050_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe04050_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101bc6d0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1020)) returned 1 [0297.946] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0297.946] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0297.946] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0297.946] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101bc6d0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x37f8, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="PE05665_.WMF", cAlternateFileName="")) returned 1 [0297.946] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0297.946] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212470 [0297.946] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0297.947] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212470 | out: hHeap=0x1f0000) returned 1 [0297.947] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0297.947] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0297.948] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05665_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe05665_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0297.948] GetFileType (hFile=0x1e0) returned 0x1 [0297.948] CloseHandle (hObject=0x1e0) returned 1 [0297.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0297.949] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05665_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe05665_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101bc6d0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x37f8)) returned 1 [0297.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0297.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0297.949] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05665_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe05665_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101bc6d0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x37f8)) returned 1 [0297.950] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0297.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0297.950] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0297.950] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101e2909, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x167c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="PE05710_.WMF", cAlternateFileName="")) returned 1 [0297.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0297.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0297.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0297.950] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0297.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0297.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0297.951] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05710_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe05710_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0297.952] GetFileType (hFile=0x1e0) returned 0x1 [0297.952] CloseHandle (hObject=0x1e0) returned 1 [0297.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0297.953] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05710_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe05710_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101e2909, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x167c)) returned 1 [0297.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0297.953] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0297.953] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05710_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe05710_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101e2909, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x167c)) returned 1 [0297.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0297.953] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0297.954] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0297.954] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101e2909, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x608, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="PE05869_.WMF", cAlternateFileName="")) returned 1 [0297.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260518 [0297.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212250 [0297.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0297.954] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212250 | out: hHeap=0x1f0000) returned 1 [0297.954] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0297.954] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0297.955] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05869_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe05869_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0297.955] GetFileType (hFile=0x1e0) returned 0x1 [0297.956] CloseHandle (hObject=0x1e0) returned 1 [0297.956] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0297.956] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05869_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe05869_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101e2909, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x608)) returned 1 [0297.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0297.957] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0297.957] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05869_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe05869_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101e2909, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x608)) returned 1 [0297.957] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0297.957] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0297.957] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0297.957] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101e2909, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101e2909, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101e2909, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x634, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="PE05870_.WMF", cAlternateFileName="")) returned 1 [0297.957] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0297.957] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0297.957] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0297.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0297.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0297.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0297.959] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05870_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe05870_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0297.959] GetFileType (hFile=0x1e0) returned 0x1 [0297.959] CloseHandle (hObject=0x1e0) returned 1 [0297.960] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0297.960] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05870_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe05870_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101e2909, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101e2909, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101e2909, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x634)) returned 1 [0297.960] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0297.960] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0297.960] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05870_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe05870_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101e2909, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101e2909, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101e2909, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x634)) returned 1 [0297.960] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0297.960] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0297.961] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0297.961] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101e2909, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101e2909, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101e2909, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7fce, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="PE05930_.WMF", cAlternateFileName="")) returned 1 [0297.961] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0297.961] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2128b0 [0297.961] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0297.961] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2128b0 | out: hHeap=0x1f0000) returned 1 [0297.961] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0297.961] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0297.962] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05930_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe05930_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0297.962] GetFileType (hFile=0x1e0) returned 0x1 [0297.962] CloseHandle (hObject=0x1e0) returned 1 [0297.963] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0297.963] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05930_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe05930_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101e2909, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101e2909, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101e2909, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7fce)) returned 1 [0297.963] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0297.963] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0297.963] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05930_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe05930_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101e2909, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101e2909, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101e2909, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7fce)) returned 1 [0297.964] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0297.964] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0297.964] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0297.964] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101bc6d0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x121c, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="PE06049_.WMF", cAlternateFileName="")) returned 1 [0297.964] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0297.964] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0297.964] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0297.964] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0297.964] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0297.964] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0297.965] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE06049_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe06049_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0297.965] GetFileType (hFile=0x1e0) returned 0x1 [0297.966] CloseHandle (hObject=0x1e0) returned 1 [0297.966] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0297.966] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE06049_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe06049_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101bc6d0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x121c)) returned 1 [0297.966] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0297.967] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0297.967] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE06049_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe06049_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101bc6d0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x121c)) returned 1 [0297.967] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0297.967] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0297.967] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0297.967] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101e2909, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4048, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="PE06450_.WMF", cAlternateFileName="")) returned 1 [0297.967] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260838 [0297.967] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2129c0 [0297.967] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0297.968] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2129c0 | out: hHeap=0x1f0000) returned 1 [0297.968] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0297.968] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260838 | out: hHeap=0x1f0000) returned 1 [0297.968] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE06450_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe06450_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0297.968] GetFileType (hFile=0x1e0) returned 0x1 [0297.969] CloseHandle (hObject=0x1e0) returned 1 [0297.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0297.969] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE06450_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe06450_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101e2909, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4048)) returned 1 [0297.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0297.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0297.970] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE06450_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe06450_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101e2909, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4048)) returned 1 [0297.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0297.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0297.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0297.970] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101bc6d0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x629, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="PH00601G.GIF", cAlternateFileName="")) returned 1 [0297.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0297.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211fa8 [0297.971] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0297.971] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211fa8 | out: hHeap=0x1f0000) returned 1 [0297.971] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0297.971] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0297.971] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH00601G.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph00601g.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x1fde4e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0297.972] GetFileType (hFile=0x1e0) returned 0x1 [0297.972] CloseHandle (hObject=0x1e0) returned 1 [0297.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0297.973] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH00601G.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph00601g.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde574 | out: lpFileInformation=0x1fde574*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101bc6d0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x629)) returned 1 [0297.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0297.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0297.973] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH00601G.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph00601g.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fde584 | out: lpFileInformation=0x1fde584*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101bc6d0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x629)) returned 1 [0297.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0297.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0297.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0297.973] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x1fde71c | out: lpFindFileData=0x1fde71c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101bc6d0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8628, dwReserved0=0x21f93e, dwReserved1=0x640062, cFileName="PH00780U.BMP", cAlternateFileName="")) returned 1 [0297.974] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0297.974] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211b68 [0297.974] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0297.974] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b68 | out: hHeap=0x1f0000) returned 1 [0297.974] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0297.974] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 Thread: id = 150 os_tid = 0x13cc [0192.617] GetLastError () returned 0x57 [0192.617] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x364) returned 0x2304f0 [0192.618] SetLastError (dwErrCode=0x57) [0192.618] GetCurrentThreadId () returned 0x13cc [0192.618] GetCurrentThreadId () returned 0x13cc [0192.618] RtlWakeConditionVariable (in: ConditionVariable=0x20668c | out: ConditionVariable=0x20668c) [0192.622] FindFirstFileW (in: lpFileName="C:\\\\*", lpFindFileData=0x22bf558 | out: lpFindFileData=0x22bf558*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffffff, dwReserved1=0x773e8939, cFileName="$GetCurrent", cAlternateFileName="$GETCU~1")) returned 0x214410 [0192.623] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22ba20 [0192.624] lstrcmpW (lpString1="$GetCurrent", lpString2=".") returned -1 [0192.624] lstrcmpW (lpString1="$GetCurrent", lpString2="..") returned -1 [0192.624] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x205130 [0192.625] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b8e0 [0192.625] FindNextFileW (in: hFindFile=0x214410, lpFindFileData=0x22bf558 | out: lpFindFileData=0x22bf558*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffffff, dwReserved1=0x773e8939, cFileName="$Recycle.Bin", cAlternateFileName="")) returned 1 [0192.626] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b868 [0192.626] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227e40 [0192.626] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ba20 | out: hHeap=0x1f0000) returned 1 [0192.627] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b868 | out: hHeap=0x1f0000) returned 1 [0192.627] lstrcmpW (lpString1="$Recycle.Bin", lpString2=".") returned -1 [0192.627] lstrcmpW (lpString1="$Recycle.Bin", lpString2="..") returned -1 [0192.627] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227eb0 [0192.627] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227e08 [0192.627] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205130 | out: hHeap=0x1f0000) returned 1 [0192.627] FindNextFileW (in: hFindFile=0x214410, lpFindFileData=0x22bf558 | out: lpFindFileData=0x22bf558*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x85776261, ftCreationTime.dwHighDateTime=0x1d3276f, ftLastAccessTime.dwLowDateTime=0x85776261, ftLastAccessTime.dwHighDateTime=0x1d3276f, ftLastWriteTime.dwLowDateTime=0x85776261, ftLastWriteTime.dwHighDateTime=0x1d3276f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffffff, dwReserved1=0x773e8939, cFileName="$WINRE_BACKUP_PARTITION.MARKER", cAlternateFileName="$WINRE~1.MAR")) returned 1 [0192.627] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228e60 [0192.627] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2252e8 [0192.627] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227e40 | out: hHeap=0x1f0000) returned 1 [0192.627] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228e60 | out: hHeap=0x1f0000) returned 1 [0192.628] CreateFileW (lpFileName="C:\\\\$WINRE_BACKUP_PARTITION.MARKER" (normalized: "c:\\$winre_backup_partition.marker"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bf330, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0192.628] GetFileType (hFile=0x1d8) returned 0x1 [0192.628] CloseHandle (hObject=0x1d8) returned 1 [0192.629] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x228378 [0192.629] GetFileAttributesExW (in: lpFileName="C:\\\\$WINRE_BACKUP_PARTITION.MARKER" (normalized: "c:\\$winre_backup_partition.marker"), fInfoLevelId=0x0, lpFileInformation=0x22bf3cc | out: lpFileInformation=0x22bf3cc*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x85776261, ftCreationTime.dwHighDateTime=0x1d3276f, ftLastAccessTime.dwLowDateTime=0x85776261, ftLastAccessTime.dwHighDateTime=0x1d3276f, ftLastWriteTime.dwLowDateTime=0x85776261, ftLastWriteTime.dwHighDateTime=0x1d3276f, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0192.629] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228378 | out: hHeap=0x1f0000) returned 1 [0192.629] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x228378 [0192.629] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228378 | out: hHeap=0x1f0000) returned 1 [0192.629] FindNextFileW (in: hFindFile=0x214410, lpFindFileData=0x22bf558 | out: lpFindFileData=0x22bf558*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf39a4e7e, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf74cd515, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffffff, dwReserved1=0x773e8939, cFileName="588bce7c90097ed212", cAlternateFileName="588BCE~1")) returned 1 [0192.629] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228150 [0192.629] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2252e8 | out: hHeap=0x1f0000) returned 1 [0192.629] lstrcmpW (lpString1="588bce7c90097ed212", lpString2=".") returned 1 [0192.629] lstrcmpW (lpString1="588bce7c90097ed212", lpString2="..") returned 1 [0192.629] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x48) returned 0x225bf8 [0192.630] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228070 [0192.630] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227eb0 | out: hHeap=0x1f0000) returned 1 [0192.630] FindNextFileW (in: hFindFile=0x214410, lpFindFileData=0x22bf558 | out: lpFindFileData=0x22bf558*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6fa258, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6fa258, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffffff, dwReserved1=0x773e8939, cFileName="Boot", cAlternateFileName="")) returned 1 [0192.630] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b958 [0192.630] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228150 | out: hHeap=0x1f0000) returned 1 [0192.630] lstrcmpW (lpString1="Boot", lpString2=".") returned 1 [0192.630] lstrcmpW (lpString1="Boot", lpString2="..") returned 1 [0192.630] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ad18 [0192.630] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b890 [0192.630] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225bf8 | out: hHeap=0x1f0000) returned 1 [0192.630] FindNextFileW (in: hFindFile=0x214410, lpFindFileData=0x22bf558 | out: lpFindFileData=0x22bf558*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xe47a48a8, ftCreationTime.dwHighDateTime=0x1d112ea, ftLastAccessTime.dwLowDateTime=0xef6fa258, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfb90936b, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0x607da, dwReserved0=0xffffffff, dwReserved1=0x773e8939, cFileName="bootmgr", cAlternateFileName="")) returned 1 [0192.630] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b840 [0192.631] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b958 | out: hHeap=0x1f0000) returned 1 [0192.631] CreateFileW (lpFileName="C:\\\\bootmgr" (normalized: "c:\\bootmgr"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bf330, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0192.631] GetLastError () returned 0x5 [0192.631] GetLastError () returned 0x5 [0192.631] SetLastError (dwErrCode=0x5) [0192.631] GetLastError () returned 0x5 [0192.631] SetLastError (dwErrCode=0x5) [0192.631] GetLastError () returned 0x5 [0192.631] SetLastError (dwErrCode=0x5) [0192.632] FindNextFileW (in: hFindFile=0x214410, lpFindFileData=0x22bf558 | out: lpFindFileData=0x22bf558*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xe5533ee0, ftCreationTime.dwHighDateTime=0x1d112ea, ftLastAccessTime.dwLowDateTime=0xef9d0a0c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x1, dwReserved0=0xffffffff, dwReserved1=0x773e8939, cFileName="BOOTNXT", cAlternateFileName="")) returned 1 [0192.632] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22ba98 [0192.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b840 | out: hHeap=0x1f0000) returned 1 [0192.632] CreateFileW (lpFileName="C:\\\\BOOTNXT" (normalized: "c:\\bootnxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bf330, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0192.632] GetFileType (hFile=0x1d8) returned 0x1 [0192.632] CloseHandle (hObject=0x1d8) returned 1 [0192.632] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b930 [0192.632] GetFileAttributesExW (in: lpFileName="C:\\\\BOOTNXT" (normalized: "c:\\bootnxt"), fInfoLevelId=0x0, lpFileInformation=0x22bf3cc | out: lpFileInformation=0x22bf3cc*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xe5533ee0, ftCreationTime.dwHighDateTime=0x1d112ea, ftLastAccessTime.dwLowDateTime=0xef9d0a0c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x1)) returned 1 [0192.633] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b930 | out: hHeap=0x1f0000) returned 1 [0192.633] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b908 [0192.633] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b908 | out: hHeap=0x1f0000) returned 1 [0192.633] FindNextFileW (in: hFindFile=0x214410, lpFindFileData=0x22bf558 | out: lpFindFileData=0x22bf558*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xc4ee267e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4ee267e, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xf1c63cdd, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0xffffffff, dwReserved1=0x773e8939, cFileName="BOOTSECT.BAK", cAlternateFileName="")) returned 1 [0192.633] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b908 [0192.633] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228150 [0192.633] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ba98 | out: hHeap=0x1f0000) returned 1 [0192.633] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b908 | out: hHeap=0x1f0000) returned 1 [0192.633] CreateFileW (lpFileName="C:\\\\BOOTSECT.BAK" (normalized: "c:\\bootsect.bak"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bf330, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0192.633] GetLastError () returned 0x5 [0192.633] GetLastError () returned 0x5 [0192.633] SetLastError (dwErrCode=0x5) [0192.634] GetLastError () returned 0x5 [0192.634] SetLastError (dwErrCode=0x5) [0192.634] GetLastError () returned 0x5 [0192.634] SetLastError (dwErrCode=0x5) [0192.634] FindNextFileW (in: hFindFile=0x214410, lpFindFileData=0x22bf558 | out: lpFindFileData=0x22bf558*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xe99f01ae, ftCreationTime.dwHighDateTime=0x1d32708, ftLastAccessTime.dwLowDateTime=0xe99f01ae, ftLastAccessTime.dwHighDateTime=0x1d32708, ftLastWriteTime.dwLowDateTime=0xe99f01ae, ftLastWriteTime.dwHighDateTime=0x1d32708, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x773e8939, cFileName="Documents and Settings", cAlternateFileName="DOCUME~1")) returned 1 [0192.634] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228118 [0192.634] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229298 [0192.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228150 | out: hHeap=0x1f0000) returned 1 [0192.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228118 | out: hHeap=0x1f0000) returned 1 [0192.634] lstrcmpW (lpString1="Documents and Settings", lpString2=".") returned 1 [0192.634] lstrcmpW (lpString1="Documents and Settings", lpString2="..") returned 1 [0192.634] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x228378 [0192.634] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229208 [0192.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ad18 | out: hHeap=0x1f0000) returned 1 [0192.634] FindNextFileW (in: hFindFile=0x214410, lpFindFileData=0x22bf558 | out: lpFindFileData=0x22bf558*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc1969407, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x773e8939, cFileName="ESD", cAlternateFileName="")) returned 1 [0192.635] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229298 | out: hHeap=0x1f0000) returned 1 [0192.635] lstrcmpW (lpString1="ESD", lpString2=".") returned 1 [0192.635] lstrcmpW (lpString1="ESD", lpString2="..") returned 1 [0192.635] FindNextFileW (in: hFindFile=0x214410, lpFindFileData=0x22bf558 | out: lpFindFileData=0x22bf558*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x7ef2dddf, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x7ef2dddf, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x96715303, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x332fe000, dwReserved0=0xa0000003, dwReserved1=0x773e8939, cFileName="hiberfil.sys", cAlternateFileName="")) returned 1 [0192.635] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22ba20 [0192.635] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227fc8 [0192.635] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ba20 | out: hHeap=0x1f0000) returned 1 [0192.635] CreateFileW (lpFileName="C:\\\\hiberfil.sys" (normalized: "c:\\hiberfil.sys"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bf330, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0192.635] GetLastError () returned 0x20 [0192.636] GetLastError () returned 0x20 [0192.636] SetLastError (dwErrCode=0x20) [0192.636] GetLastError () returned 0x20 [0192.636] SetLastError (dwErrCode=0x20) [0192.636] GetLastError () returned 0x20 [0192.636] SetLastError (dwErrCode=0x20) [0192.636] FindNextFileW (in: hFindFile=0x214410, lpFindFileData=0x22bf558 | out: lpFindFileData=0x22bf558*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf1d773, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xa03727f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xfd9ec80, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x773e8939, cFileName="Logs", cAlternateFileName="")) returned 1 [0192.636] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b840 [0192.636] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227fc8 | out: hHeap=0x1f0000) returned 1 [0192.636] lstrcmpW (lpString1="Logs", lpString2=".") returned 1 [0192.637] lstrcmpW (lpString1="Logs", lpString2="..") returned 1 [0192.637] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd8) returned 0x22d368 [0192.637] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22ba70 [0192.637] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228378 | out: hHeap=0x1f0000) returned 1 [0192.637] FindNextFileW (in: hFindFile=0x214410, lpFindFileData=0x22bf558 | out: lpFindFileData=0x22bf558*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6e97b025, ftCreationTime.dwHighDateTime=0x1d3275c, ftLastAccessTime.dwLowDateTime=0x6e97b025, ftLastAccessTime.dwHighDateTime=0x1d3275c, ftLastWriteTime.dwLowDateTime=0x98f4eb01, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x28000000, dwReserved0=0xa0000003, dwReserved1=0x773e8939, cFileName="pagefile.sys", cAlternateFileName="")) returned 1 [0192.637] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22ba20 [0192.637] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227fc8 [0192.637] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b840 | out: hHeap=0x1f0000) returned 1 [0192.637] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ba20 | out: hHeap=0x1f0000) returned 1 [0192.638] CreateFileW (lpFileName="C:\\\\pagefile.sys" (normalized: "c:\\pagefile.sys"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bf330, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0192.639] GetLastError () returned 0x20 [0192.639] GetLastError () returned 0x20 [0192.639] SetLastError (dwErrCode=0x20) [0192.639] GetLastError () returned 0x20 [0192.639] SetLastError (dwErrCode=0x20) [0192.639] GetLastError () returned 0x20 [0192.640] SetLastError (dwErrCode=0x20) [0192.640] FindNextFileW (in: hFindFile=0x214410, lpFindFileData=0x22bf558 | out: lpFindFileData=0x22bf558*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa03748ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17b3dd09, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x773e8939, cFileName="PerfLogs", cAlternateFileName="")) returned 1 [0192.640] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b980 [0192.640] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227fc8 | out: hHeap=0x1f0000) returned 1 [0192.640] lstrcmpW (lpString1="PerfLogs", lpString2=".") returned 1 [0192.640] lstrcmpW (lpString1="PerfLogs", lpString2="..") returned 1 [0192.640] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b908 [0192.641] FindNextFileW (in: hFindFile=0x214410, lpFindFileData=0x22bf558 | out: lpFindFileData=0x22bf558*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3ac6234, ftLastAccessTime.dwHighDateTime=0x1d5c65b, ftLastWriteTime.dwLowDateTime=0x3ac6234, ftLastWriteTime.dwHighDateTime=0x1d5c65b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x773e8939, cFileName="Program Files", cAlternateFileName="PROGRA~1")) returned 1 [0192.641] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22ba20 [0192.641] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227d28 [0192.641] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b980 | out: hHeap=0x1f0000) returned 1 [0192.641] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ba20 | out: hHeap=0x1f0000) returned 1 [0192.641] lstrcmpW (lpString1="Program Files", lpString2=".") returned 1 [0192.641] lstrcmpW (lpString1="Program Files", lpString2="..") returned 1 [0192.642] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228118 [0192.642] FindNextFileW (in: hFindFile=0x214410, lpFindFileData=0x22bf558 | out: lpFindFileData=0x22bf558*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe7511354, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe7511354, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x773e8939, cFileName="Program Files (x86)", cAlternateFileName="PROGRA~2")) returned 1 [0192.642] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227d60 [0192.642] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227d28 | out: hHeap=0x1f0000) returned 1 [0192.642] lstrcmpW (lpString1="Program Files (x86)", lpString2=".") returned 1 [0192.642] lstrcmpW (lpString1="Program Files (x86)", lpString2="..") returned 1 [0192.642] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x138) returned 0x231868 [0192.642] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227d98 [0192.642] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d368 | out: hHeap=0x1f0000) returned 1 [0192.642] FindNextFileW (in: hFindFile=0x214410, lpFindFileData=0x22bf558 | out: lpFindFileData=0x22bf558*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x450f4738, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x450f4738, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x773e8939, cFileName="ProgramData", cAlternateFileName="PROGRA~3")) returned 1 [0192.642] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b958 [0192.642] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227d60 | out: hHeap=0x1f0000) returned 1 [0192.642] lstrcmpW (lpString1="ProgramData", lpString2=".") returned 1 [0192.642] lstrcmpW (lpString1="ProgramData", lpString2="..") returned 1 [0192.643] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b930 [0192.643] FindNextFileW (in: hFindFile=0x214410, lpFindFileData=0x22bf558 | out: lpFindFileData=0x22bf558*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28e9c3a2, ftCreationTime.dwHighDateTime=0x1d32795, ftLastAccessTime.dwLowDateTime=0x1044dfc5, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x1044dfc5, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x773e8939, cFileName="Recovery", cAlternateFileName="")) returned 1 [0192.643] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22ba98 [0192.643] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b958 | out: hHeap=0x1f0000) returned 1 [0192.643] lstrcmpW (lpString1="Recovery", lpString2=".") returned 1 [0192.643] lstrcmpW (lpString1="Recovery", lpString2="..") returned 1 [0192.643] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22ba20 [0192.643] FindNextFileW (in: hFindFile=0x214410, lpFindFileData=0x22bf558 | out: lpFindFileData=0x22bf558*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6ead2556, ftCreationTime.dwHighDateTime=0x1d3275c, ftLastAccessTime.dwLowDateTime=0x6ead2556, ftLastAccessTime.dwHighDateTime=0x1d3275c, ftLastWriteTime.dwLowDateTime=0x98f74cd7, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x10000000, dwReserved0=0xa0000003, dwReserved1=0x773e8939, cFileName="swapfile.sys", cAlternateFileName="")) returned 1 [0192.643] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b7f0 [0192.643] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228150 [0192.643] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ba98 | out: hHeap=0x1f0000) returned 1 [0192.643] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b7f0 | out: hHeap=0x1f0000) returned 1 [0192.644] CreateFileW (lpFileName="C:\\\\swapfile.sys" (normalized: "c:\\swapfile.sys"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bf330, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0192.644] GetLastError () returned 0x20 [0192.644] GetLastError () returned 0x20 [0192.644] SetLastError (dwErrCode=0x20) [0192.645] GetLastError () returned 0x20 [0192.645] SetLastError (dwErrCode=0x20) [0192.645] GetLastError () returned 0x20 [0192.645] SetLastError (dwErrCode=0x20) [0192.645] FindNextFileW (in: hFindFile=0x214410, lpFindFileData=0x22bf558 | out: lpFindFileData=0x22bf558*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x6e16f135, ftCreationTime.dwHighDateTime=0x1d3275c, ftLastAccessTime.dwLowDateTime=0xb1ff7ba5, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xb1ff7ba5, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x773e8939, cFileName="System Volume Information", cAlternateFileName="SYSTEM~1")) returned 1 [0192.645] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229298 [0192.646] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228150 | out: hHeap=0x1f0000) returned 1 [0192.646] lstrcmpW (lpString1="System Volume Information", lpString2=".") returned 1 [0192.646] lstrcmpW (lpString1="System Volume Information", lpString2="..") returned 1 [0192.646] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228fc8 [0192.646] FindNextFileW (in: hFindFile=0x214410, lpFindFileData=0x22bf558 | out: lpFindFileData=0x22bf558*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x475bb883, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x475bb883, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x773e8939, cFileName="Users", cAlternateFileName="")) returned 1 [0192.646] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b958 [0192.646] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229298 | out: hHeap=0x1f0000) returned 1 [0192.646] lstrcmpW (lpString1="Users", lpString2=".") returned 1 [0192.646] lstrcmpW (lpString1="Users", lpString2="..") returned 1 [0192.646] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c8) returned 0x2319a8 [0192.647] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b7f0 [0192.647] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x231868 | out: hHeap=0x1f0000) returned 1 [0192.647] FindNextFileW (in: hFindFile=0x214410, lpFindFileData=0x22bf558 | out: lpFindFileData=0x22bf558*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0xc838b81d, ftLastAccessTime.dwHighDateTime=0x1d41dc3, ftLastWriteTime.dwLowDateTime=0xc838b81d, ftLastWriteTime.dwHighDateTime=0x1d41dc3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x773e8939, cFileName="Windows", cAlternateFileName="")) returned 1 [0192.647] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22ba98 [0192.647] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b958 | out: hHeap=0x1f0000) returned 1 [0192.648] lstrcmpW (lpString1="Windows", lpString2=".") returned 1 [0192.648] lstrcmpW (lpString1="Windows", lpString2="..") returned 1 [0192.648] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b958 [0192.648] FindNextFileW (in: hFindFile=0x214410, lpFindFileData=0x22bf558 | out: lpFindFileData=0x22bf558*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea34fa37, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xccdc86a8, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xccdc86a8, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x773e8939, cFileName="Windows10Upgrade", cAlternateFileName="WINDOW~1")) returned 1 [0192.648] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227c80 [0192.649] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ba98 | out: hHeap=0x1f0000) returned 1 [0192.649] lstrcmpW (lpString1="Windows10Upgrade", lpString2=".") returned 1 [0192.649] lstrcmpW (lpString1="Windows10Upgrade", lpString2="..") returned 1 [0192.649] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227cb8 [0192.650] FindNextFileW (in: hFindFile=0x214410, lpFindFileData=0x22bf558 | out: lpFindFileData=0x22bf558*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea34fa37, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xccdc86a8, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xccdc86a8, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x773e8939, cFileName="Windows10Upgrade", cAlternateFileName="WINDOW~1")) returned 0 [0192.650] FindClose (in: hFindFile=0x214410 | out: hFindFile=0x214410) returned 1 [0192.650] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229178 [0192.650] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b980 [0192.650] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x230860 [0192.650] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227fc8 [0192.651] FindFirstFileW (in: lpFileName="C:\\\\$GetCurrent\\*", lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName=".", cAlternateFileName="")) returned 0x214550 [0192.651] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228150 [0192.651] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227fc8 | out: hHeap=0x1f0000) returned 1 [0192.651] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0192.651] FindNextFileW (in: hFindFile=0x214550, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="..", cAlternateFileName="")) returned 1 [0192.651] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ba0 [0192.651] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228150 | out: hHeap=0x1f0000) returned 1 [0192.652] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0192.652] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0192.652] FindNextFileW (in: hFindFile=0x214550, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0xbc173b97, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xbc173b97, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Logs", cAlternateFileName="")) returned 1 [0192.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228150 [0192.652] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ba0 | out: hHeap=0x1f0000) returned 1 [0192.652] lstrcmpW (lpString1="Logs", lpString2=".") returned 1 [0192.652] lstrcmpW (lpString1="Logs", lpString2="..") returned 1 [0192.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x205130 [0192.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227cf0 [0192.652] FindNextFileW (in: hFindFile=0x214550, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="SafeOS", cAlternateFileName="")) returned 1 [0192.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2281c0 [0192.652] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228150 | out: hHeap=0x1f0000) returned 1 [0192.652] lstrcmpW (lpString1="SafeOS", lpString2=".") returned 1 [0192.652] lstrcmpW (lpString1="SafeOS", lpString2="..") returned 1 [0192.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227eb0 [0192.653] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227d28 [0192.653] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205130 | out: hHeap=0x1f0000) returned 1 [0192.653] FindNextFileW (in: hFindFile=0x214550, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="SafeOS", cAlternateFileName="")) returned 0 [0192.653] FindClose (in: hFindFile=0x214550 | out: hFindFile=0x214550) returned 1 [0192.653] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228f80 [0192.653] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22ba98 [0192.653] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2309f8 [0192.653] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227e40 [0192.653] FindFirstFileW (in: lpFileName="C:\\\\$GetCurrent\\Logs\\*", lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0xbc173b97, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xbc173b97, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x190, dwReserved1=0x1f0000, cFileName=".", cAlternateFileName="")) returned 0x214490 [0192.653] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0192.654] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227e40 | out: hHeap=0x1f0000) returned 1 [0192.654] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0192.654] FindNextFileW (in: hFindFile=0x214490, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0xbc173b97, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xbc173b97, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x190, dwReserved1=0x1f0000, cFileName="..", cAlternateFileName="")) returned 1 [0192.654] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228150 [0192.654] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0192.654] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0192.654] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0192.654] FindNextFileW (in: hFindFile=0x214490, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x542c8aac, ftLastAccessTime.dwHighDateTime=0x1d3273a, ftLastWriteTime.dwLowDateTime=0xbc4f075d, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x1, dwReserved0=0x190, dwReserved1=0x1f0000, cFileName="downlevel_2017_09_07_02_02_39_766.log", cAlternateFileName="DOWNLE~1.LOG")) returned 1 [0192.654] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2252e8 [0192.654] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0192.654] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229ad8 [0192.654] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0192.655] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228150 | out: hHeap=0x1f0000) returned 1 [0192.655] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2252e8 | out: hHeap=0x1f0000) returned 1 [0192.655] CreateFileW (lpFileName="C:\\\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log" (normalized: "c:\\$getcurrent\\logs\\downlevel_2017_09_07_02_02_39_766.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0192.656] GetFileType (hFile=0x1d8) returned 0x1 [0192.656] CloseHandle (hObject=0x1d8) returned 1 [0192.657] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2298b8 [0192.657] GetFileAttributesExW (in: lpFileName="C:\\\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log" (normalized: "c:\\$getcurrent\\logs\\downlevel_2017_09_07_02_02_39_766.log"), fInfoLevelId=0x0, lpFileInformation=0x22bebd4 | out: lpFileInformation=0x22bebd4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x542c8aac, ftLastAccessTime.dwHighDateTime=0x1d3273a, ftLastWriteTime.dwLowDateTime=0xbc4f075d, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x1)) returned 1 [0192.657] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2298b8 | out: hHeap=0x1f0000) returned 1 [0192.657] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a4f0 [0192.657] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a4f0 | out: hHeap=0x1f0000) returned 1 [0192.657] FindNextFileW (in: hFindFile=0x214490, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc17291e, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xbc17291e, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xbc1889f5, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xa6c2, dwReserved0=0x190, dwReserved1=0x1f0000, cFileName="downlevel_2017_09_07_02_02_39_766.log.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="DOWNLE~1.ODV")) returned 1 [0192.657] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x2007c8 [0192.657] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228230 [0192.657] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x22d368 [0192.657] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228230 | out: hHeap=0x1f0000) returned 1 [0192.658] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229ad8 | out: hHeap=0x1f0000) returned 1 [0192.658] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2007c8 | out: hHeap=0x1f0000) returned 1 [0192.658] CreateFileW (lpFileName="C:\\\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\$getcurrent\\logs\\downlevel_2017_09_07_02_02_39_766.log.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0192.658] GetFileType (hFile=0x1d8) returned 0x1 [0192.768] CloseHandle (hObject=0x1d8) returned 1 [0192.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x217038 [0192.769] GetFileAttributesExW (in: lpFileName="C:\\\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\$getcurrent\\logs\\downlevel_2017_09_07_02_02_39_766.log.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x22bebd4 | out: lpFileInformation=0x22bebd4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc17291e, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xbc17291e, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xbc677ee9, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xa7c5)) returned 1 [0192.769] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0192.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x217038 [0192.769] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0192.769] FindNextFileW (in: hFindFile=0x214490, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x973abb0f, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x980eecb6, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1774, dwReserved0=0x190, dwReserved1=0x1f0000, cFileName="oobe_2017_09_07_03_08_57_737.log", cAlternateFileName="OOBE_2~1.LOG")) returned 1 [0192.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x21ae50 [0192.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0192.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x214fe8 [0192.769] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0192.769] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d368 | out: hHeap=0x1f0000) returned 1 [0192.769] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ae50 | out: hHeap=0x1f0000) returned 1 [0192.846] CreateFileW (lpFileName="C:\\\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log" (normalized: "c:\\$getcurrent\\logs\\oobe_2017_09_07_03_08_57_737.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0192.847] GetFileType (hFile=0x1e4) returned 0x1 [0192.847] CloseHandle (hObject=0x1e4) returned 1 [0192.847] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x214d90 [0192.847] GetFileAttributesExW (in: lpFileName="C:\\\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log" (normalized: "c:\\$getcurrent\\logs\\oobe_2017_09_07_03_08_57_737.log"), fInfoLevelId=0x0, lpFileInformation=0x22bebd4 | out: lpFileInformation=0x22bebd4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x973abb0f, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x980eecb6, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1774)) returned 1 [0192.847] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d90 | out: hHeap=0x1f0000) returned 1 [0192.847] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x214b38 [0192.847] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214b38 | out: hHeap=0x1f0000) returned 1 [0192.847] FindNextFileW (in: hFindFile=0x214490, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c5a0a89, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x9c5a0a89, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xbb3747bd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x190, dwReserved1=0x1f0000, cFileName="PartnerSetupCompleteResult.log", cAlternateFileName="PARTNE~1.LOG")) returned 1 [0192.847] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234aa0 [0192.847] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228188 [0192.847] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x214e08 [0192.848] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228188 | out: hHeap=0x1f0000) returned 1 [0192.848] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214fe8 | out: hHeap=0x1f0000) returned 1 [0192.848] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234aa0 | out: hHeap=0x1f0000) returned 1 [0192.848] CreateFileW (lpFileName="C:\\\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log" (normalized: "c:\\$getcurrent\\logs\\partnersetupcompleteresult.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0192.848] GetFileType (hFile=0x1e4) returned 0x1 [0192.848] CloseHandle (hObject=0x1e4) returned 1 [0192.848] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x214f70 [0192.848] GetFileAttributesExW (in: lpFileName="C:\\\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log" (normalized: "c:\\$getcurrent\\logs\\partnersetupcompleteresult.log"), fInfoLevelId=0x0, lpFileInformation=0x22bebd4 | out: lpFileInformation=0x22bebd4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c5a0a89, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x9c5a0a89, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xbb3747bd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x28)) returned 1 [0192.848] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f70 | out: hHeap=0x1f0000) returned 1 [0192.848] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x214f70 [0192.848] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f70 | out: hHeap=0x1f0000) returned 1 [0192.848] FindNextFileW (in: hFindFile=0x214490, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c5a0a89, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x9c5a0a89, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xbb3747bd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x190, dwReserved1=0x1f0000, cFileName="PartnerSetupCompleteResult.log", cAlternateFileName="PARTNE~1.LOG")) returned 0 [0192.849] FindClose (in: hFindFile=0x214490 | out: hFindFile=0x214490) returned 1 [0192.849] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214e08 | out: hHeap=0x1f0000) returned 1 [0192.849] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2309f8 | out: hHeap=0x1f0000) returned 1 [0192.849] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ba98 | out: hHeap=0x1f0000) returned 1 [0192.849] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228f80 | out: hHeap=0x1f0000) returned 1 [0192.849] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234818 [0192.849] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22ba98 [0192.849] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x226ec0 [0192.849] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2347d0 [0192.849] FindFirstFileW (in: lpFileName="C:\\\\$GetCurrent\\SafeOS\\*", lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x190, dwReserved1=0x1f0000, cFileName=".", cAlternateFileName="")) returned 0x214810 [0192.849] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228038 [0192.849] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x226198 [0192.849] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228038 | out: hHeap=0x1f0000) returned 1 [0192.849] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2347d0 | out: hHeap=0x1f0000) returned 1 [0192.849] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0192.849] FindNextFileW (in: hFindFile=0x214810, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x190, dwReserved1=0x1f0000, cFileName="..", cAlternateFileName="")) returned 1 [0192.849] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227e40 [0192.849] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x226238 [0192.850] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227e40 | out: hHeap=0x1f0000) returned 1 [0192.850] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226198 | out: hHeap=0x1f0000) returned 1 [0192.850] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0192.850] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0192.850] FindNextFileW (in: hFindFile=0x214810, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9568f13f, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x9568f13f, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0xfb529700, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x232c8, dwReserved0=0x190, dwReserved1=0x1f0000, cFileName="GetCurrentOOBE.dll", cAlternateFileName="GETCUR~1.DLL")) returned 1 [0192.850] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228038 [0192.850] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227bd8 [0192.850] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22abe0 [0192.850] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227bd8 | out: hHeap=0x1f0000) returned 1 [0192.850] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226238 | out: hHeap=0x1f0000) returned 1 [0192.850] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228038 | out: hHeap=0x1f0000) returned 1 [0192.850] CreateFileW (lpFileName="C:\\\\$GetCurrent\\SafeOS\\GetCurrentOOBE.dll" (normalized: "c:\\$getcurrent\\safeos\\getcurrentoobe.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0192.850] GetFileType (hFile=0x1e4) returned 0x1 [0192.850] CloseHandle (hObject=0x1e4) returned 1 [0192.850] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ac48 [0192.851] GetFileAttributesExW (in: lpFileName="C:\\\\$GetCurrent\\SafeOS\\GetCurrentOOBE.dll" (normalized: "c:\\$getcurrent\\safeos\\getcurrentoobe.dll"), fInfoLevelId=0x0, lpFileInformation=0x22bebd4 | out: lpFileInformation=0x22bebd4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9568f13f, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x9568f13f, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0xfb529700, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x232c8)) returned 1 [0192.851] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ac48 | out: hHeap=0x1f0000) returned 1 [0192.851] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ac48 [0192.851] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ac48 | out: hHeap=0x1f0000) returned 1 [0192.851] FindNextFileW (in: hFindFile=0x214810, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956819aa, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x956819aa, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x980eecb6, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x9c, dwReserved0=0x190, dwReserved1=0x1f0000, cFileName="GetCurrentRollback.ini", cAlternateFileName="GETCUR~1.INI")) returned 1 [0192.851] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228188 [0192.851] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227e40 [0192.851] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a838 [0192.851] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227e40 | out: hHeap=0x1f0000) returned 1 [0192.851] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22abe0 | out: hHeap=0x1f0000) returned 1 [0192.851] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228188 | out: hHeap=0x1f0000) returned 1 [0192.851] CreateFileW (lpFileName="C:\\\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini" (normalized: "c:\\$getcurrent\\safeos\\getcurrentrollback.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0192.851] GetFileType (hFile=0x1e4) returned 0x1 [0192.852] CloseHandle (hObject=0x1e4) returned 1 [0192.852] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a9d8 [0192.852] GetFileAttributesExW (in: lpFileName="C:\\\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini" (normalized: "c:\\$getcurrent\\safeos\\getcurrentrollback.ini"), fInfoLevelId=0x0, lpFileInformation=0x22bebd4 | out: lpFileInformation=0x22bebd4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956819aa, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x956819aa, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x980eecb6, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x9c)) returned 1 [0192.852] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a9d8 | out: hHeap=0x1f0000) returned 1 [0192.852] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a8a0 [0192.852] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a8a0 | out: hHeap=0x1f0000) returned 1 [0192.852] FindNextFileW (in: hFindFile=0x214810, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x54acc791, ftLastAccessTime.dwHighDateTime=0x1d3273a, ftLastWriteTime.dwLowDateTime=0x54acc791, ftLastWriteTime.dwHighDateTime=0x1d3273a, nFileSizeHigh=0x0, nFileSizeLow=0x241, dwReserved0=0x190, dwReserved1=0x1f0000, cFileName="PartnerSetupComplete.cmd", cAlternateFileName="PARTNE~1.CMD")) returned 1 [0192.852] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234740 [0192.852] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0192.852] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a970 [0192.852] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0192.852] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a838 | out: hHeap=0x1f0000) returned 1 [0192.852] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234740 | out: hHeap=0x1f0000) returned 1 [0192.852] CreateFileW (lpFileName="C:\\\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\partnersetupcomplete.cmd"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0192.852] GetFileType (hFile=0x1e4) returned 0x1 [0192.853] CloseHandle (hObject=0x1e4) returned 1 [0192.853] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a9d8 [0192.853] GetFileAttributesExW (in: lpFileName="C:\\\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\partnersetupcomplete.cmd"), fInfoLevelId=0x0, lpFileInformation=0x22bebd4 | out: lpFileInformation=0x22bebd4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x54acc791, ftLastAccessTime.dwHighDateTime=0x1d3273a, ftLastWriteTime.dwLowDateTime=0x54acc791, ftLastWriteTime.dwHighDateTime=0x1d3273a, nFileSizeHigh=0x0, nFileSizeLow=0x241)) returned 1 [0192.853] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a9d8 | out: hHeap=0x1f0000) returned 1 [0192.853] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a838 [0192.853] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a838 | out: hHeap=0x1f0000) returned 1 [0192.853] FindNextFileW (in: hFindFile=0x214810, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9575af11, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9577d1ec, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x4a, dwReserved0=0x190, dwReserved1=0x1f0000, cFileName="preoobe.cmd", cAlternateFileName="")) returned 1 [0192.853] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b840 [0192.853] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227e40 [0192.853] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x215860 [0192.853] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227e40 | out: hHeap=0x1f0000) returned 1 [0192.853] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a970 | out: hHeap=0x1f0000) returned 1 [0192.853] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b840 | out: hHeap=0x1f0000) returned 1 [0192.853] CreateFileW (lpFileName="C:\\\\$GetCurrent\\SafeOS\\preoobe.cmd" (normalized: "c:\\$getcurrent\\safeos\\preoobe.cmd"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0192.854] GetFileType (hFile=0x1e4) returned 0x1 [0192.854] CloseHandle (hObject=0x1e4) returned 1 [0192.854] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x21ae50 [0192.854] GetFileAttributesExW (in: lpFileName="C:\\\\$GetCurrent\\SafeOS\\preoobe.cmd" (normalized: "c:\\$getcurrent\\safeos\\preoobe.cmd"), fInfoLevelId=0x0, lpFileInformation=0x22bebd4 | out: lpFileInformation=0x22bebd4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9575af11, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9577d1ec, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x4a)) returned 1 [0192.854] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ae50 | out: hHeap=0x1f0000) returned 1 [0192.854] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x21ae50 [0192.854] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ae50 | out: hHeap=0x1f0000) returned 1 [0192.854] FindNextFileW (in: hFindFile=0x214810, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x957833a7, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x957833a7, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9578472e, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x133, dwReserved0=0x190, dwReserved1=0x1f0000, cFileName="SetupComplete.cmd", cAlternateFileName="SETUPC~1.CMD")) returned 1 [0192.854] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227bd8 [0192.854] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228230 [0192.854] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22aa40 [0192.854] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228230 | out: hHeap=0x1f0000) returned 1 [0192.854] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215860 | out: hHeap=0x1f0000) returned 1 [0192.854] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227bd8 | out: hHeap=0x1f0000) returned 1 [0192.855] CreateFileW (lpFileName="C:\\\\$GetCurrent\\SafeOS\\SetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\setupcomplete.cmd"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0192.855] GetFileType (hFile=0x1e4) returned 0x1 [0192.855] CloseHandle (hObject=0x1e4) returned 1 [0192.856] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a970 [0192.856] GetFileAttributesExW (in: lpFileName="C:\\\\$GetCurrent\\SafeOS\\SetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\setupcomplete.cmd"), fInfoLevelId=0x0, lpFileInformation=0x22bebd4 | out: lpFileInformation=0x22bebd4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x957833a7, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x957833a7, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9578472e, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x133)) returned 1 [0192.856] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a970 | out: hHeap=0x1f0000) returned 1 [0192.856] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22acb0 [0192.856] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22acb0 | out: hHeap=0x1f0000) returned 1 [0192.856] FindNextFileW (in: hFindFile=0x214810, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x957833a7, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x957833a7, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9578472e, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x133, dwReserved0=0x190, dwReserved1=0x1f0000, cFileName="SetupComplete.cmd", cAlternateFileName="SETUPC~1.CMD")) returned 0 [0192.856] FindClose (in: hFindFile=0x214810 | out: hFindFile=0x214810) returned 1 [0192.856] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aa40 | out: hHeap=0x1f0000) returned 1 [0192.856] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226ec0 | out: hHeap=0x1f0000) returned 1 [0192.856] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ba98 | out: hHeap=0x1f0000) returned 1 [0192.856] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234818 | out: hHeap=0x1f0000) returned 1 [0192.856] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2281c0 | out: hHeap=0x1f0000) returned 1 [0192.856] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227cf0 | out: hHeap=0x1f0000) returned 1 [0192.856] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227d28 | out: hHeap=0x1f0000) returned 1 [0192.857] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227eb0 | out: hHeap=0x1f0000) returned 1 [0192.857] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230860 | out: hHeap=0x1f0000) returned 1 [0192.857] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b980 | out: hHeap=0x1f0000) returned 1 [0192.857] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229178 | out: hHeap=0x1f0000) returned 1 [0192.857] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2345d8 [0192.857] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b980 [0192.857] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x226d28 [0192.857] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228038 [0192.857] FindFirstFileW (in: lpFileName="C:\\\\$Recycle.Bin\\*", lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName=".", cAlternateFileName="")) returned 0x214610 [0192.857] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2281f8 [0192.857] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228038 | out: hHeap=0x1f0000) returned 1 [0192.857] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0192.857] FindNextFileW (in: hFindFile=0x214610, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="..", cAlternateFileName="")) returned 1 [0192.858] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0192.858] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2281f8 | out: hHeap=0x1f0000) returned 1 [0192.858] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0192.858] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0192.858] FindNextFileW (in: hFindFile=0x214610, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="S-1-5-18", cAlternateFileName="")) returned 1 [0192.858] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22ba98 [0192.858] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227cf0 [0192.858] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x226008 [0192.858] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227cf0 | out: hHeap=0x1f0000) returned 1 [0192.858] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0192.858] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ba98 | out: hHeap=0x1f0000) returned 1 [0192.858] lstrcmpW (lpString1="S-1-5-18", lpString2=".") returned 1 [0192.858] lstrcmpW (lpString1="S-1-5-18", lpString2="..") returned 1 [0192.858] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x205130 [0192.858] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2348f0 [0192.858] FindNextFileW (in: hFindFile=0x214610, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x11a5eef8, ftLastAccessTime.dwHighDateTime=0x1d3375b, ftLastWriteTime.dwLowDateTime=0x11a5eef8, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="S-1-5-21-1051304884-625712362-2192934891-1000", cAlternateFileName="S-1-5-~1")) returned 1 [0192.858] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ab78 [0192.858] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228188 [0192.859] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a4f0 [0192.859] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228188 | out: hHeap=0x1f0000) returned 1 [0192.859] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226008 | out: hHeap=0x1f0000) returned 1 [0192.859] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab78 | out: hHeap=0x1f0000) returned 1 [0192.859] lstrcmpW (lpString1="S-1-5-21-1051304884-625712362-2192934891-1000", lpString2=".") returned 1 [0192.859] lstrcmpW (lpString1="S-1-5-21-1051304884-625712362-2192934891-1000", lpString2="..") returned 1 [0192.859] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227cf0 [0192.859] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229e90 [0192.859] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205130 | out: hHeap=0x1f0000) returned 1 [0192.859] FindNextFileW (in: hFindFile=0x214610, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x11a5eef8, ftLastAccessTime.dwHighDateTime=0x1d3375b, ftLastWriteTime.dwLowDateTime=0x11a5eef8, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="S-1-5-21-1051304884-625712362-2192934891-1000", cAlternateFileName="S-1-5-~1")) returned 0 [0192.859] FindClose (in: hFindFile=0x214610 | out: hFindFile=0x214610) returned 1 [0192.859] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234620 [0192.859] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b840 [0192.859] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x226ec0 [0192.859] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234b30 [0192.859] FindFirstFileW (in: lpFileName="C:\\\\$Recycle.Bin\\S-1-5-18\\*", lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22bf15c, dwReserved1=0x1f0000, cFileName=".", cAlternateFileName="")) returned 0x214390 [0192.860] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234668 [0192.860] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b30 | out: hHeap=0x1f0000) returned 1 [0192.860] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0192.860] FindNextFileW (in: hFindFile=0x214390, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22bf15c, dwReserved1=0x1f0000, cFileName="..", cAlternateFileName="")) returned 1 [0192.860] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2344b8 [0192.860] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234668 | out: hHeap=0x1f0000) returned 1 [0192.860] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0192.860] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0192.860] FindNextFileW (in: hFindFile=0x214390, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x22bf15c, dwReserved1=0x1f0000, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0192.860] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22ba98 [0192.860] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234668 [0192.860] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x22ae50 [0192.860] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234668 | out: hHeap=0x1f0000) returned 1 [0192.860] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2344b8 | out: hHeap=0x1f0000) returned 1 [0192.860] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ba98 | out: hHeap=0x1f0000) returned 1 [0192.861] CreateFileW (lpFileName="C:\\\\$Recycle.Bin\\S-1-5-18\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-18\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0192.861] GetFileType (hFile=0x1e4) returned 0x1 [0192.861] CloseHandle (hObject=0x1e4) returned 1 [0192.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x215860 [0192.861] GetFileAttributesExW (in: lpFileName="C:\\\\$Recycle.Bin\\S-1-5-18\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-18\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x22bebd4 | out: lpFileInformation=0x22bebd4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x81)) returned 1 [0192.862] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215860 | out: hHeap=0x1f0000) returned 1 [0192.862] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x215860 [0192.862] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215860 | out: hHeap=0x1f0000) returned 1 [0192.862] FindNextFileW (in: hFindFile=0x214390, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x22bf15c, dwReserved1=0x1f0000, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0192.862] FindClose (in: hFindFile=0x214390 | out: hFindFile=0x214390) returned 1 [0192.862] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ae50 | out: hHeap=0x1f0000) returned 1 [0192.862] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226ec0 | out: hHeap=0x1f0000) returned 1 [0192.862] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b840 | out: hHeap=0x1f0000) returned 1 [0192.862] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234620 | out: hHeap=0x1f0000) returned 1 [0192.862] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2348a8 [0192.863] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22ba98 [0192.863] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x226ec0 [0192.863] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x228378 [0192.863] FindFirstFileW (in: lpFileName="C:\\\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\*", lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x11a5eef8, ftLastAccessTime.dwHighDateTime=0x1d3375b, ftLastWriteTime.dwLowDateTime=0x11a5eef8, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22bf15c, dwReserved1=0x1f0000, cFileName=".", cAlternateFileName="")) returned 0x214810 [0192.863] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a578 [0192.863] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22cdf0 [0192.863] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a578 | out: hHeap=0x1f0000) returned 1 [0192.863] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228378 | out: hHeap=0x1f0000) returned 1 [0192.863] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0192.863] FindNextFileW (in: hFindFile=0x214810, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x11a5eef8, ftLastAccessTime.dwHighDateTime=0x1d3375b, ftLastWriteTime.dwLowDateTime=0x11a5eef8, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22bf15c, dwReserved1=0x1f0000, cFileName="..", cAlternateFileName="")) returned 1 [0192.863] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a468 [0192.863] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ceb8 [0192.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a468 | out: hHeap=0x1f0000) returned 1 [0192.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22cdf0 | out: hHeap=0x1f0000) returned 1 [0192.864] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0192.864] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0192.864] FindNextFileW (in: hFindFile=0x214810, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcb9438a8, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xcb9438a8, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x22bf15c, dwReserved1=0x1f0000, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0192.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b840 [0192.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a1c0 [0192.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22cdf0 [0192.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a1c0 | out: hHeap=0x1f0000) returned 1 [0192.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ceb8 | out: hHeap=0x1f0000) returned 1 [0192.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b840 | out: hHeap=0x1f0000) returned 1 [0192.864] CreateFileW (lpFileName="C:\\\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0192.865] GetFileType (hFile=0x1e4) returned 0x1 [0192.865] CloseHandle (hObject=0x1e4) returned 1 [0192.865] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a0e0 [0192.865] GetFileAttributesExW (in: lpFileName="C:\\\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x22bebd4 | out: lpFileInformation=0x22bebd4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcb9438a8, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xcb9438a8, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x81)) returned 1 [0192.866] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a0e0 | out: hHeap=0x1f0000) returned 1 [0192.866] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219c48 [0192.866] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219c48 | out: hHeap=0x1f0000) returned 1 [0192.866] FindNextFileW (in: hFindFile=0x214810, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcb9438a8, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xcb9438a8, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x22bf15c, dwReserved1=0x1f0000, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0192.866] FindClose (in: hFindFile=0x214810 | out: hFindFile=0x214810) returned 1 [0192.866] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22cdf0 | out: hHeap=0x1f0000) returned 1 [0192.866] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226ec0 | out: hHeap=0x1f0000) returned 1 [0192.866] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ba98 | out: hHeap=0x1f0000) returned 1 [0192.866] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2348a8 | out: hHeap=0x1f0000) returned 1 [0192.866] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a4f0 | out: hHeap=0x1f0000) returned 1 [0192.866] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2348f0 | out: hHeap=0x1f0000) returned 1 [0192.866] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229e90 | out: hHeap=0x1f0000) returned 1 [0192.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227cf0 | out: hHeap=0x1f0000) returned 1 [0192.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226d28 | out: hHeap=0x1f0000) returned 1 [0192.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b980 | out: hHeap=0x1f0000) returned 1 [0192.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2345d8 | out: hHeap=0x1f0000) returned 1 [0192.867] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234620 [0192.867] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22ba98 [0192.867] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x227520 [0192.867] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2347d0 [0192.867] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\*", lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf39a4e7e, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xbc74b1b3, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName=".", cAlternateFileName="")) returned 0x2141d0 [0192.867] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228188 [0192.868] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225d88 [0192.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228188 | out: hHeap=0x1f0000) returned 1 [0192.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2347d0 | out: hHeap=0x1f0000) returned 1 [0192.868] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0192.868] FindNextFileW (in: hFindFile=0x2141d0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf39a4e7e, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xbc74b1b3, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="..", cAlternateFileName="")) returned 1 [0192.868] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228188 [0192.868] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225c48 [0192.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228188 | out: hHeap=0x1f0000) returned 1 [0192.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225d88 | out: hHeap=0x1f0000) returned 1 [0192.868] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0192.868] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0192.868] FindNextFileW (in: hFindFile=0x2141d0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="1025", cAlternateFileName="")) returned 1 [0192.868] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0192.868] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x226328 [0192.869] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0192.869] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225c48 | out: hHeap=0x1f0000) returned 1 [0192.869] lstrcmpW (lpString1="1025", lpString2=".") returned 1 [0192.869] lstrcmpW (lpString1="1025", lpString2="..") returned 1 [0192.869] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x2052f0 [0192.869] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2344b8 [0192.869] FindNextFileW (in: hFindFile=0x2141d0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="1028", cAlternateFileName="")) returned 1 [0192.869] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2281c0 [0192.869] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x226198 [0192.869] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2281c0 | out: hHeap=0x1f0000) returned 1 [0192.869] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226328 | out: hHeap=0x1f0000) returned 1 [0192.869] lstrcmpW (lpString1="1028", lpString2=".") returned 1 [0192.869] lstrcmpW (lpString1="1028", lpString2="..") returned 1 [0192.869] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0192.869] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234aa0 [0192.869] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2052f0 | out: hHeap=0x1f0000) returned 1 [0192.870] FindNextFileW (in: hFindFile=0x2141d0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="1029", cAlternateFileName="")) returned 1 [0192.870] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227cf0 [0192.870] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x2261e8 [0192.870] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227cf0 | out: hHeap=0x1f0000) returned 1 [0192.870] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226198 | out: hHeap=0x1f0000) returned 1 [0192.870] lstrcmpW (lpString1="1029", lpString2=".") returned 1 [0192.870] lstrcmpW (lpString1="1029", lpString2="..") returned 1 [0192.870] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x48) returned 0x225fb8 [0192.870] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234740 [0192.870] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0192.870] FindNextFileW (in: hFindFile=0x2141d0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="1030", cAlternateFileName="")) returned 1 [0192.870] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227cf0 [0192.870] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225f68 [0192.870] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227cf0 | out: hHeap=0x1f0000) returned 1 [0192.870] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2261e8 | out: hHeap=0x1f0000) returned 1 [0192.871] lstrcmpW (lpString1="1030", lpString2=".") returned 1 [0192.871] lstrcmpW (lpString1="1030", lpString2="..") returned 1 [0192.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22abe0 [0192.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234548 [0192.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225fb8 | out: hHeap=0x1f0000) returned 1 [0192.871] FindNextFileW (in: hFindFile=0x2141d0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="1031", cAlternateFileName="")) returned 1 [0192.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228188 [0192.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x226008 [0192.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228188 | out: hHeap=0x1f0000) returned 1 [0192.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225f68 | out: hHeap=0x1f0000) returned 1 [0192.871] lstrcmpW (lpString1="1031", lpString2=".") returned 1 [0192.871] lstrcmpW (lpString1="1031", lpString2="..") returned 1 [0192.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x228378 [0192.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234ae8 [0192.872] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22abe0 | out: hHeap=0x1f0000) returned 1 [0192.872] FindNextFileW (in: hFindFile=0x2141d0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="1032", cAlternateFileName="")) returned 1 [0192.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228188 [0192.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225f68 [0192.872] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228188 | out: hHeap=0x1f0000) returned 1 [0192.872] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226008 | out: hHeap=0x1f0000) returned 1 [0192.872] lstrcmpW (lpString1="1032", lpString2=".") returned 1 [0192.872] lstrcmpW (lpString1="1032", lpString2="..") returned 1 [0192.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234818 [0192.873] FindNextFileW (in: hFindFile=0x2141d0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="1033", cAlternateFileName="")) returned 1 [0192.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228038 [0192.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225e28 [0192.873] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228038 | out: hHeap=0x1f0000) returned 1 [0192.873] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225f68 | out: hHeap=0x1f0000) returned 1 [0192.873] lstrcmpW (lpString1="1033", lpString2=".") returned 1 [0192.873] lstrcmpW (lpString1="1033", lpString2="..") returned 1 [0192.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd8) returned 0x22cdf0 [0192.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234b30 [0192.873] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228378 | out: hHeap=0x1f0000) returned 1 [0192.873] FindNextFileW (in: hFindFile=0x2141d0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="1035", cAlternateFileName="")) returned 1 [0192.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228038 [0192.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x226328 [0192.873] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228038 | out: hHeap=0x1f0000) returned 1 [0192.874] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225e28 | out: hHeap=0x1f0000) returned 1 [0192.874] lstrcmpW (lpString1="1035", lpString2=".") returned 1 [0192.874] lstrcmpW (lpString1="1035", lpString2="..") returned 1 [0192.874] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234788 [0192.874] FindNextFileW (in: hFindFile=0x2141d0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="1036", cAlternateFileName="")) returned 1 [0192.874] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228268 [0192.874] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x226148 [0192.874] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228268 | out: hHeap=0x1f0000) returned 1 [0192.874] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226328 | out: hHeap=0x1f0000) returned 1 [0192.874] lstrcmpW (lpString1="1036", lpString2=".") returned 1 [0192.874] lstrcmpW (lpString1="1036", lpString2="..") returned 1 [0192.874] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2345d8 [0192.874] FindNextFileW (in: hFindFile=0x2141d0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="1037", cAlternateFileName="")) returned 1 [0192.874] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227eb0 [0192.874] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x226328 [0192.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227eb0 | out: hHeap=0x1f0000) returned 1 [0192.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226148 | out: hHeap=0x1f0000) returned 1 [0192.875] lstrcmpW (lpString1="1037", lpString2=".") returned 1 [0192.875] lstrcmpW (lpString1="1037", lpString2="..") returned 1 [0192.875] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x138) returned 0x230860 [0192.875] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234668 [0192.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22cdf0 | out: hHeap=0x1f0000) returned 1 [0192.875] FindNextFileW (in: hFindFile=0x2141d0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="1038", cAlternateFileName="")) returned 1 [0192.875] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228038 [0192.875] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225f18 [0192.876] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228038 | out: hHeap=0x1f0000) returned 1 [0192.876] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226328 | out: hHeap=0x1f0000) returned 1 [0192.876] lstrcmpW (lpString1="1038", lpString2=".") returned 1 [0192.876] lstrcmpW (lpString1="1038", lpString2="..") returned 1 [0192.876] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2347d0 [0192.876] FindNextFileW (in: hFindFile=0x2141d0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="1040", cAlternateFileName="")) returned 1 [0192.876] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227d28 [0192.876] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x226198 [0192.876] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227d28 | out: hHeap=0x1f0000) returned 1 [0192.876] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225f18 | out: hHeap=0x1f0000) returned 1 [0192.876] lstrcmpW (lpString1="1040", lpString2=".") returned 1 [0192.876] lstrcmpW (lpString1="1040", lpString2="..") returned 1 [0192.876] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234500 [0192.877] FindNextFileW (in: hFindFile=0x2141d0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="1041", cAlternateFileName="")) returned 1 [0192.877] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228038 [0192.877] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225e28 [0192.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228038 | out: hHeap=0x1f0000) returned 1 [0192.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226198 | out: hHeap=0x1f0000) returned 1 [0192.877] lstrcmpW (lpString1="1041", lpString2=".") returned 1 [0192.877] lstrcmpW (lpString1="1041", lpString2="..") returned 1 [0192.877] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346b0 [0192.877] FindNextFileW (in: hFindFile=0x2141d0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="1042", cAlternateFileName="")) returned 1 [0192.877] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227cf0 [0192.877] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225f68 [0192.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227cf0 | out: hHeap=0x1f0000) returned 1 [0192.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225e28 | out: hHeap=0x1f0000) returned 1 [0192.878] lstrcmpW (lpString1="1042", lpString2=".") returned 1 [0192.878] lstrcmpW (lpString1="1042", lpString2="..") returned 1 [0192.878] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c8) returned 0x22cdf0 [0192.878] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2348a8 [0192.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230860 | out: hHeap=0x1f0000) returned 1 [0192.878] FindNextFileW (in: hFindFile=0x2141d0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="1043", cAlternateFileName="")) returned 1 [0192.878] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227cf0 [0192.878] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x2260f8 [0192.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227cf0 | out: hHeap=0x1f0000) returned 1 [0192.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225f68 | out: hHeap=0x1f0000) returned 1 [0192.878] lstrcmpW (lpString1="1043", lpString2=".") returned 1 [0192.878] lstrcmpW (lpString1="1043", lpString2="..") returned 1 [0192.878] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2348f0 [0192.878] FindNextFileW (in: hFindFile=0x2141d0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="1044", cAlternateFileName="")) returned 1 [0192.879] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228038 [0192.879] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x226148 [0192.879] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228038 | out: hHeap=0x1f0000) returned 1 [0192.879] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2260f8 | out: hHeap=0x1f0000) returned 1 [0192.879] lstrcmpW (lpString1="1044", lpString2=".") returned 1 [0192.879] lstrcmpW (lpString1="1044", lpString2="..") returned 1 [0192.879] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228f80 [0192.879] FindNextFileW (in: hFindFile=0x2141d0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="1045", cAlternateFileName="")) returned 1 [0192.879] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228188 [0192.879] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x226008 [0192.879] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228188 | out: hHeap=0x1f0000) returned 1 [0192.879] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226148 | out: hHeap=0x1f0000) returned 1 [0192.879] lstrcmpW (lpString1="1045", lpString2=".") returned 1 [0192.879] lstrcmpW (lpString1="1045", lpString2="..") returned 1 [0192.879] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229178 [0192.879] FindNextFileW (in: hFindFile=0x2141d0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="1046", cAlternateFileName="")) returned 1 [0192.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228230 [0192.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225e28 [0192.880] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228230 | out: hHeap=0x1f0000) returned 1 [0192.880] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226008 | out: hHeap=0x1f0000) returned 1 [0192.880] lstrcmpW (lpString1="1046", lpString2=".") returned 1 [0192.880] lstrcmpW (lpString1="1046", lpString2="..") returned 1 [0192.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229250 [0192.880] FindNextFileW (in: hFindFile=0x2141d0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="1049", cAlternateFileName="")) returned 1 [0192.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228038 [0192.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x226198 [0192.880] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228038 | out: hHeap=0x1f0000) returned 1 [0192.880] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225e28 | out: hHeap=0x1f0000) returned 1 [0192.880] lstrcmpW (lpString1="1049", lpString2=".") returned 1 [0192.880] lstrcmpW (lpString1="1049", lpString2="..") returned 1 [0192.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2290e8 [0192.880] FindNextFileW (in: hFindFile=0x2141d0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="1053", cAlternateFileName="")) returned 1 [0192.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227cf0 [0192.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x2261e8 [0192.881] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227cf0 | out: hHeap=0x1f0000) returned 1 [0192.881] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226198 | out: hHeap=0x1f0000) returned 1 [0192.881] lstrcmpW (lpString1="1053", lpString2=".") returned 1 [0192.881] lstrcmpW (lpString1="1053", lpString2="..") returned 1 [0192.881] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2a0) returned 0x230860 [0192.881] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229328 [0192.881] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22cdf0 | out: hHeap=0x1f0000) returned 1 [0192.881] FindNextFileW (in: hFindFile=0x2141d0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="1055", cAlternateFileName="")) returned 1 [0192.881] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227cf0 [0192.881] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x2260a8 [0192.881] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227cf0 | out: hHeap=0x1f0000) returned 1 [0192.881] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2261e8 | out: hHeap=0x1f0000) returned 1 [0192.881] lstrcmpW (lpString1="1055", lpString2=".") returned 1 [0192.881] lstrcmpW (lpString1="1055", lpString2="..") returned 1 [0192.881] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229370 [0192.881] FindNextFileW (in: hFindFile=0x2141d0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="2052", cAlternateFileName="")) returned 1 [0192.881] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227e40 [0192.881] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225ce8 [0192.881] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227e40 | out: hHeap=0x1f0000) returned 1 [0192.881] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2260a8 | out: hHeap=0x1f0000) returned 1 [0192.881] lstrcmpW (lpString1="2052", lpString2=".") returned 1 [0192.881] lstrcmpW (lpString1="2052", lpString2="..") returned 1 [0192.882] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228d40 [0192.882] FindNextFileW (in: hFindFile=0x2141d0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="2070", cAlternateFileName="")) returned 1 [0192.882] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227eb0 [0192.882] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225e78 [0192.882] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227eb0 | out: hHeap=0x1f0000) returned 1 [0192.882] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225ce8 | out: hHeap=0x1f0000) returned 1 [0192.882] lstrcmpW (lpString1="2070", lpString2=".") returned 1 [0192.882] lstrcmpW (lpString1="2070", lpString2="..") returned 1 [0192.882] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x214098 [0192.882] FindNextFileW (in: hFindFile=0x2141d0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="3076", cAlternateFileName="")) returned 1 [0192.882] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228188 [0192.882] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225bf8 [0192.882] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228188 | out: hHeap=0x1f0000) returned 1 [0192.882] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225e78 | out: hHeap=0x1f0000) returned 1 [0192.882] lstrcmpW (lpString1="3076", lpString2=".") returned 1 [0192.882] lstrcmpW (lpString1="3076", lpString2="..") returned 1 [0192.882] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222a30 [0192.882] FindNextFileW (in: hFindFile=0x2141d0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="3082", cAlternateFileName="")) returned 1 [0192.882] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228038 [0192.882] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225c48 [0192.882] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228038 | out: hHeap=0x1f0000) returned 1 [0192.882] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225bf8 | out: hHeap=0x1f0000) returned 1 [0192.882] lstrcmpW (lpString1="3082", lpString2=".") returned 1 [0192.883] lstrcmpW (lpString1="3082", lpString2="..") returned 1 [0192.883] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2225f8 [0192.990] FindNextFileW (in: hFindFile=0x2141d0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Client", cAlternateFileName="")) returned 1 [0192.990] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227bd8 [0192.990] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225f18 [0192.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227bd8 | out: hHeap=0x1f0000) returned 1 [0192.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225c48 | out: hHeap=0x1f0000) returned 1 [0192.990] lstrcmpW (lpString1="Client", lpString2=".") returned 1 [0192.990] lstrcmpW (lpString1="Client", lpString2="..") returned 1 [0192.990] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222b08 [0192.991] FindNextFileW (in: hFindFile=0x2141d0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbc518d00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbc518d00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbc518d00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x3ef6, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="DHtmlHeader.html", cAlternateFileName="DHTMLH~1.HTM")) returned 1 [0192.991] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227bd8 [0192.991] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282d8 [0192.991] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x215860 [0193.154] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282d8 | out: hHeap=0x1f0000) returned 1 [0193.154] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225f18 | out: hHeap=0x1f0000) returned 1 [0193.154] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227bd8 | out: hHeap=0x1f0000) returned 1 [0193.155] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\DHtmlHeader.html" (normalized: "c:\\588bce7c90097ed212\\dhtmlheader.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0193.155] GetFileType (hFile=0x1fc) returned 0x1 [0193.155] CloseHandle (hObject=0x1fc) returned 1 [0193.156] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239a30 [0193.156] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\DHtmlHeader.html" (normalized: "c:\\588bce7c90097ed212\\dhtmlheader.html"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbc518d00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbc518d00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbc518d00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x3ef6)) returned 1 [0193.156] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239a30 | out: hHeap=0x1f0000) returned 1 [0193.156] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239980 [0193.156] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239980 | out: hHeap=0x1f0000) returned 1 [0193.156] FindNextFileW (in: hFindFile=0x2141d0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x159d5, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="DisplayIcon.ico", cAlternateFileName="DISPLA~1.ICO")) returned 1 [0193.156] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b6b0 [0193.157] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228188 [0193.157] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239928 [0193.157] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228188 | out: hHeap=0x1f0000) returned 1 [0193.157] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215860 | out: hHeap=0x1f0000) returned 1 [0193.157] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b6b0 | out: hHeap=0x1f0000) returned 1 [0193.157] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\DisplayIcon.ico" (normalized: "c:\\588bce7c90097ed212\\displayicon.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0193.158] GetFileType (hFile=0x1fc) returned 0x1 [0193.158] CloseHandle (hObject=0x1fc) returned 1 [0193.158] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239a30 [0193.159] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\DisplayIcon.ico" (normalized: "c:\\588bce7c90097ed212\\displayicon.ico"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x159d5)) returned 1 [0193.159] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239a30 | out: hHeap=0x1f0000) returned 1 [0193.159] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239a88 [0193.159] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239a88 | out: hHeap=0x1f0000) returned 1 [0193.159] FindNextFileW (in: hFindFile=0x2141d0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Extended", cAlternateFileName="")) returned 1 [0193.159] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b6d8 [0193.159] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228188 [0193.159] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x2262d8 [0193.159] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228188 | out: hHeap=0x1f0000) returned 1 [0193.159] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239928 | out: hHeap=0x1f0000) returned 1 [0193.159] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b6d8 | out: hHeap=0x1f0000) returned 1 [0193.160] lstrcmpW (lpString1="Extended", lpString2=".") returned 1 [0193.160] lstrcmpW (lpString1="Extended", lpString2="..") returned 1 [0193.160] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222178 [0193.160] FindNextFileW (in: hFindFile=0x2141d0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Graphics", cAlternateFileName="")) returned 1 [0193.160] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b430 [0193.160] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228188 [0193.160] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x226328 [0193.160] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228188 | out: hHeap=0x1f0000) returned 1 [0193.160] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2262d8 | out: hHeap=0x1f0000) returned 1 [0193.160] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b430 | out: hHeap=0x1f0000) returned 1 [0193.160] lstrcmpW (lpString1="Graphics", lpString2=".") returned 1 [0193.161] lstrcmpW (lpString1="Graphics", lpString2="..") returned 1 [0193.161] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2221c0 [0193.161] FindNextFileW (in: hFindFile=0x2141d0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x87910600, ftCreationTime.dwHighDateTime=0x1ca2a27, ftLastAccessTime.dwLowDateTime=0x87910600, ftLastAccessTime.dwHighDateTime=0x1ca2a27, ftLastWriteTime.dwLowDateTime=0x87910600, ftLastWriteTime.dwHighDateTime=0x1ca2a27, nFileSizeHigh=0x0, nFileSizeLow=0xe2c, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="header.bmp", cAlternateFileName="")) returned 1 [0193.161] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b4f8 [0193.161] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0193.161] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239718 [0193.161] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0193.161] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226328 | out: hHeap=0x1f0000) returned 1 [0193.161] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b4f8 | out: hHeap=0x1f0000) returned 1 [0193.162] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\header.bmp" (normalized: "c:\\588bce7c90097ed212\\header.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0193.162] GetFileType (hFile=0x1fc) returned 0x1 [0193.162] CloseHandle (hObject=0x1fc) returned 1 [0193.162] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239ae0 [0193.162] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\header.bmp" (normalized: "c:\\588bce7c90097ed212\\header.bmp"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x87910600, ftCreationTime.dwHighDateTime=0x1ca2a27, ftLastAccessTime.dwLowDateTime=0x87910600, ftLastAccessTime.dwHighDateTime=0x1ca2a27, ftLastWriteTime.dwLowDateTime=0x87910600, ftLastWriteTime.dwHighDateTime=0x1ca2a27, nFileSizeHigh=0x0, nFileSizeLow=0xe2c)) returned 1 [0193.163] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239ae0 | out: hHeap=0x1f0000) returned 1 [0193.163] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239ae0 [0193.163] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239ae0 | out: hHeap=0x1f0000) returned 1 [0193.163] FindNextFileW (in: hFindFile=0x2141d0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x66ea7e00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0x66ea7e00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0x66ea7e00, ftLastWriteTime.dwHighDateTime=0x1cac6e3, nFileSizeHigh=0x0, nFileSizeLow=0xad1384b, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="netfx_Core.mzz", cAlternateFileName="NETFX_~1.MZZ")) returned 1 [0193.163] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b6b0 [0193.163] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0193.163] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2399d8 [0193.163] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0193.163] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239718 | out: hHeap=0x1f0000) returned 1 [0193.163] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b6b0 | out: hHeap=0x1f0000) returned 1 [0193.163] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\netfx_Core.mzz" (normalized: "c:\\588bce7c90097ed212\\netfx_core.mzz"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0193.164] GetFileType (hFile=0x1fc) returned 0x1 [0193.164] CloseHandle (hObject=0x1fc) returned 1 [0193.164] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239668 [0193.164] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\netfx_Core.mzz" (normalized: "c:\\588bce7c90097ed212\\netfx_core.mzz"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x66ea7e00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0x66ea7e00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0x66ea7e00, ftLastWriteTime.dwHighDateTime=0x1cac6e3, nFileSizeHigh=0x0, nFileSizeLow=0xad1384b)) returned 1 [0193.165] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239668 | out: hHeap=0x1f0000) returned 1 [0193.165] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239770 [0193.165] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239770 | out: hHeap=0x1f0000) returned 1 [0193.165] FindNextFileW (in: hFindFile=0x2141d0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xc183da00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0xc183da00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0xc183da00, ftLastWriteTime.dwHighDateTime=0x1cac6e3, nFileSizeHigh=0x0, nFileSizeLow=0x1d0200, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="netfx_Core_x64.msi", cAlternateFileName="NETFX_~1.MSI")) returned 1 [0193.165] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228188 [0193.165] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0193.165] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ab78 [0193.165] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0193.165] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2399d8 | out: hHeap=0x1f0000) returned 1 [0193.165] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228188 | out: hHeap=0x1f0000) returned 1 [0193.166] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\netfx_Core_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0193.166] GetFileType (hFile=0x1fc) returned 0x1 [0193.166] CloseHandle (hObject=0x1fc) returned 1 [0193.167] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a908 [0193.167] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\netfx_Core_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x64.msi"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xc183da00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0xc183da00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0xc183da00, ftLastWriteTime.dwHighDateTime=0x1cac6e3, nFileSizeHigh=0x0, nFileSizeLow=0x1d0200)) returned 1 [0193.167] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a908 | out: hHeap=0x1f0000) returned 1 [0193.167] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ade8 [0193.167] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ade8 | out: hHeap=0x1f0000) returned 1 [0193.167] GetLastError () returned 0x0 [0193.167] SetLastError (dwErrCode=0x0) [0193.167] AreFileApisANSI () returned 1 [0193.167] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58420, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0193.168] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58420, cbMultiByte=4, lpWideCharStr=0x22bf0f8, cchWideChar=4 | out: lpWideCharStr=".exe") returned 4 [0193.168] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b5c0 [0193.168] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222298 [0193.168] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x226d28 [0193.168] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ade8 [0193.179] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0193.179] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b390 [0193.179] CryptAcquireContextA (in: phProv=0x2294a88, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2294a88*=0x22a578) returned 1 [0193.183] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x22b390 | out: pbBuffer=0x22b390) returned 1 [0193.183] CryptReleaseContext (hProv=0x22a578, dwFlags=0x0) returned 1 [0193.183] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b390 | out: hHeap=0x1f0000) returned 1 [0193.183] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x24b180 [0193.185] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x24ad90 [0193.186] QueryPerformanceCounter (in: lpPerformanceCount=0x2294a1c | out: lpPerformanceCount=0x2294a1c*=35055460686) returned 1 [0193.186] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x2294a5c | out: lpSystemTimeAsFileTime=0x2294a5c) [0193.186] QueryPerformanceCounter (in: lpPerformanceCount=0x2294a1c | out: lpPerformanceCount=0x2294a1c*=35055495484) returned 1 [0193.186] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x2294a5c | out: lpSystemTimeAsFileTime=0x2294a5c) [0193.186] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x227ee8 [0193.186] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x24c398 [0193.187] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x24aea0 [0193.187] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x24d5b0 [0193.187] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210000 [0193.187] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2068f8 [0193.187] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffa0 [0193.187] GetLastError () returned 0x0 [0193.187] SetLastError (dwErrCode=0x0) [0193.187] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0193.188] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\netfx_Core_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22949ec, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0193.188] GetFileType (hFile=0x1fc) returned 0x1 [0193.188] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2294a58 | out: lpNewFilePointer=0x0) returned 1 [0193.189] ReadFile (in: hFile=0x1fc, lpBuffer=0x22a9f58, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x2294a30, lpOverlapped=0x0 | out: lpBuffer=0x22a9f58*, lpNumberOfBytesRead=0x2294a30*=0x14000, lpOverlapped=0x0) returned 1 [0193.210] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x23fdd8 [0193.211] ReadFile (in: hFile=0x1fc, lpBuffer=0x23fdd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x22949d4, lpOverlapped=0x0 | out: lpBuffer=0x23fdd8*, lpNumberOfBytesRead=0x22949d4*=0x1000, lpOverlapped=0x0) returned 1 [0193.428] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2294a60 | out: lpNewFilePointer=0x0) returned 1 [0193.428] WriteFile (in: hFile=0x1fc, lpBuffer=0x2294f68*, nNumberOfBytesToWrite=0x14000, lpNumberOfBytesWritten=0x22949cc, lpOverlapped=0x0 | out: lpBuffer=0x2294f68*, lpNumberOfBytesWritten=0x22949cc*=0x14000, lpOverlapped=0x0) returned 1 [0193.429] WriteFile (in: hFile=0x1fc, lpBuffer=0x23fdd8*, nNumberOfBytesToWrite=0xff0, lpNumberOfBytesWritten=0x22949f8, lpOverlapped=0x0 | out: lpBuffer=0x23fdd8*, lpNumberOfBytesWritten=0x22949f8*=0xff0, lpOverlapped=0x0) returned 1 [0193.430] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x15f90, lpNewFilePointer=0x0, dwMoveMethod=0x2294a40 | out: lpNewFilePointer=0x0) returned 1 [0193.430] ReadFile (in: hFile=0x1fc, lpBuffer=0x22a9f58, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x2294a18, lpOverlapped=0x0 | out: lpBuffer=0x22a9f58*, lpNumberOfBytesRead=0x2294a18*=0x14000, lpOverlapped=0x0) returned 1 [0193.430] ReadFile (in: hFile=0x1fc, lpBuffer=0x23fdd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x22949bc, lpOverlapped=0x0 | out: lpBuffer=0x23fdd8*, lpNumberOfBytesRead=0x22949bc*=0x1000, lpOverlapped=0x0) returned 1 [0193.431] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x15f90, lpNewFilePointer=0x0, dwMoveMethod=0x2294a60 | out: lpNewFilePointer=0x0) returned 1 [0193.431] WriteFile (in: hFile=0x1fc, lpBuffer=0x2294f68*, nNumberOfBytesToWrite=0x14000, lpNumberOfBytesWritten=0x22949cc, lpOverlapped=0x0 | out: lpBuffer=0x2294f68*, lpNumberOfBytesWritten=0x22949cc*=0x14000, lpOverlapped=0x0) returned 1 [0193.432] WriteFile (in: hFile=0x1fc, lpBuffer=0x23fdd8*, nNumberOfBytesToWrite=0xff0, lpNumberOfBytesWritten=0x22949f8, lpOverlapped=0x0 | out: lpBuffer=0x23fdd8*, lpNumberOfBytesWritten=0x22949f8*=0xff0, lpOverlapped=0x0) returned 1 [0193.432] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0xdbba0, lpNewFilePointer=0x0, dwMoveMethod=0x2294a40 | out: lpNewFilePointer=0x0) returned 1 [0193.432] ReadFile (in: hFile=0x1fc, lpBuffer=0x22a9f58, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x2294a18, lpOverlapped=0x0 | out: lpBuffer=0x22a9f58*, lpNumberOfBytesRead=0x2294a18*=0x14000, lpOverlapped=0x0) returned 1 [0193.476] ReadFile (in: hFile=0x1fc, lpBuffer=0x23fdd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x22949bc, lpOverlapped=0x0 | out: lpBuffer=0x23fdd8*, lpNumberOfBytesRead=0x22949bc*=0x1000, lpOverlapped=0x0) returned 1 [0193.501] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0xdbba0, lpNewFilePointer=0x0, dwMoveMethod=0x2294a60 | out: lpNewFilePointer=0x0) returned 1 [0193.501] WriteFile (in: hFile=0x1fc, lpBuffer=0x2294f68*, nNumberOfBytesToWrite=0x14000, lpNumberOfBytesWritten=0x22949cc, lpOverlapped=0x0 | out: lpBuffer=0x2294f68*, lpNumberOfBytesWritten=0x22949cc*=0x14000, lpOverlapped=0x0) returned 1 [0193.502] WriteFile (in: hFile=0x1fc, lpBuffer=0x23fdd8*, nNumberOfBytesToWrite=0xff0, lpNumberOfBytesWritten=0x2294a48, lpOverlapped=0x0 | out: lpBuffer=0x23fdd8*, lpNumberOfBytesWritten=0x2294a48*=0xff0, lpOverlapped=0x0) returned 1 [0193.502] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x23fdd8 | out: hHeap=0x1f0000) returned 1 [0193.502] CloseHandle (hObject=0x1fc) returned 1 [0194.766] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215d38 [0194.766] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b750 [0194.766] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b6b0 [0194.766] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x215990 [0194.766] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204fb0 [0194.766] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ff0 [0194.766] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x21c680 [0194.766] GetLastError () returned 0x0 [0194.766] SetLastError (dwErrCode=0x0) [0194.766] GetLastError () returned 0x0 [0194.767] SetLastError (dwErrCode=0x0) [0194.767] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204fb0 | out: hHeap=0x1f0000) returned 1 [0194.767] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ff0 | out: hHeap=0x1f0000) returned 1 [0194.767] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x1fefe8 [0194.767] GetLastError () returned 0x0 [0194.767] SetLastError (dwErrCode=0x0) [0194.767] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fefe8 | out: hHeap=0x1f0000) returned 1 [0194.767] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x1fefe8 [0194.767] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a970 [0194.767] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x22b4d0 [0194.767] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x225150 [0194.767] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c710 [0194.767] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b3e0 [0194.767] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff70 [0194.767] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c6c0 [0194.767] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b7c8 [0194.768] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210210 [0194.768] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x22b480 [0194.768] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2605b0 [0194.768] GetLastError () returned 0x0 [0194.768] SetLastError (dwErrCode=0x0) [0194.768] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fefe8 | out: hHeap=0x1f0000) returned 1 [0194.768] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x21c6f0 [0194.768] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x21c560 [0194.768] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c570 [0194.768] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c560 | out: hHeap=0x1f0000) returned 1 [0194.768] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c580 [0194.768] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c570 | out: hHeap=0x1f0000) returned 1 [0194.768] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c6f0 | out: hHeap=0x1f0000) returned 1 [0194.768] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c560 [0194.768] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210228 [0194.769] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c560 | out: hHeap=0x1f0000) returned 1 [0194.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210240 [0194.769] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210228 | out: hHeap=0x1f0000) returned 1 [0194.769] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c580 | out: hHeap=0x1f0000) returned 1 [0194.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101c8 [0194.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101f8 [0194.769] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0194.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210228 [0194.769] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101f8 | out: hHeap=0x1f0000) returned 1 [0194.769] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210240 | out: hHeap=0x1f0000) returned 1 [0194.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210258 [0194.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204fb0 [0194.769] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0194.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ff0 [0194.769] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204fb0 | out: hHeap=0x1f0000) returned 1 [0194.769] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210228 | out: hHeap=0x1f0000) returned 1 [0194.770] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204fb0 [0194.770] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x22b778 [0194.770] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204fb0 | out: hHeap=0x1f0000) returned 1 [0194.770] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204fb0 [0194.770] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b778 | out: hHeap=0x1f0000) returned 1 [0194.770] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ff0 | out: hHeap=0x1f0000) returned 1 [0194.770] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204ff0 [0194.770] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206808 [0194.770] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ff0 | out: hHeap=0x1f0000) returned 1 [0194.770] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x22b778 [0194.770] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206808 | out: hHeap=0x1f0000) returned 1 [0194.770] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204fb0 | out: hHeap=0x1f0000) returned 1 [0194.770] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c6f0 [0194.770] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101c8 [0194.770] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c6f0 | out: hHeap=0x1f0000) returned 1 [0194.770] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210228 [0194.771] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0194.771] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204fb0 [0194.771] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210228 | out: hHeap=0x1f0000) returned 1 [0194.771] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206628 [0194.771] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204fb0 | out: hHeap=0x1f0000) returned 1 [0194.771] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206628 | out: hHeap=0x1f0000) returned 1 [0194.771] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b778 | out: hHeap=0x1f0000) returned 1 [0194.771] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b750 | out: hHeap=0x1f0000) returned 1 [0194.771] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0194.771] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225150 | out: hHeap=0x1f0000) returned 1 [0194.771] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b4d0 | out: hHeap=0x1f0000) returned 1 [0194.771] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fefe8 [0194.771] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b750 [0194.771] CryptAcquireContextA (in: phProv=0x2294a88, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2294a88*=0x22a578) returned 1 [0194.774] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x22b750 | out: pbBuffer=0x22b750) returned 1 [0194.774] CryptReleaseContext (hProv=0x22a578, dwFlags=0x0) returned 1 [0194.774] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b750 | out: hHeap=0x1f0000) returned 1 [0194.774] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b750 [0194.774] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b318 [0194.774] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1ff058 [0194.774] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b750 | out: hHeap=0x1f0000) returned 1 [0194.774] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0194.774] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1ff058 | out: hHeap=0x1f0000) returned 1 [0194.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2395b8 [0194.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210258 [0194.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x22abe0 [0194.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x22b4d0 [0194.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x225150 [0194.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204fb0 [0194.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22aa40 [0194.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x22b340 [0194.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2606b8 [0194.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c6f0 [0194.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b750 [0194.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101f8 [0194.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c560 [0194.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b778 [0194.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0194.776] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0194.776] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b778 | out: hHeap=0x1f0000) returned 1 [0194.776] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c560 | out: hHeap=0x1f0000) returned 1 [0194.776] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101f8 | out: hHeap=0x1f0000) returned 1 [0194.776] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b750 | out: hHeap=0x1f0000) returned 1 [0194.776] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c6f0 | out: hHeap=0x1f0000) returned 1 [0194.776] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606b8 | out: hHeap=0x1f0000) returned 1 [0194.776] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b340 | out: hHeap=0x1f0000) returned 1 [0194.776] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aa40 | out: hHeap=0x1f0000) returned 1 [0194.776] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x1ff058 [0194.776] GetLastError () returned 0x0 [0194.776] SetLastError (dwErrCode=0x0) [0194.776] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1ff058 | out: hHeap=0x1f0000) returned 1 [0194.776] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x1ff058 [0194.776] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0194.776] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0194.776] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0194.776] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0194.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0194.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0194.777] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x2248a8 [0194.777] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2606b8 [0194.777] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0194.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0194.777] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0194.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0194.777] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2607c0 [0194.777] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0194.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0194.777] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22ff38 [0194.777] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x254980 [0194.777] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2608c8 [0194.777] QueryPerformanceCounter (in: lpPerformanceCount=0x22945d8 | out: lpPerformanceCount=0x22945d8*=35214630742) returned 1 [0194.777] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x2294618 | out: lpSystemTimeAsFileTime=0x2294618) [0194.778] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x21c6f0 [0194.778] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b778 [0194.778] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ff0 [0194.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ff0 | out: hHeap=0x1f0000) returned 1 [0194.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b778 | out: hHeap=0x1f0000) returned 1 [0194.778] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b340 [0194.778] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ff0 [0194.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ff0 | out: hHeap=0x1f0000) returned 1 [0194.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b340 | out: hHeap=0x1f0000) returned 1 [0194.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c6f0 | out: hHeap=0x1f0000) returned 1 [0194.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0194.778] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x228310 [0194.778] GetLastError () returned 0x0 [0194.778] SetLastError (dwErrCode=0x0) [0194.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228310 | out: hHeap=0x1f0000) returned 1 [0194.779] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0194.779] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0194.779] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0194.779] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b340 [0194.779] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b750 [0194.779] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0194.779] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0194.779] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b778 [0194.779] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0194.779] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x2609d8 [0194.779] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0194.779] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x237fa8 [0194.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0194.779] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2381c8 [0194.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fa8 | out: hHeap=0x1f0000) returned 1 [0194.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b840 [0194.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b8f0 [0194.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b840 | out: hHeap=0x1f0000) returned 1 [0194.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0194.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b8f0 | out: hHeap=0x1f0000) returned 1 [0194.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x237fa8 [0194.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x2383e8 [0194.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0194.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fa8 | out: hHeap=0x1f0000) returned 1 [0194.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381c8 | out: hHeap=0x1f0000) returned 1 [0194.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101c8 [0194.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215b40 [0194.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b8f0 [0194.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b9e0 [0194.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20bd00 [0194.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b840 [0194.781] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b9e0 | out: hHeap=0x1f0000) returned 1 [0194.781] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b8f0 | out: hHeap=0x1f0000) returned 1 [0194.781] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x237fa8 [0194.781] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b8f0 [0194.781] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b9e0 [0194.781] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b8f0 | out: hHeap=0x1f0000) returned 1 [0194.781] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0194.781] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b9e0 | out: hHeap=0x1f0000) returned 1 [0194.781] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2068c8 [0194.781] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x2381c8 [0194.781] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381c8 | out: hHeap=0x1f0000) returned 1 [0194.781] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2068c8 | out: hHeap=0x1f0000) returned 1 [0194.781] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b778 | out: hHeap=0x1f0000) returned 1 [0194.781] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x237cb0 [0194.781] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0194.781] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fa8 | out: hHeap=0x1f0000) returned 1 [0194.781] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204ff0 [0194.781] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x237498 [0194.781] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x237120 [0194.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b750 | out: hHeap=0x1f0000) returned 1 [0194.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2376e8 [0194.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237120 | out: hHeap=0x1f0000) returned 1 [0194.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b840 | out: hHeap=0x1f0000) returned 1 [0194.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20bd00 | out: hHeap=0x1f0000) returned 1 [0194.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215b40 | out: hHeap=0x1f0000) returned 1 [0194.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237498 | out: hHeap=0x1f0000) returned 1 [0194.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ff0 | out: hHeap=0x1f0000) returned 1 [0194.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0194.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0194.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x237810 [0194.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237810 | out: hHeap=0x1f0000) returned 1 [0194.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609d8 | out: hHeap=0x1f0000) returned 1 [0194.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0194.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237cb0 | out: hHeap=0x1f0000) returned 1 [0194.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0194.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0194.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b340 | out: hHeap=0x1f0000) returned 1 [0194.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0194.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0194.783] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x236340 [0194.783] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x236590 [0194.783] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236340 | out: hHeap=0x1f0000) returned 1 [0194.783] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236590 | out: hHeap=0x1f0000) returned 1 [0194.783] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2376e8 | out: hHeap=0x1f0000) returned 1 [0194.783] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0194.783] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607c0 | out: hHeap=0x1f0000) returned 1 [0194.783] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2248a8 | out: hHeap=0x1f0000) returned 1 [0194.783] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x2609d8 [0194.783] GetLastError () returned 0x0 [0194.783] SetLastError (dwErrCode=0x0) [0194.783] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1ff058 | out: hHeap=0x1f0000) returned 1 [0194.783] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c6f0 [0194.784] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c570 [0194.784] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\netfx_Core_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x64.msi"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2294988, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0194.784] GetFileType (hFile=0x1fc) returned 0x1 [0194.785] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x23adb0 [0194.785] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2294910 | out: lpNewFilePointer=0x0) returned 1 [0194.785] GetLastError () returned 0xb7 [0194.785] SetLastError (dwErrCode=0xb7) [0194.785] GetLastError () returned 0xb7 [0194.785] SetLastError (dwErrCode=0xb7) [0194.785] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x22949d4 | out: lpNewFilePointer=0x0) returned 1 [0194.785] WriteFile (in: hFile=0x1fc, lpBuffer=0x23adb0*, nNumberOfBytesToWrite=0x103, lpNumberOfBytesWritten=0x2294a38, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesWritten=0x2294a38*=0x103, lpOverlapped=0x0) returned 1 [0194.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x23adb0 | out: hHeap=0x1f0000) returned 1 [0194.786] CloseHandle (hObject=0x1fc) returned 1 [0195.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x214e08 [0195.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218608 [0195.569] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214e08 | out: hHeap=0x1f0000) returned 1 [0195.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf8) returned 0x229528 [0195.569] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218608 | out: hHeap=0x1f0000) returned 1 [0195.569] MoveFileExW (lpExistingFileName="C:\\\\588bce7c90097ed212\\netfx_Core_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x64.msi"), lpNewFileName="C:\\\\588bce7c90097ed212\\netfx_Core_x64.msi.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x64.msi.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwFlags=0x2) returned 1 [0195.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229528 | out: hHeap=0x1f0000) returned 1 [0195.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c570 | out: hHeap=0x1f0000) returned 1 [0195.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c6f0 | out: hHeap=0x1f0000) returned 1 [0195.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606b8 | out: hHeap=0x1f0000) returned 1 [0195.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225150 | out: hHeap=0x1f0000) returned 1 [0195.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b4d0 | out: hHeap=0x1f0000) returned 1 [0195.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204fb0 | out: hHeap=0x1f0000) returned 1 [0195.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22abe0 | out: hHeap=0x1f0000) returned 1 [0195.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0195.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2395b8 | out: hHeap=0x1f0000) returned 1 [0195.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609d8 | out: hHeap=0x1f0000) returned 1 [0195.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b318 | out: hHeap=0x1f0000) returned 1 [0195.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0195.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x254980 | out: hHeap=0x1f0000) returned 1 [0195.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608c8 | out: hHeap=0x1f0000) returned 1 [0195.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fefe8 | out: hHeap=0x1f0000) returned 1 [0195.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c680 | out: hHeap=0x1f0000) returned 1 [0195.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0195.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b7c8 | out: hHeap=0x1f0000) returned 1 [0195.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c6c0 | out: hHeap=0x1f0000) returned 1 [0195.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff70 | out: hHeap=0x1f0000) returned 1 [0195.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b3e0 | out: hHeap=0x1f0000) returned 1 [0195.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c710 | out: hHeap=0x1f0000) returned 1 [0195.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b0 | out: hHeap=0x1f0000) returned 1 [0195.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b480 | out: hHeap=0x1f0000) returned 1 [0195.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a970 | out: hHeap=0x1f0000) returned 1 [0195.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215990 | out: hHeap=0x1f0000) returned 1 [0195.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b6b0 | out: hHeap=0x1f0000) returned 1 [0195.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0195.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215d38 | out: hHeap=0x1f0000) returned 1 [0195.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24c398 | out: hHeap=0x1f0000) returned 1 [0195.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24aea0 | out: hHeap=0x1f0000) returned 1 [0195.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2068f8 | out: hHeap=0x1f0000) returned 1 [0195.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffa0 | out: hHeap=0x1f0000) returned 1 [0195.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210000 | out: hHeap=0x1f0000) returned 1 [0195.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24d5b0 | out: hHeap=0x1f0000) returned 1 [0195.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24b180 | out: hHeap=0x1f0000) returned 1 [0195.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24ad90 | out: hHeap=0x1f0000) returned 1 [0195.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0195.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ade8 | out: hHeap=0x1f0000) returned 1 [0195.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226d28 | out: hHeap=0x1f0000) returned 1 [0195.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222298 | out: hHeap=0x1f0000) returned 1 [0195.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b5c0 | out: hHeap=0x1f0000) returned 1 [0195.574] FindNextFileW (in: hFindFile=0x2141d0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x4c130c00, ftCreationTime.dwHighDateTime=0x1cac6d9, ftLastAccessTime.dwLowDateTime=0x4c130c00, ftLastAccessTime.dwHighDateTime=0x1cac6d9, ftLastWriteTime.dwLowDateTime=0x4c130c00, ftLastWriteTime.dwHighDateTime=0x1cac6d9, nFileSizeHigh=0x0, nFileSizeLow=0x11c000, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="netfx_Core_x86.msi", cAlternateFileName="NETFX_~2.MSI")) returned 1 [0195.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0195.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282d8 [0195.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a908 [0195.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282d8 | out: hHeap=0x1f0000) returned 1 [0195.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab78 | out: hHeap=0x1f0000) returned 1 [0195.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0195.575] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\netfx_Core_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x86.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0195.575] GetFileType (hFile=0x1fc) returned 0x1 [0195.575] CloseHandle (hObject=0x1fc) returned 1 [0195.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a970 [0195.576] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\netfx_Core_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x86.msi"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x4c130c00, ftCreationTime.dwHighDateTime=0x1cac6d9, ftLastAccessTime.dwLowDateTime=0x4c130c00, ftLastAccessTime.dwHighDateTime=0x1cac6d9, ftLastWriteTime.dwLowDateTime=0x4c130c00, ftLastWriteTime.dwHighDateTime=0x1cac6d9, nFileSizeHigh=0x0, nFileSizeLow=0x11c000)) returned 1 [0195.576] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a970 | out: hHeap=0x1f0000) returned 1 [0195.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22aeb8 [0195.576] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aeb8 | out: hHeap=0x1f0000) returned 1 [0195.576] GetLastError () returned 0x0 [0195.576] SetLastError (dwErrCode=0x0) [0195.576] AreFileApisANSI () returned 1 [0195.576] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58420, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0195.576] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58420, cbMultiByte=4, lpWideCharStr=0x22bf0f8, cchWideChar=4 | out: lpWideCharStr=".exe") returned 4 [0195.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b3e0 [0195.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215c18 [0195.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f020 [0195.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ade8 [0195.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0195.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b778 [0195.577] CryptAcquireContextA (in: phProv=0x2294a88, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2294a88*=0x22a688) returned 1 [0195.579] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x22b778 | out: pbBuffer=0x22b778) returned 1 [0195.579] CryptReleaseContext (hProv=0x22a688, dwFlags=0x0) returned 1 [0195.580] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b778 | out: hHeap=0x1f0000) returned 1 [0195.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x254980 [0195.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x229528 [0195.580] QueryPerformanceCounter (in: lpPerformanceCount=0x2294a1c | out: lpPerformanceCount=0x2294a1c*=35294865365) returned 1 [0195.580] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x2294a5c | out: lpSystemTimeAsFileTime=0x2294a5c) [0195.580] QueryPerformanceCounter (in: lpPerformanceCount=0x2294a1c | out: lpPerformanceCount=0x2294a1c*=35294889513) returned 1 [0195.580] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x2294a5c | out: lpSystemTimeAsFileTime=0x2294a5c) [0195.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x2282d8 [0195.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x251068 [0195.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2605b0 [0195.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x260ef8 [0195.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff70 [0195.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206808 [0195.581] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210000 [0195.581] GetLastError () returned 0x0 [0195.581] SetLastError (dwErrCode=0x0) [0195.581] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282d8 | out: hHeap=0x1f0000) returned 1 [0195.581] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\netfx_Core_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x86.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22949ec, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0195.581] GetFileType (hFile=0x1fc) returned 0x1 [0195.582] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2294a58 | out: lpNewFilePointer=0x0) returned 1 [0195.582] ReadFile (in: hFile=0x1fc, lpBuffer=0x22a9f58, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x2294a30, lpOverlapped=0x0 | out: lpBuffer=0x22a9f58*, lpNumberOfBytesRead=0x2294a30*=0x14000, lpOverlapped=0x0) returned 1 [0195.739] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x239da8 [0195.739] ReadFile (in: hFile=0x1fc, lpBuffer=0x239da8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x22949d4, lpOverlapped=0x0 | out: lpBuffer=0x239da8*, lpNumberOfBytesRead=0x22949d4*=0x1000, lpOverlapped=0x0) returned 1 [0195.741] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2294a60 | out: lpNewFilePointer=0x0) returned 1 [0195.741] WriteFile (in: hFile=0x1fc, lpBuffer=0x2294f68*, nNumberOfBytesToWrite=0x14000, lpNumberOfBytesWritten=0x22949cc, lpOverlapped=0x0 | out: lpBuffer=0x2294f68*, lpNumberOfBytesWritten=0x22949cc*=0x14000, lpOverlapped=0x0) returned 1 [0195.742] WriteFile (in: hFile=0x1fc, lpBuffer=0x239da8*, nNumberOfBytesToWrite=0xff0, lpNumberOfBytesWritten=0x22949f8, lpOverlapped=0x0 | out: lpBuffer=0x239da8*, lpNumberOfBytesWritten=0x22949f8*=0xff0, lpOverlapped=0x0) returned 1 [0195.742] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x15f90, lpNewFilePointer=0x0, dwMoveMethod=0x2294a40 | out: lpNewFilePointer=0x0) returned 1 [0195.742] ReadFile (in: hFile=0x1fc, lpBuffer=0x22a9f58, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x2294a18, lpOverlapped=0x0 | out: lpBuffer=0x22a9f58*, lpNumberOfBytesRead=0x2294a18*=0x14000, lpOverlapped=0x0) returned 1 [0195.742] ReadFile (in: hFile=0x1fc, lpBuffer=0x239da8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x22949bc, lpOverlapped=0x0 | out: lpBuffer=0x239da8*, lpNumberOfBytesRead=0x22949bc*=0x1000, lpOverlapped=0x0) returned 1 [0195.743] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x15f90, lpNewFilePointer=0x0, dwMoveMethod=0x2294a60 | out: lpNewFilePointer=0x0) returned 1 [0195.743] WriteFile (in: hFile=0x1fc, lpBuffer=0x2294f68*, nNumberOfBytesToWrite=0x14000, lpNumberOfBytesWritten=0x22949cc, lpOverlapped=0x0 | out: lpBuffer=0x2294f68*, lpNumberOfBytesWritten=0x22949cc*=0x14000, lpOverlapped=0x0) returned 1 [0195.744] WriteFile (in: hFile=0x1fc, lpBuffer=0x239da8*, nNumberOfBytesToWrite=0xff0, lpNumberOfBytesWritten=0x22949f8, lpOverlapped=0x0 | out: lpBuffer=0x239da8*, lpNumberOfBytesWritten=0x22949f8*=0xff0, lpOverlapped=0x0) returned 1 [0195.744] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0xdbba0, lpNewFilePointer=0x0, dwMoveMethod=0x2294a40 | out: lpNewFilePointer=0x0) returned 1 [0195.744] ReadFile (in: hFile=0x1fc, lpBuffer=0x22a9f58, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x2294a18, lpOverlapped=0x0 | out: lpBuffer=0x22a9f58*, lpNumberOfBytesRead=0x2294a18*=0x14000, lpOverlapped=0x0) returned 1 [0195.813] ReadFile (in: hFile=0x1fc, lpBuffer=0x239da8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x22949bc, lpOverlapped=0x0 | out: lpBuffer=0x239da8*, lpNumberOfBytesRead=0x22949bc*=0x1000, lpOverlapped=0x0) returned 1 [0195.814] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0xdbba0, lpNewFilePointer=0x0, dwMoveMethod=0x2294a60 | out: lpNewFilePointer=0x0) returned 1 [0195.814] WriteFile (in: hFile=0x1fc, lpBuffer=0x2294f68*, nNumberOfBytesToWrite=0x14000, lpNumberOfBytesWritten=0x22949cc, lpOverlapped=0x0 | out: lpBuffer=0x2294f68*, lpNumberOfBytesWritten=0x22949cc*=0x14000, lpOverlapped=0x0) returned 1 [0195.814] WriteFile (in: hFile=0x1fc, lpBuffer=0x239da8*, nNumberOfBytesToWrite=0xff0, lpNumberOfBytesWritten=0x2294a48, lpOverlapped=0x0 | out: lpBuffer=0x239da8*, lpNumberOfBytesWritten=0x2294a48*=0xff0, lpOverlapped=0x0) returned 1 [0195.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239da8 | out: hHeap=0x1f0000) returned 1 [0195.815] CloseHandle (hObject=0x1fc) returned 1 [0196.076] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215e10 [0196.077] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b9e0 [0196.077] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b8f0 [0196.077] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x216008 [0196.077] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204fb0 [0196.077] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205150 [0196.077] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x206430 [0196.077] GetLastError () returned 0x0 [0196.077] SetLastError (dwErrCode=0x0) [0196.077] GetLastError () returned 0x0 [0196.077] SetLastError (dwErrCode=0x0) [0196.077] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204fb0 | out: hHeap=0x1f0000) returned 1 [0196.077] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205150 | out: hHeap=0x1f0000) returned 1 [0196.077] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x21cf38 [0196.077] GetLastError () returned 0x0 [0196.077] SetLastError (dwErrCode=0x0) [0196.078] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf38 | out: hHeap=0x1f0000) returned 1 [0196.078] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x21d248 [0196.078] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a970 [0196.078] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x20bb98 [0196.078] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x234c98 [0196.078] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x206530 [0196.078] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20bd50 [0196.078] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2026d0 [0196.078] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x206510 [0196.078] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20bc38 [0196.078] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2026e8 [0196.078] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x22b480 [0196.078] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x234fc8 [0196.079] GetLastError () returned 0x0 [0196.079] SetLastError (dwErrCode=0x0) [0196.079] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d248 | out: hHeap=0x1f0000) returned 1 [0196.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x206520 [0196.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x206440 [0196.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2063f0 [0196.079] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206440 | out: hHeap=0x1f0000) returned 1 [0196.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x206400 [0196.079] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2063f0 | out: hHeap=0x1f0000) returned 1 [0196.079] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206520 | out: hHeap=0x1f0000) returned 1 [0196.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x206520 [0196.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101f8 [0196.079] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206520 | out: hHeap=0x1f0000) returned 1 [0196.080] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210228 [0196.080] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101f8 | out: hHeap=0x1f0000) returned 1 [0196.080] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206400 | out: hHeap=0x1f0000) returned 1 [0196.080] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101f8 [0196.080] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x235a30 [0196.080] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101f8 | out: hHeap=0x1f0000) returned 1 [0196.080] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x235a00 [0196.080] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235a30 | out: hHeap=0x1f0000) returned 1 [0196.080] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210228 | out: hHeap=0x1f0000) returned 1 [0196.080] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x235a18 [0196.080] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x205150 [0196.080] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235a18 | out: hHeap=0x1f0000) returned 1 [0196.080] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205210 [0196.080] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205150 | out: hHeap=0x1f0000) returned 1 [0196.080] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235a00 | out: hHeap=0x1f0000) returned 1 [0196.080] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204fb0 [0196.080] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x22b868 [0196.081] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204fb0 | out: hHeap=0x1f0000) returned 1 [0196.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x205150 [0196.081] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b868 | out: hHeap=0x1f0000) returned 1 [0196.081] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205210 | out: hHeap=0x1f0000) returned 1 [0196.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x205210 [0196.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206898 [0196.081] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205210 | out: hHeap=0x1f0000) returned 1 [0196.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x22b868 [0196.081] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206898 | out: hHeap=0x1f0000) returned 1 [0196.081] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205150 | out: hHeap=0x1f0000) returned 1 [0196.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x206440 [0196.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101f8 [0196.081] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206440 | out: hHeap=0x1f0000) returned 1 [0196.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210228 [0196.082] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101f8 | out: hHeap=0x1f0000) returned 1 [0196.082] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x205210 [0196.082] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210228 | out: hHeap=0x1f0000) returned 1 [0196.082] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x2068f8 [0196.082] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205210 | out: hHeap=0x1f0000) returned 1 [0196.082] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2068f8 | out: hHeap=0x1f0000) returned 1 [0196.083] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b868 | out: hHeap=0x1f0000) returned 1 [0196.083] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b9e0 | out: hHeap=0x1f0000) returned 1 [0196.083] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0196.083] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234c98 | out: hHeap=0x1f0000) returned 1 [0196.083] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20bb98 | out: hHeap=0x1f0000) returned 1 [0196.083] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d248 [0196.083] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b868 [0196.083] CryptAcquireContextA (in: phProv=0x2294a88, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2294a88*=0x229940) returned 1 [0196.086] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x22b868 | out: pbBuffer=0x22b868) returned 1 [0196.086] CryptReleaseContext (hProv=0x229940, dwFlags=0x0) returned 1 [0196.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b868 | out: hHeap=0x1f0000) returned 1 [0196.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20bb98 [0196.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b9e0 [0196.087] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf38 [0196.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20bb98 | out: hHeap=0x1f0000) returned 1 [0196.087] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0196.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf38 | out: hHeap=0x1f0000) returned 1 [0196.087] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x239ae0 [0196.087] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210228 [0196.087] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x22aa40 [0196.087] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x20bb98 [0196.087] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x234c98 [0196.088] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205210 [0196.088] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ad80 [0196.088] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x22b868 [0196.088] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2350d0 [0196.088] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x206520 [0196.088] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x1fb070 [0196.088] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101f8 [0196.088] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x206440 [0196.088] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x235888 [0196.088] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x235eb0 [0196.088] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235eb0 | out: hHeap=0x1f0000) returned 1 [0196.089] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235888 | out: hHeap=0x1f0000) returned 1 [0196.089] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206440 | out: hHeap=0x1f0000) returned 1 [0196.089] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101f8 | out: hHeap=0x1f0000) returned 1 [0196.089] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fb070 | out: hHeap=0x1f0000) returned 1 [0196.089] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206520 | out: hHeap=0x1f0000) returned 1 [0196.089] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2350d0 | out: hHeap=0x1f0000) returned 1 [0196.089] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b868 | out: hHeap=0x1f0000) returned 1 [0196.089] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ad80 | out: hHeap=0x1f0000) returned 1 [0196.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x21cf38 [0196.090] GetLastError () returned 0x0 [0196.090] SetLastError (dwErrCode=0x0) [0196.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf38 | out: hHeap=0x1f0000) returned 1 [0196.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x21cf38 [0196.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0196.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0196.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0196.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0196.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0196.091] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0196.091] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x214150 [0196.091] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2350d0 [0196.091] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0196.091] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0196.091] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0196.091] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0196.091] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2356d0 [0196.091] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0196.092] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0196.092] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fe70 [0196.092] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x25a8a8 [0196.092] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2357d8 [0196.092] QueryPerformanceCounter (in: lpPerformanceCount=0x22945d8 | out: lpPerformanceCount=0x22945d8*=35346104330) returned 1 [0196.092] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x2294618 | out: lpSystemTimeAsFileTime=0x2294618) [0196.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x206560 [0196.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x1fb070 [0196.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204fb0 [0196.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204fb0 | out: hHeap=0x1f0000) returned 1 [0196.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fb070 | out: hHeap=0x1f0000) returned 1 [0196.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x1fb070 [0196.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204fb0 [0196.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204fb0 | out: hHeap=0x1f0000) returned 1 [0196.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fb070 | out: hHeap=0x1f0000) returned 1 [0196.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206560 | out: hHeap=0x1f0000) returned 1 [0196.094] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0196.094] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x21cfa8 [0196.094] GetLastError () returned 0x0 [0196.094] SetLastError (dwErrCode=0x0) [0196.094] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cfa8 | out: hHeap=0x1f0000) returned 1 [0196.094] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0196.094] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0196.094] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0196.094] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x1fb070 [0196.094] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b868 [0196.095] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0196.095] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0196.095] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2380c8 [0196.095] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0196.095] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x2358e8 [0196.095] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x236218 [0196.095] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2387b0 [0196.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236218 | out: hHeap=0x1f0000) returned 1 [0196.095] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2389d0 [0196.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387b0 | out: hHeap=0x1f0000) returned 1 [0196.096] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2384b0 [0196.096] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238190 [0196.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0196.096] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2376e8 [0196.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0196.096] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2387b0 [0196.096] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x238bf0 [0196.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238bf0 | out: hHeap=0x1f0000) returned 1 [0196.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387b0 | out: hHeap=0x1f0000) returned 1 [0196.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389d0 | out: hHeap=0x1f0000) returned 1 [0196.097] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101f8 [0196.097] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215f30 [0196.097] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381b8 [0196.097] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238398 [0196.097] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238078 [0196.097] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2380f0 [0196.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0196.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0196.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x234da0 [0196.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238370 [0196.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238348 [0196.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0196.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x235fc8 [0196.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238348 | out: hHeap=0x1f0000) returned 1 [0196.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2065f8 [0196.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x222ee8 [0196.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ee8 | out: hHeap=0x1f0000) returned 1 [0196.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2065f8 | out: hHeap=0x1f0000) returned 1 [0196.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380c8 | out: hHeap=0x1f0000) returned 1 [0196.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x237120 [0196.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235fc8 | out: hHeap=0x1f0000) returned 1 [0196.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234da0 | out: hHeap=0x1f0000) returned 1 [0196.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x2052f0 [0196.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x237810 [0196.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2375c0 [0196.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b868 | out: hHeap=0x1f0000) returned 1 [0196.494] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x237938 [0196.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2375c0 | out: hHeap=0x1f0000) returned 1 [0196.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380f0 | out: hHeap=0x1f0000) returned 1 [0196.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0196.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215f30 | out: hHeap=0x1f0000) returned 1 [0196.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237810 | out: hHeap=0x1f0000) returned 1 [0196.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2052f0 | out: hHeap=0x1f0000) returned 1 [0196.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101f8 | out: hHeap=0x1f0000) returned 1 [0196.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2376e8 | out: hHeap=0x1f0000) returned 1 [0196.495] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x236218 [0196.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236218 | out: hHeap=0x1f0000) returned 1 [0196.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2358e8 | out: hHeap=0x1f0000) returned 1 [0196.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0196.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237120 | out: hHeap=0x1f0000) returned 1 [0196.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0196.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0196.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fb070 | out: hHeap=0x1f0000) returned 1 [0196.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0196.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0196.496] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x236da8 [0196.496] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x236590 [0196.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236da8 | out: hHeap=0x1f0000) returned 1 [0196.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236590 | out: hHeap=0x1f0000) returned 1 [0196.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237938 | out: hHeap=0x1f0000) returned 1 [0196.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0196.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2356d0 | out: hHeap=0x1f0000) returned 1 [0196.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214150 | out: hHeap=0x1f0000) returned 1 [0196.496] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x25fe30 [0196.497] GetLastError () returned 0x0 [0196.497] SetLastError (dwErrCode=0x0) [0196.497] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf38 | out: hHeap=0x1f0000) returned 1 [0196.497] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c4f0 [0196.497] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c530 [0196.498] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\netfx_Core_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x86.msi"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2294988, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x20c [0196.498] GetFileType (hFile=0x20c) returned 0x1 [0196.499] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x242df0 [0196.499] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2294910 | out: lpNewFilePointer=0x0) returned 1 [0196.499] GetLastError () returned 0xb7 [0196.499] SetLastError (dwErrCode=0xb7) [0196.500] GetLastError () returned 0xb7 [0196.500] SetLastError (dwErrCode=0xb7) [0196.500] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x22949d4 | out: lpNewFilePointer=0x0) returned 1 [0196.500] WriteFile (in: hFile=0x20c, lpBuffer=0x242df0*, nNumberOfBytesToWrite=0x103, lpNumberOfBytesWritten=0x2294a38, lpOverlapped=0x0 | out: lpBuffer=0x242df0*, lpNumberOfBytesWritten=0x2294a38*=0x103, lpOverlapped=0x0) returned 1 [0196.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x242df0 | out: hHeap=0x1f0000) returned 1 [0196.501] CloseHandle (hObject=0x20c) returned 1 [0196.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x214f70 [0196.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218b88 [0196.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f70 | out: hHeap=0x1f0000) returned 1 [0196.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf8) returned 0x234b90 [0196.783] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218b88 | out: hHeap=0x1f0000) returned 1 [0196.783] MoveFileExW (lpExistingFileName="C:\\\\588bce7c90097ed212\\netfx_Core_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x86.msi"), lpNewFileName="C:\\\\588bce7c90097ed212\\netfx_Core_x86.msi.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x86.msi.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwFlags=0x2) returned 1 [0196.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b90 | out: hHeap=0x1f0000) returned 1 [0196.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c530 | out: hHeap=0x1f0000) returned 1 [0196.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c4f0 | out: hHeap=0x1f0000) returned 1 [0196.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2350d0 | out: hHeap=0x1f0000) returned 1 [0196.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234c98 | out: hHeap=0x1f0000) returned 1 [0196.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20bb98 | out: hHeap=0x1f0000) returned 1 [0196.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205210 | out: hHeap=0x1f0000) returned 1 [0196.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aa40 | out: hHeap=0x1f0000) returned 1 [0196.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210228 | out: hHeap=0x1f0000) returned 1 [0196.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239ae0 | out: hHeap=0x1f0000) returned 1 [0196.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25fe30 | out: hHeap=0x1f0000) returned 1 [0196.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b9e0 | out: hHeap=0x1f0000) returned 1 [0196.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0196.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25a8a8 | out: hHeap=0x1f0000) returned 1 [0196.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2357d8 | out: hHeap=0x1f0000) returned 1 [0196.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d248 | out: hHeap=0x1f0000) returned 1 [0196.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206430 | out: hHeap=0x1f0000) returned 1 [0196.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2026e8 | out: hHeap=0x1f0000) returned 1 [0196.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20bc38 | out: hHeap=0x1f0000) returned 1 [0196.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206510 | out: hHeap=0x1f0000) returned 1 [0196.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2026d0 | out: hHeap=0x1f0000) returned 1 [0196.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20bd50 | out: hHeap=0x1f0000) returned 1 [0196.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206530 | out: hHeap=0x1f0000) returned 1 [0196.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234fc8 | out: hHeap=0x1f0000) returned 1 [0196.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b480 | out: hHeap=0x1f0000) returned 1 [0196.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a970 | out: hHeap=0x1f0000) returned 1 [0196.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216008 | out: hHeap=0x1f0000) returned 1 [0196.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b8f0 | out: hHeap=0x1f0000) returned 1 [0196.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0196.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215e10 | out: hHeap=0x1f0000) returned 1 [0196.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x251068 | out: hHeap=0x1f0000) returned 1 [0196.794] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b0 | out: hHeap=0x1f0000) returned 1 [0196.794] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206808 | out: hHeap=0x1f0000) returned 1 [0196.794] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210000 | out: hHeap=0x1f0000) returned 1 [0196.795] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff70 | out: hHeap=0x1f0000) returned 1 [0196.795] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ef8 | out: hHeap=0x1f0000) returned 1 [0196.795] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x254980 | out: hHeap=0x1f0000) returned 1 [0196.795] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229528 | out: hHeap=0x1f0000) returned 1 [0196.795] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0196.795] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ade8 | out: hHeap=0x1f0000) returned 1 [0196.795] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f020 | out: hHeap=0x1f0000) returned 1 [0196.795] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215c18 | out: hHeap=0x1f0000) returned 1 [0196.795] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b3e0 | out: hHeap=0x1f0000) returned 1 [0196.795] FindNextFileW (in: hFindFile=0x2141d0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf74cd515, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf74cd515, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf7cd9415, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x29222c7, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="netfx_Extended.mzz", cAlternateFileName="NETFX_~2.MZZ")) returned 1 [0196.796] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228230 [0196.796] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0196.796] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ade8 [0196.796] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0196.796] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a908 | out: hHeap=0x1f0000) returned 1 [0196.796] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228230 | out: hHeap=0x1f0000) returned 1 [0196.796] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\netfx_Extended.mzz" (normalized: "c:\\588bce7c90097ed212\\netfx_extended.mzz"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x20c [0196.797] GetFileType (hFile=0x20c) returned 0x1 [0196.797] CloseHandle (hObject=0x20c) returned 1 [0196.797] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22acb0 [0196.797] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\netfx_Extended.mzz" (normalized: "c:\\588bce7c90097ed212\\netfx_extended.mzz"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf74cd515, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf74cd515, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf7cd9415, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x29222c7)) returned 1 [0196.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22acb0 | out: hHeap=0x1f0000) returned 1 [0196.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ae50 [0196.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ae50 | out: hHeap=0x1f0000) returned 1 [0196.798] FindNextFileW (in: hFindFile=0x2141d0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2dbe0800, ftCreationTime.dwHighDateTime=0x1cac6fb, ftLastAccessTime.dwLowDateTime=0x2dbe0800, ftLastAccessTime.dwHighDateTime=0x1cac6fb, ftLastWriteTime.dwLowDateTime=0x2dbe0800, ftLastWriteTime.dwHighDateTime=0x1cac6fb, nFileSizeHigh=0x0, nFileSizeLow=0xd5000, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="netfx_Extended_x64.msi", cAlternateFileName="NETFX_~3.MSI")) returned 1 [0196.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0196.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228230 [0196.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a9d8 [0196.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228230 | out: hHeap=0x1f0000) returned 1 [0196.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ade8 | out: hHeap=0x1f0000) returned 1 [0196.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0196.799] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\netfx_Extended_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0196.799] GetLastError () returned 0x2 [0196.799] GetLastError () returned 0x2 [0196.799] SetLastError (dwErrCode=0x2) [0196.799] GetLastError () returned 0x2 [0196.799] SetLastError (dwErrCode=0x2) [0196.799] GetLastError () returned 0x2 [0196.799] SetLastError (dwErrCode=0x2) [0196.799] FindNextFileW (in: hFindFile=0x2141d0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc749eed, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xbc749eed, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xbda8efca, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x79113, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="netfx_Extended_x86.msi.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="NETFX_~1.ODV")) returned 1 [0196.800] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x239be0 [0196.800] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0196.800] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0196.800] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0196.800] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a9d8 | out: hHeap=0x1f0000) returned 1 [0196.800] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239be0 | out: hHeap=0x1f0000) returned 1 [0196.801] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\netfx_Extended_x86.msi.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x86.msi.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x20c [0196.801] GetFileType (hFile=0x20c) returned 0x1 [0196.801] CloseHandle (hObject=0x20c) returned 1 [0196.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x25fe30 [0196.802] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\netfx_Extended_x86.msi.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x86.msi.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc749eed, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xbc749eed, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xbda8efca, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x79113)) returned 1 [0196.802] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25fe30 | out: hHeap=0x1f0000) returned 1 [0196.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x25fe30 [0196.802] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25fe30 | out: hHeap=0x1f0000) returned 1 [0196.802] FindNextFileW (in: hFindFile=0x2141d0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbda8efca, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xbda8efca, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xbe8c1c64, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x427c1, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="ParameterInfo.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="PARAME~1.ODV")) returned 1 [0196.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x239be0 [0196.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0196.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x25fe30 [0196.802] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0196.802] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0196.802] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239be0 | out: hHeap=0x1f0000) returned 1 [0196.803] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\ParameterInfo.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\parameterinfo.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x20c [0196.803] GetFileType (hFile=0x20c) returned 0x1 [0196.803] CloseHandle (hObject=0x20c) returned 1 [0196.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0196.804] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\ParameterInfo.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\parameterinfo.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbda8efca, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xbda8efca, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xbe8c1c64, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x427c1)) returned 1 [0196.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0196.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0196.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0196.804] FindNextFileW (in: hFindFile=0x2141d0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x19dedd00, ftCreationTime.dwHighDateTime=0x1ca2a1b, ftLastAccessTime.dwLowDateTime=0x19dedd00, ftLastAccessTime.dwHighDateTime=0x1ca2a1b, ftLastWriteTime.dwLowDateTime=0x19dedd00, ftLastWriteTime.dwHighDateTime=0x1ca2a1b, nFileSizeHigh=0x0, nFileSizeLow=0x2d200, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="RGB9RAST_x64.msi", cAlternateFileName="RGB9RA~1.MSI")) returned 1 [0196.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0196.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228230 [0196.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239560 [0196.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228230 | out: hHeap=0x1f0000) returned 1 [0196.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25fe30 | out: hHeap=0x1f0000) returned 1 [0196.805] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0196.805] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\RGB9RAST_x64.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x20c [0196.805] GetFileType (hFile=0x20c) returned 0x1 [0196.806] CloseHandle (hObject=0x20c) returned 1 [0196.806] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2395b8 [0196.806] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\RGB9RAST_x64.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x64.msi"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x19dedd00, ftCreationTime.dwHighDateTime=0x1ca2a1b, ftLastAccessTime.dwLowDateTime=0x19dedd00, ftLastAccessTime.dwHighDateTime=0x1ca2a1b, ftLastWriteTime.dwLowDateTime=0x19dedd00, ftLastWriteTime.dwHighDateTime=0x1ca2a1b, nFileSizeHigh=0x0, nFileSizeLow=0x2d200)) returned 1 [0196.806] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2395b8 | out: hHeap=0x1f0000) returned 1 [0196.806] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2399d8 [0196.806] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2399d8 | out: hHeap=0x1f0000) returned 1 [0196.806] FindNextFileW (in: hFindFile=0x2141d0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x177c8300, ftCreationTime.dwHighDateTime=0x1ca2a1b, ftLastAccessTime.dwLowDateTime=0x177c8300, ftLastAccessTime.dwHighDateTime=0x1ca2a1b, ftLastWriteTime.dwLowDateTime=0x177c8300, ftLastWriteTime.dwHighDateTime=0x1ca2a1b, nFileSizeHigh=0x0, nFileSizeLow=0x17200, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="RGB9Rast_x86.msi", cAlternateFileName="RGB9RA~2.MSI")) returned 1 [0196.806] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0196.807] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228230 [0196.807] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239610 [0196.807] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228230 | out: hHeap=0x1f0000) returned 1 [0196.807] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239560 | out: hHeap=0x1f0000) returned 1 [0196.807] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0196.807] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\RGB9Rast_x86.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x86.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x20c [0196.807] GetFileType (hFile=0x20c) returned 0x1 [0196.808] CloseHandle (hObject=0x20c) returned 1 [0196.808] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239560 [0196.808] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\RGB9Rast_x86.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x86.msi"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x177c8300, ftCreationTime.dwHighDateTime=0x1ca2a1b, ftLastAccessTime.dwLowDateTime=0x177c8300, ftLastAccessTime.dwHighDateTime=0x1ca2a1b, ftLastWriteTime.dwLowDateTime=0x177c8300, ftLastWriteTime.dwHighDateTime=0x1ca2a1b, nFileSizeHigh=0x0, nFileSizeLow=0x17200)) returned 1 [0196.808] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239560 | out: hHeap=0x1f0000) returned 1 [0196.808] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239560 [0196.808] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239560 | out: hHeap=0x1f0000) returned 1 [0196.808] FindNextFileW (in: hFindFile=0x2141d0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x13148, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Setup.exe", cAlternateFileName="")) returned 1 [0196.808] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238050 [0196.808] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228230 [0196.808] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2396c0 [0196.808] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228230 | out: hHeap=0x1f0000) returned 1 [0196.809] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239610 | out: hHeap=0x1f0000) returned 1 [0196.809] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238050 | out: hHeap=0x1f0000) returned 1 [0196.809] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Setup.exe" (normalized: "c:\\588bce7c90097ed212\\setup.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x20c [0196.809] GetFileType (hFile=0x20c) returned 0x1 [0196.809] CloseHandle (hObject=0x20c) returned 1 [0196.809] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2397c8 [0196.809] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Setup.exe" (normalized: "c:\\588bce7c90097ed212\\setup.exe"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x13148)) returned 1 [0196.810] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2397c8 | out: hHeap=0x1f0000) returned 1 [0196.810] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2399d8 [0196.810] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2399d8 | out: hHeap=0x1f0000) returned 1 [0196.810] FindNextFileW (in: hFindFile=0x2141d0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0xc5158, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="SetupEngine.dll", cAlternateFileName="SETUPE~1.DLL")) returned 1 [0196.810] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383c0 [0196.810] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228230 [0196.810] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239560 [0196.810] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228230 | out: hHeap=0x1f0000) returned 1 [0196.810] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2396c0 | out: hHeap=0x1f0000) returned 1 [0196.810] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383c0 | out: hHeap=0x1f0000) returned 1 [0196.811] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\SetupEngine.dll" (normalized: "c:\\588bce7c90097ed212\\setupengine.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x20c [0196.811] GetFileType (hFile=0x20c) returned 0x1 [0196.811] CloseHandle (hObject=0x20c) returned 1 [0196.811] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239928 [0196.812] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\SetupEngine.dll" (normalized: "c:\\588bce7c90097ed212\\setupengine.dll"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0xc5158)) returned 1 [0196.812] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239928 | out: hHeap=0x1f0000) returned 1 [0196.812] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2399d8 [0196.812] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2399d8 | out: hHeap=0x1f0000) returned 1 [0196.812] FindNextFileW (in: hFindFile=0x2141d0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbea8c20d, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xbea8c20d, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xbeab1c75, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="SetupEngine.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="SETUPE~1.ODV")) returned 1 [0196.812] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a188 [0196.812] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228230 [0196.812] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x2007c8 [0196.812] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228230 | out: hHeap=0x1f0000) returned 1 [0196.812] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239560 | out: hHeap=0x1f0000) returned 1 [0196.812] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a188 | out: hHeap=0x1f0000) returned 1 [0196.813] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\SetupEngine.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\setupengine.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x20c [0196.813] GetFileType (hFile=0x20c) returned 0x1 [0196.813] CloseHandle (hObject=0x20c) returned 1 [0197.067] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x2008a0 [0197.067] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\SetupEngine.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\setupengine.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbea8c20d, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xbea8c20d, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xbeab1c75, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x18000)) returned 1 [0197.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2008a0 | out: hHeap=0x1f0000) returned 1 [0197.067] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x2008a0 [0197.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2008a0 | out: hHeap=0x1f0000) returned 1 [0197.067] FindNextFileW (in: hFindFile=0x2141d0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x48150, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="SetupUi.dll", cAlternateFileName="")) returned 1 [0197.067] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b3e0 [0197.067] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1feed0 [0197.067] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239878 [0197.068] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1feed0 | out: hHeap=0x1f0000) returned 1 [0197.068] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2007c8 | out: hHeap=0x1f0000) returned 1 [0197.068] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b3e0 | out: hHeap=0x1f0000) returned 1 [0197.068] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\SetupUi.dll" (normalized: "c:\\588bce7c90097ed212\\setupui.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x20c [0197.068] GetFileType (hFile=0x20c) returned 0x1 [0197.069] CloseHandle (hObject=0x20c) returned 1 [0197.189] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239ae0 [0197.189] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\SetupUi.dll" (normalized: "c:\\588bce7c90097ed212\\setupui.dll"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x48150)) returned 1 [0197.190] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239ae0 | out: hHeap=0x1f0000) returned 1 [0197.190] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239928 [0197.190] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239928 | out: hHeap=0x1f0000) returned 1 [0197.190] FindNextFileW (in: hFindFile=0x2141d0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe8e80a8, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xbe8e80a8, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xbe8e80a8, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="SetupUi.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="SETUPU~1.ODV")) returned 1 [0197.190] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a578 [0197.190] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1feed0 [0197.190] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x2007c8 [0197.190] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1feed0 | out: hHeap=0x1f0000) returned 1 [0197.190] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239878 | out: hHeap=0x1f0000) returned 1 [0197.191] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a578 | out: hHeap=0x1f0000) returned 1 [0197.194] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\SetupUi.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\setupui.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0197.194] GetFileType (hFile=0x208) returned 0x1 [0197.195] CloseHandle (hObject=0x208) returned 1 [0197.203] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x2008a0 [0197.204] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\SetupUi.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\setupui.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe8e80a8, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xbe8e80a8, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xbe8e80a8, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x2d000)) returned 1 [0197.204] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2008a0 | out: hHeap=0x1f0000) returned 1 [0197.204] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x2008a0 [0197.204] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2008a0 | out: hHeap=0x1f0000) returned 1 [0197.204] FindNextFileW (in: hFindFile=0x2141d0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5381000, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x5381000, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x5381000, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x75a8, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="SetupUi.xsd", cAlternateFileName="")) returned 1 [0197.204] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b3e0 [0197.204] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fefe8 [0197.204] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239560 [0197.204] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fefe8 | out: hHeap=0x1f0000) returned 1 [0197.204] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2007c8 | out: hHeap=0x1f0000) returned 1 [0197.205] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b3e0 | out: hHeap=0x1f0000) returned 1 [0197.205] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\SetupUi.xsd" (normalized: "c:\\588bce7c90097ed212\\setupui.xsd"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0197.206] GetFileType (hFile=0x208) returned 0x1 [0197.206] CloseHandle (hObject=0x208) returned 1 [0197.206] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2395b8 [0197.206] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\SetupUi.xsd" (normalized: "c:\\588bce7c90097ed212\\setupui.xsd"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5381000, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x5381000, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x5381000, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x75a8)) returned 1 [0197.207] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2395b8 | out: hHeap=0x1f0000) returned 1 [0197.209] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2399d8 [0197.209] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2399d8 | out: hHeap=0x1f0000) returned 1 [0197.209] FindNextFileW (in: hFindFile=0x2141d0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x6519be00, ftCreationTime.dwHighDateTime=0x1cac6d5, ftLastAccessTime.dwLowDateTime=0x6519be00, ftLastAccessTime.dwHighDateTime=0x1cac6d5, ftLastWriteTime.dwLowDateTime=0x6519be00, ftLastWriteTime.dwHighDateTime=0x1cac6d5, nFileSizeHigh=0x0, nFileSizeLow=0x17758, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="SetupUtility.exe", cAlternateFileName="SETUPU~1.EXE")) returned 1 [0197.209] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1feed0 [0197.209] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0197.209] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239610 [0197.209] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0197.209] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239560 | out: hHeap=0x1f0000) returned 1 [0197.210] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1feed0 | out: hHeap=0x1f0000) returned 1 [0197.211] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\SetupUtility.exe" (normalized: "c:\\588bce7c90097ed212\\setuputility.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0197.212] GetFileType (hFile=0x208) returned 0x1 [0197.212] CloseHandle (hObject=0x208) returned 1 [0197.212] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2399d8 [0197.213] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\SetupUtility.exe" (normalized: "c:\\588bce7c90097ed212\\setuputility.exe"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x6519be00, ftCreationTime.dwHighDateTime=0x1cac6d5, ftLastAccessTime.dwLowDateTime=0x6519be00, ftLastAccessTime.dwHighDateTime=0x1cac6d5, ftLastWriteTime.dwLowDateTime=0x6519be00, ftLastWriteTime.dwHighDateTime=0x1cac6d5, nFileSizeHigh=0x0, nFileSizeLow=0x17758)) returned 1 [0197.213] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2399d8 | out: hHeap=0x1f0000) returned 1 [0197.213] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239820 [0197.213] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239820 | out: hHeap=0x1f0000) returned 1 [0197.213] FindNextFileW (in: hFindFile=0x2141d0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0xa078, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="SplashScreen.bmp", cAlternateFileName="SPLASH~1.BMP")) returned 1 [0197.213] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1feed0 [0197.213] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0197.213] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239718 [0197.213] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0197.213] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239610 | out: hHeap=0x1f0000) returned 1 [0197.213] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1feed0 | out: hHeap=0x1f0000) returned 1 [0197.213] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\SplashScreen.bmp" (normalized: "c:\\588bce7c90097ed212\\splashscreen.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0197.214] GetFileType (hFile=0x208) returned 0x1 [0197.214] CloseHandle (hObject=0x208) returned 1 [0197.214] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239560 [0197.214] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\SplashScreen.bmp" (normalized: "c:\\588bce7c90097ed212\\splashscreen.bmp"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0xa078)) returned 1 [0197.214] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239560 | out: hHeap=0x1f0000) returned 1 [0197.215] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2399d8 [0197.215] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2399d8 | out: hHeap=0x1f0000) returned 1 [0197.215] FindNextFileW (in: hFindFile=0x2141d0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x143bc400, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0x143bc400, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0x143bc400, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x23420, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1 [0197.215] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b458 [0197.215] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0197.215] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2399d8 [0197.215] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0197.215] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239718 | out: hHeap=0x1f0000) returned 1 [0197.215] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b458 | out: hHeap=0x1f0000) returned 1 [0197.215] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\sqmapi.dll" (normalized: "c:\\588bce7c90097ed212\\sqmapi.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0197.216] GetFileType (hFile=0x208) returned 0x1 [0197.216] CloseHandle (hObject=0x208) returned 1 [0197.216] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239560 [0197.216] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\sqmapi.dll" (normalized: "c:\\588bce7c90097ed212\\sqmapi.dll"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x143bc400, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0x143bc400, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0x143bc400, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x23420)) returned 1 [0197.217] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239560 | out: hHeap=0x1f0000) returned 1 [0197.217] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2397c8 [0197.217] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2397c8 | out: hHeap=0x1f0000) returned 1 [0197.217] FindNextFileW (in: hFindFile=0x2141d0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x3704, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Strings.xml", cAlternateFileName="")) returned 1 [0197.217] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b6b0 [0197.217] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1feed0 [0197.217] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239718 [0197.217] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1feed0 | out: hHeap=0x1f0000) returned 1 [0197.217] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2399d8 | out: hHeap=0x1f0000) returned 1 [0197.217] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b6b0 | out: hHeap=0x1f0000) returned 1 [0197.217] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Strings.xml" (normalized: "c:\\588bce7c90097ed212\\strings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0197.218] GetFileType (hFile=0x208) returned 0x1 [0197.218] CloseHandle (hObject=0x208) returned 1 [0197.218] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239560 [0197.218] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Strings.xml" (normalized: "c:\\588bce7c90097ed212\\strings.xml"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x3704)) returned 1 [0197.218] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239560 | out: hHeap=0x1f0000) returned 1 [0197.218] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239ae0 [0197.218] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239ae0 | out: hHeap=0x1f0000) returned 1 [0197.218] FindNextFileW (in: hFindFile=0x2141d0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x97f2, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="UiInfo.xml", cAlternateFileName="")) returned 1 [0197.218] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b750 [0197.219] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1feed0 [0197.219] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239b38 [0197.219] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1feed0 | out: hHeap=0x1f0000) returned 1 [0197.219] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239718 | out: hHeap=0x1f0000) returned 1 [0197.219] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b750 | out: hHeap=0x1f0000) returned 1 [0197.219] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\uiinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0197.219] GetFileType (hFile=0x208) returned 0x1 [0197.220] CloseHandle (hObject=0x208) returned 1 [0197.220] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239610 [0197.220] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\uiinfo.xml"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x97f2)) returned 1 [0197.220] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239610 | out: hHeap=0x1f0000) returned 1 [0197.220] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239ae0 [0197.220] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239ae0 | out: hHeap=0x1f0000) returned 1 [0197.220] FindNextFileW (in: hFindFile=0x2141d0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x87910600, ftCreationTime.dwHighDateTime=0x1ca2a27, ftLastAccessTime.dwLowDateTime=0x87910600, ftLastAccessTime.dwHighDateTime=0x1ca2a27, ftLastWriteTime.dwLowDateTime=0x87910600, ftLastWriteTime.dwHighDateTime=0x1ca2a27, nFileSizeHigh=0x0, nFileSizeLow=0x19688, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="watermark.bmp", cAlternateFileName="WATERM~1.BMP")) returned 1 [0197.220] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b6b0 [0197.220] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1feed0 [0197.220] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239928 [0197.220] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1feed0 | out: hHeap=0x1f0000) returned 1 [0197.220] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239b38 | out: hHeap=0x1f0000) returned 1 [0197.221] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b6b0 | out: hHeap=0x1f0000) returned 1 [0197.221] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\watermark.bmp" (normalized: "c:\\588bce7c90097ed212\\watermark.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0197.221] GetFileType (hFile=0x208) returned 0x1 [0197.221] CloseHandle (hObject=0x208) returned 1 [0197.222] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239560 [0197.222] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\watermark.bmp" (normalized: "c:\\588bce7c90097ed212\\watermark.bmp"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x87910600, ftCreationTime.dwHighDateTime=0x1ca2a27, ftLastAccessTime.dwLowDateTime=0x87910600, ftLastAccessTime.dwHighDateTime=0x1ca2a27, ftLastWriteTime.dwLowDateTime=0x87910600, ftLastWriteTime.dwHighDateTime=0x1ca2a27, nFileSizeHigh=0x0, nFileSizeLow=0x19688)) returned 1 [0197.222] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239560 | out: hHeap=0x1f0000) returned 1 [0197.222] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239ae0 [0197.225] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239ae0 | out: hHeap=0x1f0000) returned 1 [0197.225] FindNextFileW (in: hFindFile=0x2141d0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2120bc00, ftCreationTime.dwHighDateTime=0x1cac6c9, ftLastAccessTime.dwLowDateTime=0x2120bc00, ftLastAccessTime.dwHighDateTime=0x1cac6c9, ftLastWriteTime.dwLowDateTime=0x2120bc00, ftLastWriteTime.dwHighDateTime=0x1cac6c9, nFileSizeHigh=0x0, nFileSizeLow=0x4f5113, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Windows6.0-KB956250-v6001-x64.msu", cAlternateFileName="WINDOW~1.MSU")) returned 1 [0197.225] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239a30 [0197.225] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1feed0 [0197.225] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229fa0 [0197.225] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1feed0 | out: hHeap=0x1f0000) returned 1 [0197.225] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239928 | out: hHeap=0x1f0000) returned 1 [0197.226] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239a30 | out: hHeap=0x1f0000) returned 1 [0197.226] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x64.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x64.msu"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0197.226] GetFileType (hFile=0x208) returned 0x1 [0197.227] CloseHandle (hObject=0x208) returned 1 [0197.227] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229830 [0197.227] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x64.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x64.msu"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2120bc00, ftCreationTime.dwHighDateTime=0x1cac6c9, ftLastAccessTime.dwLowDateTime=0x2120bc00, ftLastAccessTime.dwHighDateTime=0x1cac6c9, ftLastWriteTime.dwLowDateTime=0x2120bc00, ftLastWriteTime.dwHighDateTime=0x1cac6c9, nFileSizeHigh=0x0, nFileSizeLow=0x4f5113)) returned 1 [0197.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229830 | out: hHeap=0x1f0000) returned 1 [0197.227] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a0b0 [0197.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a0b0 | out: hHeap=0x1f0000) returned 1 [0197.227] FindNextFileW (in: hFindFile=0x2141d0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x1bbe7400, ftCreationTime.dwHighDateTime=0x1cac6bf, ftLastAccessTime.dwLowDateTime=0x1bbe7400, ftLastAccessTime.dwHighDateTime=0x1cac6bf, ftLastWriteTime.dwLowDateTime=0x1bbe7400, ftLastWriteTime.dwHighDateTime=0x1cac6bf, nFileSizeHigh=0x0, nFileSizeLow=0x217520, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Windows6.0-KB956250-v6001-x86.msu", cAlternateFileName="WINDOW~2.MSU")) returned 1 [0197.227] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2399d8 [0197.227] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0197.227] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229d80 [0197.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0197.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229fa0 | out: hHeap=0x1f0000) returned 1 [0197.228] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2399d8 | out: hHeap=0x1f0000) returned 1 [0197.228] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x86.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x86.msu"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0197.228] GetFileType (hFile=0x208) returned 0x1 [0197.228] CloseHandle (hObject=0x208) returned 1 [0197.228] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a0b0 [0197.229] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x86.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x86.msu"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x1bbe7400, ftCreationTime.dwHighDateTime=0x1cac6bf, ftLastAccessTime.dwLowDateTime=0x1bbe7400, ftLastAccessTime.dwHighDateTime=0x1cac6bf, ftLastWriteTime.dwLowDateTime=0x1bbe7400, ftLastWriteTime.dwHighDateTime=0x1cac6bf, nFileSizeHigh=0x0, nFileSizeLow=0x217520)) returned 1 [0197.229] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a0b0 | out: hHeap=0x1f0000) returned 1 [0197.229] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229830 [0197.229] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229830 | out: hHeap=0x1f0000) returned 1 [0197.229] FindNextFileW (in: hFindFile=0x2141d0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5b8e5700, ftCreationTime.dwHighDateTime=0x1cac6d1, ftLastAccessTime.dwLowDateTime=0x5b8e5700, ftLastAccessTime.dwHighDateTime=0x1cac6d1, ftLastWriteTime.dwLowDateTime=0x5b8e5700, ftLastWriteTime.dwHighDateTime=0x1cac6d1, nFileSizeHigh=0x0, nFileSizeLow=0x4db1ce, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Windows6.1-KB958488-v6001-x64.msu", cAlternateFileName="WINDOW~3.MSU")) returned 1 [0197.229] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239400 [0197.229] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fefe8 [0197.229] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229a50 [0197.229] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fefe8 | out: hHeap=0x1f0000) returned 1 [0197.229] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229d80 | out: hHeap=0x1f0000) returned 1 [0197.229] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239400 | out: hHeap=0x1f0000) returned 1 [0197.230] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x64.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x64.msu"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0197.230] GetFileType (hFile=0x208) returned 0x1 [0197.230] CloseHandle (hObject=0x208) returned 1 [0197.230] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229f18 [0197.230] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x64.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x64.msu"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5b8e5700, ftCreationTime.dwHighDateTime=0x1cac6d1, ftLastAccessTime.dwLowDateTime=0x5b8e5700, ftLastAccessTime.dwHighDateTime=0x1cac6d1, ftLastWriteTime.dwLowDateTime=0x5b8e5700, ftLastWriteTime.dwHighDateTime=0x1cac6d1, nFileSizeHigh=0x0, nFileSizeLow=0x4db1ce)) returned 1 [0197.230] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229f18 | out: hHeap=0x1f0000) returned 1 [0197.231] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229cf8 [0197.231] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229cf8 | out: hHeap=0x1f0000) returned 1 [0197.231] FindNextFileW (in: hFindFile=0x2141d0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd0ac5d00, ftCreationTime.dwHighDateTime=0x1cac6ce, ftLastAccessTime.dwLowDateTime=0xd0ac5d00, ftLastAccessTime.dwHighDateTime=0x1cac6ce, ftLastWriteTime.dwLowDateTime=0xd0ac5d00, ftLastWriteTime.dwHighDateTime=0x1cac6ce, nFileSizeHigh=0x0, nFileSizeLow=0x20acf9, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Windows6.1-KB958488-v6001-x86.msu", cAlternateFileName="WINDOW~4.MSU")) returned 1 [0197.231] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239668 [0197.231] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1feed0 [0197.231] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229940 [0197.231] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1feed0 | out: hHeap=0x1f0000) returned 1 [0197.231] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229a50 | out: hHeap=0x1f0000) returned 1 [0197.231] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239668 | out: hHeap=0x1f0000) returned 1 [0197.231] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x86.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x86.msu"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0197.231] GetFileType (hFile=0x208) returned 0x1 [0197.232] CloseHandle (hObject=0x208) returned 1 [0197.232] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229b60 [0197.232] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x86.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x86.msu"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd0ac5d00, ftCreationTime.dwHighDateTime=0x1cac6ce, ftLastAccessTime.dwLowDateTime=0xd0ac5d00, ftLastAccessTime.dwHighDateTime=0x1cac6ce, ftLastWriteTime.dwLowDateTime=0xd0ac5d00, ftLastWriteTime.dwHighDateTime=0x1cac6ce, nFileSizeHigh=0x0, nFileSizeLow=0x20acf9)) returned 1 [0197.232] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229b60 | out: hHeap=0x1f0000) returned 1 [0197.232] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a4f0 [0197.232] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a4f0 | out: hHeap=0x1f0000) returned 1 [0197.232] FindNextFileW (in: hFindFile=0x2141d0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd0ac5d00, ftCreationTime.dwHighDateTime=0x1cac6ce, ftLastAccessTime.dwLowDateTime=0xd0ac5d00, ftLastAccessTime.dwHighDateTime=0x1cac6ce, ftLastWriteTime.dwLowDateTime=0xd0ac5d00, ftLastWriteTime.dwHighDateTime=0x1cac6ce, nFileSizeHigh=0x0, nFileSizeLow=0x20acf9, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Windows6.1-KB958488-v6001-x86.msu", cAlternateFileName="WINDOW~4.MSU")) returned 0 [0197.232] FindClose (in: hFindFile=0x2141d0 | out: hFindFile=0x2141d0) returned 1 [0197.232] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216008 [0197.232] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b6b0 [0197.232] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f020 [0197.233] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215ca8 [0197.233] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1025\\*", lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24ea80 [0197.233] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215af8 [0197.233] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215ca8 | out: hHeap=0x1f0000) returned 1 [0197.233] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0197.233] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0197.233] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215b40 [0197.233] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215af8 | out: hHeap=0x1f0000) returned 1 [0197.233] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0197.233] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0197.233] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x1d8f, dwReserved0=0x0, dwReserved1=0x3, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0197.233] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b5c0 [0197.233] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215f30 [0197.233] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x214dd0 [0197.233] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215f30 | out: hHeap=0x1f0000) returned 1 [0197.234] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215b40 | out: hHeap=0x1f0000) returned 1 [0197.234] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b5c0 | out: hHeap=0x1f0000) returned 1 [0197.234] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1025\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1025\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0197.234] GetFileType (hFile=0x208) returned 0x1 [0197.234] CloseHandle (hObject=0x208) returned 1 [0197.235] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239400 [0197.235] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1025\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1025\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x22bebd4 | out: lpFileInformation=0x22bebd4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x1d8f)) returned 1 [0197.235] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239400 | out: hHeap=0x1f0000) returned 1 [0197.235] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239928 [0197.235] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239928 | out: hHeap=0x1f0000) returned 1 [0197.235] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x121e6, dwReserved0=0x0, dwReserved1=0x3, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0197.235] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1feed0 [0197.235] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216050 [0197.235] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214f70 [0197.235] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216050 | out: hHeap=0x1f0000) returned 1 [0197.235] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214dd0 | out: hHeap=0x1f0000) returned 1 [0197.236] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1feed0 | out: hHeap=0x1f0000) returned 1 [0197.236] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1025\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1025\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0197.236] GetFileType (hFile=0x208) returned 0x1 [0197.236] CloseHandle (hObject=0x208) returned 1 [0197.236] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214fd8 [0197.237] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1025\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1025\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x22bebd4 | out: lpFileInformation=0x22bebd4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x121e6)) returned 1 [0197.237] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214fd8 | out: hHeap=0x1f0000) returned 1 [0197.237] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214f08 [0197.237] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f08 | out: hHeap=0x1f0000) returned 1 [0197.237] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0x0, dwReserved1=0x3, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0197.237] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1feed0 [0197.237] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215f30 [0197.237] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c98 [0197.237] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215f30 | out: hHeap=0x1f0000) returned 1 [0197.237] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f70 | out: hHeap=0x1f0000) returned 1 [0197.237] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1feed0 | out: hHeap=0x1f0000) returned 1 [0197.238] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1025\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1025\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0197.579] GetFileType (hFile=0x208) returned 0x1 [0197.579] CloseHandle (hObject=0x208) returned 1 [0197.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a28 [0197.580] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1025\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1025\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x22bebd4 | out: lpFileInformation=0x22bebd4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358)) returned 1 [0197.580] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a28 | out: hHeap=0x1f0000) returned 1 [0197.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a28 [0197.580] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a28 | out: hHeap=0x1f0000) returned 1 [0197.580] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0x0, dwReserved1=0x3, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0197.580] FindClose (in: hFindFile=0x24ea80 | out: hFindFile=0x24ea80) returned 1 [0197.580] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c98 | out: hHeap=0x1f0000) returned 1 [0197.580] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f020 | out: hHeap=0x1f0000) returned 1 [0197.580] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b6b0 | out: hHeap=0x1f0000) returned 1 [0197.580] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216008 | out: hHeap=0x1f0000) returned 1 [0197.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216008 [0197.581] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b2f0 [0197.581] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e690 [0197.581] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216170 [0197.581] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1028\\*", lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24e940 [0197.581] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215af8 [0197.581] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216170 | out: hHeap=0x1f0000) returned 1 [0197.581] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0197.581] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0197.581] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216098 [0197.582] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215af8 | out: hHeap=0x1f0000) returned 1 [0197.582] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0197.582] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0197.582] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x18a5, dwReserved0=0x0, dwReserved1=0x3, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0197.582] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b5e8 [0197.582] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2160e0 [0197.582] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x2150a8 [0197.582] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2160e0 | out: hHeap=0x1f0000) returned 1 [0197.582] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216098 | out: hHeap=0x1f0000) returned 1 [0197.582] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b5e8 | out: hHeap=0x1f0000) returned 1 [0197.582] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1028\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1028\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0197.583] GetFileType (hFile=0x208) returned 0x1 [0197.583] CloseHandle (hObject=0x208) returned 1 [0197.583] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239928 [0197.583] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1028\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1028\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x22bebd4 | out: lpFileInformation=0x22bebd4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x18a5)) returned 1 [0197.583] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239928 | out: hHeap=0x1f0000) returned 1 [0197.583] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2396c0 [0197.583] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2396c0 | out: hHeap=0x1f0000) returned 1 [0197.583] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed90, dwReserved0=0x0, dwReserved1=0x3, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0197.583] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fefe8 [0197.584] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215af8 [0197.584] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2149c0 [0197.584] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215af8 | out: hHeap=0x1f0000) returned 1 [0197.584] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2150a8 | out: hHeap=0x1f0000) returned 1 [0197.584] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fefe8 | out: hHeap=0x1f0000) returned 1 [0197.584] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1028\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1028\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0197.584] GetFileType (hFile=0x208) returned 0x1 [0197.585] CloseHandle (hObject=0x208) returned 1 [0197.585] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214b60 [0197.585] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1028\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1028\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x22bebd4 | out: lpFileInformation=0x22bebd4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed90)) returned 1 [0197.585] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214b60 | out: hHeap=0x1f0000) returned 1 [0197.585] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214f08 [0197.585] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f08 | out: hHeap=0x1f0000) returned 1 [0197.585] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x3, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0197.585] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fefe8 [0197.585] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2160e0 [0197.585] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214fd8 [0197.585] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2160e0 | out: hHeap=0x1f0000) returned 1 [0197.586] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2149c0 | out: hHeap=0x1f0000) returned 1 [0197.586] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fefe8 | out: hHeap=0x1f0000) returned 1 [0197.586] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1028\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1028\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0197.586] GetFileType (hFile=0x208) returned 0x1 [0197.586] CloseHandle (hObject=0x208) returned 1 [0197.587] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c30 [0197.587] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1028\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1028\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x22bebd4 | out: lpFileInformation=0x22bebd4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758)) returned 1 [0197.587] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c30 | out: hHeap=0x1f0000) returned 1 [0197.587] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214af8 [0197.587] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214af8 | out: hHeap=0x1f0000) returned 1 [0197.587] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x3, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0197.587] FindClose (in: hFindFile=0x24e940 | out: hFindFile=0x24e940) returned 1 [0197.587] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214fd8 | out: hHeap=0x1f0000) returned 1 [0197.587] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e690 | out: hHeap=0x1f0000) returned 1 [0197.587] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b2f0 | out: hHeap=0x1f0000) returned 1 [0197.587] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216008 | out: hHeap=0x1f0000) returned 1 [0197.587] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216008 [0197.587] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b2f0 [0197.587] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f350 [0197.588] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215ca8 [0197.588] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1029\\*", lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24e940 [0197.588] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216098 [0197.588] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215ca8 | out: hHeap=0x1f0000) returned 1 [0197.588] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0197.588] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0197.588] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216170 [0197.588] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216098 | out: hHeap=0x1f0000) returned 1 [0197.588] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0197.588] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0197.588] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe8e, dwReserved0=0x0, dwReserved1=0x3, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0197.588] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b318 [0197.589] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2161b8 [0197.589] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x214fd8 [0197.589] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2161b8 | out: hHeap=0x1f0000) returned 1 [0197.589] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216170 | out: hHeap=0x1f0000) returned 1 [0197.589] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b318 | out: hHeap=0x1f0000) returned 1 [0197.589] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1029\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1029\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0197.589] GetFileType (hFile=0x208) returned 0x1 [0197.590] CloseHandle (hObject=0x208) returned 1 [0197.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239928 [0197.590] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1029\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1029\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x22bebd4 | out: lpFileInformation=0x22bebd4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe8e)) returned 1 [0197.590] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239928 | out: hHeap=0x1f0000) returned 1 [0197.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239610 [0197.590] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239610 | out: hHeap=0x1f0000) returned 1 [0197.590] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13c4a, dwReserved0=0x0, dwReserved1=0x3, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0197.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fefe8 [0197.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216098 [0197.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214dd0 [0197.590] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216098 | out: hHeap=0x1f0000) returned 1 [0197.590] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214fd8 | out: hHeap=0x1f0000) returned 1 [0197.590] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fefe8 | out: hHeap=0x1f0000) returned 1 [0197.591] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1029\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1029\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0197.591] GetFileType (hFile=0x208) returned 0x1 [0197.591] CloseHandle (hObject=0x208) returned 1 [0197.591] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2149c0 [0197.591] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1029\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1029\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x22bebd4 | out: lpFileInformation=0x22bebd4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13c4a)) returned 1 [0197.593] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2149c0 | out: hHeap=0x1f0000) returned 1 [0197.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214b60 [0197.593] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214b60 | out: hHeap=0x1f0000) returned 1 [0197.593] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x3, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0197.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fefe8 [0197.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215af8 [0197.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d00 [0197.593] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215af8 | out: hHeap=0x1f0000) returned 1 [0197.593] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214dd0 | out: hHeap=0x1f0000) returned 1 [0197.593] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fefe8 | out: hHeap=0x1f0000) returned 1 [0197.593] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1029\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1029\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0197.594] GetFileType (hFile=0x208) returned 0x1 [0197.594] CloseHandle (hObject=0x208) returned 1 [0197.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214ea0 [0197.594] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1029\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1029\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x22bebd4 | out: lpFileInformation=0x22bebd4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758)) returned 1 [0197.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214ea0 | out: hHeap=0x1f0000) returned 1 [0197.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2149c0 [0197.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2149c0 | out: hHeap=0x1f0000) returned 1 [0197.594] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x3, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0197.594] FindClose (in: hFindFile=0x24e940 | out: hFindFile=0x24e940) returned 1 [0197.595] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d00 | out: hHeap=0x1f0000) returned 1 [0197.595] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f350 | out: hHeap=0x1f0000) returned 1 [0197.595] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b2f0 | out: hHeap=0x1f0000) returned 1 [0197.595] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216008 | out: hHeap=0x1f0000) returned 1 [0197.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215ca8 [0197.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b3e0 [0197.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f350 [0197.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215af8 [0197.595] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1030\\*", lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24e600 [0197.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215b40 [0197.595] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215af8 | out: hHeap=0x1f0000) returned 1 [0197.595] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0197.595] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0197.596] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215af8 [0197.596] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215b40 | out: hHeap=0x1f0000) returned 1 [0197.596] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0197.596] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0197.596] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xcf2, dwReserved0=0x0, dwReserved1=0x3, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0197.596] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b2f0 [0197.596] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216008 [0197.596] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x2150a8 [0197.596] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216008 | out: hHeap=0x1f0000) returned 1 [0197.596] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215af8 | out: hHeap=0x1f0000) returned 1 [0197.596] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b2f0 | out: hHeap=0x1f0000) returned 1 [0197.596] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1030\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1030\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0197.597] GetFileType (hFile=0x208) returned 0x1 [0197.597] CloseHandle (hObject=0x208) returned 1 [0197.597] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239560 [0197.597] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1030\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1030\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x22bebd4 | out: lpFileInformation=0x22bebd4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xcf2)) returned 1 [0197.597] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239560 | out: hHeap=0x1f0000) returned 1 [0197.597] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239928 [0197.598] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239928 | out: hHeap=0x1f0000) returned 1 [0197.598] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12fb4, dwReserved0=0x0, dwReserved1=0x3, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0197.598] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fefe8 [0197.598] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216008 [0197.598] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d00 [0197.598] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216008 | out: hHeap=0x1f0000) returned 1 [0197.598] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2150a8 | out: hHeap=0x1f0000) returned 1 [0197.598] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fefe8 | out: hHeap=0x1f0000) returned 1 [0197.599] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1030\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1030\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0197.599] GetFileType (hFile=0x208) returned 0x1 [0197.599] CloseHandle (hObject=0x208) returned 1 [0197.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d68 [0197.599] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1030\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1030\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x22bebd4 | out: lpFileInformation=0x22bebd4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12fb4)) returned 1 [0197.599] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d68 | out: hHeap=0x1f0000) returned 1 [0197.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214f08 [0197.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f08 | out: hHeap=0x1f0000) returned 1 [0197.600] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x3, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0197.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fefe8 [0197.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216008 [0197.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d68 [0197.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216008 | out: hHeap=0x1f0000) returned 1 [0197.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d00 | out: hHeap=0x1f0000) returned 1 [0197.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fefe8 | out: hHeap=0x1f0000) returned 1 [0197.600] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1030\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1030\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0197.601] GetFileType (hFile=0x208) returned 0x1 [0197.601] CloseHandle (hObject=0x208) returned 1 [0197.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d00 [0197.601] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1030\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1030\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x22bebd4 | out: lpFileInformation=0x22bebd4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758)) returned 1 [0197.601] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d00 | out: hHeap=0x1f0000) returned 1 [0197.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2150a8 [0197.601] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2150a8 | out: hHeap=0x1f0000) returned 1 [0197.602] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x3, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0197.602] FindClose (in: hFindFile=0x24e600 | out: hFindFile=0x24e600) returned 1 [0197.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d68 | out: hHeap=0x1f0000) returned 1 [0197.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f350 | out: hHeap=0x1f0000) returned 1 [0197.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b3e0 | out: hHeap=0x1f0000) returned 1 [0197.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215ca8 | out: hHeap=0x1f0000) returned 1 [0197.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216008 [0197.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b6b0 [0197.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f020 [0197.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216098 [0197.602] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1031\\*", lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24eb80 [0197.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215af8 [0197.603] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216098 | out: hHeap=0x1f0000) returned 1 [0197.603] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0197.603] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0197.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215ca8 [0197.603] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215af8 | out: hHeap=0x1f0000) returned 1 [0197.603] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0197.603] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0197.603] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xd5b, dwReserved0=0x0, dwReserved1=0x3, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0197.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b5e8 [0197.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216098 [0197.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x214b60 [0197.603] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216098 | out: hHeap=0x1f0000) returned 1 [0197.603] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215ca8 | out: hHeap=0x1f0000) returned 1 [0197.603] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b5e8 | out: hHeap=0x1f0000) returned 1 [0197.604] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1031\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1031\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0197.604] GetFileType (hFile=0x208) returned 0x1 [0197.604] CloseHandle (hObject=0x208) returned 1 [0197.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2399d8 [0197.604] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1031\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1031\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x22bebd4 | out: lpFileInformation=0x22bebd4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xd5b)) returned 1 [0197.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2399d8 | out: hHeap=0x1f0000) returned 1 [0197.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239610 [0197.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239610 | out: hHeap=0x1f0000) returned 1 [0197.604] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x141aa, dwReserved0=0x0, dwReserved1=0x3, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0197.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fefe8 [0197.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216098 [0197.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214af8 [0197.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216098 | out: hHeap=0x1f0000) returned 1 [0197.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214b60 | out: hHeap=0x1f0000) returned 1 [0197.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fefe8 | out: hHeap=0x1f0000) returned 1 [0197.605] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1031\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1031\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0197.605] GetFileType (hFile=0x208) returned 0x1 [0197.606] CloseHandle (hObject=0x208) returned 1 [0197.606] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214b60 [0197.606] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1031\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1031\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x22bebd4 | out: lpFileInformation=0x22bebd4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x141aa)) returned 1 [0197.606] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214b60 | out: hHeap=0x1f0000) returned 1 [0197.606] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214fd8 [0197.606] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214fd8 | out: hHeap=0x1f0000) returned 1 [0197.606] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x3, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0197.606] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fefe8 [0197.606] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216098 [0197.606] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214b60 [0197.606] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216098 | out: hHeap=0x1f0000) returned 1 [0197.606] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214af8 | out: hHeap=0x1f0000) returned 1 [0197.606] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fefe8 | out: hHeap=0x1f0000) returned 1 [0197.607] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1031\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1031\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0197.607] GetFileType (hFile=0x208) returned 0x1 [0197.607] CloseHandle (hObject=0x208) returned 1 [0197.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214f08 [0197.607] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1031\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1031\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x22bebd4 | out: lpFileInformation=0x22bebd4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958)) returned 1 [0197.607] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f08 | out: hHeap=0x1f0000) returned 1 [0197.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214af8 [0197.607] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214af8 | out: hHeap=0x1f0000) returned 1 [0197.607] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x3, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0197.607] FindClose (in: hFindFile=0x24eb80 | out: hFindFile=0x24eb80) returned 1 [0197.608] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214b60 | out: hHeap=0x1f0000) returned 1 [0197.608] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f020 | out: hHeap=0x1f0000) returned 1 [0197.608] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b6b0 | out: hHeap=0x1f0000) returned 1 [0197.608] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216008 | out: hHeap=0x1f0000) returned 1 [0197.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216008 [0197.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b318 [0197.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f020 [0197.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216098 [0197.608] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1032\\*", lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24e640 [0197.610] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2160e0 [0197.610] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216098 | out: hHeap=0x1f0000) returned 1 [0197.610] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0197.610] FindNextFileW (in: hFindFile=0x24e640, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0197.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215b40 [0197.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2160e0 | out: hHeap=0x1f0000) returned 1 [0197.611] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0197.611] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0197.611] FindNextFileW (in: hFindFile=0x24e640, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x22ac, dwReserved0=0x0, dwReserved1=0x3, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0197.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b2f0 [0197.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216170 [0197.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x2150a8 [0197.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216170 | out: hHeap=0x1f0000) returned 1 [0197.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215b40 | out: hHeap=0x1f0000) returned 1 [0197.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b2f0 | out: hHeap=0x1f0000) returned 1 [0197.611] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1032\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1032\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0197.612] GetFileType (hFile=0x208) returned 0x1 [0197.612] CloseHandle (hObject=0x208) returned 1 [0197.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239560 [0197.612] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1032\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1032\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x22bebd4 | out: lpFileInformation=0x22bebd4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x22ac)) returned 1 [0197.612] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239560 | out: hHeap=0x1f0000) returned 1 [0197.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239560 [0197.612] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239560 | out: hHeap=0x1f0000) returned 1 [0197.612] FindNextFileW (in: hFindFile=0x24e640, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1510c, dwReserved0=0x0, dwReserved1=0x3, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0197.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fefe8 [0197.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216098 [0197.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214e38 [0197.613] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216098 | out: hHeap=0x1f0000) returned 1 [0197.613] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2150a8 | out: hHeap=0x1f0000) returned 1 [0197.613] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fefe8 | out: hHeap=0x1f0000) returned 1 [0197.613] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1032\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1032\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0197.613] GetFileType (hFile=0x208) returned 0x1 [0197.613] CloseHandle (hObject=0x208) returned 1 [0197.614] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d68 [0197.614] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1032\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1032\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x22bebd4 | out: lpFileInformation=0x22bebd4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1510c)) returned 1 [0197.614] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d68 | out: hHeap=0x1f0000) returned 1 [0197.614] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214ea0 [0197.614] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214ea0 | out: hHeap=0x1f0000) returned 1 [0197.614] FindNextFileW (in: hFindFile=0x24e640, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0x0, dwReserved1=0x3, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0197.614] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fefe8 [0197.614] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215ca8 [0197.614] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2150a8 [0197.614] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215ca8 | out: hHeap=0x1f0000) returned 1 [0197.614] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214e38 | out: hHeap=0x1f0000) returned 1 [0197.614] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fefe8 | out: hHeap=0x1f0000) returned 1 [0197.615] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1032\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1032\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0197.615] GetFileType (hFile=0x208) returned 0x1 [0197.615] CloseHandle (hObject=0x208) returned 1 [0197.615] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214fd8 [0197.615] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1032\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1032\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x22bebd4 | out: lpFileInformation=0x22bebd4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58)) returned 1 [0197.616] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214fd8 | out: hHeap=0x1f0000) returned 1 [0197.616] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214af8 [0197.616] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214af8 | out: hHeap=0x1f0000) returned 1 [0197.616] FindNextFileW (in: hFindFile=0x24e640, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0x0, dwReserved1=0x3, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0197.616] FindClose (in: hFindFile=0x24e640 | out: hFindFile=0x24e640) returned 1 [0197.616] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2150a8 | out: hHeap=0x1f0000) returned 1 [0197.616] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f020 | out: hHeap=0x1f0000) returned 1 [0197.616] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b318 | out: hHeap=0x1f0000) returned 1 [0197.616] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216008 | out: hHeap=0x1f0000) returned 1 [0197.616] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215ca8 [0197.616] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b458 [0197.617] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f020 [0197.617] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215af8 [0197.617] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1033\\*", lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24eb80 [0197.617] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216008 [0197.617] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215af8 | out: hHeap=0x1f0000) returned 1 [0197.617] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0197.617] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0197.617] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216098 [0197.617] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216008 | out: hHeap=0x1f0000) returned 1 [0197.617] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0197.617] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0197.617] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd723cc00, ftCreationTime.dwHighDateTime=0x1cabb47, ftLastAccessTime.dwLowDateTime=0xd723cc00, ftLastAccessTime.dwHighDateTime=0x1cabb47, ftLastWriteTime.dwLowDateTime=0xd723cc00, ftLastWriteTime.dwHighDateTime=0x1cabb47, nFileSizeHigh=0x0, nFileSizeLow=0xc74, dwReserved0=0x0, dwReserved1=0x3, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0197.617] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b480 [0197.617] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2160e0 [0197.617] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x2150a8 [0197.617] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2160e0 | out: hHeap=0x1f0000) returned 1 [0197.618] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216098 | out: hHeap=0x1f0000) returned 1 [0197.618] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b480 | out: hHeap=0x1f0000) returned 1 [0197.618] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1033\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1033\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0197.618] GetFileType (hFile=0x208) returned 0x1 [0197.618] CloseHandle (hObject=0x208) returned 1 [0197.618] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239718 [0197.618] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1033\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1033\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x22bebd4 | out: lpFileInformation=0x22bebd4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd723cc00, ftCreationTime.dwHighDateTime=0x1cabb47, ftLastAccessTime.dwLowDateTime=0xd723cc00, ftLastAccessTime.dwHighDateTime=0x1cabb47, ftLastWriteTime.dwLowDateTime=0xd723cc00, ftLastWriteTime.dwHighDateTime=0x1cabb47, nFileSizeHigh=0x0, nFileSizeLow=0xc74)) returned 1 [0197.618] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239718 | out: hHeap=0x1f0000) returned 1 [0197.618] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239718 [0197.619] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239718 | out: hHeap=0x1f0000) returned 1 [0197.619] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x47ad1a00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x47ad1a00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x47ad1a00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12db0, dwReserved0=0x0, dwReserved1=0x3, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0197.619] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fefe8 [0197.619] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215af8 [0197.619] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214e38 [0197.619] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215af8 | out: hHeap=0x1f0000) returned 1 [0197.619] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2150a8 | out: hHeap=0x1f0000) returned 1 [0197.619] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fefe8 | out: hHeap=0x1f0000) returned 1 [0197.619] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1033\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1033\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0197.619] GetFileType (hFile=0x208) returned 0x1 [0197.619] CloseHandle (hObject=0x208) returned 1 [0197.620] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214b60 [0197.620] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1033\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1033\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x22bebd4 | out: lpFileInformation=0x22bebd4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x47ad1a00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x47ad1a00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x47ad1a00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12db0)) returned 1 [0197.620] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214b60 | out: hHeap=0x1f0000) returned 1 [0197.620] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214fd8 [0197.620] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214fd8 | out: hHeap=0x1f0000) returned 1 [0197.620] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0x0, dwReserved1=0x3, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0197.620] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fefe8 [0197.620] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215af8 [0197.620] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d00 [0197.620] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215af8 | out: hHeap=0x1f0000) returned 1 [0197.620] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214e38 | out: hHeap=0x1f0000) returned 1 [0197.620] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fefe8 | out: hHeap=0x1f0000) returned 1 [0197.621] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1033\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1033\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0197.621] GetFileType (hFile=0x208) returned 0x1 [0197.621] CloseHandle (hObject=0x208) returned 1 [0197.621] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214ea0 [0197.621] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1033\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1033\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x22bebd4 | out: lpFileInformation=0x22bebd4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358)) returned 1 [0197.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214ea0 | out: hHeap=0x1f0000) returned 1 [0197.621] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d68 [0197.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d68 | out: hHeap=0x1f0000) returned 1 [0197.621] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0x0, dwReserved1=0x3, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0197.621] FindClose (in: hFindFile=0x24eb80 | out: hFindFile=0x24eb80) returned 1 [0197.622] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d00 | out: hHeap=0x1f0000) returned 1 [0197.622] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f020 | out: hHeap=0x1f0000) returned 1 [0197.622] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b458 | out: hHeap=0x1f0000) returned 1 [0197.622] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215ca8 | out: hHeap=0x1f0000) returned 1 [0197.622] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215af8 [0197.622] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b3e0 [0197.622] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e690 [0197.622] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2161b8 [0197.622] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1035\\*", lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24e880 [0197.622] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215b40 [0197.622] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2161b8 | out: hHeap=0x1f0000) returned 1 [0197.622] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0197.622] FindNextFileW (in: hFindFile=0x24e880, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0197.622] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215ca8 [0197.622] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215b40 | out: hHeap=0x1f0000) returned 1 [0197.622] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0197.622] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0197.622] FindNextFileW (in: hFindFile=0x24e880, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe76, dwReserved0=0x0, dwReserved1=0x3, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0197.623] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b2f0 [0197.623] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2161b8 [0197.623] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x214fd8 [0197.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2161b8 | out: hHeap=0x1f0000) returned 1 [0197.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215ca8 | out: hHeap=0x1f0000) returned 1 [0197.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b2f0 | out: hHeap=0x1f0000) returned 1 [0197.864] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1035\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1035\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0197.865] GetFileType (hFile=0x208) returned 0x1 [0197.865] CloseHandle (hObject=0x208) returned 1 [0197.865] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2399d8 [0197.865] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1035\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1035\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x22bebd4 | out: lpFileInformation=0x22bebd4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe76)) returned 1 [0197.865] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2399d8 | out: hHeap=0x1f0000) returned 1 [0197.865] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239560 [0197.865] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239560 | out: hHeap=0x1f0000) returned 1 [0197.865] FindNextFileW (in: hFindFile=0x24e880, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12cde, dwReserved0=0x0, dwReserved1=0x3, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0197.865] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0197.865] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2161b8 [0197.866] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2150a8 [0197.866] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2161b8 | out: hHeap=0x1f0000) returned 1 [0197.866] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214fd8 | out: hHeap=0x1f0000) returned 1 [0197.866] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0197.866] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1035\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1035\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0197.866] GetFileType (hFile=0x208) returned 0x1 [0197.866] CloseHandle (hObject=0x208) returned 1 [0197.866] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214dd0 [0197.866] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1035\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1035\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x22bebd4 | out: lpFileInformation=0x22bebd4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12cde)) returned 1 [0197.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214dd0 | out: hHeap=0x1f0000) returned 1 [0197.867] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2149c0 [0197.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2149c0 | out: hHeap=0x1f0000) returned 1 [0197.867] FindNextFileW (in: hFindFile=0x24e880, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x3, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0197.867] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0197.867] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216050 [0197.867] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214fd8 [0197.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216050 | out: hHeap=0x1f0000) returned 1 [0197.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2150a8 | out: hHeap=0x1f0000) returned 1 [0197.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0197.867] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1035\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1035\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0197.867] GetFileType (hFile=0x208) returned 0x1 [0197.868] CloseHandle (hObject=0x208) returned 1 [0197.868] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2150a8 [0197.868] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1035\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1035\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x22bebd4 | out: lpFileInformation=0x22bebd4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758)) returned 1 [0197.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2150a8 | out: hHeap=0x1f0000) returned 1 [0197.868] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214e38 [0197.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214e38 | out: hHeap=0x1f0000) returned 1 [0197.868] FindNextFileW (in: hFindFile=0x24e880, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x3, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0197.868] FindClose (in: hFindFile=0x24e880 | out: hFindFile=0x24e880) returned 1 [0197.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214fd8 | out: hHeap=0x1f0000) returned 1 [0197.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e690 | out: hHeap=0x1f0000) returned 1 [0197.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b3e0 | out: hHeap=0x1f0000) returned 1 [0197.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215af8 | out: hHeap=0x1f0000) returned 1 [0197.869] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216050 [0197.869] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b5e8 [0197.869] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22eb58 [0197.869] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215ca8 [0197.869] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1036\\*", lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24ec80 [0197.869] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216098 [0197.869] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215ca8 | out: hHeap=0x1f0000) returned 1 [0197.869] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0197.869] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0197.869] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215ca8 [0197.869] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216098 | out: hHeap=0x1f0000) returned 1 [0197.869] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0197.869] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0197.869] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xdc6, dwReserved0=0x0, dwReserved1=0x3, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0197.869] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b6b0 [0197.869] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216098 [0197.870] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x214a28 [0197.870] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216098 | out: hHeap=0x1f0000) returned 1 [0197.870] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215ca8 | out: hHeap=0x1f0000) returned 1 [0197.870] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b6b0 | out: hHeap=0x1f0000) returned 1 [0197.870] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1036\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1036\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0197.870] GetFileType (hFile=0x208) returned 0x1 [0197.870] CloseHandle (hObject=0x208) returned 1 [0197.870] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239560 [0197.870] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1036\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1036\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x22bebd4 | out: lpFileInformation=0x22bebd4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xdc6)) returned 1 [0197.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239560 | out: hHeap=0x1f0000) returned 1 [0197.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239a30 [0197.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239a30 | out: hHeap=0x1f0000) returned 1 [0197.871] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x14412, dwReserved0=0x0, dwReserved1=0x3, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0197.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228230 [0197.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216098 [0197.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214fd8 [0197.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216098 | out: hHeap=0x1f0000) returned 1 [0197.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a28 | out: hHeap=0x1f0000) returned 1 [0197.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228230 | out: hHeap=0x1f0000) returned 1 [0197.871] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1036\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1036\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0197.871] GetFileType (hFile=0x208) returned 0x1 [0197.871] CloseHandle (hObject=0x208) returned 1 [0197.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2150a8 [0197.872] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1036\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1036\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x22bebd4 | out: lpFileInformation=0x22bebd4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x14412)) returned 1 [0197.872] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2150a8 | out: hHeap=0x1f0000) returned 1 [0197.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a28 [0197.872] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a28 | out: hHeap=0x1f0000) returned 1 [0197.872] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x3, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0197.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228230 [0197.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215af8 [0197.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214dd0 [0197.872] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215af8 | out: hHeap=0x1f0000) returned 1 [0197.872] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214fd8 | out: hHeap=0x1f0000) returned 1 [0197.872] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228230 | out: hHeap=0x1f0000) returned 1 [0197.872] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1036\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1036\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0197.873] GetFileType (hFile=0x208) returned 0x1 [0197.873] CloseHandle (hObject=0x208) returned 1 [0197.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214e38 [0197.873] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1036\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1036\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x22bebd4 | out: lpFileInformation=0x22bebd4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958)) returned 1 [0197.873] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214e38 | out: hHeap=0x1f0000) returned 1 [0197.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2149c0 [0197.873] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2149c0 | out: hHeap=0x1f0000) returned 1 [0197.873] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x3, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0197.873] FindClose (in: hFindFile=0x24ec80 | out: hFindFile=0x24ec80) returned 1 [0197.874] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214dd0 | out: hHeap=0x1f0000) returned 1 [0197.874] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22eb58 | out: hHeap=0x1f0000) returned 1 [0197.874] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b5e8 | out: hHeap=0x1f0000) returned 1 [0197.874] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216050 | out: hHeap=0x1f0000) returned 1 [0197.874] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216050 [0197.874] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b6b0 [0197.874] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f020 [0197.874] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216098 [0197.874] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1037\\*", lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24e840 [0197.874] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2160e0 [0197.874] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216098 | out: hHeap=0x1f0000) returned 1 [0197.875] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0197.875] FindNextFileW (in: hFindFile=0x24e840, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0197.875] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216098 [0197.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2160e0 | out: hHeap=0x1f0000) returned 1 [0197.875] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0197.875] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0197.875] FindNextFileW (in: hFindFile=0x24e840, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x1ac3, dwReserved0=0x0, dwReserved1=0x3, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0197.875] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b2f0 [0197.875] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2160e0 [0197.875] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x214c98 [0197.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2160e0 | out: hHeap=0x1f0000) returned 1 [0197.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216098 | out: hHeap=0x1f0000) returned 1 [0197.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b2f0 | out: hHeap=0x1f0000) returned 1 [0197.875] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1037\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1037\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0197.875] GetFileType (hFile=0x208) returned 0x1 [0197.876] CloseHandle (hObject=0x208) returned 1 [0197.876] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239560 [0197.876] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1037\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1037\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x22bebd4 | out: lpFileInformation=0x22bebd4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x1ac3)) returned 1 [0197.876] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239560 | out: hHeap=0x1f0000) returned 1 [0197.876] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239560 [0197.876] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239560 | out: hHeap=0x1f0000) returned 1 [0197.876] FindNextFileW (in: hFindFile=0x24e840, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1198c, dwReserved0=0x0, dwReserved1=0x3, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0197.876] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228230 [0197.876] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216098 [0197.876] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214e38 [0197.876] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216098 | out: hHeap=0x1f0000) returned 1 [0197.876] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c98 | out: hHeap=0x1f0000) returned 1 [0197.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228230 | out: hHeap=0x1f0000) returned 1 [0197.877] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1037\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1037\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0197.877] GetFileType (hFile=0x208) returned 0x1 [0197.877] CloseHandle (hObject=0x208) returned 1 [0197.877] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2150a8 [0197.878] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1037\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1037\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x22bebd4 | out: lpFileInformation=0x22bebd4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1198c)) returned 1 [0197.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2150a8 | out: hHeap=0x1f0000) returned 1 [0197.878] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a28 [0197.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a28 | out: hHeap=0x1f0000) returned 1 [0197.878] FindNextFileW (in: hFindFile=0x24e840, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4158, dwReserved0=0x0, dwReserved1=0x3, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0197.878] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0197.878] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216098 [0197.878] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d00 [0197.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216098 | out: hHeap=0x1f0000) returned 1 [0197.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214e38 | out: hHeap=0x1f0000) returned 1 [0197.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0197.878] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1037\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1037\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0197.879] GetFileType (hFile=0x208) returned 0x1 [0197.879] CloseHandle (hObject=0x208) returned 1 [0197.879] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2150a8 [0197.879] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1037\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1037\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x22bebd4 | out: lpFileInformation=0x22bebd4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4158)) returned 1 [0197.879] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2150a8 | out: hHeap=0x1f0000) returned 1 [0197.879] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214ea0 [0197.879] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214ea0 | out: hHeap=0x1f0000) returned 1 [0197.879] FindNextFileW (in: hFindFile=0x24e840, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4158, dwReserved0=0x0, dwReserved1=0x3, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0197.879] FindClose (in: hFindFile=0x24e840 | out: hFindFile=0x24e840) returned 1 [0197.879] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d00 | out: hHeap=0x1f0000) returned 1 [0197.880] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f020 | out: hHeap=0x1f0000) returned 1 [0197.880] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b6b0 | out: hHeap=0x1f0000) returned 1 [0197.880] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216050 | out: hHeap=0x1f0000) returned 1 [0197.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215af8 [0197.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b5e8 [0197.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f020 [0197.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215b40 [0197.880] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1038\\*", lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24e980 [0197.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215ca8 [0197.880] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215b40 | out: hHeap=0x1f0000) returned 1 [0197.880] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0197.880] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0197.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216050 [0197.880] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215ca8 | out: hHeap=0x1f0000) returned 1 [0197.880] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0197.880] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0197.880] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x109e, dwReserved0=0x0, dwReserved1=0x3, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0197.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b778 [0197.881] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2160e0 [0197.881] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x214f08 [0197.881] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2160e0 | out: hHeap=0x1f0000) returned 1 [0197.881] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216050 | out: hHeap=0x1f0000) returned 1 [0197.881] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b778 | out: hHeap=0x1f0000) returned 1 [0197.881] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1038\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1038\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0197.881] GetFileType (hFile=0x208) returned 0x1 [0197.881] CloseHandle (hObject=0x208) returned 1 [0197.882] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239668 [0197.882] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1038\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1038\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x22bebd4 | out: lpFileInformation=0x22bebd4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x109e)) returned 1 [0197.882] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239668 | out: hHeap=0x1f0000) returned 1 [0197.882] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239560 [0197.882] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239560 | out: hHeap=0x1f0000) returned 1 [0197.882] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x151aa, dwReserved0=0x0, dwReserved1=0x3, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0197.882] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228230 [0197.882] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2161b8 [0197.882] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2149c0 [0197.882] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2161b8 | out: hHeap=0x1f0000) returned 1 [0197.882] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f08 | out: hHeap=0x1f0000) returned 1 [0197.882] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228230 | out: hHeap=0x1f0000) returned 1 [0197.882] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1038\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1038\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0197.883] GetFileType (hFile=0x208) returned 0x1 [0197.885] CloseHandle (hObject=0x208) returned 1 [0197.885] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214af8 [0197.885] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1038\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1038\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x22bebd4 | out: lpFileInformation=0x22bebd4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x151aa)) returned 1 [0197.885] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214af8 | out: hHeap=0x1f0000) returned 1 [0197.885] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214f08 [0197.885] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f08 | out: hHeap=0x1f0000) returned 1 [0197.885] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x3, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0197.885] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228230 [0197.885] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216170 [0197.885] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214fd8 [0197.885] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216170 | out: hHeap=0x1f0000) returned 1 [0197.885] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2149c0 | out: hHeap=0x1f0000) returned 1 [0197.885] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228230 | out: hHeap=0x1f0000) returned 1 [0197.886] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1038\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1038\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0197.886] GetFileType (hFile=0x208) returned 0x1 [0197.886] CloseHandle (hObject=0x208) returned 1 [0197.886] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2150a8 [0197.886] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1038\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1038\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x22bebd4 | out: lpFileInformation=0x22bebd4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958)) returned 1 [0197.887] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2150a8 | out: hHeap=0x1f0000) returned 1 [0197.887] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214ea0 [0197.887] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214ea0 | out: hHeap=0x1f0000) returned 1 [0197.887] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x3, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0197.887] FindClose (in: hFindFile=0x24e980 | out: hFindFile=0x24e980) returned 1 [0197.887] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214fd8 | out: hHeap=0x1f0000) returned 1 [0197.887] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f020 | out: hHeap=0x1f0000) returned 1 [0197.887] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b5e8 | out: hHeap=0x1f0000) returned 1 [0197.887] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215af8 | out: hHeap=0x1f0000) returned 1 [0197.887] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215ca8 [0197.887] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b5e8 [0197.887] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e030 [0197.887] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216050 [0197.887] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1040\\*", lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24e980 [0197.888] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216098 [0197.888] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216050 | out: hHeap=0x1f0000) returned 1 [0197.888] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0197.888] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0197.888] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216050 [0197.888] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216098 | out: hHeap=0x1f0000) returned 1 [0197.888] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0197.888] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0197.888] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe3b, dwReserved0=0x0, dwReserved1=0x3, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0197.888] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b6b0 [0197.888] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2160e0 [0197.888] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x214d00 [0197.888] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2160e0 | out: hHeap=0x1f0000) returned 1 [0197.889] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216050 | out: hHeap=0x1f0000) returned 1 [0197.889] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b6b0 | out: hHeap=0x1f0000) returned 1 [0197.889] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1040\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1040\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0197.890] GetFileType (hFile=0x208) returned 0x1 [0197.890] CloseHandle (hObject=0x208) returned 1 [0197.890] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2399d8 [0197.890] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1040\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1040\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x22bebd4 | out: lpFileInformation=0x22bebd4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe3b)) returned 1 [0197.890] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2399d8 | out: hHeap=0x1f0000) returned 1 [0197.890] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239b38 [0197.890] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239b38 | out: hHeap=0x1f0000) returned 1 [0197.890] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x138bc, dwReserved0=0x0, dwReserved1=0x3, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0197.890] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0197.890] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215af8 [0197.890] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2149c0 [0197.891] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215af8 | out: hHeap=0x1f0000) returned 1 [0197.891] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d00 | out: hHeap=0x1f0000) returned 1 [0197.891] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0197.891] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1040\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1040\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0197.891] GetFileType (hFile=0x208) returned 0x1 [0197.891] CloseHandle (hObject=0x208) returned 1 [0197.892] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c98 [0197.892] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1040\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1040\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x22bebd4 | out: lpFileInformation=0x22bebd4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x138bc)) returned 1 [0197.892] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c98 | out: hHeap=0x1f0000) returned 1 [0197.892] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a90 [0197.892] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a90 | out: hHeap=0x1f0000) returned 1 [0197.892] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x3, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0197.892] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228230 [0197.892] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215af8 [0197.892] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a28 [0197.892] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215af8 | out: hHeap=0x1f0000) returned 1 [0197.892] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2149c0 | out: hHeap=0x1f0000) returned 1 [0197.892] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228230 | out: hHeap=0x1f0000) returned 1 [0197.893] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1040\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1040\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0197.893] GetFileType (hFile=0x208) returned 0x1 [0197.893] CloseHandle (hObject=0x208) returned 1 [0197.893] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2150a8 [0197.893] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1040\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1040\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x22bebd4 | out: lpFileInformation=0x22bebd4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758)) returned 1 [0197.893] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2150a8 | out: hHeap=0x1f0000) returned 1 [0197.893] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214b60 [0197.893] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214b60 | out: hHeap=0x1f0000) returned 1 [0197.893] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x3, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0197.894] FindClose (in: hFindFile=0x24e980 | out: hFindFile=0x24e980) returned 1 [0197.894] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a28 | out: hHeap=0x1f0000) returned 1 [0197.894] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e030 | out: hHeap=0x1f0000) returned 1 [0197.894] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b5e8 | out: hHeap=0x1f0000) returned 1 [0197.894] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215ca8 | out: hHeap=0x1f0000) returned 1 [0197.894] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216050 [0197.894] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b6b0 [0197.894] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d508 [0197.894] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216098 [0197.894] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1041\\*", lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24e680 [0197.894] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2160e0 [0197.894] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216098 | out: hHeap=0x1f0000) returned 1 [0197.894] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0197.894] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0197.894] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216098 [0197.895] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2160e0 | out: hHeap=0x1f0000) returned 1 [0197.895] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0197.895] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0197.895] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x278d, dwReserved0=0x0, dwReserved1=0x3, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0197.895] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b778 [0197.895] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2160e0 [0197.895] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x214dd0 [0197.895] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2160e0 | out: hHeap=0x1f0000) returned 1 [0197.895] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216098 | out: hHeap=0x1f0000) returned 1 [0197.895] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b778 | out: hHeap=0x1f0000) returned 1 [0197.895] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1041\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1041\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0197.896] GetFileType (hFile=0x208) returned 0x1 [0197.896] CloseHandle (hObject=0x208) returned 1 [0197.896] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239718 [0197.896] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1041\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1041\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x22bebd4 | out: lpFileInformation=0x22bebd4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x278d)) returned 1 [0197.896] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239718 | out: hHeap=0x1f0000) returned 1 [0197.896] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239ae0 [0197.896] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239ae0 | out: hHeap=0x1f0000) returned 1 [0197.896] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x10a82, dwReserved0=0x0, dwReserved1=0x3, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0197.896] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0197.897] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216098 [0197.897] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214fd8 [0197.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216098 | out: hHeap=0x1f0000) returned 1 [0197.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214dd0 | out: hHeap=0x1f0000) returned 1 [0197.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0197.897] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1041\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1041\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0197.897] GetFileType (hFile=0x208) returned 0x1 [0197.897] CloseHandle (hObject=0x208) returned 1 [0197.898] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214bc8 [0197.898] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1041\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1041\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x22bebd4 | out: lpFileInformation=0x22bebd4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x10a82)) returned 1 [0197.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214bc8 | out: hHeap=0x1f0000) returned 1 [0197.898] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a90 [0197.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a90 | out: hHeap=0x1f0000) returned 1 [0197.898] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3d58, dwReserved0=0x0, dwReserved1=0x3, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0197.898] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228230 [0197.898] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215ca8 [0197.898] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214dd0 [0197.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215ca8 | out: hHeap=0x1f0000) returned 1 [0197.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214fd8 | out: hHeap=0x1f0000) returned 1 [0197.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228230 | out: hHeap=0x1f0000) returned 1 [0197.898] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1041\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1041\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0197.899] GetFileType (hFile=0x208) returned 0x1 [0197.899] CloseHandle (hObject=0x208) returned 1 [0197.899] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214b60 [0197.899] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1041\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1041\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x22bebd4 | out: lpFileInformation=0x22bebd4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3d58)) returned 1 [0197.899] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214b60 | out: hHeap=0x1f0000) returned 1 [0197.899] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214fd8 [0197.899] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214fd8 | out: hHeap=0x1f0000) returned 1 [0197.899] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3d58, dwReserved0=0x0, dwReserved1=0x3, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0197.900] FindClose (in: hFindFile=0x24e680 | out: hFindFile=0x24e680) returned 1 [0197.900] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214dd0 | out: hHeap=0x1f0000) returned 1 [0197.900] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d508 | out: hHeap=0x1f0000) returned 1 [0197.900] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b6b0 | out: hHeap=0x1f0000) returned 1 [0197.900] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216050 | out: hHeap=0x1f0000) returned 1 [0197.900] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215ca8 [0197.900] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b5e8 [0197.900] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22eb58 [0197.900] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216050 [0197.900] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1042\\*", lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24ea00 [0197.900] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215af8 [0197.900] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216050 | out: hHeap=0x1f0000) returned 1 [0197.900] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0197.900] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0197.901] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216050 [0197.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215af8 | out: hHeap=0x1f0000) returned 1 [0197.901] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0197.901] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0197.901] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x318f, dwReserved0=0x0, dwReserved1=0x3, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0197.901] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b6b0 [0197.901] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216098 [0197.901] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x214af8 [0197.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216098 | out: hHeap=0x1f0000) returned 1 [0197.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216050 | out: hHeap=0x1f0000) returned 1 [0197.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b6b0 | out: hHeap=0x1f0000) returned 1 [0197.901] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1042\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1042\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0197.901] GetFileType (hFile=0x208) returned 0x1 [0197.902] CloseHandle (hObject=0x208) returned 1 [0197.902] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2399d8 [0197.902] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1042\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1042\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x22bebd4 | out: lpFileInformation=0x22bebd4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x318f)) returned 1 [0197.902] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2399d8 | out: hHeap=0x1f0000) returned 1 [0197.902] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239560 [0197.902] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239560 | out: hHeap=0x1f0000) returned 1 [0197.902] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xfed6, dwReserved0=0x0, dwReserved1=0x3, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0197.902] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0197.902] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215af8 [0197.902] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214fd8 [0197.902] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215af8 | out: hHeap=0x1f0000) returned 1 [0197.902] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214af8 | out: hHeap=0x1f0000) returned 1 [0197.902] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0197.903] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1042\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1042\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0197.903] GetFileType (hFile=0x208) returned 0x1 [0197.903] CloseHandle (hObject=0x208) returned 1 [0197.903] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214ea0 [0197.903] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1042\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1042\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x22bebd4 | out: lpFileInformation=0x22bebd4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xfed6)) returned 1 [0197.903] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214ea0 | out: hHeap=0x1f0000) returned 1 [0197.903] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214ea0 [0197.903] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214ea0 | out: hHeap=0x1f0000) returned 1 [0197.904] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3b58, dwReserved0=0x0, dwReserved1=0x3, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0197.904] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0197.904] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215b40 [0197.904] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2149c0 [0197.904] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215b40 | out: hHeap=0x1f0000) returned 1 [0197.904] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214fd8 | out: hHeap=0x1f0000) returned 1 [0197.904] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0198.334] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1042\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1042\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0198.334] GetFileType (hFile=0x1f0) returned 0x1 [0198.334] CloseHandle (hObject=0x1f0) returned 1 [0198.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a28 [0198.335] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1042\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1042\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x22bebd4 | out: lpFileInformation=0x22bebd4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3b58)) returned 1 [0198.335] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a28 | out: hHeap=0x1f0000) returned 1 [0198.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214b60 [0198.335] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214b60 | out: hHeap=0x1f0000) returned 1 [0198.335] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3b58, dwReserved0=0x0, dwReserved1=0x3, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0198.335] FindClose (in: hFindFile=0x24ea00 | out: hFindFile=0x24ea00) returned 1 [0198.335] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2149c0 | out: hHeap=0x1f0000) returned 1 [0198.335] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22eb58 | out: hHeap=0x1f0000) returned 1 [0198.335] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b5e8 | out: hHeap=0x1f0000) returned 1 [0198.335] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215ca8 | out: hHeap=0x1f0000) returned 1 [0198.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215ca8 [0198.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0198.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f1b8 [0198.336] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2161b8 [0198.336] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1043\\*", lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24ec40 [0198.336] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215b40 [0198.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2161b8 | out: hHeap=0x1f0000) returned 1 [0198.336] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0198.336] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0198.336] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2161b8 [0198.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215b40 | out: hHeap=0x1f0000) returned 1 [0198.336] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0198.336] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0198.336] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xdda, dwReserved0=0x0, dwReserved1=0x3, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0198.336] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0198.336] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215b40 [0198.337] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x214d68 [0198.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215b40 | out: hHeap=0x1f0000) returned 1 [0198.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2161b8 | out: hHeap=0x1f0000) returned 1 [0198.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0198.337] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1043\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1043\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0198.337] GetFileType (hFile=0x1f0) returned 0x1 [0198.338] CloseHandle (hObject=0x1f0) returned 1 [0198.338] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239b38 [0198.338] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1043\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1043\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x22bebd4 | out: lpFileInformation=0x22bebd4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xdda)) returned 1 [0198.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239b38 | out: hHeap=0x1f0000) returned 1 [0198.338] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2397c8 [0198.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2397c8 | out: hHeap=0x1f0000) returned 1 [0198.338] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13712, dwReserved0=0x0, dwReserved1=0x3, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0198.338] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d210 [0198.338] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215b40 [0198.338] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2150a8 [0198.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215b40 | out: hHeap=0x1f0000) returned 1 [0198.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d68 | out: hHeap=0x1f0000) returned 1 [0198.339] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d210 | out: hHeap=0x1f0000) returned 1 [0198.339] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1043\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1043\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0198.339] GetFileType (hFile=0x1f0) returned 0x1 [0198.339] CloseHandle (hObject=0x1f0) returned 1 [0198.340] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2149c0 [0198.340] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1043\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1043\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x22bebd4 | out: lpFileInformation=0x22bebd4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13712)) returned 1 [0198.340] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2149c0 | out: hHeap=0x1f0000) returned 1 [0198.340] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d00 [0198.340] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d00 | out: hHeap=0x1f0000) returned 1 [0198.340] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0x0, dwReserved1=0x3, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0198.340] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0198.340] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2161b8 [0198.340] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214bc8 [0198.340] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2161b8 | out: hHeap=0x1f0000) returned 1 [0198.340] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2150a8 | out: hHeap=0x1f0000) returned 1 [0198.340] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0198.341] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1043\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1043\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0198.341] GetFileType (hFile=0x1f0) returned 0x1 [0198.341] CloseHandle (hObject=0x1f0) returned 1 [0198.341] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2150a8 [0198.341] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1043\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1043\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x22bebd4 | out: lpFileInformation=0x22bebd4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58)) returned 1 [0198.341] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2150a8 | out: hHeap=0x1f0000) returned 1 [0198.341] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d00 [0198.342] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d00 | out: hHeap=0x1f0000) returned 1 [0198.342] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0x0, dwReserved1=0x3, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0198.342] FindClose (in: hFindFile=0x24ec40 | out: hFindFile=0x24ec40) returned 1 [0198.342] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214bc8 | out: hHeap=0x1f0000) returned 1 [0198.342] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f1b8 | out: hHeap=0x1f0000) returned 1 [0198.342] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0198.342] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215ca8 | out: hHeap=0x1f0000) returned 1 [0198.342] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215ca8 [0198.342] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0198.342] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e030 [0198.342] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215b40 [0198.343] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1044\\*", lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24ebc0 [0198.343] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2161b8 [0198.343] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215b40 | out: hHeap=0x1f0000) returned 1 [0198.343] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0198.343] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0198.343] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215b40 [0198.343] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2161b8 | out: hHeap=0x1f0000) returned 1 [0198.343] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0198.343] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0198.343] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xbe6, dwReserved0=0x0, dwReserved1=0x3, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0198.343] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238028 [0198.343] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2161b8 [0198.343] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x214d00 [0198.344] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2161b8 | out: hHeap=0x1f0000) returned 1 [0198.344] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215b40 | out: hHeap=0x1f0000) returned 1 [0198.344] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238028 | out: hHeap=0x1f0000) returned 1 [0198.344] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1044\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1044\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0198.344] GetFileType (hFile=0x1f0) returned 0x1 [0198.344] CloseHandle (hObject=0x1f0) returned 1 [0198.345] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239928 [0198.345] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1044\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1044\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x22bebd4 | out: lpFileInformation=0x22bebd4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xbe6)) returned 1 [0198.345] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239928 | out: hHeap=0x1f0000) returned 1 [0198.345] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239718 [0198.345] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239718 | out: hHeap=0x1f0000) returned 1 [0198.345] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x135c0, dwReserved0=0x0, dwReserved1=0x3, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0198.345] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0198.345] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215b40 [0198.345] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214dd0 [0198.345] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215b40 | out: hHeap=0x1f0000) returned 1 [0198.345] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d00 | out: hHeap=0x1f0000) returned 1 [0198.345] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0198.346] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1044\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1044\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0198.346] GetFileType (hFile=0x1f0) returned 0x1 [0198.346] CloseHandle (hObject=0x1f0) returned 1 [0198.346] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2150a8 [0198.346] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1044\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1044\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x22bebd4 | out: lpFileInformation=0x22bebd4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x135c0)) returned 1 [0198.346] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2150a8 | out: hHeap=0x1f0000) returned 1 [0198.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2149c0 [0198.347] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2149c0 | out: hHeap=0x1f0000) returned 1 [0198.347] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x3, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0198.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d210 [0198.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2161b8 [0198.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2149c0 [0198.347] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2161b8 | out: hHeap=0x1f0000) returned 1 [0198.347] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214dd0 | out: hHeap=0x1f0000) returned 1 [0198.347] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d210 | out: hHeap=0x1f0000) returned 1 [0198.347] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1044\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1044\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0198.347] GetFileType (hFile=0x1f0) returned 0x1 [0198.348] CloseHandle (hObject=0x1f0) returned 1 [0198.348] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2150a8 [0198.348] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1044\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1044\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x22bebd4 | out: lpFileInformation=0x22bebd4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558)) returned 1 [0198.348] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2150a8 | out: hHeap=0x1f0000) returned 1 [0198.348] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2150a8 [0198.348] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2150a8 | out: hHeap=0x1f0000) returned 1 [0198.348] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x3, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0198.348] FindClose (in: hFindFile=0x24ebc0 | out: hFindFile=0x24ebc0) returned 1 [0198.348] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2149c0 | out: hHeap=0x1f0000) returned 1 [0198.349] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e030 | out: hHeap=0x1f0000) returned 1 [0198.349] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0198.349] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215ca8 | out: hHeap=0x1f0000) returned 1 [0198.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215b40 [0198.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0198.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e360 [0198.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2161b8 [0198.349] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1045\\*", lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24eb40 [0198.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215ca8 [0198.349] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2161b8 | out: hHeap=0x1f0000) returned 1 [0198.349] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0198.349] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0198.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2161b8 [0198.349] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215ca8 | out: hHeap=0x1f0000) returned 1 [0198.349] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0198.349] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0198.349] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xfc8, dwReserved0=0x0, dwReserved1=0x3, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0198.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0198.350] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215ca8 [0198.350] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x2150a8 [0198.350] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215ca8 | out: hHeap=0x1f0000) returned 1 [0198.350] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2161b8 | out: hHeap=0x1f0000) returned 1 [0198.350] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0198.350] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1045\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1045\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0198.350] GetFileType (hFile=0x1f0) returned 0x1 [0198.350] CloseHandle (hObject=0x1f0) returned 1 [0198.351] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239a30 [0198.351] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1045\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1045\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x22bebd4 | out: lpFileInformation=0x22bebd4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xfc8)) returned 1 [0198.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239a30 | out: hHeap=0x1f0000) returned 1 [0198.351] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239928 [0198.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239928 | out: hHeap=0x1f0000) returned 1 [0198.351] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x141c6, dwReserved0=0x0, dwReserved1=0x3, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0198.351] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d210 [0198.351] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2161b8 [0198.351] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2149c0 [0198.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2161b8 | out: hHeap=0x1f0000) returned 1 [0198.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2150a8 | out: hHeap=0x1f0000) returned 1 [0198.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d210 | out: hHeap=0x1f0000) returned 1 [0198.351] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1045\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1045\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0198.352] GetFileType (hFile=0x1f0) returned 0x1 [0198.352] CloseHandle (hObject=0x1f0) returned 1 [0198.352] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214b60 [0198.352] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1045\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1045\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x22bebd4 | out: lpFileInformation=0x22bebd4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x141c6)) returned 1 [0198.352] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214b60 | out: hHeap=0x1f0000) returned 1 [0198.352] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d68 [0198.352] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d68 | out: hHeap=0x1f0000) returned 1 [0198.352] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x3, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0198.352] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0198.352] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215ca8 [0198.353] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c98 [0198.353] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215ca8 | out: hHeap=0x1f0000) returned 1 [0198.353] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2149c0 | out: hHeap=0x1f0000) returned 1 [0198.353] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0198.353] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1045\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1045\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0198.353] GetFileType (hFile=0x1f0) returned 0x1 [0198.353] CloseHandle (hObject=0x1f0) returned 1 [0198.353] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a28 [0198.354] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1045\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1045\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x22bebd4 | out: lpFileInformation=0x22bebd4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758)) returned 1 [0198.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a28 | out: hHeap=0x1f0000) returned 1 [0198.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214b60 [0198.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214b60 | out: hHeap=0x1f0000) returned 1 [0198.354] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x3, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0198.354] FindClose (in: hFindFile=0x24eb40 | out: hFindFile=0x24eb40) returned 1 [0198.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c98 | out: hHeap=0x1f0000) returned 1 [0198.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e360 | out: hHeap=0x1f0000) returned 1 [0198.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0198.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215b40 | out: hHeap=0x1f0000) returned 1 [0198.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2161b8 [0198.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0198.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22eb58 [0198.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215b40 [0198.355] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1046\\*", lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24e8c0 [0198.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215ca8 [0198.355] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215b40 | out: hHeap=0x1f0000) returned 1 [0198.355] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0198.355] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0198.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215b40 [0198.355] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215ca8 | out: hHeap=0x1f0000) returned 1 [0198.355] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0198.355] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0198.355] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe63, dwReserved0=0x0, dwReserved1=0x3, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0198.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238028 [0198.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215ca8 [0198.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x214d68 [0198.355] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215ca8 | out: hHeap=0x1f0000) returned 1 [0198.355] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215b40 | out: hHeap=0x1f0000) returned 1 [0198.355] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238028 | out: hHeap=0x1f0000) returned 1 [0198.356] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1046\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1046\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0198.356] GetFileType (hFile=0x1f0) returned 0x1 [0198.356] CloseHandle (hObject=0x1f0) returned 1 [0198.356] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239820 [0198.356] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1046\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1046\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x22bebd4 | out: lpFileInformation=0x22bebd4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe63)) returned 1 [0198.356] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239820 | out: hHeap=0x1f0000) returned 1 [0198.357] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239400 [0198.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239400 | out: hHeap=0x1f0000) returned 1 [0198.357] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13b62, dwReserved0=0x0, dwReserved1=0x3, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0198.357] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cfa8 [0198.357] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215b40 [0198.357] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2150a8 [0198.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215b40 | out: hHeap=0x1f0000) returned 1 [0198.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d68 | out: hHeap=0x1f0000) returned 1 [0198.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cfa8 | out: hHeap=0x1f0000) returned 1 [0198.358] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1046\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1046\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0198.358] GetFileType (hFile=0x1f0) returned 0x1 [0198.358] CloseHandle (hObject=0x1f0) returned 1 [0198.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2149c0 [0198.358] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1046\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1046\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x22bebd4 | out: lpFileInformation=0x22bebd4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13b62)) returned 1 [0198.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2149c0 | out: hHeap=0x1f0000) returned 1 [0198.359] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2149c0 [0198.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2149c0 | out: hHeap=0x1f0000) returned 1 [0198.359] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x3, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0198.359] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0198.359] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215b40 [0198.359] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2149c0 [0198.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215b40 | out: hHeap=0x1f0000) returned 1 [0198.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2150a8 | out: hHeap=0x1f0000) returned 1 [0198.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0198.359] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1046\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1046\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0198.360] GetFileType (hFile=0x1f0) returned 0x1 [0198.360] CloseHandle (hObject=0x1f0) returned 1 [0198.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d00 [0198.360] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1046\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1046\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x22bebd4 | out: lpFileInformation=0x22bebd4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758)) returned 1 [0198.360] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d00 | out: hHeap=0x1f0000) returned 1 [0198.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a90 [0198.360] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a90 | out: hHeap=0x1f0000) returned 1 [0198.360] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x3, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0198.360] FindClose (in: hFindFile=0x24e8c0 | out: hFindFile=0x24e8c0) returned 1 [0198.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2149c0 | out: hHeap=0x1f0000) returned 1 [0198.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22eb58 | out: hHeap=0x1f0000) returned 1 [0198.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0198.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2161b8 | out: hHeap=0x1f0000) returned 1 [0198.361] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2161b8 [0198.361] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0198.361] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e828 [0198.361] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215b40 [0198.361] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1049\\*", lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24ecc0 [0198.361] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215ca8 [0198.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215b40 | out: hHeap=0x1f0000) returned 1 [0198.361] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0198.361] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0198.362] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215b40 [0198.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215ca8 | out: hHeap=0x1f0000) returned 1 [0198.362] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0198.362] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0198.362] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xd4b8, dwReserved0=0x0, dwReserved1=0x3, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0198.362] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0198.362] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215ca8 [0198.362] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x214d00 [0198.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215ca8 | out: hHeap=0x1f0000) returned 1 [0198.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215b40 | out: hHeap=0x1f0000) returned 1 [0198.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0198.362] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1049\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1049\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0198.362] GetFileType (hFile=0x1f0) returned 0x1 [0198.363] CloseHandle (hObject=0x1f0) returned 1 [0198.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239b38 [0198.363] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1049\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1049\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x22bebd4 | out: lpFileInformation=0x22bebd4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xd4b8)) returned 1 [0198.363] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239b38 | out: hHeap=0x1f0000) returned 1 [0198.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239928 [0198.363] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239928 | out: hHeap=0x1f0000) returned 1 [0198.363] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13e4a, dwReserved0=0x0, dwReserved1=0x3, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0198.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0198.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215b40 [0198.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2150a8 [0198.363] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215b40 | out: hHeap=0x1f0000) returned 1 [0198.363] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d00 | out: hHeap=0x1f0000) returned 1 [0198.363] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0198.363] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1049\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1049\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0198.364] GetFileType (hFile=0x1f0) returned 0x1 [0198.364] CloseHandle (hObject=0x1f0) returned 1 [0198.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214e38 [0198.364] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1049\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1049\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x22bebd4 | out: lpFileInformation=0x22bebd4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13e4a)) returned 1 [0198.364] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214e38 | out: hHeap=0x1f0000) returned 1 [0198.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214b60 [0198.364] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214b60 | out: hHeap=0x1f0000) returned 1 [0198.364] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x3, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0198.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0198.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215b40 [0198.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2149c0 [0198.364] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215b40 | out: hHeap=0x1f0000) returned 1 [0198.364] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2150a8 | out: hHeap=0x1f0000) returned 1 [0198.364] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0198.365] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1049\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1049\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0198.365] GetFileType (hFile=0x1f0) returned 0x1 [0198.365] CloseHandle (hObject=0x1f0) returned 1 [0198.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2150a8 [0198.365] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1049\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1049\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x22bebd4 | out: lpFileInformation=0x22bebd4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758)) returned 1 [0198.365] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2150a8 | out: hHeap=0x1f0000) returned 1 [0198.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c98 [0198.365] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c98 | out: hHeap=0x1f0000) returned 1 [0198.365] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x3, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0198.365] FindClose (in: hFindFile=0x24ecc0 | out: hFindFile=0x24ecc0) returned 1 [0198.366] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2149c0 | out: hHeap=0x1f0000) returned 1 [0198.366] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e828 | out: hHeap=0x1f0000) returned 1 [0198.366] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0198.366] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2161b8 | out: hHeap=0x1f0000) returned 1 [0198.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2161b8 [0198.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0198.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e828 [0198.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215b40 [0198.366] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1053\\*", lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24e840 [0198.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215ca8 [0198.366] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215b40 | out: hHeap=0x1f0000) returned 1 [0198.366] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0198.366] FindNextFileW (in: hFindFile=0x24e840, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0198.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215b40 [0198.366] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215ca8 | out: hHeap=0x1f0000) returned 1 [0198.366] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0198.366] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0198.366] FindNextFileW (in: hFindFile=0x24e840, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xf19, dwReserved0=0x0, dwReserved1=0x3, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0198.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0198.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215ca8 [0198.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x2150a8 [0198.367] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215ca8 | out: hHeap=0x1f0000) returned 1 [0198.367] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215b40 | out: hHeap=0x1f0000) returned 1 [0198.367] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0198.367] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1053\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1053\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0198.367] GetFileType (hFile=0x1f0) returned 0x1 [0198.367] CloseHandle (hObject=0x1f0) returned 1 [0198.367] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2399d8 [0198.367] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1053\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1053\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x22bebd4 | out: lpFileInformation=0x22bebd4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xf19)) returned 1 [0198.367] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2399d8 | out: hHeap=0x1f0000) returned 1 [0198.367] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239928 [0198.367] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239928 | out: hHeap=0x1f0000) returned 1 [0198.367] FindNextFileW (in: hFindFile=0x24e840, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12f70, dwReserved0=0x0, dwReserved1=0x3, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0198.367] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0198.368] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215ca8 [0198.368] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c30 [0198.368] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215ca8 | out: hHeap=0x1f0000) returned 1 [0198.368] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2150a8 | out: hHeap=0x1f0000) returned 1 [0198.368] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0198.368] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1053\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1053\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0198.368] GetFileType (hFile=0x1f0) returned 0x1 [0198.368] CloseHandle (hObject=0x1f0) returned 1 [0198.368] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214e38 [0198.368] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1053\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1053\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x22bebd4 | out: lpFileInformation=0x22bebd4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12f70)) returned 1 [0198.369] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214e38 | out: hHeap=0x1f0000) returned 1 [0198.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214bc8 [0198.369] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214bc8 | out: hHeap=0x1f0000) returned 1 [0198.369] FindNextFileW (in: hFindFile=0x24e840, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x3, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0198.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf38 [0198.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215b40 [0198.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2150a8 [0198.369] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215b40 | out: hHeap=0x1f0000) returned 1 [0198.369] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c30 | out: hHeap=0x1f0000) returned 1 [0198.369] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf38 | out: hHeap=0x1f0000) returned 1 [0198.369] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1053\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1053\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0198.369] GetFileType (hFile=0x1f0) returned 0x1 [0198.370] CloseHandle (hObject=0x1f0) returned 1 [0198.370] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d00 [0198.370] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1053\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1053\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x22bebd4 | out: lpFileInformation=0x22bebd4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558)) returned 1 [0198.370] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d00 | out: hHeap=0x1f0000) returned 1 [0198.370] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214ea0 [0198.370] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214ea0 | out: hHeap=0x1f0000) returned 1 [0198.370] FindNextFileW (in: hFindFile=0x24e840, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x3, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0198.370] FindClose (in: hFindFile=0x24e840 | out: hFindFile=0x24e840) returned 1 [0198.370] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2150a8 | out: hHeap=0x1f0000) returned 1 [0198.370] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e828 | out: hHeap=0x1f0000) returned 1 [0198.370] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0198.370] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2161b8 | out: hHeap=0x1f0000) returned 1 [0198.370] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215b40 [0198.370] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0198.370] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e030 [0198.370] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215ca8 [0198.370] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1055\\*", lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24e680 [0198.371] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2161b8 [0198.371] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215ca8 | out: hHeap=0x1f0000) returned 1 [0198.371] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0198.371] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0198.371] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215ca8 [0198.371] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2161b8 | out: hHeap=0x1f0000) returned 1 [0198.371] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0198.371] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0198.371] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xf13, dwReserved0=0x0, dwReserved1=0x3, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0198.371] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238028 [0198.371] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2161b8 [0198.371] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x2150a8 [0198.371] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2161b8 | out: hHeap=0x1f0000) returned 1 [0198.371] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215ca8 | out: hHeap=0x1f0000) returned 1 [0198.371] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238028 | out: hHeap=0x1f0000) returned 1 [0198.372] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1055\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1055\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0198.372] GetFileType (hFile=0x1f0) returned 0x1 [0198.372] CloseHandle (hObject=0x1f0) returned 1 [0198.372] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239b38 [0198.372] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1055\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1055\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x22bebd4 | out: lpFileInformation=0x22bebd4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xf13)) returned 1 [0198.372] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239b38 | out: hHeap=0x1f0000) returned 1 [0198.372] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2395b8 [0198.372] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2395b8 | out: hHeap=0x1f0000) returned 1 [0198.373] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12c12, dwReserved0=0x0, dwReserved1=0x3, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0198.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d210 [0198.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2161b8 [0198.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2149c0 [0198.682] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2161b8 | out: hHeap=0x1f0000) returned 1 [0198.682] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2150a8 | out: hHeap=0x1f0000) returned 1 [0198.712] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d210 | out: hHeap=0x1f0000) returned 1 [0198.712] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1055\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1055\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0198.713] GetFileType (hFile=0x1c0) returned 0x1 [0198.714] CloseHandle (hObject=0x1c0) returned 1 [0198.714] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d00 [0198.714] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1055\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1055\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x22bebd4 | out: lpFileInformation=0x22bebd4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12c12)) returned 1 [0198.714] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d00 | out: hHeap=0x1f0000) returned 1 [0198.714] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d00 [0198.715] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d00 | out: hHeap=0x1f0000) returned 1 [0198.715] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x3, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0198.715] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0198.715] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216098 [0198.715] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214e38 [0198.715] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216098 | out: hHeap=0x1f0000) returned 1 [0198.715] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2149c0 | out: hHeap=0x1f0000) returned 1 [0198.715] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0198.715] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1055\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1055\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0198.715] GetFileType (hFile=0x1c0) returned 0x1 [0198.716] CloseHandle (hObject=0x1c0) returned 1 [0198.716] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d00 [0198.716] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1055\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1055\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x22bebd4 | out: lpFileInformation=0x22bebd4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558)) returned 1 [0198.716] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d00 | out: hHeap=0x1f0000) returned 1 [0198.716] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d00 [0198.716] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d00 | out: hHeap=0x1f0000) returned 1 [0198.780] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x3, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0198.780] FindClose (in: hFindFile=0x24e680 | out: hFindFile=0x24e680) returned 1 [0198.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214e38 | out: hHeap=0x1f0000) returned 1 [0198.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e030 | out: hHeap=0x1f0000) returned 1 [0198.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0198.781] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215b40 | out: hHeap=0x1f0000) returned 1 [0198.781] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216098 [0198.781] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b3e0 [0198.781] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e1c8 [0198.781] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2160e0 [0198.781] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\2052\\*", lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24ea80 [0198.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2161b8 [0198.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2160e0 | out: hHeap=0x1f0000) returned 1 [0198.782] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0198.782] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0198.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215b40 [0198.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2161b8 | out: hHeap=0x1f0000) returned 1 [0198.782] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0198.782] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0198.783] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x16c3, dwReserved0=0x0, dwReserved1=0x3, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0198.783] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b458 [0198.783] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2160e0 [0198.783] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x214d00 [0198.783] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2160e0 | out: hHeap=0x1f0000) returned 1 [0198.783] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215b40 | out: hHeap=0x1f0000) returned 1 [0198.783] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b458 | out: hHeap=0x1f0000) returned 1 [0198.784] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\2052\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2052\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0198.784] GetFileType (hFile=0x1c0) returned 0x1 [0198.785] CloseHandle (hObject=0x1c0) returned 1 [0198.785] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239560 [0198.785] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\2052\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2052\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x22bebd4 | out: lpFileInformation=0x22bebd4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x16c3)) returned 1 [0198.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239560 | out: hHeap=0x1f0000) returned 1 [0198.786] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2399d8 [0198.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2399d8 | out: hHeap=0x1f0000) returned 1 [0198.786] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed0c, dwReserved0=0x0, dwReserved1=0x3, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0198.786] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0198.786] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2160e0 [0198.786] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214e38 [0198.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2160e0 | out: hHeap=0x1f0000) returned 1 [0198.787] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d00 | out: hHeap=0x1f0000) returned 1 [0198.787] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0198.787] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\2052\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2052\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0198.788] GetFileType (hFile=0x1c0) returned 0x1 [0198.788] CloseHandle (hObject=0x1c0) returned 1 [0198.788] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a90 [0198.788] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\2052\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2052\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x22bebd4 | out: lpFileInformation=0x22bebd4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed0c)) returned 1 [0198.788] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a90 | out: hHeap=0x1f0000) returned 1 [0198.789] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a90 [0198.789] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a90 | out: hHeap=0x1f0000) returned 1 [0198.789] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x3, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0198.789] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0198.789] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2160e0 [0198.789] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214af8 [0198.789] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2160e0 | out: hHeap=0x1f0000) returned 1 [0198.789] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214e38 | out: hHeap=0x1f0000) returned 1 [0198.789] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0198.790] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\2052\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2052\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0198.790] GetFileType (hFile=0x1c0) returned 0x1 [0198.791] CloseHandle (hObject=0x1c0) returned 1 [0198.791] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a90 [0198.791] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\2052\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2052\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x22bebd4 | out: lpFileInformation=0x22bebd4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758)) returned 1 [0198.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a90 | out: hHeap=0x1f0000) returned 1 [0198.791] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214ea0 [0198.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214ea0 | out: hHeap=0x1f0000) returned 1 [0198.792] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x3, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0198.792] FindClose (in: hFindFile=0x24ea80 | out: hFindFile=0x24ea80) returned 1 [0198.792] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214af8 | out: hHeap=0x1f0000) returned 1 [0198.792] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e1c8 | out: hHeap=0x1f0000) returned 1 [0198.792] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b3e0 | out: hHeap=0x1f0000) returned 1 [0198.792] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216098 | out: hHeap=0x1f0000) returned 1 [0198.792] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216098 [0198.792] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b3e0 [0198.793] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e1c8 [0198.793] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215b40 [0198.793] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\2070\\*", lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24e900 [0198.793] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2160e0 [0198.793] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215b40 | out: hHeap=0x1f0000) returned 1 [0198.793] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0198.793] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0198.793] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2161b8 [0198.794] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2160e0 | out: hHeap=0x1f0000) returned 1 [0198.794] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0198.794] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0198.794] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xfaf, dwReserved0=0x0, dwReserved1=0x3, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0198.794] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b458 [0198.794] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215b40 [0198.794] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x214958 [0198.794] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215b40 | out: hHeap=0x1f0000) returned 1 [0198.794] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2161b8 | out: hHeap=0x1f0000) returned 1 [0198.795] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b458 | out: hHeap=0x1f0000) returned 1 [0198.795] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\2070\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2070\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0198.796] GetFileType (hFile=0x1c0) returned 0x1 [0198.796] CloseHandle (hObject=0x1c0) returned 1 [0198.797] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239ae0 [0198.797] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\2070\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2070\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x22bebd4 | out: lpFileInformation=0x22bebd4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xfaf)) returned 1 [0198.797] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239ae0 | out: hHeap=0x1f0000) returned 1 [0198.797] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2394b0 [0198.797] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2394b0 | out: hHeap=0x1f0000) returned 1 [0198.797] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1397e, dwReserved0=0x0, dwReserved1=0x3, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0198.797] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0198.797] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215b40 [0198.797] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214fd8 [0198.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215b40 | out: hHeap=0x1f0000) returned 1 [0198.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214958 | out: hHeap=0x1f0000) returned 1 [0198.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0198.798] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\2070\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2070\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0198.799] GetFileType (hFile=0x1c0) returned 0x1 [0198.799] CloseHandle (hObject=0x1c0) returned 1 [0198.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214dd0 [0198.800] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\2070\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2070\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x22bebd4 | out: lpFileInformation=0x22bebd4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1397e)) returned 1 [0198.800] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214dd0 | out: hHeap=0x1f0000) returned 1 [0198.800] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d00 [0198.800] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d00 | out: hHeap=0x1f0000) returned 1 [0198.800] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x3, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0198.800] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d210 [0198.800] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2160e0 [0198.800] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d00 [0198.800] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2160e0 | out: hHeap=0x1f0000) returned 1 [0198.800] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214fd8 | out: hHeap=0x1f0000) returned 1 [0198.801] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d210 | out: hHeap=0x1f0000) returned 1 [0198.801] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\2070\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2070\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0198.802] GetFileType (hFile=0x1c0) returned 0x1 [0198.802] CloseHandle (hObject=0x1c0) returned 1 [0198.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d68 [0198.802] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\2070\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2070\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x22bebd4 | out: lpFileInformation=0x22bebd4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958)) returned 1 [0198.803] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d68 | out: hHeap=0x1f0000) returned 1 [0198.803] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2150a8 [0198.803] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2150a8 | out: hHeap=0x1f0000) returned 1 [0198.803] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x3, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0198.803] FindClose (in: hFindFile=0x24e900 | out: hFindFile=0x24e900) returned 1 [0198.803] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d00 | out: hHeap=0x1f0000) returned 1 [0198.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e1c8 | out: hHeap=0x1f0000) returned 1 [0198.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b3e0 | out: hHeap=0x1f0000) returned 1 [0198.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216098 | out: hHeap=0x1f0000) returned 1 [0198.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2161b8 [0198.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b3e0 [0198.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e9c0 [0198.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215b40 [0198.804] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\3076\\*", lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24e740 [0198.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216098 [0198.805] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215b40 | out: hHeap=0x1f0000) returned 1 [0198.805] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0198.805] FindNextFileW (in: hFindFile=0x24e740, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0198.805] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2160e0 [0198.805] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216098 | out: hHeap=0x1f0000) returned 1 [0198.805] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0198.805] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0198.805] FindNextFileW (in: hFindFile=0x24e740, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x18a5, dwReserved0=0x0, dwReserved1=0x3, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0198.805] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b458 [0198.805] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216098 [0198.805] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x214b60 [0198.806] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216098 | out: hHeap=0x1f0000) returned 1 [0198.806] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2160e0 | out: hHeap=0x1f0000) returned 1 [0198.806] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b458 | out: hHeap=0x1f0000) returned 1 [0198.806] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\3076\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3076\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0198.807] GetFileType (hFile=0x1c0) returned 0x1 [0198.807] CloseHandle (hObject=0x1c0) returned 1 [0198.808] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239ae0 [0198.808] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\3076\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3076\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x22bebd4 | out: lpFileInformation=0x22bebd4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x18a5)) returned 1 [0198.808] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239ae0 | out: hHeap=0x1f0000) returned 1 [0198.808] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239718 [0198.808] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239718 | out: hHeap=0x1f0000) returned 1 [0198.808] FindNextFileW (in: hFindFile=0x24e740, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed90, dwReserved0=0x0, dwReserved1=0x3, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0198.808] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0198.808] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216098 [0198.808] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214bc8 [0198.809] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216098 | out: hHeap=0x1f0000) returned 1 [0198.809] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214b60 | out: hHeap=0x1f0000) returned 1 [0198.809] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0198.809] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\3076\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3076\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0198.810] GetFileType (hFile=0x1c0) returned 0x1 [0198.810] CloseHandle (hObject=0x1c0) returned 1 [0199.061] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214dd0 [0199.061] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\3076\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3076\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x22bebd4 | out: lpFileInformation=0x22bebd4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed90)) returned 1 [0199.061] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214dd0 | out: hHeap=0x1f0000) returned 1 [0199.061] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214af8 [0199.061] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214af8 | out: hHeap=0x1f0000) returned 1 [0199.061] FindNextFileW (in: hFindFile=0x24e740, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x3, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0199.061] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf38 [0199.061] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2168c0 [0199.061] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214dd0 [0199.061] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2168c0 | out: hHeap=0x1f0000) returned 1 [0199.061] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214bc8 | out: hHeap=0x1f0000) returned 1 [0199.061] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf38 | out: hHeap=0x1f0000) returned 1 [0199.062] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\3076\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\3076\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0199.062] GetFileType (hFile=0x1c0) returned 0x1 [0199.062] CloseHandle (hObject=0x1c0) returned 1 [0199.062] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c98 [0199.062] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\3076\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\3076\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x22bebd4 | out: lpFileInformation=0x22bebd4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758)) returned 1 [0199.063] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c98 | out: hHeap=0x1f0000) returned 1 [0199.063] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214e38 [0199.063] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214e38 | out: hHeap=0x1f0000) returned 1 [0199.063] FindNextFileW (in: hFindFile=0x24e740, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x3, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0199.063] FindClose (in: hFindFile=0x24e740 | out: hFindFile=0x24e740) returned 1 [0199.063] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214dd0 | out: hHeap=0x1f0000) returned 1 [0199.063] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e9c0 | out: hHeap=0x1f0000) returned 1 [0199.063] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b3e0 | out: hHeap=0x1f0000) returned 1 [0199.063] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2161b8 | out: hHeap=0x1f0000) returned 1 [0199.063] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2161b8 [0199.063] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0199.063] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d6a0 [0199.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216320 [0199.064] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\3082\\*", lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24ed00 [0199.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2168c0 [0199.064] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216320 | out: hHeap=0x1f0000) returned 1 [0199.064] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0199.064] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0199.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216248 [0199.064] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2168c0 | out: hHeap=0x1f0000) returned 1 [0199.064] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0199.064] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0199.064] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xbfd, dwReserved0=0x0, dwReserved1=0x3, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0199.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383c0 [0199.065] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2168c0 [0199.065] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x2150a8 [0199.065] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2168c0 | out: hHeap=0x1f0000) returned 1 [0199.065] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216248 | out: hHeap=0x1f0000) returned 1 [0199.065] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383c0 | out: hHeap=0x1f0000) returned 1 [0199.065] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\3082\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3082\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0199.065] GetFileType (hFile=0x1c0) returned 0x1 [0199.066] CloseHandle (hObject=0x1c0) returned 1 [0199.066] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2399d8 [0199.066] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\3082\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3082\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x22bebd4 | out: lpFileInformation=0x22bebd4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xbfd)) returned 1 [0199.066] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2399d8 | out: hHeap=0x1f0000) returned 1 [0199.066] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239928 [0199.066] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239928 | out: hHeap=0x1f0000) returned 1 [0199.066] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1387c, dwReserved0=0x0, dwReserved1=0x3, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0199.066] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf38 [0199.067] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216320 [0199.067] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214dd0 [0199.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216320 | out: hHeap=0x1f0000) returned 1 [0199.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2150a8 | out: hHeap=0x1f0000) returned 1 [0199.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf38 | out: hHeap=0x1f0000) returned 1 [0199.067] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\3082\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3082\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0199.067] GetFileType (hFile=0x1c0) returned 0x1 [0199.068] CloseHandle (hObject=0x1c0) returned 1 [0199.068] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214f70 [0199.068] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\3082\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3082\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x22bebd4 | out: lpFileInformation=0x22bebd4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1387c)) returned 1 [0199.068] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f70 | out: hHeap=0x1f0000) returned 1 [0199.068] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214e38 [0199.068] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214e38 | out: hHeap=0x1f0000) returned 1 [0199.068] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x3, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0199.068] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf38 [0199.069] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216248 [0199.069] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2150a8 [0199.069] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216248 | out: hHeap=0x1f0000) returned 1 [0199.069] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214dd0 | out: hHeap=0x1f0000) returned 1 [0199.069] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf38 | out: hHeap=0x1f0000) returned 1 [0199.069] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\3082\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\3082\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0199.070] GetFileType (hFile=0x1c0) returned 0x1 [0199.070] CloseHandle (hObject=0x1c0) returned 1 [0199.070] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214f70 [0199.070] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\3082\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\3082\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x22bebd4 | out: lpFileInformation=0x22bebd4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958)) returned 1 [0199.070] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f70 | out: hHeap=0x1f0000) returned 1 [0199.070] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214fd8 [0199.070] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214fd8 | out: hHeap=0x1f0000) returned 1 [0199.071] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x3, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0199.071] FindClose (in: hFindFile=0x24ed00 | out: hFindFile=0x24ed00) returned 1 [0199.071] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2150a8 | out: hHeap=0x1f0000) returned 1 [0199.071] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d6a0 | out: hHeap=0x1f0000) returned 1 [0199.071] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0199.071] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2161b8 | out: hHeap=0x1f0000) returned 1 [0199.071] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2161b8 [0199.071] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383c0 [0199.071] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e9c0 [0199.071] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2168c0 [0199.071] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\Client\\*", lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24e800 [0199.071] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216320 [0199.071] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2168c0 | out: hHeap=0x1f0000) returned 1 [0199.072] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0199.072] FindNextFileW (in: hFindFile=0x24e800, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0199.072] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2168c0 [0199.072] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x214af8 [0199.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2168c0 | out: hHeap=0x1f0000) returned 1 [0199.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216320 | out: hHeap=0x1f0000) returned 1 [0199.072] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0199.072] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0199.072] FindNextFileW (in: hFindFile=0x24e800, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce2bc00, ftCreationTime.dwHighDateTime=0x1cac6d5, ftLastAccessTime.dwLowDateTime=0xce2bc00, ftLastAccessTime.dwHighDateTime=0x1cac6d5, ftLastWriteTime.dwLowDateTime=0xce2bc00, ftLastWriteTime.dwHighDateTime=0x1cac6d5, nFileSizeHigh=0x0, nFileSizeLow=0x31444, dwReserved0=0x0, dwReserved1=0x3, cFileName="Parameterinfo.xml", cAlternateFileName="PARAME~1.XML")) returned 1 [0199.072] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf38 [0199.072] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2168c0 [0199.072] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c98 [0199.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2168c0 | out: hHeap=0x1f0000) returned 1 [0199.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214af8 | out: hHeap=0x1f0000) returned 1 [0199.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf38 | out: hHeap=0x1f0000) returned 1 [0199.073] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Client\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\parameterinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0199.073] GetFileType (hFile=0x1c0) returned 0x1 [0199.073] CloseHandle (hObject=0x1c0) returned 1 [0199.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214ea0 [0199.073] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Client\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\parameterinfo.xml"), fInfoLevelId=0x0, lpFileInformation=0x22bebd4 | out: lpFileInformation=0x22bebd4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce2bc00, ftCreationTime.dwHighDateTime=0x1cac6d5, ftLastAccessTime.dwLowDateTime=0xce2bc00, ftLastAccessTime.dwHighDateTime=0x1cac6d5, ftLastWriteTime.dwLowDateTime=0xce2bc00, ftLastWriteTime.dwHighDateTime=0x1cac6d5, nFileSizeHigh=0x0, nFileSizeLow=0x31444)) returned 1 [0199.073] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214ea0 | out: hHeap=0x1f0000) returned 1 [0199.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214dd0 [0199.074] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214dd0 | out: hHeap=0x1f0000) returned 1 [0199.074] FindNextFileW (in: hFindFile=0x24e800, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x9882, dwReserved0=0x0, dwReserved1=0x3, cFileName="UiInfo.xml", cAlternateFileName="")) returned 1 [0199.074] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0199.074] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2168c0 [0199.074] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214e38 [0199.074] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2168c0 | out: hHeap=0x1f0000) returned 1 [0199.074] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c98 | out: hHeap=0x1f0000) returned 1 [0199.074] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0199.074] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Client\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\uiinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0199.075] GetFileType (hFile=0x1c0) returned 0x1 [0199.075] CloseHandle (hObject=0x1c0) returned 1 [0199.075] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c30 [0199.075] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Client\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\uiinfo.xml"), fInfoLevelId=0x0, lpFileInformation=0x22bebd4 | out: lpFileInformation=0x22bebd4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x9882)) returned 1 [0199.075] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c30 | out: hHeap=0x1f0000) returned 1 [0199.075] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214ea0 [0199.076] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214ea0 | out: hHeap=0x1f0000) returned 1 [0199.076] FindNextFileW (in: hFindFile=0x24e800, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x9882, dwReserved0=0x0, dwReserved1=0x3, cFileName="UiInfo.xml", cAlternateFileName="")) returned 0 [0199.076] FindClose (in: hFindFile=0x24e800 | out: hFindFile=0x24e800) returned 1 [0199.076] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214e38 | out: hHeap=0x1f0000) returned 1 [0199.077] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e9c0 | out: hHeap=0x1f0000) returned 1 [0199.077] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383c0 | out: hHeap=0x1f0000) returned 1 [0199.077] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2161b8 | out: hHeap=0x1f0000) returned 1 [0199.077] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2161b8 [0199.077] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383c0 [0199.077] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d6a0 [0199.077] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2397c8 [0199.077] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\Extended\\*", lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24ea00 [0199.077] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2399d8 [0199.077] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2397c8 | out: hHeap=0x1f0000) returned 1 [0199.077] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0199.077] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0199.078] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2397c8 [0199.078] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2399d8 | out: hHeap=0x1f0000) returned 1 [0199.078] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0199.078] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0199.078] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2a714f00, ftCreationTime.dwHighDateTime=0x1cac6f0, ftLastAccessTime.dwLowDateTime=0x2a714f00, ftLastAccessTime.dwHighDateTime=0x1cac6f0, ftLastWriteTime.dwLowDateTime=0x2a714f00, ftLastWriteTime.dwHighDateTime=0x1cac6f0, nFileSizeHigh=0x0, nFileSizeLow=0x16c82, dwReserved0=0x0, dwReserved1=0x3, cFileName="Parameterinfo.xml", cAlternateFileName="PARAME~1.XML")) returned 1 [0199.078] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2f0 [0199.078] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2399d8 [0199.078] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x218050 [0199.078] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2399d8 | out: hHeap=0x1f0000) returned 1 [0199.078] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2397c8 | out: hHeap=0x1f0000) returned 1 [0199.078] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0199.079] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Extended\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\parameterinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0199.079] GetFileType (hFile=0x1c0) returned 0x1 [0199.080] CloseHandle (hObject=0x1c0) returned 1 [0199.080] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22aa90 [0199.080] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Extended\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\parameterinfo.xml"), fInfoLevelId=0x0, lpFileInformation=0x22bebd4 | out: lpFileInformation=0x22bebd4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2a714f00, ftCreationTime.dwHighDateTime=0x1cac6f0, ftLastAccessTime.dwLowDateTime=0x2a714f00, ftLastAccessTime.dwHighDateTime=0x1cac6f0, ftLastWriteTime.dwLowDateTime=0x2a714f00, ftLastWriteTime.dwHighDateTime=0x1cac6f0, nFileSizeHigh=0x0, nFileSizeLow=0x16c82)) returned 1 [0199.080] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aa90 | out: hHeap=0x1f0000) returned 1 [0199.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22aa18 [0199.081] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aa18 | out: hHeap=0x1f0000) returned 1 [0199.081] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x988a, dwReserved0=0x0, dwReserved1=0x3, cFileName="UiInfo.xml", cAlternateFileName="")) returned 1 [0199.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0199.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239ae0 [0199.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217cd0 [0199.081] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239ae0 | out: hHeap=0x1f0000) returned 1 [0199.081] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218050 | out: hHeap=0x1f0000) returned 1 [0199.081] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0199.082] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Extended\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\uiinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0199.082] GetFileType (hFile=0x1c0) returned 0x1 [0199.083] CloseHandle (hObject=0x1c0) returned 1 [0199.083] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a90 [0199.083] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Extended\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\uiinfo.xml"), fInfoLevelId=0x0, lpFileInformation=0x22bebd4 | out: lpFileInformation=0x22bebd4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x988a)) returned 1 [0199.083] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a90 | out: hHeap=0x1f0000) returned 1 [0199.083] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c98 [0199.084] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c98 | out: hHeap=0x1f0000) returned 1 [0199.084] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x988a, dwReserved0=0x0, dwReserved1=0x3, cFileName="UiInfo.xml", cAlternateFileName="")) returned 0 [0199.084] FindClose (in: hFindFile=0x24ea00 | out: hFindFile=0x24ea00) returned 1 [0199.084] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217cd0 | out: hHeap=0x1f0000) returned 1 [0199.084] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d6a0 | out: hHeap=0x1f0000) returned 1 [0199.084] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383c0 | out: hHeap=0x1f0000) returned 1 [0199.084] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2161b8 | out: hHeap=0x1f0000) returned 1 [0199.084] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2161b8 [0199.084] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383c0 [0199.084] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f020 [0199.084] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239928 [0199.085] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\*", lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24ecc0 [0199.085] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2397c8 [0199.085] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239928 | out: hHeap=0x1f0000) returned 1 [0199.085] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0199.085] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0199.085] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239400 [0199.085] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2397c8 | out: hHeap=0x1f0000) returned 1 [0199.085] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0199.085] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0199.086] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0x3, cFileName="Print.ico", cAlternateFileName="")) returned 1 [0199.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0199.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2397c8 [0199.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217e50 [0199.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2397c8 | out: hHeap=0x1f0000) returned 1 [0199.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239400 | out: hHeap=0x1f0000) returned 1 [0199.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0199.086] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Print.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\print.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0199.087] GetFileType (hFile=0x1c0) returned 0x1 [0199.087] CloseHandle (hObject=0x1c0) returned 1 [0199.087] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214b60 [0199.087] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Print.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\print.ico"), fInfoLevelId=0x0, lpFileInformation=0x22bebd4 | out: lpFileInformation=0x22bebd4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e)) returned 1 [0199.088] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214b60 | out: hHeap=0x1f0000) returned 1 [0199.088] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2149c0 [0199.088] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2149c0 | out: hHeap=0x1f0000) returned 1 [0199.088] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x3, cFileName="Rotate1.ico", cAlternateFileName="")) returned 1 [0199.088] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0199.088] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239ae0 [0199.088] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217650 [0199.088] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239ae0 | out: hHeap=0x1f0000) returned 1 [0199.088] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217e50 | out: hHeap=0x1f0000) returned 1 [0199.088] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0199.089] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate1.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate1.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0199.089] GetFileType (hFile=0x1c0) returned 0x1 [0199.090] CloseHandle (hObject=0x1c0) returned 1 [0199.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214dd0 [0199.090] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate1.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate1.ico"), fInfoLevelId=0x0, lpFileInformation=0x22bebd4 | out: lpFileInformation=0x22bebd4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1 [0199.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214dd0 | out: hHeap=0x1f0000) returned 1 [0199.091] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214af8 [0199.091] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214af8 | out: hHeap=0x1f0000) returned 1 [0199.091] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x3, cFileName="Rotate2.ico", cAlternateFileName="")) returned 1 [0199.091] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0199.091] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2399d8 [0199.091] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x218250 [0199.091] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2399d8 | out: hHeap=0x1f0000) returned 1 [0199.091] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217650 | out: hHeap=0x1f0000) returned 1 [0199.092] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0199.092] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate2.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate2.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0199.093] GetFileType (hFile=0x1c0) returned 0x1 [0199.093] CloseHandle (hObject=0x1c0) returned 1 [0199.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214ea0 [0199.093] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate2.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate2.ico"), fInfoLevelId=0x0, lpFileInformation=0x22bebd4 | out: lpFileInformation=0x22bebd4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1 [0199.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214ea0 | out: hHeap=0x1f0000) returned 1 [0199.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c30 [0199.094] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c30 | out: hHeap=0x1f0000) returned 1 [0199.094] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x3, cFileName="Rotate3.ico", cAlternateFileName="")) returned 1 [0199.094] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0199.094] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239928 [0199.094] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x2183d0 [0199.094] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239928 | out: hHeap=0x1f0000) returned 1 [0199.094] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218250 | out: hHeap=0x1f0000) returned 1 [0199.094] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0199.095] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate3.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate3.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0199.095] GetFileType (hFile=0x1c0) returned 0x1 [0199.096] CloseHandle (hObject=0x1c0) returned 1 [0199.096] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214bc8 [0199.096] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate3.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate3.ico"), fInfoLevelId=0x0, lpFileInformation=0x22bebd4 | out: lpFileInformation=0x22bebd4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1 [0199.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214bc8 | out: hHeap=0x1f0000) returned 1 [0199.097] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c98 [0199.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c98 | out: hHeap=0x1f0000) returned 1 [0199.097] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x3, cFileName="Rotate4.ico", cAlternateFileName="")) returned 1 [0199.097] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0199.097] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239928 [0199.097] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x2182d0 [0199.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239928 | out: hHeap=0x1f0000) returned 1 [0199.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2183d0 | out: hHeap=0x1f0000) returned 1 [0199.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0199.098] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate4.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate4.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0199.098] GetFileType (hFile=0x1c0) returned 0x1 [0199.099] CloseHandle (hObject=0x1c0) returned 1 [0199.099] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214fd8 [0199.099] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate4.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate4.ico"), fInfoLevelId=0x0, lpFileInformation=0x22bebd4 | out: lpFileInformation=0x22bebd4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1 [0199.099] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214fd8 | out: hHeap=0x1f0000) returned 1 [0199.099] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214f70 [0199.100] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f70 | out: hHeap=0x1f0000) returned 1 [0199.100] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x3, cFileName="Rotate5.ico", cAlternateFileName="")) returned 1 [0199.100] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0199.100] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239668 [0199.100] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x2179d0 [0199.100] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239668 | out: hHeap=0x1f0000) returned 1 [0199.100] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2182d0 | out: hHeap=0x1f0000) returned 1 [0199.100] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0199.101] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate5.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate5.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0199.101] GetFileType (hFile=0x1c0) returned 0x1 [0199.101] CloseHandle (hObject=0x1c0) returned 1 [0199.102] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c98 [0199.102] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate5.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate5.ico"), fInfoLevelId=0x0, lpFileInformation=0x22bebd4 | out: lpFileInformation=0x22bebd4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1 [0199.102] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c98 | out: hHeap=0x1f0000) returned 1 [0199.102] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2150a8 [0199.102] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2150a8 | out: hHeap=0x1f0000) returned 1 [0199.102] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x3, cFileName="Rotate6.ico", cAlternateFileName="")) returned 1 [0199.102] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0199.102] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2397c8 [0199.103] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217cd0 [0199.103] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2397c8 | out: hHeap=0x1f0000) returned 1 [0199.103] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2179d0 | out: hHeap=0x1f0000) returned 1 [0199.103] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0199.103] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate6.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate6.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0199.103] GetFileType (hFile=0x1c0) returned 0x1 [0199.104] CloseHandle (hObject=0x1c0) returned 1 [0199.104] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214dd0 [0199.104] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate6.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate6.ico"), fInfoLevelId=0x0, lpFileInformation=0x22bebd4 | out: lpFileInformation=0x22bebd4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1 [0199.104] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214dd0 | out: hHeap=0x1f0000) returned 1 [0199.104] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214dd0 [0199.104] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214dd0 | out: hHeap=0x1f0000) returned 1 [0199.105] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x3, cFileName="Rotate7.ico", cAlternateFileName="")) returned 1 [0199.105] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0199.105] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239ae0 [0199.105] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x2180d0 [0199.105] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239ae0 | out: hHeap=0x1f0000) returned 1 [0199.105] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217cd0 | out: hHeap=0x1f0000) returned 1 [0199.105] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0199.106] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate7.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate7.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0199.106] GetFileType (hFile=0x1c0) returned 0x1 [0199.106] CloseHandle (hObject=0x1c0) returned 1 [0199.107] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214f70 [0199.107] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate7.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate7.ico"), fInfoLevelId=0x0, lpFileInformation=0x22bebd4 | out: lpFileInformation=0x22bebd4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1 [0199.421] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f70 | out: hHeap=0x1f0000) returned 1 [0199.421] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2149c0 [0199.421] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2149c0 | out: hHeap=0x1f0000) returned 1 [0199.421] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x3, cFileName="Rotate8.ico", cAlternateFileName="")) returned 1 [0199.421] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0199.421] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2394b0 [0199.421] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x2175d0 [0199.421] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2394b0 | out: hHeap=0x1f0000) returned 1 [0199.421] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2180d0 | out: hHeap=0x1f0000) returned 1 [0199.421] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0199.422] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate8.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate8.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0199.422] GetFileType (hFile=0x1f4) returned 0x1 [0199.422] CloseHandle (hObject=0x1f4) returned 1 [0199.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a28 [0199.422] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate8.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate8.ico"), fInfoLevelId=0x0, lpFileInformation=0x22bebd4 | out: lpFileInformation=0x22bebd4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1 [0199.422] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a28 | out: hHeap=0x1f0000) returned 1 [0199.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214e38 [0199.422] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214e38 | out: hHeap=0x1f0000) returned 1 [0199.423] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0x3, cFileName="Save.ico", cAlternateFileName="")) returned 1 [0199.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0199.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2399d8 [0199.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217850 [0199.423] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2399d8 | out: hHeap=0x1f0000) returned 1 [0199.423] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2175d0 | out: hHeap=0x1f0000) returned 1 [0199.423] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0199.423] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Save.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\save.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0199.423] GetFileType (hFile=0x1f4) returned 0x1 [0199.424] CloseHandle (hObject=0x1f4) returned 1 [0199.424] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214f70 [0199.424] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Save.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\save.ico"), fInfoLevelId=0x0, lpFileInformation=0x22bebd4 | out: lpFileInformation=0x22bebd4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e)) returned 1 [0199.424] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f70 | out: hHeap=0x1f0000) returned 1 [0199.424] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214dd0 [0199.424] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214dd0 | out: hHeap=0x1f0000) returned 1 [0199.424] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x8f66, dwReserved0=0x0, dwReserved1=0x3, cFileName="Setup.ico", cAlternateFileName="")) returned 1 [0199.424] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0199.424] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2394b0 [0199.424] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217c50 [0199.424] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2394b0 | out: hHeap=0x1f0000) returned 1 [0199.424] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217850 | out: hHeap=0x1f0000) returned 1 [0199.424] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0199.425] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Setup.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\setup.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0199.425] GetFileType (hFile=0x1f4) returned 0x1 [0199.425] CloseHandle (hObject=0x1f4) returned 1 [0199.425] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214f70 [0199.426] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Setup.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\setup.ico"), fInfoLevelId=0x0, lpFileInformation=0x22bebd4 | out: lpFileInformation=0x22bebd4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x8f66)) returned 1 [0199.426] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f70 | out: hHeap=0x1f0000) returned 1 [0199.426] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d68 [0199.426] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d68 | out: hHeap=0x1f0000) returned 1 [0199.426] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5b5e7f00, ftCreationTime.dwHighDateTime=0x1ca927c, ftLastAccessTime.dwLowDateTime=0x5b5e7f00, ftLastAccessTime.dwHighDateTime=0x1ca927c, ftLastWriteTime.dwLowDateTime=0x5b5e7f00, ftLastWriteTime.dwHighDateTime=0x1ca927c, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0x3, cFileName="stop.ico", cAlternateFileName="")) returned 1 [0199.426] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0199.426] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239a30 [0199.426] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217bd0 [0199.426] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239a30 | out: hHeap=0x1f0000) returned 1 [0199.426] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217c50 | out: hHeap=0x1f0000) returned 1 [0199.426] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0199.427] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\stop.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\stop.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0199.427] GetFileType (hFile=0x1f4) returned 0x1 [0199.427] CloseHandle (hObject=0x1f4) returned 1 [0199.427] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214fd8 [0199.428] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\stop.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\stop.ico"), fInfoLevelId=0x0, lpFileInformation=0x22bebd4 | out: lpFileInformation=0x22bebd4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5b5e7f00, ftCreationTime.dwHighDateTime=0x1ca927c, ftLastAccessTime.dwLowDateTime=0x5b5e7f00, ftLastAccessTime.dwHighDateTime=0x1ca927c, ftLastWriteTime.dwLowDateTime=0x5b5e7f00, ftLastWriteTime.dwHighDateTime=0x1ca927c, nFileSizeHigh=0x0, nFileSizeLow=0x2796)) returned 1 [0199.428] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214fd8 | out: hHeap=0x1f0000) returned 1 [0199.428] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214f70 [0199.428] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f70 | out: hHeap=0x1f0000) returned 1 [0199.428] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0x3, cFileName="SysReqMet.ico", cAlternateFileName="SYSREQ~1.ICO")) returned 1 [0199.428] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0199.428] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2399d8 [0199.428] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217950 [0199.428] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2399d8 | out: hHeap=0x1f0000) returned 1 [0199.428] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217bd0 | out: hHeap=0x1f0000) returned 1 [0199.428] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0199.429] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\SysReqMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqmet.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0199.429] GetFileType (hFile=0x1f4) returned 0x1 [0199.429] CloseHandle (hObject=0x1f4) returned 1 [0199.430] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a28 [0199.430] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\SysReqMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqmet.ico"), fInfoLevelId=0x0, lpFileInformation=0x22bebd4 | out: lpFileInformation=0x22bebd4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e)) returned 1 [0199.430] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a28 | out: hHeap=0x1f0000) returned 1 [0199.430] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214af8 [0199.430] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214af8 | out: hHeap=0x1f0000) returned 1 [0199.430] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0x3, cFileName="SysReqNotMet.ico", cAlternateFileName="SYSREQ~2.ICO")) returned 1 [0199.432] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf70 [0199.432] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2395b8 [0199.432] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x2178d0 [0199.432] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2395b8 | out: hHeap=0x1f0000) returned 1 [0199.432] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217950 | out: hHeap=0x1f0000) returned 1 [0199.432] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf70 | out: hHeap=0x1f0000) returned 1 [0199.432] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqnotmet.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0199.432] GetFileType (hFile=0x1f4) returned 0x1 [0199.433] CloseHandle (hObject=0x1f4) returned 1 [0199.433] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ae50 [0199.433] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqnotmet.ico"), fInfoLevelId=0x0, lpFileInformation=0x22bebd4 | out: lpFileInformation=0x22bebd4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e)) returned 1 [0199.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ae50 | out: hHeap=0x1f0000) returned 1 [0199.433] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22aa18 [0199.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aa18 | out: hHeap=0x1f0000) returned 1 [0199.433] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0x3, cFileName="warn.ico", cAlternateFileName="")) returned 1 [0199.433] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0199.433] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2399d8 [0199.433] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217850 [0199.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2399d8 | out: hHeap=0x1f0000) returned 1 [0199.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2178d0 | out: hHeap=0x1f0000) returned 1 [0199.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0199.434] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\warn.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\warn.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0199.434] GetFileType (hFile=0x1f4) returned 0x1 [0199.434] CloseHandle (hObject=0x1f4) returned 1 [0199.434] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a90 [0199.434] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\warn.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\warn.ico"), fInfoLevelId=0x0, lpFileInformation=0x22bebd4 | out: lpFileInformation=0x22bebd4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x2796)) returned 1 [0199.434] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a90 | out: hHeap=0x1f0000) returned 1 [0199.435] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214f70 [0199.435] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f70 | out: hHeap=0x1f0000) returned 1 [0199.435] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0x3, cFileName="warn.ico", cAlternateFileName="")) returned 0 [0199.435] FindClose (in: hFindFile=0x24ecc0 | out: hFindFile=0x24ecc0) returned 1 [0199.435] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217850 | out: hHeap=0x1f0000) returned 1 [0199.435] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f020 | out: hHeap=0x1f0000) returned 1 [0199.435] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383c0 | out: hHeap=0x1f0000) returned 1 [0199.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2161b8 | out: hHeap=0x1f0000) returned 1 [0199.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229940 | out: hHeap=0x1f0000) returned 1 [0199.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2344b8 | out: hHeap=0x1f0000) returned 1 [0199.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234aa0 | out: hHeap=0x1f0000) returned 1 [0199.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234740 | out: hHeap=0x1f0000) returned 1 [0199.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234548 | out: hHeap=0x1f0000) returned 1 [0199.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234ae8 | out: hHeap=0x1f0000) returned 1 [0199.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234818 | out: hHeap=0x1f0000) returned 1 [0199.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b30 | out: hHeap=0x1f0000) returned 1 [0199.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234788 | out: hHeap=0x1f0000) returned 1 [0199.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2345d8 | out: hHeap=0x1f0000) returned 1 [0199.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234668 | out: hHeap=0x1f0000) returned 1 [0199.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2347d0 | out: hHeap=0x1f0000) returned 1 [0199.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234500 | out: hHeap=0x1f0000) returned 1 [0199.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346b0 | out: hHeap=0x1f0000) returned 1 [0199.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2348a8 | out: hHeap=0x1f0000) returned 1 [0199.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2348f0 | out: hHeap=0x1f0000) returned 1 [0199.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228f80 | out: hHeap=0x1f0000) returned 1 [0199.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229178 | out: hHeap=0x1f0000) returned 1 [0199.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229250 | out: hHeap=0x1f0000) returned 1 [0199.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2290e8 | out: hHeap=0x1f0000) returned 1 [0199.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229328 | out: hHeap=0x1f0000) returned 1 [0199.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229370 | out: hHeap=0x1f0000) returned 1 [0199.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228d40 | out: hHeap=0x1f0000) returned 1 [0199.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214098 | out: hHeap=0x1f0000) returned 1 [0199.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222a30 | out: hHeap=0x1f0000) returned 1 [0199.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2225f8 | out: hHeap=0x1f0000) returned 1 [0199.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222b08 | out: hHeap=0x1f0000) returned 1 [0199.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222178 | out: hHeap=0x1f0000) returned 1 [0199.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2221c0 | out: hHeap=0x1f0000) returned 1 [0199.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230860 | out: hHeap=0x1f0000) returned 1 [0199.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227520 | out: hHeap=0x1f0000) returned 1 [0199.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ba98 | out: hHeap=0x1f0000) returned 1 [0199.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234620 | out: hHeap=0x1f0000) returned 1 [0199.438] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2161b8 [0199.438] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383c0 [0199.438] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22db68 [0199.438] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0199.438] FindFirstFileW (in: lpFileName="C:\\\\Boot\\*", lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9d311c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef9d311c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName=".", cAlternateFileName="")) returned 0x24e8c0 [0199.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b458 [0199.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0199.577] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0199.578] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9d311c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef9d311c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="..", cAlternateFileName="")) returned 1 [0199.578] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b318 [0199.578] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b458 | out: hHeap=0x1f0000) returned 1 [0199.578] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0199.578] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0199.578] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xac3efa99, ftLastAccessTime.dwHighDateTime=0x1d4d5d3, ftLastWriteTime.dwLowDateTime=0xac3efa99, ftLastWriteTime.dwHighDateTime=0x1d4d5d3, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="BCD", cAlternateFileName="")) returned 1 [0199.578] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b778 [0199.578] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b318 | out: hHeap=0x1f0000) returned 1 [0199.578] CreateFileW (lpFileName="C:\\\\Boot\\BCD" (normalized: "c:\\boot\\bcd"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0199.579] GetLastError () returned 0x20 [0199.579] GetLastError () returned 0x20 [0199.579] SetLastError (dwErrCode=0x20) [0199.579] GetLastError () returned 0x20 [0199.579] SetLastError (dwErrCode=0x20) [0199.579] GetLastError () returned 0x20 [0199.579] SetLastError (dwErrCode=0x20) [0199.579] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="BCD.LOG", cAlternateFileName="")) returned 1 [0199.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b7c8 [0199.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf70 [0199.580] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b7c8 | out: hHeap=0x1f0000) returned 1 [0199.580] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b778 | out: hHeap=0x1f0000) returned 1 [0199.580] CreateFileW (lpFileName="C:\\\\Boot\\BCD.LOG" (normalized: "c:\\boot\\bcd.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0199.581] GetLastError () returned 0x20 [0199.581] GetLastError () returned 0x20 [0199.581] SetLastError (dwErrCode=0x20) [0199.581] GetLastError () returned 0x20 [0199.581] SetLastError (dwErrCode=0x20) [0199.581] GetLastError () returned 0x20 [0199.581] SetLastError (dwErrCode=0x20) [0199.581] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="BCD.LOG1", cAlternateFileName="BCD~1.LOG")) returned 1 [0199.581] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b5c0 [0199.581] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b458 [0199.581] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cfa8 [0199.581] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b458 | out: hHeap=0x1f0000) returned 1 [0199.581] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf70 | out: hHeap=0x1f0000) returned 1 [0199.582] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b5c0 | out: hHeap=0x1f0000) returned 1 [0199.582] CreateFileW (lpFileName="C:\\\\Boot\\BCD.LOG1" (normalized: "c:\\boot\\bcd.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0199.582] GetFileType (hFile=0x1e0) returned 0x1 [0199.582] CloseHandle (hObject=0x1e0) returned 1 [0199.583] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf70 [0199.583] GetFileAttributesExW (in: lpFileName="C:\\\\Boot\\BCD.LOG1" (normalized: "c:\\boot\\bcd.log1"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0199.583] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf70 | out: hHeap=0x1f0000) returned 1 [0199.583] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf70 [0199.583] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf70 | out: hHeap=0x1f0000) returned 1 [0199.583] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="BCD.LOG2", cAlternateFileName="BCD~2.LOG")) returned 1 [0199.583] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b4d0 [0199.583] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b458 [0199.583] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf70 [0199.584] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b458 | out: hHeap=0x1f0000) returned 1 [0199.584] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cfa8 | out: hHeap=0x1f0000) returned 1 [0199.584] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b4d0 | out: hHeap=0x1f0000) returned 1 [0199.584] CreateFileW (lpFileName="C:\\\\Boot\\BCD.LOG2" (normalized: "c:\\boot\\bcd.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0199.584] GetFileType (hFile=0x1e0) returned 0x1 [0199.585] CloseHandle (hObject=0x1e0) returned 1 [0199.585] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0199.585] GetFileAttributesExW (in: lpFileName="C:\\\\Boot\\BCD.LOG2" (normalized: "c:\\boot\\bcd.log2"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0199.585] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0199.585] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cfa8 [0199.585] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cfa8 | out: hHeap=0x1f0000) returned 1 [0199.585] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="bg-BG", cAlternateFileName="")) returned 1 [0199.585] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b778 [0199.585] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf70 | out: hHeap=0x1f0000) returned 1 [0199.585] lstrcmpW (lpString1="bg-BG", lpString2=".") returned 1 [0199.585] lstrcmpW (lpString1="bg-BG", lpString2="..") returned 1 [0199.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204df0 [0199.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b5c0 [0199.586] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef4e6d79, ftCreationTime.dwHighDateTime=0x1d3273d, ftLastAccessTime.dwLowDateTime=0xef4e6d79, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x175a0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="bootspaces.dll", cAlternateFileName="BOOTSP~1.DLL")) returned 1 [0199.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b7c8 [0199.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b5e8 [0199.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0199.586] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b5e8 | out: hHeap=0x1f0000) returned 1 [0199.586] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b778 | out: hHeap=0x1f0000) returned 1 [0199.586] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b7c8 | out: hHeap=0x1f0000) returned 1 [0199.587] CreateFileW (lpFileName="C:\\\\Boot\\bootspaces.dll" (normalized: "c:\\boot\\bootspaces.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0199.587] GetLastError () returned 0x5 [0199.587] GetLastError () returned 0x5 [0199.587] SetLastError (dwErrCode=0x5) [0199.588] GetLastError () returned 0x5 [0199.588] SetLastError (dwErrCode=0x5) [0199.588] GetLastError () returned 0x5 [0199.588] SetLastError (dwErrCode=0x5) [0199.588] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xef703e94, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="BOOTSTAT.DAT", cAlternateFileName="")) returned 1 [0199.588] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b778 [0199.588] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b5e8 [0199.588] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf70 [0199.588] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b5e8 | out: hHeap=0x1f0000) returned 1 [0199.588] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0199.589] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b778 | out: hHeap=0x1f0000) returned 1 [0199.589] CreateFileW (lpFileName="C:\\\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0199.589] GetFileType (hFile=0x1e0) returned 0x1 [0199.589] CloseHandle (hObject=0x1e0) returned 1 [0199.589] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cfa8 [0199.589] GetFileAttributesExW (in: lpFileName="C:\\\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xef703e94, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1 [0199.590] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cfa8 | out: hHeap=0x1f0000) returned 1 [0199.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cfa8 [0199.590] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cfa8 | out: hHeap=0x1f0000) returned 1 [0199.590] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef4fcd12, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x185a0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="bootvhd.dll", cAlternateFileName="")) returned 1 [0199.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b5e8 [0199.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b4d0 [0199.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cfa8 [0199.590] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b4d0 | out: hHeap=0x1f0000) returned 1 [0199.590] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf70 | out: hHeap=0x1f0000) returned 1 [0199.590] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b5e8 | out: hHeap=0x1f0000) returned 1 [0199.590] CreateFileW (lpFileName="C:\\\\Boot\\bootvhd.dll" (normalized: "c:\\boot\\bootvhd.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0199.591] GetLastError () returned 0x5 [0199.591] GetLastError () returned 0x5 [0199.591] SetLastError (dwErrCode=0x5) [0199.591] GetLastError () returned 0x5 [0199.591] SetLastError (dwErrCode=0x5) [0199.591] GetLastError () returned 0x5 [0199.591] SetLastError (dwErrCode=0x5) [0199.591] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef511a4c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="cs-CZ", cAlternateFileName="")) returned 1 [0199.591] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b458 [0199.591] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cfa8 | out: hHeap=0x1f0000) returned 1 [0199.592] lstrcmpW (lpString1="cs-CZ", lpString2=".") returned 1 [0199.592] lstrcmpW (lpString1="cs-CZ", lpString2="..") returned 1 [0199.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf70 [0199.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b7c8 [0199.592] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204df0 | out: hHeap=0x1f0000) returned 1 [0199.592] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0008dbb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5252b3, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="da-DK", cAlternateFileName="")) returned 1 [0199.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b5e8 [0199.592] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b458 | out: hHeap=0x1f0000) returned 1 [0199.592] lstrcmpW (lpString1="da-DK", lpString2=".") returned 1 [0199.592] lstrcmpW (lpString1="da-DK", lpString2="..") returned 1 [0199.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x48) returned 0x225ec8 [0199.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b458 [0199.593] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf70 | out: hHeap=0x1f0000) returned 1 [0199.593] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0009692, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef538bee, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="de-DE", cAlternateFileName="")) returned 1 [0199.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b778 [0199.593] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b5e8 | out: hHeap=0x1f0000) returned 1 [0199.593] lstrcmpW (lpString1="de-DE", lpString2=".") returned 1 [0199.593] lstrcmpW (lpString1="de-DE", lpString2="..") returned 1 [0199.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214bc8 [0199.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b4d0 [0199.593] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225ec8 | out: hHeap=0x1f0000) returned 1 [0199.593] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef555ff8, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="el-GR", cAlternateFileName="")) returned 1 [0199.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b5e8 [0199.593] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b778 | out: hHeap=0x1f0000) returned 1 [0199.593] lstrcmpW (lpString1="el-GR", lpString2=".") returned 1 [0199.593] lstrcmpW (lpString1="el-GR", lpString2="..") returned 1 [0199.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0199.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b778 [0199.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214bc8 | out: hHeap=0x1f0000) returned 1 [0199.594] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc482dc87, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="en-GB", cAlternateFileName="")) returned 1 [0199.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b2f0 [0199.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b5e8 | out: hHeap=0x1f0000) returned 1 [0199.594] lstrcmpW (lpString1="en-GB", lpString2=".") returned 1 [0199.594] lstrcmpW (lpString1="en-GB", lpString2="..") returned 1 [0199.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b318 [0199.594] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef57d0f5, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="en-US", cAlternateFileName="")) returned 1 [0199.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b5e8 [0199.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b2f0 | out: hHeap=0x1f0000) returned 1 [0199.594] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0199.594] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0199.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd8) returned 0x235ec0 [0199.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b340 [0199.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0199.595] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000b9ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef586d37, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="es-ES", cAlternateFileName="")) returned 1 [0199.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b2f0 [0199.595] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b5e8 | out: hHeap=0x1f0000) returned 1 [0199.595] lstrcmpW (lpString1="es-ES", lpString2=".") returned 1 [0199.595] lstrcmpW (lpString1="es-ES", lpString2="..") returned 1 [0199.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b5e8 [0199.595] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000c12e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc4853f40, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="es-MX", cAlternateFileName="")) returned 1 [0199.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b8f0 [0199.595] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b2f0 | out: hHeap=0x1f0000) returned 1 [0199.595] lstrcmpW (lpString1="es-MX", lpString2=".") returned 1 [0199.595] lstrcmpW (lpString1="es-MX", lpString2="..") returned 1 [0199.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b9e0 [0199.595] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc487a0b9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="et-EE", cAlternateFileName="")) returned 1 [0199.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b620 [0199.596] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b8f0 | out: hHeap=0x1f0000) returned 1 [0199.596] lstrcmpW (lpString1="et-EE", lpString2=".") returned 1 [0199.596] lstrcmpW (lpString1="et-EE", lpString2="..") returned 1 [0199.596] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x138) returned 0x230f50 [0199.596] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b8f0 [0199.596] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235ec0 | out: hHeap=0x1f0000) returned 1 [0199.596] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000cf3a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef59a5b1, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="fi-FI", cAlternateFileName="")) returned 1 [0199.596] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20bc38 [0199.596] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b620 | out: hHeap=0x1f0000) returned 1 [0199.596] lstrcmpW (lpString1="fi-FI", lpString2=".") returned 1 [0199.596] lstrcmpW (lpString1="fi-FI", lpString2="..") returned 1 [0199.597] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b620 [0199.597] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0109451, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef999ae4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Fonts", cAlternateFileName="")) returned 1 [0199.597] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20bb98 [0199.597] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20bc38 | out: hHeap=0x1f0000) returned 1 [0199.597] lstrcmpW (lpString1="Fonts", lpString2=".") returned 1 [0199.597] lstrcmpW (lpString1="Fonts", lpString2="..") returned 1 [0199.597] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20bc38 [0199.597] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="fr-CA", cAlternateFileName="")) returned 1 [0199.597] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20bd00 [0199.597] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20bb98 | out: hHeap=0x1f0000) returned 1 [0199.598] lstrcmpW (lpString1="fr-CA", lpString2=".") returned 1 [0199.598] lstrcmpW (lpString1="fr-CA", lpString2="..") returned 1 [0199.598] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20bb98 [0199.598] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010bc12, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ade2b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="fr-FR", cAlternateFileName="")) returned 1 [0199.598] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20bd50 [0199.598] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20bd00 | out: hHeap=0x1f0000) returned 1 [0199.598] lstrcmpW (lpString1="fr-FR", lpString2=".") returned 1 [0199.598] lstrcmpW (lpString1="fr-FR", lpString2="..") returned 1 [0199.598] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c8) returned 0x230860 [0199.598] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20bd00 [0199.598] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230f50 | out: hHeap=0x1f0000) returned 1 [0199.598] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="hr-HR", cAlternateFileName="")) returned 1 [0199.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0199.599] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20bd50 | out: hHeap=0x1f0000) returned 1 [0199.599] lstrcmpW (lpString1="hr-HR", lpString2=".") returned 1 [0199.599] lstrcmpW (lpString1="hr-HR", lpString2="..") returned 1 [0199.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0199.599] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010c5ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5c171b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="hu-HU", cAlternateFileName="")) returned 1 [0199.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0199.599] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0199.599] lstrcmpW (lpString1="hu-HU", lpString2=".") returned 1 [0199.599] lstrcmpW (lpString1="hu-HU", lpString2="..") returned 1 [0199.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0199.599] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010ccad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5d8ab4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="it-IT", cAlternateFileName="")) returned 1 [0199.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238758 [0199.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0199.600] lstrcmpW (lpString1="it-IT", lpString2=".") returned 1 [0199.600] lstrcmpW (lpString1="it-IT", lpString2="..") returned 1 [0199.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0199.600] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010d0c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ed6c6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="ja-JP", cAlternateFileName="")) returned 1 [0199.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b2f0 [0199.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238758 | out: hHeap=0x1f0000) returned 1 [0199.600] lstrcmpW (lpString1="ja-JP", lpString2=".") returned 1 [0199.600] lstrcmpW (lpString1="ja-JP", lpString2="..") returned 1 [0199.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238758 [0199.600] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef5fc210, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="ko-KR", cAlternateFileName="")) returned 1 [0199.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20bd50 [0199.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b2f0 | out: hHeap=0x1f0000) returned 1 [0199.601] lstrcmpW (lpString1="ko-KR", lpString2=".") returned 1 [0199.601] lstrcmpW (lpString1="ko-KR", lpString2="..") returned 1 [0199.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b2f0 [0199.601] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="lt-LT", cAlternateFileName="")) returned 1 [0199.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x1fb070 [0199.601] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20bd50 | out: hHeap=0x1f0000) returned 1 [0199.601] lstrcmpW (lpString1="lt-LT", lpString2=".") returned 1 [0199.601] lstrcmpW (lpString1="lt-LT", lpString2="..") returned 1 [0199.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2a0) returned 0x222ee8 [0199.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20bd50 [0199.601] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230860 | out: hHeap=0x1f0000) returned 1 [0199.602] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="lv-LV", cAlternateFileName="")) returned 1 [0199.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260720 [0199.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fb070 | out: hHeap=0x1f0000) returned 1 [0199.602] lstrcmpW (lpString1="lv-LV", lpString2=".") returned 1 [0199.602] lstrcmpW (lpString1="lv-LV", lpString2="..") returned 1 [0199.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609a0 [0199.602] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6196d8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfbcf473f, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0xc63a0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="memtest.exe", cAlternateFileName="")) returned 1 [0199.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0199.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606f8 [0199.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf70 [0199.603] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606f8 | out: hHeap=0x1f0000) returned 1 [0199.603] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260720 | out: hHeap=0x1f0000) returned 1 [0199.603] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0199.603] CreateFileW (lpFileName="C:\\\\Boot\\memtest.exe" (normalized: "c:\\boot\\memtest.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0199.604] GetLastError () returned 0x5 [0199.604] GetLastError () returned 0x5 [0199.604] SetLastError (dwErrCode=0x5) [0199.604] GetLastError () returned 0x5 [0199.604] SetLastError (dwErrCode=0x5) [0199.604] GetLastError () returned 0x5 [0199.604] SetLastError (dwErrCode=0x5) [0199.605] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e138, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef62cf52, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="nb-NO", cAlternateFileName="")) returned 1 [0199.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2607c0 [0199.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf70 | out: hHeap=0x1f0000) returned 1 [0199.605] lstrcmpW (lpString1="nb-NO", lpString2=".") returned 1 [0199.605] lstrcmpW (lpString1="nb-NO", lpString2="..") returned 1 [0199.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260770 [0199.605] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e4fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6407cf, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="nl-NL", cAlternateFileName="")) returned 1 [0199.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606f8 [0199.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607c0 | out: hHeap=0x1f0000) returned 1 [0199.605] lstrcmpW (lpString1="nl-NL", lpString2=".") returned 1 [0199.605] lstrcmpW (lpString1="nl-NL", lpString2="..") returned 1 [0199.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0199.605] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef65403a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="pl-PL", cAlternateFileName="")) returned 1 [0199.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260658 [0199.606] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606f8 | out: hHeap=0x1f0000) returned 1 [0199.606] lstrcmpW (lpString1="pl-PL", lpString2=".") returned 1 [0199.606] lstrcmpW (lpString1="pl-PL", lpString2="..") returned 1 [0199.606] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0199.606] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6678d6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6678d6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="pt-BR", cAlternateFileName="")) returned 1 [0199.606] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0199.606] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260658 | out: hHeap=0x1f0000) returned 1 [0199.606] lstrcmpW (lpString1="pt-BR", lpString2=".") returned 1 [0199.606] lstrcmpW (lpString1="pt-BR", lpString2="..") returned 1 [0199.606] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260720 [0199.606] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f167, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6714dc, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="pt-PT", cAlternateFileName="")) returned 1 [0199.606] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605e0 [0199.606] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0199.606] lstrcmpW (lpString1="pt-PT", lpString2=".") returned 1 [0199.606] lstrcmpW (lpString1="pt-PT", lpString2="..") returned 1 [0199.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260658 [0199.607] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f640, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef684d85, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="qps-ploc", cAlternateFileName="")) returned 1 [0199.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260680 [0199.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606f8 [0199.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf70 [0199.607] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606f8 | out: hHeap=0x1f0000) returned 1 [0199.607] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605e0 | out: hHeap=0x1f0000) returned 1 [0199.607] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260680 | out: hHeap=0x1f0000) returned 1 [0199.607] lstrcmpW (lpString1="qps-ploc", lpString2=".") returned 1 [0199.607] lstrcmpW (lpString1="qps-ploc", lpString2="..") returned 1 [0199.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cfa8 [0199.608] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ab61e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9abff9, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Resources", cAlternateFileName="RESOUR~1")) returned 1 [0199.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605e0 [0199.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0199.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0199.608] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0199.608] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf70 | out: hHeap=0x1f0000) returned 1 [0199.608] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605e0 | out: hHeap=0x1f0000) returned 1 [0199.608] lstrcmpW (lpString1="Resources", lpString2=".") returned 1 [0199.608] lstrcmpW (lpString1="Resources", lpString2="..") returned 1 [0199.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf70 [0199.608] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="ro-RO", cAlternateFileName="")) returned 1 [0199.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0199.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0199.609] lstrcmpW (lpString1="ro-RO", lpString2=".") returned 1 [0199.609] lstrcmpW (lpString1="ro-RO", lpString2="..") returned 1 [0199.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3f0) returned 0x2387b0 [0199.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260888 [0199.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ee8 | out: hHeap=0x1f0000) returned 1 [0199.609] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef698608, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="ru-RU", cAlternateFileName="")) returned 1 [0199.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0199.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0199.609] lstrcmpW (lpString1="ru-RU", lpString2=".") returned 1 [0199.609] lstrcmpW (lpString1="ru-RU", lpString2="..") returned 1 [0199.610] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260900 [0199.610] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="sk-SK", cAlternateFileName="")) returned 1 [0199.610] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2607e8 [0199.610] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0199.610] lstrcmpW (lpString1="sk-SK", lpString2=".") returned 1 [0199.610] lstrcmpW (lpString1="sk-SK", lpString2="..") returned 1 [0199.610] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0199.610] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="sl-SI", cAlternateFileName="")) returned 1 [0199.610] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0199.610] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607e8 | out: hHeap=0x1f0000) returned 1 [0199.610] lstrcmpW (lpString1="sl-SI", lpString2=".") returned 1 [0199.610] lstrcmpW (lpString1="sl-SI", lpString2="..") returned 1 [0199.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260518 [0199.611] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0x5168548b, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="sr-Latn-CS", cAlternateFileName="SR-LAT~1")) returned 1 [0199.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260798 [0199.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2607c0 [0199.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0199.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607c0 | out: hHeap=0x1f0000) returned 1 [0199.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0199.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260798 | out: hHeap=0x1f0000) returned 1 [0199.611] lstrcmpW (lpString1="sr-Latn-CS", lpString2=".") returned 1 [0199.611] lstrcmpW (lpString1="sr-Latn-CS", lpString2="..") returned 1 [0199.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1feed0 [0199.611] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="sr-Latn-RS", cAlternateFileName="SR-LAT~2")) returned 1 [0199.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604c8 [0199.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0199.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0199.612] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0199.612] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0199.612] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604c8 | out: hHeap=0x1f0000) returned 1 [0199.612] lstrcmpW (lpString1="sr-Latn-RS", lpString2=".") returned 1 [0199.612] lstrcmpW (lpString1="sr-Latn-RS", lpString2="..") returned 1 [0199.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fefe8 [0199.612] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01adf43, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6a2250, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="sv-SE", cAlternateFileName="")) returned 1 [0199.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608b0 [0199.612] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0199.612] lstrcmpW (lpString1="sv-SE", lpString2=".") returned 1 [0199.612] lstrcmpW (lpString1="sv-SE", lpString2="..") returned 1 [0199.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0199.613] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206504, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6b5aca, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="tr-TR", cAlternateFileName="")) returned 1 [0199.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260680 [0199.613] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608b0 | out: hHeap=0x1f0000) returned 1 [0199.613] lstrcmpW (lpString1="tr-TR", lpString2=".") returned 1 [0199.613] lstrcmpW (lpString1="tr-TR", lpString2="..") returned 1 [0199.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0199.613] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206a30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="uk-UA", cAlternateFileName="")) returned 1 [0199.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0199.613] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260680 | out: hHeap=0x1f0000) returned 1 [0199.613] lstrcmpW (lpString1="uk-UA", lpString2=".") returned 1 [0199.613] lstrcmpW (lpString1="uk-UA", lpString2="..") returned 1 [0199.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260838 [0199.613] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef6c9427, ftCreationTime.dwHighDateTime=0x1d3273d, ftLastAccessTime.dwLowDateTime=0xef6c9427, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x1236, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="updaterevokesipolicy.p7b", cAlternateFileName="UPDATE~1.P7B")) returned 1 [0199.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216248 [0199.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0199.614] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2396c0 [0199.614] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0199.614] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0199.614] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216248 | out: hHeap=0x1f0000) returned 1 [0199.614] CreateFileW (lpFileName="C:\\\\Boot\\updaterevokesipolicy.p7b" (normalized: "c:\\boot\\updaterevokesipolicy.p7b"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0199.615] GetLastError () returned 0x5 [0199.615] GetLastError () returned 0x5 [0199.615] SetLastError (dwErrCode=0x5) [0199.615] GetLastError () returned 0x5 [0199.615] SetLastError (dwErrCode=0x5) [0199.615] GetLastError () returned 0x5 [0199.615] SetLastError (dwErrCode=0x5) [0199.616] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207100, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6d7e9a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="zh-CN", cAlternateFileName="")) returned 1 [0199.616] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260540 [0199.616] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2396c0 | out: hHeap=0x1f0000) returned 1 [0199.616] lstrcmpW (lpString1="zh-CN", lpString2=".") returned 1 [0199.616] lstrcmpW (lpString1="zh-CN", lpString2="..") returned 1 [0199.616] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606f8 [0199.616] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207675, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x518ea25e, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="zh-HK", cAlternateFileName="")) returned 1 [0199.616] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0199.616] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0199.616] lstrcmpW (lpString1="zh-HK", lpString2=".") returned 1 [0199.616] lstrcmpW (lpString1="zh-HK", lpString2="..") returned 1 [0199.617] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2607e8 [0199.617] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="zh-TW", cAlternateFileName="")) returned 1 [0199.617] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0199.617] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0199.617] lstrcmpW (lpString1="zh-TW", lpString2=".") returned 1 [0199.617] lstrcmpW (lpString1="zh-TW", lpString2="..") returned 1 [0199.617] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2607c0 [0199.617] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="zh-TW", cAlternateFileName="")) returned 0 [0199.617] FindClose (in: hFindFile=0x24e8c0 | out: hFindFile=0x24e8c0) returned 1 [0199.618] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216248 [0199.618] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0199.618] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e828 [0199.618] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1ff058 [0199.618] FindFirstFileW (in: lpFileName="C:\\\\Boot\\bg-BG\\*", lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24e940 [0199.619] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0199.619] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0199.619] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0199.619] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1ff058 | out: hHeap=0x1f0000) returned 1 [0199.619] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0199.619] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0199.619] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260630 [0199.619] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1ff058 [0199.619] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260630 | out: hHeap=0x1f0000) returned 1 [0199.620] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0199.620] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0199.620] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0199.620] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210bba74, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0199.620] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260540 [0199.620] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605e0 [0199.620] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216320 [0199.620] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605e0 | out: hHeap=0x1f0000) returned 1 [0199.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1ff058 | out: hHeap=0x1f0000) returned 1 [0199.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0199.621] CreateFileW (lpFileName="C:\\\\Boot\\bg-BG\\bootmgr.exe.mui" (normalized: "c:\\boot\\bg-bg\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0199.622] GetLastError () returned 0x5 [0199.622] GetLastError () returned 0x5 [0199.622] SetLastError (dwErrCode=0x5) [0199.622] GetLastError () returned 0x5 [0199.622] SetLastError (dwErrCode=0x5) [0199.622] GetLastError () returned 0x5 [0199.622] SetLastError (dwErrCode=0x5) [0199.623] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210bba74, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0199.920] FindClose (in: hFindFile=0x24e940 | out: hFindFile=0x24e940) returned 1 [0199.920] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216320 | out: hHeap=0x1f0000) returned 1 [0199.920] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e828 | out: hHeap=0x1f0000) returned 1 [0199.921] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0199.921] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216248 | out: hHeap=0x1f0000) returned 1 [0199.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2348a8 [0199.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0199.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22dd00 [0199.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0199.921] FindFirstFileW (in: lpFileName="C:\\\\Boot\\cs-CZ\\*", lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef511a4c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24ebc0 [0199.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0199.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228230 [0199.921] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0199.921] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0199.922] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0199.922] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef511a4c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0199.922] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0199.922] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0199.922] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0199.922] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228230 | out: hHeap=0x1f0000) returned 1 [0199.922] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0199.922] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0199.922] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47e189c, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2109581d, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b58, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0199.922] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260540 [0199.922] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0199.923] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234ae8 [0199.923] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0199.923] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0199.923] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0199.923] CreateFileW (lpFileName="C:\\\\Boot\\cs-CZ\\bootmgr.exe.mui" (normalized: "c:\\boot\\cs-cz\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0199.924] GetLastError () returned 0x5 [0199.924] GetLastError () returned 0x5 [0199.924] SetLastError (dwErrCode=0x5) [0199.924] GetLastError () returned 0x5 [0199.924] SetLastError (dwErrCode=0x5) [0199.924] GetLastError () returned 0x5 [0199.924] SetLastError (dwErrCode=0x5) [0199.924] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f1d4cf, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0199.924] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0199.924] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0199.924] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2347d0 [0199.924] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0199.925] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234ae8 | out: hHeap=0x1f0000) returned 1 [0199.925] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0199.925] CreateFileW (lpFileName="C:\\\\Boot\\cs-CZ\\memtest.exe.mui" (normalized: "c:\\boot\\cs-cz\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0199.925] GetLastError () returned 0x5 [0199.925] GetLastError () returned 0x5 [0199.925] SetLastError (dwErrCode=0x5) [0199.925] GetLastError () returned 0x5 [0199.926] SetLastError (dwErrCode=0x5) [0199.926] GetLastError () returned 0x5 [0199.926] SetLastError (dwErrCode=0x5) [0199.926] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f1d4cf, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0199.926] FindClose (in: hFindFile=0x24ebc0 | out: hFindFile=0x24ebc0) returned 1 [0199.926] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2347d0 | out: hHeap=0x1f0000) returned 1 [0199.926] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22dd00 | out: hHeap=0x1f0000) returned 1 [0199.926] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0199.926] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2348a8 | out: hHeap=0x1f0000) returned 1 [0199.926] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2348a8 [0199.927] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0199.927] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f020 [0199.927] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228230 [0199.927] FindFirstFileW (in: lpFileName="C:\\\\Boot\\da-DK\\*", lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0008dbb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5252b3, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24ec00 [0199.927] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260540 [0199.927] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0199.927] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0199.927] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228230 | out: hHeap=0x1f0000) returned 1 [0199.927] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0199.928] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0008dbb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5252b3, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0199.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0199.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0199.928] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0199.928] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0199.928] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0199.928] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0199.928] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47e189c, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12760, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0199.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260540 [0199.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0199.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346b0 [0199.928] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0199.929] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0199.929] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0199.929] CreateFileW (lpFileName="C:\\\\Boot\\da-DK\\bootmgr.exe.mui" (normalized: "c:\\boot\\da-dk\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0199.929] GetLastError () returned 0x5 [0199.929] GetLastError () returned 0x5 [0199.929] SetLastError (dwErrCode=0x5) [0199.929] GetLastError () returned 0x5 [0199.930] SetLastError (dwErrCode=0x5) [0199.930] GetLastError () returned 0x5 [0199.930] SetLastError (dwErrCode=0x5) [0199.930] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5252b3, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2ef7268, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0199.930] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0199.930] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260540 [0199.930] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234ae8 [0199.930] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0199.930] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346b0 | out: hHeap=0x1f0000) returned 1 [0199.930] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0199.930] CreateFileW (lpFileName="C:\\\\Boot\\da-DK\\memtest.exe.mui" (normalized: "c:\\boot\\da-dk\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0199.931] GetLastError () returned 0x5 [0199.931] GetLastError () returned 0x5 [0199.931] SetLastError (dwErrCode=0x5) [0199.931] GetLastError () returned 0x5 [0199.931] SetLastError (dwErrCode=0x5) [0199.931] GetLastError () returned 0x5 [0199.931] SetLastError (dwErrCode=0x5) [0199.931] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5252b3, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2ef7268, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0199.931] FindClose (in: hFindFile=0x24ec00 | out: hFindFile=0x24ec00) returned 1 [0199.932] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234ae8 | out: hHeap=0x1f0000) returned 1 [0199.932] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f020 | out: hHeap=0x1f0000) returned 1 [0199.932] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0199.932] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2348a8 | out: hHeap=0x1f0000) returned 1 [0199.932] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2348a8 [0199.932] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260540 [0199.932] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f1b8 [0199.932] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228230 [0199.932] FindFirstFileW (in: lpFileName="C:\\\\Boot\\de-DE\\*", lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0009692, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef538bee, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24ec00 [0199.932] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0199.932] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0199.932] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0199.933] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228230 | out: hHeap=0x1f0000) returned 1 [0199.933] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0199.933] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0009692, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef538bee, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0199.933] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0199.933] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0199.933] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0199.933] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0199.933] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0199.933] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0199.933] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48079da, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13560, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0199.933] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0199.933] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0199.933] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234ae8 [0199.933] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0199.933] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0199.933] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0199.934] CreateFileW (lpFileName="C:\\\\Boot\\de-DE\\bootmgr.exe.mui" (normalized: "c:\\boot\\de-de\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0199.934] GetLastError () returned 0x5 [0199.934] GetLastError () returned 0x5 [0199.934] SetLastError (dwErrCode=0x5) [0199.934] GetLastError () returned 0x5 [0199.934] SetLastError (dwErrCode=0x5) [0199.934] GetLastError () returned 0x5 [0199.934] SetLastError (dwErrCode=0x5) [0199.935] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef538bee, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2ef7268, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0199.935] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0199.935] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0199.935] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234620 [0199.935] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0199.935] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234ae8 | out: hHeap=0x1f0000) returned 1 [0199.935] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0199.935] CreateFileW (lpFileName="C:\\\\Boot\\de-DE\\memtest.exe.mui" (normalized: "c:\\boot\\de-de\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0199.936] GetLastError () returned 0x5 [0199.936] GetLastError () returned 0x5 [0199.936] SetLastError (dwErrCode=0x5) [0199.936] GetLastError () returned 0x5 [0199.936] SetLastError (dwErrCode=0x5) [0199.936] GetLastError () returned 0x5 [0199.936] SetLastError (dwErrCode=0x5) [0199.936] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef538bee, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2ef7268, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0199.936] FindClose (in: hFindFile=0x24ec00 | out: hFindFile=0x24ec00) returned 1 [0199.936] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234620 | out: hHeap=0x1f0000) returned 1 [0199.936] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f1b8 | out: hHeap=0x1f0000) returned 1 [0199.936] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0199.936] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2348a8 | out: hHeap=0x1f0000) returned 1 [0199.937] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234ae8 [0199.937] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260540 [0199.937] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e828 [0199.937] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0199.937] FindFirstFileW (in: lpFileName="C:\\\\Boot\\el-GR\\*", lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef555ff8, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24e940 [0199.937] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0199.937] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228230 [0199.937] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0199.937] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0199.937] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0199.937] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef555ff8, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0199.937] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0199.937] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0199.937] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0199.937] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228230 | out: hHeap=0x1f0000) returned 1 [0199.937] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0199.938] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0199.938] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13960, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0199.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0199.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0199.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234b30 [0199.938] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0199.938] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0199.938] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0199.938] CreateFileW (lpFileName="C:\\\\Boot\\el-GR\\bootmgr.exe.mui" (normalized: "c:\\boot\\el-gr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0199.938] GetLastError () returned 0x5 [0199.938] GetLastError () returned 0x5 [0199.939] SetLastError (dwErrCode=0x5) [0199.939] GetLastError () returned 0x5 [0199.939] SetLastError (dwErrCode=0x5) [0199.939] GetLastError () returned 0x5 [0199.939] SetLastError (dwErrCode=0x5) [0199.939] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb5a0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0199.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0199.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0199.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2344b8 [0199.939] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0199.939] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b30 | out: hHeap=0x1f0000) returned 1 [0199.939] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0199.940] CreateFileW (lpFileName="C:\\\\Boot\\el-GR\\memtest.exe.mui" (normalized: "c:\\boot\\el-gr\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0199.940] GetLastError () returned 0x5 [0199.940] GetLastError () returned 0x5 [0199.940] SetLastError (dwErrCode=0x5) [0199.940] GetLastError () returned 0x5 [0199.940] SetLastError (dwErrCode=0x5) [0199.940] GetLastError () returned 0x5 [0199.940] SetLastError (dwErrCode=0x5) [0199.940] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb5a0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0199.941] FindClose (in: hFindFile=0x24e940 | out: hFindFile=0x24e940) returned 1 [0199.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2344b8 | out: hHeap=0x1f0000) returned 1 [0199.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e828 | out: hHeap=0x1f0000) returned 1 [0199.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0199.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234ae8 | out: hHeap=0x1f0000) returned 1 [0199.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234668 [0199.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0199.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22dd00 [0199.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228230 [0199.941] FindFirstFileW (in: lpFileName="C:\\\\Boot\\en-GB\\*", lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc482dc87, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24e980 [0199.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0199.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0199.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0199.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228230 | out: hHeap=0x1f0000) returned 1 [0199.942] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0199.942] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc482dc87, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0199.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260540 [0199.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0199.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0199.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0199.942] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0199.942] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0199.942] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12158, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0199.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260630 [0199.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260540 [0199.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2348a8 [0199.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0199.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0199.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260630 | out: hHeap=0x1f0000) returned 1 [0199.943] CreateFileW (lpFileName="C:\\\\Boot\\en-GB\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-gb\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0199.943] GetLastError () returned 0x5 [0199.943] GetLastError () returned 0x5 [0199.943] SetLastError (dwErrCode=0x5) [0199.943] GetLastError () returned 0x5 [0199.943] SetLastError (dwErrCode=0x5) [0199.943] GetLastError () returned 0x5 [0199.943] SetLastError (dwErrCode=0x5) [0199.943] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12158, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0199.943] FindClose (in: hFindFile=0x24e980 | out: hFindFile=0x24e980) returned 1 [0199.943] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2348a8 | out: hHeap=0x1f0000) returned 1 [0199.943] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22dd00 | out: hHeap=0x1f0000) returned 1 [0199.943] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0199.943] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234668 | out: hHeap=0x1f0000) returned 1 [0199.944] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2348a8 [0199.944] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0199.944] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d6a0 [0199.944] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0199.944] FindFirstFileW (in: lpFileName="C:\\\\Boot\\en-US\\*", lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef57d0f5, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24ed40 [0199.944] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260630 [0199.944] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228230 [0199.944] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260630 | out: hHeap=0x1f0000) returned 1 [0199.944] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0199.944] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0199.944] FindNextFileW (in: hFindFile=0x24ed40, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef57d0f5, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0199.944] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0199.944] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0199.944] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0199.944] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228230 | out: hHeap=0x1f0000) returned 1 [0199.945] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0199.945] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0199.945] FindNextFileW (in: hFindFile=0x24ed40, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef569843, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0x327294d0, ftLastWriteTime.dwHighDateTime=0x1d2a030, nFileSizeHigh=0x0, nFileSizeLow=0x121a0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0199.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0199.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260540 [0199.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234ae8 [0199.945] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0199.945] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0199.945] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0199.945] CreateFileW (lpFileName="C:\\\\Boot\\en-US\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-us\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0199.945] GetLastError () returned 0x5 [0199.945] GetLastError () returned 0x5 [0199.945] SetLastError (dwErrCode=0x5) [0199.946] GetLastError () returned 0x5 [0199.946] SetLastError (dwErrCode=0x5) [0199.946] GetLastError () returned 0x5 [0199.946] SetLastError (dwErrCode=0x5) [0199.946] FindNextFileW (in: hFindFile=0x24ed40, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xafa0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0199.946] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0199.946] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260540 [0199.946] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234b30 [0199.946] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0199.946] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234ae8 | out: hHeap=0x1f0000) returned 1 [0199.946] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0199.946] CreateFileW (lpFileName="C:\\\\Boot\\en-US\\memtest.exe.mui" (normalized: "c:\\boot\\en-us\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0199.947] GetLastError () returned 0x5 [0199.947] GetLastError () returned 0x5 [0199.947] SetLastError (dwErrCode=0x5) [0199.947] GetLastError () returned 0x5 [0199.947] SetLastError (dwErrCode=0x5) [0199.947] GetLastError () returned 0x5 [0199.947] SetLastError (dwErrCode=0x5) [0199.947] FindNextFileW (in: hFindFile=0x24ed40, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xafa0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0199.947] FindClose (in: hFindFile=0x24ed40 | out: hFindFile=0x24ed40) returned 1 [0199.947] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b30 | out: hHeap=0x1f0000) returned 1 [0199.947] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d6a0 | out: hHeap=0x1f0000) returned 1 [0199.947] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0199.947] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2348a8 | out: hHeap=0x1f0000) returned 1 [0199.947] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234620 [0199.948] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260540 [0199.948] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f020 [0199.948] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228230 [0199.948] FindFirstFileW (in: lpFileName="C:\\\\Boot\\es-ES\\*", lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000b9ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef586d37, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24e680 [0199.948] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0199.948] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0199.948] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0199.948] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228230 | out: hHeap=0x1f0000) returned 1 [0199.948] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0199.948] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000b9ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef586d37, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0199.948] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0199.948] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228230 [0199.948] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0199.948] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0199.948] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0199.948] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0199.949] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4853f40, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0199.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0199.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0199.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234ae8 [0199.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0199.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228230 | out: hHeap=0x1f0000) returned 1 [0199.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0199.949] CreateFileW (lpFileName="C:\\\\Boot\\es-ES\\bootmgr.exe.mui" (normalized: "c:\\boot\\es-es\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0199.949] GetLastError () returned 0x5 [0199.949] GetLastError () returned 0x5 [0199.949] SetLastError (dwErrCode=0x5) [0199.949] GetLastError () returned 0x5 [0199.949] SetLastError (dwErrCode=0x5) [0199.949] GetLastError () returned 0x5 [0199.950] SetLastError (dwErrCode=0x5) [0199.950] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef586d37, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0199.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0199.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0199.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2348a8 [0199.950] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0199.950] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234ae8 | out: hHeap=0x1f0000) returned 1 [0199.950] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0199.950] CreateFileW (lpFileName="C:\\\\Boot\\es-ES\\memtest.exe.mui" (normalized: "c:\\boot\\es-es\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0199.950] GetLastError () returned 0x5 [0199.950] GetLastError () returned 0x5 [0199.950] SetLastError (dwErrCode=0x5) [0199.950] GetLastError () returned 0x5 [0199.951] SetLastError (dwErrCode=0x5) [0199.951] GetLastError () returned 0x5 [0199.951] SetLastError (dwErrCode=0x5) [0199.951] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef586d37, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0199.951] FindClose (in: hFindFile=0x24e680 | out: hFindFile=0x24e680) returned 1 [0199.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2348a8 | out: hHeap=0x1f0000) returned 1 [0199.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f020 | out: hHeap=0x1f0000) returned 1 [0199.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0199.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234620 | out: hHeap=0x1f0000) returned 1 [0199.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234b30 [0199.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0199.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e4f8 [0199.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228230 [0199.952] FindFirstFileW (in: lpFileName="C:\\\\Boot\\es-MX\\*", lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000c12e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc4853f40, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24e740 [0199.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0199.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0199.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0199.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228230 | out: hHeap=0x1f0000) returned 1 [0199.952] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0199.952] FindNextFileW (in: hFindFile=0x24e740, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000c12e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc4853f40, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0199.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0199.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0199.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0199.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0199.952] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0199.952] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0199.952] FindNextFileW (in: hFindFile=0x24e740, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4853f40, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0199.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0199.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260630 [0199.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234ae8 [0199.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260630 | out: hHeap=0x1f0000) returned 1 [0199.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0199.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0199.953] CreateFileW (lpFileName="C:\\\\Boot\\es-MX\\bootmgr.exe.mui" (normalized: "c:\\boot\\es-mx\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0199.953] GetLastError () returned 0x5 [0199.953] GetLastError () returned 0x5 [0199.953] SetLastError (dwErrCode=0x5) [0199.953] GetLastError () returned 0x5 [0199.953] SetLastError (dwErrCode=0x5) [0199.953] GetLastError () returned 0x5 [0199.953] SetLastError (dwErrCode=0x5) [0199.953] FindNextFileW (in: hFindFile=0x24e740, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4853f40, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0199.953] FindClose (in: hFindFile=0x24e740 | out: hFindFile=0x24e740) returned 1 [0199.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234ae8 | out: hHeap=0x1f0000) returned 1 [0199.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e4f8 | out: hHeap=0x1f0000) returned 1 [0199.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0199.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b30 | out: hHeap=0x1f0000) returned 1 [0199.953] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2348a8 [0199.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0199.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22dd00 [0199.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0199.954] FindFirstFileW (in: lpFileName="C:\\\\Boot\\et-EE\\*", lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc487a0b9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24e700 [0199.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0199.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228230 [0199.954] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0199.954] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0199.954] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0199.954] FindNextFileW (in: hFindFile=0x24e700, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc487a0b9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0199.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260540 [0199.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0199.954] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0199.954] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228230 | out: hHeap=0x1f0000) returned 1 [0199.954] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0199.954] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0199.954] FindNextFileW (in: hFindFile=0x24e700, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12560, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0199.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0199.955] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260540 [0199.955] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234788 [0199.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0199.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0199.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0199.955] CreateFileW (lpFileName="C:\\\\Boot\\et-EE\\bootmgr.exe.mui" (normalized: "c:\\boot\\et-ee\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0199.956] GetLastError () returned 0x5 [0199.956] GetLastError () returned 0x5 [0199.956] SetLastError (dwErrCode=0x5) [0199.956] GetLastError () returned 0x5 [0199.956] SetLastError (dwErrCode=0x5) [0199.956] GetLastError () returned 0x5 [0199.956] SetLastError (dwErrCode=0x5) [0199.956] FindNextFileW (in: hFindFile=0x24e700, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12560, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0199.956] FindClose (in: hFindFile=0x24e700 | out: hFindFile=0x24e700) returned 1 [0199.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234788 | out: hHeap=0x1f0000) returned 1 [0199.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22dd00 | out: hHeap=0x1f0000) returned 1 [0199.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0199.957] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2348a8 | out: hHeap=0x1f0000) returned 1 [0199.957] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234ae8 [0199.957] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0199.957] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e1c8 [0199.957] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0199.957] FindFirstFileW (in: lpFileName="C:\\\\Boot\\fi-FI\\*", lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000cf3a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef59a5b1, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24e9c0 [0199.957] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0199.957] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228230 [0199.957] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0199.957] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0199.957] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0199.957] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000cf3a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef59a5b1, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0199.958] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260540 [0199.958] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0199.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0199.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228230 | out: hHeap=0x1f0000) returned 1 [0199.958] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0199.958] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0199.958] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2096e751, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0199.958] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0199.958] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0199.958] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234b30 [0199.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0199.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0199.959] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0199.959] CreateFileW (lpFileName="C:\\\\Boot\\fi-FI\\bootmgr.exe.mui" (normalized: "c:\\boot\\fi-fi\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0199.959] GetLastError () returned 0x5 [0199.959] GetLastError () returned 0x5 [0199.959] SetLastError (dwErrCode=0x5) [0199.959] GetLastError () returned 0x5 [0199.959] SetLastError (dwErrCode=0x5) [0199.959] GetLastError () returned 0x5 [0199.960] SetLastError (dwErrCode=0x5) [0199.960] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef59a5b1, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0199.960] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0199.960] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0199.960] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2344b8 [0199.960] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0199.960] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b30 | out: hHeap=0x1f0000) returned 1 [0199.960] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0199.960] CreateFileW (lpFileName="C:\\\\Boot\\fi-FI\\memtest.exe.mui" (normalized: "c:\\boot\\fi-fi\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0199.961] GetLastError () returned 0x5 [0199.961] GetLastError () returned 0x5 [0199.961] SetLastError (dwErrCode=0x5) [0199.961] GetLastError () returned 0x5 [0199.961] SetLastError (dwErrCode=0x5) [0199.961] GetLastError () returned 0x5 [0199.961] SetLastError (dwErrCode=0x5) [0199.961] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef59a5b1, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0199.961] FindClose (in: hFindFile=0x24e9c0 | out: hFindFile=0x24e9c0) returned 1 [0199.962] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2344b8 | out: hHeap=0x1f0000) returned 1 [0199.962] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e1c8 | out: hHeap=0x1f0000) returned 1 [0199.962] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0199.962] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234ae8 | out: hHeap=0x1f0000) returned 1 [0199.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234590 [0199.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260540 [0199.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f020 [0199.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0199.962] FindFirstFileW (in: lpFileName="C:\\\\Boot\\Fonts\\*", lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0109451, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef999ae4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24ea80 [0199.963] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0199.963] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228230 [0199.963] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0199.964] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0199.964] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0199.964] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0109451, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef999ae4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0199.964] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0199.964] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0199.964] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0199.964] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228230 | out: hHeap=0x1f0000) returned 1 [0199.964] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0199.964] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0199.964] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef782dd9, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x386467, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="chs_boot.ttf", cAlternateFileName="")) returned 1 [0199.964] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0199.964] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0199.964] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2348a8 [0199.964] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0199.964] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0199.965] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0199.965] CreateFileW (lpFileName="C:\\\\Boot\\Fonts\\chs_boot.ttf" (normalized: "c:\\boot\\fonts\\chs_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0199.965] GetLastError () returned 0x5 [0199.965] GetLastError () returned 0x5 [0199.965] SetLastError (dwErrCode=0x5) [0199.965] GetLastError () returned 0x5 [0199.965] SetLastError (dwErrCode=0x5) [0199.965] GetLastError () returned 0x5 [0199.965] SetLastError (dwErrCode=0x5) [0199.965] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4a1dbea, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef81cc08, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x3b2e0a, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="cht_boot.ttf", cAlternateFileName="")) returned 1 [0199.965] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0199.965] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0199.966] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346b0 [0199.966] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0199.966] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2348a8 | out: hHeap=0x1f0000) returned 1 [0199.966] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0199.966] CreateFileW (lpFileName="C:\\\\Boot\\Fonts\\cht_boot.ttf" (normalized: "c:\\boot\\fonts\\cht_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0200.249] GetLastError () returned 0x5 [0200.249] GetLastError () returned 0x5 [0200.249] SetLastError (dwErrCode=0x5) [0200.249] GetLastError () returned 0x5 [0200.249] SetLastError (dwErrCode=0x5) [0200.249] GetLastError () returned 0x5 [0200.249] SetLastError (dwErrCode=0x5) [0200.249] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4a902c2, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8771a7, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x1e4d4b, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="jpn_boot.ttf", cAlternateFileName="")) returned 1 [0200.250] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605b8 [0200.250] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0200.250] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2344b8 [0200.250] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0200.250] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346b0 | out: hHeap=0x1f0000) returned 1 [0200.250] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0200.405] CreateFileW (lpFileName="C:\\\\Boot\\Fonts\\jpn_boot.ttf" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0200.406] GetLastError () returned 0x5 [0200.406] GetLastError () returned 0x5 [0200.406] SetLastError (dwErrCode=0x5) [0200.406] GetLastError () returned 0x5 [0200.406] SetLastError (dwErrCode=0x5) [0200.406] GetLastError () returned 0x5 [0200.406] SetLastError (dwErrCode=0x5) [0200.406] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b4eed5, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8c4060, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x243588, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="kor_boot.ttf", cAlternateFileName="")) returned 1 [0200.407] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0200.407] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0200.407] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229328 [0200.407] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0200.407] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2344b8 | out: hHeap=0x1f0000) returned 1 [0200.407] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0200.408] CreateFileW (lpFileName="C:\\\\Boot\\Fonts\\kor_boot.ttf" (normalized: "c:\\boot\\fonts\\kor_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0200.408] GetLastError () returned 0x5 [0200.408] GetLastError () returned 0x5 [0200.408] SetLastError (dwErrCode=0x5) [0200.408] GetLastError () returned 0x5 [0200.409] SetLastError (dwErrCode=0x5) [0200.409] GetLastError () returned 0x5 [0200.409] SetLastError (dwErrCode=0x5) [0200.409] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b9b37e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8e28b4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2ab6f, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="malgunn_boot.ttf", cAlternateFileName="MALGUN~1.TTF")) returned 1 [0200.409] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228310 [0200.409] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0200.410] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228d88 [0200.410] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0200.410] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229328 | out: hHeap=0x1f0000) returned 1 [0200.410] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228310 | out: hHeap=0x1f0000) returned 1 [0200.410] CreateFileW (lpFileName="C:\\\\Boot\\Fonts\\malgunn_boot.ttf" (normalized: "c:\\boot\\fonts\\malgunn_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0200.411] GetLastError () returned 0x5 [0200.411] GetLastError () returned 0x5 [0200.411] SetLastError (dwErrCode=0x5) [0200.411] GetLastError () returned 0x5 [0200.411] SetLastError (dwErrCode=0x5) [0200.411] GetLastError () returned 0x5 [0200.411] SetLastError (dwErrCode=0x5) [0200.411] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b9b37e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8f4db4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2b506, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="malgun_boot.ttf", cAlternateFileName="MALGUN~2.TTF")) returned 1 [0200.411] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0200.411] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0200.412] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228dd0 [0200.412] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0200.412] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228d88 | out: hHeap=0x1f0000) returned 1 [0200.412] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0200.412] CreateFileW (lpFileName="C:\\\\Boot\\Fonts\\malgun_boot.ttf" (normalized: "c:\\boot\\fonts\\malgun_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0200.412] GetLastError () returned 0x5 [0200.412] GetLastError () returned 0x5 [0200.412] SetLastError (dwErrCode=0x5) [0200.413] GetLastError () returned 0x5 [0200.413] SetLastError (dwErrCode=0x5) [0200.413] GetLastError () returned 0x5 [0200.413] SetLastError (dwErrCode=0x5) [0200.413] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b9b37e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9072c7, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2318a, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="meiryon_boot.ttf", cAlternateFileName="MEIRYO~1.TTF")) returned 1 [0200.413] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228310 [0200.413] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0200.413] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228e60 [0200.413] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0200.414] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228dd0 | out: hHeap=0x1f0000) returned 1 [0200.414] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228310 | out: hHeap=0x1f0000) returned 1 [0200.414] CreateFileW (lpFileName="C:\\\\Boot\\Fonts\\meiryon_boot.ttf" (normalized: "c:\\boot\\fonts\\meiryon_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0200.414] GetLastError () returned 0x5 [0200.414] GetLastError () returned 0x5 [0200.415] SetLastError (dwErrCode=0x5) [0200.415] GetLastError () returned 0x5 [0200.415] SetLastError (dwErrCode=0x5) [0200.415] GetLastError () returned 0x5 [0200.415] SetLastError (dwErrCode=0x5) [0200.415] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4bc156a, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef918492, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2380b, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="meiryo_boot.ttf", cAlternateFileName="MEIRYO~2.TTF")) returned 1 [0200.415] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0200.415] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0200.415] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229058 [0200.415] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0200.416] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228e60 | out: hHeap=0x1f0000) returned 1 [0200.416] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0200.416] CreateFileW (lpFileName="C:\\\\Boot\\Fonts\\meiryo_boot.ttf" (normalized: "c:\\boot\\fonts\\meiryo_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0200.416] GetLastError () returned 0x5 [0200.416] GetLastError () returned 0x5 [0200.417] SetLastError (dwErrCode=0x5) [0200.417] GetLastError () returned 0x5 [0200.417] SetLastError (dwErrCode=0x5) [0200.417] GetLastError () returned 0x5 [0200.417] SetLastError (dwErrCode=0x5) [0200.417] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4bc156a, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef92a947, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x27a1b, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="msjhn_boot.ttf", cAlternateFileName="MSJHN_~1.TTF")) returned 1 [0200.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238258 [0200.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238348 [0200.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229328 [0200.417] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238348 | out: hHeap=0x1f0000) returned 1 [0200.418] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229058 | out: hHeap=0x1f0000) returned 1 [0200.418] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238258 | out: hHeap=0x1f0000) returned 1 [0200.418] CreateFileW (lpFileName="C:\\\\Boot\\Fonts\\msjhn_boot.ttf" (normalized: "c:\\boot\\fonts\\msjhn_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0200.418] GetLastError () returned 0x5 [0200.418] GetLastError () returned 0x5 [0200.418] SetLastError (dwErrCode=0x5) [0200.418] GetLastError () returned 0x5 [0200.419] SetLastError (dwErrCode=0x5) [0200.419] GetLastError () returned 0x5 [0200.419] SetLastError (dwErrCode=0x5) [0200.419] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef93ce3b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x281fb, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="msjh_boot.ttf", cAlternateFileName="MSJH_B~1.TTF")) returned 1 [0200.419] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0200.419] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0200.419] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228d88 [0200.419] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0200.419] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229328 | out: hHeap=0x1f0000) returned 1 [0200.419] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0200.420] CreateFileW (lpFileName="C:\\\\Boot\\Fonts\\msjh_boot.ttf" (normalized: "c:\\boot\\fonts\\msjh_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0200.421] GetLastError () returned 0x5 [0200.421] GetLastError () returned 0x5 [0200.421] SetLastError (dwErrCode=0x5) [0200.421] GetLastError () returned 0x5 [0200.421] SetLastError (dwErrCode=0x5) [0200.421] GetLastError () returned 0x5 [0200.421] SetLastError (dwErrCode=0x5) [0200.421] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef94dfcd, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x25b3b, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="msyhn_boot.ttf", cAlternateFileName="MSYHN_~1.TTF")) returned 1 [0200.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238348 [0200.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238488 [0200.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229130 [0200.422] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238488 | out: hHeap=0x1f0000) returned 1 [0200.422] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228d88 | out: hHeap=0x1f0000) returned 1 [0200.422] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238348 | out: hHeap=0x1f0000) returned 1 [0200.422] CreateFileW (lpFileName="C:\\\\Boot\\Fonts\\msyhn_boot.ttf" (normalized: "c:\\boot\\fonts\\msyhn_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0200.423] GetLastError () returned 0x5 [0200.423] GetLastError () returned 0x5 [0200.423] SetLastError (dwErrCode=0x5) [0200.423] GetLastError () returned 0x5 [0200.423] SetLastError (dwErrCode=0x5) [0200.423] GetLastError () returned 0x5 [0200.423] SetLastError (dwErrCode=0x5) [0200.423] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef95f141, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x26255, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="msyh_boot.ttf", cAlternateFileName="MSYH_B~1.TTF")) returned 1 [0200.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0200.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0200.424] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229178 [0200.424] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0200.424] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229130 | out: hHeap=0x1f0000) returned 1 [0200.424] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0200.424] CreateFileW (lpFileName="C:\\\\Boot\\Fonts\\msyh_boot.ttf" (normalized: "c:\\boot\\fonts\\msyh_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0200.424] GetLastError () returned 0x5 [0200.424] GetLastError () returned 0x5 [0200.424] SetLastError (dwErrCode=0x5) [0200.425] GetLastError () returned 0x5 [0200.425] SetLastError (dwErrCode=0x5) [0200.425] GetLastError () returned 0x5 [0200.425] SetLastError (dwErrCode=0x5) [0200.425] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef96ef3e, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xaf3b, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="segmono_boot.ttf", cAlternateFileName="SEGMON~1.TTF")) returned 1 [0200.425] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228310 [0200.425] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0200.425] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2291c0 [0200.425] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0200.425] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229178 | out: hHeap=0x1f0000) returned 1 [0200.425] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228310 | out: hHeap=0x1f0000) returned 1 [0200.426] CreateFileW (lpFileName="C:\\\\Boot\\Fonts\\segmono_boot.ttf" (normalized: "c:\\boot\\fonts\\segmono_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0200.426] GetLastError () returned 0x5 [0200.426] GetLastError () returned 0x5 [0200.426] SetLastError (dwErrCode=0x5) [0200.426] GetLastError () returned 0x5 [0200.426] SetLastError (dwErrCode=0x5) [0200.426] GetLastError () returned 0x5 [0200.426] SetLastError (dwErrCode=0x5) [0200.426] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c0da69, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef97d9ab, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x14f66, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="segoen_slboot.ttf", cAlternateFileName="SEGOEN~1.TTF")) returned 1 [0200.426] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282d8 [0200.426] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0200.426] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2394b0 [0200.426] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0200.426] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2291c0 | out: hHeap=0x1f0000) returned 1 [0200.426] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282d8 | out: hHeap=0x1f0000) returned 1 [0200.427] CreateFileW (lpFileName="C:\\\\Boot\\Fonts\\segoen_slboot.ttf" (normalized: "c:\\boot\\fonts\\segoen_slboot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0200.427] GetLastError () returned 0x5 [0200.427] GetLastError () returned 0x5 [0200.427] SetLastError (dwErrCode=0x5) [0200.427] GetLastError () returned 0x5 [0200.427] SetLastError (dwErrCode=0x5) [0200.427] GetLastError () returned 0x5 [0200.427] SetLastError (dwErrCode=0x5) [0200.427] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef98c419, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x150a2, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="segoe_slboot.ttf", cAlternateFileName="SEGOE_~1.TTF")) returned 1 [0200.427] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228310 [0200.427] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0200.428] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229178 [0200.428] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0200.428] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2394b0 | out: hHeap=0x1f0000) returned 1 [0200.428] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228310 | out: hHeap=0x1f0000) returned 1 [0200.428] CreateFileW (lpFileName="C:\\\\Boot\\Fonts\\segoe_slboot.ttf" (normalized: "c:\\boot\\fonts\\segoe_slboot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0200.428] GetLastError () returned 0x5 [0200.428] GetLastError () returned 0x5 [0200.428] SetLastError (dwErrCode=0x5) [0200.428] GetLastError () returned 0x5 [0200.428] SetLastError (dwErrCode=0x5) [0200.428] GetLastError () returned 0x5 [0200.428] SetLastError (dwErrCode=0x5) [0200.428] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef999ae4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xbfc3, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 1 [0200.428] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0200.428] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0200.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228e60 [0200.429] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0200.429] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229178 | out: hHeap=0x1f0000) returned 1 [0200.429] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0200.429] CreateFileW (lpFileName="C:\\\\Boot\\Fonts\\wgl4_boot.ttf" (normalized: "c:\\boot\\fonts\\wgl4_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0200.429] GetLastError () returned 0x5 [0200.429] GetLastError () returned 0x5 [0200.429] SetLastError (dwErrCode=0x5) [0200.429] GetLastError () returned 0x5 [0200.429] SetLastError (dwErrCode=0x5) [0200.429] GetLastError () returned 0x5 [0200.429] SetLastError (dwErrCode=0x5) [0200.429] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef999ae4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xbfc3, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 0 [0200.429] FindClose (in: hFindFile=0x24ea80 | out: hFindFile=0x24ea80) returned 1 [0200.430] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228e60 | out: hHeap=0x1f0000) returned 1 [0200.430] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f020 | out: hHeap=0x1f0000) returned 1 [0200.430] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0200.430] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234590 | out: hHeap=0x1f0000) returned 1 [0200.430] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229328 [0200.431] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0200.431] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x237150 [0200.431] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228310 [0200.431] FindFirstFileW (in: lpFileName="C:\\\\Boot\\fr-CA\\*", lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24e780 [0200.431] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238348 [0200.431] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282d8 [0200.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238348 | out: hHeap=0x1f0000) returned 1 [0200.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228310 | out: hHeap=0x1f0000) returned 1 [0200.431] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0200.431] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0200.431] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0200.431] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228310 [0200.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0200.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282d8 | out: hHeap=0x1f0000) returned 1 [0200.431] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0200.431] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0200.431] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13560, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0200.431] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0200.431] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0200.431] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228e60 [0200.432] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0200.432] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228310 | out: hHeap=0x1f0000) returned 1 [0200.432] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0200.432] CreateFileW (lpFileName="C:\\\\Boot\\fr-CA\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-ca\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0200.432] GetLastError () returned 0x5 [0200.432] GetLastError () returned 0x5 [0200.432] SetLastError (dwErrCode=0x5) [0200.432] GetLastError () returned 0x5 [0200.432] SetLastError (dwErrCode=0x5) [0200.432] GetLastError () returned 0x5 [0200.432] SetLastError (dwErrCode=0x5) [0200.432] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13560, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0200.432] FindClose (in: hFindFile=0x24e780 | out: hFindFile=0x24e780) returned 1 [0200.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228e60 | out: hHeap=0x1f0000) returned 1 [0200.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237150 | out: hHeap=0x1f0000) returned 1 [0200.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0200.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229328 | out: hHeap=0x1f0000) returned 1 [0200.433] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228d88 [0200.433] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0200.433] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x236e20 [0200.433] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282d8 [0200.433] FindFirstFileW (in: lpFileName="C:\\\\Boot\\fr-FR\\*", lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010bc12, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ade2b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24eac0 [0200.433] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0200.433] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228310 [0200.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0200.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282d8 | out: hHeap=0x1f0000) returned 1 [0200.433] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0200.433] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010bc12, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ade2b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0200.433] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238438 [0200.433] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282d8 [0200.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238438 | out: hHeap=0x1f0000) returned 1 [0200.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228310 | out: hHeap=0x1f0000) returned 1 [0200.433] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0200.433] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0200.433] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2096e751, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13558, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0200.434] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0200.434] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0200.434] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229058 [0200.434] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0200.434] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282d8 | out: hHeap=0x1f0000) returned 1 [0200.434] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0200.434] CreateFileW (lpFileName="C:\\\\Boot\\fr-FR\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-fr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0200.434] GetLastError () returned 0x5 [0200.434] GetLastError () returned 0x5 [0200.434] SetLastError (dwErrCode=0x5) [0200.434] GetLastError () returned 0x5 [0200.434] SetLastError (dwErrCode=0x5) [0200.434] GetLastError () returned 0x5 [0200.434] SetLastError (dwErrCode=0x5) [0200.434] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5ade2b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0200.434] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0200.434] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0200.434] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229328 [0200.435] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0200.435] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229058 | out: hHeap=0x1f0000) returned 1 [0200.435] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0200.435] CreateFileW (lpFileName="C:\\\\Boot\\fr-FR\\memtest.exe.mui" (normalized: "c:\\boot\\fr-fr\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0200.435] GetLastError () returned 0x5 [0200.435] GetLastError () returned 0x5 [0200.435] SetLastError (dwErrCode=0x5) [0200.435] GetLastError () returned 0x5 [0200.435] SetLastError (dwErrCode=0x5) [0200.435] GetLastError () returned 0x5 [0200.435] SetLastError (dwErrCode=0x5) [0200.436] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5ade2b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0200.436] FindClose (in: hFindFile=0x24eac0 | out: hFindFile=0x24eac0) returned 1 [0200.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229328 | out: hHeap=0x1f0000) returned 1 [0200.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236e20 | out: hHeap=0x1f0000) returned 1 [0200.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0200.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228d88 | out: hHeap=0x1f0000) returned 1 [0200.436] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229058 [0200.436] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0200.436] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x236e20 [0200.436] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282d8 [0200.436] FindFirstFileW (in: lpFileName="C:\\\\Boot\\hr-HR\\*", lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24e9c0 [0200.436] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0200.436] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228310 [0200.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0200.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282d8 | out: hHeap=0x1f0000) returned 1 [0200.437] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0200.437] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0200.437] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0200.437] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282d8 [0200.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0200.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228310 | out: hHeap=0x1f0000) returned 1 [0200.437] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0200.437] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0200.437] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0200.437] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0200.437] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0200.437] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228e60 [0200.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0200.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282d8 | out: hHeap=0x1f0000) returned 1 [0200.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0200.437] CreateFileW (lpFileName="C:\\\\Boot\\hr-HR\\bootmgr.exe.mui" (normalized: "c:\\boot\\hr-hr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0200.438] GetLastError () returned 0x5 [0200.438] GetLastError () returned 0x5 [0200.438] SetLastError (dwErrCode=0x5) [0200.438] GetLastError () returned 0x5 [0200.438] SetLastError (dwErrCode=0x5) [0200.438] GetLastError () returned 0x5 [0200.438] SetLastError (dwErrCode=0x5) [0200.438] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0200.438] FindClose (in: hFindFile=0x24e9c0 | out: hFindFile=0x24e9c0) returned 1 [0200.438] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228e60 | out: hHeap=0x1f0000) returned 1 [0200.438] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236e20 | out: hHeap=0x1f0000) returned 1 [0200.438] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0200.438] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229058 | out: hHeap=0x1f0000) returned 1 [0200.438] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228dd0 [0200.438] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0200.438] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x237ae0 [0200.438] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282d8 [0200.438] FindFirstFileW (in: lpFileName="C:\\\\Boot\\hu-HU\\*", lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010c5ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5c171b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24ea80 [0200.439] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238438 [0200.439] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228310 [0200.439] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238438 | out: hHeap=0x1f0000) returned 1 [0200.439] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282d8 | out: hHeap=0x1f0000) returned 1 [0200.439] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0200.439] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010c5ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5c171b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0200.439] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0200.439] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282d8 [0200.439] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0200.439] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228310 | out: hHeap=0x1f0000) returned 1 [0200.439] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0200.439] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0200.439] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13360, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0200.439] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0200.439] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0200.439] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229058 [0200.439] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0200.439] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282d8 | out: hHeap=0x1f0000) returned 1 [0200.439] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0200.439] CreateFileW (lpFileName="C:\\\\Boot\\hu-HU\\bootmgr.exe.mui" (normalized: "c:\\boot\\hu-hu\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0200.440] GetLastError () returned 0x5 [0200.440] GetLastError () returned 0x5 [0200.440] SetLastError (dwErrCode=0x5) [0200.440] GetLastError () returned 0x5 [0200.440] SetLastError (dwErrCode=0x5) [0200.440] GetLastError () returned 0x5 [0200.440] SetLastError (dwErrCode=0x5) [0200.440] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5c171b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39d81d8, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb398, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0200.440] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0200.440] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380f0 [0200.440] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229328 [0200.440] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380f0 | out: hHeap=0x1f0000) returned 1 [0200.440] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229058 | out: hHeap=0x1f0000) returned 1 [0200.440] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0200.440] CreateFileW (lpFileName="C:\\\\Boot\\hu-HU\\memtest.exe.mui" (normalized: "c:\\boot\\hu-hu\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0200.440] GetLastError () returned 0x5 [0200.440] GetLastError () returned 0x5 [0200.441] SetLastError (dwErrCode=0x5) [0200.441] GetLastError () returned 0x5 [0200.441] SetLastError (dwErrCode=0x5) [0200.441] GetLastError () returned 0x5 [0200.441] SetLastError (dwErrCode=0x5) [0200.441] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5c171b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39d81d8, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb398, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0200.441] FindClose (in: hFindFile=0x24ea80 | out: hFindFile=0x24ea80) returned 1 [0200.441] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229328 | out: hHeap=0x1f0000) returned 1 [0200.441] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237ae0 | out: hHeap=0x1f0000) returned 1 [0200.441] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0200.441] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228dd0 | out: hHeap=0x1f0000) returned 1 [0200.441] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229130 [0200.441] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0200.441] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x237ae0 [0200.441] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228310 [0200.441] FindFirstFileW (in: lpFileName="C:\\\\Boot\\it-IT\\*", lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010ccad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5d8ab4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24ec40 [0200.441] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0200.441] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282d8 [0200.441] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0200.441] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228310 | out: hHeap=0x1f0000) returned 1 [0200.441] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0200.442] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010ccad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5d8ab4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0200.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0200.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228310 [0200.442] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0200.442] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282d8 | out: hHeap=0x1f0000) returned 1 [0200.442] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0200.442] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0200.442] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d58, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0200.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0200.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0200.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229328 [0200.442] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0200.442] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228310 | out: hHeap=0x1f0000) returned 1 [0200.442] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0200.442] CreateFileW (lpFileName="C:\\\\Boot\\it-IT\\bootmgr.exe.mui" (normalized: "c:\\boot\\it-it\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0200.442] GetLastError () returned 0x5 [0200.442] GetLastError () returned 0x5 [0200.442] SetLastError (dwErrCode=0x5) [0200.442] GetLastError () returned 0x5 [0200.443] SetLastError (dwErrCode=0x5) [0200.443] GetLastError () returned 0x5 [0200.443] SetLastError (dwErrCode=0x5) [0200.443] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5d8ab4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf30285aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0200.443] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238258 [0200.443] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0200.443] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229058 [0200.443] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0200.443] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229328 | out: hHeap=0x1f0000) returned 1 [0200.443] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238258 | out: hHeap=0x1f0000) returned 1 [0200.443] CreateFileW (lpFileName="C:\\\\Boot\\it-IT\\memtest.exe.mui" (normalized: "c:\\boot\\it-it\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0200.443] GetLastError () returned 0x5 [0200.443] GetLastError () returned 0x5 [0200.443] SetLastError (dwErrCode=0x5) [0200.443] GetLastError () returned 0x5 [0200.443] SetLastError (dwErrCode=0x5) [0200.443] GetLastError () returned 0x5 [0200.443] SetLastError (dwErrCode=0x5) [0200.444] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5d8ab4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf30285aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0200.444] FindClose (in: hFindFile=0x24ec40 | out: hFindFile=0x24ec40) returned 1 [0200.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229058 | out: hHeap=0x1f0000) returned 1 [0200.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237ae0 | out: hHeap=0x1f0000) returned 1 [0200.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0200.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229130 | out: hHeap=0x1f0000) returned 1 [0200.444] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229328 [0200.444] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0200.444] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x236e20 [0200.444] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228310 [0200.444] FindFirstFileW (in: lpFileName="C:\\\\Boot\\ja-JP\\*", lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010d0c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ed6c6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24e740 [0200.444] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0200.444] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282d8 [0200.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0200.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228310 | out: hHeap=0x1f0000) returned 1 [0200.444] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0200.444] FindNextFileW (in: hFindFile=0x24e740, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010d0c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ed6c6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0200.444] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0200.444] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228310 [0200.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0200.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282d8 | out: hHeap=0x1f0000) returned 1 [0200.445] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0200.445] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0200.445] FindNextFileW (in: hFindFile=0x24e740, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48c6596, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21212f9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x10760, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0200.445] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0200.445] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0200.445] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229178 [0200.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0200.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228310 | out: hHeap=0x1f0000) returned 1 [0200.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0200.445] CreateFileW (lpFileName="C:\\\\Boot\\ja-JP\\bootmgr.exe.mui" (normalized: "c:\\boot\\ja-jp\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0200.445] GetLastError () returned 0x5 [0200.445] GetLastError () returned 0x5 [0200.445] SetLastError (dwErrCode=0x5) [0200.445] GetLastError () returned 0x5 [0200.445] SetLastError (dwErrCode=0x5) [0200.446] GetLastError () returned 0x5 [0200.446] SetLastError (dwErrCode=0x5) [0200.446] FindNextFileW (in: hFindFile=0x24e740, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5ed6c6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf300233f, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa798, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0200.446] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238258 [0200.446] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380c8 [0200.446] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229058 [0200.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380c8 | out: hHeap=0x1f0000) returned 1 [0200.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229178 | out: hHeap=0x1f0000) returned 1 [0200.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238258 | out: hHeap=0x1f0000) returned 1 [0200.446] CreateFileW (lpFileName="C:\\\\Boot\\ja-JP\\memtest.exe.mui" (normalized: "c:\\boot\\ja-jp\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0200.446] GetLastError () returned 0x5 [0200.446] GetLastError () returned 0x5 [0200.446] SetLastError (dwErrCode=0x5) [0200.447] GetLastError () returned 0x5 [0200.447] SetLastError (dwErrCode=0x5) [0200.447] GetLastError () returned 0x5 [0200.447] SetLastError (dwErrCode=0x5) [0200.447] FindNextFileW (in: hFindFile=0x24e740, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5ed6c6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf300233f, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa798, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0200.447] FindClose (in: hFindFile=0x24e740 | out: hFindFile=0x24e740) returned 1 [0200.447] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229058 | out: hHeap=0x1f0000) returned 1 [0200.447] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236e20 | out: hHeap=0x1f0000) returned 1 [0200.447] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0200.447] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229328 | out: hHeap=0x1f0000) returned 1 [0200.447] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229328 [0200.447] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0200.447] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2372e8 [0200.447] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282d8 [0200.447] FindFirstFileW (in: lpFileName="C:\\\\Boot\\ko-KR\\*", lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef5fc210, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24e980 [0200.447] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380f0 [0200.447] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228310 [0200.448] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380f0 | out: hHeap=0x1f0000) returned 1 [0200.448] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282d8 | out: hHeap=0x1f0000) returned 1 [0200.448] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0200.448] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef5fc210, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0200.448] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238460 [0200.448] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282d8 [0200.448] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238460 | out: hHeap=0x1f0000) returned 1 [0200.448] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228310 | out: hHeap=0x1f0000) returned 1 [0200.448] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0200.448] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0200.448] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x211c6af1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x10560, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0200.448] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0200.448] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0200.448] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228e60 [0200.448] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0200.448] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282d8 | out: hHeap=0x1f0000) returned 1 [0200.448] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0200.448] CreateFileW (lpFileName="C:\\\\Boot\\ko-KR\\bootmgr.exe.mui" (normalized: "c:\\boot\\ko-kr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0200.448] GetLastError () returned 0x5 [0200.449] GetLastError () returned 0x5 [0200.449] SetLastError (dwErrCode=0x5) [0200.449] GetLastError () returned 0x5 [0200.449] SetLastError (dwErrCode=0x5) [0200.449] GetLastError () returned 0x5 [0200.449] SetLastError (dwErrCode=0x5) [0200.449] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fdc0d7, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa7a0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0200.449] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0200.449] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0200.449] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228d88 [0200.449] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0200.449] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228e60 | out: hHeap=0x1f0000) returned 1 [0200.449] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0200.449] CreateFileW (lpFileName="C:\\\\Boot\\ko-KR\\memtest.exe.mui" (normalized: "c:\\boot\\ko-kr\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0200.450] GetLastError () returned 0x5 [0200.450] GetLastError () returned 0x5 [0200.450] SetLastError (dwErrCode=0x5) [0200.450] GetLastError () returned 0x5 [0200.450] SetLastError (dwErrCode=0x5) [0200.450] GetLastError () returned 0x5 [0200.450] SetLastError (dwErrCode=0x5) [0200.450] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fdc0d7, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa7a0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0200.450] FindClose (in: hFindFile=0x24e980 | out: hFindFile=0x24e980) returned 1 [0200.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228d88 | out: hHeap=0x1f0000) returned 1 [0200.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2372e8 | out: hHeap=0x1f0000) returned 1 [0200.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0200.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229328 | out: hHeap=0x1f0000) returned 1 [0200.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x229328 [0200.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0200.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x236fb8 [0200.451] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282d8 [0200.451] FindFirstFileW (in: lpFileName="C:\\\\Boot\\lt-LT\\*", lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24ea00 [0200.451] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0200.451] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228310 [0200.687] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0200.687] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282d8 | out: hHeap=0x1f0000) returned 1 [0200.688] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0200.688] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0200.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0200.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282d8 [0200.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0200.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228310 | out: hHeap=0x1f0000) returned 1 [0200.688] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0200.688] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0200.688] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2117a634, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12760, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0200.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380c8 [0200.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0200.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2289e0 [0200.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0200.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282d8 | out: hHeap=0x1f0000) returned 1 [0200.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380c8 | out: hHeap=0x1f0000) returned 1 [0200.842] CreateFileW (lpFileName="C:\\\\Boot\\lt-LT\\bootmgr.exe.mui" (normalized: "c:\\boot\\lt-lt\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0200.842] GetLastError () returned 0x5 [0200.842] GetLastError () returned 0x5 [0200.843] SetLastError (dwErrCode=0x5) [0200.843] GetLastError () returned 0x5 [0200.843] SetLastError (dwErrCode=0x5) [0200.843] GetLastError () returned 0x5 [0200.843] SetLastError (dwErrCode=0x5) [0200.843] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2117a634, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12760, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0200.843] FindClose (in: hFindFile=0x24ea00 | out: hFindFile=0x24ea00) returned 1 [0200.843] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2289e0 | out: hHeap=0x1f0000) returned 1 [0200.843] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236fb8 | out: hHeap=0x1f0000) returned 1 [0200.843] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0200.843] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229328 | out: hHeap=0x1f0000) returned 1 [0200.843] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222178 [0200.843] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0200.843] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e030 [0200.844] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282a0 [0200.844] FindFirstFileW (in: lpFileName="C:\\\\Boot\\lv-LV\\*", lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24ed00 [0200.844] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0200.844] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228310 [0200.844] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0200.844] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0200.844] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0200.844] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0200.844] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0200.844] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282a0 [0200.844] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0200.844] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228310 | out: hHeap=0x1f0000) returned 1 [0200.844] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0200.844] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0200.844] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2117a634, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12758, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0200.844] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0200.844] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0200.844] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221d88 [0200.845] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0200.845] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0200.845] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0200.845] CreateFileW (lpFileName="C:\\\\Boot\\lv-LV\\bootmgr.exe.mui" (normalized: "c:\\boot\\lv-lv\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0200.845] GetLastError () returned 0x5 [0200.845] GetLastError () returned 0x5 [0200.845] SetLastError (dwErrCode=0x5) [0200.845] GetLastError () returned 0x5 [0200.845] SetLastError (dwErrCode=0x5) [0200.845] GetLastError () returned 0x5 [0200.845] SetLastError (dwErrCode=0x5) [0200.846] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2117a634, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12758, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0200.846] FindClose (in: hFindFile=0x24ed00 | out: hFindFile=0x24ed00) returned 1 [0200.846] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221d88 | out: hHeap=0x1f0000) returned 1 [0200.846] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e030 | out: hHeap=0x1f0000) returned 1 [0200.846] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0200.846] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222178 | out: hHeap=0x1f0000) returned 1 [0200.846] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221d88 [0200.846] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0200.846] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e4f8 [0200.846] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282a0 [0200.846] FindFirstFileW (in: lpFileName="C:\\\\Boot\\nb-NO\\*", lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e138, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef62cf52, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24e940 [0200.846] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0200.846] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228310 [0200.847] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0200.847] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0200.847] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0200.847] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e138, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef62cf52, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0200.847] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0200.847] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282a0 [0200.847] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0200.847] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228310 | out: hHeap=0x1f0000) returned 1 [0200.847] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0200.847] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0200.847] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x211543da, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12760, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0200.847] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0200.847] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238488 [0200.847] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221ef0 [0200.847] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238488 | out: hHeap=0x1f0000) returned 1 [0200.847] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0200.847] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0200.848] CreateFileW (lpFileName="C:\\\\Boot\\nb-NO\\bootmgr.exe.mui" (normalized: "c:\\boot\\nb-no\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0200.848] GetLastError () returned 0x5 [0200.848] GetLastError () returned 0x5 [0200.848] SetLastError (dwErrCode=0x5) [0200.848] GetLastError () returned 0x5 [0200.848] SetLastError (dwErrCode=0x5) [0200.848] GetLastError () returned 0x5 [0200.848] SetLastError (dwErrCode=0x5) [0200.848] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef62cf52, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fb5e6c, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0200.848] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0200.848] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238348 [0200.848] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222178 [0200.848] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238348 | out: hHeap=0x1f0000) returned 1 [0200.848] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221ef0 | out: hHeap=0x1f0000) returned 1 [0200.848] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0200.848] CreateFileW (lpFileName="C:\\\\Boot\\nb-NO\\memtest.exe.mui" (normalized: "c:\\boot\\nb-no\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0200.849] GetLastError () returned 0x5 [0200.849] GetLastError () returned 0x5 [0200.849] SetLastError (dwErrCode=0x5) [0200.849] GetLastError () returned 0x5 [0200.849] SetLastError (dwErrCode=0x5) [0200.849] GetLastError () returned 0x5 [0200.849] SetLastError (dwErrCode=0x5) [0200.849] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef62cf52, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fb5e6c, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0200.849] FindClose (in: hFindFile=0x24e940 | out: hFindFile=0x24e940) returned 1 [0200.849] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222178 | out: hHeap=0x1f0000) returned 1 [0200.849] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e4f8 | out: hHeap=0x1f0000) returned 1 [0200.849] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0200.849] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221d88 | out: hHeap=0x1f0000) returned 1 [0200.849] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221d88 [0200.849] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0200.849] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22eb58 [0200.849] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282a0 [0200.849] FindFirstFileW (in: lpFileName="C:\\\\Boot\\nl-NL\\*", lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e4fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6407cf, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24ebc0 [0200.850] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0200.850] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282d8 [0200.850] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0200.850] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0200.850] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0200.850] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e4fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6407cf, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0200.850] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0200.850] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282a0 [0200.850] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0200.850] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282d8 | out: hHeap=0x1f0000) returned 1 [0200.850] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0200.850] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0200.850] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x211543da, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13160, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0200.850] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0200.850] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0200.850] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222178 [0200.850] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0200.850] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0200.850] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0200.851] CreateFileW (lpFileName="C:\\\\Boot\\nl-NL\\bootmgr.exe.mui" (normalized: "c:\\boot\\nl-nl\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0200.851] GetLastError () returned 0x5 [0200.851] GetLastError () returned 0x5 [0200.851] SetLastError (dwErrCode=0x5) [0200.851] GetLastError () returned 0x5 [0200.851] SetLastError (dwErrCode=0x5) [0200.851] GetLastError () returned 0x5 [0200.851] SetLastError (dwErrCode=0x5) [0200.851] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6407cf, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fb5e6c, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0200.851] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238258 [0200.851] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0200.851] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221ef0 [0200.851] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0200.851] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222178 | out: hHeap=0x1f0000) returned 1 [0200.851] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238258 | out: hHeap=0x1f0000) returned 1 [0200.851] CreateFileW (lpFileName="C:\\\\Boot\\nl-NL\\memtest.exe.mui" (normalized: "c:\\boot\\nl-nl\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0200.851] GetLastError () returned 0x5 [0200.852] GetLastError () returned 0x5 [0200.852] SetLastError (dwErrCode=0x5) [0200.852] GetLastError () returned 0x5 [0200.852] SetLastError (dwErrCode=0x5) [0200.852] GetLastError () returned 0x5 [0200.852] SetLastError (dwErrCode=0x5) [0200.852] FindNextFileW (in: hFindFile=0x24ebc0, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6407cf, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fb5e6c, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0200.852] FindClose (in: hFindFile=0x24ebc0 | out: hFindFile=0x24ebc0) returned 1 [0200.852] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221ef0 | out: hHeap=0x1f0000) returned 1 [0200.852] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22eb58 | out: hHeap=0x1f0000) returned 1 [0200.852] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0200.852] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221d88 | out: hHeap=0x1f0000) returned 1 [0200.852] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2221c0 [0200.852] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0200.852] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e1c8 [0200.852] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228310 [0200.852] FindFirstFileW (in: lpFileName="C:\\\\Boot\\pl-PL\\*", lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef65403a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24e6c0 [0200.853] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238438 [0200.853] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282d8 [0200.853] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238438 | out: hHeap=0x1f0000) returned 1 [0200.853] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228310 | out: hHeap=0x1f0000) returned 1 [0200.853] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0200.853] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef65403a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0200.853] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0200.853] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228310 [0200.853] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0200.853] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282d8 | out: hHeap=0x1f0000) returned 1 [0200.853] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0200.853] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0200.853] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2112e17f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f58, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0200.853] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0200.853] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0200.853] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221d88 [0200.853] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0200.853] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228310 | out: hHeap=0x1f0000) returned 1 [0200.853] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0200.854] CreateFileW (lpFileName="C:\\\\Boot\\pl-PL\\bootmgr.exe.mui" (normalized: "c:\\boot\\pl-pl\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0200.854] GetLastError () returned 0x5 [0200.854] GetLastError () returned 0x5 [0200.854] SetLastError (dwErrCode=0x5) [0200.854] GetLastError () returned 0x5 [0200.854] SetLastError (dwErrCode=0x5) [0200.854] GetLastError () returned 0x5 [0200.854] SetLastError (dwErrCode=0x5) [0200.854] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0200.854] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238258 [0200.854] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0200.854] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221ef0 [0200.854] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0200.854] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221d88 | out: hHeap=0x1f0000) returned 1 [0200.854] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238258 | out: hHeap=0x1f0000) returned 1 [0200.855] CreateFileW (lpFileName="C:\\\\Boot\\pl-PL\\memtest.exe.mui" (normalized: "c:\\boot\\pl-pl\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0200.855] GetLastError () returned 0x5 [0200.855] GetLastError () returned 0x5 [0200.855] SetLastError (dwErrCode=0x5) [0200.855] GetLastError () returned 0x5 [0200.855] SetLastError (dwErrCode=0x5) [0200.855] GetLastError () returned 0x5 [0200.855] SetLastError (dwErrCode=0x5) [0200.855] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0200.856] FindClose (in: hFindFile=0x24e6c0 | out: hFindFile=0x24e6c0) returned 1 [0200.856] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221ef0 | out: hHeap=0x1f0000) returned 1 [0200.856] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e1c8 | out: hHeap=0x1f0000) returned 1 [0200.856] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0200.856] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2221c0 | out: hHeap=0x1f0000) returned 1 [0200.856] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222178 [0200.856] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238348 [0200.856] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d9d0 [0200.856] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282a0 [0200.856] FindFirstFileW (in: lpFileName="C:\\\\Boot\\pt-BR\\*", lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6678d6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6678d6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24e840 [0200.856] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0200.856] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282d8 [0200.856] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0200.856] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0200.856] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0200.856] FindNextFileW (in: hFindFile=0x24e840, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6678d6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6678d6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0200.857] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0200.857] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228310 [0200.857] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0200.857] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282d8 | out: hHeap=0x1f0000) returned 1 [0200.857] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0200.857] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0200.857] FindNextFileW (in: hFindFile=0x24e840, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2112e17f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0200.857] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0200.857] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238258 [0200.857] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221d88 [0200.859] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238258 | out: hHeap=0x1f0000) returned 1 [0200.859] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228310 | out: hHeap=0x1f0000) returned 1 [0200.859] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0200.859] CreateFileW (lpFileName="C:\\\\Boot\\pt-BR\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-br\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0200.860] GetLastError () returned 0x5 [0200.860] GetLastError () returned 0x5 [0200.860] SetLastError (dwErrCode=0x5) [0200.860] GetLastError () returned 0x5 [0200.860] SetLastError (dwErrCode=0x5) [0200.860] GetLastError () returned 0x5 [0200.860] SetLastError (dwErrCode=0x5) [0200.860] FindNextFileW (in: hFindFile=0x24e840, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65dc94, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0200.860] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0200.860] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0200.860] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2221c0 [0200.860] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0200.860] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221d88 | out: hHeap=0x1f0000) returned 1 [0200.860] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0200.860] CreateFileW (lpFileName="C:\\\\Boot\\pt-BR\\memtest.exe.mui" (normalized: "c:\\boot\\pt-br\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0200.861] GetLastError () returned 0x5 [0200.861] GetLastError () returned 0x5 [0200.861] SetLastError (dwErrCode=0x5) [0200.861] GetLastError () returned 0x5 [0200.861] SetLastError (dwErrCode=0x5) [0200.861] GetLastError () returned 0x5 [0200.861] SetLastError (dwErrCode=0x5) [0200.861] FindNextFileW (in: hFindFile=0x24e840, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65dc94, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0200.861] FindClose (in: hFindFile=0x24e840 | out: hFindFile=0x24e840) returned 1 [0200.861] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2221c0 | out: hHeap=0x1f0000) returned 1 [0200.861] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d9d0 | out: hHeap=0x1f0000) returned 1 [0200.861] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238348 | out: hHeap=0x1f0000) returned 1 [0200.861] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222178 | out: hHeap=0x1f0000) returned 1 [0200.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221ef0 [0200.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238348 [0200.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f1b8 [0200.862] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282d8 [0200.862] FindFirstFileW (in: lpFileName="C:\\\\Boot\\pt-PT\\*", lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f167, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6714dc, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24e700 [0200.862] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0200.862] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228310 [0200.862] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0200.862] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282d8 | out: hHeap=0x1f0000) returned 1 [0200.862] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0200.862] FindNextFileW (in: hFindFile=0x24e700, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f167, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6714dc, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0200.862] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0200.862] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282a0 [0200.862] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0200.862] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228310 | out: hHeap=0x1f0000) returned 1 [0200.862] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0200.862] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0200.862] FindNextFileW (in: hFindFile=0x24e700, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2112e17f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0200.862] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0200.862] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238460 [0200.862] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221d88 [0200.862] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238460 | out: hHeap=0x1f0000) returned 1 [0200.862] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0200.862] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0200.863] CreateFileW (lpFileName="C:\\\\Boot\\pt-PT\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-pt\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0200.863] GetLastError () returned 0x5 [0200.863] GetLastError () returned 0x5 [0200.863] SetLastError (dwErrCode=0x5) [0200.863] GetLastError () returned 0x5 [0200.863] SetLastError (dwErrCode=0x5) [0200.863] GetLastError () returned 0x5 [0200.863] SetLastError (dwErrCode=0x5) [0200.863] FindNextFileW (in: hFindFile=0x24e700, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6714dc, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0200.863] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0200.863] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0200.863] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222178 [0200.863] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0200.863] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221d88 | out: hHeap=0x1f0000) returned 1 [0200.863] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0200.864] CreateFileW (lpFileName="C:\\\\Boot\\pt-PT\\memtest.exe.mui" (normalized: "c:\\boot\\pt-pt\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0200.864] GetLastError () returned 0x5 [0200.864] GetLastError () returned 0x5 [0200.864] SetLastError (dwErrCode=0x5) [0200.864] GetLastError () returned 0x5 [0200.864] SetLastError (dwErrCode=0x5) [0200.864] GetLastError () returned 0x5 [0200.864] SetLastError (dwErrCode=0x5) [0200.864] FindNextFileW (in: hFindFile=0x24e700, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6714dc, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0200.864] FindClose (in: hFindFile=0x24e700 | out: hFindFile=0x24e700) returned 1 [0200.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222178 | out: hHeap=0x1f0000) returned 1 [0200.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f1b8 | out: hHeap=0x1f0000) returned 1 [0200.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238348 | out: hHeap=0x1f0000) returned 1 [0200.865] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221ef0 | out: hHeap=0x1f0000) returned 1 [0200.865] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2221c0 [0200.865] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238460 [0200.865] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e030 [0200.865] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282d8 [0200.865] FindFirstFileW (in: lpFileName="C:\\\\Boot\\qps-ploc\\*", lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f640, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef684d85, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24e780 [0200.865] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228310 [0200.865] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282d8 | out: hHeap=0x1f0000) returned 1 [0200.865] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0200.865] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f640, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef684d85, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0200.865] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282d8 [0200.865] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228310 | out: hHeap=0x1f0000) returned 1 [0200.865] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0200.865] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0200.865] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12160, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0200.865] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238258 [0200.866] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282a0 [0200.866] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2395b8 [0200.866] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0200.866] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282d8 | out: hHeap=0x1f0000) returned 1 [0200.866] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238258 | out: hHeap=0x1f0000) returned 1 [0200.866] CreateFileW (lpFileName="C:\\\\Boot\\qps-ploc\\bootmgr.exe.mui" (normalized: "c:\\boot\\qps-ploc\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0200.866] GetLastError () returned 0x5 [0200.866] GetLastError () returned 0x5 [0200.866] SetLastError (dwErrCode=0x5) [0200.866] GetLastError () returned 0x5 [0200.866] SetLastError (dwErrCode=0x5) [0200.867] GetLastError () returned 0x5 [0200.867] SetLastError (dwErrCode=0x5) [0200.867] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef684d85, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfbd1a998, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0xd398, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0200.867] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0200.867] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228310 [0200.867] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239a30 [0200.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228310 | out: hHeap=0x1f0000) returned 1 [0200.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2395b8 | out: hHeap=0x1f0000) returned 1 [0200.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0200.867] CreateFileW (lpFileName="C:\\\\Boot\\qps-ploc\\memtest.exe.mui" (normalized: "c:\\boot\\qps-ploc\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0200.868] GetLastError () returned 0x5 [0200.868] GetLastError () returned 0x5 [0200.868] SetLastError (dwErrCode=0x5) [0200.868] GetLastError () returned 0x5 [0200.868] SetLastError (dwErrCode=0x5) [0200.868] GetLastError () returned 0x5 [0200.868] SetLastError (dwErrCode=0x5) [0200.868] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef684d85, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfbd1a998, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0xd398, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0200.868] FindClose (in: hFindFile=0x24e780 | out: hFindFile=0x24e780) returned 1 [0200.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239a30 | out: hHeap=0x1f0000) returned 1 [0200.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e030 | out: hHeap=0x1f0000) returned 1 [0200.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238460 | out: hHeap=0x1f0000) returned 1 [0200.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2221c0 | out: hHeap=0x1f0000) returned 1 [0200.868] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222178 [0200.869] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0200.869] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d9d0 [0200.869] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282d8 [0200.869] FindFirstFileW (in: lpFileName="C:\\\\Boot\\Resources\\*", lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ab61e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9abff9, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24ed40 [0200.869] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228310 [0200.869] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282d8 | out: hHeap=0x1f0000) returned 1 [0200.869] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0200.869] FindNextFileW (in: hFindFile=0x24ed40, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ab61e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9abff9, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0200.869] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282d8 [0200.869] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228310 | out: hHeap=0x1f0000) returned 1 [0200.869] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0200.869] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0200.869] FindNextFileW (in: hFindFile=0x24ed40, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9abff9, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef597530, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x169a0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="bootres.dll", cAlternateFileName="")) returned 1 [0200.869] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238348 [0200.869] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228310 [0200.870] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x226238 [0200.870] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228310 | out: hHeap=0x1f0000) returned 1 [0200.870] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282d8 | out: hHeap=0x1f0000) returned 1 [0200.870] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238348 | out: hHeap=0x1f0000) returned 1 [0200.870] CreateFileW (lpFileName="C:\\\\Boot\\Resources\\bootres.dll" (normalized: "c:\\boot\\resources\\bootres.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0200.870] GetLastError () returned 0x5 [0200.870] GetLastError () returned 0x5 [0200.870] SetLastError (dwErrCode=0x5) [0200.870] GetLastError () returned 0x5 [0200.870] SetLastError (dwErrCode=0x5) [0200.870] GetLastError () returned 0x5 [0200.870] SetLastError (dwErrCode=0x5) [0200.871] FindNextFileW (in: hFindFile=0x24ed40, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9baa67, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="en-US", cAlternateFileName="")) returned 1 [0200.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228310 [0200.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x2261e8 [0200.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228310 | out: hHeap=0x1f0000) returned 1 [0200.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226238 | out: hHeap=0x1f0000) returned 1 [0200.871] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0200.871] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0200.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204ef0 [0200.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221d88 [0200.871] FindNextFileW (in: hFindFile=0x24ed40, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9baa67, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="en-US", cAlternateFileName="")) returned 0 [0200.871] FindClose (in: hFindFile=0x24ed40 | out: hFindFile=0x24ed40) returned 1 [0200.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2221c0 [0200.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0200.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e030 [0200.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221ef0 [0200.872] FindFirstFileW (in: lpFileName="C:\\\\Boot\\Resources\\en-US\\*", lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9baa67, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName=".", cAlternateFileName="")) returned 0x24e900 [0200.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2225f8 [0200.872] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221ef0 | out: hHeap=0x1f0000) returned 1 [0200.872] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0200.872] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9baa67, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="..", cAlternateFileName="")) returned 1 [0200.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221ef0 [0200.872] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2225f8 | out: hHeap=0x1f0000) returned 1 [0200.872] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0200.872] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0200.873] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9baa67, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0x31acad58, ftLastWriteTime.dwHighDateTime=0x1d2a030, nFileSizeHigh=0x0, nFileSizeLow=0x2fa0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="bootres.dll.mui", cAlternateFileName="BOOTRE~1.MUI")) returned 1 [0200.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0200.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222b08 [0200.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d68 [0200.873] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222b08 | out: hHeap=0x1f0000) returned 1 [0200.873] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221ef0 | out: hHeap=0x1f0000) returned 1 [0200.874] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0200.874] CreateFileW (lpFileName="C:\\\\Boot\\Resources\\en-US\\bootres.dll.mui" (normalized: "c:\\boot\\resources\\en-us\\bootres.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be73c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0200.874] GetLastError () returned 0x5 [0200.874] GetLastError () returned 0x5 [0200.874] SetLastError (dwErrCode=0x5) [0200.874] GetLastError () returned 0x5 [0200.874] SetLastError (dwErrCode=0x5) [0200.874] GetLastError () returned 0x5 [0200.874] SetLastError (dwErrCode=0x5) [0200.875] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9baa67, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0x31acad58, ftLastWriteTime.dwHighDateTime=0x1d2a030, nFileSizeHigh=0x0, nFileSizeLow=0x2fa0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="bootres.dll.mui", cAlternateFileName="BOOTRE~1.MUI")) returned 0 [0200.875] FindClose (in: hFindFile=0x24e900 | out: hFindFile=0x24e900) returned 1 [0200.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d68 | out: hHeap=0x1f0000) returned 1 [0200.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e030 | out: hHeap=0x1f0000) returned 1 [0200.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0200.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2221c0 | out: hHeap=0x1f0000) returned 1 [0200.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2261e8 | out: hHeap=0x1f0000) returned 1 [0200.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221d88 | out: hHeap=0x1f0000) returned 1 [0200.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ef0 | out: hHeap=0x1f0000) returned 1 [0200.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d9d0 | out: hHeap=0x1f0000) returned 1 [0200.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0200.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222178 | out: hHeap=0x1f0000) returned 1 [0200.876] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221d88 [0200.876] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238460 [0200.876] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22eb58 [0200.876] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282d8 [0200.876] FindFirstFileW (in: lpFileName="C:\\\\Boot\\ro-RO\\*", lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24eb00 [0200.876] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0200.876] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282a0 [0200.876] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0200.876] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282d8 | out: hHeap=0x1f0000) returned 1 [0200.876] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0200.876] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0200.876] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0200.876] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282d8 [0200.876] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0200.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0200.877] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0200.877] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0200.877] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12960, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0200.877] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0200.877] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238488 [0200.877] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221ef0 [0200.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238488 | out: hHeap=0x1f0000) returned 1 [0200.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282d8 | out: hHeap=0x1f0000) returned 1 [0200.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0200.877] CreateFileW (lpFileName="C:\\\\Boot\\ro-RO\\bootmgr.exe.mui" (normalized: "c:\\boot\\ro-ro\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0200.878] GetLastError () returned 0x5 [0200.878] GetLastError () returned 0x5 [0200.878] SetLastError (dwErrCode=0x5) [0200.878] GetLastError () returned 0x5 [0200.878] SetLastError (dwErrCode=0x5) [0200.878] GetLastError () returned 0x5 [0200.878] SetLastError (dwErrCode=0x5) [0200.878] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12960, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0200.878] FindClose (in: hFindFile=0x24eb00 | out: hFindFile=0x24eb00) returned 1 [0200.879] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221ef0 | out: hHeap=0x1f0000) returned 1 [0200.879] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22eb58 | out: hHeap=0x1f0000) returned 1 [0200.879] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238460 | out: hHeap=0x1f0000) returned 1 [0200.879] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221d88 | out: hHeap=0x1f0000) returned 1 [0200.879] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221d88 [0200.879] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380c8 [0200.879] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e9c0 [0200.879] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228310 [0200.879] FindFirstFileW (in: lpFileName="C:\\\\Boot\\ru-RU\\*", lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef698608, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24ea80 [0200.879] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0200.879] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282a0 [0200.880] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0200.880] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228310 | out: hHeap=0x1f0000) returned 1 [0200.880] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0200.880] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef698608, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0200.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380f0 [0200.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282d8 [0200.880] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380f0 | out: hHeap=0x1f0000) returned 1 [0200.880] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0200.880] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0200.880] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0200.880] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0200.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0200.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238258 [0200.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222178 [0200.880] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238258 | out: hHeap=0x1f0000) returned 1 [0200.881] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282d8 | out: hHeap=0x1f0000) returned 1 [0200.881] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0200.881] CreateFileW (lpFileName="C:\\\\Boot\\ru-RU\\bootmgr.exe.mui" (normalized: "c:\\boot\\ru-ru\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0200.881] GetLastError () returned 0x5 [0200.881] GetLastError () returned 0x5 [0200.882] SetLastError (dwErrCode=0x5) [0200.882] GetLastError () returned 0x5 [0200.882] SetLastError (dwErrCode=0x5) [0200.882] GetLastError () returned 0x5 [0200.882] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f699a6, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xafa0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0200.882] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0200.882] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0200.882] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221ef0 [0200.883] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0200.883] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222178 | out: hHeap=0x1f0000) returned 1 [0200.883] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0200.883] CreateFileW (lpFileName="C:\\\\Boot\\ru-RU\\memtest.exe.mui" (normalized: "c:\\boot\\ru-ru\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0200.884] GetLastError () returned 0x5 [0200.884] GetLastError () returned 0x5 [0200.884] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f699a6, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xafa0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0200.884] FindClose (in: hFindFile=0x24ea80 | out: hFindFile=0x24ea80) returned 1 [0200.884] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221ef0 | out: hHeap=0x1f0000) returned 1 [0200.884] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e9c0 | out: hHeap=0x1f0000) returned 1 [0200.885] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380c8 | out: hHeap=0x1f0000) returned 1 [0200.885] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221d88 | out: hHeap=0x1f0000) returned 1 [0200.885] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221d88 [0200.885] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380c8 [0200.885] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22eb58 [0200.885] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282d8 [0200.885] FindFirstFileW (in: lpFileName="C:\\\\Boot\\sk-SK\\*", lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24e840 [0200.886] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0200.886] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228310 [0200.886] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0200.886] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282d8 | out: hHeap=0x1f0000) returned 1 [0200.886] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0200.886] FindNextFileW (in: hFindFile=0x24e840, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0200.886] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0200.886] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282d8 [0200.886] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0200.887] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228310 | out: hHeap=0x1f0000) returned 1 [0200.887] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0200.887] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0200.887] FindNextFileW (in: hFindFile=0x24e840, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d58, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0200.887] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0200.887] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0200.887] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222178 [0200.887] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0200.887] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282d8 | out: hHeap=0x1f0000) returned 1 [0200.888] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0200.888] CreateFileW (lpFileName="C:\\\\Boot\\sk-SK\\bootmgr.exe.mui" (normalized: "c:\\boot\\sk-sk\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0200.888] GetLastError () returned 0x5 [0200.889] GetLastError () returned 0x5 [0200.889] FindNextFileW (in: hFindFile=0x24e840, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d58, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0200.889] FindClose (in: hFindFile=0x24e840 | out: hFindFile=0x24e840) returned 1 [0200.889] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222178 | out: hHeap=0x1f0000) returned 1 [0200.889] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22eb58 | out: hHeap=0x1f0000) returned 1 [0200.889] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380c8 | out: hHeap=0x1f0000) returned 1 [0200.889] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221d88 | out: hHeap=0x1f0000) returned 1 [0200.889] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221d88 [0200.890] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0200.890] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d9d0 [0200.890] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282d8 [0200.890] FindFirstFileW (in: lpFileName="C:\\\\Boot\\sl-SI\\*", lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24e600 [0200.890] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0200.890] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228310 [0200.890] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0201.171] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282d8 | out: hHeap=0x1f0000) returned 1 [0201.172] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0201.172] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0201.172] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0201.172] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282d8 [0201.172] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0201.172] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228310 | out: hHeap=0x1f0000) returned 1 [0201.172] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0201.172] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0201.173] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0201.173] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0201.173] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238258 [0201.173] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2229e8 [0201.173] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238258 | out: hHeap=0x1f0000) returned 1 [0201.173] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282d8 | out: hHeap=0x1f0000) returned 1 [0201.173] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0201.174] CreateFileW (lpFileName="C:\\\\Boot\\sl-SI\\bootmgr.exe.mui" (normalized: "c:\\boot\\sl-si\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0201.174] GetLastError () returned 0x5 [0201.175] GetLastError () returned 0x5 [0201.175] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0201.175] FindClose (in: hFindFile=0x24e600 | out: hFindFile=0x24e600) returned 1 [0201.175] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2229e8 | out: hHeap=0x1f0000) returned 1 [0201.175] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d9d0 | out: hHeap=0x1f0000) returned 1 [0201.175] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0201.175] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221d88 | out: hHeap=0x1f0000) returned 1 [0201.175] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221d88 [0201.176] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0201.176] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e1c8 [0201.176] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282d8 [0201.176] FindFirstFileW (in: lpFileName="C:\\\\Boot\\sr-Latn-CS\\*", lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0x5168548b, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24eb00 [0201.176] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228310 [0201.176] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282d8 | out: hHeap=0x1f0000) returned 1 [0201.176] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0201.176] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0x5168548b, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0201.177] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282a0 [0201.177] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228310 | out: hHeap=0x1f0000) returned 1 [0201.177] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0201.177] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0201.177] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21212f9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0201.177] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238438 [0201.177] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282d8 [0201.177] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239400 [0201.177] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282d8 | out: hHeap=0x1f0000) returned 1 [0201.177] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0201.178] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238438 | out: hHeap=0x1f0000) returned 1 [0201.178] CreateFileW (lpFileName="C:\\\\Boot\\sr-Latn-CS\\bootmgr.exe.mui" (normalized: "c:\\boot\\sr-latn-cs\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0201.179] GetLastError () returned 0x5 [0201.179] GetLastError () returned 0x5 [0201.179] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0xe318f070, ftLastWriteTime.dwHighDateTime=0x1d112e1, nFileSizeHigh=0x0, nFileSizeLow=0xaf58, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0201.179] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0201.179] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282a0 [0201.179] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239a30 [0201.179] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0201.179] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239400 | out: hHeap=0x1f0000) returned 1 [0201.180] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0201.180] CreateFileW (lpFileName="C:\\\\Boot\\sr-Latn-CS\\memtest.exe.mui" (normalized: "c:\\boot\\sr-latn-cs\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0201.181] GetLastError () returned 0x5 [0201.181] GetLastError () returned 0x5 [0201.181] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0xe318f070, ftLastWriteTime.dwHighDateTime=0x1d112e1, nFileSizeHigh=0x0, nFileSizeLow=0xaf58, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0201.181] FindClose (in: hFindFile=0x24eb00 | out: hFindFile=0x24eb00) returned 1 [0201.181] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239a30 | out: hHeap=0x1f0000) returned 1 [0201.182] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e1c8 | out: hHeap=0x1f0000) returned 1 [0201.182] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0201.182] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221d88 | out: hHeap=0x1f0000) returned 1 [0201.182] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221d88 [0201.182] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0201.182] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e4f8 [0201.182] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228310 [0201.182] FindFirstFileW (in: lpFileName="C:\\\\Boot\\sr-Latn-RS\\*", lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24ea00 [0201.183] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282a0 [0201.183] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228310 | out: hHeap=0x1f0000) returned 1 [0201.183] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0201.183] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0201.183] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228310 [0201.183] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0201.183] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0201.184] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0201.184] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21212f9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0201.184] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0201.184] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282a0 [0201.184] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2397c8 [0201.184] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0201.184] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228310 | out: hHeap=0x1f0000) returned 1 [0201.184] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0201.185] CreateFileW (lpFileName="C:\\\\Boot\\sr-Latn-RS\\bootmgr.exe.mui" (normalized: "c:\\boot\\sr-latn-rs\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0201.186] GetLastError () returned 0x5 [0201.186] GetLastError () returned 0x5 [0201.186] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21212f9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0201.186] FindClose (in: hFindFile=0x24ea00 | out: hFindFile=0x24ea00) returned 1 [0201.186] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2397c8 | out: hHeap=0x1f0000) returned 1 [0201.186] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e4f8 | out: hHeap=0x1f0000) returned 1 [0201.186] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0201.187] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221d88 | out: hHeap=0x1f0000) returned 1 [0201.187] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221d88 [0201.187] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380c8 [0201.187] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d9d0 [0201.187] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228310 [0201.187] FindFirstFileW (in: lpFileName="C:\\\\Boot\\sv-SE\\*", lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01adf43, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6a2250, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24e8c0 [0201.187] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0201.187] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282a0 [0201.188] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0201.188] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228310 | out: hHeap=0x1f0000) returned 1 [0201.188] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0201.188] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01adf43, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6a2250, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0201.188] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0201.188] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282d8 [0201.188] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0201.188] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0201.188] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0201.188] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0201.189] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12960, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0201.189] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0201.189] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0201.189] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2229e8 [0201.189] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0201.189] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282d8 | out: hHeap=0x1f0000) returned 1 [0201.189] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0201.190] CreateFileW (lpFileName="C:\\\\Boot\\sv-SE\\bootmgr.exe.mui" (normalized: "c:\\boot\\sv-se\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0201.190] GetLastError () returned 0x5 [0201.190] GetLastError () returned 0x5 [0201.190] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6a2250, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f699a6, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xaf98, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0201.190] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0201.190] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0201.191] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222a30 [0201.191] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0201.191] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2229e8 | out: hHeap=0x1f0000) returned 1 [0201.191] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0201.191] CreateFileW (lpFileName="C:\\\\Boot\\sv-SE\\memtest.exe.mui" (normalized: "c:\\boot\\sv-se\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0201.191] GetLastError () returned 0x5 [0201.191] GetLastError () returned 0x5 [0201.192] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6a2250, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f699a6, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xaf98, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0201.192] FindClose (in: hFindFile=0x24e8c0 | out: hFindFile=0x24e8c0) returned 1 [0201.192] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222a30 | out: hHeap=0x1f0000) returned 1 [0201.192] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d9d0 | out: hHeap=0x1f0000) returned 1 [0201.192] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380c8 | out: hHeap=0x1f0000) returned 1 [0201.192] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221d88 | out: hHeap=0x1f0000) returned 1 [0201.192] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221d88 [0201.192] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0201.192] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22ee88 [0201.192] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282d8 [0201.192] FindFirstFileW (in: lpFileName="C:\\\\Boot\\tr-TR\\*", lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206504, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6b5aca, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24e940 [0201.193] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0201.193] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228310 [0201.193] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0201.193] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282d8 | out: hHeap=0x1f0000) returned 1 [0201.193] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0201.193] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206504, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6b5aca, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0201.193] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0201.193] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282a0 [0201.193] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0201.194] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228310 | out: hHeap=0x1f0000) returned 1 [0201.194] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0201.194] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0201.194] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210e1cce, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12558, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0201.194] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0201.194] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0201.194] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2225f8 [0201.194] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0201.194] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0201.194] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0201.195] CreateFileW (lpFileName="C:\\\\Boot\\tr-TR\\bootmgr.exe.mui" (normalized: "c:\\boot\\tr-tr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0201.195] GetLastError () returned 0x5 [0201.195] GetLastError () returned 0x5 [0201.195] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6b5aca, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f4373a, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0201.195] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0201.195] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0201.195] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2229e8 [0201.196] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0201.196] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2225f8 | out: hHeap=0x1f0000) returned 1 [0201.196] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0201.196] CreateFileW (lpFileName="C:\\\\Boot\\tr-TR\\memtest.exe.mui" (normalized: "c:\\boot\\tr-tr\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0201.196] GetLastError () returned 0x5 [0201.196] GetLastError () returned 0x5 [0201.197] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6b5aca, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f4373a, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0201.197] FindClose (in: hFindFile=0x24e940 | out: hFindFile=0x24e940) returned 1 [0201.197] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2229e8 | out: hHeap=0x1f0000) returned 1 [0201.197] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ee88 | out: hHeap=0x1f0000) returned 1 [0201.197] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0201.197] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221d88 | out: hHeap=0x1f0000) returned 1 [0201.197] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221d88 [0201.197] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238488 [0201.197] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d508 [0201.197] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228310 [0201.197] FindFirstFileW (in: lpFileName="C:\\\\Boot\\uk-UA\\*", lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206a30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24eb00 [0201.198] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0201.198] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282a0 [0201.198] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0201.198] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228310 | out: hHeap=0x1f0000) returned 1 [0201.198] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0201.198] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206a30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0201.198] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0201.198] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228310 [0201.198] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0201.198] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0201.198] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0201.198] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0201.199] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210e1cce, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0201.199] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0201.199] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0201.199] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2229e8 [0201.199] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0201.199] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228310 | out: hHeap=0x1f0000) returned 1 [0201.199] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0201.199] CreateFileW (lpFileName="C:\\\\Boot\\uk-UA\\bootmgr.exe.mui" (normalized: "c:\\boot\\uk-ua\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0201.200] GetLastError () returned 0x5 [0201.200] GetLastError () returned 0x5 [0201.200] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210e1cce, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0201.200] FindClose (in: hFindFile=0x24eb00 | out: hFindFile=0x24eb00) returned 1 [0201.200] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2229e8 | out: hHeap=0x1f0000) returned 1 [0201.200] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d508 | out: hHeap=0x1f0000) returned 1 [0201.200] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238488 | out: hHeap=0x1f0000) returned 1 [0201.200] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221d88 | out: hHeap=0x1f0000) returned 1 [0201.200] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221d88 [0201.200] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238258 [0201.200] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e360 [0201.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228310 [0201.201] FindFirstFileW (in: lpFileName="C:\\\\Boot\\zh-CN\\*", lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207100, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6d7e9a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24ea80 [0201.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0201.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282d8 [0201.201] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0201.202] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228310 | out: hHeap=0x1f0000) returned 1 [0201.202] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0201.202] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207100, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6d7e9a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0201.202] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0201.202] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282a0 [0201.202] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0201.202] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282d8 | out: hHeap=0x1f0000) returned 1 [0201.202] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0201.202] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0201.202] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xf960, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0201.202] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238438 [0201.202] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0201.202] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2229e8 [0201.203] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0201.203] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0201.203] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238438 | out: hHeap=0x1f0000) returned 1 [0201.203] CreateFileW (lpFileName="C:\\\\Boot\\zh-CN\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-cn\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0201.203] GetLastError () returned 0x5 [0201.203] GetLastError () returned 0x5 [0201.203] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6d7e9a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa5a0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0201.204] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0201.204] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0201.204] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222a30 [0201.204] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0201.204] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2229e8 | out: hHeap=0x1f0000) returned 1 [0201.204] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0201.204] CreateFileW (lpFileName="C:\\\\Boot\\zh-CN\\memtest.exe.mui" (normalized: "c:\\boot\\zh-cn\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0201.204] GetLastError () returned 0x5 [0201.204] GetLastError () returned 0x5 [0201.205] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6d7e9a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa5a0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0201.205] FindClose (in: hFindFile=0x24ea80 | out: hFindFile=0x24ea80) returned 1 [0201.205] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222a30 | out: hHeap=0x1f0000) returned 1 [0201.205] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e360 | out: hHeap=0x1f0000) returned 1 [0201.205] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238258 | out: hHeap=0x1f0000) returned 1 [0201.205] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221d88 | out: hHeap=0x1f0000) returned 1 [0201.205] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221d88 [0201.205] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238258 [0201.205] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d508 [0201.205] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228310 [0201.205] FindFirstFileW (in: lpFileName="C:\\\\Boot\\zh-HK\\*", lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207675, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x518ea25e, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24ea00 [0201.206] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0201.206] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282a0 [0201.206] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0201.206] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228310 | out: hHeap=0x1f0000) returned 1 [0201.206] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0201.206] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207675, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x518ea25e, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0201.206] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0201.206] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228310 [0201.206] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0201.206] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0201.206] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0201.206] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0201.206] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xf958, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0201.206] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0201.207] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0201.207] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2229e8 [0201.207] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0201.207] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228310 | out: hHeap=0x1f0000) returned 1 [0201.207] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0201.207] CreateFileW (lpFileName="C:\\\\Boot\\zh-HK\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-hk\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0201.208] GetLastError () returned 0x5 [0201.208] GetLastError () returned 0x5 [0201.208] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x518ea25e, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0xe31db522, ftLastWriteTime.dwHighDateTime=0x1d112e1, nFileSizeHigh=0x0, nFileSizeLow=0xa558, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0201.208] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0201.208] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0201.208] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222a30 [0201.208] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0201.208] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2229e8 | out: hHeap=0x1f0000) returned 1 [0201.208] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0201.209] CreateFileW (lpFileName="C:\\\\Boot\\zh-HK\\memtest.exe.mui" (normalized: "c:\\boot\\zh-hk\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0201.209] GetLastError () returned 0x5 [0201.209] GetLastError () returned 0x5 [0201.209] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x518ea25e, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0xe31db522, ftLastWriteTime.dwHighDateTime=0x1d112e1, nFileSizeHigh=0x0, nFileSizeLow=0xa558, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0201.209] FindClose (in: hFindFile=0x24ea00 | out: hFindFile=0x24ea00) returned 1 [0201.209] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222a30 | out: hHeap=0x1f0000) returned 1 [0201.210] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d508 | out: hHeap=0x1f0000) returned 1 [0201.210] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238258 | out: hHeap=0x1f0000) returned 1 [0201.210] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221d88 | out: hHeap=0x1f0000) returned 1 [0201.210] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221d88 [0201.211] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0201.211] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22ee88 [0201.211] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282d8 [0201.212] FindFirstFileW (in: lpFileName="C:\\\\Boot\\zh-TW\\*", lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24e800 [0201.212] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0201.212] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228310 [0201.212] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0201.212] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282d8 | out: hHeap=0x1f0000) returned 1 [0201.212] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0201.212] FindNextFileW (in: hFindFile=0x24e800, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0201.212] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0201.213] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282a0 [0201.213] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0201.213] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228310 | out: hHeap=0x1f0000) returned 1 [0201.213] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0201.213] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0201.213] FindNextFileW (in: hFindFile=0x24e800, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xf960, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0201.213] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0201.213] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0201.213] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2229e8 [0201.214] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0201.214] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0201.214] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0201.214] CreateFileW (lpFileName="C:\\\\Boot\\zh-TW\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-tw\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0201.215] GetLastError () returned 0x5 [0201.215] GetLastError () returned 0x5 [0201.216] FindNextFileW (in: hFindFile=0x24e800, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa598, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0201.216] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0201.216] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0201.216] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2225f8 [0201.216] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0201.216] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2229e8 | out: hHeap=0x1f0000) returned 1 [0201.216] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0201.217] CreateFileW (lpFileName="C:\\\\Boot\\zh-TW\\memtest.exe.mui" (normalized: "c:\\boot\\zh-tw\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0201.217] GetLastError () returned 0x5 [0201.217] GetLastError () returned 0x5 [0201.217] FindNextFileW (in: hFindFile=0x24e800, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa598, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0201.217] FindClose (in: hFindFile=0x24e800 | out: hFindFile=0x24e800) returned 1 [0201.218] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2225f8 | out: hHeap=0x1f0000) returned 1 [0201.218] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ee88 | out: hHeap=0x1f0000) returned 1 [0201.218] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0201.218] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221d88 | out: hHeap=0x1f0000) returned 1 [0201.218] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0201.218] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b5c0 | out: hHeap=0x1f0000) returned 1 [0201.218] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b7c8 | out: hHeap=0x1f0000) returned 1 [0201.219] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b458 | out: hHeap=0x1f0000) returned 1 [0201.219] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b4d0 | out: hHeap=0x1f0000) returned 1 [0201.219] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b778 | out: hHeap=0x1f0000) returned 1 [0201.219] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b318 | out: hHeap=0x1f0000) returned 1 [0201.219] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b340 | out: hHeap=0x1f0000) returned 1 [0201.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b5e8 | out: hHeap=0x1f0000) returned 1 [0201.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b9e0 | out: hHeap=0x1f0000) returned 1 [0201.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b8f0 | out: hHeap=0x1f0000) returned 1 [0201.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b620 | out: hHeap=0x1f0000) returned 1 [0201.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20bc38 | out: hHeap=0x1f0000) returned 1 [0201.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20bb98 | out: hHeap=0x1f0000) returned 1 [0201.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20bd00 | out: hHeap=0x1f0000) returned 1 [0201.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0201.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0201.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0201.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238758 | out: hHeap=0x1f0000) returned 1 [0201.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b2f0 | out: hHeap=0x1f0000) returned 1 [0201.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20bd50 | out: hHeap=0x1f0000) returned 1 [0201.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0201.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0201.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0201.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0201.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260720 | out: hHeap=0x1f0000) returned 1 [0201.438] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260658 | out: hHeap=0x1f0000) returned 1 [0201.438] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cfa8 | out: hHeap=0x1f0000) returned 1 [0201.438] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf70 | out: hHeap=0x1f0000) returned 1 [0201.438] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0201.438] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260900 | out: hHeap=0x1f0000) returned 1 [0201.438] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0201.438] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0201.438] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1feed0 | out: hHeap=0x1f0000) returned 1 [0201.439] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fefe8 | out: hHeap=0x1f0000) returned 1 [0201.439] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0201.439] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0201.439] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260838 | out: hHeap=0x1f0000) returned 1 [0201.439] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606f8 | out: hHeap=0x1f0000) returned 1 [0201.439] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607e8 | out: hHeap=0x1f0000) returned 1 [0201.439] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607c0 | out: hHeap=0x1f0000) returned 1 [0201.439] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387b0 | out: hHeap=0x1f0000) returned 1 [0201.439] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22db68 | out: hHeap=0x1f0000) returned 1 [0201.440] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383c0 | out: hHeap=0x1f0000) returned 1 [0201.440] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2161b8 | out: hHeap=0x1f0000) returned 1 [0201.440] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2221c0 [0201.440] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0201.440] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d508 [0201.440] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221d88 [0201.440] FindFirstFileW (in: lpFileName="C:\\\\Documents and Settings\\*", lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="zh-TW", cAlternateFileName="Ə")) returned 0xffffffff [0201.441] GetLastError () returned 0x5 [0201.441] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x22bee5c | out: lpMode=0x22bee5c) returned 0 [0201.441] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="畦正W\\memtest.exe.mui", cchWideChar=2, lpMultiByteStr=0x22bda4c, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ç\x95¦æ­£\\{5CA9971B-2DC3-3BC8-847A-5E6D15CBB16E}regB9D76A8A5CF6B80D0D4917B7B5FE8F0CCLSID\\{C498F2D9-A77C-3D4B-A1A5-12CC7B99115D}\\ProgIdreg4CACF12CF5D12ED9EEAD5514323F5EA3CLSID\\{C498F2D9-A77C-3D4B-A1A5-12CC7B99115D}\\InprocServer32reg2808E83C50F5DE9B61B9879DCB21FC85regDB1DCD3E66F4AF5892BABE16732018F2regED3438BEA4F6DF529DFE2B37ADD0BBD7regD7104E1DA414EFDF1D5D2F976BB6DF1Dreg29079299B65C453D220BED93BFB4DAD9CLSID\\{C498F2D9-A77C-3D4B-A1A5-12CC7B99115D}reg42A99E053028D9453475DCBC7CF42859System.IndexOutOfRangeException\\CLSID{5CA9971B-2DC3-3BC8-847A-5E6D15CBB16E}reg062EB5AB16AD52A8BB8FDEA575031B69System.Runtime.Remoting.Metadata.W3cXsd2001.SoapNmtoken\\CLSID{C498F2D9-A77C-3D4B-A1A5-12CC7B99115D}regE6B4D7703D75D53D90482DA410EF94ACregF3BD9E11E22D41D4727D675A4A0211A3regE0128B2C5FBE62AB771EFE24A01E5616CLSID\\{9A3A64F4-8BA5-3DCF-880C-8D3EE06C5538}\\Implemented Categories\\{62C8FE65-4EBB-45E7-B440-6E39B2CDBF29}reg46C8FC314EBB7C80F406F14D654E3C3ACLSID\\{9A3A64F4-8BA5-3DCF-880C-8D3EE06C5538}\\ProgIdreg76BEE9E205FD26DE8BBA90D4520176A4CLSID\\{9A3A64F4-8BA5-3DCF-880C-8D3EE06C5538}\\InprocServer32reg68C087B8E6E61D87BF738E0172016291reg7B8040ACF7AC2028DC6405C8E841763Dreg1B0065135D14566720819DA793BC2A59CLSID\\{964AA3BD-4B12-3E23-9D7F-99342AFAE812}\\Implemented Categories\\{62C8FE65-4EBB-45E7-B440-6E39B2CDBF29}reg10C64191767BF66BBB02799D4C344C26reg9B41381E2AD4B15E39F322C86DF2034Dreg3EEBB8154F571E89BD001CEA547A6638CLSID\\{9A3A64F4-8BA5-3DCF-880C-8D3EE06C5538}regFD158E9F83ADAC5640388A12EA1EBA4BCLSID\\{964AA3BD-4B12-3E23-9D7F-99342AFAE812}\\ProgIdregF3D260049E3E3875E231A2CAFC6AF273System.Runtime.Remoting.Metadata.W3cXsd2001.SoapEntities\\CLSID{9A3A64F4-8BA5-3DCF-880C-8D3EE06C5538}reg4752B5B069E972914B763693AF5710C5CLSID\\{964AA3BD-4B12-3E23-9D7F-99342AFAE812}\\InprocServer32regC4B16BF700ABE88B4CA8C732ADF28CD7regAE1B5DD4341E434D646BF45114470405CLSID\\{2763BE6B-F8CF-39D9-A2E8-9E9815C0815E}\\Implemented Categories\\{62C8FE65-4EBB-45E7-B440-6E39B2CDBF29}reg6B371B0D631\x1a", lpUsedDefaultChar=0x0) returned 6 [0201.442] WriteFile (in: hFile=0x90, lpBuffer=0x22bda4c, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x22bda44, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x22bda44, lpOverlapped=0x0) returned 0 [0201.442] GetLastError () returned 0x6 [0201.442] GetLastError () returned 0x6 [0201.442] lstrcmpW (lpString1="zh-TW", lpString2=".") returned 1 [0201.442] lstrcmpW (lpString1="zh-TW", lpString2="..") returned 1 [0201.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204cb0 [0201.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239928 [0201.443] FindNextFileW (in: hFindFile=0xffffffff, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="zh-TW", cAlternateFileName="Ə")) returned 0 [0201.443] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0201.443] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221d88 [0201.443] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0201.443] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f1b8 [0201.443] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239458 [0201.443] FindFirstFileW (in: lpFileName="C:\\\\Documents and Settings\\zh-TW\\*", lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x7726964e, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x3c003c, ftLastAccessTime.dwHighDateTime=0x221ef0, ftLastWriteTime.dwLowDateTime=0x20002, ftLastWriteTime.dwHighDateTime=0x221f2c, nFileSizeHigh=0x3a0038, nFileSizeLow=0x221d88, dwReserved0=0x22bf15c, dwReserved1=0x3, cFileName="me", cAlternateFileName="ⷾ眽")) returned 0xffffffff [0201.445] GetLastError () returned 0x3 [0201.445] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x22bea60 | out: lpMode=0x22bea60) returned 0 [0201.445] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="畦正ces\\en-US\\bootres.dll.mui", cchWideChar=2, lpMultiByteStr=0x22bd650, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ç\x95¦æ­£3655572744E6D32E45CE55B1CLSID\\{14BE6B21-C682-3A3A-8B24-FEE75B4FF8C5}\\Implemented Categories\\{62C8FE65-4EBB-45E7-B440-6E39B2CDBF29}reg021DF86D24D0543366DA61AD28D9DF90reg134145E37187606A88A9DE031E89358FCLSID\\{14BE6B21-C682-3A3A-8B24-FEE75B4FF8C5}\\ProgIdregD8C4D39DBF0BFCDB691266E7BFD6E179CLSID\\{14BE6B21-C682-3A3A-8B24-FEE75B4FF8C5}\\InprocServer32reg823F58272C9C4319A573673613B7F1CFreg98F5A457DDEF0DF6467D56263EB2928DregD202D9ED8F13B0B0AA0A2DF6815AC4F9reg773F7463789E067018CDFF5D15A4AFE3regFD0E649337BFE35910205C149E79F8DBreg2AF7E805D7E0D6750289D0372E26A19AregD94F08DC252F3838CA6A046BC333BE91CLSID\\{14BE6B21-C682-3A3A-8B24-FEE75B4FF8C5}reg0B9F3B73F1EB9F5CA8DC06A4715F5BE8reg4D6998F5C3160A175B3A9D49F04A786ESystem.Runtime.Remoting.Metadata.W3cXsd2001.SoapNmtokens\\CLSID{14BE6B21-C682-3A3A-8B24-FEE75B4FF8C5}regDD973DD5BCD4C9F9655A2F468FD3700O¹ø\x19\x90", lpUsedDefaultChar=0x0) returned 6 [0201.445] WriteFile (in: hFile=0x90, lpBuffer=0x22bd650, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x22bd648, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x22bd648, lpOverlapped=0x0) returned 0 [0201.445] GetLastError () returned 0x6 [0201.446] GetLastError () returned 0x6 [0201.500] CreateFileW (lpFileName="C:\\\\Documents and Settings\\zh-TW\\me" (normalized: "c:\\documents and settings\\zh-tw\\me"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0201.501] GetLastError () returned 0x3 [0201.501] GetLastError () returned 0x3 [0201.501] FindNextFileW (in: hFindFile=0xffffffff, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x7726964e, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x3c003c, ftLastAccessTime.dwHighDateTime=0x221ef0, ftLastWriteTime.dwLowDateTime=0x20002, ftLastWriteTime.dwHighDateTime=0x221f2c, nFileSizeHigh=0x3a0038, nFileSizeLow=0x221d88, dwReserved0=0x22bf15c, dwReserved1=0x3, cFileName="me", cAlternateFileName="ⷾ眽")) returned 0 [0201.501] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0201.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239770 | out: hHeap=0x1f0000) returned 1 [0201.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f1b8 | out: hHeap=0x1f0000) returned 1 [0201.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0201.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221d88 | out: hHeap=0x1f0000) returned 1 [0201.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215040 | out: hHeap=0x1f0000) returned 1 [0201.502] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239928 | out: hHeap=0x1f0000) returned 1 [0201.502] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cb0 | out: hHeap=0x1f0000) returned 1 [0201.502] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d508 | out: hHeap=0x1f0000) returned 1 [0201.502] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0201.502] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2221c0 | out: hHeap=0x1f0000) returned 1 [0201.502] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221d88 [0201.502] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0201.502] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f020 [0201.502] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0201.503] FindFirstFileW (in: lpFileName="C:\\\\ESD\\*", lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc1969407, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName=".", cAlternateFileName="")) returned 0x24e840 [0201.503] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0201.503] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0201.503] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0201.503] FindNextFileW (in: hFindFile=0x24e840, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc1969407, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="..", cAlternateFileName="")) returned 1 [0201.503] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0201.504] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0201.504] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0201.504] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0201.504] FindNextFileW (in: hFindFile=0x24e840, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc1969407, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="..", cAlternateFileName="")) returned 0 [0201.504] FindClose (in: hFindFile=0x24e840 | out: hFindFile=0x24e840) returned 1 [0201.504] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0201.504] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f020 | out: hHeap=0x1f0000) returned 1 [0201.505] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0201.505] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221d88 | out: hHeap=0x1f0000) returned 1 [0201.505] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221d88 [0201.505] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0201.505] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e030 [0201.505] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0201.505] FindFirstFileW (in: lpFileName="C:\\\\Logs\\*", lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf1d773, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xa03727f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xfd9ec80, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName=".", cAlternateFileName="")) returned 0x24eb00 [0201.506] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0201.506] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0201.506] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0201.506] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf1d773, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xa03727f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xfd9ec80, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="..", cAlternateFileName="")) returned 1 [0201.507] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0201.507] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0201.507] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0201.507] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0201.507] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5052fa31, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5052fa31, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Application.evtx", cAlternateFileName="APPLIC~1.EVT")) returned 1 [0201.507] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228230 [0201.507] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0201.507] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221ef0 [0201.507] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0201.508] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0201.508] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228230 | out: hHeap=0x1f0000) returned 1 [0201.508] CreateFileW (lpFileName="C:\\\\Logs\\Application.evtx" (normalized: "c:\\logs\\application.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0201.508] GetFileType (hFile=0x210) returned 0x1 [0201.509] CloseHandle (hObject=0x210) returned 1 [0201.509] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2221c0 [0201.509] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Application.evtx" (normalized: "c:\\logs\\application.evtx"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5052fa31, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5052fa31, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0201.510] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2221c0 | out: hHeap=0x1f0000) returned 1 [0201.510] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2221c0 [0201.510] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2221c0 | out: hHeap=0x1f0000) returned 1 [0201.510] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505ee5f0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505ee5f0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="HardwareEvents.evtx", cAlternateFileName="HARDWA~1.EVT")) returned 1 [0201.510] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0201.510] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0201.510] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2221c0 [0201.510] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0201.510] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221ef0 | out: hHeap=0x1f0000) returned 1 [0201.510] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0201.511] CreateFileW (lpFileName="C:\\\\Logs\\HardwareEvents.evtx" (normalized: "c:\\logs\\hardwareevents.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0201.511] GetFileType (hFile=0x210) returned 0x1 [0201.512] CloseHandle (hObject=0x210) returned 1 [0201.512] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221ef0 [0201.512] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\HardwareEvents.evtx" (normalized: "c:\\logs\\hardwareevents.evtx"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505ee5f0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505ee5f0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0201.512] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221ef0 | out: hHeap=0x1f0000) returned 1 [0201.512] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221ef0 [0201.512] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221ef0 | out: hHeap=0x1f0000) returned 1 [0201.513] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505a2134, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505a2134, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Internet Explorer.evtx", cAlternateFileName="INTERN~1.EVT")) returned 1 [0201.513] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228150 [0201.513] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0201.513] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221ef0 [0201.513] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0201.513] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2221c0 | out: hHeap=0x1f0000) returned 1 [0201.513] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228150 | out: hHeap=0x1f0000) returned 1 [0201.514] CreateFileW (lpFileName="C:\\\\Logs\\Internet Explorer.evtx" (normalized: "c:\\logs\\internet explorer.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0201.514] GetFileType (hFile=0x210) returned 0x1 [0201.515] CloseHandle (hObject=0x210) returned 1 [0201.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2221c0 [0201.515] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Internet Explorer.evtx" (normalized: "c:\\logs\\internet explorer.evtx"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505a2134, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505a2134, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0201.515] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2221c0 | out: hHeap=0x1f0000) returned 1 [0201.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2221c0 [0201.516] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2221c0 | out: hHeap=0x1f0000) returned 1 [0201.516] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5057bed8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5057bed8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Key Management Service.evtx", cAlternateFileName="KEYMAN~1.EVT")) returned 1 [0201.516] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2221c0 [0201.516] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0201.516] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2394b0 [0201.516] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0201.516] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221ef0 | out: hHeap=0x1f0000) returned 1 [0201.516] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2221c0 | out: hHeap=0x1f0000) returned 1 [0201.517] CreateFileW (lpFileName="C:\\\\Logs\\Key Management Service.evtx" (normalized: "c:\\logs\\key management service.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0201.517] GetFileType (hFile=0x210) returned 0x1 [0201.518] CloseHandle (hObject=0x210) returned 1 [0201.518] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239458 [0201.518] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Key Management Service.evtx" (normalized: "c:\\logs\\key management service.evtx"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5057bed8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5057bed8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0201.518] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239458 | out: hHeap=0x1f0000) returned 1 [0201.518] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239a30 [0201.519] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239a30 | out: hHeap=0x1f0000) returned 1 [0201.519] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc1dbd7c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc1dbd7c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Microsoft-Client-Licensing-Platform%4Admin.evtx", cAlternateFileName="MICROS~1.EVT")) returned 1 [0201.519] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a28 [0201.519] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0201.519] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a2d0 [0201.519] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0201.519] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2394b0 | out: hHeap=0x1f0000) returned 1 [0201.519] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a28 | out: hHeap=0x1f0000) returned 1 [0201.520] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx" (normalized: "c:\\logs\\microsoft-client-licensing-platform%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0201.520] GetFileType (hFile=0x210) returned 0x1 [0201.521] CloseHandle (hObject=0x210) returned 1 [0201.521] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a3e0 [0201.521] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx" (normalized: "c:\\logs\\microsoft-client-licensing-platform%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc1dbd7c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc1dbd7c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0201.521] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a3e0 | out: hHeap=0x1f0000) returned 1 [0201.522] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a3e0 [0201.522] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a3e0 | out: hHeap=0x1f0000) returned 1 [0201.522] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca5d836e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca5d836e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx", cAlternateFileName="MICROS~2.EVT")) returned 1 [0201.522] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a770 [0201.522] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0201.522] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261440 [0201.522] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0201.522] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a2d0 | out: hHeap=0x1f0000) returned 1 [0201.522] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a770 | out: hHeap=0x1f0000) returned 1 [0201.523] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx" (normalized: "c:\\logs\\microsoft-windows-application-experience%4program-compatibility-assistant.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0201.523] GetFileType (hFile=0x210) returned 0x1 [0201.524] CloseHandle (hObject=0x210) returned 1 [0201.524] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2612d0 [0201.524] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx" (normalized: "c:\\logs\\microsoft-windows-application-experience%4program-compatibility-assistant.evtx"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca5d836e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca5d836e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0201.525] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2612d0 | out: hHeap=0x1f0000) returned 1 [0201.525] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x260ff0 [0201.525] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ff0 | out: hHeap=0x1f0000) returned 1 [0201.525] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9206ac5, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9206ac5, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xf9c0f529, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx", cAlternateFileName="MICROS~3.EVT")) returned 1 [0201.525] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0201.525] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0201.525] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2614f8 [0201.525] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0201.525] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261440 | out: hHeap=0x1f0000) returned 1 [0201.525] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0201.526] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-applicationresourcemanagementsystem%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0201.526] GetFileType (hFile=0x210) returned 0x1 [0201.527] CloseHandle (hObject=0x210) returned 1 [0201.527] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2612d0 [0201.527] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-applicationresourcemanagementsystem%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9206ac5, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9206ac5, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xf9c0f529, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000)) returned 1 [0201.527] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2612d0 | out: hHeap=0x1f0000) returned 1 [0201.527] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2615b0 [0201.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2615b0 | out: hHeap=0x1f0000) returned 1 [0201.528] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4143825, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4143825, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Microsoft-Windows-AppLocker%4EXE and DLL.evtx", cAlternateFileName="MICROS~4.EVT")) returned 1 [0201.528] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214f70 [0201.528] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0201.528] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22aec8 [0201.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0201.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2614f8 | out: hHeap=0x1f0000) returned 1 [0201.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f70 | out: hHeap=0x1f0000) returned 1 [0201.528] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-AppLocker%4EXE and DLL.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4exe and dll.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0201.529] GetFileType (hFile=0x210) returned 0x1 [0201.529] CloseHandle (hObject=0x210) returned 1 [0201.529] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ad60 [0201.530] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppLocker%4EXE and DLL.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4exe and dll.evtx"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4143825, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4143825, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0201.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ad60 | out: hHeap=0x1f0000) returned 1 [0201.530] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ad60 [0201.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ad60 | out: hHeap=0x1f0000) returned 1 [0201.530] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4169a7a, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4169a7a, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Microsoft-Windows-AppLocker%4MSI and Script.evtx", cAlternateFileName="MI2EEA~1.EVT")) returned 1 [0201.530] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22aa90 [0201.530] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0201.530] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229cf8 [0201.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0201.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aec8 | out: hHeap=0x1f0000) returned 1 [0201.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aa90 | out: hHeap=0x1f0000) returned 1 [0201.531] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-AppLocker%4MSI and Script.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4msi and script.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0201.531] GetFileType (hFile=0x210) returned 0x1 [0201.531] CloseHandle (hObject=0x210) returned 1 [0201.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229e90 [0201.531] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppLocker%4MSI and Script.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4msi and script.evtx"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4169a7a, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4169a7a, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0201.532] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229e90 | out: hHeap=0x1f0000) returned 1 [0201.532] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a3e0 [0201.532] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a3e0 | out: hHeap=0x1f0000) returned 1 [0201.532] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd418fcc3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd418fcc3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx", cAlternateFileName="MI07E1~1.EVT")) returned 1 [0201.532] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229d80 [0201.532] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0201.532] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0201.532] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0201.532] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229cf8 | out: hHeap=0x1f0000) returned 1 [0201.532] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229d80 | out: hHeap=0x1f0000) returned 1 [0201.533] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-deployment.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0201.533] GetFileType (hFile=0x210) returned 0x1 [0201.533] CloseHandle (hObject=0x210) returned 1 [0201.534] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0201.534] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-deployment.evtx"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd418fcc3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd418fcc3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0201.534] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0201.534] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0201.534] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0201.534] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd418fcc3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd418fcc3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx", cAlternateFileName="MI8196~1.EVT")) returned 1 [0201.534] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229ad8 [0201.534] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0201.534] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0201.534] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0201.534] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0201.535] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229ad8 | out: hHeap=0x1f0000) returned 1 [0201.535] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-execution.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0201.535] GetFileType (hFile=0x210) returned 0x1 [0201.535] CloseHandle (hObject=0x210) returned 1 [0201.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0201.536] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-execution.evtx"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd418fcc3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd418fcc3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0201.536] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0201.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0201.536] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0201.536] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd41b5f2d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd41b5f2d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Microsoft-Windows-AppModel-Runtime%4Admin.evtx", cAlternateFileName="MIE36C~1.EVT")) returned 1 [0201.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214b60 [0201.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0201.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ad60 [0201.536] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0201.536] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0201.536] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214b60 | out: hHeap=0x1f0000) returned 1 [0201.537] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-AppModel-Runtime%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-appmodel-runtime%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0201.537] GetFileType (hFile=0x210) returned 0x1 [0201.537] CloseHandle (hObject=0x210) returned 1 [0201.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a9a0 [0201.538] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppModel-Runtime%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-appmodel-runtime%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd41b5f2d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd41b5f2d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0201.538] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a9a0 | out: hHeap=0x1f0000) returned 1 [0201.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a838 [0201.538] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a838 | out: hHeap=0x1f0000) returned 1 [0201.538] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd389efbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd389efbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Microsoft-Windows-AppReadiness%4Admin.evtx", cAlternateFileName="MIC5CB~1.EVT")) returned 1 [0201.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214f70 [0201.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0201.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ace8 [0201.538] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0201.538] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ad60 | out: hHeap=0x1f0000) returned 1 [0201.538] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f70 | out: hHeap=0x1f0000) returned 1 [0201.539] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-AppReadiness%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0201.539] GetFileType (hFile=0x210) returned 0x1 [0201.539] CloseHandle (hObject=0x210) returned 1 [0201.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ad60 [0201.539] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppReadiness%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd389efbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd389efbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0201.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ad60 | out: hHeap=0x1f0000) returned 1 [0201.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ad60 [0201.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ad60 | out: hHeap=0x1f0000) returned 1 [0201.540] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd38c5212, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd38c5212, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x111000, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Microsoft-Windows-AppReadiness%4Operational.evtx", cAlternateFileName="MIF8AA~1.EVT")) returned 1 [0201.540] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a8b0 [0201.540] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0201.540] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229e08 [0201.540] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0201.540] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ace8 | out: hHeap=0x1f0000) returned 1 [0201.540] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a8b0 | out: hHeap=0x1f0000) returned 1 [0201.540] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-AppReadiness%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0201.601] GetFileType (hFile=0x210) returned 0x1 [0201.637] CloseHandle (hObject=0x210) returned 1 [0201.637] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229be8 [0201.637] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppReadiness%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd38c5212, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd38c5212, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x111000)) returned 1 [0201.637] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229be8 | out: hHeap=0x1f0000) returned 1 [0201.637] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229a50 [0201.637] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229a50 | out: hHeap=0x1f0000) returned 1 [0201.637] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4143825, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4143825, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Microsoft-Windows-AppXDeployment%4Operational.evtx", cAlternateFileName="MI34FE~1.EVT")) returned 1 [0201.637] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22add8 [0201.637] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0201.637] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a138 [0201.637] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0201.637] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229e08 | out: hHeap=0x1f0000) returned 1 [0201.637] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22add8 | out: hHeap=0x1f0000) returned 1 [0201.638] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-AppXDeployment%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeployment%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0201.638] GetFileType (hFile=0x210) returned 0x1 [0201.638] CloseHandle (hObject=0x210) returned 1 [0201.638] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a028 [0201.638] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppXDeployment%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeployment%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4143825, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4143825, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0201.638] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a028 | out: hHeap=0x1f0000) returned 1 [0201.639] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a248 [0201.639] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a248 | out: hHeap=0x1f0000) returned 1 [0201.639] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5af3554f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5af3554f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x211000, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Microsoft-Windows-AppXDeploymentServer%4Operational.evtx", cAlternateFileName="MIA24C~1.EVT")) returned 1 [0201.639] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a028 [0201.639] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0201.640] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0201.640] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0201.640] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a138 | out: hHeap=0x1f0000) returned 1 [0201.640] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a028 | out: hHeap=0x1f0000) returned 1 [0201.640] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0201.640] GetFileType (hFile=0x210) returned 0x1 [0201.640] CloseHandle (hObject=0x210) returned 1 [0201.641] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0201.641] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5af3554f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5af3554f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x211000)) returned 1 [0201.641] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0201.641] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0201.641] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0201.641] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5af3554f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5af3554f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx", cAlternateFileName="MIDBEC~1.EVT")) returned 1 [0201.641] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22abf8 [0201.641] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0201.641] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0201.641] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0201.641] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0201.641] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22abf8 | out: hHeap=0x1f0000) returned 1 [0201.642] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4restricted.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0201.642] GetFileType (hFile=0x210) returned 0x1 [0201.642] CloseHandle (hObject=0x210) returned 1 [0201.642] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0201.642] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4restricted.evtx"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5af3554f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5af3554f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0201.642] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0201.643] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0201.643] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0201.643] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85798667, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x85798667, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Microsoft-Windows-AppxPackaging%4Operational.evtx", cAlternateFileName="MI54F1~1.EVT")) returned 1 [0201.643] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a838 [0201.643] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0201.643] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229be8 [0201.643] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0201.643] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0201.643] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a838 | out: hHeap=0x1f0000) returned 1 [0201.643] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-AppxPackaging%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxpackaging%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0201.644] GetFileType (hFile=0x210) returned 0x1 [0201.644] CloseHandle (hObject=0x210) returned 1 [0201.644] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a688 [0201.644] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppxPackaging%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxpackaging%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85798667, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x85798667, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0201.644] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a688 | out: hHeap=0x1f0000) returned 1 [0201.644] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229e90 [0201.645] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229e90 | out: hHeap=0x1f0000) returned 1 [0201.645] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd74d25ab, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd74d25ab, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx", cAlternateFileName="MI111F~1.EVT")) returned 1 [0201.645] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0201.645] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0201.645] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a0e0 [0201.645] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0201.645] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229be8 | out: hHeap=0x1f0000) returned 1 [0201.645] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0201.645] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-backgroundtaskinfrastructure%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0201.646] GetFileType (hFile=0x210) returned 0x1 [0201.646] CloseHandle (hObject=0x210) returned 1 [0201.646] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a578 [0201.646] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-backgroundtaskinfrastructure%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd74d25ab, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd74d25ab, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0201.646] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a578 | out: hHeap=0x1f0000) returned 1 [0201.646] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a038 [0201.646] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a038 | out: hHeap=0x1f0000) returned 1 [0201.646] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1f96ca4, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xe1f96ca4, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Microsoft-Windows-Bits-Client%4Operational.evtx", cAlternateFileName="MI9465~1.EVT")) returned 1 [0201.647] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2149c0 [0201.647] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0201.647] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a028 [0201.647] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0201.647] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a0e0 | out: hHeap=0x1f0000) returned 1 [0201.647] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2149c0 | out: hHeap=0x1f0000) returned 1 [0201.647] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Bits-Client%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-bits-client%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0201.647] GetFileType (hFile=0x210) returned 0x1 [0201.648] CloseHandle (hObject=0x210) returned 1 [0201.648] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229e90 [0201.648] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Bits-Client%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-bits-client%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1f96ca4, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xe1f96ca4, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0201.648] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229e90 | out: hHeap=0x1f0000) returned 1 [0201.648] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a248 [0201.648] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a248 | out: hHeap=0x1f0000) returned 1 [0201.648] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8783aa15, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8783aa15, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Microsoft-Windows-CodeIntegrity%4Operational.evtx", cAlternateFileName="MI03A7~1.EVT")) returned 1 [0201.649] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ab08 [0201.649] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0201.649] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229940 [0201.649] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0201.649] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a028 | out: hHeap=0x1f0000) returned 1 [0201.649] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab08 | out: hHeap=0x1f0000) returned 1 [0201.649] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-CodeIntegrity%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-codeintegrity%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0201.649] GetFileType (hFile=0x210) returned 0x1 [0201.650] CloseHandle (hObject=0x210) returned 1 [0201.650] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a028 [0201.650] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-CodeIntegrity%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-codeintegrity%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8783aa15, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8783aa15, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0201.650] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a028 | out: hHeap=0x1f0000) returned 1 [0201.650] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a4f0 [0201.650] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a4f0 | out: hHeap=0x1f0000) returned 1 [0201.650] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c3c71c5, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8c3c71c5, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx", cAlternateFileName="MI5CA2~1.EVT")) returned 1 [0201.650] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229d80 [0201.650] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0201.650] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a770 [0201.650] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0201.650] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229940 | out: hHeap=0x1f0000) returned 1 [0201.650] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229d80 | out: hHeap=0x1f0000) returned 1 [0201.651] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-coresystem-smsrouter-events%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0201.651] GetFileType (hFile=0x210) returned 0x1 [0201.651] CloseHandle (hObject=0x210) returned 1 [0201.651] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21ab60 [0201.651] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-coresystem-smsrouter-events%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c3c71c5, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8c3c71c5, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0201.651] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ab60 | out: hHeap=0x1f0000) returned 1 [0201.651] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219cf0 [0201.651] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219cf0 | out: hHeap=0x1f0000) returned 1 [0201.651] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc9231, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cc9231, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx", cAlternateFileName="MI5FD1~1.EVT")) returned 1 [0201.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22add8 [0201.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0201.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a248 [0201.652] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0201.652] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a770 | out: hHeap=0x1f0000) returned 1 [0201.652] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22add8 | out: hHeap=0x1f0000) returned 1 [0201.652] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4backupkeysvc.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0201.652] GetFileType (hFile=0x210) returned 0x1 [0201.653] CloseHandle (hObject=0x210) returned 1 [0201.653] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229a50 [0201.653] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4backupkeysvc.evtx"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc9231, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cc9231, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0201.653] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229a50 | out: hHeap=0x1f0000) returned 1 [0201.653] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a3e0 [0201.653] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a3e0 | out: hHeap=0x1f0000) returned 1 [0201.653] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ca2fbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ca2fbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Microsoft-Windows-Crypto-DPAPI%4Operational.evtx", cAlternateFileName="MI8BDF~1.EVT")) returned 1 [0201.653] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ab80 [0201.654] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0201.654] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a138 [0201.654] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0201.654] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a248 | out: hHeap=0x1f0000) returned 1 [0201.654] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab80 | out: hHeap=0x1f0000) returned 1 [0201.655] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0201.655] GetFileType (hFile=0x210) returned 0x1 [0201.655] CloseHandle (hObject=0x210) returned 1 [0201.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229fa0 [0201.655] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ca2fbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ca2fbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0201.655] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229fa0 | out: hHeap=0x1f0000) returned 1 [0201.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229fa0 [0201.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229fa0 | out: hHeap=0x1f0000) returned 1 [0201.656] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c3ed420, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8c3ed420, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx", cAlternateFileName="MIAEBD~1.EVT")) returned 1 [0201.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a380 [0201.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0201.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261388 [0201.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0201.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a138 | out: hHeap=0x1f0000) returned 1 [0201.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a380 | out: hHeap=0x1f0000) returned 1 [0201.656] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-devicemanagement-enterprise-diagnostics-provider%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0201.657] GetFileType (hFile=0x210) returned 0x1 [0201.657] CloseHandle (hObject=0x210) returned 1 [0201.657] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261440 [0201.657] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-devicemanagement-enterprise-diagnostics-provider%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c3ed420, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8c3ed420, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x101000)) returned 1 [0201.657] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261440 | out: hHeap=0x1f0000) returned 1 [0201.657] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261440 [0201.658] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261440 | out: hHeap=0x1f0000) returned 1 [0201.658] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cef47f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cef47f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Microsoft-Windows-DeviceSetupManager%4Admin.evtx", cAlternateFileName="MIA726~1.EVT")) returned 1 [0201.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ab80 [0201.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0201.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229cf8 [0201.658] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0201.658] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261388 | out: hHeap=0x1f0000) returned 1 [0201.658] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab80 | out: hHeap=0x1f0000) returned 1 [0201.659] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-DeviceSetupManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0201.659] GetFileType (hFile=0x210) returned 0x1 [0201.659] CloseHandle (hObject=0x210) returned 1 [0201.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a578 [0201.659] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-DeviceSetupManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cef47f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cef47f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0201.660] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a578 | out: hHeap=0x1f0000) returned 1 [0201.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229b60 [0201.660] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229b60 | out: hHeap=0x1f0000) returned 1 [0201.660] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc9231, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cc9231, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Microsoft-Windows-DeviceSetupManager%4Operational.evtx", cAlternateFileName="MI08CB~1.EVT")) returned 1 [0201.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22aa90 [0201.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0201.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229e90 [0201.660] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0201.660] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229cf8 | out: hHeap=0x1f0000) returned 1 [0201.660] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aa90 | out: hHeap=0x1f0000) returned 1 [0201.661] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-DeviceSetupManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0201.661] GetFileType (hFile=0x210) returned 0x1 [0201.661] CloseHandle (hObject=0x210) returned 1 [0201.661] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a3e0 [0201.661] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-DeviceSetupManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc9231, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cc9231, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0201.662] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a3e0 | out: hHeap=0x1f0000) returned 1 [0201.662] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229fa0 [0201.662] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229fa0 | out: hHeap=0x1f0000) returned 1 [0201.662] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc967f17e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc967f17e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Microsoft-Windows-Dhcp-Client%4Admin.evtx", cAlternateFileName="MI8270~1.EVT")) returned 1 [0201.662] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214958 [0201.662] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0201.662] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a838 [0201.662] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0201.662] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229e90 | out: hHeap=0x1f0000) returned 1 [0201.662] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214958 | out: hHeap=0x1f0000) returned 1 [0201.663] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Dhcp-Client%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-dhcp-client%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0201.663] GetFileType (hFile=0x210) returned 0x1 [0201.663] CloseHandle (hObject=0x210) returned 1 [0201.663] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22add8 [0201.663] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Dhcp-Client%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-dhcp-client%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc967f17e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc967f17e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0201.663] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22add8 | out: hHeap=0x1f0000) returned 1 [0201.663] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22aa18 [0201.663] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aa18 | out: hHeap=0x1f0000) returned 1 [0201.664] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc96cb64b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc96cb64b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Microsoft-Windows-Dhcpv6-Client%4Admin.evtx", cAlternateFileName="MIEBFF~1.EVT")) returned 1 [0201.664] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c98 [0201.664] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0201.664] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a928 [0201.664] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0201.664] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a838 | out: hHeap=0x1f0000) returned 1 [0201.664] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c98 | out: hHeap=0x1f0000) returned 1 [0201.664] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-dhcpv6-client%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0201.664] GetFileType (hFile=0x210) returned 0x1 [0201.665] CloseHandle (hObject=0x210) returned 1 [0201.665] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ab08 [0201.665] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-dhcpv6-client%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc96cb64b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc96cb64b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0201.665] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab08 | out: hHeap=0x1f0000) returned 1 [0201.665] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ab08 [0201.665] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab08 | out: hHeap=0x1f0000) returned 1 [0201.665] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca64aa7b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca64aa7b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Microsoft-Windows-Diagnosis-DPS%4Operational.evtx", cAlternateFileName="MI9F85~1.EVT")) returned 1 [0201.665] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a838 [0201.665] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0201.665] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a2d0 [0201.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0201.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a928 | out: hHeap=0x1f0000) returned 1 [0201.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a838 | out: hHeap=0x1f0000) returned 1 [0201.666] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-diagnosis-dps%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0201.669] GetFileType (hFile=0x210) returned 0x1 [0201.669] CloseHandle (hObject=0x210) returned 1 [0201.669] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a3e0 [0201.669] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-diagnosis-dps%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca64aa7b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca64aa7b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0201.669] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a3e0 | out: hHeap=0x1f0000) returned 1 [0201.669] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229cf8 [0201.670] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229cf8 | out: hHeap=0x1f0000) returned 1 [0201.670] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd9ec80, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xfd9ec80, ftLastAccessTime.dwHighDateTime=0x1d1a04f, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Microsoft-Windows-Diagnostics-Performance%4Operational.evtx", cAlternateFileName="MIBE3D~1.EVT")) returned 1 [0201.670] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a4f0 [0201.670] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0201.670] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0201.670] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0201.670] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a2d0 | out: hHeap=0x1f0000) returned 1 [0201.670] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a4f0 | out: hHeap=0x1f0000) returned 1 [0201.671] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-diagnostics-performance%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0201.671] GetFileType (hFile=0x210) returned 0x1 [0201.672] CloseHandle (hObject=0x210) returned 1 [0201.672] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0201.672] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-diagnostics-performance%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd9ec80, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xfd9ec80, ftLastAccessTime.dwHighDateTime=0x1d1a04f, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0201.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0201.672] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0201.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0201.672] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9658ef3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9658ef3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Microsoft-Windows-GroupPolicy%4Operational.evtx", cAlternateFileName="MIE38D~1.EVT")) returned 1 [0201.672] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2149c0 [0201.672] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0201.673] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229940 [0201.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0201.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0201.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2149c0 | out: hHeap=0x1f0000) returned 1 [0201.673] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-GroupPolicy%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-grouppolicy%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0201.674] GetFileType (hFile=0x210) returned 0x1 [0201.674] CloseHandle (hObject=0x210) returned 1 [0201.674] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a468 [0201.674] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-GroupPolicy%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-grouppolicy%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9658ef3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9658ef3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0201.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a468 | out: hHeap=0x1f0000) returned 1 [0201.675] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a600 [0201.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a600 | out: hHeap=0x1f0000) returned 1 [0201.675] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9dcc480, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9dcc480, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Microsoft-Windows-HotspotAuth%4Operational.evtx", cAlternateFileName="MIE386~1.EVT")) returned 1 [0201.675] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x215040 [0201.675] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0201.675] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2299c8 [0201.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0201.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229940 | out: hHeap=0x1f0000) returned 1 [0201.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215040 | out: hHeap=0x1f0000) returned 1 [0201.676] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-HotspotAuth%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-hotspotauth%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0202.039] GetFileType (hFile=0x210) returned 0x1 [0202.039] CloseHandle (hObject=0x210) returned 1 [0202.039] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229f18 [0202.040] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-HotspotAuth%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-hotspotauth%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9dcc480, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9dcc480, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229f18 | out: hHeap=0x1f0000) returned 1 [0202.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a138 [0202.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a138 | out: hHeap=0x1f0000) returned 1 [0202.040] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50b4bacf, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50b4bacf, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx", cAlternateFileName="MI6B25~1.EVT")) returned 1 [0202.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a8b0 [0202.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385a0 [0202.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a248 [0202.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385a0 | out: hHeap=0x1f0000) returned 1 [0202.041] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2299c8 | out: hHeap=0x1f0000) returned 1 [0202.041] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a8b0 | out: hHeap=0x1f0000) returned 1 [0202.041] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-hyper-v-guest-drivers%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0202.041] GetFileType (hFile=0x210) returned 0x1 [0202.042] CloseHandle (hObject=0x210) returned 1 [0202.042] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229830 [0202.042] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-hyper-v-guest-drivers%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50b4bacf, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50b4bacf, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.042] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229830 | out: hHeap=0x1f0000) returned 1 [0202.043] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a2d0 [0202.043] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a2d0 | out: hHeap=0x1f0000) returned 1 [0202.043] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb66288f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb66288f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Microsoft-Windows-International%4Operational.evtx", cAlternateFileName="MI854A~1.EVT")) returned 1 [0202.043] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ad60 [0202.043] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238618 [0202.043] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a3e0 [0202.043] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238618 | out: hHeap=0x1f0000) returned 1 [0202.043] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a248 | out: hHeap=0x1f0000) returned 1 [0202.043] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ad60 | out: hHeap=0x1f0000) returned 1 [0202.044] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-International%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-international%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0202.044] GetFileType (hFile=0x210) returned 0x1 [0202.045] CloseHandle (hObject=0x210) returned 1 [0202.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a248 [0202.045] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-International%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-international%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb66288f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb66288f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.046] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a248 | out: hHeap=0x1f0000) returned 1 [0202.046] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a4f0 [0202.046] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a4f0 | out: hHeap=0x1f0000) returned 1 [0202.046] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x506ad1ac, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x506ad1ac, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Microsoft-Windows-Kernel-Boot%4Operational.evtx", cAlternateFileName="MI32CE~1.EVT")) returned 1 [0202.046] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214ea0 [0202.046] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238708 [0202.046] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229cf8 [0202.046] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238708 | out: hHeap=0x1f0000) returned 1 [0202.046] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a3e0 | out: hHeap=0x1f0000) returned 1 [0202.046] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214ea0 | out: hHeap=0x1f0000) returned 1 [0202.047] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-Boot%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-boot%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0202.047] GetFileType (hFile=0x210) returned 0x1 [0202.047] CloseHandle (hObject=0x210) returned 1 [0202.047] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2299c8 [0202.047] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-Boot%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-boot%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x506ad1ac, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x506ad1ac, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.048] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2299c8 | out: hHeap=0x1f0000) returned 1 [0202.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a688 [0202.048] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a688 | out: hHeap=0x1f0000) returned 1 [0202.048] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ca2fbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ca2fbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Microsoft-Windows-Kernel-EventTracing%4Admin.evtx", cAlternateFileName="MIA934~1.EVT")) returned 1 [0202.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a8b0 [0202.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385f0 [0202.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2299c8 [0202.048] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385f0 | out: hHeap=0x1f0000) returned 1 [0202.048] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229cf8 | out: hHeap=0x1f0000) returned 1 [0202.048] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a8b0 | out: hHeap=0x1f0000) returned 1 [0202.049] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-eventtracing%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0202.049] GetFileType (hFile=0x210) returned 0x1 [0202.050] CloseHandle (hObject=0x210) returned 1 [0202.050] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a248 [0202.050] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-eventtracing%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ca2fbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ca2fbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.052] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a248 | out: hHeap=0x1f0000) returned 1 [0202.052] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a578 [0202.052] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a578 | out: hHeap=0x1f0000) returned 1 [0202.052] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5071f8b0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5071f8b0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Microsoft-Windows-Kernel-PnP%4Configuration.evtx", cAlternateFileName="MIB32D~1.EVT")) returned 1 [0202.052] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ae50 [0202.052] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384d8 [0202.052] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a468 [0202.052] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384d8 | out: hHeap=0x1f0000) returned 1 [0202.052] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2299c8 | out: hHeap=0x1f0000) returned 1 [0202.052] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ae50 | out: hHeap=0x1f0000) returned 1 [0202.053] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-PnP%4Configuration.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-pnp%4configuration.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0202.053] GetFileType (hFile=0x210) returned 0x1 [0202.053] CloseHandle (hObject=0x210) returned 1 [0202.054] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a248 [0202.054] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-PnP%4Configuration.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-pnp%4configuration.evtx"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5071f8b0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5071f8b0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000)) returned 1 [0202.054] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a248 | out: hHeap=0x1f0000) returned 1 [0202.054] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229c70 [0202.054] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229c70 | out: hHeap=0x1f0000) returned 1 [0202.054] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8ebf6d7, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc8ebf6d7, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx", cAlternateFileName="MICA77~1.EVT")) returned 1 [0202.054] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229cf8 [0202.054] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385a0 [0202.055] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0202.055] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385a0 | out: hHeap=0x1f0000) returned 1 [0202.055] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a468 | out: hHeap=0x1f0000) returned 1 [0202.055] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229cf8 | out: hHeap=0x1f0000) returned 1 [0202.056] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-power%4thermal-operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0202.056] GetFileType (hFile=0x210) returned 0x1 [0202.056] CloseHandle (hObject=0x210) returned 1 [0202.057] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0202.057] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-power%4thermal-operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8ebf6d7, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc8ebf6d7, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.057] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0202.057] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0202.057] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0202.057] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5090f75d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5090f75d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx", cAlternateFileName="MI1E8D~1.EVT")) returned 1 [0202.058] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a8b0 [0202.058] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238708 [0202.058] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a028 [0202.058] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238708 | out: hHeap=0x1f0000) returned 1 [0202.058] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0202.058] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a8b0 | out: hHeap=0x1f0000) returned 1 [0202.059] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-shimengine%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0202.059] GetFileType (hFile=0x210) returned 0x1 [0202.060] CloseHandle (hObject=0x210) returned 1 [0202.060] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2299c8 [0202.060] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-shimengine%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5090f75d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5090f75d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.061] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2299c8 | out: hHeap=0x1f0000) returned 1 [0202.061] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a3e0 [0202.061] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a3e0 | out: hHeap=0x1f0000) returned 1 [0202.061] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd75102f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcd75102f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx", cAlternateFileName="MID067~1.EVT")) returned 1 [0202.062] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ab80 [0202.062] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384d8 [0202.062] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a248 [0202.062] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384d8 | out: hHeap=0x1f0000) returned 1 [0202.062] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a028 | out: hHeap=0x1f0000) returned 1 [0202.062] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab80 | out: hHeap=0x1f0000) returned 1 [0202.063] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-storemgr%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0202.063] GetFileType (hFile=0x210) returned 0x1 [0202.064] CloseHandle (hObject=0x210) returned 1 [0202.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229cf8 [0202.064] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-storemgr%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd75102f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcd75102f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.064] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229cf8 | out: hHeap=0x1f0000) returned 1 [0202.065] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229940 [0202.065] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229940 | out: hHeap=0x1f0000) returned 1 [0202.065] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50be4414, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50be4414, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Microsoft-Windows-Kernel-WHEA%4Errors.evtx", cAlternateFileName="MIDE4D~1.EVT")) returned 1 [0202.065] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214f70 [0202.065] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385a0 [0202.065] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a8b0 [0202.065] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385a0 | out: hHeap=0x1f0000) returned 1 [0202.065] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a248 | out: hHeap=0x1f0000) returned 1 [0202.066] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f70 | out: hHeap=0x1f0000) returned 1 [0202.066] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-WHEA%4Errors.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4errors.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0202.264] GetFileType (hFile=0x218) returned 0x1 [0202.264] CloseHandle (hObject=0x218) returned 1 [0202.265] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a928 [0202.265] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-WHEA%4Errors.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4errors.evtx"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50be4414, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50be4414, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.265] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a928 | out: hHeap=0x1f0000) returned 1 [0202.265] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22aa90 [0202.265] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aa90 | out: hHeap=0x1f0000) returned 1 [0202.265] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50be4414, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50be4414, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Microsoft-Windows-Kernel-WHEA%4Operational.evtx", cAlternateFileName="MI36C5~1.EVT")) returned 1 [0202.265] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214e38 [0202.266] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238708 [0202.266] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229830 [0202.266] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238708 | out: hHeap=0x1f0000) returned 1 [0202.266] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a8b0 | out: hHeap=0x1f0000) returned 1 [0202.266] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214e38 | out: hHeap=0x1f0000) returned 1 [0202.267] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-WHEA%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0202.268] GetFileType (hFile=0x218) returned 0x1 [0202.268] CloseHandle (hObject=0x218) returned 1 [0202.269] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229fa0 [0202.269] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-WHEA%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50be4414, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50be4414, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.269] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229fa0 | out: hHeap=0x1f0000) returned 1 [0202.269] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a028 [0202.269] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a028 | out: hHeap=0x1f0000) returned 1 [0202.269] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59547c37, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x59547c37, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Microsoft-Windows-Known Folders API Service.evtx", cAlternateFileName="MI86D6~1.EVT")) returned 1 [0202.269] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22aa18 [0202.270] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238708 [0202.270] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a2d0 [0202.270] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238708 | out: hHeap=0x1f0000) returned 1 [0202.270] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229830 | out: hHeap=0x1f0000) returned 1 [0202.270] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aa18 | out: hHeap=0x1f0000) returned 1 [0202.271] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Known Folders API Service.evtx" (normalized: "c:\\logs\\microsoft-windows-known folders api service.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0202.271] GetFileType (hFile=0x218) returned 0x1 [0202.271] CloseHandle (hObject=0x218) returned 1 [0202.272] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229fa0 [0202.272] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Known Folders API Service.evtx" (normalized: "c:\\logs\\microsoft-windows-known folders api service.evtx"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59547c37, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x59547c37, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.272] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229fa0 | out: hHeap=0x1f0000) returned 1 [0202.272] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a468 [0202.272] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a468 | out: hHeap=0x1f0000) returned 1 [0202.272] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbb7386e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcbb7386e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Microsoft-Windows-LiveId%4Operational.evtx", cAlternateFileName="MI4C58~1.EVT")) returned 1 [0202.272] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2149c0 [0202.272] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238758 [0202.273] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22aa90 [0202.273] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238758 | out: hHeap=0x1f0000) returned 1 [0202.273] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a2d0 | out: hHeap=0x1f0000) returned 1 [0202.273] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2149c0 | out: hHeap=0x1f0000) returned 1 [0202.273] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-LiveId%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-liveid%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0202.274] GetFileType (hFile=0x218) returned 0x1 [0202.274] CloseHandle (hObject=0x218) returned 1 [0202.275] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22aa18 [0202.275] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-LiveId%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-liveid%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbb7386e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcbb7386e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.275] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aa18 | out: hHeap=0x1f0000) returned 1 [0202.275] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ab08 [0202.275] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab08 | out: hHeap=0x1f0000) returned 1 [0202.275] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc93d06f0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc93d06f0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Microsoft-Windows-MUI%4Admin.evtx", cAlternateFileName="MI30D3~1.EVT")) returned 1 [0202.275] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239b38 [0202.276] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238618 [0202.276] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c98 [0202.276] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238618 | out: hHeap=0x1f0000) returned 1 [0202.276] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aa90 | out: hHeap=0x1f0000) returned 1 [0202.276] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239b38 | out: hHeap=0x1f0000) returned 1 [0202.277] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-MUI%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-mui%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0202.277] GetFileType (hFile=0x218) returned 0x1 [0202.278] CloseHandle (hObject=0x218) returned 1 [0202.278] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214f70 [0202.278] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-MUI%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-mui%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc93d06f0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc93d06f0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.278] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f70 | out: hHeap=0x1f0000) returned 1 [0202.278] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214bc8 [0202.278] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214bc8 | out: hHeap=0x1f0000) returned 1 [0202.279] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc93aa49b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc93aa49b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Microsoft-Windows-MUI%4Operational.evtx", cAlternateFileName="MI6F01~1.EVT")) returned 1 [0202.279] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239a30 [0202.279] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238708 [0202.279] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ab80 [0202.279] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238708 | out: hHeap=0x1f0000) returned 1 [0202.279] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c98 | out: hHeap=0x1f0000) returned 1 [0202.279] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239a30 | out: hHeap=0x1f0000) returned 1 [0202.280] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-MUI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-mui%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0202.280] GetFileType (hFile=0x218) returned 0x1 [0202.280] CloseHandle (hObject=0x218) returned 1 [0202.281] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ad60 [0202.281] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-MUI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-mui%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc93aa49b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc93aa49b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.281] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ad60 | out: hHeap=0x1f0000) returned 1 [0202.281] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22aa18 [0202.281] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aa18 | out: hHeap=0x1f0000) returned 1 [0202.281] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9d33b19, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9d33b19, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Microsoft-Windows-NCSI%4Operational.evtx", cAlternateFileName="MI483C~1.EVT")) returned 1 [0202.281] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d68 [0202.281] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385a0 [0202.281] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a928 [0202.281] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385a0 | out: hHeap=0x1f0000) returned 1 [0202.281] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab80 | out: hHeap=0x1f0000) returned 1 [0202.281] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d68 | out: hHeap=0x1f0000) returned 1 [0202.282] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-NCSI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-ncsi%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0202.282] GetFileType (hFile=0x218) returned 0x1 [0202.283] CloseHandle (hObject=0x218) returned 1 [0202.283] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ac70 [0202.283] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-NCSI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-ncsi%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9d33b19, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9d33b19, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.283] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ac70 | out: hHeap=0x1f0000) returned 1 [0202.284] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22aa90 [0202.284] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aa90 | out: hHeap=0x1f0000) returned 1 [0202.284] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbcf0ff2, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcbcf0ff2, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Microsoft-Windows-NetworkProfile%4Operational.evtx", cAlternateFileName="MIFC66~1.EVT")) returned 1 [0202.284] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ace8 [0202.284] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238708 [0202.284] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a028 [0202.284] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238708 | out: hHeap=0x1f0000) returned 1 [0202.284] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a928 | out: hHeap=0x1f0000) returned 1 [0202.284] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ace8 | out: hHeap=0x1f0000) returned 1 [0202.285] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-NetworkProfile%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-networkprofile%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0202.285] GetFileType (hFile=0x218) returned 0x1 [0202.286] CloseHandle (hObject=0x218) returned 1 [0202.286] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229e08 [0202.286] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-NetworkProfile%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-networkprofile%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbcf0ff2, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcbcf0ff2, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.286] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229e08 | out: hHeap=0x1f0000) returned 1 [0202.286] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a3e0 [0202.287] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a3e0 | out: hHeap=0x1f0000) returned 1 [0202.287] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ab3154, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ab3154, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Microsoft-Windows-Ntfs%4Operational.evtx", cAlternateFileName="MI6E98~1.EVT")) returned 1 [0202.287] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c98 [0202.287] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238708 [0202.287] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a928 [0202.287] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238708 | out: hHeap=0x1f0000) returned 1 [0202.287] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a028 | out: hHeap=0x1f0000) returned 1 [0202.287] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c98 | out: hHeap=0x1f0000) returned 1 [0202.288] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Ntfs%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-ntfs%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0202.289] GetFileType (hFile=0x218) returned 0x1 [0202.289] CloseHandle (hObject=0x218) returned 1 [0202.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22aec8 [0202.289] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Ntfs%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-ntfs%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ab3154, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ab3154, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.290] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aec8 | out: hHeap=0x1f0000) returned 1 [0202.290] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a9a0 [0202.290] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a9a0 | out: hHeap=0x1f0000) returned 1 [0202.290] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ad9393, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ad9393, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Microsoft-Windows-Ntfs%4WHC.evtx", cAlternateFileName="MIB2AC~1.EVT")) returned 1 [0202.290] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2395b8 [0202.290] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238618 [0202.290] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214ea0 [0202.290] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238618 | out: hHeap=0x1f0000) returned 1 [0202.290] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a928 | out: hHeap=0x1f0000) returned 1 [0202.290] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2395b8 | out: hHeap=0x1f0000) returned 1 [0202.291] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Ntfs%4WHC.evtx" (normalized: "c:\\logs\\microsoft-windows-ntfs%4whc.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0202.291] GetFileType (hFile=0x218) returned 0x1 [0202.292] CloseHandle (hObject=0x218) returned 1 [0202.292] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214fd8 [0202.292] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Ntfs%4WHC.evtx" (normalized: "c:\\logs\\microsoft-windows-ntfs%4whc.evtx"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ad9393, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ad9393, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.292] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214fd8 | out: hHeap=0x1f0000) returned 1 [0202.292] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214f70 [0202.292] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f70 | out: hHeap=0x1f0000) returned 1 [0202.292] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca5fe5cb, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca5fe5cb, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx", cAlternateFileName="MI6AFE~1.EVT")) returned 1 [0202.292] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a578 [0202.292] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238708 [0202.292] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2615b0 [0202.292] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238708 | out: hHeap=0x1f0000) returned 1 [0202.293] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214ea0 | out: hHeap=0x1f0000) returned 1 [0202.293] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a578 | out: hHeap=0x1f0000) returned 1 [0202.293] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx" (normalized: "c:\\logs\\microsoft-windows-program-compatibility-assistant%4compatafterupgrade.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0202.294] GetFileType (hFile=0x210) returned 0x1 [0202.295] CloseHandle (hObject=0x210) returned 1 [0202.295] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2614f8 [0202.295] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx" (normalized: "c:\\logs\\microsoft-windows-program-compatibility-assistant%4compatafterupgrade.evtx"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca5fe5cb, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca5fe5cb, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.296] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2614f8 | out: hHeap=0x1f0000) returned 1 [0202.296] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261388 [0202.296] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261388 | out: hHeap=0x1f0000) returned 1 [0202.296] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe24cdef0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xe24cdef0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Microsoft-Windows-ReadyBoost%4Operational.evtx", cAlternateFileName="MIB9D2~1.EVT")) returned 1 [0202.296] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214fd8 [0202.296] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238708 [0202.296] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22abf8 [0202.296] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238708 | out: hHeap=0x1f0000) returned 1 [0202.296] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2615b0 | out: hHeap=0x1f0000) returned 1 [0202.296] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214fd8 | out: hHeap=0x1f0000) returned 1 [0202.297] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-ReadyBoost%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-readyboost%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0202.297] GetFileType (hFile=0x210) returned 0x1 [0202.298] CloseHandle (hObject=0x210) returned 1 [0202.298] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22aec8 [0202.298] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-ReadyBoost%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-readyboost%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe24cdef0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xe24cdef0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.298] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aec8 | out: hHeap=0x1f0000) returned 1 [0202.298] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ac70 [0202.298] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ac70 | out: hHeap=0x1f0000) returned 1 [0202.298] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd125335f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd125335f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx", cAlternateFileName="MI7A67~1.EVT")) returned 1 [0202.298] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0202.299] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385a0 [0202.299] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219e40 [0202.299] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385a0 | out: hHeap=0x1f0000) returned 1 [0202.299] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22abf8 | out: hHeap=0x1f0000) returned 1 [0202.299] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0202.299] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-resource-exhaustion-detector%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0202.300] GetFileType (hFile=0x210) returned 0x1 [0202.300] CloseHandle (hObject=0x210) returned 1 [0202.300] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a2d8 [0202.300] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-resource-exhaustion-detector%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd125335f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd125335f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.301] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a2d8 | out: hHeap=0x1f0000) returned 1 [0202.301] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219c48 [0202.301] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219c48 | out: hHeap=0x1f0000) returned 1 [0202.301] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1fe2941, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd1fe2941, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Microsoft-Windows-SettingSync%4Debug.evtx", cAlternateFileName="MI3773~1.EVT")) returned 1 [0202.301] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a90 [0202.301] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385a0 [0202.301] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22add8 [0202.301] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385a0 | out: hHeap=0x1f0000) returned 1 [0202.301] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219e40 | out: hHeap=0x1f0000) returned 1 [0202.301] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a90 | out: hHeap=0x1f0000) returned 1 [0202.302] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-SettingSync%4Debug.evtx" (normalized: "c:\\logs\\microsoft-windows-settingsync%4debug.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0202.485] GetFileType (hFile=0x214) returned 0x1 [0202.511] CloseHandle (hObject=0x214) returned 1 [0202.511] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ac70 [0202.511] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-SettingSync%4Debug.evtx" (normalized: "c:\\logs\\microsoft-windows-settingsync%4debug.evtx"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1fe2941, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd1fe2941, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000)) returned 1 [0202.511] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ac70 | out: hHeap=0x1f0000) returned 1 [0202.511] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22aa18 [0202.511] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aa18 | out: hHeap=0x1f0000) returned 1 [0202.511] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1fe2941, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd1fe2941, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Microsoft-Windows-SettingSync%4Operational.evtx", cAlternateFileName="MI36AA~1.EVT")) returned 1 [0202.511] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c98 [0202.511] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a90 [0202.511] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229ad8 [0202.511] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a90 | out: hHeap=0x1f0000) returned 1 [0202.512] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22add8 | out: hHeap=0x1f0000) returned 1 [0202.512] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c98 | out: hHeap=0x1f0000) returned 1 [0202.512] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-SettingSync%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-settingsync%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0202.512] GetFileType (hFile=0x214) returned 0x1 [0202.512] CloseHandle (hObject=0x214) returned 1 [0202.513] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a468 [0202.513] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-SettingSync%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-settingsync%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1fe2941, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd1fe2941, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.513] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a468 | out: hHeap=0x1f0000) returned 1 [0202.513] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229940 [0202.513] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229940 | out: hHeap=0x1f0000) returned 1 [0202.513] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3852b12, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd3852b12, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Microsoft-Windows-Shell-Core%4ActionCenter.evtx", cAlternateFileName="MI2E2E~1.EVT")) returned 1 [0202.513] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214f70 [0202.513] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b30 [0202.513] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229940 [0202.513] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b30 | out: hHeap=0x1f0000) returned 1 [0202.513] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229ad8 | out: hHeap=0x1f0000) returned 1 [0202.514] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f70 | out: hHeap=0x1f0000) returned 1 [0202.514] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Shell-Core%4ActionCenter.evtx" (normalized: "c:\\logs\\microsoft-windows-shell-core%4actioncenter.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0202.514] GetFileType (hFile=0x214) returned 0x1 [0202.514] CloseHandle (hObject=0x214) returned 1 [0202.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229f18 [0202.515] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Shell-Core%4ActionCenter.evtx" (normalized: "c:\\logs\\microsoft-windows-shell-core%4actioncenter.evtx"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3852b12, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd3852b12, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.515] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229f18 | out: hHeap=0x1f0000) returned 1 [0202.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229e08 [0202.515] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229e08 | out: hHeap=0x1f0000) returned 1 [0202.515] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3852b12, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd3852b12, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Microsoft-Windows-Shell-Core%4Operational.evtx", cAlternateFileName="MI1C6C~1.EVT")) returned 1 [0202.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c98 [0202.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609f0 [0202.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a928 [0202.515] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609f0 | out: hHeap=0x1f0000) returned 1 [0202.515] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229940 | out: hHeap=0x1f0000) returned 1 [0202.515] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c98 | out: hHeap=0x1f0000) returned 1 [0202.515] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Shell-Core%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-shell-core%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0202.516] GetFileType (hFile=0x214) returned 0x1 [0202.516] CloseHandle (hObject=0x214) returned 1 [0202.516] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22af40 [0202.516] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Shell-Core%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-shell-core%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3852b12, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd3852b12, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.516] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22af40 | out: hHeap=0x1f0000) returned 1 [0202.516] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ab08 [0202.516] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab08 | out: hHeap=0x1f0000) returned 1 [0202.516] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97d66c8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97d66c8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Microsoft-Windows-SmbClient%4Connectivity.evtx", cAlternateFileName="MI00FB~1.EVT")) returned 1 [0202.516] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2150a8 [0202.517] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ba8 [0202.517] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22aa18 [0202.517] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ba8 | out: hHeap=0x1f0000) returned 1 [0202.517] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a928 | out: hHeap=0x1f0000) returned 1 [0202.517] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2150a8 | out: hHeap=0x1f0000) returned 1 [0202.517] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-SmbClient%4Connectivity.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4connectivity.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0202.517] GetFileType (hFile=0x214) returned 0x1 [0202.517] CloseHandle (hObject=0x214) returned 1 [0202.518] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22af40 [0202.518] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-SmbClient%4Connectivity.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4connectivity.evtx"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97d66c8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97d66c8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.518] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22af40 | out: hHeap=0x1f0000) returned 1 [0202.518] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ad60 [0202.518] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ad60 | out: hHeap=0x1f0000) returned 1 [0202.518] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97b042f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97b042f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Microsoft-Windows-SMBClient%4Operational.evtx", cAlternateFileName="MID8B0~1.EVT")) returned 1 [0202.518] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a28 [0202.518] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ba8 [0202.518] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ad60 [0202.518] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ba8 | out: hHeap=0x1f0000) returned 1 [0202.518] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aa18 | out: hHeap=0x1f0000) returned 1 [0202.518] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a28 | out: hHeap=0x1f0000) returned 1 [0202.519] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-SMBClient%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0202.519] GetFileType (hFile=0x214) returned 0x1 [0202.519] CloseHandle (hObject=0x214) returned 1 [0202.520] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a838 [0202.520] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-SMBClient%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97b042f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97b042f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.520] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a838 | out: hHeap=0x1f0000) returned 1 [0202.520] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ab80 [0202.520] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab80 | out: hHeap=0x1f0000) returned 1 [0202.520] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97d66c8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97d66c8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Microsoft-Windows-SmbClient%4Security.evtx", cAlternateFileName="MI8CEE~1.EVT")) returned 1 [0202.520] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a28 [0202.520] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ba8 [0202.520] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a928 [0202.520] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ba8 | out: hHeap=0x1f0000) returned 1 [0202.520] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ad60 | out: hHeap=0x1f0000) returned 1 [0202.520] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a28 | out: hHeap=0x1f0000) returned 1 [0202.521] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-SmbClient%4Security.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4security.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0202.521] GetFileType (hFile=0x214) returned 0x1 [0202.521] CloseHandle (hObject=0x214) returned 1 [0202.521] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22af40 [0202.521] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-SmbClient%4Security.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4security.evtx"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97d66c8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97d66c8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.521] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22af40 | out: hHeap=0x1f0000) returned 1 [0202.521] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ab80 [0202.521] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab80 | out: hHeap=0x1f0000) returned 1 [0202.521] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb1ea1c9, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb1ea1c9, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Microsoft-Windows-SMBServer%4Audit.evtx", cAlternateFileName="MIE3AD~1.EVT")) returned 1 [0202.522] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239a30 [0202.522] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609c8 [0202.522] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22af40 [0202.522] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609c8 | out: hHeap=0x1f0000) returned 1 [0202.522] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a928 | out: hHeap=0x1f0000) returned 1 [0202.522] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239a30 | out: hHeap=0x1f0000) returned 1 [0202.523] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-SMBServer%4Audit.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4audit.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0202.523] GetFileType (hFile=0x214) returned 0x1 [0202.523] CloseHandle (hObject=0x214) returned 1 [0202.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a928 [0202.523] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-SMBServer%4Audit.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4audit.evtx"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb1ea1c9, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb1ea1c9, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.523] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a928 | out: hHeap=0x1f0000) returned 1 [0202.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22aec8 [0202.523] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aec8 | out: hHeap=0x1f0000) returned 1 [0202.524] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb19dd19, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb19dd19, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Microsoft-Windows-SMBServer%4Connectivity.evtx", cAlternateFileName="MI8248~1.EVT")) returned 1 [0202.524] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c98 [0202.524] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c20 [0202.524] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ab80 [0202.524] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c20 | out: hHeap=0x1f0000) returned 1 [0202.524] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22af40 | out: hHeap=0x1f0000) returned 1 [0202.524] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c98 | out: hHeap=0x1f0000) returned 1 [0202.524] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-SMBServer%4Connectivity.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4connectivity.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0202.524] GetFileType (hFile=0x214) returned 0x1 [0202.524] CloseHandle (hObject=0x214) returned 1 [0202.525] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22aa90 [0202.525] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-SMBServer%4Connectivity.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4connectivity.evtx"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb19dd19, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb19dd19, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.525] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aa90 | out: hHeap=0x1f0000) returned 1 [0202.525] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22abf8 [0202.525] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22abf8 | out: hHeap=0x1f0000) returned 1 [0202.525] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb151873, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb151873, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Microsoft-Windows-SMBServer%4Operational.evtx", cAlternateFileName="MI4B6B~1.EVT")) returned 1 [0202.525] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2149c0 [0202.525] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bd0 [0202.525] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a928 [0202.525] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bd0 | out: hHeap=0x1f0000) returned 1 [0202.525] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab80 | out: hHeap=0x1f0000) returned 1 [0202.525] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2149c0 | out: hHeap=0x1f0000) returned 1 [0202.525] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-SMBServer%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0202.526] GetFileType (hFile=0x214) returned 0x1 [0202.526] CloseHandle (hObject=0x214) returned 1 [0202.526] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a838 [0202.526] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-SMBServer%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb151873, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb151873, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.526] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a838 | out: hHeap=0x1f0000) returned 1 [0202.526] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a838 [0202.526] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a838 | out: hHeap=0x1f0000) returned 1 [0202.526] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb177aca, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb177aca, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Microsoft-Windows-SMBServer%4Security.evtx", cAlternateFileName="MI7709~1.EVT")) returned 1 [0202.526] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d68 [0202.526] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ba8 [0202.526] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a8b0 [0202.526] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ba8 | out: hHeap=0x1f0000) returned 1 [0202.527] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a928 | out: hHeap=0x1f0000) returned 1 [0202.527] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d68 | out: hHeap=0x1f0000) returned 1 [0202.527] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-SMBServer%4Security.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4security.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0202.527] GetFileType (hFile=0x214) returned 0x1 [0202.527] CloseHandle (hObject=0x214) returned 1 [0202.528] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ab80 [0202.528] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-SMBServer%4Security.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4security.evtx"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb177aca, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb177aca, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab80 | out: hHeap=0x1f0000) returned 1 [0202.528] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a928 [0202.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a928 | out: hHeap=0x1f0000) returned 1 [0202.528] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd751ea61, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd751ea61, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Microsoft-Windows-Store%4Operational.evtx", cAlternateFileName="MICEDD~1.EVT")) returned 1 [0202.528] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214f70 [0202.528] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ae0 [0202.528] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a838 [0202.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ae0 | out: hHeap=0x1f0000) returned 1 [0202.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a8b0 | out: hHeap=0x1f0000) returned 1 [0202.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f70 | out: hHeap=0x1f0000) returned 1 [0202.529] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Store%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-store%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0202.529] GetFileType (hFile=0x214) returned 0x1 [0202.529] CloseHandle (hObject=0x214) returned 1 [0202.529] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a8b0 [0202.529] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Store%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-store%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd751ea61, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd751ea61, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.529] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a8b0 | out: hHeap=0x1f0000) returned 1 [0202.529] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22add8 [0202.529] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22add8 | out: hHeap=0x1f0000) returned 1 [0202.529] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd0763ff, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcd0763ff, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Microsoft-Windows-TaskScheduler%4Maintenance.evtx", cAlternateFileName="MIE2F0~1.EVT")) returned 1 [0202.529] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ae50 [0202.530] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bd0 [0202.530] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a3e0 [0202.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bd0 | out: hHeap=0x1f0000) returned 1 [0202.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a838 | out: hHeap=0x1f0000) returned 1 [0202.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ae50 | out: hHeap=0x1f0000) returned 1 [0202.530] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-TaskScheduler%4Maintenance.evtx" (normalized: "c:\\logs\\microsoft-windows-taskscheduler%4maintenance.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0202.530] GetFileType (hFile=0x214) returned 0x1 [0202.531] CloseHandle (hObject=0x214) returned 1 [0202.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a4f0 [0202.531] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-TaskScheduler%4Maintenance.evtx" (normalized: "c:\\logs\\microsoft-windows-taskscheduler%4maintenance.evtx"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd0763ff, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcd0763ff, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.531] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a4f0 | out: hHeap=0x1f0000) returned 1 [0202.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a248 [0202.531] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a248 | out: hHeap=0x1f0000) returned 1 [0202.531] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5089d037, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5089d037, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx", cAlternateFileName="MIAB1D~1.EVT")) returned 1 [0202.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0202.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b08 [0202.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a2d8 [0202.531] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b08 | out: hHeap=0x1f0000) returned 1 [0202.531] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a3e0 | out: hHeap=0x1f0000) returned 1 [0202.531] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0202.532] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0202.532] GetFileType (hFile=0x214) returned 0x1 [0202.532] CloseHandle (hObject=0x214) returned 1 [0202.532] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219cf0 [0202.532] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5089d037, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5089d037, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.532] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219cf0 | out: hHeap=0x1f0000) returned 1 [0202.532] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219d98 [0202.532] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219d98 | out: hHeap=0x1f0000) returned 1 [0202.532] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x508c32a6, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x508c32a6, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx", cAlternateFileName="MI62D3~1.EVT")) returned 1 [0202.532] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a620 [0202.532] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0202.533] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261388 [0202.533] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0202.533] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a2d8 | out: hHeap=0x1f0000) returned 1 [0202.533] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a620 | out: hHeap=0x1f0000) returned 1 [0202.533] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0202.533] GetFileType (hFile=0x214) returned 0x1 [0202.533] CloseHandle (hObject=0x214) returned 1 [0202.534] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261668 [0202.534] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x508c32a6, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x508c32a6, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.534] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261668 | out: hHeap=0x1f0000) returned 1 [0202.534] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x260ff0 [0202.534] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ff0 | out: hHeap=0x1f0000) returned 1 [0202.534] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc14341c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc14341c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx", cAlternateFileName="MIEC03~1.EVT")) returned 1 [0202.534] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0202.534] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b08 [0202.534] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a2d8 [0202.534] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b08 | out: hHeap=0x1f0000) returned 1 [0202.534] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261388 | out: hHeap=0x1f0000) returned 1 [0202.534] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0202.535] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0202.691] GetFileType (hFile=0x218) returned 0x1 [0202.692] CloseHandle (hObject=0x218) returned 1 [0202.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21aab8 [0202.692] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc14341c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc14341c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.693] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21aab8 | out: hHeap=0x1f0000) returned 1 [0202.693] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a620 [0202.693] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a620 | out: hHeap=0x1f0000) returned 1 [0202.693] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc1b5b23, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc1b5b23, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx", cAlternateFileName="MI1F5D~1.EVT")) returned 1 [0202.693] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219d98 [0202.693] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609c8 [0202.693] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2615b0 [0202.693] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609c8 | out: hHeap=0x1f0000) returned 1 [0202.693] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a2d8 | out: hHeap=0x1f0000) returned 1 [0202.694] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219d98 | out: hHeap=0x1f0000) returned 1 [0202.694] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0202.695] GetFileType (hFile=0x218) returned 0x1 [0202.696] CloseHandle (hObject=0x218) returned 1 [0202.696] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261440 [0202.696] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc1b5b23, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc1b5b23, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.696] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261440 | out: hHeap=0x1f0000) returned 1 [0202.696] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261440 [0202.696] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261440 | out: hHeap=0x1f0000) returned 1 [0202.696] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd74ac348, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd74ac348, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Microsoft-Windows-TWinUI%4Operational.evtx", cAlternateFileName="MIA925~1.EVT")) returned 1 [0202.697] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d68 [0202.697] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bd0 [0202.697] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22aa18 [0202.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bd0 | out: hHeap=0x1f0000) returned 1 [0202.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2615b0 | out: hHeap=0x1f0000) returned 1 [0202.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d68 | out: hHeap=0x1f0000) returned 1 [0202.697] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-TWinUI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-twinui%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0202.698] GetFileType (hFile=0x218) returned 0x1 [0202.698] CloseHandle (hObject=0x218) returned 1 [0202.699] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22add8 [0202.699] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-TWinUI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-twinui%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd74ac348, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd74ac348, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.699] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22add8 | out: hHeap=0x1f0000) returned 1 [0202.699] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ad60 [0202.699] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ad60 | out: hHeap=0x1f0000) returned 1 [0202.699] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50aff605, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50aff605, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Microsoft-Windows-User Profile Service%4Operational.evtx", cAlternateFileName="MI4D4C~1.EVT")) returned 1 [0202.699] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a3e0 [0202.699] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ab8 [0202.699] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0202.699] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ab8 | out: hHeap=0x1f0000) returned 1 [0202.700] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aa18 | out: hHeap=0x1f0000) returned 1 [0202.700] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a3e0 | out: hHeap=0x1f0000) returned 1 [0202.700] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-User Profile Service%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-user profile service%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0202.701] GetFileType (hFile=0x218) returned 0x1 [0202.701] CloseHandle (hObject=0x218) returned 1 [0202.701] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0202.701] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-User Profile Service%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-user profile service%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50aff605, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50aff605, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0202.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0202.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0202.702] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50981e6e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50981e6e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Microsoft-Windows-UserPnp%4ActionCenter.evtx", cAlternateFileName="MI5FF0~1.EVT")) returned 1 [0202.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214bc8 [0202.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a18 [0202.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ab80 [0202.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a18 | out: hHeap=0x1f0000) returned 1 [0202.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0202.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214bc8 | out: hHeap=0x1f0000) returned 1 [0202.703] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-UserPnp%4ActionCenter.evtx" (normalized: "c:\\logs\\microsoft-windows-userpnp%4actioncenter.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0202.703] GetFileType (hFile=0x218) returned 0x1 [0202.703] CloseHandle (hObject=0x218) returned 1 [0202.703] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ac70 [0202.704] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-UserPnp%4ActionCenter.evtx" (normalized: "c:\\logs\\microsoft-windows-userpnp%4actioncenter.evtx"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50981e6e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50981e6e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.704] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ac70 | out: hHeap=0x1f0000) returned 1 [0202.704] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22add8 [0202.704] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22add8 | out: hHeap=0x1f0000) returned 1 [0202.704] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5095bc04, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5095bc04, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Microsoft-Windows-UserPnp%4DeviceInstall.evtx", cAlternateFileName="MIBD88~1.EVT")) returned 1 [0202.704] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214fd8 [0202.704] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0202.704] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ae50 [0202.704] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0202.704] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab80 | out: hHeap=0x1f0000) returned 1 [0202.704] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214fd8 | out: hHeap=0x1f0000) returned 1 [0202.705] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-UserPnp%4DeviceInstall.evtx" (normalized: "c:\\logs\\microsoft-windows-userpnp%4deviceinstall.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0202.705] GetFileType (hFile=0x218) returned 0x1 [0202.705] CloseHandle (hObject=0x218) returned 1 [0202.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22aa90 [0202.706] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-UserPnp%4DeviceInstall.evtx" (normalized: "c:\\logs\\microsoft-windows-userpnp%4deviceinstall.evtx"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5095bc04, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5095bc04, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.706] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aa90 | out: hHeap=0x1f0000) returned 1 [0202.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22aa90 [0202.706] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aa90 | out: hHeap=0x1f0000) returned 1 [0202.706] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50b97f64, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50b97f64, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx", cAlternateFileName="MICC17~1.EVT")) returned 1 [0202.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229b60 [0202.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0202.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0202.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0202.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ae50 | out: hHeap=0x1f0000) returned 1 [0202.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229b60 | out: hHeap=0x1f0000) returned 1 [0202.707] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-volumesnapshot-driver%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0202.708] GetFileType (hFile=0x218) returned 0x1 [0202.708] CloseHandle (hObject=0x218) returned 1 [0202.709] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0202.709] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-volumesnapshot-driver%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50b97f64, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50b97f64, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.709] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0202.709] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0202.709] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0202.709] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc986efe1, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc986efe1, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Microsoft-Windows-Wcmsvc%4Operational.evtx", cAlternateFileName="MI72BF~1.EVT")) returned 1 [0202.709] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214ea0 [0202.709] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b30 [0202.709] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ac70 [0202.709] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b30 | out: hHeap=0x1f0000) returned 1 [0202.709] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0202.709] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214ea0 | out: hHeap=0x1f0000) returned 1 [0202.710] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Wcmsvc%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-wcmsvc%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0202.710] GetFileType (hFile=0x218) returned 0x1 [0202.711] CloseHandle (hObject=0x218) returned 1 [0202.711] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22aec8 [0202.711] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Wcmsvc%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-wcmsvc%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc986efe1, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc986efe1, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.711] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aec8 | out: hHeap=0x1f0000) returned 1 [0202.711] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ab08 [0202.711] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab08 | out: hHeap=0x1f0000) returned 1 [0202.711] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb426548, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb426548, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Microsoft-Windows-Windows Defender%4Operational.evtx", cAlternateFileName="MI7501~1.EVT")) returned 1 [0202.712] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ae50 [0202.712] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ba8 [0202.712] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229940 [0202.712] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ba8 | out: hHeap=0x1f0000) returned 1 [0202.712] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ac70 | out: hHeap=0x1f0000) returned 1 [0202.712] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ae50 | out: hHeap=0x1f0000) returned 1 [0202.712] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Windows Defender%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-windows defender%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0202.713] GetFileType (hFile=0x218) returned 0x1 [0202.713] CloseHandle (hObject=0x218) returned 1 [0202.713] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2299c8 [0202.714] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Windows Defender%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-windows defender%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb426548, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb426548, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.714] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2299c8 | out: hHeap=0x1f0000) returned 1 [0202.714] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a3e0 [0202.714] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a3e0 | out: hHeap=0x1f0000) returned 1 [0202.714] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb4729e7, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb4729e7, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Microsoft-Windows-Windows Defender%4WHC.evtx", cAlternateFileName="MIF226~1.EVT")) returned 1 [0202.714] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a28 [0202.714] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c70 [0202.714] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ace8 [0202.714] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c70 | out: hHeap=0x1f0000) returned 1 [0202.714] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229940 | out: hHeap=0x1f0000) returned 1 [0202.714] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a28 | out: hHeap=0x1f0000) returned 1 [0202.715] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Windows Defender%4WHC.evtx" (normalized: "c:\\logs\\microsoft-windows-windows defender%4whc.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0202.715] GetFileType (hFile=0x218) returned 0x1 [0202.715] CloseHandle (hObject=0x218) returned 1 [0202.716] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ad60 [0202.716] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Windows Defender%4WHC.evtx" (normalized: "c:\\logs\\microsoft-windows-windows defender%4whc.evtx"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb4729e7, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb4729e7, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.716] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ad60 | out: hHeap=0x1f0000) returned 1 [0202.716] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ad60 [0202.716] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ad60 | out: hHeap=0x1f0000) returned 1 [0202.716] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4b19353, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4b19353, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx", cAlternateFileName="MIDCC7~1.EVT")) returned 1 [0202.716] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2614f8 [0202.716] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609c8 [0202.716] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fe70 [0202.716] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609c8 | out: hHeap=0x1f0000) returned 1 [0202.716] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ace8 | out: hHeap=0x1f0000) returned 1 [0202.716] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2614f8 | out: hHeap=0x1f0000) returned 1 [0202.717] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4connectionsecurity.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0202.717] GetFileType (hFile=0x218) returned 0x1 [0202.717] CloseHandle (hObject=0x218) returned 1 [0202.717] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f5d8 [0202.718] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4connectionsecurity.evtx"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4b19353, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4b19353, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.718] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0202.718] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f830 [0202.718] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0202.718] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9c9b1b6, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9c9b1b6, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx", cAlternateFileName="MI7771~1.EVT")) returned 1 [0202.718] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a770 [0202.718] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b80 [0202.718] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2612d0 [0202.718] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b80 | out: hHeap=0x1f0000) returned 1 [0202.718] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0202.718] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a770 | out: hHeap=0x1f0000) returned 1 [0202.719] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4firewall.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0202.720] GetFileType (hFile=0x218) returned 0x1 [0202.720] CloseHandle (hObject=0x218) returned 1 [0202.721] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2615b0 [0202.721] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4firewall.evtx"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9c9b1b6, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9c9b1b6, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000)) returned 1 [0202.721] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2615b0 | out: hHeap=0x1f0000) returned 1 [0202.721] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x260ff0 [0202.721] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ff0 | out: hHeap=0x1f0000) returned 1 [0202.721] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9df26e9, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9df26e9, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx", cAlternateFileName="MI4667~1.EVT")) returned 1 [0202.721] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a600 [0202.721] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ab8 [0202.721] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0202.722] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ab8 | out: hHeap=0x1f0000) returned 1 [0202.722] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2612d0 | out: hHeap=0x1f0000) returned 1 [0202.722] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a600 | out: hHeap=0x1f0000) returned 1 [0202.722] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx" (normalized: "c:\\logs\\microsoft-windows-wininet-config%4proxyconfigchanged.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0202.723] GetFileType (hFile=0x218) returned 0x1 [0202.723] CloseHandle (hObject=0x218) returned 1 [0202.726] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0202.726] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx" (normalized: "c:\\logs\\microsoft-windows-wininet-config%4proxyconfigchanged.evtx"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9df26e9, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9df26e9, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.726] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0202.726] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0202.727] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0202.727] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd122d184, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd122d184, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Microsoft-Windows-Winlogon%4Operational.evtx", cAlternateFileName="MID6AB~1.EVT")) returned 1 [0202.727] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214bc8 [0202.727] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b08 [0202.727] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ab08 [0202.727] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b08 | out: hHeap=0x1f0000) returned 1 [0202.727] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0202.727] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214bc8 | out: hHeap=0x1f0000) returned 1 [0202.727] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Winlogon%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-winlogon%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0202.728] GetFileType (hFile=0x218) returned 0x1 [0202.728] CloseHandle (hObject=0x218) returned 1 [0202.728] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22add8 [0202.728] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Winlogon%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-winlogon%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd122d184, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd122d184, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0202.729] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22add8 | out: hHeap=0x1f0000) returned 1 [0202.729] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ae50 [0202.729] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ae50 | out: hHeap=0x1f0000) returned 1 [0202.729] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf164b9b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcf164b9b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Microsoft-Windows-WMI-Activity%4Operational.evtx", cAlternateFileName="MIFF83~1.EVT")) returned 1 [0202.729] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ae50 [0202.729] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ae0 [0202.729] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229c70 [0202.729] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ae0 | out: hHeap=0x1f0000) returned 1 [0202.729] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab08 | out: hHeap=0x1f0000) returned 1 [0202.729] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ae50 | out: hHeap=0x1f0000) returned 1 [0202.730] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-WMI-Activity%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-wmi-activity%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0202.730] GetFileType (hFile=0x218) returned 0x1 [0202.730] CloseHandle (hObject=0x218) returned 1 [0202.730] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a138 [0202.730] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-WMI-Activity%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-wmi-activity%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf164b9b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcf164b9b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000)) returned 1 [0202.730] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a138 | out: hHeap=0x1f0000) returned 1 [0202.730] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a0b0 [0202.731] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a0b0 | out: hHeap=0x1f0000) returned 1 [0202.731] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50555c8d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50555c8d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xf9a458f4, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x111000, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Security.evtx", cAlternateFileName="SECURI~1.EVT")) returned 1 [0202.731] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0202.731] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a18 [0202.731] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf38 [0202.731] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a18 | out: hHeap=0x1f0000) returned 1 [0202.731] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229c70 | out: hHeap=0x1f0000) returned 1 [0202.731] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0202.731] CreateFileW (lpFileName="C:\\\\Logs\\Security.evtx" (normalized: "c:\\logs\\security.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0202.732] GetFileType (hFile=0x218) returned 0x1 [0202.732] CloseHandle (hObject=0x218) returned 1 [0202.732] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2f0 [0202.732] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Security.evtx" (normalized: "c:\\logs\\security.evtx"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50555c8d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50555c8d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xf9a458f4, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x111000)) returned 1 [0202.732] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0202.732] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0202.732] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0202.732] GetLastError () returned 0x0 [0202.733] CryptAcquireContextA (in: phProv=0x2294a88, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2294a88*=0x22a4f0) returned 1 [0202.736] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x260bf8 | out: pbBuffer=0x260bf8) returned 1 [0202.736] CryptReleaseContext (hProv=0x22a4f0, dwFlags=0x0) returned 1 [0202.736] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0202.736] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x24fd60 [0202.736] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x229528 [0202.736] QueryPerformanceCounter (in: lpPerformanceCount=0x2294a1c | out: lpPerformanceCount=0x2294a1c*=36010488460) returned 1 [0202.736] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x2294a5c | out: lpSystemTimeAsFileTime=0x2294a5c) [0202.736] QueryPerformanceCounter (in: lpPerformanceCount=0x2294a1c | out: lpPerformanceCount=0x2294a1c*=36010509564) returned 1 [0202.736] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x2294a5c | out: lpSystemTimeAsFileTime=0x2294a5c) [0202.736] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x21d050 [0202.736] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x258298 [0202.736] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x217038 [0202.737] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x2356d0 [0202.737] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20fef8 [0202.737] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206958 [0202.737] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210078 [0202.737] GetLastError () returned 0x0 [0202.737] CreateFileW (lpFileName="C:\\\\Logs\\Security.evtx" (normalized: "c:\\logs\\security.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22949ec, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0202.737] GetFileType (hFile=0x218) returned 0x1 [0202.737] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2294a58 | out: lpNewFilePointer=0x0) returned 1 [0202.737] ReadFile (in: hFile=0x218, lpBuffer=0x22a9f58, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x2294a30, lpOverlapped=0x0 | out: lpBuffer=0x22a9f58*, lpNumberOfBytesRead=0x2294a30*=0x14000, lpOverlapped=0x0) returned 1 [0202.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x23adb0 [0202.872] ReadFile (in: hFile=0x218, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x22949d4, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x22949d4*=0x1000, lpOverlapped=0x0) returned 1 [0202.874] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2294a60 | out: lpNewFilePointer=0x0) returned 1 [0202.874] WriteFile (in: hFile=0x218, lpBuffer=0x2294f68*, nNumberOfBytesToWrite=0x14000, lpNumberOfBytesWritten=0x22949cc, lpOverlapped=0x0 | out: lpBuffer=0x2294f68*, lpNumberOfBytesWritten=0x22949cc*=0x14000, lpOverlapped=0x0) returned 1 [0202.875] WriteFile (in: hFile=0x218, lpBuffer=0x23adb0*, nNumberOfBytesToWrite=0xff0, lpNumberOfBytesWritten=0x22949f8, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesWritten=0x22949f8*=0xff0, lpOverlapped=0x0) returned 1 [0202.875] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x15f90, lpNewFilePointer=0x0, dwMoveMethod=0x2294a40 | out: lpNewFilePointer=0x0) returned 1 [0202.875] ReadFile (in: hFile=0x218, lpBuffer=0x22a9f58, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x2294a18, lpOverlapped=0x0 | out: lpBuffer=0x22a9f58*, lpNumberOfBytesRead=0x2294a18*=0x14000, lpOverlapped=0x0) returned 1 [0202.875] ReadFile (in: hFile=0x218, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x22949bc, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x22949bc*=0x1000, lpOverlapped=0x0) returned 1 [0202.876] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x15f90, lpNewFilePointer=0x0, dwMoveMethod=0x2294a60 | out: lpNewFilePointer=0x0) returned 1 [0202.876] WriteFile (in: hFile=0x218, lpBuffer=0x2294f68*, nNumberOfBytesToWrite=0x14000, lpNumberOfBytesWritten=0x22949cc, lpOverlapped=0x0 | out: lpBuffer=0x2294f68*, lpNumberOfBytesWritten=0x22949cc*=0x14000, lpOverlapped=0x0) returned 1 [0202.877] WriteFile (in: hFile=0x218, lpBuffer=0x23adb0*, nNumberOfBytesToWrite=0xff0, lpNumberOfBytesWritten=0x22949f8, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesWritten=0x22949f8*=0xff0, lpOverlapped=0x0) returned 1 [0202.877] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0xdbba0, lpNewFilePointer=0x0, dwMoveMethod=0x2294a40 | out: lpNewFilePointer=0x0) returned 1 [0202.877] ReadFile (in: hFile=0x218, lpBuffer=0x22a9f58, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x2294a18, lpOverlapped=0x0 | out: lpBuffer=0x22a9f58*, lpNumberOfBytesRead=0x2294a18*=0x14000, lpOverlapped=0x0) returned 1 [0202.880] ReadFile (in: hFile=0x218, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x22949bc, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x22949bc*=0x1000, lpOverlapped=0x0) returned 1 [0202.881] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0xdbba0, lpNewFilePointer=0x0, dwMoveMethod=0x2294a60 | out: lpNewFilePointer=0x0) returned 1 [0202.881] WriteFile (in: hFile=0x218, lpBuffer=0x2294f68*, nNumberOfBytesToWrite=0x14000, lpNumberOfBytesWritten=0x22949cc, lpOverlapped=0x0 | out: lpBuffer=0x2294f68*, lpNumberOfBytesWritten=0x22949cc*=0x14000, lpOverlapped=0x0) returned 1 [0202.883] WriteFile (in: hFile=0x218, lpBuffer=0x23adb0*, nNumberOfBytesToWrite=0xff0, lpNumberOfBytesWritten=0x2294a48, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesWritten=0x2294a48*=0xff0, lpOverlapped=0x0) returned 1 [0202.883] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x23adb0 | out: hHeap=0x1f0000) returned 1 [0202.883] CloseHandle (hObject=0x218) returned 1 [0203.439] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233f60 [0203.439] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260a90 [0203.440] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260ab8 [0203.440] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x2340c8 [0203.440] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x2052d0 [0203.440] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205130 [0203.440] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x21c580 [0203.440] GetLastError () returned 0x0 [0203.440] CryptAcquireContextA (in: phProv=0x2294a88, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2294a88*=0x229b60) returned 1 [0203.442] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x260c70 | out: pbBuffer=0x260c70) returned 1 [0203.442] CryptReleaseContext (hProv=0x229b60, dwFlags=0x0) returned 1 [0203.442] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c70 | out: hHeap=0x1f0000) returned 1 [0203.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260bf8 [0203.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260ae0 [0203.443] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228310 [0203.443] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0203.443] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0203.443] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228310 | out: hHeap=0x1f0000) returned 1 [0203.443] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x239928 [0203.443] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0203.443] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x214d00 [0203.443] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260b58 [0203.443] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x22d368 [0203.443] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205130 [0203.443] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a28 [0203.443] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260bd0 [0203.443] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x24f5d8 [0203.443] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c590 [0203.443] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0203.443] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210240 [0203.443] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c670 [0203.443] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c48 [0203.443] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210258 [0203.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0203.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0203.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c670 | out: hHeap=0x1f0000) returned 1 [0203.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210240 | out: hHeap=0x1f0000) returned 1 [0203.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0203.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c590 | out: hHeap=0x1f0000) returned 1 [0203.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f5d8 | out: hHeap=0x1f0000) returned 1 [0203.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bd0 | out: hHeap=0x1f0000) returned 1 [0203.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a28 | out: hHeap=0x1f0000) returned 1 [0203.444] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x2282d8 [0203.444] GetLastError () returned 0x0 [0203.444] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x2294618 | out: lpSystemTimeAsFileTime=0x2294618) [0203.444] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x21c6f0 [0203.444] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bd0 [0203.444] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205210 [0203.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205210 | out: hHeap=0x1f0000) returned 1 [0203.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bd0 | out: hHeap=0x1f0000) returned 1 [0203.445] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bd0 [0203.445] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205290 [0203.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205290 | out: hHeap=0x1f0000) returned 1 [0203.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bd0 | out: hHeap=0x1f0000) returned 1 [0203.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c6f0 | out: hHeap=0x1f0000) returned 1 [0203.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0203.445] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x2282d8 [0203.445] GetLastError () returned 0x0 [0203.445] CreateFileW (lpFileName="C:\\\\Logs\\Security.evtx" (normalized: "c:\\logs\\security.evtx"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2294988, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0203.445] GetFileType (hFile=0x218) returned 0x1 [0203.446] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x23adb0 [0203.446] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2294910 | out: lpNewFilePointer=0x0) returned 1 [0203.446] GetLastError () returned 0xb7 [0203.446] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x22949d4 | out: lpNewFilePointer=0x0) returned 1 [0203.446] WriteFile (in: hFile=0x218, lpBuffer=0x23adb0*, nNumberOfBytesToWrite=0x103, lpNumberOfBytesWritten=0x2294a38, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesWritten=0x2294a38*=0x103, lpOverlapped=0x0) returned 1 [0203.447] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x23adb0 | out: hHeap=0x1f0000) returned 1 [0203.447] CloseHandle (hObject=0x218) returned 1 [0203.737] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234350 [0203.737] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229f18 [0203.737] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234350 | out: hHeap=0x1f0000) returned 1 [0203.737] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0203.737] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229f18 | out: hHeap=0x1f0000) returned 1 [0203.738] MoveFileExW (lpExistingFileName="C:\\\\Logs\\Security.evtx" (normalized: "c:\\logs\\security.evtx"), lpNewFileName="C:\\\\Logs\\Security.evtx.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\logs\\security.evtx.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwFlags=0x2) returned 1 [0203.739] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0203.739] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c660 | out: hHeap=0x1f0000) returned 1 [0203.739] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c650 | out: hHeap=0x1f0000) returned 1 [0203.739] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f5d8 | out: hHeap=0x1f0000) returned 1 [0203.739] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d368 | out: hHeap=0x1f0000) returned 1 [0203.739] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b58 | out: hHeap=0x1f0000) returned 1 [0203.740] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205130 | out: hHeap=0x1f0000) returned 1 [0203.740] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d00 | out: hHeap=0x1f0000) returned 1 [0203.740] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0203.740] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239928 | out: hHeap=0x1f0000) returned 1 [0203.740] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b018 | out: hHeap=0x1f0000) returned 1 [0203.740] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ae0 | out: hHeap=0x1f0000) returned 1 [0203.740] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0203.740] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x251068 | out: hHeap=0x1f0000) returned 1 [0203.740] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20d990 | out: hHeap=0x1f0000) returned 1 [0203.740] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227f20 | out: hHeap=0x1f0000) returned 1 [0203.741] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c580 | out: hHeap=0x1f0000) returned 1 [0203.741] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0203.741] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609f0 | out: hHeap=0x1f0000) returned 1 [0203.741] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c620 | out: hHeap=0x1f0000) returned 1 [0203.741] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0203.741] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b80 | out: hHeap=0x1f0000) returned 1 [0203.741] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c630 | out: hHeap=0x1f0000) returned 1 [0203.741] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239be0 | out: hHeap=0x1f0000) returned 1 [0203.741] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b30 | out: hHeap=0x1f0000) returned 1 [0203.742] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2149c0 | out: hHeap=0x1f0000) returned 1 [0203.742] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2340c8 | out: hHeap=0x1f0000) returned 1 [0203.742] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ab8 | out: hHeap=0x1f0000) returned 1 [0203.742] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0203.742] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233f60 | out: hHeap=0x1f0000) returned 1 [0203.742] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x258298 | out: hHeap=0x1f0000) returned 1 [0203.742] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0203.742] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206958 | out: hHeap=0x1f0000) returned 1 [0203.743] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210078 | out: hHeap=0x1f0000) returned 1 [0203.743] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20fef8 | out: hHeap=0x1f0000) returned 1 [0203.743] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2356d0 | out: hHeap=0x1f0000) returned 1 [0203.743] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24fd60 | out: hHeap=0x1f0000) returned 1 [0203.743] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229528 | out: hHeap=0x1f0000) returned 1 [0203.743] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cfa8 | out: hHeap=0x1f0000) returned 1 [0203.743] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf70 | out: hHeap=0x1f0000) returned 1 [0203.743] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22db68 | out: hHeap=0x1f0000) returned 1 [0203.743] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234038 | out: hHeap=0x1f0000) returned 1 [0203.743] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ba8 | out: hHeap=0x1f0000) returned 1 [0203.744] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95a6db2c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x95a6db2c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Setup.evtx", cAlternateFileName="SETUP~1.EVT")) returned 1 [0203.744] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609f0 [0203.744] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ab8 [0203.744] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0203.744] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ab8 | out: hHeap=0x1f0000) returned 1 [0203.744] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf38 | out: hHeap=0x1f0000) returned 1 [0203.744] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609f0 | out: hHeap=0x1f0000) returned 1 [0203.745] CreateFileW (lpFileName="C:\\\\Logs\\Setup.evtx" (normalized: "c:\\logs\\setup.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0203.745] GetFileType (hFile=0x218) returned 0x1 [0203.746] CloseHandle (hObject=0x218) returned 1 [0203.746] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1feed0 [0203.746] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Setup.evtx" (normalized: "c:\\logs\\setup.evtx"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95a6db2c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x95a6db2c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0203.747] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1feed0 | out: hHeap=0x1f0000) returned 1 [0203.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1feed0 [0203.747] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1feed0 | out: hHeap=0x1f0000) returned 1 [0203.747] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505097c4, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505097c4, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x111000, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="System.evtx", cAlternateFileName="SYSTEM~1.EVT")) returned 1 [0203.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b80 [0203.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c48 [0203.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1feed0 [0203.747] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0203.748] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0203.748] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b80 | out: hHeap=0x1f0000) returned 1 [0203.748] CreateFileW (lpFileName="C:\\\\Logs\\System.evtx" (normalized: "c:\\logs\\system.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0203.748] GetFileType (hFile=0x218) returned 0x1 [0203.749] CloseHandle (hObject=0x218) returned 1 [0203.749] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0203.749] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\System.evtx" (normalized: "c:\\logs\\system.evtx"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505097c4, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505097c4, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x111000)) returned 1 [0203.750] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0203.750] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0203.750] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0203.750] GetLastError () returned 0x0 [0203.750] CryptAcquireContextA (in: phProv=0x2294a88, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2294a88*=0x229f18) returned 1 [0203.754] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x260c48 | out: pbBuffer=0x260c48) returned 1 [0203.754] CryptReleaseContext (hProv=0x229f18, dwFlags=0x0) returned 1 [0203.754] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0203.754] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x255c88 [0203.754] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x229528 [0203.754] QueryPerformanceCounter (in: lpPerformanceCount=0x2294a1c | out: lpPerformanceCount=0x2294a1c*=36112305011) returned 1 [0203.754] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x2294a5c | out: lpSystemTimeAsFileTime=0x2294a5c) [0203.754] QueryPerformanceCounter (in: lpPerformanceCount=0x2294a1c | out: lpPerformanceCount=0x2294a1c*=36112338508) returned 1 [0203.755] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x2294a5c | out: lpSystemTimeAsFileTime=0x2294a5c) [0203.755] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x1ff058 [0203.755] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x251068 [0203.755] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x22b018 [0203.755] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x217038 [0203.755] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffd0 [0203.755] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206628 [0203.755] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20fef8 [0203.755] GetLastError () returned 0x0 [0203.756] CreateFileW (lpFileName="C:\\\\Logs\\System.evtx" (normalized: "c:\\logs\\system.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22949ec, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0203.756] GetFileType (hFile=0x218) returned 0x1 [0203.756] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2294a58 | out: lpNewFilePointer=0x0) returned 1 [0203.757] ReadFile (in: hFile=0x218, lpBuffer=0x22a9f58, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x2294a30, lpOverlapped=0x0 | out: lpBuffer=0x22a9f58*, lpNumberOfBytesRead=0x2294a30*=0x14000, lpOverlapped=0x0) returned 1 [0204.004] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x23bdb8 [0204.004] ReadFile (in: hFile=0x218, lpBuffer=0x23bdb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x22949d4, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesRead=0x22949d4*=0x1000, lpOverlapped=0x0) returned 1 [0204.004] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2294a60 | out: lpNewFilePointer=0x0) returned 1 [0204.004] WriteFile (in: hFile=0x218, lpBuffer=0x2294f68*, nNumberOfBytesToWrite=0x14000, lpNumberOfBytesWritten=0x22949cc, lpOverlapped=0x0 | out: lpBuffer=0x2294f68*, lpNumberOfBytesWritten=0x22949cc*=0x14000, lpOverlapped=0x0) returned 1 [0204.005] WriteFile (in: hFile=0x218, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0xff0, lpNumberOfBytesWritten=0x22949f8, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x22949f8*=0xff0, lpOverlapped=0x0) returned 1 [0204.005] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x15f90, lpNewFilePointer=0x0, dwMoveMethod=0x2294a40 | out: lpNewFilePointer=0x0) returned 1 [0204.006] ReadFile (in: hFile=0x218, lpBuffer=0x22a9f58, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x2294a18, lpOverlapped=0x0 | out: lpBuffer=0x22a9f58*, lpNumberOfBytesRead=0x2294a18*=0x14000, lpOverlapped=0x0) returned 1 [0204.006] ReadFile (in: hFile=0x218, lpBuffer=0x23bdb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x22949bc, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesRead=0x22949bc*=0x1000, lpOverlapped=0x0) returned 1 [0204.006] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x15f90, lpNewFilePointer=0x0, dwMoveMethod=0x2294a60 | out: lpNewFilePointer=0x0) returned 1 [0204.006] WriteFile (in: hFile=0x218, lpBuffer=0x2294f68*, nNumberOfBytesToWrite=0x14000, lpNumberOfBytesWritten=0x22949cc, lpOverlapped=0x0 | out: lpBuffer=0x2294f68*, lpNumberOfBytesWritten=0x22949cc*=0x14000, lpOverlapped=0x0) returned 1 [0204.007] WriteFile (in: hFile=0x218, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0xff0, lpNumberOfBytesWritten=0x22949f8, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x22949f8*=0xff0, lpOverlapped=0x0) returned 1 [0204.007] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0xdbba0, lpNewFilePointer=0x0, dwMoveMethod=0x2294a40 | out: lpNewFilePointer=0x0) returned 1 [0204.007] ReadFile (in: hFile=0x218, lpBuffer=0x22a9f58, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x2294a18, lpOverlapped=0x0 | out: lpBuffer=0x22a9f58*, lpNumberOfBytesRead=0x2294a18*=0x14000, lpOverlapped=0x0) returned 1 [0204.009] ReadFile (in: hFile=0x218, lpBuffer=0x23bdb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x22949bc, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesRead=0x22949bc*=0x1000, lpOverlapped=0x0) returned 1 [0204.010] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0xdbba0, lpNewFilePointer=0x0, dwMoveMethod=0x2294a60 | out: lpNewFilePointer=0x0) returned 1 [0204.010] WriteFile (in: hFile=0x218, lpBuffer=0x2294f68*, nNumberOfBytesToWrite=0x14000, lpNumberOfBytesWritten=0x22949cc, lpOverlapped=0x0 | out: lpBuffer=0x2294f68*, lpNumberOfBytesWritten=0x22949cc*=0x14000, lpOverlapped=0x0) returned 1 [0204.011] WriteFile (in: hFile=0x218, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0xff0, lpNumberOfBytesWritten=0x2294a48, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x2294a48*=0xff0, lpOverlapped=0x0) returned 1 [0204.011] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x23bdb8 | out: hHeap=0x1f0000) returned 1 [0204.011] CloseHandle (hObject=0x218) returned 1 [0204.386] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233c90 [0204.386] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260ba8 [0204.386] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260c48 [0204.386] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x234158 [0204.386] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ff0 [0204.386] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205130 [0204.386] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x21c610 [0204.386] GetLastError () returned 0x0 [0204.386] CryptAcquireContextA (in: phProv=0x2294a88, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2294a88*=0x2299c8) returned 1 [0204.388] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2609c8 | out: pbBuffer=0x2609c8) returned 1 [0204.388] CryptReleaseContext (hProv=0x2299c8, dwFlags=0x0) returned 1 [0204.388] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609c8 | out: hHeap=0x1f0000) returned 1 [0204.388] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2609c8 [0204.388] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260ba8 [0204.388] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0204.388] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609c8 | out: hHeap=0x1f0000) returned 1 [0204.388] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0204.388] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0204.388] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x239508 [0204.388] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff28 [0204.388] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x214d00 [0204.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260a40 [0204.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x22d368 [0204.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205290 [0204.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2149c0 [0204.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260ae0 [0204.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x24f5d8 [0204.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c700 [0204.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609c8 [0204.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff70 [0204.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c5f0 [0204.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609f0 [0204.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffe8 [0204.389] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffe8 | out: hHeap=0x1f0000) returned 1 [0204.389] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609f0 | out: hHeap=0x1f0000) returned 1 [0204.389] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5f0 | out: hHeap=0x1f0000) returned 1 [0204.389] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff70 | out: hHeap=0x1f0000) returned 1 [0204.389] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609c8 | out: hHeap=0x1f0000) returned 1 [0204.389] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c700 | out: hHeap=0x1f0000) returned 1 [0204.389] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f5d8 | out: hHeap=0x1f0000) returned 1 [0204.389] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ae0 | out: hHeap=0x1f0000) returned 1 [0204.389] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2149c0 | out: hHeap=0x1f0000) returned 1 [0204.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x227ee8 [0204.389] GetLastError () returned 0x0 [0204.390] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x2294618 | out: lpSystemTimeAsFileTime=0x2294618) [0204.390] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x21c630 [0204.390] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ab8 [0204.390] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ff0 [0204.390] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ff0 | out: hHeap=0x1f0000) returned 1 [0204.390] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ab8 | out: hHeap=0x1f0000) returned 1 [0204.390] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609c8 [0204.390] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205130 [0204.390] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205130 | out: hHeap=0x1f0000) returned 1 [0204.390] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609c8 | out: hHeap=0x1f0000) returned 1 [0204.390] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c630 | out: hHeap=0x1f0000) returned 1 [0204.390] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0204.390] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x227ee8 [0204.390] GetLastError () returned 0x0 [0204.390] CreateFileW (lpFileName="C:\\\\Logs\\System.evtx" (normalized: "c:\\logs\\system.evtx"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2294988, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0204.391] GetFileType (hFile=0x218) returned 0x1 [0204.391] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x23bdb8 [0204.391] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2294910 | out: lpNewFilePointer=0x0) returned 1 [0204.391] GetLastError () returned 0xb7 [0204.391] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x22949d4 | out: lpNewFilePointer=0x0) returned 1 [0204.391] WriteFile (in: hFile=0x218, lpBuffer=0x23bdb8*, nNumberOfBytesToWrite=0x103, lpNumberOfBytesWritten=0x2294a38, lpOverlapped=0x0 | out: lpBuffer=0x23bdb8*, lpNumberOfBytesWritten=0x2294a38*=0x103, lpOverlapped=0x0) returned 1 [0204.392] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x23bdb8 | out: hHeap=0x1f0000) returned 1 [0204.393] CloseHandle (hObject=0x218) returned 1 [0204.418] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233f60 [0204.418] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a3e0 [0204.418] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233f60 | out: hHeap=0x1f0000) returned 1 [0204.418] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0204.418] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a3e0 | out: hHeap=0x1f0000) returned 1 [0204.418] MoveFileExW (lpExistingFileName="C:\\\\Logs\\System.evtx" (normalized: "c:\\logs\\system.evtx"), lpNewFileName="C:\\\\Logs\\System.evtx.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\logs\\system.evtx.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwFlags=0x2) returned 0 [0204.418] GetLastError () returned 0x20 [0204.418] GetLastError () returned 0x20 [0204.418] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50555c8d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50555c8d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Windows PowerShell.evtx", cAlternateFileName="WINDOW~1.EVT")) returned 1 [0204.418] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228150 [0204.418] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ab8 [0204.418] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239928 [0204.418] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ab8 | out: hHeap=0x1f0000) returned 1 [0204.418] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1feed0 | out: hHeap=0x1f0000) returned 1 [0204.418] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228150 | out: hHeap=0x1f0000) returned 1 [0204.419] CreateFileW (lpFileName="C:\\\\Logs\\Windows PowerShell.evtx" (normalized: "c:\\logs\\windows powershell.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0204.419] GetFileType (hFile=0x218) returned 0x1 [0204.419] CloseHandle (hObject=0x218) returned 1 [0204.419] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2399d8 [0204.420] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Windows PowerShell.evtx" (normalized: "c:\\logs\\windows powershell.evtx"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50555c8d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50555c8d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0204.420] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2399d8 | out: hHeap=0x1f0000) returned 1 [0204.420] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239508 [0204.420] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239508 | out: hHeap=0x1f0000) returned 1 [0204.420] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50555c8d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50555c8d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Windows PowerShell.evtx", cAlternateFileName="WINDOW~1.EVT")) returned 0 [0204.420] FindClose (in: hFindFile=0x24eb00 | out: hFindFile=0x24eb00) returned 1 [0204.420] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239928 | out: hHeap=0x1f0000) returned 1 [0204.420] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e030 | out: hHeap=0x1f0000) returned 1 [0204.420] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0204.420] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221d88 | out: hHeap=0x1f0000) returned 1 [0204.420] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233ed0 [0204.420] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0204.420] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e360 [0204.420] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ba8 [0204.420] FindFirstFileW (in: lpFileName="C:\\\\PerfLogs\\*", lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa03748ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17b3dd09, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName=".", cAlternateFileName="")) returned 0x24ec80 [0204.421] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c48 [0204.421] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ba8 | out: hHeap=0x1f0000) returned 1 [0204.421] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0204.421] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa03748ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17b3dd09, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="..", cAlternateFileName="")) returned 1 [0204.421] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c70 [0204.421] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0204.421] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0204.421] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0204.421] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa03748ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17b3dd09, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="..", cAlternateFileName="")) returned 0 [0204.421] FindClose (in: hFindFile=0x24ec80 | out: hFindFile=0x24ec80) returned 1 [0204.421] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c70 | out: hHeap=0x1f0000) returned 1 [0204.421] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e360 | out: hHeap=0x1f0000) returned 1 [0204.421] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0204.421] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233ed0 | out: hHeap=0x1f0000) returned 1 [0204.421] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234350 [0204.421] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b80 [0204.421] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e030 [0204.421] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0204.421] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\*", lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3ac6234, ftLastAccessTime.dwHighDateTime=0x1d5c65b, ftLastWriteTime.dwLowDateTime=0x3ac6234, ftLastWriteTime.dwHighDateTime=0x1d5c65b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName=".", cAlternateFileName="")) returned 0x24ecc0 [0204.421] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228150 [0204.421] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0204.422] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0204.422] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3ac6234, ftLastAccessTime.dwHighDateTime=0x1d5c65b, ftLastWriteTime.dwLowDateTime=0x3ac6234, ftLastWriteTime.dwHighDateTime=0x1d5c65b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="..", cAlternateFileName="")) returned 1 [0204.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0204.422] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228150 | out: hHeap=0x1f0000) returned 1 [0204.422] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0204.422] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0204.422] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4aadd873, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Common Files", cAlternateFileName="COMMON~1")) returned 1 [0204.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b58 [0204.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228150 [0204.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225d88 [0204.422] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228150 | out: hHeap=0x1f0000) returned 1 [0204.422] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0204.422] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b58 | out: hHeap=0x1f0000) returned 1 [0204.422] lstrcmpW (lpString1="Common Files", lpString2=".") returned 1 [0204.422] lstrcmpW (lpString1="Common Files", lpString2="..") returned 1 [0204.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x2051f0 [0204.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2340c8 [0204.422] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1a307d95, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5d0779b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5d0779b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0204.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b58 [0204.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0204.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x2262d8 [0204.423] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0204.423] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225d88 | out: hHeap=0x1f0000) returned 1 [0204.423] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b58 | out: hHeap=0x1f0000) returned 1 [0204.423] CreateFileW (lpFileName="C:\\\\Program Files\\desktop.ini" (normalized: "c:\\program files\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bef34, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0204.721] GetFileType (hFile=0x218) returned 0x1 [0204.721] CloseHandle (hObject=0x218) returned 1 [0204.721] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234038 [0204.721] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\desktop.ini" (normalized: "c:\\program files\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x22befd4 | out: lpFileInformation=0x22befd4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1a307d95, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5d0779b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5d0779b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xae)) returned 1 [0204.722] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234038 | out: hHeap=0x1f0000) returned 1 [0204.722] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234470 [0204.722] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234470 | out: hHeap=0x1f0000) returned 1 [0204.722] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfbf3a0e6, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xfbf3a0e6, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0204.722] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0204.722] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227fc8 [0204.722] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22bba8 [0204.722] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227fc8 | out: hHeap=0x1f0000) returned 1 [0204.722] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2262d8 | out: hHeap=0x1f0000) returned 1 [0204.722] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0204.722] lstrcmpW (lpString1="Internet Explorer", lpString2=".") returned 1 [0204.723] lstrcmpW (lpString1="Internet Explorer", lpString2="..") returned 1 [0204.723] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0204.723] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c390 [0204.723] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2051f0 | out: hHeap=0x1f0000) returned 1 [0204.723] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xfc0fdd55, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xfc0fdd55, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Java", cAlternateFileName="")) returned 1 [0204.723] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227fc8 [0204.723] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22bba8 | out: hHeap=0x1f0000) returned 1 [0204.723] lstrcmpW (lpString1="Java", lpString2=".") returned 1 [0204.723] lstrcmpW (lpString1="Java", lpString2="..") returned 1 [0204.724] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x48) returned 0x2262d8 [0204.724] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282d8 [0204.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0204.724] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf8a30151, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xf8a30151, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Microsoft Office", cAlternateFileName="MICROS~2")) returned 1 [0204.724] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0204.724] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282a0 [0204.724] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c020 [0204.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0204.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227fc8 | out: hHeap=0x1f0000) returned 1 [0204.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0204.725] lstrcmpW (lpString1="Microsoft Office", lpString2=".") returned 1 [0204.725] lstrcmpW (lpString1="Microsoft Office", lpString2="..") returned 1 [0204.725] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a90 [0204.725] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22bd60 [0204.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2262d8 | out: hHeap=0x1f0000) returned 1 [0204.725] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82e68d8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc03f299, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xfc03f299, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Microsoft Office 15", cAlternateFileName="MICROS~1")) returned 1 [0204.725] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0204.725] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227fc8 [0204.725] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c3e8 [0204.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227fc8 | out: hHeap=0x1f0000) returned 1 [0204.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c020 | out: hHeap=0x1f0000) returned 1 [0204.726] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0204.726] lstrcmpW (lpString1="Microsoft Office 15", lpString2=".") returned 1 [0204.726] lstrcmpW (lpString1="Microsoft Office 15", lpString2="..") returned 1 [0204.726] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0204.726] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c020 [0204.726] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a90 | out: hHeap=0x1f0000) returned 1 [0204.726] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xe99e772e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfbfccb69, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xfbfccb69, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Mozilla Firefox", cAlternateFileName="MOZILL~1")) returned 1 [0204.726] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0204.727] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0204.727] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c498 [0204.727] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0204.727] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c3e8 | out: hHeap=0x1f0000) returned 1 [0204.727] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0204.727] lstrcmpW (lpString1="Mozilla Firefox", lpString2=".") returned 1 [0204.727] lstrcmpW (lpString1="Mozilla Firefox", lpString2="..") returned 1 [0204.727] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c078 [0204.727] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x709c717f, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x709c717f, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x709c717f, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="MSBuild", cAlternateFileName="")) returned 1 [0204.728] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0204.728] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x226238 [0204.728] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0204.728] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c498 | out: hHeap=0x1f0000) returned 1 [0204.728] lstrcmpW (lpString1="MSBuild", lpString2=".") returned 1 [0204.728] lstrcmpW (lpString1="MSBuild", lpString2="..") returned 1 [0204.728] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd8) returned 0x229528 [0204.728] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233c48 [0204.729] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0204.729] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x709ed3a7, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0xfc0b18a4, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xfc0b18a4, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Reference Assemblies", cAlternateFileName="REFERE~1")) returned 1 [0204.729] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0204.729] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227fc8 [0204.729] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c3e8 [0204.729] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227fc8 | out: hHeap=0x1f0000) returned 1 [0204.729] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226238 | out: hHeap=0x1f0000) returned 1 [0204.729] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0204.729] lstrcmpW (lpString1="Reference Assemblies", lpString2=".") returned 1 [0204.729] lstrcmpW (lpString1="Reference Assemblies", lpString2="..") returned 1 [0204.730] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c498 [0204.730] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x59f2f4b4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xfbf5a454, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xfbf5a454, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="rempl", cAlternateFileName="")) returned 1 [0204.730] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0204.730] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c3e8 | out: hHeap=0x1f0000) returned 1 [0204.730] lstrcmpW (lpString1="rempl", lpString2=".") returned 1 [0204.730] lstrcmpW (lpString1="rempl", lpString2="..") returned 1 [0204.730] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227fc8 [0204.730] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xd2709a20, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xfc066938, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xfc066938, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Uninstall Information", cAlternateFileName="UNINST~1")) returned 1 [0204.730] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282a0 [0204.730] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0204.730] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c5a0 [0204.731] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0204.731] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0204.731] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0204.731] lstrcmpW (lpString1="Uninstall Information", lpString2=".") returned 1 [0204.731] lstrcmpW (lpString1="Uninstall Information", lpString2="..") returned 1 [0204.731] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x138) returned 0x22d368 [0204.731] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c4f0 [0204.731] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229528 | out: hHeap=0x1f0000) returned 1 [0204.731] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x4c509d45, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa747f43e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x749f4454, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="UNP", cAlternateFileName="")) returned 1 [0204.732] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0204.732] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c5a0 | out: hHeap=0x1f0000) returned 1 [0204.732] lstrcmpW (lpString1="UNP", lpString2=".") returned 1 [0204.732] lstrcmpW (lpString1="UNP", lpString2="..") returned 1 [0204.732] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf38 [0204.732] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc066938, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xfc066938, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Windows Defender", cAlternateFileName="WINDOW~1")) returned 1 [0204.732] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2f0 [0204.732] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf70 [0204.732] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c548 [0204.732] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf70 | out: hHeap=0x1f0000) returned 1 [0204.733] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0204.733] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0204.733] lstrcmpW (lpString1="Windows Defender", lpString2=".") returned 1 [0204.733] lstrcmpW (lpString1="Windows Defender", lpString2="..") returned 1 [0204.733] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c180 [0204.733] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xfbe9d08f, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xfbe9d08f, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Windows Defender Advanced Threat Protection", cAlternateFileName="WIF4A9~1")) returned 1 [0204.733] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x215040 [0204.733] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0204.733] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229e08 [0204.734] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0204.734] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c548 | out: hHeap=0x1f0000) returned 1 [0204.734] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215040 | out: hHeap=0x1f0000) returned 1 [0204.734] lstrcmpW (lpString1="Windows Defender Advanced Threat Protection", lpString2=".") returned 1 [0204.734] lstrcmpW (lpString1="Windows Defender Advanced Threat Protection", lpString2="..") returned 1 [0204.734] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229fa0 [0204.734] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa90b6918, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Windows Mail", cAlternateFileName="WINDOW~2")) returned 1 [0204.734] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ba8 [0204.734] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2f0 [0204.734] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x2260a8 [0204.735] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0204.735] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229e08 | out: hHeap=0x1f0000) returned 1 [0204.735] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ba8 | out: hHeap=0x1f0000) returned 1 [0204.735] lstrcmpW (lpString1="Windows Mail", lpString2=".") returned 1 [0204.735] lstrcmpW (lpString1="Windows Mail", lpString2="..") returned 1 [0204.735] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c8) returned 0x20d888 [0204.735] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233db0 [0204.735] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d368 | out: hHeap=0x1f0000) returned 1 [0204.735] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e4faee, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xfbfa67b3, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xfbfa67b3, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Windows Media Player", cAlternateFileName="WI54FB~1")) returned 1 [0204.735] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf70 [0204.735] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cfa8 [0204.735] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c548 [0204.735] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cfa8 | out: hHeap=0x1f0000) returned 1 [0204.736] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2260a8 | out: hHeap=0x1f0000) returned 1 [0204.736] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf70 | out: hHeap=0x1f0000) returned 1 [0204.736] lstrcmpW (lpString1="Windows Media Player", lpString2=".") returned 1 [0204.736] lstrcmpW (lpString1="Windows Media Player", lpString2="..") returned 1 [0204.736] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c3e8 [0204.736] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfbfccb69, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xfbfccb69, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Windows Multimedia Platform", cAlternateFileName="WINDOW~3")) returned 1 [0204.736] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233e40 [0204.736] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0204.736] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214af8 [0204.737] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0204.737] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c548 | out: hHeap=0x1f0000) returned 1 [0204.737] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233e40 | out: hHeap=0x1f0000) returned 1 [0204.737] lstrcmpW (lpString1="Windows Multimedia Platform", lpString2=".") returned 1 [0204.737] lstrcmpW (lpString1="Windows Multimedia Platform", lpString2="..") returned 1 [0204.737] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214bc8 [0204.737] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xf8bf9d3e, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xf8bf9d3e, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Windows NT", cAlternateFileName="WINDOW~4")) returned 1 [0204.737] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b08 [0204.738] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0204.738] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x2261e8 [0204.738] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0204.738] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214af8 | out: hHeap=0x1f0000) returned 1 [0204.738] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b08 | out: hHeap=0x1f0000) returned 1 [0204.738] lstrcmpW (lpString1="Windows NT", lpString2=".") returned 1 [0204.738] lstrcmpW (lpString1="Windows NT", lpString2="..") returned 1 [0204.738] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234038 [0204.738] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc08b6a0, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xfc08b6a0, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Windows Photo Viewer", cAlternateFileName="WI8A19~1")) returned 1 [0204.738] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2f0 [0204.739] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0204.739] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c548 [0204.739] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0204.739] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2261e8 | out: hHeap=0x1f0000) returned 1 [0204.739] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0204.739] lstrcmpW (lpString1="Windows Photo Viewer", lpString2=".") returned 1 [0204.739] lstrcmpW (lpString1="Windows Photo Viewer", lpString2="..") returned 1 [0204.739] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c5a0 [0204.739] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfbfccb69, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xfbfccb69, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Windows Portable Devices", cAlternateFileName="WIBFE5~1")) returned 1 [0204.740] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234470 [0204.740] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0204.740] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c30 [0204.740] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0204.740] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c548 | out: hHeap=0x1f0000) returned 1 [0204.740] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234470 | out: hHeap=0x1f0000) returned 1 [0204.740] lstrcmpW (lpString1="Windows Portable Devices", lpString2=".") returned 1 [0204.740] lstrcmpW (lpString1="Windows Portable Devices", lpString2="..") returned 1 [0204.740] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x215040 [0204.740] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfbe9d08f, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xfbe9d08f, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Windows Security", cAlternateFileName="WIDB62~1")) returned 1 [0204.741] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2f0 [0204.741] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0204.741] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c548 [0204.741] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0204.741] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c30 | out: hHeap=0x1f0000) returned 1 [0204.741] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0204.741] lstrcmpW (lpString1="Windows Security", lpString2=".") returned 1 [0204.741] lstrcmpW (lpString1="Windows Security", lpString2="..") returned 1 [0204.741] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2a0) returned 0x22cad0 [0204.741] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22bcb0 [0204.742] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20d888 | out: hHeap=0x1f0000) returned 1 [0204.742] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92aed1a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bb043c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="Windows Sidebar", cAlternateFileName="WI4223~1")) returned 1 [0204.742] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609c8 [0204.742] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0204.742] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22baf8 [0204.742] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0204.742] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c548 | out: hHeap=0x1f0000) returned 1 [0204.742] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609c8 | out: hHeap=0x1f0000) returned 1 [0204.742] lstrcmpW (lpString1="Windows Sidebar", lpString2=".") returned 1 [0204.742] lstrcmpW (lpString1="Windows Sidebar", lpString2="..") returned 1 [0204.742] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c548 [0204.743] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x8da88b6d, ftLastAccessTime.dwHighDateTime=0x1d3274e, ftLastWriteTime.dwLowDateTime=0x8da88b6d, ftLastWriteTime.dwHighDateTime=0x1d3274e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="WindowsApps", cAlternateFileName="WI7DB9~1")) returned 1 [0204.743] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b30 [0204.743] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2f0 [0204.743] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x226058 [0204.743] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0204.743] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22baf8 | out: hHeap=0x1f0000) returned 1 [0204.743] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b30 | out: hHeap=0x1f0000) returned 1 [0204.743] lstrcmpW (lpString1="WindowsApps", lpString2=".") returned 1 [0204.743] lstrcmpW (lpString1="WindowsApps", lpString2="..") returned 1 [0204.743] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234470 [0204.744] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc0fdd55, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xfc0fdd55, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="WindowsPowerShell", cAlternateFileName="WID5B1~1")) returned 1 [0204.744] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2f0 [0204.744] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cfa8 [0204.744] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c0d0 [0204.744] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cfa8 | out: hHeap=0x1f0000) returned 1 [0204.744] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226058 | out: hHeap=0x1f0000) returned 1 [0204.744] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0204.744] lstrcmpW (lpString1="WindowsPowerShell", lpString2=".") returned 1 [0204.744] lstrcmpW (lpString1="WindowsPowerShell", lpString2="..") returned 1 [0204.744] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22baf8 [0204.744] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x22bf15c | out: lpFindFileData=0x22bf15c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc0fdd55, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xfc0fdd55, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19f893cf, dwReserved1=0x190, cFileName="WindowsPowerShell", cAlternateFileName="WID5B1~1")) returned 0 [0204.745] FindClose (in: hFindFile=0x24ecc0 | out: hFindFile=0x24ecc0) returned 1 [0204.745] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233c00 [0204.745] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b30 [0204.745] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f1b8 [0204.745] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22bdb8 [0204.745] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\*", lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4aadd873, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24e6c0 [0204.746] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233c90 [0204.746] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x214a90 [0204.746] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233c90 | out: hHeap=0x1f0000) returned 1 [0204.746] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22bdb8 | out: hHeap=0x1f0000) returned 1 [0204.746] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0204.746] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4aadd873, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0204.746] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233c90 [0204.746] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x214c30 [0204.746] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233c90 | out: hHeap=0x1f0000) returned 1 [0204.746] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a90 | out: hHeap=0x1f0000) returned 1 [0204.747] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0204.747] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0204.747] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x4aab75fe, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0xa0417b85, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="DESIGNER", cAlternateFileName="")) returned 1 [0204.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a68 [0204.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233c90 [0204.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x214a90 [0204.747] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233c90 | out: hHeap=0x1f0000) returned 1 [0204.747] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c30 | out: hHeap=0x1f0000) returned 1 [0204.747] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a68 | out: hHeap=0x1f0000) returned 1 [0204.748] lstrcmpW (lpString1="DESIGNER", lpString2=".") returned 1 [0204.748] lstrcmpW (lpString1="DESIGNER", lpString2="..") returned 1 [0204.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x2051f0 [0204.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22bb50 [0204.748] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa04663f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="microsoft shared", cAlternateFileName="MICROS~1")) returned 1 [0204.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0204.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233c90 [0204.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214af8 [0204.748] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233c90 | out: hHeap=0x1f0000) returned 1 [0204.748] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a90 | out: hHeap=0x1f0000) returned 1 [0204.748] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0204.749] lstrcmpW (lpString1="microsoft shared", lpString2=".") returned 1 [0204.749] lstrcmpW (lpString1="microsoft shared", lpString2="..") returned 1 [0204.749] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0204.749] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a90 [0204.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2051f0 | out: hHeap=0x1f0000) returned 1 [0204.749] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c11068, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="Services", cAlternateFileName="")) returned 1 [0204.749] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609c8 [0204.749] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233df8 [0204.749] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x214c30 [0204.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233df8 | out: hHeap=0x1f0000) returned 1 [0204.750] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214af8 | out: hHeap=0x1f0000) returned 1 [0204.750] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609c8 | out: hHeap=0x1f0000) returned 1 [0204.750] lstrcmpW (lpString1="Services", lpString2=".") returned 1 [0204.750] lstrcmpW (lpString1="Services", lpString2="..") returned 1 [0204.750] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x48) returned 0x226148 [0204.750] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22bba8 [0204.750] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0204.750] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c5f95f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="System", cAlternateFileName="")) returned 1 [0204.750] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233c90 [0204.751] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x214af8 [0204.751] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233c90 | out: hHeap=0x1f0000) returned 1 [0204.751] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c30 | out: hHeap=0x1f0000) returned 1 [0204.751] lstrcmpW (lpString1="System", lpString2=".") returned 1 [0204.751] lstrcmpW (lpString1="System", lpString2="..") returned 1 [0204.751] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214b60 [0204.752] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22bc00 [0204.752] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226148 | out: hHeap=0x1f0000) returned 1 [0204.752] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c5f95f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="System", cAlternateFileName="")) returned 0 [0204.752] FindClose (in: hFindFile=0x24e6c0 | out: hFindFile=0x24e6c0) returned 1 [0204.752] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233c90 [0204.752] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b08 [0204.753] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d9d0 [0204.753] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c30 [0204.753] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\DESIGNER\\*", lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x4aab75fe, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0xa0417b85, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ec80 [0204.753] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x21f9e0 [0204.753] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c30 | out: hHeap=0x1f0000) returned 1 [0204.753] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0204.753] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x4aab75fe, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0xa0417b85, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0204.753] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x21ff28 [0204.753] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9e0 | out: hHeap=0x1f0000) returned 1 [0204.754] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0204.754] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0204.754] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c8c3a00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4aadd873, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5c8c3a00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x3e70, dwReserved0=0x2, dwReserved1=0x0, cFileName="MSADDNDR.OLB", cAlternateFileName="")) returned 1 [0204.754] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609c8 [0204.754] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2200c8 [0204.754] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220e20 [0204.754] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200c8 | out: hHeap=0x1f0000) returned 1 [0204.754] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ff28 | out: hHeap=0x1f0000) returned 1 [0204.754] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609c8 | out: hHeap=0x1f0000) returned 1 [0204.855] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB" (normalized: "c:\\program files\\common files\\designer\\msaddndr.olb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be73c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0204.855] GetFileType (hFile=0x218) returned 0x1 [0204.856] CloseHandle (hObject=0x218) returned 1 [0204.856] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a838 [0204.856] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB" (normalized: "c:\\program files\\common files\\designer\\msaddndr.olb"), fInfoLevelId=0x0, lpFileInformation=0x22be7dc | out: lpFileInformation=0x22be7dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c8c3a00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4aadd873, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5c8c3a00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x3e70)) returned 1 [0204.856] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a838 | out: hHeap=0x1f0000) returned 1 [0204.856] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a838 [0204.856] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a838 | out: hHeap=0x1f0000) returned 1 [0204.857] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c8c3a00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4aadd873, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5c8c3a00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x3e70, dwReserved0=0x2, dwReserved1=0x0, cFileName="MSADDNDR.OLB", cAlternateFileName="")) returned 0 [0204.857] FindClose (in: hFindFile=0x24ec80 | out: hFindFile=0x24ec80) returned 1 [0204.857] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0204.857] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d9d0 | out: hHeap=0x1f0000) returned 1 [0204.857] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b08 | out: hHeap=0x1f0000) returned 1 [0204.857] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233c90 | out: hHeap=0x1f0000) returned 1 [0204.857] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233c90 [0204.857] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b08 [0204.857] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d9d0 [0204.857] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a838 [0204.857] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\*", lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa04663f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e9c0 [0204.858] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ab08 [0204.858] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a838 | out: hHeap=0x1f0000) returned 1 [0204.858] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0204.858] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa04663f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0204.858] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a838 [0204.858] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab08 | out: hHeap=0x1f0000) returned 1 [0204.858] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0204.858] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0204.858] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbf6c42af, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x81028f76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x81028f76, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2, dwReserved1=0x0, cFileName="ClickToRun", cAlternateFileName="CLICKT~1")) returned 1 [0204.858] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c48 [0204.858] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ab08 [0204.858] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219478 [0204.858] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab08 | out: hHeap=0x1f0000) returned 1 [0204.859] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a838 | out: hHeap=0x1f0000) returned 1 [0204.859] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0204.859] lstrcmpW (lpString1="ClickToRun", lpString2=".") returned 1 [0204.859] lstrcmpW (lpString1="ClickToRun", lpString2="..") returned 1 [0204.859] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x205150 [0204.859] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229cf8 [0204.859] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb3e1c92c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb3e1c92c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2, dwReserved1=0x0, cFileName="ink", cAlternateFileName="")) returned 1 [0204.859] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22a838 [0204.859] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219478 | out: hHeap=0x1f0000) returned 1 [0204.859] lstrcmpW (lpString1="ink", lpString2=".") returned 1 [0204.859] lstrcmpW (lpString1="ink", lpString2="..") returned 1 [0204.859] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2f0 [0204.859] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x22ab08 [0204.859] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205150 | out: hHeap=0x1f0000) returned 1 [0204.860] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa098a4c6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71143a45, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2, dwReserved1=0x0, cFileName="MSInfo", cAlternateFileName="")) returned 1 [0204.860] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220058 [0204.860] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a838 | out: hHeap=0x1f0000) returned 1 [0204.860] lstrcmpW (lpString1="MSInfo", lpString2=".") returned 1 [0204.860] lstrcmpW (lpString1="MSInfo", lpString2="..") returned 1 [0204.860] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x48) returned 0x225e78 [0204.860] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f770 [0204.860] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0204.860] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd9f60362, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd9f60362, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2, dwReserved1=0x0, cFileName="OFFICE16", cAlternateFileName="")) returned 1 [0204.860] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609c8 [0204.860] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220580 [0204.860] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218978 [0204.861] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220580 | out: hHeap=0x1f0000) returned 1 [0204.861] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220058 | out: hHeap=0x1f0000) returned 1 [0204.861] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609c8 | out: hHeap=0x1f0000) returned 1 [0204.861] lstrcmpW (lpString1="OFFICE16", lpString2=".") returned 1 [0204.861] lstrcmpW (lpString1="OFFICE16", lpString2="..") returned 1 [0204.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c30 [0204.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a248 [0204.861] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225e78 | out: hHeap=0x1f0000) returned 1 [0204.861] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd99442a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd99442a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2, dwReserved1=0x0, cFileName="OfficeSoftwareProtectionPlatform", cAlternateFileName="OFFICE~1")) returned 1 [0204.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22bdb8 [0204.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220238 [0204.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x260ff0 [0204.861] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220238 | out: hHeap=0x1f0000) returned 1 [0204.862] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218978 | out: hHeap=0x1f0000) returned 1 [0204.862] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22bdb8 | out: hHeap=0x1f0000) returned 1 [0204.862] lstrcmpW (lpString1="OfficeSoftwareProtectionPlatform", lpString2=".") returned 1 [0204.862] lstrcmpW (lpString1="OfficeSoftwareProtectionPlatform", lpString2="..") returned 1 [0204.862] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0204.862] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2615b0 [0204.862] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c30 | out: hHeap=0x1f0000) returned 1 [0204.862] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4accd6e1, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4accd6e1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2, dwReserved1=0x0, cFileName="Source Engine", cAlternateFileName="SOURCE~1")) returned 1 [0204.862] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609f0 [0204.862] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fa40 [0204.862] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ce8 [0204.862] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fa40 | out: hHeap=0x1f0000) returned 1 [0204.862] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ff0 | out: hHeap=0x1f0000) returned 1 [0204.862] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609f0 | out: hHeap=0x1f0000) returned 1 [0204.862] lstrcmpW (lpString1="Source Engine", lpString2=".") returned 1 [0204.862] lstrcmpW (lpString1="Source Engine", lpString2="..") returned 1 [0204.863] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a028 [0204.863] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b5538f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2, dwReserved1=0x0, cFileName="Stationery", cAlternateFileName="STATIO~1")) returned 1 [0204.863] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609f0 [0204.863] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220328 [0204.863] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218b88 [0204.863] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220328 | out: hHeap=0x1f0000) returned 1 [0204.863] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ce8 | out: hHeap=0x1f0000) returned 1 [0204.863] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609f0 | out: hHeap=0x1f0000) returned 1 [0204.863] lstrcmpW (lpString1="Stationery", lpString2=".") returned 1 [0204.863] lstrcmpW (lpString1="Stationery", lpString2="..") returned 1 [0204.863] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd8) returned 0x229528 [0204.863] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229a50 [0204.863] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0204.864] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b56882, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2, dwReserved1=0x0, cFileName="TextConv", cAlternateFileName="")) returned 1 [0204.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c48 [0204.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f7e8 [0204.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ce8 [0204.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f7e8 | out: hHeap=0x1f0000) returned 1 [0204.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218b88 | out: hHeap=0x1f0000) returned 1 [0204.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0204.864] lstrcmpW (lpString1="TextConv", lpString2=".") returned 1 [0204.864] lstrcmpW (lpString1="TextConv", lpString2="..") returned 1 [0204.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a600 [0204.864] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b57d42, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2, dwReserved1=0x0, cFileName="Triedit", cAlternateFileName="")) returned 1 [0204.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220328 [0204.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ce8 | out: hHeap=0x1f0000) returned 1 [0204.864] lstrcmpW (lpString1="Triedit", lpString2=".") returned 1 [0204.864] lstrcmpW (lpString1="Triedit", lpString2="..") returned 1 [0204.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220238 [0204.864] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xbcd0fab8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xa0b594b8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2ce22546, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2, dwReserved1=0x0, cFileName="VC", cAlternateFileName="")) returned 1 [0204.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2203a0 [0204.865] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220328 | out: hHeap=0x1f0000) returned 1 [0204.865] lstrcmpW (lpString1="VC", lpString2=".") returned 1 [0204.865] lstrcmpW (lpString1="VC", lpString2="..") returned 1 [0204.865] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x138) returned 0x239be0 [0204.865] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fc20 [0204.865] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229528 | out: hHeap=0x1f0000) returned 1 [0204.865] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b59a78, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2, dwReserved1=0x0, cFileName="VGX", cAlternateFileName="")) returned 1 [0204.865] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0204.865] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2203a0 | out: hHeap=0x1f0000) returned 1 [0204.865] lstrcmpW (lpString1="VGX", lpString2=".") returned 1 [0204.865] lstrcmpW (lpString1="VGX", lpString2="..") returned 1 [0204.865] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fb30 [0204.865] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49ecb94e, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ae972f5, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2, dwReserved1=0x0, cFileName="VSTO", cAlternateFileName="")) returned 1 [0204.865] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2201c0 [0204.865] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0204.866] lstrcmpW (lpString1="VSTO", lpString2=".") returned 1 [0204.866] lstrcmpW (lpString1="VSTO", lpString2="..") returned 1 [0204.866] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220580 [0204.866] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49ecb94e, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ae972f5, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2, dwReserved1=0x0, cFileName="VSTO", cAlternateFileName="")) returned 0 [0204.866] FindClose (in: hFindFile=0x24e9c0 | out: hFindFile=0x24e9c0) returned 1 [0204.866] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233df8 [0204.866] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c48 [0204.866] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e1c8 [0204.866] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229ad8 [0204.866] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\*", lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbf6c42af, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x81028f76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x81028f76, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24e680 [0204.866] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a688 [0204.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229ad8 | out: hHeap=0x1f0000) returned 1 [0204.867] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0204.867] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbf6c42af, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x81028f76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x81028f76, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0204.867] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a2d0 [0204.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a688 | out: hHeap=0x1f0000) returned 1 [0204.867] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0204.867] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0204.867] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x809e6bf5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x809e6bf5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="api-ms-win-core-file-l1-2-0.dll", cAlternateFileName="API-MS~1.DLL")) returned 1 [0204.867] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233e40 [0204.867] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2299c8 [0204.867] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fce0 [0204.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2299c8 | out: hHeap=0x1f0000) returned 1 [0204.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a2d0 | out: hHeap=0x1f0000) returned 1 [0204.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233e40 | out: hHeap=0x1f0000) returned 1 [0204.867] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l1-2-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0204.868] GetFileType (hFile=0x218) returned 0x1 [0204.868] CloseHandle (hObject=0x218) returned 1 [0204.868] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x230190 [0204.868] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l1-2-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x809e6bf5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x809e6bf5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x48c0)) returned 1 [0204.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0204.868] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fe70 [0204.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0204.869] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x809e6bf5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x809e6bf5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="api-ms-win-core-file-l2-1-0.dll", cAlternateFileName="API-MS~2.DLL")) returned 1 [0204.869] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233e40 [0204.869] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2299c8 [0204.869] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fb50 [0204.869] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2299c8 | out: hHeap=0x1f0000) returned 1 [0204.869] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0204.869] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233e40 | out: hHeap=0x1f0000) returned 1 [0204.869] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l2-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l2-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0204.869] GetFileType (hFile=0x218) returned 0x1 [0204.870] CloseHandle (hObject=0x218) returned 1 [0204.870] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fda8 [0204.870] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l2-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l2-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x809e6bf5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x809e6bf5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x48c0)) returned 1 [0204.870] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0204.870] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x230320 [0204.870] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0204.870] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x52c0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="api-ms-win-core-localization-l1-2-0.dll", cAlternateFileName="API-MS~3.DLL")) returned 1 [0204.870] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22bdb8 [0204.870] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2299c8 [0204.870] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x2007c8 [0204.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2299c8 | out: hHeap=0x1f0000) returned 1 [0204.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0204.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22bdb8 | out: hHeap=0x1f0000) returned 1 [0204.871] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-localization-l1-2-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0204.871] GetFileType (hFile=0x218) returned 0x1 [0204.871] CloseHandle (hObject=0x218) returned 1 [0204.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x2008a0 [0204.872] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-localization-l1-2-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x52c0)) returned 1 [0204.872] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2008a0 | out: hHeap=0x1f0000) returned 1 [0204.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x2008a0 [0204.872] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2008a0 | out: hHeap=0x1f0000) returned 1 [0204.872] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="api-ms-win-core-processthreads-l1-1-1.dll", cAlternateFileName="API-MS~4.DLL")) returned 1 [0204.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c30 [0204.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a688 [0204.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x2008a0 [0204.872] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a688 | out: hHeap=0x1f0000) returned 1 [0204.872] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2007c8 | out: hHeap=0x1f0000) returned 1 [0204.872] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c30 | out: hHeap=0x1f0000) returned 1 [0204.873] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-processthreads-l1-1-1.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0204.873] GetFileType (hFile=0x218) returned 0x1 [0204.873] CloseHandle (hObject=0x218) returned 1 [0204.874] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x2007c8 [0204.874] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-processthreads-l1-1-1.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0)) returned 1 [0204.874] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2007c8 | out: hHeap=0x1f0000) returned 1 [0204.874] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x2007c8 [0204.874] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2007c8 | out: hHeap=0x1f0000) returned 1 [0204.874] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="api-ms-win-core-synch-l1-2-0.dll", cAlternateFileName="APF10C~1.DLL")) returned 1 [0204.874] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22bdb8 [0204.874] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2299c8 [0204.874] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fb50 [0204.874] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2299c8 | out: hHeap=0x1f0000) returned 1 [0204.874] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2008a0 | out: hHeap=0x1f0000) returned 1 [0204.874] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22bdb8 | out: hHeap=0x1f0000) returned 1 [0204.875] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-synch-l1-2-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0204.875] GetFileType (hFile=0x218) returned 0x1 [0204.875] CloseHandle (hObject=0x218) returned 1 [0204.875] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fce0 [0204.875] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-synch-l1-2-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0)) returned 1 [0204.876] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0204.876] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22ff38 [0204.876] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0204.876] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="api-ms-win-core-timezone-l1-1-0.dll", cAlternateFileName="AP7902~1.DLL")) returned 1 [0204.876] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22bdb8 [0204.876] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a688 [0204.876] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x230320 [0204.876] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a688 | out: hHeap=0x1f0000) returned 1 [0204.876] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0204.876] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22bdb8 | out: hHeap=0x1f0000) returned 1 [0204.877] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-timezone-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-timezone-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0204.877] GetFileType (hFile=0x218) returned 0x1 [0204.877] CloseHandle (hObject=0x218) returned 1 [0204.878] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x2303e8 [0204.878] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-timezone-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-timezone-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x48c0)) returned 1 [0204.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0204.878] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x2303e8 [0204.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0204.878] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x2d60, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="api-ms-win-core-xstate-l2-1-0.dll", cAlternateFileName="APA632~1.DLL")) returned 1 [0204.878] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22bdb8 [0204.878] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a0b0 [0204.878] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f9c0 [0204.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a0b0 | out: hHeap=0x1f0000) returned 1 [0204.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0204.879] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22bdb8 | out: hHeap=0x1f0000) returned 1 [0204.879] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-xstate-l2-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-xstate-l2-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0204.879] GetFileType (hFile=0x218) returned 0x1 [0204.879] CloseHandle (hObject=0x218) returned 1 [0204.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x2303e8 [0204.880] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-xstate-l2-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-xstate-l2-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x2d60)) returned 1 [0204.880] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0204.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f768 [0204.880] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0204.880] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="api-ms-win-crt-conio-l1-1-0.dll", cAlternateFileName="AP5C76~1.DLL")) returned 1 [0204.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233e40 [0204.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a2d0 [0204.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x230190 [0204.880] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a2d0 | out: hHeap=0x1f0000) returned 1 [0204.880] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0204.881] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233e40 | out: hHeap=0x1f0000) returned 1 [0204.881] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-conio-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-conio-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0204.881] GetFileType (hFile=0x218) returned 0x1 [0204.881] CloseHandle (hObject=0x218) returned 1 [0204.881] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fda8 [0204.881] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-conio-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-conio-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0)) returned 1 [0204.882] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0204.882] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fe70 [0204.882] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0204.882] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x58c0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="api-ms-win-crt-convert-l1-1-0.dll", cAlternateFileName="APFD9C~1.DLL")) returned 1 [0204.882] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22bdb8 [0204.882] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2299c8 [0204.882] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x2300c8 [0204.882] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2299c8 | out: hHeap=0x1f0000) returned 1 [0204.882] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0204.882] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22bdb8 | out: hHeap=0x1f0000) returned 1 [0204.882] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-convert-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0204.882] GetFileType (hFile=0x218) returned 0x1 [0204.882] CloseHandle (hObject=0x218) returned 1 [0204.882] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x230320 [0204.883] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-convert-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x58c0)) returned 1 [0204.883] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0204.883] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f6a0 [0204.883] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0204.883] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="api-ms-win-crt-environment-l1-1-0.dll", cAlternateFileName="APC00F~1.DLL")) returned 1 [0204.883] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22bec0 [0204.883] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229ad8 [0204.883] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x2007c8 [0204.883] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229ad8 | out: hHeap=0x1f0000) returned 1 [0204.883] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0204.883] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22bec0 | out: hHeap=0x1f0000) returned 1 [0204.883] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-environment-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0204.884] GetFileType (hFile=0x218) returned 0x1 [0204.884] CloseHandle (hObject=0x218) returned 1 [0204.884] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x2008a0 [0204.884] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-environment-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0)) returned 1 [0204.884] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2008a0 | out: hHeap=0x1f0000) returned 1 [0204.884] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x2008a0 [0204.884] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2008a0 | out: hHeap=0x1f0000) returned 1 [0204.884] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x50c0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="api-ms-win-crt-filesystem-l1-1-0.dll", cAlternateFileName="AP0479~1.DLL")) returned 1 [0204.884] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22bdb8 [0204.884] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a688 [0204.884] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fa88 [0204.885] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a688 | out: hHeap=0x1f0000) returned 1 [0204.885] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2007c8 | out: hHeap=0x1f0000) returned 1 [0204.885] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22bdb8 | out: hHeap=0x1f0000) returned 1 [0204.885] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-filesystem-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-filesystem-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0204.885] GetFileType (hFile=0x218) returned 0x1 [0204.885] CloseHandle (hObject=0x218) returned 1 [0204.885] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22ff38 [0204.885] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-filesystem-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-filesystem-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x50c0)) returned 1 [0204.885] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0204.885] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fc18 [0204.886] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0204.886] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="api-ms-win-crt-heap-l1-1-0.dll", cAlternateFileName="AP23C9~1.DLL")) returned 1 [0204.886] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233e40 [0204.886] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229d80 [0204.886] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f5d8 [0204.886] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229d80 | out: hHeap=0x1f0000) returned 1 [0204.886] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0204.886] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233e40 | out: hHeap=0x1f0000) returned 1 [0204.886] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-heap-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-heap-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0204.886] GetFileType (hFile=0x218) returned 0x1 [0204.887] CloseHandle (hObject=0x218) returned 1 [0204.887] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x230190 [0204.887] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-heap-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-heap-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0)) returned 1 [0204.887] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0204.887] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fda8 [0204.887] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0204.887] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="api-ms-win-crt-locale-l1-1-0.dll", cAlternateFileName="APCB40~1.DLL")) returned 1 [0204.887] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22bdb8 [0204.887] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a688 [0204.888] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x230000 [0204.888] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a688 | out: hHeap=0x1f0000) returned 1 [0204.888] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0204.888] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22bdb8 | out: hHeap=0x1f0000) returned 1 [0204.888] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-locale-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-locale-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0204.888] GetFileType (hFile=0x218) returned 0x1 [0204.889] CloseHandle (hObject=0x218) returned 1 [0204.889] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fce0 [0204.889] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-locale-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-locale-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0)) returned 1 [0204.889] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0204.889] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f6a0 [0204.889] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0204.889] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x6cc0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="api-ms-win-crt-math-l1-1-0.dll", cAlternateFileName="APAE51~1.DLL")) returned 1 [0204.889] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233e40 [0204.889] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a688 [0204.889] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x2300c8 [0204.889] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a688 | out: hHeap=0x1f0000) returned 1 [0204.889] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0204.889] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233e40 | out: hHeap=0x1f0000) returned 1 [0204.890] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-math-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-math-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0204.890] GetFileType (hFile=0x218) returned 0x1 [0204.890] CloseHandle (hObject=0x218) returned 1 [0204.890] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x230190 [0204.891] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-math-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-math-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x6cc0)) returned 1 [0204.891] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0204.891] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f768 [0204.891] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0204.891] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x68c0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="api-ms-win-crt-multibyte-l1-1-0.dll", cAlternateFileName="AP972F~1.DLL")) returned 1 [0204.891] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22bdb8 [0204.891] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2299c8 [0204.891] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x230320 [0204.891] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2299c8 | out: hHeap=0x1f0000) returned 1 [0204.891] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0204.891] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22bdb8 | out: hHeap=0x1f0000) returned 1 [0204.892] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-multibyte-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-multibyte-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0205.289] GetFileType (hFile=0x218) returned 0x1 [0205.289] CloseHandle (hObject=0x218) returned 1 [0205.290] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f6a0 [0205.290] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-multibyte-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-multibyte-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x68c0)) returned 1 [0205.290] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0205.290] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f768 [0205.290] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0205.290] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x114c0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="api-ms-win-crt-private-l1-1-0.dll", cAlternateFileName="AP7D9E~1.DLL")) returned 1 [0205.290] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22bec0 [0205.291] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2299c8 [0205.291] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f510 [0205.291] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2299c8 | out: hHeap=0x1f0000) returned 1 [0205.291] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0205.291] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22bec0 | out: hHeap=0x1f0000) returned 1 [0205.292] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-private-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-private-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0205.292] GetFileType (hFile=0x218) returned 0x1 [0205.293] CloseHandle (hObject=0x218) returned 1 [0205.293] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22ff38 [0205.293] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-private-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-private-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x114c0)) returned 1 [0205.294] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0205.294] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f9c0 [0205.294] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0205.294] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="api-ms-win-crt-process-l1-1-0.dll", cAlternateFileName="APFCAD~1.DLL")) returned 1 [0205.294] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22bec0 [0205.294] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a688 [0205.294] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x230320 [0205.294] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a688 | out: hHeap=0x1f0000) returned 1 [0205.295] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0205.295] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22bec0 | out: hHeap=0x1f0000) returned 1 [0205.295] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-process-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-process-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0205.295] GetFileType (hFile=0x218) returned 0x1 [0205.296] CloseHandle (hObject=0x218) returned 1 [0205.296] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f830 [0205.296] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-process-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-process-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0)) returned 1 [0205.296] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0205.297] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fc18 [0205.297] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0205.297] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x5ac0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="api-ms-win-crt-runtime-l1-1-0.dll", cAlternateFileName="AP8F34~1.DLL")) returned 1 [0205.297] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22bec0 [0205.297] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a688 [0205.297] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f8f8 [0205.297] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a688 | out: hHeap=0x1f0000) returned 1 [0205.297] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0205.297] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22bec0 | out: hHeap=0x1f0000) returned 1 [0205.297] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-runtime-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-runtime-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0205.298] GetFileType (hFile=0x218) returned 0x1 [0205.298] CloseHandle (hObject=0x218) returned 1 [0205.298] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f5d8 [0205.298] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-runtime-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-runtime-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x5ac0)) returned 1 [0205.299] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0205.299] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fb50 [0205.299] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0205.299] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x60c0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="api-ms-win-crt-stdio-l1-1-0.dll", cAlternateFileName="APD1B7~1.DLL")) returned 1 [0205.299] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234500 [0205.299] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a688 [0205.299] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fb50 [0205.299] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a688 | out: hHeap=0x1f0000) returned 1 [0205.299] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0205.299] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234500 | out: hHeap=0x1f0000) returned 1 [0205.299] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-stdio-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-stdio-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0205.299] GetFileType (hFile=0x218) returned 0x1 [0205.300] CloseHandle (hObject=0x218) returned 1 [0205.300] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f5d8 [0205.300] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-stdio-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-stdio-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x60c0)) returned 1 [0205.300] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0205.300] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x230190 [0205.300] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0205.300] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x60c0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="api-ms-win-crt-string-l1-1-0.dll", cAlternateFileName="APBF0F~1.DLL")) returned 1 [0205.300] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22bec0 [0205.300] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229ad8 [0205.301] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f830 [0205.301] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229ad8 | out: hHeap=0x1f0000) returned 1 [0205.301] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0205.301] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22bec0 | out: hHeap=0x1f0000) returned 1 [0205.301] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-string-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-string-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0205.301] GetFileType (hFile=0x218) returned 0x1 [0205.301] CloseHandle (hObject=0x218) returned 1 [0205.302] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x230000 [0205.302] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-string-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-string-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x60c0)) returned 1 [0205.302] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0205.302] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x230190 [0205.302] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0205.302] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x52c0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="api-ms-win-crt-time-l1-1-0.dll", cAlternateFileName="AP5E4C~1.DLL")) returned 1 [0205.302] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234590 [0205.302] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a688 [0205.302] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fe70 [0205.302] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a688 | out: hHeap=0x1f0000) returned 1 [0205.302] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0205.302] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234590 | out: hHeap=0x1f0000) returned 1 [0205.303] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-time-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-time-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0205.303] GetFileType (hFile=0x218) returned 0x1 [0205.303] CloseHandle (hObject=0x218) returned 1 [0205.303] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x230258 [0205.303] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-time-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-time-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x52c0)) returned 1 [0205.303] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0205.303] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x230000 [0205.303] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0205.304] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="api-ms-win-crt-utility-l1-1-0.dll", cAlternateFileName="AP80F4~1.DLL")) returned 1 [0205.304] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22bec0 [0205.304] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a2d0 [0205.304] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x230258 [0205.304] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a2d0 | out: hHeap=0x1f0000) returned 1 [0205.304] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0205.304] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22bec0 | out: hHeap=0x1f0000) returned 1 [0205.304] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-utility-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-utility-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0205.304] GetFileType (hFile=0x218) returned 0x1 [0205.305] CloseHandle (hObject=0x218) returned 1 [0205.305] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fda8 [0205.305] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-utility-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-utility-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0)) returned 1 [0205.305] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0205.305] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x230320 [0205.305] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0205.305] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb979f700, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x27c40, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="ApiClient.dll", cAlternateFileName="APICLI~1.DLL")) returned 1 [0205.305] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260770 [0205.305] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a2d0 [0205.305] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0205.305] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a2d0 | out: hHeap=0x1f0000) returned 1 [0205.305] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0205.305] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0205.306] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ApiClient.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\apiclient.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0205.306] GetLastError () returned 0x20 [0205.306] GetLastError () returned 0x20 [0205.306] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9bc01200, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0xa02d8, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="AppVCatalog.dll", cAlternateFileName="APPVCA~1.DLL")) returned 1 [0205.306] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605b8 [0205.306] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a688 [0205.306] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0205.306] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a688 | out: hHeap=0x1f0000) returned 1 [0205.306] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0205.307] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0205.307] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVCatalog.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvcatalog.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0205.307] GetLastError () returned 0x20 [0205.307] GetLastError () returned 0x20 [0205.307] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x1f5ad8, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="appvcleaner.exe", cAlternateFileName="APPVCL~1.EXE")) returned 1 [0205.307] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604c8 [0205.307] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229d80 [0205.307] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0205.307] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229d80 | out: hHeap=0x1f0000) returned 1 [0205.308] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0205.308] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604c8 | out: hHeap=0x1f0000) returned 1 [0205.308] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\appvcleaner.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvcleaner.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0205.308] GetFileType (hFile=0x218) returned 0x1 [0205.308] CloseHandle (hObject=0x218) returned 1 [0205.309] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21aab8 [0205.309] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\appvcleaner.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvcleaner.exe"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x1f5ad8)) returned 1 [0205.309] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21aab8 | out: hHeap=0x1f0000) returned 1 [0205.309] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a380 [0205.309] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a380 | out: hHeap=0x1f0000) returned 1 [0205.309] GetLastError () returned 0x0 [0205.309] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a330a6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a330a6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x4b0d8, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="AppVFileSystemMetadata.dll", cAlternateFileName="APPVFI~1.DLL")) returned 1 [0205.627] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346b0 [0205.627] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f10 [0205.627] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0205.627] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f10 | out: hHeap=0x1f0000) returned 1 [0205.627] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0205.627] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346b0 | out: hHeap=0x1f0000) returned 1 [0205.628] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVFileSystemMetadata.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvfilesystemmetadata.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0205.628] GetLastError () returned 0x20 [0205.628] GetLastError () returned 0x20 [0205.628] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a330a6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a330a6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x2052d8, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="AppVIntegration.dll", cAlternateFileName="APPVIN~1.DLL")) returned 1 [0205.628] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0205.629] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213570 [0205.629] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0205.629] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213570 | out: hHeap=0x1f0000) returned 1 [0205.629] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0205.629] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0205.630] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIntegration.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvintegration.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0205.630] GetLastError () returned 0x20 [0205.630] GetLastError () returned 0x20 [0205.630] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a59305, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a59305, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x726d8, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="AppVIsvApi.dll", cAlternateFileName="APPVIS~1.DLL")) returned 1 [0205.631] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260540 [0205.631] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213570 [0205.631] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0205.631] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213570 | out: hHeap=0x1f0000) returned 1 [0205.631] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0205.631] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0205.632] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvApi.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvapi.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0205.632] GetLastError () returned 0x20 [0205.632] GetLastError () returned 0x20 [0205.633] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a7f55d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a7f55d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe1b7300, ftLastWriteTime.dwHighDateTime=0x1d0d7a5, nFileSizeHigh=0x0, nFileSizeLow=0x60ea0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="AppvIsvStream32.dll", cAlternateFileName="APPVIS~2.DLL")) returned 1 [0205.633] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0205.633] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213570 [0205.633] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0205.633] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213570 | out: hHeap=0x1f0000) returned 1 [0205.633] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0205.633] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0205.634] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream32.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0205.635] GetFileType (hFile=0x218) returned 0x1 [0205.635] CloseHandle (hObject=0x218) returned 1 [0205.636] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a380 [0205.636] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream32.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a7f55d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a7f55d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe1b7300, ftLastWriteTime.dwHighDateTime=0x1d0d7a5, nFileSizeHigh=0x0, nFileSizeLow=0x60ea0)) returned 1 [0205.636] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a380 | out: hHeap=0x1f0000) returned 1 [0205.636] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219e40 [0205.636] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219e40 | out: hHeap=0x1f0000) returned 1 [0205.636] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc40ccad7, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xc40ccad7, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xc40ccad7, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="AppvIsvStream32.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="APPVIS~1.ODV")) returned 1 [0205.636] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261388 [0205.637] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2135f8 [0205.637] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120) returned 0x211048 [0205.637] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2135f8 | out: hHeap=0x1f0000) returned 1 [0205.637] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0205.637] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261388 | out: hHeap=0x1f0000) returned 1 [0205.638] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream32.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream32.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0205.639] GetFileType (hFile=0x218) returned 0x1 [0205.639] CloseHandle (hObject=0x218) returned 1 [0205.640] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120) returned 0x211170 [0205.640] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream32.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream32.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc40ccad7, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xc40ccad7, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xc40ccad7, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0205.640] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0205.640] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120) returned 0x210708 [0205.640] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0205.640] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a7f55d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a7f55d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb5e67000, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x73aa0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="AppvIsvStream64.dll", cAlternateFileName="APPVIS~3.DLL")) returned 1 [0205.640] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0205.641] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0205.641] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0205.641] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0205.641] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0205.641] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0205.642] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream64.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0205.642] GetFileType (hFile=0x218) returned 0x1 [0205.643] CloseHandle (hObject=0x218) returned 1 [0205.643] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219cf0 [0205.643] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream64.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a7f55d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a7f55d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb5e67000, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x73aa0)) returned 1 [0205.643] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219cf0 | out: hHeap=0x1f0000) returned 1 [0205.643] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219e40 [0205.644] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219e40 | out: hHeap=0x1f0000) returned 1 [0205.644] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a7f55d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a7f55d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x336d8, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="AppVIsvStreamingManager.dll", cAlternateFileName="APPVIS~4.DLL")) returned 1 [0205.644] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2348f0 [0205.644] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213570 [0205.644] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0205.644] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213570 | out: hHeap=0x1f0000) returned 1 [0205.644] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0205.644] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2348f0 | out: hHeap=0x1f0000) returned 1 [0205.645] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvStreamingManager.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstreamingmanager.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0205.645] GetLastError () returned 0x20 [0205.645] GetLastError () returned 0x20 [0205.645] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80aa57b9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80aa57b9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x1566d8, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="AppVIsvSubsystemController.dll", cAlternateFileName="AP213A~1.DLL")) returned 1 [0205.645] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2344b8 [0205.646] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213570 [0205.646] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fc18 [0205.646] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213570 | out: hHeap=0x1f0000) returned 1 [0205.646] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0205.646] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2344b8 | out: hHeap=0x1f0000) returned 1 [0205.646] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvSubsystemController.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystemcontroller.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0205.647] GetLastError () returned 0x20 [0205.647] GetLastError () returned 0x20 [0205.647] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80aa57b9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80aa57b9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x18d60800, ftLastWriteTime.dwHighDateTime=0x1d0d7a5, nFileSizeHigh=0x0, nFileSizeLow=0x1ae0a8, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="AppvIsvSubsystems32.dll", cAlternateFileName="AP3342~1.DLL")) returned 1 [0205.647] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0205.647] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212be0 [0205.647] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0205.647] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212be0 | out: hHeap=0x1f0000) returned 1 [0205.648] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0205.648] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0205.648] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems32.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0205.649] GetFileType (hFile=0x218) returned 0x1 [0205.649] CloseHandle (hObject=0x218) returned 1 [0205.649] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261388 [0205.649] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems32.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80aa57b9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80aa57b9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x18d60800, ftLastWriteTime.dwHighDateTime=0x1d0d7a5, nFileSizeHigh=0x0, nFileSizeLow=0x1ae0a8)) returned 1 [0205.650] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261388 | out: hHeap=0x1f0000) returned 1 [0205.650] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2614f8 [0205.650] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2614f8 | out: hHeap=0x1f0000) returned 1 [0205.650] GetLastError () returned 0x0 [0205.650] CryptAcquireContextA (in: phProv=0x2293e98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2293e98*=0x213570) returned 1 [0205.654] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x260928 | out: pbBuffer=0x260928) returned 1 [0205.654] CryptReleaseContext (hProv=0x213570, dwFlags=0x0) returned 1 [0205.654] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0205.654] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x258298 [0205.654] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x229528 [0205.654] QueryPerformanceCounter (in: lpPerformanceCount=0x2293e2c | out: lpPerformanceCount=0x2293e2c*=36302345996) returned 1 [0205.655] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x2293e6c | out: lpSystemTimeAsFileTime=0x2293e6c) [0205.655] QueryPerformanceCounter (in: lpPerformanceCount=0x2293e2c | out: lpPerformanceCount=0x2293e2c*=36302380478) returned 1 [0205.655] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x2293e6c | out: lpSystemTimeAsFileTime=0x2293e6c) [0205.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x21cf70 [0205.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x251068 [0205.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x20d888 [0205.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x24f6a8 [0205.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffb8 [0205.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206688 [0205.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20fef8 [0205.656] GetLastError () returned 0x0 [0205.656] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems32.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x2293dfc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0205.656] GetFileType (hFile=0x218) returned 0x1 [0205.656] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2293e68 | out: lpNewFilePointer=0x0) returned 1 [0205.657] ReadFile (in: hFile=0x218, lpBuffer=0x22a9368, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x2293e40, lpOverlapped=0x0 | out: lpBuffer=0x22a9368*, lpNumberOfBytesRead=0x2293e40*=0x14000, lpOverlapped=0x0) returned 1 [0205.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x23ddc8 [0205.973] ReadFile (in: hFile=0x218, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2293de4, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x2293de4*=0x1000, lpOverlapped=0x0) returned 1 [0206.339] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2293e70 | out: lpNewFilePointer=0x0) returned 1 [0206.339] WriteFile (in: hFile=0x218, lpBuffer=0x2294378*, nNumberOfBytesToWrite=0x14000, lpNumberOfBytesWritten=0x2293ddc, lpOverlapped=0x0 | out: lpBuffer=0x2294378*, lpNumberOfBytesWritten=0x2293ddc*=0x14000, lpOverlapped=0x0) returned 1 [0206.341] WriteFile (in: hFile=0x218, lpBuffer=0x23ddc8*, nNumberOfBytesToWrite=0xff0, lpNumberOfBytesWritten=0x2293e08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesWritten=0x2293e08*=0xff0, lpOverlapped=0x0) returned 1 [0206.341] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x15f90, lpNewFilePointer=0x0, dwMoveMethod=0x2293e50 | out: lpNewFilePointer=0x0) returned 1 [0206.341] ReadFile (in: hFile=0x218, lpBuffer=0x22a9368, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x2293e28, lpOverlapped=0x0 | out: lpBuffer=0x22a9368*, lpNumberOfBytesRead=0x2293e28*=0x14000, lpOverlapped=0x0) returned 1 [0206.342] ReadFile (in: hFile=0x218, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2293dcc, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x2293dcc*=0x1000, lpOverlapped=0x0) returned 1 [0206.342] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x15f90, lpNewFilePointer=0x0, dwMoveMethod=0x2293e70 | out: lpNewFilePointer=0x0) returned 1 [0206.343] WriteFile (in: hFile=0x218, lpBuffer=0x2294378*, nNumberOfBytesToWrite=0x14000, lpNumberOfBytesWritten=0x2293ddc, lpOverlapped=0x0 | out: lpBuffer=0x2294378*, lpNumberOfBytesWritten=0x2293ddc*=0x14000, lpOverlapped=0x0) returned 1 [0206.343] WriteFile (in: hFile=0x218, lpBuffer=0x23ddc8*, nNumberOfBytesToWrite=0xff0, lpNumberOfBytesWritten=0x2293e08, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesWritten=0x2293e08*=0xff0, lpOverlapped=0x0) returned 1 [0206.344] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0xdbba0, lpNewFilePointer=0x0, dwMoveMethod=0x2293e50 | out: lpNewFilePointer=0x0) returned 1 [0206.344] ReadFile (in: hFile=0x218, lpBuffer=0x22a9368, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x2293e28, lpOverlapped=0x0 | out: lpBuffer=0x22a9368*, lpNumberOfBytesRead=0x2293e28*=0x14000, lpOverlapped=0x0) returned 1 [0206.348] ReadFile (in: hFile=0x218, lpBuffer=0x23ddc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2293dcc, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesRead=0x2293dcc*=0x1000, lpOverlapped=0x0) returned 1 [0206.350] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0xdbba0, lpNewFilePointer=0x0, dwMoveMethod=0x2293e70 | out: lpNewFilePointer=0x0) returned 1 [0206.350] WriteFile (in: hFile=0x218, lpBuffer=0x2294378*, nNumberOfBytesToWrite=0x14000, lpNumberOfBytesWritten=0x2293ddc, lpOverlapped=0x0 | out: lpBuffer=0x2294378*, lpNumberOfBytesWritten=0x2293ddc*=0x14000, lpOverlapped=0x0) returned 1 [0206.351] WriteFile (in: hFile=0x218, lpBuffer=0x23ddc8*, nNumberOfBytesToWrite=0xff0, lpNumberOfBytesWritten=0x2293e58, lpOverlapped=0x0 | out: lpBuffer=0x23ddc8*, lpNumberOfBytesWritten=0x2293e58*=0xff0, lpOverlapped=0x0) returned 1 [0206.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x23ddc8 | out: hHeap=0x1f0000) returned 1 [0206.351] CloseHandle (hObject=0x218) returned 1 [0207.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234ae8 [0207.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260978 [0207.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2605e0 [0207.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x234500 [0207.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ff0 [0207.545] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205150 [0207.545] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x21c440 [0207.545] GetLastError () returned 0x0 [0207.545] CryptAcquireContextA (in: phProv=0x2293e98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2293e98*=0x2124f8) returned 1 [0207.548] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x260518 | out: pbBuffer=0x260518) returned 1 [0207.548] CryptReleaseContext (hProv=0x2124f8, dwFlags=0x0) returned 1 [0207.548] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0207.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260978 [0207.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260888 [0207.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0207.548] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0207.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0207.549] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0207.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2640f8 [0207.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2026d0 [0207.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x236058 [0207.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260978 [0207.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x230c10 [0207.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ff0 [0207.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2358a0 [0207.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260540 [0207.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x230e20 [0207.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c490 [0207.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260518 [0207.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2026e8 [0207.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c4c0 [0207.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0207.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x238a80 [0207.549] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a80 | out: hHeap=0x1f0000) returned 1 [0207.550] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0207.550] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c4c0 | out: hHeap=0x1f0000) returned 1 [0207.550] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2026e8 | out: hHeap=0x1f0000) returned 1 [0207.550] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0207.550] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c490 | out: hHeap=0x1f0000) returned 1 [0207.550] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230e20 | out: hHeap=0x1f0000) returned 1 [0207.550] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0207.550] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2358a0 | out: hHeap=0x1f0000) returned 1 [0207.550] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x227ee8 [0207.550] GetLastError () returned 0x0 [0207.550] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x2293a28 | out: lpSystemTimeAsFileTime=0x2293a28) [0207.550] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x21c490 [0207.551] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260518 [0207.551] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205150 [0207.551] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205150 | out: hHeap=0x1f0000) returned 1 [0207.551] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0207.551] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0207.551] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205150 [0207.551] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205150 | out: hHeap=0x1f0000) returned 1 [0207.551] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0207.551] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c490 | out: hHeap=0x1f0000) returned 1 [0207.551] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0207.551] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238b58 [0207.551] GetLastError () returned 0x0 [0207.552] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems32.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2293d98, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0207.552] GetFileType (hFile=0x1d8) returned 0x1 [0207.552] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x247e18 [0207.552] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2293d20 | out: lpNewFilePointer=0x0) returned 1 [0207.553] GetLastError () returned 0xb7 [0207.553] CloseHandle (hObject=0x1d8) returned 1 [0207.553] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x2300c8 [0207.553] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x11e) returned 0x2104b8 [0207.553] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0207.553] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1ac) returned 0x2366d8 [0207.553] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0207.554] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems32.dll"), lpNewFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems32.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems32.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwFlags=0x2) returned 1 [0207.560] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0207.560] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c4c0 | out: hHeap=0x1f0000) returned 1 [0207.560] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c490 | out: hHeap=0x1f0000) returned 1 [0207.560] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230e20 | out: hHeap=0x1f0000) returned 1 [0207.560] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230c10 | out: hHeap=0x1f0000) returned 1 [0207.560] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0207.560] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ff0 | out: hHeap=0x1f0000) returned 1 [0207.560] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236058 | out: hHeap=0x1f0000) returned 1 [0207.560] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2026d0 | out: hHeap=0x1f0000) returned 1 [0207.560] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2640f8 | out: hHeap=0x1f0000) returned 1 [0207.560] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223cf8 | out: hHeap=0x1f0000) returned 1 [0207.561] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0207.561] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0207.561] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2688a0 | out: hHeap=0x1f0000) returned 1 [0207.561] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2244a0 | out: hHeap=0x1f0000) returned 1 [0207.561] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0207.561] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c440 | out: hHeap=0x1f0000) returned 1 [0207.561] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0207.561] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608b0 | out: hHeap=0x1f0000) returned 1 [0207.561] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c470 | out: hHeap=0x1f0000) returned 1 [0207.561] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0207.561] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0207.561] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c450 | out: hHeap=0x1f0000) returned 1 [0207.562] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230d18 | out: hHeap=0x1f0000) returned 1 [0207.562] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0207.562] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235e50 | out: hHeap=0x1f0000) returned 1 [0207.562] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234500 | out: hHeap=0x1f0000) returned 1 [0207.562] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605e0 | out: hHeap=0x1f0000) returned 1 [0207.562] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0207.562] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234ae8 | out: hHeap=0x1f0000) returned 1 [0207.562] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x251068 | out: hHeap=0x1f0000) returned 1 [0207.562] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20d888 | out: hHeap=0x1f0000) returned 1 [0207.562] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206688 | out: hHeap=0x1f0000) returned 1 [0207.562] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20fef8 | out: hHeap=0x1f0000) returned 1 [0207.562] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffb8 | out: hHeap=0x1f0000) returned 1 [0207.562] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f6a8 | out: hHeap=0x1f0000) returned 1 [0207.562] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x258298 | out: hHeap=0x1f0000) returned 1 [0207.562] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229528 | out: hHeap=0x1f0000) returned 1 [0207.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0207.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2610a8 | out: hHeap=0x1f0000) returned 1 [0207.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227388 | out: hHeap=0x1f0000) returned 1 [0207.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b30 | out: hHeap=0x1f0000) returned 1 [0207.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604c8 | out: hHeap=0x1f0000) returned 1 [0207.563] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80acba0b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80acba0b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbbdc5100, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x22e0a8, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="AppvIsvSubsystems64.dll", cAlternateFileName="AP4400~1.DLL")) returned 1 [0207.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0207.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212718 [0207.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0207.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212718 | out: hHeap=0x1f0000) returned 1 [0207.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0207.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0207.564] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems64.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0207.564] GetFileType (hFile=0x1d8) returned 0x1 [0207.564] CloseHandle (hObject=0x1d8) returned 1 [0207.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x262210 [0207.564] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems64.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80acba0b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80acba0b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbbdc5100, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x22e0a8)) returned 1 [0207.565] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262210 | out: hHeap=0x1f0000) returned 1 [0207.565] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2627d0 [0207.565] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2627d0 | out: hHeap=0x1f0000) returned 1 [0207.565] GetLastError () returned 0x0 [0207.565] CryptAcquireContextA (in: phProv=0x2293e98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2293e98*=0x2129c0) returned 1 [0207.568] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x260978 | out: pbBuffer=0x260978) returned 1 [0207.568] CryptReleaseContext (hProv=0x2129c0, dwFlags=0x0) returned 1 [0207.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0207.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x26c1b8 [0207.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x224a18 [0207.568] QueryPerformanceCounter (in: lpPerformanceCount=0x2293e2c | out: lpPerformanceCount=0x2293e2c*=36493737992) returned 1 [0207.569] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x2293e6c | out: lpSystemTimeAsFileTime=0x2293e6c) [0207.569] QueryPerformanceCounter (in: lpPerformanceCount=0x2293e2c | out: lpPerformanceCount=0x2293e2c*=36493757732) returned 1 [0207.569] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x2293e6c | out: lpSystemTimeAsFileTime=0x2293e6c) [0207.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x21d050 [0207.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x26d4c0 [0207.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x223cf8 [0207.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x24f6a8 [0207.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2026d0 [0207.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206868 [0207.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2026e8 [0207.569] GetLastError () returned 0x0 [0207.569] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems64.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x2293dfc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0207.570] GetFileType (hFile=0x1d8) returned 0x1 [0207.570] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2293e68 | out: lpNewFilePointer=0x0) returned 1 [0207.571] ReadFile (in: hFile=0x1d8, lpBuffer=0x22a9368, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x2293e40, lpOverlapped=0x0 | out: lpBuffer=0x22a9368*, lpNumberOfBytesRead=0x2293e40*=0x14000, lpOverlapped=0x0) returned 1 [0207.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x247e18 [0207.575] ReadFile (in: hFile=0x1d8, lpBuffer=0x247e18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2293de4, lpOverlapped=0x0 | out: lpBuffer=0x247e18*, lpNumberOfBytesRead=0x2293de4*=0x1000, lpOverlapped=0x0) returned 1 [0207.577] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2293e70 | out: lpNewFilePointer=0x0) returned 1 [0207.577] WriteFile (in: hFile=0x1d8, lpBuffer=0x2294378*, nNumberOfBytesToWrite=0x14000, lpNumberOfBytesWritten=0x2293ddc, lpOverlapped=0x0 | out: lpBuffer=0x2294378*, lpNumberOfBytesWritten=0x2293ddc*=0x14000, lpOverlapped=0x0) returned 1 [0207.578] WriteFile (in: hFile=0x1d8, lpBuffer=0x247e18*, nNumberOfBytesToWrite=0xff0, lpNumberOfBytesWritten=0x2293e08, lpOverlapped=0x0 | out: lpBuffer=0x247e18*, lpNumberOfBytesWritten=0x2293e08*=0xff0, lpOverlapped=0x0) returned 1 [0207.578] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x15f90, lpNewFilePointer=0x0, dwMoveMethod=0x2293e50 | out: lpNewFilePointer=0x0) returned 1 [0207.578] ReadFile (in: hFile=0x1d8, lpBuffer=0x22a9368, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x2293e28, lpOverlapped=0x0 | out: lpBuffer=0x22a9368*, lpNumberOfBytesRead=0x2293e28*=0x14000, lpOverlapped=0x0) returned 1 [0207.579] ReadFile (in: hFile=0x1d8, lpBuffer=0x247e18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2293dcc, lpOverlapped=0x0 | out: lpBuffer=0x247e18*, lpNumberOfBytesRead=0x2293dcc*=0x1000, lpOverlapped=0x0) returned 1 [0207.579] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x15f90, lpNewFilePointer=0x0, dwMoveMethod=0x2293e70 | out: lpNewFilePointer=0x0) returned 1 [0207.579] WriteFile (in: hFile=0x1d8, lpBuffer=0x2294378*, nNumberOfBytesToWrite=0x14000, lpNumberOfBytesWritten=0x2293ddc, lpOverlapped=0x0 | out: lpBuffer=0x2294378*, lpNumberOfBytesWritten=0x2293ddc*=0x14000, lpOverlapped=0x0) returned 1 [0207.580] WriteFile (in: hFile=0x1d8, lpBuffer=0x247e18*, nNumberOfBytesToWrite=0xff0, lpNumberOfBytesWritten=0x2293e08, lpOverlapped=0x0 | out: lpBuffer=0x247e18*, lpNumberOfBytesWritten=0x2293e08*=0xff0, lpOverlapped=0x0) returned 1 [0207.580] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xdbba0, lpNewFilePointer=0x0, dwMoveMethod=0x2293e50 | out: lpNewFilePointer=0x0) returned 1 [0207.580] ReadFile (in: hFile=0x1d8, lpBuffer=0x22a9368, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x2293e28, lpOverlapped=0x0 | out: lpBuffer=0x22a9368*, lpNumberOfBytesRead=0x2293e28*=0x14000, lpOverlapped=0x0) returned 1 [0207.583] ReadFile (in: hFile=0x1d8, lpBuffer=0x247e18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2293dcc, lpOverlapped=0x0 | out: lpBuffer=0x247e18*, lpNumberOfBytesRead=0x2293dcc*=0x1000, lpOverlapped=0x0) returned 1 [0207.584] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xdbba0, lpNewFilePointer=0x0, dwMoveMethod=0x2293e70 | out: lpNewFilePointer=0x0) returned 1 [0207.584] WriteFile (in: hFile=0x1d8, lpBuffer=0x2294378*, nNumberOfBytesToWrite=0x14000, lpNumberOfBytesWritten=0x2293ddc, lpOverlapped=0x0 | out: lpBuffer=0x2294378*, lpNumberOfBytesWritten=0x2293ddc*=0x14000, lpOverlapped=0x0) returned 1 [0207.585] WriteFile (in: hFile=0x1d8, lpBuffer=0x247e18*, nNumberOfBytesToWrite=0xff0, lpNumberOfBytesWritten=0x2293e58, lpOverlapped=0x0 | out: lpBuffer=0x247e18*, lpNumberOfBytesWritten=0x2293e58*=0xff0, lpOverlapped=0x0) returned 1 [0207.585] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x247e18 | out: hHeap=0x1f0000) returned 1 [0207.585] CloseHandle (hObject=0x1d8) returned 1 [0209.137] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346b0 [0209.137] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2608b0 [0209.137] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2606d0 [0209.137] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x234860 [0209.137] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205150 [0209.137] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x2051f0 [0209.138] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x21c6f0 [0209.138] GetLastError () returned 0x0 [0209.138] CryptAcquireContextA (in: phProv=0x2293e98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2293e98*=0x212938) returned 1 [0209.331] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2608b0 | out: pbBuffer=0x2608b0) returned 1 [0209.331] CryptReleaseContext (hProv=0x212938, dwFlags=0x0) returned 1 [0209.331] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608b0 | out: hHeap=0x1f0000) returned 1 [0209.331] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2605b8 [0209.331] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260518 [0209.331] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1ff058 [0209.331] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0209.331] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0209.331] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1ff058 | out: hHeap=0x1f0000) returned 1 [0209.331] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x263808 [0209.331] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffb8 [0209.331] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x235f20 [0209.331] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260798 [0209.332] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x237980 [0209.332] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205150 [0209.332] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235de8 [0209.332] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2608b0 [0209.332] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x236e28 [0209.332] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c590 [0209.332] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0209.332] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffd0 [0209.332] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c720 [0209.332] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0209.332] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffe8 [0209.332] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffe8 | out: hHeap=0x1f0000) returned 1 [0209.332] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0209.332] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c720 | out: hHeap=0x1f0000) returned 1 [0209.332] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffd0 | out: hHeap=0x1f0000) returned 1 [0209.332] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0209.332] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c590 | out: hHeap=0x1f0000) returned 1 [0209.332] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236e28 | out: hHeap=0x1f0000) returned 1 [0209.332] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608b0 | out: hHeap=0x1f0000) returned 1 [0209.332] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235de8 | out: hHeap=0x1f0000) returned 1 [0209.332] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x1ff058 [0209.332] GetLastError () returned 0x0 [0209.333] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x2293a28 | out: lpSystemTimeAsFileTime=0x2293a28) [0209.333] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x21c590 [0209.333] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608b0 [0209.333] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x2052f0 [0209.333] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2052f0 | out: hHeap=0x1f0000) returned 1 [0209.333] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608b0 | out: hHeap=0x1f0000) returned 1 [0209.333] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0209.333] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x2052f0 [0209.333] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2052f0 | out: hHeap=0x1f0000) returned 1 [0209.333] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0209.333] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c590 | out: hHeap=0x1f0000) returned 1 [0209.333] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0209.333] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238a08 [0209.333] GetLastError () returned 0x0 [0209.333] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems64.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2293d98, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0209.334] GetFileType (hFile=0x210) returned 0x1 [0209.334] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28dfd0 [0209.334] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2293d20 | out: lpNewFilePointer=0x0) returned 1 [0209.334] GetLastError () returned 0xb7 [0209.334] CloseHandle (hObject=0x210) returned 1 [0209.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x230000 [0209.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x11e) returned 0x210df8 [0209.335] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0209.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1ac) returned 0x220748 [0209.335] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0209.335] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems64.dll"), lpNewFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems64.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems64.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwFlags=0x2) returned 1 [0209.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220748 | out: hHeap=0x1f0000) returned 1 [0209.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c720 | out: hHeap=0x1f0000) returned 1 [0209.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c640 | out: hHeap=0x1f0000) returned 1 [0209.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237a88 | out: hHeap=0x1f0000) returned 1 [0209.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237980 | out: hHeap=0x1f0000) returned 1 [0209.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260798 | out: hHeap=0x1f0000) returned 1 [0209.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205150 | out: hHeap=0x1f0000) returned 1 [0209.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235f20 | out: hHeap=0x1f0000) returned 1 [0209.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffb8 | out: hHeap=0x1f0000) returned 1 [0209.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263808 | out: hHeap=0x1f0000) returned 1 [0209.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224900 | out: hHeap=0x1f0000) returned 1 [0209.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0209.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0209.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x266290 | out: hHeap=0x1f0000) returned 1 [0209.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2244a0 | out: hHeap=0x1f0000) returned 1 [0209.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0209.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c6f0 | out: hHeap=0x1f0000) returned 1 [0209.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffa0 | out: hHeap=0x1f0000) returned 1 [0209.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606f8 | out: hHeap=0x1f0000) returned 1 [0209.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c560 | out: hHeap=0x1f0000) returned 1 [0209.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff70 | out: hHeap=0x1f0000) returned 1 [0209.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0209.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c660 | out: hHeap=0x1f0000) returned 1 [0209.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2648e8 | out: hHeap=0x1f0000) returned 1 [0209.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260658 | out: hHeap=0x1f0000) returned 1 [0209.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236190 | out: hHeap=0x1f0000) returned 1 [0209.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234860 | out: hHeap=0x1f0000) returned 1 [0209.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0209.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0209.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346b0 | out: hHeap=0x1f0000) returned 1 [0209.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x26d4c0 | out: hHeap=0x1f0000) returned 1 [0209.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223cf8 | out: hHeap=0x1f0000) returned 1 [0209.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206868 | out: hHeap=0x1f0000) returned 1 [0209.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2026e8 | out: hHeap=0x1f0000) returned 1 [0209.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2026d0 | out: hHeap=0x1f0000) returned 1 [0209.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f6a8 | out: hHeap=0x1f0000) returned 1 [0209.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x26c1b8 | out: hHeap=0x1f0000) returned 1 [0209.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224a18 | out: hHeap=0x1f0000) returned 1 [0209.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0209.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262ab0 | out: hHeap=0x1f0000) returned 1 [0209.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227388 | out: hHeap=0x1f0000) returned 1 [0209.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234788 | out: hHeap=0x1f0000) returned 1 [0209.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0209.337] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80af1c6a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80af1c6a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x8a8d8, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="AppVIsvVirtualization.dll", cAlternateFileName="AP485B~1.DLL")) returned 1 [0209.337] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234818 [0209.338] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212608 [0209.338] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0209.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212608 | out: hHeap=0x1f0000) returned 1 [0209.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0209.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234818 | out: hHeap=0x1f0000) returned 1 [0209.338] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvVirtualization.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvvirtualization.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0209.338] GetLastError () returned 0x20 [0209.339] GetLastError () returned 0x20 [0209.339] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80af1c6a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80af1c6a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x12cad8, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="AppVManifest.dll", cAlternateFileName="APPVMA~1.DLL")) returned 1 [0209.339] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0209.339] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211fa8 [0209.339] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0209.339] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211fa8 | out: hHeap=0x1f0000) returned 1 [0209.339] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0209.339] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0209.339] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVManifest.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvmanifest.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0209.340] GetLastError () returned 0x20 [0209.340] GetLastError () returned 0x20 [0209.340] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b17ebf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b17ebf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0xe76d8, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="AppVOrchestration.dll", cAlternateFileName="APPVOR~1.DLL")) returned 1 [0209.340] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0209.340] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211a58 [0209.340] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0209.340] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211a58 | out: hHeap=0x1f0000) returned 1 [0209.340] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0209.340] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0209.341] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVOrchestration.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvorchestration.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0209.341] GetLastError () returned 0x20 [0209.341] GetLastError () returned 0x20 [0209.341] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b17ebf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b17ebf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x13c4d8, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="AppVPolicy.dll", cAlternateFileName="APPVPO~1.DLL")) returned 1 [0209.341] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0209.341] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211ae0 [0209.341] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0209.341] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211ae0 | out: hHeap=0x1f0000) returned 1 [0209.341] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0209.342] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0209.342] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVPolicy.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvpolicy.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0209.342] GetLastError () returned 0x20 [0209.342] GetLastError () returned 0x20 [0209.342] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b17ebf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b17ebf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9e226c00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x7d0d8, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="AppVScripting.dll", cAlternateFileName="APPVSC~1.DLL")) returned 1 [0209.342] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0209.342] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2127a0 [0209.342] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0209.342] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2127a0 | out: hHeap=0x1f0000) returned 1 [0209.342] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0209.343] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0209.343] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVScripting.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvscripting.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0209.343] GetLastError () returned 0x2 [0209.343] GetLastError () returned 0x2 [0209.343] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b3e121, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b3e121, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9e226c00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x406d8, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="AppVShNotify.exe", cAlternateFileName="APPVSH~1.EXE")) returned 1 [0209.343] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0209.343] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212828 [0209.343] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0209.343] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212828 | out: hHeap=0x1f0000) returned 1 [0209.343] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0209.343] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0209.344] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVShNotify.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvshnotify.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0209.344] GetFileType (hFile=0x210) returned 0x1 [0209.344] CloseHandle (hObject=0x210) returned 1 [0209.344] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a0e0 [0209.344] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVShNotify.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvshnotify.exe"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b3e121, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b3e121, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9e226c00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x406d8)) returned 1 [0209.344] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a0e0 | out: hHeap=0x1f0000) returned 1 [0209.345] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a8c0 [0209.345] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a8c0 | out: hHeap=0x1f0000) returned 1 [0209.345] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b3e121, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b3e121, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x14115400, ftLastWriteTime.dwHighDateTime=0x1d0d7a5, nFileSizeHigh=0x0, nFileSizeLow=0xc84c0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="C2R32.dll", cAlternateFileName="")) returned 1 [0209.345] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260770 [0209.345] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211e98 [0209.345] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0209.345] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e98 | out: hHeap=0x1f0000) returned 1 [0209.345] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0209.345] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0209.345] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r32.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0209.345] GetLastError () returned 0x2 [0209.345] GetLastError () returned 0x2 [0209.345] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b3e121, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b3e121, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb4b54300, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x127260, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="C2R64.dll", cAlternateFileName="")) returned 1 [0209.345] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605b8 [0209.346] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211e10 [0209.346] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0209.346] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e10 | out: hHeap=0x1f0000) returned 1 [0209.346] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0209.346] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0209.346] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r64.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0209.346] GetFileType (hFile=0x210) returned 0x1 [0209.346] CloseHandle (hObject=0x210) returned 1 [0209.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0209.347] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r64.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b3e121, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b3e121, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb4b54300, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x127260)) returned 1 [0209.347] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0209.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0209.347] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0209.347] GetLastError () returned 0x0 [0209.347] CryptAcquireContextA (in: phProv=0x2293e98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2293e98*=0x211f20) returned 1 [0209.350] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2604c8 | out: pbBuffer=0x2604c8) returned 1 [0209.350] CryptReleaseContext (hProv=0x211f20, dwFlags=0x0) returned 1 [0209.350] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604c8 | out: hHeap=0x1f0000) returned 1 [0209.350] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x26c1b8 [0209.350] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2247e8 [0209.350] QueryPerformanceCounter (in: lpPerformanceCount=0x2293e2c | out: lpPerformanceCount=0x2293e2c*=36671867897) returned 1 [0209.350] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x2293e6c | out: lpSystemTimeAsFileTime=0x2293e6c) [0209.350] QueryPerformanceCounter (in: lpPerformanceCount=0x2293e2c | out: lpPerformanceCount=0x2293e2c*=36671883741) returned 1 [0209.350] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x2293e6c | out: lpSystemTimeAsFileTime=0x2293e6c) [0209.350] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x21cf00 [0209.350] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x266290 [0209.350] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x223cf8 [0209.350] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x24f6a8 [0209.350] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffe8 [0209.350] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206688 [0209.350] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff70 [0209.350] GetLastError () returned 0x0 [0209.351] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r64.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x2293dfc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0209.351] GetFileType (hFile=0x210) returned 0x1 [0209.351] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2293e68 | out: lpNewFilePointer=0x0) returned 1 [0209.351] ReadFile (in: hFile=0x210, lpBuffer=0x22a9368, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x2293e40, lpOverlapped=0x0 | out: lpBuffer=0x22a9368*, lpNumberOfBytesRead=0x2293e40*=0x14000, lpOverlapped=0x0) returned 1 [0209.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28afb8 [0209.355] ReadFile (in: hFile=0x210, lpBuffer=0x28afb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2293de4, lpOverlapped=0x0 | out: lpBuffer=0x28afb8*, lpNumberOfBytesRead=0x2293de4*=0x1000, lpOverlapped=0x0) returned 1 [0209.477] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2293e70 | out: lpNewFilePointer=0x0) returned 1 [0209.478] WriteFile (in: hFile=0x210, lpBuffer=0x2294378*, nNumberOfBytesToWrite=0x14000, lpNumberOfBytesWritten=0x2293ddc, lpOverlapped=0x0 | out: lpBuffer=0x2294378*, lpNumberOfBytesWritten=0x2293ddc*=0x14000, lpOverlapped=0x0) returned 1 [0209.479] WriteFile (in: hFile=0x210, lpBuffer=0x28afb8*, nNumberOfBytesToWrite=0xff0, lpNumberOfBytesWritten=0x2293e08, lpOverlapped=0x0 | out: lpBuffer=0x28afb8*, lpNumberOfBytesWritten=0x2293e08*=0xff0, lpOverlapped=0x0) returned 1 [0209.479] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x15f90, lpNewFilePointer=0x0, dwMoveMethod=0x2293e50 | out: lpNewFilePointer=0x0) returned 1 [0209.479] ReadFile (in: hFile=0x210, lpBuffer=0x22a9368, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x2293e28, lpOverlapped=0x0 | out: lpBuffer=0x22a9368*, lpNumberOfBytesRead=0x2293e28*=0x14000, lpOverlapped=0x0) returned 1 [0209.480] ReadFile (in: hFile=0x210, lpBuffer=0x28afb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2293dcc, lpOverlapped=0x0 | out: lpBuffer=0x28afb8*, lpNumberOfBytesRead=0x2293dcc*=0x1000, lpOverlapped=0x0) returned 1 [0209.480] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x15f90, lpNewFilePointer=0x0, dwMoveMethod=0x2293e70 | out: lpNewFilePointer=0x0) returned 1 [0209.480] WriteFile (in: hFile=0x210, lpBuffer=0x2294378*, nNumberOfBytesToWrite=0x14000, lpNumberOfBytesWritten=0x2293ddc, lpOverlapped=0x0 | out: lpBuffer=0x2294378*, lpNumberOfBytesWritten=0x2293ddc*=0x14000, lpOverlapped=0x0) returned 1 [0209.481] WriteFile (in: hFile=0x210, lpBuffer=0x28afb8*, nNumberOfBytesToWrite=0xff0, lpNumberOfBytesWritten=0x2293e08, lpOverlapped=0x0 | out: lpBuffer=0x28afb8*, lpNumberOfBytesWritten=0x2293e08*=0xff0, lpOverlapped=0x0) returned 1 [0209.481] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0xdbba0, lpNewFilePointer=0x0, dwMoveMethod=0x2293e50 | out: lpNewFilePointer=0x0) returned 1 [0209.481] ReadFile (in: hFile=0x210, lpBuffer=0x22a9368, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x2293e28, lpOverlapped=0x0 | out: lpBuffer=0x22a9368*, lpNumberOfBytesRead=0x2293e28*=0x14000, lpOverlapped=0x0) returned 1 [0209.484] ReadFile (in: hFile=0x210, lpBuffer=0x28afb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2293dcc, lpOverlapped=0x0 | out: lpBuffer=0x28afb8*, lpNumberOfBytesRead=0x2293dcc*=0x1000, lpOverlapped=0x0) returned 1 [0209.774] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0xdbba0, lpNewFilePointer=0x0, dwMoveMethod=0x2293e70 | out: lpNewFilePointer=0x0) returned 1 [0209.775] WriteFile (in: hFile=0x210, lpBuffer=0x2294378*, nNumberOfBytesToWrite=0x14000, lpNumberOfBytesWritten=0x2293ddc, lpOverlapped=0x0 | out: lpBuffer=0x2294378*, lpNumberOfBytesWritten=0x2293ddc*=0x14000, lpOverlapped=0x0) returned 1 [0209.775] WriteFile (in: hFile=0x210, lpBuffer=0x28afb8*, nNumberOfBytesToWrite=0xff0, lpNumberOfBytesWritten=0x2293e58, lpOverlapped=0x0 | out: lpBuffer=0x28afb8*, lpNumberOfBytesWritten=0x2293e58*=0xff0, lpOverlapped=0x0) returned 1 [0209.775] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28afb8 | out: hHeap=0x1f0000) returned 1 [0209.776] CloseHandle (hObject=0x210) returned 1 [0210.135] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234ae8 [0210.135] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2604f0 [0210.135] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260860 [0210.135] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x234788 [0210.136] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ff0 [0210.136] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205210 [0210.136] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x238ba0 [0210.136] GetLastError () returned 0x0 [0210.136] CryptAcquireContextA (in: phProv=0x2293e98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2293e98*=0x2119d0) returned 1 [0210.144] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2606d0 | out: pbBuffer=0x2606d0) returned 1 [0210.145] CryptReleaseContext (hProv=0x2119d0, dwFlags=0x0) returned 1 [0210.145] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0210.145] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2604f0 [0210.145] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2606d0 [0210.145] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x234bb8 [0210.145] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0210.145] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0210.145] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234bb8 | out: hHeap=0x1f0000) returned 1 [0210.145] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2638b8 [0210.146] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2026d0 [0210.146] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x2357d0 [0210.146] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2608b0 [0210.146] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x236f30 [0210.146] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205210 [0210.146] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235eb8 [0210.146] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2606a8 [0210.147] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x237560 [0210.147] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b30 [0210.147] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0210.147] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0210.147] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b80 [0210.147] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606f8 [0210.147] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x230890 [0210.148] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230890 | out: hHeap=0x1f0000) returned 1 [0210.148] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606f8 | out: hHeap=0x1f0000) returned 1 [0210.148] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b80 | out: hHeap=0x1f0000) returned 1 [0210.148] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0210.148] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0210.148] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b30 | out: hHeap=0x1f0000) returned 1 [0210.148] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237560 | out: hHeap=0x1f0000) returned 1 [0210.193] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0210.193] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235eb8 | out: hHeap=0x1f0000) returned 1 [0210.193] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x234d08 [0210.193] GetLastError () returned 0x0 [0210.193] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x2293a28 | out: lpSystemTimeAsFileTime=0x2293a28) [0210.193] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238a30 [0210.194] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0210.194] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205290 [0210.194] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205290 | out: hHeap=0x1f0000) returned 1 [0210.194] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0210.194] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0210.194] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ff0 [0210.194] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ff0 | out: hHeap=0x1f0000) returned 1 [0210.194] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0210.194] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a30 | out: hHeap=0x1f0000) returned 1 [0210.194] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0210.194] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x234f38 [0210.194] GetLastError () returned 0x0 [0210.195] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r64.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2293d98, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0210.195] GetFileType (hFile=0x210) returned 0x1 [0210.195] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28ffe0 [0210.195] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2293d20 | out: lpNewFilePointer=0x0) returned 1 [0210.196] GetLastError () returned 0xb7 [0210.196] CloseHandle (hObject=0x210) returned 1 [0210.196] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219ee8 [0210.196] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xee) returned 0x229528 [0210.197] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219ee8 | out: hHeap=0x1f0000) returned 1 [0210.197] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x164) returned 0x220748 [0210.197] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229528 | out: hHeap=0x1f0000) returned 1 [0210.197] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r64.dll"), lpNewFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R64.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r64.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwFlags=0x2) returned 1 [0210.198] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220748 | out: hHeap=0x1f0000) returned 1 [0210.198] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b30 | out: hHeap=0x1f0000) returned 1 [0210.198] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b00 | out: hHeap=0x1f0000) returned 1 [0210.198] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237038 | out: hHeap=0x1f0000) returned 1 [0210.198] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236f30 | out: hHeap=0x1f0000) returned 1 [0210.198] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608b0 | out: hHeap=0x1f0000) returned 1 [0210.198] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205210 | out: hHeap=0x1f0000) returned 1 [0210.198] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2357d0 | out: hHeap=0x1f0000) returned 1 [0210.198] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2026d0 | out: hHeap=0x1f0000) returned 1 [0210.198] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2638b8 | out: hHeap=0x1f0000) returned 1 [0210.199] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224040 | out: hHeap=0x1f0000) returned 1 [0210.199] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0210.199] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0210.199] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x269ba8 | out: hHeap=0x1f0000) returned 1 [0210.199] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2246d0 | out: hHeap=0x1f0000) returned 1 [0210.199] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234f00 | out: hHeap=0x1f0000) returned 1 [0210.199] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ba0 | out: hHeap=0x1f0000) returned 1 [0210.199] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0210.199] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260798 | out: hHeap=0x1f0000) returned 1 [0210.199] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b20 | out: hHeap=0x1f0000) returned 1 [0210.199] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0210.199] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605e0 | out: hHeap=0x1f0000) returned 1 [0210.199] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389e0 | out: hHeap=0x1f0000) returned 1 [0210.199] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237350 | out: hHeap=0x1f0000) returned 1 [0210.199] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260658 | out: hHeap=0x1f0000) returned 1 [0210.199] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235ff0 | out: hHeap=0x1f0000) returned 1 [0210.199] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234788 | out: hHeap=0x1f0000) returned 1 [0210.200] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0210.200] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0210.200] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234ae8 | out: hHeap=0x1f0000) returned 1 [0210.200] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x266290 | out: hHeap=0x1f0000) returned 1 [0210.200] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223cf8 | out: hHeap=0x1f0000) returned 1 [0210.200] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206688 | out: hHeap=0x1f0000) returned 1 [0210.200] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff70 | out: hHeap=0x1f0000) returned 1 [0210.200] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffe8 | out: hHeap=0x1f0000) returned 1 [0210.200] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f6a8 | out: hHeap=0x1f0000) returned 1 [0210.200] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x26c1b8 | out: hHeap=0x1f0000) returned 1 [0210.200] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2247e8 | out: hHeap=0x1f0000) returned 1 [0210.200] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0210.200] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0210.200] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227388 | out: hHeap=0x1f0000) returned 1 [0210.200] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2348f0 | out: hHeap=0x1f0000) returned 1 [0210.200] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0210.201] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b64383, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b64383, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8ee04f00, ftLastWriteTime.dwHighDateTime=0x1d0d67f, nFileSizeHigh=0x0, nFileSizeLow=0x1028, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="C2RHeartbeatConfig.xml", cAlternateFileName="C2RHEA~1.XML")) returned 1 [0210.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x234c98 [0210.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211f20 [0210.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0210.201] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211f20 | out: hHeap=0x1f0000) returned 1 [0210.201] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0210.201] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234c98 | out: hHeap=0x1f0000) returned 1 [0210.202] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RHeartbeatConfig.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rheartbeatconfig.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0210.202] GetFileType (hFile=0x210) returned 0x1 [0210.202] CloseHandle (hObject=0x210) returned 1 [0210.202] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x262438 [0210.203] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RHeartbeatConfig.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rheartbeatconfig.xml"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b64383, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b64383, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8ee04f00, ftLastWriteTime.dwHighDateTime=0x1d0d67f, nFileSizeHigh=0x0, nFileSizeLow=0x1028)) returned 1 [0210.203] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262438 | out: hHeap=0x1f0000) returned 1 [0210.203] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261d08 [0210.203] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261d08 | out: hHeap=0x1f0000) returned 1 [0210.203] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x808dbb6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x808dbb6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb3841600, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0xdc4b8, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="C2RUI.en-us.dll", cAlternateFileName="C2RUIE~1.DLL")) returned 1 [0210.203] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0210.203] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211a58 [0210.203] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0210.203] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211a58 | out: hHeap=0x1f0000) returned 1 [0210.203] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0210.203] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0210.204] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RUI.en-us.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rui.en-us.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0210.204] GetLastError () returned 0x2 [0210.204] GetLastError () returned 0x2 [0210.204] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b64383, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b64383, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x514a8, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="concrt140.dll", cAlternateFileName="CONCRT~1.DLL")) returned 1 [0210.204] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260658 [0210.204] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212030 [0210.204] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0210.204] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212030 | out: hHeap=0x1f0000) returned 1 [0210.205] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0210.205] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260658 | out: hHeap=0x1f0000) returned 1 [0210.205] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\concrt140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\concrt140.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0210.205] GetLastError () returned 0x2 [0210.205] GetLastError () returned 0x2 [0210.206] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b64383, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b64383, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbd783a00, ftLastWriteTime.dwHighDateTime=0x1d0d7e5, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="i640.hash", cAlternateFileName="I640~1.HAS")) returned 1 [0210.206] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0210.206] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2124f8 [0210.206] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0210.206] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2124f8 | out: hHeap=0x1f0000) returned 1 [0210.206] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0210.206] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0210.206] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i640.hash" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\i640.hash"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0210.207] GetFileType (hFile=0x210) returned 0x1 [0210.207] CloseHandle (hObject=0x210) returned 1 [0210.207] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0210.207] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i640.hash" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\i640.hash"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b64383, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b64383, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbd783a00, ftLastWriteTime.dwHighDateTime=0x1d0d7e5, nFileSizeHigh=0x0, nFileSizeLow=0x66)) returned 1 [0210.208] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0210.208] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0210.208] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0210.208] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x808dbb6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x808dbb6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbc470d00, ftLastWriteTime.dwHighDateTime=0x1d0d7e5, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="i641033.hash", cAlternateFileName="I64103~1.HAS")) returned 1 [0210.208] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605e0 [0210.208] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211e98 [0210.208] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0210.208] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e98 | out: hHeap=0x1f0000) returned 1 [0210.208] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0210.208] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605e0 | out: hHeap=0x1f0000) returned 1 [0210.209] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i641033.hash" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\i641033.hash"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0210.209] GetFileType (hFile=0x210) returned 0x1 [0210.210] CloseHandle (hObject=0x210) returned 1 [0210.210] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0210.210] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i641033.hash" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\i641033.hash"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x808dbb6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x808dbb6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbc470d00, ftLastWriteTime.dwHighDateTime=0x1d0d7e5, nFileSizeHigh=0x0, nFileSizeLow=0x66)) returned 1 [0210.447] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0210.447] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0210.447] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0210.447] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b64383, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b64383, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbe3eab00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x10ae80, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="IntegratedOffice.exe", cAlternateFileName="INTEGR~1.EXE")) returned 1 [0210.447] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x234bf0 [0210.447] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211c78 [0210.447] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0210.447] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211c78 | out: hHeap=0x1f0000) returned 1 [0210.447] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0210.447] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234bf0 | out: hHeap=0x1f0000) returned 1 [0210.448] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\IntegratedOffice.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\integratedoffice.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x234 [0210.448] GetFileType (hFile=0x234) returned 0x1 [0210.448] CloseHandle (hObject=0x234) returned 1 [0210.448] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a4d0 [0210.449] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\IntegratedOffice.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\integratedoffice.exe"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b64383, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b64383, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbe3eab00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x10ae80)) returned 1 [0210.449] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a4d0 | out: hHeap=0x1f0000) returned 1 [0210.449] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219d98 [0210.449] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219d98 | out: hHeap=0x1f0000) returned 1 [0210.449] GetLastError () returned 0x0 [0210.449] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b8a5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b8a5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xa2e72000, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x578d8, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="MavInject32.exe", cAlternateFileName="MAVINJ~1.EXE")) returned 1 [0210.449] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0210.449] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212608 [0210.449] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0210.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212608 | out: hHeap=0x1f0000) returned 1 [0210.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0210.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0210.450] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\MavInject32.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mavinject32.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x234 [0210.450] GetFileType (hFile=0x234) returned 0x1 [0210.450] CloseHandle (hObject=0x234) returned 1 [0210.451] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a968 [0210.451] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\MavInject32.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mavinject32.exe"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b8a5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b8a5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xa2e72000, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x578d8)) returned 1 [0210.451] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a968 | out: hHeap=0x1f0000) returned 1 [0210.451] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219c48 [0210.451] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219c48 | out: hHeap=0x1f0000) returned 1 [0210.451] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b8a5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b8a5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8745c00, ftLastWriteTime.dwHighDateTime=0x1d0d7aa, nFileSizeHigh=0x0, nFileSizeLow=0x2ffa60, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="mso20win32client.dll", cAlternateFileName="MSO20W~1.DLL")) returned 1 [0210.451] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x234d40 [0210.451] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212360 [0210.451] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0210.451] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212360 | out: hHeap=0x1f0000) returned 1 [0210.451] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0210.451] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234d40 | out: hHeap=0x1f0000) returned 1 [0210.452] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso20win32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso20win32client.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0210.452] GetLastError () returned 0x20 [0210.452] GetLastError () returned 0x20 [0210.452] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80bb0837, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80bb0837, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xad6b600, ftLastWriteTime.dwHighDateTime=0x1d0d7aa, nFileSizeHigh=0x0, nFileSizeLow=0x475e60, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="mso30win32client.dll", cAlternateFileName="MSO30W~1.DLL")) returned 1 [0210.452] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x234e90 [0210.452] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0210.452] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0210.452] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0210.452] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0210.452] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234e90 | out: hHeap=0x1f0000) returned 1 [0210.453] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso30win32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso30win32client.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0210.453] GetLastError () returned 0x20 [0210.453] GetLastError () returned 0x20 [0210.453] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80bfccf1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80bfccf1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb7179d00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x307ac0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="mso40uires.dll", cAlternateFileName="MSO40U~1.DLL")) returned 1 [0210.453] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604c8 [0210.453] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d00 [0210.453] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0210.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d00 | out: hHeap=0x1f0000) returned 1 [0210.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0210.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604c8 | out: hHeap=0x1f0000) returned 1 [0210.454] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uires.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso40uires.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0210.454] GetLastError () returned 0x20 [0210.454] GetLastError () returned 0x20 [0210.454] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80c22f4a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80c22f4a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x10cc9700, ftLastWriteTime.dwHighDateTime=0x1d0d7aa, nFileSizeHigh=0x0, nFileSizeLow=0x8e6060, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="mso40uiwin32client.dll", cAlternateFileName="MSO40U~2.DLL")) returned 1 [0210.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x234d08 [0210.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2119d0 [0210.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0210.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2119d0 | out: hHeap=0x1f0000) returned 1 [0210.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0210.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234d08 | out: hHeap=0x1f0000) returned 1 [0210.455] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uiwin32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso40uiwin32client.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0210.455] GetLastError () returned 0x20 [0210.455] GetLastError () returned 0x20 [0210.455] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x808dbb6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x808dbb6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x11fdc400, ftLastWriteTime.dwHighDateTime=0x1d0d7aa, nFileSizeHigh=0x0, nFileSizeLow=0xee60, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="msointl30.en-us.dll", cAlternateFileName="MSOINT~1.DLL")) returned 1 [0210.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x234d40 [0210.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211b68 [0210.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0210.601] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b68 | out: hHeap=0x1f0000) returned 1 [0210.601] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0210.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234d40 | out: hHeap=0x1f0000) returned 1 [0210.602] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msointl30.en-us.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msointl30.en-us.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0210.602] GetFileType (hFile=0x1f4) returned 0x1 [0210.603] CloseHandle (hObject=0x1f4) returned 1 [0210.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219ee8 [0210.603] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msointl30.en-us.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msointl30.en-us.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x808dbb6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x808dbb6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x11fdc400, ftLastWriteTime.dwHighDateTime=0x1d0d7aa, nFileSizeHigh=0x0, nFileSizeLow=0xee60)) returned 1 [0210.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219ee8 | out: hHeap=0x1f0000) returned 1 [0210.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a230 [0210.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a230 | out: hHeap=0x1f0000) returned 1 [0210.604] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80c9565a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80c9565a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1909ea00, ftLastWriteTime.dwHighDateTime=0x1d098bf, nFileSizeHigh=0x0, nFileSizeLow=0xa12a8, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="msvcp120.dll", cAlternateFileName="")) returned 1 [0210.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0210.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2129c0 [0210.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0210.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2129c0 | out: hHeap=0x1f0000) returned 1 [0210.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0210.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0210.605] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp120.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msvcp120.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0210.605] GetLastError () returned 0x20 [0210.605] GetLastError () returned 0x20 [0210.606] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80cbb8b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80cbb8b2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x9b0a0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="msvcp140.dll", cAlternateFileName="")) returned 1 [0210.606] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0210.606] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d00 [0210.606] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0210.606] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d00 | out: hHeap=0x1f0000) returned 1 [0210.606] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0210.606] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0210.607] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msvcp140.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0210.607] GetLastError () returned 0x20 [0210.607] GetLastError () returned 0x20 [0210.607] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80cbb8b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80cbb8b2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1b6c4400, ftLastWriteTime.dwHighDateTime=0x1d098bf, nFileSizeHigh=0x0, nFileSizeLow=0xeb2a8, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="msvcr120.dll", cAlternateFileName="")) returned 1 [0210.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0210.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2120b8 [0210.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0210.608] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2120b8 | out: hHeap=0x1f0000) returned 1 [0210.608] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0210.608] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0210.608] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcr120.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msvcr120.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0210.609] GetLastError () returned 0x20 [0210.609] GetLastError () returned 0x20 [0210.609] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80cbb8b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80cbb8b2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb7179d00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x5b1068, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="OfficeC2RClient.exe", cAlternateFileName="OFFICE~1.EXE")) returned 1 [0210.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x234d40 [0210.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0210.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0210.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0210.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0210.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234d40 | out: hHeap=0x1f0000) returned 1 [0210.610] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RClient.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rclient.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0210.610] GetFileType (hFile=0x1f4) returned 0x1 [0210.611] CloseHandle (hObject=0x1f4) returned 1 [0210.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a2d8 [0210.611] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RClient.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rclient.exe"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80cbb8b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80cbb8b2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb7179d00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x5b1068)) returned 1 [0210.612] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a2d8 | out: hHeap=0x1f0000) returned 1 [0210.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a818 [0210.612] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a818 | out: hHeap=0x1f0000) returned 1 [0210.612] GetLastError () returned 0x0 [0210.612] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc65f7249, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xc65f7249, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xc6cf87b3, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xf35eb, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="OfficeC2RCom.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="OFFICE~1.ODV")) returned 1 [0210.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x262c20 [0210.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212030 [0210.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120) returned 0x211170 [0210.612] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212030 | out: hHeap=0x1f0000) returned 1 [0210.613] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0210.613] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262c20 | out: hHeap=0x1f0000) returned 1 [0210.613] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RCom.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rcom.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0210.614] GetFileType (hFile=0x1f4) returned 0x1 [0210.614] CloseHandle (hObject=0x1f4) returned 1 [0210.614] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120) returned 0x210cd0 [0210.615] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RCom.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rcom.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc65f7249, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xc65f7249, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xc6cf87b3, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xf35eb)) returned 1 [0210.615] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0210.615] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120) returned 0x210390 [0210.615] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0210.615] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d07d85, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d07d85, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbd0d7e00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x2a5e58, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="OfficeClickToRun.exe", cAlternateFileName="OFFICE~2.EXE")) returned 1 [0210.615] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x234f38 [0210.615] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212938 [0210.615] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0210.615] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212938 | out: hHeap=0x1f0000) returned 1 [0210.615] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0210.616] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234f38 | out: hHeap=0x1f0000) returned 1 [0210.616] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeClickToRun.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeclicktorun.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0210.616] GetLastError () returned 0x20 [0210.617] GetLastError () returned 0x20 [0210.617] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d542e1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d542e1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x3f141b52, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x12ae, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="OfficeUpdateSchedule.xml", cAlternateFileName="OFFICE~1.XML")) returned 1 [0210.617] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234110 [0210.617] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211ae0 [0210.617] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0210.618] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211ae0 | out: hHeap=0x1f0000) returned 1 [0210.618] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0210.618] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234110 | out: hHeap=0x1f0000) returned 1 [0210.618] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeUpdateSchedule.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeupdateschedule.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0210.619] GetFileType (hFile=0x1f4) returned 0x1 [0210.619] CloseHandle (hObject=0x1f4) returned 1 [0210.620] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x262b68 [0210.620] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeUpdateSchedule.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeupdateschedule.xml"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d542e1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d542e1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x3f141b52, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x12ae)) returned 1 [0210.620] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262b68 | out: hHeap=0x1f0000) returned 1 [0210.620] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x262438 [0210.620] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262438 | out: hHeap=0x1f0000) returned 1 [0210.620] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d542e1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d542e1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x3fa7ec8f, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x1162, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="ServiceWatcherSchedule.xml", cAlternateFileName="SERVIC~1.XML")) returned 1 [0210.620] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234110 [0210.620] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2123e8 [0210.620] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0210.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2123e8 | out: hHeap=0x1f0000) returned 1 [0210.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0210.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234110 | out: hHeap=0x1f0000) returned 1 [0210.621] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ServiceWatcherSchedule.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\servicewatcherschedule.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0210.622] GetFileType (hFile=0x1f4) returned 0x1 [0210.622] CloseHandle (hObject=0x1f4) returned 1 [0210.622] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x262e48 [0210.622] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ServiceWatcherSchedule.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\servicewatcherschedule.xml"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d542e1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d542e1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x3fa7ec8f, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x1162)) returned 1 [0210.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262e48 | out: hHeap=0x1f0000) returned 1 [0210.623] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2620a0 [0210.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2620a0 | out: hHeap=0x1f0000) returned 1 [0210.623] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d542e1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d542e1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbe3eab00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x101458, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="StreamServer.dll", cAlternateFileName="STREAM~1.DLL")) returned 1 [0210.623] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x234e90 [0210.623] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2124f8 [0210.623] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0210.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2124f8 | out: hHeap=0x1f0000) returned 1 [0210.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0210.624] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234e90 | out: hHeap=0x1f0000) returned 1 [0210.624] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\StreamServer.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\streamserver.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0210.624] GetLastError () returned 0x20 [0210.625] GetLastError () returned 0x20 [0210.625] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d542e1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d542e1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0xefec0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="ucrtbase.dll", cAlternateFileName="")) returned 1 [0210.625] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0210.625] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211a58 [0210.625] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0210.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211a58 | out: hHeap=0x1f0000) returned 1 [0210.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0210.626] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0210.626] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ucrtbase.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\ucrtbase.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0210.627] GetFileType (hFile=0x1f4) returned 0x1 [0210.627] CloseHandle (hObject=0x1f4) returned 1 [0211.129] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0211.129] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ucrtbase.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\ucrtbase.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d542e1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d542e1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0xefec0)) returned 1 [0211.828] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0211.828] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0211.828] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0211.828] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d7a486, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d7a486, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x5f4b0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="vccorlib140.dll", cAlternateFileName="VCCORL~1.DLL")) returned 1 [0211.828] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260518 [0211.828] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212140 [0211.828] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0211.828] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212140 | out: hHeap=0x1f0000) returned 1 [0211.828] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0211.828] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0211.829] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vccorlib140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\vccorlib140.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1dc [0211.829] GetFileType (hFile=0x1dc) returned 0x1 [0211.829] CloseHandle (hObject=0x1dc) returned 1 [0211.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a968 [0211.864] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vccorlib140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\vccorlib140.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d7a486, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d7a486, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x5f4b0)) returned 1 [0212.729] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a968 | out: hHeap=0x1f0000) returned 1 [0212.729] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a038 [0212.729] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a038 | out: hHeap=0x1f0000) returned 1 [0212.729] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc708b7c7, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xc708b7c7, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xc708b7c7, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="vccorlib140.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="VCCORL~1.ODV")) returned 1 [0212.733] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219cf0 [0212.733] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0212.733] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120) returned 0x210ba8 [0212.733] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0212.733] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0212.733] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219cf0 | out: hHeap=0x1f0000) returned 1 [0212.733] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vccorlib140.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\vccorlib140.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0212.733] GetFileType (hFile=0x1c0) returned 0x1 [0212.734] CloseHandle (hObject=0x1c0) returned 1 [0212.735] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120) returned 0x211048 [0212.735] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vccorlib140.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\vccorlib140.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc708b7c7, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xc708b7c7, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xc70d7ff1, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0212.735] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0212.735] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120) returned 0x211048 [0212.736] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0212.736] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d7a486, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d7a486, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x15ab0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="vcruntime140.dll", cAlternateFileName="VCRUNT~1.DLL")) returned 1 [0212.736] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x234db0 [0212.736] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212360 [0212.736] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0212.736] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212360 | out: hHeap=0x1f0000) returned 1 [0212.736] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0212.736] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234db0 | out: hHeap=0x1f0000) returned 1 [0212.736] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vcruntime140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\vcruntime140.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0212.736] GetLastError () returned 0x20 [0212.736] GetLastError () returned 0x20 [0212.737] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d7a486, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d7a486, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x15ab0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="vcruntime140.dll", cAlternateFileName="VCRUNT~1.DLL")) returned 0 [0212.737] FindClose (in: hFindFile=0x24e680 | out: hFindFile=0x24e680) returned 1 [0212.737] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0212.737] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e1c8 | out: hHeap=0x1f0000) returned 1 [0212.737] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0212.737] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233df8 | out: hHeap=0x1f0000) returned 1 [0212.737] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233df8 [0212.737] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c48 [0212.737] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x227058 [0212.738] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0212.738] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\*", lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb3e1c92c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb3e1c92c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24ea80 [0212.738] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0212.738] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0212.738] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0212.738] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb3e1c92c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb3e1c92c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0212.738] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0212.738] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0212.738] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0212.738] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0212.738] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d100bae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe462e472, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe462e472, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xc137d, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="Alphabet.xml", cAlternateFileName="")) returned 1 [0212.738] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0212.739] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0212.739] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219058 [0212.739] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0212.739] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0212.739] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0212.739] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\alphabet.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0212.740] GetLastError () returned 0x5 [0212.740] GetLastError () returned 0x5 [0212.740] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05532b6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="ar-SA", cAlternateFileName="")) returned 1 [0212.740] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0212.740] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x2191b8 [0212.740] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0212.740] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219058 | out: hHeap=0x1f0000) returned 1 [0212.740] lstrcmpW (lpString1="ar-SA", lpString2=".") returned 1 [0212.740] lstrcmpW (lpString1="ar-SA", lpString2="..") returned 1 [0212.740] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x2051f0 [0212.741] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211c78 [0212.741] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0553f37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="bg-BG", cAlternateFileName="")) returned 1 [0212.741] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fef0 [0212.741] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218558 [0212.741] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fef0 | out: hHeap=0x1f0000) returned 1 [0212.741] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2191b8 | out: hHeap=0x1f0000) returned 1 [0212.741] lstrcmpW (lpString1="bg-BG", lpString2=".") returned 1 [0212.741] lstrcmpW (lpString1="bg-BG", lpString2="..") returned 1 [0212.741] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x234bb8 [0212.741] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0212.741] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2051f0 | out: hHeap=0x1f0000) returned 1 [0212.741] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe46546cb, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe46546cb, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x69a5, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="Content.xml", cAlternateFileName="")) returned 1 [0212.741] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0212.741] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fef0 [0212.741] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ce8 [0212.742] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fef0 | out: hHeap=0x1f0000) returned 1 [0212.742] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218558 | out: hHeap=0x1f0000) returned 1 [0212.742] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0212.742] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\content.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0212.742] GetLastError () returned 0x5 [0212.742] GetLastError () returned 0x5 [0212.742] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0554b83, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="cs-CZ", cAlternateFileName="")) returned 1 [0212.742] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0212.743] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219478 [0212.743] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0212.743] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ce8 | out: hHeap=0x1f0000) returned 1 [0212.743] lstrcmpW (lpString1="cs-CZ", lpString2=".") returned 1 [0212.743] lstrcmpW (lpString1="cs-CZ", lpString2="..") returned 1 [0212.743] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x48) returned 0x225dd8 [0212.743] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211e98 [0212.743] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234bb8 | out: hHeap=0x1f0000) returned 1 [0212.743] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05550d5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="da-DK", cAlternateFileName="")) returned 1 [0212.743] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0212.743] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218fa8 [0212.743] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0212.743] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219478 | out: hHeap=0x1f0000) returned 1 [0212.743] lstrcmpW (lpString1="da-DK", lpString2=".") returned 1 [0212.743] lstrcmpW (lpString1="da-DK", lpString2="..") returned 1 [0212.743] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235c48 [0212.743] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211b68 [0212.743] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225dd8 | out: hHeap=0x1f0000) returned 1 [0212.744] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0555b2c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="de-DE", cAlternateFileName="")) returned 1 [0212.744] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0212.744] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219058 [0212.744] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0212.744] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218fa8 | out: hHeap=0x1f0000) returned 1 [0212.744] lstrcmpW (lpString1="de-DE", lpString2=".") returned 1 [0212.744] lstrcmpW (lpString1="de-DE", lpString2="..") returned 1 [0212.744] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0212.744] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211a58 [0212.744] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235c48 | out: hHeap=0x1f0000) returned 1 [0212.744] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa055662c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="el-GR", cAlternateFileName="")) returned 1 [0212.744] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0212.744] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218608 [0212.744] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0212.744] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219058 | out: hHeap=0x1f0000) returned 1 [0212.744] lstrcmpW (lpString1="el-GR", lpString2=".") returned 1 [0212.744] lstrcmpW (lpString1="el-GR", lpString2="..") returned 1 [0212.744] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0212.744] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0557085, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="en-GB", cAlternateFileName="")) returned 1 [0212.745] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fa40 [0212.745] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ce8 [0212.745] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fa40 | out: hHeap=0x1f0000) returned 1 [0212.745] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218608 | out: hHeap=0x1f0000) returned 1 [0212.745] lstrcmpW (lpString1="en-GB", lpString2=".") returned 1 [0212.745] lstrcmpW (lpString1="en-GB", lpString2="..") returned 1 [0212.745] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd8) returned 0x220a58 [0212.745] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212360 [0212.745] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0212.745] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05dd09d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe8231541, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="en-US", cAlternateFileName="")) returned 1 [0212.745] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0212.745] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218d98 [0212.745] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0212.745] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ce8 | out: hHeap=0x1f0000) returned 1 [0212.745] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0212.745] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0212.745] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2122d8 [0212.745] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05ddf5c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="es-ES", cAlternateFileName="")) returned 1 [0212.745] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0212.745] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219478 [0212.746] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0212.746] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218d98 | out: hHeap=0x1f0000) returned 1 [0212.746] lstrcmpW (lpString1="es-ES", lpString2=".") returned 1 [0212.746] lstrcmpW (lpString1="es-ES", lpString2="..") returned 1 [0212.746] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212580 [0212.746] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05dea14, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="es-MX", cAlternateFileName="")) returned 1 [0212.746] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0212.746] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219268 [0212.746] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0212.746] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219478 | out: hHeap=0x1f0000) returned 1 [0212.746] lstrcmpW (lpString1="es-MX", lpString2=".") returned 1 [0212.746] lstrcmpW (lpString1="es-MX", lpString2="..") returned 1 [0212.746] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x138) returned 0x2366d8 [0212.746] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212470 [0212.746] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220a58 | out: hHeap=0x1f0000) returned 1 [0212.746] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05df011, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="et-EE", cAlternateFileName="")) returned 1 [0212.746] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0212.746] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ce8 [0212.747] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0212.747] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219268 | out: hHeap=0x1f0000) returned 1 [0212.747] lstrcmpW (lpString1="et-EE", lpString2=".") returned 1 [0212.747] lstrcmpW (lpString1="et-EE", lpString2="..") returned 1 [0212.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212608 [0212.747] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05df7b6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="fi-FI", cAlternateFileName="")) returned 1 [0212.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0212.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218d98 [0212.747] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0212.747] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ce8 | out: hHeap=0x1f0000) returned 1 [0212.747] lstrcmpW (lpString1="fi-FI", lpString2=".") returned 1 [0212.747] lstrcmpW (lpString1="fi-FI", lpString2="..") returned 1 [0212.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d00 [0212.795] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8f49e8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd11f8841, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd11f8841, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x186b84, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="FlickAnimation.avi", cAlternateFileName="")) returned 1 [0212.795] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x234bb8 [0212.795] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fab8 [0212.795] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218558 [0212.795] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fab8 | out: hHeap=0x1f0000) returned 1 [0212.795] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218d98 | out: hHeap=0x1f0000) returned 1 [0212.795] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234bb8 | out: hHeap=0x1f0000) returned 1 [0212.795] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\FlickAnimation.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flickanimation.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0212.796] GetLastError () returned 0x5 [0212.796] GetLastError () returned 0x5 [0212.796] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8f49e8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd121ea9a, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd121ea9a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xc4800, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="FlickLearningWizard.exe", cAlternateFileName="")) returned 1 [0212.796] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x234cd0 [0212.796] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2202b0 [0212.796] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ce8 [0212.796] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2202b0 | out: hHeap=0x1f0000) returned 1 [0212.796] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218558 | out: hHeap=0x1f0000) returned 1 [0212.796] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234cd0 | out: hHeap=0x1f0000) returned 1 [0212.797] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\FlickLearningWizard.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flicklearningwizard.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0212.797] GetLastError () returned 0x5 [0212.797] GetLastError () returned 0x5 [0212.797] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0635c03, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="fr-CA", cAlternateFileName="")) returned 1 [0212.797] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0212.797] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219318 [0212.797] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0212.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ce8 | out: hHeap=0x1f0000) returned 1 [0212.798] lstrcmpW (lpString1="fr-CA", lpString2=".") returned 1 [0212.798] lstrcmpW (lpString1="fr-CA", lpString2="..") returned 1 [0212.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212250 [0212.798] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06369df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="fr-FR", cAlternateFileName="")) returned 1 [0212.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0212.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ef8 [0212.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0212.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219318 | out: hHeap=0x1f0000) returned 1 [0212.798] lstrcmpW (lpString1="fr-FR", lpString2=".") returned 1 [0212.798] lstrcmpW (lpString1="fr-FR", lpString2="..") returned 1 [0212.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c8) returned 0x234f98 [0212.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212718 [0212.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0212.798] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0637839, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="fsdefinitions", cAlternateFileName="FSDEFI~1")) returned 1 [0212.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0212.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0212.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218a28 [0212.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0212.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ef8 | out: hHeap=0x1f0000) returned 1 [0212.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0212.799] lstrcmpW (lpString1="fsdefinitions", lpString2=".") returned 1 [0212.799] lstrcmpW (lpString1="fsdefinitions", lpString2="..") returned 1 [0212.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0212.799] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cf9a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="he-IL", cAlternateFileName="")) returned 1 [0212.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0212.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219318 [0212.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0212.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218a28 | out: hHeap=0x1f0000) returned 1 [0212.799] lstrcmpW (lpString1="he-IL", lpString2=".") returned 1 [0212.799] lstrcmpW (lpString1="he-IL", lpString2="..") returned 1 [0212.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211ae0 [0212.799] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cfce2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="hr-HR", cAlternateFileName="")) returned 1 [0212.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0212.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x2188c8 [0212.800] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0212.800] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219318 | out: hHeap=0x1f0000) returned 1 [0212.800] lstrcmpW (lpString1="hr-HR", lpString2=".") returned 1 [0212.800] lstrcmpW (lpString1="hr-HR", lpString2="..") returned 1 [0212.800] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211bf0 [0212.800] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06d0656, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="hu-HU", cAlternateFileName="")) returned 1 [0212.800] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0212.800] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219478 [0212.800] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0212.800] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2188c8 | out: hHeap=0x1f0000) returned 1 [0212.800] lstrcmpW (lpString1="hu-HU", lpString2=".") returned 1 [0212.800] lstrcmpW (lpString1="hu-HU", lpString2="..") returned 1 [0212.800] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211f20 [0212.800] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8ce781, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe382bd1f, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe382bd1f, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xb620, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="hwrcommonlm.dat", cAlternateFileName="")) returned 1 [0212.800] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609a0 [0212.800] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220058 [0212.800] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218608 [0212.801] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220058 | out: hHeap=0x1f0000) returned 1 [0212.801] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219478 | out: hHeap=0x1f0000) returned 1 [0212.801] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0212.801] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\hwrcommonlm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrcommonlm.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0212.801] GetLastError () returned 0x5 [0212.801] GetLastError () returned 0x5 [0212.801] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6eba2ec1, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0xa07693a9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6eba2ec1, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="HWRCustomization", cAlternateFileName="HWRCUS~1")) returned 1 [0212.801] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x234e58 [0212.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0212.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218768 [0212.802] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0212.802] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218608 | out: hHeap=0x1f0000) returned 1 [0212.802] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234e58 | out: hHeap=0x1f0000) returned 1 [0212.802] lstrcmpW (lpString1="HWRCustomization", lpString2=".") returned 1 [0212.802] lstrcmpW (lpString1="HWRCustomization", lpString2="..") returned 1 [0212.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0212.802] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85c57278, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xb269cdea, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb269cdea, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x79bc0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="hwrenclm.dat", cAlternateFileName="")) returned 1 [0212.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0212.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0212.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218818 [0212.802] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0212.802] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218768 | out: hHeap=0x1f0000) returned 1 [0212.803] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0212.803] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\hwrenclm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrenclm.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0212.803] GetLastError () returned 0x5 [0212.803] GetLastError () returned 0x5 [0212.803] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8ce781, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe38781cd, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe38781cd, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x10cb30, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="hwrlatinlm.dat", cAlternateFileName="")) returned 1 [0212.803] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608b0 [0212.803] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0212.803] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218558 [0212.803] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0212.803] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218818 | out: hHeap=0x1f0000) returned 1 [0212.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608b0 | out: hHeap=0x1f0000) returned 1 [0212.804] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\hwrlatinlm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrlatinlm.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0212.804] GetLastError () returned 0x5 [0212.804] GetLastError () returned 0x5 [0212.804] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85cc99ae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xb28b2edf, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb28b2edf, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x2662f0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="hwrusalm.dat", cAlternateFileName="")) returned 1 [0212.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604c8 [0212.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0212.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219268 [0212.805] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0212.805] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218558 | out: hHeap=0x1f0000) returned 1 [0212.805] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604c8 | out: hHeap=0x1f0000) returned 1 [0212.805] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusalm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusalm.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0212.805] GetLastError () returned 0x5 [0212.805] GetLastError () returned 0x5 [0212.805] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85cc99ae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xb281a570, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb281a570, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x339380, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="hwrusash.dat", cAlternateFileName="")) returned 1 [0212.805] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0212.805] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0212.805] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218a28 [0212.805] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0212.806] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219268 | out: hHeap=0x1f0000) returned 1 [0212.806] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0212.806] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusash.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusash.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0212.806] GetLastError () returned 0x5 [0212.806] GetLastError () returned 0x5 [0212.806] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e38953f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e38953f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e38953f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x58400, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="InkDiv.dll", cAlternateFileName="")) returned 1 [0212.806] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260798 [0212.806] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe00 [0212.807] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218818 [0212.807] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe00 | out: hHeap=0x1f0000) returned 1 [0212.807] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218a28 | out: hHeap=0x1f0000) returned 1 [0212.807] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260798 | out: hHeap=0x1f0000) returned 1 [0212.807] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\InkDiv.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inkdiv.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0212.807] GetLastError () returned 0x5 [0212.807] GetLastError () returned 0x5 [0212.807] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e38953f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e38953f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e38953f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1ecc00, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="InkObj.dll", cAlternateFileName="")) returned 1 [0212.808] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0212.808] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0212.808] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x2188c8 [0212.808] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0212.808] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218818 | out: hHeap=0x1f0000) returned 1 [0212.808] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0212.808] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\InkObj.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inkobj.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0212.808] GetLastError () returned 0x5 [0212.808] GetLastError () returned 0x5 [0212.808] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d14d081, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe467a929, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe467a929, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x59a00, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="InputPersonalization.exe", cAlternateFileName="")) returned 1 [0212.808] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234980 [0212.808] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0212.808] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218d98 [0212.808] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0212.808] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2188c8 | out: hHeap=0x1f0000) returned 1 [0212.808] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234980 | out: hHeap=0x1f0000) returned 1 [0212.809] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\InputPersonalization.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inputpersonalization.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0212.809] GetLastError () returned 0x5 [0212.809] GetLastError () returned 0x5 [0212.809] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x972, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="ipsar.xml", cAlternateFileName="")) returned 1 [0212.809] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605e0 [0212.809] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0212.809] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218608 [0212.809] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0212.809] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218d98 | out: hHeap=0x1f0000) returned 1 [0212.809] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605e0 | out: hHeap=0x1f0000) returned 1 [0212.810] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipsar.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsar.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0212.810] GetLastError () returned 0x5 [0212.810] GetLastError () returned 0x5 [0212.810] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa20, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="ipscat.xml", cAlternateFileName="")) returned 1 [0212.810] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260518 [0212.810] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0212.810] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ce8 [0212.810] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0212.810] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218608 | out: hHeap=0x1f0000) returned 1 [0212.810] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0212.810] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipscat.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscat.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0212.811] GetLastError () returned 0x5 [0212.811] GetLastError () returned 0x5 [0212.811] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x99e, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="ipschs.xml", cAlternateFileName="")) returned 1 [0212.811] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0212.811] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0212.811] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218fa8 [0212.811] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0212.811] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ce8 | out: hHeap=0x1f0000) returned 1 [0212.811] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0212.811] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipschs.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipschs.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0212.811] GetLastError () returned 0x5 [0212.811] GetLastError () returned 0x5 [0212.811] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x984, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="ipscht.xml", cAlternateFileName="")) returned 1 [0212.812] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604c8 [0212.812] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0212.812] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218558 [0212.812] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0212.812] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218fa8 | out: hHeap=0x1f0000) returned 1 [0212.812] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604c8 | out: hHeap=0x1f0000) returned 1 [0212.812] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipscht.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscht.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0212.812] GetLastError () returned 0x5 [0212.812] GetLastError () returned 0x5 [0212.812] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9fc, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="ipscsy.xml", cAlternateFileName="")) returned 1 [0212.812] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0212.812] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0212.812] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218978 [0212.812] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0212.812] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218558 | out: hHeap=0x1f0000) returned 1 [0212.812] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0212.813] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipscsy.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscsy.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0212.813] GetLastError () returned 0x5 [0212.813] GetLastError () returned 0x5 [0212.813] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9d2, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="ipsdan.xml", cAlternateFileName="")) returned 1 [0212.813] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0212.813] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0212.813] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218d98 [0212.813] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0212.813] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218978 | out: hHeap=0x1f0000) returned 1 [0212.813] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0212.813] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdan.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdan.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0212.813] GetLastError () returned 0x5 [0212.813] GetLastError () returned 0x5 [0212.813] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa38, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="ipsdeu.xml", cAlternateFileName="")) returned 1 [0212.813] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260770 [0212.814] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0212.814] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218818 [0212.814] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0212.814] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218d98 | out: hHeap=0x1f0000) returned 1 [0212.814] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0212.814] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdeu.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdeu.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0212.814] GetLastError () returned 0x5 [0212.814] GetLastError () returned 0x5 [0212.814] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa3a, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="ipsel.xml", cAlternateFileName="")) returned 1 [0212.814] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0212.814] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21ff68 [0212.814] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ce8 [0212.814] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ff68 | out: hHeap=0x1f0000) returned 1 [0212.814] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218818 | out: hHeap=0x1f0000) returned 1 [0212.814] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0212.814] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipsel.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsel.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0212.815] GetLastError () returned 0x5 [0212.815] GetLastError () returned 0x5 [0212.815] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa12, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="ipsen.xml", cAlternateFileName="")) returned 1 [0212.815] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0212.815] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2202b0 [0212.815] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x2188c8 [0212.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2202b0 | out: hHeap=0x1f0000) returned 1 [0212.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ce8 | out: hHeap=0x1f0000) returned 1 [0212.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0212.815] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipsen.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsen.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0212.815] GetLastError () returned 0x5 [0212.815] GetLastError () returned 0x5 [0212.815] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xbd0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="ipsesp.xml", cAlternateFileName="")) returned 1 [0212.815] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605e0 [0212.815] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe00 [0212.815] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218978 [0212.816] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe00 | out: hHeap=0x1f0000) returned 1 [0212.816] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2188c8 | out: hHeap=0x1f0000) returned 1 [0212.816] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605e0 | out: hHeap=0x1f0000) returned 1 [0212.816] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipsesp.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsesp.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0212.816] GetLastError () returned 0x5 [0212.816] GetLastError () returned 0x5 [0212.816] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d14d081, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d14d081, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d14d081, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="IPSEventLogMsg.dll", cAlternateFileName="")) returned 1 [0212.816] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x234bf0 [0212.816] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220490 [0212.816] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218768 [0212.816] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220490 | out: hHeap=0x1f0000) returned 1 [0212.816] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218978 | out: hHeap=0x1f0000) returned 1 [0212.816] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234bf0 | out: hHeap=0x1f0000) returned 1 [0212.816] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\IPSEventLogMsg.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipseventlogmsg.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0212.816] GetLastError () returned 0x5 [0212.816] GetLastError () returned 0x5 [0212.817] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d100bae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d100bae, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa62, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="ipsfin.xml", cAlternateFileName="")) returned 1 [0212.817] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606f8 [0212.817] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0212.817] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218d98 [0212.817] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0212.817] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218768 | out: hHeap=0x1f0000) returned 1 [0212.817] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606f8 | out: hHeap=0x1f0000) returned 1 [0212.817] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipsfin.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfin.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0212.819] GetLastError () returned 0x5 [0212.819] GetLastError () returned 0x5 [0212.819] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa44, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="ipsfra.xml", cAlternateFileName="")) returned 1 [0212.819] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606f8 [0212.819] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0212.819] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x2191b8 [0212.819] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0212.819] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218d98 | out: hHeap=0x1f0000) returned 1 [0212.819] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606f8 | out: hHeap=0x1f0000) returned 1 [0212.819] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipsfra.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfra.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0212.819] GetLastError () returned 0x5 [0212.819] GetLastError () returned 0x5 [0212.819] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9e4, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="ipshe.xml", cAlternateFileName="")) returned 1 [0212.819] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0212.819] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0212.819] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ef8 [0212.820] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0212.820] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2191b8 | out: hHeap=0x1f0000) returned 1 [0212.820] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0212.820] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipshe.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshe.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0212.820] GetLastError () returned 0x5 [0212.820] GetLastError () returned 0x5 [0212.820] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9d6, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="ipshi.xml", cAlternateFileName="")) returned 1 [0212.820] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0212.820] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fab8 [0212.820] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218768 [0212.820] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fab8 | out: hHeap=0x1f0000) returned 1 [0212.820] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ef8 | out: hHeap=0x1f0000) returned 1 [0212.820] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0212.820] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipshi.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshi.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0212.821] GetLastError () returned 0x5 [0212.821] GetLastError () returned 0x5 [0212.821] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c96711d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa5c, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="ipshrv.xml", cAlternateFileName="")) returned 1 [0212.821] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0212.821] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0212.821] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ce8 [0212.821] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0212.821] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218768 | out: hHeap=0x1f0000) returned 1 [0212.821] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0212.821] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipshrv.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshrv.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0212.821] GetLastError () returned 0x5 [0212.821] GetLastError () returned 0x5 [0212.821] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d14d081, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d14d081, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d14d081, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa0a, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="ipsid.xml", cAlternateFileName="")) returned 1 [0212.821] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605e0 [0212.821] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0212.821] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ef8 [0212.821] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0212.821] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ce8 | out: hHeap=0x1f0000) returned 1 [0212.822] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605e0 | out: hHeap=0x1f0000) returned 1 [0212.822] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipsid.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsid.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0212.822] GetLastError () returned 0x5 [0212.822] GetLastError () returned 0x5 [0212.822] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9de, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="ipsita.xml", cAlternateFileName="")) returned 1 [0212.822] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0212.822] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fa40 [0212.822] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218fa8 [0212.822] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fa40 | out: hHeap=0x1f0000) returned 1 [0212.822] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ef8 | out: hHeap=0x1f0000) returned 1 [0212.822] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0212.822] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipsita.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsita.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0212.823] GetLastError () returned 0x5 [0212.823] GetLastError () returned 0x5 [0212.823] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c96711d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c96711d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c96711d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9da, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="ipsjpn.xml", cAlternateFileName="")) returned 1 [0212.823] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260798 [0212.823] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0212.823] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ce8 [0212.823] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0212.823] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218fa8 | out: hHeap=0x1f0000) returned 1 [0212.823] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260798 | out: hHeap=0x1f0000) returned 1 [0212.823] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipsjpn.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsjpn.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0212.823] GetLastError () returned 0x5 [0212.823] GetLastError () returned 0x5 [0212.823] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d100bae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d100bae, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d100bae, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa08, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="ipskor.xml", cAlternateFileName="")) returned 1 [0212.823] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604c8 [0212.823] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0212.823] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218d98 [0212.823] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0212.823] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ce8 | out: hHeap=0x1f0000) returned 1 [0212.823] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604c8 | out: hHeap=0x1f0000) returned 1 [0212.824] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipskor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipskor.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0212.824] GetLastError () returned 0x5 [0212.824] GetLastError () returned 0x5 [0212.824] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe462e472, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe462e472, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xa400, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="IpsMigrationPlugin.dll", cAlternateFileName="")) returned 1 [0212.824] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x234e90 [0212.824] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220490 [0212.824] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ce8 [0212.824] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220490 | out: hHeap=0x1f0000) returned 1 [0212.824] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218d98 | out: hHeap=0x1f0000) returned 1 [0212.824] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234e90 | out: hHeap=0x1f0000) returned 1 [0212.824] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\IpsMigrationPlugin.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsmigrationplugin.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0212.824] GetLastError () returned 0x5 [0212.824] GetLastError () returned 0x5 [0212.825] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d100bae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d100bae, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d100bae, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa42, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="ipsnld.xml", cAlternateFileName="")) returned 1 [0212.825] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0212.825] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220058 [0212.825] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218d98 [0212.825] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220058 | out: hHeap=0x1f0000) returned 1 [0212.825] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ce8 | out: hHeap=0x1f0000) returned 1 [0212.825] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0213.095] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnld.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnld.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.130] GetLastError () returned 0x5 [0213.130] GetLastError () returned 0x5 [0213.130] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d100bae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d100bae, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d100bae, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa14, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="ipsnor.xml", cAlternateFileName="")) returned 1 [0213.130] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a18 [0213.130] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0213.130] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218978 [0213.131] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0213.131] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218d98 | out: hHeap=0x1f0000) returned 1 [0213.131] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a18 | out: hHeap=0x1f0000) returned 1 [0213.131] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnor.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.132] GetLastError () returned 0x5 [0213.132] GetLastError () returned 0x5 [0213.132] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d100bae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d100bae, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d100bae, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa28, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="ipsplk.xml", cAlternateFileName="")) returned 1 [0213.132] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0213.132] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0213.132] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218768 [0213.132] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0213.132] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218978 | out: hHeap=0x1f0000) returned 1 [0213.132] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0213.133] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipsplk.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsplk.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.133] GetLastError () returned 0x5 [0213.133] GetLastError () returned 0x5 [0213.133] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe46546cb, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe46546cb, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x1ec00, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="IpsPlugin.dll", cAlternateFileName="")) returned 1 [0213.133] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a18 [0213.133] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220490 [0213.133] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ce8 [0213.133] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220490 | out: hHeap=0x1f0000) returned 1 [0213.133] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218768 | out: hHeap=0x1f0000) returned 1 [0213.133] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a18 | out: hHeap=0x1f0000) returned 1 [0213.134] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\IpsPlugin.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsplugin.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.134] GetLastError () returned 0x5 [0213.134] GetLastError () returned 0x5 [0213.134] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x8c6, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="ipsptb.xml", cAlternateFileName="")) returned 1 [0213.134] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bd0 [0213.134] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0213.134] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218d98 [0213.135] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0213.135] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ce8 | out: hHeap=0x1f0000) returned 1 [0213.135] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bd0 | out: hHeap=0x1f0000) returned 1 [0213.135] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptb.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.135] GetLastError () returned 0x5 [0213.135] GetLastError () returned 0x5 [0213.136] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x8c0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="ipsptg.xml", cAlternateFileName="")) returned 1 [0213.136] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a18 [0213.136] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0213.136] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x2191b8 [0213.136] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0213.136] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218d98 | out: hHeap=0x1f0000) returned 1 [0213.136] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a18 | out: hHeap=0x1f0000) returned 1 [0213.136] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptg.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptg.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.137] GetLastError () returned 0x5 [0213.137] GetLastError () returned 0x5 [0213.137] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c96711d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c96711d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c96711d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa54, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="ipsrom.xml", cAlternateFileName="")) returned 1 [0213.137] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a18 [0213.137] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0213.137] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ef8 [0213.137] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0213.137] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2191b8 | out: hHeap=0x1f0000) returned 1 [0213.137] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a18 | out: hHeap=0x1f0000) returned 1 [0213.138] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipsrom.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsrom.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.138] GetLastError () returned 0x5 [0213.138] GetLastError () returned 0x5 [0213.139] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9ee, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="ipsrus.xml", cAlternateFileName="")) returned 1 [0213.139] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bd0 [0213.139] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0213.139] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218558 [0213.139] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0213.139] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ef8 | out: hHeap=0x1f0000) returned 1 [0213.139] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bd0 | out: hHeap=0x1f0000) returned 1 [0213.140] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipsrus.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsrus.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.140] GetLastError () returned 0x5 [0213.140] GetLastError () returned 0x5 [0213.140] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa08, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="ipssrb.xml", cAlternateFileName="")) returned 1 [0213.140] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a18 [0213.140] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0213.140] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x2188c8 [0213.141] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0213.141] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218558 | out: hHeap=0x1f0000) returned 1 [0213.141] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a18 | out: hHeap=0x1f0000) returned 1 [0213.141] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssrb.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.142] GetLastError () returned 0x5 [0213.142] GetLastError () returned 0x5 [0213.142] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa24, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="ipssrl.xml", cAlternateFileName="")) returned 1 [0213.142] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a18 [0213.142] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fab8 [0213.142] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218978 [0213.142] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fab8 | out: hHeap=0x1f0000) returned 1 [0213.142] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2188c8 | out: hHeap=0x1f0000) returned 1 [0213.142] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a18 | out: hHeap=0x1f0000) returned 1 [0213.143] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssrl.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.143] GetLastError () returned 0x5 [0213.143] GetLastError () returned 0x5 [0213.143] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9d8, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="ipssve.xml", cAlternateFileName="")) returned 1 [0213.143] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0213.144] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fef0 [0213.144] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ef8 [0213.144] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fef0 | out: hHeap=0x1f0000) returned 1 [0213.144] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218978 | out: hHeap=0x1f0000) returned 1 [0213.144] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0213.145] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipssve.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssve.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.145] GetLastError () returned 0x5 [0213.145] GetLastError () returned 0x5 [0213.145] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xaa0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="ipstr.xml", cAlternateFileName="")) returned 1 [0213.146] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bd0 [0213.146] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2202b0 [0213.146] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219478 [0213.146] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2202b0 | out: hHeap=0x1f0000) returned 1 [0213.146] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ef8 | out: hHeap=0x1f0000) returned 1 [0213.147] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bd0 | out: hHeap=0x1f0000) returned 1 [0213.147] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipstr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipstr.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.147] GetLastError () returned 0x5 [0213.147] GetLastError () returned 0x5 [0213.148] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0769b1e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="it-IT", cAlternateFileName="")) returned 1 [0213.148] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220058 [0213.148] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ef8 [0213.290] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220058 | out: hHeap=0x1f0000) returned 1 [0213.290] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219478 | out: hHeap=0x1f0000) returned 1 [0213.290] lstrcmpW (lpString1="it-IT", lpString2=".") returned 1 [0213.290] lstrcmpW (lpString1="it-IT", lpString2="..") returned 1 [0213.290] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2a0) returned 0x237d00 [0213.290] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2124f8 [0213.290] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234f98 | out: hHeap=0x1f0000) returned 1 [0213.290] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076a026, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="ja-JP", cAlternateFileName="")) returned 1 [0213.291] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0213.291] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ce8 [0213.291] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0213.291] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ef8 | out: hHeap=0x1f0000) returned 1 [0213.291] lstrcmpW (lpString1="ja-JP", lpString2=".") returned 1 [0213.291] lstrcmpW (lpString1="ja-JP", lpString2="..") returned 1 [0213.291] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212140 [0213.291] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076a7a6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="ko-KR", cAlternateFileName="")) returned 1 [0213.291] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0213.291] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x2191b8 [0213.291] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0213.291] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ce8 | out: hHeap=0x1f0000) returned 1 [0213.291] lstrcmpW (lpString1="ko-KR", lpString2=".") returned 1 [0213.291] lstrcmpW (lpString1="ko-KR", lpString2="..") returned 1 [0213.291] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212938 [0213.291] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076afd8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="LanguageModel", cAlternateFileName="LANGUA~1")) returned 1 [0213.291] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a18 [0213.291] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fab8 [0213.291] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219478 [0213.291] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fab8 | out: hHeap=0x1f0000) returned 1 [0213.292] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2191b8 | out: hHeap=0x1f0000) returned 1 [0213.292] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a18 | out: hHeap=0x1f0000) returned 1 [0213.292] lstrcmpW (lpString1="LanguageModel", lpString2=".") returned 1 [0213.292] lstrcmpW (lpString1="LanguageModel", lpString2="..") returned 1 [0213.292] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0213.292] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076b52b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="lt-LT", cAlternateFileName="")) returned 1 [0213.293] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0213.293] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219058 [0213.293] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0213.293] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219478 | out: hHeap=0x1f0000) returned 1 [0213.293] lstrcmpW (lpString1="lt-LT", lpString2=".") returned 1 [0213.293] lstrcmpW (lpString1="lt-LT", lpString2="..") returned 1 [0213.293] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2129c0 [0213.293] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076ba6e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="lv-LV", cAlternateFileName="")) returned 1 [0213.293] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0213.293] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x2191b8 [0213.293] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0213.293] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219058 | out: hHeap=0x1f0000) returned 1 [0213.293] lstrcmpW (lpString1="lv-LV", lpString2=".") returned 1 [0213.293] lstrcmpW (lpString1="lv-LV", lpString2="..") returned 1 [0213.293] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0213.293] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a4376e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1f30e81, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1f30e81, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x19f200, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="micaut.dll", cAlternateFileName="")) returned 1 [0213.293] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ab8 [0213.293] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fef0 [0213.293] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218558 [0213.293] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fef0 | out: hHeap=0x1f0000) returned 1 [0213.293] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2191b8 | out: hHeap=0x1f0000) returned 1 [0213.294] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ab8 | out: hHeap=0x1f0000) returned 1 [0213.294] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\micaut.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\micaut.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.294] GetLastError () returned 0x5 [0213.294] GetLastError () returned 0x5 [0213.295] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463d4edd, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xc2004e62, ftLastAccessTime.dwHighDateTime=0x1d2fa0a, ftLastWriteTime.dwLowDateTime=0x463d4edd, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x7b000, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="Microsoft.Ink.dll", cAlternateFileName="")) returned 1 [0213.295] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x234d78 [0213.295] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0213.295] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218d98 [0213.295] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0213.295] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218558 | out: hHeap=0x1f0000) returned 1 [0213.296] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234d78 | out: hHeap=0x1f0000) returned 1 [0213.297] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\Microsoft.Ink.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\microsoft.ink.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.297] GetLastError () returned 0x5 [0213.297] GetLastError () returned 0x5 [0213.297] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a4376e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd51e08b5, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd51e08b5, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x178200, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="mip.exe", cAlternateFileName="")) returned 1 [0213.297] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2202b0 [0213.297] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ef8 [0213.297] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2202b0 | out: hHeap=0x1f0000) returned 1 [0213.297] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218d98 | out: hHeap=0x1f0000) returned 1 [0213.297] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\mip.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mip.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.298] GetLastError () returned 0x5 [0213.298] GetLastError () returned 0x5 [0213.298] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a1d507, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xde1acd8d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xde1acd8d, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x612e00, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="mraut.dll", cAlternateFileName="")) returned 1 [0213.298] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bd0 [0213.298] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220058 [0213.298] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218768 [0213.298] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220058 | out: hHeap=0x1f0000) returned 1 [0213.298] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ef8 | out: hHeap=0x1f0000) returned 1 [0213.298] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bd0 | out: hHeap=0x1f0000) returned 1 [0213.298] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\mraut.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mraut.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.299] GetLastError () returned 0x5 [0213.299] GetLastError () returned 0x5 [0213.299] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c3a52f7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3c3a52f7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3c3a52f7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc800, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="mshwgst.dll", cAlternateFileName="")) returned 1 [0213.299] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bd0 [0213.299] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2202b0 [0213.299] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218d98 [0213.299] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2202b0 | out: hHeap=0x1f0000) returned 1 [0213.299] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218768 | out: hHeap=0x1f0000) returned 1 [0213.299] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bd0 | out: hHeap=0x1f0000) returned 1 [0213.299] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\mshwgst.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mshwgst.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.299] GetLastError () returned 0x5 [0213.299] GetLastError () returned 0x5 [0213.300] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8ce781, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe3805ad4, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe3805ad4, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x106a00, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="mshwLatin.dll", cAlternateFileName="")) returned 1 [0213.300] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bd0 [0213.300] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0213.300] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218768 [0213.300] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0213.300] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218d98 | out: hHeap=0x1f0000) returned 1 [0213.300] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bd0 | out: hHeap=0x1f0000) returned 1 [0213.300] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\mshwLatin.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mshwlatin.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.300] GetLastError () returned 0x5 [0213.300] GetLastError () returned 0x5 [0213.300] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076bff5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="nb-NO", cAlternateFileName="")) returned 1 [0213.301] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220328 [0213.301] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x2188c8 [0213.301] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220328 | out: hHeap=0x1f0000) returned 1 [0213.301] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218768 | out: hHeap=0x1f0000) returned 1 [0213.301] lstrcmpW (lpString1="nb-NO", lpString2=".") returned 1 [0213.301] lstrcmpW (lpString1="nb-NO", lpString2="..") returned 1 [0213.301] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0213.301] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076c75d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="nl-NL", cAlternateFileName="")) returned 1 [0213.301] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220058 [0213.301] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ce8 [0213.301] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220058 | out: hHeap=0x1f0000) returned 1 [0213.301] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2188c8 | out: hHeap=0x1f0000) returned 1 [0213.301] lstrcmpW (lpString1="nl-NL", lpString2=".") returned 1 [0213.301] lstrcmpW (lpString1="nl-NL", lpString2="..") returned 1 [0213.301] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2132c8 [0213.301] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d57c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="pl-PL", cAlternateFileName="")) returned 1 [0213.301] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21ffe0 [0213.302] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218768 [0213.302] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ffe0 | out: hHeap=0x1f0000) returned 1 [0213.302] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ce8 | out: hHeap=0x1f0000) returned 1 [0213.302] lstrcmpW (lpString1="pl-PL", lpString2=".") returned 1 [0213.302] lstrcmpW (lpString1="pl-PL", lpString2="..") returned 1 [0213.302] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213818 [0213.302] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d988, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="pt-BR", cAlternateFileName="")) returned 1 [0213.302] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2202b0 [0213.302] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ce8 [0213.302] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2202b0 | out: hHeap=0x1f0000) returned 1 [0213.302] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218768 | out: hHeap=0x1f0000) returned 1 [0213.302] lstrcmpW (lpString1="pt-BR", lpString2=".") returned 1 [0213.302] lstrcmpW (lpString1="pt-BR", lpString2="..") returned 1 [0213.302] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3f0) returned 0x230c68 [0213.302] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2135f8 [0213.302] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237d00 | out: hHeap=0x1f0000) returned 1 [0213.302] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ddb8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="pt-PT", cAlternateFileName="")) returned 1 [0213.302] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2202b0 [0213.302] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218558 [0213.302] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2202b0 | out: hHeap=0x1f0000) returned 1 [0213.303] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ce8 | out: hHeap=0x1f0000) returned 1 [0213.303] lstrcmpW (lpString1="pt-PT", lpString2=".") returned 1 [0213.303] lstrcmpW (lpString1="pt-PT", lpString2="..") returned 1 [0213.303] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f10 [0213.303] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e0f5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="ro-RO", cAlternateFileName="")) returned 1 [0213.303] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2202b0 [0213.303] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219268 [0213.303] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2202b0 | out: hHeap=0x1f0000) returned 1 [0213.303] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218558 | out: hHeap=0x1f0000) returned 1 [0213.303] lstrcmpW (lpString1="ro-RO", lpString2=".") returned 1 [0213.303] lstrcmpW (lpString1="ro-RO", lpString2="..") returned 1 [0213.303] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0213.303] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e38953f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e38953f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e38953f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2b600, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="rtscom.dll", cAlternateFileName="")) returned 1 [0213.303] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ab8 [0213.303] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0213.303] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x2188c8 [0213.303] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0213.304] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219268 | out: hHeap=0x1f0000) returned 1 [0213.304] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ab8 | out: hHeap=0x1f0000) returned 1 [0213.304] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\rtscom.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\rtscom.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.305] GetLastError () returned 0x5 [0213.305] GetLastError () returned 0x5 [0213.305] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e4d1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="ru-RU", cAlternateFileName="")) returned 1 [0213.305] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0213.305] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218a28 [0213.305] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0213.305] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2188c8 | out: hHeap=0x1f0000) returned 1 [0213.305] lstrcmpW (lpString1="ru-RU", lpString2=".") returned 1 [0213.305] lstrcmpW (lpString1="ru-RU", lpString2="..") returned 1 [0213.305] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2133d8 [0213.306] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe46546cb, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe46546cb, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xb3200, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="ShapeCollector.exe", cAlternateFileName="")) returned 1 [0213.306] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x234d40 [0213.306] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0213.306] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ce8 [0213.306] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0213.306] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218a28 | out: hHeap=0x1f0000) returned 1 [0213.306] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234d40 | out: hHeap=0x1f0000) returned 1 [0213.307] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ShapeCollector.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\shapecollector.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.307] GetLastError () returned 0x5 [0213.307] GetLastError () returned 0x5 [0213.307] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e8a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="sk-SK", cAlternateFileName="")) returned 1 [0213.307] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fef0 [0213.307] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218768 [0213.307] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fef0 | out: hHeap=0x1f0000) returned 1 [0213.307] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ce8 | out: hHeap=0x1f0000) returned 1 [0213.308] lstrcmpW (lpString1="sk-SK", lpString2=".") returned 1 [0213.308] lstrcmpW (lpString1="sk-SK", lpString2="..") returned 1 [0213.308] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0213.308] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ec25, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="sl-SI", cAlternateFileName="")) returned 1 [0213.308] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0213.308] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219478 [0213.308] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0213.308] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218768 | out: hHeap=0x1f0000) returned 1 [0213.602] lstrcmpW (lpString1="sl-SI", lpString2=".") returned 1 [0213.604] lstrcmpW (lpString1="sl-SI", lpString2="..") returned 1 [0213.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a138 [0213.604] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c7ae2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="sr-Latn-RS", cAlternateFileName="SR-LAT~1")) returned 1 [0213.606] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0213.606] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0213.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218558 [0213.608] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0213.608] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219478 | out: hHeap=0x1f0000) returned 1 [0213.608] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0213.610] lstrcmpW (lpString1="sr-Latn-RS", lpString2=".") returned 1 [0213.613] lstrcmpW (lpString1="sr-Latn-RS", lpString2="..") returned 1 [0213.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x285ce0 [0213.616] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c820e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="sv-SE", cAlternateFileName="")) returned 1 [0213.632] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0213.632] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219478 [0213.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0213.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218558 | out: hHeap=0x1f0000) returned 1 [0213.632] lstrcmpW (lpString1="sv-SE", lpString2=".") returned 1 [0213.632] lstrcmpW (lpString1="sv-SE", lpString2="..") returned 1 [0213.632] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x285b48 [0213.632] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d14d081, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe467a929, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe467a929, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xa400, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="TabIpsps.dll", cAlternateFileName="")) returned 1 [0213.632] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0213.632] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0213.633] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218558 [0213.633] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0213.633] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219478 | out: hHeap=0x1f0000) returned 1 [0213.633] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0213.633] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\TabIpsps.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabipsps.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.634] GetLastError () returned 0x5 [0213.634] GetLastError () returned 0x5 [0213.634] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463d4edd, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x779da8e5, ftLastAccessTime.dwHighDateTime=0x1d2fa0a, ftLastWriteTime.dwLowDateTime=0x463d4edd, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x3e9600, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="tabskb.dll", cAlternateFileName="")) returned 1 [0213.634] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ab8 [0213.634] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2202b0 [0213.634] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219318 [0213.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2202b0 | out: hHeap=0x1f0000) returned 1 [0213.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218558 | out: hHeap=0x1f0000) returned 1 [0213.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ab8 | out: hHeap=0x1f0000) returned 1 [0213.635] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\tabskb.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabskb.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.635] GetLastError () returned 0x5 [0213.635] GetLastError () returned 0x5 [0213.635] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1a8750a, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1a8750a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x5f780, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="TabTip.exe", cAlternateFileName="")) returned 1 [0213.635] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ab8 [0213.635] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220328 [0213.635] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ce8 [0213.635] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220328 | out: hHeap=0x1f0000) returned 1 [0213.635] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219318 | out: hHeap=0x1f0000) returned 1 [0213.635] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ab8 | out: hHeap=0x1f0000) returned 1 [0213.636] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\TabTip.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabtip.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.636] GetLastError () returned 0x5 [0213.636] GetLastError () returned 0x5 [0213.636] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8602, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="th-TH", cAlternateFileName="")) returned 1 [0213.636] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0213.636] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218768 [0213.636] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0213.636] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ce8 | out: hHeap=0x1f0000) returned 1 [0213.636] lstrcmpW (lpString1="th-TH", lpString2=".") returned 1 [0213.636] lstrcmpW (lpString1="th-TH", lpString2="..") returned 1 [0213.636] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x285d68 [0213.637] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1aad768, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1aad768, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x109400, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="TipRes.dll", cAlternateFileName="")) returned 1 [0213.637] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0213.637] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0213.637] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219478 [0213.637] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0213.637] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218768 | out: hHeap=0x1f0000) returned 1 [0213.637] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0213.637] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\TipRes.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipres.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.638] GetLastError () returned 0x5 [0213.638] GetLastError () returned 0x5 [0213.638] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x5600, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="tipresx.dll", cAlternateFileName="")) returned 1 [0213.638] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0213.638] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220490 [0213.638] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218768 [0213.638] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220490 | out: hHeap=0x1f0000) returned 1 [0213.638] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219478 | out: hHeap=0x1f0000) returned 1 [0213.638] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0213.639] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\tipresx.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipresx.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.639] GetLastError () returned 0x5 [0213.639] GetLastError () returned 0x5 [0213.639] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79680792, ftCreationTime.dwHighDateTime=0x1d32794, ftLastAccessTime.dwLowDateTime=0x79680792, ftLastAccessTime.dwHighDateTime=0x1d32794, ftLastWriteTime.dwLowDateTime=0x79680792, ftLastWriteTime.dwHighDateTime=0x1d32794, nFileSizeHigh=0x0, nFileSizeLow=0x101200, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="tipskins.dll", cAlternateFileName="")) returned 1 [0213.639] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0213.639] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0213.639] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ce8 [0213.639] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0213.639] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218768 | out: hHeap=0x1f0000) returned 1 [0213.640] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0213.640] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\tipskins.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipskins.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.640] GetLastError () returned 0x5 [0213.640] GetLastError () returned 0x5 [0213.640] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7965a52d, ftCreationTime.dwHighDateTime=0x1d32794, ftLastAccessTime.dwLowDateTime=0x7965a52d, ftLastAccessTime.dwHighDateTime=0x1d32794, ftLastWriteTime.dwLowDateTime=0x7965a52d, ftLastWriteTime.dwHighDateTime=0x1d32794, nFileSizeHigh=0x0, nFileSizeLow=0x9e1a0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="tiptsf.dll", cAlternateFileName="")) returned 1 [0213.640] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0213.640] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0213.640] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x2191b8 [0213.640] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0213.641] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ce8 | out: hHeap=0x1f0000) returned 1 [0213.641] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0213.641] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\tiptsf.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tiptsf.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.641] GetLastError () returned 0x5 [0213.641] GetLastError () returned 0x5 [0213.641] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463d4edd, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x6ebfe576, ftLastAccessTime.dwHighDateTime=0x1d2fa0a, ftLastWriteTime.dwLowDateTime=0x463d4edd, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x17a00, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="tpcps.dll", cAlternateFileName="")) returned 1 [0213.641] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0213.641] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe00 [0213.641] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ce8 [0213.641] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe00 | out: hHeap=0x1f0000) returned 1 [0213.641] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2191b8 | out: hHeap=0x1f0000) returned 1 [0213.642] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0213.642] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\tpcps.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tpcps.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.642] GetLastError () returned 0x5 [0213.642] GetLastError () returned 0x5 [0213.642] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c896f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="tr-TR", cAlternateFileName="")) returned 1 [0213.642] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0213.642] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218768 [0213.643] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0213.643] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ce8 | out: hHeap=0x1f0000) returned 1 [0213.643] lstrcmpW (lpString1="tr-TR", lpString2=".") returned 1 [0213.643] lstrcmpW (lpString1="tr-TR", lpString2="..") returned 1 [0213.643] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x285240 [0213.643] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8ed8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="uk-UA", cAlternateFileName="")) returned 1 [0213.643] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe00 [0213.643] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x2188c8 [0213.643] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe00 | out: hHeap=0x1f0000) returned 1 [0213.643] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218768 | out: hHeap=0x1f0000) returned 1 [0213.644] lstrcmpW (lpString1="uk-UA", lpString2=".") returned 1 [0213.644] lstrcmpW (lpString1="uk-UA", lpString2="..") returned 1 [0213.644] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x285130 [0213.644] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c93df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="zh-CN", cAlternateFileName="")) returned 1 [0213.644] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0213.644] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218768 [0213.644] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0213.644] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2188c8 | out: hHeap=0x1f0000) returned 1 [0213.644] lstrcmpW (lpString1="zh-CN", lpString2=".") returned 1 [0213.644] lstrcmpW (lpString1="zh-CN", lpString2="..") returned 1 [0213.644] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x285460 [0213.644] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c97fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="zh-TW", cAlternateFileName="")) returned 1 [0213.644] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0213.644] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219268 [0213.644] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0213.644] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218768 | out: hHeap=0x1f0000) returned 1 [0213.644] lstrcmpW (lpString1="zh-TW", lpString2=".") returned 1 [0213.645] lstrcmpW (lpString1="zh-TW", lpString2="..") returned 1 [0213.645] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2851b8 [0213.645] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c97fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="zh-TW", cAlternateFileName="")) returned 0 [0213.645] FindClose (in: hFindFile=0x24ea80 | out: hFindFile=0x24ea80) returned 1 [0213.645] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2343e0 [0213.645] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0213.645] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e1c8 [0213.645] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x284f98 [0213.645] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\*", lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05532b6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName=".", cAlternateFileName="")) returned 0x24e5c0 [0213.645] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x285f88 [0213.645] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x284f98 | out: hHeap=0x1f0000) returned 1 [0213.646] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0213.646] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05532b6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="..", cAlternateFileName="")) returned 1 [0213.646] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x285df0 [0213.646] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285f88 | out: hHeap=0x1f0000) returned 1 [0213.646] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0213.646] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0213.646] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0213.646] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ab8 [0213.646] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2854e8 [0213.646] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0213.646] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2854e8 | out: hHeap=0x1f0000) returned 1 [0213.646] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285df0 | out: hHeap=0x1f0000) returned 1 [0213.646] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ab8 | out: hHeap=0x1f0000) returned 1 [0213.647] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ar-sa\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.647] GetLastError () returned 0x5 [0213.647] GetLastError () returned 0x5 [0213.647] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0213.648] FindClose (in: hFindFile=0x24e5c0 | out: hFindFile=0x24e5c0) returned 1 [0213.648] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0213.648] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e1c8 | out: hHeap=0x1f0000) returned 1 [0213.648] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0213.648] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2343e0 | out: hHeap=0x1f0000) returned 1 [0213.648] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2343e0 [0213.648] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0213.648] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e1c8 [0213.648] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2850a8 [0213.648] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\*", lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0553f37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName=".", cAlternateFileName="")) returned 0x24ea80 [0213.649] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x285818 [0213.649] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2850a8 | out: hHeap=0x1f0000) returned 1 [0213.649] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0213.649] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0553f37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="..", cAlternateFileName="")) returned 1 [0213.649] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2853d8 [0213.649] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285818 | out: hHeap=0x1f0000) returned 1 [0213.649] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0213.649] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0213.649] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0213.649] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ab8 [0213.650] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x285818 [0213.650] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0213.650] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285818 | out: hHeap=0x1f0000) returned 1 [0213.650] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2853d8 | out: hHeap=0x1f0000) returned 1 [0213.650] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ab8 | out: hHeap=0x1f0000) returned 1 [0213.650] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\bg-bg\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.650] GetLastError () returned 0x5 [0213.650] GetLastError () returned 0x5 [0213.651] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0213.651] FindClose (in: hFindFile=0x24ea80 | out: hFindFile=0x24ea80) returned 1 [0213.651] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0213.651] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e1c8 | out: hHeap=0x1f0000) returned 1 [0213.651] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0213.651] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2343e0 | out: hHeap=0x1f0000) returned 1 [0213.651] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2343e0 [0213.651] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0213.651] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e1c8 [0213.651] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2850a8 [0213.651] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\*", lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0554b83, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName=".", cAlternateFileName="")) returned 0x24e900 [0213.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x285df0 [0213.652] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2850a8 | out: hHeap=0x1f0000) returned 1 [0213.652] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0213.652] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0554b83, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="..", cAlternateFileName="")) returned 1 [0213.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x285818 [0213.652] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285df0 | out: hHeap=0x1f0000) returned 1 [0213.652] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0213.652] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0213.652] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e316e09, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e316e09, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e316e09, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0213.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ab8 [0213.653] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x285c58 [0213.653] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0213.653] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285c58 | out: hHeap=0x1f0000) returned 1 [0213.653] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285818 | out: hHeap=0x1f0000) returned 1 [0213.653] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ab8 | out: hHeap=0x1f0000) returned 1 [0213.653] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\cs-cz\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.654] GetLastError () returned 0x5 [0213.654] GetLastError () returned 0x5 [0213.654] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e316e09, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e316e09, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e316e09, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0213.654] FindClose (in: hFindFile=0x24e900 | out: hFindFile=0x24e900) returned 1 [0213.654] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0213.654] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e1c8 | out: hHeap=0x1f0000) returned 1 [0213.654] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0213.654] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2343e0 | out: hHeap=0x1f0000) returned 1 [0213.654] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2343e0 [0213.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0213.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e1c8 [0213.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2855f8 [0213.655] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\*", lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05550d5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName=".", cAlternateFileName="")) returned 0x24ed40 [0213.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x285a38 [0213.655] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2855f8 | out: hHeap=0x1f0000) returned 1 [0213.655] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0213.655] FindNextFileW (in: hFindFile=0x24ed40, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05550d5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="..", cAlternateFileName="")) returned 1 [0213.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2852c8 [0213.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285a38 | out: hHeap=0x1f0000) returned 1 [0213.656] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0213.656] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0213.656] FindNextFileW (in: hFindFile=0x24ed40, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2f0ba2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2f0ba2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2f0ba2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0213.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ab8 [0213.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x285350 [0213.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0213.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285350 | out: hHeap=0x1f0000) returned 1 [0213.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2852c8 | out: hHeap=0x1f0000) returned 1 [0213.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ab8 | out: hHeap=0x1f0000) returned 1 [0213.657] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\da-dk\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.657] GetLastError () returned 0x5 [0213.657] GetLastError () returned 0x5 [0213.657] FindNextFileW (in: hFindFile=0x24ed40, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2f0ba2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2f0ba2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2f0ba2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0213.657] FindClose (in: hFindFile=0x24ed40 | out: hFindFile=0x24ed40) returned 1 [0213.658] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0213.658] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e1c8 | out: hHeap=0x1f0000) returned 1 [0213.658] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0213.658] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2343e0 | out: hHeap=0x1f0000) returned 1 [0213.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2343e0 [0213.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0213.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e1c8 [0213.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x285350 [0213.658] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\de-DE\\*", lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0555b2c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName=".", cAlternateFileName="")) returned 0x24ea80 [0213.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x285bd0 [0213.659] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285350 | out: hHeap=0x1f0000) returned 1 [0213.659] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0213.659] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0555b2c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="..", cAlternateFileName="")) returned 1 [0213.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x285df0 [0213.659] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285bd0 | out: hHeap=0x1f0000) returned 1 [0213.660] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0213.660] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0213.660] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2f0ba2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2f0ba2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2f0ba2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0213.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ab8 [0213.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2859b0 [0213.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0213.660] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2859b0 | out: hHeap=0x1f0000) returned 1 [0213.660] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285df0 | out: hHeap=0x1f0000) returned 1 [0213.660] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ab8 | out: hHeap=0x1f0000) returned 1 [0213.661] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\de-DE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\de-de\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.661] GetLastError () returned 0x5 [0213.661] GetLastError () returned 0x5 [0213.661] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2f0ba2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2f0ba2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2f0ba2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0213.661] FindClose (in: hFindFile=0x24ea80 | out: hFindFile=0x24ea80) returned 1 [0213.662] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0213.662] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e1c8 | out: hHeap=0x1f0000) returned 1 [0213.662] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0213.662] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2343e0 | out: hHeap=0x1f0000) returned 1 [0213.662] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2343e0 [0213.662] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0213.662] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e1c8 [0213.662] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x285ac0 [0213.662] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\el-GR\\*", lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa055662c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName=".", cAlternateFileName="")) returned 0x24e980 [0213.663] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2852c8 [0213.663] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285ac0 | out: hHeap=0x1f0000) returned 1 [0213.663] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0213.663] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa055662c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="..", cAlternateFileName="")) returned 1 [0213.663] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x285350 [0213.663] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2852c8 | out: hHeap=0x1f0000) returned 1 [0213.663] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0213.663] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0213.663] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0213.663] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ab8 [0213.663] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x285f88 [0213.664] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0213.664] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285f88 | out: hHeap=0x1f0000) returned 1 [0213.664] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285350 | out: hHeap=0x1f0000) returned 1 [0213.664] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ab8 | out: hHeap=0x1f0000) returned 1 [0213.664] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\el-GR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\el-gr\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.665] GetLastError () returned 0x5 [0213.665] GetLastError () returned 0x5 [0213.665] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0213.665] FindClose (in: hFindFile=0x24e980 | out: hFindFile=0x24e980) returned 1 [0213.665] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0213.665] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e1c8 | out: hHeap=0x1f0000) returned 1 [0213.665] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0213.665] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2343e0 | out: hHeap=0x1f0000) returned 1 [0213.665] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2343e0 [0213.665] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0213.665] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e1c8 [0213.666] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2853d8 [0213.666] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-GB\\*", lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0557085, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName=".", cAlternateFileName="")) returned 0x24ea80 [0213.666] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x285bd0 [0213.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2853d8 | out: hHeap=0x1f0000) returned 1 [0213.666] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0213.666] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0557085, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="..", cAlternateFileName="")) returned 1 [0213.666] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2850a8 [0213.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285bd0 | out: hHeap=0x1f0000) returned 1 [0213.666] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0213.666] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0213.667] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0213.667] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ab8 [0213.667] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x285c58 [0213.667] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0213.667] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285c58 | out: hHeap=0x1f0000) returned 1 [0213.667] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2850a8 | out: hHeap=0x1f0000) returned 1 [0213.667] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ab8 | out: hHeap=0x1f0000) returned 1 [0213.668] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-GB\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-gb\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.668] GetLastError () returned 0x5 [0213.668] GetLastError () returned 0x5 [0213.668] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0213.668] FindClose (in: hFindFile=0x24ea80 | out: hFindFile=0x24ea80) returned 1 [0213.669] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0213.669] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e1c8 | out: hHeap=0x1f0000) returned 1 [0213.669] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0213.669] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2343e0 | out: hHeap=0x1f0000) returned 1 [0213.669] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2343e0 [0213.669] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0213.669] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e1c8 [0213.669] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286010 [0213.669] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\*", lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05dd09d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe8231541, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName=".", cAlternateFileName="")) returned 0x24e900 [0213.670] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x285df0 [0213.671] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286010 | out: hHeap=0x1f0000) returned 1 [0213.671] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0213.671] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05dd09d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe8231541, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="..", cAlternateFileName="")) returned 1 [0213.671] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x285e78 [0213.671] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285df0 | out: hHeap=0x1f0000) returned 1 [0213.671] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0213.671] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0213.671] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1a3b058, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1a3b058, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x1b2d8, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="boxed-correct.avi", cAlternateFileName="")) returned 1 [0213.671] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2f0 [0213.671] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2859b0 [0213.671] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0213.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2859b0 | out: hHeap=0x1f0000) returned 1 [0213.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285e78 | out: hHeap=0x1f0000) returned 1 [0213.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0213.672] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-correct.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.673] GetLastError () returned 0x5 [0213.673] GetLastError () returned 0x5 [0213.673] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1a612b1, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1a612b1, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xbf28, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="boxed-delete.avi", cAlternateFileName="")) returned 1 [0213.673] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0213.673] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x285020 [0213.673] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0213.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285020 | out: hHeap=0x1f0000) returned 1 [0213.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0213.674] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0213.674] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-delete.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.674] GetLastError () returned 0x5 [0213.778] GetLastError () returned 0x5 [0213.996] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a1d507, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1aad768, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1aad768, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xb61e, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="boxed-join.avi", cAlternateFileName="")) returned 1 [0213.996] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a18 [0213.998] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286340 [0213.998] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0214.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286340 | out: hHeap=0x1f0000) returned 1 [0214.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0214.003] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a18 | out: hHeap=0x1f0000) returned 1 [0214.020] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-join.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.022] GetLastError () returned 0x5 [0214.022] GetLastError () returned 0x5 [0214.025] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1a8750a, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1a8750a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x148de, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="boxed-split.avi", cAlternateFileName="")) returned 1 [0214.025] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605e0 [0214.025] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2862b8 [0214.025] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0214.025] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2862b8 | out: hHeap=0x1f0000) returned 1 [0214.025] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0214.025] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605e0 | out: hHeap=0x1f0000) returned 1 [0214.026] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-split.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.026] GetLastError () returned 0x5 [0214.026] GetLastError () returned 0x5 [0214.026] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1a8750a, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1a8750a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x2bfcc, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="correct.avi", cAlternateFileName="")) returned 1 [0214.026] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260770 [0214.026] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286890 [0214.027] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0214.027] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286890 | out: hHeap=0x1f0000) returned 1 [0214.027] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0214.027] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0214.027] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\correct.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.027] GetLastError () returned 0x5 [0214.028] GetLastError () returned 0x5 [0214.028] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1a612b1, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1a612b1, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x32e18, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="delete.avi", cAlternateFileName="")) returned 1 [0214.028] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0214.028] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286d58 [0214.028] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0214.028] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286d58 | out: hHeap=0x1f0000) returned 1 [0214.028] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0214.028] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0214.029] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\delete.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.029] GetLastError () returned 0x5 [0214.029] GetLastError () returned 0x5 [0214.029] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3da3ec5f, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7bf3d600, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="FlickLearningWizard.exe.mui", cAlternateFileName="")) returned 1 [0214.029] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2348f0 [0214.029] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286a28 [0214.029] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0214.030] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286a28 | out: hHeap=0x1f0000) returned 1 [0214.030] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0214.030] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2348f0 | out: hHeap=0x1f0000) returned 1 [0214.030] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\FlickLearningWizard.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\flicklearningwizard.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.030] GetLastError () returned 0x5 [0214.031] GetLastError () returned 0x5 [0214.031] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dab1374, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7e563000, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="InkObj.dll.mui", cAlternateFileName="")) returned 1 [0214.031] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0214.031] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2862b8 [0214.031] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0214.031] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2862b8 | out: hHeap=0x1f0000) returned 1 [0214.031] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0214.031] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0214.032] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InkObj.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inkobj.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.032] GetLastError () returned 0x5 [0214.032] GetLastError () returned 0x5 [0214.032] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d9f27a8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7f875d00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="InputPersonalization.exe.mui", cAlternateFileName="")) returned 1 [0214.033] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234ae8 [0214.033] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2863c8 [0214.033] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0214.033] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2863c8 | out: hHeap=0x1f0000) returned 1 [0214.033] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0214.033] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234ae8 | out: hHeap=0x1f0000) returned 1 [0214.034] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InputPersonalization.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inputpersonalization.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.034] GetLastError () returned 0x5 [0214.034] GetLastError () returned 0x5 [0214.034] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d9f27a8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7f875d00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x5a00, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="IPSEventLogMsg.dll.mui", cAlternateFileName="")) returned 1 [0214.034] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0214.034] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286ab0 [0214.034] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0214.035] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286ab0 | out: hHeap=0x1f0000) returned 1 [0214.035] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0214.035] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0214.035] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IPSEventLogMsg.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ipseventlogmsg.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.035] GetLastError () returned 0x5 [0214.036] GetLastError () returned 0x5 [0214.036] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3da18a06, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x80b88a00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="IpsMigrationPlugin.dll.mui", cAlternateFileName="")) returned 1 [0214.036] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2349c8 [0214.036] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2865e8 [0214.036] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0214.036] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2865e8 | out: hHeap=0x1f0000) returned 1 [0214.036] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0214.036] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2349c8 | out: hHeap=0x1f0000) returned 1 [0214.037] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IpsMigrationPlugin.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ipsmigrationplugin.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.037] GetLastError () returned 0x5 [0214.037] GetLastError () returned 0x5 [0214.037] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a1d507, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1af9c24, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1af9c24, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x30d3a, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="join.avi", cAlternateFileName="")) returned 1 [0214.037] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0214.037] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2861a8 [0214.037] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0214.037] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2861a8 | out: hHeap=0x1f0000) returned 1 [0214.037] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0214.038] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0214.038] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\join.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.038] GetLastError () returned 0x5 [0214.038] GetLastError () returned 0x5 [0214.038] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dad75cd, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7e563000, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="micaut.dll.mui", cAlternateFileName="")) returned 1 [0214.038] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0214.039] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286bc0 [0214.039] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0214.039] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286bc0 | out: hHeap=0x1f0000) returned 1 [0214.039] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0214.039] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0214.039] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\micaut.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\micaut.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.039] GetLastError () returned 0x5 [0214.039] GetLastError () returned 0x5 [0214.039] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3da8b116, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7d250300, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="mip.exe.mui", cAlternateFileName="")) returned 1 [0214.039] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260658 [0214.039] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2861a8 [0214.039] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0214.039] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2861a8 | out: hHeap=0x1f0000) returned 1 [0214.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0214.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260658 | out: hHeap=0x1f0000) returned 1 [0214.040] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\mip.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\mip.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.040] GetLastError () returned 0x5 [0214.040] GetLastError () returned 0x5 [0214.040] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3da18a06, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x80b88a00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="mshwLatin.dll.mui", cAlternateFileName="")) returned 1 [0214.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0214.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286780 [0214.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0214.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286780 | out: hHeap=0x1f0000) returned 1 [0214.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0214.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0214.041] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\mshwLatin.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\mshwlatin.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.041] GetLastError () returned 0x5 [0214.041] GetLastError () returned 0x5 [0214.041] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dab1374, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7e563000, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="rtscom.dll.mui", cAlternateFileName="")) returned 1 [0214.041] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260900 [0214.041] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286890 [0214.041] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0214.041] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286890 | out: hHeap=0x1f0000) returned 1 [0214.041] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0214.041] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260900 | out: hHeap=0x1f0000) returned 1 [0214.041] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\rtscom.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\rtscom.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.042] GetLastError () returned 0x5 [0214.042] GetLastError () returned 0x5 [0214.042] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3da18a06, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7f875d00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xac00, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="ShapeCollector.exe.mui", cAlternateFileName="")) returned 1 [0214.042] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0214.042] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286bc0 [0214.042] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0214.042] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286bc0 | out: hHeap=0x1f0000) returned 1 [0214.042] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0214.042] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0214.042] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\ShapeCollector.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\shapecollector.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.043] GetLastError () returned 0x5 [0214.043] GetLastError () returned 0x5 [0214.043] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1a8750a, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1a8750a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x2c6cc, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="split.avi", cAlternateFileName="")) returned 1 [0214.043] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2607c0 [0214.043] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2865e8 [0214.043] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0214.043] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2865e8 | out: hHeap=0x1f0000) returned 1 [0214.043] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0214.043] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607c0 | out: hHeap=0x1f0000) returned 1 [0214.044] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\split.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.044] GetLastError () returned 0x5 [0214.044] GetLastError () returned 0x5 [0214.044] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dad75cd, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7e563000, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="tabskb.dll.mui", cAlternateFileName="")) returned 1 [0214.044] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260540 [0214.044] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286de0 [0214.044] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0214.044] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286de0 | out: hHeap=0x1f0000) returned 1 [0214.044] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0214.044] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0214.045] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\tabskb.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tabskb.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.045] GetLastError () returned 0x5 [0214.045] GetLastError () returned 0x5 [0214.045] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3da8b116, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7d250300, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="TabTip.exe.mui", cAlternateFileName="")) returned 1 [0214.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0214.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286a28 [0214.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0214.045] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286a28 | out: hHeap=0x1f0000) returned 1 [0214.046] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0214.046] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0214.046] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TabTip.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tabtip.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.046] GetLastError () returned 0x5 [0214.046] GetLastError () returned 0x5 [0214.047] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ffe6194, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7c896e00, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0x6200, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="TipRes.dll.mui", cAlternateFileName="")) returned 1 [0214.047] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0214.047] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286bc0 [0214.047] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0214.047] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286bc0 | out: hHeap=0x1f0000) returned 1 [0214.047] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0214.047] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0214.048] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TipRes.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipres.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.048] GetLastError () returned 0x5 [0214.048] GetLastError () returned 0x5 [0214.048] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0214.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604c8 [0214.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2863c8 [0214.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0214.049] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2863c8 | out: hHeap=0x1f0000) returned 1 [0214.049] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0214.049] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604c8 | out: hHeap=0x1f0000) returned 1 [0214.049] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.050] GetLastError () returned 0x5 [0214.050] GetLastError () returned 0x5 [0214.051] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dad75cd, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7d250300, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="TipTsf.dll.mui", cAlternateFileName="")) returned 1 [0214.051] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260658 [0214.051] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286a28 [0214.051] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0214.051] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286a28 | out: hHeap=0x1f0000) returned 1 [0214.051] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0214.051] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260658 | out: hHeap=0x1f0000) returned 1 [0214.052] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TipTsf.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tiptsf.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.052] GetLastError () returned 0x5 [0214.052] GetLastError () returned 0x5 [0214.052] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dad75cd, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7d250300, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="TipTsf.dll.mui", cAlternateFileName="")) returned 0 [0214.052] FindClose (in: hFindFile=0x24e900 | out: hFindFile=0x24e900) returned 1 [0214.054] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0214.054] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e1c8 | out: hHeap=0x1f0000) returned 1 [0214.054] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0214.054] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2343e0 | out: hHeap=0x1f0000) returned 1 [0214.054] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2343e0 [0214.054] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0214.054] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e1c8 [0214.054] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286230 [0214.054] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\es-ES\\*", lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05ddf5c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName=".", cAlternateFileName="")) returned 0x24ec00 [0214.055] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286de0 [0214.055] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286230 | out: hHeap=0x1f0000) returned 1 [0214.055] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0214.055] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05ddf5c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="..", cAlternateFileName="")) returned 1 [0214.055] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286560 [0214.055] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286de0 | out: hHeap=0x1f0000) returned 1 [0214.055] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0214.055] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0214.055] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0214.055] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0214.056] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2865e8 [0214.056] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0214.056] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2865e8 | out: hHeap=0x1f0000) returned 1 [0214.056] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286560 | out: hHeap=0x1f0000) returned 1 [0214.056] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0214.056] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\es-ES\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-es\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.057] GetLastError () returned 0x5 [0214.057] GetLastError () returned 0x5 [0214.057] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0214.057] FindClose (in: hFindFile=0x24ec00 | out: hFindFile=0x24ec00) returned 1 [0214.057] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0214.057] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e1c8 | out: hHeap=0x1f0000) returned 1 [0214.057] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0214.057] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2343e0 | out: hHeap=0x1f0000) returned 1 [0214.058] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2343e0 [0214.058] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0214.058] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e1c8 [0214.058] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286a28 [0214.058] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\es-MX\\*", lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05dea14, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName=".", cAlternateFileName="")) returned 0x24e900 [0214.058] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286098 [0214.058] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286a28 | out: hHeap=0x1f0000) returned 1 [0214.058] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0214.058] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05dea14, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="..", cAlternateFileName="")) returned 1 [0214.058] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2862b8 [0214.058] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286098 | out: hHeap=0x1f0000) returned 1 [0214.058] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0214.058] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0214.058] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2a46df, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2a46df, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2a46df, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0214.058] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0214.058] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286b38 [0214.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0214.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286b38 | out: hHeap=0x1f0000) returned 1 [0214.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2862b8 | out: hHeap=0x1f0000) returned 1 [0214.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0214.059] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\es-MX\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-mx\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.059] GetLastError () returned 0x5 [0214.059] GetLastError () returned 0x5 [0214.060] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2a46df, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2a46df, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2a46df, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0214.060] FindClose (in: hFindFile=0x24e900 | out: hFindFile=0x24e900) returned 1 [0214.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0214.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e1c8 | out: hHeap=0x1f0000) returned 1 [0214.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0214.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2343e0 | out: hHeap=0x1f0000) returned 1 [0214.060] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2343e0 [0214.060] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0214.061] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e1c8 [0214.061] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2862b8 [0214.061] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\et-EE\\*", lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05df011, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName=".", cAlternateFileName="")) returned 0x24ec00 [0214.061] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286de0 [0214.061] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2862b8 | out: hHeap=0x1f0000) returned 1 [0214.061] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0214.061] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05df011, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="..", cAlternateFileName="")) returned 1 [0214.061] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286098 [0214.061] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286de0 | out: hHeap=0x1f0000) returned 1 [0214.062] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0214.062] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0214.062] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0214.062] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0214.062] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286d58 [0214.062] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0214.062] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286d58 | out: hHeap=0x1f0000) returned 1 [0214.062] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286098 | out: hHeap=0x1f0000) returned 1 [0214.062] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0214.063] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\et-EE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\et-ee\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.063] GetLastError () returned 0x5 [0214.063] GetLastError () returned 0x5 [0214.063] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0214.063] FindClose (in: hFindFile=0x24ec00 | out: hFindFile=0x24ec00) returned 1 [0214.064] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0214.064] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e1c8 | out: hHeap=0x1f0000) returned 1 [0214.064] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0214.064] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2343e0 | out: hHeap=0x1f0000) returned 1 [0214.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2343e0 [0214.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0214.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e1c8 [0214.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286560 [0214.064] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fi-FI\\*", lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05df7b6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName=".", cAlternateFileName="")) returned 0x24e7c0 [0214.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286d58 [0214.064] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286560 | out: hHeap=0x1f0000) returned 1 [0214.064] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0214.065] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05df7b6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="..", cAlternateFileName="")) returned 1 [0214.065] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286c48 [0214.065] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286d58 | out: hHeap=0x1f0000) returned 1 [0214.065] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0214.065] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0214.065] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e100c60, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e100c60, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e100c60, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0214.065] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606f8 [0214.065] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2865e8 [0214.065] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0214.065] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2865e8 | out: hHeap=0x1f0000) returned 1 [0214.065] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286c48 | out: hHeap=0x1f0000) returned 1 [0214.422] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606f8 | out: hHeap=0x1f0000) returned 1 [0214.431] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fi-FI\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fi-fi\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.431] GetLastError () returned 0x5 [0214.431] GetLastError () returned 0x5 [0214.431] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e100c60, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e100c60, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e100c60, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0214.431] FindClose (in: hFindFile=0x24e7c0 | out: hFindFile=0x24e7c0) returned 1 [0214.432] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0214.432] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e1c8 | out: hHeap=0x1f0000) returned 1 [0214.432] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0214.432] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2343e0 | out: hHeap=0x1f0000) returned 1 [0214.432] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2343e0 [0214.432] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0214.432] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e1c8 [0214.432] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286890 [0214.433] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fr-CA\\*", lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0635c03, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName=".", cAlternateFileName="")) returned 0x24e680 [0214.433] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2866f8 [0214.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286890 | out: hHeap=0x1f0000) returned 1 [0214.433] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0214.433] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0635c03, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="..", cAlternateFileName="")) returned 1 [0214.433] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2865e8 [0214.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2866f8 | out: hHeap=0x1f0000) returned 1 [0214.434] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0214.434] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0214.434] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e126ecb, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e126ecb, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e126ecb, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0214.434] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a18 [0214.434] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286d58 [0214.434] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0214.434] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286d58 | out: hHeap=0x1f0000) returned 1 [0214.434] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2865e8 | out: hHeap=0x1f0000) returned 1 [0214.434] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a18 | out: hHeap=0x1f0000) returned 1 [0214.435] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fr-CA\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fr-ca\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.435] GetLastError () returned 0x5 [0214.435] GetLastError () returned 0x5 [0214.435] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e126ecb, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e126ecb, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e126ecb, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0214.436] FindClose (in: hFindFile=0x24e680 | out: hFindFile=0x24e680) returned 1 [0214.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0214.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e1c8 | out: hHeap=0x1f0000) returned 1 [0214.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0214.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2343e0 | out: hHeap=0x1f0000) returned 1 [0214.436] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2343e0 [0214.436] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a18 [0214.436] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22db68 [0214.436] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286c48 [0214.437] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fr-FR\\*", lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06369df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName=".", cAlternateFileName="")) returned 0x24ed00 [0214.437] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2861a8 [0214.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286c48 | out: hHeap=0x1f0000) returned 1 [0214.437] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0214.437] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06369df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="..", cAlternateFileName="")) returned 1 [0214.437] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286670 [0214.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2861a8 | out: hHeap=0x1f0000) returned 1 [0214.438] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0214.438] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0214.438] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e100c60, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e100c60, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e100c60, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0214.438] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0214.438] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2863c8 [0214.438] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0214.438] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2863c8 | out: hHeap=0x1f0000) returned 1 [0214.438] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286670 | out: hHeap=0x1f0000) returned 1 [0214.438] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0214.439] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fr-FR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fr-fr\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.439] GetLastError () returned 0x5 [0214.439] GetLastError () returned 0x5 [0214.439] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e100c60, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e100c60, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e100c60, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0214.440] FindClose (in: hFindFile=0x24ed00 | out: hFindFile=0x24ed00) returned 1 [0214.440] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0214.440] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22db68 | out: hHeap=0x1f0000) returned 1 [0214.440] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a18 | out: hHeap=0x1f0000) returned 1 [0214.440] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2343e0 | out: hHeap=0x1f0000) returned 1 [0214.440] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2343e0 [0214.441] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a18 [0214.441] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e1c8 [0214.441] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0214.441] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\*", lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0637839, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName=".", cAlternateFileName="")) returned 0x24e980 [0214.441] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0214.442] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0214.442] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0214.442] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0637839, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="..", cAlternateFileName="")) returned 1 [0214.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0214.442] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0214.442] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0214.442] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0214.442] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0638633, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="auxpad", cAlternateFileName="")) returned 1 [0214.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0214.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x2232e0 [0214.443] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0214.443] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0214.443] lstrcmpW (lpString1="auxpad", lpString2=".") returned 1 [0214.443] lstrcmpW (lpString1="auxpad", lpString2="..") returned 1 [0214.443] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x205150 [0214.443] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219c48 [0214.443] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd4, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="auxpad.xml", cAlternateFileName="")) returned 1 [0214.443] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0214.443] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0214.443] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x24f5d8 [0214.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0214.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2232e0 | out: hHeap=0x1f0000) returned 1 [0214.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0214.444] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.444] GetLastError () returned 0x5 [0214.445] GetLastError () returned 0x5 [0214.445] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0638c00, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="insert", cAlternateFileName="")) returned 1 [0214.445] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0214.445] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x2232e0 [0214.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0214.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f5d8 | out: hHeap=0x1f0000) returned 1 [0214.445] lstrcmpW (lpString1="insert", lpString2=".") returned 1 [0214.445] lstrcmpW (lpString1="insert", lpString2="..") returned 1 [0214.445] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0214.445] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a188 [0214.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205150 | out: hHeap=0x1f0000) returned 1 [0214.446] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="insert.xml", cAlternateFileName="")) returned 1 [0214.446] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0214.446] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0214.446] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x24f5d8 [0214.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0214.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2232e0 | out: hHeap=0x1f0000) returned 1 [0214.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0214.447] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\insert.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.447] GetLastError () returned 0x5 [0214.447] GetLastError () returned 0x5 [0214.447] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa063932e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="keypad", cAlternateFileName="")) returned 1 [0214.447] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0214.447] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x2232e0 [0214.447] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0214.447] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f5d8 | out: hHeap=0x1f0000) returned 1 [0214.448] lstrcmpW (lpString1="keypad", lpString2=".") returned 1 [0214.448] lstrcmpW (lpString1="keypad", lpString2="..") returned 1 [0214.448] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x48) returned 0x226148 [0214.448] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a968 [0214.448] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0214.448] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2b5, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="keypad.xml", cAlternateFileName="")) returned 1 [0214.448] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0214.448] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0214.448] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x24f5d8 [0214.448] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0214.448] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2232e0 | out: hHeap=0x1f0000) returned 1 [0214.449] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0214.449] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.449] GetLastError () returned 0x5 [0214.449] GetLastError () returned 0x5 [0214.449] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cd023, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="main", cAlternateFileName="")) returned 1 [0214.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0214.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f5d8 | out: hHeap=0x1f0000) returned 1 [0214.450] lstrcmpW (lpString1="main", lpString2=".") returned 1 [0214.450] lstrcmpW (lpString1="main", lpString2="..") returned 1 [0214.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235be0 [0214.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0214.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226148 | out: hHeap=0x1f0000) returned 1 [0214.450] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xadda, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="main.xml", cAlternateFileName="")) returned 1 [0214.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0214.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0214.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x2232e0 [0214.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0214.451] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0214.451] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0214.451] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.451] GetLastError () returned 0x5 [0214.451] GetLastError () returned 0x5 [0214.452] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cdb88, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="oskclearui", cAlternateFileName="OSKCLE~1")) returned 1 [0214.452] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0214.452] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0214.452] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x24f5d8 [0214.452] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0214.452] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2232e0 | out: hHeap=0x1f0000) returned 1 [0214.452] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0214.452] lstrcmpW (lpString1="oskclearui", lpString2=".") returned 1 [0214.452] lstrcmpW (lpString1="oskclearui", lpString2="..") returned 1 [0214.452] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0214.452] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219f90 [0214.452] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235be0 | out: hHeap=0x1f0000) returned 1 [0214.452] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="oskclearui.xml", cAlternateFileName="")) returned 1 [0214.453] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0214.453] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0214.453] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x2232e0 [0214.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0214.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f5d8 | out: hHeap=0x1f0000) returned 1 [0214.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0214.453] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskclearui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.453] GetLastError () returned 0x5 [0214.454] GetLastError () returned 0x5 [0214.454] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ce328, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="oskmenu", cAlternateFileName="")) returned 1 [0214.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0214.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x24f5d8 [0214.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0214.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2232e0 | out: hHeap=0x1f0000) returned 1 [0214.454] lstrcmpW (lpString1="oskmenu", lpString2=".") returned 1 [0214.454] lstrcmpW (lpString1="oskmenu", lpString2="..") returned 1 [0214.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a038 [0214.454] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3fbc74, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="oskmenu.xml", cAlternateFileName="")) returned 1 [0214.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0214.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0214.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x2232e0 [0214.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0214.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f5d8 | out: hHeap=0x1f0000) returned 1 [0214.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0214.455] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.455] GetLastError () returned 0x5 [0214.455] GetLastError () returned 0x5 [0214.455] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ce7a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="osknav", cAlternateFileName="")) returned 1 [0214.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0214.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x24f5d8 [0214.456] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0214.456] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2232e0 | out: hHeap=0x1f0000) returned 1 [0214.457] lstrcmpW (lpString1="osknav", lpString2=".") returned 1 [0214.457] lstrcmpW (lpString1="osknav", lpString2="..") returned 1 [0214.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd8) returned 0x2232e0 [0214.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21aa10 [0214.457] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0214.457] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3fbc74, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd5, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="osknav.xml", cAlternateFileName="")) returned 1 [0214.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0214.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0214.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x220748 [0214.457] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0214.457] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f5d8 | out: hHeap=0x1f0000) returned 1 [0214.457] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0214.458] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknav.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.458] GetLastError () returned 0x5 [0214.458] GetLastError () returned 0x5 [0214.458] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ceb7f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="osknumpad", cAlternateFileName="OSKNUM~1")) returned 1 [0214.458] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0214.458] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0214.458] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x220828 [0214.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0214.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220748 | out: hHeap=0x1f0000) returned 1 [0214.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0214.459] lstrcmpW (lpString1="osknumpad", lpString2=".") returned 1 [0214.459] lstrcmpW (lpString1="osknumpad", lpString2="..") returned 1 [0214.459] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a6c8 [0214.459] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xdb, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="osknumpad.xml", cAlternateFileName="")) returned 1 [0214.459] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0214.459] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0214.459] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x220748 [0214.459] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0214.459] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220828 | out: hHeap=0x1f0000) returned 1 [0214.459] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0214.459] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.460] GetLastError () returned 0x5 [0214.460] GetLastError () returned 0x5 [0214.460] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cef41, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="oskpred", cAlternateFileName="")) returned 1 [0214.460] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0214.460] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x220828 [0214.460] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0214.460] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220748 | out: hHeap=0x1f0000) returned 1 [0214.460] lstrcmpW (lpString1="oskpred", lpString2=".") returned 1 [0214.460] lstrcmpW (lpString1="oskpred", lpString2="..") returned 1 [0214.460] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a0e0 [0214.460] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="oskpred.xml", cAlternateFileName="")) returned 1 [0214.460] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0214.460] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0214.460] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x220748 [0214.460] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0214.461] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220828 | out: hHeap=0x1f0000) returned 1 [0214.461] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0214.461] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.461] GetLastError () returned 0x5 [0214.461] GetLastError () returned 0x5 [0214.461] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cf371, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="symbols", cAlternateFileName="")) returned 1 [0214.461] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0214.461] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x220828 [0214.461] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0214.461] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220748 | out: hHeap=0x1f0000) returned 1 [0214.461] lstrcmpW (lpString1="symbols", lpString2=".") returned 1 [0214.461] lstrcmpW (lpString1="symbols", lpString2="..") returned 1 [0214.462] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x138) returned 0x24f5d8 [0214.462] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a818 [0214.462] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2232e0 | out: hHeap=0x1f0000) returned 1 [0214.462] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x24f, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="symbols.xml", cAlternateFileName="")) returned 1 [0214.462] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0214.462] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0214.462] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x220748 [0214.462] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0214.462] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220828 | out: hHeap=0x1f0000) returned 1 [0214.462] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0214.462] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.462] GetLastError () returned 0x5 [0214.462] GetLastError () returned 0x5 [0214.463] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x24f, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="symbols.xml", cAlternateFileName="")) returned 0 [0214.463] FindClose (in: hFindFile=0x24e980 | out: hFindFile=0x24e980) returned 1 [0214.463] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234a10 [0214.463] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0214.463] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22db68 [0214.463] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21aab8 [0214.463] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\*", lpFindFileData=0x22bdd70 | out: lpFindFileData=0x22bdd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0638633, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24e5c0 [0214.463] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21ab60 [0214.463] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21aab8 | out: hHeap=0x1f0000) returned 1 [0214.463] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0214.463] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x22bdd70 | out: lpFindFileData=0x22bdd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0638633, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0214.463] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21aab8 [0214.463] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ab60 | out: hHeap=0x1f0000) returned 1 [0214.464] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0214.464] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0214.464] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x22bdd70 | out: lpFindFileData=0x22bdd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x59a, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="auxbase.xml", cAlternateFileName="")) returned 1 [0214.464] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0214.464] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a578 [0214.464] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xee) returned 0x2232e0 [0214.464] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a578 | out: hHeap=0x1f0000) returned 1 [0214.464] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21aab8 | out: hHeap=0x1f0000) returned 1 [0214.464] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0214.464] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdb48, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.464] GetLastError () returned 0x5 [0214.464] GetLastError () returned 0x5 [0214.464] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x22bdd70 | out: lpFindFileData=0x22bdd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x59a, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="auxbase.xml", cAlternateFileName="")) returned 0 [0214.465] FindClose (in: hFindFile=0x24e5c0 | out: hFindFile=0x24e5c0) returned 1 [0214.465] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2232e0 | out: hHeap=0x1f0000) returned 1 [0214.465] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22db68 | out: hHeap=0x1f0000) returned 1 [0214.465] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0214.465] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234a10 | out: hHeap=0x1f0000) returned 1 [0214.465] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234500 [0214.465] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0214.465] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22db68 [0214.465] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a8c0 [0214.465] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\*", lpFindFileData=0x22bdd70 | out: lpFindFileData=0x22bdd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0638c00, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24ec00 [0214.465] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21aab8 [0214.466] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a8c0 | out: hHeap=0x1f0000) returned 1 [0214.466] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0214.466] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x22bdd70 | out: lpFindFileData=0x22bdd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0638c00, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0214.466] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21ab60 [0214.466] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21aab8 | out: hHeap=0x1f0000) returned 1 [0214.466] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0214.466] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0214.466] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x22bdd70 | out: lpFindFileData=0x22bdd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x387, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="insertbase.xml", cAlternateFileName="")) returned 1 [0214.466] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2607c0 [0214.466] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a8c0 [0214.466] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xee) returned 0x2232e0 [0214.466] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a8c0 | out: hHeap=0x1f0000) returned 1 [0214.466] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ab60 | out: hHeap=0x1f0000) returned 1 [0214.466] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607c0 | out: hHeap=0x1f0000) returned 1 [0214.466] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\insertbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\insert\\insertbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdb48, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.467] GetLastError () returned 0x5 [0214.467] GetLastError () returned 0x5 [0214.467] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x22bdd70 | out: lpFindFileData=0x22bdd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x387, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="insertbase.xml", cAlternateFileName="")) returned 0 [0214.467] FindClose (in: hFindFile=0x24ec00 | out: hFindFile=0x24ec00) returned 1 [0214.467] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2232e0 | out: hHeap=0x1f0000) returned 1 [0214.467] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22db68 | out: hHeap=0x1f0000) returned 1 [0214.467] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0214.467] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234500 | out: hHeap=0x1f0000) returned 1 [0214.467] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234740 [0214.467] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0214.467] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22db68 [0214.467] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21aab8 [0214.467] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\*", lpFindFileData=0x22bdd70 | out: lpFindFileData=0x22bdd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa063932e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24e7c0 [0214.468] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219cf0 [0214.468] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21aab8 | out: hHeap=0x1f0000) returned 1 [0214.468] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0214.468] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22bdd70 | out: lpFindFileData=0x22bdd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa063932e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0214.468] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a230 [0214.468] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219cf0 | out: hHeap=0x1f0000) returned 1 [0214.468] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0214.468] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0214.468] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22bdd70 | out: lpFindFileData=0x22bdd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x180, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="ea.xml", cAlternateFileName="")) returned 1 [0214.468] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a2d8 [0214.468] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a230 | out: hHeap=0x1f0000) returned 1 [0214.469] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdb48, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.469] GetLastError () returned 0x5 [0214.469] GetLastError () returned 0x5 [0214.469] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22bdd70 | out: lpFindFileData=0x22bdd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x387, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="keypadbase.xml", cAlternateFileName="")) returned 1 [0214.469] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260518 [0214.469] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a4d0 [0214.469] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xee) returned 0x2232e0 [0214.469] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a4d0 | out: hHeap=0x1f0000) returned 1 [0214.469] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a2d8 | out: hHeap=0x1f0000) returned 1 [0214.469] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0214.470] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdb48, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.470] GetLastError () returned 0x5 [0214.470] GetLastError () returned 0x5 [0214.470] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22bdd70 | out: lpFindFileData=0x22bdd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x188, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="kor-kor.xml", cAlternateFileName="")) returned 1 [0214.470] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0214.470] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a770 [0214.470] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xee) returned 0x220a58 [0214.470] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a770 | out: hHeap=0x1f0000) returned 1 [0214.470] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2232e0 | out: hHeap=0x1f0000) returned 1 [0214.470] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0214.471] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdb48, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.471] GetLastError () returned 0x5 [0214.471] GetLastError () returned 0x5 [0214.471] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22bdd70 | out: lpFindFileData=0x22bdd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x188, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="kor-kor.xml", cAlternateFileName="")) returned 0 [0214.774] FindClose (in: hFindFile=0x24e7c0 | out: hFindFile=0x24e7c0) returned 1 [0214.789] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220a58 | out: hHeap=0x1f0000) returned 1 [0214.789] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22db68 | out: hHeap=0x1f0000) returned 1 [0214.789] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0214.790] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234740 | out: hHeap=0x1f0000) returned 1 [0214.790] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346f8 [0214.790] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0214.790] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262fe0 [0214.790] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219d98 [0214.790] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\*", lpFindFileData=0x22bdd70 | out: lpFindFileData=0x22bdd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cd023, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24e6c0 [0214.806] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0214.806] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x236818 [0214.813] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0214.813] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219d98 | out: hHeap=0x1f0000) returned 1 [0214.813] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0214.813] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x22bdd70 | out: lpFindFileData=0x22bdd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cd023, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0214.813] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0214.814] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x220a58 [0214.814] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0214.814] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236818 | out: hHeap=0x1f0000) returned 1 [0214.814] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0214.814] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0214.814] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x22bdd70 | out: lpFindFileData=0x22bdd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd05, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="base.xml", cAlternateFileName="")) returned 1 [0214.814] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c20 [0214.814] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0214.814] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x236818 [0214.814] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0214.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220a58 | out: hHeap=0x1f0000) returned 1 [0214.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c20 | out: hHeap=0x1f0000) returned 1 [0214.816] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdb48, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.816] GetLastError () returned 0x5 [0214.817] GetLastError () returned 0x5 [0214.817] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x22bdd70 | out: lpFindFileData=0x22bdd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xf7, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="baseAltGr_rtl.xml", cAlternateFileName="")) returned 1 [0214.817] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf70 [0214.817] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0214.817] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x220a58 [0214.817] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0214.817] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236818 | out: hHeap=0x1f0000) returned 1 [0214.818] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf70 | out: hHeap=0x1f0000) returned 1 [0214.818] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\baseAltGr_rtl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\basealtgr_rtl.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdb48, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.818] GetLastError () returned 0x5 [0214.818] GetLastError () returned 0x5 [0214.819] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x22bdd70 | out: lpFindFileData=0x22bdd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xdc4, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="base_altgr.xml", cAlternateFileName="")) returned 1 [0214.819] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0214.819] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0214.819] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x236818 [0214.819] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0214.819] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220a58 | out: hHeap=0x1f0000) returned 1 [0214.819] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0214.820] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_altgr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_altgr.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdb48, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.820] GetLastError () returned 0x5 [0214.820] GetLastError () returned 0x5 [0214.820] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x22bdd70 | out: lpFindFileData=0x22bdd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xdc9, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="base_ca.xml", cAlternateFileName="")) returned 1 [0214.820] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0214.821] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0214.821] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x220a58 [0214.821] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0214.821] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236818 | out: hHeap=0x1f0000) returned 1 [0214.821] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0214.822] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_ca.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_ca.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdb48, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.822] GetLastError () returned 0x5 [0214.822] GetLastError () returned 0x5 [0214.822] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x22bdd70 | out: lpFindFileData=0x22bdd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2e2, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="base_heb.xml", cAlternateFileName="")) returned 1 [0214.822] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0214.822] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0214.822] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x236818 [0214.822] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0214.823] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220a58 | out: hHeap=0x1f0000) returned 1 [0214.823] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0214.823] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_heb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_heb.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdb48, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.823] GetLastError () returned 0x5 [0214.823] GetLastError () returned 0x5 [0214.824] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x22bdd70 | out: lpFindFileData=0x22bdd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x324, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="base_jpn.xml", cAlternateFileName="")) returned 1 [0214.824] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609f0 [0214.824] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0214.824] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x220a58 [0214.824] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0214.824] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236818 | out: hHeap=0x1f0000) returned 1 [0214.824] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609f0 | out: hHeap=0x1f0000) returned 1 [0214.825] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_jpn.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_jpn.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdb48, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.825] GetLastError () returned 0x5 [0214.825] GetLastError () returned 0x5 [0214.825] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x22bdd70 | out: lpFindFileData=0x22bdd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1e8, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="base_kor.xml", cAlternateFileName="")) returned 1 [0214.825] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609f0 [0214.825] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0214.825] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x236818 [0214.825] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0214.826] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220a58 | out: hHeap=0x1f0000) returned 1 [0214.826] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609f0 | out: hHeap=0x1f0000) returned 1 [0214.826] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_kor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_kor.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdb48, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.826] GetLastError () returned 0x5 [0214.826] GetLastError () returned 0x5 [0214.827] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x22bdd70 | out: lpFindFileData=0x22bdd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x269, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="base_rtl.xml", cAlternateFileName="")) returned 1 [0214.827] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0214.827] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0214.827] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x220a58 [0214.827] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0214.827] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236818 | out: hHeap=0x1f0000) returned 1 [0214.827] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0214.828] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_rtl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_rtl.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdb48, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.828] GetLastError () returned 0x5 [0214.828] GetLastError () returned 0x5 [0214.828] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x22bdd70 | out: lpFindFileData=0x22bdd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x40e8, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="ja-jp.xml", cAlternateFileName="")) returned 1 [0214.828] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0214.828] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0214.828] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x236818 [0214.828] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0214.828] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220a58 | out: hHeap=0x1f0000) returned 1 [0214.829] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0214.829] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\ja-jp.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\ja-jp.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdb48, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.829] GetLastError () returned 0x5 [0214.829] GetLastError () returned 0x5 [0214.829] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x22bdd70 | out: lpFindFileData=0x22bdd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3af9, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="ko-kr.xml", cAlternateFileName="")) returned 1 [0214.829] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0214.829] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0214.830] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x220a58 [0214.830] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0214.830] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236818 | out: hHeap=0x1f0000) returned 1 [0214.830] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0214.830] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\ko-kr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\ko-kr.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdb48, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.830] GetLastError () returned 0x5 [0214.830] GetLastError () returned 0x5 [0214.830] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x22bdd70 | out: lpFindFileData=0x22bdd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x264b, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="zh-changjei.xml", cAlternateFileName="")) returned 1 [0214.831] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609f0 [0214.831] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0214.831] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x236818 [0214.831] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0214.831] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220a58 | out: hHeap=0x1f0000) returned 1 [0214.831] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609f0 | out: hHeap=0x1f0000) returned 1 [0214.832] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-changjei.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-changjei.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdb48, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.832] GetLastError () returned 0x5 [0214.832] GetLastError () returned 0x5 [0214.832] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x22bdd70 | out: lpFindFileData=0x22bdd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3fbc74, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2b3b, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="zh-dayi.xml", cAlternateFileName="")) returned 1 [0214.832] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0214.832] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0214.832] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x220a58 [0214.833] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0214.833] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236818 | out: hHeap=0x1f0000) returned 1 [0214.833] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0214.833] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-dayi.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-dayi.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdb48, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.833] GetLastError () returned 0x5 [0214.833] GetLastError () returned 0x5 [0214.834] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x22bdd70 | out: lpFindFileData=0x22bdd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2ac3, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="zh-phonetic.xml", cAlternateFileName="")) returned 1 [0214.834] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0214.834] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0214.834] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x236818 [0214.834] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0214.834] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220a58 | out: hHeap=0x1f0000) returned 1 [0214.834] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0214.835] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdb48, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.835] GetLastError () returned 0x5 [0214.835] GetLastError () returned 0x5 [0214.835] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x22bdd70 | out: lpFindFileData=0x22bdd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2ac3, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="zh-phonetic.xml", cAlternateFileName="")) returned 0 [0214.835] FindClose (in: hFindFile=0x24e6c0 | out: hFindFile=0x24e6c0) returned 1 [0214.836] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236818 | out: hHeap=0x1f0000) returned 1 [0214.836] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262fe0 | out: hHeap=0x1f0000) returned 1 [0214.836] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0214.836] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346f8 | out: hHeap=0x1f0000) returned 1 [0214.836] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234788 [0214.837] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0214.837] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262b18 [0214.837] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219ee8 [0214.837] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\*", lpFindFileData=0x22bdd70 | out: lpFindFileData=0x22bdd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cdb88, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24eb80 [0214.837] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a4d0 [0214.837] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219ee8 | out: hHeap=0x1f0000) returned 1 [0214.837] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0214.837] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x22bdd70 | out: lpFindFileData=0x22bdd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cdb88, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0214.837] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219d98 [0214.837] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a4d0 | out: hHeap=0x1f0000) returned 1 [0214.837] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0214.838] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0214.838] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x22bdd70 | out: lpFindFileData=0x22bdd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2e1, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="oskclearuibase.xml", cAlternateFileName="")) returned 1 [0214.838] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf70 [0214.838] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a4d0 [0214.838] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xee) returned 0x220a58 [0214.838] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a4d0 | out: hHeap=0x1f0000) returned 1 [0214.838] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219d98 | out: hHeap=0x1f0000) returned 1 [0214.838] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf70 | out: hHeap=0x1f0000) returned 1 [0214.838] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\oskclearuibase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\oskclearuibase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdb48, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.839] GetLastError () returned 0x5 [0214.839] GetLastError () returned 0x5 [0214.839] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x22bdd70 | out: lpFindFileData=0x22bdd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2e1, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="oskclearuibase.xml", cAlternateFileName="")) returned 0 [0214.839] FindClose (in: hFindFile=0x24eb80 | out: hFindFile=0x24eb80) returned 1 [0214.839] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220a58 | out: hHeap=0x1f0000) returned 1 [0214.839] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262b18 | out: hHeap=0x1f0000) returned 1 [0214.839] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0214.839] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234788 | out: hHeap=0x1f0000) returned 1 [0214.839] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2349c8 [0214.839] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c20 [0214.840] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2624b8 [0214.840] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a230 [0214.840] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\*", lpFindFileData=0x22bdd70 | out: lpFindFileData=0x22bdd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ce328, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24e780 [0214.840] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219d98 [0214.840] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a230 | out: hHeap=0x1f0000) returned 1 [0214.840] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0214.840] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x22bdd70 | out: lpFindFileData=0x22bdd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ce328, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0214.840] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a4d0 [0214.840] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219d98 | out: hHeap=0x1f0000) returned 1 [0214.840] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0214.840] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0214.841] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x22bdd70 | out: lpFindFileData=0x22bdd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="oskmenubase.xml", cAlternateFileName="")) returned 1 [0214.841] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0214.841] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219d98 [0214.841] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xee) returned 0x220a58 [0214.841] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219d98 | out: hHeap=0x1f0000) returned 1 [0214.841] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a4d0 | out: hHeap=0x1f0000) returned 1 [0214.841] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0214.841] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdb48, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.842] GetLastError () returned 0x5 [0214.842] GetLastError () returned 0x5 [0214.842] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x22bdd70 | out: lpFindFileData=0x22bdd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="oskmenubase.xml", cAlternateFileName="")) returned 0 [0214.842] FindClose (in: hFindFile=0x24e780 | out: hFindFile=0x24e780) returned 1 [0214.842] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220a58 | out: hHeap=0x1f0000) returned 1 [0214.842] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2624b8 | out: hHeap=0x1f0000) returned 1 [0214.842] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c20 | out: hHeap=0x1f0000) returned 1 [0214.842] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2349c8 | out: hHeap=0x1f0000) returned 1 [0214.842] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234740 [0214.842] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609f0 [0214.842] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262980 [0214.843] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a230 [0214.843] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav\\*", lpFindFileData=0x22bdd70 | out: lpFindFileData=0x22bdd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ce7a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24ec40 [0214.843] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219d98 [0214.843] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a230 | out: hHeap=0x1f0000) returned 1 [0214.843] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0214.843] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x22bdd70 | out: lpFindFileData=0x22bdd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ce7a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0214.843] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a4d0 [0214.843] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219d98 | out: hHeap=0x1f0000) returned 1 [0214.843] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0214.843] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0214.843] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x22bdd70 | out: lpFindFileData=0x22bdd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x42d, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="osknavbase.xml", cAlternateFileName="")) returned 1 [0214.844] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0214.844] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219d98 [0214.844] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xee) returned 0x220a58 [0214.844] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219d98 | out: hHeap=0x1f0000) returned 1 [0214.844] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a4d0 | out: hHeap=0x1f0000) returned 1 [0214.844] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0214.844] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav\\osknavbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknav\\osknavbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdb48, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.844] GetLastError () returned 0x5 [0214.844] GetLastError () returned 0x5 [0214.844] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x22bdd70 | out: lpFindFileData=0x22bdd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x42d, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="osknavbase.xml", cAlternateFileName="")) returned 0 [0214.844] FindClose (in: hFindFile=0x24ec40 | out: hFindFile=0x24ec40) returned 1 [0214.845] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220a58 | out: hHeap=0x1f0000) returned 1 [0214.845] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262980 | out: hHeap=0x1f0000) returned 1 [0214.845] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609f0 | out: hHeap=0x1f0000) returned 1 [0214.845] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234740 | out: hHeap=0x1f0000) returned 1 [0214.845] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346f8 [0214.845] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c20 [0214.845] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x261b28 [0214.845] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219d98 [0214.845] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\*", lpFindFileData=0x22bdd70 | out: lpFindFileData=0x22bdd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ceb7f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24e940 [0214.845] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a4d0 [0214.845] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219d98 | out: hHeap=0x1f0000) returned 1 [0214.845] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0214.846] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22bdd70 | out: lpFindFileData=0x22bdd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ceb7f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0214.846] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219d98 [0214.846] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a4d0 | out: hHeap=0x1f0000) returned 1 [0214.846] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0214.846] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0214.846] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22bdd70 | out: lpFindFileData=0x22bdd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x73d, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="osknumpadbase.xml", cAlternateFileName="")) returned 1 [0214.846] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf70 [0214.846] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219e40 [0214.846] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xee) returned 0x220a58 [0214.846] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219e40 | out: hHeap=0x1f0000) returned 1 [0215.323] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219d98 | out: hHeap=0x1f0000) returned 1 [0215.323] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf70 | out: hHeap=0x1f0000) returned 1 [0215.331] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdb48, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.331] GetLastError () returned 0x5 [0215.331] GetLastError () returned 0x5 [0215.332] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22bdd70 | out: lpFindFileData=0x22bdd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x73d, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="osknumpadbase.xml", cAlternateFileName="")) returned 0 [0215.332] FindClose (in: hFindFile=0x24e940 | out: hFindFile=0x24e940) returned 1 [0215.332] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220a58 | out: hHeap=0x1f0000) returned 1 [0215.332] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261b28 | out: hHeap=0x1f0000) returned 1 [0215.332] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c20 | out: hHeap=0x1f0000) returned 1 [0215.332] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346f8 | out: hHeap=0x1f0000) returned 1 [0215.332] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2344b8 [0215.332] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0215.332] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x263178 [0215.332] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x232e48 [0215.332] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\*", lpFindFileData=0x22bdd70 | out: lpFindFileData=0x22bdd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cef41, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24e680 [0215.332] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x232f98 [0215.333] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232e48 | out: hHeap=0x1f0000) returned 1 [0215.333] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0215.333] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x22bdd70 | out: lpFindFileData=0x22bdd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cef41, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0215.333] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x232da0 [0215.333] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232f98 | out: hHeap=0x1f0000) returned 1 [0215.333] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0215.333] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0215.333] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x22bdd70 | out: lpFindFileData=0x22bdd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x39c, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="oskpredbase.xml", cAlternateFileName="")) returned 1 [0215.333] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0215.333] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x233580 [0215.333] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xee) returned 0x220a58 [0215.333] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233580 | out: hHeap=0x1f0000) returned 1 [0215.333] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232da0 | out: hHeap=0x1f0000) returned 1 [0215.333] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0215.333] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdb48, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.334] GetLastError () returned 0x5 [0215.334] GetLastError () returned 0x5 [0215.334] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x22bdd70 | out: lpFindFileData=0x22bdd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x39c, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="oskpredbase.xml", cAlternateFileName="")) returned 0 [0215.334] FindClose (in: hFindFile=0x24e680 | out: hFindFile=0x24e680) returned 1 [0215.334] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220a58 | out: hHeap=0x1f0000) returned 1 [0215.334] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263178 | out: hHeap=0x1f0000) returned 1 [0215.334] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0215.334] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2344b8 | out: hHeap=0x1f0000) returned 1 [0215.334] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2348f0 [0215.334] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238488 [0215.334] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2617f8 [0215.334] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x233388 [0215.334] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\*", lpFindFileData=0x22bdd70 | out: lpFindFileData=0x22bdd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cf371, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24eb80 [0215.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x2336d0 [0215.335] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233388 | out: hHeap=0x1f0000) returned 1 [0215.335] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0215.335] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x22bdd70 | out: lpFindFileData=0x22bdd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cf371, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0215.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x233190 [0215.335] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2336d0 | out: hHeap=0x1f0000) returned 1 [0215.335] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0215.335] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0215.335] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x22bdd70 | out: lpFindFileData=0x22bdd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3fbc74, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2b6, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="ea-sym.xml", cAlternateFileName="")) returned 1 [0215.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0215.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x233ac0 [0215.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xee) returned 0x220a58 [0215.335] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233ac0 | out: hHeap=0x1f0000) returned 1 [0215.335] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233190 | out: hHeap=0x1f0000) returned 1 [0215.335] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0215.335] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdb48, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.336] GetLastError () returned 0x5 [0215.336] GetLastError () returned 0x5 [0215.336] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x22bdd70 | out: lpFindFileData=0x22bdd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x325, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="ja-jp-sym.xml", cAlternateFileName="")) returned 1 [0215.336] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238438 [0215.336] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x2332e0 [0215.336] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xee) returned 0x217038 [0215.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2332e0 | out: hHeap=0x1f0000) returned 1 [0215.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220a58 | out: hHeap=0x1f0000) returned 1 [0215.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238438 | out: hHeap=0x1f0000) returned 1 [0215.336] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdb48, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.336] GetLastError () returned 0x5 [0215.336] GetLastError () returned 0x5 [0215.337] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x22bdd70 | out: lpFindFileData=0x22bdd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xeef, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="symbase.xml", cAlternateFileName="")) returned 1 [0215.337] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238438 [0215.337] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x233388 [0215.337] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xee) returned 0x220a58 [0215.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233388 | out: hHeap=0x1f0000) returned 1 [0215.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0215.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238438 | out: hHeap=0x1f0000) returned 1 [0215.337] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdb48, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.337] GetLastError () returned 0x5 [0215.337] GetLastError () returned 0x5 [0215.337] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x22bdd70 | out: lpFindFileData=0x22bdd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xeef, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="symbase.xml", cAlternateFileName="")) returned 0 [0215.337] FindClose (in: hFindFile=0x24eb80 | out: hFindFile=0x24eb80) returned 1 [0215.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220a58 | out: hHeap=0x1f0000) returned 1 [0215.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2617f8 | out: hHeap=0x1f0000) returned 1 [0215.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238488 | out: hHeap=0x1f0000) returned 1 [0215.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2348f0 | out: hHeap=0x1f0000) returned 1 [0215.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220748 | out: hHeap=0x1f0000) returned 1 [0215.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219c48 | out: hHeap=0x1f0000) returned 1 [0215.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a188 | out: hHeap=0x1f0000) returned 1 [0215.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a968 | out: hHeap=0x1f0000) returned 1 [0215.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0215.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219f90 | out: hHeap=0x1f0000) returned 1 [0215.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a038 | out: hHeap=0x1f0000) returned 1 [0215.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21aa10 | out: hHeap=0x1f0000) returned 1 [0215.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a6c8 | out: hHeap=0x1f0000) returned 1 [0215.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a0e0 | out: hHeap=0x1f0000) returned 1 [0215.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a818 | out: hHeap=0x1f0000) returned 1 [0215.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f5d8 | out: hHeap=0x1f0000) returned 1 [0215.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e1c8 | out: hHeap=0x1f0000) returned 1 [0215.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a18 | out: hHeap=0x1f0000) returned 1 [0215.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2343e0 | out: hHeap=0x1f0000) returned 1 [0215.338] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2343e0 [0215.338] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0215.338] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x261b28 [0215.339] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286c48 [0215.339] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\he-IL\\*", lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cf9a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName=".", cAlternateFileName="")) returned 0x24e900 [0215.339] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2863c8 [0215.339] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286c48 | out: hHeap=0x1f0000) returned 1 [0215.339] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0215.339] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cf9a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="..", cAlternateFileName="")) returned 1 [0215.339] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2866f8 [0215.339] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2863c8 | out: hHeap=0x1f0000) returned 1 [0215.339] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0215.339] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0215.339] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c3a52f7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3c3a52f7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3c3a52f7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0215.339] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238438 [0215.339] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2863c8 [0215.339] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0215.339] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2863c8 | out: hHeap=0x1f0000) returned 1 [0215.339] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2866f8 | out: hHeap=0x1f0000) returned 1 [0215.339] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238438 | out: hHeap=0x1f0000) returned 1 [0215.340] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\he-IL\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\he-il\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.340] GetLastError () returned 0x5 [0215.340] GetLastError () returned 0x5 [0215.340] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c3a52f7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3c3a52f7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3c3a52f7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0215.340] FindClose (in: hFindFile=0x24e900 | out: hFindFile=0x24e900) returned 1 [0215.340] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0215.340] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261b28 | out: hHeap=0x1f0000) returned 1 [0215.340] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0215.340] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2343e0 | out: hHeap=0x1f0000) returned 1 [0215.340] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2343e0 [0215.340] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0215.340] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262cb0 [0215.340] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2861a8 [0215.340] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\hr-HR\\*", lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cfce2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName=".", cAlternateFileName="")) returned 0x24ecc0 [0215.341] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2863c8 [0215.341] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2861a8 | out: hHeap=0x1f0000) returned 1 [0215.341] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0215.341] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cfce2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="..", cAlternateFileName="")) returned 1 [0215.341] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2865e8 [0215.341] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2863c8 | out: hHeap=0x1f0000) returned 1 [0215.341] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0215.341] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0215.341] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c3a52f7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3c3a52f7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3c3a52f7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0215.341] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0215.341] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286d58 [0215.341] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0215.341] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286d58 | out: hHeap=0x1f0000) returned 1 [0215.341] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2865e8 | out: hHeap=0x1f0000) returned 1 [0215.341] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0215.341] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\hr-HR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hr-hr\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.342] GetLastError () returned 0x5 [0215.342] GetLastError () returned 0x5 [0215.342] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c3a52f7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3c3a52f7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3c3a52f7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0215.342] FindClose (in: hFindFile=0x24ecc0 | out: hFindFile=0x24ecc0) returned 1 [0215.342] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0215.342] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262cb0 | out: hHeap=0x1f0000) returned 1 [0215.342] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0215.342] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2343e0 | out: hHeap=0x1f0000) returned 1 [0215.342] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234110 [0215.342] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0215.342] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x261e58 [0215.342] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2863c8 [0215.342] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\hu-HU\\*", lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06d0656, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName=".", cAlternateFileName="")) returned 0x24e7c0 [0215.343] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286c48 [0215.343] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2863c8 | out: hHeap=0x1f0000) returned 1 [0215.343] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0215.343] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06d0656, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="..", cAlternateFileName="")) returned 1 [0215.343] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286670 [0215.343] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286c48 | out: hHeap=0x1f0000) returned 1 [0215.343] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0215.343] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0215.343] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c3a52f7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3c3a52f7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3c3a52f7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0215.343] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0215.343] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286c48 [0215.343] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0215.343] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286c48 | out: hHeap=0x1f0000) returned 1 [0215.343] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286670 | out: hHeap=0x1f0000) returned 1 [0215.343] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0215.343] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\hu-HU\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hu-hu\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.344] GetLastError () returned 0x5 [0215.344] GetLastError () returned 0x5 [0215.344] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c3a52f7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3c3a52f7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3c3a52f7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0215.344] FindClose (in: hFindFile=0x24e7c0 | out: hFindFile=0x24e7c0) returned 1 [0215.344] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0215.344] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261e58 | out: hHeap=0x1f0000) returned 1 [0215.344] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0215.344] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234110 | out: hHeap=0x1f0000) returned 1 [0215.344] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2343e0 [0215.344] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0215.344] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2634a8 [0215.344] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0215.344] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\HWRCustomization\\*", lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6eba2ec1, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0xa07693a9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6eba2ec1, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName=".", cAlternateFileName="")) returned 0x24ed40 [0215.345] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0215.345] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0215.345] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0215.345] FindNextFileW (in: hFindFile=0x24ed40, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6eba2ec1, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0xa07693a9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6eba2ec1, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="..", cAlternateFileName="")) returned 1 [0215.345] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0215.345] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0215.345] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0215.345] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0215.345] FindNextFileW (in: hFindFile=0x24ed40, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6eba2ec1, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0xa07693a9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6eba2ec1, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="..", cAlternateFileName="")) returned 0 [0215.345] FindClose (in: hFindFile=0x24ed40 | out: hFindFile=0x24ed40) returned 1 [0215.345] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0215.345] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2634a8 | out: hHeap=0x1f0000) returned 1 [0215.345] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0215.346] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2343e0 | out: hHeap=0x1f0000) returned 1 [0215.346] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2343e0 [0215.346] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0215.346] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2634a8 [0215.346] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2861a8 [0215.346] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\it-IT\\*", lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0769b1e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName=".", cAlternateFileName="")) returned 0x24e900 [0215.346] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286450 [0215.346] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2861a8 | out: hHeap=0x1f0000) returned 1 [0215.346] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0215.346] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0769b1e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="..", cAlternateFileName="")) returned 1 [0215.351] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286c48 [0215.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286450 | out: hHeap=0x1f0000) returned 1 [0215.351] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0215.351] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0215.351] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e9592f9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e9592f9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e9592f9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0215.351] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0215.351] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2863c8 [0215.352] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0215.352] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2863c8 | out: hHeap=0x1f0000) returned 1 [0215.352] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286c48 | out: hHeap=0x1f0000) returned 1 [0215.352] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0215.352] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\it-IT\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\it-it\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.352] GetLastError () returned 0x5 [0215.352] GetLastError () returned 0x5 [0215.352] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e9592f9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e9592f9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e9592f9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0215.352] FindClose (in: hFindFile=0x24e900 | out: hFindFile=0x24e900) returned 1 [0215.353] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0215.353] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2634a8 | out: hHeap=0x1f0000) returned 1 [0215.353] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0215.353] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2343e0 | out: hHeap=0x1f0000) returned 1 [0215.353] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234110 [0215.353] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0215.353] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262650 [0215.353] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2866f8 [0215.353] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ja-JP\\*", lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076a026, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName=".", cAlternateFileName="")) returned 0x24e7c0 [0215.353] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2861a8 [0215.353] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2866f8 | out: hHeap=0x1f0000) returned 1 [0215.353] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0215.353] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076a026, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="..", cAlternateFileName="")) returned 1 [0215.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2863c8 [0215.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2861a8 | out: hHeap=0x1f0000) returned 1 [0215.354] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0215.354] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0215.354] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e9592f9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e9592f9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e9592f9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0215.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0215.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2861a8 [0215.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0215.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2861a8 | out: hHeap=0x1f0000) returned 1 [0215.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2863c8 | out: hHeap=0x1f0000) returned 1 [0215.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0215.354] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ja-JP\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ja-jp\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.355] GetLastError () returned 0x5 [0215.355] GetLastError () returned 0x5 [0215.355] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e9592f9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e9592f9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e9592f9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0215.355] FindClose (in: hFindFile=0x24e7c0 | out: hFindFile=0x24e7c0) returned 1 [0215.355] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0215.355] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262650 | out: hHeap=0x1f0000) returned 1 [0215.355] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0215.355] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234110 | out: hHeap=0x1f0000) returned 1 [0215.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234110 [0215.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0215.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x261b28 [0215.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2866f8 [0215.355] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ko-KR\\*", lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076a7a6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName=".", cAlternateFileName="")) returned 0x24ea80 [0215.356] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286c48 [0215.356] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2866f8 | out: hHeap=0x1f0000) returned 1 [0215.356] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0215.356] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076a7a6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="..", cAlternateFileName="")) returned 1 [0215.356] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286d58 [0215.356] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286c48 | out: hHeap=0x1f0000) returned 1 [0215.356] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0215.356] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0215.356] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0215.356] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0215.356] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2866f8 [0215.356] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0215.356] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2866f8 | out: hHeap=0x1f0000) returned 1 [0215.356] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286d58 | out: hHeap=0x1f0000) returned 1 [0215.356] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0215.357] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ko-KR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ko-kr\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.357] GetLastError () returned 0x5 [0215.357] GetLastError () returned 0x5 [0215.357] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0215.357] FindClose (in: hFindFile=0x24ea80 | out: hFindFile=0x24ea80) returned 1 [0215.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0215.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261b28 | out: hHeap=0x1f0000) returned 1 [0215.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0215.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234110 | out: hHeap=0x1f0000) returned 1 [0215.357] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2343e0 [0215.357] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0215.357] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262650 [0215.357] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0215.357] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\LanguageModel\\*", lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076afd8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName=".", cAlternateFileName="")) returned 0x24ec40 [0215.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0215.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0215.358] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0215.358] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076afd8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="..", cAlternateFileName="")) returned 1 [0215.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0215.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0215.358] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0215.358] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0215.358] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3fbc74, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2fb, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="chstic.dgml", cAlternateFileName="")) returned 1 [0215.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0215.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0215.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x220748 [0215.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0215.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0215.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0215.359] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\LanguageModel\\chstic.dgml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\languagemodel\\chstic.dgml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.359] GetLastError () returned 0x5 [0215.359] GetLastError () returned 0x5 [0215.359] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3fbc74, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2fb, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="chstic.dgml", cAlternateFileName="")) returned 0 [0215.359] FindClose (in: hFindFile=0x24ec40 | out: hFindFile=0x24ec40) returned 1 [0215.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220748 | out: hHeap=0x1f0000) returned 1 [0215.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262650 | out: hHeap=0x1f0000) returned 1 [0215.360] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0215.360] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2343e0 | out: hHeap=0x1f0000) returned 1 [0215.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234110 [0215.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0215.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2634a8 [0215.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286450 [0215.360] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\lt-LT\\*", lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076b52b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName=".", cAlternateFileName="")) returned 0x24e940 [0215.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286c48 [0215.360] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286450 | out: hHeap=0x1f0000) returned 1 [0215.360] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0215.360] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076b52b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="..", cAlternateFileName="")) returned 1 [0215.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2863c8 [0215.360] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286c48 | out: hHeap=0x1f0000) returned 1 [0215.360] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0215.360] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0215.360] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0215.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238438 [0215.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2861a8 [0215.361] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0215.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2861a8 | out: hHeap=0x1f0000) returned 1 [0215.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2863c8 | out: hHeap=0x1f0000) returned 1 [0215.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238438 | out: hHeap=0x1f0000) returned 1 [0215.361] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\lt-LT\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lt-lt\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.361] GetLastError () returned 0x5 [0215.361] GetLastError () returned 0x5 [0215.361] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0215.361] FindClose (in: hFindFile=0x24e940 | out: hFindFile=0x24e940) returned 1 [0215.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0215.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2634a8 | out: hHeap=0x1f0000) returned 1 [0215.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0215.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234110 | out: hHeap=0x1f0000) returned 1 [0215.362] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234110 [0215.362] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0215.362] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262650 [0215.362] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286c48 [0215.362] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\lv-LV\\*", lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076ba6e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName=".", cAlternateFileName="")) returned 0x24e7c0 [0215.367] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286890 [0215.367] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286c48 | out: hHeap=0x1f0000) returned 1 [0215.367] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0215.367] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076ba6e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="..", cAlternateFileName="")) returned 1 [0215.367] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2861a8 [0215.367] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286890 | out: hHeap=0x1f0000) returned 1 [0215.367] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0215.367] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0215.367] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0215.368] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0215.368] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2863c8 [0215.368] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0215.368] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2863c8 | out: hHeap=0x1f0000) returned 1 [0215.368] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2861a8 | out: hHeap=0x1f0000) returned 1 [0215.368] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0215.368] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\lv-LV\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lv-lv\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.368] GetLastError () returned 0x5 [0215.368] GetLastError () returned 0x5 [0215.368] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0215.368] FindClose (in: hFindFile=0x24e7c0 | out: hFindFile=0x24e7c0) returned 1 [0215.369] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0215.369] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262650 | out: hHeap=0x1f0000) returned 1 [0215.369] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0215.369] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234110 | out: hHeap=0x1f0000) returned 1 [0215.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234110 [0215.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238438 [0215.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x261e58 [0215.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286670 [0215.369] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\nb-NO\\*", lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076bff5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName=".", cAlternateFileName="")) returned 0x24e680 [0215.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286890 [0215.369] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286670 | out: hHeap=0x1f0000) returned 1 [0215.369] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0215.369] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076bff5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="..", cAlternateFileName="")) returned 1 [0215.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2863c8 [0215.369] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286890 | out: hHeap=0x1f0000) returned 1 [0215.370] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0215.370] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0215.370] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e90ce26, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e90ce26, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e90ce26, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0215.370] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0215.370] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2861a8 [0215.370] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0215.370] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2861a8 | out: hHeap=0x1f0000) returned 1 [0215.370] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2863c8 | out: hHeap=0x1f0000) returned 1 [0215.370] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0215.370] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\nb-NO\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nb-no\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.370] GetLastError () returned 0x5 [0215.370] GetLastError () returned 0x5 [0215.370] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e90ce26, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e90ce26, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e90ce26, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0215.370] FindClose (in: hFindFile=0x24e680 | out: hFindFile=0x24e680) returned 1 [0215.371] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0215.371] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261e58 | out: hHeap=0x1f0000) returned 1 [0215.371] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238438 | out: hHeap=0x1f0000) returned 1 [0215.371] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234110 | out: hHeap=0x1f0000) returned 1 [0215.371] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234110 [0215.371] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238488 [0215.371] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262fe0 [0215.371] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286d58 [0215.371] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\nl-NL\\*", lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076c75d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName=".", cAlternateFileName="")) returned 0x24ed40 [0215.371] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2864d8 [0215.371] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286d58 | out: hHeap=0x1f0000) returned 1 [0215.371] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0215.371] FindNextFileW (in: hFindFile=0x24ed40, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076c75d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="..", cAlternateFileName="")) returned 1 [0215.371] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286670 [0215.371] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2864d8 | out: hHeap=0x1f0000) returned 1 [0215.371] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0215.371] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0215.371] FindNextFileW (in: hFindFile=0x24ed40, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0215.371] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0215.371] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286c48 [0215.371] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0215.372] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286c48 | out: hHeap=0x1f0000) returned 1 [0215.372] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286670 | out: hHeap=0x1f0000) returned 1 [0215.372] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0215.372] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\nl-NL\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nl-nl\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.372] GetLastError () returned 0x5 [0215.372] GetLastError () returned 0x5 [0215.372] FindNextFileW (in: hFindFile=0x24ed40, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0215.372] FindClose (in: hFindFile=0x24ed40 | out: hFindFile=0x24ed40) returned 1 [0215.372] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0215.372] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262fe0 | out: hHeap=0x1f0000) returned 1 [0215.372] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238488 | out: hHeap=0x1f0000) returned 1 [0215.372] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234110 | out: hHeap=0x1f0000) returned 1 [0215.372] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2343e0 [0215.372] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0215.372] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x261e58 [0215.372] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286890 [0215.373] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\pl-PL\\*", lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d57c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName=".", cAlternateFileName="")) returned 0x24e680 [0215.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286d58 [0215.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286890 | out: hHeap=0x1f0000) returned 1 [0215.373] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0215.373] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d57c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="..", cAlternateFileName="")) returned 1 [0215.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2861a8 [0215.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286d58 | out: hHeap=0x1f0000) returned 1 [0215.373] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0215.373] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0215.373] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e8e6bbf, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e8e6bbf, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e8e6bbf, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0215.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238438 [0215.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2863c8 [0215.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0215.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2863c8 | out: hHeap=0x1f0000) returned 1 [0215.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2861a8 | out: hHeap=0x1f0000) returned 1 [0215.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238438 | out: hHeap=0x1f0000) returned 1 [0215.373] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\pl-PL\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pl-pl\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.374] GetLastError () returned 0x5 [0215.374] GetLastError () returned 0x5 [0215.374] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e8e6bbf, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e8e6bbf, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e8e6bbf, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0215.374] FindClose (in: hFindFile=0x24e680 | out: hFindFile=0x24e680) returned 1 [0215.374] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0215.374] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261e58 | out: hHeap=0x1f0000) returned 1 [0215.374] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0215.374] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2343e0 | out: hHeap=0x1f0000) returned 1 [0215.374] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234110 [0215.374] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0215.374] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x261e58 [0215.374] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286d58 [0215.374] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\pt-BR\\*", lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d988, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName=".", cAlternateFileName="")) returned 0x24eac0 [0215.374] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286c48 [0215.374] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286d58 | out: hHeap=0x1f0000) returned 1 [0215.374] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0215.374] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d988, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="..", cAlternateFileName="")) returned 1 [0215.374] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286d58 [0215.375] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286c48 | out: hHeap=0x1f0000) returned 1 [0215.375] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0215.375] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0215.375] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e8e6bbf, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e8e6bbf, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e8e6bbf, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0215.375] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0215.375] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2863c8 [0215.375] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0215.375] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2863c8 | out: hHeap=0x1f0000) returned 1 [0215.375] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286d58 | out: hHeap=0x1f0000) returned 1 [0215.375] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0215.375] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\pt-BR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-br\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.375] GetLastError () returned 0x5 [0215.375] GetLastError () returned 0x5 [0215.375] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e8e6bbf, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e8e6bbf, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e8e6bbf, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0215.375] FindClose (in: hFindFile=0x24eac0 | out: hFindFile=0x24eac0) returned 1 [0215.375] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0215.375] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261e58 | out: hHeap=0x1f0000) returned 1 [0215.376] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0215.376] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234110 | out: hHeap=0x1f0000) returned 1 [0215.376] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234110 [0215.376] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0215.376] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262cb0 [0215.376] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2866f8 [0215.376] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\pt-PT\\*", lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ddb8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName=".", cAlternateFileName="")) returned 0x24ea80 [0215.376] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2863c8 [0215.376] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2866f8 | out: hHeap=0x1f0000) returned 1 [0215.376] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0215.376] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ddb8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="..", cAlternateFileName="")) returned 1 [0215.376] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286c48 [0215.376] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2863c8 | out: hHeap=0x1f0000) returned 1 [0215.376] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0215.376] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0215.376] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e8e6bbf, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e8e6bbf, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e8e6bbf, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0215.376] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0215.376] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286d58 [0215.376] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0215.377] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286d58 | out: hHeap=0x1f0000) returned 1 [0215.377] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286c48 | out: hHeap=0x1f0000) returned 1 [0215.377] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0215.377] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\pt-PT\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-pt\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.377] GetLastError () returned 0x5 [0215.377] GetLastError () returned 0x5 [0215.377] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e8e6bbf, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e8e6bbf, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e8e6bbf, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0215.377] FindClose (in: hFindFile=0x24ea80 | out: hFindFile=0x24ea80) returned 1 [0215.377] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0215.377] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262cb0 | out: hHeap=0x1f0000) returned 1 [0215.377] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0215.378] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234110 | out: hHeap=0x1f0000) returned 1 [0215.672] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234110 [0215.672] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0215.672] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x263178 [0215.672] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2866f8 [0215.672] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ro-RO\\*", lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e0f5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName=".", cAlternateFileName="")) returned 0x24e5c0 [0215.672] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2864d8 [0215.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2866f8 | out: hHeap=0x1f0000) returned 1 [0215.673] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0215.673] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e0f5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="..", cAlternateFileName="")) returned 1 [0215.673] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2863c8 [0215.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2864d8 | out: hHeap=0x1f0000) returned 1 [0215.673] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0215.673] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0215.673] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0215.673] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0215.673] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286c48 [0215.673] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0215.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286c48 | out: hHeap=0x1f0000) returned 1 [0215.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2863c8 | out: hHeap=0x1f0000) returned 1 [0215.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0215.674] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ro-RO\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ro-ro\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.674] GetLastError () returned 0x5 [0215.674] GetLastError () returned 0x5 [0215.674] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0215.675] FindClose (in: hFindFile=0x24e5c0 | out: hFindFile=0x24e5c0) returned 1 [0215.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0215.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263178 | out: hHeap=0x1f0000) returned 1 [0215.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0215.676] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234110 | out: hHeap=0x1f0000) returned 1 [0215.676] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234110 [0215.676] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0215.676] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262cb0 [0215.676] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2863c8 [0215.676] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ru-RU\\*", lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e4d1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName=".", cAlternateFileName="")) returned 0x24ec40 [0215.676] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2861a8 [0215.676] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2863c8 | out: hHeap=0x1f0000) returned 1 [0215.676] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0215.676] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e4d1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="..", cAlternateFileName="")) returned 1 [0215.677] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286890 [0215.677] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2861a8 | out: hHeap=0x1f0000) returned 1 [0215.677] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0215.677] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0215.677] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0215.677] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0215.677] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2866f8 [0215.677] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0215.677] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2866f8 | out: hHeap=0x1f0000) returned 1 [0215.677] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286890 | out: hHeap=0x1f0000) returned 1 [0215.677] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0215.678] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ru-RU\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ru-ru\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.678] GetLastError () returned 0x5 [0215.678] GetLastError () returned 0x5 [0215.678] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0215.678] FindClose (in: hFindFile=0x24ec40 | out: hFindFile=0x24ec40) returned 1 [0215.679] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0215.679] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262cb0 | out: hHeap=0x1f0000) returned 1 [0215.679] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0215.679] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234110 | out: hHeap=0x1f0000) returned 1 [0215.679] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2343e0 [0215.679] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0215.679] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x263178 [0215.679] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286c48 [0215.679] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\sk-SK\\*", lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e8a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName=".", cAlternateFileName="")) returned 0x24ed00 [0215.680] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286d58 [0215.680] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286c48 | out: hHeap=0x1f0000) returned 1 [0215.680] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0215.680] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e8a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="..", cAlternateFileName="")) returned 1 [0215.680] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286c48 [0215.680] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286d58 | out: hHeap=0x1f0000) returned 1 [0215.680] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0215.680] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0215.680] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e38953f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e38953f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e38953f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0215.680] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0215.680] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2864d8 [0215.681] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0215.681] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2864d8 | out: hHeap=0x1f0000) returned 1 [0215.681] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286c48 | out: hHeap=0x1f0000) returned 1 [0215.681] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0215.681] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\sk-SK\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sk-sk\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.681] GetLastError () returned 0x5 [0215.681] GetLastError () returned 0x5 [0215.681] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e38953f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e38953f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e38953f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0215.681] FindClose (in: hFindFile=0x24ed00 | out: hFindFile=0x24ed00) returned 1 [0215.682] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0215.682] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263178 | out: hHeap=0x1f0000) returned 1 [0215.682] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0215.682] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2343e0 | out: hHeap=0x1f0000) returned 1 [0215.682] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234110 [0215.682] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0215.682] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2617f8 [0215.682] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2863c8 [0215.682] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\sl-SI\\*", lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ec25, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName=".", cAlternateFileName="")) returned 0x24e6c0 [0215.682] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286450 [0215.682] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2863c8 | out: hHeap=0x1f0000) returned 1 [0215.683] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0215.683] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ec25, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="..", cAlternateFileName="")) returned 1 [0215.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286c48 [0215.683] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286450 | out: hHeap=0x1f0000) returned 1 [0215.683] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0215.683] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0215.683] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0215.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0215.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2861a8 [0215.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0215.683] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2861a8 | out: hHeap=0x1f0000) returned 1 [0215.683] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286c48 | out: hHeap=0x1f0000) returned 1 [0215.683] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0215.684] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\sl-SI\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sl-si\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.684] GetLastError () returned 0x5 [0215.684] GetLastError () returned 0x5 [0215.684] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0215.684] FindClose (in: hFindFile=0x24e6c0 | out: hFindFile=0x24e6c0) returned 1 [0215.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0215.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2617f8 | out: hHeap=0x1f0000) returned 1 [0215.685] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0215.685] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234110 | out: hHeap=0x1f0000) returned 1 [0215.685] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2343e0 [0215.685] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0215.685] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262cb0 [0215.685] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0215.685] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\sr-Latn-RS\\*", lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c7ae2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName=".", cAlternateFileName="")) returned 0x24e7c0 [0215.685] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2861a8 [0215.685] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0215.685] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2861a8 | out: hHeap=0x1f0000) returned 1 [0215.685] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0215.685] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0215.686] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c7ae2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="..", cAlternateFileName="")) returned 1 [0215.686] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286890 [0215.686] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0215.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286890 | out: hHeap=0x1f0000) returned 1 [0215.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0215.686] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0215.686] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0215.686] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0215.686] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0215.686] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286890 [0215.686] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0215.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286890 | out: hHeap=0x1f0000) returned 1 [0215.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0215.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0215.687] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\sr-Latn-RS\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sr-latn-rs\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.687] GetLastError () returned 0x5 [0215.687] GetLastError () returned 0x5 [0215.687] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0215.687] FindClose (in: hFindFile=0x24e7c0 | out: hFindFile=0x24e7c0) returned 1 [0215.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0215.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262cb0 | out: hHeap=0x1f0000) returned 1 [0215.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0215.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2343e0 | out: hHeap=0x1f0000) returned 1 [0215.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2343e0 [0215.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0215.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262cb0 [0215.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2861a8 [0215.688] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\sv-SE\\*", lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c820e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName=".", cAlternateFileName="")) returned 0x24e6c0 [0215.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286890 [0215.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2861a8 | out: hHeap=0x1f0000) returned 1 [0215.688] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0215.688] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c820e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="..", cAlternateFileName="")) returned 1 [0215.689] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286d58 [0215.689] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286890 | out: hHeap=0x1f0000) returned 1 [0215.689] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0215.689] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0215.689] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0215.689] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0215.689] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2863c8 [0215.689] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0215.689] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2863c8 | out: hHeap=0x1f0000) returned 1 [0215.689] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286d58 | out: hHeap=0x1f0000) returned 1 [0215.689] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0215.690] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\sv-SE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sv-se\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.690] GetLastError () returned 0x5 [0215.690] GetLastError () returned 0x5 [0215.690] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0215.690] FindClose (in: hFindFile=0x24e6c0 | out: hFindFile=0x24e6c0) returned 1 [0215.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0215.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262cb0 | out: hHeap=0x1f0000) returned 1 [0215.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0215.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2343e0 | out: hHeap=0x1f0000) returned 1 [0215.691] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234110 [0215.691] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0215.691] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2617f8 [0215.691] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2861a8 [0215.691] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\th-TH\\*", lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8602, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName=".", cAlternateFileName="")) returned 0x24ec40 [0215.691] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286670 [0215.692] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2861a8 | out: hHeap=0x1f0000) returned 1 [0215.692] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0215.692] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8602, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="..", cAlternateFileName="")) returned 1 [0215.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2863c8 [0215.692] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286670 | out: hHeap=0x1f0000) returned 1 [0215.692] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0215.692] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0215.692] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0215.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0215.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286c48 [0215.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0215.693] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286c48 | out: hHeap=0x1f0000) returned 1 [0215.693] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2863c8 | out: hHeap=0x1f0000) returned 1 [0215.693] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0215.693] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\th-TH\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\th-th\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.693] GetLastError () returned 0x5 [0215.693] GetLastError () returned 0x5 [0215.694] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0215.694] FindClose (in: hFindFile=0x24ec40 | out: hFindFile=0x24ec40) returned 1 [0215.694] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0215.694] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2617f8 | out: hHeap=0x1f0000) returned 1 [0215.694] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0215.694] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234110 | out: hHeap=0x1f0000) returned 1 [0215.694] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234110 [0215.694] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0215.694] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x261b28 [0215.695] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2863c8 [0215.695] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\tr-TR\\*", lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c896f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName=".", cAlternateFileName="")) returned 0x24e9c0 [0215.695] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286d58 [0215.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2863c8 | out: hHeap=0x1f0000) returned 1 [0215.695] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0215.695] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c896f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="..", cAlternateFileName="")) returned 1 [0215.695] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2863c8 [0215.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286d58 | out: hHeap=0x1f0000) returned 1 [0215.695] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0215.696] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0215.696] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0215.696] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0215.696] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286450 [0215.696] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0215.696] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286450 | out: hHeap=0x1f0000) returned 1 [0215.696] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2863c8 | out: hHeap=0x1f0000) returned 1 [0215.696] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0215.696] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\tr-TR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tr-tr\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.697] GetLastError () returned 0x5 [0215.697] GetLastError () returned 0x5 [0215.697] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0215.697] FindClose (in: hFindFile=0x24e9c0 | out: hFindFile=0x24e9c0) returned 1 [0215.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0215.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261b28 | out: hHeap=0x1f0000) returned 1 [0215.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0215.698] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234110 | out: hHeap=0x1f0000) returned 1 [0215.698] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234110 [0215.698] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0215.698] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262cb0 [0215.698] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286890 [0215.698] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\uk-UA\\*", lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8ed8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName=".", cAlternateFileName="")) returned 0x24e980 [0215.698] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2861a8 [0215.699] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286890 | out: hHeap=0x1f0000) returned 1 [0215.699] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0215.699] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8ed8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="..", cAlternateFileName="")) returned 1 [0215.699] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2863c8 [0215.699] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2861a8 | out: hHeap=0x1f0000) returned 1 [0215.699] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0215.699] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0215.699] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0215.699] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0215.699] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2861a8 [0215.700] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0215.700] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2861a8 | out: hHeap=0x1f0000) returned 1 [0215.700] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2863c8 | out: hHeap=0x1f0000) returned 1 [0215.700] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0215.701] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\uk-UA\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\uk-ua\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.701] GetLastError () returned 0x5 [0215.701] GetLastError () returned 0x5 [0215.701] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0215.701] FindClose (in: hFindFile=0x24e980 | out: hFindFile=0x24e980) returned 1 [0215.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0215.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262cb0 | out: hHeap=0x1f0000) returned 1 [0215.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0215.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234110 | out: hHeap=0x1f0000) returned 1 [0215.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234110 [0215.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0215.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2617f8 [0215.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286c48 [0215.702] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\zh-CN\\*", lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c93df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName=".", cAlternateFileName="")) returned 0x24e6c0 [0215.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286450 [0215.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286c48 | out: hHeap=0x1f0000) returned 1 [0215.702] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0215.703] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c93df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="..", cAlternateFileName="")) returned 1 [0215.703] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2864d8 [0215.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286450 | out: hHeap=0x1f0000) returned 1 [0215.703] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0215.703] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0215.703] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e100c60, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e100c60, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e100c60, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0215.703] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0215.703] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2866f8 [0215.703] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0215.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2866f8 | out: hHeap=0x1f0000) returned 1 [0215.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2864d8 | out: hHeap=0x1f0000) returned 1 [0215.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0215.704] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\zh-CN\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-cn\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.704] GetLastError () returned 0x5 [0215.704] GetLastError () returned 0x5 [0215.704] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e100c60, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e100c60, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e100c60, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0215.704] FindClose (in: hFindFile=0x24e6c0 | out: hFindFile=0x24e6c0) returned 1 [0215.705] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0215.705] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2617f8 | out: hHeap=0x1f0000) returned 1 [0215.705] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0215.705] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234110 | out: hHeap=0x1f0000) returned 1 [0215.705] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234110 [0215.705] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0215.705] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262cb0 [0215.705] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286c48 [0215.706] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\zh-TW\\*", lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c97fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName=".", cAlternateFileName="")) returned 0x24ec80 [0215.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286cd0 [0215.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286c48 | out: hHeap=0x1f0000) returned 1 [0215.949] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0215.949] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c97fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="..", cAlternateFileName="")) returned 1 [0215.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286780 [0215.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286cd0 | out: hHeap=0x1f0000) returned 1 [0215.949] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0215.949] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0215.949] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e0daa01, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e0daa01, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e100c60, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0215.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0215.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2863c8 [0215.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0215.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2863c8 | out: hHeap=0x1f0000) returned 1 [0215.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286780 | out: hHeap=0x1f0000) returned 1 [0215.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0216.082] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\zh-TW\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-tw\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0216.082] GetLastError () returned 0x5 [0216.082] GetLastError () returned 0x5 [0216.082] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e0daa01, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e0daa01, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e100c60, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0216.082] FindClose (in: hFindFile=0x24ec80 | out: hFindFile=0x24ec80) returned 1 [0216.083] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0216.083] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262cb0 | out: hHeap=0x1f0000) returned 1 [0216.083] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0216.083] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234110 | out: hHeap=0x1f0000) returned 1 [0216.083] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219268 | out: hHeap=0x1f0000) returned 1 [0216.083] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211c78 | out: hHeap=0x1f0000) returned 1 [0216.083] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0216.083] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e98 | out: hHeap=0x1f0000) returned 1 [0216.083] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b68 | out: hHeap=0x1f0000) returned 1 [0216.083] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211a58 | out: hHeap=0x1f0000) returned 1 [0216.083] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0216.084] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212360 | out: hHeap=0x1f0000) returned 1 [0216.084] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2122d8 | out: hHeap=0x1f0000) returned 1 [0216.084] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212580 | out: hHeap=0x1f0000) returned 1 [0216.084] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212470 | out: hHeap=0x1f0000) returned 1 [0216.084] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212608 | out: hHeap=0x1f0000) returned 1 [0216.084] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d00 | out: hHeap=0x1f0000) returned 1 [0216.084] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212250 | out: hHeap=0x1f0000) returned 1 [0216.084] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212718 | out: hHeap=0x1f0000) returned 1 [0216.084] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0216.084] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211ae0 | out: hHeap=0x1f0000) returned 1 [0216.085] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211bf0 | out: hHeap=0x1f0000) returned 1 [0216.085] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211f20 | out: hHeap=0x1f0000) returned 1 [0216.085] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0216.085] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2124f8 | out: hHeap=0x1f0000) returned 1 [0216.085] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212140 | out: hHeap=0x1f0000) returned 1 [0216.085] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212938 | out: hHeap=0x1f0000) returned 1 [0216.085] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0216.085] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2129c0 | out: hHeap=0x1f0000) returned 1 [0216.085] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0216.085] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0216.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2132c8 | out: hHeap=0x1f0000) returned 1 [0216.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213818 | out: hHeap=0x1f0000) returned 1 [0216.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2135f8 | out: hHeap=0x1f0000) returned 1 [0216.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f10 | out: hHeap=0x1f0000) returned 1 [0216.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0216.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2133d8 | out: hHeap=0x1f0000) returned 1 [0216.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0216.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a138 | out: hHeap=0x1f0000) returned 1 [0216.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285ce0 | out: hHeap=0x1f0000) returned 1 [0216.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285b48 | out: hHeap=0x1f0000) returned 1 [0216.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285d68 | out: hHeap=0x1f0000) returned 1 [0216.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285240 | out: hHeap=0x1f0000) returned 1 [0216.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285130 | out: hHeap=0x1f0000) returned 1 [0216.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285460 | out: hHeap=0x1f0000) returned 1 [0216.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2851b8 | out: hHeap=0x1f0000) returned 1 [0216.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230c68 | out: hHeap=0x1f0000) returned 1 [0216.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227058 | out: hHeap=0x1f0000) returned 1 [0216.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0216.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233df8 | out: hHeap=0x1f0000) returned 1 [0216.087] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233df8 [0216.087] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0216.087] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262fe0 [0216.087] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x285460 [0216.088] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\MSInfo\\*", lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa098a4c6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71143a45, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24e940 [0216.088] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2202b0 [0216.088] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218768 [0216.088] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2202b0 | out: hHeap=0x1f0000) returned 1 [0216.088] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285460 | out: hHeap=0x1f0000) returned 1 [0216.088] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0216.088] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa098a4c6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71143a45, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0216.088] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0216.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218a28 [0216.089] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0216.089] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218768 | out: hHeap=0x1f0000) returned 1 [0216.089] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0216.089] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0216.089] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa098aa4a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="en-US", cAlternateFileName="")) returned 1 [0216.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21ffe0 [0216.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219058 [0216.089] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ffe0 | out: hHeap=0x1f0000) returned 1 [0216.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218a28 | out: hHeap=0x1f0000) returned 1 [0216.090] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0216.090] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0216.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x205290 [0216.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x285c58 [0216.090] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463aec8d, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x63793f1, ftLastAccessTime.dwHighDateTime=0x1d2fa0a, ftLastWriteTime.dwLowDateTime=0x463aec8d, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x5a600, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="msinfo32.exe", cAlternateFileName="")) returned 1 [0216.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0216.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fef0 [0216.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ce8 [0216.091] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fef0 | out: hHeap=0x1f0000) returned 1 [0216.091] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219058 | out: hHeap=0x1f0000) returned 1 [0216.091] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0216.091] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\MSInfo\\msinfo32.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\msinfo32.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0216.092] GetLastError () returned 0x5 [0216.092] GetLastError () returned 0x5 [0216.092] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463aec8d, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x63793f1, ftLastAccessTime.dwHighDateTime=0x1d2fa0a, ftLastWriteTime.dwLowDateTime=0x463aec8d, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x5a600, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="msinfo32.exe", cAlternateFileName="")) returned 0 [0216.092] FindClose (in: hFindFile=0x24e940 | out: hFindFile=0x24e940) returned 1 [0216.092] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234110 [0216.092] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0216.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x261990 [0216.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x285460 [0216.093] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\MSInfo\\en-US\\*", lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa098aa4a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName=".", cAlternateFileName="")) returned 0x24eb80 [0216.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x285130 [0216.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285460 | out: hHeap=0x1f0000) returned 1 [0216.093] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0216.093] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa098aa4a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="..", cAlternateFileName="")) returned 1 [0216.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286010 [0216.094] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285130 | out: hHeap=0x1f0000) returned 1 [0216.094] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0216.094] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0216.094] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb38282, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x73430dfb, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x261f2e00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x7800, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="msinfo32.exe.mui", cAlternateFileName="")) returned 1 [0216.094] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282a0 [0216.094] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x285680 [0216.094] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0216.094] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285680 | out: hHeap=0x1f0000) returned 1 [0216.094] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286010 | out: hHeap=0x1f0000) returned 1 [0216.094] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0216.095] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\MSInfo\\en-US\\msinfo32.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\en-us\\msinfo32.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0216.095] GetLastError () returned 0x5 [0216.095] GetLastError () returned 0x5 [0216.095] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb38282, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x73430dfb, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x261f2e00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x7800, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="msinfo32.exe.mui", cAlternateFileName="")) returned 0 [0216.095] FindClose (in: hFindFile=0x24eb80 | out: hFindFile=0x24eb80) returned 1 [0216.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0216.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261990 | out: hHeap=0x1f0000) returned 1 [0216.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0216.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234110 | out: hHeap=0x1f0000) returned 1 [0216.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ce8 | out: hHeap=0x1f0000) returned 1 [0216.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285c58 | out: hHeap=0x1f0000) returned 1 [0216.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205290 | out: hHeap=0x1f0000) returned 1 [0216.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262fe0 | out: hHeap=0x1f0000) returned 1 [0216.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0216.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233df8 | out: hHeap=0x1f0000) returned 1 [0216.097] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233df8 [0216.097] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0216.098] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262980 [0216.098] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x285460 [0216.098] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\*", lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd9f60362, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xca480c48, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24ec40 [0216.098] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x285680 [0216.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285460 | out: hHeap=0x1f0000) returned 1 [0216.098] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0216.098] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd9f60362, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xca480c48, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0216.098] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2851b8 [0216.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285680 | out: hHeap=0x1f0000) returned 1 [0216.099] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0216.099] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0216.099] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9e7b530, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x58cd0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="LICLUA.EXE", cAlternateFileName="")) returned 1 [0216.099] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0216.099] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x285680 [0216.099] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0216.099] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285680 | out: hHeap=0x1f0000) returned 1 [0216.099] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2851b8 | out: hHeap=0x1f0000) returned 1 [0216.099] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0216.100] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\LICLUA.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\liclua.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0216.100] GetFileType (hFile=0x224) returned 0x1 [0216.101] CloseHandle (hObject=0x224) returned 1 [0216.101] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0216.101] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\LICLUA.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\liclua.exe"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9e7b530, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x58cd0)) returned 1 [0216.101] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0216.101] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0216.102] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0216.102] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca3031b3, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xca3031b3, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xca3031b3, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="LICLUA.EXE.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="LICLUA~1.ODV")) returned 1 [0216.102] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219ee8 [0216.102] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x285570 [0216.102] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x223be0 [0216.102] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285570 | out: hHeap=0x1f0000) returned 1 [0216.102] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0216.102] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219ee8 | out: hHeap=0x1f0000) returned 1 [0216.103] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\LICLUA.EXE.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\liclua.exe.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0216.103] GetFileType (hFile=0x224) returned 0x1 [0216.103] CloseHandle (hObject=0x224) returned 1 [0216.104] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x2244a0 [0216.104] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\LICLUA.EXE.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\liclua.exe.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca3031b3, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xca3031b3, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xca3031b3, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0216.104] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2244a0 | out: hHeap=0x1f0000) returned 1 [0216.104] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x223f28 [0216.105] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223f28 | out: hHeap=0x1f0000) returned 1 [0216.105] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9f60362, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc70656d5, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xc70656d5, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="Office Setup Controller", cAlternateFileName="OFFICE~1")) returned 1 [0216.105] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282a0 [0216.105] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x286010 [0216.105] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0216.105] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286010 | out: hHeap=0x1f0000) returned 1 [0216.105] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223be0 | out: hHeap=0x1f0000) returned 1 [0216.105] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0216.106] lstrcmpW (lpString1="Office Setup Controller", lpString2=".") returned 1 [0216.106] lstrcmpW (lpString1="Office Setup Controller", lpString2="..") returned 1 [0216.106] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x205150 [0216.106] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x260ff0 [0216.106] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9f60362, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc70656d5, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xc70656d5, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="Office Setup Controller", cAlternateFileName="OFFICE~1")) returned 0 [0216.106] FindClose (in: hFindFile=0x24ec40 | out: hFindFile=0x24ec40) returned 1 [0216.106] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234110 [0216.107] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0216.107] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x263178 [0216.107] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2614f8 [0216.107] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\*", lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9f60362, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc70656d5, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xc70656d5, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e7c0 [0216.107] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2610a8 [0216.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2614f8 | out: hHeap=0x1f0000) returned 1 [0216.107] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0216.108] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9f60362, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc70656d5, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xc70656d5, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0216.108] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2614f8 [0216.108] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2610a8 | out: hHeap=0x1f0000) returned 1 [0216.108] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0216.108] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0216.108] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69e1fe00, ftCreationTime.dwHighDateTime=0x1d0d79d, ftLastAccessTime.dwLowDateTime=0xd9ff8cc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x69e1fe00, ftLastWriteTime.dwHighDateTime=0x1d0d79d, nFileSizeHigh=0x0, nFileSizeLow=0x168258, dwReserved0=0x0, dwReserved1=0x0, cFileName="pidgenx.dll", cAlternateFileName="")) returned 1 [0216.108] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0216.108] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261668 [0216.108] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x106) returned 0x224158 [0216.109] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261668 | out: hHeap=0x1f0000) returned 1 [0216.109] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2614f8 | out: hHeap=0x1f0000) returned 1 [0216.109] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0216.109] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pidgenx.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pidgenx.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0216.110] GetFileType (hFile=0x224) returned 0x1 [0216.110] CloseHandle (hObject=0x224) returned 1 [0216.111] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f5d8 [0216.111] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pidgenx.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pidgenx.dll"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69e1fe00, ftCreationTime.dwHighDateTime=0x1d0d79d, ftLastAccessTime.dwLowDateTime=0xd9ff8cc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x69e1fe00, ftLastWriteTime.dwHighDateTime=0x1d0d79d, nFileSizeHigh=0x0, nFileSizeLow=0x168258)) returned 1 [0216.111] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0216.111] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f5d8 [0216.111] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0216.112] GetLastError () returned 0x0 [0216.112] CryptAcquireContextA (in: phProv=0x2293a98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2293a98*=0x285130) returned 1 [0216.121] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238708 | out: pbBuffer=0x238708) returned 1 [0216.121] CryptReleaseContext (hProv=0x285130, dwFlags=0x0) returned 1 [0216.121] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238708 | out: hHeap=0x1f0000) returned 1 [0216.121] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x255c88 [0216.121] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2245b8 [0216.121] QueryPerformanceCounter (in: lpPerformanceCount=0x2293a2c | out: lpPerformanceCount=0x2293a2c*=37349026178) returned 1 [0216.121] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x2293a6c | out: lpSystemTimeAsFileTime=0x2293a6c) [0216.122] QueryPerformanceCounter (in: lpPerformanceCount=0x2293a2c | out: lpPerformanceCount=0x2293a2c*=37349057817) returned 1 [0216.122] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x2293a6c | out: lpSystemTimeAsFileTime=0x2293a6c) [0216.122] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x1fef78 [0216.122] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x2595a0 [0216.122] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x224270 [0216.122] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x236f90 [0216.122] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffa0 [0216.122] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206628 [0216.123] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20fef8 [0216.123] GetLastError () returned 0x0 [0216.123] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pidgenx.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pidgenx.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22939fc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0216.123] GetFileType (hFile=0x224) returned 0x1 [0216.124] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2293a68 | out: lpNewFilePointer=0x0) returned 1 [0216.124] ReadFile (in: hFile=0x224, lpBuffer=0x22a8f68, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x2293a40, lpOverlapped=0x0 | out: lpBuffer=0x22a8f68*, lpNumberOfBytesRead=0x2293a40*=0x14000, lpOverlapped=0x0) returned 1 [0216.414] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x289fb0 [0216.414] ReadFile (in: hFile=0x224, lpBuffer=0x289fb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x22939e4, lpOverlapped=0x0 | out: lpBuffer=0x289fb0*, lpNumberOfBytesRead=0x22939e4*=0x1000, lpOverlapped=0x0) returned 1 [0216.581] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2293a70 | out: lpNewFilePointer=0x0) returned 1 [0216.582] WriteFile (in: hFile=0x224, lpBuffer=0x2293f78*, nNumberOfBytesToWrite=0x14000, lpNumberOfBytesWritten=0x22939dc, lpOverlapped=0x0 | out: lpBuffer=0x2293f78*, lpNumberOfBytesWritten=0x22939dc*=0x14000, lpOverlapped=0x0) returned 1 [0216.583] WriteFile (in: hFile=0x224, lpBuffer=0x289fb0*, nNumberOfBytesToWrite=0xff0, lpNumberOfBytesWritten=0x2293a08, lpOverlapped=0x0 | out: lpBuffer=0x289fb0*, lpNumberOfBytesWritten=0x2293a08*=0xff0, lpOverlapped=0x0) returned 1 [0216.583] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x15f90, lpNewFilePointer=0x0, dwMoveMethod=0x2293a50 | out: lpNewFilePointer=0x0) returned 1 [0216.584] ReadFile (in: hFile=0x224, lpBuffer=0x22a8f68, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x2293a28, lpOverlapped=0x0 | out: lpBuffer=0x22a8f68*, lpNumberOfBytesRead=0x2293a28*=0x14000, lpOverlapped=0x0) returned 1 [0216.584] ReadFile (in: hFile=0x224, lpBuffer=0x289fb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x22939cc, lpOverlapped=0x0 | out: lpBuffer=0x289fb0*, lpNumberOfBytesRead=0x22939cc*=0x1000, lpOverlapped=0x0) returned 1 [0216.584] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x15f90, lpNewFilePointer=0x0, dwMoveMethod=0x2293a70 | out: lpNewFilePointer=0x0) returned 1 [0216.585] WriteFile (in: hFile=0x224, lpBuffer=0x2293f78*, nNumberOfBytesToWrite=0x14000, lpNumberOfBytesWritten=0x22939dc, lpOverlapped=0x0 | out: lpBuffer=0x2293f78*, lpNumberOfBytesWritten=0x22939dc*=0x14000, lpOverlapped=0x0) returned 1 [0216.585] WriteFile (in: hFile=0x224, lpBuffer=0x289fb0*, nNumberOfBytesToWrite=0xff0, lpNumberOfBytesWritten=0x2293a08, lpOverlapped=0x0 | out: lpBuffer=0x289fb0*, lpNumberOfBytesWritten=0x2293a08*=0xff0, lpOverlapped=0x0) returned 1 [0216.586] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0xdbba0, lpNewFilePointer=0x0, dwMoveMethod=0x2293a50 | out: lpNewFilePointer=0x0) returned 1 [0216.586] ReadFile (in: hFile=0x224, lpBuffer=0x22a8f68, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x2293a28, lpOverlapped=0x0 | out: lpBuffer=0x22a8f68*, lpNumberOfBytesRead=0x2293a28*=0x14000, lpOverlapped=0x0) returned 1 [0216.588] ReadFile (in: hFile=0x224, lpBuffer=0x289fb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x22939cc, lpOverlapped=0x0 | out: lpBuffer=0x289fb0*, lpNumberOfBytesRead=0x22939cc*=0x1000, lpOverlapped=0x0) returned 1 [0216.589] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0xdbba0, lpNewFilePointer=0x0, dwMoveMethod=0x2293a70 | out: lpNewFilePointer=0x0) returned 1 [0216.590] WriteFile (in: hFile=0x224, lpBuffer=0x2293f78*, nNumberOfBytesToWrite=0x14000, lpNumberOfBytesWritten=0x22939dc, lpOverlapped=0x0 | out: lpBuffer=0x2293f78*, lpNumberOfBytesWritten=0x22939dc*=0x14000, lpOverlapped=0x0) returned 1 [0216.591] WriteFile (in: hFile=0x224, lpBuffer=0x289fb0*, nNumberOfBytesToWrite=0xff0, lpNumberOfBytesWritten=0x2293a58, lpOverlapped=0x0 | out: lpBuffer=0x289fb0*, lpNumberOfBytesWritten=0x2293a58*=0xff0, lpOverlapped=0x0) returned 1 [0216.591] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x289fb0 | out: hHeap=0x1f0000) returned 1 [0216.591] CloseHandle (hObject=0x224) returned 1 [0217.053] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234b30 [0217.053] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b480 [0217.053] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b4d0 [0217.053] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x234aa0 [0217.053] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205290 [0217.053] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204fb0 [0217.053] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x238a10 [0217.053] GetLastError () returned 0x0 [0217.054] CryptAcquireContextA (in: phProv=0x2293a98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2293a98*=0x212c68) returned 1 [0217.061] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x22b2f0 | out: pbBuffer=0x22b2f0) returned 1 [0217.061] CryptReleaseContext (hProv=0x212c68, dwFlags=0x0) returned 1 [0217.061] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b2f0 | out: hHeap=0x1f0000) returned 1 [0217.061] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b598 [0217.061] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b2f0 [0217.061] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0217.061] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b598 | out: hHeap=0x1f0000) returned 1 [0217.061] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0217.061] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0217.061] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x22c8b8 [0217.062] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210000 [0217.062] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x2361f8 [0217.062] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x22b318 [0217.062] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2316d8 [0217.062] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x2051f0 [0217.062] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235700 [0217.062] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x22b598 [0217.062] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2313c0 [0217.062] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ad0 [0217.062] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b368 [0217.063] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210018 [0217.063] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b40 [0217.063] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b480 [0217.063] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210078 [0217.063] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210078 | out: hHeap=0x1f0000) returned 1 [0217.063] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b480 | out: hHeap=0x1f0000) returned 1 [0217.063] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b40 | out: hHeap=0x1f0000) returned 1 [0217.063] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210018 | out: hHeap=0x1f0000) returned 1 [0217.063] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b368 | out: hHeap=0x1f0000) returned 1 [0217.063] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ad0 | out: hHeap=0x1f0000) returned 1 [0217.063] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2313c0 | out: hHeap=0x1f0000) returned 1 [0217.064] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b598 | out: hHeap=0x1f0000) returned 1 [0217.064] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0217.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x227dd0 [0217.064] GetLastError () returned 0x0 [0217.064] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x2293628 | out: lpSystemTimeAsFileTime=0x2293628) [0217.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238a30 [0217.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b598 [0217.065] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205290 [0217.065] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205290 | out: hHeap=0x1f0000) returned 1 [0217.065] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b598 | out: hHeap=0x1f0000) returned 1 [0217.065] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b480 [0217.065] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205290 [0217.065] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205290 | out: hHeap=0x1f0000) returned 1 [0217.065] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b480 | out: hHeap=0x1f0000) returned 1 [0217.066] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a30 | out: hHeap=0x1f0000) returned 1 [0217.066] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0217.066] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239278 [0217.066] GetLastError () returned 0x0 [0217.066] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pidgenx.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pidgenx.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2293998, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0217.066] GetFileType (hFile=0x224) returned 0x1 [0217.067] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28cfc8 [0217.067] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2293920 | out: lpNewFilePointer=0x0) returned 1 [0217.068] GetLastError () returned 0xb7 [0217.068] CloseHandle (hObject=0x224) returned 1 [0217.068] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x2007c8 [0217.069] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x136) returned 0x2366d8 [0217.069] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2007c8 | out: hHeap=0x1f0000) returned 1 [0217.069] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1d0) returned 0x229418 [0217.069] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0217.069] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pidgenx.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pidgenx.dll"), lpNewFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pidgenx.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pidgenx.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwFlags=0x2) returned 1 [0217.070] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0217.070] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a30 | out: hHeap=0x1f0000) returned 1 [0217.071] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b90 | out: hHeap=0x1f0000) returned 1 [0217.071] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2313c0 | out: hHeap=0x1f0000) returned 1 [0217.071] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2316d8 | out: hHeap=0x1f0000) returned 1 [0217.071] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b318 | out: hHeap=0x1f0000) returned 1 [0217.071] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2051f0 | out: hHeap=0x1f0000) returned 1 [0217.071] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2361f8 | out: hHeap=0x1f0000) returned 1 [0217.071] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210000 | out: hHeap=0x1f0000) returned 1 [0217.071] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0217.071] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224900 | out: hHeap=0x1f0000) returned 1 [0217.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b2f0 | out: hHeap=0x1f0000) returned 1 [0217.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0217.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x258298 | out: hHeap=0x1f0000) returned 1 [0217.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2247e8 | out: hHeap=0x1f0000) returned 1 [0217.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0217.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a10 | out: hHeap=0x1f0000) returned 1 [0217.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffb8 | out: hHeap=0x1f0000) returned 1 [0217.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b638 | out: hHeap=0x1f0000) returned 1 [0217.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ba0 | out: hHeap=0x1f0000) returned 1 [0217.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff70 | out: hHeap=0x1f0000) returned 1 [0217.073] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b5e8 | out: hHeap=0x1f0000) returned 1 [0217.073] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b20 | out: hHeap=0x1f0000) returned 1 [0217.073] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2311b0 | out: hHeap=0x1f0000) returned 1 [0217.073] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b7a0 | out: hHeap=0x1f0000) returned 1 [0217.073] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235de8 | out: hHeap=0x1f0000) returned 1 [0217.073] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234aa0 | out: hHeap=0x1f0000) returned 1 [0217.073] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b4d0 | out: hHeap=0x1f0000) returned 1 [0217.073] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0217.073] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b30 | out: hHeap=0x1f0000) returned 1 [0217.073] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2595a0 | out: hHeap=0x1f0000) returned 1 [0217.073] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224270 | out: hHeap=0x1f0000) returned 1 [0217.074] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206628 | out: hHeap=0x1f0000) returned 1 [0217.074] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20fef8 | out: hHeap=0x1f0000) returned 1 [0217.074] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffa0 | out: hHeap=0x1f0000) returned 1 [0217.074] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236f90 | out: hHeap=0x1f0000) returned 1 [0217.074] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x255c88 | out: hHeap=0x1f0000) returned 1 [0217.074] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2245b8 | out: hHeap=0x1f0000) returned 1 [0217.074] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0217.074] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0217.074] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261990 | out: hHeap=0x1f0000) returned 1 [0217.074] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234a10 | out: hHeap=0x1f0000) returned 1 [0217.074] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0217.074] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6774927, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xc6774927, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xc6e4f79c, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x903ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig-office.xrm-ms.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="PKEYCO~1.ODV")) returned 1 [0217.075] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fda8 [0217.075] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261388 [0217.075] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x160) returned 0x229418 [0217.075] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261388 | out: hHeap=0x1f0000) returned 1 [0217.075] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224158 | out: hHeap=0x1f0000) returned 1 [0217.075] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0217.076] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig-office.xrm-ms.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pkeyconfig-office.xrm-ms.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0217.076] GetFileType (hFile=0x224) returned 0x1 [0217.077] CloseHandle (hObject=0x224) returned 1 [0217.077] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x160) returned 0x2366d8 [0217.077] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig-office.xrm-ms.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pkeyconfig-office.xrm-ms.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6774927, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xc6774927, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xc6e4f79c, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x903ce)) returned 1 [0217.078] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0217.078] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x160) returned 0x2366d8 [0217.078] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0217.078] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9ff8cc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig.companion.dll", cAlternateFileName="PKEYCO~1.DLL")) returned 1 [0217.078] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234aa0 [0217.078] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261160 [0217.078] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x106) returned 0x224270 [0217.078] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261160 | out: hHeap=0x1f0000) returned 1 [0217.078] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0217.078] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234aa0 | out: hHeap=0x1f0000) returned 1 [0217.079] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig.companion.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pkeyconfig.companion.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0217.079] GetFileType (hFile=0x224) returned 0x1 [0217.079] CloseHandle (hObject=0x224) returned 1 [0217.080] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x220b48 [0217.080] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig.companion.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pkeyconfig.companion.dll"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9ff8cc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x48c0)) returned 1 [0217.080] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220b48 | out: hHeap=0x1f0000) returned 1 [0217.080] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x220b48 [0217.080] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220b48 | out: hHeap=0x1f0000) returned 1 [0217.080] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9ff8cc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig.companion.dll", cAlternateFileName="PKEYCO~1.DLL")) returned 0 [0217.080] FindClose (in: hFindFile=0x24e7c0 | out: hFindFile=0x24e7c0) returned 1 [0217.081] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224270 | out: hHeap=0x1f0000) returned 1 [0217.081] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263178 | out: hHeap=0x1f0000) returned 1 [0217.081] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0217.081] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234110 | out: hHeap=0x1f0000) returned 1 [0217.081] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0217.081] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ff0 | out: hHeap=0x1f0000) returned 1 [0217.081] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205150 | out: hHeap=0x1f0000) returned 1 [0217.081] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262980 | out: hHeap=0x1f0000) returned 1 [0217.081] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0217.081] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233df8 | out: hHeap=0x1f0000) returned 1 [0217.082] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233cd8 [0217.082] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b368 [0217.082] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2627e8 [0217.082] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2610a8 [0217.082] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\OfficeSoftwareProtectionPlatform\\*", lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd99442a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd99442a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24e7c0 [0217.082] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261668 [0217.082] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2610a8 | out: hHeap=0x1f0000) returned 1 [0217.082] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0217.082] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd99442a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd99442a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0217.082] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x260ff0 [0217.083] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261668 | out: hHeap=0x1f0000) returned 1 [0217.083] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0217.083] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0217.083] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd99442a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd99442a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 0 [0217.083] FindClose (in: hFindFile=0x24e7c0 | out: hFindFile=0x24e7c0) returned 1 [0217.083] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ff0 | out: hHeap=0x1f0000) returned 1 [0217.083] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2627e8 | out: hHeap=0x1f0000) returned 1 [0217.083] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b368 | out: hHeap=0x1f0000) returned 1 [0217.083] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233cd8 | out: hHeap=0x1f0000) returned 1 [0217.083] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233df8 [0217.083] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b7a0 [0217.083] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262188 [0217.084] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213680 [0217.084] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Source Engine\\*", lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4accd6e1, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4accd6e1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24ed00 [0217.084] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0217.084] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213680 | out: hHeap=0x1f0000) returned 1 [0217.084] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0217.084] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4accd6e1, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4accd6e1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0217.084] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0217.084] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0217.084] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0217.084] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0217.085] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0217.085] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0217.085] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4accd6e1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x3ba48, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="OSE.EXE", cAlternateFileName="")) returned 1 [0217.085] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213680 [0217.085] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0217.085] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213680 | out: hHeap=0x1f0000) returned 1 [0217.085] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0217.085] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Source Engine\\OSE.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\source engine\\ose.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0217.086] GetFileType (hFile=0x224) returned 0x1 [0217.086] CloseHandle (hObject=0x224) returned 1 [0217.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0217.086] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Source Engine\\OSE.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\source engine\\ose.exe"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4accd6e1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x3ba48)) returned 1 [0217.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0217.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0217.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0217.087] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4accd6e1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x3ba48, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="OSE.EXE", cAlternateFileName="")) returned 0 [0217.087] FindClose (in: hFindFile=0x24ed00 | out: hFindFile=0x24ed00) returned 1 [0217.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0217.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262188 | out: hHeap=0x1f0000) returned 1 [0217.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b7a0 | out: hHeap=0x1f0000) returned 1 [0217.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233df8 | out: hHeap=0x1f0000) returned 1 [0217.087] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234110 [0217.087] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b480 [0217.087] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2617f8 [0217.088] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2132c8 [0217.088] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\*", lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b5538f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24e600 [0217.088] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213680 [0217.088] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2132c8 | out: hHeap=0x1f0000) returned 1 [0217.088] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0217.088] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b5538f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0217.088] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213818 [0217.088] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213680 | out: hHeap=0x1f0000) returned 1 [0217.088] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0217.088] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0217.088] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xff, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="Bears.htm", cAlternateFileName="")) returned 1 [0217.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b598 [0217.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0217.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0217.089] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0217.089] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213818 | out: hHeap=0x1f0000) returned 1 [0217.089] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b598 | out: hHeap=0x1f0000) returned 1 [0217.090] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0217.090] GetLastError () returned 0x5 [0217.090] GetLastError () returned 0x5 [0217.090] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x432, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="Bears.jpg", cAlternateFileName="")) returned 1 [0217.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b7a0 [0217.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213680 [0217.091] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0217.091] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213680 | out: hHeap=0x1f0000) returned 1 [0217.091] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0217.091] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b7a0 | out: hHeap=0x1f0000) returned 1 [0217.091] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0217.093] GetLastError () returned 0x5 [0217.093] GetLastError () returned 0x5 [0217.093] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1a3ecc0a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5d2da05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5d2da05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x285, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0217.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b368 [0217.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0217.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0217.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0217.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0217.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b368 | out: hHeap=0x1f0000) returned 1 [0217.094] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\Desktop.ini" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0217.094] GetFileType (hFile=0x224) returned 0x1 [0217.094] CloseHandle (hObject=0x224) returned 1 [0217.094] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0217.095] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\Desktop.ini" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1a3ecc0a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5d2da05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5d2da05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x285)) returned 1 [0217.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0217.095] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0217.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0217.095] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="Garden.htm", cAlternateFileName="")) returned 1 [0217.095] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b598 [0217.095] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2132c8 [0217.095] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0217.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2132c8 | out: hHeap=0x1f0000) returned 1 [0217.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0217.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b598 | out: hHeap=0x1f0000) returned 1 [0217.096] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0217.096] GetLastError () returned 0x5 [0217.096] GetLastError () returned 0x5 [0217.096] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x5d3f, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="Garden.jpg", cAlternateFileName="")) returned 1 [0217.415] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0217.416] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0217.416] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0217.416] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0217.416] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0217.416] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0217.416] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0217.417] GetLastError () returned 0x5 [0217.417] GetLastError () returned 0x5 [0217.417] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="Green Bubbles.htm", cAlternateFileName="")) returned 1 [0217.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0217.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212a48 [0217.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0217.417] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212a48 | out: hHeap=0x1f0000) returned 1 [0217.418] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0217.418] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0217.418] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\Green Bubbles.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\green bubbles.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0217.418] GetLastError () returned 0x5 [0217.418] GetLastError () returned 0x5 [0217.419] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1906, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="GreenBubbles.jpg", cAlternateFileName="")) returned 1 [0217.419] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2f0 [0217.419] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2135f8 [0217.419] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0217.419] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2135f8 | out: hHeap=0x1f0000) returned 1 [0217.419] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0217.419] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0217.420] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\GreenBubbles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\greenbubbles.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0217.420] GetLastError () returned 0x5 [0217.420] GetLastError () returned 0x5 [0217.420] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xeb, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="Hand Prints.htm", cAlternateFileName="")) returned 1 [0217.420] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0217.420] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2135f8 [0217.420] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0217.420] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2135f8 | out: hHeap=0x1f0000) returned 1 [0217.421] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0217.421] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0217.421] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\Hand Prints.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\hand prints.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0217.421] GetLastError () returned 0x5 [0217.421] GetLastError () returned 0x5 [0217.422] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x107e, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="HandPrints.jpg", cAlternateFileName="")) returned 1 [0217.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0217.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0217.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0217.422] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0217.422] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0217.422] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0217.423] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\handprints.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0217.423] GetLastError () returned 0x5 [0217.423] GetLastError () returned 0x5 [0217.423] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="Orange Circles.htm", cAlternateFileName="")) returned 1 [0217.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0217.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0217.424] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0217.424] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0217.424] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0217.424] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0217.425] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\Orange Circles.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orange circles.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0217.425] GetLastError () returned 0x5 [0217.425] GetLastError () returned 0x5 [0217.426] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d5a533, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d5a533, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d5a533, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x18ed, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="OrangeCircles.jpg", cAlternateFileName="")) returned 1 [0217.426] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0217.426] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213818 [0217.426] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0217.426] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213818 | out: hHeap=0x1f0000) returned 1 [0217.426] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0217.426] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0217.427] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\OrangeCircles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orangecircles.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0217.427] GetLastError () returned 0x5 [0217.427] GetLastError () returned 0x5 [0217.428] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="Peacock.htm", cAlternateFileName="")) returned 1 [0217.428] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238438 [0217.428] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0217.428] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0217.428] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0217.428] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0217.428] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238438 | out: hHeap=0x1f0000) returned 1 [0217.429] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0217.429] GetLastError () returned 0x5 [0217.429] GetLastError () returned 0x5 [0217.430] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x13fb, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="Peacock.jpg", cAlternateFileName="")) returned 1 [0217.430] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0217.430] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213818 [0217.430] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0217.430] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213818 | out: hHeap=0x1f0000) returned 1 [0217.430] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0217.430] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0217.433] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0217.433] GetLastError () returned 0x5 [0217.433] GetLastError () returned 0x5 [0217.433] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96dccc65, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="Roses.htm", cAlternateFileName="")) returned 1 [0217.433] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238438 [0217.433] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0217.434] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0217.434] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0217.434] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0217.434] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238438 | out: hHeap=0x1f0000) returned 1 [0217.435] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0217.435] GetLastError () returned 0x5 [0217.435] GetLastError () returned 0x5 [0217.436] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96dccc65, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96dccc65, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96dccc65, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x780, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="Roses.jpg", cAlternateFileName="")) returned 1 [0217.436] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380c8 [0217.436] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212cf0 [0217.436] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0217.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212cf0 | out: hHeap=0x1f0000) returned 1 [0217.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0217.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380c8 | out: hHeap=0x1f0000) returned 1 [0217.437] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0217.437] GetLastError () returned 0x5 [0217.438] GetLastError () returned 0x5 [0217.438] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="Shades of Blue.htm", cAlternateFileName="")) returned 1 [0217.438] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0217.438] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213818 [0217.438] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0217.438] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213818 | out: hHeap=0x1f0000) returned 1 [0217.438] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0217.438] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0217.439] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\Shades of Blue.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shades of blue.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0217.440] GetLastError () returned 0x5 [0217.440] GetLastError () returned 0x5 [0217.440] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x127e, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="ShadesOfBlue.jpg", cAlternateFileName="")) returned 1 [0217.440] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0217.440] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0217.440] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0217.440] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0217.440] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0217.440] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0217.441] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\ShadesOfBlue.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shadesofblue.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0217.441] GetLastError () returned 0x5 [0217.441] GetLastError () returned 0x5 [0217.442] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d5a533, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d5a533, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d5a533, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="Soft Blue.htm", cAlternateFileName="")) returned 1 [0217.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0217.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2135f8 [0217.443] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0217.443] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2135f8 | out: hHeap=0x1f0000) returned 1 [0217.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0217.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0217.444] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\Soft Blue.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\soft blue.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0217.444] GetLastError () returned 0x5 [0217.444] GetLastError () returned 0x5 [0217.444] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2949, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="SoftBlue.jpg", cAlternateFileName="")) returned 1 [0217.444] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0217.445] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0217.445] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0217.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0217.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0217.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0217.447] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\softblue.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0217.447] GetLastError () returned 0x5 [0217.447] GetLastError () returned 0x5 [0217.447] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="Stars.htm", cAlternateFileName="")) returned 1 [0217.447] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0217.447] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212be0 [0217.447] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0217.447] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212be0 | out: hHeap=0x1f0000) returned 1 [0217.447] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0217.447] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0217.449] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0217.450] GetLastError () returned 0x5 [0217.450] GetLastError () returned 0x5 [0217.450] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1d51, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="Stars.jpg", cAlternateFileName="")) returned 1 [0217.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380f0 [0217.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0217.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0217.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0217.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0217.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380f0 | out: hHeap=0x1f0000) returned 1 [0217.451] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0217.456] GetLastError () returned 0x5 [0217.456] GetLastError () returned 0x5 [0217.456] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1d51, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="Stars.jpg", cAlternateFileName="")) returned 0 [0217.456] FindClose (in: hFindFile=0x24e600 | out: hFindFile=0x24e600) returned 1 [0217.457] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0217.457] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2617f8 | out: hHeap=0x1f0000) returned 1 [0217.457] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b480 | out: hHeap=0x1f0000) returned 1 [0217.457] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234110 | out: hHeap=0x1f0000) returned 1 [0217.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234110 [0217.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0217.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x263310 [0217.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2135f8 [0217.457] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\TextConv\\*", lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b56882, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24eac0 [0217.458] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212cf0 [0217.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2135f8 | out: hHeap=0x1f0000) returned 1 [0217.458] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0217.458] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b56882, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0217.458] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0217.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212cf0 | out: hHeap=0x1f0000) returned 1 [0217.458] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0217.458] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0217.458] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b5787e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="en-US", cAlternateFileName="")) returned 1 [0217.459] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2135f8 [0217.650] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0217.650] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0217.650] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0217.650] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204ef0 [0217.650] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0217.650] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b5787e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="en-US", cAlternateFileName="")) returned 0 [0217.650] FindClose (in: hFindFile=0x24eac0 | out: hFindFile=0x24eac0) returned 1 [0217.651] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234740 [0217.651] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380f0 [0217.651] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x261e58 [0217.651] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0217.651] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\TextConv\\en-US\\*", lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b5787e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName=".", cAlternateFileName="")) returned 0x24e680 [0217.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213680 [0217.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0217.652] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213680 | out: hHeap=0x1f0000) returned 1 [0217.652] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0217.652] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0217.652] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b5787e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="..", cAlternateFileName="")) returned 1 [0217.653] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0217.653] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0217.653] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0217.653] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0217.653] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0217.653] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0217.653] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b5787e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="..", cAlternateFileName="")) returned 0 [0217.653] FindClose (in: hFindFile=0x24e680 | out: hFindFile=0x24e680) returned 1 [0217.654] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0217.654] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261e58 | out: hHeap=0x1f0000) returned 1 [0217.654] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380f0 | out: hHeap=0x1f0000) returned 1 [0217.654] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234740 | out: hHeap=0x1f0000) returned 1 [0217.654] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2135f8 | out: hHeap=0x1f0000) returned 1 [0217.654] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0217.655] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ef0 | out: hHeap=0x1f0000) returned 1 [0217.655] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263310 | out: hHeap=0x1f0000) returned 1 [0217.655] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0217.655] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234110 | out: hHeap=0x1f0000) returned 1 [0217.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234110 [0217.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0217.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x261e58 [0217.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0217.656] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Triedit\\*", lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b57d42, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24e7c0 [0217.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0217.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0217.656] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0217.656] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b57d42, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0217.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2132c8 [0217.657] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0217.657] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0217.657] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0217.657] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b58502, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="en-US", cAlternateFileName="")) returned 1 [0217.657] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213818 [0217.657] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2132c8 | out: hHeap=0x1f0000) returned 1 [0217.658] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0217.658] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0217.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204db0 [0217.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0217.658] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b58502, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="en-US", cAlternateFileName="")) returned 0 [0217.658] FindClose (in: hFindFile=0x24e7c0 | out: hFindFile=0x24e7c0) returned 1 [0217.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234740 [0217.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380f0 [0217.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2634a8 [0217.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2135f8 [0217.659] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Triedit\\en-US\\*", lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b58502, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName=".", cAlternateFileName="")) returned 0x24e940 [0217.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2132c8 [0217.660] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2135f8 | out: hHeap=0x1f0000) returned 1 [0217.660] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0217.660] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b58502, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="..", cAlternateFileName="")) returned 1 [0217.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212cf0 [0217.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0217.661] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212cf0 | out: hHeap=0x1f0000) returned 1 [0217.661] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2132c8 | out: hHeap=0x1f0000) returned 1 [0217.661] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0217.661] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0217.661] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b58502, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="..", cAlternateFileName="")) returned 0 [0217.661] FindClose (in: hFindFile=0x24e940 | out: hFindFile=0x24e940) returned 1 [0217.662] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0217.662] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2634a8 | out: hHeap=0x1f0000) returned 1 [0217.662] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380f0 | out: hHeap=0x1f0000) returned 1 [0217.662] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234740 | out: hHeap=0x1f0000) returned 1 [0217.662] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213818 | out: hHeap=0x1f0000) returned 1 [0217.662] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0217.663] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204db0 | out: hHeap=0x1f0000) returned 1 [0217.663] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261e58 | out: hHeap=0x1f0000) returned 1 [0217.663] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0217.663] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234110 | out: hHeap=0x1f0000) returned 1 [0217.663] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234110 [0217.663] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380c8 [0217.663] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x263310 [0217.663] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0217.664] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VC\\*", lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xbcd0fab8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xcaf3b103, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xcaf3b103, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24e680 [0217.664] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220328 [0217.664] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0217.664] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0217.664] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xbcd0fab8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xcaf3b103, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xcaf3b103, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0217.664] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0217.665] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220328 | out: hHeap=0x1f0000) returned 1 [0217.665] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0217.665] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0217.665] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8127e00, ftCreationTime.dwHighDateTime=0x1cbd076, ftLastAccessTime.dwLowDateTime=0xcd0a4098, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xd8127e00, ftLastWriteTime.dwHighDateTime=0x1cbd076, nFileSizeHigh=0x0, nFileSizeLow=0xf1b50, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="msdia100.dll", cAlternateFileName="")) returned 1 [0217.665] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0217.665] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0217.665] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218978 [0217.665] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0217.665] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0217.665] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0217.666] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VC\\msdia100.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia100.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc [0217.666] GetFileType (hFile=0x1cc) returned 0x1 [0217.667] CloseHandle (hObject=0x1cc) returned 1 [0217.704] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0217.704] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VC\\msdia100.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia100.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8127e00, ftCreationTime.dwHighDateTime=0x1cbd076, ftLastAccessTime.dwLowDateTime=0xcd0a4098, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xd8127e00, ftLastWriteTime.dwHighDateTime=0x1cbd076, nFileSizeHigh=0x0, nFileSizeLow=0xf1b50)) returned 1 [0217.705] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0217.705] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0217.705] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0217.705] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcaf3b103, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xcaf3b103, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xcaf615a9, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="msdia100.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="MSDIA1~1.ODV")) returned 1 [0217.705] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a4d0 [0217.705] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0217.705] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2315d0 [0217.705] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0217.705] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218978 | out: hHeap=0x1f0000) returned 1 [0217.705] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a4d0 | out: hHeap=0x1f0000) returned 1 [0217.706] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VC\\msdia100.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia100.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc [0217.706] GetFileType (hFile=0x1cc) returned 0x1 [0217.707] CloseHandle (hObject=0x1cc) returned 1 [0217.724] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2311b0 [0217.724] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VC\\msdia100.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia100.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcaf3b103, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xcaf3b103, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xcaf615a9, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x6f000)) returned 1 [0217.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2311b0 | out: hHeap=0x1f0000) returned 1 [0217.724] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2313c0 [0217.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2313c0 | out: hHeap=0x1f0000) returned 1 [0217.724] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfe87c00, ftCreationTime.dwHighDateTime=0x1cbfe36, ftLastAccessTime.dwLowDateTime=0x2ce22546, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xcfe87c00, ftLastWriteTime.dwHighDateTime=0x1cbfe36, nFileSizeHigh=0x0, nFileSizeLow=0xd0d50, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="msdia90.dll", cAlternateFileName="")) returned 1 [0217.725] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0217.725] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0217.725] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218a28 [0217.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0217.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2315d0 | out: hHeap=0x1f0000) returned 1 [0217.726] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0217.726] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VC\\msdia90.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia90.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc [0217.726] GetFileType (hFile=0x1cc) returned 0x1 [0217.727] CloseHandle (hObject=0x1cc) returned 1 [0217.727] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212cf0 [0217.727] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VC\\msdia90.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia90.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfe87c00, ftCreationTime.dwHighDateTime=0x1cbfe36, ftLastAccessTime.dwLowDateTime=0x2ce22546, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xcfe87c00, ftLastWriteTime.dwHighDateTime=0x1cbfe36, nFileSizeHigh=0x0, nFileSizeLow=0xd0d50)) returned 1 [0217.727] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212cf0 | out: hHeap=0x1f0000) returned 1 [0217.727] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2132c8 [0217.727] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2132c8 | out: hHeap=0x1f0000) returned 1 [0217.727] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfe87c00, ftCreationTime.dwHighDateTime=0x1cbfe36, ftLastAccessTime.dwLowDateTime=0x2ce22546, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xcfe87c00, ftLastWriteTime.dwHighDateTime=0x1cbfe36, nFileSizeHigh=0x0, nFileSizeLow=0xd0d50, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="msdia90.dll", cAlternateFileName="")) returned 0 [0217.727] FindClose (in: hFindFile=0x24e680 | out: hFindFile=0x24e680) returned 1 [0217.728] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218a28 | out: hHeap=0x1f0000) returned 1 [0217.728] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263310 | out: hHeap=0x1f0000) returned 1 [0217.728] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380c8 | out: hHeap=0x1f0000) returned 1 [0217.728] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234110 | out: hHeap=0x1f0000) returned 1 [0217.728] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234110 [0217.728] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0217.728] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2617f8 [0217.728] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0217.728] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VGX\\*", lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b59a78, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24e6c0 [0217.728] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0217.728] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0217.729] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0217.729] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b59a78, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0217.729] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0217.729] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0217.729] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0217.729] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0217.729] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a69a2a7, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xb3fd6e56, ftLastAccessTime.dwHighDateTime=0x1d2fa09, ftLastWriteTime.dwLowDateTime=0x4a69a2a7, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0xf1000, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="VGX.dll", cAlternateFileName="")) returned 1 [0217.729] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fef0 [0217.729] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218b88 [0217.729] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fef0 | out: hHeap=0x1f0000) returned 1 [0217.729] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0217.730] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VGX\\VGX.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vgx\\vgx.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0217.730] GetLastError () returned 0x5 [0217.730] GetLastError () returned 0x5 [0217.731] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a69a2a7, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xb3fd6e56, ftLastAccessTime.dwHighDateTime=0x1d2fa09, ftLastWriteTime.dwLowDateTime=0x4a69a2a7, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0xf1000, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="VGX.dll", cAlternateFileName="")) returned 0 [0217.731] FindClose (in: hFindFile=0x24e6c0 | out: hFindFile=0x24e6c0) returned 1 [0217.731] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218b88 | out: hHeap=0x1f0000) returned 1 [0217.731] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2617f8 | out: hHeap=0x1f0000) returned 1 [0217.731] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0217.731] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234110 | out: hHeap=0x1f0000) returned 1 [0217.731] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234110 [0217.731] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0217.731] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262650 [0217.732] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0217.732] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\*", lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49ecb94e, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ae972f5, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24e940 [0217.732] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0217.732] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0217.732] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0217.732] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49ecb94e, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ae972f5, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0217.732] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0217.732] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0217.733] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0217.733] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0217.733] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4aebd53e, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4aebd53e, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="10.0", cAlternateFileName="")) returned 1 [0217.733] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220490 [0217.733] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219478 [0217.733] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220490 | out: hHeap=0x1f0000) returned 1 [0217.733] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0217.733] lstrcmpW (lpString1="10.0", lpString2=".") returned 1 [0217.733] lstrcmpW (lpString1="10.0", lpString2="..") returned 1 [0217.733] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204b90 [0217.734] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2132c8 [0217.734] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x29080, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="vstoee.dll", cAlternateFileName="")) returned 1 [0217.734] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0217.734] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0217.734] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218978 [0217.734] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0217.734] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219478 | out: hHeap=0x1f0000) returned 1 [0217.734] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0217.735] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc [0217.736] GetFileType (hFile=0x1cc) returned 0x1 [0217.736] CloseHandle (hObject=0x1cc) returned 1 [0217.736] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0217.737] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x29080)) returned 1 [0217.737] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0217.737] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0217.737] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0217.737] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6340300, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0xd6340300, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x4298, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="vstoee100.tlb", cAlternateFileName="VSTOEE~1.TLB")) returned 1 [0217.737] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0217.737] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220490 [0217.737] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218b88 [0217.737] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220490 | out: hHeap=0x1f0000) returned 1 [0217.738] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218978 | out: hHeap=0x1f0000) returned 1 [0217.738] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0217.738] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee100.tlb" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee100.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc [0217.738] GetFileType (hFile=0x1cc) returned 0x1 [0217.739] CloseHandle (hObject=0x1cc) returned 1 [0217.739] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0217.739] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee100.tlb" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee100.tlb"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6340300, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0xd6340300, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x4298)) returned 1 [0217.739] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0217.739] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0217.739] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0217.740] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6340300, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0xd6340300, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x5898, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="vstoee90.tlb", cAlternateFileName="")) returned 1 [0217.740] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380c8 [0217.740] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fa40 [0218.006] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ce8 [0218.006] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fa40 | out: hHeap=0x1f0000) returned 1 [0218.006] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218b88 | out: hHeap=0x1f0000) returned 1 [0218.006] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380c8 | out: hHeap=0x1f0000) returned 1 [0218.015] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee90.tlb" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee90.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0218.015] GetFileType (hFile=0x1e8) returned 0x1 [0218.015] CloseHandle (hObject=0x1e8) returned 1 [0218.016] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0218.016] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee90.tlb" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee90.tlb"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6340300, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0xd6340300, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x5898)) returned 1 [0218.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0218.016] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0218.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0218.016] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6340300, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0xd6340300, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x5898, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="vstoee90.tlb", cAlternateFileName="")) returned 0 [0218.016] FindClose (in: hFindFile=0x24e940 | out: hFindFile=0x24e940) returned 1 [0218.017] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234ae8 [0218.017] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0218.017] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2634a8 [0218.017] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0218.017] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\*", lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4aebd53e, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0xcb046382, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e6c0 [0218.017] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2135f8 [0218.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0218.017] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0218.017] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4aebd53e, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0xcb046382, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0218.017] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0218.018] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2135f8 | out: hHeap=0x1f0000) returned 1 [0218.018] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0218.018] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0218.018] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4a6fdac8, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0218.018] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2135f8 [0218.018] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0218.018] lstrcmpW (lpString1="1033", lpString2=".") returned 1 [0218.018] lstrcmpW (lpString1="1033", lpString2="..") returned 1 [0218.018] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204c50 [0218.018] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0218.018] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x18888, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOInstaller.exe", cAlternateFileName="VSTOIN~1.EXE")) returned 1 [0218.018] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1ff058 [0218.018] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0218.019] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0218.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0218.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2135f8 | out: hHeap=0x1f0000) returned 1 [0218.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1ff058 | out: hHeap=0x1f0000) returned 1 [0218.019] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0218.020] GetFileType (hFile=0x1e8) returned 0x1 [0218.020] CloseHandle (hObject=0x1e8) returned 1 [0218.020] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219ee8 [0218.020] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.exe"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x18888)) returned 1 [0218.021] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219ee8 | out: hHeap=0x1f0000) returned 1 [0218.021] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21aab8 [0218.021] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21aab8 | out: hHeap=0x1f0000) returned 1 [0218.021] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4aebd53e, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x59a70, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOLoader.dll", cAlternateFileName="VSTOLO~1.DLL")) returned 1 [0218.021] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0218.021] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2135f8 [0218.022] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0218.022] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2135f8 | out: hHeap=0x1f0000) returned 1 [0218.022] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0218.022] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0218.022] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOLoader.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoloader.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0218.022] GetFileType (hFile=0x1e8) returned 0x1 [0218.023] CloseHandle (hObject=0x1e8) returned 1 [0218.023] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a038 [0218.023] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOLoader.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoloader.dll"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4aebd53e, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x59a70)) returned 1 [0218.023] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a038 | out: hHeap=0x1f0000) returned 1 [0218.023] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219c48 [0218.023] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219c48 | out: hHeap=0x1f0000) returned 1 [0218.023] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb046382, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xcb046382, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xcb046382, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x59a80, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOLoader.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="VSTOLO~1.ODV")) returned 1 [0218.023] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219cf0 [0218.023] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213818 [0218.024] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120) returned 0x210ba8 [0218.024] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213818 | out: hHeap=0x1f0000) returned 1 [0218.024] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0218.024] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219cf0 | out: hHeap=0x1f0000) returned 1 [0218.024] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOLoader.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoloader.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0218.024] GetFileType (hFile=0x1e8) returned 0x1 [0218.024] CloseHandle (hObject=0x1e8) returned 1 [0218.025] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120) returned 0x211048 [0218.025] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOLoader.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoloader.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb046382, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xcb046382, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xcb046382, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x59a80)) returned 1 [0218.025] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0218.025] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120) returned 0x210cd0 [0218.025] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0218.025] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0xbee8, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOMessageProvider.dll", cAlternateFileName="VSTOME~1.DLL")) returned 1 [0218.025] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1ff058 [0218.025] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2135f8 [0218.025] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0218.025] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2135f8 | out: hHeap=0x1f0000) returned 1 [0218.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0218.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1ff058 | out: hHeap=0x1f0000) returned 1 [0218.026] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOMessageProvider.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstomessageprovider.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0218.026] GetFileType (hFile=0x1e8) returned 0x1 [0218.026] CloseHandle (hObject=0x1e8) returned 1 [0218.027] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x286808 [0218.027] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOMessageProvider.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstomessageprovider.dll"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0xbee8)) returned 1 [0218.027] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286808 | out: hHeap=0x1f0000) returned 1 [0218.027] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x286ba0 [0218.027] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286ba0 | out: hHeap=0x1f0000) returned 1 [0218.027] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0xbee8, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOMessageProvider.dll", cAlternateFileName="VSTOME~1.DLL")) returned 0 [0218.027] FindClose (in: hFindFile=0x24e6c0 | out: hFindFile=0x24e6c0) returned 1 [0218.028] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234788 [0218.028] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0218.028] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2617f8 [0218.028] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0218.028] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\*", lpFindFileData=0x22bdd70 | out: lpFindFileData=0x22bdd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4a6fdac8, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24ec40 [0218.028] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0218.028] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0218.028] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0218.028] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0218.028] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0218.028] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x22bdd70 | out: lpFindFileData=0x22bdd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4a6fdac8, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0218.028] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0218.028] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0218.029] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0218.029] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0218.029] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0218.029] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0218.029] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x22bdd70 | out: lpFindFileData=0x22bdd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a6d7a0a, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x30a0, dwReserved0=0x0, dwReserved1=0x3, cFileName="VSTOInstallerUI.dll", cAlternateFileName="VSTOIN~1.DLL")) returned 1 [0218.029] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1ff058 [0218.029] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2135f8 [0218.029] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0218.029] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2135f8 | out: hHeap=0x1f0000) returned 1 [0218.029] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0218.029] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1ff058 | out: hHeap=0x1f0000) returned 1 [0218.029] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOInstallerUI.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoinstallerui.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdb48, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0218.030] GetFileType (hFile=0x1e8) returned 0x1 [0218.030] CloseHandle (hObject=0x1e8) returned 1 [0218.030] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x286c58 [0218.030] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOInstallerUI.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoinstallerui.dll"), fInfoLevelId=0x0, lpFileInformation=0x22bdbe4 | out: lpFileInformation=0x22bdbe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a6d7a0a, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x30a0)) returned 1 [0218.030] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286c58 | out: hHeap=0x1f0000) returned 1 [0218.030] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x286978 [0218.030] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286978 | out: hHeap=0x1f0000) returned 1 [0218.030] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x22bdd70 | out: lpFindFileData=0x22bdd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x5080, dwReserved0=0x0, dwReserved1=0x3, cFileName="VSTOLoaderUI.dll", cAlternateFileName="VSTOLO~1.DLL")) returned 1 [0218.030] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1ff058 [0218.030] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2135f8 [0218.030] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0218.030] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2135f8 | out: hHeap=0x1f0000) returned 1 [0218.031] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0218.031] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1ff058 | out: hHeap=0x1f0000) returned 1 [0218.031] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOLoaderUI.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoloaderui.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdb48, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0218.031] GetFileType (hFile=0x1e8) returned 0x1 [0218.031] CloseHandle (hObject=0x1e8) returned 1 [0218.031] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a968 [0218.031] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOLoaderUI.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoloaderui.dll"), fInfoLevelId=0x0, lpFileInformation=0x22bdbe4 | out: lpFileInformation=0x22bdbe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x5080)) returned 1 [0218.031] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a968 | out: hHeap=0x1f0000) returned 1 [0218.031] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a4d0 [0218.031] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a4d0 | out: hHeap=0x1f0000) returned 1 [0218.032] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x22bdd70 | out: lpFindFileData=0x22bdd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x5080, dwReserved0=0x0, dwReserved1=0x3, cFileName="VSTOLoaderUI.dll", cAlternateFileName="VSTOLO~1.DLL")) returned 0 [0218.032] FindClose (in: hFindFile=0x24ec40 | out: hFindFile=0x24ec40) returned 1 [0218.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0218.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2617f8 | out: hHeap=0x1f0000) returned 1 [0218.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0218.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234788 | out: hHeap=0x1f0000) returned 1 [0218.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0218.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0218.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c50 | out: hHeap=0x1f0000) returned 1 [0218.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2634a8 | out: hHeap=0x1f0000) returned 1 [0218.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0218.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234ae8 | out: hHeap=0x1f0000) returned 1 [0218.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ce8 | out: hHeap=0x1f0000) returned 1 [0218.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2132c8 | out: hHeap=0x1f0000) returned 1 [0218.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204b90 | out: hHeap=0x1f0000) returned 1 [0218.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262650 | out: hHeap=0x1f0000) returned 1 [0218.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0218.033] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234110 | out: hHeap=0x1f0000) returned 1 [0218.033] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2201c0 | out: hHeap=0x1f0000) returned 1 [0218.033] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229cf8 | out: hHeap=0x1f0000) returned 1 [0218.033] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab08 | out: hHeap=0x1f0000) returned 1 [0218.033] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f770 | out: hHeap=0x1f0000) returned 1 [0218.033] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a248 | out: hHeap=0x1f0000) returned 1 [0218.033] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2615b0 | out: hHeap=0x1f0000) returned 1 [0218.033] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a028 | out: hHeap=0x1f0000) returned 1 [0218.033] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229a50 | out: hHeap=0x1f0000) returned 1 [0218.033] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a600 | out: hHeap=0x1f0000) returned 1 [0218.033] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220238 | out: hHeap=0x1f0000) returned 1 [0218.033] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fc20 | out: hHeap=0x1f0000) returned 1 [0218.033] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fb30 | out: hHeap=0x1f0000) returned 1 [0218.033] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220580 | out: hHeap=0x1f0000) returned 1 [0218.033] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239be0 | out: hHeap=0x1f0000) returned 1 [0218.033] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d9d0 | out: hHeap=0x1f0000) returned 1 [0218.033] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b08 | out: hHeap=0x1f0000) returned 1 [0218.033] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233c90 | out: hHeap=0x1f0000) returned 1 [0218.033] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233c90 [0218.034] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0218.034] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262650 [0218.034] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235838 [0218.034] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\Services\\*", lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c11068, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24eb80 [0218.034] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235de8 [0218.034] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235838 | out: hHeap=0x1f0000) returned 1 [0218.034] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0218.034] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c11068, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0218.034] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235970 [0218.034] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235de8 | out: hHeap=0x1f0000) returned 1 [0218.034] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0218.034] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0218.034] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440ad34a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440ad34a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440ad34a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa8e, dwReserved0=0x2, dwReserved1=0x0, cFileName="verisign.bmp", cAlternateFileName="")) returned 1 [0218.034] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0218.034] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2359d8 [0218.034] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2218d0 [0218.035] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2359d8 | out: hHeap=0x1f0000) returned 1 [0218.035] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235970 | out: hHeap=0x1f0000) returned 1 [0218.035] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0218.035] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\Services\\verisign.bmp" (normalized: "c:\\program files\\common files\\services\\verisign.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be73c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0218.035] GetLastError () returned 0x5 [0218.035] GetLastError () returned 0x5 [0218.035] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440ad34a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440ad34a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440ad34a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa8e, dwReserved0=0x2, dwReserved1=0x0, cFileName="verisign.bmp", cAlternateFileName="")) returned 0 [0218.035] FindClose (in: hFindFile=0x24eb80 | out: hFindFile=0x24eb80) returned 1 [0218.036] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0218.036] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262650 | out: hHeap=0x1f0000) returned 1 [0218.036] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0218.036] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233c90 | out: hHeap=0x1f0000) returned 1 [0218.036] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234110 [0218.036] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0218.036] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2634a8 [0218.036] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x230ba0 [0218.036] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\System\\*", lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c5f95f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e940 [0218.036] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x230a98 [0218.036] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230ba0 | out: hHeap=0x1f0000) returned 1 [0218.036] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0218.036] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c5f95f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0218.037] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2308e0 [0218.037] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217650 [0218.037] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2308e0 | out: hHeap=0x1f0000) returned 1 [0218.037] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230a98 | out: hHeap=0x1f0000) returned 1 [0218.037] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0218.037] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0218.037] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0cb0a3f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2, dwReserved1=0x0, cFileName="ado", cAlternateFileName="")) returned 1 [0218.037] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x230938 [0218.037] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x2182d0 [0218.037] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230938 | out: hHeap=0x1f0000) returned 1 [0218.037] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217650 | out: hHeap=0x1f0000) returned 1 [0218.037] lstrcmpW (lpString1="ado", lpString2=".") returned 1 [0218.037] lstrcmpW (lpString1="ado", lpString2="..") returned 1 [0218.037] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204c70 [0218.038] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235aa8 [0218.038] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d5a533, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d5a533, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d5a533, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x2, dwReserved1=0x0, cFileName="DirectDB.dll", cAlternateFileName="")) returned 1 [0218.038] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0218.038] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x230fc0 [0218.038] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x218250 [0218.038] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230fc0 | out: hHeap=0x1f0000) returned 1 [0218.038] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2182d0 | out: hHeap=0x1f0000) returned 1 [0218.038] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0218.038] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\DirectDB.dll" (normalized: "c:\\program files\\common files\\system\\directdb.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be73c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0218.039] GetLastError () returned 0x5 [0218.039] GetLastError () returned 0x5 [0218.039] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb3579, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0218.039] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x230e08 [0218.039] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x2183d0 [0218.039] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230e08 | out: hHeap=0x1f0000) returned 1 [0218.039] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218250 | out: hHeap=0x1f0000) returned 1 [0218.039] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0218.039] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0218.039] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1ff058 [0218.039] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235700 [0218.039] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c70 | out: hHeap=0x1f0000) returned 1 [0218.040] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d7f179, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2, dwReserved1=0x0, cFileName="msadc", cAlternateFileName="")) returned 1 [0218.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x230a40 [0218.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217fd0 [0218.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230a40 | out: hHeap=0x1f0000) returned 1 [0218.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2183d0 | out: hHeap=0x1f0000) returned 1 [0218.040] lstrcmpW (lpString1="msadc", lpString2=".") returned 1 [0218.040] lstrcmpW (lpString1="msadc", lpString2="..") returned 1 [0218.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x48) returned 0x226148 [0218.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236190 [0218.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1ff058 | out: hHeap=0x1f0000) returned 1 [0218.040] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d8186d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2, dwReserved1=0x0, cFileName="Ole DB", cAlternateFileName="OLEDB~1")) returned 1 [0218.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x230e60 [0218.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x2177d0 [0218.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230e60 | out: hHeap=0x1f0000) returned 1 [0218.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217fd0 | out: hHeap=0x1f0000) returned 1 [0218.041] lstrcmpW (lpString1="Ole DB", lpString2=".") returned 1 [0218.041] lstrcmpW (lpString1="Ole DB", lpString2="..") returned 1 [0218.041] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235838 [0218.041] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2359d8 [0218.041] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226148 | out: hHeap=0x1f0000) returned 1 [0218.041] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440d35a9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440d35a9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440d35a9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd0a00, dwReserved0=0x2, dwReserved1=0x0, cFileName="wab32.dll", cAlternateFileName="")) returned 1 [0218.041] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380c8 [0218.041] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x230b48 [0218.041] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x2180d0 [0218.041] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230b48 | out: hHeap=0x1f0000) returned 1 [0218.041] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2177d0 | out: hHeap=0x1f0000) returned 1 [0218.041] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380c8 | out: hHeap=0x1f0000) returned 1 [0218.042] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\wab32.dll" (normalized: "c:\\program files\\common files\\system\\wab32.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be73c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0218.042] GetLastError () returned 0x5 [0218.042] GetLastError () returned 0x5 [0218.042] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440d35a9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440d35a9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440d35a9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xeb600, dwReserved0=0x2, dwReserved1=0x0, cFileName="wab32res.dll", cAlternateFileName="")) returned 1 [0218.042] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0218.042] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2aaa60 [0218.042] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x218250 [0218.043] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aaa60 | out: hHeap=0x1f0000) returned 1 [0218.043] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2180d0 | out: hHeap=0x1f0000) returned 1 [0218.043] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0218.043] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\wab32res.dll" (normalized: "c:\\program files\\common files\\system\\wab32res.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be73c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0218.043] GetLastError () returned 0x5 [0218.043] GetLastError () returned 0x5 [0218.043] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440d35a9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440d35a9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440d35a9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xeb600, dwReserved0=0x2, dwReserved1=0x0, cFileName="wab32res.dll", cAlternateFileName="")) returned 0 [0218.044] FindClose (in: hFindFile=0x24e940 | out: hFindFile=0x24e940) returned 1 [0218.044] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233c90 [0218.044] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0218.044] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262650 [0218.044] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2362c8 [0218.044] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\System\\ado\\*", lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0cb0a3f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24e940 [0218.044] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235f20 [0218.044] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2362c8 | out: hHeap=0x1f0000) returned 1 [0218.044] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0218.044] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0cb0a3f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0218.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2358a0 [0218.045] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235f20 | out: hHeap=0x1f0000) returned 1 [0218.045] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0218.045] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0218.045] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52a0c6a1, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x52a0c6a1, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x52a0c6a1, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3a08, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="adojavas.inc", cAlternateFileName="")) returned 1 [0218.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0218.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235908 [0218.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220eb8 [0218.045] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235908 | out: hHeap=0x1f0000) returned 1 [0218.045] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2358a0 | out: hHeap=0x1f0000) returned 1 [0218.045] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0218.045] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\ado\\adojavas.inc" (normalized: "c:\\program files\\common files\\system\\ado\\adojavas.inc"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0218.047] GetLastError () returned 0x5 [0218.047] GetLastError () returned 0x5 [0218.047] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x529e643a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x529e643a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x529e643a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3b5b, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="adovbs.inc", cAlternateFileName="")) returned 1 [0218.047] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0218.047] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235768 [0218.047] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221708 [0218.047] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235768 | out: hHeap=0x1f0000) returned 1 [0218.047] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0218.047] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0218.048] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\ado\\adovbs.inc" (normalized: "c:\\program files\\common files\\system\\ado\\adovbs.inc"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0218.048] GetLastError () returned 0x5 [0218.048] GetLastError () returned 0x5 [0218.048] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb2730, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="en-US", cAlternateFileName="")) returned 1 [0218.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235be0 [0218.048] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0218.048] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0218.048] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0218.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204f50 [0218.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235d80 [0218.049] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43854cb5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43854cb5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43854cb5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="msader15.dll", cAlternateFileName="")) returned 1 [0218.049] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0218.049] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235de8 [0218.049] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221410 [0218.049] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235de8 | out: hHeap=0x1f0000) returned 1 [0218.049] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235be0 | out: hHeap=0x1f0000) returned 1 [0218.049] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0218.049] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\ado\\msader15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msader15.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0218.050] GetLastError () returned 0x5 [0218.050] GetLastError () returned 0x5 [0218.050] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463fb128, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xced4b5c5, ftLastAccessTime.dwHighDateTime=0x1d2fa09, ftLastWriteTime.dwLowDateTime=0x463fb128, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x12d400, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="msado15.dll", cAlternateFileName="")) returned 1 [0218.050] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0218.050] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235ff0 [0218.050] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221968 [0218.050] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235ff0 | out: hHeap=0x1f0000) returned 1 [0218.050] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0218.050] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0218.051] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\ado\\msado15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msado15.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0218.051] GetLastError () returned 0x5 [0218.051] GetLastError () returned 0x5 [0218.051] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41cc3017, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41cc3017, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41cc3017, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc600, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="msado20.tlb", cAlternateFileName="")) returned 1 [0218.051] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0218.051] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2362c8 [0218.051] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221b30 [0218.051] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2362c8 | out: hHeap=0x1f0000) returned 1 [0218.051] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0218.051] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0218.051] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\ado\\msado20.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado20.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0218.052] GetLastError () returned 0x5 [0218.052] GetLastError () returned 0x5 [0218.052] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41cc3017, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41cc3017, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41cc3017, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd200, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="msado21.tlb", cAlternateFileName="")) returned 1 [0218.052] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0218.052] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235e50 [0218.052] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221410 [0218.052] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235e50 | out: hHeap=0x1f0000) returned 1 [0218.052] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0218.052] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0218.588] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\ado\\msado21.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado21.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0218.588] GetLastError () returned 0x5 [0218.588] GetLastError () returned 0x5 [0218.589] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41cc3017, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41cc3017, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41cc3017, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="msado25.tlb", cAlternateFileName="")) returned 1 [0218.589] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0218.589] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235a40 [0218.589] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221a98 [0218.589] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235a40 | out: hHeap=0x1f0000) returned 1 [0218.589] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0218.589] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0218.590] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\ado\\msado25.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado25.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0218.590] GetLastError () returned 0x5 [0218.590] GetLastError () returned 0x5 [0218.591] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41cc3017, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41cc3017, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41cc3017, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x11400, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="msado26.tlb", cAlternateFileName="")) returned 1 [0218.591] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0218.591] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235b78 [0218.591] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2215d8 [0218.591] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0218.591] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0218.591] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0218.592] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\ado\\msado26.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado26.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0218.592] GetLastError () returned 0x5 [0218.592] GetLastError () returned 0x5 [0218.592] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41cc3017, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41cc3017, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41cc3017, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x11600, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="msado27.tlb", cAlternateFileName="")) returned 1 [0218.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0218.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2358a0 [0218.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220cf0 [0218.593] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2358a0 | out: hHeap=0x1f0000) returned 1 [0218.593] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0218.593] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0218.593] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\ado\\msado27.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado27.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0218.594] GetLastError () returned 0x5 [0218.594] GetLastError () returned 0x5 [0218.594] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c6f28a5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4c6f28a5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4c6f28a5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x11400, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="msado28.tlb", cAlternateFileName="")) returned 1 [0218.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0218.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2361f8 [0218.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220fe8 [0218.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2361f8 | out: hHeap=0x1f0000) returned 1 [0218.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0218.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0218.595] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\ado\\msado28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado28.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0218.595] GetLastError () returned 0x5 [0218.595] GetLastError () returned 0x5 [0218.596] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c6f28a5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4c6f28a5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4c6f28a5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x11400, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="msado60.tlb", cAlternateFileName="")) returned 1 [0218.596] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0218.596] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235a40 [0218.596] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220e20 [0218.596] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235a40 | out: hHeap=0x1f0000) returned 1 [0218.596] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0218.596] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0218.597] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\ado\\msado60.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado60.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0218.597] GetLastError () returned 0x5 [0218.597] GetLastError () returned 0x5 [0218.598] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463fb128, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xd005e363, ftLastAccessTime.dwHighDateTime=0x1d2fa09, ftLastWriteTime.dwLowDateTime=0x463fb128, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x58e00, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="msadomd.dll", cAlternateFileName="")) returned 1 [0218.598] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0218.598] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2358a0 [0218.598] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220c58 [0218.598] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2358a0 | out: hHeap=0x1f0000) returned 1 [0218.598] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0218.598] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0218.599] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\ado\\msadomd.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadomd.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0218.599] GetLastError () returned 0x5 [0218.599] GetLastError () returned 0x5 [0218.599] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x437960ad, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x437960ad, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x437960ad, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3600, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="msadomd28.tlb", cAlternateFileName="")) returned 1 [0218.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380f0 [0218.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235de8 [0218.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221540 [0218.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235de8 | out: hHeap=0x1f0000) returned 1 [0218.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0218.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380f0 | out: hHeap=0x1f0000) returned 1 [0218.601] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\ado\\msadomd28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msadomd28.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0218.601] GetLastError () returned 0x5 [0218.601] GetLastError () returned 0x5 [0218.601] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41da7e83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41da7e83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41da7e83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb200, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="msador15.dll", cAlternateFileName="")) returned 1 [0218.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0218.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235be0 [0218.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221410 [0218.601] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235be0 | out: hHeap=0x1f0000) returned 1 [0218.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0218.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0218.602] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\ado\\msador15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msador15.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0218.602] GetLastError () returned 0x5 [0218.602] GetLastError () returned 0x5 [0218.603] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x438ed65e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x438ed65e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x438ed65e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x8c00, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="msador28.tlb", cAlternateFileName="")) returned 1 [0218.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380f0 [0218.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235eb8 [0218.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221080 [0218.603] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235eb8 | out: hHeap=0x1f0000) returned 1 [0218.603] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0218.603] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380f0 | out: hHeap=0x1f0000) returned 1 [0218.604] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\ado\\msador28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msador28.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0218.604] GetLastError () returned 0x5 [0218.605] GetLastError () returned 0x5 [0218.605] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463fb128, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xc5b43065, ftLastAccessTime.dwHighDateTime=0x1d2fa09, ftLastWriteTime.dwLowDateTime=0x463fb128, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x62e00, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="msadox.dll", cAlternateFileName="")) returned 1 [0218.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0218.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2358a0 [0218.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220fe8 [0218.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2358a0 | out: hHeap=0x1f0000) returned 1 [0218.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0218.606] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0218.606] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\ado\\msadox.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadox.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0218.607] GetLastError () returned 0x5 [0218.607] GetLastError () returned 0x5 [0218.607] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43c5ad98, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43c5ad98, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43c5ad98, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="msadox28.tlb", cAlternateFileName="")) returned 1 [0218.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0218.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235b78 [0218.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2217a0 [0218.607] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0218.608] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0218.608] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0218.608] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\ado\\msadox28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msadox28.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0218.609] GetLastError () returned 0x5 [0218.609] GetLastError () returned 0x5 [0218.609] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x437960ad, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x437960ad, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x437960ad, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x16400, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="msadrh15.dll", cAlternateFileName="")) returned 1 [0218.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0218.610] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235e50 [0218.610] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221410 [0218.610] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235e50 | out: hHeap=0x1f0000) returned 1 [0218.610] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0218.610] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0218.611] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\ado\\msadrh15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadrh15.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0218.611] GetLastError () returned 0x5 [0218.611] GetLastError () returned 0x5 [0218.612] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x437960ad, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x437960ad, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x437960ad, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x16400, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="msadrh15.dll", cAlternateFileName="")) returned 0 [0218.612] FindClose (in: hFindFile=0x24e940 | out: hFindFile=0x24e940) returned 1 [0218.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234a58 [0218.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0218.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x263178 [0218.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220238 [0218.613] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\System\\ado\\en-US\\*", lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb2730, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName=".", cAlternateFileName="")) returned 0x24e900 [0218.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0218.613] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220238 | out: hHeap=0x1f0000) returned 1 [0218.614] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0218.614] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb2730, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="..", cAlternateFileName="")) returned 1 [0218.614] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0218.614] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0218.614] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0218.614] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0218.614] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b9483e2, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb3fb1900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="msader15.dll.mui", cAlternateFileName="")) returned 1 [0218.615] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf70 [0218.615] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0218.615] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218b88 [0218.615] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0218.615] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0218.616] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf70 | out: hHeap=0x1f0000) returned 1 [0218.616] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\ado\\en-US\\msader15.dll.mui" (normalized: "c:\\program files\\common files\\system\\ado\\en-us\\msader15.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0218.616] GetLastError () returned 0x5 [0218.617] GetLastError () returned 0x5 [0218.617] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b9483e2, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb3fb1900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="msader15.dll.mui", cAlternateFileName="")) returned 0 [0218.617] FindClose (in: hFindFile=0x24e900 | out: hFindFile=0x24e900) returned 1 [0218.617] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218b88 | out: hHeap=0x1f0000) returned 1 [0218.617] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263178 | out: hHeap=0x1f0000) returned 1 [0218.618] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0218.618] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234a58 | out: hHeap=0x1f0000) returned 1 [0218.618] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0218.618] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235d80 | out: hHeap=0x1f0000) returned 1 [0218.618] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f50 | out: hHeap=0x1f0000) returned 1 [0218.618] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262650 | out: hHeap=0x1f0000) returned 1 [0218.618] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0218.619] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233c90 | out: hHeap=0x1f0000) returned 1 [0218.619] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2343e0 [0218.619] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0218.619] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x263178 [0218.619] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2361f8 [0218.619] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\System\\en-US\\*", lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb3579, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24e9c0 [0218.620] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235f20 [0218.620] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2361f8 | out: hHeap=0x1f0000) returned 1 [0218.620] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0218.620] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb3579, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0218.620] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2361f8 [0218.620] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235f20 | out: hHeap=0x1f0000) returned 1 [0218.620] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0218.620] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0218.621] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dd86035, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x755f99d9, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x75fdf500, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="wab32res.dll.mui", cAlternateFileName="")) returned 1 [0218.621] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf70 [0218.621] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235e50 [0218.621] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221248 [0218.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235e50 | out: hHeap=0x1f0000) returned 1 [0218.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2361f8 | out: hHeap=0x1f0000) returned 1 [0218.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf70 | out: hHeap=0x1f0000) returned 1 [0218.622] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\en-US\\wab32res.dll.mui" (normalized: "c:\\program files\\common files\\system\\en-us\\wab32res.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0218.622] GetLastError () returned 0x5 [0218.622] GetLastError () returned 0x5 [0218.623] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dd86035, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x755f99d9, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x75fdf500, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="wab32res.dll.mui", cAlternateFileName="")) returned 0 [0218.623] FindClose (in: hFindFile=0x24e9c0 | out: hFindFile=0x24e9c0) returned 1 [0218.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0218.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263178 | out: hHeap=0x1f0000) returned 1 [0218.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0218.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2343e0 | out: hHeap=0x1f0000) returned 1 [0218.624] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233df8 [0218.624] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0218.624] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262cb0 [0218.624] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2357d0 [0218.624] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\System\\msadc\\*", lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d7f179, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24ec00 [0218.624] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2358a0 [0218.624] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2357d0 | out: hHeap=0x1f0000) returned 1 [0218.624] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0218.625] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d7f179, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0218.625] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235c48 [0218.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2358a0 | out: hHeap=0x1f0000) returned 1 [0218.625] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0218.625] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0218.625] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41da7e83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41da7e83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41da7e83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x276, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="adcjavas.inc", cAlternateFileName="")) returned 1 [0218.625] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0218.625] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2361f8 [0218.625] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221080 [0218.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2361f8 | out: hHeap=0x1f0000) returned 1 [0218.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235c48 | out: hHeap=0x1f0000) returned 1 [0218.626] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0218.626] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\msadc\\adcjavas.inc" (normalized: "c:\\program files\\common files\\system\\msadc\\adcjavas.inc"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0218.626] GetLastError () returned 0x5 [0218.627] GetLastError () returned 0x5 [0218.627] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41dce0ea, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41dce0ea, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41dce0ea, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x26f, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="adcvbs.inc", cAlternateFileName="")) returned 1 [0218.627] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0218.627] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2357d0 [0218.627] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220e20 [0218.627] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2357d0 | out: hHeap=0x1f0000) returned 1 [0218.627] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0218.627] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0218.628] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\msadc\\adcvbs.inc" (normalized: "c:\\program files\\common files\\system\\msadc\\adcvbs.inc"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0218.628] GetLastError () returned 0x5 [0218.628] GetLastError () returned 0x5 [0218.629] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d805e9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="en-US", cAlternateFileName="")) returned 1 [0218.629] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235a40 [0218.629] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2212e0 [0218.629] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235a40 | out: hHeap=0x1f0000) returned 1 [0218.629] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0218.629] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0218.629] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0218.630] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204c30 [0218.630] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220490 [0218.630] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41da7e83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41da7e83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41da7e83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa9c00, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="msadce.dll", cAlternateFileName="")) returned 1 [0218.630] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0218.630] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235970 [0218.630] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220cf0 [0218.630] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235970 | out: hHeap=0x1f0000) returned 1 [0218.630] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0218.883] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0218.884] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\msadc\\msadce.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadce.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0218.884] GetLastError () returned 0x5 [0218.884] GetLastError () returned 0x5 [0218.884] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41dce0ea, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41dce0ea, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41dce0ea, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="msadcer.dll", cAlternateFileName="")) returned 1 [0218.884] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0218.885] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235be0 [0218.885] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221708 [0218.885] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235be0 | out: hHeap=0x1f0000) returned 1 [0218.885] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0218.885] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0218.886] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\msadc\\msadcer.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadcer.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0218.886] GetLastError () returned 0x5 [0218.886] GetLastError () returned 0x5 [0218.886] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41da7e83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41da7e83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41da7e83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3b400, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="msadco.dll", cAlternateFileName="")) returned 1 [0218.887] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0218.887] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235970 [0218.887] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221b30 [0218.887] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235970 | out: hHeap=0x1f0000) returned 1 [0218.887] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0218.887] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0218.887] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\msadc\\msadco.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadco.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0218.888] GetLastError () returned 0x5 [0218.888] GetLastError () returned 0x5 [0218.888] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41da7e83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41da7e83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41da7e83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="msadcor.dll", cAlternateFileName="")) returned 1 [0218.888] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0218.888] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235970 [0218.888] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221968 [0218.888] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235970 | out: hHeap=0x1f0000) returned 1 [0218.888] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0218.888] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0218.889] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\msadc\\msadcor.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadcor.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0218.889] GetLastError () returned 0x5 [0218.889] GetLastError () returned 0x5 [0218.889] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440870df, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440870df, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440870df, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x44400, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="msadds.dll", cAlternateFileName="")) returned 1 [0218.889] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380f0 [0218.889] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235cb0 [0218.889] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221540 [0218.890] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235cb0 | out: hHeap=0x1f0000) returned 1 [0218.890] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0218.890] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380f0 | out: hHeap=0x1f0000) returned 1 [0218.890] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\msadc\\msadds.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadds.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0218.890] GetLastError () returned 0x5 [0218.890] GetLastError () returned 0x5 [0218.891] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44060e78, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x44060e78, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x44060e78, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="msaddsr.dll", cAlternateFileName="")) returned 1 [0218.891] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380f0 [0218.891] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235c48 [0218.891] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221a00 [0218.891] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235c48 | out: hHeap=0x1f0000) returned 1 [0218.891] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0218.891] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380f0 | out: hHeap=0x1f0000) returned 1 [0218.892] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\msadc\\msaddsr.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msaddsr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0218.892] GetLastError () returned 0x5 [0218.892] GetLastError () returned 0x5 [0218.892] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41d5b9b4, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41d5b9b4, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41d5b9b4, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="msdaprsr.dll", cAlternateFileName="")) returned 1 [0218.892] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0218.892] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236058 [0218.892] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221b30 [0218.892] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236058 | out: hHeap=0x1f0000) returned 1 [0218.892] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0218.892] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0218.893] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\msadc\\msdaprsr.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaprsr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0218.893] GetLastError () returned 0x5 [0218.893] GetLastError () returned 0x5 [0218.893] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41d5b9b4, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41d5b9b4, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41d5b9b4, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x57000, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="msdaprst.dll", cAlternateFileName="")) returned 1 [0218.893] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0218.894] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235be0 [0218.894] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220d88 [0218.894] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235be0 | out: hHeap=0x1f0000) returned 1 [0218.894] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0218.894] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0218.894] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\msadc\\msdaprst.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaprst.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0218.895] GetLastError () returned 0x5 [0218.895] GetLastError () returned 0x5 [0218.895] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44060e78, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x44060e78, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x44060e78, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x36200, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="msdarem.dll", cAlternateFileName="")) returned 1 [0218.895] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0218.895] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236128 [0218.895] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221670 [0218.895] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236128 | out: hHeap=0x1f0000) returned 1 [0218.895] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0218.895] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0218.896] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\msadc\\msdarem.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdarem.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0218.896] GetLastError () returned 0x5 [0218.896] GetLastError () returned 0x5 [0218.896] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4403ac10, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4403ac10, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4403ac10, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="msdaremr.dll", cAlternateFileName="")) returned 1 [0218.897] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0218.897] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235f88 [0218.897] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221a00 [0218.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235f88 | out: hHeap=0x1f0000) returned 1 [0218.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0218.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0218.897] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\msadc\\msdaremr.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaremr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0218.898] GetLastError () returned 0x5 [0218.898] GetLastError () returned 0x5 [0218.898] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440870df, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440870df, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440870df, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x7c00, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="msdfmap.dll", cAlternateFileName="")) returned 1 [0218.898] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0218.898] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235970 [0218.898] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221708 [0218.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235970 | out: hHeap=0x1f0000) returned 1 [0218.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0218.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0218.899] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\msadc\\msdfmap.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdfmap.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0218.899] GetLastError () returned 0x5 [0218.899] GetLastError () returned 0x5 [0218.899] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440870df, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440870df, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440870df, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x7c00, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="msdfmap.dll", cAlternateFileName="")) returned 0 [0218.899] FindClose (in: hFindFile=0x24ec00 | out: hFindFile=0x24ec00) returned 1 [0218.899] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234aa0 [0218.899] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0218.899] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2617f8 [0218.899] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0218.899] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\System\\msadc\\en-US\\*", lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d805e9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName=".", cAlternateFileName="")) returned 0x24eb80 [0218.900] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fc20 [0218.900] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0218.900] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0218.900] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d805e9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="..", cAlternateFileName="")) returned 1 [0218.900] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe00 [0218.900] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fc20 | out: hHeap=0x1f0000) returned 1 [0218.900] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0218.900] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0218.900] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b99489e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb198bf00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="msadcer.dll.mui", cAlternateFileName="")) returned 1 [0218.900] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0218.900] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21ffe0 [0218.900] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218558 [0218.900] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ffe0 | out: hHeap=0x1f0000) returned 1 [0218.900] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe00 | out: hHeap=0x1f0000) returned 1 [0218.900] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0218.901] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\msadc\\en-US\\msadcer.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msadcer.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0218.901] GetLastError () returned 0x5 [0218.901] GetLastError () returned 0x5 [0218.901] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b9e0d51, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb2c9ec00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="msadcor.dll.mui", cAlternateFileName="")) returned 1 [0218.901] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0218.901] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0218.901] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219478 [0218.902] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0218.902] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218558 | out: hHeap=0x1f0000) returned 1 [0218.902] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0218.902] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\msadc\\en-US\\msadcor.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msadcor.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0218.902] GetLastError () returned 0x5 [0218.902] GetLastError () returned 0x5 [0218.902] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ba9f918, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb198bf00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x3800, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="msaddsr.dll.mui", cAlternateFileName="")) returned 1 [0218.902] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0218.903] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0218.903] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x2188c8 [0218.903] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0218.903] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219478 | out: hHeap=0x1f0000) returned 1 [0218.903] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0218.903] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\msadc\\en-US\\msaddsr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msaddsr.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0218.903] GetLastError () returned 0x5 [0218.904] GetLastError () returned 0x5 [0218.904] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ba9f918, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb198bf00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="msdaprsr.dll.mui", cAlternateFileName="")) returned 1 [0218.904] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf70 [0218.904] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0218.904] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219478 [0218.904] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0218.904] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2188c8 | out: hHeap=0x1f0000) returned 1 [0218.904] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf70 | out: hHeap=0x1f0000) returned 1 [0218.905] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaprsr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msdaprsr.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0218.905] GetLastError () returned 0x5 [0218.905] GetLastError () returned 0x5 [0218.905] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb38282, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb198bf00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="msdaremr.dll.mui", cAlternateFileName="")) returned 1 [0218.905] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0218.905] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0218.905] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218d98 [0218.905] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0218.905] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219478 | out: hHeap=0x1f0000) returned 1 [0218.905] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0218.906] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaremr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msdaremr.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0218.906] GetLastError () returned 0x5 [0218.906] GetLastError () returned 0x5 [0218.906] FindNextFileW (in: hFindFile=0x24eb80, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb38282, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb198bf00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="msdaremr.dll.mui", cAlternateFileName="")) returned 0 [0218.906] FindClose (in: hFindFile=0x24eb80 | out: hFindFile=0x24eb80) returned 1 [0218.906] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218d98 | out: hHeap=0x1f0000) returned 1 [0218.907] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2617f8 | out: hHeap=0x1f0000) returned 1 [0218.907] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0218.907] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234aa0 | out: hHeap=0x1f0000) returned 1 [0218.907] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0218.907] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220490 | out: hHeap=0x1f0000) returned 1 [0218.907] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c30 | out: hHeap=0x1f0000) returned 1 [0218.907] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262cb0 | out: hHeap=0x1f0000) returned 1 [0218.907] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0218.907] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233df8 | out: hHeap=0x1f0000) returned 1 [0218.907] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233df8 [0218.907] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380f0 [0218.907] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262650 [0218.907] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235be0 [0218.907] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\System\\Ole DB\\*", lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d8186d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24e900 [0218.908] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235de8 [0218.908] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235be0 | out: hHeap=0x1f0000) returned 1 [0218.908] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0218.908] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d8186d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0218.908] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235be0 [0218.908] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235de8 | out: hHeap=0x1f0000) returned 1 [0218.908] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0218.908] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0218.908] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d8245b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="en-US", cAlternateFileName="")) returned 1 [0218.908] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235f20 [0218.908] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2218d0 [0218.908] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235f20 | out: hHeap=0x1f0000) returned 1 [0218.908] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235be0 | out: hHeap=0x1f0000) returned 1 [0218.908] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0218.908] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0218.908] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204d30 [0218.909] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe00 [0218.909] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440870df, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440870df, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440870df, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x18600, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="msdaosp.dll", cAlternateFileName="")) returned 1 [0218.909] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0218.909] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236058 [0218.909] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220cf0 [0218.909] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236058 | out: hHeap=0x1f0000) returned 1 [0218.909] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0218.909] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0218.910] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\Ole DB\\msdaosp.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdaosp.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0218.910] GetLastError () returned 0x5 [0218.910] GetLastError () returned 0x5 [0218.910] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440870df, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440870df, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440870df, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x5be00, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="msdaps.dll", cAlternateFileName="")) returned 1 [0218.910] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0218.910] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235970 [0218.910] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221670 [0218.910] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235970 | out: hHeap=0x1f0000) returned 1 [0218.910] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0218.910] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0218.911] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\Ole DB\\msdaps.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdaps.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0218.911] GetLastError () returned 0x5 [0218.911] GetLastError () returned 0x5 [0218.911] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41d0f4ea, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41d0f4ea, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41d0f4ea, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xaa800, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="msdasql.dll", cAlternateFileName="")) returned 1 [0218.911] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0218.911] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235de8 [0218.911] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221410 [0218.911] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235de8 | out: hHeap=0x1f0000) returned 1 [0218.912] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0218.912] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0218.912] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\Ole DB\\msdasql.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdasql.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0218.912] GetLastError () returned 0x5 [0218.913] GetLastError () returned 0x5 [0218.913] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41d0f4ea, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41d0f4ea, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41d0f4ea, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd600, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="msdasqlr.dll", cAlternateFileName="")) returned 1 [0218.913] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0218.913] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235f20 [0218.913] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221838 [0218.913] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235f20 | out: hHeap=0x1f0000) returned 1 [0218.913] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0218.913] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0218.913] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\Ole DB\\msdasqlr.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdasqlr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0218.914] GetLastError () returned 0x5 [0218.914] GetLastError () returned 0x5 [0218.914] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41d0f4ea, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41d0f4ea, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41d0f4ea, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1ca00, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="msdatl3.dll", cAlternateFileName="")) returned 1 [0218.914] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0218.914] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235be0 [0218.914] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221b30 [0218.914] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235be0 | out: hHeap=0x1f0000) returned 1 [0218.914] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0218.914] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0218.915] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\Ole DB\\msdatl3.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdatl3.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0218.915] GetLastError () returned 0x5 [0218.915] GetLastError () returned 0x5 [0218.915] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41d0f4ea, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41d0f4ea, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41d0f4ea, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="msxactps.dll", cAlternateFileName="")) returned 1 [0218.915] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0218.915] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235970 [0218.915] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2215d8 [0218.915] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235970 | out: hHeap=0x1f0000) returned 1 [0218.915] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0218.915] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0218.916] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\Ole DB\\msxactps.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msxactps.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0218.916] GetLastError () returned 0x5 [0218.916] GetLastError () returned 0x5 [0218.916] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41ce9283, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41ce9283, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41ce9283, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe6000, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="oledb32.dll", cAlternateFileName="")) returned 1 [0218.916] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0218.916] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236058 [0218.916] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220e20 [0218.917] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236058 | out: hHeap=0x1f0000) returned 1 [0218.917] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0218.917] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0218.917] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\Ole DB\\oledb32.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\oledb32.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0218.918] GetLastError () returned 0x5 [0218.918] GetLastError () returned 0x5 [0218.918] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41ce9283, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41ce9283, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41ce9283, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x13000, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="oledb32r.dll", cAlternateFileName="")) returned 1 [0218.918] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0218.918] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235cb0 [0218.918] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2212e0 [0218.918] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235cb0 | out: hHeap=0x1f0000) returned 1 [0218.918] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0218.918] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0218.919] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\Ole DB\\oledb32r.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\oledb32r.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0218.919] GetLastError () returned 0x5 [0218.919] GetLastError () returned 0x5 [0218.919] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41ce9283, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41ce9283, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41ce9283, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x264c, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="oledbjvs.inc", cAlternateFileName="")) returned 1 [0218.919] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0218.920] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235970 [0218.920] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221968 [0218.920] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235970 | out: hHeap=0x1f0000) returned 1 [0218.920] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0218.920] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0218.920] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\Ole DB\\oledbjvs.inc" (normalized: "c:\\program files\\common files\\system\\ole db\\oledbjvs.inc"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0218.921] GetLastError () returned 0x5 [0218.921] GetLastError () returned 0x5 [0218.921] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41cc3017, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41cc3017, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41cc3017, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x26f7, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="oledbvbs.inc", cAlternateFileName="")) returned 1 [0218.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0218.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235be0 [0218.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221838 [0218.921] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235be0 | out: hHeap=0x1f0000) returned 1 [0218.922] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0218.922] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0218.922] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\Ole DB\\oledbvbs.inc" (normalized: "c:\\program files\\common files\\system\\ole db\\oledbvbs.inc"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0218.922] GetLastError () returned 0x5 [0218.923] GetLastError () returned 0x5 [0218.923] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43c80ffc, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43c80ffc, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43c80ffc, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd4000, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="sqloledb.dll", cAlternateFileName="")) returned 1 [0218.923] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0218.923] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235cb0 [0218.923] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221248 [0218.923] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235cb0 | out: hHeap=0x1f0000) returned 1 [0218.923] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0218.923] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0218.924] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\Ole DB\\sqloledb.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqloledb.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0218.924] GetLastError () returned 0x5 [0218.924] GetLastError () returned 0x5 [0218.924] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43c80ffc, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43c80ffc, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43c80ffc, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="sqloledb.rll", cAlternateFileName="")) returned 1 [0218.925] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0218.925] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235970 [0218.925] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2218d0 [0218.925] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235970 | out: hHeap=0x1f0000) returned 1 [0218.925] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0218.925] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0218.926] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\Ole DB\\sqloledb.rll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqloledb.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0218.926] GetLastError () returned 0x5 [0218.926] GetLastError () returned 0x5 [0218.926] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43854cb5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43854cb5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43854cb5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x4fa00, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="sqlxmlx.dll", cAlternateFileName="")) returned 1 [0218.926] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0218.926] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235970 [0218.926] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2214a8 [0218.926] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235970 | out: hHeap=0x1f0000) returned 1 [0218.927] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0218.927] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0218.927] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\Ole DB\\sqlxmlx.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqlxmlx.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.178] GetLastError () returned 0x5 [0219.178] GetLastError () returned 0x5 [0219.178] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43854cb5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43854cb5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43854cb5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="sqlxmlx.rll", cAlternateFileName="")) returned 1 [0219.178] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0219.178] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235be0 [0219.178] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220f50 [0219.178] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235be0 | out: hHeap=0x1f0000) returned 1 [0219.178] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0219.178] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0219.178] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\Ole DB\\sqlxmlx.rll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqlxmlx.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.178] GetLastError () returned 0x5 [0219.178] GetLastError () returned 0x5 [0219.178] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43854cb5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43854cb5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43854cb5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="sqlxmlx.rll", cAlternateFileName="")) returned 0 [0219.178] FindClose (in: hFindFile=0x24e900 | out: hFindFile=0x24e900) returned 1 [0219.179] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2347d0 [0219.179] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0219.179] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2627e8 [0219.179] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fef0 [0219.179] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\System\\Ole DB\\en-US\\*", lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d8245b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName=".", cAlternateFileName="")) returned 0x24e980 [0219.179] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2201c0 [0219.179] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fef0 | out: hHeap=0x1f0000) returned 1 [0219.179] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0219.179] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d8245b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="..", cAlternateFileName="")) returned 1 [0219.179] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0219.179] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2201c0 | out: hHeap=0x1f0000) returned 1 [0219.179] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0219.179] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0219.179] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb38282, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb3fb1900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="msdasqlr.dll.mui", cAlternateFileName="")) returned 1 [0219.179] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0219.179] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0219.179] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218fa8 [0219.179] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0219.179] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0219.179] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0219.180] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\Ole DB\\en-US\\msdasqlr.dll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\msdasqlr.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.180] GetLastError () returned 0x5 [0219.180] GetLastError () returned 0x5 [0219.180] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b9e0d51, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb3fb1900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xbc00, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="oledb32r.dll.mui", cAlternateFileName="")) returned 1 [0219.180] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf70 [0219.180] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fab8 [0219.180] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218b88 [0219.180] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fab8 | out: hHeap=0x1f0000) returned 1 [0219.180] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218fa8 | out: hHeap=0x1f0000) returned 1 [0219.180] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf70 | out: hHeap=0x1f0000) returned 1 [0219.180] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\Ole DB\\en-US\\oledb32r.dll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\oledb32r.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.180] GetLastError () returned 0x5 [0219.181] GetLastError () returned 0x5 [0219.181] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb38282, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb3fb1900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xac00, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="sqloledb.rll.mui", cAlternateFileName="")) returned 1 [0219.181] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0219.181] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fb30 [0219.181] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218fa8 [0219.181] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fb30 | out: hHeap=0x1f0000) returned 1 [0219.181] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218b88 | out: hHeap=0x1f0000) returned 1 [0219.181] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0219.181] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\Ole DB\\en-US\\sqloledb.rll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\sqloledb.rll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.181] GetLastError () returned 0x5 [0219.181] GetLastError () returned 0x5 [0219.181] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ba9f918, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb65d7300, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="sqlxmlx.rll.mui", cAlternateFileName="")) returned 1 [0219.181] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0219.182] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0219.182] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ef8 [0219.182] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0219.182] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218fa8 | out: hHeap=0x1f0000) returned 1 [0219.182] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0219.182] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\Ole DB\\en-US\\sqlxmlx.rll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\sqlxmlx.rll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.182] GetLastError () returned 0x5 [0219.182] GetLastError () returned 0x5 [0219.182] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ba9f918, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb65d7300, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="sqlxmlx.rll.mui", cAlternateFileName="")) returned 0 [0219.182] FindClose (in: hFindFile=0x24e980 | out: hFindFile=0x24e980) returned 1 [0219.183] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ef8 | out: hHeap=0x1f0000) returned 1 [0219.183] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2627e8 | out: hHeap=0x1f0000) returned 1 [0219.183] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0219.183] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2347d0 | out: hHeap=0x1f0000) returned 1 [0219.183] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0219.183] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe00 | out: hHeap=0x1f0000) returned 1 [0219.183] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d30 | out: hHeap=0x1f0000) returned 1 [0219.183] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262650 | out: hHeap=0x1f0000) returned 1 [0219.183] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380f0 | out: hHeap=0x1f0000) returned 1 [0219.183] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233df8 | out: hHeap=0x1f0000) returned 1 [0219.183] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218250 | out: hHeap=0x1f0000) returned 1 [0219.183] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235aa8 | out: hHeap=0x1f0000) returned 1 [0219.183] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0219.183] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236190 | out: hHeap=0x1f0000) returned 1 [0219.184] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2359d8 | out: hHeap=0x1f0000) returned 1 [0219.184] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235838 | out: hHeap=0x1f0000) returned 1 [0219.184] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2634a8 | out: hHeap=0x1f0000) returned 1 [0219.184] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0219.184] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234110 | out: hHeap=0x1f0000) returned 1 [0219.184] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214af8 | out: hHeap=0x1f0000) returned 1 [0219.184] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22bb50 | out: hHeap=0x1f0000) returned 1 [0219.184] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a90 | out: hHeap=0x1f0000) returned 1 [0219.184] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22bba8 | out: hHeap=0x1f0000) returned 1 [0219.184] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22bc00 | out: hHeap=0x1f0000) returned 1 [0219.184] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214b60 | out: hHeap=0x1f0000) returned 1 [0219.184] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f1b8 | out: hHeap=0x1f0000) returned 1 [0219.184] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b30 | out: hHeap=0x1f0000) returned 1 [0219.184] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233c00 | out: hHeap=0x1f0000) returned 1 [0219.184] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233df8 [0219.184] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380f0 [0219.184] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2617f8 [0219.184] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22bba8 [0219.185] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Internet Explorer\\*", lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfbf3a0e6, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xfbf3a0e6, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24ec40 [0219.185] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22bb50 [0219.185] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22bba8 | out: hHeap=0x1f0000) returned 1 [0219.185] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0219.185] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfbf3a0e6, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xfbf3a0e6, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0219.185] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22bba8 [0219.185] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22bb50 | out: hHeap=0x1f0000) returned 1 [0219.185] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0219.185] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0219.185] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d83d92, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa21685bc, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="en-US", cAlternateFileName="")) returned 1 [0219.185] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22bb50 [0219.185] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217850 [0219.185] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22bb50 | out: hHeap=0x1f0000) returned 1 [0219.185] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22bba8 | out: hHeap=0x1f0000) returned 1 [0219.185] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0219.185] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0219.185] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204e50 [0219.185] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2357d0 [0219.185] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a4ec31b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a4ec31b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a4ec31b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd000, dwReserved0=0x0, dwReserved1=0x3, cFileName="ExtExport.exe", cAlternateFileName="")) returned 1 [0219.186] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0219.186] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22bb50 [0219.186] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217bd0 [0219.186] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22bb50 | out: hHeap=0x1f0000) returned 1 [0219.186] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217850 | out: hHeap=0x1f0000) returned 1 [0219.186] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0219.186] CreateFileW (lpFileName="C:\\\\Program Files\\Internet Explorer\\ExtExport.exe" (normalized: "c:\\program files\\internet explorer\\extexport.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.186] GetLastError () returned 0x5 [0219.186] GetLastError () returned 0x5 [0219.186] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a9b1003, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a9b1003, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a9b1003, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd400, dwReserved0=0x0, dwReserved1=0x3, cFileName="hmmapi.dll", cAlternateFileName="")) returned 1 [0219.186] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0219.186] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22bb50 [0219.186] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217ad0 [0219.186] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22bb50 | out: hHeap=0x1f0000) returned 1 [0219.187] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217bd0 | out: hHeap=0x1f0000) returned 1 [0219.187] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0219.187] CreateFileW (lpFileName="C:\\\\Program Files\\Internet Explorer\\hmmapi.dll" (normalized: "c:\\program files\\internet explorer\\hmmapi.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.187] GetLastError () returned 0x5 [0219.187] GetLastError () returned 0x5 [0219.187] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a49fe45, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a49fe45, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a49fe45, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x7d000, dwReserved0=0x0, dwReserved1=0x3, cFileName="iediagcmd.exe", cAlternateFileName="")) returned 1 [0219.187] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0219.187] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22bb50 [0219.187] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217bd0 [0219.187] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22bb50 | out: hHeap=0x1f0000) returned 1 [0219.187] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217ad0 | out: hHeap=0x1f0000) returned 1 [0219.187] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0219.188] CreateFileW (lpFileName="C:\\\\Program Files\\Internet Explorer\\iediagcmd.exe" (normalized: "c:\\program files\\internet explorer\\iediagcmd.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.188] GetLastError () returned 0x5 [0219.188] GetLastError () returned 0x5 [0219.188] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a70c9a1, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xbc534b5e, ftLastAccessTime.dwHighDateTime=0x1d2fa09, ftLastWriteTime.dwLowDateTime=0x4a70c9a1, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x7a800, dwReserved0=0x0, dwReserved1=0x3, cFileName="ieinstal.exe", cAlternateFileName="")) returned 1 [0219.188] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0219.188] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22bb50 [0219.188] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217f50 [0219.188] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22bb50 | out: hHeap=0x1f0000) returned 1 [0219.188] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217bd0 | out: hHeap=0x1f0000) returned 1 [0219.188] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0219.189] CreateFileW (lpFileName="C:\\\\Program Files\\Internet Explorer\\ieinstal.exe" (normalized: "c:\\program files\\internet explorer\\ieinstal.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.189] GetLastError () returned 0x5 [0219.189] GetLastError () returned 0x5 [0219.189] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a49fe45, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a49fe45, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a49fe45, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x36c00, dwReserved0=0x0, dwReserved1=0x3, cFileName="ielowutil.exe", cAlternateFileName="")) returned 1 [0219.189] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0219.189] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22bb50 [0219.189] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217b50 [0219.189] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22bb50 | out: hHeap=0x1f0000) returned 1 [0219.189] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217f50 | out: hHeap=0x1f0000) returned 1 [0219.189] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0219.189] CreateFileW (lpFileName="C:\\\\Program Files\\Internet Explorer\\ielowutil.exe" (normalized: "c:\\program files\\internet explorer\\ielowutil.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.189] GetLastError () returned 0x5 [0219.190] GetLastError () returned 0x5 [0219.190] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a49fe45, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a49fe45, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a4c60b4, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x63800, dwReserved0=0x0, dwReserved1=0x3, cFileName="IEShims.dll", cAlternateFileName="")) returned 1 [0219.190] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0219.190] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22bb50 [0219.190] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x2178d0 [0219.190] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22bb50 | out: hHeap=0x1f0000) returned 1 [0219.190] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217b50 | out: hHeap=0x1f0000) returned 1 [0219.190] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0219.190] CreateFileW (lpFileName="C:\\\\Program Files\\Internet Explorer\\IEShims.dll" (normalized: "c:\\program files\\internet explorer\\ieshims.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.190] GetLastError () returned 0x5 [0219.190] GetLastError () returned 0x5 [0219.191] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa182b3a4, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa1c0b0e4, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x8ca44c00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xc9340, dwReserved0=0x0, dwReserved1=0x3, cFileName="iexplore.exe", cAlternateFileName="")) returned 1 [0219.191] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238488 [0219.191] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22bb50 [0219.191] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x2182d0 [0219.191] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22bb50 | out: hHeap=0x1f0000) returned 1 [0219.191] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2178d0 | out: hHeap=0x1f0000) returned 1 [0219.191] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238488 | out: hHeap=0x1f0000) returned 1 [0219.191] CreateFileW (lpFileName="C:\\\\Program Files\\Internet Explorer\\iexplore.exe" (normalized: "c:\\program files\\internet explorer\\iexplore.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.191] GetLastError () returned 0x5 [0219.191] GetLastError () returned 0x5 [0219.191] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d846d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a485593, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="images", cAlternateFileName="")) returned 1 [0219.191] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22bb50 [0219.191] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x2181d0 [0219.191] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22bb50 | out: hHeap=0x1f0000) returned 1 [0219.191] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2182d0 | out: hHeap=0x1f0000) returned 1 [0219.192] lstrcmpW (lpString1="images", lpString2=".") returned 1 [0219.192] lstrcmpW (lpString1="images", lpString2="..") returned 1 [0219.192] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0219.192] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235d80 [0219.192] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e50 | out: hHeap=0x1f0000) returned 1 [0219.192] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18998f0, ftCreationTime.dwHighDateTime=0x1d5a06a, ftLastAccessTime.dwLowDateTime=0x9edacdc0, ftLastAccessTime.dwHighDateTime=0x1d54126, ftLastWriteTime.dwLowDateTime=0x9edacdc0, ftLastWriteTime.dwHighDateTime=0x1d54126, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x3, cFileName="leechftp.exe", cAlternateFileName="")) returned 1 [0219.192] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0219.192] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22bb50 [0219.192] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x2178d0 [0219.192] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22bb50 | out: hHeap=0x1f0000) returned 1 [0219.192] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2181d0 | out: hHeap=0x1f0000) returned 1 [0219.192] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0219.192] CreateFileW (lpFileName="C:\\\\Program Files\\Internet Explorer\\leechftp.exe" (normalized: "c:\\program files\\internet explorer\\leechftp.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.193] GetLastError () returned 0x20 [0219.193] GetLastError () returned 0x20 [0219.193] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2132d, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb77a1634, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb77a1634, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="SIGNUP", cAlternateFileName="")) returned 1 [0219.193] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22bb50 [0219.193] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x2183d0 [0219.193] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22bb50 | out: hHeap=0x1f0000) returned 1 [0219.194] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2178d0 | out: hHeap=0x1f0000) returned 1 [0219.194] lstrcmpW (lpString1="SIGNUP", lpString2=".") returned 1 [0219.194] lstrcmpW (lpString1="SIGNUP", lpString2="..") returned 1 [0219.194] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x48) returned 0x225dd8 [0219.194] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235e50 [0219.194] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0219.194] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a9b1003, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a9b1003, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a9b1003, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc218, dwReserved0=0x0, dwReserved1=0x3, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1 [0219.194] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0219.194] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22bb50 [0219.194] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217bd0 [0219.195] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22bb50 | out: hHeap=0x1f0000) returned 1 [0219.195] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2183d0 | out: hHeap=0x1f0000) returned 1 [0219.195] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0219.195] CreateFileW (lpFileName="C:\\\\Program Files\\Internet Explorer\\sqmapi.dll" (normalized: "c:\\program files\\internet explorer\\sqmapi.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.195] GetLastError () returned 0x5 [0219.195] GetLastError () returned 0x5 [0219.195] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a9b1003, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a9b1003, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a9b1003, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc218, dwReserved0=0x0, dwReserved1=0x3, cFileName="sqmapi.dll", cAlternateFileName="")) returned 0 [0219.195] FindClose (in: hFindFile=0x24ec40 | out: hFindFile=0x24ec40) returned 1 [0219.196] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234110 [0219.196] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0219.196] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262650 [0219.196] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235eb8 [0219.196] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Internet Explorer\\en-US\\*", lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d83d92, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa21685bc, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName=".", cAlternateFileName="")) returned 0x24ed00 [0219.196] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236190 [0219.196] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235eb8 | out: hHeap=0x1f0000) returned 1 [0219.196] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0219.196] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d83d92, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa21685bc, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="..", cAlternateFileName="")) returned 1 [0219.196] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235eb8 [0219.196] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236190 | out: hHeap=0x1f0000) returned 1 [0219.197] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0219.197] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0219.197] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b2dfe94, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x68e10600, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="hmmapi.dll.mui", cAlternateFileName="")) returned 1 [0219.197] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0219.197] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236058 [0219.197] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220fe8 [0219.197] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236058 | out: hHeap=0x1f0000) returned 1 [0219.197] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235eb8 | out: hHeap=0x1f0000) returned 1 [0219.197] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0219.198] CreateFileW (lpFileName="C:\\\\Program Files\\Internet Explorer\\en-US\\hmmapi.dll.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\hmmapi.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be73c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.198] GetLastError () returned 0x5 [0219.198] GetLastError () returned 0x5 [0219.198] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b3c4cb5, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x75fdf500, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="ieinstal.exe.mui", cAlternateFileName="")) returned 1 [0219.198] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0219.198] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235700 [0219.198] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2217a0 [0219.198] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0219.198] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0219.198] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0219.199] CreateFileW (lpFileName="C:\\\\Program Files\\Internet Explorer\\en-US\\ieinstal.exe.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\ieinstal.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be73c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.199] GetLastError () returned 0x5 [0219.199] GetLastError () returned 0x5 [0219.199] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b2212c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x74ccc800, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="iexplore.exe.mui", cAlternateFileName="")) returned 1 [0219.199] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0219.199] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236058 [0219.199] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221248 [0219.199] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236058 | out: hHeap=0x1f0000) returned 1 [0219.199] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0219.199] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0219.200] CreateFileW (lpFileName="C:\\\\Program Files\\Internet Explorer\\en-US\\iexplore.exe.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\iexplore.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be73c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.200] GetLastError () returned 0x5 [0219.200] GetLastError () returned 0x5 [0219.200] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b2212c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x74ccc800, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="iexplore.exe.mui", cAlternateFileName="")) returned 0 [0219.200] FindClose (in: hFindFile=0x24ed00 | out: hFindFile=0x24ed00) returned 1 [0219.201] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0219.201] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262650 | out: hHeap=0x1f0000) returned 1 [0219.201] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0219.201] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234110 | out: hHeap=0x1f0000) returned 1 [0219.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233c00 [0219.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0219.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2634a8 [0219.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235eb8 [0219.201] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Internet Explorer\\images\\*", lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d846d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a485593, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName=".", cAlternateFileName="")) returned 0x24e6c0 [0219.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236058 [0219.201] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235eb8 | out: hHeap=0x1f0000) returned 1 [0219.201] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0219.201] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d846d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a485593, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="..", cAlternateFileName="")) returned 1 [0219.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235eb8 [0219.202] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236058 | out: hHeap=0x1f0000) returned 1 [0219.202] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0219.202] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0219.202] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a55ea4d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a55ea4d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a55ea4d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1536, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="bing.ico", cAlternateFileName="")) returned 1 [0219.202] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0219.202] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235700 [0219.202] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220c58 [0219.202] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0219.202] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235eb8 | out: hHeap=0x1f0000) returned 1 [0219.202] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0219.203] CreateFileW (lpFileName="C:\\\\Program Files\\Internet Explorer\\images\\bing.ico" (normalized: "c:\\program files\\internet explorer\\images\\bing.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be73c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.203] GetLastError () returned 0x5 [0219.203] GetLastError () returned 0x5 [0219.203] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a55ea4d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a55ea4d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a55ea4d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1536, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="bing.ico", cAlternateFileName="")) returned 0 [0219.203] FindClose (in: hFindFile=0x24e6c0 | out: hFindFile=0x24e6c0) returned 1 [0219.203] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0219.203] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2634a8 | out: hHeap=0x1f0000) returned 1 [0219.203] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0219.204] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233c00 | out: hHeap=0x1f0000) returned 1 [0219.204] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233c90 [0219.204] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0219.204] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2627e8 [0219.204] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2359d8 [0219.204] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Internet Explorer\\SIGNUP\\*", lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2132d, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb77a1634, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb77a1634, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName=".", cAlternateFileName="")) returned 0x24e6c0 [0219.204] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235be0 [0219.204] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2359d8 | out: hHeap=0x1f0000) returned 1 [0219.204] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0219.204] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2132d, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb77a1634, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb77a1634, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="..", cAlternateFileName="")) returned 1 [0219.204] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235700 [0219.205] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235be0 | out: hHeap=0x1f0000) returned 1 [0219.205] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0219.205] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0219.205] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30c952e, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x970b4468, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x970b4468, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1c4, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="install.ins", cAlternateFileName="")) returned 1 [0219.205] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0219.205] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235eb8 [0219.205] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220eb8 [0219.205] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235eb8 | out: hHeap=0x1f0000) returned 1 [0219.205] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0219.205] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0219.206] CreateFileW (lpFileName="C:\\\\Program Files\\Internet Explorer\\SIGNUP\\install.ins" (normalized: "c:\\program files\\internet explorer\\signup\\install.ins"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be73c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x238 [0219.206] GetFileType (hFile=0x238) returned 0x1 [0219.206] CloseHandle (hObject=0x238) returned 1 [0219.206] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fc98 [0219.206] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Internet Explorer\\SIGNUP\\install.ins" (normalized: "c:\\program files\\internet explorer\\signup\\install.ins"), fInfoLevelId=0x0, lpFileInformation=0x22be7dc | out: lpFileInformation=0x22be7dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30c952e, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x970b4468, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x970b4468, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1c4)) returned 1 [0219.207] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fc98 | out: hHeap=0x1f0000) returned 1 [0219.207] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe00 [0219.207] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe00 | out: hHeap=0x1f0000) returned 1 [0219.207] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30c952e, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x970b4468, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x970b4468, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1c4, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="install.ins", cAlternateFileName="")) returned 0 [0219.207] FindClose (in: hFindFile=0x24e6c0 | out: hFindFile=0x24e6c0) returned 1 [0219.207] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0219.207] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2627e8 | out: hHeap=0x1f0000) returned 1 [0219.207] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0219.207] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233c90 | out: hHeap=0x1f0000) returned 1 [0219.207] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217bd0 | out: hHeap=0x1f0000) returned 1 [0219.207] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2357d0 | out: hHeap=0x1f0000) returned 1 [0219.207] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235d80 | out: hHeap=0x1f0000) returned 1 [0219.208] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235e50 | out: hHeap=0x1f0000) returned 1 [0219.208] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225dd8 | out: hHeap=0x1f0000) returned 1 [0219.208] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2617f8 | out: hHeap=0x1f0000) returned 1 [0219.208] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380f0 | out: hHeap=0x1f0000) returned 1 [0219.208] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233df8 | out: hHeap=0x1f0000) returned 1 [0219.208] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234110 [0219.208] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380f0 [0219.208] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x261ff0 [0219.208] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233c00 [0219.208] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Java\\*", lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xfc0fdd55, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xfc0fdd55, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24ec00 [0219.208] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0219.208] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x226148 [0219.208] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0219.208] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233c00 | out: hHeap=0x1f0000) returned 1 [0219.208] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0219.209] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xfc0fdd55, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xfc0fdd55, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0219.291] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0219.291] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x226238 [0219.291] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0219.292] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226148 | out: hHeap=0x1f0000) returned 1 [0219.292] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0219.292] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0219.292] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe863e770, ftCreationTime.dwHighDateTime=0x1d5bbaf, ftLastAccessTime.dwLowDateTime=0xdf5500e0, ftLastAccessTime.dwHighDateTime=0x1d543b1, ftLastWriteTime.dwLowDateTime=0xdf5500e0, ftLastWriteTime.dwHighDateTime=0x1d543b1, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x3, cFileName="fling.exe", cAlternateFileName="")) returned 1 [0219.292] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0219.292] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0219.292] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22bb50 [0219.292] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0219.292] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226238 | out: hHeap=0x1f0000) returned 1 [0219.293] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0219.293] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\fling.exe" (normalized: "c:\\program files\\java\\fling.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.294] GetLastError () returned 0x20 [0219.294] GetLastError () returned 0x20 [0219.294] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0de2f82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xafba0b05, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="jre1.8.0_144", cAlternateFileName="JRE18~1.0_1")) returned 1 [0219.294] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0219.294] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0219.294] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22bba8 [0219.294] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0219.295] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22bb50 | out: hHeap=0x1f0000) returned 1 [0219.295] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0219.295] lstrcmpW (lpString1="jre1.8.0_144", lpString2=".") returned 1 [0219.295] lstrcmpW (lpString1="jre1.8.0_144", lpString2="..") returned 1 [0219.295] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204cd0 [0219.295] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22bb50 [0219.295] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd40ccbe0, ftCreationTime.dwHighDateTime=0x1d5b441, ftLastAccessTime.dwLowDateTime=0x1d073180, ftLastAccessTime.dwHighDateTime=0x1d5785d, ftLastWriteTime.dwLowDateTime=0x1d073180, ftLastWriteTime.dwHighDateTime=0x1d5785d, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x3, cFileName="spcwin.exe", cAlternateFileName="")) returned 1 [0219.295] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238438 [0219.295] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0219.295] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22bc00 [0219.295] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0219.296] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22bba8 | out: hHeap=0x1f0000) returned 1 [0219.296] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238438 | out: hHeap=0x1f0000) returned 1 [0219.296] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\spcwin.exe" (normalized: "c:\\program files\\java\\spcwin.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.296] GetLastError () returned 0x20 [0219.296] GetLastError () returned 0x20 [0219.297] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6e87e20, ftCreationTime.dwHighDateTime=0x1d5c516, ftLastAccessTime.dwLowDateTime=0xe9906d70, ftLastAccessTime.dwHighDateTime=0x1d5b1d3, ftLastWriteTime.dwLowDateTime=0xe9906d70, ftLastWriteTime.dwHighDateTime=0x1d5b1d3, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x3, cFileName="whatsapp.exe", cAlternateFileName="")) returned 1 [0219.297] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0219.297] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0219.297] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22bba8 [0219.297] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0219.297] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22bc00 | out: hHeap=0x1f0000) returned 1 [0219.297] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0219.298] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\whatsapp.exe" (normalized: "c:\\program files\\java\\whatsapp.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.298] GetLastError () returned 0x20 [0219.298] GetLastError () returned 0x20 [0219.298] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd80b1130, ftCreationTime.dwHighDateTime=0x1d53dd5, ftLastAccessTime.dwLowDateTime=0x7a6c97a0, ftLastAccessTime.dwHighDateTime=0x1d56068, ftLastWriteTime.dwLowDateTime=0x7a6c97a0, ftLastWriteTime.dwHighDateTime=0x1d56068, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x3, cFileName="winscp.exe", cAlternateFileName="")) returned 1 [0219.298] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238488 [0219.298] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0219.299] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22bc00 [0219.299] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0219.299] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22bba8 | out: hHeap=0x1f0000) returned 1 [0219.299] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238488 | out: hHeap=0x1f0000) returned 1 [0219.299] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\winscp.exe" (normalized: "c:\\program files\\java\\winscp.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.300] GetLastError () returned 0x20 [0219.300] GetLastError () returned 0x20 [0219.300] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd80b1130, ftCreationTime.dwHighDateTime=0x1d53dd5, ftLastAccessTime.dwLowDateTime=0x7a6c97a0, ftLastAccessTime.dwHighDateTime=0x1d56068, ftLastWriteTime.dwLowDateTime=0x7a6c97a0, ftLastWriteTime.dwHighDateTime=0x1d56068, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x3, cFileName="winscp.exe", cAlternateFileName="")) returned 0 [0219.300] FindClose (in: hFindFile=0x24ec00 | out: hFindFile=0x24ec00) returned 1 [0219.300] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233c00 [0219.301] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0219.301] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262650 [0219.301] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22bba8 [0219.301] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\*", lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0de2f82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xafba0b05, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000043, cFileName=".", cAlternateFileName="")) returned 0x24e5c0 [0219.301] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c8b8 [0219.301] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22bba8 | out: hHeap=0x1f0000) returned 1 [0219.301] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0219.301] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0de2f82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xafba0b05, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000043, cFileName="..", cAlternateFileName="")) returned 1 [0219.301] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22bba8 [0219.301] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0219.302] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0219.302] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0219.302] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0eaff93, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000043, cFileName="bin", cAlternateFileName="")) returned 1 [0219.302] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c8b8 [0219.302] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22bba8 | out: hHeap=0x1f0000) returned 1 [0219.302] lstrcmpW (lpString1="bin", lpString2=".") returned 1 [0219.302] lstrcmpW (lpString1="bin", lpString2="..") returned 1 [0219.302] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204e50 [0219.302] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8e20 [0219.584] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xcac, dwReserved0=0x0, dwReserved1=0xc0000043, cFileName="COPYRIGHT", cAlternateFileName="COPYRI~1")) returned 1 [0219.584] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0219.584] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8bb8 [0219.584] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217bd0 [0219.584] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8bb8 | out: hHeap=0x1f0000) returned 1 [0219.584] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0219.584] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0219.585] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT" (normalized: "c:\\program files\\java\\jre1.8.0_144\\copyright"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be73c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0219.585] GetFileType (hFile=0x224) returned 0x1 [0219.586] CloseHandle (hObject=0x224) returned 1 [0219.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235f20 [0219.586] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT" (normalized: "c:\\program files\\java\\jre1.8.0_144\\copyright"), fInfoLevelId=0x0, lpFileInformation=0x22be7dc | out: lpFileInformation=0x22be7dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xcac)) returned 1 [0219.586] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235f20 | out: hHeap=0x1f0000) returned 1 [0219.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235700 [0219.586] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0219.586] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe1f09, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xaa80821a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000043, cFileName="lib", cAlternateFileName="")) returned 1 [0219.587] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8cc0 [0219.587] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217bd0 | out: hHeap=0x1f0000) returned 1 [0219.587] lstrcmpW (lpString1="lib", lpString2=".") returned 1 [0219.587] lstrcmpW (lpString1="lib", lpString2="..") returned 1 [0219.587] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1ff058 [0219.587] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8d18 [0219.587] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e50 | out: hHeap=0x1f0000) returned 1 [0219.587] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x0, dwReserved1=0xc0000043, cFileName="LICENSE", cAlternateFileName="")) returned 1 [0219.587] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8b60 [0219.587] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217b50 [0219.588] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8b60 | out: hHeap=0x1f0000) returned 1 [0219.588] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8cc0 | out: hHeap=0x1f0000) returned 1 [0219.588] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\LICENSE" (normalized: "c:\\program files\\java\\jre1.8.0_144\\license"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be73c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0219.588] GetFileType (hFile=0x224) returned 0x1 [0219.589] CloseHandle (hObject=0x224) returned 1 [0219.589] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235970 [0219.589] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\LICENSE" (normalized: "c:\\program files\\java\\jre1.8.0_144\\license"), fInfoLevelId=0x0, lpFileInformation=0x22be7dc | out: lpFileInformation=0x22be7dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x28)) returned 1 [0219.589] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235970 | out: hHeap=0x1f0000) returned 1 [0219.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235d80 [0219.590] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235d80 | out: hHeap=0x1f0000) returned 1 [0219.590] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2e, dwReserved0=0x0, dwReserved1=0xc0000043, cFileName="README.txt", cAlternateFileName="")) returned 1 [0219.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0219.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8c68 [0219.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217fd0 [0219.590] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8c68 | out: hHeap=0x1f0000) returned 1 [0219.590] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217b50 | out: hHeap=0x1f0000) returned 1 [0219.590] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0219.591] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\README.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\readme.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be73c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0219.591] GetFileType (hFile=0x224) returned 0x1 [0219.592] CloseHandle (hObject=0x224) returned 1 [0219.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235c48 [0219.592] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\README.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\readme.txt"), fInfoLevelId=0x0, lpFileInformation=0x22be7dc | out: lpFileInformation=0x22be7dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2e)) returned 1 [0219.593] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235c48 | out: hHeap=0x1f0000) returned 1 [0219.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235d80 [0219.593] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235d80 | out: hHeap=0x1f0000) returned 1 [0219.593] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x210, dwReserved0=0x0, dwReserved1=0xc0000043, cFileName="release", cAlternateFileName="")) returned 1 [0219.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8e78 [0219.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217650 [0219.593] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8e78 | out: hHeap=0x1f0000) returned 1 [0219.593] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217fd0 | out: hHeap=0x1f0000) returned 1 [0219.594] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\release" (normalized: "c:\\program files\\java\\jre1.8.0_144\\release"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be73c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0219.594] GetFileType (hFile=0x224) returned 0x1 [0219.595] CloseHandle (hObject=0x224) returned 1 [0219.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235d80 [0219.595] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\release" (normalized: "c:\\program files\\java\\jre1.8.0_144\\release"), fInfoLevelId=0x0, lpFileInformation=0x22be7dc | out: lpFileInformation=0x22be7dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x210)) returned 1 [0219.595] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235d80 | out: hHeap=0x1f0000) returned 1 [0219.596] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236058 [0219.596] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236058 | out: hHeap=0x1f0000) returned 1 [0219.596] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf9bd, dwReserved0=0x0, dwReserved1=0xc0000043, cFileName="THIRDPARTYLICENSEREADME-JAVAFX.txt", cAlternateFileName="THIRDP~1.TXT")) returned 1 [0219.596] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8ed0 [0219.596] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8b60 [0219.596] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0219.596] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8b60 | out: hHeap=0x1f0000) returned 1 [0219.596] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217650 | out: hHeap=0x1f0000) returned 1 [0219.596] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8ed0 | out: hHeap=0x1f0000) returned 1 [0219.597] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme-javafx.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be73c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0219.597] GetFileType (hFile=0x224) returned 0x1 [0219.598] CloseHandle (hObject=0x224) returned 1 [0219.598] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0219.598] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme-javafx.txt"), fInfoLevelId=0x0, lpFileInformation=0x22be7dc | out: lpFileInformation=0x22be7dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf9bd)) returned 1 [0219.598] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0219.598] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0219.599] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0219.599] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2371c, dwReserved0=0x0, dwReserved1=0xc0000043, cFileName="THIRDPARTYLICENSEREADME.txt", cAlternateFileName="THIRDP~2.TXT")) returned 1 [0219.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2344b8 [0219.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8c10 [0219.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213790 [0219.599] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8c10 | out: hHeap=0x1f0000) returned 1 [0219.599] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0219.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2344b8 | out: hHeap=0x1f0000) returned 1 [0219.600] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be73c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0219.600] GetFileType (hFile=0x224) returned 0x1 [0219.601] CloseHandle (hObject=0x224) returned 1 [0219.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0219.601] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme.txt"), fInfoLevelId=0x0, lpFileInformation=0x22be7dc | out: lpFileInformation=0x22be7dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2371c)) returned 1 [0219.601] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0219.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0219.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0219.602] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3bb, dwReserved0=0x0, dwReserved1=0xc0000043, cFileName="Welcome.html", cAlternateFileName="WELCOM~1.HTM")) returned 1 [0219.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0219.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8e78 [0219.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x218450 [0219.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8e78 | out: hHeap=0x1f0000) returned 1 [0219.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213790 | out: hHeap=0x1f0000) returned 1 [0219.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0219.603] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\Welcome.html" (normalized: "c:\\program files\\java\\jre1.8.0_144\\welcome.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be73c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0219.603] GetFileType (hFile=0x224) returned 0x1 [0219.603] CloseHandle (hObject=0x224) returned 1 [0219.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0219.604] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\Welcome.html" (normalized: "c:\\program files\\java\\jre1.8.0_144\\welcome.html"), fInfoLevelId=0x0, lpFileInformation=0x22be7dc | out: lpFileInformation=0x22be7dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3bb)) returned 1 [0219.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0219.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0219.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0219.604] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3bb, dwReserved0=0x0, dwReserved1=0xc0000043, cFileName="Welcome.html", cAlternateFileName="WELCOM~1.HTM")) returned 0 [0219.604] FindClose (in: hFindFile=0x24e5c0 | out: hFindFile=0x24e5c0) returned 1 [0219.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2349c8 [0219.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0219.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262188 [0219.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235700 [0219.605] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\*", lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0eaff93, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcc41ec25, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24e7c0 [0219.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235d80 [0219.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0219.605] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0219.606] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0eaff93, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcc41ec25, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0219.606] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236128 [0219.606] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235d80 | out: hHeap=0x1f0000) returned 1 [0219.606] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0219.606] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0219.606] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x172440, dwReserved0=0x0, dwReserved1=0x3, cFileName="awt.dll", cAlternateFileName="")) returned 1 [0219.606] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235700 [0219.607] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236128 | out: hHeap=0x1f0000) returned 1 [0219.607] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\awt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\awt.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0219.608] GetFileType (hFile=0x224) returned 0x1 [0219.608] CloseHandle (hObject=0x224) returned 1 [0219.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235d80 [0219.609] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\awt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\awt.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x172440)) returned 1 [0219.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235d80 | out: hHeap=0x1f0000) returned 1 [0219.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236190 [0219.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236190 | out: hHeap=0x1f0000) returned 1 [0219.609] GetLastError () returned 0x0 [0219.609] CryptAcquireContextA (in: phProv=0x2293e98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2293e98*=0x212f98) returned 1 [0219.610] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238370 | out: pbBuffer=0x238370) returned 1 [0219.611] CryptReleaseContext (hProv=0x212f98, dwFlags=0x0) returned 1 [0219.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0219.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x258298 [0219.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x233468 [0219.611] QueryPerformanceCounter (in: lpPerformanceCount=0x2293e2c | out: lpPerformanceCount=0x2293e2c*=37698002390) returned 1 [0219.611] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x2293e6c | out: lpSystemTimeAsFileTime=0x2293e6c) [0219.611] QueryPerformanceCounter (in: lpPerformanceCount=0x2293e2c | out: lpPerformanceCount=0x2293e2c*=37698043324) returned 1 [0219.612] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x2293e6c | out: lpSystemTimeAsFileTime=0x2293e6c) [0219.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x21d050 [0219.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x255c88 [0219.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x232ba8 [0219.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x237a20 [0219.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff70 [0219.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206928 [0219.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210018 [0219.612] GetLastError () returned 0x0 [0219.613] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\awt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\awt.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x2293dfc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0219.613] GetFileType (hFile=0x224) returned 0x1 [0219.613] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2293e68 | out: lpNewFilePointer=0x0) returned 1 [0219.613] ReadFile (in: hFile=0x224, lpBuffer=0x22a9368, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x2293e40, lpOverlapped=0x0 | out: lpBuffer=0x22a9368*, lpNumberOfBytesRead=0x2293e40*=0x14000, lpOverlapped=0x0) returned 1 [0219.765] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28efd8 [0219.765] ReadFile (in: hFile=0x224, lpBuffer=0x28efd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2293de4, lpOverlapped=0x0 | out: lpBuffer=0x28efd8*, lpNumberOfBytesRead=0x2293de4*=0x1000, lpOverlapped=0x0) returned 1 [0219.765] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2293e70 | out: lpNewFilePointer=0x0) returned 1 [0219.766] WriteFile (in: hFile=0x224, lpBuffer=0x2294378*, nNumberOfBytesToWrite=0x14000, lpNumberOfBytesWritten=0x2293ddc, lpOverlapped=0x0 | out: lpBuffer=0x2294378*, lpNumberOfBytesWritten=0x2293ddc*=0x14000, lpOverlapped=0x0) returned 1 [0219.767] WriteFile (in: hFile=0x224, lpBuffer=0x28efd8*, nNumberOfBytesToWrite=0xff0, lpNumberOfBytesWritten=0x2293e08, lpOverlapped=0x0 | out: lpBuffer=0x28efd8*, lpNumberOfBytesWritten=0x2293e08*=0xff0, lpOverlapped=0x0) returned 1 [0219.767] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x15f90, lpNewFilePointer=0x0, dwMoveMethod=0x2293e50 | out: lpNewFilePointer=0x0) returned 1 [0219.768] ReadFile (in: hFile=0x224, lpBuffer=0x22a9368, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x2293e28, lpOverlapped=0x0 | out: lpBuffer=0x22a9368*, lpNumberOfBytesRead=0x2293e28*=0x14000, lpOverlapped=0x0) returned 1 [0219.768] ReadFile (in: hFile=0x224, lpBuffer=0x28efd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2293dcc, lpOverlapped=0x0 | out: lpBuffer=0x28efd8*, lpNumberOfBytesRead=0x2293dcc*=0x1000, lpOverlapped=0x0) returned 1 [0219.769] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x15f90, lpNewFilePointer=0x0, dwMoveMethod=0x2293e70 | out: lpNewFilePointer=0x0) returned 1 [0219.769] WriteFile (in: hFile=0x224, lpBuffer=0x2294378*, nNumberOfBytesToWrite=0x14000, lpNumberOfBytesWritten=0x2293ddc, lpOverlapped=0x0 | out: lpBuffer=0x2294378*, lpNumberOfBytesWritten=0x2293ddc*=0x14000, lpOverlapped=0x0) returned 1 [0219.770] WriteFile (in: hFile=0x224, lpBuffer=0x28efd8*, nNumberOfBytesToWrite=0xff0, lpNumberOfBytesWritten=0x2293e08, lpOverlapped=0x0 | out: lpBuffer=0x28efd8*, lpNumberOfBytesWritten=0x2293e08*=0xff0, lpOverlapped=0x0) returned 1 [0219.770] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0xdbba0, lpNewFilePointer=0x0, dwMoveMethod=0x2293e50 | out: lpNewFilePointer=0x0) returned 1 [0219.771] ReadFile (in: hFile=0x224, lpBuffer=0x22a9368, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x2293e28, lpOverlapped=0x0 | out: lpBuffer=0x22a9368*, lpNumberOfBytesRead=0x2293e28*=0x14000, lpOverlapped=0x0) returned 1 [0219.773] ReadFile (in: hFile=0x224, lpBuffer=0x28efd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2293dcc, lpOverlapped=0x0 | out: lpBuffer=0x28efd8*, lpNumberOfBytesRead=0x2293dcc*=0x1000, lpOverlapped=0x0) returned 1 [0219.774] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0xdbba0, lpNewFilePointer=0x0, dwMoveMethod=0x2293e70 | out: lpNewFilePointer=0x0) returned 1 [0219.775] WriteFile (in: hFile=0x224, lpBuffer=0x2294378*, nNumberOfBytesToWrite=0x14000, lpNumberOfBytesWritten=0x2293ddc, lpOverlapped=0x0 | out: lpBuffer=0x2294378*, lpNumberOfBytesWritten=0x2293ddc*=0x14000, lpOverlapped=0x0) returned 1 [0219.776] WriteFile (in: hFile=0x224, lpBuffer=0x28efd8*, nNumberOfBytesToWrite=0xff0, lpNumberOfBytesWritten=0x2293e58, lpOverlapped=0x0 | out: lpBuffer=0x28efd8*, lpNumberOfBytesWritten=0x2293e58*=0xff0, lpOverlapped=0x0) returned 1 [0219.776] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28efd8 | out: hHeap=0x1f0000) returned 1 [0219.776] CloseHandle (hObject=0x224) returned 1 [0220.375] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234ae8 [0220.375] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238370 [0220.375] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238230 [0220.376] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x234860 [0220.376] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f70 [0220.376] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cb0 [0220.376] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x238910 [0220.376] GetLastError () returned 0x0 [0220.376] CryptAcquireContextA (in: phProv=0x2293e98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2293e98*=0x212f10) returned 1 [0220.377] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238370 | out: pbBuffer=0x238370) returned 1 [0220.377] CryptReleaseContext (hProv=0x212f10, dwFlags=0x0) returned 1 [0220.378] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0220.378] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238370 [0220.378] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238438 [0220.378] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238fd8 [0220.378] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0220.378] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0220.378] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238fd8 | out: hHeap=0x1f0000) returned 1 [0220.378] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8950 [0220.378] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210210 [0220.378] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x235a40 [0220.378] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238370 [0220.378] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2857d0 [0220.379] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bd0 [0220.379] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235aa8 [0220.379] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2385f0 [0220.379] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285cf8 [0220.379] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238980 [0220.379] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385a0 [0220.379] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210198 [0220.379] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389c0 [0220.379] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2386b8 [0220.379] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101b0 [0220.379] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0220.380] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2386b8 | out: hHeap=0x1f0000) returned 1 [0220.380] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389c0 | out: hHeap=0x1f0000) returned 1 [0220.380] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0220.380] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385a0 | out: hHeap=0x1f0000) returned 1 [0220.380] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238980 | out: hHeap=0x1f0000) returned 1 [0220.380] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285cf8 | out: hHeap=0x1f0000) returned 1 [0220.380] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385f0 | out: hHeap=0x1f0000) returned 1 [0220.380] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235aa8 | out: hHeap=0x1f0000) returned 1 [0220.380] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238e18 [0220.381] GetLastError () returned 0x0 [0220.381] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x2293a28 | out: lpSystemTimeAsFileTime=0x2293a28) [0220.382] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238890 [0220.382] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238758 [0220.382] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f70 [0220.382] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f70 | out: hHeap=0x1f0000) returned 1 [0220.382] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238758 | out: hHeap=0x1f0000) returned 1 [0220.382] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238780 [0220.382] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cb0 [0220.382] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cb0 | out: hHeap=0x1f0000) returned 1 [0220.382] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238780 | out: hHeap=0x1f0000) returned 1 [0220.383] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238890 | out: hHeap=0x1f0000) returned 1 [0220.383] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0220.383] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238d38 [0220.383] GetLastError () returned 0x0 [0220.383] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\awt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\awt.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2293d98, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0220.383] GetFileType (hFile=0x224) returned 0x1 [0220.384] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x290fe8 [0220.384] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2293d20 | out: lpNewFilePointer=0x0) returned 1 [0220.384] GetLastError () returned 0xb7 [0220.385] CloseHandle (hObject=0x224) returned 1 [0220.385] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220580 [0220.385] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261440 [0220.385] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220580 | out: hHeap=0x1f0000) returned 1 [0220.385] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x106) returned 0x233580 [0220.385] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261440 | out: hHeap=0x1f0000) returned 1 [0220.386] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\awt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\awt.dll"), lpNewFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\awt.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\awt.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwFlags=0x2) returned 1 [0220.387] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233580 | out: hHeap=0x1f0000) returned 1 [0220.387] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388f0 | out: hHeap=0x1f0000) returned 1 [0220.387] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388e0 | out: hHeap=0x1f0000) returned 1 [0220.387] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2855c0 | out: hHeap=0x1f0000) returned 1 [0220.387] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2857d0 | out: hHeap=0x1f0000) returned 1 [0220.387] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0220.387] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bd0 | out: hHeap=0x1f0000) returned 1 [0220.387] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235a40 | out: hHeap=0x1f0000) returned 1 [0220.387] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0220.388] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8950 | out: hHeap=0x1f0000) returned 1 [0220.388] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233350 | out: hHeap=0x1f0000) returned 1 [0220.388] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238438 | out: hHeap=0x1f0000) returned 1 [0220.388] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0220.388] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25ceb8 | out: hHeap=0x1f0000) returned 1 [0220.388] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233238 | out: hHeap=0x1f0000) returned 1 [0220.388] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2390f0 | out: hHeap=0x1f0000) returned 1 [0220.388] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238910 | out: hHeap=0x1f0000) returned 1 [0220.388] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0220.388] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238550 | out: hHeap=0x1f0000) returned 1 [0220.389] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387f0 | out: hHeap=0x1f0000) returned 1 [0220.389] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210240 | out: hHeap=0x1f0000) returned 1 [0220.389] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238730 | out: hHeap=0x1f0000) returned 1 [0220.389] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238970 | out: hHeap=0x1f0000) returned 1 [0220.389] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2854b8 | out: hHeap=0x1f0000) returned 1 [0220.389] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238618 | out: hHeap=0x1f0000) returned 1 [0220.389] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235768 | out: hHeap=0x1f0000) returned 1 [0220.389] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234860 | out: hHeap=0x1f0000) returned 1 [0220.389] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0220.389] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0220.390] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234ae8 | out: hHeap=0x1f0000) returned 1 [0220.390] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x255c88 | out: hHeap=0x1f0000) returned 1 [0220.390] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232ba8 | out: hHeap=0x1f0000) returned 1 [0220.390] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206928 | out: hHeap=0x1f0000) returned 1 [0220.390] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210018 | out: hHeap=0x1f0000) returned 1 [0220.390] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff70 | out: hHeap=0x1f0000) returned 1 [0220.390] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237a20 | out: hHeap=0x1f0000) returned 1 [0220.390] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x258298 | out: hHeap=0x1f0000) returned 1 [0220.390] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233468 | out: hHeap=0x1f0000) returned 1 [0220.390] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0220.391] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236190 | out: hHeap=0x1f0000) returned 1 [0220.391] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263310 | out: hHeap=0x1f0000) returned 1 [0220.391] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2344b8 | out: hHeap=0x1f0000) returned 1 [0220.391] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0220.391] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4240, dwReserved0=0x0, dwReserved1=0x3, cFileName="bci.dll", cAlternateFileName="")) returned 1 [0220.391] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235908 [0220.391] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0220.392] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\bci.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\bci.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0220.392] GetFileType (hFile=0x224) returned 0x1 [0220.392] CloseHandle (hObject=0x224) returned 1 [0220.393] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235d80 [0220.393] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\bci.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\bci.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4240)) returned 1 [0220.393] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235d80 | out: hHeap=0x1f0000) returned 1 [0220.393] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235a40 [0220.393] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235a40 | out: hHeap=0x1f0000) returned 1 [0220.393] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x27040, dwReserved0=0x0, dwReserved1=0x3, cFileName="dcpr.dll", cAlternateFileName="")) returned 1 [0220.393] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0220.394] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2362c8 [0220.394] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220c58 [0220.394] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2362c8 | out: hHeap=0x1f0000) returned 1 [0220.394] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235908 | out: hHeap=0x1f0000) returned 1 [0220.394] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0220.394] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\dcpr.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dcpr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0220.395] GetFileType (hFile=0x224) returned 0x1 [0220.395] CloseHandle (hObject=0x224) returned 1 [0220.396] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220580 [0220.396] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\dcpr.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dcpr.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x27040)) returned 1 [0220.396] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220580 | out: hHeap=0x1f0000) returned 1 [0220.396] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fab8 [0220.396] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fab8 | out: hHeap=0x1f0000) returned 1 [0220.396] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x15040, dwReserved0=0x0, dwReserved1=0x3, cFileName="decora_sse.dll", cAlternateFileName="DECORA~1.DLL")) returned 1 [0220.397] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0220.397] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235f20 [0220.397] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220eb8 [0220.397] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235f20 | out: hHeap=0x1f0000) returned 1 [0220.397] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0220.397] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0220.398] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\decora_sse.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\decora_sse.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0220.398] GetFileType (hFile=0x224) returned 0x1 [0220.399] CloseHandle (hObject=0x224) returned 1 [0220.399] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220580 [0220.399] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\decora_sse.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\decora_sse.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x15040)) returned 1 [0220.399] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220580 | out: hHeap=0x1f0000) returned 1 [0220.399] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0220.399] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0220.400] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0a0bb4, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xca0a0bb4, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xca4ccf22, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x8f953, dwReserved0=0x0, dwReserved1=0x3, cFileName="deploy.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="DEPLOY~1.ODV")) returned 1 [0220.400] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a6c8 [0220.400] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235908 [0220.400] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x229508 [0220.400] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235908 | out: hHeap=0x1f0000) returned 1 [0220.400] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0220.400] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a6c8 | out: hHeap=0x1f0000) returned 1 [0220.401] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\deploy.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\deploy.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0220.401] GetFileType (hFile=0x224) returned 0x1 [0220.402] CloseHandle (hObject=0x224) returned 1 [0220.402] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x2366d8 [0220.403] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\deploy.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\deploy.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0a0bb4, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xca0a0bb4, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xca4ccf22, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x8f953)) returned 1 [0220.403] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0220.403] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x2366d8 [0220.403] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0220.403] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2891a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="dtplugin", cAlternateFileName="")) returned 1 [0220.403] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0220.403] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2358a0 [0220.404] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220eb8 [0220.404] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2358a0 | out: hHeap=0x1f0000) returned 1 [0220.404] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229508 | out: hHeap=0x1f0000) returned 1 [0220.404] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0220.404] lstrcmpW (lpString1="dtplugin", lpString2=".") returned 1 [0220.404] lstrcmpW (lpString1="dtplugin", lpString2="..") returned 1 [0220.404] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204f70 [0220.404] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220490 [0220.405] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7440, dwReserved0=0x0, dwReserved1=0x3, cFileName="dt_shmem.dll", cAlternateFileName="")) returned 1 [0220.405] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0220.405] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235d80 [0220.405] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221118 [0220.405] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235d80 | out: hHeap=0x1f0000) returned 1 [0220.405] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0220.405] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0220.406] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_shmem.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dt_shmem.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0220.406] GetFileType (hFile=0x224) returned 0x1 [0220.407] CloseHandle (hObject=0x224) returned 1 [0220.407] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220508 [0220.407] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_shmem.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dt_shmem.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7440)) returned 1 [0220.408] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220508 | out: hHeap=0x1f0000) returned 1 [0220.408] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0220.408] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0220.408] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x6040, dwReserved0=0x0, dwReserved1=0x3, cFileName="dt_socket.dll", cAlternateFileName="DT_SOC~1.DLL")) returned 1 [0220.408] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0220.408] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2358a0 [0220.408] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2215d8 [0220.408] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2358a0 | out: hHeap=0x1f0000) returned 1 [0220.408] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0220.409] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0220.409] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_socket.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dt_socket.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0220.409] GetFileType (hFile=0x224) returned 0x1 [0220.410] CloseHandle (hObject=0x224) returned 1 [0220.410] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd88 [0220.410] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_socket.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dt_socket.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x6040)) returned 1 [0220.411] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd88 | out: hHeap=0x1f0000) returned 1 [0220.411] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0220.411] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0220.411] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x21440, dwReserved0=0x0, dwReserved1=0x3, cFileName="eula.dll", cAlternateFileName="")) returned 1 [0220.411] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0220.411] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2362c8 [0220.411] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221248 [0220.411] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2362c8 | out: hHeap=0x1f0000) returned 1 [0220.411] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0220.412] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0220.669] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\eula.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\eula.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1bc [0220.670] GetFileType (hFile=0x1bc) returned 0x1 [0220.670] CloseHandle (hObject=0x1bc) returned 1 [0220.671] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fab8 [0220.671] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\eula.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\eula.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x21440)) returned 1 [0220.671] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fab8 | out: hHeap=0x1f0000) returned 1 [0220.671] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd88 [0220.671] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd88 | out: hHeap=0x1f0000) returned 1 [0220.671] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x43040, dwReserved0=0x0, dwReserved1=0x3, cFileName="fontmanager.dll", cAlternateFileName="FONTMA~1.DLL")) returned 1 [0220.671] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0220.672] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235768 [0220.672] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221540 [0220.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235768 | out: hHeap=0x1f0000) returned 1 [0220.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0220.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0220.673] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\fontmanager.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\fontmanager.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1bc [0220.673] GetFileType (hFile=0x1bc) returned 0x1 [0220.674] CloseHandle (hObject=0x1bc) returned 1 [0220.674] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0220.674] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\fontmanager.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\fontmanager.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xcce8d39d, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x1)) returned 1 [0220.674] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0220.674] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0220.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0220.675] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2da40, dwReserved0=0x0, dwReserved1=0x3, cFileName="fxplugins.dll", cAlternateFileName="FXPLUG~1.DLL")) returned 1 [0220.675] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0220.675] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235a40 [0220.675] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2218d0 [0220.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235a40 | out: hHeap=0x1f0000) returned 1 [0220.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0220.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0220.676] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\fxplugins.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\fxplugins.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1bc [0220.676] GetFileType (hFile=0x1bc) returned 0x1 [0220.677] CloseHandle (hObject=0x1bc) returned 1 [0220.677] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f7e8 [0220.677] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\fxplugins.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\fxplugins.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2da40)) returned 1 [0220.677] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f7e8 | out: hHeap=0x1f0000) returned 1 [0220.678] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0220.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0220.678] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x40e40, dwReserved0=0x0, dwReserved1=0x3, cFileName="glass.dll", cAlternateFileName="")) returned 1 [0220.678] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0220.678] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235838 [0220.678] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221080 [0220.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235838 | out: hHeap=0x1f0000) returned 1 [0220.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0220.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0220.679] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\glass.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\glass.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1bc [0220.679] GetFileType (hFile=0x1bc) returned 0x1 [0220.680] CloseHandle (hObject=0x1bc) returned 1 [0220.680] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0220.680] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\glass.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\glass.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x40e40)) returned 1 [0220.680] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0220.680] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0220.681] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0220.681] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x6f440, dwReserved0=0x0, dwReserved1=0x3, cFileName="glib-lite.dll", cAlternateFileName="GLIB-L~1.DLL")) returned 1 [0220.681] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0220.681] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235a40 [0220.681] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2215d8 [0220.681] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235a40 | out: hHeap=0x1f0000) returned 1 [0220.681] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0220.681] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0220.682] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\glib-lite.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\glib-lite.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1bc [0220.682] GetFileType (hFile=0x1bc) returned 0x1 [0220.682] CloseHandle (hObject=0x1bc) returned 1 [0220.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0220.683] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\glib-lite.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\glib-lite.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x6f440)) returned 1 [0220.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0220.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f7e8 [0220.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f7e8 | out: hHeap=0x1f0000) returned 1 [0220.684] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca8f9084, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xca8f9084, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xcb10f519, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x97553, dwReserved0=0x0, dwReserved1=0x3, cFileName="gstreamer-lite.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="GSTREA~1.ODV")) returned 1 [0220.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x260ff0 [0220.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235f20 [0220.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285bf0 [0220.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235f20 | out: hHeap=0x1f0000) returned 1 [0220.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0220.685] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ff0 | out: hHeap=0x1f0000) returned 1 [0220.685] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\gstreamer-lite.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\gstreamer-lite.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1bc [0220.685] GetFileType (hFile=0x1bc) returned 0x1 [0220.686] CloseHandle (hObject=0x1bc) returned 1 [0220.686] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2858d8 [0220.686] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\gstreamer-lite.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\gstreamer-lite.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca8f9084, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xca8f9084, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xcb10f519, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x97553)) returned 1 [0220.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2858d8 | out: hHeap=0x1f0000) returned 1 [0220.686] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2851a0 [0220.687] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2851a0 | out: hHeap=0x1f0000) returned 1 [0220.687] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x26a40, dwReserved0=0x0, dwReserved1=0x3, cFileName="hprof.dll", cAlternateFileName="")) returned 1 [0220.687] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0220.687] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235a40 [0220.687] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2218d0 [0220.687] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235a40 | out: hHeap=0x1f0000) returned 1 [0220.687] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285bf0 | out: hHeap=0x1f0000) returned 1 [0220.687] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0220.688] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\hprof.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\hprof.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1bc [0220.688] GetFileType (hFile=0x1bc) returned 0x1 [0220.688] CloseHandle (hObject=0x1bc) returned 1 [0220.689] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2202b0 [0220.689] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\hprof.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\hprof.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x26a40)) returned 1 [0220.689] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2202b0 | out: hHeap=0x1f0000) returned 1 [0220.689] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2201c0 [0220.689] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2201c0 | out: hHeap=0x1f0000) returned 1 [0220.689] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1e240, dwReserved0=0x0, dwReserved1=0x3, cFileName="instrument.dll", cAlternateFileName="INSTRU~1.DLL")) returned 1 [0220.689] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0220.689] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235aa8 [0220.689] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220e20 [0220.690] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235aa8 | out: hHeap=0x1f0000) returned 1 [0220.690] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0220.690] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0220.690] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\instrument.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\instrument.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1bc [0220.690] GetFileType (hFile=0x1bc) returned 0x1 [0220.691] CloseHandle (hObject=0x1bc) returned 1 [0220.691] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0220.691] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\instrument.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\instrument.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1e240)) returned 1 [0220.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0220.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fc98 [0220.692] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fc98 | out: hHeap=0x1f0000) returned 1 [0220.692] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4a40, dwReserved0=0x0, dwReserved1=0x3, cFileName="j2pcsc.dll", cAlternateFileName="")) returned 1 [0220.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0220.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235700 [0220.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221a98 [0220.692] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0220.692] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0220.692] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0220.693] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pcsc.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\j2pcsc.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1bc [0220.693] GetFileType (hFile=0x1bc) returned 0x1 [0220.693] CloseHandle (hObject=0x1bc) returned 1 [0220.694] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220328 [0220.694] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pcsc.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\j2pcsc.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4a40)) returned 1 [0220.694] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220328 | out: hHeap=0x1f0000) returned 1 [0220.694] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2202b0 [0220.694] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2202b0 | out: hHeap=0x1f0000) returned 1 [0220.694] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf840, dwReserved0=0x0, dwReserved1=0x3, cFileName="j2pkcs11.dll", cAlternateFileName="")) returned 1 [0220.694] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0220.694] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235a40 [0220.694] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2218d0 [0220.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235a40 | out: hHeap=0x1f0000) returned 1 [0220.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0220.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0220.695] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pkcs11.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\j2pkcs11.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1bc [0220.695] GetFileType (hFile=0x1bc) returned 0x1 [0220.696] CloseHandle (hObject=0x1bc) returned 1 [0220.696] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fc98 [0220.696] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pkcs11.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\j2pkcs11.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf840)) returned 1 [0220.696] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fc98 | out: hHeap=0x1f0000) returned 1 [0220.697] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0220.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0220.697] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5240, dwReserved0=0x0, dwReserved1=0x3, cFileName="jaas_nt.dll", cAlternateFileName="")) returned 1 [0220.697] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0220.697] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235b78 [0220.697] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221a00 [0220.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0220.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0220.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0220.698] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jaas_nt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jaas_nt.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1bc [0220.698] GetFileType (hFile=0x1bc) returned 0x1 [0220.698] CloseHandle (hObject=0x1bc) returned 1 [0220.735] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2201c0 [0220.735] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jaas_nt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jaas_nt.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5240)) returned 1 [0220.736] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2201c0 | out: hHeap=0x1f0000) returned 1 [0220.736] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0220.736] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0220.736] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8640, dwReserved0=0x0, dwReserved1=0x3, cFileName="jabswitch.exe", cAlternateFileName="JABSWI~1.EXE")) returned 1 [0220.736] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0220.736] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235768 [0220.736] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2218d0 [0220.736] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235768 | out: hHeap=0x1f0000) returned 1 [0220.736] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0220.737] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0220.737] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jabswitch.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jabswitch.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1bc [0220.737] GetFileType (hFile=0x1bc) returned 0x1 [0220.738] CloseHandle (hObject=0x1bc) returned 1 [0220.738] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fa40 [0220.738] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jabswitch.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jabswitch.exe"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8640)) returned 1 [0220.738] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fa40 | out: hHeap=0x1f0000) returned 1 [0220.738] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2201c0 [0220.738] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2201c0 | out: hHeap=0x1f0000) returned 1 [0220.739] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e40, dwReserved0=0x0, dwReserved1=0x3, cFileName="java-rmi.exe", cAlternateFileName="")) returned 1 [0220.739] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0220.739] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235be0 [0220.739] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221410 [0220.739] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235be0 | out: hHeap=0x1f0000) returned 1 [0220.739] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0220.739] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0220.739] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\java-rmi.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java-rmi.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1bc [0220.740] GetFileType (hFile=0x1bc) returned 0x1 [0220.961] CloseHandle (hObject=0x1bc) returned 1 [0220.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0220.962] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\java-rmi.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java-rmi.exe"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e40)) returned 1 [0220.962] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0220.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0220.962] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0220.962] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x27040, dwReserved0=0x0, dwReserved1=0x3, cFileName="java.dll", cAlternateFileName="")) returned 1 [0220.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0220.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236330 [0220.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2217a0 [0220.962] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236330 | out: hHeap=0x1f0000) returned 1 [0220.962] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0220.962] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0221.233] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\java.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0221.234] GetFileType (hFile=0x1b0) returned 0x1 [0221.234] CloseHandle (hObject=0x1b0) returned 1 [0221.235] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0221.235] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\java.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x27040)) returned 1 [0221.235] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0221.236] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f770 [0221.236] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f770 | out: hHeap=0x1f0000) returned 1 [0221.236] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x32840, dwReserved0=0x0, dwReserved1=0x3, cFileName="java.exe", cAlternateFileName="")) returned 1 [0221.236] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0221.236] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236260 [0221.236] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220eb8 [0221.236] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236260 | out: hHeap=0x1f0000) returned 1 [0221.236] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0221.237] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0221.237] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\java.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0221.238] GetFileType (hFile=0x1b0) returned 0x1 [0221.238] CloseHandle (hObject=0x1b0) returned 1 [0221.239] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f7e8 [0221.239] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\java.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java.exe"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x32840)) returned 1 [0221.239] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f7e8 | out: hHeap=0x1f0000) returned 1 [0221.239] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fa40 [0221.239] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fa40 | out: hHeap=0x1f0000) returned 1 [0221.240] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x22c40, dwReserved0=0x0, dwReserved1=0x3, cFileName="JavaAccessBridge-64.dll", cAlternateFileName="JAVAAC~1.DLL")) returned 1 [0221.240] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238f30 [0221.240] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236128 [0221.240] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221248 [0221.240] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236128 | out: hHeap=0x1f0000) returned 1 [0221.240] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0221.240] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238f30 | out: hHeap=0x1f0000) returned 1 [0221.241] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\JavaAccessBridge-64.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaaccessbridge-64.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0221.241] GetFileType (hFile=0x1b0) returned 0x1 [0221.242] CloseHandle (hObject=0x1b0) returned 1 [0221.242] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212a48 [0221.243] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\JavaAccessBridge-64.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaaccessbridge-64.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x22c40)) returned 1 [0221.243] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212a48 | out: hHeap=0x1f0000) returned 1 [0221.243] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0221.243] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0221.243] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2dc00, dwReserved0=0x0, dwReserved1=0x3, cFileName="javacpl.cpl", cAlternateFileName="")) returned 1 [0221.243] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0221.243] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235a40 [0221.243] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221540 [0221.243] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235a40 | out: hHeap=0x1f0000) returned 1 [0221.244] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0221.244] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0221.244] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.cpl" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javacpl.cpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0221.245] GetFileType (hFile=0x1b0) returned 0x1 [0221.245] CloseHandle (hObject=0x1b0) returned 1 [0221.246] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f770 [0221.246] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.cpl" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javacpl.cpl"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2dc00)) returned 1 [0221.246] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f770 | out: hHeap=0x1f0000) returned 1 [0221.246] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0221.246] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0221.246] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13a40, dwReserved0=0x0, dwReserved1=0x3, cFileName="javacpl.exe", cAlternateFileName="")) returned 1 [0221.247] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0221.247] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236260 [0221.247] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220c58 [0221.247] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236260 | out: hHeap=0x1f0000) returned 1 [0221.247] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0221.247] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0221.248] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javacpl.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0221.248] GetFileType (hFile=0x1b0) returned 0x1 [0221.249] CloseHandle (hObject=0x1b0) returned 1 [0221.249] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0221.249] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javacpl.exe"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13a40)) returned 1 [0221.249] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0221.249] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd88 [0221.249] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd88 | out: hHeap=0x1f0000) returned 1 [0221.249] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x10e40, dwReserved0=0x0, dwReserved1=0x3, cFileName="javafx_font.dll", cAlternateFileName="JAVAFX~1.DLL")) returned 1 [0221.250] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0221.250] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236058 [0221.250] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220f50 [0221.250] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236058 | out: hHeap=0x1f0000) returned 1 [0221.250] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0221.250] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0221.251] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_font.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0221.251] GetFileType (hFile=0x1b0) returned 0x1 [0221.251] CloseHandle (hObject=0x1b0) returned 1 [0221.252] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fa40 [0221.252] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_font.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x10e40)) returned 1 [0221.252] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fa40 | out: hHeap=0x1f0000) returned 1 [0221.252] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd88 [0221.252] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd88 | out: hHeap=0x1f0000) returned 1 [0221.252] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb5f6fbf, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xcb5f6fbf, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xcba95670, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x83753, dwReserved0=0x0, dwReserved1=0x3, cFileName="javafx_font_t2k.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="JAVAFX~1.ODV")) returned 1 [0221.253] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261388 [0221.253] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235908 [0221.253] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285bf0 [0221.253] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235908 | out: hHeap=0x1f0000) returned 1 [0221.253] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0221.253] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261388 | out: hHeap=0x1f0000) returned 1 [0221.254] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font_t2k.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_font_t2k.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0221.254] GetFileType (hFile=0x1b0) returned 0x1 [0221.254] CloseHandle (hObject=0x1b0) returned 1 [0221.255] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2851a0 [0221.255] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font_t2k.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_font_t2k.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb5f6fbf, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xcb5f6fbf, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xcba95670, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x83753)) returned 1 [0221.255] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2851a0 | out: hHeap=0x1f0000) returned 1 [0221.255] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2857d0 [0221.255] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2857d0 | out: hHeap=0x1f0000) returned 1 [0221.255] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1f440, dwReserved0=0x0, dwReserved1=0x3, cFileName="javafx_iio.dll", cAlternateFileName="JAVAFX~3.DLL")) returned 1 [0221.255] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0221.256] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235a40 [0221.256] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221248 [0221.256] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235a40 | out: hHeap=0x1f0000) returned 1 [0221.256] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285bf0 | out: hHeap=0x1f0000) returned 1 [0221.256] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0221.256] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_iio.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_iio.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0221.257] GetFileType (hFile=0x1b0) returned 0x1 [0221.257] CloseHandle (hObject=0x1b0) returned 1 [0221.257] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2203a0 [0221.257] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_iio.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_iio.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1f440)) returned 1 [0221.257] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2203a0 | out: hHeap=0x1f0000) returned 1 [0221.257] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220238 [0221.257] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220238 | out: hHeap=0x1f0000) returned 1 [0221.257] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x32840, dwReserved0=0x0, dwReserved1=0x3, cFileName="javaw.exe", cAlternateFileName="")) returned 1 [0221.258] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0221.258] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235ff0 [0221.258] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2217a0 [0221.258] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235ff0 | out: hHeap=0x1f0000) returned 1 [0221.258] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0221.258] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0221.258] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\javaw.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaw.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0221.259] GetFileType (hFile=0x1b0) returned 0x1 [0221.259] CloseHandle (hObject=0x1b0) returned 1 [0221.259] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0221.259] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\javaw.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaw.exe"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x32840)) returned 1 [0221.260] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0221.260] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0221.260] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0221.260] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e040, dwReserved0=0x0, dwReserved1=0x3, cFileName="javaws.exe", cAlternateFileName="")) returned 1 [0221.260] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0221.260] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235ff0 [0221.260] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221248 [0221.260] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235ff0 | out: hHeap=0x1f0000) returned 1 [0221.261] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0221.261] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0221.261] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\javaws.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaws.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0221.262] GetFileType (hFile=0x1b0) returned 0x1 [0221.262] CloseHandle (hObject=0x1b0) returned 1 [0221.262] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0221.263] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\javaws.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaws.exe"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e040)) returned 1 [0221.263] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0221.263] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0221.263] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0221.263] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7440, dwReserved0=0x0, dwReserved1=0x3, cFileName="java_crw_demo.dll", cAlternateFileName="JAVA_C~1.DLL")) returned 1 [0221.263] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238cc8 [0221.263] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2361f8 [0221.264] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221708 [0221.264] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2361f8 | out: hHeap=0x1f0000) returned 1 [0221.264] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0221.264] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238cc8 | out: hHeap=0x1f0000) returned 1 [0221.265] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\java_crw_demo.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java_crw_demo.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0221.265] GetFileType (hFile=0x1b0) returned 0x1 [0221.265] CloseHandle (hObject=0x1b0) returned 1 [0221.266] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0221.266] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\java_crw_demo.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java_crw_demo.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7440)) returned 1 [0221.266] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0221.266] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213818 [0221.266] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213818 | out: hHeap=0x1f0000) returned 1 [0221.267] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3840, dwReserved0=0x0, dwReserved1=0x3, cFileName="jawt.dll", cAlternateFileName="")) returned 1 [0221.267] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0221.267] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2358a0 [0221.267] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221838 [0221.267] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2358a0 | out: hHeap=0x1f0000) returned 1 [0221.267] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0221.267] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0221.268] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jawt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jawt.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0221.268] GetFileType (hFile=0x1b0) returned 0x1 [0221.269] CloseHandle (hObject=0x1b0) returned 1 [0221.269] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd88 [0221.269] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jawt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jawt.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3840)) returned 1 [0221.270] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd88 | out: hHeap=0x1f0000) returned 1 [0221.270] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f7e8 [0221.270] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f7e8 | out: hHeap=0x1f0000) returned 1 [0221.270] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3c40, dwReserved0=0x0, dwReserved1=0x3, cFileName="JAWTAccessBridge-64.dll", cAlternateFileName="JAWTAC~1.DLL")) returned 1 [0221.270] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c58 [0221.270] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235b78 [0221.270] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220c58 [0221.270] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0221.271] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0221.271] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c58 | out: hHeap=0x1f0000) returned 1 [0221.507] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\JAWTAccessBridge-64.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jawtaccessbridge-64.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0221.507] GetFileType (hFile=0x21c) returned 0x1 [0221.508] CloseHandle (hObject=0x21c) returned 1 [0221.508] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0221.508] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\JAWTAccessBridge-64.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jawtaccessbridge-64.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3c40)) returned 1 [0221.509] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0221.509] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0221.509] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0221.509] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x31440, dwReserved0=0x0, dwReserved1=0x3, cFileName="jdwp.dll", cAlternateFileName="")) returned 1 [0221.509] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0221.509] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235700 [0221.509] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220e20 [0221.509] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0221.509] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0221.510] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0221.510] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jdwp.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jdwp.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0221.511] GetFileType (hFile=0x21c) returned 0x1 [0221.511] CloseHandle (hObject=0x21c) returned 1 [0221.511] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220580 [0221.511] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jdwp.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jdwp.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x31440)) returned 1 [0221.511] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220580 | out: hHeap=0x1f0000) returned 1 [0221.511] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0221.511] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0221.512] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x6840, dwReserved0=0x0, dwReserved1=0x3, cFileName="jfr.dll", cAlternateFileName="")) returned 1 [0221.512] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235b78 [0221.512] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0221.512] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jfr.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0221.512] GetFileType (hFile=0x21c) returned 0x1 [0221.512] CloseHandle (hObject=0x21c) returned 1 [0221.513] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236260 [0221.513] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jfr.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfr.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x6840)) returned 1 [0221.513] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236260 | out: hHeap=0x1f0000) returned 1 [0221.513] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235700 [0221.513] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0221.513] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x22240, dwReserved0=0x0, dwReserved1=0x3, cFileName="jfxmedia.dll", cAlternateFileName="")) returned 1 [0221.513] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0221.513] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235a40 [0221.513] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221248 [0221.513] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235a40 | out: hHeap=0x1f0000) returned 1 [0221.513] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0221.514] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0221.514] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jfxmedia.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfxmedia.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0221.514] GetFileType (hFile=0x21c) returned 0x1 [0221.514] CloseHandle (hObject=0x21c) returned 1 [0221.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0221.515] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jfxmedia.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfxmedia.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x22240)) returned 1 [0221.515] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0221.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0221.515] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0221.515] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7511d3f, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7511d3f, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa75aa64d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2794a40, dwReserved0=0x0, dwReserved1=0x3, cFileName="jfxwebkit.dll", cAlternateFileName="JFXWEB~1.DLL")) returned 1 [0221.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0221.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235be0 [0221.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2215d8 [0221.515] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235be0 | out: hHeap=0x1f0000) returned 1 [0221.515] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0221.516] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0221.516] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jfxwebkit.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfxwebkit.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0221.516] GetFileType (hFile=0x21c) returned 0x1 [0221.516] CloseHandle (hObject=0x21c) returned 1 [0221.517] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd88 [0221.517] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jfxwebkit.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfxwebkit.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7511d3f, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7511d3f, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa75aa64d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2794a40)) returned 1 [0221.517] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd88 | out: hHeap=0x1f0000) returned 1 [0221.517] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0221.517] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0221.517] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa75aa64d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa75aa64d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa75aa64d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e40, dwReserved0=0x0, dwReserved1=0x3, cFileName="jjs.exe", cAlternateFileName="")) returned 1 [0221.517] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235c48 [0221.517] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0221.517] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jjs.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jjs.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0221.518] GetFileType (hFile=0x21c) returned 0x1 [0221.518] CloseHandle (hObject=0x21c) returned 1 [0221.518] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235908 [0221.518] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jjs.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jjs.exe"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa75aa64d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa75aa64d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa75aa64d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e40)) returned 1 [0221.518] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235908 | out: hHeap=0x1f0000) returned 1 [0221.518] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235a40 [0221.519] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235a40 | out: hHeap=0x1f0000) returned 1 [0221.519] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa75aa64d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa75aa64d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa75aa64d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2aa40, dwReserved0=0x0, dwReserved1=0x3, cFileName="jli.dll", cAlternateFileName="")) returned 1 [0221.519] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235de8 [0221.519] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235c48 | out: hHeap=0x1f0000) returned 1 [0221.519] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jli.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jli.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0221.519] GetFileType (hFile=0x21c) returned 0x1 [0221.519] CloseHandle (hObject=0x21c) returned 1 [0221.519] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235a40 [0221.519] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jli.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jli.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa75aa64d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa75aa64d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa75aa64d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2aa40)) returned 1 [0221.520] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235a40 | out: hHeap=0x1f0000) returned 1 [0221.520] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235d80 [0221.520] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235d80 | out: hHeap=0x1f0000) returned 1 [0221.520] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa75aa64d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa75aa64d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa897bfc2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x48440, dwReserved0=0x0, dwReserved1=0x3, cFileName="jp2iexp.dll", cAlternateFileName="")) returned 1 [0221.520] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0221.520] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235d80 [0221.520] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2217a0 [0221.520] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235d80 | out: hHeap=0x1f0000) returned 1 [0221.520] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235de8 | out: hHeap=0x1f0000) returned 1 [0221.520] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0221.520] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2iexp.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2iexp.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0221.520] GetFileType (hFile=0x21c) returned 0x1 [0221.521] CloseHandle (hObject=0x21c) returned 1 [0221.521] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220508 [0221.521] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2iexp.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2iexp.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa75aa64d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa75aa64d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa897bfc2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x48440)) returned 1 [0221.521] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220508 | out: hHeap=0x1f0000) returned 1 [0221.521] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fc98 [0221.521] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fc98 | out: hHeap=0x1f0000) returned 1 [0221.521] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa897bfc2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa897bfc2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89a2223, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1b640, dwReserved0=0x0, dwReserved1=0x3, cFileName="jp2launcher.exe", cAlternateFileName="JP2LAU~1.EXE")) returned 1 [0221.521] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238488 [0221.522] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235eb8 [0221.522] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221118 [0221.522] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235eb8 | out: hHeap=0x1f0000) returned 1 [0221.522] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0221.522] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238488 | out: hHeap=0x1f0000) returned 1 [0221.522] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2launcher.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2launcher.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0221.522] GetFileType (hFile=0x21c) returned 0x1 [0221.522] CloseHandle (hObject=0x21c) returned 1 [0221.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0221.523] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2launcher.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2launcher.exe"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa897bfc2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa897bfc2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89a2223, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1b640)) returned 1 [0221.523] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0221.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220328 [0221.523] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220328 | out: hHeap=0x1f0000) returned 1 [0221.523] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89a2223, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89a2223, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89a2223, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e40, dwReserved0=0x0, dwReserved1=0x3, cFileName="jp2native.dll", cAlternateFileName="JP2NAT~1.DLL")) returned 1 [0221.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238488 [0221.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235de8 [0221.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220d88 [0221.523] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235de8 | out: hHeap=0x1f0000) returned 1 [0221.523] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0221.523] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238488 | out: hHeap=0x1f0000) returned 1 [0221.524] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2native.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2native.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0221.524] GetFileType (hFile=0x21c) returned 0x1 [0221.524] CloseHandle (hObject=0x21c) returned 1 [0221.524] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0221.524] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2native.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2native.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89a2223, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89a2223, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89a2223, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e40)) returned 1 [0221.524] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0221.524] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220238 [0221.525] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220238 | out: hHeap=0x1f0000) returned 1 [0221.525] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89a2223, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89a2223, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89a2223, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39840, dwReserved0=0x0, dwReserved1=0x3, cFileName="jp2ssv.dll", cAlternateFileName="")) returned 1 [0221.525] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0221.525] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235d80 [0221.525] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221968 [0221.525] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235d80 | out: hHeap=0x1f0000) returned 1 [0221.525] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0221.525] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0221.525] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2ssv.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2ssv.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0221.525] GetFileType (hFile=0x21c) returned 0x1 [0221.526] CloseHandle (hObject=0x21c) returned 1 [0221.526] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0221.526] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2ssv.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2ssv.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89a2223, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89a2223, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89a2223, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39840)) returned 1 [0221.526] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0221.526] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0221.526] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0221.526] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89a2223, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89a2223, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2d640, dwReserved0=0x0, dwReserved1=0x3, cFileName="jpeg.dll", cAlternateFileName="")) returned 1 [0221.526] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0221.526] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235be0 [0221.526] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221a98 [0221.527] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235be0 | out: hHeap=0x1f0000) returned 1 [0221.527] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0221.527] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0221.527] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jpeg.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jpeg.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0221.527] GetFileType (hFile=0x21c) returned 0x1 [0221.527] CloseHandle (hObject=0x21c) returned 1 [0221.528] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0221.528] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jpeg.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jpeg.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89a2223, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89a2223, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2d640)) returned 1 [0221.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0221.528] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0221.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0221.528] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4840, dwReserved0=0x0, dwReserved1=0x3, cFileName="jsdt.dll", cAlternateFileName="")) returned 1 [0221.528] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0221.528] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236260 [0221.528] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220e20 [0221.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236260 | out: hHeap=0x1f0000) returned 1 [0221.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0221.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0221.529] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jsdt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsdt.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0221.529] GetFileType (hFile=0x21c) returned 0x1 [0221.529] CloseHandle (hObject=0x21c) returned 1 [0221.529] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fc98 [0221.529] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jsdt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsdt.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4840)) returned 1 [0221.529] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fc98 | out: hHeap=0x1f0000) returned 1 [0221.529] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220508 [0221.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220508 | out: hHeap=0x1f0000) returned 1 [0221.530] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8a40, dwReserved0=0x0, dwReserved1=0x3, cFileName="jsound.dll", cAlternateFileName="")) returned 1 [0221.530] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0221.530] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235de8 [0221.530] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221248 [0221.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235de8 | out: hHeap=0x1f0000) returned 1 [0221.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0221.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0221.530] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jsound.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsound.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0221.530] GetFileType (hFile=0x21c) returned 0x1 [0221.531] CloseHandle (hObject=0x21c) returned 1 [0221.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f7e8 [0221.531] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jsound.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsound.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8a40)) returned 1 [0221.531] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f7e8 | out: hHeap=0x1f0000) returned 1 [0221.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f7e8 [0221.531] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f7e8 | out: hHeap=0x1f0000) returned 1 [0221.531] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7a40, dwReserved0=0x0, dwReserved1=0x3, cFileName="jsoundds.dll", cAlternateFileName="")) returned 1 [0221.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0221.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235768 [0221.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221378 [0221.531] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235768 | out: hHeap=0x1f0000) returned 1 [0221.532] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0221.532] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0221.532] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jsoundds.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsoundds.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0221.532] GetFileType (hFile=0x21c) returned 0x1 [0221.532] CloseHandle (hObject=0x21c) returned 1 [0221.533] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220508 [0221.533] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jsoundds.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsoundds.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7a40)) returned 1 [0221.533] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220508 | out: hHeap=0x1f0000) returned 1 [0221.533] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2203a0 [0221.533] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2203a0 | out: hHeap=0x1f0000) returned 1 [0221.533] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x35e40, dwReserved0=0x0, dwReserved1=0x3, cFileName="kcms.dll", cAlternateFileName="")) returned 1 [0221.533] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0221.533] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235aa8 [0221.533] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220c58 [0221.533] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235aa8 | out: hHeap=0x1f0000) returned 1 [0221.533] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0221.533] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0221.534] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\kcms.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\kcms.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0221.534] GetFileType (hFile=0x21c) returned 0x1 [0221.534] CloseHandle (hObject=0x21c) returned 1 [0221.534] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0221.535] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\kcms.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\kcms.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x35e40)) returned 1 [0221.535] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0221.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0221.535] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0221.535] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x3, cFileName="keytool.exe", cAlternateFileName="")) returned 1 [0221.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0221.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236260 [0221.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220eb8 [0221.535] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236260 | out: hHeap=0x1f0000) returned 1 [0221.535] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0221.535] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0221.535] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\keytool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\keytool.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0221.536] GetFileType (hFile=0x21c) returned 0x1 [0221.536] CloseHandle (hObject=0x21c) returned 1 [0221.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0221.536] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\keytool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\keytool.exe"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1 [0221.536] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0221.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0221.536] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0221.536] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x3, cFileName="kinit.exe", cAlternateFileName="")) returned 1 [0221.537] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0221.537] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2358a0 [0221.537] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220cf0 [0221.537] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2358a0 | out: hHeap=0x1f0000) returned 1 [0221.537] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0221.537] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0221.538] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\kinit.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\kinit.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0221.538] GetFileType (hFile=0x21c) returned 0x1 [0221.538] CloseHandle (hObject=0x21c) returned 1 [0221.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0221.538] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\kinit.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\kinit.exe"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1 [0221.538] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0221.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fc98 [0221.538] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fc98 | out: hHeap=0x1f0000) returned 1 [0221.538] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x3, cFileName="klist.exe", cAlternateFileName="")) returned 1 [0221.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0221.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235d80 [0221.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220c58 [0221.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235d80 | out: hHeap=0x1f0000) returned 1 [0221.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0221.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0221.539] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\klist.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\klist.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0221.539] GetFileType (hFile=0x21c) returned 0x1 [0221.539] CloseHandle (hObject=0x21c) returned 1 [0221.540] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f770 [0221.540] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\klist.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\klist.exe"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1 [0221.540] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f770 | out: hHeap=0x1f0000) returned 1 [0221.540] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0221.540] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0221.540] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x3, cFileName="ktab.exe", cAlternateFileName="")) returned 1 [0221.540] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0221.540] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235a40 [0221.540] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221378 [0221.540] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235a40 | out: hHeap=0x1f0000) returned 1 [0221.540] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0221.540] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0221.540] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\ktab.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ktab.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0221.541] GetFileType (hFile=0x21c) returned 0x1 [0221.541] CloseHandle (hObject=0x21c) returned 1 [0221.541] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0221.541] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\ktab.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ktab.exe"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1 [0221.541] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0221.541] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0221.541] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0221.541] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39040, dwReserved0=0x0, dwReserved1=0x3, cFileName="lcms.dll", cAlternateFileName="")) returned 1 [0221.541] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0221.541] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235eb8 [0221.542] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221248 [0221.542] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235eb8 | out: hHeap=0x1f0000) returned 1 [0221.542] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0221.542] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0221.542] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\lcms.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\lcms.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0221.542] GetFileType (hFile=0x21c) returned 0x1 [0221.542] CloseHandle (hObject=0x21c) returned 1 [0221.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f770 [0221.543] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\lcms.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\lcms.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39040)) returned 1 [0221.543] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f770 | out: hHeap=0x1f0000) returned 1 [0221.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0221.543] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0221.543] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x9040, dwReserved0=0x0, dwReserved1=0x3, cFileName="management.dll", cAlternateFileName="MANAGE~1.DLL")) returned 1 [0221.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0221.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236260 [0221.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2217a0 [0221.543] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236260 | out: hHeap=0x1f0000) returned 1 [0221.543] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0221.543] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0221.543] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\management.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\management.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0221.544] GetFileType (hFile=0x21c) returned 0x1 [0221.544] CloseHandle (hObject=0x21c) returned 1 [0221.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fa40 [0221.544] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\management.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\management.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x9040)) returned 1 [0221.544] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fa40 | out: hHeap=0x1f0000) returned 1 [0221.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0221.544] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0221.544] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc41ec25, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xcc41ec25, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xcca3ad23, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x9fb53, dwReserved0=0x0, dwReserved1=0x3, cFileName="mlib_image.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="MLIB_I~1.ODV")) returned 1 [0221.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a188 [0221.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235ff0 [0221.545] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x22d368 [0221.545] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235ff0 | out: hHeap=0x1f0000) returned 1 [0221.545] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0221.545] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a188 | out: hHeap=0x1f0000) returned 1 [0221.545] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\mlib_image.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\mlib_image.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0221.545] GetFileType (hFile=0x21c) returned 0x1 [0221.546] CloseHandle (hObject=0x21c) returned 1 [0221.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x2366d8 [0221.546] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\mlib_image.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\mlib_image.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc41ec25, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xcc41ec25, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xcca3ad23, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x9fb53)) returned 1 [0221.546] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0221.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x2366d8 [0221.546] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0221.546] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcca3ad23, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xcca3ad23, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xcd48308f, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xa13b3, dwReserved0=0x0, dwReserved1=0x3, cFileName="msvcp120.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="MSVCP1~1.ODV")) returned 1 [0221.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219d98 [0221.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235eb8 [0221.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x2366d8 [0221.547] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235eb8 | out: hHeap=0x1f0000) returned 1 [0221.547] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d368 | out: hHeap=0x1f0000) returned 1 [0221.547] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219d98 | out: hHeap=0x1f0000) returned 1 [0221.547] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcp120.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcp120.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0221.547] GetFileType (hFile=0x21c) returned 0x1 [0221.547] CloseHandle (hObject=0x21c) returned 1 [0221.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x2367d0 [0221.548] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcp120.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcp120.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcca3ad23, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xcca3ad23, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xcd48308f, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xa13b3)) returned 1 [0221.548] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2367d0 | out: hHeap=0x1f0000) returned 1 [0221.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x2367d0 [0221.548] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2367d0 | out: hHeap=0x1f0000) returned 1 [0221.548] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xca750, dwReserved0=0x0, dwReserved1=0x3, cFileName="msvcr100.dll", cAlternateFileName="")) returned 1 [0221.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0221.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236190 [0221.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221410 [0221.548] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236190 | out: hHeap=0x1f0000) returned 1 [0221.548] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0221.548] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0221.549] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr100.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcr100.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0221.549] GetFileType (hFile=0x21c) returned 0x1 [0221.549] CloseHandle (hObject=0x21c) returned 1 [0221.550] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220238 [0221.550] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr100.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcr100.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xca750)) returned 1 [0221.550] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220238 | out: hHeap=0x1f0000) returned 1 [0221.550] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0221.550] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0221.550] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xeb2a0, dwReserved0=0x0, dwReserved1=0x3, cFileName="msvcr120.dll", cAlternateFileName="")) returned 1 [0221.550] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0221.550] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236190 [0221.550] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221670 [0221.551] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236190 | out: hHeap=0x1f0000) returned 1 [0221.551] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0221.551] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0221.551] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr120.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcr120.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0221.552] GetFileType (hFile=0x21c) returned 0x1 [0221.552] CloseHandle (hObject=0x21c) returned 1 [0221.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0221.782] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr120.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcr120.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xeb2a0)) returned 1 [0221.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0221.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0221.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0221.782] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x17a40, dwReserved0=0x0, dwReserved1=0x3, cFileName="net.dll", cAlternateFileName="")) returned 1 [0221.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235be0 [0221.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0221.783] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\net.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\net.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1bc [0221.783] GetFileType (hFile=0x1bc) returned 0x1 [0221.783] CloseHandle (hObject=0x1bc) returned 1 [0221.783] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2360c0 [0221.783] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\net.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\net.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x17a40)) returned 1 [0221.783] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2360c0 | out: hHeap=0x1f0000) returned 1 [0221.783] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2360c0 [0221.783] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2360c0 | out: hHeap=0x1f0000) returned 1 [0221.783] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xec40, dwReserved0=0x0, dwReserved1=0x3, cFileName="nio.dll", cAlternateFileName="")) returned 1 [0221.784] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235d80 [0221.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235be0 | out: hHeap=0x1f0000) returned 1 [0221.784] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\nio.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\nio.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1bc [0221.784] GetFileType (hFile=0x1bc) returned 0x1 [0221.784] CloseHandle (hObject=0x1bc) returned 1 [0221.784] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235700 [0221.784] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\nio.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\nio.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xec40)) returned 1 [0221.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0221.784] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235de8 [0221.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235de8 | out: hHeap=0x1f0000) returned 1 [0221.785] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4a40, dwReserved0=0x0, dwReserved1=0x3, cFileName="npt.dll", cAlternateFileName="")) returned 1 [0222.304] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235700 [0222.305] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235d80 | out: hHeap=0x1f0000) returned 1 [0222.305] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\npt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\npt.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0222.305] GetFileType (hFile=0x224) returned 0x1 [0222.306] CloseHandle (hObject=0x224) returned 1 [0222.306] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235768 [0222.306] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\npt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\npt.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4a40)) returned 1 [0222.306] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235768 | out: hHeap=0x1f0000) returned 1 [0222.306] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236260 [0222.306] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236260 | out: hHeap=0x1f0000) returned 1 [0222.306] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x3, cFileName="orbd.exe", cAlternateFileName="")) returned 1 [0222.306] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0222.306] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235be0 [0222.306] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220d88 [0222.307] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235be0 | out: hHeap=0x1f0000) returned 1 [0222.307] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0222.307] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0222.307] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\orbd.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\orbd.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0222.307] GetFileType (hFile=0x224) returned 0x1 [0222.307] CloseHandle (hObject=0x224) returned 1 [0222.307] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fa40 [0222.308] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\orbd.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\orbd.exe"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1 [0222.308] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fa40 | out: hHeap=0x1f0000) returned 1 [0222.308] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220328 [0222.308] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220328 | out: hHeap=0x1f0000) returned 1 [0222.308] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x3, cFileName="pack200.exe", cAlternateFileName="")) returned 1 [0222.308] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0222.308] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235de8 [0222.308] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220cf0 [0222.308] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235de8 | out: hHeap=0x1f0000) returned 1 [0222.308] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0222.308] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0222.308] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\pack200.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\pack200.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0222.308] GetFileType (hFile=0x224) returned 0x1 [0222.309] CloseHandle (hObject=0x224) returned 1 [0222.309] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0222.309] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\pack200.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\pack200.exe"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1 [0222.309] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0222.309] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fab8 [0222.309] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fab8 | out: hHeap=0x1f0000) returned 1 [0222.309] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2a2bf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="plugin2", cAlternateFileName="")) returned 1 [0222.309] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235eb8 [0222.309] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0222.309] lstrcmpW (lpString1="plugin2", lpString2=".") returned 1 [0222.310] lstrcmpW (lpString1="plugin2", lpString2="..") returned 1 [0222.310] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2390b8 [0222.310] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235700 [0222.310] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f70 | out: hHeap=0x1f0000) returned 1 [0222.310] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x3, cFileName="policytool.exe", cAlternateFileName="POLICY~1.EXE")) returned 1 [0222.310] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0222.310] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235d80 [0222.310] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220f50 [0222.310] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235d80 | out: hHeap=0x1f0000) returned 1 [0222.310] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235eb8 | out: hHeap=0x1f0000) returned 1 [0222.310] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0222.311] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\policytool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\policytool.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0222.311] GetFileType (hFile=0x224) returned 0x1 [0222.311] CloseHandle (hObject=0x224) returned 1 [0222.311] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f770 [0222.311] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\policytool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\policytool.exe"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1 [0222.312] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f770 | out: hHeap=0x1f0000) returned 1 [0222.312] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0222.312] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0222.312] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xe040, dwReserved0=0x0, dwReserved1=0x3, cFileName="prism_common.dll", cAlternateFileName="PRISM_~1.DLL")) returned 1 [0222.312] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238f30 [0222.312] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235c48 [0222.312] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221080 [0222.312] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235c48 | out: hHeap=0x1f0000) returned 1 [0222.312] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0222.312] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238f30 | out: hHeap=0x1f0000) returned 1 [0222.313] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_common.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_common.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0222.313] GetFileType (hFile=0x224) returned 0x1 [0222.313] CloseHandle (hObject=0x224) returned 1 [0222.313] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211bf0 [0222.313] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_common.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_common.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xe040)) returned 1 [0222.313] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211bf0 | out: hHeap=0x1f0000) returned 1 [0222.314] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d00 [0222.314] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d00 | out: hHeap=0x1f0000) returned 1 [0222.314] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1fe40, dwReserved0=0x0, dwReserved1=0x3, cFileName="prism_d3d.dll", cAlternateFileName="PRISM_~2.DLL")) returned 1 [0222.314] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0222.314] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235c48 [0222.314] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2215d8 [0222.314] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235c48 | out: hHeap=0x1f0000) returned 1 [0222.314] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0222.314] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0222.315] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_d3d.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_d3d.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0222.315] GetFileType (hFile=0x224) returned 0x1 [0222.315] CloseHandle (hObject=0x224) returned 1 [0222.316] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220508 [0222.316] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_d3d.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_d3d.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1fe40)) returned 1 [0222.316] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220508 | out: hHeap=0x1f0000) returned 1 [0222.316] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fa40 [0222.316] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fa40 | out: hHeap=0x1f0000) returned 1 [0222.316] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x17e40, dwReserved0=0x0, dwReserved1=0x3, cFileName="prism_sw.dll", cAlternateFileName="")) returned 1 [0222.316] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0222.316] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235eb8 [0222.316] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220d88 [0222.316] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235eb8 | out: hHeap=0x1f0000) returned 1 [0222.316] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0222.316] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0222.317] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_sw.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_sw.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0222.317] GetFileType (hFile=0x224) returned 0x1 [0222.317] CloseHandle (hObject=0x224) returned 1 [0222.317] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd88 [0222.318] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_sw.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_sw.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x17e40)) returned 1 [0222.318] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd88 | out: hHeap=0x1f0000) returned 1 [0222.318] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2203a0 [0222.318] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2203a0 | out: hHeap=0x1f0000) returned 1 [0222.318] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3c40, dwReserved0=0x0, dwReserved1=0x3, cFileName="resource.dll", cAlternateFileName="")) returned 1 [0222.343] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0222.343] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236058 [0222.343] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221b30 [0222.343] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236058 | out: hHeap=0x1f0000) returned 1 [0222.343] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0222.343] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0222.343] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\resource.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\resource.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0222.344] GetFileType (hFile=0x224) returned 0x1 [0222.344] CloseHandle (hObject=0x224) returned 1 [0222.344] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220328 [0222.344] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\resource.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\resource.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3c40)) returned 1 [0222.345] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220328 | out: hHeap=0x1f0000) returned 1 [0222.345] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0222.345] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0222.345] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e40, dwReserved0=0x0, dwReserved1=0x3, cFileName="rmid.exe", cAlternateFileName="")) returned 1 [0222.345] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0222.345] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2358a0 [0222.345] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2218d0 [0222.345] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2358a0 | out: hHeap=0x1f0000) returned 1 [0222.345] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0222.345] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0222.346] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\rmid.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\rmid.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0222.346] GetFileType (hFile=0x224) returned 0x1 [0222.346] CloseHandle (hObject=0x224) returned 1 [0222.346] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd88 [0222.346] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\rmid.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\rmid.exe"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e40)) returned 1 [0222.347] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd88 | out: hHeap=0x1f0000) returned 1 [0222.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0222.347] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0222.347] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8af971e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x3, cFileName="rmiregistry.exe", cAlternateFileName="RMIREG~1.EXE")) returned 1 [0222.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0222.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2358a0 [0222.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220eb8 [0222.347] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2358a0 | out: hHeap=0x1f0000) returned 1 [0222.347] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0222.347] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0222.348] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\rmiregistry.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\rmiregistry.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0222.348] GetFileType (hFile=0x224) returned 0x1 [0222.348] CloseHandle (hObject=0x224) returned 1 [0222.348] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2201c0 [0222.349] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\rmiregistry.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\rmiregistry.exe"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8af971e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1 [0222.349] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2201c0 | out: hHeap=0x1f0000) returned 1 [0222.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220508 [0222.349] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220508 | out: hHeap=0x1f0000) returned 1 [0222.349] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8af971e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2b6c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xab35b530, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="server", cAlternateFileName="")) returned 1 [0222.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236260 [0222.349] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0222.349] lstrcmpW (lpString1="server", lpString2=".") returned 1 [0222.350] lstrcmpW (lpString1="server", lpString2="..") returned 1 [0222.350] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x48) returned 0x226328 [0222.350] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235908 [0222.350] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2390b8 | out: hHeap=0x1f0000) returned 1 [0222.350] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x3, cFileName="servertool.exe", cAlternateFileName="SERVER~1.EXE")) returned 1 [0222.350] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0222.350] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2360c0 [0222.350] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2211b0 [0222.350] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2360c0 | out: hHeap=0x1f0000) returned 1 [0222.350] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236260 | out: hHeap=0x1f0000) returned 1 [0222.350] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0222.351] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\servertool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\servertool.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0222.351] GetFileType (hFile=0x224) returned 0x1 [0222.351] CloseHandle (hObject=0x224) returned 1 [0222.352] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0222.352] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\servertool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\servertool.exe"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1 [0222.352] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0222.352] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f770 [0222.352] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f770 | out: hHeap=0x1f0000) returned 1 [0222.352] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x32040, dwReserved0=0x0, dwReserved1=0x3, cFileName="splashscreen.dll", cAlternateFileName="SPLASH~1.DLL")) returned 1 [0222.352] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238e50 [0222.352] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235768 [0222.352] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221378 [0222.352] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235768 | out: hHeap=0x1f0000) returned 1 [0222.352] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0222.352] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238e50 | out: hHeap=0x1f0000) returned 1 [0222.353] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\splashscreen.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\splashscreen.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0222.353] GetFileType (hFile=0x224) returned 0x1 [0222.353] CloseHandle (hObject=0x224) returned 1 [0222.353] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2129c0 [0222.353] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\splashscreen.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\splashscreen.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x32040)) returned 1 [0222.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2129c0 | out: hHeap=0x1f0000) returned 1 [0222.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0222.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0222.354] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8ba40, dwReserved0=0x0, dwReserved1=0x3, cFileName="ssv.dll", cAlternateFileName="")) returned 1 [0222.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235768 [0222.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0222.354] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\ssv.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ssv.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0222.354] GetFileType (hFile=0x224) returned 0x1 [0222.355] CloseHandle (hObject=0x224) returned 1 [0222.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235de8 [0222.355] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\ssv.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ssv.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8ba40)) returned 1 [0222.356] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235de8 | out: hHeap=0x1f0000) returned 1 [0222.356] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2358a0 [0222.356] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2358a0 | out: hHeap=0x1f0000) returned 1 [0222.356] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x11240, dwReserved0=0x0, dwReserved1=0x3, cFileName="ssvagent.exe", cAlternateFileName="")) returned 1 [0222.356] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0222.356] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235be0 [0222.356] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2215d8 [0222.356] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235be0 | out: hHeap=0x1f0000) returned 1 [0222.356] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235768 | out: hHeap=0x1f0000) returned 1 [0222.356] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0222.357] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\ssvagent.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ssvagent.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0222.357] GetFileType (hFile=0x224) returned 0x1 [0222.358] CloseHandle (hObject=0x224) returned 1 [0222.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0222.358] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\ssvagent.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ssvagent.exe"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x11240)) returned 1 [0222.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0222.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0222.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0222.358] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x21240, dwReserved0=0x0, dwReserved1=0x3, cFileName="sunec.dll", cAlternateFileName="")) returned 1 [0222.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0222.359] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235be0 [0222.359] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221080 [0222.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235be0 | out: hHeap=0x1f0000) returned 1 [0222.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0222.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0222.359] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\sunec.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\sunec.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0222.360] GetFileType (hFile=0x224) returned 0x1 [0222.361] CloseHandle (hObject=0x224) returned 1 [0222.361] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fc98 [0222.361] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\sunec.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\sunec.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x21240)) returned 1 [0222.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fc98 | out: hHeap=0x1f0000) returned 1 [0222.361] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0222.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0222.361] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7c40, dwReserved0=0x0, dwReserved1=0x3, cFileName="sunmscapi.dll", cAlternateFileName="SUNMSC~1.DLL")) returned 1 [0222.361] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0222.362] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235f20 [0222.362] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221968 [0222.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235f20 | out: hHeap=0x1f0000) returned 1 [0222.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0222.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0222.362] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\sunmscapi.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\sunmscapi.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0222.363] GetFileType (hFile=0x224) returned 0x1 [0222.363] CloseHandle (hObject=0x224) returned 1 [0222.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0222.363] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\sunmscapi.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\sunmscapi.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7c40)) returned 1 [0222.364] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0222.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd88 [0222.364] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd88 | out: hHeap=0x1f0000) returned 1 [0222.364] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e440, dwReserved0=0x0, dwReserved1=0x3, cFileName="t2k.dll", cAlternateFileName="")) returned 1 [0222.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235eb8 [0222.364] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0222.364] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\t2k.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\t2k.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0222.365] GetFileType (hFile=0x224) returned 0x1 [0222.736] CloseHandle (hObject=0x224) returned 1 [0222.736] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2360c0 [0222.736] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\t2k.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\t2k.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e440)) returned 1 [0222.736] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2360c0 | out: hHeap=0x1f0000) returned 1 [0222.737] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235de8 [0222.737] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235de8 | out: hHeap=0x1f0000) returned 1 [0222.737] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x3, cFileName="tnameserv.exe", cAlternateFileName="TNAMES~1.EXE")) returned 1 [0222.737] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0222.737] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235aa8 [0222.737] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221a00 [0222.737] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235aa8 | out: hHeap=0x1f0000) returned 1 [0222.737] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235eb8 | out: hHeap=0x1f0000) returned 1 [0222.738] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0222.738] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\tnameserv.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\tnameserv.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0222.739] GetFileType (hFile=0x224) returned 0x1 [0222.739] CloseHandle (hObject=0x224) returned 1 [0222.740] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220508 [0222.740] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\tnameserv.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\tnameserv.exe"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1 [0222.740] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220508 | out: hHeap=0x1f0000) returned 1 [0222.740] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220238 [0222.740] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220238 | out: hHeap=0x1f0000) returned 1 [0222.740] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13840, dwReserved0=0x0, dwReserved1=0x3, cFileName="unpack.dll", cAlternateFileName="")) returned 1 [0222.741] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0222.741] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236330 [0222.741] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220cf0 [0222.741] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236330 | out: hHeap=0x1f0000) returned 1 [0222.741] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0222.741] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0222.742] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\unpack.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0222.743] GetFileType (hFile=0x224) returned 0x1 [0222.744] CloseHandle (hObject=0x224) returned 1 [0222.744] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220580 [0222.744] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\unpack.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13840)) returned 1 [0222.744] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220580 | out: hHeap=0x1f0000) returned 1 [0222.745] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fab8 [0222.745] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fab8 | out: hHeap=0x1f0000) returned 1 [0222.745] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x30240, dwReserved0=0x0, dwReserved1=0x3, cFileName="unpack200.exe", cAlternateFileName="UNPACK~1.EXE")) returned 1 [0222.745] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0222.745] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235f20 [0222.745] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220f50 [0222.745] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235f20 | out: hHeap=0x1f0000) returned 1 [0222.745] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0222.745] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0222.746] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack200.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\unpack200.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0222.747] GetFileType (hFile=0x224) returned 0x1 [0222.748] CloseHandle (hObject=0x224) returned 1 [0222.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220580 [0222.748] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack200.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\unpack200.exe"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x30240)) returned 1 [0222.748] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220580 | out: hHeap=0x1f0000) returned 1 [0222.749] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0222.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0222.749] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc040, dwReserved0=0x0, dwReserved1=0x3, cFileName="verify.dll", cAlternateFileName="")) returned 1 [0222.749] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0222.749] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235aa8 [0222.749] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221670 [0222.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235aa8 | out: hHeap=0x1f0000) returned 1 [0222.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0222.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0222.750] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\verify.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\verify.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0222.751] GetFileType (hFile=0x224) returned 0x1 [0222.751] CloseHandle (hObject=0x224) returned 1 [0222.752] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0222.752] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\verify.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\verify.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc040)) returned 1 [0222.752] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0222.752] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220508 [0222.752] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220508 | out: hHeap=0x1f0000) returned 1 [0222.752] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5e40, dwReserved0=0x0, dwReserved1=0x3, cFileName="w2k_lsa_auth.dll", cAlternateFileName="W2K_LS~1.DLL")) returned 1 [0222.752] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239198 [0222.752] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235eb8 [0222.753] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2215d8 [0222.753] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235eb8 | out: hHeap=0x1f0000) returned 1 [0222.753] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0222.753] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239198 | out: hHeap=0x1f0000) returned 1 [0222.754] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\w2k_lsa_auth.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\w2k_lsa_auth.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0222.754] GetFileType (hFile=0x224) returned 0x1 [0222.754] CloseHandle (hObject=0x224) returned 1 [0222.755] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212828 [0222.755] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\w2k_lsa_auth.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\w2k_lsa_auth.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5e40)) returned 1 [0222.755] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212828 | out: hHeap=0x1f0000) returned 1 [0222.755] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211e98 [0222.755] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e98 | out: hHeap=0x1f0000) returned 1 [0222.755] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1ae40, dwReserved0=0x0, dwReserved1=0x3, cFileName="WindowsAccessBridge-64.dll", cAlternateFileName="WINDOW~1.DLL")) returned 1 [0222.755] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2348f0 [0222.756] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235aa8 [0222.756] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0222.756] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235aa8 | out: hHeap=0x1f0000) returned 1 [0222.756] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0222.756] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2348f0 | out: hHeap=0x1f0000) returned 1 [0222.756] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\WindowsAccessBridge-64.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\windowsaccessbridge-64.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0222.757] GetFileType (hFile=0x224) returned 0x1 [0222.757] CloseHandle (hObject=0x224) returned 1 [0222.758] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0222.758] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\WindowsAccessBridge-64.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\windowsaccessbridge-64.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1ae40)) returned 1 [0222.758] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0222.758] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0222.758] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0222.758] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2f040, dwReserved0=0x0, dwReserved1=0x3, cFileName="wsdetect.dll", cAlternateFileName="")) returned 1 [0222.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0222.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235c48 [0222.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221b30 [0222.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235c48 | out: hHeap=0x1f0000) returned 1 [0222.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0222.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0222.760] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\wsdetect.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\wsdetect.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0222.761] GetFileType (hFile=0x224) returned 0x1 [0222.761] CloseHandle (hObject=0x224) returned 1 [0222.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fab8 [0222.762] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\wsdetect.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\wsdetect.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2f040)) returned 1 [0222.762] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fab8 | out: hHeap=0x1f0000) returned 1 [0222.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd88 [0222.762] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd88 | out: hHeap=0x1f0000) returned 1 [0222.762] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13040, dwReserved0=0x0, dwReserved1=0x3, cFileName="zip.dll", cAlternateFileName="")) returned 1 [0222.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236260 [0222.763] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0222.763] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\zip.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\zip.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0222.763] GetFileType (hFile=0x224) returned 0x1 [0222.764] CloseHandle (hObject=0x224) returned 1 [0222.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235eb8 [0222.764] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\zip.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\zip.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13040)) returned 1 [0222.765] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235eb8 | out: hHeap=0x1f0000) returned 1 [0222.765] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235d80 [0222.765] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235d80 | out: hHeap=0x1f0000) returned 1 [0222.765] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13040, dwReserved0=0x0, dwReserved1=0x3, cFileName="zip.dll", cAlternateFileName="")) returned 0 [0222.765] FindClose (in: hFindFile=0x24e7c0 | out: hFindFile=0x24e7c0) returned 1 [0222.765] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234788 [0222.766] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0222.766] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e4f8 [0222.766] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220508 [0222.766] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\*", lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2891a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ec00 [0222.767] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0222.767] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220508 | out: hHeap=0x1f0000) returned 1 [0222.767] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0222.767] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2891a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0222.767] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f770 [0222.767] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0222.767] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0222.768] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0222.768] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xfa840, dwReserved0=0x0, dwReserved1=0x0, cFileName="deployJava1.dll", cAlternateFileName="DEPLOY~1.DLL")) returned 1 [0222.768] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238640 [0222.768] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2203a0 [0222.768] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218d98 [0222.768] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2203a0 | out: hHeap=0x1f0000) returned 1 [0222.768] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f770 | out: hHeap=0x1f0000) returned 1 [0222.768] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238640 | out: hHeap=0x1f0000) returned 1 [0222.769] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\deployJava1.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\deployjava1.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0222.769] GetFileType (hFile=0x224) returned 0x1 [0222.770] CloseHandle (hObject=0x224) returned 1 [0222.770] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0222.770] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\deployJava1.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\deployjava1.dll"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xfa840)) returned 1 [0222.770] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0222.770] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0222.770] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0222.771] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x11a640, dwReserved0=0x0, dwReserved1=0x0, cFileName="npdeployJava1.dll", cAlternateFileName="NPDEPL~1.DLL")) returned 1 [0222.771] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238fd8 [0222.771] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0222.771] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ef8 [0222.771] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0222.771] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218d98 | out: hHeap=0x1f0000) returned 1 [0222.771] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238fd8 | out: hHeap=0x1f0000) returned 1 [0222.772] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\npdeployJava1.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\npdeployjava1.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0222.772] GetFileType (hFile=0x224) returned 0x1 [0222.772] CloseHandle (hObject=0x224) returned 1 [0222.772] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0222.772] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\npdeployJava1.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\npdeployjava1.dll"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x11a640)) returned 1 [0222.773] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0222.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0222.773] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0222.773] GetLastError () returned 0x0 [0222.773] CryptAcquireContextA (in: phProv=0x2293a98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2293a98*=0x211bf0) returned 1 [0222.774] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238618 | out: pbBuffer=0x238618) returned 1 [0222.774] CryptReleaseContext (hProv=0x211bf0, dwFlags=0x0) returned 1 [0222.774] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238618 | out: hHeap=0x1f0000) returned 1 [0222.774] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x25bbb0 [0222.774] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x236e38 [0222.774] QueryPerformanceCounter (in: lpPerformanceCount=0x2293a2c | out: lpPerformanceCount=0x2293a2c*=38014321953) returned 1 [0222.774] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x2293a6c | out: lpSystemTimeAsFileTime=0x2293a6c) [0222.775] QueryPerformanceCounter (in: lpPerformanceCount=0x2293a2c | out: lpPerformanceCount=0x2293a2c*=38014343911) returned 1 [0222.775] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x2293a6c | out: lpSystemTimeAsFileTime=0x2293a6c) [0222.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239198 [0222.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x25a8a8 [0222.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x237a40 [0222.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x233158 [0222.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101b0 [0222.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206838 [0222.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210210 [0222.775] GetLastError () returned 0x0 [0222.775] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\npdeployJava1.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\npdeployjava1.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22939fc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0222.776] GetFileType (hFile=0x224) returned 0x1 [0222.776] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2293a68 | out: lpNewFilePointer=0x0) returned 1 [0222.776] ReadFile (in: hFile=0x224, lpBuffer=0x22a8f68, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x2293a40, lpOverlapped=0x0 | out: lpBuffer=0x22a8f68*, lpNumberOfBytesRead=0x2293a40*=0x14000, lpOverlapped=0x0) returned 1 [0223.033] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x298020 [0223.033] ReadFile (in: hFile=0x224, lpBuffer=0x298020, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x22939e4, lpOverlapped=0x0 | out: lpBuffer=0x298020*, lpNumberOfBytesRead=0x22939e4*=0x1000, lpOverlapped=0x0) returned 1 [0223.316] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2293a70 | out: lpNewFilePointer=0x0) returned 1 [0223.317] WriteFile (in: hFile=0x224, lpBuffer=0x2293f78*, nNumberOfBytesToWrite=0x14000, lpNumberOfBytesWritten=0x22939dc, lpOverlapped=0x0 | out: lpBuffer=0x2293f78*, lpNumberOfBytesWritten=0x22939dc*=0x14000, lpOverlapped=0x0) returned 1 [0223.318] WriteFile (in: hFile=0x224, lpBuffer=0x298020*, nNumberOfBytesToWrite=0xff0, lpNumberOfBytesWritten=0x2293a08, lpOverlapped=0x0 | out: lpBuffer=0x298020*, lpNumberOfBytesWritten=0x2293a08*=0xff0, lpOverlapped=0x0) returned 1 [0223.318] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x15f90, lpNewFilePointer=0x0, dwMoveMethod=0x2293a50 | out: lpNewFilePointer=0x0) returned 1 [0223.318] ReadFile (in: hFile=0x224, lpBuffer=0x22a8f68, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x2293a28, lpOverlapped=0x0 | out: lpBuffer=0x22a8f68*, lpNumberOfBytesRead=0x2293a28*=0x14000, lpOverlapped=0x0) returned 1 [0223.319] ReadFile (in: hFile=0x224, lpBuffer=0x298020, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x22939cc, lpOverlapped=0x0 | out: lpBuffer=0x298020*, lpNumberOfBytesRead=0x22939cc*=0x1000, lpOverlapped=0x0) returned 1 [0223.319] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x15f90, lpNewFilePointer=0x0, dwMoveMethod=0x2293a70 | out: lpNewFilePointer=0x0) returned 1 [0223.320] WriteFile (in: hFile=0x224, lpBuffer=0x2293f78*, nNumberOfBytesToWrite=0x14000, lpNumberOfBytesWritten=0x22939dc, lpOverlapped=0x0 | out: lpBuffer=0x2293f78*, lpNumberOfBytesWritten=0x22939dc*=0x14000, lpOverlapped=0x0) returned 1 [0223.320] WriteFile (in: hFile=0x224, lpBuffer=0x298020*, nNumberOfBytesToWrite=0xff0, lpNumberOfBytesWritten=0x2293a08, lpOverlapped=0x0 | out: lpBuffer=0x298020*, lpNumberOfBytesWritten=0x2293a08*=0xff0, lpOverlapped=0x0) returned 1 [0223.321] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0xdbba0, lpNewFilePointer=0x0, dwMoveMethod=0x2293a50 | out: lpNewFilePointer=0x0) returned 1 [0223.321] ReadFile (in: hFile=0x224, lpBuffer=0x22a8f68, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x2293a28, lpOverlapped=0x0 | out: lpBuffer=0x22a8f68*, lpNumberOfBytesRead=0x2293a28*=0x14000, lpOverlapped=0x0) returned 1 [0223.323] ReadFile (in: hFile=0x224, lpBuffer=0x298020, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x22939cc, lpOverlapped=0x0 | out: lpBuffer=0x298020*, lpNumberOfBytesRead=0x22939cc*=0x1000, lpOverlapped=0x0) returned 1 [0223.324] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0xdbba0, lpNewFilePointer=0x0, dwMoveMethod=0x2293a70 | out: lpNewFilePointer=0x0) returned 1 [0223.325] WriteFile (in: hFile=0x224, lpBuffer=0x2293f78*, nNumberOfBytesToWrite=0x14000, lpNumberOfBytesWritten=0x22939dc, lpOverlapped=0x0 | out: lpBuffer=0x2293f78*, lpNumberOfBytesWritten=0x22939dc*=0x14000, lpOverlapped=0x0) returned 1 [0223.325] WriteFile (in: hFile=0x224, lpBuffer=0x298020*, nNumberOfBytesToWrite=0xff0, lpNumberOfBytesWritten=0x2293a58, lpOverlapped=0x0 | out: lpBuffer=0x298020*, lpNumberOfBytesWritten=0x2293a58*=0xff0, lpOverlapped=0x0) returned 1 [0223.326] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x298020 | out: hHeap=0x1f0000) returned 1 [0223.326] CloseHandle (hObject=0x224) returned 1 [0223.522] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2285a8 [0223.522] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238398 [0223.522] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238410 [0223.522] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x2288c0 [0223.522] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f70 [0223.522] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e70 [0223.522] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x238ad0 [0223.523] GetLastError () returned 0x0 [0223.523] CryptAcquireContextA (in: phProv=0x2293a98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2293a98*=0x211e10) returned 1 [0223.524] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238230 | out: pbBuffer=0x238230) returned 1 [0223.524] CryptReleaseContext (hProv=0x211e10, dwFlags=0x0) returned 1 [0223.524] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0223.524] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238230 [0223.525] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238398 [0223.525] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238ef8 [0223.525] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0223.525] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0223.525] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ef8 | out: hHeap=0x1f0000) returned 1 [0223.525] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8008 [0223.525] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffd0 [0223.525] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x235838 [0223.525] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238230 [0223.526] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x284f90 [0223.526] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f70 [0223.526] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235d80 [0223.526] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238488 [0223.526] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285098 [0223.526] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a10 [0223.526] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238640 [0223.526] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2100a8 [0223.526] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a50 [0223.527] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238668 [0223.527] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0223.527] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0223.527] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238668 | out: hHeap=0x1f0000) returned 1 [0223.527] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a50 | out: hHeap=0x1f0000) returned 1 [0223.527] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2100a8 | out: hHeap=0x1f0000) returned 1 [0223.527] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238640 | out: hHeap=0x1f0000) returned 1 [0223.527] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a10 | out: hHeap=0x1f0000) returned 1 [0223.527] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285098 | out: hHeap=0x1f0000) returned 1 [0223.527] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238488 | out: hHeap=0x1f0000) returned 1 [0223.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235d80 | out: hHeap=0x1f0000) returned 1 [0223.528] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239010 [0223.528] GetLastError () returned 0x0 [0223.528] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x2293628 | out: lpSystemTimeAsFileTime=0x2293628) [0223.528] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238ba0 [0223.528] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238488 [0223.529] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cb0 [0223.529] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cb0 | out: hHeap=0x1f0000) returned 1 [0223.529] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238488 | out: hHeap=0x1f0000) returned 1 [0223.529] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238488 [0223.529] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d30 [0223.529] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d30 | out: hHeap=0x1f0000) returned 1 [0223.529] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238488 | out: hHeap=0x1f0000) returned 1 [0223.529] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ba0 | out: hHeap=0x1f0000) returned 1 [0223.529] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0223.529] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239010 [0223.530] GetLastError () returned 0x0 [0223.579] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\npdeployJava1.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\npdeployjava1.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2293998, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0223.579] GetFileType (hFile=0x1e0) returned 0x1 [0223.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28afb8 [0223.580] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2293920 | out: lpNewFilePointer=0x0) returned 1 [0223.580] GetLastError () returned 0xb7 [0223.580] CloseHandle (hObject=0x1e0) returned 1 [0223.581] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219e40 [0223.581] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xee) returned 0x2367d0 [0223.581] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219e40 | out: hHeap=0x1f0000) returned 1 [0223.581] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x164) returned 0x229418 [0223.581] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2367d0 | out: hHeap=0x1f0000) returned 1 [0223.581] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\npdeployJava1.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\npdeployjava1.dll"), lpNewFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\npdeployJava1.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\npdeployjava1.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwFlags=0x2) returned 1 [0223.624] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0223.624] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ba0 | out: hHeap=0x1f0000) returned 1 [0223.624] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ab0 | out: hHeap=0x1f0000) returned 1 [0223.624] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2855c0 | out: hHeap=0x1f0000) returned 1 [0223.624] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x284f90 | out: hHeap=0x1f0000) returned 1 [0223.624] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0223.624] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f70 | out: hHeap=0x1f0000) returned 1 [0223.624] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235838 | out: hHeap=0x1f0000) returned 1 [0223.624] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffd0 | out: hHeap=0x1f0000) returned 1 [0223.624] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8008 | out: hHeap=0x1f0000) returned 1 [0223.624] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237298 | out: hHeap=0x1f0000) returned 1 [0223.624] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0223.624] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0223.624] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x254980 | out: hHeap=0x1f0000) returned 1 [0223.624] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237810 | out: hHeap=0x1f0000) returned 1 [0223.624] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238fd8 | out: hHeap=0x1f0000) returned 1 [0223.624] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ad0 | out: hHeap=0x1f0000) returned 1 [0223.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210078 | out: hHeap=0x1f0000) returned 1 [0223.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0223.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389f0 | out: hHeap=0x1f0000) returned 1 [0223.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffb8 | out: hHeap=0x1f0000) returned 1 [0223.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0223.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a40 | out: hHeap=0x1f0000) returned 1 [0223.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2854b8 | out: hHeap=0x1f0000) returned 1 [0223.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0223.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235768 | out: hHeap=0x1f0000) returned 1 [0223.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2288c0 | out: hHeap=0x1f0000) returned 1 [0223.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0223.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0223.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2285a8 | out: hHeap=0x1f0000) returned 1 [0223.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25a8a8 | out: hHeap=0x1f0000) returned 1 [0223.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237a40 | out: hHeap=0x1f0000) returned 1 [0223.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206838 | out: hHeap=0x1f0000) returned 1 [0223.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0223.626] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0223.626] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233158 | out: hHeap=0x1f0000) returned 1 [0223.626] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25bbb0 | out: hHeap=0x1f0000) returned 1 [0223.626] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236e38 | out: hHeap=0x1f0000) returned 1 [0223.626] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239080 | out: hHeap=0x1f0000) returned 1 [0223.626] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0223.626] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ee88 | out: hHeap=0x1f0000) returned 1 [0223.626] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2348f0 | out: hHeap=0x1f0000) returned 1 [0223.626] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238528 | out: hHeap=0x1f0000) returned 1 [0223.626] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x11a640, dwReserved0=0x0, dwReserved1=0x0, cFileName="npdeployJava1.dll", cAlternateFileName="NPDEPL~1.DLL")) returned 0 [0223.626] FindClose (in: hFindFile=0x24ec00 | out: hFindFile=0x24ec00) returned 1 [0223.626] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ef8 | out: hHeap=0x1f0000) returned 1 [0223.626] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e4f8 | out: hHeap=0x1f0000) returned 1 [0223.627] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0223.627] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234788 | out: hHeap=0x1f0000) returned 1 [0223.627] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228488 [0223.627] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0223.627] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d9d0 [0223.627] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fa40 [0223.627] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\*", lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2a2bf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ed00 [0223.627] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220508 [0223.627] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fa40 | out: hHeap=0x1f0000) returned 1 [0223.627] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0223.627] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2a2bf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0223.627] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0223.628] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220508 | out: hHeap=0x1f0000) returned 1 [0223.628] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0223.628] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0223.628] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xca750, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr100.dll", cAlternateFileName="")) returned 1 [0223.628] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0223.628] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220508 [0223.628] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218608 [0223.628] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220508 | out: hHeap=0x1f0000) returned 1 [0223.628] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0223.628] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0223.629] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\msvcr100.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\plugin2\\msvcr100.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0223.629] GetFileType (hFile=0x1e0) returned 0x1 [0223.629] CloseHandle (hObject=0x1e0) returned 1 [0223.629] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211bf0 [0223.629] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\msvcr100.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\plugin2\\msvcr100.dll"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xca750)) returned 1 [0223.630] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211bf0 | out: hHeap=0x1f0000) returned 1 [0223.630] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211bf0 [0223.630] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211bf0 | out: hHeap=0x1f0000) returned 1 [0223.630] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39440, dwReserved0=0x0, dwReserved1=0x0, cFileName="npjp2.dll", cAlternateFileName="")) returned 1 [0223.630] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0223.630] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0223.630] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219318 [0223.630] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0223.630] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218608 | out: hHeap=0x1f0000) returned 1 [0223.630] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0223.631] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\npjp2.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\plugin2\\npjp2.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0223.631] GetFileType (hFile=0x1e0) returned 0x1 [0223.631] CloseHandle (hObject=0x1e0) returned 1 [0223.631] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212718 [0223.632] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\npjp2.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\plugin2\\npjp2.dll"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39440)) returned 1 [0223.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212718 | out: hHeap=0x1f0000) returned 1 [0223.632] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211e10 [0223.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e10 | out: hHeap=0x1f0000) returned 1 [0223.632] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39440, dwReserved0=0x0, dwReserved1=0x0, cFileName="npjp2.dll", cAlternateFileName="")) returned 0 [0223.632] FindClose (in: hFindFile=0x24ed00 | out: hFindFile=0x24ed00) returned 1 [0223.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219318 | out: hHeap=0x1f0000) returned 1 [0223.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d9d0 | out: hHeap=0x1f0000) returned 1 [0223.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0223.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228488 | out: hHeap=0x1f0000) returned 1 [0223.632] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228488 [0223.633] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0223.633] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22ee88 [0223.633] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0223.633] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\*", lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8af971e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2b6c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xab35b530, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e600 [0223.633] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235b78 [0223.633] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220cf0 [0223.633] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0223.633] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0223.633] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0223.633] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8af971e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2b6c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xab35b530, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0223.634] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235d80 [0223.634] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221708 [0223.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235d80 | out: hHeap=0x1f0000) returned 1 [0223.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0223.634] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0223.634] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0223.634] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xab35b530, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xab35b530, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xabaa88bc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x11d0000, dwReserved0=0x0, dwReserved1=0x0, cFileName="classes.jsa", cAlternateFileName="")) returned 1 [0223.634] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0223.634] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235aa8 [0223.634] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220eb8 [0223.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235aa8 | out: hHeap=0x1f0000) returned 1 [0223.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0223.635] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0223.635] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\classes.jsa" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\classes.jsa"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0223.636] GetLastError () returned 0x5 [0223.636] GetLastError () returned 0x5 [0223.636] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b1f9e6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b1f9e6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b1f9e6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x866c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="jvm.dll", cAlternateFileName="")) returned 1 [0223.636] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235838 [0223.636] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2215d8 [0223.636] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235838 | out: hHeap=0x1f0000) returned 1 [0223.636] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0223.637] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\jvm.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\jvm.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0223.637] GetFileType (hFile=0x1e0) returned 0x1 [0223.637] CloseHandle (hObject=0x1e0) returned 1 [0223.638] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0223.638] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\jvm.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\jvm.dll"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b1f9e6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b1f9e6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b1f9e6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x866c40)) returned 1 [0223.638] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0223.638] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd88 [0223.638] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd88 | out: hHeap=0x1f0000) returned 1 [0223.638] GetLastError () returned 0x0 [0223.639] CryptAcquireContextA (in: phProv=0x2293a98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2293a98*=0x211bf0) returned 1 [0223.639] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238140 | out: pbBuffer=0x238140) returned 1 [0223.639] CryptReleaseContext (hProv=0x211bf0, dwFlags=0x0) returned 1 [0223.639] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0223.640] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x254980 [0223.640] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2375e0 [0223.640] QueryPerformanceCounter (in: lpPerformanceCount=0x2293a2c | out: lpPerformanceCount=0x2293a2c*=38100868007) returned 1 [0223.640] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x2293a6c | out: lpSystemTimeAsFileTime=0x2293a6c) [0223.640] QueryPerformanceCounter (in: lpPerformanceCount=0x2293a2c | out: lpPerformanceCount=0x2293a2c*=38100901090) returned 1 [0223.640] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x2293a6c | out: lpSystemTimeAsFileTime=0x2293a6c) [0223.640] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238e88 [0223.640] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x24fd60 [0223.641] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x237a40 [0223.641] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x232d48 [0223.641] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210240 [0223.641] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206838 [0223.641] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210210 [0223.641] GetLastError () returned 0x0 [0223.641] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\jvm.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\jvm.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22939fc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0223.642] GetFileType (hFile=0x1e0) returned 0x1 [0223.642] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2293a68 | out: lpNewFilePointer=0x0) returned 1 [0223.642] ReadFile (in: hFile=0x1e0, lpBuffer=0x22a8f68, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x2293a40, lpOverlapped=0x0 | out: lpBuffer=0x22a8f68*, lpNumberOfBytesRead=0x2293a40*=0x14000, lpOverlapped=0x0) returned 1 [0223.645] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x286f98 [0223.645] ReadFile (in: hFile=0x1e0, lpBuffer=0x286f98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x22939e4, lpOverlapped=0x0 | out: lpBuffer=0x286f98*, lpNumberOfBytesRead=0x22939e4*=0x1000, lpOverlapped=0x0) returned 1 [0223.647] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2293a70 | out: lpNewFilePointer=0x0) returned 1 [0223.647] WriteFile (in: hFile=0x1e0, lpBuffer=0x2293f78*, nNumberOfBytesToWrite=0x14000, lpNumberOfBytesWritten=0x22939dc, lpOverlapped=0x0 | out: lpBuffer=0x2293f78*, lpNumberOfBytesWritten=0x22939dc*=0x14000, lpOverlapped=0x0) returned 1 [0223.648] WriteFile (in: hFile=0x1e0, lpBuffer=0x286f98*, nNumberOfBytesToWrite=0xff0, lpNumberOfBytesWritten=0x2293a08, lpOverlapped=0x0 | out: lpBuffer=0x286f98*, lpNumberOfBytesWritten=0x2293a08*=0xff0, lpOverlapped=0x0) returned 1 [0223.648] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x15f90, lpNewFilePointer=0x0, dwMoveMethod=0x2293a50 | out: lpNewFilePointer=0x0) returned 1 [0223.648] ReadFile (in: hFile=0x1e0, lpBuffer=0x22a8f68, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x2293a28, lpOverlapped=0x0 | out: lpBuffer=0x22a8f68*, lpNumberOfBytesRead=0x2293a28*=0x14000, lpOverlapped=0x0) returned 1 [0223.649] ReadFile (in: hFile=0x1e0, lpBuffer=0x286f98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x22939cc, lpOverlapped=0x0 | out: lpBuffer=0x286f98*, lpNumberOfBytesRead=0x22939cc*=0x1000, lpOverlapped=0x0) returned 1 [0223.649] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x15f90, lpNewFilePointer=0x0, dwMoveMethod=0x2293a70 | out: lpNewFilePointer=0x0) returned 1 [0223.650] WriteFile (in: hFile=0x1e0, lpBuffer=0x2293f78*, nNumberOfBytesToWrite=0x14000, lpNumberOfBytesWritten=0x22939dc, lpOverlapped=0x0 | out: lpBuffer=0x2293f78*, lpNumberOfBytesWritten=0x22939dc*=0x14000, lpOverlapped=0x0) returned 1 [0223.650] WriteFile (in: hFile=0x1e0, lpBuffer=0x286f98*, nNumberOfBytesToWrite=0xff0, lpNumberOfBytesWritten=0x2293a08, lpOverlapped=0x0 | out: lpBuffer=0x286f98*, lpNumberOfBytesWritten=0x2293a08*=0xff0, lpOverlapped=0x0) returned 1 [0223.651] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0xdbba0, lpNewFilePointer=0x0, dwMoveMethod=0x2293a50 | out: lpNewFilePointer=0x0) returned 1 [0223.651] ReadFile (in: hFile=0x1e0, lpBuffer=0x22a8f68, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x2293a28, lpOverlapped=0x0 | out: lpBuffer=0x22a8f68*, lpNumberOfBytesRead=0x2293a28*=0x14000, lpOverlapped=0x0) returned 1 [0223.653] ReadFile (in: hFile=0x1e0, lpBuffer=0x286f98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x22939cc, lpOverlapped=0x0 | out: lpBuffer=0x286f98*, lpNumberOfBytesRead=0x22939cc*=0x1000, lpOverlapped=0x0) returned 1 [0223.654] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0xdbba0, lpNewFilePointer=0x0, dwMoveMethod=0x2293a70 | out: lpNewFilePointer=0x0) returned 1 [0223.655] WriteFile (in: hFile=0x1e0, lpBuffer=0x2293f78*, nNumberOfBytesToWrite=0x14000, lpNumberOfBytesWritten=0x22939dc, lpOverlapped=0x0 | out: lpBuffer=0x2293f78*, lpNumberOfBytesWritten=0x22939dc*=0x14000, lpOverlapped=0x0) returned 1 [0223.655] WriteFile (in: hFile=0x1e0, lpBuffer=0x286f98*, nNumberOfBytesToWrite=0xff0, lpNumberOfBytesWritten=0x2293a58, lpOverlapped=0x0 | out: lpBuffer=0x286f98*, lpNumberOfBytesWritten=0x2293a58*=0xff0, lpOverlapped=0x0) returned 1 [0223.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286f98 | out: hHeap=0x1f0000) returned 1 [0223.656] CloseHandle (hObject=0x1e0) returned 1 [0226.718] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2286c8 [0226.718] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238320 [0226.719] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238398 [0226.719] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x2287e8 [0226.719] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cb0 [0226.719] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c30 [0226.719] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x238a30 [0226.719] GetLastError () returned 0x0 [0226.719] CryptAcquireContextA (in: phProv=0x2293a98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2293a98*=0x2133d8) returned 1 [0226.720] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238320 | out: pbBuffer=0x238320) returned 1 [0226.720] CryptReleaseContext (hProv=0x2133d8, dwFlags=0x0) returned 1 [0226.720] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0226.720] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238320 [0226.720] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238410 [0226.720] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c20 [0226.720] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0226.721] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0226.721] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c20 | out: hHeap=0x1f0000) returned 1 [0226.721] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8480 [0226.721] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210018 [0226.721] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x235de8 [0226.721] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238320 [0226.721] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2856c8 [0226.721] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f50 [0226.721] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235f20 [0226.722] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238690 [0226.722] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2853b0 [0226.722] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ae0 [0226.722] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238730 [0226.722] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210078 [0226.722] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389e0 [0226.722] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238640 [0226.722] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffa0 [0226.722] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffa0 | out: hHeap=0x1f0000) returned 1 [0226.722] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238640 | out: hHeap=0x1f0000) returned 1 [0226.722] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389e0 | out: hHeap=0x1f0000) returned 1 [0226.722] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210078 | out: hHeap=0x1f0000) returned 1 [0226.722] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238730 | out: hHeap=0x1f0000) returned 1 [0226.722] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ae0 | out: hHeap=0x1f0000) returned 1 [0226.723] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2853b0 | out: hHeap=0x1f0000) returned 1 [0226.723] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238690 | out: hHeap=0x1f0000) returned 1 [0226.723] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235f20 | out: hHeap=0x1f0000) returned 1 [0226.723] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238e88 [0226.723] GetLastError () returned 0x0 [0226.723] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x2293628 | out: lpSystemTimeAsFileTime=0x2293628) [0226.723] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238a50 [0226.723] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2386e0 [0226.723] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c70 [0226.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c70 | out: hHeap=0x1f0000) returned 1 [0226.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2386e0 | out: hHeap=0x1f0000) returned 1 [0226.724] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238640 [0226.724] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c10 [0226.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c10 | out: hHeap=0x1f0000) returned 1 [0226.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238640 | out: hHeap=0x1f0000) returned 1 [0226.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a50 | out: hHeap=0x1f0000) returned 1 [0226.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0226.724] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238d38 [0226.724] GetLastError () returned 0x0 [0226.725] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\jvm.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\jvm.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2293998, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0226.725] GetFileType (hFile=0x174) returned 0x1 [0226.726] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28ffe0 [0226.726] SetFilePointerEx (in: hFile=0x174, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2293920 | out: lpNewFilePointer=0x0) returned 1 [0226.726] GetLastError () returned 0xb7 [0226.726] CloseHandle (hObject=0x174) returned 1 [0226.727] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212be0 [0226.727] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x230258 [0226.727] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212be0 | out: hHeap=0x1f0000) returned 1 [0226.727] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x11e) returned 0x210390 [0226.727] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0226.728] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\jvm.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\jvm.dll"), lpNewFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\jvm.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\jvm.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwFlags=0x2) returned 0 [0226.728] GetLastError () returned 0x20 [0226.728] GetLastError () returned 0x20 [0226.728] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b1f9e6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b1f9e6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b1f9e6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x58f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Xusage.txt", cAlternateFileName="")) returned 1 [0226.728] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0226.728] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235c48 [0226.728] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221a00 [0226.728] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235c48 | out: hHeap=0x1f0000) returned 1 [0226.729] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0226.729] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0226.729] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\xusage.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0226.730] GetFileType (hFile=0x174) returned 0x1 [0226.730] CloseHandle (hObject=0x174) returned 1 [0226.730] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2132c8 [0226.731] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\xusage.txt"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b1f9e6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b1f9e6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b1f9e6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x58f)) returned 1 [0226.731] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2132c8 | out: hHeap=0x1f0000) returned 1 [0226.731] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0226.731] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0226.731] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b1f9e6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b1f9e6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b1f9e6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x58f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Xusage.txt", cAlternateFileName="")) returned 0 [0226.731] FindClose (in: hFindFile=0x24e600 | out: hFindFile=0x24e600) returned 1 [0226.731] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0226.732] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ee88 | out: hHeap=0x1f0000) returned 1 [0226.732] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0226.732] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228488 | out: hHeap=0x1f0000) returned 1 [0226.732] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236260 | out: hHeap=0x1f0000) returned 1 [0226.732] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220490 | out: hHeap=0x1f0000) returned 1 [0226.732] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0226.732] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235908 | out: hHeap=0x1f0000) returned 1 [0226.732] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226328 | out: hHeap=0x1f0000) returned 1 [0226.733] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262188 | out: hHeap=0x1f0000) returned 1 [0226.733] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0226.733] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2349c8 | out: hHeap=0x1f0000) returned 1 [0226.733] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228488 [0226.733] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0226.733] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22ee88 [0226.733] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236260 [0226.733] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\*", lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe1f09, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xaa80821a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24ec00 [0226.737] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235f20 [0226.737] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236260 | out: hHeap=0x1f0000) returned 1 [0226.737] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0226.737] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe1f09, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xaa80821a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0226.739] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235700 [0226.739] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235f20 | out: hHeap=0x1f0000) returned 1 [0226.739] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0226.739] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0226.739] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x95, dwReserved0=0x0, dwReserved1=0x3, cFileName="accessibility.properties", cAlternateFileName="ACCESS~1.PRO")) returned 1 [0226.739] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228950 [0226.740] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236260 [0226.740] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0226.740] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236260 | out: hHeap=0x1f0000) returned 1 [0226.740] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0226.740] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228950 | out: hHeap=0x1f0000) returned 1 [0226.741] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\accessibility.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\accessibility.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0226.743] GetFileType (hFile=0x174) returned 0x1 [0226.743] CloseHandle (hObject=0x174) returned 1 [0226.744] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0226.744] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\accessibility.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\accessibility.properties"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x95)) returned 1 [0226.744] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0226.744] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0226.745] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0226.745] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0226.745] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0226.745] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe451d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="amd64", cAlternateFileName="")) returned 1 [0226.745] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235de8 [0226.745] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0226.745] lstrcmpW (lpString1="amd64", lpString2=".") returned 1 [0226.745] lstrcmpW (lpString1="amd64", lpString2="..") returned 1 [0226.746] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204df0 [0226.746] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235908 [0226.746] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105ca28, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="applet", cAlternateFileName="")) returned 1 [0226.746] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235c48 [0226.746] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235de8 | out: hHeap=0x1f0000) returned 1 [0226.746] lstrcmpW (lpString1="applet", lpString2=".") returned 1 [0226.746] lstrcmpW (lpString1="applet", lpString2="..") returned 1 [0226.746] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238cc8 [0226.746] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235de8 [0226.747] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204df0 | out: hHeap=0x1f0000) returned 1 [0226.747] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x562, dwReserved0=0x0, dwReserved1=0x3, cFileName="calendars.properties", cAlternateFileName="CALEND~1.PRO")) returned 1 [0226.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c58 [0226.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235f20 [0226.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221968 [0226.747] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235f20 | out: hHeap=0x1f0000) returned 1 [0226.747] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235c48 | out: hHeap=0x1f0000) returned 1 [0226.747] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c58 | out: hHeap=0x1f0000) returned 1 [0226.748] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\calendars.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\calendars.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0226.749] GetFileType (hFile=0x174) returned 0x1 [0226.750] CloseHandle (hObject=0x174) returned 1 [0226.750] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2133d8 [0226.751] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\calendars.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\calendars.properties"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x562)) returned 1 [0226.751] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2133d8 | out: hHeap=0x1f0000) returned 1 [0226.751] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213818 [0226.751] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0226.751] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213818 | out: hHeap=0x1f0000) returned 1 [0226.751] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0226.751] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa7bbd53, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xaa7bbd53, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xaa80821a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2e56fa, dwReserved0=0x0, dwReserved1=0x3, cFileName="charsets.jar", cAlternateFileName="")) returned 1 [0226.752] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0226.752] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235c48 [0227.113] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2217a0 [0227.113] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235c48 | out: hHeap=0x1f0000) returned 1 [0227.113] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0227.113] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0227.114] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\charsets.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\charsets.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0227.114] GetFileType (hFile=0x22c) returned 0x1 [0227.114] CloseHandle (hObject=0x22c) returned 1 [0227.115] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fab8 [0227.115] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\charsets.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\charsets.jar"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa7bbd53, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xaa7bbd53, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xaa80821a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2e56fa)) returned 1 [0227.115] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fab8 | out: hHeap=0x1f0000) returned 1 [0227.115] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0227.115] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0227.115] GetLastError () returned 0x0 [0227.116] CryptAcquireContextA (in: phProv=0x2293e98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2293e98*=0x212c68) returned 1 [0227.117] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2381b8 | out: pbBuffer=0x2381b8) returned 1 [0227.117] CryptReleaseContext (hProv=0x212c68, dwFlags=0x0) returned 1 [0227.117] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0227.117] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x254980 [0227.117] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x237068 [0227.117] QueryPerformanceCounter (in: lpPerformanceCount=0x2293e2c | out: lpPerformanceCount=0x2293e2c*=38448609402) returned 1 [0227.117] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x2293e6c | out: lpSystemTimeAsFileTime=0x2293e6c) [0227.118] QueryPerformanceCounter (in: lpPerformanceCount=0x2293e2c | out: lpPerformanceCount=0x2293e2c*=38448647443) returned 1 [0227.118] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x2293e6c | out: lpSystemTimeAsFileTime=0x2293e6c) [0227.118] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238d38 [0227.118] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x252370 [0227.118] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x237b58 [0227.118] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x233228 [0227.118] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff70 [0227.118] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2067d8 [0227.118] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff28 [0227.119] GetLastError () returned 0x0 [0227.119] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\charsets.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\charsets.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x2293dfc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0227.119] GetFileType (hFile=0x22c) returned 0x1 [0227.119] SetFilePointerEx (in: hFile=0x22c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2293e68 | out: lpNewFilePointer=0x0) returned 1 [0227.120] ReadFile (in: hFile=0x22c, lpBuffer=0x22a9368, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x2293e40, lpOverlapped=0x0 | out: lpBuffer=0x22a9368*, lpNumberOfBytesRead=0x2293e40*=0x14000, lpOverlapped=0x0) returned 1 [0227.124] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x286f98 [0227.126] ReadFile (in: hFile=0x22c, lpBuffer=0x286f98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2293de4, lpOverlapped=0x0 | out: lpBuffer=0x286f98*, lpNumberOfBytesRead=0x2293de4*=0x1000, lpOverlapped=0x0) returned 1 [0227.127] SetFilePointerEx (in: hFile=0x22c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2293e70 | out: lpNewFilePointer=0x0) returned 1 [0227.127] WriteFile (in: hFile=0x22c, lpBuffer=0x2294378*, nNumberOfBytesToWrite=0x14000, lpNumberOfBytesWritten=0x2293ddc, lpOverlapped=0x0 | out: lpBuffer=0x2294378*, lpNumberOfBytesWritten=0x2293ddc*=0x14000, lpOverlapped=0x0) returned 1 [0227.129] WriteFile (in: hFile=0x22c, lpBuffer=0x286f98*, nNumberOfBytesToWrite=0xff0, lpNumberOfBytesWritten=0x2293e08, lpOverlapped=0x0 | out: lpBuffer=0x286f98*, lpNumberOfBytesWritten=0x2293e08*=0xff0, lpOverlapped=0x0) returned 1 [0227.129] SetFilePointerEx (in: hFile=0x22c, liDistanceToMove=0x15f90, lpNewFilePointer=0x0, dwMoveMethod=0x2293e50 | out: lpNewFilePointer=0x0) returned 1 [0227.129] ReadFile (in: hFile=0x22c, lpBuffer=0x22a9368, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x2293e28, lpOverlapped=0x0 | out: lpBuffer=0x22a9368*, lpNumberOfBytesRead=0x2293e28*=0x14000, lpOverlapped=0x0) returned 1 [0227.130] ReadFile (in: hFile=0x22c, lpBuffer=0x286f98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2293dcc, lpOverlapped=0x0 | out: lpBuffer=0x286f98*, lpNumberOfBytesRead=0x2293dcc*=0x1000, lpOverlapped=0x0) returned 1 [0227.131] SetFilePointerEx (in: hFile=0x22c, liDistanceToMove=0x15f90, lpNewFilePointer=0x0, dwMoveMethod=0x2293e70 | out: lpNewFilePointer=0x0) returned 1 [0227.131] WriteFile (in: hFile=0x22c, lpBuffer=0x2294378*, nNumberOfBytesToWrite=0x14000, lpNumberOfBytesWritten=0x2293ddc, lpOverlapped=0x0 | out: lpBuffer=0x2294378*, lpNumberOfBytesWritten=0x2293ddc*=0x14000, lpOverlapped=0x0) returned 1 [0227.133] WriteFile (in: hFile=0x22c, lpBuffer=0x286f98*, nNumberOfBytesToWrite=0xff0, lpNumberOfBytesWritten=0x2293e08, lpOverlapped=0x0 | out: lpBuffer=0x286f98*, lpNumberOfBytesWritten=0x2293e08*=0xff0, lpOverlapped=0x0) returned 1 [0227.133] SetFilePointerEx (in: hFile=0x22c, liDistanceToMove=0xdbba0, lpNewFilePointer=0x0, dwMoveMethod=0x2293e50 | out: lpNewFilePointer=0x0) returned 1 [0227.133] ReadFile (in: hFile=0x22c, lpBuffer=0x22a9368, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x2293e28, lpOverlapped=0x0 | out: lpBuffer=0x22a9368*, lpNumberOfBytesRead=0x2293e28*=0x14000, lpOverlapped=0x0) returned 1 [0227.137] ReadFile (in: hFile=0x22c, lpBuffer=0x286f98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2293dcc, lpOverlapped=0x0 | out: lpBuffer=0x286f98*, lpNumberOfBytesRead=0x2293dcc*=0x1000, lpOverlapped=0x0) returned 1 [0227.138] SetFilePointerEx (in: hFile=0x22c, liDistanceToMove=0xdbba0, lpNewFilePointer=0x0, dwMoveMethod=0x2293e70 | out: lpNewFilePointer=0x0) returned 1 [0227.139] WriteFile (in: hFile=0x22c, lpBuffer=0x2294378*, nNumberOfBytesToWrite=0x14000, lpNumberOfBytesWritten=0x2293ddc, lpOverlapped=0x0 | out: lpBuffer=0x2294378*, lpNumberOfBytesWritten=0x2293ddc*=0x14000, lpOverlapped=0x0) returned 1 [0227.140] WriteFile (in: hFile=0x22c, lpBuffer=0x286f98*, nNumberOfBytesToWrite=0xff0, lpNumberOfBytesWritten=0x2293e58, lpOverlapped=0x0 | out: lpBuffer=0x286f98*, lpNumberOfBytesWritten=0x2293e58*=0xff0, lpOverlapped=0x0) returned 1 [0227.141] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286f98 | out: hHeap=0x1f0000) returned 1 [0227.141] CloseHandle (hObject=0x22c) returned 1 [0228.526] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228638 [0228.526] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2382a8 [0228.526] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2382f8 [0228.526] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x228680 [0228.527] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c30 [0228.527] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cb0 [0228.527] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x238ba0 [0228.527] GetLastError () returned 0x0 [0228.527] CryptAcquireContextA (in: phProv=0x2293e98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2293e98*=0x213020) returned 1 [0228.528] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2383e8 | out: pbBuffer=0x2383e8) returned 1 [0228.528] CryptReleaseContext (hProv=0x213020, dwFlags=0x0) returned 1 [0228.529] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0228.529] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2384b0 [0228.529] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2382a8 [0228.529] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239010 [0228.529] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0228.529] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0228.529] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239010 | out: hHeap=0x1f0000) returned 1 [0228.529] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8690 [0228.529] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210258 [0228.529] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x235e50 [0228.529] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2383e8 [0228.529] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2856c8 [0228.529] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c50 [0228.529] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235eb8 [0228.529] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238410 [0228.529] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2852a8 [0228.529] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ad0 [0228.530] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0228.530] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0228.530] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b80 [0228.530] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238690 [0228.530] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210198 [0228.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0228.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238690 | out: hHeap=0x1f0000) returned 1 [0228.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b80 | out: hHeap=0x1f0000) returned 1 [0228.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0228.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0228.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ad0 | out: hHeap=0x1f0000) returned 1 [0228.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2852a8 | out: hHeap=0x1f0000) returned 1 [0228.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0228.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235eb8 | out: hHeap=0x1f0000) returned 1 [0228.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238ec0 [0228.531] GetLastError () returned 0x0 [0228.531] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x2293a28 | out: lpSystemTimeAsFileTime=0x2293a28) [0228.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238ad0 [0228.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0228.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f50 [0228.531] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f50 | out: hHeap=0x1f0000) returned 1 [0228.531] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0228.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0228.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f10 [0228.532] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f10 | out: hHeap=0x1f0000) returned 1 [0228.532] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0228.532] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ad0 | out: hHeap=0x1f0000) returned 1 [0228.532] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0228.532] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238fa0 [0228.532] GetLastError () returned 0x0 [0228.532] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\charsets.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\charsets.jar"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2293d98, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0228.533] GetFileType (hFile=0x23c) returned 0x1 [0228.533] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x288fa8 [0228.533] SetFilePointerEx (in: hFile=0x23c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2293d20 | out: lpNewFilePointer=0x0) returned 1 [0228.533] GetLastError () returned 0xb7 [0228.533] CloseHandle (hObject=0x23c) returned 1 [0228.534] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0228.534] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fb50 [0228.534] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0228.534] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x11e) returned 0x210390 [0228.534] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0228.534] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\charsets.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\charsets.jar"), lpNewFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\charsets.jar.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\charsets.jar.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwFlags=0x2) returned 0 [0228.534] GetLastError () returned 0x20 [0228.534] GetLastError () returned 0x20 [0228.535] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x14983, dwReserved0=0x0, dwReserved1=0x3, cFileName="classlist", cAlternateFileName="CLASSL~1")) returned 1 [0228.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0228.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236260 [0228.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221248 [0228.535] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236260 | out: hHeap=0x1f0000) returned 1 [0228.535] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0228.535] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0228.536] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\classlist" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\classlist"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0228.536] GetFileType (hFile=0x23c) returned 0x1 [0228.537] CloseHandle (hObject=0x23c) returned 1 [0228.537] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220058 [0228.537] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\classlist" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\classlist"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x14983)) returned 1 [0228.537] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220058 | out: hHeap=0x1f0000) returned 1 [0228.537] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f770 [0228.537] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f770 | out: hHeap=0x1f0000) returned 1 [0228.537] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105e2a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="cmm", cAlternateFileName="")) returned 1 [0228.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235e50 [0228.538] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0228.538] lstrcmpW (lpString1="cmm", lpString2=".") returned 1 [0228.538] lstrcmpW (lpString1="cmm", lpString2="..") returned 1 [0228.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x48) returned 0x2261e8 [0228.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235eb8 [0228.538] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238cc8 | out: hHeap=0x1f0000) returned 1 [0228.538] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x15ac, dwReserved0=0x0, dwReserved1=0x3, cFileName="content-types.properties", cAlternateFileName="CONTEN~1.PRO")) returned 1 [0228.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228a70 [0228.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2357d0 [0228.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0228.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2357d0 | out: hHeap=0x1f0000) returned 1 [0228.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235e50 | out: hHeap=0x1f0000) returned 1 [0228.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228a70 | out: hHeap=0x1f0000) returned 1 [0228.540] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\content-types.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\content-types.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0228.540] GetFileType (hFile=0x23c) returned 0x1 [0228.540] CloseHandle (hObject=0x23c) returned 1 [0228.541] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0228.541] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\content-types.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\content-types.properties"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x15ac)) returned 1 [0228.541] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0228.541] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0228.541] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0228.541] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0228.541] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0228.541] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x101a, dwReserved0=0x0, dwReserved1=0x3, cFileName="currency.data", cAlternateFileName="CURREN~1.DAT")) returned 1 [0228.542] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0228.542] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2359d8 [0228.542] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220cf0 [0228.542] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2359d8 | out: hHeap=0x1f0000) returned 1 [0228.542] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0228.542] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0228.543] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\currency.data" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\currency.data"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0228.543] GetFileType (hFile=0x23c) returned 0x1 [0228.543] CloseHandle (hObject=0x23c) returned 1 [0228.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21ffe0 [0228.544] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\currency.data" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\currency.data"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x101a)) returned 1 [0228.544] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ffe0 | out: hHeap=0x1f0000) returned 1 [0228.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220580 [0228.544] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220580 | out: hHeap=0x1f0000) returned 1 [0228.544] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa10e432c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="deploy", cAlternateFileName="")) returned 1 [0228.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235ff0 [0228.544] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0228.545] lstrcmpW (lpString1="deploy", lpString2=".") returned 1 [0228.545] lstrcmpW (lpString1="deploy", lpString2="..") returned 1 [0228.545] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235e50 [0228.545] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236398 [0228.545] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2261e8 | out: hHeap=0x1f0000) returned 1 [0228.545] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ed9405, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8ed9405, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa900a6f7, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4ce7de, dwReserved0=0x0, dwReserved1=0x3, cFileName="deploy.jar", cAlternateFileName="")) returned 1 [0228.545] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0228.545] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236058 [0228.545] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221118 [0228.545] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236058 | out: hHeap=0x1f0000) returned 1 [0228.545] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235ff0 | out: hHeap=0x1f0000) returned 1 [0228.546] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0228.546] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0228.546] GetFileType (hFile=0x23c) returned 0x1 [0228.547] CloseHandle (hObject=0x23c) returned 1 [0228.547] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fb30 [0228.548] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy.jar"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ed9405, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8ed9405, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa900a6f7, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4ce7de)) returned 1 [0228.548] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fb30 | out: hHeap=0x1f0000) returned 1 [0228.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220490 [0228.548] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220490 | out: hHeap=0x1f0000) returned 1 [0228.548] GetLastError () returned 0x0 [0228.549] CryptAcquireContextA (in: phProv=0x2293e98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2293e98*=0x212d78) returned 1 [0228.550] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238398 | out: pbBuffer=0x238398) returned 1 [0228.550] CryptReleaseContext (hProv=0x212d78, dwFlags=0x0) returned 1 [0228.550] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0228.550] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x252370 [0228.550] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2374c8 [0228.550] QueryPerformanceCounter (in: lpPerformanceCount=0x2293e2c | out: lpPerformanceCount=0x2293e2c*=38591925148) returned 1 [0228.551] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x2293e6c | out: lpSystemTimeAsFileTime=0x2293e6c) [0228.551] QueryPerformanceCounter (in: lpPerformanceCount=0x2293e2c | out: lpPerformanceCount=0x2293e2c*=38591962745) returned 1 [0228.551] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x2293e6c | out: lpSystemTimeAsFileTime=0x2293e6c) [0228.551] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238de0 [0228.551] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x254980 [0228.551] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2375e0 [0228.551] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x232ba8 [0228.551] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2100a8 [0228.552] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2067d8 [0228.552] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff28 [0228.552] GetLastError () returned 0x0 [0228.553] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x2293dfc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0228.553] GetFileType (hFile=0x23c) returned 0x1 [0228.554] SetFilePointerEx (in: hFile=0x23c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2293e68 | out: lpNewFilePointer=0x0) returned 1 [0228.554] ReadFile (in: hFile=0x23c, lpBuffer=0x22a9368, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x2293e40, lpOverlapped=0x0 | out: lpBuffer=0x22a9368*, lpNumberOfBytesRead=0x2293e40*=0x14000, lpOverlapped=0x0) returned 1 [0228.559] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x288fa8 [0228.560] ReadFile (in: hFile=0x23c, lpBuffer=0x288fa8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2293de4, lpOverlapped=0x0 | out: lpBuffer=0x288fa8*, lpNumberOfBytesRead=0x2293de4*=0x1000, lpOverlapped=0x0) returned 1 [0228.560] SetFilePointerEx (in: hFile=0x23c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2293e70 | out: lpNewFilePointer=0x0) returned 1 [0228.561] WriteFile (in: hFile=0x23c, lpBuffer=0x2294378*, nNumberOfBytesToWrite=0x14000, lpNumberOfBytesWritten=0x2293ddc, lpOverlapped=0x0 | out: lpBuffer=0x2294378*, lpNumberOfBytesWritten=0x2293ddc*=0x14000, lpOverlapped=0x0) returned 1 [0228.562] WriteFile (in: hFile=0x23c, lpBuffer=0x288fa8*, nNumberOfBytesToWrite=0xff0, lpNumberOfBytesWritten=0x2293e08, lpOverlapped=0x0 | out: lpBuffer=0x288fa8*, lpNumberOfBytesWritten=0x2293e08*=0xff0, lpOverlapped=0x0) returned 1 [0228.562] SetFilePointerEx (in: hFile=0x23c, liDistanceToMove=0x15f90, lpNewFilePointer=0x0, dwMoveMethod=0x2293e50 | out: lpNewFilePointer=0x0) returned 1 [0228.562] ReadFile (in: hFile=0x23c, lpBuffer=0x22a9368, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x2293e28, lpOverlapped=0x0 | out: lpBuffer=0x22a9368*, lpNumberOfBytesRead=0x2293e28*=0x14000, lpOverlapped=0x0) returned 1 [0228.563] ReadFile (in: hFile=0x23c, lpBuffer=0x288fa8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2293dcc, lpOverlapped=0x0 | out: lpBuffer=0x288fa8*, lpNumberOfBytesRead=0x2293dcc*=0x1000, lpOverlapped=0x0) returned 1 [0228.563] SetFilePointerEx (in: hFile=0x23c, liDistanceToMove=0x15f90, lpNewFilePointer=0x0, dwMoveMethod=0x2293e70 | out: lpNewFilePointer=0x0) returned 1 [0228.563] WriteFile (in: hFile=0x23c, lpBuffer=0x2294378*, nNumberOfBytesToWrite=0x14000, lpNumberOfBytesWritten=0x2293ddc, lpOverlapped=0x0 | out: lpBuffer=0x2294378*, lpNumberOfBytesWritten=0x2293ddc*=0x14000, lpOverlapped=0x0) returned 1 [0228.564] WriteFile (in: hFile=0x23c, lpBuffer=0x288fa8*, nNumberOfBytesToWrite=0xff0, lpNumberOfBytesWritten=0x2293e08, lpOverlapped=0x0 | out: lpBuffer=0x288fa8*, lpNumberOfBytesWritten=0x2293e08*=0xff0, lpOverlapped=0x0) returned 1 [0228.564] SetFilePointerEx (in: hFile=0x23c, liDistanceToMove=0xdbba0, lpNewFilePointer=0x0, dwMoveMethod=0x2293e50 | out: lpNewFilePointer=0x0) returned 1 [0228.564] ReadFile (in: hFile=0x23c, lpBuffer=0x22a9368, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x2293e28, lpOverlapped=0x0 | out: lpBuffer=0x22a9368*, lpNumberOfBytesRead=0x2293e28*=0x14000, lpOverlapped=0x0) returned 1 [0228.936] ReadFile (in: hFile=0x23c, lpBuffer=0x288fa8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2293dcc, lpOverlapped=0x0 | out: lpBuffer=0x288fa8*, lpNumberOfBytesRead=0x2293dcc*=0x1000, lpOverlapped=0x0) returned 1 [0228.943] SetFilePointerEx (in: hFile=0x23c, liDistanceToMove=0xdbba0, lpNewFilePointer=0x0, dwMoveMethod=0x2293e70 | out: lpNewFilePointer=0x0) returned 1 [0228.943] WriteFile (in: hFile=0x23c, lpBuffer=0x2294378*, nNumberOfBytesToWrite=0x14000, lpNumberOfBytesWritten=0x2293ddc, lpOverlapped=0x0 | out: lpBuffer=0x2294378*, lpNumberOfBytesWritten=0x2293ddc*=0x14000, lpOverlapped=0x0) returned 1 [0228.944] WriteFile (in: hFile=0x23c, lpBuffer=0x288fa8*, nNumberOfBytesToWrite=0xff0, lpNumberOfBytesWritten=0x2293e58, lpOverlapped=0x0 | out: lpBuffer=0x288fa8*, lpNumberOfBytesWritten=0x2293e58*=0xff0, lpOverlapped=0x0) returned 1 [0228.945] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x288fa8 | out: hHeap=0x1f0000) returned 1 [0228.945] CloseHandle (hObject=0x23c) returned 1 [0231.647] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228440 [0231.648] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238118 [0231.648] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238078 [0231.648] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x228950 [0231.648] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c50 [0231.648] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c30 [0231.648] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x238a60 [0231.648] GetLastError () returned 0x0 [0231.648] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x2392b0 [0231.649] GetLastError () returned 0x0 [0231.649] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239160 [0231.649] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236538 [0231.649] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238320 [0231.649] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285098 [0231.649] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238af0 [0231.649] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0231.649] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210078 [0231.649] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b00 [0231.649] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0231.650] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210018 [0231.650] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2383e8 [0231.650] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x284f90 [0231.650] GetLastError () returned 0x0 [0231.650] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238a30 [0231.650] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238a00 [0231.650] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ab0 [0231.650] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a00 | out: hHeap=0x1f0000) returned 1 [0231.650] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ad0 [0231.650] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ab0 | out: hHeap=0x1f0000) returned 1 [0231.651] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a30 | out: hHeap=0x1f0000) returned 1 [0231.651] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ab0 [0231.651] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x20fef8 [0231.651] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ab0 | out: hHeap=0x1f0000) returned 1 [0231.651] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210210 [0231.651] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20fef8 | out: hHeap=0x1f0000) returned 1 [0231.651] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ad0 | out: hHeap=0x1f0000) returned 1 [0231.651] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x20fef8 [0231.651] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210198 [0231.651] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20fef8 | out: hHeap=0x1f0000) returned 1 [0231.651] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20fef8 [0231.651] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0231.651] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0231.651] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210210 [0231.651] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204c30 [0231.652] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0231.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bb0 [0231.652] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c30 | out: hHeap=0x1f0000) returned 1 [0231.652] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20fef8 | out: hHeap=0x1f0000) returned 1 [0231.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e90 [0231.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238410 [0231.652] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e90 | out: hHeap=0x1f0000) returned 1 [0231.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204c70 [0231.652] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0231.652] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bb0 | out: hHeap=0x1f0000) returned 1 [0231.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204d90 [0231.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206928 [0231.652] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d90 | out: hHeap=0x1f0000) returned 1 [0231.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238410 [0231.652] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206928 | out: hHeap=0x1f0000) returned 1 [0231.652] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c70 | out: hHeap=0x1f0000) returned 1 [0231.653] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a30 [0231.653] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x20fef8 [0231.653] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a30 | out: hHeap=0x1f0000) returned 1 [0231.653] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210258 [0231.653] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20fef8 | out: hHeap=0x1f0000) returned 1 [0231.653] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204f10 [0231.653] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0231.653] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206868 [0231.653] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f10 | out: hHeap=0x1f0000) returned 1 [0231.653] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206868 | out: hHeap=0x1f0000) returned 1 [0231.653] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0231.653] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0231.653] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0231.653] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285098 | out: hHeap=0x1f0000) returned 1 [0231.653] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0231.654] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239278 [0231.654] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0231.654] CryptAcquireContextA (in: phProv=0x2293e98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2293e98*=0x212e88) returned 1 [0231.655] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238410 | out: pbBuffer=0x238410) returned 1 [0231.655] CryptReleaseContext (hProv=0x212e88, dwFlags=0x0) returned 1 [0231.655] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0231.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238320 [0231.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238118 [0231.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238cc8 [0231.655] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0231.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0231.655] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238cc8 | out: hHeap=0x1f0000) returned 1 [0231.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8428 [0231.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210210 [0231.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x236670 [0231.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238320 [0231.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285098 [0231.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0231.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236468 [0231.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238410 [0231.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2854b8 [0231.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a20 [0231.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385c8 [0231.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210240 [0231.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a70 [0231.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238618 [0231.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210258 [0231.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0231.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238618 | out: hHeap=0x1f0000) returned 1 [0231.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a70 | out: hHeap=0x1f0000) returned 1 [0231.657] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210240 | out: hHeap=0x1f0000) returned 1 [0231.657] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385c8 | out: hHeap=0x1f0000) returned 1 [0231.657] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a20 | out: hHeap=0x1f0000) returned 1 [0231.657] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2854b8 | out: hHeap=0x1f0000) returned 1 [0231.657] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0231.657] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0231.657] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x2391d0 [0231.657] GetLastError () returned 0x0 [0231.657] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238ec0 [0231.657] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0231.657] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0231.657] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0231.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0231.658] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0231.658] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0231.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x24e8c0 [0231.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285bf0 [0231.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0231.658] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0231.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0231.658] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0231.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2854b8 [0231.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0231.658] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0231.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f830 [0231.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x251068 [0231.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x237810 [0231.658] QueryPerformanceCounter (in: lpPerformanceCount=0x22939e8 | out: lpPerformanceCount=0x22939e8*=38902741747) returned 1 [0231.659] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x2293a28 | out: lpSystemTimeAsFileTime=0x2293a28) [0231.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238ba0 [0231.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0231.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e70 [0231.659] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e70 | out: hHeap=0x1f0000) returned 1 [0231.659] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0231.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0231.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f10 [0231.659] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f10 | out: hHeap=0x1f0000) returned 1 [0231.659] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0231.659] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ba0 | out: hHeap=0x1f0000) returned 1 [0231.659] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0231.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x2391d0 [0231.660] GetLastError () returned 0x0 [0231.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0231.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0231.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0231.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238410 [0231.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238528 [0231.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0231.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0231.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238668 [0231.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0231.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x222ee8 [0231.661] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0231.661] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0231.661] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0231.661] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0231.661] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0231.661] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2385c8 [0231.662] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238500 [0231.662] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385c8 | out: hHeap=0x1f0000) returned 1 [0231.662] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0231.662] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238500 | out: hHeap=0x1f0000) returned 1 [0231.663] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0231.663] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x234b90 [0231.663] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b90 | out: hHeap=0x1f0000) returned 1 [0231.663] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0231.663] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0231.663] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210258 [0231.663] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2287a0 [0231.663] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238578 [0231.663] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238640 [0231.663] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238500 [0231.663] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238690 [0231.663] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238640 | out: hHeap=0x1f0000) returned 1 [0231.663] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238578 | out: hHeap=0x1f0000) returned 1 [0231.664] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0231.664] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238618 [0231.664] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238640 [0231.664] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238618 | out: hHeap=0x1f0000) returned 1 [0231.664] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0231.664] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238640 | out: hHeap=0x1f0000) returned 1 [0231.664] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2068c8 [0231.664] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x2a8fb0 [0231.664] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8fb0 | out: hHeap=0x1f0000) returned 1 [0231.664] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2068c8 | out: hHeap=0x1f0000) returned 1 [0231.664] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238668 | out: hHeap=0x1f0000) returned 1 [0231.665] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0231.665] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0231.665] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0231.665] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204f10 [0231.665] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0231.665] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0231.665] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238528 | out: hHeap=0x1f0000) returned 1 [0231.665] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac238 [0231.665] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0231.665] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238690 | out: hHeap=0x1f0000) returned 1 [0231.665] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238500 | out: hHeap=0x1f0000) returned 1 [0231.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2287a0 | out: hHeap=0x1f0000) returned 1 [0231.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0231.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f10 | out: hHeap=0x1f0000) returned 1 [0231.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0231.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0231.666] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac800 [0231.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac800 | out: hHeap=0x1f0000) returned 1 [0231.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ee8 | out: hHeap=0x1f0000) returned 1 [0231.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0231.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0231.667] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0231.667] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0231.667] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0231.667] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0231.667] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0231.667] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abb48 [0231.667] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab8f8 [0231.667] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abb48 | out: hHeap=0x1f0000) returned 1 [0231.667] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab8f8 | out: hHeap=0x1f0000) returned 1 [0231.668] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac238 | out: hHeap=0x1f0000) returned 1 [0231.668] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0231.668] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2854b8 | out: hHeap=0x1f0000) returned 1 [0231.668] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24e8c0 | out: hHeap=0x1f0000) returned 1 [0231.668] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x237928 [0231.668] GetLastError () returned 0x0 [0231.668] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ba0 [0231.669] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389e0 [0232.132] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy.jar"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2293d98, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0232.132] GetFileType (hFile=0x174) returned 0x1 [0232.133] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28bfc0 [0232.133] SetFilePointerEx (in: hFile=0x174, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2293d20 | out: lpNewFilePointer=0x0) returned 1 [0232.134] GetLastError () returned 0xb7 [0232.137] CloseHandle (hObject=0x174) returned 1 [0232.137] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213680 [0232.137] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0232.138] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213680 | out: hHeap=0x1f0000) returned 1 [0232.138] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x11c) returned 0x210cd0 [0232.138] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0232.138] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy.jar"), lpNewFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy.jar.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy.jar.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwFlags=0x2) returned 1 [0232.139] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0232.140] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389e0 | out: hHeap=0x1f0000) returned 1 [0232.140] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ba0 | out: hHeap=0x1f0000) returned 1 [0232.140] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285bf0 | out: hHeap=0x1f0000) returned 1 [0232.140] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285098 | out: hHeap=0x1f0000) returned 1 [0232.140] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0232.140] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d70 | out: hHeap=0x1f0000) returned 1 [0232.140] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236670 | out: hHeap=0x1f0000) returned 1 [0232.140] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0232.140] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8428 | out: hHeap=0x1f0000) returned 1 [0232.141] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237928 | out: hHeap=0x1f0000) returned 1 [0232.141] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0232.141] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0232.141] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x251068 | out: hHeap=0x1f0000) returned 1 [0232.141] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237810 | out: hHeap=0x1f0000) returned 1 [0232.141] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239278 | out: hHeap=0x1f0000) returned 1 [0232.141] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a60 | out: hHeap=0x1f0000) returned 1 [0232.142] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210018 | out: hHeap=0x1f0000) returned 1 [0232.142] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0232.142] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b00 | out: hHeap=0x1f0000) returned 1 [0232.142] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210078 | out: hHeap=0x1f0000) returned 1 [0232.142] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0232.142] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238af0 | out: hHeap=0x1f0000) returned 1 [0232.142] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x284f90 | out: hHeap=0x1f0000) returned 1 [0232.143] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0232.143] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236538 | out: hHeap=0x1f0000) returned 1 [0232.143] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228950 | out: hHeap=0x1f0000) returned 1 [0232.143] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0232.143] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0232.143] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228440 | out: hHeap=0x1f0000) returned 1 [0232.143] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x254980 | out: hHeap=0x1f0000) returned 1 [0232.144] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2375e0 | out: hHeap=0x1f0000) returned 1 [0232.144] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2067d8 | out: hHeap=0x1f0000) returned 1 [0232.144] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff28 | out: hHeap=0x1f0000) returned 1 [0232.144] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2100a8 | out: hHeap=0x1f0000) returned 1 [0232.144] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232ba8 | out: hHeap=0x1f0000) returned 1 [0232.144] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x252370 | out: hHeap=0x1f0000) returned 1 [0232.144] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2374c8 | out: hHeap=0x1f0000) returned 1 [0232.145] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238d00 | out: hHeap=0x1f0000) returned 1 [0232.145] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0232.145] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d9d0 | out: hHeap=0x1f0000) returned 1 [0232.145] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2285a8 | out: hHeap=0x1f0000) returned 1 [0232.145] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0232.145] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa11bdb26, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xaa8ed01b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="ext", cAlternateFileName="")) returned 1 [0232.145] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d68 [0232.145] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0232.146] lstrcmpW (lpString1="ext", lpString2=".") returned 1 [0232.146] lstrcmpW (lpString1="ext", lpString2="..") returned 1 [0232.146] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0232.146] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2150a8 [0232.146] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235e50 | out: hHeap=0x1f0000) returned 1 [0232.146] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf58, dwReserved0=0x0, dwReserved1=0x3, cFileName="flavormap.properties", cAlternateFileName="FLAVOR~1.PRO")) returned 1 [0232.146] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238e88 [0232.146] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a28 [0232.147] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221540 [0232.147] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a28 | out: hHeap=0x1f0000) returned 1 [0232.147] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d68 | out: hHeap=0x1f0000) returned 1 [0232.147] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238e88 | out: hHeap=0x1f0000) returned 1 [0232.151] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\flavormap.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0232.152] GetFileType (hFile=0x174) returned 0x1 [0232.152] CloseHandle (hObject=0x174) returned 1 [0232.153] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212a48 [0232.153] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\flavormap.properties"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf58)) returned 1 [0232.153] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212a48 | out: hHeap=0x1f0000) returned 1 [0232.153] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213680 [0232.153] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0232.154] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213680 | out: hHeap=0x1f0000) returned 1 [0232.154] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0232.154] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xeba, dwReserved0=0x0, dwReserved1=0x3, cFileName="fontconfig.bfc", cAlternateFileName="FONTCO~1.BFC")) returned 1 [0232.154] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0232.154] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a90 [0232.154] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2211b0 [0232.154] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a90 | out: hHeap=0x1f0000) returned 1 [0232.155] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0232.155] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0232.156] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.bfc"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0232.156] GetFileType (hFile=0x174) returned 0x1 [0232.157] CloseHandle (hObject=0x174) returned 1 [0232.157] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21ffe0 [0232.157] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.bfc"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xeba)) returned 1 [0232.158] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ffe0 | out: hHeap=0x1f0000) returned 1 [0232.158] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220058 [0232.158] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220058 | out: hHeap=0x1f0000) returned 1 [0232.158] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2948, dwReserved0=0x0, dwReserved1=0x3, cFileName="fontconfig.properties.src", cAlternateFileName="FONTCO~1.SRC")) returned 1 [0232.158] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2285a8 [0232.158] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214b60 [0232.158] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0232.159] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214b60 | out: hHeap=0x1f0000) returned 1 [0232.159] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0232.159] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2285a8 | out: hHeap=0x1f0000) returned 1 [0232.160] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.properties.src"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0232.160] GetFileType (hFile=0x174) returned 0x1 [0232.160] CloseHandle (hObject=0x174) returned 1 [0232.161] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0232.161] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.properties.src"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2948)) returned 1 [0232.161] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0232.161] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0232.162] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0232.162] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa122f229, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="fonts", cAlternateFileName="")) returned 1 [0232.162] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a28 [0232.162] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0232.162] lstrcmpW (lpString1="fonts", lpString2=".") returned 1 [0232.162] lstrcmpW (lpString1="fonts", lpString2="..") returned 1 [0232.162] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214fd8 [0232.163] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x368a, dwReserved0=0x0, dwReserved1=0x3, cFileName="hijrah-config-umalqura.properties", cAlternateFileName="HIJRAH~1.PRO")) returned 1 [0232.163] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8428 [0232.163] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a90 [0232.163] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a4d0 [0232.163] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a90 | out: hHeap=0x1f0000) returned 1 [0232.163] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a28 | out: hHeap=0x1f0000) returned 1 [0232.163] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8428 | out: hHeap=0x1f0000) returned 1 [0232.164] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0232.164] GetFileType (hFile=0x174) returned 0x1 [0232.164] CloseHandle (hObject=0x174) returned 1 [0232.165] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a188 [0232.165] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x368a)) returned 1 [0232.165] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a188 | out: hHeap=0x1f0000) returned 1 [0232.165] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a038 [0232.165] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0232.165] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a038 | out: hHeap=0x1f0000) returned 1 [0232.165] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0232.165] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa12313ee, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="images", cAlternateFileName="")) returned 1 [0232.165] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a28 [0232.166] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a4d0 | out: hHeap=0x1f0000) returned 1 [0232.166] lstrcmpW (lpString1="images", lpString2=".") returned 1 [0232.166] lstrcmpW (lpString1="images", lpString2="..") returned 1 [0232.166] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd8) returned 0x21c048 [0232.166] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214af8 [0232.166] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0232.166] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x38, dwReserved0=0x0, dwReserved1=0x3, cFileName="javafx.properties", cAlternateFileName="JAVAFX~1.PRO")) returned 1 [0232.166] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238d00 [0232.166] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a90 [0232.166] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220eb8 [0232.166] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a90 | out: hHeap=0x1f0000) returned 1 [0232.166] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a28 | out: hHeap=0x1f0000) returned 1 [0232.167] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238d00 | out: hHeap=0x1f0000) returned 1 [0232.167] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\javafx.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javafx.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0232.167] GetFileType (hFile=0x174) returned 0x1 [0232.168] CloseHandle (hObject=0x174) returned 1 [0232.168] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2134e8 [0232.168] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\javafx.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javafx.properties"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x38)) returned 1 [0232.168] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2134e8 | out: hHeap=0x1f0000) returned 1 [0232.168] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2134e8 [0232.168] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0232.169] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2134e8 | out: hHeap=0x1f0000) returned 1 [0232.169] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0232.169] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8e40a9d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8e40a9d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8e66d0e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xe6827, dwReserved0=0x0, dwReserved1=0x3, cFileName="javaws.jar", cAlternateFileName="")) returned 1 [0232.169] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0232.169] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a28 [0232.169] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220fe8 [0232.169] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a28 | out: hHeap=0x1f0000) returned 1 [0232.169] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0232.169] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0232.170] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javaws.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0232.170] GetLastError () returned 0x2 [0232.170] GetLastError () returned 0x2 [0232.170] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1c6de, dwReserved0=0x0, dwReserved1=0x3, cFileName="jce.jar", cAlternateFileName="")) returned 1 [0232.170] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a28 [0232.170] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0232.171] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jce.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0232.171] GetFileType (hFile=0x174) returned 0x1 [0232.171] CloseHandle (hObject=0x174) returned 1 [0232.172] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d00 [0232.172] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jce.jar"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1c6de)) returned 1 [0232.172] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d00 | out: hHeap=0x1f0000) returned 1 [0232.172] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214dd0 [0232.172] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214dd0 | out: hHeap=0x1f0000) returned 1 [0232.172] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1295634, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="jfr", cAlternateFileName="")) returned 1 [0232.172] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d00 [0232.172] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a28 | out: hHeap=0x1f0000) returned 1 [0232.172] lstrcmpW (lpString1="jfr", lpString2=".") returned 1 [0232.172] lstrcmpW (lpString1="jfr", lpString2="..") returned 1 [0232.173] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a28 [0232.173] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x88dc5, dwReserved0=0x0, dwReserved1=0x3, cFileName="jfr.jar", cAlternateFileName="")) returned 1 [0232.173] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214b60 [0232.173] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d00 | out: hHeap=0x1f0000) returned 1 [0232.173] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0232.173] GetFileType (hFile=0x174) returned 0x1 [0232.174] CloseHandle (hObject=0x174) returned 1 [0232.174] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d00 [0232.174] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr.jar"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x88dc5)) returned 1 [0232.174] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d00 | out: hHeap=0x1f0000) returned 1 [0232.174] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214e38 [0232.175] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214e38 | out: hHeap=0x1f0000) returned 1 [0232.175] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x848c, dwReserved0=0x0, dwReserved1=0x3, cFileName="jfxswt.jar", cAlternateFileName="")) returned 1 [0232.175] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0232.175] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a90 [0232.175] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221b30 [0232.175] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a90 | out: hHeap=0x1f0000) returned 1 [0232.175] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214b60 | out: hHeap=0x1f0000) returned 1 [0232.175] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0232.175] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfxswt.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0232.176] GetFileType (hFile=0x174) returned 0x1 [0232.176] CloseHandle (hObject=0x174) returned 1 [0232.176] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0232.176] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfxswt.jar"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x848c)) returned 1 [0232.176] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0232.177] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0232.177] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0232.177] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa76f896, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xaa76f896, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xaa76f896, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8eb80, dwReserved0=0x0, dwReserved1=0x3, cFileName="jsse.jar", cAlternateFileName="")) returned 1 [0232.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0232.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214b60 [0232.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2215d8 [0232.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214b60 | out: hHeap=0x1f0000) returned 1 [0232.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0232.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0232.612] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jsse.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0232.612] GetFileType (hFile=0x210) returned 0x1 [0232.612] CloseHandle (hObject=0x210) returned 1 [0232.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0232.613] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jsse.jar"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa76f896, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xaa76f896, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xaa76f896, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8eb80)) returned 1 [0232.613] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0232.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fef0 [0232.613] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fef0 | out: hHeap=0x1f0000) returned 1 [0232.613] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1082, dwReserved0=0x0, dwReserved1=0x3, cFileName="jvm.hprof.txt", cAlternateFileName="JVMHPR~1.TXT")) returned 1 [0232.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0232.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214b60 [0232.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221a98 [0232.613] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214b60 | out: hHeap=0x1f0000) returned 1 [0232.613] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0232.613] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0232.614] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jvm.hprof.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0232.614] GetFileType (hFile=0x210) returned 0x1 [0232.614] CloseHandle (hObject=0x210) returned 1 [0232.615] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fb30 [0232.615] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jvm.hprof.txt"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1082)) returned 1 [0232.615] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fb30 | out: hHeap=0x1f0000) returned 1 [0232.615] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fab8 [0232.615] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fab8 | out: hHeap=0x1f0000) returned 1 [0232.615] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x997, dwReserved0=0x0, dwReserved1=0x3, cFileName="logging.properties", cAlternateFileName="LOGGIN~1.PRO")) returned 1 [0232.615] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238d38 [0232.615] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214b60 [0232.615] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2212e0 [0232.615] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214b60 | out: hHeap=0x1f0000) returned 1 [0232.615] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0232.615] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238d38 | out: hHeap=0x1f0000) returned 1 [0232.616] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\logging.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\logging.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0232.616] GetFileType (hFile=0x210) returned 0x1 [0232.616] CloseHandle (hObject=0x210) returned 1 [0232.617] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212c68 [0232.617] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\logging.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\logging.properties"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x997)) returned 1 [0232.617] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212c68 | out: hHeap=0x1f0000) returned 1 [0232.617] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213790 [0232.617] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0232.617] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213790 | out: hHeap=0x1f0000) returned 1 [0232.617] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0232.617] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1389711, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="management", cAlternateFileName="MANAGE~1")) returned 1 [0232.617] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0232.617] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d68 [0232.617] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221410 [0232.617] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d68 | out: hHeap=0x1f0000) returned 1 [0232.617] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0232.617] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0232.618] lstrcmpW (lpString1="management", lpString2=".") returned 1 [0232.618] lstrcmpW (lpString1="management", lpString2="..") returned 1 [0232.618] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fab8 [0232.618] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x17d, dwReserved0=0x0, dwReserved1=0x3, cFileName="management-agent.jar", cAlternateFileName="MANAGE~1.JAR")) returned 1 [0232.618] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238d38 [0232.618] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d68 [0232.618] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221b30 [0232.618] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d68 | out: hHeap=0x1f0000) returned 1 [0232.618] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0232.618] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238d38 | out: hHeap=0x1f0000) returned 1 [0232.619] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\management-agent.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management-agent.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0232.619] GetFileType (hFile=0x210) returned 0x1 [0232.619] CloseHandle (hObject=0x210) returned 1 [0232.619] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e88 [0232.619] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\management-agent.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management-agent.jar"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x17d)) returned 1 [0232.620] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e88 | out: hHeap=0x1f0000) returned 1 [0232.620] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213790 [0232.620] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213790 | out: hHeap=0x1f0000) returned 1 [0232.620] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x84e, dwReserved0=0x0, dwReserved1=0x3, cFileName="meta-index", cAlternateFileName="META-I~1")) returned 1 [0232.620] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0232.620] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d68 [0232.620] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220e20 [0232.620] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d68 | out: hHeap=0x1f0000) returned 1 [0232.620] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0232.620] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0232.620] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\meta-index" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\meta-index"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0232.621] GetFileType (hFile=0x210) returned 0x1 [0232.621] CloseHandle (hObject=0x210) returned 1 [0232.621] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe00 [0232.621] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\meta-index" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\meta-index"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x84e)) returned 1 [0232.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe00 | out: hHeap=0x1f0000) returned 1 [0232.621] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220490 [0232.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220490 | out: hHeap=0x1f0000) returned 1 [0232.621] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1170, dwReserved0=0x0, dwReserved1=0x3, cFileName="net.properties", cAlternateFileName="NET~1.PRO")) returned 1 [0232.622] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0232.622] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d68 [0232.622] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220cf0 [0232.622] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d68 | out: hHeap=0x1f0000) returned 1 [0232.622] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0232.622] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0232.623] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\net.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\net.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0232.623] GetFileType (hFile=0x210) returned 0x1 [0232.624] CloseHandle (hObject=0x210) returned 1 [0232.624] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd88 [0232.624] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\net.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\net.properties"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1170)) returned 1 [0232.624] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd88 | out: hHeap=0x1f0000) returned 1 [0232.624] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0232.624] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0232.624] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0232.624] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0232.624] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8d81efe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8d81efe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8df45fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1d588b, dwReserved0=0x0, dwReserved1=0x3, cFileName="plugin.jar", cAlternateFileName="")) returned 1 [0232.624] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0232.625] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d68 [0232.625] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221080 [0232.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d68 | out: hHeap=0x1f0000) returned 1 [0232.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0232.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0232.625] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\plugin.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\plugin.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0232.625] GetFileType (hFile=0x210) returned 0x1 [0232.626] CloseHandle (hObject=0x210) returned 1 [0232.626] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0232.626] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\plugin.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\plugin.jar"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8d81efe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8d81efe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8df45fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1d588b)) returned 1 [0232.626] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0232.626] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220490 [0232.627] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220490 | out: hHeap=0x1f0000) returned 1 [0232.627] GetLastError () returned 0x0 [0232.627] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0232.627] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228bd8 [0232.627] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x261b28 [0232.627] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220328 [0232.627] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2390b8 [0232.627] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0232.627] CryptAcquireContextA (in: phProv=0x2293e98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2293e98*=0x212f10) returned 1 [0232.628] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238370 | out: pbBuffer=0x238370) returned 1 [0232.628] CryptReleaseContext (hProv=0x212f10, dwFlags=0x0) returned 1 [0232.629] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0232.629] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x24fd60 [0232.629] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x237068 [0232.629] QueryPerformanceCounter (in: lpPerformanceCount=0x2293e2c | out: lpPerformanceCount=0x2293e2c*=38999769931) returned 1 [0232.629] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x2293e6c | out: lpSystemTimeAsFileTime=0x2293e6c) [0232.629] QueryPerformanceCounter (in: lpPerformanceCount=0x2293e2c | out: lpPerformanceCount=0x2293e2c*=38999794886) returned 1 [0232.629] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x2293e6c | out: lpSystemTimeAsFileTime=0x2293e6c) [0232.629] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238de0 [0232.629] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x254980 [0232.629] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2376f8 [0232.630] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x232ba8 [0232.630] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff70 [0232.630] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206838 [0232.630] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffa0 [0232.630] GetLastError () returned 0x0 [0232.630] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\plugin.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\plugin.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x2293dfc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0232.630] GetFileType (hFile=0x210) returned 0x1 [0232.631] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2293e68 | out: lpNewFilePointer=0x0) returned 1 [0232.655] ReadFile (in: hFile=0x210, lpBuffer=0x22a9368, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x2293e40, lpOverlapped=0x0 | out: lpBuffer=0x22a9368*, lpNumberOfBytesRead=0x2293e40*=0x14000, lpOverlapped=0x0) returned 1 [0232.677] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x289fb0 [0232.677] ReadFile (in: hFile=0x210, lpBuffer=0x289fb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2293de4, lpOverlapped=0x0 | out: lpBuffer=0x289fb0*, lpNumberOfBytesRead=0x2293de4*=0x1000, lpOverlapped=0x0) returned 1 [0232.699] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2293e70 | out: lpNewFilePointer=0x0) returned 1 [0232.699] WriteFile (in: hFile=0x210, lpBuffer=0x2294378*, nNumberOfBytesToWrite=0x14000, lpNumberOfBytesWritten=0x2293ddc, lpOverlapped=0x0 | out: lpBuffer=0x2294378*, lpNumberOfBytesWritten=0x2293ddc*=0x14000, lpOverlapped=0x0) returned 1 [0232.707] WriteFile (in: hFile=0x210, lpBuffer=0x289fb0*, nNumberOfBytesToWrite=0xff0, lpNumberOfBytesWritten=0x2293e08, lpOverlapped=0x0 | out: lpBuffer=0x289fb0*, lpNumberOfBytesWritten=0x2293e08*=0xff0, lpOverlapped=0x0) returned 1 [0232.708] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x15f90, lpNewFilePointer=0x0, dwMoveMethod=0x2293e50 | out: lpNewFilePointer=0x0) returned 1 [0232.708] ReadFile (in: hFile=0x210, lpBuffer=0x22a9368, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x2293e28, lpOverlapped=0x0 | out: lpBuffer=0x22a9368*, lpNumberOfBytesRead=0x2293e28*=0x14000, lpOverlapped=0x0) returned 1 [0232.742] ReadFile (in: hFile=0x210, lpBuffer=0x289fb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2293dcc, lpOverlapped=0x0 | out: lpBuffer=0x289fb0*, lpNumberOfBytesRead=0x2293dcc*=0x1000, lpOverlapped=0x0) returned 1 [0232.743] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x15f90, lpNewFilePointer=0x0, dwMoveMethod=0x2293e70 | out: lpNewFilePointer=0x0) returned 1 [0232.744] WriteFile (in: hFile=0x210, lpBuffer=0x2294378*, nNumberOfBytesToWrite=0x14000, lpNumberOfBytesWritten=0x2293ddc, lpOverlapped=0x0 | out: lpBuffer=0x2294378*, lpNumberOfBytesWritten=0x2293ddc*=0x14000, lpOverlapped=0x0) returned 1 [0232.745] WriteFile (in: hFile=0x210, lpBuffer=0x289fb0*, nNumberOfBytesToWrite=0xff0, lpNumberOfBytesWritten=0x2293e08, lpOverlapped=0x0 | out: lpBuffer=0x289fb0*, lpNumberOfBytesWritten=0x2293e08*=0xff0, lpOverlapped=0x0) returned 1 [0232.745] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0xdbba0, lpNewFilePointer=0x0, dwMoveMethod=0x2293e50 | out: lpNewFilePointer=0x0) returned 1 [0232.746] ReadFile (in: hFile=0x210, lpBuffer=0x22a9368, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x2293e28, lpOverlapped=0x0 | out: lpBuffer=0x22a9368*, lpNumberOfBytesRead=0x2293e28*=0x14000, lpOverlapped=0x0) returned 1 [0232.755] ReadFile (in: hFile=0x210, lpBuffer=0x289fb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2293dcc, lpOverlapped=0x0 | out: lpBuffer=0x289fb0*, lpNumberOfBytesRead=0x2293dcc*=0x1000, lpOverlapped=0x0) returned 1 [0232.795] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0xdbba0, lpNewFilePointer=0x0, dwMoveMethod=0x2293e70 | out: lpNewFilePointer=0x0) returned 1 [0232.796] WriteFile (in: hFile=0x210, lpBuffer=0x2294378*, nNumberOfBytesToWrite=0x14000, lpNumberOfBytesWritten=0x2293ddc, lpOverlapped=0x0 | out: lpBuffer=0x2294378*, lpNumberOfBytesWritten=0x2293ddc*=0x14000, lpOverlapped=0x0) returned 1 [0232.796] WriteFile (in: hFile=0x210, lpBuffer=0x289fb0*, nNumberOfBytesToWrite=0xff0, lpNumberOfBytesWritten=0x2293e58, lpOverlapped=0x0 | out: lpBuffer=0x289fb0*, lpNumberOfBytesWritten=0x2293e58*=0xff0, lpOverlapped=0x0) returned 1 [0232.797] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x289fb0 | out: hHeap=0x1f0000) returned 1 [0232.797] CloseHandle (hObject=0x210) returned 1 [0232.797] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228710 [0232.797] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238668 [0232.797] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238730 [0232.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x228878 [0232.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204b90 [0232.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0232.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x238ae0 [0232.798] GetLastError () returned 0x0 [0232.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238e88 [0232.798] GetLastError () returned 0x0 [0232.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238da8 [0232.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214f08 [0232.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2385c8 [0232.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2857d0 [0232.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b00 [0232.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238618 [0232.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210078 [0232.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a00 [0232.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238690 [0232.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2100a8 [0232.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238578 [0232.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2853b0 [0232.799] GetLastError () returned 0x0 [0232.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238b10 [0232.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238950 [0232.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238990 [0232.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238950 | out: hHeap=0x1f0000) returned 1 [0232.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389b0 [0232.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238990 | out: hHeap=0x1f0000) returned 1 [0232.800] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b10 | out: hHeap=0x1f0000) returned 1 [0232.800] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b10 [0232.800] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210198 [0232.800] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b10 | out: hHeap=0x1f0000) returned 1 [0232.800] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101c8 [0232.800] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0232.800] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389b0 | out: hHeap=0x1f0000) returned 1 [0232.800] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210198 [0232.800] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210210 [0232.800] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0232.800] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210198 [0232.800] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0232.800] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0232.800] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210210 [0232.800] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204e70 [0232.801] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0232.801] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f50 [0232.801] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e70 | out: hHeap=0x1f0000) returned 1 [0232.801] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0232.801] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f30 [0232.801] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238758 [0232.801] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f30 | out: hHeap=0x1f0000) returned 1 [0232.801] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204dd0 [0232.801] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238758 | out: hHeap=0x1f0000) returned 1 [0232.801] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f50 | out: hHeap=0x1f0000) returned 1 [0232.801] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204f50 [0232.801] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206808 [0232.801] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f50 | out: hHeap=0x1f0000) returned 1 [0232.801] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2386b8 [0232.802] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206808 | out: hHeap=0x1f0000) returned 1 [0232.802] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204dd0 | out: hHeap=0x1f0000) returned 1 [0232.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238820 [0232.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101e0 [0232.802] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238820 | out: hHeap=0x1f0000) returned 1 [0232.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0232.802] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0232.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204dd0 [0232.802] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0232.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206658 [0232.802] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204dd0 | out: hHeap=0x1f0000) returned 1 [0232.802] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206658 | out: hHeap=0x1f0000) returned 1 [0232.802] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2386b8 | out: hHeap=0x1f0000) returned 1 [0232.802] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238668 | out: hHeap=0x1f0000) returned 1 [0232.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0232.803] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2857d0 | out: hHeap=0x1f0000) returned 1 [0232.803] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385c8 | out: hHeap=0x1f0000) returned 1 [0232.803] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238e50 [0232.803] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238500 [0232.803] CryptAcquireContextA (in: phProv=0x2293e98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2293e98*=0x2132c8) returned 1 [0232.804] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238500 | out: pbBuffer=0x238500) returned 1 [0232.804] CryptReleaseContext (hProv=0x2132c8, dwFlags=0x0) returned 1 [0232.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238500 | out: hHeap=0x1f0000) returned 1 [0232.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238668 [0232.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238708 [0232.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239010 [0232.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238668 | out: hHeap=0x1f0000) returned 1 [0232.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0232.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239010 | out: hHeap=0x1f0000) returned 1 [0232.805] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a7fb0 [0232.805] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210210 [0232.805] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x214d68 [0232.805] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238668 [0232.805] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2859e0 [0232.805] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c50 [0232.805] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214dd0 [0232.805] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238780 [0232.805] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2857d0 [0232.805] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388e0 [0232.805] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2386b8 [0232.805] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101b0 [0232.805] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238830 [0232.805] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238528 [0232.806] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210198 [0232.806] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0232.806] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238528 | out: hHeap=0x1f0000) returned 1 [0232.806] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238830 | out: hHeap=0x1f0000) returned 1 [0232.806] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0232.806] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2386b8 | out: hHeap=0x1f0000) returned 1 [0232.806] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388e0 | out: hHeap=0x1f0000) returned 1 [0232.806] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2857d0 | out: hHeap=0x1f0000) returned 1 [0232.806] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238780 | out: hHeap=0x1f0000) returned 1 [0232.806] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214dd0 | out: hHeap=0x1f0000) returned 1 [0232.806] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238c58 [0232.806] GetLastError () returned 0x0 [0232.806] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239010 [0232.807] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0232.807] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0232.807] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0232.807] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0232.807] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0232.807] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0232.807] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x24e900 [0232.807] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285e00 [0232.807] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0232.807] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0232.807] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0232.807] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0232.807] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2854b8 [0232.808] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0232.808] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0232.808] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f8f8 [0232.808] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x25ceb8 [0232.808] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x237b58 [0232.808] QueryPerformanceCounter (in: lpPerformanceCount=0x22939e8 | out: lpPerformanceCount=0x22939e8*=39017686991) returned 1 [0232.808] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x2293a28 | out: lpSystemTimeAsFileTime=0x2293a28) [0232.808] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238800 [0232.808] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238528 [0232.808] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f30 [0232.808] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f30 | out: hHeap=0x1f0000) returned 1 [0232.808] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238528 | out: hHeap=0x1f0000) returned 1 [0232.809] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238528 [0232.809] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c90 [0232.809] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c90 | out: hHeap=0x1f0000) returned 1 [0232.809] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238528 | out: hHeap=0x1f0000) returned 1 [0232.809] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238800 | out: hHeap=0x1f0000) returned 1 [0232.809] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0232.809] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239198 [0232.809] GetLastError () returned 0x0 [0232.809] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0232.809] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0232.809] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0232.809] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238500 [0232.809] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238780 [0232.810] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0232.810] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0232.811] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2386e0 [0232.811] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0232.811] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x222ee8 [0232.811] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0232.811] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0232.811] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0232.811] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x20c2c0 [0232.812] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0232.812] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238758 [0232.812] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2386b8 [0232.812] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238758 | out: hHeap=0x1f0000) returned 1 [0232.812] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0232.812] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2386b8 | out: hHeap=0x1f0000) returned 1 [0232.812] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0232.812] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x234b90 [0232.812] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b90 | out: hHeap=0x1f0000) returned 1 [0232.812] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0232.812] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20c2c0 | out: hHeap=0x1f0000) returned 1 [0232.812] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210198 [0232.812] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228518 [0232.813] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2386b8 [0232.813] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2385c8 [0232.813] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238758 [0232.813] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2384d8 [0232.813] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385c8 | out: hHeap=0x1f0000) returned 1 [0232.813] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2386b8 | out: hHeap=0x1f0000) returned 1 [0232.813] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0232.813] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238528 [0232.813] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238550 [0232.813] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238528 | out: hHeap=0x1f0000) returned 1 [0232.813] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0232.813] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238550 | out: hHeap=0x1f0000) returned 1 [0232.813] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206808 [0232.814] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x2a93f8 [0232.814] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a93f8 | out: hHeap=0x1f0000) returned 1 [0232.814] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206808 | out: hHeap=0x1f0000) returned 1 [0232.814] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2386e0 | out: hHeap=0x1f0000) returned 1 [0232.814] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abec0 [0232.814] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0232.814] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0232.814] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204c90 [0232.814] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac800 [0232.814] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab208 [0232.814] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238780 | out: hHeap=0x1f0000) returned 1 [0232.814] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac488 [0232.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab208 | out: hHeap=0x1f0000) returned 1 [0232.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384d8 | out: hHeap=0x1f0000) returned 1 [0232.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238758 | out: hHeap=0x1f0000) returned 1 [0232.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228518 | out: hHeap=0x1f0000) returned 1 [0232.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac800 | out: hHeap=0x1f0000) returned 1 [0232.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c90 | out: hHeap=0x1f0000) returned 1 [0232.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0232.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0232.815] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abd98 [0232.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abd98 | out: hHeap=0x1f0000) returned 1 [0232.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ee8 | out: hHeap=0x1f0000) returned 1 [0232.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0232.816] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abec0 | out: hHeap=0x1f0000) returned 1 [0232.816] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0232.816] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0232.816] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238500 | out: hHeap=0x1f0000) returned 1 [0232.816] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0232.816] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0232.816] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abec0 [0232.816] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab208 [0232.816] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abec0 | out: hHeap=0x1f0000) returned 1 [0232.816] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab208 | out: hHeap=0x1f0000) returned 1 [0232.816] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac488 | out: hHeap=0x1f0000) returned 1 [0232.816] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0232.816] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2854b8 | out: hHeap=0x1f0000) returned 1 [0232.817] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24e900 | out: hHeap=0x1f0000) returned 1 [0232.817] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x236e38 [0232.817] GetLastError () returned 0x0 [0232.817] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389c0 [0232.817] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238850 [0232.818] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\plugin.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\plugin.jar"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2293d98, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0232.818] GetFileType (hFile=0x210) returned 0x1 [0232.819] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x289fb0 [0232.819] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2293d20 | out: lpNewFilePointer=0x0) returned 1 [0232.819] GetLastError () returned 0xb7 [0233.132] CloseHandle (hObject=0x210) returned 1 [0233.132] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212cf0 [0233.132] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0233.133] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212cf0 | out: hHeap=0x1f0000) returned 1 [0233.133] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x11c) returned 0x210390 [0233.133] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0233.133] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\plugin.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\plugin.jar"), lpNewFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\plugin.jar.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\plugin.jar.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwFlags=0x2) returned 1 [0234.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0234.529] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238850 | out: hHeap=0x1f0000) returned 1 [0234.529] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389c0 | out: hHeap=0x1f0000) returned 1 [0234.529] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285e00 | out: hHeap=0x1f0000) returned 1 [0234.529] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2859e0 | out: hHeap=0x1f0000) returned 1 [0234.529] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238668 | out: hHeap=0x1f0000) returned 1 [0234.529] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c50 | out: hHeap=0x1f0000) returned 1 [0234.529] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d68 | out: hHeap=0x1f0000) returned 1 [0234.529] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0234.529] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a7fb0 | out: hHeap=0x1f0000) returned 1 [0234.529] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236e38 | out: hHeap=0x1f0000) returned 1 [0234.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238708 | out: hHeap=0x1f0000) returned 1 [0234.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0234.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25ceb8 | out: hHeap=0x1f0000) returned 1 [0234.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237b58 | out: hHeap=0x1f0000) returned 1 [0234.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238e50 | out: hHeap=0x1f0000) returned 1 [0234.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ae0 | out: hHeap=0x1f0000) returned 1 [0234.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2100a8 | out: hHeap=0x1f0000) returned 1 [0234.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238690 | out: hHeap=0x1f0000) returned 1 [0234.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a00 | out: hHeap=0x1f0000) returned 1 [0234.531] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210078 | out: hHeap=0x1f0000) returned 1 [0234.531] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238618 | out: hHeap=0x1f0000) returned 1 [0234.531] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b00 | out: hHeap=0x1f0000) returned 1 [0234.531] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2853b0 | out: hHeap=0x1f0000) returned 1 [0234.531] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238578 | out: hHeap=0x1f0000) returned 1 [0234.531] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f08 | out: hHeap=0x1f0000) returned 1 [0234.531] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228878 | out: hHeap=0x1f0000) returned 1 [0234.531] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238730 | out: hHeap=0x1f0000) returned 1 [0234.531] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0234.531] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228710 | out: hHeap=0x1f0000) returned 1 [0234.532] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x254980 | out: hHeap=0x1f0000) returned 1 [0234.532] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2376f8 | out: hHeap=0x1f0000) returned 1 [0234.532] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206838 | out: hHeap=0x1f0000) returned 1 [0234.532] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffa0 | out: hHeap=0x1f0000) returned 1 [0234.532] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff70 | out: hHeap=0x1f0000) returned 1 [0234.532] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232ba8 | out: hHeap=0x1f0000) returned 1 [0234.532] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24fd60 | out: hHeap=0x1f0000) returned 1 [0234.532] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237068 | out: hHeap=0x1f0000) returned 1 [0234.532] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2390b8 | out: hHeap=0x1f0000) returned 1 [0234.532] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220328 | out: hHeap=0x1f0000) returned 1 [0234.532] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261b28 | out: hHeap=0x1f0000) returned 1 [0234.532] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228bd8 | out: hHeap=0x1f0000) returned 1 [0234.532] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0234.532] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xaec, dwReserved0=0x0, dwReserved1=0x3, cFileName="psfont.properties.ja", cAlternateFileName="PSFONT~1.JA")) returned 1 [0234.533] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238e88 [0234.533] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0b38 [0234.533] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220c58 [0234.533] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0b38 | out: hHeap=0x1f0000) returned 1 [0234.533] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0234.533] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238e88 | out: hHeap=0x1f0000) returned 1 [0234.534] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\psfont.properties.ja" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfont.properties.ja"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0234.534] GetFileType (hFile=0x22c) returned 0x1 [0234.534] CloseHandle (hObject=0x22c) returned 1 [0234.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212be0 [0234.535] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\psfont.properties.ja" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfont.properties.ja"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xaec)) returned 1 [0234.535] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212be0 | out: hHeap=0x1f0000) returned 1 [0234.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212cf0 [0234.535] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212cf0 | out: hHeap=0x1f0000) returned 1 [0234.535] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2899, dwReserved0=0x0, dwReserved1=0x3, cFileName="psfontj2d.properties", cAlternateFileName="PSFONT~1.PRO")) returned 1 [0234.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238d00 [0234.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0318 [0234.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220cf0 [0234.536] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0318 | out: hHeap=0x1f0000) returned 1 [0234.536] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0234.536] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238d00 | out: hHeap=0x1f0000) returned 1 [0234.536] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\psfontj2d.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfontj2d.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0234.537] GetFileType (hFile=0x22c) returned 0x1 [0234.537] CloseHandle (hObject=0x22c) returned 1 [0234.537] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e88 [0234.537] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\psfontj2d.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfontj2d.properties"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2899)) returned 1 [0234.538] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e88 | out: hHeap=0x1f0000) returned 1 [0234.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213790 [0234.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0234.538] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213790 | out: hHeap=0x1f0000) returned 1 [0234.538] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0234.538] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x354add, dwReserved0=0x0, dwReserved1=0x3, cFileName="resources.jar", cAlternateFileName="RESOUR~1.JAR")) returned 1 [0234.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0234.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0178 [0234.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221968 [0234.538] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0178 | out: hHeap=0x1f0000) returned 1 [0234.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0234.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0234.539] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\resources.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\resources.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0234.539] GetFileType (hFile=0x22c) returned 0x1 [0234.540] CloseHandle (hObject=0x22c) returned 1 [0234.540] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220058 [0234.540] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\resources.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\resources.jar"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x354add)) returned 1 [0234.540] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220058 | out: hHeap=0x1f0000) returned 1 [0234.540] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2201c0 [0234.541] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2201c0 | out: hHeap=0x1f0000) returned 1 [0234.541] GetLastError () returned 0x0 [0234.541] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609a0 [0234.541] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228440 [0234.541] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262320 [0234.541] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0234.542] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238ef8 [0234.542] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0234.542] CryptAcquireContextA (in: phProv=0x2293e98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2293e98*=0x2130a8) returned 1 [0234.544] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x260590 | out: pbBuffer=0x260590) returned 1 [0234.544] CryptReleaseContext (hProv=0x2130a8, dwFlags=0x0) returned 1 [0234.544] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0234.545] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x252370 [0234.545] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2afc38 [0234.545] QueryPerformanceCounter (in: lpPerformanceCount=0x2293e2c | out: lpPerformanceCount=0x2293e2c*=39191363578) returned 1 [0234.545] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x2293e6c | out: lpSystemTimeAsFileTime=0x2293e6c) [0234.545] QueryPerformanceCounter (in: lpPerformanceCount=0x2293e2c | out: lpPerformanceCount=0x2293e2c*=39191389339) returned 1 [0234.545] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x2293e6c | out: lpSystemTimeAsFileTime=0x2293e6c) [0234.545] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239160 [0234.545] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x24fd60 [0234.545] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2ae428 [0234.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x232c78 [0234.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f950 [0234.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2067d8 [0234.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f968 [0234.546] GetLastError () returned 0x0 [0234.546] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\resources.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\resources.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x2293dfc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0234.547] GetFileType (hFile=0x22c) returned 0x1 [0234.547] SetFilePointerEx (in: hFile=0x22c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2293e68 | out: lpNewFilePointer=0x0) returned 1 [0234.547] ReadFile (in: hFile=0x22c, lpBuffer=0x22a9368, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x2293e40, lpOverlapped=0x0 | out: lpBuffer=0x22a9368*, lpNumberOfBytesRead=0x2293e40*=0x14000, lpOverlapped=0x0) returned 1 [0234.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x296010 [0234.562] ReadFile (in: hFile=0x22c, lpBuffer=0x296010, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2293de4, lpOverlapped=0x0 | out: lpBuffer=0x296010*, lpNumberOfBytesRead=0x2293de4*=0x1000, lpOverlapped=0x0) returned 1 [0234.564] SetFilePointerEx (in: hFile=0x22c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2293e70 | out: lpNewFilePointer=0x0) returned 1 [0234.565] WriteFile (in: hFile=0x22c, lpBuffer=0x2294378*, nNumberOfBytesToWrite=0x14000, lpNumberOfBytesWritten=0x2293ddc, lpOverlapped=0x0 | out: lpBuffer=0x2294378*, lpNumberOfBytesWritten=0x2293ddc*=0x14000, lpOverlapped=0x0) returned 1 [0234.566] WriteFile (in: hFile=0x22c, lpBuffer=0x296010*, nNumberOfBytesToWrite=0xff0, lpNumberOfBytesWritten=0x2293e08, lpOverlapped=0x0 | out: lpBuffer=0x296010*, lpNumberOfBytesWritten=0x2293e08*=0xff0, lpOverlapped=0x0) returned 1 [0234.566] SetFilePointerEx (in: hFile=0x22c, liDistanceToMove=0x15f90, lpNewFilePointer=0x0, dwMoveMethod=0x2293e50 | out: lpNewFilePointer=0x0) returned 1 [0234.566] ReadFile (in: hFile=0x22c, lpBuffer=0x22a9368, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x2293e28, lpOverlapped=0x0 | out: lpBuffer=0x22a9368*, lpNumberOfBytesRead=0x2293e28*=0x14000, lpOverlapped=0x0) returned 1 [0234.567] ReadFile (in: hFile=0x22c, lpBuffer=0x296010, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2293dcc, lpOverlapped=0x0 | out: lpBuffer=0x296010*, lpNumberOfBytesRead=0x2293dcc*=0x1000, lpOverlapped=0x0) returned 1 [0234.567] SetFilePointerEx (in: hFile=0x22c, liDistanceToMove=0x15f90, lpNewFilePointer=0x0, dwMoveMethod=0x2293e70 | out: lpNewFilePointer=0x0) returned 1 [0234.568] WriteFile (in: hFile=0x22c, lpBuffer=0x2294378*, nNumberOfBytesToWrite=0x14000, lpNumberOfBytesWritten=0x2293ddc, lpOverlapped=0x0 | out: lpBuffer=0x2294378*, lpNumberOfBytesWritten=0x2293ddc*=0x14000, lpOverlapped=0x0) returned 1 [0234.569] WriteFile (in: hFile=0x22c, lpBuffer=0x296010*, nNumberOfBytesToWrite=0xff0, lpNumberOfBytesWritten=0x2293e08, lpOverlapped=0x0 | out: lpBuffer=0x296010*, lpNumberOfBytesWritten=0x2293e08*=0xff0, lpOverlapped=0x0) returned 1 [0234.569] SetFilePointerEx (in: hFile=0x22c, liDistanceToMove=0xdbba0, lpNewFilePointer=0x0, dwMoveMethod=0x2293e50 | out: lpNewFilePointer=0x0) returned 1 [0234.569] ReadFile (in: hFile=0x22c, lpBuffer=0x22a9368, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x2293e28, lpOverlapped=0x0 | out: lpBuffer=0x22a9368*, lpNumberOfBytesRead=0x2293e28*=0x14000, lpOverlapped=0x0) returned 1 [0234.896] ReadFile (in: hFile=0x22c, lpBuffer=0x296010, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2293dcc, lpOverlapped=0x0 | out: lpBuffer=0x296010*, lpNumberOfBytesRead=0x2293dcc*=0x1000, lpOverlapped=0x0) returned 1 [0234.899] SetFilePointerEx (in: hFile=0x22c, liDistanceToMove=0xdbba0, lpNewFilePointer=0x0, dwMoveMethod=0x2293e70 | out: lpNewFilePointer=0x0) returned 1 [0234.900] WriteFile (in: hFile=0x22c, lpBuffer=0x2294378*, nNumberOfBytesToWrite=0x14000, lpNumberOfBytesWritten=0x2293ddc, lpOverlapped=0x0 | out: lpBuffer=0x2294378*, lpNumberOfBytesWritten=0x2293ddc*=0x14000, lpOverlapped=0x0) returned 1 [0234.901] WriteFile (in: hFile=0x22c, lpBuffer=0x296010*, nNumberOfBytesToWrite=0xff0, lpNumberOfBytesWritten=0x2293e58, lpOverlapped=0x0 | out: lpBuffer=0x296010*, lpNumberOfBytesWritten=0x2293e58*=0xff0, lpOverlapped=0x0) returned 1 [0234.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x296010 | out: hHeap=0x1f0000) returned 1 [0234.901] CloseHandle (hObject=0x22c) returned 1 [0234.902] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228bd8 [0234.902] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2605b8 [0234.902] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260900 [0234.902] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x2284d0 [0234.902] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bf0 [0234.903] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cb0 [0234.903] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x238880 [0234.903] GetLastError () returned 0x0 [0234.903] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238f68 [0234.903] GetLastError () returned 0x0 [0234.903] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238c20 [0234.903] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b00a8 [0234.904] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260770 [0234.904] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285e00 [0234.904] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238820 [0234.904] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260798 [0234.904] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f6f8 [0234.904] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238930 [0234.904] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0234.904] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f758 [0234.904] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260630 [0234.904] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2858d8 [0234.905] GetLastError () returned 0x0 [0234.905] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238840 [0234.905] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x2388a0 [0234.905] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238860 [0234.905] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388a0 | out: hHeap=0x1f0000) returned 1 [0234.905] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238830 [0234.905] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238860 | out: hHeap=0x1f0000) returned 1 [0234.905] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238840 | out: hHeap=0x1f0000) returned 1 [0234.905] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238890 [0234.906] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f770 [0234.906] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238890 | out: hHeap=0x1f0000) returned 1 [0234.906] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f6e0 [0234.906] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f770 | out: hHeap=0x1f0000) returned 1 [0234.906] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238830 | out: hHeap=0x1f0000) returned 1 [0234.906] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f770 [0234.906] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f7e8 [0234.906] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f770 | out: hHeap=0x1f0000) returned 1 [0234.906] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f890 [0234.906] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f7e8 | out: hHeap=0x1f0000) returned 1 [0234.907] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f6e0 | out: hHeap=0x1f0000) returned 1 [0234.907] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f770 [0234.907] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204b90 [0234.907] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f770 | out: hHeap=0x1f0000) returned 1 [0234.907] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c90 [0234.907] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204b90 | out: hHeap=0x1f0000) returned 1 [0234.907] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f890 | out: hHeap=0x1f0000) returned 1 [0234.907] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cb0 [0234.907] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2606f8 [0234.908] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cb0 | out: hHeap=0x1f0000) returned 1 [0234.908] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204e90 [0234.908] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606f8 | out: hHeap=0x1f0000) returned 1 [0234.908] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c90 | out: hHeap=0x1f0000) returned 1 [0234.908] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204f10 [0234.908] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206658 [0234.908] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f10 | out: hHeap=0x1f0000) returned 1 [0234.908] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2606f8 [0234.908] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206658 | out: hHeap=0x1f0000) returned 1 [0234.908] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e90 | out: hHeap=0x1f0000) returned 1 [0234.909] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238940 [0234.909] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f860 [0234.909] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238940 | out: hHeap=0x1f0000) returned 1 [0234.909] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f608 [0234.909] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f860 | out: hHeap=0x1f0000) returned 1 [0234.909] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204b90 [0234.909] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f608 | out: hHeap=0x1f0000) returned 1 [0234.909] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206688 [0234.909] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204b90 | out: hHeap=0x1f0000) returned 1 [0234.909] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206688 | out: hHeap=0x1f0000) returned 1 [0234.909] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606f8 | out: hHeap=0x1f0000) returned 1 [0234.910] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0234.910] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abd98 [0234.910] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285e00 | out: hHeap=0x1f0000) returned 1 [0234.910] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0234.910] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238de0 [0234.910] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605b8 [0234.910] CryptAcquireContextA (in: phProv=0x2293e98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2293e98*=0x213020) returned 1 [0234.911] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2605b8 | out: pbBuffer=0x2605b8) returned 1 [0234.911] CryptReleaseContext (hProv=0x213020, dwFlags=0x0) returned 1 [0234.911] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0234.911] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260810 [0234.911] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2605b8 [0234.912] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c20 [0234.912] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0234.912] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac928 [0234.912] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c20 | out: hHeap=0x1f0000) returned 1 [0234.912] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8428 [0234.912] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f890 [0234.912] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x2b0178 [0234.912] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260810 [0234.912] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x284f90 [0234.912] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0234.912] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b01e0 [0234.913] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260748 [0234.913] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285098 [0234.913] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238940 [0234.913] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606f8 [0234.913] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f7a0 [0234.913] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238950 [0234.913] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260770 [0234.913] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f680 [0234.913] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f680 | out: hHeap=0x1f0000) returned 1 [0234.913] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0234.913] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238950 | out: hHeap=0x1f0000) returned 1 [0234.913] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f7a0 | out: hHeap=0x1f0000) returned 1 [0234.913] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606f8 | out: hHeap=0x1f0000) returned 1 [0234.913] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238940 | out: hHeap=0x1f0000) returned 1 [0234.914] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285098 | out: hHeap=0x1f0000) returned 1 [0234.914] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0234.914] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b01e0 | out: hHeap=0x1f0000) returned 1 [0234.914] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238c90 [0234.914] GetLastError () returned 0x0 [0234.914] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239208 [0234.914] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abfe8 [0234.914] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abfe8 | out: hHeap=0x1f0000) returned 1 [0234.914] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac6d8 [0234.914] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab208 [0234.914] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac6d8 | out: hHeap=0x1f0000) returned 1 [0234.915] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab208 | out: hHeap=0x1f0000) returned 1 [0234.915] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x24e8c0 [0234.915] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285098 [0234.915] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac238 [0234.915] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac238 | out: hHeap=0x1f0000) returned 1 [0234.915] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abfe8 [0234.915] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abfe8 | out: hHeap=0x1f0000) returned 1 [0234.915] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2859e0 [0234.916] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2acdc8 [0234.916] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2acdc8 | out: hHeap=0x1f0000) returned 1 [0234.916] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x230258 [0234.916] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x251068 [0234.916] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2ae540 [0234.916] QueryPerformanceCounter (in: lpPerformanceCount=0x22939e8 | out: lpPerformanceCount=0x22939e8*=39228491088) returned 1 [0234.916] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x2293a28 | out: lpSystemTimeAsFileTime=0x2293a28) [0234.916] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238800 [0234.916] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0234.917] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204b90 [0234.917] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204b90 | out: hHeap=0x1f0000) returned 1 [0234.917] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0234.917] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260838 [0234.917] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f10 [0234.917] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f10 | out: hHeap=0x1f0000) returned 1 [0234.917] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260838 | out: hHeap=0x1f0000) returned 1 [0234.917] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238800 | out: hHeap=0x1f0000) returned 1 [0234.917] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0234.917] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x2392b0 [0234.917] GetLastError () returned 0x0 [0234.918] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2acdc8 [0234.918] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab0e0 [0234.918] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abfe8 [0234.918] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2606f8 [0234.918] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260838 [0234.918] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac238 [0234.918] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac360 [0234.918] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260748 [0234.918] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aba20 [0234.918] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x234b90 [0234.919] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac6d8 [0234.919] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0234.919] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac6d8 | out: hHeap=0x1f0000) returned 1 [0234.919] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x20c2c0 [0234.919] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0234.919] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260770 [0234.919] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260860 [0234.919] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0234.919] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab208 [0234.919] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0234.919] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0234.920] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x2647e0 [0234.920] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2647e0 | out: hHeap=0x1f0000) returned 1 [0234.920] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0234.920] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20c2c0 | out: hHeap=0x1f0000) returned 1 [0234.920] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f848 [0234.920] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228680 [0234.920] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260888 [0234.920] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260770 [0234.920] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260860 [0234.920] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2608b0 [0234.920] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0234.920] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0234.920] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0234.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260770 [0234.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260888 [0234.921] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0234.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab330 [0234.921] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0234.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206658 [0234.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x2aa518 [0234.921] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aa518 | out: hHeap=0x1f0000) returned 1 [0234.921] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206658 | out: hHeap=0x1f0000) returned 1 [0234.921] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0234.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab458 [0234.921] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab330 | out: hHeap=0x1f0000) returned 1 [0234.921] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0234.922] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204f10 [0234.922] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab330 [0234.922] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab7d0 [0234.922] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260838 | out: hHeap=0x1f0000) returned 1 [0234.922] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac6d8 [0234.922] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab7d0 | out: hHeap=0x1f0000) returned 1 [0234.922] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608b0 | out: hHeap=0x1f0000) returned 1 [0234.922] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0234.922] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228680 | out: hHeap=0x1f0000) returned 1 [0234.922] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab330 | out: hHeap=0x1f0000) returned 1 [0234.922] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f10 | out: hHeap=0x1f0000) returned 1 [0234.922] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f848 | out: hHeap=0x1f0000) returned 1 [0234.923] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab208 | out: hHeap=0x1f0000) returned 1 [0234.923] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab208 [0234.923] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab208 | out: hHeap=0x1f0000) returned 1 [0234.923] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b90 | out: hHeap=0x1f0000) returned 1 [0234.923] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aba20 | out: hHeap=0x1f0000) returned 1 [0234.923] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab458 | out: hHeap=0x1f0000) returned 1 [0234.923] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac360 | out: hHeap=0x1f0000) returned 1 [0234.923] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac238 | out: hHeap=0x1f0000) returned 1 [0234.923] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606f8 | out: hHeap=0x1f0000) returned 1 [0234.923] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abfe8 | out: hHeap=0x1f0000) returned 1 [0234.923] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab0e0 | out: hHeap=0x1f0000) returned 1 [0234.923] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abfe8 [0234.924] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab0e0 [0234.924] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abfe8 | out: hHeap=0x1f0000) returned 1 [0234.924] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab0e0 | out: hHeap=0x1f0000) returned 1 [0234.924] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac6d8 | out: hHeap=0x1f0000) returned 1 [0234.924] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2acdc8 | out: hHeap=0x1f0000) returned 1 [0234.924] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2859e0 | out: hHeap=0x1f0000) returned 1 [0234.924] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24e8c0 | out: hHeap=0x1f0000) returned 1 [0234.924] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x2af6c0 [0234.924] GetLastError () returned 0x0 [0234.925] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238800 [0234.925] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238850 [0234.926] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\resources.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\resources.jar"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2293d98, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0234.926] GetFileType (hFile=0x22c) returned 0x1 [0234.927] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x291ff0 [0234.927] SetFilePointerEx (in: hFile=0x22c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2293d20 | out: lpNewFilePointer=0x0) returned 1 [0234.927] GetLastError () returned 0xb7 [0234.971] CloseHandle (hObject=0x22c) returned 1 [0234.971] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213680 [0234.972] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fce0 [0234.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213680 | out: hHeap=0x1f0000) returned 1 [0234.972] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x11e) returned 0x2ab7d0 [0234.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0234.972] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\resources.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\resources.jar"), lpNewFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\resources.jar.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\resources.jar.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwFlags=0x2) returned 1 [0234.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab7d0 | out: hHeap=0x1f0000) returned 1 [0234.974] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238850 | out: hHeap=0x1f0000) returned 1 [0234.974] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238800 | out: hHeap=0x1f0000) returned 1 [0234.974] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285098 | out: hHeap=0x1f0000) returned 1 [0234.974] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x284f90 | out: hHeap=0x1f0000) returned 1 [0234.974] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0234.974] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d70 | out: hHeap=0x1f0000) returned 1 [0234.974] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0178 | out: hHeap=0x1f0000) returned 1 [0234.974] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f890 | out: hHeap=0x1f0000) returned 1 [0234.974] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8428 | out: hHeap=0x1f0000) returned 1 [0234.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2af6c0 | out: hHeap=0x1f0000) returned 1 [0234.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0234.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac928 | out: hHeap=0x1f0000) returned 1 [0234.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x251068 | out: hHeap=0x1f0000) returned 1 [0234.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae540 | out: hHeap=0x1f0000) returned 1 [0234.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238de0 | out: hHeap=0x1f0000) returned 1 [0234.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238880 | out: hHeap=0x1f0000) returned 1 [0234.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f758 | out: hHeap=0x1f0000) returned 1 [0234.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0234.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238930 | out: hHeap=0x1f0000) returned 1 [0234.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f6f8 | out: hHeap=0x1f0000) returned 1 [0234.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260798 | out: hHeap=0x1f0000) returned 1 [0234.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238820 | out: hHeap=0x1f0000) returned 1 [0234.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2858d8 | out: hHeap=0x1f0000) returned 1 [0234.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260630 | out: hHeap=0x1f0000) returned 1 [0234.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b00a8 | out: hHeap=0x1f0000) returned 1 [0234.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2284d0 | out: hHeap=0x1f0000) returned 1 [0234.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260900 | out: hHeap=0x1f0000) returned 1 [0234.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abd98 | out: hHeap=0x1f0000) returned 1 [0234.977] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228bd8 | out: hHeap=0x1f0000) returned 1 [0234.977] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24fd60 | out: hHeap=0x1f0000) returned 1 [0234.977] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae428 | out: hHeap=0x1f0000) returned 1 [0234.977] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2067d8 | out: hHeap=0x1f0000) returned 1 [0234.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f968 | out: hHeap=0x1f0000) returned 1 [0234.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f950 | out: hHeap=0x1f0000) returned 1 [0234.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232c78 | out: hHeap=0x1f0000) returned 1 [0234.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x252370 | out: hHeap=0x1f0000) returned 1 [0234.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2afc38 | out: hHeap=0x1f0000) returned 1 [0234.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ef8 | out: hHeap=0x1f0000) returned 1 [0234.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0234.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262320 | out: hHeap=0x1f0000) returned 1 [0234.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228440 | out: hHeap=0x1f0000) returned 1 [0234.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0234.979] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa90a30aa, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa90a30aa, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xaa7233eb, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x340865b, dwReserved0=0x0, dwReserved1=0x3, cFileName="rt.jar", cAlternateFileName="")) returned 1 [0234.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0860 [0234.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0234.979] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\rt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\rt.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0234.980] GetFileType (hFile=0x22c) returned 0x1 [0234.980] CloseHandle (hObject=0x22c) returned 1 [0235.406] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0318 [0235.406] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\rt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\rt.jar"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa90a30aa, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa90a30aa, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xaa7233eb, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x340865b)) returned 1 [0235.406] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0318 | out: hHeap=0x1f0000) returned 1 [0235.406] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b00a8 [0235.406] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b00a8 | out: hHeap=0x1f0000) returned 1 [0235.407] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1418338, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="security", cAlternateFileName="")) returned 1 [0235.407] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0235.407] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0588 [0235.407] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220cf0 [0235.407] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0588 | out: hHeap=0x1f0000) returned 1 [0235.407] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0860 | out: hHeap=0x1f0000) returned 1 [0235.407] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0235.408] lstrcmpW (lpString1="security", lpString2=".") returned 1 [0235.408] lstrcmpW (lpString1="security", lpString2="..") returned 1 [0235.408] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x138) returned 0x239be0 [0235.408] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0235.408] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c048 | out: hHeap=0x1f0000) returned 1 [0235.408] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4ba, dwReserved0=0x0, dwReserved1=0x3, cFileName="sound.properties", cAlternateFileName="SOUND~1.PRO")) returned 1 [0235.408] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238e88 [0235.409] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0790 [0235.409] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2212e0 [0235.409] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0790 | out: hHeap=0x1f0000) returned 1 [0235.409] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0235.409] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238e88 | out: hHeap=0x1f0000) returned 1 [0235.410] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\sound.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\sound.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0235.410] GetFileType (hFile=0x22c) returned 0x1 [0235.411] CloseHandle (hObject=0x22c) returned 1 [0235.412] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213790 [0235.412] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\sound.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\sound.properties"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4ba)) returned 1 [0235.412] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213790 | out: hHeap=0x1f0000) returned 1 [0235.412] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0235.412] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609a0 [0235.412] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0235.413] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0235.413] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x19c1c, dwReserved0=0x0, dwReserved1=0x3, cFileName="tzdb.dat", cAlternateFileName="")) returned 1 [0235.413] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0235.413] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b02b0 [0235.413] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220e20 [0235.413] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b02b0 | out: hHeap=0x1f0000) returned 1 [0235.413] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0235.414] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0235.415] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\tzdb.dat" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzdb.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0235.415] GetFileType (hFile=0x22c) returned 0x1 [0235.416] CloseHandle (hObject=0x22c) returned 1 [0235.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fa40 [0235.417] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\tzdb.dat" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzdb.dat"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x19c1c)) returned 1 [0235.417] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fa40 | out: hHeap=0x1f0000) returned 1 [0235.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0235.417] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0235.417] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x20d0, dwReserved0=0x0, dwReserved1=0x3, cFileName="tzmappings", cAlternateFileName="TZMAPP~1")) returned 1 [0235.418] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609a0 [0235.418] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0b38 [0235.418] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221080 [0235.418] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0b38 | out: hHeap=0x1f0000) returned 1 [0235.418] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0235.418] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0235.419] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\tzmappings" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzmappings"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0235.419] GetFileType (hFile=0x22c) returned 0x1 [0235.420] CloseHandle (hObject=0x22c) returned 1 [0235.420] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220580 [0235.421] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\tzmappings" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzmappings"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x20d0)) returned 1 [0235.421] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220580 | out: hHeap=0x1f0000) returned 1 [0235.421] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0235.421] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0235.421] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x20d0, dwReserved0=0x0, dwReserved1=0x3, cFileName="tzmappings", cAlternateFileName="TZMAPP~1")) returned 0 [0235.421] FindClose (in: hFindFile=0x24ec00 | out: hFindFile=0x24ec00) returned 1 [0235.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228638 [0235.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260900 [0235.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x263310 [0235.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0790 [0235.422] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\*", lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe451d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24eb40 [0235.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0c08 [0235.423] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0790 | out: hHeap=0x1f0000) returned 1 [0235.423] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0235.423] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe451d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0235.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b00a8 [0235.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221378 [0235.423] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b00a8 | out: hHeap=0x1f0000) returned 1 [0235.424] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0c08 | out: hHeap=0x1f0000) returned 1 [0235.424] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0235.424] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0235.424] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x27a, dwReserved0=0x0, dwReserved1=0x0, cFileName="jvm.cfg", cAlternateFileName="")) returned 1 [0235.424] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0588 [0235.424] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220eb8 [0235.424] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0588 | out: hHeap=0x1f0000) returned 1 [0235.424] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0235.425] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0235.426] GetFileType (hFile=0x22c) returned 0x1 [0235.426] CloseHandle (hObject=0x22c) returned 1 [0235.427] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fef0 [0235.427] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x27a)) returned 1 [0235.427] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fef0 | out: hHeap=0x1f0000) returned 1 [0235.427] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220508 [0235.427] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220508 | out: hHeap=0x1f0000) returned 1 [0235.427] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x27a, dwReserved0=0x0, dwReserved1=0x0, cFileName="jvm.cfg", cAlternateFileName="")) returned 0 [0235.428] FindClose (in: hFindFile=0x24eb40 | out: hFindFile=0x24eb40) returned 1 [0235.428] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0235.428] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263310 | out: hHeap=0x1f0000) returned 1 [0235.428] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260900 | out: hHeap=0x1f0000) returned 1 [0235.428] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228638 | out: hHeap=0x1f0000) returned 1 [0235.428] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228710 [0235.428] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0235.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x263310 [0235.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220490 [0235.429] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\applet\\*", lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105ca28, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ec80 [0235.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0ba0 [0235.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221838 [0235.429] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0ba0 | out: hHeap=0x1f0000) returned 1 [0235.429] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220490 | out: hHeap=0x1f0000) returned 1 [0235.430] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0235.430] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105ca28, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0235.430] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0728 [0235.430] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2215d8 [0235.430] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0728 | out: hHeap=0x1f0000) returned 1 [0235.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0235.431] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0235.431] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0235.431] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105ca28, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0235.431] FindClose (in: hFindFile=0x24ec80 | out: hFindFile=0x24ec80) returned 1 [0235.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0235.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263310 | out: hHeap=0x1f0000) returned 1 [0235.432] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0235.432] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228710 | out: hHeap=0x1f0000) returned 1 [0235.432] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228cb0 [0235.432] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605b8 [0235.432] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2634a8 [0235.432] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0658 [0235.432] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\*", lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xd5037ad5, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xd5037ad5, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e780 [0235.433] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0728 [0235.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0658 | out: hHeap=0x1f0000) returned 1 [0235.433] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0235.433] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xd5037ad5, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xd5037ad5, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0235.433] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0658 [0235.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0728 | out: hHeap=0x1f0000) returned 1 [0235.434] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0235.434] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0235.434] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc824, dwReserved0=0x0, dwReserved1=0x0, cFileName="CIEXYZ.pf", cAlternateFileName="")) returned 1 [0235.434] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0235.434] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0588 [0235.434] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221378 [0235.434] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0588 | out: hHeap=0x1f0000) returned 1 [0235.434] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0658 | out: hHeap=0x1f0000) returned 1 [0235.434] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0235.435] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\CIEXYZ.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\ciexyz.pf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0235.436] GetFileType (hFile=0x22c) returned 0x1 [0235.436] CloseHandle (hObject=0x22c) returned 1 [0235.437] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f7e8 [0235.437] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\CIEXYZ.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\ciexyz.pf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc824)) returned 1 [0235.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f7e8 | out: hHeap=0x1f0000) returned 1 [0235.437] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0235.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0235.437] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x278, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRAY.pf", cAlternateFileName="")) returned 1 [0235.437] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0b38 [0235.437] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220d88 [0235.438] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0b38 | out: hHeap=0x1f0000) returned 1 [0235.438] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0235.439] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\GRAY.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\gray.pf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0235.439] GetFileType (hFile=0x22c) returned 0x1 [0235.439] CloseHandle (hObject=0x22c) returned 1 [0235.440] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0235.440] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\GRAY.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\gray.pf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x278)) returned 1 [0235.440] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0235.440] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0235.440] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0235.441] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x0, dwReserved1=0x0, cFileName="LINEAR_RGB.pf", cAlternateFileName="LINEAR~1.PF")) returned 1 [0235.441] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609a0 [0235.441] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0a00 [0235.441] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221a98 [0235.441] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0a00 | out: hHeap=0x1f0000) returned 1 [0235.441] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0235.441] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0235.442] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\LINEAR_RGB.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\linear_rgb.pf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0235.442] GetFileType (hFile=0x22c) returned 0x1 [0235.443] CloseHandle (hObject=0x22c) returned 1 [0235.443] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0235.443] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\LINEAR_RGB.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\linear_rgb.pf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x414)) returned 1 [0235.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0235.444] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f10 [0235.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f10 | out: hHeap=0x1f0000) returned 1 [0235.444] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd430017b, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xd430017b, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xd501160f, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x4313d, dwReserved0=0x0, dwReserved1=0x0, cFileName="PYCC.pf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="PYCCPF~1.ODV")) returned 1 [0235.444] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0235.444] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0588 [0235.444] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x21bb28 [0235.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0588 | out: hHeap=0x1f0000) returned 1 [0235.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0235.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0235.446] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\pycc.pf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0235.704] GetFileType (hFile=0x23c) returned 0x1 [0235.705] CloseHandle (hObject=0x23c) returned 1 [0235.705] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x21bd18 [0235.705] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\pycc.pf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd430017b, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xd430017b, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xd501160f, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x4313d)) returned 1 [0235.706] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21bd18 | out: hHeap=0x1f0000) returned 1 [0235.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x21be10 [0235.706] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21be10 | out: hHeap=0x1f0000) returned 1 [0235.706] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc48, dwReserved0=0x0, dwReserved1=0x0, cFileName="sRGB.pf", cAlternateFileName="")) returned 1 [0235.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0110 [0235.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221118 [0235.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0110 | out: hHeap=0x1f0000) returned 1 [0235.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21bb28 | out: hHeap=0x1f0000) returned 1 [0235.707] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\sRGB.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\srgb.pf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0235.708] GetFileType (hFile=0x23c) returned 0x1 [0235.708] CloseHandle (hObject=0x23c) returned 1 [0235.709] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fef0 [0235.709] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\sRGB.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\srgb.pf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc48)) returned 1 [0235.709] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fef0 | out: hHeap=0x1f0000) returned 1 [0235.709] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0235.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0235.710] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc48, dwReserved0=0x0, dwReserved1=0x0, cFileName="sRGB.pf", cAlternateFileName="")) returned 0 [0235.710] FindClose (in: hFindFile=0x24e780 | out: hFindFile=0x24e780) returned 1 [0235.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0235.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2634a8 | out: hHeap=0x1f0000) returned 1 [0235.711] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0235.711] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228cb0 | out: hHeap=0x1f0000) returned 1 [0235.711] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228950 [0235.711] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0235.711] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x263640 [0235.711] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21ffe0 [0235.711] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\*", lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa10e432c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ea80 [0235.712] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0b38 [0235.713] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2212e0 [0235.713] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0b38 | out: hHeap=0x1f0000) returned 1 [0235.713] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ffe0 | out: hHeap=0x1f0000) returned 1 [0235.713] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0235.713] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa10e432c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0235.714] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0658 [0235.714] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220f50 [0235.714] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0658 | out: hHeap=0x1f0000) returned 1 [0235.714] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0235.714] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0235.714] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0235.714] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x374c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ffjcext.zip", cAlternateFileName="")) returned 1 [0235.714] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0235.715] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b03e8 [0235.715] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220eb8 [0235.715] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b03e8 | out: hHeap=0x1f0000) returned 1 [0235.715] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0235.715] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0235.716] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0235.716] GetFileType (hFile=0x23c) returned 0x1 [0235.717] CloseHandle (hObject=0x23c) returned 1 [0235.717] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0235.718] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x374c)) returned 1 [0235.718] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0235.718] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0235.718] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0235.718] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xb2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.properties", cAlternateFileName="MESSAG~1.PRO")) returned 1 [0235.718] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2390b8 [0235.719] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0b38 [0235.719] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0235.719] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0b38 | out: hHeap=0x1f0000) returned 1 [0235.719] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0235.719] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2390b8 | out: hHeap=0x1f0000) returned 1 [0235.720] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0235.720] GetFileType (hFile=0x23c) returned 0x1 [0235.721] CloseHandle (hObject=0x23c) returned 1 [0235.721] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0235.722] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages.properties"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xb2c)) returned 1 [0235.722] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0235.722] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0235.722] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604c8 [0235.722] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0235.722] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604c8 | out: hHeap=0x1f0000) returned 1 [0235.723] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xcea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_de.properties", cAlternateFileName="MESSAG~2.PRO")) returned 1 [0235.723] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c20 [0235.723] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0b38 [0235.723] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0235.723] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0b38 | out: hHeap=0x1f0000) returned 1 [0235.723] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0235.723] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c20 | out: hHeap=0x1f0000) returned 1 [0235.724] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0235.725] GetFileType (hFile=0x23c) returned 0x1 [0235.725] CloseHandle (hObject=0x23c) returned 1 [0235.726] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0235.726] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xcea)) returned 1 [0235.726] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0235.726] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0235.726] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260540 [0235.727] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0235.727] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0235.727] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xe10, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_es.properties", cAlternateFileName="MESSAG~3.PRO")) returned 1 [0235.727] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238e88 [0235.727] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b03e8 [0235.727] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0235.727] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b03e8 | out: hHeap=0x1f0000) returned 1 [0235.728] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0235.728] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238e88 | out: hHeap=0x1f0000) returned 1 [0235.728] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0235.729] GetFileType (hFile=0x23c) returned 0x1 [0235.729] CloseHandle (hObject=0x23c) returned 1 [0235.730] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0235.730] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xe10)) returned 1 [0235.730] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0235.730] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0235.730] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604c8 [0235.730] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0235.731] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604c8 | out: hHeap=0x1f0000) returned 1 [0235.731] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xd51, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_fr.properties", cAlternateFileName="MESSAG~4.PRO")) returned 1 [0235.731] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238ef8 [0235.731] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0658 [0235.731] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0235.731] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0658 | out: hHeap=0x1f0000) returned 1 [0235.731] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0235.731] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ef8 | out: hHeap=0x1f0000) returned 1 [0235.732] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0235.733] GetFileType (hFile=0x23c) returned 0x1 [0235.733] CloseHandle (hObject=0x23c) returned 1 [0235.733] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0235.734] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xd51)) returned 1 [0235.734] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0235.734] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0235.734] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604c8 [0235.734] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0235.734] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604c8 | out: hHeap=0x1f0000) returned 1 [0235.735] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc97, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_it.properties", cAlternateFileName="MEC9EA~1.PRO")) returned 1 [0235.735] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c20 [0235.735] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0178 [0235.735] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0235.735] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0178 | out: hHeap=0x1f0000) returned 1 [0235.735] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0235.735] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c20 | out: hHeap=0x1f0000) returned 1 [0235.736] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0235.737] GetFileType (hFile=0x23c) returned 0x1 [0235.737] CloseHandle (hObject=0x23c) returned 1 [0235.738] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0235.738] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc97)) returned 1 [0235.738] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0235.738] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0235.738] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604c8 [0235.739] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0235.739] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604c8 | out: hHeap=0x1f0000) returned 1 [0235.739] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x18cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_ja.properties", cAlternateFileName="ME4AF1~1.PRO")) returned 1 [0235.739] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238ef8 [0235.739] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0658 [0235.739] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0235.739] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0658 | out: hHeap=0x1f0000) returned 1 [0235.739] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0235.740] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ef8 | out: hHeap=0x1f0000) returned 1 [0235.740] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0235.741] GetFileType (hFile=0x23c) returned 0x1 [0235.741] CloseHandle (hObject=0x23c) returned 1 [0235.742] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0235.742] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x18cd)) returned 1 [0235.742] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0235.742] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0235.742] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0235.743] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0236.108] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0236.108] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1650, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_ko.properties", cAlternateFileName="ME1706~1.PRO")) returned 1 [0236.108] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2392b0 [0236.108] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0860 [0236.108] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0236.108] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0860 | out: hHeap=0x1f0000) returned 1 [0236.108] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0236.108] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2392b0 | out: hHeap=0x1f0000) returned 1 [0236.109] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0236.110] GetFileType (hFile=0x22c) returned 0x1 [0236.111] CloseHandle (hObject=0x22c) returned 1 [0236.111] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0236.111] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1650)) returned 1 [0236.112] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0236.112] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0236.112] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2607e8 [0236.112] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0236.112] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607e8 | out: hHeap=0x1f0000) returned 1 [0236.112] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xcd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_pt_BR.properties", cAlternateFileName="MED1E1~1.PRO")) returned 1 [0236.112] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2284d0 [0236.112] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0110 [0236.112] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a8c0 [0236.112] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0110 | out: hHeap=0x1f0000) returned 1 [0236.113] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0236.113] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2284d0 | out: hHeap=0x1f0000) returned 1 [0236.113] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_pt_BR.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_pt_br.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0236.113] GetFileType (hFile=0x22c) returned 0x1 [0236.114] CloseHandle (hObject=0x22c) returned 1 [0236.114] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a968 [0236.114] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_pt_BR.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_pt_br.properties"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xcd5)) returned 1 [0236.114] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a968 | out: hHeap=0x1f0000) returned 1 [0236.114] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a578 [0236.114] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0236.114] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a578 | out: hHeap=0x1f0000) returned 1 [0236.115] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0236.115] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xd51, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_sv.properties", cAlternateFileName="ME0541~1.PRO")) returned 1 [0236.115] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238ef8 [0236.115] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0110 [0236.115] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0236.115] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0110 | out: hHeap=0x1f0000) returned 1 [0236.115] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a8c0 | out: hHeap=0x1f0000) returned 1 [0236.115] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ef8 | out: hHeap=0x1f0000) returned 1 [0236.116] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0236.116] GetFileType (hFile=0x22c) returned 0x1 [0236.116] CloseHandle (hObject=0x22c) returned 1 [0236.116] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0236.117] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xd51)) returned 1 [0236.117] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0236.117] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0236.117] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2607e8 [0236.117] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0236.117] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607e8 | out: hHeap=0x1f0000) returned 1 [0236.117] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xfe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_zh_CN.properties", cAlternateFileName="ME40CD~1.PRO")) returned 1 [0236.117] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2284d0 [0236.117] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b01e0 [0236.117] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219d98 [0236.119] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b01e0 | out: hHeap=0x1f0000) returned 1 [0236.119] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0236.119] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2284d0 | out: hHeap=0x1f0000) returned 1 [0236.120] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_CN.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_cn.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0236.120] GetFileType (hFile=0x22c) returned 0x1 [0236.120] CloseHandle (hObject=0x22c) returned 1 [0236.121] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a4d0 [0236.121] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_CN.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_cn.properties"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xfe8)) returned 1 [0236.121] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a4d0 | out: hHeap=0x1f0000) returned 1 [0236.121] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219cf0 [0236.121] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0236.121] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219cf0 | out: hHeap=0x1f0000) returned 1 [0236.121] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0236.122] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_zh_HK.properties", cAlternateFileName="MEB8B5~1.PRO")) returned 1 [0236.122] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2284d0 [0236.122] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0790 [0236.122] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a4d0 [0236.122] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0790 | out: hHeap=0x1f0000) returned 1 [0236.122] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219d98 | out: hHeap=0x1f0000) returned 1 [0236.122] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2284d0 | out: hHeap=0x1f0000) returned 1 [0236.123] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_HK.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_hk.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0236.123] GetFileType (hFile=0x22c) returned 0x1 [0236.123] CloseHandle (hObject=0x22c) returned 1 [0236.124] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21aab8 [0236.124] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_HK.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_hk.properties"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xea8)) returned 1 [0236.124] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21aab8 | out: hHeap=0x1f0000) returned 1 [0236.124] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219c48 [0236.124] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260630 [0236.124] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219c48 | out: hHeap=0x1f0000) returned 1 [0236.125] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260630 | out: hHeap=0x1f0000) returned 1 [0236.125] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_zh_TW.properties", cAlternateFileName="MECC18~1.PRO")) returned 1 [0236.125] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2284d0 [0236.125] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b06c0 [0236.125] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21aab8 [0236.125] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b06c0 | out: hHeap=0x1f0000) returned 1 [0236.125] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a4d0 | out: hHeap=0x1f0000) returned 1 [0236.125] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2284d0 | out: hHeap=0x1f0000) returned 1 [0236.126] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_TW.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_tw.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0236.126] GetFileType (hFile=0x22c) returned 0x1 [0236.127] CloseHandle (hObject=0x22c) returned 1 [0236.127] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a8c0 [0236.127] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_TW.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_tw.properties"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xea8)) returned 1 [0236.127] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a8c0 | out: hHeap=0x1f0000) returned 1 [0236.127] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21aa10 [0236.127] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260888 [0236.128] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21aa10 | out: hHeap=0x1f0000) returned 1 [0236.128] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0236.128] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x218e, dwReserved0=0x0, dwReserved1=0x0, cFileName="splash.gif", cAlternateFileName="")) returned 1 [0236.128] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0236.128] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0110 [0236.128] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221670 [0236.128] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0110 | out: hHeap=0x1f0000) returned 1 [0236.128] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21aab8 | out: hHeap=0x1f0000) returned 1 [0236.128] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0236.129] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0236.129] GetFileType (hFile=0x22c) returned 0x1 [0236.130] CloseHandle (hObject=0x22c) returned 1 [0236.130] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0236.130] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash.gif"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x218e)) returned 1 [0236.130] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0236.130] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0236.130] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0236.130] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3bac, dwReserved0=0x0, dwReserved1=0x0, cFileName="splash@2x.gif", cAlternateFileName="SPLASH~1.GIF")) returned 1 [0236.130] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2607e8 [0236.131] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0520 [0236.131] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221a98 [0236.131] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0520 | out: hHeap=0x1f0000) returned 1 [0236.131] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0236.131] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607e8 | out: hHeap=0x1f0000) returned 1 [0236.131] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0236.132] GetFileType (hFile=0x22c) returned 0x1 [0236.132] CloseHandle (hObject=0x22c) returned 1 [0236.133] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2134e8 [0236.133] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3bac)) returned 1 [0236.133] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2134e8 | out: hHeap=0x1f0000) returned 1 [0236.133] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2134e8 [0236.133] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2134e8 | out: hHeap=0x1f0000) returned 1 [0236.133] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1e7d, dwReserved0=0x0, dwReserved1=0x0, cFileName="splash_11-lic.gif", cAlternateFileName="SPLASH~2.GIF")) returned 1 [0236.133] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238f68 [0236.134] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0110 [0236.134] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0236.134] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0110 | out: hHeap=0x1f0000) returned 1 [0236.134] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0236.134] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238f68 | out: hHeap=0x1f0000) returned 1 [0236.135] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0236.135] GetFileType (hFile=0x22c) returned 0x1 [0236.135] CloseHandle (hObject=0x22c) returned 1 [0236.136] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0236.136] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1e7d)) returned 1 [0236.136] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0236.136] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0236.136] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0236.136] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2fda, dwReserved0=0x0, dwReserved1=0x0, cFileName="splash_11@2x-lic.gif", cAlternateFileName="SPLASH~3.GIF")) returned 1 [0236.136] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238ef8 [0236.136] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0178 [0236.136] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0236.136] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0178 | out: hHeap=0x1f0000) returned 1 [0236.137] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0236.137] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ef8 | out: hHeap=0x1f0000) returned 1 [0236.137] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0236.137] GetFileType (hFile=0x22c) returned 0x1 [0236.138] CloseHandle (hObject=0x22c) returned 1 [0236.138] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0236.138] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2fda)) returned 1 [0236.138] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0236.138] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0236.139] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0236.139] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2fda, dwReserved0=0x0, dwReserved1=0x0, cFileName="splash_11@2x-lic.gif", cAlternateFileName="SPLASH~3.GIF")) returned 0 [0236.139] FindClose (in: hFindFile=0x24ea80 | out: hFindFile=0x24ea80) returned 1 [0236.139] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0236.139] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263640 | out: hHeap=0x1f0000) returned 1 [0236.139] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0236.139] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228950 | out: hHeap=0x1f0000) returned 1 [0236.139] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2287a0 [0236.140] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0236.140] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262e48 [0236.140] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b08c8 [0236.140] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\*", lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa11bdb26, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd5ef8416, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e600 [0236.140] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b02b0 [0236.140] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b08c8 | out: hHeap=0x1f0000) returned 1 [0236.141] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0236.141] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa11bdb26, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd5ef8416, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0236.141] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0790 [0236.141] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b02b0 | out: hHeap=0x1f0000) returned 1 [0236.141] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0236.141] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0236.141] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2de78, dwReserved0=0x0, dwReserved1=0x0, cFileName="access-bridge-64.jar", cAlternateFileName="ACCESS~1.JAR")) returned 1 [0236.141] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2391d0 [0236.141] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b06c0 [0236.141] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0236.141] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b06c0 | out: hHeap=0x1f0000) returned 1 [0236.141] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0790 | out: hHeap=0x1f0000) returned 1 [0236.141] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2391d0 | out: hHeap=0x1f0000) returned 1 [0236.142] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0236.142] GetFileType (hFile=0x22c) returned 0x1 [0236.142] CloseHandle (hObject=0x22c) returned 1 [0236.143] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0236.143] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2de78)) returned 1 [0236.143] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0236.143] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0236.143] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0236.143] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8bb82c9, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3ae816, dwReserved0=0x0, dwReserved1=0x0, cFileName="cldrdata.jar", cAlternateFileName="")) returned 1 [0236.143] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260630 [0236.144] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0520 [0236.144] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220cf0 [0236.144] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0520 | out: hHeap=0x1f0000) returned 1 [0236.144] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0236.144] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260630 | out: hHeap=0x1f0000) returned 1 [0236.145] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0236.145] GetFileType (hFile=0x22c) returned 0x1 [0236.145] CloseHandle (hObject=0x22c) returned 1 [0236.146] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f10 [0236.146] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8bb82c9, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3ae816)) returned 1 [0236.146] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f10 | out: hHeap=0x1f0000) returned 1 [0236.146] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0236.146] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0236.146] GetLastError () returned 0x0 [0236.147] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0236.147] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228a28 [0236.147] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x263310 [0236.147] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0236.147] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239278 [0236.147] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2607e8 [0236.147] CryptAcquireContextA (in: phProv=0x2293a98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2293a98*=0x213790) returned 1 [0236.149] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2607e8 | out: pbBuffer=0x2607e8) returned 1 [0236.464] CryptReleaseContext (hProv=0x213790, dwFlags=0x0) returned 1 [0236.464] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607e8 | out: hHeap=0x1f0000) returned 1 [0236.464] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x2688a0 [0236.464] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2afa08 [0236.464] QueryPerformanceCounter (in: lpPerformanceCount=0x2293a2c | out: lpPerformanceCount=0x2293a2c*=39383345928) returned 1 [0236.465] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x2293a6c | out: lpSystemTimeAsFileTime=0x2293a6c) [0236.465] QueryPerformanceCounter (in: lpPerformanceCount=0x2293a2c | out: lpPerformanceCount=0x2293a2c*=39383385996) returned 1 [0236.465] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x2293a6c | out: lpSystemTimeAsFileTime=0x2293a6c) [0236.465] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x2392b0 [0236.465] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x26e7c8 [0236.466] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2af5a8 [0236.466] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x233568 [0236.466] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f9b0 [0236.466] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206658 [0236.466] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f968 [0236.466] GetLastError () returned 0x0 [0236.466] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22939fc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0236.467] GetFileType (hFile=0x174) returned 0x1 [0236.467] SetFilePointerEx (in: hFile=0x174, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2293a68 | out: lpNewFilePointer=0x0) returned 1 [0236.468] ReadFile (in: hFile=0x174, lpBuffer=0x22a8f68, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x2293a40, lpOverlapped=0x0 | out: lpBuffer=0x22a8f68*, lpNumberOfBytesRead=0x2293a40*=0x14000, lpOverlapped=0x0) returned 1 [0236.473] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x289fb0 [0236.475] ReadFile (in: hFile=0x174, lpBuffer=0x289fb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x22939e4, lpOverlapped=0x0 | out: lpBuffer=0x289fb0*, lpNumberOfBytesRead=0x22939e4*=0x1000, lpOverlapped=0x0) returned 1 [0236.476] SetFilePointerEx (in: hFile=0x174, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2293a70 | out: lpNewFilePointer=0x0) returned 1 [0236.476] WriteFile (in: hFile=0x174, lpBuffer=0x2293f78*, nNumberOfBytesToWrite=0x14000, lpNumberOfBytesWritten=0x22939dc, lpOverlapped=0x0 | out: lpBuffer=0x2293f78*, lpNumberOfBytesWritten=0x22939dc*=0x14000, lpOverlapped=0x0) returned 1 [0236.478] WriteFile (in: hFile=0x174, lpBuffer=0x289fb0*, nNumberOfBytesToWrite=0xff0, lpNumberOfBytesWritten=0x2293a08, lpOverlapped=0x0 | out: lpBuffer=0x289fb0*, lpNumberOfBytesWritten=0x2293a08*=0xff0, lpOverlapped=0x0) returned 1 [0236.479] SetFilePointerEx (in: hFile=0x174, liDistanceToMove=0x15f90, lpNewFilePointer=0x0, dwMoveMethod=0x2293a50 | out: lpNewFilePointer=0x0) returned 1 [0236.479] ReadFile (in: hFile=0x174, lpBuffer=0x22a8f68, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x2293a28, lpOverlapped=0x0 | out: lpBuffer=0x22a8f68*, lpNumberOfBytesRead=0x2293a28*=0x14000, lpOverlapped=0x0) returned 1 [0236.479] ReadFile (in: hFile=0x174, lpBuffer=0x289fb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x22939cc, lpOverlapped=0x0 | out: lpBuffer=0x289fb0*, lpNumberOfBytesRead=0x22939cc*=0x1000, lpOverlapped=0x0) returned 1 [0236.480] SetFilePointerEx (in: hFile=0x174, liDistanceToMove=0x15f90, lpNewFilePointer=0x0, dwMoveMethod=0x2293a70 | out: lpNewFilePointer=0x0) returned 1 [0236.480] WriteFile (in: hFile=0x174, lpBuffer=0x2293f78*, nNumberOfBytesToWrite=0x14000, lpNumberOfBytesWritten=0x22939dc, lpOverlapped=0x0 | out: lpBuffer=0x2293f78*, lpNumberOfBytesWritten=0x22939dc*=0x14000, lpOverlapped=0x0) returned 1 [0236.481] WriteFile (in: hFile=0x174, lpBuffer=0x289fb0*, nNumberOfBytesToWrite=0xff0, lpNumberOfBytesWritten=0x2293a08, lpOverlapped=0x0 | out: lpBuffer=0x289fb0*, lpNumberOfBytesWritten=0x2293a08*=0xff0, lpOverlapped=0x0) returned 1 [0236.481] SetFilePointerEx (in: hFile=0x174, liDistanceToMove=0xdbba0, lpNewFilePointer=0x0, dwMoveMethod=0x2293a50 | out: lpNewFilePointer=0x0) returned 1 [0236.482] ReadFile (in: hFile=0x174, lpBuffer=0x22a8f68, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x2293a28, lpOverlapped=0x0 | out: lpBuffer=0x22a8f68*, lpNumberOfBytesRead=0x2293a28*=0x14000, lpOverlapped=0x0) returned 1 [0236.485] ReadFile (in: hFile=0x174, lpBuffer=0x289fb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x22939cc, lpOverlapped=0x0 | out: lpBuffer=0x289fb0*, lpNumberOfBytesRead=0x22939cc*=0x1000, lpOverlapped=0x0) returned 1 [0236.486] SetFilePointerEx (in: hFile=0x174, liDistanceToMove=0xdbba0, lpNewFilePointer=0x0, dwMoveMethod=0x2293a70 | out: lpNewFilePointer=0x0) returned 1 [0236.487] WriteFile (in: hFile=0x174, lpBuffer=0x2293f78*, nNumberOfBytesToWrite=0x14000, lpNumberOfBytesWritten=0x22939dc, lpOverlapped=0x0 | out: lpBuffer=0x2293f78*, lpNumberOfBytesWritten=0x22939dc*=0x14000, lpOverlapped=0x0) returned 1 [0236.487] WriteFile (in: hFile=0x174, lpBuffer=0x289fb0*, nNumberOfBytesToWrite=0xff0, lpNumberOfBytesWritten=0x2293a58, lpOverlapped=0x0 | out: lpBuffer=0x289fb0*, lpNumberOfBytesWritten=0x2293a58*=0xff0, lpOverlapped=0x0) returned 1 [0236.488] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x289fb0 | out: hHeap=0x1f0000) returned 1 [0236.488] CloseHandle (hObject=0x174) returned 1 [0236.489] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228cb0 [0236.489] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2605b8 [0236.489] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2607c0 [0236.489] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x2288c0 [0236.489] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204db0 [0236.489] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d10 [0236.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x2388b0 [0236.490] GetLastError () returned 0x0 [0236.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238f30 [0236.490] GetLastError () returned 0x0 [0236.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238ef8 [0236.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b00a8 [0236.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260608 [0236.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2859e0 [0236.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389b0 [0236.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260630 [0236.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f998 [0236.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389c0 [0236.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0236.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f9c8 [0236.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260658 [0236.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285cf8 [0236.491] GetLastError () returned 0x0 [0236.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238840 [0236.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x2388d0 [0236.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388e0 [0236.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388d0 | out: hHeap=0x1f0000) returned 1 [0236.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238960 [0236.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388e0 | out: hHeap=0x1f0000) returned 1 [0236.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238840 | out: hHeap=0x1f0000) returned 1 [0236.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388d0 [0236.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f938 [0236.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388d0 | out: hHeap=0x1f0000) returned 1 [0236.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f758 [0236.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f938 | out: hHeap=0x1f0000) returned 1 [0236.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238960 | out: hHeap=0x1f0000) returned 1 [0236.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f938 [0236.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f890 [0236.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f938 | out: hHeap=0x1f0000) returned 1 [0236.494] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f938 [0236.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f890 | out: hHeap=0x1f0000) returned 1 [0236.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f758 | out: hHeap=0x1f0000) returned 1 [0236.494] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f890 [0236.494] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204f70 [0236.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f890 | out: hHeap=0x1f0000) returned 1 [0236.494] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bf0 [0236.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f70 | out: hHeap=0x1f0000) returned 1 [0236.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f938 | out: hHeap=0x1f0000) returned 1 [0236.494] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cf0 [0236.494] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2606a8 [0236.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cf0 | out: hHeap=0x1f0000) returned 1 [0236.495] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204db0 [0236.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0236.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bf0 | out: hHeap=0x1f0000) returned 1 [0236.495] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204b90 [0236.495] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x2066b8 [0236.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204b90 | out: hHeap=0x1f0000) returned 1 [0236.495] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260770 [0236.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2066b8 | out: hHeap=0x1f0000) returned 1 [0236.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204db0 | out: hHeap=0x1f0000) returned 1 [0236.496] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238840 [0236.496] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f938 [0236.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238840 | out: hHeap=0x1f0000) returned 1 [0236.496] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f7b8 [0236.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f938 | out: hHeap=0x1f0000) returned 1 [0236.496] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204cf0 [0236.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f7b8 | out: hHeap=0x1f0000) returned 1 [0236.496] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206928 [0236.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cf0 | out: hHeap=0x1f0000) returned 1 [0236.497] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206928 | out: hHeap=0x1f0000) returned 1 [0236.497] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0236.497] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0236.497] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aca50 [0236.497] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2859e0 | out: hHeap=0x1f0000) returned 1 [0236.497] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0236.497] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238ef8 [0236.497] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605b8 [0236.498] CryptAcquireContextA (in: phProv=0x2293a98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2293a98*=0x212a48) returned 1 [0236.499] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2605b8 | out: pbBuffer=0x2605b8) returned 1 [0236.499] CryptReleaseContext (hProv=0x212a48, dwFlags=0x0) returned 1 [0236.499] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0236.499] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260900 [0236.499] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260888 [0236.499] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238de0 [0236.499] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260900 | out: hHeap=0x1f0000) returned 1 [0236.499] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab7d0 [0236.500] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238de0 | out: hHeap=0x1f0000) returned 1 [0236.500] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8480 [0236.500] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f608 [0236.500] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x2b0178 [0236.500] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260748 [0236.500] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2855c0 [0236.500] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c90 [0236.500] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b06c0 [0236.501] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2605b8 [0236.501] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2859e0 [0236.501] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388d0 [0236.501] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260770 [0236.501] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f758 [0236.501] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238950 [0236.501] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0236.502] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f620 [0236.502] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f620 | out: hHeap=0x1f0000) returned 1 [0236.502] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0236.502] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238950 | out: hHeap=0x1f0000) returned 1 [0236.502] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f758 | out: hHeap=0x1f0000) returned 1 [0236.502] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0236.502] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388d0 | out: hHeap=0x1f0000) returned 1 [0236.502] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2859e0 | out: hHeap=0x1f0000) returned 1 [0236.503] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0236.503] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b06c0 | out: hHeap=0x1f0000) returned 1 [0236.503] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239208 [0236.503] GetLastError () returned 0x0 [0236.503] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238d70 [0236.503] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2acdc8 [0236.503] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2acdc8 | out: hHeap=0x1f0000) returned 1 [0236.503] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac360 [0236.504] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab8f8 [0236.504] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac360 | out: hHeap=0x1f0000) returned 1 [0236.504] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab8f8 | out: hHeap=0x1f0000) returned 1 [0236.504] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x24eb00 [0236.504] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285e00 [0236.504] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abb48 [0236.504] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abb48 | out: hHeap=0x1f0000) returned 1 [0236.504] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab8f8 [0236.504] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab8f8 | out: hHeap=0x1f0000) returned 1 [0236.504] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2859e0 [0236.505] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2acb78 [0236.505] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2acb78 | out: hHeap=0x1f0000) returned 1 [0236.505] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f510 [0236.505] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x26fad0 [0236.505] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2aee00 [0236.505] QueryPerformanceCounter (in: lpPerformanceCount=0x22935e8 | out: lpPerformanceCount=0x22935e8*=39387403056) returned 1 [0236.505] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x2293628 | out: lpSystemTimeAsFileTime=0x2293628) [0236.505] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238840 [0236.506] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605b8 [0236.506] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204dd0 [0236.506] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204dd0 | out: hHeap=0x1f0000) returned 1 [0236.506] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0236.506] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605b8 [0236.506] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204db0 [0236.506] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204db0 | out: hHeap=0x1f0000) returned 1 [0236.506] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0236.507] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238840 | out: hHeap=0x1f0000) returned 1 [0236.507] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0236.507] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238c20 [0236.507] GetLastError () returned 0x0 [0236.507] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abd98 [0236.507] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aafb8 [0236.507] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac110 [0236.507] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2605b8 [0236.508] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260770 [0236.508] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abfe8 [0236.508] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2acdc8 [0236.508] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260608 [0236.508] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab458 [0236.508] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x222ee8 [0236.508] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2acb78 [0236.508] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x22b018 [0236.508] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2acb78 | out: hHeap=0x1f0000) returned 1 [0236.508] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x25ffe8 [0236.509] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b018 | out: hHeap=0x1f0000) returned 1 [0236.509] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2607e8 [0236.509] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2608b0 [0236.509] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607e8 | out: hHeap=0x1f0000) returned 1 [0236.509] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab330 [0236.509] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608b0 | out: hHeap=0x1f0000) returned 1 [0236.509] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x22b018 [0236.509] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x234b90 [0236.509] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b90 | out: hHeap=0x1f0000) returned 1 [0236.510] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b018 | out: hHeap=0x1f0000) returned 1 [0236.510] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25ffe8 | out: hHeap=0x1f0000) returned 1 [0236.510] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f710 [0236.510] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2284d0 [0236.510] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2607e8 [0236.510] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260810 [0236.510] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2606a8 [0236.510] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2608b0 [0236.510] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0236.510] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607e8 | out: hHeap=0x1f0000) returned 1 [0236.511] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x22b018 [0236.839] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260c70 [0236.839] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260a18 [0236.839] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c70 | out: hHeap=0x1f0000) returned 1 [0236.839] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab6a8 [0236.839] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a18 | out: hHeap=0x1f0000) returned 1 [0236.839] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206628 [0236.839] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x2a9c88 [0236.840] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a9c88 | out: hHeap=0x1f0000) returned 1 [0236.840] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206628 | out: hHeap=0x1f0000) returned 1 [0236.840] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0236.840] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab208 [0236.840] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab6a8 | out: hHeap=0x1f0000) returned 1 [0236.840] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b018 | out: hHeap=0x1f0000) returned 1 [0236.840] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204e30 [0236.840] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab6a8 [0236.840] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab8f8 [0236.841] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0236.841] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aba20 [0236.841] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab8f8 | out: hHeap=0x1f0000) returned 1 [0236.841] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608b0 | out: hHeap=0x1f0000) returned 1 [0236.841] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0236.841] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2284d0 | out: hHeap=0x1f0000) returned 1 [0236.841] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab6a8 | out: hHeap=0x1f0000) returned 1 [0236.841] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e30 | out: hHeap=0x1f0000) returned 1 [0236.842] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f710 | out: hHeap=0x1f0000) returned 1 [0236.842] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab330 | out: hHeap=0x1f0000) returned 1 [0236.842] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2acb78 [0236.842] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2acb78 | out: hHeap=0x1f0000) returned 1 [0236.842] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ee8 | out: hHeap=0x1f0000) returned 1 [0236.842] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab458 | out: hHeap=0x1f0000) returned 1 [0236.842] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab208 | out: hHeap=0x1f0000) returned 1 [0236.842] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2acdc8 | out: hHeap=0x1f0000) returned 1 [0236.842] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abfe8 | out: hHeap=0x1f0000) returned 1 [0236.842] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0236.842] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac110 | out: hHeap=0x1f0000) returned 1 [0236.843] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aafb8 | out: hHeap=0x1f0000) returned 1 [0236.843] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abc70 [0236.843] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab208 [0236.843] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abc70 | out: hHeap=0x1f0000) returned 1 [0236.843] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab208 | out: hHeap=0x1f0000) returned 1 [0236.843] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aba20 | out: hHeap=0x1f0000) returned 1 [0236.843] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abd98 | out: hHeap=0x1f0000) returned 1 [0236.843] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2859e0 | out: hHeap=0x1f0000) returned 1 [0236.843] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24eb00 | out: hHeap=0x1f0000) returned 1 [0236.843] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x2af6c0 [0236.843] GetLastError () returned 0x0 [0236.844] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388c0 [0236.844] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238880 [0236.845] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2293998, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0236.845] GetFileType (hFile=0x1f4) returned 0x1 [0236.846] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28efd8 [0236.846] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2293920 | out: lpNewFilePointer=0x0) returned 1 [0236.846] GetLastError () returned 0xb7 [0236.851] CloseHandle (hObject=0x1f4) returned 1 [0236.851] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0236.851] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x236818 [0236.852] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0236.852] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x140) returned 0x22d368 [0236.852] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236818 | out: hHeap=0x1f0000) returned 1 [0236.852] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar"), lpNewFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwFlags=0x2) returned 1 [0236.853] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d368 | out: hHeap=0x1f0000) returned 1 [0236.854] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238880 | out: hHeap=0x1f0000) returned 1 [0236.854] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388c0 | out: hHeap=0x1f0000) returned 1 [0236.854] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285e00 | out: hHeap=0x1f0000) returned 1 [0236.854] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2855c0 | out: hHeap=0x1f0000) returned 1 [0236.854] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0236.854] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c90 | out: hHeap=0x1f0000) returned 1 [0236.854] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0178 | out: hHeap=0x1f0000) returned 1 [0236.854] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f608 | out: hHeap=0x1f0000) returned 1 [0236.854] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8480 | out: hHeap=0x1f0000) returned 1 [0236.855] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2af6c0 | out: hHeap=0x1f0000) returned 1 [0236.855] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0236.855] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab7d0 | out: hHeap=0x1f0000) returned 1 [0236.855] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x26fad0 | out: hHeap=0x1f0000) returned 1 [0236.855] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aee00 | out: hHeap=0x1f0000) returned 1 [0236.855] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ef8 | out: hHeap=0x1f0000) returned 1 [0236.855] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388b0 | out: hHeap=0x1f0000) returned 1 [0236.856] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f9c8 | out: hHeap=0x1f0000) returned 1 [0236.856] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0236.856] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389c0 | out: hHeap=0x1f0000) returned 1 [0236.856] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f998 | out: hHeap=0x1f0000) returned 1 [0236.856] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260630 | out: hHeap=0x1f0000) returned 1 [0236.856] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389b0 | out: hHeap=0x1f0000) returned 1 [0236.856] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285cf8 | out: hHeap=0x1f0000) returned 1 [0236.856] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260658 | out: hHeap=0x1f0000) returned 1 [0236.856] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b00a8 | out: hHeap=0x1f0000) returned 1 [0236.857] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2288c0 | out: hHeap=0x1f0000) returned 1 [0236.857] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607c0 | out: hHeap=0x1f0000) returned 1 [0236.857] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aca50 | out: hHeap=0x1f0000) returned 1 [0236.857] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228cb0 | out: hHeap=0x1f0000) returned 1 [0236.857] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x26e7c8 | out: hHeap=0x1f0000) returned 1 [0236.857] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2af5a8 | out: hHeap=0x1f0000) returned 1 [0236.857] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206658 | out: hHeap=0x1f0000) returned 1 [0236.857] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f968 | out: hHeap=0x1f0000) returned 1 [0236.857] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f9b0 | out: hHeap=0x1f0000) returned 1 [0236.858] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233568 | out: hHeap=0x1f0000) returned 1 [0236.858] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2688a0 | out: hHeap=0x1f0000) returned 1 [0236.858] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2afa08 | out: hHeap=0x1f0000) returned 1 [0236.858] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239278 | out: hHeap=0x1f0000) returned 1 [0236.858] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0236.858] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263310 | out: hHeap=0x1f0000) returned 1 [0236.858] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228a28 | out: hHeap=0x1f0000) returned 1 [0236.858] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0236.858] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bb82c9, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8bb82c9, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8bb82c9, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x205e, dwReserved0=0x0, dwReserved1=0x0, cFileName="dnsns.jar", cAlternateFileName="")) returned 1 [0236.859] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605b8 [0236.859] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0a00 [0236.859] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220fe8 [0236.859] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0a00 | out: hHeap=0x1f0000) returned 1 [0236.859] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0236.859] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0236.860] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\dnsns.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0236.860] GetFileType (hFile=0x1f4) returned 0x1 [0236.861] CloseHandle (hObject=0x1f4) returned 1 [0236.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21ffe0 [0236.861] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\dnsns.jar"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bb82c9, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8bb82c9, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8bb82c9, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x205e)) returned 1 [0236.862] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ffe0 | out: hHeap=0x1f0000) returned 1 [0236.862] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f770 [0236.862] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f770 | out: hHeap=0x1f0000) returned 1 [0236.862] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bb82c9, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8bb82c9, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8bb82c9, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xade4, dwReserved0=0x0, dwReserved1=0x0, cFileName="jaccess.jar", cAlternateFileName="")) returned 1 [0236.862] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0236.862] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0b38 [0236.862] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2214a8 [0236.862] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0b38 | out: hHeap=0x1f0000) returned 1 [0236.862] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0236.862] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0236.863] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jaccess.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0236.863] GetFileType (hFile=0x1f4) returned 0x1 [0236.864] CloseHandle (hObject=0x1f4) returned 1 [0236.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe00 [0236.864] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jaccess.jar"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bb82c9, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8bb82c9, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8bb82c9, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xade4)) returned 1 [0236.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe00 | out: hHeap=0x1f0000) returned 1 [0236.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220328 [0236.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220328 | out: hHeap=0x1f0000) returned 1 [0236.864] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bb82c9, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8bb82c9, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1166a99, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfxrt.jar", cAlternateFileName="")) returned 1 [0236.865] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608b0 [0236.865] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0a68 [0236.865] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221a00 [0236.865] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0a68 | out: hHeap=0x1f0000) returned 1 [0236.865] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0236.865] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608b0 | out: hHeap=0x1f0000) returned 1 [0236.865] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0236.866] GetFileType (hFile=0x1f4) returned 0x1 [0236.866] CloseHandle (hObject=0x1f4) returned 1 [0236.870] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0236.872] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bb82c9, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8bb82c9, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1166a99)) returned 1 [0236.873] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0236.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21ffe0 [0236.873] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ffe0 | out: hHeap=0x1f0000) returned 1 [0236.873] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa8546b2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xaa8546b2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xaa8ed01b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x21a46d, dwReserved0=0x0, dwReserved1=0x0, cFileName="localedata.jar", cAlternateFileName="LOCALE~1.JAR")) returned 1 [0236.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0236.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0930 [0236.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221b30 [0236.873] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0930 | out: hHeap=0x1f0000) returned 1 [0236.873] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0236.873] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0236.874] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\localedata.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0236.874] GetFileType (hFile=0x1f4) returned 0x1 [0236.875] CloseHandle (hObject=0x1f4) returned 1 [0236.875] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0236.875] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\localedata.jar"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa8546b2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xaa8546b2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xaa8ed01b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x21a46d)) returned 1 [0236.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0236.875] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213680 [0236.876] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213680 | out: hHeap=0x1f0000) returned 1 [0236.876] GetLastError () returned 0x0 [0236.876] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0236.876] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228680 [0236.876] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x263310 [0236.876] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0236.876] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239080 [0236.877] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0236.877] CryptAcquireContextA (in: phProv=0x2293a98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2293a98*=0x213818) returned 1 [0236.878] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x260860 | out: pbBuffer=0x260860) returned 1 [0236.878] CryptReleaseContext (hProv=0x213818, dwFlags=0x0) returned 1 [0236.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0236.878] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x270dd8 [0236.878] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2ae310 [0236.878] QueryPerformanceCounter (in: lpPerformanceCount=0x2293a2c | out: lpPerformanceCount=0x2293a2c*=39424734092) returned 1 [0236.879] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x2293a6c | out: lpSystemTimeAsFileTime=0x2293a6c) [0236.879] QueryPerformanceCounter (in: lpPerformanceCount=0x2293a2c | out: lpPerformanceCount=0x2293a2c*=39424763627) returned 1 [0236.879] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x2293a6c | out: lpSystemTimeAsFileTime=0x2293a6c) [0236.879] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238f30 [0236.879] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x26d4c0 [0236.879] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2ae540 [0236.879] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x233228 [0236.879] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f9c8 [0236.879] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206838 [0236.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f968 [0236.880] GetLastError () returned 0x0 [0236.880] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\localedata.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22939fc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0236.880] GetFileType (hFile=0x1f4) returned 0x1 [0236.881] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2293a68 | out: lpNewFilePointer=0x0) returned 1 [0236.881] ReadFile (in: hFile=0x1f4, lpBuffer=0x22a8f68, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x2293a40, lpOverlapped=0x0 | out: lpBuffer=0x22a8f68*, lpNumberOfBytesRead=0x2293a40*=0x14000, lpOverlapped=0x0) returned 1 [0236.887] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28efd8 [0236.887] ReadFile (in: hFile=0x1f4, lpBuffer=0x28efd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x22939e4, lpOverlapped=0x0 | out: lpBuffer=0x28efd8*, lpNumberOfBytesRead=0x22939e4*=0x1000, lpOverlapped=0x0) returned 1 [0236.889] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2293a70 | out: lpNewFilePointer=0x0) returned 1 [0236.889] WriteFile (in: hFile=0x1f4, lpBuffer=0x2293f78*, nNumberOfBytesToWrite=0x14000, lpNumberOfBytesWritten=0x22939dc, lpOverlapped=0x0 | out: lpBuffer=0x2293f78*, lpNumberOfBytesWritten=0x22939dc*=0x14000, lpOverlapped=0x0) returned 1 [0236.890] WriteFile (in: hFile=0x1f4, lpBuffer=0x28efd8*, nNumberOfBytesToWrite=0xff0, lpNumberOfBytesWritten=0x2293a08, lpOverlapped=0x0 | out: lpBuffer=0x28efd8*, lpNumberOfBytesWritten=0x2293a08*=0xff0, lpOverlapped=0x0) returned 1 [0236.891] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x15f90, lpNewFilePointer=0x0, dwMoveMethod=0x2293a50 | out: lpNewFilePointer=0x0) returned 1 [0236.891] ReadFile (in: hFile=0x1f4, lpBuffer=0x22a8f68, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x2293a28, lpOverlapped=0x0 | out: lpBuffer=0x22a8f68*, lpNumberOfBytesRead=0x2293a28*=0x14000, lpOverlapped=0x0) returned 1 [0236.891] ReadFile (in: hFile=0x1f4, lpBuffer=0x28efd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x22939cc, lpOverlapped=0x0 | out: lpBuffer=0x28efd8*, lpNumberOfBytesRead=0x22939cc*=0x1000, lpOverlapped=0x0) returned 1 [0236.892] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x15f90, lpNewFilePointer=0x0, dwMoveMethod=0x2293a70 | out: lpNewFilePointer=0x0) returned 1 [0236.892] WriteFile (in: hFile=0x1f4, lpBuffer=0x2293f78*, nNumberOfBytesToWrite=0x14000, lpNumberOfBytesWritten=0x22939dc, lpOverlapped=0x0 | out: lpBuffer=0x2293f78*, lpNumberOfBytesWritten=0x22939dc*=0x14000, lpOverlapped=0x0) returned 1 [0236.893] WriteFile (in: hFile=0x1f4, lpBuffer=0x28efd8*, nNumberOfBytesToWrite=0xff0, lpNumberOfBytesWritten=0x2293a08, lpOverlapped=0x0 | out: lpBuffer=0x28efd8*, lpNumberOfBytesWritten=0x2293a08*=0xff0, lpOverlapped=0x0) returned 1 [0236.893] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0xdbba0, lpNewFilePointer=0x0, dwMoveMethod=0x2293a50 | out: lpNewFilePointer=0x0) returned 1 [0236.893] ReadFile (in: hFile=0x1f4, lpBuffer=0x22a8f68, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x2293a28, lpOverlapped=0x0 | out: lpBuffer=0x22a8f68*, lpNumberOfBytesRead=0x2293a28*=0x14000, lpOverlapped=0x0) returned 1 [0237.182] ReadFile (in: hFile=0x1f4, lpBuffer=0x28efd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x22939cc, lpOverlapped=0x0 | out: lpBuffer=0x28efd8*, lpNumberOfBytesRead=0x22939cc*=0x1000, lpOverlapped=0x0) returned 1 [0237.184] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0xdbba0, lpNewFilePointer=0x0, dwMoveMethod=0x2293a70 | out: lpNewFilePointer=0x0) returned 1 [0237.184] WriteFile (in: hFile=0x1f4, lpBuffer=0x2293f78*, nNumberOfBytesToWrite=0x14000, lpNumberOfBytesWritten=0x22939dc, lpOverlapped=0x0 | out: lpBuffer=0x2293f78*, lpNumberOfBytesWritten=0x22939dc*=0x14000, lpOverlapped=0x0) returned 1 [0237.185] WriteFile (in: hFile=0x1f4, lpBuffer=0x28efd8*, nNumberOfBytesToWrite=0xff0, lpNumberOfBytesWritten=0x2293a58, lpOverlapped=0x0 | out: lpBuffer=0x28efd8*, lpNumberOfBytesWritten=0x2293a58*=0xff0, lpOverlapped=0x0) returned 1 [0237.186] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28efd8 | out: hHeap=0x1f0000) returned 1 [0237.186] CloseHandle (hObject=0x1f4) returned 1 [0237.187] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2285a8 [0237.187] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260928 [0237.187] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260978 [0237.187] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x228440 [0237.187] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f30 [0237.187] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f50 [0237.187] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x238800 [0237.187] GetLastError () returned 0x0 [0237.188] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239010 [0237.188] GetLastError () returned 0x0 [0237.188] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239048 [0237.188] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0b38 [0237.188] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2604c8 [0237.188] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2856c8 [0237.189] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388f0 [0237.189] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0237.189] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f938 [0237.189] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238910 [0237.189] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260518 [0237.189] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f980 [0237.189] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260540 [0237.189] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2854b8 [0237.189] GetLastError () returned 0x0 [0237.189] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238810 [0237.190] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238820 [0237.190] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238830 [0237.190] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238820 | out: hHeap=0x1f0000) returned 1 [0237.190] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238820 [0237.190] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238830 | out: hHeap=0x1f0000) returned 1 [0237.190] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238810 | out: hHeap=0x1f0000) returned 1 [0237.190] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238810 [0237.190] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f920 [0237.190] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238810 | out: hHeap=0x1f0000) returned 1 [0237.190] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f650 [0237.190] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f920 | out: hHeap=0x1f0000) returned 1 [0237.191] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238820 | out: hHeap=0x1f0000) returned 1 [0237.191] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f920 [0237.191] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f890 [0237.191] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f920 | out: hHeap=0x1f0000) returned 1 [0237.191] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f920 [0237.191] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f890 | out: hHeap=0x1f0000) returned 1 [0237.191] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f650 | out: hHeap=0x1f0000) returned 1 [0237.191] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f710 [0237.191] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204f30 [0237.191] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f710 | out: hHeap=0x1f0000) returned 1 [0237.191] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f50 [0237.192] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f30 | out: hHeap=0x1f0000) returned 1 [0237.192] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f920 | out: hHeap=0x1f0000) returned 1 [0237.192] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f70 [0237.192] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260590 [0237.192] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f70 | out: hHeap=0x1f0000) returned 1 [0237.192] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204bf0 [0237.192] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0237.192] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f50 | out: hHeap=0x1f0000) returned 1 [0237.192] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204e90 [0237.192] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x2068c8 [0237.193] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e90 | out: hHeap=0x1f0000) returned 1 [0237.193] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260568 [0237.193] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2068c8 | out: hHeap=0x1f0000) returned 1 [0237.193] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bf0 | out: hHeap=0x1f0000) returned 1 [0237.193] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238810 [0237.193] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f920 [0237.193] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238810 | out: hHeap=0x1f0000) returned 1 [0237.193] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f890 [0237.193] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f920 | out: hHeap=0x1f0000) returned 1 [0237.194] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204f30 [0237.194] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f890 | out: hHeap=0x1f0000) returned 1 [0237.194] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206628 [0237.194] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f30 | out: hHeap=0x1f0000) returned 1 [0237.194] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206628 | out: hHeap=0x1f0000) returned 1 [0237.194] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0237.194] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0237.194] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2acdc8 [0237.194] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2856c8 | out: hHeap=0x1f0000) returned 1 [0237.194] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604c8 | out: hHeap=0x1f0000) returned 1 [0237.194] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238cc8 [0237.195] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0237.195] CryptAcquireContextA (in: phProv=0x2293a98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2293a98*=0x213350) returned 1 [0237.197] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x260928 | out: pbBuffer=0x260928) returned 1 [0237.197] CryptReleaseContext (hProv=0x213350, dwFlags=0x0) returned 1 [0237.197] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0237.197] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2604c8 [0237.197] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260568 [0237.197] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238ec0 [0237.198] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604c8 | out: hHeap=0x1f0000) returned 1 [0237.198] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aba20 [0237.198] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ec0 | out: hHeap=0x1f0000) returned 1 [0237.198] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8270 [0237.198] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f6e0 [0237.198] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x2b0248 [0237.198] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260928 [0237.198] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2852a8 [0237.198] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e30 [0237.198] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0588 [0237.199] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2604c8 [0237.199] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2859e0 [0237.199] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238810 [0237.199] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0237.199] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f6c8 [0237.199] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238860 [0237.199] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b30 [0237.199] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f608 [0237.199] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f608 | out: hHeap=0x1f0000) returned 1 [0237.199] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b30 | out: hHeap=0x1f0000) returned 1 [0237.200] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238860 | out: hHeap=0x1f0000) returned 1 [0237.200] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f6c8 | out: hHeap=0x1f0000) returned 1 [0237.200] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0237.200] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238810 | out: hHeap=0x1f0000) returned 1 [0237.200] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2859e0 | out: hHeap=0x1f0000) returned 1 [0237.200] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604c8 | out: hHeap=0x1f0000) returned 1 [0237.200] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0588 | out: hHeap=0x1f0000) returned 1 [0237.200] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238d38 [0237.200] GetLastError () returned 0x0 [0237.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238f68 [0237.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abb48 [0237.201] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abb48 | out: hHeap=0x1f0000) returned 1 [0237.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab6a8 [0237.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac238 [0237.201] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab6a8 | out: hHeap=0x1f0000) returned 1 [0237.201] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac238 | out: hHeap=0x1f0000) returned 1 [0237.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x24e680 [0237.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2859e0 [0237.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac238 [0237.201] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac238 | out: hHeap=0x1f0000) returned 1 [0237.202] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac238 [0237.202] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac238 | out: hHeap=0x1f0000) returned 1 [0237.202] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2856c8 [0237.202] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac5b0 [0237.202] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac5b0 | out: hHeap=0x1f0000) returned 1 [0237.202] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f5d8 [0237.202] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x269ba8 [0237.202] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2afd50 [0237.202] QueryPerformanceCounter (in: lpPerformanceCount=0x22935e8 | out: lpPerformanceCount=0x22935e8*=39457135530) returned 1 [0237.203] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x2293628 | out: lpSystemTimeAsFileTime=0x2293628) [0237.203] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238860 [0237.203] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604c8 [0237.203] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e90 [0237.203] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e90 | out: hHeap=0x1f0000) returned 1 [0237.203] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604c8 | out: hHeap=0x1f0000) returned 1 [0237.203] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604c8 [0237.203] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204df0 [0237.204] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204df0 | out: hHeap=0x1f0000) returned 1 [0237.204] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604c8 | out: hHeap=0x1f0000) returned 1 [0237.204] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238860 | out: hHeap=0x1f0000) returned 1 [0237.204] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0237.204] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239198 [0237.204] GetLastError () returned 0x0 [0237.204] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abb48 [0237.204] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac238 [0237.204] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac360 [0237.204] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2604c8 [0237.205] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260590 [0237.205] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac928 [0237.205] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac488 [0237.205] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2609f0 [0237.205] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab0e0 [0237.205] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x234b90 [0237.205] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac5b0 [0237.205] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0237.205] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac5b0 | out: hHeap=0x1f0000) returned 1 [0237.205] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x20c2c0 [0237.205] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0237.205] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260b30 [0237.206] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260b58 [0237.206] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b30 | out: hHeap=0x1f0000) returned 1 [0237.206] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab580 [0237.206] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b58 | out: hHeap=0x1f0000) returned 1 [0237.206] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0237.206] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x2647e0 [0237.206] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2647e0 | out: hHeap=0x1f0000) returned 1 [0237.206] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0237.206] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20c2c0 | out: hHeap=0x1f0000) returned 1 [0237.206] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f770 [0237.206] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2287e8 [0237.206] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260b30 [0237.206] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260b58 [0237.206] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260ba8 [0237.206] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260bd0 [0237.207] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b58 | out: hHeap=0x1f0000) returned 1 [0237.207] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b30 | out: hHeap=0x1f0000) returned 1 [0237.207] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0237.207] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260b30 [0237.207] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260bf8 [0237.207] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b30 | out: hHeap=0x1f0000) returned 1 [0237.207] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab6a8 [0237.207] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0237.208] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206628 [0237.208] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x2a9c88 [0237.208] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a9c88 | out: hHeap=0x1f0000) returned 1 [0237.208] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206628 | out: hHeap=0x1f0000) returned 1 [0237.208] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609f0 | out: hHeap=0x1f0000) returned 1 [0237.208] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac5b0 [0237.208] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab6a8 | out: hHeap=0x1f0000) returned 1 [0237.209] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0237.209] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204bb0 [0237.209] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac6d8 [0237.209] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aafb8 [0237.209] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0237.209] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aca50 [0237.209] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aafb8 | out: hHeap=0x1f0000) returned 1 [0237.209] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bd0 | out: hHeap=0x1f0000) returned 1 [0237.209] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ba8 | out: hHeap=0x1f0000) returned 1 [0237.209] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2287e8 | out: hHeap=0x1f0000) returned 1 [0237.209] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac6d8 | out: hHeap=0x1f0000) returned 1 [0237.209] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bb0 | out: hHeap=0x1f0000) returned 1 [0237.209] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f770 | out: hHeap=0x1f0000) returned 1 [0237.209] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab580 | out: hHeap=0x1f0000) returned 1 [0237.210] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac6d8 [0237.210] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac6d8 | out: hHeap=0x1f0000) returned 1 [0237.210] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b90 | out: hHeap=0x1f0000) returned 1 [0237.210] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab0e0 | out: hHeap=0x1f0000) returned 1 [0237.210] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac5b0 | out: hHeap=0x1f0000) returned 1 [0237.210] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac488 | out: hHeap=0x1f0000) returned 1 [0237.210] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac928 | out: hHeap=0x1f0000) returned 1 [0237.211] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604c8 | out: hHeap=0x1f0000) returned 1 [0237.213] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac360 | out: hHeap=0x1f0000) returned 1 [0237.213] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac238 | out: hHeap=0x1f0000) returned 1 [0237.213] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac238 [0237.213] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aafb8 [0237.213] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac238 | out: hHeap=0x1f0000) returned 1 [0237.213] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aafb8 | out: hHeap=0x1f0000) returned 1 [0237.213] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aca50 | out: hHeap=0x1f0000) returned 1 [0237.213] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abb48 | out: hHeap=0x1f0000) returned 1 [0237.213] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2856c8 | out: hHeap=0x1f0000) returned 1 [0237.213] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24e680 | out: hHeap=0x1f0000) returned 1 [0237.213] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x2afe68 [0237.213] GetLastError () returned 0x0 [0237.214] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238810 [0237.214] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238830 [0237.215] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\localedata.jar"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2293998, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0237.215] GetFileType (hFile=0x1f4) returned 0x1 [0237.215] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28efd8 [0237.215] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2293920 | out: lpNewFilePointer=0x0) returned 1 [0237.216] GetLastError () returned 0xb7 [0237.275] CloseHandle (hObject=0x1f4) returned 1 [0237.275] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0237.275] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x236818 [0237.276] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0237.276] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x140) returned 0x22d368 [0237.276] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236818 | out: hHeap=0x1f0000) returned 1 [0237.276] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\localedata.jar"), lpNewFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\localedata.jar.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwFlags=0x2) returned 1 [0237.277] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d368 | out: hHeap=0x1f0000) returned 1 [0237.277] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238830 | out: hHeap=0x1f0000) returned 1 [0237.277] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238810 | out: hHeap=0x1f0000) returned 1 [0237.278] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2859e0 | out: hHeap=0x1f0000) returned 1 [0237.278] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2852a8 | out: hHeap=0x1f0000) returned 1 [0237.278] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0237.278] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e30 | out: hHeap=0x1f0000) returned 1 [0237.278] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0248 | out: hHeap=0x1f0000) returned 1 [0237.278] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f6e0 | out: hHeap=0x1f0000) returned 1 [0237.278] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8270 | out: hHeap=0x1f0000) returned 1 [0237.278] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2afe68 | out: hHeap=0x1f0000) returned 1 [0237.279] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0237.279] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aba20 | out: hHeap=0x1f0000) returned 1 [0237.279] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x269ba8 | out: hHeap=0x1f0000) returned 1 [0237.279] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2afd50 | out: hHeap=0x1f0000) returned 1 [0237.279] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238cc8 | out: hHeap=0x1f0000) returned 1 [0237.279] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238800 | out: hHeap=0x1f0000) returned 1 [0237.279] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f980 | out: hHeap=0x1f0000) returned 1 [0237.279] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0237.279] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238910 | out: hHeap=0x1f0000) returned 1 [0237.280] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f938 | out: hHeap=0x1f0000) returned 1 [0237.280] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0237.280] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388f0 | out: hHeap=0x1f0000) returned 1 [0237.280] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2854b8 | out: hHeap=0x1f0000) returned 1 [0237.280] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0237.280] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0b38 | out: hHeap=0x1f0000) returned 1 [0237.280] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228440 | out: hHeap=0x1f0000) returned 1 [0237.280] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0237.281] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2acdc8 | out: hHeap=0x1f0000) returned 1 [0237.281] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2285a8 | out: hHeap=0x1f0000) returned 1 [0237.281] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x26d4c0 | out: hHeap=0x1f0000) returned 1 [0237.281] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae540 | out: hHeap=0x1f0000) returned 1 [0237.281] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206838 | out: hHeap=0x1f0000) returned 1 [0237.281] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f968 | out: hHeap=0x1f0000) returned 1 [0237.281] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f9c8 | out: hHeap=0x1f0000) returned 1 [0237.281] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233228 | out: hHeap=0x1f0000) returned 1 [0237.281] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x270dd8 | out: hHeap=0x1f0000) returned 1 [0237.281] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae310 | out: hHeap=0x1f0000) returned 1 [0237.282] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239080 | out: hHeap=0x1f0000) returned 1 [0237.282] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0237.282] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263310 | out: hHeap=0x1f0000) returned 1 [0237.282] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228680 | out: hHeap=0x1f0000) returned 1 [0237.282] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0237.282] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="meta-index", cAlternateFileName="META-I~1")) returned 1 [0237.282] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0237.282] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0a00 [0237.283] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2211b0 [0237.283] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0a00 | out: hHeap=0x1f0000) returned 1 [0237.283] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0237.283] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0237.283] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\meta-index"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0237.284] GetFileType (hFile=0x1f4) returned 0x1 [0237.284] CloseHandle (hObject=0x1f4) returned 1 [0237.285] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0237.285] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\meta-index"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5b5)) returned 1 [0237.285] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0237.285] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21ffe0 [0237.285] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ffe0 | out: hHeap=0x1f0000) returned 1 [0237.286] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1edd4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="nashorn.jar", cAlternateFileName="")) returned 1 [0237.286] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0237.286] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0318 [0237.286] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2215d8 [0237.286] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0318 | out: hHeap=0x1f0000) returned 1 [0237.286] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0237.286] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0237.287] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\nashorn.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0237.287] GetFileType (hFile=0x1f4) returned 0x1 [0237.288] CloseHandle (hObject=0x1f4) returned 1 [0237.288] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220580 [0237.288] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\nashorn.jar"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1edd4e)) returned 1 [0237.288] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220580 | out: hHeap=0x1f0000) returned 1 [0237.288] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2202b0 [0237.288] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2202b0 | out: hHeap=0x1f0000) returned 1 [0237.288] GetLastError () returned 0x0 [0237.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260630 [0237.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228b48 [0237.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2627e8 [0237.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0237.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2392b0 [0237.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260658 [0237.289] CryptAcquireContextA (in: phProv=0x2293a98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2293a98*=0x213570) returned 1 [0237.291] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x260658 | out: pbBuffer=0x260658) returned 1 [0237.291] CryptReleaseContext (hProv=0x213570, dwFlags=0x0) returned 1 [0237.291] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260658 | out: hHeap=0x1f0000) returned 1 [0237.291] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x269ba8 [0237.291] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2afe68 [0237.291] QueryPerformanceCounter (in: lpPerformanceCount=0x2293a2c | out: lpPerformanceCount=0x2293a2c*=39466024514) returned 1 [0237.291] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x2293a6c | out: lpSystemTimeAsFileTime=0x2293a6c) [0237.292] QueryPerformanceCounter (in: lpPerformanceCount=0x2293a2c | out: lpPerformanceCount=0x2293a2c*=39466057305) returned 1 [0237.292] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x2293a6c | out: lpSystemTimeAsFileTime=0x2293a6c) [0237.292] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239010 [0237.292] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x26c1b8 [0237.292] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2afd50 [0237.292] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x232ba8 [0237.292] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f968 [0237.292] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206688 [0237.293] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f980 [0237.293] GetLastError () returned 0x0 [0237.293] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\nashorn.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22939fc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0237.293] GetFileType (hFile=0x1f4) returned 0x1 [0237.294] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2293a68 | out: lpNewFilePointer=0x0) returned 1 [0237.294] ReadFile (in: hFile=0x1f4, lpBuffer=0x22a8f68, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x2293a40, lpOverlapped=0x0 | out: lpBuffer=0x22a8f68*, lpNumberOfBytesRead=0x2293a40*=0x14000, lpOverlapped=0x0) returned 1 [0237.325] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28bfc0 [0237.325] ReadFile (in: hFile=0x1f4, lpBuffer=0x28bfc0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x22939e4, lpOverlapped=0x0 | out: lpBuffer=0x28bfc0*, lpNumberOfBytesRead=0x22939e4*=0x1000, lpOverlapped=0x0) returned 1 [0237.327] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2293a70 | out: lpNewFilePointer=0x0) returned 1 [0237.328] WriteFile (in: hFile=0x1f4, lpBuffer=0x2293f78*, nNumberOfBytesToWrite=0x14000, lpNumberOfBytesWritten=0x22939dc, lpOverlapped=0x0 | out: lpBuffer=0x2293f78*, lpNumberOfBytesWritten=0x22939dc*=0x14000, lpOverlapped=0x0) returned 1 [0237.329] WriteFile (in: hFile=0x1f4, lpBuffer=0x28bfc0*, nNumberOfBytesToWrite=0xff0, lpNumberOfBytesWritten=0x2293a08, lpOverlapped=0x0 | out: lpBuffer=0x28bfc0*, lpNumberOfBytesWritten=0x2293a08*=0xff0, lpOverlapped=0x0) returned 1 [0237.329] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x15f90, lpNewFilePointer=0x0, dwMoveMethod=0x2293a50 | out: lpNewFilePointer=0x0) returned 1 [0237.330] ReadFile (in: hFile=0x1f4, lpBuffer=0x22a8f68, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x2293a28, lpOverlapped=0x0 | out: lpBuffer=0x22a8f68*, lpNumberOfBytesRead=0x2293a28*=0x14000, lpOverlapped=0x0) returned 1 [0237.330] ReadFile (in: hFile=0x1f4, lpBuffer=0x28bfc0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x22939cc, lpOverlapped=0x0 | out: lpBuffer=0x28bfc0*, lpNumberOfBytesRead=0x22939cc*=0x1000, lpOverlapped=0x0) returned 1 [0237.331] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x15f90, lpNewFilePointer=0x0, dwMoveMethod=0x2293a70 | out: lpNewFilePointer=0x0) returned 1 [0237.331] WriteFile (in: hFile=0x1f4, lpBuffer=0x2293f78*, nNumberOfBytesToWrite=0x14000, lpNumberOfBytesWritten=0x22939dc, lpOverlapped=0x0 | out: lpBuffer=0x2293f78*, lpNumberOfBytesWritten=0x22939dc*=0x14000, lpOverlapped=0x0) returned 1 [0237.332] WriteFile (in: hFile=0x1f4, lpBuffer=0x28bfc0*, nNumberOfBytesToWrite=0xff0, lpNumberOfBytesWritten=0x2293a08, lpOverlapped=0x0 | out: lpBuffer=0x28bfc0*, lpNumberOfBytesWritten=0x2293a08*=0xff0, lpOverlapped=0x0) returned 1 [0237.333] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0xdbba0, lpNewFilePointer=0x0, dwMoveMethod=0x2293a50 | out: lpNewFilePointer=0x0) returned 1 [0237.333] ReadFile (in: hFile=0x1f4, lpBuffer=0x22a8f68, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x2293a28, lpOverlapped=0x0 | out: lpBuffer=0x22a8f68*, lpNumberOfBytesRead=0x2293a28*=0x14000, lpOverlapped=0x0) returned 1 [0237.337] ReadFile (in: hFile=0x1f4, lpBuffer=0x28bfc0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x22939cc, lpOverlapped=0x0 | out: lpBuffer=0x28bfc0*, lpNumberOfBytesRead=0x22939cc*=0x1000, lpOverlapped=0x0) returned 1 [0237.338] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0xdbba0, lpNewFilePointer=0x0, dwMoveMethod=0x2293a70 | out: lpNewFilePointer=0x0) returned 1 [0237.339] WriteFile (in: hFile=0x1f4, lpBuffer=0x2293f78*, nNumberOfBytesToWrite=0x14000, lpNumberOfBytesWritten=0x22939dc, lpOverlapped=0x0 | out: lpBuffer=0x2293f78*, lpNumberOfBytesWritten=0x22939dc*=0x14000, lpOverlapped=0x0) returned 1 [0237.340] WriteFile (in: hFile=0x1f4, lpBuffer=0x28bfc0*, nNumberOfBytesToWrite=0xff0, lpNumberOfBytesWritten=0x2293a58, lpOverlapped=0x0 | out: lpBuffer=0x28bfc0*, lpNumberOfBytesWritten=0x2293a58*=0xff0, lpOverlapped=0x0) returned 1 [0237.340] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28bfc0 | out: hHeap=0x1f0000) returned 1 [0237.340] CloseHandle (hObject=0x1f4) returned 1 [0237.341] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228680 [0237.341] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2604c8 [0237.341] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260928 [0237.342] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x2287e8 [0237.342] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e30 [0237.342] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f50 [0237.342] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x2389c0 [0237.342] GetLastError () returned 0x0 [0237.342] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238cc8 [0237.343] GetLastError () returned 0x0 [0237.343] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238cc8 [0237.343] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0ad0 [0237.343] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260658 [0237.343] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2858d8 [0237.343] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238800 [0237.344] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0237.344] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f920 [0237.344] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238810 [0237.344] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260518 [0237.344] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f998 [0237.344] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2606f8 [0237.344] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2852a8 [0237.344] GetLastError () returned 0x0 [0237.345] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x2388f0 [0237.345] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238910 [0237.345] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238820 [0237.345] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238910 | out: hHeap=0x1f0000) returned 1 [0237.345] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238830 [0237.345] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238820 | out: hHeap=0x1f0000) returned 1 [0237.346] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388f0 | out: hHeap=0x1f0000) returned 1 [0237.346] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238880 [0237.346] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f9b0 [0237.346] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238880 | out: hHeap=0x1f0000) returned 1 [0237.346] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f938 [0237.346] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f9b0 | out: hHeap=0x1f0000) returned 1 [0237.346] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238830 | out: hHeap=0x1f0000) returned 1 [0237.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f9b0 [0237.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f9c8 [0237.347] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f9b0 | out: hHeap=0x1f0000) returned 1 [0237.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f9b0 [0237.347] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f9c8 | out: hHeap=0x1f0000) returned 1 [0237.347] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f938 | out: hHeap=0x1f0000) returned 1 [0237.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f938 [0237.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204f30 [0237.348] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f938 | out: hHeap=0x1f0000) returned 1 [0237.348] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e90 [0237.348] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f30 | out: hHeap=0x1f0000) returned 1 [0237.348] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f9b0 | out: hHeap=0x1f0000) returned 1 [0237.348] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204dd0 [0237.348] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260888 [0237.348] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204dd0 | out: hHeap=0x1f0000) returned 1 [0237.348] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204f30 [0237.349] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0237.349] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e90 | out: hHeap=0x1f0000) returned 1 [0237.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204c50 [0237.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206808 [0237.349] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c50 | out: hHeap=0x1f0000) returned 1 [0237.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260748 [0237.349] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206808 | out: hHeap=0x1f0000) returned 1 [0237.350] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f30 | out: hHeap=0x1f0000) returned 1 [0237.350] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238820 [0237.350] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f9b0 [0237.350] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238820 | out: hHeap=0x1f0000) returned 1 [0237.350] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f9c8 [0237.350] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f9b0 | out: hHeap=0x1f0000) returned 1 [0237.350] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204d70 [0237.350] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f9c8 | out: hHeap=0x1f0000) returned 1 [0237.351] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206808 [0237.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d70 | out: hHeap=0x1f0000) returned 1 [0237.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206808 | out: hHeap=0x1f0000) returned 1 [0237.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0237.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604c8 | out: hHeap=0x1f0000) returned 1 [0237.351] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abb48 [0237.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2858d8 | out: hHeap=0x1f0000) returned 1 [0237.352] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260658 | out: hHeap=0x1f0000) returned 1 [0237.352] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238e50 [0237.352] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0237.352] CryptAcquireContextA (in: phProv=0x2293a98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2293a98*=0x213680) returned 1 [0237.353] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x260748 | out: pbBuffer=0x260748) returned 1 [0237.354] CryptReleaseContext (hProv=0x213680, dwFlags=0x0) returned 1 [0237.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0237.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260978 [0237.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260748 [0237.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c20 [0237.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0237.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abd98 [0237.355] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c20 | out: hHeap=0x1f0000) returned 1 [0237.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8270 [0237.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f9b0 [0237.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x2b0318 [0237.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260658 [0237.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2854b8 [0237.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0237.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0380 [0237.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2606a8 [0237.356] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2858d8 [0237.356] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238820 [0237.356] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0237.356] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f9c8 [0237.356] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238830 [0237.356] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260770 [0237.356] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f938 [0237.356] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f938 | out: hHeap=0x1f0000) returned 1 [0237.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0237.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238830 | out: hHeap=0x1f0000) returned 1 [0237.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f9c8 | out: hHeap=0x1f0000) returned 1 [0237.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0237.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238820 | out: hHeap=0x1f0000) returned 1 [0237.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2858d8 | out: hHeap=0x1f0000) returned 1 [0237.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0237.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0380 | out: hHeap=0x1f0000) returned 1 [0237.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239208 [0237.358] GetLastError () returned 0x0 [0237.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238c20 [0237.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aca50 [0237.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aca50 | out: hHeap=0x1f0000) returned 1 [0237.359] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aca50 [0237.359] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac488 [0237.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aca50 | out: hHeap=0x1f0000) returned 1 [0237.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac488 | out: hHeap=0x1f0000) returned 1 [0237.359] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x24ec00 [0237.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x284f90 [0237.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aafb8 [0237.360] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aafb8 | out: hHeap=0x1f0000) returned 1 [0237.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab208 [0237.360] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab208 | out: hHeap=0x1f0000) returned 1 [0237.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2855c0 [0237.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab8f8 [0237.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab8f8 | out: hHeap=0x1f0000) returned 1 [0237.361] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f768 [0237.361] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x26d4c0 [0237.361] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2ae658 [0237.361] QueryPerformanceCounter (in: lpPerformanceCount=0x22935e8 | out: lpPerformanceCount=0x22935e8*=39473012093) returned 1 [0237.361] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x2293628 | out: lpSystemTimeAsFileTime=0x2293628) [0237.362] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x2388a0 [0237.362] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0237.362] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e30 [0237.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e30 | out: hHeap=0x1f0000) returned 1 [0237.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0237.362] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260770 [0237.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d90 [0237.363] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d90 | out: hHeap=0x1f0000) returned 1 [0237.363] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0237.363] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388a0 | out: hHeap=0x1f0000) returned 1 [0237.363] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0237.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239080 [0237.363] GetLastError () returned 0x0 [0237.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac928 [0237.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac5b0 [0237.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab7d0 [0237.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2606a8 [0237.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260770 [0237.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aafb8 [0237.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab580 [0237.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2607c0 [0237.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abc70 [0237.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x234b90 [0237.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab8f8 [0237.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0237.366] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab8f8 | out: hHeap=0x1f0000) returned 1 [0237.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x20c2c0 [0237.366] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0237.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260888 [0237.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260540 [0237.366] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0237.367] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac360 [0237.367] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0237.367] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0237.367] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x2647e0 [0237.367] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2647e0 | out: hHeap=0x1f0000) returned 1 [0237.367] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0237.720] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20c2c0 | out: hHeap=0x1f0000) returned 1 [0237.720] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f740 [0237.720] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2288c0 [0237.720] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2605b8 [0237.721] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260608 [0237.721] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260a18 [0237.721] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2609f0 [0237.721] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0237.721] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0237.721] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0237.721] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2605b8 [0237.722] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260608 [0237.722] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0237.722] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab0e0 [0237.722] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0237.722] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2068c8 [0237.722] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x2a9840 [0237.722] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a9840 | out: hHeap=0x1f0000) returned 1 [0237.722] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2068c8 | out: hHeap=0x1f0000) returned 1 [0237.723] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607c0 | out: hHeap=0x1f0000) returned 1 [0237.723] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac488 [0237.723] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab0e0 | out: hHeap=0x1f0000) returned 1 [0237.723] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0237.723] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204f10 [0237.723] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abec0 [0237.723] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aba20 [0237.723] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0237.723] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac6d8 [0237.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aba20 | out: hHeap=0x1f0000) returned 1 [0237.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609f0 | out: hHeap=0x1f0000) returned 1 [0237.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a18 | out: hHeap=0x1f0000) returned 1 [0237.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2288c0 | out: hHeap=0x1f0000) returned 1 [0237.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abec0 | out: hHeap=0x1f0000) returned 1 [0237.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f10 | out: hHeap=0x1f0000) returned 1 [0237.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f740 | out: hHeap=0x1f0000) returned 1 [0237.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac360 | out: hHeap=0x1f0000) returned 1 [0237.725] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2acca0 [0237.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2acca0 | out: hHeap=0x1f0000) returned 1 [0237.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b90 | out: hHeap=0x1f0000) returned 1 [0237.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abc70 | out: hHeap=0x1f0000) returned 1 [0237.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac488 | out: hHeap=0x1f0000) returned 1 [0237.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab580 | out: hHeap=0x1f0000) returned 1 [0237.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aafb8 | out: hHeap=0x1f0000) returned 1 [0237.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0237.726] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab7d0 | out: hHeap=0x1f0000) returned 1 [0237.726] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac5b0 | out: hHeap=0x1f0000) returned 1 [0237.726] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aafb8 [0237.726] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aca50 [0237.726] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aafb8 | out: hHeap=0x1f0000) returned 1 [0237.726] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aca50 | out: hHeap=0x1f0000) returned 1 [0237.726] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac6d8 | out: hHeap=0x1f0000) returned 1 [0237.727] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac928 | out: hHeap=0x1f0000) returned 1 [0237.727] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2855c0 | out: hHeap=0x1f0000) returned 1 [0237.727] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24ec00 | out: hHeap=0x1f0000) returned 1 [0237.727] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x2aece8 [0237.727] GetLastError () returned 0x0 [0237.727] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238860 [0237.728] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238870 [0237.729] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\nashorn.jar"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2293998, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0237.729] GetFileType (hFile=0x224) returned 0x1 [0237.730] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x289fb0 [0237.730] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2293920 | out: lpNewFilePointer=0x0) returned 1 [0237.730] GetLastError () returned 0xb7 [0237.733] CloseHandle (hObject=0x224) returned 1 [0237.734] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0237.734] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f510 [0237.735] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0237.735] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x11e) returned 0x2abec0 [0237.735] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0237.735] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\nashorn.jar"), lpNewFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\nashorn.jar.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwFlags=0x2) returned 1 [0237.736] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abec0 | out: hHeap=0x1f0000) returned 1 [0237.737] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238870 | out: hHeap=0x1f0000) returned 1 [0237.737] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238860 | out: hHeap=0x1f0000) returned 1 [0237.737] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x284f90 | out: hHeap=0x1f0000) returned 1 [0237.737] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2854b8 | out: hHeap=0x1f0000) returned 1 [0237.737] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260658 | out: hHeap=0x1f0000) returned 1 [0237.737] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d70 | out: hHeap=0x1f0000) returned 1 [0237.738] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0318 | out: hHeap=0x1f0000) returned 1 [0237.738] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f9b0 | out: hHeap=0x1f0000) returned 1 [0237.738] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8270 | out: hHeap=0x1f0000) returned 1 [0237.738] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aece8 | out: hHeap=0x1f0000) returned 1 [0237.738] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0237.738] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abd98 | out: hHeap=0x1f0000) returned 1 [0237.738] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x26d4c0 | out: hHeap=0x1f0000) returned 1 [0237.738] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae658 | out: hHeap=0x1f0000) returned 1 [0237.739] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238e50 | out: hHeap=0x1f0000) returned 1 [0237.739] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389c0 | out: hHeap=0x1f0000) returned 1 [0237.739] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f998 | out: hHeap=0x1f0000) returned 1 [0237.739] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0237.739] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238810 | out: hHeap=0x1f0000) returned 1 [0237.739] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f920 | out: hHeap=0x1f0000) returned 1 [0237.739] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0237.739] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238800 | out: hHeap=0x1f0000) returned 1 [0237.739] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2852a8 | out: hHeap=0x1f0000) returned 1 [0237.740] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606f8 | out: hHeap=0x1f0000) returned 1 [0237.740] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0ad0 | out: hHeap=0x1f0000) returned 1 [0237.740] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2287e8 | out: hHeap=0x1f0000) returned 1 [0237.740] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0237.740] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abb48 | out: hHeap=0x1f0000) returned 1 [0237.740] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228680 | out: hHeap=0x1f0000) returned 1 [0237.740] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x26c1b8 | out: hHeap=0x1f0000) returned 1 [0237.741] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2afd50 | out: hHeap=0x1f0000) returned 1 [0237.741] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206688 | out: hHeap=0x1f0000) returned 1 [0237.741] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f980 | out: hHeap=0x1f0000) returned 1 [0237.741] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f968 | out: hHeap=0x1f0000) returned 1 [0237.741] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232ba8 | out: hHeap=0x1f0000) returned 1 [0237.741] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x269ba8 | out: hHeap=0x1f0000) returned 1 [0237.741] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2afe68 | out: hHeap=0x1f0000) returned 1 [0237.741] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2392b0 | out: hHeap=0x1f0000) returned 1 [0237.741] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0237.742] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2627e8 | out: hHeap=0x1f0000) returned 1 [0237.742] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228b48 | out: hHeap=0x1f0000) returned 1 [0237.742] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260630 | out: hHeap=0x1f0000) returned 1 [0237.742] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xa4c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunec.jar", cAlternateFileName="")) returned 1 [0237.742] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260518 [0237.742] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b06c0 [0237.742] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221410 [0237.743] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b06c0 | out: hHeap=0x1f0000) returned 1 [0237.743] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0237.743] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0237.744] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunec.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0237.744] GetFileType (hFile=0x224) returned 0x1 [0237.745] CloseHandle (hObject=0x224) returned 1 [0237.745] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0237.745] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunec.jar"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xa4c9)) returned 1 [0237.745] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0237.745] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2203a0 [0237.746] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2203a0 | out: hHeap=0x1f0000) returned 1 [0237.746] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xd61a6aa6, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunjce_provider.jar", cAlternateFileName="SUNJCE~1.JAR")) returned 1 [0237.746] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238f68 [0237.746] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b08c8 [0237.746] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220cf0 [0237.746] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b08c8 | out: hHeap=0x1f0000) returned 1 [0237.746] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0237.746] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238f68 | out: hHeap=0x1f0000) returned 1 [0237.747] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0237.747] GetLastError () returned 0x2 [0237.747] GetLastError () returned 0x2 [0237.748] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5ef8416, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xd5ef8416, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xd610e497, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x44671, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunjce_provider.jar.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="SUNJCE~1.ODV")) returned 1 [0237.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2aded8 [0237.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0728 [0237.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2857d0 [0237.748] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0728 | out: hHeap=0x1f0000) returned 1 [0237.748] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0237.748] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aded8 | out: hHeap=0x1f0000) returned 1 [0237.749] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0237.749] GetFileType (hFile=0x224) returned 0x1 [0237.750] CloseHandle (hObject=0x224) returned 1 [0237.751] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285e00 [0237.751] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5ef8416, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xd5ef8416, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xd6514491, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x44774)) returned 1 [0237.751] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285e00 | out: hHeap=0x1f0000) returned 1 [0237.751] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x284f90 [0237.751] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x284f90 | out: hHeap=0x1f0000) returned 1 [0237.751] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7fbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunmscapi.jar", cAlternateFileName="SUNMSC~1.JAR")) returned 1 [0237.751] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605b8 [0237.751] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0b38 [0237.751] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221410 [0237.751] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0b38 | out: hHeap=0x1f0000) returned 1 [0237.752] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2857d0 | out: hHeap=0x1f0000) returned 1 [0237.752] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0237.752] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0237.753] GetFileType (hFile=0x224) returned 0x1 [0237.753] CloseHandle (hObject=0x224) returned 1 [0237.753] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2132c8 [0237.753] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7fbb)) returned 1 [0237.754] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2132c8 | out: hHeap=0x1f0000) returned 1 [0237.754] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213818 [0237.754] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213818 | out: hHeap=0x1f0000) returned 1 [0237.754] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3d5bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunpkcs11.jar", cAlternateFileName="SUNPKC~1.JAR")) returned 1 [0237.754] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0237.754] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0a00 [0237.754] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221118 [0237.755] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0a00 | out: hHeap=0x1f0000) returned 1 [0237.755] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0237.755] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0237.755] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0237.756] GetFileType (hFile=0x224) returned 0x1 [0237.756] CloseHandle (hObject=0x224) returned 1 [0237.756] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2133d8 [0237.756] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3d5bf)) returned 1 [0237.757] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2133d8 | out: hHeap=0x1f0000) returned 1 [0237.757] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0237.757] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0237.757] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x10d3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="zipfs.jar", cAlternateFileName="")) returned 1 [0237.757] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0237.757] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0318 [0237.757] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2215d8 [0237.757] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0318 | out: hHeap=0x1f0000) returned 1 [0237.757] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0237.757] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0237.758] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\zipfs.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0237.758] GetFileType (hFile=0x224) returned 0x1 [0237.758] CloseHandle (hObject=0x224) returned 1 [0237.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220580 [0237.759] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\zipfs.jar"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x10d3c)) returned 1 [0237.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220580 | out: hHeap=0x1f0000) returned 1 [0237.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2202b0 [0237.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2202b0 | out: hHeap=0x1f0000) returned 1 [0237.759] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x10d3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="zipfs.jar", cAlternateFileName="")) returned 0 [0237.759] FindClose (in: hFindFile=0x24e600 | out: hFindFile=0x24e600) returned 1 [0237.760] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0237.760] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262e48 | out: hHeap=0x1f0000) returned 1 [0237.760] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0237.760] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2287a0 | out: hHeap=0x1f0000) returned 1 [0237.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228638 [0237.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0237.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2627e8 [0237.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0110 [0237.760] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\*", lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xd70b3c9c, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xd7621862, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e780 [0238.039] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0b38 [0238.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0110 | out: hHeap=0x1f0000) returned 1 [0238.040] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0238.040] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xd70b3c9c, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xd7621862, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0238.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b06c0 [0238.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2212e0 [0238.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b06c0 | out: hHeap=0x1f0000) returned 1 [0238.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0b38 | out: hHeap=0x1f0000) returned 1 [0238.040] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0238.040] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0238.041] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x12588, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaBrightDemiBold.ttf", cAlternateFileName="LUCIDA~1.TTF")) returned 1 [0238.041] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2285a8 [0238.041] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0a00 [0238.041] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0238.041] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0a00 | out: hHeap=0x1f0000) returned 1 [0238.041] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0238.041] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2285a8 | out: hHeap=0x1f0000) returned 1 [0238.042] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemibold.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0238.042] GetFileType (hFile=0x22c) returned 0x1 [0238.043] CloseHandle (hObject=0x22c) returned 1 [0238.043] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0238.043] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemibold.ttf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x12588)) returned 1 [0238.043] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0238.043] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0238.043] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0238.043] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x12574, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaBrightDemiItalic.ttf", cAlternateFileName="LUCIDA~2.TTF")) returned 1 [0238.044] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228b90 [0238.044] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b06c0 [0238.044] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a6c8 [0238.044] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b06c0 | out: hHeap=0x1f0000) returned 1 [0238.044] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0238.044] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228b90 | out: hHeap=0x1f0000) returned 1 [0238.045] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiItalic.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemiitalic.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0238.045] GetFileType (hFile=0x22c) returned 0x1 [0238.046] CloseHandle (hObject=0x22c) returned 1 [0238.046] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21ab60 [0238.046] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiItalic.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemiitalic.ttf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x12574)) returned 1 [0238.046] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ab60 | out: hHeap=0x1f0000) returned 1 [0238.046] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a770 [0238.047] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a770 | out: hHeap=0x1f0000) returned 1 [0238.047] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13bd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaBrightItalic.ttf", cAlternateFileName="LUCIDA~3.TTF")) returned 1 [0238.047] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239010 [0238.047] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0ad0 [0238.047] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0238.047] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0ad0 | out: hHeap=0x1f0000) returned 1 [0238.047] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a6c8 | out: hHeap=0x1f0000) returned 1 [0238.048] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239010 | out: hHeap=0x1f0000) returned 1 [0238.048] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightItalic.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightitalic.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0238.048] GetFileType (hFile=0x22c) returned 0x1 [0238.049] CloseHandle (hObject=0x22c) returned 1 [0238.049] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0238.049] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightItalic.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightitalic.ttf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13bd8)) returned 1 [0238.049] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0238.050] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0238.050] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0238.050] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd68f41a4, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xd68f41a4, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xd70b3c9c, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x5445f, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaBrightRegular.ttf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="LUCIDA~1.ODV")) returned 1 [0238.050] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ada88 [0238.050] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0318 [0238.050] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x2aece8 [0238.050] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0318 | out: hHeap=0x1f0000) returned 1 [0238.050] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0238.050] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ada88 | out: hHeap=0x1f0000) returned 1 [0238.051] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightregular.ttf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0238.051] GetFileType (hFile=0x22c) returned 0x1 [0238.052] CloseHandle (hObject=0x22c) returned 1 [0238.052] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x2ae310 [0238.052] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightregular.ttf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd68f41a4, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xd68f41a4, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xd70b3c9c, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x5445f)) returned 1 [0238.052] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae310 | out: hHeap=0x1f0000) returned 1 [0238.052] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x2ae310 [0238.053] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae310 | out: hHeap=0x1f0000) returned 1 [0238.053] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4d9c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaSansDemiBold.ttf", cAlternateFileName="LU38C7~1.TTF")) returned 1 [0238.053] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238f68 [0238.053] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0520 [0238.053] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0238.053] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0520 | out: hHeap=0x1f0000) returned 1 [0238.053] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aece8 | out: hHeap=0x1f0000) returned 1 [0238.053] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238f68 | out: hHeap=0x1f0000) returned 1 [0238.054] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansdemibold.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0238.054] GetFileType (hFile=0x22c) returned 0x1 [0238.054] CloseHandle (hObject=0x22c) returned 1 [0238.054] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0238.055] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansdemibold.ttf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4d9c8)) returned 1 [0238.055] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0238.055] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0238.055] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0238.055] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd75168c0, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xd75168c0, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xd75168c0, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaSansDemiBold.ttf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="LUCIDA~2.ODV")) returned 1 [0238.055] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad6f0 [0238.055] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0b38 [0238.055] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x2ae0e0 [0238.055] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0b38 | out: hHeap=0x1f0000) returned 1 [0238.055] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0238.055] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad6f0 | out: hHeap=0x1f0000) returned 1 [0238.056] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansdemibold.ttf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0238.056] GetFileType (hFile=0x22c) returned 0x1 [0238.056] CloseHandle (hObject=0x22c) returned 1 [0238.273] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x2ae310 [0238.274] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansdemibold.ttf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd75168c0, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xd75168c0, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xd75168c0, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x45000)) returned 1 [0238.274] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae310 | out: hHeap=0x1f0000) returned 1 [0238.274] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x2ae540 [0238.274] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae540 | out: hHeap=0x1f0000) returned 1 [0238.274] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xaa77c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaSansRegular.ttf", cAlternateFileName="LU761B~1.TTF")) returned 1 [0238.274] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238d00 [0238.274] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0318 [0238.274] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0238.274] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0318 | out: hHeap=0x1f0000) returned 1 [0238.275] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae0e0 | out: hHeap=0x1f0000) returned 1 [0238.275] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238d00 | out: hHeap=0x1f0000) returned 1 [0238.275] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansregular.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0238.276] GetFileType (hFile=0x22c) returned 0x1 [0238.276] CloseHandle (hObject=0x22c) returned 1 [0238.276] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0238.277] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansregular.ttf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xaa77c)) returned 1 [0238.277] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0238.277] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0238.277] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0238.277] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7621862, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xd7621862, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xd7621862, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaSansRegular.ttf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="LUCIDA~3.ODV")) returned 1 [0238.277] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2adbf8 [0238.277] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0178 [0238.277] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x2ae540 [0238.277] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0178 | out: hHeap=0x1f0000) returned 1 [0238.278] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0238.278] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2adbf8 | out: hHeap=0x1f0000) returned 1 [0238.279] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansregular.ttf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0238.279] GetFileType (hFile=0x22c) returned 0x1 [0238.280] CloseHandle (hObject=0x22c) returned 1 [0238.280] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x2ae9a0 [0238.280] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansregular.ttf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7621862, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xd7621862, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xd7621862, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xd000)) returned 1 [0238.280] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae9a0 | out: hHeap=0x1f0000) returned 1 [0238.281] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x2af7d8 [0238.281] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2af7d8 | out: hHeap=0x1f0000) returned 1 [0238.281] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39254, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaTypewriterBold.ttf", cAlternateFileName="LUE73B~1.TTF")) returned 1 [0238.281] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228a70 [0238.281] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0c08 [0238.281] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0238.281] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0c08 | out: hHeap=0x1f0000) returned 1 [0238.281] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae540 | out: hHeap=0x1f0000) returned 1 [0238.282] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228a70 | out: hHeap=0x1f0000) returned 1 [0238.282] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterbold.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0238.282] GetFileType (hFile=0x22c) returned 0x1 [0238.283] CloseHandle (hObject=0x22c) returned 1 [0238.283] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0238.283] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterbold.ttf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39254)) returned 1 [0238.283] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0238.284] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0238.284] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0238.284] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3b40c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaTypewriterRegular.ttf", cAlternateFileName="LUDBAB~1.TTF")) returned 1 [0238.284] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228878 [0238.284] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b06c0 [0238.284] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a578 [0238.284] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b06c0 | out: hHeap=0x1f0000) returned 1 [0238.284] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0238.285] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228878 | out: hHeap=0x1f0000) returned 1 [0238.285] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterregular.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0238.286] GetFileType (hFile=0x22c) returned 0x1 [0238.286] CloseHandle (hObject=0x22c) returned 1 [0238.286] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a0e0 [0238.286] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterregular.ttf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3b40c)) returned 1 [0238.287] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a0e0 | out: hHeap=0x1f0000) returned 1 [0238.287] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219d98 [0238.287] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219d98 | out: hHeap=0x1f0000) returned 1 [0238.287] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3b40c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaTypewriterRegular.ttf", cAlternateFileName="LUDBAB~1.TTF")) returned 0 [0238.287] FindClose (in: hFindFile=0x24e780 | out: hFindFile=0x24e780) returned 1 [0238.288] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a578 | out: hHeap=0x1f0000) returned 1 [0238.288] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2627e8 | out: hHeap=0x1f0000) returned 1 [0238.288] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0238.288] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228638 | out: hHeap=0x1f0000) returned 1 [0238.288] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228440 [0238.288] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260658 [0238.288] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2627e8 [0238.288] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220508 [0238.288] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\*", lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa12313ee, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24eb40 [0238.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b08c8 [0238.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221670 [0238.289] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b08c8 | out: hHeap=0x1f0000) returned 1 [0238.289] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220508 | out: hHeap=0x1f0000) returned 1 [0238.289] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0238.289] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa12313ee, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0238.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0248 [0238.290] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2214a8 [0238.290] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0248 | out: hHeap=0x1f0000) returned 1 [0238.290] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0238.290] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0238.290] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0238.290] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa129361a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cursors", cAlternateFileName="")) returned 1 [0238.290] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b06c0 [0238.291] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221a00 [0238.291] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b06c0 | out: hHeap=0x1f0000) returned 1 [0238.291] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0238.291] lstrcmpW (lpString1="cursors", lpString2=".") returned 1 [0238.291] lstrcmpW (lpString1="cursors", lpString2="..") returned 1 [0238.291] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204c30 [0238.291] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0238.291] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa129361a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cursors", cAlternateFileName="")) returned 0 [0238.292] FindClose (in: hFindFile=0x24eb40 | out: hFindFile=0x24eb40) returned 1 [0238.292] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228878 [0238.292] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0238.292] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x263178 [0238.292] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f10 [0238.292] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\*", lpFindFileData=0x22bdd70 | out: lpFindFileData=0x22bdd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa129361a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22be16c, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24e900 [0238.293] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0238.293] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218768 [0238.293] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0238.293] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f10 | out: hHeap=0x1f0000) returned 1 [0238.293] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0238.293] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x22bdd70 | out: lpFindFileData=0x22bdd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa129361a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22be16c, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0238.294] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220508 [0238.294] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218818 [0238.294] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220508 | out: hHeap=0x1f0000) returned 1 [0238.294] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218768 | out: hHeap=0x1f0000) returned 1 [0238.294] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0238.294] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0238.294] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x22bdd70 | out: lpFindFileData=0x22bdd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x500, dwReserved0=0x22be16c, dwReserved1=0x3, cFileName="cursors.properties", cAlternateFileName="CURSOR~1.PRO")) returned 1 [0238.294] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238cc8 [0238.294] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0238.295] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219058 [0238.295] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0238.295] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218818 | out: hHeap=0x1f0000) returned 1 [0238.295] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238cc8 | out: hHeap=0x1f0000) returned 1 [0238.296] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdb48, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0238.296] GetFileType (hFile=0x22c) returned 0x1 [0238.320] CloseHandle (hObject=0x22c) returned 1 [0238.320] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21aa10 [0238.320] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties"), fInfoLevelId=0x0, lpFileInformation=0x22bdbe4 | out: lpFileInformation=0x22bdbe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x500)) returned 1 [0238.321] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21aa10 | out: hHeap=0x1f0000) returned 1 [0238.321] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21ab60 [0238.321] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0238.321] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ab60 | out: hHeap=0x1f0000) returned 1 [0238.321] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0238.321] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x22bdd70 | out: lpFindFileData=0x22bdd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x22be16c, dwReserved1=0x3, cFileName="invalid32x32.gif", cAlternateFileName="INVALI~1.GIF")) returned 1 [0238.321] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238cc8 [0238.321] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2202b0 [0238.321] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218a28 [0238.321] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2202b0 | out: hHeap=0x1f0000) returned 1 [0238.321] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219058 | out: hHeap=0x1f0000) returned 1 [0238.321] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238cc8 | out: hHeap=0x1f0000) returned 1 [0238.322] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdb48, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0238.322] GetFileType (hFile=0x22c) returned 0x1 [0238.323] CloseHandle (hObject=0x22c) returned 1 [0238.323] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0238.323] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0x22bdbe4 | out: lpFileInformation=0x22bdbe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99)) returned 1 [0238.323] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0238.323] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0238.323] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0238.323] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x22bdd70 | out: lpFindFileData=0x22bdd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xa5, dwReserved0=0x22be16c, dwReserved1=0x3, cFileName="win32_CopyDrop32x32.gif", cAlternateFileName="WIN32_~1.GIF")) returned 1 [0238.323] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238f30 [0238.324] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0238.324] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219478 [0238.324] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0238.324] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218a28 | out: hHeap=0x1f0000) returned 1 [0238.324] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238f30 | out: hHeap=0x1f0000) returned 1 [0238.324] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copydrop32x32.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdb48, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0238.325] GetFileType (hFile=0x22c) returned 0x1 [0238.325] CloseHandle (hObject=0x22c) returned 1 [0238.325] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21aab8 [0238.325] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copydrop32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0x22bdbe4 | out: lpFileInformation=0x22bdbe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xa5)) returned 1 [0238.326] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21aab8 | out: hHeap=0x1f0000) returned 1 [0238.326] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a4d0 [0238.326] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a4d0 | out: hHeap=0x1f0000) returned 1 [0238.326] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x22bdd70 | out: lpFindFileData=0x22bdd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x22be16c, dwReserved1=0x3, cFileName="win32_CopyNoDrop32x32.gif", cAlternateFileName="WIN32_~2.GIF")) returned 1 [0238.326] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228518 [0238.326] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0238.326] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad860 [0238.326] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0238.326] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219478 | out: hHeap=0x1f0000) returned 1 [0238.326] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228518 | out: hHeap=0x1f0000) returned 1 [0238.327] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copynodrop32x32.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdb48, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0238.327] GetFileType (hFile=0x22c) returned 0x1 [0238.829] CloseHandle (hObject=0x22c) returned 1 [0238.829] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad2a0 [0238.829] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copynodrop32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0x22bdbe4 | out: lpFileInformation=0x22bdbe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99)) returned 1 [0238.830] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad2a0 | out: hHeap=0x1f0000) returned 1 [0238.830] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad4c8 [0238.830] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad4c8 | out: hHeap=0x1f0000) returned 1 [0238.830] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x22bdd70 | out: lpFindFileData=0x22bdd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xa8, dwReserved0=0x22be16c, dwReserved1=0x3, cFileName="win32_LinkDrop32x32.gif", cAlternateFileName="WIN32_~3.GIF")) returned 1 [0238.830] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239010 [0238.830] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0238.830] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ce8 [0238.831] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0238.831] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad860 | out: hHeap=0x1f0000) returned 1 [0238.831] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239010 | out: hHeap=0x1f0000) returned 1 [0238.831] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linkdrop32x32.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdb48, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0238.832] GetFileType (hFile=0x22c) returned 0x1 [0238.832] CloseHandle (hObject=0x22c) returned 1 [0238.833] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a380 [0238.833] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linkdrop32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0x22bdbe4 | out: lpFileInformation=0x22bdbe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xa8)) returned 1 [0238.833] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a380 | out: hHeap=0x1f0000) returned 1 [0238.833] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a230 [0238.833] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a230 | out: hHeap=0x1f0000) returned 1 [0238.833] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x22bdd70 | out: lpFindFileData=0x22bdd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x22be16c, dwReserved1=0x3, cFileName="win32_LinkNoDrop32x32.gif", cAlternateFileName="WIN32_~4.GIF")) returned 1 [0238.833] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2286c8 [0238.834] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0238.834] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad580 [0238.834] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0238.834] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ce8 | out: hHeap=0x1f0000) returned 1 [0238.834] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2286c8 | out: hHeap=0x1f0000) returned 1 [0238.835] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linknodrop32x32.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdb48, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0238.835] GetFileType (hFile=0x22c) returned 0x1 [0238.836] CloseHandle (hObject=0x22c) returned 1 [0238.836] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad4c8 [0238.836] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linknodrop32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0x22bdbe4 | out: lpFileInformation=0x22bdbe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99)) returned 1 [0238.837] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad4c8 | out: hHeap=0x1f0000) returned 1 [0238.837] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2adbf8 [0238.837] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2adbf8 | out: hHeap=0x1f0000) returned 1 [0238.837] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x22bdd70 | out: lpFindFileData=0x22bdd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x93, dwReserved0=0x22be16c, dwReserved1=0x3, cFileName="win32_MoveDrop32x32.gif", cAlternateFileName="WI06CF~1.GIF")) returned 1 [0238.837] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2391d0 [0238.837] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd88 [0238.837] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218978 [0238.838] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd88 | out: hHeap=0x1f0000) returned 1 [0238.838] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad580 | out: hHeap=0x1f0000) returned 1 [0238.838] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2391d0 | out: hHeap=0x1f0000) returned 1 [0238.839] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movedrop32x32.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdb48, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0238.839] GetFileType (hFile=0x22c) returned 0x1 [0238.839] CloseHandle (hObject=0x22c) returned 1 [0238.840] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219e40 [0238.840] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movedrop32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0x22bdbe4 | out: lpFileInformation=0x22bdbe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x93)) returned 1 [0238.840] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219e40 | out: hHeap=0x1f0000) returned 1 [0238.840] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a968 [0238.841] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a968 | out: hHeap=0x1f0000) returned 1 [0238.841] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x22bdd70 | out: lpFindFileData=0x22bdd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x22be16c, dwReserved1=0x3, cFileName="win32_MoveNoDrop32x32.gif", cAlternateFileName="WIE2D6~1.GIF")) returned 1 [0238.841] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2286c8 [0238.841] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0238.841] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ade20 [0238.841] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0238.842] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218978 | out: hHeap=0x1f0000) returned 1 [0238.842] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2286c8 | out: hHeap=0x1f0000) returned 1 [0238.843] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movenodrop32x32.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdb48, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0238.843] GetFileType (hFile=0x22c) returned 0x1 [0238.843] CloseHandle (hObject=0x22c) returned 1 [0238.844] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2adcb0 [0238.844] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movenodrop32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0x22bdbe4 | out: lpFileInformation=0x22bdbe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99)) returned 1 [0238.844] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2adcb0 | out: hHeap=0x1f0000) returned 1 [0238.844] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad078 [0238.845] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad078 | out: hHeap=0x1f0000) returned 1 [0238.845] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x22bdd70 | out: lpFindFileData=0x22bdd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x22be16c, dwReserved1=0x3, cFileName="win32_MoveNoDrop32x32.gif", cAlternateFileName="WIE2D6~1.GIF")) returned 0 [0238.845] FindClose (in: hFindFile=0x24e900 | out: hFindFile=0x24e900) returned 1 [0238.845] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ade20 | out: hHeap=0x1f0000) returned 1 [0238.845] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263178 | out: hHeap=0x1f0000) returned 1 [0238.846] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0238.846] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228878 | out: hHeap=0x1f0000) returned 1 [0238.846] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0238.846] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0238.846] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c30 | out: hHeap=0x1f0000) returned 1 [0238.846] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2627e8 | out: hHeap=0x1f0000) returned 1 [0238.847] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260658 | out: hHeap=0x1f0000) returned 1 [0238.847] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228440 | out: hHeap=0x1f0000) returned 1 [0238.847] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2286c8 [0238.847] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0238.847] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x263178 [0238.847] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b01e0 [0238.848] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\*", lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1295634, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e780 [0238.848] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0520 [0238.848] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b01e0 | out: hHeap=0x1f0000) returned 1 [0238.848] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0238.848] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1295634, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0238.848] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b08c8 [0238.849] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0520 | out: hHeap=0x1f0000) returned 1 [0238.849] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0238.849] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0238.849] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="default.jfc", cAlternateFileName="")) returned 1 [0238.849] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0238.849] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0930 [0238.849] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221670 [0238.850] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0930 | out: hHeap=0x1f0000) returned 1 [0238.850] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b08c8 | out: hHeap=0x1f0000) returned 1 [0238.850] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0238.851] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\default.jfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\default.jfc"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0238.851] GetFileType (hFile=0x22c) returned 0x1 [0238.851] CloseHandle (hObject=0x22c) returned 1 [0238.852] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2201c0 [0238.852] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\default.jfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\default.jfc"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e8d)) returned 1 [0238.852] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2201c0 | out: hHeap=0x1f0000) returned 1 [0238.852] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0238.852] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0238.853] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e61, dwReserved0=0x0, dwReserved1=0x0, cFileName="profile.jfc", cAlternateFileName="")) returned 1 [0238.853] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0238.853] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b01e0 [0238.853] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220e20 [0238.853] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b01e0 | out: hHeap=0x1f0000) returned 1 [0238.853] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0238.853] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0238.854] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\profile.jfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\profile.jfc"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0238.854] GetFileType (hFile=0x22c) returned 0x1 [0238.855] CloseHandle (hObject=0x22c) returned 1 [0238.855] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0238.855] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\profile.jfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\profile.jfc"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e61)) returned 1 [0238.855] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0238.855] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0238.855] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0238.855] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e61, dwReserved0=0x0, dwReserved1=0x0, cFileName="profile.jfc", cAlternateFileName="")) returned 0 [0238.856] FindClose (in: hFindFile=0x24e780 | out: hFindFile=0x24e780) returned 1 [0238.856] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0238.856] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263178 | out: hHeap=0x1f0000) returned 1 [0238.856] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0238.856] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2286c8 | out: hHeap=0x1f0000) returned 1 [0238.857] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2286c8 [0238.857] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0238.857] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2627e8 [0238.857] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd88 [0238.857] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\*", lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1389711, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24eb40 [0238.857] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0238.857] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd88 | out: hHeap=0x1f0000) returned 1 [0238.857] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0238.857] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1389711, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0238.858] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0238.858] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0238.858] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0238.858] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0238.858] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="jmxremote.access", cAlternateFileName="JMXREM~1.ACC")) returned 1 [0238.858] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238d70 [0238.858] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0238.858] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218fa8 [0238.859] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0238.859] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0238.859] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238d70 | out: hHeap=0x1f0000) returned 1 [0238.860] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.access" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.access"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0238.860] GetFileType (hFile=0x22c) returned 0x1 [0238.860] CloseHandle (hObject=0x22c) returned 1 [0238.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0238.861] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.access" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.access"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf9e)) returned 1 [0238.861] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0238.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0238.861] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0238.861] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xb28, dwReserved0=0x0, dwReserved1=0x0, cFileName="jmxremote.password.template", cAlternateFileName="JMXREM~1.TEM")) returned 1 [0238.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228710 [0238.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0238.862] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219478 [0238.862] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0238.862] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218fa8 | out: hHeap=0x1f0000) returned 1 [0238.862] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228710 | out: hHeap=0x1f0000) returned 1 [0238.862] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0238.863] GetFileType (hFile=0x22c) returned 0x1 [0238.863] CloseHandle (hObject=0x22c) returned 1 [0238.863] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a8c0 [0238.864] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xb28)) returned 1 [0238.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a8c0 | out: hHeap=0x1f0000) returned 1 [0238.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a968 [0238.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0238.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a968 | out: hHeap=0x1f0000) returned 1 [0238.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0238.864] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3926, dwReserved0=0x0, dwReserved1=0x0, cFileName="management.properties", cAlternateFileName="MANAGE~1.PRO")) returned 1 [0238.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239010 [0238.865] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0238.865] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ce8 [0238.865] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0238.865] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219478 | out: hHeap=0x1f0000) returned 1 [0238.865] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239010 | out: hHeap=0x1f0000) returned 1 [0238.866] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\management.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\management.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0238.866] GetFileType (hFile=0x22c) returned 0x1 [0238.866] CloseHandle (hObject=0x22c) returned 1 [0238.867] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a380 [0238.867] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\management.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\management.properties"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3926)) returned 1 [0238.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a380 | out: hHeap=0x1f0000) returned 1 [0238.867] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a4d0 [0238.867] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0238.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a4d0 | out: hHeap=0x1f0000) returned 1 [0238.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0238.868] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xd30, dwReserved0=0x0, dwReserved1=0x0, cFileName="snmp.acl.template", cAlternateFileName="SNMPAC~1.TEM")) returned 1 [0238.868] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238fa0 [0238.868] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0238.868] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219478 [0238.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0238.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ce8 | out: hHeap=0x1f0000) returned 1 [0238.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238fa0 | out: hHeap=0x1f0000) returned 1 [0238.869] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\snmp.acl.template" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\snmp.acl.template"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0238.869] GetFileType (hFile=0x22c) returned 0x1 [0238.870] CloseHandle (hObject=0x22c) returned 1 [0238.870] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0238.870] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\snmp.acl.template" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\snmp.acl.template"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xd30)) returned 1 [0238.870] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0238.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0238.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0238.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0238.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0238.871] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xd30, dwReserved0=0x0, dwReserved1=0x0, cFileName="snmp.acl.template", cAlternateFileName="SNMPAC~1.TEM")) returned 0 [0238.871] FindClose (in: hFindFile=0x24eb40 | out: hFindFile=0x24eb40) returned 1 [0238.872] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219478 | out: hHeap=0x1f0000) returned 1 [0238.872] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2627e8 | out: hHeap=0x1f0000) returned 1 [0238.872] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0238.872] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2286c8 | out: hHeap=0x1f0000) returned 1 [0238.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2286c8 [0238.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0238.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2627e8 [0238.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0238.872] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\*", lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1418338, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e8c0 [0238.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0238.873] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0238.873] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0238.873] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1418338, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0238.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0238.873] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0238.873] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0238.874] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0238.874] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xfd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="blacklist", cAlternateFileName="BLACKL~1")) returned 1 [0238.874] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0238.874] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0238.874] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ce8 [0238.874] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0238.874] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0238.874] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0239.236] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklist" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklist"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0239.236] GetFileType (hFile=0x220) returned 0x1 [0239.237] CloseHandle (hObject=0x220) returned 1 [0239.237] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2132c8 [0239.237] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklist" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklist"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xfd6)) returned 1 [0239.237] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2132c8 | out: hHeap=0x1f0000) returned 1 [0239.237] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213818 [0239.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213818 | out: hHeap=0x1f0000) returned 1 [0239.238] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="blacklisted.certs", cAlternateFileName="BLACKL~1.CER")) returned 1 [0239.238] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239278 [0239.238] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2202b0 [0239.238] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218a28 [0239.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2202b0 | out: hHeap=0x1f0000) returned 1 [0239.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ce8 | out: hHeap=0x1f0000) returned 1 [0239.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239278 | out: hHeap=0x1f0000) returned 1 [0239.239] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklisted.certs" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklisted.certs"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0239.239] GetFileType (hFile=0x220) returned 0x1 [0239.240] CloseHandle (hObject=0x220) returned 1 [0239.240] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0239.240] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklisted.certs" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklisted.certs"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e5)) returned 1 [0239.240] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0239.240] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0239.240] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0239.240] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1c0eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="cacerts", cAlternateFileName="")) returned 1 [0239.241] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0239.241] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218978 [0239.241] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0239.241] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218a28 | out: hHeap=0x1f0000) returned 1 [0239.241] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\cacerts" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\cacerts"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0239.242] GetFileType (hFile=0x220) returned 0x1 [0239.242] CloseHandle (hObject=0x220) returned 1 [0239.242] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0239.242] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\cacerts" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\cacerts"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1c0eb)) returned 1 [0239.243] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0239.243] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212a48 [0239.243] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212a48 | out: hHeap=0x1f0000) returned 1 [0239.243] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x9a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="java.policy", cAlternateFileName="JAVA~1.POL")) returned 1 [0239.243] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260888 [0239.243] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fb30 [0239.243] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x2191b8 [0239.243] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fb30 | out: hHeap=0x1f0000) returned 1 [0239.243] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218978 | out: hHeap=0x1f0000) returned 1 [0239.243] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0239.244] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.policy" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\java.policy"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0239.244] GetFileType (hFile=0x220) returned 0x1 [0239.244] CloseHandle (hObject=0x220) returned 1 [0239.245] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0239.245] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.policy" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\java.policy"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x9a2)) returned 1 [0239.245] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0239.245] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0239.245] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0239.245] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8eac, dwReserved0=0x0, dwReserved1=0x0, cFileName="java.security", cAlternateFileName="JAVA~1.SEC")) returned 1 [0239.245] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0239.245] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0239.245] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218d98 [0239.245] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0239.246] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2191b8 | out: hHeap=0x1f0000) returned 1 [0239.246] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0239.246] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.security" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\java.security"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0239.246] GetFileType (hFile=0x220) returned 0x1 [0239.247] CloseHandle (hObject=0x220) returned 1 [0239.247] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212c68 [0239.247] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.security" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\java.security"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8eac)) returned 1 [0239.248] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212c68 | out: hHeap=0x1f0000) returned 1 [0239.248] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213570 [0239.248] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0239.248] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213570 | out: hHeap=0x1f0000) returned 1 [0239.248] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0239.248] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x62, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaws.policy", cAlternateFileName="JAVAWS~1.POL")) returned 1 [0239.248] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0239.248] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0239.248] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ce8 [0239.248] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0239.249] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218d98 | out: hHeap=0x1f0000) returned 1 [0239.249] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0239.249] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\javaws.policy" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\javaws.policy"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0239.249] GetFileType (hFile=0x220) returned 0x1 [0239.250] CloseHandle (hObject=0x220) returned 1 [0239.251] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0239.251] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\javaws.policy" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\javaws.policy"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x62)) returned 1 [0239.251] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0239.251] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0239.251] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0239.251] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xdc7, dwReserved0=0x0, dwReserved1=0x0, cFileName="local_policy.jar", cAlternateFileName="LOCAL_~1.JAR")) returned 1 [0239.251] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2392b0 [0239.251] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fb30 [0239.251] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219058 [0239.252] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fb30 | out: hHeap=0x1f0000) returned 1 [0239.252] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ce8 | out: hHeap=0x1f0000) returned 1 [0239.252] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2392b0 | out: hHeap=0x1f0000) returned 1 [0239.252] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\local_policy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\local_policy.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0239.253] GetFileType (hFile=0x220) returned 0x1 [0239.253] CloseHandle (hObject=0x220) returned 1 [0239.254] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0239.254] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\local_policy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\local_policy.jar"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xdc7)) returned 1 [0239.254] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0239.254] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0239.254] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0239.254] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="trusted.libraries", cAlternateFileName="TRUSTE~1.LIB")) returned 1 [0239.255] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239160 [0239.255] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0239.255] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218fa8 [0239.255] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0239.255] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219058 | out: hHeap=0x1f0000) returned 1 [0239.255] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239160 | out: hHeap=0x1f0000) returned 1 [0239.256] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\trusted.libraries" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\trusted.libraries"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0239.256] GetFileType (hFile=0x220) returned 0x1 [0239.257] CloseHandle (hObject=0x220) returned 1 [0239.257] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0239.257] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\trusted.libraries" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\trusted.libraries"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0239.258] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0239.258] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0239.258] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260518 [0239.258] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0239.258] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0239.258] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xbd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="US_export_policy.jar", cAlternateFileName="US_EXP~1.JAR")) returned 1 [0239.258] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238e18 [0239.258] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0239.259] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ce8 [0239.259] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0239.259] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218fa8 | out: hHeap=0x1f0000) returned 1 [0239.259] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238e18 | out: hHeap=0x1f0000) returned 1 [0239.259] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\US_export_policy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\us_export_policy.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0239.260] GetFileType (hFile=0x220) returned 0x1 [0239.260] CloseHandle (hObject=0x220) returned 1 [0239.261] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0239.261] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\US_export_policy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\us_export_policy.jar"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xbd2)) returned 1 [0239.261] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0239.261] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0239.261] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0239.261] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xbd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="US_export_policy.jar", cAlternateFileName="US_EXP~1.JAR")) returned 0 [0239.261] FindClose (in: hFindFile=0x24e8c0 | out: hFindFile=0x24e8c0) returned 1 [0239.262] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ce8 | out: hHeap=0x1f0000) returned 1 [0239.262] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2627e8 | out: hHeap=0x1f0000) returned 1 [0239.262] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0239.262] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2286c8 | out: hHeap=0x1f0000) returned 1 [0239.262] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0239.262] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235908 | out: hHeap=0x1f0000) returned 1 [0239.262] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235de8 | out: hHeap=0x1f0000) returned 1 [0239.263] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235eb8 | out: hHeap=0x1f0000) returned 1 [0239.263] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236398 | out: hHeap=0x1f0000) returned 1 [0239.263] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2150a8 | out: hHeap=0x1f0000) returned 1 [0239.263] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214fd8 | out: hHeap=0x1f0000) returned 1 [0239.263] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214af8 | out: hHeap=0x1f0000) returned 1 [0239.263] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a28 | out: hHeap=0x1f0000) returned 1 [0239.263] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fab8 | out: hHeap=0x1f0000) returned 1 [0239.263] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0239.263] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239be0 | out: hHeap=0x1f0000) returned 1 [0239.263] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ee88 | out: hHeap=0x1f0000) returned 1 [0239.264] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0239.264] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228488 | out: hHeap=0x1f0000) returned 1 [0239.264] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218450 | out: hHeap=0x1f0000) returned 1 [0239.264] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8e20 | out: hHeap=0x1f0000) returned 1 [0239.264] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0239.264] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1ff058 | out: hHeap=0x1f0000) returned 1 [0239.264] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262650 | out: hHeap=0x1f0000) returned 1 [0239.264] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0239.264] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233c00 | out: hHeap=0x1f0000) returned 1 [0239.264] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22bc00 | out: hHeap=0x1f0000) returned 1 [0239.265] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22bb50 | out: hHeap=0x1f0000) returned 1 [0239.265] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cd0 | out: hHeap=0x1f0000) returned 1 [0239.265] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261ff0 | out: hHeap=0x1f0000) returned 1 [0239.265] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380f0 | out: hHeap=0x1f0000) returned 1 [0239.268] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234110 | out: hHeap=0x1f0000) returned 1 [0239.268] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228488 [0239.268] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2607c0 [0239.268] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262e48 [0239.268] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8d18 [0239.268] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\*", lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf8a30151, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xf8a30151, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24e7c0 [0239.269] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8e20 [0239.269] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0239.269] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0239.269] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf8a30151, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xf8a30151, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0239.269] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8d18 [0239.269] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8e20 | out: hHeap=0x1f0000) returned 1 [0239.269] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0239.269] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0239.270] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d6778e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9dfb986, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf9e9425d, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x5ab2f7, dwReserved0=0x0, dwReserved1=0x3, cFileName="AppXManifest.xml", cAlternateFileName="APPXMA~1.XML")) returned 1 [0239.270] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238d00 [0239.270] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8e20 [0239.270] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x2175d0 [0239.270] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8e20 | out: hHeap=0x1f0000) returned 1 [0239.270] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0239.270] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238d00 | out: hHeap=0x1f0000) returned 1 [0239.271] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\AppXManifest.xml" (normalized: "c:\\program files\\microsoft office\\appxmanifest.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0239.271] GetFileType (hFile=0x220) returned 0x1 [0239.272] CloseHandle (hObject=0x220) returned 1 [0239.272] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0239.272] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\AppXManifest.xml" (normalized: "c:\\program files\\microsoft office\\appxmanifest.xml"), fInfoLevelId=0x0, lpFileInformation=0x22bebd4 | out: lpFileInformation=0x22bebd4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d6778e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9dfb986, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf9e9425d, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x5ab2f7)) returned 1 [0239.272] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0239.272] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0239.272] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0239.273] GetLastError () returned 0x0 [0239.273] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0239.273] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228638 [0239.273] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262650 [0239.273] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0239.273] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238de0 [0239.273] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2607e8 [0239.273] CryptAcquireContextA (in: phProv=0x2294690, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2294690*=0x213350) returned 1 [0239.274] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2607e8 | out: pbBuffer=0x2607e8) returned 1 [0239.275] CryptReleaseContext (hProv=0x213350, dwFlags=0x0) returned 1 [0239.275] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607e8 | out: hHeap=0x1f0000) returned 1 [0239.275] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x266290 [0239.275] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2ae888 [0239.275] QueryPerformanceCounter (in: lpPerformanceCount=0x2294624 | out: lpPerformanceCount=0x2294624*=39664389013) returned 1 [0239.275] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x2294664 | out: lpSystemTimeAsFileTime=0x2294664) [0239.275] QueryPerformanceCounter (in: lpPerformanceCount=0x2294624 | out: lpPerformanceCount=0x2294624*=39664419984) returned 1 [0239.275] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x2294664 | out: lpSystemTimeAsFileTime=0x2294664) [0239.276] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238e88 [0239.276] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x26e7c8 [0239.276] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2afd50 [0239.276] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x232e18 [0239.276] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f9c8 [0239.276] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2067d8 [0239.276] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f920 [0239.276] GetLastError () returned 0x0 [0239.277] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\AppXManifest.xml" (normalized: "c:\\program files\\microsoft office\\appxmanifest.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22945f4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0239.277] GetFileType (hFile=0x220) returned 0x1 [0239.277] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2294660 | out: lpNewFilePointer=0x0) returned 1 [0239.277] ReadFile (in: hFile=0x220, lpBuffer=0x22a9b60, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x2294638, lpOverlapped=0x0 | out: lpBuffer=0x22a9b60*, lpNumberOfBytesRead=0x2294638*=0x14000, lpOverlapped=0x0) returned 1 [0239.280] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x287fa0 [0239.280] ReadFile (in: hFile=0x220, lpBuffer=0x287fa0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x22945dc, lpOverlapped=0x0 | out: lpBuffer=0x287fa0*, lpNumberOfBytesRead=0x22945dc*=0x1000, lpOverlapped=0x0) returned 1 [0239.280] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2294668 | out: lpNewFilePointer=0x0) returned 1 [0239.735] WriteFile (in: hFile=0x220, lpBuffer=0x2294b70*, nNumberOfBytesToWrite=0x14000, lpNumberOfBytesWritten=0x22945d4, lpOverlapped=0x0 | out: lpBuffer=0x2294b70*, lpNumberOfBytesWritten=0x22945d4*=0x14000, lpOverlapped=0x0) returned 1 [0239.736] WriteFile (in: hFile=0x220, lpBuffer=0x287fa0*, nNumberOfBytesToWrite=0xff0, lpNumberOfBytesWritten=0x2294600, lpOverlapped=0x0 | out: lpBuffer=0x287fa0*, lpNumberOfBytesWritten=0x2294600*=0xff0, lpOverlapped=0x0) returned 1 [0239.736] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x15f90, lpNewFilePointer=0x0, dwMoveMethod=0x2294648 | out: lpNewFilePointer=0x0) returned 1 [0239.737] ReadFile (in: hFile=0x220, lpBuffer=0x22a9b60, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x2294620, lpOverlapped=0x0 | out: lpBuffer=0x22a9b60*, lpNumberOfBytesRead=0x2294620*=0x14000, lpOverlapped=0x0) returned 1 [0239.738] ReadFile (in: hFile=0x220, lpBuffer=0x287fa0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x22945c4, lpOverlapped=0x0 | out: lpBuffer=0x287fa0*, lpNumberOfBytesRead=0x22945c4*=0x1000, lpOverlapped=0x0) returned 1 [0239.738] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x15f90, lpNewFilePointer=0x0, dwMoveMethod=0x2294668 | out: lpNewFilePointer=0x0) returned 1 [0239.739] WriteFile (in: hFile=0x220, lpBuffer=0x2294b70*, nNumberOfBytesToWrite=0x14000, lpNumberOfBytesWritten=0x22945d4, lpOverlapped=0x0 | out: lpBuffer=0x2294b70*, lpNumberOfBytesWritten=0x22945d4*=0x14000, lpOverlapped=0x0) returned 1 [0239.740] WriteFile (in: hFile=0x220, lpBuffer=0x287fa0*, nNumberOfBytesToWrite=0xff0, lpNumberOfBytesWritten=0x2294600, lpOverlapped=0x0 | out: lpBuffer=0x287fa0*, lpNumberOfBytesWritten=0x2294600*=0xff0, lpOverlapped=0x0) returned 1 [0239.740] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0xdbba0, lpNewFilePointer=0x0, dwMoveMethod=0x2294648 | out: lpNewFilePointer=0x0) returned 1 [0239.740] ReadFile (in: hFile=0x220, lpBuffer=0x22a9b60, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x2294620, lpOverlapped=0x0 | out: lpBuffer=0x22a9b60*, lpNumberOfBytesRead=0x2294620*=0x14000, lpOverlapped=0x0) returned 1 [0239.742] ReadFile (in: hFile=0x220, lpBuffer=0x287fa0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x22945c4, lpOverlapped=0x0 | out: lpBuffer=0x287fa0*, lpNumberOfBytesRead=0x22945c4*=0x1000, lpOverlapped=0x0) returned 1 [0239.743] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0xdbba0, lpNewFilePointer=0x0, dwMoveMethod=0x2294668 | out: lpNewFilePointer=0x0) returned 1 [0239.744] WriteFile (in: hFile=0x220, lpBuffer=0x2294b70*, nNumberOfBytesToWrite=0x14000, lpNumberOfBytesWritten=0x22945d4, lpOverlapped=0x0 | out: lpBuffer=0x2294b70*, lpNumberOfBytesWritten=0x22945d4*=0x14000, lpOverlapped=0x0) returned 1 [0239.745] WriteFile (in: hFile=0x220, lpBuffer=0x287fa0*, nNumberOfBytesToWrite=0xff0, lpNumberOfBytesWritten=0x2294650, lpOverlapped=0x0 | out: lpBuffer=0x287fa0*, lpNumberOfBytesWritten=0x2294650*=0xff0, lpOverlapped=0x0) returned 1 [0239.745] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x287fa0 | out: hHeap=0x1f0000) returned 1 [0239.745] CloseHandle (hObject=0x220) returned 1 [0239.746] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228cb0 [0239.746] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2605b8 [0239.746] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260608 [0239.746] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x228b48 [0239.746] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cd0 [0239.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0239.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x2388c0 [0239.747] GetLastError () returned 0x0 [0239.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238da8 [0239.747] GetLastError () returned 0x0 [0239.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239198 [0239.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b05f0 [0239.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2604c8 [0239.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285e00 [0239.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238880 [0239.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0239.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f818 [0239.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238900 [0239.749] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0239.749] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f638 [0239.749] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260810 [0239.749] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x284f90 [0239.749] GetLastError () returned 0x0 [0239.753] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238820 [0239.753] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238910 [0239.753] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238920 [0239.753] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238910 | out: hHeap=0x1f0000) returned 1 [0239.753] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238910 [0239.754] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238920 | out: hHeap=0x1f0000) returned 1 [0239.754] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238820 | out: hHeap=0x1f0000) returned 1 [0239.754] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238920 [0239.754] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f668 [0239.754] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238920 | out: hHeap=0x1f0000) returned 1 [0239.754] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f698 [0239.754] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f668 | out: hHeap=0x1f0000) returned 1 [0239.755] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238910 | out: hHeap=0x1f0000) returned 1 [0239.755] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f6c8 [0239.755] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f8d8 [0239.755] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f6c8 | out: hHeap=0x1f0000) returned 1 [0239.755] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f758 [0239.755] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f8d8 | out: hHeap=0x1f0000) returned 1 [0239.755] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f698 | out: hHeap=0x1f0000) returned 1 [0239.756] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f7a0 [0239.756] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204c30 [0239.756] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f7a0 | out: hHeap=0x1f0000) returned 1 [0239.756] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cf0 [0239.756] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c30 | out: hHeap=0x1f0000) returned 1 [0239.756] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f758 | out: hHeap=0x1f0000) returned 1 [0239.756] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0239.757] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260630 [0239.757] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d70 | out: hHeap=0x1f0000) returned 1 [0239.757] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204d10 [0239.757] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260630 | out: hHeap=0x1f0000) returned 1 [0239.757] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cf0 | out: hHeap=0x1f0000) returned 1 [0239.757] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204e30 [0239.757] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206928 [0239.758] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e30 | out: hHeap=0x1f0000) returned 1 [0239.758] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260838 [0239.758] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206928 | out: hHeap=0x1f0000) returned 1 [0239.758] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d10 | out: hHeap=0x1f0000) returned 1 [0239.758] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238870 [0239.758] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f860 [0239.758] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238870 | out: hHeap=0x1f0000) returned 1 [0239.758] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f680 [0239.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f860 | out: hHeap=0x1f0000) returned 1 [0239.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204c10 [0239.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f680 | out: hHeap=0x1f0000) returned 1 [0239.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206928 [0239.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c10 | out: hHeap=0x1f0000) returned 1 [0239.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206928 | out: hHeap=0x1f0000) returned 1 [0239.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260838 | out: hHeap=0x1f0000) returned 1 [0239.760] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0239.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aafb8 [0239.760] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285e00 | out: hHeap=0x1f0000) returned 1 [0239.760] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604c8 | out: hHeap=0x1f0000) returned 1 [0239.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2391d0 [0239.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0239.760] CryptAcquireContextA (in: phProv=0x2294690, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2294690*=0x212c68) returned 1 [0239.761] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x260928 | out: pbBuffer=0x260928) returned 1 [0239.762] CryptReleaseContext (hProv=0x212c68, dwFlags=0x0) returned 1 [0239.762] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0239.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260630 [0239.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2604c8 [0239.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239080 [0239.762] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260630 | out: hHeap=0x1f0000) returned 1 [0239.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aba20 [0239.763] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239080 | out: hHeap=0x1f0000) returned 1 [0239.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8690 [0239.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f878 [0239.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x2b0520 [0239.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260658 [0239.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2859e0 [0239.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f30 [0239.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2affd8 [0239.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260928 [0239.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2856c8 [0239.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238820 [0239.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605b8 [0239.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f7b8 [0239.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238840 [0239.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260838 [0239.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f620 [0239.765] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f620 | out: hHeap=0x1f0000) returned 1 [0239.765] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260838 | out: hHeap=0x1f0000) returned 1 [0239.765] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238840 | out: hHeap=0x1f0000) returned 1 [0239.766] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f7b8 | out: hHeap=0x1f0000) returned 1 [0239.766] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0239.766] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238820 | out: hHeap=0x1f0000) returned 1 [0239.766] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2856c8 | out: hHeap=0x1f0000) returned 1 [0239.766] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0239.766] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2affd8 | out: hHeap=0x1f0000) returned 1 [0239.766] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238f30 [0239.767] GetLastError () returned 0x0 [0239.767] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238c20 [0239.767] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac110 [0239.767] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac110 | out: hHeap=0x1f0000) returned 1 [0239.767] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab208 [0239.767] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac110 [0239.768] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab208 | out: hHeap=0x1f0000) returned 1 [0239.768] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac110 | out: hHeap=0x1f0000) returned 1 [0239.768] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x24e9c0 [0239.768] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285098 [0239.768] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab6a8 [0239.768] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab6a8 | out: hHeap=0x1f0000) returned 1 [0239.768] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab458 [0239.768] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab458 | out: hHeap=0x1f0000) returned 1 [0239.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2851a0 [0239.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab7d0 [0239.769] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab7d0 | out: hHeap=0x1f0000) returned 1 [0239.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fc18 [0239.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x26d4c0 [0239.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2af6c0 [0239.769] QueryPerformanceCounter (in: lpPerformanceCount=0x22941e0 | out: lpPerformanceCount=0x22941e0*=39713817678) returned 1 [0239.769] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x2294220 | out: lpSystemTimeAsFileTime=0x2294220) [0239.770] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238910 [0239.770] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605b8 [0239.770] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cf0 [0239.770] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cf0 | out: hHeap=0x1f0000) returned 1 [0239.770] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0239.770] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260838 [0239.770] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f50 [0239.770] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f50 | out: hHeap=0x1f0000) returned 1 [0239.771] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260838 | out: hHeap=0x1f0000) returned 1 [0239.771] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238910 | out: hHeap=0x1f0000) returned 1 [0239.771] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0239.771] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239208 [0239.771] GetLastError () returned 0x0 [0239.771] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab0e0 [0239.771] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab6a8 [0239.771] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2acdc8 [0239.772] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260838 [0239.772] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2605b8 [0239.772] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac488 [0239.772] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aca50 [0239.772] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260630 [0239.772] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab208 [0239.772] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x222ee8 [0239.772] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2acb78 [0239.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0239.773] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2acb78 | out: hHeap=0x1f0000) returned 1 [0239.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x20c2c0 [0239.773] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0239.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260888 [0239.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260928 [0239.773] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0239.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac800 [0239.774] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0239.774] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0239.774] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x234b90 [0239.774] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b90 | out: hHeap=0x1f0000) returned 1 [0239.774] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0239.774] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20c2c0 | out: hHeap=0x1f0000) returned 1 [0239.774] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f710 [0239.774] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228878 [0239.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260888 [0239.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260928 [0239.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260ba8 [0239.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260b30 [0239.775] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0239.775] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0239.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0239.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260888 [0239.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260928 [0239.776] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0239.776] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2acb78 [0239.776] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0239.776] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206808 [0239.776] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x2aa518 [0239.776] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aa518 | out: hHeap=0x1f0000) returned 1 [0239.776] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206808 | out: hHeap=0x1f0000) returned 1 [0239.776] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260630 | out: hHeap=0x1f0000) returned 1 [0239.776] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac238 [0239.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2acb78 | out: hHeap=0x1f0000) returned 1 [0239.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0239.777] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204bf0 [0239.777] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab330 [0239.777] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abb48 [0239.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0239.777] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab458 [0239.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abb48 | out: hHeap=0x1f0000) returned 1 [0239.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b30 | out: hHeap=0x1f0000) returned 1 [0239.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ba8 | out: hHeap=0x1f0000) returned 1 [0239.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228878 | out: hHeap=0x1f0000) returned 1 [0239.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab330 | out: hHeap=0x1f0000) returned 1 [0239.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bf0 | out: hHeap=0x1f0000) returned 1 [0239.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f710 | out: hHeap=0x1f0000) returned 1 [0239.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac800 | out: hHeap=0x1f0000) returned 1 [0239.778] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac360 [0239.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac360 | out: hHeap=0x1f0000) returned 1 [0239.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ee8 | out: hHeap=0x1f0000) returned 1 [0239.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab208 | out: hHeap=0x1f0000) returned 1 [0239.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac238 | out: hHeap=0x1f0000) returned 1 [0239.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aca50 | out: hHeap=0x1f0000) returned 1 [0239.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac488 | out: hHeap=0x1f0000) returned 1 [0239.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260838 | out: hHeap=0x1f0000) returned 1 [0239.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2acdc8 | out: hHeap=0x1f0000) returned 1 [0239.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab6a8 | out: hHeap=0x1f0000) returned 1 [0239.779] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac238 [0239.779] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abfe8 [0239.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac238 | out: hHeap=0x1f0000) returned 1 [0239.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abfe8 | out: hHeap=0x1f0000) returned 1 [0239.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab458 | out: hHeap=0x1f0000) returned 1 [0239.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab0e0 | out: hHeap=0x1f0000) returned 1 [0239.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2851a0 | out: hHeap=0x1f0000) returned 1 [0239.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24e9c0 | out: hHeap=0x1f0000) returned 1 [0239.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x2ae770 [0239.780] GetLastError () returned 0x0 [0239.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238970 [0239.781] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238980 [0240.253] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\AppXManifest.xml" (normalized: "c:\\program files\\microsoft office\\appxmanifest.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2294590, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0240.253] GetFileType (hFile=0x200) returned 0x1 [0240.254] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x296010 [0240.258] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2294518 | out: lpNewFilePointer=0x0) returned 1 [0240.258] GetLastError () returned 0xb7 [0240.261] CloseHandle (hObject=0x200) returned 1 [0240.261] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2132c8 [0240.262] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0240.262] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2132c8 | out: hHeap=0x1f0000) returned 1 [0240.262] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x11c) returned 0x2aca50 [0240.262] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0240.262] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\AppXManifest.xml" (normalized: "c:\\program files\\microsoft office\\appxmanifest.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\AppXManifest.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\appxmanifest.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwFlags=0x2) returned 1 [0240.264] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aca50 | out: hHeap=0x1f0000) returned 1 [0240.264] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238980 | out: hHeap=0x1f0000) returned 1 [0240.264] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238970 | out: hHeap=0x1f0000) returned 1 [0240.264] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285098 | out: hHeap=0x1f0000) returned 1 [0240.264] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2859e0 | out: hHeap=0x1f0000) returned 1 [0240.264] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260658 | out: hHeap=0x1f0000) returned 1 [0240.264] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f30 | out: hHeap=0x1f0000) returned 1 [0240.264] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0520 | out: hHeap=0x1f0000) returned 1 [0240.264] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f878 | out: hHeap=0x1f0000) returned 1 [0240.264] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8690 | out: hHeap=0x1f0000) returned 1 [0240.264] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae770 | out: hHeap=0x1f0000) returned 1 [0240.265] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604c8 | out: hHeap=0x1f0000) returned 1 [0240.265] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aba20 | out: hHeap=0x1f0000) returned 1 [0240.265] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x26d4c0 | out: hHeap=0x1f0000) returned 1 [0240.265] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2af6c0 | out: hHeap=0x1f0000) returned 1 [0240.265] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2391d0 | out: hHeap=0x1f0000) returned 1 [0240.266] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388c0 | out: hHeap=0x1f0000) returned 1 [0240.266] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f638 | out: hHeap=0x1f0000) returned 1 [0240.266] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0240.266] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238900 | out: hHeap=0x1f0000) returned 1 [0240.266] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f818 | out: hHeap=0x1f0000) returned 1 [0240.266] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0240.266] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238880 | out: hHeap=0x1f0000) returned 1 [0240.266] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x284f90 | out: hHeap=0x1f0000) returned 1 [0240.266] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0240.270] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b05f0 | out: hHeap=0x1f0000) returned 1 [0240.271] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228b48 | out: hHeap=0x1f0000) returned 1 [0240.271] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0240.271] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aafb8 | out: hHeap=0x1f0000) returned 1 [0240.271] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228cb0 | out: hHeap=0x1f0000) returned 1 [0240.271] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x26e7c8 | out: hHeap=0x1f0000) returned 1 [0240.271] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2afd50 | out: hHeap=0x1f0000) returned 1 [0240.271] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2067d8 | out: hHeap=0x1f0000) returned 1 [0240.271] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f920 | out: hHeap=0x1f0000) returned 1 [0240.271] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f9c8 | out: hHeap=0x1f0000) returned 1 [0240.271] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232e18 | out: hHeap=0x1f0000) returned 1 [0240.272] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x266290 | out: hHeap=0x1f0000) returned 1 [0240.272] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae888 | out: hHeap=0x1f0000) returned 1 [0240.272] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238de0 | out: hHeap=0x1f0000) returned 1 [0240.272] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0240.272] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262650 | out: hHeap=0x1f0000) returned 1 [0240.272] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228638 | out: hHeap=0x1f0000) returned 1 [0240.272] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0240.272] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3888fc00, ftCreationTime.dwHighDateTime=0x1d5b2f9, ftLastAccessTime.dwLowDateTime=0xda731ce0, ftLastAccessTime.dwHighDateTime=0x1d58468, ftLastWriteTime.dwLowDateTime=0xda731ce0, ftLastWriteTime.dwHighDateTime=0x1d58468, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x3, cFileName="dresses representations super.exe", cAlternateFileName="DRESSE~1.EXE")) returned 1 [0240.272] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8a58 [0240.272] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8270 [0240.272] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0240.273] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8270 | out: hHeap=0x1f0000) returned 1 [0240.273] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2175d0 | out: hHeap=0x1f0000) returned 1 [0240.273] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8a58 | out: hHeap=0x1f0000) returned 1 [0240.273] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\dresses representations super.exe" (normalized: "c:\\program files\\microsoft office\\dresses representations super.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0240.274] GetLastError () returned 0x20 [0240.274] GetLastError () returned 0x20 [0240.274] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83543a09, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x119, dwReserved0=0x0, dwReserved1=0x3, cFileName="FileSystemMetadata.xml", cAlternateFileName="FILESY~1.XML")) returned 1 [0240.274] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2391d0 [0240.274] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8530 [0240.274] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0240.274] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8530 | out: hHeap=0x1f0000) returned 1 [0240.274] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0240.275] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2391d0 | out: hHeap=0x1f0000) returned 1 [0240.275] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\FileSystemMetadata.xml" (normalized: "c:\\program files\\microsoft office\\filesystemmetadata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22beb38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0240.275] GetFileType (hFile=0x200) returned 0x1 [0240.276] CloseHandle (hObject=0x200) returned 1 [0240.276] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0240.276] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\FileSystemMetadata.xml" (normalized: "c:\\program files\\microsoft office\\filesystemmetadata.xml"), fInfoLevelId=0x0, lpFileInformation=0x22bebd4 | out: lpFileInformation=0x22bebd4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83543a09, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x119)) returned 1 [0240.277] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0240.277] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0240.277] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0240.277] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9e7b530, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa146f18e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda9a8629, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="Office16", cAlternateFileName="")) returned 1 [0240.277] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0240.277] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a83d0 [0240.277] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217650 [0240.278] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a83d0 | out: hHeap=0x1f0000) returned 1 [0240.278] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0240.278] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0240.278] lstrcmpW (lpString1="Office16", lpString2=".") returned 1 [0240.278] lstrcmpW (lpString1="Office16", lpString2="..") returned 1 [0240.278] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204bd0 [0240.278] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0450 [0240.278] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd698ca4a, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xd698ca4a, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="PackageManifests", cAlternateFileName="PACKAG~1")) returned 1 [0240.278] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c58 [0240.279] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a84d8 [0240.279] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217b50 [0240.279] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a84d8 | out: hHeap=0x1f0000) returned 1 [0240.279] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217650 | out: hHeap=0x1f0000) returned 1 [0240.279] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c58 | out: hHeap=0x1f0000) returned 1 [0240.279] lstrcmpW (lpString1="PackageManifests", lpString2=".") returned 1 [0240.279] lstrcmpW (lpString1="PackageManifests", lpString2="..") returned 1 [0240.279] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239048 [0240.279] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe00 [0240.279] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bd0 | out: hHeap=0x1f0000) returned 1 [0240.279] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="root", cAlternateFileName="")) returned 1 [0240.280] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8270 [0240.280] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217b50 | out: hHeap=0x1f0000) returned 1 [0240.280] lstrcmpW (lpString1="root", lpString2=".") returned 1 [0240.280] lstrcmpW (lpString1="root", lpString2="..") returned 1 [0240.280] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x48) returned 0x2262d8 [0240.280] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8690 [0240.280] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239048 | out: hHeap=0x1f0000) returned 1 [0240.280] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x22bed60 | out: lpFindFileData=0x22bed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="root", cAlternateFileName="")) returned 0 [0240.280] FindClose (in: hFindFile=0x24e7c0 | out: hFindFile=0x24e7c0) returned 1 [0240.282] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228830 [0240.282] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0240.282] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x261990 [0240.282] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b02b0 [0240.282] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office16\\*", lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9e7b530, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa146f18e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda9a8629, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ea00 [0240.283] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0248 [0240.283] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b02b0 | out: hHeap=0x1f0000) returned 1 [0240.283] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0240.283] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9e7b530, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa146f18e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda9a8629, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0240.283] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0318 [0240.283] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0248 | out: hHeap=0x1f0000) returned 1 [0240.283] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0240.283] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0240.283] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd502d600, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0xd9e7b530, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd502d600, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x2a9c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPP.HTM", cAlternateFileName="")) returned 1 [0240.283] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604c8 [0240.283] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0b38 [0240.283] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221118 [0240.284] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0b38 | out: hHeap=0x1f0000) returned 1 [0240.284] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0318 | out: hHeap=0x1f0000) returned 1 [0240.284] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604c8 | out: hHeap=0x1f0000) returned 1 [0240.284] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be73c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0240.284] GetFileType (hFile=0x200) returned 0x1 [0240.285] CloseHandle (hObject=0x200) returned 1 [0240.285] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0240.285] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.htm"), fInfoLevelId=0x0, lpFileInformation=0x22be7dc | out: lpFileInformation=0x22be7dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd502d600, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0xd9e7b530, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd502d600, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x2a9c0)) returned 1 [0240.285] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0240.285] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0240.285] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0240.285] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9ea17a8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x17103, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPP.VBS", cAlternateFileName="")) returned 1 [0240.285] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0240.285] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0b38 [0240.286] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2211b0 [0240.286] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0b38 | out: hHeap=0x1f0000) returned 1 [0240.286] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0240.286] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0240.286] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.vbs"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be73c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0240.286] GetFileType (hFile=0x200) returned 0x1 [0240.287] CloseHandle (hObject=0x200) returned 1 [0240.287] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2202b0 [0240.287] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.vbs"), fInfoLevelId=0x0, lpFileInformation=0x22be7dc | out: lpFileInformation=0x22be7dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9ea17a8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x17103)) returned 1 [0240.287] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2202b0 | out: hHeap=0x1f0000) returned 1 [0240.287] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0240.287] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0240.287] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9f60362, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x6a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPREARM.EXE", cAlternateFileName="OSPPRE~1.EXE")) returned 1 [0240.287] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604c8 [0240.287] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0248 [0240.288] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221378 [0240.288] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0248 | out: hHeap=0x1f0000) returned 1 [0240.288] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0240.288] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604c8 | out: hHeap=0x1f0000) returned 1 [0240.288] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\Office16\\OSPPREARM.EXE" (normalized: "c:\\program files\\microsoft office\\office16\\ospprearm.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be73c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0240.288] GetFileType (hFile=0x200) returned 0x1 [0240.289] CloseHandle (hObject=0x200) returned 1 [0240.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212c68 [0240.289] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office16\\OSPPREARM.EXE" (normalized: "c:\\program files\\microsoft office\\office16\\ospprearm.exe"), fInfoLevelId=0x0, lpFileInformation=0x22be7dc | out: lpFileInformation=0x22be7dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9f60362, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x6a40)) returned 1 [0240.289] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212c68 | out: hHeap=0x1f0000) returned 1 [0240.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0240.289] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0240.289] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd502d600, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0xda9a8629, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd502d600, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x8df0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SLERROR.XML", cAlternateFileName="")) returned 1 [0240.290] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2607e8 [0240.290] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0ba0 [0240.290] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221118 [0240.290] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0ba0 | out: hHeap=0x1f0000) returned 1 [0240.290] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0240.290] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607e8 | out: hHeap=0x1f0000) returned 1 [0240.290] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML" (normalized: "c:\\program files\\microsoft office\\office16\\slerror.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be73c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0240.290] GetFileType (hFile=0x200) returned 0x1 [0240.291] CloseHandle (hObject=0x200) returned 1 [0240.291] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0240.291] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML" (normalized: "c:\\program files\\microsoft office\\office16\\slerror.xml"), fInfoLevelId=0x0, lpFileInformation=0x22be7dc | out: lpFileInformation=0x22be7dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd502d600, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0xda9a8629, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd502d600, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x8df0)) returned 1 [0240.291] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0240.291] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fab8 [0240.291] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fab8 | out: hHeap=0x1f0000) returned 1 [0240.291] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd502d600, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0xda9a8629, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd502d600, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x8df0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SLERROR.XML", cAlternateFileName="")) returned 0 [0240.292] FindClose (in: hFindFile=0x24ea00 | out: hFindFile=0x24ea00) returned 1 [0240.292] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0240.292] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261990 | out: hHeap=0x1f0000) returned 1 [0240.292] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0240.292] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228830 | out: hHeap=0x1f0000) returned 1 [0240.292] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228bd8 [0240.292] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0240.292] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x263310 [0240.292] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220238 [0240.293] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\*", lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd698ca4a, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xd698ca4a, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24eb00 [0240.293] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220490 [0240.293] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220238 | out: hHeap=0x1f0000) returned 1 [0240.293] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0240.293] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd698ca4a, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xd698ca4a, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0240.293] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0240.293] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220490 | out: hHeap=0x1f0000) returned 1 [0240.294] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0240.294] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0240.294] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834f7581, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834f7581, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5e91c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml", cAlternateFileName="APA05A~1.XML")) returned 1 [0240.294] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21ff68 [0240.294] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0240.294] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0240.294] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0240.294] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0240.294] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ff68 | out: hHeap=0x1f0000) returned 1 [0240.295] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be73c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0240.295] GetFileType (hFile=0x200) returned 0x1 [0240.295] CloseHandle (hObject=0x200) returned 1 [0240.295] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x229418 [0240.295] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x22be7dc | out: lpFileInformation=0x22be7dc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834f7581, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834f7581, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5e91c)) returned 1 [0240.296] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0240.296] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x229418 [0240.296] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0240.296] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8351d7a8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8351d7a8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e3474a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml", cAlternateFileName="APAD0B~1.XML")) returned 1 [0240.296] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0240.296] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220238 [0240.296] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x229418 [0240.296] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220238 | out: hHeap=0x1f0000) returned 1 [0240.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0240.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0240.876] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be73c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0240.876] GetFileType (hFile=0x1e0) returned 0x1 [0240.876] CloseHandle (hObject=0x1e0) returned 1 [0240.876] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0240.876] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x22be7dc | out: lpFileInformation=0x22be7dc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8351d7a8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8351d7a8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e3474a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5fd)) returned 1 [0240.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0240.877] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0240.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0240.877] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd61cd00b, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xd61cd00b, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xd698ca4a, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xc3976, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="APPXMA~1.ODV")) returned 1 [0240.877] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x21b650 [0240.877] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21ff68 [0240.877] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x160) returned 0x20c2c0 [0240.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ff68 | out: hHeap=0x1f0000) returned 1 [0240.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0240.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21b650 | out: hHeap=0x1f0000) returned 1 [0240.878] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0000-1000-0000000ff1ce.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be73c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0240.878] GetFileType (hFile=0x1e0) returned 0x1 [0240.878] CloseHandle (hObject=0x1e0) returned 1 [0240.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x160) returned 0x22b018 [0240.880] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0000-1000-0000000ff1ce.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x22be7dc | out: lpFileInformation=0x22be7dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd61cd00b, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xd61cd00b, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xd698ca4a, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xc3976)) returned 1 [0240.880] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b018 | out: hHeap=0x1f0000) returned 1 [0240.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x160) returned 0x22b018 [0240.880] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b018 | out: hHeap=0x1f0000) returned 1 [0240.880] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP51DE~1.XML")) returned 1 [0240.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0240.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fc98 [0240.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x229418 [0240.881] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fc98 | out: hHeap=0x1f0000) returned 1 [0240.881] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20c2c0 | out: hHeap=0x1f0000) returned 1 [0240.881] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0240.881] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be73c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0240.881] GetFileType (hFile=0x1e0) returned 0x1 [0240.881] CloseHandle (hObject=0x1e0) returned 1 [0240.882] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0240.882] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x22be7dc | out: lpFileInformation=0x22be7dc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0240.882] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0240.882] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0240.882] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0240.882] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83485006, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83485006, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x79381, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml", cAlternateFileName="APPXMA~4.XML")) returned 1 [0240.882] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0240.882] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21ff68 [0240.882] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0240.882] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ff68 | out: hHeap=0x1f0000) returned 1 [0240.882] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0240.883] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0240.883] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be73c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0240.883] GetFileType (hFile=0x1e0) returned 0x1 [0240.883] CloseHandle (hObject=0x1e0) returned 1 [0240.884] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x229418 [0240.884] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x22be7dc | out: lpFileInformation=0x22be7dc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83485006, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83485006, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x79381)) returned 1 [0240.884] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0240.884] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x229418 [0240.884] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0240.884] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ecd099, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml", cAlternateFileName="APCEE5~1.XML")) returned 1 [0240.884] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0240.884] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0240.884] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x229418 [0240.884] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0240.885] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0240.885] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0240.885] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be73c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0240.885] GetFileType (hFile=0x1e0) returned 0x1 [0240.885] CloseHandle (hObject=0x1e0) returned 1 [0240.886] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0240.886] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x22be7dc | out: lpFileInformation=0x22be7dc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ecd099, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0240.886] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0240.886] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0240.886] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0240.886] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e3474a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e3474a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3df10, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP557F~1.XML")) returned 1 [0240.886] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0240.886] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21ff68 [0240.886] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0240.886] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ff68 | out: hHeap=0x1f0000) returned 1 [0240.886] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0240.886] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0240.887] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be73c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0240.887] GetFileType (hFile=0x1e0) returned 0x1 [0240.887] CloseHandle (hObject=0x1e0) returned 1 [0240.888] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x229418 [0240.888] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x22be7dc | out: lpFileInformation=0x22be7dc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e3474a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e3474a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3df10)) returned 1 [0240.888] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0240.888] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x229418 [0240.888] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0240.888] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml", cAlternateFileName="APE193~1.XML")) returned 1 [0240.888] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0240.888] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0240.888] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x229418 [0240.888] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0240.888] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0240.888] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0240.889] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be73c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0240.889] GetFileType (hFile=0x1e0) returned 0x1 [0240.889] CloseHandle (hObject=0x1e0) returned 1 [0240.889] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0240.890] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x22be7dc | out: lpFileInformation=0x22be7dc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0240.890] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0240.890] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0240.890] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0240.890] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e3474a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x112a4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml", cAlternateFileName="APC1E2~1.XML")) returned 1 [0240.891] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0240.891] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fc20 [0240.891] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0240.891] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fc20 | out: hHeap=0x1f0000) returned 1 [0240.891] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0240.891] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0240.892] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be73c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0240.892] GetFileType (hFile=0x1e0) returned 0x1 [0240.892] CloseHandle (hObject=0x1e0) returned 1 [0240.893] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x229418 [0240.893] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x22be7dc | out: lpFileInformation=0x22be7dc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e3474a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x112a4e)) returned 1 [0240.893] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0240.893] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x229418 [0240.893] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0240.893] GetLastError () returned 0x0 [0240.894] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0240.894] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228680 [0240.894] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2624b8 [0240.894] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x229418 [0240.894] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2392b0 [0240.894] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605b8 [0240.894] CryptAcquireContextA (in: phProv=0x2294290, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2294290*=0x213350) returned 1 [0240.895] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2605b8 | out: pbBuffer=0x2605b8) returned 1 [0240.896] CryptReleaseContext (hProv=0x213350, dwFlags=0x0) returned 1 [0240.896] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0240.896] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x26aeb0 [0240.896] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2ae888 [0240.896] QueryPerformanceCounter (in: lpPerformanceCount=0x2294224 | out: lpPerformanceCount=0x2294224*=39826494339) returned 1 [0240.896] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x2294264 | out: lpSystemTimeAsFileTime=0x2294264) [0240.896] QueryPerformanceCounter (in: lpPerformanceCount=0x2294224 | out: lpPerformanceCount=0x2294224*=39826528458) returned 1 [0240.896] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x2294264 | out: lpSystemTimeAsFileTime=0x2294264) [0240.897] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239198 [0240.897] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x266290 [0240.897] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2ae310 [0240.897] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x2338a8 [0240.897] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f950 [0240.897] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2066b8 [0240.897] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f980 [0240.897] GetLastError () returned 0x0 [0240.897] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22941f4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0240.898] GetFileType (hFile=0x1e0) returned 0x1 [0240.898] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2294260 | out: lpNewFilePointer=0x0) returned 1 [0240.898] ReadFile (in: hFile=0x1e0, lpBuffer=0x22a9760, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x2294238, lpOverlapped=0x0 | out: lpBuffer=0x22a9760*, lpNumberOfBytesRead=0x2294238*=0x14000, lpOverlapped=0x0) returned 1 [0240.904] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x288fa8 [0240.905] ReadFile (in: hFile=0x1e0, lpBuffer=0x288fa8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x22941dc, lpOverlapped=0x0 | out: lpBuffer=0x288fa8*, lpNumberOfBytesRead=0x22941dc*=0x1000, lpOverlapped=0x0) returned 1 [0240.909] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2294268 | out: lpNewFilePointer=0x0) returned 1 [0240.910] WriteFile (in: hFile=0x1e0, lpBuffer=0x2294770*, nNumberOfBytesToWrite=0x14000, lpNumberOfBytesWritten=0x22941d4, lpOverlapped=0x0 | out: lpBuffer=0x2294770*, lpNumberOfBytesWritten=0x22941d4*=0x14000, lpOverlapped=0x0) returned 1 [0240.911] WriteFile (in: hFile=0x1e0, lpBuffer=0x288fa8*, nNumberOfBytesToWrite=0xff0, lpNumberOfBytesWritten=0x2294200, lpOverlapped=0x0 | out: lpBuffer=0x288fa8*, lpNumberOfBytesWritten=0x2294200*=0xff0, lpOverlapped=0x0) returned 1 [0240.911] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x15f90, lpNewFilePointer=0x0, dwMoveMethod=0x2294248 | out: lpNewFilePointer=0x0) returned 1 [0240.911] ReadFile (in: hFile=0x1e0, lpBuffer=0x22a9760, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x2294220, lpOverlapped=0x0 | out: lpBuffer=0x22a9760*, lpNumberOfBytesRead=0x2294220*=0x14000, lpOverlapped=0x0) returned 1 [0240.912] ReadFile (in: hFile=0x1e0, lpBuffer=0x288fa8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x22941c4, lpOverlapped=0x0 | out: lpBuffer=0x288fa8*, lpNumberOfBytesRead=0x22941c4*=0x1000, lpOverlapped=0x0) returned 1 [0240.913] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x15f90, lpNewFilePointer=0x0, dwMoveMethod=0x2294268 | out: lpNewFilePointer=0x0) returned 1 [0240.913] WriteFile (in: hFile=0x1e0, lpBuffer=0x2294770*, nNumberOfBytesToWrite=0x14000, lpNumberOfBytesWritten=0x22941d4, lpOverlapped=0x0 | out: lpBuffer=0x2294770*, lpNumberOfBytesWritten=0x22941d4*=0x14000, lpOverlapped=0x0) returned 1 [0240.914] WriteFile (in: hFile=0x1e0, lpBuffer=0x288fa8*, nNumberOfBytesToWrite=0xff0, lpNumberOfBytesWritten=0x2294200, lpOverlapped=0x0 | out: lpBuffer=0x288fa8*, lpNumberOfBytesWritten=0x2294200*=0xff0, lpOverlapped=0x0) returned 1 [0240.914] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0xdbba0, lpNewFilePointer=0x0, dwMoveMethod=0x2294248 | out: lpNewFilePointer=0x0) returned 1 [0240.914] ReadFile (in: hFile=0x1e0, lpBuffer=0x22a9760, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x2294220, lpOverlapped=0x0 | out: lpBuffer=0x22a9760*, lpNumberOfBytesRead=0x2294220*=0x14000, lpOverlapped=0x0) returned 1 [0241.282] ReadFile (in: hFile=0x1e0, lpBuffer=0x288fa8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x22941c4, lpOverlapped=0x0 | out: lpBuffer=0x288fa8*, lpNumberOfBytesRead=0x22941c4*=0x1000, lpOverlapped=0x0) returned 1 [0241.343] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0xdbba0, lpNewFilePointer=0x0, dwMoveMethod=0x2294268 | out: lpNewFilePointer=0x0) returned 1 [0241.343] WriteFile (in: hFile=0x1e0, lpBuffer=0x2294770*, nNumberOfBytesToWrite=0x14000, lpNumberOfBytesWritten=0x22941d4, lpOverlapped=0x0 | out: lpBuffer=0x2294770*, lpNumberOfBytesWritten=0x22941d4*=0x14000, lpOverlapped=0x0) returned 1 [0241.345] WriteFile (in: hFile=0x1e0, lpBuffer=0x288fa8*, nNumberOfBytesToWrite=0xff0, lpNumberOfBytesWritten=0x2294250, lpOverlapped=0x0 | out: lpBuffer=0x288fa8*, lpNumberOfBytesWritten=0x2294250*=0xff0, lpOverlapped=0x0) returned 1 [0241.345] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x288fa8 | out: hHeap=0x1f0000) returned 1 [0241.346] CloseHandle (hObject=0x1e0) returned 1 [0241.346] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228cb0 [0241.346] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260770 [0241.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260950 [0241.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x2284d0 [0241.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d30 [0241.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204cd0 [0241.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x238a30 [0241.347] GetLastError () returned 0x0 [0241.348] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238de0 [0241.348] GetLastError () returned 0x0 [0241.348] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238d38 [0241.348] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b05f0 [0241.348] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260b30 [0241.348] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2858d8 [0241.348] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ab0 [0241.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b58 [0241.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f800 [0241.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b60 [0241.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bd0 [0241.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f6c8 [0241.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260ba8 [0241.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2859e0 [0241.349] GetLastError () returned 0x0 [0241.350] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x2389e0 [0241.350] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238a40 [0241.350] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ae0 [0241.350] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a40 | out: hHeap=0x1f0000) returned 1 [0241.350] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a90 [0241.350] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ae0 | out: hHeap=0x1f0000) returned 1 [0241.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389e0 | out: hHeap=0x1f0000) returned 1 [0241.351] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a50 [0241.351] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f7a0 [0241.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a50 | out: hHeap=0x1f0000) returned 1 [0241.351] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f650 [0241.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f7a0 | out: hHeap=0x1f0000) returned 1 [0241.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a90 | out: hHeap=0x1f0000) returned 1 [0241.351] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f818 [0241.352] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f740 [0241.352] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f818 | out: hHeap=0x1f0000) returned 1 [0241.352] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f758 [0241.352] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f740 | out: hHeap=0x1f0000) returned 1 [0241.352] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f650 | out: hHeap=0x1f0000) returned 1 [0241.352] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f788 [0241.352] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204e70 [0241.352] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f788 | out: hHeap=0x1f0000) returned 1 [0241.352] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bd0 [0241.352] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e70 | out: hHeap=0x1f0000) returned 1 [0241.353] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f758 | out: hHeap=0x1f0000) returned 1 [0241.353] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bb0 [0241.353] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260c70 [0241.353] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bb0 | out: hHeap=0x1f0000) returned 1 [0241.353] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204c70 [0241.353] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c70 | out: hHeap=0x1f0000) returned 1 [0241.353] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bd0 | out: hHeap=0x1f0000) returned 1 [0241.353] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204bb0 [0241.353] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x2067d8 [0241.353] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bb0 | out: hHeap=0x1f0000) returned 1 [0241.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260bf8 [0241.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2067d8 | out: hHeap=0x1f0000) returned 1 [0241.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c70 | out: hHeap=0x1f0000) returned 1 [0241.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b00 [0241.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f878 [0241.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b00 | out: hHeap=0x1f0000) returned 1 [0241.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f728 [0241.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f878 | out: hHeap=0x1f0000) returned 1 [0241.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204cd0 [0241.355] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f728 | out: hHeap=0x1f0000) returned 1 [0241.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x2067d8 [0241.355] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cd0 | out: hHeap=0x1f0000) returned 1 [0241.355] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2067d8 | out: hHeap=0x1f0000) returned 1 [0241.355] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0241.355] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0241.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0241.356] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2858d8 | out: hHeap=0x1f0000) returned 1 [0241.356] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b30 | out: hHeap=0x1f0000) returned 1 [0241.356] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c20 [0241.356] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c20 [0241.356] CryptAcquireContextA (in: phProv=0x2294290, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2294290*=0x212be0) returned 1 [0241.357] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x260c20 | out: pbBuffer=0x260c20) returned 1 [0241.357] CryptReleaseContext (hProv=0x212be0, dwFlags=0x0) returned 1 [0241.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c20 | out: hHeap=0x1f0000) returned 1 [0241.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260bf8 [0241.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260b30 [0241.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c90 [0241.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0241.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0241.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c90 | out: hHeap=0x1f0000) returned 1 [0241.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8dc8 [0241.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f788 [0241.359] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x2b0658 [0241.359] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260bf8 [0241.359] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2858d8 [0241.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d30 [0241.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0318 [0241.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2609f0 [0241.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285ae8 [0241.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a50 [0241.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c20 [0241.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f7a0 [0241.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a10 [0241.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a18 [0241.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f6b0 [0241.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f6b0 | out: hHeap=0x1f0000) returned 1 [0241.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a18 | out: hHeap=0x1f0000) returned 1 [0241.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a10 | out: hHeap=0x1f0000) returned 1 [0241.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f7a0 | out: hHeap=0x1f0000) returned 1 [0241.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c20 | out: hHeap=0x1f0000) returned 1 [0241.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a50 | out: hHeap=0x1f0000) returned 1 [0241.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285ae8 | out: hHeap=0x1f0000) returned 1 [0241.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609f0 | out: hHeap=0x1f0000) returned 1 [0241.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0318 | out: hHeap=0x1f0000) returned 1 [0241.361] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239208 [0241.362] GetLastError () returned 0x0 [0241.362] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238f68 [0241.362] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0241.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0241.362] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0241.362] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0241.363] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0241.363] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0241.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x24ec00 [0241.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285ae8 [0241.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0241.363] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0241.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0241.363] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0241.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285bf0 [0241.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0241.364] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0241.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x230000 [0241.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x2746f0 [0241.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2af490 [0241.364] QueryPerformanceCounter (in: lpPerformanceCount=0x2293de0 | out: lpPerformanceCount=0x2293de0*=39873310402) returned 1 [0241.364] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x2293e20 | out: lpSystemTimeAsFileTime=0x2293e20) [0241.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x2389f0 [0241.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609f0 [0241.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c70 [0241.365] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c70 | out: hHeap=0x1f0000) returned 1 [0241.365] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609f0 | out: hHeap=0x1f0000) returned 1 [0241.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c20 [0241.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204dd0 [0241.365] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204dd0 | out: hHeap=0x1f0000) returned 1 [0241.365] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c20 | out: hHeap=0x1f0000) returned 1 [0241.366] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389f0 | out: hHeap=0x1f0000) returned 1 [0241.366] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0241.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x2391d0 [0241.366] GetLastError () returned 0x0 [0241.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0241.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0241.367] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0241.367] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260a18 [0241.367] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260c20 [0241.367] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0241.367] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0241.367] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260c48 [0241.367] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0241.368] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x222ee8 [0241.368] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abd98 [0241.368] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x22b018 [0241.368] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abd98 | out: hHeap=0x1f0000) returned 1 [0241.368] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x25ffe8 [0241.368] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b018 | out: hHeap=0x1f0000) returned 1 [0241.368] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260c70 [0241.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2609f0 [0241.369] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c70 | out: hHeap=0x1f0000) returned 1 [0241.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab8f8 [0241.369] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609f0 | out: hHeap=0x1f0000) returned 1 [0241.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x22b018 [0241.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x234b90 [0241.369] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b90 | out: hHeap=0x1f0000) returned 1 [0241.370] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b018 | out: hHeap=0x1f0000) returned 1 [0241.370] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25ffe8 | out: hHeap=0x1f0000) returned 1 [0241.370] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f818 [0241.370] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228440 [0241.370] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260c70 [0241.370] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2609f0 [0241.370] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260a40 [0241.370] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260a68 [0241.371] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609f0 | out: hHeap=0x1f0000) returned 1 [0241.371] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c70 | out: hHeap=0x1f0000) returned 1 [0241.371] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x22b018 [0241.371] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260c70 [0241.371] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2609f0 [0241.371] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c70 | out: hHeap=0x1f0000) returned 1 [0241.371] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab580 [0241.371] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609f0 | out: hHeap=0x1f0000) returned 1 [0241.371] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206868 [0241.372] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x2a93f8 [0241.372] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a93f8 | out: hHeap=0x1f0000) returned 1 [0241.372] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206868 | out: hHeap=0x1f0000) returned 1 [0241.372] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0241.372] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2acdc8 [0241.372] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab580 | out: hHeap=0x1f0000) returned 1 [0241.372] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b018 | out: hHeap=0x1f0000) returned 1 [0241.372] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204f10 [0241.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aba20 [0241.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac360 [0241.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c20 | out: hHeap=0x1f0000) returned 1 [0241.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2acca0 [0241.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac360 | out: hHeap=0x1f0000) returned 1 [0241.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a68 | out: hHeap=0x1f0000) returned 1 [0241.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0241.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228440 | out: hHeap=0x1f0000) returned 1 [0241.374] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aba20 | out: hHeap=0x1f0000) returned 1 [0241.374] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f10 | out: hHeap=0x1f0000) returned 1 [0241.374] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f818 | out: hHeap=0x1f0000) returned 1 [0241.374] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab8f8 | out: hHeap=0x1f0000) returned 1 [0241.374] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac5b0 [0241.374] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac5b0 | out: hHeap=0x1f0000) returned 1 [0241.374] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ee8 | out: hHeap=0x1f0000) returned 1 [0241.722] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0241.723] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2acdc8 | out: hHeap=0x1f0000) returned 1 [0241.723] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0241.723] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0241.723] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a18 | out: hHeap=0x1f0000) returned 1 [0241.723] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0241.723] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0241.723] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab458 [0241.724] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab330 [0241.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab458 | out: hHeap=0x1f0000) returned 1 [0241.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab330 | out: hHeap=0x1f0000) returned 1 [0241.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2acca0 | out: hHeap=0x1f0000) returned 1 [0241.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0241.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285bf0 | out: hHeap=0x1f0000) returned 1 [0241.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24ec00 | out: hHeap=0x1f0000) returned 1 [0241.724] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x2afa08 [0241.725] GetLastError () returned 0x0 [0241.725] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238960 [0241.725] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238af0 [0241.726] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2294190, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0241.727] GetFileType (hFile=0x1e8) returned 0x1 [0241.728] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x287fa0 [0241.728] SetFilePointerEx (in: hFile=0x1e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2294118 | out: lpNewFilePointer=0x0) returned 1 [0241.729] GetLastError () returned 0xb7 [0241.761] CloseHandle (hObject=0x1e8) returned 1 [0241.792] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x21ba30 [0241.792] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x166) returned 0x22d368 [0241.792] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ba30 | out: hHeap=0x1f0000) returned 1 [0241.792] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0000-1000-0000000ff1ce.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwFlags=0x2) returned 1 [0241.794] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d368 | out: hHeap=0x1f0000) returned 1 [0241.794] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238af0 | out: hHeap=0x1f0000) returned 1 [0241.794] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238960 | out: hHeap=0x1f0000) returned 1 [0241.794] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285ae8 | out: hHeap=0x1f0000) returned 1 [0241.794] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2858d8 | out: hHeap=0x1f0000) returned 1 [0241.794] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0241.794] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d30 | out: hHeap=0x1f0000) returned 1 [0241.794] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0658 | out: hHeap=0x1f0000) returned 1 [0241.794] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f788 | out: hHeap=0x1f0000) returned 1 [0241.794] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8dc8 | out: hHeap=0x1f0000) returned 1 [0241.794] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2afa08 | out: hHeap=0x1f0000) returned 1 [0241.794] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b30 | out: hHeap=0x1f0000) returned 1 [0241.794] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0241.794] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2746f0 | out: hHeap=0x1f0000) returned 1 [0241.794] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2af490 | out: hHeap=0x1f0000) returned 1 [0241.795] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c20 | out: hHeap=0x1f0000) returned 1 [0241.795] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a30 | out: hHeap=0x1f0000) returned 1 [0241.795] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f6c8 | out: hHeap=0x1f0000) returned 1 [0241.795] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bd0 | out: hHeap=0x1f0000) returned 1 [0241.795] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b60 | out: hHeap=0x1f0000) returned 1 [0241.795] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f800 | out: hHeap=0x1f0000) returned 1 [0241.795] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b58 | out: hHeap=0x1f0000) returned 1 [0241.795] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ab0 | out: hHeap=0x1f0000) returned 1 [0241.795] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2859e0 | out: hHeap=0x1f0000) returned 1 [0241.795] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ba8 | out: hHeap=0x1f0000) returned 1 [0241.795] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b05f0 | out: hHeap=0x1f0000) returned 1 [0241.795] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2284d0 | out: hHeap=0x1f0000) returned 1 [0241.795] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0241.795] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0241.795] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228cb0 | out: hHeap=0x1f0000) returned 1 [0241.796] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x266290 | out: hHeap=0x1f0000) returned 1 [0241.796] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae310 | out: hHeap=0x1f0000) returned 1 [0241.796] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2066b8 | out: hHeap=0x1f0000) returned 1 [0241.796] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f980 | out: hHeap=0x1f0000) returned 1 [0241.796] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f950 | out: hHeap=0x1f0000) returned 1 [0241.796] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2338a8 | out: hHeap=0x1f0000) returned 1 [0241.796] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x26aeb0 | out: hHeap=0x1f0000) returned 1 [0241.796] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae888 | out: hHeap=0x1f0000) returned 1 [0241.796] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2392b0 | out: hHeap=0x1f0000) returned 1 [0241.796] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0241.797] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2624b8 | out: hHeap=0x1f0000) returned 1 [0241.797] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228680 | out: hHeap=0x1f0000) returned 1 [0241.797] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0241.797] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4bfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml", cAlternateFileName="APC422~1.XML")) returned 1 [0241.797] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0241.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220490 [0241.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x229418 [0241.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220490 | out: hHeap=0x1f0000) returned 1 [0241.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0241.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0241.798] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be73c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0241.798] GetFileType (hFile=0x1e8) returned 0x1 [0241.799] CloseHandle (hObject=0x1e8) returned 1 [0241.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0241.799] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x22be7dc | out: lpFileInformation=0x22be7dc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4bfb)) returned 1 [0241.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0241.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0241.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0241.799] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84391d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xba5e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP2169~1.XML")) returned 1 [0241.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0241.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0241.800] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0241.800] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0241.800] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0241.800] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0241.800] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be73c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0241.800] GetFileType (hFile=0x1e8) returned 0x1 [0241.801] CloseHandle (hObject=0x1e8) returned 1 [0241.801] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x229418 [0241.801] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x22be7dc | out: lpFileInformation=0x22be7dc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84391d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xba5e3)) returned 1 [0241.801] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0241.801] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x229418 [0241.801] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0241.801] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP7BBA~1.XML")) returned 1 [0241.801] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0241.801] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0241.801] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x229418 [0241.802] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0241.802] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0241.802] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0241.802] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be73c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0241.802] GetFileType (hFile=0x1e8) returned 0x1 [0241.803] CloseHandle (hObject=0x1e8) returned 1 [0241.803] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0241.803] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x22be7dc | out: lpFileInformation=0x22be7dc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0241.803] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0241.803] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0241.803] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0241.803] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e0e651, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e0e651, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml", cAlternateFileName="APEF10~1.XML")) returned 1 [0241.803] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0241.803] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0241.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0241.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0241.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0241.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0241.804] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be73c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0241.804] GetFileType (hFile=0x1e8) returned 0x1 [0241.805] CloseHandle (hObject=0x1e8) returned 1 [0241.805] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x229418 [0241.805] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x22be7dc | out: lpFileInformation=0x22be7dc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e0e651, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e0e651, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0241.805] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0241.805] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x229418 [0241.805] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0241.805] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x838fd5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x838fd5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x863, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml", cAlternateFileName="AP5F49~1.XML")) returned 1 [0241.805] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0241.805] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0241.806] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x229418 [0241.806] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0241.806] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0241.806] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0241.806] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-040c-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be73c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0241.806] GetFileType (hFile=0x1e8) returned 0x1 [0241.807] CloseHandle (hObject=0x1e8) returned 1 [0241.807] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0241.807] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-040c-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x22be7dc | out: lpFileInformation=0x22be7dc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x838fd5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x838fd5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x863)) returned 1 [0241.807] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0241.807] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0241.807] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0241.807] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83ea71ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83ea71ba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x863, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml", cAlternateFileName="APB0FE~1.XML")) returned 1 [0241.807] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fc98 [0241.807] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd88 [0241.808] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0241.808] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd88 | out: hHeap=0x1f0000) returned 1 [0241.808] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0241.808] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fc98 | out: hHeap=0x1f0000) returned 1 [0241.808] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0c0a-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be73c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0241.808] GetFileType (hFile=0x1e8) returned 0x1 [0241.809] CloseHandle (hObject=0x1e8) returned 1 [0241.809] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x229418 [0241.809] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0c0a-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x22be7dc | out: lpFileInformation=0x22be7dc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83ea71ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83ea71ba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x863)) returned 1 [0241.809] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0241.809] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x229418 [0241.809] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0241.809] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf982bd9c, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf982bd9c, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x34b4b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP8AF5~1.XML")) returned 1 [0241.809] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0241.809] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220490 [0241.810] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x229418 [0241.810] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220490 | out: hHeap=0x1f0000) returned 1 [0241.810] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0241.810] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0241.810] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0027-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be73c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0241.810] GetFileType (hFile=0x1e8) returned 0x1 [0241.811] CloseHandle (hObject=0x1e8) returned 1 [0241.811] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0241.811] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0027-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x22be7dc | out: lpFileInformation=0x22be7dc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf982bd9c, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf982bd9c, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x34b4b)) returned 1 [0241.811] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0241.811] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0241.811] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0241.811] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e3474a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml", cAlternateFileName="APF26A~1.XML")) returned 1 [0241.811] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0241.811] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0241.812] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0241.812] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0241.812] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0241.812] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0242.127] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-002c-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be73c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0242.128] GetFileType (hFile=0x230) returned 0x1 [0242.128] CloseHandle (hObject=0x230) returned 1 [0242.128] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x229418 [0242.129] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-002c-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x22be7dc | out: lpFileInformation=0x22be7dc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e3474a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0242.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0242.129] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x229418 [0242.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0242.129] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xbf2f172d, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0xbf2f172d, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xbf33deae, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml", cAlternateFileName="APC553~1.XML")) returned 1 [0242.129] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0242.129] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2203a0 [0242.129] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x229418 [0242.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2203a0 | out: hHeap=0x1f0000) returned 1 [0242.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0242.130] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0242.130] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0054-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be73c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0242.130] GetFileType (hFile=0x230) returned 0x1 [0242.130] CloseHandle (hObject=0x230) returned 1 [0242.131] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0242.131] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0054-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x22be7dc | out: lpFileInformation=0x22be7dc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xbf2f172d, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0xbf2f172d, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xbf33deae, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0242.131] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0242.131] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0242.131] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0242.131] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xbf2f172d, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0xbf2f172d, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xbf2f172d, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x53d21, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP9FA1~1.XML")) returned 1 [0242.131] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2201c0 [0242.131] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0242.131] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0242.131] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0242.131] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0242.132] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2201c0 | out: hHeap=0x1f0000) returned 1 [0242.132] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0057-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be73c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0242.132] GetFileType (hFile=0x230) returned 0x1 [0242.132] CloseHandle (hObject=0x230) returned 1 [0242.133] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x229418 [0242.133] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0057-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x22be7dc | out: lpFileInformation=0x22be7dc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xbf2f172d, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0xbf2f172d, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xbf2f172d, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x53d21)) returned 1 [0242.133] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0242.133] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x229418 [0242.133] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0242.133] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3a41, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP330B~1.XML")) returned 1 [0242.133] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0242.134] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220490 [0242.134] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x229418 [0242.134] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220490 | out: hHeap=0x1f0000) returned 1 [0242.134] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0242.134] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0242.134] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-006e-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be73c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0242.134] GetFileType (hFile=0x230) returned 0x1 [0242.135] CloseHandle (hObject=0x230) returned 1 [0242.135] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0242.135] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-006e-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x22be7dc | out: lpFileInformation=0x22be7dc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3a41)) returned 1 [0242.135] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0242.135] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0242.135] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0242.136] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83543a09, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x573e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml", cAlternateFileName="APPXMA~1.XML")) returned 1 [0242.136] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fa40 [0242.136] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd88 [0242.136] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0242.136] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd88 | out: hHeap=0x1f0000) returned 1 [0242.136] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0242.136] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fa40 | out: hHeap=0x1f0000) returned 1 [0242.136] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be73c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0242.137] GetFileType (hFile=0x230) returned 0x1 [0242.137] CloseHandle (hObject=0x230) returned 1 [0242.137] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x229418 [0242.137] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x22be7dc | out: lpFileInformation=0x22be7dc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83543a09, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x573e5)) returned 1 [0242.137] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0242.138] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x229418 [0242.138] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0242.138] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e3474a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e3474a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP6206~1.XML")) returned 1 [0242.138] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0242.138] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0242.138] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x229418 [0242.138] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0242.138] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0242.138] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0242.138] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be73c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0242.139] GetFileType (hFile=0x230) returned 0x1 [0242.139] CloseHandle (hObject=0x230) returned 1 [0242.139] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0242.139] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x22be7dc | out: lpFileInformation=0x22be7dc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e3474a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e3474a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0242.139] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0242.140] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0242.140] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0242.140] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8351d7a8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xfdea, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml", cAlternateFileName="APD1EA~1.XML")) returned 1 [0242.140] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0242.140] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0242.140] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0242.141] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0242.141] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0242.141] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0242.142] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be73c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0242.142] GetFileType (hFile=0x230) returned 0x1 [0242.142] CloseHandle (hObject=0x230) returned 1 [0242.143] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x229418 [0242.143] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x22be7dc | out: lpFileInformation=0x22be7dc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8351d7a8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xfdea)) returned 1 [0242.143] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0242.143] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x229418 [0242.143] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0242.143] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83ea71ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83ea71ba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP6EFE~1.XML")) returned 1 [0242.143] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0242.143] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0242.143] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x229418 [0242.143] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0242.143] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0242.144] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0242.144] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be73c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0242.144] GetFileType (hFile=0x230) returned 0x1 [0242.145] CloseHandle (hObject=0x230) returned 1 [0242.145] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0242.145] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x22be7dc | out: lpFileInformation=0x22be7dc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83ea71ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83ea71ba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0242.145] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0242.146] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0242.146] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0242.146] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf982bd9c, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf98c485a, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml", cAlternateFileName="APB63F~1.XML")) returned 1 [0242.146] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0242.146] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fc98 [0242.146] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0242.146] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fc98 | out: hHeap=0x1f0000) returned 1 [0242.146] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0242.146] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0242.147] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00b4-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be73c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0242.147] GetFileType (hFile=0x230) returned 0x1 [0242.148] CloseHandle (hObject=0x230) returned 1 [0242.148] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x229418 [0242.148] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00b4-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x22be7dc | out: lpFileInformation=0x22be7dc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf982bd9c, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf98c485a, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0242.148] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0242.149] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x229418 [0242.149] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0242.149] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml", cAlternateFileName="APB913~1.XML")) returned 1 [0242.149] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0242.149] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0242.149] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x229418 [0242.149] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0242.149] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0242.149] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0242.150] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be73c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0242.150] GetFileType (hFile=0x230) returned 0x1 [0242.151] CloseHandle (hObject=0x230) returned 1 [0242.151] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0242.151] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x22be7dc | out: lpFileInformation=0x22be7dc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2400)) returned 1 [0242.152] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0242.152] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0242.152] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0242.152] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x838fd5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x838fd5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP4637~1.XML")) returned 1 [0242.152] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0242.152] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0242.152] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0242.152] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0242.152] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0242.153] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0242.153] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be73c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0242.154] GetFileType (hFile=0x230) returned 0x1 [0242.154] CloseHandle (hObject=0x230) returned 1 [0242.154] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x229418 [0242.154] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x22be7dc | out: lpFileInformation=0x22be7dc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x838fd5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x838fd5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0242.155] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0242.155] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x229418 [0242.155] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0242.155] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x618a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP2FE2~1.XML")) returned 1 [0242.155] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0242.155] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0242.155] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x229418 [0242.155] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0242.155] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0242.155] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0242.157] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be73c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0242.157] GetFileType (hFile=0x230) returned 0x1 [0242.158] CloseHandle (hObject=0x230) returned 1 [0242.158] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0242.158] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x22be7dc | out: lpFileInformation=0x22be7dc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x618a8)) returned 1 [0242.159] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0242.159] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0242.159] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0242.159] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP2C4B~1.XML")) returned 1 [0242.159] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0242.159] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0242.159] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0242.159] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0242.159] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0242.159] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0242.160] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be73c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0242.160] GetFileType (hFile=0x230) returned 0x1 [0242.161] CloseHandle (hObject=0x230) returned 1 [0242.161] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x229418 [0242.161] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x22be7dc | out: lpFileInformation=0x22be7dc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0242.162] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0242.162] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x229418 [0242.162] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0242.162] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml", cAlternateFileName="APF00A~1.XML")) returned 1 [0242.162] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0242.162] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fc98 [0242.162] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x229418 [0242.162] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fc98 | out: hHeap=0x1f0000) returned 1 [0242.162] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0242.163] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0242.163] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be73c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0242.164] GetFileType (hFile=0x230) returned 0x1 [0242.164] CloseHandle (hObject=0x230) returned 1 [0242.164] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0242.164] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x22be7dc | out: lpFileInformation=0x22be7dc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5aa)) returned 1 [0242.165] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0242.165] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0242.165] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0242.165] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x834ab261, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml", cAlternateFileName="APPXMA~2.XML")) returned 1 [0242.165] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0242.165] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0242.165] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0242.166] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0242.166] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0242.166] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0242.166] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be73c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0242.167] GetFileType (hFile=0x230) returned 0x1 [0242.167] CloseHandle (hObject=0x230) returned 1 [0242.167] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x229418 [0242.167] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x22be7dc | out: lpFileInformation=0x22be7dc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x834ab261, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0242.168] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0242.168] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x229418 [0242.168] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0242.168] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xeaa, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP202C~1.XML")) returned 1 [0242.168] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2203a0 [0242.168] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0242.168] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x229418 [0242.168] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0242.168] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0242.169] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2203a0 | out: hHeap=0x1f0000) returned 1 [0242.169] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be73c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0242.169] GetFileType (hFile=0x230) returned 0x1 [0242.170] CloseHandle (hObject=0x230) returned 1 [0242.170] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0242.170] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x22be7dc | out: lpFileInformation=0x22be7dc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xeaa)) returned 1 [0242.170] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0242.170] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0242.170] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0242.171] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84391d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml", cAlternateFileName="APBC30~1.XML")) returned 1 [0242.171] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0242.171] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0242.171] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0242.171] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0242.171] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0242.171] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0242.734] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be73c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0242.734] GetFileType (hFile=0x1e0) returned 0x1 [0242.735] CloseHandle (hObject=0x1e0) returned 1 [0242.735] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224150 [0242.735] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x22be7dc | out: lpFileInformation=0x22be7dc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84391d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0242.736] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224150 | out: hHeap=0x1f0000) returned 1 [0242.736] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224320 [0242.736] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224320 | out: hHeap=0x1f0000) returned 1 [0242.736] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml", cAlternateFileName="APCB35~1.XML")) returned 1 [0242.736] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0242.736] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2203a0 [0242.736] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224408 [0242.737] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2203a0 | out: hHeap=0x1f0000) returned 1 [0242.737] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0242.737] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0242.738] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0115-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be73c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0242.738] GetFileType (hFile=0x1e0) returned 0x1 [0242.738] CloseHandle (hObject=0x1e0) returned 1 [0242.739] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x223cc8 [0242.739] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0115-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x22be7dc | out: lpFileInformation=0x22be7dc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0242.739] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223cc8 | out: hHeap=0x1f0000) returned 1 [0242.739] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x223cc8 [0242.740] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223cc8 | out: hHeap=0x1f0000) returned 1 [0242.740] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP5E1E~1.XML")) returned 1 [0242.740] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2201c0 [0242.740] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0242.740] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x223cc8 [0242.740] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0242.740] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224408 | out: hHeap=0x1f0000) returned 1 [0242.741] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2201c0 | out: hHeap=0x1f0000) returned 1 [0242.741] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0117-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be73c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0242.742] GetFileType (hFile=0x1e0) returned 0x1 [0242.742] CloseHandle (hObject=0x1e0) returned 1 [0242.743] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2245d8 [0242.743] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0117-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x22be7dc | out: lpFileInformation=0x22be7dc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0242.743] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2245d8 | out: hHeap=0x1f0000) returned 1 [0242.743] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224068 [0242.743] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224068 | out: hHeap=0x1f0000) returned 1 [0242.744] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83485006, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83485006, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x834ab261, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x80e56, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml", cAlternateFileName="APPXMA~3.XML")) returned 1 [0242.744] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0242.744] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fc98 [0242.744] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224068 [0242.744] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fc98 | out: hHeap=0x1f0000) returned 1 [0242.744] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223cc8 | out: hHeap=0x1f0000) returned 1 [0242.745] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0242.745] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012a-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be73c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0242.746] GetFileType (hFile=0x1e0) returned 0x1 [0242.746] CloseHandle (hObject=0x1e0) returned 1 [0242.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2245d8 [0242.747] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012a-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x22be7dc | out: lpFileInformation=0x22be7dc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83485006, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83485006, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x834ab261, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x80e56)) returned 1 [0242.747] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2245d8 | out: hHeap=0x1f0000) returned 1 [0242.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224320 [0242.747] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224320 | out: hHeap=0x1f0000) returned 1 [0242.748] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml", cAlternateFileName="APE0B7~1.XML")) returned 1 [0242.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0242.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2203a0 [0242.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224a60 [0242.748] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2203a0 | out: hHeap=0x1f0000) returned 1 [0242.748] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224068 | out: hHeap=0x1f0000) returned 1 [0242.748] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0242.750] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012b-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be73c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0242.751] GetFileType (hFile=0x1e0) returned 0x1 [0242.751] CloseHandle (hObject=0x1e0) returned 1 [0242.752] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224068 [0242.752] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012b-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x22be7dc | out: lpFileInformation=0x22be7dc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0242.752] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224068 | out: hHeap=0x1f0000) returned 1 [0242.752] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x223cc8 [0242.752] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223cc8 | out: hHeap=0x1f0000) returned 1 [0242.753] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83ea71ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83ea71ba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd2f, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP8BF9~1.XML")) returned 1 [0242.753] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0242.753] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0242.753] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x223cc8 [0242.753] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0242.753] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224a60 | out: hHeap=0x1f0000) returned 1 [0242.753] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0242.754] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-3101-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be73c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0242.754] GetFileType (hFile=0x1e0) returned 0x1 [0242.755] CloseHandle (hObject=0x1e0) returned 1 [0242.755] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224150 [0242.755] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-3101-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x22be7dc | out: lpFileInformation=0x22be7dc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83ea71ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83ea71ba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd2f)) returned 1 [0242.756] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224150 | out: hHeap=0x1f0000) returned 1 [0242.756] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x224068 [0242.756] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x224068 | out: hHeap=0x1f0000) returned 1 [0242.756] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834f7581, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834f7581, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x212876, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.common.xml", cAlternateFileName="AP3FD6~1.XML")) returned 1 [0242.756] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238cc8 [0242.756] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0242.756] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218558 [0242.756] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0242.756] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223cc8 | out: hHeap=0x1f0000) returned 1 [0242.756] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238cc8 | out: hHeap=0x1f0000) returned 1 [0242.757] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.common.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be73c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0242.758] GetFileType (hFile=0x1e0) returned 0x1 [0242.758] CloseHandle (hObject=0x1e0) returned 1 [0242.758] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21aa10 [0242.759] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.common.xml"), fInfoLevelId=0x0, lpFileInformation=0x22be7dc | out: lpFileInformation=0x22be7dc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834f7581, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834f7581, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x212876)) returned 1 [0242.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21aa10 | out: hHeap=0x1f0000) returned 1 [0242.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a818 [0242.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a818 | out: hHeap=0x1f0000) returned 1 [0242.759] GetLastError () returned 0x0 [0242.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a18 [0242.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228440 [0242.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262cb0 [0242.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a230 [0242.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238de0 [0242.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b30 [0242.760] CryptAcquireContextA (in: phProv=0x2294290, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2294290*=0x213020) returned 1 [0242.761] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x260b30 | out: pbBuffer=0x260b30) returned 1 [0242.761] CryptReleaseContext (hProv=0x213020, dwFlags=0x0) returned 1 [0242.761] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b30 | out: hHeap=0x1f0000) returned 1 [0242.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x26e7c8 [0242.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2afc38 [0242.762] QueryPerformanceCounter (in: lpPerformanceCount=0x2294224 | out: lpPerformanceCount=0x2294224*=40013088183) returned 1 [0242.762] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x2294264 | out: lpSystemTimeAsFileTime=0x2294264) [0242.762] QueryPerformanceCounter (in: lpPerformanceCount=0x2294224 | out: lpPerformanceCount=0x2294224*=40013135792) returned 1 [0242.763] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x2294264 | out: lpSystemTimeAsFileTime=0x2294264) [0242.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238c20 [0242.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x2688a0 [0242.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2aece8 [0242.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x2338a8 [0242.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f620 [0242.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2068c8 [0242.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f638 [0242.764] GetLastError () returned 0x0 [0242.764] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.common.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22941f4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0242.765] GetFileType (hFile=0x1e0) returned 0x1 [0242.765] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2294260 | out: lpNewFilePointer=0x0) returned 1 [0242.766] ReadFile (in: hFile=0x1e0, lpBuffer=0x22a9760, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x2294238, lpOverlapped=0x0 | out: lpBuffer=0x22a9760*, lpNumberOfBytesRead=0x2294238*=0x14000, lpOverlapped=0x0) returned 1 [0243.050] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x288fa8 [0243.050] ReadFile (in: hFile=0x1e0, lpBuffer=0x288fa8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x22941dc, lpOverlapped=0x0 | out: lpBuffer=0x288fa8*, lpNumberOfBytesRead=0x22941dc*=0x1000, lpOverlapped=0x0) returned 1 [0243.328] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2294268 | out: lpNewFilePointer=0x0) returned 1 [0243.328] WriteFile (in: hFile=0x1e0, lpBuffer=0x2294770*, nNumberOfBytesToWrite=0x14000, lpNumberOfBytesWritten=0x22941d4, lpOverlapped=0x0 | out: lpBuffer=0x2294770*, lpNumberOfBytesWritten=0x22941d4*=0x14000, lpOverlapped=0x0) returned 1 [0243.329] WriteFile (in: hFile=0x1e0, lpBuffer=0x288fa8*, nNumberOfBytesToWrite=0xff0, lpNumberOfBytesWritten=0x2294200, lpOverlapped=0x0 | out: lpBuffer=0x288fa8*, lpNumberOfBytesWritten=0x2294200*=0xff0, lpOverlapped=0x0) returned 1 [0243.329] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x15f90, lpNewFilePointer=0x0, dwMoveMethod=0x2294248 | out: lpNewFilePointer=0x0) returned 1 [0243.330] ReadFile (in: hFile=0x1e0, lpBuffer=0x22a9760, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x2294220, lpOverlapped=0x0 | out: lpBuffer=0x22a9760*, lpNumberOfBytesRead=0x2294220*=0x14000, lpOverlapped=0x0) returned 1 [0243.331] ReadFile (in: hFile=0x1e0, lpBuffer=0x288fa8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x22941c4, lpOverlapped=0x0 | out: lpBuffer=0x288fa8*, lpNumberOfBytesRead=0x22941c4*=0x1000, lpOverlapped=0x0) returned 1 [0243.331] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x15f90, lpNewFilePointer=0x0, dwMoveMethod=0x2294268 | out: lpNewFilePointer=0x0) returned 1 [0243.332] WriteFile (in: hFile=0x1e0, lpBuffer=0x2294770*, nNumberOfBytesToWrite=0x14000, lpNumberOfBytesWritten=0x22941d4, lpOverlapped=0x0 | out: lpBuffer=0x2294770*, lpNumberOfBytesWritten=0x22941d4*=0x14000, lpOverlapped=0x0) returned 1 [0243.333] WriteFile (in: hFile=0x1e0, lpBuffer=0x288fa8*, nNumberOfBytesToWrite=0xff0, lpNumberOfBytesWritten=0x2294200, lpOverlapped=0x0 | out: lpBuffer=0x288fa8*, lpNumberOfBytesWritten=0x2294200*=0xff0, lpOverlapped=0x0) returned 1 [0243.334] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0xdbba0, lpNewFilePointer=0x0, dwMoveMethod=0x2294248 | out: lpNewFilePointer=0x0) returned 1 [0243.334] ReadFile (in: hFile=0x1e0, lpBuffer=0x22a9760, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x2294220, lpOverlapped=0x0 | out: lpBuffer=0x22a9760*, lpNumberOfBytesRead=0x2294220*=0x14000, lpOverlapped=0x0) returned 1 [0243.340] ReadFile (in: hFile=0x1e0, lpBuffer=0x288fa8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x22941c4, lpOverlapped=0x0 | out: lpBuffer=0x288fa8*, lpNumberOfBytesRead=0x22941c4*=0x1000, lpOverlapped=0x0) returned 1 [0243.342] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0xdbba0, lpNewFilePointer=0x0, dwMoveMethod=0x2294268 | out: lpNewFilePointer=0x0) returned 1 [0243.343] WriteFile (in: hFile=0x1e0, lpBuffer=0x2294770*, nNumberOfBytesToWrite=0x14000, lpNumberOfBytesWritten=0x22941d4, lpOverlapped=0x0 | out: lpBuffer=0x2294770*, lpNumberOfBytesWritten=0x22941d4*=0x14000, lpOverlapped=0x0) returned 1 [0243.344] WriteFile (in: hFile=0x1e0, lpBuffer=0x288fa8*, nNumberOfBytesToWrite=0xff0, lpNumberOfBytesWritten=0x2294250, lpOverlapped=0x0 | out: lpBuffer=0x288fa8*, lpNumberOfBytesWritten=0x2294250*=0xff0, lpOverlapped=0x0) returned 1 [0243.344] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x288fa8 | out: hHeap=0x1f0000) returned 1 [0243.345] CloseHandle (hObject=0x1e0) returned 1 [0243.345] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228a70 [0243.345] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260518 [0243.345] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260770 [0243.345] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x228518 [0243.345] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204db0 [0243.345] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204dd0 [0243.346] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x21c570 [0243.346] GetLastError () returned 0x0 [0243.346] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238d00 [0243.346] GetLastError () returned 0x0 [0243.346] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238c90 [0243.346] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0318 [0243.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260630 [0243.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285ae8 [0243.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c700 [0243.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260658 [0243.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f950 [0243.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c6c0 [0243.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0243.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f9b0 [0243.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260950 [0243.348] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2854b8 [0243.348] GetLastError () returned 0x0 [0243.348] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x21c5d0 [0243.348] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x21c6d0 [0243.348] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c690 [0243.348] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c6d0 | out: hHeap=0x1f0000) returned 1 [0243.348] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c6a0 [0243.349] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c690 | out: hHeap=0x1f0000) returned 1 [0243.349] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5d0 | out: hHeap=0x1f0000) returned 1 [0243.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c690 [0243.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f908 [0243.349] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c690 | out: hHeap=0x1f0000) returned 1 [0243.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f758 [0243.349] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f908 | out: hHeap=0x1f0000) returned 1 [0243.349] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c6a0 | out: hHeap=0x1f0000) returned 1 [0243.350] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f908 [0243.350] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f7b8 [0243.350] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f908 | out: hHeap=0x1f0000) returned 1 [0243.350] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f908 [0243.350] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f7b8 | out: hHeap=0x1f0000) returned 1 [0243.350] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f758 | out: hHeap=0x1f0000) returned 1 [0243.350] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f650 [0243.351] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204c10 [0243.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f650 | out: hHeap=0x1f0000) returned 1 [0243.351] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204b90 [0243.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c10 | out: hHeap=0x1f0000) returned 1 [0243.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f908 | out: hHeap=0x1f0000) returned 1 [0243.351] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d10 [0243.351] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260810 [0243.352] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d10 | out: hHeap=0x1f0000) returned 1 [0243.352] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204db0 [0243.352] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0243.352] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204b90 | out: hHeap=0x1f0000) returned 1 [0243.352] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204c90 [0243.352] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206688 [0243.352] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c90 | out: hHeap=0x1f0000) returned 1 [0243.352] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2606a8 [0243.353] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206688 | out: hHeap=0x1f0000) returned 1 [0243.353] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204db0 | out: hHeap=0x1f0000) returned 1 [0243.353] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c580 [0243.353] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f908 [0243.353] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c580 | out: hHeap=0x1f0000) returned 1 [0243.353] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f848 [0243.353] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f908 | out: hHeap=0x1f0000) returned 1 [0243.353] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204c90 [0243.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f848 | out: hHeap=0x1f0000) returned 1 [0243.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206688 [0243.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c90 | out: hHeap=0x1f0000) returned 1 [0243.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206688 | out: hHeap=0x1f0000) returned 1 [0243.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0243.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0243.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0243.355] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285ae8 | out: hHeap=0x1f0000) returned 1 [0243.355] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260630 | out: hHeap=0x1f0000) returned 1 [0243.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c90 [0243.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260518 [0243.355] CryptAcquireContextA (in: phProv=0x2294290, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2294290*=0x212d78) returned 1 [0243.356] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x260518 | out: pbBuffer=0x260518) returned 1 [0243.356] CryptReleaseContext (hProv=0x212d78, dwFlags=0x0) returned 1 [0243.356] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0243.357] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260630 [0243.357] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260810 [0243.357] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238d70 [0243.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260630 | out: hHeap=0x1f0000) returned 1 [0243.357] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0243.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238d70 | out: hHeap=0x1f0000) returned 1 [0243.357] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8dc8 [0243.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f890 [0243.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x2b0380 [0243.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260630 [0243.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285098 [0243.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204db0 [0243.359] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b03e8 [0243.359] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260590 [0243.359] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2852a8 [0243.359] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c580 [0243.359] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260518 [0243.359] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f6e0 [0243.359] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c5d0 [0243.359] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605b8 [0243.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f830 [0243.360] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f830 | out: hHeap=0x1f0000) returned 1 [0243.360] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0243.360] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5d0 | out: hHeap=0x1f0000) returned 1 [0243.360] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f6e0 | out: hHeap=0x1f0000) returned 1 [0243.360] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0243.360] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c580 | out: hHeap=0x1f0000) returned 1 [0243.360] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2852a8 | out: hHeap=0x1f0000) returned 1 [0243.360] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0243.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b03e8 | out: hHeap=0x1f0000) returned 1 [0243.361] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238cc8 [0243.361] GetLastError () returned 0x0 [0243.361] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238cc8 [0243.361] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0243.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0243.362] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0243.362] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0243.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0243.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0243.362] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x24eb80 [0243.362] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2859e0 [0243.362] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0243.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0243.362] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0243.363] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0243.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2851a0 [0243.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0243.363] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0243.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fce0 [0243.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x269ba8 [0243.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2aee00 [0243.363] QueryPerformanceCounter (in: lpPerformanceCount=0x2293de0 | out: lpPerformanceCount=0x2293de0*=40073229449) returned 1 [0243.364] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x2293e20 | out: lpSystemTimeAsFileTime=0x2293e20) [0243.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x21c690 [0243.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0243.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f30 [0243.364] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f30 | out: hHeap=0x1f0000) returned 1 [0243.364] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0243.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0243.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d30 [0243.365] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d30 | out: hHeap=0x1f0000) returned 1 [0243.365] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0243.365] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c690 | out: hHeap=0x1f0000) returned 1 [0243.365] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0243.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238d00 [0243.365] GetLastError () returned 0x0 [0243.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0243.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0243.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0243.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260518 [0243.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2608d8 [0243.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0243.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0243.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260860 [0243.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0243.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x222ee8 [0243.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0243.367] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0243.367] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0243.367] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x20c2c0 [0243.367] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0243.367] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260888 [0243.367] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260590 [0243.367] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0243.367] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0243.367] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0243.368] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0243.368] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x234b90 [0243.368] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b90 | out: hHeap=0x1f0000) returned 1 [0243.368] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0243.368] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20c2c0 | out: hHeap=0x1f0000) returned 1 [0243.368] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f710 [0243.368] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2287a0 [0243.368] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260888 [0243.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260590 [0243.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2606a8 [0243.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2605b8 [0243.369] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0243.369] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0243.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0243.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260590 [0243.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260888 [0243.369] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0243.370] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0243.370] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0243.370] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206688 [0243.370] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x2a9840 [0243.370] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a9840 | out: hHeap=0x1f0000) returned 1 [0243.370] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206688 | out: hHeap=0x1f0000) returned 1 [0243.370] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0243.370] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0243.371] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0243.371] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0243.371] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204f10 [0243.371] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0243.371] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0243.371] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0243.371] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abfe8 [0243.371] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0243.371] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0243.372] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0243.372] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2287a0 | out: hHeap=0x1f0000) returned 1 [0243.372] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0243.372] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f10 | out: hHeap=0x1f0000) returned 1 [0243.372] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f710 | out: hHeap=0x1f0000) returned 1 [0243.372] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0243.372] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac800 [0243.372] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac800 | out: hHeap=0x1f0000) returned 1 [0243.372] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ee8 | out: hHeap=0x1f0000) returned 1 [0243.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0243.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0243.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0243.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0243.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0243.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0243.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0243.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2acca0 [0243.374] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab458 [0243.590] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2acca0 | out: hHeap=0x1f0000) returned 1 [0243.590] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab458 | out: hHeap=0x1f0000) returned 1 [0243.590] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abfe8 | out: hHeap=0x1f0000) returned 1 [0243.590] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0243.591] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2851a0 | out: hHeap=0x1f0000) returned 1 [0243.591] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24eb80 | out: hHeap=0x1f0000) returned 1 [0243.591] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x2ae310 [0243.591] GetLastError () returned 0x0 [0243.591] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c620 [0243.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c6d0 [0243.766] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.common.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2294190, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0243.766] GetFileType (hFile=0x230) returned 0x1 [0243.767] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28bfc0 [0243.767] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2294118 | out: lpNewFilePointer=0x0) returned 1 [0243.767] GetLastError () returned 0xb7 [0243.787] CloseHandle (hObject=0x230) returned 1 [0243.787] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad580 [0243.788] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x106) returned 0x2ae658 [0243.788] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad580 | out: hHeap=0x1f0000) returned 1 [0243.788] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x188) returned 0x239be0 [0243.788] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae658 | out: hHeap=0x1f0000) returned 1 [0243.788] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.common.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.common.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwFlags=0x2) returned 1 [0243.789] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239be0 | out: hHeap=0x1f0000) returned 1 [0243.789] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c6d0 | out: hHeap=0x1f0000) returned 1 [0243.789] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c620 | out: hHeap=0x1f0000) returned 1 [0243.789] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2859e0 | out: hHeap=0x1f0000) returned 1 [0243.789] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285098 | out: hHeap=0x1f0000) returned 1 [0243.790] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260630 | out: hHeap=0x1f0000) returned 1 [0243.790] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204db0 | out: hHeap=0x1f0000) returned 1 [0243.790] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0380 | out: hHeap=0x1f0000) returned 1 [0243.790] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f890 | out: hHeap=0x1f0000) returned 1 [0243.790] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8dc8 | out: hHeap=0x1f0000) returned 1 [0243.790] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae310 | out: hHeap=0x1f0000) returned 1 [0243.790] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0243.790] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0243.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x269ba8 | out: hHeap=0x1f0000) returned 1 [0243.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aee00 | out: hHeap=0x1f0000) returned 1 [0243.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c90 | out: hHeap=0x1f0000) returned 1 [0243.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c570 | out: hHeap=0x1f0000) returned 1 [0243.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f9b0 | out: hHeap=0x1f0000) returned 1 [0243.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0243.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c6c0 | out: hHeap=0x1f0000) returned 1 [0243.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f950 | out: hHeap=0x1f0000) returned 1 [0243.792] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260658 | out: hHeap=0x1f0000) returned 1 [0243.792] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c700 | out: hHeap=0x1f0000) returned 1 [0243.792] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2854b8 | out: hHeap=0x1f0000) returned 1 [0243.792] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0243.792] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0318 | out: hHeap=0x1f0000) returned 1 [0243.792] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228518 | out: hHeap=0x1f0000) returned 1 [0243.792] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0243.792] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0243.792] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228a70 | out: hHeap=0x1f0000) returned 1 [0243.792] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2688a0 | out: hHeap=0x1f0000) returned 1 [0243.792] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aece8 | out: hHeap=0x1f0000) returned 1 [0243.792] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2068c8 | out: hHeap=0x1f0000) returned 1 [0243.793] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f638 | out: hHeap=0x1f0000) returned 1 [0243.793] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f620 | out: hHeap=0x1f0000) returned 1 [0243.793] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2338a8 | out: hHeap=0x1f0000) returned 1 [0243.793] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x26e7c8 | out: hHeap=0x1f0000) returned 1 [0243.793] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2afc38 | out: hHeap=0x1f0000) returned 1 [0243.793] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238de0 | out: hHeap=0x1f0000) returned 1 [0243.793] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a230 | out: hHeap=0x1f0000) returned 1 [0243.793] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262cb0 | out: hHeap=0x1f0000) returned 1 [0243.793] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228440 | out: hHeap=0x1f0000) returned 1 [0243.793] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a18 | out: hHeap=0x1f0000) returned 1 [0243.793] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84391d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2667, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifestLoc.en-us.xml", cAlternateFileName="AP942B~1.XML")) returned 1 [0243.793] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228710 [0243.793] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0243.794] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218fa8 [0243.794] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0243.794] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218558 | out: hHeap=0x1f0000) returned 1 [0243.794] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228710 | out: hHeap=0x1f0000) returned 1 [0243.794] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifestloc.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be73c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0243.794] GetFileType (hFile=0x230) returned 0x1 [0243.795] CloseHandle (hObject=0x230) returned 1 [0243.795] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a4d0 [0243.795] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifestloc.en-us.xml"), fInfoLevelId=0x0, lpFileInformation=0x22be7dc | out: lpFileInformation=0x22be7dc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84391d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2667)) returned 1 [0243.795] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a4d0 | out: hHeap=0x1f0000) returned 1 [0243.797] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219d98 [0243.797] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219d98 | out: hHeap=0x1f0000) returned 1 [0243.797] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x175, dwReserved0=0x0, dwReserved1=0x0, cFileName="AuthoredExtensions.xml", cAlternateFileName="AUTHOR~1.XML")) returned 1 [0243.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238fd8 [0243.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0243.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218768 [0243.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0243.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218fa8 | out: hHeap=0x1f0000) returned 1 [0243.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238fd8 | out: hHeap=0x1f0000) returned 1 [0243.798] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\authoredextensions.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be73c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0243.799] GetFileType (hFile=0x230) returned 0x1 [0243.799] CloseHandle (hObject=0x230) returned 1 [0243.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a0e0 [0243.799] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\authoredextensions.xml"), fInfoLevelId=0x0, lpFileInformation=0x22be7dc | out: lpFileInformation=0x22be7dc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x175)) returned 1 [0243.800] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a0e0 | out: hHeap=0x1f0000) returned 1 [0243.800] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a380 [0243.800] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a380 | out: hHeap=0x1f0000) returned 1 [0243.800] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x175, dwReserved0=0x0, dwReserved1=0x0, cFileName="AuthoredExtensions.xml", cAlternateFileName="AUTHOR~1.XML")) returned 0 [0243.800] FindClose (in: hFindFile=0x24eb00 | out: hFindFile=0x24eb00) returned 1 [0243.800] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218768 | out: hHeap=0x1f0000) returned 1 [0243.800] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263310 | out: hHeap=0x1f0000) returned 1 [0243.801] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0243.801] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228bd8 | out: hHeap=0x1f0000) returned 1 [0243.801] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228a70 [0243.801] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260658 [0243.801] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262980 [0243.801] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0658 [0243.801] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\*", lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ecc0 [0243.801] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0ad0 [0243.801] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0658 | out: hHeap=0x1f0000) returned 1 [0243.801] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0243.802] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0588 [0243.802] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0ad0 | out: hHeap=0x1f0000) returned 1 [0243.802] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0243.802] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0243.802] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86813dc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xda49deba, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xda49deba, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="client", cAlternateFileName="")) returned 1 [0243.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0318 [0243.802] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0588 | out: hHeap=0x1f0000) returned 1 [0243.802] lstrcmpW (lpString1="client", lpString2=".") returned 1 [0243.802] lstrcmpW (lpString1="client", lpString2="..") returned 1 [0243.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204bb0 [0243.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0380 [0243.803] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLIPART", cAlternateFileName="")) returned 1 [0243.803] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b03e8 [0243.803] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0318 | out: hHeap=0x1f0000) returned 1 [0243.803] lstrcmpW (lpString1="CLIPART", lpString2=".") returned 1 [0243.803] lstrcmpW (lpString1="CLIPART", lpString2="..") returned 1 [0243.803] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c90 [0243.803] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0588 [0243.803] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bb0 | out: hHeap=0x1f0000) returned 1 [0243.803] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x114a91d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114a91d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Document Themes 16", cAlternateFileName="DOCUME~1")) returned 1 [0243.803] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239160 [0243.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0318 [0243.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220e20 [0243.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0318 | out: hHeap=0x1f0000) returned 1 [0243.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b03e8 | out: hHeap=0x1f0000) returned 1 [0243.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239160 | out: hHeap=0x1f0000) returned 1 [0243.804] lstrcmpW (lpString1="Document Themes 16", lpString2=".") returned 1 [0243.804] lstrcmpW (lpString1="Document Themes 16", lpString2="..") returned 1 [0243.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x48) returned 0x226288 [0243.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212a48 [0243.805] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c90 | out: hHeap=0x1f0000) returned 1 [0243.805] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x114f5747, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114f5747, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flattener", cAlternateFileName="FLATTE~1")) returned 1 [0243.805] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0243.805] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0318 [0243.805] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221080 [0243.805] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0318 | out: hHeap=0x1f0000) returned 1 [0243.805] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0243.805] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0243.805] lstrcmpW (lpString1="Flattener", lpString2=".") returned 1 [0243.805] lstrcmpW (lpString1="Flattener", lpString2="..") returned 1 [0243.806] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0998 [0243.806] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0243.806] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226288 | out: hHeap=0x1f0000) returned 1 [0243.806] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x115da4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115da4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fre", cAlternateFileName="")) returned 1 [0243.806] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0ad0 [0243.806] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0243.806] lstrcmpW (lpString1="fre", lpString2=".") returned 1 [0243.806] lstrcmpW (lpString1="fre", lpString2="..") returned 1 [0243.807] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0243.807] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0318 [0243.807] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0998 | out: hHeap=0x1f0000) returned 1 [0243.807] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1f5fb21, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b2abe77, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b2abe77, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Integration", cAlternateFileName="INTEGR~1")) returned 1 [0243.807] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260630 [0243.807] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b03e8 [0243.807] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221080 [0243.808] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b03e8 | out: hHeap=0x1f0000) returned 1 [0243.808] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0ad0 | out: hHeap=0x1f0000) returned 1 [0243.808] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260630 | out: hHeap=0x1f0000) returned 1 [0243.808] lstrcmpW (lpString1="Integration", lpString2=".") returned 1 [0243.808] lstrcmpW (lpString1="Integration", lpString2="..") returned 1 [0243.808] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fa40 [0243.808] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe2687c83, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee308135, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xee308135, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Licenses16", cAlternateFileName="LICENS~1")) returned 1 [0243.808] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0243.809] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b03e8 [0243.809] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2215d8 [0243.809] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b03e8 | out: hHeap=0x1f0000) returned 1 [0243.809] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0243.809] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0243.809] lstrcmpW (lpString1="Licenses16", lpString2=".") returned 1 [0243.809] lstrcmpW (lpString1="Licenses16", lpString2="..") returned 1 [0243.809] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd8) returned 0x217038 [0243.809] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0243.810] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0243.810] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee45f66d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x983c2c8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="loc", cAlternateFileName="")) returned 1 [0243.810] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b05f0 [0243.810] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0243.810] lstrcmpW (lpString1="loc", lpString2=".") returned 1 [0243.810] lstrcmpW (lpString1="loc", lpString2="..") returned 1 [0243.810] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0998 [0243.810] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mcxml", cAlternateFileName="")) returned 1 [0243.810] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0ad0 [0243.811] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b05f0 | out: hHeap=0x1f0000) returned 1 [0243.811] lstrcmpW (lpString1="mcxml", lpString2=".") returned 1 [0243.811] lstrcmpW (lpString1="mcxml", lpString2="..") returned 1 [0243.811] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b03e8 [0243.811] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3c29db74, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c29db74, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office16", cAlternateFileName="")) returned 1 [0244.188] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260630 [0244.188] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b06c0 [0244.188] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2212e0 [0244.188] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b06c0 | out: hHeap=0x1f0000) returned 1 [0244.189] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0ad0 | out: hHeap=0x1f0000) returned 1 [0244.189] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260630 | out: hHeap=0x1f0000) returned 1 [0244.189] lstrcmpW (lpString1="Office16", lpString2=".") returned 1 [0244.189] lstrcmpW (lpString1="Office16", lpString2="..") returned 1 [0244.189] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x138) returned 0x21bf68 [0244.189] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0244.189] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0244.189] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b1a0d3d, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b1a0d3d, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rsod", cAlternateFileName="")) returned 1 [0244.189] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b06c0 [0244.189] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0244.189] lstrcmpW (lpString1="rsod", lpString2=".") returned 1 [0244.189] lstrcmpW (lpString1="rsod", lpString2="..") returned 1 [0244.189] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0ad0 [0244.189] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xb48c20e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb48c20e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stationery", cAlternateFileName="STATIO~1")) returned 1 [0244.190] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0244.190] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0d40 [0244.190] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2214a8 [0244.190] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0d40 | out: hHeap=0x1f0000) returned 1 [0244.190] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b06c0 | out: hHeap=0x1f0000) returned 1 [0244.190] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0244.190] lstrcmpW (lpString1="Stationery", lpString2=".") returned 1 [0244.190] lstrcmpW (lpString1="Stationery", lpString2="..") returned 1 [0244.190] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0244.190] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0244.190] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0244.190] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b06c0 [0244.190] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221248 [0244.191] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b06c0 | out: hHeap=0x1f0000) returned 1 [0244.191] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0244.191] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0244.191] lstrcmpW (lpString1="Templates", lpString2=".") returned 1 [0244.191] lstrcmpW (lpString1="Templates", lpString2="..") returned 1 [0244.191] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0244.191] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VFS", cAlternateFileName="")) returned 1 [0244.191] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b06c0 [0244.191] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0244.191] lstrcmpW (lpString1="VFS", lpString2=".") returned 1 [0244.191] lstrcmpW (lpString1="VFS", lpString2="..") returned 1 [0244.191] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c8) returned 0x231ba0 [0244.191] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0cd8 [0244.191] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21bf68 | out: hHeap=0x1f0000) returned 1 [0244.192] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x22be964 | out: lpFindFileData=0x22be964*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VFS", cAlternateFileName="")) returned 0 [0244.192] FindClose (in: hFindFile=0x24ecc0 | out: hFindFile=0x24ecc0) returned 1 [0244.192] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228c68 [0244.192] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260630 [0244.192] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x263310 [0244.192] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2201c0 [0244.192] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\*", lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86813dc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xda49deba, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xda49deba, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24ea80 [0244.192] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0f48 [0244.193] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221248 [0244.193] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0f48 | out: hHeap=0x1f0000) returned 1 [0244.193] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2201c0 | out: hHeap=0x1f0000) returned 1 [0244.193] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0244.193] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86813dc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xda49deba, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xda49deba, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0244.193] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0ee0 [0244.193] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221a00 [0244.193] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0ee0 | out: hHeap=0x1f0000) returned 1 [0244.193] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0244.193] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0244.194] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0244.194] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0715cb9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0715cb9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0952017, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="api-ms-win-core-file-l1-2-0.dll", cAlternateFileName="API-MS~1.DLL")) returned 1 [0244.194] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228440 [0244.194] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0f48 [0244.194] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a2d8 [0244.194] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0f48 | out: hHeap=0x1f0000) returned 1 [0244.194] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0244.194] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228440 | out: hHeap=0x1f0000) returned 1 [0244.195] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-file-l1-2-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0244.195] GetFileType (hFile=0x1b0) returned 0x1 [0244.195] CloseHandle (hObject=0x1b0) returned 1 [0244.196] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219cf0 [0244.196] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-file-l1-2-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0715cb9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0715cb9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0952017, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0)) returned 1 [0244.196] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219cf0 | out: hHeap=0x1f0000) returned 1 [0244.196] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219cf0 [0244.196] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219cf0 | out: hHeap=0x1f0000) returned 1 [0244.196] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0952017, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0952017, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0a832cb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="api-ms-win-core-file-l2-1-0.dll", cAlternateFileName="API-MS~3.DLL")) returned 1 [0244.196] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2288c0 [0244.196] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0d40 [0244.196] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a380 [0244.196] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0d40 | out: hHeap=0x1f0000) returned 1 [0244.197] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a2d8 | out: hHeap=0x1f0000) returned 1 [0244.197] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2288c0 | out: hHeap=0x1f0000) returned 1 [0244.197] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l2-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-file-l2-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0244.197] GetFileType (hFile=0x1b0) returned 0x1 [0244.198] CloseHandle (hObject=0x1b0) returned 1 [0244.198] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a4d0 [0244.198] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l2-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-file-l2-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0952017, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0952017, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0a832cb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0)) returned 1 [0244.198] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a4d0 | out: hHeap=0x1f0000) returned 1 [0244.198] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a4d0 [0244.198] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a4d0 | out: hHeap=0x1f0000) returned 1 [0244.198] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd089348e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd089348e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd09c4608, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x52c0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="api-ms-win-core-localization-l1-2-0.dll", cAlternateFileName="API-MS~2.DLL")) returned 1 [0244.198] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8d18 [0244.198] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0d40 [0244.199] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad1e8 [0244.199] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0d40 | out: hHeap=0x1f0000) returned 1 [0244.199] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a380 | out: hHeap=0x1f0000) returned 1 [0244.199] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0244.199] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-localization-l1-2-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0244.199] GetFileType (hFile=0x1b0) returned 0x1 [0244.200] CloseHandle (hObject=0x1b0) returned 1 [0244.200] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2add68 [0244.200] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-localization-l1-2-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd089348e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd089348e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd09c4608, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x52c0)) returned 1 [0244.200] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2add68 | out: hHeap=0x1f0000) returned 1 [0244.200] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2adcb0 [0244.200] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2adcb0 | out: hHeap=0x1f0000) returned 1 [0244.200] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd115de42, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd115de42, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd158a009, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="api-ms-win-core-processthreads-l1-1-1.dll", cAlternateFileName="AP750A~1.DLL")) returned 1 [0244.200] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0f48 [0244.200] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0da8 [0244.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f9c0 [0244.201] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0da8 | out: hHeap=0x1f0000) returned 1 [0244.201] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad1e8 | out: hHeap=0x1f0000) returned 1 [0244.201] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0f48 | out: hHeap=0x1f0000) returned 1 [0244.201] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-processthreads-l1-1-1.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0244.201] GetFileType (hFile=0x1b0) returned 0x1 [0244.202] CloseHandle (hObject=0x1b0) returned 1 [0244.202] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f510 [0244.202] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-processthreads-l1-1-1.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd115de42, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd115de42, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd158a009, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0)) returned 1 [0244.202] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0244.202] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x230258 [0244.202] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0244.202] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0d0baf0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0d0baf0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0eaf4e3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="api-ms-win-core-synch-l1-2-0.dll", cAlternateFileName="APF10C~1.DLL")) returned 1 [0244.202] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8d18 [0244.202] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0da8 [0244.202] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a770 [0244.203] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0da8 | out: hHeap=0x1f0000) returned 1 [0244.203] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0244.203] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0244.203] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-synch-l1-2-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0244.203] GetFileType (hFile=0x1b0) returned 0x1 [0244.204] CloseHandle (hObject=0x1b0) returned 1 [0244.204] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a4d0 [0244.204] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-synch-l1-2-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0d0baf0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0d0baf0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0eaf4e3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0)) returned 1 [0244.204] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a4d0 | out: hHeap=0x1f0000) returned 1 [0244.204] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a188 [0244.204] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a188 | out: hHeap=0x1f0000) returned 1 [0244.204] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0c4cdf5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0c4cdf5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0df0820, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="api-ms-win-core-timezone-l1-1-0.dll", cAlternateFileName="AP7902~1.DLL")) returned 1 [0244.204] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8d18 [0244.204] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0e10 [0244.204] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad918 [0244.204] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0e10 | out: hHeap=0x1f0000) returned 1 [0244.205] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a770 | out: hHeap=0x1f0000) returned 1 [0244.205] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0244.205] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-timezone-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-timezone-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0244.205] GetFileType (hFile=0x1b0) returned 0x1 [0244.206] CloseHandle (hObject=0x1b0) returned 1 [0244.206] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad1e8 [0244.206] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-timezone-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-timezone-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0c4cdf5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0c4cdf5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0df0820, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0)) returned 1 [0244.206] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad1e8 | out: hHeap=0x1f0000) returned 1 [0244.206] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2acfc0 [0244.206] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2acfc0 | out: hHeap=0x1f0000) returned 1 [0244.206] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0c26cd1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0c26cd1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0e62fac, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d60, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="api-ms-win-core-xstate-l2-1-0.dll", cAlternateFileName="APA632~1.DLL")) returned 1 [0244.206] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8d18 [0244.206] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0e78 [0244.206] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad7a8 [0244.207] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0e78 | out: hHeap=0x1f0000) returned 1 [0244.207] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad918 | out: hHeap=0x1f0000) returned 1 [0244.207] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0244.207] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-xstate-l2-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-xstate-l2-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0244.207] GetFileType (hFile=0x1b0) returned 0x1 [0244.208] CloseHandle (hObject=0x1b0) returned 1 [0244.208] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad918 [0244.208] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-xstate-l2-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-xstate-l2-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0c26cd1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0c26cd1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0e62fac, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d60)) returned 1 [0244.208] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad918 | out: hHeap=0x1f0000) returned 1 [0244.208] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ade20 [0244.208] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ade20 | out: hHeap=0x1f0000) returned 1 [0244.208] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd289cda7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd289cda7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2a1a592, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="api-ms-win-crt-conio-l1-1-0.dll", cAlternateFileName="AP5C76~1.DLL")) returned 1 [0244.209] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228440 [0244.209] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0f48 [0244.209] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219f90 [0244.209] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0f48 | out: hHeap=0x1f0000) returned 1 [0244.209] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad7a8 | out: hHeap=0x1f0000) returned 1 [0244.209] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228440 | out: hHeap=0x1f0000) returned 1 [0244.211] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-conio-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-conio-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0244.211] GetFileType (hFile=0x1b0) returned 0x1 [0244.212] CloseHandle (hObject=0x1b0) returned 1 [0244.212] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a4d0 [0244.212] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-conio-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-conio-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd289cda7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd289cda7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2a1a592, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0)) returned 1 [0244.212] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a4d0 | out: hHeap=0x1f0000) returned 1 [0244.212] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21ab60 [0244.212] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ab60 | out: hHeap=0x1f0000) returned 1 [0244.212] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0b8e391, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0b8e391, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0d7e20c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x58c0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="api-ms-win-crt-convert-l1-1-0.dll", cAlternateFileName="APFD9C~1.DLL")) returned 1 [0244.212] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8e78 [0244.212] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0d40 [0244.213] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad7a8 [0244.213] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0d40 | out: hHeap=0x1f0000) returned 1 [0244.213] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219f90 | out: hHeap=0x1f0000) returned 1 [0244.213] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8e78 | out: hHeap=0x1f0000) returned 1 [0244.213] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-convert-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0244.213] GetFileType (hFile=0x1b0) returned 0x1 [0244.214] CloseHandle (hObject=0x1b0) returned 1 [0244.214] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad638 [0244.214] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-convert-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0b8e391, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0b8e391, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0d7e20c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x58c0)) returned 1 [0244.214] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad638 | out: hHeap=0x1f0000) returned 1 [0244.214] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2adcb0 [0244.214] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2adcb0 | out: hHeap=0x1f0000) returned 1 [0244.214] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0aa952a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0aa952a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0bda864, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="api-ms-win-crt-environment-l1-1-0.dll", cAlternateFileName="APC00F~1.DLL")) returned 1 [0244.215] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8d18 [0244.215] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0f48 [0244.215] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2add68 [0244.215] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0f48 | out: hHeap=0x1f0000) returned 1 [0244.215] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad7a8 | out: hHeap=0x1f0000) returned 1 [0244.215] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0244.215] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-environment-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0244.216] GetFileType (hFile=0x1b0) returned 0x1 [0244.216] CloseHandle (hObject=0x1b0) returned 1 [0244.216] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ade20 [0244.216] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-environment-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0aa952a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0aa952a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0bda864, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0)) returned 1 [0244.216] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ade20 | out: hHeap=0x1f0000) returned 1 [0244.216] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad638 [0244.217] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad638 | out: hHeap=0x1f0000) returned 1 [0244.217] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0aa952a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0aa952a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0c99389, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x50c0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="api-ms-win-crt-filesystem-l1-1-0.dll", cAlternateFileName="API-MS~4.DLL")) returned 1 [0244.217] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8d18 [0244.217] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0da8 [0244.217] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad7a8 [0244.217] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0da8 | out: hHeap=0x1f0000) returned 1 [0244.217] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2add68 | out: hHeap=0x1f0000) returned 1 [0244.217] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0244.218] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-filesystem-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-filesystem-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0244.218] GetFileType (hFile=0x1b0) returned 0x1 [0244.218] CloseHandle (hObject=0x1b0) returned 1 [0244.218] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ada88 [0244.219] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-filesystem-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-filesystem-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0aa952a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0aa952a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0c99389, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x50c0)) returned 1 [0244.219] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ada88 | out: hHeap=0x1f0000) returned 1 [0244.219] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2adcb0 [0244.219] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2adcb0 | out: hHeap=0x1f0000) returned 1 [0244.219] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0af5a16, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0af5a16, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0c4cdf5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="api-ms-win-crt-heap-l1-1-0.dll", cAlternateFileName="AP23C9~1.DLL")) returned 1 [0244.219] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2288c0 [0244.219] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0da8 [0244.219] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a818 [0244.219] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0da8 | out: hHeap=0x1f0000) returned 1 [0244.219] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad7a8 | out: hHeap=0x1f0000) returned 1 [0244.219] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2288c0 | out: hHeap=0x1f0000) returned 1 [0244.220] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-heap-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-heap-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0244.220] GetFileType (hFile=0x1b0) returned 0x1 [0244.220] CloseHandle (hObject=0x1b0) returned 1 [0244.220] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a6c8 [0244.221] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-heap-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-heap-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0af5a16, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0af5a16, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0c4cdf5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0)) returned 1 [0244.221] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a6c8 | out: hHeap=0x1f0000) returned 1 [0244.221] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a8c0 [0244.221] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a8c0 | out: hHeap=0x1f0000) returned 1 [0244.221] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1e086ac, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1e086ac, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2365abe, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="api-ms-win-crt-locale-l1-1-0.dll", cAlternateFileName="APCB40~1.DLL")) returned 1 [0244.221] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8d18 [0244.221] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0e10 [0244.221] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219c48 [0244.221] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0e10 | out: hHeap=0x1f0000) returned 1 [0244.221] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a818 | out: hHeap=0x1f0000) returned 1 [0244.221] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0244.222] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-locale-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-locale-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0244.222] GetFileType (hFile=0x1b0) returned 0x1 [0244.222] CloseHandle (hObject=0x1b0) returned 1 [0244.222] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a4d0 [0244.222] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-locale-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-locale-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1e086ac, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1e086ac, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2365abe, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0)) returned 1 [0244.223] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a4d0 | out: hHeap=0x1f0000) returned 1 [0244.223] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21aa10 [0244.223] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21aa10 | out: hHeap=0x1f0000) returned 1 [0244.223] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1137cdf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1137cdf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1d23858, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6cc0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="api-ms-win-crt-math-l1-1-0.dll", cAlternateFileName="APAE51~1.DLL")) returned 1 [0244.223] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228518 [0244.223] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0da8 [0244.223] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a4d0 [0244.223] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0da8 | out: hHeap=0x1f0000) returned 1 [0244.223] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219c48 | out: hHeap=0x1f0000) returned 1 [0244.223] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228518 | out: hHeap=0x1f0000) returned 1 [0244.224] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-math-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-math-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0244.224] GetFileType (hFile=0x1b0) returned 0x1 [0244.224] CloseHandle (hObject=0x1b0) returned 1 [0244.225] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a770 [0244.569] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-math-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-math-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1137cdf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1137cdf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1d23858, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6cc0)) returned 1 [0244.569] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a770 | out: hHeap=0x1f0000) returned 1 [0244.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a968 [0244.569] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a968 | out: hHeap=0x1f0000) returned 1 [0244.569] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1006983, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1006983, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1242d5d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x68c0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="api-ms-win-crt-multibyte-l1-1-0.dll", cAlternateFileName="AP972F~1.DLL")) returned 1 [0244.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8e78 [0244.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0e10 [0244.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad2a0 [0244.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0e10 | out: hHeap=0x1f0000) returned 1 [0244.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a4d0 | out: hHeap=0x1f0000) returned 1 [0244.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8e78 | out: hHeap=0x1f0000) returned 1 [0244.570] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-multibyte-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-multibyte-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0244.571] GetFileType (hFile=0x200) returned 0x1 [0244.571] CloseHandle (hObject=0x200) returned 1 [0244.572] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad358 [0244.572] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-multibyte-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-multibyte-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1006983, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1006983, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1242d5d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x68c0)) returned 1 [0244.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad358 | out: hHeap=0x1f0000) returned 1 [0244.572] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad358 [0244.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad358 | out: hHeap=0x1f0000) returned 1 [0244.572] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0f9426a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0f9426a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd121c9ea, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x114c0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="api-ms-win-crt-private-l1-1-0.dll", cAlternateFileName="AP7D9E~1.DLL")) returned 1 [0244.572] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8e78 [0244.572] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0da8 [0244.572] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad410 [0244.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0da8 | out: hHeap=0x1f0000) returned 1 [0244.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad2a0 | out: hHeap=0x1f0000) returned 1 [0244.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8e78 | out: hHeap=0x1f0000) returned 1 [0244.573] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-private-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-private-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0244.573] GetFileType (hFile=0x200) returned 0x1 [0244.574] CloseHandle (hObject=0x200) returned 1 [0244.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ade20 [0244.574] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-private-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-private-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0f9426a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0f9426a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd121c9ea, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x114c0)) returned 1 [0244.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ade20 | out: hHeap=0x1f0000) returned 1 [0244.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad2a0 [0244.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad2a0 | out: hHeap=0x1f0000) returned 1 [0244.575] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0f9426a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0f9426a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd139a18a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="api-ms-win-crt-process-l1-1-0.dll", cAlternateFileName="APFCAD~1.DLL")) returned 1 [0244.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8e78 [0244.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0da8 [0244.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad638 [0244.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0da8 | out: hHeap=0x1f0000) returned 1 [0244.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad410 | out: hHeap=0x1f0000) returned 1 [0244.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8e78 | out: hHeap=0x1f0000) returned 1 [0244.576] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-process-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-process-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0244.577] GetFileType (hFile=0x200) returned 0x1 [0244.577] CloseHandle (hObject=0x200) returned 1 [0244.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2adb40 [0244.577] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-process-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-process-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0f9426a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0f9426a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd139a18a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0)) returned 1 [0244.578] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2adb40 | out: hHeap=0x1f0000) returned 1 [0244.578] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2aded8 [0244.578] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aded8 | out: hHeap=0x1f0000) returned 1 [0244.578] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0eaf4e3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0eaf4e3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd11d067c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5ac0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="api-ms-win-crt-runtime-l1-1-0.dll", cAlternateFileName="AP8F34~1.DLL")) returned 1 [0244.578] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8e78 [0244.578] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0da8 [0244.578] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad6f0 [0244.578] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0da8 | out: hHeap=0x1f0000) returned 1 [0244.578] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad638 | out: hHeap=0x1f0000) returned 1 [0244.578] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8e78 | out: hHeap=0x1f0000) returned 1 [0244.579] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-runtime-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-runtime-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0244.579] GetFileType (hFile=0x200) returned 0x1 [0244.579] CloseHandle (hObject=0x200) returned 1 [0244.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad2a0 [0244.580] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-runtime-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-runtime-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0eaf4e3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0eaf4e3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd11d067c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5ac0)) returned 1 [0244.580] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad2a0 | out: hHeap=0x1f0000) returned 1 [0244.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad7a8 [0244.580] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad7a8 | out: hHeap=0x1f0000) returned 1 [0244.580] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0dca676, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0dca676, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1078ffd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x60c0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="api-ms-win-crt-stdio-l1-1-0.dll", cAlternateFileName="APD1B7~1.DLL")) returned 1 [0244.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228a28 [0244.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0da8 [0244.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a0e0 [0244.581] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0da8 | out: hHeap=0x1f0000) returned 1 [0244.581] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad6f0 | out: hHeap=0x1f0000) returned 1 [0244.581] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228a28 | out: hHeap=0x1f0000) returned 1 [0244.581] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-stdio-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-stdio-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0244.581] GetFileType (hFile=0x200) returned 0x1 [0244.582] CloseHandle (hObject=0x200) returned 1 [0244.582] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219d98 [0244.582] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-stdio-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-stdio-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0dca676, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0dca676, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1078ffd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x60c0)) returned 1 [0244.582] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219d98 | out: hHeap=0x1f0000) returned 1 [0244.582] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219f90 [0244.582] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219f90 | out: hHeap=0x1f0000) returned 1 [0244.583] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0eaf4e3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0eaf4e3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd10c55e8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x60c0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="api-ms-win-crt-string-l1-1-0.dll", cAlternateFileName="APBF0F~1.DLL")) returned 1 [0244.583] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8e78 [0244.583] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0da8 [0244.583] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a8c0 [0244.583] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0da8 | out: hHeap=0x1f0000) returned 1 [0244.583] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a0e0 | out: hHeap=0x1f0000) returned 1 [0244.583] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8e78 | out: hHeap=0x1f0000) returned 1 [0244.583] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-string-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-string-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0244.584] GetFileType (hFile=0x200) returned 0x1 [0244.584] CloseHandle (hObject=0x200) returned 1 [0244.624] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a578 [0244.624] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-string-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-string-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0eaf4e3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0eaf4e3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd10c55e8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x60c0)) returned 1 [0244.624] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a578 | out: hHeap=0x1f0000) returned 1 [0244.624] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219c48 [0244.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219c48 | out: hHeap=0x1f0000) returned 1 [0244.625] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0dca676, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0dca676, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0f9426a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x52c0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="api-ms-win-crt-time-l1-1-0.dll", cAlternateFileName="AP5E4C~1.DLL")) returned 1 [0244.625] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228908 [0244.625] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0f48 [0244.625] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a818 [0244.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0f48 | out: hHeap=0x1f0000) returned 1 [0244.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a8c0 | out: hHeap=0x1f0000) returned 1 [0244.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228908 | out: hHeap=0x1f0000) returned 1 [0244.626] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-time-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-time-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0244.626] GetFileType (hFile=0x200) returned 0x1 [0244.627] CloseHandle (hObject=0x200) returned 1 [0244.627] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a188 [0244.627] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-time-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-time-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0dca676, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0dca676, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0f9426a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x52c0)) returned 1 [0244.627] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a188 | out: hHeap=0x1f0000) returned 1 [0244.627] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a6c8 [0244.627] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a6c8 | out: hHeap=0x1f0000) returned 1 [0244.628] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1b7fe91, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1b7fe91, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1ec71c8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="api-ms-win-crt-utility-l1-1-0.dll", cAlternateFileName="AP80F4~1.DLL")) returned 1 [0244.628] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8e78 [0244.628] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0e78 [0244.628] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad918 [0244.628] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0e78 | out: hHeap=0x1f0000) returned 1 [0244.628] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a818 | out: hHeap=0x1f0000) returned 1 [0244.628] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8e78 | out: hHeap=0x1f0000) returned 1 [0244.629] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-utility-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-utility-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0244.629] GetFileType (hFile=0x200) returned 0x1 [0244.630] CloseHandle (hObject=0x200) returned 1 [0244.630] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad638 [0244.630] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-utility-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-utility-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1b7fe91, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1b7fe91, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1ec71c8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0)) returned 1 [0244.630] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad638 | out: hHeap=0x1f0000) returned 1 [0244.630] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ada88 [0244.631] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ada88 | out: hHeap=0x1f0000) returned 1 [0244.631] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1b59cda, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1b59cda, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1f1370b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x34ad8, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="AppVDllSurrogate32.exe", cAlternateFileName="APPVDL~2.EXE")) returned 1 [0244.631] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238da8 [0244.631] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0e10 [0244.631] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0244.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0e10 | out: hHeap=0x1f0000) returned 1 [0244.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad918 | out: hHeap=0x1f0000) returned 1 [0244.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238da8 | out: hHeap=0x1f0000) returned 1 [0244.633] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate32.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvdllsurrogate32.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0244.633] GetFileType (hFile=0x200) returned 0x1 [0244.633] CloseHandle (hObject=0x200) returned 1 [0244.634] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0244.634] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate32.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvdllsurrogate32.exe"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1b59cda, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1b59cda, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1f1370b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x34ad8)) returned 1 [0244.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0244.634] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0244.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0244.635] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd153dc41, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd153dc41, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1e2e85a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3e4d8, dwReserved0=0x22be964, dwReserved1=0x3, cFileName="AppVDllSurrogate64.exe", cAlternateFileName="APPVDL~1.EXE")) returned 1 [0244.635] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239010 [0244.635] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0da8 [0244.635] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0244.635] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0da8 | out: hHeap=0x1f0000) returned 1 [0244.635] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0244.635] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239010 | out: hHeap=0x1f0000) returned 1 [0244.636] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate64.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvdllsurrogate64.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0244.636] GetFileType (hFile=0x200) returned 0x1 [0244.637] CloseHandle (hObject=0x200) returned 1 [0244.637] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0244.638] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate64.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvdllsurrogate64.exe"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd153dc41, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd153dc41, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1e2e85a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3e4d8)) returned 1 [0244.638] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0244.638] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0244.638] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0244.638] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x86813dc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86813dc4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86813dc4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x3, cFileName="AppvIsvStream32.dll", cAlternateFileName="APPVIS~1.DLL")) returned 1 [0244.638] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238ec0 [0244.638] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0ee0 [0244.639] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0244.639] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0ee0 | out: hHeap=0x1f0000) returned 1 [0244.639] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0244.639] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ec0 | out: hHeap=0x1f0000) returned 1 [0244.640] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\AppvIsvStream32.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvisvstream32.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0244.640] GetLastError () returned 0x2 [0244.640] GetLastError () returned 0x2 [0244.641] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x86813dc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86813dc4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86813dc4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x3, cFileName="AppvIsvStream64.dll", cAlternateFileName="APPVIS~2.DLL")) returned 1 [0244.641] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239278 [0244.641] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0da8 [0244.641] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0244.641] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0da8 | out: hHeap=0x1f0000) returned 1 [0244.641] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0244.642] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239278 | out: hHeap=0x1f0000) returned 1 [0244.642] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\AppvIsvStream64.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvisvstream64.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0244.643] GetLastError () returned 0x2 [0244.643] GetLastError () returned 0x2 [0244.643] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x86813dc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86813dc4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86813dc4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x3, cFileName="AppvIsvSubsystems32.dll", cAlternateFileName="APPVIS~3.DLL")) returned 1 [0244.643] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238f68 [0244.643] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0da8 [0244.643] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0244.643] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0da8 | out: hHeap=0x1f0000) returned 1 [0244.644] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0244.644] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238f68 | out: hHeap=0x1f0000) returned 1 [0244.644] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\AppvIsvSubsystems32.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvisvsubsystems32.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0244.645] GetLastError () returned 0x2 [0244.645] GetLastError () returned 0x2 [0244.645] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x8683a0f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8683a0f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8683a0f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x3, cFileName="AppvIsvSubsystems64.dll", cAlternateFileName="APPVIS~4.DLL")) returned 1 [0244.645] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c58 [0244.645] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0ee0 [0244.645] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0244.646] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0ee0 | out: hHeap=0x1f0000) returned 1 [0244.646] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0244.646] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c58 | out: hHeap=0x1f0000) returned 1 [0245.163] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\AppvIsvSubsystems64.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvisvsubsystems64.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0245.163] GetLastError () returned 0x2 [0245.163] GetLastError () returned 0x2 [0245.164] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd153dc41, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd153dc41, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1e7acf5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x69630, dwReserved0=0xa000000c, dwReserved1=0x3, cFileName="AppVLP.exe", cAlternateFileName="")) returned 1 [0245.164] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0245.164] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c30 [0245.164] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220eb8 [0245.164] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c30 | out: hHeap=0x1f0000) returned 1 [0245.164] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0245.165] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0245.165] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\AppVLP.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvlp.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0245.166] GetFileType (hFile=0x220) returned 0x1 [0245.166] CloseHandle (hObject=0x220) returned 1 [0245.167] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0245.167] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\AppVLP.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvlp.exe"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd153dc41, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd153dc41, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1e7acf5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x69630)) returned 1 [0245.167] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0245.167] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0245.167] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0245.168] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x8683a0f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8683a0f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8683a0f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x3, cFileName="C2R32.dll", cAlternateFileName="")) returned 1 [0245.168] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238258 [0245.168] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214fd8 [0245.168] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221a00 [0245.168] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214fd8 | out: hHeap=0x1f0000) returned 1 [0245.168] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0245.168] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238258 | out: hHeap=0x1f0000) returned 1 [0245.169] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\C2R32.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\c2r32.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0245.169] GetLastError () returned 0x2 [0245.170] GetLastError () returned 0x2 [0245.170] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x8683a0f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8683a0f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8683a0f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x3, cFileName="C2R64.dll", cAlternateFileName="")) returned 1 [0245.170] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380f0 [0245.170] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d00 [0245.170] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221b30 [0245.171] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d00 | out: hHeap=0x1f0000) returned 1 [0245.171] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0245.171] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380f0 | out: hHeap=0x1f0000) returned 1 [0245.172] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\C2R64.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\c2r64.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0245.172] GetLastError () returned 0x2 [0245.172] GetLastError () returned 0x2 [0245.172] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd11f68b6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd11f68b6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd191da0e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x514a8, dwReserved0=0xa000000c, dwReserved1=0x3, cFileName="concrt140.dll", cAlternateFileName="CONCRT~1.DLL")) returned 1 [0245.173] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0245.173] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2150a8 [0245.173] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220d88 [0245.173] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2150a8 | out: hHeap=0x1f0000) returned 1 [0245.173] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0245.173] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0245.174] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\concrt140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\concrt140.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0245.175] GetFileType (hFile=0x220) returned 0x1 [0245.175] CloseHandle (hObject=0x220) returned 1 [0245.176] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0245.176] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\concrt140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\concrt140.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd11f68b6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd11f68b6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd191da0e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x514a8)) returned 1 [0245.176] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0245.176] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212cf0 [0245.176] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212cf0 | out: hHeap=0x1f0000) returned 1 [0245.176] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1242d5d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1242d5d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1bcc41c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5644a0, dwReserved0=0xa000000c, dwReserved1=0x3, cFileName="mfc140u.dll", cAlternateFileName="")) returned 1 [0245.176] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0245.177] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2149c0 [0245.177] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221968 [0245.177] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2149c0 | out: hHeap=0x1f0000) returned 1 [0245.177] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0245.177] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0245.179] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\mfc140u.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\mfc140u.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0245.179] GetFileType (hFile=0x220) returned 0x1 [0245.180] CloseHandle (hObject=0x220) returned 1 [0245.180] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0245.180] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\mfc140u.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\mfc140u.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1242d5d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1242d5d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1bcc41c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5644a0)) returned 1 [0245.181] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0245.181] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e88 [0245.181] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e88 | out: hHeap=0x1f0000) returned 1 [0245.181] GetLastError () returned 0x0 [0245.181] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0245.181] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228908 [0245.182] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262650 [0245.182] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0245.182] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c20 [0245.182] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0245.182] CryptAcquireContextA (in: phProv=0x2293e98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2293e98*=0x213130) returned 1 [0245.183] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2381b8 | out: pbBuffer=0x2381b8) returned 1 [0245.183] CryptReleaseContext (hProv=0x213130, dwFlags=0x0) returned 1 [0245.183] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0245.183] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x270dd8 [0245.184] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2ae0e0 [0245.184] QueryPerformanceCounter (in: lpPerformanceCount=0x2293e2c | out: lpPerformanceCount=0x2293e2c*=40255278112) returned 1 [0245.184] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x2293e6c | out: lpSystemTimeAsFileTime=0x2293e6c) [0245.184] QueryPerformanceCounter (in: lpPerformanceCount=0x2293e2c | out: lpPerformanceCount=0x2293e2c*=40255330419) returned 1 [0245.185] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x2293e6c | out: lpSystemTimeAsFileTime=0x2293e6c) [0245.185] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239198 [0245.185] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x26c1b8 [0245.185] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2afd50 [0245.185] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x232c78 [0245.185] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f980 [0245.186] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206688 [0245.186] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f968 [0245.186] GetLastError () returned 0x0 [0245.186] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\mfc140u.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\mfc140u.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x2293dfc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0245.187] GetFileType (hFile=0x220) returned 0x1 [0245.187] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2293e68 | out: lpNewFilePointer=0x0) returned 1 [0245.188] ReadFile (in: hFile=0x220, lpBuffer=0x22a9368, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x2293e40, lpOverlapped=0x0 | out: lpBuffer=0x22a9368*, lpNumberOfBytesRead=0x2293e40*=0x14000, lpOverlapped=0x0) returned 1 [0245.191] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28dfd0 [0245.191] ReadFile (in: hFile=0x220, lpBuffer=0x28dfd0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2293de4, lpOverlapped=0x0 | out: lpBuffer=0x28dfd0*, lpNumberOfBytesRead=0x2293de4*=0x1000, lpOverlapped=0x0) returned 1 [0245.193] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2293e70 | out: lpNewFilePointer=0x0) returned 1 [0245.193] WriteFile (in: hFile=0x220, lpBuffer=0x2294378*, nNumberOfBytesToWrite=0x14000, lpNumberOfBytesWritten=0x2293ddc, lpOverlapped=0x0 | out: lpBuffer=0x2294378*, lpNumberOfBytesWritten=0x2293ddc*=0x14000, lpOverlapped=0x0) returned 1 [0245.195] WriteFile (in: hFile=0x220, lpBuffer=0x28dfd0*, nNumberOfBytesToWrite=0xff0, lpNumberOfBytesWritten=0x2293e08, lpOverlapped=0x0 | out: lpBuffer=0x28dfd0*, lpNumberOfBytesWritten=0x2293e08*=0xff0, lpOverlapped=0x0) returned 1 [0245.195] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x15f90, lpNewFilePointer=0x0, dwMoveMethod=0x2293e50 | out: lpNewFilePointer=0x0) returned 1 [0245.196] ReadFile (in: hFile=0x220, lpBuffer=0x22a9368, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x2293e28, lpOverlapped=0x0 | out: lpBuffer=0x22a9368*, lpNumberOfBytesRead=0x2293e28*=0x14000, lpOverlapped=0x0) returned 1 [0245.534] ReadFile (in: hFile=0x220, lpBuffer=0x28dfd0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2293dcc, lpOverlapped=0x0 | out: lpBuffer=0x28dfd0*, lpNumberOfBytesRead=0x2293dcc*=0x1000, lpOverlapped=0x0) returned 1 [0245.534] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x15f90, lpNewFilePointer=0x0, dwMoveMethod=0x2293e70 | out: lpNewFilePointer=0x0) returned 1 [0245.535] WriteFile (in: hFile=0x220, lpBuffer=0x2294378*, nNumberOfBytesToWrite=0x14000, lpNumberOfBytesWritten=0x2293ddc, lpOverlapped=0x0 | out: lpBuffer=0x2294378*, lpNumberOfBytesWritten=0x2293ddc*=0x14000, lpOverlapped=0x0) returned 1 [0245.536] WriteFile (in: hFile=0x220, lpBuffer=0x28dfd0*, nNumberOfBytesToWrite=0xff0, lpNumberOfBytesWritten=0x2293e08, lpOverlapped=0x0 | out: lpBuffer=0x28dfd0*, lpNumberOfBytesWritten=0x2293e08*=0xff0, lpOverlapped=0x0) returned 1 [0245.537] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0xdbba0, lpNewFilePointer=0x0, dwMoveMethod=0x2293e50 | out: lpNewFilePointer=0x0) returned 1 [0245.537] ReadFile (in: hFile=0x220, lpBuffer=0x22a9368, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x2293e28, lpOverlapped=0x0 | out: lpBuffer=0x22a9368*, lpNumberOfBytesRead=0x2293e28*=0x14000, lpOverlapped=0x0) returned 1 [0245.541] ReadFile (in: hFile=0x220, lpBuffer=0x28dfd0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2293dcc, lpOverlapped=0x0 | out: lpBuffer=0x28dfd0*, lpNumberOfBytesRead=0x2293dcc*=0x1000, lpOverlapped=0x0) returned 1 [0245.542] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0xdbba0, lpNewFilePointer=0x0, dwMoveMethod=0x2293e70 | out: lpNewFilePointer=0x0) returned 1 [0245.543] WriteFile (in: hFile=0x220, lpBuffer=0x2294378*, nNumberOfBytesToWrite=0x14000, lpNumberOfBytesWritten=0x2293ddc, lpOverlapped=0x0 | out: lpBuffer=0x2294378*, lpNumberOfBytesWritten=0x2293ddc*=0x14000, lpOverlapped=0x0) returned 1 [0245.544] WriteFile (in: hFile=0x220, lpBuffer=0x28dfd0*, nNumberOfBytesToWrite=0xff0, lpNumberOfBytesWritten=0x2293e58, lpOverlapped=0x0 | out: lpBuffer=0x28dfd0*, lpNumberOfBytesWritten=0x2293e58*=0xff0, lpOverlapped=0x0) returned 1 [0245.544] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28dfd0 | out: hHeap=0x1f0000) returned 1 [0245.545] CloseHandle (hObject=0x220) returned 1 [0245.545] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228518 [0245.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238280 [0245.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238000 [0245.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x2289e0 [0245.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d90 [0245.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f50 [0245.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x238830 [0245.546] GetLastError () returned 0x0 [0245.547] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238c90 [0245.547] GetLastError () returned 0x0 [0245.547] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239208 [0245.547] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214b60 [0245.547] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238398 [0245.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2852a8 [0245.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238950 [0245.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0245.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f9b0 [0245.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238850 [0245.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0245.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f920 [0245.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238370 [0245.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2857d0 [0245.549] GetLastError () returned 0x0 [0245.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238900 [0245.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238910 [0245.550] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238880 [0245.550] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238910 | out: hHeap=0x1f0000) returned 1 [0245.550] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388d0 [0245.550] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238880 | out: hHeap=0x1f0000) returned 1 [0245.550] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238900 | out: hHeap=0x1f0000) returned 1 [0245.550] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238880 [0245.551] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f908 [0245.551] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238880 | out: hHeap=0x1f0000) returned 1 [0245.551] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f950 [0245.551] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f908 | out: hHeap=0x1f0000) returned 1 [0245.551] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388d0 | out: hHeap=0x1f0000) returned 1 [0245.551] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f908 [0245.551] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f668 [0245.552] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f908 | out: hHeap=0x1f0000) returned 1 [0245.552] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f908 [0245.552] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f668 | out: hHeap=0x1f0000) returned 1 [0245.552] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f950 | out: hHeap=0x1f0000) returned 1 [0245.552] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f950 [0245.552] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204d70 [0245.553] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f950 | out: hHeap=0x1f0000) returned 1 [0245.553] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d90 [0245.553] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d70 | out: hHeap=0x1f0000) returned 1 [0245.554] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f908 | out: hHeap=0x1f0000) returned 1 [0245.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c90 [0245.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2382d0 [0245.554] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c90 | out: hHeap=0x1f0000) returned 1 [0245.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204d30 [0245.554] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0245.554] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d90 | out: hHeap=0x1f0000) returned 1 [0245.555] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204f50 [0245.555] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206658 [0245.555] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f50 | out: hHeap=0x1f0000) returned 1 [0245.555] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2383e8 [0245.555] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206658 | out: hHeap=0x1f0000) returned 1 [0245.555] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d30 | out: hHeap=0x1f0000) returned 1 [0245.556] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238880 [0245.556] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f908 [0245.556] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238880 | out: hHeap=0x1f0000) returned 1 [0245.556] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f950 [0245.556] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f908 | out: hHeap=0x1f0000) returned 1 [0245.556] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204bf0 [0245.557] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f950 | out: hHeap=0x1f0000) returned 1 [0245.557] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206658 [0245.557] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bf0 | out: hHeap=0x1f0000) returned 1 [0245.557] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206658 | out: hHeap=0x1f0000) returned 1 [0245.557] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0245.557] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0245.557] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0245.558] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2852a8 | out: hHeap=0x1f0000) returned 1 [0245.558] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0245.558] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239208 [0245.558] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0245.558] CryptAcquireContextA (in: phProv=0x2293e98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2293e98*=0x213460) returned 1 [0245.559] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238280 | out: pbBuffer=0x238280) returned 1 [0245.559] CryptReleaseContext (hProv=0x213460, dwFlags=0x0) returned 1 [0245.560] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0245.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238398 [0245.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2380a0 [0245.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2391d0 [0245.560] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0245.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0245.561] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2391d0 | out: hHeap=0x1f0000) returned 1 [0245.561] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8d18 [0245.561] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f908 [0245.561] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x214d68 [0245.561] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2380f0 [0245.561] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285098 [0245.561] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0245.561] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2149c0 [0245.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2384b0 [0245.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2853b0 [0245.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238920 [0245.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0245.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f950 [0245.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238880 [0245.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0245.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f890 [0245.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f890 | out: hHeap=0x1f0000) returned 1 [0245.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0245.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238880 | out: hHeap=0x1f0000) returned 1 [0245.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f950 | out: hHeap=0x1f0000) returned 1 [0245.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0245.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238920 | out: hHeap=0x1f0000) returned 1 [0245.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2853b0 | out: hHeap=0x1f0000) returned 1 [0245.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0245.564] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2149c0 | out: hHeap=0x1f0000) returned 1 [0245.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238de0 [0245.564] GetLastError () returned 0x0 [0245.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239010 [0245.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0245.564] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0245.565] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0245.565] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0245.565] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0245.565] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0245.565] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x24ec80 [0245.565] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2851a0 [0245.565] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0245.565] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0245.565] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0245.566] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0245.566] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285bf0 [0245.566] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0245.566] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0245.566] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fb50 [0245.566] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x26aeb0 [0245.566] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2af7d8 [0245.566] QueryPerformanceCounter (in: lpPerformanceCount=0x22939e8 | out: lpPerformanceCount=0x22939e8*=40293538071) returned 1 [0245.567] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x2293a28 | out: lpSystemTimeAsFileTime=0x2293a28) [0245.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238960 [0245.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238348 [0245.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bf0 [0245.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bf0 | out: hHeap=0x1f0000) returned 1 [0245.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238348 | out: hHeap=0x1f0000) returned 1 [0245.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0245.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c70 [0245.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c70 | out: hHeap=0x1f0000) returned 1 [0245.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0245.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238960 | out: hHeap=0x1f0000) returned 1 [0245.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0245.975] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239080 [0245.975] GetLastError () returned 0x0 [0245.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0245.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0245.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0245.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238410 [0245.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238398 [0245.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0245.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0245.977] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2382a8 [0245.977] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0245.977] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x222ee8 [0245.977] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0245.977] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0245.977] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0245.977] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0245.977] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0245.977] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2381b8 [0245.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238208 [0245.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0245.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0245.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0245.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0245.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x234b90 [0245.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b90 | out: hHeap=0x1f0000) returned 1 [0245.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0245.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0245.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f7e8 [0245.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228758 [0245.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238320 [0245.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238118 [0245.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238208 [0245.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2382d0 [0245.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0245.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0245.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2366d8 [0245.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2383e8 [0245.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238118 [0245.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0245.980] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0245.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0245.980] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206928 [0245.980] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x2a93f8 [0245.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a93f8 | out: hHeap=0x1f0000) returned 1 [0245.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206928 | out: hHeap=0x1f0000) returned 1 [0245.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0245.980] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0245.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0245.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0245.980] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204e50 [0245.981] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0245.981] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0245.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0245.981] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abec0 [0245.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0245.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0245.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0245.982] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228758 | out: hHeap=0x1f0000) returned 1 [0245.982] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0245.982] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e50 | out: hHeap=0x1f0000) returned 1 [0245.982] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f7e8 | out: hHeap=0x1f0000) returned 1 [0245.982] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0245.982] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aafb8 [0245.982] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aafb8 | out: hHeap=0x1f0000) returned 1 [0245.982] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ee8 | out: hHeap=0x1f0000) returned 1 [0245.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0245.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0245.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0245.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0245.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0245.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0245.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0245.984] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac360 [0245.984] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac488 [0245.984] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac360 | out: hHeap=0x1f0000) returned 1 [0245.984] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac488 | out: hHeap=0x1f0000) returned 1 [0245.984] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abec0 | out: hHeap=0x1f0000) returned 1 [0245.984] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0245.984] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285bf0 | out: hHeap=0x1f0000) returned 1 [0245.984] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24ec80 | out: hHeap=0x1f0000) returned 1 [0245.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x2af6c0 [0245.985] GetLastError () returned 0x0 [0245.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389b0 [0245.986] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238880 [0245.987] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\mfc140u.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\mfc140u.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2293d98, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0245.987] GetFileType (hFile=0x174) returned 0x1 [0245.988] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x292ff8 [0245.988] SetFilePointerEx (in: hFile=0x174, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2293d20 | out: lpNewFilePointer=0x0) returned 1 [0245.988] GetLastError () returned 0xb7 [0245.992] CloseHandle (hObject=0x174) returned 1 [0245.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0245.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x217038 [0245.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0245.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x140) returned 0x22d368 [0245.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0245.993] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\mfc140u.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\mfc140u.dll"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\mfc140u.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\root\\client\\mfc140u.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwFlags=0x2) returned 1 [0245.994] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d368 | out: hHeap=0x1f0000) returned 1 [0245.994] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238880 | out: hHeap=0x1f0000) returned 1 [0245.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389b0 | out: hHeap=0x1f0000) returned 1 [0245.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2851a0 | out: hHeap=0x1f0000) returned 1 [0245.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285098 | out: hHeap=0x1f0000) returned 1 [0245.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380f0 | out: hHeap=0x1f0000) returned 1 [0245.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d70 | out: hHeap=0x1f0000) returned 1 [0245.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d68 | out: hHeap=0x1f0000) returned 1 [0245.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f908 | out: hHeap=0x1f0000) returned 1 [0245.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0245.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2af6c0 | out: hHeap=0x1f0000) returned 1 [0245.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0245.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0245.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x26aeb0 | out: hHeap=0x1f0000) returned 1 [0245.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2af7d8 | out: hHeap=0x1f0000) returned 1 [0245.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239208 | out: hHeap=0x1f0000) returned 1 [0245.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238830 | out: hHeap=0x1f0000) returned 1 [0245.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f920 | out: hHeap=0x1f0000) returned 1 [0245.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0245.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238850 | out: hHeap=0x1f0000) returned 1 [0245.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f9b0 | out: hHeap=0x1f0000) returned 1 [0245.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0245.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238950 | out: hHeap=0x1f0000) returned 1 [0245.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2857d0 | out: hHeap=0x1f0000) returned 1 [0245.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0245.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214b60 | out: hHeap=0x1f0000) returned 1 [0245.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2289e0 | out: hHeap=0x1f0000) returned 1 [0245.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0245.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0245.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228518 | out: hHeap=0x1f0000) returned 1 [0245.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x26c1b8 | out: hHeap=0x1f0000) returned 1 [0245.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2afd50 | out: hHeap=0x1f0000) returned 1 [0245.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206688 | out: hHeap=0x1f0000) returned 1 [0245.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f968 | out: hHeap=0x1f0000) returned 1 [0245.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f980 | out: hHeap=0x1f0000) returned 1 [0245.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232c78 | out: hHeap=0x1f0000) returned 1 [0245.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x270dd8 | out: hHeap=0x1f0000) returned 1 [0245.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae0e0 | out: hHeap=0x1f0000) returned 1 [0245.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c20 | out: hHeap=0x1f0000) returned 1 [0245.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0245.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262650 | out: hHeap=0x1f0000) returned 1 [0245.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228908 | out: hHeap=0x1f0000) returned 1 [0245.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0245.998] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1f5fb21, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1f5fb21, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd244aa14, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xa12a8, dwReserved0=0xa000000c, dwReserved1=0x3, cFileName="msvcp120.dll", cAlternateFileName="")) returned 1 [0245.998] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0245.998] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d68 [0245.998] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220c58 [0245.998] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d68 | out: hHeap=0x1f0000) returned 1 [0245.998] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0245.998] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0245.998] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\msvcp120.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcp120.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0245.999] GetFileType (hFile=0x174) returned 0x1 [0245.999] CloseHandle (hObject=0x174) returned 1 [0246.000] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0246.000] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\msvcp120.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcp120.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1f5fb21, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1f5fb21, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd244aa14, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xa12a8)) returned 1 [0246.000] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0246.000] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212cf0 [0246.000] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212cf0 | out: hHeap=0x1f0000) returned 1 [0246.000] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1ea0ff2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1ea0ff2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd20449b3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x9b0a0, dwReserved0=0xa000000c, dwReserved1=0x3, cFileName="msvcp140.dll", cAlternateFileName="")) returned 1 [0246.000] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0246.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d68 [0246.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220f50 [0246.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d68 | out: hHeap=0x1f0000) returned 1 [0246.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0246.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0246.001] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\msvcp140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcp140.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0246.002] GetFileType (hFile=0x174) returned 0x1 [0246.002] CloseHandle (hObject=0x174) returned 1 [0246.003] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0246.003] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\msvcp140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcp140.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1ea0ff2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1ea0ff2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd20449b3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x9b0a0)) returned 1 [0246.003] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0246.003] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0246.003] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0246.003] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd890e4d1, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xd890e4d1, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xd981af3f, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xeb3bb, dwReserved0=0xa000000c, dwReserved1=0x3, cFileName="msvcr120.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="MSVCR1~1.ODV")) returned 1 [0246.003] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a4d0 [0246.004] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214fd8 [0246.004] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285cf8 [0246.004] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214fd8 | out: hHeap=0x1f0000) returned 1 [0246.004] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0246.004] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a4d0 | out: hHeap=0x1f0000) returned 1 [0246.005] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\msvcr120.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcr120.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0246.005] GetFileType (hFile=0x174) returned 0x1 [0246.005] CloseHandle (hObject=0x174) returned 1 [0246.006] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2852a8 [0246.006] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\msvcr120.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcr120.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd890e4d1, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xd890e4d1, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xd981af3f, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xeb3bb)) returned 1 [0246.006] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2852a8 | out: hHeap=0x1f0000) returned 1 [0246.007] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285e00 [0246.007] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285e00 | out: hHeap=0x1f0000) returned 1 [0246.007] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd98413d2, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xd98413d2, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xda49deba, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xeffd3, dwReserved0=0xa000000c, dwReserved1=0x3, cFileName="ucrtbase.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="UCRTBA~1.ODV")) returned 1 [0246.007] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21ab60 [0246.007] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2149c0 [0246.007] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285e00 [0246.007] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2149c0 | out: hHeap=0x1f0000) returned 1 [0246.007] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285cf8 | out: hHeap=0x1f0000) returned 1 [0246.007] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ab60 | out: hHeap=0x1f0000) returned 1 [0246.008] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\ucrtbase.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\root\\client\\ucrtbase.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0246.008] GetFileType (hFile=0x174) returned 0x1 [0246.009] CloseHandle (hObject=0x174) returned 1 [0246.009] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2853b0 [0246.009] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\ucrtbase.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\root\\client\\ucrtbase.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd98413d2, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xd98413d2, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xda49deba, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xeffd3)) returned 1 [0246.009] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2853b0 | out: hHeap=0x1f0000) returned 1 [0246.009] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2851a0 [0246.009] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2851a0 | out: hHeap=0x1f0000) returned 1 [0246.009] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd2ca2e08, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2ca2e08, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2f0533c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5f4b0, dwReserved0=0xa000000c, dwReserved1=0x3, cFileName="vccorlib140.dll", cAlternateFileName="VCCORL~1.DLL")) returned 1 [0246.010] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0246.010] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2149c0 [0246.010] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220c58 [0246.010] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2149c0 | out: hHeap=0x1f0000) returned 1 [0246.010] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285e00 | out: hHeap=0x1f0000) returned 1 [0246.010] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0246.011] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\vccorlib140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\vccorlib140.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0246.011] GetFileType (hFile=0x174) returned 0x1 [0246.011] CloseHandle (hObject=0x174) returned 1 [0246.012] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0246.012] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\vccorlib140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\vccorlib140.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd2ca2e08, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2ca2e08, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2f0533c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5f4b0)) returned 1 [0246.012] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0246.012] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0246.012] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0246.012] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd2424784, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2424784, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd26acf16, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15ab0, dwReserved0=0xa000000c, dwReserved1=0x3, cFileName="vcruntime140.dll", cAlternateFileName="VCRUNT~1.DLL")) returned 1 [0246.013] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238da8 [0246.013] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214f08 [0246.013] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221378 [0246.013] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f08 | out: hHeap=0x1f0000) returned 1 [0246.013] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0246.013] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238da8 | out: hHeap=0x1f0000) returned 1 [0246.014] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\vcruntime140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\vcruntime140.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22be340, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0246.014] GetFileType (hFile=0x174) returned 0x1 [0246.014] CloseHandle (hObject=0x174) returned 1 [0246.014] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0246.015] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\vcruntime140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\vcruntime140.dll"), fInfoLevelId=0x0, lpFileInformation=0x22be3dc | out: lpFileInformation=0x22be3dc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd2424784, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2424784, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd26acf16, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15ab0)) returned 1 [0246.015] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0246.015] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0246.015] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0246.015] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd2424784, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2424784, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd26acf16, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15ab0, dwReserved0=0xa000000c, dwReserved1=0x3, cFileName="vcruntime140.dll", cAlternateFileName="VCRUNT~1.DLL")) returned 0 [0246.015] FindClose (in: hFindFile=0x24ea80 | out: hFindFile=0x24ea80) returned 1 [0246.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0246.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263310 | out: hHeap=0x1f0000) returned 1 [0246.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260630 | out: hHeap=0x1f0000) returned 1 [0246.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228c68 | out: hHeap=0x1f0000) returned 1 [0246.016] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228ab8 [0246.016] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0246.016] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e360 [0246.016] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2203a0 [0246.016] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\*", lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24ec40 [0246.016] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0246.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2203a0 | out: hHeap=0x1f0000) returned 1 [0246.017] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0246.017] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0246.017] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2203a0 [0246.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0246.017] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0246.017] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0246.017] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1113bba3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1113bba3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x3, cFileName="PUB60COR", cAlternateFileName="")) returned 1 [0246.017] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0246.017] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0246.017] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ce8 [0246.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0246.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2203a0 | out: hHeap=0x1f0000) returned 1 [0246.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0246.018] lstrcmpW (lpString1="PUB60COR", lpString2=".") returned 1 [0246.018] lstrcmpW (lpString1="PUB60COR", lpString2="..") returned 1 [0246.018] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204b90 [0246.018] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212cf0 [0246.018] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x104b75c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x3, cFileName="Publisher", cAlternateFileName="PUBLIS~1")) returned 1 [0246.018] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0246.018] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2203a0 [0246.018] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x2188c8 [0246.018] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2203a0 | out: hHeap=0x1f0000) returned 1 [0246.018] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ce8 | out: hHeap=0x1f0000) returned 1 [0246.018] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0246.018] lstrcmpW (lpString1="Publisher", lpString2=".") returned 1 [0246.018] lstrcmpW (lpString1="Publisher", lpString2="..") returned 1 [0246.018] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238fd8 [0246.018] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212be0 [0246.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204b90 | out: hHeap=0x1f0000) returned 1 [0246.019] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x22be568 | out: lpFindFileData=0x22be568*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x104b75c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x3, cFileName="Publisher", cAlternateFileName="PUBLIS~1")) returned 0 [0246.019] FindClose (in: hFindFile=0x24ec40 | out: hFindFile=0x24ec40) returned 1 [0246.019] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2289e0 [0246.019] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0246.019] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e4f8 [0246.019] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0246.019] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\*", lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1113bba3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1113bba3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e940 [0246.432] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0246.432] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0246.432] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0246.432] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1113bba3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1113bba3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.432] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0246.432] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0246.433] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0246.433] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0246.433] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2340, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00004_.GIF", cAlternateFileName="")) returned 1 [0246.433] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0246.433] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0246.433] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0246.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0246.434] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0246.434] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0246.435] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00004_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0246.435] GetFileType (hFile=0x224) returned 0x1 [0246.435] CloseHandle (hObject=0x224) returned 1 [0246.436] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0246.436] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00004_.gif"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2340)) returned 1 [0246.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0246.436] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0246.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0246.436] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c30, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00011_.GIF", cAlternateFileName="")) returned 1 [0246.437] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0246.437] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0246.437] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0246.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0246.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0246.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0246.438] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00011_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00011_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0246.438] GetFileType (hFile=0x224) returned 0x1 [0246.439] CloseHandle (hObject=0x224) returned 1 [0246.439] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0246.439] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00011_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00011_.gif"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c30)) returned 1 [0246.440] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0246.440] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0246.440] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0246.440] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a19, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00021_.GIF", cAlternateFileName="")) returned 1 [0246.440] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238348 [0246.440] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0246.440] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0246.441] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0246.441] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0246.441] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238348 | out: hHeap=0x1f0000) returned 1 [0246.441] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00021_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0246.442] GetFileType (hFile=0x224) returned 0x1 [0246.442] CloseHandle (hObject=0x224) returned 1 [0246.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0246.443] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00021_.gif"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a19)) returned 1 [0246.443] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0246.443] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0246.443] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0246.443] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a1c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00037_.GIF", cAlternateFileName="")) returned 1 [0246.443] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0246.443] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0246.443] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0246.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0246.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0246.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0246.444] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00037_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0246.444] GetFileType (hFile=0x224) returned 0x1 [0246.445] CloseHandle (hObject=0x224) returned 1 [0246.445] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0246.445] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00037_.gif"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a1c)) returned 1 [0246.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0246.445] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0246.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0246.446] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb58a9e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb58a9e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00038_.GIF", cAlternateFileName="")) returned 1 [0246.446] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0246.446] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0246.446] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0246.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0246.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0246.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0246.447] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00038_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0246.447] GetFileType (hFile=0x224) returned 0x1 [0246.447] CloseHandle (hObject=0x224) returned 1 [0246.447] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0246.447] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00038_.gif"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb58a9e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb58a9e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcb3)) returned 1 [0246.448] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0246.448] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0246.448] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0246.448] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb58a9e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fa1, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00040_.GIF", cAlternateFileName="")) returned 1 [0246.448] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0246.448] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0246.448] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0246.448] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0246.448] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0246.448] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0246.449] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00040_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0246.449] GetFileType (hFile=0x224) returned 0x1 [0246.449] CloseHandle (hObject=0x224) returned 1 [0246.449] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0246.450] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00040_.gif"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb58a9e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fa1)) returned 1 [0246.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0246.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0246.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0246.450] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e06, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00052_.GIF", cAlternateFileName="")) returned 1 [0246.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0246.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0246.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0246.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0246.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0246.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0246.451] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00052_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0246.451] GetFileType (hFile=0x224) returned 0x1 [0246.451] CloseHandle (hObject=0x224) returned 1 [0246.452] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0246.452] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00052_.gif"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e06)) returned 1 [0246.452] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0246.452] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0246.452] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0246.452] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e73, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00057_.GIF", cAlternateFileName="")) returned 1 [0246.452] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0246.452] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0246.453] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0246.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0246.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0246.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0246.453] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00057_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0246.454] GetFileType (hFile=0x224) returned 0x1 [0246.454] CloseHandle (hObject=0x224) returned 1 [0246.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0246.454] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00057_.gif"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e73)) returned 1 [0246.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0246.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0246.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0246.455] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x205, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00090_.GIF", cAlternateFileName="")) returned 1 [0246.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0246.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0246.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0246.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0246.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0246.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0246.456] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00090_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0246.456] GetFileType (hFile=0x224) returned 0x1 [0246.457] CloseHandle (hObject=0x224) returned 1 [0246.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0246.457] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00090_.gif"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x205)) returned 1 [0246.457] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0246.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0246.457] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0246.457] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00092_.GIF", cAlternateFileName="")) returned 1 [0246.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0246.458] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0246.458] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0246.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0246.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0246.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0246.459] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00092_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0246.459] GetFileType (hFile=0x224) returned 0x1 [0246.460] CloseHandle (hObject=0x224) returned 1 [0246.461] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0246.461] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00092_.gif"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f6)) returned 1 [0246.461] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0246.461] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0246.461] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0246.461] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x319e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00103_.GIF", cAlternateFileName="")) returned 1 [0246.461] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0246.461] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0246.461] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0246.462] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0246.462] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0246.462] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0246.462] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00103_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0246.462] GetFileType (hFile=0x224) returned 0x1 [0246.463] CloseHandle (hObject=0x224) returned 1 [0246.463] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0246.463] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00103_.gif"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x319e)) returned 1 [0246.463] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0246.463] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0246.463] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0246.464] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00120_.GIF", cAlternateFileName="")) returned 1 [0246.464] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0246.464] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0246.464] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0246.464] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0246.464] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0246.464] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0246.465] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00120_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0246.465] GetFileType (hFile=0x224) returned 0x1 [0246.465] CloseHandle (hObject=0x224) returned 1 [0246.465] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0246.465] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00120_.gif"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd9c)) returned 1 [0246.466] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0246.466] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0246.466] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0246.466] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc44, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00126_.GIF", cAlternateFileName="")) returned 1 [0246.466] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0246.466] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0246.466] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0246.466] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0246.466] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0246.466] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0246.467] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00126_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0246.467] GetFileType (hFile=0x224) returned 0x1 [0246.467] CloseHandle (hObject=0x224) returned 1 [0246.467] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0246.467] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00126_.gif"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc44)) returned 1 [0246.468] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0246.468] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0246.468] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0246.468] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00129_.GIF", cAlternateFileName="")) returned 1 [0246.468] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0246.468] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0246.468] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0246.468] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0246.468] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0246.468] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0246.469] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00129_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0246.469] GetFileType (hFile=0x224) returned 0x1 [0246.469] CloseHandle (hObject=0x224) returned 1 [0246.469] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0246.469] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00129_.gif"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30c2)) returned 1 [0246.470] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0246.470] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0246.470] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0246.470] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1485, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00130_.GIF", cAlternateFileName="")) returned 1 [0246.470] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0246.470] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0246.470] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0246.470] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0246.470] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0246.470] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0246.471] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00130_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0246.471] GetFileType (hFile=0x224) returned 0x1 [0246.471] CloseHandle (hObject=0x224) returned 1 [0246.472] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0246.472] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00130_.gif"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1485)) returned 1 [0246.472] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0246.472] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0246.472] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0246.472] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa24, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00135_.GIF", cAlternateFileName="")) returned 1 [0246.472] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0246.472] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0246.472] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0246.472] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0246.473] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0246.473] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0246.473] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00135_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0246.473] GetFileType (hFile=0x224) returned 0x1 [0246.474] CloseHandle (hObject=0x224) returned 1 [0246.474] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0246.474] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00135_.gif"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa24)) returned 1 [0246.474] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0246.474] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0246.474] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0246.474] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x296f, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00139_.GIF", cAlternateFileName="")) returned 1 [0246.474] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0246.474] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0246.475] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0246.750] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0246.750] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0246.750] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0246.960] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00139_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0246.960] GetFileType (hFile=0x224) returned 0x1 [0246.961] CloseHandle (hObject=0x224) returned 1 [0246.961] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0246.961] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00139_.gif"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x296f)) returned 1 [0246.962] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0246.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0246.962] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0246.962] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3bcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00142_.GIF", cAlternateFileName="")) returned 1 [0246.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0246.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0246.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0246.962] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0246.963] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0246.963] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0246.963] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00142_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0246.964] GetFileType (hFile=0x224) returned 0x1 [0246.964] CloseHandle (hObject=0x224) returned 1 [0246.965] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0246.965] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00142_.gif"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3bcc)) returned 1 [0246.965] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0246.965] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0246.965] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0246.965] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00154_.GIF", cAlternateFileName="")) returned 1 [0246.965] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0246.965] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0246.966] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0246.966] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0246.966] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0246.966] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0246.967] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00154_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0246.967] GetFileType (hFile=0x224) returned 0x1 [0246.967] CloseHandle (hObject=0x224) returned 1 [0246.968] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0246.968] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00154_.gif"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14c3)) returned 1 [0246.968] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0246.968] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0246.968] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0246.968] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00157_.GIF", cAlternateFileName="")) returned 1 [0246.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0246.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0246.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0246.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0246.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0246.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0246.970] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00157_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0246.970] GetFileType (hFile=0x224) returned 0x1 [0246.971] CloseHandle (hObject=0x224) returned 1 [0246.971] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0246.971] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00157_.gif"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x135b)) returned 1 [0246.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0246.972] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0246.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0246.972] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00158_.GIF", cAlternateFileName="")) returned 1 [0246.972] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0246.972] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0246.972] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0246.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0246.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0246.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0246.974] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00158_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0246.974] GetFileType (hFile=0x224) returned 0x1 [0246.974] CloseHandle (hObject=0x224) returned 1 [0246.975] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0246.975] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00158_.gif"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13a6)) returned 1 [0246.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0246.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0246.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0246.976] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x47a, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00160_.GIF", cAlternateFileName="")) returned 1 [0246.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0246.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0246.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0246.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0246.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0246.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0246.977] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00160_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0246.977] GetFileType (hFile=0x224) returned 0x1 [0246.978] CloseHandle (hObject=0x224) returned 1 [0246.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0246.978] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00160_.gif"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x47a)) returned 1 [0246.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0246.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0246.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0246.979] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d9f, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00161_.GIF", cAlternateFileName="")) returned 1 [0246.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0246.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0246.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0246.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0246.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0246.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0246.980] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00161_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0246.980] GetFileType (hFile=0x224) returned 0x1 [0246.981] CloseHandle (hObject=0x224) returned 1 [0246.981] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0246.981] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00161_.gif"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d9f)) returned 1 [0246.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0246.981] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0246.982] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0246.982] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b48, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00163_.GIF", cAlternateFileName="")) returned 1 [0246.982] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0246.982] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2134e8 [0246.982] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0246.982] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2134e8 | out: hHeap=0x1f0000) returned 1 [0246.982] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0246.982] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0246.983] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00163_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0246.983] GetFileType (hFile=0x224) returned 0x1 [0246.983] CloseHandle (hObject=0x224) returned 1 [0246.984] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0246.984] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00163_.gif"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b48)) returned 1 [0246.984] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0246.984] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0246.984] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0246.984] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x33c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00164_.GIF", cAlternateFileName="")) returned 1 [0246.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0246.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0246.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0246.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0246.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0246.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0246.986] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00164_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0246.986] GetFileType (hFile=0x224) returned 0x1 [0246.986] CloseHandle (hObject=0x224) returned 1 [0246.987] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0246.987] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00164_.gif"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x33c6)) returned 1 [0246.987] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0246.987] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0246.987] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0246.987] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2186, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00165_.GIF", cAlternateFileName="")) returned 1 [0246.987] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0246.987] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0246.987] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0246.987] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0246.987] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0246.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0246.988] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00165_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0246.988] GetFileType (hFile=0x224) returned 0x1 [0246.989] CloseHandle (hObject=0x224) returned 1 [0246.989] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0246.989] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00165_.gif"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2186)) returned 1 [0246.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0246.989] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0246.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0246.990] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x131e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00167_.GIF", cAlternateFileName="")) returned 1 [0246.990] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0246.990] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e88 [0246.990] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0246.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e88 | out: hHeap=0x1f0000) returned 1 [0246.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0246.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0246.991] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00167_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0246.991] GetFileType (hFile=0x224) returned 0x1 [0246.991] CloseHandle (hObject=0x224) returned 1 [0246.992] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0246.992] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00167_.gif"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x131e)) returned 1 [0246.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0246.992] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0246.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0246.992] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00169_.GIF", cAlternateFileName="")) returned 1 [0246.992] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0246.992] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0246.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0246.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0246.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0246.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0246.993] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00169_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0246.993] GetFileType (hFile=0x224) returned 0x1 [0246.994] CloseHandle (hObject=0x224) returned 1 [0246.994] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0246.994] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00169_.gif"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14ff)) returned 1 [0246.994] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0246.994] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0246.994] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0246.994] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2420, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00170_.GIF", cAlternateFileName="")) returned 1 [0246.994] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0246.994] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0246.995] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0246.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0246.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0246.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0246.995] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00170_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0246.995] GetFileType (hFile=0x224) returned 0x1 [0246.996] CloseHandle (hObject=0x224) returned 1 [0246.996] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0246.996] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00170_.gif"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2420)) returned 1 [0246.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0246.996] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0246.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0246.996] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1398, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00171_.GIF", cAlternateFileName="")) returned 1 [0246.996] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0246.997] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0246.997] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0246.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0246.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0246.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0246.998] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00171_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0246.998] GetFileType (hFile=0x224) returned 0x1 [0246.998] CloseHandle (hObject=0x224) returned 1 [0246.998] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0246.998] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00171_.gif"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1398)) returned 1 [0246.999] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0246.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0246.999] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0246.999] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1126, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00172_.GIF", cAlternateFileName="")) returned 1 [0246.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0246.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e88 [0246.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0246.999] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e88 | out: hHeap=0x1f0000) returned 1 [0246.999] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0246.999] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0247.000] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00172_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0247.000] GetFileType (hFile=0x224) returned 0x1 [0247.000] CloseHandle (hObject=0x224) returned 1 [0247.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0247.001] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00172_.gif"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1126)) returned 1 [0247.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0247.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0247.002] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0247.002] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00174_.GIF", cAlternateFileName="")) returned 1 [0247.002] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0247.002] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0247.002] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0247.002] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0247.002] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0247.002] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0247.003] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00174_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0247.003] GetFileType (hFile=0x224) returned 0x1 [0247.003] CloseHandle (hObject=0x224) returned 1 [0247.004] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0247.004] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00174_.gif"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf7e)) returned 1 [0247.004] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0247.004] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0247.004] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0247.004] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd32, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00175_.GIF", cAlternateFileName="")) returned 1 [0247.004] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0247.005] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0247.005] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0247.005] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0247.005] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0247.005] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0247.006] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00175_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0247.444] GetFileType (hFile=0x224) returned 0x1 [0247.445] CloseHandle (hObject=0x224) returned 1 [0247.445] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0247.445] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00175_.gif"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd32)) returned 1 [0247.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0247.446] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0247.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0247.446] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc30, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00176_.GIF", cAlternateFileName="")) returned 1 [0247.446] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0247.446] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0247.447] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0247.447] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0247.447] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0247.447] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0247.448] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00176_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0247.448] GetFileType (hFile=0x224) returned 0x1 [0247.449] CloseHandle (hObject=0x224) returned 1 [0247.449] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0247.449] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00176_.gif"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc30)) returned 1 [0247.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0247.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0247.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0247.450] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00010_.WMF", cAlternateFileName="")) returned 1 [0247.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0247.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0247.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0247.451] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0247.451] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0247.451] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0247.452] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00010_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00010_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0247.452] GetFileType (hFile=0x224) returned 0x1 [0247.453] CloseHandle (hObject=0x224) returned 1 [0247.453] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0247.453] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00010_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00010_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbd2)) returned 1 [0247.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0247.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0247.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0247.454] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x127e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00015_.WMF", cAlternateFileName="")) returned 1 [0247.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0247.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0247.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0247.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0247.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0247.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0247.456] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00015_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0247.456] GetFileType (hFile=0x224) returned 0x1 [0247.456] CloseHandle (hObject=0x224) returned 1 [0247.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0247.457] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00015_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x127e)) returned 1 [0247.457] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0247.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0247.457] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0247.458] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1634, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00790_.WMF", cAlternateFileName="")) returned 1 [0247.458] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0247.458] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0247.458] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0247.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0247.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0247.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0247.460] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00790_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00790_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0247.460] GetFileType (hFile=0x224) returned 0x1 [0247.461] CloseHandle (hObject=0x224) returned 1 [0247.461] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0247.461] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00790_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00790_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1634)) returned 1 [0247.462] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0247.462] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0247.462] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0247.462] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5062, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00853_.WMF", cAlternateFileName="")) returned 1 [0247.462] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0247.462] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0247.462] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0247.463] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0247.463] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0247.463] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0247.464] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00853_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00853_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0247.464] GetFileType (hFile=0x224) returned 0x1 [0247.464] CloseHandle (hObject=0x224) returned 1 [0247.465] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0247.465] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00853_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00853_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5062)) returned 1 [0247.465] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0247.465] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0247.465] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0247.466] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a50, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00914_.WMF", cAlternateFileName="")) returned 1 [0247.466] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0247.466] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0247.466] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0247.466] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0247.466] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0247.466] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0247.467] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00914_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00914_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0247.467] GetFileType (hFile=0x224) returned 0x1 [0247.468] CloseHandle (hObject=0x224) returned 1 [0247.468] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0247.947] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00914_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00914_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a50)) returned 1 [0247.947] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0247.948] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0247.948] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0247.948] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x385c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00932_.WMF", cAlternateFileName="")) returned 1 [0247.948] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0247.948] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0247.948] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0247.948] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0247.948] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0247.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0247.949] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00932_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00932_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0247.950] GetFileType (hFile=0x1b0) returned 0x1 [0247.950] CloseHandle (hObject=0x1b0) returned 1 [0247.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0247.951] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00932_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00932_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x385c)) returned 1 [0247.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0247.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0247.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0247.952] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00965_.WMF", cAlternateFileName="")) returned 1 [0247.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0247.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0247.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0247.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0247.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0247.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0247.953] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00965_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00965_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0247.953] GetFileType (hFile=0x1b0) returned 0x1 [0247.954] CloseHandle (hObject=0x1b0) returned 1 [0247.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0247.954] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00965_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00965_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ba0)) returned 1 [0247.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0247.955] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0247.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0247.955] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd10, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01039_.WMF", cAlternateFileName="")) returned 1 [0247.955] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0247.955] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0247.955] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0247.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0247.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0247.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0247.956] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01039_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01039_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0247.957] GetFileType (hFile=0x1b0) returned 0x1 [0247.957] CloseHandle (hObject=0x1b0) returned 1 [0247.958] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0247.958] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01039_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01039_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd10)) returned 1 [0247.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0247.958] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0247.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0247.959] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x63c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01044_.WMF", cAlternateFileName="")) returned 1 [0247.959] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380f0 [0247.959] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2134e8 [0247.959] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0247.959] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2134e8 | out: hHeap=0x1f0000) returned 1 [0247.959] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0247.959] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380f0 | out: hHeap=0x1f0000) returned 1 [0247.960] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01044_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01044_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0247.961] GetFileType (hFile=0x1b0) returned 0x1 [0247.961] CloseHandle (hObject=0x1b0) returned 1 [0247.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0247.962] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01044_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01044_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x63c)) returned 1 [0247.962] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0247.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0247.963] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0247.963] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f20, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01060_.WMF", cAlternateFileName="")) returned 1 [0247.963] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0247.963] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0247.963] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0247.964] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0247.964] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0247.964] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0247.965] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01060_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01060_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0247.965] GetFileType (hFile=0x1b0) returned 0x1 [0247.966] CloseHandle (hObject=0x1b0) returned 1 [0247.966] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0247.966] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01060_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01060_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f20)) returned 1 [0247.967] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0247.967] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0247.967] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0247.967] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x728, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01084_.WMF", cAlternateFileName="")) returned 1 [0247.967] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0247.967] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0247.967] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0247.967] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0247.968] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0247.968] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0247.969] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01084_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01084_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0247.969] GetFileType (hFile=0x1b0) returned 0x1 [0247.970] CloseHandle (hObject=0x1b0) returned 1 [0247.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0247.970] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01084_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01084_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x728)) returned 1 [0247.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0247.971] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0247.971] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0247.971] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x66dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01173_.WMF", cAlternateFileName="")) returned 1 [0247.971] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0247.971] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0247.971] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0247.971] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0247.971] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0247.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0247.973] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01173_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0247.973] GetFileType (hFile=0x1b0) returned 0x1 [0247.973] CloseHandle (hObject=0x1b0) returned 1 [0247.974] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0247.974] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01173_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x66dc)) returned 1 [0247.974] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0247.974] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0247.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0247.975] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6cd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01174_.WMF", cAlternateFileName="")) returned 1 [0247.975] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0247.975] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0247.975] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0247.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0247.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0247.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0247.976] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01174_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0247.977] GetFileType (hFile=0x1b0) returned 0x1 [0247.977] CloseHandle (hObject=0x1b0) returned 1 [0247.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0247.978] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01174_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6cd2)) returned 1 [0247.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0247.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0247.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0247.979] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xea2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01184_.WMF", cAlternateFileName="")) returned 1 [0247.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0247.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0247.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0247.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0247.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0247.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0247.980] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01184_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0247.980] GetFileType (hFile=0x1b0) returned 0x1 [0247.981] CloseHandle (hObject=0x1b0) returned 1 [0247.981] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0247.981] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01184_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xea2)) returned 1 [0247.982] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0247.982] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0247.982] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0247.982] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01216_.WMF", cAlternateFileName="")) returned 1 [0247.982] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380f0 [0247.982] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0247.982] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0247.982] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0247.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0247.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380f0 | out: hHeap=0x1f0000) returned 1 [0247.983] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01216_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01216_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0247.984] GetFileType (hFile=0x1b0) returned 0x1 [0247.984] CloseHandle (hObject=0x1b0) returned 1 [0247.984] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0247.984] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01216_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01216_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16cc)) returned 1 [0247.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0247.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0247.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0247.985] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01218_.WMF", cAlternateFileName="")) returned 1 [0247.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0247.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0247.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0247.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0247.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0247.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0247.986] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01218_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01218_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0247.987] GetFileType (hFile=0x1b0) returned 0x1 [0247.987] CloseHandle (hObject=0x1b0) returned 1 [0247.987] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0247.988] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01218_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01218_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc4)) returned 1 [0247.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0247.988] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0247.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0247.988] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xac4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01251_.WMF", cAlternateFileName="")) returned 1 [0247.988] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0247.988] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0247.989] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0247.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0247.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0247.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0247.989] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01251_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01251_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0247.990] GetFileType (hFile=0x1b0) returned 0x1 [0247.990] CloseHandle (hObject=0x1b0) returned 1 [0247.991] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0247.991] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01251_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01251_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xac4)) returned 1 [0247.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0247.991] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0247.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0247.992] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ccc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01545_.WMF", cAlternateFileName="")) returned 1 [0247.992] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380f0 [0247.992] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0247.992] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0247.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0247.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0247.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380f0 | out: hHeap=0x1f0000) returned 1 [0247.993] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01545_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01545_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0248.471] GetFileType (hFile=0x210) returned 0x1 [0248.472] CloseHandle (hObject=0x210) returned 1 [0248.472] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0248.472] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01545_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01545_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ccc)) returned 1 [0248.472] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0248.473] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0248.473] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0248.473] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d74, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN02122_.WMF", cAlternateFileName="")) returned 1 [0248.473] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0248.473] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0248.473] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0248.473] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0248.473] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0248.473] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0248.474] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02122_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02122_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0248.474] GetFileType (hFile=0x210) returned 0x1 [0248.475] CloseHandle (hObject=0x210) returned 1 [0248.475] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0248.475] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02122_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02122_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d74)) returned 1 [0248.475] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0248.475] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0248.475] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0248.476] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN02559_.WMF", cAlternateFileName="")) returned 1 [0248.476] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0248.476] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0248.476] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0248.476] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0248.476] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0248.476] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0248.476] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02559_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02559_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0248.477] GetFileType (hFile=0x210) returned 0x1 [0248.477] CloseHandle (hObject=0x210) returned 1 [0248.477] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0248.477] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02559_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02559_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19e8)) returned 1 [0248.477] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0248.477] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0248.478] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0248.478] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc89dc9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x83c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN02724_.WMF", cAlternateFileName="")) returned 1 [0248.478] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0248.478] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0248.478] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0248.478] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0248.478] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0248.478] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0248.479] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02724_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02724_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0248.479] GetFileType (hFile=0x210) returned 0x1 [0248.479] CloseHandle (hObject=0x210) returned 1 [0248.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0248.480] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02724_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02724_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc89dc9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x83c)) returned 1 [0248.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0248.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0248.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0248.480] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2418, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN03500_.WMF", cAlternateFileName="")) returned 1 [0248.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0248.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0248.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0248.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0248.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0248.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0248.481] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN03500_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an03500_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0248.481] GetFileType (hFile=0x210) returned 0x1 [0248.481] CloseHandle (hObject=0x210) returned 1 [0248.481] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0248.482] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN03500_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an03500_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2418)) returned 1 [0248.482] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0248.482] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0248.482] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0248.482] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x928, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04108_.WMF", cAlternateFileName="")) returned 1 [0248.482] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238348 [0248.482] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213570 [0248.482] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0248.482] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213570 | out: hHeap=0x1f0000) returned 1 [0248.482] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0248.483] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238348 | out: hHeap=0x1f0000) returned 1 [0248.483] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04108_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04108_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0248.483] GetFileType (hFile=0x210) returned 0x1 [0248.484] CloseHandle (hObject=0x210) returned 1 [0248.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0248.484] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04108_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04108_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x928)) returned 1 [0248.484] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0248.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0248.484] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0248.484] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04117_.WMF", cAlternateFileName="")) returned 1 [0248.485] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0248.485] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0248.485] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0248.485] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0248.485] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0248.485] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0248.485] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04117_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04117_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0248.485] GetFileType (hFile=0x210) returned 0x1 [0248.486] CloseHandle (hObject=0x210) returned 1 [0248.486] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0248.486] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04117_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04117_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17ac)) returned 1 [0248.486] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0248.486] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0248.486] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0248.487] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd58, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04134_.WMF", cAlternateFileName="")) returned 1 [0248.487] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0248.487] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213570 [0248.487] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0248.487] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213570 | out: hHeap=0x1f0000) returned 1 [0248.487] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0248.487] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0248.488] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04134_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04134_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0248.488] GetFileType (hFile=0x210) returned 0x1 [0248.488] CloseHandle (hObject=0x210) returned 1 [0248.489] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0248.489] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04134_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04134_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd58)) returned 1 [0248.489] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0248.489] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0248.489] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0248.489] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04174_.WMF", cAlternateFileName="")) returned 1 [0248.489] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0248.489] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213570 [0248.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0248.490] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213570 | out: hHeap=0x1f0000) returned 1 [0248.490] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0248.490] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0248.491] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04174_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0248.491] GetFileType (hFile=0x210) returned 0x1 [0248.491] CloseHandle (hObject=0x210) returned 1 [0248.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0248.492] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04174_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa4c)) returned 1 [0248.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0248.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0248.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0248.492] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04191_.WMF", cAlternateFileName="")) returned 1 [0248.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0248.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213570 [0248.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0248.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213570 | out: hHeap=0x1f0000) returned 1 [0248.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0248.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0248.494] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04191_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04191_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0248.494] GetFileType (hFile=0x210) returned 0x1 [0248.495] CloseHandle (hObject=0x210) returned 1 [0248.495] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0248.495] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04191_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04191_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19ec)) returned 1 [0248.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0248.495] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0248.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0248.496] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1204, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04195_.WMF", cAlternateFileName="")) returned 1 [0248.496] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0248.496] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0248.496] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0248.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0248.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0248.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0248.497] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04195_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04195_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0248.497] GetFileType (hFile=0x210) returned 0x1 [0248.497] CloseHandle (hObject=0x210) returned 1 [0248.498] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0248.498] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04195_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04195_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1204)) returned 1 [0248.498] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0248.498] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0248.498] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0248.498] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc48, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04196_.WMF", cAlternateFileName="")) returned 1 [0248.498] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0248.498] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0248.498] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0248.498] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0248.499] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0248.499] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0248.499] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04196_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04196_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0248.499] GetFileType (hFile=0x210) returned 0x1 [0248.500] CloseHandle (hObject=0x210) returned 1 [0248.500] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0248.500] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04196_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04196_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc48)) returned 1 [0248.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0248.501] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0248.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0248.501] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1df4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04206_.WMF", cAlternateFileName="")) returned 1 [0248.501] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0248.501] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0248.501] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0248.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0248.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0248.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0248.502] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04206_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04206_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0248.502] GetFileType (hFile=0x210) returned 0x1 [0248.503] CloseHandle (hObject=0x210) returned 1 [0248.503] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0248.503] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04206_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04206_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1df4)) returned 1 [0248.503] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0248.503] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0248.503] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0248.504] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x212c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04225_.WMF", cAlternateFileName="")) returned 1 [0248.504] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0248.504] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0248.504] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0248.504] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0248.504] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0248.504] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0248.505] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04225_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04225_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0248.505] GetFileType (hFile=0x210) returned 0x1 [0248.506] CloseHandle (hObject=0x210) returned 1 [0248.506] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0248.506] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04225_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04225_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x212c)) returned 1 [0248.506] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0248.506] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0248.506] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0248.506] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04235_.WMF", cAlternateFileName="")) returned 1 [0248.507] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0248.507] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0248.507] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0248.507] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0248.507] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0248.507] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0248.508] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04235_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04235_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0248.508] GetFileType (hFile=0x210) returned 0x1 [0248.509] CloseHandle (hObject=0x210) returned 1 [0248.509] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0249.060] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04235_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04235_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e7c)) returned 1 [0249.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0249.060] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0249.061] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0249.061] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc89dc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc89dc9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04267_.WMF", cAlternateFileName="")) returned 1 [0249.061] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238348 [0249.061] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0249.061] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0249.061] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0249.061] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0249.061] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238348 | out: hHeap=0x1f0000) returned 1 [0249.062] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04267_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04267_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0249.062] GetFileType (hFile=0x200) returned 0x1 [0249.064] CloseHandle (hObject=0x200) returned 1 [0249.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0249.064] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04267_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04267_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc89dc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc89dc9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e7c)) returned 1 [0249.065] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0249.065] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0249.065] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0249.065] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04269_.WMF", cAlternateFileName="")) returned 1 [0249.065] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0249.065] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0249.065] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0249.065] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0249.065] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0249.065] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0249.066] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04269_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04269_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0249.066] GetFileType (hFile=0x200) returned 0x1 [0249.066] CloseHandle (hObject=0x200) returned 1 [0249.067] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0249.067] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04269_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04269_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e0)) returned 1 [0249.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0249.067] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0249.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0249.067] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04323_.WMF", cAlternateFileName="")) returned 1 [0249.067] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0249.067] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e88 [0249.067] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0249.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e88 | out: hHeap=0x1f0000) returned 1 [0249.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0249.068] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0249.068] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04323_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04323_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0249.068] GetFileType (hFile=0x200) returned 0x1 [0249.068] CloseHandle (hObject=0x200) returned 1 [0249.069] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0249.069] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04323_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04323_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9bc)) returned 1 [0249.069] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0249.069] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0249.069] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0249.069] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc89dc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc89dc9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd14, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04326_.WMF", cAlternateFileName="")) returned 1 [0249.069] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0249.069] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0249.069] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0249.069] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0249.069] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0249.070] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0249.070] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04326_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04326_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0249.070] GetFileType (hFile=0x200) returned 0x1 [0249.070] CloseHandle (hObject=0x200) returned 1 [0249.071] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0249.071] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04326_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04326_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc89dc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc89dc9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd14)) returned 1 [0249.071] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0249.071] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0249.071] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0249.071] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04332_.WMF", cAlternateFileName="")) returned 1 [0249.071] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0249.071] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0249.071] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0249.071] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0249.071] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0249.071] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0249.072] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04332_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04332_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0249.072] GetFileType (hFile=0x200) returned 0x1 [0249.073] CloseHandle (hObject=0x200) returned 1 [0249.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0249.073] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04332_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04332_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10c8)) returned 1 [0249.073] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0249.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0249.073] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0249.073] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04355_.WMF", cAlternateFileName="")) returned 1 [0249.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0249.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0249.074] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0249.074] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0249.074] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0249.074] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0249.074] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04355_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04355_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0249.075] GetFileType (hFile=0x200) returned 0x1 [0249.075] CloseHandle (hObject=0x200) returned 1 [0249.075] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0249.075] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04355_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04355_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc9c)) returned 1 [0249.075] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0249.076] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0249.076] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0249.076] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04369_.WMF", cAlternateFileName="")) returned 1 [0249.076] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0249.076] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213570 [0249.076] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0249.076] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213570 | out: hHeap=0x1f0000) returned 1 [0249.076] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0249.076] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0249.077] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04369_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04369_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0249.077] GetFileType (hFile=0x200) returned 0x1 [0249.077] CloseHandle (hObject=0x200) returned 1 [0249.078] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0249.078] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04369_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04369_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12c8)) returned 1 [0249.078] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0249.078] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0249.078] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0249.078] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1384, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04384_.WMF", cAlternateFileName="")) returned 1 [0249.078] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0249.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0249.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0249.079] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0249.079] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0249.079] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0249.080] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04384_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04384_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0249.080] GetFileType (hFile=0x200) returned 0x1 [0249.080] CloseHandle (hObject=0x200) returned 1 [0249.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0249.081] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04384_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04384_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1384)) returned 1 [0249.081] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0249.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0249.081] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0249.081] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x138c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04385_.WMF", cAlternateFileName="")) returned 1 [0249.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0249.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0249.082] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0249.082] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0249.082] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0249.082] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0249.083] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04385_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04385_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0249.083] GetFileType (hFile=0x200) returned 0x1 [0249.083] CloseHandle (hObject=0x200) returned 1 [0249.083] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0249.084] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04385_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04385_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x138c)) returned 1 [0249.084] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0249.084] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0249.084] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0249.084] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1cd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BABY_01.MID", cAlternateFileName="")) returned 1 [0249.084] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0249.084] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e88 [0249.084] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0249.084] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e88 | out: hHeap=0x1f0000) returned 1 [0249.084] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0249.085] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0249.085] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BABY_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\baby_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0249.085] GetFileType (hFile=0x200) returned 0x1 [0249.086] CloseHandle (hObject=0x200) returned 1 [0249.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0249.086] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BABY_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\baby_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1cd8)) returned 1 [0249.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0249.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0249.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0249.086] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1306, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00116_.WMF", cAlternateFileName="")) returned 1 [0249.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0249.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0249.087] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0249.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0249.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0249.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0249.087] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00116_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00116_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0249.088] GetFileType (hFile=0x200) returned 0x1 [0249.088] CloseHandle (hObject=0x200) returned 1 [0249.088] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0249.088] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00116_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00116_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1306)) returned 1 [0249.089] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0249.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0249.089] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0249.089] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6906, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00141_.WMF", cAlternateFileName="")) returned 1 [0249.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0249.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0249.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0249.089] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0249.089] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0249.089] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0249.090] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00141_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00141_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0249.090] GetFileType (hFile=0x200) returned 0x1 [0249.090] CloseHandle (hObject=0x200) returned 1 [0249.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0249.090] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00141_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00141_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6906)) returned 1 [0249.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0249.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0249.091] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0249.091] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7114, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00146_.WMF", cAlternateFileName="")) returned 1 [0249.091] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0249.091] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0249.091] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0249.091] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0249.091] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0249.091] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0249.091] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00146_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00146_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0249.092] GetFileType (hFile=0x200) returned 0x1 [0249.092] CloseHandle (hObject=0x200) returned 1 [0249.092] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0249.092] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00146_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00146_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7114)) returned 1 [0249.092] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0249.092] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0249.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0249.093] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d74, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00155_.WMF", cAlternateFileName="")) returned 1 [0249.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0249.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0249.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0249.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0249.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0249.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0249.093] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00155_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00155_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0249.093] GetFileType (hFile=0x200) returned 0x1 [0249.094] CloseHandle (hObject=0x200) returned 1 [0249.094] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0249.094] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00155_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00155_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d74)) returned 1 [0249.094] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0249.094] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0249.094] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0249.094] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x57f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00160_.WMF", cAlternateFileName="")) returned 1 [0249.094] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0249.095] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0249.095] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0249.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0249.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0249.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0249.095] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00160_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00160_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0249.095] GetFileType (hFile=0x200) returned 0x1 [0249.096] CloseHandle (hObject=0x200) returned 1 [0249.096] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0249.096] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00160_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00160_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x57f4)) returned 1 [0249.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0249.096] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0249.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0249.096] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3f34, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00173_.WMF", cAlternateFileName="")) returned 1 [0249.096] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0249.096] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0249.097] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0249.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0249.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0249.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0249.097] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00173_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0249.097] GetFileType (hFile=0x200) returned 0x1 [0249.098] CloseHandle (hObject=0x200) returned 1 [0249.098] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0249.098] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00173_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3f34)) returned 1 [0249.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0249.098] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0249.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0249.098] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4354, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD05119_.WMF", cAlternateFileName="")) returned 1 [0249.098] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0249.098] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0249.098] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0249.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0249.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0249.099] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0249.099] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD05119_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd05119_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0249.099] GetFileType (hFile=0x200) returned 0x1 [0249.099] CloseHandle (hObject=0x200) returned 1 [0249.099] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0249.100] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD05119_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd05119_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4354)) returned 1 [0249.100] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0249.100] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0249.100] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0249.100] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ef0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD06102_.WMF", cAlternateFileName="")) returned 1 [0249.100] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0249.100] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0249.100] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0249.100] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0249.100] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0249.100] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0249.101] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06102_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06102_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0249.101] GetFileType (hFile=0x200) returned 0x1 [0249.101] CloseHandle (hObject=0x200) returned 1 [0249.362] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0249.362] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06102_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06102_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ef0)) returned 1 [0249.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0249.362] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0249.363] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0249.363] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4124, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD06200_.WMF", cAlternateFileName="")) returned 1 [0249.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0249.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0249.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0249.363] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0249.363] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0249.364] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0249.364] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06200_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06200_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0249.365] GetFileType (hFile=0x200) returned 0x1 [0249.365] CloseHandle (hObject=0x200) returned 1 [0249.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0249.366] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06200_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06200_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4124)) returned 1 [0249.366] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0249.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0249.366] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0249.367] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x687c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD07761_.WMF", cAlternateFileName="")) returned 1 [0249.367] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0249.367] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0249.367] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0249.367] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0249.367] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0249.367] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0249.368] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07761_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07761_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0249.368] GetFileType (hFile=0x200) returned 0x1 [0249.369] CloseHandle (hObject=0x200) returned 1 [0249.372] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0249.372] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07761_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07761_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x687c)) returned 1 [0249.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0249.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0249.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0249.373] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x133c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD07804_.WMF", cAlternateFileName="")) returned 1 [0249.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238348 [0249.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0249.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0249.374] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0249.374] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0249.374] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238348 | out: hHeap=0x1f0000) returned 1 [0249.375] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07804_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07804_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0249.375] GetFileType (hFile=0x200) returned 0x1 [0249.376] CloseHandle (hObject=0x200) returned 1 [0249.376] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0249.376] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07804_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07804_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x133c)) returned 1 [0249.376] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0249.377] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0249.377] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0249.377] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD07831_.WMF", cAlternateFileName="")) returned 1 [0249.377] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0249.377] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0249.377] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0249.377] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0249.378] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0249.378] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0249.379] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07831_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07831_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0249.379] GetFileType (hFile=0x200) returned 0x1 [0249.379] CloseHandle (hObject=0x200) returned 1 [0249.380] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0249.380] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07831_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07831_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfe2)) returned 1 [0249.380] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0249.380] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0249.380] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0249.380] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5f00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD08758_.WMF", cAlternateFileName="")) returned 1 [0249.381] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0249.381] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0249.381] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0249.381] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0249.381] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0249.381] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0249.382] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08758_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08758_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0249.382] GetFileType (hFile=0x200) returned 0x1 [0249.383] CloseHandle (hObject=0x200) returned 1 [0249.383] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0249.383] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08758_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08758_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5f00)) returned 1 [0249.383] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0249.384] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0249.384] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0249.384] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x60ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD08773_.WMF", cAlternateFileName="")) returned 1 [0249.384] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0249.384] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0249.385] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0249.385] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0249.385] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0249.385] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0249.386] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08773_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08773_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0249.386] GetFileType (hFile=0x200) returned 0x1 [0249.386] CloseHandle (hObject=0x200) returned 1 [0249.387] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0249.387] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08773_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08773_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x60ca)) returned 1 [0249.387] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0249.387] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0249.387] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0249.387] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbb7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD08808_.WMF", cAlternateFileName="")) returned 1 [0249.387] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0249.388] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0249.388] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0249.388] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0249.388] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0249.388] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0249.389] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08808_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08808_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0249.389] GetFileType (hFile=0x200) returned 0x1 [0249.389] CloseHandle (hObject=0x200) returned 1 [0249.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0249.390] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08808_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08808_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbb7c)) returned 1 [0249.390] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0249.390] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0249.390] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0249.390] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9d0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD08868_.WMF", cAlternateFileName="")) returned 1 [0249.390] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0249.390] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0249.390] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0249.390] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0249.390] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0249.391] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0249.391] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08868_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08868_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0249.391] GetFileType (hFile=0x200) returned 0x1 [0249.392] CloseHandle (hObject=0x200) returned 1 [0249.392] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0249.392] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08868_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08868_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9d0e)) returned 1 [0249.392] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0249.392] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0249.392] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0249.392] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd4897d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd4897d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbaaa, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD09031_.WMF", cAlternateFileName="")) returned 1 [0249.393] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0249.393] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0249.393] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0249.393] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0249.393] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0249.393] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0249.393] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09031_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09031_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0249.394] GetFileType (hFile=0x200) returned 0x1 [0249.394] CloseHandle (hObject=0x200) returned 1 [0249.394] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0249.395] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09031_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09031_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd4897d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd4897d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbaaa)) returned 1 [0249.395] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0249.395] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0249.395] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0249.395] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x38cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD09194_.WMF", cAlternateFileName="")) returned 1 [0249.395] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0249.395] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213570 [0249.395] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0249.395] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213570 | out: hHeap=0x1f0000) returned 1 [0249.396] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0249.396] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0249.396] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09194_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09194_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0249.396] GetFileType (hFile=0x200) returned 0x1 [0249.397] CloseHandle (hObject=0x200) returned 1 [0249.397] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0249.397] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09194_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09194_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x38cc)) returned 1 [0249.398] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0249.398] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0249.398] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0249.398] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x504a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD09662_.WMF", cAlternateFileName="")) returned 1 [0249.398] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0249.398] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213570 [0249.398] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0249.398] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213570 | out: hHeap=0x1f0000) returned 1 [0249.398] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0249.399] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0249.399] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09662_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09662_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0249.399] GetFileType (hFile=0x200) returned 0x1 [0249.651] CloseHandle (hObject=0x200) returned 1 [0249.651] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0249.651] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09662_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09662_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x504a)) returned 1 [0249.652] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0249.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0249.652] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0249.652] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD09664_.WMF", cAlternateFileName="")) returned 1 [0249.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0249.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0249.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0249.653] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0249.653] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0249.653] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0249.654] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09664_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09664_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0249.654] GetFileType (hFile=0x200) returned 0x1 [0249.654] CloseHandle (hObject=0x200) returned 1 [0249.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0249.655] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09664_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09664_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f1e)) returned 1 [0249.655] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0249.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0249.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0249.656] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x34cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10890_.GIF", cAlternateFileName="")) returned 1 [0249.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0249.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0249.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0249.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0249.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0249.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0249.657] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10890_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0249.657] GetFileType (hFile=0x200) returned 0x1 [0249.658] CloseHandle (hObject=0x200) returned 1 [0249.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0249.659] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10890_.gif"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x34cb)) returned 1 [0249.659] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0249.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0249.659] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0249.659] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4edd, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10972_.GIF", cAlternateFileName="")) returned 1 [0249.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0249.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0249.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0249.660] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0249.660] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0249.660] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0249.661] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10972_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0249.662] GetFileType (hFile=0x200) returned 0x1 [0249.662] CloseHandle (hObject=0x200) returned 1 [0249.663] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0249.663] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10972_.gif"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4edd)) returned 1 [0249.663] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0249.663] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0249.664] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0249.664] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4fe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19563_.GIF", cAlternateFileName="")) returned 1 [0249.664] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0249.664] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0249.664] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0249.664] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0249.664] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0249.665] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0249.668] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19563_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0249.669] GetFileType (hFile=0x200) returned 0x1 [0249.669] CloseHandle (hObject=0x200) returned 1 [0249.670] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0249.670] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19563_.gif"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4fe6)) returned 1 [0249.670] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0249.670] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0249.670] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0249.670] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d75, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19582_.GIF", cAlternateFileName="")) returned 1 [0249.670] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0249.670] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0249.671] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0249.671] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0249.671] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0249.671] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0249.672] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19582_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0249.672] GetFileType (hFile=0x200) returned 0x1 [0249.673] CloseHandle (hObject=0x200) returned 1 [0249.673] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0249.673] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19582_.gif"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d75)) returned 1 [0249.674] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0249.674] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0249.674] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0249.674] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19695_.WMF", cAlternateFileName="")) returned 1 [0249.674] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0249.674] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0249.674] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0249.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0249.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0249.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0249.676] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19695_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19695_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0249.676] GetFileType (hFile=0x200) returned 0x1 [0249.676] CloseHandle (hObject=0x200) returned 1 [0249.677] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0249.677] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19695_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19695_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32b6)) returned 1 [0249.677] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0249.677] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0249.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0249.678] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x25ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19827_.WMF", cAlternateFileName="")) returned 1 [0249.678] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0249.678] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0249.678] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0249.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0249.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0249.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0249.679] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19827_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19827_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0249.679] GetFileType (hFile=0x200) returned 0x1 [0249.680] CloseHandle (hObject=0x200) returned 1 [0249.680] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0249.680] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19827_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19827_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x25ee)) returned 1 [0249.680] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0249.681] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0249.681] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0249.681] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2244, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19828_.WMF", cAlternateFileName="")) returned 1 [0249.682] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0249.682] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0249.682] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0249.682] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0249.682] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0249.682] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0249.683] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19828_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19828_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0249.683] GetFileType (hFile=0x200) returned 0x1 [0249.684] CloseHandle (hObject=0x200) returned 1 [0249.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0249.684] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19828_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19828_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2244)) returned 1 [0249.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0249.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0249.685] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0249.685] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3896, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19986_.WMF", cAlternateFileName="")) returned 1 [0249.685] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0249.685] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0249.685] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0249.685] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0249.685] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0249.685] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0249.686] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19986_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19986_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0249.686] GetFileType (hFile=0x200) returned 0x1 [0249.686] CloseHandle (hObject=0x200) returned 1 [0249.687] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0249.687] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19986_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19986_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3896)) returned 1 [0249.687] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0249.687] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0249.687] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0249.687] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4780, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19988_.WMF", cAlternateFileName="")) returned 1 [0249.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0249.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0249.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0249.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0249.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0249.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0249.689] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19988_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19988_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0249.689] GetFileType (hFile=0x200) returned 0x1 [0249.689] CloseHandle (hObject=0x200) returned 1 [0249.690] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0249.690] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19988_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19988_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4780)) returned 1 [0249.690] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0249.690] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0249.690] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0249.690] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b32, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD20013_.WMF", cAlternateFileName="")) returned 1 [0249.690] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0249.690] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0249.691] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0249.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0249.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0249.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0249.691] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD20013_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd20013_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0249.692] GetFileType (hFile=0x200) returned 0x1 [0249.692] CloseHandle (hObject=0x200) returned 1 [0249.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0249.692] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD20013_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd20013_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b32)) returned 1 [0249.692] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0249.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0249.693] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0249.693] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00008_.WMF", cAlternateFileName="")) returned 1 [0249.693] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0249.693] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0249.693] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0249.693] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0249.693] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0249.693] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0249.693] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00008_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00008_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0249.694] GetFileType (hFile=0x200) returned 0x1 [0249.694] CloseHandle (hObject=0x200) returned 1 [0249.694] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0249.694] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00008_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00008_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30e8)) returned 1 [0249.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0249.695] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0249.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0249.695] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd4897d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd4897d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x265a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00012_.WMF", cAlternateFileName="")) returned 1 [0249.696] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0249.696] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e88 [0249.696] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0249.696] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e88 | out: hHeap=0x1f0000) returned 1 [0249.696] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0249.696] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0249.697] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00012_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00012_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0250.104] GetFileType (hFile=0x230) returned 0x1 [0250.104] CloseHandle (hObject=0x230) returned 1 [0250.105] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0250.105] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00012_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00012_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd4897d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd4897d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x265a)) returned 1 [0250.105] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0250.105] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0250.106] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0250.106] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1eb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00045_.WMF", cAlternateFileName="")) returned 1 [0250.106] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0250.106] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0250.107] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0250.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0250.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0250.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0250.108] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00045_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00045_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0250.108] GetFileType (hFile=0x230) returned 0x1 [0250.109] CloseHandle (hObject=0x230) returned 1 [0250.109] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0250.109] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00045_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00045_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1eb6)) returned 1 [0250.109] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0250.109] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0250.109] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0250.110] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00098_.WMF", cAlternateFileName="")) returned 1 [0250.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0250.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0250.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0250.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0250.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0250.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0250.111] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00098_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00098_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0250.111] GetFileType (hFile=0x230) returned 0x1 [0250.112] CloseHandle (hObject=0x230) returned 1 [0250.112] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0250.112] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00098_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00098_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3f4)) returned 1 [0250.113] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0250.113] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0250.113] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0250.113] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd4897d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd4897d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x370, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00105_.WMF", cAlternateFileName="")) returned 1 [0250.113] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0250.113] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0250.113] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0250.113] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0250.114] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0250.114] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0250.114] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00105_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00105_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0250.115] GetFileType (hFile=0x230) returned 0x1 [0250.115] CloseHandle (hObject=0x230) returned 1 [0250.116] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0250.116] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00105_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00105_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd4897d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd4897d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x370)) returned 1 [0250.116] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0250.116] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0250.116] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0250.116] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd4897d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd4897d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00122_.WMF", cAlternateFileName="")) returned 1 [0250.117] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0250.117] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0250.117] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0250.117] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0250.117] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0250.117] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0250.118] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00122_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00122_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0250.118] GetFileType (hFile=0x230) returned 0x1 [0250.119] CloseHandle (hObject=0x230) returned 1 [0250.120] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0250.120] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00122_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00122_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd4897d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd4897d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27a2)) returned 1 [0250.120] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0250.120] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0250.120] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0250.120] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd5c704c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd5c704c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00130_.WMF", cAlternateFileName="")) returned 1 [0250.120] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0250.121] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0250.121] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0250.121] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0250.121] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0250.121] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0250.122] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00130_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00130_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0250.122] GetFileType (hFile=0x230) returned 0x1 [0250.123] CloseHandle (hObject=0x230) returned 1 [0250.123] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0250.124] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00130_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00130_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd5c704c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd5c704c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5b8)) returned 1 [0250.124] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0250.124] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0250.124] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0250.124] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcdbb058, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcdbb058, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd5c704c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00148_.WMF", cAlternateFileName="")) returned 1 [0250.124] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0250.124] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0250.125] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0250.125] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0250.125] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0250.125] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0250.126] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00148_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00148_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0250.126] GetFileType (hFile=0x230) returned 0x1 [0250.127] CloseHandle (hObject=0x230) returned 1 [0250.127] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0250.128] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00148_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00148_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcdbb058, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcdbb058, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd5c704c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6a0)) returned 1 [0250.128] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0250.128] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0250.128] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0250.128] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcdbb058, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcdbb058, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd5c704c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00152_.WMF", cAlternateFileName="")) returned 1 [0250.128] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0250.128] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213570 [0250.128] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0250.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213570 | out: hHeap=0x1f0000) returned 1 [0250.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0250.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0250.130] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00152_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00152_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0250.130] GetFileType (hFile=0x230) returned 0x1 [0250.130] CloseHandle (hObject=0x230) returned 1 [0250.131] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0250.131] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00152_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00152_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcdbb058, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcdbb058, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd5c704c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5ec)) returned 1 [0250.131] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0250.131] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0250.131] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0250.131] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcdbb058, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf92, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00194_.WMF", cAlternateFileName="")) returned 1 [0250.132] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0250.132] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0250.132] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0250.132] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0250.132] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0250.132] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0250.133] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00194_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00194_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0250.133] GetFileType (hFile=0x230) returned 0x1 [0250.133] CloseHandle (hObject=0x230) returned 1 [0250.134] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0250.134] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00194_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00194_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcdbb058, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf92)) returned 1 [0250.134] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0250.134] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0250.136] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0250.136] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcdbb058, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f86, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00195_.WMF", cAlternateFileName="")) returned 1 [0250.136] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0250.136] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0250.136] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0250.136] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0250.136] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0250.136] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0250.137] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00195_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00195_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0250.137] GetFileType (hFile=0x230) returned 0x1 [0250.138] CloseHandle (hObject=0x230) returned 1 [0250.138] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0250.139] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00195_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00195_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcdbb058, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f86)) returned 1 [0250.139] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0250.139] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0250.139] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0250.139] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2458, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00234_.WMF", cAlternateFileName="")) returned 1 [0250.139] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0250.140] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e88 [0250.140] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0250.140] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e88 | out: hHeap=0x1f0000) returned 1 [0250.140] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0250.140] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0250.141] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00234_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00234_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0250.141] GetFileType (hFile=0x230) returned 0x1 [0250.142] CloseHandle (hObject=0x230) returned 1 [0250.142] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0250.142] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00234_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00234_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2458)) returned 1 [0250.143] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0250.143] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0250.143] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0250.143] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd5c704c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00242_.WMF", cAlternateFileName="")) returned 1 [0250.143] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0250.143] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213570 [0250.143] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0250.144] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213570 | out: hHeap=0x1f0000) returned 1 [0250.144] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0250.144] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0250.145] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00242_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00242_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0250.145] GetFileType (hFile=0x230) returned 0x1 [0250.146] CloseHandle (hObject=0x230) returned 1 [0250.146] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0250.146] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00242_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00242_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd5c704c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfb8)) returned 1 [0250.146] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0250.146] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0250.147] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0250.147] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcdbb058, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x386c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00247_.WMF", cAlternateFileName="")) returned 1 [0250.147] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0250.147] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0250.147] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0250.147] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0250.147] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0250.147] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0250.148] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00247_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00247_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0250.149] GetFileType (hFile=0x230) returned 0x1 [0250.149] CloseHandle (hObject=0x230) returned 1 [0250.150] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0250.150] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00247_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00247_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcdbb058, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x386c)) returned 1 [0250.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0250.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0250.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0250.358] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x600, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00248_.WMF", cAlternateFileName="")) returned 1 [0250.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0250.359] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e88 [0250.359] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0250.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e88 | out: hHeap=0x1f0000) returned 1 [0250.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0250.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0250.360] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00248_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00248_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0250.360] GetFileType (hFile=0x200) returned 0x1 [0250.361] CloseHandle (hObject=0x200) returned 1 [0250.361] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0250.361] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00248_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00248_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x600)) returned 1 [0250.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0250.361] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0250.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0250.362] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcdbb058, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1264, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00252_.WMF", cAlternateFileName="")) returned 1 [0250.362] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0250.362] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213570 [0250.362] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0250.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213570 | out: hHeap=0x1f0000) returned 1 [0250.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0250.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0250.363] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00252_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00252_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0250.363] GetFileType (hFile=0x200) returned 0x1 [0250.364] CloseHandle (hObject=0x200) returned 1 [0250.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0250.364] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00252_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00252_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcdbb058, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1264)) returned 1 [0250.364] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0250.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0250.365] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0250.365] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd685b3d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00254_.WMF", cAlternateFileName="")) returned 1 [0250.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0250.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0250.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0250.365] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0250.365] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0250.365] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0250.366] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00254_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00254_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0250.366] GetFileType (hFile=0x200) returned 0x1 [0250.367] CloseHandle (hObject=0x200) returned 1 [0250.367] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0250.367] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00254_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00254_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd685b3d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6c8)) returned 1 [0250.367] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0250.367] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0250.368] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0250.368] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00261_.WMF", cAlternateFileName="")) returned 1 [0250.368] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0250.368] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0250.368] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0250.368] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0250.368] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0250.368] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0250.369] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00261_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00261_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0250.370] GetFileType (hFile=0x200) returned 0x1 [0250.370] CloseHandle (hObject=0x200) returned 1 [0250.371] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0250.371] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00261_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00261_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30c2)) returned 1 [0250.371] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0250.371] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0250.371] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0250.371] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00262_.WMF", cAlternateFileName="")) returned 1 [0250.371] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0250.371] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0250.372] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0250.372] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0250.372] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0250.372] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0250.373] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00262_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00262_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0250.373] GetFileType (hFile=0x200) returned 0x1 [0250.373] CloseHandle (hObject=0x200) returned 1 [0250.374] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0250.374] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00262_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00262_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9fc)) returned 1 [0250.374] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0250.374] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0250.374] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0250.374] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1678, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00265_.WMF", cAlternateFileName="")) returned 1 [0250.375] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0250.375] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0250.375] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0250.375] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0250.375] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0250.375] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0250.376] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00265_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00265_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0250.376] GetFileType (hFile=0x200) returned 0x1 [0250.376] CloseHandle (hObject=0x200) returned 1 [0250.377] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0250.377] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00265_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00265_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1678)) returned 1 [0250.377] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0250.377] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0250.377] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0250.377] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa54, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00267_.WMF", cAlternateFileName="")) returned 1 [0250.378] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0250.378] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213570 [0250.378] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0250.378] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213570 | out: hHeap=0x1f0000) returned 1 [0250.378] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0250.378] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0250.379] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00267_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00267_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0250.379] GetFileType (hFile=0x200) returned 0x1 [0250.379] CloseHandle (hObject=0x200) returned 1 [0250.380] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0250.380] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00267_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00267_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa54)) returned 1 [0250.380] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0250.380] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0250.380] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0250.380] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd5c704c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd5c704c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd5c704c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1498, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00269_.WMF", cAlternateFileName="")) returned 1 [0250.380] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0250.380] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0250.380] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0250.381] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0250.381] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0250.381] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0250.381] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00269_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00269_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0250.382] GetFileType (hFile=0x200) returned 0x1 [0250.382] CloseHandle (hObject=0x200) returned 1 [0250.383] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0250.383] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00269_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00269_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd5c704c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd5c704c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd5c704c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1498)) returned 1 [0250.383] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0250.383] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0250.383] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0250.383] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00270_.WMF", cAlternateFileName="")) returned 1 [0250.383] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0250.383] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0250.383] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0250.384] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0250.384] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0250.384] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0250.385] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00270_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00270_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0250.386] GetFileType (hFile=0x200) returned 0x1 [0250.386] CloseHandle (hObject=0x200) returned 1 [0250.387] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0250.387] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00270_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00270_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc8)) returned 1 [0250.387] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0250.387] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0250.387] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0250.387] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xec4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00273_.WMF", cAlternateFileName="")) returned 1 [0250.387] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0250.388] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0250.388] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0250.388] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0250.388] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0250.388] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0250.389] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00273_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00273_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0250.389] GetFileType (hFile=0x200) returned 0x1 [0250.390] CloseHandle (hObject=0x200) returned 1 [0250.390] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0250.390] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00273_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00273_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xec4)) returned 1 [0250.390] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0250.391] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0250.391] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0250.391] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd5c704c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd5c704c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1044, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00274_.WMF", cAlternateFileName="")) returned 1 [0250.391] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0250.391] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0250.391] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0250.391] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0250.391] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0250.391] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0250.392] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00274_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00274_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0250.393] GetFileType (hFile=0x200) returned 0x1 [0250.393] CloseHandle (hObject=0x200) returned 1 [0250.394] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0250.394] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00274_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00274_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd5c704c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd5c704c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1044)) returned 1 [0250.394] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0250.394] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0250.394] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0250.394] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd5c704c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd5c704c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00296_.WMF", cAlternateFileName="")) returned 1 [0250.395] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0250.395] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0250.395] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0250.395] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0250.395] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0250.395] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0250.396] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00296_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00296_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0250.396] GetFileType (hFile=0x200) returned 0x1 [0250.397] CloseHandle (hObject=0x200) returned 1 [0250.397] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0250.397] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00296_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00296_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd5c704c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd5c704c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32c)) returned 1 [0250.398] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0250.398] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0250.398] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0250.398] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x332e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00390_.WMF", cAlternateFileName="")) returned 1 [0250.398] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0250.398] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0250.398] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0250.399] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0250.399] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0250.399] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0250.674] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00390_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00390_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0250.674] GetFileType (hFile=0x230) returned 0x1 [0250.675] CloseHandle (hObject=0x230) returned 1 [0250.675] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0250.675] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00390_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00390_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x332e)) returned 1 [0250.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0250.676] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0250.676] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0250.676] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd685b3d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd685b3d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x69aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00392_.WMF", cAlternateFileName="")) returned 1 [0250.676] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0250.676] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0250.676] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0250.676] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0250.677] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0250.677] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0250.678] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00392_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00392_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0250.678] GetFileType (hFile=0x230) returned 0x1 [0250.678] CloseHandle (hObject=0x230) returned 1 [0250.679] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0250.679] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00392_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00392_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd685b3d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd685b3d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x69aa)) returned 1 [0250.679] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0250.679] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0250.680] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0250.680] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd685b3d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd685b3d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b54, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00524_.WMF", cAlternateFileName="")) returned 1 [0250.680] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0250.680] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0250.680] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0250.680] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0250.680] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0250.680] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0250.682] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00524_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00524_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0250.682] GetFileType (hFile=0x230) returned 0x1 [0250.683] CloseHandle (hObject=0x230) returned 1 [0250.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0250.683] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00524_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00524_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd685b3d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd685b3d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b54)) returned 1 [0250.683] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0250.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0250.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0250.684] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd685b3d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd685b3d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2576, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00525_.WMF", cAlternateFileName="")) returned 1 [0250.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0250.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0250.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0250.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0250.685] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0250.685] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0250.685] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00525_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00525_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0250.686] GetFileType (hFile=0x230) returned 0x1 [0250.686] CloseHandle (hObject=0x230) returned 1 [0250.687] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0250.687] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00525_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00525_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd685b3d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd685b3d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2576)) returned 1 [0250.687] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0250.687] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0250.687] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0250.687] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd65f8ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd65f8ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd685b3d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00526_.WMF", cAlternateFileName="")) returned 1 [0250.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0250.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0250.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0250.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0250.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0250.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0250.689] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00526_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00526_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0250.689] GetFileType (hFile=0x230) returned 0x1 [0250.690] CloseHandle (hObject=0x230) returned 1 [0250.690] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0250.690] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00526_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00526_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd65f8ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd65f8ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd685b3d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6ba0)) returned 1 [0250.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0250.691] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0250.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0250.691] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2cec, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00648_.WMF", cAlternateFileName="")) returned 1 [0250.691] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0250.691] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0250.691] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0250.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0250.692] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0250.692] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0250.692] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00648_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00648_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0250.693] GetFileType (hFile=0x230) returned 0x1 [0250.693] CloseHandle (hObject=0x230) returned 1 [0250.694] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0250.694] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00648_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00648_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2cec)) returned 1 [0250.694] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0250.694] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0250.694] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0250.694] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd685b3d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd685b3d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1138, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00921_.WMF", cAlternateFileName="")) returned 1 [0250.695] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0250.695] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0250.695] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0250.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0250.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0250.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0250.696] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00921_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00921_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0250.696] GetFileType (hFile=0x230) returned 0x1 [0250.697] CloseHandle (hObject=0x230) returned 1 [0250.698] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0250.698] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00921_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00921_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd685b3d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd685b3d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1138)) returned 1 [0250.698] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0250.698] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0250.698] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0250.698] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd65f8ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd65f8ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1870, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00923_.WMF", cAlternateFileName="")) returned 1 [0250.698] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0250.699] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0250.699] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0250.699] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0250.699] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0250.699] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0250.700] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00923_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00923_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0250.700] GetFileType (hFile=0x230) returned 0x1 [0250.701] CloseHandle (hObject=0x230) returned 1 [0250.701] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0250.701] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00923_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00923_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd65f8ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd65f8ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1870)) returned 1 [0250.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0250.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0250.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0250.702] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd65f8ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd65f8ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd685b3d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c14, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00932_.WMF", cAlternateFileName="")) returned 1 [0250.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0250.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0250.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0250.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0250.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0250.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0250.704] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00932_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00932_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0250.704] GetFileType (hFile=0x230) returned 0x1 [0250.705] CloseHandle (hObject=0x230) returned 1 [0250.705] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0250.705] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00932_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00932_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd65f8ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd65f8ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd685b3d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c14)) returned 1 [0250.705] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0250.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0250.706] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0250.706] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd65f8ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd65f8ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd685b3d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xeb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00985_.WMF", cAlternateFileName="")) returned 1 [0250.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0250.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0250.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0250.706] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0250.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0250.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0250.707] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00985_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00985_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0250.708] GetFileType (hFile=0x230) returned 0x1 [0250.708] CloseHandle (hObject=0x230) returned 1 [0250.709] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0250.709] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00985_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00985_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd65f8ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd65f8ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd685b3d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xeb8)) returned 1 [0250.709] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0250.709] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0250.709] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0250.710] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd16, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOAT.WMF", cAlternateFileName="")) returned 1 [0250.710] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0250.710] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0250.710] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0250.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0250.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0250.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0250.711] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOAT.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\boat.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0250.712] GetFileType (hFile=0x230) returned 0x1 [0250.712] CloseHandle (hObject=0x230) returned 1 [0250.990] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0250.990] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOAT.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\boat.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd16)) returned 1 [0250.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0250.990] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0250.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0250.991] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x714c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOATINST.WMF", cAlternateFileName="")) returned 1 [0250.991] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0250.991] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0250.991] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0250.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0250.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0250.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0251.135] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOATINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\boatinst.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0251.136] GetFileType (hFile=0x1e0) returned 0x1 [0251.136] CloseHandle (hObject=0x1e0) returned 1 [0251.137] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0251.137] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOATINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\boatinst.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x714c)) returned 1 [0251.137] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0251.137] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0251.137] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0251.137] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x532, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00076_.WMF", cAlternateFileName="")) returned 1 [0251.138] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0251.138] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0251.138] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0251.138] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0251.138] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0251.138] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0251.139] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00076_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00076_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0251.140] GetFileType (hFile=0x1e0) returned 0x1 [0251.140] CloseHandle (hObject=0x1e0) returned 1 [0251.141] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0251.141] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00076_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00076_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x532)) returned 1 [0251.141] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0251.141] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0251.141] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0251.141] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00078_.WMF", cAlternateFileName="")) returned 1 [0251.142] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0251.142] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0251.142] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0251.142] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0251.142] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0251.142] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0251.143] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00078_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00078_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0251.144] GetFileType (hFile=0x1e0) returned 0x1 [0251.144] CloseHandle (hObject=0x1e0) returned 1 [0251.145] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0251.145] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00078_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00078_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5a4)) returned 1 [0251.145] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0251.145] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0251.145] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0251.146] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f26, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00092_.WMF", cAlternateFileName="")) returned 1 [0251.146] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0251.146] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0251.146] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0251.146] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0251.146] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0251.146] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0251.147] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00092_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00092_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0251.148] GetFileType (hFile=0x1e0) returned 0x1 [0251.148] CloseHandle (hObject=0x1e0) returned 1 [0251.149] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0251.149] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00092_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00092_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f26)) returned 1 [0251.149] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0251.149] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0251.150] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0251.150] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x94a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00100_.WMF", cAlternateFileName="")) returned 1 [0251.150] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0251.150] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0251.151] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0251.151] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0251.151] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0251.151] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0251.152] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00100_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00100_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0251.152] GetFileType (hFile=0x1e0) returned 0x1 [0251.153] CloseHandle (hObject=0x1e0) returned 1 [0251.153] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0251.154] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00100_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00100_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x94a)) returned 1 [0251.154] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0251.154] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0251.154] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0251.154] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00135_.WMF", cAlternateFileName="")) returned 1 [0251.154] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0251.155] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0251.155] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0251.155] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0251.155] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0251.155] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0251.156] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00135_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00135_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0251.156] GetFileType (hFile=0x1e0) returned 0x1 [0251.157] CloseHandle (hObject=0x1e0) returned 1 [0251.157] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0251.158] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00135_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00135_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x414)) returned 1 [0251.158] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0251.158] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0251.158] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0251.158] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x876, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00136_.WMF", cAlternateFileName="")) returned 1 [0251.158] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0251.159] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0251.159] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0251.159] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0251.159] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0251.159] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0251.160] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00136_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00136_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0251.160] GetFileType (hFile=0x1e0) returned 0x1 [0251.161] CloseHandle (hObject=0x1e0) returned 1 [0251.161] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0251.161] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00136_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00136_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x876)) returned 1 [0251.162] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0251.162] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0251.162] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0251.162] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00145_.WMF", cAlternateFileName="")) returned 1 [0251.162] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0251.162] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0251.162] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0251.163] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0251.163] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0251.163] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0251.163] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00145_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00145_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0251.164] GetFileType (hFile=0x1e0) returned 0x1 [0251.164] CloseHandle (hObject=0x1e0) returned 1 [0251.165] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0251.165] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00145_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00145_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6b0)) returned 1 [0251.165] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0251.166] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0251.166] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0251.166] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00174_.WMF", cAlternateFileName="")) returned 1 [0251.166] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0251.166] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0251.167] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0251.167] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0251.167] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0251.167] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0251.168] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00174_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0251.168] GetFileType (hFile=0x1e0) returned 0x1 [0251.168] CloseHandle (hObject=0x1e0) returned 1 [0251.169] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0251.169] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00174_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20ae)) returned 1 [0251.169] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0251.169] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0251.169] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0251.169] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1370, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00184_.WMF", cAlternateFileName="")) returned 1 [0251.169] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0251.170] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0251.170] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0251.170] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0251.170] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0251.170] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0251.171] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00184_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0251.171] GetFileType (hFile=0x1e0) returned 0x1 [0251.171] CloseHandle (hObject=0x1e0) returned 1 [0251.172] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0251.172] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00184_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1370)) returned 1 [0251.172] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0251.172] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0251.172] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0251.172] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00186_.WMF", cAlternateFileName="")) returned 1 [0251.172] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0251.172] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0251.172] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0251.173] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0251.173] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0251.173] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0251.173] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00186_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00186_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0251.173] GetFileType (hFile=0x1e0) returned 0x1 [0251.174] CloseHandle (hObject=0x1e0) returned 1 [0251.174] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0251.174] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00186_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00186_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31f4)) returned 1 [0251.175] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0251.175] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0251.175] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0251.175] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc20, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00200_.WMF", cAlternateFileName="")) returned 1 [0251.175] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0251.175] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0251.175] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0251.175] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0251.175] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0251.175] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0251.176] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00200_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00200_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0251.176] GetFileType (hFile=0x1e0) returned 0x1 [0251.176] CloseHandle (hObject=0x1e0) returned 1 [0251.177] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0251.177] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00200_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00200_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc20)) returned 1 [0251.177] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0251.177] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0251.177] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0251.177] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x634, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00224_.WMF", cAlternateFileName="")) returned 1 [0251.177] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0251.178] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0251.178] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0251.178] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0251.178] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0251.178] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0251.179] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00224_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00224_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0251.179] GetFileType (hFile=0x1e0) returned 0x1 [0251.179] CloseHandle (hObject=0x1e0) returned 1 [0251.180] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0251.180] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00224_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00224_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x634)) returned 1 [0251.180] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0251.180] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0251.180] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0251.180] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00438_.WMF", cAlternateFileName="")) returned 1 [0251.180] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0251.181] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0251.181] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0251.181] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0251.181] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0251.508] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0251.509] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00438_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00438_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0251.509] GetFileType (hFile=0x23c) returned 0x1 [0251.510] CloseHandle (hObject=0x23c) returned 1 [0251.510] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0251.511] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00438_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00438_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4bc)) returned 1 [0251.511] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0251.511] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0251.511] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0251.511] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x804, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00439_.WMF", cAlternateFileName="")) returned 1 [0251.511] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0251.512] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0251.512] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0251.512] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0251.512] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0251.512] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0251.513] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00439_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00439_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0251.513] GetFileType (hFile=0x23c) returned 0x1 [0251.514] CloseHandle (hObject=0x23c) returned 1 [0251.514] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0251.514] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00439_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00439_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x804)) returned 1 [0251.515] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0251.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0251.515] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0251.515] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00440_.WMF", cAlternateFileName="")) returned 1 [0251.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0251.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0251.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0251.515] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0251.516] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0251.516] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0251.516] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00440_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00440_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0251.517] GetFileType (hFile=0x23c) returned 0x1 [0251.517] CloseHandle (hObject=0x23c) returned 1 [0251.518] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0251.518] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00440_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00440_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15cc)) returned 1 [0251.518] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0251.518] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0251.518] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0251.518] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00441_.WMF", cAlternateFileName="")) returned 1 [0251.518] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0251.518] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0251.519] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0251.519] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0251.519] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0251.519] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0251.520] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00441_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00441_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0251.520] GetFileType (hFile=0x23c) returned 0x1 [0251.521] CloseHandle (hObject=0x23c) returned 1 [0251.521] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0251.521] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00441_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00441_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdc4)) returned 1 [0251.521] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0251.521] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0251.522] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0251.522] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00442_.WMF", cAlternateFileName="")) returned 1 [0251.522] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0251.522] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0251.522] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0251.522] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0251.522] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0251.523] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0251.523] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00442_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00442_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0251.523] GetFileType (hFile=0x23c) returned 0x1 [0251.524] CloseHandle (hObject=0x23c) returned 1 [0251.524] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0251.525] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00442_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00442_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9b8)) returned 1 [0251.525] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0251.526] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0251.526] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0251.526] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x68c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00443_.WMF", cAlternateFileName="")) returned 1 [0251.527] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0251.527] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0251.527] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0251.527] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0251.527] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0251.527] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0251.528] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00443_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00443_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0251.528] GetFileType (hFile=0x23c) returned 0x1 [0251.528] CloseHandle (hObject=0x23c) returned 1 [0251.529] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0251.529] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00443_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00443_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x68c)) returned 1 [0251.529] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0251.529] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0251.529] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0251.530] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf38, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00444_.WMF", cAlternateFileName="")) returned 1 [0251.530] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0251.530] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0251.530] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0251.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0251.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0251.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0251.530] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00444_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00444_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0251.531] GetFileType (hFile=0x23c) returned 0x1 [0251.531] CloseHandle (hObject=0x23c) returned 1 [0251.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0251.531] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00444_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00444_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf38)) returned 1 [0251.531] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0251.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0251.532] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0251.532] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xed4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00445_.WMF", cAlternateFileName="")) returned 1 [0251.532] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0251.532] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0251.532] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0251.532] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0251.532] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0251.532] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0251.532] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00445_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00445_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0251.533] GetFileType (hFile=0x23c) returned 0x1 [0251.533] CloseHandle (hObject=0x23c) returned 1 [0251.533] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0251.533] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00445_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00445_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xed4)) returned 1 [0251.534] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0251.534] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0251.534] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0251.534] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x984, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00453_.WMF", cAlternateFileName="")) returned 1 [0251.534] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0251.534] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0251.534] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0251.534] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0251.534] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0251.534] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0251.535] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00453_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00453_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0251.535] GetFileType (hFile=0x23c) returned 0x1 [0251.535] CloseHandle (hObject=0x23c) returned 1 [0251.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0251.536] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00453_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00453_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x984)) returned 1 [0251.536] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0251.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0251.536] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0251.536] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaac, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01080_.WMF", cAlternateFileName="")) returned 1 [0251.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0251.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0251.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0251.536] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0251.536] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0251.536] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0251.537] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01080_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01080_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0251.537] GetFileType (hFile=0x23c) returned 0x1 [0251.537] CloseHandle (hObject=0x23c) returned 1 [0251.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0251.538] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01080_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01080_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaac)) returned 1 [0251.538] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0251.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0251.538] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0251.538] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c08, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01603_.WMF", cAlternateFileName="")) returned 1 [0251.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0251.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0251.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0251.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0251.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0251.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0251.539] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01603_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01603_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0251.540] GetFileType (hFile=0x23c) returned 0x1 [0251.540] CloseHandle (hObject=0x23c) returned 1 [0251.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0251.869] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01603_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01603_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c08)) returned 1 [0251.869] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0251.870] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0251.870] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0251.870] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xda6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01634_.WMF", cAlternateFileName="")) returned 1 [0251.870] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0251.870] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0251.870] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0251.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0251.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0251.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0251.872] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01634_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01634_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0251.872] GetFileType (hFile=0x200) returned 0x1 [0251.873] CloseHandle (hObject=0x200) returned 1 [0251.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0251.874] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01634_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01634_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xda6)) returned 1 [0251.874] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0251.874] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0251.874] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0251.874] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a94, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01635_.WMF", cAlternateFileName="")) returned 1 [0251.875] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0251.875] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0251.875] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0251.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0251.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0251.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0251.876] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01635_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01635_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0251.877] GetFileType (hFile=0x200) returned 0x1 [0251.878] CloseHandle (hObject=0x200) returned 1 [0251.878] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0251.878] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01635_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01635_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a94)) returned 1 [0251.879] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0251.879] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0251.879] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0251.879] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x752, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01636_.WMF", cAlternateFileName="")) returned 1 [0251.929] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238348 [0251.930] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0251.930] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0251.930] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0251.930] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0251.930] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238348 | out: hHeap=0x1f0000) returned 1 [0251.931] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01636_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01636_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0251.932] GetFileType (hFile=0x1e0) returned 0x1 [0251.932] CloseHandle (hObject=0x1e0) returned 1 [0251.933] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0251.933] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01636_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01636_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x752)) returned 1 [0251.933] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0251.933] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0251.933] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0251.934] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01637_.WMF", cAlternateFileName="")) returned 1 [0251.934] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238348 [0251.934] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0251.934] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0251.934] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0251.934] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0251.935] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238348 | out: hHeap=0x1f0000) returned 1 [0251.935] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01637_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01637_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0251.936] GetFileType (hFile=0x1e0) returned 0x1 [0251.936] CloseHandle (hObject=0x1e0) returned 1 [0251.937] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0251.937] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01637_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01637_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf6c)) returned 1 [0251.937] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0251.937] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0251.937] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0251.938] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x292a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01638_.WMF", cAlternateFileName="")) returned 1 [0251.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238348 [0251.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0251.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0251.938] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0251.938] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0251.938] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238348 | out: hHeap=0x1f0000) returned 1 [0251.939] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01638_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01638_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0251.939] GetFileType (hFile=0x1e0) returned 0x1 [0251.940] CloseHandle (hObject=0x1e0) returned 1 [0251.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0251.941] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01638_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01638_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x292a)) returned 1 [0251.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0251.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0251.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0251.941] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd744774, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x108c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01639_.WMF", cAlternateFileName="")) returned 1 [0251.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238348 [0251.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0251.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0251.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0251.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0251.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238348 | out: hHeap=0x1f0000) returned 1 [0251.943] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01639_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01639_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0251.944] GetFileType (hFile=0x1e0) returned 0x1 [0251.944] CloseHandle (hObject=0x1e0) returned 1 [0251.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0251.945] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01639_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01639_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd744774, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x108c)) returned 1 [0251.945] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0251.946] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0251.946] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0251.946] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x246a, dwReserved0=0x0, dwReserved1=0x0, cFileName="CARBN_01.MID", cAlternateFileName="")) returned 1 [0251.946] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0251.946] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0251.946] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0251.947] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0251.947] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0251.948] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0251.949] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CARBN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\carbn_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0251.949] GetFileType (hFile=0x1e0) returned 0x1 [0251.950] CloseHandle (hObject=0x1e0) returned 1 [0251.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0251.950] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CARBN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\carbn_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x246a)) returned 1 [0251.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0251.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0251.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0251.951] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd744774, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdec, dwReserved0=0x0, dwReserved1=0x0, cFileName="CG1606.WMF", cAlternateFileName="")) returned 1 [0251.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238348 [0251.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0251.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0251.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0251.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0251.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238348 | out: hHeap=0x1f0000) returned 1 [0251.953] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CG1606.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cg1606.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0251.953] GetFileType (hFile=0x1e0) returned 0x1 [0251.954] CloseHandle (hObject=0x1e0) returned 1 [0251.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0251.955] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CG1606.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cg1606.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd744774, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdec)) returned 1 [0251.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0251.955] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0251.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0251.955] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x976, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLASSIC1.WMF", cAlternateFileName="")) returned 1 [0251.955] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0251.956] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0251.956] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0251.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0251.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0251.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0251.957] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC1.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\classic1.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0251.957] GetFileType (hFile=0x1e0) returned 0x1 [0251.958] CloseHandle (hObject=0x1e0) returned 1 [0251.958] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0251.959] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC1.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\classic1.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x976)) returned 1 [0251.959] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0251.959] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0251.959] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0251.959] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLASSIC2.WMF", cAlternateFileName="")) returned 1 [0251.959] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0251.959] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0251.960] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0251.960] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0251.960] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0251.960] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0251.961] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC2.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\classic2.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0251.961] GetFileType (hFile=0x1e0) returned 0x1 [0251.962] CloseHandle (hObject=0x1e0) returned 1 [0252.459] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0252.459] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC2.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\classic2.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8d6)) returned 1 [0252.459] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0252.459] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0252.460] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0252.460] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLIP.WMF", cAlternateFileName="")) returned 1 [0252.460] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0252.460] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0252.460] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0252.460] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0252.460] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0252.460] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0252.461] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLIP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\clip.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0252.461] GetFileType (hFile=0x198) returned 0x1 [0252.462] CloseHandle (hObject=0x198) returned 1 [0252.463] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0252.463] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLIP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\clip.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8d6)) returned 1 [0252.463] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0252.464] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0252.464] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0252.464] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="CMNTY_01.MID", cAlternateFileName="")) returned 1 [0252.464] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0252.464] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0252.464] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0252.464] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0252.465] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0252.465] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0252.466] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CMNTY_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cmnty_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0252.466] GetFileType (hFile=0x198) returned 0x1 [0252.467] CloseHandle (hObject=0x198) returned 1 [0252.467] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0252.467] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CMNTY_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cmnty_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b3a)) returned 1 [0252.468] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0252.468] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0252.468] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0252.468] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1496, dwReserved0=0x0, dwReserved1=0x0, cFileName="CRANE.WMF", cAlternateFileName="")) returned 1 [0252.468] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0252.468] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0252.468] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0252.469] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0252.469] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0252.469] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0252.470] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANE.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\crane.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0252.470] GetFileType (hFile=0x198) returned 0x1 [0252.471] CloseHandle (hObject=0x198) returned 1 [0252.471] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0252.471] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANE.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\crane.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1496)) returned 1 [0252.471] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0252.472] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0252.472] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0252.472] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc18a, dwReserved0=0x0, dwReserved1=0x0, cFileName="CRANINST.WMF", cAlternateFileName="")) returned 1 [0252.472] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0252.472] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0252.472] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0252.472] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0252.473] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0252.473] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0252.474] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\craninst.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0252.474] GetFileType (hFile=0x198) returned 0x1 [0252.474] CloseHandle (hObject=0x198) returned 1 [0252.475] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0252.475] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\craninst.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc18a)) returned 1 [0252.475] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0252.475] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0252.476] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0252.476] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb96, dwReserved0=0x0, dwReserved1=0x0, cFileName="CUP.WMF", cAlternateFileName="")) returned 1 [0252.476] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0252.476] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0252.476] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0252.476] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0252.477] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cup.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0252.477] GetFileType (hFile=0x198) returned 0x1 [0252.478] CloseHandle (hObject=0x198) returned 1 [0252.479] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0252.479] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cup.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb96)) returned 1 [0252.479] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0252.479] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0252.479] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0252.479] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2856, dwReserved0=0x0, dwReserved1=0x0, cFileName="CUPINST.WMF", cAlternateFileName="")) returned 1 [0252.479] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0252.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0252.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0252.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0252.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0252.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0252.481] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUPINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cupinst.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0252.481] GetFileType (hFile=0x198) returned 0x1 [0252.481] CloseHandle (hObject=0x198) returned 1 [0252.482] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0252.482] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUPINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cupinst.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2856)) returned 1 [0252.482] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0252.482] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0252.482] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0252.483] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7992, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00117_.WMF", cAlternateFileName="")) returned 1 [0252.483] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0252.483] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0252.483] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0252.483] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0252.483] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0252.483] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0252.484] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00117_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00117_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0252.484] GetFileType (hFile=0x198) returned 0x1 [0252.485] CloseHandle (hObject=0x198) returned 1 [0252.485] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0252.485] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00117_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00117_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7992)) returned 1 [0252.485] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0252.486] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0252.486] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0252.486] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2040, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00121_.WMF", cAlternateFileName="")) returned 1 [0252.486] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0252.486] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0252.486] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0252.486] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0252.486] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0252.487] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0252.487] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00121_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00121_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0252.488] GetFileType (hFile=0x198) returned 0x1 [0252.488] CloseHandle (hObject=0x198) returned 1 [0252.489] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0252.489] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00121_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00121_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2040)) returned 1 [0252.489] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0252.489] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0252.489] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0252.489] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x73bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00234_.WMF", cAlternateFileName="")) returned 1 [0252.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0252.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0252.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0252.490] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0252.490] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0252.490] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0252.491] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00234_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00234_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0252.491] GetFileType (hFile=0x198) returned 0x1 [0252.492] CloseHandle (hObject=0x198) returned 1 [0252.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0252.492] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00234_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00234_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x73bc)) returned 1 [0252.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0252.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0252.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0252.493] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa82, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00255_.WMF", cAlternateFileName="")) returned 1 [0252.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0252.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0252.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0252.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0252.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0252.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0252.495] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00255_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00255_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0252.763] GetFileType (hFile=0x174) returned 0x1 [0252.763] CloseHandle (hObject=0x174) returned 1 [0252.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0252.763] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00255_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00255_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa82)) returned 1 [0252.763] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0252.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0252.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0252.764] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd744774, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb10, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00256_.WMF", cAlternateFileName="")) returned 1 [0252.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0252.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0252.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0252.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0252.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0252.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0252.764] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00256_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00256_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0252.765] GetFileType (hFile=0x174) returned 0x1 [0252.765] CloseHandle (hObject=0x174) returned 1 [0252.765] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0252.765] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00256_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00256_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd744774, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb10)) returned 1 [0252.766] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0252.766] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0252.766] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0252.766] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9456, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00261_.WMF", cAlternateFileName="")) returned 1 [0252.766] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0252.766] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0252.766] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0252.766] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0252.766] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0252.766] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0252.767] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00261_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00261_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0252.767] GetFileType (hFile=0x174) returned 0x1 [0252.768] CloseHandle (hObject=0x174) returned 1 [0252.768] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0252.768] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00261_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00261_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9456)) returned 1 [0252.768] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0252.768] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0252.768] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0252.768] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9c5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00297_.WMF", cAlternateFileName="")) returned 1 [0252.768] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0252.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0252.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0252.769] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0252.769] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0252.769] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0252.769] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00297_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00297_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0252.769] GetFileType (hFile=0x174) returned 0x1 [0252.770] CloseHandle (hObject=0x174) returned 1 [0252.770] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0252.770] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00297_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00297_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9c5e)) returned 1 [0252.770] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0252.770] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0252.770] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0252.770] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x318, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00372_.WMF", cAlternateFileName="")) returned 1 [0252.770] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0252.770] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0252.771] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0252.771] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0252.771] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0252.771] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0252.771] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00372_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00372_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0252.771] GetFileType (hFile=0x174) returned 0x1 [0252.772] CloseHandle (hObject=0x174) returned 1 [0252.772] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0252.772] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00372_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00372_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x318)) returned 1 [0252.772] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0252.772] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0252.773] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0252.773] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x44b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00405_.WMF", cAlternateFileName="")) returned 1 [0252.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0252.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0252.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0252.773] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0252.773] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0252.773] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0252.774] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00405_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00405_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0252.774] GetFileType (hFile=0x174) returned 0x1 [0252.774] CloseHandle (hObject=0x174) returned 1 [0252.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0252.775] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00405_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00405_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x44b0)) returned 1 [0252.775] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0252.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0252.775] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0252.776] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e94, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00407_.WMF", cAlternateFileName="")) returned 1 [0252.778] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0252.778] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0252.779] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0252.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0252.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0252.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0252.780] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00407_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00407_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0252.781] GetFileType (hFile=0x174) returned 0x1 [0252.782] CloseHandle (hObject=0x174) returned 1 [0252.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0252.783] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00407_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00407_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e94)) returned 1 [0252.783] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0252.784] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0252.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0252.784] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa7f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00413_.WMF", cAlternateFileName="")) returned 1 [0252.784] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0252.784] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0252.784] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0252.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0252.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0252.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0252.785] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00413_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00413_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0252.787] GetFileType (hFile=0x174) returned 0x1 [0252.788] CloseHandle (hObject=0x174) returned 1 [0252.788] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0252.788] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00413_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00413_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa7f0)) returned 1 [0252.789] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0252.790] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0252.790] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0252.790] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa79c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00414_.WMF", cAlternateFileName="")) returned 1 [0252.790] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0252.791] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0252.791] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0252.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0252.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0252.793] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0252.794] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00414_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00414_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0252.794] GetFileType (hFile=0x174) returned 0x1 [0252.794] CloseHandle (hObject=0x174) returned 1 [0252.795] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0252.795] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00414_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00414_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa79c)) returned 1 [0252.797] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0252.797] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0252.797] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0252.797] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00419_.WMF", cAlternateFileName="")) returned 1 [0252.797] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0252.797] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0252.797] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0252.797] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0252.797] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0252.797] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0252.798] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00419_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00419_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0252.798] GetFileType (hFile=0x174) returned 0x1 [0252.801] CloseHandle (hObject=0x174) returned 1 [0252.801] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0252.801] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00419_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00419_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c8)) returned 1 [0252.802] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0252.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0252.802] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0252.802] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x78c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00437_.WMF", cAlternateFileName="")) returned 1 [0252.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0252.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0252.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0252.802] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0252.803] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0252.803] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0252.803] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00437_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00437_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0252.804] GetFileType (hFile=0x174) returned 0x1 [0252.804] CloseHandle (hObject=0x174) returned 1 [0252.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0252.805] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00437_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00437_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x78c)) returned 1 [0252.805] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0252.805] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0252.805] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0252.805] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb88, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00448_.WMF", cAlternateFileName="")) returned 1 [0252.805] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0252.805] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0252.806] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0252.806] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0252.806] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0252.806] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0252.807] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00448_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00448_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0252.808] GetFileType (hFile=0x174) returned 0x1 [0252.808] CloseHandle (hObject=0x174) returned 1 [0252.808] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0252.809] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00448_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00448_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb88)) returned 1 [0252.809] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0252.809] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0252.809] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0252.809] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2708, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00449_.WMF", cAlternateFileName="")) returned 1 [0252.809] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0252.810] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0252.810] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0252.810] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0252.810] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0252.810] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0253.236] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00449_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00449_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0253.237] GetFileType (hFile=0x1e8) returned 0x1 [0253.237] CloseHandle (hObject=0x1e8) returned 1 [0253.237] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0253.237] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00449_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00449_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2708)) returned 1 [0253.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0253.238] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0253.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0253.238] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5130, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00687_.WMF", cAlternateFileName="")) returned 1 [0253.238] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0253.238] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0253.238] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0253.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0253.239] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0253.239] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0253.239] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00687_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00687_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0253.240] GetFileType (hFile=0x1e8) returned 0x1 [0253.240] CloseHandle (hObject=0x1e8) returned 1 [0253.241] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0253.241] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00687_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00687_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5130)) returned 1 [0253.241] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0253.241] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0253.241] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0253.241] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x600c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00705_.WMF", cAlternateFileName="")) returned 1 [0253.242] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0253.242] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0253.242] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0253.242] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0253.242] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0253.242] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0253.243] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00705_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00705_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0253.244] GetFileType (hFile=0x1e8) returned 0x1 [0253.244] CloseHandle (hObject=0x1e8) returned 1 [0253.245] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0253.245] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00705_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00705_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x600c)) returned 1 [0253.245] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0253.245] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0253.245] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0253.245] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01015_.WMF", cAlternateFileName="")) returned 1 [0253.246] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0253.246] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0253.246] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0253.246] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0253.246] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0253.246] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0253.247] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01015_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0253.247] GetFileType (hFile=0x1e8) returned 0x1 [0253.249] CloseHandle (hObject=0x1e8) returned 1 [0253.249] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0253.250] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01015_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b2)) returned 1 [0253.250] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0253.250] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0253.250] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0253.250] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x39e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01039_.WMF", cAlternateFileName="")) returned 1 [0253.250] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0253.250] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0253.250] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0253.251] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0253.251] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0253.251] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0253.252] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01039_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01039_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0253.252] GetFileType (hFile=0x1e8) returned 0x1 [0253.252] CloseHandle (hObject=0x1e8) returned 1 [0253.253] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0253.253] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01039_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01039_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x39e4)) returned 1 [0253.253] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0253.253] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0253.253] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0253.253] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb709c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01138_.WMF", cAlternateFileName="")) returned 1 [0253.253] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0253.253] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0253.254] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0253.254] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0253.254] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0253.254] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0253.254] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01138_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01138_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0253.255] GetFileType (hFile=0x1e8) returned 0x1 [0253.255] CloseHandle (hObject=0x1e8) returned 1 [0253.255] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0253.256] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01138_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01138_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb709c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe6c)) returned 1 [0253.256] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0253.256] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0253.256] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0253.256] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe30, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01139_.WMF", cAlternateFileName="")) returned 1 [0253.256] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0253.256] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0253.256] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0253.256] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0253.257] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0253.257] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0253.257] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01139_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01139_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0253.258] GetFileType (hFile=0x1e8) returned 0x1 [0253.258] CloseHandle (hObject=0x1e8) returned 1 [0253.258] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0253.258] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01139_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01139_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe30)) returned 1 [0253.259] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0253.259] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0253.259] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0253.259] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb709c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe20, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01140_.WMF", cAlternateFileName="")) returned 1 [0253.259] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0253.259] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0253.259] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0253.259] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0253.259] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0253.260] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0253.260] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01140_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01140_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0253.260] GetFileType (hFile=0x1e8) returned 0x1 [0253.261] CloseHandle (hObject=0x1e8) returned 1 [0253.261] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0253.261] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01140_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01140_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb709c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe20)) returned 1 [0253.261] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0253.261] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0253.262] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0253.262] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb709c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x85c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01143_.WMF", cAlternateFileName="")) returned 1 [0253.262] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0253.262] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0253.262] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0253.262] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0253.262] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0253.262] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0253.263] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01143_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01143_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0253.263] GetFileType (hFile=0x1e8) returned 0x1 [0253.263] CloseHandle (hObject=0x1e8) returned 1 [0253.265] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0253.266] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01143_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01143_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb709c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x85c)) returned 1 [0253.266] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0253.266] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0253.266] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0253.266] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xadc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01145_.WMF", cAlternateFileName="")) returned 1 [0253.266] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0253.266] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0253.266] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0253.267] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0253.267] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0253.267] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0253.267] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01145_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01145_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0253.268] GetFileType (hFile=0x1e8) returned 0x1 [0253.268] CloseHandle (hObject=0x1e8) returned 1 [0253.268] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0253.268] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01145_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01145_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xadc)) returned 1 [0253.269] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0253.269] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0253.269] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0253.269] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb709c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaec, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01146_.WMF", cAlternateFileName="")) returned 1 [0253.269] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0253.269] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0253.269] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0253.269] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0253.269] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0253.269] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0253.270] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01146_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01146_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0253.270] GetFileType (hFile=0x1e8) returned 0x1 [0253.271] CloseHandle (hObject=0x1e8) returned 1 [0253.271] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0253.272] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01146_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01146_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb709c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaec)) returned 1 [0253.272] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0253.272] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0253.272] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0253.272] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb90, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01151_.WMF", cAlternateFileName="")) returned 1 [0253.272] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0253.272] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0253.272] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0253.273] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0253.273] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0253.273] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0253.273] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01151_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01151_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0253.274] GetFileType (hFile=0x1e8) returned 0x1 [0253.274] CloseHandle (hObject=0x1e8) returned 1 [0253.275] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0253.275] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01151_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01151_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb90)) returned 1 [0253.275] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0253.275] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0253.275] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0253.276] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb90, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01152_.WMF", cAlternateFileName="")) returned 1 [0253.276] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0253.276] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0253.276] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0253.276] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0253.276] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0253.276] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0253.277] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01152_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01152_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0253.277] GetFileType (hFile=0x1e8) returned 0x1 [0253.278] CloseHandle (hObject=0x1e8) returned 1 [0253.278] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0253.278] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01152_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01152_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb90)) returned 1 [0253.278] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0253.278] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0253.278] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0253.279] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe04, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01157_.WMF", cAlternateFileName="")) returned 1 [0253.279] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0253.279] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0253.279] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0253.279] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0253.279] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0253.279] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0253.627] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01157_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01157_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0253.628] GetFileType (hFile=0x174) returned 0x1 [0253.629] CloseHandle (hObject=0x174) returned 1 [0253.629] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0253.629] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01157_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01157_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe04)) returned 1 [0253.630] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0253.630] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0253.630] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0253.631] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01160_.WMF", cAlternateFileName="")) returned 1 [0253.631] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0253.631] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0253.631] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0253.631] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0253.631] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0253.631] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0253.633] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01160_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01160_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0253.633] GetFileType (hFile=0x174) returned 0x1 [0253.634] CloseHandle (hObject=0x174) returned 1 [0253.635] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0253.635] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01160_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01160_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b4)) returned 1 [0253.636] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0253.636] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0253.636] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0253.636] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01162_.WMF", cAlternateFileName="")) returned 1 [0253.636] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0253.636] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0253.636] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0253.637] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0253.637] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0253.637] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0253.638] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01162_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01162_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0253.639] GetFileType (hFile=0x174) returned 0x1 [0253.640] CloseHandle (hObject=0x174) returned 1 [0253.641] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0253.641] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01162_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01162_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8fc)) returned 1 [0253.642] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0253.642] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0253.642] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0253.642] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01163_.WMF", cAlternateFileName="")) returned 1 [0253.642] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0253.642] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0253.643] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0253.643] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0253.643] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0253.643] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0253.644] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01163_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01163_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0253.645] GetFileType (hFile=0x174) returned 0x1 [0253.647] CloseHandle (hObject=0x174) returned 1 [0253.647] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0253.647] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01163_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01163_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8fc)) returned 1 [0253.647] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0253.648] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0253.648] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0253.648] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x820, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01166_.WMF", cAlternateFileName="")) returned 1 [0253.648] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0253.648] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0253.648] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0253.648] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0253.649] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0253.649] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0253.650] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01166_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01166_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0253.650] GetFileType (hFile=0x174) returned 0x1 [0253.651] CloseHandle (hObject=0x174) returned 1 [0253.651] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0253.651] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01166_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01166_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x820)) returned 1 [0253.651] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0253.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0253.652] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0253.652] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x820, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01167_.WMF", cAlternateFileName="")) returned 1 [0253.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0253.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0253.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0253.652] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0253.652] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0253.652] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0253.653] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01167_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01167_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0253.653] GetFileType (hFile=0x174) returned 0x1 [0253.654] CloseHandle (hObject=0x174) returned 1 [0253.654] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0253.654] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01167_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01167_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x820)) returned 1 [0253.655] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0253.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0253.655] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0253.655] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01168_.WMF", cAlternateFileName="")) returned 1 [0253.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0253.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0253.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0253.655] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0253.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0253.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0253.656] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01168_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01168_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0254.243] GetFileType (hFile=0x1e8) returned 0x1 [0254.244] CloseHandle (hObject=0x1e8) returned 1 [0254.244] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0254.244] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01168_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01168_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7d4)) returned 1 [0254.245] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0254.245] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0254.245] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0254.245] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01169_.WMF", cAlternateFileName="")) returned 1 [0254.245] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0254.245] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0254.246] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0254.246] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0254.246] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0254.246] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0254.538] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01169_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01169_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0254.538] GetFileType (hFile=0x1e8) returned 0x1 [0254.538] CloseHandle (hObject=0x1e8) returned 1 [0254.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0254.539] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01169_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01169_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e4)) returned 1 [0254.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0254.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0254.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0254.539] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x964, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01170_.WMF", cAlternateFileName="")) returned 1 [0254.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0254.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0254.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0254.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0254.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0254.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0254.540] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01170_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01170_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0254.540] GetFileType (hFile=0x1e8) returned 0x1 [0254.540] CloseHandle (hObject=0x1e8) returned 1 [0254.541] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0254.541] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01170_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01170_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x964)) returned 1 [0254.541] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0254.541] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0254.541] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0254.541] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x804, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01171_.WMF", cAlternateFileName="")) returned 1 [0254.541] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0254.541] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0254.541] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0254.541] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0254.541] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0254.541] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0254.542] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01171_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01171_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0254.542] GetFileType (hFile=0x1e8) returned 0x1 [0254.542] CloseHandle (hObject=0x1e8) returned 1 [0254.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0254.543] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01171_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01171_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x804)) returned 1 [0254.543] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0254.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0254.543] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0254.543] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01172_.WMF", cAlternateFileName="")) returned 1 [0254.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0254.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0254.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0254.543] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0254.544] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0254.544] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0254.544] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01172_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0254.544] GetFileType (hFile=0x1e8) returned 0x1 [0254.544] CloseHandle (hObject=0x1e8) returned 1 [0254.545] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0254.545] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01172_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b8)) returned 1 [0254.545] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0254.545] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0254.545] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0254.545] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x70c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01173_.WMF", cAlternateFileName="")) returned 1 [0254.545] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0254.545] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0254.545] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0254.545] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0254.546] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0254.546] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0254.546] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01173_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0254.546] GetFileType (hFile=0x1e8) returned 0x1 [0254.547] CloseHandle (hObject=0x1e8) returned 1 [0254.547] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0254.547] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01173_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x70c)) returned 1 [0254.547] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0254.547] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0254.547] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0254.547] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x760, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01176_.WMF", cAlternateFileName="")) returned 1 [0254.547] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0254.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0254.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0254.548] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0254.548] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0254.548] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0254.548] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01176_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01176_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0254.548] GetFileType (hFile=0x1e8) returned 0x1 [0254.549] CloseHandle (hObject=0x1e8) returned 1 [0254.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0254.549] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01176_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01176_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x760)) returned 1 [0254.549] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0254.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0254.549] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0254.549] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xed4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01178_.WMF", cAlternateFileName="")) returned 1 [0254.550] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0254.550] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0254.550] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0254.550] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0254.550] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0254.550] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0254.550] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01178_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01178_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0254.551] GetFileType (hFile=0x1e8) returned 0x1 [0254.551] CloseHandle (hObject=0x1e8) returned 1 [0254.551] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0254.551] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01178_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01178_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xed4)) returned 1 [0254.551] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0254.552] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0254.552] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0254.552] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01179_.WMF", cAlternateFileName="")) returned 1 [0254.552] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0254.552] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0254.552] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0254.552] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0254.552] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0254.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0254.601] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01179_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01179_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0254.601] GetFileType (hFile=0x1e8) returned 0x1 [0254.601] CloseHandle (hObject=0x1e8) returned 1 [0254.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0254.602] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01179_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01179_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e8)) returned 1 [0254.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0254.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0254.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0254.602] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x824, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01180_.WMF", cAlternateFileName="")) returned 1 [0254.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0254.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0254.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0254.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0254.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0254.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0254.603] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01180_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01180_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0254.603] GetFileType (hFile=0x1e8) returned 0x1 [0254.604] CloseHandle (hObject=0x1e8) returned 1 [0254.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0254.604] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01180_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01180_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x824)) returned 1 [0254.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0254.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0254.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0254.604] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01181_.WMF", cAlternateFileName="")) returned 1 [0254.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0254.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0254.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0254.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0254.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0254.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0254.605] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01181_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01181_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0254.605] GetFileType (hFile=0x1e8) returned 0x1 [0254.606] CloseHandle (hObject=0x1e8) returned 1 [0254.606] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0254.606] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01181_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01181_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5a8)) returned 1 [0254.606] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0254.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0254.607] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0254.607] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01182_.WMF", cAlternateFileName="")) returned 1 [0254.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0254.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0254.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0254.607] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0254.607] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0254.607] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0254.608] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01182_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01182_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0254.608] GetFileType (hFile=0x1e8) returned 0x1 [0254.608] CloseHandle (hObject=0x1e8) returned 1 [0254.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0254.608] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01182_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01182_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbb4)) returned 1 [0254.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0254.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0254.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0254.609] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01183_.WMF", cAlternateFileName="")) returned 1 [0254.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0254.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0254.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0254.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0254.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0254.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0254.610] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01183_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01183_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0254.610] GetFileType (hFile=0x1e8) returned 0x1 [0254.610] CloseHandle (hObject=0x1e8) returned 1 [0254.610] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0254.610] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01183_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01183_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8f8)) returned 1 [0254.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0254.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0254.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0254.611] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2174, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01186_.WMF", cAlternateFileName="")) returned 1 [0254.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0254.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0254.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0254.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0254.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0254.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0254.612] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01186_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01186_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0254.612] GetFileType (hFile=0x1e8) returned 0x1 [0254.612] CloseHandle (hObject=0x1e8) returned 1 [0254.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0254.613] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01186_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01186_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2174)) returned 1 [0254.613] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0254.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0254.613] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0254.613] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01366_.WMF", cAlternateFileName="")) returned 1 [0254.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0254.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0254.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0254.613] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0254.613] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0254.614] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0254.614] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01366_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01366_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0254.614] GetFileType (hFile=0x1e8) returned 0x1 [0254.615] CloseHandle (hObject=0x1e8) returned 1 [0254.616] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0254.616] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01366_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01366_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6e8)) returned 1 [0254.616] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0254.616] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0254.616] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0254.616] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01434_.WMF", cAlternateFileName="")) returned 1 [0254.616] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0254.616] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0254.616] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0254.616] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0254.616] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0254.617] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0254.617] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01434_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01434_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0254.617] GetFileType (hFile=0x1e8) returned 0x1 [0254.618] CloseHandle (hObject=0x1e8) returned 1 [0254.618] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0254.618] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01434_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01434_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x384)) returned 1 [0254.618] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0254.618] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0254.618] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0254.618] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01585_.WMF", cAlternateFileName="")) returned 1 [0254.618] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0254.618] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0254.618] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0254.618] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0254.619] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0254.619] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0254.619] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01585_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01585_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0254.619] GetFileType (hFile=0x1e8) returned 0x1 [0254.619] CloseHandle (hObject=0x1e8) returned 1 [0254.620] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0254.620] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01585_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01585_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9dc)) returned 1 [0254.620] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0254.620] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0254.620] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0254.620] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x914, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01586_.WMF", cAlternateFileName="")) returned 1 [0254.620] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0254.620] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0254.620] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0254.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0254.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0254.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0254.621] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01586_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01586_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0254.621] GetFileType (hFile=0x1e8) returned 0x1 [0254.622] CloseHandle (hObject=0x1e8) returned 1 [0254.622] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0254.622] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01586_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01586_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x914)) returned 1 [0254.622] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0254.622] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0254.622] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0254.622] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4a7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01628_.WMF", cAlternateFileName="")) returned 1 [0254.623] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0254.623] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0254.623] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0254.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0254.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0254.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0254.623] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01628_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01628_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0254.624] GetFileType (hFile=0x1e8) returned 0x1 [0254.624] CloseHandle (hObject=0x1e8) returned 1 [0254.624] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0254.624] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01628_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01628_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4a7c)) returned 1 [0254.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0254.625] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0254.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0254.625] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01629_.WMF", cAlternateFileName="")) returned 1 [0254.625] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0254.625] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0254.625] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0254.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0254.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0254.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0254.625] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01629_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01629_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0254.626] GetFileType (hFile=0x1e8) returned 0x1 [0254.626] CloseHandle (hObject=0x1e8) returned 1 [0254.626] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0254.626] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01629_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01629_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x244)) returned 1 [0254.627] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0254.627] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0254.627] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0254.627] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x128, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01630_.WMF", cAlternateFileName="")) returned 1 [0254.627] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0254.627] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0254.627] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0254.627] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0254.627] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0254.627] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0254.628] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01630_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01630_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0254.628] GetFileType (hFile=0x1e8) returned 0x1 [0254.628] CloseHandle (hObject=0x1e8) returned 1 [0254.629] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0254.629] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01630_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01630_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x128)) returned 1 [0254.629] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0254.629] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0254.629] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0254.629] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x228, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01631_.WMF", cAlternateFileName="")) returned 1 [0254.629] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0254.629] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0254.629] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0254.629] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0254.629] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0254.630] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0254.630] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01631_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01631_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0254.977] GetFileType (hFile=0x1e8) returned 0x1 [0254.977] CloseHandle (hObject=0x1e8) returned 1 [0254.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0254.978] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01631_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01631_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x228)) returned 1 [0254.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0254.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0254.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0254.978] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1034, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01761_.WMF", cAlternateFileName="")) returned 1 [0254.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0254.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0254.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0254.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0254.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0254.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0254.979] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01761_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01761_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0254.979] GetFileType (hFile=0x1e8) returned 0x1 [0254.980] CloseHandle (hObject=0x1e8) returned 1 [0254.980] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0254.980] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01761_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01761_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1034)) returned 1 [0254.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0254.980] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0254.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0254.980] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01772_.WMF", cAlternateFileName="")) returned 1 [0254.980] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0254.981] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0254.981] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0254.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0254.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0254.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0254.981] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01772_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01772_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0254.981] GetFileType (hFile=0x1e8) returned 0x1 [0254.982] CloseHandle (hObject=0x1e8) returned 1 [0254.982] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0254.982] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01772_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01772_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8fc)) returned 1 [0254.982] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0254.982] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0254.982] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0254.982] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01793_.WMF", cAlternateFileName="")) returned 1 [0254.982] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0254.982] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0254.982] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0254.982] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0254.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0254.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0254.983] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01793_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01793_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0254.983] GetFileType (hFile=0x1e8) returned 0x1 [0254.983] CloseHandle (hObject=0x1e8) returned 1 [0254.984] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0254.984] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01793_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01793_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcb4)) returned 1 [0254.984] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0254.984] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0254.984] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0254.984] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1815, dwReserved0=0x0, dwReserved1=0x0, cFileName="EAST_01.MID", cAlternateFileName="")) returned 1 [0254.984] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0254.984] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0254.984] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0254.984] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0254.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0254.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0254.985] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EAST_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\east_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0254.985] GetFileType (hFile=0x1e8) returned 0x1 [0254.986] CloseHandle (hObject=0x1e8) returned 1 [0254.986] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0254.986] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EAST_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\east_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1815)) returned 1 [0254.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0254.986] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0254.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0254.986] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x566, dwReserved0=0x0, dwReserved1=0x0, cFileName="ED00010_.WMF", cAlternateFileName="")) returned 1 [0254.986] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0254.986] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0254.987] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0254.987] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0254.987] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0254.987] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0254.987] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00010_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00010_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0254.987] GetFileType (hFile=0x1e8) returned 0x1 [0254.988] CloseHandle (hObject=0x1e8) returned 1 [0254.988] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0254.988] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00010_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00010_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x566)) returned 1 [0254.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0254.988] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0254.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0254.989] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ED00019_.WMF", cAlternateFileName="")) returned 1 [0254.989] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0254.989] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0254.989] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0254.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0254.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0254.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0254.989] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00019_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00019_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0254.990] GetFileType (hFile=0x1e8) returned 0x1 [0254.990] CloseHandle (hObject=0x1e8) returned 1 [0254.991] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0254.991] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00019_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00019_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32f2)) returned 1 [0254.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0254.991] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0254.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0254.991] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ED00172_.WMF", cAlternateFileName="")) returned 1 [0254.991] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0254.991] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0254.991] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0254.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0254.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0254.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0254.992] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00172_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0254.992] GetFileType (hFile=0x1e8) returned 0x1 [0254.992] CloseHandle (hObject=0x1e8) returned 1 [0254.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0254.993] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00172_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa8c)) returned 1 [0254.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0254.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0254.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0254.993] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ED00184_.WMF", cAlternateFileName="")) returned 1 [0254.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0254.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0254.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0254.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0254.994] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0254.994] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0254.994] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00184_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0254.994] GetFileType (hFile=0x1e8) returned 0x1 [0254.995] CloseHandle (hObject=0x1e8) returned 1 [0254.995] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0254.995] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00184_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b2e)) returned 1 [0254.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0254.995] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0254.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0254.995] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3670, dwReserved0=0x0, dwReserved1=0x0, cFileName="EN00006_.WMF", cAlternateFileName="")) returned 1 [0254.995] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0254.995] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0254.995] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0254.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0254.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0254.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0254.996] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00006_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00006_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0254.996] GetFileType (hFile=0x1e8) returned 0x1 [0254.996] CloseHandle (hObject=0x1e8) returned 1 [0254.997] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0254.997] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00006_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00006_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3670)) returned 1 [0254.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0254.997] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0254.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0254.997] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b1a, dwReserved0=0x0, dwReserved1=0x0, cFileName="EN00202_.WMF", cAlternateFileName="")) returned 1 [0254.997] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0254.997] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0254.997] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0254.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0254.998] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0254.998] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0254.998] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00202_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00202_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0254.998] GetFileType (hFile=0x1e8) returned 0x1 [0254.998] CloseHandle (hObject=0x1e8) returned 1 [0254.998] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0254.999] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00202_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00202_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b1a)) returned 1 [0254.999] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0254.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0254.999] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0254.999] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3044, dwReserved0=0x0, dwReserved1=0x0, cFileName="EN00222_.WMF", cAlternateFileName="")) returned 1 [0254.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0254.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0254.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0254.999] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0254.999] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0254.999] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0254.999] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00222_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00222_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0255.000] GetFileType (hFile=0x1e8) returned 0x1 [0255.000] CloseHandle (hObject=0x1e8) returned 1 [0255.000] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0255.000] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00222_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00222_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3044)) returned 1 [0255.000] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0255.000] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0255.000] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0255.000] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="EN00242_.WMF", cAlternateFileName="")) returned 1 [0255.000] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0255.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0255.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0255.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0255.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0255.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0255.001] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00242_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00242_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0255.001] GetFileType (hFile=0x1e8) returned 0x1 [0255.002] CloseHandle (hObject=0x1e8) returned 1 [0255.002] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0255.002] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00242_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00242_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a7c)) returned 1 [0255.002] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0255.002] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0255.002] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0255.002] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="EN00319_.WMF", cAlternateFileName="")) returned 1 [0255.002] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0255.003] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0255.003] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0255.003] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0255.003] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0255.003] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0255.003] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00319_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00319_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0255.003] GetFileType (hFile=0x1e8) returned 0x1 [0255.004] CloseHandle (hObject=0x1e8) returned 1 [0255.004] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0255.004] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00319_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00319_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8e8)) returned 1 [0255.004] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0255.004] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0255.004] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0255.004] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EN00320_.WMF", cAlternateFileName="")) returned 1 [0255.004] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0255.005] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0255.005] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0255.005] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0255.005] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0255.005] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0255.006] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00320_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00320_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0255.006] GetFileType (hFile=0x1e8) returned 0x1 [0255.007] CloseHandle (hObject=0x1e8) returned 1 [0255.007] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0255.007] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00320_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00320_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e0)) returned 1 [0255.007] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0255.008] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0255.008] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0255.008] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x439c, dwReserved0=0x0, dwReserved1=0x0, cFileName="EN00397_.WMF", cAlternateFileName="")) returned 1 [0255.008] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0255.008] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0255.008] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0255.008] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0255.008] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0255.008] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0255.009] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00397_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00397_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0255.009] GetFileType (hFile=0x1e8) returned 0x1 [0255.009] CloseHandle (hObject=0x1e8) returned 1 [0255.010] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0255.010] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00397_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00397_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x439c)) returned 1 [0255.010] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0255.010] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0255.010] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0255.010] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f08, dwReserved0=0x0, dwReserved1=0x0, cFileName="EN00902_.WMF", cAlternateFileName="")) returned 1 [0255.010] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0255.010] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0255.011] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0255.011] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0255.011] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0255.011] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0255.011] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00902_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00902_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0255.012] GetFileType (hFile=0x1e8) returned 0x1 [0255.012] CloseHandle (hObject=0x1e8) returned 1 [0255.012] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0255.013] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00902_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00902_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f08)) returned 1 [0255.013] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0255.013] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0255.013] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0255.013] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2942, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXPLR_01.MID", cAlternateFileName="")) returned 1 [0255.013] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0255.013] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0255.013] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0255.014] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0255.014] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0255.014] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0255.014] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EXPLR_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\explr_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0255.014] GetFileType (hFile=0x1e8) returned 0x1 [0255.015] CloseHandle (hObject=0x1e8) returned 1 [0255.015] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0255.015] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EXPLR_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\explr_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2942)) returned 1 [0255.015] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0255.015] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0255.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0255.016] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="FALL_01.MID", cAlternateFileName="")) returned 1 [0255.016] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0255.016] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0255.016] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0255.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0255.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0255.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0255.017] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FALL_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fall_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0255.017] GetFileType (hFile=0x1e8) returned 0x1 [0255.018] CloseHandle (hObject=0x1e8) returned 1 [0255.018] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0255.018] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FALL_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fall_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12ee)) returned 1 [0255.018] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0255.018] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0255.018] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0255.019] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00074_.WMF", cAlternateFileName="")) returned 1 [0255.019] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0255.019] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0255.019] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0255.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0255.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0255.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0255.020] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00074_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00074_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0255.020] GetFileType (hFile=0x1e8) returned 0x1 [0255.021] CloseHandle (hObject=0x1e8) returned 1 [0255.297] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0255.297] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00074_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00074_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45ba)) returned 1 [0255.298] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0255.298] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0255.298] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0255.298] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2eda, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00076_.WMF", cAlternateFileName="")) returned 1 [0255.298] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0255.298] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0255.298] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0255.299] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0255.299] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0255.299] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0255.300] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00076_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00076_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0255.300] GetFileType (hFile=0x198) returned 0x1 [0255.300] CloseHandle (hObject=0x198) returned 1 [0255.301] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0255.301] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00076_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00076_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2eda)) returned 1 [0255.301] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0255.301] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0255.302] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0255.302] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7620, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00077_.WMF", cAlternateFileName="")) returned 1 [0255.302] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0255.302] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0255.303] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0255.303] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0255.303] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0255.303] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0255.303] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00077_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00077_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0255.304] GetFileType (hFile=0x198) returned 0x1 [0255.304] CloseHandle (hObject=0x198) returned 1 [0255.305] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0255.305] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00077_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00077_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7620)) returned 1 [0255.305] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0255.305] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0255.305] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0255.305] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x721c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00086_.WMF", cAlternateFileName="")) returned 1 [0255.306] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0255.306] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0255.306] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0255.306] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0255.306] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0255.306] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0255.307] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00086_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00086_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0255.307] GetFileType (hFile=0x198) returned 0x1 [0255.308] CloseHandle (hObject=0x198) returned 1 [0255.308] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0255.308] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00086_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00086_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x721c)) returned 1 [0255.309] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0255.309] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0255.309] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0255.309] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3772, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00090_.WMF", cAlternateFileName="")) returned 1 [0255.309] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0255.309] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0255.309] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0255.309] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0255.310] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0255.310] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0255.310] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00090_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00090_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0255.311] GetFileType (hFile=0x198) returned 0x1 [0255.311] CloseHandle (hObject=0x198) returned 1 [0255.312] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0255.312] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00090_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00090_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3772)) returned 1 [0255.312] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0255.312] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0255.312] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0255.312] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc55757, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc55757, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x920e, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00096_.WMF", cAlternateFileName="")) returned 1 [0255.313] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0255.313] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0255.313] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0255.313] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0255.313] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0255.313] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0255.314] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00096_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00096_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0255.314] GetFileType (hFile=0x198) returned 0x1 [0255.315] CloseHandle (hObject=0x198) returned 1 [0255.315] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0255.316] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00096_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00096_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc55757, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc55757, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x920e)) returned 1 [0255.316] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0255.316] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0255.316] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0255.316] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc55757, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc55757, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3df0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00296_.WMF", cAlternateFileName="")) returned 1 [0255.317] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0255.317] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0255.317] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0255.317] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0255.317] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0255.317] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0255.334] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00296_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00296_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0255.335] GetFileType (hFile=0x198) returned 0x1 [0255.335] CloseHandle (hObject=0x198) returned 1 [0255.336] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0255.336] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00296_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00296_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc55757, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc55757, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3df0)) returned 1 [0255.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0255.336] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0255.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0255.336] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc7b993, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4712, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00297_.WMF", cAlternateFileName="")) returned 1 [0255.337] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0255.337] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0255.337] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0255.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0255.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0255.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0255.338] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00297_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00297_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0255.338] GetFileType (hFile=0x198) returned 0x1 [0255.339] CloseHandle (hObject=0x198) returned 1 [0255.339] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0255.339] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00297_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00297_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc7b993, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4712)) returned 1 [0255.340] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0255.340] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0255.340] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0255.340] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb6de, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00306_.WMF", cAlternateFileName="")) returned 1 [0255.340] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0255.340] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0255.340] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0255.341] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0255.341] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0255.341] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0255.342] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00306_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00306_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0255.342] GetFileType (hFile=0x198) returned 0x1 [0255.343] CloseHandle (hObject=0x198) returned 1 [0255.343] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0255.343] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00306_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00306_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb6de)) returned 1 [0255.343] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0255.343] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0255.344] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0255.344] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc55757, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00336_.WMF", cAlternateFileName="")) returned 1 [0255.344] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0255.344] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0255.344] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0255.344] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0255.344] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0255.344] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0255.345] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00336_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00336_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0255.345] GetFileType (hFile=0x198) returned 0x1 [0255.346] CloseHandle (hObject=0x198) returned 1 [0255.346] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0255.346] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00336_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00336_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc55757, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17b4)) returned 1 [0255.346] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0255.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0255.347] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0255.347] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfea, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00361_.WMF", cAlternateFileName="")) returned 1 [0255.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0255.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0255.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0255.347] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0255.347] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0255.347] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0255.348] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00361_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00361_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0255.348] GetFileType (hFile=0x198) returned 0x1 [0255.349] CloseHandle (hObject=0x198) returned 1 [0255.712] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0255.712] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00361_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00361_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfea)) returned 1 [0255.712] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0255.713] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0255.713] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0255.713] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc55757, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2168, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00369_.WMF", cAlternateFileName="")) returned 1 [0255.713] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0255.713] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0255.713] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0255.713] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0255.713] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0255.713] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0255.714] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00369_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00369_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0255.714] GetFileType (hFile=0x1e0) returned 0x1 [0255.715] CloseHandle (hObject=0x1e0) returned 1 [0255.715] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0255.716] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00369_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00369_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc55757, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2168)) returned 1 [0255.716] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0255.716] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0255.716] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0255.716] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00382_.WMF", cAlternateFileName="")) returned 1 [0255.716] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0255.716] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0255.717] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0255.717] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0255.717] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0255.717] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0255.717] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00382_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00382_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0255.718] GetFileType (hFile=0x1e0) returned 0x1 [0255.718] CloseHandle (hObject=0x1e0) returned 1 [0255.719] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0255.719] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00382_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00382_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20e8)) returned 1 [0255.719] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0255.719] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0255.719] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0255.719] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00397_.WMF", cAlternateFileName="")) returned 1 [0255.719] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0255.720] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0255.720] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0255.720] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0255.720] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0255.720] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0255.721] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00397_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00397_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0255.721] GetFileType (hFile=0x1e0) returned 0x1 [0255.722] CloseHandle (hObject=0x1e0) returned 1 [0255.722] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0255.722] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00397_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00397_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a40)) returned 1 [0255.723] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0255.723] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0255.723] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0255.723] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ec6, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00403_.WMF", cAlternateFileName="")) returned 1 [0255.723] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0255.723] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0255.723] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0255.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0255.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0255.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0255.726] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00403_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00403_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0255.726] GetFileType (hFile=0x1e0) returned 0x1 [0255.727] CloseHandle (hObject=0x1e0) returned 1 [0255.727] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0255.727] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00403_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00403_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ec6)) returned 1 [0255.728] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0255.728] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0255.728] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0255.728] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2afa, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00414_.WMF", cAlternateFileName="")) returned 1 [0255.728] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0255.728] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0255.728] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0255.729] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0255.729] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0255.729] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0255.730] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00414_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00414_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0255.730] GetFileType (hFile=0x1e0) returned 0x1 [0255.731] CloseHandle (hObject=0x1e0) returned 1 [0255.731] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0255.731] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00414_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00414_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2afa)) returned 1 [0255.731] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0255.732] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0255.732] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0255.732] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x400c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00419_.WMF", cAlternateFileName="")) returned 1 [0255.732] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0255.732] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0255.732] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0255.732] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0255.732] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0255.733] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0255.733] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00419_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00419_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0255.734] GetFileType (hFile=0x1e0) returned 0x1 [0255.734] CloseHandle (hObject=0x1e0) returned 1 [0255.735] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0255.735] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00419_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00419_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x400c)) returned 1 [0255.735] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0255.735] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0255.735] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0255.735] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00428_.WMF", cAlternateFileName="")) returned 1 [0255.735] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0255.735] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0255.735] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0255.735] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0255.736] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0255.736] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0255.736] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00428_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00428_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0255.737] GetFileType (hFile=0x1e0) returned 0x1 [0255.737] CloseHandle (hObject=0x1e0) returned 1 [0255.737] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0255.737] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00428_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00428_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12bc)) returned 1 [0255.738] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0255.738] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0255.738] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0255.738] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x83c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00435_.WMF", cAlternateFileName="")) returned 1 [0255.738] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0255.738] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0255.738] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0255.738] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0255.738] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0255.739] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0255.739] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00435_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00435_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0255.739] GetFileType (hFile=0x1e0) returned 0x1 [0255.740] CloseHandle (hObject=0x1e0) returned 1 [0255.741] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0255.741] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00435_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00435_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x83c)) returned 1 [0255.741] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0255.741] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0255.741] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0255.742] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00438_.WMF", cAlternateFileName="")) returned 1 [0255.742] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0255.742] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0255.742] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0255.742] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0255.742] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0255.742] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0255.743] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00438_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00438_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0255.743] GetFileType (hFile=0x1e0) returned 0x1 [0255.744] CloseHandle (hObject=0x1e0) returned 1 [0255.744] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0255.744] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00438_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00438_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13ea)) returned 1 [0255.745] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0255.745] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0255.745] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0255.745] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x22de, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00455_.WMF", cAlternateFileName="")) returned 1 [0255.745] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0255.745] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0255.745] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0255.745] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0255.746] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0255.746] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0255.747] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00455_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00455_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0255.747] GetFileType (hFile=0x1e0) returned 0x1 [0255.747] CloseHandle (hObject=0x1e0) returned 1 [0255.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0255.748] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00455_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00455_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x22de)) returned 1 [0255.748] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0255.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0255.748] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0255.748] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00459_.WMF", cAlternateFileName="")) returned 1 [0255.749] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0255.749] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0255.749] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0255.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0255.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0255.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0255.750] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00459_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00459_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0255.750] GetFileType (hFile=0x1e0) returned 0x1 [0255.751] CloseHandle (hObject=0x1e0) returned 1 [0255.751] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0255.751] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00459_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00459_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43fe)) returned 1 [0255.751] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0255.751] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0255.751] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0255.751] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00543_.WMF", cAlternateFileName="")) returned 1 [0255.751] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0255.752] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0255.752] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0255.752] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0255.752] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0255.752] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0255.753] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00543_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00543_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0255.753] GetFileType (hFile=0x1e0) returned 0x1 [0255.753] CloseHandle (hObject=0x1e0) returned 1 [0255.754] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0255.754] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00543_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00543_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5c0)) returned 1 [0255.754] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0255.754] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0255.754] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0255.755] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x148c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00544_.WMF", cAlternateFileName="")) returned 1 [0255.755] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0255.755] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0255.755] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0255.755] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0255.755] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0256.208] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0256.208] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00544_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00544_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0256.209] GetFileType (hFile=0x174) returned 0x1 [0256.209] CloseHandle (hObject=0x174) returned 1 [0256.209] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0256.209] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00544_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00544_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x148c)) returned 1 [0256.209] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0256.209] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0256.209] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0256.209] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x380, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00564_.WMF", cAlternateFileName="")) returned 1 [0256.209] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0256.209] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0256.209] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0256.210] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0256.210] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0256.210] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0256.210] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00564_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00564_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0256.211] GetFileType (hFile=0x174) returned 0x1 [0256.212] CloseHandle (hObject=0x174) returned 1 [0256.212] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0256.212] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00564_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00564_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x380)) returned 1 [0256.212] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0256.212] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0256.212] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0256.212] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00586_.WMF", cAlternateFileName="")) returned 1 [0256.212] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0256.212] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0256.213] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0256.213] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0256.213] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0256.213] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0256.213] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00586_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00586_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0256.214] GetFileType (hFile=0x174) returned 0x1 [0256.214] CloseHandle (hObject=0x174) returned 1 [0256.214] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0256.214] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00586_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00586_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2f0)) returned 1 [0256.214] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0256.214] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0256.214] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0256.214] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b90, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00775_.WMF", cAlternateFileName="")) returned 1 [0256.214] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0256.214] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0256.214] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0256.214] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0256.214] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0256.215] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0256.215] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00775_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00775_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0256.215] GetFileType (hFile=0x174) returned 0x1 [0256.215] CloseHandle (hObject=0x174) returned 1 [0256.215] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0256.215] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00775_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00775_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b90)) returned 1 [0256.215] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0256.215] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0256.216] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0256.216] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2332, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00779_.WMF", cAlternateFileName="")) returned 1 [0256.216] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0256.216] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0256.216] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0256.216] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0256.216] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0256.216] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0256.216] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00779_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00779_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0256.216] GetFileType (hFile=0x174) returned 0x1 [0256.216] CloseHandle (hObject=0x174) returned 1 [0256.217] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0256.217] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00779_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00779_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2332)) returned 1 [0256.217] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0256.217] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0256.217] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0256.217] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3690, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00799_.WMF", cAlternateFileName="")) returned 1 [0256.217] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0256.217] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0256.217] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0256.217] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0256.217] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0256.217] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0256.217] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00799_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00799_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0256.218] GetFileType (hFile=0x174) returned 0x1 [0256.218] CloseHandle (hObject=0x174) returned 1 [0256.218] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0256.218] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00799_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00799_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3690)) returned 1 [0256.218] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0256.218] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0256.218] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0256.218] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa6d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00814_.WMF", cAlternateFileName="")) returned 1 [0256.218] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0256.218] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0256.219] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0256.219] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0256.219] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0256.219] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0256.219] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00814_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00814_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0256.219] GetFileType (hFile=0x174) returned 0x1 [0256.219] CloseHandle (hObject=0x174) returned 1 [0256.219] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0256.219] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00814_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00814_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa6d0)) returned 1 [0256.220] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0256.220] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0256.220] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0256.220] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00965_.WMF", cAlternateFileName="")) returned 1 [0256.220] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0256.220] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0256.220] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0256.220] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0256.220] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0256.220] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0256.220] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00965_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00965_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0256.220] GetFileType (hFile=0x174) returned 0x1 [0256.221] CloseHandle (hObject=0x174) returned 1 [0256.221] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0256.221] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00965_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00965_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b3c)) returned 1 [0256.221] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0256.221] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0256.221] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0256.221] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x121a, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01074_.WMF", cAlternateFileName="")) returned 1 [0256.221] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0256.221] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0256.221] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0256.221] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0256.221] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0256.221] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0256.222] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01074_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01074_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0256.222] GetFileType (hFile=0x174) returned 0x1 [0256.222] CloseHandle (hObject=0x174) returned 1 [0256.222] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0256.222] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01074_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01074_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x121a)) returned 1 [0256.222] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0256.222] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0256.222] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0256.222] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x96c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01084_.WMF", cAlternateFileName="")) returned 1 [0256.222] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0256.222] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0256.222] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0256.223] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0256.223] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0256.223] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0256.223] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01084_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01084_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0256.223] GetFileType (hFile=0x174) returned 0x1 [0256.223] CloseHandle (hObject=0x174) returned 1 [0256.223] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0256.223] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01084_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01084_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x96c)) returned 1 [0256.224] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0256.224] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0256.224] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0256.224] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1378, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01176_.WMF", cAlternateFileName="")) returned 1 [0256.224] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0256.224] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0256.224] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0256.224] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0256.224] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0256.224] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0256.224] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01176_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01176_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0256.225] GetFileType (hFile=0x174) returned 0x1 [0256.225] CloseHandle (hObject=0x174) returned 1 [0256.225] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0256.225] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01176_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01176_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1378)) returned 1 [0256.225] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0256.225] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0256.225] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0256.225] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01191_.WMF", cAlternateFileName="")) returned 1 [0256.225] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0256.225] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0256.225] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0256.225] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0256.225] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0256.225] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0256.226] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01191_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01191_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0256.226] GetFileType (hFile=0x174) returned 0x1 [0256.226] CloseHandle (hObject=0x174) returned 1 [0256.226] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0256.226] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01191_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01191_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf7c)) returned 1 [0256.226] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0256.226] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0256.226] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0256.226] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf2a4e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x488, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01193_.WMF", cAlternateFileName="")) returned 1 [0256.227] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0256.227] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0256.227] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0256.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0256.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0256.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0256.227] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01193_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01193_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0256.227] GetFileType (hFile=0x174) returned 0x1 [0256.227] CloseHandle (hObject=0x174) returned 1 [0256.227] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0256.228] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01193_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01193_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf2a4e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x488)) returned 1 [0256.228] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0256.228] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0256.228] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0256.228] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf2a4e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x91c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01196_.WMF", cAlternateFileName="")) returned 1 [0256.228] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0256.228] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0256.228] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0256.228] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0256.228] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0256.228] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0256.228] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01196_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01196_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0256.228] GetFileType (hFile=0x174) returned 0x1 [0256.229] CloseHandle (hObject=0x174) returned 1 [0256.229] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0256.229] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01196_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01196_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf2a4e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x91c)) returned 1 [0256.229] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0256.229] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0256.229] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0256.229] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x284c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01548_.WMF", cAlternateFileName="")) returned 1 [0256.229] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0256.229] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0256.229] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0256.229] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0256.229] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0256.229] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0256.230] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01548_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01548_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0256.230] GetFileType (hFile=0x174) returned 0x1 [0256.230] CloseHandle (hObject=0x174) returned 1 [0256.230] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0256.230] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01548_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01548_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x284c)) returned 1 [0256.230] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0256.230] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0256.230] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0256.230] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf2a4e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x76ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01657_.WMF", cAlternateFileName="")) returned 1 [0256.231] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0256.231] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0256.231] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0256.231] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0256.231] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0256.231] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0256.231] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01657_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01657_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0256.231] GetFileType (hFile=0x174) returned 0x1 [0256.231] CloseHandle (hObject=0x174) returned 1 [0256.231] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0256.232] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01657_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01657_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf2a4e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x76ce)) returned 1 [0256.232] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0256.232] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0256.232] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0256.232] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4604, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01658_.WMF", cAlternateFileName="")) returned 1 [0256.232] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0256.232] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0256.232] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0256.232] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0256.232] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0256.232] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0256.232] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01658_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01658_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0256.232] GetFileType (hFile=0x174) returned 0x1 [0256.233] CloseHandle (hObject=0x174) returned 1 [0256.233] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0256.233] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01658_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01658_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4604)) returned 1 [0256.233] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0256.233] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0256.233] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0256.233] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x79cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01659_.WMF", cAlternateFileName="")) returned 1 [0256.233] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0256.233] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0256.233] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0256.234] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0256.234] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0256.234] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0256.234] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01659_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01659_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0256.234] GetFileType (hFile=0x174) returned 0x1 [0256.234] CloseHandle (hObject=0x174) returned 1 [0256.234] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0256.235] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01659_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01659_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x79cc)) returned 1 [0256.235] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0256.235] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0256.235] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0256.235] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x329e, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01660_.WMF", cAlternateFileName="")) returned 1 [0256.235] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0256.235] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0256.235] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0256.235] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0256.235] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0256.235] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0256.235] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01660_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01660_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0256.236] GetFileType (hFile=0x174) returned 0x1 [0256.236] CloseHandle (hObject=0x174) returned 1 [0256.236] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0256.236] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01660_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01660_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x329e)) returned 1 [0256.236] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0256.236] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0256.237] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0256.237] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02068_.WMF", cAlternateFileName="")) returned 1 [0256.237] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0256.237] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0256.237] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0256.237] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0256.237] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0256.237] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0256.237] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02068_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02068_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0256.238] GetFileType (hFile=0x174) returned 0x1 [0256.238] CloseHandle (hObject=0x174) returned 1 [0256.238] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0256.238] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02068_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02068_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9b8)) returned 1 [0256.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0256.238] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0256.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0256.239] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x88c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02071_.WMF", cAlternateFileName="")) returned 1 [0256.239] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0256.239] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0256.239] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0256.239] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0256.239] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0256.239] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0256.239] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02071_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02071_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0256.239] GetFileType (hFile=0x174) returned 0x1 [0256.573] CloseHandle (hObject=0x174) returned 1 [0256.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0256.573] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02071_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02071_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x88c)) returned 1 [0256.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0256.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0256.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0256.574] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x112c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02075_.WMF", cAlternateFileName="")) returned 1 [0256.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0256.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0256.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0256.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0256.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0256.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0256.782] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02075_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02075_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0256.783] GetFileType (hFile=0x174) returned 0x1 [0256.783] CloseHandle (hObject=0x174) returned 1 [0256.784] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0256.784] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02075_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02075_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x112c)) returned 1 [0256.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0256.784] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0256.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0256.784] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe70, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02088_.WMF", cAlternateFileName="")) returned 1 [0256.784] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0256.785] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0256.785] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0256.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0256.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0256.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0256.786] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02088_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02088_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0256.786] GetFileType (hFile=0x174) returned 0x1 [0256.787] CloseHandle (hObject=0x174) returned 1 [0256.788] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0256.788] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02088_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02088_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe70)) returned 1 [0256.788] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0256.788] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0256.788] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0256.788] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x61c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02097_.WMF", cAlternateFileName="")) returned 1 [0256.788] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0256.788] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0256.789] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0256.789] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0256.789] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0256.789] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0256.790] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02097_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02097_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0256.790] GetFileType (hFile=0x174) returned 0x1 [0256.790] CloseHandle (hObject=0x174) returned 1 [0256.791] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0256.791] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02097_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02097_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x61c)) returned 1 [0256.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0256.791] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0256.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0256.791] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1234, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02115_.WMF", cAlternateFileName="")) returned 1 [0256.791] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0256.791] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0256.792] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0256.792] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0256.792] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0256.792] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0256.792] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02115_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02115_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0256.793] GetFileType (hFile=0x174) returned 0x1 [0256.793] CloseHandle (hObject=0x174) returned 1 [0256.793] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0256.793] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02115_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02115_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1234)) returned 1 [0256.793] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0256.794] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0256.794] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0256.794] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf94, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02116_.WMF", cAlternateFileName="")) returned 1 [0256.794] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0256.794] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0256.794] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0256.794] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0256.794] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0256.794] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0256.795] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02116_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02116_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0256.795] GetFileType (hFile=0x174) returned 0x1 [0256.795] CloseHandle (hObject=0x174) returned 1 [0256.796] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0256.796] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02116_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02116_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf94)) returned 1 [0256.796] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0256.796] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0256.796] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0256.796] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02141_.WMF", cAlternateFileName="")) returned 1 [0256.796] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0256.796] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0256.796] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0256.796] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0256.796] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0256.797] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0256.797] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02141_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02141_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0256.797] GetFileType (hFile=0x174) returned 0x1 [0256.797] CloseHandle (hObject=0x174) returned 1 [0256.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0256.798] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02141_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02141_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa4c)) returned 1 [0256.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0256.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0256.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0256.798] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf2a4e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1510, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02153_.WMF", cAlternateFileName="")) returned 1 [0256.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0256.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0256.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0256.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0256.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0256.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0256.800] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02153_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02153_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0256.800] GetFileType (hFile=0x174) returned 0x1 [0256.800] CloseHandle (hObject=0x174) returned 1 [0256.801] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0256.801] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02153_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02153_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf2a4e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1510)) returned 1 [0256.801] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0256.801] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0256.801] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0256.801] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x670, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02158_.WMF", cAlternateFileName="")) returned 1 [0256.801] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0256.801] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0256.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0256.802] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0256.802] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0256.802] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0256.803] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02158_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02158_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0256.803] GetFileType (hFile=0x174) returned 0x1 [0256.803] CloseHandle (hObject=0x174) returned 1 [0256.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0256.804] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02158_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02158_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x670)) returned 1 [0256.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0256.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0256.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0256.804] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc38, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02161_.WMF", cAlternateFileName="")) returned 1 [0256.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0256.805] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0256.805] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0256.805] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0256.805] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0256.805] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0256.806] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02161_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02161_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0256.806] GetFileType (hFile=0x174) returned 0x1 [0256.806] CloseHandle (hObject=0x174) returned 1 [0256.807] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0256.807] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02161_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02161_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc38)) returned 1 [0256.807] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0256.807] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0256.807] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0256.807] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="FINCL_01.MID", cAlternateFileName="")) returned 1 [0256.807] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0256.807] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0256.807] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0256.807] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0256.808] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0256.808] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0256.808] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fincl_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0256.809] GetFileType (hFile=0x174) returned 0x1 [0256.809] CloseHandle (hObject=0x174) returned 1 [0256.810] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0256.811] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fincl_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32b5)) returned 1 [0256.811] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0256.811] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0256.811] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0256.811] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf2a4e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2466, dwReserved0=0x0, dwReserved1=0x0, cFileName="FINCL_02.MID", cAlternateFileName="")) returned 1 [0256.811] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0256.811] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0256.811] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0256.812] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0256.812] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0256.812] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0256.812] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_02.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fincl_02.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0256.813] GetFileType (hFile=0x174) returned 0x1 [0256.813] CloseHandle (hObject=0x174) returned 1 [0256.814] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0256.814] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_02.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fincl_02.mid"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf2a4e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2466)) returned 1 [0256.814] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0256.814] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0256.814] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0256.814] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x816, dwReserved0=0x0, dwReserved1=0x0, cFileName="FLAP.WMF", cAlternateFileName="")) returned 1 [0256.814] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0256.815] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0256.815] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0256.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0256.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0256.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0256.816] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FLAP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\flap.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0256.816] GetFileType (hFile=0x174) returned 0x1 [0256.816] CloseHandle (hObject=0x174) returned 1 [0256.817] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0256.817] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FLAP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\flap.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x816)) returned 1 [0256.817] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0256.817] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0256.817] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0256.817] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRDEN_01.MID", cAlternateFileName="")) returned 1 [0256.817] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0256.818] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0257.052] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0257.053] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0257.053] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0257.054] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0257.100] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRDEN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\grden_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0257.101] GetFileType (hFile=0x198) returned 0x1 [0257.101] CloseHandle (hObject=0x198) returned 1 [0257.102] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0257.102] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRDEN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\grden_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d8f)) returned 1 [0257.102] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0257.102] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0257.102] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0257.102] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRID_01.MID", cAlternateFileName="")) returned 1 [0257.103] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0257.103] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0257.103] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0257.103] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0257.103] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0257.103] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0257.104] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRID_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\grid_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0257.104] GetFileType (hFile=0x198) returned 0x1 [0257.105] CloseHandle (hObject=0x198) returned 1 [0257.106] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0257.106] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRID_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\grid_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18bb)) returned 1 [0257.106] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0257.106] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0257.106] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0257.107] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xeb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00057_.WMF", cAlternateFileName="")) returned 1 [0257.107] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0257.107] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0257.107] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0257.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0257.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0257.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0257.108] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00057_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00057_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0257.109] GetFileType (hFile=0x198) returned 0x1 [0257.109] CloseHandle (hObject=0x198) returned 1 [0257.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0257.110] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00057_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00057_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xeb4)) returned 1 [0257.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0257.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0257.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0257.110] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00084_.WMF", cAlternateFileName="")) returned 1 [0257.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0257.111] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0257.111] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0257.111] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0257.111] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0257.111] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0257.112] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00084_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00084_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0257.112] GetFileType (hFile=0x198) returned 0x1 [0257.113] CloseHandle (hObject=0x198) returned 1 [0257.113] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0257.113] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00084_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00084_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9a8)) returned 1 [0257.113] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0257.113] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0257.114] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0257.114] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00231_.WMF", cAlternateFileName="")) returned 1 [0257.114] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0257.114] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0257.114] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0257.114] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0257.114] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0257.114] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0257.115] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00231_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00231_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0257.115] GetFileType (hFile=0x198) returned 0x1 [0257.116] CloseHandle (hObject=0x198) returned 1 [0257.116] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0257.116] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00231_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00231_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b8)) returned 1 [0257.117] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0257.117] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0257.117] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0257.117] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x402, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00235_.WMF", cAlternateFileName="")) returned 1 [0257.117] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0257.117] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0257.117] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0257.118] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0257.118] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0257.118] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0257.119] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00235_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00235_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0257.119] GetFileType (hFile=0x198) returned 0x1 [0257.120] CloseHandle (hObject=0x198) returned 1 [0257.120] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0257.120] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00235_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00235_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x402)) returned 1 [0257.121] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0257.121] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0257.121] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0257.121] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00236_.WMF", cAlternateFileName="")) returned 1 [0257.121] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0257.121] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0257.121] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0257.121] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0257.122] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0257.122] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0257.122] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00236_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00236_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0257.123] GetFileType (hFile=0x198) returned 0x1 [0257.123] CloseHandle (hObject=0x198) returned 1 [0257.124] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0257.124] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00236_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00236_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcd6)) returned 1 [0257.124] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0257.124] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0257.124] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0257.125] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00241_.WMF", cAlternateFileName="")) returned 1 [0257.125] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0257.125] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0257.125] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0257.125] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0257.125] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0257.125] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0257.126] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00241_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00241_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0257.127] GetFileType (hFile=0x198) returned 0x1 [0257.127] CloseHandle (hObject=0x198) returned 1 [0257.128] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0257.128] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00241_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00241_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7a8)) returned 1 [0257.128] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0257.128] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0257.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0257.129] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00260_.WMF", cAlternateFileName="")) returned 1 [0257.129] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0257.129] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0257.129] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0257.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0257.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0257.130] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0257.131] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00260_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00260_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0257.131] GetFileType (hFile=0x198) returned 0x1 [0257.132] CloseHandle (hObject=0x198) returned 1 [0257.132] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0257.132] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00260_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00260_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe4e)) returned 1 [0257.132] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0257.132] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0257.133] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0257.133] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00276_.WMF", cAlternateFileName="")) returned 1 [0257.133] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0257.133] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0257.133] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0257.133] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0257.133] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0257.134] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0257.134] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00276_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00276_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0257.135] GetFileType (hFile=0x198) returned 0x1 [0257.135] CloseHandle (hObject=0x198) returned 1 [0257.136] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0257.136] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00276_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00276_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc8)) returned 1 [0257.136] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0257.136] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0257.136] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0257.136] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00334_.WMF", cAlternateFileName="")) returned 1 [0257.136] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0257.137] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0257.137] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0257.137] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0257.137] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0257.137] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0257.138] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00334_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00334_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0257.138] GetFileType (hFile=0x198) returned 0x1 [0257.139] CloseHandle (hObject=0x198) returned 1 [0257.139] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0257.139] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00334_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00334_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5f8)) returned 1 [0257.139] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0257.139] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0257.140] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0257.140] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xce2, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00443_.WMF", cAlternateFileName="")) returned 1 [0257.140] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0257.140] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0257.140] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0257.140] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0257.140] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0257.140] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0257.141] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00443_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00443_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0257.141] GetFileType (hFile=0x198) returned 0x1 [0257.142] CloseHandle (hObject=0x198) returned 1 [0257.142] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0257.142] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00443_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00443_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xce2)) returned 1 [0257.142] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0257.143] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0257.143] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0257.143] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x332, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00513_.WMF", cAlternateFileName="")) returned 1 [0257.143] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0257.143] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0257.143] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0257.143] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0257.143] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0257.143] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0257.144] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00513_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00513_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0257.144] GetFileType (hFile=0x198) returned 0x1 [0257.145] CloseHandle (hObject=0x198) returned 1 [0257.146] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0257.146] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00513_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00513_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x332)) returned 1 [0257.476] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0257.476] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0257.476] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0257.476] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3960, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00524_.WMF", cAlternateFileName="")) returned 1 [0257.476] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0257.476] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0257.476] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0257.476] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0257.476] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0257.477] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0257.477] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00524_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00524_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0257.478] GetFileType (hFile=0x1e0) returned 0x1 [0257.478] CloseHandle (hObject=0x1e0) returned 1 [0257.478] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0257.478] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00524_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00524_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3960)) returned 1 [0257.479] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0257.479] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0257.479] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0257.479] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x34e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00526_.WMF", cAlternateFileName="")) returned 1 [0257.479] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0257.479] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0257.479] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0257.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0257.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0257.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0257.480] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00526_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00526_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0257.481] GetFileType (hFile=0x1e0) returned 0x1 [0257.481] CloseHandle (hObject=0x1e0) returned 1 [0257.482] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0257.482] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00526_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00526_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x34e2)) returned 1 [0257.482] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0257.482] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0257.482] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0257.482] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00527_.WMF", cAlternateFileName="")) returned 1 [0257.483] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0257.483] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0257.483] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0257.483] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0257.483] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0257.483] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0257.484] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00527_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00527_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0257.484] GetFileType (hFile=0x1e0) returned 0x1 [0257.485] CloseHandle (hObject=0x1e0) returned 1 [0257.486] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0257.486] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00527_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00527_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16a6)) returned 1 [0257.486] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0257.486] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0257.486] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0257.486] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe86, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00546_.WMF", cAlternateFileName="")) returned 1 [0257.487] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0257.487] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0257.487] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0257.487] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0257.487] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0257.487] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0257.488] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00546_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00546_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0257.488] GetFileType (hFile=0x1e0) returned 0x1 [0257.489] CloseHandle (hObject=0x1e0) returned 1 [0257.489] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0257.490] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00546_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00546_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe86)) returned 1 [0257.490] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0257.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0257.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0257.491] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00601_.WMF", cAlternateFileName="")) returned 1 [0257.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0257.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0257.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0257.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0257.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0257.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0257.492] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00601_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00601_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0257.493] GetFileType (hFile=0x1e0) returned 0x1 [0257.493] CloseHandle (hObject=0x1e0) returned 1 [0257.494] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0257.494] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00601_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00601_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5bc)) returned 1 [0257.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0257.494] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0257.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0257.494] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x578, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00602_.WMF", cAlternateFileName="")) returned 1 [0257.494] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0257.495] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0257.495] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0257.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0257.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0257.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0257.496] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00602_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00602_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0257.496] GetFileType (hFile=0x1e0) returned 0x1 [0257.497] CloseHandle (hObject=0x1e0) returned 1 [0257.497] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0257.497] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00602_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00602_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x578)) returned 1 [0257.498] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0257.498] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0257.498] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0257.498] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3158, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00612_.WMF", cAlternateFileName="")) returned 1 [0257.498] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0257.498] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0257.498] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0257.498] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0257.499] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0257.499] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0257.500] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00612_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00612_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0257.500] GetFileType (hFile=0x1e0) returned 0x1 [0257.500] CloseHandle (hObject=0x1e0) returned 1 [0257.501] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0257.501] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00612_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00612_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3158)) returned 1 [0257.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0257.502] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0257.502] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0257.502] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2994, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00623_.WMF", cAlternateFileName="")) returned 1 [0257.502] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0257.502] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0257.502] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0257.503] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0257.503] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0257.503] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0257.504] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00623_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00623_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0257.504] GetFileType (hFile=0x1e0) returned 0x1 [0257.505] CloseHandle (hObject=0x1e0) returned 1 [0257.506] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0257.506] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00623_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00623_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2994)) returned 1 [0257.506] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0257.506] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0257.507] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0257.507] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x844, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00625_.WMF", cAlternateFileName="")) returned 1 [0257.507] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0257.507] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0257.507] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0257.507] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0257.508] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0257.508] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0257.509] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00625_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00625_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0257.509] GetFileType (hFile=0x1e0) returned 0x1 [0257.510] CloseHandle (hObject=0x1e0) returned 1 [0257.510] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0257.510] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00625_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00625_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x844)) returned 1 [0257.511] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0257.511] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0257.511] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0257.511] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x620, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00636_.WMF", cAlternateFileName="")) returned 1 [0257.511] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0257.511] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0257.512] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0257.512] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0257.512] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0257.512] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0257.513] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00636_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00636_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0257.513] GetFileType (hFile=0x1e0) returned 0x1 [0257.514] CloseHandle (hObject=0x1e0) returned 1 [0257.514] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0257.515] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00636_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00636_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x620)) returned 1 [0257.515] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0257.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0257.515] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0257.515] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ce2, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00669_.WMF", cAlternateFileName="")) returned 1 [0257.516] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0257.516] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0257.516] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0257.516] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0257.516] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0257.516] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0257.517] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00669_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00669_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0257.518] GetFileType (hFile=0x1e0) returned 0x1 [0257.519] CloseHandle (hObject=0x1e0) returned 1 [0257.519] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0257.519] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00669_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00669_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ce2)) returned 1 [0257.520] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0257.520] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0257.520] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0257.520] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2454, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00681_.WMF", cAlternateFileName="")) returned 1 [0257.520] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0257.521] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0257.521] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0257.796] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0257.796] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0257.797] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0257.797] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00681_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00681_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0257.798] GetFileType (hFile=0x1c0) returned 0x1 [0257.799] CloseHandle (hObject=0x1c0) returned 1 [0257.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0257.799] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00681_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00681_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2454)) returned 1 [0257.800] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0257.800] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0257.800] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0257.800] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00685_.WMF", cAlternateFileName="")) returned 1 [0257.800] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0257.800] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0257.800] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0257.801] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0257.801] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0257.801] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0257.802] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00685_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00685_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0257.803] GetFileType (hFile=0x1c0) returned 0x1 [0257.803] CloseHandle (hObject=0x1c0) returned 1 [0257.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0257.804] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00685_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00685_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfc0)) returned 1 [0257.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0257.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0257.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0257.804] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00687_.WMF", cAlternateFileName="")) returned 1 [0258.376] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0258.376] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0258.376] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0258.376] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0258.376] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0258.376] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0258.377] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00687_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00687_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0258.378] GetFileType (hFile=0x1ac) returned 0x1 [0258.378] CloseHandle (hObject=0x1ac) returned 1 [0258.379] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0258.379] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00687_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00687_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10f4)) returned 1 [0258.379] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0258.379] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0258.379] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0258.379] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bac, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00688_.WMF", cAlternateFileName="")) returned 1 [0258.379] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0258.380] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0258.380] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0258.380] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0258.380] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0258.380] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0258.381] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00688_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00688_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0258.381] GetFileType (hFile=0x1ac) returned 0x1 [0258.382] CloseHandle (hObject=0x1ac) returned 1 [0258.382] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0258.382] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00688_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00688_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bac)) returned 1 [0258.383] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0258.383] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0258.383] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0258.383] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bba, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00693_.WMF", cAlternateFileName="")) returned 1 [0258.383] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0258.383] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0258.383] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0258.384] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0258.384] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0258.384] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0258.385] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00693_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00693_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0258.385] GetFileType (hFile=0x1ac) returned 0x1 [0258.385] CloseHandle (hObject=0x1ac) returned 1 [0258.386] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0258.386] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00693_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00693_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bba)) returned 1 [0258.386] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0258.387] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0258.387] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0258.387] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb20, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01013_.WMF", cAlternateFileName="")) returned 1 [0258.387] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0258.387] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0258.387] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0258.388] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0258.388] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0258.388] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0258.389] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01013_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01013_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0258.389] GetFileType (hFile=0x1ac) returned 0x1 [0258.390] CloseHandle (hObject=0x1ac) returned 1 [0258.390] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0258.390] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01013_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01013_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb20)) returned 1 [0258.391] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0258.391] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0258.391] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0258.391] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x47c, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01015_.WMF", cAlternateFileName="")) returned 1 [0258.391] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0258.391] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0258.392] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0258.392] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0258.392] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0258.392] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0258.393] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01015_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0258.394] GetFileType (hFile=0x1ac) returned 0x1 [0258.394] CloseHandle (hObject=0x1ac) returned 1 [0258.395] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0258.395] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01015_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x47c)) returned 1 [0258.395] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0258.395] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0258.395] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0258.395] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xac4, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01058_.WMF", cAlternateFileName="")) returned 1 [0258.396] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0258.396] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0258.396] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0258.396] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0258.396] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0258.396] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0258.397] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01058_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01058_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0258.397] GetFileType (hFile=0x1ac) returned 0x1 [0258.398] CloseHandle (hObject=0x1ac) returned 1 [0258.399] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0258.399] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01058_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01058_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xac4)) returned 1 [0258.399] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0258.399] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0258.399] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0258.399] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01065_.WMF", cAlternateFileName="")) returned 1 [0258.400] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0258.400] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0258.400] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0258.400] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0258.400] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0258.400] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0258.401] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01065_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01065_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0258.401] GetFileType (hFile=0x1ac) returned 0x1 [0258.402] CloseHandle (hObject=0x1ac) returned 1 [0258.402] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0258.402] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01065_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01065_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f4)) returned 1 [0258.403] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0258.403] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0258.403] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0258.403] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1388, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01080_.WMF", cAlternateFileName="")) returned 1 [0258.403] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0258.403] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0258.403] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0258.404] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0258.404] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0258.404] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0258.405] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01080_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01080_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0258.405] GetFileType (hFile=0x1ac) returned 0x1 [0258.406] CloseHandle (hObject=0x1ac) returned 1 [0258.406] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0258.406] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01080_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01080_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1388)) returned 1 [0258.407] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0258.407] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0258.407] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0258.407] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1cac, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01242_.WMF", cAlternateFileName="")) returned 1 [0258.407] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0258.407] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0258.408] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0258.408] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0258.408] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0258.408] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0258.855] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01242_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01242_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0258.855] GetFileType (hFile=0x174) returned 0x1 [0258.856] CloseHandle (hObject=0x174) returned 1 [0258.856] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0258.856] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01242_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01242_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1cac)) returned 1 [0258.857] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0258.857] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0258.857] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0258.857] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3dbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01291_.WMF", cAlternateFileName="")) returned 1 [0258.857] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0258.857] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0258.858] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0258.858] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0258.858] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0258.858] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0258.859] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01291_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01291_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0258.859] GetFileType (hFile=0x174) returned 0x1 [0258.860] CloseHandle (hObject=0x174) returned 1 [0258.860] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0258.860] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01291_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01291_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3dbe)) returned 1 [0258.861] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0258.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0258.861] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0258.861] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1780, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01329_.WMF", cAlternateFileName="")) returned 1 [0258.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0258.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0258.862] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0258.862] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0258.863] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0258.863] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0258.863] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01329_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01329_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0258.864] GetFileType (hFile=0x174) returned 0x1 [0258.864] CloseHandle (hObject=0x174) returned 1 [0258.865] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0258.865] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01329_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01329_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1780)) returned 1 [0258.865] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0258.865] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0258.865] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0258.865] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1746, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01461_.WMF", cAlternateFileName="")) returned 1 [0258.865] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0258.865] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0258.866] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0258.866] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0258.866] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0258.866] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0258.867] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01461_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01461_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0258.867] GetFileType (hFile=0x174) returned 0x1 [0258.867] CloseHandle (hObject=0x174) returned 1 [0258.868] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0258.868] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01461_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01461_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1746)) returned 1 [0258.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0258.868] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0258.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0258.868] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c80, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01618_.WMF", cAlternateFileName="")) returned 1 [0258.868] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0258.868] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0258.868] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0258.869] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0258.869] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0258.869] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0258.869] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01618_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01618_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0258.870] GetFileType (hFile=0x174) returned 0x1 [0258.870] CloseHandle (hObject=0x174) returned 1 [0258.870] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0258.870] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01618_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01618_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c80)) returned 1 [0258.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0258.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0258.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0258.871] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1526, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01759_.WMF", cAlternateFileName="")) returned 1 [0258.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0258.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0258.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0258.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0258.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0258.872] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0258.872] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01759_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01759_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0258.872] GetFileType (hFile=0x174) returned 0x1 [0258.873] CloseHandle (hObject=0x174) returned 1 [0258.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0258.873] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01759_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01759_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1526)) returned 1 [0258.874] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0258.874] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0258.874] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0258.874] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa38, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01875_.WMF", cAlternateFileName="")) returned 1 [0258.874] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0258.874] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0258.874] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0258.874] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0258.874] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0258.874] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0258.875] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01875_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01875_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0258.875] GetFileType (hFile=0x174) returned 0x1 [0258.876] CloseHandle (hObject=0x174) returned 1 [0258.876] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0258.876] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01875_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01875_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa38)) returned 1 [0258.876] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0258.876] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0258.876] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0258.877] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6852, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01923_.WMF", cAlternateFileName="")) returned 1 [0258.877] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0258.877] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0258.877] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0258.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0258.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0258.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0258.879] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01923_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01923_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0258.879] GetFileType (hFile=0x174) returned 0x1 [0258.880] CloseHandle (hObject=0x174) returned 1 [0258.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0258.880] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01923_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01923_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6852)) returned 1 [0258.881] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0258.881] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0258.881] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0258.881] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa90, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH02155_.WMF", cAlternateFileName="")) returned 1 [0258.881] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0258.881] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0258.881] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0258.881] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0258.882] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0258.882] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0258.882] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02155_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02155_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0258.883] GetFileType (hFile=0x174) returned 0x1 [0258.883] CloseHandle (hObject=0x174) returned 1 [0258.884] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0258.884] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02155_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02155_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa90)) returned 1 [0258.884] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0258.884] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0258.884] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0258.884] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x52c, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH02166_.WMF", cAlternateFileName="")) returned 1 [0258.884] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0258.884] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0258.884] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0258.884] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0258.885] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0258.885] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0258.885] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02166_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02166_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0258.885] GetFileType (hFile=0x174) returned 0x1 [0258.886] CloseHandle (hObject=0x174) returned 1 [0258.886] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0258.886] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02166_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02166_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x52c)) returned 1 [0258.886] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0258.886] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0258.886] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0258.887] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1efc, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH02282_.WMF", cAlternateFileName="")) returned 1 [0258.887] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0258.887] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0258.887] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0258.887] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0258.887] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0258.887] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0258.888] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02282_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02282_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0258.888] GetFileType (hFile=0x174) returned 0x1 [0258.889] CloseHandle (hObject=0x174) returned 1 [0258.889] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0258.889] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02282_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02282_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1efc)) returned 1 [0258.889] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0258.889] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0258.889] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0258.890] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH02298_.WMF", cAlternateFileName="")) returned 1 [0258.890] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0258.890] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0258.890] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0258.890] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0258.890] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0258.890] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0258.891] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02298_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02298_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0258.891] GetFileType (hFile=0x174) returned 0x1 [0258.891] CloseHandle (hObject=0x174) returned 1 [0258.892] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0258.892] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02298_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02298_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15b0)) returned 1 [0258.892] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0258.892] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0258.892] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0258.892] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x136a, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH02312_.WMF", cAlternateFileName="")) returned 1 [0258.892] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0258.892] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0258.893] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0259.270] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0259.270] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0259.270] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0259.271] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02312_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02312_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0259.271] GetFileType (hFile=0x21c) returned 0x1 [0259.272] CloseHandle (hObject=0x21c) returned 1 [0259.272] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0259.272] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02312_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02312_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x136a)) returned 1 [0259.272] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0259.272] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0259.273] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0259.273] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH02313_.WMF", cAlternateFileName="")) returned 1 [0259.273] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0259.273] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0259.273] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0259.273] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0259.273] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0259.273] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0259.274] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02313_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02313_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0259.274] GetFileType (hFile=0x21c) returned 0x1 [0259.275] CloseHandle (hObject=0x21c) returned 1 [0259.275] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0259.275] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02313_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02313_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc0a)) returned 1 [0259.275] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0259.275] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0259.275] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0259.276] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5b04, dwReserved0=0x0, dwReserved1=0x0, cFileName="HM00005_.WMF", cAlternateFileName="")) returned 1 [0259.276] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0259.276] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0259.276] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0259.276] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0259.276] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0259.276] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0259.277] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00005_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00005_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0259.277] GetFileType (hFile=0x21c) returned 0x1 [0259.277] CloseHandle (hObject=0x21c) returned 1 [0259.278] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0259.278] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00005_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00005_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5b04)) returned 1 [0259.278] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0259.278] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0259.278] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0259.278] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5664, dwReserved0=0x0, dwReserved1=0x0, cFileName="HM00114_.WMF", cAlternateFileName="")) returned 1 [0259.278] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0259.278] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0259.278] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0259.279] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0259.279] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0259.279] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0259.279] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00114_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00114_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0259.279] GetFileType (hFile=0x21c) returned 0x1 [0259.280] CloseHandle (hObject=0x21c) returned 1 [0259.280] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0259.280] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00114_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00114_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5664)) returned 1 [0259.280] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0259.281] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0259.281] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0259.281] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3dec, dwReserved0=0x0, dwReserved1=0x0, cFileName="HM00116_.WMF", cAlternateFileName="")) returned 1 [0259.281] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0259.281] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0259.281] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0259.281] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0259.281] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0259.281] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0259.282] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00116_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00116_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0259.282] GetFileType (hFile=0x21c) returned 0x1 [0259.282] CloseHandle (hObject=0x21c) returned 1 [0259.283] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0259.283] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00116_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00116_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3dec)) returned 1 [0259.283] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0259.283] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0259.283] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0259.284] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb10, dwReserved0=0x0, dwReserved1=0x0, cFileName="HM00172_.WMF", cAlternateFileName="")) returned 1 [0259.284] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0259.285] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0259.285] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0259.285] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0259.285] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0259.285] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0259.285] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00172_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0259.286] GetFileType (hFile=0x21c) returned 0x1 [0259.286] CloseHandle (hObject=0x21c) returned 1 [0259.286] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0259.287] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00172_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb10)) returned 1 [0259.287] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0259.287] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0259.287] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0259.287] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10ca8, dwReserved0=0x0, dwReserved1=0x0, cFileName="HM00426_.WMF", cAlternateFileName="")) returned 1 [0259.287] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0259.287] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0259.287] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0259.287] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0259.288] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0259.288] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0259.288] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00426_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00426_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0259.288] GetFileType (hFile=0x21c) returned 0x1 [0259.289] CloseHandle (hObject=0x21c) returned 1 [0259.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0259.289] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00426_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00426_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10ca8)) returned 1 [0259.289] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0259.290] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0259.290] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0259.290] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="HTECH_01.MID", cAlternateFileName="")) returned 1 [0259.290] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0259.290] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0259.290] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0259.290] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0259.290] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0259.290] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0259.291] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HTECH_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\htech_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0259.291] GetFileType (hFile=0x21c) returned 0x1 [0259.291] CloseHandle (hObject=0x21c) returned 1 [0259.292] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0259.292] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HTECH_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\htech_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c0a)) returned 1 [0259.292] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0259.292] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0259.292] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0259.292] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x486, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00046_.WMF", cAlternateFileName="")) returned 1 [0259.292] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0259.292] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0259.292] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0259.293] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0259.293] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0259.293] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0259.293] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00046_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00046_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0259.293] GetFileType (hFile=0x21c) returned 0x1 [0259.294] CloseHandle (hObject=0x21c) returned 1 [0259.294] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0259.294] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00046_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00046_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x486)) returned 1 [0259.294] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0259.294] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0259.294] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0259.294] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x318, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00118_.WMF", cAlternateFileName="")) returned 1 [0259.295] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0259.295] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0259.295] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0259.295] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0259.295] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0259.295] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0259.295] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00118_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00118_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0259.296] GetFileType (hFile=0x21c) returned 0x1 [0259.296] CloseHandle (hObject=0x21c) returned 1 [0259.296] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0259.296] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00118_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00118_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x318)) returned 1 [0259.297] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0259.297] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0259.297] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0259.297] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x432, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00177_.WMF", cAlternateFileName="")) returned 1 [0259.297] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0259.297] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0259.297] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0259.297] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0259.297] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0259.297] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0259.298] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00177_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00177_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0259.298] GetFileType (hFile=0x21c) returned 0x1 [0259.298] CloseHandle (hObject=0x21c) returned 1 [0259.299] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0259.299] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00177_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00177_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x432)) returned 1 [0259.378] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0259.378] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0259.378] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0259.378] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x738, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00204_.WMF", cAlternateFileName="")) returned 1 [0259.378] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0259.378] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0259.378] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0259.378] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0259.378] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0259.378] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0259.379] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00204_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00204_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0259.379] GetFileType (hFile=0x21c) returned 0x1 [0259.380] CloseHandle (hObject=0x21c) returned 1 [0259.380] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0259.380] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00204_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00204_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x738)) returned 1 [0259.380] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0259.380] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0259.380] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0259.380] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2bb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00233_.WMF", cAlternateFileName="")) returned 1 [0259.381] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0259.381] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0259.381] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0259.381] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0259.381] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0259.381] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0259.382] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00233_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00233_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0259.382] GetFileType (hFile=0x21c) returned 0x1 [0259.382] CloseHandle (hObject=0x21c) returned 1 [0259.383] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0259.383] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00233_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00233_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2bb6)) returned 1 [0259.383] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0259.383] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0259.383] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0259.383] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x764, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00343_.WMF", cAlternateFileName="")) returned 1 [0259.383] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0259.383] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0259.383] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0259.384] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0259.384] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0259.384] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0259.384] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00343_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00343_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0259.384] GetFileType (hFile=0x21c) returned 0x1 [0259.385] CloseHandle (hObject=0x21c) returned 1 [0259.385] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0259.385] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00343_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00343_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x764)) returned 1 [0259.386] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0259.386] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0259.386] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0259.386] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00346_.WMF", cAlternateFileName="")) returned 1 [0259.386] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0259.386] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0259.386] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0259.386] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0259.386] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0259.386] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0259.387] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00346_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00346_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0259.387] GetFileType (hFile=0x21c) returned 0x1 [0259.388] CloseHandle (hObject=0x21c) returned 1 [0259.388] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0259.388] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00346_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00346_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b8)) returned 1 [0259.389] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0259.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0259.389] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0259.389] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x788, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00351_.WMF", cAlternateFileName="")) returned 1 [0259.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0259.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0259.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0259.389] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0259.389] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0259.389] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0259.390] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00351_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00351_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0259.390] GetFileType (hFile=0x21c) returned 0x1 [0259.391] CloseHandle (hObject=0x21c) returned 1 [0259.391] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0259.391] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00351_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00351_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x788)) returned 1 [0259.391] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0259.391] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0259.391] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0259.391] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x23d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00557_.WMF", cAlternateFileName="")) returned 1 [0259.391] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0259.392] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0259.392] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0259.392] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0259.392] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0259.392] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0259.392] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00557_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00557_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0259.392] GetFileType (hFile=0x21c) returned 0x1 [0259.662] CloseHandle (hObject=0x21c) returned 1 [0259.663] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0259.663] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00557_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00557_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x23d4)) returned 1 [0259.664] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0259.664] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0259.664] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0259.664] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe00f20a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00915_.WMF", cAlternateFileName="")) returned 1 [0259.664] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0259.664] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0259.665] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0259.665] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0259.665] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0259.665] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0259.740] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00915_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00915_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0259.740] GetFileType (hFile=0x1c0) returned 0x1 [0259.741] CloseHandle (hObject=0x1c0) returned 1 [0259.741] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0259.741] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00915_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00915_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe00f20a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31cc)) returned 1 [0259.742] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0259.742] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0259.742] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0259.742] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe00f20a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b08, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00919_.WMF", cAlternateFileName="")) returned 1 [0259.742] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0259.742] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0259.742] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0259.743] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0259.743] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0259.743] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0259.743] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00919_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00919_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0259.744] GetFileType (hFile=0x1c0) returned 0x1 [0259.744] CloseHandle (hObject=0x1c0) returned 1 [0259.745] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0259.745] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00919_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00919_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe00f20a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b08)) returned 1 [0259.745] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0259.745] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0259.745] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0259.745] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00956_.WMF", cAlternateFileName="")) returned 1 [0259.745] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0259.745] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0259.745] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0259.746] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0259.746] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0259.746] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0259.747] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00956_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00956_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0259.747] GetFileType (hFile=0x1c0) returned 0x1 [0259.747] CloseHandle (hObject=0x1c0) returned 1 [0259.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0259.748] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00956_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00956_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e8)) returned 1 [0259.748] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0259.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0259.748] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0259.748] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe00f20a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb80, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00957_.WMF", cAlternateFileName="")) returned 1 [0259.749] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0259.749] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0259.749] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0259.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0259.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0259.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0259.750] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00957_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00957_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0259.750] GetFileType (hFile=0x1c0) returned 0x1 [0259.751] CloseHandle (hObject=0x1c0) returned 1 [0259.751] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0259.751] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00957_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00957_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe00f20a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb80)) returned 1 [0259.751] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0259.752] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0259.752] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0259.752] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe00f20a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2178, dwReserved0=0x0, dwReserved1=0x0, cFileName="INDST_01.MID", cAlternateFileName="")) returned 1 [0259.752] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0259.752] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0259.753] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0259.753] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0259.753] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0259.753] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0259.754] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\INDST_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\indst_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0259.754] GetFileType (hFile=0x1c0) returned 0x1 [0259.755] CloseHandle (hObject=0x1c0) returned 1 [0259.755] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0259.755] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\INDST_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\indst_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe00f20a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2178)) returned 1 [0259.755] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0259.756] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0259.756] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0259.756] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe00f20a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0075478.GIF", cAlternateFileName="")) returned 1 [0259.756] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0259.756] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0259.756] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0259.756] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0259.756] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0259.757] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0259.757] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0075478.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0075478.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0259.757] GetFileType (hFile=0x1c0) returned 0x1 [0259.758] CloseHandle (hObject=0x1c0) returned 1 [0259.758] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0259.759] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0075478.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0075478.gif"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe00f20a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c4)) returned 1 [0259.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0259.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0259.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0259.759] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2606, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0086384.WMF", cAlternateFileName="")) returned 1 [0259.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0259.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0259.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0259.760] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0259.760] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0259.760] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0259.760] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086384.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086384.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0259.761] GetFileType (hFile=0x1c0) returned 0x1 [0259.761] CloseHandle (hObject=0x1c0) returned 1 [0259.761] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0259.762] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086384.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086384.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2606)) returned 1 [0259.762] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0259.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0259.762] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0259.762] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x257c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0086420.WMF", cAlternateFileName="")) returned 1 [0259.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0259.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0259.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0259.762] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0259.763] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0259.763] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0259.763] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086420.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086420.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0259.764] GetFileType (hFile=0x1c0) returned 0x1 [0259.764] CloseHandle (hObject=0x1c0) returned 1 [0259.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0259.765] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086420.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086420.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x257c)) returned 1 [0259.765] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0259.765] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0259.765] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0259.765] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4278, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0086424.WMF", cAlternateFileName="")) returned 1 [0259.765] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0259.765] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0259.766] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0259.766] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0259.766] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0259.766] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0259.766] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086424.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086424.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0259.767] GetFileType (hFile=0x1c0) returned 0x1 [0259.767] CloseHandle (hObject=0x1c0) returned 1 [0259.767] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0259.767] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086424.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086424.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4278)) returned 1 [0259.768] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0259.768] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0259.768] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0259.768] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5516, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0086426.WMF", cAlternateFileName="")) returned 1 [0259.768] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0259.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0259.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0259.769] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0259.769] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0259.769] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0259.769] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086426.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086426.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0259.770] GetFileType (hFile=0x1c0) returned 0x1 [0259.770] CloseHandle (hObject=0x1c0) returned 1 [0259.770] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0259.771] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086426.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086426.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5516)) returned 1 [0259.771] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0259.771] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0259.771] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0259.771] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8a12, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0086428.WMF", cAlternateFileName="")) returned 1 [0259.771] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0259.771] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0259.771] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0259.771] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0259.771] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0259.771] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0259.772] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086428.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086428.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0259.772] GetFileType (hFile=0x1c0) returned 0x1 [0259.772] CloseHandle (hObject=0x1c0) returned 1 [0259.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0259.773] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086428.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086428.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8a12)) returned 1 [0259.773] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0259.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0259.773] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0259.773] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x829a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0086432.WMF", cAlternateFileName="")) returned 1 [0259.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0259.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0259.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0259.773] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0259.774] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0259.774] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0259.774] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086432.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086432.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0259.775] GetFileType (hFile=0x1c0) returned 0x1 [0259.775] CloseHandle (hObject=0x1c0) returned 1 [0259.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0259.775] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086432.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086432.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x829a)) returned 1 [0259.776] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0259.776] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0259.776] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0259.776] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x375e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0086478.WMF", cAlternateFileName="")) returned 1 [0259.776] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0259.776] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0259.776] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0259.776] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0259.776] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0259.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0259.777] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086478.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086478.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0259.778] GetFileType (hFile=0x1c0) returned 0x1 [0259.778] CloseHandle (hObject=0x1c0) returned 1 [0259.779] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0259.779] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086478.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086478.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x375e)) returned 1 [0259.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0259.779] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0259.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0259.779] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4dba, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0089945.WMF", cAlternateFileName="")) returned 1 [0259.779] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0259.779] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0259.779] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0259.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0259.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0259.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0259.780] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089945.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0089945.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0259.781] GetFileType (hFile=0x1c0) returned 0x1 [0259.781] CloseHandle (hObject=0x1c0) returned 1 [0259.781] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0259.781] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089945.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0089945.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4dba)) returned 1 [0259.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0259.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0259.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0259.782] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d40, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0089992.WMF", cAlternateFileName="")) returned 1 [0259.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0259.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0259.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0259.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0259.783] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0259.783] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0259.783] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089992.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0089992.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0259.784] GetFileType (hFile=0x1c0) returned 0x1 [0259.977] CloseHandle (hObject=0x1c0) returned 1 [0259.977] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0259.977] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089992.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0089992.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d40)) returned 1 [0259.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0259.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0259.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0259.978] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5314, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0090027.WMF", cAlternateFileName="")) returned 1 [0259.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0259.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0259.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0259.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0259.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0259.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0260.237] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090027.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090027.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0260.238] GetFileType (hFile=0x19c) returned 0x1 [0260.238] CloseHandle (hObject=0x19c) returned 1 [0260.239] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0260.239] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090027.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090027.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5314)) returned 1 [0260.239] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0260.239] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0260.239] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0260.240] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb758, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0090087.WMF", cAlternateFileName="")) returned 1 [0260.240] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0260.240] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0260.240] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0260.240] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0260.240] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0260.240] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0260.241] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090087.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090087.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0260.241] GetFileType (hFile=0x19c) returned 0x1 [0260.242] CloseHandle (hObject=0x19c) returned 1 [0260.243] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0260.243] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090087.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090087.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb758)) returned 1 [0260.243] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0260.243] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0260.243] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0260.243] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d90, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0090089.WMF", cAlternateFileName="")) returned 1 [0260.243] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0260.244] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0260.244] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0260.244] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0260.244] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0260.244] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0260.245] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090089.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090089.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0260.245] GetFileType (hFile=0x19c) returned 0x1 [0260.246] CloseHandle (hObject=0x19c) returned 1 [0260.246] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0260.246] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090089.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090089.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d90)) returned 1 [0260.246] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0260.246] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0260.247] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0260.247] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6e34, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0090149.WMF", cAlternateFileName="")) returned 1 [0260.247] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0260.247] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0260.247] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0260.247] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0260.247] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0260.247] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0260.248] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090149.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090149.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0260.248] GetFileType (hFile=0x19c) returned 0x1 [0260.249] CloseHandle (hObject=0x19c) returned 1 [0260.249] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0260.249] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090149.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090149.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6e34)) returned 1 [0260.250] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0260.250] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0260.250] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0260.250] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x44e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0090390.WMF", cAlternateFileName="")) returned 1 [0260.250] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0260.250] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0260.250] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0260.250] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0260.251] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0260.251] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0260.251] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090390.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090390.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0260.252] GetFileType (hFile=0x19c) returned 0x1 [0260.253] CloseHandle (hObject=0x19c) returned 1 [0260.253] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0260.253] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090390.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090390.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x44e6)) returned 1 [0260.254] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0260.254] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0260.254] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0260.254] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd04, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0090777.WMF", cAlternateFileName="")) returned 1 [0260.254] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0260.254] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0260.254] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0260.255] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0260.255] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0260.255] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0260.256] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090777.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090777.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0260.256] GetFileType (hFile=0x19c) returned 0x1 [0260.256] CloseHandle (hObject=0x19c) returned 1 [0260.257] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0260.257] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090777.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090777.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd04)) returned 1 [0260.257] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0260.257] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0260.258] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0260.258] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0090779.WMF", cAlternateFileName="")) returned 1 [0260.258] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0260.258] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0260.258] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0260.258] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0260.258] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0260.258] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0260.259] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090779.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090779.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0260.259] GetFileType (hFile=0x19c) returned 0x1 [0260.260] CloseHandle (hObject=0x19c) returned 1 [0260.260] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0260.261] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090779.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090779.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5b0)) returned 1 [0260.261] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0260.261] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0260.261] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0260.261] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0090781.WMF", cAlternateFileName="")) returned 1 [0260.261] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0260.262] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0260.262] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0260.262] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0260.262] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0260.262] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0260.263] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090781.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090781.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0260.263] GetFileType (hFile=0x19c) returned 0x1 [0260.264] CloseHandle (hObject=0x19c) returned 1 [0260.264] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0260.264] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090781.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090781.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14c2)) returned 1 [0260.265] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0260.265] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0260.265] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0260.265] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b16, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0090783.WMF", cAlternateFileName="")) returned 1 [0260.265] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0260.265] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0260.265] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0260.265] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0260.266] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0260.266] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0260.266] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090783.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090783.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0260.267] GetFileType (hFile=0x19c) returned 0x1 [0260.267] CloseHandle (hObject=0x19c) returned 1 [0260.267] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0260.268] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090783.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090783.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b16)) returned 1 [0260.268] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0260.268] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0260.269] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0260.269] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa442, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0093905.WMF", cAlternateFileName="")) returned 1 [0260.269] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0260.269] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0260.269] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0260.269] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0260.269] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0260.269] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0260.270] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0093905.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0093905.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0260.270] GetFileType (hFile=0x19c) returned 0x1 [0260.271] CloseHandle (hObject=0x19c) returned 1 [0260.271] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0260.271] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0093905.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0093905.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa442)) returned 1 [0260.271] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0260.271] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0260.272] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0260.272] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x136a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0098497.WMF", cAlternateFileName="")) returned 1 [0260.272] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0260.272] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0260.272] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0260.272] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0260.272] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0260.272] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0260.273] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0098497.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0098497.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0260.273] GetFileType (hFile=0x19c) returned 0x1 [0260.274] CloseHandle (hObject=0x19c) returned 1 [0260.274] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0260.274] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0098497.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0098497.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x136a)) returned 1 [0260.274] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0260.274] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0260.274] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0260.274] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x60b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099145.JPG", cAlternateFileName="")) returned 1 [0260.275] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0260.275] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0260.275] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0260.275] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0260.275] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0260.275] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0260.276] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099145.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099145.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0260.276] GetFileType (hFile=0x19c) returned 0x1 [0260.276] CloseHandle (hObject=0x19c) returned 1 [0260.277] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0260.277] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099145.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099145.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x60b7)) returned 1 [0260.277] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0260.277] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0260.277] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0260.277] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x40d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099146.WMF", cAlternateFileName="")) returned 1 [0260.277] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0260.278] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0260.278] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0260.278] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0260.278] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0260.278] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0260.279] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099146.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0260.279] GetFileType (hFile=0x19c) returned 0x1 [0260.279] CloseHandle (hObject=0x19c) returned 1 [0260.280] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0260.280] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099146.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x40d4)) returned 1 [0260.280] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0260.280] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0260.280] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0260.280] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5f39, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099147.JPG", cAlternateFileName="")) returned 1 [0260.280] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0260.280] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0260.281] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0260.281] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0260.281] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0260.281] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0260.282] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099147.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099147.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0260.282] GetFileType (hFile=0x19c) returned 0x1 [0260.282] CloseHandle (hObject=0x19c) returned 1 [0260.283] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0260.283] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099147.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099147.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5f39)) returned 1 [0260.283] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0260.283] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0260.283] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0260.604] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4752, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099148.JPG", cAlternateFileName="")) returned 1 [0260.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0260.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0260.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0260.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0260.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0260.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0260.605] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099148.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099148.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0260.605] GetFileType (hFile=0x1c0) returned 0x1 [0260.605] CloseHandle (hObject=0x1c0) returned 1 [0260.606] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0260.606] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099148.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099148.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4752)) returned 1 [0260.606] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0260.606] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0260.606] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0260.606] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11dfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099149.WMF", cAlternateFileName="")) returned 1 [0260.606] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0260.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0260.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0260.607] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0260.607] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0260.607] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0260.608] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099149.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099149.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0260.608] GetFileType (hFile=0x1c0) returned 0x1 [0260.608] CloseHandle (hObject=0x1c0) returned 1 [0260.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0260.609] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099149.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099149.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11dfe)) returned 1 [0260.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0260.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0260.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0260.609] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x559a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099150.JPG", cAlternateFileName="")) returned 1 [0260.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0260.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0260.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0260.610] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0260.610] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0260.610] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0260.610] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099150.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0260.610] GetFileType (hFile=0x1c0) returned 0x1 [0260.611] CloseHandle (hObject=0x1c0) returned 1 [0260.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0260.611] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099150.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x559a)) returned 1 [0260.612] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0260.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0260.612] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0260.612] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x65e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099151.WMF", cAlternateFileName="")) returned 1 [0260.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0260.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0260.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0260.613] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0260.613] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0260.613] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0260.613] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099151.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0260.614] GetFileType (hFile=0x1c0) returned 0x1 [0260.614] CloseHandle (hObject=0x1c0) returned 1 [0260.615] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0260.615] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099151.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x65e6)) returned 1 [0260.615] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0260.615] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0260.615] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0260.615] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2dae, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099152.JPG", cAlternateFileName="")) returned 1 [0260.615] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0260.615] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0260.615] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0260.615] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0260.616] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0260.616] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0260.616] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099152.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0260.616] GetFileType (hFile=0x1c0) returned 0x1 [0260.617] CloseHandle (hObject=0x1c0) returned 1 [0260.617] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0260.617] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099152.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2dae)) returned 1 [0260.617] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0260.617] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0260.617] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0260.617] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3632, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099153.WMF", cAlternateFileName="")) returned 1 [0260.617] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0260.618] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0260.618] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0260.618] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0260.618] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0260.618] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0260.618] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099153.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0260.619] GetFileType (hFile=0x1c0) returned 0x1 [0260.619] CloseHandle (hObject=0x1c0) returned 1 [0260.619] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0260.619] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099153.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3632)) returned 1 [0260.619] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0260.620] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0260.620] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0260.620] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b11, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099154.JPG", cAlternateFileName="")) returned 1 [0260.620] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0260.620] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0260.620] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0260.620] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0260.620] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0260.659] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0260.660] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099154.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0260.660] GetFileType (hFile=0x174) returned 0x1 [0260.661] CloseHandle (hObject=0x174) returned 1 [0260.661] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0260.661] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099154.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b11)) returned 1 [0260.661] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0260.661] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0260.661] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0260.662] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x227a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099155.JPG", cAlternateFileName="")) returned 1 [0260.662] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0260.662] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0260.662] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0260.662] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0260.662] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0260.662] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0260.663] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099155.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0260.663] GetFileType (hFile=0x174) returned 0x1 [0260.664] CloseHandle (hObject=0x174) returned 1 [0260.664] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0260.664] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099155.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x227a)) returned 1 [0260.664] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0260.664] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0260.665] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0260.665] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3682, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099156.JPG", cAlternateFileName="")) returned 1 [0260.665] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0260.665] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0260.665] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0260.665] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0260.665] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0260.665] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0260.666] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099156.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0260.666] GetFileType (hFile=0x174) returned 0x1 [0260.667] CloseHandle (hObject=0x174) returned 1 [0260.667] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0260.667] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099156.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3682)) returned 1 [0260.667] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0260.667] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0260.668] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0260.668] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x25c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099157.JPG", cAlternateFileName="")) returned 1 [0260.668] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0260.668] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0260.668] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0260.668] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0260.668] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0260.668] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0260.669] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099157.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0260.669] GetFileType (hFile=0x174) returned 0x1 [0260.670] CloseHandle (hObject=0x174) returned 1 [0260.670] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0260.670] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099157.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x25c7)) returned 1 [0260.670] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0260.670] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0260.670] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0260.671] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6630, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099158.WMF", cAlternateFileName="")) returned 1 [0260.671] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0260.671] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0260.671] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0260.671] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0260.671] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0260.671] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0260.672] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099158.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0260.672] GetFileType (hFile=0x174) returned 0x1 [0260.672] CloseHandle (hObject=0x174) returned 1 [0260.673] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0260.673] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099158.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6630)) returned 1 [0260.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0260.673] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0260.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0260.673] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6b9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099159.WMF", cAlternateFileName="")) returned 1 [0260.674] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0260.674] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0260.674] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0261.005] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0261.006] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0261.006] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0261.006] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099159.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0261.007] GetFileType (hFile=0x1ac) returned 0x1 [0261.007] CloseHandle (hObject=0x1ac) returned 1 [0261.008] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0261.008] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099159.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6b9a)) returned 1 [0261.008] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0261.008] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0261.008] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0261.008] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b29, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099160.JPG", cAlternateFileName="")) returned 1 [0261.008] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0261.008] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0261.009] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0261.009] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0261.009] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0261.009] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0261.009] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099160.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0261.010] GetFileType (hFile=0x1ac) returned 0x1 [0261.010] CloseHandle (hObject=0x1ac) returned 1 [0261.011] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0261.011] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099160.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b29)) returned 1 [0261.011] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0261.011] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0261.011] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0261.011] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099161.JPG", cAlternateFileName="")) returned 1 [0261.011] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0261.011] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0261.011] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0261.012] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0261.012] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0261.012] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0261.012] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099161.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0261.012] GetFileType (hFile=0x1ac) returned 0x1 [0261.013] CloseHandle (hObject=0x1ac) returned 1 [0261.013] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0261.013] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099161.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bf2)) returned 1 [0261.014] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0261.014] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0261.014] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0261.014] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4cc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099162.JPG", cAlternateFileName="")) returned 1 [0261.014] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0261.014] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0261.014] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0261.014] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0261.015] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0261.015] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0261.015] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099162.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0261.015] GetFileType (hFile=0x1ac) returned 0x1 [0261.016] CloseHandle (hObject=0x1ac) returned 1 [0261.016] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0261.016] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099162.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4cc8)) returned 1 [0261.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0261.017] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0261.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0261.017] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5754, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099163.WMF", cAlternateFileName="")) returned 1 [0261.017] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0261.017] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0261.017] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0261.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0261.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0261.018] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0261.020] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099163.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0261.020] GetFileType (hFile=0x1ac) returned 0x1 [0261.021] CloseHandle (hObject=0x1ac) returned 1 [0261.021] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0261.021] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099163.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5754)) returned 1 [0261.021] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0261.021] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0261.021] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0261.021] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x55ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099164.WMF", cAlternateFileName="")) returned 1 [0261.021] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0261.022] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0261.022] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0261.022] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0261.022] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0261.022] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0261.022] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099164.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0261.023] GetFileType (hFile=0x1ac) returned 0x1 [0261.023] CloseHandle (hObject=0x1ac) returned 1 [0261.024] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0261.024] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099164.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x55ba)) returned 1 [0261.024] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0261.024] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0261.024] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0261.024] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc53a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099165.JPG", cAlternateFileName="")) returned 1 [0261.024] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0261.024] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0261.024] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0261.025] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0261.025] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0261.025] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0261.025] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099165.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0261.026] GetFileType (hFile=0x1ac) returned 0x1 [0261.026] CloseHandle (hObject=0x1ac) returned 1 [0261.026] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0261.027] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099165.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc53a)) returned 1 [0261.027] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0261.027] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0261.027] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0261.027] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfcff, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099166.JPG", cAlternateFileName="")) returned 1 [0261.027] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0261.027] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0261.027] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0261.028] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0261.028] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0261.028] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0261.028] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099166.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0261.029] GetFileType (hFile=0x1ac) returned 0x1 [0261.029] CloseHandle (hObject=0x1ac) returned 1 [0261.030] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0261.030] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099166.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfcff)) returned 1 [0261.030] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0261.030] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0261.030] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0261.030] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xabad, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099167.JPG", cAlternateFileName="")) returned 1 [0261.030] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0261.031] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0261.031] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0261.031] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0261.031] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0261.031] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0261.032] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099167.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0261.032] GetFileType (hFile=0x1ac) returned 0x1 [0261.032] CloseHandle (hObject=0x1ac) returned 1 [0261.033] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0261.033] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099167.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xabad)) returned 1 [0261.033] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0261.033] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0261.033] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0261.034] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ed3, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099168.JPG", cAlternateFileName="")) returned 1 [0261.034] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0261.034] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0261.034] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0261.035] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0261.035] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0261.035] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0261.035] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099168.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0261.036] GetFileType (hFile=0x1ac) returned 0x1 [0261.036] CloseHandle (hObject=0x1ac) returned 1 [0261.037] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0261.037] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099168.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ed3)) returned 1 [0261.037] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0261.037] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0261.037] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0261.037] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099169.WMF", cAlternateFileName="")) returned 1 [0261.037] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0261.037] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0261.037] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0261.038] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0261.038] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0261.038] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0261.038] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099169.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099169.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0261.039] GetFileType (hFile=0x1ac) returned 0x1 [0261.039] CloseHandle (hObject=0x1ac) returned 1 [0261.039] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0261.040] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099169.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099169.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27d0)) returned 1 [0261.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0261.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0261.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0261.040] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5ee4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099170.WMF", cAlternateFileName="")) returned 1 [0261.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0261.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0261.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0261.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0261.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0261.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0261.041] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099170.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0261.041] GetFileType (hFile=0x1ac) returned 0x1 [0261.042] CloseHandle (hObject=0x1ac) returned 1 [0261.042] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0261.042] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099170.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5ee4)) returned 1 [0261.042] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0261.042] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0261.043] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0261.043] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2232, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099171.WMF", cAlternateFileName="")) returned 1 [0261.043] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0261.043] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0261.043] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0261.043] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0261.043] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0261.043] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0261.044] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099171.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099171.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0261.044] GetFileType (hFile=0x1ac) returned 0x1 [0261.045] CloseHandle (hObject=0x1ac) returned 1 [0261.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0261.045] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099171.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099171.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2232)) returned 1 [0261.046] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0261.046] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0261.046] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0261.046] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe392, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099172.WMF", cAlternateFileName="")) returned 1 [0261.046] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0261.046] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0261.046] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0261.046] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0261.046] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0261.047] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0261.047] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099172.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099172.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0261.047] GetFileType (hFile=0x1ac) returned 0x1 [0261.048] CloseHandle (hObject=0x1ac) returned 1 [0261.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0261.049] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099172.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099172.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe392)) returned 1 [0261.049] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0261.314] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0261.315] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0261.315] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9114, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099173.WMF", cAlternateFileName="")) returned 1 [0261.315] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0261.315] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0261.316] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0261.316] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0261.316] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0261.316] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0261.485] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099173.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099173.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0261.489] GetFileType (hFile=0x1ac) returned 0x1 [0261.489] CloseHandle (hObject=0x1ac) returned 1 [0261.489] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0261.489] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099173.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099173.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9114)) returned 1 [0261.490] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0261.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0261.490] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0261.490] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1846, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099174.WMF", cAlternateFileName="")) returned 1 [0261.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0261.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0261.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0261.490] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0261.490] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0261.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0261.491] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099174.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099174.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0261.491] GetFileType (hFile=0x1ac) returned 0x1 [0261.492] CloseHandle (hObject=0x1ac) returned 1 [0261.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0261.492] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099174.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099174.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1846)) returned 1 [0261.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0261.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0261.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0261.493] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2610, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099175.WMF", cAlternateFileName="")) returned 1 [0261.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0261.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0261.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0261.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0261.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0261.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0261.494] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099175.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099175.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0261.494] GetFileType (hFile=0x1ac) returned 0x1 [0261.495] CloseHandle (hObject=0x1ac) returned 1 [0261.495] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0261.495] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099175.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099175.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2610)) returned 1 [0261.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0261.495] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0261.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0261.496] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099176.WMF", cAlternateFileName="")) returned 1 [0261.496] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0261.496] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0261.496] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0261.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0261.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0261.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0261.497] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099176.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099176.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0261.497] GetFileType (hFile=0x1ac) returned 0x1 [0261.498] CloseHandle (hObject=0x1ac) returned 1 [0261.498] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0261.498] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099176.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099176.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9b8)) returned 1 [0261.498] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0261.498] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0261.498] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0261.499] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x150a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099177.WMF", cAlternateFileName="")) returned 1 [0261.499] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0261.499] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0261.499] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0261.499] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0261.499] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0261.499] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0261.500] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099177.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099177.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0261.500] GetFileType (hFile=0x1ac) returned 0x1 [0261.500] CloseHandle (hObject=0x1ac) returned 1 [0261.501] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0261.501] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099177.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099177.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x150a)) returned 1 [0261.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0261.501] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0261.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0261.501] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe16, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099178.WMF", cAlternateFileName="")) returned 1 [0261.502] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0261.502] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0261.502] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0261.502] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0261.502] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0261.502] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0261.503] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099178.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099178.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0261.503] GetFileType (hFile=0x1ac) returned 0x1 [0261.504] CloseHandle (hObject=0x1ac) returned 1 [0261.504] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0261.505] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099178.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099178.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe16)) returned 1 [0261.505] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0261.505] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0261.505] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0261.505] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x23c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099179.WMF", cAlternateFileName="")) returned 1 [0261.505] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0261.505] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0261.506] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0261.506] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0261.506] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0261.506] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0261.506] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099179.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099179.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0261.507] GetFileType (hFile=0x1ac) returned 0x1 [0261.507] CloseHandle (hObject=0x1ac) returned 1 [0261.508] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0261.508] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099179.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099179.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x23c2)) returned 1 [0261.508] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0261.508] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0261.508] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0261.508] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd42, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099180.WMF", cAlternateFileName="")) returned 1 [0261.508] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0261.509] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0261.509] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0261.509] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0261.509] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0261.509] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0261.510] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099180.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099180.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0261.510] GetFileType (hFile=0x1ac) returned 0x1 [0261.510] CloseHandle (hObject=0x1ac) returned 1 [0261.511] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0261.511] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099180.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099180.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd42)) returned 1 [0261.511] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0261.511] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0261.511] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0261.512] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099181.WMF", cAlternateFileName="")) returned 1 [0261.512] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0261.512] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0261.512] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0261.512] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0261.512] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0261.512] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0261.513] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099181.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099181.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0261.513] GetFileType (hFile=0x1ac) returned 0x1 [0261.514] CloseHandle (hObject=0x1ac) returned 1 [0261.514] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0261.514] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099181.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099181.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ae)) returned 1 [0261.515] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0261.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0261.515] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0261.515] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf00, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099182.WMF", cAlternateFileName="")) returned 1 [0261.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0261.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0261.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0261.515] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0261.515] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0261.516] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0261.516] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099182.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099182.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0261.516] GetFileType (hFile=0x1ac) returned 0x1 [0261.517] CloseHandle (hObject=0x1ac) returned 1 [0261.517] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0261.518] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099182.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099182.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf00)) returned 1 [0261.518] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0261.518] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0261.519] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0261.519] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1352, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099183.WMF", cAlternateFileName="")) returned 1 [0261.519] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0261.519] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0261.519] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0261.519] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0261.519] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0261.520] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0261.520] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099183.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099183.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0261.521] GetFileType (hFile=0x1ac) returned 0x1 [0261.521] CloseHandle (hObject=0x1ac) returned 1 [0261.521] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0261.522] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099183.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099183.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1352)) returned 1 [0261.522] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0261.522] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0261.522] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0261.522] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1016, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099184.WMF", cAlternateFileName="")) returned 1 [0261.522] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0261.522] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0261.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0261.523] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0261.523] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0261.523] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0261.524] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099184.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099184.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0261.524] GetFileType (hFile=0x1ac) returned 0x1 [0261.525] CloseHandle (hObject=0x1ac) returned 1 [0261.525] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0261.525] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099184.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099184.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1016)) returned 1 [0261.526] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0261.526] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0261.526] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0261.526] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe56c811, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe56c811, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099185.JPG", cAlternateFileName="")) returned 1 [0261.526] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0261.526] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0261.526] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0261.526] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0261.526] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0261.527] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0261.527] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099185.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099185.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0261.672] GetFileType (hFile=0x21c) returned 0x1 [0261.673] CloseHandle (hObject=0x21c) returned 1 [0261.673] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0261.674] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099185.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099185.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe56c811, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe56c811, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcd2)) returned 1 [0261.674] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0261.674] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0261.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0261.675] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe56c811, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe56c811, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe56c811, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4162, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099186.JPG", cAlternateFileName="")) returned 1 [0261.675] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0261.675] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0261.675] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0261.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0261.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0261.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0261.676] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099186.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099186.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0261.676] GetFileType (hFile=0x21c) returned 0x1 [0261.677] CloseHandle (hObject=0x21c) returned 1 [0261.677] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0261.677] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099186.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099186.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe56c811, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe56c811, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe56c811, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4162)) returned 1 [0261.677] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0261.677] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0261.677] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0261.677] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe18c9a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe18c9a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe56c811, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5fd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099187.JPG", cAlternateFileName="")) returned 1 [0261.677] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0261.678] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0261.678] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0261.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0261.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0261.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0261.678] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099187.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099187.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0261.678] GetFileType (hFile=0x21c) returned 0x1 [0261.679] CloseHandle (hObject=0x21c) returned 1 [0261.679] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0261.679] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099187.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099187.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe18c9a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe18c9a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe56c811, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5fd0)) returned 1 [0261.679] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0261.679] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0261.680] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0261.680] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe18c9a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe18c9a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe56c811, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2378, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099188.JPG", cAlternateFileName="")) returned 1 [0261.680] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0261.680] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0261.680] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0261.680] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0261.680] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0261.680] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0261.680] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099188.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099188.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0261.680] GetFileType (hFile=0x21c) returned 0x1 [0261.681] CloseHandle (hObject=0x21c) returned 1 [0261.681] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0261.681] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099188.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099188.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe18c9a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe18c9a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe56c811, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2378)) returned 1 [0261.681] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0261.681] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0261.681] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0261.681] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe18c9a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099189.JPG", cAlternateFileName="")) returned 1 [0261.682] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0261.682] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0261.682] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0261.682] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0261.682] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0261.682] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0261.682] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099189.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099189.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0261.683] GetFileType (hFile=0x21c) returned 0x1 [0261.683] CloseHandle (hObject=0x21c) returned 1 [0261.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0261.683] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099189.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099189.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe18c9a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f8c)) returned 1 [0261.683] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0261.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0261.683] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0261.683] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xab74, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099190.JPG", cAlternateFileName="")) returned 1 [0261.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0261.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0261.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0261.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0261.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0261.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0261.684] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099190.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099190.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0261.684] GetFileType (hFile=0x21c) returned 0x1 [0261.685] CloseHandle (hObject=0x21c) returned 1 [0261.685] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0261.685] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099190.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099190.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xab74)) returned 1 [0261.685] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0261.685] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0261.685] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0261.685] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe56c811, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf39f, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099191.JPG", cAlternateFileName="")) returned 1 [0261.685] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0261.686] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0261.686] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0261.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0261.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0261.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0261.686] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099191.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099191.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0261.686] GetFileType (hFile=0x21c) returned 0x1 [0261.686] CloseHandle (hObject=0x21c) returned 1 [0261.687] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0261.687] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099191.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099191.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe56c811, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf39f)) returned 1 [0261.687] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0261.687] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0261.687] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0261.687] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe56c811, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x462c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099192.GIF", cAlternateFileName="")) returned 1 [0261.687] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0261.687] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0261.687] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0261.687] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0261.687] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0261.687] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0261.688] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099192.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099192.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0261.688] GetFileType (hFile=0x21c) returned 0x1 [0261.688] CloseHandle (hObject=0x21c) returned 1 [0261.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0261.688] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099192.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099192.gif"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe56c811, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x462c)) returned 1 [0261.689] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0261.689] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0261.689] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0261.689] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8ada, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099193.GIF", cAlternateFileName="")) returned 1 [0261.689] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0261.689] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0261.689] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0261.689] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0261.689] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0261.689] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0261.691] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099193.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099193.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0261.691] GetFileType (hFile=0x21c) returned 0x1 [0261.691] CloseHandle (hObject=0x21c) returned 1 [0261.691] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0261.692] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099193.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099193.gif"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8ada)) returned 1 [0261.692] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0261.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0261.692] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0261.692] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe18c9a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x62b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099194.GIF", cAlternateFileName="")) returned 1 [0261.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0261.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0261.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0261.692] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0261.692] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0261.693] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0261.693] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099194.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099194.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0261.694] GetFileType (hFile=0x21c) returned 0x1 [0261.694] CloseHandle (hObject=0x21c) returned 1 [0261.694] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0261.694] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099194.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099194.gif"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe18c9a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x62b1)) returned 1 [0261.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0261.695] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0261.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0261.695] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4dd3, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099195.GIF", cAlternateFileName="")) returned 1 [0261.695] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0261.695] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0261.695] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0261.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0261.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0261.696] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0261.696] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099195.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099195.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0261.698] GetFileType (hFile=0x21c) returned 0x1 [0261.698] CloseHandle (hObject=0x21c) returned 1 [0261.698] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0261.698] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099195.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099195.gif"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4dd3)) returned 1 [0261.699] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0261.699] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0261.699] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0261.699] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3801, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099196.GIF", cAlternateFileName="")) returned 1 [0261.699] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0261.699] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0261.699] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0261.699] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0261.699] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0261.700] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0261.700] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099196.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099196.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0261.701] GetFileType (hFile=0x21c) returned 0x1 [0261.701] CloseHandle (hObject=0x21c) returned 1 [0261.701] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0261.702] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099196.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099196.gif"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3801)) returned 1 [0261.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0261.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0261.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0261.702] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a92, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099197.GIF", cAlternateFileName="")) returned 1 [0261.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0261.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0261.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0261.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0261.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0261.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0261.703] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099197.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099197.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0261.704] GetFileType (hFile=0x21c) returned 0x1 [0261.705] CloseHandle (hObject=0x21c) returned 1 [0261.705] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0262.064] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099197.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099197.gif"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a92)) returned 1 [0262.064] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0262.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0262.064] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0262.064] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x148b, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099198.GIF", cAlternateFileName="")) returned 1 [0262.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0262.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0262.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0262.064] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0262.065] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0262.065] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0262.066] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099198.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099198.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0262.066] GetFileType (hFile=0x1ac) returned 0x1 [0262.066] CloseHandle (hObject=0x1ac) returned 1 [0262.067] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0262.067] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099198.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099198.gif"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x148b)) returned 1 [0262.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0262.067] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0262.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0262.067] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x84b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099199.GIF", cAlternateFileName="")) returned 1 [0262.068] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0262.068] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0262.068] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0262.068] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0262.068] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0262.068] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0262.069] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099199.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099199.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0262.069] GetFileType (hFile=0x1ac) returned 0x1 [0262.069] CloseHandle (hObject=0x1ac) returned 1 [0262.070] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0262.070] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099199.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099199.gif"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x84b7)) returned 1 [0262.070] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0262.070] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0262.070] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0262.070] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe56c811, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe56c811, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x409f, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099200.GIF", cAlternateFileName="")) returned 1 [0262.070] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0262.071] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0262.071] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0262.071] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0262.071] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0262.071] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0262.072] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099200.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099200.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0262.072] GetFileType (hFile=0x1ac) returned 0x1 [0262.072] CloseHandle (hObject=0x1ac) returned 1 [0262.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0262.073] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099200.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099200.gif"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe56c811, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe56c811, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x409f)) returned 1 [0262.073] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0262.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0262.073] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0262.073] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc8c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099201.GIF", cAlternateFileName="")) returned 1 [0262.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0262.074] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0262.074] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0262.074] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0262.074] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0262.074] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0262.075] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099201.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099201.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0262.075] GetFileType (hFile=0x1ac) returned 0x1 [0262.075] CloseHandle (hObject=0x1ac) returned 1 [0262.076] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0262.076] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099201.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099201.gif"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc8c9)) returned 1 [0262.076] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0262.076] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0262.076] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0262.076] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1367, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099202.GIF", cAlternateFileName="")) returned 1 [0262.076] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0262.076] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0262.076] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0262.076] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0262.077] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0262.077] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0262.077] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099202.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099202.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0262.078] GetFileType (hFile=0x1ac) returned 0x1 [0262.078] CloseHandle (hObject=0x1ac) returned 1 [0262.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0262.079] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099202.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099202.gif"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1367)) returned 1 [0262.079] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0262.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0262.079] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0262.079] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe56c811, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe56c811, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf40, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099203.GIF", cAlternateFileName="")) returned 1 [0262.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0262.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0262.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0262.080] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0262.080] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0262.080] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0262.081] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099203.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099203.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0262.081] GetFileType (hFile=0x1ac) returned 0x1 [0262.082] CloseHandle (hObject=0x1ac) returned 1 [0262.082] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0262.082] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099203.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099203.gif"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe56c811, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe56c811, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf40)) returned 1 [0262.082] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0262.083] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0262.083] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0262.083] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe56c811, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe56c811, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45be, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099204.WMF", cAlternateFileName="")) returned 1 [0262.083] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0262.083] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0262.083] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0262.083] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0262.083] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0262.083] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0262.084] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099204.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099204.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0262.084] GetFileType (hFile=0x1ac) returned 0x1 [0262.085] CloseHandle (hObject=0x1ac) returned 1 [0262.085] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0262.086] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099204.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099204.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe56c811, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe56c811, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45be)) returned 1 [0262.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0262.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0262.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0262.086] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45be, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099205.WMF", cAlternateFileName="")) returned 1 [0262.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0262.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0262.087] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0262.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0262.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0262.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0262.088] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099205.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099205.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0262.485] GetFileType (hFile=0x198) returned 0x1 [0262.485] CloseHandle (hObject=0x198) returned 1 [0262.485] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0262.486] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099205.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099205.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45be)) returned 1 [0262.486] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0262.486] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0262.486] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0262.486] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x133f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101856.BMP", cAlternateFileName="")) returned 1 [0262.486] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0262.486] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0262.486] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0262.487] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0262.487] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0262.487] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0262.488] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101856.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101856.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0262.489] GetFileType (hFile=0x198) returned 0x1 [0262.489] CloseHandle (hObject=0x198) returned 1 [0262.489] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0262.489] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101856.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101856.bmp"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x133f8)) returned 1 [0262.489] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0262.489] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0262.489] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0262.490] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101857.BMP", cAlternateFileName="")) returned 1 [0262.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0262.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0262.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0262.490] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0262.490] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0262.490] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0262.490] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101857.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101857.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0262.495] GetFileType (hFile=0x198) returned 0x1 [0262.496] CloseHandle (hObject=0x198) returned 1 [0262.496] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0262.496] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101857.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101857.bmp"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8)) returned 1 [0262.497] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0262.497] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0262.497] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0262.497] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101858.BMP", cAlternateFileName="")) returned 1 [0262.497] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0262.497] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0262.497] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0262.497] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0262.497] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0262.497] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0262.498] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101858.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101858.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0262.499] GetFileType (hFile=0x198) returned 0x1 [0262.500] CloseHandle (hObject=0x198) returned 1 [0262.500] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0262.500] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101858.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101858.bmp"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8)) returned 1 [0262.500] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0262.500] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0262.500] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0262.500] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101859.BMP", cAlternateFileName="")) returned 1 [0262.500] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0262.501] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0262.501] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0262.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0262.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0262.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0262.501] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101859.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101859.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0262.503] GetFileType (hFile=0x198) returned 0x1 [0262.503] CloseHandle (hObject=0x198) returned 1 [0262.503] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0262.503] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101859.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101859.bmp"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0)) returned 1 [0262.503] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0262.504] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0262.504] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0262.504] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101860.BMP", cAlternateFileName="")) returned 1 [0262.504] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0262.504] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0262.504] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0262.504] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0262.504] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0262.504] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0262.505] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101860.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101860.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0262.506] GetFileType (hFile=0x198) returned 0x1 [0262.507] CloseHandle (hObject=0x198) returned 1 [0262.507] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0262.507] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101860.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101860.bmp"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8)) returned 1 [0262.507] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0262.508] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0262.508] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0262.508] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101861.BMP", cAlternateFileName="")) returned 1 [0262.508] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0262.508] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0262.508] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0262.508] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0262.508] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0262.508] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0262.509] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101861.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101861.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0262.509] GetFileType (hFile=0x198) returned 0x1 [0262.510] CloseHandle (hObject=0x198) returned 1 [0262.510] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0262.510] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101861.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101861.bmp"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8)) returned 1 [0262.510] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0262.510] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0262.510] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0262.511] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101862.BMP", cAlternateFileName="")) returned 1 [0262.511] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0262.511] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0262.511] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0262.511] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0262.511] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0262.511] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0262.511] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101862.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101862.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0262.512] GetFileType (hFile=0x198) returned 0x1 [0262.512] CloseHandle (hObject=0x198) returned 1 [0262.513] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0262.513] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101862.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101862.bmp"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8)) returned 1 [0262.513] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0262.513] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0262.513] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0262.513] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101863.BMP", cAlternateFileName="")) returned 1 [0262.513] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0262.513] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0262.513] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0262.514] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0262.514] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0262.514] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0262.514] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101863.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101863.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0262.515] GetFileType (hFile=0x198) returned 0x1 [0262.515] CloseHandle (hObject=0x198) returned 1 [0262.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0262.515] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101863.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101863.bmp"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8)) returned 1 [0262.516] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0262.516] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0262.516] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0262.516] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101864.BMP", cAlternateFileName="")) returned 1 [0262.516] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0262.516] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0262.516] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0262.516] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0262.516] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0262.516] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0262.517] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101864.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101864.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0262.517] GetFileType (hFile=0x198) returned 0x1 [0262.518] CloseHandle (hObject=0x198) returned 1 [0263.044] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0263.045] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101864.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101864.bmp"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0)) returned 1 [0263.045] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0263.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0263.045] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0263.045] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101865.BMP", cAlternateFileName="")) returned 1 [0263.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0263.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0263.046] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0263.046] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0263.046] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0263.046] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0263.047] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101865.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101865.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0263.047] GetFileType (hFile=0x198) returned 0x1 [0263.047] CloseHandle (hObject=0x198) returned 1 [0263.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0263.048] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101865.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101865.bmp"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8)) returned 1 [0263.048] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0263.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0263.049] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0263.049] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101866.BMP", cAlternateFileName="")) returned 1 [0263.049] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0263.049] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0263.049] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0263.049] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0263.049] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0263.050] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0263.050] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101866.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101866.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0263.051] GetFileType (hFile=0x198) returned 0x1 [0263.051] CloseHandle (hObject=0x198) returned 1 [0263.052] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0263.052] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101866.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101866.bmp"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8)) returned 1 [0263.052] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0263.052] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0263.053] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0263.053] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7f68, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101867.BMP", cAlternateFileName="")) returned 1 [0263.053] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0263.053] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0263.053] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0263.053] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0263.053] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0263.054] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0263.054] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101867.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101867.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0263.055] GetFileType (hFile=0x198) returned 0x1 [0263.056] CloseHandle (hObject=0x198) returned 1 [0263.056] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0263.056] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101867.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101867.bmp"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7f68)) returned 1 [0263.057] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0263.057] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0263.057] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0263.057] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ee8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101980.WMF", cAlternateFileName="")) returned 1 [0263.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0263.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0263.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0263.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0263.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0263.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0263.060] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101980.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101980.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0263.061] GetFileType (hFile=0x198) returned 0x1 [0263.062] CloseHandle (hObject=0x198) returned 1 [0263.062] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0263.062] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101980.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101980.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ee8)) returned 1 [0263.062] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0263.062] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0263.062] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0263.062] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3e74, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0102002.WMF", cAlternateFileName="")) returned 1 [0263.062] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0263.063] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0263.063] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0263.063] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0263.063] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0263.063] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0263.063] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102002.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102002.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0263.065] GetFileType (hFile=0x198) returned 0x1 [0263.065] CloseHandle (hObject=0x198) returned 1 [0263.066] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0263.066] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102002.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102002.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3e74)) returned 1 [0263.066] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0263.066] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0263.066] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0263.066] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6978, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0102594.WMF", cAlternateFileName="")) returned 1 [0263.067] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0263.067] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0263.067] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0263.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0263.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0263.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0263.068] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102594.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102594.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0263.068] GetFileType (hFile=0x198) returned 0x1 [0263.069] CloseHandle (hObject=0x198) returned 1 [0263.069] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0263.070] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102594.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102594.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6978)) returned 1 [0263.070] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0263.070] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0263.070] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0263.070] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2bd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0102762.WMF", cAlternateFileName="")) returned 1 [0263.070] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0263.070] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0263.071] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0263.071] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0263.071] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0263.071] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0263.072] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102762.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102762.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0263.072] GetFileType (hFile=0x198) returned 0x1 [0263.073] CloseHandle (hObject=0x198) returned 1 [0263.074] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0263.074] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102762.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102762.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2bd0)) returned 1 [0263.074] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0263.074] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0263.075] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0263.075] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4290, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0102984.WMF", cAlternateFileName="")) returned 1 [0263.075] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0263.075] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0263.075] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0263.075] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0263.076] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0263.076] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0263.077] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102984.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102984.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0263.077] GetFileType (hFile=0x198) returned 0x1 [0263.078] CloseHandle (hObject=0x198) returned 1 [0263.078] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0263.078] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102984.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102984.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4290)) returned 1 [0263.079] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0263.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0263.079] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0263.079] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0103058.WMF", cAlternateFileName="")) returned 1 [0263.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0263.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0263.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0263.079] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0263.079] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0263.080] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0263.080] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103058.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103058.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0263.081] GetFileType (hFile=0x198) returned 0x1 [0263.081] CloseHandle (hObject=0x198) returned 1 [0263.082] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0263.082] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103058.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103058.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43c0)) returned 1 [0263.082] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0263.082] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0263.082] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0263.082] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3264, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0103262.WMF", cAlternateFileName="")) returned 1 [0263.083] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0263.083] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0263.083] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0263.083] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0263.083] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0263.083] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0263.084] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103262.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103262.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0263.084] GetFileType (hFile=0x198) returned 0x1 [0263.085] CloseHandle (hObject=0x198) returned 1 [0263.085] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0263.085] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103262.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103262.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3264)) returned 1 [0263.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0263.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0263.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0263.086] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaf94, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0103402.WMF", cAlternateFileName="")) returned 1 [0263.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0263.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0263.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0263.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0263.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0263.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0263.087] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103402.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103402.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0263.668] GetFileType (hFile=0x1ac) returned 0x1 [0263.669] CloseHandle (hObject=0x1ac) returned 1 [0263.669] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0263.670] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103402.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103402.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaf94)) returned 1 [0263.670] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0263.670] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0263.670] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0263.670] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1714, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0103812.WMF", cAlternateFileName="")) returned 1 [0263.671] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0263.671] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0263.671] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0263.671] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0263.671] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0263.671] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0263.672] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103812.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103812.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0263.672] GetFileType (hFile=0x1ac) returned 0x1 [0263.673] CloseHandle (hObject=0x1ac) returned 1 [0263.673] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0263.673] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103812.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103812.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1714)) returned 1 [0263.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0263.673] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0263.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0263.673] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5c2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0103850.WMF", cAlternateFileName="")) returned 1 [0263.674] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0263.674] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0263.674] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0263.674] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0263.674] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0263.674] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0263.674] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103850.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103850.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0263.682] GetFileType (hFile=0x1ac) returned 0x1 [0263.682] CloseHandle (hObject=0x1ac) returned 1 [0263.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0263.683] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103850.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103850.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5c2c)) returned 1 [0263.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0263.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0263.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0263.684] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1434, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105230.WMF", cAlternateFileName="")) returned 1 [0263.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0263.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0263.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0263.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0263.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0263.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0263.685] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105230.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105230.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0263.686] GetFileType (hFile=0x1ac) returned 0x1 [0263.686] CloseHandle (hObject=0x1ac) returned 1 [0263.686] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0263.686] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105230.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105230.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1434)) returned 1 [0263.687] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0263.687] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0263.687] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0263.687] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105232.WMF", cAlternateFileName="")) returned 1 [0263.687] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0263.687] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0263.687] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0263.687] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0263.687] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0263.687] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0263.688] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105232.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105232.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0263.688] GetFileType (hFile=0x1ac) returned 0x1 [0263.689] CloseHandle (hObject=0x1ac) returned 1 [0263.689] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0263.689] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105232.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105232.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1600)) returned 1 [0263.689] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0263.690] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0263.690] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0263.690] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd74, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105234.WMF", cAlternateFileName="")) returned 1 [0263.690] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0263.690] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0263.690] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0263.690] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0263.690] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0263.690] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0263.691] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105234.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105234.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0264.012] GetFileType (hFile=0x198) returned 0x1 [0264.013] CloseHandle (hObject=0x198) returned 1 [0264.013] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0264.013] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105234.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105234.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd74)) returned 1 [0264.013] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0264.013] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0264.013] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0264.014] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4314, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105238.WMF", cAlternateFileName="")) returned 1 [0264.014] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0264.014] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0264.014] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0264.014] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0264.014] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0264.014] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0264.015] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105238.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105238.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0264.015] GetFileType (hFile=0x198) returned 0x1 [0264.016] CloseHandle (hObject=0x198) returned 1 [0264.016] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0264.017] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105238.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105238.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4314)) returned 1 [0264.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0264.017] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0264.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0264.017] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105240.WMF", cAlternateFileName="")) returned 1 [0264.017] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0264.017] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0264.018] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0264.018] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0264.018] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0264.018] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0264.019] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105240.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105240.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0264.019] GetFileType (hFile=0x198) returned 0x1 [0264.020] CloseHandle (hObject=0x198) returned 1 [0264.020] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0264.021] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105240.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105240.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d0c)) returned 1 [0264.021] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0264.021] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0264.021] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0264.021] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2bdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105244.WMF", cAlternateFileName="")) returned 1 [0264.021] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0264.021] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0264.022] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0264.022] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0264.022] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0264.022] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0264.023] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105244.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105244.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0264.023] GetFileType (hFile=0x198) returned 0x1 [0264.024] CloseHandle (hObject=0x198) returned 1 [0264.024] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0264.024] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105244.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105244.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2bdc)) returned 1 [0264.025] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0264.025] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0264.025] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0264.025] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105246.WMF", cAlternateFileName="")) returned 1 [0264.025] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0264.025] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0264.025] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0264.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0264.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0264.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0264.027] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105246.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105246.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0264.027] GetFileType (hFile=0x198) returned 0x1 [0264.028] CloseHandle (hObject=0x198) returned 1 [0264.028] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0264.028] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105246.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105246.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b80)) returned 1 [0264.029] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0264.029] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0264.029] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0264.029] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1214, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105250.WMF", cAlternateFileName="")) returned 1 [0264.029] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0264.029] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0264.029] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0264.030] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0264.030] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0264.030] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0264.031] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105250.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105250.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0264.031] GetFileType (hFile=0x198) returned 0x1 [0264.031] CloseHandle (hObject=0x198) returned 1 [0264.032] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0264.032] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105250.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105250.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1214)) returned 1 [0264.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0264.032] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0264.033] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0264.033] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1714, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105266.WMF", cAlternateFileName="")) returned 1 [0264.033] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0264.033] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0264.033] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0264.033] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0264.033] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0264.034] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0264.034] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105266.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105266.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0264.035] GetFileType (hFile=0x198) returned 0x1 [0264.036] CloseHandle (hObject=0x198) returned 1 [0264.036] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0264.037] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105266.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105266.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1714)) returned 1 [0264.037] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0264.037] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0264.037] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0264.037] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4540, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105272.WMF", cAlternateFileName="")) returned 1 [0264.037] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0264.037] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0264.038] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0264.038] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0264.038] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0264.038] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0264.039] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105272.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105272.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0264.039] GetFileType (hFile=0x198) returned 0x1 [0264.040] CloseHandle (hObject=0x198) returned 1 [0264.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0264.041] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105272.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105272.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4540)) returned 1 [0264.041] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0264.041] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0264.041] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0264.041] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b28, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105276.WMF", cAlternateFileName="")) returned 1 [0264.041] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0264.041] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0264.042] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0264.042] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0264.042] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0264.042] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0264.043] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105276.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105276.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0264.043] GetFileType (hFile=0x198) returned 0x1 [0264.044] CloseHandle (hObject=0x198) returned 1 [0264.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0264.045] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105276.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105276.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b28)) returned 1 [0264.045] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0264.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0264.045] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0264.046] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d14, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105280.WMF", cAlternateFileName="")) returned 1 [0264.046] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0264.046] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0264.046] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0264.046] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0264.046] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0264.047] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0264.048] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105280.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105280.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0264.442] GetFileType (hFile=0x174) returned 0x1 [0264.443] CloseHandle (hObject=0x174) returned 1 [0264.443] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0264.443] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105280.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105280.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d14)) returned 1 [0264.443] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0264.443] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0264.443] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0264.444] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105282.WMF", cAlternateFileName="")) returned 1 [0264.444] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0264.444] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0264.444] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0264.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0264.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0264.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0264.577] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105282.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105282.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0264.578] GetFileType (hFile=0x174) returned 0x1 [0264.579] CloseHandle (hObject=0x174) returned 1 [0264.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0264.579] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105282.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105282.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12bc)) returned 1 [0264.580] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0264.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0264.580] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0264.580] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105286.WMF", cAlternateFileName="")) returned 1 [0264.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0264.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0264.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0264.581] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0264.581] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0264.581] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0264.582] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105286.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105286.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0264.583] GetFileType (hFile=0x174) returned 0x1 [0264.584] CloseHandle (hObject=0x174) returned 1 [0264.584] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0264.584] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105286.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105286.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19a8)) returned 1 [0264.585] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0264.585] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0264.585] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0264.585] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3dd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105288.WMF", cAlternateFileName="")) returned 1 [0264.585] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0264.585] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0264.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0264.586] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0264.586] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0264.586] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0264.587] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105288.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105288.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0264.588] GetFileType (hFile=0x174) returned 0x1 [0264.588] CloseHandle (hObject=0x174) returned 1 [0264.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0264.593] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105288.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105288.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3dd8)) returned 1 [0264.593] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0264.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0264.593] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0264.594] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a14, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105292.WMF", cAlternateFileName="")) returned 1 [0264.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0264.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0264.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0264.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0264.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0264.595] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0264.595] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105292.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105292.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0264.596] GetFileType (hFile=0x174) returned 0x1 [0264.597] CloseHandle (hObject=0x174) returned 1 [0264.598] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0264.598] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105292.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105292.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a14)) returned 1 [0264.598] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0264.598] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0264.599] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0264.599] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1580, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105294.WMF", cAlternateFileName="")) returned 1 [0264.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0264.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0264.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0264.599] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0264.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0264.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0264.601] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105294.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105294.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0264.602] GetFileType (hFile=0x174) returned 0x1 [0264.603] CloseHandle (hObject=0x174) returned 1 [0264.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0264.603] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105294.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105294.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1580)) returned 1 [0264.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0264.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0264.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0264.604] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105298.WMF", cAlternateFileName="")) returned 1 [0264.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0264.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0264.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0264.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0264.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0264.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0264.606] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105298.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105298.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0264.607] GetFileType (hFile=0x174) returned 0x1 [0264.608] CloseHandle (hObject=0x174) returned 1 [0264.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0264.609] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105298.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105298.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18b0)) returned 1 [0264.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0264.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0264.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0264.610] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105306.WMF", cAlternateFileName="")) returned 1 [0264.610] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0264.610] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0264.610] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0264.610] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0264.610] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0264.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0264.611] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105306.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105306.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0264.612] GetFileType (hFile=0x174) returned 0x1 [0264.613] CloseHandle (hObject=0x174) returned 1 [0264.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0264.613] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105306.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105306.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10e0)) returned 1 [0264.614] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0264.614] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0264.614] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0264.614] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105320.WMF", cAlternateFileName="")) returned 1 [0264.771] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0264.772] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0264.772] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0264.772] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0264.772] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0264.772] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0264.817] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105320.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105320.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0264.818] GetFileType (hFile=0x1e8) returned 0x1 [0264.818] CloseHandle (hObject=0x1e8) returned 1 [0264.818] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0264.818] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105320.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105320.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e4)) returned 1 [0264.818] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0264.818] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0264.819] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0264.819] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f38, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105328.WMF", cAlternateFileName="")) returned 1 [0264.819] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0264.819] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0264.819] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0264.819] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0264.819] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0264.819] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0264.819] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105328.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105328.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0264.820] GetFileType (hFile=0x1e8) returned 0x1 [0264.820] CloseHandle (hObject=0x1e8) returned 1 [0264.821] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0264.821] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105328.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105328.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f38)) returned 1 [0264.821] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0264.821] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0264.821] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0264.821] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x290c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105332.WMF", cAlternateFileName="")) returned 1 [0264.821] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0264.821] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0264.821] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0264.821] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0264.821] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0264.821] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0264.822] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105332.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105332.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0264.822] GetFileType (hFile=0x1e8) returned 0x1 [0264.822] CloseHandle (hObject=0x1e8) returned 1 [0264.823] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0264.823] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105332.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105332.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x290c)) returned 1 [0264.823] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0264.823] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0264.823] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0264.823] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb54, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105336.WMF", cAlternateFileName="")) returned 1 [0264.823] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0264.823] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0264.823] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0264.823] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0264.823] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0264.823] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0264.824] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105336.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105336.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0264.824] GetFileType (hFile=0x1e8) returned 0x1 [0264.824] CloseHandle (hObject=0x1e8) returned 1 [0264.825] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0264.825] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105336.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105336.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb54)) returned 1 [0264.825] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0264.825] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0264.825] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0264.825] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d40, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105338.WMF", cAlternateFileName="")) returned 1 [0264.825] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0264.825] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0264.825] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0264.825] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0264.826] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0264.826] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0264.826] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105338.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105338.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0264.826] GetFileType (hFile=0x1e8) returned 0x1 [0264.827] CloseHandle (hObject=0x1e8) returned 1 [0264.827] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0264.827] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105338.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105338.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d40)) returned 1 [0264.827] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0264.827] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0264.827] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0264.827] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x42a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105348.WMF", cAlternateFileName="")) returned 1 [0264.829] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0264.829] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0264.829] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0264.829] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0264.829] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0264.829] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0264.829] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105348.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105348.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0264.830] GetFileType (hFile=0x1e8) returned 0x1 [0264.830] CloseHandle (hObject=0x1e8) returned 1 [0264.830] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0264.830] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105348.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105348.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x42a4)) returned 1 [0264.831] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0264.831] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0264.831] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0264.831] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x229c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105360.WMF", cAlternateFileName="")) returned 1 [0264.831] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0264.831] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0264.831] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0264.831] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0264.831] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0264.831] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0264.832] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105360.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105360.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0264.833] GetFileType (hFile=0x1e8) returned 0x1 [0264.833] CloseHandle (hObject=0x1e8) returned 1 [0264.833] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0264.833] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105360.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105360.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x229c)) returned 1 [0264.833] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0264.833] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0264.833] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0264.834] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x305c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105368.WMF", cAlternateFileName="")) returned 1 [0264.834] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0264.834] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0264.834] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0264.834] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0264.834] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0264.834] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0264.834] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105368.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105368.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0264.835] GetFileType (hFile=0x1e8) returned 0x1 [0264.835] CloseHandle (hObject=0x1e8) returned 1 [0264.835] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0264.835] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105368.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105368.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x305c)) returned 1 [0264.835] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0264.835] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0264.835] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0264.835] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1364, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105376.WMF", cAlternateFileName="")) returned 1 [0264.835] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0264.835] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0264.836] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0264.836] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0264.836] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0264.836] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0264.836] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105376.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105376.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0264.837] GetFileType (hFile=0x1e8) returned 0x1 [0264.837] CloseHandle (hObject=0x1e8) returned 1 [0264.837] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0264.838] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105376.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105376.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1364)) returned 1 [0264.838] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0264.838] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0264.838] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0264.838] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1364, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105378.WMF", cAlternateFileName="")) returned 1 [0264.838] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0264.838] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0264.838] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0264.838] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0264.838] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0264.838] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0264.839] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105378.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105378.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0264.840] GetFileType (hFile=0x1e8) returned 0x1 [0264.840] CloseHandle (hObject=0x1e8) returned 1 [0264.840] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0264.840] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105378.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105378.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1364)) returned 1 [0264.840] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0264.841] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0264.841] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0264.841] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1210, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105380.WMF", cAlternateFileName="")) returned 1 [0264.841] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0264.841] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0264.841] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0264.841] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0264.841] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0264.841] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0264.842] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105380.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105380.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0264.843] GetFileType (hFile=0x1e8) returned 0x1 [0264.843] CloseHandle (hObject=0x1e8) returned 1 [0264.843] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0264.844] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105380.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105380.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1210)) returned 1 [0264.844] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0264.844] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0264.844] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0264.844] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105384.WMF", cAlternateFileName="")) returned 1 [0264.844] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0264.844] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0264.844] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0264.844] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0264.844] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0264.844] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0264.845] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105384.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105384.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0264.845] GetFileType (hFile=0x1e8) returned 0x1 [0264.846] CloseHandle (hObject=0x1e8) returned 1 [0264.846] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0264.846] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105384.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105384.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16f8)) returned 1 [0264.846] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0264.847] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0264.847] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0264.847] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x175c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105386.WMF", cAlternateFileName="")) returned 1 [0264.847] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0264.847] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0264.847] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0264.847] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0264.848] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0264.848] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0264.848] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105386.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105386.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0264.849] GetFileType (hFile=0x1e8) returned 0x1 [0264.849] CloseHandle (hObject=0x1e8) returned 1 [0264.849] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0264.849] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105386.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105386.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x175c)) returned 1 [0264.850] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0264.850] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0264.850] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0264.850] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x203c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105388.WMF", cAlternateFileName="")) returned 1 [0264.850] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0264.850] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0264.850] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0264.850] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0264.850] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0264.850] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0264.851] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105388.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105388.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0264.852] GetFileType (hFile=0x1e8) returned 0x1 [0264.853] CloseHandle (hObject=0x1e8) returned 1 [0264.853] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0264.853] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105388.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105388.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x203c)) returned 1 [0264.853] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0264.853] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0264.854] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0264.854] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1350, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105390.WMF", cAlternateFileName="")) returned 1 [0264.854] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0264.854] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0264.854] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0264.854] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0264.854] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0264.854] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0264.855] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105390.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105390.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0264.855] GetFileType (hFile=0x1e8) returned 0x1 [0264.856] CloseHandle (hObject=0x1e8) returned 1 [0264.856] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0264.856] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105390.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105390.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1350)) returned 1 [0264.856] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0264.856] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0264.856] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0264.857] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b04, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105396.WMF", cAlternateFileName="")) returned 1 [0264.857] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0264.857] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0264.857] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0264.857] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0264.857] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0264.857] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0264.858] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105396.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105396.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0264.858] GetFileType (hFile=0x1e8) returned 0x1 [0264.859] CloseHandle (hObject=0x1e8) returned 1 [0264.859] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0264.859] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105396.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105396.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b04)) returned 1 [0264.860] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0264.860] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0264.860] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0264.860] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd00, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105398.WMF", cAlternateFileName="")) returned 1 [0264.860] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0264.860] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0264.860] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0264.860] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0264.861] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0264.861] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0264.861] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105398.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105398.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0264.862] GetFileType (hFile=0x1e8) returned 0x1 [0264.862] CloseHandle (hObject=0x1e8) returned 1 [0265.209] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0265.209] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105398.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105398.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd00)) returned 1 [0265.209] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0265.209] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0265.209] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0265.209] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4fdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105410.WMF", cAlternateFileName="")) returned 1 [0265.210] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0265.210] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0265.210] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0265.211] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0265.211] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0265.211] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0265.212] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105410.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105410.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0265.213] GetFileType (hFile=0x19c) returned 0x1 [0265.213] CloseHandle (hObject=0x19c) returned 1 [0265.214] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0265.214] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105410.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105410.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4fdc)) returned 1 [0265.214] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0265.214] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0265.214] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0265.214] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x24b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105412.WMF", cAlternateFileName="")) returned 1 [0265.214] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0265.214] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0265.215] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0265.215] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0265.215] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0265.215] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0265.216] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105412.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105412.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0265.217] GetFileType (hFile=0x19c) returned 0x1 [0265.218] CloseHandle (hObject=0x19c) returned 1 [0265.218] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0265.218] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105412.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105412.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x24b8)) returned 1 [0265.218] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0265.219] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0265.219] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0265.219] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1864, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105414.WMF", cAlternateFileName="")) returned 1 [0265.219] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0265.219] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0265.219] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0265.219] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0265.219] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0265.220] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0265.220] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105414.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105414.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0265.221] GetFileType (hFile=0x19c) returned 0x1 [0265.221] CloseHandle (hObject=0x19c) returned 1 [0265.222] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0265.222] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105414.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105414.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1864)) returned 1 [0265.222] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0265.222] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0265.222] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0265.222] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4928, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105490.WMF", cAlternateFileName="")) returned 1 [0265.223] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0265.223] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0265.223] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0265.223] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0265.223] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0265.223] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0265.224] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105490.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105490.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0265.225] GetFileType (hFile=0x19c) returned 0x1 [0265.226] CloseHandle (hObject=0x19c) returned 1 [0265.226] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0265.226] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105490.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105490.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4928)) returned 1 [0265.226] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0265.226] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0265.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0265.227] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1424, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105496.WMF", cAlternateFileName="")) returned 1 [0265.227] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0265.227] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0265.227] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0265.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0265.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0265.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0265.228] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105496.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105496.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0265.228] GetFileType (hFile=0x19c) returned 0x1 [0265.229] CloseHandle (hObject=0x19c) returned 1 [0265.229] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0265.229] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105496.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105496.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1424)) returned 1 [0265.229] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0265.230] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0265.230] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0265.230] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1560, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105502.WMF", cAlternateFileName="")) returned 1 [0265.230] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0265.230] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0265.230] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0265.230] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0265.230] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0265.231] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0265.231] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105502.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105502.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0265.232] GetFileType (hFile=0x19c) returned 0x1 [0265.232] CloseHandle (hObject=0x19c) returned 1 [0265.232] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0265.233] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105502.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105502.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1560)) returned 1 [0265.233] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0265.233] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0265.233] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0265.233] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1034, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105504.WMF", cAlternateFileName="")) returned 1 [0265.233] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0265.233] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0265.234] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0265.234] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0265.234] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0265.234] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0265.234] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105504.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105504.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0265.235] GetFileType (hFile=0x19c) returned 0x1 [0265.235] CloseHandle (hObject=0x19c) returned 1 [0265.236] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0265.236] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105504.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105504.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1034)) returned 1 [0265.236] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0265.236] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0265.236] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0265.237] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb60, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105506.WMF", cAlternateFileName="")) returned 1 [0265.237] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0265.237] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0265.237] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0265.237] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0265.237] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0265.237] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0265.286] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105506.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105506.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0265.287] GetFileType (hFile=0x19c) returned 0x1 [0265.287] CloseHandle (hObject=0x19c) returned 1 [0265.294] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0265.294] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105506.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105506.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb60)) returned 1 [0265.294] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0265.294] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0265.294] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0265.295] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7c44, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105520.WMF", cAlternateFileName="")) returned 1 [0265.295] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0265.295] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0265.295] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0265.295] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0265.295] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0265.295] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0265.296] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105520.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105520.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0265.297] GetFileType (hFile=0x19c) returned 0x1 [0265.297] CloseHandle (hObject=0x19c) returned 1 [0265.298] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0265.298] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105520.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105520.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7c44)) returned 1 [0265.298] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0265.298] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0265.298] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0265.298] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105526.WMF", cAlternateFileName="")) returned 1 [0265.298] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0265.298] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0265.299] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0265.299] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0265.299] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0265.299] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0265.300] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105526.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105526.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0265.300] GetFileType (hFile=0x19c) returned 0x1 [0265.631] CloseHandle (hObject=0x19c) returned 1 [0265.632] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0265.632] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105526.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105526.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43b4)) returned 1 [0265.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0265.632] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0265.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0265.632] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1cd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105530.WMF", cAlternateFileName="")) returned 1 [0265.632] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0265.632] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0265.632] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0265.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0265.633] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0265.633] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0266.002] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105530.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105530.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0266.002] GetFileType (hFile=0x198) returned 0x1 [0266.003] CloseHandle (hObject=0x198) returned 1 [0266.003] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0266.003] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105530.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105530.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1cd8)) returned 1 [0266.004] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0266.004] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0266.004] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0266.004] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x542c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105588.WMF", cAlternateFileName="")) returned 1 [0266.004] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0266.005] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0266.005] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0266.005] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0266.005] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0266.005] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0266.006] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105588.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105588.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0266.007] GetFileType (hFile=0x198) returned 0x1 [0266.008] CloseHandle (hObject=0x198) returned 1 [0266.008] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0266.008] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105588.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105588.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x542c)) returned 1 [0266.008] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0266.008] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0266.008] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0266.009] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105600.WMF", cAlternateFileName="")) returned 1 [0266.009] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0266.009] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0266.009] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0266.009] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0266.009] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0266.009] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0266.010] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105600.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105600.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0266.011] GetFileType (hFile=0x198) returned 0x1 [0266.011] CloseHandle (hObject=0x198) returned 1 [0266.011] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0266.012] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105600.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105600.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21e8)) returned 1 [0266.012] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0266.012] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0266.012] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0266.012] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x287c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105638.WMF", cAlternateFileName="")) returned 1 [0266.012] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0266.012] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0266.012] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0266.013] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0266.013] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0266.013] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0266.014] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105638.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105638.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0266.014] GetFileType (hFile=0x198) returned 0x1 [0266.015] CloseHandle (hObject=0x198) returned 1 [0266.015] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0266.015] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105638.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105638.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x287c)) returned 1 [0266.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0266.016] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0266.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0266.016] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x35f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105710.WMF", cAlternateFileName="")) returned 1 [0266.016] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0266.016] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0266.016] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0266.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0266.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0266.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0266.017] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105710.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105710.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0266.018] GetFileType (hFile=0x198) returned 0x1 [0266.018] CloseHandle (hObject=0x198) returned 1 [0266.019] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0266.019] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105710.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105710.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x35f0)) returned 1 [0266.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0266.020] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0266.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0266.020] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2030, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105846.WMF", cAlternateFileName="")) returned 1 [0266.020] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0266.020] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0266.020] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0266.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0266.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0266.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0266.021] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105846.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105846.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0266.022] GetFileType (hFile=0x198) returned 0x1 [0266.023] CloseHandle (hObject=0x198) returned 1 [0266.023] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0266.023] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105846.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105846.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2030)) returned 1 [0266.023] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0266.023] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0266.024] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0266.024] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2dc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105912.WMF", cAlternateFileName="")) returned 1 [0266.024] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0266.024] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0266.024] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0266.024] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0266.024] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0266.024] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0266.025] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105912.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105912.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0266.026] GetFileType (hFile=0x198) returned 0x1 [0266.026] CloseHandle (hObject=0x198) returned 1 [0266.027] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0266.027] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105912.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105912.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2dc8)) returned 1 [0266.027] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0266.027] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0266.027] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0266.027] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1204, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105974.WMF", cAlternateFileName="")) returned 1 [0266.028] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0266.028] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0266.028] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0266.028] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0266.028] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0266.028] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0266.029] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105974.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105974.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0266.029] GetFileType (hFile=0x198) returned 0x1 [0266.030] CloseHandle (hObject=0x198) returned 1 [0266.030] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0266.030] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105974.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105974.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1204)) returned 1 [0266.031] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0266.031] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0266.031] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0266.031] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x274c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0106020.WMF", cAlternateFileName="")) returned 1 [0266.031] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0266.031] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0266.031] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0266.031] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0266.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0266.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0266.032] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106020.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106020.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0266.033] GetFileType (hFile=0x198) returned 0x1 [0266.033] CloseHandle (hObject=0x198) returned 1 [0266.034] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0266.034] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106020.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106020.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x274c)) returned 1 [0266.034] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0266.034] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0266.034] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0266.035] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0106124.WMF", cAlternateFileName="")) returned 1 [0266.261] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0266.261] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0266.261] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0266.261] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0266.261] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0266.261] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0266.321] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106124.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106124.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0266.321] GetFileType (hFile=0x1ac) returned 0x1 [0266.321] CloseHandle (hObject=0x1ac) returned 1 [0266.322] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0266.322] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106124.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106124.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16b4)) returned 1 [0266.322] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0266.322] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0266.322] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0266.322] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5bfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0106146.WMF", cAlternateFileName="")) returned 1 [0266.322] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0266.322] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0266.323] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0266.323] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0266.323] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0266.323] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0266.323] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106146.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106146.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0266.323] GetFileType (hFile=0x1ac) returned 0x1 [0266.324] CloseHandle (hObject=0x1ac) returned 1 [0266.324] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0266.324] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106146.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106146.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5bfc)) returned 1 [0266.324] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0266.324] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0266.324] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0266.324] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0106208.WMF", cAlternateFileName="")) returned 1 [0266.325] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0266.325] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0266.325] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0266.325] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0266.325] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0266.325] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0266.325] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106208.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106208.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0266.325] GetFileType (hFile=0x1ac) returned 0x1 [0266.326] CloseHandle (hObject=0x1ac) returned 1 [0266.326] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0266.326] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106208.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106208.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e7c)) returned 1 [0266.326] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0266.326] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0266.326] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0266.326] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c90, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0106222.WMF", cAlternateFileName="")) returned 1 [0266.326] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0266.327] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0266.327] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0266.327] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0266.327] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0266.327] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0266.327] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106222.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106222.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0266.328] GetFileType (hFile=0x1ac) returned 0x1 [0266.329] CloseHandle (hObject=0x1ac) returned 1 [0266.329] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0266.329] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106222.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106222.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c90)) returned 1 [0266.329] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0266.329] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0266.330] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0266.330] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x864, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0106572.WMF", cAlternateFileName="")) returned 1 [0266.330] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0266.330] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0266.330] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0266.330] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0266.330] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0266.331] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0266.331] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106572.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106572.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0266.473] GetFileType (hFile=0x1c0) returned 0x1 [0266.474] CloseHandle (hObject=0x1c0) returned 1 [0266.474] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0266.474] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106572.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106572.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x864)) returned 1 [0266.475] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0266.475] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0266.475] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0266.475] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd04, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0106816.WMF", cAlternateFileName="")) returned 1 [0266.475] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0266.475] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0266.475] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0266.475] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0266.476] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0266.476] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0266.476] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106816.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106816.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0266.477] GetFileType (hFile=0x1c0) returned 0x1 [0266.477] CloseHandle (hObject=0x1c0) returned 1 [0266.478] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0266.478] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106816.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106816.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd04)) returned 1 [0266.478] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0266.478] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0266.478] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0266.479] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x35d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0106958.WMF", cAlternateFileName="")) returned 1 [0266.479] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0266.479] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0266.479] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0266.479] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0266.479] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0266.479] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0266.480] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106958.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106958.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0266.481] GetFileType (hFile=0x1c0) returned 0x1 [0266.481] CloseHandle (hObject=0x1c0) returned 1 [0266.482] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0266.482] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106958.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106958.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x35d8)) returned 1 [0266.482] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0266.483] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0266.483] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0266.483] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107024.WMF", cAlternateFileName="")) returned 1 [0266.483] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0266.483] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0266.483] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0266.483] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0266.483] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0266.484] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0266.484] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107024.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107024.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0266.485] GetFileType (hFile=0x1c0) returned 0x1 [0266.485] CloseHandle (hObject=0x1c0) returned 1 [0266.486] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0266.486] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107024.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107024.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbcc)) returned 1 [0266.486] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0266.486] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0266.487] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0266.487] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1dd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107026.WMF", cAlternateFileName="")) returned 1 [0266.487] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0266.487] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0266.487] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0266.487] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0266.487] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0266.488] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0266.489] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107026.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107026.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0266.489] GetFileType (hFile=0x1c0) returned 0x1 [0266.490] CloseHandle (hObject=0x1c0) returned 1 [0266.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0266.490] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107026.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107026.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1dd0)) returned 1 [0266.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0266.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0266.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0266.491] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2358, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107042.WMF", cAlternateFileName="")) returned 1 [0266.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0266.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0266.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0266.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0266.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0266.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0266.492] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107042.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107042.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0266.493] GetFileType (hFile=0x1c0) returned 0x1 [0266.493] CloseHandle (hObject=0x1c0) returned 1 [0266.494] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0266.494] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107042.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107042.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2358)) returned 1 [0266.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0266.494] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0266.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0266.495] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3734, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107090.WMF", cAlternateFileName="")) returned 1 [0266.495] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0266.495] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0266.495] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0266.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0266.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0266.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0266.496] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107090.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107090.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0266.497] GetFileType (hFile=0x1c0) returned 0x1 [0266.497] CloseHandle (hObject=0x1c0) returned 1 [0266.498] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0266.498] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107090.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107090.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3734)) returned 1 [0266.498] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0266.498] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0266.498] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0266.498] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x69cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107130.WMF", cAlternateFileName="")) returned 1 [0266.499] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0266.499] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0266.499] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0266.499] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0266.499] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0266.499] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0266.500] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107130.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107130.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0266.500] GetFileType (hFile=0x1c0) returned 0x1 [0266.501] CloseHandle (hObject=0x1c0) returned 1 [0266.501] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0266.501] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107130.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107130.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x69cc)) returned 1 [0266.502] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0266.502] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0266.502] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0266.502] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbcfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107132.WMF", cAlternateFileName="")) returned 1 [0266.502] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0266.502] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0266.502] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0266.503] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0266.503] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0266.503] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0266.504] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107132.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107132.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0266.504] GetFileType (hFile=0x1c0) returned 0x1 [0266.505] CloseHandle (hObject=0x1c0) returned 1 [0266.505] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0266.505] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107132.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107132.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbcfc)) returned 1 [0266.505] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0266.506] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0266.506] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0266.506] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbd04, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107134.WMF", cAlternateFileName="")) returned 1 [0266.506] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0266.506] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0266.506] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0266.506] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0266.506] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0266.506] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0266.507] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107134.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107134.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0266.507] GetFileType (hFile=0x1c0) returned 0x1 [0266.508] CloseHandle (hObject=0x1c0) returned 1 [0266.508] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0266.508] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107134.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107134.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbd04)) returned 1 [0266.509] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0266.509] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0266.509] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0266.509] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4330, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107138.WMF", cAlternateFileName="")) returned 1 [0266.509] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0266.509] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0266.509] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0266.510] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0266.510] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0266.510] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0266.510] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107138.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107138.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0266.511] GetFileType (hFile=0x1c0) returned 0x1 [0266.511] CloseHandle (hObject=0x1c0) returned 1 [0266.512] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0266.512] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107138.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107138.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4330)) returned 1 [0266.512] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0266.512] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0266.512] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0266.512] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a94, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107146.WMF", cAlternateFileName="")) returned 1 [0266.512] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0266.512] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0266.512] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0266.513] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0266.513] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0266.513] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0266.513] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107146.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107146.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0266.514] GetFileType (hFile=0x1c0) returned 0x1 [0266.514] CloseHandle (hObject=0x1c0) returned 1 [0266.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0266.515] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107146.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107146.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a94)) returned 1 [0266.515] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0266.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0266.515] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0266.515] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107148.WMF", cAlternateFileName="")) returned 1 [0266.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0266.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0266.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0266.516] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0266.516] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0266.516] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0266.516] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107148.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107148.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0266.959] GetFileType (hFile=0x21c) returned 0x1 [0266.959] CloseHandle (hObject=0x21c) returned 1 [0266.961] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0266.961] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107148.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107148.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ea8)) returned 1 [0266.962] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0266.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0266.962] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0266.962] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3490, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107150.WMF", cAlternateFileName="")) returned 1 [0266.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0266.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0266.963] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0266.963] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0266.963] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0266.963] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0266.964] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107150.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107150.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0266.964] GetFileType (hFile=0x21c) returned 0x1 [0266.965] CloseHandle (hObject=0x21c) returned 1 [0266.966] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0266.966] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107150.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107150.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3490)) returned 1 [0266.966] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0266.966] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0266.966] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0266.966] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5804, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107152.WMF", cAlternateFileName="")) returned 1 [0266.966] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0266.967] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0266.967] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0266.967] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0266.967] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0266.967] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0266.968] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107152.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107152.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0266.968] GetFileType (hFile=0x21c) returned 0x1 [0266.969] CloseHandle (hObject=0x21c) returned 1 [0266.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0266.970] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107152.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107152.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5804)) returned 1 [0266.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0266.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0266.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0266.970] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x571c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107154.WMF", cAlternateFileName="")) returned 1 [0266.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0266.971] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0266.971] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0266.971] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0266.971] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0266.971] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0266.972] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107154.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107154.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0266.973] GetFileType (hFile=0x21c) returned 0x1 [0266.973] CloseHandle (hObject=0x21c) returned 1 [0266.974] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0266.974] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107154.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107154.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x571c)) returned 1 [0266.974] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0266.974] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0266.974] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0266.974] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x614c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107158.WMF", cAlternateFileName="")) returned 1 [0266.974] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0266.975] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0266.975] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0266.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0266.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0266.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0266.976] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107158.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107158.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0266.976] GetFileType (hFile=0x21c) returned 0x1 [0266.977] CloseHandle (hObject=0x21c) returned 1 [0266.977] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0266.977] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107158.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107158.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x614c)) returned 1 [0266.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0266.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0266.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0266.978] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ee4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107182.WMF", cAlternateFileName="")) returned 1 [0266.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0266.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0266.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0266.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0266.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0266.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0266.979] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107182.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107182.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0266.980] GetFileType (hFile=0x21c) returned 0x1 [0266.980] CloseHandle (hObject=0x21c) returned 1 [0266.981] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0266.981] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107182.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107182.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ee4)) returned 1 [0266.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0266.981] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0266.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0266.982] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107188.WMF", cAlternateFileName="")) returned 1 [0266.982] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0266.982] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0266.982] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0266.982] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0266.982] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0266.982] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0266.983] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107188.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107188.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0266.984] GetFileType (hFile=0x21c) returned 0x1 [0266.985] CloseHandle (hObject=0x21c) returned 1 [0266.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0266.985] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107188.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107188.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11b8)) returned 1 [0266.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0266.986] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0266.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0266.986] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x26f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107192.WMF", cAlternateFileName="")) returned 1 [0266.986] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0266.986] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0266.986] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0266.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0266.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0266.987] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0266.987] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107192.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107192.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0266.988] GetFileType (hFile=0x21c) returned 0x1 [0266.989] CloseHandle (hObject=0x21c) returned 1 [0266.989] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0266.989] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107192.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107192.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x26f0)) returned 1 [0266.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0266.990] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0266.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0266.990] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ef4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107254.WMF", cAlternateFileName="")) returned 1 [0266.990] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0266.990] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0266.990] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0266.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0266.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0266.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0266.992] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107254.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107254.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0267.701] GetFileType (hFile=0x19c) returned 0x1 [0267.704] CloseHandle (hObject=0x19c) returned 1 [0267.705] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0267.705] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107254.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107254.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ef4)) returned 1 [0267.705] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0267.705] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0267.706] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0267.706] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2168, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107258.WMF", cAlternateFileName="")) returned 1 [0267.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0267.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0267.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0267.706] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0267.706] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0267.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0267.708] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107258.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107258.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0267.708] GetFileType (hFile=0x19c) returned 0x1 [0267.708] CloseHandle (hObject=0x19c) returned 1 [0267.709] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0267.709] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107258.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107258.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2168)) returned 1 [0267.709] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0267.709] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0267.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0267.710] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107262.WMF", cAlternateFileName="")) returned 1 [0267.710] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0267.710] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0267.710] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0267.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0267.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0267.711] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0267.711] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107262.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107262.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0267.712] GetFileType (hFile=0x19c) returned 0x1 [0267.712] CloseHandle (hObject=0x19c) returned 1 [0267.713] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0267.713] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107262.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107262.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f3c)) returned 1 [0267.713] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0267.713] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0267.713] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0267.714] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1498, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107264.WMF", cAlternateFileName="")) returned 1 [0267.714] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0267.714] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0267.714] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0267.714] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0267.714] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0267.714] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0267.715] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107264.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107264.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0267.716] GetFileType (hFile=0x19c) returned 0x1 [0267.716] CloseHandle (hObject=0x19c) returned 1 [0267.717] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0267.717] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107264.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107264.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1498)) returned 1 [0267.717] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0267.717] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0267.717] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0267.718] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107266.WMF", cAlternateFileName="")) returned 1 [0267.718] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0267.718] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0267.718] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0267.718] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0267.718] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0267.719] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0267.719] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107266.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107266.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0267.720] GetFileType (hFile=0x19c) returned 0x1 [0267.720] CloseHandle (hObject=0x19c) returned 1 [0267.721] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0267.721] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107266.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107266.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16ec)) returned 1 [0267.721] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0267.721] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0267.721] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0267.722] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b64, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107280.WMF", cAlternateFileName="")) returned 1 [0267.722] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0267.722] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0267.722] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0267.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0267.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0267.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0267.725] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107280.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107280.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0267.725] GetFileType (hFile=0x19c) returned 0x1 [0267.726] CloseHandle (hObject=0x19c) returned 1 [0267.726] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0267.726] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107280.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107280.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b64)) returned 1 [0267.727] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0267.727] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0267.727] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0267.727] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3734, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107282.WMF", cAlternateFileName="")) returned 1 [0267.727] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0267.727] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0267.727] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0267.728] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0267.728] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0267.728] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0267.729] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107282.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107282.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0267.729] GetFileType (hFile=0x19c) returned 0x1 [0267.730] CloseHandle (hObject=0x19c) returned 1 [0267.730] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0267.731] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107282.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107282.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3734)) returned 1 [0267.731] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0267.731] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0267.731] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0267.731] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x347c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107288.WMF", cAlternateFileName="")) returned 1 [0267.731] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0267.732] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0267.732] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0267.732] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0267.732] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0267.732] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0267.733] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107288.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107288.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0267.734] GetFileType (hFile=0x19c) returned 0x1 [0267.734] CloseHandle (hObject=0x19c) returned 1 [0267.735] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0267.735] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107288.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107288.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x347c)) returned 1 [0267.735] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0267.735] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0267.736] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0267.736] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3014, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107290.WMF", cAlternateFileName="")) returned 1 [0267.736] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0267.736] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0267.736] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0267.736] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0267.737] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0267.737] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0267.738] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107290.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107290.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0267.738] GetFileType (hFile=0x19c) returned 0x1 [0267.738] CloseHandle (hObject=0x19c) returned 1 [0267.739] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0267.739] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107290.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107290.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3014)) returned 1 [0267.739] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0267.739] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0267.740] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0267.740] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x99c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107300.WMF", cAlternateFileName="")) returned 1 [0267.740] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0267.740] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0267.740] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0267.740] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0267.740] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0267.741] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0267.741] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107300.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107300.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0267.742] GetFileType (hFile=0x19c) returned 0x1 [0267.882] CloseHandle (hObject=0x19c) returned 1 [0267.882] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0267.882] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107300.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107300.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x99c)) returned 1 [0267.882] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0267.883] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0267.883] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0267.883] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1028, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107302.WMF", cAlternateFileName="")) returned 1 [0267.883] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0267.883] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0267.883] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0267.883] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0267.884] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0267.884] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0267.947] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107302.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107302.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0267.948] GetFileType (hFile=0x21c) returned 0x1 [0267.948] CloseHandle (hObject=0x21c) returned 1 [0267.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0267.949] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107302.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107302.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1028)) returned 1 [0267.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0267.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0267.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0267.950] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3e10, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107308.WMF", cAlternateFileName="")) returned 1 [0267.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0267.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0267.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0267.950] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0267.950] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0267.950] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0267.951] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107308.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107308.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0267.952] GetFileType (hFile=0x21c) returned 0x1 [0267.953] CloseHandle (hObject=0x21c) returned 1 [0267.953] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0267.953] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107308.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107308.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3e10)) returned 1 [0267.954] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0267.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0267.954] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0267.954] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a64, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107314.WMF", cAlternateFileName="")) returned 1 [0267.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0267.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0267.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0267.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0267.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0267.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0267.956] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107314.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107314.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0267.957] GetFileType (hFile=0x21c) returned 0x1 [0267.958] CloseHandle (hObject=0x21c) returned 1 [0267.958] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0267.958] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107314.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107314.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a64)) returned 1 [0267.959] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0267.959] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0267.959] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0267.959] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c18, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107316.WMF", cAlternateFileName="")) returned 1 [0267.960] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0267.960] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0267.961] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0267.961] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0267.961] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0267.962] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0267.963] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107316.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107316.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0267.963] GetFileType (hFile=0x21c) returned 0x1 [0267.964] CloseHandle (hObject=0x21c) returned 1 [0267.964] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0267.965] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107316.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107316.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c18)) returned 1 [0267.965] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0267.965] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0267.965] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0267.965] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1984, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107328.WMF", cAlternateFileName="")) returned 1 [0267.965] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0267.966] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0267.966] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0267.966] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0267.966] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0267.966] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0267.967] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107328.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107328.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0267.968] GetFileType (hFile=0x21c) returned 0x1 [0267.968] CloseHandle (hObject=0x21c) returned 1 [0267.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0267.969] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107328.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107328.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1984)) returned 1 [0267.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0267.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0267.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0267.970] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1094, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107342.WMF", cAlternateFileName="")) returned 1 [0267.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0267.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0267.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0267.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0267.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0267.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0267.971] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107342.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107342.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0267.972] GetFileType (hFile=0x21c) returned 0x1 [0267.973] CloseHandle (hObject=0x21c) returned 1 [0267.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0267.973] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107342.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107342.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1094)) returned 1 [0267.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0267.974] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0267.974] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0267.974] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107344.WMF", cAlternateFileName="")) returned 1 [0267.974] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0267.974] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0267.975] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0267.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0267.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0267.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0267.976] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107344.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107344.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0267.977] GetFileType (hFile=0x21c) returned 0x1 [0267.978] CloseHandle (hObject=0x21c) returned 1 [0267.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0267.979] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107344.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107344.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13d4)) returned 1 [0267.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0267.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0267.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0267.979] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5c78, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107350.WMF", cAlternateFileName="")) returned 1 [0267.980] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0267.980] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0267.980] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0267.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0267.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0267.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0267.982] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107350.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107350.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0267.982] GetFileType (hFile=0x21c) returned 0x1 [0267.983] CloseHandle (hObject=0x21c) returned 1 [0267.983] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0267.984] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107350.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107350.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5c78)) returned 1 [0267.984] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0267.984] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0267.984] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0267.984] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f1c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107358.WMF", cAlternateFileName="")) returned 1 [0267.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0267.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0267.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0267.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0267.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0267.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0267.986] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107358.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107358.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0268.138] GetFileType (hFile=0x19c) returned 0x1 [0268.139] CloseHandle (hObject=0x19c) returned 1 [0268.139] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0268.140] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107358.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107358.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f1c)) returned 1 [0268.140] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0268.140] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0268.140] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0268.140] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x40cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107364.WMF", cAlternateFileName="")) returned 1 [0268.141] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0268.141] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0268.141] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0268.141] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0268.141] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0268.141] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0268.321] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107364.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107364.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0268.322] GetFileType (hFile=0x1e8) returned 0x1 [0268.323] CloseHandle (hObject=0x1e8) returned 1 [0268.323] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0268.323] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107364.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107364.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x40cc)) returned 1 [0268.323] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0268.323] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0268.324] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0268.324] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ce4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107426.WMF", cAlternateFileName="")) returned 1 [0268.324] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0268.324] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0268.324] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0268.324] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0268.324] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0268.324] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0268.325] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107426.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107426.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0268.326] GetFileType (hFile=0x1e8) returned 0x1 [0268.327] CloseHandle (hObject=0x1e8) returned 1 [0268.327] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0268.327] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107426.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107426.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ce4)) returned 1 [0268.327] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0268.327] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0268.328] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0268.328] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7680, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107446.WMF", cAlternateFileName="")) returned 1 [0268.328] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0268.328] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0268.328] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0268.328] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0268.328] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0268.328] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0268.329] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107446.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107446.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0268.329] GetFileType (hFile=0x1e8) returned 0x1 [0268.330] CloseHandle (hObject=0x1e8) returned 1 [0268.330] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0268.330] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107446.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107446.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7680)) returned 1 [0268.330] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0268.330] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0268.331] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0268.331] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1338, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107450.WMF", cAlternateFileName="")) returned 1 [0268.331] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0268.331] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0268.331] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0268.331] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0268.331] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0268.331] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0268.332] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107450.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107450.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0268.332] GetFileType (hFile=0x1e8) returned 0x1 [0268.333] CloseHandle (hObject=0x1e8) returned 1 [0268.333] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0268.333] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107450.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107450.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1338)) returned 1 [0268.333] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0268.333] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0268.333] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0268.333] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x52e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107452.WMF", cAlternateFileName="")) returned 1 [0268.334] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0268.334] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0268.334] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0268.334] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0268.334] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0268.334] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0268.335] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107452.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107452.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0268.351] GetFileType (hFile=0x1e8) returned 0x1 [0268.352] CloseHandle (hObject=0x1e8) returned 1 [0268.352] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0268.353] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107452.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107452.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x52e0)) returned 1 [0268.353] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0268.353] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0268.353] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0268.353] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107456.WMF", cAlternateFileName="")) returned 1 [0268.353] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0268.353] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0268.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0268.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0268.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0268.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0268.355] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107456.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107456.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0268.355] GetFileType (hFile=0x1e8) returned 0x1 [0268.356] CloseHandle (hObject=0x1e8) returned 1 [0268.356] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0268.356] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107456.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107456.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe8c)) returned 1 [0268.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0268.357] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0268.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0268.357] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107458.WMF", cAlternateFileName="")) returned 1 [0268.357] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0268.357] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0268.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0268.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0268.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0268.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0268.359] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107458.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107458.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0268.360] GetFileType (hFile=0x1e8) returned 0x1 [0268.360] CloseHandle (hObject=0x1e8) returned 1 [0268.361] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0268.361] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107458.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107458.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdf0)) returned 1 [0268.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0268.361] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0268.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0268.361] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x258c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107468.WMF", cAlternateFileName="")) returned 1 [0268.362] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0268.362] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0268.362] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0268.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0268.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0268.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0268.363] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107468.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107468.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0268.364] GetFileType (hFile=0x1e8) returned 0x1 [0268.365] CloseHandle (hObject=0x1e8) returned 1 [0268.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0268.365] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107468.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107468.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x258c)) returned 1 [0268.365] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0268.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0268.366] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0268.366] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1788, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107480.WMF", cAlternateFileName="")) returned 1 [0268.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0268.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0268.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0268.366] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0268.367] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0268.367] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0268.817] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107480.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107480.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0268.818] GetFileType (hFile=0x198) returned 0x1 [0268.818] CloseHandle (hObject=0x198) returned 1 [0268.819] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0268.819] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107480.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107480.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1788)) returned 1 [0268.819] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0268.819] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0268.819] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0268.820] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe736331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe736331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1374, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107482.WMF", cAlternateFileName="")) returned 1 [0268.820] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0268.820] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0268.820] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0268.820] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0268.821] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0268.821] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0268.822] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107482.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107482.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0268.946] GetFileType (hFile=0x174) returned 0x1 [0268.947] CloseHandle (hObject=0x174) returned 1 [0268.947] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0268.947] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107482.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107482.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe736331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe736331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1374)) returned 1 [0268.947] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0268.947] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0268.948] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0268.948] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107484.WMF", cAlternateFileName="")) returned 1 [0268.948] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0268.948] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0268.948] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0268.948] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0268.948] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0268.948] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0268.949] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107484.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107484.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0268.950] GetFileType (hFile=0x174) returned 0x1 [0268.950] CloseHandle (hObject=0x174) returned 1 [0268.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0268.951] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107484.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107484.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbe0)) returned 1 [0268.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0268.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0268.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0268.951] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f40, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107488.WMF", cAlternateFileName="")) returned 1 [0268.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0268.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0268.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0268.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0268.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0268.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0268.953] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107488.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107488.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0268.953] GetFileType (hFile=0x174) returned 0x1 [0268.954] CloseHandle (hObject=0x174) returned 1 [0268.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0268.954] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107488.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107488.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f40)) returned 1 [0268.954] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0268.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0268.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0268.955] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4054, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107490.WMF", cAlternateFileName="")) returned 1 [0268.955] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0268.955] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0268.955] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0268.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0268.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0268.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0268.956] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107490.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107490.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0268.957] GetFileType (hFile=0x174) returned 0x1 [0268.957] CloseHandle (hObject=0x174) returned 1 [0268.957] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0268.958] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107490.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107490.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4054)) returned 1 [0268.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0268.958] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0268.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0268.958] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1acc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107492.WMF", cAlternateFileName="")) returned 1 [0268.958] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0268.958] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0268.958] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0268.959] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0268.959] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0268.959] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0268.960] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107492.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107492.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0268.960] GetFileType (hFile=0x174) returned 0x1 [0268.961] CloseHandle (hObject=0x174) returned 1 [0268.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0268.962] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107492.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107492.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1acc)) returned 1 [0268.962] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0268.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0268.962] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0268.963] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1918, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107494.WMF", cAlternateFileName="")) returned 1 [0268.963] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0268.963] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0268.963] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0268.963] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0268.963] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0268.963] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0268.964] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107494.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107494.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0268.964] GetFileType (hFile=0x174) returned 0x1 [0268.965] CloseHandle (hObject=0x174) returned 1 [0268.965] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0268.966] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107494.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107494.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1918)) returned 1 [0268.966] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0268.966] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0268.966] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0268.966] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x22a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107496.WMF", cAlternateFileName="")) returned 1 [0268.966] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0268.967] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0268.967] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0268.967] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0268.967] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0268.967] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0268.968] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107496.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107496.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0268.968] GetFileType (hFile=0x174) returned 0x1 [0268.969] CloseHandle (hObject=0x174) returned 1 [0268.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0268.969] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107496.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107496.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x22a0)) returned 1 [0268.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0268.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0268.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0268.970] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1068, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107500.WMF", cAlternateFileName="")) returned 1 [0268.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0268.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0268.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0268.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0268.971] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0268.971] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0268.971] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107500.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107500.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0268.972] GetFileType (hFile=0x174) returned 0x1 [0268.973] CloseHandle (hObject=0x174) returned 1 [0268.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0268.973] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107500.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107500.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1068)) returned 1 [0268.974] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0268.974] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0268.974] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0268.974] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a54, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107502.WMF", cAlternateFileName="")) returned 1 [0268.974] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0268.974] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0268.974] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0268.974] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0268.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0268.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0268.975] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107502.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107502.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0268.976] GetFileType (hFile=0x174) returned 0x1 [0268.977] CloseHandle (hObject=0x174) returned 1 [0268.977] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0268.978] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107502.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107502.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a54)) returned 1 [0268.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0268.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0268.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0268.978] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107512.WMF", cAlternateFileName="")) returned 1 [0268.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0268.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0268.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0268.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0268.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0268.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0268.980] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107512.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107512.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0268.980] GetFileType (hFile=0x174) returned 0x1 [0268.981] CloseHandle (hObject=0x174) returned 1 [0268.981] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0268.981] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107512.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107512.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c8c)) returned 1 [0268.982] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0268.982] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0268.982] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0268.982] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe78281d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe78281d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2fac, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107514.WMF", cAlternateFileName="")) returned 1 [0268.982] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0268.982] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0268.982] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0268.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0268.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0268.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0268.984] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107514.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107514.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0268.984] GetFileType (hFile=0x174) returned 0x1 [0268.985] CloseHandle (hObject=0x174) returned 1 [0268.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0268.985] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107514.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107514.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe78281d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe78281d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2fac)) returned 1 [0268.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0268.986] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0268.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0268.986] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe78281d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe78281d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x36b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107516.WMF", cAlternateFileName="")) returned 1 [0268.986] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0268.986] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0268.986] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0268.987] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0268.987] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0268.987] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0268.988] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107516.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107516.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0269.428] GetFileType (hFile=0x1e8) returned 0x1 [0269.429] CloseHandle (hObject=0x1e8) returned 1 [0269.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0269.430] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107516.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107516.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe78281d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe78281d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x36b8)) returned 1 [0269.430] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0269.430] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0269.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0269.431] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe78281d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe78281d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe78281d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107526.WMF", cAlternateFileName="")) returned 1 [0269.431] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0269.431] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0269.431] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0269.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0269.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0269.432] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0269.432] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107526.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107526.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0269.433] GetFileType (hFile=0x1e8) returned 0x1 [0269.433] CloseHandle (hObject=0x1e8) returned 1 [0269.434] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0269.434] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107526.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107526.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe78281d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe78281d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe78281d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f0c)) returned 1 [0269.435] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0269.435] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0269.435] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0269.435] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe78281d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe78281d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe78281d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a88, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107528.WMF", cAlternateFileName="")) returned 1 [0269.435] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0269.435] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0269.435] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0269.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0269.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0269.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0269.437] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107528.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107528.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0269.437] GetFileType (hFile=0x1e8) returned 0x1 [0269.438] CloseHandle (hObject=0x1e8) returned 1 [0269.438] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0269.438] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107528.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107528.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe78281d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe78281d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe78281d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a88)) returned 1 [0269.438] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0269.438] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0269.438] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0269.439] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe736331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe736331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe78281d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6890, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107544.WMF", cAlternateFileName="")) returned 1 [0269.439] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0269.439] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0269.439] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0269.439] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0269.439] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0269.439] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0269.440] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107544.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107544.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0269.441] GetFileType (hFile=0x1e8) returned 0x1 [0269.441] CloseHandle (hObject=0x1e8) returned 1 [0269.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0269.442] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107544.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107544.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe736331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe736331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe78281d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6890)) returned 1 [0269.442] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0269.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0269.442] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0269.442] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe736331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe736331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe75c571, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107658.WMF", cAlternateFileName="")) returned 1 [0269.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0269.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0269.443] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0269.443] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0269.443] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0269.443] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0269.444] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107658.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107658.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0269.444] GetFileType (hFile=0x1e8) returned 0x1 [0269.445] CloseHandle (hObject=0x1e8) returned 1 [0269.445] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0269.445] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107658.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107658.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe736331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe736331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe75c571, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ba0)) returned 1 [0269.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0269.446] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0269.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0269.446] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe75c571, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe75c571, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe78281d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107708.WMF", cAlternateFileName="")) returned 1 [0269.446] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0269.446] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0269.446] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0269.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0269.447] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0269.447] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0269.447] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107708.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107708.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0269.448] GetFileType (hFile=0x1e8) returned 0x1 [0269.448] CloseHandle (hObject=0x1e8) returned 1 [0269.448] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0269.449] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107708.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107708.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe75c571, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe75c571, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe78281d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12c8)) returned 1 [0269.449] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0269.449] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0269.449] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0269.449] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe736331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe736331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe75c571, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x121c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107712.WMF", cAlternateFileName="")) returned 1 [0269.449] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0269.449] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0269.449] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0269.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0269.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0269.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0269.451] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107712.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107712.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0269.451] GetFileType (hFile=0x1e8) returned 0x1 [0269.451] CloseHandle (hObject=0x1e8) returned 1 [0269.452] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0269.452] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107712.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107712.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe736331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe736331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe75c571, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x121c)) returned 1 [0269.452] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0269.452] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0269.452] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0269.453] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe736331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe736331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe78281d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xed8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107718.WMF", cAlternateFileName="")) returned 1 [0269.453] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0269.453] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0269.453] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0269.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0269.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0269.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0269.454] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107718.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107718.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0269.454] GetFileType (hFile=0x1e8) returned 0x1 [0269.455] CloseHandle (hObject=0x1e8) returned 1 [0269.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0269.455] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107718.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107718.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe736331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe736331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe78281d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xed8)) returned 1 [0269.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0269.456] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0269.456] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0269.456] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe736331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe736331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2044, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107722.WMF", cAlternateFileName="")) returned 1 [0269.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0269.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0269.458] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0269.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0269.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0269.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0269.459] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107722.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107722.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0269.460] GetFileType (hFile=0x1e8) returned 0x1 [0269.460] CloseHandle (hObject=0x1e8) returned 1 [0269.461] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0269.461] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107722.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107722.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe736331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe736331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2044)) returned 1 [0269.461] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0269.696] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0269.696] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0269.696] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b68, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107724.WMF", cAlternateFileName="")) returned 1 [0269.696] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0269.696] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0269.697] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0269.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0269.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0269.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0269.822] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107724.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107724.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0269.822] GetFileType (hFile=0x198) returned 0x1 [0269.823] CloseHandle (hObject=0x198) returned 1 [0269.823] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0269.823] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107724.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107724.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b68)) returned 1 [0269.824] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0269.824] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0269.824] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0269.824] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1574, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107728.WMF", cAlternateFileName="")) returned 1 [0269.824] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0269.824] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0269.824] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0269.824] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0269.824] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0269.825] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0269.825] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107728.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107728.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0269.825] GetFileType (hFile=0x198) returned 0x1 [0269.826] CloseHandle (hObject=0x198) returned 1 [0269.826] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0269.826] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107728.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107728.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1574)) returned 1 [0269.827] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0269.827] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0269.827] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0269.827] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbf4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107730.WMF", cAlternateFileName="")) returned 1 [0269.827] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0269.827] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0269.827] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0269.827] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0269.827] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0269.828] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0269.828] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107730.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107730.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0269.828] GetFileType (hFile=0x198) returned 0x1 [0269.829] CloseHandle (hObject=0x198) returned 1 [0269.829] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0269.829] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107730.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107730.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbf4)) returned 1 [0269.829] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0269.829] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0269.830] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0269.830] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc44, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107734.WMF", cAlternateFileName="")) returned 1 [0269.830] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0269.830] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0269.830] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0269.830] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0269.830] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0269.830] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0269.831] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107734.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107734.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0269.831] GetFileType (hFile=0x198) returned 0x1 [0269.832] CloseHandle (hObject=0x198) returned 1 [0269.832] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0269.832] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107734.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107734.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc44)) returned 1 [0269.832] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0269.832] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0269.832] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0269.833] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107742.WMF", cAlternateFileName="")) returned 1 [0269.833] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0269.833] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0269.833] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0269.833] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0269.833] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0269.833] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0269.834] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107742.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107742.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0269.834] GetFileType (hFile=0x198) returned 0x1 [0269.834] CloseHandle (hObject=0x198) returned 1 [0269.835] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0269.835] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107742.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107742.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe3c)) returned 1 [0269.835] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0269.835] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0269.835] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0269.835] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe78281d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe78281d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x138c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107744.WMF", cAlternateFileName="")) returned 1 [0269.835] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0269.836] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0269.836] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0269.836] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0269.836] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0269.836] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0269.837] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107744.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107744.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0269.837] GetFileType (hFile=0x198) returned 0x1 [0269.838] CloseHandle (hObject=0x198) returned 1 [0269.838] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0269.838] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107744.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107744.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe78281d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe78281d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x138c)) returned 1 [0269.839] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0269.839] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0269.839] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0269.839] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107746.WMF", cAlternateFileName="")) returned 1 [0269.839] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0269.839] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0269.841] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0269.841] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0269.841] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0269.841] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0269.841] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107746.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107746.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0269.842] GetFileType (hFile=0x198) returned 0x1 [0269.842] CloseHandle (hObject=0x198) returned 1 [0269.843] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0269.843] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107746.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107746.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12b4)) returned 1 [0269.843] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0269.843] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0269.843] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0269.843] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2020, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107748.WMF", cAlternateFileName="")) returned 1 [0269.843] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0269.843] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0269.843] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0269.844] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0269.844] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0269.844] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0269.844] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107748.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107748.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0269.845] GetFileType (hFile=0x198) returned 0x1 [0269.845] CloseHandle (hObject=0x198) returned 1 [0269.845] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0269.846] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107748.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107748.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2020)) returned 1 [0269.846] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0269.846] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0269.846] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0269.846] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x126c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107750.WMF", cAlternateFileName="")) returned 1 [0269.846] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0269.846] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0269.846] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0269.847] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0269.847] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0269.847] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0269.847] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107750.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107750.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0269.849] GetFileType (hFile=0x198) returned 0x1 [0269.849] CloseHandle (hObject=0x198) returned 1 [0269.850] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0269.850] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107750.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107750.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x126c)) returned 1 [0269.850] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0269.850] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0269.850] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0269.850] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe78281d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe78281d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4146, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0136865.WMF", cAlternateFileName="")) returned 1 [0269.850] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0269.851] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0269.851] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0269.851] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0269.851] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0269.851] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0269.852] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0136865.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0136865.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0269.853] GetFileType (hFile=0x198) returned 0x1 [0269.854] CloseHandle (hObject=0x198) returned 1 [0269.854] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0269.854] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0136865.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0136865.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe78281d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe78281d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4146)) returned 1 [0269.855] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0269.855] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0269.855] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0269.855] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9d27, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0144773.JPG", cAlternateFileName="")) returned 1 [0269.855] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0269.855] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0269.855] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0269.856] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0269.856] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0269.856] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0269.857] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0144773.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0144773.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0269.938] GetFileType (hFile=0x198) returned 0x1 [0269.938] CloseHandle (hObject=0x198) returned 1 [0269.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0269.938] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0144773.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0144773.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9d27)) returned 1 [0269.939] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0269.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0269.939] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0269.939] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8379, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0145168.JPG", cAlternateFileName="")) returned 1 [0269.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0269.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0269.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0269.939] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0269.939] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0269.940] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0269.940] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145168.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145168.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0269.941] GetFileType (hFile=0x198) returned 0x1 [0269.941] CloseHandle (hObject=0x198) returned 1 [0269.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0269.942] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145168.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145168.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8379)) returned 1 [0269.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0269.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0269.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0269.942] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf0c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0145212.JPG", cAlternateFileName="")) returned 1 [0269.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0269.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0269.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0269.943] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0269.943] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0269.943] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0269.943] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145212.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145212.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0269.944] GetFileType (hFile=0x198) returned 0x1 [0269.944] CloseHandle (hObject=0x198) returned 1 [0269.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0269.945] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145212.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145212.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf0c1)) returned 1 [0269.945] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0269.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0269.945] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0269.945] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc056, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0145272.JPG", cAlternateFileName="")) returned 1 [0269.946] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0269.946] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0269.946] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0269.946] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0269.946] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0269.946] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0269.947] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145272.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145272.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0269.947] GetFileType (hFile=0x198) returned 0x1 [0269.948] CloseHandle (hObject=0x198) returned 1 [0269.948] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0269.949] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145272.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145272.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc056)) returned 1 [0269.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0269.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0269.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0269.949] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5285, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0145361.JPG", cAlternateFileName="")) returned 1 [0269.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0269.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0269.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0269.950] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0269.950] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0269.950] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0269.951] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145361.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145361.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0269.951] GetFileType (hFile=0x198) returned 0x1 [0269.951] CloseHandle (hObject=0x198) returned 1 [0269.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0269.952] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145361.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145361.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5285)) returned 1 [0269.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0269.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0269.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0269.952] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0145373.JPG", cAlternateFileName="")) returned 1 [0269.953] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0269.953] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0269.953] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0269.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0269.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0269.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0269.954] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145373.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145373.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0269.954] GetFileType (hFile=0x198) returned 0x1 [0269.955] CloseHandle (hObject=0x198) returned 1 [0269.955] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0269.955] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145373.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145373.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45cb)) returned 1 [0269.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0269.956] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0269.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0269.956] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7c6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0145669.JPG", cAlternateFileName="")) returned 1 [0269.956] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0269.956] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0269.956] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0269.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0269.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0269.957] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0269.957] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145669.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145669.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0269.958] GetFileType (hFile=0x198) returned 0x1 [0269.958] CloseHandle (hObject=0x198) returned 1 [0269.959] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0269.959] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145669.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145669.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7c6a)) returned 1 [0269.959] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0269.959] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0269.959] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0269.959] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8fd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0145707.JPG", cAlternateFileName="")) returned 1 [0269.959] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0269.960] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0269.960] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0269.960] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0269.960] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0269.960] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0269.961] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145707.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145707.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0270.057] GetFileType (hFile=0x198) returned 0x1 [0270.057] CloseHandle (hObject=0x198) returned 1 [0270.058] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0270.058] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145707.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145707.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8fd4)) returned 1 [0270.058] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0270.058] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0270.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0270.059] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8fb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0145810.JPG", cAlternateFileName="")) returned 1 [0270.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0270.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0270.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0270.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0270.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0270.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0270.061] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145810.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145810.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0270.062] GetFileType (hFile=0x198) returned 0x1 [0270.063] CloseHandle (hObject=0x198) returned 1 [0270.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0270.064] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145810.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145810.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8fb8)) returned 1 [0270.064] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0270.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0270.064] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0270.065] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8a5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0145879.JPG", cAlternateFileName="")) returned 1 [0270.065] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0270.065] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0270.065] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0270.065] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0270.065] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0270.065] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0270.066] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145879.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145879.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0270.068] GetFileType (hFile=0x198) returned 0x1 [0270.069] CloseHandle (hObject=0x198) returned 1 [0270.069] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0270.069] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145879.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145879.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8a5b)) returned 1 [0270.070] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0270.070] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0270.070] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0270.070] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x84a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0145895.JPG", cAlternateFileName="")) returned 1 [0270.070] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0270.070] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0270.071] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0270.071] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0270.071] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0270.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0270.072] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145895.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145895.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0270.074] GetFileType (hFile=0x198) returned 0x1 [0270.075] CloseHandle (hObject=0x198) returned 1 [0270.075] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0270.075] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145895.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145895.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x84a6)) returned 1 [0270.076] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0270.076] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0270.076] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0270.076] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9a76, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0145904.JPG", cAlternateFileName="")) returned 1 [0270.076] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0270.077] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0270.077] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0270.077] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0270.077] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0270.077] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0270.078] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145904.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145904.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0270.079] GetFileType (hFile=0x198) returned 0x1 [0270.080] CloseHandle (hObject=0x198) returned 1 [0270.080] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0270.080] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145904.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145904.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9a76)) returned 1 [0270.081] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0270.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0270.081] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0270.081] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0146142.JPG", cAlternateFileName="")) returned 1 [0270.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0270.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0270.082] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0270.082] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0270.082] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0270.082] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0270.083] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0146142.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0146142.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0270.084] GetFileType (hFile=0x198) returned 0x1 [0270.085] CloseHandle (hObject=0x198) returned 1 [0270.085] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0270.085] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0146142.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0146142.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb5ac)) returned 1 [0270.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0270.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0270.088] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0270.088] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe81b154, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe81b154, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaa9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0148309.JPG", cAlternateFileName="")) returned 1 [0270.088] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0270.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0270.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0270.089] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0270.089] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0270.089] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0270.090] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148309.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148309.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0270.091] GetFileType (hFile=0x198) returned 0x1 [0270.092] CloseHandle (hObject=0x198) returned 1 [0270.092] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0270.092] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148309.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148309.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe81b154, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe81b154, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaa9a)) returned 1 [0270.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0270.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0270.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0270.093] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x107d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0148757.JPG", cAlternateFileName="")) returned 1 [0270.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0270.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0270.094] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0270.094] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0270.094] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0270.094] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0270.095] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148757.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148757.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0270.436] GetFileType (hFile=0x19c) returned 0x1 [0270.437] CloseHandle (hObject=0x19c) returned 1 [0270.437] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0270.437] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148757.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148757.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x107d4)) returned 1 [0270.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0270.437] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0270.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0270.438] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe81b154, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x955d, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0148798.JPG", cAlternateFileName="")) returned 1 [0270.438] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0270.438] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0270.438] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0270.438] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0270.438] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0270.438] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0270.622] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148798.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148798.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0270.622] GetFileType (hFile=0x174) returned 0x1 [0270.623] CloseHandle (hObject=0x174) returned 1 [0270.623] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0270.623] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148798.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148798.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe81b154, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x955d)) returned 1 [0270.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0270.624] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0270.624] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0270.624] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7f4eef, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7f4eef, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6b01, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0149018.JPG", cAlternateFileName="")) returned 1 [0270.624] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0270.624] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0270.624] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0270.624] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0270.624] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0270.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0270.625] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149018.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0149018.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0270.626] GetFileType (hFile=0x174) returned 0x1 [0270.626] CloseHandle (hObject=0x174) returned 1 [0270.626] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0270.627] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149018.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0149018.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7f4eef, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7f4eef, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6b01)) returned 1 [0270.627] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0270.627] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0270.627] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0270.627] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe81b154, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfd22, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0149118.JPG", cAlternateFileName="")) returned 1 [0270.627] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0270.627] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0270.627] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0270.627] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0270.627] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0270.628] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0270.628] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149118.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0149118.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0270.629] GetFileType (hFile=0x174) returned 0x1 [0270.629] CloseHandle (hObject=0x174) returned 1 [0270.629] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0270.630] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149118.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0149118.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe81b154, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfd22)) returned 1 [0270.630] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0270.630] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0270.630] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0270.630] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe81b154, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb544, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0150150.WMF", cAlternateFileName="")) returned 1 [0270.630] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0270.631] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0270.631] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0270.631] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0270.631] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0270.631] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0270.632] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150150.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0150150.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0270.632] GetFileType (hFile=0x174) returned 0x1 [0270.633] CloseHandle (hObject=0x174) returned 1 [0270.633] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0270.633] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150150.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0150150.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe81b154, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb544)) returned 1 [0270.633] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0270.634] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0270.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0270.634] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7f4eef, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x212e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0150861.WMF", cAlternateFileName="")) returned 1 [0270.634] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0270.634] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0270.634] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0270.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0270.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0270.635] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0270.636] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150861.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0150861.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0270.636] GetFileType (hFile=0x174) returned 0x1 [0270.636] CloseHandle (hObject=0x174) returned 1 [0270.637] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0270.637] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150861.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0150861.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7f4eef, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x212e)) returned 1 [0270.637] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0270.637] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0270.638] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0270.638] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe867602, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1104, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0151041.WMF", cAlternateFileName="")) returned 1 [0270.638] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0270.638] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0270.638] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0270.638] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0270.638] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0270.638] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0270.639] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151041.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151041.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0270.639] GetFileType (hFile=0x174) returned 0x1 [0270.640] CloseHandle (hObject=0x174) returned 1 [0270.640] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0270.641] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151041.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151041.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe867602, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1104)) returned 1 [0270.641] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0270.641] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0270.641] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0270.641] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3c68, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0151045.WMF", cAlternateFileName="")) returned 1 [0270.641] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0270.641] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0270.642] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0270.642] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0270.642] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0270.642] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0270.643] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151045.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151045.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0270.643] GetFileType (hFile=0x174) returned 0x1 [0270.644] CloseHandle (hObject=0x174) returned 1 [0270.644] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0270.645] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151045.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151045.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3c68)) returned 1 [0270.645] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0270.645] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0270.645] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0270.645] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4844, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0151047.WMF", cAlternateFileName="")) returned 1 [0270.645] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0270.645] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0270.646] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0270.646] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0270.646] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0270.646] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0270.647] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151047.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151047.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0270.648] GetFileType (hFile=0x174) returned 0x1 [0270.648] CloseHandle (hObject=0x174) returned 1 [0270.649] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0270.649] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151047.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151047.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4844)) returned 1 [0270.649] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0270.650] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0270.650] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0270.650] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3928, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0151055.WMF", cAlternateFileName="")) returned 1 [0270.697] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0270.697] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0270.697] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0270.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0270.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0270.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0270.698] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151055.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151055.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0270.699] GetFileType (hFile=0x174) returned 0x1 [0270.699] CloseHandle (hObject=0x174) returned 1 [0270.700] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0270.700] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151055.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151055.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3928)) returned 1 [0270.700] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0270.700] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0270.700] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0270.700] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0151061.WMF", cAlternateFileName="")) returned 1 [0270.701] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0270.701] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0270.701] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0270.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0270.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0270.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0270.702] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151061.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151061.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0270.703] GetFileType (hFile=0x174) returned 0x1 [0270.703] CloseHandle (hObject=0x174) returned 1 [0270.704] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0270.704] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151061.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151061.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a60)) returned 1 [0270.704] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0270.704] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0270.704] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0270.704] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2988, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0151063.WMF", cAlternateFileName="")) returned 1 [0270.704] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0270.704] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0270.705] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0270.705] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0270.705] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0270.705] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0270.706] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151063.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151063.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0270.706] GetFileType (hFile=0x174) returned 0x1 [0270.706] CloseHandle (hObject=0x174) returned 1 [0270.707] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0270.707] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151063.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151063.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2988)) returned 1 [0270.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0270.707] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0270.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0270.707] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3394, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0151067.WMF", cAlternateFileName="")) returned 1 [0270.708] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0270.708] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0270.708] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0270.708] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0270.708] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0270.708] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0270.709] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151067.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151067.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0270.709] GetFileType (hFile=0x174) returned 0x1 [0270.710] CloseHandle (hObject=0x174) returned 1 [0270.710] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0270.710] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151067.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151067.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3394)) returned 1 [0270.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0270.710] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0270.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0270.711] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3418, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0151073.WMF", cAlternateFileName="")) returned 1 [0270.711] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0270.711] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0270.711] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0270.711] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0270.937] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0270.938] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0271.127] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151073.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151073.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0271.127] GetFileType (hFile=0x1c0) returned 0x1 [0271.128] CloseHandle (hObject=0x1c0) returned 1 [0271.128] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0271.128] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151073.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151073.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3418)) returned 1 [0271.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0271.129] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0271.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0271.129] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0151581.WMF", cAlternateFileName="")) returned 1 [0271.129] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0271.129] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0271.129] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0271.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0271.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0271.130] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0271.130] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151581.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151581.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0271.131] GetFileType (hFile=0x1c0) returned 0x1 [0271.131] CloseHandle (hObject=0x1c0) returned 1 [0271.131] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0271.132] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151581.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151581.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a00)) returned 1 [0271.132] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0271.132] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0271.132] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0271.132] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x610c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152414.WMF", cAlternateFileName="")) returned 1 [0271.132] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0271.132] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0271.133] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0271.133] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0271.133] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0271.133] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0271.134] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152414.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152414.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0271.134] GetFileType (hFile=0x1c0) returned 0x1 [0271.135] CloseHandle (hObject=0x1c0) returned 1 [0271.135] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0271.136] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152414.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152414.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x610c)) returned 1 [0271.136] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0271.136] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0271.136] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0271.136] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe867602, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe867602, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe8d9e20, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3734, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152430.WMF", cAlternateFileName="")) returned 1 [0271.136] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0271.136] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0271.137] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0271.137] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0271.137] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0271.137] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0271.138] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152430.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152430.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0271.412] GetFileType (hFile=0x19c) returned 0x1 [0271.412] CloseHandle (hObject=0x19c) returned 1 [0271.413] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0271.413] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152430.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152430.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe867602, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe867602, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe8d9e20, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3734)) returned 1 [0271.413] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0271.413] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0271.414] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0271.414] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe867602, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe867602, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe88d87c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x406c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152432.WMF", cAlternateFileName="")) returned 1 [0271.414] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0271.414] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0271.415] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0271.415] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0271.415] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0271.415] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0271.416] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152432.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152432.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0271.417] GetFileType (hFile=0x19c) returned 0x1 [0271.417] CloseHandle (hObject=0x19c) returned 1 [0271.418] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0271.418] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152432.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152432.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe867602, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe867602, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe88d87c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x406c)) returned 1 [0271.418] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0271.418] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0271.418] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0271.419] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe867602, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe867602, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe8b3ab6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152436.WMF", cAlternateFileName="")) returned 1 [0271.419] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0271.419] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0271.419] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0271.419] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0271.419] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0271.419] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0271.420] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152436.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152436.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0271.421] GetFileType (hFile=0x19c) returned 0x1 [0271.422] CloseHandle (hObject=0x19c) returned 1 [0271.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0271.423] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152436.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152436.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe867602, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe867602, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe8b3ab6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c4c)) returned 1 [0271.423] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0271.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0271.423] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0271.423] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe867602, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe867602, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe867602, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4030, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152556.WMF", cAlternateFileName="")) returned 1 [0271.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0271.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0271.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0271.424] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0271.424] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0271.424] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0271.424] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152556.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152556.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0271.425] GetFileType (hFile=0x19c) returned 0x1 [0271.425] CloseHandle (hObject=0x19c) returned 1 [0271.426] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0271.426] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152556.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152556.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe867602, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe867602, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe867602, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4030)) returned 1 [0271.426] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0271.426] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0271.426] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0271.426] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe867602, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3eb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152558.WMF", cAlternateFileName="")) returned 1 [0271.426] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0271.427] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0271.427] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0271.427] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0271.427] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0271.427] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0271.428] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152558.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152558.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0271.429] GetFileType (hFile=0x19c) returned 0x1 [0271.429] CloseHandle (hObject=0x19c) returned 1 [0271.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0271.430] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152558.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152558.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe867602, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3eb4)) returned 1 [0271.430] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0271.430] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0271.430] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0271.431] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a80, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152560.WMF", cAlternateFileName="")) returned 1 [0271.431] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0271.431] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0271.431] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0271.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0271.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0271.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0271.432] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152560.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152560.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0271.432] GetFileType (hFile=0x19c) returned 0x1 [0271.433] CloseHandle (hObject=0x19c) returned 1 [0271.433] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0271.433] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152560.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152560.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a80)) returned 1 [0271.434] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0271.434] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0271.434] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0271.434] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe867602, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe867602, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe88d87c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe70, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152568.WMF", cAlternateFileName="")) returned 1 [0271.434] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0271.434] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0271.434] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0271.434] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0271.434] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0271.435] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0271.435] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152568.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152568.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0271.436] GetFileType (hFile=0x19c) returned 0x1 [0271.436] CloseHandle (hObject=0x19c) returned 1 [0271.437] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0271.437] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152568.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152568.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe867602, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe867602, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe88d87c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe70)) returned 1 [0271.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0271.437] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0271.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0271.437] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe867602, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd28, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152570.WMF", cAlternateFileName="")) returned 1 [0271.437] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0271.437] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0271.438] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0271.438] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0271.438] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0271.438] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0271.439] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152570.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152570.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0271.439] GetFileType (hFile=0x19c) returned 0x1 [0271.440] CloseHandle (hObject=0x19c) returned 1 [0271.440] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0271.440] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152570.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152570.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe867602, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd28)) returned 1 [0271.440] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0271.440] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0271.441] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0271.441] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe867602, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ab4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152590.WMF", cAlternateFileName="")) returned 1 [0271.441] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0271.441] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0271.441] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0271.441] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0271.441] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0271.441] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0271.442] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152590.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152590.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0271.443] GetFileType (hFile=0x19c) returned 0x1 [0271.444] CloseHandle (hObject=0x19c) returned 1 [0271.444] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0271.444] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152590.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152590.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe867602, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ab4)) returned 1 [0271.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0271.444] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0271.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0271.445] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe867602, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152594.WMF", cAlternateFileName="")) returned 1 [0271.445] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0271.445] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0271.445] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0271.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0271.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0271.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0271.635] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152594.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152594.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0271.635] GetFileType (hFile=0x1c0) returned 0x1 [0271.635] CloseHandle (hObject=0x1c0) returned 1 [0271.636] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0271.636] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152594.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152594.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe867602, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18c4)) returned 1 [0271.636] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0271.636] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0271.636] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0271.637] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9261f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9261f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9261f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2628, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152600.WMF", cAlternateFileName="")) returned 1 [0271.637] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0271.637] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0271.637] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0271.637] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0271.637] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0271.637] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0271.638] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152600.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152600.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0271.638] GetFileType (hFile=0x1c0) returned 0x1 [0271.638] CloseHandle (hObject=0x1c0) returned 1 [0271.639] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0271.639] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152600.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152600.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9261f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9261f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9261f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2628)) returned 1 [0271.639] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0271.639] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0271.639] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0271.639] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9261f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9261f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe94c4b9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1884, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152602.WMF", cAlternateFileName="")) returned 1 [0271.639] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0271.640] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0271.640] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0271.640] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0271.640] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0271.640] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0271.641] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152602.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152602.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0271.855] GetFileType (hFile=0x1c0) returned 0x1 [0271.856] CloseHandle (hObject=0x1c0) returned 1 [0271.856] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0271.856] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152602.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152602.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9261f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9261f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe94c4b9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1884)) returned 1 [0271.857] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0271.857] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0271.857] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0271.857] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9261f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9261f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9261f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x40f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152606.WMF", cAlternateFileName="")) returned 1 [0271.857] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0271.857] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0271.857] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0271.857] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0271.857] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0271.858] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0272.430] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152606.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152606.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0272.432] GetFileType (hFile=0x174) returned 0x1 [0272.432] CloseHandle (hObject=0x174) returned 1 [0272.432] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0272.433] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152606.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152606.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9261f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9261f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9261f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x40f8)) returned 1 [0272.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0272.433] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0272.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0272.433] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9261f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9261f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9261f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3094, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152608.WMF", cAlternateFileName="")) returned 1 [0272.433] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0272.433] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0272.433] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0272.434] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0272.434] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0272.434] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0272.434] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152608.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152608.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0272.435] GetFileType (hFile=0x174) returned 0x1 [0272.435] CloseHandle (hObject=0x174) returned 1 [0272.436] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0272.436] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152608.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152608.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9261f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9261f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9261f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3094)) returned 1 [0272.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0272.436] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0272.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0272.436] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe8fff80, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe8fff80, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9261f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1748, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152610.WMF", cAlternateFileName="")) returned 1 [0272.436] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0272.436] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0272.437] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0272.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0272.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0272.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0272.437] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152610.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152610.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0272.439] GetFileType (hFile=0x174) returned 0x1 [0272.440] CloseHandle (hObject=0x174) returned 1 [0272.440] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0272.440] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152610.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152610.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe8fff80, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe8fff80, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9261f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1748)) returned 1 [0272.440] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0272.440] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0272.440] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0272.441] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe88d87c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe88d87c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe8b3ab6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2584, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152622.WMF", cAlternateFileName="")) returned 1 [0272.441] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0272.441] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0272.441] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0272.441] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0272.441] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0272.441] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0272.442] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152622.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152622.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0272.444] GetFileType (hFile=0x174) returned 0x1 [0272.445] CloseHandle (hObject=0x174) returned 1 [0272.445] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0272.445] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152622.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152622.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe88d87c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe88d87c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe8b3ab6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2584)) returned 1 [0272.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0272.446] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0272.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0272.446] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe8fff80, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe8fff80, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9261f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6688, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152626.WMF", cAlternateFileName="")) returned 1 [0272.446] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0272.447] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0272.447] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0272.447] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0272.447] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0272.447] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0272.448] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152626.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152626.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0272.448] GetFileType (hFile=0x174) returned 0x1 [0272.449] CloseHandle (hObject=0x174) returned 1 [0272.449] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0272.449] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152626.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152626.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe8fff80, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe8fff80, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9261f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6688)) returned 1 [0272.449] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0272.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0272.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0272.450] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe8d9e20, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe8d9e20, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9261f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x785c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152628.WMF", cAlternateFileName="")) returned 1 [0272.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0272.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0272.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0272.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0272.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0272.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0272.451] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152628.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152628.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0272.452] GetFileType (hFile=0x174) returned 0x1 [0272.453] CloseHandle (hObject=0x174) returned 1 [0272.453] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0272.453] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152628.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152628.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe8d9e20, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe8d9e20, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9261f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x785c)) returned 1 [0272.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0272.453] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0272.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0272.454] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe8b3ab6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe8b3ab6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe8fff80, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8774, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152688.WMF", cAlternateFileName="")) returned 1 [0272.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0272.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0272.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0272.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0272.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0272.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0272.455] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152688.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152688.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0272.456] GetFileType (hFile=0x174) returned 0x1 [0272.456] CloseHandle (hObject=0x174) returned 1 [0272.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0272.457] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152688.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152688.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe8b3ab6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe8b3ab6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe8fff80, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8774)) returned 1 [0272.457] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0272.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0272.457] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0272.457] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe88d87c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe88d87c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe8fff80, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152690.WMF", cAlternateFileName="")) returned 1 [0272.458] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0272.458] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0272.458] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0272.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0272.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0272.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0272.459] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152690.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152690.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0272.460] GetFileType (hFile=0x174) returned 0x1 [0272.460] CloseHandle (hObject=0x174) returned 1 [0272.461] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0272.461] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152690.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152690.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe88d87c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe88d87c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe8fff80, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f4)) returned 1 [0272.462] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0272.462] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0272.462] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0272.462] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x544, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152694.WMF", cAlternateFileName="")) returned 1 [0272.462] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0272.462] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0272.462] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0272.462] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0272.463] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0272.463] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0272.463] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152694.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152694.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0272.503] GetFileType (hFile=0x174) returned 0x1 [0272.503] CloseHandle (hObject=0x174) returned 1 [0272.504] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0272.504] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152694.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152694.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x544)) returned 1 [0272.504] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0272.504] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0272.504] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0272.504] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c98, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152696.WMF", cAlternateFileName="")) returned 1 [0272.504] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0272.505] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0272.505] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0272.505] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0272.505] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0272.505] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0272.506] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152696.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152696.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0272.506] GetFileType (hFile=0x174) returned 0x1 [0272.506] CloseHandle (hObject=0x174) returned 1 [0272.507] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0272.507] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152696.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152696.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c98)) returned 1 [0272.507] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0272.507] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0272.507] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0272.507] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea312e2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea312e2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152698.WMF", cAlternateFileName="")) returned 1 [0272.507] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0272.508] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0272.508] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0272.508] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0272.508] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0272.508] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0272.509] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152698.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152698.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0272.510] GetFileType (hFile=0x174) returned 0x1 [0272.511] CloseHandle (hObject=0x174) returned 1 [0272.511] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0272.511] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152698.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152698.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea312e2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea312e2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b8)) returned 1 [0272.512] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0272.512] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0272.512] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0272.512] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9e4dce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9e4dce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152702.WMF", cAlternateFileName="")) returned 1 [0272.512] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0272.512] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0272.512] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0272.512] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0272.513] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0272.513] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0272.513] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152702.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152702.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0272.515] GetFileType (hFile=0x174) returned 0x1 [0272.516] CloseHandle (hObject=0x174) returned 1 [0272.516] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0272.517] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152702.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152702.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9e4dce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9e4dce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b8)) returned 1 [0272.517] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0272.517] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0272.517] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0272.517] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9726d1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9726d1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x674, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152704.WMF", cAlternateFileName="")) returned 1 [0272.517] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0272.517] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0272.517] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0272.518] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0272.518] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0272.518] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0272.519] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152704.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152704.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0272.519] GetFileType (hFile=0x174) returned 0x1 [0272.520] CloseHandle (hObject=0x174) returned 1 [0272.520] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0272.520] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152704.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152704.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9726d1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9726d1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x674)) returned 1 [0272.520] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0272.520] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0272.521] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0272.521] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9261f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9261f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9726d1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x132c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152708.WMF", cAlternateFileName="")) returned 1 [0272.521] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0272.521] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0272.521] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0272.521] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0272.521] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0272.522] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0272.522] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152708.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152708.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0272.523] GetFileType (hFile=0x174) returned 0x1 [0272.523] CloseHandle (hObject=0x174) returned 1 [0272.524] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0272.524] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152708.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152708.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9261f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9261f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9726d1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x132c)) returned 1 [0272.524] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0272.524] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0272.525] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0272.525] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe998993, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe998993, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152716.WMF", cAlternateFileName="")) returned 1 [0272.525] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0272.525] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0272.525] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0272.525] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0272.525] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0272.525] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0272.526] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152716.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152716.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0272.527] GetFileType (hFile=0x174) returned 0x1 [0272.527] CloseHandle (hObject=0x174) returned 1 [0272.528] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0272.528] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152716.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152716.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe998993, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe998993, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11e4)) returned 1 [0272.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0272.528] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0272.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0272.529] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe94c4b9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe94c4b9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe998993, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152722.WMF", cAlternateFileName="")) returned 1 [0272.530] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0272.530] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0272.530] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0272.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0272.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0272.531] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0272.531] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152722.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152722.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0272.532] GetFileType (hFile=0x174) returned 0x1 [0272.533] CloseHandle (hObject=0x174) returned 1 [0272.533] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0272.534] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152722.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152722.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe94c4b9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe94c4b9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe998993, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b6c)) returned 1 [0272.534] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0272.534] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0272.534] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0272.534] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9261f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9261f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9e4dce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ec4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152876.WMF", cAlternateFileName="")) returned 1 [0272.534] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0272.534] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0272.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0272.535] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0272.535] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0272.535] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0272.536] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152876.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152876.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0272.536] GetFileType (hFile=0x174) returned 0x1 [0272.537] CloseHandle (hObject=0x174) returned 1 [0272.537] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0272.537] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152876.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152876.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9261f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9261f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9e4dce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ec4)) returned 1 [0272.538] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0272.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0272.538] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0272.538] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9261f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9261f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe94c4b9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a28, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152878.WMF", cAlternateFileName="")) returned 1 [0272.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0272.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0272.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0272.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0272.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0272.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0272.947] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152878.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152878.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0272.948] GetFileType (hFile=0x1e8) returned 0x1 [0272.948] CloseHandle (hObject=0x1e8) returned 1 [0272.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0272.949] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152878.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152878.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9261f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9261f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe94c4b9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a28)) returned 1 [0272.950] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0272.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0272.950] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0272.950] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2370, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152882.WMF", cAlternateFileName="")) returned 1 [0272.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0272.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0272.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0272.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0272.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0272.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0273.108] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152882.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152882.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0273.109] GetFileType (hFile=0x19c) returned 0x1 [0273.109] CloseHandle (hObject=0x19c) returned 1 [0273.109] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0273.109] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152882.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152882.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2370)) returned 1 [0273.109] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0273.109] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0273.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0273.110] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152884.WMF", cAlternateFileName="")) returned 1 [0273.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0273.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0273.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0273.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0273.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0273.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0273.111] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152884.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152884.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0273.111] GetFileType (hFile=0x19c) returned 0x1 [0273.111] CloseHandle (hObject=0x19c) returned 1 [0273.112] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0273.112] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152884.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152884.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b2c)) returned 1 [0273.112] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0273.112] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0273.112] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0273.112] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x794, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152890.WMF", cAlternateFileName="")) returned 1 [0273.112] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0273.112] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0273.112] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0273.112] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0273.112] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0273.113] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0273.113] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152890.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152890.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0273.113] GetFileType (hFile=0x19c) returned 0x1 [0273.113] CloseHandle (hObject=0x19c) returned 1 [0273.114] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0273.114] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152890.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152890.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x794)) returned 1 [0273.114] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0273.114] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0273.114] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0273.114] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x29ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152892.WMF", cAlternateFileName="")) returned 1 [0273.114] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0273.114] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0273.114] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0273.115] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0273.115] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0273.115] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0273.115] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152892.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152892.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0273.115] GetFileType (hFile=0x19c) returned 0x1 [0273.115] CloseHandle (hObject=0x19c) returned 1 [0273.116] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0273.116] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152892.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152892.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x29ac)) returned 1 [0273.116] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0273.116] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0273.116] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0273.116] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c54, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152894.WMF", cAlternateFileName="")) returned 1 [0273.116] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0273.116] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0273.116] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0273.116] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0273.117] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0273.117] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0273.117] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152894.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152894.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0273.117] GetFileType (hFile=0x19c) returned 0x1 [0273.117] CloseHandle (hObject=0x19c) returned 1 [0273.118] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0273.118] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152894.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152894.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c54)) returned 1 [0273.118] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0273.118] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0273.118] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0273.118] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1190, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152898.WMF", cAlternateFileName="")) returned 1 [0273.118] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0273.118] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0273.119] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0273.119] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0273.119] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0273.119] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0273.119] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152898.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152898.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0273.119] GetFileType (hFile=0x19c) returned 0x1 [0273.121] CloseHandle (hObject=0x19c) returned 1 [0273.122] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0273.122] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152898.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152898.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1190)) returned 1 [0273.122] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0273.122] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0273.122] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0273.122] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x812c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153047.WMF", cAlternateFileName="")) returned 1 [0273.122] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0273.122] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0273.122] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0273.123] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0273.123] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0273.123] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0273.123] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153047.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153047.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0273.124] GetFileType (hFile=0x19c) returned 0x1 [0273.124] CloseHandle (hObject=0x19c) returned 1 [0273.124] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0273.125] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153047.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153047.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x812c)) returned 1 [0273.125] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0273.125] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0273.125] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0273.125] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x778, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153087.WMF", cAlternateFileName="")) returned 1 [0273.125] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0273.125] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0273.125] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0273.126] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0273.126] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0273.126] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0273.127] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153087.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153087.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0273.127] GetFileType (hFile=0x19c) returned 0x1 [0273.127] CloseHandle (hObject=0x19c) returned 1 [0273.128] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0273.128] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153087.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153087.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x778)) returned 1 [0273.128] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0273.128] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0273.128] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0273.128] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153089.WMF", cAlternateFileName="")) returned 1 [0273.129] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0273.129] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0273.129] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0273.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0273.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0273.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0273.130] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153089.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153089.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0273.130] GetFileType (hFile=0x19c) returned 0x1 [0273.131] CloseHandle (hObject=0x19c) returned 1 [0273.131] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0273.131] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153089.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153089.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ea8)) returned 1 [0273.131] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0273.132] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0273.132] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0273.132] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153091.WMF", cAlternateFileName="")) returned 1 [0273.132] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0273.132] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0273.132] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0273.132] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0273.133] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0273.133] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0273.133] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153091.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153091.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0273.134] GetFileType (hFile=0x19c) returned 0x1 [0273.134] CloseHandle (hObject=0x19c) returned 1 [0273.135] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0273.135] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153091.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153091.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fc8)) returned 1 [0273.136] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0273.136] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0273.136] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0273.136] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x22b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153093.WMF", cAlternateFileName="")) returned 1 [0273.136] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0273.136] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0273.136] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0273.136] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0273.137] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0273.137] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0273.137] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153093.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153093.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0273.138] GetFileType (hFile=0x19c) returned 0x1 [0273.139] CloseHandle (hObject=0x19c) returned 1 [0273.139] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0273.139] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153093.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153093.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x22b0)) returned 1 [0273.139] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0273.140] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0273.140] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0273.140] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe78, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153095.WMF", cAlternateFileName="")) returned 1 [0273.140] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0273.140] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0273.140] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0273.140] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0273.141] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0273.141] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0273.141] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153095.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153095.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0273.183] GetFileType (hFile=0x19c) returned 0x1 [0273.183] CloseHandle (hObject=0x19c) returned 1 [0273.183] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0273.183] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153095.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153095.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe78)) returned 1 [0273.183] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0273.184] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0273.184] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0273.184] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153265.WMF", cAlternateFileName="")) returned 1 [0273.184] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0273.184] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0273.184] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0273.184] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0273.184] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0273.184] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0273.185] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153265.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153265.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0273.185] GetFileType (hFile=0x19c) returned 0x1 [0273.185] CloseHandle (hObject=0x19c) returned 1 [0273.186] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0273.186] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153265.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153265.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc0)) returned 1 [0273.186] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0273.186] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0273.186] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0273.186] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e80, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153273.WMF", cAlternateFileName="")) returned 1 [0273.186] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0273.187] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0273.187] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0273.187] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0273.187] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0273.187] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0273.187] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153273.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153273.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0273.188] GetFileType (hFile=0x19c) returned 0x1 [0273.188] CloseHandle (hObject=0x19c) returned 1 [0273.188] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0273.188] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153273.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153273.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e80)) returned 1 [0273.189] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0273.189] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0273.189] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0273.189] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8f0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153299.WMF", cAlternateFileName="")) returned 1 [0273.189] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0273.189] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0273.189] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0273.189] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0273.190] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0273.190] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0273.190] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153299.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153299.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0273.191] GetFileType (hFile=0x19c) returned 0x1 [0273.191] CloseHandle (hObject=0x19c) returned 1 [0273.191] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0273.191] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153299.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153299.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8f0c)) returned 1 [0273.192] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0273.192] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0273.192] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0273.192] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7850, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153302.WMF", cAlternateFileName="")) returned 1 [0273.192] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0273.192] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0273.192] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0273.192] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0273.193] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0273.193] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0273.193] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153302.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153302.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0273.193] GetFileType (hFile=0x19c) returned 0x1 [0273.194] CloseHandle (hObject=0x19c) returned 1 [0273.194] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0273.194] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153302.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153302.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7850)) returned 1 [0273.195] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0273.195] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0273.195] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0273.195] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9658, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153305.WMF", cAlternateFileName="")) returned 1 [0273.195] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0273.195] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0273.195] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0273.196] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0273.196] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0273.196] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0273.197] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153305.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153305.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0273.197] GetFileType (hFile=0x19c) returned 0x1 [0273.197] CloseHandle (hObject=0x19c) returned 1 [0273.198] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0273.199] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153305.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153305.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9658)) returned 1 [0273.199] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0273.199] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0273.199] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0273.199] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3c58, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153307.WMF", cAlternateFileName="")) returned 1 [0273.199] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0273.199] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0273.200] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0273.200] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0273.200] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0273.200] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0273.201] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153307.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153307.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0273.201] GetFileType (hFile=0x19c) returned 0x1 [0273.202] CloseHandle (hObject=0x19c) returned 1 [0273.202] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0273.202] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153307.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153307.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3c58)) returned 1 [0273.202] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0273.202] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0273.203] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0273.203] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4238, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153313.WMF", cAlternateFileName="")) returned 1 [0273.203] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0273.203] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0273.203] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0273.203] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0273.204] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0273.204] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0273.205] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153313.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153313.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0273.205] GetFileType (hFile=0x19c) returned 0x1 [0273.205] CloseHandle (hObject=0x19c) returned 1 [0273.206] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0273.206] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153313.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153313.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4238)) returned 1 [0273.206] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0273.206] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0273.206] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0273.207] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4464, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153398.WMF", cAlternateFileName="")) returned 1 [0273.207] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0273.207] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0273.207] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0273.207] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0273.207] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0273.207] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0273.208] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153398.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153398.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0273.209] GetFileType (hFile=0x19c) returned 0x1 [0273.209] CloseHandle (hObject=0x19c) returned 1 [0273.210] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0273.210] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153398.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153398.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4464)) returned 1 [0273.210] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0273.211] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0273.211] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0273.211] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaa396f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x85d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153508.WMF", cAlternateFileName="")) returned 1 [0273.212] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0273.212] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0273.212] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0273.212] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0273.212] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0273.212] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0273.213] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153508.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153508.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0273.627] GetFileType (hFile=0x1c0) returned 0x1 [0273.627] CloseHandle (hObject=0x1c0) returned 1 [0273.627] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0273.627] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153508.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153508.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaa396f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x85d0)) returned 1 [0273.627] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0273.627] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0273.628] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0273.628] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153514.WMF", cAlternateFileName="")) returned 1 [0273.628] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238758 [0273.628] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0273.628] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0273.628] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0273.628] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0273.628] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238758 | out: hHeap=0x1f0000) returned 1 [0273.629] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153514.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153514.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0273.629] GetFileType (hFile=0x1c0) returned 0x1 [0273.629] CloseHandle (hObject=0x1c0) returned 1 [0273.630] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0273.630] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153514.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153514.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31d0)) returned 1 [0273.630] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0273.630] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0273.630] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0273.630] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d08, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153516.WMF", cAlternateFileName="")) returned 1 [0273.631] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238780 [0273.631] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0273.631] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0273.631] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0273.631] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0273.631] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238780 | out: hHeap=0x1f0000) returned 1 [0273.632] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153516.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153516.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0273.632] GetFileType (hFile=0x1c0) returned 0x1 [0273.633] CloseHandle (hObject=0x1c0) returned 1 [0273.633] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0273.633] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153516.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153516.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d08)) returned 1 [0273.633] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0273.633] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0273.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0273.634] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153518.WMF", cAlternateFileName="")) returned 1 [0273.634] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238758 [0273.634] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0273.634] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0273.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0273.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0273.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238758 | out: hHeap=0x1f0000) returned 1 [0273.635] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153518.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153518.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0273.636] GetFileType (hFile=0x1c0) returned 0x1 [0273.636] CloseHandle (hObject=0x1c0) returned 1 [0273.637] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0273.637] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153518.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153518.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30f0)) returned 1 [0273.637] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0273.637] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0273.637] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0273.637] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x560, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0156537.WMF", cAlternateFileName="")) returned 1 [0273.637] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238640 [0273.638] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0273.638] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0273.638] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0273.638] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0273.638] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238640 | out: hHeap=0x1f0000) returned 1 [0273.639] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0156537.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0156537.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0273.639] GetFileType (hFile=0x1c0) returned 0x1 [0273.639] CloseHandle (hObject=0x1c0) returned 1 [0273.640] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0273.640] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0156537.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0156537.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x560)) returned 1 [0273.640] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0273.640] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0273.640] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0273.640] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb66e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0157167.WMF", cAlternateFileName="")) returned 1 [0273.640] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238550 [0273.641] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0273.641] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0273.641] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0273.641] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0273.641] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238550 | out: hHeap=0x1f0000) returned 1 [0273.642] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157167.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157167.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0273.642] GetFileType (hFile=0x1c0) returned 0x1 [0273.642] CloseHandle (hObject=0x1c0) returned 1 [0273.642] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0273.643] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157167.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157167.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb66e)) returned 1 [0273.643] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0273.643] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0273.643] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0273.643] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x54d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0157177.WMF", cAlternateFileName="")) returned 1 [0273.643] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238618 [0273.643] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0273.643] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0273.643] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0273.644] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0273.644] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238618 | out: hHeap=0x1f0000) returned 1 [0273.644] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157177.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157177.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0273.645] GetFileType (hFile=0x1c0) returned 0x1 [0273.645] CloseHandle (hObject=0x1c0) returned 1 [0273.645] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0273.646] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157177.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157177.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x54d4)) returned 1 [0273.646] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0273.646] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0273.646] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0273.646] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0157191.WMF", cAlternateFileName="")) returned 1 [0273.646] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238618 [0273.646] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0273.646] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0273.646] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0273.647] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0273.647] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238618 | out: hHeap=0x1f0000) returned 1 [0273.647] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157191.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157191.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0273.794] GetFileType (hFile=0x198) returned 0x1 [0273.794] CloseHandle (hObject=0x198) returned 1 [0273.795] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0273.795] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157191.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157191.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45f8)) returned 1 [0273.795] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0273.795] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0273.795] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0273.795] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c84, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0157831.WMF", cAlternateFileName="")) returned 1 [0273.796] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384d8 [0273.796] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0273.796] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0273.796] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0273.796] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0273.796] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384d8 | out: hHeap=0x1f0000) returned 1 [0273.877] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157831.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157831.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0273.877] GetFileType (hFile=0x198) returned 0x1 [0273.879] CloseHandle (hObject=0x198) returned 1 [0273.879] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0273.880] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157831.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157831.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c84)) returned 1 [0273.880] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0273.881] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0273.881] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0273.881] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x48dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0158071.WMF", cAlternateFileName="")) returned 1 [0273.882] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2386e0 [0273.882] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0273.882] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0273.882] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0273.883] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0273.883] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2386e0 | out: hHeap=0x1f0000) returned 1 [0273.884] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0158071.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0158071.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0273.885] GetFileType (hFile=0x198) returned 0x1 [0273.886] CloseHandle (hObject=0x198) returned 1 [0273.887] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0273.887] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0158071.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0158071.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x48dc)) returned 1 [0273.887] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0273.887] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0273.887] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0273.887] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x462e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0158477.WMF", cAlternateFileName="")) returned 1 [0273.888] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2386b8 [0273.888] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0273.888] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0273.888] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0273.889] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0273.890] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2386b8 | out: hHeap=0x1f0000) returned 1 [0273.890] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0158477.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0158477.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0273.891] GetFileType (hFile=0x198) returned 0x1 [0273.891] CloseHandle (hObject=0x198) returned 1 [0273.893] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0273.893] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0158477.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0158477.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x462e)) returned 1 [0273.893] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0273.893] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0273.894] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0273.894] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x72de, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0160590.WMF", cAlternateFileName="")) returned 1 [0273.894] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238500 [0273.894] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0273.894] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0273.894] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0273.895] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0273.895] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238500 | out: hHeap=0x1f0000) returned 1 [0273.896] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0160590.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0160590.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0273.896] GetFileType (hFile=0x198) returned 0x1 [0273.897] CloseHandle (hObject=0x198) returned 1 [0273.897] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0273.897] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0160590.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0160590.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x72de)) returned 1 [0273.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0273.898] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0273.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0273.898] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb594, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0164153.JPG", cAlternateFileName="")) returned 1 [0273.898] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385f0 [0273.898] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0273.898] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0273.899] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0273.899] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0273.899] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385f0 | out: hHeap=0x1f0000) returned 1 [0273.900] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0164153.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0164153.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0273.900] GetFileType (hFile=0x198) returned 0x1 [0273.901] CloseHandle (hObject=0x198) returned 1 [0273.901] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0273.901] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0164153.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0164153.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb594)) returned 1 [0273.902] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0273.902] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0273.902] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0273.902] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaa396f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaa396f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x51aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0168644.WMF", cAlternateFileName="")) returned 1 [0273.902] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238528 [0273.902] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0273.902] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0273.903] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0273.903] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0273.903] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238528 | out: hHeap=0x1f0000) returned 1 [0273.904] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0168644.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0168644.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0273.905] GetFileType (hFile=0x198) returned 0x1 [0273.906] CloseHandle (hObject=0x198) returned 1 [0273.906] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0273.906] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0168644.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0168644.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaa396f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaa396f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x51aa)) returned 1 [0273.906] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0273.906] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0273.907] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0273.907] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3888, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0171685.WMF", cAlternateFileName="")) returned 1 [0273.907] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384d8 [0273.907] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0273.907] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0273.907] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0273.907] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0273.907] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384d8 | out: hHeap=0x1f0000) returned 1 [0273.908] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0171685.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0171685.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0273.909] GetFileType (hFile=0x198) returned 0x1 [0273.910] CloseHandle (hObject=0x198) returned 1 [0273.910] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0273.910] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0171685.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0171685.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3888)) returned 1 [0273.911] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0273.911] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0273.911] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0273.911] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaa396f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ae8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0171847.WMF", cAlternateFileName="")) returned 1 [0273.911] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384d8 [0273.911] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0273.911] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0273.911] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0273.911] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0273.912] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384d8 | out: hHeap=0x1f0000) returned 1 [0273.912] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0171847.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0171847.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0273.914] GetFileType (hFile=0x198) returned 0x1 [0273.914] CloseHandle (hObject=0x198) returned 1 [0273.915] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0273.915] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0171847.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0171847.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaa396f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ae8)) returned 1 [0273.915] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0273.915] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0273.915] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0273.915] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaa396f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaa396f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d18, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0172035.WMF", cAlternateFileName="")) returned 1 [0273.916] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385a0 [0273.916] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0273.916] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0273.916] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0273.916] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0273.916] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385a0 | out: hHeap=0x1f0000) returned 1 [0273.917] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172035.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0172035.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0273.917] GetFileType (hFile=0x198) returned 0x1 [0273.918] CloseHandle (hObject=0x198) returned 1 [0273.918] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0274.232] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172035.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0172035.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaa396f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaa396f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d18)) returned 1 [0274.232] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0274.232] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0274.232] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0274.232] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b74, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0172067.WMF", cAlternateFileName="")) returned 1 [0274.233] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238780 [0274.233] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0274.233] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0274.233] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0274.233] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0274.233] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238780 | out: hHeap=0x1f0000) returned 1 [0274.234] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172067.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0172067.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0274.235] GetFileType (hFile=0x174) returned 0x1 [0274.235] CloseHandle (hObject=0x174) returned 1 [0274.236] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0274.236] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172067.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0172067.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b74)) returned 1 [0274.236] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0274.236] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0274.236] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0274.237] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaa396f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3198, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0172193.WMF", cAlternateFileName="")) returned 1 [0274.237] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384d8 [0274.237] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0274.237] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0274.237] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0274.237] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0274.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384d8 | out: hHeap=0x1f0000) returned 1 [0274.239] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172193.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0172193.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0274.239] GetFileType (hFile=0x174) returned 0x1 [0274.240] CloseHandle (hObject=0x174) returned 1 [0274.240] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0274.240] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172193.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0172193.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaa396f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3198)) returned 1 [0274.240] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0274.241] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0274.241] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0274.241] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0174315.WMF", cAlternateFileName="")) returned 1 [0274.241] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384d8 [0274.241] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0274.241] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0274.241] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0274.241] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0274.242] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384d8 | out: hHeap=0x1f0000) returned 1 [0274.242] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174315.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174315.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0274.243] GetFileType (hFile=0x174) returned 0x1 [0274.243] CloseHandle (hObject=0x174) returned 1 [0274.244] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0274.244] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174315.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174315.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16e8)) returned 1 [0274.244] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0274.244] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0274.244] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0274.244] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2608, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0174635.WMF", cAlternateFileName="")) returned 1 [0274.244] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238578 [0274.245] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0274.245] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0274.245] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0274.245] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0274.245] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238578 | out: hHeap=0x1f0000) returned 1 [0274.246] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174635.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174635.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0274.246] GetFileType (hFile=0x174) returned 0x1 [0274.246] CloseHandle (hObject=0x174) returned 1 [0274.247] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0274.247] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174635.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174635.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2608)) returned 1 [0274.247] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0274.247] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0274.247] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0274.247] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0174639.WMF", cAlternateFileName="")) returned 1 [0274.247] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238690 [0274.248] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0274.248] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0274.248] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0274.248] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0274.248] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238690 | out: hHeap=0x1f0000) returned 1 [0274.249] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174639.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174639.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0274.249] GetFileType (hFile=0x174) returned 0x1 [0274.249] CloseHandle (hObject=0x174) returned 1 [0274.250] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0274.250] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174639.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174639.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13ec)) returned 1 [0274.250] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0274.250] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0274.250] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0274.250] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6196, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0174952.JPG", cAlternateFileName="")) returned 1 [0274.251] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238780 [0274.251] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0274.251] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0274.251] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0274.251] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0274.251] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238780 | out: hHeap=0x1f0000) returned 1 [0274.252] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174952.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174952.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0274.459] GetFileType (hFile=0x198) returned 0x1 [0274.459] CloseHandle (hObject=0x198) returned 1 [0274.459] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0274.459] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174952.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174952.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6196)) returned 1 [0274.460] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0274.460] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0274.460] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0274.460] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb57d, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0175361.JPG", cAlternateFileName="")) returned 1 [0274.460] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238730 [0274.460] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0274.460] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0274.460] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0274.460] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0274.460] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238730 | out: hHeap=0x1f0000) returned 1 [0274.541] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175361.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0175361.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0274.542] GetFileType (hFile=0x174) returned 0x1 [0274.542] CloseHandle (hObject=0x174) returned 1 [0274.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0274.543] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175361.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0175361.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb57d)) returned 1 [0274.543] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0274.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0274.543] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0274.543] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x38d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0175428.JPG", cAlternateFileName="")) returned 1 [0274.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0274.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0274.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0274.544] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0274.544] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0274.544] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0274.545] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175428.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0175428.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0274.545] GetFileType (hFile=0x174) returned 0x1 [0274.546] CloseHandle (hObject=0x174) returned 1 [0274.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0274.546] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175428.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0175428.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x38d8)) returned 1 [0274.547] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0274.547] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0274.547] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0274.547] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb12e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0177257.JPG", cAlternateFileName="")) returned 1 [0274.547] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0274.547] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0274.547] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0274.547] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0274.548] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0274.548] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0274.548] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177257.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0177257.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0274.549] GetFileType (hFile=0x174) returned 0x1 [0274.549] CloseHandle (hObject=0x174) returned 1 [0274.550] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0274.550] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177257.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0177257.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb12e)) returned 1 [0274.550] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0274.550] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0274.550] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0274.550] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd902, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0177806.JPG", cAlternateFileName="")) returned 1 [0274.551] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0274.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0274.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0274.562] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0274.562] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0274.562] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0274.563] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177806.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0177806.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0274.567] GetFileType (hFile=0x174) returned 0x1 [0274.567] CloseHandle (hObject=0x174) returned 1 [0274.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0274.568] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177806.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0177806.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd902)) returned 1 [0274.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0274.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0274.569] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0274.569] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x907d, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0178348.JPG", cAlternateFileName="")) returned 1 [0274.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0274.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0274.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0274.569] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0274.569] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0274.569] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0274.570] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178348.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178348.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0274.570] GetFileType (hFile=0x174) returned 0x1 [0274.570] CloseHandle (hObject=0x174) returned 1 [0274.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0274.571] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178348.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178348.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x907d)) returned 1 [0274.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0274.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0274.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0274.571] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7214, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0178459.JPG", cAlternateFileName="")) returned 1 [0274.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0274.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0274.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0274.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0274.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0274.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0274.572] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178459.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178459.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0274.573] GetFileType (hFile=0x174) returned 0x1 [0274.573] CloseHandle (hObject=0x174) returned 1 [0274.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0274.574] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178459.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178459.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7214)) returned 1 [0274.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0274.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0274.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0274.574] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x67a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0178460.JPG", cAlternateFileName="")) returned 1 [0274.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0274.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0274.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0274.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0274.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0274.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0274.575] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178460.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178460.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0274.575] GetFileType (hFile=0x174) returned 0x1 [0274.576] CloseHandle (hObject=0x174) returned 1 [0274.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0274.576] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178460.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178460.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x67a3)) returned 1 [0274.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0274.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0274.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0274.577] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5de2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0178523.JPG", cAlternateFileName="")) returned 1 [0274.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0274.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0274.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0274.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0274.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0274.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0274.578] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178523.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178523.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0274.578] GetFileType (hFile=0x174) returned 0x1 [0274.578] CloseHandle (hObject=0x174) returned 1 [0274.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0274.579] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178523.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178523.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5de2)) returned 1 [0274.579] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0274.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0274.579] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0274.579] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5b2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0178632.JPG", cAlternateFileName="")) returned 1 [0274.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0274.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0274.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0274.579] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0274.580] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0274.580] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0274.580] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178632.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178632.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0274.585] GetFileType (hFile=0x174) returned 0x1 [0274.585] CloseHandle (hObject=0x174) returned 1 [0274.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0274.586] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178632.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178632.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5b2a)) returned 1 [0274.586] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0274.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0274.586] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0274.586] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7d26, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0178639.JPG", cAlternateFileName="")) returned 1 [0274.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0274.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0274.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0274.587] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0274.587] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0274.587] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0274.587] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178639.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178639.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0274.588] GetFileType (hFile=0x174) returned 0x1 [0274.589] CloseHandle (hObject=0x174) returned 1 [0274.589] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0274.589] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178639.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178639.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7d26)) returned 1 [0274.589] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0274.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0274.590] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0274.590] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8a0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0178932.JPG", cAlternateFileName="")) returned 1 [0274.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0274.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0274.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0274.590] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0274.590] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0274.590] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0274.591] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178932.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178932.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0274.594] GetFileType (hFile=0x174) returned 0x1 [0274.594] CloseHandle (hObject=0x174) returned 1 [0274.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0274.594] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178932.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178932.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8a0c)) returned 1 [0274.595] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0274.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0274.595] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0274.595] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7d6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0179963.JPG", cAlternateFileName="")) returned 1 [0274.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0274.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0274.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0274.595] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0274.595] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0274.595] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0274.596] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0179963.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0179963.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0274.680] GetFileType (hFile=0x174) returned 0x1 [0274.680] CloseHandle (hObject=0x174) returned 1 [0274.681] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0274.681] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0179963.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0179963.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7d6e)) returned 1 [0274.681] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0274.681] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0274.681] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0274.681] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x40e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0182689.JPG", cAlternateFileName="")) returned 1 [0274.682] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0274.682] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0274.682] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0274.682] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0274.682] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0274.682] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0274.683] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182689.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182689.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0274.683] GetFileType (hFile=0x174) returned 0x1 [0274.684] CloseHandle (hObject=0x174) returned 1 [0274.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0274.684] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182689.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182689.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x40e7)) returned 1 [0274.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0274.685] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0274.685] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0274.685] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5f48, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0182888.WMF", cAlternateFileName="")) returned 1 [0274.685] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0274.685] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0274.685] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0274.685] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0274.685] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0274.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0274.686] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182888.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182888.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0274.687] GetFileType (hFile=0x174) returned 0x1 [0274.687] CloseHandle (hObject=0x174) returned 1 [0274.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0274.688] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182888.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182888.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5f48)) returned 1 [0274.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0274.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0274.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0274.688] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0182898.WMF", cAlternateFileName="")) returned 1 [0274.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0274.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0274.689] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0274.689] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0274.689] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0274.689] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0274.689] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182898.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182898.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0274.690] GetFileType (hFile=0x174) returned 0x1 [0274.690] CloseHandle (hObject=0x174) returned 1 [0274.691] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0274.691] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182898.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182898.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b2e)) returned 1 [0274.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0274.691] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0274.692] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0274.692] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0182902.WMF", cAlternateFileName="")) returned 1 [0274.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0274.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0274.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0274.692] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0274.692] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0274.693] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0274.693] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182902.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182902.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0274.694] GetFileType (hFile=0x174) returned 0x1 [0274.694] CloseHandle (hObject=0x174) returned 1 [0274.695] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0274.695] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182902.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182902.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e8e)) returned 1 [0274.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0274.695] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0274.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0274.695] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ed2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0182946.WMF", cAlternateFileName="")) returned 1 [0274.696] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0274.696] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0274.696] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0274.696] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0274.696] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0274.696] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0274.697] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182946.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182946.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0274.697] GetFileType (hFile=0x174) returned 0x1 [0274.698] CloseHandle (hObject=0x174) returned 1 [0274.698] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0274.698] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182946.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182946.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ed2)) returned 1 [0274.699] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0274.699] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0274.699] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0274.699] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x745c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0183172.WMF", cAlternateFileName="")) returned 1 [0274.699] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0274.699] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0274.699] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0274.699] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0274.700] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0274.700] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0274.700] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183172.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183172.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0274.701] GetFileType (hFile=0x174) returned 0x1 [0274.701] CloseHandle (hObject=0x174) returned 1 [0274.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0274.702] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183172.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183172.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x745c)) returned 1 [0274.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0274.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0274.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0274.702] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6fd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0183174.WMF", cAlternateFileName="")) returned 1 [0274.703] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0274.703] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0274.703] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0274.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0274.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0274.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0274.704] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183174.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183174.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0274.704] GetFileType (hFile=0x174) returned 0x1 [0274.705] CloseHandle (hObject=0x174) returned 1 [0274.705] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0274.705] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183174.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183174.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6fd2)) returned 1 [0274.705] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0274.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0274.706] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0274.706] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5f6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0183198.WMF", cAlternateFileName="")) returned 1 [0274.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0274.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0274.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0274.706] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0274.706] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0274.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0274.708] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183198.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183198.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0274.708] GetFileType (hFile=0x174) returned 0x1 [0274.709] CloseHandle (hObject=0x174) returned 1 [0274.709] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0274.709] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183198.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183198.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5f6e)) returned 1 [0274.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0274.710] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0274.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0274.710] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0183574.WMF", cAlternateFileName="")) returned 1 [0274.710] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0274.710] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0274.710] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0274.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0274.711] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0274.711] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0274.711] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183574.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183574.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0275.068] GetFileType (hFile=0x1c0) returned 0x1 [0275.068] CloseHandle (hObject=0x1c0) returned 1 [0275.068] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0275.068] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183574.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183574.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b4a)) returned 1 [0275.069] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0275.069] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0275.069] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0275.069] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c88, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185670.WMF", cAlternateFileName="")) returned 1 [0275.069] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0275.069] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0275.069] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0275.071] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0275.071] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0275.071] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0275.072] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185670.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185670.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0275.073] GetFileType (hFile=0x1c0) returned 0x1 [0275.074] CloseHandle (hObject=0x1c0) returned 1 [0275.074] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0275.074] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185670.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185670.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c88)) returned 1 [0275.074] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0275.074] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0275.075] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0275.075] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e46, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185774.WMF", cAlternateFileName="")) returned 1 [0275.076] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0275.076] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0275.076] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0275.076] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0275.076] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0275.076] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0275.077] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185774.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185774.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0275.078] GetFileType (hFile=0x1c0) returned 0x1 [0275.079] CloseHandle (hObject=0x1c0) returned 1 [0275.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0275.079] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185774.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185774.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e46)) returned 1 [0275.079] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0275.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0275.080] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0275.080] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x69d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185776.WMF", cAlternateFileName="")) returned 1 [0275.080] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0275.080] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0275.080] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0275.080] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0275.080] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0275.081] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0275.081] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185776.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185776.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0275.083] GetFileType (hFile=0x1c0) returned 0x1 [0275.083] CloseHandle (hObject=0x1c0) returned 1 [0275.084] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0275.084] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185776.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185776.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x69d8)) returned 1 [0275.084] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0275.084] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0275.084] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0275.084] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x62e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185778.WMF", cAlternateFileName="")) returned 1 [0275.084] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0275.085] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0275.085] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0275.085] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0275.085] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0275.085] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0275.086] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185778.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185778.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0275.086] GetFileType (hFile=0x1c0) returned 0x1 [0275.087] CloseHandle (hObject=0x1c0) returned 1 [0275.087] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0275.087] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185778.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185778.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x62e0)) returned 1 [0275.088] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0275.088] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0275.088] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0275.088] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe956, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185780.WMF", cAlternateFileName="")) returned 1 [0275.088] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0275.088] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0275.088] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0275.088] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0275.089] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0275.089] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0275.089] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185780.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185780.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0275.091] GetFileType (hFile=0x1c0) returned 0x1 [0275.091] CloseHandle (hObject=0x1c0) returned 1 [0275.092] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0275.092] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185780.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185780.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe956)) returned 1 [0275.092] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0275.092] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0275.092] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0275.092] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x99a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185786.WMF", cAlternateFileName="")) returned 1 [0275.092] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0275.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0275.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0275.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0275.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0275.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0275.094] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185786.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185786.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0275.094] GetFileType (hFile=0x1c0) returned 0x1 [0275.095] CloseHandle (hObject=0x1c0) returned 1 [0275.095] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0275.095] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185786.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185786.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x99a2)) returned 1 [0275.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0275.096] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0275.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0275.096] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x50b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185790.WMF", cAlternateFileName="")) returned 1 [0275.096] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0275.096] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0275.096] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0275.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0275.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0275.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0275.097] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185790.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185790.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0275.099] GetFileType (hFile=0x1c0) returned 0x1 [0275.100] CloseHandle (hObject=0x1c0) returned 1 [0275.100] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0275.100] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185790.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185790.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x50b6)) returned 1 [0275.101] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0275.101] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0275.101] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0275.101] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x650c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185796.WMF", cAlternateFileName="")) returned 1 [0275.101] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0275.101] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0275.101] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0275.101] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0275.102] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0275.102] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0275.102] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185796.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185796.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0275.385] GetFileType (hFile=0x21c) returned 0x1 [0275.386] CloseHandle (hObject=0x21c) returned 1 [0275.386] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0275.386] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185796.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185796.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x650c)) returned 1 [0275.386] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0275.387] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0275.387] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0275.387] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8420, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185798.WMF", cAlternateFileName="")) returned 1 [0275.387] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0275.387] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0275.387] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0275.387] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0275.387] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0275.387] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0275.427] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185798.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185798.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0275.428] GetFileType (hFile=0x1c0) returned 0x1 [0275.429] CloseHandle (hObject=0x1c0) returned 1 [0275.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0275.429] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185798.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185798.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8420)) returned 1 [0275.429] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0275.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0275.429] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0275.429] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5eae, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185800.WMF", cAlternateFileName="")) returned 1 [0275.430] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0275.430] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0275.430] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0275.430] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0275.430] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0275.430] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0275.430] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185800.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185800.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0275.431] GetFileType (hFile=0x1c0) returned 0x1 [0275.431] CloseHandle (hObject=0x1c0) returned 1 [0275.432] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0275.432] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185800.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185800.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5eae)) returned 1 [0275.432] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0275.432] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0275.432] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0275.432] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x773a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185806.WMF", cAlternateFileName="")) returned 1 [0275.432] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0275.432] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0275.432] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0275.432] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0275.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0275.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0275.433] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185806.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185806.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0275.435] GetFileType (hFile=0x1c0) returned 0x1 [0275.435] CloseHandle (hObject=0x1c0) returned 1 [0275.436] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0275.436] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185806.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185806.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x773a)) returned 1 [0275.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0275.436] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0275.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0275.436] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185818.WMF", cAlternateFileName="")) returned 1 [0275.437] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0275.437] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0275.437] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0275.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0275.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0275.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0275.438] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185818.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185818.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0275.438] GetFileType (hFile=0x1c0) returned 0x1 [0275.439] CloseHandle (hObject=0x1c0) returned 1 [0275.439] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0275.439] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185818.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185818.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b8e)) returned 1 [0275.439] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0275.439] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0275.440] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0275.440] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e74, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185828.WMF", cAlternateFileName="")) returned 1 [0275.440] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0275.440] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0275.440] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0275.440] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0275.440] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0275.440] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0275.441] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185828.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185828.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0275.442] GetFileType (hFile=0x1c0) returned 0x1 [0275.443] CloseHandle (hObject=0x1c0) returned 1 [0275.443] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0275.443] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185828.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185828.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e74)) returned 1 [0275.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0275.444] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0275.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0275.444] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2182, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185834.WMF", cAlternateFileName="")) returned 1 [0275.444] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0275.444] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0275.444] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0275.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0275.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0275.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0275.446] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185834.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185834.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0275.447] GetFileType (hFile=0x1c0) returned 0x1 [0275.448] CloseHandle (hObject=0x1c0) returned 1 [0275.448] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0275.449] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185834.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185834.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2182)) returned 1 [0275.449] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0275.449] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0275.449] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0275.449] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x37e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185842.WMF", cAlternateFileName="")) returned 1 [0275.449] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0275.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0275.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0275.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0275.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0275.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0275.451] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185842.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185842.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0275.452] GetFileType (hFile=0x1c0) returned 0x1 [0275.453] CloseHandle (hObject=0x1c0) returned 1 [0275.453] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0275.453] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185842.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185842.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x37e4)) returned 1 [0275.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0275.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0275.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0275.454] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21da, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0186346.WMF", cAlternateFileName="")) returned 1 [0275.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0275.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0275.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0275.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0275.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0275.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0275.455] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186346.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186346.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0275.456] GetFileType (hFile=0x1c0) returned 0x1 [0275.457] CloseHandle (hObject=0x1c0) returned 1 [0275.460] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0275.460] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186346.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186346.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21da)) returned 1 [0275.460] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0275.460] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0275.460] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0275.460] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x843a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0186360.WMF", cAlternateFileName="")) returned 1 [0275.461] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0275.461] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0275.461] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0275.461] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0275.461] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0275.461] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0275.462] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186360.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186360.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0275.463] GetFileType (hFile=0x1c0) returned 0x1 [0275.464] CloseHandle (hObject=0x1c0) returned 1 [0275.464] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0275.464] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186360.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186360.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x843a)) returned 1 [0275.465] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0275.465] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0275.465] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0275.465] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x44fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0186362.WMF", cAlternateFileName="")) returned 1 [0275.465] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0275.465] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0275.465] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0275.466] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0275.466] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0275.466] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0275.467] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186362.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186362.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0275.468] GetFileType (hFile=0x1c0) returned 0x1 [0275.469] CloseHandle (hObject=0x1c0) returned 1 [0275.469] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0275.469] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186362.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186362.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x44fe)) returned 1 [0275.470] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0275.470] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0275.470] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0275.470] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4724, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0186364.WMF", cAlternateFileName="")) returned 1 [0275.470] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0275.470] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0275.470] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0275.471] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0275.471] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0275.471] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0275.472] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186364.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186364.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0275.472] GetFileType (hFile=0x1c0) returned 0x1 [0275.864] CloseHandle (hObject=0x1c0) returned 1 [0275.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0275.865] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186364.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186364.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4724)) returned 1 [0275.865] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0275.865] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0275.865] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0275.865] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187647.WMF", cAlternateFileName="")) returned 1 [0275.865] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0275.865] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0275.866] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0275.866] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0275.866] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0275.866] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0275.867] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187647.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187647.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0275.868] GetFileType (hFile=0x1c0) returned 0x1 [0275.868] CloseHandle (hObject=0x1c0) returned 1 [0275.869] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0275.869] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187647.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187647.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19c4)) returned 1 [0275.869] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0275.869] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0275.869] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0275.869] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1500, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187815.WMF", cAlternateFileName="")) returned 1 [0275.869] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0275.870] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0275.870] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0275.870] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0275.870] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0275.870] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0275.871] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187815.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187815.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0275.872] GetFileType (hFile=0x1c0) returned 0x1 [0275.873] CloseHandle (hObject=0x1c0) returned 1 [0275.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0275.874] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187815.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187815.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1500)) returned 1 [0275.874] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0275.874] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0275.874] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0275.874] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187817.WMF", cAlternateFileName="")) returned 1 [0275.874] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0275.874] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0275.874] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0275.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0275.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0275.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0275.875] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187817.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187817.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0275.876] GetFileType (hFile=0x1c0) returned 0x1 [0275.876] CloseHandle (hObject=0x1c0) returned 1 [0275.877] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0275.877] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187817.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187817.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d7c)) returned 1 [0275.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0275.877] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0275.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0275.877] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2870, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187819.WMF", cAlternateFileName="")) returned 1 [0275.878] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0275.878] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0275.878] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0275.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0275.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0275.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0275.879] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187819.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187819.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0275.880] GetFileType (hFile=0x1c0) returned 0x1 [0275.880] CloseHandle (hObject=0x1c0) returned 1 [0275.881] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0275.881] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187819.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187819.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2870)) returned 1 [0275.881] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0275.881] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0275.881] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0275.882] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187825.WMF", cAlternateFileName="")) returned 1 [0275.882] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0275.882] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0275.882] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0275.882] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0275.882] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0275.882] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0275.883] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187825.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187825.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0275.884] GetFileType (hFile=0x1c0) returned 0x1 [0275.885] CloseHandle (hObject=0x1c0) returned 1 [0275.885] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0275.885] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187825.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187825.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d4c)) returned 1 [0275.885] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0275.886] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0275.886] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0275.886] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3040, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187829.WMF", cAlternateFileName="")) returned 1 [0275.886] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0275.886] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0275.886] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0275.886] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0275.886] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0275.887] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0275.887] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187829.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187829.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0275.888] GetFileType (hFile=0x1c0) returned 0x1 [0275.888] CloseHandle (hObject=0x1c0) returned 1 [0275.889] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0275.890] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187829.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187829.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3040)) returned 1 [0275.890] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0275.890] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0275.890] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0275.890] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2480, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187835.WMF", cAlternateFileName="")) returned 1 [0275.890] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0275.890] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0275.891] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0275.891] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0275.891] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0275.891] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0275.891] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187835.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187835.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0275.892] GetFileType (hFile=0x1c0) returned 0x1 [0275.893] CloseHandle (hObject=0x1c0) returned 1 [0275.893] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0275.893] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187835.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187835.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2480)) returned 1 [0275.893] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0275.893] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0275.893] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0275.894] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3fe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187837.WMF", cAlternateFileName="")) returned 1 [0275.894] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0275.894] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0275.894] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0275.894] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0275.894] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0275.894] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0275.895] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187837.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187837.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0275.896] GetFileType (hFile=0x1c0) returned 0x1 [0275.897] CloseHandle (hObject=0x1c0) returned 1 [0275.897] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0275.897] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187837.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187837.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3fe2)) returned 1 [0275.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0275.898] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0275.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0275.898] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187839.WMF", cAlternateFileName="")) returned 1 [0275.898] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0275.898] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0275.898] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0275.899] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0275.899] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0275.899] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0275.899] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187839.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187839.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0275.900] GetFileType (hFile=0x1c0) returned 0x1 [0275.900] CloseHandle (hObject=0x1c0) returned 1 [0275.901] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0275.901] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187839.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187839.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14fc)) returned 1 [0275.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0275.901] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0275.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0275.901] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187847.WMF", cAlternateFileName="")) returned 1 [0275.902] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0275.902] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0275.902] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0275.902] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0275.902] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0275.902] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0275.903] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187847.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187847.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0275.904] GetFileType (hFile=0x1c0) returned 0x1 [0275.904] CloseHandle (hObject=0x1c0) returned 1 [0275.904] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0275.904] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187847.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187847.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bcc)) returned 1 [0275.905] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0275.905] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0275.905] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0275.905] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d94, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187849.WMF", cAlternateFileName="")) returned 1 [0275.905] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0275.905] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0275.905] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0275.905] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0275.906] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0275.906] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0275.906] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187849.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187849.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0275.907] GetFileType (hFile=0x1c0) returned 0x1 [0275.908] CloseHandle (hObject=0x1c0) returned 1 [0275.908] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0275.908] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187849.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187849.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d94)) returned 1 [0275.908] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0275.908] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0275.908] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0275.909] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x221c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187851.WMF", cAlternateFileName="")) returned 1 [0275.909] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0275.909] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0275.909] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0275.909] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0275.909] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0275.909] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0275.910] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187851.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187851.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0276.209] GetFileType (hFile=0x1c0) returned 0x1 [0276.209] CloseHandle (hObject=0x1c0) returned 1 [0276.209] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0276.210] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187851.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187851.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x221c)) returned 1 [0276.210] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0276.210] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0276.211] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0276.211] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaac, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187859.WMF", cAlternateFileName="")) returned 1 [0276.211] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0276.211] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0276.211] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0276.212] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0276.212] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0276.212] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0276.508] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187859.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187859.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0276.508] GetFileType (hFile=0x1ac) returned 0x1 [0276.509] CloseHandle (hObject=0x1ac) returned 1 [0276.509] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0276.510] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187859.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187859.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaac)) returned 1 [0276.510] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0276.510] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0276.510] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0276.510] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2394, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187861.WMF", cAlternateFileName="")) returned 1 [0276.510] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0276.511] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0276.511] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0276.511] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0276.511] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0276.511] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0276.512] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187861.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187861.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0276.512] GetFileType (hFile=0x1ac) returned 0x1 [0276.513] CloseHandle (hObject=0x1ac) returned 1 [0276.514] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0276.514] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187861.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187861.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2394)) returned 1 [0276.514] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0276.514] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0276.514] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0276.514] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a44, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187863.WMF", cAlternateFileName="")) returned 1 [0276.514] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0276.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0276.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0276.515] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0276.515] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0276.515] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0276.516] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187863.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187863.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0276.516] GetFileType (hFile=0x1ac) returned 0x1 [0276.517] CloseHandle (hObject=0x1ac) returned 1 [0276.517] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0276.517] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187863.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187863.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a44)) returned 1 [0276.518] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0276.518] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0276.518] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0276.518] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1258, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187881.WMF", cAlternateFileName="")) returned 1 [0276.518] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0276.518] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0276.518] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0276.518] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0276.519] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0276.519] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0276.520] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187881.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187881.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0276.520] GetFileType (hFile=0x1ac) returned 0x1 [0276.521] CloseHandle (hObject=0x1ac) returned 1 [0276.521] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0276.521] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187881.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187881.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1258)) returned 1 [0276.521] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0276.521] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0276.522] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0276.522] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x834, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187883.WMF", cAlternateFileName="")) returned 1 [0276.522] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0276.522] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0276.522] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0276.522] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0276.522] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0276.522] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0276.523] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187883.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187883.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0276.523] GetFileType (hFile=0x1ac) returned 0x1 [0276.524] CloseHandle (hObject=0x1ac) returned 1 [0276.524] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0276.524] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187883.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187883.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x834)) returned 1 [0276.525] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0276.525] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0276.525] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0276.525] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187893.WMF", cAlternateFileName="")) returned 1 [0276.525] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0276.525] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0276.525] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0276.525] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0276.525] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0276.526] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0276.526] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187893.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187893.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0276.528] GetFileType (hFile=0x1ac) returned 0x1 [0276.528] CloseHandle (hObject=0x1ac) returned 1 [0276.529] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0276.529] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187893.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187893.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15f4)) returned 1 [0276.529] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0276.529] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0276.529] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0276.529] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd90, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187895.WMF", cAlternateFileName="")) returned 1 [0276.529] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0276.529] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0276.530] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0276.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0276.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0276.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0276.531] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187895.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187895.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0276.531] GetFileType (hFile=0x1ac) returned 0x1 [0276.532] CloseHandle (hObject=0x1ac) returned 1 [0276.532] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0276.532] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187895.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187895.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd90)) returned 1 [0276.533] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0276.533] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0276.533] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0276.533] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1388, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187921.WMF", cAlternateFileName="")) returned 1 [0276.533] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0276.533] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0276.533] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0276.533] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0276.534] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0276.534] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0276.534] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187921.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187921.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0276.536] GetFileType (hFile=0x1ac) returned 0x1 [0276.537] CloseHandle (hObject=0x1ac) returned 1 [0276.537] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0276.537] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187921.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187921.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1388)) returned 1 [0276.537] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0276.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0276.538] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0276.538] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x29dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0188511.WMF", cAlternateFileName="")) returned 1 [0276.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0276.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0276.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0276.538] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0276.538] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0276.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0276.539] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188511.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188511.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0276.540] GetFileType (hFile=0x1ac) returned 0x1 [0276.540] CloseHandle (hObject=0x1ac) returned 1 [0276.541] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0276.541] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188511.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188511.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x29dc)) returned 1 [0276.541] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0276.541] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0276.541] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0276.541] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3004, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0188513.WMF", cAlternateFileName="")) returned 1 [0276.542] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0276.542] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0276.542] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0276.542] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0276.542] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0276.542] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0276.543] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188513.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188513.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0276.543] GetFileType (hFile=0x1ac) returned 0x1 [0276.544] CloseHandle (hObject=0x1ac) returned 1 [0276.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0276.545] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188513.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188513.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3004)) returned 1 [0276.545] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0276.545] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0276.545] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0276.545] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0188519.WMF", cAlternateFileName="")) returned 1 [0276.545] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0276.545] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0276.545] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0276.545] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0276.546] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0276.546] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0276.546] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188519.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188519.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0276.547] GetFileType (hFile=0x1ac) returned 0x1 [0276.547] CloseHandle (hObject=0x1ac) returned 1 [0276.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0276.548] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188519.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188519.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16c0)) returned 1 [0276.548] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0276.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0276.548] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0276.548] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0188587.WMF", cAlternateFileName="")) returned 1 [0276.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0276.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0276.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0276.549] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0276.549] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0276.549] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0276.550] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188587.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188587.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0276.551] GetFileType (hFile=0x1ac) returned 0x1 [0276.882] CloseHandle (hObject=0x1ac) returned 1 [0276.882] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0276.882] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188587.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188587.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b5c)) returned 1 [0276.883] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0276.883] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0276.883] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0276.883] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3e9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0188667.WMF", cAlternateFileName="")) returned 1 [0276.883] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0276.883] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0276.884] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0276.884] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0276.884] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0276.884] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0276.885] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188667.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188667.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0276.885] GetFileType (hFile=0x1ac) returned 0x1 [0276.886] CloseHandle (hObject=0x1ac) returned 1 [0276.886] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0276.887] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188667.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188667.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3e9e)) returned 1 [0276.887] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0276.887] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0276.887] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0276.887] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x73a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0188669.WMF", cAlternateFileName="")) returned 1 [0276.888] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0276.888] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0276.888] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0276.888] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0276.888] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0276.888] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0276.889] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188669.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188669.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0276.889] GetFileType (hFile=0x1ac) returned 0x1 [0276.890] CloseHandle (hObject=0x1ac) returned 1 [0276.891] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0276.891] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188669.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188669.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x73a2)) returned 1 [0276.891] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0276.891] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0276.891] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0276.892] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x336a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0188679.WMF", cAlternateFileName="")) returned 1 [0276.892] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0276.892] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0276.892] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0276.892] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0276.892] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0276.892] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0276.893] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188679.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188679.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0276.894] GetFileType (hFile=0x1ac) returned 0x1 [0276.894] CloseHandle (hObject=0x1ac) returned 1 [0276.895] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0276.895] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188679.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188679.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x336a)) returned 1 [0276.896] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0276.896] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0276.896] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0276.896] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ca4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0195248.WMF", cAlternateFileName="")) returned 1 [0276.896] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0276.896] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0276.896] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0276.896] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0276.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0276.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0276.897] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195248.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195248.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0276.899] GetFileType (hFile=0x1ac) returned 0x1 [0276.899] CloseHandle (hObject=0x1ac) returned 1 [0276.899] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0276.900] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195248.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195248.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ca4)) returned 1 [0276.900] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0276.900] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0276.900] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0276.900] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0195254.WMF", cAlternateFileName="")) returned 1 [0276.900] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0276.900] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0276.900] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0276.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0276.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0276.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0276.901] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195254.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195254.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0276.903] GetFileType (hFile=0x1ac) returned 0x1 [0276.903] CloseHandle (hObject=0x1ac) returned 1 [0276.903] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0276.904] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195254.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195254.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11b6)) returned 1 [0276.904] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0276.904] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0276.904] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0276.904] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x207a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0195260.WMF", cAlternateFileName="")) returned 1 [0276.904] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0276.904] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0276.904] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0276.905] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0276.905] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0276.905] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0276.906] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195260.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195260.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0276.907] GetFileType (hFile=0x1ac) returned 0x1 [0276.907] CloseHandle (hObject=0x1ac) returned 1 [0276.908] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0276.908] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195260.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195260.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x207a)) returned 1 [0276.908] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0276.908] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0276.908] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0276.908] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x72f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0195320.WMF", cAlternateFileName="")) returned 1 [0276.909] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0276.909] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0276.909] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0276.909] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0276.909] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0276.909] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0276.910] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195320.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195320.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0276.911] GetFileType (hFile=0x1ac) returned 0x1 [0276.911] CloseHandle (hObject=0x1ac) returned 1 [0276.912] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0276.912] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195320.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195320.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x72f8)) returned 1 [0276.912] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0276.912] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0276.912] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0276.913] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5350, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0195342.WMF", cAlternateFileName="")) returned 1 [0276.913] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0276.913] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0276.913] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0276.913] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0276.913] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0276.913] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0276.914] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195342.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195342.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0277.459] GetFileType (hFile=0x21c) returned 0x1 [0277.459] CloseHandle (hObject=0x21c) returned 1 [0277.460] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0277.460] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195342.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195342.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5350)) returned 1 [0277.460] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0277.460] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0277.460] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0277.461] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x48be, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0195428.WMF", cAlternateFileName="")) returned 1 [0277.461] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0277.461] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0277.461] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0277.461] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0277.461] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0277.461] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0277.462] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195428.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195428.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0277.464] GetFileType (hFile=0x21c) returned 0x1 [0277.464] CloseHandle (hObject=0x21c) returned 1 [0277.465] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0277.465] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195428.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195428.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x48be)) returned 1 [0277.465] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0277.465] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0277.465] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0277.465] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe60, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0195772.WMF", cAlternateFileName="")) returned 1 [0277.465] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0277.466] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0277.466] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0277.466] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0277.466] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0277.466] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0277.467] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195772.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195772.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0277.468] GetFileType (hFile=0x21c) returned 0x1 [0277.468] CloseHandle (hObject=0x21c) returned 1 [0277.468] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0277.468] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195772.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195772.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe60)) returned 1 [0277.469] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0277.469] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0277.469] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0277.469] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbbc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0195788.WMF", cAlternateFileName="")) returned 1 [0277.469] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0277.469] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0277.469] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0277.469] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0277.470] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0277.470] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0277.470] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195788.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195788.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0277.471] GetFileType (hFile=0x21c) returned 0x1 [0277.471] CloseHandle (hObject=0x21c) returned 1 [0277.472] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0277.472] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195788.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195788.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbbc)) returned 1 [0277.472] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0277.472] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0277.472] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0277.473] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x128e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0196060.WMF", cAlternateFileName="")) returned 1 [0277.473] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0277.474] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0277.474] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0277.474] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0277.474] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0277.474] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0277.474] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196060.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196060.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0277.475] GetFileType (hFile=0x21c) returned 0x1 [0277.476] CloseHandle (hObject=0x21c) returned 1 [0277.476] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0277.476] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196060.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196060.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x128e)) returned 1 [0277.476] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0277.476] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0277.476] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0277.477] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0196110.WMF", cAlternateFileName="")) returned 1 [0277.477] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0277.477] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0277.477] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0277.477] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0277.477] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0277.477] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0277.478] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196110.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196110.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0277.478] GetFileType (hFile=0x21c) returned 0x1 [0277.479] CloseHandle (hObject=0x21c) returned 1 [0277.479] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0277.479] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196110.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196110.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14ce)) returned 1 [0277.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0277.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0277.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0277.480] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xef2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0196142.WMF", cAlternateFileName="")) returned 1 [0277.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0277.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0277.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0277.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0277.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0277.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0277.481] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196142.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196142.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0277.483] GetFileType (hFile=0x21c) returned 0x1 [0277.483] CloseHandle (hObject=0x21c) returned 1 [0277.483] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0277.483] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196142.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196142.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xef2)) returned 1 [0277.484] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0277.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0277.484] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0277.484] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3586, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0196354.WMF", cAlternateFileName="")) returned 1 [0277.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0277.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0277.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0277.484] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0277.484] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0277.485] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0277.485] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196354.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196354.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0277.486] GetFileType (hFile=0x21c) returned 0x1 [0277.487] CloseHandle (hObject=0x21c) returned 1 [0277.487] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0277.487] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196354.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196354.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3586)) returned 1 [0277.487] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0277.487] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0277.488] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0277.488] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b00, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0196358.WMF", cAlternateFileName="")) returned 1 [0277.488] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0277.488] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0277.489] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0277.489] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0277.489] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0277.489] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0277.489] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196358.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196358.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0277.491] GetFileType (hFile=0x21c) returned 0x1 [0277.491] CloseHandle (hObject=0x21c) returned 1 [0277.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0277.491] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196358.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196358.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b00)) returned 1 [0277.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0277.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0277.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0277.492] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x164c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0196364.WMF", cAlternateFileName="")) returned 1 [0277.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0277.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0277.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0277.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0277.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0277.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0277.492] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196364.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196364.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0277.493] GetFileType (hFile=0x21c) returned 0x1 [0277.493] CloseHandle (hObject=0x21c) returned 1 [0277.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0277.493] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196364.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196364.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x164c)) returned 1 [0277.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0277.494] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0277.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0277.494] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9d26, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0197979.WMF", cAlternateFileName="")) returned 1 [0277.494] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0277.494] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0277.494] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0277.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0277.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0277.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0277.494] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0197979.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0197979.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0277.495] GetFileType (hFile=0x21c) returned 0x1 [0277.495] CloseHandle (hObject=0x21c) returned 1 [0277.495] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0277.496] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0197979.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0197979.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9d26)) returned 1 [0277.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0277.496] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0277.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0277.496] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x668c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0197983.WMF", cAlternateFileName="")) returned 1 [0277.496] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0277.496] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0277.496] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0277.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0277.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0277.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0277.497] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0197983.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0197983.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0277.498] GetFileType (hFile=0x21c) returned 0x1 [0277.498] CloseHandle (hObject=0x21c) returned 1 [0277.498] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0277.498] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0197983.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0197983.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x668c)) returned 1 [0277.499] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0277.499] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0277.499] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0277.499] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x849c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0198016.WMF", cAlternateFileName="")) returned 1 [0277.499] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0277.499] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0277.499] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0277.499] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0277.499] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0277.499] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0277.500] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198016.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198016.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0277.762] GetFileType (hFile=0x21c) returned 0x1 [0277.763] CloseHandle (hObject=0x21c) returned 1 [0277.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0277.763] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198016.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198016.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x849c)) returned 1 [0277.763] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0277.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0277.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0277.764] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5cae, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0198020.WMF", cAlternateFileName="")) returned 1 [0277.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0277.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0277.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0277.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0277.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0277.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0277.895] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198020.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198020.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0277.896] GetFileType (hFile=0x19c) returned 0x1 [0277.896] CloseHandle (hObject=0x19c) returned 1 [0277.896] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0277.897] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198020.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198020.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5cae)) returned 1 [0277.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0277.897] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0277.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0277.897] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8860, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0198021.WMF", cAlternateFileName="")) returned 1 [0277.897] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0277.897] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0277.897] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0277.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0277.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0277.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0277.898] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198021.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198021.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0277.898] GetFileType (hFile=0x19c) returned 0x1 [0277.899] CloseHandle (hObject=0x19c) returned 1 [0277.899] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0277.899] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198021.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198021.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8860)) returned 1 [0277.899] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0277.899] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0277.900] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0277.900] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6624, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0198022.WMF", cAlternateFileName="")) returned 1 [0277.900] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0277.900] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0277.900] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0277.900] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0277.900] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0277.900] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0277.901] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198022.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198022.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0277.901] GetFileType (hFile=0x19c) returned 0x1 [0277.901] CloseHandle (hObject=0x19c) returned 1 [0277.902] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0277.902] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198022.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198022.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6624)) returned 1 [0277.902] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0277.902] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0277.902] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0277.902] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3cce, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0198025.WMF", cAlternateFileName="")) returned 1 [0277.902] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0277.902] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0277.902] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0277.903] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0277.903] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0277.903] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0277.903] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198025.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198025.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0277.943] GetFileType (hFile=0x19c) returned 0x1 [0277.943] CloseHandle (hObject=0x19c) returned 1 [0277.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0277.943] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198025.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198025.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3cce)) returned 1 [0277.943] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0277.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0277.943] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0277.943] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd6b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0198102.WMF", cAlternateFileName="")) returned 1 [0277.944] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0277.944] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0277.944] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0277.944] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0277.944] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0277.944] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0277.944] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198102.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198102.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0277.946] GetFileType (hFile=0x19c) returned 0x1 [0277.946] CloseHandle (hObject=0x19c) returned 1 [0277.947] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0277.947] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198102.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198102.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd6b4)) returned 1 [0277.947] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0277.947] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0277.947] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0277.947] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa520, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0198113.WMF", cAlternateFileName="")) returned 1 [0277.947] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0277.947] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0277.947] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0277.948] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0277.948] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0277.948] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0277.948] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198113.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198113.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0277.949] GetFileType (hFile=0x19c) returned 0x1 [0277.950] CloseHandle (hObject=0x19c) returned 1 [0277.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0277.950] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198113.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198113.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa520)) returned 1 [0277.950] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0277.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0277.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0277.951] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa3b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0198226.WMF", cAlternateFileName="")) returned 1 [0277.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0277.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0277.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0277.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0277.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0277.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0277.953] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198226.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198226.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0277.953] GetFileType (hFile=0x19c) returned 0x1 [0277.954] CloseHandle (hObject=0x19c) returned 1 [0277.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0277.954] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198226.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198226.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa3b2)) returned 1 [0277.954] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0277.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0277.954] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0277.954] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa69e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0198234.WMF", cAlternateFileName="")) returned 1 [0277.955] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0277.955] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0277.955] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0277.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0277.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0277.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0277.955] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198234.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198234.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0277.956] GetFileType (hFile=0x19c) returned 0x1 [0277.956] CloseHandle (hObject=0x19c) returned 1 [0277.957] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0277.957] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198234.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198234.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa69e)) returned 1 [0277.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0277.958] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0277.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0277.958] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6f9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0198372.WMF", cAlternateFileName="")) returned 1 [0277.958] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0277.958] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0277.958] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0277.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0277.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0277.959] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0277.959] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198372.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198372.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0277.960] GetFileType (hFile=0x19c) returned 0x1 [0277.961] CloseHandle (hObject=0x19c) returned 1 [0277.961] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0277.961] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198372.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198372.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6f9c)) returned 1 [0277.962] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0277.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0277.962] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0277.962] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9d6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0198377.WMF", cAlternateFileName="")) returned 1 [0277.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0277.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0277.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0277.962] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0277.962] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0277.965] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0277.965] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198377.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198377.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0277.967] GetFileType (hFile=0x19c) returned 0x1 [0277.967] CloseHandle (hObject=0x19c) returned 1 [0277.968] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0277.968] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198377.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198377.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9d6c)) returned 1 [0277.968] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0277.968] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0277.968] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0277.968] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc20c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0198447.WMF", cAlternateFileName="")) returned 1 [0277.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0277.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0277.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0277.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0277.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0277.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0278.351] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198447.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198447.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0278.602] GetFileType (hFile=0x1ac) returned 0x1 [0278.602] CloseHandle (hObject=0x1ac) returned 1 [0278.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0278.604] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198447.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198447.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc20c)) returned 1 [0278.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0278.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0278.606] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0278.606] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xae08, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0198494.WMF", cAlternateFileName="")) returned 1 [0278.606] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0278.606] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0278.606] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0278.606] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0278.606] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0278.607] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0278.607] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198494.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198494.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0278.608] GetFileType (hFile=0x1ac) returned 0x1 [0278.609] CloseHandle (hObject=0x1ac) returned 1 [0278.610] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0278.610] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198494.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198494.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xae08)) returned 1 [0278.610] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0278.610] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0278.610] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0278.610] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe17a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0198712.WMF", cAlternateFileName="")) returned 1 [0278.610] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0278.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0278.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0278.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0278.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0278.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0278.612] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198712.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198712.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0278.613] GetFileType (hFile=0x1ac) returned 0x1 [0278.613] CloseHandle (hObject=0x1ac) returned 1 [0278.614] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0278.614] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198712.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198712.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe17a)) returned 1 [0278.614] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0278.615] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0278.615] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0278.615] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x714e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199279.WMF", cAlternateFileName="")) returned 1 [0278.615] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0278.615] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0278.615] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0278.615] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0278.616] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0278.616] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0278.617] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199279.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199279.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0278.630] GetFileType (hFile=0x1ac) returned 0x1 [0278.630] CloseHandle (hObject=0x1ac) returned 1 [0278.631] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0278.631] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199279.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199279.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x714e)) returned 1 [0278.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0278.632] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0278.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0278.632] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7c4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199303.WMF", cAlternateFileName="")) returned 1 [0278.632] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0278.632] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0278.632] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0278.633] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0278.633] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0278.633] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0278.633] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199303.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199303.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0278.637] GetFileType (hFile=0x1ac) returned 0x1 [0278.637] CloseHandle (hObject=0x1ac) returned 1 [0278.638] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0278.638] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199303.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199303.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7c4e)) returned 1 [0278.639] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0278.639] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0278.639] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0278.639] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199307.WMF", cAlternateFileName="")) returned 1 [0278.639] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0278.639] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0278.640] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0278.640] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0278.640] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0278.640] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0278.640] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199307.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199307.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0278.642] GetFileType (hFile=0x1ac) returned 0x1 [0278.642] CloseHandle (hObject=0x1ac) returned 1 [0278.642] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0278.642] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199307.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199307.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc37e)) returned 1 [0278.643] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0278.643] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0278.643] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0278.643] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x662a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199423.WMF", cAlternateFileName="")) returned 1 [0278.643] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0278.643] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0278.643] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0278.643] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0278.643] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0278.643] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0278.644] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199423.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199423.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0278.645] GetFileType (hFile=0x1ac) returned 0x1 [0278.645] CloseHandle (hObject=0x1ac) returned 1 [0278.645] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0278.645] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199423.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199423.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x662a)) returned 1 [0278.645] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0278.646] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0278.646] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0278.646] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4124, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199429.WMF", cAlternateFileName="")) returned 1 [0278.646] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0278.646] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0278.646] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0278.646] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0278.646] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0278.646] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0278.647] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199429.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199429.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0278.648] GetFileType (hFile=0x1ac) returned 0x1 [0278.648] CloseHandle (hObject=0x1ac) returned 1 [0278.649] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0278.649] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199429.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199429.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4124)) returned 1 [0278.649] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0278.649] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0278.649] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0278.649] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199465.WMF", cAlternateFileName="")) returned 1 [0278.649] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0278.650] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0278.650] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0278.650] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0278.650] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0278.650] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0278.651] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199465.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199465.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0278.664] GetFileType (hFile=0x1ac) returned 0x1 [0278.665] CloseHandle (hObject=0x1ac) returned 1 [0278.665] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0278.665] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199465.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199465.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13c4)) returned 1 [0278.665] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0278.665] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0278.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0278.666] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x35bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199469.WMF", cAlternateFileName="")) returned 1 [0278.666] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0278.666] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0278.666] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0278.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0278.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0278.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0278.811] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199469.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199469.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0278.813] GetFileType (hFile=0x174) returned 0x1 [0278.813] CloseHandle (hObject=0x174) returned 1 [0278.814] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0278.814] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199469.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199469.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x35bc)) returned 1 [0278.814] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0278.815] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0278.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0278.815] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a18, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199473.WMF", cAlternateFileName="")) returned 1 [0278.815] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0278.815] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0278.815] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0278.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0278.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0278.816] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0278.816] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199473.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199473.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0278.817] GetFileType (hFile=0x174) returned 0x1 [0278.817] CloseHandle (hObject=0x174) returned 1 [0278.818] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0278.818] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199473.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199473.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a18)) returned 1 [0278.818] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0278.818] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0278.819] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0278.819] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1484, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199475.WMF", cAlternateFileName="")) returned 1 [0278.819] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0278.819] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0278.820] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0278.820] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0278.820] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0278.820] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0278.821] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199475.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199475.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0278.821] GetFileType (hFile=0x174) returned 0x1 [0278.822] CloseHandle (hObject=0x174) returned 1 [0278.822] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0278.823] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199475.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199475.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1484)) returned 1 [0278.823] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0278.823] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0278.823] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0278.823] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199483.WMF", cAlternateFileName="")) returned 1 [0278.823] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0278.824] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0278.824] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0278.824] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0278.824] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0278.824] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0278.825] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199483.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199483.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0278.826] GetFileType (hFile=0x174) returned 0x1 [0278.826] CloseHandle (hObject=0x174) returned 1 [0278.827] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0278.827] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199483.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199483.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27b4)) returned 1 [0278.827] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0278.827] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0278.827] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0278.827] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x302c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199609.WMF", cAlternateFileName="")) returned 1 [0278.828] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0278.828] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0278.828] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0278.828] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0278.828] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0278.828] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0278.829] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199609.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199609.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0278.830] GetFileType (hFile=0x174) returned 0x1 [0278.831] CloseHandle (hObject=0x174) returned 1 [0278.831] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0278.831] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199609.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199609.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x302c)) returned 1 [0278.832] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0278.832] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0278.832] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0278.832] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2004, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0200151.WMF", cAlternateFileName="")) returned 1 [0278.832] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0278.832] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0278.832] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0278.832] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0278.833] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0278.833] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0278.833] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200151.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200151.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0278.835] GetFileType (hFile=0x174) returned 0x1 [0278.835] CloseHandle (hObject=0x174) returned 1 [0278.836] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0278.836] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200151.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200151.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2004)) returned 1 [0278.836] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0278.836] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0278.837] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0278.837] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0200163.WMF", cAlternateFileName="")) returned 1 [0278.837] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0278.837] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0278.837] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0278.837] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0278.837] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0278.838] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0278.838] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200163.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200163.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0278.840] GetFileType (hFile=0x174) returned 0x1 [0278.840] CloseHandle (hObject=0x174) returned 1 [0278.841] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0278.841] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200163.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200163.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c0c)) returned 1 [0278.841] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0278.841] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0278.841] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0278.841] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0200183.WMF", cAlternateFileName="")) returned 1 [0278.842] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0278.842] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0278.842] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0278.842] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0278.842] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0278.842] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0278.843] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200183.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200183.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0278.843] GetFileType (hFile=0x174) returned 0x1 [0278.844] CloseHandle (hObject=0x174) returned 1 [0278.844] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0278.844] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200183.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200183.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14c0)) returned 1 [0278.845] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0278.845] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0278.845] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0278.845] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0200189.WMF", cAlternateFileName="")) returned 1 [0278.845] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0278.845] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0278.845] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0278.845] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0278.845] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0278.846] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0278.846] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200189.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200189.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0278.847] GetFileType (hFile=0x174) returned 0x1 [0278.847] CloseHandle (hObject=0x174) returned 1 [0278.848] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0278.848] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200189.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200189.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f7c)) returned 1 [0278.848] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0278.848] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0278.848] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0278.848] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7a46, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0200273.WMF", cAlternateFileName="")) returned 1 [0278.849] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0278.849] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0278.849] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0278.849] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0278.849] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0278.849] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0278.850] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200273.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200273.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0278.992] GetFileType (hFile=0x1e0) returned 0x1 [0278.993] CloseHandle (hObject=0x1e0) returned 1 [0278.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0278.993] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200273.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200273.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7a46)) returned 1 [0278.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0278.994] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0278.994] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0278.994] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0200279.WMF", cAlternateFileName="")) returned 1 [0278.994] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0278.994] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0278.994] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0278.994] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0278.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0278.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0278.995] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200279.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200279.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0278.997] GetFileType (hFile=0x1e0) returned 0x1 [0278.997] CloseHandle (hObject=0x1e0) returned 1 [0278.998] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0278.998] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200279.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200279.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c0a)) returned 1 [0278.998] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0278.998] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0278.998] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0278.999] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa0b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0200289.WMF", cAlternateFileName="")) returned 1 [0278.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0278.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0278.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0278.999] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0278.999] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0278.999] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0279.000] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200289.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200289.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0279.000] GetFileType (hFile=0x1e0) returned 0x1 [0279.001] CloseHandle (hObject=0x1e0) returned 1 [0279.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0279.001] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200289.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200289.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa0b0)) returned 1 [0279.002] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0279.002] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0279.002] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0279.002] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f08, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0200377.WMF", cAlternateFileName="")) returned 1 [0279.002] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0279.002] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0279.002] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0279.002] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0279.002] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0279.003] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0279.003] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200377.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200377.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0279.004] GetFileType (hFile=0x1e0) returned 0x1 [0279.004] CloseHandle (hObject=0x1e0) returned 1 [0279.004] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0279.005] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200377.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200377.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f08)) returned 1 [0279.005] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0279.005] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0279.005] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0279.005] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5398, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0200383.WMF", cAlternateFileName="")) returned 1 [0279.005] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0279.005] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0279.005] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0279.005] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0279.005] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0279.006] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0279.006] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200383.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200383.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0279.007] GetFileType (hFile=0x1e0) returned 0x1 [0279.008] CloseHandle (hObject=0x1e0) returned 1 [0279.008] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0279.008] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200383.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200383.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5398)) returned 1 [0279.008] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0279.008] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0279.008] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0279.008] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x366e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0200467.WMF", cAlternateFileName="")) returned 1 [0279.009] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0279.009] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0279.009] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0279.009] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0279.009] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0279.009] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0279.010] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200467.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200467.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0279.012] GetFileType (hFile=0x1e0) returned 0x1 [0279.013] CloseHandle (hObject=0x1e0) returned 1 [0279.013] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0279.013] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200467.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200467.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x366e)) returned 1 [0279.013] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0279.013] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0279.014] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0279.014] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x273e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0200521.WMF", cAlternateFileName="")) returned 1 [0279.014] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0279.014] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0279.014] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0279.014] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0279.014] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0279.014] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0279.015] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200521.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200521.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0279.015] GetFileType (hFile=0x1e0) returned 0x1 [0279.016] CloseHandle (hObject=0x1e0) returned 1 [0279.016] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0279.016] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200521.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200521.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x273e)) returned 1 [0279.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0279.016] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0279.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0279.017] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf36, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0200611.WMF", cAlternateFileName="")) returned 1 [0279.017] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0279.017] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0279.017] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0279.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0279.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0279.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0279.018] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200611.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200611.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0279.019] GetFileType (hFile=0x1e0) returned 0x1 [0279.019] CloseHandle (hObject=0x1e0) returned 1 [0279.019] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0279.019] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200611.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200611.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf36)) returned 1 [0279.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0279.020] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0279.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0279.020] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa50e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0202045.JPG", cAlternateFileName="")) returned 1 [0279.020] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0279.020] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0279.020] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0279.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0279.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0279.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0279.021] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0202045.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0202045.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0279.022] GetFileType (hFile=0x1e0) returned 0x1 [0279.023] CloseHandle (hObject=0x1e0) returned 1 [0279.023] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0279.023] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0202045.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0202045.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa50e)) returned 1 [0279.023] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0279.023] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0279.024] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0279.024] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6e74, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0211981.WMF", cAlternateFileName="")) returned 1 [0279.024] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0279.024] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0279.024] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0279.024] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0279.024] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0279.024] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0279.024] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0211981.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0211981.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0279.025] GetFileType (hFile=0x1e0) returned 0x1 [0279.025] CloseHandle (hObject=0x1e0) returned 1 [0279.026] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0279.026] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0211981.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0211981.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6e74)) returned 1 [0279.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0279.026] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0279.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0279.026] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x180e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0212299.WMF", cAlternateFileName="")) returned 1 [0279.026] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0279.026] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0279.026] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0279.027] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0279.027] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0279.027] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0279.027] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212299.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212299.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0279.028] GetFileType (hFile=0x1e0) returned 0x1 [0279.028] CloseHandle (hObject=0x1e0) returned 1 [0279.029] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0279.029] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212299.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212299.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x180e)) returned 1 [0279.029] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0279.029] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0279.029] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0279.029] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x25cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0212601.WMF", cAlternateFileName="")) returned 1 [0279.029] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0279.029] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0279.030] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0279.030] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0279.030] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0279.030] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0279.030] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212601.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212601.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0279.031] GetFileType (hFile=0x1e0) returned 0x1 [0279.031] CloseHandle (hObject=0x1e0) returned 1 [0279.032] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0279.032] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212601.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212601.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x25cc)) returned 1 [0279.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0279.032] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0279.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0279.032] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x199a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0212685.WMF", cAlternateFileName="")) returned 1 [0279.070] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0279.070] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0279.070] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0279.070] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0279.070] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0279.070] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0279.071] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212685.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212685.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0279.071] GetFileType (hFile=0x19c) returned 0x1 [0279.072] CloseHandle (hObject=0x19c) returned 1 [0279.072] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0279.072] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212685.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212685.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x199a)) returned 1 [0279.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0279.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0279.073] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0279.073] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x80c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0212751.WMF", cAlternateFileName="")) returned 1 [0279.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0279.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0279.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0279.073] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0279.073] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0279.073] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0279.074] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212751.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212751.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0279.075] GetFileType (hFile=0x19c) returned 0x1 [0279.075] CloseHandle (hObject=0x19c) returned 1 [0279.076] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0279.076] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212751.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212751.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x80c)) returned 1 [0279.076] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0279.076] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0279.076] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0279.077] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0212953.WMF", cAlternateFileName="")) returned 1 [0279.077] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0279.077] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0279.077] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0279.077] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0279.077] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0279.077] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0279.078] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212953.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212953.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0279.078] GetFileType (hFile=0x19c) returned 0x1 [0279.079] CloseHandle (hObject=0x19c) returned 1 [0279.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0279.079] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212953.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212953.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d4a)) returned 1 [0279.080] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0279.080] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0279.080] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0279.080] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0213243.WMF", cAlternateFileName="")) returned 1 [0279.080] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0279.080] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0279.080] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0279.080] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0279.080] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0279.081] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0279.081] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0213243.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0213243.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0279.083] GetFileType (hFile=0x19c) returned 0x1 [0279.084] CloseHandle (hObject=0x19c) returned 1 [0279.084] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0279.085] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0213243.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0213243.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa5c)) returned 1 [0279.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0279.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0279.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0279.086] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf00, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0213449.WMF", cAlternateFileName="")) returned 1 [0279.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0279.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0279.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0279.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0279.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0279.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0279.087] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0213449.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0213449.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0279.089] GetFileType (hFile=0x19c) returned 0x1 [0279.089] CloseHandle (hObject=0x19c) returned 1 [0279.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0279.090] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0213449.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0213449.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf00)) returned 1 [0279.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0279.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0279.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0279.090] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7cb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0214934.WMF", cAlternateFileName="")) returned 1 [0279.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0279.091] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0279.091] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0279.091] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0279.091] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0279.091] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0279.092] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0214934.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0214934.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0279.092] GetFileType (hFile=0x19c) returned 0x1 [0279.093] CloseHandle (hObject=0x19c) returned 1 [0279.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0279.093] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0214934.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0214934.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7cb6)) returned 1 [0279.094] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0279.094] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0279.094] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0279.094] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaefa, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0214948.WMF", cAlternateFileName="")) returned 1 [0279.094] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0279.094] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0279.094] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0279.094] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0279.094] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0279.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0279.095] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0214948.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0214948.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0279.097] GetFileType (hFile=0x19c) returned 0x1 [0279.097] CloseHandle (hObject=0x19c) returned 1 [0279.098] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0279.098] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0214948.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0214948.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaefa)) returned 1 [0279.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0279.098] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0279.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0279.098] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0215070.WMF", cAlternateFileName="")) returned 1 [0279.098] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0279.098] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0279.099] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0279.099] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0279.099] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0279.099] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0279.099] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215070.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215070.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0279.101] GetFileType (hFile=0x19c) returned 0x1 [0279.102] CloseHandle (hObject=0x19c) returned 1 [0279.102] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0279.102] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215070.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215070.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d6c)) returned 1 [0279.102] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0279.103] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0279.103] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0279.103] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f50, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0215076.WMF", cAlternateFileName="")) returned 1 [0279.103] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0279.103] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0279.103] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0279.103] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0279.103] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0279.103] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0279.104] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215076.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215076.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0279.105] GetFileType (hFile=0x19c) returned 0x1 [0279.105] CloseHandle (hObject=0x19c) returned 1 [0279.106] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0279.106] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215076.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215076.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f50)) returned 1 [0279.106] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0279.106] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0279.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0279.107] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x81ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0215210.WMF", cAlternateFileName="")) returned 1 [0279.107] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0279.107] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0279.107] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0279.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0279.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0279.108] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0279.108] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215210.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215210.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0279.109] GetFileType (hFile=0x19c) returned 0x1 [0279.110] CloseHandle (hObject=0x19c) returned 1 [0279.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0279.110] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215210.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215210.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x81ce)) returned 1 [0279.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0279.111] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0279.111] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0279.111] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x244a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0215709.WMF", cAlternateFileName="")) returned 1 [0279.111] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0279.111] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0279.111] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0279.111] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0279.112] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0279.112] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0279.112] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215709.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215709.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0279.617] GetFileType (hFile=0x1e0) returned 0x1 [0279.618] CloseHandle (hObject=0x1e0) returned 1 [0279.618] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0279.618] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215709.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215709.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x244a)) returned 1 [0279.618] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0279.619] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0279.619] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0279.619] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0215710.WMF", cAlternateFileName="")) returned 1 [0279.619] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0279.619] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0279.619] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0279.619] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0279.620] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0279.620] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0279.620] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215710.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215710.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0279.622] GetFileType (hFile=0x1e0) returned 0x1 [0279.622] CloseHandle (hObject=0x1e0) returned 1 [0279.623] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0279.623] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215710.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215710.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45a2)) returned 1 [0279.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0279.623] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0279.624] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0279.624] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0215718.WMF", cAlternateFileName="")) returned 1 [0279.624] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0279.624] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0279.624] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0279.624] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0279.624] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0279.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0279.625] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215718.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215718.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0279.626] GetFileType (hFile=0x1e0) returned 0x1 [0279.626] CloseHandle (hObject=0x1e0) returned 1 [0279.627] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0279.627] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215718.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215718.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15f2)) returned 1 [0279.627] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0279.627] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0279.627] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0279.628] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa783, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0216112.JPG", cAlternateFileName="")) returned 1 [0279.628] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0279.628] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0279.628] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0279.628] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0279.628] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0279.628] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0279.629] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216112.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216112.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0279.630] GetFileType (hFile=0x1e0) returned 0x1 [0279.630] CloseHandle (hObject=0x1e0) returned 1 [0279.631] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0279.631] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216112.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216112.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa783)) returned 1 [0279.631] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0279.631] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0279.631] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0279.632] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec9380a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5474, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0216153.JPG", cAlternateFileName="")) returned 1 [0279.632] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0279.632] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0279.632] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0279.633] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0279.633] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0279.633] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0279.633] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216153.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216153.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0279.634] GetFileType (hFile=0x1e0) returned 0x1 [0279.635] CloseHandle (hObject=0x1e0) returned 1 [0279.635] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0279.636] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216153.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216153.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec9380a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5474)) returned 1 [0279.636] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0279.636] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0279.636] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0279.636] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa488, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0216540.WMF", cAlternateFileName="")) returned 1 [0279.636] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0279.636] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0279.637] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0279.637] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0279.637] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0279.637] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0279.638] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216540.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216540.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0279.639] GetFileType (hFile=0x1e0) returned 0x1 [0279.640] CloseHandle (hObject=0x1e0) returned 1 [0279.640] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0279.641] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216540.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216540.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa488)) returned 1 [0279.641] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0279.641] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0279.641] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0279.641] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec9380a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x60dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0216570.WMF", cAlternateFileName="")) returned 1 [0279.641] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0279.641] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0279.641] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0279.642] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0279.642] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0279.642] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0279.642] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216570.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216570.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0279.643] GetFileType (hFile=0x1e0) returned 0x1 [0279.644] CloseHandle (hObject=0x1e0) returned 1 [0279.644] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0279.644] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216570.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216570.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec9380a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x60dc)) returned 1 [0279.644] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0279.645] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0279.645] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0279.645] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec9380a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f46, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0216600.WMF", cAlternateFileName="")) returned 1 [0279.645] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0279.645] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0279.645] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0279.645] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0279.645] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0279.645] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0279.646] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216600.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216600.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0279.647] GetFileType (hFile=0x1e0) returned 0x1 [0279.648] CloseHandle (hObject=0x1e0) returned 1 [0279.648] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0279.649] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216600.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216600.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec9380a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f46)) returned 1 [0279.649] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0279.649] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0279.649] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0279.649] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x24e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0216612.WMF", cAlternateFileName="")) returned 1 [0279.649] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0279.649] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0279.649] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0279.650] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0279.650] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0279.650] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0279.651] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216612.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216612.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0279.651] GetFileType (hFile=0x1e0) returned 0x1 [0279.652] CloseHandle (hObject=0x1e0) returned 1 [0279.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0279.652] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216612.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216612.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x24e2)) returned 1 [0279.653] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0279.653] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0279.653] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0279.653] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9b3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0216874.WMF", cAlternateFileName="")) returned 1 [0279.653] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0279.653] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0279.653] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0279.654] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0279.654] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0279.654] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0279.655] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216874.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216874.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0279.862] GetFileType (hFile=0x198) returned 0x1 [0279.862] CloseHandle (hObject=0x198) returned 1 [0279.862] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0279.863] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216874.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216874.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9b3a)) returned 1 [0279.863] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0279.863] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0279.863] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0279.863] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1484, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0217262.WMF", cAlternateFileName="")) returned 1 [0279.863] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0279.863] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0279.863] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0279.863] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0279.863] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0279.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0279.898] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0217262.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0217262.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0279.899] GetFileType (hFile=0x198) returned 0x1 [0279.900] CloseHandle (hObject=0x198) returned 1 [0279.900] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0279.900] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0217262.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0217262.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1484)) returned 1 [0279.900] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0279.901] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0279.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0279.901] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0217302.WMF", cAlternateFileName="")) returned 1 [0279.901] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0279.901] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0279.901] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0279.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0279.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0279.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0279.902] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0217302.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0217302.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0279.903] GetFileType (hFile=0x198) returned 0x1 [0279.903] CloseHandle (hObject=0x198) returned 1 [0279.904] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0279.904] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0217302.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0217302.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd9a)) returned 1 [0279.904] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0279.904] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0279.905] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0279.905] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ca8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0217872.WMF", cAlternateFileName="")) returned 1 [0279.905] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0279.905] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0279.905] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0279.905] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0279.905] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0279.905] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0279.906] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0217872.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0217872.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0279.908] GetFileType (hFile=0x198) returned 0x1 [0279.908] CloseHandle (hObject=0x198) returned 1 [0279.912] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0279.912] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0217872.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0217872.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ca8)) returned 1 [0279.913] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0279.913] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0279.913] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0279.913] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8ad6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0227419.JPG", cAlternateFileName="")) returned 1 [0279.913] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0279.913] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0279.913] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0279.914] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0279.914] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0279.914] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0279.915] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0227419.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0227419.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0279.916] GetFileType (hFile=0x198) returned 0x1 [0279.916] CloseHandle (hObject=0x198) returned 1 [0279.917] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0279.917] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0227419.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0227419.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8ad6)) returned 1 [0279.917] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0279.917] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0279.917] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0279.918] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe2e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0227558.JPG", cAlternateFileName="")) returned 1 [0279.918] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0279.918] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0279.918] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0279.918] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0279.918] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0279.918] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0279.919] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0227558.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0227558.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0279.920] GetFileType (hFile=0x198) returned 0x1 [0279.920] CloseHandle (hObject=0x198) returned 1 [0279.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0279.921] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0227558.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0227558.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe2e9)) returned 1 [0279.921] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0279.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0279.921] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0279.922] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x65a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0228823.WMF", cAlternateFileName="")) returned 1 [0279.922] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0279.922] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0279.922] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0279.922] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0279.922] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0279.922] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0279.923] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0228823.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0228823.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0279.924] GetFileType (hFile=0x198) returned 0x1 [0279.925] CloseHandle (hObject=0x198) returned 1 [0279.925] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0279.925] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0228823.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0228823.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x65a6)) returned 1 [0279.926] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0279.926] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0279.926] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0279.926] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec9380a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x918c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0228959.WMF", cAlternateFileName="")) returned 1 [0279.926] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0279.926] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0279.926] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0279.927] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0279.927] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0279.927] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0279.927] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0228959.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0228959.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0279.928] GetFileType (hFile=0x198) returned 0x1 [0279.929] CloseHandle (hObject=0x198) returned 1 [0279.929] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0279.929] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0228959.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0228959.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec9380a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x918c)) returned 1 [0279.929] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0279.929] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0279.930] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0279.930] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1daa, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0230553.WMF", cAlternateFileName="")) returned 1 [0279.930] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0279.930] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0279.930] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0279.930] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0279.930] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0279.930] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0279.931] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0230553.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0230553.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0279.931] GetFileType (hFile=0x198) returned 0x1 [0279.932] CloseHandle (hObject=0x198) returned 1 [0279.932] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0279.932] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0230553.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0230553.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1daa)) returned 1 [0279.932] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0279.933] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0279.933] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0279.933] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec9380a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1066, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0230558.WMF", cAlternateFileName="")) returned 1 [0279.933] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0279.933] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0279.933] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0279.933] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0279.933] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0279.933] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0279.934] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0230558.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0230558.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0279.978] GetFileType (hFile=0x198) returned 0x1 [0279.978] CloseHandle (hObject=0x198) returned 1 [0279.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0279.979] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0230558.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0230558.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec9380a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1066)) returned 1 [0279.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0279.980] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0279.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0279.980] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x332a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0232171.WMF", cAlternateFileName="")) returned 1 [0279.980] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0279.980] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0279.980] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0279.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0279.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0279.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0279.982] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232171.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232171.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0279.983] GetFileType (hFile=0x198) returned 0x1 [0279.983] CloseHandle (hObject=0x198) returned 1 [0279.984] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0279.984] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232171.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232171.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x332a)) returned 1 [0279.984] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0279.984] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0279.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0279.985] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec9380a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6bc2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0232393.WMF", cAlternateFileName="")) returned 1 [0279.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0279.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0279.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0279.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0279.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0279.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0279.986] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232393.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232393.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0279.987] GetFileType (hFile=0x198) returned 0x1 [0279.988] CloseHandle (hObject=0x198) returned 1 [0279.988] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0279.989] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232393.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232393.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec9380a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6bc2)) returned 1 [0279.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0279.989] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0279.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0279.989] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa086, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0232395.WMF", cAlternateFileName="")) returned 1 [0279.989] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0279.989] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0279.989] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0279.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0279.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0279.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0279.991] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232395.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232395.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0279.992] GetFileType (hFile=0x198) returned 0x1 [0279.993] CloseHandle (hObject=0x198) returned 1 [0279.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0279.993] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232395.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232395.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa086)) returned 1 [0279.994] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0279.994] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0279.994] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0279.994] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec9380a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x380a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0232795.WMF", cAlternateFileName="")) returned 1 [0279.994] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0279.994] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0279.994] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0279.994] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0279.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0279.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0279.995] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232795.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232795.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0279.996] GetFileType (hFile=0x198) returned 0x1 [0279.997] CloseHandle (hObject=0x198) returned 1 [0279.997] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0279.997] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232795.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232795.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec9380a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x380a)) returned 1 [0279.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0279.997] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0279.998] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0279.998] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x899c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0232797.WMF", cAlternateFileName="")) returned 1 [0279.998] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0279.998] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0279.998] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0279.998] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0279.998] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0279.998] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0279.999] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232797.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232797.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0280.001] GetFileType (hFile=0x198) returned 0x1 [0280.001] CloseHandle (hObject=0x198) returned 1 [0280.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0280.002] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232797.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232797.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x899c)) returned 1 [0280.002] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0280.002] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0280.002] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0280.002] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4de6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0232803.WMF", cAlternateFileName="")) returned 1 [0280.004] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0280.004] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0280.004] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0280.004] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0280.004] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0280.004] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0280.005] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232803.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232803.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0280.006] GetFileType (hFile=0x198) returned 0x1 [0280.006] CloseHandle (hObject=0x198) returned 1 [0280.007] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0280.007] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232803.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232803.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4de6)) returned 1 [0280.007] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0280.008] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0280.008] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0280.008] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x26e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0233512.WMF", cAlternateFileName="")) returned 1 [0280.008] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0280.008] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0280.008] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0280.008] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0280.008] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0280.009] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0280.009] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0233512.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0233512.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0280.010] GetFileType (hFile=0x198) returned 0x1 [0280.011] CloseHandle (hObject=0x198) returned 1 [0280.011] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0280.011] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0233512.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0233512.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x26e8)) returned 1 [0280.011] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0280.011] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0280.012] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0280.012] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x312c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0233665.WMF", cAlternateFileName="")) returned 1 [0280.012] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0280.012] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0280.012] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0280.012] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0280.012] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0280.012] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0280.013] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0233665.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0233665.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0280.014] GetFileType (hFile=0x198) returned 0x1 [0280.014] CloseHandle (hObject=0x198) returned 1 [0280.015] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0280.015] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0233665.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0233665.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x312c)) returned 1 [0280.015] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0280.015] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0280.015] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0280.015] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x975e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0233992.WMF", cAlternateFileName="")) returned 1 [0280.016] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0280.016] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0280.016] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0280.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0280.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0280.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0280.017] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0233992.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0233992.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0280.017] GetFileType (hFile=0x198) returned 0x1 [0280.018] CloseHandle (hObject=0x198) returned 1 [0280.018] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0280.018] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0233992.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0233992.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x975e)) returned 1 [0280.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0280.019] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0280.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0280.019] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcec6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0234000.WMF", cAlternateFileName="")) returned 1 [0280.019] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0280.019] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0280.019] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0280.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0280.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0280.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0280.020] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0234000.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0234000.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0280.021] GetFileType (hFile=0x198) returned 0x1 [0280.021] CloseHandle (hObject=0x198) returned 1 [0280.022] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0280.022] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0234000.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0234000.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcec6)) returned 1 [0280.022] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0280.022] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0280.270] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0280.271] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b40, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0234001.WMF", cAlternateFileName="")) returned 1 [0280.271] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0280.271] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0280.271] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0280.271] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0280.271] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0280.271] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0280.380] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0234001.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0234001.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0280.383] GetFileType (hFile=0x198) returned 0x1 [0280.383] CloseHandle (hObject=0x198) returned 1 [0280.383] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0280.384] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0234001.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0234001.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b40)) returned 1 [0280.384] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0280.384] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0280.384] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0280.384] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x80d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0234376.WMF", cAlternateFileName="")) returned 1 [0280.384] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0280.385] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0280.385] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0280.385] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0280.385] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0280.385] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0280.667] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0234376.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0234376.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0280.669] GetFileType (hFile=0x174) returned 0x1 [0280.670] CloseHandle (hObject=0x174) returned 1 [0280.670] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0280.671] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0234376.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0234376.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x80d4)) returned 1 [0280.671] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0280.671] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0280.671] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0280.671] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0237225.WMF", cAlternateFileName="")) returned 1 [0280.671] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0280.671] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0280.672] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0280.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0280.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0280.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0280.673] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237225.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0237225.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0280.673] GetFileType (hFile=0x174) returned 0x1 [0280.674] CloseHandle (hObject=0x174) returned 1 [0280.674] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0280.674] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237225.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0237225.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcba0)) returned 1 [0280.674] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0280.675] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0280.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0280.675] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5700, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0237228.WMF", cAlternateFileName="")) returned 1 [0280.675] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0280.675] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0280.675] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0280.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0280.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0280.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0280.676] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237228.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0237228.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0280.677] GetFileType (hFile=0x174) returned 0x1 [0280.677] CloseHandle (hObject=0x174) returned 1 [0280.678] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0280.678] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237228.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0237228.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5700)) returned 1 [0280.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0280.678] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0280.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0280.678] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x60c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0237336.WMF", cAlternateFileName="")) returned 1 [0280.679] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0280.679] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0280.679] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0280.679] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0280.680] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0280.680] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0280.680] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237336.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0237336.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0280.683] GetFileType (hFile=0x174) returned 0x1 [0280.683] CloseHandle (hObject=0x174) returned 1 [0280.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0280.684] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237336.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0237336.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x60c2)) returned 1 [0280.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0280.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0280.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0280.684] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x51be, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0237759.WMF", cAlternateFileName="")) returned 1 [0280.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0280.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0280.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0280.685] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0280.685] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0280.685] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0280.685] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237759.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0237759.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0280.687] GetFileType (hFile=0x174) returned 0x1 [0280.687] CloseHandle (hObject=0x174) returned 1 [0280.687] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0280.688] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237759.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0237759.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x51be)) returned 1 [0280.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0280.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0280.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0280.688] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x59a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0238333.WMF", cAlternateFileName="")) returned 1 [0280.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0280.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0280.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0280.689] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0280.689] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0280.689] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0280.690] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238333.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0238333.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0280.690] GetFileType (hFile=0x174) returned 0x1 [0280.691] CloseHandle (hObject=0x174) returned 1 [0280.691] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0280.691] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238333.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0238333.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x59a0)) returned 1 [0280.692] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0280.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0280.692] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0280.692] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1334, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0238927.WMF", cAlternateFileName="")) returned 1 [0280.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0280.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0280.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0280.692] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0280.693] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0280.693] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0280.694] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238927.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0238927.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0280.695] GetFileType (hFile=0x174) returned 0x1 [0280.696] CloseHandle (hObject=0x174) returned 1 [0280.696] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0280.696] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238927.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0238927.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1334)) returned 1 [0280.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0280.697] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0280.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0280.697] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0238959.WMF", cAlternateFileName="")) returned 1 [0280.697] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0280.697] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0280.697] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0280.698] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0280.698] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0280.698] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0280.699] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238959.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0238959.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0280.700] GetFileType (hFile=0x174) returned 0x1 [0280.700] CloseHandle (hObject=0x174) returned 1 [0280.701] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0280.701] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238959.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0238959.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d3c)) returned 1 [0280.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0280.701] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0280.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0280.701] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0238983.WMF", cAlternateFileName="")) returned 1 [0280.701] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0280.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0280.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0280.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0280.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0280.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0280.703] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238983.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0238983.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0280.703] GetFileType (hFile=0x174) returned 0x1 [0280.704] CloseHandle (hObject=0x174) returned 1 [0280.704] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0280.705] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238983.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0238983.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13b8)) returned 1 [0280.705] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0280.705] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0280.705] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0280.705] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1284, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239057.WMF", cAlternateFileName="")) returned 1 [0280.705] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0280.705] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0280.705] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0280.706] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0280.706] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0280.706] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0280.707] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239057.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239057.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0280.707] GetFileType (hFile=0x174) returned 0x1 [0280.708] CloseHandle (hObject=0x174) returned 1 [0280.708] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0280.708] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239057.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239057.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1284)) returned 1 [0280.708] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0280.709] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0280.709] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0280.709] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239063.WMF", cAlternateFileName="")) returned 1 [0280.709] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0280.709] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0280.709] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0280.709] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0280.709] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0280.709] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0281.085] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239063.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239063.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0281.086] GetFileType (hFile=0x1ac) returned 0x1 [0281.086] CloseHandle (hObject=0x1ac) returned 1 [0281.087] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0281.087] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239063.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239063.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16fc)) returned 1 [0281.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0281.087] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0281.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0281.087] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1294, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239079.WMF", cAlternateFileName="")) returned 1 [0281.088] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0281.088] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0281.088] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0281.088] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0281.088] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0281.088] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0281.089] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239079.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239079.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0281.089] GetFileType (hFile=0x1ac) returned 0x1 [0281.090] CloseHandle (hObject=0x1ac) returned 1 [0281.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0281.090] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239079.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239079.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1294)) returned 1 [0281.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0281.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0281.091] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0281.091] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1464, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239191.WMF", cAlternateFileName="")) returned 1 [0281.091] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0281.091] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0281.091] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0281.091] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0281.091] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0281.091] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0281.091] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239191.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239191.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0281.092] GetFileType (hFile=0x1ac) returned 0x1 [0281.092] CloseHandle (hObject=0x1ac) returned 1 [0281.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0281.093] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239191.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239191.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1464)) returned 1 [0281.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0281.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0281.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0281.094] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8424, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239611.WMF", cAlternateFileName="")) returned 1 [0281.094] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0281.094] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0281.094] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0281.094] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0281.094] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0281.094] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0281.095] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239611.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239611.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0281.096] GetFileType (hFile=0x1ac) returned 0x1 [0281.096] CloseHandle (hObject=0x1ac) returned 1 [0281.097] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0281.097] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239611.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239611.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8424)) returned 1 [0281.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0281.097] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0281.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0281.098] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1314, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239935.WMF", cAlternateFileName="")) returned 1 [0281.098] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0281.098] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0281.098] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0281.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0281.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0281.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0281.099] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239935.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239935.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0281.100] GetFileType (hFile=0x1ac) returned 0x1 [0281.101] CloseHandle (hObject=0x1ac) returned 1 [0281.101] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0281.101] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239935.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239935.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1314)) returned 1 [0281.102] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0281.102] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0281.102] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0281.102] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1418, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239941.WMF", cAlternateFileName="")) returned 1 [0281.102] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0281.102] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0281.102] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0281.103] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0281.103] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0281.103] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0281.103] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239941.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239941.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0281.104] GetFileType (hFile=0x1ac) returned 0x1 [0281.104] CloseHandle (hObject=0x1ac) returned 1 [0281.105] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0281.105] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239941.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239941.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1418)) returned 1 [0281.105] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0281.105] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0281.105] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0281.106] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1998, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239943.WMF", cAlternateFileName="")) returned 1 [0281.106] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0281.106] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0281.106] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0281.106] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0281.106] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0281.106] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0281.107] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239943.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239943.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0281.107] GetFileType (hFile=0x1ac) returned 0x1 [0281.108] CloseHandle (hObject=0x1ac) returned 1 [0281.108] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0281.108] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239943.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239943.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1998)) returned 1 [0281.109] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0281.109] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0281.109] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0281.109] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239951.WMF", cAlternateFileName="")) returned 1 [0281.109] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0281.109] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0281.109] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0281.109] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0281.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0281.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0281.110] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239951.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239951.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0281.111] GetFileType (hFile=0x1ac) returned 0x1 [0281.111] CloseHandle (hObject=0x1ac) returned 1 [0281.112] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0281.112] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239951.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239951.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c40)) returned 1 [0281.112] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0281.112] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0281.112] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0281.112] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239953.WMF", cAlternateFileName="")) returned 1 [0281.112] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0281.112] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0281.112] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0281.112] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0281.113] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0281.113] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0281.113] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239953.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239953.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0281.114] GetFileType (hFile=0x1ac) returned 0x1 [0281.114] CloseHandle (hObject=0x1ac) returned 1 [0281.114] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0281.114] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239953.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239953.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bc8)) returned 1 [0281.115] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0281.115] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0281.115] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0281.115] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1348, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239955.WMF", cAlternateFileName="")) returned 1 [0281.115] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0281.115] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0281.115] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0281.115] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0281.115] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0281.115] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0281.116] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239955.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239955.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0281.577] GetFileType (hFile=0x1ac) returned 0x1 [0281.577] CloseHandle (hObject=0x1ac) returned 1 [0281.578] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0281.578] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239955.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239955.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1348)) returned 1 [0281.578] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0281.578] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0281.578] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0281.578] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1720, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239965.WMF", cAlternateFileName="")) returned 1 [0281.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0281.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0281.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0281.579] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0281.579] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0281.579] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0281.757] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239965.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239965.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0281.758] GetFileType (hFile=0x1ac) returned 0x1 [0281.758] CloseHandle (hObject=0x1ac) returned 1 [0281.758] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0281.758] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239965.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239965.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1720)) returned 1 [0281.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0281.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0281.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0281.759] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x154c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239967.WMF", cAlternateFileName="")) returned 1 [0281.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0281.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0281.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0281.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0281.760] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0281.760] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0281.760] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239967.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239967.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0281.761] GetFileType (hFile=0x1ac) returned 0x1 [0281.761] CloseHandle (hObject=0x1ac) returned 1 [0281.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0281.762] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239967.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239967.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x154c)) returned 1 [0281.762] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0281.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0281.762] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0281.763] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239973.WMF", cAlternateFileName="")) returned 1 [0281.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0281.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0281.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0281.763] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0281.763] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0281.763] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0281.764] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239973.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239973.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0281.764] GetFileType (hFile=0x1ac) returned 0x1 [0281.765] CloseHandle (hObject=0x1ac) returned 1 [0281.765] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0281.765] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239973.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239973.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13e8)) returned 1 [0281.766] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0281.766] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0281.766] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0281.766] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xed05f07, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xed05f07, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xed05f07, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xda0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239975.WMF", cAlternateFileName="")) returned 1 [0281.766] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0281.766] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0281.766] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0281.766] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0281.766] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0281.766] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0281.767] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239975.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239975.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0281.805] GetFileType (hFile=0x1ac) returned 0x1 [0281.806] CloseHandle (hObject=0x1ac) returned 1 [0281.806] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0281.806] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239975.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239975.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xed05f07, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xed05f07, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xed05f07, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xda0)) returned 1 [0281.806] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0281.807] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0281.807] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0281.807] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xed05f07, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xed05f07, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf2fbd2e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239997.WMF", cAlternateFileName="")) returned 1 [0281.807] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0281.807] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0281.807] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0281.807] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0281.807] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0281.807] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0281.807] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239997.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239997.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0281.808] GetFileType (hFile=0x1ac) returned 0x1 [0281.809] CloseHandle (hObject=0x1ac) returned 1 [0281.809] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0281.809] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239997.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239997.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xed05f07, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xed05f07, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf2fbd2e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcd8)) returned 1 [0281.809] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0281.809] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0281.810] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0281.810] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xed05f07, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1df8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0240157.WMF", cAlternateFileName="")) returned 1 [0281.810] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0281.810] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0281.810] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0281.810] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0281.810] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0281.810] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0281.811] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240157.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0240157.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0281.811] GetFileType (hFile=0x1ac) returned 0x1 [0281.812] CloseHandle (hObject=0x1ac) returned 1 [0281.812] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0281.812] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240157.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0240157.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xed05f07, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1df8)) returned 1 [0281.812] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0281.812] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0281.812] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0281.813] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xed05f07, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa410, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0240175.WMF", cAlternateFileName="")) returned 1 [0281.813] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0281.813] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0281.813] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0281.813] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0281.813] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0281.813] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0281.814] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240175.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0240175.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0281.814] GetFileType (hFile=0x1ac) returned 0x1 [0281.815] CloseHandle (hObject=0x1ac) returned 1 [0281.815] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0281.815] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240175.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0240175.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xed05f07, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa410)) returned 1 [0281.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0281.815] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0281.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0281.815] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xed05f07, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0240189.WMF", cAlternateFileName="")) returned 1 [0281.816] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0281.816] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0281.816] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0281.816] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0281.816] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0281.816] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0281.817] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240189.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0240189.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0281.817] GetFileType (hFile=0x1ac) returned 0x1 [0281.818] CloseHandle (hObject=0x1ac) returned 1 [0281.818] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0281.818] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240189.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0240189.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xed05f07, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdc4)) returned 1 [0281.818] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0281.818] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0281.818] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0281.818] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1476, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0240291.WMF", cAlternateFileName="")) returned 1 [0281.827] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0281.827] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0281.828] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0281.828] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0281.828] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0281.828] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0281.828] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240291.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0240291.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0281.829] GetFileType (hFile=0x1ac) returned 0x1 [0281.830] CloseHandle (hObject=0x1ac) returned 1 [0281.830] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0281.830] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240291.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0240291.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1476)) returned 1 [0281.830] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0281.830] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0281.830] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0281.830] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xed05f07, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x92e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0241019.WMF", cAlternateFileName="")) returned 1 [0281.830] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0281.830] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0281.830] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0281.831] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0281.831] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0281.831] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0281.831] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241019.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241019.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0281.832] GetFileType (hFile=0x1ac) returned 0x1 [0281.832] CloseHandle (hObject=0x1ac) returned 1 [0281.832] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0281.832] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241019.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241019.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xed05f07, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x92e)) returned 1 [0281.832] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0281.833] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0281.833] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0281.833] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0241037.WMF", cAlternateFileName="")) returned 1 [0281.833] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0281.833] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0281.833] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0281.833] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0281.833] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0281.833] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0281.834] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241037.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241037.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0281.834] GetFileType (hFile=0x1ac) returned 0x1 [0282.075] CloseHandle (hObject=0x1ac) returned 1 [0282.075] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0282.076] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241037.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241037.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa4e)) returned 1 [0282.076] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0282.076] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0282.076] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0282.076] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x926, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0241041.WMF", cAlternateFileName="")) returned 1 [0282.076] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0282.076] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0282.076] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0282.076] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0282.077] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0282.077] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0282.243] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241041.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241041.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0282.244] GetFileType (hFile=0x1e0) returned 0x1 [0282.245] CloseHandle (hObject=0x1e0) returned 1 [0282.245] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0282.245] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241041.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241041.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x926)) returned 1 [0282.245] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0282.246] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0282.246] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0282.246] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xab2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0241043.WMF", cAlternateFileName="")) returned 1 [0282.246] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0282.246] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0282.246] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0282.246] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0282.246] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0282.246] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0282.247] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241043.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241043.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0282.248] GetFileType (hFile=0x1e0) returned 0x1 [0282.248] CloseHandle (hObject=0x1e0) returned 1 [0282.248] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0282.249] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241043.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241043.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xab2)) returned 1 [0282.249] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0282.249] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0282.249] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0282.249] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34834b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf34834b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x82a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0241077.WMF", cAlternateFileName="")) returned 1 [0282.249] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0282.249] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0282.249] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0282.249] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0282.249] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0282.249] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0282.250] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241077.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241077.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0282.252] GetFileType (hFile=0x1e0) returned 0x1 [0282.252] CloseHandle (hObject=0x1e0) returned 1 [0282.252] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0282.252] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241077.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241077.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34834b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf34834b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x82a)) returned 1 [0282.253] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0282.253] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0282.253] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0282.253] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34834b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf34834b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0241773.WMF", cAlternateFileName="")) returned 1 [0282.253] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0282.253] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0282.253] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0282.253] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0282.253] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0282.254] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0282.254] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241773.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241773.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0282.255] GetFileType (hFile=0x1e0) returned 0x1 [0282.255] CloseHandle (hObject=0x1e0) returned 1 [0282.255] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0282.255] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241773.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241773.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34834b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf34834b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcbe)) returned 1 [0282.256] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0282.256] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0282.256] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0282.256] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34834b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf34834b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0241781.WMF", cAlternateFileName="")) returned 1 [0282.256] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0282.256] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0282.256] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0282.256] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0282.256] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0282.256] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0282.258] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241781.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241781.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0282.258] GetFileType (hFile=0x1e0) returned 0x1 [0282.259] CloseHandle (hObject=0x1e0) returned 1 [0282.266] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0282.266] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241781.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241781.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34834b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf34834b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7b2)) returned 1 [0282.267] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0282.267] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0282.267] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0282.267] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34834b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf34834b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7938, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0250504.WMF", cAlternateFileName="")) returned 1 [0282.267] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0282.267] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0282.267] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0282.267] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0282.267] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0282.267] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0282.268] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0250504.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0250504.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0282.269] GetFileType (hFile=0x1e0) returned 0x1 [0282.269] CloseHandle (hObject=0x1e0) returned 1 [0282.269] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0282.269] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0250504.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0250504.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34834b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf34834b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7938)) returned 1 [0282.270] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0282.270] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0282.270] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0282.270] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf2fbd2e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf2fbd2e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf34834b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6958, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0250997.WMF", cAlternateFileName="")) returned 1 [0282.270] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0282.270] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0282.270] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0282.270] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0282.270] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0282.270] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0282.271] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0250997.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0250997.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0282.273] GetFileType (hFile=0x1e0) returned 0x1 [0282.273] CloseHandle (hObject=0x1e0) returned 1 [0282.274] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0282.274] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0250997.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0250997.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf2fbd2e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf2fbd2e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf34834b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6958)) returned 1 [0282.274] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0282.274] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0282.274] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0282.274] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xed05f07, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xed05f07, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf34834b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1100c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0251007.WMF", cAlternateFileName="")) returned 1 [0282.274] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0282.274] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0282.274] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0282.274] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0282.275] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0282.275] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0282.275] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0251007.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0251007.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0282.276] GetFileType (hFile=0x1e0) returned 0x1 [0282.276] CloseHandle (hObject=0x1e0) returned 1 [0282.276] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0282.276] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0251007.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0251007.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xed05f07, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xed05f07, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf34834b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1100c)) returned 1 [0282.277] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0282.277] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0282.277] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0282.277] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34834b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf34834b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf34834b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xae2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0252629.WMF", cAlternateFileName="")) returned 1 [0282.277] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0282.277] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0282.277] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0282.277] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0282.278] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0282.278] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0282.278] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0252629.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0252629.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0282.279] GetFileType (hFile=0x1e0) returned 0x1 [0282.280] CloseHandle (hObject=0x1e0) returned 1 [0282.280] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0282.280] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0252629.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0252629.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34834b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf34834b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf34834b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xae2)) returned 1 [0282.281] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0282.281] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0282.281] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0282.281] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf2fbd2e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf2fbd2e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf34834b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf56, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0252669.WMF", cAlternateFileName="")) returned 1 [0282.281] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0282.281] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0282.281] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0282.281] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0282.281] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0282.282] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0282.282] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0252669.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0252669.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0282.283] GetFileType (hFile=0x1e0) returned 0x1 [0282.284] CloseHandle (hObject=0x1e0) returned 1 [0282.284] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0282.284] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0252669.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0252669.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf2fbd2e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf2fbd2e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf34834b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf56)) returned 1 [0282.284] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0282.284] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0282.285] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0282.285] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xed05f07, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xed05f07, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf34834b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0278702.WMF", cAlternateFileName="")) returned 1 [0282.285] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0282.285] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0282.285] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0282.285] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0282.285] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0282.285] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0282.286] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0278702.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0278702.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0282.696] GetFileType (hFile=0x21c) returned 0x1 [0282.697] CloseHandle (hObject=0x21c) returned 1 [0282.697] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0282.697] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0278702.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0278702.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xed05f07, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xed05f07, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf34834b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf6a)) returned 1 [0282.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0282.697] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0282.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0282.697] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xed05f07, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xed05f07, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf2fbd2e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4330, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0279644.WMF", cAlternateFileName="")) returned 1 [0282.697] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0282.698] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0282.698] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0282.698] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0282.698] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0282.698] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0282.864] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0279644.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0279644.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0282.865] GetFileType (hFile=0x198) returned 0x1 [0282.866] CloseHandle (hObject=0x198) returned 1 [0282.866] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0282.866] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0279644.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0279644.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xed05f07, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xed05f07, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf2fbd2e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4330)) returned 1 [0282.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0282.867] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0282.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0282.867] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11dee, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0280468.WMF", cAlternateFileName="")) returned 1 [0282.867] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0282.867] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0282.867] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0282.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0282.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0282.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0282.868] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0280468.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0280468.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0282.868] GetFileType (hFile=0x198) returned 0x1 [0282.869] CloseHandle (hObject=0x198) returned 1 [0282.869] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0282.869] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0280468.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0280468.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11dee)) returned 1 [0282.869] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0282.869] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0282.869] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0282.869] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x94c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0281008.WMF", cAlternateFileName="")) returned 1 [0282.870] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0282.870] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0282.870] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0282.870] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0282.870] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0282.870] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0282.871] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281008.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281008.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0282.914] GetFileType (hFile=0x198) returned 0x1 [0282.915] CloseHandle (hObject=0x198) returned 1 [0282.915] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0282.915] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281008.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281008.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x94c4)) returned 1 [0282.915] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0282.915] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0282.916] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0282.916] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb5b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0281243.WMF", cAlternateFileName="")) returned 1 [0282.916] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0282.916] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0282.916] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0282.916] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0282.916] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0282.916] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0282.917] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281243.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281243.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0282.917] GetFileType (hFile=0x198) returned 0x1 [0282.918] CloseHandle (hObject=0x198) returned 1 [0282.918] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0282.918] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281243.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281243.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb5b4)) returned 1 [0282.918] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0282.918] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0282.918] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0282.918] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0281630.WMF", cAlternateFileName="")) returned 1 [0282.918] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0282.919] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0282.919] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0282.919] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0282.919] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0282.919] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0282.919] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281630.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281630.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0282.920] GetFileType (hFile=0x198) returned 0x1 [0282.920] CloseHandle (hObject=0x198) returned 1 [0282.920] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0282.921] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281630.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281630.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31dc)) returned 1 [0282.921] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0282.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0282.921] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0282.921] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3854, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0281632.WMF", cAlternateFileName="")) returned 1 [0282.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0282.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0282.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0282.921] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0282.921] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0282.922] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0282.922] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281632.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281632.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0282.923] GetFileType (hFile=0x198) returned 0x1 [0282.923] CloseHandle (hObject=0x198) returned 1 [0282.923] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0282.923] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281632.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281632.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3854)) returned 1 [0282.923] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0282.923] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0282.923] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0282.924] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34834b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf34834b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e88, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0281638.WMF", cAlternateFileName="")) returned 1 [0282.924] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0282.924] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0282.924] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0282.924] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0282.924] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0282.924] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0282.924] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281638.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281638.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0282.925] GetFileType (hFile=0x198) returned 0x1 [0282.925] CloseHandle (hObject=0x198) returned 1 [0282.925] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0282.925] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281638.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281638.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34834b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf34834b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e88)) returned 1 [0282.926] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0282.926] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0282.926] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0282.926] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0281640.WMF", cAlternateFileName="")) returned 1 [0282.926] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0282.926] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0282.926] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0282.926] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0282.926] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0282.926] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0282.927] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281640.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281640.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0282.927] GetFileType (hFile=0x198) returned 0x1 [0282.927] CloseHandle (hObject=0x198) returned 1 [0282.927] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0282.928] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281640.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281640.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30f2)) returned 1 [0282.928] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0282.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0282.928] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0282.928] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3c9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0282126.WMF", cAlternateFileName="")) returned 1 [0282.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0282.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0282.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0282.928] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0282.928] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0282.929] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0282.929] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0282126.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0282126.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0282.929] GetFileType (hFile=0x198) returned 0x1 [0282.930] CloseHandle (hObject=0x198) returned 1 [0282.930] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0282.930] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0282126.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0282126.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3c9e)) returned 1 [0282.930] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0282.930] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0282.930] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0282.930] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8166, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0282928.WMF", cAlternateFileName="")) returned 1 [0282.930] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0282.930] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0282.930] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0282.931] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0282.931] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0282.931] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0282.931] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0282928.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0282928.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0282.980] GetFileType (hFile=0x1c0) returned 0x1 [0282.982] CloseHandle (hObject=0x1c0) returned 1 [0282.982] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0282.982] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0282928.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0282928.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8166)) returned 1 [0282.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0282.983] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0282.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0282.983] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34834b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf34834b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3700, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0282932.WMF", cAlternateFileName="")) returned 1 [0282.983] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0282.983] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0282.984] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0282.984] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0282.984] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0282.984] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0282.985] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0282932.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0282932.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0282.987] GetFileType (hFile=0x1c0) returned 0x1 [0282.988] CloseHandle (hObject=0x1c0) returned 1 [0282.988] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0282.988] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0282932.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0282932.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34834b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf34834b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3700)) returned 1 [0282.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0282.989] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0282.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0282.990] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x388a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285462.WMF", cAlternateFileName="")) returned 1 [0282.990] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0283.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0283.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0283.347] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0283.347] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0283.347] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0283.347] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285462.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285462.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0283.347] GetFileType (hFile=0x198) returned 0x1 [0283.348] CloseHandle (hObject=0x198) returned 1 [0283.348] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0283.348] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285462.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285462.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x388a)) returned 1 [0283.348] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0283.348] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0283.348] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0283.348] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2440, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285484.WMF", cAlternateFileName="")) returned 1 [0283.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0283.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0283.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0283.349] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0283.349] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0283.349] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0283.349] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285484.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285484.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0283.638] GetFileType (hFile=0x174) returned 0x1 [0283.639] CloseHandle (hObject=0x174) returned 1 [0283.639] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0283.639] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285484.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285484.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2440)) returned 1 [0283.639] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0283.639] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0283.640] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0283.640] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x795c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285780.WMF", cAlternateFileName="")) returned 1 [0283.640] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0283.640] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0283.640] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0283.640] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0283.640] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0283.640] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0283.641] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285780.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285780.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0283.642] GetFileType (hFile=0x174) returned 0x1 [0283.642] CloseHandle (hObject=0x174) returned 1 [0283.643] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0283.643] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285780.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285780.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x795c)) returned 1 [0283.643] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0283.643] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0283.643] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0283.643] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x523e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285782.WMF", cAlternateFileName="")) returned 1 [0283.643] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0283.644] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0283.644] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0283.644] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0283.644] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0283.644] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0283.645] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285782.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285782.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0283.646] GetFileType (hFile=0x174) returned 0x1 [0283.646] CloseHandle (hObject=0x174) returned 1 [0283.647] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0283.647] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285782.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285782.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x523e)) returned 1 [0283.647] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0283.647] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0283.647] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0283.647] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2eb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285792.WMF", cAlternateFileName="")) returned 1 [0283.648] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0283.648] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0283.648] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0283.648] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0283.648] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0283.648] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0283.649] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285792.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285792.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0283.650] GetFileType (hFile=0x174) returned 0x1 [0283.651] CloseHandle (hObject=0x174) returned 1 [0283.651] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0283.651] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285792.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285792.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2eb4)) returned 1 [0283.651] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0283.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0283.652] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0283.652] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3550, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285796.WMF", cAlternateFileName="")) returned 1 [0283.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0283.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0283.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0283.653] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0283.653] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0283.653] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0283.654] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285796.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285796.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0283.654] GetFileType (hFile=0x174) returned 0x1 [0283.655] CloseHandle (hObject=0x174) returned 1 [0283.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0283.655] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285796.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285796.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3550)) returned 1 [0283.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0283.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0283.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0283.656] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x23f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285808.WMF", cAlternateFileName="")) returned 1 [0283.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0283.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0283.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0283.657] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0283.657] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0283.657] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0283.658] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285808.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285808.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0283.658] GetFileType (hFile=0x174) returned 0x1 [0283.659] CloseHandle (hObject=0x174) returned 1 [0283.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0283.659] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285808.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285808.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x23f4)) returned 1 [0283.659] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0283.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0283.660] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0283.660] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2210, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285820.WMF", cAlternateFileName="")) returned 1 [0283.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0283.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0283.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0283.660] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0283.660] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0283.660] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0283.661] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285820.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285820.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0283.662] GetFileType (hFile=0x174) returned 0x1 [0283.663] CloseHandle (hObject=0x174) returned 1 [0283.663] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0283.663] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285820.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285820.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2210)) returned 1 [0283.663] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0283.663] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0283.664] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0283.664] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285822.WMF", cAlternateFileName="")) returned 1 [0283.664] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0283.664] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0283.664] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0283.664] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0283.664] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0283.664] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0283.665] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285822.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285822.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0283.666] GetFileType (hFile=0x174) returned 0x1 [0283.666] CloseHandle (hObject=0x174) returned 1 [0283.667] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0283.667] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285822.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285822.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21a0)) returned 1 [0283.667] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0283.667] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0283.667] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0283.667] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7898, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0287018.WMF", cAlternateFileName="")) returned 1 [0283.669] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0283.669] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0283.669] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0283.669] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0283.669] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0283.669] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0283.670] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287018.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287018.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0283.670] GetFileType (hFile=0x174) returned 0x1 [0283.671] CloseHandle (hObject=0x174) returned 1 [0283.671] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0283.671] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287018.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287018.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7898)) returned 1 [0283.671] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0283.672] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0283.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0283.672] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x931a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0287019.WMF", cAlternateFileName="")) returned 1 [0283.672] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0283.672] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0283.672] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0283.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0283.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0283.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0283.673] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287019.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287019.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0283.674] GetFileType (hFile=0x174) returned 0x1 [0283.674] CloseHandle (hObject=0x174) returned 1 [0283.675] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0283.675] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287019.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287019.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x931a)) returned 1 [0283.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0283.675] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0283.676] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0283.676] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x80d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0287020.WMF", cAlternateFileName="")) returned 1 [0283.676] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0283.676] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0283.676] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0283.676] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0283.676] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0283.676] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0283.677] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287020.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287020.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0283.678] GetFileType (hFile=0x174) returned 0x1 [0283.678] CloseHandle (hObject=0x174) returned 1 [0283.679] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0283.679] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287020.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287020.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x80d8)) returned 1 [0283.679] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0283.679] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0283.679] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0283.679] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc6d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0287024.WMF", cAlternateFileName="")) returned 1 [0283.679] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0283.680] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0283.680] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0283.680] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0283.680] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0283.680] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0283.681] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287024.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287024.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0284.013] GetFileType (hFile=0x1e0) returned 0x1 [0284.013] CloseHandle (hObject=0x1e0) returned 1 [0284.013] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0284.014] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287024.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287024.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc6d2)) returned 1 [0284.014] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0284.014] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0284.014] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0284.014] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcd10, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0287408.WMF", cAlternateFileName="")) returned 1 [0284.014] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0284.014] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0284.014] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0284.014] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0284.014] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0284.014] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0284.015] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287408.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287408.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0284.016] GetFileType (hFile=0x1e0) returned 0x1 [0284.017] CloseHandle (hObject=0x1e0) returned 1 [0284.017] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0284.017] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287408.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287408.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcd10)) returned 1 [0284.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0284.017] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0284.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0284.017] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa80c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0287415.WMF", cAlternateFileName="")) returned 1 [0284.017] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0284.018] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0284.018] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0284.018] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0284.018] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0284.018] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0284.018] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287415.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287415.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0284.019] GetFileType (hFile=0x1e0) returned 0x1 [0284.020] CloseHandle (hObject=0x1e0) returned 1 [0284.020] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0284.020] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287415.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287415.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa80c)) returned 1 [0284.021] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0284.021] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0284.021] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0284.021] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd6bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0287417.WMF", cAlternateFileName="")) returned 1 [0284.021] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0284.021] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0284.021] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0284.022] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0284.022] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0284.022] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0284.023] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287417.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287417.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0284.023] GetFileType (hFile=0x1e0) returned 0x1 [0284.024] CloseHandle (hObject=0x1e0) returned 1 [0284.024] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0284.024] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287417.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287417.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd6bc)) returned 1 [0284.024] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0284.024] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0284.024] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0284.025] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x89a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0287641.JPG", cAlternateFileName="")) returned 1 [0284.025] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0284.025] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0284.025] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0284.025] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0284.025] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0284.025] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0284.026] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287641.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287641.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0284.026] GetFileType (hFile=0x1e0) returned 0x1 [0284.027] CloseHandle (hObject=0x1e0) returned 1 [0284.027] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0284.027] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287641.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287641.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x89a4)) returned 1 [0284.028] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0284.028] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0284.028] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0284.028] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x42d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0287642.JPG", cAlternateFileName="")) returned 1 [0284.028] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0284.029] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0284.029] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0284.029] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0284.029] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0284.029] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0284.030] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287642.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287642.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0284.031] GetFileType (hFile=0x1e0) returned 0x1 [0284.031] CloseHandle (hObject=0x1e0) returned 1 [0284.032] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0284.032] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287642.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287642.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x42d1)) returned 1 [0284.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0284.032] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0284.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0284.032] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3e91, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0287643.JPG", cAlternateFileName="")) returned 1 [0284.032] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0284.032] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0284.033] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0284.033] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0284.033] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0284.033] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0284.033] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287643.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287643.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0284.034] GetFileType (hFile=0x1e0) returned 0x1 [0284.034] CloseHandle (hObject=0x1e0) returned 1 [0284.035] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0284.035] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287643.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287643.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3e91)) returned 1 [0284.035] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0284.035] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0284.035] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0284.036] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0287644.JPG", cAlternateFileName="")) returned 1 [0284.036] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0284.036] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0284.036] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0284.036] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0284.036] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0284.036] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0284.037] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287644.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287644.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0284.038] GetFileType (hFile=0x1e0) returned 0x1 [0284.038] CloseHandle (hObject=0x1e0) returned 1 [0284.039] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0284.039] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287644.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287644.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43c5)) returned 1 [0284.039] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0284.039] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0284.039] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0284.039] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8d86, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0287645.JPG", cAlternateFileName="")) returned 1 [0284.039] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0284.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0284.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0284.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0284.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0284.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0284.040] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287645.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287645.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0284.042] GetFileType (hFile=0x1e0) returned 0x1 [0284.043] CloseHandle (hObject=0x1e0) returned 1 [0284.043] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0284.044] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287645.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287645.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8d86)) returned 1 [0284.044] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0284.044] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0284.044] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0284.044] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d21, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0289430.JPG", cAlternateFileName="")) returned 1 [0284.044] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0284.044] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0284.044] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0284.045] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0284.045] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0284.045] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0284.045] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0289430.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0289430.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0284.455] GetFileType (hFile=0x198) returned 0x1 [0284.456] CloseHandle (hObject=0x198) returned 1 [0284.456] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0284.456] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0289430.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0289430.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d21)) returned 1 [0284.456] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0284.456] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0284.457] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0284.457] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9e8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0290548.WMF", cAlternateFileName="")) returned 1 [0284.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0284.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0284.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0284.457] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0284.457] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0284.457] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0284.457] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0290548.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0290548.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0284.457] GetFileType (hFile=0x198) returned 0x1 [0284.458] CloseHandle (hObject=0x198) returned 1 [0284.458] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0284.458] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0290548.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0290548.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9e8a)) returned 1 [0284.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0284.458] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0284.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0284.458] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2590, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0291794.WMF", cAlternateFileName="")) returned 1 [0284.458] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0284.459] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0284.459] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0284.459] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0284.459] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0284.459] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0284.459] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0291794.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0291794.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0284.459] GetFileType (hFile=0x198) returned 0x1 [0284.459] CloseHandle (hObject=0x198) returned 1 [0284.460] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0284.460] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0291794.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0291794.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2590)) returned 1 [0284.460] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0284.460] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0284.460] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0284.460] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0292248.WMF", cAlternateFileName="")) returned 1 [0284.460] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0284.460] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0284.460] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0284.460] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0284.460] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0284.460] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0284.461] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292248.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292248.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0284.461] GetFileType (hFile=0x198) returned 0x1 [0284.461] CloseHandle (hObject=0x198) returned 1 [0284.461] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0284.461] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292248.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292248.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20e4)) returned 1 [0284.461] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0284.462] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0284.462] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0284.462] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7aa6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0292270.WMF", cAlternateFileName="")) returned 1 [0284.462] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0284.462] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0284.462] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0284.462] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0284.462] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0284.462] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0284.462] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292270.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292270.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0284.463] GetFileType (hFile=0x198) returned 0x1 [0284.463] CloseHandle (hObject=0x198) returned 1 [0284.463] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0284.463] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292270.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292270.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7aa6)) returned 1 [0284.463] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0284.463] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0284.463] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0284.464] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b64, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0292272.WMF", cAlternateFileName="")) returned 1 [0284.464] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0284.464] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0284.464] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0284.464] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0284.464] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0284.464] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0284.464] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292272.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292272.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0284.465] GetFileType (hFile=0x198) returned 0x1 [0284.465] CloseHandle (hObject=0x198) returned 1 [0284.466] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0284.466] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292272.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292272.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b64)) returned 1 [0284.466] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0284.466] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0284.466] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0284.466] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3658, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0292278.WMF", cAlternateFileName="")) returned 1 [0284.466] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0284.466] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0284.467] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0284.467] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0284.467] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0284.467] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0284.467] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292278.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292278.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0284.468] GetFileType (hFile=0x198) returned 0x1 [0284.468] CloseHandle (hObject=0x198) returned 1 [0284.468] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0284.468] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292278.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292278.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3658)) returned 1 [0284.468] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0284.468] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0284.469] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0284.469] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b56, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0292286.WMF", cAlternateFileName="")) returned 1 [0284.469] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0284.469] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0284.469] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0284.469] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0284.469] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0284.469] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0284.470] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292286.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292286.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0284.470] GetFileType (hFile=0x198) returned 0x1 [0284.470] CloseHandle (hObject=0x198) returned 1 [0284.471] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0284.471] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292286.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292286.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b56)) returned 1 [0284.471] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0284.471] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0284.471] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0284.471] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0293800.WMF", cAlternateFileName="")) returned 1 [0284.471] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0284.471] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0284.471] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0284.472] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0284.472] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0284.472] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0284.472] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0293800.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0293800.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0284.472] GetFileType (hFile=0x198) returned 0x1 [0284.473] CloseHandle (hObject=0x198) returned 1 [0284.473] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0284.473] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0293800.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0293800.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12a6)) returned 1 [0284.473] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0284.474] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0284.474] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0284.474] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17be, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0293832.WMF", cAlternateFileName="")) returned 1 [0284.474] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0284.474] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0284.474] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0284.474] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0284.474] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0284.474] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0284.475] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0293832.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0293832.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0284.842] GetFileType (hFile=0x1c0) returned 0x1 [0284.843] CloseHandle (hObject=0x1c0) returned 1 [0284.843] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0284.843] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0293832.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0293832.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17be)) returned 1 [0284.844] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0284.844] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0284.844] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0284.844] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x37de, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0294989.WMF", cAlternateFileName="")) returned 1 [0284.844] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0284.844] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0284.844] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0284.844] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0284.844] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0284.845] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0284.845] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0294989.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0294989.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0284.845] GetFileType (hFile=0x1c0) returned 0x1 [0284.846] CloseHandle (hObject=0x1c0) returned 1 [0284.846] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0284.846] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0294989.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0294989.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x37de)) returned 1 [0284.846] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0284.846] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0284.847] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0284.847] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6180, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0294991.WMF", cAlternateFileName="")) returned 1 [0284.847] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0284.847] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0284.847] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0284.847] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0284.847] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0284.847] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0284.848] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0294991.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0294991.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0284.848] GetFileType (hFile=0x1c0) returned 0x1 [0284.849] CloseHandle (hObject=0x1c0) returned 1 [0284.849] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0284.849] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0294991.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0294991.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6180)) returned 1 [0284.849] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0284.849] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0284.850] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0284.850] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0295069.WMF", cAlternateFileName="")) returned 1 [0284.850] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0284.850] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0284.850] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0284.850] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0284.850] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0284.850] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0284.851] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0295069.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0295069.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0284.851] GetFileType (hFile=0x1c0) returned 0x1 [0284.852] CloseHandle (hObject=0x1c0) returned 1 [0284.852] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0284.852] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0295069.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0295069.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21b2)) returned 1 [0284.852] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0284.852] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0284.853] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0284.853] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe42c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0296277.WMF", cAlternateFileName="")) returned 1 [0284.853] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0284.853] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0284.853] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0284.853] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0284.853] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0284.853] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0284.854] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0296277.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0296277.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0284.854] GetFileType (hFile=0x1c0) returned 0x1 [0284.855] CloseHandle (hObject=0x1c0) returned 1 [0284.855] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0284.855] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0296277.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0296277.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe42c)) returned 1 [0284.855] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0284.856] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0284.856] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0284.856] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1088e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0296279.WMF", cAlternateFileName="")) returned 1 [0284.856] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0284.856] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0284.856] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0284.856] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0284.856] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0284.856] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0284.857] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0296279.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0296279.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0284.857] GetFileType (hFile=0x1c0) returned 0x1 [0284.858] CloseHandle (hObject=0x1c0) returned 1 [0284.858] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0284.858] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0296279.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0296279.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1088e)) returned 1 [0284.858] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0284.858] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0284.858] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0284.858] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x107ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0296288.WMF", cAlternateFileName="")) returned 1 [0284.858] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0284.859] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0284.859] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0284.859] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0284.859] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0284.859] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0284.860] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0296288.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0296288.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0284.860] GetFileType (hFile=0x1c0) returned 0x1 [0284.860] CloseHandle (hObject=0x1c0) returned 1 [0284.860] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0284.861] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0296288.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0296288.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x107ec)) returned 1 [0284.861] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0284.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0284.861] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0284.861] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x59ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0297229.WMF", cAlternateFileName="")) returned 1 [0284.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0284.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0284.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0284.861] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0284.862] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0284.862] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0284.862] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297229.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297229.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0284.862] GetFileType (hFile=0x1c0) returned 0x1 [0284.863] CloseHandle (hObject=0x1c0) returned 1 [0284.863] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0284.863] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297229.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297229.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x59ce)) returned 1 [0284.863] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0284.863] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0284.863] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0284.864] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d24, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0297269.WMF", cAlternateFileName="")) returned 1 [0284.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0284.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0284.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0284.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0284.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0284.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0284.864] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297269.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297269.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0285.194] GetFileType (hFile=0x21c) returned 0x1 [0285.195] CloseHandle (hObject=0x21c) returned 1 [0285.195] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0285.195] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297269.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297269.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d24)) returned 1 [0285.195] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0285.195] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0285.195] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0285.195] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4236, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0297725.WMF", cAlternateFileName="")) returned 1 [0285.195] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0285.195] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0285.196] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0285.196] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0285.196] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0285.196] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0285.196] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297725.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297725.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0285.196] GetFileType (hFile=0x21c) returned 0x1 [0285.197] CloseHandle (hObject=0x21c) returned 1 [0285.197] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0285.197] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297725.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297725.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4236)) returned 1 [0285.197] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0285.197] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0285.198] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0285.198] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf406dcf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3c9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0297727.WMF", cAlternateFileName="")) returned 1 [0285.198] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0285.198] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0285.198] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0285.198] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0285.199] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0285.199] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0285.199] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297727.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297727.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0285.200] GetFileType (hFile=0x21c) returned 0x1 [0285.200] CloseHandle (hObject=0x21c) returned 1 [0285.200] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0285.200] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297727.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297727.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf406dcf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3c9c)) returned 1 [0285.200] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0285.200] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0285.200] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0285.201] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf406dcf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x493e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0297757.WMF", cAlternateFileName="")) returned 1 [0285.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0285.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0285.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0285.201] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0285.201] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0285.201] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0285.201] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297757.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297757.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0285.202] GetFileType (hFile=0x21c) returned 0x1 [0285.202] CloseHandle (hObject=0x21c) returned 1 [0285.202] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0285.202] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297757.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297757.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf406dcf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x493e)) returned 1 [0285.203] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0285.203] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0285.203] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0285.203] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4960, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0297759.WMF", cAlternateFileName="")) returned 1 [0285.203] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0285.203] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0285.203] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0285.203] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0285.203] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0285.203] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0285.204] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297759.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297759.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0285.204] GetFileType (hFile=0x21c) returned 0x1 [0285.204] CloseHandle (hObject=0x21c) returned 1 [0285.205] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0285.205] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297759.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297759.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4960)) returned 1 [0285.205] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0285.205] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0285.205] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0285.205] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4584, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0300862.WMF", cAlternateFileName="")) returned 1 [0285.205] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0285.205] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0285.205] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0285.205] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0285.205] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0285.206] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0285.206] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0300862.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0300862.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0285.206] GetFileType (hFile=0x21c) returned 0x1 [0285.206] CloseHandle (hObject=0x21c) returned 1 [0285.207] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0285.207] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0300862.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0300862.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4584)) returned 1 [0285.207] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0285.207] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0285.207] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0285.207] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0301044.WMF", cAlternateFileName="")) returned 1 [0285.207] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0285.207] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0285.207] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0285.207] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0285.208] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0285.208] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0285.208] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301044.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0301044.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0285.208] GetFileType (hFile=0x21c) returned 0x1 [0285.208] CloseHandle (hObject=0x21c) returned 1 [0285.209] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0285.209] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301044.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0301044.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b0e)) returned 1 [0285.209] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0285.209] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0285.209] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0285.209] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ae8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0301052.WMF", cAlternateFileName="")) returned 1 [0285.209] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0285.209] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0285.209] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0285.209] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0285.209] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0285.209] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0285.210] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301052.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0301052.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0285.211] GetFileType (hFile=0x21c) returned 0x1 [0285.211] CloseHandle (hObject=0x21c) returned 1 [0285.211] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0285.212] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301052.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0301052.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ae8)) returned 1 [0285.212] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0285.212] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0285.212] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0285.212] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4a5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0301418.WMF", cAlternateFileName="")) returned 1 [0285.212] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0285.212] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0285.212] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0285.212] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0285.212] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0285.212] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0285.213] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301418.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0301418.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0285.213] GetFileType (hFile=0x21c) returned 0x1 [0285.213] CloseHandle (hObject=0x21c) returned 1 [0285.214] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0285.214] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301418.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0301418.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4a5a)) returned 1 [0285.214] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0285.214] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0285.214] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0285.215] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4dfa, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0301432.WMF", cAlternateFileName="")) returned 1 [0285.215] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0285.215] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0285.215] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0285.215] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0285.215] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0285.215] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0285.215] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301432.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0301432.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0285.215] GetFileType (hFile=0x21c) returned 0x1 [0285.216] CloseHandle (hObject=0x21c) returned 1 [0285.216] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0285.216] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301432.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0301432.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4dfa)) returned 1 [0285.216] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0285.216] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0285.216] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0285.216] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe20, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0304371.WMF", cAlternateFileName="")) returned 1 [0285.216] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0285.216] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0285.216] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0285.217] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0285.217] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0285.217] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0285.217] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304371.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304371.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0285.217] GetFileType (hFile=0x21c) returned 0x1 [0285.218] CloseHandle (hObject=0x21c) returned 1 [0285.218] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0285.218] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304371.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304371.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe20)) returned 1 [0285.218] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0285.218] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0285.218] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0285.218] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x103e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0304405.WMF", cAlternateFileName="")) returned 1 [0285.218] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0285.218] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0285.218] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0285.218] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0285.218] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0285.219] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0285.219] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304405.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304405.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0285.219] GetFileType (hFile=0x21c) returned 0x1 [0285.219] CloseHandle (hObject=0x21c) returned 1 [0285.220] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0285.220] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304405.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304405.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x103e)) returned 1 [0285.220] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0285.220] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0285.220] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0285.220] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4a0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0304853.WMF", cAlternateFileName="")) returned 1 [0285.220] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0285.220] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0285.220] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0285.221] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0285.221] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0285.221] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0285.221] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304853.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304853.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0285.667] GetFileType (hFile=0x1ac) returned 0x1 [0285.668] CloseHandle (hObject=0x1ac) returned 1 [0285.668] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0285.668] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304853.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304853.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4a0e)) returned 1 [0285.668] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0285.668] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0285.668] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0285.668] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2cf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0304861.WMF", cAlternateFileName="")) returned 1 [0285.668] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0285.668] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0285.668] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0285.669] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0285.669] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0285.669] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0285.669] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304861.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304861.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0285.669] GetFileType (hFile=0x1ac) returned 0x1 [0285.669] CloseHandle (hObject=0x1ac) returned 1 [0285.670] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0285.670] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304861.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304861.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2cf8)) returned 1 [0285.670] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0285.670] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0285.670] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0285.670] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0304875.WMF", cAlternateFileName="")) returned 1 [0285.670] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0285.670] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0285.691] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0285.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0285.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0285.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0285.691] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304875.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304875.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0285.692] GetFileType (hFile=0x1ac) returned 0x1 [0285.708] CloseHandle (hObject=0x1ac) returned 1 [0285.708] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0285.708] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304875.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304875.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f8e)) returned 1 [0285.708] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0285.708] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0285.708] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0285.708] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x29c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0309480.JPG", cAlternateFileName="")) returned 1 [0285.708] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0285.708] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0285.708] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0285.709] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0285.709] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0285.709] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0285.709] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309480.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309480.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0285.709] GetFileType (hFile=0x1ac) returned 0x1 [0285.709] CloseHandle (hObject=0x1ac) returned 1 [0285.710] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0285.710] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309480.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309480.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x29c4)) returned 1 [0285.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0285.710] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0285.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0285.710] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf406dcf, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf406dcf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x544c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0309567.JPG", cAlternateFileName="")) returned 1 [0285.710] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0285.710] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0285.710] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0285.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0285.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0285.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0285.711] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309567.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309567.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0285.711] GetFileType (hFile=0x1ac) returned 0x1 [0285.711] CloseHandle (hObject=0x1ac) returned 1 [0285.711] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0285.711] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309567.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309567.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf406dcf, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf406dcf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x544c)) returned 1 [0285.712] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0285.712] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0285.712] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0285.712] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf406dcf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9a8b, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0309585.JPG", cAlternateFileName="")) returned 1 [0285.712] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0285.712] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0285.712] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0285.712] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0285.712] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0285.712] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0285.712] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309585.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309585.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0285.713] GetFileType (hFile=0x1ac) returned 0x1 [0285.713] CloseHandle (hObject=0x1ac) returned 1 [0285.713] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0285.713] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309585.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309585.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf406dcf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9a8b)) returned 1 [0285.713] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0285.713] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0285.713] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0285.714] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf406dcf, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf406dcf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x81f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0309598.JPG", cAlternateFileName="")) returned 1 [0285.714] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0285.714] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0285.714] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0285.714] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0285.714] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0285.715] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0285.715] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309598.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309598.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0285.715] GetFileType (hFile=0x1ac) returned 0x1 [0285.715] CloseHandle (hObject=0x1ac) returned 1 [0285.715] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0285.715] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309598.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309598.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf406dcf, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf406dcf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x81f0)) returned 1 [0285.716] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0285.716] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0285.716] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0285.716] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf406dcf, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf406dcf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaabb, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0309664.JPG", cAlternateFileName="")) returned 1 [0285.716] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0285.716] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0285.716] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0285.716] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0285.716] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0285.716] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0285.716] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309664.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309664.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0285.716] GetFileType (hFile=0x1ac) returned 0x1 [0285.717] CloseHandle (hObject=0x1ac) returned 1 [0285.717] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0285.717] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309664.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309664.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf406dcf, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf406dcf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaabb)) returned 1 [0285.717] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0285.717] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0285.717] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0285.717] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf406dcf, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf406dcf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ada, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0309705.JPG", cAlternateFileName="")) returned 1 [0285.717] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0285.717] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0285.717] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0285.717] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0285.718] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0285.718] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0285.718] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309705.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309705.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0285.718] GetFileType (hFile=0x1ac) returned 0x1 [0285.718] CloseHandle (hObject=0x1ac) returned 1 [0285.718] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0285.718] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309705.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309705.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf406dcf, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf406dcf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ada)) returned 1 [0285.719] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0285.719] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0285.719] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0285.719] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf406dcf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0309902.WMF", cAlternateFileName="")) returned 1 [0285.719] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0285.719] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0285.719] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0285.719] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0285.719] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0285.719] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0285.719] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309902.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309902.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0285.719] GetFileType (hFile=0x1ac) returned 0x1 [0285.720] CloseHandle (hObject=0x1ac) returned 1 [0285.720] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0285.720] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309902.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309902.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf406dcf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a00)) returned 1 [0285.720] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0285.720] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0285.720] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0285.720] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0309904.WMF", cAlternateFileName="")) returned 1 [0285.720] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0285.720] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0285.720] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0285.720] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0285.720] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0285.721] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0285.721] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309904.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309904.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0285.721] GetFileType (hFile=0x1ac) returned 0x1 [0285.721] CloseHandle (hObject=0x1ac) returned 1 [0285.721] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0285.721] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309904.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309904.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20e4)) returned 1 [0285.722] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0285.722] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0285.722] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0285.722] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b38, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0309920.WMF", cAlternateFileName="")) returned 1 [0285.722] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0285.722] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0285.722] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0285.722] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0285.722] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0285.722] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0285.722] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309920.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309920.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0285.722] GetFileType (hFile=0x1ac) returned 0x1 [0285.723] CloseHandle (hObject=0x1ac) returned 1 [0285.723] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0285.723] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309920.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309920.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b38)) returned 1 [0285.723] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0285.723] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0285.723] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0285.723] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x911a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0313896.JPG", cAlternateFileName="")) returned 1 [0285.723] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0285.723] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0285.723] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0285.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0285.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0285.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0285.724] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313896.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313896.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0285.724] GetFileType (hFile=0x1ac) returned 0x1 [0285.725] CloseHandle (hObject=0x1ac) returned 1 [0285.725] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0285.725] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313896.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313896.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x911a)) returned 1 [0285.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0285.725] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0285.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0285.725] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa75a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0313965.JPG", cAlternateFileName="")) returned 1 [0285.725] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0285.725] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0285.725] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0285.726] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0285.726] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0285.726] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0285.726] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313965.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313965.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0285.726] GetFileType (hFile=0x1ac) returned 0x1 [0285.726] CloseHandle (hObject=0x1ac) returned 1 [0285.727] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0285.727] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313965.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313965.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa75a)) returned 1 [0285.727] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0285.727] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0285.727] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0285.727] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x81ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0313970.JPG", cAlternateFileName="")) returned 1 [0285.727] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0285.727] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0285.727] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0285.727] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0285.727] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0285.727] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0285.728] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313970.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313970.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0285.728] GetFileType (hFile=0x1ac) returned 0x1 [0285.728] CloseHandle (hObject=0x1ac) returned 1 [0285.728] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0285.728] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313970.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313970.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x81ab)) returned 1 [0285.729] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0285.729] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0285.729] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0285.729] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb9d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0313974.JPG", cAlternateFileName="")) returned 1 [0285.729] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0285.729] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0285.729] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0285.729] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0285.729] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0285.730] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0285.730] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313974.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313974.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0285.730] GetFileType (hFile=0x1ac) returned 0x1 [0285.731] CloseHandle (hObject=0x1ac) returned 1 [0285.731] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0285.731] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313974.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313974.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb9d1)) returned 1 [0285.731] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0285.731] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0285.731] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0285.731] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x40f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0314068.JPG", cAlternateFileName="")) returned 1 [0285.731] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0285.731] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0285.731] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0285.732] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0285.732] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0285.732] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0285.732] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0314068.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0314068.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0285.732] GetFileType (hFile=0x1ac) returned 0x1 [0285.732] CloseHandle (hObject=0x1ac) returned 1 [0285.732] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0285.733] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0314068.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0314068.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x40f2)) returned 1 [0285.733] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0285.733] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0285.733] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0285.733] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b02, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0315580.JPG", cAlternateFileName="")) returned 1 [0285.733] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0285.733] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0285.733] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0285.733] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0285.733] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0285.733] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0285.733] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0315580.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0315580.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0285.734] GetFileType (hFile=0x1ac) returned 0x1 [0285.734] CloseHandle (hObject=0x1ac) returned 1 [0285.734] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0285.734] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0315580.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0315580.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b02)) returned 1 [0285.734] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0285.734] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0285.735] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0285.735] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x423a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0315612.JPG", cAlternateFileName="")) returned 1 [0285.735] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0285.735] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0285.735] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0285.735] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0285.735] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0285.735] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0285.735] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0315612.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0315612.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0285.735] GetFileType (hFile=0x1ac) returned 0x1 [0285.736] CloseHandle (hObject=0x1ac) returned 1 [0285.736] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0285.736] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0315612.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0315612.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x423a)) returned 1 [0285.736] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0285.736] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0285.736] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0285.736] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4180, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0318448.WMF", cAlternateFileName="")) returned 1 [0285.736] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0285.736] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0285.736] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0285.736] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0285.737] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0285.737] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0285.737] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0318448.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0318448.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0285.737] GetFileType (hFile=0x1ac) returned 0x1 [0285.737] CloseHandle (hObject=0x1ac) returned 1 [0285.737] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0285.737] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0318448.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0318448.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4180)) returned 1 [0285.738] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0285.738] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0285.738] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0285.738] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2dfa, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0318804.WMF", cAlternateFileName="")) returned 1 [0285.738] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0285.738] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0285.738] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0285.738] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0285.738] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0285.738] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0285.738] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0318804.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0318804.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0285.987] GetFileType (hFile=0x174) returned 0x1 [0285.988] CloseHandle (hObject=0x174) returned 1 [0285.988] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0285.988] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0318804.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0318804.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2dfa)) returned 1 [0285.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0285.988] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0285.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0285.988] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x28be, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0318810.WMF", cAlternateFileName="")) returned 1 [0285.988] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0285.989] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212938 [0285.989] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0285.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212938 | out: hHeap=0x1f0000) returned 1 [0285.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0285.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0285.989] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0318810.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0318810.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0285.991] GetFileType (hFile=0x174) returned 0x1 [0285.991] CloseHandle (hObject=0x174) returned 1 [0285.991] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0285.991] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0318810.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0318810.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x28be)) returned 1 [0285.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0285.991] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0285.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0285.992] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x24d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0321179.JPG", cAlternateFileName="")) returned 1 [0285.992] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0285.992] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212030 [0285.992] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0285.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212030 | out: hHeap=0x1f0000) returned 1 [0285.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0285.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0285.992] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0321179.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0321179.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0285.993] GetFileType (hFile=0x174) returned 0x1 [0285.993] CloseHandle (hObject=0x174) returned 1 [0285.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0285.993] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0321179.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0321179.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x24d7)) returned 1 [0285.994] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0285.994] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0285.994] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0285.994] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ff8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0324694.WMF", cAlternateFileName="")) returned 1 [0285.994] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0285.994] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212360 [0285.994] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0285.994] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212360 | out: hHeap=0x1f0000) returned 1 [0285.994] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0285.994] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0285.994] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0324694.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0324694.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0285.995] GetFileType (hFile=0x174) returned 0x1 [0285.996] CloseHandle (hObject=0x174) returned 1 [0285.996] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0285.996] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0324694.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0324694.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ff8)) returned 1 [0285.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0285.996] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0285.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0285.996] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0324704.WMF", cAlternateFileName="")) returned 1 [0285.996] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0285.996] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211948 [0285.996] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0285.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211948 | out: hHeap=0x1f0000) returned 1 [0285.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0285.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0285.997] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0324704.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0324704.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0285.998] GetFileType (hFile=0x174) returned 0x1 [0285.998] CloseHandle (hObject=0x174) returned 1 [0285.998] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0285.998] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0324704.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0324704.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e7e)) returned 1 [0285.998] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0285.998] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0285.998] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0285.998] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3260, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0337280.JPG", cAlternateFileName="")) returned 1 [0285.998] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0285.998] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0285.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0285.999] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0285.999] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0285.999] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0285.999] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0337280.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0337280.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0285.999] GetFileType (hFile=0x174) returned 0x1 [0286.000] CloseHandle (hObject=0x174) returned 1 [0286.000] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0286.000] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0337280.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0337280.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3260)) returned 1 [0286.000] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0286.000] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0286.000] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0286.000] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341328.JPG", cAlternateFileName="")) returned 1 [0286.000] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0286.000] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2123e8 [0286.000] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0286.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2123e8 | out: hHeap=0x1f0000) returned 1 [0286.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0286.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0286.001] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341328.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341328.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0286.003] GetFileType (hFile=0x174) returned 0x1 [0286.003] CloseHandle (hObject=0x174) returned 1 [0286.003] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0286.003] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341328.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341328.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27d4)) returned 1 [0286.003] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0286.003] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0286.004] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0286.004] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2cdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341344.JPG", cAlternateFileName="")) returned 1 [0286.005] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0286.005] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211fa8 [0286.005] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0286.005] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211fa8 | out: hHeap=0x1f0000) returned 1 [0286.005] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0286.005] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0286.005] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341344.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341344.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0286.006] GetFileType (hFile=0x174) returned 0x1 [0286.006] CloseHandle (hObject=0x174) returned 1 [0286.006] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0286.006] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341344.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341344.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2cdd)) returned 1 [0286.007] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0286.007] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0286.007] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0286.007] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c6d, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341439.JPG", cAlternateFileName="")) returned 1 [0286.007] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0286.007] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2120b8 [0286.007] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0286.007] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2120b8 | out: hHeap=0x1f0000) returned 1 [0286.007] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0286.007] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0286.007] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341439.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341439.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0286.008] GetFileType (hFile=0x174) returned 0x1 [0286.008] CloseHandle (hObject=0x174) returned 1 [0286.008] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0286.008] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341439.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341439.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c6d)) returned 1 [0286.008] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0286.008] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0286.009] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0286.009] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341447.JPG", cAlternateFileName="")) returned 1 [0286.009] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0286.009] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211f20 [0286.009] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0286.009] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211f20 | out: hHeap=0x1f0000) returned 1 [0286.009] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0286.009] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0286.009] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341447.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341447.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0286.010] GetFileType (hFile=0x174) returned 0x1 [0286.010] CloseHandle (hObject=0x174) returned 1 [0286.010] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0286.010] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341447.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341447.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ad8)) returned 1 [0286.011] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0286.011] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0286.011] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0286.011] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x52c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341448.JPG", cAlternateFileName="")) returned 1 [0286.011] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0286.011] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2128b0 [0286.011] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0286.011] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2128b0 | out: hHeap=0x1f0000) returned 1 [0286.011] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0286.011] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0286.012] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341448.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341448.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0286.012] GetFileType (hFile=0x174) returned 0x1 [0286.012] CloseHandle (hObject=0x174) returned 1 [0286.013] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0286.013] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341448.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341448.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x52c3)) returned 1 [0286.013] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0286.013] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0286.013] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0286.013] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7457, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341455.JPG", cAlternateFileName="")) returned 1 [0286.013] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0286.013] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2123e8 [0286.013] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0286.013] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2123e8 | out: hHeap=0x1f0000) returned 1 [0286.013] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0286.013] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0286.014] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341455.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341455.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0286.015] GetFileType (hFile=0x1e0) returned 0x1 [0286.015] CloseHandle (hObject=0x1e0) returned 1 [0286.016] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0286.016] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341455.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341455.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7457)) returned 1 [0286.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0286.016] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0286.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0286.016] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa9e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341475.JPG", cAlternateFileName="")) returned 1 [0286.016] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0286.016] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212828 [0286.016] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0286.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212828 | out: hHeap=0x1f0000) returned 1 [0286.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0286.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0286.017] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341475.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341475.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0286.017] GetFileType (hFile=0x1e0) returned 0x1 [0286.017] CloseHandle (hObject=0x1e0) returned 1 [0286.018] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0286.018] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341475.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341475.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa9e2)) returned 1 [0286.018] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0286.018] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0286.018] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0286.018] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ee3, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341499.JPG", cAlternateFileName="")) returned 1 [0286.018] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238050 [0286.018] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2129c0 [0286.018] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0286.018] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2129c0 | out: hHeap=0x1f0000) returned 1 [0286.018] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0286.018] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238050 | out: hHeap=0x1f0000) returned 1 [0286.019] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341499.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341499.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0286.019] GetFileType (hFile=0x1e0) returned 0x1 [0286.019] CloseHandle (hObject=0x1e0) returned 1 [0286.019] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0286.019] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341499.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341499.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ee3)) returned 1 [0286.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0286.020] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0286.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0286.020] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341534.JPG", cAlternateFileName="")) returned 1 [0286.020] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0286.020] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212470 [0286.020] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0286.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212470 | out: hHeap=0x1f0000) returned 1 [0286.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0286.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0286.021] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341534.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341534.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0286.021] GetFileType (hFile=0x1e0) returned 0x1 [0286.022] CloseHandle (hObject=0x1e0) returned 1 [0286.022] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0286.022] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341534.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341534.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f8a)) returned 1 [0286.022] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0286.022] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0286.022] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0286.022] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5a56, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341551.JPG", cAlternateFileName="")) returned 1 [0286.022] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0286.023] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212828 [0286.023] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0286.023] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212828 | out: hHeap=0x1f0000) returned 1 [0286.023] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0286.023] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0286.023] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341551.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341551.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0286.024] GetFileType (hFile=0x1e0) returned 0x1 [0286.024] CloseHandle (hObject=0x1e0) returned 1 [0286.247] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0286.247] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341551.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341551.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5a56)) returned 1 [0286.247] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0286.247] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0286.248] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0286.248] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6f43, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341554.JPG", cAlternateFileName="")) returned 1 [0286.248] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0286.248] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211e98 [0286.248] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0286.248] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e98 | out: hHeap=0x1f0000) returned 1 [0286.248] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0286.248] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0286.355] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341554.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341554.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0286.356] GetFileType (hFile=0x1ac) returned 0x1 [0286.356] CloseHandle (hObject=0x1ac) returned 1 [0286.356] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0286.356] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341554.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341554.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6f43)) returned 1 [0286.356] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0286.356] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0286.356] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0286.356] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341557.JPG", cAlternateFileName="")) returned 1 [0286.357] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0286.357] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212140 [0286.357] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0286.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212140 | out: hHeap=0x1f0000) returned 1 [0286.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0286.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0286.357] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341557.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341557.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0286.358] GetFileType (hFile=0x1ac) returned 0x1 [0286.358] CloseHandle (hObject=0x1ac) returned 1 [0286.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0286.358] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341557.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341557.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6aa8)) returned 1 [0286.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0286.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0286.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0286.359] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6873, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341559.JPG", cAlternateFileName="")) returned 1 [0286.359] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0286.359] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212718 [0286.359] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0286.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212718 | out: hHeap=0x1f0000) returned 1 [0286.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0286.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0286.360] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341559.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341559.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0286.360] GetFileType (hFile=0x1ac) returned 0x1 [0286.360] CloseHandle (hObject=0x1ac) returned 1 [0286.361] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0286.361] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341559.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341559.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6873)) returned 1 [0286.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0286.361] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0286.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0286.361] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa497, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341561.JPG", cAlternateFileName="")) returned 1 [0286.361] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0286.361] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2128b0 [0286.362] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0286.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2128b0 | out: hHeap=0x1f0000) returned 1 [0286.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0286.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0286.362] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341561.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341561.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0286.363] GetFileType (hFile=0x1ac) returned 0x1 [0286.363] CloseHandle (hObject=0x1ac) returned 1 [0286.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0286.363] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341561.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341561.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa497)) returned 1 [0286.364] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0286.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0286.364] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0286.364] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e7b, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341634.JPG", cAlternateFileName="")) returned 1 [0286.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0286.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211bf0 [0286.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0286.364] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211bf0 | out: hHeap=0x1f0000) returned 1 [0286.364] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0286.364] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0286.365] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341634.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341634.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0286.366] GetFileType (hFile=0x1ac) returned 0x1 [0286.366] CloseHandle (hObject=0x1ac) returned 1 [0286.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0286.366] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341634.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341634.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e7b)) returned 1 [0286.367] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0286.367] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0286.367] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0286.367] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3615, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341636.JPG", cAlternateFileName="")) returned 1 [0286.367] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0286.367] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211e10 [0286.367] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0286.367] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e10 | out: hHeap=0x1f0000) returned 1 [0286.367] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0286.367] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0286.368] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341636.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341636.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0286.368] GetFileType (hFile=0x1ac) returned 0x1 [0286.368] CloseHandle (hObject=0x1ac) returned 1 [0286.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0286.369] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341636.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341636.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3615)) returned 1 [0286.369] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0286.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0286.369] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0286.369] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2026, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341645.JPG", cAlternateFileName="")) returned 1 [0286.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0286.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2127a0 [0286.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0286.369] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2127a0 | out: hHeap=0x1f0000) returned 1 [0286.369] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0286.370] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0286.370] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341645.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341645.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0286.821] GetFileType (hFile=0x1c0) returned 0x1 [0286.821] CloseHandle (hObject=0x1c0) returned 1 [0286.822] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0286.822] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341645.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341645.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2026)) returned 1 [0286.822] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0286.822] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0286.822] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0286.822] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3df7, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341653.JPG", cAlternateFileName="")) returned 1 [0286.823] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0286.823] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212580 [0286.823] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0286.823] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212580 | out: hHeap=0x1f0000) returned 1 [0286.823] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0286.824] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0286.824] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341653.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341653.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0286.824] GetFileType (hFile=0x1c0) returned 0x1 [0286.825] CloseHandle (hObject=0x1c0) returned 1 [0286.825] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0286.825] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341653.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341653.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3df7)) returned 1 [0286.826] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0286.826] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0286.826] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0286.826] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341654.JPG", cAlternateFileName="")) returned 1 [0286.826] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0286.826] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211e10 [0286.826] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0286.826] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e10 | out: hHeap=0x1f0000) returned 1 [0286.826] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0286.827] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0286.827] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341654.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341654.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0286.827] GetFileType (hFile=0x1c0) returned 0x1 [0286.828] CloseHandle (hObject=0x1c0) returned 1 [0286.828] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0286.828] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341654.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341654.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d7f)) returned 1 [0286.828] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0286.828] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0286.828] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0286.828] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ec6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341738.JPG", cAlternateFileName="")) returned 1 [0286.828] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0286.829] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d88 [0286.829] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0286.829] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d88 | out: hHeap=0x1f0000) returned 1 [0286.829] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0286.829] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0286.829] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341738.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341738.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0286.829] GetFileType (hFile=0x1c0) returned 0x1 [0286.830] CloseHandle (hObject=0x1c0) returned 1 [0286.830] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0286.830] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341738.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341738.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ec6)) returned 1 [0286.830] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0286.830] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0286.830] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0286.830] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x49ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341742.JPG", cAlternateFileName="")) returned 1 [0286.830] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0286.830] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211a58 [0286.830] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0286.830] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211a58 | out: hHeap=0x1f0000) returned 1 [0286.831] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0286.831] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0286.831] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341742.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341742.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0286.831] GetFileType (hFile=0x1c0) returned 0x1 [0286.832] CloseHandle (hObject=0x1c0) returned 1 [0286.832] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0286.832] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341742.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341742.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x49ba)) returned 1 [0286.832] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0286.832] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0286.832] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0286.833] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10bdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382836.JPG", cAlternateFileName="")) returned 1 [0286.833] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0286.833] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211f20 [0286.833] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0286.833] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211f20 | out: hHeap=0x1f0000) returned 1 [0286.833] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0286.833] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0286.834] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382836.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382836.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0286.834] GetFileType (hFile=0x1c0) returned 0x1 [0286.834] CloseHandle (hObject=0x1c0) returned 1 [0286.835] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0286.835] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382836.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382836.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10bdc)) returned 1 [0286.835] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0286.835] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0286.835] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0286.835] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ce5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382925.JPG", cAlternateFileName="")) returned 1 [0286.836] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0286.836] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212608 [0286.836] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0286.836] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212608 | out: hHeap=0x1f0000) returned 1 [0286.836] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0286.836] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0286.837] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382925.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382925.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0286.837] GetFileType (hFile=0x1c0) returned 0x1 [0286.837] CloseHandle (hObject=0x1c0) returned 1 [0286.838] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0286.838] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382925.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382925.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ce5a)) returned 1 [0286.838] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0286.838] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0286.839] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0286.839] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1672c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382926.JPG", cAlternateFileName="")) returned 1 [0286.839] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0286.839] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2124f8 [0286.840] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0286.840] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2124f8 | out: hHeap=0x1f0000) returned 1 [0286.840] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0286.840] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0286.840] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382926.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382926.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0286.841] GetFileType (hFile=0x1c0) returned 0x1 [0286.841] CloseHandle (hObject=0x1c0) returned 1 [0286.842] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0286.842] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382926.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382926.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1672c)) returned 1 [0286.842] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0286.842] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0286.842] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0286.842] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf49f727, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf49f727, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f86c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382927.JPG", cAlternateFileName="")) returned 1 [0286.842] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0286.842] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211ae0 [0286.843] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0286.843] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211ae0 | out: hHeap=0x1f0000) returned 1 [0286.843] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0286.843] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0286.843] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382927.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382927.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0286.844] GetFileType (hFile=0x1c0) returned 0x1 [0286.844] CloseHandle (hObject=0x1c0) returned 1 [0286.845] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0286.845] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382927.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382927.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf49f727, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf49f727, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f86c)) returned 1 [0286.845] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0286.845] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0286.845] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0286.845] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b83a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382930.JPG", cAlternateFileName="")) returned 1 [0286.845] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0286.845] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211fa8 [0286.846] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0286.846] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211fa8 | out: hHeap=0x1f0000) returned 1 [0286.846] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0286.846] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0286.846] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382930.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382930.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0286.847] GetFileType (hFile=0x1c0) returned 0x1 [0286.847] CloseHandle (hObject=0x1c0) returned 1 [0286.848] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0286.848] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382930.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382930.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b83a)) returned 1 [0286.848] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0286.848] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0286.848] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0286.848] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1df43, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382931.JPG", cAlternateFileName="")) returned 1 [0286.848] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0286.848] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d00 [0286.849] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0286.849] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d00 | out: hHeap=0x1f0000) returned 1 [0286.849] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0286.849] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0286.849] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382931.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382931.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0286.850] GetFileType (hFile=0x1c0) returned 0x1 [0286.850] CloseHandle (hObject=0x1c0) returned 1 [0286.850] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0286.851] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382931.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382931.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1df43)) returned 1 [0286.851] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0286.851] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0286.851] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0286.851] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x184d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382938.JPG", cAlternateFileName="")) returned 1 [0286.851] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0286.851] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2123e8 [0286.851] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0286.851] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2123e8 | out: hHeap=0x1f0000) returned 1 [0286.852] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0286.852] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0286.852] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382938.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382938.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0287.137] GetFileType (hFile=0x21c) returned 0x1 [0287.137] CloseHandle (hObject=0x21c) returned 1 [0287.138] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0287.138] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382938.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382938.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x184d3)) returned 1 [0287.138] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0287.138] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0287.139] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0287.139] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1aba5, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382939.JPG", cAlternateFileName="")) returned 1 [0287.139] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0287.139] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212828 [0287.139] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0287.139] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212828 | out: hHeap=0x1f0000) returned 1 [0287.140] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0287.140] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0287.141] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382939.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382939.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0287.143] GetFileType (hFile=0x21c) returned 0x1 [0287.143] CloseHandle (hObject=0x21c) returned 1 [0287.144] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0287.144] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382939.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382939.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1aba5)) returned 1 [0287.144] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0287.144] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0287.144] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0287.144] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1653a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382942.JPG", cAlternateFileName="")) returned 1 [0287.144] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0287.145] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211e10 [0287.145] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0287.145] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e10 | out: hHeap=0x1f0000) returned 1 [0287.145] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0287.145] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0287.146] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382942.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382942.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0287.147] GetFileType (hFile=0x21c) returned 0x1 [0287.148] CloseHandle (hObject=0x21c) returned 1 [0287.148] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0287.149] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382942.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382942.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1653a)) returned 1 [0287.149] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0287.149] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0287.149] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0287.149] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf49f727, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf49f727, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13e1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382944.JPG", cAlternateFileName="")) returned 1 [0287.149] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0287.149] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212140 [0287.149] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0287.150] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212140 | out: hHeap=0x1f0000) returned 1 [0287.150] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0287.150] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0287.150] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382944.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382944.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0287.151] GetFileType (hFile=0x21c) returned 0x1 [0287.152] CloseHandle (hObject=0x21c) returned 1 [0287.152] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0287.152] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382944.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382944.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf49f727, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf49f727, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13e1d)) returned 1 [0287.153] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0287.153] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0287.153] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0287.153] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1531c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382947.JPG", cAlternateFileName="")) returned 1 [0287.153] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0287.153] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211948 [0287.153] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0287.154] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211948 | out: hHeap=0x1f0000) returned 1 [0287.154] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0287.154] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0287.154] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382947.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382947.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0287.155] GetFileType (hFile=0x21c) returned 0x1 [0287.156] CloseHandle (hObject=0x21c) returned 1 [0287.156] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0287.156] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382947.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382947.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1531c)) returned 1 [0287.156] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0287.156] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0287.156] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0287.157] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ad37, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382948.JPG", cAlternateFileName="")) returned 1 [0287.157] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0287.157] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2119d0 [0287.157] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0287.157] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2119d0 | out: hHeap=0x1f0000) returned 1 [0287.157] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0287.157] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0287.158] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382948.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382948.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0287.159] GetFileType (hFile=0x21c) returned 0x1 [0287.159] CloseHandle (hObject=0x21c) returned 1 [0287.160] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0287.160] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382948.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382948.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ad37)) returned 1 [0287.160] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0287.160] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0287.160] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0287.160] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x178d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382950.JPG", cAlternateFileName="")) returned 1 [0287.160] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0287.161] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d00 [0287.161] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0287.161] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d00 | out: hHeap=0x1f0000) returned 1 [0287.161] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0287.161] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0287.162] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382950.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382950.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0287.162] GetFileType (hFile=0x21c) returned 0x1 [0287.163] CloseHandle (hObject=0x21c) returned 1 [0287.163] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0287.163] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382950.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382950.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x178d2)) returned 1 [0287.163] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0287.163] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0287.164] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0287.164] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17749, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382952.JPG", cAlternateFileName="")) returned 1 [0287.164] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0287.164] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211fa8 [0287.164] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0287.164] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211fa8 | out: hHeap=0x1f0000) returned 1 [0287.164] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0287.164] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0287.165] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382952.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382952.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0287.165] GetFileType (hFile=0x21c) returned 0x1 [0287.166] CloseHandle (hObject=0x21c) returned 1 [0287.166] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0287.166] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382952.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382952.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17749)) returned 1 [0287.167] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0287.167] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0287.167] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0287.168] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x110c9494, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x110c9494, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110ef705, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15a7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382954.JPG", cAlternateFileName="")) returned 1 [0287.168] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0287.168] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212828 [0287.169] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0287.169] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212828 | out: hHeap=0x1f0000) returned 1 [0287.169] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0287.169] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0287.170] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382954.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382954.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0287.531] GetFileType (hFile=0x1e0) returned 0x1 [0287.532] CloseHandle (hObject=0x1e0) returned 1 [0287.532] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0287.532] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382954.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382954.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x110c9494, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x110c9494, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110ef705, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15a7f)) returned 1 [0287.532] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0287.532] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0287.532] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0287.532] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15fef, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382955.JPG", cAlternateFileName="")) returned 1 [0287.532] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0287.532] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2127a0 [0287.532] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0287.532] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2127a0 | out: hHeap=0x1f0000) returned 1 [0287.532] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0287.533] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0287.533] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382955.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382955.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0287.533] GetFileType (hFile=0x1e0) returned 0x1 [0287.533] CloseHandle (hObject=0x1e0) returned 1 [0287.533] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0287.533] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382955.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382955.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15fef)) returned 1 [0287.533] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0287.533] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0287.534] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0287.534] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a9ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382957.JPG", cAlternateFileName="")) returned 1 [0287.534] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0287.534] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211ae0 [0287.534] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0287.534] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211ae0 | out: hHeap=0x1f0000) returned 1 [0287.534] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0287.534] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0287.534] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382957.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382957.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0287.534] GetFileType (hFile=0x1e0) returned 0x1 [0287.534] CloseHandle (hObject=0x1e0) returned 1 [0287.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0287.535] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382957.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382957.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a9ed)) returned 1 [0287.535] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0287.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0287.535] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0287.535] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x193e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382958.JPG", cAlternateFileName="")) returned 1 [0287.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0287.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d00 [0287.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0287.535] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d00 | out: hHeap=0x1f0000) returned 1 [0287.535] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0287.536] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0287.536] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382958.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382958.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0287.536] GetFileType (hFile=0x1e0) returned 0x1 [0287.536] CloseHandle (hObject=0x1e0) returned 1 [0287.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0287.536] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382958.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382958.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x193e7)) returned 1 [0287.537] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0287.537] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0287.537] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0287.537] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14f8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382959.JPG", cAlternateFileName="")) returned 1 [0287.537] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0287.537] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211e98 [0287.537] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0287.537] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e98 | out: hHeap=0x1f0000) returned 1 [0287.537] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0287.537] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0287.537] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382959.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382959.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0287.537] GetFileType (hFile=0x1e0) returned 0x1 [0287.538] CloseHandle (hObject=0x1e0) returned 1 [0287.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0287.538] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382959.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382959.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14f8a)) returned 1 [0287.538] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0287.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0287.538] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0287.538] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a3f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382960.JPG", cAlternateFileName="")) returned 1 [0287.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0287.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2119d0 [0287.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0287.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2119d0 | out: hHeap=0x1f0000) returned 1 [0287.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0287.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0287.539] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382960.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382960.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0287.539] GetFileType (hFile=0x1e0) returned 0x1 [0287.539] CloseHandle (hObject=0x1e0) returned 1 [0287.540] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0287.540] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382960.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382960.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a3f4)) returned 1 [0287.540] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0287.540] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0287.540] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0287.540] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18ac4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382961.JPG", cAlternateFileName="")) returned 1 [0287.540] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0287.540] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0287.540] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0287.540] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0287.540] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0287.540] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0287.541] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382961.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382961.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0287.541] GetFileType (hFile=0x1e0) returned 0x1 [0287.541] CloseHandle (hObject=0x1e0) returned 1 [0287.541] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0287.541] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382961.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382961.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18ac4)) returned 1 [0287.542] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0287.542] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0287.542] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0287.542] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bef7, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382962.JPG", cAlternateFileName="")) returned 1 [0287.542] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0287.542] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211c78 [0287.542] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0287.542] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211c78 | out: hHeap=0x1f0000) returned 1 [0287.543] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0287.543] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0287.543] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382962.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382962.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0287.543] GetFileType (hFile=0x1e0) returned 0x1 [0287.543] CloseHandle (hObject=0x1e0) returned 1 [0287.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0287.544] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382962.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382962.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bef7)) returned 1 [0287.544] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0287.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0287.544] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0287.544] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17dee, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382963.JPG", cAlternateFileName="")) returned 1 [0287.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0287.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212470 [0287.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0287.544] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212470 | out: hHeap=0x1f0000) returned 1 [0287.545] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0287.545] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0287.545] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382963.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382963.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0287.545] GetFileType (hFile=0x1e0) returned 0x1 [0287.546] CloseHandle (hObject=0x1e0) returned 1 [0287.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0287.546] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382963.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382963.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17dee)) returned 1 [0287.546] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0287.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0287.547] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0287.547] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bb02, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382965.JPG", cAlternateFileName="")) returned 1 [0287.547] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0287.547] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211b68 [0287.547] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0287.547] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b68 | out: hHeap=0x1f0000) returned 1 [0287.547] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0287.547] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0287.548] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382965.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382965.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0287.548] GetFileType (hFile=0x1e0) returned 0x1 [0287.548] CloseHandle (hObject=0x1e0) returned 1 [0287.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0287.549] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382965.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382965.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bb02)) returned 1 [0287.549] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0287.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0287.549] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0287.549] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18888, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382966.JPG", cAlternateFileName="")) returned 1 [0287.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0287.550] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211b68 [0287.550] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0287.550] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b68 | out: hHeap=0x1f0000) returned 1 [0287.550] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0287.550] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0287.551] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382966.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382966.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0287.551] GetFileType (hFile=0x1e0) returned 0x1 [0287.551] CloseHandle (hObject=0x1e0) returned 1 [0287.552] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0287.552] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382966.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382966.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18888)) returned 1 [0287.552] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0287.552] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0287.552] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0287.552] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16d08, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382967.JPG", cAlternateFileName="")) returned 1 [0287.552] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0287.552] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2129c0 [0287.552] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0287.553] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2129c0 | out: hHeap=0x1f0000) returned 1 [0287.553] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0287.553] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0287.553] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382967.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382967.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0287.757] GetFileType (hFile=0x198) returned 0x1 [0287.757] CloseHandle (hObject=0x198) returned 1 [0287.765] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0287.765] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382967.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382967.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16d08)) returned 1 [0287.765] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0287.765] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0287.765] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0287.765] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b75f, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382968.JPG", cAlternateFileName="")) returned 1 [0287.766] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0287.766] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211948 [0287.766] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0287.766] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211948 | out: hHeap=0x1f0000) returned 1 [0287.766] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0287.766] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0287.881] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382968.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382968.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0287.881] GetFileType (hFile=0x198) returned 0x1 [0287.882] CloseHandle (hObject=0x198) returned 1 [0287.882] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0287.882] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382968.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382968.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b75f)) returned 1 [0287.882] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0287.882] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0287.883] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0287.883] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1779f, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382969.JPG", cAlternateFileName="")) returned 1 [0287.883] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0287.883] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2120b8 [0287.883] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0287.883] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2120b8 | out: hHeap=0x1f0000) returned 1 [0287.883] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0287.883] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0287.884] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382969.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382969.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0287.884] GetFileType (hFile=0x198) returned 0x1 [0287.885] CloseHandle (hObject=0x198) returned 1 [0287.885] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0287.885] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382969.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382969.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1779f)) returned 1 [0287.886] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0287.886] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0287.886] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0287.886] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15b94, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382970.JPG", cAlternateFileName="")) returned 1 [0287.886] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260630 [0287.886] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211b68 [0287.886] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0287.887] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b68 | out: hHeap=0x1f0000) returned 1 [0287.887] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0287.887] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260630 | out: hHeap=0x1f0000) returned 1 [0287.888] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382970.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382970.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0287.888] GetFileType (hFile=0x198) returned 0x1 [0287.888] CloseHandle (hObject=0x198) returned 1 [0287.889] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0287.889] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382970.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382970.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15b94)) returned 1 [0287.889] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0287.889] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0287.889] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0287.890] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x190e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0384862.JPG", cAlternateFileName="")) returned 1 [0287.890] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0287.890] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211ae0 [0287.890] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0287.890] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211ae0 | out: hHeap=0x1f0000) returned 1 [0287.890] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0287.890] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0287.891] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384862.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384862.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0287.891] GetFileType (hFile=0x198) returned 0x1 [0287.892] CloseHandle (hObject=0x198) returned 1 [0287.892] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0287.892] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384862.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384862.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x190e9)) returned 1 [0287.892] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0287.892] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0287.893] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0287.893] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17b79, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0384885.JPG", cAlternateFileName="")) returned 1 [0287.893] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0287.893] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212938 [0287.893] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0287.893] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212938 | out: hHeap=0x1f0000) returned 1 [0287.893] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0287.893] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0287.894] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384885.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384885.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0287.894] GetFileType (hFile=0x198) returned 0x1 [0287.894] CloseHandle (hObject=0x198) returned 1 [0287.895] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0287.895] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384885.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384885.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17b79)) returned 1 [0287.895] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0287.895] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0287.895] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0287.895] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14033, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0384888.JPG", cAlternateFileName="")) returned 1 [0287.896] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260630 [0287.896] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212470 [0287.896] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0287.896] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212470 | out: hHeap=0x1f0000) returned 1 [0287.896] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0287.896] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260630 | out: hHeap=0x1f0000) returned 1 [0287.897] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384888.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384888.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0287.897] GetFileType (hFile=0x198) returned 0x1 [0287.897] CloseHandle (hObject=0x198) returned 1 [0287.897] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0287.898] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384888.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384888.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14033)) returned 1 [0287.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0287.898] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0287.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0287.898] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd8f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0384895.JPG", cAlternateFileName="")) returned 1 [0287.898] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0287.898] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0287.898] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0287.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0287.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0287.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0287.899] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384895.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384895.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0287.899] GetFileType (hFile=0x198) returned 0x1 [0287.899] CloseHandle (hObject=0x198) returned 1 [0287.899] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0287.900] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384895.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384895.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd8f6)) returned 1 [0287.900] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0287.900] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0287.900] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0287.900] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11780, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0384900.JPG", cAlternateFileName="")) returned 1 [0287.900] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0287.900] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2127a0 [0287.900] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0287.900] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2127a0 | out: hHeap=0x1f0000) returned 1 [0287.900] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0287.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0287.901] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384900.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384900.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0287.902] GetFileType (hFile=0x198) returned 0x1 [0287.902] CloseHandle (hObject=0x198) returned 1 [0287.902] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0287.903] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384900.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384900.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11780)) returned 1 [0287.903] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0287.903] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0287.903] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0287.903] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x787a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0386120.JPG", cAlternateFileName="")) returned 1 [0287.903] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0287.903] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2128b0 [0287.903] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0287.903] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2128b0 | out: hHeap=0x1f0000) returned 1 [0287.903] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0287.903] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0287.904] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386120.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386120.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0287.904] GetFileType (hFile=0x198) returned 0x1 [0287.905] CloseHandle (hObject=0x198) returned 1 [0287.905] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0287.905] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386120.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386120.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x787a)) returned 1 [0287.905] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0287.905] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0287.906] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0287.906] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa91e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0386267.JPG", cAlternateFileName="")) returned 1 [0287.906] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0287.906] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211e98 [0287.906] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0287.906] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e98 | out: hHeap=0x1f0000) returned 1 [0287.906] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0287.906] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0287.907] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386267.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386267.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0287.907] GetFileType (hFile=0x198) returned 0x1 [0287.907] CloseHandle (hObject=0x198) returned 1 [0287.908] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0287.908] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386267.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386267.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa91e)) returned 1 [0287.908] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0287.908] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0287.908] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0287.908] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b43, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0386270.JPG", cAlternateFileName="")) returned 1 [0287.908] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0287.908] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211ae0 [0287.908] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0287.908] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211ae0 | out: hHeap=0x1f0000) returned 1 [0287.908] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0287.909] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0287.909] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386270.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386270.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0287.915] GetFileType (hFile=0x198) returned 0x1 [0287.915] CloseHandle (hObject=0x198) returned 1 [0287.916] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0287.916] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386270.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386270.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b43)) returned 1 [0287.916] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0287.916] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0287.916] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0287.916] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x396a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0386485.JPG", cAlternateFileName="")) returned 1 [0287.919] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0287.919] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2129c0 [0287.919] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0287.919] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2129c0 | out: hHeap=0x1f0000) returned 1 [0287.919] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0287.920] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0287.920] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386485.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386485.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0287.921] GetFileType (hFile=0x198) returned 0x1 [0287.922] CloseHandle (hObject=0x198) returned 1 [0287.922] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0287.922] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386485.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386485.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x396a)) returned 1 [0287.922] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0287.922] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0287.923] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0287.923] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x693e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0386764.JPG", cAlternateFileName="")) returned 1 [0287.923] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0287.923] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212030 [0287.923] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0287.923] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212030 | out: hHeap=0x1f0000) returned 1 [0287.923] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0287.923] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0287.924] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386764.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386764.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0288.092] GetFileType (hFile=0x21c) returned 0x1 [0288.093] CloseHandle (hObject=0x21c) returned 1 [0288.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0288.094] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386764.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386764.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x693e)) returned 1 [0288.094] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0288.094] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0288.094] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0288.094] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcb0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0387337.JPG", cAlternateFileName="")) returned 1 [0288.094] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0288.094] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d00 [0288.095] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0288.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d00 | out: hHeap=0x1f0000) returned 1 [0288.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0288.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0288.096] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387337.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387337.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0288.096] GetFileType (hFile=0x21c) returned 0x1 [0288.097] CloseHandle (hObject=0x21c) returned 1 [0288.097] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0288.097] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387337.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387337.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcb0a)) returned 1 [0288.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0288.097] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0288.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0288.098] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6cec, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0387578.JPG", cAlternateFileName="")) returned 1 [0288.098] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0288.098] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211fa8 [0288.098] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0288.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211fa8 | out: hHeap=0x1f0000) returned 1 [0288.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0288.099] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0288.099] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387578.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387578.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0288.100] GetFileType (hFile=0x21c) returned 0x1 [0288.100] CloseHandle (hObject=0x21c) returned 1 [0288.101] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0288.101] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387578.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387578.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6cec)) returned 1 [0288.101] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0288.101] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0288.101] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0288.101] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x98c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0387591.JPG", cAlternateFileName="")) returned 1 [0288.101] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0288.102] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d88 [0288.102] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0288.102] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d88 | out: hHeap=0x1f0000) returned 1 [0288.102] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0288.103] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0288.103] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387591.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387591.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0288.104] GetFileType (hFile=0x21c) returned 0x1 [0288.104] CloseHandle (hObject=0x21c) returned 1 [0288.105] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0288.105] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387591.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387591.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x98c7)) returned 1 [0288.105] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0288.105] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0288.105] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0288.106] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb9bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0387604.JPG", cAlternateFileName="")) returned 1 [0288.106] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0288.106] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2129c0 [0288.106] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0288.106] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2129c0 | out: hHeap=0x1f0000) returned 1 [0288.106] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0288.106] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0288.107] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387604.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387604.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0288.107] GetFileType (hFile=0x21c) returned 0x1 [0288.108] CloseHandle (hObject=0x21c) returned 1 [0288.109] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0288.109] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387604.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387604.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb9bf)) returned 1 [0288.109] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0288.109] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0288.109] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0288.109] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x98ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0387882.JPG", cAlternateFileName="")) returned 1 [0288.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0288.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211bf0 [0288.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0288.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211bf0 | out: hHeap=0x1f0000) returned 1 [0288.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0288.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0288.111] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387882.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387882.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0288.111] GetFileType (hFile=0x21c) returned 0x1 [0288.112] CloseHandle (hObject=0x21c) returned 1 [0288.112] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0288.112] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387882.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387882.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x98ec)) returned 1 [0288.112] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0288.112] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0288.113] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0288.113] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7df3, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0387895.JPG", cAlternateFileName="")) returned 1 [0288.113] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0288.113] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212360 [0288.113] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0288.113] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212360 | out: hHeap=0x1f0000) returned 1 [0288.113] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0288.113] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0288.114] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387895.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387895.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0288.114] GetFileType (hFile=0x21c) returned 0x1 [0288.115] CloseHandle (hObject=0x21c) returned 1 [0288.115] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0288.116] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387895.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387895.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7df3)) returned 1 [0288.116] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0288.116] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0288.116] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0288.116] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x351c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0390072.JPG", cAlternateFileName="")) returned 1 [0288.116] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0288.116] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211fa8 [0288.116] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0288.117] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211fa8 | out: hHeap=0x1f0000) returned 1 [0288.117] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0288.117] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0288.119] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0390072.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0390072.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0288.119] GetFileType (hFile=0x21c) returned 0x1 [0288.120] CloseHandle (hObject=0x21c) returned 1 [0288.120] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0288.120] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0390072.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0390072.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x351c)) returned 1 [0288.120] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0288.120] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0288.121] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0288.121] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31883, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0400001.PNG", cAlternateFileName="")) returned 1 [0288.121] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0288.121] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212030 [0288.121] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0288.121] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212030 | out: hHeap=0x1f0000) returned 1 [0288.121] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0288.122] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0288.122] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400001.PNG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400001.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0288.122] GetFileType (hFile=0x21c) returned 0x1 [0288.123] CloseHandle (hObject=0x21c) returned 1 [0288.123] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0288.123] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400001.PNG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400001.png"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31883)) returned 1 [0288.124] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0288.124] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0288.124] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0288.124] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15d49, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0400002.PNG", cAlternateFileName="")) returned 1 [0288.124] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0288.124] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212140 [0288.124] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0288.124] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212140 | out: hHeap=0x1f0000) returned 1 [0288.125] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0288.125] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0288.125] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400002.PNG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400002.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0288.126] GetFileType (hFile=0x21c) returned 0x1 [0288.126] CloseHandle (hObject=0x21c) returned 1 [0288.127] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0288.127] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400002.PNG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400002.png"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15d49)) returned 1 [0288.127] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0288.127] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0288.127] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0288.127] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e836, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0400003.PNG", cAlternateFileName="")) returned 1 [0288.413] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0288.413] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212828 [0288.413] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0288.413] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212828 | out: hHeap=0x1f0000) returned 1 [0288.413] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0288.414] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0288.415] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400003.PNG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400003.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0288.415] GetFileType (hFile=0x198) returned 0x1 [0288.416] CloseHandle (hObject=0x198) returned 1 [0288.416] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0288.416] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400003.PNG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400003.png"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e836)) returned 1 [0288.416] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0288.416] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0288.416] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0288.417] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19a5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0400004.PNG", cAlternateFileName="")) returned 1 [0288.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0288.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212030 [0288.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0288.417] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212030 | out: hHeap=0x1f0000) returned 1 [0288.417] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0288.417] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0288.418] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400004.PNG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400004.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0288.418] GetFileType (hFile=0x198) returned 0x1 [0288.418] CloseHandle (hObject=0x198) returned 1 [0288.419] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0288.419] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400004.PNG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400004.png"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19a5d)) returned 1 [0288.419] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0288.419] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0288.419] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0288.419] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17742, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0400005.PNG", cAlternateFileName="")) returned 1 [0288.419] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0288.420] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212360 [0288.420] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0288.420] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212360 | out: hHeap=0x1f0000) returned 1 [0288.420] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0288.420] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0288.421] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400005.PNG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400005.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0288.421] GetFileType (hFile=0x198) returned 0x1 [0288.421] CloseHandle (hObject=0x198) returned 1 [0288.421] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0288.421] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400005.PNG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400005.png"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17742)) returned 1 [0288.422] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0288.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0288.422] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0288.422] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2645, dwReserved0=0x0, dwReserved1=0x0, cFileName="JAVA_01.MID", cAlternateFileName="")) returned 1 [0288.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0288.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211e10 [0288.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0288.422] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e10 | out: hHeap=0x1f0000) returned 1 [0288.422] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0288.422] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0288.423] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JAVA_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\java_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0288.696] GetFileType (hFile=0x21c) returned 0x1 [0288.697] CloseHandle (hObject=0x21c) returned 1 [0288.697] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0288.697] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JAVA_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\java_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2645)) returned 1 [0288.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0288.697] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0288.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0288.697] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="JNGLE_01.MID", cAlternateFileName="")) returned 1 [0288.698] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0288.698] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212828 [0288.698] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0288.698] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212828 | out: hHeap=0x1f0000) returned 1 [0288.698] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0288.698] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0288.698] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JNGLE_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\jngle_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0288.699] GetFileType (hFile=0x21c) returned 0x1 [0288.699] CloseHandle (hObject=0x21c) returned 1 [0288.699] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0288.699] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JNGLE_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\jngle_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16d3)) returned 1 [0288.700] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0288.700] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0288.700] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0288.700] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="MP00021_.WMF", cAlternateFileName="")) returned 1 [0288.700] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0288.700] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212608 [0288.700] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0288.700] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212608 | out: hHeap=0x1f0000) returned 1 [0288.700] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0288.700] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0288.700] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MP00021_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\mp00021_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0288.701] GetFileType (hFile=0x21c) returned 0x1 [0288.702] CloseHandle (hObject=0x21c) returned 1 [0288.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0288.702] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MP00021_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\mp00021_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15f6)) returned 1 [0288.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0288.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0288.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0288.702] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1090, dwReserved0=0x0, dwReserved1=0x0, cFileName="MP00132_.WMF", cAlternateFileName="")) returned 1 [0288.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0288.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211b68 [0288.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0288.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b68 | out: hHeap=0x1f0000) returned 1 [0288.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0288.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0288.703] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MP00132_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\mp00132_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0288.704] GetFileType (hFile=0x21c) returned 0x1 [0288.704] CloseHandle (hObject=0x21c) returned 1 [0288.704] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0288.704] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MP00132_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\mp00132_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1090)) returned 1 [0288.704] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0288.705] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0288.705] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0288.705] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="MP00646_.WMF", cAlternateFileName="")) returned 1 [0288.705] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0288.705] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2122d8 [0288.705] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0288.705] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2122d8 | out: hHeap=0x1f0000) returned 1 [0288.705] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0288.705] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0288.705] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MP00646_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\mp00646_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0288.706] GetFileType (hFile=0x21c) returned 0x1 [0288.706] CloseHandle (hObject=0x21c) returned 1 [0288.707] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0288.707] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MP00646_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\mp00646_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31e2)) returned 1 [0288.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0288.707] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0288.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0288.707] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ae0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MUSIC_01.MID", cAlternateFileName="")) returned 1 [0288.707] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0288.707] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212608 [0288.707] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0288.708] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212608 | out: hHeap=0x1f0000) returned 1 [0288.708] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0288.708] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0288.708] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MUSIC_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\music_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0288.709] GetFileType (hFile=0x21c) returned 0x1 [0288.709] CloseHandle (hObject=0x21c) returned 1 [0288.709] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0288.709] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MUSIC_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\music_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ae0)) returned 1 [0288.709] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0288.709] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0288.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0288.710] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5044, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00042_.WMF", cAlternateFileName="")) returned 1 [0288.710] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0288.710] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2127a0 [0288.710] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0288.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2127a0 | out: hHeap=0x1f0000) returned 1 [0288.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0288.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0288.710] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00042_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00042_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0288.712] GetFileType (hFile=0x21c) returned 0x1 [0288.712] CloseHandle (hObject=0x21c) returned 1 [0288.712] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0288.712] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00042_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00042_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5044)) returned 1 [0288.713] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0288.713] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0288.713] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0288.713] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a42, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00057_.WMF", cAlternateFileName="")) returned 1 [0288.713] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0288.713] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211b68 [0288.713] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0288.713] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b68 | out: hHeap=0x1f0000) returned 1 [0288.713] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0288.713] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0288.714] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00057_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00057_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0288.715] GetFileType (hFile=0x21c) returned 0x1 [0288.715] CloseHandle (hObject=0x21c) returned 1 [0288.715] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0288.715] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00057_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00057_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a42)) returned 1 [0288.715] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0288.715] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0288.716] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0288.716] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xeaa, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00058_.WMF", cAlternateFileName="")) returned 1 [0288.716] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0288.716] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211a58 [0288.716] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0288.716] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211a58 | out: hHeap=0x1f0000) returned 1 [0288.716] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0288.716] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0288.716] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00058_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00058_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0288.717] GetFileType (hFile=0x21c) returned 0x1 [0288.717] CloseHandle (hObject=0x21c) returned 1 [0288.717] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0288.717] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00058_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00058_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xeaa)) returned 1 [0288.718] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0288.718] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0288.718] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0288.718] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1324, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00068_.WMF", cAlternateFileName="")) returned 1 [0288.718] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0288.718] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211fa8 [0288.718] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0288.718] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211fa8 | out: hHeap=0x1f0000) returned 1 [0288.718] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0288.718] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0288.719] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00068_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00068_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0288.719] GetFileType (hFile=0x21c) returned 0x1 [0288.719] CloseHandle (hObject=0x21c) returned 1 [0288.719] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0288.719] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00068_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00068_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1324)) returned 1 [0288.720] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0288.720] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0288.720] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0288.720] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1384, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00238_.WMF", cAlternateFileName="")) returned 1 [0288.720] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0288.720] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0288.720] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0288.720] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0288.720] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0288.720] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0288.721] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00238_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00238_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0288.721] GetFileType (hFile=0x21c) returned 0x1 [0288.722] CloseHandle (hObject=0x21c) returned 1 [0288.722] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0288.722] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00238_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00238_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1384)) returned 1 [0288.722] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0288.723] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0288.723] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0288.723] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x864, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00330_.WMF", cAlternateFileName="")) returned 1 [0288.723] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0288.723] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2128b0 [0288.723] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0288.723] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2128b0 | out: hHeap=0x1f0000) returned 1 [0288.723] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0288.723] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0288.724] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00330_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00330_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0288.725] GetFileType (hFile=0x21c) returned 0x1 [0288.725] CloseHandle (hObject=0x21c) returned 1 [0288.726] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0288.726] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00330_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00330_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x864)) returned 1 [0288.726] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0288.726] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0288.726] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0288.726] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1172, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00388_.WMF", cAlternateFileName="")) returned 1 [0288.726] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0288.727] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2119d0 [0288.727] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0288.727] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2119d0 | out: hHeap=0x1f0000) returned 1 [0288.727] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0288.727] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0288.728] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00388_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00388_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0288.729] GetFileType (hFile=0x21c) returned 0x1 [0288.729] CloseHandle (hObject=0x21c) returned 1 [0288.730] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0288.730] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00388_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00388_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1172)) returned 1 [0288.730] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0288.730] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0288.730] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0288.730] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00389_.WMF", cAlternateFileName="")) returned 1 [0288.731] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0288.731] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2119d0 [0288.731] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0288.731] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2119d0 | out: hHeap=0x1f0000) returned 1 [0288.731] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0288.731] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0288.732] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00389_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00389_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0288.982] GetFileType (hFile=0x198) returned 0x1 [0288.982] CloseHandle (hObject=0x198) returned 1 [0288.982] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0288.982] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00389_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00389_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20ca)) returned 1 [0288.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0288.983] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0288.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0288.983] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00390_.WMF", cAlternateFileName="")) returned 1 [0288.983] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0288.983] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211e10 [0288.983] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0288.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e10 | out: hHeap=0x1f0000) returned 1 [0288.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0288.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0289.073] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00390_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00390_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.358] GetFileType (hFile=0x198) returned 0x1 [0289.358] CloseHandle (hObject=0x198) returned 1 [0289.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0289.358] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00390_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00390_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21c2)) returned 1 [0289.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0289.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0289.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0289.358] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00391_.WMF", cAlternateFileName="")) returned 1 [0289.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0289.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212608 [0289.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0289.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212608 | out: hHeap=0x1f0000) returned 1 [0289.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0289.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0289.359] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00391_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00391_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.359] GetFileType (hFile=0x198) returned 0x1 [0289.359] CloseHandle (hObject=0x198) returned 1 [0289.359] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0289.360] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00391_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00391_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21ec)) returned 1 [0289.360] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0289.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0289.360] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0289.360] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ad4, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00394_.WMF", cAlternateFileName="")) returned 1 [0289.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0289.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d88 [0289.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0289.360] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d88 | out: hHeap=0x1f0000) returned 1 [0289.360] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0289.360] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0289.360] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00394_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00394_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.361] GetFileType (hFile=0x198) returned 0x1 [0289.361] CloseHandle (hObject=0x198) returned 1 [0289.361] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0289.361] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00394_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00394_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ad4)) returned 1 [0289.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0289.361] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0289.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0289.361] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x194a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00395_.WMF", cAlternateFileName="")) returned 1 [0289.361] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0289.361] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212250 [0289.361] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0289.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212250 | out: hHeap=0x1f0000) returned 1 [0289.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0289.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0289.362] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00395_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00395_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.362] GetFileType (hFile=0x198) returned 0x1 [0289.362] CloseHandle (hObject=0x198) returned 1 [0289.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0289.363] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00395_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00395_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x194a)) returned 1 [0289.363] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0289.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0289.363] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0289.363] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x38c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00396_.WMF", cAlternateFileName="")) returned 1 [0289.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0289.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211e98 [0289.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0289.363] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e98 | out: hHeap=0x1f0000) returned 1 [0289.364] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0289.364] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0289.364] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00396_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00396_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.365] GetFileType (hFile=0x198) returned 0x1 [0289.365] CloseHandle (hObject=0x198) returned 1 [0289.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0289.365] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00396_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00396_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x38c6)) returned 1 [0289.365] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0289.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0289.365] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0289.366] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x173e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00417_.WMF", cAlternateFileName="")) returned 1 [0289.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0289.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d88 [0289.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0289.366] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d88 | out: hHeap=0x1f0000) returned 1 [0289.366] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0289.366] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0289.366] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00417_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00417_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.366] GetFileType (hFile=0x198) returned 0x1 [0289.367] CloseHandle (hObject=0x198) returned 1 [0289.367] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0289.367] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00417_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00417_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x173e)) returned 1 [0289.367] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0289.367] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0289.368] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0289.368] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4696, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00433_.WMF", cAlternateFileName="")) returned 1 [0289.368] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0289.368] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0289.368] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0289.368] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0289.368] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0289.368] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0289.369] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00433_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00433_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.369] GetFileType (hFile=0x198) returned 0x1 [0289.369] CloseHandle (hObject=0x198) returned 1 [0289.370] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0289.370] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00433_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00433_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4696)) returned 1 [0289.370] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0289.370] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0289.370] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0289.370] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2f38, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00438_.WMF", cAlternateFileName="")) returned 1 [0289.370] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605b8 [0289.370] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2124f8 [0289.371] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0289.371] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2124f8 | out: hHeap=0x1f0000) returned 1 [0289.371] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0289.371] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0289.371] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00438_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00438_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.372] GetFileType (hFile=0x198) returned 0x1 [0289.372] CloseHandle (hObject=0x198) returned 1 [0289.372] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0289.372] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00438_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00438_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2f38)) returned 1 [0289.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0289.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0289.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0289.373] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00452_.WMF", cAlternateFileName="")) returned 1 [0289.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0289.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212718 [0289.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0289.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212718 | out: hHeap=0x1f0000) returned 1 [0289.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0289.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0289.374] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00452_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00452_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.374] GetFileType (hFile=0x198) returned 0x1 [0289.375] CloseHandle (hObject=0x198) returned 1 [0289.375] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0289.375] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00452_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00452_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14bc)) returned 1 [0289.375] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0289.376] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0289.376] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0289.376] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1580, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00454_.WMF", cAlternateFileName="")) returned 1 [0289.376] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0289.376] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0289.376] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0289.376] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0289.376] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0289.376] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0289.377] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00454_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00454_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.377] GetFileType (hFile=0x198) returned 0x1 [0289.378] CloseHandle (hObject=0x198) returned 1 [0289.378] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0289.378] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00454_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00454_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1580)) returned 1 [0289.378] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0289.378] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0289.378] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0289.379] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00458_.WMF", cAlternateFileName="")) returned 1 [0289.379] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0289.379] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211f20 [0289.379] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0289.379] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211f20 | out: hHeap=0x1f0000) returned 1 [0289.379] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0289.379] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0289.380] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00458_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00458_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.380] GetFileType (hFile=0x198) returned 0x1 [0289.380] CloseHandle (hObject=0x198) returned 1 [0289.381] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0289.381] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00458_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00458_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27a4)) returned 1 [0289.381] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0289.381] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0289.381] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0289.381] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00462_.WMF", cAlternateFileName="")) returned 1 [0289.381] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0289.381] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2129c0 [0289.381] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0289.382] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2129c0 | out: hHeap=0x1f0000) returned 1 [0289.382] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0289.382] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0289.382] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00462_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00462_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.383] GetFileType (hFile=0x198) returned 0x1 [0289.399] CloseHandle (hObject=0x198) returned 1 [0289.400] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0289.400] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00462_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00462_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f6c)) returned 1 [0289.400] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0289.400] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0289.400] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0289.400] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc10, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00487_.WMF", cAlternateFileName="")) returned 1 [0289.401] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0289.401] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2129c0 [0289.401] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0289.401] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2129c0 | out: hHeap=0x1f0000) returned 1 [0289.401] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0289.401] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0289.402] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00487_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00487_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.728] GetFileType (hFile=0x198) returned 0x1 [0289.729] CloseHandle (hObject=0x198) returned 1 [0289.729] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0289.729] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00487_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00487_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc10)) returned 1 [0289.730] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0289.730] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0289.730] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0289.730] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x938, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00494_.WMF", cAlternateFileName="")) returned 1 [0289.730] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0289.730] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212470 [0289.730] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0289.731] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212470 | out: hHeap=0x1f0000) returned 1 [0289.731] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0289.731] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0289.853] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00494_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00494_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.855] GetFileType (hFile=0x198) returned 0x1 [0289.855] CloseHandle (hObject=0x198) returned 1 [0289.856] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0289.856] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00494_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00494_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x938)) returned 1 [0289.856] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0289.856] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0289.857] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0289.857] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb60, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00512_.WMF", cAlternateFileName="")) returned 1 [0289.857] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0289.857] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212360 [0289.857] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0289.857] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212360 | out: hHeap=0x1f0000) returned 1 [0289.857] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0289.857] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0289.858] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00512_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00512_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.859] GetFileType (hFile=0x198) returned 0x1 [0289.859] CloseHandle (hObject=0x198) returned 1 [0289.860] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0289.860] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00512_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00512_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb60)) returned 1 [0289.860] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0289.860] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0289.861] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0289.861] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6efa, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00523_.WMF", cAlternateFileName="")) returned 1 [0289.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0289.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0289.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0289.861] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0289.861] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0289.861] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0289.862] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00523_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00523_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.864] GetFileType (hFile=0x198) returned 0x1 [0289.864] CloseHandle (hObject=0x198) returned 1 [0289.865] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0289.865] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00523_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00523_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6efa)) returned 1 [0289.865] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0289.865] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0289.865] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0289.865] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5880, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00525_.WMF", cAlternateFileName="")) returned 1 [0289.866] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0289.866] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211f20 [0289.866] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0289.866] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211f20 | out: hHeap=0x1f0000) returned 1 [0289.866] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0289.866] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0289.867] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00525_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00525_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.868] GetFileType (hFile=0x198) returned 0x1 [0289.868] CloseHandle (hObject=0x198) returned 1 [0289.869] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0289.869] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00525_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00525_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5880)) returned 1 [0289.869] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0289.869] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0289.869] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0289.870] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x477c, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00530_.WMF", cAlternateFileName="")) returned 1 [0289.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0289.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211f20 [0289.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0289.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211f20 | out: hHeap=0x1f0000) returned 1 [0289.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0289.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0289.872] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00530_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00530_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.873] GetFileType (hFile=0x198) returned 0x1 [0289.873] CloseHandle (hObject=0x198) returned 1 [0289.874] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0289.874] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00530_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00530_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x477c)) returned 1 [0289.874] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0289.874] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0289.874] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0289.874] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x530, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00532_.WMF", cAlternateFileName="")) returned 1 [0289.875] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0289.875] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0289.875] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0289.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0289.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0289.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0289.876] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00532_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00532_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.876] GetFileType (hFile=0x198) returned 0x1 [0289.877] CloseHandle (hObject=0x198) returned 1 [0289.877] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0289.877] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00532_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00532_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x530)) returned 1 [0289.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0289.877] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0289.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0289.877] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7d14, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00538_.WMF", cAlternateFileName="")) returned 1 [0289.877] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0289.877] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2120b8 [0289.878] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0289.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2120b8 | out: hHeap=0x1f0000) returned 1 [0289.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0289.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0289.878] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00538_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00538_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.879] GetFileType (hFile=0x198) returned 0x1 [0289.880] CloseHandle (hObject=0x198) returned 1 [0289.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0289.880] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00538_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00538_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7d14)) returned 1 [0289.880] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0289.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0289.880] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0289.880] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x64c, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00641_.WMF", cAlternateFileName="")) returned 1 [0289.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0289.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211b68 [0289.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0289.880] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b68 | out: hHeap=0x1f0000) returned 1 [0289.881] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0289.881] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0289.881] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00641_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00641_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.882] GetFileType (hFile=0x198) returned 0x1 [0289.882] CloseHandle (hObject=0x198) returned 1 [0289.883] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0289.883] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00641_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00641_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x64c)) returned 1 [0289.883] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0289.884] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0289.884] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0289.884] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7658, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00784_.WMF", cAlternateFileName="")) returned 1 [0289.884] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260630 [0289.884] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211ae0 [0289.884] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0289.884] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211ae0 | out: hHeap=0x1f0000) returned 1 [0289.884] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0289.884] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260630 | out: hHeap=0x1f0000) returned 1 [0289.885] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00784_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00784_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.886] GetFileType (hFile=0x198) returned 0x1 [0289.887] CloseHandle (hObject=0x198) returned 1 [0289.887] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0289.887] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00784_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00784_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7658)) returned 1 [0289.888] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0289.888] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0289.888] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0289.888] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x23f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00798_.WMF", cAlternateFileName="")) returned 1 [0289.888] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0289.888] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2124f8 [0289.888] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0289.888] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2124f8 | out: hHeap=0x1f0000) returned 1 [0289.888] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0289.889] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0289.889] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00798_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00798_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.890] GetFileType (hFile=0x198) returned 0x1 [0289.890] CloseHandle (hObject=0x198) returned 1 [0289.890] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0289.891] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00798_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00798_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x23f8)) returned 1 [0289.891] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0289.891] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0289.891] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0289.891] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x788, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00806_.WMF", cAlternateFileName="")) returned 1 [0289.891] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0289.891] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211b68 [0289.891] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0289.891] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b68 | out: hHeap=0x1f0000) returned 1 [0289.892] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0289.892] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0289.892] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00806_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00806_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0290.024] GetFileType (hFile=0x21c) returned 0x1 [0290.025] CloseHandle (hObject=0x21c) returned 1 [0290.025] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0290.025] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00806_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00806_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x788)) returned 1 [0290.025] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0290.025] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0290.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0290.026] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xba4, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00807_.WMF", cAlternateFileName="")) returned 1 [0290.026] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0290.026] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211948 [0290.026] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0290.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211948 | out: hHeap=0x1f0000) returned 1 [0290.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0290.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0290.027] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00807_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00807_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0290.027] GetFileType (hFile=0x21c) returned 0x1 [0290.028] CloseHandle (hObject=0x21c) returned 1 [0290.028] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0290.028] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00807_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00807_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xba4)) returned 1 [0290.029] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0290.029] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0290.029] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0290.029] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x514, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00808_.WMF", cAlternateFileName="")) returned 1 [0290.029] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0290.029] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2124f8 [0290.029] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0290.029] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2124f8 | out: hHeap=0x1f0000) returned 1 [0290.029] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0290.030] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0290.030] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00808_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00808_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0290.031] GetFileType (hFile=0x21c) returned 0x1 [0290.031] CloseHandle (hObject=0x21c) returned 1 [0290.032] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0290.032] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00808_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00808_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x514)) returned 1 [0290.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0290.032] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0290.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0290.032] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x608, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00809_.WMF", cAlternateFileName="")) returned 1 [0290.032] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0290.032] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211948 [0290.032] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0290.033] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211948 | out: hHeap=0x1f0000) returned 1 [0290.033] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0290.033] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0290.034] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00809_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00809_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0290.034] GetFileType (hFile=0x21c) returned 0x1 [0290.035] CloseHandle (hObject=0x21c) returned 1 [0290.035] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0290.035] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00809_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00809_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x608)) returned 1 [0290.035] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0290.035] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0290.036] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0290.036] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd58, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00810_.WMF", cAlternateFileName="")) returned 1 [0290.036] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0290.036] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2124f8 [0290.036] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0290.036] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2124f8 | out: hHeap=0x1f0000) returned 1 [0290.036] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0290.036] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0290.037] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00810_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00810_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0290.038] GetFileType (hFile=0x21c) returned 0x1 [0290.038] CloseHandle (hObject=0x21c) returned 1 [0290.039] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0290.039] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00810_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00810_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd58)) returned 1 [0290.039] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0290.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0290.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0290.041] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3210, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00932_.WMF", cAlternateFileName="")) returned 1 [0290.041] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0290.041] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0290.041] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0290.041] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0290.041] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0290.041] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0290.042] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00932_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00932_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0290.046] GetFileType (hFile=0x21c) returned 0x1 [0290.046] CloseHandle (hObject=0x21c) returned 1 [0290.046] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0290.046] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00932_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00932_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3210)) returned 1 [0290.047] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0290.047] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0290.047] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0290.047] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x110c9494, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x110c9494, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110ef705, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7c46, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01064_.WMF", cAlternateFileName="")) returned 1 [0290.047] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0290.047] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212140 [0290.047] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0290.047] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212140 | out: hHeap=0x1f0000) returned 1 [0290.047] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0290.048] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0290.048] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01064_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01064_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0290.049] GetFileType (hFile=0x21c) returned 0x1 [0290.049] CloseHandle (hObject=0x21c) returned 1 [0290.050] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0290.050] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01064_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01064_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x110c9494, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x110c9494, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110ef705, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7c46)) returned 1 [0290.050] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0290.050] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0290.050] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0290.050] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x54a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01066_.WMF", cAlternateFileName="")) returned 1 [0290.050] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605b8 [0290.050] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212470 [0290.051] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0290.051] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212470 | out: hHeap=0x1f0000) returned 1 [0290.051] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0290.051] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0290.051] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01066_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01066_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0290.053] GetFileType (hFile=0x21c) returned 0x1 [0290.053] CloseHandle (hObject=0x21c) returned 1 [0290.053] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0290.053] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01066_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01066_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x54a8)) returned 1 [0290.054] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0290.054] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0290.054] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0290.054] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01069_.WMF", cAlternateFileName="")) returned 1 [0290.054] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0290.054] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212030 [0290.054] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0290.054] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212030 | out: hHeap=0x1f0000) returned 1 [0290.054] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0290.054] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0290.055] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01069_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01069_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0290.056] GetFileType (hFile=0x21c) returned 0x1 [0290.057] CloseHandle (hObject=0x21c) returned 1 [0290.057] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0290.057] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01069_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01069_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a7e)) returned 1 [0290.057] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0290.057] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0290.057] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0290.057] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01123_.WMF", cAlternateFileName="")) returned 1 [0290.057] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0290.058] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2120b8 [0290.058] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0290.058] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2120b8 | out: hHeap=0x1f0000) returned 1 [0290.058] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0290.058] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0290.058] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01123_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01123_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0290.059] GetFileType (hFile=0x21c) returned 0x1 [0290.059] CloseHandle (hObject=0x21c) returned 1 [0290.060] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0290.060] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01123_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01123_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e00)) returned 1 [0290.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0290.060] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0290.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0290.060] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb70, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01126_.WMF", cAlternateFileName="")) returned 1 [0290.060] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0290.060] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d00 [0290.061] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0290.061] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d00 | out: hHeap=0x1f0000) returned 1 [0290.061] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0290.061] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0290.061] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01126_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01126_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0290.062] GetFileType (hFile=0x21c) returned 0x1 [0290.062] CloseHandle (hObject=0x21c) returned 1 [0290.062] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0290.062] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01126_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01126_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb70)) returned 1 [0290.063] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0290.063] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0290.063] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0290.063] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01130_.WMF", cAlternateFileName="")) returned 1 [0290.063] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0290.063] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0290.063] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0290.063] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0290.063] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0290.063] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0290.064] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01130_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01130_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0290.064] GetFileType (hFile=0x21c) returned 0x1 [0290.064] CloseHandle (hObject=0x21c) returned 1 [0290.065] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0290.065] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01130_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01130_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16a0)) returned 1 [0290.065] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0290.065] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0290.065] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0290.065] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01141_.WMF", cAlternateFileName="")) returned 1 [0290.065] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0290.065] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212360 [0290.065] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0290.065] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212360 | out: hHeap=0x1f0000) returned 1 [0290.065] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0290.065] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0290.066] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01141_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01141_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0290.582] GetFileType (hFile=0x198) returned 0x1 [0290.582] CloseHandle (hObject=0x198) returned 1 [0290.583] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0290.583] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01141_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01141_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16d8)) returned 1 [0290.583] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0290.583] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0290.583] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0290.583] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f38, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01148_.WMF", cAlternateFileName="")) returned 1 [0290.583] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0290.584] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d88 [0290.584] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0290.584] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d88 | out: hHeap=0x1f0000) returned 1 [0290.584] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0290.584] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0290.584] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01148_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01148_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0290.585] GetFileType (hFile=0x198) returned 0x1 [0290.585] CloseHandle (hObject=0x198) returned 1 [0290.585] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0290.585] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01148_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01148_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f38)) returned 1 [0290.585] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0290.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0290.586] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0290.586] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1248, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01149_.WMF", cAlternateFileName="")) returned 1 [0290.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0290.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211ae0 [0290.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0290.586] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211ae0 | out: hHeap=0x1f0000) returned 1 [0290.586] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0290.586] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0290.587] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01149_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01149_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0290.589] GetFileType (hFile=0x198) returned 0x1 [0290.589] CloseHandle (hObject=0x198) returned 1 [0290.589] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0290.589] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01149_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01149_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1248)) returned 1 [0290.590] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0290.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0290.590] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0290.590] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x110c9494, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x110c9494, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110ef705, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2230, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01152_.WMF", cAlternateFileName="")) returned 1 [0290.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0290.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212718 [0290.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0290.590] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212718 | out: hHeap=0x1f0000) returned 1 [0290.590] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0290.590] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0290.590] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01152_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01152_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0290.591] GetFileType (hFile=0x198) returned 0x1 [0290.591] CloseHandle (hObject=0x198) returned 1 [0290.591] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0290.591] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01152_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01152_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x110c9494, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x110c9494, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110ef705, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2230)) returned 1 [0290.591] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0290.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0290.592] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0290.592] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10386305, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10386305, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103ac532, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01154_.WMF", cAlternateFileName="")) returned 1 [0290.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0290.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d88 [0290.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0290.592] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d88 | out: hHeap=0x1f0000) returned 1 [0290.592] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0290.592] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0290.592] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01154_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01154_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0290.595] GetFileType (hFile=0x198) returned 0x1 [0290.600] CloseHandle (hObject=0x198) returned 1 [0290.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0290.601] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01154_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01154_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10386305, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10386305, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103ac532, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15b0)) returned 1 [0290.601] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0290.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0290.601] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0290.601] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1858, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01157_.WMF", cAlternateFileName="")) returned 1 [0290.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0290.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212580 [0290.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0290.601] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212580 | out: hHeap=0x1f0000) returned 1 [0290.601] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0290.601] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0290.601] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01157_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01157_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0291.040] GetFileType (hFile=0x198) returned 0x1 [0291.040] CloseHandle (hObject=0x198) returned 1 [0291.041] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0291.041] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01157_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01157_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1858)) returned 1 [0291.041] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0291.041] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0291.041] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0291.041] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101e2909, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101e2909, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101e2909, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c74, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01158_.WMF", cAlternateFileName="")) returned 1 [0291.041] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0291.041] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211ae0 [0291.041] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0291.041] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211ae0 | out: hHeap=0x1f0000) returned 1 [0291.042] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0291.042] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0291.042] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01158_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01158_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0291.042] GetFileType (hFile=0x198) returned 0x1 [0291.042] CloseHandle (hObject=0x198) returned 1 [0291.043] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0291.043] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01158_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01158_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101e2909, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101e2909, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101e2909, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c74)) returned 1 [0291.043] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0291.043] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0291.043] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0291.043] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102a14ae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102a14ae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102a14ae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1694, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01161_.WMF", cAlternateFileName="")) returned 1 [0291.043] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0291.043] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0291.043] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0291.043] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0291.043] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0291.043] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0291.044] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01161_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01161_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0291.044] GetFileType (hFile=0x198) returned 0x1 [0291.044] CloseHandle (hObject=0x198) returned 1 [0291.044] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0291.044] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01161_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01161_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102a14ae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102a14ae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102a14ae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1694)) returned 1 [0291.044] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0291.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0291.045] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0291.045] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5d0a20, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5d0a20, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5f6d6e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa04, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01164_.WMF", cAlternateFileName="")) returned 1 [0291.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0291.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0291.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0291.045] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0291.045] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0291.045] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0291.045] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01164_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01164_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0291.046] GetFileType (hFile=0x198) returned 0x1 [0291.046] CloseHandle (hObject=0x198) returned 1 [0291.046] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0291.046] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01164_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01164_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5d0a20, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5d0a20, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5f6d6e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa04)) returned 1 [0291.046] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0291.046] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0291.046] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0291.046] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5d0a20, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x70f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01293_.WMF", cAlternateFileName="")) returned 1 [0291.046] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0291.046] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211fa8 [0291.047] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0291.047] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211fa8 | out: hHeap=0x1f0000) returned 1 [0291.047] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0291.047] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0291.047] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01293_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01293_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0291.047] GetFileType (hFile=0x198) returned 0x1 [0291.048] CloseHandle (hObject=0x198) returned 1 [0291.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0291.048] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01293_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01293_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5d0a20, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x70f0)) returned 1 [0291.048] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0291.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0291.048] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0291.048] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01354_.WMF", cAlternateFileName="")) returned 1 [0291.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0291.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212250 [0291.049] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0291.049] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212250 | out: hHeap=0x1f0000) returned 1 [0291.049] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0291.049] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0291.049] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01354_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01354_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0291.049] GetFileType (hFile=0x198) returned 0x1 [0291.049] CloseHandle (hObject=0x198) returned 1 [0291.050] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0291.050] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01354_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01354_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16ae)) returned 1 [0291.050] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0291.050] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0291.050] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0291.050] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4732, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01356_.WMF", cAlternateFileName="")) returned 1 [0291.050] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0291.050] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211ae0 [0291.050] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0291.050] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211ae0 | out: hHeap=0x1f0000) returned 1 [0291.050] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0291.051] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0291.051] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01356_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01356_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0291.051] GetFileType (hFile=0x198) returned 0x1 [0291.052] CloseHandle (hObject=0x198) returned 1 [0291.052] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0291.052] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01356_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01356_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4732)) returned 1 [0291.052] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0291.052] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0291.052] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0291.052] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6bf6, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01357_.WMF", cAlternateFileName="")) returned 1 [0291.052] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609a0 [0291.053] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212250 [0291.053] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0291.053] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212250 | out: hHeap=0x1f0000) returned 1 [0291.053] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0291.053] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0291.053] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01357_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01357_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0291.054] GetFileType (hFile=0x198) returned 0x1 [0291.054] CloseHandle (hObject=0x198) returned 1 [0291.054] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0291.055] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01357_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01357_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6bf6)) returned 1 [0291.055] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0291.055] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0291.056] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0291.056] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf61cf5d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf61cf5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf61cf5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01358_.WMF", cAlternateFileName="")) returned 1 [0291.056] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0291.056] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211e98 [0291.056] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0291.056] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e98 | out: hHeap=0x1f0000) returned 1 [0291.056] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0291.057] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0291.057] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01358_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01358_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0291.057] GetFileType (hFile=0x198) returned 0x1 [0291.058] CloseHandle (hObject=0x198) returned 1 [0291.058] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0291.058] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01358_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01358_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf61cf5d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf61cf5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf61cf5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd6e)) returned 1 [0291.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0291.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0291.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0291.059] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5f6d6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5f6d6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5f6d6e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b74, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01361_.WMF", cAlternateFileName="")) returned 1 [0291.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0291.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212828 [0291.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0291.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212828 | out: hHeap=0x1f0000) returned 1 [0291.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0291.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0291.060] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01361_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01361_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0291.062] GetFileType (hFile=0x198) returned 0x1 [0291.062] CloseHandle (hObject=0x198) returned 1 [0291.062] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0291.062] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01361_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01361_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5f6d6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5f6d6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5f6d6e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b74)) returned 1 [0291.063] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0291.063] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0291.063] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0291.063] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5f6d6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5f6d6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5f6d6e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x40412, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01368_.WMF", cAlternateFileName="")) returned 1 [0291.063] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0291.063] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212030 [0291.063] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0291.063] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212030 | out: hHeap=0x1f0000) returned 1 [0291.063] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0291.064] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0291.064] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01368_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01368_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0291.065] GetFileType (hFile=0x198) returned 0x1 [0291.065] CloseHandle (hObject=0x198) returned 1 [0291.065] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0291.066] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01368_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01368_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5f6d6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5f6d6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5f6d6e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x40412)) returned 1 [0291.066] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0291.066] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0291.066] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0291.066] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5f6d6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5f6d6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5f6d6e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b16e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01421_.WMF", cAlternateFileName="")) returned 1 [0291.067] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0291.067] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212608 [0291.067] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0291.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212608 | out: hHeap=0x1f0000) returned 1 [0291.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0291.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0291.068] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01421_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01421_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0291.069] GetFileType (hFile=0x198) returned 0x1 [0291.069] CloseHandle (hObject=0x198) returned 1 [0291.074] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0291.074] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01421_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01421_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5f6d6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5f6d6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5f6d6e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b16e)) returned 1 [0291.075] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0291.075] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0291.075] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0291.075] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x100fdad1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x100fdad1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e82, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01468_.WMF", cAlternateFileName="")) returned 1 [0291.075] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0291.075] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211ae0 [0291.075] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0291.075] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211ae0 | out: hHeap=0x1f0000) returned 1 [0291.075] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0291.076] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0291.076] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01468_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01468_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0291.079] GetFileType (hFile=0x198) returned 0x1 [0291.079] CloseHandle (hObject=0x198) returned 1 [0291.080] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0291.080] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01468_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01468_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x100fdad1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x100fdad1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e82)) returned 1 [0291.080] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0291.080] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0291.080] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0291.080] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5d0a20, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5d0a20, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5f6d6e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ada, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01470_.WMF", cAlternateFileName="")) returned 1 [0291.080] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0291.080] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0291.080] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0291.081] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0291.081] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0291.081] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0291.081] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01470_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01470_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0291.082] GetFileType (hFile=0x198) returned 0x1 [0291.083] CloseHandle (hObject=0x198) returned 1 [0291.083] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0291.083] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01470_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01470_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5d0a20, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5d0a20, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5f6d6e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ada)) returned 1 [0291.083] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0291.084] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0291.084] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0291.084] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5f6d6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5f6d6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5f6d6e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2028, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01472_.WMF", cAlternateFileName="")) returned 1 [0291.084] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0291.084] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212938 [0291.084] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0291.084] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212938 | out: hHeap=0x1f0000) returned 1 [0291.084] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0291.085] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0291.085] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01472_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01472_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0291.467] GetFileType (hFile=0x198) returned 0x1 [0291.467] CloseHandle (hObject=0x198) returned 1 [0291.467] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0291.468] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01472_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01472_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5f6d6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5f6d6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5f6d6e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2028)) returned 1 [0291.468] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0291.468] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0291.468] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0291.468] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1027b233, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1027b233, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102a14ae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x28ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01473_.WMF", cAlternateFileName="")) returned 1 [0291.468] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0291.468] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2120b8 [0291.468] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0291.468] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2120b8 | out: hHeap=0x1f0000) returned 1 [0291.468] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0291.469] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0291.868] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01473_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01473_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0291.868] GetFileType (hFile=0x19c) returned 0x1 [0291.869] CloseHandle (hObject=0x19c) returned 1 [0291.869] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0291.869] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01473_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01473_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1027b233, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1027b233, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102a14ae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x28ae)) returned 1 [0291.869] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0291.870] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0291.870] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0291.870] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102a14ae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102a14ae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102a14ae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x349c, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01474_.WMF", cAlternateFileName="")) returned 1 [0291.870] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0291.870] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0291.870] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0291.870] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0291.870] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0291.870] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0291.871] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01474_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01474_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0291.871] GetFileType (hFile=0x19c) returned 0x1 [0291.872] CloseHandle (hObject=0x19c) returned 1 [0291.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0291.872] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01474_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01474_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102a14ae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102a14ae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102a14ae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x349c)) returned 1 [0291.872] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0291.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0291.872] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0291.873] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01627_.WMF", cAlternateFileName="")) returned 1 [0291.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0291.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212140 [0291.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0291.873] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212140 | out: hHeap=0x1f0000) returned 1 [0291.873] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0291.873] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0291.874] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01627_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01627_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0291.874] GetFileType (hFile=0x19c) returned 0x1 [0291.874] CloseHandle (hObject=0x19c) returned 1 [0291.875] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0291.875] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01627_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01627_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xce0)) returned 1 [0291.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0291.875] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0291.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0291.875] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf61cf5d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf61cf5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf61cf5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01680_.WMF", cAlternateFileName="")) returned 1 [0291.875] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0291.876] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212250 [0291.876] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0291.876] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212250 | out: hHeap=0x1f0000) returned 1 [0291.876] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0291.876] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0291.877] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01680_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01680_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0291.877] GetFileType (hFile=0x19c) returned 0x1 [0291.877] CloseHandle (hObject=0x19c) returned 1 [0291.877] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0291.878] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01680_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01680_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf61cf5d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf61cf5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf61cf5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb9e)) returned 1 [0291.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0291.878] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0291.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0291.878] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf61cf5d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf61cf5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf61cf5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc88, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01682_.WMF", cAlternateFileName="")) returned 1 [0291.878] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0291.878] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211fa8 [0291.878] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0291.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211fa8 | out: hHeap=0x1f0000) returned 1 [0291.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0291.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0291.879] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01682_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01682_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0291.879] GetFileType (hFile=0x19c) returned 0x1 [0291.880] CloseHandle (hObject=0x19c) returned 1 [0291.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0291.880] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01682_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01682_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf61cf5d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf61cf5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf61cf5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc88)) returned 1 [0291.880] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0291.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0291.880] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0291.880] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5f6d6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5f6d6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf61cf5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01701_.WMF", cAlternateFileName="")) returned 1 [0291.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0291.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2127a0 [0291.881] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0291.881] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2127a0 | out: hHeap=0x1f0000) returned 1 [0291.881] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0291.881] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0291.881] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01701_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01701_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0291.882] GetFileType (hFile=0x19c) returned 0x1 [0291.882] CloseHandle (hObject=0x19c) returned 1 [0291.882] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0291.883] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01701_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01701_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5f6d6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5f6d6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf61cf5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14c4)) returned 1 [0291.883] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0291.883] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0291.884] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0291.884] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5f6d6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5f6d6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5f6d6e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x460, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01848_.WMF", cAlternateFileName="")) returned 1 [0291.884] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0291.884] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2129c0 [0291.884] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0291.884] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2129c0 | out: hHeap=0x1f0000) returned 1 [0291.884] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0291.884] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0291.884] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01848_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01848_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0291.885] GetFileType (hFile=0x19c) returned 0x1 [0291.885] CloseHandle (hObject=0x19c) returned 1 [0291.885] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0291.885] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01848_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01848_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5f6d6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5f6d6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5f6d6e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x460)) returned 1 [0291.885] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0291.885] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0291.886] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0291.886] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf61cf5d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf61cf5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf61cf5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x270, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01849_.WMF", cAlternateFileName="")) returned 1 [0291.886] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609a0 [0291.886] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212030 [0291.886] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0291.886] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212030 | out: hHeap=0x1f0000) returned 1 [0291.886] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0291.886] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0291.886] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01849_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01849_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0291.886] GetFileType (hFile=0x19c) returned 0x1 [0291.887] CloseHandle (hObject=0x19c) returned 1 [0291.887] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0291.887] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01849_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01849_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf61cf5d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf61cf5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf61cf5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x270)) returned 1 [0291.887] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0291.887] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0291.887] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0291.887] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5f6d6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5f6d6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf61cf5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1138, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01852_.WMF", cAlternateFileName="")) returned 1 [0291.887] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0291.887] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212938 [0291.887] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0291.888] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212938 | out: hHeap=0x1f0000) returned 1 [0291.888] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0291.888] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0291.888] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01852_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01852_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0291.888] GetFileType (hFile=0x19c) returned 0x1 [0291.889] CloseHandle (hObject=0x19c) returned 1 [0291.889] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0291.889] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01852_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01852_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5f6d6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5f6d6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf61cf5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1138)) returned 1 [0291.889] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0291.889] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0291.889] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0291.890] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5f6d6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5f6d6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf61cf5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01858_.WMF", cAlternateFileName="")) returned 1 [0291.890] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0291.890] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211b68 [0291.890] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0291.890] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b68 | out: hHeap=0x1f0000) returned 1 [0291.890] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0291.890] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0291.890] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01858_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01858_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0291.891] GetFileType (hFile=0x19c) returned 0x1 [0291.891] CloseHandle (hObject=0x19c) returned 1 [0291.891] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0291.891] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01858_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01858_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5f6d6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5f6d6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf61cf5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10c8)) returned 1 [0291.892] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0291.892] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0291.892] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0291.892] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5f6d6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5f6d6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5f6d6e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01866_.WMF", cAlternateFileName="")) returned 1 [0291.892] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0291.892] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212580 [0291.892] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0291.892] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212580 | out: hHeap=0x1f0000) returned 1 [0291.892] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0291.892] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0291.893] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01866_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01866_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0291.893] GetFileType (hFile=0x19c) returned 0x1 [0291.893] CloseHandle (hObject=0x19c) returned 1 [0291.894] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0291.894] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01866_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01866_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5f6d6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5f6d6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5f6d6e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdb8)) returned 1 [0291.894] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0291.894] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0291.894] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0291.894] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5f6d6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5f6d6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf61cf5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02009_.WMF", cAlternateFileName="")) returned 1 [0291.894] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0291.894] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0291.894] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0291.894] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0291.894] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0291.894] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0291.895] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02009_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02009_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0291.896] GetFileType (hFile=0x19c) returned 0x1 [0291.896] CloseHandle (hObject=0x19c) returned 1 [0291.896] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0291.897] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02009_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02009_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5f6d6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5f6d6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf61cf5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27e0)) returned 1 [0291.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0291.897] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0291.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0291.897] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf68f613, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf68f613, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf68f613, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x918, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02041_.WMF", cAlternateFileName="")) returned 1 [0291.897] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0291.897] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212718 [0291.897] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0291.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212718 | out: hHeap=0x1f0000) returned 1 [0291.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0291.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0291.898] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02041_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02041_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0291.898] GetFileType (hFile=0x19c) returned 0x1 [0291.900] CloseHandle (hObject=0x19c) returned 1 [0291.900] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0291.901] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02041_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02041_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf68f613, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf68f613, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf68f613, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x918)) returned 1 [0291.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0291.901] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0291.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0291.901] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf68f613, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf68f613, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf68f613, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43c, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02066_.WMF", cAlternateFileName="")) returned 1 [0291.901] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0291.901] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0291.901] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0291.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0291.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0291.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0291.902] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02066_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02066_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0292.079] GetFileType (hFile=0x1c0) returned 0x1 [0292.080] CloseHandle (hObject=0x1c0) returned 1 [0292.080] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0292.080] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02066_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02066_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf68f613, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf68f613, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf68f613, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43c)) returned 1 [0292.080] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0292.080] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0292.080] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0292.080] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf66941e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf66941e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf66941e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x474, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02091_.WMF", cAlternateFileName="")) returned 1 [0292.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260838 [0292.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212470 [0292.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0292.081] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212470 | out: hHeap=0x1f0000) returned 1 [0292.081] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0292.081] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260838 | out: hHeap=0x1f0000) returned 1 [0292.151] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02091_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02091_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0292.155] GetFileType (hFile=0x1c0) returned 0x1 [0292.155] CloseHandle (hObject=0x1c0) returned 1 [0292.181] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0292.181] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02091_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02091_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf66941e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf66941e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf66941e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x474)) returned 1 [0292.196] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0292.196] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0292.196] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0292.196] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf66941e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf66941e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf66941e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x66c, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02092_.WMF", cAlternateFileName="")) returned 1 [0292.196] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0292.197] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211bf0 [0292.197] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0292.197] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211bf0 | out: hHeap=0x1f0000) returned 1 [0292.197] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0292.197] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0292.198] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02092_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02092_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0292.198] GetFileType (hFile=0x1c0) returned 0x1 [0292.198] CloseHandle (hObject=0x1c0) returned 1 [0292.199] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0292.199] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02092_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02092_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf66941e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf66941e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf66941e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x66c)) returned 1 [0292.199] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0292.199] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0292.199] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0292.199] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf643165, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf643165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf643165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02093_.WMF", cAlternateFileName="")) returned 1 [0292.199] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0292.199] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211a58 [0292.199] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0292.200] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211a58 | out: hHeap=0x1f0000) returned 1 [0292.200] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0292.200] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0292.200] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02093_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02093_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0292.201] GetFileType (hFile=0x1c0) returned 0x1 [0292.201] CloseHandle (hObject=0x1c0) returned 1 [0292.202] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0292.202] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02093_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02093_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf643165, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf643165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf643165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a0)) returned 1 [0292.202] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0292.202] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0292.202] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0292.202] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf61cf5d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf61cf5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf61cf5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02124_.WMF", cAlternateFileName="")) returned 1 [0292.202] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0292.203] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211bf0 [0292.203] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0292.203] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211bf0 | out: hHeap=0x1f0000) returned 1 [0292.203] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0292.203] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0292.204] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02124_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02124_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0292.204] GetFileType (hFile=0x1c0) returned 0x1 [0292.204] CloseHandle (hObject=0x1c0) returned 1 [0292.205] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0292.205] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02124_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02124_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf61cf5d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf61cf5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf61cf5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fe8)) returned 1 [0292.205] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0292.205] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0292.205] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0292.205] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf643165, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf643165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf643165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4816, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02125_.WMF", cAlternateFileName="")) returned 1 [0292.206] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0292.206] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0292.206] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0292.206] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0292.206] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0292.206] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0292.207] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02125_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02125_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0292.207] GetFileType (hFile=0x1c0) returned 0x1 [0292.207] CloseHandle (hObject=0x1c0) returned 1 [0292.208] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0292.208] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02125_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02125_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf643165, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf643165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf643165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4816)) returned 1 [0292.208] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0292.208] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0292.208] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0292.209] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7c50, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02126_.WMF", cAlternateFileName="")) returned 1 [0292.209] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0292.209] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211bf0 [0292.209] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0292.209] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211bf0 | out: hHeap=0x1f0000) returned 1 [0292.209] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0292.209] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0292.210] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02126_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02126_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0292.210] GetFileType (hFile=0x1c0) returned 0x1 [0292.211] CloseHandle (hObject=0x1c0) returned 1 [0292.211] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0292.211] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02126_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02126_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7c50)) returned 1 [0292.212] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0292.212] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0292.212] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0292.212] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf61cf5d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf61cf5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf61cf5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02127_.WMF", cAlternateFileName="")) returned 1 [0292.212] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609a0 [0292.212] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211ae0 [0292.212] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0292.212] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211ae0 | out: hHeap=0x1f0000) returned 1 [0292.213] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0292.213] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0292.214] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02127_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02127_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0292.215] GetFileType (hFile=0x1c0) returned 0x1 [0292.215] CloseHandle (hObject=0x1c0) returned 1 [0292.215] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0292.216] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02127_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02127_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf61cf5d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf61cf5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf61cf5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfe4)) returned 1 [0292.216] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0292.216] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0292.216] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0292.216] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf61cf5d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf61cf5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf61cf5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd00, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02262_.WMF", cAlternateFileName="")) returned 1 [0292.216] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609a0 [0292.216] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212250 [0292.216] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0292.216] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212250 | out: hHeap=0x1f0000) returned 1 [0292.217] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0292.217] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0292.217] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02262_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02262_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0292.218] GetFileType (hFile=0x1c0) returned 0x1 [0292.219] CloseHandle (hObject=0x1c0) returned 1 [0292.219] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0292.219] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02262_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02262_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf61cf5d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf61cf5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf61cf5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd00)) returned 1 [0292.219] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0292.219] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0292.220] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0292.220] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x100fdad1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x100fdad1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x100fdad1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02264_.WMF", cAlternateFileName="")) returned 1 [0292.220] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0292.220] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0292.220] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0292.220] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0292.220] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0292.220] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0292.221] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02264_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02264_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0292.252] GetFileType (hFile=0x1c0) returned 0x1 [0292.253] CloseHandle (hObject=0x1c0) returned 1 [0292.518] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0292.518] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02264_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02264_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x100fdad1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x100fdad1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x100fdad1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8e0)) returned 1 [0292.518] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0292.518] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0292.518] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0292.518] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe14, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02356_.WMF", cAlternateFileName="")) returned 1 [0292.518] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0292.518] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211f20 [0292.518] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0292.519] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211f20 | out: hHeap=0x1f0000) returned 1 [0292.519] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0292.519] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0292.519] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02356_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02356_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0292.519] GetFileType (hFile=0x1e0) returned 0x1 [0292.520] CloseHandle (hObject=0x1e0) returned 1 [0292.520] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0292.520] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02356_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02356_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe14)) returned 1 [0292.520] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0292.520] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0292.520] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0292.520] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02361_.WMF", cAlternateFileName="")) returned 1 [0292.521] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0292.521] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211f20 [0292.521] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0292.521] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211f20 | out: hHeap=0x1f0000) returned 1 [0292.521] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0292.521] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0292.522] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02361_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02361_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0292.522] GetFileType (hFile=0x1e0) returned 0x1 [0292.522] CloseHandle (hObject=0x1e0) returned 1 [0292.522] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0292.523] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02361_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02361_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17c4)) returned 1 [0292.523] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0292.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0292.523] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0292.523] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd28, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02368_.WMF", cAlternateFileName="")) returned 1 [0292.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0292.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211c78 [0292.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0292.523] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211c78 | out: hHeap=0x1f0000) returned 1 [0292.523] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0292.523] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0292.524] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02368_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02368_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0292.525] GetFileType (hFile=0x1e0) returned 0x1 [0292.525] CloseHandle (hObject=0x1e0) returned 1 [0292.525] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0292.525] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02368_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02368_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd28)) returned 1 [0292.525] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0292.526] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0292.526] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0292.526] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf68f613, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf68f613, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc74, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02371_.WMF", cAlternateFileName="")) returned 1 [0292.526] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0292.526] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2119d0 [0292.526] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0292.526] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2119d0 | out: hHeap=0x1f0000) returned 1 [0292.526] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0292.526] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0292.527] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02371_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02371_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0292.527] GetFileType (hFile=0x1e0) returned 0x1 [0292.527] CloseHandle (hObject=0x1e0) returned 1 [0292.528] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0292.528] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02371_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02371_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf68f613, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf68f613, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc74)) returned 1 [0292.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0292.528] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0292.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0292.528] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf68f613, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf68f613, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf68f613, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcec, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02373_.WMF", cAlternateFileName="")) returned 1 [0292.529] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0292.529] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211b68 [0292.529] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0292.529] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b68 | out: hHeap=0x1f0000) returned 1 [0292.529] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0292.529] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0292.530] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02373_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02373_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0292.530] GetFileType (hFile=0x1e0) returned 0x1 [0292.530] CloseHandle (hObject=0x1e0) returned 1 [0292.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0292.531] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02373_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02373_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf68f613, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf68f613, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf68f613, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcec)) returned 1 [0292.531] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0292.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0292.531] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0292.531] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02384_.WMF", cAlternateFileName="")) returned 1 [0292.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0292.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211b68 [0292.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0292.532] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b68 | out: hHeap=0x1f0000) returned 1 [0292.532] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0292.532] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0292.532] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02384_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02384_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0292.532] GetFileType (hFile=0x1e0) returned 0x1 [0292.533] CloseHandle (hObject=0x1e0) returned 1 [0292.533] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0292.533] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02384_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02384_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbd8)) returned 1 [0292.533] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0292.534] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0292.534] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0292.534] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf68f613, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf68f613, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf68f613, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x948, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02386_.WMF", cAlternateFileName="")) returned 1 [0292.534] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0292.534] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212360 [0292.534] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0292.534] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212360 | out: hHeap=0x1f0000) returned 1 [0292.534] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0292.534] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0292.535] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02386_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02386_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0292.535] GetFileType (hFile=0x1e0) returned 0x1 [0292.535] CloseHandle (hObject=0x1e0) returned 1 [0292.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0292.536] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02386_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02386_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf68f613, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf68f613, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf68f613, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x948)) returned 1 [0292.536] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0292.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0292.536] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0292.536] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc84, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02388_.WMF", cAlternateFileName="")) returned 1 [0292.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0292.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211ae0 [0292.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0292.538] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211ae0 | out: hHeap=0x1f0000) returned 1 [0292.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0292.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0292.540] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02388_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02388_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0292.541] GetFileType (hFile=0x1e0) returned 0x1 [0292.542] CloseHandle (hObject=0x1e0) returned 1 [0292.542] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0292.542] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02388_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02388_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc84)) returned 1 [0292.542] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0292.542] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0292.542] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0292.543] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf68f613, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf68f613, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf68f613, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02389_.WMF", cAlternateFileName="")) returned 1 [0292.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0292.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211b68 [0292.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0292.543] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b68 | out: hHeap=0x1f0000) returned 1 [0292.543] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0292.543] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0292.544] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02389_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02389_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0292.544] GetFileType (hFile=0x1e0) returned 0x1 [0292.545] CloseHandle (hObject=0x1e0) returned 1 [0292.545] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0292.545] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02389_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02389_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf68f613, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf68f613, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf68f613, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb2c)) returned 1 [0292.546] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0292.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0292.546] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0292.546] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe64, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02390_.WMF", cAlternateFileName="")) returned 1 [0292.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0292.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2123e8 [0292.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0292.546] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2123e8 | out: hHeap=0x1f0000) returned 1 [0292.546] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0292.546] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0292.546] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02390_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02390_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0292.548] GetFileType (hFile=0x1e0) returned 0x1 [0292.548] CloseHandle (hObject=0x1e0) returned 1 [0292.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0292.549] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02390_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02390_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe64)) returned 1 [0292.549] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0292.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0292.549] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0292.549] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e98, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02398_.WMF", cAlternateFileName="")) returned 1 [0292.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0292.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2120b8 [0292.550] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0292.550] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2120b8 | out: hHeap=0x1f0000) returned 1 [0292.550] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0292.550] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0292.551] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02398_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02398_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0292.753] GetFileType (hFile=0x1c0) returned 0x1 [0292.753] CloseHandle (hObject=0x1c0) returned 1 [0292.753] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0292.753] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02398_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02398_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e98)) returned 1 [0292.753] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0292.753] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0292.754] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0292.754] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd24, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02400_.WMF", cAlternateFileName="")) returned 1 [0292.754] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0292.754] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212140 [0292.754] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0292.754] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212140 | out: hHeap=0x1f0000) returned 1 [0292.754] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0292.754] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0293.035] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02400_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02400_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0293.036] GetFileType (hFile=0x1c0) returned 0x1 [0293.037] CloseHandle (hObject=0x1c0) returned 1 [0293.037] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0293.037] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02400_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02400_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd24)) returned 1 [0293.037] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0293.037] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0293.038] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0293.038] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2120, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02404_.WMF", cAlternateFileName="")) returned 1 [0293.038] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0293.038] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0293.038] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0293.038] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0293.038] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0293.038] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0293.039] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02404_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02404_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0293.047] GetFileType (hFile=0x1c0) returned 0x1 [0293.048] CloseHandle (hObject=0x1c0) returned 1 [0293.049] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0293.049] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02404_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02404_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2120)) returned 1 [0293.049] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0293.049] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0293.050] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0293.050] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5080, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02405_.WMF", cAlternateFileName="")) returned 1 [0293.050] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0293.050] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211b68 [0293.050] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0293.050] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b68 | out: hHeap=0x1f0000) returned 1 [0293.050] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0293.050] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0293.051] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02405_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02405_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0293.051] GetFileType (hFile=0x1c0) returned 0x1 [0293.052] CloseHandle (hObject=0x1c0) returned 1 [0293.052] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0293.052] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02405_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02405_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5080)) returned 1 [0293.052] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0293.053] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0293.053] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0293.053] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02407_.WMF", cAlternateFileName="")) returned 1 [0293.053] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260518 [0293.053] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212250 [0293.053] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0293.053] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212250 | out: hHeap=0x1f0000) returned 1 [0293.053] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0293.053] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0293.054] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02407_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02407_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0293.062] GetFileType (hFile=0x1c0) returned 0x1 [0293.062] CloseHandle (hObject=0x1c0) returned 1 [0293.063] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0293.063] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02407_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02407_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fc8)) returned 1 [0293.063] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0293.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0293.064] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0293.064] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x28ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02413_.WMF", cAlternateFileName="")) returned 1 [0293.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0293.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2123e8 [0293.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0293.064] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2123e8 | out: hHeap=0x1f0000) returned 1 [0293.064] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0293.064] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0293.065] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02413_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02413_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0293.065] GetFileType (hFile=0x1c0) returned 0x1 [0293.066] CloseHandle (hObject=0x1c0) returned 1 [0293.066] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0293.066] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02413_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02413_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x28ec)) returned 1 [0293.066] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0293.066] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0293.066] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0293.066] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb24, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02417_.WMF", cAlternateFileName="")) returned 1 [0293.066] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0293.067] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211e10 [0293.067] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0293.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e10 | out: hHeap=0x1f0000) returned 1 [0293.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0293.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0293.067] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02417_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02417_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0293.068] GetFileType (hFile=0x1c0) returned 0x1 [0293.068] CloseHandle (hObject=0x1c0) returned 1 [0293.068] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0293.069] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02417_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02417_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb24)) returned 1 [0293.069] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0293.069] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0293.069] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0293.069] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2fb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02423_.WMF", cAlternateFileName="")) returned 1 [0293.069] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0293.069] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2120b8 [0293.069] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0293.069] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2120b8 | out: hHeap=0x1f0000) returned 1 [0293.069] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0293.069] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0293.070] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02423_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02423_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0293.080] GetFileType (hFile=0x1c0) returned 0x1 [0293.080] CloseHandle (hObject=0x1c0) returned 1 [0293.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0293.081] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02423_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02423_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2fb8)) returned 1 [0293.082] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0293.082] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0293.082] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0293.082] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x53c, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02424_.WMF", cAlternateFileName="")) returned 1 [0293.082] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0293.082] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0293.082] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0293.082] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0293.082] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0293.083] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0293.083] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02424_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02424_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0293.084] GetFileType (hFile=0x1c0) returned 0x1 [0293.084] CloseHandle (hObject=0x1c0) returned 1 [0293.085] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0293.085] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02424_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02424_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x53c)) returned 1 [0293.085] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0293.085] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0293.085] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0293.085] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1948, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02426_.WMF", cAlternateFileName="")) returned 1 [0293.085] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0293.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2123e8 [0293.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0293.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2123e8 | out: hHeap=0x1f0000) returned 1 [0293.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0293.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0293.087] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02426_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02426_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0293.099] GetFileType (hFile=0x1c0) returned 0x1 [0293.099] CloseHandle (hObject=0x1c0) returned 1 [0293.317] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0293.317] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02426_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02426_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1948)) returned 1 [0293.317] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0293.317] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0293.317] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0293.317] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02431_.WMF", cAlternateFileName="")) returned 1 [0293.318] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0293.318] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212360 [0293.318] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0293.318] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212360 | out: hHeap=0x1f0000) returned 1 [0293.318] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0293.318] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0293.319] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02431_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02431_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0293.319] GetFileType (hFile=0x1e0) returned 0x1 [0293.320] CloseHandle (hObject=0x1e0) returned 1 [0293.320] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0293.320] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02431_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02431_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c2c)) returned 1 [0293.320] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0293.320] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0293.320] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0293.320] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xff8, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02435_.WMF", cAlternateFileName="")) returned 1 [0293.320] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0293.320] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212828 [0293.321] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0293.321] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212828 | out: hHeap=0x1f0000) returned 1 [0293.321] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0293.321] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0293.321] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02435_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02435_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0293.322] GetFileType (hFile=0x1e0) returned 0x1 [0293.323] CloseHandle (hObject=0x1e0) returned 1 [0293.323] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0293.323] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02435_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02435_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xff8)) returned 1 [0293.323] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0293.323] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0293.324] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0293.324] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1434, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02439_.WMF", cAlternateFileName="")) returned 1 [0293.324] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0293.324] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212140 [0293.324] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0293.325] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212140 | out: hHeap=0x1f0000) returned 1 [0293.325] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0293.325] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0293.325] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02439_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02439_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0293.326] GetFileType (hFile=0x1e0) returned 0x1 [0293.326] CloseHandle (hObject=0x1e0) returned 1 [0293.326] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0293.326] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02439_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02439_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1434)) returned 1 [0293.327] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0293.327] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0293.327] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0293.327] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3218, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02441_.WMF", cAlternateFileName="")) returned 1 [0293.327] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0293.327] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2119d0 [0293.327] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0293.327] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2119d0 | out: hHeap=0x1f0000) returned 1 [0293.327] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0293.327] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0293.328] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02441_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02441_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0293.329] GetFileType (hFile=0x1e0) returned 0x1 [0293.330] CloseHandle (hObject=0x1e0) returned 1 [0293.330] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0293.330] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02441_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02441_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3218)) returned 1 [0293.330] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0293.330] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0293.330] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0293.330] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x55c, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02443_.WMF", cAlternateFileName="")) returned 1 [0293.330] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0293.330] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0293.330] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0293.331] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0293.331] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0293.331] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0293.331] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02443_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02443_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0293.332] GetFileType (hFile=0x1e0) returned 0x1 [0293.333] CloseHandle (hObject=0x1e0) returned 1 [0293.333] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0293.333] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02443_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02443_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x55c)) returned 1 [0293.333] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0293.333] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0293.333] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0293.333] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x88c, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02444_.WMF", cAlternateFileName="")) returned 1 [0293.334] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0293.334] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211ae0 [0293.334] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0293.334] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211ae0 | out: hHeap=0x1f0000) returned 1 [0293.334] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0293.334] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0293.334] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02444_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02444_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0293.335] GetFileType (hFile=0x1e0) returned 0x1 [0293.335] CloseHandle (hObject=0x1e0) returned 1 [0293.336] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0293.336] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02444_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02444_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x88c)) returned 1 [0293.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0293.336] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0293.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0293.336] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa34, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02446_.WMF", cAlternateFileName="")) returned 1 [0293.336] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609a0 [0293.336] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212360 [0293.336] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0293.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212360 | out: hHeap=0x1f0000) returned 1 [0293.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0293.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0293.337] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02446_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02446_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0293.338] GetFileType (hFile=0x1e0) returned 0x1 [0293.339] CloseHandle (hObject=0x1e0) returned 1 [0293.339] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0293.339] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02446_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02446_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa34)) returned 1 [0293.340] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0293.340] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0293.340] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0293.340] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02448_.WMF", cAlternateFileName="")) returned 1 [0293.340] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0293.340] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212828 [0293.340] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0293.340] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212828 | out: hHeap=0x1f0000) returned 1 [0293.340] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0293.341] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0293.341] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02448_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02448_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0293.341] GetFileType (hFile=0x1e0) returned 0x1 [0293.342] CloseHandle (hObject=0x1e0) returned 1 [0293.342] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0293.342] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02448_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02448_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8a0)) returned 1 [0293.342] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0293.342] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0293.342] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0293.343] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc28, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02450_.WMF", cAlternateFileName="")) returned 1 [0293.343] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0293.343] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2129c0 [0293.343] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0293.343] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2129c0 | out: hHeap=0x1f0000) returned 1 [0293.343] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0293.343] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0293.343] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02450_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02450_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0293.344] GetFileType (hFile=0x1e0) returned 0x1 [0293.344] CloseHandle (hObject=0x1e0) returned 1 [0293.344] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0293.344] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02450_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02450_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc28)) returned 1 [0293.344] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0293.344] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0293.344] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0293.344] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf74e1ae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf74e1ae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf74e1ae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd70, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02451_.WMF", cAlternateFileName="")) returned 1 [0293.344] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0293.344] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211ae0 [0293.344] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0293.344] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211ae0 | out: hHeap=0x1f0000) returned 1 [0293.344] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0293.344] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0293.345] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02451_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02451_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0293.346] GetFileType (hFile=0x1e0) returned 0x1 [0293.346] CloseHandle (hObject=0x1e0) returned 1 [0293.346] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0293.346] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02451_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02451_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf74e1ae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf74e1ae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf74e1ae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd70)) returned 1 [0293.347] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0293.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0293.347] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0293.347] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf701d25, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf701d25, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf701d25, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02453_.WMF", cAlternateFileName="")) returned 1 [0293.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0293.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211a58 [0293.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0293.347] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211a58 | out: hHeap=0x1f0000) returned 1 [0293.347] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0293.347] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0293.347] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02453_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02453_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0293.350] GetFileType (hFile=0x1e0) returned 0x1 [0293.350] CloseHandle (hObject=0x1e0) returned 1 [0293.350] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0293.350] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02453_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02453_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf701d25, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf701d25, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf701d25, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd3c)) returned 1 [0293.350] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0293.350] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0293.350] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0293.351] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf701d25, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf701d25, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf701d25, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1750, dwReserved0=0x0, dwReserved1=0x0, cFileName="NBOOK_01.MID", cAlternateFileName="")) returned 1 [0293.351] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0293.351] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212828 [0293.351] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0293.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212828 | out: hHeap=0x1f0000) returned 1 [0293.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0293.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0293.351] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NBOOK_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\nbook_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0293.975] GetFileType (hFile=0x1b0) returned 0x1 [0293.975] CloseHandle (hObject=0x1b0) returned 1 [0293.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0293.976] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NBOOK_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\nbook_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf701d25, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf701d25, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf701d25, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1750)) returned 1 [0293.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0293.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0293.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0293.976] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf701d25, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1540, dwReserved0=0x0, dwReserved1=0x0, cFileName="OCEAN_01.MID", cAlternateFileName="")) returned 1 [0293.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0293.977] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211ae0 [0293.977] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0293.977] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211ae0 | out: hHeap=0x1f0000) returned 1 [0293.977] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0293.977] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0293.977] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OCEAN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ocean_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0293.978] GetFileType (hFile=0x1b0) returned 0x1 [0293.978] CloseHandle (hObject=0x1b0) returned 1 [0293.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0293.978] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OCEAN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ocean_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf701d25, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1540)) returned 1 [0293.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0293.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0293.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0293.979] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTDR_01.MID", cAlternateFileName="")) returned 1 [0293.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0293.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212718 [0293.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0293.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212718 | out: hHeap=0x1f0000) returned 1 [0293.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0293.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0293.981] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OUTDR_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\outdr_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0293.981] GetFileType (hFile=0x1b0) returned 0x1 [0293.981] CloseHandle (hObject=0x1b0) returned 1 [0293.981] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0293.982] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OUTDR_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\outdr_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19f4)) returned 1 [0293.982] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0293.982] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0293.982] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0293.982] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PAPER_01.MID", cAlternateFileName="")) returned 1 [0293.982] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0293.982] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211fa8 [0293.982] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0293.982] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211fa8 | out: hHeap=0x1f0000) returned 1 [0293.982] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0293.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0293.983] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PAPER_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\paper_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0293.983] GetFileType (hFile=0x1b0) returned 0x1 [0293.984] CloseHandle (hObject=0x1b0) returned 1 [0293.984] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0293.984] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PAPER_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\paper_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a6b)) returned 1 [0293.984] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0293.984] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0293.984] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0293.984] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x195b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PARNT_01.MID", cAlternateFileName="")) returned 1 [0293.984] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0293.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211bf0 [0293.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0293.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211bf0 | out: hHeap=0x1f0000) returned 1 [0293.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0293.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0293.985] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0293.986] GetFileType (hFile=0x1b0) returned 0x1 [0293.986] CloseHandle (hObject=0x1b0) returned 1 [0293.986] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0293.986] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x195b)) returned 1 [0293.987] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0293.987] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0293.987] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0293.987] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1652, dwReserved0=0x0, dwReserved1=0x0, cFileName="PARNT_02.MID", cAlternateFileName="")) returned 1 [0293.987] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0293.987] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d00 [0293.987] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0293.987] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d00 | out: hHeap=0x1f0000) returned 1 [0293.987] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0293.987] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0293.988] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_02.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_02.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0293.988] GetFileType (hFile=0x1b0) returned 0x1 [0293.988] CloseHandle (hObject=0x1b0) returned 1 [0293.989] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0293.989] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_02.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_02.mid"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1652)) returned 1 [0293.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0293.989] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0293.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0293.989] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x215a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PARNT_03.MID", cAlternateFileName="")) returned 1 [0293.989] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260770 [0293.989] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212828 [0293.989] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0293.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212828 | out: hHeap=0x1f0000) returned 1 [0293.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0293.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0293.990] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_03.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_03.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0293.991] GetFileType (hFile=0x1b0) returned 0x1 [0293.991] CloseHandle (hObject=0x1b0) returned 1 [0293.991] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0293.991] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_03.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_03.mid"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x215a)) returned 1 [0293.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0293.992] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0293.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0293.992] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="PARNT_04.MID", cAlternateFileName="")) returned 1 [0293.992] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0293.992] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212140 [0293.992] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0293.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212140 | out: hHeap=0x1f0000) returned 1 [0293.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0293.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0293.993] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_04.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_04.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0293.993] GetFileType (hFile=0x1b0) returned 0x1 [0293.994] CloseHandle (hObject=0x1b0) returned 1 [0293.994] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0293.994] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_04.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_04.mid"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17b6)) returned 1 [0293.994] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0293.994] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0293.994] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0293.994] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x100fdad1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x100fdad1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10149fbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1784, dwReserved0=0x0, dwReserved1=0x0, cFileName="PARNT_05.MID", cAlternateFileName="")) returned 1 [0293.994] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260518 [0293.995] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2122d8 [0293.995] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0293.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2122d8 | out: hHeap=0x1f0000) returned 1 [0293.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0293.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0293.995] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_05.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_05.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0294.252] GetFileType (hFile=0x1c0) returned 0x1 [0294.253] CloseHandle (hObject=0x1c0) returned 1 [0294.253] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0294.253] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_05.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_05.mid"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x100fdad1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x100fdad1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10149fbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1784)) returned 1 [0294.253] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0294.253] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0294.254] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0294.254] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x100fdad1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x100fdad1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e58, dwReserved0=0x0, dwReserved1=0x0, cFileName="PARNT_06.MID", cAlternateFileName="")) returned 1 [0294.254] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0294.254] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d00 [0294.254] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0294.254] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d00 | out: hHeap=0x1f0000) returned 1 [0294.254] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0294.254] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0294.255] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_06.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_06.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0294.255] GetFileType (hFile=0x1c0) returned 0x1 [0294.255] CloseHandle (hObject=0x1c0) returned 1 [0294.256] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0294.256] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_06.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_06.mid"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x100fdad1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x100fdad1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e58)) returned 1 [0294.256] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0294.256] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0294.256] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0294.256] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x100fdad1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x100fdad1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PARNT_07.MID", cAlternateFileName="")) returned 1 [0294.257] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260888 [0294.257] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212828 [0294.257] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0294.257] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212828 | out: hHeap=0x1f0000) returned 1 [0294.257] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0294.257] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0294.258] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_07.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_07.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0294.258] GetFileType (hFile=0x1c0) returned 0x1 [0294.258] CloseHandle (hObject=0x1c0) returned 1 [0294.259] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0294.259] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_07.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_07.mid"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x100fdad1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x100fdad1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19a4)) returned 1 [0294.259] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0294.259] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0294.259] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0294.259] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x100fdad1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x100fdad1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x100fdad1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1cb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="PARNT_08.MID", cAlternateFileName="")) returned 1 [0294.259] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0294.259] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2129c0 [0294.259] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0294.260] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2129c0 | out: hHeap=0x1f0000) returned 1 [0294.260] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0294.260] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0294.260] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_08.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_08.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0294.260] GetFileType (hFile=0x1c0) returned 0x1 [0294.261] CloseHandle (hObject=0x1c0) returned 1 [0294.261] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0294.261] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_08.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_08.mid"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x100fdad1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x100fdad1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x100fdad1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1cb3)) returned 1 [0294.261] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0294.261] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0294.262] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0294.262] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x100fdad1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x100fdad1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10149fbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PARNT_09.MID", cAlternateFileName="")) returned 1 [0294.262] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0294.262] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2119d0 [0294.262] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0294.262] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2119d0 | out: hHeap=0x1f0000) returned 1 [0294.262] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0294.262] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0294.263] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_09.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_09.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0294.263] GetFileType (hFile=0x1c0) returned 0x1 [0294.263] CloseHandle (hObject=0x1c0) returned 1 [0294.264] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0294.264] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_09.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_09.mid"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x100fdad1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x100fdad1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10149fbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a6c)) returned 1 [0294.264] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0294.264] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0294.264] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0294.264] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf74e1ae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf74e1ae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x100fdad1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1511, dwReserved0=0x0, dwReserved1=0x0, cFileName="PARNT_10.MID", cAlternateFileName="")) returned 1 [0294.264] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0294.264] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211bf0 [0294.264] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0294.264] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211bf0 | out: hHeap=0x1f0000) returned 1 [0294.264] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0294.265] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0294.265] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_10.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_10.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0294.265] GetFileType (hFile=0x1c0) returned 0x1 [0294.265] CloseHandle (hObject=0x1c0) returned 1 [0294.266] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0294.266] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_10.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_10.mid"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf74e1ae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf74e1ae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x100fdad1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1511)) returned 1 [0294.266] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0294.266] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0294.266] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0294.266] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x100fdad1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x100fdad1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x100fdad1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6140, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00013_.WMF", cAlternateFileName="")) returned 1 [0294.267] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0294.267] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212828 [0294.267] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0294.267] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212828 | out: hHeap=0x1f0000) returned 1 [0294.268] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0294.268] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0294.268] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00013_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00013_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0294.269] GetFileType (hFile=0x1c0) returned 0x1 [0294.269] CloseHandle (hObject=0x1c0) returned 1 [0294.270] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0294.270] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00013_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00013_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x100fdad1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x100fdad1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x100fdad1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6140)) returned 1 [0294.270] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0294.270] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0294.270] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0294.270] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x100fdad1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x100fdad1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x100fdad1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x411a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00014_.WMF", cAlternateFileName="")) returned 1 [0294.271] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0294.271] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212938 [0294.271] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0294.271] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212938 | out: hHeap=0x1f0000) returned 1 [0294.271] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0294.271] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0294.272] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00014_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00014_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0294.272] GetFileType (hFile=0x1c0) returned 0x1 [0294.273] CloseHandle (hObject=0x1c0) returned 1 [0294.273] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0294.273] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00014_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00014_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x100fdad1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x100fdad1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x100fdad1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x411a)) returned 1 [0294.274] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0294.274] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0294.274] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0294.274] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x100fdad1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x100fdad1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x100fdad1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00034_.WMF", cAlternateFileName="")) returned 1 [0294.274] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0294.274] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0294.274] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0294.274] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0294.274] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0294.274] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0294.275] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00034_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00034_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0294.276] GetFileType (hFile=0x1c0) returned 0x1 [0294.276] CloseHandle (hObject=0x1c0) returned 1 [0294.277] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0294.277] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00034_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00034_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x100fdad1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x100fdad1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x100fdad1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d5c)) returned 1 [0294.277] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0294.277] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0294.278] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0294.278] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1003f0d3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1003f0d3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x100fdad1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00049_.WMF", cAlternateFileName="")) returned 1 [0294.278] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0294.278] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211a58 [0294.278] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0294.278] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211a58 | out: hHeap=0x1f0000) returned 1 [0294.278] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0294.278] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0294.279] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00049_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00049_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0294.280] GetFileType (hFile=0x1c0) returned 0x1 [0294.280] CloseHandle (hObject=0x1c0) returned 1 [0294.281] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0294.281] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00049_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00049_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1003f0d3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1003f0d3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x100fdad1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1 [0294.281] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0294.281] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0294.281] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0294.281] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4d18, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00050_.WMF", cAlternateFileName="")) returned 1 [0294.281] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260770 [0294.282] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212360 [0294.282] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0294.282] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212360 | out: hHeap=0x1f0000) returned 1 [0294.282] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0294.282] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0294.283] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00050_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00050_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0294.285] GetFileType (hFile=0x1c0) returned 0x1 [0294.286] CloseHandle (hObject=0x1c0) returned 1 [0294.286] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0294.286] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00050_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00050_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4d18)) returned 1 [0294.286] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0294.286] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0294.287] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0294.287] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x47ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00052_.WMF", cAlternateFileName="")) returned 1 [0294.287] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0294.287] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211bf0 [0294.287] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0294.287] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211bf0 | out: hHeap=0x1f0000) returned 1 [0294.287] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0294.287] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0294.288] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00052_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00052_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0294.288] GetFileType (hFile=0x1c0) returned 0x1 [0294.289] CloseHandle (hObject=0x1c0) returned 1 [0294.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0294.289] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00052_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00052_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x47ec)) returned 1 [0294.289] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0294.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0294.290] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0294.290] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00231_.WMF", cAlternateFileName="")) returned 1 [0294.290] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0294.290] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2119d0 [0294.290] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0294.290] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2119d0 | out: hHeap=0x1f0000) returned 1 [0294.290] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0294.290] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0294.291] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00231_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00231_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0294.675] GetFileType (hFile=0x198) returned 0x1 [0294.676] CloseHandle (hObject=0x198) returned 1 [0294.676] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0294.676] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00231_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00231_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b4)) returned 1 [0294.676] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0294.676] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0294.676] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0294.676] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaf4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00272_.WMF", cAlternateFileName="")) returned 1 [0294.677] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0294.677] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d00 [0294.677] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0294.677] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d00 | out: hHeap=0x1f0000) returned 1 [0294.677] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0294.677] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0294.677] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00272_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00272_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0294.677] GetFileType (hFile=0x198) returned 0x1 [0294.678] CloseHandle (hObject=0x198) returned 1 [0294.678] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0294.678] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00272_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00272_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaf4)) returned 1 [0294.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0294.678] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0294.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0294.678] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5aa4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00468_.WMF", cAlternateFileName="")) returned 1 [0294.679] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0294.679] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2123e8 [0294.679] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0294.679] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2123e8 | out: hHeap=0x1f0000) returned 1 [0294.679] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0294.679] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0294.679] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00468_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00468_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0294.680] GetFileType (hFile=0x198) returned 0x1 [0294.680] CloseHandle (hObject=0x198) returned 1 [0294.680] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0294.680] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00468_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00468_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5aa4)) returned 1 [0294.680] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0294.680] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0294.680] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0294.681] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10149fbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1cf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00478_.WMF", cAlternateFileName="")) returned 1 [0294.681] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0294.681] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212470 [0294.681] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0294.681] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212470 | out: hHeap=0x1f0000) returned 1 [0294.681] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0294.681] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0294.682] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00478_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00478_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0294.682] GetFileType (hFile=0x198) returned 0x1 [0294.682] CloseHandle (hObject=0x198) returned 1 [0294.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0294.683] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00478_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00478_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10149fbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1cf8)) returned 1 [0294.683] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0294.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0294.683] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0294.683] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4124, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00485_.WMF", cAlternateFileName="")) returned 1 [0294.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260518 [0294.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2122d8 [0294.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0294.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2122d8 | out: hHeap=0x1f0000) returned 1 [0294.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0294.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0294.684] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00485_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00485_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0294.685] GetFileType (hFile=0x198) returned 0x1 [0294.685] CloseHandle (hObject=0x198) returned 1 [0294.685] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0294.686] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00485_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00485_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4124)) returned 1 [0294.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0294.686] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0294.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0294.686] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1402c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00489_.WMF", cAlternateFileName="")) returned 1 [0294.686] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260838 [0294.686] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212030 [0294.686] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0294.687] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212030 | out: hHeap=0x1f0000) returned 1 [0294.687] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0294.687] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260838 | out: hHeap=0x1f0000) returned 1 [0294.687] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00489_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00489_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0294.688] GetFileType (hFile=0x198) returned 0x1 [0294.688] CloseHandle (hObject=0x198) returned 1 [0294.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0294.688] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00489_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00489_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1402c)) returned 1 [0294.689] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0294.689] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0294.689] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0294.689] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ee4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00531_.WMF", cAlternateFileName="")) returned 1 [0294.689] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0294.690] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2129c0 [0294.690] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0294.690] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2129c0 | out: hHeap=0x1f0000) returned 1 [0294.690] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0294.690] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0294.691] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00531_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00531_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0294.691] GetFileType (hFile=0x198) returned 0x1 [0294.691] CloseHandle (hObject=0x198) returned 1 [0294.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0294.692] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00531_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00531_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ee4)) returned 1 [0294.692] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0294.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0294.692] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0294.692] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00542_.WMF", cAlternateFileName="")) returned 1 [0294.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0294.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212360 [0294.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0294.693] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212360 | out: hHeap=0x1f0000) returned 1 [0294.693] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0294.693] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0294.693] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00542_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00542_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0294.694] GetFileType (hFile=0x198) returned 0x1 [0294.694] CloseHandle (hObject=0x198) returned 1 [0294.694] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0294.694] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00542_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00542_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8da8)) returned 1 [0294.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0294.695] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0294.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0294.695] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10149fbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x140c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00555_.WMF", cAlternateFileName="")) returned 1 [0294.695] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0294.695] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211b68 [0294.695] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0294.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b68 | out: hHeap=0x1f0000) returned 1 [0294.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0294.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0294.696] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00555_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00555_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0295.050] GetFileType (hFile=0x1ac) returned 0x1 [0295.051] CloseHandle (hObject=0x1ac) returned 1 [0295.051] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0295.051] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00555_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00555_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10149fbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x140c)) returned 1 [0295.052] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0295.052] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0295.052] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0295.052] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x26b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00559_.WMF", cAlternateFileName="")) returned 1 [0295.052] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0295.052] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212470 [0295.053] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0295.053] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212470 | out: hHeap=0x1f0000) returned 1 [0295.053] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0295.053] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0295.054] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00559_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00559_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0295.056] GetFileType (hFile=0x1ac) returned 0x1 [0295.056] CloseHandle (hObject=0x1ac) returned 1 [0295.057] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0295.057] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00559_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00559_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x26b0)) returned 1 [0295.057] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0295.057] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0295.057] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0295.058] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5670, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00563_.WMF", cAlternateFileName="")) returned 1 [0295.058] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605b8 [0295.058] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2120b8 [0295.058] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0295.058] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2120b8 | out: hHeap=0x1f0000) returned 1 [0295.058] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0295.058] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0295.059] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00563_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00563_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0295.061] GetFileType (hFile=0x1ac) returned 0x1 [0295.061] CloseHandle (hObject=0x1ac) returned 1 [0295.062] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0295.062] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00563_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00563_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5670)) returned 1 [0295.062] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0295.062] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0295.062] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0295.062] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ae6, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00578_.WMF", cAlternateFileName="")) returned 1 [0295.063] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0295.063] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0295.063] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0295.063] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0295.063] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0295.063] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0295.064] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00578_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00578_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0295.065] GetFileType (hFile=0x1ac) returned 0x1 [0295.066] CloseHandle (hObject=0x1ac) returned 1 [0295.066] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0295.067] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00578_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00578_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ae6)) returned 1 [0295.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0295.067] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0295.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0295.067] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1928, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00608_.WMF", cAlternateFileName="")) returned 1 [0295.067] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0295.067] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212030 [0295.067] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0295.068] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212030 | out: hHeap=0x1f0000) returned 1 [0295.068] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0295.068] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0295.068] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00608_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00608_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0295.070] GetFileType (hFile=0x1ac) returned 0x1 [0295.070] CloseHandle (hObject=0x1ac) returned 1 [0295.071] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0295.071] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00608_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00608_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1928)) returned 1 [0295.071] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0295.071] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0295.071] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0295.072] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4cea, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00633_.WMF", cAlternateFileName="")) returned 1 [0295.072] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0295.072] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2124f8 [0295.072] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0295.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2124f8 | out: hHeap=0x1f0000) returned 1 [0295.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0295.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0295.073] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00633_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00633_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0295.074] GetFileType (hFile=0x1ac) returned 0x1 [0295.074] CloseHandle (hObject=0x1ac) returned 1 [0295.075] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0295.075] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00633_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00633_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4cea)) returned 1 [0295.075] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0295.075] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0295.075] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0295.075] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb12c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00640_.WMF", cAlternateFileName="")) returned 1 [0295.075] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0295.075] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2123e8 [0295.076] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0295.076] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2123e8 | out: hHeap=0x1f0000) returned 1 [0295.076] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0295.076] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0295.077] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00640_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00640_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0295.077] GetFileType (hFile=0x1ac) returned 0x1 [0295.078] CloseHandle (hObject=0x1ac) returned 1 [0295.078] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0295.078] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00640_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00640_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb12c)) returned 1 [0295.078] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0295.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0295.079] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0295.079] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10149fbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6028, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00668_.WMF", cAlternateFileName="")) returned 1 [0295.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0295.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212140 [0295.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0295.079] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212140 | out: hHeap=0x1f0000) returned 1 [0295.079] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0295.080] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0295.080] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00668_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00668_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0295.081] GetFileType (hFile=0x1ac) returned 0x1 [0295.081] CloseHandle (hObject=0x1ac) returned 1 [0295.082] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0295.082] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00668_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00668_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10149fbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6028)) returned 1 [0295.082] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0295.082] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0295.082] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0295.082] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x108a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00685_.WMF", cAlternateFileName="")) returned 1 [0295.082] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0295.083] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212718 [0295.083] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0295.083] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212718 | out: hHeap=0x1f0000) returned 1 [0295.083] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0295.083] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0295.084] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00685_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00685_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0295.085] GetFileType (hFile=0x1ac) returned 0x1 [0295.085] CloseHandle (hObject=0x1ac) returned 1 [0295.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0295.086] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00685_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00685_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x108a)) returned 1 [0295.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0295.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0295.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0295.086] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x112e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00686_.WMF", cAlternateFileName="")) returned 1 [0295.087] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0295.087] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212938 [0295.087] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0295.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212938 | out: hHeap=0x1f0000) returned 1 [0295.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0295.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0295.088] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00686_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00686_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0295.088] GetFileType (hFile=0x1ac) returned 0x1 [0295.089] CloseHandle (hObject=0x1ac) returned 1 [0295.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0295.089] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00686_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00686_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x112e)) returned 1 [0295.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0295.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0295.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0295.090] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1138, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00693_.WMF", cAlternateFileName="")) returned 1 [0295.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0295.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212140 [0295.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0295.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212140 | out: hHeap=0x1f0000) returned 1 [0295.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0295.091] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0295.091] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00693_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00693_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0296.002] GetFileType (hFile=0x1c0) returned 0x1 [0296.003] CloseHandle (hObject=0x1c0) returned 1 [0296.003] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0296.003] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00693_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00693_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1138)) returned 1 [0296.003] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0296.004] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0296.004] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0296.004] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3926, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00720_.WMF", cAlternateFileName="")) returned 1 [0296.004] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0296.004] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2129c0 [0296.004] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0296.004] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2129c0 | out: hHeap=0x1f0000) returned 1 [0296.004] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0296.004] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0296.005] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00720_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00720_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0296.005] GetFileType (hFile=0x1c0) returned 0x1 [0296.006] CloseHandle (hObject=0x1c0) returned 1 [0296.006] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0296.006] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00720_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00720_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3926)) returned 1 [0296.007] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0296.007] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0296.007] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0296.007] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10149fbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1afc, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00723_.WMF", cAlternateFileName="")) returned 1 [0296.007] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0296.007] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2129c0 [0296.007] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0296.007] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2129c0 | out: hHeap=0x1f0000) returned 1 [0296.007] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0296.008] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0296.008] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00723_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00723_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0296.008] GetFileType (hFile=0x1c0) returned 0x1 [0296.009] CloseHandle (hObject=0x1c0) returned 1 [0296.009] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0296.009] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00723_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00723_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10149fbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1afc)) returned 1 [0296.010] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0296.010] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0296.010] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0296.010] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10149fbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb1a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00726_.WMF", cAlternateFileName="")) returned 1 [0296.010] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0296.010] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d88 [0296.010] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0296.010] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d88 | out: hHeap=0x1f0000) returned 1 [0296.010] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0296.011] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0296.011] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00726_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00726_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0296.011] GetFileType (hFile=0x1c0) returned 0x1 [0296.012] CloseHandle (hObject=0x1c0) returned 1 [0296.012] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0296.012] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00726_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00726_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10149fbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb1a4)) returned 1 [0296.013] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0296.013] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0296.013] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0296.013] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10149fbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9e2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00737_.WMF", cAlternateFileName="")) returned 1 [0296.013] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0296.013] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211a58 [0296.013] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0296.013] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211a58 | out: hHeap=0x1f0000) returned 1 [0296.013] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0296.013] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0296.014] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00737_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00737_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0296.014] GetFileType (hFile=0x1c0) returned 0x1 [0296.015] CloseHandle (hObject=0x1c0) returned 1 [0296.015] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0296.015] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00737_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00737_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10149fbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9e2c)) returned 1 [0296.015] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0296.015] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0296.015] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0296.016] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10149fbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ca0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00833_.WMF", cAlternateFileName="")) returned 1 [0296.016] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0296.016] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211b68 [0296.016] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0296.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b68 | out: hHeap=0x1f0000) returned 1 [0296.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0296.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0296.017] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00833_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00833_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0296.018] GetFileType (hFile=0x1c0) returned 0x1 [0296.018] CloseHandle (hObject=0x1c0) returned 1 [0296.018] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0296.018] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00833_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00833_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10149fbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ca0)) returned 1 [0296.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0296.019] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0296.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0296.019] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1908, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00898_.WMF", cAlternateFileName="")) returned 1 [0296.019] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0296.019] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212828 [0296.019] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0296.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212828 | out: hHeap=0x1f0000) returned 1 [0296.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0296.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0296.020] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00898_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00898_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0296.021] GetFileType (hFile=0x1c0) returned 0x1 [0296.021] CloseHandle (hObject=0x1c0) returned 1 [0296.021] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0296.021] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00898_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00898_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1908)) returned 1 [0296.022] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0296.022] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0296.022] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0296.022] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3100, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00934_.WMF", cAlternateFileName="")) returned 1 [0296.022] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0296.022] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2128b0 [0296.022] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0296.022] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2128b0 | out: hHeap=0x1f0000) returned 1 [0296.022] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0296.022] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0296.023] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00934_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00934_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0296.023] GetFileType (hFile=0x1c0) returned 0x1 [0296.023] CloseHandle (hObject=0x1c0) returned 1 [0296.023] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0296.024] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00934_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00934_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3100)) returned 1 [0296.024] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0296.024] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0296.024] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0296.024] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10149fbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2904, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00998_.WMF", cAlternateFileName="")) returned 1 [0296.024] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609a0 [0296.024] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212828 [0296.024] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0296.024] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212828 | out: hHeap=0x1f0000) returned 1 [0296.024] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0296.025] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0296.025] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00998_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00998_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0296.025] GetFileType (hFile=0x1c0) returned 0x1 [0296.026] CloseHandle (hObject=0x1c0) returned 1 [0296.026] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0296.027] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00998_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00998_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10149fbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2904)) returned 1 [0296.027] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0296.027] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0296.027] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0296.027] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10149fbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x984, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE01160_.WMF", cAlternateFileName="")) returned 1 [0296.027] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0296.027] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0296.027] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0296.027] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0296.027] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0296.028] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0296.028] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01160_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe01160_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0296.028] GetFileType (hFile=0x1c0) returned 0x1 [0296.029] CloseHandle (hObject=0x1c0) returned 1 [0296.029] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0296.029] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01160_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe01160_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10149fbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x984)) returned 1 [0296.029] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0296.030] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0296.030] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0296.030] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x59c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE01172_.WMF", cAlternateFileName="")) returned 1 [0296.030] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0296.030] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d00 [0296.030] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0296.030] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d00 | out: hHeap=0x1f0000) returned 1 [0296.030] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0296.030] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0296.031] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe01172_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0296.031] GetFileType (hFile=0x1c0) returned 0x1 [0296.031] CloseHandle (hObject=0x1c0) returned 1 [0296.032] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0296.032] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe01172_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x59c)) returned 1 [0296.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0296.032] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0296.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0296.032] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3f9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE01191_.WMF", cAlternateFileName="")) returned 1 [0296.032] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0296.032] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2123e8 [0296.033] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0296.033] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2123e8 | out: hHeap=0x1f0000) returned 1 [0296.033] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0296.033] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0296.034] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01191_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe01191_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0296.035] GetFileType (hFile=0x1c0) returned 0x1 [0296.035] CloseHandle (hObject=0x1c0) returned 1 [0296.036] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0296.036] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01191_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe01191_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3f9c)) returned 1 [0296.036] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0296.036] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0296.036] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0296.036] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1418, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE01661_.WMF", cAlternateFileName="")) returned 1 [0296.036] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0296.036] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212938 [0296.036] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0296.036] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212938 | out: hHeap=0x1f0000) returned 1 [0296.036] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0296.037] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0296.037] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01661_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe01661_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0296.471] GetFileType (hFile=0x198) returned 0x1 [0296.471] CloseHandle (hObject=0x198) returned 1 [0296.471] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0296.472] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01661_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe01661_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1418)) returned 1 [0296.472] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0296.472] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0296.472] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0296.472] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdda, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE01797_.WMF", cAlternateFileName="")) returned 1 [0296.472] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609a0 [0296.472] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211bf0 [0296.472] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0296.472] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211bf0 | out: hHeap=0x1f0000) returned 1 [0296.472] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0296.473] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0296.473] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01797_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe01797_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0296.473] GetFileType (hFile=0x198) returned 0x1 [0296.474] CloseHandle (hObject=0x198) returned 1 [0296.474] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0296.474] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01797_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe01797_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdda)) returned 1 [0296.474] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0296.474] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0296.474] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0296.475] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x23d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE02120_.WMF", cAlternateFileName="")) returned 1 [0296.475] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0296.475] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2120b8 [0296.475] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0296.475] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2120b8 | out: hHeap=0x1f0000) returned 1 [0296.475] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0296.475] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0296.475] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02120_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02120_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0296.476] GetFileType (hFile=0x198) returned 0x1 [0296.476] CloseHandle (hObject=0x198) returned 1 [0296.476] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0296.477] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02120_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02120_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x23d4)) returned 1 [0296.477] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0296.477] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0296.477] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0296.477] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE02169_.WMF", cAlternateFileName="")) returned 1 [0296.477] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0296.477] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211b68 [0296.477] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0296.477] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b68 | out: hHeap=0x1f0000) returned 1 [0296.477] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0296.478] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0296.478] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02169_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02169_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0296.478] GetFileType (hFile=0x198) returned 0x1 [0296.479] CloseHandle (hObject=0x198) returned 1 [0296.479] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0296.479] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02169_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02169_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fc4)) returned 1 [0296.479] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0296.479] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0296.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0296.480] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x75e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE02262_.WMF", cAlternateFileName="")) returned 1 [0296.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0296.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2120b8 [0296.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0296.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2120b8 | out: hHeap=0x1f0000) returned 1 [0296.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0296.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0296.481] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02262_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02262_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0296.481] GetFileType (hFile=0x198) returned 0x1 [0296.482] CloseHandle (hObject=0x198) returned 1 [0296.482] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0296.482] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02262_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02262_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x75e2)) returned 1 [0296.482] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0296.482] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0296.482] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0296.482] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x824e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE02263_.WMF", cAlternateFileName="")) returned 1 [0296.483] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0296.483] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212140 [0296.483] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0296.483] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212140 | out: hHeap=0x1f0000) returned 1 [0296.483] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0296.483] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0296.484] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02263_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02263_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0296.484] GetFileType (hFile=0x198) returned 0x1 [0296.484] CloseHandle (hObject=0x198) returned 1 [0296.485] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0296.485] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02263_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02263_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x824e)) returned 1 [0296.485] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0296.485] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0296.485] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0296.485] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x62b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE02265_.WMF", cAlternateFileName="")) returned 1 [0296.485] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0296.485] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211a58 [0296.486] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0296.486] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211a58 | out: hHeap=0x1f0000) returned 1 [0296.486] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0296.486] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0296.487] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02265_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02265_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0296.487] GetFileType (hFile=0x198) returned 0x1 [0296.487] CloseHandle (hObject=0x198) returned 1 [0296.488] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0296.488] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02265_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02265_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x62b2)) returned 1 [0296.488] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0296.488] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0296.488] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0296.488] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x78e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE02267_.WMF", cAlternateFileName="")) returned 1 [0296.488] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0296.488] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212030 [0296.488] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0296.489] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212030 | out: hHeap=0x1f0000) returned 1 [0296.489] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0296.489] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0296.489] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02267_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02267_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0296.489] GetFileType (hFile=0x198) returned 0x1 [0296.490] CloseHandle (hObject=0x198) returned 1 [0296.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0296.490] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02267_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02267_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x78e0)) returned 1 [0296.490] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0296.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0296.490] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0296.490] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6f26, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE02270_.WMF", cAlternateFileName="")) returned 1 [0296.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0296.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212360 [0296.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0296.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212360 | out: hHeap=0x1f0000) returned 1 [0296.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0296.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0296.491] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02270_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02270_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0296.491] GetFileType (hFile=0x198) returned 0x1 [0296.491] CloseHandle (hObject=0x198) returned 1 [0296.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0296.492] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02270_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02270_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6f26)) returned 1 [0296.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0296.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0296.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0296.492] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb9c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE02278_.WMF", cAlternateFileName="")) returned 1 [0296.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0296.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212140 [0296.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0296.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212140 | out: hHeap=0x1f0000) returned 1 [0296.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0296.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0296.492] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02278_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02278_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0296.493] GetFileType (hFile=0x198) returned 0x1 [0296.493] CloseHandle (hObject=0x198) returned 1 [0296.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0296.493] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02278_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02278_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb9c4)) returned 1 [0296.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0296.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0296.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0296.493] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6928, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE02280_.WMF", cAlternateFileName="")) returned 1 [0296.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0296.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d00 [0296.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0296.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d00 | out: hHeap=0x1f0000) returned 1 [0296.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0296.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0296.494] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02280_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02280_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0296.494] GetFileType (hFile=0x198) returned 0x1 [0296.494] CloseHandle (hObject=0x198) returned 1 [0296.495] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0296.495] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02280_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02280_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6928)) returned 1 [0296.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0296.495] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0296.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0296.495] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE02282_.WMF", cAlternateFileName="")) returned 1 [0296.495] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0296.495] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2124f8 [0296.495] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0296.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2124f8 | out: hHeap=0x1f0000) returned 1 [0296.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0296.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0296.496] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02282_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02282_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0296.496] GetFileType (hFile=0x198) returned 0x1 [0296.496] CloseHandle (hObject=0x198) returned 1 [0296.497] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0296.497] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02282_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02282_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7400)) returned 1 [0296.497] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0296.497] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0296.497] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0296.497] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4090, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE02285_.WMF", cAlternateFileName="")) returned 1 [0296.497] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0296.497] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d00 [0296.497] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0296.497] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d00 | out: hHeap=0x1f0000) returned 1 [0296.497] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0296.497] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0296.498] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02285_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02285_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0296.498] GetFileType (hFile=0x198) returned 0x1 [0296.498] CloseHandle (hObject=0x198) returned 1 [0296.499] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0296.499] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02285_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02285_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4090)) returned 1 [0296.499] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0296.499] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0296.499] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0296.499] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4584, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE02287_.WMF", cAlternateFileName="")) returned 1 [0296.499] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0296.499] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2120b8 [0296.499] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0296.499] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2120b8 | out: hHeap=0x1f0000) returned 1 [0296.499] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0296.500] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0296.500] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02287_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02287_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0296.500] GetFileType (hFile=0x198) returned 0x1 [0296.500] CloseHandle (hObject=0x198) returned 1 [0296.501] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0296.501] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02287_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02287_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4584)) returned 1 [0296.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0296.501] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0296.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0296.501] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x76e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE02288_.WMF", cAlternateFileName="")) returned 1 [0296.501] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0296.501] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211f20 [0296.501] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0296.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211f20 | out: hHeap=0x1f0000) returned 1 [0296.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0296.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0296.502] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02288_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02288_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0296.503] GetFileType (hFile=0x198) returned 0x1 [0296.503] CloseHandle (hObject=0x198) returned 1 [0296.503] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0296.503] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02288_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02288_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x76e0)) returned 1 [0296.503] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0296.503] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0296.503] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0296.503] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5850, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE02293_.WMF", cAlternateFileName="")) returned 1 [0296.503] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260888 [0296.503] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2128b0 [0296.503] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0296.503] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2128b0 | out: hHeap=0x1f0000) returned 1 [0296.504] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0296.504] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0296.504] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02293_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02293_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0296.504] GetFileType (hFile=0x198) returned 0x1 [0296.504] CloseHandle (hObject=0x198) returned 1 [0296.504] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0296.505] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02293_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02293_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5850)) returned 1 [0296.505] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0296.505] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0296.505] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0296.505] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5328, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE02296_.WMF", cAlternateFileName="")) returned 1 [0296.505] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0296.505] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2123e8 [0296.505] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0296.505] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2123e8 | out: hHeap=0x1f0000) returned 1 [0296.505] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0296.505] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0296.505] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02296_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02296_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0296.505] GetFileType (hFile=0x198) returned 0x1 [0296.506] CloseHandle (hObject=0x198) returned 1 [0296.506] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0296.506] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02296_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02296_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5328)) returned 1 [0296.506] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0296.506] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0296.506] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0296.506] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE02369_.WMF", cAlternateFileName="")) returned 1 [0296.506] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0296.506] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212828 [0296.506] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0296.507] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212828 | out: hHeap=0x1f0000) returned 1 [0296.507] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0296.507] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0296.507] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02369_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02369_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0296.508] GetFileType (hFile=0x198) returned 0x1 [0296.508] CloseHandle (hObject=0x198) returned 1 [0296.508] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0296.508] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02369_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02369_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8c0)) returned 1 [0296.509] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0296.509] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0296.509] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0296.509] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101e2909, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101e2909, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101e2909, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x39f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE02522_.WMF", cAlternateFileName="")) returned 1 [0296.509] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260518 [0296.509] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2129c0 [0296.509] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0296.509] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2129c0 | out: hHeap=0x1f0000) returned 1 [0296.509] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0296.509] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0296.509] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02522_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02522_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0296.880] GetFileType (hFile=0x1ac) returned 0x1 [0296.881] CloseHandle (hObject=0x1ac) returned 1 [0296.882] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0296.882] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02522_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02522_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101e2909, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101e2909, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101e2909, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x39f8)) returned 1 [0296.883] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0296.883] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0296.883] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0296.883] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE02950_.WMF", cAlternateFileName="")) returned 1 [0296.883] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0296.883] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212470 [0296.883] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0296.883] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212470 | out: hHeap=0x1f0000) returned 1 [0296.883] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0296.883] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0297.112] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02950_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02950_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0297.112] GetFileType (hFile=0x1ac) returned 0x1 [0297.112] CloseHandle (hObject=0x1ac) returned 1 [0297.113] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0297.113] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02950_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02950_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d2a)) returned 1 [0297.113] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0297.113] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0297.113] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0297.113] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc70, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE02957_.WMF", cAlternateFileName="")) returned 1 [0297.114] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0297.114] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212828 [0297.114] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0297.114] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212828 | out: hHeap=0x1f0000) returned 1 [0297.114] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0297.114] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0297.115] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02957_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02957_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0297.115] GetFileType (hFile=0x1ac) returned 0x1 [0297.115] CloseHandle (hObject=0x1ac) returned 1 [0297.116] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0297.116] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02957_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02957_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc70)) returned 1 [0297.116] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0297.116] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0297.116] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0297.117] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x614, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE03236_.WMF", cAlternateFileName="")) returned 1 [0297.117] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0297.117] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2128b0 [0297.117] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0297.117] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2128b0 | out: hHeap=0x1f0000) returned 1 [0297.117] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0297.117] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0297.118] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03236_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03236_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0297.118] GetFileType (hFile=0x1ac) returned 0x1 [0297.119] CloseHandle (hObject=0x1ac) returned 1 [0297.119] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0297.119] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03236_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03236_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x614)) returned 1 [0297.120] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0297.120] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0297.120] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0297.120] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE03241_.WMF", cAlternateFileName="")) returned 1 [0297.120] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0297.120] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212938 [0297.120] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0297.120] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212938 | out: hHeap=0x1f0000) returned 1 [0297.120] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0297.121] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0297.121] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03241_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03241_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0297.122] GetFileType (hFile=0x1ac) returned 0x1 [0297.122] CloseHandle (hObject=0x1ac) returned 1 [0297.122] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0297.122] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03241_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03241_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b4)) returned 1 [0297.123] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0297.123] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0297.123] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0297.123] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101bc6d0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3380, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE03257_.WMF", cAlternateFileName="")) returned 1 [0297.123] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260770 [0297.123] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211e10 [0297.123] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0297.123] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e10 | out: hHeap=0x1f0000) returned 1 [0297.124] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0297.124] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0297.124] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03257_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03257_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0297.125] GetFileType (hFile=0x1ac) returned 0x1 [0297.125] CloseHandle (hObject=0x1ac) returned 1 [0297.126] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0297.126] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03257_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03257_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101bc6d0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3380)) returned 1 [0297.126] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0297.126] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0297.126] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0297.126] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x692, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE03331_.WMF", cAlternateFileName="")) returned 1 [0297.126] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0297.127] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2128b0 [0297.127] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0297.127] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2128b0 | out: hHeap=0x1f0000) returned 1 [0297.127] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0297.128] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0297.128] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03331_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03331_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0297.128] GetFileType (hFile=0x1ac) returned 0x1 [0297.129] CloseHandle (hObject=0x1ac) returned 1 [0297.129] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0297.129] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03331_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03331_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x692)) returned 1 [0297.130] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0297.130] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0297.130] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0297.130] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x282c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE03339_.WMF", cAlternateFileName="")) returned 1 [0297.130] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260888 [0297.130] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211bf0 [0297.130] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0297.130] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211bf0 | out: hHeap=0x1f0000) returned 1 [0297.131] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0297.131] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0297.131] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03339_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03339_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0297.131] GetFileType (hFile=0x1ac) returned 0x1 [0297.132] CloseHandle (hObject=0x1ac) returned 1 [0297.132] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0297.132] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03339_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03339_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x282c)) returned 1 [0297.132] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0297.133] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0297.133] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0297.133] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2108, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE03451_.WMF", cAlternateFileName="")) returned 1 [0297.133] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0297.133] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211e10 [0297.133] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0297.133] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e10 | out: hHeap=0x1f0000) returned 1 [0297.133] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0297.133] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0297.134] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03451_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03451_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0297.134] GetFileType (hFile=0x1ac) returned 0x1 [0297.135] CloseHandle (hObject=0x1ac) returned 1 [0297.135] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0297.135] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03451_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03451_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2108)) returned 1 [0297.135] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0297.135] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0297.136] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0297.136] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f24, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE03453_.WMF", cAlternateFileName="")) returned 1 [0297.136] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260770 [0297.136] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2127a0 [0297.136] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0297.136] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2127a0 | out: hHeap=0x1f0000) returned 1 [0297.136] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0297.136] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0297.137] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03453_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03453_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0297.137] GetFileType (hFile=0x1ac) returned 0x1 [0297.138] CloseHandle (hObject=0x1ac) returned 1 [0297.138] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0297.138] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03453_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03453_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f24)) returned 1 [0297.138] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0297.138] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0297.138] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0297.138] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101bc6d0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2178, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE03459_.WMF", cAlternateFileName="")) returned 1 [0297.139] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0297.139] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212580 [0297.139] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0297.139] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212580 | out: hHeap=0x1f0000) returned 1 [0297.139] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0297.139] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0297.140] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03459_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03459_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0297.140] GetFileType (hFile=0x1ac) returned 0x1 [0297.140] CloseHandle (hObject=0x1ac) returned 1 [0297.141] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0297.141] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03459_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03459_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101bc6d0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2178)) returned 1 [0297.141] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0297.141] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0297.141] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0297.141] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101bc6d0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1664, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE03464_.WMF", cAlternateFileName="")) returned 1 [0297.141] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0297.142] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212250 [0297.142] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0297.142] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212250 | out: hHeap=0x1f0000) returned 1 [0297.142] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0297.142] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0297.143] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03464_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03464_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0297.143] GetFileType (hFile=0x1ac) returned 0x1 [0297.144] CloseHandle (hObject=0x1ac) returned 1 [0297.144] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0297.144] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03464_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03464_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101bc6d0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1664)) returned 1 [0297.144] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0297.144] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0297.145] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0297.145] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101bc6d0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x41a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE03466_.WMF", cAlternateFileName="")) returned 1 [0297.145] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0297.145] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d88 [0297.145] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0297.145] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d88 | out: hHeap=0x1f0000) returned 1 [0297.145] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0297.145] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0297.146] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03466_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03466_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0297.146] GetFileType (hFile=0x1ac) returned 0x1 [0297.147] CloseHandle (hObject=0x1ac) returned 1 [0297.147] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0297.147] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03466_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03466_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101bc6d0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x41a0)) returned 1 [0297.148] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0297.148] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0297.148] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0297.148] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101bc6d0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3998, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE03470_.WMF", cAlternateFileName="")) returned 1 [0297.148] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260838 [0297.148] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211a58 [0297.148] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0297.148] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211a58 | out: hHeap=0x1f0000) returned 1 [0297.148] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0297.149] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260838 | out: hHeap=0x1f0000) returned 1 [0297.149] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03470_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03470_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0297.149] GetFileType (hFile=0x1ac) returned 0x1 [0297.150] CloseHandle (hObject=0x1ac) returned 1 [0297.150] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0297.150] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03470_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03470_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101bc6d0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3998)) returned 1 [0297.151] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0297.151] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0297.151] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0297.151] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101bc6d0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xec4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE03513_.WMF", cAlternateFileName="")) returned 1 [0297.151] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0297.151] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211f20 [0297.151] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0297.151] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211f20 | out: hHeap=0x1f0000) returned 1 [0297.151] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0297.151] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0297.152] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03513_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03513_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0297.153] GetFileType (hFile=0x1ac) returned 0x1 [0297.153] CloseHandle (hObject=0x1ac) returned 1 [0297.154] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0297.154] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03513_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03513_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101bc6d0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xec4)) returned 1 [0297.154] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0297.154] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0297.154] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0297.154] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1027b233, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1027b233, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1027b233, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1868, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE03668_.WMF", cAlternateFileName="")) returned 1 [0297.154] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0297.154] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212608 [0297.155] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0297.155] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212608 | out: hHeap=0x1f0000) returned 1 [0297.155] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0297.155] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0297.156] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03668_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03668_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0297.157] GetFileType (hFile=0x1ac) returned 0x1 [0297.157] CloseHandle (hObject=0x1ac) returned 1 [0297.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0297.335] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03668_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03668_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1027b233, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1027b233, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1027b233, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1868)) returned 1 [0297.335] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0297.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0297.335] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0297.335] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101e2909, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE03731_.WMF", cAlternateFileName="")) returned 1 [0297.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260770 [0297.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2124f8 [0297.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0297.335] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2124f8 | out: hHeap=0x1f0000) returned 1 [0297.335] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0297.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0297.565] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03731_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03731_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0297.565] GetFileType (hFile=0x1ac) returned 0x1 [0297.566] CloseHandle (hObject=0x1ac) returned 1 [0297.566] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0297.567] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03731_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03731_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101e2909, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9fc)) returned 1 [0297.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0297.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0297.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0297.567] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101e2909, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x78a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE03795_.WMF", cAlternateFileName="")) returned 1 [0297.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609a0 [0297.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211ae0 [0297.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0297.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211ae0 | out: hHeap=0x1f0000) returned 1 [0297.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0297.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0297.569] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03795_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03795_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0297.569] GetFileType (hFile=0x1ac) returned 0x1 [0297.570] CloseHandle (hObject=0x1ac) returned 1 [0297.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0297.570] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03795_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03795_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101e2909, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x78a)) returned 1 [0297.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0297.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0297.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0297.571] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101bc6d0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1020, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE04050_.WMF", cAlternateFileName="")) returned 1 [0297.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609a0 [0297.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211fa8 [0297.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0297.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211fa8 | out: hHeap=0x1f0000) returned 1 [0297.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0297.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0297.572] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE04050_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe04050_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0297.573] GetFileType (hFile=0x1ac) returned 0x1 [0297.573] CloseHandle (hObject=0x1ac) returned 1 [0297.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0297.574] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE04050_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe04050_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101bc6d0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1020)) returned 1 [0297.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0297.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0297.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0297.574] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101bc6d0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x37f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE05665_.WMF", cAlternateFileName="")) returned 1 [0297.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0297.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d00 [0297.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0297.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d00 | out: hHeap=0x1f0000) returned 1 [0297.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0297.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0297.576] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05665_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe05665_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0297.576] GetFileType (hFile=0x1ac) returned 0x1 [0297.577] CloseHandle (hObject=0x1ac) returned 1 [0297.578] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0297.578] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05665_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe05665_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101bc6d0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x37f8)) returned 1 [0297.578] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0297.578] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0297.578] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0297.578] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101e2909, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x167c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE05710_.WMF", cAlternateFileName="")) returned 1 [0297.578] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0297.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2123e8 [0297.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0297.579] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2123e8 | out: hHeap=0x1f0000) returned 1 [0297.579] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0297.579] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0297.581] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05710_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe05710_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0297.581] GetFileType (hFile=0x1ac) returned 0x1 [0297.581] CloseHandle (hObject=0x1ac) returned 1 [0297.582] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0297.582] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05710_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe05710_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101e2909, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x167c)) returned 1 [0297.582] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0297.583] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0297.583] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0297.583] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101e2909, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x608, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE05869_.WMF", cAlternateFileName="")) returned 1 [0297.583] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0297.583] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212828 [0297.583] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0297.583] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212828 | out: hHeap=0x1f0000) returned 1 [0297.584] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0297.584] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0297.585] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05869_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe05869_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0297.585] GetFileType (hFile=0x1ac) returned 0x1 [0297.586] CloseHandle (hObject=0x1ac) returned 1 [0297.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0297.586] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05869_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe05869_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101e2909, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x608)) returned 1 [0297.586] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0297.587] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0297.587] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0297.587] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101e2909, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101e2909, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101e2909, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x634, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE05870_.WMF", cAlternateFileName="")) returned 1 [0297.587] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260770 [0297.587] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211e10 [0297.587] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0297.587] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e10 | out: hHeap=0x1f0000) returned 1 [0297.588] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0297.588] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0297.589] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05870_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe05870_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0297.589] GetFileType (hFile=0x1ac) returned 0x1 [0297.589] CloseHandle (hObject=0x1ac) returned 1 [0297.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0297.590] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05870_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe05870_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101e2909, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101e2909, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101e2909, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x634)) returned 1 [0297.590] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0297.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0297.591] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0297.591] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101e2909, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101e2909, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101e2909, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7fce, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE05930_.WMF", cAlternateFileName="")) returned 1 [0297.591] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260770 [0297.591] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212140 [0297.591] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0297.591] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212140 | out: hHeap=0x1f0000) returned 1 [0297.591] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0297.591] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0297.592] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05930_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe05930_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0297.592] GetFileType (hFile=0x1ac) returned 0x1 [0297.593] CloseHandle (hObject=0x1ac) returned 1 [0297.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0297.593] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05930_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe05930_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101e2909, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101e2909, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101e2909, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7fce)) returned 1 [0297.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0297.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0297.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0297.594] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101bc6d0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x121c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE06049_.WMF", cAlternateFileName="")) returned 1 [0297.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260838 [0297.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2119d0 [0297.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0297.595] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2119d0 | out: hHeap=0x1f0000) returned 1 [0297.595] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0297.595] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260838 | out: hHeap=0x1f0000) returned 1 [0297.596] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE06049_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe06049_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0297.641] GetFileType (hFile=0x198) returned 0x1 [0297.641] CloseHandle (hObject=0x198) returned 1 [0297.642] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0297.642] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE06049_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe06049_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101bc6d0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x121c)) returned 1 [0297.643] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0297.643] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0297.643] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0297.643] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101e2909, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4048, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE06450_.WMF", cAlternateFileName="")) returned 1 [0297.643] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0297.643] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2119d0 [0297.643] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0297.643] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2119d0 | out: hHeap=0x1f0000) returned 1 [0297.643] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0297.643] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0297.644] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE06450_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe06450_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0297.645] GetFileType (hFile=0x198) returned 0x1 [0297.645] CloseHandle (hObject=0x198) returned 1 [0297.645] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0297.646] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE06450_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe06450_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101e2909, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4048)) returned 1 [0297.646] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0297.646] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0297.646] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0297.646] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101bc6d0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x629, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH00601G.GIF", cAlternateFileName="")) returned 1 [0297.646] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0297.646] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d00 [0297.646] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0297.646] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d00 | out: hHeap=0x1f0000) returned 1 [0297.646] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0297.647] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0297.647] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH00601G.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph00601g.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0297.648] GetFileType (hFile=0x198) returned 0x1 [0297.648] CloseHandle (hObject=0x198) returned 1 [0297.648] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0297.648] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH00601G.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph00601g.gif"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101bc6d0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x629)) returned 1 [0297.649] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0297.649] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0297.649] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0297.649] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101bc6d0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8628, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH00780U.BMP", cAlternateFileName="")) returned 1 [0297.649] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0297.649] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211fa8 [0297.649] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0297.649] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211fa8 | out: hHeap=0x1f0000) returned 1 [0297.649] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0297.650] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0297.650] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH00780U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph00780u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0297.651] GetFileType (hFile=0x198) returned 0x1 [0297.651] CloseHandle (hObject=0x198) returned 1 [0297.651] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0297.652] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH00780U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph00780u.bmp"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101bc6d0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8628)) returned 1 [0297.652] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0297.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0297.652] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0297.652] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101e2909, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e90, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH01035U.BMP", cAlternateFileName="")) returned 1 [0297.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0297.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211948 [0297.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0297.652] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211948 | out: hHeap=0x1f0000) returned 1 [0297.653] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0297.653] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0297.653] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01035U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01035u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0297.655] GetFileType (hFile=0x198) returned 0x1 [0297.655] CloseHandle (hObject=0x198) returned 1 [0297.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0297.656] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01035U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01035u.bmp"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101e2909, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e90)) returned 1 [0297.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0297.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0297.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0297.656] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101bc6d0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x211bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH01046J.JPG", cAlternateFileName="")) returned 1 [0297.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0297.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211a58 [0297.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0297.657] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211a58 | out: hHeap=0x1f0000) returned 1 [0297.657] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0297.657] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0297.657] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01046J.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01046j.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0297.658] GetFileType (hFile=0x198) returned 0x1 [0297.659] CloseHandle (hObject=0x198) returned 1 [0297.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0297.660] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01046J.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01046j.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101bc6d0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x211bb)) returned 1 [0297.660] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0297.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0297.660] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0297.660] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102ed99a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102ed99a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102ed99a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa202, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH01179J.JPG", cAlternateFileName="")) returned 1 [0297.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0297.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2124f8 [0297.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0297.661] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2124f8 | out: hHeap=0x1f0000) returned 1 [0297.661] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0297.661] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0297.661] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01179J.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01179j.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0297.663] GetFileType (hFile=0x198) returned 0x1 [0297.663] CloseHandle (hObject=0x198) returned 1 [0297.664] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0297.664] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01179J.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01179j.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102ed99a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102ed99a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102ed99a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa202)) returned 1 [0297.664] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0297.664] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0297.664] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0297.664] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101e2909, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101e2909, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101e2909, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18be, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH01213K.JPG", cAlternateFileName="")) returned 1 [0297.665] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260838 [0297.665] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d00 [0297.665] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0297.665] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d00 | out: hHeap=0x1f0000) returned 1 [0297.665] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0297.665] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260838 | out: hHeap=0x1f0000) returned 1 [0297.666] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01213K.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01213k.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0297.666] GetFileType (hFile=0x198) returned 0x1 [0297.667] CloseHandle (hObject=0x198) returned 1 [0297.667] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0297.667] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01213K.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01213k.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101e2909, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101e2909, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101e2909, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18be)) returned 1 [0297.668] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0297.668] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0297.668] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0297.668] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101e2909, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101e2909, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101e2909, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c94, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH01221K.JPG", cAlternateFileName="")) returned 1 [0297.668] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260518 [0297.668] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211e98 [0297.668] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0297.668] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e98 | out: hHeap=0x1f0000) returned 1 [0297.668] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0297.669] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0297.669] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01221K.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01221k.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x22bdf44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0297.670] GetFileType (hFile=0x198) returned 0x1 [0297.671] CloseHandle (hObject=0x198) returned 1 [0297.671] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0297.671] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01221K.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01221k.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bdfe4 | out: lpFileInformation=0x22bdfe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101e2909, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101e2909, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101e2909, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c94)) returned 1 [0297.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0297.672] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0297.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0297.672] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x22be16c | out: lpFindFileData=0x22be16c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101e2909, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101e2909, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101e2909, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH01235U.BMP", cAlternateFileName="")) returned 1 [0297.672] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260838 [0297.672] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2119d0 [0297.672] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0297.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2119d0 | out: hHeap=0x1f0000) returned 1 [0297.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0297.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260838 | out: hHeap=0x1f0000) returned 1 Thread: id = 151 os_tid = 0x13d0 [0192.763] GetLastError () returned 0x57 [0192.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x364) returned 0x20de80 [0192.764] SetLastError (dwErrCode=0x57) [0192.764] GetCurrentThreadId () returned 0x13d0 [0192.764] GetCurrentThreadId () returned 0x13d0 [0192.764] RtlWakeConditionVariable (in: ConditionVariable=0x2065fc | out: ConditionVariable=0x2065fc) [0192.766] FindFirstFileW (in: lpFileName="C:\\\\*", lpFindFileData=0x259f7cc | out: lpFindFileData=0x259f7cc*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffffff, dwReserved1=0x773e8939, cFileName="$GetCurrent", cAlternateFileName="$GETCU~1")) returned 0x2142d0 [0192.767] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b9f8 [0192.767] lstrcmpW (lpString1="$GetCurrent", lpString2=".") returned -1 [0192.767] lstrcmpW (lpString1="$GetCurrent", lpString2="..") returned -1 [0192.767] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x205130 [0192.767] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22ba48 [0192.767] FindNextFileW (in: hFindFile=0x2142d0, lpFindFileData=0x259f7cc | out: lpFindFileData=0x259f7cc*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffffff, dwReserved1=0x773e8939, cFileName="$Recycle.Bin", cAlternateFileName="")) returned 1 [0192.767] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b818 [0192.767] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227e40 [0192.767] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b9f8 | out: hHeap=0x1f0000) returned 1 [0192.767] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b818 | out: hHeap=0x1f0000) returned 1 [0192.767] lstrcmpW (lpString1="$Recycle.Bin", lpString2=".") returned -1 [0192.767] lstrcmpW (lpString1="$Recycle.Bin", lpString2="..") returned -1 [0192.767] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0192.767] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227e78 [0192.767] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205130 | out: hHeap=0x1f0000) returned 1 [0192.768] FindNextFileW (in: hFindFile=0x2142d0, lpFindFileData=0x259f7cc | out: lpFindFileData=0x259f7cc*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x85776261, ftCreationTime.dwHighDateTime=0x1d3276f, ftLastAccessTime.dwLowDateTime=0x85776261, ftLastAccessTime.dwHighDateTime=0x1d3276f, ftLastWriteTime.dwLowDateTime=0x85776261, ftLastWriteTime.dwHighDateTime=0x1d3276f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffffff, dwReserved1=0x773e8939, cFileName="$WINRE_BACKUP_PARTITION.MARKER", cAlternateFileName="$WINRE~1.MAR")) returned 1 [0192.768] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233df8 [0192.768] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x20b478 [0192.768] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227e40 | out: hHeap=0x1f0000) returned 1 [0192.768] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233df8 | out: hHeap=0x1f0000) returned 1 [0192.895] CreateFileW (lpFileName="C:\\\\$WINRE_BACKUP_PARTITION.MARKER" (normalized: "c:\\$winre_backup_partition.marker"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f4dc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0192.896] GetFileType (hFile=0x1e4) returned 0x1 [0192.896] CloseHandle (hObject=0x1e4) returned 1 [0192.896] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x215860 [0192.896] GetFileAttributesExW (in: lpFileName="C:\\\\$WINRE_BACKUP_PARTITION.MARKER" (normalized: "c:\\$winre_backup_partition.marker"), fInfoLevelId=0x0, lpFileInformation=0x259f56c | out: lpFileInformation=0x259f56c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x85776261, ftCreationTime.dwHighDateTime=0x1d3276f, ftLastAccessTime.dwLowDateTime=0x85776261, ftLastAccessTime.dwHighDateTime=0x1d3276f, ftLastWriteTime.dwLowDateTime=0x85776261, ftLastWriteTime.dwHighDateTime=0x1d3276f, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0192.896] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215860 | out: hHeap=0x1f0000) returned 1 [0192.897] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x215860 [0192.897] GetFileAttributesExW (in: lpFileName="C:\\\\$WINRE_BACKUP_PARTITION.MARKER" (normalized: "c:\\$winre_backup_partition.marker"), fInfoLevelId=0x0, lpFileInformation=0x259f57c | out: lpFileInformation=0x259f57c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x85776261, ftCreationTime.dwHighDateTime=0x1d3276f, ftLastAccessTime.dwLowDateTime=0x85776261, ftLastAccessTime.dwHighDateTime=0x1d3276f, ftLastWriteTime.dwLowDateTime=0x85776261, ftLastWriteTime.dwHighDateTime=0x1d3276f, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0192.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215860 | out: hHeap=0x1f0000) returned 1 [0192.897] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x215860 [0192.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215860 | out: hHeap=0x1f0000) returned 1 [0192.897] FindNextFileW (in: hFindFile=0x2142d0, lpFindFileData=0x259f7cc | out: lpFindFileData=0x259f7cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf39a4e7e, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf74cd515, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffffff, dwReserved1=0x773e8939, cFileName="588bce7c90097ed212", cAlternateFileName="588BCE~1")) returned 1 [0192.897] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228188 [0192.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b478 | out: hHeap=0x1f0000) returned 1 [0192.897] lstrcmpW (lpString1="588bce7c90097ed212", lpString2=".") returned 1 [0192.897] lstrcmpW (lpString1="588bce7c90097ed212", lpString2="..") returned 1 [0192.897] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x48) returned 0x225bf8 [0192.897] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228038 [0192.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0192.897] FindNextFileW (in: hFindFile=0x2142d0, lpFindFileData=0x259f7cc | out: lpFindFileData=0x259f7cc*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6fa258, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6fa258, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffffff, dwReserved1=0x773e8939, cFileName="Boot", cAlternateFileName="")) returned 1 [0192.897] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b840 [0192.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228188 | out: hHeap=0x1f0000) returned 1 [0192.898] lstrcmpW (lpString1="Boot", lpString2=".") returned 1 [0192.898] lstrcmpW (lpString1="Boot", lpString2="..") returned 1 [0192.898] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ade8 [0192.898] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b980 [0192.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225bf8 | out: hHeap=0x1f0000) returned 1 [0192.898] FindNextFileW (in: hFindFile=0x2142d0, lpFindFileData=0x259f7cc | out: lpFindFileData=0x259f7cc*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xe47a48a8, ftCreationTime.dwHighDateTime=0x1d112ea, ftLastAccessTime.dwLowDateTime=0xef6fa258, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfb90936b, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0x607da, dwReserved0=0xffffffff, dwReserved1=0x773e8939, cFileName="bootmgr", cAlternateFileName="")) returned 1 [0192.898] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b340 [0192.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b840 | out: hHeap=0x1f0000) returned 1 [0192.899] CreateFileW (lpFileName="C:\\\\bootmgr" (normalized: "c:\\bootmgr"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f4dc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0192.899] GetLastError () returned 0x5 [0192.899] GetLastError () returned 0x5 [0192.899] SetLastError (dwErrCode=0x5) [0192.899] GetLastError () returned 0x5 [0192.899] SetLastError (dwErrCode=0x5) [0192.899] GetLastError () returned 0x5 [0192.899] SetLastError (dwErrCode=0x5) [0192.900] FindNextFileW (in: hFindFile=0x2142d0, lpFindFileData=0x259f7cc | out: lpFindFileData=0x259f7cc*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xe5533ee0, ftCreationTime.dwHighDateTime=0x1d112ea, ftLastAccessTime.dwLowDateTime=0xef9d0a0c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x1, dwReserved0=0xffffffff, dwReserved1=0x773e8939, cFileName="BOOTNXT", cAlternateFileName="")) returned 1 [0192.900] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b840 [0192.900] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b340 | out: hHeap=0x1f0000) returned 1 [0192.900] CreateFileW (lpFileName="C:\\\\BOOTNXT" (normalized: "c:\\bootnxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f4dc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0192.900] GetFileType (hFile=0x1e4) returned 0x1 [0192.900] CloseHandle (hObject=0x1e4) returned 1 [0192.901] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b728 [0192.901] GetFileAttributesExW (in: lpFileName="C:\\\\BOOTNXT" (normalized: "c:\\bootnxt"), fInfoLevelId=0x0, lpFileInformation=0x259f56c | out: lpFileInformation=0x259f56c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xe5533ee0, ftCreationTime.dwHighDateTime=0x1d112ea, ftLastAccessTime.dwLowDateTime=0xef9d0a0c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x1)) returned 1 [0192.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b728 | out: hHeap=0x1f0000) returned 1 [0192.901] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b520 [0192.901] GetFileAttributesExW (in: lpFileName="C:\\\\BOOTNXT" (normalized: "c:\\bootnxt"), fInfoLevelId=0x0, lpFileInformation=0x259f57c | out: lpFileInformation=0x259f57c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xe5533ee0, ftCreationTime.dwHighDateTime=0x1d112ea, ftLastAccessTime.dwLowDateTime=0xef9d0a0c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x1)) returned 1 [0192.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b520 | out: hHeap=0x1f0000) returned 1 [0192.901] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b700 [0192.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b700 | out: hHeap=0x1f0000) returned 1 [0192.901] FindNextFileW (in: hFindFile=0x2142d0, lpFindFileData=0x259f7cc | out: lpFindFileData=0x259f7cc*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xc4ee267e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4ee267e, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xf1c63cdd, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0xffffffff, dwReserved1=0x773e8939, cFileName="BOOTSECT.BAK", cAlternateFileName="")) returned 1 [0192.902] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b520 [0192.902] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228188 [0192.902] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b840 | out: hHeap=0x1f0000) returned 1 [0192.902] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b520 | out: hHeap=0x1f0000) returned 1 [0192.902] CreateFileW (lpFileName="C:\\\\BOOTSECT.BAK" (normalized: "c:\\bootsect.bak"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f4dc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0192.902] GetLastError () returned 0x5 [0192.902] GetLastError () returned 0x5 [0192.902] SetLastError (dwErrCode=0x5) [0192.903] GetLastError () returned 0x5 [0192.903] SetLastError (dwErrCode=0x5) [0192.903] GetLastError () returned 0x5 [0192.903] SetLastError (dwErrCode=0x5) [0192.903] FindNextFileW (in: hFindFile=0x2142d0, lpFindFileData=0x259f7cc | out: lpFindFileData=0x259f7cc*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xe99f01ae, ftCreationTime.dwHighDateTime=0x1d32708, ftLastAccessTime.dwLowDateTime=0xe99f01ae, ftLastAccessTime.dwHighDateTime=0x1d32708, ftLastWriteTime.dwLowDateTime=0xe99f01ae, ftLastWriteTime.dwHighDateTime=0x1d32708, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x773e8939, cFileName="Documents and Settings", cAlternateFileName="DOCUME~1")) returned 1 [0192.903] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2281c0 [0192.903] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2229e8 [0192.904] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228188 | out: hHeap=0x1f0000) returned 1 [0192.904] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2281c0 | out: hHeap=0x1f0000) returned 1 [0192.904] lstrcmpW (lpString1="Documents and Settings", lpString2=".") returned 1 [0192.904] lstrcmpW (lpString1="Documents and Settings", lpString2="..") returned 1 [0192.904] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x228378 [0192.904] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2228c8 [0192.904] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ade8 | out: hHeap=0x1f0000) returned 1 [0192.904] FindNextFileW (in: hFindFile=0x2142d0, lpFindFileData=0x259f7cc | out: lpFindFileData=0x259f7cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc1969407, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x773e8939, cFileName="ESD", cAlternateFileName="")) returned 1 [0192.904] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2229e8 | out: hHeap=0x1f0000) returned 1 [0192.904] lstrcmpW (lpString1="ESD", lpString2=".") returned 1 [0192.904] lstrcmpW (lpString1="ESD", lpString2="..") returned 1 [0192.904] FindNextFileW (in: hFindFile=0x2142d0, lpFindFileData=0x259f7cc | out: lpFindFileData=0x259f7cc*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x7ef2dddf, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x7ef2dddf, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x96715303, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x332fe000, dwReserved0=0xa0000003, dwReserved1=0x773e8939, cFileName="hiberfil.sys", cAlternateFileName="")) returned 1 [0192.904] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b700 [0192.905] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227cf0 [0192.905] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b700 | out: hHeap=0x1f0000) returned 1 [0192.905] CreateFileW (lpFileName="C:\\\\hiberfil.sys" (normalized: "c:\\hiberfil.sys"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f4dc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0192.905] GetLastError () returned 0x20 [0192.905] GetLastError () returned 0x20 [0192.905] SetLastError (dwErrCode=0x20) [0192.906] GetLastError () returned 0x20 [0192.906] SetLastError (dwErrCode=0x20) [0192.906] GetLastError () returned 0x20 [0192.906] SetLastError (dwErrCode=0x20) [0192.906] FindNextFileW (in: hFindFile=0x2142d0, lpFindFileData=0x259f7cc | out: lpFindFileData=0x259f7cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf1d773, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xa03727f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xfd9ec80, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x773e8939, cFileName="Logs", cAlternateFileName="")) returned 1 [0192.906] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b6d8 [0192.906] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227cf0 | out: hHeap=0x1f0000) returned 1 [0192.906] lstrcmpW (lpString1="Logs", lpString2=".") returned 1 [0192.906] lstrcmpW (lpString1="Logs", lpString2="..") returned 1 [0192.906] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd8) returned 0x22cdf0 [0192.907] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b570 [0192.907] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228378 | out: hHeap=0x1f0000) returned 1 [0192.907] FindNextFileW (in: hFindFile=0x2142d0, lpFindFileData=0x259f7cc | out: lpFindFileData=0x259f7cc*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6e97b025, ftCreationTime.dwHighDateTime=0x1d3275c, ftLastAccessTime.dwLowDateTime=0x6e97b025, ftLastAccessTime.dwHighDateTime=0x1d3275c, ftLastWriteTime.dwLowDateTime=0x98f4eb01, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x28000000, dwReserved0=0xa0000003, dwReserved1=0x773e8939, cFileName="pagefile.sys", cAlternateFileName="")) returned 1 [0192.907] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b778 [0192.907] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228188 [0192.907] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b6d8 | out: hHeap=0x1f0000) returned 1 [0192.907] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b778 | out: hHeap=0x1f0000) returned 1 [0192.907] CreateFileW (lpFileName="C:\\\\pagefile.sys" (normalized: "c:\\pagefile.sys"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f4dc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0192.907] GetLastError () returned 0x20 [0192.908] GetLastError () returned 0x20 [0192.908] SetLastError (dwErrCode=0x20) [0192.908] GetLastError () returned 0x20 [0192.908] SetLastError (dwErrCode=0x20) [0192.908] GetLastError () returned 0x20 [0192.908] SetLastError (dwErrCode=0x20) [0192.908] FindNextFileW (in: hFindFile=0x2142d0, lpFindFileData=0x259f7cc | out: lpFindFileData=0x259f7cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa03748ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17b3dd09, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x773e8939, cFileName="PerfLogs", cAlternateFileName="")) returned 1 [0192.908] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b688 [0192.908] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228188 | out: hHeap=0x1f0000) returned 1 [0192.909] lstrcmpW (lpString1="PerfLogs", lpString2=".") returned 1 [0192.909] lstrcmpW (lpString1="PerfLogs", lpString2="..") returned 1 [0192.909] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b408 [0192.909] FindNextFileW (in: hFindFile=0x2142d0, lpFindFileData=0x259f7cc | out: lpFindFileData=0x259f7cc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3ac6234, ftLastAccessTime.dwHighDateTime=0x1d5c65b, ftLastWriteTime.dwLowDateTime=0x3ac6234, ftLastWriteTime.dwHighDateTime=0x1d5c65b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x773e8939, cFileName="Program Files", cAlternateFileName="PROGRA~1")) returned 1 [0192.909] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b6d8 [0192.909] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0192.909] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b688 | out: hHeap=0x1f0000) returned 1 [0192.909] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b6d8 | out: hHeap=0x1f0000) returned 1 [0192.909] lstrcmpW (lpString1="Program Files", lpString2=".") returned 1 [0192.909] lstrcmpW (lpString1="Program Files", lpString2="..") returned 1 [0192.909] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227e40 [0192.909] FindNextFileW (in: hFindFile=0x2142d0, lpFindFileData=0x259f7cc | out: lpFindFileData=0x259f7cc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe7511354, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe7511354, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x773e8939, cFileName="Program Files (x86)", cAlternateFileName="PROGRA~2")) returned 1 [0192.909] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228188 [0192.909] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0192.910] lstrcmpW (lpString1="Program Files (x86)", lpString2=".") returned 1 [0192.910] lstrcmpW (lpString1="Program Files (x86)", lpString2="..") returned 1 [0192.910] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x138) returned 0x225048 [0192.910] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227eb0 [0192.910] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22cdf0 | out: hHeap=0x1f0000) returned 1 [0192.910] FindNextFileW (in: hFindFile=0x2142d0, lpFindFileData=0x259f7cc | out: lpFindFileData=0x259f7cc*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x450f4738, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x450f4738, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x773e8939, cFileName="ProgramData", cAlternateFileName="PROGRA~3")) returned 1 [0192.910] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b778 [0192.910] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228188 | out: hHeap=0x1f0000) returned 1 [0192.910] lstrcmpW (lpString1="ProgramData", lpString2=".") returned 1 [0192.910] lstrcmpW (lpString1="ProgramData", lpString2="..") returned 1 [0192.910] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b660 [0192.910] FindNextFileW (in: hFindFile=0x2142d0, lpFindFileData=0x259f7cc | out: lpFindFileData=0x259f7cc*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28e9c3a2, ftCreationTime.dwHighDateTime=0x1d32795, ftLastAccessTime.dwLowDateTime=0x1044dfc5, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x1044dfc5, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x773e8939, cFileName="Recovery", cAlternateFileName="")) returned 1 [0192.910] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b7a0 [0192.910] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b778 | out: hHeap=0x1f0000) returned 1 [0192.910] lstrcmpW (lpString1="Recovery", lpString2=".") returned 1 [0192.910] lstrcmpW (lpString1="Recovery", lpString2="..") returned 1 [0192.910] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b688 [0192.910] FindNextFileW (in: hFindFile=0x2142d0, lpFindFileData=0x259f7cc | out: lpFindFileData=0x259f7cc*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6ead2556, ftCreationTime.dwHighDateTime=0x1d3275c, ftLastAccessTime.dwLowDateTime=0x6ead2556, ftLastAccessTime.dwHighDateTime=0x1d3275c, ftLastWriteTime.dwLowDateTime=0x98f74cd7, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x10000000, dwReserved0=0xa0000003, dwReserved1=0x773e8939, cFileName="swapfile.sys", cAlternateFileName="")) returned 1 [0192.910] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b340 [0192.910] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228188 [0192.910] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b7a0 | out: hHeap=0x1f0000) returned 1 [0192.910] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b340 | out: hHeap=0x1f0000) returned 1 [0192.911] CreateFileW (lpFileName="C:\\\\swapfile.sys" (normalized: "c:\\swapfile.sys"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f4dc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0192.911] GetLastError () returned 0x20 [0192.911] GetLastError () returned 0x20 [0192.911] SetLastError (dwErrCode=0x20) [0192.911] GetLastError () returned 0x20 [0192.911] SetLastError (dwErrCode=0x20) [0192.911] GetLastError () returned 0x20 [0192.911] SetLastError (dwErrCode=0x20) [0192.912] FindNextFileW (in: hFindFile=0x2142d0, lpFindFileData=0x259f7cc | out: lpFindFileData=0x259f7cc*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x6e16f135, ftCreationTime.dwHighDateTime=0x1d3275c, ftLastAccessTime.dwLowDateTime=0xb1ff7ba5, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xb1ff7ba5, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x773e8939, cFileName="System Volume Information", cAlternateFileName="SYSTEM~1")) returned 1 [0192.912] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2227a8 [0192.912] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228188 | out: hHeap=0x1f0000) returned 1 [0192.912] lstrcmpW (lpString1="System Volume Information", lpString2=".") returned 1 [0192.912] lstrcmpW (lpString1="System Volume Information", lpString2="..") returned 1 [0192.912] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222838 [0192.912] FindNextFileW (in: hFindFile=0x2142d0, lpFindFileData=0x259f7cc | out: lpFindFileData=0x259f7cc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x475bb883, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x475bb883, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x773e8939, cFileName="Users", cAlternateFileName="")) returned 1 [0192.912] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b548 [0192.912] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2227a8 | out: hHeap=0x1f0000) returned 1 [0192.912] lstrcmpW (lpString1="Users", lpString2=".") returned 1 [0192.912] lstrcmpW (lpString1="Users", lpString2="..") returned 1 [0192.912] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c8) returned 0x22cdf0 [0192.912] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b610 [0192.912] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225048 | out: hHeap=0x1f0000) returned 1 [0192.912] FindNextFileW (in: hFindFile=0x2142d0, lpFindFileData=0x259f7cc | out: lpFindFileData=0x259f7cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0xc838b81d, ftLastAccessTime.dwHighDateTime=0x1d41dc3, ftLastWriteTime.dwLowDateTime=0xc838b81d, ftLastWriteTime.dwHighDateTime=0x1d41dc3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x773e8939, cFileName="Windows", cAlternateFileName="")) returned 1 [0192.913] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b4f8 [0192.913] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b548 | out: hHeap=0x1f0000) returned 1 [0192.913] lstrcmpW (lpString1="Windows", lpString2=".") returned 1 [0192.913] lstrcmpW (lpString1="Windows", lpString2="..") returned 1 [0192.913] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b520 [0192.913] FindNextFileW (in: hFindFile=0x2142d0, lpFindFileData=0x259f7cc | out: lpFindFileData=0x259f7cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea34fa37, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xccdc86a8, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xccdc86a8, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x773e8939, cFileName="Windows10Upgrade", cAlternateFileName="WINDOW~1")) returned 1 [0192.913] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227cf0 [0192.913] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b4f8 | out: hHeap=0x1f0000) returned 1 [0192.914] lstrcmpW (lpString1="Windows10Upgrade", lpString2=".") returned 1 [0192.914] lstrcmpW (lpString1="Windows10Upgrade", lpString2="..") returned 1 [0192.914] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227d28 [0192.914] FindNextFileW (in: hFindFile=0x2142d0, lpFindFileData=0x259f7cc | out: lpFindFileData=0x259f7cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea34fa37, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xccdc86a8, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xccdc86a8, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x773e8939, cFileName="Windows10Upgrade", cAlternateFileName="WINDOW~1")) returned 0 [0192.914] FindClose (in: hFindFile=0x2142d0 | out: hFindFile=0x2142d0) returned 1 [0192.914] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222910 [0192.914] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b6b0 [0192.914] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x227850 [0192.915] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228188 [0192.915] FindFirstFileW (in: lpFileName="C:\\\\$GetCurrent\\*", lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x214810 [0192.915] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0192.915] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228188 | out: hHeap=0x1f0000) returned 1 [0192.915] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0192.915] FindNextFileW (in: hFindFile=0x214810, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0192.915] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0192.915] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0192.915] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0192.916] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0192.916] FindNextFileW (in: hFindFile=0x214810, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0xbc67f530, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xbc67f530, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Logs", cAlternateFileName="")) returned 1 [0192.916] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228188 [0192.916] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0192.916] lstrcmpW (lpString1="Logs", lpString2=".") returned 1 [0192.917] lstrcmpW (lpString1="Logs", lpString2="..") returned 1 [0192.917] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x205150 [0192.917] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0192.917] FindNextFileW (in: hFindFile=0x214810, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="SafeOS", cAlternateFileName="")) returned 1 [0192.917] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0192.917] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228188 | out: hHeap=0x1f0000) returned 1 [0192.917] lstrcmpW (lpString1="SafeOS", lpString2=".") returned 1 [0192.917] lstrcmpW (lpString1="SafeOS", lpString2="..") returned 1 [0192.917] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228188 [0192.918] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2281c0 [0192.918] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205150 | out: hHeap=0x1f0000) returned 1 [0192.918] FindNextFileW (in: hFindFile=0x214810, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="SafeOS", cAlternateFileName="")) returned 0 [0192.918] FindClose (in: hFindFile=0x214810 | out: hFindFile=0x214810) returned 1 [0192.919] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222a78 [0192.919] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b4d0 [0192.919] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x226d28 [0192.919] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2281f8 [0192.919] FindFirstFileW (in: lpFileName="C:\\\\$GetCurrent\\Logs\\*", lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0xbc67f530, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xbc67f530, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x60000, dwReserved1=0x1, cFileName=".", cAlternateFileName="")) returned 0x2142d0 [0192.920] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ba0 [0192.920] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2281f8 | out: hHeap=0x1f0000) returned 1 [0192.920] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0192.920] FindNextFileW (in: hFindFile=0x2142d0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0xbc67f530, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xbc67f530, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x60000, dwReserved1=0x1, cFileName="..", cAlternateFileName="")) returned 1 [0192.920] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228268 [0192.920] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ba0 | out: hHeap=0x1f0000) returned 1 [0192.920] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0192.920] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0192.920] FindNextFileW (in: hFindFile=0x2142d0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc17291e, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xbc17291e, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xbc677ee9, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xa7c5, dwReserved0=0x60000, dwReserved1=0x1, cFileName="downlevel_2017_09_07_02_02_39_766.log.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="DOWNLE~1.ODV")) returned 1 [0192.920] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x2007c8 [0192.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2281f8 [0192.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x225048 [0192.921] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2281f8 | out: hHeap=0x1f0000) returned 1 [0192.921] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228268 | out: hHeap=0x1f0000) returned 1 [0192.921] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2007c8 | out: hHeap=0x1f0000) returned 1 [0192.921] CreateFileW (lpFileName="C:\\\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\$getcurrent\\logs\\downlevel_2017_09_07_02_02_39_766.log.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0192.922] GetFileType (hFile=0x1e4) returned 0x1 [0192.922] CloseHandle (hObject=0x1e4) returned 1 [0192.922] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x225150 [0192.922] GetFileAttributesExW (in: lpFileName="C:\\\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\$getcurrent\\logs\\downlevel_2017_09_07_02_02_39_766.log.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x259ebe4 | out: lpFileInformation=0x259ebe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc17291e, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xbc17291e, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xbc677ee9, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xa7c5)) returned 1 [0192.923] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225150 | out: hHeap=0x1f0000) returned 1 [0192.923] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x225150 [0192.923] GetFileAttributesExW (in: lpFileName="C:\\\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\$getcurrent\\logs\\downlevel_2017_09_07_02_02_39_766.log.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x259ebf4 | out: lpFileInformation=0x259ebf4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc17291e, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xbc17291e, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xbc677ee9, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xa7c5)) returned 1 [0192.923] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225150 | out: hHeap=0x1f0000) returned 1 [0192.923] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x225150 [0192.923] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225150 | out: hHeap=0x1f0000) returned 1 [0192.923] FindNextFileW (in: hFindFile=0x2142d0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x973abb0f, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x980eecb6, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1774, dwReserved0=0x60000, dwReserved1=0x1, cFileName="oobe_2017_09_07_03_08_57_737.log", cAlternateFileName="OOBE_2~1.LOG")) returned 1 [0192.923] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x215860 [0192.923] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2281f8 [0192.924] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x215060 [0192.924] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2281f8 | out: hHeap=0x1f0000) returned 1 [0192.924] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225048 | out: hHeap=0x1f0000) returned 1 [0192.924] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215860 | out: hHeap=0x1f0000) returned 1 [0192.924] CreateFileW (lpFileName="C:\\\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log" (normalized: "c:\\$getcurrent\\logs\\oobe_2017_09_07_03_08_57_737.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0192.925] GetFileType (hFile=0x1e4) returned 0x1 [0192.925] CloseHandle (hObject=0x1e4) returned 1 [0192.926] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x214fe8 [0192.926] GetFileAttributesExW (in: lpFileName="C:\\\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log" (normalized: "c:\\$getcurrent\\logs\\oobe_2017_09_07_03_08_57_737.log"), fInfoLevelId=0x0, lpFileInformation=0x259ebe4 | out: lpFileInformation=0x259ebe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x973abb0f, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x980eecb6, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1774)) returned 1 [0192.926] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214fe8 | out: hHeap=0x1f0000) returned 1 [0192.926] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x214d90 [0192.926] GetFileAttributesExW (in: lpFileName="C:\\\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log" (normalized: "c:\\$getcurrent\\logs\\oobe_2017_09_07_03_08_57_737.log"), fInfoLevelId=0x0, lpFileInformation=0x259ebf4 | out: lpFileInformation=0x259ebf4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x973abb0f, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x980eecb6, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1774)) returned 1 [0192.926] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d90 | out: hHeap=0x1f0000) returned 1 [0192.927] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x214b38 [0192.927] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214b38 | out: hHeap=0x1f0000) returned 1 [0192.927] FindNextFileW (in: hFindFile=0x2142d0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c5a0a89, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x9c5a0a89, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xbb3747bd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x60000, dwReserved1=0x1, cFileName="PartnerSetupCompleteResult.log", cAlternateFileName="PARTNE~1.LOG")) returned 1 [0192.927] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222ac0 [0192.927] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2281f8 [0192.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x214e08 [0192.928] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2281f8 | out: hHeap=0x1f0000) returned 1 [0192.928] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215060 | out: hHeap=0x1f0000) returned 1 [0192.928] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ac0 | out: hHeap=0x1f0000) returned 1 [0192.929] CreateFileW (lpFileName="C:\\\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log" (normalized: "c:\\$getcurrent\\logs\\partnersetupcompleteresult.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0192.929] GetFileType (hFile=0x1e4) returned 0x1 [0192.930] CloseHandle (hObject=0x1e4) returned 1 [0192.930] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x214f70 [0192.930] GetFileAttributesExW (in: lpFileName="C:\\\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log" (normalized: "c:\\$getcurrent\\logs\\partnersetupcompleteresult.log"), fInfoLevelId=0x0, lpFileInformation=0x259ebe4 | out: lpFileInformation=0x259ebe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c5a0a89, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x9c5a0a89, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xbb3747bd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x28)) returned 1 [0192.930] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f70 | out: hHeap=0x1f0000) returned 1 [0192.930] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x214f70 [0192.931] GetFileAttributesExW (in: lpFileName="C:\\\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log" (normalized: "c:\\$getcurrent\\logs\\partnersetupcompleteresult.log"), fInfoLevelId=0x0, lpFileInformation=0x259ebf4 | out: lpFileInformation=0x259ebf4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c5a0a89, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x9c5a0a89, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xbb3747bd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x28)) returned 1 [0192.931] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f70 | out: hHeap=0x1f0000) returned 1 [0192.931] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x214ca0 [0192.931] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214ca0 | out: hHeap=0x1f0000) returned 1 [0192.931] FindNextFileW (in: hFindFile=0x2142d0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c5a0a89, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x9c5a0a89, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xbb3747bd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x60000, dwReserved1=0x1, cFileName="PartnerSetupCompleteResult.log", cAlternateFileName="PARTNE~1.LOG")) returned 0 [0192.931] FindClose (in: hFindFile=0x2142d0 | out: hFindFile=0x2142d0) returned 1 [0192.931] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214e08 | out: hHeap=0x1f0000) returned 1 [0192.932] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226d28 | out: hHeap=0x1f0000) returned 1 [0192.932] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b4d0 | out: hHeap=0x1f0000) returned 1 [0192.932] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222a78 | out: hHeap=0x1f0000) returned 1 [0192.932] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2226d0 [0192.932] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b548 [0192.932] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x226d28 [0192.932] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222a78 [0192.932] FindFirstFileW (in: lpFileName="C:\\\\$GetCurrent\\SafeOS\\*", lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x60000, dwReserved1=0x1, cFileName=".", cAlternateFileName="")) returned 0x214810 [0192.932] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2281f8 [0192.932] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x226238 [0193.031] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2281f8 | out: hHeap=0x1f0000) returned 1 [0193.031] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222a78 | out: hHeap=0x1f0000) returned 1 [0193.032] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0193.032] FindNextFileW (in: hFindFile=0x214810, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x60000, dwReserved1=0x1, cFileName="..", cAlternateFileName="")) returned 1 [0193.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2281f8 [0193.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225bf8 [0193.081] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2281f8 | out: hHeap=0x1f0000) returned 1 [0193.081] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226238 | out: hHeap=0x1f0000) returned 1 [0193.081] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0193.081] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0193.081] FindNextFileW (in: hFindFile=0x214810, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9568f13f, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x9568f13f, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0xfb529700, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x232c8, dwReserved0=0x60000, dwReserved1=0x1, cFileName="GetCurrentOOBE.dll", cAlternateFileName="GETCUR~1.DLL")) returned 1 [0193.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2281f8 [0193.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282a0 [0193.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22abe0 [0193.081] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0193.081] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225bf8 | out: hHeap=0x1f0000) returned 1 [0193.081] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2281f8 | out: hHeap=0x1f0000) returned 1 [0193.082] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x38) returned 0x214610 [0193.082] CreateFileW (lpFileName="C:\\\\$GetCurrent\\SafeOS\\GetCurrentOOBE.dll" (normalized: "c:\\$getcurrent\\safeos\\getcurrentoobe.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0193.083] GetFileType (hFile=0x1fc) returned 0x1 [0193.083] CloseHandle (hObject=0x1fc) returned 1 [0193.083] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ade8 [0193.083] GetFileAttributesExW (in: lpFileName="C:\\\\$GetCurrent\\SafeOS\\GetCurrentOOBE.dll" (normalized: "c:\\$getcurrent\\safeos\\getcurrentoobe.dll"), fInfoLevelId=0x0, lpFileInformation=0x259ebe4 | out: lpFileInformation=0x259ebe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9568f13f, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x9568f13f, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0xfb529700, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x232c8)) returned 1 [0193.084] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ade8 | out: hHeap=0x1f0000) returned 1 [0193.084] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a838 [0193.084] GetFileAttributesExW (in: lpFileName="C:\\\\$GetCurrent\\SafeOS\\GetCurrentOOBE.dll" (normalized: "c:\\$getcurrent\\safeos\\getcurrentoobe.dll"), fInfoLevelId=0x0, lpFileInformation=0x259ebf4 | out: lpFileInformation=0x259ebf4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9568f13f, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x9568f13f, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0xfb529700, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x232c8)) returned 1 [0193.084] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a838 | out: hHeap=0x1f0000) returned 1 [0193.084] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a970 [0193.084] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a970 | out: hHeap=0x1f0000) returned 1 [0193.084] FindNextFileW (in: hFindFile=0x214810, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956819aa, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x956819aa, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x980eecb6, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x9c, dwReserved0=0x60000, dwReserved1=0x1, cFileName="GetCurrentRollback.ini", cAlternateFileName="GETCUR~1.INI")) returned 1 [0193.084] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2281f8 [0193.084] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228310 [0193.084] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22aaa8 [0193.084] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228310 | out: hHeap=0x1f0000) returned 1 [0193.084] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22abe0 | out: hHeap=0x1f0000) returned 1 [0193.084] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2281f8 | out: hHeap=0x1f0000) returned 1 [0193.085] CreateFileW (lpFileName="C:\\\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini" (normalized: "c:\\$getcurrent\\safeos\\getcurrentrollback.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0193.085] GetFileType (hFile=0x1fc) returned 0x1 [0193.085] CloseHandle (hObject=0x1fc) returned 1 [0193.085] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a908 [0193.085] GetFileAttributesExW (in: lpFileName="C:\\\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini" (normalized: "c:\\$getcurrent\\safeos\\getcurrentrollback.ini"), fInfoLevelId=0x0, lpFileInformation=0x259ebe4 | out: lpFileInformation=0x259ebe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956819aa, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x956819aa, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x980eecb6, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x9c)) returned 1 [0193.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a908 | out: hHeap=0x1f0000) returned 1 [0193.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a9d8 [0193.086] GetFileAttributesExW (in: lpFileName="C:\\\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini" (normalized: "c:\\$getcurrent\\safeos\\getcurrentrollback.ini"), fInfoLevelId=0x0, lpFileInformation=0x259ebf4 | out: lpFileInformation=0x259ebf4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956819aa, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x956819aa, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x980eecb6, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x9c)) returned 1 [0193.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a9d8 | out: hHeap=0x1f0000) returned 1 [0193.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a838 [0193.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a838 | out: hHeap=0x1f0000) returned 1 [0193.086] FindNextFileW (in: hFindFile=0x214810, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x54acc791, ftLastAccessTime.dwHighDateTime=0x1d3273a, ftLastWriteTime.dwLowDateTime=0x54acc791, ftLastWriteTime.dwHighDateTime=0x1d3273a, nFileSizeHigh=0x0, nFileSizeLow=0x241, dwReserved0=0x60000, dwReserved1=0x1, cFileName="PartnerSetupComplete.cmd", cAlternateFileName="PARTNE~1.CMD")) returned 1 [0193.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2227f0 [0193.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2281f8 [0193.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a838 [0193.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2281f8 | out: hHeap=0x1f0000) returned 1 [0193.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aaa8 | out: hHeap=0x1f0000) returned 1 [0193.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2227f0 | out: hHeap=0x1f0000) returned 1 [0193.087] CreateFileW (lpFileName="C:\\\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\partnersetupcomplete.cmd"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0193.087] GetFileType (hFile=0x1fc) returned 0x1 [0193.088] CloseHandle (hObject=0x1fc) returned 1 [0193.088] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22aaa8 [0193.088] GetFileAttributesExW (in: lpFileName="C:\\\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\partnersetupcomplete.cmd"), fInfoLevelId=0x0, lpFileInformation=0x259ebe4 | out: lpFileInformation=0x259ebe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x54acc791, ftLastAccessTime.dwHighDateTime=0x1d3273a, ftLastWriteTime.dwLowDateTime=0x54acc791, ftLastWriteTime.dwHighDateTime=0x1d3273a, nFileSizeHigh=0x0, nFileSizeLow=0x241)) returned 1 [0193.088] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aaa8 | out: hHeap=0x1f0000) returned 1 [0193.088] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a9d8 [0193.088] GetFileAttributesExW (in: lpFileName="C:\\\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\partnersetupcomplete.cmd"), fInfoLevelId=0x0, lpFileInformation=0x259ebf4 | out: lpFileInformation=0x259ebf4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x54acc791, ftLastAccessTime.dwHighDateTime=0x1d3273a, ftLastWriteTime.dwLowDateTime=0x54acc791, ftLastWriteTime.dwHighDateTime=0x1d3273a, nFileSizeHigh=0x0, nFileSizeLow=0x241)) returned 1 [0193.089] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a9d8 | out: hHeap=0x1f0000) returned 1 [0193.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ad18 [0193.089] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ad18 | out: hHeap=0x1f0000) returned 1 [0193.089] FindNextFileW (in: hFindFile=0x214810, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9575af11, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9577d1ec, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x4a, dwReserved0=0x60000, dwReserved1=0x1, cFileName="preoobe.cmd", cAlternateFileName="")) returned 1 [0193.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b390 [0193.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2281f8 [0193.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239400 [0193.089] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2281f8 | out: hHeap=0x1f0000) returned 1 [0193.089] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a838 | out: hHeap=0x1f0000) returned 1 [0193.089] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b390 | out: hHeap=0x1f0000) returned 1 [0193.089] CreateFileW (lpFileName="C:\\\\$GetCurrent\\SafeOS\\preoobe.cmd" (normalized: "c:\\$getcurrent\\safeos\\preoobe.cmd"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0193.089] GetFileType (hFile=0x1fc) returned 0x1 [0193.122] CloseHandle (hObject=0x1fc) returned 1 [0193.122] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239770 [0193.122] GetFileAttributesExW (in: lpFileName="C:\\\\$GetCurrent\\SafeOS\\preoobe.cmd" (normalized: "c:\\$getcurrent\\safeos\\preoobe.cmd"), fInfoLevelId=0x0, lpFileInformation=0x259ebe4 | out: lpFileInformation=0x259ebe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9575af11, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9577d1ec, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x4a)) returned 1 [0193.122] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239770 | out: hHeap=0x1f0000) returned 1 [0193.122] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239b38 [0193.123] GetFileAttributesExW (in: lpFileName="C:\\\\$GetCurrent\\SafeOS\\preoobe.cmd" (normalized: "c:\\$getcurrent\\safeos\\preoobe.cmd"), fInfoLevelId=0x0, lpFileInformation=0x259ebf4 | out: lpFileInformation=0x259ebf4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9575af11, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9577d1ec, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x4a)) returned 1 [0193.123] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239b38 | out: hHeap=0x1f0000) returned 1 [0193.123] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239928 [0193.123] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239928 | out: hHeap=0x1f0000) returned 1 [0193.124] FindNextFileW (in: hFindFile=0x214810, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x957833a7, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x957833a7, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9578472e, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x133, dwReserved0=0x60000, dwReserved1=0x1, cFileName="SetupComplete.cmd", cAlternateFileName="SETUPC~1.CMD")) returned 1 [0193.124] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2281f8 [0193.124] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228310 [0193.125] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22aaa8 [0193.125] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228310 | out: hHeap=0x1f0000) returned 1 [0193.125] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239400 | out: hHeap=0x1f0000) returned 1 [0193.125] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2281f8 | out: hHeap=0x1f0000) returned 1 [0193.125] CreateFileW (lpFileName="C:\\\\$GetCurrent\\SafeOS\\SetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\setupcomplete.cmd"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0193.125] GetFileType (hFile=0x1fc) returned 0x1 [0193.126] CloseHandle (hObject=0x1fc) returned 1 [0193.126] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ab78 [0193.126] GetFileAttributesExW (in: lpFileName="C:\\\\$GetCurrent\\SafeOS\\SetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\setupcomplete.cmd"), fInfoLevelId=0x0, lpFileInformation=0x259ebe4 | out: lpFileInformation=0x259ebe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x957833a7, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x957833a7, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9578472e, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x133)) returned 1 [0193.126] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab78 | out: hHeap=0x1f0000) returned 1 [0193.126] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22aeb8 [0193.126] GetFileAttributesExW (in: lpFileName="C:\\\\$GetCurrent\\SafeOS\\SetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\setupcomplete.cmd"), fInfoLevelId=0x0, lpFileInformation=0x259ebf4 | out: lpFileInformation=0x259ebf4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x957833a7, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x957833a7, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9578472e, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x133)) returned 1 [0193.126] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aeb8 | out: hHeap=0x1f0000) returned 1 [0193.126] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ab78 [0193.127] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ab78 | out: hHeap=0x1f0000) returned 1 [0193.127] FindNextFileW (in: hFindFile=0x214810, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x957833a7, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x957833a7, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9578472e, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x133, dwReserved0=0x60000, dwReserved1=0x1, cFileName="SetupComplete.cmd", cAlternateFileName="SETUPC~1.CMD")) returned 0 [0193.127] FindClose (in: hFindFile=0x214810 | out: hFindFile=0x214810) returned 1 [0193.127] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aaa8 | out: hHeap=0x1f0000) returned 1 [0193.127] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226d28 | out: hHeap=0x1f0000) returned 1 [0193.127] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b548 | out: hHeap=0x1f0000) returned 1 [0193.127] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2226d0 | out: hHeap=0x1f0000) returned 1 [0193.127] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0193.127] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0193.128] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2281c0 | out: hHeap=0x1f0000) returned 1 [0193.128] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228188 | out: hHeap=0x1f0000) returned 1 [0193.128] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227850 | out: hHeap=0x1f0000) returned 1 [0193.128] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b6b0 | out: hHeap=0x1f0000) returned 1 [0193.128] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222910 | out: hHeap=0x1f0000) returned 1 [0193.128] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222640 [0193.128] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b778 [0193.128] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x226d28 [0193.128] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0193.128] FindFirstFileW (in: lpFileName="C:\\\\$Recycle.Bin\\*", lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x214410 [0193.129] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0193.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0193.129] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0193.129] FindNextFileW (in: hFindFile=0x214410, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0193.131] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228188 [0193.131] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0193.131] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0193.131] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0193.131] FindNextFileW (in: hFindFile=0x214410, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="S-1-5-18", cAlternateFileName="")) returned 1 [0193.131] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b390 [0193.131] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0193.131] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x2260a8 [0193.131] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0193.131] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228188 | out: hHeap=0x1f0000) returned 1 [0193.131] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b390 | out: hHeap=0x1f0000) returned 1 [0193.131] lstrcmpW (lpString1="S-1-5-18", lpString2=".") returned 1 [0193.131] lstrcmpW (lpString1="S-1-5-18", lpString2="..") returned 1 [0193.131] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x205130 [0193.132] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222b50 [0193.132] FindNextFileW (in: hFindFile=0x214410, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x11a5eef8, ftLastAccessTime.dwHighDateTime=0x1d3375b, ftLastWriteTime.dwLowDateTime=0x11a5eef8, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="S-1-5-21-1051304884-625712362-2192934891-1000", cAlternateFileName="S-1-5-~1")) returned 1 [0193.132] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ade8 [0193.132] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2281c0 [0193.132] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a468 [0193.132] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2281c0 | out: hHeap=0x1f0000) returned 1 [0193.132] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2260a8 | out: hHeap=0x1f0000) returned 1 [0193.132] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ade8 | out: hHeap=0x1f0000) returned 1 [0193.132] lstrcmpW (lpString1="S-1-5-21-1051304884-625712362-2192934891-1000", lpString2=".") returned 1 [0193.132] lstrcmpW (lpString1="S-1-5-21-1051304884-625712362-2192934891-1000", lpString2="..") returned 1 [0193.132] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228188 [0193.132] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a1c0 [0193.132] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205130 | out: hHeap=0x1f0000) returned 1 [0193.132] FindNextFileW (in: hFindFile=0x214410, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x11a5eef8, ftLastAccessTime.dwHighDateTime=0x1d3375b, ftLastWriteTime.dwLowDateTime=0x11a5eef8, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="S-1-5-21-1051304884-625712362-2192934891-1000", cAlternateFileName="S-1-5-~1")) returned 0 [0193.132] FindClose (in: hFindFile=0x214410 | out: hFindFile=0x214410) returned 1 [0193.133] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222760 [0193.133] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b458 [0193.133] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x227850 [0193.133] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222568 [0193.133] FindFirstFileW (in: lpFileName="C:\\\\$Recycle.Bin\\S-1-5-18\\*", lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x60000, dwReserved1=0x1, cFileName=".", cAlternateFileName="")) returned 0x214690 [0193.133] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2227a8 [0193.133] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222568 | out: hHeap=0x1f0000) returned 1 [0193.133] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0193.133] FindNextFileW (in: hFindFile=0x214690, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x60000, dwReserved1=0x1, cFileName="..", cAlternateFileName="")) returned 1 [0193.133] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222b98 [0193.133] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2227a8 | out: hHeap=0x1f0000) returned 1 [0193.133] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0193.133] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0193.133] FindNextFileW (in: hFindFile=0x214690, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x60000, dwReserved1=0x1, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0193.134] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b318 [0193.134] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222be0 [0193.134] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x22a9d8 [0193.134] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222be0 | out: hHeap=0x1f0000) returned 1 [0193.134] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222b98 | out: hHeap=0x1f0000) returned 1 [0193.134] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b318 | out: hHeap=0x1f0000) returned 1 [0193.134] CreateFileW (lpFileName="C:\\\\$Recycle.Bin\\S-1-5-18\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-18\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0193.134] GetFileType (hFile=0x1fc) returned 0x1 [0193.135] CloseHandle (hObject=0x1fc) returned 1 [0193.135] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2394b0 [0193.135] GetFileAttributesExW (in: lpFileName="C:\\\\$Recycle.Bin\\S-1-5-18\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-18\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x259ebe4 | out: lpFileInformation=0x259ebe4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x81)) returned 1 [0193.135] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2394b0 | out: hHeap=0x1f0000) returned 1 [0193.135] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239b38 [0193.135] GetFileAttributesExW (in: lpFileName="C:\\\\$Recycle.Bin\\S-1-5-18\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-18\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x259ebf4 | out: lpFileInformation=0x259ebf4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x81)) returned 1 [0193.135] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239b38 | out: hHeap=0x1f0000) returned 1 [0193.135] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239400 [0193.135] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239400 | out: hHeap=0x1f0000) returned 1 [0193.136] FindNextFileW (in: hFindFile=0x214690, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x60000, dwReserved1=0x1, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0193.136] FindClose (in: hFindFile=0x214690 | out: hFindFile=0x214690) returned 1 [0193.136] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a9d8 | out: hHeap=0x1f0000) returned 1 [0193.136] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227850 | out: hHeap=0x1f0000) returned 1 [0193.136] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b458 | out: hHeap=0x1f0000) returned 1 [0193.136] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222760 | out: hHeap=0x1f0000) returned 1 [0193.136] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222b98 [0193.136] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b6d8 [0193.136] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x227850 [0193.136] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x228378 [0193.136] FindFirstFileW (in: lpFileName="C:\\\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\*", lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x11a5eef8, ftLastAccessTime.dwHighDateTime=0x1d3375b, ftLastWriteTime.dwLowDateTime=0x11a5eef8, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x60000, dwReserved1=0x1, cFileName=".", cAlternateFileName="")) returned 0x214810 [0193.136] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229ad8 [0193.136] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x249d88 [0193.136] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229ad8 | out: hHeap=0x1f0000) returned 1 [0193.136] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228378 | out: hHeap=0x1f0000) returned 1 [0193.137] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0193.137] FindNextFileW (in: hFindFile=0x214810, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x11a5eef8, ftLastAccessTime.dwHighDateTime=0x1d3375b, ftLastWriteTime.dwLowDateTime=0x11a5eef8, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x60000, dwReserved1=0x1, cFileName="..", cAlternateFileName="")) returned 1 [0193.137] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a028 [0193.137] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x249e50 [0193.137] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a028 | out: hHeap=0x1f0000) returned 1 [0193.137] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x249d88 | out: hHeap=0x1f0000) returned 1 [0193.137] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0193.137] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0193.137] FindNextFileW (in: hFindFile=0x214810, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcb9438a8, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xcb9438a8, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x60000, dwReserved1=0x1, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0193.137] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b458 [0193.137] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2299c8 [0193.137] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x249d88 [0193.138] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2299c8 | out: hHeap=0x1f0000) returned 1 [0193.138] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x249e50 | out: hHeap=0x1f0000) returned 1 [0193.138] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b458 | out: hHeap=0x1f0000) returned 1 [0193.138] CreateFileW (lpFileName="C:\\\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0193.138] GetFileType (hFile=0x1fc) returned 0x1 [0193.139] CloseHandle (hObject=0x1fc) returned 1 [0193.139] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a4d0 [0193.139] GetFileAttributesExW (in: lpFileName="C:\\\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x259ebe4 | out: lpFileInformation=0x259ebe4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcb9438a8, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xcb9438a8, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x81)) returned 1 [0193.139] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a4d0 | out: hHeap=0x1f0000) returned 1 [0193.139] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a968 [0193.139] GetFileAttributesExW (in: lpFileName="C:\\\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x259ebf4 | out: lpFileInformation=0x259ebf4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcb9438a8, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xcb9438a8, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x81)) returned 1 [0193.139] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a968 | out: hHeap=0x1f0000) returned 1 [0193.139] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a770 [0193.139] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a770 | out: hHeap=0x1f0000) returned 1 [0193.139] FindNextFileW (in: hFindFile=0x214810, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcb9438a8, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xcb9438a8, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x60000, dwReserved1=0x1, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0193.139] FindClose (in: hFindFile=0x214810 | out: hFindFile=0x214810) returned 1 [0193.140] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x249d88 | out: hHeap=0x1f0000) returned 1 [0193.140] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227850 | out: hHeap=0x1f0000) returned 1 [0193.140] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b6d8 | out: hHeap=0x1f0000) returned 1 [0193.140] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222b98 | out: hHeap=0x1f0000) returned 1 [0193.140] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a468 | out: hHeap=0x1f0000) returned 1 [0193.140] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222b50 | out: hHeap=0x1f0000) returned 1 [0193.140] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a1c0 | out: hHeap=0x1f0000) returned 1 [0193.140] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228188 | out: hHeap=0x1f0000) returned 1 [0193.140] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226d28 | out: hHeap=0x1f0000) returned 1 [0193.140] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b778 | out: hHeap=0x1f0000) returned 1 [0193.140] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222640 | out: hHeap=0x1f0000) returned 1 [0193.140] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222b50 [0193.140] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b598 [0193.140] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x227850 [0193.140] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222910 [0193.140] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\*", lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf39a4e7e, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xbc74b1b3, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x214810 [0193.140] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228188 [0193.140] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x226328 [0193.140] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228188 | out: hHeap=0x1f0000) returned 1 [0193.141] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222910 | out: hHeap=0x1f0000) returned 1 [0193.141] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0193.141] FindNextFileW (in: hFindFile=0x214810, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf39a4e7e, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xbc74b1b3, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0193.141] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0193.141] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x226148 [0193.141] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0193.141] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226328 | out: hHeap=0x1f0000) returned 1 [0193.141] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0193.141] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0193.141] FindNextFileW (in: hFindFile=0x214810, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="1025", cAlternateFileName="")) returned 1 [0193.141] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0193.141] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225f68 [0193.141] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0193.141] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226148 | out: hHeap=0x1f0000) returned 1 [0193.141] lstrcmpW (lpString1="1025", lpString2=".") returned 1 [0193.141] lstrcmpW (lpString1="1025", lpString2="..") returned 1 [0193.141] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x205130 [0193.141] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2226d0 [0193.142] FindNextFileW (in: hFindFile=0x214810, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="1028", cAlternateFileName="")) returned 1 [0193.142] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228188 [0193.142] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225fb8 [0193.142] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228188 | out: hHeap=0x1f0000) returned 1 [0193.142] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225f68 | out: hHeap=0x1f0000) returned 1 [0193.142] lstrcmpW (lpString1="1028", lpString2=".") returned 1 [0193.142] lstrcmpW (lpString1="1028", lpString2="..") returned 1 [0193.142] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0193.142] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222718 [0193.142] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205130 | out: hHeap=0x1f0000) returned 1 [0193.142] FindNextFileW (in: hFindFile=0x214810, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="1029", cAlternateFileName="")) returned 1 [0193.142] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228188 [0193.142] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225ba8 [0193.142] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228188 | out: hHeap=0x1f0000) returned 1 [0193.142] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225fb8 | out: hHeap=0x1f0000) returned 1 [0193.142] lstrcmpW (lpString1="1029", lpString2=".") returned 1 [0193.142] lstrcmpW (lpString1="1029", lpString2="..") returned 1 [0193.142] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x48) returned 0x226058 [0193.143] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2227a8 [0193.143] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0193.143] FindNextFileW (in: hFindFile=0x214810, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="1030", cAlternateFileName="")) returned 1 [0193.143] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0193.143] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225ce8 [0193.143] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0193.143] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225ba8 | out: hHeap=0x1f0000) returned 1 [0193.143] lstrcmpW (lpString1="1030", lpString2=".") returned 1 [0193.143] lstrcmpW (lpString1="1030", lpString2="..") returned 1 [0193.143] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22abe0 [0193.143] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2227f0 [0193.143] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226058 | out: hHeap=0x1f0000) returned 1 [0193.143] FindNextFileW (in: hFindFile=0x214810, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="1031", cAlternateFileName="")) returned 1 [0193.143] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0193.143] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x2260f8 [0193.144] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0193.144] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225ce8 | out: hHeap=0x1f0000) returned 1 [0193.144] lstrcmpW (lpString1="1031", lpString2=".") returned 1 [0193.144] lstrcmpW (lpString1="1031", lpString2="..") returned 1 [0193.144] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x24a8f8 [0193.144] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222760 [0193.144] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22abe0 | out: hHeap=0x1f0000) returned 1 [0193.144] FindNextFileW (in: hFindFile=0x214810, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="1032", cAlternateFileName="")) returned 1 [0193.144] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0193.144] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x226008 [0193.144] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0193.144] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2260f8 | out: hHeap=0x1f0000) returned 1 [0193.144] lstrcmpW (lpString1="1032", lpString2=".") returned 1 [0193.144] lstrcmpW (lpString1="1032", lpString2="..") returned 1 [0193.144] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222958 [0193.144] FindNextFileW (in: hFindFile=0x214810, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="1033", cAlternateFileName="")) returned 1 [0193.144] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0193.145] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225e28 [0193.145] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0193.145] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226008 | out: hHeap=0x1f0000) returned 1 [0193.145] lstrcmpW (lpString1="1033", lpString2=".") returned 1 [0193.145] lstrcmpW (lpString1="1033", lpString2="..") returned 1 [0193.145] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd8) returned 0x24ad90 [0193.145] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2229a0 [0193.145] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24a8f8 | out: hHeap=0x1f0000) returned 1 [0193.145] FindNextFileW (in: hFindFile=0x214810, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="1035", cAlternateFileName="")) returned 1 [0193.145] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228188 [0193.145] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x226198 [0193.145] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228188 | out: hHeap=0x1f0000) returned 1 [0193.145] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225e28 | out: hHeap=0x1f0000) returned 1 [0193.145] lstrcmpW (lpString1="1035", lpString2=".") returned 1 [0193.145] lstrcmpW (lpString1="1035", lpString2="..") returned 1 [0193.145] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222880 [0193.145] FindNextFileW (in: hFindFile=0x214810, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="1036", cAlternateFileName="")) returned 1 [0193.145] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0193.145] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x2261e8 [0193.146] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0193.146] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226198 | out: hHeap=0x1f0000) returned 1 [0193.146] lstrcmpW (lpString1="1036", lpString2=".") returned 1 [0193.146] lstrcmpW (lpString1="1036", lpString2="..") returned 1 [0193.146] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222640 [0193.146] FindNextFileW (in: hFindFile=0x214810, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="1037", cAlternateFileName="")) returned 1 [0193.146] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0193.146] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x2260a8 [0193.146] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0193.146] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2261e8 | out: hHeap=0x1f0000) returned 1 [0193.146] lstrcmpW (lpString1="1037", lpString2=".") returned 1 [0193.146] lstrcmpW (lpString1="1037", lpString2="..") returned 1 [0193.146] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x138) returned 0x24ae70 [0193.146] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222910 [0193.146] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24ad90 | out: hHeap=0x1f0000) returned 1 [0193.147] FindNextFileW (in: hFindFile=0x214810, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="1038", cAlternateFileName="")) returned 1 [0193.147] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0193.147] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225ce8 [0193.147] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0193.147] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2260a8 | out: hHeap=0x1f0000) returned 1 [0193.147] lstrcmpW (lpString1="1038", lpString2=".") returned 1 [0193.147] lstrcmpW (lpString1="1038", lpString2="..") returned 1 [0193.147] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222a78 [0193.147] FindNextFileW (in: hFindFile=0x214810, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="1040", cAlternateFileName="")) returned 1 [0193.147] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0193.147] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225e78 [0193.147] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0193.147] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225ce8 | out: hHeap=0x1f0000) returned 1 [0193.147] lstrcmpW (lpString1="1040", lpString2=".") returned 1 [0193.147] lstrcmpW (lpString1="1040", lpString2="..") returned 1 [0193.147] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222688 [0193.147] FindNextFileW (in: hFindFile=0x214810, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="1041", cAlternateFileName="")) returned 1 [0193.147] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228188 [0193.148] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225bf8 [0193.148] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228188 | out: hHeap=0x1f0000) returned 1 [0193.148] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225e78 | out: hHeap=0x1f0000) returned 1 [0193.148] lstrcmpW (lpString1="1041", lpString2=".") returned 1 [0193.148] lstrcmpW (lpString1="1041", lpString2="..") returned 1 [0193.148] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222ac0 [0193.148] FindNextFileW (in: hFindFile=0x214810, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="1042", cAlternateFileName="")) returned 1 [0193.148] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228188 [0193.148] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x226148 [0193.148] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228188 | out: hHeap=0x1f0000) returned 1 [0193.148] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225bf8 | out: hHeap=0x1f0000) returned 1 [0193.148] lstrcmpW (lpString1="1042", lpString2=".") returned 1 [0193.148] lstrcmpW (lpString1="1042", lpString2="..") returned 1 [0193.148] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c8) returned 0x24afb0 [0193.148] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222b98 [0193.148] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24ae70 | out: hHeap=0x1f0000) returned 1 [0193.148] FindNextFileW (in: hFindFile=0x214810, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="1043", cAlternateFileName="")) returned 1 [0193.148] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0193.148] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225c48 [0193.149] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0193.149] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226148 | out: hHeap=0x1f0000) returned 1 [0193.149] lstrcmpW (lpString1="1043", lpString2=".") returned 1 [0193.149] lstrcmpW (lpString1="1043", lpString2="..") returned 1 [0193.149] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222be0 [0193.149] FindNextFileW (in: hFindFile=0x214810, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="1044", cAlternateFileName="")) returned 1 [0193.149] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0193.149] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x226238 [0193.149] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0193.149] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225c48 | out: hHeap=0x1f0000) returned 1 [0193.149] lstrcmpW (lpString1="1044", lpString2=".") returned 1 [0193.149] lstrcmpW (lpString1="1044", lpString2="..") returned 1 [0193.149] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222568 [0193.149] FindNextFileW (in: hFindFile=0x214810, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="1045", cAlternateFileName="")) returned 1 [0193.149] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0193.149] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225d88 [0193.149] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0193.149] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226238 | out: hHeap=0x1f0000) returned 1 [0193.149] lstrcmpW (lpString1="1045", lpString2=".") returned 1 [0193.150] lstrcmpW (lpString1="1045", lpString2="..") returned 1 [0193.150] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2225b0 [0193.150] FindNextFileW (in: hFindFile=0x214810, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="1046", cAlternateFileName="")) returned 1 [0193.150] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0193.150] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x226148 [0193.150] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0193.150] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225d88 | out: hHeap=0x1f0000) returned 1 [0193.150] lstrcmpW (lpString1="1046", lpString2=".") returned 1 [0193.150] lstrcmpW (lpString1="1046", lpString2="..") returned 1 [0193.150] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222328 [0193.150] FindNextFileW (in: hFindFile=0x214810, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="1049", cAlternateFileName="")) returned 1 [0193.150] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228188 [0193.150] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x2260f8 [0193.150] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228188 | out: hHeap=0x1f0000) returned 1 [0193.150] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226148 | out: hHeap=0x1f0000) returned 1 [0193.150] lstrcmpW (lpString1="1049", lpString2=".") returned 1 [0193.150] lstrcmpW (lpString1="1049", lpString2="..") returned 1 [0193.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222130 [0193.422] FindNextFileW (in: hFindFile=0x214810, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="1053", cAlternateFileName="")) returned 1 [0193.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ba0 [0193.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225c48 [0193.423] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ba0 | out: hHeap=0x1f0000) returned 1 [0193.423] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2260f8 | out: hHeap=0x1f0000) returned 1 [0193.423] lstrcmpW (lpString1="1053", lpString2=".") returned 1 [0193.423] lstrcmpW (lpString1="1053", lpString2="..") returned 1 [0193.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2a0) returned 0x24f778 [0193.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222448 [0193.423] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24afb0 | out: hHeap=0x1f0000) returned 1 [0193.423] FindNextFileW (in: hFindFile=0x214810, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="1055", cAlternateFileName="")) returned 1 [0193.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ba0 [0193.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225f68 [0193.423] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ba0 | out: hHeap=0x1f0000) returned 1 [0193.423] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225c48 | out: hHeap=0x1f0000) returned 1 [0193.423] lstrcmpW (lpString1="1055", lpString2=".") returned 1 [0193.423] lstrcmpW (lpString1="1055", lpString2="..") returned 1 [0193.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222490 [0193.423] FindNextFileW (in: hFindFile=0x214810, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="2052", cAlternateFileName="")) returned 1 [0193.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2280e0 [0193.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225d88 [0193.423] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2280e0 | out: hHeap=0x1f0000) returned 1 [0193.423] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225f68 | out: hHeap=0x1f0000) returned 1 [0193.424] lstrcmpW (lpString1="2052", lpString2=".") returned 1 [0193.424] lstrcmpW (lpString1="2052", lpString2="..") returned 1 [0193.424] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222370 [0193.424] FindNextFileW (in: hFindFile=0x214810, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="2070", cAlternateFileName="")) returned 1 [0193.424] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ba0 [0193.424] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x226008 [0193.424] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ba0 | out: hHeap=0x1f0000) returned 1 [0193.424] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225d88 | out: hHeap=0x1f0000) returned 1 [0193.424] lstrcmpW (lpString1="2070", lpString2=".") returned 1 [0193.424] lstrcmpW (lpString1="2070", lpString2="..") returned 1 [0193.424] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222010 [0193.424] FindNextFileW (in: hFindFile=0x214810, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="3076", cAlternateFileName="")) returned 1 [0193.424] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0193.424] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225ec8 [0193.424] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0193.424] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226008 | out: hHeap=0x1f0000) returned 1 [0193.424] lstrcmpW (lpString1="3076", lpString2=".") returned 1 [0193.424] lstrcmpW (lpString1="3076", lpString2="..") returned 1 [0193.424] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221f38 [0193.424] FindNextFileW (in: hFindFile=0x214810, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="3082", cAlternateFileName="")) returned 1 [0193.424] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ba0 [0193.424] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x2260f8 [0193.424] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ba0 | out: hHeap=0x1f0000) returned 1 [0193.425] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225ec8 | out: hHeap=0x1f0000) returned 1 [0193.425] lstrcmpW (lpString1="3082", lpString2=".") returned 1 [0193.425] lstrcmpW (lpString1="3082", lpString2="..") returned 1 [0193.425] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2224d8 [0193.425] FindNextFileW (in: hFindFile=0x214810, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Client", cAlternateFileName="")) returned 1 [0193.425] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2280e0 [0193.425] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225c48 [0193.425] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2280e0 | out: hHeap=0x1f0000) returned 1 [0193.425] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2260f8 | out: hHeap=0x1f0000) returned 1 [0193.425] lstrcmpW (lpString1="Client", lpString2=".") returned 1 [0193.425] lstrcmpW (lpString1="Client", lpString2="..") returned 1 [0193.425] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2223b8 [0193.425] FindNextFileW (in: hFindFile=0x214810, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbc518d00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbc518d00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbc518d00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x3ef6, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="DHtmlHeader.html", cAlternateFileName="DHTMLH~1.HTM")) returned 1 [0193.425] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0193.425] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227f20 [0193.425] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239718 [0193.425] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227f20 | out: hHeap=0x1f0000) returned 1 [0193.425] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225c48 | out: hHeap=0x1f0000) returned 1 [0193.425] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0193.477] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\DHtmlHeader.html" (normalized: "c:\\588bce7c90097ed212\\dhtmlheader.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0193.477] GetFileType (hFile=0x1e8) returned 0x1 [0193.477] CloseHandle (hObject=0x1e8) returned 1 [0193.477] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2398d0 [0193.477] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\DHtmlHeader.html" (normalized: "c:\\588bce7c90097ed212\\dhtmlheader.html"), fInfoLevelId=0x0, lpFileInformation=0x259f0ac | out: lpFileInformation=0x259f0ac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbc518d00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbc518d00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbc518d00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x3ef6)) returned 1 [0193.477] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2398d0 | out: hHeap=0x1f0000) returned 1 [0193.477] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239770 [0193.478] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\DHtmlHeader.html" (normalized: "c:\\588bce7c90097ed212\\dhtmlheader.html"), fInfoLevelId=0x0, lpFileInformation=0x259f0b4 | out: lpFileInformation=0x259f0b4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbc518d00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbc518d00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbc518d00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x3ef6)) returned 1 [0193.478] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239770 | out: hHeap=0x1f0000) returned 1 [0193.478] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239508 [0193.478] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239508 | out: hHeap=0x1f0000) returned 1 [0193.478] FindNextFileW (in: hFindFile=0x214810, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x159d5, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="DisplayIcon.ico", cAlternateFileName="DISPLA~1.ICO")) returned 1 [0193.478] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b6d8 [0193.478] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2280e0 [0193.478] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2397c8 [0193.478] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2280e0 | out: hHeap=0x1f0000) returned 1 [0193.478] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239718 | out: hHeap=0x1f0000) returned 1 [0193.478] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b6d8 | out: hHeap=0x1f0000) returned 1 [0193.478] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\DisplayIcon.ico" (normalized: "c:\\588bce7c90097ed212\\displayicon.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0193.478] GetFileType (hFile=0x1e8) returned 0x1 [0193.479] CloseHandle (hObject=0x1e8) returned 1 [0193.479] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239400 [0193.479] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\DisplayIcon.ico" (normalized: "c:\\588bce7c90097ed212\\displayicon.ico"), fInfoLevelId=0x0, lpFileInformation=0x259f0ac | out: lpFileInformation=0x259f0ac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x159d5)) returned 1 [0193.479] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239400 | out: hHeap=0x1f0000) returned 1 [0193.479] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2394b0 [0193.479] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\DisplayIcon.ico" (normalized: "c:\\588bce7c90097ed212\\displayicon.ico"), fInfoLevelId=0x0, lpFileInformation=0x259f0b4 | out: lpFileInformation=0x259f0b4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x159d5)) returned 1 [0193.479] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2394b0 | out: hHeap=0x1f0000) returned 1 [0193.479] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239928 [0193.479] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239928 | out: hHeap=0x1f0000) returned 1 [0193.479] FindNextFileW (in: hFindFile=0x214810, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Extended", cAlternateFileName="")) returned 1 [0193.479] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b548 [0193.479] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227f20 [0193.479] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225e78 [0193.479] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227f20 | out: hHeap=0x1f0000) returned 1 [0193.479] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2397c8 | out: hHeap=0x1f0000) returned 1 [0193.479] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b548 | out: hHeap=0x1f0000) returned 1 [0193.480] lstrcmpW (lpString1="Extended", lpString2=".") returned 1 [0193.480] lstrcmpW (lpString1="Extended", lpString2="..") returned 1 [0193.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222400 [0193.480] FindNextFileW (in: hFindFile=0x214810, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Graphics", cAlternateFileName="")) returned 1 [0193.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b548 [0193.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ba0 [0193.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225ec8 [0193.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ba0 | out: hHeap=0x1f0000) returned 1 [0193.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225e78 | out: hHeap=0x1f0000) returned 1 [0193.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b548 | out: hHeap=0x1f0000) returned 1 [0193.480] lstrcmpW (lpString1="Graphics", lpString2=".") returned 1 [0193.480] lstrcmpW (lpString1="Graphics", lpString2="..") returned 1 [0193.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2220a0 [0193.480] FindNextFileW (in: hFindFile=0x214810, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x87910600, ftCreationTime.dwHighDateTime=0x1ca2a27, ftLastAccessTime.dwLowDateTime=0x87910600, ftLastAccessTime.dwHighDateTime=0x1ca2a27, ftLastWriteTime.dwLowDateTime=0x87910600, ftLastWriteTime.dwHighDateTime=0x1ca2a27, nFileSizeHigh=0x0, nFileSizeLow=0xe2c, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="header.bmp", cAlternateFileName="")) returned 1 [0193.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b6d8 [0193.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227f20 [0193.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239508 [0193.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227f20 | out: hHeap=0x1f0000) returned 1 [0193.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225ec8 | out: hHeap=0x1f0000) returned 1 [0193.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b6d8 | out: hHeap=0x1f0000) returned 1 [0193.480] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\header.bmp" (normalized: "c:\\588bce7c90097ed212\\header.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0193.481] GetFileType (hFile=0x1e8) returned 0x1 [0193.481] CloseHandle (hObject=0x1e8) returned 1 [0193.481] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239b38 [0193.481] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\header.bmp" (normalized: "c:\\588bce7c90097ed212\\header.bmp"), fInfoLevelId=0x0, lpFileInformation=0x259f0ac | out: lpFileInformation=0x259f0ac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x87910600, ftCreationTime.dwHighDateTime=0x1ca2a27, ftLastAccessTime.dwLowDateTime=0x87910600, ftLastAccessTime.dwHighDateTime=0x1ca2a27, ftLastWriteTime.dwLowDateTime=0x87910600, ftLastWriteTime.dwHighDateTime=0x1ca2a27, nFileSizeHigh=0x0, nFileSizeLow=0xe2c)) returned 1 [0193.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239b38 | out: hHeap=0x1f0000) returned 1 [0193.481] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2399d8 [0193.481] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\header.bmp" (normalized: "c:\\588bce7c90097ed212\\header.bmp"), fInfoLevelId=0x0, lpFileInformation=0x259f0b4 | out: lpFileInformation=0x259f0b4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x87910600, ftCreationTime.dwHighDateTime=0x1ca2a27, ftLastAccessTime.dwLowDateTime=0x87910600, ftLastAccessTime.dwHighDateTime=0x1ca2a27, ftLastWriteTime.dwLowDateTime=0x87910600, ftLastWriteTime.dwHighDateTime=0x1ca2a27, nFileSizeHigh=0x0, nFileSizeLow=0xe2c)) returned 1 [0193.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2399d8 | out: hHeap=0x1f0000) returned 1 [0193.481] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239ae0 [0193.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239ae0 | out: hHeap=0x1f0000) returned 1 [0193.481] FindNextFileW (in: hFindFile=0x214810, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x66ea7e00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0x66ea7e00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0x66ea7e00, ftLastWriteTime.dwHighDateTime=0x1cac6e3, nFileSizeHigh=0x0, nFileSizeLow=0xad1384b, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="netfx_Core.mzz", cAlternateFileName="NETFX_~1.MZZ")) returned 1 [0193.481] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b390 [0193.482] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ba0 [0193.482] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239a88 [0193.482] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ba0 | out: hHeap=0x1f0000) returned 1 [0193.482] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239508 | out: hHeap=0x1f0000) returned 1 [0193.482] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b390 | out: hHeap=0x1f0000) returned 1 [0193.482] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\netfx_Core.mzz" (normalized: "c:\\588bce7c90097ed212\\netfx_core.mzz"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0193.482] GetFileType (hFile=0x1e8) returned 0x1 [0193.482] CloseHandle (hObject=0x1e8) returned 1 [0193.483] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2399d8 [0193.483] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\netfx_Core.mzz" (normalized: "c:\\588bce7c90097ed212\\netfx_core.mzz"), fInfoLevelId=0x0, lpFileInformation=0x259f0ac | out: lpFileInformation=0x259f0ac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x66ea7e00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0x66ea7e00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0x66ea7e00, ftLastWriteTime.dwHighDateTime=0x1cac6e3, nFileSizeHigh=0x0, nFileSizeLow=0xad1384b)) returned 1 [0193.483] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2399d8 | out: hHeap=0x1f0000) returned 1 [0193.483] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2399d8 [0193.483] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\netfx_Core.mzz" (normalized: "c:\\588bce7c90097ed212\\netfx_core.mzz"), fInfoLevelId=0x0, lpFileInformation=0x259f0b4 | out: lpFileInformation=0x259f0b4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x66ea7e00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0x66ea7e00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0x66ea7e00, ftLastWriteTime.dwHighDateTime=0x1cac6e3, nFileSizeHigh=0x0, nFileSizeLow=0xad1384b)) returned 1 [0193.483] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2399d8 | out: hHeap=0x1f0000) returned 1 [0193.483] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2398d0 [0193.483] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2398d0 | out: hHeap=0x1f0000) returned 1 [0193.483] GetLastError () returned 0x0 [0193.483] SetLastError (dwErrCode=0x0) [0193.483] AreFileApisANSI () returned 1 [0193.483] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58420, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0193.483] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58420, cbMultiByte=4, lpWideCharStr=0x259f1e4, cchWideChar=4 | out: lpWideCharStr=".exe") returned 4 [0193.483] GetLastError () returned 0x0 [0193.483] SetLastError (dwErrCode=0x0) [0193.483] AreFileApisANSI () returned 1 [0193.483] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe5843c, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0193.483] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe5843c, cbMultiByte=4, lpWideCharStr=0x259f214, cchWideChar=4 | out: lpWideCharStr=".mdf") returned 4 [0193.484] GetLastError () returned 0x0 [0193.484] SetLastError (dwErrCode=0x0) [0193.484] AreFileApisANSI () returned 1 [0193.484] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58444, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0193.484] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58444, cbMultiByte=4, lpWideCharStr=0x259f22c, cchWideChar=4 | out: lpWideCharStr=".pst") returned 4 [0193.484] GetLastError () returned 0x0 [0193.484] SetLastError (dwErrCode=0x0) [0193.484] AreFileApisANSI () returned 1 [0193.484] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe5844c, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0193.484] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe5844c, cbMultiByte=4, lpWideCharStr=0x259f244, cchWideChar=4 | out: lpWideCharStr=".bak") returned 4 [0193.484] GetLastError () returned 0x0 [0193.484] SetLastError (dwErrCode=0x0) [0193.484] AreFileApisANSI () returned 1 [0193.484] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58454, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0193.484] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58454, cbMultiByte=4, lpWideCharStr=0x259f25c, cchWideChar=4 | out: lpWideCharStr=".tib") returned 4 [0193.484] GetLastError () returned 0x0 [0193.484] SetLastError (dwErrCode=0x0) [0193.484] AreFileApisANSI () returned 1 [0193.484] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58444, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0193.484] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58444, cbMultiByte=4, lpWideCharStr=0x259f274, cchWideChar=4 | out: lpWideCharStr=".pst") returned 4 [0193.484] GetLastError () returned 0x0 [0193.484] SetLastError (dwErrCode=0x0) [0193.485] AreFileApisANSI () returned 1 [0193.485] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe5845c, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0193.485] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe5845c, cbMultiByte=4, lpWideCharStr=0x259f28c, cchWideChar=4 | out: lpWideCharStr=".DBF") returned 4 [0193.485] GetLastError () returned 0x0 [0193.485] SetLastError (dwErrCode=0x0) [0193.485] AreFileApisANSI () returned 1 [0193.485] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58464, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0193.485] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58464, cbMultiByte=4, lpWideCharStr=0x259f2a4, cchWideChar=4 | out: lpWideCharStr=".zip") returned 4 [0193.485] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b7a0 [0193.485] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222520 [0193.485] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d838 [0193.485] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239980 [0193.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227f20 [0193.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b548 [0193.492] CryptAcquireContextA (in: phProv=0x2574b70, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2574b70*=0x229d80) returned 1 [0193.494] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x22b548 | out: pbBuffer=0x22b548) returned 1 [0193.494] CryptReleaseContext (hProv=0x229d80, dwFlags=0x0) returned 1 [0193.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b548 | out: hHeap=0x1f0000) returned 1 [0193.494] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x252370 [0193.495] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x25ff68 [0193.495] QueryPerformanceCounter (in: lpPerformanceCount=0x2574b04 | out: lpPerformanceCount=0x2574b04*=35086349165) returned 1 [0193.495] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x2574b44 | out: lpSystemTimeAsFileTime=0x2574b44) [0193.495] QueryPerformanceCounter (in: lpPerformanceCount=0x2574b04 | out: lpPerformanceCount=0x2574b04*=35086364545) returned 1 [0193.495] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x2574b44 | out: lpSystemTimeAsFileTime=0x2574b44) [0193.495] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x2280e0 [0193.495] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x255c88 [0193.495] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x260078 [0193.495] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x239c98 [0193.495] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101b0 [0193.495] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2067d8 [0193.495] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210198 [0193.495] GetLastError () returned 0x0 [0193.495] SetLastError (dwErrCode=0x0) [0193.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2280e0 | out: hHeap=0x1f0000) returned 1 [0193.496] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\netfx_Core.mzz" (normalized: "c:\\588bce7c90097ed212\\netfx_core.mzz"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x2574ad4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0193.496] GetFileType (hFile=0x1e8) returned 0x1 [0193.496] SetFilePointerEx (in: hFile=0x1e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2574b40 | out: lpNewFilePointer=0x0) returned 1 [0193.496] ReadFile (in: hFile=0x1e8, lpBuffer=0x258a040, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x2574b18, lpOverlapped=0x0 | out: lpBuffer=0x258a040*, lpNumberOfBytesRead=0x2574b18*=0x14000, lpOverlapped=0x0) returned 1 [0193.547] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x23edd0 [0193.547] ReadFile (in: hFile=0x1e8, lpBuffer=0x23edd0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2574abc, lpOverlapped=0x0 | out: lpBuffer=0x23edd0*, lpNumberOfBytesRead=0x2574abc*=0x1000, lpOverlapped=0x0) returned 1 [0193.866] SetFilePointerEx (in: hFile=0x1e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2574b48 | out: lpNewFilePointer=0x0) returned 1 [0193.866] WriteFile (in: hFile=0x1e8, lpBuffer=0x2575050*, nNumberOfBytesToWrite=0x14000, lpNumberOfBytesWritten=0x2574ab4, lpOverlapped=0x0 | out: lpBuffer=0x2575050*, lpNumberOfBytesWritten=0x2574ab4*=0x14000, lpOverlapped=0x0) returned 1 [0193.866] WriteFile (in: hFile=0x1e8, lpBuffer=0x23edd0*, nNumberOfBytesToWrite=0xff0, lpNumberOfBytesWritten=0x2574ae0, lpOverlapped=0x0 | out: lpBuffer=0x23edd0*, lpNumberOfBytesWritten=0x2574ae0*=0xff0, lpOverlapped=0x0) returned 1 [0193.867] SetFilePointerEx (in: hFile=0x1e8, liDistanceToMove=0x15f90, lpNewFilePointer=0x0, dwMoveMethod=0x2574b28 | out: lpNewFilePointer=0x0) returned 1 [0193.867] ReadFile (in: hFile=0x1e8, lpBuffer=0x258a040, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x2574b00, lpOverlapped=0x0 | out: lpBuffer=0x258a040*, lpNumberOfBytesRead=0x2574b00*=0x14000, lpOverlapped=0x0) returned 1 [0193.867] ReadFile (in: hFile=0x1e8, lpBuffer=0x23edd0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2574aa4, lpOverlapped=0x0 | out: lpBuffer=0x23edd0*, lpNumberOfBytesRead=0x2574aa4*=0x1000, lpOverlapped=0x0) returned 1 [0193.868] SetFilePointerEx (in: hFile=0x1e8, liDistanceToMove=0x15f90, lpNewFilePointer=0x0, dwMoveMethod=0x2574b48 | out: lpNewFilePointer=0x0) returned 1 [0193.868] WriteFile (in: hFile=0x1e8, lpBuffer=0x2575050*, nNumberOfBytesToWrite=0x14000, lpNumberOfBytesWritten=0x2574ab4, lpOverlapped=0x0 | out: lpBuffer=0x2575050*, lpNumberOfBytesWritten=0x2574ab4*=0x14000, lpOverlapped=0x0) returned 1 [0193.869] WriteFile (in: hFile=0x1e8, lpBuffer=0x23edd0*, nNumberOfBytesToWrite=0xff0, lpNumberOfBytesWritten=0x2574ae0, lpOverlapped=0x0 | out: lpBuffer=0x23edd0*, lpNumberOfBytesWritten=0x2574ae0*=0xff0, lpOverlapped=0x0) returned 1 [0193.869] SetFilePointerEx (in: hFile=0x1e8, liDistanceToMove=0xdbba0, lpNewFilePointer=0x0, dwMoveMethod=0x2574b28 | out: lpNewFilePointer=0x0) returned 1 [0193.869] ReadFile (in: hFile=0x1e8, lpBuffer=0x258a040, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x2574b00, lpOverlapped=0x0 | out: lpBuffer=0x258a040*, lpNumberOfBytesRead=0x2574b00*=0x14000, lpOverlapped=0x0) returned 1 [0193.884] ReadFile (in: hFile=0x1e8, lpBuffer=0x23edd0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2574aa4, lpOverlapped=0x0 | out: lpBuffer=0x23edd0*, lpNumberOfBytesRead=0x2574aa4*=0x1000, lpOverlapped=0x0) returned 1 [0193.892] SetFilePointerEx (in: hFile=0x1e8, liDistanceToMove=0xdbba0, lpNewFilePointer=0x0, dwMoveMethod=0x2574b48 | out: lpNewFilePointer=0x0) returned 1 [0193.892] WriteFile (in: hFile=0x1e8, lpBuffer=0x2575050*, nNumberOfBytesToWrite=0x14000, lpNumberOfBytesWritten=0x2574ab4, lpOverlapped=0x0 | out: lpBuffer=0x2575050*, lpNumberOfBytesWritten=0x2574ab4*=0x14000, lpOverlapped=0x0) returned 1 [0193.892] WriteFile (in: hFile=0x1e8, lpBuffer=0x23edd0*, nNumberOfBytesToWrite=0xff0, lpNumberOfBytesWritten=0x2574b00, lpOverlapped=0x0 | out: lpBuffer=0x23edd0*, lpNumberOfBytesWritten=0x2574b00*=0xff0, lpOverlapped=0x0) returned 1 [0193.893] SetFilePointerEx (in: hFile=0x1e8, liDistanceToMove=0x3197500, lpNewFilePointer=0x0, dwMoveMethod=0x2574b48 | out: lpNewFilePointer=0x0) returned 1 [0193.893] ReadFile (in: hFile=0x1e8, lpBuffer=0x258a040, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x2574b20, lpOverlapped=0x0 | out: lpBuffer=0x258a040*, lpNumberOfBytesRead=0x2574b20*=0x14000, lpOverlapped=0x0) returned 1 [0193.900] ReadFile (in: hFile=0x1e8, lpBuffer=0x23edd0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2574ac4, lpOverlapped=0x0 | out: lpBuffer=0x23edd0*, lpNumberOfBytesRead=0x2574ac4*=0x1000, lpOverlapped=0x0) returned 1 [0193.904] SetFilePointerEx (in: hFile=0x1e8, liDistanceToMove=0x3197500, lpNewFilePointer=0x0, dwMoveMethod=0x2574b48 | out: lpNewFilePointer=0x0) returned 1 [0193.904] WriteFile (in: hFile=0x1e8, lpBuffer=0x2575050*, nNumberOfBytesToWrite=0x14000, lpNumberOfBytesWritten=0x2574ab4, lpOverlapped=0x0 | out: lpBuffer=0x2575050*, lpNumberOfBytesWritten=0x2574ab4*=0x14000, lpOverlapped=0x0) returned 1 [0193.904] WriteFile (in: hFile=0x1e8, lpBuffer=0x23edd0*, nNumberOfBytesToWrite=0xff0, lpNumberOfBytesWritten=0x2574b30, lpOverlapped=0x0 | out: lpBuffer=0x23edd0*, lpNumberOfBytesWritten=0x2574b30*=0xff0, lpOverlapped=0x0) returned 1 [0193.905] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x23edd0 | out: hHeap=0x1f0000) returned 1 [0193.905] CloseHandle (hObject=0x1e8) returned 1 [0198.811] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216098 [0198.811] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b458 [0198.811] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x22b480 [0198.811] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x2160e0 [0198.812] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205150 [0198.812] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205210 [0198.812] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x21c720 [0198.812] GetLastError () returned 0x0 [0198.812] SetLastError (dwErrCode=0x0) [0198.812] GetLastError () returned 0x0 [0198.812] SetLastError (dwErrCode=0x0) [0198.812] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205150 | out: hHeap=0x1f0000) returned 1 [0198.812] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205210 | out: hHeap=0x1f0000) returned 1 [0198.812] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x21cf00 [0198.813] GetLastError () returned 0x0 [0198.813] SetLastError (dwErrCode=0x0) [0198.813] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0198.813] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x21d210 [0198.813] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d00 [0198.813] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x22b4d0 [0198.813] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x234fc8 [0198.813] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c5d0 [0198.813] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b818 [0198.813] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffb8 [0198.814] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c560 [0198.814] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b840 [0198.814] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffd0 [0198.814] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x22b868 [0198.814] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2350d0 [0198.814] GetLastError () returned 0x0 [0198.814] SetLastError (dwErrCode=0x0) [0198.814] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d210 | out: hHeap=0x1f0000) returned 1 [0198.814] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x21c6c0 [0198.814] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x21c5b0 [0198.814] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c570 [0198.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5b0 | out: hHeap=0x1f0000) returned 1 [0198.815] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c580 [0198.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c570 | out: hHeap=0x1f0000) returned 1 [0198.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c6c0 | out: hHeap=0x1f0000) returned 1 [0198.815] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c570 [0198.815] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x20ffe8 [0198.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c570 | out: hHeap=0x1f0000) returned 1 [0198.815] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210000 [0198.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffe8 | out: hHeap=0x1f0000) returned 1 [0198.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c580 | out: hHeap=0x1f0000) returned 1 [0198.815] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x20ffe8 [0198.816] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210090 [0198.816] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffe8 | out: hHeap=0x1f0000) returned 1 [0198.816] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2100a8 [0198.816] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210090 | out: hHeap=0x1f0000) returned 1 [0198.816] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210000 | out: hHeap=0x1f0000) returned 1 [0198.816] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffe8 [0198.816] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x205290 [0198.816] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffe8 | out: hHeap=0x1f0000) returned 1 [0198.816] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204fb0 [0198.816] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205290 | out: hHeap=0x1f0000) returned 1 [0198.816] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2100a8 | out: hHeap=0x1f0000) returned 1 [0198.817] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205150 [0198.817] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x20b9e0 [0198.817] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205150 | out: hHeap=0x1f0000) returned 1 [0198.817] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x205150 [0198.817] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b9e0 | out: hHeap=0x1f0000) returned 1 [0198.817] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204fb0 | out: hHeap=0x1f0000) returned 1 [0198.817] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x205210 [0198.817] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206808 [0198.817] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205210 | out: hHeap=0x1f0000) returned 1 [0198.817] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x20b8c8 [0198.818] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206808 | out: hHeap=0x1f0000) returned 1 [0198.818] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205150 | out: hHeap=0x1f0000) returned 1 [0198.818] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c6c0 [0198.818] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210090 [0198.818] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c6c0 | out: hHeap=0x1f0000) returned 1 [0198.818] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210000 [0198.818] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210090 | out: hHeap=0x1f0000) returned 1 [0198.818] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x205150 [0198.818] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210000 | out: hHeap=0x1f0000) returned 1 [0198.818] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206808 [0198.818] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205150 | out: hHeap=0x1f0000) returned 1 [0198.819] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206808 | out: hHeap=0x1f0000) returned 1 [0198.819] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b8c8 | out: hHeap=0x1f0000) returned 1 [0198.819] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b458 | out: hHeap=0x1f0000) returned 1 [0198.819] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0198.819] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234fc8 | out: hHeap=0x1f0000) returned 1 [0198.819] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b4d0 | out: hHeap=0x1f0000) returned 1 [0198.819] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d210 [0198.819] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b9e0 [0198.819] CryptAcquireContextA (in: phProv=0x2574b70, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2574b70*=0x229830) returned 1 [0198.823] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x20b9e0 | out: pbBuffer=0x20b9e0) returned 1 [0198.823] CryptReleaseContext (hProv=0x229830, dwFlags=0x0) returned 1 [0198.823] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b9e0 | out: hHeap=0x1f0000) returned 1 [0198.823] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b9e0 [0198.823] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b8c8 [0198.823] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2f0 [0198.823] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b9e0 | out: hHeap=0x1f0000) returned 1 [0198.823] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0198.824] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0198.824] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x239878 [0198.824] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffe8 [0198.824] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x214f08 [0198.824] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x20b670 [0198.824] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x234fc8 [0198.824] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204fb0 [0198.824] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214af8 [0198.824] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x20b8f0 [0198.824] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2357a0 [0198.824] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c5f0 [0198.824] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b9e0 [0198.825] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210000 [0198.825] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c570 [0198.825] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b620 [0198.825] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210018 [0198.825] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210018 | out: hHeap=0x1f0000) returned 1 [0198.825] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b620 | out: hHeap=0x1f0000) returned 1 [0198.825] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c570 | out: hHeap=0x1f0000) returned 1 [0198.825] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210000 | out: hHeap=0x1f0000) returned 1 [0198.825] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b9e0 | out: hHeap=0x1f0000) returned 1 [0198.825] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5f0 | out: hHeap=0x1f0000) returned 1 [0198.825] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2357a0 | out: hHeap=0x1f0000) returned 1 [0198.826] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b8f0 | out: hHeap=0x1f0000) returned 1 [0198.826] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214af8 | out: hHeap=0x1f0000) returned 1 [0198.826] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x21d2f0 [0198.826] GetLastError () returned 0x0 [0198.826] SetLastError (dwErrCode=0x0) [0198.826] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0198.827] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x21d2f0 [0198.827] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0198.827] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0198.827] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0198.827] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0198.827] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0198.827] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0198.827] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x24e800 [0198.827] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2357a0 [0198.827] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0198.827] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0198.828] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0198.828] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0198.828] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2358a8 [0198.828] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0198.828] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0198.828] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f768 [0198.828] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x254980 [0198.828] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x229418 [0198.828] QueryPerformanceCounter (in: lpPerformanceCount=0x25746c0 | out: lpPerformanceCount=0x25746c0*=35619714426) returned 1 [0198.828] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x2574700 | out: lpSystemTimeAsFileTime=0x2574700) [0198.829] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x21c6c0 [0198.829] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b8f0 [0198.829] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205210 [0198.829] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205210 | out: hHeap=0x1f0000) returned 1 [0198.829] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b8f0 | out: hHeap=0x1f0000) returned 1 [0198.829] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b8f0 [0198.829] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205210 [0198.829] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205210 | out: hHeap=0x1f0000) returned 1 [0198.829] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b8f0 | out: hHeap=0x1f0000) returned 1 [0198.829] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c6c0 | out: hHeap=0x1f0000) returned 1 [0198.829] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0198.830] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x21cf00 [0198.830] GetLastError () returned 0x0 [0198.830] SetLastError (dwErrCode=0x0) [0198.830] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0198.830] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0198.830] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0198.830] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0198.830] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b8f0 [0198.830] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b9e0 [0198.830] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0198.831] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0198.831] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20b620 [0198.831] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0198.831] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x222ee8 [0198.831] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0198.831] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x25fd40 [0198.831] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0198.831] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x230e38 [0198.831] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25fd40 | out: hHeap=0x1f0000) returned 1 [0198.831] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20bc38 [0198.832] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20bd00 [0198.832] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20bc38 | out: hHeap=0x1f0000) returned 1 [0198.832] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0198.832] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20bd00 | out: hHeap=0x1f0000) returned 1 [0198.832] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x25fd40 [0198.832] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x260498 [0198.832] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260498 | out: hHeap=0x1f0000) returned 1 [0198.832] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25fd40 | out: hHeap=0x1f0000) returned 1 [0198.832] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230e38 | out: hHeap=0x1f0000) returned 1 [0198.832] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210000 [0198.832] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215b40 [0198.833] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20bd50 [0198.833] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20bb98 [0198.833] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20bc38 [0198.833] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20bd00 [0198.833] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20bb98 | out: hHeap=0x1f0000) returned 1 [0198.833] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20bd50 | out: hHeap=0x1f0000) returned 1 [0198.833] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x25fd40 [0198.833] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20bd50 [0198.833] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x20bb98 [0198.833] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20bd50 | out: hHeap=0x1f0000) returned 1 [0198.834] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0198.834] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20bb98 | out: hHeap=0x1f0000) returned 1 [0198.834] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206808 [0198.834] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x260498 [0198.834] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260498 | out: hHeap=0x1f0000) returned 1 [0198.834] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206808 | out: hHeap=0x1f0000) returned 1 [0198.834] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b620 | out: hHeap=0x1f0000) returned 1 [0198.834] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0198.834] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0198.834] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25fd40 | out: hHeap=0x1f0000) returned 1 [0198.835] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x205150 [0198.835] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0198.835] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0198.835] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b9e0 | out: hHeap=0x1f0000) returned 1 [0198.835] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x236590 [0198.835] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0198.835] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20bd00 | out: hHeap=0x1f0000) returned 1 [0198.835] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20bc38 | out: hHeap=0x1f0000) returned 1 [0198.835] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x215b40 | out: hHeap=0x1f0000) returned 1 [0198.835] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0198.835] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205150 | out: hHeap=0x1f0000) returned 1 [0198.836] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210000 | out: hHeap=0x1f0000) returned 1 [0198.836] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0198.836] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x236468 [0198.836] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236468 | out: hHeap=0x1f0000) returned 1 [0198.836] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ee8 | out: hHeap=0x1f0000) returned 1 [0198.836] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0198.836] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0198.836] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0198.836] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0198.836] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b8f0 | out: hHeap=0x1f0000) returned 1 [0198.836] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0198.836] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0198.836] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x237498 [0198.836] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x236da8 [0198.836] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237498 | out: hHeap=0x1f0000) returned 1 [0198.837] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236da8 | out: hHeap=0x1f0000) returned 1 [0198.837] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236590 | out: hHeap=0x1f0000) returned 1 [0198.837] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0198.837] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2358a8 | out: hHeap=0x1f0000) returned 1 [0198.837] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24e800 | out: hHeap=0x1f0000) returned 1 [0198.837] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x2358a8 [0198.837] GetLastError () returned 0x0 [0198.837] SetLastError (dwErrCode=0x0) [0198.837] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0198.837] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c6c0 [0198.837] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c570 [0198.838] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\netfx_Core.mzz" (normalized: "c:\\588bce7c90097ed212\\netfx_core.mzz"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2574a70, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0198.838] GetFileType (hFile=0x214) returned 0x1 [0198.839] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x245e08 [0198.839] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x25749f8 | out: lpNewFilePointer=0x0) returned 1 [0198.839] GetLastError () returned 0xb7 [0198.839] SetLastError (dwErrCode=0xb7) [0198.839] GetLastError () returned 0xb7 [0198.839] SetLastError (dwErrCode=0xb7) [0198.839] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2574abc | out: lpNewFilePointer=0x0) returned 1 [0198.839] WriteFile (in: hFile=0x214, lpBuffer=0x245e08*, nNumberOfBytesToWrite=0x103, lpNumberOfBytesWritten=0x2574b20, lpOverlapped=0x0 | out: lpBuffer=0x245e08*, lpNumberOfBytesWritten=0x2574b20*=0x103, lpOverlapped=0x0) returned 1 [0199.109] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x245e08 | out: hHeap=0x1f0000) returned 1 [0199.109] CloseHandle (hObject=0x214) returned 1 [0202.865] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214f70 [0202.865] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21aab8 [0202.865] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f70 | out: hHeap=0x1f0000) returned 1 [0202.865] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xee) returned 0x2232e0 [0202.865] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21aab8 | out: hHeap=0x1f0000) returned 1 [0202.865] MoveFileExW (lpExistingFileName="C:\\\\588bce7c90097ed212\\netfx_Core.mzz" (normalized: "c:\\588bce7c90097ed212\\netfx_core.mzz"), lpNewFileName="C:\\\\588bce7c90097ed212\\netfx_Core.mzz.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\netfx_core.mzz.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwFlags=0x2) returned 0 [0202.866] GetLastError () returned 0x20 [0202.866] GetLastError () returned 0x20 [0202.866] SetLastError (dwErrCode=0x20) [0202.866] GetLastError () returned 0x20 [0202.866] SetLastError (dwErrCode=0x20) [0202.866] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2232e0 | out: hHeap=0x1f0000) returned 1 [0202.866] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c570 | out: hHeap=0x1f0000) returned 1 [0202.866] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c6c0 | out: hHeap=0x1f0000) returned 1 [0202.866] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2357a0 | out: hHeap=0x1f0000) returned 1 [0202.866] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234fc8 | out: hHeap=0x1f0000) returned 1 [0202.866] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b670 | out: hHeap=0x1f0000) returned 1 [0202.866] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204fb0 | out: hHeap=0x1f0000) returned 1 [0202.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f08 | out: hHeap=0x1f0000) returned 1 [0202.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffe8 | out: hHeap=0x1f0000) returned 1 [0202.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239878 | out: hHeap=0x1f0000) returned 1 [0202.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2358a8 | out: hHeap=0x1f0000) returned 1 [0202.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b8c8 | out: hHeap=0x1f0000) returned 1 [0202.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0202.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x254980 | out: hHeap=0x1f0000) returned 1 [0202.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0202.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d210 | out: hHeap=0x1f0000) returned 1 [0202.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c720 | out: hHeap=0x1f0000) returned 1 [0202.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffd0 | out: hHeap=0x1f0000) returned 1 [0202.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b840 | out: hHeap=0x1f0000) returned 1 [0202.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c560 | out: hHeap=0x1f0000) returned 1 [0202.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffb8 | out: hHeap=0x1f0000) returned 1 [0202.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b818 | out: hHeap=0x1f0000) returned 1 [0202.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5d0 | out: hHeap=0x1f0000) returned 1 [0202.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2350d0 | out: hHeap=0x1f0000) returned 1 [0202.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b868 | out: hHeap=0x1f0000) returned 1 [0202.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d00 | out: hHeap=0x1f0000) returned 1 [0202.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2160e0 | out: hHeap=0x1f0000) returned 1 [0202.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b480 | out: hHeap=0x1f0000) returned 1 [0202.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0202.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x216098 | out: hHeap=0x1f0000) returned 1 [0202.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x255c88 | out: hHeap=0x1f0000) returned 1 [0202.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260078 | out: hHeap=0x1f0000) returned 1 [0202.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2067d8 | out: hHeap=0x1f0000) returned 1 [0202.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0202.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0202.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239c98 | out: hHeap=0x1f0000) returned 1 [0202.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x252370 | out: hHeap=0x1f0000) returned 1 [0202.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25ff68 | out: hHeap=0x1f0000) returned 1 [0202.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227f20 | out: hHeap=0x1f0000) returned 1 [0202.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239980 | out: hHeap=0x1f0000) returned 1 [0202.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d838 | out: hHeap=0x1f0000) returned 1 [0202.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222520 | out: hHeap=0x1f0000) returned 1 [0202.869] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b7a0 | out: hHeap=0x1f0000) returned 1 [0202.869] FindNextFileW (in: hFindFile=0x214810, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xc183da00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0xc183da00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0xc183da00, ftLastWriteTime.dwHighDateTime=0x1cac6e3, nFileSizeHigh=0x0, nFileSizeLow=0x1d0200, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="netfx_Core_x64.msi", cAlternateFileName="NETFX_~1.MSI")) returned 1 [0202.869] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0202.869] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d210 [0202.869] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c98 [0202.869] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d210 | out: hHeap=0x1f0000) returned 1 [0202.869] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239a88 | out: hHeap=0x1f0000) returned 1 [0202.869] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0203.049] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\netfx_Core_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0203.049] GetLastError () returned 0x2 [0203.049] GetLastError () returned 0x2 [0203.049] SetLastError (dwErrCode=0x2) [0203.049] GetLastError () returned 0x2 [0203.049] SetLastError (dwErrCode=0x2) [0203.049] GetLastError () returned 0x2 [0203.050] SetLastError (dwErrCode=0x2) [0203.050] FindNextFileW (in: hFindFile=0x214810, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x4c130c00, ftCreationTime.dwHighDateTime=0x1cac6d9, ftLastAccessTime.dwLowDateTime=0x4c130c00, ftLastAccessTime.dwHighDateTime=0x1cac6d9, ftLastWriteTime.dwLowDateTime=0x4c130c00, ftLastWriteTime.dwHighDateTime=0x1cac6d9, nFileSizeHigh=0x0, nFileSizeLow=0x11c000, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="netfx_Core_x86.msi", cAlternateFileName="NETFX_~2.MSI")) returned 1 [0203.050] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2f0 [0203.050] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0203.050] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214f70 [0203.050] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0203.050] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c98 | out: hHeap=0x1f0000) returned 1 [0203.050] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0203.050] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\netfx_Core_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x86.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0203.050] GetLastError () returned 0x2 [0203.051] GetLastError () returned 0x2 [0203.051] SetLastError (dwErrCode=0x2) [0203.051] GetLastError () returned 0x2 [0203.051] SetLastError (dwErrCode=0x2) [0203.051] GetLastError () returned 0x2 [0203.051] SetLastError (dwErrCode=0x2) [0203.051] FindNextFileW (in: hFindFile=0x214810, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf74cd515, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf74cd515, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf7cd9415, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x29222c7, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="netfx_Extended.mzz", cAlternateFileName="NETFX_~2.MZZ")) returned 1 [0203.051] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0203.051] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0203.051] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d68 [0203.051] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0203.051] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214f70 | out: hHeap=0x1f0000) returned 1 [0203.051] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0203.052] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\netfx_Extended.mzz" (normalized: "c:\\588bce7c90097ed212\\netfx_extended.mzz"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0203.052] GetFileType (hFile=0x1ac) returned 0x1 [0203.052] CloseHandle (hObject=0x1ac) returned 1 [0203.053] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c98 [0203.053] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\netfx_Extended.mzz" (normalized: "c:\\588bce7c90097ed212\\netfx_extended.mzz"), fInfoLevelId=0x0, lpFileInformation=0x259f0ac | out: lpFileInformation=0x259f0ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf74cd515, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf74cd515, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf7cd9415, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x29222c7)) returned 1 [0203.053] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c98 | out: hHeap=0x1f0000) returned 1 [0203.053] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214e38 [0203.053] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\netfx_Extended.mzz" (normalized: "c:\\588bce7c90097ed212\\netfx_extended.mzz"), fInfoLevelId=0x0, lpFileInformation=0x259f0b4 | out: lpFileInformation=0x259f0b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf74cd515, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf74cd515, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf7cd9415, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x29222c7)) returned 1 [0203.053] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214e38 | out: hHeap=0x1f0000) returned 1 [0203.053] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214c98 [0203.053] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214c98 | out: hHeap=0x1f0000) returned 1 [0203.053] GetLastError () returned 0x0 [0203.053] SetLastError (dwErrCode=0x0) [0203.053] AreFileApisANSI () returned 1 [0203.053] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58420, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0203.054] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58420, cbMultiByte=4, lpWideCharStr=0x259f1e4, cchWideChar=4 | out: lpWideCharStr=".exe") returned 4 [0203.054] GetLastError () returned 0x0 [0203.054] SetLastError (dwErrCode=0x0) [0203.054] AreFileApisANSI () returned 1 [0203.054] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe5843c, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0203.054] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe5843c, cbMultiByte=4, lpWideCharStr=0x259f214, cchWideChar=4 | out: lpWideCharStr=".mdf") returned 4 [0203.054] GetLastError () returned 0x0 [0203.054] SetLastError (dwErrCode=0x0) [0203.054] AreFileApisANSI () returned 1 [0203.054] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58444, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0203.054] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58444, cbMultiByte=4, lpWideCharStr=0x259f22c, cchWideChar=4 | out: lpWideCharStr=".pst") returned 4 [0203.054] GetLastError () returned 0x0 [0203.054] SetLastError (dwErrCode=0x0) [0203.054] AreFileApisANSI () returned 1 [0203.054] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe5844c, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0203.054] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe5844c, cbMultiByte=4, lpWideCharStr=0x259f244, cchWideChar=4 | out: lpWideCharStr=".bak") returned 4 [0203.054] GetLastError () returned 0x0 [0203.054] SetLastError (dwErrCode=0x0) [0203.054] AreFileApisANSI () returned 1 [0203.055] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58454, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0203.055] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58454, cbMultiByte=4, lpWideCharStr=0x259f25c, cchWideChar=4 | out: lpWideCharStr=".tib") returned 4 [0203.055] GetLastError () returned 0x0 [0203.055] SetLastError (dwErrCode=0x0) [0203.055] AreFileApisANSI () returned 1 [0203.055] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58444, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0203.055] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58444, cbMultiByte=4, lpWideCharStr=0x259f274, cchWideChar=4 | out: lpWideCharStr=".pst") returned 4 [0203.055] GetLastError () returned 0x0 [0203.055] SetLastError (dwErrCode=0x0) [0203.055] AreFileApisANSI () returned 1 [0203.055] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe5845c, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0203.055] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe5845c, cbMultiByte=4, lpWideCharStr=0x259f28c, cchWideChar=4 | out: lpWideCharStr=".DBF") returned 4 [0203.055] GetLastError () returned 0x0 [0203.055] SetLastError (dwErrCode=0x0) [0203.055] AreFileApisANSI () returned 1 [0203.055] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58464, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0203.055] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58464, cbMultiByte=4, lpWideCharStr=0x259f2a4, cchWideChar=4 | out: lpWideCharStr=".zip") returned 4 [0203.055] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a18 [0203.055] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233d20 [0203.056] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e4f8 [0203.056] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2150a8 [0203.056] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0203.056] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ab8 [0203.056] CryptAcquireContextA (in: phProv=0x2574b70, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2574b70*=0x22a468) returned 1 [0203.059] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x260ab8 | out: pbBuffer=0x260ab8) returned 1 [0203.060] CryptReleaseContext (hProv=0x22a468, dwFlags=0x0) returned 1 [0203.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ab8 | out: hHeap=0x1f0000) returned 1 [0203.060] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x254980 [0203.060] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x229418 [0203.060] QueryPerformanceCounter (in: lpPerformanceCount=0x2574b04 | out: lpPerformanceCount=0x2574b04*=36042870292) returned 1 [0203.060] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x2574b44 | out: lpSystemTimeAsFileTime=0x2574b44) [0203.060] QueryPerformanceCounter (in: lpPerformanceCount=0x2574b04 | out: lpPerformanceCount=0x2574b04*=36042900734) returned 1 [0203.060] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x2574b44 | out: lpSystemTimeAsFileTime=0x2574b44) [0203.060] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x227ee8 [0203.060] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x2595a0 [0203.060] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2232e0 [0203.061] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x20e1f0 [0203.061] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101b0 [0203.061] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2067d8 [0203.061] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210198 [0203.061] GetLastError () returned 0x0 [0203.061] SetLastError (dwErrCode=0x0) [0203.061] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0203.061] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\netfx_Extended.mzz" (normalized: "c:\\588bce7c90097ed212\\netfx_extended.mzz"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x2574ad4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0203.062] GetFileType (hFile=0x1ac) returned 0x1 [0203.062] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2574b40 | out: lpNewFilePointer=0x0) returned 1 [0203.062] ReadFile (in: hFile=0x1ac, lpBuffer=0x258a040, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x2574b18, lpOverlapped=0x0 | out: lpBuffer=0x258a040*, lpNumberOfBytesRead=0x2574b18*=0x14000, lpOverlapped=0x0) returned 1 [0203.066] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x23adb0 [0203.066] ReadFile (in: hFile=0x1ac, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2574abc, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x2574abc*=0x1000, lpOverlapped=0x0) returned 1 [0203.068] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2574b48 | out: lpNewFilePointer=0x0) returned 1 [0203.068] WriteFile (in: hFile=0x1ac, lpBuffer=0x2575050*, nNumberOfBytesToWrite=0x14000, lpNumberOfBytesWritten=0x2574ab4, lpOverlapped=0x0 | out: lpBuffer=0x2575050*, lpNumberOfBytesWritten=0x2574ab4*=0x14000, lpOverlapped=0x0) returned 1 [0203.069] WriteFile (in: hFile=0x1ac, lpBuffer=0x23adb0*, nNumberOfBytesToWrite=0xff0, lpNumberOfBytesWritten=0x2574ae0, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesWritten=0x2574ae0*=0xff0, lpOverlapped=0x0) returned 1 [0203.070] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x15f90, lpNewFilePointer=0x0, dwMoveMethod=0x2574b28 | out: lpNewFilePointer=0x0) returned 1 [0203.070] ReadFile (in: hFile=0x1ac, lpBuffer=0x258a040, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x2574b00, lpOverlapped=0x0 | out: lpBuffer=0x258a040*, lpNumberOfBytesRead=0x2574b00*=0x14000, lpOverlapped=0x0) returned 1 [0203.070] ReadFile (in: hFile=0x1ac, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2574aa4, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x2574aa4*=0x1000, lpOverlapped=0x0) returned 1 [0203.071] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x15f90, lpNewFilePointer=0x0, dwMoveMethod=0x2574b48 | out: lpNewFilePointer=0x0) returned 1 [0203.071] WriteFile (in: hFile=0x1ac, lpBuffer=0x2575050*, nNumberOfBytesToWrite=0x14000, lpNumberOfBytesWritten=0x2574ab4, lpOverlapped=0x0 | out: lpBuffer=0x2575050*, lpNumberOfBytesWritten=0x2574ab4*=0x14000, lpOverlapped=0x0) returned 1 [0203.072] WriteFile (in: hFile=0x1ac, lpBuffer=0x23adb0*, nNumberOfBytesToWrite=0xff0, lpNumberOfBytesWritten=0x2574ae0, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesWritten=0x2574ae0*=0xff0, lpOverlapped=0x0) returned 1 [0203.072] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0xdbba0, lpNewFilePointer=0x0, dwMoveMethod=0x2574b28 | out: lpNewFilePointer=0x0) returned 1 [0203.072] ReadFile (in: hFile=0x1ac, lpBuffer=0x258a040, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x2574b00, lpOverlapped=0x0 | out: lpBuffer=0x258a040*, lpNumberOfBytesRead=0x2574b00*=0x14000, lpOverlapped=0x0) returned 1 [0203.075] ReadFile (in: hFile=0x1ac, lpBuffer=0x23adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2574aa4, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesRead=0x2574aa4*=0x1000, lpOverlapped=0x0) returned 1 [0203.076] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0xdbba0, lpNewFilePointer=0x0, dwMoveMethod=0x2574b48 | out: lpNewFilePointer=0x0) returned 1 [0203.077] WriteFile (in: hFile=0x1ac, lpBuffer=0x2575050*, nNumberOfBytesToWrite=0x14000, lpNumberOfBytesWritten=0x2574ab4, lpOverlapped=0x0 | out: lpBuffer=0x2575050*, lpNumberOfBytesWritten=0x2574ab4*=0x14000, lpOverlapped=0x0) returned 1 [0203.078] WriteFile (in: hFile=0x1ac, lpBuffer=0x23adb0*, nNumberOfBytesToWrite=0xff0, lpNumberOfBytesWritten=0x2574b30, lpOverlapped=0x0 | out: lpBuffer=0x23adb0*, lpNumberOfBytesWritten=0x2574b30*=0xff0, lpOverlapped=0x0) returned 1 [0203.078] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x23adb0 | out: hHeap=0x1f0000) returned 1 [0203.078] CloseHandle (hObject=0x1ac) returned 1 [0207.361] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234a10 [0207.361] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2607c0 [0207.361] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260608 [0207.361] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x234aa0 [0207.361] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205210 [0207.362] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x2052d0 [0207.362] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x21c5f0 [0207.362] GetLastError () returned 0x0 [0207.362] SetLastError (dwErrCode=0x0) [0207.362] GetLastError () returned 0x0 [0207.362] SetLastError (dwErrCode=0x0) [0207.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205210 | out: hHeap=0x1f0000) returned 1 [0207.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2052d0 | out: hHeap=0x1f0000) returned 1 [0207.362] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x21cf70 [0207.362] GetLastError () returned 0x0 [0207.362] SetLastError (dwErrCode=0x0) [0207.363] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf70 | out: hHeap=0x1f0000) returned 1 [0207.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x21cf70 [0207.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235be0 [0207.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2605e0 [0207.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2647e0 [0207.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c680 [0207.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260900 [0207.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210018 [0207.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c5d0 [0207.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2607e8 [0207.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2100a8 [0207.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2608d8 [0207.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2649f8 [0207.363] GetLastError () returned 0x0 [0207.364] SetLastError (dwErrCode=0x0) [0207.364] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf70 | out: hHeap=0x1f0000) returned 1 [0207.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x21c600 [0207.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x21c610 [0207.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c490 [0207.364] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c610 | out: hHeap=0x1f0000) returned 1 [0207.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c610 [0207.364] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c490 | out: hHeap=0x1f0000) returned 1 [0207.364] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c600 | out: hHeap=0x1f0000) returned 1 [0207.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c600 [0207.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210210 [0207.364] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c600 | out: hHeap=0x1f0000) returned 1 [0207.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210258 [0207.364] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0207.364] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c610 | out: hHeap=0x1f0000) returned 1 [0207.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210240 [0207.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101c8 [0207.364] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210240 | out: hHeap=0x1f0000) returned 1 [0207.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0207.365] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0207.365] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0207.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210258 [0207.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x2052d0 [0207.365] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0207.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205130 [0207.365] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2052d0 | out: hHeap=0x1f0000) returned 1 [0207.365] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0207.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204fb0 [0207.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260888 [0207.365] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204fb0 | out: hHeap=0x1f0000) returned 1 [0207.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204fb0 [0207.365] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0207.365] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205130 | out: hHeap=0x1f0000) returned 1 [0207.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204ff0 [0207.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x2068c8 [0207.366] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ff0 | out: hHeap=0x1f0000) returned 1 [0207.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2606f8 [0207.366] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2068c8 | out: hHeap=0x1f0000) returned 1 [0207.366] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204fb0 | out: hHeap=0x1f0000) returned 1 [0207.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c600 [0207.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101c8 [0207.366] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c600 | out: hHeap=0x1f0000) returned 1 [0207.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101e0 [0207.366] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101c8 | out: hHeap=0x1f0000) returned 1 [0207.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x205130 [0207.366] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0207.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206868 [0207.367] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205130 | out: hHeap=0x1f0000) returned 1 [0207.367] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206868 | out: hHeap=0x1f0000) returned 1 [0207.367] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606f8 | out: hHeap=0x1f0000) returned 1 [0207.367] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607c0 | out: hHeap=0x1f0000) returned 1 [0207.367] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0207.367] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2647e0 | out: hHeap=0x1f0000) returned 1 [0207.367] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605e0 | out: hHeap=0x1f0000) returned 1 [0207.367] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf70 [0207.367] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605e0 [0207.367] CryptAcquireContextA (in: phProv=0x2574b70, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2574b70*=0x212828) returned 1 [0207.371] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2605e0 | out: pbBuffer=0x2605e0) returned 1 [0207.371] CryptReleaseContext (hProv=0x212828, dwFlags=0x0) returned 1 [0207.371] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605e0 | out: hHeap=0x1f0000) returned 1 [0207.371] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260658 [0207.372] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2607c0 [0207.372] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0207.372] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260658 | out: hHeap=0x1f0000) returned 1 [0207.372] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0207.372] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0207.372] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x263de0 [0207.372] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210240 [0207.372] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x235838 [0207.372] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260950 [0207.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2647e0 [0207.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x2052d0 [0207.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235c48 [0207.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260978 [0207.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x264b00 [0207.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c600 [0207.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260540 [0207.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210210 [0207.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c610 [0207.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0207.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210258 [0207.374] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210258 | out: hHeap=0x1f0000) returned 1 [0207.374] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0207.374] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c610 | out: hHeap=0x1f0000) returned 1 [0207.374] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210210 | out: hHeap=0x1f0000) returned 1 [0207.374] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0207.374] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c600 | out: hHeap=0x1f0000) returned 1 [0207.374] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x264b00 | out: hHeap=0x1f0000) returned 1 [0207.374] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0207.374] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235c48 | out: hHeap=0x1f0000) returned 1 [0207.374] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x21d050 [0207.374] GetLastError () returned 0x0 [0207.374] SetLastError (dwErrCode=0x0) [0207.374] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0207.374] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x21d050 [0207.375] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0207.375] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0207.375] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0207.375] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0207.375] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0207.375] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0207.375] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x24e800 [0207.375] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x264b00 [0207.375] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0207.375] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0207.375] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0207.375] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0207.375] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x264c08 [0207.375] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0207.375] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0207.376] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fc18 [0207.376] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x25bbb0 [0207.376] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x264d10 [0207.376] QueryPerformanceCounter (in: lpPerformanceCount=0x25746c0 | out: lpPerformanceCount=0x25746c0*=36474470422) returned 1 [0207.376] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x2574700 | out: lpSystemTimeAsFileTime=0x2574700) [0207.376] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x21c600 [0207.378] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606f8 [0207.378] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205130 [0207.378] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205130 | out: hHeap=0x1f0000) returned 1 [0207.378] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606f8 | out: hHeap=0x1f0000) returned 1 [0207.378] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605e0 [0207.378] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205330 [0207.378] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205330 | out: hHeap=0x1f0000) returned 1 [0207.378] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605e0 | out: hHeap=0x1f0000) returned 1 [0207.378] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c600 | out: hHeap=0x1f0000) returned 1 [0207.378] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0207.379] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x1fef78 [0207.379] GetLastError () returned 0x0 [0207.379] SetLastError (dwErrCode=0x0) [0207.379] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0207.379] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0207.379] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0207.379] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0207.379] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260888 [0207.379] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2608b0 [0207.379] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0207.379] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0207.379] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260540 [0207.380] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0207.380] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x230860 [0207.380] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0207.380] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x230d80 [0207.380] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0207.380] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x2387b0 [0207.380] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230d80 | out: hHeap=0x1f0000) returned 1 [0207.380] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260978 [0207.380] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2604f0 [0207.380] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0207.380] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0207.380] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0207.381] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x230d80 [0207.381] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x2389d0 [0207.381] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389d0 | out: hHeap=0x1f0000) returned 1 [0207.381] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230d80 | out: hHeap=0x1f0000) returned 1 [0207.381] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387b0 | out: hHeap=0x1f0000) returned 1 [0207.381] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x2101e0 [0207.381] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346f8 [0207.381] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260978 [0207.381] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2604f0 [0207.382] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260518 [0207.382] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260590 [0207.382] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0207.382] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0207.382] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x230d80 [0207.382] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260978 [0207.382] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2605e0 [0207.382] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0207.382] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0207.382] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605e0 | out: hHeap=0x1f0000) returned 1 [0207.383] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206868 [0207.383] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x2387b0 [0207.383] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2387b0 | out: hHeap=0x1f0000) returned 1 [0207.383] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206868 | out: hHeap=0x1f0000) returned 1 [0207.383] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0207.383] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x261c98 [0207.383] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0207.383] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230d80 | out: hHeap=0x1f0000) returned 1 [0207.383] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x205130 [0207.383] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x262700 [0207.383] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x262828 [0207.384] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608b0 | out: hHeap=0x1f0000) returned 1 [0207.384] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x263168 [0207.384] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262828 | out: hHeap=0x1f0000) returned 1 [0207.384] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0207.384] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0207.384] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346f8 | out: hHeap=0x1f0000) returned 1 [0207.384] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262700 | out: hHeap=0x1f0000) returned 1 [0207.384] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205130 | out: hHeap=0x1f0000) returned 1 [0207.384] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101e0 | out: hHeap=0x1f0000) returned 1 [0207.388] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0207.388] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x262ba0 [0207.388] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262ba0 | out: hHeap=0x1f0000) returned 1 [0207.388] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230860 | out: hHeap=0x1f0000) returned 1 [0207.388] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0207.388] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261c98 | out: hHeap=0x1f0000) returned 1 [0207.388] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0207.389] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0207.389] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0207.389] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0207.389] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0207.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x262010 [0207.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x261c98 [0207.389] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262010 | out: hHeap=0x1f0000) returned 1 [0207.389] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261c98 | out: hHeap=0x1f0000) returned 1 [0207.389] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263168 | out: hHeap=0x1f0000) returned 1 [0207.389] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0207.389] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x264c08 | out: hHeap=0x1f0000) returned 1 [0207.389] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24e800 | out: hHeap=0x1f0000) returned 1 [0207.390] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x223be0 [0207.390] GetLastError () returned 0x0 [0207.390] SetLastError (dwErrCode=0x0) [0207.390] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0207.390] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c600 [0207.390] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x21c610 [0207.391] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\netfx_Extended.mzz" (normalized: "c:\\588bce7c90097ed212\\netfx_extended.mzz"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2574a70, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1dc [0207.391] GetFileType (hFile=0x1dc) returned 0x1 [0207.392] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x243df8 [0207.392] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x25749f8 | out: lpNewFilePointer=0x0) returned 1 [0207.392] GetLastError () returned 0xb7 [0207.392] SetLastError (dwErrCode=0xb7) [0207.392] GetLastError () returned 0xb7 [0207.393] SetLastError (dwErrCode=0xb7) [0207.393] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2574abc | out: lpNewFilePointer=0x0) returned 1 [0207.393] WriteFile (in: hFile=0x1dc, lpBuffer=0x243df8*, nNumberOfBytesToWrite=0x103, lpNumberOfBytesWritten=0x2574b20, lpOverlapped=0x0 | out: lpBuffer=0x243df8*, lpNumberOfBytesWritten=0x2574b20*=0x103, lpOverlapped=0x0) returned 1 [0208.582] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x243df8 | out: hHeap=0x1f0000) returned 1 [0208.582] CloseHandle (hObject=0x1dc) returned 1 [0211.498] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0211.498] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218fa8 [0211.498] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0211.498] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf8) returned 0x22b018 [0211.498] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218fa8 | out: hHeap=0x1f0000) returned 1 [0211.498] MoveFileExW (lpExistingFileName="C:\\\\588bce7c90097ed212\\netfx_Extended.mzz" (normalized: "c:\\588bce7c90097ed212\\netfx_extended.mzz"), lpNewFileName="C:\\\\588bce7c90097ed212\\netfx_Extended.mzz.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\netfx_extended.mzz.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwFlags=0x2) returned 1 [0211.500] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b018 | out: hHeap=0x1f0000) returned 1 [0211.500] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c610 | out: hHeap=0x1f0000) returned 1 [0211.500] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c600 | out: hHeap=0x1f0000) returned 1 [0211.500] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x264b00 | out: hHeap=0x1f0000) returned 1 [0211.500] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2647e0 | out: hHeap=0x1f0000) returned 1 [0211.500] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0211.500] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2052d0 | out: hHeap=0x1f0000) returned 1 [0211.500] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235838 | out: hHeap=0x1f0000) returned 1 [0211.500] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210240 | out: hHeap=0x1f0000) returned 1 [0211.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263de0 | out: hHeap=0x1f0000) returned 1 [0211.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x223be0 | out: hHeap=0x1f0000) returned 1 [0211.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607c0 | out: hHeap=0x1f0000) returned 1 [0211.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0211.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25bbb0 | out: hHeap=0x1f0000) returned 1 [0211.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x264d10 | out: hHeap=0x1f0000) returned 1 [0211.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf70 | out: hHeap=0x1f0000) returned 1 [0211.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5f0 | out: hHeap=0x1f0000) returned 1 [0211.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2100a8 | out: hHeap=0x1f0000) returned 1 [0211.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607e8 | out: hHeap=0x1f0000) returned 1 [0211.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c5d0 | out: hHeap=0x1f0000) returned 1 [0211.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210018 | out: hHeap=0x1f0000) returned 1 [0211.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260900 | out: hHeap=0x1f0000) returned 1 [0211.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21c680 | out: hHeap=0x1f0000) returned 1 [0211.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2649f8 | out: hHeap=0x1f0000) returned 1 [0211.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0211.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235be0 | out: hHeap=0x1f0000) returned 1 [0211.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234aa0 | out: hHeap=0x1f0000) returned 1 [0211.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0211.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0211.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234a10 | out: hHeap=0x1f0000) returned 1 [0211.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2595a0 | out: hHeap=0x1f0000) returned 1 [0211.502] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2232e0 | out: hHeap=0x1f0000) returned 1 [0211.502] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2067d8 | out: hHeap=0x1f0000) returned 1 [0211.502] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210198 | out: hHeap=0x1f0000) returned 1 [0211.502] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2101b0 | out: hHeap=0x1f0000) returned 1 [0211.502] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20e1f0 | out: hHeap=0x1f0000) returned 1 [0211.502] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x254980 | out: hHeap=0x1f0000) returned 1 [0211.502] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0211.502] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0211.502] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2150a8 | out: hHeap=0x1f0000) returned 1 [0211.502] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e4f8 | out: hHeap=0x1f0000) returned 1 [0211.502] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233d20 | out: hHeap=0x1f0000) returned 1 [0211.502] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a18 | out: hHeap=0x1f0000) returned 1 [0211.502] FindNextFileW (in: hFindFile=0x214810, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2dbe0800, ftCreationTime.dwHighDateTime=0x1cac6fb, ftLastAccessTime.dwLowDateTime=0x2dbe0800, ftLastAccessTime.dwHighDateTime=0x1cac6fb, ftLastWriteTime.dwLowDateTime=0x2dbe0800, ftLastWriteTime.dwHighDateTime=0x1cac6fb, nFileSizeHigh=0x0, nFileSizeLow=0xd5000, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="netfx_Extended_x64.msi", cAlternateFileName="NETFX_~3.MSI")) returned 1 [0211.502] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x234c98 [0211.502] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x234cd0 [0211.502] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235f20 [0211.502] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234cd0 | out: hHeap=0x1f0000) returned 1 [0211.502] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d68 | out: hHeap=0x1f0000) returned 1 [0211.502] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234c98 | out: hHeap=0x1f0000) returned 1 [0211.503] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\netfx_Extended_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0211.503] GetLastError () returned 0x2 [0211.503] GetLastError () returned 0x2 [0211.503] SetLastError (dwErrCode=0x2) [0211.503] GetLastError () returned 0x2 [0211.503] SetLastError (dwErrCode=0x2) [0211.503] GetLastError () returned 0x2 [0211.503] SetLastError (dwErrCode=0x2) [0211.503] FindNextFileW (in: hFindFile=0x214810, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc749eed, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xbc749eed, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xbda8efca, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x79113, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="netfx_Extended_x86.msi.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="NETFX_~1.ODV")) returned 1 [0211.503] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x262438 [0211.503] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x234d40 [0211.503] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2647e0 [0211.503] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234d40 | out: hHeap=0x1f0000) returned 1 [0211.503] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235f20 | out: hHeap=0x1f0000) returned 1 [0211.503] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262438 | out: hHeap=0x1f0000) returned 1 [0211.504] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\netfx_Extended_x86.msi.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x86.msi.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1dc [0211.504] GetFileType (hFile=0x1dc) returned 0x1 [0211.504] CloseHandle (hObject=0x1dc) returned 1 [0211.504] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x229418 [0211.504] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\netfx_Extended_x86.msi.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x86.msi.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x259f0ac | out: lpFileInformation=0x259f0ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc749eed, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xbc749eed, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xbda8efca, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x79113)) returned 1 [0211.505] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0211.505] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x229418 [0211.505] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\netfx_Extended_x86.msi.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x86.msi.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x259f0b4 | out: lpFileInformation=0x259f0b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc749eed, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xbc749eed, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xbda8efca, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x79113)) returned 1 [0211.505] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0211.505] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x229418 [0211.505] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0211.505] FindNextFileW (in: hFindFile=0x214810, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbda8efca, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xbda8efca, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xbe8c1c64, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x427c1, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="ParameterInfo.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="PARAME~1.ODV")) returned 1 [0211.505] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261d08 [0211.505] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x234bb8 [0211.505] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x229418 [0211.505] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234bb8 | out: hHeap=0x1f0000) returned 1 [0211.505] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2647e0 | out: hHeap=0x1f0000) returned 1 [0211.505] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261d08 | out: hHeap=0x1f0000) returned 1 [0211.505] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\ParameterInfo.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\parameterinfo.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1dc [0211.506] GetFileType (hFile=0x1dc) returned 0x1 [0211.506] CloseHandle (hObject=0x1dc) returned 1 [0211.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2647e0 [0211.515] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\ParameterInfo.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\parameterinfo.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x259f0ac | out: lpFileInformation=0x259f0ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbda8efca, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xbda8efca, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xbe8c1c64, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x427c1)) returned 1 [0211.515] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2647e0 | out: hHeap=0x1f0000) returned 1 [0211.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2647e0 [0211.515] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\ParameterInfo.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\parameterinfo.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x259f0b4 | out: lpFileInformation=0x259f0b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbda8efca, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xbda8efca, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xbe8c1c64, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x427c1)) returned 1 [0211.537] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2647e0 | out: hHeap=0x1f0000) returned 1 [0211.537] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x2647e0 [0211.537] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2647e0 | out: hHeap=0x1f0000) returned 1 [0211.537] FindNextFileW (in: hFindFile=0x214810, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4dc38ac, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xc4dc38ac, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xc5446448, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x2d313, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="RGB9RAST_x64.msi.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="RGB9RA~1.ODV")) returned 1 [0211.537] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261a28 [0211.537] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x234d08 [0211.537] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x2008a0 [0211.537] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234d08 | out: hHeap=0x1f0000) returned 1 [0211.537] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0211.537] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261a28 | out: hHeap=0x1f0000) returned 1 [0211.537] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\RGB9RAST_x64.msi.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x64.msi.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1dc [0211.581] GetFileType (hFile=0x1dc) returned 0x1 [0211.581] CloseHandle (hObject=0x1dc) returned 1 [0211.581] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x2007c8 [0211.582] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\RGB9RAST_x64.msi.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x64.msi.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x259f0ac | out: lpFileInformation=0x259f0ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4dc38ac, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xc4dc38ac, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xc5446448, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x2d313)) returned 1 [0211.582] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2007c8 | out: hHeap=0x1f0000) returned 1 [0211.582] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x2007c8 [0211.582] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\RGB9RAST_x64.msi.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x64.msi.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x259f0b4 | out: lpFileInformation=0x259f0b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4dc38ac, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xc4dc38ac, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xc5446448, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x2d313)) returned 1 [0211.582] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2007c8 | out: hHeap=0x1f0000) returned 1 [0211.582] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x2007c8 [0211.582] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2007c8 | out: hHeap=0x1f0000) returned 1 [0211.582] FindNextFileW (in: hFindFile=0x214810, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5461ed0, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xc5461ed0, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xc5bfd4fc, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x17313, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="RGB9Rast_x86.msi.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="RGB9RA~2.ODV")) returned 1 [0211.582] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261a28 [0211.582] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x234bf0 [0211.582] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x2007c8 [0211.582] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234bf0 | out: hHeap=0x1f0000) returned 1 [0211.583] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2008a0 | out: hHeap=0x1f0000) returned 1 [0211.583] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261a28 | out: hHeap=0x1f0000) returned 1 [0211.583] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\RGB9Rast_x86.msi.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x86.msi.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1dc [0211.583] GetFileType (hFile=0x1dc) returned 0x1 [0211.584] CloseHandle (hObject=0x1dc) returned 1 [0211.584] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x2008a0 [0211.584] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\RGB9Rast_x86.msi.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x86.msi.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x259f0ac | out: lpFileInformation=0x259f0ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5461ed0, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xc5461ed0, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xc5bfd4fc, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x17313)) returned 1 [0211.584] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2008a0 | out: hHeap=0x1f0000) returned 1 [0211.584] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x2008a0 [0211.584] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\RGB9Rast_x86.msi.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x86.msi.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x259f0b4 | out: lpFileInformation=0x259f0b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5461ed0, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xc5461ed0, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xc5bfd4fc, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x17313)) returned 1 [0211.584] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2008a0 | out: hHeap=0x1f0000) returned 1 [0211.585] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x2008a0 [0211.585] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2008a0 | out: hHeap=0x1f0000) returned 1 [0211.585] FindNextFileW (in: hFindFile=0x214810, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x13148, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Setup.exe", cAlternateFileName="")) returned 1 [0211.585] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609f0 [0211.585] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x234f38 [0211.585] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2641a8 [0211.585] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234f38 | out: hHeap=0x1f0000) returned 1 [0211.585] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2007c8 | out: hHeap=0x1f0000) returned 1 [0211.585] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609f0 | out: hHeap=0x1f0000) returned 1 [0211.585] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Setup.exe" (normalized: "c:\\588bce7c90097ed212\\setup.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1dc [0211.646] GetFileType (hFile=0x1dc) returned 0x1 [0211.646] CloseHandle (hObject=0x1dc) returned 1 [0211.647] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x263a70 [0211.647] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Setup.exe" (normalized: "c:\\588bce7c90097ed212\\setup.exe"), fInfoLevelId=0x0, lpFileInformation=0x259f0ac | out: lpFileInformation=0x259f0ac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x13148)) returned 1 [0211.647] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263a70 | out: hHeap=0x1f0000) returned 1 [0211.647] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x263910 [0211.647] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Setup.exe" (normalized: "c:\\588bce7c90097ed212\\setup.exe"), fInfoLevelId=0x0, lpFileInformation=0x259f0b4 | out: lpFileInformation=0x259f0b4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x13148)) returned 1 [0211.647] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263910 | out: hHeap=0x1f0000) returned 1 [0211.647] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x263de0 [0211.647] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263de0 | out: hHeap=0x1f0000) returned 1 [0211.648] FindNextFileW (in: hFindFile=0x214810, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbea8c20d, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xbea8c20d, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xc0a8e991, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xc526b, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="SetupEngine.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="SETUPE~1.ODV")) returned 1 [0211.648] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a188 [0211.648] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x234db0 [0211.648] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x2008a0 [0211.648] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234db0 | out: hHeap=0x1f0000) returned 1 [0211.648] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2641a8 | out: hHeap=0x1f0000) returned 1 [0211.648] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a188 | out: hHeap=0x1f0000) returned 1 [0211.648] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\SetupEngine.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\setupengine.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1dc [0211.648] GetFileType (hFile=0x1dc) returned 0x1 [0211.649] CloseHandle (hObject=0x1dc) returned 1 [0211.649] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x2007c8 [0211.649] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\SetupEngine.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\setupengine.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x259f0ac | out: lpFileInformation=0x259f0ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbea8c20d, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xbea8c20d, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xc0a8e991, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xc526b)) returned 1 [0211.649] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2007c8 | out: hHeap=0x1f0000) returned 1 [0211.649] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x2007c8 [0211.649] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\SetupEngine.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\setupengine.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x259f0b4 | out: lpFileInformation=0x259f0b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbea8c20d, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xbea8c20d, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xc0a8e991, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xc526b)) returned 1 [0211.649] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2007c8 | out: hHeap=0x1f0000) returned 1 [0211.649] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x2007c8 [0211.649] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2007c8 | out: hHeap=0x1f0000) returned 1 [0211.650] FindNextFileW (in: hFindFile=0x214810, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe8e80a8, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xbe8e80a8, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xbfe75145, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x48263, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="SetupUi.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="SETUPU~1.ODV")) returned 1 [0211.650] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a4d0 [0211.650] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x234d08 [0211.650] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x200978 [0211.650] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234d08 | out: hHeap=0x1f0000) returned 1 [0211.650] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2008a0 | out: hHeap=0x1f0000) returned 1 [0211.650] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a4d0 | out: hHeap=0x1f0000) returned 1 [0211.650] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\SetupUi.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\setupui.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1dc [0211.650] GetFileType (hFile=0x1dc) returned 0x1 [0211.651] CloseHandle (hObject=0x1dc) returned 1 [0211.651] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x2007c8 [0211.651] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\SetupUi.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\setupui.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x259f0ac | out: lpFileInformation=0x259f0ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe8e80a8, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xbe8e80a8, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xbfe75145, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x48263)) returned 1 [0211.651] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2007c8 | out: hHeap=0x1f0000) returned 1 [0211.651] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x2007c8 [0211.651] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\SetupUi.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\setupui.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x259f0b4 | out: lpFileInformation=0x259f0b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe8e80a8, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xbe8e80a8, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xbfe75145, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x48263)) returned 1 [0211.651] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2007c8 | out: hHeap=0x1f0000) returned 1 [0211.651] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x2007c8 [0211.651] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2007c8 | out: hHeap=0x1f0000) returned 1 [0211.651] FindNextFileW (in: hFindFile=0x214810, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5c217ae, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xc5c217ae, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xc642d6f5, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x76bb, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="SetupUi.xsd.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="SETUPU~2.ODV")) returned 1 [0211.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a038 [0211.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x234cd0 [0211.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x2008a0 [0211.652] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234cd0 | out: hHeap=0x1f0000) returned 1 [0211.652] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x200978 | out: hHeap=0x1f0000) returned 1 [0211.652] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a038 | out: hHeap=0x1f0000) returned 1 [0211.652] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\SetupUi.xsd.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\setupui.xsd.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1dc [0211.652] GetFileType (hFile=0x1dc) returned 0x1 [0211.653] CloseHandle (hObject=0x1dc) returned 1 [0211.653] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x200978 [0211.653] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\SetupUi.xsd.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\setupui.xsd.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x259f0ac | out: lpFileInformation=0x259f0ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5c217ae, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xc5c217ae, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xc642d6f5, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x76bb)) returned 1 [0211.653] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x200978 | out: hHeap=0x1f0000) returned 1 [0211.653] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x2007c8 [0211.653] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\SetupUi.xsd.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\setupui.xsd.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x259f0b4 | out: lpFileInformation=0x259f0b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5c217ae, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xc5c217ae, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xc642d6f5, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x76bb)) returned 1 [0211.653] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2007c8 | out: hHeap=0x1f0000) returned 1 [0211.653] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x2007c8 [0211.653] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2007c8 | out: hHeap=0x1f0000) returned 1 [0211.653] FindNextFileW (in: hFindFile=0x214810, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x6519be00, ftCreationTime.dwHighDateTime=0x1cac6d5, ftLastAccessTime.dwLowDateTime=0x6519be00, ftLastAccessTime.dwHighDateTime=0x1cac6d5, ftLastWriteTime.dwLowDateTime=0x6519be00, ftLastWriteTime.dwHighDateTime=0x1cac6d5, nFileSizeHigh=0x0, nFileSizeLow=0x17758, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="SetupUtility.exe", cAlternateFileName="SETUPU~1.EXE")) returned 1 [0211.654] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x234bb8 [0211.654] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x234c98 [0211.654] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x264200 [0211.654] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234c98 | out: hHeap=0x1f0000) returned 1 [0211.654] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2008a0 | out: hHeap=0x1f0000) returned 1 [0211.654] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234bb8 | out: hHeap=0x1f0000) returned 1 [0211.654] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\SetupUtility.exe" (normalized: "c:\\588bce7c90097ed212\\setuputility.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1dc [0211.654] GetFileType (hFile=0x1dc) returned 0x1 [0211.655] CloseHandle (hObject=0x1dc) returned 1 [0211.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x263c28 [0211.655] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\SetupUtility.exe" (normalized: "c:\\588bce7c90097ed212\\setuputility.exe"), fInfoLevelId=0x0, lpFileInformation=0x259f0ac | out: lpFileInformation=0x259f0ac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x6519be00, ftCreationTime.dwHighDateTime=0x1cac6d5, ftLastAccessTime.dwLowDateTime=0x6519be00, ftLastAccessTime.dwHighDateTime=0x1cac6d5, ftLastWriteTime.dwLowDateTime=0x6519be00, ftLastWriteTime.dwHighDateTime=0x1cac6d5, nFileSizeHigh=0x0, nFileSizeLow=0x17758)) returned 1 [0211.655] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263c28 | out: hHeap=0x1f0000) returned 1 [0211.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2642b0 [0211.655] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\SetupUtility.exe" (normalized: "c:\\588bce7c90097ed212\\setuputility.exe"), fInfoLevelId=0x0, lpFileInformation=0x259f0b4 | out: lpFileInformation=0x259f0b4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x6519be00, ftCreationTime.dwHighDateTime=0x1cac6d5, ftLastAccessTime.dwLowDateTime=0x6519be00, ftLastAccessTime.dwHighDateTime=0x1cac6d5, ftLastWriteTime.dwLowDateTime=0x6519be00, ftLastWriteTime.dwHighDateTime=0x1cac6d5, nFileSizeHigh=0x0, nFileSizeLow=0x17758)) returned 1 [0211.655] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2642b0 | out: hHeap=0x1f0000) returned 1 [0211.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x263d30 [0211.655] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263d30 | out: hHeap=0x1f0000) returned 1 [0211.655] FindNextFileW (in: hFindFile=0x214810, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6479ba7, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xc6479ba7, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xc6b548c7, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xa18b, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="SplashScreen.bmp.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="SPLASH~1.ODV")) returned 1 [0211.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261c50 [0211.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x234c98 [0211.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x2007c8 [0211.655] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234c98 | out: hHeap=0x1f0000) returned 1 [0211.655] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x264200 | out: hHeap=0x1f0000) returned 1 [0211.655] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261c50 | out: hHeap=0x1f0000) returned 1 [0211.656] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\SplashScreen.bmp.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\splashscreen.bmp.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1dc [0211.656] GetFileType (hFile=0x1dc) returned 0x1 [0211.656] CloseHandle (hObject=0x1dc) returned 1 [0211.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x2008a0 [0211.656] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\SplashScreen.bmp.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\splashscreen.bmp.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x259f0ac | out: lpFileInformation=0x259f0ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6479ba7, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xc6479ba7, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xc6b548c7, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xa18b)) returned 1 [0211.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2008a0 | out: hHeap=0x1f0000) returned 1 [0211.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x2008a0 [0211.657] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\SplashScreen.bmp.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\splashscreen.bmp.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x259f0b4 | out: lpFileInformation=0x259f0b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6479ba7, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xc6479ba7, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xc6b548c7, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xa18b)) returned 1 [0211.657] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2008a0 | out: hHeap=0x1f0000) returned 1 [0211.657] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x2008a0 [0211.657] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2008a0 | out: hHeap=0x1f0000) returned 1 [0211.657] FindNextFileW (in: hFindFile=0x214810, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6b7a934, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xc6b7a934, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xc714a643, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x23533, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="sqmapi.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="SQMAPI~1.ODV")) returned 1 [0211.657] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a230 [0211.657] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x234f38 [0211.657] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x2008a0 [0211.657] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234f38 | out: hHeap=0x1f0000) returned 1 [0211.657] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2007c8 | out: hHeap=0x1f0000) returned 1 [0211.657] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a230 | out: hHeap=0x1f0000) returned 1 [0211.658] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\sqmapi.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\sqmapi.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1dc [0211.658] GetFileType (hFile=0x1dc) returned 0x1 [0211.658] CloseHandle (hObject=0x1dc) returned 1 [0211.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x2007c8 [0211.658] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\sqmapi.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\sqmapi.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x259f0ac | out: lpFileInformation=0x259f0ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6b7a934, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xc6b7a934, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xc714a643, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x23533)) returned 1 [0211.658] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2007c8 | out: hHeap=0x1f0000) returned 1 [0211.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x2007c8 [0211.659] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\sqmapi.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\sqmapi.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x259f0b4 | out: lpFileInformation=0x259f0b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6b7a934, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xc6b7a934, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xc714a643, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x23533)) returned 1 [0211.659] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2007c8 | out: hHeap=0x1f0000) returned 1 [0211.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x2007c8 [0211.659] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2007c8 | out: hHeap=0x1f0000) returned 1 [0211.659] FindNextFileW (in: hFindFile=0x214810, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x3704, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Strings.xml", cAlternateFileName="")) returned 1 [0211.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0211.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x234db0 [0211.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x263910 [0211.659] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234db0 | out: hHeap=0x1f0000) returned 1 [0211.659] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2008a0 | out: hHeap=0x1f0000) returned 1 [0211.659] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0211.659] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Strings.xml" (normalized: "c:\\588bce7c90097ed212\\strings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1dc [0211.660] GetFileType (hFile=0x1dc) returned 0x1 [0211.660] CloseHandle (hObject=0x1dc) returned 1 [0211.822] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2640a0 [0211.822] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Strings.xml" (normalized: "c:\\588bce7c90097ed212\\strings.xml"), fInfoLevelId=0x0, lpFileInformation=0x259f0ac | out: lpFileInformation=0x259f0ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x50, ftCreationTime.dwHighDateTime=0x50, ftLastAccessTime.dwLowDateTime=0x7, ftLastAccessTime.dwHighDateTime=0x259f0d4, ftLastWriteTime.dwLowDateTime=0xe3c5b5, ftLastWriteTime.dwHighDateTime=0x1f0000, nFileSizeHigh=0x0, nFileSizeLow=0x50)) returned 0 [0211.822] GetLastError () returned 0x2 [0211.823] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2640a0 | out: hHeap=0x1f0000) returned 1 [0211.823] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2642b0 [0211.823] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2642b0 | out: hHeap=0x1f0000) returned 1 [0211.824] FindNextFileW (in: hFindFile=0x214810, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc727b8ca, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xc727b8ca, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xc72a1afe, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Strings.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="STRING~1.ODV")) returned 1 [0211.824] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a2d8 [0211.824] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x234c98 [0211.824] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x2007c8 [0211.824] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234c98 | out: hHeap=0x1f0000) returned 1 [0211.824] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263910 | out: hHeap=0x1f0000) returned 1 [0211.824] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a2d8 | out: hHeap=0x1f0000) returned 1 [0211.824] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Strings.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\strings.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1dc [0211.825] GetFileType (hFile=0x1dc) returned 0x1 [0211.825] CloseHandle (hObject=0x1dc) returned 1 [0211.825] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x2008a0 [0211.825] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Strings.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\strings.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x259f0ac | out: lpFileInformation=0x259f0ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc727b8ca, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xc727b8ca, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xc7bb8a0d, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x3817)) returned 1 [0211.826] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2008a0 | out: hHeap=0x1f0000) returned 1 [0211.826] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x2008a0 [0211.826] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Strings.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\strings.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x259f0b4 | out: lpFileInformation=0x259f0b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc727b8ca, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xc727b8ca, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xc7bb8a0d, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x3817)) returned 1 [0211.826] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2008a0 | out: hHeap=0x1f0000) returned 1 [0211.826] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x2008a0 [0211.826] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2008a0 | out: hHeap=0x1f0000) returned 1 [0211.826] FindNextFileW (in: hFindFile=0x214810, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x97f2, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="UiInfo.xml", cAlternateFileName="")) returned 1 [0211.826] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604c8 [0211.826] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x234f38 [0211.826] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2642b0 [0211.826] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234f38 | out: hHeap=0x1f0000) returned 1 [0211.827] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2007c8 | out: hHeap=0x1f0000) returned 1 [0211.827] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604c8 | out: hHeap=0x1f0000) returned 1 [0211.827] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\uiinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1dc [0211.827] GetFileType (hFile=0x1dc) returned 0x1 [0211.827] CloseHandle (hObject=0x1dc) returned 1 [0211.925] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x263910 [0211.925] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\uiinfo.xml"), fInfoLevelId=0x0, lpFileInformation=0x259f0ac | out: lpFileInformation=0x259f0ac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x97f2)) returned 1 [0212.558] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263910 | out: hHeap=0x1f0000) returned 1 [0212.558] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x263910 [0212.558] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\uiinfo.xml"), fInfoLevelId=0x0, lpFileInformation=0x259f0b4 | out: lpFileInformation=0x259f0b4*(dwFileAttributes=0x50, ftCreationTime.dwLowDateTime=0x3817, ftCreationTime.dwHighDateTime=0x259f0d4, ftLastAccessTime.dwLowDateTime=0xe3c5b5, ftLastAccessTime.dwHighDateTime=0x1f0000, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x50, nFileSizeHigh=0x27, nFileSizeLow=0x259f0e0)) returned 0 [0212.559] GetLastError () returned 0x2 [0212.559] InitOnceExecuteOnce (in: InitOnce=0xe8be48, InitFn=0xdabb80, Parameter=0xe8be4c, Context=0x0 | out: InitOnce=0xe8be48, Parameter=0xe8be4c, Context=0x0) returned 1 [0212.559] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8023) returned 0x2a7f80 [0212.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10023) returned 0x2affb0 [0212.582] FormatMessageW (in: dwFlags=0x1200, lpSource=0x0, dwMessageId=0x2, dwLanguageId=0x0, lpBuffer=0x2affc0, nSize=0x7fff, Arguments=0x0 | out: lpBuffer="The system cannot find the file specified.\r\n") returned 0x2c [0212.588] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="The system cannot find the file specified.\r\n", cchWideChar=-1, lpMultiByteStr=0x2a7fa0, cbMultiByte=32767, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="The system cannot find the file specified.\r\n", lpUsedDefaultChar=0x0) returned 45 [0212.588] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2affb0 | out: hHeap=0x1f0000) returned 1 [0212.588] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x234f38 [0212.588] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a7f80 | out: hHeap=0x1f0000) returned 1 [0212.588] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234110 [0212.588] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234f38 | out: hHeap=0x1f0000) returned 1 [0212.588] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x38) returned 0x24eac0 [0212.588] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234110 | out: hHeap=0x1f0000) returned 1 [0212.588] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x263808 [0212.588] GetLastError () returned 0x2 [0212.588] SetLastError (dwErrCode=0x2) [0212.588] AreFileApisANSI () returned 1 [0212.588] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x400, lpWideCharStr="C:\\\\588bce7c90097ed212\\UiInfo.xml", cchWideChar=33, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x259ef18 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x259ef18) returned 33 [0212.588] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x234e58 [0212.589] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x400, lpWideCharStr="C:\\\\588bce7c90097ed212\\UiInfo.xml", cchWideChar=33, lpMultiByteStr=0x234e58, cbMultiByte=33, lpDefaultChar=0x0, lpUsedDefaultChar=0x259ef18 | out: lpMultiByteStr="C:\\\\588bce7c90097ed212\\UiInfo.xml", lpUsedDefaultChar=0x259ef18) returned 33 [0212.589] GetLastError () returned 0x2 [0212.589] SetLastError (dwErrCode=0x2) [0212.589] AreFileApisANSI () returned 1 [0212.589] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2357d0 [0212.589] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234e58 | out: hHeap=0x1f0000) returned 1 [0212.589] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x259f050) [0212.590] GetLastError () returned 0x2 [0212.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x28) returned 0x206898 [0212.590] SetLastError (dwErrCode=0x2) [0212.590] GetLastError () returned 0x2 [0212.590] SetLastError (dwErrCode=0x2) [0212.591] RtlUnwind (TargetFrame=0x259f2fc, TargetIp=0xe20f55, ExceptionRecord=0x259e450, ReturnValue=0x0) [0212.591] GetLastError () returned 0x2 [0212.591] SetLastError (dwErrCode=0x2) [0212.591] GetLastError () returned 0x2 [0212.591] SetLastError (dwErrCode=0x2) [0212.591] GetLastError () returned 0x2 [0212.591] SetLastError (dwErrCode=0x2) [0212.591] GetLastError () returned 0x2 [0212.591] SetLastError (dwErrCode=0x2) [0212.591] GetLastError () returned 0x2 [0212.591] SetLastError (dwErrCode=0x2) [0212.592] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263910 | out: hHeap=0x1f0000) returned 1 [0212.592] GetLastError () returned 0x2 [0212.592] SetLastError (dwErrCode=0x2) [0212.592] GetLastError () returned 0x2 [0212.592] SetLastError (dwErrCode=0x2) [0212.592] GetLastError () returned 0x2 [0212.592] SetLastError (dwErrCode=0x2) [0212.592] GetLastError () returned 0x2 [0212.592] SetLastError (dwErrCode=0x2) [0212.592] GetLastError () returned 0x2 [0212.592] SetLastError (dwErrCode=0x2) [0212.592] GetLastError () returned 0x2 [0212.592] SetLastError (dwErrCode=0x2) [0212.592] GetLastError () returned 0x2 [0212.592] SetLastError (dwErrCode=0x2) [0212.592] GetLastError () returned 0x2 [0212.592] SetLastError (dwErrCode=0x2) [0212.592] GetLastError () returned 0x2 [0212.593] SetLastError (dwErrCode=0x2) [0212.593] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x259db84 | out: lpMode=0x259db84) returned 0 [0212.593] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="s", cchWideChar=1, lpMultiByteStr=0x259c774, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="s", lpUsedDefaultChar=0x0) returned 1 [0212.593] WriteFile (in: hFile=0x90, lpBuffer=0x259c774, nNumberOfBytesToWrite=0x1, lpNumberOfBytesWritten=0x259c76c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x259c76c, lpOverlapped=0x0) returned 0 [0212.593] GetLastError () returned 0x6 [0212.593] GetLastError () returned 0x6 [0212.593] SetLastError (dwErrCode=0x6) [0212.593] GetLastError () returned 0x6 [0212.593] SetLastError (dwErrCode=0x6) [0212.593] GetLastError () returned 0x6 [0212.593] SetLastError (dwErrCode=0x6) [0212.593] GetLastError () returned 0x6 [0212.593] SetLastError (dwErrCode=0x6) [0212.593] GetLastError () returned 0x6 [0212.593] SetLastError (dwErrCode=0x6) [0212.593] GetLastError () returned 0x6 [0212.593] SetLastError (dwErrCode=0x6) [0212.593] GetLastError () returned 0x6 [0212.594] SetLastError (dwErrCode=0x6) [0212.594] GetLastError () returned 0x6 [0212.594] SetLastError (dwErrCode=0x6) [0212.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2357d0 | out: hHeap=0x1f0000) returned 1 [0212.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263808 | out: hHeap=0x1f0000) returned 1 [0212.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24eac0 | out: hHeap=0x1f0000) returned 1 [0212.594] FindNextFileW (in: hFindFile=0x214810, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x87910600, ftCreationTime.dwHighDateTime=0x1ca2a27, ftLastAccessTime.dwLowDateTime=0x87910600, ftLastAccessTime.dwHighDateTime=0x1ca2a27, ftLastWriteTime.dwLowDateTime=0x87910600, ftLastWriteTime.dwHighDateTime=0x1ca2a27, nFileSizeHigh=0x0, nFileSizeLow=0x19688, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="watermark.bmp", cAlternateFileName="WATERM~1.BMP")) returned 1 [0212.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ab8 [0212.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x234db0 [0212.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2638b8 [0212.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234db0 | out: hHeap=0x1f0000) returned 1 [0212.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2642b0 | out: hHeap=0x1f0000) returned 1 [0212.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ab8 | out: hHeap=0x1f0000) returned 1 [0212.595] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\watermark.bmp" (normalized: "c:\\588bce7c90097ed212\\watermark.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0212.595] GetFileType (hFile=0x1d4) returned 0x1 [0212.595] CloseHandle (hObject=0x1d4) returned 1 [0212.597] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x263f98 [0212.597] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\watermark.bmp" (normalized: "c:\\588bce7c90097ed212\\watermark.bmp"), fInfoLevelId=0x0, lpFileInformation=0x259f0ac | out: lpFileInformation=0x259f0ac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x87910600, ftCreationTime.dwHighDateTime=0x1ca2a27, ftLastAccessTime.dwLowDateTime=0x87910600, ftLastAccessTime.dwHighDateTime=0x1ca2a27, ftLastWriteTime.dwLowDateTime=0x87910600, ftLastWriteTime.dwHighDateTime=0x1ca2a27, nFileSizeHigh=0x0, nFileSizeLow=0x19688)) returned 1 [0212.597] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263f98 | out: hHeap=0x1f0000) returned 1 [0212.597] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x264150 [0212.597] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\watermark.bmp" (normalized: "c:\\588bce7c90097ed212\\watermark.bmp"), fInfoLevelId=0x0, lpFileInformation=0x259f0b4 | out: lpFileInformation=0x259f0b4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x87910600, ftCreationTime.dwHighDateTime=0x1ca2a27, ftLastAccessTime.dwLowDateTime=0x87910600, ftLastAccessTime.dwHighDateTime=0x1ca2a27, ftLastWriteTime.dwLowDateTime=0x87910600, ftLastWriteTime.dwHighDateTime=0x1ca2a27, nFileSizeHigh=0x0, nFileSizeLow=0x19688)) returned 1 [0212.597] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x264150 | out: hHeap=0x1f0000) returned 1 [0212.598] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x263ac8 [0212.598] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263ac8 | out: hHeap=0x1f0000) returned 1 [0212.598] FindNextFileW (in: hFindFile=0x214810, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2120bc00, ftCreationTime.dwHighDateTime=0x1cac6c9, ftLastAccessTime.dwLowDateTime=0x2120bc00, ftLastAccessTime.dwHighDateTime=0x1cac6c9, ftLastWriteTime.dwLowDateTime=0x2120bc00, ftLastWriteTime.dwHighDateTime=0x1cac6c9, nFileSizeHigh=0x0, nFileSizeLow=0x4f5113, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Windows6.0-KB956250-v6001-x64.msu", cAlternateFileName="WINDOW~1.MSU")) returned 1 [0212.598] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x263910 [0212.598] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x234db0 [0212.598] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2122d8 [0212.598] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234db0 | out: hHeap=0x1f0000) returned 1 [0212.598] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2638b8 | out: hHeap=0x1f0000) returned 1 [0212.598] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263910 | out: hHeap=0x1f0000) returned 1 [0212.598] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x64.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x64.msu"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0212.599] GetFileType (hFile=0x1d4) returned 0x1 [0212.599] CloseHandle (hObject=0x1d4) returned 1 [0212.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2123e8 [0212.599] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x64.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x64.msu"), fInfoLevelId=0x0, lpFileInformation=0x259f0ac | out: lpFileInformation=0x259f0ac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2120bc00, ftCreationTime.dwHighDateTime=0x1cac6c9, ftLastAccessTime.dwLowDateTime=0x2120bc00, ftLastAccessTime.dwHighDateTime=0x1cac6c9, ftLastWriteTime.dwLowDateTime=0x2120bc00, ftLastWriteTime.dwHighDateTime=0x1cac6c9, nFileSizeHigh=0x0, nFileSizeLow=0x4f5113)) returned 1 [0212.599] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2123e8 | out: hHeap=0x1f0000) returned 1 [0212.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2128b0 [0212.600] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x64.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x64.msu"), fInfoLevelId=0x0, lpFileInformation=0x259f0b4 | out: lpFileInformation=0x259f0b4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2120bc00, ftCreationTime.dwHighDateTime=0x1cac6c9, ftLastAccessTime.dwLowDateTime=0x2120bc00, ftLastAccessTime.dwHighDateTime=0x1cac6c9, ftLastWriteTime.dwLowDateTime=0x2120bc00, ftLastWriteTime.dwHighDateTime=0x1cac6c9, nFileSizeHigh=0x0, nFileSizeLow=0x4f5113)) returned 1 [0212.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2128b0 | out: hHeap=0x1f0000) returned 1 [0212.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212360 [0212.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212360 | out: hHeap=0x1f0000) returned 1 [0212.600] FindNextFileW (in: hFindFile=0x214810, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x1bbe7400, ftCreationTime.dwHighDateTime=0x1cac6bf, ftLastAccessTime.dwLowDateTime=0x1bbe7400, ftLastAccessTime.dwHighDateTime=0x1cac6bf, ftLastWriteTime.dwLowDateTime=0x1bbe7400, ftLastWriteTime.dwHighDateTime=0x1cac6bf, nFileSizeHigh=0x0, nFileSizeLow=0x217520, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Windows6.0-KB956250-v6001-x86.msu", cAlternateFileName="WINDOW~2.MSU")) returned 1 [0212.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x263e38 [0212.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x234e20 [0212.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211e10 [0212.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234e20 | out: hHeap=0x1f0000) returned 1 [0212.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2122d8 | out: hHeap=0x1f0000) returned 1 [0212.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263e38 | out: hHeap=0x1f0000) returned 1 [0212.601] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x86.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x86.msu"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0212.601] GetFileType (hFile=0x1d4) returned 0x1 [0212.601] CloseHandle (hObject=0x1d4) returned 1 [0212.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211bf0 [0212.602] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x86.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x86.msu"), fInfoLevelId=0x0, lpFileInformation=0x259f0ac | out: lpFileInformation=0x259f0ac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x1bbe7400, ftCreationTime.dwHighDateTime=0x1cac6bf, ftLastAccessTime.dwLowDateTime=0x1bbe7400, ftLastAccessTime.dwHighDateTime=0x1cac6bf, ftLastWriteTime.dwLowDateTime=0x1bbe7400, ftLastWriteTime.dwHighDateTime=0x1cac6bf, nFileSizeHigh=0x0, nFileSizeLow=0x217520)) returned 1 [0212.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211bf0 | out: hHeap=0x1f0000) returned 1 [0212.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0212.602] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x86.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x86.msu"), fInfoLevelId=0x0, lpFileInformation=0x259f0b4 | out: lpFileInformation=0x259f0b4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x1bbe7400, ftCreationTime.dwHighDateTime=0x1cac6bf, ftLastAccessTime.dwLowDateTime=0x1bbe7400, ftLastAccessTime.dwHighDateTime=0x1cac6bf, ftLastWriteTime.dwLowDateTime=0x1bbe7400, ftLastWriteTime.dwHighDateTime=0x1cac6bf, nFileSizeHigh=0x0, nFileSizeLow=0x217520)) returned 1 [0212.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0212.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212938 [0212.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212938 | out: hHeap=0x1f0000) returned 1 [0212.602] FindNextFileW (in: hFindFile=0x214810, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5b8e5700, ftCreationTime.dwHighDateTime=0x1cac6d1, ftLastAccessTime.dwLowDateTime=0x5b8e5700, ftLastAccessTime.dwHighDateTime=0x1cac6d1, ftLastWriteTime.dwLowDateTime=0x5b8e5700, ftLastWriteTime.dwHighDateTime=0x1cac6d1, nFileSizeHigh=0x0, nFileSizeLow=0x4db1ce, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Windows6.1-KB958488-v6001-x64.msu", cAlternateFileName="WINDOW~3.MSU")) returned 1 [0212.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x263a70 [0212.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x234f38 [0212.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211e98 [0212.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234f38 | out: hHeap=0x1f0000) returned 1 [0212.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e10 | out: hHeap=0x1f0000) returned 1 [0212.603] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263a70 | out: hHeap=0x1f0000) returned 1 [0212.603] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x64.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x64.msu"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0212.603] GetFileType (hFile=0x1d4) returned 0x1 [0212.603] CloseHandle (hObject=0x1d4) returned 1 [0212.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212580 [0212.604] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x64.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x64.msu"), fInfoLevelId=0x0, lpFileInformation=0x259f0ac | out: lpFileInformation=0x259f0ac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5b8e5700, ftCreationTime.dwHighDateTime=0x1cac6d1, ftLastAccessTime.dwLowDateTime=0x5b8e5700, ftLastAccessTime.dwHighDateTime=0x1cac6d1, ftLastWriteTime.dwLowDateTime=0x5b8e5700, ftLastWriteTime.dwHighDateTime=0x1cac6d1, nFileSizeHigh=0x0, nFileSizeLow=0x4db1ce)) returned 1 [0212.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212580 | out: hHeap=0x1f0000) returned 1 [0212.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211bf0 [0212.604] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x64.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x64.msu"), fInfoLevelId=0x0, lpFileInformation=0x259f0b4 | out: lpFileInformation=0x259f0b4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5b8e5700, ftCreationTime.dwHighDateTime=0x1cac6d1, ftLastAccessTime.dwLowDateTime=0x5b8e5700, ftLastAccessTime.dwHighDateTime=0x1cac6d1, ftLastWriteTime.dwLowDateTime=0x5b8e5700, ftLastWriteTime.dwHighDateTime=0x1cac6d1, nFileSizeHigh=0x0, nFileSizeLow=0x4db1ce)) returned 1 [0212.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211bf0 | out: hHeap=0x1f0000) returned 1 [0212.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211fa8 [0212.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211fa8 | out: hHeap=0x1f0000) returned 1 [0212.604] FindNextFileW (in: hFindFile=0x214810, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd0ac5d00, ftCreationTime.dwHighDateTime=0x1cac6ce, ftLastAccessTime.dwLowDateTime=0xd0ac5d00, ftLastAccessTime.dwHighDateTime=0x1cac6ce, ftLastWriteTime.dwLowDateTime=0xd0ac5d00, ftLastWriteTime.dwHighDateTime=0x1cac6ce, nFileSizeHigh=0x0, nFileSizeLow=0x20acf9, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Windows6.1-KB958488-v6001-x86.msu", cAlternateFileName="WINDOW~4.MSU")) returned 1 [0212.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x263a18 [0212.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x234db0 [0212.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2119d0 [0212.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234db0 | out: hHeap=0x1f0000) returned 1 [0212.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e98 | out: hHeap=0x1f0000) returned 1 [0212.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263a18 | out: hHeap=0x1f0000) returned 1 [0212.605] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x86.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x86.msu"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0212.605] GetFileType (hFile=0x1d4) returned 0x1 [0212.606] CloseHandle (hObject=0x1d4) returned 1 [0212.606] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0212.606] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x86.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x86.msu"), fInfoLevelId=0x0, lpFileInformation=0x259f0ac | out: lpFileInformation=0x259f0ac*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd0ac5d00, ftCreationTime.dwHighDateTime=0x1cac6ce, ftLastAccessTime.dwLowDateTime=0xd0ac5d00, ftLastAccessTime.dwHighDateTime=0x1cac6ce, ftLastWriteTime.dwLowDateTime=0xd0ac5d00, ftLastWriteTime.dwHighDateTime=0x1cac6ce, nFileSizeHigh=0x0, nFileSizeLow=0x20acf9)) returned 1 [0212.606] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0212.606] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0212.606] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x86.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x86.msu"), fInfoLevelId=0x0, lpFileInformation=0x259f0b4 | out: lpFileInformation=0x259f0b4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd0ac5d00, ftCreationTime.dwHighDateTime=0x1cac6ce, ftLastAccessTime.dwLowDateTime=0xd0ac5d00, ftLastAccessTime.dwHighDateTime=0x1cac6ce, ftLastWriteTime.dwLowDateTime=0xd0ac5d00, ftLastWriteTime.dwHighDateTime=0x1cac6ce, nFileSizeHigh=0x0, nFileSizeLow=0x20acf9)) returned 1 [0212.606] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0212.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212470 [0212.607] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212470 | out: hHeap=0x1f0000) returned 1 [0212.607] FindNextFileW (in: hFindFile=0x214810, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd0ac5d00, ftCreationTime.dwHighDateTime=0x1cac6ce, ftLastAccessTime.dwLowDateTime=0xd0ac5d00, ftLastAccessTime.dwHighDateTime=0x1cac6ce, ftLastWriteTime.dwLowDateTime=0xd0ac5d00, ftLastWriteTime.dwHighDateTime=0x1cac6ce, nFileSizeHigh=0x0, nFileSizeLow=0x20acf9, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Windows6.1-KB958488-v6001-x86.msu", cAlternateFileName="WINDOW~4.MSU")) returned 0 [0212.607] FindClose (in: hFindFile=0x214810 | out: hFindFile=0x214810) returned 1 [0212.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233ed0 [0212.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609f0 [0212.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x226ec0 [0212.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234110 [0212.607] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1025\\*", lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ed00 [0212.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234740 [0212.608] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234110 | out: hHeap=0x1f0000) returned 1 [0212.608] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0212.608] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0212.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234110 [0212.608] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234740 | out: hHeap=0x1f0000) returned 1 [0212.608] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0212.608] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0212.608] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x1d8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0212.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a18 [0212.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234788 [0212.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x2357d0 [0212.608] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234788 | out: hHeap=0x1f0000) returned 1 [0212.608] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234110 | out: hHeap=0x1f0000) returned 1 [0212.608] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a18 | out: hHeap=0x1f0000) returned 1 [0212.609] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1025\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1025\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0212.609] GetFileType (hFile=0x1d4) returned 0x1 [0212.609] CloseHandle (hObject=0x1d4) returned 1 [0212.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2638b8 [0212.609] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1025\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1025\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x259ebe4 | out: lpFileInformation=0x259ebe4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x1d8f)) returned 1 [0212.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2638b8 | out: hHeap=0x1f0000) returned 1 [0212.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x263a18 [0212.609] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1025\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1025\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x259ebf4 | out: lpFileInformation=0x259ebf4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x1d8f)) returned 1 [0212.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263a18 | out: hHeap=0x1f0000) returned 1 [0212.610] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x263e90 [0212.610] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263e90 | out: hHeap=0x1f0000) returned 1 [0212.610] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x121e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0212.610] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x234d08 [0212.610] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234110 [0212.610] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235e50 [0212.610] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234110 | out: hHeap=0x1f0000) returned 1 [0212.610] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2357d0 | out: hHeap=0x1f0000) returned 1 [0212.610] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234d08 | out: hHeap=0x1f0000) returned 1 [0212.610] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1025\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1025\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0212.610] GetFileType (hFile=0x1d4) returned 0x1 [0212.611] CloseHandle (hObject=0x1d4) returned 1 [0212.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2362c8 [0212.611] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1025\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1025\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x259ebe4 | out: lpFileInformation=0x259ebe4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x121e6)) returned 1 [0212.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2362c8 | out: hHeap=0x1f0000) returned 1 [0212.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235be0 [0212.611] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1025\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1025\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x259ebf4 | out: lpFileInformation=0x259ebf4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x121e6)) returned 1 [0212.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235be0 | out: hHeap=0x1f0000) returned 1 [0212.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235f88 [0212.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235f88 | out: hHeap=0x1f0000) returned 1 [0212.611] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0212.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x234bb8 [0212.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234110 [0212.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236058 [0212.612] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234110 | out: hHeap=0x1f0000) returned 1 [0212.612] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235e50 | out: hHeap=0x1f0000) returned 1 [0212.612] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234bb8 | out: hHeap=0x1f0000) returned 1 [0212.612] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1025\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1025\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0212.612] GetFileType (hFile=0x1d4) returned 0x1 [0212.612] CloseHandle (hObject=0x1d4) returned 1 [0212.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235be0 [0212.613] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1025\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1025\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x259ebe4 | out: lpFileInformation=0x259ebe4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358)) returned 1 [0212.613] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235be0 | out: hHeap=0x1f0000) returned 1 [0212.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235700 [0212.613] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1025\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1025\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x259ebf4 | out: lpFileInformation=0x259ebf4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358)) returned 1 [0212.613] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0212.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235700 [0212.613] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0212.613] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0212.613] FindClose (in: hFindFile=0x24ed00 | out: hFindFile=0x24ed00) returned 1 [0212.613] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236058 | out: hHeap=0x1f0000) returned 1 [0212.613] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226ec0 | out: hHeap=0x1f0000) returned 1 [0212.613] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609f0 | out: hHeap=0x1f0000) returned 1 [0212.614] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233ed0 | out: hHeap=0x1f0000) returned 1 [0212.614] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233ed0 [0212.614] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ab8 [0212.614] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x226ec0 [0212.614] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234110 [0212.614] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1028\\*", lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e8c0 [0212.614] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234aa0 [0212.614] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234110 | out: hHeap=0x1f0000) returned 1 [0212.614] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0212.614] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0212.614] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234110 [0212.614] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234aa0 | out: hHeap=0x1f0000) returned 1 [0212.614] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0212.615] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0212.615] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x18a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0212.615] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609f0 [0212.615] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234aa0 [0212.615] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x2362c8 [0212.615] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234aa0 | out: hHeap=0x1f0000) returned 1 [0212.615] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234110 | out: hHeap=0x1f0000) returned 1 [0212.615] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609f0 | out: hHeap=0x1f0000) returned 1 [0212.615] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1028\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1028\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0212.615] GetFileType (hFile=0x1d4) returned 0x1 [0212.616] CloseHandle (hObject=0x1d4) returned 1 [0212.616] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x263b78 [0212.616] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1028\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1028\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x259ebe4 | out: lpFileInformation=0x259ebe4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x18a5)) returned 1 [0212.616] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263b78 | out: hHeap=0x1f0000) returned 1 [0212.616] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2642b0 [0212.616] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1028\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1028\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x259ebf4 | out: lpFileInformation=0x259ebf4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x18a5)) returned 1 [0212.616] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2642b0 | out: hHeap=0x1f0000) returned 1 [0212.616] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x263910 [0212.616] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263910 | out: hHeap=0x1f0000) returned 1 [0212.616] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed90, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0212.616] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x234cd0 [0212.616] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234110 [0212.617] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235908 [0212.617] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234110 | out: hHeap=0x1f0000) returned 1 [0212.617] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2362c8 | out: hHeap=0x1f0000) returned 1 [0212.617] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234cd0 | out: hHeap=0x1f0000) returned 1 [0212.617] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1028\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1028\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0212.617] GetFileType (hFile=0x1d4) returned 0x1 [0212.618] CloseHandle (hObject=0x1d4) returned 1 [0212.618] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235700 [0212.618] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1028\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1028\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x259ebe4 | out: lpFileInformation=0x259ebe4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed90)) returned 1 [0212.618] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0212.618] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235700 [0212.618] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1028\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1028\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x259ebf4 | out: lpFileInformation=0x259ebf4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed90)) returned 1 [0212.618] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0212.618] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2357d0 [0212.618] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2357d0 | out: hHeap=0x1f0000) returned 1 [0212.618] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0212.619] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x234e58 [0212.619] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234110 [0212.619] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236190 [0212.619] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234110 | out: hHeap=0x1f0000) returned 1 [0212.619] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235908 | out: hHeap=0x1f0000) returned 1 [0212.619] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234e58 | out: hHeap=0x1f0000) returned 1 [0212.619] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1028\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1028\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0212.619] GetFileType (hFile=0x1d4) returned 0x1 [0212.620] CloseHandle (hObject=0x1d4) returned 1 [0212.620] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236128 [0212.620] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1028\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1028\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x259ebe4 | out: lpFileInformation=0x259ebe4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758)) returned 1 [0212.620] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236128 | out: hHeap=0x1f0000) returned 1 [0212.620] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235700 [0212.620] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1028\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1028\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x259ebf4 | out: lpFileInformation=0x259ebf4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758)) returned 1 [0212.620] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0212.621] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235838 [0212.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235838 | out: hHeap=0x1f0000) returned 1 [0212.621] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0212.621] FindClose (in: hFindFile=0x24e8c0 | out: hFindFile=0x24e8c0) returned 1 [0212.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236190 | out: hHeap=0x1f0000) returned 1 [0212.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226ec0 | out: hHeap=0x1f0000) returned 1 [0212.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ab8 | out: hHeap=0x1f0000) returned 1 [0212.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233ed0 | out: hHeap=0x1f0000) returned 1 [0212.621] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233ed0 [0212.621] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609f0 [0212.621] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x226ec0 [0212.621] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234110 [0212.621] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1029\\*", lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ec00 [0212.622] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234a10 [0212.622] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234110 | out: hHeap=0x1f0000) returned 1 [0212.622] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0212.622] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0212.870] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346b0 [0212.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234a10 | out: hHeap=0x1f0000) returned 1 [0212.871] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0212.871] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0212.871] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0212.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0212.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346f8 [0212.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x235e50 [0212.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346f8 | out: hHeap=0x1f0000) returned 1 [0212.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346b0 | out: hHeap=0x1f0000) returned 1 [0212.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0213.047] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1029\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1029\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0213.047] GetFileType (hFile=0x224) returned 0x1 [0213.048] CloseHandle (hObject=0x224) returned 1 [0213.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c8b8 [0213.048] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1029\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1029\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x259ebe4 | out: lpFileInformation=0x259ebe4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe8e)) returned 1 [0213.048] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0213.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c8b8 [0213.048] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1029\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1029\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x259ebf4 | out: lpFileInformation=0x259ebf4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe8e)) returned 1 [0213.049] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0213.049] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c8b8 [0213.049] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0213.049] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13c4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0213.049] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x234bf0 [0213.049] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346b0 [0213.049] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235cb0 [0213.049] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346b0 | out: hHeap=0x1f0000) returned 1 [0213.049] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235e50 | out: hHeap=0x1f0000) returned 1 [0213.049] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234bf0 | out: hHeap=0x1f0000) returned 1 [0213.050] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1029\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1029\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0213.050] GetFileType (hFile=0x224) returned 0x1 [0213.050] CloseHandle (hObject=0x224) returned 1 [0213.051] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235838 [0213.051] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1029\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1029\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x259ebe4 | out: lpFileInformation=0x259ebe4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13c4a)) returned 1 [0213.051] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235838 | out: hHeap=0x1f0000) returned 1 [0213.051] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2357d0 [0213.051] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1029\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1029\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x259ebf4 | out: lpFileInformation=0x259ebf4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13c4a)) returned 1 [0213.051] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2357d0 | out: hHeap=0x1f0000) returned 1 [0213.051] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235c48 [0213.052] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235c48 | out: hHeap=0x1f0000) returned 1 [0213.052] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0213.052] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x234ec8 [0213.052] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346b0 [0213.052] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235838 [0213.052] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346b0 | out: hHeap=0x1f0000) returned 1 [0213.052] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235cb0 | out: hHeap=0x1f0000) returned 1 [0213.052] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234ec8 | out: hHeap=0x1f0000) returned 1 [0213.053] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1029\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1029\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0213.053] GetFileType (hFile=0x224) returned 0x1 [0213.053] CloseHandle (hObject=0x224) returned 1 [0213.054] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2362c8 [0213.054] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1029\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1029\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x259ebe4 | out: lpFileInformation=0x259ebe4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758)) returned 1 [0213.054] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2362c8 | out: hHeap=0x1f0000) returned 1 [0213.054] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235f88 [0213.054] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1029\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1029\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x259ebf4 | out: lpFileInformation=0x259ebf4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758)) returned 1 [0213.054] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235f88 | out: hHeap=0x1f0000) returned 1 [0213.054] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235700 [0213.054] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0213.054] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0213.054] FindClose (in: hFindFile=0x24ec00 | out: hFindFile=0x24ec00) returned 1 [0213.055] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235838 | out: hHeap=0x1f0000) returned 1 [0213.055] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226ec0 | out: hHeap=0x1f0000) returned 1 [0213.055] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609f0 | out: hHeap=0x1f0000) returned 1 [0213.055] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233ed0 | out: hHeap=0x1f0000) returned 1 [0213.055] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233ed0 [0213.055] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609f0 [0213.055] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x226ec0 [0213.055] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234110 [0213.055] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1030\\*", lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ec00 [0213.055] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234860 [0213.056] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234110 | out: hHeap=0x1f0000) returned 1 [0213.056] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0213.056] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0213.056] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234110 [0213.056] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234860 | out: hHeap=0x1f0000) returned 1 [0213.056] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0213.056] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0213.056] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xcf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0213.056] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0213.056] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346b0 [0213.056] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x235b78 [0213.056] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346b0 | out: hHeap=0x1f0000) returned 1 [0213.056] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234110 | out: hHeap=0x1f0000) returned 1 [0213.057] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0213.057] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1030\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1030\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0213.057] GetFileType (hFile=0x224) returned 0x1 [0213.057] CloseHandle (hObject=0x224) returned 1 [0213.058] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c8b8 [0213.058] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1030\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1030\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x259ebe4 | out: lpFileInformation=0x259ebe4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xcf2)) returned 1 [0213.058] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0213.058] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c8b8 [0213.058] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1030\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1030\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x259ebf4 | out: lpFileInformation=0x259ebf4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xcf2)) returned 1 [0213.058] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0213.058] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c8b8 [0213.058] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0213.058] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12fb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0213.058] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x234bf0 [0213.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234110 [0213.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235c48 [0213.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234110 | out: hHeap=0x1f0000) returned 1 [0213.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0213.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234bf0 | out: hHeap=0x1f0000) returned 1 [0213.059] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1030\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1030\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0213.059] GetFileType (hFile=0x224) returned 0x1 [0213.060] CloseHandle (hObject=0x224) returned 1 [0213.060] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235cb0 [0213.060] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1030\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1030\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x259ebe4 | out: lpFileInformation=0x259ebe4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12fb4)) returned 1 [0213.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235cb0 | out: hHeap=0x1f0000) returned 1 [0213.060] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2361f8 [0213.060] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1030\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1030\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x259ebf4 | out: lpFileInformation=0x259ebf4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12fb4)) returned 1 [0213.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2361f8 | out: hHeap=0x1f0000) returned 1 [0213.060] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236190 [0213.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236190 | out: hHeap=0x1f0000) returned 1 [0213.060] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0213.060] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x234bf0 [0213.061] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234110 [0213.061] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2361f8 [0213.061] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234110 | out: hHeap=0x1f0000) returned 1 [0213.061] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235c48 | out: hHeap=0x1f0000) returned 1 [0213.061] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234bf0 | out: hHeap=0x1f0000) returned 1 [0213.061] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1030\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1030\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0213.062] GetFileType (hFile=0x224) returned 0x1 [0213.062] CloseHandle (hObject=0x224) returned 1 [0213.062] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235c48 [0213.063] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1030\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1030\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x259ebe4 | out: lpFileInformation=0x259ebe4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758)) returned 1 [0213.063] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235c48 | out: hHeap=0x1f0000) returned 1 [0213.063] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235700 [0213.063] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1030\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1030\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x259ebf4 | out: lpFileInformation=0x259ebf4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758)) returned 1 [0213.063] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0213.063] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235d80 [0213.063] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235d80 | out: hHeap=0x1f0000) returned 1 [0213.063] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0213.064] FindClose (in: hFindFile=0x24ec00 | out: hFindFile=0x24ec00) returned 1 [0213.064] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2361f8 | out: hHeap=0x1f0000) returned 1 [0213.064] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226ec0 | out: hHeap=0x1f0000) returned 1 [0213.064] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609f0 | out: hHeap=0x1f0000) returned 1 [0213.064] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233ed0 | out: hHeap=0x1f0000) returned 1 [0213.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233ed0 [0213.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a68 [0213.065] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x226ec0 [0213.065] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234110 [0213.065] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1031\\*", lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e8c0 [0213.065] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234740 [0213.065] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234110 | out: hHeap=0x1f0000) returned 1 [0213.065] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0213.066] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0213.066] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234110 [0213.066] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234740 | out: hHeap=0x1f0000) returned 1 [0213.066] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0213.066] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0213.066] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xd5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0213.066] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609f0 [0213.066] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2348f0 [0213.066] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x2359d8 [0213.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2348f0 | out: hHeap=0x1f0000) returned 1 [0213.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234110 | out: hHeap=0x1f0000) returned 1 [0213.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609f0 | out: hHeap=0x1f0000) returned 1 [0213.067] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1031\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1031\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0213.068] GetFileType (hFile=0x224) returned 0x1 [0213.068] CloseHandle (hObject=0x224) returned 1 [0213.069] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c8b8 [0213.069] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1031\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1031\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x259ebe4 | out: lpFileInformation=0x259ebe4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xd5b)) returned 1 [0213.069] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0213.069] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c8b8 [0213.069] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1031\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1031\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x259ebf4 | out: lpFileInformation=0x259ebf4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xd5b)) returned 1 [0213.070] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0213.070] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c8b8 [0213.070] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0213.070] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x141aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0213.070] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x234bb8 [0213.070] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234110 [0213.070] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235970 [0213.070] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234110 | out: hHeap=0x1f0000) returned 1 [0213.070] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2359d8 | out: hHeap=0x1f0000) returned 1 [0213.071] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234bb8 | out: hHeap=0x1f0000) returned 1 [0213.071] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1031\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1031\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0213.071] GetFileType (hFile=0x224) returned 0x1 [0213.072] CloseHandle (hObject=0x224) returned 1 [0213.077] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235908 [0213.077] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1031\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1031\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x259ebe4 | out: lpFileInformation=0x259ebe4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x141aa)) returned 1 [0213.077] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235908 | out: hHeap=0x1f0000) returned 1 [0213.077] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235700 [0213.077] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1031\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1031\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x259ebf4 | out: lpFileInformation=0x259ebf4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x141aa)) returned 1 [0213.077] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0213.077] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235c48 [0213.078] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235c48 | out: hHeap=0x1f0000) returned 1 [0213.078] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0213.078] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x234bb8 [0213.078] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234110 [0213.078] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235700 [0213.078] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234110 | out: hHeap=0x1f0000) returned 1 [0213.078] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235970 | out: hHeap=0x1f0000) returned 1 [0213.078] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234bb8 | out: hHeap=0x1f0000) returned 1 [0213.079] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1031\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1031\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0213.079] GetFileType (hFile=0x224) returned 0x1 [0213.080] CloseHandle (hObject=0x224) returned 1 [0213.080] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235838 [0213.080] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1031\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1031\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x259ebe4 | out: lpFileInformation=0x259ebe4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958)) returned 1 [0213.081] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235838 | out: hHeap=0x1f0000) returned 1 [0213.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235838 [0213.081] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1031\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1031\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x259ebf4 | out: lpFileInformation=0x259ebf4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958)) returned 1 [0213.081] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235838 | out: hHeap=0x1f0000) returned 1 [0213.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235768 [0213.081] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235768 | out: hHeap=0x1f0000) returned 1 [0213.081] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0213.081] FindClose (in: hFindFile=0x24e8c0 | out: hFindFile=0x24e8c0) returned 1 [0213.082] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0213.082] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226ec0 | out: hHeap=0x1f0000) returned 1 [0213.082] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a68 | out: hHeap=0x1f0000) returned 1 [0213.082] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233ed0 | out: hHeap=0x1f0000) returned 1 [0213.082] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233ed0 [0213.082] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609f0 [0213.082] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x226ec0 [0213.083] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234110 [0213.083] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1032\\*", lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ed00 [0213.083] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234740 [0213.083] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234110 | out: hHeap=0x1f0000) returned 1 [0213.083] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0213.083] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0213.083] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234110 [0213.083] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234740 | out: hHeap=0x1f0000) returned 1 [0213.084] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0213.084] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0213.084] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x22ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0213.084] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a18 [0213.084] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234a10 [0213.084] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x235700 [0213.084] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234a10 | out: hHeap=0x1f0000) returned 1 [0213.084] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234110 | out: hHeap=0x1f0000) returned 1 [0213.084] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a18 | out: hHeap=0x1f0000) returned 1 [0213.085] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1032\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1032\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0213.085] GetFileType (hFile=0x224) returned 0x1 [0213.086] CloseHandle (hObject=0x224) returned 1 [0213.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c8b8 [0213.086] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1032\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1032\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x259ebe4 | out: lpFileInformation=0x259ebe4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x22ac)) returned 1 [0213.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0213.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c8b8 [0213.087] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1032\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1032\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x259ebf4 | out: lpFileInformation=0x259ebf4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x22ac)) returned 1 [0213.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0213.087] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c8b8 [0213.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0213.087] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1510c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0213.087] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x234c60 [0213.087] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234110 [0213.087] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2361f8 [0213.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234110 | out: hHeap=0x1f0000) returned 1 [0213.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0213.088] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234c60 | out: hHeap=0x1f0000) returned 1 [0213.088] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1032\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1032\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0213.088] GetFileType (hFile=0x224) returned 0x1 [0213.089] CloseHandle (hObject=0x224) returned 1 [0213.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235908 [0213.089] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1032\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1032\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x259ebe4 | out: lpFileInformation=0x259ebe4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1510c)) returned 1 [0213.089] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235908 | out: hHeap=0x1f0000) returned 1 [0213.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2357d0 [0213.089] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1032\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1032\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x259ebf4 | out: lpFileInformation=0x259ebf4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1510c)) returned 1 [0213.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2357d0 | out: hHeap=0x1f0000) returned 1 [0213.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235e50 [0213.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235e50 | out: hHeap=0x1f0000) returned 1 [0213.090] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0213.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x234cd0 [0213.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234110 [0213.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236058 [0213.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234110 | out: hHeap=0x1f0000) returned 1 [0213.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2361f8 | out: hHeap=0x1f0000) returned 1 [0213.091] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234cd0 | out: hHeap=0x1f0000) returned 1 [0213.503] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1032\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1032\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0213.503] GetFileType (hFile=0x204) returned 0x1 [0213.503] CloseHandle (hObject=0x204) returned 1 [0213.504] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235cb0 [0213.504] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1032\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1032\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x259ebe4 | out: lpFileInformation=0x259ebe4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58)) returned 1 [0213.504] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235cb0 | out: hHeap=0x1f0000) returned 1 [0213.504] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235e50 [0213.504] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1032\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1032\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x259ebf4 | out: lpFileInformation=0x259ebf4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58)) returned 1 [0213.504] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235e50 | out: hHeap=0x1f0000) returned 1 [0213.504] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235b78 [0213.504] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0213.504] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0213.504] FindClose (in: hFindFile=0x24ed00 | out: hFindFile=0x24ed00) returned 1 [0213.504] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236058 | out: hHeap=0x1f0000) returned 1 [0213.504] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226ec0 | out: hHeap=0x1f0000) returned 1 [0213.505] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609f0 | out: hHeap=0x1f0000) returned 1 [0213.505] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233ed0 | out: hHeap=0x1f0000) returned 1 [0213.505] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234110 [0213.505] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0213.505] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22db68 [0213.505] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2343e0 [0213.505] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1033\\*", lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ed00 [0213.505] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233ed0 [0213.505] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2343e0 | out: hHeap=0x1f0000) returned 1 [0213.505] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0213.505] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0213.505] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2343e0 [0213.505] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233ed0 | out: hHeap=0x1f0000) returned 1 [0213.505] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0213.506] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0213.506] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd723cc00, ftCreationTime.dwHighDateTime=0x1cabb47, ftLastAccessTime.dwLowDateTime=0xd723cc00, ftLastAccessTime.dwHighDateTime=0x1cabb47, ftLastWriteTime.dwLowDateTime=0xd723cc00, ftLastWriteTime.dwHighDateTime=0x1cabb47, nFileSizeHigh=0x0, nFileSizeLow=0xc74, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0213.506] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ab8 [0213.506] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233ed0 [0213.506] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x2362c8 [0213.506] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233ed0 | out: hHeap=0x1f0000) returned 1 [0213.506] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2343e0 | out: hHeap=0x1f0000) returned 1 [0213.506] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ab8 | out: hHeap=0x1f0000) returned 1 [0213.506] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1033\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1033\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0213.506] GetFileType (hFile=0x204) returned 0x1 [0213.507] CloseHandle (hObject=0x204) returned 1 [0213.507] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c8b8 [0213.507] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1033\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1033\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x259ebe4 | out: lpFileInformation=0x259ebe4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd723cc00, ftCreationTime.dwHighDateTime=0x1cabb47, ftLastAccessTime.dwLowDateTime=0xd723cc00, ftLastAccessTime.dwHighDateTime=0x1cabb47, ftLastWriteTime.dwLowDateTime=0xd723cc00, ftLastWriteTime.dwHighDateTime=0x1cabb47, nFileSizeHigh=0x0, nFileSizeLow=0xc74)) returned 1 [0213.507] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0213.507] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239508 [0213.507] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1033\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1033\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x259ebf4 | out: lpFileInformation=0x259ebf4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd723cc00, ftCreationTime.dwHighDateTime=0x1cabb47, ftLastAccessTime.dwLowDateTime=0xd723cc00, ftLastAccessTime.dwHighDateTime=0x1cabb47, ftLastWriteTime.dwLowDateTime=0xd723cc00, ftLastWriteTime.dwHighDateTime=0x1cabb47, nFileSizeHigh=0x0, nFileSizeLow=0xc74)) returned 1 [0213.507] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239508 | out: hHeap=0x1f0000) returned 1 [0213.507] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c8b8 [0213.507] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0213.507] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x47ad1a00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x47ad1a00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x47ad1a00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12db0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0213.507] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0213.507] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2343e0 [0213.507] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235700 [0213.507] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2343e0 | out: hHeap=0x1f0000) returned 1 [0213.508] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2362c8 | out: hHeap=0x1f0000) returned 1 [0213.508] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0213.508] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1033\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1033\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0213.508] GetFileType (hFile=0x204) returned 0x1 [0213.508] CloseHandle (hObject=0x204) returned 1 [0213.508] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235be0 [0213.508] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1033\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1033\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x259ebe4 | out: lpFileInformation=0x259ebe4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x47ad1a00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x47ad1a00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x47ad1a00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12db0)) returned 1 [0213.509] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235be0 | out: hHeap=0x1f0000) returned 1 [0213.509] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235f20 [0213.509] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1033\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1033\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x259ebf4 | out: lpFileInformation=0x259ebf4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x47ad1a00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x47ad1a00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x47ad1a00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12db0)) returned 1 [0213.509] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235f20 | out: hHeap=0x1f0000) returned 1 [0213.509] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235b78 [0213.509] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0213.509] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0213.509] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0213.509] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233ed0 [0213.509] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236190 [0213.509] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233ed0 | out: hHeap=0x1f0000) returned 1 [0213.509] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0213.509] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0213.509] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1033\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1033\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0213.510] GetFileType (hFile=0x204) returned 0x1 [0213.510] CloseHandle (hObject=0x204) returned 1 [0213.510] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235f20 [0213.510] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1033\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1033\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x259ebe4 | out: lpFileInformation=0x259ebe4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358)) returned 1 [0213.510] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235f20 | out: hHeap=0x1f0000) returned 1 [0213.510] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2361f8 [0213.510] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1033\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1033\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x259ebf4 | out: lpFileInformation=0x259ebf4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358)) returned 1 [0213.510] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2361f8 | out: hHeap=0x1f0000) returned 1 [0213.510] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2358a0 [0213.510] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2358a0 | out: hHeap=0x1f0000) returned 1 [0213.510] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0213.511] FindClose (in: hFindFile=0x24ed00 | out: hFindFile=0x24ed00) returned 1 [0213.511] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236190 | out: hHeap=0x1f0000) returned 1 [0213.511] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22db68 | out: hHeap=0x1f0000) returned 1 [0213.511] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0213.511] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234110 | out: hHeap=0x1f0000) returned 1 [0213.511] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233ed0 [0213.511] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a18 [0213.511] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d6a0 [0213.511] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234110 [0213.511] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1035\\*", lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24eac0 [0213.511] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2343e0 [0213.511] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234110 | out: hHeap=0x1f0000) returned 1 [0213.511] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0213.511] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0213.511] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234110 [0213.511] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2343e0 | out: hHeap=0x1f0000) returned 1 [0213.512] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0213.512] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0213.512] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe76, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0213.512] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0213.512] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2343e0 [0213.512] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x236058 [0213.512] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2343e0 | out: hHeap=0x1f0000) returned 1 [0213.512] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234110 | out: hHeap=0x1f0000) returned 1 [0213.512] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0213.512] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1035\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1035\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0213.512] GetFileType (hFile=0x204) returned 0x1 [0213.513] CloseHandle (hObject=0x204) returned 1 [0213.513] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c8b8 [0213.513] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1035\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1035\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x259ebe4 | out: lpFileInformation=0x259ebe4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe76)) returned 1 [0213.513] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0213.513] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239508 [0213.513] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1035\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1035\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x259ebf4 | out: lpFileInformation=0x259ebf4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe76)) returned 1 [0213.513] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239508 | out: hHeap=0x1f0000) returned 1 [0213.513] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c8b8 [0213.513] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0213.513] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12cde, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0213.513] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2f0 [0213.513] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234110 [0213.513] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235970 [0213.514] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234110 | out: hHeap=0x1f0000) returned 1 [0213.514] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236058 | out: hHeap=0x1f0000) returned 1 [0213.514] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0213.514] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1035\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1035\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0213.514] GetFileType (hFile=0x204) returned 0x1 [0213.514] CloseHandle (hObject=0x204) returned 1 [0213.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235b78 [0213.515] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1035\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1035\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x259ebe4 | out: lpFileInformation=0x259ebe4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12cde)) returned 1 [0213.515] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0213.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2358a0 [0213.515] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1035\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1035\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x259ebf4 | out: lpFileInformation=0x259ebf4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12cde)) returned 1 [0213.515] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2358a0 | out: hHeap=0x1f0000) returned 1 [0213.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235ff0 [0213.515] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235ff0 | out: hHeap=0x1f0000) returned 1 [0213.515] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0213.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf70 [0213.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2343e0 [0213.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235b78 [0213.516] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2343e0 | out: hHeap=0x1f0000) returned 1 [0213.516] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235970 | out: hHeap=0x1f0000) returned 1 [0213.516] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf70 | out: hHeap=0x1f0000) returned 1 [0213.516] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1035\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1035\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0213.516] GetFileType (hFile=0x204) returned 0x1 [0213.516] CloseHandle (hObject=0x204) returned 1 [0213.517] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235d80 [0213.517] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1035\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1035\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x259ebe4 | out: lpFileInformation=0x259ebe4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758)) returned 1 [0213.517] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235d80 | out: hHeap=0x1f0000) returned 1 [0213.517] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235eb8 [0213.517] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1035\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1035\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x259ebf4 | out: lpFileInformation=0x259ebf4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758)) returned 1 [0213.517] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235eb8 | out: hHeap=0x1f0000) returned 1 [0213.517] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2362c8 [0213.517] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2362c8 | out: hHeap=0x1f0000) returned 1 [0213.517] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0213.517] FindClose (in: hFindFile=0x24eac0 | out: hFindFile=0x24eac0) returned 1 [0213.518] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0213.518] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d6a0 | out: hHeap=0x1f0000) returned 1 [0213.518] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a18 | out: hHeap=0x1f0000) returned 1 [0213.518] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233ed0 | out: hHeap=0x1f0000) returned 1 [0213.518] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233ed0 [0213.518] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0213.518] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22db68 [0213.518] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234110 [0213.518] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1036\\*", lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e7c0 [0213.519] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2343e0 [0213.519] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234110 | out: hHeap=0x1f0000) returned 1 [0213.520] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0213.520] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0213.520] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234110 [0213.520] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2343e0 | out: hHeap=0x1f0000) returned 1 [0213.520] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0213.520] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0213.520] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xdc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0213.520] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609f0 [0213.520] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2343e0 [0213.520] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x235b78 [0213.520] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2343e0 | out: hHeap=0x1f0000) returned 1 [0213.520] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234110 | out: hHeap=0x1f0000) returned 1 [0213.520] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609f0 | out: hHeap=0x1f0000) returned 1 [0213.520] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1036\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1036\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0213.521] GetFileType (hFile=0x204) returned 0x1 [0213.521] CloseHandle (hObject=0x204) returned 1 [0213.521] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c8b8 [0213.521] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1036\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1036\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x259ebe4 | out: lpFileInformation=0x259ebe4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xdc6)) returned 1 [0213.521] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0213.521] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239508 [0213.521] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1036\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1036\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x259ebf4 | out: lpFileInformation=0x259ebf4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xdc6)) returned 1 [0213.521] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239508 | out: hHeap=0x1f0000) returned 1 [0213.521] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c8b8 [0213.522] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0213.522] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x14412, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0213.522] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0213.522] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2343e0 [0213.522] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235d80 [0213.522] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2343e0 | out: hHeap=0x1f0000) returned 1 [0213.522] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0213.522] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0213.522] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1036\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1036\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0213.522] GetFileType (hFile=0x204) returned 0x1 [0213.523] CloseHandle (hObject=0x204) returned 1 [0213.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235908 [0213.523] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1036\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1036\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x259ebe4 | out: lpFileInformation=0x259ebe4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x14412)) returned 1 [0213.523] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235908 | out: hHeap=0x1f0000) returned 1 [0213.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236128 [0213.523] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1036\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1036\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x259ebf4 | out: lpFileInformation=0x259ebf4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x14412)) returned 1 [0213.523] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236128 | out: hHeap=0x1f0000) returned 1 [0213.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235700 [0213.523] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0213.523] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0213.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2f0 [0213.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234110 [0213.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2361f8 [0213.523] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234110 | out: hHeap=0x1f0000) returned 1 [0213.523] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235d80 | out: hHeap=0x1f0000) returned 1 [0213.524] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0213.524] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1036\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1036\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0213.524] GetFileType (hFile=0x204) returned 0x1 [0213.524] CloseHandle (hObject=0x204) returned 1 [0213.524] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2358a0 [0213.524] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1036\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1036\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x259ebe4 | out: lpFileInformation=0x259ebe4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958)) returned 1 [0213.525] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2358a0 | out: hHeap=0x1f0000) returned 1 [0213.525] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235d80 [0213.525] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1036\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1036\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x259ebf4 | out: lpFileInformation=0x259ebf4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958)) returned 1 [0213.525] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235d80 | out: hHeap=0x1f0000) returned 1 [0213.525] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235b78 [0213.525] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0213.525] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0213.525] FindClose (in: hFindFile=0x24e7c0 | out: hFindFile=0x24e7c0) returned 1 [0213.525] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2361f8 | out: hHeap=0x1f0000) returned 1 [0213.525] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22db68 | out: hHeap=0x1f0000) returned 1 [0213.525] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0213.525] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233ed0 | out: hHeap=0x1f0000) returned 1 [0213.525] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233ed0 [0213.525] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ab8 [0213.525] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d6a0 [0213.525] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2343e0 [0213.526] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1037\\*", lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e940 [0213.526] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234110 [0213.526] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2343e0 | out: hHeap=0x1f0000) returned 1 [0213.526] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0213.526] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0213.526] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2343e0 [0213.526] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234110 | out: hHeap=0x1f0000) returned 1 [0213.526] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0213.526] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0213.526] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x1ac3, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0213.526] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0213.526] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234110 [0213.526] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x235908 [0213.526] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234110 | out: hHeap=0x1f0000) returned 1 [0213.526] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2343e0 | out: hHeap=0x1f0000) returned 1 [0213.526] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0213.527] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1037\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1037\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0213.527] GetFileType (hFile=0x204) returned 0x1 [0213.527] CloseHandle (hObject=0x204) returned 1 [0213.527] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c8b8 [0213.527] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1037\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1037\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x259ebe4 | out: lpFileInformation=0x259ebe4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x1ac3)) returned 1 [0213.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0213.528] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239508 [0213.528] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1037\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1037\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x259ebf4 | out: lpFileInformation=0x259ebf4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x1ac3)) returned 1 [0213.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239508 | out: hHeap=0x1f0000) returned 1 [0213.528] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c8b8 [0213.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0213.528] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1198c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0213.528] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0213.528] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2343e0 [0213.528] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2358a0 [0213.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2343e0 | out: hHeap=0x1f0000) returned 1 [0213.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235908 | out: hHeap=0x1f0000) returned 1 [0213.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0213.529] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1037\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1037\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0213.529] GetFileType (hFile=0x204) returned 0x1 [0213.529] CloseHandle (hObject=0x204) returned 1 [0213.529] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235ff0 [0213.529] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1037\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1037\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x259ebe4 | out: lpFileInformation=0x259ebe4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1198c)) returned 1 [0213.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235ff0 | out: hHeap=0x1f0000) returned 1 [0213.530] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235700 [0213.530] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1037\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1037\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x259ebf4 | out: lpFileInformation=0x259ebf4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1198c)) returned 1 [0213.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0213.530] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235700 [0213.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0213.530] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4158, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0213.530] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2f0 [0213.530] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2343e0 [0213.530] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2361f8 [0213.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2343e0 | out: hHeap=0x1f0000) returned 1 [0213.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2358a0 | out: hHeap=0x1f0000) returned 1 [0213.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0213.530] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1037\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1037\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0213.531] GetFileType (hFile=0x204) returned 0x1 [0213.531] CloseHandle (hObject=0x204) returned 1 [0213.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235b78 [0213.531] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1037\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1037\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x259ebe4 | out: lpFileInformation=0x259ebe4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4158)) returned 1 [0213.531] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0213.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236190 [0213.531] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1037\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1037\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x259ebf4 | out: lpFileInformation=0x259ebf4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4158)) returned 1 [0213.531] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236190 | out: hHeap=0x1f0000) returned 1 [0213.532] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235b78 [0213.532] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0213.532] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4158, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0213.532] FindClose (in: hFindFile=0x24e940 | out: hFindFile=0x24e940) returned 1 [0213.532] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2361f8 | out: hHeap=0x1f0000) returned 1 [0213.532] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d6a0 | out: hHeap=0x1f0000) returned 1 [0213.532] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ab8 | out: hHeap=0x1f0000) returned 1 [0213.532] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233ed0 | out: hHeap=0x1f0000) returned 1 [0213.532] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234110 [0213.532] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a18 [0213.532] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e1c8 [0213.532] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2343e0 [0213.532] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1038\\*", lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24eac0 [0213.533] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233ed0 [0213.533] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2343e0 | out: hHeap=0x1f0000) returned 1 [0213.533] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0213.533] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0213.533] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2343e0 [0213.533] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233ed0 | out: hHeap=0x1f0000) returned 1 [0213.533] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0213.533] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0213.533] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x109e, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0213.533] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0213.533] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233ed0 [0213.533] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x235cb0 [0213.533] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233ed0 | out: hHeap=0x1f0000) returned 1 [0213.533] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2343e0 | out: hHeap=0x1f0000) returned 1 [0213.533] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0213.534] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1038\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1038\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0213.534] GetFileType (hFile=0x204) returned 0x1 [0213.534] CloseHandle (hObject=0x204) returned 1 [0213.534] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c8b8 [0213.534] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1038\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1038\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x259ebe4 | out: lpFileInformation=0x259ebe4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x109e)) returned 1 [0213.535] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0213.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239508 [0213.535] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1038\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1038\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x259ebf4 | out: lpFileInformation=0x259ebf4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x109e)) returned 1 [0213.535] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239508 | out: hHeap=0x1f0000) returned 1 [0213.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c8b8 [0213.535] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0213.535] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x151aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0213.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf70 [0213.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2343e0 [0213.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2361f8 [0213.535] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2343e0 | out: hHeap=0x1f0000) returned 1 [0213.535] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235cb0 | out: hHeap=0x1f0000) returned 1 [0213.535] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf70 | out: hHeap=0x1f0000) returned 1 [0213.536] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1038\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1038\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0213.536] GetFileType (hFile=0x204) returned 0x1 [0213.536] CloseHandle (hObject=0x204) returned 1 [0213.537] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236190 [0213.537] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1038\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1038\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x259ebe4 | out: lpFileInformation=0x259ebe4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x151aa)) returned 1 [0213.537] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236190 | out: hHeap=0x1f0000) returned 1 [0213.537] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2362c8 [0213.537] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1038\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1038\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x259ebf4 | out: lpFileInformation=0x259ebf4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x151aa)) returned 1 [0213.537] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2362c8 | out: hHeap=0x1f0000) returned 1 [0213.537] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235970 [0213.537] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235970 | out: hHeap=0x1f0000) returned 1 [0213.537] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0213.537] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0213.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233ed0 [0213.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235700 [0213.538] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233ed0 | out: hHeap=0x1f0000) returned 1 [0213.538] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2361f8 | out: hHeap=0x1f0000) returned 1 [0213.538] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0213.538] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1038\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1038\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0213.539] GetFileType (hFile=0x204) returned 0x1 [0213.539] CloseHandle (hObject=0x204) returned 1 [0213.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235d80 [0213.539] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1038\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1038\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x259ebe4 | out: lpFileInformation=0x259ebe4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958)) returned 1 [0213.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235d80 | out: hHeap=0x1f0000) returned 1 [0213.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235b78 [0213.539] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1038\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1038\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x259ebf4 | out: lpFileInformation=0x259ebf4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958)) returned 1 [0213.540] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0213.540] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235970 [0213.540] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235970 | out: hHeap=0x1f0000) returned 1 [0213.540] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0213.540] FindClose (in: hFindFile=0x24eac0 | out: hFindFile=0x24eac0) returned 1 [0213.540] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0213.540] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e1c8 | out: hHeap=0x1f0000) returned 1 [0213.540] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a18 | out: hHeap=0x1f0000) returned 1 [0213.540] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234110 | out: hHeap=0x1f0000) returned 1 [0213.540] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233ed0 [0213.540] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0213.540] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e1c8 [0213.540] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234110 [0213.540] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1040\\*", lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ec40 [0213.541] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2343e0 [0213.541] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234110 | out: hHeap=0x1f0000) returned 1 [0213.541] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0213.541] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0213.541] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234110 [0213.541] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2343e0 | out: hHeap=0x1f0000) returned 1 [0213.541] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0213.541] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0213.541] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0213.541] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609f0 [0213.541] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2343e0 [0213.541] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x235eb8 [0213.541] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2343e0 | out: hHeap=0x1f0000) returned 1 [0213.542] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234110 | out: hHeap=0x1f0000) returned 1 [0213.542] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609f0 | out: hHeap=0x1f0000) returned 1 [0213.542] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1040\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1040\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0213.542] GetFileType (hFile=0x204) returned 0x1 [0213.542] CloseHandle (hObject=0x204) returned 1 [0213.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c8b8 [0213.543] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1040\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1040\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x259ebe4 | out: lpFileInformation=0x259ebe4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe3b)) returned 1 [0213.543] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0213.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239508 [0213.543] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1040\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1040\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x259ebf4 | out: lpFileInformation=0x259ebf4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe3b)) returned 1 [0213.543] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239508 | out: hHeap=0x1f0000) returned 1 [0213.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c8b8 [0213.543] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0213.543] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x138bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0213.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0213.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234110 [0213.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235970 [0213.544] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234110 | out: hHeap=0x1f0000) returned 1 [0213.544] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235eb8 | out: hHeap=0x1f0000) returned 1 [0213.544] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0213.544] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1040\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1040\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0213.544] GetFileType (hFile=0x204) returned 0x1 [0213.545] CloseHandle (hObject=0x204) returned 1 [0213.545] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235908 [0213.545] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1040\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1040\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x259ebe4 | out: lpFileInformation=0x259ebe4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x138bc)) returned 1 [0213.545] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235908 | out: hHeap=0x1f0000) returned 1 [0213.545] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235700 [0213.545] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1040\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1040\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x259ebf4 | out: lpFileInformation=0x259ebf4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x138bc)) returned 1 [0213.546] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0213.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235be0 [0213.546] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235be0 | out: hHeap=0x1f0000) returned 1 [0213.546] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0213.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0213.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234110 [0213.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235700 [0213.546] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234110 | out: hHeap=0x1f0000) returned 1 [0213.546] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235970 | out: hHeap=0x1f0000) returned 1 [0213.546] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0213.546] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1040\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1040\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0213.547] GetFileType (hFile=0x204) returned 0x1 [0213.547] CloseHandle (hObject=0x204) returned 1 [0213.547] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2360c0 [0213.547] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1040\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1040\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x259ebe4 | out: lpFileInformation=0x259ebe4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758)) returned 1 [0213.547] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2360c0 | out: hHeap=0x1f0000) returned 1 [0213.547] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235ff0 [0213.547] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1040\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1040\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x259ebf4 | out: lpFileInformation=0x259ebf4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758)) returned 1 [0213.547] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235ff0 | out: hHeap=0x1f0000) returned 1 [0213.547] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2358a0 [0213.548] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2358a0 | out: hHeap=0x1f0000) returned 1 [0213.548] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0213.548] FindClose (in: hFindFile=0x24ec40 | out: hFindFile=0x24ec40) returned 1 [0213.548] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0213.548] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e1c8 | out: hHeap=0x1f0000) returned 1 [0213.548] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0213.548] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233ed0 | out: hHeap=0x1f0000) returned 1 [0213.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233ed0 [0213.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0213.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d6a0 [0213.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234110 [0213.549] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1041\\*", lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ed00 [0213.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2343e0 [0213.549] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234110 | out: hHeap=0x1f0000) returned 1 [0213.549] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0213.549] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0213.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234110 [0213.549] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2343e0 | out: hHeap=0x1f0000) returned 1 [0213.549] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0213.549] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0213.549] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x278d, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0213.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609f0 [0213.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2343e0 [0213.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x2362c8 [0213.549] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2343e0 | out: hHeap=0x1f0000) returned 1 [0213.549] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234110 | out: hHeap=0x1f0000) returned 1 [0213.747] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609f0 | out: hHeap=0x1f0000) returned 1 [0213.867] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1041\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1041\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0213.868] GetFileType (hFile=0x1fc) returned 0x1 [0213.868] CloseHandle (hObject=0x1fc) returned 1 [0213.868] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c8b8 [0213.868] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1041\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1041\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x259ebe4 | out: lpFileInformation=0x259ebe4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x278d)) returned 1 [0213.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0213.868] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239508 [0213.868] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1041\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1041\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x259ebf4 | out: lpFileInformation=0x259ebf4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x278d)) returned 1 [0213.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239508 | out: hHeap=0x1f0000) returned 1 [0213.869] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c8b8 [0213.869] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0213.869] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x10a82, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0213.869] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0213.869] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346b0 [0213.869] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235700 [0213.869] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346b0 | out: hHeap=0x1f0000) returned 1 [0213.869] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2362c8 | out: hHeap=0x1f0000) returned 1 [0213.869] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0213.869] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1041\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1041\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0213.869] GetFileType (hFile=0x1fc) returned 0x1 [0213.869] CloseHandle (hObject=0x1fc) returned 1 [0213.870] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235970 [0213.870] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1041\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1041\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x259ebe4 | out: lpFileInformation=0x259ebe4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x10a82)) returned 1 [0213.870] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235970 | out: hHeap=0x1f0000) returned 1 [0213.870] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2361f8 [0213.870] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1041\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1041\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x259ebf4 | out: lpFileInformation=0x259ebf4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x10a82)) returned 1 [0213.870] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2361f8 | out: hHeap=0x1f0000) returned 1 [0213.870] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235908 [0213.870] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235908 | out: hHeap=0x1f0000) returned 1 [0213.870] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0213.870] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0213.870] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346b0 [0213.870] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235d80 [0213.870] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346b0 | out: hHeap=0x1f0000) returned 1 [0213.870] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0213.870] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0213.871] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1041\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1041\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0213.871] GetFileType (hFile=0x1fc) returned 0x1 [0213.871] CloseHandle (hObject=0x1fc) returned 1 [0213.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235be0 [0213.871] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1041\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1041\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x259ebe4 | out: lpFileInformation=0x259ebe4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3d58)) returned 1 [0213.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235be0 | out: hHeap=0x1f0000) returned 1 [0213.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236058 [0213.871] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1041\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1041\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x259ebf4 | out: lpFileInformation=0x259ebf4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3d58)) returned 1 [0213.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236058 | out: hHeap=0x1f0000) returned 1 [0213.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235cb0 [0213.872] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235cb0 | out: hHeap=0x1f0000) returned 1 [0213.872] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0213.872] FindClose (in: hFindFile=0x24ed00 | out: hFindFile=0x24ed00) returned 1 [0213.872] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235d80 | out: hHeap=0x1f0000) returned 1 [0213.872] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d6a0 | out: hHeap=0x1f0000) returned 1 [0213.872] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0213.872] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233ed0 | out: hHeap=0x1f0000) returned 1 [0213.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233ed0 [0213.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0213.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d6a0 [0213.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346b0 [0213.872] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1042\\*", lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e780 [0213.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346f8 [0213.873] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346b0 | out: hHeap=0x1f0000) returned 1 [0213.873] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0213.873] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0213.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2348f0 [0213.873] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346f8 | out: hHeap=0x1f0000) returned 1 [0213.873] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0213.873] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0213.873] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x318f, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0213.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609a0 [0213.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346b0 [0213.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x235700 [0213.873] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346b0 | out: hHeap=0x1f0000) returned 1 [0213.873] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2348f0 | out: hHeap=0x1f0000) returned 1 [0213.873] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0213.874] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1042\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1042\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0213.874] GetFileType (hFile=0x1fc) returned 0x1 [0213.874] CloseHandle (hObject=0x1fc) returned 1 [0213.874] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c8b8 [0213.874] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1042\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1042\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x259ebe4 | out: lpFileInformation=0x259ebe4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x318f)) returned 1 [0213.874] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0213.874] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239508 [0213.875] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1042\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1042\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x259ebf4 | out: lpFileInformation=0x259ebf4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x318f)) returned 1 [0213.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239508 | out: hHeap=0x1f0000) returned 1 [0213.875] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c8b8 [0213.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0213.875] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xfed6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0213.875] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0213.875] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346b0 [0213.875] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235d80 [0213.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346b0 | out: hHeap=0x1f0000) returned 1 [0213.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0213.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0213.875] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1042\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1042\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0213.876] GetFileType (hFile=0x1fc) returned 0x1 [0213.876] CloseHandle (hObject=0x1fc) returned 1 [0213.876] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235768 [0213.876] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1042\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1042\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x259ebe4 | out: lpFileInformation=0x259ebe4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xfed6)) returned 1 [0213.876] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235768 | out: hHeap=0x1f0000) returned 1 [0213.876] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235700 [0213.876] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1042\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1042\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x259ebf4 | out: lpFileInformation=0x259ebf4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xfed6)) returned 1 [0213.876] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0213.876] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236190 [0213.876] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236190 | out: hHeap=0x1f0000) returned 1 [0213.877] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0213.877] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0213.877] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234980 [0213.877] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235be0 [0213.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234980 | out: hHeap=0x1f0000) returned 1 [0213.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235d80 | out: hHeap=0x1f0000) returned 1 [0213.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0213.877] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1042\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1042\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0213.877] GetFileType (hFile=0x1fc) returned 0x1 [0213.916] CloseHandle (hObject=0x1fc) returned 1 [0213.916] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235eb8 [0213.916] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1042\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1042\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x259ebe4 | out: lpFileInformation=0x259ebe4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3b58)) returned 1 [0213.917] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235eb8 | out: hHeap=0x1f0000) returned 1 [0213.917] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236190 [0213.917] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1042\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1042\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x259ebf4 | out: lpFileInformation=0x259ebf4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3b58)) returned 1 [0213.917] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236190 | out: hHeap=0x1f0000) returned 1 [0213.917] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235f20 [0213.917] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235f20 | out: hHeap=0x1f0000) returned 1 [0213.917] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0213.917] FindClose (in: hFindFile=0x24e780 | out: hFindFile=0x24e780) returned 1 [0213.917] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235be0 | out: hHeap=0x1f0000) returned 1 [0213.918] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d6a0 | out: hHeap=0x1f0000) returned 1 [0213.918] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0213.918] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233ed0 | out: hHeap=0x1f0000) returned 1 [0213.918] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233ed0 [0213.918] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0213.918] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d6a0 [0213.918] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346b0 [0213.918] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1043\\*", lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e780 [0213.918] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234a10 [0213.918] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346b0 | out: hHeap=0x1f0000) returned 1 [0213.919] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0213.919] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0213.919] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2347d0 [0213.919] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234a10 | out: hHeap=0x1f0000) returned 1 [0213.919] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0213.919] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0213.919] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xdda, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0213.919] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2607c0 [0213.919] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234740 [0213.919] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x235de8 [0213.919] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234740 | out: hHeap=0x1f0000) returned 1 [0213.919] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2347d0 | out: hHeap=0x1f0000) returned 1 [0213.919] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607c0 | out: hHeap=0x1f0000) returned 1 [0213.920] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1043\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1043\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0213.920] GetFileType (hFile=0x1fc) returned 0x1 [0213.920] CloseHandle (hObject=0x1fc) returned 1 [0213.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c8b8 [0213.921] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1043\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1043\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x259ebe4 | out: lpFileInformation=0x259ebe4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xdda)) returned 1 [0213.921] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0213.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239508 [0213.921] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1043\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1043\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x259ebf4 | out: lpFileInformation=0x259ebf4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xdda)) returned 1 [0213.921] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239508 | out: hHeap=0x1f0000) returned 1 [0213.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c8b8 [0213.921] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0213.921] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13712, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0213.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0213.922] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2344b8 [0213.922] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235be0 [0213.922] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2344b8 | out: hHeap=0x1f0000) returned 1 [0213.922] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235de8 | out: hHeap=0x1f0000) returned 1 [0213.922] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0213.922] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1043\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1043\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0213.922] GetFileType (hFile=0x1fc) returned 0x1 [0213.923] CloseHandle (hObject=0x1fc) returned 1 [0213.923] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236190 [0213.923] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1043\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1043\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x259ebe4 | out: lpFileInformation=0x259ebe4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13712)) returned 1 [0213.923] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236190 | out: hHeap=0x1f0000) returned 1 [0213.923] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235970 [0213.923] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1043\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1043\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x259ebf4 | out: lpFileInformation=0x259ebf4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13712)) returned 1 [0213.923] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235970 | out: hHeap=0x1f0000) returned 1 [0213.923] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235cb0 [0213.924] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235cb0 | out: hHeap=0x1f0000) returned 1 [0213.924] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0213.924] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0213.924] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346b0 [0213.924] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235cb0 [0213.924] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346b0 | out: hHeap=0x1f0000) returned 1 [0213.924] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235be0 | out: hHeap=0x1f0000) returned 1 [0213.924] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0213.924] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1043\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1043\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0213.925] GetFileType (hFile=0x1fc) returned 0x1 [0213.925] CloseHandle (hObject=0x1fc) returned 1 [0213.926] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235d80 [0213.926] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1043\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1043\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x259ebe4 | out: lpFileInformation=0x259ebe4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58)) returned 1 [0213.926] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235d80 | out: hHeap=0x1f0000) returned 1 [0213.926] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235be0 [0213.926] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1043\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1043\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x259ebf4 | out: lpFileInformation=0x259ebf4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58)) returned 1 [0213.926] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235be0 | out: hHeap=0x1f0000) returned 1 [0213.926] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235d80 [0213.926] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235d80 | out: hHeap=0x1f0000) returned 1 [0213.926] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0213.927] FindClose (in: hFindFile=0x24e780 | out: hFindFile=0x24e780) returned 1 [0213.927] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235cb0 | out: hHeap=0x1f0000) returned 1 [0213.927] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d6a0 | out: hHeap=0x1f0000) returned 1 [0213.927] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0213.927] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233ed0 | out: hHeap=0x1f0000) returned 1 [0213.927] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233ed0 [0213.927] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0213.927] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d6a0 [0213.927] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234ae8 [0213.927] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1044\\*", lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e8c0 [0213.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346b0 [0213.928] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234ae8 | out: hHeap=0x1f0000) returned 1 [0213.928] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0213.928] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0213.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346f8 [0213.928] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346b0 | out: hHeap=0x1f0000) returned 1 [0213.928] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0213.928] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0213.928] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xbe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0213.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0213.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234a10 [0213.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x235768 [0213.928] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234a10 | out: hHeap=0x1f0000) returned 1 [0213.928] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346f8 | out: hHeap=0x1f0000) returned 1 [0213.929] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0213.929] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1044\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1044\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0213.929] GetFileType (hFile=0x1fc) returned 0x1 [0213.929] CloseHandle (hObject=0x1fc) returned 1 [0213.929] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c8b8 [0213.929] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1044\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1044\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x259ebe4 | out: lpFileInformation=0x259ebe4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xbe6)) returned 1 [0213.930] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0213.930] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239508 [0213.930] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1044\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1044\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x259ebf4 | out: lpFileInformation=0x259ebf4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xbe6)) returned 1 [0213.930] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239508 | out: hHeap=0x1f0000) returned 1 [0213.930] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c8b8 [0213.930] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0213.930] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x135c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0213.930] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0213.930] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234980 [0213.930] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236058 [0213.930] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234980 | out: hHeap=0x1f0000) returned 1 [0213.930] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235768 | out: hHeap=0x1f0000) returned 1 [0213.930] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0213.931] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1044\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1044\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0213.931] GetFileType (hFile=0x1fc) returned 0x1 [0213.931] CloseHandle (hObject=0x1fc) returned 1 [0213.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235908 [0213.936] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1044\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1044\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x259ebe4 | out: lpFileInformation=0x259ebe4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x135c0)) returned 1 [0213.936] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235908 | out: hHeap=0x1f0000) returned 1 [0213.937] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235d80 [0213.937] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1044\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1044\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x259ebf4 | out: lpFileInformation=0x259ebf4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x135c0)) returned 1 [0213.937] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235d80 | out: hHeap=0x1f0000) returned 1 [0213.937] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235908 [0213.937] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235908 | out: hHeap=0x1f0000) returned 1 [0213.937] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0213.937] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0213.937] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2349c8 [0213.937] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235700 [0213.937] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2349c8 | out: hHeap=0x1f0000) returned 1 [0213.937] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236058 | out: hHeap=0x1f0000) returned 1 [0213.937] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0213.937] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1044\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1044\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0213.938] GetFileType (hFile=0x1fc) returned 0x1 [0213.938] CloseHandle (hObject=0x1fc) returned 1 [0213.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2362c8 [0213.938] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1044\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1044\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x259ebe4 | out: lpFileInformation=0x259ebe4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558)) returned 1 [0213.938] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2362c8 | out: hHeap=0x1f0000) returned 1 [0213.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2361f8 [0213.938] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1044\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1044\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x259ebf4 | out: lpFileInformation=0x259ebf4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558)) returned 1 [0213.938] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2361f8 | out: hHeap=0x1f0000) returned 1 [0213.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235908 [0213.938] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235908 | out: hHeap=0x1f0000) returned 1 [0213.938] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0213.939] FindClose (in: hFindFile=0x24e8c0 | out: hFindFile=0x24e8c0) returned 1 [0213.939] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0213.939] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d6a0 | out: hHeap=0x1f0000) returned 1 [0213.939] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0213.939] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233ed0 | out: hHeap=0x1f0000) returned 1 [0213.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233ed0 [0213.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0213.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d6a0 [0213.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346f8 [0213.939] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1045\\*", lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e7c0 [0213.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234aa0 [0213.939] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346f8 | out: hHeap=0x1f0000) returned 1 [0213.939] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0213.939] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0213.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234a10 [0213.940] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234aa0 | out: hHeap=0x1f0000) returned 1 [0213.940] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0213.940] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0213.940] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xfc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0213.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606f8 [0213.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234740 [0213.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x235d80 [0213.940] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234740 | out: hHeap=0x1f0000) returned 1 [0213.940] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234a10 | out: hHeap=0x1f0000) returned 1 [0213.940] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606f8 | out: hHeap=0x1f0000) returned 1 [0213.941] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1045\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1045\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0213.941] GetFileType (hFile=0x1fc) returned 0x1 [0213.941] CloseHandle (hObject=0x1fc) returned 1 [0213.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c8b8 [0213.941] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1045\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1045\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x259ebe4 | out: lpFileInformation=0x259ebe4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xfc8)) returned 1 [0213.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0213.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239508 [0213.941] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1045\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1045\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x259ebf4 | out: lpFileInformation=0x259ebf4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xfc8)) returned 1 [0213.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239508 | out: hHeap=0x1f0000) returned 1 [0213.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c8b8 [0213.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0213.942] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x141c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0213.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0213.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234740 [0213.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235908 [0213.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234740 | out: hHeap=0x1f0000) returned 1 [0213.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235d80 | out: hHeap=0x1f0000) returned 1 [0213.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0213.942] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1045\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1045\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0213.942] GetFileType (hFile=0x1fc) returned 0x1 [0213.943] CloseHandle (hObject=0x1fc) returned 1 [0213.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235be0 [0213.943] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1045\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1045\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x259ebe4 | out: lpFileInformation=0x259ebe4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x141c6)) returned 1 [0213.943] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235be0 | out: hHeap=0x1f0000) returned 1 [0213.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235970 [0213.943] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1045\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1045\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x259ebf4 | out: lpFileInformation=0x259ebf4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x141c6)) returned 1 [0213.943] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235970 | out: hHeap=0x1f0000) returned 1 [0213.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235ff0 [0213.943] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235ff0 | out: hHeap=0x1f0000) returned 1 [0213.943] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0213.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0213.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2344b8 [0213.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235f88 [0213.943] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2344b8 | out: hHeap=0x1f0000) returned 1 [0213.944] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235908 | out: hHeap=0x1f0000) returned 1 [0213.944] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0213.944] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1045\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1045\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0213.944] GetFileType (hFile=0x1fc) returned 0x1 [0213.944] CloseHandle (hObject=0x1fc) returned 1 [0213.944] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235700 [0213.944] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1045\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1045\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x259ebe4 | out: lpFileInformation=0x259ebe4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758)) returned 1 [0213.944] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0213.944] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2361f8 [0213.945] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1045\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1045\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x259ebf4 | out: lpFileInformation=0x259ebf4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758)) returned 1 [0213.945] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2361f8 | out: hHeap=0x1f0000) returned 1 [0213.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235be0 [0213.945] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235be0 | out: hHeap=0x1f0000) returned 1 [0213.945] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0213.945] FindClose (in: hFindFile=0x24e7c0 | out: hFindFile=0x24e7c0) returned 1 [0213.945] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235f88 | out: hHeap=0x1f0000) returned 1 [0213.945] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d6a0 | out: hHeap=0x1f0000) returned 1 [0213.945] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0213.945] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233ed0 | out: hHeap=0x1f0000) returned 1 [0213.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233ed0 [0213.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0213.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d6a0 [0213.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346b0 [0213.945] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1046\\*", lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e600 [0213.946] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346f8 [0213.946] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346b0 | out: hHeap=0x1f0000) returned 1 [0213.946] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0213.946] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0213.946] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234818 [0213.946] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346f8 | out: hHeap=0x1f0000) returned 1 [0213.946] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0213.946] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0213.946] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe63, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0213.946] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2607e8 [0213.946] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346b0 [0213.946] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x235d80 [0213.946] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346b0 | out: hHeap=0x1f0000) returned 1 [0213.946] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234818 | out: hHeap=0x1f0000) returned 1 [0213.946] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607e8 | out: hHeap=0x1f0000) returned 1 [0213.946] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1046\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1046\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0213.947] GetFileType (hFile=0x1fc) returned 0x1 [0213.947] CloseHandle (hObject=0x1fc) returned 1 [0213.947] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c8b8 [0213.947] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1046\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1046\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x259ebe4 | out: lpFileInformation=0x259ebe4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe63)) returned 1 [0213.947] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0213.947] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239508 [0213.947] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1046\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1046\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x259ebf4 | out: lpFileInformation=0x259ebf4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe63)) returned 1 [0213.947] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239508 | out: hHeap=0x1f0000) returned 1 [0213.947] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c8b8 [0213.947] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0213.947] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13b62, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0213.948] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0213.948] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346b0 [0213.948] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235be0 [0213.948] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346b0 | out: hHeap=0x1f0000) returned 1 [0213.948] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235d80 | out: hHeap=0x1f0000) returned 1 [0213.948] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0213.948] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1046\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1046\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0213.948] GetFileType (hFile=0x1fc) returned 0x1 [0213.948] CloseHandle (hObject=0x1fc) returned 1 [0213.948] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235cb0 [0213.949] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1046\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1046\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x259ebe4 | out: lpFileInformation=0x259ebe4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13b62)) returned 1 [0213.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235cb0 | out: hHeap=0x1f0000) returned 1 [0213.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2361f8 [0213.949] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1046\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1046\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x259ebf4 | out: lpFileInformation=0x259ebf4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13b62)) returned 1 [0213.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2361f8 | out: hHeap=0x1f0000) returned 1 [0213.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236190 [0213.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236190 | out: hHeap=0x1f0000) returned 1 [0213.949] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0213.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0213.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234aa0 [0213.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2361f8 [0213.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234aa0 | out: hHeap=0x1f0000) returned 1 [0213.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235be0 | out: hHeap=0x1f0000) returned 1 [0213.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0213.949] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1046\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1046\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0213.950] GetFileType (hFile=0x1fc) returned 0x1 [0213.950] CloseHandle (hObject=0x1fc) returned 1 [0213.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235be0 [0213.950] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1046\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1046\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x259ebe4 | out: lpFileInformation=0x259ebe4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758)) returned 1 [0213.950] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235be0 | out: hHeap=0x1f0000) returned 1 [0213.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235700 [0213.950] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1046\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1046\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x259ebf4 | out: lpFileInformation=0x259ebf4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758)) returned 1 [0213.950] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0213.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235d80 [0213.950] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235d80 | out: hHeap=0x1f0000) returned 1 [0213.950] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0213.951] FindClose (in: hFindFile=0x24e600 | out: hFindFile=0x24e600) returned 1 [0213.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2361f8 | out: hHeap=0x1f0000) returned 1 [0213.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d6a0 | out: hHeap=0x1f0000) returned 1 [0213.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0213.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233ed0 | out: hHeap=0x1f0000) returned 1 [0213.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233ed0 [0213.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0213.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d6a0 [0213.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346b0 [0213.951] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1049\\*", lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e8c0 [0213.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234740 [0213.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346b0 | out: hHeap=0x1f0000) returned 1 [0213.951] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0213.951] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0213.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346b0 [0213.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234740 | out: hHeap=0x1f0000) returned 1 [0213.952] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0213.952] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0213.952] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xd4b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0213.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260900 [0213.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2348f0 [0213.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x236058 [0213.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2348f0 | out: hHeap=0x1f0000) returned 1 [0213.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346b0 | out: hHeap=0x1f0000) returned 1 [0213.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260900 | out: hHeap=0x1f0000) returned 1 [0213.952] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1049\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1049\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0213.952] GetFileType (hFile=0x1fc) returned 0x1 [0213.952] CloseHandle (hObject=0x1fc) returned 1 [0213.953] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c8b8 [0213.953] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1049\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1049\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x259ebe4 | out: lpFileInformation=0x259ebe4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xd4b8)) returned 1 [0213.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0213.953] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239508 [0213.953] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1049\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1049\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x259ebf4 | out: lpFileInformation=0x259ebf4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xd4b8)) returned 1 [0213.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239508 | out: hHeap=0x1f0000) returned 1 [0213.953] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c8b8 [0213.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0213.953] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13e4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0213.953] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0213.953] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2348f0 [0213.953] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2360c0 [0213.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2348f0 | out: hHeap=0x1f0000) returned 1 [0213.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236058 | out: hHeap=0x1f0000) returned 1 [0213.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0213.954] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1049\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1049\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0213.954] GetFileType (hFile=0x1fc) returned 0x1 [0213.954] CloseHandle (hObject=0x1fc) returned 1 [0213.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235768 [0213.954] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1049\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1049\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x259ebe4 | out: lpFileInformation=0x259ebe4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13e4a)) returned 1 [0213.954] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235768 | out: hHeap=0x1f0000) returned 1 [0213.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235970 [0213.954] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1049\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1049\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x259ebf4 | out: lpFileInformation=0x259ebf4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13e4a)) returned 1 [0213.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235970 | out: hHeap=0x1f0000) returned 1 [0213.955] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235908 [0213.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235908 | out: hHeap=0x1f0000) returned 1 [0213.955] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0213.955] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0213.955] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234ae8 [0213.955] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235eb8 [0213.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234ae8 | out: hHeap=0x1f0000) returned 1 [0213.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2360c0 | out: hHeap=0x1f0000) returned 1 [0213.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0213.955] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1049\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1049\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0213.955] GetFileType (hFile=0x1fc) returned 0x1 [0214.300] CloseHandle (hObject=0x1fc) returned 1 [0214.300] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235700 [0214.300] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1049\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1049\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x259ebe4 | out: lpFileInformation=0x259ebe4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758)) returned 1 [0214.301] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0214.301] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235700 [0214.301] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1049\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1049\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x259ebf4 | out: lpFileInformation=0x259ebf4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758)) returned 1 [0214.301] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0214.301] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235768 [0214.301] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235768 | out: hHeap=0x1f0000) returned 1 [0214.301] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0214.301] FindClose (in: hFindFile=0x24e8c0 | out: hFindFile=0x24e8c0) returned 1 [0214.302] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235eb8 | out: hHeap=0x1f0000) returned 1 [0214.302] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d6a0 | out: hHeap=0x1f0000) returned 1 [0214.302] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0214.302] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233ed0 | out: hHeap=0x1f0000) returned 1 [0214.302] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233ed0 [0214.302] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0214.302] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x226d28 [0214.302] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346f8 [0214.302] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1053\\*", lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ecc0 [0214.303] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234740 [0214.303] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346f8 | out: hHeap=0x1f0000) returned 1 [0214.303] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0214.303] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.303] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346f8 [0214.303] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234740 | out: hHeap=0x1f0000) returned 1 [0214.303] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0214.303] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0214.303] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xf19, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0214.303] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609a0 [0214.303] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2349c8 [0214.304] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x235700 [0214.304] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2349c8 | out: hHeap=0x1f0000) returned 1 [0214.304] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346f8 | out: hHeap=0x1f0000) returned 1 [0214.304] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0214.304] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1053\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1053\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0214.304] GetFileType (hFile=0x1fc) returned 0x1 [0214.305] CloseHandle (hObject=0x1fc) returned 1 [0214.305] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c8b8 [0214.305] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1053\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1053\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x259ebe4 | out: lpFileInformation=0x259ebe4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xf19)) returned 1 [0214.305] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0214.305] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239508 [0214.305] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1053\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1053\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x259ebf4 | out: lpFileInformation=0x259ebf4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xf19)) returned 1 [0214.305] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239508 | out: hHeap=0x1f0000) returned 1 [0214.306] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c8b8 [0214.306] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0214.306] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12f70, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0214.306] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0214.306] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346f8 [0214.306] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235de8 [0214.306] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346f8 | out: hHeap=0x1f0000) returned 1 [0214.306] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0214.306] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0214.307] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1053\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1053\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0214.307] GetFileType (hFile=0x1fc) returned 0x1 [0214.307] CloseHandle (hObject=0x1fc) returned 1 [0214.308] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235768 [0214.308] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1053\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1053\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x259ebe4 | out: lpFileInformation=0x259ebe4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12f70)) returned 1 [0214.308] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235768 | out: hHeap=0x1f0000) returned 1 [0214.308] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2362c8 [0214.308] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1053\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1053\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x259ebf4 | out: lpFileInformation=0x259ebf4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12f70)) returned 1 [0214.308] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2362c8 | out: hHeap=0x1f0000) returned 1 [0214.308] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235970 [0214.308] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235970 | out: hHeap=0x1f0000) returned 1 [0214.309] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0214.309] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0214.309] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346f8 [0214.309] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235be0 [0214.309] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346f8 | out: hHeap=0x1f0000) returned 1 [0214.309] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235de8 | out: hHeap=0x1f0000) returned 1 [0214.309] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0214.310] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1053\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1053\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0214.310] GetFileType (hFile=0x1fc) returned 0x1 [0214.310] CloseHandle (hObject=0x1fc) returned 1 [0214.310] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235cb0 [0214.310] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1053\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1053\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x259ebe4 | out: lpFileInformation=0x259ebe4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558)) returned 1 [0214.311] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235cb0 | out: hHeap=0x1f0000) returned 1 [0214.311] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235d80 [0214.311] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1053\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1053\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x259ebf4 | out: lpFileInformation=0x259ebf4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558)) returned 1 [0214.311] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235d80 | out: hHeap=0x1f0000) returned 1 [0214.311] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235cb0 [0214.311] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235cb0 | out: hHeap=0x1f0000) returned 1 [0214.311] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0214.311] FindClose (in: hFindFile=0x24ecc0 | out: hFindFile=0x24ecc0) returned 1 [0214.311] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235be0 | out: hHeap=0x1f0000) returned 1 [0214.311] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226d28 | out: hHeap=0x1f0000) returned 1 [0214.311] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0214.311] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233ed0 | out: hHeap=0x1f0000) returned 1 [0214.312] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233ed0 [0214.312] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0214.312] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x226d28 [0214.312] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2349c8 [0214.312] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\1055\\*", lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ea80 [0214.312] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346f8 [0214.312] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2349c8 | out: hHeap=0x1f0000) returned 1 [0214.312] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0214.312] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.313] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234a10 [0214.313] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346f8 | out: hHeap=0x1f0000) returned 1 [0214.313] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0214.313] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0214.313] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xf13, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0214.313] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0214.313] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234818 [0214.313] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x236128 [0214.313] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234818 | out: hHeap=0x1f0000) returned 1 [0214.313] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234a10 | out: hHeap=0x1f0000) returned 1 [0214.313] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0214.314] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1055\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1055\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0214.314] GetFileType (hFile=0x1fc) returned 0x1 [0214.314] CloseHandle (hObject=0x1fc) returned 1 [0214.315] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c8b8 [0214.315] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1055\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1055\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x259ebe4 | out: lpFileInformation=0x259ebe4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xf13)) returned 1 [0214.315] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0214.315] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239508 [0214.315] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1055\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1055\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x259ebf4 | out: lpFileInformation=0x259ebf4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xf13)) returned 1 [0214.315] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239508 | out: hHeap=0x1f0000) returned 1 [0214.315] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c8b8 [0214.317] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0214.317] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12c12, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0214.317] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0214.317] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346f8 [0214.317] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235908 [0214.317] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346f8 | out: hHeap=0x1f0000) returned 1 [0214.317] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236128 | out: hHeap=0x1f0000) returned 1 [0214.317] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0214.318] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1055\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1055\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0214.318] GetFileType (hFile=0x1fc) returned 0x1 [0214.319] CloseHandle (hObject=0x1fc) returned 1 [0214.319] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235be0 [0214.319] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1055\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1055\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x259ebe4 | out: lpFileInformation=0x259ebe4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12c12)) returned 1 [0214.319] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235be0 | out: hHeap=0x1f0000) returned 1 [0214.319] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235d80 [0214.319] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1055\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1055\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x259ebf4 | out: lpFileInformation=0x259ebf4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12c12)) returned 1 [0214.319] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235d80 | out: hHeap=0x1f0000) returned 1 [0214.319] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235768 [0214.319] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235768 | out: hHeap=0x1f0000) returned 1 [0214.319] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0214.319] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0214.320] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346f8 [0214.320] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2362c8 [0214.320] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346f8 | out: hHeap=0x1f0000) returned 1 [0214.320] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235908 | out: hHeap=0x1f0000) returned 1 [0214.320] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0214.320] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\1055\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1055\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0214.320] GetFileType (hFile=0x1fc) returned 0x1 [0214.321] CloseHandle (hObject=0x1fc) returned 1 [0214.321] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235700 [0214.321] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1055\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1055\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x259ebe4 | out: lpFileInformation=0x259ebe4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558)) returned 1 [0214.321] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0214.321] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235be0 [0214.321] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\1055\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1055\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x259ebf4 | out: lpFileInformation=0x259ebf4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558)) returned 1 [0214.321] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235be0 | out: hHeap=0x1f0000) returned 1 [0214.321] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235eb8 [0214.321] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235eb8 | out: hHeap=0x1f0000) returned 1 [0214.321] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0214.322] FindClose (in: hFindFile=0x24ea80 | out: hFindFile=0x24ea80) returned 1 [0214.322] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2362c8 | out: hHeap=0x1f0000) returned 1 [0214.322] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226d28 | out: hHeap=0x1f0000) returned 1 [0214.322] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0214.322] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233ed0 | out: hHeap=0x1f0000) returned 1 [0214.322] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233ed0 [0214.322] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0214.322] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x226d28 [0214.322] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346f8 [0214.322] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\2052\\*", lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ec40 [0214.322] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234ae8 [0214.322] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346f8 | out: hHeap=0x1f0000) returned 1 [0214.323] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0214.323] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.323] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2347d0 [0214.323] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234ae8 | out: hHeap=0x1f0000) returned 1 [0214.323] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0214.323] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0214.323] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x16c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0214.323] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260518 [0214.323] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346f8 [0214.323] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x235970 [0214.323] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346f8 | out: hHeap=0x1f0000) returned 1 [0214.323] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2347d0 | out: hHeap=0x1f0000) returned 1 [0214.323] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0214.324] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\2052\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2052\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0214.324] GetFileType (hFile=0x1fc) returned 0x1 [0214.324] CloseHandle (hObject=0x1fc) returned 1 [0214.324] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c8b8 [0214.324] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\2052\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2052\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x259ebe4 | out: lpFileInformation=0x259ebe4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x16c3)) returned 1 [0214.324] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0214.324] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239508 [0214.325] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\2052\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2052\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x259ebf4 | out: lpFileInformation=0x259ebf4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x16c3)) returned 1 [0214.325] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239508 | out: hHeap=0x1f0000) returned 1 [0214.325] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c8b8 [0214.325] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0214.325] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0214.325] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0214.325] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346f8 [0214.325] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235be0 [0214.325] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346f8 | out: hHeap=0x1f0000) returned 1 [0214.325] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235970 | out: hHeap=0x1f0000) returned 1 [0214.325] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0214.326] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\2052\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2052\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0214.326] GetFileType (hFile=0x1fc) returned 0x1 [0214.326] CloseHandle (hObject=0x1fc) returned 1 [0214.326] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235f88 [0214.327] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\2052\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2052\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x259ebe4 | out: lpFileInformation=0x259ebe4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed0c)) returned 1 [0214.327] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235f88 | out: hHeap=0x1f0000) returned 1 [0214.327] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235cb0 [0214.327] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\2052\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2052\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x259ebf4 | out: lpFileInformation=0x259ebf4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed0c)) returned 1 [0214.327] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235cb0 | out: hHeap=0x1f0000) returned 1 [0214.327] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236190 [0214.327] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236190 | out: hHeap=0x1f0000) returned 1 [0214.327] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0214.327] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0214.327] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234860 [0214.327] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235700 [0214.327] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234860 | out: hHeap=0x1f0000) returned 1 [0214.327] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235be0 | out: hHeap=0x1f0000) returned 1 [0214.328] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0214.328] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\2052\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2052\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0214.328] GetFileType (hFile=0x1fc) returned 0x1 [0214.328] CloseHandle (hObject=0x1fc) returned 1 [0214.329] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235768 [0214.329] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\2052\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2052\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x259ebe4 | out: lpFileInformation=0x259ebe4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758)) returned 1 [0214.329] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235768 | out: hHeap=0x1f0000) returned 1 [0214.329] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235be0 [0214.329] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\2052\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2052\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x259ebf4 | out: lpFileInformation=0x259ebf4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758)) returned 1 [0214.329] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235be0 | out: hHeap=0x1f0000) returned 1 [0214.329] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235cb0 [0214.329] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235cb0 | out: hHeap=0x1f0000) returned 1 [0214.329] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0214.329] FindClose (in: hFindFile=0x24ec40 | out: hFindFile=0x24ec40) returned 1 [0214.329] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0214.330] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226d28 | out: hHeap=0x1f0000) returned 1 [0214.330] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0214.330] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233ed0 | out: hHeap=0x1f0000) returned 1 [0214.330] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233ed0 [0214.330] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0214.330] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x226d28 [0214.330] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234a58 [0214.330] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\2070\\*", lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ea80 [0214.330] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346f8 [0214.330] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234a58 | out: hHeap=0x1f0000) returned 1 [0214.331] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0214.331] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.331] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2349c8 [0214.331] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346f8 | out: hHeap=0x1f0000) returned 1 [0214.331] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0214.331] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0214.331] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xfaf, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0214.331] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260658 [0214.331] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2347d0 [0214.331] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x235be0 [0214.332] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2347d0 | out: hHeap=0x1f0000) returned 1 [0214.332] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2349c8 | out: hHeap=0x1f0000) returned 1 [0214.332] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260658 | out: hHeap=0x1f0000) returned 1 [0214.332] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\2070\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2070\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0214.333] GetFileType (hFile=0x1fc) returned 0x1 [0214.333] CloseHandle (hObject=0x1fc) returned 1 [0214.333] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c8b8 [0214.333] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\2070\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2070\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x259ebe4 | out: lpFileInformation=0x259ebe4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xfaf)) returned 1 [0214.333] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0214.333] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239508 [0214.333] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\2070\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2070\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x259ebf4 | out: lpFileInformation=0x259ebf4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xfaf)) returned 1 [0214.333] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239508 | out: hHeap=0x1f0000) returned 1 [0214.334] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c8b8 [0214.334] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0214.334] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1397e, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0214.334] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0214.334] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2349c8 [0214.334] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235700 [0214.334] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2349c8 | out: hHeap=0x1f0000) returned 1 [0214.334] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235be0 | out: hHeap=0x1f0000) returned 1 [0214.334] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0214.334] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\2070\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2070\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0214.335] GetFileType (hFile=0x1fc) returned 0x1 [0214.335] CloseHandle (hObject=0x1fc) returned 1 [0214.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2358a0 [0214.335] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\2070\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2070\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x259ebe4 | out: lpFileInformation=0x259ebe4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1397e)) returned 1 [0214.335] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2358a0 | out: hHeap=0x1f0000) returned 1 [0214.336] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236058 [0214.336] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\2070\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2070\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x259ebf4 | out: lpFileInformation=0x259ebf4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1397e)) returned 1 [0214.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236058 | out: hHeap=0x1f0000) returned 1 [0214.336] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2358a0 [0214.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2358a0 | out: hHeap=0x1f0000) returned 1 [0214.336] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0214.336] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0214.336] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234a58 [0214.336] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235768 [0214.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234a58 | out: hHeap=0x1f0000) returned 1 [0214.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0214.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0214.337] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\2070\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2070\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0214.337] GetFileType (hFile=0x1fc) returned 0x1 [0214.338] CloseHandle (hObject=0x1fc) returned 1 [0214.338] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2358a0 [0214.338] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\2070\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2070\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x259ebe4 | out: lpFileInformation=0x259ebe4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958)) returned 1 [0214.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2358a0 | out: hHeap=0x1f0000) returned 1 [0214.338] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235700 [0214.338] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\2070\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2070\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x259ebf4 | out: lpFileInformation=0x259ebf4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958)) returned 1 [0214.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0214.338] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2362c8 [0214.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2362c8 | out: hHeap=0x1f0000) returned 1 [0214.338] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0214.339] FindClose (in: hFindFile=0x24ea80 | out: hFindFile=0x24ea80) returned 1 [0214.339] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235768 | out: hHeap=0x1f0000) returned 1 [0214.339] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226d28 | out: hHeap=0x1f0000) returned 1 [0214.339] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0214.339] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233ed0 | out: hHeap=0x1f0000) returned 1 [0214.339] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233ed0 [0214.339] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0214.339] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x226d28 [0214.339] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234740 [0214.339] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\3076\\*", lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e940 [0214.339] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346f8 [0214.339] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234740 | out: hHeap=0x1f0000) returned 1 [0214.339] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0214.339] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.340] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2349c8 [0214.340] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346f8 | out: hHeap=0x1f0000) returned 1 [0214.340] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0214.340] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0214.340] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x18a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0214.340] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0214.340] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346f8 [0214.340] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x236128 [0214.340] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346f8 | out: hHeap=0x1f0000) returned 1 [0214.340] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2349c8 | out: hHeap=0x1f0000) returned 1 [0214.340] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0214.341] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\3076\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3076\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0214.341] GetFileType (hFile=0x1fc) returned 0x1 [0214.341] CloseHandle (hObject=0x1fc) returned 1 [0214.341] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c8b8 [0214.341] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\3076\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3076\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x259ebe4 | out: lpFileInformation=0x259ebe4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x18a5)) returned 1 [0214.342] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0214.342] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239508 [0214.342] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\3076\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3076\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x259ebf4 | out: lpFileInformation=0x259ebf4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x18a5)) returned 1 [0214.342] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239508 | out: hHeap=0x1f0000) returned 1 [0214.342] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c8b8 [0214.342] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0214.342] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed90, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0214.342] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0214.342] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234818 [0214.342] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235cb0 [0214.342] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234818 | out: hHeap=0x1f0000) returned 1 [0214.342] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236128 | out: hHeap=0x1f0000) returned 1 [0214.342] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0214.342] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\3076\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3076\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0214.343] GetFileType (hFile=0x1fc) returned 0x1 [0214.343] CloseHandle (hObject=0x1fc) returned 1 [0214.343] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2358a0 [0214.343] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\3076\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3076\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x259ebe4 | out: lpFileInformation=0x259ebe4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed90)) returned 1 [0214.343] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2358a0 | out: hHeap=0x1f0000) returned 1 [0214.343] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2358a0 [0214.343] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\3076\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3076\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x259ebf4 | out: lpFileInformation=0x259ebf4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed90)) returned 1 [0214.343] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2358a0 | out: hHeap=0x1f0000) returned 1 [0214.343] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235be0 [0214.343] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235be0 | out: hHeap=0x1f0000) returned 1 [0214.344] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0214.344] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0214.344] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234788 [0214.344] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2358a0 [0214.344] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234788 | out: hHeap=0x1f0000) returned 1 [0214.344] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235cb0 | out: hHeap=0x1f0000) returned 1 [0214.344] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0214.344] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\3076\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\3076\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0214.344] GetFileType (hFile=0x1fc) returned 0x1 [0214.345] CloseHandle (hObject=0x1fc) returned 1 [0214.345] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2362c8 [0214.345] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\3076\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\3076\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x259ebe4 | out: lpFileInformation=0x259ebe4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758)) returned 1 [0214.345] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2362c8 | out: hHeap=0x1f0000) returned 1 [0214.345] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235f88 [0214.345] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\3076\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\3076\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x259ebf4 | out: lpFileInformation=0x259ebf4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758)) returned 1 [0214.345] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235f88 | out: hHeap=0x1f0000) returned 1 [0214.345] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235700 [0214.345] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0214.346] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0214.346] FindClose (in: hFindFile=0x24e940 | out: hFindFile=0x24e940) returned 1 [0214.346] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2358a0 | out: hHeap=0x1f0000) returned 1 [0214.346] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226d28 | out: hHeap=0x1f0000) returned 1 [0214.346] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0214.346] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233ed0 | out: hHeap=0x1f0000) returned 1 [0214.346] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233ed0 [0214.346] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0214.346] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x226d28 [0214.346] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2348f0 [0214.346] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\3082\\*", lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ec00 [0214.675] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234860 [0214.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2348f0 | out: hHeap=0x1f0000) returned 1 [0214.675] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0214.675] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.675] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2348f0 [0214.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234860 | out: hHeap=0x1f0000) returned 1 [0214.675] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0214.675] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0214.675] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xbfd, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0214.675] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260540 [0214.675] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346b0 [0214.675] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x235f20 [0214.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346b0 | out: hHeap=0x1f0000) returned 1 [0214.676] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2348f0 | out: hHeap=0x1f0000) returned 1 [0214.676] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0214.676] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\3082\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3082\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0214.676] GetFileType (hFile=0x1b0) returned 0x1 [0214.676] CloseHandle (hObject=0x1b0) returned 1 [0214.676] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239508 [0214.677] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\3082\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3082\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x259ebe4 | out: lpFileInformation=0x259ebe4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xbfd)) returned 1 [0214.677] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239508 | out: hHeap=0x1f0000) returned 1 [0214.677] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239508 [0214.677] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\3082\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3082\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x259ebf4 | out: lpFileInformation=0x259ebf4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xbfd)) returned 1 [0214.677] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239508 | out: hHeap=0x1f0000) returned 1 [0214.677] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239508 [0214.677] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239508 | out: hHeap=0x1f0000) returned 1 [0214.677] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1387c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0214.677] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2f0 [0214.677] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234788 [0214.677] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235908 [0214.677] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234788 | out: hHeap=0x1f0000) returned 1 [0214.677] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235f20 | out: hHeap=0x1f0000) returned 1 [0214.677] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0214.678] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\3082\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3082\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0214.678] GetFileType (hFile=0x1b0) returned 0x1 [0214.678] CloseHandle (hObject=0x1b0) returned 1 [0214.678] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235b78 [0214.678] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\3082\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3082\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x259ebe4 | out: lpFileInformation=0x259ebe4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1387c)) returned 1 [0214.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0214.678] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2361f8 [0214.678] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\3082\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3082\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x259ebf4 | out: lpFileInformation=0x259ebf4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1387c)) returned 1 [0214.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2361f8 | out: hHeap=0x1f0000) returned 1 [0214.679] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236190 [0214.679] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236190 | out: hHeap=0x1f0000) returned 1 [0214.679] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0214.679] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0214.679] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2344b8 [0214.679] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2361f8 [0214.679] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2344b8 | out: hHeap=0x1f0000) returned 1 [0214.679] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235908 | out: hHeap=0x1f0000) returned 1 [0214.679] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0214.679] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\3082\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\3082\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0214.679] GetFileType (hFile=0x1b0) returned 0x1 [0214.679] CloseHandle (hObject=0x1b0) returned 1 [0214.680] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235be0 [0214.680] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\3082\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\3082\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x259ebe4 | out: lpFileInformation=0x259ebe4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958)) returned 1 [0214.680] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235be0 | out: hHeap=0x1f0000) returned 1 [0214.680] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235700 [0214.680] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\3082\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\3082\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x259ebf4 | out: lpFileInformation=0x259ebf4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958)) returned 1 [0214.680] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0214.680] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235de8 [0214.680] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235de8 | out: hHeap=0x1f0000) returned 1 [0214.680] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0214.680] FindClose (in: hFindFile=0x24ec00 | out: hFindFile=0x24ec00) returned 1 [0214.680] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2361f8 | out: hHeap=0x1f0000) returned 1 [0214.680] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226d28 | out: hHeap=0x1f0000) returned 1 [0214.680] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0214.681] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233ed0 | out: hHeap=0x1f0000) returned 1 [0214.681] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233ed0 [0214.681] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0214.681] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x261cc0 [0214.681] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346b0 [0214.681] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\Client\\*", lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e940 [0214.681] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234788 [0214.681] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346b0 | out: hHeap=0x1f0000) returned 1 [0214.681] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0214.681] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.681] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346b0 [0214.681] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x2361f8 [0214.681] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346b0 | out: hHeap=0x1f0000) returned 1 [0214.681] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234788 | out: hHeap=0x1f0000) returned 1 [0214.682] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0214.682] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0214.682] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce2bc00, ftCreationTime.dwHighDateTime=0x1cac6d5, ftLastAccessTime.dwLowDateTime=0xce2bc00, ftLastAccessTime.dwHighDateTime=0x1cac6d5, ftLastWriteTime.dwLowDateTime=0xce2bc00, ftLastWriteTime.dwHighDateTime=0x1cac6d5, nFileSizeHigh=0x0, nFileSizeLow=0x31444, dwReserved0=0x0, dwReserved1=0x0, cFileName="Parameterinfo.xml", cAlternateFileName="PARAME~1.XML")) returned 1 [0214.682] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0214.682] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234980 [0214.682] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2358a0 [0214.682] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234980 | out: hHeap=0x1f0000) returned 1 [0214.682] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2361f8 | out: hHeap=0x1f0000) returned 1 [0214.682] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0214.682] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Client\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\parameterinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0214.682] GetFileType (hFile=0x1b0) returned 0x1 [0214.683] CloseHandle (hObject=0x1b0) returned 1 [0214.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236058 [0214.683] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Client\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\parameterinfo.xml"), fInfoLevelId=0x0, lpFileInformation=0x259ebe4 | out: lpFileInformation=0x259ebe4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce2bc00, ftCreationTime.dwHighDateTime=0x1cac6d5, ftLastAccessTime.dwLowDateTime=0xce2bc00, ftLastAccessTime.dwHighDateTime=0x1cac6d5, ftLastWriteTime.dwLowDateTime=0xce2bc00, ftLastWriteTime.dwHighDateTime=0x1cac6d5, nFileSizeHigh=0x0, nFileSizeLow=0x31444)) returned 1 [0214.683] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236058 | out: hHeap=0x1f0000) returned 1 [0214.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235de8 [0214.683] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Client\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\parameterinfo.xml"), fInfoLevelId=0x0, lpFileInformation=0x259ebf4 | out: lpFileInformation=0x259ebf4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce2bc00, ftCreationTime.dwHighDateTime=0x1cac6d5, ftLastAccessTime.dwLowDateTime=0xce2bc00, ftLastAccessTime.dwHighDateTime=0x1cac6d5, ftLastWriteTime.dwLowDateTime=0xce2bc00, ftLastWriteTime.dwHighDateTime=0x1cac6d5, nFileSizeHigh=0x0, nFileSizeLow=0x31444)) returned 1 [0214.683] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235de8 | out: hHeap=0x1f0000) returned 1 [0214.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235908 [0214.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235908 | out: hHeap=0x1f0000) returned 1 [0214.684] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x9882, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 1 [0214.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0214.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234980 [0214.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235f88 [0214.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234980 | out: hHeap=0x1f0000) returned 1 [0214.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2358a0 | out: hHeap=0x1f0000) returned 1 [0214.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0214.684] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Client\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\uiinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0214.685] GetFileType (hFile=0x1b0) returned 0x1 [0214.685] CloseHandle (hObject=0x1b0) returned 1 [0214.685] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235f20 [0214.685] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Client\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\uiinfo.xml"), fInfoLevelId=0x0, lpFileInformation=0x259ebe4 | out: lpFileInformation=0x259ebe4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x9882)) returned 1 [0214.685] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235f20 | out: hHeap=0x1f0000) returned 1 [0214.685] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2360c0 [0214.685] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Client\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\uiinfo.xml"), fInfoLevelId=0x0, lpFileInformation=0x259ebf4 | out: lpFileInformation=0x259ebf4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x9882)) returned 1 [0214.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2360c0 | out: hHeap=0x1f0000) returned 1 [0214.686] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236058 [0214.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236058 | out: hHeap=0x1f0000) returned 1 [0214.686] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x9882, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 0 [0214.686] FindClose (in: hFindFile=0x24e940 | out: hFindFile=0x24e940) returned 1 [0214.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235f88 | out: hHeap=0x1f0000) returned 1 [0214.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261cc0 | out: hHeap=0x1f0000) returned 1 [0214.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0214.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233ed0 | out: hHeap=0x1f0000) returned 1 [0214.686] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233ed0 [0214.686] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0214.687] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262980 [0214.687] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239508 [0214.687] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\Extended\\*", lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e940 [0214.687] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x264570 [0214.687] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239508 | out: hHeap=0x1f0000) returned 1 [0214.687] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0214.687] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.687] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2645c8 [0214.687] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x264570 | out: hHeap=0x1f0000) returned 1 [0214.687] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0214.687] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0214.687] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2a714f00, ftCreationTime.dwHighDateTime=0x1cac6f0, ftLastAccessTime.dwLowDateTime=0x2a714f00, ftLastAccessTime.dwHighDateTime=0x1cac6f0, ftLastWriteTime.dwLowDateTime=0x2a714f00, ftLastWriteTime.dwHighDateTime=0x1cac6f0, nFileSizeHigh=0x0, nFileSizeLow=0x16c82, dwReserved0=0x0, dwReserved1=0x0, cFileName="Parameterinfo.xml", cAlternateFileName="PARAME~1.XML")) returned 1 [0214.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0214.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x264620 [0214.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x218450 [0214.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x264620 | out: hHeap=0x1f0000) returned 1 [0214.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2645c8 | out: hHeap=0x1f0000) returned 1 [0214.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0214.688] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Extended\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\parameterinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0214.688] GetFileType (hFile=0x1b0) returned 0x1 [0214.688] CloseHandle (hObject=0x1b0) returned 1 [0214.689] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0214.689] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Extended\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\parameterinfo.xml"), fInfoLevelId=0x0, lpFileInformation=0x259ebe4 | out: lpFileInformation=0x259ebe4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2a714f00, ftCreationTime.dwHighDateTime=0x1cac6f0, ftLastAccessTime.dwLowDateTime=0x2a714f00, ftLastAccessTime.dwHighDateTime=0x1cac6f0, ftLastWriteTime.dwLowDateTime=0x2a714f00, ftLastWriteTime.dwHighDateTime=0x1cac6f0, nFileSizeHigh=0x0, nFileSizeLow=0x16c82)) returned 1 [0214.689] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0214.689] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0214.689] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Extended\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\parameterinfo.xml"), fInfoLevelId=0x0, lpFileInformation=0x259ebf4 | out: lpFileInformation=0x259ebf4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2a714f00, ftCreationTime.dwHighDateTime=0x1cac6f0, ftLastAccessTime.dwLowDateTime=0x2a714f00, ftLastAccessTime.dwHighDateTime=0x1cac6f0, ftLastWriteTime.dwLowDateTime=0x2a714f00, ftLastWriteTime.dwHighDateTime=0x1cac6f0, nFileSizeHigh=0x0, nFileSizeLow=0x16c82)) returned 1 [0214.689] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0214.689] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220490 [0214.689] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220490 | out: hHeap=0x1f0000) returned 1 [0214.689] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x988a, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 1 [0214.689] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0214.689] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239508 [0214.689] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217ed0 [0214.689] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239508 | out: hHeap=0x1f0000) returned 1 [0214.689] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218450 | out: hHeap=0x1f0000) returned 1 [0214.689] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0214.690] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Extended\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\uiinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0214.690] GetFileType (hFile=0x1b0) returned 0x1 [0214.690] CloseHandle (hObject=0x1b0) returned 1 [0214.690] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235de8 [0214.690] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Extended\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\uiinfo.xml"), fInfoLevelId=0x0, lpFileInformation=0x259ebe4 | out: lpFileInformation=0x259ebe4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x988a)) returned 1 [0214.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235de8 | out: hHeap=0x1f0000) returned 1 [0214.691] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2358a0 [0214.691] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Extended\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\uiinfo.xml"), fInfoLevelId=0x0, lpFileInformation=0x259ebf4 | out: lpFileInformation=0x259ebf4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x988a)) returned 1 [0214.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2358a0 | out: hHeap=0x1f0000) returned 1 [0214.691] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2362c8 [0214.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2362c8 | out: hHeap=0x1f0000) returned 1 [0214.691] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x988a, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 0 [0214.691] FindClose (in: hFindFile=0x24e940 | out: hFindFile=0x24e940) returned 1 [0214.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217ed0 | out: hHeap=0x1f0000) returned 1 [0214.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262980 | out: hHeap=0x1f0000) returned 1 [0214.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0214.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233ed0 | out: hHeap=0x1f0000) returned 1 [0214.691] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233ed0 [0214.691] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0214.691] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x263640 [0214.691] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239508 [0214.691] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\*", lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24eb00 [0214.693] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x264258 [0214.693] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239508 | out: hHeap=0x1f0000) returned 1 [0214.693] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0214.693] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.693] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x263d30 [0214.693] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x264258 | out: hHeap=0x1f0000) returned 1 [0214.693] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0214.693] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0214.693] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Print.ico", cAlternateFileName="")) returned 1 [0214.693] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0214.693] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x263c80 [0214.693] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217ed0 [0214.693] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263c80 | out: hHeap=0x1f0000) returned 1 [0214.693] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263d30 | out: hHeap=0x1f0000) returned 1 [0214.693] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0214.694] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Print.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\print.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0214.694] GetFileType (hFile=0x1b0) returned 0x1 [0214.694] CloseHandle (hObject=0x1b0) returned 1 [0214.694] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235f88 [0214.694] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Print.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\print.ico"), fInfoLevelId=0x0, lpFileInformation=0x259ebe4 | out: lpFileInformation=0x259ebe4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e)) returned 1 [0214.694] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235f88 | out: hHeap=0x1f0000) returned 1 [0214.694] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235c48 [0214.694] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Print.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\print.ico"), fInfoLevelId=0x0, lpFileInformation=0x259ebf4 | out: lpFileInformation=0x259ebf4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e)) returned 1 [0214.694] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235c48 | out: hHeap=0x1f0000) returned 1 [0214.694] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235908 [0214.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235908 | out: hHeap=0x1f0000) returned 1 [0214.695] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate1.ico", cAlternateFileName="")) returned 1 [0214.695] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260900 [0214.695] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239508 [0214.695] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x218450 [0214.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239508 | out: hHeap=0x1f0000) returned 1 [0214.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217ed0 | out: hHeap=0x1f0000) returned 1 [0214.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260900 | out: hHeap=0x1f0000) returned 1 [0214.695] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate1.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate1.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0214.695] GetFileType (hFile=0x1b0) returned 0x1 [0214.695] CloseHandle (hObject=0x1b0) returned 1 [0214.696] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235700 [0214.696] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate1.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate1.ico"), fInfoLevelId=0x0, lpFileInformation=0x259ebe4 | out: lpFileInformation=0x259ebe4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1 [0214.696] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0214.696] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235b78 [0214.696] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate1.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate1.ico"), fInfoLevelId=0x0, lpFileInformation=0x259ebf4 | out: lpFileInformation=0x259ebf4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1 [0214.696] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0214.696] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2362c8 [0214.696] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2362c8 | out: hHeap=0x1f0000) returned 1 [0214.696] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate2.ico", cAlternateFileName="")) returned 1 [0214.696] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0214.696] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239508 [0214.696] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217b50 [0214.696] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239508 | out: hHeap=0x1f0000) returned 1 [0214.696] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218450 | out: hHeap=0x1f0000) returned 1 [0214.696] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0214.697] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate2.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate2.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0214.697] GetFileType (hFile=0x1b0) returned 0x1 [0214.697] CloseHandle (hObject=0x1b0) returned 1 [0214.697] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235de8 [0214.697] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate2.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate2.ico"), fInfoLevelId=0x0, lpFileInformation=0x259ebe4 | out: lpFileInformation=0x259ebe4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1 [0214.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235de8 | out: hHeap=0x1f0000) returned 1 [0214.697] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2358a0 [0214.697] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate2.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate2.ico"), fInfoLevelId=0x0, lpFileInformation=0x259ebf4 | out: lpFileInformation=0x259ebf4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1 [0214.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2358a0 | out: hHeap=0x1f0000) returned 1 [0214.698] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235700 [0214.698] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0214.698] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate3.ico", cAlternateFileName="")) returned 1 [0214.698] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0214.698] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239508 [0214.698] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x218450 [0214.698] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239508 | out: hHeap=0x1f0000) returned 1 [0214.698] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217b50 | out: hHeap=0x1f0000) returned 1 [0214.698] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0214.698] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate3.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate3.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0214.698] GetFileType (hFile=0x1b0) returned 0x1 [0214.698] CloseHandle (hObject=0x1b0) returned 1 [0214.699] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235b78 [0214.699] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate3.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate3.ico"), fInfoLevelId=0x0, lpFileInformation=0x259ebe4 | out: lpFileInformation=0x259ebe4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1 [0214.699] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0214.699] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235f20 [0214.699] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate3.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate3.ico"), fInfoLevelId=0x0, lpFileInformation=0x259ebf4 | out: lpFileInformation=0x259ebf4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1 [0214.699] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235f20 | out: hHeap=0x1f0000) returned 1 [0214.699] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236190 [0214.699] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236190 | out: hHeap=0x1f0000) returned 1 [0214.699] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate4.ico", cAlternateFileName="")) returned 1 [0214.699] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260798 [0214.699] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239508 [0214.699] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217dd0 [0214.699] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239508 | out: hHeap=0x1f0000) returned 1 [0214.699] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218450 | out: hHeap=0x1f0000) returned 1 [0214.699] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260798 | out: hHeap=0x1f0000) returned 1 [0214.700] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate4.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate4.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0214.700] GetFileType (hFile=0x1b0) returned 0x1 [0214.700] CloseHandle (hObject=0x1b0) returned 1 [0214.700] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235e50 [0214.700] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate4.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate4.ico"), fInfoLevelId=0x0, lpFileInformation=0x259ebe4 | out: lpFileInformation=0x259ebe4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1 [0214.700] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235e50 | out: hHeap=0x1f0000) returned 1 [0214.700] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235908 [0214.700] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate4.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate4.ico"), fInfoLevelId=0x0, lpFileInformation=0x259ebf4 | out: lpFileInformation=0x259ebf4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1 [0214.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235908 | out: hHeap=0x1f0000) returned 1 [0214.701] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236190 [0214.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236190 | out: hHeap=0x1f0000) returned 1 [0214.701] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate5.ico", cAlternateFileName="")) returned 1 [0214.701] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605b8 [0214.701] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239508 [0214.701] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217ed0 [0214.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239508 | out: hHeap=0x1f0000) returned 1 [0214.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217dd0 | out: hHeap=0x1f0000) returned 1 [0214.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0214.701] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate5.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate5.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0214.701] GetFileType (hFile=0x1b0) returned 0x1 [0214.702] CloseHandle (hObject=0x1b0) returned 1 [0214.704] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235de8 [0214.704] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate5.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate5.ico"), fInfoLevelId=0x0, lpFileInformation=0x259ebe4 | out: lpFileInformation=0x259ebe4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1 [0214.704] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235de8 | out: hHeap=0x1f0000) returned 1 [0214.704] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2358a0 [0214.704] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate5.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate5.ico"), fInfoLevelId=0x0, lpFileInformation=0x259ebf4 | out: lpFileInformation=0x259ebf4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1 [0214.704] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2358a0 | out: hHeap=0x1f0000) returned 1 [0214.704] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236058 [0214.704] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236058 | out: hHeap=0x1f0000) returned 1 [0214.704] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate6.ico", cAlternateFileName="")) returned 1 [0214.704] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0214.704] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239508 [0214.704] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x218050 [0214.704] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239508 | out: hHeap=0x1f0000) returned 1 [0214.704] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217ed0 | out: hHeap=0x1f0000) returned 1 [0214.704] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0214.705] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate6.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate6.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0214.705] GetFileType (hFile=0x1b0) returned 0x1 [0214.705] CloseHandle (hObject=0x1b0) returned 1 [0214.705] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235b78 [0214.705] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate6.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate6.ico"), fInfoLevelId=0x0, lpFileInformation=0x259ebe4 | out: lpFileInformation=0x259ebe4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1 [0214.705] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0214.705] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236190 [0214.705] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate6.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate6.ico"), fInfoLevelId=0x0, lpFileInformation=0x259ebf4 | out: lpFileInformation=0x259ebf4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1 [0214.706] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236190 | out: hHeap=0x1f0000) returned 1 [0214.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235970 [0214.706] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235970 | out: hHeap=0x1f0000) returned 1 [0214.706] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate7.ico", cAlternateFileName="")) returned 1 [0214.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604c8 [0214.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239508 [0214.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x2175d0 [0214.706] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239508 | out: hHeap=0x1f0000) returned 1 [0214.706] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218050 | out: hHeap=0x1f0000) returned 1 [0214.706] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604c8 | out: hHeap=0x1f0000) returned 1 [0214.706] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate7.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate7.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0214.707] GetFileType (hFile=0x1b0) returned 0x1 [0214.707] CloseHandle (hObject=0x1b0) returned 1 [0214.707] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235b78 [0214.707] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate7.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate7.ico"), fInfoLevelId=0x0, lpFileInformation=0x259ebe4 | out: lpFileInformation=0x259ebe4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1 [0214.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0214.707] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235cb0 [0214.707] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate7.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate7.ico"), fInfoLevelId=0x0, lpFileInformation=0x259ebf4 | out: lpFileInformation=0x259ebf4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1 [0214.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235cb0 | out: hHeap=0x1f0000) returned 1 [0214.707] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235b78 [0214.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0214.707] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate8.ico", cAlternateFileName="")) returned 1 [0214.707] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0214.707] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239508 [0214.707] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217850 [0214.708] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239508 | out: hHeap=0x1f0000) returned 1 [0214.708] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2175d0 | out: hHeap=0x1f0000) returned 1 [0214.708] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0214.708] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate8.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate8.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0214.708] GetFileType (hFile=0x1b0) returned 0x1 [0214.708] CloseHandle (hObject=0x1b0) returned 1 [0214.708] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236190 [0214.708] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate8.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate8.ico"), fInfoLevelId=0x0, lpFileInformation=0x259ebe4 | out: lpFileInformation=0x259ebe4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1 [0214.709] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236190 | out: hHeap=0x1f0000) returned 1 [0214.709] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235b78 [0214.709] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Rotate8.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate8.ico"), fInfoLevelId=0x0, lpFileInformation=0x259ebf4 | out: lpFileInformation=0x259ebf4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1 [0214.709] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0214.709] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2358a0 [0214.709] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2358a0 | out: hHeap=0x1f0000) returned 1 [0214.709] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Save.ico", cAlternateFileName="")) returned 1 [0214.709] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0214.709] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239508 [0214.709] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x2177d0 [0214.709] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239508 | out: hHeap=0x1f0000) returned 1 [0214.709] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217850 | out: hHeap=0x1f0000) returned 1 [0214.709] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0214.709] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Save.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\save.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0214.710] GetFileType (hFile=0x1b0) returned 0x1 [0214.710] CloseHandle (hObject=0x1b0) returned 1 [0214.710] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2358a0 [0214.710] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Save.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\save.ico"), fInfoLevelId=0x0, lpFileInformation=0x259ebe4 | out: lpFileInformation=0x259ebe4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e)) returned 1 [0214.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2358a0 | out: hHeap=0x1f0000) returned 1 [0214.710] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235ff0 [0214.710] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Save.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\save.ico"), fInfoLevelId=0x0, lpFileInformation=0x259ebf4 | out: lpFileInformation=0x259ebf4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e)) returned 1 [0214.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235ff0 | out: hHeap=0x1f0000) returned 1 [0214.710] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235b78 [0214.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0214.710] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x8f66, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.ico", cAlternateFileName="")) returned 1 [0214.710] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609a0 [0214.710] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239508 [0214.711] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x2176d0 [0214.711] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239508 | out: hHeap=0x1f0000) returned 1 [0214.711] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2177d0 | out: hHeap=0x1f0000) returned 1 [0214.711] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0214.711] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Setup.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\setup.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0214.711] GetFileType (hFile=0x1b0) returned 0x1 [0214.711] CloseHandle (hObject=0x1b0) returned 1 [0214.711] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236058 [0214.711] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Setup.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\setup.ico"), fInfoLevelId=0x0, lpFileInformation=0x259ebe4 | out: lpFileInformation=0x259ebe4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x8f66)) returned 1 [0214.712] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236058 | out: hHeap=0x1f0000) returned 1 [0214.712] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2358a0 [0214.712] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\Setup.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\setup.ico"), fInfoLevelId=0x0, lpFileInformation=0x259ebf4 | out: lpFileInformation=0x259ebf4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x8f66)) returned 1 [0214.712] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2358a0 | out: hHeap=0x1f0000) returned 1 [0214.712] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2358a0 [0214.712] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2358a0 | out: hHeap=0x1f0000) returned 1 [0214.712] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5b5e7f00, ftCreationTime.dwHighDateTime=0x1ca927c, ftLastAccessTime.dwLowDateTime=0x5b5e7f00, ftLastAccessTime.dwHighDateTime=0x1ca927c, ftLastWriteTime.dwLowDateTime=0x5b5e7f00, ftLastWriteTime.dwHighDateTime=0x1ca927c, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0x0, cFileName="stop.ico", cAlternateFileName="")) returned 1 [0214.712] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0214.712] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239508 [0214.712] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x2182d0 [0214.712] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239508 | out: hHeap=0x1f0000) returned 1 [0214.712] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2176d0 | out: hHeap=0x1f0000) returned 1 [0214.712] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0214.712] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\stop.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\stop.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0214.713] GetFileType (hFile=0x1b0) returned 0x1 [0214.713] CloseHandle (hObject=0x1b0) returned 1 [0214.713] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2358a0 [0214.713] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\stop.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\stop.ico"), fInfoLevelId=0x0, lpFileInformation=0x259ebe4 | out: lpFileInformation=0x259ebe4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5b5e7f00, ftCreationTime.dwHighDateTime=0x1ca927c, ftLastAccessTime.dwLowDateTime=0x5b5e7f00, ftLastAccessTime.dwHighDateTime=0x1ca927c, ftLastWriteTime.dwLowDateTime=0x5b5e7f00, ftLastWriteTime.dwHighDateTime=0x1ca927c, nFileSizeHigh=0x0, nFileSizeLow=0x2796)) returned 1 [0214.713] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2358a0 | out: hHeap=0x1f0000) returned 1 [0214.713] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235ff0 [0214.713] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\stop.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\stop.ico"), fInfoLevelId=0x0, lpFileInformation=0x259ebf4 | out: lpFileInformation=0x259ebf4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5b5e7f00, ftCreationTime.dwHighDateTime=0x1ca927c, ftLastAccessTime.dwLowDateTime=0x5b5e7f00, ftLastAccessTime.dwHighDateTime=0x1ca927c, ftLastWriteTime.dwLowDateTime=0x5b5e7f00, ftLastWriteTime.dwHighDateTime=0x1ca927c, nFileSizeHigh=0x0, nFileSizeLow=0x2796)) returned 1 [0214.713] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235ff0 | out: hHeap=0x1f0000) returned 1 [0214.713] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235700 [0214.713] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0214.713] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SysReqMet.ico", cAlternateFileName="SYSREQ~1.ICO")) returned 1 [0214.713] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0214.713] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239508 [0214.714] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x218050 [0214.714] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239508 | out: hHeap=0x1f0000) returned 1 [0214.714] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2182d0 | out: hHeap=0x1f0000) returned 1 [0214.714] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0214.714] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\SysReqMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqmet.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0214.714] GetFileType (hFile=0x1b0) returned 0x1 [0214.714] CloseHandle (hObject=0x1b0) returned 1 [0214.714] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235f20 [0214.715] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\SysReqMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqmet.ico"), fInfoLevelId=0x0, lpFileInformation=0x259ebe4 | out: lpFileInformation=0x259ebe4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e)) returned 1 [0214.715] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235f20 | out: hHeap=0x1f0000) returned 1 [0214.715] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235b78 [0214.715] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\SysReqMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqmet.ico"), fInfoLevelId=0x0, lpFileInformation=0x259ebf4 | out: lpFileInformation=0x259ebf4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e)) returned 1 [0214.715] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0214.715] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2362c8 [0214.715] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2362c8 | out: hHeap=0x1f0000) returned 1 [0214.715] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SysReqNotMet.ico", cAlternateFileName="SYSREQ~2.ICO")) returned 1 [0214.715] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2f0 [0214.715] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239508 [0214.715] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217cd0 [0214.715] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239508 | out: hHeap=0x1f0000) returned 1 [0214.715] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218050 | out: hHeap=0x1f0000) returned 1 [0214.715] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0214.716] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqnotmet.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0214.716] GetFileType (hFile=0x1b0) returned 0x1 [0214.716] CloseHandle (hObject=0x1b0) returned 1 [0214.716] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0214.716] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqnotmet.ico"), fInfoLevelId=0x0, lpFileInformation=0x259ebe4 | out: lpFileInformation=0x259ebe4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e)) returned 1 [0214.717] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0214.717] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0214.717] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqnotmet.ico"), fInfoLevelId=0x0, lpFileInformation=0x259ebf4 | out: lpFileInformation=0x259ebf4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e)) returned 1 [0214.717] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0214.717] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fa40 [0214.717] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fa40 | out: hHeap=0x1f0000) returned 1 [0214.717] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0x0, cFileName="warn.ico", cAlternateFileName="")) returned 1 [0214.717] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606f8 [0214.717] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239508 [0214.717] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217750 [0214.717] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239508 | out: hHeap=0x1f0000) returned 1 [0214.717] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217cd0 | out: hHeap=0x1f0000) returned 1 [0214.717] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606f8 | out: hHeap=0x1f0000) returned 1 [0214.718] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\warn.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\warn.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0214.718] GetFileType (hFile=0x1b0) returned 0x1 [0214.718] CloseHandle (hObject=0x1b0) returned 1 [0214.718] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2358a0 [0214.718] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\warn.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\warn.ico"), fInfoLevelId=0x0, lpFileInformation=0x259ebe4 | out: lpFileInformation=0x259ebe4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x2796)) returned 1 [0214.718] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2358a0 | out: hHeap=0x1f0000) returned 1 [0214.718] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235be0 [0214.719] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\Graphics\\warn.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\warn.ico"), fInfoLevelId=0x0, lpFileInformation=0x259ebf4 | out: lpFileInformation=0x259ebf4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x2796)) returned 1 [0214.719] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235be0 | out: hHeap=0x1f0000) returned 1 [0214.719] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2358a0 [0214.719] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2358a0 | out: hHeap=0x1f0000) returned 1 [0214.719] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0x0, cFileName="warn.ico", cAlternateFileName="")) returned 0 [0214.719] FindClose (in: hFindFile=0x24eb00 | out: hFindFile=0x24eb00) returned 1 [0214.719] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217750 | out: hHeap=0x1f0000) returned 1 [0214.719] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263640 | out: hHeap=0x1f0000) returned 1 [0214.719] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0214.720] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233ed0 | out: hHeap=0x1f0000) returned 1 [0214.720] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2119d0 | out: hHeap=0x1f0000) returned 1 [0214.720] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2226d0 | out: hHeap=0x1f0000) returned 1 [0214.720] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222718 | out: hHeap=0x1f0000) returned 1 [0214.720] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2227a8 | out: hHeap=0x1f0000) returned 1 [0214.720] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2227f0 | out: hHeap=0x1f0000) returned 1 [0214.720] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222760 | out: hHeap=0x1f0000) returned 1 [0214.720] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222958 | out: hHeap=0x1f0000) returned 1 [0214.720] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2229a0 | out: hHeap=0x1f0000) returned 1 [0214.720] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222880 | out: hHeap=0x1f0000) returned 1 [0214.720] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222640 | out: hHeap=0x1f0000) returned 1 [0214.720] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222910 | out: hHeap=0x1f0000) returned 1 [0214.720] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222a78 | out: hHeap=0x1f0000) returned 1 [0214.720] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222688 | out: hHeap=0x1f0000) returned 1 [0214.721] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ac0 | out: hHeap=0x1f0000) returned 1 [0214.721] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222b98 | out: hHeap=0x1f0000) returned 1 [0214.721] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222be0 | out: hHeap=0x1f0000) returned 1 [0214.721] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222568 | out: hHeap=0x1f0000) returned 1 [0214.721] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2225b0 | out: hHeap=0x1f0000) returned 1 [0214.721] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222328 | out: hHeap=0x1f0000) returned 1 [0214.721] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222130 | out: hHeap=0x1f0000) returned 1 [0214.721] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222448 | out: hHeap=0x1f0000) returned 1 [0214.721] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222490 | out: hHeap=0x1f0000) returned 1 [0214.721] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222370 | out: hHeap=0x1f0000) returned 1 [0214.721] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222010 | out: hHeap=0x1f0000) returned 1 [0214.721] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221f38 | out: hHeap=0x1f0000) returned 1 [0215.101] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2224d8 | out: hHeap=0x1f0000) returned 1 [0215.101] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2223b8 | out: hHeap=0x1f0000) returned 1 [0215.101] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222400 | out: hHeap=0x1f0000) returned 1 [0215.101] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2220a0 | out: hHeap=0x1f0000) returned 1 [0215.101] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f778 | out: hHeap=0x1f0000) returned 1 [0215.101] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227850 | out: hHeap=0x1f0000) returned 1 [0215.101] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b598 | out: hHeap=0x1f0000) returned 1 [0215.102] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222b50 | out: hHeap=0x1f0000) returned 1 [0215.102] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234740 [0215.102] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260838 [0215.102] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x261ff0 [0215.102] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604c8 [0215.102] FindFirstFileW (in: lpFileName="C:\\\\Boot\\*", lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9d311c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef9d311c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24e5c0 [0215.102] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0215.102] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604c8 | out: hHeap=0x1f0000) returned 1 [0215.102] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0215.102] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9d311c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef9d311c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0215.103] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0215.103] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0215.103] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0215.103] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0215.103] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xac3efa99, ftLastAccessTime.dwHighDateTime=0x1d4d5d3, ftLastWriteTime.dwLowDateTime=0xac3efa99, ftLastWriteTime.dwHighDateTime=0x1d4d5d3, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="BCD", cAlternateFileName="")) returned 1 [0215.103] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605e0 [0215.103] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0215.103] CreateFileW (lpFileName="C:\\\\Boot\\BCD" (normalized: "c:\\boot\\bcd"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.104] GetLastError () returned 0x20 [0215.104] GetLastError () returned 0x20 [0215.104] SetLastError (dwErrCode=0x20) [0215.104] GetLastError () returned 0x20 [0215.104] SetLastError (dwErrCode=0x20) [0215.104] GetLastError () returned 0x20 [0215.105] SetLastError (dwErrCode=0x20) [0215.105] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="BCD.LOG", cAlternateFileName="")) returned 1 [0215.105] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260540 [0215.105] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2f0 [0215.105] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0215.105] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605e0 | out: hHeap=0x1f0000) returned 1 [0215.106] CreateFileW (lpFileName="C:\\\\Boot\\BCD.LOG" (normalized: "c:\\boot\\bcd.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.106] GetLastError () returned 0x20 [0215.106] GetLastError () returned 0x20 [0215.106] SetLastError (dwErrCode=0x20) [0215.106] GetLastError () returned 0x20 [0215.106] SetLastError (dwErrCode=0x20) [0215.106] GetLastError () returned 0x20 [0215.107] SetLastError (dwErrCode=0x20) [0215.107] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="BCD.LOG1", cAlternateFileName="BCD~1.LOG")) returned 1 [0215.107] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0215.107] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260770 [0215.107] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0215.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0215.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0215.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0215.108] CreateFileW (lpFileName="C:\\\\Boot\\BCD.LOG1" (normalized: "c:\\boot\\bcd.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0215.108] GetFileType (hFile=0x21c) returned 0x1 [0215.108] CloseHandle (hObject=0x21c) returned 1 [0215.109] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2f0 [0215.109] GetFileAttributesExW (in: lpFileName="C:\\\\Boot\\BCD.LOG1" (normalized: "c:\\boot\\bcd.log1"), fInfoLevelId=0x0, lpFileInformation=0x259f0ac | out: lpFileInformation=0x259f0ac*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0215.109] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0215.109] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0215.109] GetFileAttributesExW (in: lpFileName="C:\\\\Boot\\BCD.LOG1" (normalized: "c:\\boot\\bcd.log1"), fInfoLevelId=0x0, lpFileInformation=0x259f0b4 | out: lpFileInformation=0x259f0b4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0215.109] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0215.109] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0215.109] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0215.109] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="BCD.LOG2", cAlternateFileName="BCD~2.LOG")) returned 1 [0215.109] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0215.109] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0215.109] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0215.109] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0215.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0215.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0215.110] CreateFileW (lpFileName="C:\\\\Boot\\BCD.LOG2" (normalized: "c:\\boot\\bcd.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0215.110] GetFileType (hFile=0x21c) returned 0x1 [0215.110] CloseHandle (hObject=0x21c) returned 1 [0215.111] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0215.111] GetFileAttributesExW (in: lpFileName="C:\\\\Boot\\BCD.LOG2" (normalized: "c:\\boot\\bcd.log2"), fInfoLevelId=0x0, lpFileInformation=0x259f0ac | out: lpFileInformation=0x259f0ac*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0215.111] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0215.111] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0215.111] GetFileAttributesExW (in: lpFileName="C:\\\\Boot\\BCD.LOG2" (normalized: "c:\\boot\\bcd.log2"), fInfoLevelId=0x0, lpFileInformation=0x259f0b4 | out: lpFileInformation=0x259f0b4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0215.111] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0215.111] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0215.111] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0215.112] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="bg-BG", cAlternateFileName="")) returned 1 [0215.112] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606f8 [0215.112] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0215.112] lstrcmpW (lpString1="bg-BG", lpString2=".") returned 1 [0215.112] lstrcmpW (lpString1="bg-BG", lpString2="..") returned 1 [0215.112] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x205330 [0215.112] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260770 [0215.112] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef4e6d79, ftCreationTime.dwHighDateTime=0x1d3273d, ftLastAccessTime.dwLowDateTime=0xef4e6d79, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x175a0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="bootspaces.dll", cAlternateFileName="BOOTSP~1.DLL")) returned 1 [0215.112] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0215.113] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260888 [0215.113] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0215.113] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0215.113] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606f8 | out: hHeap=0x1f0000) returned 1 [0215.113] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0215.113] CreateFileW (lpFileName="C:\\\\Boot\\bootspaces.dll" (normalized: "c:\\boot\\bootspaces.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.115] GetLastError () returned 0x5 [0215.115] GetLastError () returned 0x5 [0215.115] SetLastError (dwErrCode=0x5) [0215.115] GetLastError () returned 0x5 [0215.115] SetLastError (dwErrCode=0x5) [0215.115] GetLastError () returned 0x5 [0215.115] SetLastError (dwErrCode=0x5) [0215.116] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xef703e94, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="BOOTSTAT.DAT", cAlternateFileName="")) returned 1 [0215.116] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0215.116] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0215.116] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0215.116] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0215.116] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0215.116] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0215.117] CreateFileW (lpFileName="C:\\\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0215.117] GetFileType (hFile=0x21c) returned 0x1 [0215.117] CloseHandle (hObject=0x21c) returned 1 [0215.118] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0215.118] GetFileAttributesExW (in: lpFileName="C:\\\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat"), fInfoLevelId=0x0, lpFileInformation=0x259f0ac | out: lpFileInformation=0x259f0ac*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xef703e94, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1 [0215.118] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0215.118] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0215.118] GetFileAttributesExW (in: lpFileName="C:\\\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat"), fInfoLevelId=0x0, lpFileInformation=0x259f0b4 | out: lpFileInformation=0x259f0b4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xef703e94, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1 [0215.118] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0215.118] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0215.118] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0215.119] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef4fcd12, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x185a0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="bootvhd.dll", cAlternateFileName="")) returned 1 [0215.119] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605e0 [0215.119] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0215.119] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0215.119] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0215.119] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0215.119] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605e0 | out: hHeap=0x1f0000) returned 1 [0215.120] CreateFileW (lpFileName="C:\\\\Boot\\bootvhd.dll" (normalized: "c:\\boot\\bootvhd.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.120] GetLastError () returned 0x5 [0215.120] GetLastError () returned 0x5 [0215.121] SetLastError (dwErrCode=0x5) [0215.121] GetLastError () returned 0x5 [0215.121] SetLastError (dwErrCode=0x5) [0215.121] GetLastError () returned 0x5 [0215.121] SetLastError (dwErrCode=0x5) [0215.122] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef511a4c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="cs-CZ", cAlternateFileName="")) returned 1 [0215.122] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0215.122] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0215.122] lstrcmpW (lpString1="cs-CZ", lpString2=".") returned 1 [0215.122] lstrcmpW (lpString1="cs-CZ", lpString2="..") returned 1 [0215.122] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0215.122] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609a0 [0215.123] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205330 | out: hHeap=0x1f0000) returned 1 [0215.123] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0008dbb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5252b3, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="da-DK", cAlternateFileName="")) returned 1 [0215.123] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605e0 [0215.123] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0215.123] lstrcmpW (lpString1="da-DK", lpString2=".") returned 1 [0215.123] lstrcmpW (lpString1="da-DK", lpString2="..") returned 1 [0215.123] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x48) returned 0x226288 [0215.123] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2607c0 [0215.123] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0215.124] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0009692, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef538bee, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="de-DE", cAlternateFileName="")) returned 1 [0215.124] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0215.124] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605e0 | out: hHeap=0x1f0000) returned 1 [0215.124] lstrcmpW (lpString1="de-DE", lpString2=".") returned 1 [0215.124] lstrcmpW (lpString1="de-DE", lpString2="..") returned 1 [0215.124] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2358a0 [0215.124] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0215.124] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226288 | out: hHeap=0x1f0000) returned 1 [0215.124] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef555ff8, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="el-GR", cAlternateFileName="")) returned 1 [0215.125] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260888 [0215.125] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0215.125] lstrcmpW (lpString1="el-GR", lpString2=".") returned 1 [0215.125] lstrcmpW (lpString1="el-GR", lpString2="..") returned 1 [0215.125] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0215.125] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0215.125] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2358a0 | out: hHeap=0x1f0000) returned 1 [0215.125] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc482dc87, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="en-GB", cAlternateFileName="")) returned 1 [0215.126] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0215.126] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0215.126] lstrcmpW (lpString1="en-GB", lpString2=".") returned 1 [0215.126] lstrcmpW (lpString1="en-GB", lpString2="..") returned 1 [0215.126] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260518 [0215.126] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef57d0f5, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="en-US", cAlternateFileName="")) returned 1 [0215.126] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0215.126] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0215.127] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0215.127] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0215.127] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd8) returned 0x22b018 [0215.127] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0215.127] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0215.127] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000b9ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef586d37, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="es-ES", cAlternateFileName="")) returned 1 [0215.127] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260888 [0215.127] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0215.128] lstrcmpW (lpString1="es-ES", lpString2=".") returned 1 [0215.133] lstrcmpW (lpString1="es-ES", lpString2="..") returned 1 [0215.133] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0215.133] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000c12e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc4853f40, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="es-MX", cAlternateFileName="")) returned 1 [0215.133] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604c8 [0215.133] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0215.133] lstrcmpW (lpString1="es-MX", lpString2=".") returned 1 [0215.133] lstrcmpW (lpString1="es-MX", lpString2="..") returned 1 [0215.133] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260888 [0215.133] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc487a0b9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="et-EE", cAlternateFileName="")) returned 1 [0215.134] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0215.134] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604c8 | out: hHeap=0x1f0000) returned 1 [0215.134] lstrcmpW (lpString1="et-EE", lpString2=".") returned 1 [0215.134] lstrcmpW (lpString1="et-EE", lpString2="..") returned 1 [0215.134] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x138) returned 0x22b0f8 [0215.134] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0215.134] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b018 | out: hHeap=0x1f0000) returned 1 [0215.134] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000cf3a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef59a5b1, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="fi-FI", cAlternateFileName="")) returned 1 [0215.134] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604c8 [0215.134] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0215.134] lstrcmpW (lpString1="fi-FI", lpString2=".") returned 1 [0215.135] lstrcmpW (lpString1="fi-FI", lpString2="..") returned 1 [0215.135] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0215.135] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0109451, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef999ae4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Fonts", cAlternateFileName="")) returned 1 [0215.135] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260540 [0215.135] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604c8 | out: hHeap=0x1f0000) returned 1 [0215.135] lstrcmpW (lpString1="Fonts", lpString2=".") returned 1 [0215.135] lstrcmpW (lpString1="Fonts", lpString2="..") returned 1 [0215.135] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606f8 [0215.135] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="fr-CA", cAlternateFileName="")) returned 1 [0215.135] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604c8 [0215.135] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0215.136] lstrcmpW (lpString1="fr-CA", lpString2=".") returned 1 [0215.136] lstrcmpW (lpString1="fr-CA", lpString2="..") returned 1 [0215.136] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260540 [0215.136] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010bc12, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ade2b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="fr-FR", cAlternateFileName="")) returned 1 [0215.136] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0215.136] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604c8 | out: hHeap=0x1f0000) returned 1 [0215.136] lstrcmpW (lpString1="fr-FR", lpString2=".") returned 1 [0215.136] lstrcmpW (lpString1="fr-FR", lpString2="..") returned 1 [0215.136] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c8) returned 0x237d00 [0215.136] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604c8 [0215.136] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b0f8 | out: hHeap=0x1f0000) returned 1 [0215.136] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="hr-HR", cAlternateFileName="")) returned 1 [0215.136] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0215.136] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0215.136] lstrcmpW (lpString1="hr-HR", lpString2=".") returned 1 [0215.136] lstrcmpW (lpString1="hr-HR", lpString2="..") returned 1 [0215.137] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0215.137] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010c5ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5c171b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="hu-HU", cAlternateFileName="")) returned 1 [0215.137] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605b8 [0215.137] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0215.137] lstrcmpW (lpString1="hu-HU", lpString2=".") returned 1 [0215.137] lstrcmpW (lpString1="hu-HU", lpString2="..") returned 1 [0215.137] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0215.137] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010ccad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5d8ab4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="it-IT", cAlternateFileName="")) returned 1 [0215.137] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605e0 [0215.137] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0215.137] lstrcmpW (lpString1="it-IT", lpString2=".") returned 1 [0215.137] lstrcmpW (lpString1="it-IT", lpString2="..") returned 1 [0215.137] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605b8 [0215.137] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010d0c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ed6c6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="ja-JP", cAlternateFileName="")) returned 1 [0215.138] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609f0 [0215.138] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605e0 | out: hHeap=0x1f0000) returned 1 [0215.138] lstrcmpW (lpString1="ja-JP", lpString2=".") returned 1 [0215.138] lstrcmpW (lpString1="ja-JP", lpString2="..") returned 1 [0215.138] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605e0 [0215.138] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef5fc210, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="ko-KR", cAlternateFileName="")) returned 1 [0215.138] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0215.138] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609f0 | out: hHeap=0x1f0000) returned 1 [0215.138] lstrcmpW (lpString1="ko-KR", lpString2=".") returned 1 [0215.138] lstrcmpW (lpString1="ko-KR", lpString2="..") returned 1 [0215.138] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609f0 [0215.138] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="lt-LT", cAlternateFileName="")) returned 1 [0215.138] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0215.139] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0215.139] lstrcmpW (lpString1="lt-LT", lpString2=".") returned 1 [0215.139] lstrcmpW (lpString1="lt-LT", lpString2="..") returned 1 [0215.139] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2a0) returned 0x22b018 [0215.139] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0215.139] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237d00 | out: hHeap=0x1f0000) returned 1 [0215.139] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="lv-LV", cAlternateFileName="")) returned 1 [0215.139] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0215.139] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0215.139] lstrcmpW (lpString1="lv-LV", lpString2=".") returned 1 [0215.139] lstrcmpW (lpString1="lv-LV", lpString2="..") returned 1 [0215.139] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0215.139] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6196d8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfbcf473f, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0xc63a0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="memtest.exe", cAlternateFileName="")) returned 1 [0215.139] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0215.139] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0215.139] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0215.139] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0215.140] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0215.140] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0215.140] CreateFileW (lpFileName="C:\\\\Boot\\memtest.exe" (normalized: "c:\\boot\\memtest.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.140] GetLastError () returned 0x5 [0215.140] GetLastError () returned 0x5 [0215.141] SetLastError (dwErrCode=0x5) [0215.141] GetLastError () returned 0x5 [0215.141] SetLastError (dwErrCode=0x5) [0215.141] GetLastError () returned 0x5 [0215.141] SetLastError (dwErrCode=0x5) [0215.141] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e138, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef62cf52, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="nb-NO", cAlternateFileName="")) returned 1 [0215.141] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0215.142] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0215.142] lstrcmpW (lpString1="nb-NO", lpString2=".") returned 1 [0215.142] lstrcmpW (lpString1="nb-NO", lpString2="..") returned 1 [0215.142] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0215.142] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e4fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6407cf, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="nl-NL", cAlternateFileName="")) returned 1 [0215.142] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0215.142] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0215.142] lstrcmpW (lpString1="nl-NL", lpString2=".") returned 1 [0215.142] lstrcmpW (lpString1="nl-NL", lpString2="..") returned 1 [0215.142] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0215.142] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef65403a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="pl-PL", cAlternateFileName="")) returned 1 [0215.143] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0215.143] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0215.143] lstrcmpW (lpString1="pl-PL", lpString2=".") returned 1 [0215.143] lstrcmpW (lpString1="pl-PL", lpString2="..") returned 1 [0215.143] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0215.143] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6678d6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6678d6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="pt-BR", cAlternateFileName="")) returned 1 [0215.143] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0215.535] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0215.535] lstrcmpW (lpString1="pt-BR", lpString2=".") returned 1 [0215.535] lstrcmpW (lpString1="pt-BR", lpString2="..") returned 1 [0215.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0215.535] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f167, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6714dc, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="pt-PT", cAlternateFileName="")) returned 1 [0215.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0215.535] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0215.535] lstrcmpW (lpString1="pt-PT", lpString2=".") returned 1 [0215.535] lstrcmpW (lpString1="pt-PT", lpString2="..") returned 1 [0215.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0215.535] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f640, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef684d85, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="qps-ploc", cAlternateFileName="")) returned 1 [0215.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0215.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0215.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282a0 [0215.535] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0215.535] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0215.535] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0215.535] lstrcmpW (lpString1="qps-ploc", lpString2=".") returned 1 [0215.535] lstrcmpW (lpString1="qps-ploc", lpString2="..") returned 1 [0215.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0215.535] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ab61e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9abff9, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Resources", cAlternateFileName="RESOUR~1")) returned 1 [0215.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0215.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238438 [0215.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0215.536] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238438 | out: hHeap=0x1f0000) returned 1 [0215.536] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0215.536] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0215.536] lstrcmpW (lpString1="Resources", lpString2=".") returned 1 [0215.536] lstrcmpW (lpString1="Resources", lpString2="..") returned 1 [0215.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf70 [0215.536] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="ro-RO", cAlternateFileName="")) returned 1 [0215.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238488 [0215.536] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0215.536] lstrcmpW (lpString1="ro-RO", lpString2=".") returned 1 [0215.536] lstrcmpW (lpString1="ro-RO", lpString2="..") returned 1 [0215.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3f0) returned 0x24f5d8 [0215.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0215.536] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b018 | out: hHeap=0x1f0000) returned 1 [0215.536] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef698608, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="ru-RU", cAlternateFileName="")) returned 1 [0215.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0215.536] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238488 | out: hHeap=0x1f0000) returned 1 [0215.536] lstrcmpW (lpString1="ru-RU", lpString2=".") returned 1 [0215.536] lstrcmpW (lpString1="ru-RU", lpString2="..") returned 1 [0215.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380c8 [0215.537] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="sk-SK", cAlternateFileName="")) returned 1 [0215.537] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380f0 [0215.537] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0215.537] lstrcmpW (lpString1="sk-SK", lpString2=".") returned 1 [0215.537] lstrcmpW (lpString1="sk-SK", lpString2="..") returned 1 [0215.537] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0215.537] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="sl-SI", cAlternateFileName="")) returned 1 [0215.537] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0215.537] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380f0 | out: hHeap=0x1f0000) returned 1 [0215.537] lstrcmpW (lpString1="sl-SI", lpString2=".") returned 1 [0215.537] lstrcmpW (lpString1="sl-SI", lpString2="..") returned 1 [0215.537] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0215.537] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0x5168548b, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="sr-Latn-CS", cAlternateFileName="SR-LAT~1")) returned 1 [0215.537] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380f0 [0215.537] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0215.537] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2f0 [0215.537] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0215.537] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0215.537] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380f0 | out: hHeap=0x1f0000) returned 1 [0215.538] lstrcmpW (lpString1="sr-Latn-CS", lpString2=".") returned 1 [0215.538] lstrcmpW (lpString1="sr-Latn-CS", lpString2="..") returned 1 [0215.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0215.538] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="sr-Latn-RS", cAlternateFileName="SR-LAT~2")) returned 1 [0215.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238438 [0215.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0215.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0215.538] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0215.538] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0215.538] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238438 | out: hHeap=0x1f0000) returned 1 [0215.538] lstrcmpW (lpString1="sr-Latn-RS", lpString2=".") returned 1 [0215.538] lstrcmpW (lpString1="sr-Latn-RS", lpString2="..") returned 1 [0215.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1ff058 [0215.538] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01adf43, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6a2250, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="sv-SE", cAlternateFileName="")) returned 1 [0215.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0215.538] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0215.538] lstrcmpW (lpString1="sv-SE", lpString2=".") returned 1 [0215.538] lstrcmpW (lpString1="sv-SE", lpString2="..") returned 1 [0215.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0215.539] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206504, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6b5aca, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="tr-TR", cAlternateFileName="")) returned 1 [0215.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0215.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0215.539] lstrcmpW (lpString1="tr-TR", lpString2=".") returned 1 [0215.539] lstrcmpW (lpString1="tr-TR", lpString2="..") returned 1 [0215.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0215.539] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206a30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="uk-UA", cAlternateFileName="")) returned 1 [0215.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238460 [0215.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0215.539] lstrcmpW (lpString1="uk-UA", lpString2=".") returned 1 [0215.539] lstrcmpW (lpString1="uk-UA", lpString2="..") returned 1 [0215.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380f0 [0215.539] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef6c9427, ftCreationTime.dwHighDateTime=0x1d3273d, ftLastAccessTime.dwLowDateTime=0xef6c9427, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x1236, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="updaterevokesipolicy.p7b", cAlternateFileName="UPDATE~1.P7B")) returned 1 [0215.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234980 [0215.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0215.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c8b8 [0215.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0215.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238460 | out: hHeap=0x1f0000) returned 1 [0215.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234980 | out: hHeap=0x1f0000) returned 1 [0215.540] CreateFileW (lpFileName="C:\\\\Boot\\updaterevokesipolicy.p7b" (normalized: "c:\\boot\\updaterevokesipolicy.p7b"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.540] GetLastError () returned 0x5 [0215.540] GetLastError () returned 0x5 [0215.540] SetLastError (dwErrCode=0x5) [0215.540] GetLastError () returned 0x5 [0215.540] SetLastError (dwErrCode=0x5) [0215.540] GetLastError () returned 0x5 [0215.540] SetLastError (dwErrCode=0x5) [0215.540] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207100, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6d7e9a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="zh-CN", cAlternateFileName="")) returned 1 [0215.541] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238438 [0215.541] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0215.541] lstrcmpW (lpString1="zh-CN", lpString2=".") returned 1 [0215.541] lstrcmpW (lpString1="zh-CN", lpString2="..") returned 1 [0215.541] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0215.541] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207675, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x518ea25e, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="zh-HK", cAlternateFileName="")) returned 1 [0215.541] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238460 [0215.541] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238438 | out: hHeap=0x1f0000) returned 1 [0215.541] lstrcmpW (lpString1="zh-HK", lpString2=".") returned 1 [0215.541] lstrcmpW (lpString1="zh-HK", lpString2="..") returned 1 [0215.541] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238438 [0215.541] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="zh-TW", cAlternateFileName="")) returned 1 [0215.541] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238488 [0215.541] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238460 | out: hHeap=0x1f0000) returned 1 [0215.541] lstrcmpW (lpString1="zh-TW", lpString2=".") returned 1 [0215.541] lstrcmpW (lpString1="zh-TW", lpString2="..") returned 1 [0215.541] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0215.541] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="zh-TW", cAlternateFileName="")) returned 0 [0215.542] FindClose (in: hFindFile=0x24e5c0 | out: hFindFile=0x24e5c0) returned 1 [0215.542] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346f8 [0215.542] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0215.542] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262cb0 [0215.542] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0215.542] FindFirstFileW (in: lpFileName="C:\\\\Boot\\bg-BG\\*", lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName=".", cAlternateFileName="")) returned 0x24e980 [0215.542] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0215.542] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282a0 [0215.542] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0215.542] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0215.542] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0215.542] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="..", cAlternateFileName="")) returned 1 [0215.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0215.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0215.543] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0215.543] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0215.543] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0215.543] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0215.543] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210bba74, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0215.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0215.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0215.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234a10 [0215.543] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0215.543] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0215.543] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0215.543] CreateFileW (lpFileName="C:\\\\Boot\\bg-BG\\bootmgr.exe.mui" (normalized: "c:\\boot\\bg-bg\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.543] GetLastError () returned 0x5 [0215.543] GetLastError () returned 0x5 [0215.544] SetLastError (dwErrCode=0x5) [0215.544] GetLastError () returned 0x5 [0215.544] SetLastError (dwErrCode=0x5) [0215.544] GetLastError () returned 0x5 [0215.544] SetLastError (dwErrCode=0x5) [0215.544] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210bba74, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0215.544] FindClose (in: hFindFile=0x24e980 | out: hFindFile=0x24e980) returned 1 [0215.544] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234a10 | out: hHeap=0x1f0000) returned 1 [0215.544] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262cb0 | out: hHeap=0x1f0000) returned 1 [0215.544] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0215.544] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346f8 | out: hHeap=0x1f0000) returned 1 [0215.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2347d0 [0215.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0215.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262650 [0215.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0215.544] FindFirstFileW (in: lpFileName="C:\\\\Boot\\cs-CZ\\*", lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef511a4c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName=".", cAlternateFileName="")) returned 0x24e680 [0215.545] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238460 [0215.545] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282a0 [0215.545] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238460 | out: hHeap=0x1f0000) returned 1 [0215.545] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0215.545] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0215.545] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef511a4c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="..", cAlternateFileName="")) returned 1 [0215.545] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238460 [0215.545] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0215.545] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238460 | out: hHeap=0x1f0000) returned 1 [0215.545] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0215.545] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0215.545] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0215.545] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47e189c, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2109581d, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b58, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0215.545] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0215.545] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0215.545] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234980 [0215.545] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0215.545] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0215.545] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0215.546] CreateFileW (lpFileName="C:\\\\Boot\\cs-CZ\\bootmgr.exe.mui" (normalized: "c:\\boot\\cs-cz\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.546] GetLastError () returned 0x5 [0215.546] GetLastError () returned 0x5 [0215.546] SetLastError (dwErrCode=0x5) [0215.546] GetLastError () returned 0x5 [0215.546] SetLastError (dwErrCode=0x5) [0215.546] GetLastError () returned 0x5 [0215.546] SetLastError (dwErrCode=0x5) [0215.546] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f1d4cf, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0215.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0215.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0215.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2344b8 [0215.546] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0215.546] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234980 | out: hHeap=0x1f0000) returned 1 [0215.547] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0215.547] CreateFileW (lpFileName="C:\\\\Boot\\cs-CZ\\memtest.exe.mui" (normalized: "c:\\boot\\cs-cz\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.547] GetLastError () returned 0x5 [0215.547] GetLastError () returned 0x5 [0215.547] SetLastError (dwErrCode=0x5) [0215.547] GetLastError () returned 0x5 [0215.547] SetLastError (dwErrCode=0x5) [0215.547] GetLastError () returned 0x5 [0215.547] SetLastError (dwErrCode=0x5) [0215.547] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f1d4cf, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0215.547] FindClose (in: hFindFile=0x24e680 | out: hFindFile=0x24e680) returned 1 [0215.548] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2344b8 | out: hHeap=0x1f0000) returned 1 [0215.548] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262650 | out: hHeap=0x1f0000) returned 1 [0215.548] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0215.548] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2347d0 | out: hHeap=0x1f0000) returned 1 [0215.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2344b8 [0215.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0215.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262650 [0215.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0215.548] FindFirstFileW (in: lpFileName="C:\\\\Boot\\da-DK\\*", lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0008dbb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5252b3, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName=".", cAlternateFileName="")) returned 0x24ec40 [0215.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0215.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282a0 [0215.548] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0215.548] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0215.548] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0215.548] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0008dbb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5252b3, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="..", cAlternateFileName="")) returned 1 [0215.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0215.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0215.549] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0215.549] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0215.549] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0215.549] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0215.549] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47e189c, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12760, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0215.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238460 [0215.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0215.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234788 [0215.549] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0215.549] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0215.549] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238460 | out: hHeap=0x1f0000) returned 1 [0215.550] CreateFileW (lpFileName="C:\\\\Boot\\da-DK\\bootmgr.exe.mui" (normalized: "c:\\boot\\da-dk\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.550] GetLastError () returned 0x5 [0215.550] GetLastError () returned 0x5 [0215.550] SetLastError (dwErrCode=0x5) [0215.550] GetLastError () returned 0x5 [0215.550] SetLastError (dwErrCode=0x5) [0215.550] GetLastError () returned 0x5 [0215.550] SetLastError (dwErrCode=0x5) [0215.551] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5252b3, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2ef7268, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0215.551] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0215.551] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0215.551] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346f8 [0215.551] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0215.551] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234788 | out: hHeap=0x1f0000) returned 1 [0215.551] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0215.552] CreateFileW (lpFileName="C:\\\\Boot\\da-DK\\memtest.exe.mui" (normalized: "c:\\boot\\da-dk\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.552] GetLastError () returned 0x5 [0215.552] GetLastError () returned 0x5 [0215.552] SetLastError (dwErrCode=0x5) [0215.552] GetLastError () returned 0x5 [0215.552] SetLastError (dwErrCode=0x5) [0215.552] GetLastError () returned 0x5 [0215.552] SetLastError (dwErrCode=0x5) [0215.552] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5252b3, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2ef7268, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0215.553] FindClose (in: hFindFile=0x24ec40 | out: hFindFile=0x24ec40) returned 1 [0215.553] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346f8 | out: hHeap=0x1f0000) returned 1 [0215.553] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262650 | out: hHeap=0x1f0000) returned 1 [0215.553] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0215.553] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2344b8 | out: hHeap=0x1f0000) returned 1 [0215.553] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234a10 [0215.553] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0215.553] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x263178 [0215.553] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0215.554] FindFirstFileW (in: lpFileName="C:\\\\Boot\\de-DE\\*", lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0009692, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef538bee, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName=".", cAlternateFileName="")) returned 0x24ea80 [0215.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0215.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282a0 [0215.554] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0215.554] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0215.554] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0215.554] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0009692, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef538bee, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="..", cAlternateFileName="")) returned 1 [0215.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238460 [0215.555] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0215.555] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238460 | out: hHeap=0x1f0000) returned 1 [0215.555] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0215.555] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0215.555] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0215.555] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48079da, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13560, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0215.555] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0215.555] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238460 [0215.555] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346f8 [0215.555] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238460 | out: hHeap=0x1f0000) returned 1 [0215.556] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0215.556] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0215.556] CreateFileW (lpFileName="C:\\\\Boot\\de-DE\\bootmgr.exe.mui" (normalized: "c:\\boot\\de-de\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.556] GetLastError () returned 0x5 [0215.557] GetLastError () returned 0x5 [0215.557] SetLastError (dwErrCode=0x5) [0215.557] GetLastError () returned 0x5 [0215.557] SetLastError (dwErrCode=0x5) [0215.557] GetLastError () returned 0x5 [0215.557] SetLastError (dwErrCode=0x5) [0215.557] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef538bee, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2ef7268, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0215.558] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0215.558] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0215.558] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234a58 [0215.558] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0215.558] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346f8 | out: hHeap=0x1f0000) returned 1 [0215.558] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0215.559] CreateFileW (lpFileName="C:\\\\Boot\\de-DE\\memtest.exe.mui" (normalized: "c:\\boot\\de-de\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.559] GetLastError () returned 0x5 [0215.559] GetLastError () returned 0x5 [0215.559] SetLastError (dwErrCode=0x5) [0215.559] GetLastError () returned 0x5 [0215.559] SetLastError (dwErrCode=0x5) [0215.559] GetLastError () returned 0x5 [0215.559] SetLastError (dwErrCode=0x5) [0215.560] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef538bee, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2ef7268, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0215.560] FindClose (in: hFindFile=0x24ea80 | out: hFindFile=0x24ea80) returned 1 [0215.560] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234a58 | out: hHeap=0x1f0000) returned 1 [0215.560] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263178 | out: hHeap=0x1f0000) returned 1 [0215.560] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0215.560] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234a10 | out: hHeap=0x1f0000) returned 1 [0215.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346f8 [0215.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0215.561] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262e48 [0215.561] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0215.561] FindFirstFileW (in: lpFileName="C:\\\\Boot\\el-GR\\*", lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef555ff8, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName=".", cAlternateFileName="")) returned 0x24e600 [0215.561] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0215.561] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282a0 [0215.561] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0215.561] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0215.561] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0215.561] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef555ff8, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="..", cAlternateFileName="")) returned 1 [0215.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0215.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0215.562] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0215.562] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0215.562] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0215.562] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0215.562] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13960, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0215.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0215.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0215.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234aa0 [0215.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0215.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0215.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0215.563] CreateFileW (lpFileName="C:\\\\Boot\\el-GR\\bootmgr.exe.mui" (normalized: "c:\\boot\\el-gr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.563] GetLastError () returned 0x5 [0215.563] GetLastError () returned 0x5 [0215.564] SetLastError (dwErrCode=0x5) [0215.564] GetLastError () returned 0x5 [0215.564] SetLastError (dwErrCode=0x5) [0215.564] GetLastError () returned 0x5 [0215.564] SetLastError (dwErrCode=0x5) [0215.564] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb5a0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0215.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238460 [0215.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0215.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234788 [0215.565] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0215.565] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234aa0 | out: hHeap=0x1f0000) returned 1 [0215.565] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238460 | out: hHeap=0x1f0000) returned 1 [0215.565] CreateFileW (lpFileName="C:\\\\Boot\\el-GR\\memtest.exe.mui" (normalized: "c:\\boot\\el-gr\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.566] GetLastError () returned 0x5 [0215.566] GetLastError () returned 0x5 [0215.566] SetLastError (dwErrCode=0x5) [0215.566] GetLastError () returned 0x5 [0215.566] SetLastError (dwErrCode=0x5) [0215.566] GetLastError () returned 0x5 [0215.566] SetLastError (dwErrCode=0x5) [0215.566] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb5a0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0215.566] FindClose (in: hFindFile=0x24e600 | out: hFindFile=0x24e600) returned 1 [0215.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234788 | out: hHeap=0x1f0000) returned 1 [0215.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262e48 | out: hHeap=0x1f0000) returned 1 [0215.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0215.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346f8 | out: hHeap=0x1f0000) returned 1 [0215.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2347d0 [0215.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0215.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x263310 [0215.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0215.567] FindFirstFileW (in: lpFileName="C:\\\\Boot\\en-GB\\*", lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc482dc87, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName=".", cAlternateFileName="")) returned 0x24ea00 [0215.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238460 [0215.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282a0 [0215.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238460 | out: hHeap=0x1f0000) returned 1 [0215.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0215.568] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0215.568] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc482dc87, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="..", cAlternateFileName="")) returned 1 [0215.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0215.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0215.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0215.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0215.569] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0215.569] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0215.569] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12158, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0215.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238460 [0215.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0215.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234548 [0215.569] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0215.569] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0215.569] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238460 | out: hHeap=0x1f0000) returned 1 [0215.570] CreateFileW (lpFileName="C:\\\\Boot\\en-GB\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-gb\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.570] GetLastError () returned 0x5 [0215.570] GetLastError () returned 0x5 [0215.570] SetLastError (dwErrCode=0x5) [0215.571] GetLastError () returned 0x5 [0215.571] SetLastError (dwErrCode=0x5) [0215.571] GetLastError () returned 0x5 [0215.571] SetLastError (dwErrCode=0x5) [0215.571] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12158, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0215.571] FindClose (in: hFindFile=0x24ea00 | out: hFindFile=0x24ea00) returned 1 [0215.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234548 | out: hHeap=0x1f0000) returned 1 [0215.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263310 | out: hHeap=0x1f0000) returned 1 [0215.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0215.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2347d0 | out: hHeap=0x1f0000) returned 1 [0215.572] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234aa0 [0215.572] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0215.572] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262cb0 [0215.572] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0215.572] FindFirstFileW (in: lpFileName="C:\\\\Boot\\en-US\\*", lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef57d0f5, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName=".", cAlternateFileName="")) returned 0x24ec80 [0215.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238460 [0215.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282a0 [0215.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238460 | out: hHeap=0x1f0000) returned 1 [0215.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0215.573] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0215.573] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef57d0f5, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="..", cAlternateFileName="")) returned 1 [0215.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0215.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0215.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0215.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0215.574] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0215.574] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0215.574] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef569843, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0x327294d0, ftLastWriteTime.dwHighDateTime=0x1d2a030, nFileSizeHigh=0x0, nFileSizeLow=0x121a0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0215.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0215.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0215.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234818 [0215.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0215.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0215.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0215.575] CreateFileW (lpFileName="C:\\\\Boot\\en-US\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-us\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.575] GetLastError () returned 0x5 [0215.575] GetLastError () returned 0x5 [0215.576] SetLastError (dwErrCode=0x5) [0215.576] GetLastError () returned 0x5 [0215.576] SetLastError (dwErrCode=0x5) [0215.576] GetLastError () returned 0x5 [0215.576] SetLastError (dwErrCode=0x5) [0215.576] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xafa0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0215.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0215.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0215.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234548 [0215.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0215.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234818 | out: hHeap=0x1f0000) returned 1 [0215.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0215.577] CreateFileW (lpFileName="C:\\\\Boot\\en-US\\memtest.exe.mui" (normalized: "c:\\boot\\en-us\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.577] GetLastError () returned 0x5 [0215.578] GetLastError () returned 0x5 [0215.578] SetLastError (dwErrCode=0x5) [0215.578] GetLastError () returned 0x5 [0215.578] SetLastError (dwErrCode=0x5) [0215.578] GetLastError () returned 0x5 [0215.578] SetLastError (dwErrCode=0x5) [0215.579] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xafa0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0215.579] FindClose (in: hFindFile=0x24ec80 | out: hFindFile=0x24ec80) returned 1 [0215.579] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234548 | out: hHeap=0x1f0000) returned 1 [0215.579] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262cb0 | out: hHeap=0x1f0000) returned 1 [0215.579] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0215.579] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234aa0 | out: hHeap=0x1f0000) returned 1 [0215.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234818 [0215.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238460 [0215.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262650 [0215.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0215.580] FindFirstFileW (in: lpFileName="C:\\\\Boot\\es-ES\\*", lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000b9ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef586d37, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName=".", cAlternateFileName="")) returned 0x24e680 [0215.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0215.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282a0 [0215.580] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0215.580] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0215.580] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0215.580] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000b9ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef586d37, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="..", cAlternateFileName="")) returned 1 [0215.581] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0215.883] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238be8 [0215.883] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0215.883] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0215.883] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0215.883] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0215.884] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4853f40, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0215.884] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0215.884] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0215.884] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2349c8 [0215.884] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0215.884] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238be8 | out: hHeap=0x1f0000) returned 1 [0215.884] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0215.884] CreateFileW (lpFileName="C:\\\\Boot\\es-ES\\bootmgr.exe.mui" (normalized: "c:\\boot\\es-es\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.884] GetLastError () returned 0x5 [0215.884] GetLastError () returned 0x5 [0215.884] SetLastError (dwErrCode=0x5) [0215.884] GetLastError () returned 0x5 [0215.884] SetLastError (dwErrCode=0x5) [0215.884] GetLastError () returned 0x5 [0215.884] SetLastError (dwErrCode=0x5) [0215.884] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef586d37, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0215.884] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0215.884] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0215.885] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234a58 [0215.885] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0215.885] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2349c8 | out: hHeap=0x1f0000) returned 1 [0215.885] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0215.885] CreateFileW (lpFileName="C:\\\\Boot\\es-ES\\memtest.exe.mui" (normalized: "c:\\boot\\es-es\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.885] GetLastError () returned 0x5 [0215.885] GetLastError () returned 0x5 [0215.885] SetLastError (dwErrCode=0x5) [0215.885] GetLastError () returned 0x5 [0215.885] SetLastError (dwErrCode=0x5) [0215.885] GetLastError () returned 0x5 [0215.885] SetLastError (dwErrCode=0x5) [0215.885] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef586d37, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0215.885] FindClose (in: hFindFile=0x24e680 | out: hFindFile=0x24e680) returned 1 [0215.885] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234a58 | out: hHeap=0x1f0000) returned 1 [0215.885] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262650 | out: hHeap=0x1f0000) returned 1 [0215.885] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238460 | out: hHeap=0x1f0000) returned 1 [0215.886] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234818 | out: hHeap=0x1f0000) returned 1 [0215.886] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234aa0 [0215.886] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0215.886] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262188 [0215.886] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282a0 [0215.886] FindFirstFileW (in: lpFileName="C:\\\\Boot\\es-MX\\*", lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000c12e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc4853f40, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName=".", cAlternateFileName="")) returned 0x24e940 [0215.886] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0215.886] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238f68 [0215.886] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0215.886] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0215.886] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0215.886] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000c12e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc4853f40, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="..", cAlternateFileName="")) returned 1 [0215.886] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238460 [0215.886] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238be8 [0215.886] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238460 | out: hHeap=0x1f0000) returned 1 [0215.886] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238f68 | out: hHeap=0x1f0000) returned 1 [0215.886] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0215.886] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0215.886] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4853f40, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0215.886] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238460 [0215.886] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0215.886] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234980 [0215.887] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0215.887] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238be8 | out: hHeap=0x1f0000) returned 1 [0215.887] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238460 | out: hHeap=0x1f0000) returned 1 [0215.887] CreateFileW (lpFileName="C:\\\\Boot\\es-MX\\bootmgr.exe.mui" (normalized: "c:\\boot\\es-mx\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.887] GetLastError () returned 0x5 [0215.887] GetLastError () returned 0x5 [0215.887] SetLastError (dwErrCode=0x5) [0215.887] GetLastError () returned 0x5 [0215.887] SetLastError (dwErrCode=0x5) [0215.887] GetLastError () returned 0x5 [0215.887] SetLastError (dwErrCode=0x5) [0215.887] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4853f40, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0215.887] FindClose (in: hFindFile=0x24e940 | out: hFindFile=0x24e940) returned 1 [0215.887] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234980 | out: hHeap=0x1f0000) returned 1 [0215.887] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262188 | out: hHeap=0x1f0000) returned 1 [0215.888] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0215.888] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234aa0 | out: hHeap=0x1f0000) returned 1 [0215.888] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234548 [0215.888] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238460 [0215.888] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262fe0 [0215.888] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282a0 [0215.888] FindFirstFileW (in: lpFileName="C:\\\\Boot\\et-EE\\*", lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc487a0b9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName=".", cAlternateFileName="")) returned 0x24ea80 [0215.888] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0215.888] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239128 [0215.888] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0215.888] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0215.888] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0215.888] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc487a0b9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="..", cAlternateFileName="")) returned 1 [0215.888] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0215.888] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238de0 [0215.888] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0215.888] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239128 | out: hHeap=0x1f0000) returned 1 [0215.888] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0215.888] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0215.888] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12560, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0215.888] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0215.889] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0215.889] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2349c8 [0215.889] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0215.889] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238de0 | out: hHeap=0x1f0000) returned 1 [0215.889] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0215.889] CreateFileW (lpFileName="C:\\\\Boot\\et-EE\\bootmgr.exe.mui" (normalized: "c:\\boot\\et-ee\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.889] GetLastError () returned 0x5 [0215.889] GetLastError () returned 0x5 [0215.889] SetLastError (dwErrCode=0x5) [0215.889] GetLastError () returned 0x5 [0215.889] SetLastError (dwErrCode=0x5) [0215.889] GetLastError () returned 0x5 [0215.889] SetLastError (dwErrCode=0x5) [0215.889] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12560, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0215.889] FindClose (in: hFindFile=0x24ea80 | out: hFindFile=0x24ea80) returned 1 [0215.889] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2349c8 | out: hHeap=0x1f0000) returned 1 [0215.889] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262fe0 | out: hHeap=0x1f0000) returned 1 [0215.890] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238460 | out: hHeap=0x1f0000) returned 1 [0215.890] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234548 | out: hHeap=0x1f0000) returned 1 [0215.890] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234980 [0215.890] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0215.890] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262188 [0215.890] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282a0 [0215.890] FindFirstFileW (in: lpFileName="C:\\\\Boot\\fi-FI\\*", lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000cf3a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef59a5b1, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName=".", cAlternateFileName="")) returned 0x24ec40 [0215.890] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238460 [0215.890] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238ef8 [0215.890] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238460 | out: hHeap=0x1f0000) returned 1 [0215.890] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0215.890] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0215.890] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000cf3a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef59a5b1, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="..", cAlternateFileName="")) returned 1 [0215.890] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238460 [0215.890] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238da8 [0215.890] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238460 | out: hHeap=0x1f0000) returned 1 [0215.890] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ef8 | out: hHeap=0x1f0000) returned 1 [0215.890] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0215.890] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0215.890] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2096e751, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0215.890] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238460 [0215.890] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0215.890] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234788 [0215.891] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0215.891] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238da8 | out: hHeap=0x1f0000) returned 1 [0215.891] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238460 | out: hHeap=0x1f0000) returned 1 [0215.891] CreateFileW (lpFileName="C:\\\\Boot\\fi-FI\\bootmgr.exe.mui" (normalized: "c:\\boot\\fi-fi\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.891] GetLastError () returned 0x5 [0215.891] GetLastError () returned 0x5 [0215.891] SetLastError (dwErrCode=0x5) [0215.891] GetLastError () returned 0x5 [0215.891] SetLastError (dwErrCode=0x5) [0215.891] GetLastError () returned 0x5 [0215.891] SetLastError (dwErrCode=0x5) [0215.891] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef59a5b1, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0215.891] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238460 [0215.891] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0215.891] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234a58 [0215.891] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0215.891] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234788 | out: hHeap=0x1f0000) returned 1 [0215.891] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238460 | out: hHeap=0x1f0000) returned 1 [0215.892] CreateFileW (lpFileName="C:\\\\Boot\\fi-FI\\memtest.exe.mui" (normalized: "c:\\boot\\fi-fi\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.892] GetLastError () returned 0x5 [0215.892] GetLastError () returned 0x5 [0215.892] SetLastError (dwErrCode=0x5) [0215.892] GetLastError () returned 0x5 [0215.892] SetLastError (dwErrCode=0x5) [0215.892] GetLastError () returned 0x5 [0215.892] SetLastError (dwErrCode=0x5) [0215.892] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef59a5b1, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0215.892] FindClose (in: hFindFile=0x24ec40 | out: hFindFile=0x24ec40) returned 1 [0215.892] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234a58 | out: hHeap=0x1f0000) returned 1 [0215.892] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262188 | out: hHeap=0x1f0000) returned 1 [0215.892] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0215.892] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234980 | out: hHeap=0x1f0000) returned 1 [0215.892] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234788 [0215.892] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238460 [0215.892] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2634a8 [0215.892] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282a0 [0215.892] FindFirstFileW (in: lpFileName="C:\\\\Boot\\Fonts\\*", lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0109451, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef999ae4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName=".", cAlternateFileName="")) returned 0x24e9c0 [0215.894] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0215.894] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238ec0 [0215.894] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0215.894] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0215.894] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0215.894] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0109451, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef999ae4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="..", cAlternateFileName="")) returned 1 [0215.894] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0215.894] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238d00 [0215.894] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0215.894] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ec0 | out: hHeap=0x1f0000) returned 1 [0215.894] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0215.894] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0215.894] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef782dd9, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x386467, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="chs_boot.ttf", cAlternateFileName="")) returned 1 [0215.894] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0215.894] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0215.894] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234500 [0215.894] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0215.894] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238d00 | out: hHeap=0x1f0000) returned 1 [0215.894] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0215.895] CreateFileW (lpFileName="C:\\\\Boot\\Fonts\\chs_boot.ttf" (normalized: "c:\\boot\\fonts\\chs_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.895] GetLastError () returned 0x5 [0215.895] GetLastError () returned 0x5 [0215.895] SetLastError (dwErrCode=0x5) [0215.895] GetLastError () returned 0x5 [0215.895] SetLastError (dwErrCode=0x5) [0215.895] GetLastError () returned 0x5 [0215.895] SetLastError (dwErrCode=0x5) [0215.895] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4a1dbea, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef81cc08, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x3b2e0a, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="cht_boot.ttf", cAlternateFileName="")) returned 1 [0215.895] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0215.895] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0215.895] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346b0 [0215.895] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0215.895] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234500 | out: hHeap=0x1f0000) returned 1 [0215.895] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0215.896] CreateFileW (lpFileName="C:\\\\Boot\\Fonts\\cht_boot.ttf" (normalized: "c:\\boot\\fonts\\cht_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.897] GetLastError () returned 0x5 [0215.897] GetLastError () returned 0x5 [0215.897] SetLastError (dwErrCode=0x5) [0215.897] GetLastError () returned 0x5 [0215.897] SetLastError (dwErrCode=0x5) [0215.897] GetLastError () returned 0x5 [0215.897] SetLastError (dwErrCode=0x5) [0215.897] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4a902c2, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8771a7, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x1e4d4b, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="jpn_boot.ttf", cAlternateFileName="")) returned 1 [0215.897] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0215.897] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0215.897] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234818 [0215.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0215.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346b0 | out: hHeap=0x1f0000) returned 1 [0215.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0215.897] CreateFileW (lpFileName="C:\\\\Boot\\Fonts\\jpn_boot.ttf" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.899] GetLastError () returned 0x5 [0215.899] GetLastError () returned 0x5 [0215.899] SetLastError (dwErrCode=0x5) [0215.900] GetLastError () returned 0x5 [0215.900] SetLastError (dwErrCode=0x5) [0215.900] GetLastError () returned 0x5 [0215.900] SetLastError (dwErrCode=0x5) [0215.900] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b4eed5, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8c4060, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x243588, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="kor_boot.ttf", cAlternateFileName="")) returned 1 [0215.900] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0215.900] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0215.900] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2344b8 [0215.900] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0215.900] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234818 | out: hHeap=0x1f0000) returned 1 [0215.900] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0215.900] CreateFileW (lpFileName="C:\\\\Boot\\Fonts\\kor_boot.ttf" (normalized: "c:\\boot\\fonts\\kor_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.901] GetLastError () returned 0x5 [0215.901] GetLastError () returned 0x5 [0215.902] SetLastError (dwErrCode=0x5) [0215.902] GetLastError () returned 0x5 [0215.902] SetLastError (dwErrCode=0x5) [0215.902] GetLastError () returned 0x5 [0215.902] SetLastError (dwErrCode=0x5) [0215.902] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b9b37e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8e28b4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2ab6f, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="malgunn_boot.ttf", cAlternateFileName="MALGUN~1.TTF")) returned 1 [0215.902] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282a0 [0215.902] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0215.902] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234500 [0215.902] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0215.902] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2344b8 | out: hHeap=0x1f0000) returned 1 [0215.902] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0215.903] CreateFileW (lpFileName="C:\\\\Boot\\Fonts\\malgunn_boot.ttf" (normalized: "c:\\boot\\fonts\\malgunn_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.903] GetLastError () returned 0x5 [0215.903] GetLastError () returned 0x5 [0215.904] SetLastError (dwErrCode=0x5) [0215.904] GetLastError () returned 0x5 [0215.904] SetLastError (dwErrCode=0x5) [0215.904] GetLastError () returned 0x5 [0215.904] SetLastError (dwErrCode=0x5) [0215.904] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b9b37e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8f4db4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2b506, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="malgun_boot.ttf", cAlternateFileName="MALGUN~2.TTF")) returned 1 [0215.904] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0215.904] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0215.904] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234ae8 [0215.904] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0215.904] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234500 | out: hHeap=0x1f0000) returned 1 [0215.904] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0215.904] CreateFileW (lpFileName="C:\\\\Boot\\Fonts\\malgun_boot.ttf" (normalized: "c:\\boot\\fonts\\malgun_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.905] GetLastError () returned 0x5 [0215.905] GetLastError () returned 0x5 [0215.905] SetLastError (dwErrCode=0x5) [0215.905] GetLastError () returned 0x5 [0215.905] SetLastError (dwErrCode=0x5) [0215.905] GetLastError () returned 0x5 [0215.905] SetLastError (dwErrCode=0x5) [0215.905] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b9b37e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9072c7, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2318a, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="meiryon_boot.ttf", cAlternateFileName="MEIRYO~1.TTF")) returned 1 [0215.906] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282a0 [0215.906] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0215.906] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346b0 [0215.906] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0215.906] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234ae8 | out: hHeap=0x1f0000) returned 1 [0215.906] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0215.906] CreateFileW (lpFileName="C:\\\\Boot\\Fonts\\meiryon_boot.ttf" (normalized: "c:\\boot\\fonts\\meiryon_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.908] GetLastError () returned 0x5 [0215.908] GetLastError () returned 0x5 [0215.909] SetLastError (dwErrCode=0x5) [0215.909] GetLastError () returned 0x5 [0215.909] SetLastError (dwErrCode=0x5) [0215.909] GetLastError () returned 0x5 [0215.909] SetLastError (dwErrCode=0x5) [0215.909] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4bc156a, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef918492, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2380b, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="meiryo_boot.ttf", cAlternateFileName="MEIRYO~2.TTF")) returned 1 [0215.909] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0215.909] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0215.909] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234980 [0215.909] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0215.909] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346b0 | out: hHeap=0x1f0000) returned 1 [0215.909] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0215.910] CreateFileW (lpFileName="C:\\\\Boot\\Fonts\\meiryo_boot.ttf" (normalized: "c:\\boot\\fonts\\meiryo_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.911] GetLastError () returned 0x5 [0215.911] GetLastError () returned 0x5 [0215.911] SetLastError (dwErrCode=0x5) [0215.911] GetLastError () returned 0x5 [0215.911] SetLastError (dwErrCode=0x5) [0215.911] GetLastError () returned 0x5 [0215.911] SetLastError (dwErrCode=0x5) [0215.911] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4bc156a, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef92a947, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x27a1b, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="msjhn_boot.ttf", cAlternateFileName="MSJHN_~1.TTF")) returned 1 [0215.911] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0215.911] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0215.911] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234aa0 [0215.911] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0215.911] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234980 | out: hHeap=0x1f0000) returned 1 [0215.911] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0215.912] CreateFileW (lpFileName="C:\\\\Boot\\Fonts\\msjhn_boot.ttf" (normalized: "c:\\boot\\fonts\\msjhn_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.912] GetLastError () returned 0x5 [0215.912] GetLastError () returned 0x5 [0215.912] SetLastError (dwErrCode=0x5) [0215.912] GetLastError () returned 0x5 [0215.912] SetLastError (dwErrCode=0x5) [0215.912] GetLastError () returned 0x5 [0215.912] SetLastError (dwErrCode=0x5) [0215.912] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef93ce3b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x281fb, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="msjh_boot.ttf", cAlternateFileName="MSJH_B~1.TTF")) returned 1 [0215.912] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0215.912] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0215.912] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234ae8 [0215.912] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0215.912] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234aa0 | out: hHeap=0x1f0000) returned 1 [0215.912] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0215.912] CreateFileW (lpFileName="C:\\\\Boot\\Fonts\\msjh_boot.ttf" (normalized: "c:\\boot\\fonts\\msjh_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.913] GetLastError () returned 0x5 [0215.913] GetLastError () returned 0x5 [0215.913] SetLastError (dwErrCode=0x5) [0215.913] GetLastError () returned 0x5 [0215.913] SetLastError (dwErrCode=0x5) [0215.913] GetLastError () returned 0x5 [0215.913] SetLastError (dwErrCode=0x5) [0215.913] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef94dfcd, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x25b3b, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="msyhn_boot.ttf", cAlternateFileName="MSYHN_~1.TTF")) returned 1 [0215.913] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0215.913] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0215.913] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346b0 [0215.913] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0215.913] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234ae8 | out: hHeap=0x1f0000) returned 1 [0215.913] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0215.913] CreateFileW (lpFileName="C:\\\\Boot\\Fonts\\msyhn_boot.ttf" (normalized: "c:\\boot\\fonts\\msyhn_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.913] GetLastError () returned 0x5 [0215.914] GetLastError () returned 0x5 [0215.914] SetLastError (dwErrCode=0x5) [0215.914] GetLastError () returned 0x5 [0215.914] SetLastError (dwErrCode=0x5) [0215.914] GetLastError () returned 0x5 [0215.914] SetLastError (dwErrCode=0x5) [0215.914] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef95f141, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x26255, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="msyh_boot.ttf", cAlternateFileName="MSYH_B~1.TTF")) returned 1 [0215.914] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0215.914] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0215.914] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234a58 [0215.914] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0215.914] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346b0 | out: hHeap=0x1f0000) returned 1 [0215.914] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0215.914] CreateFileW (lpFileName="C:\\\\Boot\\Fonts\\msyh_boot.ttf" (normalized: "c:\\boot\\fonts\\msyh_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.914] GetLastError () returned 0x5 [0215.914] GetLastError () returned 0x5 [0215.914] SetLastError (dwErrCode=0x5) [0215.914] GetLastError () returned 0x5 [0215.915] SetLastError (dwErrCode=0x5) [0215.915] GetLastError () returned 0x5 [0215.915] SetLastError (dwErrCode=0x5) [0215.915] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef96ef3e, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xaf3b, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="segmono_boot.ttf", cAlternateFileName="SEGMON~1.TTF")) returned 1 [0215.915] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282a0 [0215.915] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0215.915] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234aa0 [0215.915] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0215.915] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234a58 | out: hHeap=0x1f0000) returned 1 [0215.915] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0215.915] CreateFileW (lpFileName="C:\\\\Boot\\Fonts\\segmono_boot.ttf" (normalized: "c:\\boot\\fonts\\segmono_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.915] GetLastError () returned 0x5 [0215.915] GetLastError () returned 0x5 [0215.915] SetLastError (dwErrCode=0x5) [0215.915] GetLastError () returned 0x5 [0215.915] SetLastError (dwErrCode=0x5) [0215.915] GetLastError () returned 0x5 [0215.916] SetLastError (dwErrCode=0x5) [0215.916] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c0da69, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef97d9ab, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x14f66, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="segoen_slboot.ttf", cAlternateFileName="SEGOEN~1.TTF")) returned 1 [0215.916] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282a0 [0215.916] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0215.916] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c8b8 [0215.916] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0215.916] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234aa0 | out: hHeap=0x1f0000) returned 1 [0215.916] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0215.916] CreateFileW (lpFileName="C:\\\\Boot\\Fonts\\segoen_slboot.ttf" (normalized: "c:\\boot\\fonts\\segoen_slboot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.916] GetLastError () returned 0x5 [0215.916] GetLastError () returned 0x5 [0215.916] SetLastError (dwErrCode=0x5) [0215.916] GetLastError () returned 0x5 [0215.916] SetLastError (dwErrCode=0x5) [0215.916] GetLastError () returned 0x5 [0215.916] SetLastError (dwErrCode=0x5) [0215.917] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef98c419, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x150a2, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="segoe_slboot.ttf", cAlternateFileName="SEGOE_~1.TTF")) returned 1 [0215.917] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282a0 [0215.917] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0215.917] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2348f0 [0215.917] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0215.917] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0215.917] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0215.917] CreateFileW (lpFileName="C:\\\\Boot\\Fonts\\segoe_slboot.ttf" (normalized: "c:\\boot\\fonts\\segoe_slboot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.917] GetLastError () returned 0x5 [0215.917] GetLastError () returned 0x5 [0215.917] SetLastError (dwErrCode=0x5) [0215.917] GetLastError () returned 0x5 [0215.918] SetLastError (dwErrCode=0x5) [0215.918] GetLastError () returned 0x5 [0215.918] SetLastError (dwErrCode=0x5) [0215.918] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef999ae4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xbfc3, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 1 [0215.918] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0215.918] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0215.918] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234548 [0215.918] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0215.918] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2348f0 | out: hHeap=0x1f0000) returned 1 [0215.918] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0215.918] CreateFileW (lpFileName="C:\\\\Boot\\Fonts\\wgl4_boot.ttf" (normalized: "c:\\boot\\fonts\\wgl4_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.918] GetLastError () returned 0x5 [0215.919] GetLastError () returned 0x5 [0215.919] SetLastError (dwErrCode=0x5) [0215.919] GetLastError () returned 0x5 [0215.919] SetLastError (dwErrCode=0x5) [0215.919] GetLastError () returned 0x5 [0215.919] SetLastError (dwErrCode=0x5) [0215.919] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef999ae4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xbfc3, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 0 [0215.919] FindClose (in: hFindFile=0x24e9c0 | out: hFindFile=0x24e9c0) returned 1 [0215.920] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234548 | out: hHeap=0x1f0000) returned 1 [0215.920] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2634a8 | out: hHeap=0x1f0000) returned 1 [0215.920] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238460 | out: hHeap=0x1f0000) returned 1 [0215.920] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234788 | out: hHeap=0x1f0000) returned 1 [0215.920] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234980 [0215.920] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0215.920] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x263178 [0215.920] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282a0 [0215.920] FindFirstFileW (in: lpFileName="C:\\\\Boot\\fr-CA\\*", lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName=".", cAlternateFileName="")) returned 0x24e8c0 [0215.920] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238460 [0215.920] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239048 [0215.920] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238460 | out: hHeap=0x1f0000) returned 1 [0215.921] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0215.921] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0215.921] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="..", cAlternateFileName="")) returned 1 [0215.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238460 [0215.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238be8 [0215.921] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238460 | out: hHeap=0x1f0000) returned 1 [0215.921] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239048 | out: hHeap=0x1f0000) returned 1 [0215.921] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0215.921] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0215.921] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13560, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0215.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238460 [0215.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0215.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2349c8 [0215.921] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0215.921] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238be8 | out: hHeap=0x1f0000) returned 1 [0215.921] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238460 | out: hHeap=0x1f0000) returned 1 [0215.922] CreateFileW (lpFileName="C:\\\\Boot\\fr-CA\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-ca\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.922] GetLastError () returned 0x5 [0215.922] GetLastError () returned 0x5 [0215.922] SetLastError (dwErrCode=0x5) [0215.922] GetLastError () returned 0x5 [0215.922] SetLastError (dwErrCode=0x5) [0215.922] GetLastError () returned 0x5 [0215.922] SetLastError (dwErrCode=0x5) [0215.922] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13560, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0215.922] FindClose (in: hFindFile=0x24e8c0 | out: hFindFile=0x24e8c0) returned 1 [0215.922] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2349c8 | out: hHeap=0x1f0000) returned 1 [0215.922] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263178 | out: hHeap=0x1f0000) returned 1 [0215.922] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0215.922] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234980 | out: hHeap=0x1f0000) returned 1 [0215.922] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234a58 [0215.922] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0215.922] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2634a8 [0215.922] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282a0 [0215.923] FindFirstFileW (in: lpFileName="C:\\\\Boot\\fr-FR\\*", lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010bc12, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ade2b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName=".", cAlternateFileName="")) returned 0x24ea80 [0215.923] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238460 [0215.923] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238e50 [0215.923] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238460 | out: hHeap=0x1f0000) returned 1 [0215.923] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0215.923] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0215.923] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010bc12, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ade2b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="..", cAlternateFileName="")) returned 1 [0215.923] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238460 [0215.923] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238da8 [0215.923] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238460 | out: hHeap=0x1f0000) returned 1 [0215.923] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238e50 | out: hHeap=0x1f0000) returned 1 [0215.923] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0215.923] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0215.923] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2096e751, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13558, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0215.923] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238460 [0215.923] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0215.923] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234500 [0215.923] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0215.923] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238da8 | out: hHeap=0x1f0000) returned 1 [0215.923] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238460 | out: hHeap=0x1f0000) returned 1 [0215.924] CreateFileW (lpFileName="C:\\\\Boot\\fr-FR\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-fr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.924] GetLastError () returned 0x5 [0215.924] GetLastError () returned 0x5 [0215.924] SetLastError (dwErrCode=0x5) [0215.924] GetLastError () returned 0x5 [0215.924] SetLastError (dwErrCode=0x5) [0215.924] GetLastError () returned 0x5 [0215.924] SetLastError (dwErrCode=0x5) [0215.924] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5ade2b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0215.924] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238460 [0215.924] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0215.924] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234ae8 [0215.924] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0215.924] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234500 | out: hHeap=0x1f0000) returned 1 [0215.924] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238460 | out: hHeap=0x1f0000) returned 1 [0215.924] CreateFileW (lpFileName="C:\\\\Boot\\fr-FR\\memtest.exe.mui" (normalized: "c:\\boot\\fr-fr\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0215.925] GetLastError () returned 0x5 [0215.925] GetLastError () returned 0x5 [0216.040] SetLastError (dwErrCode=0x5) [0216.040] GetLastError () returned 0x5 [0216.040] SetLastError (dwErrCode=0x5) [0216.040] GetLastError () returned 0x5 [0216.040] SetLastError (dwErrCode=0x5) [0216.274] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5ade2b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0216.316] FindClose (in: hFindFile=0x24ea80 | out: hFindFile=0x24ea80) returned 1 [0216.316] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234ae8 | out: hHeap=0x1f0000) returned 1 [0216.316] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2634a8 | out: hHeap=0x1f0000) returned 1 [0216.316] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0216.316] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234a58 | out: hHeap=0x1f0000) returned 1 [0216.316] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2347d0 [0216.316] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0216.316] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262188 [0216.317] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x230fc8 [0216.317] FindFirstFileW (in: lpFileName="C:\\\\Boot\\hr-HR\\*", lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName=".", cAlternateFileName="")) returned 0x24eb00 [0216.317] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238550 [0216.317] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x231000 [0216.317] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238550 | out: hHeap=0x1f0000) returned 1 [0216.317] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230fc8 | out: hHeap=0x1f0000) returned 1 [0216.317] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0216.317] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="..", cAlternateFileName="")) returned 1 [0216.318] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238550 [0216.318] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x230fc8 [0216.318] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238550 | out: hHeap=0x1f0000) returned 1 [0216.318] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x231000 | out: hHeap=0x1f0000) returned 1 [0216.318] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0216.318] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0216.318] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0216.318] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238500 [0216.318] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238550 [0216.318] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2348f0 [0216.318] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238550 | out: hHeap=0x1f0000) returned 1 [0216.318] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230fc8 | out: hHeap=0x1f0000) returned 1 [0216.318] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238500 | out: hHeap=0x1f0000) returned 1 [0216.319] CreateFileW (lpFileName="C:\\\\Boot\\hr-HR\\bootmgr.exe.mui" (normalized: "c:\\boot\\hr-hr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0216.319] GetLastError () returned 0x5 [0216.319] GetLastError () returned 0x5 [0216.319] SetLastError (dwErrCode=0x5) [0216.319] GetLastError () returned 0x5 [0216.319] SetLastError (dwErrCode=0x5) [0216.320] GetLastError () returned 0x5 [0216.320] SetLastError (dwErrCode=0x5) [0216.320] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0216.320] FindClose (in: hFindFile=0x24eb00 | out: hFindFile=0x24eb00) returned 1 [0216.320] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2348f0 | out: hHeap=0x1f0000) returned 1 [0216.320] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262188 | out: hHeap=0x1f0000) returned 1 [0216.320] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0216.321] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2347d0 | out: hHeap=0x1f0000) returned 1 [0216.321] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2348f0 [0216.321] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0216.321] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2617f8 [0216.321] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x231000 [0216.321] FindFirstFileW (in: lpFileName="C:\\\\Boot\\hu-HU\\*", lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010c5ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5c171b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName=".", cAlternateFileName="")) returned 0x24eb40 [0216.321] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2386b8 [0216.321] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x230fc8 [0216.322] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2386b8 | out: hHeap=0x1f0000) returned 1 [0216.322] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x231000 | out: hHeap=0x1f0000) returned 1 [0216.322] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0216.322] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010c5ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5c171b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="..", cAlternateFileName="")) returned 1 [0216.322] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238668 [0216.322] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x231000 [0216.322] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238668 | out: hHeap=0x1f0000) returned 1 [0216.322] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230fc8 | out: hHeap=0x1f0000) returned 1 [0216.322] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0216.322] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0216.322] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13360, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0216.322] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238550 [0216.322] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238758 [0216.322] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234b30 [0216.323] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238758 | out: hHeap=0x1f0000) returned 1 [0216.323] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x231000 | out: hHeap=0x1f0000) returned 1 [0216.323] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238550 | out: hHeap=0x1f0000) returned 1 [0216.323] CreateFileW (lpFileName="C:\\\\Boot\\hu-HU\\bootmgr.exe.mui" (normalized: "c:\\boot\\hu-hu\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0216.323] GetLastError () returned 0x5 [0216.323] GetLastError () returned 0x5 [0216.323] SetLastError (dwErrCode=0x5) [0216.323] GetLastError () returned 0x5 [0216.323] SetLastError (dwErrCode=0x5) [0216.324] GetLastError () returned 0x5 [0216.324] SetLastError (dwErrCode=0x5) [0216.324] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5c171b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39d81d8, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb398, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0216.324] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238758 [0216.324] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238640 [0216.324] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2347d0 [0216.324] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238640 | out: hHeap=0x1f0000) returned 1 [0216.324] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b30 | out: hHeap=0x1f0000) returned 1 [0216.324] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238758 | out: hHeap=0x1f0000) returned 1 [0216.325] CreateFileW (lpFileName="C:\\\\Boot\\hu-HU\\memtest.exe.mui" (normalized: "c:\\boot\\hu-hu\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0216.325] GetLastError () returned 0x5 [0216.325] GetLastError () returned 0x5 [0216.325] SetLastError (dwErrCode=0x5) [0216.325] GetLastError () returned 0x5 [0216.325] SetLastError (dwErrCode=0x5) [0216.325] GetLastError () returned 0x5 [0216.326] SetLastError (dwErrCode=0x5) [0216.326] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5c171b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39d81d8, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb398, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0216.326] FindClose (in: hFindFile=0x24eb40 | out: hFindFile=0x24eb40) returned 1 [0216.326] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2347d0 | out: hHeap=0x1f0000) returned 1 [0216.326] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2617f8 | out: hHeap=0x1f0000) returned 1 [0216.326] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0216.327] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2348f0 | out: hHeap=0x1f0000) returned 1 [0216.327] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2348f0 [0216.327] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0216.327] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262fe0 [0216.327] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x230fc8 [0216.327] FindFirstFileW (in: lpFileName="C:\\\\Boot\\it-IT\\*", lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010ccad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5d8ab4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName=".", cAlternateFileName="")) returned 0x24e900 [0216.327] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384d8 [0216.327] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x231000 [0216.328] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384d8 | out: hHeap=0x1f0000) returned 1 [0216.328] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230fc8 | out: hHeap=0x1f0000) returned 1 [0216.328] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0216.328] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010ccad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5d8ab4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="..", cAlternateFileName="")) returned 1 [0216.328] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238758 [0216.328] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x230fc8 [0216.328] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238758 | out: hHeap=0x1f0000) returned 1 [0216.328] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x231000 | out: hHeap=0x1f0000) returned 1 [0216.328] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0216.328] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0216.328] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d58, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0216.329] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238640 [0216.329] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238758 [0216.329] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2344b8 [0216.329] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238758 | out: hHeap=0x1f0000) returned 1 [0216.329] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230fc8 | out: hHeap=0x1f0000) returned 1 [0216.329] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238640 | out: hHeap=0x1f0000) returned 1 [0216.330] CreateFileW (lpFileName="C:\\\\Boot\\it-IT\\bootmgr.exe.mui" (normalized: "c:\\boot\\it-it\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0216.330] GetLastError () returned 0x5 [0216.330] GetLastError () returned 0x5 [0216.330] SetLastError (dwErrCode=0x5) [0216.330] GetLastError () returned 0x5 [0216.330] SetLastError (dwErrCode=0x5) [0216.330] GetLastError () returned 0x5 [0216.330] SetLastError (dwErrCode=0x5) [0216.332] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5d8ab4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf30285aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0216.332] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384d8 [0216.332] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238500 [0216.333] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234ae8 [0216.333] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238500 | out: hHeap=0x1f0000) returned 1 [0216.333] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2344b8 | out: hHeap=0x1f0000) returned 1 [0216.333] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384d8 | out: hHeap=0x1f0000) returned 1 [0216.333] CreateFileW (lpFileName="C:\\\\Boot\\it-IT\\memtest.exe.mui" (normalized: "c:\\boot\\it-it\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0216.334] GetLastError () returned 0x5 [0216.334] GetLastError () returned 0x5 [0216.334] SetLastError (dwErrCode=0x5) [0216.334] GetLastError () returned 0x5 [0216.334] SetLastError (dwErrCode=0x5) [0216.334] GetLastError () returned 0x5 [0216.335] SetLastError (dwErrCode=0x5) [0216.335] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5d8ab4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf30285aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0216.335] FindClose (in: hFindFile=0x24e900 | out: hFindFile=0x24e900) returned 1 [0216.335] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234ae8 | out: hHeap=0x1f0000) returned 1 [0216.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262fe0 | out: hHeap=0x1f0000) returned 1 [0216.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0216.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2348f0 | out: hHeap=0x1f0000) returned 1 [0216.336] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2347d0 [0216.336] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0216.336] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2634a8 [0216.336] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x230fc8 [0216.336] FindFirstFileW (in: lpFileName="C:\\\\Boot\\ja-JP\\*", lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010d0c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ed6c6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName=".", cAlternateFileName="")) returned 0x24e900 [0216.337] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238578 [0216.337] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x231000 [0216.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238578 | out: hHeap=0x1f0000) returned 1 [0216.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230fc8 | out: hHeap=0x1f0000) returned 1 [0216.337] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0216.337] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010d0c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ed6c6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="..", cAlternateFileName="")) returned 1 [0216.337] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238550 [0216.337] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x230fc8 [0216.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238550 | out: hHeap=0x1f0000) returned 1 [0216.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x231000 | out: hHeap=0x1f0000) returned 1 [0216.338] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0216.338] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0216.338] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48c6596, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21212f9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x10760, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0216.338] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238578 [0216.338] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238640 [0216.338] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2349c8 [0216.339] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238640 | out: hHeap=0x1f0000) returned 1 [0216.339] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230fc8 | out: hHeap=0x1f0000) returned 1 [0216.339] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238578 | out: hHeap=0x1f0000) returned 1 [0216.339] CreateFileW (lpFileName="C:\\\\Boot\\ja-JP\\bootmgr.exe.mui" (normalized: "c:\\boot\\ja-jp\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0216.340] GetLastError () returned 0x5 [0216.340] GetLastError () returned 0x5 [0216.340] SetLastError (dwErrCode=0x5) [0216.340] GetLastError () returned 0x5 [0216.340] SetLastError (dwErrCode=0x5) [0216.341] GetLastError () returned 0x5 [0216.341] SetLastError (dwErrCode=0x5) [0216.341] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5ed6c6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf300233f, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa798, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0216.341] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238550 [0216.341] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2386b8 [0216.341] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234818 [0216.342] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2386b8 | out: hHeap=0x1f0000) returned 1 [0216.342] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2349c8 | out: hHeap=0x1f0000) returned 1 [0216.342] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238550 | out: hHeap=0x1f0000) returned 1 [0216.343] CreateFileW (lpFileName="C:\\\\Boot\\ja-JP\\memtest.exe.mui" (normalized: "c:\\boot\\ja-jp\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0216.343] GetLastError () returned 0x5 [0216.343] GetLastError () returned 0x5 [0216.343] SetLastError (dwErrCode=0x5) [0216.343] GetLastError () returned 0x5 [0216.343] SetLastError (dwErrCode=0x5) [0216.344] GetLastError () returned 0x5 [0216.344] SetLastError (dwErrCode=0x5) [0216.344] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5ed6c6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf300233f, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa798, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0216.344] FindClose (in: hFindFile=0x24e900 | out: hFindFile=0x24e900) returned 1 [0216.344] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234818 | out: hHeap=0x1f0000) returned 1 [0216.345] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2634a8 | out: hHeap=0x1f0000) returned 1 [0216.345] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0216.345] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2347d0 | out: hHeap=0x1f0000) returned 1 [0216.345] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2347d0 [0216.345] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0216.345] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2617f8 [0216.345] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x230fc8 [0216.345] FindFirstFileW (in: lpFileName="C:\\\\Boot\\ko-KR\\*", lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef5fc210, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName=".", cAlternateFileName="")) returned 0x24e5c0 [0216.346] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238640 [0216.346] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x231000 [0216.346] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238640 | out: hHeap=0x1f0000) returned 1 [0216.346] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230fc8 | out: hHeap=0x1f0000) returned 1 [0216.346] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0216.346] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef5fc210, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="..", cAlternateFileName="")) returned 1 [0216.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238708 [0216.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x230fc8 [0216.347] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238708 | out: hHeap=0x1f0000) returned 1 [0216.348] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x231000 | out: hHeap=0x1f0000) returned 1 [0216.348] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0216.348] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0216.348] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x211c6af1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x10560, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0216.348] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238758 [0216.348] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238780 [0216.348] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234818 [0216.348] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238780 | out: hHeap=0x1f0000) returned 1 [0216.348] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230fc8 | out: hHeap=0x1f0000) returned 1 [0216.348] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238758 | out: hHeap=0x1f0000) returned 1 [0216.349] CreateFileW (lpFileName="C:\\\\Boot\\ko-KR\\bootmgr.exe.mui" (normalized: "c:\\boot\\ko-kr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0216.349] GetLastError () returned 0x5 [0216.349] GetLastError () returned 0x5 [0216.349] SetLastError (dwErrCode=0x5) [0216.350] GetLastError () returned 0x5 [0216.350] SetLastError (dwErrCode=0x5) [0216.350] GetLastError () returned 0x5 [0216.350] SetLastError (dwErrCode=0x5) [0216.350] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fdc0d7, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa7a0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0216.350] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385c8 [0216.350] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238578 [0216.350] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2348f0 [0216.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238578 | out: hHeap=0x1f0000) returned 1 [0216.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234818 | out: hHeap=0x1f0000) returned 1 [0216.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385c8 | out: hHeap=0x1f0000) returned 1 [0216.351] CreateFileW (lpFileName="C:\\\\Boot\\ko-KR\\memtest.exe.mui" (normalized: "c:\\boot\\ko-kr\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0216.352] GetLastError () returned 0x5 [0216.352] GetLastError () returned 0x5 [0216.352] SetLastError (dwErrCode=0x5) [0216.352] GetLastError () returned 0x5 [0216.352] SetLastError (dwErrCode=0x5) [0216.352] GetLastError () returned 0x5 [0216.352] SetLastError (dwErrCode=0x5) [0216.353] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fdc0d7, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa7a0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0216.353] FindClose (in: hFindFile=0x24e5c0 | out: hFindFile=0x24e5c0) returned 1 [0216.353] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2348f0 | out: hHeap=0x1f0000) returned 1 [0216.353] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2617f8 | out: hHeap=0x1f0000) returned 1 [0216.353] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0216.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2347d0 | out: hHeap=0x1f0000) returned 1 [0216.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2347d0 [0216.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0216.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262650 [0216.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x230fc8 [0216.354] FindFirstFileW (in: lpFileName="C:\\\\Boot\\lt-LT\\*", lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName=".", cAlternateFileName="")) returned 0x24ea80 [0216.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238668 [0216.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x231000 [0216.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238668 | out: hHeap=0x1f0000) returned 1 [0216.355] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230fc8 | out: hHeap=0x1f0000) returned 1 [0216.355] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0216.355] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="..", cAlternateFileName="")) returned 1 [0216.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2386b8 [0216.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x230fc8 [0216.355] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2386b8 | out: hHeap=0x1f0000) returned 1 [0216.355] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x231000 | out: hHeap=0x1f0000) returned 1 [0216.355] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0216.355] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0216.356] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2117a634, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12760, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0216.356] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2386b8 [0216.356] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238550 [0216.356] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234a58 [0216.356] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238550 | out: hHeap=0x1f0000) returned 1 [0216.356] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230fc8 | out: hHeap=0x1f0000) returned 1 [0216.356] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2386b8 | out: hHeap=0x1f0000) returned 1 [0216.357] CreateFileW (lpFileName="C:\\\\Boot\\lt-LT\\bootmgr.exe.mui" (normalized: "c:\\boot\\lt-lt\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0216.357] GetLastError () returned 0x5 [0216.357] GetLastError () returned 0x5 [0216.357] SetLastError (dwErrCode=0x5) [0216.357] GetLastError () returned 0x5 [0216.357] SetLastError (dwErrCode=0x5) [0216.357] GetLastError () returned 0x5 [0216.357] SetLastError (dwErrCode=0x5) [0216.358] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2117a634, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12760, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0216.358] FindClose (in: hFindFile=0x24ea80 | out: hFindFile=0x24ea80) returned 1 [0216.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234a58 | out: hHeap=0x1f0000) returned 1 [0216.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262650 | out: hHeap=0x1f0000) returned 1 [0216.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0216.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2347d0 | out: hHeap=0x1f0000) returned 1 [0216.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2348f0 [0216.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0216.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262fe0 [0216.359] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x230fc8 [0216.359] FindFirstFileW (in: lpFileName="C:\\\\Boot\\lv-LV\\*", lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName=".", cAlternateFileName="")) returned 0x24eb00 [0216.359] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238708 [0216.359] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x231000 [0216.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238708 | out: hHeap=0x1f0000) returned 1 [0216.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230fc8 | out: hHeap=0x1f0000) returned 1 [0216.359] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0216.359] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="..", cAlternateFileName="")) returned 1 [0216.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385c8 [0216.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x230fc8 [0216.360] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385c8 | out: hHeap=0x1f0000) returned 1 [0216.360] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x231000 | out: hHeap=0x1f0000) returned 1 [0216.360] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0216.360] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0216.360] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2117a634, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12758, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0216.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238640 [0216.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238708 [0216.361] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234500 [0216.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238708 | out: hHeap=0x1f0000) returned 1 [0216.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230fc8 | out: hHeap=0x1f0000) returned 1 [0216.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238640 | out: hHeap=0x1f0000) returned 1 [0216.361] CreateFileW (lpFileName="C:\\\\Boot\\lv-LV\\bootmgr.exe.mui" (normalized: "c:\\boot\\lv-lv\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0216.362] GetLastError () returned 0x5 [0216.362] GetLastError () returned 0x5 [0216.362] SetLastError (dwErrCode=0x5) [0216.362] GetLastError () returned 0x5 [0216.422] SetLastError (dwErrCode=0x5) [0216.422] GetLastError () returned 0x5 [0216.587] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2117a634, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12758, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0216.587] FindClose (in: hFindFile=0x24eb00 | out: hFindFile=0x24eb00) returned 1 [0216.589] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234500 | out: hHeap=0x1f0000) returned 1 [0216.629] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262fe0 | out: hHeap=0x1f0000) returned 1 [0216.629] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0216.629] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2348f0 | out: hHeap=0x1f0000) returned 1 [0216.630] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2347d0 [0216.630] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b480 [0216.630] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262cb0 [0216.630] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0216.630] FindFirstFileW (in: lpFileName="C:\\\\Boot\\nb-NO\\*", lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e138, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef62cf52, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName=".", cAlternateFileName="")) returned 0x24e8c0 [0216.630] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b7a0 [0216.631] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2253f8 [0216.631] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b7a0 | out: hHeap=0x1f0000) returned 1 [0216.631] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0216.631] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0216.631] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e138, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef62cf52, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="..", cAlternateFileName="")) returned 1 [0216.631] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b4d0 [0216.631] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x225970 [0216.631] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b4d0 | out: hHeap=0x1f0000) returned 1 [0216.631] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2253f8 | out: hHeap=0x1f0000) returned 1 [0216.632] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0216.632] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0216.632] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x211543da, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12760, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0216.632] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b458 [0216.632] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b598 [0216.632] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2349c8 [0216.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b598 | out: hHeap=0x1f0000) returned 1 [0216.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225970 | out: hHeap=0x1f0000) returned 1 [0216.633] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b458 | out: hHeap=0x1f0000) returned 1 [0216.633] CreateFileW (lpFileName="C:\\\\Boot\\nb-NO\\bootmgr.exe.mui" (normalized: "c:\\boot\\nb-no\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0216.633] GetLastError () returned 0x5 [0216.634] GetLastError () returned 0x5 [0216.634] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef62cf52, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fb5e6c, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0216.634] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b7a0 [0216.634] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b7c8 [0216.634] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346f8 [0216.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b7c8 | out: hHeap=0x1f0000) returned 1 [0216.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2349c8 | out: hHeap=0x1f0000) returned 1 [0216.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b7a0 | out: hHeap=0x1f0000) returned 1 [0216.635] CreateFileW (lpFileName="C:\\\\Boot\\nb-NO\\memtest.exe.mui" (normalized: "c:\\boot\\nb-no\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0216.635] GetLastError () returned 0x5 [0216.635] GetLastError () returned 0x5 [0216.635] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef62cf52, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fb5e6c, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0216.636] FindClose (in: hFindFile=0x24e8c0 | out: hFindFile=0x24e8c0) returned 1 [0216.636] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346f8 | out: hHeap=0x1f0000) returned 1 [0216.636] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262cb0 | out: hHeap=0x1f0000) returned 1 [0216.636] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b480 | out: hHeap=0x1f0000) returned 1 [0216.636] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2347d0 | out: hHeap=0x1f0000) returned 1 [0216.636] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234aa0 [0216.636] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b7a0 [0216.636] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262cb0 [0216.636] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0216.637] FindFirstFileW (in: lpFileName="C:\\\\Boot\\nl-NL\\*", lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e4fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6407cf, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName=".", cAlternateFileName="")) returned 0x24e8c0 [0216.637] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b638 [0216.637] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x225970 [0216.637] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b638 | out: hHeap=0x1f0000) returned 1 [0216.637] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0216.637] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0216.637] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e4fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6407cf, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="..", cAlternateFileName="")) returned 1 [0216.637] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b638 [0216.637] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2254d8 [0216.638] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b638 | out: hHeap=0x1f0000) returned 1 [0216.638] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225970 | out: hHeap=0x1f0000) returned 1 [0216.638] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0216.638] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0216.638] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x211543da, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13160, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0216.638] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b4d0 [0216.638] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b638 [0216.638] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2347d0 [0216.638] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b638 | out: hHeap=0x1f0000) returned 1 [0216.638] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2254d8 | out: hHeap=0x1f0000) returned 1 [0216.638] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b4d0 | out: hHeap=0x1f0000) returned 1 [0216.639] CreateFileW (lpFileName="C:\\\\Boot\\nl-NL\\bootmgr.exe.mui" (normalized: "c:\\boot\\nl-nl\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0216.639] GetLastError () returned 0x5 [0216.639] GetLastError () returned 0x5 [0216.639] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6407cf, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fb5e6c, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0216.639] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b7c8 [0216.639] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b458 [0216.640] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234818 [0216.640] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b458 | out: hHeap=0x1f0000) returned 1 [0216.640] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2347d0 | out: hHeap=0x1f0000) returned 1 [0216.640] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b7c8 | out: hHeap=0x1f0000) returned 1 [0216.640] CreateFileW (lpFileName="C:\\\\Boot\\nl-NL\\memtest.exe.mui" (normalized: "c:\\boot\\nl-nl\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0216.640] GetLastError () returned 0x5 [0216.640] GetLastError () returned 0x5 [0216.640] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6407cf, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fb5e6c, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0216.640] FindClose (in: hFindFile=0x24e8c0 | out: hFindFile=0x24e8c0) returned 1 [0216.641] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234818 | out: hHeap=0x1f0000) returned 1 [0216.641] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262cb0 | out: hHeap=0x1f0000) returned 1 [0216.641] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b7a0 | out: hHeap=0x1f0000) returned 1 [0216.641] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234aa0 | out: hHeap=0x1f0000) returned 1 [0216.641] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234548 [0216.641] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b598 [0216.641] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x261b28 [0216.641] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0216.641] FindFirstFileW (in: lpFileName="C:\\\\Boot\\pl-PL\\*", lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef65403a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName=".", cAlternateFileName="")) returned 0x24ed40 [0216.641] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b318 [0216.641] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x225580 [0216.641] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b318 | out: hHeap=0x1f0000) returned 1 [0216.642] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0216.642] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0216.642] FindNextFileW (in: hFindFile=0x24ed40, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef65403a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="..", cAlternateFileName="")) returned 1 [0216.642] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b7a0 [0216.642] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x225778 [0216.642] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b7a0 | out: hHeap=0x1f0000) returned 1 [0216.642] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225580 | out: hHeap=0x1f0000) returned 1 [0216.642] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0216.642] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0216.642] FindNextFileW (in: hFindFile=0x24ed40, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2112e17f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f58, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0216.642] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b7a0 [0216.642] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b458 [0216.643] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234500 [0216.643] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b458 | out: hHeap=0x1f0000) returned 1 [0216.643] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225778 | out: hHeap=0x1f0000) returned 1 [0216.643] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b7a0 | out: hHeap=0x1f0000) returned 1 [0216.643] CreateFileW (lpFileName="C:\\\\Boot\\pl-PL\\bootmgr.exe.mui" (normalized: "c:\\boot\\pl-pl\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0216.644] GetLastError () returned 0x5 [0216.644] GetLastError () returned 0x5 [0216.644] FindNextFileW (in: hFindFile=0x24ed40, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0216.644] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b458 [0216.644] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b7a0 [0216.644] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346b0 [0216.644] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b7a0 | out: hHeap=0x1f0000) returned 1 [0216.644] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234500 | out: hHeap=0x1f0000) returned 1 [0216.644] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b458 | out: hHeap=0x1f0000) returned 1 [0216.645] CreateFileW (lpFileName="C:\\\\Boot\\pl-PL\\memtest.exe.mui" (normalized: "c:\\boot\\pl-pl\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0216.645] GetLastError () returned 0x5 [0216.645] GetLastError () returned 0x5 [0216.645] FindNextFileW (in: hFindFile=0x24ed40, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0216.645] FindClose (in: hFindFile=0x24ed40 | out: hFindFile=0x24ed40) returned 1 [0216.646] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346b0 | out: hHeap=0x1f0000) returned 1 [0216.646] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261b28 | out: hHeap=0x1f0000) returned 1 [0216.646] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b598 | out: hHeap=0x1f0000) returned 1 [0216.646] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234548 | out: hHeap=0x1f0000) returned 1 [0216.646] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234500 [0216.646] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b458 [0216.646] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262650 [0216.646] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0216.646] FindFirstFileW (in: lpFileName="C:\\\\Boot\\pt-BR\\*", lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6678d6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6678d6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName=".", cAlternateFileName="")) returned 0x24ed00 [0216.647] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b480 [0216.647] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x225388 [0216.647] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b480 | out: hHeap=0x1f0000) returned 1 [0216.647] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0216.647] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0216.647] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6678d6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6678d6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="..", cAlternateFileName="")) returned 1 [0216.647] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b4d0 [0216.647] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x225628 [0216.648] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b4d0 | out: hHeap=0x1f0000) returned 1 [0216.648] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225388 | out: hHeap=0x1f0000) returned 1 [0216.648] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0216.648] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0216.648] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2112e17f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0216.648] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b7a0 [0216.648] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b480 [0216.648] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234b30 [0216.648] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b480 | out: hHeap=0x1f0000) returned 1 [0216.648] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225628 | out: hHeap=0x1f0000) returned 1 [0216.649] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b7a0 | out: hHeap=0x1f0000) returned 1 [0216.649] CreateFileW (lpFileName="C:\\\\Boot\\pt-BR\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-br\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0216.649] GetLastError () returned 0x5 [0216.649] GetLastError () returned 0x5 [0216.649] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65dc94, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0216.649] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b7a0 [0216.649] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b7c8 [0216.650] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234aa0 [0216.650] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b7c8 | out: hHeap=0x1f0000) returned 1 [0216.650] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b30 | out: hHeap=0x1f0000) returned 1 [0216.650] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b7a0 | out: hHeap=0x1f0000) returned 1 [0216.650] CreateFileW (lpFileName="C:\\\\Boot\\pt-BR\\memtest.exe.mui" (normalized: "c:\\boot\\pt-br\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0216.650] GetLastError () returned 0x5 [0216.650] GetLastError () returned 0x5 [0216.651] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65dc94, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0216.651] FindClose (in: hFindFile=0x24ed00 | out: hFindFile=0x24ed00) returned 1 [0216.651] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234aa0 | out: hHeap=0x1f0000) returned 1 [0216.651] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262650 | out: hHeap=0x1f0000) returned 1 [0216.651] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b458 | out: hHeap=0x1f0000) returned 1 [0216.651] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234500 | out: hHeap=0x1f0000) returned 1 [0216.651] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234aa0 [0216.651] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b340 [0216.651] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262650 [0216.651] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0216.651] FindFirstFileW (in: lpFileName="C:\\\\Boot\\pt-PT\\*", lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f167, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6714dc, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName=".", cAlternateFileName="")) returned 0x24e8c0 [0216.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b598 [0216.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x225708 [0216.652] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b598 | out: hHeap=0x1f0000) returned 1 [0216.652] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0216.652] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0216.652] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f167, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6714dc, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="..", cAlternateFileName="")) returned 1 [0216.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b458 [0216.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2255b8 [0216.652] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b458 | out: hHeap=0x1f0000) returned 1 [0216.652] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225708 | out: hHeap=0x1f0000) returned 1 [0216.652] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0216.653] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0216.653] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2112e17f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0216.653] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b7a0 [0216.653] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b458 [0216.653] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234ae8 [0216.653] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b458 | out: hHeap=0x1f0000) returned 1 [0216.653] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2255b8 | out: hHeap=0x1f0000) returned 1 [0216.653] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b7a0 | out: hHeap=0x1f0000) returned 1 [0216.653] CreateFileW (lpFileName="C:\\\\Boot\\pt-PT\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-pt\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0216.653] GetLastError () returned 0x5 [0216.654] GetLastError () returned 0x5 [0216.654] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6714dc, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0216.654] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b458 [0216.654] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b318 [0216.654] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234b30 [0216.654] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b318 | out: hHeap=0x1f0000) returned 1 [0216.654] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234ae8 | out: hHeap=0x1f0000) returned 1 [0216.654] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b458 | out: hHeap=0x1f0000) returned 1 [0216.655] CreateFileW (lpFileName="C:\\\\Boot\\pt-PT\\memtest.exe.mui" (normalized: "c:\\boot\\pt-pt\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0216.655] GetLastError () returned 0x5 [0216.655] GetLastError () returned 0x5 [0216.655] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6714dc, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0216.655] FindClose (in: hFindFile=0x24e8c0 | out: hFindFile=0x24e8c0) returned 1 [0216.655] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b30 | out: hHeap=0x1f0000) returned 1 [0216.655] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262650 | out: hHeap=0x1f0000) returned 1 [0216.655] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b340 | out: hHeap=0x1f0000) returned 1 [0216.655] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234aa0 | out: hHeap=0x1f0000) returned 1 [0216.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234548 [0216.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b598 [0216.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262cb0 [0216.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0216.656] FindFirstFileW (in: lpFileName="C:\\\\Boot\\qps-ploc\\*", lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f640, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef684d85, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName=".", cAlternateFileName="")) returned 0x24e8c0 [0216.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x225740 [0216.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0216.656] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0216.656] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f640, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef684d85, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="..", cAlternateFileName="")) returned 1 [0216.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2253c0 [0216.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225740 | out: hHeap=0x1f0000) returned 1 [0216.656] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0216.656] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0216.656] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12160, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0216.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b458 [0216.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x225858 [0216.657] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c8b8 [0216.657] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225858 | out: hHeap=0x1f0000) returned 1 [0216.657] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2253c0 | out: hHeap=0x1f0000) returned 1 [0216.657] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b458 | out: hHeap=0x1f0000) returned 1 [0216.657] CreateFileW (lpFileName="C:\\\\Boot\\qps-ploc\\bootmgr.exe.mui" (normalized: "c:\\boot\\qps-ploc\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0216.657] GetLastError () returned 0x5 [0216.658] GetLastError () returned 0x5 [0216.658] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef684d85, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfbd1a998, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0xd398, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0216.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b458 [0216.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0216.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x225818 [0216.658] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0216.658] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0216.658] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b458 | out: hHeap=0x1f0000) returned 1 [0216.659] CreateFileW (lpFileName="C:\\\\Boot\\qps-ploc\\memtest.exe.mui" (normalized: "c:\\boot\\qps-ploc\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0216.659] GetLastError () returned 0x5 [0216.659] GetLastError () returned 0x5 [0216.659] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef684d85, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfbd1a998, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0xd398, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0216.659] FindClose (in: hFindFile=0x24e8c0 | out: hFindFile=0x24e8c0) returned 1 [0216.660] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225818 | out: hHeap=0x1f0000) returned 1 [0216.660] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262cb0 | out: hHeap=0x1f0000) returned 1 [0216.660] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b598 | out: hHeap=0x1f0000) returned 1 [0216.660] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234548 | out: hHeap=0x1f0000) returned 1 [0216.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234548 [0216.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b318 [0216.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2634a8 [0216.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0216.660] FindFirstFileW (in: lpFileName="C:\\\\Boot\\Resources\\*", lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ab61e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9abff9, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName=".", cAlternateFileName="")) returned 0x24ec80 [0216.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2256d0 [0216.660] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0216.660] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0216.660] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ab61e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9abff9, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="..", cAlternateFileName="")) returned 1 [0216.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x225430 [0216.661] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2256d0 | out: hHeap=0x1f0000) returned 1 [0216.661] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0216.661] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0216.661] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9abff9, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef597530, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x169a0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="bootres.dll", cAlternateFileName="")) returned 1 [0216.661] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b340 [0216.661] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x225468 [0216.661] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x226238 [0216.661] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225468 | out: hHeap=0x1f0000) returned 1 [0216.661] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225430 | out: hHeap=0x1f0000) returned 1 [0216.661] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b340 | out: hHeap=0x1f0000) returned 1 [0216.661] CreateFileW (lpFileName="C:\\\\Boot\\Resources\\bootres.dll" (normalized: "c:\\boot\\resources\\bootres.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0216.661] GetLastError () returned 0x5 [0216.662] GetLastError () returned 0x5 [0216.662] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9baa67, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="en-US", cAlternateFileName="")) returned 1 [0216.662] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0216.662] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x226008 [0216.662] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0216.662] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226238 | out: hHeap=0x1f0000) returned 1 [0216.662] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0216.662] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0216.662] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x205290 [0216.662] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234980 [0216.662] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9baa67, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="en-US", cAlternateFileName="")) returned 0 [0216.662] FindClose (in: hFindFile=0x24ec80 | out: hFindFile=0x24ec80) returned 1 [0216.663] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234b30 [0216.663] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b340 [0216.663] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262650 [0216.663] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2349c8 [0216.663] FindFirstFileW (in: lpFileName="C:\\\\Boot\\Resources\\en-US\\*", lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9baa67, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24ea80 [0216.663] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234500 [0216.663] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2349c8 | out: hHeap=0x1f0000) returned 1 [0216.663] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0216.663] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9baa67, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0216.663] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234aa0 [0216.664] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234500 | out: hHeap=0x1f0000) returned 1 [0216.664] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0216.664] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0216.664] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9baa67, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0x31acad58, ftLastWriteTime.dwHighDateTime=0x1d2a030, nFileSizeHigh=0x0, nFileSizeLow=0x2fa0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="bootres.dll.mui", cAlternateFileName="BOOTRE~1.MUI")) returned 1 [0216.664] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b7a0 [0216.664] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346b0 [0216.664] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235700 [0216.664] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346b0 | out: hHeap=0x1f0000) returned 1 [0216.664] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234aa0 | out: hHeap=0x1f0000) returned 1 [0216.664] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b7a0 | out: hHeap=0x1f0000) returned 1 [0216.665] CreateFileW (lpFileName="C:\\\\Boot\\Resources\\en-US\\bootres.dll.mui" (normalized: "c:\\boot\\resources\\en-us\\bootres.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e690, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0216.665] GetLastError () returned 0x5 [0216.665] GetLastError () returned 0x5 [0216.665] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9baa67, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0x31acad58, ftLastWriteTime.dwHighDateTime=0x1d2a030, nFileSizeHigh=0x0, nFileSizeLow=0x2fa0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="bootres.dll.mui", cAlternateFileName="BOOTRE~1.MUI")) returned 0 [0216.665] FindClose (in: hFindFile=0x24ea80 | out: hFindFile=0x24ea80) returned 1 [0216.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0216.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262650 | out: hHeap=0x1f0000) returned 1 [0216.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b340 | out: hHeap=0x1f0000) returned 1 [0216.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b30 | out: hHeap=0x1f0000) returned 1 [0216.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226008 | out: hHeap=0x1f0000) returned 1 [0216.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234980 | out: hHeap=0x1f0000) returned 1 [0216.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205290 | out: hHeap=0x1f0000) returned 1 [0216.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2634a8 | out: hHeap=0x1f0000) returned 1 [0216.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b318 | out: hHeap=0x1f0000) returned 1 [0216.667] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234548 | out: hHeap=0x1f0000) returned 1 [0216.667] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2347d0 [0216.667] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b458 [0216.667] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262650 [0216.667] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0216.667] FindFirstFileW (in: lpFileName="C:\\\\Boot\\ro-RO\\*", lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName=".", cAlternateFileName="")) returned 0x24e9c0 [0216.667] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b480 [0216.667] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2316c0 [0216.667] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b480 | out: hHeap=0x1f0000) returned 1 [0216.667] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0216.668] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0216.668] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="..", cAlternateFileName="")) returned 1 [0216.668] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b7a0 [0216.668] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x231618 [0216.668] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b7a0 | out: hHeap=0x1f0000) returned 1 [0216.668] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2316c0 | out: hHeap=0x1f0000) returned 1 [0216.668] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0216.668] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0216.668] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12960, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0216.668] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b7a0 [0216.668] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b480 [0216.669] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346b0 [0216.669] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b480 | out: hHeap=0x1f0000) returned 1 [0216.669] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x231618 | out: hHeap=0x1f0000) returned 1 [0216.669] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b7a0 | out: hHeap=0x1f0000) returned 1 [0216.669] CreateFileW (lpFileName="C:\\\\Boot\\ro-RO\\bootmgr.exe.mui" (normalized: "c:\\boot\\ro-ro\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0216.670] GetLastError () returned 0x5 [0216.670] GetLastError () returned 0x5 [0216.670] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12960, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0216.670] FindClose (in: hFindFile=0x24e9c0 | out: hFindFile=0x24e9c0) returned 1 [0216.670] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346b0 | out: hHeap=0x1f0000) returned 1 [0216.670] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262650 | out: hHeap=0x1f0000) returned 1 [0216.671] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b458 | out: hHeap=0x1f0000) returned 1 [0216.671] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2347d0 | out: hHeap=0x1f0000) returned 1 [0216.671] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346b0 [0216.671] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b7a0 [0216.671] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2634a8 [0216.671] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0216.671] FindFirstFileW (in: lpFileName="C:\\\\Boot\\ru-RU\\*", lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef698608, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName=".", cAlternateFileName="")) returned 0x24e980 [0216.672] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b458 [0216.672] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x231458 [0216.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b458 | out: hHeap=0x1f0000) returned 1 [0216.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0216.672] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0216.672] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef698608, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="..", cAlternateFileName="")) returned 1 [0216.672] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b598 [0216.672] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x231538 [0216.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b598 | out: hHeap=0x1f0000) returned 1 [0216.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x231458 | out: hHeap=0x1f0000) returned 1 [0216.673] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0216.673] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0216.673] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0216.673] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b458 [0216.673] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b5c0 [0216.673] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234aa0 [0216.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b5c0 | out: hHeap=0x1f0000) returned 1 [0216.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x231538 | out: hHeap=0x1f0000) returned 1 [0216.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b458 | out: hHeap=0x1f0000) returned 1 [0216.674] CreateFileW (lpFileName="C:\\\\Boot\\ru-RU\\bootmgr.exe.mui" (normalized: "c:\\boot\\ru-ru\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0216.674] GetLastError () returned 0x5 [0216.768] GetLastError () returned 0x5 [0216.961] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f699a6, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xafa0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0216.961] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b340 [0216.961] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b480 [0216.961] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234860 [0216.961] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b480 | out: hHeap=0x1f0000) returned 1 [0216.961] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234aa0 | out: hHeap=0x1f0000) returned 1 [0216.961] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b340 | out: hHeap=0x1f0000) returned 1 [0216.962] CreateFileW (lpFileName="C:\\\\Boot\\ru-RU\\memtest.exe.mui" (normalized: "c:\\boot\\ru-ru\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0216.962] GetLastError () returned 0x5 [0216.963] GetLastError () returned 0x5 [0216.963] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f699a6, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xafa0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0216.963] FindClose (in: hFindFile=0x24e980 | out: hFindFile=0x24e980) returned 1 [0216.963] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234860 | out: hHeap=0x1f0000) returned 1 [0216.963] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2634a8 | out: hHeap=0x1f0000) returned 1 [0216.964] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b7a0 | out: hHeap=0x1f0000) returned 1 [0216.964] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346b0 | out: hHeap=0x1f0000) returned 1 [0216.964] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234788 [0216.964] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b480 [0216.964] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262e48 [0216.964] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0216.964] FindFirstFileW (in: lpFileName="C:\\\\Boot\\sk-SK\\*", lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName=".", cAlternateFileName="")) returned 0x24e940 [0216.964] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b4d0 [0216.964] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0216.965] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b4d0 | out: hHeap=0x1f0000) returned 1 [0216.965] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0216.965] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0216.965] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="..", cAlternateFileName="")) returned 1 [0216.965] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b598 [0216.965] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0216.965] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b598 | out: hHeap=0x1f0000) returned 1 [0216.965] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0216.965] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0216.965] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0216.966] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d58, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0216.966] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b7a0 [0216.966] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b368 [0216.966] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234aa0 [0216.966] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b368 | out: hHeap=0x1f0000) returned 1 [0216.966] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0216.966] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b7a0 | out: hHeap=0x1f0000) returned 1 [0216.967] CreateFileW (lpFileName="C:\\\\Boot\\sk-SK\\bootmgr.exe.mui" (normalized: "c:\\boot\\sk-sk\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0216.967] GetLastError () returned 0x5 [0216.967] GetLastError () returned 0x5 [0216.967] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d58, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0216.967] FindClose (in: hFindFile=0x24e940 | out: hFindFile=0x24e940) returned 1 [0216.968] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234aa0 | out: hHeap=0x1f0000) returned 1 [0216.968] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262e48 | out: hHeap=0x1f0000) returned 1 [0216.968] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b480 | out: hHeap=0x1f0000) returned 1 [0216.968] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234788 | out: hHeap=0x1f0000) returned 1 [0216.968] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234aa0 [0216.968] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b7a0 [0216.968] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262e48 [0216.968] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0216.968] FindFirstFileW (in: lpFileName="C:\\\\Boot\\sl-SI\\*", lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName=".", cAlternateFileName="")) returned 0x24e8c0 [0216.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b480 [0216.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0216.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b480 | out: hHeap=0x1f0000) returned 1 [0216.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0216.969] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0216.969] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="..", cAlternateFileName="")) returned 1 [0216.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b480 [0216.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0216.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b480 | out: hHeap=0x1f0000) returned 1 [0216.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0216.969] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0216.970] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0216.970] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0216.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b4d0 [0216.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b368 [0216.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234500 [0216.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b368 | out: hHeap=0x1f0000) returned 1 [0216.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0216.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b4d0 | out: hHeap=0x1f0000) returned 1 [0216.971] CreateFileW (lpFileName="C:\\\\Boot\\sl-SI\\bootmgr.exe.mui" (normalized: "c:\\boot\\sl-si\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0216.971] GetLastError () returned 0x5 [0216.971] GetLastError () returned 0x5 [0216.971] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0216.971] FindClose (in: hFindFile=0x24e8c0 | out: hFindFile=0x24e8c0) returned 1 [0216.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234500 | out: hHeap=0x1f0000) returned 1 [0216.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262e48 | out: hHeap=0x1f0000) returned 1 [0216.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b7a0 | out: hHeap=0x1f0000) returned 1 [0216.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234aa0 | out: hHeap=0x1f0000) returned 1 [0216.972] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234aa0 [0216.972] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b480 [0216.972] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262188 [0216.972] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0216.972] FindFirstFileW (in: lpFileName="C:\\\\Boot\\sr-Latn-CS\\*", lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0x5168548b, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName=".", cAlternateFileName="")) returned 0x24e8c0 [0216.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0216.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0216.973] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0216.973] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0x5168548b, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="..", cAlternateFileName="")) returned 1 [0216.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0216.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0216.973] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0216.973] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0216.973] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21212f9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0216.974] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b2f0 [0216.974] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0216.974] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c8b8 [0216.974] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0216.974] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0216.974] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b2f0 | out: hHeap=0x1f0000) returned 1 [0216.975] CreateFileW (lpFileName="C:\\\\Boot\\sr-Latn-CS\\bootmgr.exe.mui" (normalized: "c:\\boot\\sr-latn-cs\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0216.975] GetLastError () returned 0x5 [0216.975] GetLastError () returned 0x5 [0216.975] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0xe318f070, ftLastWriteTime.dwHighDateTime=0x1d112e1, nFileSizeHigh=0x0, nFileSizeLow=0xaf58, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0216.975] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b598 [0216.975] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0216.975] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x231730 [0216.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0216.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0216.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b598 | out: hHeap=0x1f0000) returned 1 [0216.976] CreateFileW (lpFileName="C:\\\\Boot\\sr-Latn-CS\\memtest.exe.mui" (normalized: "c:\\boot\\sr-latn-cs\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0216.976] GetLastError () returned 0x5 [0216.976] GetLastError () returned 0x5 [0216.977] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0xe318f070, ftLastWriteTime.dwHighDateTime=0x1d112e1, nFileSizeHigh=0x0, nFileSizeLow=0xaf58, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0216.977] FindClose (in: hFindFile=0x24e8c0 | out: hFindFile=0x24e8c0) returned 1 [0216.977] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x231730 | out: hHeap=0x1f0000) returned 1 [0216.977] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262188 | out: hHeap=0x1f0000) returned 1 [0216.977] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b480 | out: hHeap=0x1f0000) returned 1 [0216.977] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234aa0 | out: hHeap=0x1f0000) returned 1 [0216.977] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234860 [0216.977] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b4d0 [0216.977] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262e48 [0216.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0216.978] FindFirstFileW (in: lpFileName="C:\\\\Boot\\sr-Latn-RS\\*", lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName=".", cAlternateFileName="")) returned 0x24e8c0 [0216.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0216.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0216.978] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0216.978] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="..", cAlternateFileName="")) returned 1 [0216.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0216.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0216.979] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0216.979] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0216.979] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21212f9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0216.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b5e8 [0216.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0216.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c8b8 [0216.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0216.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0216.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b5e8 | out: hHeap=0x1f0000) returned 1 [0216.980] CreateFileW (lpFileName="C:\\\\Boot\\sr-Latn-RS\\bootmgr.exe.mui" (normalized: "c:\\boot\\sr-latn-rs\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0216.980] GetLastError () returned 0x5 [0216.980] GetLastError () returned 0x5 [0216.980] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21212f9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0216.981] FindClose (in: hFindFile=0x24e8c0 | out: hFindFile=0x24e8c0) returned 1 [0216.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0216.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262e48 | out: hHeap=0x1f0000) returned 1 [0216.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b4d0 | out: hHeap=0x1f0000) returned 1 [0216.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234860 | out: hHeap=0x1f0000) returned 1 [0216.981] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2348f0 [0216.981] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b340 [0216.981] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262650 [0216.981] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0216.982] FindFirstFileW (in: lpFileName="C:\\\\Boot\\sv-SE\\*", lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01adf43, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6a2250, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName=".", cAlternateFileName="")) returned 0x24e8c0 [0216.982] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b480 [0216.982] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0216.982] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b480 | out: hHeap=0x1f0000) returned 1 [0216.982] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0216.982] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0216.982] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01adf43, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6a2250, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="..", cAlternateFileName="")) returned 1 [0216.982] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b480 [0216.982] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0216.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b480 | out: hHeap=0x1f0000) returned 1 [0216.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0216.983] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0216.983] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0216.983] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12960, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0216.983] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b598 [0216.983] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b7a0 [0216.983] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234aa0 [0216.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b7a0 | out: hHeap=0x1f0000) returned 1 [0216.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0216.984] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b598 | out: hHeap=0x1f0000) returned 1 [0216.984] CreateFileW (lpFileName="C:\\\\Boot\\sv-SE\\bootmgr.exe.mui" (normalized: "c:\\boot\\sv-se\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0216.984] GetLastError () returned 0x5 [0216.984] GetLastError () returned 0x5 [0216.984] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6a2250, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f699a6, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xaf98, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0216.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b2f0 [0216.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b7a0 [0216.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234ae8 [0216.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b7a0 | out: hHeap=0x1f0000) returned 1 [0216.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234aa0 | out: hHeap=0x1f0000) returned 1 [0216.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b2f0 | out: hHeap=0x1f0000) returned 1 [0216.986] CreateFileW (lpFileName="C:\\\\Boot\\sv-SE\\memtest.exe.mui" (normalized: "c:\\boot\\sv-se\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0216.986] GetLastError () returned 0x5 [0216.986] GetLastError () returned 0x5 [0216.986] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6a2250, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f699a6, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xaf98, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0216.986] FindClose (in: hFindFile=0x24e8c0 | out: hFindFile=0x24e8c0) returned 1 [0216.987] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234ae8 | out: hHeap=0x1f0000) returned 1 [0216.987] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262650 | out: hHeap=0x1f0000) returned 1 [0216.987] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b340 | out: hHeap=0x1f0000) returned 1 [0216.987] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2348f0 | out: hHeap=0x1f0000) returned 1 [0216.987] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346b0 [0216.987] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b480 [0216.987] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262650 [0216.987] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0216.988] FindFirstFileW (in: lpFileName="C:\\\\Boot\\tr-TR\\*", lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206504, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6b5aca, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName=".", cAlternateFileName="")) returned 0x24e9c0 [0216.988] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b4d0 [0216.988] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0216.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b4d0 | out: hHeap=0x1f0000) returned 1 [0216.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0216.988] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0216.988] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206504, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6b5aca, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="..", cAlternateFileName="")) returned 1 [0216.988] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b4d0 [0216.989] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0216.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b4d0 | out: hHeap=0x1f0000) returned 1 [0216.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0216.989] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0216.989] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0216.989] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210e1cce, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12558, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0216.989] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b340 [0216.989] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b598 [0216.989] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346f8 [0216.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b598 | out: hHeap=0x1f0000) returned 1 [0216.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0216.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b340 | out: hHeap=0x1f0000) returned 1 [0216.990] CreateFileW (lpFileName="C:\\\\Boot\\tr-TR\\bootmgr.exe.mui" (normalized: "c:\\boot\\tr-tr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0216.991] GetLastError () returned 0x5 [0216.991] GetLastError () returned 0x5 [0216.991] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6b5aca, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f4373a, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0216.991] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b4d0 [0216.991] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b7a0 [0216.991] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2349c8 [0216.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b7a0 | out: hHeap=0x1f0000) returned 1 [0216.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346f8 | out: hHeap=0x1f0000) returned 1 [0216.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b4d0 | out: hHeap=0x1f0000) returned 1 [0216.992] CreateFileW (lpFileName="C:\\\\Boot\\tr-TR\\memtest.exe.mui" (normalized: "c:\\boot\\tr-tr\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0216.992] GetLastError () returned 0x5 [0216.992] GetLastError () returned 0x5 [0216.992] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6b5aca, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f4373a, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0216.992] FindClose (in: hFindFile=0x24e9c0 | out: hFindFile=0x24e9c0) returned 1 [0216.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2349c8 | out: hHeap=0x1f0000) returned 1 [0216.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262650 | out: hHeap=0x1f0000) returned 1 [0216.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b480 | out: hHeap=0x1f0000) returned 1 [0216.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346b0 | out: hHeap=0x1f0000) returned 1 [0216.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346b0 [0216.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b7a0 [0216.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262188 [0216.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0216.993] FindFirstFileW (in: lpFileName="C:\\\\Boot\\uk-UA\\*", lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206a30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName=".", cAlternateFileName="")) returned 0x24ed00 [0216.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b480 [0216.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0216.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b480 | out: hHeap=0x1f0000) returned 1 [0216.994] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0216.994] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0216.994] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206a30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="..", cAlternateFileName="")) returned 1 [0216.994] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b480 [0216.994] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0216.994] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b480 | out: hHeap=0x1f0000) returned 1 [0216.994] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0216.994] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0216.994] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0216.994] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210e1cce, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0216.994] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b480 [0216.994] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b2f0 [0216.994] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234aa0 [0216.994] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b2f0 | out: hHeap=0x1f0000) returned 1 [0216.994] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0216.994] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b480 | out: hHeap=0x1f0000) returned 1 [0216.995] CreateFileW (lpFileName="C:\\\\Boot\\uk-UA\\bootmgr.exe.mui" (normalized: "c:\\boot\\uk-ua\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0216.995] GetLastError () returned 0x5 [0216.995] GetLastError () returned 0x5 [0216.995] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210e1cce, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0216.995] FindClose (in: hFindFile=0x24ed00 | out: hFindFile=0x24ed00) returned 1 [0216.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234aa0 | out: hHeap=0x1f0000) returned 1 [0216.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262188 | out: hHeap=0x1f0000) returned 1 [0216.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b7a0 | out: hHeap=0x1f0000) returned 1 [0216.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346b0 | out: hHeap=0x1f0000) returned 1 [0216.996] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234788 [0216.996] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b7a0 [0216.996] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262188 [0216.996] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0216.996] FindFirstFileW (in: lpFileName="C:\\\\Boot\\zh-CN\\*", lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207100, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6d7e9a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName=".", cAlternateFileName="")) returned 0x24e5c0 [0216.996] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b598 [0216.997] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0216.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b598 | out: hHeap=0x1f0000) returned 1 [0216.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0216.997] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0216.997] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207100, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6d7e9a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="..", cAlternateFileName="")) returned 1 [0216.997] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b2f0 [0216.997] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0216.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b2f0 | out: hHeap=0x1f0000) returned 1 [0216.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0216.997] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0216.997] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0216.997] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xf960, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0216.997] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b2f0 [0216.997] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b598 [0216.997] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234860 [0216.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b598 | out: hHeap=0x1f0000) returned 1 [0216.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0216.998] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b2f0 | out: hHeap=0x1f0000) returned 1 [0216.998] CreateFileW (lpFileName="C:\\\\Boot\\zh-CN\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-cn\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0216.998] GetLastError () returned 0x5 [0216.998] GetLastError () returned 0x5 [0216.998] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6d7e9a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa5a0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0216.998] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b480 [0216.998] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b2f0 [0216.998] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2349c8 [0216.998] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b2f0 | out: hHeap=0x1f0000) returned 1 [0216.998] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234860 | out: hHeap=0x1f0000) returned 1 [0216.999] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b480 | out: hHeap=0x1f0000) returned 1 [0216.999] CreateFileW (lpFileName="C:\\\\Boot\\zh-CN\\memtest.exe.mui" (normalized: "c:\\boot\\zh-cn\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0216.999] GetLastError () returned 0x5 [0216.999] GetLastError () returned 0x5 [0216.999] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6d7e9a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa5a0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0216.999] FindClose (in: hFindFile=0x24e5c0 | out: hFindFile=0x24e5c0) returned 1 [0217.000] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2349c8 | out: hHeap=0x1f0000) returned 1 [0217.000] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262188 | out: hHeap=0x1f0000) returned 1 [0217.000] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b7a0 | out: hHeap=0x1f0000) returned 1 [0217.000] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234788 | out: hHeap=0x1f0000) returned 1 [0217.000] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2349c8 [0217.000] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b340 [0217.000] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262650 [0217.000] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0217.000] FindFirstFileW (in: lpFileName="C:\\\\Boot\\zh-HK\\*", lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207675, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x518ea25e, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName=".", cAlternateFileName="")) returned 0x24ec40 [0217.000] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b598 [0217.000] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0217.000] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b598 | out: hHeap=0x1f0000) returned 1 [0217.000] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0217.000] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0217.000] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207675, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x518ea25e, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="..", cAlternateFileName="")) returned 1 [0217.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b598 [0217.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0217.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b598 | out: hHeap=0x1f0000) returned 1 [0217.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0217.001] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0217.001] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0217.001] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xf958, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0217.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b480 [0217.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b598 [0217.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346b0 [0217.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b598 | out: hHeap=0x1f0000) returned 1 [0217.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0217.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b480 | out: hHeap=0x1f0000) returned 1 [0217.001] CreateFileW (lpFileName="C:\\\\Boot\\zh-HK\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-hk\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0217.002] GetLastError () returned 0x5 [0217.002] GetLastError () returned 0x5 [0217.002] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x518ea25e, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0xe31db522, ftLastWriteTime.dwHighDateTime=0x1d112e1, nFileSizeHigh=0x0, nFileSizeLow=0xa558, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0217.002] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b7a0 [0217.002] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b598 [0217.002] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234500 [0217.002] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b598 | out: hHeap=0x1f0000) returned 1 [0217.002] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2346b0 | out: hHeap=0x1f0000) returned 1 [0217.002] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b7a0 | out: hHeap=0x1f0000) returned 1 [0217.002] CreateFileW (lpFileName="C:\\\\Boot\\zh-HK\\memtest.exe.mui" (normalized: "c:\\boot\\zh-hk\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0217.002] GetLastError () returned 0x5 [0217.002] GetLastError () returned 0x5 [0217.002] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x518ea25e, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0xe31db522, ftLastWriteTime.dwHighDateTime=0x1d112e1, nFileSizeHigh=0x0, nFileSizeLow=0xa558, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0217.003] FindClose (in: hFindFile=0x24ec40 | out: hFindFile=0x24ec40) returned 1 [0217.366] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234500 | out: hHeap=0x1f0000) returned 1 [0217.366] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262650 | out: hHeap=0x1f0000) returned 1 [0217.367] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b340 | out: hHeap=0x1f0000) returned 1 [0217.367] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2349c8 | out: hHeap=0x1f0000) returned 1 [0217.367] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234ae8 [0217.367] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0217.367] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x263310 [0217.367] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2f0 [0217.367] FindFirstFileW (in: lpFileName="C:\\\\Boot\\zh-TW\\*", lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName=".", cAlternateFileName="")) returned 0x24ec40 [0217.367] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0217.367] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x230a88 [0217.367] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0217.367] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0217.367] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0217.368] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="..", cAlternateFileName="")) returned 1 [0217.368] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0217.368] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x230c10 [0217.368] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0217.368] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230a88 | out: hHeap=0x1f0000) returned 1 [0217.368] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0217.368] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0217.368] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xf960, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0217.368] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0217.368] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0217.368] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234a10 [0217.369] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0217.369] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230c10 | out: hHeap=0x1f0000) returned 1 [0217.369] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0217.369] CreateFileW (lpFileName="C:\\\\Boot\\zh-TW\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-tw\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0217.369] GetLastError () returned 0x5 [0217.369] GetLastError () returned 0x5 [0217.369] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa598, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0217.370] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0217.370] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0217.370] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234b30 [0217.370] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0217.370] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234a10 | out: hHeap=0x1f0000) returned 1 [0217.370] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0217.370] CreateFileW (lpFileName="C:\\\\Boot\\zh-TW\\memtest.exe.mui" (normalized: "c:\\boot\\zh-tw\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0217.370] GetLastError () returned 0x5 [0217.371] GetLastError () returned 0x5 [0217.371] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa598, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0217.371] FindClose (in: hFindFile=0x24ec40 | out: hFindFile=0x24ec40) returned 1 [0217.371] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b30 | out: hHeap=0x1f0000) returned 1 [0217.371] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263310 | out: hHeap=0x1f0000) returned 1 [0217.371] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0217.371] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234ae8 | out: hHeap=0x1f0000) returned 1 [0217.371] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238488 | out: hHeap=0x1f0000) returned 1 [0217.371] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0217.371] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0217.371] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607c0 | out: hHeap=0x1f0000) returned 1 [0217.371] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0217.371] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0217.372] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0217.372] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0217.372] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0217.372] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0217.372] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0217.372] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0217.372] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606f8 | out: hHeap=0x1f0000) returned 1 [0217.372] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0217.372] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604c8 | out: hHeap=0x1f0000) returned 1 [0217.372] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0217.372] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0217.372] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0217.372] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605e0 | out: hHeap=0x1f0000) returned 1 [0217.372] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609f0 | out: hHeap=0x1f0000) returned 1 [0217.372] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0217.372] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0217.372] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0217.372] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0217.372] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0217.372] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0217.372] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0217.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0217.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf70 | out: hHeap=0x1f0000) returned 1 [0217.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0217.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380c8 | out: hHeap=0x1f0000) returned 1 [0217.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0217.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0217.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0217.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1ff058 | out: hHeap=0x1f0000) returned 1 [0217.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0217.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0217.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380f0 | out: hHeap=0x1f0000) returned 1 [0217.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0217.374] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238438 | out: hHeap=0x1f0000) returned 1 [0217.374] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0217.374] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f5d8 | out: hHeap=0x1f0000) returned 1 [0217.374] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261ff0 | out: hHeap=0x1f0000) returned 1 [0217.374] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260838 | out: hHeap=0x1f0000) returned 1 [0217.374] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234740 | out: hHeap=0x1f0000) returned 1 [0217.374] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234ae8 [0217.374] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380f0 [0217.374] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262188 [0217.374] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234980 [0217.374] FindFirstFileW (in: lpFileName="C:\\\\Documents and Settings\\*", lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="zh-TW", cAlternateFileName="ⷾ眽")) returned 0xffffffff [0217.376] GetLastError () returned 0x5 [0217.376] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="畦正", cchWideChar=2, lpMultiByteStr=0x259db30, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ç\x95¦æ­£Y\x02´ÛY\x02\x06", lpUsedDefaultChar=0x0) returned 6 [0217.376] WriteFile (in: hFile=0x90, lpBuffer=0x259db30, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x259db28, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x259db28, lpOverlapped=0x0) returned 0 [0217.376] GetLastError () returned 0x6 [0217.376] GetLastError () returned 0x6 [0217.376] lstrcmpW (lpString1="zh-TW", lpString2=".") returned 1 [0217.377] lstrcmpW (lpString1="zh-TW", lpString2="..") returned 1 [0217.377] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204ff0 [0217.377] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c8b8 [0217.377] FindNextFileW (in: hFindFile=0xffffffff, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="zh-TW", cAlternateFileName="ⷾ眽")) returned 0 [0217.377] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0217.377] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234980 [0217.377] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0217.377] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x261e58 [0217.377] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x230eb8 [0217.377] FindFirstFileW (in: lpFileName="C:\\\\Documents and Settings\\zh-TW\\*", lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x3c003c, ftLastAccessTime.dwLowDateTime=0x2349c8, ftLastAccessTime.dwHighDateTime=0x20002, ftLastWriteTime.dwLowDateTime=0x234a04, ftLastWriteTime.dwHighDateTime=0x3a0038, nFileSizeHigh=0x234980, nFileSizeLow=0x259f308, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="", cAlternateFileName="Ə")) returned 0xffffffff [0217.378] GetLastError () returned 0x3 [0217.378] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="畦正", cchWideChar=2, lpMultiByteStr=0x259d66c, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ç\x95¦æ­£", lpUsedDefaultChar=0x0) returned 6 [0217.378] WriteFile (in: hFile=0x90, lpBuffer=0x259d66c, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x259d664, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x259d664, lpOverlapped=0x0) returned 0 [0217.378] GetLastError () returned 0x6 [0217.378] GetLastError () returned 0x6 [0217.378] CreateFileW (lpFileName="C:\\\\Documents and Settings\\zh-TW\\" (normalized: "c:\\documents and settings\\zh-tw"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0217.381] GetLastError () returned 0x2 [0217.381] GetLastError () returned 0x2 [0217.381] FindNextFileW (in: hFindFile=0xffffffff, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x3c003c, ftLastAccessTime.dwLowDateTime=0x2349c8, ftLastAccessTime.dwHighDateTime=0x20002, ftLastWriteTime.dwLowDateTime=0x234a04, ftLastWriteTime.dwHighDateTime=0x3a0038, nFileSizeHigh=0x234980, nFileSizeLow=0x259f308, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="", cAlternateFileName="Ə")) returned 0 [0217.381] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0217.381] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230a98 | out: hHeap=0x1f0000) returned 1 [0217.381] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261e58 | out: hHeap=0x1f0000) returned 1 [0217.381] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0217.381] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234980 | out: hHeap=0x1f0000) returned 1 [0217.381] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235838 | out: hHeap=0x1f0000) returned 1 [0217.381] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0217.381] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ff0 | out: hHeap=0x1f0000) returned 1 [0217.381] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262188 | out: hHeap=0x1f0000) returned 1 [0217.381] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380f0 | out: hHeap=0x1f0000) returned 1 [0217.382] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234ae8 | out: hHeap=0x1f0000) returned 1 [0217.382] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234740 [0217.382] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238488 [0217.382] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x261e58 [0217.382] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0217.382] FindFirstFileW (in: lpFileName="C:\\\\ESD\\*", lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc1969407, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24e6c0 [0217.383] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0217.383] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0217.383] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0217.384] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc1969407, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0217.384] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0217.384] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0217.384] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0217.384] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0217.384] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc1969407, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 0 [0217.384] FindClose (in: hFindFile=0x24e6c0 | out: hFindFile=0x24e6c0) returned 1 [0217.385] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0217.385] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261e58 | out: hHeap=0x1f0000) returned 1 [0217.385] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238488 | out: hHeap=0x1f0000) returned 1 [0217.385] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234740 | out: hHeap=0x1f0000) returned 1 [0217.385] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234b30 [0217.385] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0217.385] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262fe0 [0217.385] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0217.385] FindFirstFileW (in: lpFileName="C:\\\\Logs\\*", lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf1d773, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xc2f39201, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xc2f39201, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24ea80 [0217.386] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0217.386] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0217.386] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0217.386] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf1d773, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xc2f39201, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xc2f39201, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0217.387] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0217.387] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0217.387] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0217.387] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0217.387] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5052fa31, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5052fa31, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Application.evtx", cAlternateFileName="APPLIC~1.EVT")) returned 1 [0217.387] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0217.388] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0217.388] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234740 [0217.388] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0217.388] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0217.388] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0217.388] CreateFileW (lpFileName="C:\\\\Logs\\Application.evtx" (normalized: "c:\\logs\\application.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0217.389] GetFileType (hFile=0x1f4) returned 0x1 [0217.390] CloseHandle (hObject=0x1f4) returned 1 [0217.390] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234788 [0217.390] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Application.evtx" (normalized: "c:\\logs\\application.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0ac | out: lpFileInformation=0x259f0ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5052fa31, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5052fa31, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0217.390] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234788 | out: hHeap=0x1f0000) returned 1 [0217.391] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234ae8 [0217.391] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Application.evtx" (normalized: "c:\\logs\\application.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0b4 | out: lpFileInformation=0x259f0b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5052fa31, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5052fa31, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0217.391] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234ae8 | out: hHeap=0x1f0000) returned 1 [0217.391] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234788 [0217.391] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234788 | out: hHeap=0x1f0000) returned 1 [0217.391] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505ee5f0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505ee5f0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="HardwareEvents.evtx", cAlternateFileName="HARDWA~1.EVT")) returned 1 [0217.391] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d2f0 [0217.391] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380f0 [0217.391] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234788 [0217.392] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380f0 | out: hHeap=0x1f0000) returned 1 [0217.392] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234740 | out: hHeap=0x1f0000) returned 1 [0217.392] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d2f0 | out: hHeap=0x1f0000) returned 1 [0217.392] CreateFileW (lpFileName="C:\\\\Logs\\HardwareEvents.evtx" (normalized: "c:\\logs\\hardwareevents.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0217.393] GetFileType (hFile=0x1f4) returned 0x1 [0217.394] CloseHandle (hObject=0x1f4) returned 1 [0217.394] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234a10 [0217.394] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\HardwareEvents.evtx" (normalized: "c:\\logs\\hardwareevents.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0ac | out: lpFileInformation=0x259f0ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505ee5f0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505ee5f0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0217.394] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234a10 | out: hHeap=0x1f0000) returned 1 [0217.394] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234980 [0217.394] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\HardwareEvents.evtx" (normalized: "c:\\logs\\hardwareevents.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0b4 | out: lpFileInformation=0x259f0b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505ee5f0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505ee5f0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0217.395] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234980 | out: hHeap=0x1f0000) returned 1 [0217.395] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234740 [0217.395] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234740 | out: hHeap=0x1f0000) returned 1 [0217.395] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505a2134, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505a2134, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Internet Explorer.evtx", cAlternateFileName="INTERN~1.EVT")) returned 1 [0217.395] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0217.395] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0217.395] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2348f0 [0217.395] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0217.395] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234788 | out: hHeap=0x1f0000) returned 1 [0217.395] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0217.396] CreateFileW (lpFileName="C:\\\\Logs\\Internet Explorer.evtx" (normalized: "c:\\logs\\internet explorer.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0217.396] GetFileType (hFile=0x1f4) returned 0x1 [0217.396] CloseHandle (hObject=0x1f4) returned 1 [0217.397] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234980 [0217.397] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Internet Explorer.evtx" (normalized: "c:\\logs\\internet explorer.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0ac | out: lpFileInformation=0x259f0ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505a2134, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505a2134, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0217.397] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234980 | out: hHeap=0x1f0000) returned 1 [0217.397] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234740 [0217.397] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Internet Explorer.evtx" (normalized: "c:\\logs\\internet explorer.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0b4 | out: lpFileInformation=0x259f0b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505a2134, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505a2134, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0217.397] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234740 | out: hHeap=0x1f0000) returned 1 [0217.397] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234860 [0217.398] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234860 | out: hHeap=0x1f0000) returned 1 [0217.398] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5057bed8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5057bed8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Key Management Service.evtx", cAlternateFileName="KEYMAN~1.EVT")) returned 1 [0217.398] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234740 [0217.398] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0217.398] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c8b8 [0217.398] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0217.398] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2348f0 | out: hHeap=0x1f0000) returned 1 [0217.398] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234740 | out: hHeap=0x1f0000) returned 1 [0217.398] CreateFileW (lpFileName="C:\\\\Logs\\Key Management Service.evtx" (normalized: "c:\\logs\\key management service.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0217.399] GetFileType (hFile=0x1f4) returned 0x1 [0217.399] CloseHandle (hObject=0x1f4) returned 1 [0217.399] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x230bf8 [0217.399] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Key Management Service.evtx" (normalized: "c:\\logs\\key management service.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0ac | out: lpFileInformation=0x259f0ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5057bed8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5057bed8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0217.400] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230bf8 | out: hHeap=0x1f0000) returned 1 [0217.400] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x230ca8 [0217.400] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Key Management Service.evtx" (normalized: "c:\\logs\\key management service.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0b4 | out: lpFileInformation=0x259f0b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5057bed8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5057bed8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0217.400] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230ca8 | out: hHeap=0x1f0000) returned 1 [0217.400] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x230888 [0217.400] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230888 | out: hHeap=0x1f0000) returned 1 [0217.400] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc1dbd7c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc1dbd7c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Microsoft-Client-Licensing-Platform%4Admin.evtx", cAlternateFileName="MICROS~1.EVT")) returned 1 [0217.400] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235aa8 [0217.400] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0217.400] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212cf0 [0217.400] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0217.400] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0217.401] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235aa8 | out: hHeap=0x1f0000) returned 1 [0217.401] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx" (normalized: "c:\\logs\\microsoft-client-licensing-platform%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0217.401] GetFileType (hFile=0x1f4) returned 0x1 [0217.402] CloseHandle (hObject=0x1f4) returned 1 [0217.402] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212be0 [0217.402] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx" (normalized: "c:\\logs\\microsoft-client-licensing-platform%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0ac | out: lpFileInformation=0x259f0ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc1dbd7c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc1dbd7c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0217.402] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212be0 | out: hHeap=0x1f0000) returned 1 [0217.403] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0217.403] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx" (normalized: "c:\\logs\\microsoft-client-licensing-platform%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0b4 | out: lpFileInformation=0x259f0b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc1dbd7c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc1dbd7c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0217.403] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0217.403] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2135f8 [0217.403] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2135f8 | out: hHeap=0x1f0000) returned 1 [0217.403] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca5d836e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca5d836e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx", cAlternateFileName="MICROS~2.EVT")) returned 1 [0217.403] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a770 [0217.403] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0217.403] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x286190 [0217.403] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0217.404] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212cf0 | out: hHeap=0x1f0000) returned 1 [0217.404] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a770 | out: hHeap=0x1f0000) returned 1 [0217.404] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx" (normalized: "c:\\logs\\microsoft-windows-application-experience%4program-compatibility-assistant.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0217.405] GetFileType (hFile=0x1f4) returned 0x1 [0217.405] CloseHandle (hObject=0x1f4) returned 1 [0217.405] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x286300 [0217.405] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx" (normalized: "c:\\logs\\microsoft-windows-application-experience%4program-compatibility-assistant.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0ac | out: lpFileInformation=0x259f0ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca5d836e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca5d836e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0217.406] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286300 | out: hHeap=0x1f0000) returned 1 [0217.406] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x285df8 [0217.406] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx" (normalized: "c:\\logs\\microsoft-windows-application-experience%4program-compatibility-assistant.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0b4 | out: lpFileInformation=0x259f0b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca5d836e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca5d836e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0217.406] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285df8 | out: hHeap=0x1f0000) returned 1 [0217.406] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x284f98 [0217.406] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x284f98 | out: hHeap=0x1f0000) returned 1 [0217.406] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9206ac5, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9206ac5, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xf9c0f529, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx", cAlternateFileName="MICROS~3.EVT")) returned 1 [0217.406] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0217.406] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380f0 [0217.406] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x285a60 [0217.407] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380f0 | out: hHeap=0x1f0000) returned 1 [0217.407] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286190 | out: hHeap=0x1f0000) returned 1 [0217.407] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0217.407] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-applicationresourcemanagementsystem%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0217.408] GetFileType (hFile=0x1f4) returned 0x1 [0217.408] CloseHandle (hObject=0x1f4) returned 1 [0217.408] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x285610 [0217.408] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-applicationresourcemanagementsystem%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0ac | out: lpFileInformation=0x259f0ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9206ac5, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9206ac5, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xf9c0f529, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000)) returned 1 [0217.408] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285610 | out: hHeap=0x1f0000) returned 1 [0217.409] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x285838 [0217.409] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-applicationresourcemanagementsystem%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0b4 | out: lpFileInformation=0x259f0b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9206ac5, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9206ac5, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xf9c0f529, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000)) returned 1 [0217.569] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285838 | out: hHeap=0x1f0000) returned 1 [0217.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x284f98 [0217.569] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x284f98 | out: hHeap=0x1f0000) returned 1 [0217.569] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4143825, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4143825, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Microsoft-Windows-AppLocker%4EXE and DLL.evtx", cAlternateFileName="MICROS~4.EVT")) returned 1 [0217.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235be0 [0217.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0217.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0217.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0217.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285a60 | out: hHeap=0x1f0000) returned 1 [0217.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235be0 | out: hHeap=0x1f0000) returned 1 [0217.571] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-AppLocker%4EXE and DLL.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4exe and dll.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0217.572] GetFileType (hFile=0x218) returned 0x1 [0217.572] CloseHandle (hObject=0x218) returned 1 [0217.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0217.573] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppLocker%4EXE and DLL.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4exe and dll.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0ac | out: lpFileInformation=0x259f0ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4143825, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4143825, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0217.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0217.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0217.573] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppLocker%4EXE and DLL.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4exe and dll.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0b4 | out: lpFileInformation=0x259f0b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4143825, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4143825, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0217.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0217.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21ff68 [0217.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ff68 | out: hHeap=0x1f0000) returned 1 [0217.574] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4169a7a, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4169a7a, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Microsoft-Windows-AppLocker%4MSI and Script.evtx", cAlternateFileName="MI2EEA~1.EVT")) returned 1 [0217.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0217.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0217.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213680 [0217.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0217.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0217.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0217.575] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-AppLocker%4MSI and Script.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4msi and script.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0217.575] GetFileType (hFile=0x218) returned 0x1 [0217.576] CloseHandle (hObject=0x218) returned 1 [0217.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212cf0 [0217.576] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppLocker%4MSI and Script.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4msi and script.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0ac | out: lpFileInformation=0x259f0ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4169a7a, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4169a7a, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0217.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212cf0 | out: hHeap=0x1f0000) returned 1 [0217.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e88 [0217.577] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppLocker%4MSI and Script.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4msi and script.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0b4 | out: lpFileInformation=0x259f0b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4169a7a, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4169a7a, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0217.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e88 | out: hHeap=0x1f0000) returned 1 [0217.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0217.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0217.577] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd418fcc3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd418fcc3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx", cAlternateFileName="MI07E1~1.EVT")) returned 1 [0217.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0217.578] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380c8 [0217.578] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0217.578] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380c8 | out: hHeap=0x1f0000) returned 1 [0217.578] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213680 | out: hHeap=0x1f0000) returned 1 [0217.578] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0217.578] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-deployment.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0217.579] GetFileType (hFile=0x218) returned 0x1 [0217.579] CloseHandle (hObject=0x218) returned 1 [0217.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0217.579] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-deployment.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0ac | out: lpFileInformation=0x259f0ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd418fcc3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd418fcc3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0217.580] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0217.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0217.580] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-deployment.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0b4 | out: lpFileInformation=0x259f0b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd418fcc3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd418fcc3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0217.580] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0217.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0217.580] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0217.580] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd418fcc3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd418fcc3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx", cAlternateFileName="MI8196~1.EVT")) returned 1 [0217.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0217.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0217.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0217.581] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0217.581] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0217.581] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0217.581] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-execution.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0217.581] GetFileType (hFile=0x218) returned 0x1 [0217.582] CloseHandle (hObject=0x218) returned 1 [0217.582] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0217.582] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-execution.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0ac | out: lpFileInformation=0x259f0ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd418fcc3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd418fcc3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0217.582] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0217.582] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0217.582] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-execution.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0b4 | out: lpFileInformation=0x259f0b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd418fcc3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd418fcc3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0217.582] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0217.582] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0217.582] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0217.582] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd41b5f2d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd41b5f2d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Microsoft-Windows-AppModel-Runtime%4Admin.evtx", cAlternateFileName="MIE36C~1.EVT")) returned 1 [0217.583] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2362c8 [0217.583] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0217.583] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0217.583] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0217.583] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0217.583] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2362c8 | out: hHeap=0x1f0000) returned 1 [0217.583] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-AppModel-Runtime%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-appmodel-runtime%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0217.583] GetFileType (hFile=0x218) returned 0x1 [0217.584] CloseHandle (hObject=0x218) returned 1 [0217.584] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0217.585] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppModel-Runtime%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-appmodel-runtime%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0ac | out: lpFileInformation=0x259f0ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd41b5f2d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd41b5f2d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0217.585] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0217.585] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0217.585] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppModel-Runtime%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-appmodel-runtime%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0b4 | out: lpFileInformation=0x259f0b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd41b5f2d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd41b5f2d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0217.585] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0217.585] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220490 [0217.585] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220490 | out: hHeap=0x1f0000) returned 1 [0217.585] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd389efbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd389efbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Microsoft-Windows-AppReadiness%4Admin.evtx", cAlternateFileName="MIC5CB~1.EVT")) returned 1 [0217.585] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235be0 [0217.585] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0217.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0217.586] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0217.586] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0217.586] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235be0 | out: hHeap=0x1f0000) returned 1 [0217.586] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-AppReadiness%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0217.587] GetFileType (hFile=0x218) returned 0x1 [0217.587] CloseHandle (hObject=0x218) returned 1 [0217.587] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0217.587] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppReadiness%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0ac | out: lpFileInformation=0x259f0ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd389efbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd389efbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0217.587] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0217.588] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21ff68 [0217.588] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppReadiness%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0b4 | out: lpFileInformation=0x259f0b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd389efbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd389efbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0217.588] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ff68 | out: hHeap=0x1f0000) returned 1 [0217.588] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0217.588] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0217.588] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd38c5212, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd38c5212, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x111000, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Microsoft-Windows-AppReadiness%4Operational.evtx", cAlternateFileName="MIF8AA~1.EVT")) returned 1 [0217.588] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0217.588] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238488 [0217.588] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212be0 [0217.588] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238488 | out: hHeap=0x1f0000) returned 1 [0217.588] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0217.588] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0217.589] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-AppReadiness%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0217.591] GetFileType (hFile=0x218) returned 0x1 [0217.591] CloseHandle (hObject=0x218) returned 1 [0217.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0217.592] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppReadiness%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0ac | out: lpFileInformation=0x259f0ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd38c5212, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd38c5212, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x111000)) returned 1 [0217.592] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0217.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0217.592] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppReadiness%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0b4 | out: lpFileInformation=0x259f0b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd38c5212, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd38c5212, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x111000)) returned 1 [0217.592] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0217.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f10 [0217.593] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f10 | out: hHeap=0x1f0000) returned 1 [0217.593] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4143825, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4143825, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Microsoft-Windows-AppXDeployment%4Operational.evtx", cAlternateFileName="MI34FE~1.EVT")) returned 1 [0217.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220328 [0217.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380c8 [0217.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f10 [0217.593] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380c8 | out: hHeap=0x1f0000) returned 1 [0217.593] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212be0 | out: hHeap=0x1f0000) returned 1 [0217.593] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220328 | out: hHeap=0x1f0000) returned 1 [0217.593] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-AppXDeployment%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeployment%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0217.594] GetFileType (hFile=0x218) returned 0x1 [0217.594] CloseHandle (hObject=0x218) returned 1 [0217.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0217.594] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppXDeployment%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeployment%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0ac | out: lpFileInformation=0x259f0ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4143825, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4143825, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0217.595] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0217.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212be0 [0217.595] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppXDeployment%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeployment%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0b4 | out: lpFileInformation=0x259f0b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4143825, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4143825, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0217.595] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212be0 | out: hHeap=0x1f0000) returned 1 [0217.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0217.595] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0217.595] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5af3554f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5af3554f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x211000, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Microsoft-Windows-AppXDeploymentServer%4Operational.evtx", cAlternateFileName="MIA24C~1.EVT")) returned 1 [0217.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213818 [0217.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0217.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0217.596] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0217.596] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f10 | out: hHeap=0x1f0000) returned 1 [0217.596] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213818 | out: hHeap=0x1f0000) returned 1 [0217.596] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0217.597] GetFileType (hFile=0x218) returned 0x1 [0217.597] CloseHandle (hObject=0x218) returned 1 [0217.624] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0217.624] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0ac | out: lpFileInformation=0x259f0ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5af3554f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5af3554f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x211000)) returned 1 [0217.624] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0217.624] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0217.624] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0b4 | out: lpFileInformation=0x259f0b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5af3554f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5af3554f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x211000)) returned 1 [0217.624] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0217.624] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0217.624] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0217.625] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5af3554f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5af3554f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx", cAlternateFileName="MIDBEC~1.EVT")) returned 1 [0217.625] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0217.625] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0217.625] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0217.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0217.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0217.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0217.626] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4restricted.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x238 [0217.824] GetFileType (hFile=0x238) returned 0x1 [0217.825] CloseHandle (hObject=0x238) returned 1 [0217.825] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0217.825] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4restricted.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0ac | out: lpFileInformation=0x259f0ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5af3554f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5af3554f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0217.826] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0217.826] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0217.826] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4restricted.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0b4 | out: lpFileInformation=0x259f0b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5af3554f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5af3554f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0217.826] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0217.826] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0217.826] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0217.826] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85798667, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x85798667, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Microsoft-Windows-AppxPackaging%4Operational.evtx", cAlternateFileName="MI54F1~1.EVT")) returned 1 [0217.826] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0217.827] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0217.827] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0217.827] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0217.827] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0217.827] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0217.828] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-AppxPackaging%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxpackaging%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x238 [0217.828] GetFileType (hFile=0x238) returned 0x1 [0217.828] CloseHandle (hObject=0x238) returned 1 [0217.829] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212cf0 [0217.829] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppxPackaging%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxpackaging%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0ac | out: lpFileInformation=0x259f0ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85798667, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x85798667, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0217.829] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212cf0 | out: hHeap=0x1f0000) returned 1 [0217.829] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0217.830] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-AppxPackaging%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxpackaging%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0b4 | out: lpFileInformation=0x259f0b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85798667, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x85798667, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0217.830] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0217.830] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0217.830] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0217.830] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd74d25ab, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd74d25ab, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx", cAlternateFileName="MI111F~1.EVT")) returned 1 [0217.830] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0217.830] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0217.830] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21aa10 [0217.831] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0217.831] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0217.831] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0217.832] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-backgroundtaskinfrastructure%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x238 [0217.832] GetFileType (hFile=0x238) returned 0x1 [0217.833] CloseHandle (hObject=0x238) returned 1 [0217.833] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a380 [0217.833] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-backgroundtaskinfrastructure%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0ac | out: lpFileInformation=0x259f0ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd74d25ab, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd74d25ab, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0217.833] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a380 | out: hHeap=0x1f0000) returned 1 [0217.833] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a0e0 [0217.834] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-backgroundtaskinfrastructure%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0b4 | out: lpFileInformation=0x259f0b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd74d25ab, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd74d25ab, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0217.834] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a0e0 | out: hHeap=0x1f0000) returned 1 [0217.834] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a6c8 [0217.834] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a6c8 | out: hHeap=0x1f0000) returned 1 [0217.834] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1f96ca4, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xe1f96ca4, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Microsoft-Windows-Bits-Client%4Operational.evtx", cAlternateFileName="MI9465~1.EVT")) returned 1 [0217.835] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235838 [0217.835] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0217.835] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0217.835] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0217.835] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21aa10 | out: hHeap=0x1f0000) returned 1 [0217.835] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235838 | out: hHeap=0x1f0000) returned 1 [0217.836] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Bits-Client%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-bits-client%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x238 [0217.836] GetFileType (hFile=0x238) returned 0x1 [0217.837] CloseHandle (hObject=0x238) returned 1 [0217.837] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0217.837] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Bits-Client%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-bits-client%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0ac | out: lpFileInformation=0x259f0ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1f96ca4, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xe1f96ca4, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0217.837] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0217.838] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213680 [0217.838] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Bits-Client%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-bits-client%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0b4 | out: lpFileInformation=0x259f0b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1f96ca4, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xe1f96ca4, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0217.838] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213680 | out: hHeap=0x1f0000) returned 1 [0217.838] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213680 [0217.838] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213680 | out: hHeap=0x1f0000) returned 1 [0217.838] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8783aa15, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8783aa15, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Microsoft-Windows-CodeIntegrity%4Operational.evtx", cAlternateFileName="MI03A7~1.EVT")) returned 1 [0217.839] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe00 [0217.839] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0217.839] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0217.839] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0217.839] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0217.839] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe00 | out: hHeap=0x1f0000) returned 1 [0217.840] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-CodeIntegrity%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-codeintegrity%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x238 [0217.840] GetFileType (hFile=0x238) returned 0x1 [0217.841] CloseHandle (hObject=0x238) returned 1 [0217.842] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0217.842] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-CodeIntegrity%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-codeintegrity%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0ac | out: lpFileInformation=0x259f0ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8783aa15, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8783aa15, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0217.842] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0217.842] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212a48 [0217.842] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-CodeIntegrity%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-codeintegrity%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0b4 | out: lpFileInformation=0x259f0b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8783aa15, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8783aa15, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0217.842] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212a48 | out: hHeap=0x1f0000) returned 1 [0217.843] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2135f8 [0217.843] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2135f8 | out: hHeap=0x1f0000) returned 1 [0217.843] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c3c71c5, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8c3c71c5, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx", cAlternateFileName="MI5CA2~1.EVT")) returned 1 [0217.843] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213818 [0217.843] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0217.843] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a4d0 [0217.843] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0217.843] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0217.844] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213818 | out: hHeap=0x1f0000) returned 1 [0217.844] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-coresystem-smsrouter-events%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x238 [0217.845] GetFileType (hFile=0x238) returned 0x1 [0217.845] CloseHandle (hObject=0x238) returned 1 [0217.845] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a8c0 [0217.846] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-coresystem-smsrouter-events%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0ac | out: lpFileInformation=0x259f0ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c3c71c5, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8c3c71c5, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0217.846] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a8c0 | out: hHeap=0x1f0000) returned 1 [0217.846] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a380 [0217.846] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-coresystem-smsrouter-events%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0b4 | out: lpFileInformation=0x259f0b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c3c71c5, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8c3c71c5, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0217.846] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a380 | out: hHeap=0x1f0000) returned 1 [0217.846] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a968 [0217.846] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a968 | out: hHeap=0x1f0000) returned 1 [0217.846] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc9231, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cc9231, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx", cAlternateFileName="MI5FD1~1.EVT")) returned 1 [0217.846] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0217.846] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0217.847] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e88 [0217.847] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0217.847] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a4d0 | out: hHeap=0x1f0000) returned 1 [0217.847] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0217.847] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4backupkeysvc.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x238 [0217.847] GetFileType (hFile=0x238) returned 0x1 [0217.848] CloseHandle (hObject=0x238) returned 1 [0217.848] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0217.848] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4backupkeysvc.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0ac | out: lpFileInformation=0x259f0ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc9231, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cc9231, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0217.849] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0217.849] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0217.849] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4backupkeysvc.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0b4 | out: lpFileInformation=0x259f0b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc9231, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cc9231, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0217.849] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0217.849] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2135f8 [0217.849] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2135f8 | out: hHeap=0x1f0000) returned 1 [0217.850] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ca2fbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ca2fbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Microsoft-Windows-Crypto-DPAPI%4Operational.evtx", cAlternateFileName="MI8BDF~1.EVT")) returned 1 [0217.850] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0217.850] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0217.850] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213818 [0217.851] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0217.851] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e88 | out: hHeap=0x1f0000) returned 1 [0217.851] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0217.851] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x238 [0217.852] GetFileType (hFile=0x238) returned 0x1 [0217.852] CloseHandle (hObject=0x238) returned 1 [0217.853] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0217.853] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0ac | out: lpFileInformation=0x259f0ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ca2fbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ca2fbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0217.853] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0217.853] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0217.853] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0b4 | out: lpFileInformation=0x259f0b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ca2fbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ca2fbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0217.853] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0217.854] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2135f8 [0217.854] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2135f8 | out: hHeap=0x1f0000) returned 1 [0217.854] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c3ed420, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8c3ed420, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx", cAlternateFileName="MIAEBD~1.EVT")) returned 1 [0217.854] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a620 [0217.854] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0217.854] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261160 [0217.854] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0217.854] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213818 | out: hHeap=0x1f0000) returned 1 [0217.854] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a620 | out: hHeap=0x1f0000) returned 1 [0217.855] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-devicemanagement-enterprise-diagnostics-provider%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x238 [0217.855] GetFileType (hFile=0x238) returned 0x1 [0217.856] CloseHandle (hObject=0x238) returned 1 [0217.856] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x285eb0 [0217.856] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-devicemanagement-enterprise-diagnostics-provider%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0ac | out: lpFileInformation=0x259f0ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c3ed420, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8c3ed420, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x101000)) returned 1 [0217.856] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285eb0 | out: hHeap=0x1f0000) returned 1 [0217.856] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x286300 [0217.856] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-devicemanagement-enterprise-diagnostics-provider%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0b4 | out: lpFileInformation=0x259f0b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c3ed420, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8c3ed420, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x101000)) returned 1 [0217.857] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286300 | out: hHeap=0x1f0000) returned 1 [0217.857] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x286e80 [0217.857] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286e80 | out: hHeap=0x1f0000) returned 1 [0217.857] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cef47f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cef47f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Microsoft-Windows-DeviceSetupManager%4Admin.evtx", cAlternateFileName="MIA726~1.EVT")) returned 1 [0217.857] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fef0 [0217.857] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0217.857] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0217.857] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0217.858] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261160 | out: hHeap=0x1f0000) returned 1 [0217.858] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fef0 | out: hHeap=0x1f0000) returned 1 [0217.858] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-DeviceSetupManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x238 [0217.859] GetFileType (hFile=0x238) returned 0x1 [0217.859] CloseHandle (hObject=0x238) returned 1 [0217.860] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0217.860] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-DeviceSetupManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0ac | out: lpFileInformation=0x259f0ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cef47f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cef47f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0217.860] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0217.860] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2135f8 [0217.860] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-DeviceSetupManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0b4 | out: lpFileInformation=0x259f0b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cef47f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cef47f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0217.860] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2135f8 | out: hHeap=0x1f0000) returned 1 [0217.860] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213818 [0217.861] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213818 | out: hHeap=0x1f0000) returned 1 [0217.861] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc9231, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cc9231, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Microsoft-Windows-DeviceSetupManager%4Operational.evtx", cAlternateFileName="MI08CB~1.EVT")) returned 1 [0217.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0217.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0217.861] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2135f8 [0217.861] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0217.861] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0217.861] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0217.862] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-DeviceSetupManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x238 [0217.862] GetFileType (hFile=0x238) returned 0x1 [0217.863] CloseHandle (hObject=0x238) returned 1 [0217.863] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0217.863] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-DeviceSetupManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0ac | out: lpFileInformation=0x259f0ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc9231, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cc9231, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0217.863] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0217.863] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213680 [0217.864] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-DeviceSetupManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0b4 | out: lpFileInformation=0x259f0b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc9231, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cc9231, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0217.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213680 | out: hHeap=0x1f0000) returned 1 [0217.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212cf0 [0217.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212cf0 | out: hHeap=0x1f0000) returned 1 [0217.864] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc967f17e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc967f17e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Microsoft-Windows-Dhcp-Client%4Admin.evtx", cAlternateFileName="MI8270~1.EVT")) returned 1 [0217.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235cb0 [0217.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0217.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0217.865] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0217.865] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2135f8 | out: hHeap=0x1f0000) returned 1 [0217.865] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235cb0 | out: hHeap=0x1f0000) returned 1 [0218.374] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Dhcp-Client%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-dhcp-client%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0218.374] GetFileType (hFile=0x210) returned 0x1 [0218.374] CloseHandle (hObject=0x210) returned 1 [0218.375] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2202b0 [0218.375] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Dhcp-Client%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-dhcp-client%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0ac | out: lpFileInformation=0x259f0ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc967f17e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc967f17e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0218.375] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2202b0 | out: hHeap=0x1f0000) returned 1 [0218.375] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fa40 [0218.375] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Dhcp-Client%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-dhcp-client%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0b4 | out: lpFileInformation=0x259f0b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc967f17e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc967f17e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0218.376] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fa40 | out: hHeap=0x1f0000) returned 1 [0218.376] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220328 [0218.376] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220328 | out: hHeap=0x1f0000) returned 1 [0218.376] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc96cb64b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc96cb64b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Microsoft-Windows-Dhcpv6-Client%4Admin.evtx", cAlternateFileName="MIEBFF~1.EVT")) returned 1 [0218.376] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235de8 [0218.376] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0218.376] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0218.376] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0218.376] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0218.376] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235de8 | out: hHeap=0x1f0000) returned 1 [0218.377] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-dhcpv6-client%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0218.377] GetFileType (hFile=0x210) returned 0x1 [0218.378] CloseHandle (hObject=0x210) returned 1 [0218.378] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21ff68 [0218.378] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-dhcpv6-client%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0ac | out: lpFileInformation=0x259f0ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc96cb64b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc96cb64b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0218.378] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ff68 | out: hHeap=0x1f0000) returned 1 [0218.379] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21ff68 [0218.379] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-dhcpv6-client%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0b4 | out: lpFileInformation=0x259f0b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc96cb64b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc96cb64b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0218.379] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ff68 | out: hHeap=0x1f0000) returned 1 [0218.379] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0218.379] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0218.379] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca64aa7b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca64aa7b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Microsoft-Windows-Diagnosis-DPS%4Operational.evtx", cAlternateFileName="MI9F85~1.EVT")) returned 1 [0218.379] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fc20 [0218.379] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380f0 [0218.379] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212a48 [0218.380] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380f0 | out: hHeap=0x1f0000) returned 1 [0218.380] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0218.380] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fc20 | out: hHeap=0x1f0000) returned 1 [0218.380] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-diagnosis-dps%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0218.381] GetFileType (hFile=0x210) returned 0x1 [0218.382] CloseHandle (hObject=0x210) returned 1 [0218.382] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0218.382] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-diagnosis-dps%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0ac | out: lpFileInformation=0x259f0ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca64aa7b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca64aa7b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0218.382] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0218.382] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2132c8 [0218.383] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-diagnosis-dps%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0b4 | out: lpFileInformation=0x259f0b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca64aa7b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca64aa7b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0218.383] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2132c8 | out: hHeap=0x1f0000) returned 1 [0218.383] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0218.383] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0218.383] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd9ec80, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xfd9ec80, ftLastAccessTime.dwHighDateTime=0x1d1a04f, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Microsoft-Windows-Diagnostics-Performance%4Operational.evtx", cAlternateFileName="MIBE3D~1.EVT")) returned 1 [0218.383] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2135f8 [0218.383] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0218.383] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0218.383] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0218.384] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212a48 | out: hHeap=0x1f0000) returned 1 [0218.384] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2135f8 | out: hHeap=0x1f0000) returned 1 [0218.384] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-diagnostics-performance%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0218.385] GetFileType (hFile=0x210) returned 0x1 [0218.385] CloseHandle (hObject=0x210) returned 1 [0218.385] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0218.386] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-diagnostics-performance%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0ac | out: lpFileInformation=0x259f0ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd9ec80, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xfd9ec80, ftLastAccessTime.dwHighDateTime=0x1d1a04f, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0218.386] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0218.386] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0218.386] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-diagnostics-performance%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0b4 | out: lpFileInformation=0x259f0b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd9ec80, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xfd9ec80, ftLastAccessTime.dwHighDateTime=0x1d1a04f, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0218.386] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0218.386] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0218.387] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0218.387] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9658ef3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9658ef3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Microsoft-Windows-GroupPolicy%4Operational.evtx", cAlternateFileName="MIE38D~1.EVT")) returned 1 [0218.387] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235de8 [0218.387] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0218.387] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0218.387] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0218.387] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0218.387] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235de8 | out: hHeap=0x1f0000) returned 1 [0218.388] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-GroupPolicy%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-grouppolicy%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0218.388] GetFileType (hFile=0x210) returned 0x1 [0218.389] CloseHandle (hObject=0x210) returned 1 [0218.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212a48 [0218.389] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-GroupPolicy%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-grouppolicy%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0ac | out: lpFileInformation=0x259f0ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9658ef3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9658ef3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0218.390] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212a48 | out: hHeap=0x1f0000) returned 1 [0218.390] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0218.390] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-GroupPolicy%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-grouppolicy%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0b4 | out: lpFileInformation=0x259f0b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9658ef3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9658ef3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0218.390] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0218.390] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2132c8 [0218.390] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2132c8 | out: hHeap=0x1f0000) returned 1 [0218.390] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9dcc480, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9dcc480, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Microsoft-Windows-HotspotAuth%4Operational.evtx", cAlternateFileName="MIE386~1.EVT")) returned 1 [0218.390] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235908 [0218.391] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0218.391] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212be0 [0218.391] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0218.391] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0218.391] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235908 | out: hHeap=0x1f0000) returned 1 [0218.392] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-HotspotAuth%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-hotspotauth%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0218.392] GetFileType (hFile=0x210) returned 0x1 [0218.392] CloseHandle (hObject=0x210) returned 1 [0218.393] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0218.393] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-HotspotAuth%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-hotspotauth%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0ac | out: lpFileInformation=0x259f0ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9dcc480, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9dcc480, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0218.393] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0218.393] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2135f8 [0218.393] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-HotspotAuth%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-hotspotauth%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0b4 | out: lpFileInformation=0x259f0b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9dcc480, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9dcc480, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0218.393] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2135f8 | out: hHeap=0x1f0000) returned 1 [0218.394] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0218.394] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0218.394] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50b4bacf, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50b4bacf, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx", cAlternateFileName="MI6B25~1.EVT")) returned 1 [0218.394] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0218.394] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0218.394] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212cf0 [0218.394] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0218.394] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212be0 | out: hHeap=0x1f0000) returned 1 [0218.394] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0218.395] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-hyper-v-guest-drivers%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0218.395] GetFileType (hFile=0x210) returned 0x1 [0218.396] CloseHandle (hObject=0x210) returned 1 [0218.396] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0218.396] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-hyper-v-guest-drivers%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0ac | out: lpFileInformation=0x259f0ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50b4bacf, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50b4bacf, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0218.397] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0218.397] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212a48 [0218.397] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-hyper-v-guest-drivers%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0b4 | out: lpFileInformation=0x259f0b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50b4bacf, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50b4bacf, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0218.397] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212a48 | out: hHeap=0x1f0000) returned 1 [0218.397] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0218.397] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0218.397] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb66288f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb66288f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Microsoft-Windows-International%4Operational.evtx", cAlternateFileName="MI854A~1.EVT")) returned 1 [0218.397] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0218.397] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0218.398] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0218.398] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0218.398] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212cf0 | out: hHeap=0x1f0000) returned 1 [0218.398] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0218.399] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-International%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-international%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0218.399] GetFileType (hFile=0x210) returned 0x1 [0218.399] CloseHandle (hObject=0x210) returned 1 [0218.400] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0218.400] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-International%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-international%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0ac | out: lpFileInformation=0x259f0ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb66288f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb66288f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0218.400] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0218.400] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212cf0 [0218.400] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-International%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-international%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0b4 | out: lpFileInformation=0x259f0b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb66288f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb66288f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0218.400] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212cf0 | out: hHeap=0x1f0000) returned 1 [0218.400] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2132c8 [0218.401] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2132c8 | out: hHeap=0x1f0000) returned 1 [0218.401] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x506ad1ac, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x506ad1ac, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Microsoft-Windows-Kernel-Boot%4Operational.evtx", cAlternateFileName="MI32CE~1.EVT")) returned 1 [0218.401] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235768 [0218.401] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380c8 [0218.401] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2135f8 [0218.401] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380c8 | out: hHeap=0x1f0000) returned 1 [0218.401] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0218.402] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235768 | out: hHeap=0x1f0000) returned 1 [0218.402] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-Boot%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-boot%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0218.403] GetFileType (hFile=0x210) returned 0x1 [0218.403] CloseHandle (hObject=0x210) returned 1 [0218.404] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0218.404] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-Boot%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-boot%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0ac | out: lpFileInformation=0x259f0ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x506ad1ac, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x506ad1ac, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0218.404] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0218.404] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0218.404] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-Boot%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-boot%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0b4 | out: lpFileInformation=0x259f0b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x506ad1ac, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x506ad1ac, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0218.404] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0218.405] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213680 [0218.405] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213680 | out: hHeap=0x1f0000) returned 1 [0218.405] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ca2fbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ca2fbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Microsoft-Windows-Kernel-EventTracing%4Admin.evtx", cAlternateFileName="MIA934~1.EVT")) returned 1 [0218.405] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2202b0 [0218.405] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0218.405] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2132c8 [0218.405] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0218.405] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2135f8 | out: hHeap=0x1f0000) returned 1 [0218.405] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2202b0 | out: hHeap=0x1f0000) returned 1 [0218.406] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-eventtracing%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0218.406] GetFileType (hFile=0x210) returned 0x1 [0218.406] CloseHandle (hObject=0x210) returned 1 [0218.407] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2135f8 [0218.407] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-eventtracing%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0ac | out: lpFileInformation=0x259f0ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ca2fbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ca2fbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0218.407] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2135f8 | out: hHeap=0x1f0000) returned 1 [0218.407] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2133d8 [0218.407] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-eventtracing%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0b4 | out: lpFileInformation=0x259f0b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ca2fbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ca2fbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0218.407] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2133d8 | out: hHeap=0x1f0000) returned 1 [0218.407] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2135f8 [0218.407] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2135f8 | out: hHeap=0x1f0000) returned 1 [0218.407] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5071f8b0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5071f8b0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Microsoft-Windows-Kernel-PnP%4Configuration.evtx", cAlternateFileName="MIB32D~1.EVT")) returned 1 [0218.408] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0218.408] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0218.408] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0218.408] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0218.408] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2132c8 | out: hHeap=0x1f0000) returned 1 [0218.408] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0218.409] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-PnP%4Configuration.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-pnp%4configuration.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0218.409] GetFileType (hFile=0x210) returned 0x1 [0218.409] CloseHandle (hObject=0x210) returned 1 [0218.409] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0218.410] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-PnP%4Configuration.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-pnp%4configuration.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0ac | out: lpFileInformation=0x259f0ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5071f8b0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5071f8b0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000)) returned 1 [0218.410] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0218.410] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212cf0 [0218.410] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-PnP%4Configuration.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-pnp%4configuration.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0b4 | out: lpFileInformation=0x259f0b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5071f8b0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5071f8b0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000)) returned 1 [0218.410] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212cf0 | out: hHeap=0x1f0000) returned 1 [0218.410] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0218.410] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0218.410] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8ebf6d7, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc8ebf6d7, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx", cAlternateFileName="MICA77~1.EVT")) returned 1 [0218.410] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0218.410] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0218.411] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0218.411] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0218.411] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0218.411] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0218.411] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-power%4thermal-operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0218.412] GetFileType (hFile=0x210) returned 0x1 [0218.585] CloseHandle (hObject=0x210) returned 1 [0218.585] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0218.585] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-power%4thermal-operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0ac | out: lpFileInformation=0x259f0ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8ebf6d7, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc8ebf6d7, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0218.586] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0218.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0218.586] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-power%4thermal-operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0b4 | out: lpFileInformation=0x259f0b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8ebf6d7, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc8ebf6d7, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0218.586] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0218.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0218.586] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0218.586] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5090f75d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5090f75d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx", cAlternateFileName="MI1E8D~1.EVT")) returned 1 [0218.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220580 [0218.587] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0218.587] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0218.587] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0218.587] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0218.587] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220580 | out: hHeap=0x1f0000) returned 1 [0218.631] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-shimengine%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0218.632] GetFileType (hFile=0x210) returned 0x1 [0218.632] CloseHandle (hObject=0x210) returned 1 [0218.633] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0218.633] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-shimengine%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0ac | out: lpFileInformation=0x259f0ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5090f75d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5090f75d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0218.633] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0218.633] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0218.634] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-shimengine%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0b4 | out: lpFileInformation=0x259f0b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5090f75d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5090f75d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0218.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0218.634] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0218.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0218.634] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd75102f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcd75102f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx", cAlternateFileName="MID067~1.EVT")) returned 1 [0218.635] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0218.635] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0218.635] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2135f8 [0218.635] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0218.636] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0218.636] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0218.637] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-storemgr%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0218.637] GetFileType (hFile=0x210) returned 0x1 [0218.638] CloseHandle (hObject=0x210) returned 1 [0218.638] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0218.638] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-storemgr%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0ac | out: lpFileInformation=0x259f0ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd75102f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcd75102f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0218.639] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0218.639] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0218.639] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-storemgr%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0b4 | out: lpFileInformation=0x259f0b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd75102f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcd75102f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0218.639] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0218.639] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e88 [0218.639] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e88 | out: hHeap=0x1f0000) returned 1 [0218.639] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50be4414, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50be4414, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Microsoft-Windows-Kernel-WHEA%4Errors.evtx", cAlternateFileName="MIDE4D~1.EVT")) returned 1 [0218.639] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236128 [0218.640] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0218.640] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0218.640] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0218.640] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2135f8 | out: hHeap=0x1f0000) returned 1 [0218.640] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236128 | out: hHeap=0x1f0000) returned 1 [0218.641] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-WHEA%4Errors.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4errors.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0218.641] GetFileType (hFile=0x210) returned 0x1 [0218.642] CloseHandle (hObject=0x210) returned 1 [0218.642] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2201c0 [0218.642] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-WHEA%4Errors.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4errors.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0ac | out: lpFileInformation=0x259f0ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50be4414, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50be4414, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0218.642] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2201c0 | out: hHeap=0x1f0000) returned 1 [0218.643] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe00 [0218.643] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-WHEA%4Errors.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4errors.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0b4 | out: lpFileInformation=0x259f0b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50be4414, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50be4414, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0218.643] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe00 | out: hHeap=0x1f0000) returned 1 [0218.643] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220580 [0218.643] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220580 | out: hHeap=0x1f0000) returned 1 [0218.643] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50be4414, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50be4414, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Microsoft-Windows-Kernel-WHEA%4Operational.evtx", cAlternateFileName="MI36C5~1.EVT")) returned 1 [0218.643] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2357d0 [0218.643] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380c8 [0218.644] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0218.644] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380c8 | out: hHeap=0x1f0000) returned 1 [0218.644] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0218.644] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2357d0 | out: hHeap=0x1f0000) returned 1 [0218.645] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-WHEA%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0218.645] GetFileType (hFile=0x210) returned 0x1 [0218.646] CloseHandle (hObject=0x210) returned 1 [0218.646] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0218.647] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-WHEA%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0ac | out: lpFileInformation=0x259f0ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50be4414, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50be4414, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0218.647] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0218.647] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0218.647] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Kernel-WHEA%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0b4 | out: lpFileInformation=0x259f0b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50be4414, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50be4414, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0218.647] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0218.648] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0218.648] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0218.648] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59547c37, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x59547c37, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Microsoft-Windows-Known Folders API Service.evtx", cAlternateFileName="MI86D6~1.EVT")) returned 1 [0218.648] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f770 [0218.648] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238438 [0218.648] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213570 [0218.648] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238438 | out: hHeap=0x1f0000) returned 1 [0218.649] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0218.649] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f770 | out: hHeap=0x1f0000) returned 1 [0218.650] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Known Folders API Service.evtx" (normalized: "c:\\logs\\microsoft-windows-known folders api service.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0218.650] GetFileType (hFile=0x210) returned 0x1 [0218.651] CloseHandle (hObject=0x210) returned 1 [0218.651] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212c68 [0218.651] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Known Folders API Service.evtx" (normalized: "c:\\logs\\microsoft-windows-known folders api service.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0ac | out: lpFileInformation=0x259f0ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59547c37, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x59547c37, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0218.651] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212c68 | out: hHeap=0x1f0000) returned 1 [0218.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f10 [0218.652] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Known Folders API Service.evtx" (normalized: "c:\\logs\\microsoft-windows-known folders api service.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0b4 | out: lpFileInformation=0x259f0b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59547c37, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x59547c37, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0218.652] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f10 | out: hHeap=0x1f0000) returned 1 [0218.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0218.652] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0218.652] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbb7386e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcbb7386e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Microsoft-Windows-LiveId%4Operational.evtx", cAlternateFileName="MI4C58~1.EVT")) returned 1 [0218.653] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235e50 [0218.653] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380c8 [0218.653] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fab8 [0218.653] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380c8 | out: hHeap=0x1f0000) returned 1 [0218.653] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213570 | out: hHeap=0x1f0000) returned 1 [0218.653] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235e50 | out: hHeap=0x1f0000) returned 1 [0218.654] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-LiveId%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-liveid%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0218.654] GetFileType (hFile=0x210) returned 0x1 [0218.655] CloseHandle (hObject=0x210) returned 1 [0218.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220580 [0218.656] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-LiveId%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-liveid%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0ac | out: lpFileInformation=0x259f0ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbb7386e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcbb7386e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0218.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220580 | out: hHeap=0x1f0000) returned 1 [0218.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fc20 [0218.656] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-LiveId%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-liveid%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0b4 | out: lpFileInformation=0x259f0b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbb7386e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcbb7386e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0218.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fc20 | out: hHeap=0x1f0000) returned 1 [0218.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220580 [0218.657] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220580 | out: hHeap=0x1f0000) returned 1 [0218.657] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc93d06f0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc93d06f0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Microsoft-Windows-MUI%4Admin.evtx", cAlternateFileName="MI30D3~1.EVT")) returned 1 [0218.657] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c8b8 [0218.657] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0218.657] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235b78 [0218.657] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0218.657] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fab8 | out: hHeap=0x1f0000) returned 1 [0218.657] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0218.658] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-MUI%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-mui%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0218.659] GetFileType (hFile=0x210) returned 0x1 [0218.659] CloseHandle (hObject=0x210) returned 1 [0218.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2362c8 [0218.660] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-MUI%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-mui%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0ac | out: lpFileInformation=0x259f0ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc93d06f0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc93d06f0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0218.660] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2362c8 | out: hHeap=0x1f0000) returned 1 [0218.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236128 [0218.660] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-MUI%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-mui%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0b4 | out: lpFileInformation=0x259f0b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc93d06f0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc93d06f0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0218.660] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236128 | out: hHeap=0x1f0000) returned 1 [0218.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235c48 [0218.661] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235c48 | out: hHeap=0x1f0000) returned 1 [0218.661] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc93aa49b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc93aa49b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Microsoft-Windows-MUI%4Operational.evtx", cAlternateFileName="MI6F01~1.EVT")) returned 1 [0218.661] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c8b8 [0218.661] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0218.661] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220580 [0218.661] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0218.661] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0218.661] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0218.662] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-MUI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-mui%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0218.662] GetFileType (hFile=0x210) returned 0x1 [0218.663] CloseHandle (hObject=0x210) returned 1 [0218.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0218.928] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-MUI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-mui%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0ac | out: lpFileInformation=0x259f0ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc93aa49b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc93aa49b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0218.928] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0218.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2201c0 [0218.928] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-MUI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-mui%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0b4 | out: lpFileInformation=0x259f0b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc93aa49b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc93aa49b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0218.929] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2201c0 | out: hHeap=0x1f0000) returned 1 [0218.929] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0218.929] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0218.929] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9d33b19, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9d33b19, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Microsoft-Windows-NCSI%4Operational.evtx", cAlternateFileName="MI483C~1.EVT")) returned 1 [0218.929] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236128 [0218.929] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0218.929] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0218.929] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0218.930] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220580 | out: hHeap=0x1f0000) returned 1 [0218.930] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236128 | out: hHeap=0x1f0000) returned 1 [0218.930] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-NCSI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-ncsi%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0218.931] GetFileType (hFile=0x210) returned 0x1 [0218.931] CloseHandle (hObject=0x210) returned 1 [0218.931] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2202b0 [0218.931] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-NCSI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-ncsi%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0ac | out: lpFileInformation=0x259f0ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9d33b19, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9d33b19, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0218.932] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2202b0 | out: hHeap=0x1f0000) returned 1 [0218.932] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0218.932] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-NCSI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-ncsi%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0b4 | out: lpFileInformation=0x259f0b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9d33b19, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9d33b19, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0218.932] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0218.932] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fa40 [0218.932] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fa40 | out: hHeap=0x1f0000) returned 1 [0218.932] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbcf0ff2, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcbcf0ff2, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Microsoft-Windows-NetworkProfile%4Operational.evtx", cAlternateFileName="MIFC66~1.EVT")) returned 1 [0218.932] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21ffe0 [0218.932] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0218.932] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213570 [0218.933] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0218.933] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0218.933] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ffe0 | out: hHeap=0x1f0000) returned 1 [0218.933] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-NetworkProfile%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-networkprofile%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0218.934] GetFileType (hFile=0x210) returned 0x1 [0218.934] CloseHandle (hObject=0x210) returned 1 [0218.934] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0218.934] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-NetworkProfile%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-networkprofile%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0ac | out: lpFileInformation=0x259f0ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbcf0ff2, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcbcf0ff2, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0218.934] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0218.935] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2133d8 [0218.935] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-NetworkProfile%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-networkprofile%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0b4 | out: lpFileInformation=0x259f0b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbcf0ff2, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcbcf0ff2, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0218.935] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2133d8 | out: hHeap=0x1f0000) returned 1 [0218.935] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0218.935] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0218.935] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ab3154, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ab3154, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Microsoft-Windows-Ntfs%4Operational.evtx", cAlternateFileName="MI6E98~1.EVT")) returned 1 [0218.935] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235be0 [0218.935] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0218.935] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0218.935] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0218.936] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213570 | out: hHeap=0x1f0000) returned 1 [0218.936] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235be0 | out: hHeap=0x1f0000) returned 1 [0218.936] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Ntfs%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-ntfs%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0218.936] GetFileType (hFile=0x210) returned 0x1 [0218.937] CloseHandle (hObject=0x210) returned 1 [0218.937] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220580 [0218.937] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Ntfs%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-ntfs%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0ac | out: lpFileInformation=0x259f0ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ab3154, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ab3154, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0218.937] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220580 | out: hHeap=0x1f0000) returned 1 [0218.937] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21ffe0 [0218.938] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Ntfs%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-ntfs%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0b4 | out: lpFileInformation=0x259f0b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ab3154, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ab3154, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0218.938] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ffe0 | out: hHeap=0x1f0000) returned 1 [0218.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fef0 [0218.938] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fef0 | out: hHeap=0x1f0000) returned 1 [0218.938] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ad9393, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ad9393, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Microsoft-Windows-Ntfs%4WHC.evtx", cAlternateFileName="MIB2AC~1.EVT")) returned 1 [0218.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22c8b8 [0218.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0218.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235970 [0218.938] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0218.938] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0218.938] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22c8b8 | out: hHeap=0x1f0000) returned 1 [0218.939] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Ntfs%4WHC.evtx" (normalized: "c:\\logs\\microsoft-windows-ntfs%4whc.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0218.939] GetFileType (hFile=0x210) returned 0x1 [0218.939] CloseHandle (hObject=0x210) returned 1 [0218.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235be0 [0218.940] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Ntfs%4WHC.evtx" (normalized: "c:\\logs\\microsoft-windows-ntfs%4whc.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0ac | out: lpFileInformation=0x259f0ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ad9393, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ad9393, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0218.940] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235be0 | out: hHeap=0x1f0000) returned 1 [0218.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235be0 [0218.940] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Ntfs%4WHC.evtx" (normalized: "c:\\logs\\microsoft-windows-ntfs%4whc.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0b4 | out: lpFileInformation=0x259f0b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ad9393, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ad9393, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0218.940] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235be0 | out: hHeap=0x1f0000) returned 1 [0218.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235be0 [0218.940] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235be0 | out: hHeap=0x1f0000) returned 1 [0218.940] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca5fe5cb, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca5fe5cb, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx", cAlternateFileName="MI6AFE~1.EVT")) returned 1 [0218.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a230 [0218.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0218.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x286e80 [0218.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0218.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235970 | out: hHeap=0x1f0000) returned 1 [0218.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a230 | out: hHeap=0x1f0000) returned 1 [0218.941] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx" (normalized: "c:\\logs\\microsoft-windows-program-compatibility-assistant%4compatafterupgrade.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0218.941] GetFileType (hFile=0x210) returned 0x1 [0218.942] CloseHandle (hObject=0x210) returned 1 [0218.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x286a30 [0218.942] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx" (normalized: "c:\\logs\\microsoft-windows-program-compatibility-assistant%4compatafterupgrade.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0ac | out: lpFileInformation=0x259f0ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca5fe5cb, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca5fe5cb, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0218.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286a30 | out: hHeap=0x1f0000) returned 1 [0218.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x286c58 [0218.942] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx" (normalized: "c:\\logs\\microsoft-windows-program-compatibility-assistant%4compatafterupgrade.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0b4 | out: lpFileInformation=0x259f0b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca5fe5cb, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca5fe5cb, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0218.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286c58 | out: hHeap=0x1f0000) returned 1 [0218.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x286698 [0218.943] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286698 | out: hHeap=0x1f0000) returned 1 [0218.943] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe24cdef0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xe24cdef0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Microsoft-Windows-ReadyBoost%4Operational.evtx", cAlternateFileName="MIB9D2~1.EVT")) returned 1 [0218.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235de8 [0218.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0218.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0218.944] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0218.944] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x286e80 | out: hHeap=0x1f0000) returned 1 [0218.944] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235de8 | out: hHeap=0x1f0000) returned 1 [0218.944] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-ReadyBoost%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-readyboost%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0218.945] GetFileType (hFile=0x210) returned 0x1 [0218.945] CloseHandle (hObject=0x210) returned 1 [0218.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0218.945] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-ReadyBoost%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-readyboost%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0ac | out: lpFileInformation=0x259f0ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe24cdef0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xe24cdef0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0218.946] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0218.946] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fef0 [0218.946] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-ReadyBoost%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-readyboost%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0b4 | out: lpFileInformation=0x259f0b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe24cdef0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xe24cdef0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0218.946] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fef0 | out: hHeap=0x1f0000) returned 1 [0218.946] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220580 [0218.946] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220580 | out: hHeap=0x1f0000) returned 1 [0218.946] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd125335f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd125335f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx", cAlternateFileName="MI7A67~1.EVT")) returned 1 [0218.946] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0218.946] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0218.946] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21aab8 [0218.946] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0218.947] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0218.947] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0218.947] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-resource-exhaustion-detector%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0218.947] GetFileType (hFile=0x210) returned 0x1 [0218.948] CloseHandle (hObject=0x210) returned 1 [0218.948] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a188 [0218.948] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-resource-exhaustion-detector%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0ac | out: lpFileInformation=0x259f0ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd125335f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd125335f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0218.948] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a188 | out: hHeap=0x1f0000) returned 1 [0218.948] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a578 [0218.948] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-resource-exhaustion-detector%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0b4 | out: lpFileInformation=0x259f0b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd125335f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd125335f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0218.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a578 | out: hHeap=0x1f0000) returned 1 [0218.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219e40 [0218.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219e40 | out: hHeap=0x1f0000) returned 1 [0218.949] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1fe2941, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd1fe2941, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Microsoft-Windows-SettingSync%4Debug.evtx", cAlternateFileName="MI3773~1.EVT")) returned 1 [0218.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235f20 [0218.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0218.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220580 [0218.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0218.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21aab8 | out: hHeap=0x1f0000) returned 1 [0218.950] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235f20 | out: hHeap=0x1f0000) returned 1 [0218.950] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-SettingSync%4Debug.evtx" (normalized: "c:\\logs\\microsoft-windows-settingsync%4debug.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0218.950] GetFileType (hFile=0x210) returned 0x1 [0218.951] CloseHandle (hObject=0x210) returned 1 [0218.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0218.951] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-SettingSync%4Debug.evtx" (normalized: "c:\\logs\\microsoft-windows-settingsync%4debug.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0ac | out: lpFileInformation=0x259f0ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1fe2941, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd1fe2941, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000)) returned 1 [0218.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0218.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fb30 [0218.951] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-SettingSync%4Debug.evtx" (normalized: "c:\\logs\\microsoft-windows-settingsync%4debug.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0b4 | out: lpFileInformation=0x259f0b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1fe2941, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd1fe2941, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000)) returned 1 [0218.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fb30 | out: hHeap=0x1f0000) returned 1 [0218.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0218.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0218.951] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1fe2941, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd1fe2941, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Microsoft-Windows-SettingSync%4Operational.evtx", cAlternateFileName="MI36AA~1.EVT")) returned 1 [0218.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235970 [0218.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0218.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213680 [0218.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0218.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220580 | out: hHeap=0x1f0000) returned 1 [0218.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235970 | out: hHeap=0x1f0000) returned 1 [0218.952] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-SettingSync%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-settingsync%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0218.952] GetFileType (hFile=0x210) returned 0x1 [0218.952] CloseHandle (hObject=0x210) returned 1 [0218.953] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0218.953] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-SettingSync%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-settingsync%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0ac | out: lpFileInformation=0x259f0ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1fe2941, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd1fe2941, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0218.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0218.953] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e88 [0218.953] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-SettingSync%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-settingsync%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0b4 | out: lpFileInformation=0x259f0b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1fe2941, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd1fe2941, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0218.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e88 | out: hHeap=0x1f0000) returned 1 [0218.953] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212a48 [0218.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212a48 | out: hHeap=0x1f0000) returned 1 [0218.953] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3852b12, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd3852b12, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Microsoft-Windows-Shell-Core%4ActionCenter.evtx", cAlternateFileName="MI2E2E~1.EVT")) returned 1 [0218.953] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235f88 [0218.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0218.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0218.954] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0218.954] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213680 | out: hHeap=0x1f0000) returned 1 [0218.954] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235f88 | out: hHeap=0x1f0000) returned 1 [0218.954] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Shell-Core%4ActionCenter.evtx" (normalized: "c:\\logs\\microsoft-windows-shell-core%4actioncenter.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0218.955] GetFileType (hFile=0x210) returned 0x1 [0218.955] CloseHandle (hObject=0x210) returned 1 [0218.955] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0218.955] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Shell-Core%4ActionCenter.evtx" (normalized: "c:\\logs\\microsoft-windows-shell-core%4actioncenter.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0ac | out: lpFileInformation=0x259f0ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3852b12, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd3852b12, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0218.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0218.955] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213570 [0218.955] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Shell-Core%4ActionCenter.evtx" (normalized: "c:\\logs\\microsoft-windows-shell-core%4actioncenter.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0b4 | out: lpFileInformation=0x259f0b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3852b12, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd3852b12, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0218.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213570 | out: hHeap=0x1f0000) returned 1 [0218.955] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2132c8 [0218.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2132c8 | out: hHeap=0x1f0000) returned 1 [0218.956] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3852b12, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd3852b12, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Microsoft-Windows-Shell-Core%4Operational.evtx", cAlternateFileName="MI1C6C~1.EVT")) returned 1 [0218.956] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235970 [0218.956] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0218.956] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0218.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0218.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0218.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235970 | out: hHeap=0x1f0000) returned 1 [0218.957] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Shell-Core%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-shell-core%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0218.957] GetFileType (hFile=0x210) returned 0x1 [0218.957] CloseHandle (hObject=0x210) returned 1 [0218.957] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0218.957] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Shell-Core%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-shell-core%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0ac | out: lpFileInformation=0x259f0ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3852b12, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd3852b12, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0218.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0218.958] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220580 [0218.958] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Shell-Core%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-shell-core%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0b4 | out: lpFileInformation=0x259f0b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3852b12, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd3852b12, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0218.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220580 | out: hHeap=0x1f0000) returned 1 [0218.958] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2201c0 [0218.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2201c0 | out: hHeap=0x1f0000) returned 1 [0218.958] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97d66c8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97d66c8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Microsoft-Windows-SmbClient%4Connectivity.evtx", cAlternateFileName="MI00FB~1.EVT")) returned 1 [0218.958] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235de8 [0218.958] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0218.958] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220490 [0218.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0218.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0218.959] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235de8 | out: hHeap=0x1f0000) returned 1 [0218.971] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-SmbClient%4Connectivity.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4connectivity.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0218.971] GetFileType (hFile=0x210) returned 0x1 [0218.971] CloseHandle (hObject=0x210) returned 1 [0218.971] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2201c0 [0218.971] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-SmbClient%4Connectivity.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4connectivity.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0ac | out: lpFileInformation=0x259f0ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97d66c8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97d66c8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0218.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2201c0 | out: hHeap=0x1f0000) returned 1 [0218.972] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0218.972] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-SmbClient%4Connectivity.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4connectivity.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0b4 | out: lpFileInformation=0x259f0b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97d66c8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97d66c8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0218.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0218.972] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0218.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0218.972] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97b042f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97b042f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Microsoft-Windows-SMBClient%4Operational.evtx", cAlternateFileName="MID8B0~1.EVT")) returned 1 [0218.972] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235f88 [0218.972] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0218.972] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0218.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0218.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220490 | out: hHeap=0x1f0000) returned 1 [0218.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235f88 | out: hHeap=0x1f0000) returned 1 [0218.973] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-SMBClient%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0218.973] GetFileType (hFile=0x210) returned 0x1 [0218.973] CloseHandle (hObject=0x210) returned 1 [0218.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fef0 [0218.973] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-SMBClient%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0ac | out: lpFileInformation=0x259f0ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97b042f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97b042f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0218.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fef0 | out: hHeap=0x1f0000) returned 1 [0218.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0218.974] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-SMBClient%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0b4 | out: lpFileInformation=0x259f0b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97b042f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97b042f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0218.974] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0218.974] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220580 [0218.974] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220580 | out: hHeap=0x1f0000) returned 1 [0218.974] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97d66c8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97d66c8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Microsoft-Windows-SmbClient%4Security.evtx", cAlternateFileName="MI8CEE~1.EVT")) returned 1 [0218.974] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235970 [0218.974] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0218.974] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0218.974] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0218.974] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0218.974] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235970 | out: hHeap=0x1f0000) returned 1 [0219.304] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-SmbClient%4Security.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4security.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x238 [0219.304] GetFileType (hFile=0x238) returned 0x1 [0219.305] CloseHandle (hObject=0x238) returned 1 [0219.305] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0219.305] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-SmbClient%4Security.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4security.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0ac | out: lpFileInformation=0x259f0ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97d66c8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97d66c8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0219.305] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0219.306] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0219.306] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-SmbClient%4Security.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4security.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0b4 | out: lpFileInformation=0x259f0b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97d66c8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97d66c8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0219.306] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0219.306] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0219.306] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0219.306] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb1ea1c9, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb1ea1c9, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Microsoft-Windows-SMBServer%4Audit.evtx", cAlternateFileName="MIE3AD~1.EVT")) returned 1 [0219.307] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x22bba8 [0219.307] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0219.307] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fab8 [0219.307] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0219.307] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0219.307] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22bba8 | out: hHeap=0x1f0000) returned 1 [0219.308] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-SMBServer%4Audit.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4audit.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x238 [0219.308] GetFileType (hFile=0x238) returned 0x1 [0219.309] CloseHandle (hObject=0x238) returned 1 [0219.309] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0219.309] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-SMBServer%4Audit.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4audit.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0ac | out: lpFileInformation=0x259f0ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb1ea1c9, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb1ea1c9, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0219.309] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0219.309] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0219.310] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-SMBServer%4Audit.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4audit.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0b4 | out: lpFileInformation=0x259f0b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb1ea1c9, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb1ea1c9, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0219.310] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0219.310] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0219.310] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0219.310] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb19dd19, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb19dd19, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Microsoft-Windows-SMBServer%4Connectivity.evtx", cAlternateFileName="MI8248~1.EVT")) returned 1 [0219.310] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235838 [0219.310] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0219.310] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0219.310] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0219.310] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fab8 | out: hHeap=0x1f0000) returned 1 [0219.310] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235838 | out: hHeap=0x1f0000) returned 1 [0219.311] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-SMBServer%4Connectivity.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4connectivity.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x238 [0219.311] GetFileType (hFile=0x238) returned 0x1 [0219.311] CloseHandle (hObject=0x238) returned 1 [0219.312] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0219.312] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-SMBServer%4Connectivity.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4connectivity.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0ac | out: lpFileInformation=0x259f0ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb19dd19, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb19dd19, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0219.312] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0219.312] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0219.312] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-SMBServer%4Connectivity.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4connectivity.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0b4 | out: lpFileInformation=0x259f0b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb19dd19, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb19dd19, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0219.313] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0219.313] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd88 [0219.313] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd88 | out: hHeap=0x1f0000) returned 1 [0219.313] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb151873, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb151873, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Microsoft-Windows-SMBServer%4Operational.evtx", cAlternateFileName="MI4B6B~1.EVT")) returned 1 [0219.313] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235eb8 [0219.313] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0219.313] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0219.313] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0219.313] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0219.313] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235eb8 | out: hHeap=0x1f0000) returned 1 [0219.314] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-SMBServer%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x238 [0219.314] GetFileType (hFile=0x238) returned 0x1 [0219.314] CloseHandle (hObject=0x238) returned 1 [0219.315] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220580 [0219.315] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-SMBServer%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0ac | out: lpFileInformation=0x259f0ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb151873, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb151873, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0219.315] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220580 | out: hHeap=0x1f0000) returned 1 [0219.315] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220328 [0219.315] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-SMBServer%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0b4 | out: lpFileInformation=0x259f0b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb151873, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb151873, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0219.315] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220328 | out: hHeap=0x1f0000) returned 1 [0219.315] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0219.315] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0219.315] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb177aca, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb177aca, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Microsoft-Windows-SMBServer%4Security.evtx", cAlternateFileName="MI7709~1.EVT")) returned 1 [0219.316] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235be0 [0219.316] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0219.316] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2203a0 [0219.316] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0219.316] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0219.316] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235be0 | out: hHeap=0x1f0000) returned 1 [0219.316] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-SMBServer%4Security.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4security.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x238 [0219.317] GetFileType (hFile=0x238) returned 0x1 [0219.317] CloseHandle (hObject=0x238) returned 1 [0219.317] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0219.317] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-SMBServer%4Security.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4security.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0ac | out: lpFileInformation=0x259f0ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb177aca, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb177aca, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0219.317] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0219.317] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220508 [0219.318] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-SMBServer%4Security.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4security.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0b4 | out: lpFileInformation=0x259f0b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb177aca, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb177aca, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0219.318] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220508 | out: hHeap=0x1f0000) returned 1 [0219.318] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0219.318] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0219.318] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd751ea61, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd751ea61, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Microsoft-Windows-Store%4Operational.evtx", cAlternateFileName="MICEDD~1.EVT")) returned 1 [0219.318] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235700 [0219.318] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0219.318] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2202b0 [0219.318] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0219.319] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2203a0 | out: hHeap=0x1f0000) returned 1 [0219.319] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0219.319] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Store%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-store%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x238 [0219.319] GetFileType (hFile=0x238) returned 0x1 [0219.319] CloseHandle (hObject=0x238) returned 1 [0219.320] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0219.320] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Store%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-store%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0ac | out: lpFileInformation=0x259f0ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd751ea61, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd751ea61, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0219.320] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0219.320] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220508 [0219.320] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Store%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-store%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0b4 | out: lpFileInformation=0x259f0b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd751ea61, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd751ea61, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0219.320] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220508 | out: hHeap=0x1f0000) returned 1 [0219.320] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220328 [0219.320] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220328 | out: hHeap=0x1f0000) returned 1 [0219.320] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd0763ff, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcd0763ff, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Microsoft-Windows-TaskScheduler%4Maintenance.evtx", cAlternateFileName="MIE2F0~1.EVT")) returned 1 [0219.320] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2203a0 [0219.320] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0219.320] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e88 [0219.321] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0219.321] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2202b0 | out: hHeap=0x1f0000) returned 1 [0219.321] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2203a0 | out: hHeap=0x1f0000) returned 1 [0219.321] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-TaskScheduler%4Maintenance.evtx" (normalized: "c:\\logs\\microsoft-windows-taskscheduler%4maintenance.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x238 [0219.321] GetFileType (hFile=0x238) returned 0x1 [0219.321] CloseHandle (hObject=0x238) returned 1 [0219.322] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0219.322] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-TaskScheduler%4Maintenance.evtx" (normalized: "c:\\logs\\microsoft-windows-taskscheduler%4maintenance.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0ac | out: lpFileInformation=0x259f0ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd0763ff, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcd0763ff, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0219.322] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0219.322] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0219.322] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-TaskScheduler%4Maintenance.evtx" (normalized: "c:\\logs\\microsoft-windows-taskscheduler%4maintenance.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0b4 | out: lpFileInformation=0x259f0b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd0763ff, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcd0763ff, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0219.322] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0219.322] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212cf0 [0219.322] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212cf0 | out: hHeap=0x1f0000) returned 1 [0219.322] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5089d037, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5089d037, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx", cAlternateFileName="MIAB1D~1.EVT")) returned 1 [0219.322] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0219.322] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0219.322] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a4d0 [0219.322] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0219.323] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e88 | out: hHeap=0x1f0000) returned 1 [0219.323] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0219.323] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x238 [0219.323] GetFileType (hFile=0x238) returned 0x1 [0219.323] CloseHandle (hObject=0x238) returned 1 [0219.323] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21aab8 [0219.324] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0ac | out: lpFileInformation=0x259f0ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5089d037, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5089d037, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0219.324] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21aab8 | out: hHeap=0x1f0000) returned 1 [0219.324] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a230 [0219.324] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0b4 | out: lpFileInformation=0x259f0b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5089d037, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5089d037, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0219.324] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a230 | out: hHeap=0x1f0000) returned 1 [0219.324] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a230 [0219.324] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a230 | out: hHeap=0x1f0000) returned 1 [0219.324] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x508c32a6, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x508c32a6, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx", cAlternateFileName="MI62D3~1.EVT")) returned 1 [0219.324] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a620 [0219.324] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0219.324] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261388 [0219.324] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0219.324] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a4d0 | out: hHeap=0x1f0000) returned 1 [0219.324] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a620 | out: hHeap=0x1f0000) returned 1 [0219.325] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x238 [0219.325] GetFileType (hFile=0x238) returned 0x1 [0219.325] CloseHandle (hObject=0x238) returned 1 [0219.325] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261668 [0219.325] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0ac | out: lpFileInformation=0x259f0ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x508c32a6, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x508c32a6, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0219.326] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261668 | out: hHeap=0x1f0000) returned 1 [0219.326] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261668 [0219.326] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0b4 | out: lpFileInformation=0x259f0b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x508c32a6, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x508c32a6, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0219.326] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261668 | out: hHeap=0x1f0000) returned 1 [0219.326] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261440 [0219.326] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261440 | out: hHeap=0x1f0000) returned 1 [0219.326] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc14341c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc14341c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx", cAlternateFileName="MIEC03~1.EVT")) returned 1 [0219.326] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0219.326] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238488 [0219.326] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a968 [0219.326] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238488 | out: hHeap=0x1f0000) returned 1 [0219.326] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261388 | out: hHeap=0x1f0000) returned 1 [0219.326] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0219.327] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x238 [0219.327] GetFileType (hFile=0x238) returned 0x1 [0219.327] CloseHandle (hObject=0x238) returned 1 [0219.327] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a818 [0219.327] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0ac | out: lpFileInformation=0x259f0ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc14341c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc14341c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0219.328] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a818 | out: hHeap=0x1f0000) returned 1 [0219.328] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219cf0 [0219.328] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0b4 | out: lpFileInformation=0x259f0b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc14341c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc14341c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0219.328] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219cf0 | out: hHeap=0x1f0000) returned 1 [0219.328] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a770 [0219.328] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a770 | out: hHeap=0x1f0000) returned 1 [0219.328] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc1b5b23, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc1b5b23, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx", cAlternateFileName="MI1F5D~1.EVT")) returned 1 [0219.328] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a038 [0219.328] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0219.328] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2610a8 [0219.328] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0219.328] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a968 | out: hHeap=0x1f0000) returned 1 [0219.328] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a038 | out: hHeap=0x1f0000) returned 1 [0219.329] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x238 [0219.329] GetFileType (hFile=0x238) returned 0x1 [0219.329] CloseHandle (hObject=0x238) returned 1 [0219.329] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x260ff0 [0219.329] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0ac | out: lpFileInformation=0x259f0ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc1b5b23, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc1b5b23, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0219.329] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ff0 | out: hHeap=0x1f0000) returned 1 [0219.329] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x260ff0 [0219.329] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0b4 | out: lpFileInformation=0x259f0b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc1b5b23, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc1b5b23, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0219.329] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ff0 | out: hHeap=0x1f0000) returned 1 [0219.330] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261388 [0219.330] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261388 | out: hHeap=0x1f0000) returned 1 [0219.330] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd74ac348, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd74ac348, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Microsoft-Windows-TWinUI%4Operational.evtx", cAlternateFileName="MIA925~1.EVT")) returned 1 [0219.330] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2359d8 [0219.330] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0219.330] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0219.330] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0219.330] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2610a8 | out: hHeap=0x1f0000) returned 1 [0219.330] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2359d8 | out: hHeap=0x1f0000) returned 1 [0219.331] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-TWinUI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-twinui%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x238 [0219.331] GetFileType (hFile=0x238) returned 0x1 [0219.331] CloseHandle (hObject=0x238) returned 1 [0219.331] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fa40 [0219.332] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-TWinUI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-twinui%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0ac | out: lpFileInformation=0x259f0ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd74ac348, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd74ac348, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0219.332] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fa40 | out: hHeap=0x1f0000) returned 1 [0219.332] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd88 [0219.332] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-TWinUI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-twinui%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0b4 | out: lpFileInformation=0x259f0b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd74ac348, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd74ac348, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0219.332] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd88 | out: hHeap=0x1f0000) returned 1 [0219.332] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0219.332] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0219.332] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50aff605, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50aff605, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Microsoft-Windows-User Profile Service%4Operational.evtx", cAlternateFileName="MI4D4C~1.EVT")) returned 1 [0219.332] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213680 [0219.332] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0219.332] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0219.333] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0219.333] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0219.333] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213680 | out: hHeap=0x1f0000) returned 1 [0219.333] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-User Profile Service%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-user profile service%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x238 [0219.333] GetFileType (hFile=0x238) returned 0x1 [0219.333] CloseHandle (hObject=0x238) returned 1 [0219.334] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0219.334] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-User Profile Service%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-user profile service%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0ac | out: lpFileInformation=0x259f0ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50aff605, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50aff605, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0219.334] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0219.334] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0219.334] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-User Profile Service%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-user profile service%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0b4 | out: lpFileInformation=0x259f0b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50aff605, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50aff605, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0219.335] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0219.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0219.335] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0219.335] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50981e6e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50981e6e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Microsoft-Windows-UserPnp%4ActionCenter.evtx", cAlternateFileName="MI5FF0~1.EVT")) returned 1 [0219.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236190 [0219.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0219.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220238 [0219.335] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0219.335] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0219.335] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236190 | out: hHeap=0x1f0000) returned 1 [0219.336] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-UserPnp%4ActionCenter.evtx" (normalized: "c:\\logs\\microsoft-windows-userpnp%4actioncenter.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x238 [0219.336] GetFileType (hFile=0x238) returned 0x1 [0219.336] CloseHandle (hObject=0x238) returned 1 [0219.336] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2201c0 [0219.337] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-UserPnp%4ActionCenter.evtx" (normalized: "c:\\logs\\microsoft-windows-userpnp%4actioncenter.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0ac | out: lpFileInformation=0x259f0ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50981e6e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50981e6e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0219.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2201c0 | out: hHeap=0x1f0000) returned 1 [0219.337] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fc20 [0219.337] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-UserPnp%4ActionCenter.evtx" (normalized: "c:\\logs\\microsoft-windows-userpnp%4actioncenter.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0b4 | out: lpFileInformation=0x259f0b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50981e6e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50981e6e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0219.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fc20 | out: hHeap=0x1f0000) returned 1 [0219.337] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220508 [0219.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220508 | out: hHeap=0x1f0000) returned 1 [0219.337] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5095bc04, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5095bc04, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Microsoft-Windows-UserPnp%4DeviceInstall.evtx", cAlternateFileName="MIBD88~1.EVT")) returned 1 [0219.337] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2357d0 [0219.337] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0219.338] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2201c0 [0219.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0219.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220238 | out: hHeap=0x1f0000) returned 1 [0219.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2357d0 | out: hHeap=0x1f0000) returned 1 [0219.338] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-UserPnp%4DeviceInstall.evtx" (normalized: "c:\\logs\\microsoft-windows-userpnp%4deviceinstall.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x238 [0219.338] GetFileType (hFile=0x238) returned 0x1 [0219.338] CloseHandle (hObject=0x238) returned 1 [0219.339] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0219.339] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-UserPnp%4DeviceInstall.evtx" (normalized: "c:\\logs\\microsoft-windows-userpnp%4deviceinstall.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0ac | out: lpFileInformation=0x259f0ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5095bc04, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5095bc04, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0219.339] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0219.339] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220490 [0219.339] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-UserPnp%4DeviceInstall.evtx" (normalized: "c:\\logs\\microsoft-windows-userpnp%4deviceinstall.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0b4 | out: lpFileInformation=0x259f0b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5095bc04, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5095bc04, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0219.339] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220490 | out: hHeap=0x1f0000) returned 1 [0219.339] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0219.339] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0219.339] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50b97f64, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50b97f64, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx", cAlternateFileName="MICC17~1.EVT")) returned 1 [0219.339] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2135f8 [0219.339] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0219.340] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0219.340] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0219.340] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2201c0 | out: hHeap=0x1f0000) returned 1 [0219.340] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2135f8 | out: hHeap=0x1f0000) returned 1 [0219.340] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-volumesnapshot-driver%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x238 [0219.340] GetFileType (hFile=0x238) returned 0x1 [0219.341] CloseHandle (hObject=0x238) returned 1 [0219.617] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0219.617] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-volumesnapshot-driver%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0ac | out: lpFileInformation=0x259f0ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50b97f64, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50b97f64, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0219.617] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0219.618] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0219.618] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-volumesnapshot-driver%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0b4 | out: lpFileInformation=0x259f0b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50b97f64, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50b97f64, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0219.619] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0219.619] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0219.619] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0219.619] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc986efe1, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc986efe1, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Microsoft-Windows-Wcmsvc%4Operational.evtx", cAlternateFileName="MI72BF~1.EVT")) returned 1 [0219.619] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235be0 [0219.619] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0219.619] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe00 [0219.619] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0219.619] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0219.620] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235be0 | out: hHeap=0x1f0000) returned 1 [0219.620] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Wcmsvc%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-wcmsvc%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0219.621] GetFileType (hFile=0x214) returned 0x1 [0219.621] CloseHandle (hObject=0x214) returned 1 [0219.622] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21ffe0 [0219.622] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Wcmsvc%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-wcmsvc%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0ac | out: lpFileInformation=0x259f0ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc986efe1, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc986efe1, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0219.622] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ffe0 | out: hHeap=0x1f0000) returned 1 [0219.622] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220238 [0219.622] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Wcmsvc%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-wcmsvc%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0b4 | out: lpFileInformation=0x259f0b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc986efe1, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc986efe1, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0219.622] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220238 | out: hHeap=0x1f0000) returned 1 [0219.623] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0219.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0219.623] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb426548, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb426548, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Microsoft-Windows-Windows Defender%4Operational.evtx", cAlternateFileName="MI7501~1.EVT")) returned 1 [0219.623] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220508 [0219.623] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0219.623] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2132c8 [0219.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0219.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe00 | out: hHeap=0x1f0000) returned 1 [0219.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220508 | out: hHeap=0x1f0000) returned 1 [0219.624] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Windows Defender%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-windows defender%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0219.624] GetFileType (hFile=0x214) returned 0x1 [0219.625] CloseHandle (hObject=0x214) returned 1 [0219.625] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2134e8 [0219.625] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Windows Defender%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-windows defender%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0ac | out: lpFileInformation=0x259f0ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb426548, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb426548, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0219.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2134e8 | out: hHeap=0x1f0000) returned 1 [0219.625] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0219.626] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Windows Defender%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-windows defender%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0b4 | out: lpFileInformation=0x259f0b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb426548, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb426548, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0219.626] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0219.626] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0219.626] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0219.626] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb4729e7, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb4729e7, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Microsoft-Windows-Windows Defender%4WHC.evtx", cAlternateFileName="MIF226~1.EVT")) returned 1 [0219.626] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235f20 [0219.626] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0219.626] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0219.627] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0219.627] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2132c8 | out: hHeap=0x1f0000) returned 1 [0219.627] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235f20 | out: hHeap=0x1f0000) returned 1 [0219.627] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Windows Defender%4WHC.evtx" (normalized: "c:\\logs\\microsoft-windows-windows defender%4whc.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0219.628] GetFileType (hFile=0x214) returned 0x1 [0219.628] CloseHandle (hObject=0x214) returned 1 [0219.628] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f7e8 [0219.629] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Windows Defender%4WHC.evtx" (normalized: "c:\\logs\\microsoft-windows-windows defender%4whc.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0ac | out: lpFileInformation=0x259f0ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb4729e7, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb4729e7, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0219.629] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f7e8 | out: hHeap=0x1f0000) returned 1 [0219.629] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fa40 [0219.629] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Windows Defender%4WHC.evtx" (normalized: "c:\\logs\\microsoft-windows-windows defender%4whc.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0b4 | out: lpFileInformation=0x259f0b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb4729e7, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb4729e7, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0219.629] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fa40 | out: hHeap=0x1f0000) returned 1 [0219.629] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fb30 [0219.629] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fb30 | out: hHeap=0x1f0000) returned 1 [0219.629] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4b19353, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4b19353, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx", cAlternateFileName="MIDCC7~1.EVT")) returned 1 [0219.629] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2610a8 [0219.630] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0219.630] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fc18 [0219.630] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0219.630] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0219.630] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2610a8 | out: hHeap=0x1f0000) returned 1 [0219.631] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4connectionsecurity.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0219.632] GetFileType (hFile=0x214) returned 0x1 [0219.632] CloseHandle (hObject=0x214) returned 1 [0219.633] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fa88 [0219.633] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4connectionsecurity.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0ac | out: lpFileInformation=0x259f0ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4b19353, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4b19353, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0219.633] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0219.633] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x230190 [0219.633] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4connectionsecurity.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0b4 | out: lpFileInformation=0x259f0b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4b19353, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4b19353, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0219.633] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0219.633] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fce0 [0219.633] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0219.633] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9c9b1b6, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9c9b1b6, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx", cAlternateFileName="MI7771~1.EVT")) returned 1 [0219.634] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a4d0 [0219.634] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0219.634] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x260ff0 [0219.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0219.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0219.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a4d0 | out: hHeap=0x1f0000) returned 1 [0219.635] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4firewall.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0219.635] GetFileType (hFile=0x214) returned 0x1 [0219.636] CloseHandle (hObject=0x214) returned 1 [0219.636] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261440 [0219.636] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4firewall.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0ac | out: lpFileInformation=0x259f0ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9c9b1b6, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9c9b1b6, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000)) returned 1 [0219.636] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261440 | out: hHeap=0x1f0000) returned 1 [0219.637] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2614f8 [0219.637] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4firewall.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0b4 | out: lpFileInformation=0x259f0b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9c9b1b6, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9c9b1b6, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000)) returned 1 [0219.637] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2614f8 | out: hHeap=0x1f0000) returned 1 [0219.637] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2610a8 [0219.637] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2610a8 | out: hHeap=0x1f0000) returned 1 [0219.637] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9df26e9, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9df26e9, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx", cAlternateFileName="MI4667~1.EVT")) returned 1 [0219.637] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0219.637] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0219.638] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0219.638] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0219.638] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ff0 | out: hHeap=0x1f0000) returned 1 [0219.638] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0219.639] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx" (normalized: "c:\\logs\\microsoft-windows-wininet-config%4proxyconfigchanged.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0219.639] GetFileType (hFile=0x214) returned 0x1 [0219.639] CloseHandle (hObject=0x214) returned 1 [0219.640] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0219.640] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx" (normalized: "c:\\logs\\microsoft-windows-wininet-config%4proxyconfigchanged.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0ac | out: lpFileInformation=0x259f0ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9df26e9, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9df26e9, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0219.640] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0219.640] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0219.640] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx" (normalized: "c:\\logs\\microsoft-windows-wininet-config%4proxyconfigchanged.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0b4 | out: lpFileInformation=0x259f0b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9df26e9, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9df26e9, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0219.641] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0219.641] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0219.641] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0219.641] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd122d184, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd122d184, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Microsoft-Windows-Winlogon%4Operational.evtx", cAlternateFileName="MID6AB~1.EVT")) returned 1 [0219.641] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235838 [0219.641] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0219.641] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fab8 [0219.641] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0219.642] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0219.642] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235838 | out: hHeap=0x1f0000) returned 1 [0219.642] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-Winlogon%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-winlogon%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0219.643] GetFileType (hFile=0x214) returned 0x1 [0219.643] CloseHandle (hObject=0x214) returned 1 [0219.644] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0219.644] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Winlogon%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-winlogon%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0ac | out: lpFileInformation=0x259f0ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd122d184, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd122d184, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0219.644] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0219.644] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220328 [0219.644] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-Winlogon%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-winlogon%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0b4 | out: lpFileInformation=0x259f0b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd122d184, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd122d184, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0219.644] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220328 | out: hHeap=0x1f0000) returned 1 [0219.644] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21ff68 [0219.645] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ff68 | out: hHeap=0x1f0000) returned 1 [0219.645] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf164b9b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcf164b9b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Microsoft-Windows-WMI-Activity%4Operational.evtx", cAlternateFileName="MIFF83~1.EVT")) returned 1 [0219.645] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0219.645] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0219.645] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212c68 [0219.645] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0219.645] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fab8 | out: hHeap=0x1f0000) returned 1 [0219.645] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0219.646] CreateFileW (lpFileName="C:\\\\Logs\\Microsoft-Windows-WMI-Activity%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-wmi-activity%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0219.646] GetFileType (hFile=0x214) returned 0x1 [0219.647] CloseHandle (hObject=0x214) returned 1 [0219.647] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0219.648] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-WMI-Activity%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-wmi-activity%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0ac | out: lpFileInformation=0x259f0ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf164b9b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcf164b9b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000)) returned 1 [0219.648] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0219.648] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213680 [0219.648] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Microsoft-Windows-WMI-Activity%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-wmi-activity%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0b4 | out: lpFileInformation=0x259f0b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf164b9b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcf164b9b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000)) returned 1 [0219.648] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213680 | out: hHeap=0x1f0000) returned 1 [0219.648] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0219.648] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0219.649] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50555c8d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50555c8d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xc2f39201, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x111103, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Security.evtx.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="SECURI~1.ODV")) returned 1 [0219.649] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a380 [0219.649] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0219.649] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2614f8 [0219.649] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0219.649] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212c68 | out: hHeap=0x1f0000) returned 1 [0219.649] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a380 | out: hHeap=0x1f0000) returned 1 [0219.650] CreateFileW (lpFileName="C:\\\\Logs\\Security.evtx.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\logs\\security.evtx.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0219.650] GetFileType (hFile=0x214) returned 0x1 [0219.651] CloseHandle (hObject=0x214) returned 1 [0219.651] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261440 [0219.652] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Security.evtx.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\logs\\security.evtx.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x259f0ac | out: lpFileInformation=0x259f0ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50555c8d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50555c8d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xc2f39201, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x111103)) returned 1 [0219.652] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261440 | out: hHeap=0x1f0000) returned 1 [0219.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2612d0 [0219.652] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Security.evtx.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\logs\\security.evtx.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x259f0b4 | out: lpFileInformation=0x259f0b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50555c8d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50555c8d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xc2f39201, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x111103)) returned 1 [0219.652] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2612d0 | out: hHeap=0x1f0000) returned 1 [0219.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2610a8 [0219.653] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2610a8 | out: hHeap=0x1f0000) returned 1 [0219.653] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95a6db2c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x95a6db2c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Setup.evtx", cAlternateFileName="SETUP~1.EVT")) returned 1 [0219.653] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0219.653] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0219.653] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0219.653] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0219.653] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2614f8 | out: hHeap=0x1f0000) returned 1 [0219.653] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0219.654] CreateFileW (lpFileName="C:\\\\Logs\\Setup.evtx" (normalized: "c:\\logs\\setup.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0219.654] GetFileType (hFile=0x214) returned 0x1 [0219.655] CloseHandle (hObject=0x214) returned 1 [0219.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0219.655] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Setup.evtx" (normalized: "c:\\logs\\setup.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0ac | out: lpFileInformation=0x259f0ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95a6db2c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x95a6db2c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0219.655] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0219.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0219.656] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Setup.evtx" (normalized: "c:\\logs\\setup.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0b4 | out: lpFileInformation=0x259f0b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95a6db2c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x95a6db2c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0219.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0219.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0219.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0219.656] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505097c4, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505097c4, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xc359f9dc, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x111103, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="System.evtx", cAlternateFileName="SYSTEM~1.EVT")) returned 1 [0219.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0219.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0219.657] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0219.657] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0219.657] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0219.657] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0219.658] CreateFileW (lpFileName="C:\\\\Logs\\System.evtx" (normalized: "c:\\logs\\system.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0219.658] GetFileType (hFile=0x214) returned 0x1 [0219.658] CloseHandle (hObject=0x214) returned 1 [0219.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282a0 [0219.659] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\System.evtx" (normalized: "c:\\logs\\system.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0ac | out: lpFileInformation=0x259f0ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505097c4, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505097c4, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xc359f9dc, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x111103)) returned 1 [0219.659] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0219.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0219.659] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\System.evtx" (normalized: "c:\\logs\\system.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0b4 | out: lpFileInformation=0x259f0b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505097c4, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505097c4, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xc359f9dc, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x111103)) returned 1 [0219.659] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0219.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0219.660] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0219.660] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50555c8d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50555c8d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Windows PowerShell.evtx", cAlternateFileName="WINDOW~1.EVT")) returned 1 [0219.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf00 [0219.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0219.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8b60 [0219.660] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0219.660] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0219.660] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf00 | out: hHeap=0x1f0000) returned 1 [0219.661] CreateFileW (lpFileName="C:\\\\Logs\\Windows PowerShell.evtx" (normalized: "c:\\logs\\windows powershell.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0219.661] GetFileType (hFile=0x214) returned 0x1 [0219.662] CloseHandle (hObject=0x214) returned 1 [0219.772] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8dc8 [0219.774] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Windows PowerShell.evtx" (normalized: "c:\\logs\\windows powershell.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0ac | out: lpFileInformation=0x259f0ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50555c8d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50555c8d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0219.790] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8dc8 | out: hHeap=0x1f0000) returned 1 [0219.790] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8cc0 [0219.803] GetFileAttributesExW (in: lpFileName="C:\\\\Logs\\Windows PowerShell.evtx" (normalized: "c:\\logs\\windows powershell.evtx"), fInfoLevelId=0x0, lpFileInformation=0x259f0b4 | out: lpFileInformation=0x259f0b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50555c8d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50555c8d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0219.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8cc0 | out: hHeap=0x1f0000) returned 1 [0219.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8cc0 [0219.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8cc0 | out: hHeap=0x1f0000) returned 1 [0219.804] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50555c8d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50555c8d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Windows PowerShell.evtx", cAlternateFileName="WINDOW~1.EVT")) returned 0 [0219.804] FindClose (in: hFindFile=0x24ea80 | out: hFindFile=0x24ea80) returned 1 [0219.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8b60 | out: hHeap=0x1f0000) returned 1 [0219.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262fe0 | out: hHeap=0x1f0000) returned 1 [0219.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0219.805] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b30 | out: hHeap=0x1f0000) returned 1 [0219.805] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234a10 [0219.805] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380c8 [0219.805] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262fe0 [0219.805] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0219.805] FindFirstFileW (in: lpFileName="C:\\\\PerfLogs\\*", lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa03748ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17b3dd09, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24ec80 [0219.805] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0219.805] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0219.806] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0219.806] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa03748ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17b3dd09, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0219.806] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0219.806] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0219.806] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0219.806] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0219.806] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa03748ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17b3dd09, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 0 [0219.806] FindClose (in: hFindFile=0x24ec80 | out: hFindFile=0x24ec80) returned 1 [0219.806] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0219.806] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262fe0 | out: hHeap=0x1f0000) returned 1 [0219.806] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380c8 | out: hHeap=0x1f0000) returned 1 [0219.806] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234a10 | out: hHeap=0x1f0000) returned 1 [0219.807] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2347d0 [0219.807] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380c8 [0219.807] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2617f8 [0219.807] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0219.807] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\*", lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3ac6234, ftLastAccessTime.dwHighDateTime=0x1d5c65b, ftLastWriteTime.dwLowDateTime=0x3ac6234, ftLastWriteTime.dwHighDateTime=0x1d5c65b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24ec80 [0219.807] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282a0 [0219.807] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0219.807] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0219.807] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3ac6234, ftLastAccessTime.dwHighDateTime=0x1d5c65b, ftLastWriteTime.dwLowDateTime=0x3ac6234, ftLastWriteTime.dwHighDateTime=0x1d5c65b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0219.807] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0219.807] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0219.808] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0219.808] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0219.808] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4aadd873, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Common Files", cAlternateFileName="COMMON~1")) returned 1 [0219.808] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0219.808] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282a0 [0219.808] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225ce8 [0219.808] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0219.808] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0219.808] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0219.808] lstrcmpW (lpString1="Common Files", lpString2=".") returned 1 [0219.808] lstrcmpW (lpString1="Common Files", lpString2="..") returned 1 [0219.808] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204e90 [0219.808] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234a10 [0219.808] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1a307d95, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5d0779b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5d0779b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0219.808] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0219.809] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227dd0 [0219.809] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x226058 [0219.809] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227dd0 | out: hHeap=0x1f0000) returned 1 [0219.809] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225ce8 | out: hHeap=0x1f0000) returned 1 [0219.809] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0219.928] CreateFileW (lpFileName="C:\\\\Program Files\\desktop.ini" (normalized: "c:\\program files\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259f018, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0219.928] GetFileType (hFile=0x210) returned 0x1 [0219.928] CloseHandle (hObject=0x210) returned 1 [0219.929] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234740 [0219.929] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\desktop.ini" (normalized: "c:\\program files\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x259f0ac | out: lpFileInformation=0x259f0ac*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1a307d95, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5d0779b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5d0779b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xae)) returned 1 [0219.929] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234740 | out: hHeap=0x1f0000) returned 1 [0219.929] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234b30 [0219.929] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\desktop.ini" (normalized: "c:\\program files\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x259f0b4 | out: lpFileInformation=0x259f0b4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1a307d95, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5d0779b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5d0779b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xae)) returned 1 [0219.929] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b30 | out: hHeap=0x1f0000) returned 1 [0219.929] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234980 [0219.929] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234980 | out: hHeap=0x1f0000) returned 1 [0219.929] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfbf3a0e6, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xfbf3a0e6, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0219.929] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282a0 [0219.929] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0219.930] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8ab0 [0219.930] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0219.930] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226058 | out: hHeap=0x1f0000) returned 1 [0219.930] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0219.930] lstrcmpW (lpString1="Internet Explorer", lpString2=".") returned 1 [0219.930] lstrcmpW (lpString1="Internet Explorer", lpString2="..") returned 1 [0219.930] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0219.930] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8f28 [0219.930] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e90 | out: hHeap=0x1f0000) returned 1 [0219.930] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xfc0fdd55, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xfc0fdd55, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Java", cAlternateFileName="")) returned 1 [0219.930] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282a0 [0219.930] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8ab0 | out: hHeap=0x1f0000) returned 1 [0219.930] lstrcmpW (lpString1="Java", lpString2=".") returned 1 [0219.930] lstrcmpW (lpString1="Java", lpString2="..") returned 1 [0219.931] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x48) returned 0x226238 [0219.931] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0219.931] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0219.931] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf8a30151, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xf8a30151, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Microsoft Office", cAlternateFileName="MICROS~2")) returned 1 [0219.931] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0219.931] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238f30 [0219.931] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8c68 [0219.931] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238f30 | out: hHeap=0x1f0000) returned 1 [0219.931] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0219.931] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0219.931] lstrcmpW (lpString1="Microsoft Office", lpString2=".") returned 1 [0219.931] lstrcmpW (lpString1="Microsoft Office", lpString2="..") returned 1 [0219.931] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236058 [0219.931] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8b08 [0219.932] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226238 | out: hHeap=0x1f0000) returned 1 [0219.932] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82e68d8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc03f299, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xfc03f299, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Microsoft Office 15", cAlternateFileName="MICROS~1")) returned 1 [0219.932] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0219.932] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282a0 [0219.932] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8ab0 [0219.932] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0219.932] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8c68 | out: hHeap=0x1f0000) returned 1 [0219.932] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0219.932] lstrcmpW (lpString1="Microsoft Office 15", lpString2=".") returned 1 [0219.932] lstrcmpW (lpString1="Microsoft Office 15", lpString2="..") returned 1 [0219.932] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0219.932] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8b60 [0219.932] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236058 | out: hHeap=0x1f0000) returned 1 [0219.932] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xe99e772e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfbfccb69, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xfbfccb69, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Mozilla Firefox", cAlternateFileName="MOZILL~1")) returned 1 [0219.932] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0219.933] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282a0 [0219.933] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8cc0 [0219.933] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0219.933] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8ab0 | out: hHeap=0x1f0000) returned 1 [0219.933] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0219.933] lstrcmpW (lpString1="Mozilla Firefox", lpString2=".") returned 1 [0219.933] lstrcmpW (lpString1="Mozilla Firefox", lpString2="..") returned 1 [0219.933] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8ab0 [0219.933] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x709c717f, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x709c717f, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x709c717f, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="MSBuild", cAlternateFileName="")) returned 1 [0219.933] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282a0 [0219.933] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x2260a8 [0219.933] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0219.933] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8cc0 | out: hHeap=0x1f0000) returned 1 [0219.933] lstrcmpW (lpString1="MSBuild", lpString2=".") returned 1 [0219.933] lstrcmpW (lpString1="MSBuild", lpString2="..") returned 1 [0219.933] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd8) returned 0x217038 [0219.933] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346b0 [0219.934] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0219.934] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x709ed3a7, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0xfc0b18a4, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xfc0b18a4, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Reference Assemblies", cAlternateFileName="REFERE~1")) returned 1 [0219.934] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282a0 [0219.934] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0219.934] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8bb8 [0219.934] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0219.934] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2260a8 | out: hHeap=0x1f0000) returned 1 [0219.934] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0219.934] lstrcmpW (lpString1="Reference Assemblies", lpString2=".") returned 1 [0219.934] lstrcmpW (lpString1="Reference Assemblies", lpString2="..") returned 1 [0219.934] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8c68 [0219.934] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x59f2f4b4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xfbf5a454, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xfbf5a454, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="rempl", cAlternateFileName="")) returned 1 [0219.934] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0219.934] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8bb8 | out: hHeap=0x1f0000) returned 1 [0219.934] lstrcmpW (lpString1="rempl", lpString2=".") returned 1 [0219.934] lstrcmpW (lpString1="rempl", lpString2="..") returned 1 [0219.934] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282a0 [0219.934] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xd2709a20, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xfc066938, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xfc066938, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Uninstall Information", cAlternateFileName="UNINST~1")) returned 1 [0219.934] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238f68 [0219.934] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238f30 [0219.935] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8bb8 [0219.935] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238f30 | out: hHeap=0x1f0000) returned 1 [0219.935] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0219.935] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238f68 | out: hHeap=0x1f0000) returned 1 [0219.935] lstrcmpW (lpString1="Uninstall Information", lpString2=".") returned 1 [0219.935] lstrcmpW (lpString1="Uninstall Information", lpString2="..") returned 1 [0219.935] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x138) returned 0x239be0 [0219.935] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8cc0 [0219.935] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0219.935] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x4c509d45, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa747f43e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x749f4454, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="UNP", cAlternateFileName="")) returned 1 [0219.935] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0219.935] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8bb8 | out: hHeap=0x1f0000) returned 1 [0219.935] lstrcmpW (lpString1="UNP", lpString2=".") returned 1 [0219.935] lstrcmpW (lpString1="UNP", lpString2="..") returned 1 [0219.935] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238be8 [0219.935] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc066938, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xfc066938, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Windows Defender", cAlternateFileName="WINDOW~1")) returned 1 [0219.935] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2390b8 [0219.935] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239208 [0219.935] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8bb8 [0219.936] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239208 | out: hHeap=0x1f0000) returned 1 [0219.936] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0219.936] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2390b8 | out: hHeap=0x1f0000) returned 1 [0219.936] lstrcmpW (lpString1="Windows Defender", lpString2=".") returned 1 [0219.936] lstrcmpW (lpString1="Windows Defender", lpString2="..") returned 1 [0219.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8320 [0219.936] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xfbe9d08f, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xfbe9d08f, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Windows Defender Advanced Threat Protection", cAlternateFileName="WIF4A9~1")) returned 1 [0219.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235e50 [0219.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2392b0 [0219.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2134e8 [0219.936] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2392b0 | out: hHeap=0x1f0000) returned 1 [0219.936] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8bb8 | out: hHeap=0x1f0000) returned 1 [0219.936] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235e50 | out: hHeap=0x1f0000) returned 1 [0219.936] lstrcmpW (lpString1="Windows Defender Advanced Threat Protection", lpString2=".") returned 1 [0219.936] lstrcmpW (lpString1="Windows Defender Advanced Threat Protection", lpString2="..") returned 1 [0219.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2135f8 [0219.936] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa90b6918, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Windows Mail", cAlternateFileName="WINDOW~2")) returned 1 [0219.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0219.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239080 [0219.937] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225ec8 [0219.937] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239080 | out: hHeap=0x1f0000) returned 1 [0219.937] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2134e8 | out: hHeap=0x1f0000) returned 1 [0219.937] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0219.937] lstrcmpW (lpString1="Windows Mail", lpString2=".") returned 1 [0219.937] lstrcmpW (lpString1="Windows Mail", lpString2="..") returned 1 [0219.937] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c8) returned 0x232888 [0219.937] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234548 [0219.937] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239be0 | out: hHeap=0x1f0000) returned 1 [0219.937] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e4faee, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xfbfa67b3, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xfbfa67b3, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Windows Media Player", cAlternateFileName="WI54FB~1")) returned 1 [0219.937] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238f68 [0219.937] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238ec0 [0219.937] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8bb8 [0219.937] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ec0 | out: hHeap=0x1f0000) returned 1 [0219.937] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225ec8 | out: hHeap=0x1f0000) returned 1 [0219.937] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238f68 | out: hHeap=0x1f0000) returned 1 [0219.937] lstrcmpW (lpString1="Windows Media Player", lpString2=".") returned 1 [0219.937] lstrcmpW (lpString1="Windows Media Player", lpString2="..") returned 1 [0219.937] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8638 [0219.937] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfbfccb69, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xfbfccb69, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Windows Multimedia Platform", cAlternateFileName="WINDOW~3")) returned 1 [0219.937] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234a58 [0219.937] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c20 [0219.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235b78 [0219.938] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c20 | out: hHeap=0x1f0000) returned 1 [0219.938] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8bb8 | out: hHeap=0x1f0000) returned 1 [0219.938] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234a58 | out: hHeap=0x1f0000) returned 1 [0219.938] lstrcmpW (lpString1="Windows Multimedia Platform", lpString2=".") returned 1 [0219.938] lstrcmpW (lpString1="Windows Multimedia Platform", lpString2="..") returned 1 [0219.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235cb0 [0219.938] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xf8bf9d3e, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xf8bf9d3e, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Windows NT", cAlternateFileName="WINDOW~4")) returned 1 [0219.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0219.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239208 [0219.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225ba8 [0219.938] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239208 | out: hHeap=0x1f0000) returned 1 [0219.938] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0219.938] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0219.938] lstrcmpW (lpString1="Windows NT", lpString2=".") returned 1 [0219.938] lstrcmpW (lpString1="Windows NT", lpString2="..") returned 1 [0219.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2346f8 [0219.938] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc08b6a0, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xfc08b6a0, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Windows Photo Viewer", cAlternateFileName="WI8A19~1")) returned 1 [0219.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c58 [0219.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238f30 [0219.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8bb8 [0219.939] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238f30 | out: hHeap=0x1f0000) returned 1 [0219.939] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225ba8 | out: hHeap=0x1f0000) returned 1 [0219.939] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c58 | out: hHeap=0x1f0000) returned 1 [0219.939] lstrcmpW (lpString1="Windows Photo Viewer", lpString2=".") returned 1 [0219.939] lstrcmpW (lpString1="Windows Photo Viewer", lpString2="..") returned 1 [0219.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8218 [0219.939] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfbfccb69, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xfbfccb69, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Windows Portable Devices", cAlternateFileName="WIBFE5~1")) returned 1 [0219.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234b30 [0219.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238cc8 [0219.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235be0 [0219.939] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238cc8 | out: hHeap=0x1f0000) returned 1 [0219.939] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8bb8 | out: hHeap=0x1f0000) returned 1 [0219.939] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b30 | out: hHeap=0x1f0000) returned 1 [0219.939] lstrcmpW (lpString1="Windows Portable Devices", lpString2=".") returned 1 [0219.939] lstrcmpW (lpString1="Windows Portable Devices", lpString2="..") returned 1 [0219.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235970 [0219.939] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfbe9d08f, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xfbe9d08f, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Windows Security", cAlternateFileName="WIDB62~1")) returned 1 [0219.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2392b0 [0219.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238ec0 [0219.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8bb8 [0219.939] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ec0 | out: hHeap=0x1f0000) returned 1 [0219.940] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235be0 | out: hHeap=0x1f0000) returned 1 [0219.940] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2392b0 | out: hHeap=0x1f0000) returned 1 [0219.940] lstrcmpW (lpString1="Windows Security", lpString2=".") returned 1 [0219.940] lstrcmpW (lpString1="Windows Security", lpString2="..") returned 1 [0219.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2a0) returned 0x237d00 [0219.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8168 [0219.940] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232888 | out: hHeap=0x1f0000) returned 1 [0219.940] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92aed1a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bb043c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Windows Sidebar", cAlternateFileName="WI4223~1")) returned 1 [0219.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0219.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238e50 [0219.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a81c0 [0219.940] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238e50 | out: hHeap=0x1f0000) returned 1 [0219.940] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8bb8 | out: hHeap=0x1f0000) returned 1 [0219.940] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0219.940] lstrcmpW (lpString1="Windows Sidebar", lpString2=".") returned 1 [0219.940] lstrcmpW (lpString1="Windows Sidebar", lpString2="..") returned 1 [0219.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8bb8 [0219.940] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x8da88b6d, ftLastAccessTime.dwHighDateTime=0x1d3274e, ftLastWriteTime.dwLowDateTime=0x8da88b6d, ftLastWriteTime.dwHighDateTime=0x1d3274e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="WindowsApps", cAlternateFileName="WI7DB9~1")) returned 1 [0219.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0219.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c20 [0219.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225d38 [0219.940] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c20 | out: hHeap=0x1f0000) returned 1 [0219.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a81c0 | out: hHeap=0x1f0000) returned 1 [0219.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0219.941] lstrcmpW (lpString1="WindowsApps", lpString2=".") returned 1 [0219.941] lstrcmpW (lpString1="WindowsApps", lpString2="..") returned 1 [0219.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234980 [0219.941] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc0fdd55, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xfc0fdd55, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="WindowsPowerShell", cAlternateFileName="WID5B1~1")) returned 1 [0219.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239240 [0219.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239198 [0219.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8378 [0219.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239198 | out: hHeap=0x1f0000) returned 1 [0219.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225d38 | out: hHeap=0x1f0000) returned 1 [0219.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239240 | out: hHeap=0x1f0000) returned 1 [0219.941] lstrcmpW (lpString1="WindowsPowerShell", lpString2=".") returned 1 [0219.941] lstrcmpW (lpString1="WindowsPowerShell", lpString2="..") returned 1 [0219.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8798 [0219.941] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x259f308 | out: lpFindFileData=0x259f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc0fdd55, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xfc0fdd55, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="WindowsPowerShell", cAlternateFileName="WID5B1~1")) returned 0 [0219.941] FindClose (in: hFindFile=0x24ec80 | out: hFindFile=0x24ec80) returned 1 [0219.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2345d8 [0219.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0219.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x263640 [0219.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a83d0 [0219.942] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\*", lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4aadd873, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ecc0 [0219.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234818 [0219.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x236128 [0219.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234818 | out: hHeap=0x1f0000) returned 1 [0219.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a83d0 | out: hHeap=0x1f0000) returned 1 [0219.942] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0219.942] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4aadd873, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234a58 [0219.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x235aa8 [0219.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234a58 | out: hHeap=0x1f0000) returned 1 [0219.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236128 | out: hHeap=0x1f0000) returned 1 [0219.942] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0219.942] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0219.942] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x4aab75fe, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0xa0417b85, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DESIGNER", cAlternateFileName="")) returned 1 [0219.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0219.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234740 [0219.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x2358a0 [0219.943] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234740 | out: hHeap=0x1f0000) returned 1 [0219.943] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235aa8 | out: hHeap=0x1f0000) returned 1 [0219.943] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0219.943] lstrcmpW (lpString1="DESIGNER", lpString2=".") returned 1 [0219.943] lstrcmpW (lpString1="DESIGNER", lpString2="..") returned 1 [0219.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204c10 [0219.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a88f8 [0219.943] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa04663f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft shared", cAlternateFileName="MICROS~1")) returned 1 [0219.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2390b8 [0219.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234a58 [0219.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2362c8 [0219.943] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234a58 | out: hHeap=0x1f0000) returned 1 [0219.944] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2358a0 | out: hHeap=0x1f0000) returned 1 [0219.944] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2390b8 | out: hHeap=0x1f0000) returned 1 [0219.944] lstrcmpW (lpString1="microsoft shared", lpString2=".") returned 1 [0219.944] lstrcmpW (lpString1="microsoft shared", lpString2="..") returned 1 [0219.944] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239160 [0219.944] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2357d0 [0219.944] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c10 | out: hHeap=0x1f0000) returned 1 [0219.944] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c11068, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0219.944] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0219.944] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234818 [0219.944] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x2360c0 [0219.944] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234818 | out: hHeap=0x1f0000) returned 1 [0219.944] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2362c8 | out: hHeap=0x1f0000) returned 1 [0219.944] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0219.944] lstrcmpW (lpString1="Services", lpString2=".") returned 1 [0219.944] lstrcmpW (lpString1="Services", lpString2="..") returned 1 [0219.944] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x48) returned 0x225dd8 [0219.944] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8428 [0219.944] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239160 | out: hHeap=0x1f0000) returned 1 [0219.944] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c5f95f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System", cAlternateFileName="")) returned 1 [0219.944] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234a58 [0219.944] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x2359d8 [0219.945] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234a58 | out: hHeap=0x1f0000) returned 1 [0219.945] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2360c0 | out: hHeap=0x1f0000) returned 1 [0219.945] lstrcmpW (lpString1="System", lpString2=".") returned 1 [0219.945] lstrcmpW (lpString1="System", lpString2="..") returned 1 [0219.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235e50 [0219.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a7fb0 [0219.945] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225dd8 | out: hHeap=0x1f0000) returned 1 [0219.945] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c5f95f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System", cAlternateFileName="")) returned 0 [0219.945] FindClose (in: hFindFile=0x24ecc0 | out: hFindFile=0x24ecc0) returned 1 [0219.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234740 [0219.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0219.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262fe0 [0219.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2362c8 [0219.945] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\DESIGNER\\*", lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x4aab75fe, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0xa0417b85, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x259ee44, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24eac0 [0219.946] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235aa8 [0219.946] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2362c8 | out: hHeap=0x1f0000) returned 1 [0219.947] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0219.947] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x4aab75fe, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0xa0417b85, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x259ee44, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0219.947] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235b78 [0219.947] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235aa8 | out: hHeap=0x1f0000) returned 1 [0219.947] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0219.947] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0219.947] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c8c3a00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4aadd873, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5c8c3a00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x3e70, dwReserved0=0x259ee44, dwReserved1=0x3, cFileName="MSADDNDR.OLB", cAlternateFileName="")) returned 1 [0219.947] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0219.947] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235c48 [0219.947] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220fe8 [0219.947] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235c48 | out: hHeap=0x1f0000) returned 1 [0219.947] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0219.947] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0219.947] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB" (normalized: "c:\\program files\\common files\\designer\\msaddndr.olb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e690, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0219.948] GetFileType (hFile=0x210) returned 0x1 [0219.948] CloseHandle (hObject=0x210) returned 1 [0219.948] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21ffe0 [0219.948] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB" (normalized: "c:\\program files\\common files\\designer\\msaddndr.olb"), fInfoLevelId=0x0, lpFileInformation=0x259e724 | out: lpFileInformation=0x259e724*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c8c3a00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4aadd873, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5c8c3a00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x3e70)) returned 1 [0219.948] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ffe0 | out: hHeap=0x1f0000) returned 1 [0219.948] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe00 [0219.948] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB" (normalized: "c:\\program files\\common files\\designer\\msaddndr.olb"), fInfoLevelId=0x0, lpFileInformation=0x259e72c | out: lpFileInformation=0x259e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c8c3a00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4aadd873, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5c8c3a00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x3e70)) returned 1 [0219.948] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe00 | out: hHeap=0x1f0000) returned 1 [0219.948] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0219.948] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0219.948] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c8c3a00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4aadd873, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5c8c3a00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x3e70, dwReserved0=0x259ee44, dwReserved1=0x3, cFileName="MSADDNDR.OLB", cAlternateFileName="")) returned 0 [0219.948] FindClose (in: hFindFile=0x24eac0 | out: hFindFile=0x24eac0) returned 1 [0219.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0219.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262fe0 | out: hHeap=0x1f0000) returned 1 [0219.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0219.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234740 | out: hHeap=0x1f0000) returned 1 [0219.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234a58 [0219.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0219.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262cb0 [0219.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0219.949] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\*", lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa04663f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x259ee44, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24e940 [0219.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0219.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0219.949] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0219.949] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa04663f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x259ee44, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0219.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0219.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0219.949] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0219.949] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0219.949] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbf6c42af, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc878a301, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xc878a301, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x259ee44, dwReserved1=0x3, cFileName="ClickToRun", cAlternateFileName="CLICKT~1")) returned 1 [0219.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0219.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd88 [0219.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ce8 [0219.950] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd88 | out: hHeap=0x1f0000) returned 1 [0219.950] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0219.950] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0219.950] lstrcmpW (lpString1="ClickToRun", lpString2=".") returned 1 [0219.950] lstrcmpW (lpString1="ClickToRun", lpString2="..") returned 1 [0219.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204d90 [0219.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2134e8 [0219.950] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb3e1c92c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb3e1c92c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x259ee44, dwReserved1=0x3, cFileName="ink", cAlternateFileName="")) returned 1 [0219.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f7e8 [0219.950] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ce8 | out: hHeap=0x1f0000) returned 1 [0219.950] lstrcmpW (lpString1="ink", lpString2=".") returned 1 [0219.950] lstrcmpW (lpString1="ink", lpString2="..") returned 1 [0219.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239278 [0219.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fef0 [0219.950] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d90 | out: hHeap=0x1f0000) returned 1 [0219.950] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa098a4c6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71143a45, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x259ee44, dwReserved1=0x3, cFileName="MSInfo", cAlternateFileName="")) returned 1 [0219.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220490 [0219.950] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f7e8 | out: hHeap=0x1f0000) returned 1 [0219.950] lstrcmpW (lpString1="MSInfo", lpString2=".") returned 1 [0219.950] lstrcmpW (lpString1="MSInfo", lpString2="..") returned 1 [0219.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x48) returned 0x2260a8 [0219.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21ffe0 [0219.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239278 | out: hHeap=0x1f0000) returned 1 [0219.951] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca8acc6a, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xca8acc6a, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x259ee44, dwReserved1=0x3, cFileName="OFFICE16", cAlternateFileName="")) returned 1 [0219.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0219.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0219.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218978 [0219.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0219.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220490 | out: hHeap=0x1f0000) returned 1 [0219.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0219.951] lstrcmpW (lpString1="OFFICE16", lpString2=".") returned 1 [0219.951] lstrcmpW (lpString1="OFFICE16", lpString2="..") returned 1 [0219.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235eb8 [0219.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213570 [0219.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2260a8 | out: hHeap=0x1f0000) returned 1 [0219.951] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd99442a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd99442a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x259ee44, dwReserved1=0x3, cFileName="OfficeSoftwareProtectionPlatform", cAlternateFileName="OFFICE~1")) returned 1 [0219.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8270 [0219.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2202b0 [0219.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x260ff0 [0219.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2202b0 | out: hHeap=0x1f0000) returned 1 [0219.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218978 | out: hHeap=0x1f0000) returned 1 [0219.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8270 | out: hHeap=0x1f0000) returned 1 [0219.951] lstrcmpW (lpString1="OfficeSoftwareProtectionPlatform", lpString2=".") returned 1 [0219.951] lstrcmpW (lpString1="OfficeSoftwareProtectionPlatform", lpString2="..") returned 1 [0219.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0219.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2612d0 [0219.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235eb8 | out: hHeap=0x1f0000) returned 1 [0219.952] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4accd6e1, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4accd6e1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x259ee44, dwReserved1=0x3, cFileName="Source Engine", cAlternateFileName="SOURCE~1")) returned 1 [0219.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238488 [0219.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0219.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x2188c8 [0219.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0219.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ff0 | out: hHeap=0x1f0000) returned 1 [0219.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238488 | out: hHeap=0x1f0000) returned 1 [0219.952] lstrcmpW (lpString1="Source Engine", lpString2=".") returned 1 [0219.952] lstrcmpW (lpString1="Source Engine", lpString2="..") returned 1 [0219.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212c68 [0219.952] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b5538f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x259ee44, dwReserved1=0x3, cFileName="Stationery", cAlternateFileName="STATIO~1")) returned 1 [0219.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0219.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0219.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x2191b8 [0219.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0219.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2188c8 | out: hHeap=0x1f0000) returned 1 [0219.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0219.952] lstrcmpW (lpString1="Stationery", lpString2=".") returned 1 [0219.952] lstrcmpW (lpString1="Stationery", lpString2="..") returned 1 [0219.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd8) returned 0x217038 [0219.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213790 [0219.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0219.953] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b56882, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x259ee44, dwReserved1=0x3, cFileName="TextConv", cAlternateFileName="")) returned 1 [0219.953] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0219.953] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0219.953] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218fa8 [0219.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0219.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2191b8 | out: hHeap=0x1f0000) returned 1 [0219.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0219.953] lstrcmpW (lpString1="TextConv", lpString2=".") returned 1 [0219.953] lstrcmpW (lpString1="TextConv", lpString2="..") returned 1 [0219.953] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212cf0 [0219.953] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b57d42, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x259ee44, dwReserved1=0x3, cFileName="Triedit", cAlternateFileName="")) returned 1 [0219.953] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0219.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218fa8 | out: hHeap=0x1f0000) returned 1 [0219.953] lstrcmpW (lpString1="Triedit", lpString2=".") returned 1 [0219.953] lstrcmpW (lpString1="Triedit", lpString2="..") returned 1 [0219.953] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0219.953] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xbcd0fab8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xcc208be6, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xcc208be6, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x259ee44, dwReserved1=0x3, cFileName="VC", cAlternateFileName="")) returned 1 [0219.953] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0219.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0219.953] lstrcmpW (lpString1="VC", lpString2=".") returned 1 [0219.953] lstrcmpW (lpString1="VC", lpString2="..") returned 1 [0219.953] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x138) returned 0x239be0 [0219.953] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0219.954] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0219.954] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b59a78, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x259ee44, dwReserved1=0x3, cFileName="VGX", cAlternateFileName="")) returned 1 [0219.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220490 [0219.954] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0219.954] lstrcmpW (lpString1="VGX", lpString2=".") returned 1 [0219.954] lstrcmpW (lpString1="VGX", lpString2="..") returned 1 [0219.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fb30 [0219.954] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49ecb94e, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ae972f5, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x259ee44, dwReserved1=0x3, cFileName="VSTO", cAlternateFileName="")) returned 1 [0219.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe00 [0219.954] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220490 | out: hHeap=0x1f0000) returned 1 [0219.954] lstrcmpW (lpString1="VSTO", lpString2=".") returned 1 [0219.954] lstrcmpW (lpString1="VSTO", lpString2="..") returned 1 [0219.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fc20 [0219.954] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49ecb94e, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ae972f5, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x259ee44, dwReserved1=0x3, cFileName="VSTO", cAlternateFileName="")) returned 0 [0219.954] FindClose (in: hFindFile=0x24e940 | out: hFindFile=0x24e940) returned 1 [0219.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234740 [0219.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238488 [0219.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x261b28 [0219.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0219.954] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\*", lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbf6c42af, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc878a301, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xc878a301, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e680 [0219.955] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0219.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0219.955] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0219.955] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbf6c42af, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc878a301, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xc878a301, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.955] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0219.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0219.955] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0219.955] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0219.955] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x809e6bf5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x809e6bf5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-file-l1-2-0.dll", cAlternateFileName="API-MS~1.DLL")) returned 1 [0219.955] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234788 [0219.955] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212be0 [0219.955] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f510 [0219.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212be0 | out: hHeap=0x1f0000) returned 1 [0219.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0219.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234788 | out: hHeap=0x1f0000) returned 1 [0219.956] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l1-2-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0219.956] GetFileType (hFile=0x210) returned 0x1 [0219.956] CloseHandle (hObject=0x210) returned 1 [0219.956] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fc18 [0219.956] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l1-2-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x809e6bf5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x809e6bf5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x48c0)) returned 1 [0219.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0219.956] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fe70 [0219.956] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l1-2-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x809e6bf5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x809e6bf5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x48c0)) returned 1 [0219.957] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0219.957] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22ff38 [0219.957] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0219.957] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x809e6bf5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x809e6bf5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-file-l2-1-0.dll", cAlternateFileName="API-MS~2.DLL")) returned 1 [0219.957] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234b30 [0219.957] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213680 [0219.957] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f5d8 [0219.957] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213680 | out: hHeap=0x1f0000) returned 1 [0219.957] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0219.957] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b30 | out: hHeap=0x1f0000) returned 1 [0219.957] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l2-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l2-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0219.957] GetFileType (hFile=0x210) returned 0x1 [0219.958] CloseHandle (hObject=0x210) returned 1 [0219.958] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f6a0 [0219.958] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l2-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l2-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x809e6bf5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x809e6bf5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x48c0)) returned 1 [0219.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0219.958] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x2300c8 [0219.958] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l2-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l2-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x809e6bf5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x809e6bf5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x48c0)) returned 1 [0219.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0219.958] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f6a0 [0219.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0219.958] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x52c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-localization-l1-2-0.dll", cAlternateFileName="API-MS~3.DLL")) returned 1 [0219.958] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a81c0 [0219.958] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2133d8 [0219.958] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x2007c8 [0219.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2133d8 | out: hHeap=0x1f0000) returned 1 [0219.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0219.959] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a81c0 | out: hHeap=0x1f0000) returned 1 [0219.959] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-localization-l1-2-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0219.959] GetFileType (hFile=0x210) returned 0x1 [0219.959] CloseHandle (hObject=0x210) returned 1 [0219.959] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x2008a0 [0219.959] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-localization-l1-2-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x52c0)) returned 1 [0219.960] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2008a0 | out: hHeap=0x1f0000) returned 1 [0219.960] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x2008a0 [0219.960] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-localization-l1-2-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x52c0)) returned 1 [0219.960] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2008a0 | out: hHeap=0x1f0000) returned 1 [0219.960] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x2008a0 [0219.960] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2008a0 | out: hHeap=0x1f0000) returned 1 [0219.960] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-processthreads-l1-1-1.dll", cAlternateFileName="API-MS~4.DLL")) returned 1 [0219.960] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235aa8 [0219.960] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0219.960] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x2008a0 [0219.960] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0219.960] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2007c8 | out: hHeap=0x1f0000) returned 1 [0219.960] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235aa8 | out: hHeap=0x1f0000) returned 1 [0219.960] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-processthreads-l1-1-1.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0219.961] GetFileType (hFile=0x210) returned 0x1 [0219.961] CloseHandle (hObject=0x210) returned 1 [0219.961] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x2007c8 [0219.961] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-processthreads-l1-1-1.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0)) returned 1 [0219.961] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2007c8 | out: hHeap=0x1f0000) returned 1 [0219.961] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x2007c8 [0219.961] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-processthreads-l1-1-1.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0)) returned 1 [0219.962] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2007c8 | out: hHeap=0x1f0000) returned 1 [0219.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x200978 [0219.962] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x200978 | out: hHeap=0x1f0000) returned 1 [0219.962] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-synch-l1-2-0.dll", cAlternateFileName="APF10C~1.DLL")) returned 1 [0219.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8008 [0219.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0219.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fda8 [0219.962] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0219.962] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2008a0 | out: hHeap=0x1f0000) returned 1 [0219.962] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8008 | out: hHeap=0x1f0000) returned 1 [0219.962] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-synch-l1-2-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0219.962] GetFileType (hFile=0x210) returned 0x1 [0219.963] CloseHandle (hObject=0x210) returned 1 [0219.963] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fe70 [0219.963] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-synch-l1-2-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0)) returned 1 [0219.963] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0219.963] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f768 [0219.963] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-synch-l1-2-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0)) returned 1 [0219.963] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0219.963] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x230258 [0219.963] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0219.963] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-timezone-l1-1-0.dll", cAlternateFileName="AP7902~1.DLL")) returned 1 [0219.963] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a81c0 [0219.964] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213680 [0219.964] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fce0 [0219.964] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213680 | out: hHeap=0x1f0000) returned 1 [0219.964] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0219.964] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a81c0 | out: hHeap=0x1f0000) returned 1 [0219.964] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-timezone-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-timezone-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0219.964] GetFileType (hFile=0x210) returned 0x1 [0219.964] CloseHandle (hObject=0x210) returned 1 [0219.965] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f6a0 [0219.965] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-timezone-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-timezone-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x48c0)) returned 1 [0219.965] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0219.965] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fda8 [0219.965] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-timezone-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-timezone-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x48c0)) returned 1 [0219.965] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0219.965] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f6a0 [0219.965] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0219.965] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x2d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-xstate-l2-1-0.dll", cAlternateFileName="APA632~1.DLL")) returned 1 [0219.965] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8950 [0219.965] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0219.965] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fda8 [0219.965] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0219.965] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0219.965] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8950 | out: hHeap=0x1f0000) returned 1 [0219.966] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-xstate-l2-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-xstate-l2-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0219.966] GetFileType (hFile=0x210) returned 0x1 [0219.966] CloseHandle (hObject=0x210) returned 1 [0219.966] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f5d8 [0219.966] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-xstate-l2-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-xstate-l2-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x2d60)) returned 1 [0219.966] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0219.966] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x2303e8 [0219.966] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-xstate-l2-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-xstate-l2-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x2d60)) returned 1 [0219.967] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0219.967] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x2300c8 [0219.967] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0219.967] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-conio-l1-1-0.dll", cAlternateFileName="AP5C76~1.DLL")) returned 1 [0219.967] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234788 [0219.967] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213680 [0219.967] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f510 [0219.967] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213680 | out: hHeap=0x1f0000) returned 1 [0219.967] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0219.967] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234788 | out: hHeap=0x1f0000) returned 1 [0219.967] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-conio-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-conio-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0219.967] GetFileType (hFile=0x210) returned 0x1 [0219.968] CloseHandle (hObject=0x210) returned 1 [0219.968] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x230258 [0219.968] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-conio-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-conio-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0)) returned 1 [0219.968] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0219.968] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fa88 [0219.968] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-conio-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-conio-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0)) returned 1 [0219.968] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0219.968] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f6a0 [0219.968] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0219.968] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x58c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-convert-l1-1-0.dll", cAlternateFileName="APFD9C~1.DLL")) returned 1 [0219.968] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a85e0 [0219.968] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f10 [0219.968] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x230258 [0219.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f10 | out: hHeap=0x1f0000) returned 1 [0219.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0219.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a85e0 | out: hHeap=0x1f0000) returned 1 [0219.969] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-convert-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0219.969] GetFileType (hFile=0x210) returned 0x1 [0219.969] CloseHandle (hObject=0x210) returned 1 [0219.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22ff38 [0219.970] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-convert-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x58c0)) returned 1 [0219.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0219.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x2303e8 [0219.970] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-convert-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x58c0)) returned 1 [0219.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0219.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f5d8 [0219.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0219.970] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-environment-l1-1-0.dll", cAlternateFileName="APC00F~1.DLL")) returned 1 [0219.971] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a88a0 [0219.971] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2133d8 [0219.971] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x2007c8 [0219.971] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2133d8 | out: hHeap=0x1f0000) returned 1 [0219.971] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0219.971] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a88a0 | out: hHeap=0x1f0000) returned 1 [0219.971] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-environment-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0219.972] GetFileType (hFile=0x210) returned 0x1 [0219.972] CloseHandle (hObject=0x210) returned 1 [0219.972] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x2008a0 [0219.972] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-environment-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0)) returned 1 [0219.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2008a0 | out: hHeap=0x1f0000) returned 1 [0219.972] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x2008a0 [0219.972] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-environment-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0)) returned 1 [0219.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2008a0 | out: hHeap=0x1f0000) returned 1 [0219.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x2008a0 [0219.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2008a0 | out: hHeap=0x1f0000) returned 1 [0219.973] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x50c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-filesystem-l1-1-0.dll", cAlternateFileName="AP0479~1.DLL")) returned 1 [0219.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8110 [0219.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213680 [0219.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fce0 [0219.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213680 | out: hHeap=0x1f0000) returned 1 [0219.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2007c8 | out: hHeap=0x1f0000) returned 1 [0219.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8110 | out: hHeap=0x1f0000) returned 1 [0219.974] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-filesystem-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-filesystem-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0219.974] GetFileType (hFile=0x210) returned 0x1 [0220.280] CloseHandle (hObject=0x210) returned 1 [0220.280] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x2303e8 [0220.280] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-filesystem-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-filesystem-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x50c0)) returned 1 [0220.281] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0220.281] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fc18 [0220.281] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-filesystem-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-filesystem-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x50c0)) returned 1 [0220.281] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0220.281] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x230258 [0220.281] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0220.281] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-heap-l1-1-0.dll", cAlternateFileName="AP23C9~1.DLL")) returned 1 [0220.281] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234590 [0220.281] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2133d8 [0220.281] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x230258 [0220.282] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2133d8 | out: hHeap=0x1f0000) returned 1 [0220.282] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0220.282] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234590 | out: hHeap=0x1f0000) returned 1 [0220.282] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-heap-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-heap-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0220.283] GetFileType (hFile=0x210) returned 0x1 [0220.283] CloseHandle (hObject=0x210) returned 1 [0220.284] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f9c0 [0220.284] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-heap-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-heap-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0)) returned 1 [0220.284] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0220.284] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x2303e8 [0220.284] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-heap-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-heap-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0)) returned 1 [0220.284] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0220.284] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x230190 [0220.285] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0220.285] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-locale-l1-1-0.dll", cAlternateFileName="APCB40~1.DLL")) returned 1 [0220.285] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8060 [0220.285] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0220.285] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fb50 [0220.285] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0220.285] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0220.285] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8060 | out: hHeap=0x1f0000) returned 1 [0220.286] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-locale-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-locale-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0220.286] GetFileType (hFile=0x210) returned 0x1 [0220.286] CloseHandle (hObject=0x210) returned 1 [0220.287] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x2303e8 [0220.287] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-locale-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-locale-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0)) returned 1 [0220.287] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0220.287] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fc18 [0220.287] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-locale-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-locale-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0)) returned 1 [0220.288] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0220.288] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fe70 [0220.288] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0220.288] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x6cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-math-l1-1-0.dll", cAlternateFileName="APAE51~1.DLL")) returned 1 [0220.288] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234ae8 [0220.288] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212a48 [0220.288] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fa88 [0220.288] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212a48 | out: hHeap=0x1f0000) returned 1 [0220.288] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0220.288] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234ae8 | out: hHeap=0x1f0000) returned 1 [0220.289] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-math-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-math-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0220.289] GetFileType (hFile=0x210) returned 0x1 [0220.289] CloseHandle (hObject=0x210) returned 1 [0220.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f768 [0220.289] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-math-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-math-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x6cc0)) returned 1 [0220.290] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0220.290] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f510 [0220.290] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-math-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-math-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x6cc0)) returned 1 [0220.290] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0220.290] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f5d8 [0220.290] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0220.290] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x68c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-multibyte-l1-1-0.dll", cAlternateFileName="AP972F~1.DLL")) returned 1 [0220.290] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a84d8 [0220.290] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0220.290] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f830 [0220.290] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0220.291] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0220.291] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a84d8 | out: hHeap=0x1f0000) returned 1 [0220.291] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-multibyte-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-multibyte-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0220.291] GetFileType (hFile=0x210) returned 0x1 [0220.291] CloseHandle (hObject=0x210) returned 1 [0220.292] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f6a0 [0220.292] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-multibyte-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-multibyte-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x68c0)) returned 1 [0220.292] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0220.292] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f768 [0220.292] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-multibyte-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-multibyte-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x68c0)) returned 1 [0220.292] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0220.292] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fb50 [0220.292] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0220.292] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x114c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-private-l1-1-0.dll", cAlternateFileName="AP7D9E~1.DLL")) returned 1 [0220.292] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a85e0 [0220.292] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0220.292] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x230258 [0220.292] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0220.292] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0220.293] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a85e0 | out: hHeap=0x1f0000) returned 1 [0220.293] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-private-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-private-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0220.293] GetFileType (hFile=0x210) returned 0x1 [0220.293] CloseHandle (hObject=0x210) returned 1 [0220.293] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f768 [0220.293] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-private-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-private-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x114c0)) returned 1 [0220.294] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0220.294] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fda8 [0220.294] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-private-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-private-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x114c0)) returned 1 [0220.294] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0220.294] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f830 [0220.294] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0220.294] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-process-l1-1-0.dll", cAlternateFileName="APFCAD~1.DLL")) returned 1 [0220.294] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8480 [0220.294] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0220.294] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x230190 [0220.294] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0220.294] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0220.294] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8480 | out: hHeap=0x1f0000) returned 1 [0220.295] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-process-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-process-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0220.295] GetFileType (hFile=0x210) returned 0x1 [0220.295] CloseHandle (hObject=0x210) returned 1 [0220.296] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x230000 [0220.296] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-process-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-process-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0)) returned 1 [0220.296] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0220.296] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x230000 [0220.296] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-process-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-process-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0)) returned 1 [0220.296] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0220.296] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f9c0 [0220.296] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0220.296] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x5ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-runtime-l1-1-0.dll", cAlternateFileName="AP8F34~1.DLL")) returned 1 [0220.296] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a80b8 [0220.296] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0220.296] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f5d8 [0220.297] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0220.297] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0220.297] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a80b8 | out: hHeap=0x1f0000) returned 1 [0220.297] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-runtime-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-runtime-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0220.297] GetFileType (hFile=0x210) returned 0x1 [0220.298] CloseHandle (hObject=0x210) returned 1 [0220.298] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22ff38 [0220.298] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-runtime-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-runtime-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x5ac0)) returned 1 [0220.298] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0220.298] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f8f8 [0220.298] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-runtime-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-runtime-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x5ac0)) returned 1 [0220.298] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0220.298] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x230258 [0220.299] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0220.299] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x60c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-stdio-l1-1-0.dll", cAlternateFileName="APD1B7~1.DLL")) returned 1 [0220.299] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234860 [0220.299] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0220.299] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x230258 [0220.299] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0220.299] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0220.299] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234860 | out: hHeap=0x1f0000) returned 1 [0220.300] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-stdio-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-stdio-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0220.300] GetFileType (hFile=0x210) returned 0x1 [0220.300] CloseHandle (hObject=0x210) returned 1 [0220.300] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fa88 [0220.301] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-stdio-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-stdio-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x60c0)) returned 1 [0220.301] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0220.301] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x230190 [0220.301] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-stdio-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-stdio-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x60c0)) returned 1 [0220.301] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0220.301] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f768 [0220.301] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0220.301] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x60c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-string-l1-1-0.dll", cAlternateFileName="APBF0F~1.DLL")) returned 1 [0220.301] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a80b8 [0220.301] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213680 [0220.302] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f9c0 [0220.302] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213680 | out: hHeap=0x1f0000) returned 1 [0220.302] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0220.302] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a80b8 | out: hHeap=0x1f0000) returned 1 [0220.302] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-string-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-string-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0220.303] GetFileType (hFile=0x210) returned 0x1 [0220.303] CloseHandle (hObject=0x210) returned 1 [0220.304] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fb50 [0220.304] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-string-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-string-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x60c0)) returned 1 [0220.304] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0220.304] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fda8 [0220.304] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-string-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-string-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x60c0)) returned 1 [0220.304] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0220.304] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x230000 [0220.305] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0220.305] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x52c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-time-l1-1-0.dll", cAlternateFileName="AP5E4C~1.DLL")) returned 1 [0220.305] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234860 [0220.305] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0220.305] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x2303e8 [0220.305] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0220.305] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0220.306] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234860 | out: hHeap=0x1f0000) returned 1 [0220.306] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-time-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-time-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0220.307] GetFileType (hFile=0x210) returned 0x1 [0220.307] CloseHandle (hObject=0x210) returned 1 [0220.307] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fe70 [0220.308] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-time-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-time-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x52c0)) returned 1 [0220.308] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0220.308] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x230000 [0220.308] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-time-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-time-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x52c0)) returned 1 [0220.308] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0220.308] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f8f8 [0220.308] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0220.308] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-utility-l1-1-0.dll", cAlternateFileName="AP80F4~1.DLL")) returned 1 [0220.308] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8480 [0220.308] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0220.309] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fe70 [0220.309] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0220.309] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0220.309] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8480 | out: hHeap=0x1f0000) returned 1 [0220.310] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-utility-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-utility-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0220.310] GetFileType (hFile=0x210) returned 0x1 [0220.310] CloseHandle (hObject=0x210) returned 1 [0220.311] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x230258 [0220.311] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-utility-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-utility-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0)) returned 1 [0220.311] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0220.311] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f510 [0220.311] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-utility-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-utility-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0)) returned 1 [0220.311] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0220.311] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f830 [0220.311] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0220.311] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb979f700, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x27c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="ApiClient.dll", cAlternateFileName="APICLI~1.DLL")) returned 1 [0220.311] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0220.312] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0220.312] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0220.312] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0220.312] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0220.312] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0220.312] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ApiClient.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\apiclient.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0220.313] GetLastError () returned 0x20 [0220.313] GetLastError () returned 0x20 [0220.313] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9bc01200, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0xa02d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVCatalog.dll", cAlternateFileName="APPVCA~1.DLL")) returned 1 [0220.313] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0220.313] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0220.313] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0220.313] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0220.313] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0220.314] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0220.314] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVCatalog.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvcatalog.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0220.314] GetLastError () returned 0x20 [0220.314] GetLastError () returned 0x20 [0220.315] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x1f5ad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="appvcleaner.exe", cAlternateFileName="APPVCL~1.EXE")) returned 1 [0220.315] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238438 [0220.315] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0220.315] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0220.315] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0220.315] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0220.315] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238438 | out: hHeap=0x1f0000) returned 1 [0220.316] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\appvcleaner.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvcleaner.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0220.316] GetFileType (hFile=0x210) returned 0x1 [0220.316] CloseHandle (hObject=0x210) returned 1 [0220.317] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a770 [0220.317] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\appvcleaner.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvcleaner.exe"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x1f5ad8)) returned 1 [0220.317] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a770 | out: hHeap=0x1f0000) returned 1 [0220.317] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21aab8 [0220.317] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\appvcleaner.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvcleaner.exe"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x1f5ad8)) returned 1 [0220.317] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21aab8 | out: hHeap=0x1f0000) returned 1 [0220.317] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21aa10 [0220.318] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21aa10 | out: hHeap=0x1f0000) returned 1 [0220.318] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a330a6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a330a6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x4b0d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVFileSystemMetadata.dll", cAlternateFileName="APPVFI~1.DLL")) returned 1 [0220.584] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234aa0 [0220.584] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0220.584] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0220.584] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0220.584] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0220.584] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234aa0 | out: hHeap=0x1f0000) returned 1 [0220.585] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVFileSystemMetadata.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvfilesystemmetadata.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0220.585] GetLastError () returned 0x20 [0220.585] GetLastError () returned 0x20 [0220.585] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a330a6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a330a6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x2052d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVIntegration.dll", cAlternateFileName="APPVIN~1.DLL")) returned 1 [0220.585] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238f68 [0220.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213680 [0220.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0220.586] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213680 | out: hHeap=0x1f0000) returned 1 [0220.586] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0220.586] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238f68 | out: hHeap=0x1f0000) returned 1 [0220.587] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIntegration.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvintegration.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0220.587] GetLastError () returned 0x20 [0220.587] GetLastError () returned 0x20 [0220.587] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a59305, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a59305, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x726d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVIsvApi.dll", cAlternateFileName="APPVIS~1.DLL")) returned 1 [0220.588] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0220.588] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213818 [0220.588] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0220.588] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213818 | out: hHeap=0x1f0000) returned 1 [0220.588] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0220.588] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0220.589] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvApi.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvapi.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0220.589] GetLastError () returned 0x20 [0220.589] GetLastError () returned 0x20 [0220.589] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc40ccad7, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xc40ccad7, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xc44aca07, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x60fb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppvIsvStream32.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="APPVIS~1.ODV")) returned 1 [0220.589] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x260ff0 [0220.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2132c8 [0220.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120) returned 0x210958 [0220.590] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2132c8 | out: hHeap=0x1f0000) returned 1 [0220.590] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0220.590] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ff0 | out: hHeap=0x1f0000) returned 1 [0220.591] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream32.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream32.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0220.591] GetFileType (hFile=0x23c) returned 0x1 [0220.592] CloseHandle (hObject=0x23c) returned 1 [0220.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120) returned 0x210708 [0220.592] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream32.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream32.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc40ccad7, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xc40ccad7, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xc44aca07, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x60fb3)) returned 1 [0220.592] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0220.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120) returned 0x211048 [0220.593] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream32.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream32.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc40ccad7, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xc40ccad7, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xc44aca07, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x60fb3)) returned 1 [0220.593] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0220.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120) returned 0x210708 [0220.593] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0220.593] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc44d29b7, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xc44d29b7, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xc4c1fe0e, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x73bb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppvIsvStream64.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="APPVIS~2.ODV")) returned 1 [0220.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2615b0 [0220.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213818 [0220.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120) returned 0x210cd0 [0220.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213818 | out: hHeap=0x1f0000) returned 1 [0220.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0220.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2615b0 | out: hHeap=0x1f0000) returned 1 [0220.594] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream64.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream64.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0220.595] GetFileType (hFile=0x23c) returned 0x1 [0220.595] CloseHandle (hObject=0x23c) returned 1 [0220.596] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120) returned 0x210708 [0220.596] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream64.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream64.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc44d29b7, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xc44d29b7, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xc4c1fe0e, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x73bb3)) returned 1 [0220.596] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0220.596] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120) returned 0x211048 [0220.596] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream64.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream64.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc44d29b7, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xc44d29b7, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xc4c1fe0e, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x73bb3)) returned 1 [0220.596] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0220.596] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120) returned 0x210830 [0220.597] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0220.597] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a7f55d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a7f55d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x336d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVIsvStreamingManager.dll", cAlternateFileName="APPVIS~4.DLL")) returned 1 [0220.597] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234aa0 [0220.597] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0220.597] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0220.597] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0220.597] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0220.597] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234aa0 | out: hHeap=0x1f0000) returned 1 [0220.598] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvStreamingManager.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstreamingmanager.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0220.598] GetLastError () returned 0x20 [0220.599] GetLastError () returned 0x20 [0220.599] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80aa57b9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80aa57b9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x1566d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVIsvSubsystemController.dll", cAlternateFileName="AP213A~1.DLL")) returned 1 [0220.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234788 [0220.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0220.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f510 [0220.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0220.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0220.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234788 | out: hHeap=0x1f0000) returned 1 [0220.601] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvSubsystemController.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystemcontroller.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0220.601] GetLastError () returned 0x20 [0220.601] GetLastError () returned 0x20 [0220.601] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80aa57b9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80aa57b9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc537ced4, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x1ae1ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppvIsvSubsystems32.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="APPVIS~3.ODV")) returned 1 [0220.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2615b0 [0220.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0220.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x130) returned 0x2366d8 [0220.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0220.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0220.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2615b0 | out: hHeap=0x1f0000) returned 1 [0220.603] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems32.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems32.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0220.603] GetFileType (hFile=0x23c) returned 0x1 [0220.604] CloseHandle (hObject=0x23c) returned 1 [0220.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x130) returned 0x20d888 [0220.604] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems32.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems32.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80aa57b9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80aa57b9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc537ced4, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x1ae1ab)) returned 1 [0220.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20d888 | out: hHeap=0x1f0000) returned 1 [0220.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x130) returned 0x20d888 [0220.605] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems32.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems32.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80aa57b9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80aa57b9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc537ced4, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x1ae1ab)) returned 1 [0220.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20d888 | out: hHeap=0x1f0000) returned 1 [0220.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x130) returned 0x20d888 [0220.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20d888 | out: hHeap=0x1f0000) returned 1 [0220.605] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80acba0b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80acba0b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc6479ba7, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x22e1ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppvIsvSubsystems64.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="APPVIS~4.ODV")) returned 1 [0220.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x260ff0 [0220.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0220.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x130) returned 0x20d888 [0220.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0220.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0220.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ff0 | out: hHeap=0x1f0000) returned 1 [0220.606] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems64.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems64.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0220.606] GetFileType (hFile=0x23c) returned 0x1 [0220.607] CloseHandle (hObject=0x23c) returned 1 [0220.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x130) returned 0x20d9c0 [0220.607] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems64.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems64.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80acba0b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80acba0b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc6479ba7, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x22e1ab)) returned 1 [0220.607] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20d9c0 | out: hHeap=0x1f0000) returned 1 [0220.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x130) returned 0x20d9c0 [0220.608] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems64.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems64.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80acba0b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80acba0b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc6479ba7, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x22e1ab)) returned 1 [0220.608] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20d9c0 | out: hHeap=0x1f0000) returned 1 [0220.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x130) returned 0x20d9c0 [0220.608] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20d9c0 | out: hHeap=0x1f0000) returned 1 [0220.608] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80af1c6a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80af1c6a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x8a8d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVIsvVirtualization.dll", cAlternateFileName="AP485B~1.DLL")) returned 1 [0220.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234aa0 [0220.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213818 [0220.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0220.608] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213818 | out: hHeap=0x1f0000) returned 1 [0220.608] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20d888 | out: hHeap=0x1f0000) returned 1 [0220.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234aa0 | out: hHeap=0x1f0000) returned 1 [0220.609] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvVirtualization.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvvirtualization.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0220.609] GetLastError () returned 0x20 [0220.610] GetLastError () returned 0x20 [0220.610] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80af1c6a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80af1c6a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x12cad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVManifest.dll", cAlternateFileName="APPVMA~1.DLL")) returned 1 [0220.610] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c90 [0220.610] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0220.610] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0220.610] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0220.610] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0220.610] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c90 | out: hHeap=0x1f0000) returned 1 [0220.611] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVManifest.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvmanifest.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0220.611] GetLastError () returned 0x20 [0220.611] GetLastError () returned 0x20 [0220.611] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b17ebf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b17ebf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0xe76d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVOrchestration.dll", cAlternateFileName="APPVOR~1.DLL")) returned 1 [0220.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2391d0 [0220.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0220.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0220.612] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0220.612] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0220.612] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2391d0 | out: hHeap=0x1f0000) returned 1 [0220.612] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVOrchestration.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvorchestration.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0220.613] GetLastError () returned 0x20 [0220.613] GetLastError () returned 0x20 [0220.613] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b17ebf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b17ebf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x13c4d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVPolicy.dll", cAlternateFileName="APPVPO~1.DLL")) returned 1 [0220.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0220.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0220.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0220.613] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0220.613] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0220.613] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0220.614] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVPolicy.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvpolicy.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0220.614] GetLastError () returned 0x20 [0220.614] GetLastError () returned 0x20 [0220.614] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5356dee, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xc5356dee, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xc5dc51fe, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x7d1eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVScripting.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="APPVSC~1.ODV")) returned 1 [0220.614] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2615b0 [0220.614] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0220.614] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120) returned 0x210cd0 [0220.615] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0220.615] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0220.615] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2615b0 | out: hHeap=0x1f0000) returned 1 [0220.616] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVScripting.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvscripting.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0220.616] GetFileType (hFile=0x23c) returned 0x1 [0220.616] CloseHandle (hObject=0x23c) returned 1 [0220.617] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120) returned 0x210958 [0220.617] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVScripting.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvscripting.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5356dee, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xc5356dee, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xc5dc51fe, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x7d1eb)) returned 1 [0220.617] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0220.617] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120) returned 0x210830 [0220.617] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVScripting.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvscripting.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5356dee, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xc5356dee, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xc5dc51fe, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x7d1eb)) returned 1 [0220.617] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0220.618] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120) returned 0x210958 [0220.618] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0220.618] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b3e121, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b3e121, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9e226c00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x406d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVShNotify.exe", cAlternateFileName="APPVSH~1.EXE")) returned 1 [0220.618] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c90 [0220.618] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2133d8 [0220.618] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0220.618] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2133d8 | out: hHeap=0x1f0000) returned 1 [0220.618] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0220.618] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c90 | out: hHeap=0x1f0000) returned 1 [0220.619] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVShNotify.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvshnotify.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0220.619] GetFileType (hFile=0x23c) returned 0x1 [0220.620] CloseHandle (hObject=0x23c) returned 1 [0220.620] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21ab60 [0220.620] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVShNotify.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvshnotify.exe"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b3e121, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b3e121, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9e226c00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x406d8)) returned 1 [0220.620] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ab60 | out: hHeap=0x1f0000) returned 1 [0220.620] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a620 [0220.620] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVShNotify.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvshnotify.exe"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b3e121, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b3e121, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9e226c00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x406d8)) returned 1 [0220.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a620 | out: hHeap=0x1f0000) returned 1 [0220.621] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21aa10 [0220.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21aa10 | out: hHeap=0x1f0000) returned 1 [0220.621] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47cd98c, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xc47cd98c, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xc50be622, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xc85d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2R32.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="C2R32D~1.ODV")) returned 1 [0220.621] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219f90 [0220.621] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2132c8 [0220.621] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x233580 [0220.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2132c8 | out: hHeap=0x1f0000) returned 1 [0220.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0220.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219f90 | out: hHeap=0x1f0000) returned 1 [0220.621] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R32.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r32.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0220.622] GetFileType (hFile=0x23c) returned 0x1 [0220.622] CloseHandle (hObject=0x23c) returned 1 [0220.622] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x233120 [0220.622] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R32.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r32.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47cd98c, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xc47cd98c, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xc50be622, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xc85d3)) returned 1 [0220.622] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233120 | out: hHeap=0x1f0000) returned 1 [0220.623] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x233008 [0220.623] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R32.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r32.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47cd98c, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xc47cd98c, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xc50be622, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xc85d3)) returned 1 [0220.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233008 | out: hHeap=0x1f0000) returned 1 [0220.623] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x233008 [0220.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233008 | out: hHeap=0x1f0000) returned 1 [0220.623] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b3e121, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b3e121, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc6cd2195, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x127363, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2R64.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="C2R64D~1.ODV")) returned 1 [0220.623] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a578 [0220.623] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2132c8 [0220.623] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x233698 [0220.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2132c8 | out: hHeap=0x1f0000) returned 1 [0220.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233580 | out: hHeap=0x1f0000) returned 1 [0220.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a578 | out: hHeap=0x1f0000) returned 1 [0220.624] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R64.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r64.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0220.624] GetFileType (hFile=0x23c) returned 0x1 [0220.624] CloseHandle (hObject=0x23c) returned 1 [0220.624] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x233008 [0220.625] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R64.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r64.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b3e121, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b3e121, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc6cd2195, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x127363)) returned 1 [0220.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233008 | out: hHeap=0x1f0000) returned 1 [0220.625] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x233008 [0220.625] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R64.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r64.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b3e121, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b3e121, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc6cd2195, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x127363)) returned 1 [0220.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233008 | out: hHeap=0x1f0000) returned 1 [0220.625] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x233008 [0220.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233008 | out: hHeap=0x1f0000) returned 1 [0220.625] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b64383, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b64383, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8ee04f00, ftLastWriteTime.dwHighDateTime=0x1d0d67f, nFileSizeHigh=0x0, nFileSizeLow=0x1028, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RHeartbeatConfig.xml", cAlternateFileName="C2RHEA~1.XML")) returned 1 [0220.625] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238cc8 [0220.625] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2132c8 [0220.626] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0220.626] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2132c8 | out: hHeap=0x1f0000) returned 1 [0220.626] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233698 | out: hHeap=0x1f0000) returned 1 [0220.626] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238cc8 | out: hHeap=0x1f0000) returned 1 [0220.626] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RHeartbeatConfig.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rheartbeatconfig.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0220.627] GetFileType (hFile=0x23c) returned 0x1 [0220.627] CloseHandle (hObject=0x23c) returned 1 [0220.627] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261160 [0220.627] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RHeartbeatConfig.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rheartbeatconfig.xml"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b64383, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b64383, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8ee04f00, ftLastWriteTime.dwHighDateTime=0x1d0d67f, nFileSizeHigh=0x0, nFileSizeLow=0x1028)) returned 1 [0220.628] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261160 | out: hHeap=0x1f0000) returned 1 [0220.628] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261160 [0220.628] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RHeartbeatConfig.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rheartbeatconfig.xml"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b64383, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b64383, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8ee04f00, ftLastWriteTime.dwHighDateTime=0x1d0d67f, nFileSizeHigh=0x0, nFileSizeLow=0x1028)) returned 1 [0220.628] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261160 | out: hHeap=0x1f0000) returned 1 [0220.628] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2615b0 [0220.628] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2615b0 | out: hHeap=0x1f0000) returned 1 [0220.628] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5416ba6, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xc5416ba6, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xc6263a9a, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xdc5cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RUI.en-us.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="C2RUIE~1.ODV")) returned 1 [0220.628] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219d98 [0220.628] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212a48 [0220.628] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120) returned 0x2105e0 [0220.629] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212a48 | out: hHeap=0x1f0000) returned 1 [0220.629] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0220.629] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219d98 | out: hHeap=0x1f0000) returned 1 [0220.629] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RUI.en-us.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rui.en-us.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0220.629] GetFileType (hFile=0x23c) returned 0x1 [0220.630] CloseHandle (hObject=0x23c) returned 1 [0220.630] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120) returned 0x210708 [0220.630] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RUI.en-us.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rui.en-us.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5416ba6, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xc5416ba6, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xc6263a9a, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xdc5cb)) returned 1 [0220.630] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0220.630] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120) returned 0x211170 [0220.860] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RUI.en-us.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rui.en-us.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5416ba6, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xc5416ba6, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xc6263a9a, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xdc5cb)) returned 1 [0220.921] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0220.922] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120) returned 0x210708 [0220.922] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0220.922] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc64c6138, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xc64c6138, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xc68a5f50, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x515bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="concrt140.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="CONCRT~1.ODV")) returned 1 [0220.922] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a8c0 [0220.922] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0220.922] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120) returned 0x210830 [0220.922] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0220.922] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0220.922] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a8c0 | out: hHeap=0x1f0000) returned 1 [0220.923] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\concrt140.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\concrt140.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0220.923] GetFileType (hFile=0x230) returned 0x1 [0220.924] CloseHandle (hObject=0x230) returned 1 [0220.924] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120) returned 0x2105e0 [0220.924] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\concrt140.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\concrt140.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc64c6138, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xc64c6138, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xc68a5f50, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x515bb)) returned 1 [0220.925] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0220.925] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120) returned 0x210958 [0220.925] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\concrt140.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\concrt140.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc64c6138, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xc64c6138, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xc68a5f50, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x515bb)) returned 1 [0220.925] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0220.925] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120) returned 0x210a80 [0220.925] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0220.925] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b64383, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b64383, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbd783a00, ftLastWriteTime.dwHighDateTime=0x1d0d7e5, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x0, dwReserved1=0x0, cFileName="i640.hash", cAlternateFileName="I640~1.HAS")) returned 1 [0220.925] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0220.925] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0220.925] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0220.926] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0220.926] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0220.926] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0220.927] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i640.hash" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\i640.hash"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0220.927] GetFileType (hFile=0x230) returned 0x1 [0220.928] CloseHandle (hObject=0x230) returned 1 [0220.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0220.928] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i640.hash" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\i640.hash"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b64383, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b64383, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbd783a00, ftLastWriteTime.dwHighDateTime=0x1d0d7e5, nFileSizeHigh=0x0, nFileSizeLow=0x66)) returned 1 [0220.928] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0220.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0220.928] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i640.hash" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\i640.hash"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b64383, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b64383, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbd783a00, ftLastWriteTime.dwHighDateTime=0x1d0d7e5, nFileSizeHigh=0x0, nFileSizeLow=0x66)) returned 1 [0220.928] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0220.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0220.928] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0220.929] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x808dbb6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x808dbb6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbc470d00, ftLastWriteTime.dwHighDateTime=0x1d0d7e5, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x0, dwReserved1=0x0, cFileName="i641033.hash", cAlternateFileName="I64103~1.HAS")) returned 1 [0220.929] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0220.929] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2132c8 [0220.929] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0220.929] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2132c8 | out: hHeap=0x1f0000) returned 1 [0220.929] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0220.929] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0220.929] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i641033.hash" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\i641033.hash"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0220.930] GetFileType (hFile=0x230) returned 0x1 [0220.930] CloseHandle (hObject=0x230) returned 1 [0220.930] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0220.931] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i641033.hash" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\i641033.hash"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x808dbb6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x808dbb6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbc470d00, ftLastWriteTime.dwHighDateTime=0x1d0d7e5, nFileSizeHigh=0x0, nFileSizeLow=0x66)) returned 1 [0220.931] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0220.931] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0220.931] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i641033.hash" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\i641033.hash"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x808dbb6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x808dbb6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbc470d00, ftLastWriteTime.dwHighDateTime=0x1d0d7e5, nFileSizeHigh=0x0, nFileSizeLow=0x66)) returned 1 [0220.931] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0220.931] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0220.931] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0220.932] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b64383, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b64383, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbe3eab00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x10ae80, dwReserved0=0x0, dwReserved1=0x0, cFileName="IntegratedOffice.exe", cAlternateFileName="INTEGR~1.EXE")) returned 1 [0220.932] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239278 [0220.932] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213680 [0220.932] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0220.932] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213680 | out: hHeap=0x1f0000) returned 1 [0220.932] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0220.932] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239278 | out: hHeap=0x1f0000) returned 1 [0220.932] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\IntegratedOffice.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\integratedoffice.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0220.933] GetFileType (hFile=0x230) returned 0x1 [0220.933] CloseHandle (hObject=0x230) returned 1 [0220.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21aa10 [0220.938] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\IntegratedOffice.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\integratedoffice.exe"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b64383, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b64383, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbe3eab00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x10ae80)) returned 1 [0220.938] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21aa10 | out: hHeap=0x1f0000) returned 1 [0220.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a6c8 [0220.938] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\IntegratedOffice.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\integratedoffice.exe"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b64383, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b64383, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbe3eab00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x10ae80)) returned 1 [0220.938] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a6c8 | out: hHeap=0x1f0000) returned 1 [0220.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219e40 [0220.938] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219e40 | out: hHeap=0x1f0000) returned 1 [0220.938] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b8a5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b8a5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xa2e72000, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x578d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MavInject32.exe", cAlternateFileName="MAVINJ~1.EXE")) returned 1 [0220.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0220.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0220.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0220.939] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0220.939] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0220.939] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0220.939] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\MavInject32.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mavinject32.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0220.939] GetFileType (hFile=0x230) returned 0x1 [0220.939] CloseHandle (hObject=0x230) returned 1 [0220.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a968 [0220.940] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\MavInject32.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mavinject32.exe"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b8a5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b8a5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xa2e72000, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x578d8)) returned 1 [0220.940] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a968 | out: hHeap=0x1f0000) returned 1 [0220.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a620 [0220.940] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\MavInject32.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mavinject32.exe"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b8a5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b8a5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xa2e72000, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x578d8)) returned 1 [0220.940] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a620 | out: hHeap=0x1f0000) returned 1 [0220.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21aa10 [0220.940] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21aa10 | out: hHeap=0x1f0000) returned 1 [0220.941] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b8a5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b8a5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8745c00, ftLastWriteTime.dwHighDateTime=0x1d0d7aa, nFileSizeHigh=0x0, nFileSizeLow=0x2ffa60, dwReserved0=0x0, dwReserved1=0x0, cFileName="mso20win32client.dll", cAlternateFileName="MSO20W~1.DLL")) returned 1 [0220.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239278 [0220.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0220.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0220.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0220.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0220.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239278 | out: hHeap=0x1f0000) returned 1 [0220.941] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso20win32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso20win32client.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0220.942] GetLastError () returned 0x20 [0220.942] GetLastError () returned 0x20 [0220.942] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80bb0837, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80bb0837, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xad6b600, ftLastWriteTime.dwHighDateTime=0x1d0d7aa, nFileSizeHigh=0x0, nFileSizeLow=0x475e60, dwReserved0=0x0, dwReserved1=0x0, cFileName="mso30win32client.dll", cAlternateFileName="MSO30W~1.DLL")) returned 1 [0220.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239010 [0220.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2133d8 [0220.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0220.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2133d8 | out: hHeap=0x1f0000) returned 1 [0220.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0220.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239010 | out: hHeap=0x1f0000) returned 1 [0220.943] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso30win32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso30win32client.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0220.944] GetLastError () returned 0x20 [0220.944] GetLastError () returned 0x20 [0220.944] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80bfccf1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80bfccf1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb7179d00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x307ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mso40uires.dll", cAlternateFileName="MSO40U~1.DLL")) returned 1 [0220.944] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0220.944] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0220.944] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0220.944] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0220.944] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0220.944] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0220.944] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uires.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso40uires.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0220.945] GetLastError () returned 0x20 [0220.945] GetLastError () returned 0x20 [0220.945] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80c22f4a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80c22f4a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x10cc9700, ftLastWriteTime.dwHighDateTime=0x1d0d7aa, nFileSizeHigh=0x0, nFileSizeLow=0x8e6060, dwReserved0=0x0, dwReserved1=0x0, cFileName="mso40uiwin32client.dll", cAlternateFileName="MSO40U~2.DLL")) returned 1 [0220.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238d70 [0220.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0220.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0220.945] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0220.945] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0220.945] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238d70 | out: hHeap=0x1f0000) returned 1 [0220.946] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uiwin32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso40uiwin32client.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0220.946] GetLastError () returned 0x20 [0220.946] GetLastError () returned 0x20 [0220.946] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x808dbb6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x808dbb6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x11fdc400, ftLastWriteTime.dwHighDateTime=0x1d0d7aa, nFileSizeHigh=0x0, nFileSizeLow=0xee60, dwReserved0=0x0, dwReserved1=0x0, cFileName="msointl30.en-us.dll", cAlternateFileName="MSOINT~1.DLL")) returned 1 [0220.946] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238d70 [0220.946] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0220.946] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0220.947] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0220.947] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0220.947] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238d70 | out: hHeap=0x1f0000) returned 1 [0220.947] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msointl30.en-us.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msointl30.en-us.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0220.947] GetFileType (hFile=0x230) returned 0x1 [0220.947] CloseHandle (hObject=0x230) returned 1 [0220.948] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219ee8 [0220.948] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msointl30.en-us.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msointl30.en-us.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x808dbb6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x808dbb6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x11fdc400, ftLastWriteTime.dwHighDateTime=0x1d0d7aa, nFileSizeHigh=0x0, nFileSizeLow=0xee60)) returned 1 [0220.948] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219ee8 | out: hHeap=0x1f0000) returned 1 [0220.948] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a2d8 [0220.948] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msointl30.en-us.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msointl30.en-us.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x808dbb6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x808dbb6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x11fdc400, ftLastWriteTime.dwHighDateTime=0x1d0d7aa, nFileSizeHigh=0x0, nFileSizeLow=0xee60)) returned 1 [0220.948] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a2d8 | out: hHeap=0x1f0000) returned 1 [0220.948] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219e40 [0220.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219e40 | out: hHeap=0x1f0000) returned 1 [0220.949] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80c9565a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80c9565a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1909ea00, ftLastWriteTime.dwHighDateTime=0x1d098bf, nFileSizeHigh=0x0, nFileSizeLow=0xa12a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcp120.dll", cAlternateFileName="")) returned 1 [0220.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0220.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f10 [0220.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0220.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f10 | out: hHeap=0x1f0000) returned 1 [0220.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0220.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0220.949] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp120.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msvcp120.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0220.950] GetLastError () returned 0x20 [0220.950] GetLastError () returned 0x20 [0220.950] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80cbb8b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80cbb8b2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x9b0a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcp140.dll", cAlternateFileName="")) returned 1 [0220.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0220.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0220.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0220.950] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0220.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0220.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0220.951] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msvcp140.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0220.951] GetLastError () returned 0x20 [0220.951] GetLastError () returned 0x20 [0220.952] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80cbb8b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80cbb8b2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1b6c4400, ftLastWriteTime.dwHighDateTime=0x1d098bf, nFileSizeHigh=0x0, nFileSizeLow=0xeb2a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr120.dll", cAlternateFileName="")) returned 1 [0220.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0220.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213680 [0220.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0220.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213680 | out: hHeap=0x1f0000) returned 1 [0220.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0220.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0220.953] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcr120.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msvcr120.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0220.953] GetLastError () returned 0x20 [0220.953] GetLastError () returned 0x20 [0220.953] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80cbb8b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80cbb8b2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb7179d00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x5b1068, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeC2RClient.exe", cAlternateFileName="OFFICE~1.EXE")) returned 1 [0220.953] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239278 [0220.953] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0220.953] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0220.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0220.954] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0220.954] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239278 | out: hHeap=0x1f0000) returned 1 [0220.954] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RClient.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rclient.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0220.954] GetFileType (hFile=0x230) returned 0x1 [0220.955] CloseHandle (hObject=0x230) returned 1 [0220.955] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219d98 [0220.955] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RClient.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rclient.exe"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80cbb8b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80cbb8b2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb7179d00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x5b1068)) returned 1 [0220.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219d98 | out: hHeap=0x1f0000) returned 1 [0220.956] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219d98 [0220.956] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RClient.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rclient.exe"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80cbb8b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80cbb8b2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb7179d00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x5b1068)) returned 1 [0220.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219d98 | out: hHeap=0x1f0000) returned 1 [0220.956] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a6c8 [0220.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a6c8 | out: hHeap=0x1f0000) returned 1 [0220.956] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc65f7249, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xc65f7249, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xc6cf87b3, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xf35eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeC2RCom.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="OFFICE~1.ODV")) returned 1 [0220.956] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261440 [0220.956] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0220.956] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120) returned 0x210cd0 [0220.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0220.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0220.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261440 | out: hHeap=0x1f0000) returned 1 [0220.957] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RCom.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rcom.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0220.957] GetFileType (hFile=0x230) returned 0x1 [0220.957] CloseHandle (hObject=0x230) returned 1 [0220.957] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120) returned 0x2105e0 [0220.958] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RCom.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rcom.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc65f7249, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xc65f7249, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xc6cf87b3, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xf35eb)) returned 1 [0220.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0220.958] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120) returned 0x211048 [0220.958] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RCom.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rcom.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc65f7249, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xc65f7249, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xc6cf87b3, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xf35eb)) returned 1 [0220.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0220.958] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120) returned 0x210830 [0220.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0220.958] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d07d85, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d07d85, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbd0d7e00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x2a5e58, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeClickToRun.exe", cAlternateFileName="OFFICE~2.EXE")) returned 1 [0220.958] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239240 [0220.958] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213680 [0220.958] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0220.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213680 | out: hHeap=0x1f0000) returned 1 [0220.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0220.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239240 | out: hHeap=0x1f0000) returned 1 [0221.272] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeClickToRun.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeclicktorun.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0221.272] GetLastError () returned 0x20 [0221.272] GetLastError () returned 0x20 [0221.272] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d542e1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d542e1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x3f141b52, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x12ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeUpdateSchedule.xml", cAlternateFileName="OFFICE~1.XML")) returned 1 [0221.272] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233df8 [0221.273] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213680 [0221.273] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0221.273] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213680 | out: hHeap=0x1f0000) returned 1 [0221.273] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0221.273] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233df8 | out: hHeap=0x1f0000) returned 1 [0221.274] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeUpdateSchedule.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeupdateschedule.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0221.274] GetFileType (hFile=0x1b0) returned 0x1 [0221.275] CloseHandle (hObject=0x1b0) returned 1 [0221.275] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261388 [0221.275] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeUpdateSchedule.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeupdateschedule.xml"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d542e1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d542e1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x3f141b52, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x12ae)) returned 1 [0221.275] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261388 | out: hHeap=0x1f0000) returned 1 [0221.275] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x260ff0 [0221.276] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeUpdateSchedule.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeupdateschedule.xml"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d542e1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d542e1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x3f141b52, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x12ae)) returned 1 [0221.276] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ff0 | out: hHeap=0x1f0000) returned 1 [0221.276] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x260ff0 [0221.276] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ff0 | out: hHeap=0x1f0000) returned 1 [0221.276] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d542e1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d542e1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x3fa7ec8f, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x1162, dwReserved0=0x0, dwReserved1=0x0, cFileName="ServiceWatcherSchedule.xml", cAlternateFileName="SERVIC~1.XML")) returned 1 [0221.276] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x233df8 [0221.276] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0221.276] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0221.276] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0221.277] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0221.277] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233df8 | out: hHeap=0x1f0000) returned 1 [0221.277] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ServiceWatcherSchedule.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\servicewatcherschedule.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0221.278] GetFileType (hFile=0x1b0) returned 0x1 [0221.278] CloseHandle (hObject=0x1b0) returned 1 [0221.279] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261388 [0221.279] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ServiceWatcherSchedule.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\servicewatcherschedule.xml"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d542e1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d542e1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x3fa7ec8f, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x1162)) returned 1 [0221.279] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261388 | out: hHeap=0x1f0000) returned 1 [0221.279] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x260ff0 [0221.279] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ServiceWatcherSchedule.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\servicewatcherschedule.xml"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d542e1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d542e1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x3fa7ec8f, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x1162)) returned 1 [0221.279] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ff0 | out: hHeap=0x1f0000) returned 1 [0221.280] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261668 [0221.280] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261668 | out: hHeap=0x1f0000) returned 1 [0221.280] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d542e1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d542e1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbe3eab00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x101458, dwReserved0=0x0, dwReserved1=0x0, cFileName="StreamServer.dll", cAlternateFileName="STREAM~1.DLL")) returned 1 [0221.280] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238cc8 [0221.280] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2132c8 [0221.280] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0221.280] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2132c8 | out: hHeap=0x1f0000) returned 1 [0221.280] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0221.281] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238cc8 | out: hHeap=0x1f0000) returned 1 [0221.281] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\StreamServer.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\streamserver.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0221.282] GetLastError () returned 0x20 [0221.282] GetLastError () returned 0x20 [0221.282] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc708b7c7, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xc708b7c7, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xc8717ba1, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xeffd3, dwReserved0=0x0, dwReserved1=0x0, cFileName="ucrtbase.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="UCRTBA~1.ODV")) returned 1 [0221.282] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a968 [0221.282] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0221.282] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x232dd8 [0221.283] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0221.283] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0221.283] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a968 | out: hHeap=0x1f0000) returned 1 [0221.283] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ucrtbase.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\ucrtbase.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0221.284] GetFileType (hFile=0x1b0) returned 0x1 [0221.284] CloseHandle (hObject=0x1b0) returned 1 [0221.285] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x233350 [0221.285] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ucrtbase.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\ucrtbase.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc708b7c7, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xc708b7c7, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xc8717ba1, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xeffd3)) returned 1 [0221.285] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233350 | out: hHeap=0x1f0000) returned 1 [0221.285] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x233468 [0221.285] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ucrtbase.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\ucrtbase.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc708b7c7, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xc708b7c7, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xc8717ba1, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xeffd3)) returned 1 [0221.286] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233468 | out: hHeap=0x1f0000) returned 1 [0221.286] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x233698 [0221.286] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233698 | out: hHeap=0x1f0000) returned 1 [0221.286] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc708b7c7, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xc708b7c7, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xc8763f94, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x5f5c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="vccorlib140.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="VCCORL~1.ODV")) returned 1 [0221.286] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a380 [0221.286] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0221.286] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120) returned 0x210a80 [0221.286] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0221.287] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232dd8 | out: hHeap=0x1f0000) returned 1 [0221.287] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a380 | out: hHeap=0x1f0000) returned 1 [0221.287] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vccorlib140.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\vccorlib140.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0221.288] GetFileType (hFile=0x1b0) returned 0x1 [0221.288] CloseHandle (hObject=0x1b0) returned 1 [0221.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120) returned 0x211048 [0221.289] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vccorlib140.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\vccorlib140.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc708b7c7, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xc708b7c7, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xc8763f94, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x5f5c3)) returned 1 [0221.289] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0221.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120) returned 0x210830 [0221.289] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vccorlib140.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\vccorlib140.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc708b7c7, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xc708b7c7, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xc8763f94, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x5f5c3)) returned 1 [0221.290] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0221.290] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120) returned 0x210ba8 [0221.290] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0221.290] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d7a486, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d7a486, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x15ab0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcruntime140.dll", cAlternateFileName="VCRUNT~1.DLL")) returned 1 [0221.290] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238fd8 [0221.290] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0221.290] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0221.290] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0221.291] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0221.291] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238fd8 | out: hHeap=0x1f0000) returned 1 [0221.291] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vcruntime140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\vcruntime140.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0221.292] GetLastError () returned 0x20 [0221.292] GetLastError () returned 0x20 [0221.292] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d7a486, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d7a486, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x15ab0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcruntime140.dll", cAlternateFileName="VCRUNT~1.DLL")) returned 0 [0221.293] FindClose (in: hFindFile=0x24e680 | out: hFindFile=0x24e680) returned 1 [0221.293] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0221.293] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261b28 | out: hHeap=0x1f0000) returned 1 [0221.293] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238488 | out: hHeap=0x1f0000) returned 1 [0221.293] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234740 | out: hHeap=0x1f0000) returned 1 [0221.294] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234860 [0221.294] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0221.294] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262fe0 [0221.294] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220508 [0221.294] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\*", lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb3e1c92c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb3e1c92c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24ec40 [0221.295] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0221.295] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220508 | out: hHeap=0x1f0000) returned 1 [0221.295] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0221.295] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb3e1c92c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb3e1c92c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0221.295] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220580 [0221.295] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0221.296] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0221.296] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0221.296] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d100bae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe462e472, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe462e472, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xc137d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Alphabet.xml", cAlternateFileName="")) returned 1 [0221.296] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238488 [0221.296] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f770 [0221.296] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218a28 [0221.296] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f770 | out: hHeap=0x1f0000) returned 1 [0221.297] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220580 | out: hHeap=0x1f0000) returned 1 [0221.297] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238488 | out: hHeap=0x1f0000) returned 1 [0221.297] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\alphabet.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0221.298] GetLastError () returned 0x5 [0221.298] GetLastError () returned 0x5 [0221.298] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05532b6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar-SA", cAlternateFileName="")) returned 1 [0221.298] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0221.299] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x2188c8 [0221.299] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0221.299] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218a28 | out: hHeap=0x1f0000) returned 1 [0221.299] lstrcmpW (lpString1="ar-SA", lpString2=".") returned 1 [0221.299] lstrcmpW (lpString1="ar-SA", lpString2="..") returned 1 [0221.299] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204c10 [0221.299] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0221.299] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0553f37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg-BG", cAlternateFileName="")) returned 1 [0221.300] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0221.300] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x2191b8 [0221.300] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0221.300] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2188c8 | out: hHeap=0x1f0000) returned 1 [0221.300] lstrcmpW (lpString1="bg-BG", lpString2=".") returned 1 [0221.300] lstrcmpW (lpString1="bg-BG", lpString2="..") returned 1 [0221.300] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239278 [0221.301] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0221.301] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c10 | out: hHeap=0x1f0000) returned 1 [0221.301] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe46546cb, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe46546cb, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x69a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Content.xml", cAlternateFileName="")) returned 1 [0221.301] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0221.301] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0221.301] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218768 [0221.301] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0221.301] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2191b8 | out: hHeap=0x1f0000) returned 1 [0221.302] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0221.302] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\content.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0221.553] GetLastError () returned 0x5 [0221.553] GetLastError () returned 0x5 [0221.554] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0554b83, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-CZ", cAlternateFileName="")) returned 1 [0221.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220238 [0221.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218fa8 [0221.554] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220238 | out: hHeap=0x1f0000) returned 1 [0221.554] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218768 | out: hHeap=0x1f0000) returned 1 [0221.554] lstrcmpW (lpString1="cs-CZ", lpString2=".") returned 1 [0221.554] lstrcmpW (lpString1="cs-CZ", lpString2="..") returned 1 [0221.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x48) returned 0x225f68 [0221.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213680 [0221.554] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239278 | out: hHeap=0x1f0000) returned 1 [0221.555] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05550d5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-DK", cAlternateFileName="")) returned 1 [0221.555] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2203a0 [0221.555] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218d98 [0221.555] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2203a0 | out: hHeap=0x1f0000) returned 1 [0221.555] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218fa8 | out: hHeap=0x1f0000) returned 1 [0221.555] lstrcmpW (lpString1="da-DK", lpString2=".") returned 1 [0221.555] lstrcmpW (lpString1="da-DK", lpString2="..") returned 1 [0221.555] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235eb8 [0221.555] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212be0 [0221.556] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225f68 | out: hHeap=0x1f0000) returned 1 [0221.556] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0555b2c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-DE", cAlternateFileName="")) returned 1 [0221.556] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0221.556] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218b88 [0221.556] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0221.556] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218d98 | out: hHeap=0x1f0000) returned 1 [0221.556] lstrcmpW (lpString1="de-DE", lpString2=".") returned 1 [0221.556] lstrcmpW (lpString1="de-DE", lpString2="..") returned 1 [0221.557] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0221.557] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0221.557] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235eb8 | out: hHeap=0x1f0000) returned 1 [0221.557] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa055662c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el-GR", cAlternateFileName="")) returned 1 [0221.557] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0221.557] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218558 [0221.557] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0221.557] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218b88 | out: hHeap=0x1f0000) returned 1 [0221.557] lstrcmpW (lpString1="el-GR", lpString2=".") returned 1 [0221.557] lstrcmpW (lpString1="el-GR", lpString2="..") returned 1 [0221.557] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2133d8 [0221.558] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0557085, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-GB", cAlternateFileName="")) returned 1 [0221.558] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0221.558] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219478 [0221.558] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0221.558] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218558 | out: hHeap=0x1f0000) returned 1 [0221.558] lstrcmpW (lpString1="en-GB", lpString2=".") returned 1 [0221.558] lstrcmpW (lpString1="en-GB", lpString2="..") returned 1 [0221.558] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd8) returned 0x22d368 [0221.558] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0221.558] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0221.558] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05dd09d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe8231541, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0221.558] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fa40 [0221.559] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218b88 [0221.559] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fa40 | out: hHeap=0x1f0000) returned 1 [0221.559] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219478 | out: hHeap=0x1f0000) returned 1 [0221.559] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0221.559] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0221.559] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213818 [0221.559] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05ddf5c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-ES", cAlternateFileName="")) returned 1 [0221.559] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220508 [0221.559] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x2188c8 [0221.559] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220508 | out: hHeap=0x1f0000) returned 1 [0221.559] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218b88 | out: hHeap=0x1f0000) returned 1 [0221.559] lstrcmpW (lpString1="es-ES", lpString2=".") returned 1 [0221.560] lstrcmpW (lpString1="es-ES", lpString2="..") returned 1 [0221.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2132c8 [0221.560] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05dea14, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-MX", cAlternateFileName="")) returned 1 [0221.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd88 [0221.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219268 [0221.560] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd88 | out: hHeap=0x1f0000) returned 1 [0221.560] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2188c8 | out: hHeap=0x1f0000) returned 1 [0221.560] lstrcmpW (lpString1="es-MX", lpString2=".") returned 1 [0221.560] lstrcmpW (lpString1="es-MX", lpString2="..") returned 1 [0221.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x138) returned 0x2366d8 [0221.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0221.561] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d368 | out: hHeap=0x1f0000) returned 1 [0221.561] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05df011, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et-EE", cAlternateFileName="")) returned 1 [0221.561] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0221.561] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218608 [0221.561] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0221.561] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219268 | out: hHeap=0x1f0000) returned 1 [0221.561] lstrcmpW (lpString1="et-EE", lpString2=".") returned 1 [0221.561] lstrcmpW (lpString1="et-EE", lpString2="..") returned 1 [0221.561] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0221.561] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05df7b6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-FI", cAlternateFileName="")) returned 1 [0221.561] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f7e8 [0221.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ce8 [0221.562] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f7e8 | out: hHeap=0x1f0000) returned 1 [0221.562] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218608 | out: hHeap=0x1f0000) returned 1 [0221.562] lstrcmpW (lpString1="fi-FI", lpString2=".") returned 1 [0221.562] lstrcmpW (lpString1="fi-FI", lpString2="..") returned 1 [0221.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0221.562] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8f49e8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd11f8841, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd11f8841, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x186b84, dwReserved0=0x0, dwReserved1=0x0, cFileName="FlickAnimation.avi", cAlternateFileName="")) returned 1 [0221.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239208 [0221.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0221.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219268 [0221.562] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0221.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ce8 | out: hHeap=0x1f0000) returned 1 [0221.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239208 | out: hHeap=0x1f0000) returned 1 [0221.563] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\FlickAnimation.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flickanimation.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0221.564] GetLastError () returned 0x5 [0221.564] GetLastError () returned 0x5 [0221.565] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8f49e8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd121ea9a, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd121ea9a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xc4800, dwReserved0=0x0, dwReserved1=0x0, cFileName="FlickLearningWizard.exe", cAlternateFileName="")) returned 1 [0221.565] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238de0 [0221.565] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f770 [0221.565] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218d98 [0221.565] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f770 | out: hHeap=0x1f0000) returned 1 [0221.565] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219268 | out: hHeap=0x1f0000) returned 1 [0221.565] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238de0 | out: hHeap=0x1f0000) returned 1 [0221.566] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\FlickLearningWizard.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flicklearningwizard.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0221.566] GetLastError () returned 0x5 [0221.566] GetLastError () returned 0x5 [0221.566] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0635c03, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-CA", cAlternateFileName="")) returned 1 [0221.566] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f770 [0221.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218768 [0221.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f770 | out: hHeap=0x1f0000) returned 1 [0221.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218d98 | out: hHeap=0x1f0000) returned 1 [0221.567] lstrcmpW (lpString1="fr-CA", lpString2=".") returned 1 [0221.567] lstrcmpW (lpString1="fr-CA", lpString2="..") returned 1 [0221.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212a48 [0221.567] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06369df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-FR", cAlternateFileName="")) returned 1 [0221.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220508 [0221.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218818 [0221.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220508 | out: hHeap=0x1f0000) returned 1 [0221.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218768 | out: hHeap=0x1f0000) returned 1 [0221.568] lstrcmpW (lpString1="fr-FR", lpString2=".") returned 1 [0221.568] lstrcmpW (lpString1="fr-FR", lpString2="..") returned 1 [0221.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c8) returned 0x231d78 [0221.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0221.569] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0221.569] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0637839, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fsdefinitions", cAlternateFileName="FSDEFI~1")) returned 1 [0221.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0221.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0221.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x2188c8 [0221.569] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0221.569] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218818 | out: hHeap=0x1f0000) returned 1 [0221.569] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0221.569] lstrcmpW (lpString1="fsdefinitions", lpString2=".") returned 1 [0221.569] lstrcmpW (lpString1="fsdefinitions", lpString2="..") returned 1 [0221.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0221.569] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cf9a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he-IL", cAlternateFileName="")) returned 1 [0221.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f7e8 [0221.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218608 [0221.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f7e8 | out: hHeap=0x1f0000) returned 1 [0221.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2188c8 | out: hHeap=0x1f0000) returned 1 [0221.570] lstrcmpW (lpString1="he-IL", lpString2=".") returned 1 [0221.570] lstrcmpW (lpString1="he-IL", lpString2="..") returned 1 [0221.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0221.570] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cfce2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-HR", cAlternateFileName="")) returned 1 [0221.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220508 [0221.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218a28 [0221.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220508 | out: hHeap=0x1f0000) returned 1 [0221.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218608 | out: hHeap=0x1f0000) returned 1 [0221.570] lstrcmpW (lpString1="hr-HR", lpString2=".") returned 1 [0221.570] lstrcmpW (lpString1="hr-HR", lpString2="..") returned 1 [0221.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e88 [0221.570] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06d0656, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-HU", cAlternateFileName="")) returned 1 [0221.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0221.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218558 [0221.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0221.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218a28 | out: hHeap=0x1f0000) returned 1 [0221.571] lstrcmpW (lpString1="hu-HU", lpString2=".") returned 1 [0221.571] lstrcmpW (lpString1="hu-HU", lpString2="..") returned 1 [0221.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0221.571] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8ce781, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe382bd1f, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe382bd1f, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xb620, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrcommonlm.dat", cAlternateFileName="")) returned 1 [0221.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0221.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0221.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ce8 [0221.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0221.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218558 | out: hHeap=0x1f0000) returned 1 [0221.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0221.572] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\hwrcommonlm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrcommonlm.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0221.572] GetLastError () returned 0x5 [0221.572] GetLastError () returned 0x5 [0221.572] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6eba2ec1, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0xa07693a9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6eba2ec1, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HWRCustomization", cAlternateFileName="HWRCUS~1")) returned 1 [0221.572] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238da8 [0221.572] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0221.572] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218558 [0221.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0221.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ce8 | out: hHeap=0x1f0000) returned 1 [0221.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238da8 | out: hHeap=0x1f0000) returned 1 [0221.572] lstrcmpW (lpString1="HWRCustomization", lpString2=".") returned 1 [0221.573] lstrcmpW (lpString1="HWRCustomization", lpString2="..") returned 1 [0221.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0221.573] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85c57278, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xb269cdea, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb269cdea, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x79bc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrenclm.dat", cAlternateFileName="")) returned 1 [0221.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0221.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0221.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218b88 [0221.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0221.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218558 | out: hHeap=0x1f0000) returned 1 [0221.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0221.573] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\hwrenclm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrenclm.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0221.574] GetLastError () returned 0x5 [0221.574] GetLastError () returned 0x5 [0221.574] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8ce781, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe38781cd, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe38781cd, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x10cb30, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrlatinlm.dat", cAlternateFileName="")) returned 1 [0221.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0221.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0221.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218558 [0221.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0221.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218b88 | out: hHeap=0x1f0000) returned 1 [0221.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0221.574] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\hwrlatinlm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrlatinlm.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0221.575] GetLastError () returned 0x5 [0221.575] GetLastError () returned 0x5 [0221.575] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85cc99ae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xb28b2edf, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb28b2edf, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x2662f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrusalm.dat", cAlternateFileName="")) returned 1 [0221.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0221.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220328 [0221.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219318 [0221.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220328 | out: hHeap=0x1f0000) returned 1 [0221.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218558 | out: hHeap=0x1f0000) returned 1 [0221.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0221.575] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusalm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusalm.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0221.575] GetLastError () returned 0x5 [0221.576] GetLastError () returned 0x5 [0221.576] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85cc99ae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xb281a570, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb281a570, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x339380, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrusash.dat", cAlternateFileName="")) returned 1 [0221.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0221.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fa40 [0221.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x2191b8 [0221.576] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fa40 | out: hHeap=0x1f0000) returned 1 [0221.576] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219318 | out: hHeap=0x1f0000) returned 1 [0221.576] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0221.576] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusash.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusash.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0221.577] GetLastError () returned 0x5 [0221.577] GetLastError () returned 0x5 [0221.577] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e38953f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e38953f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e38953f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x58400, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkDiv.dll", cAlternateFileName="")) returned 1 [0221.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0221.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2201c0 [0221.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218768 [0221.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2201c0 | out: hHeap=0x1f0000) returned 1 [0221.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2191b8 | out: hHeap=0x1f0000) returned 1 [0221.578] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0221.578] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\InkDiv.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inkdiv.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0221.579] GetLastError () returned 0x5 [0221.579] GetLastError () returned 0x5 [0221.579] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e38953f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e38953f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e38953f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1ecc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkObj.dll", cAlternateFileName="")) returned 1 [0221.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0221.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2203a0 [0221.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ce8 [0221.579] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2203a0 | out: hHeap=0x1f0000) returned 1 [0221.580] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218768 | out: hHeap=0x1f0000) returned 1 [0221.580] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0221.580] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\InkObj.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inkobj.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0221.581] GetLastError () returned 0x5 [0221.581] GetLastError () returned 0x5 [0221.581] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d14d081, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe467a929, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe467a929, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x59a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="InputPersonalization.exe", cAlternateFileName="")) returned 1 [0221.581] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234ae8 [0221.581] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0221.581] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x2188c8 [0221.581] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0221.581] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ce8 | out: hHeap=0x1f0000) returned 1 [0221.581] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234ae8 | out: hHeap=0x1f0000) returned 1 [0221.582] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\InputPersonalization.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inputpersonalization.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0221.582] GetLastError () returned 0x5 [0221.582] GetLastError () returned 0x5 [0221.582] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x972, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsar.xml", cAlternateFileName="")) returned 1 [0221.583] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0221.583] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0221.583] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218818 [0221.583] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0221.583] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2188c8 | out: hHeap=0x1f0000) returned 1 [0221.583] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0221.584] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipsar.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsar.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0221.585] GetLastError () returned 0x5 [0221.585] GetLastError () returned 0x5 [0221.586] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa20, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipscat.xml", cAlternateFileName="")) returned 1 [0221.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0221.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0221.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218b88 [0221.586] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0221.586] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218818 | out: hHeap=0x1f0000) returned 1 [0221.586] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0221.587] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipscat.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscat.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0221.587] GetLastError () returned 0x5 [0221.587] GetLastError () returned 0x5 [0221.587] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x99e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipschs.xml", cAlternateFileName="")) returned 1 [0221.587] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0221.588] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0221.588] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x2191b8 [0221.588] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0221.588] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218b88 | out: hHeap=0x1f0000) returned 1 [0221.588] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0221.589] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipschs.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipschs.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0221.589] GetLastError () returned 0x5 [0221.589] GetLastError () returned 0x5 [0221.589] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x984, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipscht.xml", cAlternateFileName="")) returned 1 [0221.589] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0221.589] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220580 [0221.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219268 [0221.590] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220580 | out: hHeap=0x1f0000) returned 1 [0221.590] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2191b8 | out: hHeap=0x1f0000) returned 1 [0221.590] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0221.591] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipscht.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscht.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0221.591] GetLastError () returned 0x5 [0221.591] GetLastError () returned 0x5 [0221.591] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipscsy.xml", cAlternateFileName="")) returned 1 [0221.591] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0221.591] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220508 [0221.591] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218558 [0221.591] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220508 | out: hHeap=0x1f0000) returned 1 [0221.592] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219268 | out: hHeap=0x1f0000) returned 1 [0221.592] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0221.592] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipscsy.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscsy.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0221.596] GetLastError () returned 0x5 [0221.596] GetLastError () returned 0x5 [0221.596] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsdan.xml", cAlternateFileName="")) returned 1 [0221.596] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238488 [0221.596] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0221.597] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218b88 [0221.597] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0221.597] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218558 | out: hHeap=0x1f0000) returned 1 [0221.597] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238488 | out: hHeap=0x1f0000) returned 1 [0221.598] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdan.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdan.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0221.598] GetLastError () returned 0x5 [0221.598] GetLastError () returned 0x5 [0221.598] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa38, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsdeu.xml", cAlternateFileName="")) returned 1 [0221.598] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0221.598] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fa40 [0221.598] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ce8 [0221.598] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fa40 | out: hHeap=0x1f0000) returned 1 [0221.599] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218b88 | out: hHeap=0x1f0000) returned 1 [0221.599] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0221.785] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdeu.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdeu.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0221.785] GetLastError () returned 0x5 [0221.785] GetLastError () returned 0x5 [0221.785] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsel.xml", cAlternateFileName="")) returned 1 [0221.785] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0221.785] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0221.785] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218558 [0221.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0221.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ce8 | out: hHeap=0x1f0000) returned 1 [0221.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0221.786] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipsel.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsel.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0221.786] GetLastError () returned 0x5 [0221.786] GetLastError () returned 0x5 [0221.786] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa12, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsen.xml", cAlternateFileName="")) returned 1 [0221.787] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0221.787] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd88 [0221.790] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218978 [0221.818] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd88 | out: hHeap=0x1f0000) returned 1 [0221.818] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218558 | out: hHeap=0x1f0000) returned 1 [0221.818] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0221.819] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipsen.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsen.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0221.819] GetLastError () returned 0x5 [0221.819] GetLastError () returned 0x5 [0221.819] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xbd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsesp.xml", cAlternateFileName="")) returned 1 [0221.819] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0221.819] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f770 [0221.819] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218b88 [0221.819] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f770 | out: hHeap=0x1f0000) returned 1 [0221.820] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218978 | out: hHeap=0x1f0000) returned 1 [0221.820] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0221.820] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipsesp.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsesp.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0221.820] GetLastError () returned 0x5 [0221.820] GetLastError () returned 0x5 [0221.820] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d14d081, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d14d081, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d14d081, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPSEventLogMsg.dll", cAlternateFileName="")) returned 1 [0221.821] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238d00 [0221.821] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220508 [0221.821] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218558 [0221.821] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220508 | out: hHeap=0x1f0000) returned 1 [0221.821] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218b88 | out: hHeap=0x1f0000) returned 1 [0221.821] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238d00 | out: hHeap=0x1f0000) returned 1 [0221.821] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\IPSEventLogMsg.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipseventlogmsg.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0221.822] GetLastError () returned 0x5 [0221.822] GetLastError () returned 0x5 [0221.822] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d100bae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d100bae, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa62, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsfin.xml", cAlternateFileName="")) returned 1 [0221.822] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0221.822] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0221.822] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ce8 [0221.822] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0221.822] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218558 | out: hHeap=0x1f0000) returned 1 [0221.822] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0221.823] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipsfin.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfin.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0221.823] GetLastError () returned 0x5 [0221.823] GetLastError () returned 0x5 [0221.823] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa44, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsfra.xml", cAlternateFileName="")) returned 1 [0221.823] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0221.823] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0221.823] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218b88 [0221.823] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0221.823] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ce8 | out: hHeap=0x1f0000) returned 1 [0221.824] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0221.824] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipsfra.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfra.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0221.824] GetLastError () returned 0x5 [0221.824] GetLastError () returned 0x5 [0221.824] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipshe.xml", cAlternateFileName="")) returned 1 [0221.824] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0221.824] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd88 [0221.825] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ef8 [0221.825] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd88 | out: hHeap=0x1f0000) returned 1 [0221.825] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218b88 | out: hHeap=0x1f0000) returned 1 [0221.825] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0221.825] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipshe.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshe.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0221.825] GetLastError () returned 0x5 [0221.826] GetLastError () returned 0x5 [0221.826] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipshi.xml", cAlternateFileName="")) returned 1 [0221.826] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0221.826] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fc98 [0221.826] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218818 [0221.826] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fc98 | out: hHeap=0x1f0000) returned 1 [0221.826] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ef8 | out: hHeap=0x1f0000) returned 1 [0221.826] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0221.827] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipshi.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshi.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0221.827] GetLastError () returned 0x5 [0221.827] GetLastError () returned 0x5 [0221.827] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c96711d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipshrv.xml", cAlternateFileName="")) returned 1 [0221.827] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0221.827] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f7e8 [0221.827] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x2188c8 [0221.827] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f7e8 | out: hHeap=0x1f0000) returned 1 [0221.827] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218818 | out: hHeap=0x1f0000) returned 1 [0221.828] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0221.828] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipshrv.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshrv.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0221.828] GetLastError () returned 0x5 [0221.828] GetLastError () returned 0x5 [0221.828] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d14d081, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d14d081, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d14d081, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsid.xml", cAlternateFileName="")) returned 1 [0221.829] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238488 [0221.829] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2203a0 [0221.829] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218a28 [0221.829] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2203a0 | out: hHeap=0x1f0000) returned 1 [0221.829] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2188c8 | out: hHeap=0x1f0000) returned 1 [0221.829] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238488 | out: hHeap=0x1f0000) returned 1 [0221.830] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipsid.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsid.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0221.830] GetLastError () returned 0x5 [0221.830] GetLastError () returned 0x5 [0221.830] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9de, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsita.xml", cAlternateFileName="")) returned 1 [0221.830] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238488 [0221.830] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2201c0 [0221.830] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x2191b8 [0221.830] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2201c0 | out: hHeap=0x1f0000) returned 1 [0221.830] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218a28 | out: hHeap=0x1f0000) returned 1 [0221.831] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238488 | out: hHeap=0x1f0000) returned 1 [0221.831] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipsita.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsita.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0221.831] GetLastError () returned 0x5 [0221.831] GetLastError () returned 0x5 [0221.831] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c96711d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c96711d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c96711d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9da, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsjpn.xml", cAlternateFileName="")) returned 1 [0221.832] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0221.832] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220508 [0221.832] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218608 [0221.832] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220508 | out: hHeap=0x1f0000) returned 1 [0221.832] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2191b8 | out: hHeap=0x1f0000) returned 1 [0221.832] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0221.832] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipsjpn.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsjpn.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0221.832] GetLastError () returned 0x5 [0221.833] GetLastError () returned 0x5 [0221.833] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d100bae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d100bae, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d100bae, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa08, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipskor.xml", cAlternateFileName="")) returned 1 [0221.833] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0221.833] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd88 [0221.833] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218978 [0221.833] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd88 | out: hHeap=0x1f0000) returned 1 [0221.833] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218608 | out: hHeap=0x1f0000) returned 1 [0221.833] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0221.833] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipskor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipskor.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0221.833] GetLastError () returned 0x5 [0221.833] GetLastError () returned 0x5 [0221.833] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe462e472, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe462e472, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xa400, dwReserved0=0x0, dwReserved1=0x0, cFileName="IpsMigrationPlugin.dll", cAlternateFileName="")) returned 1 [0221.834] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239208 [0221.834] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0221.834] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218768 [0221.834] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0221.834] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218978 | out: hHeap=0x1f0000) returned 1 [0221.834] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239208 | out: hHeap=0x1f0000) returned 1 [0221.835] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\IpsMigrationPlugin.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsmigrationplugin.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0221.835] GetLastError () returned 0x5 [0221.835] GetLastError () returned 0x5 [0221.835] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d100bae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d100bae, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d100bae, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa42, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsnld.xml", cAlternateFileName="")) returned 1 [0221.835] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0221.836] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fc98 [0221.836] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219478 [0221.836] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fc98 | out: hHeap=0x1f0000) returned 1 [0221.836] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218768 | out: hHeap=0x1f0000) returned 1 [0221.836] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0221.836] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnld.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnld.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0221.836] GetLastError () returned 0x5 [0221.836] GetLastError () returned 0x5 [0221.837] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d100bae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d100bae, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d100bae, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa14, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsnor.xml", cAlternateFileName="")) returned 1 [0221.837] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238488 [0221.837] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0221.837] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218768 [0221.837] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0221.837] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219478 | out: hHeap=0x1f0000) returned 1 [0221.837] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238488 | out: hHeap=0x1f0000) returned 1 [0221.837] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnor.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0221.838] GetLastError () returned 0x5 [0221.838] GetLastError () returned 0x5 [0221.838] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d100bae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d100bae, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d100bae, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa28, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsplk.xml", cAlternateFileName="")) returned 1 [0221.839] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0221.839] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd88 [0221.839] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ce8 [0221.839] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd88 | out: hHeap=0x1f0000) returned 1 [0221.839] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218768 | out: hHeap=0x1f0000) returned 1 [0221.839] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0221.839] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipsplk.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsplk.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0221.839] GetLastError () returned 0x5 [0221.839] GetLastError () returned 0x5 [0221.839] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe46546cb, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe46546cb, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x1ec00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IpsPlugin.dll", cAlternateFileName="")) returned 1 [0221.839] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0221.840] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fc98 [0221.840] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218558 [0221.840] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fc98 | out: hHeap=0x1f0000) returned 1 [0221.840] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ce8 | out: hHeap=0x1f0000) returned 1 [0221.840] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0221.841] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\IpsPlugin.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsplugin.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0221.841] GetLastError () returned 0x5 [0221.841] GetLastError () returned 0x5 [0221.841] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x8c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsptb.xml", cAlternateFileName="")) returned 1 [0221.841] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0221.841] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0221.841] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ce8 [0221.841] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0221.841] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218558 | out: hHeap=0x1f0000) returned 1 [0221.841] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0221.842] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptb.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0221.842] GetLastError () returned 0x5 [0221.842] GetLastError () returned 0x5 [0221.842] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x8c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsptg.xml", cAlternateFileName="")) returned 1 [0221.842] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0221.842] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0221.842] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218d98 [0221.842] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0221.842] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ce8 | out: hHeap=0x1f0000) returned 1 [0221.842] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0221.843] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptg.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptg.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0221.843] GetLastError () returned 0x5 [0221.843] GetLastError () returned 0x5 [0221.843] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c96711d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c96711d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c96711d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa54, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsrom.xml", cAlternateFileName="")) returned 1 [0221.843] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0221.843] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0221.843] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218a28 [0221.843] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0221.843] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218d98 | out: hHeap=0x1f0000) returned 1 [0221.843] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0221.843] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipsrom.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsrom.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0221.843] GetLastError () returned 0x5 [0221.843] GetLastError () returned 0x5 [0221.844] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsrus.xml", cAlternateFileName="")) returned 1 [0221.844] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0221.844] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0221.844] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218558 [0221.844] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0221.844] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218a28 | out: hHeap=0x1f0000) returned 1 [0221.844] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0221.844] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipsrus.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsrus.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0221.844] GetLastError () returned 0x5 [0221.844] GetLastError () returned 0x5 [0221.844] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa08, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipssrb.xml", cAlternateFileName="")) returned 1 [0221.844] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0221.844] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0221.844] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218a28 [0221.844] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0221.845] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218558 | out: hHeap=0x1f0000) returned 1 [0221.845] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0221.845] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssrb.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0221.845] GetLastError () returned 0x5 [0221.845] GetLastError () returned 0x5 [0221.845] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa24, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipssrl.xml", cAlternateFileName="")) returned 1 [0221.845] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0221.845] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0221.845] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218978 [0221.845] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0221.845] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218a28 | out: hHeap=0x1f0000) returned 1 [0221.845] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0221.846] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssrl.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0221.846] GetLastError () returned 0x5 [0221.846] GetLastError () returned 0x5 [0221.846] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipssve.xml", cAlternateFileName="")) returned 1 [0221.846] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0221.846] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220508 [0221.846] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218b88 [0221.846] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220508 | out: hHeap=0x1f0000) returned 1 [0221.846] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218978 | out: hHeap=0x1f0000) returned 1 [0221.846] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0221.846] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipssve.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssve.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0221.846] GetLastError () returned 0x5 [0221.846] GetLastError () returned 0x5 [0221.846] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xaa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipstr.xml", cAlternateFileName="")) returned 1 [0221.847] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0221.847] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd88 [0221.847] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ef8 [0221.847] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd88 | out: hHeap=0x1f0000) returned 1 [0221.847] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218b88 | out: hHeap=0x1f0000) returned 1 [0221.847] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0221.847] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ipstr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipstr.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0221.847] GetLastError () returned 0x5 [0221.847] GetLastError () returned 0x5 [0221.847] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0769b1e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-IT", cAlternateFileName="")) returned 1 [0221.847] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220328 [0221.847] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x2188c8 [0221.847] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220328 | out: hHeap=0x1f0000) returned 1 [0221.847] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ef8 | out: hHeap=0x1f0000) returned 1 [0221.847] lstrcmpW (lpString1="it-IT", lpString2=".") returned 1 [0221.848] lstrcmpW (lpString1="it-IT", lpString2="..") returned 1 [0221.848] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2a0) returned 0x20d888 [0221.848] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f10 [0221.848] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x231d78 | out: hHeap=0x1f0000) returned 1 [0221.848] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076a026, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-JP", cAlternateFileName="")) returned 1 [0221.848] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f7e8 [0221.848] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218818 [0221.848] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f7e8 | out: hHeap=0x1f0000) returned 1 [0221.848] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2188c8 | out: hHeap=0x1f0000) returned 1 [0221.848] lstrcmpW (lpString1="ja-JP", lpString2=".") returned 1 [0221.848] lstrcmpW (lpString1="ja-JP", lpString2="..") returned 1 [0221.848] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0221.848] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076a7a6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-KR", cAlternateFileName="")) returned 1 [0221.848] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0221.848] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219268 [0221.848] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0221.848] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218818 | out: hHeap=0x1f0000) returned 1 [0221.848] lstrcmpW (lpString1="ko-KR", lpString2=".") returned 1 [0221.848] lstrcmpW (lpString1="ko-KR", lpString2="..") returned 1 [0221.848] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0221.848] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076afd8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LanguageModel", cAlternateFileName="LANGUA~1")) returned 1 [0221.848] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0221.848] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220580 [0221.849] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219478 [0221.849] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220580 | out: hHeap=0x1f0000) returned 1 [0221.849] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219268 | out: hHeap=0x1f0000) returned 1 [0221.849] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0221.849] lstrcmpW (lpString1="LanguageModel", lpString2=".") returned 1 [0221.849] lstrcmpW (lpString1="LanguageModel", lpString2="..") returned 1 [0221.849] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0221.849] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076b52b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt-LT", cAlternateFileName="")) returned 1 [0221.849] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fc98 [0221.849] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218558 [0221.849] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fc98 | out: hHeap=0x1f0000) returned 1 [0221.849] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219478 | out: hHeap=0x1f0000) returned 1 [0222.007] lstrcmpW (lpString1="lt-LT", lpString2=".") returned 1 [0222.007] lstrcmpW (lpString1="lt-LT", lpString2="..") returned 1 [0222.007] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212360 [0222.007] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076ba6e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv-LV", cAlternateFileName="")) returned 1 [0222.007] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fab8 [0222.007] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218818 [0222.007] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fab8 | out: hHeap=0x1f0000) returned 1 [0222.007] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218558 | out: hHeap=0x1f0000) returned 1 [0222.007] lstrcmpW (lpString1="lv-LV", lpString2=".") returned 1 [0222.007] lstrcmpW (lpString1="lv-LV", lpString2="..") returned 1 [0222.007] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2123e8 [0222.007] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a4376e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1f30e81, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1f30e81, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x19f200, dwReserved0=0x0, dwReserved1=0x0, cFileName="micaut.dll", cAlternateFileName="")) returned 1 [0222.008] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0222.008] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220328 [0222.008] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219478 [0222.008] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220328 | out: hHeap=0x1f0000) returned 1 [0222.008] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218818 | out: hHeap=0x1f0000) returned 1 [0222.008] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0222.014] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\micaut.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\micaut.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0222.038] GetLastError () returned 0x5 [0222.038] GetLastError () returned 0x5 [0222.038] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463d4edd, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xc2004e62, ftLastAccessTime.dwHighDateTime=0x1d2fa0a, ftLastWriteTime.dwLowDateTime=0x463d4edd, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x7b000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Ink.dll", cAlternateFileName="")) returned 1 [0222.038] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c90 [0222.038] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0222.038] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218768 [0222.038] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0222.038] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219478 | out: hHeap=0x1f0000) returned 1 [0222.038] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c90 | out: hHeap=0x1f0000) returned 1 [0222.039] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\Microsoft.Ink.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\microsoft.ink.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0222.039] GetLastError () returned 0x5 [0222.039] GetLastError () returned 0x5 [0222.039] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a4376e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd51e08b5, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd51e08b5, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x178200, dwReserved0=0x0, dwReserved1=0x0, cFileName="mip.exe", cAlternateFileName="")) returned 1 [0222.039] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220238 [0222.039] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218fa8 [0222.039] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220238 | out: hHeap=0x1f0000) returned 1 [0222.039] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218768 | out: hHeap=0x1f0000) returned 1 [0222.040] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\mip.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mip.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0222.040] GetLastError () returned 0x5 [0222.040] GetLastError () returned 0x5 [0222.040] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a1d507, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xde1acd8d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xde1acd8d, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x612e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mraut.dll", cAlternateFileName="")) returned 1 [0222.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0222.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2203a0 [0222.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218d98 [0222.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2203a0 | out: hHeap=0x1f0000) returned 1 [0222.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218fa8 | out: hHeap=0x1f0000) returned 1 [0222.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0222.040] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\mraut.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mraut.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0222.041] GetLastError () returned 0x5 [0222.041] GetLastError () returned 0x5 [0222.041] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c3a52f7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3c3a52f7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3c3a52f7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc800, dwReserved0=0x0, dwReserved1=0x0, cFileName="mshwgst.dll", cAlternateFileName="")) returned 1 [0222.041] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0222.041] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220508 [0222.041] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219318 [0222.041] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220508 | out: hHeap=0x1f0000) returned 1 [0222.041] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218d98 | out: hHeap=0x1f0000) returned 1 [0222.041] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0222.041] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\mshwgst.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mshwgst.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0222.041] GetLastError () returned 0x5 [0222.041] GetLastError () returned 0x5 [0222.041] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8ce781, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe3805ad4, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe3805ad4, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x106a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mshwLatin.dll", cAlternateFileName="")) returned 1 [0222.042] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0222.042] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0222.042] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218a28 [0222.042] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0222.042] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219318 | out: hHeap=0x1f0000) returned 1 [0222.042] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0222.042] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\mshwLatin.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mshwlatin.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0222.042] GetLastError () returned 0x5 [0222.042] GetLastError () returned 0x5 [0222.042] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076bff5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-NO", cAlternateFileName="")) returned 1 [0222.043] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0222.043] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219318 [0222.043] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0222.043] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218a28 | out: hHeap=0x1f0000) returned 1 [0222.043] lstrcmpW (lpString1="nb-NO", lpString2=".") returned 1 [0222.043] lstrcmpW (lpString1="nb-NO", lpString2="..") returned 1 [0222.043] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211ae0 [0222.043] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076c75d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-NL", cAlternateFileName="")) returned 1 [0222.043] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fa40 [0222.043] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218b88 [0222.043] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fa40 | out: hHeap=0x1f0000) returned 1 [0222.043] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219318 | out: hHeap=0x1f0000) returned 1 [0222.043] lstrcmpW (lpString1="nl-NL", lpString2=".") returned 1 [0222.043] lstrcmpW (lpString1="nl-NL", lpString2="..") returned 1 [0222.043] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212938 [0222.044] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d57c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-PL", cAlternateFileName="")) returned 1 [0222.044] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220508 [0222.044] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x2188c8 [0222.044] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220508 | out: hHeap=0x1f0000) returned 1 [0222.044] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218b88 | out: hHeap=0x1f0000) returned 1 [0222.044] lstrcmpW (lpString1="pl-PL", lpString2=".") returned 1 [0222.044] lstrcmpW (lpString1="pl-PL", lpString2="..") returned 1 [0222.044] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212250 [0222.044] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d988, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-BR", cAlternateFileName="")) returned 1 [0222.044] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd88 [0222.044] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219268 [0222.044] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd88 | out: hHeap=0x1f0000) returned 1 [0222.044] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2188c8 | out: hHeap=0x1f0000) returned 1 [0222.044] lstrcmpW (lpString1="pt-BR", lpString2=".") returned 1 [0222.044] lstrcmpW (lpString1="pt-BR", lpString2="..") returned 1 [0222.044] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3f0) returned 0x24f5d8 [0222.044] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2119d0 [0222.044] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20d888 | out: hHeap=0x1f0000) returned 1 [0222.045] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ddb8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-PT", cAlternateFileName="")) returned 1 [0222.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0222.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218608 [0222.045] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0222.045] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219268 | out: hHeap=0x1f0000) returned 1 [0222.045] lstrcmpW (lpString1="pt-PT", lpString2=".") returned 1 [0222.045] lstrcmpW (lpString1="pt-PT", lpString2="..") returned 1 [0222.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2120b8 [0222.045] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e0f5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-RO", cAlternateFileName="")) returned 1 [0222.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0222.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ce8 [0222.045] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0222.045] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218608 | out: hHeap=0x1f0000) returned 1 [0222.045] lstrcmpW (lpString1="ro-RO", lpString2=".") returned 1 [0222.045] lstrcmpW (lpString1="ro-RO", lpString2="..") returned 1 [0222.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212140 [0222.045] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e38953f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e38953f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e38953f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2b600, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtscom.dll", cAlternateFileName="")) returned 1 [0222.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0222.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0222.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219268 [0222.045] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0222.045] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ce8 | out: hHeap=0x1f0000) returned 1 [0222.046] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0222.046] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\rtscom.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\rtscom.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0222.046] GetLastError () returned 0x5 [0222.046] GetLastError () returned 0x5 [0222.046] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e4d1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-RU", cAlternateFileName="")) returned 1 [0222.046] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0222.046] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218558 [0222.046] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0222.046] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219268 | out: hHeap=0x1f0000) returned 1 [0222.046] lstrcmpW (lpString1="ru-RU", lpString2=".") returned 1 [0222.046] lstrcmpW (lpString1="ru-RU", lpString2="..") returned 1 [0222.047] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2122d8 [0222.047] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe46546cb, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe46546cb, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xb3200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShapeCollector.exe", cAlternateFileName="")) returned 1 [0222.047] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238da8 [0222.047] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f770 [0222.047] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218768 [0222.047] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f770 | out: hHeap=0x1f0000) returned 1 [0222.047] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218558 | out: hHeap=0x1f0000) returned 1 [0222.047] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238da8 | out: hHeap=0x1f0000) returned 1 [0222.047] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ShapeCollector.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\shapecollector.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0222.047] GetLastError () returned 0x5 [0222.047] GetLastError () returned 0x5 [0222.047] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e8a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-SK", cAlternateFileName="")) returned 1 [0222.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0222.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ce8 [0222.048] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0222.048] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218768 | out: hHeap=0x1f0000) returned 1 [0222.048] lstrcmpW (lpString1="sk-SK", lpString2=".") returned 1 [0222.048] lstrcmpW (lpString1="sk-SK", lpString2="..") returned 1 [0222.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212470 [0222.048] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ec25, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-SI", cAlternateFileName="")) returned 1 [0222.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0222.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218818 [0222.048] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0222.049] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ce8 | out: hHeap=0x1f0000) returned 1 [0222.049] lstrcmpW (lpString1="sl-SI", lpString2=".") returned 1 [0222.049] lstrcmpW (lpString1="sl-SI", lpString2="..") returned 1 [0222.049] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211b68 [0222.049] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c7ae2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-Latn-RS", cAlternateFileName="SR-LAT~1")) returned 1 [0222.049] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0222.049] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0222.049] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ef8 [0222.049] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0222.049] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218818 | out: hHeap=0x1f0000) returned 1 [0222.049] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0222.049] lstrcmpW (lpString1="sr-Latn-RS", lpString2=".") returned 1 [0222.049] lstrcmpW (lpString1="sr-Latn-RS", lpString2="..") returned 1 [0222.049] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2127a0 [0222.049] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c820e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-SE", cAlternateFileName="")) returned 1 [0222.049] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220580 [0222.049] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218fa8 [0222.049] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220580 | out: hHeap=0x1f0000) returned 1 [0222.050] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ef8 | out: hHeap=0x1f0000) returned 1 [0222.050] lstrcmpW (lpString1="sv-SE", lpString2=".") returned 1 [0222.050] lstrcmpW (lpString1="sv-SE", lpString2="..") returned 1 [0222.050] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212030 [0222.050] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d14d081, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe467a929, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe467a929, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xa400, dwReserved0=0x0, dwReserved1=0x0, cFileName="TabIpsps.dll", cAlternateFileName="")) returned 1 [0222.050] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0222.050] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0222.050] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218978 [0222.050] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0222.050] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218fa8 | out: hHeap=0x1f0000) returned 1 [0222.050] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0222.050] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\TabIpsps.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabipsps.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0222.050] GetLastError () returned 0x5 [0222.051] GetLastError () returned 0x5 [0222.051] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463d4edd, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x779da8e5, ftLastAccessTime.dwHighDateTime=0x1d2fa0a, ftLastWriteTime.dwLowDateTime=0x463d4edd, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x3e9600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tabskb.dll", cAlternateFileName="")) returned 1 [0222.051] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0222.051] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0222.051] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x2188c8 [0222.051] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0222.051] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218978 | out: hHeap=0x1f0000) returned 1 [0222.051] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0222.051] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\tabskb.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabskb.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0222.051] GetLastError () returned 0x5 [0222.051] GetLastError () returned 0x5 [0222.052] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1a8750a, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1a8750a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x5f780, dwReserved0=0x0, dwReserved1=0x0, cFileName="TabTip.exe", cAlternateFileName="")) returned 1 [0222.052] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0222.052] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0222.052] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219318 [0222.052] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0222.052] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2188c8 | out: hHeap=0x1f0000) returned 1 [0222.052] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0222.052] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\TabTip.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabtip.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0222.053] GetLastError () returned 0x5 [0222.053] GetLastError () returned 0x5 [0222.053] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8602, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th-TH", cAlternateFileName="")) returned 1 [0222.053] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0222.053] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219478 [0222.053] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0222.053] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219318 | out: hHeap=0x1f0000) returned 1 [0222.053] lstrcmpW (lpString1="th-TH", lpString2=".") returned 1 [0222.053] lstrcmpW (lpString1="th-TH", lpString2="..") returned 1 [0222.053] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2124f8 [0222.053] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1aad768, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1aad768, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x109400, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipRes.dll", cAlternateFileName="")) returned 1 [0222.053] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0222.053] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0222.053] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ef8 [0222.053] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0222.053] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219478 | out: hHeap=0x1f0000) returned 1 [0222.054] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0222.054] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\TipRes.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipres.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0222.054] GetLastError () returned 0x5 [0222.054] GetLastError () returned 0x5 [0222.054] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x5600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll", cAlternateFileName="")) returned 1 [0222.054] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0222.054] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0222.054] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x2191b8 [0222.054] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0222.054] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ef8 | out: hHeap=0x1f0000) returned 1 [0222.054] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0222.055] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\tipresx.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipresx.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0222.055] GetLastError () returned 0x5 [0222.055] GetLastError () returned 0x5 [0222.055] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79680792, ftCreationTime.dwHighDateTime=0x1d32794, ftLastAccessTime.dwLowDateTime=0x79680792, ftLastAccessTime.dwHighDateTime=0x1d32794, ftLastWriteTime.dwLowDateTime=0x79680792, ftLastWriteTime.dwHighDateTime=0x1d32794, nFileSizeHigh=0x0, nFileSizeLow=0x101200, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipskins.dll", cAlternateFileName="")) returned 1 [0222.055] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0222.055] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220328 [0222.055] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ce8 [0222.055] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220328 | out: hHeap=0x1f0000) returned 1 [0222.055] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2191b8 | out: hHeap=0x1f0000) returned 1 [0222.055] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0222.055] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\tipskins.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipskins.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0222.056] GetLastError () returned 0x5 [0222.056] GetLastError () returned 0x5 [0222.056] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7965a52d, ftCreationTime.dwHighDateTime=0x1d32794, ftLastAccessTime.dwLowDateTime=0x7965a52d, ftLastAccessTime.dwHighDateTime=0x1d32794, ftLastWriteTime.dwLowDateTime=0x7965a52d, ftLastWriteTime.dwHighDateTime=0x1d32794, nFileSizeHigh=0x0, nFileSizeLow=0x9e1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tiptsf.dll", cAlternateFileName="")) returned 1 [0222.056] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0222.056] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0222.056] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ef8 [0222.056] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0222.056] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ce8 | out: hHeap=0x1f0000) returned 1 [0222.056] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0222.056] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\tiptsf.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tiptsf.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0222.056] GetLastError () returned 0x5 [0222.056] GetLastError () returned 0x5 [0222.056] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463d4edd, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x6ebfe576, ftLastAccessTime.dwHighDateTime=0x1d2fa0a, ftLastWriteTime.dwLowDateTime=0x463d4edd, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x17a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tpcps.dll", cAlternateFileName="")) returned 1 [0222.057] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0222.057] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0222.057] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218fa8 [0222.057] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0222.057] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ef8 | out: hHeap=0x1f0000) returned 1 [0222.057] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0222.057] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\tpcps.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tpcps.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0222.057] GetLastError () returned 0x5 [0222.057] GetLastError () returned 0x5 [0222.057] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c896f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-TR", cAlternateFileName="")) returned 1 [0222.057] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0222.057] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x2188c8 [0222.058] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0222.058] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218fa8 | out: hHeap=0x1f0000) returned 1 [0222.058] lstrcmpW (lpString1="tr-TR", lpString2=".") returned 1 [0222.058] lstrcmpW (lpString1="tr-TR", lpString2="..") returned 1 [0222.058] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211a58 [0222.058] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8ed8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk-UA", cAlternateFileName="")) returned 1 [0222.058] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2203a0 [0222.058] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218fa8 [0222.058] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2203a0 | out: hHeap=0x1f0000) returned 1 [0222.058] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2188c8 | out: hHeap=0x1f0000) returned 1 [0222.058] lstrcmpW (lpString1="uk-UA", lpString2=".") returned 1 [0222.058] lstrcmpW (lpString1="uk-UA", lpString2="..") returned 1 [0222.058] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211c78 [0222.058] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c93df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CN", cAlternateFileName="")) returned 1 [0222.058] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0222.058] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ef8 [0222.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0222.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218fa8 | out: hHeap=0x1f0000) returned 1 [0222.059] lstrcmpW (lpString1="zh-CN", lpString2=".") returned 1 [0222.059] lstrcmpW (lpString1="zh-CN", lpString2="..") returned 1 [0222.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212580 [0222.059] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c97fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 1 [0222.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0222.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ce8 [0222.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0222.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ef8 | out: hHeap=0x1f0000) returned 1 [0222.059] lstrcmpW (lpString1="zh-TW", lpString2=".") returned 1 [0222.059] lstrcmpW (lpString1="zh-TW", lpString2="..") returned 1 [0222.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212608 [0222.060] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c97fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 0 [0222.060] FindClose (in: hFindFile=0x24ec40 | out: hFindFile=0x24ec40) returned 1 [0222.060] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234740 [0222.060] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0222.060] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262e48 [0222.060] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0222.060] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\*", lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05532b6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24ec00 [0222.061] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0222.061] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0222.061] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0222.061] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05532b6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0222.061] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212828 [0222.061] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0222.061] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0222.061] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0222.061] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0222.061] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0222.061] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0222.062] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0222.062] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0222.062] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212828 | out: hHeap=0x1f0000) returned 1 [0222.062] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0222.062] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ar-sa\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0222.062] GetLastError () returned 0x5 [0222.063] GetLastError () returned 0x5 [0222.063] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0222.063] FindClose (in: hFindFile=0x24ec00 | out: hFindFile=0x24ec00) returned 1 [0222.063] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0222.063] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262e48 | out: hHeap=0x1f0000) returned 1 [0222.063] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0222.063] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234740 | out: hHeap=0x1f0000) returned 1 [0222.063] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234818 [0222.063] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0222.063] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x263178 [0222.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d00 [0222.064] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\*", lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0553f37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24ec00 [0222.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211fa8 [0222.064] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d00 | out: hHeap=0x1f0000) returned 1 [0222.064] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0222.064] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0553f37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0222.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211bf0 [0222.064] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211fa8 | out: hHeap=0x1f0000) returned 1 [0222.065] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0222.065] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0222.065] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0222.065] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0222.065] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0222.065] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0222.065] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0222.065] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211bf0 | out: hHeap=0x1f0000) returned 1 [0222.065] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0222.066] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\bg-bg\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0222.066] GetLastError () returned 0x5 [0222.066] GetLastError () returned 0x5 [0222.066] FindNextFileW (in: hFindFile=0x24ec00, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0222.066] FindClose (in: hFindFile=0x24ec00 | out: hFindFile=0x24ec00) returned 1 [0222.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0222.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263178 | out: hHeap=0x1f0000) returned 1 [0222.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0222.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234818 | out: hHeap=0x1f0000) returned 1 [0222.067] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234aa0 [0222.067] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0222.067] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262e48 [0222.067] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211f20 [0222.067] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\*", lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0554b83, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24e900 [0222.068] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212828 [0222.068] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211f20 | out: hHeap=0x1f0000) returned 1 [0222.379] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0222.379] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0554b83, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0222.379] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d00 [0222.379] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212828 | out: hHeap=0x1f0000) returned 1 [0222.379] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0222.379] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0222.379] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e316e09, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e316e09, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e316e09, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0222.379] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0222.379] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0222.379] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0222.379] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0222.380] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d00 | out: hHeap=0x1f0000) returned 1 [0222.380] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0222.380] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\cs-cz\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0222.380] GetLastError () returned 0x5 [0222.380] GetLastError () returned 0x5 [0222.381] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e316e09, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e316e09, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e316e09, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0222.381] FindClose (in: hFindFile=0x24e900 | out: hFindFile=0x24e900) returned 1 [0222.381] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0222.382] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262e48 | out: hHeap=0x1f0000) returned 1 [0222.382] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0222.382] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234aa0 | out: hHeap=0x1f0000) returned 1 [0222.382] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234aa0 [0222.382] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0222.382] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e1c8 [0222.382] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d00 [0222.382] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\*", lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05550d5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24e900 [0222.382] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0222.383] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d00 | out: hHeap=0x1f0000) returned 1 [0222.383] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0222.383] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05550d5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0222.383] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212828 [0222.383] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0222.383] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0222.383] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0222.383] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2f0ba2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2f0ba2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2f0ba2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0222.383] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0222.383] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d00 [0222.383] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0222.383] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d00 | out: hHeap=0x1f0000) returned 1 [0222.384] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212828 | out: hHeap=0x1f0000) returned 1 [0222.384] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0222.384] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\da-dk\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0222.384] GetLastError () returned 0x5 [0222.384] GetLastError () returned 0x5 [0222.385] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2f0ba2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2f0ba2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2f0ba2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0222.385] FindClose (in: hFindFile=0x24e900 | out: hFindFile=0x24e900) returned 1 [0222.385] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0222.385] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e1c8 | out: hHeap=0x1f0000) returned 1 [0222.385] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0222.385] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234aa0 | out: hHeap=0x1f0000) returned 1 [0222.385] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234590 [0222.386] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0222.386] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e1c8 [0222.386] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2128b0 [0222.386] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\de-DE\\*", lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0555b2c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24e900 [0222.386] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0222.386] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2128b0 | out: hHeap=0x1f0000) returned 1 [0222.386] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0222.386] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0555b2c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0222.387] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212718 [0222.387] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0222.387] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0222.387] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0222.387] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2f0ba2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2f0ba2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2f0ba2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0222.387] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0222.387] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211e98 [0222.387] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0222.387] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e98 | out: hHeap=0x1f0000) returned 1 [0222.387] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212718 | out: hHeap=0x1f0000) returned 1 [0222.387] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0222.388] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\de-DE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\de-de\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0222.388] GetLastError () returned 0x5 [0222.388] GetLastError () returned 0x5 [0222.388] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2f0ba2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2f0ba2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2f0ba2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0222.388] FindClose (in: hFindFile=0x24e900 | out: hFindFile=0x24e900) returned 1 [0222.389] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0222.389] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e1c8 | out: hHeap=0x1f0000) returned 1 [0222.389] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0222.389] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234590 | out: hHeap=0x1f0000) returned 1 [0222.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234740 [0222.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0222.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22ee88 [0222.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0222.389] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\el-GR\\*", lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa055662c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24eac0 [0222.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212828 [0222.389] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0222.389] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0222.389] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa055662c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0222.390] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211bf0 [0222.390] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212828 | out: hHeap=0x1f0000) returned 1 [0222.390] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0222.390] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0222.390] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0222.390] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0222.390] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0222.390] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0222.390] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0222.390] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211bf0 | out: hHeap=0x1f0000) returned 1 [0222.390] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0222.390] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\el-GR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\el-gr\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0222.390] GetLastError () returned 0x5 [0222.391] GetLastError () returned 0x5 [0222.391] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0222.391] FindClose (in: hFindFile=0x24eac0 | out: hFindFile=0x24eac0) returned 1 [0222.391] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0222.391] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ee88 | out: hHeap=0x1f0000) returned 1 [0222.391] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0222.391] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234740 | out: hHeap=0x1f0000) returned 1 [0222.391] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234590 [0222.391] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0222.391] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d9d0 [0222.391] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211bf0 [0222.391] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-GB\\*", lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0557085, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24e900 [0222.392] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0222.392] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211bf0 | out: hHeap=0x1f0000) returned 1 [0222.392] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0222.392] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0557085, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0222.392] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211bf0 [0222.392] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0222.392] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0222.392] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0222.392] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0222.392] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0222.392] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211f20 [0222.392] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0222.392] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211f20 | out: hHeap=0x1f0000) returned 1 [0222.392] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211bf0 | out: hHeap=0x1f0000) returned 1 [0222.392] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0222.393] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-GB\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-gb\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0222.393] GetLastError () returned 0x5 [0222.393] GetLastError () returned 0x5 [0222.393] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0222.393] FindClose (in: hFindFile=0x24e900 | out: hFindFile=0x24e900) returned 1 [0222.394] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0222.394] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d9d0 | out: hHeap=0x1f0000) returned 1 [0222.394] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0222.394] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234590 | out: hHeap=0x1f0000) returned 1 [0222.394] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234740 [0222.394] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0222.394] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e360 [0222.394] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0222.394] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\*", lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05dd09d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe8231541, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24e680 [0222.395] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0222.395] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0222.396] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0222.396] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05dd09d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe8231541, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0222.396] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211bf0 [0222.396] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0222.396] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0222.396] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0222.396] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1a3b058, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1a3b058, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x1b2d8, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="boxed-correct.avi", cAlternateFileName="")) returned 1 [0222.396] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238fd8 [0222.396] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211e98 [0222.397] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0222.397] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e98 | out: hHeap=0x1f0000) returned 1 [0222.397] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211bf0 | out: hHeap=0x1f0000) returned 1 [0222.397] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238fd8 | out: hHeap=0x1f0000) returned 1 [0222.398] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-correct.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0222.398] GetLastError () returned 0x5 [0222.398] GetLastError () returned 0x5 [0222.398] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1a612b1, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1a612b1, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xbf28, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="boxed-delete.avi", cAlternateFileName="")) returned 1 [0222.398] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238ef8 [0222.398] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211bf0 [0222.399] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0222.399] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211bf0 | out: hHeap=0x1f0000) returned 1 [0222.399] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0222.399] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ef8 | out: hHeap=0x1f0000) returned 1 [0222.399] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-delete.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0222.400] GetLastError () returned 0x5 [0222.400] GetLastError () returned 0x5 [0222.400] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a1d507, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1aad768, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1aad768, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xb61e, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="boxed-join.avi", cAlternateFileName="")) returned 1 [0222.400] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0222.400] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d88 [0222.400] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0222.400] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d88 | out: hHeap=0x1f0000) returned 1 [0222.402] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0222.402] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0222.403] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-join.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0222.403] GetLastError () returned 0x5 [0222.403] GetLastError () returned 0x5 [0222.404] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1a8750a, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1a8750a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x148de, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="boxed-split.avi", cAlternateFileName="")) returned 1 [0222.404] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0222.404] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211e10 [0222.404] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0222.404] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e10 | out: hHeap=0x1f0000) returned 1 [0222.404] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0222.404] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0222.405] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-split.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0222.405] GetLastError () returned 0x5 [0222.405] GetLastError () returned 0x5 [0222.405] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1a8750a, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1a8750a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x2bfcc, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="correct.avi", cAlternateFileName="")) returned 1 [0222.405] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0222.405] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0222.405] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0222.405] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0222.405] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0222.405] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0222.406] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\correct.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0222.406] GetLastError () returned 0x5 [0222.406] GetLastError () returned 0x5 [0222.406] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1a612b1, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1a612b1, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x32e18, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="delete.avi", cAlternateFileName="")) returned 1 [0222.406] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0222.407] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0222.407] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0222.407] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0222.407] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0222.407] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0222.407] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\delete.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0222.408] GetLastError () returned 0x5 [0222.408] GetLastError () returned 0x5 [0222.408] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3da3ec5f, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7bf3d600, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="FlickLearningWizard.exe.mui", cAlternateFileName="")) returned 1 [0222.408] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234788 [0222.408] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0222.408] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0222.408] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0222.408] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0222.408] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234788 | out: hHeap=0x1f0000) returned 1 [0222.409] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\FlickLearningWizard.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\flicklearningwizard.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0222.409] GetLastError () returned 0x5 [0222.409] GetLastError () returned 0x5 [0222.409] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dab1374, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7e563000, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="InkObj.dll.mui", cAlternateFileName="")) returned 1 [0222.409] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0222.409] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0222.409] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0222.409] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0222.410] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0222.410] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0222.410] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InkObj.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inkobj.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0222.410] GetLastError () returned 0x5 [0222.410] GetLastError () returned 0x5 [0222.410] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d9f27a8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7f875d00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="InputPersonalization.exe.mui", cAlternateFileName="")) returned 1 [0222.411] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234aa0 [0222.411] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2129c0 [0222.411] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0222.411] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2129c0 | out: hHeap=0x1f0000) returned 1 [0222.411] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0222.411] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234aa0 | out: hHeap=0x1f0000) returned 1 [0222.411] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InputPersonalization.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inputpersonalization.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0222.411] GetLastError () returned 0x5 [0222.411] GetLastError () returned 0x5 [0222.412] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d9f27a8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7f875d00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x5a00, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="IPSEventLogMsg.dll.mui", cAlternateFileName="")) returned 1 [0222.412] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238e18 [0222.412] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2129c0 [0222.413] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0222.413] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2129c0 | out: hHeap=0x1f0000) returned 1 [0222.413] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0222.413] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238e18 | out: hHeap=0x1f0000) returned 1 [0222.413] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IPSEventLogMsg.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ipseventlogmsg.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0222.413] GetLastError () returned 0x5 [0222.413] GetLastError () returned 0x5 [0222.413] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3da18a06, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x80b88a00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="IpsMigrationPlugin.dll.mui", cAlternateFileName="")) returned 1 [0222.413] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234788 [0222.414] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0222.414] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0222.414] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0222.414] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0222.414] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234788 | out: hHeap=0x1f0000) returned 1 [0222.414] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IpsMigrationPlugin.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ipsmigrationplugin.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0222.414] GetLastError () returned 0x5 [0222.414] GetLastError () returned 0x5 [0222.415] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a1d507, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1af9c24, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1af9c24, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x30d3a, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="join.avi", cAlternateFileName="")) returned 1 [0222.415] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0222.415] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0222.415] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0222.415] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0222.415] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0222.415] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0222.416] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\join.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0222.416] GetLastError () returned 0x5 [0222.416] GetLastError () returned 0x5 [0222.416] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dad75cd, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7e563000, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="micaut.dll.mui", cAlternateFileName="")) returned 1 [0222.416] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0222.778] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0222.778] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0222.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0222.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0222.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0222.778] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\micaut.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\micaut.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0222.779] GetLastError () returned 0x5 [0222.779] GetLastError () returned 0x5 [0222.779] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3da8b116, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7d250300, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="mip.exe.mui", cAlternateFileName="")) returned 1 [0222.779] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0222.779] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212828 [0222.779] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0222.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212828 | out: hHeap=0x1f0000) returned 1 [0222.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0222.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0222.780] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\mip.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\mip.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0222.780] GetLastError () returned 0x5 [0222.780] GetLastError () returned 0x5 [0222.780] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3da18a06, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x80b88a00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="mshwLatin.dll.mui", cAlternateFileName="")) returned 1 [0222.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238fd8 [0222.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211bf0 [0222.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0222.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211bf0 | out: hHeap=0x1f0000) returned 1 [0222.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0222.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238fd8 | out: hHeap=0x1f0000) returned 1 [0222.781] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\mshwLatin.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\mshwlatin.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0222.781] GetLastError () returned 0x5 [0222.781] GetLastError () returned 0x5 [0222.781] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dab1374, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7e563000, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="rtscom.dll.mui", cAlternateFileName="")) returned 1 [0222.781] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0222.781] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211bf0 [0222.781] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0222.781] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211bf0 | out: hHeap=0x1f0000) returned 1 [0222.781] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0222.781] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0222.782] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\rtscom.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\rtscom.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0222.782] GetLastError () returned 0x5 [0222.782] GetLastError () returned 0x5 [0222.782] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3da18a06, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7f875d00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xac00, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="ShapeCollector.exe.mui", cAlternateFileName="")) returned 1 [0222.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239278 [0222.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211bf0 [0222.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0222.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211bf0 | out: hHeap=0x1f0000) returned 1 [0222.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0222.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239278 | out: hHeap=0x1f0000) returned 1 [0222.783] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\ShapeCollector.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\shapecollector.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0222.783] GetLastError () returned 0x5 [0222.783] GetLastError () returned 0x5 [0222.783] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1a8750a, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1a8750a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x2c6cc, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="split.avi", cAlternateFileName="")) returned 1 [0222.783] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0222.783] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211f20 [0222.783] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0222.783] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211f20 | out: hHeap=0x1f0000) returned 1 [0222.783] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0222.783] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0222.783] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\split.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0222.784] GetLastError () returned 0x5 [0222.784] GetLastError () returned 0x5 [0222.784] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dad75cd, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7e563000, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="tabskb.dll.mui", cAlternateFileName="")) returned 1 [0222.784] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0222.784] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0222.784] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0222.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0222.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0222.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0222.784] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\tabskb.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tabskb.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0222.785] GetLastError () returned 0x5 [0222.785] GetLastError () returned 0x5 [0222.785] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3da8b116, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7d250300, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="TabTip.exe.mui", cAlternateFileName="")) returned 1 [0222.785] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0222.785] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0222.785] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0222.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0222.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0222.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0222.785] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TabTip.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tabtip.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0222.785] GetLastError () returned 0x5 [0222.785] GetLastError () returned 0x5 [0222.785] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ffe6194, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7c896e00, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0x6200, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="TipRes.dll.mui", cAlternateFileName="")) returned 1 [0222.785] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0222.785] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0222.786] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0222.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0222.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0222.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0222.786] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TipRes.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipres.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0222.786] GetLastError () returned 0x5 [0222.786] GetLastError () returned 0x5 [0222.786] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0222.786] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0222.786] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212718 [0222.786] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0222.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212718 | out: hHeap=0x1f0000) returned 1 [0222.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0222.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0222.786] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0222.787] GetLastError () returned 0x5 [0222.787] GetLastError () returned 0x5 [0222.787] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dad75cd, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7d250300, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="TipTsf.dll.mui", cAlternateFileName="")) returned 1 [0222.787] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0222.787] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0222.787] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0222.787] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0222.787] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0222.787] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0222.787] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TipTsf.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tiptsf.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0222.787] GetLastError () returned 0x5 [0222.787] GetLastError () returned 0x5 [0222.787] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dad75cd, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7d250300, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="TipTsf.dll.mui", cAlternateFileName="")) returned 0 [0222.788] FindClose (in: hFindFile=0x24e680 | out: hFindFile=0x24e680) returned 1 [0222.789] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0222.789] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e360 | out: hHeap=0x1f0000) returned 1 [0222.789] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0222.789] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234740 | out: hHeap=0x1f0000) returned 1 [0222.789] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234740 [0222.789] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0222.789] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e1c8 [0222.789] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2129c0 [0222.789] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\es-ES\\*", lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05ddf5c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24e980 [0222.790] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0222.790] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2129c0 | out: hHeap=0x1f0000) returned 1 [0222.790] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0222.790] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05ddf5c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0222.790] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211bf0 [0222.790] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0222.790] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0222.790] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0222.790] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0222.790] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0222.790] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d00 [0222.790] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0222.790] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d00 | out: hHeap=0x1f0000) returned 1 [0222.790] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211bf0 | out: hHeap=0x1f0000) returned 1 [0222.790] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0222.791] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\es-ES\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-es\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0222.791] GetLastError () returned 0x5 [0222.791] GetLastError () returned 0x5 [0222.791] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0222.791] FindClose (in: hFindFile=0x24e980 | out: hFindFile=0x24e980) returned 1 [0222.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0222.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e1c8 | out: hHeap=0x1f0000) returned 1 [0222.792] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0222.792] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234740 | out: hHeap=0x1f0000) returned 1 [0222.792] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234740 [0222.792] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0222.792] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f020 [0222.792] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0222.792] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\es-MX\\*", lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05dea14, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24e980 [0222.792] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211e10 [0222.792] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0222.792] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0222.792] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05dea14, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0222.793] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0222.793] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e10 | out: hHeap=0x1f0000) returned 1 [0222.793] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0222.793] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0222.793] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2a46df, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2a46df, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2a46df, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0222.793] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0222.793] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d00 [0222.793] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0222.793] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d00 | out: hHeap=0x1f0000) returned 1 [0222.793] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0222.793] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0222.793] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\es-MX\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-mx\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0222.794] GetLastError () returned 0x5 [0222.794] GetLastError () returned 0x5 [0222.794] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2a46df, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2a46df, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2a46df, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0222.794] FindClose (in: hFindFile=0x24e980 | out: hFindFile=0x24e980) returned 1 [0222.794] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0222.794] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f020 | out: hHeap=0x1f0000) returned 1 [0222.794] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0222.794] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234740 | out: hHeap=0x1f0000) returned 1 [0222.794] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234aa0 [0222.794] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0222.794] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d9d0 [0222.795] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211bf0 [0222.795] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\et-EE\\*", lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05df011, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24e900 [0222.795] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d00 [0222.795] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211bf0 | out: hHeap=0x1f0000) returned 1 [0222.795] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0222.795] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05df011, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0222.795] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211e98 [0222.795] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d00 | out: hHeap=0x1f0000) returned 1 [0222.795] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0222.795] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0222.795] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0222.795] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0222.795] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211bf0 [0222.795] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0222.796] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211bf0 | out: hHeap=0x1f0000) returned 1 [0222.796] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e98 | out: hHeap=0x1f0000) returned 1 [0222.796] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0222.796] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\et-EE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\et-ee\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0222.796] GetLastError () returned 0x5 [0222.796] GetLastError () returned 0x5 [0222.796] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0222.796] FindClose (in: hFindFile=0x24e900 | out: hFindFile=0x24e900) returned 1 [0222.797] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0222.797] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d9d0 | out: hHeap=0x1f0000) returned 1 [0222.797] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0222.797] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234aa0 | out: hHeap=0x1f0000) returned 1 [0222.797] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234aa0 [0222.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0222.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f020 [0222.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0222.798] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fi-FI\\*", lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05df7b6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24eb40 [0222.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211bf0 [0222.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0222.798] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0222.798] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05df7b6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0222.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211f20 [0222.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211bf0 | out: hHeap=0x1f0000) returned 1 [0222.798] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0222.798] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0222.798] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e100c60, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e100c60, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e100c60, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0222.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0222.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0222.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0222.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0222.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211f20 | out: hHeap=0x1f0000) returned 1 [0222.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0222.799] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fi-FI\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fi-fi\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0222.799] GetLastError () returned 0x5 [0222.799] GetLastError () returned 0x5 [0222.800] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e100c60, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e100c60, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e100c60, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0222.800] FindClose (in: hFindFile=0x24eb40 | out: hFindFile=0x24eb40) returned 1 [0222.800] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0222.800] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f020 | out: hHeap=0x1f0000) returned 1 [0222.800] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0222.800] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234aa0 | out: hHeap=0x1f0000) returned 1 [0222.800] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234740 [0222.800] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0222.800] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d6a0 [0222.800] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212718 [0222.800] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fr-CA\\*", lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0635c03, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24e7c0 [0222.801] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211fa8 [0222.801] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212718 | out: hHeap=0x1f0000) returned 1 [0222.801] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0222.801] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0635c03, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0222.801] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0222.801] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211fa8 | out: hHeap=0x1f0000) returned 1 [0222.801] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0222.801] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0222.801] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e126ecb, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e126ecb, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e126ecb, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0222.801] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0222.801] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0222.801] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0222.801] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0222.802] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0222.802] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0222.802] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fr-CA\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fr-ca\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0222.802] GetLastError () returned 0x5 [0222.802] GetLastError () returned 0x5 [0222.802] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e126ecb, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e126ecb, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e126ecb, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0222.802] FindClose (in: hFindFile=0x24e7c0 | out: hFindFile=0x24e7c0) returned 1 [0222.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0222.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d6a0 | out: hHeap=0x1f0000) returned 1 [0222.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0222.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234740 | out: hHeap=0x1f0000) returned 1 [0222.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234740 [0222.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0222.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e360 [0222.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2129c0 [0222.804] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fr-FR\\*", lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06369df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24e980 [0222.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211bf0 [0222.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2129c0 | out: hHeap=0x1f0000) returned 1 [0222.805] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0222.805] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06369df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0222.805] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d00 [0222.805] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211bf0 | out: hHeap=0x1f0000) returned 1 [0222.805] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0222.805] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0222.805] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e100c60, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e100c60, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e100c60, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0222.805] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0222.805] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212828 [0222.805] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0222.805] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212828 | out: hHeap=0x1f0000) returned 1 [0222.805] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d00 | out: hHeap=0x1f0000) returned 1 [0222.805] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0222.806] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fr-FR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fr-fr\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0222.806] GetLastError () returned 0x5 [0222.806] GetLastError () returned 0x5 [0222.806] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e100c60, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e100c60, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e100c60, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0222.806] FindClose (in: hFindFile=0x24e980 | out: hFindFile=0x24e980) returned 1 [0222.806] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0222.806] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e360 | out: hHeap=0x1f0000) returned 1 [0222.806] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0222.806] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234740 | out: hHeap=0x1f0000) returned 1 [0222.806] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234740 [0222.806] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0222.807] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22dd00 [0222.807] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0222.807] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\*", lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0637839, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24e900 [0222.807] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0222.807] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0222.807] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0222.807] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0637839, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0222.807] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0222.807] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0222.807] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0222.807] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0222.807] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0638633, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="auxpad", cAlternateFileName="")) returned 1 [0222.807] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0222.807] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x2367c8 [0222.807] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0222.808] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0222.808] lstrcmpW (lpString1="auxpad", lpString2=".") returned 1 [0222.808] lstrcmpW (lpString1="auxpad", lpString2="..") returned 1 [0222.808] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204d30 [0222.808] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219f90 [0222.808] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd4, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="auxpad.xml", cAlternateFileName="")) returned 1 [0222.808] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0222.808] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0222.808] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x229418 [0222.808] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0222.808] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2367c8 | out: hHeap=0x1f0000) returned 1 [0222.808] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0222.808] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0222.809] GetLastError () returned 0x5 [0222.809] GetLastError () returned 0x5 [0222.809] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0638c00, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="insert", cAlternateFileName="")) returned 1 [0222.809] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0222.809] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x2367c8 [0222.809] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0222.809] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0222.809] lstrcmpW (lpString1="insert", lpString2=".") returned 1 [0222.809] lstrcmpW (lpString1="insert", lpString2="..") returned 1 [0222.809] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238ef8 [0222.809] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219ee8 [0222.809] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d30 | out: hHeap=0x1f0000) returned 1 [0222.809] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="insert.xml", cAlternateFileName="")) returned 1 [0222.809] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0222.809] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0222.809] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x229418 [0222.809] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0222.810] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2367c8 | out: hHeap=0x1f0000) returned 1 [0222.810] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0222.810] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\insert.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0222.810] GetLastError () returned 0x5 [0222.810] GetLastError () returned 0x5 [0222.810] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa063932e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="keypad", cAlternateFileName="")) returned 1 [0222.810] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0222.810] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x2367c8 [0222.810] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0222.810] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0222.810] lstrcmpW (lpString1="keypad", lpString2=".") returned 1 [0222.810] lstrcmpW (lpString1="keypad", lpString2="..") returned 1 [0222.811] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x48) returned 0x225f18 [0222.811] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a2d8 [0222.811] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ef8 | out: hHeap=0x1f0000) returned 1 [0222.811] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2b5, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="keypad.xml", cAlternateFileName="")) returned 1 [0222.811] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0222.811] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0222.811] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x229418 [0222.811] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0222.811] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2367c8 | out: hHeap=0x1f0000) returned 1 [0222.811] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0222.812] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0222.812] GetLastError () returned 0x5 [0222.812] GetLastError () returned 0x5 [0222.812] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cd023, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="main", cAlternateFileName="")) returned 1 [0222.812] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0222.812] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0222.812] lstrcmpW (lpString1="main", lpString2=".") returned 1 [0222.812] lstrcmpW (lpString1="main", lpString2="..") returned 1 [0222.812] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235aa8 [0222.812] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0222.812] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225f18 | out: hHeap=0x1f0000) returned 1 [0222.812] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xadda, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="main.xml", cAlternateFileName="")) returned 1 [0222.812] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0222.812] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0222.813] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x22d368 [0223.034] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0223.034] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0223.034] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0223.035] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0223.035] GetLastError () returned 0x5 [0223.035] GetLastError () returned 0x5 [0223.035] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cdb88, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="oskclearui", cAlternateFileName="OSKCLE~1")) returned 1 [0223.035] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0223.035] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0223.035] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x229418 [0223.035] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0223.036] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d368 | out: hHeap=0x1f0000) returned 1 [0223.036] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0223.036] lstrcmpW (lpString1="oskclearui", lpString2=".") returned 1 [0223.036] lstrcmpW (lpString1="oskclearui", lpString2="..") returned 1 [0223.036] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0223.036] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a4d0 [0223.036] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235aa8 | out: hHeap=0x1f0000) returned 1 [0223.036] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="oskclearui.xml", cAlternateFileName="")) returned 1 [0223.036] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0223.036] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0223.036] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x2294f8 [0223.036] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0223.036] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0223.036] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0223.036] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskclearui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0223.037] GetLastError () returned 0x5 [0223.037] GetLastError () returned 0x5 [0223.037] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ce328, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="oskmenu", cAlternateFileName="")) returned 1 [0223.037] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0223.037] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x229418 [0223.037] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0223.037] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2294f8 | out: hHeap=0x1f0000) returned 1 [0223.037] lstrcmpW (lpString1="oskmenu", lpString2=".") returned 1 [0223.037] lstrcmpW (lpString1="oskmenu", lpString2="..") returned 1 [0223.037] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21aab8 [0223.037] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3fbc74, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="oskmenu.xml", cAlternateFileName="")) returned 1 [0223.037] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0223.037] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0223.037] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x2294f8 [0223.037] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0223.038] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0223.038] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0223.038] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0223.038] GetLastError () returned 0x5 [0223.038] GetLastError () returned 0x5 [0223.038] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ce7a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="osknav", cAlternateFileName="")) returned 1 [0223.038] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0223.038] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x229418 [0223.038] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0223.038] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2294f8 | out: hHeap=0x1f0000) returned 1 [0223.038] lstrcmpW (lpString1="osknav", lpString2=".") returned 1 [0223.038] lstrcmpW (lpString1="osknav", lpString2="..") returned 1 [0223.038] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd8) returned 0x2294f8 [0223.038] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a770 [0223.039] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0223.039] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3fbc74, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd5, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="osknav.xml", cAlternateFileName="")) returned 1 [0223.039] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0223.039] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0223.039] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x22d368 [0223.039] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0223.039] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0223.039] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0223.039] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknav.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0223.039] GetLastError () returned 0x5 [0223.039] GetLastError () returned 0x5 [0223.040] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ceb7f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="osknumpad", cAlternateFileName="OSKNUM~1")) returned 1 [0223.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0223.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0223.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x229418 [0223.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0223.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d368 | out: hHeap=0x1f0000) returned 1 [0223.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0223.040] lstrcmpW (lpString1="osknumpad", lpString2=".") returned 1 [0223.040] lstrcmpW (lpString1="osknumpad", lpString2="..") returned 1 [0223.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a818 [0223.040] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xdb, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="osknumpad.xml", cAlternateFileName="")) returned 1 [0223.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0223.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0223.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x22d368 [0223.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0223.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0223.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0223.041] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0223.041] GetLastError () returned 0x5 [0223.041] GetLastError () returned 0x5 [0223.041] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cef41, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="oskpred", cAlternateFileName="")) returned 1 [0223.041] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0223.041] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x229418 [0223.041] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0223.041] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d368 | out: hHeap=0x1f0000) returned 1 [0223.041] lstrcmpW (lpString1="oskpred", lpString2=".") returned 1 [0223.042] lstrcmpW (lpString1="oskpred", lpString2="..") returned 1 [0223.042] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21aa10 [0223.042] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="oskpred.xml", cAlternateFileName="")) returned 1 [0223.042] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0223.042] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0223.042] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x22d368 [0223.042] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0223.042] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0223.042] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0223.043] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0223.043] GetLastError () returned 0x5 [0223.043] GetLastError () returned 0x5 [0223.043] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cf371, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="symbols", cAlternateFileName="")) returned 1 [0223.043] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0223.043] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x229418 [0223.043] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0223.043] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d368 | out: hHeap=0x1f0000) returned 1 [0223.043] lstrcmpW (lpString1="symbols", lpString2=".") returned 1 [0223.043] lstrcmpW (lpString1="symbols", lpString2="..") returned 1 [0223.044] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x138) returned 0x22d368 [0223.044] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a188 [0223.044] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2294f8 | out: hHeap=0x1f0000) returned 1 [0223.044] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x24f, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="symbols.xml", cAlternateFileName="")) returned 1 [0223.044] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0223.044] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0223.044] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x2294f8 [0223.044] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0223.044] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0223.044] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0223.044] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0223.045] GetLastError () returned 0x5 [0223.045] GetLastError () returned 0x5 [0223.045] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x24f, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="symbols.xml", cAlternateFileName="")) returned 0 [0223.045] FindClose (in: hFindFile=0x24e900 | out: hFindFile=0x24e900) returned 1 [0223.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234aa0 [0223.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0223.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f020 [0223.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a0e0 [0223.046] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\*", lpFindFileData=0x259db34 | out: lpFindFileData=0x259db34*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0638633, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName=".", cAlternateFileName="")) returned 0x24e900 [0223.046] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219c48 [0223.046] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a0e0 | out: hHeap=0x1f0000) returned 1 [0223.046] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0223.046] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x259db34 | out: lpFindFileData=0x259db34*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0638633, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="..", cAlternateFileName="")) returned 1 [0223.046] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a230 [0223.046] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219c48 | out: hHeap=0x1f0000) returned 1 [0223.046] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0223.047] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0223.047] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x259db34 | out: lpFindFileData=0x259db34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x59a, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="auxbase.xml", cAlternateFileName="")) returned 1 [0223.047] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0223.047] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a380 [0223.047] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xee) returned 0x20d888 [0223.047] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a380 | out: hHeap=0x1f0000) returned 1 [0223.048] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a230 | out: hHeap=0x1f0000) returned 1 [0223.048] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0223.048] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259d844, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0223.048] GetLastError () returned 0x5 [0223.048] GetLastError () returned 0x5 [0223.049] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x259db34 | out: lpFindFileData=0x259db34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x59a, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="auxbase.xml", cAlternateFileName="")) returned 0 [0223.049] FindClose (in: hFindFile=0x24e900 | out: hFindFile=0x24e900) returned 1 [0223.049] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20d888 | out: hHeap=0x1f0000) returned 1 [0223.049] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f020 | out: hHeap=0x1f0000) returned 1 [0223.049] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0223.049] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234aa0 | out: hHeap=0x1f0000) returned 1 [0223.049] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234590 [0223.049] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0223.049] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e828 [0223.049] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219c48 [0223.049] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\*", lpFindFileData=0x259db34 | out: lpFindFileData=0x259db34*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0638c00, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName=".", cAlternateFileName="")) returned 0x24e9c0 [0223.050] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21ab60 [0223.050] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219c48 | out: hHeap=0x1f0000) returned 1 [0223.050] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0223.050] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x259db34 | out: lpFindFileData=0x259db34*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0638c00, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="..", cAlternateFileName="")) returned 1 [0223.050] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a578 [0223.050] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ab60 | out: hHeap=0x1f0000) returned 1 [0223.050] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0223.050] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0223.050] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x259db34 | out: lpFindFileData=0x259db34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x387, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="insertbase.xml", cAlternateFileName="")) returned 1 [0223.051] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0223.051] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a620 [0223.051] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xee) returned 0x20d888 [0223.051] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a620 | out: hHeap=0x1f0000) returned 1 [0223.051] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a578 | out: hHeap=0x1f0000) returned 1 [0223.051] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0223.051] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\insertbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\insert\\insertbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259d844, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0223.051] GetLastError () returned 0x5 [0223.051] GetLastError () returned 0x5 [0223.052] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x259db34 | out: lpFindFileData=0x259db34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x387, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="insertbase.xml", cAlternateFileName="")) returned 0 [0223.052] FindClose (in: hFindFile=0x24e9c0 | out: hFindFile=0x24e9c0) returned 1 [0223.052] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20d888 | out: hHeap=0x1f0000) returned 1 [0223.052] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e828 | out: hHeap=0x1f0000) returned 1 [0223.052] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0223.052] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234590 | out: hHeap=0x1f0000) returned 1 [0223.052] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234aa0 [0223.052] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0223.052] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e828 [0223.052] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a038 [0223.052] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\*", lpFindFileData=0x259db34 | out: lpFindFileData=0x259db34*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa063932e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName=".", cAlternateFileName="")) returned 0x24e7c0 [0223.053] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a0e0 [0223.053] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a038 | out: hHeap=0x1f0000) returned 1 [0223.053] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0223.053] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259db34 | out: lpFindFileData=0x259db34*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa063932e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="..", cAlternateFileName="")) returned 1 [0223.053] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a380 [0223.053] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a0e0 | out: hHeap=0x1f0000) returned 1 [0223.053] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0223.053] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0223.053] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259db34 | out: lpFindFileData=0x259db34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x180, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="ea.xml", cAlternateFileName="")) returned 1 [0223.054] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a038 [0223.054] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a380 | out: hHeap=0x1f0000) returned 1 [0223.054] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259d844, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0223.054] GetLastError () returned 0x5 [0223.054] GetLastError () returned 0x5 [0223.055] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259db34 | out: lpFindFileData=0x259db34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x387, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="keypadbase.xml", cAlternateFileName="")) returned 1 [0223.055] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0223.055] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a968 [0223.055] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xee) returned 0x20d888 [0223.055] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a968 | out: hHeap=0x1f0000) returned 1 [0223.055] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a038 | out: hHeap=0x1f0000) returned 1 [0223.055] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0223.055] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259d844, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0223.056] GetLastError () returned 0x5 [0223.056] GetLastError () returned 0x5 [0223.056] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259db34 | out: lpFindFileData=0x259db34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x188, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="kor-kor.xml", cAlternateFileName="")) returned 1 [0223.056] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0223.056] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a038 [0223.056] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xee) returned 0x20d980 [0223.056] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a038 | out: hHeap=0x1f0000) returned 1 [0223.056] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20d888 | out: hHeap=0x1f0000) returned 1 [0223.056] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0223.057] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259d844, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0223.057] GetLastError () returned 0x5 [0223.057] GetLastError () returned 0x5 [0223.057] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259db34 | out: lpFindFileData=0x259db34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x188, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="kor-kor.xml", cAlternateFileName="")) returned 0 [0223.057] FindClose (in: hFindFile=0x24e7c0 | out: hFindFile=0x24e7c0) returned 1 [0223.058] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20d980 | out: hHeap=0x1f0000) returned 1 [0223.058] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e828 | out: hHeap=0x1f0000) returned 1 [0223.058] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0223.058] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234aa0 | out: hHeap=0x1f0000) returned 1 [0223.058] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234aa0 [0223.058] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0223.058] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f020 [0223.058] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a038 [0223.058] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\*", lpFindFileData=0x259db34 | out: lpFindFileData=0x259db34*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cd023, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName=".", cAlternateFileName="")) returned 0x24e600 [0223.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0223.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x229418 [0223.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0223.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a038 | out: hHeap=0x1f0000) returned 1 [0223.060] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0223.060] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x259db34 | out: lpFindFileData=0x259db34*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cd023, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="..", cAlternateFileName="")) returned 1 [0223.060] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0223.060] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x20d888 [0223.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0223.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0223.060] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0223.060] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0223.060] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x259db34 | out: lpFindFileData=0x259db34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd05, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="base.xml", cAlternateFileName="")) returned 1 [0223.060] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0223.060] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0223.060] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x229418 [0223.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0223.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20d888 | out: hHeap=0x1f0000) returned 1 [0223.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0223.061] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259d844, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0223.061] GetLastError () returned 0x5 [0223.061] GetLastError () returned 0x5 [0223.061] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x259db34 | out: lpFindFileData=0x259db34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xf7, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="baseAltGr_rtl.xml", cAlternateFileName="")) returned 1 [0223.061] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2392b0 [0223.061] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0223.061] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x20d888 [0223.061] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0223.061] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0223.061] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2392b0 | out: hHeap=0x1f0000) returned 1 [0223.062] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\baseAltGr_rtl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\basealtgr_rtl.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259d844, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0223.062] GetLastError () returned 0x5 [0223.062] GetLastError () returned 0x5 [0223.062] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x259db34 | out: lpFindFileData=0x259db34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xdc4, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="base_altgr.xml", cAlternateFileName="")) returned 1 [0223.062] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0223.062] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0223.062] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x229418 [0223.062] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0223.062] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20d888 | out: hHeap=0x1f0000) returned 1 [0223.062] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0223.063] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_altgr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_altgr.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259d844, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0223.063] GetLastError () returned 0x5 [0223.063] GetLastError () returned 0x5 [0223.063] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x259db34 | out: lpFindFileData=0x259db34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xdc9, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="base_ca.xml", cAlternateFileName="")) returned 1 [0223.063] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0223.063] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0223.063] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x20d888 [0223.064] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0223.064] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0223.064] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0223.064] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_ca.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_ca.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259d844, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0223.064] GetLastError () returned 0x5 [0223.064] GetLastError () returned 0x5 [0223.064] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x259db34 | out: lpFindFileData=0x259db34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2e2, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="base_heb.xml", cAlternateFileName="")) returned 1 [0223.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0223.065] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0223.065] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x229418 [0223.065] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0223.065] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20d888 | out: hHeap=0x1f0000) returned 1 [0223.065] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0223.065] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_heb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_heb.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259d844, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0223.065] GetLastError () returned 0x5 [0223.065] GetLastError () returned 0x5 [0223.065] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x259db34 | out: lpFindFileData=0x259db34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x324, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="base_jpn.xml", cAlternateFileName="")) returned 1 [0223.065] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0223.066] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0223.066] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x20d888 [0223.066] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0223.066] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0223.066] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0223.066] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_jpn.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_jpn.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259d844, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0223.066] GetLastError () returned 0x5 [0223.067] GetLastError () returned 0x5 [0223.067] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x259db34 | out: lpFindFileData=0x259db34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1e8, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="base_kor.xml", cAlternateFileName="")) returned 1 [0223.067] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0223.067] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0223.067] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x229418 [0223.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0223.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20d888 | out: hHeap=0x1f0000) returned 1 [0223.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0223.067] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_kor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_kor.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259d844, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0223.068] GetLastError () returned 0x5 [0223.068] GetLastError () returned 0x5 [0223.068] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x259db34 | out: lpFindFileData=0x259db34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x269, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="base_rtl.xml", cAlternateFileName="")) returned 1 [0223.068] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0223.068] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0223.068] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x20d888 [0223.068] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0223.068] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0223.068] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0223.069] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_rtl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_rtl.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259d844, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0223.069] GetLastError () returned 0x5 [0223.069] GetLastError () returned 0x5 [0223.069] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x259db34 | out: lpFindFileData=0x259db34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x40e8, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="ja-jp.xml", cAlternateFileName="")) returned 1 [0223.069] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0223.069] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0223.069] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x229418 [0223.069] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0223.069] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20d888 | out: hHeap=0x1f0000) returned 1 [0223.069] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0223.070] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\ja-jp.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\ja-jp.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259d844, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0223.070] GetLastError () returned 0x5 [0223.070] GetLastError () returned 0x5 [0223.070] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x259db34 | out: lpFindFileData=0x259db34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3af9, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="ko-kr.xml", cAlternateFileName="")) returned 1 [0223.070] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0223.070] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0223.070] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x20d888 [0223.070] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0223.070] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0223.071] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0223.071] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\ko-kr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\ko-kr.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259d844, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0223.071] GetLastError () returned 0x5 [0223.071] GetLastError () returned 0x5 [0223.071] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x259db34 | out: lpFindFileData=0x259db34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x264b, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="zh-changjei.xml", cAlternateFileName="")) returned 1 [0223.071] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0223.071] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0223.071] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x229418 [0223.071] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0223.071] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20d888 | out: hHeap=0x1f0000) returned 1 [0223.071] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0223.072] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-changjei.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-changjei.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259d844, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0223.072] GetLastError () returned 0x5 [0223.072] GetLastError () returned 0x5 [0223.072] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x259db34 | out: lpFindFileData=0x259db34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3fbc74, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2b3b, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="zh-dayi.xml", cAlternateFileName="")) returned 1 [0223.072] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0223.072] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0223.072] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x20d888 [0223.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0223.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0223.073] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0223.073] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-dayi.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-dayi.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259d844, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0223.073] GetLastError () returned 0x5 [0223.073] GetLastError () returned 0x5 [0223.073] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x259db34 | out: lpFindFileData=0x259db34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2ac3, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="zh-phonetic.xml", cAlternateFileName="")) returned 1 [0223.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0223.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0223.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x229418 [0223.074] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0223.074] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20d888 | out: hHeap=0x1f0000) returned 1 [0223.074] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0223.074] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259d844, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0223.075] GetLastError () returned 0x5 [0223.075] GetLastError () returned 0x5 [0223.075] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x259db34 | out: lpFindFileData=0x259db34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2ac3, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="zh-phonetic.xml", cAlternateFileName="")) returned 0 [0223.075] FindClose (in: hFindFile=0x24e600 | out: hFindFile=0x24e600) returned 1 [0223.077] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0223.077] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f020 | out: hHeap=0x1f0000) returned 1 [0223.077] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0223.077] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234aa0 | out: hHeap=0x1f0000) returned 1 [0223.077] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x234aa0 [0223.077] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0223.077] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f1b8 [0223.077] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a038 [0223.077] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\*", lpFindFileData=0x259db34 | out: lpFindFileData=0x259db34*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cdb88, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName=".", cAlternateFileName="")) returned 0x24e900 [0223.078] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a968 [0223.078] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a038 | out: hHeap=0x1f0000) returned 1 [0223.078] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0223.078] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x259db34 | out: lpFindFileData=0x259db34*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cdb88, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="..", cAlternateFileName="")) returned 1 [0223.078] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a578 [0223.078] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a968 | out: hHeap=0x1f0000) returned 1 [0223.322] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0223.322] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0223.322] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x259db34 | out: lpFindFileData=0x259db34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2e1, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="oskclearuibase.xml", cAlternateFileName="")) returned 1 [0223.322] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c20 [0223.322] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a380 [0223.323] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xee) returned 0x22b110 [0223.334] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a380 | out: hHeap=0x1f0000) returned 1 [0223.334] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a578 | out: hHeap=0x1f0000) returned 1 [0223.334] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c20 | out: hHeap=0x1f0000) returned 1 [0223.360] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\oskclearuibase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\oskclearuibase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259d844, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0223.360] GetLastError () returned 0x5 [0223.360] GetLastError () returned 0x5 [0223.361] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x259db34 | out: lpFindFileData=0x259db34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2e1, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="oskclearuibase.xml", cAlternateFileName="")) returned 0 [0223.361] FindClose (in: hFindFile=0x24e900 | out: hFindFile=0x24e900) returned 1 [0223.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b110 | out: hHeap=0x1f0000) returned 1 [0223.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f1b8 | out: hHeap=0x1f0000) returned 1 [0223.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0223.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234aa0 | out: hHeap=0x1f0000) returned 1 [0223.362] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2288c0 [0223.362] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0223.362] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f1b8 [0223.362] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a230 [0223.362] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\*", lpFindFileData=0x259db34 | out: lpFindFileData=0x259db34*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ce328, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName=".", cAlternateFileName="")) returned 0x24ea80 [0223.362] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a0e0 [0223.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a230 | out: hHeap=0x1f0000) returned 1 [0223.362] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0223.363] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259db34 | out: lpFindFileData=0x259db34*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ce328, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="..", cAlternateFileName="")) returned 1 [0223.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a578 [0223.363] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a0e0 | out: hHeap=0x1f0000) returned 1 [0223.363] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0223.363] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0223.363] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259db34 | out: lpFindFileData=0x259db34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="oskmenubase.xml", cAlternateFileName="")) returned 1 [0223.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0223.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a620 [0223.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xee) returned 0x22b110 [0223.363] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a620 | out: hHeap=0x1f0000) returned 1 [0223.364] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a578 | out: hHeap=0x1f0000) returned 1 [0223.364] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0223.364] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259d844, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0223.365] GetLastError () returned 0x5 [0223.365] GetLastError () returned 0x5 [0223.365] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259db34 | out: lpFindFileData=0x259db34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="oskmenubase.xml", cAlternateFileName="")) returned 0 [0223.365] FindClose (in: hFindFile=0x24ea80 | out: hFindFile=0x24ea80) returned 1 [0223.365] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b110 | out: hHeap=0x1f0000) returned 1 [0223.365] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f1b8 | out: hHeap=0x1f0000) returned 1 [0223.366] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0223.366] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2288c0 | out: hHeap=0x1f0000) returned 1 [0223.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228488 [0223.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0223.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f350 [0223.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a578 [0223.366] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav\\*", lpFindFileData=0x259db34 | out: lpFindFileData=0x259db34*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ce7a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName=".", cAlternateFileName="")) returned 0x24ea80 [0223.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a038 [0223.367] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a578 | out: hHeap=0x1f0000) returned 1 [0223.367] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0223.367] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259db34 | out: lpFindFileData=0x259db34*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ce7a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="..", cAlternateFileName="")) returned 1 [0223.367] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219e40 [0223.367] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a038 | out: hHeap=0x1f0000) returned 1 [0223.367] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0223.367] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0223.367] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259db34 | out: lpFindFileData=0x259db34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x42d, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="osknavbase.xml", cAlternateFileName="")) returned 1 [0223.367] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0223.368] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219cf0 [0223.368] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xee) returned 0x22b110 [0223.368] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219cf0 | out: hHeap=0x1f0000) returned 1 [0223.368] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219e40 | out: hHeap=0x1f0000) returned 1 [0223.368] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0223.369] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav\\osknavbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknav\\osknavbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259d844, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0223.369] GetLastError () returned 0x5 [0223.369] GetLastError () returned 0x5 [0223.369] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259db34 | out: lpFindFileData=0x259db34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x42d, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="osknavbase.xml", cAlternateFileName="")) returned 0 [0223.369] FindClose (in: hFindFile=0x24ea80 | out: hFindFile=0x24ea80) returned 1 [0223.370] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b110 | out: hHeap=0x1f0000) returned 1 [0223.370] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f350 | out: hHeap=0x1f0000) returned 1 [0223.370] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0223.370] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228488 | out: hHeap=0x1f0000) returned 1 [0223.370] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228bd8 [0223.370] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238488 [0223.370] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f1b8 [0223.370] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a380 [0223.371] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\*", lpFindFileData=0x259db34 | out: lpFindFileData=0x259db34*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ceb7f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName=".", cAlternateFileName="")) returned 0x24e980 [0223.371] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a038 [0223.371] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a380 | out: hHeap=0x1f0000) returned 1 [0223.371] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0223.371] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x259db34 | out: lpFindFileData=0x259db34*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ceb7f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="..", cAlternateFileName="")) returned 1 [0223.371] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a6c8 [0223.371] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a038 | out: hHeap=0x1f0000) returned 1 [0223.372] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0223.372] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0223.372] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x259db34 | out: lpFindFileData=0x259db34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x73d, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="osknumpadbase.xml", cAlternateFileName="")) returned 1 [0223.372] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238da8 [0223.372] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a038 [0223.372] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xee) returned 0x22b110 [0223.372] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a038 | out: hHeap=0x1f0000) returned 1 [0223.372] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a6c8 | out: hHeap=0x1f0000) returned 1 [0223.372] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238da8 | out: hHeap=0x1f0000) returned 1 [0223.373] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259d844, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0223.373] GetLastError () returned 0x5 [0223.373] GetLastError () returned 0x5 [0223.373] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x259db34 | out: lpFindFileData=0x259db34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x73d, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="osknumpadbase.xml", cAlternateFileName="")) returned 0 [0223.374] FindClose (in: hFindFile=0x24e980 | out: hFindFile=0x24e980) returned 1 [0223.374] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b110 | out: hHeap=0x1f0000) returned 1 [0223.374] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f1b8 | out: hHeap=0x1f0000) returned 1 [0223.374] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238488 | out: hHeap=0x1f0000) returned 1 [0223.374] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228bd8 | out: hHeap=0x1f0000) returned 1 [0223.374] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2284d0 [0223.374] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0223.374] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f1b8 [0223.374] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219e40 [0223.375] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\*", lpFindFileData=0x259db34 | out: lpFindFileData=0x259db34*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cef41, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName=".", cAlternateFileName="")) returned 0x24e980 [0223.375] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a038 [0223.375] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219e40 | out: hHeap=0x1f0000) returned 1 [0223.375] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0223.376] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x259db34 | out: lpFindFileData=0x259db34*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cef41, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="..", cAlternateFileName="")) returned 1 [0223.376] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a380 [0223.376] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a038 | out: hHeap=0x1f0000) returned 1 [0223.376] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0223.376] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0223.376] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x259db34 | out: lpFindFileData=0x259db34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x39c, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="oskpredbase.xml", cAlternateFileName="")) returned 1 [0223.376] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0223.376] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a038 [0223.376] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xee) returned 0x22b110 [0223.376] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a038 | out: hHeap=0x1f0000) returned 1 [0223.377] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a380 | out: hHeap=0x1f0000) returned 1 [0223.377] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0223.377] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259d844, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0223.378] GetLastError () returned 0x5 [0223.378] GetLastError () returned 0x5 [0223.378] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x259db34 | out: lpFindFileData=0x259db34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x39c, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="oskpredbase.xml", cAlternateFileName="")) returned 0 [0223.378] FindClose (in: hFindFile=0x24e980 | out: hFindFile=0x24e980) returned 1 [0223.378] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b110 | out: hHeap=0x1f0000) returned 1 [0223.378] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f1b8 | out: hHeap=0x1f0000) returned 1 [0223.379] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0223.379] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2284d0 | out: hHeap=0x1f0000) returned 1 [0223.379] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2286c8 [0223.379] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0223.379] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d508 [0223.379] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a038 [0223.379] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\*", lpFindFileData=0x259db34 | out: lpFindFileData=0x259db34*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cf371, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName=".", cAlternateFileName="")) returned 0x24e940 [0223.379] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a230 [0223.380] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a038 | out: hHeap=0x1f0000) returned 1 [0223.380] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0223.380] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x259db34 | out: lpFindFileData=0x259db34*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cf371, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="..", cAlternateFileName="")) returned 1 [0223.380] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219d98 [0223.380] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a230 | out: hHeap=0x1f0000) returned 1 [0223.380] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0223.380] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0223.380] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x259db34 | out: lpFindFileData=0x259db34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3fbc74, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2b6, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="ea-sym.xml", cAlternateFileName="")) returned 1 [0223.380] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0223.380] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a230 [0223.381] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xee) returned 0x22b110 [0223.381] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a230 | out: hHeap=0x1f0000) returned 1 [0223.381] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219d98 | out: hHeap=0x1f0000) returned 1 [0223.381] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0223.381] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259d844, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0223.382] GetLastError () returned 0x5 [0223.382] GetLastError () returned 0x5 [0223.382] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x259db34 | out: lpFindFileData=0x259db34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x325, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="ja-jp-sym.xml", cAlternateFileName="")) returned 1 [0223.382] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0223.382] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a6c8 [0223.382] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xee) returned 0x2366d8 [0223.383] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a6c8 | out: hHeap=0x1f0000) returned 1 [0223.383] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b110 | out: hHeap=0x1f0000) returned 1 [0223.383] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0223.383] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259d844, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0223.383] GetLastError () returned 0x5 [0223.383] GetLastError () returned 0x5 [0223.384] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x259db34 | out: lpFindFileData=0x259db34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xeef, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="symbase.xml", cAlternateFileName="")) returned 1 [0223.384] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0223.384] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a038 [0223.384] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xee) returned 0x2367d0 [0223.384] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a038 | out: hHeap=0x1f0000) returned 1 [0223.384] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2366d8 | out: hHeap=0x1f0000) returned 1 [0223.384] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0223.385] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259d844, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0223.385] GetLastError () returned 0x5 [0223.385] GetLastError () returned 0x5 [0223.385] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x259db34 | out: lpFindFileData=0x259db34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xeef, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="symbase.xml", cAlternateFileName="")) returned 0 [0223.385] FindClose (in: hFindFile=0x24e940 | out: hFindFile=0x24e940) returned 1 [0223.386] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2367d0 | out: hHeap=0x1f0000) returned 1 [0223.386] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d508 | out: hHeap=0x1f0000) returned 1 [0223.386] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0223.386] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2286c8 | out: hHeap=0x1f0000) returned 1 [0223.386] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2294f8 | out: hHeap=0x1f0000) returned 1 [0223.386] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219f90 | out: hHeap=0x1f0000) returned 1 [0223.386] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219ee8 | out: hHeap=0x1f0000) returned 1 [0223.386] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a2d8 | out: hHeap=0x1f0000) returned 1 [0223.386] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0223.387] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a4d0 | out: hHeap=0x1f0000) returned 1 [0223.387] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21aab8 | out: hHeap=0x1f0000) returned 1 [0223.387] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a770 | out: hHeap=0x1f0000) returned 1 [0223.387] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a818 | out: hHeap=0x1f0000) returned 1 [0223.387] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21aa10 | out: hHeap=0x1f0000) returned 1 [0223.387] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a188 | out: hHeap=0x1f0000) returned 1 [0223.387] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d368 | out: hHeap=0x1f0000) returned 1 [0223.387] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22dd00 | out: hHeap=0x1f0000) returned 1 [0223.387] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0223.388] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234740 | out: hHeap=0x1f0000) returned 1 [0223.388] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228bd8 [0223.388] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0223.388] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22db68 [0223.388] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211fa8 [0223.388] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\he-IL\\*", lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cf9a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24ea00 [0223.388] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0223.388] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211fa8 | out: hHeap=0x1f0000) returned 1 [0223.389] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0223.389] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cf9a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0223.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0223.389] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0223.389] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0223.389] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0223.389] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c3a52f7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3c3a52f7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3c3a52f7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0223.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0223.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212718 [0223.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0223.390] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212718 | out: hHeap=0x1f0000) returned 1 [0223.390] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0223.390] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0223.390] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\he-IL\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\he-il\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0223.391] GetLastError () returned 0x5 [0223.391] GetLastError () returned 0x5 [0223.735] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c3a52f7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3c3a52f7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3c3a52f7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0223.735] FindClose (in: hFindFile=0x24ea00 | out: hFindFile=0x24ea00) returned 1 [0223.736] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0223.736] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22db68 | out: hHeap=0x1f0000) returned 1 [0223.736] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0223.736] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228bd8 | out: hHeap=0x1f0000) returned 1 [0223.736] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228cb0 [0223.736] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0223.736] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e360 [0223.736] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2129c0 [0223.736] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\hr-HR\\*", lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cfce2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24e5c0 [0223.736] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0223.736] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2129c0 | out: hHeap=0x1f0000) returned 1 [0223.737] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0223.737] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cfce2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0223.737] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211bf0 [0223.737] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0223.737] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0223.737] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0223.737] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c3a52f7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3c3a52f7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3c3a52f7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0223.737] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0223.737] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d00 [0223.737] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0223.737] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d00 | out: hHeap=0x1f0000) returned 1 [0223.737] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211bf0 | out: hHeap=0x1f0000) returned 1 [0223.737] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0223.737] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\hr-HR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hr-hr\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0223.738] GetLastError () returned 0x5 [0223.738] GetLastError () returned 0x5 [0223.738] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c3a52f7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3c3a52f7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3c3a52f7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0223.738] FindClose (in: hFindFile=0x24e5c0 | out: hFindFile=0x24e5c0) returned 1 [0223.738] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0223.738] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e360 | out: hHeap=0x1f0000) returned 1 [0223.738] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0223.738] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228cb0 | out: hHeap=0x1f0000) returned 1 [0223.738] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228878 [0223.738] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0223.739] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e1c8 [0223.739] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0223.739] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\hu-HU\\*", lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06d0656, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24ed00 [0223.739] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0223.739] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0223.739] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0223.739] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06d0656, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0223.739] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d00 [0223.739] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0223.739] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0223.739] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0223.739] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c3a52f7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3c3a52f7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3c3a52f7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0223.739] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0223.739] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0223.739] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0223.740] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0223.740] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d00 | out: hHeap=0x1f0000) returned 1 [0223.740] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0223.740] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\hu-HU\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hu-hu\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0223.740] GetLastError () returned 0x5 [0223.740] GetLastError () returned 0x5 [0223.740] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c3a52f7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3c3a52f7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3c3a52f7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0223.740] FindClose (in: hFindFile=0x24ed00 | out: hFindFile=0x24ed00) returned 1 [0223.741] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0223.741] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e1c8 | out: hHeap=0x1f0000) returned 1 [0223.741] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0223.741] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228878 | out: hHeap=0x1f0000) returned 1 [0223.741] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228830 [0223.741] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0223.741] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f350 [0223.741] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0223.741] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\HWRCustomization\\*", lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6eba2ec1, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0xa07693a9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6eba2ec1, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24e680 [0223.741] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0223.741] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0223.741] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0223.741] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6eba2ec1, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0xa07693a9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6eba2ec1, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0223.741] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0223.742] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0223.742] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0223.742] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0223.742] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6eba2ec1, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0xa07693a9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6eba2ec1, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 0 [0223.742] FindClose (in: hFindFile=0x24e680 | out: hFindFile=0x24e680) returned 1 [0223.742] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0223.742] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f350 | out: hHeap=0x1f0000) returned 1 [0223.742] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0223.742] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228830 | out: hHeap=0x1f0000) returned 1 [0223.742] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228ab8 [0223.742] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0223.742] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e1c8 [0223.742] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d00 [0223.742] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\it-IT\\*", lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0769b1e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24e900 [0223.743] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0223.743] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d00 | out: hHeap=0x1f0000) returned 1 [0223.743] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0223.743] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0769b1e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0223.743] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212718 [0223.743] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0223.743] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0223.743] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0223.743] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e9592f9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e9592f9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e9592f9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0223.743] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0223.743] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d00 [0223.743] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0223.743] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d00 | out: hHeap=0x1f0000) returned 1 [0223.743] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212718 | out: hHeap=0x1f0000) returned 1 [0223.743] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0223.744] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\it-IT\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\it-it\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0223.744] GetLastError () returned 0x5 [0223.744] GetLastError () returned 0x5 [0223.744] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e9592f9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e9592f9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e9592f9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0223.744] FindClose (in: hFindFile=0x24e900 | out: hFindFile=0x24e900) returned 1 [0223.744] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0223.744] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e1c8 | out: hHeap=0x1f0000) returned 1 [0223.744] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0223.744] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228ab8 | out: hHeap=0x1f0000) returned 1 [0223.744] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228908 [0223.744] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0223.745] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e1c8 [0223.745] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2128b0 [0223.745] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ja-JP\\*", lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076a026, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24e900 [0223.745] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0223.745] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2128b0 | out: hHeap=0x1f0000) returned 1 [0223.745] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0223.745] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076a026, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0223.745] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212718 [0223.745] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0223.745] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0223.745] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0223.745] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e9592f9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e9592f9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e9592f9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0223.745] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0223.745] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211e98 [0223.745] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0223.745] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e98 | out: hHeap=0x1f0000) returned 1 [0223.746] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212718 | out: hHeap=0x1f0000) returned 1 [0223.746] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0223.746] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ja-JP\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ja-jp\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0223.746] GetLastError () returned 0x5 [0223.746] GetLastError () returned 0x5 [0223.746] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e9592f9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e9592f9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e9592f9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0223.746] FindClose (in: hFindFile=0x24e900 | out: hFindFile=0x24e900) returned 1 [0223.746] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0223.746] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e1c8 | out: hHeap=0x1f0000) returned 1 [0223.746] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0223.747] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228908 | out: hHeap=0x1f0000) returned 1 [0223.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2284d0 [0223.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0223.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f350 [0223.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0223.747] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ko-KR\\*", lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076a7a6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24eac0 [0223.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212828 [0223.747] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0223.747] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0223.747] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076a7a6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0223.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211bf0 [0223.747] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212828 | out: hHeap=0x1f0000) returned 1 [0223.747] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0223.747] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0223.747] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0223.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0223.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0223.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0223.748] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0223.748] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211bf0 | out: hHeap=0x1f0000) returned 1 [0223.748] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0223.748] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ko-KR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ko-kr\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0223.748] GetLastError () returned 0x5 [0223.748] GetLastError () returned 0x5 [0223.748] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0223.749] FindClose (in: hFindFile=0x24eac0 | out: hFindFile=0x24eac0) returned 1 [0223.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0223.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f350 | out: hHeap=0x1f0000) returned 1 [0223.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0223.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2284d0 | out: hHeap=0x1f0000) returned 1 [0223.749] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228b48 [0223.749] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0223.749] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22db68 [0223.749] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0223.749] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\LanguageModel\\*", lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076afd8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24e900 [0223.750] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0223.750] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0223.750] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0223.750] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076afd8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0223.750] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0223.750] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0223.750] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0223.750] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0223.750] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3fbc74, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2fb, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="chstic.dgml", cAlternateFileName="")) returned 1 [0223.750] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0223.751] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0223.751] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd6) returned 0x217038 [0223.751] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0223.751] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0223.751] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0223.751] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\LanguageModel\\chstic.dgml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\languagemodel\\chstic.dgml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0223.752] GetLastError () returned 0x5 [0223.752] GetLastError () returned 0x5 [0223.752] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3fbc74, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2fb, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="chstic.dgml", cAlternateFileName="")) returned 0 [0223.752] FindClose (in: hFindFile=0x24e900 | out: hFindFile=0x24e900) returned 1 [0223.752] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0223.752] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22db68 | out: hHeap=0x1f0000) returned 1 [0223.752] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0223.752] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228b48 | out: hHeap=0x1f0000) returned 1 [0223.753] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2287e8 [0223.753] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0223.753] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f350 [0223.753] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0223.753] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\lt-LT\\*", lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076b52b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24e5c0 [0223.753] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211bf0 [0223.753] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0223.753] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0223.753] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076b52b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0223.754] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2129c0 [0223.754] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211bf0 | out: hHeap=0x1f0000) returned 1 [0223.754] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0223.754] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0223.754] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0223.754] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0223.754] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0223.754] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0223.754] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0223.754] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2129c0 | out: hHeap=0x1f0000) returned 1 [0223.754] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0223.754] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\lt-LT\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lt-lt\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0223.755] GetLastError () returned 0x5 [0223.755] GetLastError () returned 0x5 [0223.755] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0223.755] FindClose (in: hFindFile=0x24e5c0 | out: hFindFile=0x24e5c0) returned 1 [0223.755] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0223.755] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f350 | out: hHeap=0x1f0000) returned 1 [0223.755] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0223.755] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2287e8 | out: hHeap=0x1f0000) returned 1 [0223.755] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228bd8 [0223.755] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0223.755] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d508 [0223.756] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0223.756] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\lv-LV\\*", lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076ba6e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24e900 [0223.756] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d88 [0223.756] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0223.756] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0223.756] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076ba6e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0223.756] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211f20 [0223.756] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d88 | out: hHeap=0x1f0000) returned 1 [0223.756] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0223.756] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0223.756] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0223.757] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0223.757] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211e10 [0223.757] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0223.757] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e10 | out: hHeap=0x1f0000) returned 1 [0223.757] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211f20 | out: hHeap=0x1f0000) returned 1 [0223.757] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0223.757] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\lv-LV\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lv-lv\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0223.758] GetLastError () returned 0x5 [0223.758] GetLastError () returned 0x5 [0223.758] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0223.758] FindClose (in: hFindFile=0x24e900 | out: hFindFile=0x24e900) returned 1 [0223.758] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0223.758] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d508 | out: hHeap=0x1f0000) returned 1 [0223.758] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0223.758] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228bd8 | out: hHeap=0x1f0000) returned 1 [0223.758] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228bd8 [0223.758] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0223.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e1c8 [0223.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d00 [0223.759] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\nb-NO\\*", lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076bff5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24ea80 [0223.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211bf0 [0223.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d00 | out: hHeap=0x1f0000) returned 1 [0223.759] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0223.759] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076bff5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0223.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d00 [0223.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211bf0 | out: hHeap=0x1f0000) returned 1 [0223.760] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0223.760] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0223.760] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e90ce26, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e90ce26, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e90ce26, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0223.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0223.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211bf0 [0223.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0223.760] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211bf0 | out: hHeap=0x1f0000) returned 1 [0223.760] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d00 | out: hHeap=0x1f0000) returned 1 [0223.760] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0223.761] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\nb-NO\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nb-no\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0223.761] GetLastError () returned 0x5 [0223.761] GetLastError () returned 0x5 [0223.761] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e90ce26, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e90ce26, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e90ce26, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0223.761] FindClose (in: hFindFile=0x24ea80 | out: hFindFile=0x24ea80) returned 1 [0223.761] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0223.761] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e1c8 | out: hHeap=0x1f0000) returned 1 [0223.762] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0223.762] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228bd8 | out: hHeap=0x1f0000) returned 1 [0223.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228908 [0223.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0223.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e1c8 [0223.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0223.762] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\nl-NL\\*", lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076c75d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24eac0 [0223.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d00 [0223.762] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0223.763] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0223.763] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076c75d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0223.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d88 [0223.763] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d00 | out: hHeap=0x1f0000) returned 1 [0223.763] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0223.763] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0223.763] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0223.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0223.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0223.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0223.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0223.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d88 | out: hHeap=0x1f0000) returned 1 [0223.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0223.764] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\nl-NL\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nl-nl\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0223.764] GetLastError () returned 0x5 [0223.765] GetLastError () returned 0x5 [0223.765] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0223.765] FindClose (in: hFindFile=0x24eac0 | out: hFindFile=0x24eac0) returned 1 [0223.765] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0223.765] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e1c8 | out: hHeap=0x1f0000) returned 1 [0223.765] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0223.765] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228908 | out: hHeap=0x1f0000) returned 1 [0223.765] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228998 [0223.766] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0223.766] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f350 [0223.766] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d88 [0223.766] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\pl-PL\\*", lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d57c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24ea80 [0223.767] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211bf0 [0223.767] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d88 | out: hHeap=0x1f0000) returned 1 [0223.767] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0223.767] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d57c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0223.767] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211f20 [0223.767] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211bf0 | out: hHeap=0x1f0000) returned 1 [0223.767] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0223.767] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0223.767] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e8e6bbf, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e8e6bbf, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e8e6bbf, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0223.768] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0223.768] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0223.768] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0223.768] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0223.768] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211f20 | out: hHeap=0x1f0000) returned 1 [0223.768] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0223.769] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\pl-PL\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pl-pl\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0223.769] GetLastError () returned 0x5 [0223.769] GetLastError () returned 0x5 [0223.769] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e8e6bbf, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e8e6bbf, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e8e6bbf, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0223.769] FindClose (in: hFindFile=0x24ea80 | out: hFindFile=0x24ea80) returned 1 [0223.770] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0223.770] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f350 | out: hHeap=0x1f0000) returned 1 [0223.770] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0223.770] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228998 | out: hHeap=0x1f0000) returned 1 [0223.770] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2287e8 [0223.770] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0223.770] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e1c8 [0223.770] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212828 [0223.771] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\pt-BR\\*", lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d988, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24e900 [0223.771] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211bf0 [0223.771] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212828 | out: hHeap=0x1f0000) returned 1 [0223.771] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0223.771] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d988, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0223.771] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211e98 [0223.772] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211bf0 | out: hHeap=0x1f0000) returned 1 [0223.772] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0223.772] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0223.772] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e8e6bbf, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e8e6bbf, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e8e6bbf, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0223.772] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0223.772] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211bf0 [0223.772] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0223.772] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211bf0 | out: hHeap=0x1f0000) returned 1 [0223.773] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e98 | out: hHeap=0x1f0000) returned 1 [0223.773] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0223.773] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\pt-BR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-br\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0223.774] GetLastError () returned 0x5 [0223.774] GetLastError () returned 0x5 [0223.774] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e8e6bbf, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e8e6bbf, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e8e6bbf, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0223.774] FindClose (in: hFindFile=0x24e900 | out: hFindFile=0x24e900) returned 1 [0223.774] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0223.775] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e1c8 | out: hHeap=0x1f0000) returned 1 [0223.775] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0223.775] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2287e8 | out: hHeap=0x1f0000) returned 1 [0223.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2285f0 [0223.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0223.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f350 [0223.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212828 [0223.775] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\pt-PT\\*", lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ddb8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24e9c0 [0223.776] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0223.776] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212828 | out: hHeap=0x1f0000) returned 1 [0223.776] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0223.776] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ddb8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0223.776] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211bf0 [0223.776] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0223.776] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0223.776] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0223.776] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e8e6bbf, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e8e6bbf, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e8e6bbf, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0223.777] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0223.777] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d00 [0223.777] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0223.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d00 | out: hHeap=0x1f0000) returned 1 [0223.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211bf0 | out: hHeap=0x1f0000) returned 1 [0223.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0223.778] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\pt-PT\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-pt\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0223.778] GetLastError () returned 0x5 [0223.778] GetLastError () returned 0x5 [0223.778] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e8e6bbf, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e8e6bbf, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e8e6bbf, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0223.778] FindClose (in: hFindFile=0x24e9c0 | out: hFindFile=0x24e9c0) returned 1 [0223.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0223.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f350 | out: hHeap=0x1f0000) returned 1 [0223.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0223.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2285f0 | out: hHeap=0x1f0000) returned 1 [0223.779] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228878 [0223.779] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0223.779] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f350 [0223.779] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211fa8 [0223.779] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ro-RO\\*", lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e0f5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24ea80 [0223.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211e10 [0223.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211fa8 | out: hHeap=0x1f0000) returned 1 [0223.780] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0223.780] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e0f5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0223.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0223.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e10 | out: hHeap=0x1f0000) returned 1 [0223.780] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0223.780] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0223.780] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0223.781] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0223.781] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0223.781] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0223.781] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0223.781] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0223.781] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0223.991] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ro-RO\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ro-ro\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0223.991] GetLastError () returned 0x5 [0223.991] GetLastError () returned 0x5 [0223.991] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0223.991] FindClose (in: hFindFile=0x24ea80 | out: hFindFile=0x24ea80) returned 1 [0223.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0223.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f350 | out: hHeap=0x1f0000) returned 1 [0223.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0223.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228878 | out: hHeap=0x1f0000) returned 1 [0223.992] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228758 [0223.992] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0223.992] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e828 [0223.992] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0223.992] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ru-RU\\*", lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e4d1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24e780 [0223.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211bf0 [0223.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0223.993] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0223.993] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e4d1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0223.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d00 [0223.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211bf0 | out: hHeap=0x1f0000) returned 1 [0223.993] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0223.993] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0223.993] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0223.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0223.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0223.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0223.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0223.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d00 | out: hHeap=0x1f0000) returned 1 [0223.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0223.994] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ru-RU\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ru-ru\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0223.994] GetLastError () returned 0x5 [0223.994] GetLastError () returned 0x5 [0223.994] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0223.994] FindClose (in: hFindFile=0x24e780 | out: hFindFile=0x24e780) returned 1 [0223.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0223.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e828 | out: hHeap=0x1f0000) returned 1 [0223.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0223.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228758 | out: hHeap=0x1f0000) returned 1 [0223.996] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228a28 [0223.996] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0223.996] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f350 [0223.996] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0223.996] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\sk-SK\\*", lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e8a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24e900 [0223.996] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0223.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0223.996] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0223.996] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e8a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0223.997] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d00 [0223.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0223.997] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0223.997] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0223.997] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e38953f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e38953f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e38953f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0223.997] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0223.997] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211bf0 [0223.997] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0223.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211bf0 | out: hHeap=0x1f0000) returned 1 [0223.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d00 | out: hHeap=0x1f0000) returned 1 [0223.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0223.998] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\sk-SK\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sk-sk\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0223.998] GetLastError () returned 0x5 [0223.998] GetLastError () returned 0x5 [0223.998] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e38953f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e38953f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e38953f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0223.998] FindClose (in: hFindFile=0x24e900 | out: hFindFile=0x24e900) returned 1 [0223.999] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0223.999] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f350 | out: hHeap=0x1f0000) returned 1 [0223.999] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0223.999] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228a28 | out: hHeap=0x1f0000) returned 1 [0223.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2285a8 [0223.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0223.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f350 [0223.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d00 [0223.999] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\sl-SI\\*", lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ec25, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24e980 [0223.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211bf0 [0223.999] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d00 | out: hHeap=0x1f0000) returned 1 [0223.999] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0223.999] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ec25, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0224.000] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d00 [0224.000] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211bf0 | out: hHeap=0x1f0000) returned 1 [0224.000] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0224.000] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0224.000] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0224.000] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0224.000] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0224.000] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0224.000] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0224.000] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d00 | out: hHeap=0x1f0000) returned 1 [0224.000] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0224.000] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\sl-SI\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sl-si\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0224.001] GetLastError () returned 0x5 [0224.001] GetLastError () returned 0x5 [0224.001] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0224.001] FindClose (in: hFindFile=0x24e980 | out: hFindFile=0x24e980) returned 1 [0224.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0224.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f350 | out: hHeap=0x1f0000) returned 1 [0224.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0224.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2285a8 | out: hHeap=0x1f0000) returned 1 [0224.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228b48 [0224.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0224.002] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e1c8 [0224.002] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0224.002] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\sr-Latn-RS\\*", lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c7ae2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24ea80 [0224.002] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211f20 [0224.002] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0224.002] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211f20 | out: hHeap=0x1f0000) returned 1 [0224.002] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0224.002] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0224.002] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c7ae2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0224.002] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0224.002] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0224.002] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0224.003] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0224.003] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0224.003] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0224.003] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0224.003] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0224.003] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d00 [0224.003] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0224.003] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d00 | out: hHeap=0x1f0000) returned 1 [0224.003] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0224.003] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0224.003] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\sr-Latn-RS\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sr-latn-rs\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0224.004] GetLastError () returned 0x5 [0224.004] GetLastError () returned 0x5 [0224.004] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0224.004] FindClose (in: hFindFile=0x24ea80 | out: hFindFile=0x24ea80) returned 1 [0224.004] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0224.004] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e1c8 | out: hHeap=0x1f0000) returned 1 [0224.004] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0224.004] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228b48 | out: hHeap=0x1f0000) returned 1 [0224.004] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228a28 [0224.004] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0224.004] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e1c8 [0224.004] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0224.004] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\sv-SE\\*", lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c820e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24e900 [0224.005] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0224.005] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0224.005] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0224.005] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c820e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0224.005] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211bf0 [0224.005] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0224.005] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0224.005] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0224.005] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0224.005] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0224.005] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0224.005] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0224.005] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0224.006] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211bf0 | out: hHeap=0x1f0000) returned 1 [0224.006] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0224.006] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\sv-SE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sv-se\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0224.006] GetLastError () returned 0x5 [0224.006] GetLastError () returned 0x5 [0224.006] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0224.006] FindClose (in: hFindFile=0x24e900 | out: hFindFile=0x24e900) returned 1 [0224.007] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0224.007] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e1c8 | out: hHeap=0x1f0000) returned 1 [0224.007] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0224.007] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228a28 | out: hHeap=0x1f0000) returned 1 [0224.007] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228ab8 [0224.007] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0224.007] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f350 [0224.007] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212828 [0224.007] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\th-TH\\*", lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8602, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24eb00 [0224.007] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2128b0 [0224.007] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212828 | out: hHeap=0x1f0000) returned 1 [0224.008] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0224.008] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8602, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0224.008] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211e98 [0224.008] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2128b0 | out: hHeap=0x1f0000) returned 1 [0224.008] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0224.008] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0224.008] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0224.008] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0224.008] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211bf0 [0224.008] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0224.008] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211bf0 | out: hHeap=0x1f0000) returned 1 [0224.009] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e98 | out: hHeap=0x1f0000) returned 1 [0224.009] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0224.009] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\th-TH\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\th-th\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0224.009] GetLastError () returned 0x5 [0224.009] GetLastError () returned 0x5 [0224.009] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0224.010] FindClose (in: hFindFile=0x24eb00 | out: hFindFile=0x24eb00) returned 1 [0224.010] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0224.010] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f350 | out: hHeap=0x1f0000) returned 1 [0224.010] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0224.010] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228ab8 | out: hHeap=0x1f0000) returned 1 [0224.010] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228b48 [0224.010] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0224.010] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e828 [0224.010] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211bf0 [0224.010] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\tr-TR\\*", lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c896f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24ec40 [0224.011] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0224.011] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211bf0 | out: hHeap=0x1f0000) returned 1 [0224.011] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0224.011] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c896f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0224.011] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d88 [0224.011] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0224.011] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0224.011] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0224.012] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0224.012] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0224.012] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0224.012] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0224.012] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0224.012] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d88 | out: hHeap=0x1f0000) returned 1 [0224.012] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0224.013] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\tr-TR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tr-tr\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0224.013] GetLastError () returned 0x5 [0224.013] GetLastError () returned 0x5 [0224.013] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0224.013] FindClose (in: hFindFile=0x24ec40 | out: hFindFile=0x24ec40) returned 1 [0224.013] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0224.013] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e828 | out: hHeap=0x1f0000) returned 1 [0224.014] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0224.014] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228b48 | out: hHeap=0x1f0000) returned 1 [0224.014] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2285a8 [0224.014] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0224.014] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d508 [0224.014] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d00 [0224.014] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\uk-UA\\*", lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8ed8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24e940 [0224.014] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0224.014] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d00 | out: hHeap=0x1f0000) returned 1 [0224.014] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0224.014] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8ed8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0224.015] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0224.015] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0224.015] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0224.015] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0224.015] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0224.015] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0224.015] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211fa8 [0224.015] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0224.015] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211fa8 | out: hHeap=0x1f0000) returned 1 [0224.015] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0224.015] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0224.016] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\uk-UA\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\uk-ua\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0224.016] GetLastError () returned 0x5 [0224.016] GetLastError () returned 0x5 [0224.016] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0224.016] FindClose (in: hFindFile=0x24e940 | out: hFindFile=0x24e940) returned 1 [0224.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0224.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d508 | out: hHeap=0x1f0000) returned 1 [0224.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0224.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2285a8 | out: hHeap=0x1f0000) returned 1 [0224.017] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2287e8 [0224.017] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0224.017] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d508 [0224.017] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0224.017] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\zh-CN\\*", lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c93df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24e780 [0224.018] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0224.018] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0224.018] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0224.018] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c93df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0224.018] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0224.018] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0224.018] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0224.018] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0224.018] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e100c60, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e100c60, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e100c60, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0224.018] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0224.018] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0224.018] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0224.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0224.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0224.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0224.019] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\zh-CN\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-cn\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0224.019] GetLastError () returned 0x5 [0224.019] GetLastError () returned 0x5 [0224.020] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e100c60, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e100c60, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e100c60, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0224.020] FindClose (in: hFindFile=0x24e780 | out: hFindFile=0x24e780) returned 1 [0224.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0224.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d508 | out: hHeap=0x1f0000) returned 1 [0224.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0224.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2287e8 | out: hHeap=0x1f0000) returned 1 [0224.020] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228710 [0224.020] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0224.020] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f350 [0224.020] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0224.020] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\zh-TW\\*", lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c97fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24e900 [0224.021] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211bf0 [0224.021] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0224.021] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0224.021] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c97fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0224.021] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d00 [0224.021] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211bf0 | out: hHeap=0x1f0000) returned 1 [0224.021] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0224.021] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0224.021] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e0daa01, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e0daa01, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e100c60, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0224.021] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0224.021] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0224.021] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0224.021] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0224.021] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d00 | out: hHeap=0x1f0000) returned 1 [0224.022] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0224.022] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\zh-TW\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-tw\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0224.022] GetLastError () returned 0x5 [0224.022] GetLastError () returned 0x5 [0224.022] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e0daa01, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e0daa01, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e100c60, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0224.022] FindClose (in: hFindFile=0x24e900 | out: hFindFile=0x24e900) returned 1 [0224.023] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0224.023] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f350 | out: hHeap=0x1f0000) returned 1 [0224.023] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0224.023] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228710 | out: hHeap=0x1f0000) returned 1 [0224.023] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ce8 | out: hHeap=0x1f0000) returned 1 [0224.023] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0224.023] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0224.023] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213680 | out: hHeap=0x1f0000) returned 1 [0224.023] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212be0 | out: hHeap=0x1f0000) returned 1 [0224.023] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0224.024] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2133d8 | out: hHeap=0x1f0000) returned 1 [0224.024] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0224.024] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213818 | out: hHeap=0x1f0000) returned 1 [0224.024] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2132c8 | out: hHeap=0x1f0000) returned 1 [0224.024] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0224.024] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0224.024] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0224.024] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212a48 | out: hHeap=0x1f0000) returned 1 [0224.024] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0224.024] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0224.024] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0224.024] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e88 | out: hHeap=0x1f0000) returned 1 [0224.024] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0224.024] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0224.024] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f10 | out: hHeap=0x1f0000) returned 1 [0224.024] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0224.024] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0224.024] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0224.025] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212360 | out: hHeap=0x1f0000) returned 1 [0224.025] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2123e8 | out: hHeap=0x1f0000) returned 1 [0224.025] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211ae0 | out: hHeap=0x1f0000) returned 1 [0224.025] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212938 | out: hHeap=0x1f0000) returned 1 [0224.025] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212250 | out: hHeap=0x1f0000) returned 1 [0224.025] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2119d0 | out: hHeap=0x1f0000) returned 1 [0224.025] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2120b8 | out: hHeap=0x1f0000) returned 1 [0224.025] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212140 | out: hHeap=0x1f0000) returned 1 [0224.025] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2122d8 | out: hHeap=0x1f0000) returned 1 [0224.025] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212470 | out: hHeap=0x1f0000) returned 1 [0224.025] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b68 | out: hHeap=0x1f0000) returned 1 [0224.025] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2127a0 | out: hHeap=0x1f0000) returned 1 [0224.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212030 | out: hHeap=0x1f0000) returned 1 [0224.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2124f8 | out: hHeap=0x1f0000) returned 1 [0224.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211a58 | out: hHeap=0x1f0000) returned 1 [0224.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211c78 | out: hHeap=0x1f0000) returned 1 [0224.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212580 | out: hHeap=0x1f0000) returned 1 [0224.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212608 | out: hHeap=0x1f0000) returned 1 [0224.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f5d8 | out: hHeap=0x1f0000) returned 1 [0224.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262fe0 | out: hHeap=0x1f0000) returned 1 [0224.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0224.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234860 | out: hHeap=0x1f0000) returned 1 [0224.026] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228a28 [0224.027] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0224.027] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22db68 [0224.254] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211b68 [0224.255] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\MSInfo\\*", lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa098a4c6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71143a45, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24eb00 [0224.255] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0224.255] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219478 [0224.255] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0224.256] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b68 | out: hHeap=0x1f0000) returned 1 [0224.256] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0224.256] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa098a4c6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71143a45, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0224.256] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220580 [0224.256] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218768 [0224.256] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220580 | out: hHeap=0x1f0000) returned 1 [0224.256] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219478 | out: hHeap=0x1f0000) returned 1 [0224.256] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0224.257] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0224.257] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa098aa4a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0224.257] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0224.257] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x2191b8 [0224.257] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0224.257] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218768 | out: hHeap=0x1f0000) returned 1 [0224.257] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0224.257] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0224.257] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204cf0 [0224.258] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212030 [0224.258] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463aec8d, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x63793f1, ftLastAccessTime.dwHighDateTime=0x1d2fa0a, ftLastWriteTime.dwLowDateTime=0x463aec8d, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x5a600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe", cAlternateFileName="")) returned 1 [0224.258] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0224.258] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f7e8 [0224.258] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218558 [0224.258] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f7e8 | out: hHeap=0x1f0000) returned 1 [0224.258] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2191b8 | out: hHeap=0x1f0000) returned 1 [0224.258] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0224.468] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\MSInfo\\msinfo32.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\msinfo32.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0224.469] GetLastError () returned 0x5 [0224.469] GetLastError () returned 0x5 [0224.469] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463aec8d, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x63793f1, ftLastAccessTime.dwHighDateTime=0x1d2fa0a, ftLastWriteTime.dwLowDateTime=0x463aec8d, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x5a600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe", cAlternateFileName="")) returned 0 [0224.469] FindClose (in: hFindFile=0x24eb00 | out: hFindFile=0x24eb00) returned 1 [0224.469] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228440 [0224.469] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0224.469] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d508 [0224.469] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2129c0 [0224.470] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\MSInfo\\en-US\\*", lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa098aa4a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24e980 [0224.470] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2119d0 [0224.470] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2129c0 | out: hHeap=0x1f0000) returned 1 [0224.470] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0224.470] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa098aa4a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0224.470] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212250 [0224.470] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2119d0 | out: hHeap=0x1f0000) returned 1 [0224.470] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0224.470] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0224.471] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb38282, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x73430dfb, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x261f2e00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x7800, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="msinfo32.exe.mui", cAlternateFileName="")) returned 1 [0224.471] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239278 [0224.471] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211b68 [0224.471] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0224.471] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b68 | out: hHeap=0x1f0000) returned 1 [0224.472] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212250 | out: hHeap=0x1f0000) returned 1 [0224.472] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239278 | out: hHeap=0x1f0000) returned 1 [0224.472] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\MSInfo\\en-US\\msinfo32.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\en-us\\msinfo32.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0224.472] GetLastError () returned 0x5 [0224.473] GetLastError () returned 0x5 [0224.473] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb38282, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x73430dfb, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x261f2e00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x7800, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="msinfo32.exe.mui", cAlternateFileName="")) returned 0 [0224.473] FindClose (in: hFindFile=0x24e980 | out: hFindFile=0x24e980) returned 1 [0224.473] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0224.473] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d508 | out: hHeap=0x1f0000) returned 1 [0224.473] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0224.473] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228440 | out: hHeap=0x1f0000) returned 1 [0224.473] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218558 | out: hHeap=0x1f0000) returned 1 [0224.474] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212030 | out: hHeap=0x1f0000) returned 1 [0224.474] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cf0 | out: hHeap=0x1f0000) returned 1 [0224.474] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22db68 | out: hHeap=0x1f0000) returned 1 [0224.474] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0224.474] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228a28 | out: hHeap=0x1f0000) returned 1 [0224.474] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228950 [0224.474] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0224.474] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e1c8 [0224.474] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2119d0 [0224.474] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\*", lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca8acc6a, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xca8acc6a, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e780 [0224.475] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211fa8 [0224.475] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2119d0 | out: hHeap=0x1f0000) returned 1 [0224.475] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0224.475] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca8acc6a, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xca8acc6a, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0224.475] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211bf0 [0224.475] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211fa8 | out: hHeap=0x1f0000) returned 1 [0224.475] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0224.475] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0224.475] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca3031b3, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xca3031b3, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xca8acc6a, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x58de3, dwReserved0=0x0, dwReserved1=0x0, cFileName="LICLUA.EXE.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="LICLUA~1.ODV")) returned 1 [0224.475] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a188 [0224.475] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212140 [0224.475] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x237068 [0224.476] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212140 | out: hHeap=0x1f0000) returned 1 [0224.476] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211bf0 | out: hHeap=0x1f0000) returned 1 [0224.476] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a188 | out: hHeap=0x1f0000) returned 1 [0224.476] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\LICLUA.EXE.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\liclua.exe.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0224.477] GetFileType (hFile=0x230) returned 0x1 [0224.477] CloseHandle (hObject=0x230) returned 1 [0224.477] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x2376f8 [0224.477] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\LICLUA.EXE.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\liclua.exe.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca3031b3, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xca3031b3, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xca8acc6a, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x58de3)) returned 1 [0224.477] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2376f8 | out: hHeap=0x1f0000) returned 1 [0224.477] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x237298 [0224.477] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\LICLUA.EXE.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\liclua.exe.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca3031b3, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xca3031b3, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xca8acc6a, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x58de3)) returned 1 [0224.478] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237298 | out: hHeap=0x1f0000) returned 1 [0224.478] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x237298 [0224.478] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237298 | out: hHeap=0x1f0000) returned 1 [0224.478] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9f60362, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcae565b9, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xcae565b9, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office Setup Controller", cAlternateFileName="OFFICE~1")) returned 1 [0224.478] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238ec0 [0224.478] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2122d8 [0224.478] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0224.478] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2122d8 | out: hHeap=0x1f0000) returned 1 [0224.478] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237068 | out: hHeap=0x1f0000) returned 1 [0224.478] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ec0 | out: hHeap=0x1f0000) returned 1 [0224.478] lstrcmpW (lpString1="Office Setup Controller", lpString2=".") returned 1 [0224.478] lstrcmpW (lpString1="Office Setup Controller", lpString2="..") returned 1 [0224.478] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204ef0 [0224.479] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261160 [0224.479] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9f60362, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcae565b9, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xcae565b9, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office Setup Controller", cAlternateFileName="OFFICE~1")) returned 0 [0224.479] FindClose (in: hFindFile=0x24e780 | out: hFindFile=0x24e780) returned 1 [0224.479] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228908 [0224.479] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0224.479] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22db68 [0224.479] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2615b0 [0224.479] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\*", lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9f60362, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcae565b9, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xcae565b9, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24ec40 [0224.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261388 [0224.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2615b0 | out: hHeap=0x1f0000) returned 1 [0224.480] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0224.480] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9f60362, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcae565b9, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xcae565b9, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0224.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261668 [0224.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261388 | out: hHeap=0x1f0000) returned 1 [0224.480] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0224.480] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0224.480] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69e1fe00, ftCreationTime.dwHighDateTime=0x1d0d79d, ftLastAccessTime.dwLowDateTime=0xd9ff8cc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcae565b9, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x16835b, dwReserved0=0x0, dwReserved1=0x3, cFileName="pidgenx.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="PIDGEN~1.ODV")) returned 1 [0224.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a620 [0224.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261388 [0224.481] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x140) returned 0x22d368 [0224.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261388 | out: hHeap=0x1f0000) returned 1 [0224.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261668 | out: hHeap=0x1f0000) returned 1 [0224.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a620 | out: hHeap=0x1f0000) returned 1 [0224.481] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pidgenx.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pidgenx.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0224.482] GetFileType (hFile=0x230) returned 0x1 [0224.482] CloseHandle (hObject=0x230) returned 1 [0224.482] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x140) returned 0x21bf68 [0224.482] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pidgenx.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pidgenx.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69e1fe00, ftCreationTime.dwHighDateTime=0x1d0d79d, ftLastAccessTime.dwLowDateTime=0xd9ff8cc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcae565b9, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x16835b)) returned 1 [0224.483] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21bf68 | out: hHeap=0x1f0000) returned 1 [0224.483] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x140) returned 0x21bf68 [0224.483] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pidgenx.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pidgenx.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69e1fe00, ftCreationTime.dwHighDateTime=0x1d0d79d, ftLastAccessTime.dwLowDateTime=0xd9ff8cc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcae565b9, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x16835b)) returned 1 [0224.483] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21bf68 | out: hHeap=0x1f0000) returned 1 [0224.483] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x140) returned 0x21bf68 [0224.483] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21bf68 | out: hHeap=0x1f0000) returned 1 [0224.483] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6774927, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xc6774927, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xc6e4f79c, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x903ce, dwReserved0=0x0, dwReserved1=0x3, cFileName="pkeyconfig-office.xrm-ms.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="PKEYCO~1.ODV")) returned 1 [0224.483] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f5d8 [0224.483] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261388 [0224.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x160) returned 0x21bf68 [0224.484] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261388 | out: hHeap=0x1f0000) returned 1 [0224.484] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d368 | out: hHeap=0x1f0000) returned 1 [0224.484] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0224.484] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig-office.xrm-ms.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pkeyconfig-office.xrm-ms.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0224.484] GetFileType (hFile=0x230) returned 0x1 [0224.485] CloseHandle (hObject=0x230) returned 1 [0224.485] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x160) returned 0x22d368 [0224.485] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig-office.xrm-ms.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pkeyconfig-office.xrm-ms.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6774927, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xc6774927, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xc6e4f79c, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x903ce)) returned 1 [0224.485] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d368 | out: hHeap=0x1f0000) returned 1 [0224.485] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x160) returned 0x22d368 [0224.485] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig-office.xrm-ms.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pkeyconfig-office.xrm-ms.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6774927, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xc6774927, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xc6e4f79c, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x903ce)) returned 1 [0224.485] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d368 | out: hHeap=0x1f0000) returned 1 [0224.485] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x160) returned 0x22d368 [0224.486] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d368 | out: hHeap=0x1f0000) returned 1 [0224.486] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9ff8cc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x3, cFileName="pkeyconfig.companion.dll", cAlternateFileName="PKEYCO~1.DLL")) returned 1 [0224.486] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228cb0 [0224.486] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2614f8 [0224.486] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x106) returned 0x236d20 [0224.486] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2614f8 | out: hHeap=0x1f0000) returned 1 [0224.486] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21bf68 | out: hHeap=0x1f0000) returned 1 [0224.486] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228cb0 | out: hHeap=0x1f0000) returned 1 [0224.487] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig.companion.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pkeyconfig.companion.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0224.487] GetFileType (hFile=0x230) returned 0x1 [0224.487] CloseHandle (hObject=0x230) returned 1 [0224.488] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x22d368 [0224.488] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig.companion.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pkeyconfig.companion.dll"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9ff8cc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x48c0)) returned 1 [0224.488] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d368 | out: hHeap=0x1f0000) returned 1 [0224.488] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x22d368 [0224.488] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig.companion.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pkeyconfig.companion.dll"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9ff8cc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x48c0)) returned 1 [0224.488] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d368 | out: hHeap=0x1f0000) returned 1 [0224.488] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x22d368 [0224.489] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d368 | out: hHeap=0x1f0000) returned 1 [0224.489] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9ff8cc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x3, cFileName="pkeyconfig.companion.dll", cAlternateFileName="PKEYCO~1.DLL")) returned 0 [0224.489] FindClose (in: hFindFile=0x24ec40 | out: hFindFile=0x24ec40) returned 1 [0224.489] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236d20 | out: hHeap=0x1f0000) returned 1 [0224.489] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22db68 | out: hHeap=0x1f0000) returned 1 [0224.489] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0224.489] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228908 | out: hHeap=0x1f0000) returned 1 [0224.489] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0224.489] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261160 | out: hHeap=0x1f0000) returned 1 [0224.489] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ef0 | out: hHeap=0x1f0000) returned 1 [0224.489] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e1c8 | out: hHeap=0x1f0000) returned 1 [0224.489] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0224.490] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228950 | out: hHeap=0x1f0000) returned 1 [0224.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228950 [0224.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0224.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e1c8 [0224.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261668 [0224.490] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\OfficeSoftwareProtectionPlatform\\*", lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd99442a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd99442a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e680 [0224.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2614f8 [0224.490] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261668 | out: hHeap=0x1f0000) returned 1 [0224.490] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0224.490] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd99442a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd99442a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0224.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2610a8 [0224.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2614f8 | out: hHeap=0x1f0000) returned 1 [0224.491] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0224.491] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0224.491] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd99442a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd99442a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0224.491] FindClose (in: hFindFile=0x24e680 | out: hFindFile=0x24e680) returned 1 [0224.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2610a8 | out: hHeap=0x1f0000) returned 1 [0224.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e1c8 | out: hHeap=0x1f0000) returned 1 [0224.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0224.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228950 | out: hHeap=0x1f0000) returned 1 [0224.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228758 [0224.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0224.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e4f8 [0224.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211ae0 [0224.492] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Source Engine\\*", lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4accd6e1, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4accd6e1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e900 [0224.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212030 [0224.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211ae0 | out: hHeap=0x1f0000) returned 1 [0224.492] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0224.492] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4accd6e1, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4accd6e1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0224.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212828 [0224.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0224.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212828 | out: hHeap=0x1f0000) returned 1 [0224.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212030 | out: hHeap=0x1f0000) returned 1 [0224.493] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0224.493] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0224.493] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4accd6e1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x3ba48, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSE.EXE", cAlternateFileName="")) returned 1 [0224.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211e98 [0224.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0224.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e98 | out: hHeap=0x1f0000) returned 1 [0224.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0224.494] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Source Engine\\OSE.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\source engine\\ose.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0224.494] GetFileType (hFile=0x230) returned 0x1 [0224.494] CloseHandle (hObject=0x230) returned 1 [0224.494] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0224.494] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Source Engine\\OSE.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\source engine\\ose.exe"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4accd6e1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x3ba48)) returned 1 [0224.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0224.495] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0224.495] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Source Engine\\OSE.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\source engine\\ose.exe"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4accd6e1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x3ba48)) returned 1 [0224.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0224.495] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0224.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0224.495] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4accd6e1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x3ba48, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSE.EXE", cAlternateFileName="")) returned 0 [0224.495] FindClose (in: hFindFile=0x24e900 | out: hFindFile=0x24e900) returned 1 [0224.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0224.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e4f8 | out: hHeap=0x1f0000) returned 1 [0224.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0224.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228758 | out: hHeap=0x1f0000) returned 1 [0224.496] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2285f0 [0224.496] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0224.496] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f350 [0224.496] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2127a0 [0224.496] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\*", lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b5538f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e9c0 [0224.497] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212030 [0224.497] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2127a0 | out: hHeap=0x1f0000) returned 1 [0224.497] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0224.497] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b5538f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0224.498] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2119d0 [0224.498] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212030 | out: hHeap=0x1f0000) returned 1 [0224.498] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0224.498] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0224.498] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xff, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bears.htm", cAlternateFileName="")) returned 1 [0224.498] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0224.498] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211a58 [0224.498] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0224.498] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211a58 | out: hHeap=0x1f0000) returned 1 [0224.498] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2119d0 | out: hHeap=0x1f0000) returned 1 [0224.498] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0224.499] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0224.499] GetLastError () returned 0x5 [0224.499] GetLastError () returned 0x5 [0224.499] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x432, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bears.jpg", cAlternateFileName="")) returned 1 [0224.499] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238230 [0224.499] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212140 [0224.500] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0224.500] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212140 | out: hHeap=0x1f0000) returned 1 [0224.500] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0224.500] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238230 | out: hHeap=0x1f0000) returned 1 [0224.500] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0224.501] GetLastError () returned 0x5 [0224.502] GetLastError () returned 0x5 [0224.502] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1a3ecc0a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5d2da05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5d2da05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x285, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0224.859] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0224.859] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212360 [0224.859] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0224.859] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212360 | out: hHeap=0x1f0000) returned 1 [0224.859] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0224.860] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0224.860] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\Desktop.ini" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0224.863] GetFileType (hFile=0x200) returned 0x1 [0224.863] CloseHandle (hObject=0x200) returned 1 [0224.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0224.864] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\Desktop.ini" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1a3ecc0a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5d2da05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5d2da05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x285)) returned 1 [0224.865] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0224.865] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0224.865] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\Desktop.ini" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1a3ecc0a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5d2da05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5d2da05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x285)) returned 1 [0224.865] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0224.865] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0224.865] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0224.865] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Garden.htm", cAlternateFileName="")) returned 1 [0224.865] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0224.866] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2129c0 [0224.866] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0224.866] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2129c0 | out: hHeap=0x1f0000) returned 1 [0224.866] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0224.866] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0224.867] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0224.867] GetLastError () returned 0x5 [0224.867] GetLastError () returned 0x5 [0224.867] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x5d3f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Garden.jpg", cAlternateFileName="")) returned 1 [0224.868] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0224.868] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211bf0 [0224.868] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0224.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211bf0 | out: hHeap=0x1f0000) returned 1 [0224.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0224.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0224.869] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0224.869] GetLastError () returned 0x5 [0224.869] GetLastError () returned 0x5 [0224.870] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Green Bubbles.htm", cAlternateFileName="")) returned 1 [0224.870] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c20 [0224.870] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211a58 [0224.870] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0224.870] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211a58 | out: hHeap=0x1f0000) returned 1 [0224.870] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0224.870] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c20 | out: hHeap=0x1f0000) returned 1 [0224.871] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\Green Bubbles.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\green bubbles.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0224.871] GetLastError () returned 0x5 [0224.871] GetLastError () returned 0x5 [0224.871] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1906, dwReserved0=0x0, dwReserved1=0x0, cFileName="GreenBubbles.jpg", cAlternateFileName="")) returned 1 [0224.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239278 [0224.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212470 [0224.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0224.872] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212470 | out: hHeap=0x1f0000) returned 1 [0224.872] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0224.872] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239278 | out: hHeap=0x1f0000) returned 1 [0224.873] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\GreenBubbles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\greenbubbles.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0224.876] GetLastError () returned 0x5 [0224.876] GetLastError () returned 0x5 [0224.877] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hand Prints.htm", cAlternateFileName="")) returned 1 [0224.877] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0224.877] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211e10 [0224.877] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0224.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e10 | out: hHeap=0x1f0000) returned 1 [0224.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0224.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0224.878] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\Hand Prints.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\hand prints.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0224.879] GetLastError () returned 0x5 [0224.879] GetLastError () returned 0x5 [0224.879] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x107e, dwReserved0=0x0, dwReserved1=0x0, cFileName="HandPrints.jpg", cAlternateFileName="")) returned 1 [0224.879] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0224.879] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d00 [0224.879] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0224.880] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d00 | out: hHeap=0x1f0000) returned 1 [0224.880] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0224.880] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0224.881] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\handprints.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0224.881] GetLastError () returned 0x5 [0224.881] GetLastError () returned 0x5 [0224.881] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Orange Circles.htm", cAlternateFileName="")) returned 1 [0224.881] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238d00 [0224.881] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2128b0 [0224.881] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0224.882] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2128b0 | out: hHeap=0x1f0000) returned 1 [0224.882] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0224.882] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238d00 | out: hHeap=0x1f0000) returned 1 [0224.883] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\Orange Circles.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orange circles.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0224.883] GetLastError () returned 0x5 [0224.883] GetLastError () returned 0x5 [0224.883] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d5a533, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d5a533, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d5a533, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x18ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="OrangeCircles.jpg", cAlternateFileName="")) returned 1 [0224.883] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239160 [0224.883] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d00 [0224.883] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0224.884] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d00 | out: hHeap=0x1f0000) returned 1 [0224.884] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0224.884] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239160 | out: hHeap=0x1f0000) returned 1 [0224.885] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\OrangeCircles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orangecircles.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0224.886] GetLastError () returned 0x5 [0224.886] GetLastError () returned 0x5 [0224.886] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Peacock.htm", cAlternateFileName="")) returned 1 [0224.886] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0224.887] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2129c0 [0224.887] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0224.887] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2129c0 | out: hHeap=0x1f0000) returned 1 [0224.887] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0224.887] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0224.888] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0224.888] GetLastError () returned 0x5 [0224.888] GetLastError () returned 0x5 [0224.888] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x13fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Peacock.jpg", cAlternateFileName="")) returned 1 [0224.888] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0224.888] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2119d0 [0224.889] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0224.889] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2119d0 | out: hHeap=0x1f0000) returned 1 [0224.889] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0224.889] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0224.890] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0224.890] GetLastError () returned 0x5 [0224.890] GetLastError () returned 0x5 [0224.890] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96dccc65, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roses.htm", cAlternateFileName="")) returned 1 [0224.890] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0224.891] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211e98 [0224.891] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0224.891] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e98 | out: hHeap=0x1f0000) returned 1 [0224.891] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0224.891] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0224.892] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0224.892] GetLastError () returned 0x5 [0224.892] GetLastError () returned 0x5 [0224.892] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96dccc65, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96dccc65, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96dccc65, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x780, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roses.jpg", cAlternateFileName="")) returned 1 [0224.892] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0225.246] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211f20 [0225.246] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0225.246] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211f20 | out: hHeap=0x1f0000) returned 1 [0225.246] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0225.246] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0225.247] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0225.247] GetLastError () returned 0x5 [0225.247] GetLastError () returned 0x5 [0225.247] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shades of Blue.htm", cAlternateFileName="")) returned 1 [0225.247] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239160 [0225.247] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212580 [0225.248] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0225.248] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212580 | out: hHeap=0x1f0000) returned 1 [0225.248] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0225.248] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239160 | out: hHeap=0x1f0000) returned 1 [0225.248] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\Shades of Blue.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shades of blue.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0225.249] GetLastError () returned 0x5 [0225.249] GetLastError () returned 0x5 [0225.250] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x127e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShadesOfBlue.jpg", cAlternateFileName="")) returned 1 [0225.251] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238d00 [0225.251] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2127a0 [0225.251] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0225.251] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2127a0 | out: hHeap=0x1f0000) returned 1 [0225.251] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0225.251] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238d00 | out: hHeap=0x1f0000) returned 1 [0225.252] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\ShadesOfBlue.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shadesofblue.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0225.252] GetLastError () returned 0x5 [0225.252] GetLastError () returned 0x5 [0225.252] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d5a533, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d5a533, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d5a533, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Soft Blue.htm", cAlternateFileName="")) returned 1 [0225.253] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0225.253] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2123e8 [0225.253] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0225.253] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2123e8 | out: hHeap=0x1f0000) returned 1 [0225.253] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0225.253] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0225.254] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\Soft Blue.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\soft blue.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0225.254] GetLastError () returned 0x5 [0225.254] GetLastError () returned 0x5 [0225.254] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2949, dwReserved0=0x0, dwReserved1=0x0, cFileName="SoftBlue.jpg", cAlternateFileName="")) returned 1 [0225.254] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0225.254] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212608 [0225.254] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0225.254] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212608 | out: hHeap=0x1f0000) returned 1 [0225.255] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0225.255] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0225.255] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\softblue.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0225.255] GetLastError () returned 0x5 [0225.256] GetLastError () returned 0x5 [0225.256] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stars.htm", cAlternateFileName="")) returned 1 [0225.256] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0225.256] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212140 [0225.256] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0225.256] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212140 | out: hHeap=0x1f0000) returned 1 [0225.256] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0225.256] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0225.257] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0225.257] GetLastError () returned 0x5 [0225.257] GetLastError () returned 0x5 [0225.257] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1d51, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stars.jpg", cAlternateFileName="")) returned 1 [0225.257] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0225.257] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2129c0 [0225.257] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0225.257] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2129c0 | out: hHeap=0x1f0000) returned 1 [0225.257] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0225.258] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0225.258] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0225.258] GetLastError () returned 0x5 [0225.258] GetLastError () returned 0x5 [0225.258] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1d51, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stars.jpg", cAlternateFileName="")) returned 0 [0225.259] FindClose (in: hFindFile=0x24e9c0 | out: hFindFile=0x24e9c0) returned 1 [0225.259] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0225.259] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f350 | out: hHeap=0x1f0000) returned 1 [0225.259] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0225.259] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2285f0 | out: hHeap=0x1f0000) returned 1 [0225.259] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228a70 [0225.259] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238488 [0225.259] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e828 [0225.260] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211e98 [0225.260] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\TextConv\\*", lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b56882, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e680 [0225.260] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211c78 [0225.260] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e98 | out: hHeap=0x1f0000) returned 1 [0225.260] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0225.260] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b56882, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0225.260] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0225.260] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211c78 | out: hHeap=0x1f0000) returned 1 [0225.261] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0225.261] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0225.261] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b5787e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0225.261] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211fa8 [0225.261] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0225.261] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0225.261] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0225.261] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204db0 [0225.261] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2119d0 [0225.261] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b5787e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0 [0225.261] FindClose (in: hFindFile=0x24e680 | out: hFindFile=0x24e680) returned 1 [0225.262] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2289e0 [0225.262] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0225.262] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f1b8 [0225.262] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0225.262] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\TextConv\\en-US\\*", lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b5787e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24e5c0 [0225.262] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0225.262] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0225.262] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0225.262] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0225.262] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0225.262] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b5787e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0225.262] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211bf0 [0225.263] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0225.263] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211bf0 | out: hHeap=0x1f0000) returned 1 [0225.263] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0225.263] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0225.263] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0225.263] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b5787e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 0 [0225.263] FindClose (in: hFindFile=0x24e5c0 | out: hFindFile=0x24e5c0) returned 1 [0225.264] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0225.264] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f1b8 | out: hHeap=0x1f0000) returned 1 [0225.264] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0225.264] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2289e0 | out: hHeap=0x1f0000) returned 1 [0225.264] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211fa8 | out: hHeap=0x1f0000) returned 1 [0225.264] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2119d0 | out: hHeap=0x1f0000) returned 1 [0225.264] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204db0 | out: hHeap=0x1f0000) returned 1 [0225.264] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e828 | out: hHeap=0x1f0000) returned 1 [0225.264] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238488 | out: hHeap=0x1f0000) returned 1 [0225.264] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228a70 | out: hHeap=0x1f0000) returned 1 [0225.265] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2284d0 [0225.265] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0225.265] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e828 [0225.265] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212140 [0225.265] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Triedit\\*", lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b57d42, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e780 [0225.265] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212580 [0225.265] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212140 | out: hHeap=0x1f0000) returned 1 [0225.265] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0225.265] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b57d42, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0225.266] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211fa8 [0225.266] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212580 | out: hHeap=0x1f0000) returned 1 [0225.266] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0225.266] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0225.266] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b58502, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0225.266] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211c78 [0225.266] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211fa8 | out: hHeap=0x1f0000) returned 1 [0225.266] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0225.266] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0225.267] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204b90 [0225.267] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212030 [0225.267] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b58502, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0 [0225.267] FindClose (in: hFindFile=0x24e780 | out: hFindFile=0x24e780) returned 1 [0225.267] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228950 [0225.267] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0225.267] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e360 [0225.301] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211e98 [0225.301] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\Triedit\\en-US\\*", lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b58502, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24e9c0 [0225.302] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212608 [0225.302] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e98 | out: hHeap=0x1f0000) returned 1 [0225.302] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0225.302] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b58502, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0225.302] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d00 [0225.303] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0225.303] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d00 | out: hHeap=0x1f0000) returned 1 [0225.303] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212608 | out: hHeap=0x1f0000) returned 1 [0225.303] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0225.303] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0225.303] FindNextFileW (in: hFindFile=0x24e9c0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b58502, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 0 [0225.303] FindClose (in: hFindFile=0x24e9c0 | out: hFindFile=0x24e9c0) returned 1 [0225.304] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0225.304] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e360 | out: hHeap=0x1f0000) returned 1 [0225.304] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0225.304] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228950 | out: hHeap=0x1f0000) returned 1 [0225.304] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211c78 | out: hHeap=0x1f0000) returned 1 [0225.304] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212030 | out: hHeap=0x1f0000) returned 1 [0225.304] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204b90 | out: hHeap=0x1f0000) returned 1 [0225.304] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e828 | out: hHeap=0x1f0000) returned 1 [0225.305] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0225.305] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2284d0 | out: hHeap=0x1f0000) returned 1 [0225.305] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228cb0 [0225.305] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0225.305] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f020 [0225.305] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220238 [0225.305] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VC\\*", lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xbcd0fab8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xcc208be6, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xcc208be6, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24eb40 [0225.305] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220328 [0225.306] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220238 | out: hHeap=0x1f0000) returned 1 [0225.306] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0225.306] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xbcd0fab8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xcc208be6, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xcc208be6, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0225.306] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0225.306] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220328 | out: hHeap=0x1f0000) returned 1 [0225.306] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0225.306] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0225.306] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcaf3b103, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xcaf3b103, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xcb8a5649, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xf1c63, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdia100.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="MSDIA1~1.ODV")) returned 1 [0225.306] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21aa10 [0225.307] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0225.307] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285ae8 [0225.307] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0225.307] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0225.307] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21aa10 | out: hHeap=0x1f0000) returned 1 [0225.308] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VC\\msdia100.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia100.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0225.308] GetFileType (hFile=0x23c) returned 0x1 [0225.309] CloseHandle (hObject=0x23c) returned 1 [0225.309] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2855c0 [0225.309] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VC\\msdia100.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia100.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcaf3b103, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xcaf3b103, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xcb8a5649, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xf1c63)) returned 1 [0225.309] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2855c0 | out: hHeap=0x1f0000) returned 1 [0225.309] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2858d8 [0225.309] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VC\\msdia100.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia100.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcaf3b103, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xcaf3b103, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xcb8a5649, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xf1c63)) returned 1 [0225.310] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2858d8 | out: hHeap=0x1f0000) returned 1 [0225.310] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285098 [0225.310] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285098 | out: hHeap=0x1f0000) returned 1 [0225.310] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb8cbadb, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xcb8cbadb, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xcbf81df6, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xd0e63, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdia90.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="MSDIA9~1.ODV")) returned 1 [0225.310] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219e40 [0225.310] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220508 [0225.310] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2859e0 [0225.310] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220508 | out: hHeap=0x1f0000) returned 1 [0225.310] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285ae8 | out: hHeap=0x1f0000) returned 1 [0225.311] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219e40 | out: hHeap=0x1f0000) returned 1 [0225.311] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VC\\msdia90.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia90.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0225.311] GetFileType (hFile=0x23c) returned 0x1 [0225.312] CloseHandle (hObject=0x23c) returned 1 [0225.312] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285cf8 [0225.312] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VC\\msdia90.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia90.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb8cbadb, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xcb8cbadb, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xcbf81df6, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xd0e63)) returned 1 [0225.313] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285cf8 | out: hHeap=0x1f0000) returned 1 [0225.313] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285e00 [0225.313] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VC\\msdia90.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia90.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb8cbadb, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xcb8cbadb, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xcbf81df6, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xd0e63)) returned 1 [0225.313] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285e00 | out: hHeap=0x1f0000) returned 1 [0225.313] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285098 [0225.313] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285098 | out: hHeap=0x1f0000) returned 1 [0225.313] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb8cbadb, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xcb8cbadb, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xcbf81df6, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xd0e63, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdia90.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="MSDIA9~1.ODV")) returned 0 [0225.313] FindClose (in: hFindFile=0x24eb40 | out: hFindFile=0x24eb40) returned 1 [0225.314] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2859e0 | out: hHeap=0x1f0000) returned 1 [0225.314] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f020 | out: hHeap=0x1f0000) returned 1 [0225.314] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0225.314] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228cb0 | out: hHeap=0x1f0000) returned 1 [0225.697] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228b48 [0225.698] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0225.698] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e360 [0225.698] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0225.698] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VGX\\*", lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b59a78, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e5c0 [0225.699] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0225.699] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0225.699] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0225.699] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b59a78, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0225.699] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd88 [0225.699] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0225.699] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0225.699] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0225.699] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a69a2a7, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xb3fd6e56, ftLastAccessTime.dwHighDateTime=0x1d2fa09, ftLastWriteTime.dwLowDateTime=0x4a69a2a7, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0xf1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="VGX.dll", cAlternateFileName="")) returned 1 [0225.699] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f7e8 [0225.700] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219478 [0225.700] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f7e8 | out: hHeap=0x1f0000) returned 1 [0225.700] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd88 | out: hHeap=0x1f0000) returned 1 [0225.700] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VGX\\VGX.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vgx\\vgx.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0225.700] GetLastError () returned 0x5 [0225.701] GetLastError () returned 0x5 [0225.701] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a69a2a7, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xb3fd6e56, ftLastAccessTime.dwHighDateTime=0x1d2fa09, ftLastWriteTime.dwLowDateTime=0x4a69a2a7, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0xf1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="VGX.dll", cAlternateFileName="")) returned 0 [0225.701] FindClose (in: hFindFile=0x24e5c0 | out: hFindFile=0x24e5c0) returned 1 [0225.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219478 | out: hHeap=0x1f0000) returned 1 [0225.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e360 | out: hHeap=0x1f0000) returned 1 [0225.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0225.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228b48 | out: hHeap=0x1f0000) returned 1 [0225.701] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228908 [0225.701] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0225.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e1c8 [0225.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0225.702] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\*", lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49ecb94e, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ae972f5, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e6c0 [0225.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0225.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0225.702] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0225.702] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49ecb94e, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ae972f5, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0225.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0225.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0225.702] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0225.702] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0225.702] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0xcbb54451, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xcbb54451, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 1 [0225.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220508 [0225.703] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ce8 [0225.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220508 | out: hHeap=0x1f0000) returned 1 [0225.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0225.703] lstrcmpW (lpString1="10.0", lpString2=".") returned 1 [0225.703] lstrcmpW (lpString1="10.0", lpString2="..") returned 1 [0225.703] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204b90 [0225.703] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212140 [0225.703] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x29080, dwReserved0=0x0, dwReserved1=0x0, cFileName="vstoee.dll", cAlternateFileName="")) returned 1 [0225.703] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0225.703] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0225.703] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218978 [0225.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0225.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ce8 | out: hHeap=0x1f0000) returned 1 [0225.704] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0225.704] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1bc [0225.704] GetFileType (hFile=0x1bc) returned 0x1 [0225.705] CloseHandle (hObject=0x1bc) returned 1 [0225.705] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211f20 [0225.705] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x29080)) returned 1 [0225.705] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211f20 | out: hHeap=0x1f0000) returned 1 [0225.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211e10 [0225.706] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x29080)) returned 1 [0225.706] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e10 | out: hHeap=0x1f0000) returned 1 [0225.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2123e8 [0225.706] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2123e8 | out: hHeap=0x1f0000) returned 1 [0225.706] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6340300, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0xd6340300, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x4298, dwReserved0=0x0, dwReserved1=0x0, cFileName="vstoee100.tlb", cAlternateFileName="VSTOEE~1.TLB")) returned 1 [0225.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0225.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd88 [0225.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218a28 [0225.706] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd88 | out: hHeap=0x1f0000) returned 1 [0225.706] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218978 | out: hHeap=0x1f0000) returned 1 [0225.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0225.707] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee100.tlb" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee100.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1bc [0225.707] GetFileType (hFile=0x1bc) returned 0x1 [0225.708] CloseHandle (hObject=0x1bc) returned 1 [0225.708] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0225.708] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee100.tlb" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee100.tlb"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6340300, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0xd6340300, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x4298)) returned 1 [0225.708] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0225.708] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0225.708] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee100.tlb" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee100.tlb"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6340300, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0xd6340300, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x4298)) returned 1 [0225.708] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0225.708] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0225.708] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0225.708] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6340300, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0xd6340300, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x5898, dwReserved0=0x0, dwReserved1=0x0, cFileName="vstoee90.tlb", cAlternateFileName="")) returned 1 [0225.709] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0225.709] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f7e8 [0225.709] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218818 [0225.709] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f7e8 | out: hHeap=0x1f0000) returned 1 [0225.709] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218a28 | out: hHeap=0x1f0000) returned 1 [0225.709] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0225.709] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee90.tlb" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee90.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1bc [0225.710] GetFileType (hFile=0x1bc) returned 0x1 [0225.710] CloseHandle (hObject=0x1bc) returned 1 [0225.710] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0225.710] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee90.tlb" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee90.tlb"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6340300, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0xd6340300, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x5898)) returned 1 [0225.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0225.710] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0225.710] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee90.tlb" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee90.tlb"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6340300, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0xd6340300, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x5898)) returned 1 [0225.711] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0225.711] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0225.711] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0225.711] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6340300, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0xd6340300, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x5898, dwReserved0=0x0, dwReserved1=0x0, cFileName="vstoee90.tlb", cAlternateFileName="")) returned 0 [0225.711] FindClose (in: hFindFile=0x24e6c0 | out: hFindFile=0x24e6c0) returned 1 [0225.711] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228bd8 [0225.711] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0225.711] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f020 [0225.711] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212938 [0225.711] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\*", lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0xcbb54451, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xcbb54451, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24ea80 [0225.712] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211b68 [0225.712] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212938 | out: hHeap=0x1f0000) returned 1 [0225.712] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0225.712] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0xcbb54451, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xcbb54451, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0225.712] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212360 [0225.712] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b68 | out: hHeap=0x1f0000) returned 1 [0225.712] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0225.712] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0225.712] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4a6fdac8, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="1033", cAlternateFileName="")) returned 1 [0225.712] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211fa8 [0225.713] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212360 | out: hHeap=0x1f0000) returned 1 [0225.713] lstrcmpW (lpString1="1033", lpString2=".") returned 1 [0225.713] lstrcmpW (lpString1="1033", lpString2="..") returned 1 [0225.713] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204f70 [0225.713] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d88 [0225.713] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x18888, dwReserved0=0x0, dwReserved1=0x3, cFileName="VSTOInstaller.exe", cAlternateFileName="VSTOIN~1.EXE")) returned 1 [0225.713] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c90 [0225.713] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212360 [0225.713] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0225.713] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212360 | out: hHeap=0x1f0000) returned 1 [0225.713] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211fa8 | out: hHeap=0x1f0000) returned 1 [0225.713] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c90 | out: hHeap=0x1f0000) returned 1 [0225.714] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1bc [0225.714] GetFileType (hFile=0x1bc) returned 0x1 [0225.714] CloseHandle (hObject=0x1bc) returned 1 [0225.715] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a188 [0225.715] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.exe"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x18888)) returned 1 [0225.715] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a188 | out: hHeap=0x1f0000) returned 1 [0225.715] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a4d0 [0225.715] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.exe"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x18888)) returned 1 [0225.715] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a4d0 | out: hHeap=0x1f0000) returned 1 [0225.715] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a578 [0225.715] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a578 | out: hHeap=0x1f0000) returned 1 [0225.715] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb046382, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xcb046382, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xcbb54451, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x59b83, dwReserved0=0x0, dwReserved1=0x3, cFileName="VSTOLoader.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="VSTOLO~1.ODV")) returned 1 [0225.716] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a230 [0225.716] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212030 [0225.716] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120) returned 0x210958 [0225.716] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212030 | out: hHeap=0x1f0000) returned 1 [0225.716] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0225.716] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a230 | out: hHeap=0x1f0000) returned 1 [0225.716] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOLoader.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoloader.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1bc [0225.716] GetFileType (hFile=0x1bc) returned 0x1 [0225.717] CloseHandle (hObject=0x1bc) returned 1 [0225.717] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120) returned 0x211048 [0225.717] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOLoader.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoloader.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb046382, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xcb046382, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xcbb54451, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x59b83)) returned 1 [0225.718] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0225.718] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120) returned 0x2105e0 [0225.718] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOLoader.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoloader.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb046382, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xcb046382, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xcbb54451, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x59b83)) returned 1 [0225.718] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0225.718] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120) returned 0x210830 [0225.718] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0225.718] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0xbee8, dwReserved0=0x0, dwReserved1=0x3, cFileName="VSTOMessageProvider.dll", cAlternateFileName="VSTOME~1.DLL")) returned 1 [0225.718] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239278 [0225.719] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2119d0 [0225.719] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0225.719] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2119d0 | out: hHeap=0x1f0000) returned 1 [0225.719] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0225.719] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239278 | out: hHeap=0x1f0000) returned 1 [0225.720] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOMessageProvider.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstomessageprovider.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1bc [0225.720] GetFileType (hFile=0x1bc) returned 0x1 [0225.720] CloseHandle (hObject=0x1bc) returned 1 [0225.721] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261218 [0225.721] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOMessageProvider.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstomessageprovider.dll"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0xbee8)) returned 1 [0225.721] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261218 | out: hHeap=0x1f0000) returned 1 [0225.721] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2610a8 [0225.722] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOMessageProvider.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstomessageprovider.dll"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0xbee8)) returned 1 [0225.723] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2610a8 | out: hHeap=0x1f0000) returned 1 [0225.723] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261218 [0225.723] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261218 | out: hHeap=0x1f0000) returned 1 [0225.723] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0xbee8, dwReserved0=0x0, dwReserved1=0x3, cFileName="VSTOMessageProvider.dll", cAlternateFileName="VSTOME~1.DLL")) returned 0 [0225.723] FindClose (in: hFindFile=0x24ea80 | out: hFindFile=0x24ea80) returned 1 [0225.724] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228950 [0225.724] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0225.724] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f1b8 [0225.724] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0225.724] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\*", lpFindFileData=0x259db34 | out: lpFindFileData=0x259db34*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4a6fdac8, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e680 [0225.724] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2120b8 [0225.725] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0225.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2120b8 | out: hHeap=0x1f0000) returned 1 [0225.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0225.725] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0225.725] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259db34 | out: lpFindFileData=0x259db34*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4a6fdac8, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0225.725] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0225.725] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0225.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0225.726] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0225.726] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0225.726] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0225.726] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259db34 | out: lpFindFileData=0x259db34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a6d7a0a, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x30a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOInstallerUI.dll", cAlternateFileName="VSTOIN~1.DLL")) returned 1 [0225.726] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238e88 [0225.726] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212718 [0225.726] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0225.726] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212718 | out: hHeap=0x1f0000) returned 1 [0225.727] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0225.727] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238e88 | out: hHeap=0x1f0000) returned 1 [0225.727] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOInstallerUI.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoinstallerui.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259d844, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1bc [0225.728] GetFileType (hFile=0x1bc) returned 0x1 [0225.728] CloseHandle (hObject=0x1bc) returned 1 [0225.729] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2610a8 [0225.729] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOInstallerUI.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoinstallerui.dll"), fInfoLevelId=0x0, lpFileInformation=0x259d8d4 | out: lpFileInformation=0x259d8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a6d7a0a, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x30a0)) returned 1 [0225.729] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2610a8 | out: hHeap=0x1f0000) returned 1 [0225.729] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x261668 [0225.729] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOInstallerUI.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoinstallerui.dll"), fInfoLevelId=0x0, lpFileInformation=0x259d8e4 | out: lpFileInformation=0x259d8e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a6d7a0a, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x30a0)) returned 1 [0225.730] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261668 | out: hHeap=0x1f0000) returned 1 [0225.730] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2615b0 [0225.730] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2615b0 | out: hHeap=0x1f0000) returned 1 [0225.730] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259db34 | out: lpFindFileData=0x259db34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x5080, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOLoaderUI.dll", cAlternateFileName="VSTOLO~1.DLL")) returned 1 [0225.730] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c20 [0225.730] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211f20 [0225.730] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0225.730] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211f20 | out: hHeap=0x1f0000) returned 1 [0225.730] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0225.731] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c20 | out: hHeap=0x1f0000) returned 1 [0225.731] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOLoaderUI.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoloaderui.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259d844, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1bc [0225.732] GetFileType (hFile=0x1bc) returned 0x1 [0225.732] CloseHandle (hObject=0x1bc) returned 1 [0225.732] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a4d0 [0225.733] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOLoaderUI.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoloaderui.dll"), fInfoLevelId=0x0, lpFileInformation=0x259d8d4 | out: lpFileInformation=0x259d8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x5080)) returned 1 [0225.733] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a4d0 | out: hHeap=0x1f0000) returned 1 [0225.733] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219ee8 [0225.733] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOLoaderUI.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoloaderui.dll"), fInfoLevelId=0x0, lpFileInformation=0x259d8e4 | out: lpFileInformation=0x259d8e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x5080)) returned 1 [0225.733] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219ee8 | out: hHeap=0x1f0000) returned 1 [0225.733] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219e40 [0225.733] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219e40 | out: hHeap=0x1f0000) returned 1 [0225.734] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259db34 | out: lpFindFileData=0x259db34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x5080, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOLoaderUI.dll", cAlternateFileName="VSTOLO~1.DLL")) returned 0 [0225.734] FindClose (in: hFindFile=0x24e680 | out: hFindFile=0x24e680) returned 1 [0225.734] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0225.734] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f1b8 | out: hHeap=0x1f0000) returned 1 [0225.734] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0225.734] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228950 | out: hHeap=0x1f0000) returned 1 [0225.735] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0225.735] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d88 | out: hHeap=0x1f0000) returned 1 [0225.735] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f70 | out: hHeap=0x1f0000) returned 1 [0225.735] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f020 | out: hHeap=0x1f0000) returned 1 [0225.735] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0225.735] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228bd8 | out: hHeap=0x1f0000) returned 1 [0225.735] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218818 | out: hHeap=0x1f0000) returned 1 [0225.735] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212140 | out: hHeap=0x1f0000) returned 1 [0225.736] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204b90 | out: hHeap=0x1f0000) returned 1 [0225.736] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e1c8 | out: hHeap=0x1f0000) returned 1 [0225.736] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0225.736] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228908 | out: hHeap=0x1f0000) returned 1 [0225.736] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe00 | out: hHeap=0x1f0000) returned 1 [0225.736] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2134e8 | out: hHeap=0x1f0000) returned 1 [0226.075] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fef0 | out: hHeap=0x1f0000) returned 1 [0226.075] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ffe0 | out: hHeap=0x1f0000) returned 1 [0226.075] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213570 | out: hHeap=0x1f0000) returned 1 [0226.075] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2612d0 | out: hHeap=0x1f0000) returned 1 [0226.075] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212c68 | out: hHeap=0x1f0000) returned 1 [0226.076] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213790 | out: hHeap=0x1f0000) returned 1 [0226.076] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212cf0 | out: hHeap=0x1f0000) returned 1 [0226.076] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0226.076] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0226.076] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fb30 | out: hHeap=0x1f0000) returned 1 [0226.076] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fc20 | out: hHeap=0x1f0000) returned 1 [0226.076] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239be0 | out: hHeap=0x1f0000) returned 1 [0226.076] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262cb0 | out: hHeap=0x1f0000) returned 1 [0226.077] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0226.077] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234a58 | out: hHeap=0x1f0000) returned 1 [0226.077] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228518 [0226.077] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0226.077] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e828 [0226.077] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2358a0 [0226.077] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\Services\\*", lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c11068, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x259ee44, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24eb00 [0226.078] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235c48 [0226.078] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2358a0 | out: hHeap=0x1f0000) returned 1 [0226.078] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0226.078] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c11068, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x259ee44, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0226.078] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235de8 [0226.078] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235c48 | out: hHeap=0x1f0000) returned 1 [0226.078] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0226.079] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0226.079] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440ad34a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440ad34a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440ad34a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa8e, dwReserved0=0x259ee44, dwReserved1=0x3, cFileName="verisign.bmp", cAlternateFileName="")) returned 1 [0226.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0226.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235b78 [0226.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2217a0 [0226.079] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0226.079] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235de8 | out: hHeap=0x1f0000) returned 1 [0226.079] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0226.080] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\Services\\verisign.bmp" (normalized: "c:\\program files\\common files\\services\\verisign.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e690, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0226.081] GetLastError () returned 0x5 [0226.081] GetLastError () returned 0x5 [0226.081] FindNextFileW (in: hFindFile=0x24eb00, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440ad34a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440ad34a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440ad34a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa8e, dwReserved0=0x259ee44, dwReserved1=0x3, cFileName="verisign.bmp", cAlternateFileName="")) returned 0 [0226.081] FindClose (in: hFindFile=0x24eb00 | out: hFindFile=0x24eb00) returned 1 [0226.081] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0226.082] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e828 | out: hHeap=0x1f0000) returned 1 [0226.082] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0226.082] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228518 | out: hHeap=0x1f0000) returned 1 [0226.082] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228638 [0226.082] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0226.082] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22db68 [0226.082] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a81c0 [0226.083] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\System\\*", lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c5f95f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x259ee44, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24e780 [0226.083] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8270 [0226.083] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a81c0 | out: hHeap=0x1f0000) returned 1 [0226.083] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0226.083] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c5f95f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x259ee44, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0226.083] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a82c8 [0226.084] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x218150 [0226.084] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a82c8 | out: hHeap=0x1f0000) returned 1 [0226.084] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8270 | out: hHeap=0x1f0000) returned 1 [0226.084] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0226.084] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0226.084] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0cb0a3f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x259ee44, dwReserved1=0x3, cFileName="ado", cAlternateFileName="")) returned 1 [0226.084] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8530 [0226.084] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217750 [0226.085] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8530 | out: hHeap=0x1f0000) returned 1 [0226.085] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218150 | out: hHeap=0x1f0000) returned 1 [0226.085] lstrcmpW (lpString1="ado", lpString2=".") returned 1 [0226.085] lstrcmpW (lpString1="ado", lpString2="..") returned 1 [0226.085] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204f70 [0226.085] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235b78 [0226.085] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d5a533, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d5a533, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d5a533, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x259ee44, dwReserved1=0x3, cFileName="DirectDB.dll", cAlternateFileName="")) returned 1 [0226.085] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0226.085] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a87f0 [0226.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217650 [0226.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a87f0 | out: hHeap=0x1f0000) returned 1 [0226.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217750 | out: hHeap=0x1f0000) returned 1 [0226.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0226.087] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\DirectDB.dll" (normalized: "c:\\program files\\common files\\system\\directdb.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e690, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0226.087] GetLastError () returned 0x5 [0226.087] GetLastError () returned 0x5 [0226.087] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb3579, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x259ee44, dwReserved1=0x3, cFileName="en-US", cAlternateFileName="")) returned 1 [0226.087] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8848 [0226.088] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217d50 [0226.088] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8848 | out: hHeap=0x1f0000) returned 1 [0226.088] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217650 | out: hHeap=0x1f0000) returned 1 [0226.088] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0226.088] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0226.088] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238e18 [0226.088] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236058 [0226.088] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f70 | out: hHeap=0x1f0000) returned 1 [0226.088] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d7f179, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x259ee44, dwReserved1=0x3, cFileName="msadc", cAlternateFileName="")) returned 1 [0226.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a80b8 [0226.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217ed0 [0226.089] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a80b8 | out: hHeap=0x1f0000) returned 1 [0226.089] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217d50 | out: hHeap=0x1f0000) returned 1 [0226.089] lstrcmpW (lpString1="msadc", lpString2=".") returned 1 [0226.089] lstrcmpW (lpString1="msadc", lpString2="..") returned 1 [0226.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x48) returned 0x225ec8 [0226.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236190 [0226.089] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238e18 | out: hHeap=0x1f0000) returned 1 [0226.089] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d8186d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x259ee44, dwReserved1=0x3, cFileName="Ole DB", cAlternateFileName="OLEDB~1")) returned 1 [0226.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8530 [0226.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x218050 [0226.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8530 | out: hHeap=0x1f0000) returned 1 [0226.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217ed0 | out: hHeap=0x1f0000) returned 1 [0226.090] lstrcmpW (lpString1="Ole DB", lpString2=".") returned 1 [0226.090] lstrcmpW (lpString1="Ole DB", lpString2="..") returned 1 [0226.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2360c0 [0226.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2358a0 [0226.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225ec8 | out: hHeap=0x1f0000) returned 1 [0226.090] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440d35a9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440d35a9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440d35a9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd0a00, dwReserved0=0x259ee44, dwReserved1=0x3, cFileName="wab32.dll", cAlternateFileName="")) returned 1 [0226.091] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0226.091] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a81c0 [0226.091] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x2182d0 [0226.091] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a81c0 | out: hHeap=0x1f0000) returned 1 [0226.091] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218050 | out: hHeap=0x1f0000) returned 1 [0226.091] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0226.092] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\wab32.dll" (normalized: "c:\\program files\\common files\\system\\wab32.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e690, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0226.092] GetLastError () returned 0x5 [0226.092] GetLastError () returned 0x5 [0226.092] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440d35a9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440d35a9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440d35a9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xeb600, dwReserved0=0x259ee44, dwReserved1=0x3, cFileName="wab32res.dll", cAlternateFileName="")) returned 1 [0226.092] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0226.092] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8690 [0226.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217f50 [0226.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8690 | out: hHeap=0x1f0000) returned 1 [0226.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2182d0 | out: hHeap=0x1f0000) returned 1 [0226.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0226.094] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\wab32res.dll" (normalized: "c:\\program files\\common files\\system\\wab32res.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e690, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0226.094] GetLastError () returned 0x5 [0226.094] GetLastError () returned 0x5 [0226.094] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440d35a9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440d35a9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440d35a9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xeb600, dwReserved0=0x259ee44, dwReserved1=0x3, cFileName="wab32res.dll", cAlternateFileName="")) returned 0 [0226.094] FindClose (in: hFindFile=0x24e780 | out: hFindFile=0x24e780) returned 1 [0226.095] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228758 [0226.095] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0226.095] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e828 [0226.095] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235c48 [0226.095] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\System\\ado\\*", lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0cb0a3f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName=".", cAlternateFileName="")) returned 0x24ed00 [0226.095] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235de8 [0226.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235c48 | out: hHeap=0x1f0000) returned 1 [0226.096] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0226.097] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0cb0a3f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="..", cAlternateFileName="")) returned 1 [0226.097] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235c48 [0226.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235de8 | out: hHeap=0x1f0000) returned 1 [0226.098] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0226.098] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0226.098] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52a0c6a1, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x52a0c6a1, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x52a0c6a1, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3a08, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="adojavas.inc", cAlternateFileName="")) returned 1 [0226.098] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0226.098] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235eb8 [0226.098] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221118 [0226.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235eb8 | out: hHeap=0x1f0000) returned 1 [0226.099] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235c48 | out: hHeap=0x1f0000) returned 1 [0226.099] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0226.099] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\ado\\adojavas.inc" (normalized: "c:\\program files\\common files\\system\\ado\\adojavas.inc"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0226.101] GetLastError () returned 0x5 [0226.101] GetLastError () returned 0x5 [0226.101] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x529e643a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x529e643a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x529e643a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3b5b, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="adovbs.inc", cAlternateFileName="")) returned 1 [0226.101] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0226.101] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235c48 [0226.101] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220d88 [0226.101] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235c48 | out: hHeap=0x1f0000) returned 1 [0226.102] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0226.102] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0226.102] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\ado\\adovbs.inc" (normalized: "c:\\program files\\common files\\system\\ado\\adovbs.inc"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0226.103] GetLastError () returned 0x5 [0226.103] GetLastError () returned 0x5 [0226.103] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb2730, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="en-US", cAlternateFileName="")) returned 1 [0226.103] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235c48 [0226.103] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0226.103] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0226.103] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0226.103] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204c70 [0226.104] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235de8 [0226.104] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43854cb5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43854cb5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43854cb5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="msader15.dll", cAlternateFileName="")) returned 1 [0226.104] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0226.104] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235eb8 [0226.104] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220f50 [0226.104] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235eb8 | out: hHeap=0x1f0000) returned 1 [0226.104] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235c48 | out: hHeap=0x1f0000) returned 1 [0226.104] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0226.105] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\ado\\msader15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msader15.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0226.105] GetLastError () returned 0x5 [0226.105] GetLastError () returned 0x5 [0226.105] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463fb128, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xced4b5c5, ftLastAccessTime.dwHighDateTime=0x1d2fa09, ftLastWriteTime.dwLowDateTime=0x463fb128, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x12d400, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="msado15.dll", cAlternateFileName="")) returned 1 [0226.106] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0226.106] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235eb8 [0226.106] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221a00 [0226.106] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235eb8 | out: hHeap=0x1f0000) returned 1 [0226.106] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0226.106] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0226.107] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\ado\\msado15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msado15.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0226.107] GetLastError () returned 0x5 [0226.107] GetLastError () returned 0x5 [0226.107] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41cc3017, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41cc3017, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41cc3017, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc600, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="msado20.tlb", cAlternateFileName="")) returned 1 [0226.107] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0226.107] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235c48 [0226.108] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220cf0 [0226.108] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235c48 | out: hHeap=0x1f0000) returned 1 [0226.108] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0226.108] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0226.108] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\ado\\msado20.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado20.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0226.109] GetLastError () returned 0x5 [0226.109] GetLastError () returned 0x5 [0226.109] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41cc3017, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41cc3017, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41cc3017, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd200, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="msado21.tlb", cAlternateFileName="")) returned 1 [0226.109] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0226.109] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235eb8 [0226.109] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220fe8 [0226.109] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235eb8 | out: hHeap=0x1f0000) returned 1 [0226.109] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0226.109] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0226.110] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\ado\\msado21.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado21.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0226.110] GetLastError () returned 0x5 [0226.110] GetLastError () returned 0x5 [0226.110] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41cc3017, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41cc3017, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41cc3017, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="msado25.tlb", cAlternateFileName="")) returned 1 [0226.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0226.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235c48 [0226.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220d88 [0226.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235c48 | out: hHeap=0x1f0000) returned 1 [0226.111] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0226.111] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0226.111] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\ado\\msado25.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado25.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0226.406] GetLastError () returned 0x5 [0226.406] GetLastError () returned 0x5 [0226.406] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41cc3017, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41cc3017, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41cc3017, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x11400, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="msado26.tlb", cAlternateFileName="")) returned 1 [0226.406] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0226.406] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235c48 [0226.406] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2217a0 [0226.406] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235c48 | out: hHeap=0x1f0000) returned 1 [0226.406] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0226.407] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0226.417] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\ado\\msado26.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado26.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0226.417] GetLastError () returned 0x5 [0226.417] GetLastError () returned 0x5 [0226.417] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41cc3017, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41cc3017, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41cc3017, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x11600, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="msado27.tlb", cAlternateFileName="")) returned 1 [0226.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0226.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235c48 [0226.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220cf0 [0226.417] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235c48 | out: hHeap=0x1f0000) returned 1 [0226.418] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0226.418] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0226.418] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\ado\\msado27.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado27.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0226.418] GetLastError () returned 0x5 [0226.418] GetLastError () returned 0x5 [0226.418] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c6f28a5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4c6f28a5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4c6f28a5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x11400, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="msado28.tlb", cAlternateFileName="")) returned 1 [0226.419] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0226.419] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235c48 [0226.419] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2218d0 [0226.419] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235c48 | out: hHeap=0x1f0000) returned 1 [0226.419] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0226.419] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0226.419] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\ado\\msado28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado28.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0226.419] GetLastError () returned 0x5 [0226.420] GetLastError () returned 0x5 [0226.420] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c6f28a5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4c6f28a5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4c6f28a5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x11400, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="msado60.tlb", cAlternateFileName="")) returned 1 [0226.420] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0226.420] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235f20 [0226.420] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221838 [0226.420] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235f20 | out: hHeap=0x1f0000) returned 1 [0226.420] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0226.420] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0226.420] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\ado\\msado60.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado60.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0226.420] GetLastError () returned 0x5 [0226.420] GetLastError () returned 0x5 [0226.421] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463fb128, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xd005e363, ftLastAccessTime.dwHighDateTime=0x1d2fa09, ftLastWriteTime.dwLowDateTime=0x463fb128, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x58e00, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="msadomd.dll", cAlternateFileName="")) returned 1 [0226.421] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0226.421] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235c48 [0226.421] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221a98 [0226.421] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235c48 | out: hHeap=0x1f0000) returned 1 [0226.421] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0226.421] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0226.421] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\ado\\msadomd.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadomd.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0226.421] GetLastError () returned 0x5 [0226.421] GetLastError () returned 0x5 [0226.421] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x437960ad, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x437960ad, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x437960ad, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3600, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="msadomd28.tlb", cAlternateFileName="")) returned 1 [0226.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0226.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235c48 [0226.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221b30 [0226.422] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235c48 | out: hHeap=0x1f0000) returned 1 [0226.422] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0226.422] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0226.422] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\ado\\msadomd28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msadomd28.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0226.422] GetLastError () returned 0x5 [0226.422] GetLastError () returned 0x5 [0226.423] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41da7e83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41da7e83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41da7e83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb200, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="msador15.dll", cAlternateFileName="")) returned 1 [0226.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0226.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235c48 [0226.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220e20 [0226.423] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235c48 | out: hHeap=0x1f0000) returned 1 [0226.423] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0226.423] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0226.423] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\ado\\msador15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msador15.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0226.423] GetLastError () returned 0x5 [0226.423] GetLastError () returned 0x5 [0226.424] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x438ed65e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x438ed65e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x438ed65e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x8c00, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="msador28.tlb", cAlternateFileName="")) returned 1 [0226.424] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0226.424] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235c48 [0226.424] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221708 [0226.424] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235c48 | out: hHeap=0x1f0000) returned 1 [0226.424] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0226.424] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0226.425] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\ado\\msador28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msador28.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0226.425] GetLastError () returned 0x5 [0226.425] GetLastError () returned 0x5 [0226.425] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463fb128, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xc5b43065, ftLastAccessTime.dwHighDateTime=0x1d2fa09, ftLastWriteTime.dwLowDateTime=0x463fb128, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x62e00, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="msadox.dll", cAlternateFileName="")) returned 1 [0226.425] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0226.425] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235f88 [0226.425] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221a98 [0226.425] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235f88 | out: hHeap=0x1f0000) returned 1 [0226.425] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0226.426] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0226.426] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\ado\\msadox.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadox.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0226.426] GetLastError () returned 0x5 [0226.426] GetLastError () returned 0x5 [0226.426] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43c5ad98, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43c5ad98, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43c5ad98, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="msadox28.tlb", cAlternateFileName="")) returned 1 [0226.426] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0226.426] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235c48 [0226.426] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2217a0 [0226.426] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235c48 | out: hHeap=0x1f0000) returned 1 [0226.427] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0226.427] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0226.427] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\ado\\msadox28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msadox28.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0226.427] GetLastError () returned 0x5 [0226.427] GetLastError () returned 0x5 [0226.427] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x437960ad, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x437960ad, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x437960ad, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x16400, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="msadrh15.dll", cAlternateFileName="")) returned 1 [0226.427] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0226.427] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235c48 [0226.427] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221b30 [0226.427] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235c48 | out: hHeap=0x1f0000) returned 1 [0226.427] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0226.428] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0226.428] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\ado\\msadrh15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadrh15.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0226.428] GetLastError () returned 0x5 [0226.428] GetLastError () returned 0x5 [0226.428] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x437960ad, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x437960ad, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x437960ad, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x16400, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="msadrh15.dll", cAlternateFileName="")) returned 0 [0226.428] FindClose (in: hFindFile=0x24ed00 | out: hFindFile=0x24ed00) returned 1 [0226.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228518 [0226.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0226.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e1c8 [0226.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd88 [0226.429] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\System\\ado\\en-US\\*", lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb2730, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24e5c0 [0226.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f770 [0226.429] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd88 | out: hHeap=0x1f0000) returned 1 [0226.429] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0226.429] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb2730, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0226.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f7e8 [0226.429] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f770 | out: hHeap=0x1f0000) returned 1 [0226.430] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0226.430] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0226.430] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b9483e2, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb3fb1900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="msader15.dll.mui", cAlternateFileName="")) returned 1 [0226.430] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238ec0 [0226.430] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0226.430] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219478 [0226.430] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0226.430] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f7e8 | out: hHeap=0x1f0000) returned 1 [0226.430] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ec0 | out: hHeap=0x1f0000) returned 1 [0226.430] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\ado\\en-US\\msader15.dll.mui" (normalized: "c:\\program files\\common files\\system\\ado\\en-us\\msader15.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0226.430] GetLastError () returned 0x5 [0226.431] GetLastError () returned 0x5 [0226.431] FindNextFileW (in: hFindFile=0x24e5c0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b9483e2, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb3fb1900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="msader15.dll.mui", cAlternateFileName="")) returned 0 [0226.431] FindClose (in: hFindFile=0x24e5c0 | out: hFindFile=0x24e5c0) returned 1 [0226.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219478 | out: hHeap=0x1f0000) returned 1 [0226.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e1c8 | out: hHeap=0x1f0000) returned 1 [0226.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0226.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228518 | out: hHeap=0x1f0000) returned 1 [0226.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0226.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235de8 | out: hHeap=0x1f0000) returned 1 [0226.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c70 | out: hHeap=0x1f0000) returned 1 [0226.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e828 | out: hHeap=0x1f0000) returned 1 [0226.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0226.432] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228758 | out: hHeap=0x1f0000) returned 1 [0226.432] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228950 [0226.432] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0226.432] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e1c8 [0226.432] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235de8 [0226.432] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\System\\en-US\\*", lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb3579, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName=".", cAlternateFileName="")) returned 0x24e6c0 [0226.432] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235f20 [0226.432] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235de8 | out: hHeap=0x1f0000) returned 1 [0226.432] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0226.432] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb3579, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="..", cAlternateFileName="")) returned 1 [0226.432] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235f88 [0226.432] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235f20 | out: hHeap=0x1f0000) returned 1 [0226.432] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0226.432] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0226.432] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dd86035, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x755f99d9, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x75fdf500, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="wab32res.dll.mui", cAlternateFileName="")) returned 1 [0226.432] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2391d0 [0226.433] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235de8 [0226.433] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220cf0 [0226.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235de8 | out: hHeap=0x1f0000) returned 1 [0226.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235f88 | out: hHeap=0x1f0000) returned 1 [0226.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2391d0 | out: hHeap=0x1f0000) returned 1 [0226.433] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\en-US\\wab32res.dll.mui" (normalized: "c:\\program files\\common files\\system\\en-us\\wab32res.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0226.433] GetLastError () returned 0x5 [0226.433] GetLastError () returned 0x5 [0226.433] FindNextFileW (in: hFindFile=0x24e6c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dd86035, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x755f99d9, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x75fdf500, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="wab32res.dll.mui", cAlternateFileName="")) returned 0 [0226.433] FindClose (in: hFindFile=0x24e6c0 | out: hFindFile=0x24e6c0) returned 1 [0226.434] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0226.434] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e1c8 | out: hHeap=0x1f0000) returned 1 [0226.434] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0226.434] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228950 | out: hHeap=0x1f0000) returned 1 [0226.434] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2285f0 [0226.434] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0226.434] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e1c8 [0226.434] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235c48 [0226.434] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\System\\msadc\\*", lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d7f179, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName=".", cAlternateFileName="")) returned 0x24e940 [0226.434] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235de8 [0226.434] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235c48 | out: hHeap=0x1f0000) returned 1 [0226.434] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0226.435] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d7f179, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="..", cAlternateFileName="")) returned 1 [0226.435] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235f20 [0226.435] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235de8 | out: hHeap=0x1f0000) returned 1 [0226.435] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0226.435] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0226.435] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41da7e83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41da7e83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41da7e83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x276, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="adcjavas.inc", cAlternateFileName="")) returned 1 [0226.435] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0226.435] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235c48 [0226.435] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221118 [0226.435] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235c48 | out: hHeap=0x1f0000) returned 1 [0226.435] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235f20 | out: hHeap=0x1f0000) returned 1 [0226.435] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0226.435] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\msadc\\adcjavas.inc" (normalized: "c:\\program files\\common files\\system\\msadc\\adcjavas.inc"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0226.436] GetLastError () returned 0x5 [0226.437] GetLastError () returned 0x5 [0226.437] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41dce0ea, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41dce0ea, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41dce0ea, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x26f, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="adcvbs.inc", cAlternateFileName="")) returned 1 [0226.437] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0226.437] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235f20 [0226.437] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220f50 [0226.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235f20 | out: hHeap=0x1f0000) returned 1 [0226.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0226.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0226.437] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\msadc\\adcvbs.inc" (normalized: "c:\\program files\\common files\\system\\msadc\\adcvbs.inc"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0226.438] GetLastError () returned 0x5 [0226.438] GetLastError () returned 0x5 [0226.438] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d805e9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="en-US", cAlternateFileName="")) returned 1 [0226.438] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235c48 [0226.438] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221540 [0226.438] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235c48 | out: hHeap=0x1f0000) returned 1 [0226.438] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0226.438] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0226.438] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0226.438] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204bf0 [0226.438] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fa40 [0226.438] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41da7e83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41da7e83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41da7e83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa9c00, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="msadce.dll", cAlternateFileName="")) returned 1 [0226.438] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0226.439] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235de8 [0226.439] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221a00 [0226.439] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235de8 | out: hHeap=0x1f0000) returned 1 [0226.439] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0226.439] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0226.439] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\msadc\\msadce.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadce.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0226.440] GetLastError () returned 0x5 [0226.440] GetLastError () returned 0x5 [0226.440] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41dce0ea, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41dce0ea, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41dce0ea, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="msadcer.dll", cAlternateFileName="")) returned 1 [0226.440] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0226.440] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235c48 [0226.440] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221a98 [0226.440] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235c48 | out: hHeap=0x1f0000) returned 1 [0226.440] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0226.440] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0226.441] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\msadc\\msadcer.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadcer.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0226.441] GetLastError () returned 0x5 [0226.441] GetLastError () returned 0x5 [0226.441] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41da7e83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41da7e83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41da7e83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3b400, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="msadco.dll", cAlternateFileName="")) returned 1 [0226.441] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0226.441] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235c48 [0226.441] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221248 [0226.441] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235c48 | out: hHeap=0x1f0000) returned 1 [0226.441] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0226.441] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0226.442] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\msadc\\msadco.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadco.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0226.442] GetLastError () returned 0x5 [0226.442] GetLastError () returned 0x5 [0226.442] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41da7e83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41da7e83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41da7e83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="msadcor.dll", cAlternateFileName="")) returned 1 [0226.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0226.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235c48 [0226.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221670 [0226.442] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235c48 | out: hHeap=0x1f0000) returned 1 [0226.443] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0226.443] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0226.444] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\msadc\\msadcor.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadcor.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0226.445] GetLastError () returned 0x5 [0226.445] GetLastError () returned 0x5 [0226.445] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440870df, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440870df, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440870df, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x44400, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="msadds.dll", cAlternateFileName="")) returned 1 [0226.445] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0226.445] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235c48 [0226.445] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220eb8 [0226.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235c48 | out: hHeap=0x1f0000) returned 1 [0226.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0226.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0226.445] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\msadc\\msadds.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadds.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0226.446] GetLastError () returned 0x5 [0226.446] GetLastError () returned 0x5 [0226.446] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44060e78, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x44060e78, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x44060e78, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="msaddsr.dll", cAlternateFileName="")) returned 1 [0226.446] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0226.446] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235c48 [0226.446] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221248 [0226.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235c48 | out: hHeap=0x1f0000) returned 1 [0226.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0226.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0226.447] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\msadc\\msaddsr.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msaddsr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0226.447] GetLastError () returned 0x5 [0226.447] GetLastError () returned 0x5 [0226.447] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41d5b9b4, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41d5b9b4, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41d5b9b4, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="msdaprsr.dll", cAlternateFileName="")) returned 1 [0226.447] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0226.447] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235c48 [0226.447] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221670 [0226.448] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235c48 | out: hHeap=0x1f0000) returned 1 [0226.448] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0226.448] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0226.448] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\msadc\\msdaprsr.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaprsr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0226.448] GetLastError () returned 0x5 [0226.448] GetLastError () returned 0x5 [0226.448] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41d5b9b4, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41d5b9b4, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41d5b9b4, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x57000, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="msdaprst.dll", cAlternateFileName="")) returned 1 [0226.449] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0226.449] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235de8 [0226.449] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221a00 [0226.449] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235de8 | out: hHeap=0x1f0000) returned 1 [0226.449] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0226.449] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0226.449] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\msadc\\msdaprst.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaprst.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0226.449] GetLastError () returned 0x5 [0226.449] GetLastError () returned 0x5 [0226.450] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44060e78, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x44060e78, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x44060e78, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x36200, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="msdarem.dll", cAlternateFileName="")) returned 1 [0226.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0226.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235c48 [0226.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220d88 [0226.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235c48 | out: hHeap=0x1f0000) returned 1 [0226.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0226.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0226.450] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\msadc\\msdarem.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdarem.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0226.450] GetLastError () returned 0x5 [0226.450] GetLastError () returned 0x5 [0226.451] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4403ac10, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4403ac10, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4403ac10, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="msdaremr.dll", cAlternateFileName="")) returned 1 [0226.451] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0226.451] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235c48 [0226.451] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221a98 [0226.451] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235c48 | out: hHeap=0x1f0000) returned 1 [0226.451] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0226.451] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0226.451] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\msadc\\msdaremr.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaremr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0226.451] GetLastError () returned 0x5 [0226.452] GetLastError () returned 0x5 [0226.452] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440870df, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440870df, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440870df, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x7c00, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="msdfmap.dll", cAlternateFileName="")) returned 1 [0226.452] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0226.452] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235c48 [0226.452] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221b30 [0226.452] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235c48 | out: hHeap=0x1f0000) returned 1 [0226.452] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0226.452] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0226.453] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\msadc\\msdfmap.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdfmap.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0226.453] GetLastError () returned 0x5 [0226.453] GetLastError () returned 0x5 [0226.453] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440870df, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440870df, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440870df, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x7c00, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="msdfmap.dll", cAlternateFileName="")) returned 0 [0226.454] FindClose (in: hFindFile=0x24e940 | out: hFindFile=0x24e940) returned 1 [0226.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228680 [0226.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0226.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e360 [0226.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0226.454] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\System\\msadc\\en-US\\*", lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d805e9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24ea80 [0226.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f7e8 [0226.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0226.455] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0226.952] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d805e9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0226.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0226.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f7e8 | out: hHeap=0x1f0000) returned 1 [0226.953] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0226.953] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0226.953] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b99489e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb198bf00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="msadcer.dll.mui", cAlternateFileName="")) returned 1 [0226.953] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0226.953] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0226.953] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219318 [0226.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0226.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0226.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0226.954] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\msadc\\en-US\\msadcer.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msadcer.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0226.954] GetLastError () returned 0x5 [0226.954] GetLastError () returned 0x5 [0226.955] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b9e0d51, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb2c9ec00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="msadcor.dll.mui", cAlternateFileName="")) returned 1 [0226.955] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0226.955] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0226.957] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218978 [0226.957] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0226.957] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219318 | out: hHeap=0x1f0000) returned 1 [0226.957] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0226.958] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\msadc\\en-US\\msadcor.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msadcor.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0226.958] GetLastError () returned 0x5 [0226.958] GetLastError () returned 0x5 [0226.959] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ba9f918, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb198bf00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x3800, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="msaddsr.dll.mui", cAlternateFileName="")) returned 1 [0226.959] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0226.959] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2203a0 [0226.959] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ce8 [0226.959] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2203a0 | out: hHeap=0x1f0000) returned 1 [0226.959] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218978 | out: hHeap=0x1f0000) returned 1 [0226.959] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0226.960] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\msadc\\en-US\\msaddsr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msaddsr.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0226.960] GetLastError () returned 0x5 [0226.960] GetLastError () returned 0x5 [0226.960] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ba9f918, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb198bf00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="msdaprsr.dll.mui", cAlternateFileName="")) returned 1 [0226.960] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c20 [0226.960] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fc98 [0226.960] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219478 [0226.961] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fc98 | out: hHeap=0x1f0000) returned 1 [0226.961] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ce8 | out: hHeap=0x1f0000) returned 1 [0226.961] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c20 | out: hHeap=0x1f0000) returned 1 [0226.961] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaprsr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msdaprsr.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0226.961] GetLastError () returned 0x5 [0226.962] GetLastError () returned 0x5 [0226.962] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb38282, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb198bf00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="msdaremr.dll.mui", cAlternateFileName="")) returned 1 [0226.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238f68 [0226.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0226.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218768 [0226.962] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0226.962] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219478 | out: hHeap=0x1f0000) returned 1 [0226.962] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238f68 | out: hHeap=0x1f0000) returned 1 [0226.963] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaremr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msdaremr.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0226.963] GetLastError () returned 0x5 [0226.963] GetLastError () returned 0x5 [0226.963] FindNextFileW (in: hFindFile=0x24ea80, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb38282, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb198bf00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="msdaremr.dll.mui", cAlternateFileName="")) returned 0 [0226.963] FindClose (in: hFindFile=0x24ea80 | out: hFindFile=0x24ea80) returned 1 [0226.964] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218768 | out: hHeap=0x1f0000) returned 1 [0226.964] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e360 | out: hHeap=0x1f0000) returned 1 [0226.964] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0226.964] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228680 | out: hHeap=0x1f0000) returned 1 [0226.964] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0226.964] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fa40 | out: hHeap=0x1f0000) returned 1 [0226.964] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bf0 | out: hHeap=0x1f0000) returned 1 [0226.964] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e1c8 | out: hHeap=0x1f0000) returned 1 [0226.964] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0226.964] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2285f0 | out: hHeap=0x1f0000) returned 1 [0226.965] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2285a8 [0226.965] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0226.965] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e1c8 [0226.965] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235f20 [0226.965] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\System\\Ole DB\\*", lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d8186d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName=".", cAlternateFileName="")) returned 0x24ed00 [0226.966] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235f88 [0226.966] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235f20 | out: hHeap=0x1f0000) returned 1 [0226.966] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0226.966] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d8186d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="..", cAlternateFileName="")) returned 1 [0226.967] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235700 [0226.967] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235f88 | out: hHeap=0x1f0000) returned 1 [0226.967] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0226.967] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0226.967] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d8245b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="en-US", cAlternateFileName="")) returned 1 [0226.967] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235f20 [0226.967] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221118 [0226.967] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235f20 | out: hHeap=0x1f0000) returned 1 [0226.967] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0226.967] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0226.967] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0226.967] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204cf0 [0226.968] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2201c0 [0226.968] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440870df, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440870df, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440870df, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x18600, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="msdaosp.dll", cAlternateFileName="")) returned 1 [0226.968] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0226.968] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235f20 [0226.968] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221a98 [0226.968] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235f20 | out: hHeap=0x1f0000) returned 1 [0226.968] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0226.968] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0226.968] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\Ole DB\\msdaosp.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdaosp.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0226.969] GetLastError () returned 0x5 [0226.969] GetLastError () returned 0x5 [0226.969] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440870df, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440870df, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440870df, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x5be00, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="msdaps.dll", cAlternateFileName="")) returned 1 [0226.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0226.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235700 [0226.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220f50 [0226.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0226.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0226.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0226.970] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\Ole DB\\msdaps.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdaps.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0226.970] GetLastError () returned 0x5 [0226.970] GetLastError () returned 0x5 [0226.970] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41d0f4ea, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41d0f4ea, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41d0f4ea, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xaa800, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="msdasql.dll", cAlternateFileName="")) returned 1 [0226.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0226.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235f20 [0226.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221838 [0226.971] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235f20 | out: hHeap=0x1f0000) returned 1 [0226.971] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0226.971] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0226.972] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\Ole DB\\msdasql.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdasql.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0226.972] GetLastError () returned 0x5 [0226.972] GetLastError () returned 0x5 [0226.972] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41d0f4ea, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41d0f4ea, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41d0f4ea, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd600, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="msdasqlr.dll", cAlternateFileName="")) returned 1 [0226.972] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0226.972] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235700 [0226.972] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221080 [0226.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0226.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0226.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0226.973] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\Ole DB\\msdasqlr.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdasqlr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0226.973] GetLastError () returned 0x5 [0226.973] GetLastError () returned 0x5 [0226.973] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41d0f4ea, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41d0f4ea, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41d0f4ea, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1ca00, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="msdatl3.dll", cAlternateFileName="")) returned 1 [0226.974] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0226.974] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235f20 [0226.974] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220fe8 [0226.974] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235f20 | out: hHeap=0x1f0000) returned 1 [0226.974] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0226.974] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0226.974] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\Ole DB\\msdatl3.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdatl3.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0226.975] GetLastError () returned 0x5 [0226.975] GetLastError () returned 0x5 [0226.975] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41d0f4ea, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41d0f4ea, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41d0f4ea, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="msxactps.dll", cAlternateFileName="")) returned 1 [0226.975] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0226.975] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235f20 [0226.975] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2217a0 [0226.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235f20 | out: hHeap=0x1f0000) returned 1 [0226.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0226.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0226.976] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\Ole DB\\msxactps.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msxactps.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0226.976] GetLastError () returned 0x5 [0226.976] GetLastError () returned 0x5 [0226.976] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41ce9283, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41ce9283, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41ce9283, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe6000, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="oledb32.dll", cAlternateFileName="")) returned 1 [0226.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0226.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235f20 [0226.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221a00 [0226.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235f20 | out: hHeap=0x1f0000) returned 1 [0226.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0226.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0226.977] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\Ole DB\\oledb32.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\oledb32.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0226.977] GetLastError () returned 0x5 [0226.977] GetLastError () returned 0x5 [0226.977] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41ce9283, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41ce9283, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41ce9283, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x13000, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="oledb32r.dll", cAlternateFileName="")) returned 1 [0226.977] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0226.977] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236260 [0226.977] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220cf0 [0226.977] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236260 | out: hHeap=0x1f0000) returned 1 [0226.977] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0226.977] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0226.978] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\Ole DB\\oledb32r.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\oledb32r.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0226.978] GetLastError () returned 0x5 [0226.978] GetLastError () returned 0x5 [0226.978] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41ce9283, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41ce9283, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41ce9283, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x264c, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="oledbjvs.inc", cAlternateFileName="")) returned 1 [0226.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0226.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236260 [0226.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220f50 [0226.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236260 | out: hHeap=0x1f0000) returned 1 [0226.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0226.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0226.983] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\Ole DB\\oledbjvs.inc" (normalized: "c:\\program files\\common files\\system\\ole db\\oledbjvs.inc"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0226.983] GetLastError () returned 0x5 [0226.983] GetLastError () returned 0x5 [0226.983] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41cc3017, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41cc3017, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41cc3017, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x26f7, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="oledbvbs.inc", cAlternateFileName="")) returned 1 [0226.983] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0226.983] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235f20 [0226.983] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221410 [0226.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235f20 | out: hHeap=0x1f0000) returned 1 [0226.984] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0226.984] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0226.984] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\Ole DB\\oledbvbs.inc" (normalized: "c:\\program files\\common files\\system\\ole db\\oledbvbs.inc"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0226.984] GetLastError () returned 0x5 [0226.984] GetLastError () returned 0x5 [0226.984] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43c80ffc, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43c80ffc, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43c80ffc, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd4000, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="sqloledb.dll", cAlternateFileName="")) returned 1 [0226.984] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0226.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235f20 [0226.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220e20 [0226.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235f20 | out: hHeap=0x1f0000) returned 1 [0226.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0226.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0226.985] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\Ole DB\\sqloledb.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqloledb.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0226.985] GetLastError () returned 0x5 [0226.985] GetLastError () returned 0x5 [0226.985] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43c80ffc, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43c80ffc, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43c80ffc, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="sqloledb.rll", cAlternateFileName="")) returned 1 [0226.986] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238488 [0226.986] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235f20 [0226.986] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221118 [0226.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235f20 | out: hHeap=0x1f0000) returned 1 [0226.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0226.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238488 | out: hHeap=0x1f0000) returned 1 [0226.986] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\Ole DB\\sqloledb.rll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqloledb.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0227.253] GetLastError () returned 0x5 [0227.253] GetLastError () returned 0x5 [0227.253] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43854cb5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43854cb5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43854cb5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x4fa00, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="sqlxmlx.dll", cAlternateFileName="")) returned 1 [0227.253] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0227.254] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235aa8 [0227.254] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220cf0 [0227.254] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235aa8 | out: hHeap=0x1f0000) returned 1 [0227.254] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0227.254] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0227.254] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\Ole DB\\sqlxmlx.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqlxmlx.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0227.254] GetLastError () returned 0x5 [0227.255] GetLastError () returned 0x5 [0227.255] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43854cb5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43854cb5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43854cb5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="sqlxmlx.rll", cAlternateFileName="")) returned 1 [0227.255] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0227.255] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235aa8 [0227.255] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221080 [0227.255] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235aa8 | out: hHeap=0x1f0000) returned 1 [0227.255] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0227.255] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0227.256] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\Ole DB\\sqlxmlx.rll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqlxmlx.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0227.256] GetLastError () returned 0x5 [0227.256] GetLastError () returned 0x5 [0227.256] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43854cb5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43854cb5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43854cb5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0xc0000022, cFileName="sqlxmlx.rll", cAlternateFileName="")) returned 0 [0227.257] FindClose (in: hFindFile=0x24ed00 | out: hFindFile=0x24ed00) returned 1 [0227.258] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2284d0 [0227.258] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0227.258] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22d9d0 [0227.258] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fef0 [0227.258] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Common Files\\System\\Ole DB\\en-US\\*", lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d8245b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24e7c0 [0227.260] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fb30 [0227.260] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fef0 | out: hHeap=0x1f0000) returned 1 [0227.260] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0227.260] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d8245b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0227.260] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220058 [0227.261] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fb30 | out: hHeap=0x1f0000) returned 1 [0227.261] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0227.261] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0227.261] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb38282, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb3fb1900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="msdasqlr.dll.mui", cAlternateFileName="")) returned 1 [0227.261] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2391d0 [0227.261] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0227.261] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x2191b8 [0227.261] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0227.261] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220058 | out: hHeap=0x1f0000) returned 1 [0227.261] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2391d0 | out: hHeap=0x1f0000) returned 1 [0227.262] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\Ole DB\\en-US\\msdasqlr.dll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\msdasqlr.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0227.262] GetLastError () returned 0x5 [0227.263] GetLastError () returned 0x5 [0227.263] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b9e0d51, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb3fb1900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xbc00, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="oledb32r.dll.mui", cAlternateFileName="")) returned 1 [0227.263] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2392b0 [0227.263] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fef0 [0227.263] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219268 [0227.263] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fef0 | out: hHeap=0x1f0000) returned 1 [0227.263] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2191b8 | out: hHeap=0x1f0000) returned 1 [0227.264] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2392b0 | out: hHeap=0x1f0000) returned 1 [0227.264] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\Ole DB\\en-US\\oledb32r.dll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\oledb32r.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0227.264] GetLastError () returned 0x5 [0227.265] GetLastError () returned 0x5 [0227.265] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb38282, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb3fb1900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xac00, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="sqloledb.rll.mui", cAlternateFileName="")) returned 1 [0227.265] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238d00 [0227.265] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220490 [0227.265] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218558 [0227.265] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220490 | out: hHeap=0x1f0000) returned 1 [0227.265] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219268 | out: hHeap=0x1f0000) returned 1 [0227.266] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238d00 | out: hHeap=0x1f0000) returned 1 [0227.266] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\Ole DB\\en-US\\sqloledb.rll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\sqloledb.rll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0227.267] GetLastError () returned 0x5 [0227.267] GetLastError () returned 0x5 [0227.267] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ba9f918, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb65d7300, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="sqlxmlx.rll.mui", cAlternateFileName="")) returned 1 [0227.267] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0227.267] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0227.267] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ce8 [0227.267] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0227.311] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218558 | out: hHeap=0x1f0000) returned 1 [0227.311] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0227.311] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\System\\Ole DB\\en-US\\sqlxmlx.rll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\sqlxmlx.rll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0227.311] GetLastError () returned 0x5 [0227.311] GetLastError () returned 0x5 [0227.312] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ba9f918, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb65d7300, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="sqlxmlx.rll.mui", cAlternateFileName="")) returned 0 [0227.312] FindClose (in: hFindFile=0x24e7c0 | out: hFindFile=0x24e7c0) returned 1 [0227.312] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ce8 | out: hHeap=0x1f0000) returned 1 [0227.312] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d9d0 | out: hHeap=0x1f0000) returned 1 [0227.312] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0227.312] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2284d0 | out: hHeap=0x1f0000) returned 1 [0227.312] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0227.313] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2201c0 | out: hHeap=0x1f0000) returned 1 [0227.313] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cf0 | out: hHeap=0x1f0000) returned 1 [0227.313] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e1c8 | out: hHeap=0x1f0000) returned 1 [0227.313] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0227.313] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2285a8 | out: hHeap=0x1f0000) returned 1 [0227.313] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217f50 | out: hHeap=0x1f0000) returned 1 [0227.313] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0227.313] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236058 | out: hHeap=0x1f0000) returned 1 [0227.313] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236190 | out: hHeap=0x1f0000) returned 1 [0227.313] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2358a0 | out: hHeap=0x1f0000) returned 1 [0227.313] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2360c0 | out: hHeap=0x1f0000) returned 1 [0227.313] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22db68 | out: hHeap=0x1f0000) returned 1 [0227.313] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0227.313] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228638 | out: hHeap=0x1f0000) returned 1 [0227.313] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2359d8 | out: hHeap=0x1f0000) returned 1 [0227.314] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a88f8 | out: hHeap=0x1f0000) returned 1 [0227.314] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2357d0 | out: hHeap=0x1f0000) returned 1 [0227.314] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8428 | out: hHeap=0x1f0000) returned 1 [0227.314] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a7fb0 | out: hHeap=0x1f0000) returned 1 [0227.314] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235e50 | out: hHeap=0x1f0000) returned 1 [0227.314] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x263640 | out: hHeap=0x1f0000) returned 1 [0227.314] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0227.314] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2345d8 | out: hHeap=0x1f0000) returned 1 [0227.314] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228ab8 [0227.314] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0227.314] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e1c8 [0227.314] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a81c0 [0227.315] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Internet Explorer\\*", lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfbf3a0e6, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xfbf3a0e6, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e600 [0227.315] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a87f0 [0227.315] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a81c0 | out: hHeap=0x1f0000) returned 1 [0227.315] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0227.315] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfbf3a0e6, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xfbf3a0e6, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0227.315] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8270 [0227.315] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a87f0 | out: hHeap=0x1f0000) returned 1 [0227.315] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0227.316] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0227.316] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d83d92, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa21685bc, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0227.316] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8530 [0227.316] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x218150 [0227.316] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8530 | out: hHeap=0x1f0000) returned 1 [0227.316] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8270 | out: hHeap=0x1f0000) returned 1 [0227.316] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0227.316] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0227.316] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204d90 [0227.316] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2359d8 [0227.316] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a4ec31b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a4ec31b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a4ec31b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExtExport.exe", cAlternateFileName="")) returned 1 [0227.316] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0227.316] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a89a8 [0227.317] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x218250 [0227.317] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a89a8 | out: hHeap=0x1f0000) returned 1 [0227.317] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218150 | out: hHeap=0x1f0000) returned 1 [0227.317] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0227.317] CreateFileW (lpFileName="C:\\\\Program Files\\Internet Explorer\\ExtExport.exe" (normalized: "c:\\program files\\internet explorer\\extexport.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0227.317] GetLastError () returned 0x5 [0227.317] GetLastError () returned 0x5 [0227.318] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a9b1003, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a9b1003, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a9b1003, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd400, dwReserved0=0x0, dwReserved1=0x0, cFileName="hmmapi.dll", cAlternateFileName="")) returned 1 [0227.318] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0227.318] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8a58 [0227.318] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x2180d0 [0227.318] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8a58 | out: hHeap=0x1f0000) returned 1 [0227.318] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218250 | out: hHeap=0x1f0000) returned 1 [0227.318] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0227.318] CreateFileW (lpFileName="C:\\\\Program Files\\Internet Explorer\\hmmapi.dll" (normalized: "c:\\program files\\internet explorer\\hmmapi.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0227.319] GetLastError () returned 0x5 [0227.319] GetLastError () returned 0x5 [0227.319] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a49fe45, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a49fe45, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a49fe45, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x7d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="iediagcmd.exe", cAlternateFileName="")) returned 1 [0227.319] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0227.319] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a80b8 [0227.319] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x2183d0 [0227.319] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a80b8 | out: hHeap=0x1f0000) returned 1 [0227.319] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2180d0 | out: hHeap=0x1f0000) returned 1 [0227.319] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0227.319] CreateFileW (lpFileName="C:\\\\Program Files\\Internet Explorer\\iediagcmd.exe" (normalized: "c:\\program files\\internet explorer\\iediagcmd.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0227.320] GetLastError () returned 0x5 [0227.320] GetLastError () returned 0x5 [0227.320] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a70c9a1, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xbc534b5e, ftLastAccessTime.dwHighDateTime=0x1d2fa09, ftLastWriteTime.dwLowDateTime=0x4a70c9a1, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x7a800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ieinstal.exe", cAlternateFileName="")) returned 1 [0227.320] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0227.320] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8740 [0227.320] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217bd0 [0227.320] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8740 | out: hHeap=0x1f0000) returned 1 [0227.320] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2183d0 | out: hHeap=0x1f0000) returned 1 [0227.320] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0227.321] CreateFileW (lpFileName="C:\\\\Program Files\\Internet Explorer\\ieinstal.exe" (normalized: "c:\\program files\\internet explorer\\ieinstal.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0227.321] GetLastError () returned 0x5 [0227.321] GetLastError () returned 0x5 [0227.321] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a49fe45, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a49fe45, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a49fe45, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x36c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ielowutil.exe", cAlternateFileName="")) returned 1 [0227.321] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0227.321] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8950 [0227.321] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217750 [0227.321] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8950 | out: hHeap=0x1f0000) returned 1 [0227.321] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217bd0 | out: hHeap=0x1f0000) returned 1 [0227.322] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0227.322] CreateFileW (lpFileName="C:\\\\Program Files\\Internet Explorer\\ielowutil.exe" (normalized: "c:\\program files\\internet explorer\\ielowutil.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0227.322] GetLastError () returned 0x5 [0227.322] GetLastError () returned 0x5 [0227.323] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a49fe45, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a49fe45, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a4c60b4, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x63800, dwReserved0=0x0, dwReserved1=0x0, cFileName="IEShims.dll", cAlternateFileName="")) returned 1 [0227.323] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0227.323] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8740 [0227.323] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217b50 [0227.323] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8740 | out: hHeap=0x1f0000) returned 1 [0227.323] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217750 | out: hHeap=0x1f0000) returned 1 [0227.323] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0227.324] CreateFileW (lpFileName="C:\\\\Program Files\\Internet Explorer\\IEShims.dll" (normalized: "c:\\program files\\internet explorer\\ieshims.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0227.324] GetLastError () returned 0x5 [0227.324] GetLastError () returned 0x5 [0227.324] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa182b3a4, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa1c0b0e4, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x8ca44c00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xc9340, dwReserved0=0x0, dwReserved1=0x0, cFileName="iexplore.exe", cAlternateFileName="")) returned 1 [0227.324] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0227.324] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8a58 [0227.324] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x2177d0 [0227.324] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8a58 | out: hHeap=0x1f0000) returned 1 [0227.324] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217b50 | out: hHeap=0x1f0000) returned 1 [0227.324] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0227.325] CreateFileW (lpFileName="C:\\\\Program Files\\Internet Explorer\\iexplore.exe" (normalized: "c:\\program files\\internet explorer\\iexplore.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0227.325] GetLastError () returned 0x5 [0227.325] GetLastError () returned 0x5 [0227.325] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d846d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a485593, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0227.325] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a87f0 [0227.326] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217ad0 [0227.326] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a87f0 | out: hHeap=0x1f0000) returned 1 [0227.326] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2177d0 | out: hHeap=0x1f0000) returned 1 [0227.326] lstrcmpW (lpString1="images", lpString2=".") returned 1 [0227.326] lstrcmpW (lpString1="images", lpString2="..") returned 1 [0227.326] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238ec0 [0227.326] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235e50 [0227.326] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d90 | out: hHeap=0x1f0000) returned 1 [0227.326] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18998f0, ftCreationTime.dwHighDateTime=0x1d5a06a, ftLastAccessTime.dwLowDateTime=0x9edacdc0, ftLastAccessTime.dwHighDateTime=0x1d54126, ftLastWriteTime.dwLowDateTime=0x9edacdc0, ftLastWriteTime.dwHighDateTime=0x1d54126, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="leechftp.exe", cAlternateFileName="")) returned 1 [0227.326] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0227.326] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a7fb0 [0227.326] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217b50 [0227.326] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a7fb0 | out: hHeap=0x1f0000) returned 1 [0227.326] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217ad0 | out: hHeap=0x1f0000) returned 1 [0227.327] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0227.327] CreateFileW (lpFileName="C:\\\\Program Files\\Internet Explorer\\leechftp.exe" (normalized: "c:\\program files\\internet explorer\\leechftp.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0227.328] GetLastError () returned 0x20 [0227.328] GetLastError () returned 0x20 [0227.328] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2132d, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb77a1634, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb77a1634, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIGNUP", cAlternateFileName="")) returned 1 [0227.328] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8428 [0227.328] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217650 [0227.328] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8428 | out: hHeap=0x1f0000) returned 1 [0227.328] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217b50 | out: hHeap=0x1f0000) returned 1 [0227.328] lstrcmpW (lpString1="SIGNUP", lpString2=".") returned 1 [0227.328] lstrcmpW (lpString1="SIGNUP", lpString2="..") returned 1 [0227.328] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x48) returned 0x226328 [0227.328] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236058 [0227.329] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ec0 | out: hHeap=0x1f0000) returned 1 [0227.329] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a9b1003, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a9b1003, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a9b1003, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc218, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1 [0227.329] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0227.329] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a7fb0 [0227.329] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x2176d0 [0227.329] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a7fb0 | out: hHeap=0x1f0000) returned 1 [0227.329] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217650 | out: hHeap=0x1f0000) returned 1 [0227.329] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0227.330] CreateFileW (lpFileName="C:\\\\Program Files\\Internet Explorer\\sqmapi.dll" (normalized: "c:\\program files\\internet explorer\\sqmapi.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0227.590] GetLastError () returned 0x5 [0227.590] GetLastError () returned 0x5 [0227.591] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a9b1003, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a9b1003, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a9b1003, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc218, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 0 [0227.591] FindClose (in: hFindFile=0x24e600 | out: hFindFile=0x24e600) returned 1 [0227.591] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228cb0 [0227.591] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0227.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f350 [0227.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235b78 [0227.592] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Internet Explorer\\en-US\\*", lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d83d92, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa21685bc, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24ec40 [0227.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235ff0 [0227.592] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0227.593] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0227.593] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d83d92, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa21685bc, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0227.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236190 [0227.593] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235ff0 | out: hHeap=0x1f0000) returned 1 [0227.593] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0227.593] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0227.593] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b2dfe94, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x68e10600, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="hmmapi.dll.mui", cAlternateFileName="")) returned 1 [0227.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0227.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235ff0 [0227.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221080 [0227.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235ff0 | out: hHeap=0x1f0000) returned 1 [0227.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236190 | out: hHeap=0x1f0000) returned 1 [0227.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0227.595] CreateFileW (lpFileName="C:\\\\Program Files\\Internet Explorer\\en-US\\hmmapi.dll.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\hmmapi.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e690, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0227.595] GetLastError () returned 0x5 [0227.595] GetLastError () returned 0x5 [0227.596] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b3c4cb5, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x75fdf500, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="ieinstal.exe.mui", cAlternateFileName="")) returned 1 [0227.596] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238e50 [0227.596] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235ff0 [0227.596] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221118 [0227.596] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235ff0 | out: hHeap=0x1f0000) returned 1 [0227.596] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0227.596] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238e50 | out: hHeap=0x1f0000) returned 1 [0227.597] CreateFileW (lpFileName="C:\\\\Program Files\\Internet Explorer\\en-US\\ieinstal.exe.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\ieinstal.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e690, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0227.597] GetLastError () returned 0x5 [0227.598] GetLastError () returned 0x5 [0227.598] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b2212c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x74ccc800, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="iexplore.exe.mui", cAlternateFileName="")) returned 1 [0227.598] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239048 [0227.598] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236260 [0227.598] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2212e0 [0227.598] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236260 | out: hHeap=0x1f0000) returned 1 [0227.598] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0227.598] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239048 | out: hHeap=0x1f0000) returned 1 [0227.600] CreateFileW (lpFileName="C:\\\\Program Files\\Internet Explorer\\en-US\\iexplore.exe.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\iexplore.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e690, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0227.600] GetLastError () returned 0x5 [0227.600] GetLastError () returned 0x5 [0227.600] FindNextFileW (in: hFindFile=0x24ec40, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b2212c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x74ccc800, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="iexplore.exe.mui", cAlternateFileName="")) returned 0 [0227.600] FindClose (in: hFindFile=0x24ec40 | out: hFindFile=0x24ec40) returned 1 [0227.601] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0227.601] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f350 | out: hHeap=0x1f0000) returned 1 [0227.601] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0227.601] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228cb0 | out: hHeap=0x1f0000) returned 1 [0227.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228638 [0227.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0227.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f350 [0227.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235b78 [0227.601] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Internet Explorer\\images\\*", lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d846d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a485593, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24e7c0 [0227.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235ff0 [0227.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0227.602] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0227.602] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d846d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a485593, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0227.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235b78 [0227.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235ff0 | out: hHeap=0x1f0000) returned 1 [0227.602] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0227.602] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0227.602] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a55ea4d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a55ea4d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a55ea4d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1536, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="bing.ico", cAlternateFileName="")) returned 1 [0227.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238488 [0227.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235ff0 [0227.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221a98 [0227.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235ff0 | out: hHeap=0x1f0000) returned 1 [0227.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0227.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238488 | out: hHeap=0x1f0000) returned 1 [0227.603] CreateFileW (lpFileName="C:\\\\Program Files\\Internet Explorer\\images\\bing.ico" (normalized: "c:\\program files\\internet explorer\\images\\bing.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e690, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0227.603] GetLastError () returned 0x5 [0227.603] GetLastError () returned 0x5 [0227.603] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a55ea4d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a55ea4d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a55ea4d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1536, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="bing.ico", cAlternateFileName="")) returned 0 [0227.603] FindClose (in: hFindFile=0x24e7c0 | out: hFindFile=0x24e7c0) returned 1 [0227.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0227.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f350 | out: hHeap=0x1f0000) returned 1 [0227.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0227.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228638 | out: hHeap=0x1f0000) returned 1 [0227.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228b00 [0227.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238488 [0227.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f350 [0227.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236260 [0227.604] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Internet Explorer\\SIGNUP\\*", lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2132d, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb77a1634, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb77a1634, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24ed00 [0227.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235b78 [0227.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236260 | out: hHeap=0x1f0000) returned 1 [0227.605] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0227.605] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2132d, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb77a1634, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb77a1634, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0227.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235ff0 [0227.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0227.605] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0227.605] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0227.605] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30c952e, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x970b4468, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x970b4468, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1c4, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="install.ins", cAlternateFileName="")) returned 1 [0227.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0227.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236190 [0227.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2212e0 [0227.606] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236190 | out: hHeap=0x1f0000) returned 1 [0227.606] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235ff0 | out: hHeap=0x1f0000) returned 1 [0227.606] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0227.606] CreateFileW (lpFileName="C:\\\\Program Files\\Internet Explorer\\SIGNUP\\install.ins" (normalized: "c:\\program files\\internet explorer\\signup\\install.ins"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e690, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0227.608] GetFileType (hFile=0x1e0) returned 0x1 [0227.608] CloseHandle (hObject=0x1e0) returned 1 [0227.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fb30 [0227.609] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Internet Explorer\\SIGNUP\\install.ins" (normalized: "c:\\program files\\internet explorer\\signup\\install.ins"), fInfoLevelId=0x0, lpFileInformation=0x259e724 | out: lpFileInformation=0x259e724*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30c952e, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x970b4468, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x970b4468, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1c4)) returned 1 [0227.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fb30 | out: hHeap=0x1f0000) returned 1 [0227.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220058 [0227.609] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Internet Explorer\\SIGNUP\\install.ins" (normalized: "c:\\program files\\internet explorer\\signup\\install.ins"), fInfoLevelId=0x0, lpFileInformation=0x259e72c | out: lpFileInformation=0x259e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30c952e, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x970b4468, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x970b4468, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1c4)) returned 1 [0227.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220058 | out: hHeap=0x1f0000) returned 1 [0227.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fa40 [0227.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fa40 | out: hHeap=0x1f0000) returned 1 [0227.609] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30c952e, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x970b4468, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x970b4468, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1c4, dwReserved0=0xc0000022, dwReserved1=0x3, cFileName="install.ins", cAlternateFileName="")) returned 0 [0227.610] FindClose (in: hFindFile=0x24ed00 | out: hFindFile=0x24ed00) returned 1 [0227.610] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0227.610] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f350 | out: hHeap=0x1f0000) returned 1 [0227.610] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238488 | out: hHeap=0x1f0000) returned 1 [0227.610] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228b00 | out: hHeap=0x1f0000) returned 1 [0227.610] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2176d0 | out: hHeap=0x1f0000) returned 1 [0227.610] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2359d8 | out: hHeap=0x1f0000) returned 1 [0227.610] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235e50 | out: hHeap=0x1f0000) returned 1 [0227.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236058 | out: hHeap=0x1f0000) returned 1 [0227.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226328 | out: hHeap=0x1f0000) returned 1 [0227.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e1c8 | out: hHeap=0x1f0000) returned 1 [0227.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0227.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228ab8 | out: hHeap=0x1f0000) returned 1 [0227.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228758 [0227.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0227.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f350 [0227.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228518 [0227.611] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Java\\*", lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xfc0fdd55, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xfc0fdd55, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e8c0 [0227.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238ec0 [0227.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225f68 [0227.612] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ec0 | out: hHeap=0x1f0000) returned 1 [0227.612] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228518 | out: hHeap=0x1f0000) returned 1 [0227.612] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0227.612] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xfc0fdd55, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xfc0fdd55, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0227.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238d70 [0227.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225fb8 [0227.613] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238d70 | out: hHeap=0x1f0000) returned 1 [0227.613] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225f68 | out: hHeap=0x1f0000) returned 1 [0227.613] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0227.613] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0227.613] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe863e770, ftCreationTime.dwHighDateTime=0x1d5bbaf, ftLastAccessTime.dwLowDateTime=0xdf5500e0, ftLastAccessTime.dwHighDateTime=0x1d543b1, ftLastWriteTime.dwLowDateTime=0xdf5500e0, ftLastWriteTime.dwHighDateTime=0x1d543b1, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="fling.exe", cAlternateFileName="")) returned 1 [0227.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0227.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238f68 [0227.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8a58 [0227.613] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238f68 | out: hHeap=0x1f0000) returned 1 [0227.613] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225fb8 | out: hHeap=0x1f0000) returned 1 [0227.613] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0227.614] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\fling.exe" (normalized: "c:\\program files\\java\\fling.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0227.615] GetLastError () returned 0x20 [0227.615] GetLastError () returned 0x20 [0227.615] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0de2f82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xafba0b05, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="jre1.8.0_144", cAlternateFileName="JRE18~1.0_1")) returned 1 [0227.615] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0227.615] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2390b8 [0227.615] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8530 [0227.615] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2390b8 | out: hHeap=0x1f0000) returned 1 [0227.615] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8a58 | out: hHeap=0x1f0000) returned 1 [0227.615] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0227.616] lstrcmpW (lpString1="jre1.8.0_144", lpString2=".") returned 1 [0227.616] lstrcmpW (lpString1="jre1.8.0_144", lpString2="..") returned 1 [0227.616] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204ef0 [0227.616] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a81c0 [0227.616] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd40ccbe0, ftCreationTime.dwHighDateTime=0x1d5b441, ftLastAccessTime.dwLowDateTime=0x1d073180, ftLastAccessTime.dwHighDateTime=0x1d5785d, ftLastWriteTime.dwLowDateTime=0x1d073180, ftLastWriteTime.dwHighDateTime=0x1d5785d, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="spcwin.exe", cAlternateFileName="")) returned 1 [0227.616] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0227.616] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2391d0 [0227.616] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a89a8 [0227.616] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2391d0 | out: hHeap=0x1f0000) returned 1 [0227.616] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8530 | out: hHeap=0x1f0000) returned 1 [0227.616] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0227.617] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\spcwin.exe" (normalized: "c:\\program files\\java\\spcwin.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0227.617] GetLastError () returned 0x20 [0227.617] GetLastError () returned 0x20 [0227.617] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6e87e20, ftCreationTime.dwHighDateTime=0x1d5c516, ftLastAccessTime.dwLowDateTime=0xe9906d70, ftLastAccessTime.dwHighDateTime=0x1d5b1d3, ftLastWriteTime.dwLowDateTime=0xe9906d70, ftLastWriteTime.dwHighDateTime=0x1d5b1d3, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="whatsapp.exe", cAlternateFileName="")) returned 1 [0227.617] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0227.617] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2391d0 [0227.617] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8008 [0227.617] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2391d0 | out: hHeap=0x1f0000) returned 1 [0227.618] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a89a8 | out: hHeap=0x1f0000) returned 1 [0227.618] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0227.618] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\whatsapp.exe" (normalized: "c:\\program files\\java\\whatsapp.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0227.618] GetLastError () returned 0x20 [0227.618] GetLastError () returned 0x20 [0227.618] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd80b1130, ftCreationTime.dwHighDateTime=0x1d53dd5, ftLastAccessTime.dwLowDateTime=0x7a6c97a0, ftLastAccessTime.dwHighDateTime=0x1d56068, ftLastWriteTime.dwLowDateTime=0x7a6c97a0, ftLastWriteTime.dwHighDateTime=0x1d56068, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="winscp.exe", cAlternateFileName="")) returned 1 [0227.618] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0227.618] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238ef8 [0227.618] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8060 [0227.619] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ef8 | out: hHeap=0x1f0000) returned 1 [0227.619] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8008 | out: hHeap=0x1f0000) returned 1 [0227.619] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0227.619] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\winscp.exe" (normalized: "c:\\program files\\java\\winscp.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0227.619] GetLastError () returned 0x20 [0227.619] GetLastError () returned 0x20 [0227.619] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd80b1130, ftCreationTime.dwHighDateTime=0x1d53dd5, ftLastAccessTime.dwLowDateTime=0x7a6c97a0, ftLastAccessTime.dwHighDateTime=0x1d56068, ftLastWriteTime.dwLowDateTime=0x7a6c97a0, ftLastWriteTime.dwHighDateTime=0x1d56068, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="winscp.exe", cAlternateFileName="")) returned 0 [0227.620] FindClose (in: hFindFile=0x24e8c0 | out: hFindFile=0x24e8c0) returned 1 [0227.620] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228908 [0227.620] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238488 [0227.620] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e1c8 [0227.620] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a88a0 [0227.620] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\*", lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0de2f82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xafba0b05, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24e8c0 [0227.620] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a7fb0 [0227.620] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a88a0 | out: hHeap=0x1f0000) returned 1 [0227.621] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0227.621] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0de2f82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xafba0b05, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0227.621] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a88a0 [0227.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a7fb0 | out: hHeap=0x1f0000) returned 1 [0227.621] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0227.621] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0227.621] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xcedcad54, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xcedcad54, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="bin", cAlternateFileName="")) returned 1 [0227.621] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8530 [0227.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a88a0 | out: hHeap=0x1f0000) returned 1 [0227.621] lstrcmpW (lpString1="bin", lpString2=".") returned 1 [0227.621] lstrcmpW (lpString1="bin", lpString2="..") returned 1 [0227.621] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204e70 [0227.621] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8008 [0227.621] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xcac, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="COPYRIGHT", cAlternateFileName="COPYRI~1")) returned 1 [0227.622] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0227.622] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8a58 [0227.622] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217ed0 [0227.622] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8a58 | out: hHeap=0x1f0000) returned 1 [0227.622] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8530 | out: hHeap=0x1f0000) returned 1 [0227.622] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0227.622] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT" (normalized: "c:\\program files\\java\\jre1.8.0_144\\copyright"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e690, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0227.623] GetFileType (hFile=0x1e0) returned 0x1 [0227.623] CloseHandle (hObject=0x1e0) returned 1 [0227.623] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235ff0 [0227.623] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT" (normalized: "c:\\program files\\java\\jre1.8.0_144\\copyright"), fInfoLevelId=0x0, lpFileInformation=0x259e724 | out: lpFileInformation=0x259e724*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xcac)) returned 1 [0227.624] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235ff0 | out: hHeap=0x1f0000) returned 1 [0227.624] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2359d8 [0227.624] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT" (normalized: "c:\\program files\\java\\jre1.8.0_144\\copyright"), fInfoLevelId=0x0, lpFileInformation=0x259e72c | out: lpFileInformation=0x259e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xcac)) returned 1 [0227.624] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2359d8 | out: hHeap=0x1f0000) returned 1 [0227.624] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2357d0 [0227.624] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2357d0 | out: hHeap=0x1f0000) returned 1 [0227.624] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe1f09, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xaa80821a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="lib", cAlternateFileName="")) returned 1 [0227.624] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a80b8 [0227.624] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217ed0 | out: hHeap=0x1f0000) returned 1 [0227.624] lstrcmpW (lpString1="lib", lpString2=".") returned 1 [0227.624] lstrcmpW (lpString1="lib", lpString2="..") returned 1 [0227.624] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238fd8 [0227.625] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a88f8 [0227.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e70 | out: hHeap=0x1f0000) returned 1 [0227.625] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="LICENSE", cAlternateFileName="")) returned 1 [0227.625] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8a58 [0227.625] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x218050 [0227.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8a58 | out: hHeap=0x1f0000) returned 1 [0227.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a80b8 | out: hHeap=0x1f0000) returned 1 [0227.626] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\LICENSE" (normalized: "c:\\program files\\java\\jre1.8.0_144\\license"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e690, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0227.626] GetFileType (hFile=0x1e0) returned 0x1 [0227.626] CloseHandle (hObject=0x1e0) returned 1 [0227.627] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236398 [0227.627] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\LICENSE" (normalized: "c:\\program files\\java\\jre1.8.0_144\\license"), fInfoLevelId=0x0, lpFileInformation=0x259e724 | out: lpFileInformation=0x259e724*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x28)) returned 1 [0227.627] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236398 | out: hHeap=0x1f0000) returned 1 [0227.627] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235b78 [0227.627] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\LICENSE" (normalized: "c:\\program files\\java\\jre1.8.0_144\\license"), fInfoLevelId=0x0, lpFileInformation=0x259e72c | out: lpFileInformation=0x259e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x28)) returned 1 [0227.627] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0227.628] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235ff0 [0227.628] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235ff0 | out: hHeap=0x1f0000) returned 1 [0227.628] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2e, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="README.txt", cAlternateFileName="")) returned 1 [0227.628] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0227.628] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8270 [0227.628] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x218350 [0227.628] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8270 | out: hHeap=0x1f0000) returned 1 [0227.628] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218050 | out: hHeap=0x1f0000) returned 1 [0227.628] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0227.629] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\README.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\readme.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e690, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0227.629] GetFileType (hFile=0x1e0) returned 0x1 [0227.630] CloseHandle (hObject=0x1e0) returned 1 [0227.865] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235b78 [0227.865] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\README.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\readme.txt"), fInfoLevelId=0x0, lpFileInformation=0x259e724 | out: lpFileInformation=0x259e724*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2e)) returned 1 [0227.866] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0227.866] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235b78 [0227.866] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\README.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\readme.txt"), fInfoLevelId=0x0, lpFileInformation=0x259e72c | out: lpFileInformation=0x259e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2e)) returned 1 [0227.866] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0227.866] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236190 [0227.866] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236190 | out: hHeap=0x1f0000) returned 1 [0227.866] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x210, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="release", cAlternateFileName="")) returned 1 [0227.867] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8270 [0227.867] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x218150 [0227.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8270 | out: hHeap=0x1f0000) returned 1 [0227.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218350 | out: hHeap=0x1f0000) returned 1 [0227.867] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\release" (normalized: "c:\\program files\\java\\jre1.8.0_144\\release"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e690, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0227.868] GetFileType (hFile=0x210) returned 0x1 [0227.868] CloseHandle (hObject=0x210) returned 1 [0227.869] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235b78 [0227.869] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\release" (normalized: "c:\\program files\\java\\jre1.8.0_144\\release"), fInfoLevelId=0x0, lpFileInformation=0x259e724 | out: lpFileInformation=0x259e724*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x210)) returned 1 [0227.869] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0227.869] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235b78 [0227.869] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\release" (normalized: "c:\\program files\\java\\jre1.8.0_144\\release"), fInfoLevelId=0x0, lpFileInformation=0x259e72c | out: lpFileInformation=0x259e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x210)) returned 1 [0227.869] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0227.869] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236190 [0227.869] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236190 | out: hHeap=0x1f0000) returned 1 [0227.870] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf9bd, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="THIRDPARTYLICENSEREADME-JAVAFX.txt", cAlternateFileName="THIRDP~1.TXT")) returned 1 [0227.870] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a80b8 [0227.870] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8270 [0227.870] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0227.870] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8270 | out: hHeap=0x1f0000) returned 1 [0227.870] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218150 | out: hHeap=0x1f0000) returned 1 [0227.870] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a80b8 | out: hHeap=0x1f0000) returned 1 [0227.871] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme-javafx.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e690, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0227.871] GetFileType (hFile=0x210) returned 0x1 [0227.872] CloseHandle (hObject=0x210) returned 1 [0227.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0227.872] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme-javafx.txt"), fInfoLevelId=0x0, lpFileInformation=0x259e724 | out: lpFileInformation=0x259e724*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf9bd)) returned 1 [0227.872] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0227.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0227.872] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme-javafx.txt"), fInfoLevelId=0x0, lpFileInformation=0x259e72c | out: lpFileInformation=0x259e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf9bd)) returned 1 [0227.873] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0227.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0227.873] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0227.873] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2371c, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="THIRDPARTYLICENSEREADME.txt", cAlternateFileName="THIRDP~2.TXT")) returned 1 [0227.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228b90 [0227.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8530 [0227.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2133d8 [0227.873] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8530 | out: hHeap=0x1f0000) returned 1 [0227.873] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0227.873] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228b90 | out: hHeap=0x1f0000) returned 1 [0227.874] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e690, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0227.874] GetFileType (hFile=0x210) returned 0x1 [0227.874] CloseHandle (hObject=0x210) returned 1 [0227.875] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213818 [0227.875] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme.txt"), fInfoLevelId=0x0, lpFileInformation=0x259e724 | out: lpFileInformation=0x259e724*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2371c)) returned 1 [0227.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213818 | out: hHeap=0x1f0000) returned 1 [0227.875] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212c68 [0227.875] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme.txt"), fInfoLevelId=0x0, lpFileInformation=0x259e72c | out: lpFileInformation=0x259e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2371c)) returned 1 [0227.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212c68 | out: hHeap=0x1f0000) returned 1 [0227.875] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212be0 [0227.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212be0 | out: hHeap=0x1f0000) returned 1 [0227.875] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3bb, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Welcome.html", cAlternateFileName="WELCOM~1.HTM")) returned 1 [0227.875] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0227.875] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8690 [0227.875] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217f50 [0227.876] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8690 | out: hHeap=0x1f0000) returned 1 [0227.876] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2133d8 | out: hHeap=0x1f0000) returned 1 [0227.876] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0227.876] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\Welcome.html" (normalized: "c:\\program files\\java\\jre1.8.0_144\\welcome.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e690, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0227.876] GetFileType (hFile=0x210) returned 0x1 [0227.877] CloseHandle (hObject=0x210) returned 1 [0227.877] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fc98 [0227.877] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\Welcome.html" (normalized: "c:\\program files\\java\\jre1.8.0_144\\welcome.html"), fInfoLevelId=0x0, lpFileInformation=0x259e724 | out: lpFileInformation=0x259e724*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3bb)) returned 1 [0227.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fc98 | out: hHeap=0x1f0000) returned 1 [0227.877] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fef0 [0227.877] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\Welcome.html" (normalized: "c:\\program files\\java\\jre1.8.0_144\\welcome.html"), fInfoLevelId=0x0, lpFileInformation=0x259e72c | out: lpFileInformation=0x259e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3bb)) returned 1 [0227.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fef0 | out: hHeap=0x1f0000) returned 1 [0227.877] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220328 [0227.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220328 | out: hHeap=0x1f0000) returned 1 [0227.878] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3bb, dwReserved0=0xc0000043, dwReserved1=0x3, cFileName="Welcome.html", cAlternateFileName="WELCOM~1.HTM")) returned 0 [0227.878] FindClose (in: hFindFile=0x24e8c0 | out: hFindFile=0x24e8c0) returned 1 [0227.878] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228cb0 [0227.878] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238208 [0227.878] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e360 [0227.878] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235b78 [0227.878] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\*", lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xcedcad54, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xcedcad54, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e7c0 [0227.879] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236398 [0227.879] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0227.879] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0227.879] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xcedcad54, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xcedcad54, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0227.879] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235b78 [0227.879] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236398 | out: hHeap=0x1f0000) returned 1 [0227.879] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0227.879] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0227.879] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xccdf4921, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x172543, dwReserved0=0x0, dwReserved1=0x0, cFileName="awt.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="AWTDLL~1.ODV")) returned 1 [0227.879] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0227.879] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235e50 [0227.879] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x239be0 [0227.879] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235e50 | out: hHeap=0x1f0000) returned 1 [0227.879] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0227.880] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0227.881] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\awt.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\awt.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0227.881] GetFileType (hFile=0x210) returned 0x1 [0227.881] CloseHandle (hObject=0x210) returned 1 [0227.881] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x21bf68 [0227.882] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\awt.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\awt.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xccdf4921, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x172543)) returned 1 [0227.882] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21bf68 | out: hHeap=0x1f0000) returned 1 [0227.882] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x21bf68 [0227.882] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\awt.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\awt.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xccdf4921, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x172543)) returned 1 [0227.882] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21bf68 | out: hHeap=0x1f0000) returned 1 [0227.882] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x21bf68 [0227.882] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21bf68 | out: hHeap=0x1f0000) returned 1 [0227.882] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bci.dll", cAlternateFileName="")) returned 1 [0227.882] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236330 [0227.882] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239be0 | out: hHeap=0x1f0000) returned 1 [0227.883] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\bci.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\bci.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0227.883] GetFileType (hFile=0x210) returned 0x1 [0227.884] CloseHandle (hObject=0x210) returned 1 [0227.884] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235b78 [0227.884] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\bci.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\bci.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4240)) returned 1 [0227.884] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0227.884] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235e50 [0227.884] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\bci.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\bci.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4240)) returned 1 [0227.885] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235e50 | out: hHeap=0x1f0000) returned 1 [0227.885] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235b78 [0227.885] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0227.885] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x27040, dwReserved0=0x0, dwReserved1=0x0, cFileName="dcpr.dll", cAlternateFileName="")) returned 1 [0227.885] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0227.885] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236398 [0227.885] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221248 [0227.885] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236398 | out: hHeap=0x1f0000) returned 1 [0227.885] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236330 | out: hHeap=0x1f0000) returned 1 [0227.885] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0227.886] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\dcpr.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dcpr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0227.886] GetFileType (hFile=0x210) returned 0x1 [0227.886] CloseHandle (hObject=0x210) returned 1 [0227.887] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd88 [0227.887] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\dcpr.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dcpr.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x27040)) returned 1 [0227.887] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd88 | out: hHeap=0x1f0000) returned 1 [0227.887] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220490 [0227.887] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\dcpr.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dcpr.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x27040)) returned 1 [0227.887] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220490 | out: hHeap=0x1f0000) returned 1 [0227.887] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fb30 [0227.887] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fb30 | out: hHeap=0x1f0000) returned 1 [0227.887] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x15040, dwReserved0=0x0, dwReserved1=0x0, cFileName="decora_sse.dll", cAlternateFileName="DECORA~1.DLL")) returned 1 [0227.888] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0227.888] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235e50 [0227.888] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220f50 [0227.888] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235e50 | out: hHeap=0x1f0000) returned 1 [0227.888] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0227.888] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0227.888] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\decora_sse.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\decora_sse.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0227.889] GetFileType (hFile=0x210) returned 0x1 [0227.889] CloseHandle (hObject=0x210) returned 1 [0227.889] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f770 [0227.889] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\decora_sse.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\decora_sse.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x15040)) returned 1 [0227.889] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f770 | out: hHeap=0x1f0000) returned 1 [0227.889] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0227.889] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\decora_sse.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\decora_sse.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x15040)) returned 1 [0227.889] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0227.890] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd88 [0227.890] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd88 | out: hHeap=0x1f0000) returned 1 [0227.890] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0a0bb4, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xca0a0bb4, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xca4ccf22, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x8f953, dwReserved0=0x0, dwReserved1=0x0, cFileName="deploy.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="DEPLOY~1.ODV")) returned 1 [0227.890] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a8c0 [0227.890] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236330 [0227.890] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x21af88 [0227.890] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236330 | out: hHeap=0x1f0000) returned 1 [0227.890] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0227.890] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a8c0 | out: hHeap=0x1f0000) returned 1 [0227.890] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\deploy.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\deploy.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0227.890] GetFileType (hFile=0x210) returned 0x1 [0227.891] CloseHandle (hObject=0x210) returned 1 [0227.891] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x21b178 [0227.891] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\deploy.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\deploy.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0a0bb4, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xca0a0bb4, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xca4ccf22, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x8f953)) returned 1 [0227.891] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21b178 | out: hHeap=0x1f0000) returned 1 [0227.891] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x21b270 [0227.891] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\deploy.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\deploy.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0a0bb4, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xca0a0bb4, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xca4ccf22, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x8f953)) returned 1 [0227.892] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21b270 | out: hHeap=0x1f0000) returned 1 [0227.892] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x21b080 [0227.892] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21b080 | out: hHeap=0x1f0000) returned 1 [0227.892] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xcfd4e910, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xcfd4e910, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dtplugin", cAlternateFileName="")) returned 1 [0227.892] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0227.892] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235b78 [0227.892] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220fe8 [0227.892] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0227.892] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21af88 | out: hHeap=0x1f0000) returned 1 [0227.892] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0227.892] lstrcmpW (lpString1="dtplugin", lpString2=".") returned 1 [0227.892] lstrcmpW (lpString1="dtplugin", lpString2="..") returned 1 [0227.892] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204db0 [0227.892] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2202b0 [0227.893] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7440, dwReserved0=0x0, dwReserved1=0x0, cFileName="dt_shmem.dll", cAlternateFileName="")) returned 1 [0227.893] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0227.893] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235b78 [0227.893] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2212e0 [0227.893] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0227.893] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0227.893] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0227.893] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_shmem.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dt_shmem.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0227.893] GetFileType (hFile=0x210) returned 0x1 [0227.894] CloseHandle (hObject=0x210) returned 1 [0227.894] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2203a0 [0227.894] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_shmem.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dt_shmem.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7440)) returned 1 [0227.894] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2203a0 | out: hHeap=0x1f0000) returned 1 [0227.894] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220238 [0227.894] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_shmem.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dt_shmem.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7440)) returned 1 [0227.894] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220238 | out: hHeap=0x1f0000) returned 1 [0227.894] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2201c0 [0227.895] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2201c0 | out: hHeap=0x1f0000) returned 1 [0227.895] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x6040, dwReserved0=0x0, dwReserved1=0x0, cFileName="dt_socket.dll", cAlternateFileName="DT_SOC~1.DLL")) returned 1 [0227.895] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0227.895] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235b78 [0227.895] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220e20 [0227.895] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0227.895] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0227.895] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0227.895] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_socket.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dt_socket.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0227.900] GetFileType (hFile=0x210) returned 0x1 [0227.901] CloseHandle (hObject=0x210) returned 1 [0227.901] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0227.901] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_socket.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dt_socket.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x6040)) returned 1 [0227.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0227.901] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2201c0 [0227.901] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_socket.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dt_socket.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x6040)) returned 1 [0227.902] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2201c0 | out: hHeap=0x1f0000) returned 1 [0227.902] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0227.902] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0227.902] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x21440, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.dll", cAlternateFileName="")) returned 1 [0227.902] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0227.902] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236260 [0227.902] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220eb8 [0227.902] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236260 | out: hHeap=0x1f0000) returned 1 [0227.902] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0227.902] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0227.903] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\eula.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\eula.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0227.903] GetFileType (hFile=0x210) returned 0x1 [0227.903] CloseHandle (hObject=0x210) returned 1 [0227.904] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0227.904] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\eula.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\eula.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x21440)) returned 1 [0227.904] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0227.904] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fc98 [0227.904] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\eula.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\eula.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x21440)) returned 1 [0227.904] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fc98 | out: hHeap=0x1f0000) returned 1 [0227.904] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220328 [0227.905] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220328 | out: hHeap=0x1f0000) returned 1 [0227.905] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xccb924da, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xccb924da, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xcd161ded, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x43153, dwReserved0=0x0, dwReserved1=0x0, cFileName="fontmanager.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="FONTMA~1.ODV")) returned 1 [0227.905] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21ab60 [0227.905] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235b78 [0227.905] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x21b080 [0227.905] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0227.905] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0227.905] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ab60 | out: hHeap=0x1f0000) returned 1 [0227.905] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\fontmanager.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\fontmanager.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0227.906] GetFileType (hFile=0x210) returned 0x1 [0227.906] CloseHandle (hObject=0x210) returned 1 [0227.906] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x21bb28 [0227.907] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\fontmanager.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\fontmanager.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xccb924da, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xccb924da, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xcd161ded, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x43153)) returned 1 [0227.907] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21bb28 | out: hHeap=0x1f0000) returned 1 [0227.907] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x21b460 [0227.907] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\fontmanager.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\fontmanager.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xccb924da, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xccb924da, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xcd161ded, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x43153)) returned 1 [0227.907] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21b460 | out: hHeap=0x1f0000) returned 1 [0227.907] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x21b558 [0227.907] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21b558 | out: hHeap=0x1f0000) returned 1 [0227.907] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2da40, dwReserved0=0x0, dwReserved1=0x0, cFileName="fxplugins.dll", cAlternateFileName="FXPLUG~1.DLL")) returned 1 [0227.907] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0227.907] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235b78 [0227.908] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220cf0 [0227.908] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235b78 | out: hHeap=0x1f0000) returned 1 [0227.908] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21b080 | out: hHeap=0x1f0000) returned 1 [0227.908] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0227.908] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\fxplugins.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\fxplugins.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0227.909] GetFileType (hFile=0x210) returned 0x1 [0227.909] CloseHandle (hObject=0x210) returned 1 [0227.909] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f770 [0227.910] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\fxplugins.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\fxplugins.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2da40)) returned 1 [0227.910] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f770 | out: hHeap=0x1f0000) returned 1 [0227.910] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f7e8 [0227.910] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\fxplugins.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\fxplugins.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2da40)) returned 1 [0227.910] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f7e8 | out: hHeap=0x1f0000) returned 1 [0227.910] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe00 [0227.910] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe00 | out: hHeap=0x1f0000) returned 1 [0227.910] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd1880f0, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xcd1880f0, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xcd58e1b4, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x40f53, dwReserved0=0x0, dwReserved1=0x0, cFileName="glass.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="GLASSD~1.ODV")) returned 1 [0227.910] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a4d0 [0227.910] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235700 [0227.911] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x21b080 [0227.911] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0227.911] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0227.911] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a4d0 | out: hHeap=0x1f0000) returned 1 [0227.911] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\glass.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\glass.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0228.244] GetFileType (hFile=0x22c) returned 0x1 [0228.244] CloseHandle (hObject=0x22c) returned 1 [0228.245] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x21be10 [0228.245] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\glass.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\glass.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd1880f0, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xcd1880f0, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xcd58e1b4, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x40f53)) returned 1 [0228.246] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21be10 | out: hHeap=0x1f0000) returned 1 [0228.246] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x21b840 [0228.246] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\glass.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\glass.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd1880f0, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xcd1880f0, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xcd58e1b4, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x40f53)) returned 1 [0228.246] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21b840 | out: hHeap=0x1f0000) returned 1 [0228.246] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x21b840 [0228.246] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21b840 | out: hHeap=0x1f0000) returned 1 [0228.246] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd5b4428, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xcd5b4428, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xcdd2770a, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x6f553, dwReserved0=0x0, dwReserved1=0x0, cFileName="glib-lite.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="GLIB-L~1.ODV")) returned 1 [0228.246] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a968 [0228.246] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235e50 [0228.246] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x21af88 [0228.246] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235e50 | out: hHeap=0x1f0000) returned 1 [0228.247] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21b080 | out: hHeap=0x1f0000) returned 1 [0228.247] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a968 | out: hHeap=0x1f0000) returned 1 [0228.247] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\glib-lite.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\glib-lite.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0228.247] GetFileType (hFile=0x22c) returned 0x1 [0228.247] CloseHandle (hObject=0x22c) returned 1 [0228.248] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x21b748 [0228.248] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\glib-lite.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\glib-lite.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd5b4428, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xcd5b4428, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xcdd2770a, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x6f553)) returned 1 [0228.248] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21b748 | out: hHeap=0x1f0000) returned 1 [0228.248] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x21b368 [0228.249] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\glib-lite.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\glib-lite.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd5b4428, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xcd5b4428, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xcdd2770a, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x6f553)) returned 1 [0228.249] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21b368 | out: hHeap=0x1f0000) returned 1 [0228.249] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x21b650 [0228.249] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21b650 | out: hHeap=0x1f0000) returned 1 [0228.249] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca8f9084, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xca8f9084, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xcb10f519, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x97553, dwReserved0=0x0, dwReserved1=0x0, cFileName="gstreamer-lite.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="GSTREA~1.ODV")) returned 1 [0228.249] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad410 [0228.249] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235e50 [0228.249] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2855c0 [0228.249] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235e50 | out: hHeap=0x1f0000) returned 1 [0228.249] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21af88 | out: hHeap=0x1f0000) returned 1 [0228.250] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad410 | out: hHeap=0x1f0000) returned 1 [0228.250] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\gstreamer-lite.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\gstreamer-lite.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0228.250] GetFileType (hFile=0x22c) returned 0x1 [0228.251] CloseHandle (hObject=0x22c) returned 1 [0228.251] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2853b0 [0228.252] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\gstreamer-lite.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\gstreamer-lite.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca8f9084, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xca8f9084, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xcb10f519, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x97553)) returned 1 [0228.252] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2853b0 | out: hHeap=0x1f0000) returned 1 [0228.252] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2858d8 [0228.252] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\gstreamer-lite.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\gstreamer-lite.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca8f9084, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xca8f9084, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xcb10f519, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x97553)) returned 1 [0228.252] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2858d8 | out: hHeap=0x1f0000) returned 1 [0228.252] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2856c8 [0228.252] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2856c8 | out: hHeap=0x1f0000) returned 1 [0228.252] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x26a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="hprof.dll", cAlternateFileName="")) returned 1 [0228.252] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0228.253] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235e50 [0228.253] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221248 [0228.253] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235e50 | out: hHeap=0x1f0000) returned 1 [0228.253] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2855c0 | out: hHeap=0x1f0000) returned 1 [0228.253] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0228.253] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\hprof.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\hprof.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0228.254] GetFileType (hFile=0x22c) returned 0x1 [0228.254] CloseHandle (hObject=0x22c) returned 1 [0228.259] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fa40 [0228.260] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\hprof.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\hprof.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x26a40)) returned 1 [0228.260] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fa40 | out: hHeap=0x1f0000) returned 1 [0228.260] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fab8 [0228.260] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\hprof.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\hprof.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x26a40)) returned 1 [0228.260] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fab8 | out: hHeap=0x1f0000) returned 1 [0228.260] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f7e8 [0228.260] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f7e8 | out: hHeap=0x1f0000) returned 1 [0228.260] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1e240, dwReserved0=0x0, dwReserved1=0x0, cFileName="instrument.dll", cAlternateFileName="INSTRU~1.DLL")) returned 1 [0228.260] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0228.260] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236260 [0228.260] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221410 [0228.260] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236260 | out: hHeap=0x1f0000) returned 1 [0228.260] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0228.261] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0228.261] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\instrument.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\instrument.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0228.261] GetFileType (hFile=0x22c) returned 0x1 [0228.262] CloseHandle (hObject=0x22c) returned 1 [0228.262] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe00 [0228.262] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\instrument.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\instrument.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1e240)) returned 1 [0228.262] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe00 | out: hHeap=0x1f0000) returned 1 [0228.262] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220580 [0228.262] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\instrument.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\instrument.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1e240)) returned 1 [0228.262] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220580 | out: hHeap=0x1f0000) returned 1 [0228.262] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0228.262] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0228.263] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="j2pcsc.dll", cAlternateFileName="")) returned 1 [0228.263] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0228.263] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236330 [0228.263] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2211b0 [0228.263] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236330 | out: hHeap=0x1f0000) returned 1 [0228.263] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0228.263] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0228.263] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pcsc.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\j2pcsc.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0228.264] GetFileType (hFile=0x22c) returned 0x1 [0228.264] CloseHandle (hObject=0x22c) returned 1 [0228.264] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0228.265] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pcsc.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\j2pcsc.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4a40)) returned 1 [0228.265] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0228.265] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fb30 [0228.265] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pcsc.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\j2pcsc.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4a40)) returned 1 [0228.265] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fb30 | out: hHeap=0x1f0000) returned 1 [0228.265] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2203a0 [0228.265] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2203a0 | out: hHeap=0x1f0000) returned 1 [0228.265] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf840, dwReserved0=0x0, dwReserved1=0x0, cFileName="j2pkcs11.dll", cAlternateFileName="")) returned 1 [0228.265] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0228.265] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235e50 [0228.266] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220cf0 [0228.266] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235e50 | out: hHeap=0x1f0000) returned 1 [0228.266] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0228.266] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0228.266] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pkcs11.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\j2pkcs11.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0228.267] GetFileType (hFile=0x22c) returned 0x1 [0228.267] CloseHandle (hObject=0x22c) returned 1 [0228.267] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220580 [0228.267] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pkcs11.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\j2pkcs11.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf840)) returned 1 [0228.267] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220580 | out: hHeap=0x1f0000) returned 1 [0228.267] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fb30 [0228.268] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pkcs11.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\j2pkcs11.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf840)) returned 1 [0228.268] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fb30 | out: hHeap=0x1f0000) returned 1 [0228.268] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0228.268] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0228.268] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5240, dwReserved0=0x0, dwReserved1=0x0, cFileName="jaas_nt.dll", cAlternateFileName="")) returned 1 [0228.268] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0228.268] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235e50 [0228.268] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221248 [0228.268] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235e50 | out: hHeap=0x1f0000) returned 1 [0228.268] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0228.268] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0228.269] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jaas_nt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jaas_nt.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0228.269] GetFileType (hFile=0x22c) returned 0x1 [0228.270] CloseHandle (hObject=0x22c) returned 1 [0228.270] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220490 [0228.270] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jaas_nt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jaas_nt.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5240)) returned 1 [0228.270] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220490 | out: hHeap=0x1f0000) returned 1 [0228.270] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21ff68 [0228.270] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jaas_nt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jaas_nt.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5240)) returned 1 [0228.270] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ff68 | out: hHeap=0x1f0000) returned 1 [0228.270] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fef0 [0228.319] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fef0 | out: hHeap=0x1f0000) returned 1 [0228.319] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8640, dwReserved0=0x0, dwReserved1=0x0, cFileName="jabswitch.exe", cAlternateFileName="JABSWI~1.EXE")) returned 1 [0228.319] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0228.319] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236190 [0228.320] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221080 [0228.320] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236190 | out: hHeap=0x1f0000) returned 1 [0228.320] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0228.320] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0228.321] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jabswitch.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jabswitch.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0228.321] GetFileType (hFile=0x22c) returned 0x1 [0228.322] CloseHandle (hObject=0x22c) returned 1 [0228.322] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fef0 [0228.322] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jabswitch.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jabswitch.exe"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8640)) returned 1 [0228.322] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fef0 | out: hHeap=0x1f0000) returned 1 [0228.322] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fa40 [0228.323] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jabswitch.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jabswitch.exe"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8640)) returned 1 [0228.323] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fa40 | out: hHeap=0x1f0000) returned 1 [0228.323] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0228.323] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0228.323] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="java-rmi.exe", cAlternateFileName="")) returned 1 [0228.323] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0228.323] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235e50 [0228.323] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221248 [0228.323] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235e50 | out: hHeap=0x1f0000) returned 1 [0228.323] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0228.324] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0228.324] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\java-rmi.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java-rmi.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0228.324] GetFileType (hFile=0x22c) returned 0x1 [0228.326] CloseHandle (hObject=0x22c) returned 1 [0228.326] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f7e8 [0228.326] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\java-rmi.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java-rmi.exe"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e40)) returned 1 [0228.326] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f7e8 | out: hHeap=0x1f0000) returned 1 [0228.326] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f7e8 [0228.326] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\java-rmi.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java-rmi.exe"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e40)) returned 1 [0228.326] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f7e8 | out: hHeap=0x1f0000) returned 1 [0228.326] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f7e8 [0228.326] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f7e8 | out: hHeap=0x1f0000) returned 1 [0228.326] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x27040, dwReserved0=0x0, dwReserved1=0x0, cFileName="java.dll", cAlternateFileName="")) returned 1 [0228.326] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0228.327] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235e50 [0228.327] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221a98 [0228.327] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235e50 | out: hHeap=0x1f0000) returned 1 [0228.327] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0228.327] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0228.327] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\java.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0228.328] GetFileType (hFile=0x22c) returned 0x1 [0228.328] CloseHandle (hObject=0x22c) returned 1 [0228.328] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2203a0 [0228.328] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\java.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x27040)) returned 1 [0228.328] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2203a0 | out: hHeap=0x1f0000) returned 1 [0228.328] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0228.328] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\java.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x27040)) returned 1 [0228.328] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0228.328] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21ff68 [0228.328] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ff68 | out: hHeap=0x1f0000) returned 1 [0228.329] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x32840, dwReserved0=0x0, dwReserved1=0x0, cFileName="java.exe", cAlternateFileName="")) returned 1 [0228.329] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0228.329] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235e50 [0228.329] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221708 [0228.329] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235e50 | out: hHeap=0x1f0000) returned 1 [0228.329] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0228.329] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0228.330] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\java.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0228.330] GetFileType (hFile=0x22c) returned 0x1 [0228.330] CloseHandle (hObject=0x22c) returned 1 [0228.331] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fc98 [0228.331] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\java.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java.exe"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x32840)) returned 1 [0228.331] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fc98 | out: hHeap=0x1f0000) returned 1 [0228.331] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21ffe0 [0228.331] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\java.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java.exe"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x32840)) returned 1 [0228.331] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ffe0 | out: hHeap=0x1f0000) returned 1 [0228.331] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220058 [0228.331] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220058 | out: hHeap=0x1f0000) returned 1 [0228.332] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x22c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="JavaAccessBridge-64.dll", cAlternateFileName="JAVAAC~1.DLL")) returned 1 [0228.332] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238d00 [0228.332] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235e50 [0228.332] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220e20 [0228.332] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235e50 | out: hHeap=0x1f0000) returned 1 [0228.332] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0228.332] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238d00 | out: hHeap=0x1f0000) returned 1 [0228.333] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\JavaAccessBridge-64.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaaccessbridge-64.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0228.646] GetFileType (hFile=0x22c) returned 0x1 [0228.647] CloseHandle (hObject=0x22c) returned 1 [0228.647] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0228.648] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\JavaAccessBridge-64.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaaccessbridge-64.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x22c40)) returned 1 [0228.648] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0228.648] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213680 [0228.648] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\JavaAccessBridge-64.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaaccessbridge-64.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x22c40)) returned 1 [0228.648] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213680 | out: hHeap=0x1f0000) returned 1 [0228.648] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2133d8 [0228.648] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2133d8 | out: hHeap=0x1f0000) returned 1 [0228.649] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2dc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="javacpl.cpl", cAlternateFileName="")) returned 1 [0228.649] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0228.649] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235700 [0228.649] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221410 [0228.649] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0228.649] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0228.649] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0228.650] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.cpl" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javacpl.cpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0228.650] GetFileType (hFile=0x22c) returned 0x1 [0228.651] CloseHandle (hObject=0x22c) returned 1 [0228.651] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fc98 [0228.651] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.cpl" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javacpl.cpl"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2dc00)) returned 1 [0228.651] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fc98 | out: hHeap=0x1f0000) returned 1 [0228.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fb30 [0228.652] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.cpl" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javacpl.cpl"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2dc00)) returned 1 [0228.652] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fb30 | out: hHeap=0x1f0000) returned 1 [0228.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220490 [0228.652] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220490 | out: hHeap=0x1f0000) returned 1 [0228.652] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="javacpl.exe", cAlternateFileName="")) returned 1 [0228.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0228.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2359d8 [0228.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221a98 [0228.653] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2359d8 | out: hHeap=0x1f0000) returned 1 [0228.653] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0228.653] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0228.654] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javacpl.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0228.654] GetFileType (hFile=0x22c) returned 0x1 [0228.654] CloseHandle (hObject=0x22c) returned 1 [0228.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fa40 [0228.655] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javacpl.exe"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13a40)) returned 1 [0228.655] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fa40 | out: hHeap=0x1f0000) returned 1 [0228.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fab8 [0228.655] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javacpl.exe"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13a40)) returned 1 [0228.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fab8 | out: hHeap=0x1f0000) returned 1 [0228.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fef0 [0228.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fef0 | out: hHeap=0x1f0000) returned 1 [0228.656] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x10e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="javafx_font.dll", cAlternateFileName="JAVAFX~1.DLL")) returned 1 [0228.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0228.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235700 [0228.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220fe8 [0228.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0228.657] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0228.657] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0228.657] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_font.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0228.658] GetFileType (hFile=0x22c) returned 0x1 [0228.658] CloseHandle (hObject=0x22c) returned 1 [0228.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220328 [0228.659] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_font.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x10e40)) returned 1 [0228.659] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220328 | out: hHeap=0x1f0000) returned 1 [0228.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fa40 [0228.659] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_font.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x10e40)) returned 1 [0228.659] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fa40 | out: hHeap=0x1f0000) returned 1 [0228.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0228.659] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0228.659] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb5f6fbf, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xcb5f6fbf, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xcba95670, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x83753, dwReserved0=0x0, dwReserved1=0x0, cFileName="javafx_font_t2k.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="JAVAFX~1.ODV")) returned 1 [0228.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad4c8 [0228.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235ff0 [0228.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285098 [0228.660] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235ff0 | out: hHeap=0x1f0000) returned 1 [0228.660] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0228.660] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad4c8 | out: hHeap=0x1f0000) returned 1 [0228.661] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font_t2k.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_font_t2k.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0228.661] GetFileType (hFile=0x22c) returned 0x1 [0228.662] CloseHandle (hObject=0x22c) returned 1 [0228.662] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2854b8 [0228.662] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font_t2k.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_font_t2k.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb5f6fbf, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xcb5f6fbf, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xcba95670, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x83753)) returned 1 [0228.662] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2854b8 | out: hHeap=0x1f0000) returned 1 [0228.662] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2856c8 [0228.663] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font_t2k.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_font_t2k.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb5f6fbf, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xcb5f6fbf, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xcba95670, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x83753)) returned 1 [0228.663] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2856c8 | out: hHeap=0x1f0000) returned 1 [0228.663] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2859e0 [0228.663] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2859e0 | out: hHeap=0x1f0000) returned 1 [0228.663] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1f440, dwReserved0=0x0, dwReserved1=0x0, cFileName="javafx_iio.dll", cAlternateFileName="JAVAFX~3.DLL")) returned 1 [0228.663] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0228.663] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2359d8 [0228.664] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220eb8 [0228.664] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2359d8 | out: hHeap=0x1f0000) returned 1 [0228.664] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285098 | out: hHeap=0x1f0000) returned 1 [0228.664] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0228.665] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_iio.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_iio.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0228.665] GetFileType (hFile=0x22c) returned 0x1 [0228.666] CloseHandle (hObject=0x22c) returned 1 [0228.666] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0228.666] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_iio.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_iio.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1f440)) returned 1 [0228.667] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0228.667] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21ffe0 [0228.667] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_iio.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_iio.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1f440)) returned 1 [0228.667] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ffe0 | out: hHeap=0x1f0000) returned 1 [0228.667] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0228.667] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0228.667] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x32840, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaw.exe", cAlternateFileName="")) returned 1 [0228.668] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0228.668] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235ff0 [0228.668] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221410 [0228.668] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235ff0 | out: hHeap=0x1f0000) returned 1 [0228.668] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0228.668] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0228.669] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\javaw.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaw.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0228.669] GetFileType (hFile=0x22c) returned 0x1 [0228.670] CloseHandle (hObject=0x22c) returned 1 [0228.670] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220328 [0228.670] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\javaw.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaw.exe"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x32840)) returned 1 [0228.670] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220328 | out: hHeap=0x1f0000) returned 1 [0228.671] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fab8 [0228.671] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\javaw.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaw.exe"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x32840)) returned 1 [0228.671] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fab8 | out: hHeap=0x1f0000) returned 1 [0228.671] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fb30 [0228.671] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fb30 | out: hHeap=0x1f0000) returned 1 [0228.671] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e040, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaws.exe", cAlternateFileName="")) returned 1 [0228.671] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0228.671] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2359d8 [0228.672] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220c58 [0228.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2359d8 | out: hHeap=0x1f0000) returned 1 [0228.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0228.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0228.673] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\javaws.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaws.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0228.673] GetFileType (hFile=0x22c) returned 0x1 [0228.673] CloseHandle (hObject=0x22c) returned 1 [0228.674] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0228.674] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\javaws.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaws.exe"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e040)) returned 1 [0228.674] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0228.674] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fa40 [0228.674] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\javaws.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaws.exe"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e040)) returned 1 [0228.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fa40 | out: hHeap=0x1f0000) returned 1 [0228.675] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f770 [0228.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f770 | out: hHeap=0x1f0000) returned 1 [0228.675] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7440, dwReserved0=0x0, dwReserved1=0x0, cFileName="java_crw_demo.dll", cAlternateFileName="JAVA_C~1.DLL")) returned 1 [0228.675] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238de0 [0228.675] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2359d8 [0228.675] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2214a8 [0228.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2359d8 | out: hHeap=0x1f0000) returned 1 [0228.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0228.676] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238de0 | out: hHeap=0x1f0000) returned 1 [0228.676] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\java_crw_demo.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java_crw_demo.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0228.676] GetFileType (hFile=0x22c) returned 0x1 [0228.677] CloseHandle (hObject=0x22c) returned 1 [0228.678] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212c68 [0228.678] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\java_crw_demo.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java_crw_demo.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7440)) returned 1 [0228.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212c68 | out: hHeap=0x1f0000) returned 1 [0228.678] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213818 [0228.678] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\java_crw_demo.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java_crw_demo.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7440)) returned 1 [0228.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213818 | out: hHeap=0x1f0000) returned 1 [0228.678] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0228.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0228.678] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3840, dwReserved0=0x0, dwReserved1=0x0, cFileName="jawt.dll", cAlternateFileName="")) returned 1 [0228.679] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0228.679] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236260 [0228.679] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221410 [0228.679] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236260 | out: hHeap=0x1f0000) returned 1 [0228.679] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0228.679] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0228.680] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jawt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jawt.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0228.680] GetFileType (hFile=0x22c) returned 0x1 [0228.681] CloseHandle (hObject=0x22c) returned 1 [0228.681] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0228.681] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jawt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jawt.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3840)) returned 1 [0228.681] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0228.682] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe00 [0228.682] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jawt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jawt.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3840)) returned 1 [0228.682] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe00 | out: hHeap=0x1f0000) returned 1 [0228.682] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220490 [0228.682] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220490 | out: hHeap=0x1f0000) returned 1 [0228.682] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="JAWTAccessBridge-64.dll", cAlternateFileName="JAWTAC~1.DLL")) returned 1 [0228.682] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c20 [0228.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2359d8 [0228.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220cf0 [0228.683] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2359d8 | out: hHeap=0x1f0000) returned 1 [0228.683] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0228.683] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c20 | out: hHeap=0x1f0000) returned 1 [0228.684] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\JAWTAccessBridge-64.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jawtaccessbridge-64.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0228.684] GetFileType (hFile=0x22c) returned 0x1 [0228.685] CloseHandle (hObject=0x22c) returned 1 [0228.685] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0228.685] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\JAWTAccessBridge-64.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jawtaccessbridge-64.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3c40)) returned 1 [0228.685] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0228.685] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0228.685] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\JAWTAccessBridge-64.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jawtaccessbridge-64.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3c40)) returned 1 [0228.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0228.686] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0228.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0228.686] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x31440, dwReserved0=0x0, dwReserved1=0x0, cFileName="jdwp.dll", cAlternateFileName="")) returned 1 [0228.686] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0228.686] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235ff0 [0228.686] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220e20 [0228.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235ff0 | out: hHeap=0x1f0000) returned 1 [0228.687] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0228.687] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0228.687] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jdwp.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jdwp.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0228.688] GetFileType (hFile=0x22c) returned 0x1 [0228.688] CloseHandle (hObject=0x22c) returned 1 [0228.689] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f7e8 [0228.689] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jdwp.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jdwp.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x31440)) returned 1 [0228.689] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f7e8 | out: hHeap=0x1f0000) returned 1 [0228.689] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fc20 [0228.689] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jdwp.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jdwp.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x31440)) returned 1 [0228.689] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fc20 | out: hHeap=0x1f0000) returned 1 [0228.690] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fef0 [0228.690] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fef0 | out: hHeap=0x1f0000) returned 1 [0228.690] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x6840, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfr.dll", cAlternateFileName="")) returned 1 [0228.690] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236260 [0228.690] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0228.691] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jfr.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0228.691] GetFileType (hFile=0x22c) returned 0x1 [0228.691] CloseHandle (hObject=0x22c) returned 1 [0228.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2359d8 [0228.692] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jfr.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfr.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x6840)) returned 1 [0228.692] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2359d8 | out: hHeap=0x1f0000) returned 1 [0228.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236330 [0228.692] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jfr.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfr.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x6840)) returned 1 [0229.071] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236330 | out: hHeap=0x1f0000) returned 1 [0229.071] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236058 [0229.071] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236058 | out: hHeap=0x1f0000) returned 1 [0229.071] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x22240, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfxmedia.dll", cAlternateFileName="")) returned 1 [0229.071] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0229.072] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236330 [0229.072] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2217a0 [0229.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236330 | out: hHeap=0x1f0000) returned 1 [0229.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236260 | out: hHeap=0x1f0000) returned 1 [0229.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0229.072] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jfxmedia.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfxmedia.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0229.073] GetFileType (hFile=0x1c0) returned 0x1 [0229.073] CloseHandle (hObject=0x1c0) returned 1 [0229.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fc20 [0229.073] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jfxmedia.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfxmedia.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x22240)) returned 1 [0229.074] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fc20 | out: hHeap=0x1f0000) returned 1 [0229.074] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220508 [0229.074] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jfxmedia.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfxmedia.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x22240)) returned 1 [0229.074] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220508 | out: hHeap=0x1f0000) returned 1 [0229.074] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220328 [0229.074] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220328 | out: hHeap=0x1f0000) returned 1 [0229.074] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7511d3f, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7511d3f, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa75aa64d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2794a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfxwebkit.dll", cAlternateFileName="JFXWEB~1.DLL")) returned 1 [0229.074] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0229.074] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236058 [0229.074] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221080 [0229.074] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236058 | out: hHeap=0x1f0000) returned 1 [0229.074] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0229.075] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0229.075] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jfxwebkit.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfxwebkit.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0229.075] GetFileType (hFile=0x1c0) returned 0x1 [0229.075] CloseHandle (hObject=0x1c0) returned 1 [0229.076] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220490 [0229.076] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jfxwebkit.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfxwebkit.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7511d3f, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7511d3f, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa75aa64d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2794a40)) returned 1 [0229.076] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220490 | out: hHeap=0x1f0000) returned 1 [0229.076] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0229.076] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jfxwebkit.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfxwebkit.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7511d3f, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7511d3f, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa75aa64d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2794a40)) returned 1 [0229.076] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0229.076] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2201c0 [0229.077] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2201c0 | out: hHeap=0x1f0000) returned 1 [0229.077] GetLastError () returned 0x0 [0229.078] CryptAcquireContextA (in: phProv=0x2573d20, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2573d20*=0x2130a8) returned 1 [0229.079] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238078 | out: pbBuffer=0x238078) returned 1 [0229.079] CryptReleaseContext (hProv=0x2130a8, dwFlags=0x0) returned 1 [0229.079] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0229.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x255c88 [0229.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2376f8 [0229.079] QueryPerformanceCounter (in: lpPerformanceCount=0x2573cb4 | out: lpPerformanceCount=0x2573cb4*=38644786981) returned 1 [0229.079] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x2573cf4 | out: lpSystemTimeAsFileTime=0x2573cf4) [0229.079] QueryPerformanceCounter (in: lpPerformanceCount=0x2573cb4 | out: lpPerformanceCount=0x2573cb4*=38644811840) returned 1 [0229.079] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x2573cf4 | out: lpSystemTimeAsFileTime=0x2573cf4) [0229.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238d70 [0229.080] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x2595a0 [0229.080] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x237068 [0229.080] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x233568 [0229.080] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffa0 [0229.080] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206838 [0229.080] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffb8 [0229.080] GetLastError () returned 0x0 [0229.080] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jfxwebkit.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfxwebkit.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x2573c84, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0229.080] GetFileType (hFile=0x1c0) returned 0x1 [0229.081] SetFilePointerEx (in: hFile=0x1c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2573cf0 | out: lpNewFilePointer=0x0) returned 1 [0229.081] ReadFile (in: hFile=0x1c0, lpBuffer=0x25891f0, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x2573cc8, lpOverlapped=0x0 | out: lpBuffer=0x25891f0*, lpNumberOfBytesRead=0x2573cc8*=0x14000, lpOverlapped=0x0) returned 1 [0229.085] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x28efd8 [0229.085] ReadFile (in: hFile=0x1c0, lpBuffer=0x28efd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2573c6c, lpOverlapped=0x0 | out: lpBuffer=0x28efd8*, lpNumberOfBytesRead=0x2573c6c*=0x1000, lpOverlapped=0x0) returned 1 [0229.086] SetFilePointerEx (in: hFile=0x1c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2573cf8 | out: lpNewFilePointer=0x0) returned 1 [0229.086] WriteFile (in: hFile=0x1c0, lpBuffer=0x2574200*, nNumberOfBytesToWrite=0x14000, lpNumberOfBytesWritten=0x2573c64, lpOverlapped=0x0 | out: lpBuffer=0x2574200*, lpNumberOfBytesWritten=0x2573c64*=0x14000, lpOverlapped=0x0) returned 1 [0229.087] WriteFile (in: hFile=0x1c0, lpBuffer=0x28efd8*, nNumberOfBytesToWrite=0xff0, lpNumberOfBytesWritten=0x2573c90, lpOverlapped=0x0 | out: lpBuffer=0x28efd8*, lpNumberOfBytesWritten=0x2573c90*=0xff0, lpOverlapped=0x0) returned 1 [0229.088] SetFilePointerEx (in: hFile=0x1c0, liDistanceToMove=0x15f90, lpNewFilePointer=0x0, dwMoveMethod=0x2573cd8 | out: lpNewFilePointer=0x0) returned 1 [0229.088] ReadFile (in: hFile=0x1c0, lpBuffer=0x25891f0, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x2573cb0, lpOverlapped=0x0 | out: lpBuffer=0x25891f0*, lpNumberOfBytesRead=0x2573cb0*=0x14000, lpOverlapped=0x0) returned 1 [0229.090] ReadFile (in: hFile=0x1c0, lpBuffer=0x28efd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2573c54, lpOverlapped=0x0 | out: lpBuffer=0x28efd8*, lpNumberOfBytesRead=0x2573c54*=0x1000, lpOverlapped=0x0) returned 1 [0229.091] SetFilePointerEx (in: hFile=0x1c0, liDistanceToMove=0x15f90, lpNewFilePointer=0x0, dwMoveMethod=0x2573cf8 | out: lpNewFilePointer=0x0) returned 1 [0229.091] WriteFile (in: hFile=0x1c0, lpBuffer=0x2574200*, nNumberOfBytesToWrite=0x14000, lpNumberOfBytesWritten=0x2573c64, lpOverlapped=0x0 | out: lpBuffer=0x2574200*, lpNumberOfBytesWritten=0x2573c64*=0x14000, lpOverlapped=0x0) returned 1 [0229.092] WriteFile (in: hFile=0x1c0, lpBuffer=0x28efd8*, nNumberOfBytesToWrite=0xff0, lpNumberOfBytesWritten=0x2573c90, lpOverlapped=0x0 | out: lpBuffer=0x28efd8*, lpNumberOfBytesWritten=0x2573c90*=0xff0, lpOverlapped=0x0) returned 1 [0229.092] SetFilePointerEx (in: hFile=0x1c0, liDistanceToMove=0xdbba0, lpNewFilePointer=0x0, dwMoveMethod=0x2573cd8 | out: lpNewFilePointer=0x0) returned 1 [0229.092] ReadFile (in: hFile=0x1c0, lpBuffer=0x25891f0, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x2573cb0, lpOverlapped=0x0 | out: lpBuffer=0x25891f0*, lpNumberOfBytesRead=0x2573cb0*=0x14000, lpOverlapped=0x0) returned 1 [0229.095] ReadFile (in: hFile=0x1c0, lpBuffer=0x28efd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2573c54, lpOverlapped=0x0 | out: lpBuffer=0x28efd8*, lpNumberOfBytesRead=0x2573c54*=0x1000, lpOverlapped=0x0) returned 1 [0229.097] SetFilePointerEx (in: hFile=0x1c0, liDistanceToMove=0xdbba0, lpNewFilePointer=0x0, dwMoveMethod=0x2573cf8 | out: lpNewFilePointer=0x0) returned 1 [0229.097] WriteFile (in: hFile=0x1c0, lpBuffer=0x2574200*, nNumberOfBytesToWrite=0x14000, lpNumberOfBytesWritten=0x2573c64, lpOverlapped=0x0 | out: lpBuffer=0x2574200*, lpNumberOfBytesWritten=0x2573c64*=0x14000, lpOverlapped=0x0) returned 1 [0229.098] WriteFile (in: hFile=0x1c0, lpBuffer=0x28efd8*, nNumberOfBytesToWrite=0xff0, lpNumberOfBytesWritten=0x2573ce0, lpOverlapped=0x0 | out: lpBuffer=0x28efd8*, lpNumberOfBytesWritten=0x2573ce0*=0xff0, lpOverlapped=0x0) returned 1 [0229.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x28efd8 | out: hHeap=0x1f0000) returned 1 [0229.099] CloseHandle (hObject=0x1c0) returned 1 [0232.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228830 [0232.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238370 [0232.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2384b0 [0232.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x228bd8 [0232.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f30 [0232.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204dd0 [0232.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x238b90 [0232.355] GetLastError () returned 0x0 [0232.356] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238e50 [0232.356] GetLastError () returned 0x0 [0232.356] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239010 [0232.356] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214b60 [0232.356] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238320 [0232.356] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2852a8 [0232.356] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ae0 [0232.356] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0232.357] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20fef8 [0232.357] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238aa0 [0232.357] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0232.357] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210018 [0232.357] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238118 [0232.357] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2854b8 [0232.357] GetLastError () returned 0x0 [0232.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238a50 [0232.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238ad0 [0232.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a00 [0232.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ad0 | out: hHeap=0x1f0000) returned 1 [0232.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238af0 [0232.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a00 | out: hHeap=0x1f0000) returned 1 [0232.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a50 | out: hHeap=0x1f0000) returned 1 [0232.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ab0 [0232.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x20ffd0 [0232.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ab0 | out: hHeap=0x1f0000) returned 1 [0232.359] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x210078 [0232.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffd0 | out: hHeap=0x1f0000) returned 1 [0232.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238af0 | out: hHeap=0x1f0000) returned 1 [0232.359] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x20ff28 [0232.359] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff70 [0232.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff28 | out: hHeap=0x1f0000) returned 1 [0232.359] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff28 [0232.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff70 | out: hHeap=0x1f0000) returned 1 [0232.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210078 | out: hHeap=0x1f0000) returned 1 [0232.359] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff70 [0232.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204c70 [0232.360] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff70 | out: hHeap=0x1f0000) returned 1 [0232.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f70 [0232.360] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c70 | out: hHeap=0x1f0000) returned 1 [0232.360] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff28 | out: hHeap=0x1f0000) returned 1 [0232.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e30 [0232.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238398 [0232.360] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e30 | out: hHeap=0x1f0000) returned 1 [0232.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204df0 [0232.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0232.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f70 | out: hHeap=0x1f0000) returned 1 [0232.361] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204f30 [0232.361] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x2067d8 [0232.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f30 | out: hHeap=0x1f0000) returned 1 [0232.361] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238398 [0232.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2067d8 | out: hHeap=0x1f0000) returned 1 [0232.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204df0 | out: hHeap=0x1f0000) returned 1 [0232.361] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b00 [0232.362] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x20ff28 [0232.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b00 | out: hHeap=0x1f0000) returned 1 [0232.362] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff70 [0232.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff28 | out: hHeap=0x1f0000) returned 1 [0232.362] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204f30 [0232.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff70 | out: hHeap=0x1f0000) returned 1 [0232.362] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x2067d8 [0232.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f30 | out: hHeap=0x1f0000) returned 1 [0232.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2067d8 | out: hHeap=0x1f0000) returned 1 [0232.363] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0232.363] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0232.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211048 [0232.363] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2852a8 | out: hHeap=0x1f0000) returned 1 [0232.363] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0232.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c20 [0232.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0232.363] CryptAcquireContextA (in: phProv=0x2573d20, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2573d20*=0x212c68) returned 1 [0232.365] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x238320 | out: pbBuffer=0x238320) returned 1 [0232.365] CryptReleaseContext (hProv=0x212c68, dwFlags=0x0) returned 1 [0232.365] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0232.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238320 [0232.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238370 [0232.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239278 [0232.365] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0232.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2104b8 [0232.365] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239278 | out: hHeap=0x1f0000) returned 1 [0232.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8270 [0232.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff28 [0232.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x214d00 [0232.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238320 [0232.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285ae8 [0232.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c70 [0232.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a90 [0232.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x238398 [0232.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285098 [0232.367] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238ba0 [0232.393] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238578 [0232.393] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ff70 [0232.393] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b30 [0232.393] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384d8 [0232.393] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x20ffd0 [0232.393] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffd0 | out: hHeap=0x1f0000) returned 1 [0232.393] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384d8 | out: hHeap=0x1f0000) returned 1 [0232.393] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b30 | out: hHeap=0x1f0000) returned 1 [0232.393] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff70 | out: hHeap=0x1f0000) returned 1 [0232.393] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238578 | out: hHeap=0x1f0000) returned 1 [0232.393] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ba0 | out: hHeap=0x1f0000) returned 1 [0232.394] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285098 | out: hHeap=0x1f0000) returned 1 [0232.394] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0232.394] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a90 | out: hHeap=0x1f0000) returned 1 [0232.394] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239160 [0232.394] GetLastError () returned 0x0 [0232.394] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238f30 [0232.394] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0232.394] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0232.394] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0232.394] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0232.394] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0232.395] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0232.395] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x24ea80 [0232.395] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2855c0 [0232.395] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0232.395] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0232.395] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0232.395] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0232.395] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2859e0 [0232.395] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0232.395] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0232.395] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x2303e8 [0232.395] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x251068 [0232.395] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x237180 [0232.395] QueryPerformanceCounter (in: lpPerformanceCount=0x2573870 | out: lpPerformanceCount=0x2573870*=38976429969) returned 1 [0232.396] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x25738b0 | out: lpSystemTimeAsFileTime=0x25738b0) [0232.396] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238b60 [0232.396] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0232.396] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e30 [0232.396] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e30 | out: hHeap=0x1f0000) returned 1 [0232.397] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0232.397] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0232.397] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e30 [0232.397] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e30 | out: hHeap=0x1f0000) returned 1 [0232.397] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0232.397] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b60 | out: hHeap=0x1f0000) returned 1 [0232.397] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0232.397] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238f68 [0232.397] GetLastError () returned 0x0 [0232.397] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210830 [0232.397] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210958 [0232.397] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210a80 [0232.398] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238398 [0232.398] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238708 [0232.398] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x211170 [0232.398] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210708 [0232.398] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238578 [0232.398] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210ba8 [0232.398] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x222ee8 [0232.398] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0232.398] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0232.398] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0232.398] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x20c2c0 [0232.398] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0232.398] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238550 [0232.398] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238780 [0232.398] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238550 | out: hHeap=0x1f0000) returned 1 [0232.399] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210cd0 [0232.399] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238780 | out: hHeap=0x1f0000) returned 1 [0232.399] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0232.399] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x234b90 [0232.399] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b90 | out: hHeap=0x1f0000) returned 1 [0232.399] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0232.399] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20c2c0 | out: hHeap=0x1f0000) returned 1 [0232.399] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x20ff70 [0232.399] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2285a8 [0232.399] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238550 [0232.399] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238780 [0232.399] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2384d8 [0232.399] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2385a0 [0232.399] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238780 | out: hHeap=0x1f0000) returned 1 [0232.399] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238550 | out: hHeap=0x1f0000) returned 1 [0232.400] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x229418 [0232.400] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238550 [0232.400] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x238668 [0232.400] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238550 | out: hHeap=0x1f0000) returned 1 [0232.400] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0232.400] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238668 | out: hHeap=0x1f0000) returned 1 [0232.400] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2067d8 [0232.400] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x2a93f8 [0232.400] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a93f8 | out: hHeap=0x1f0000) returned 1 [0232.400] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2067d8 | out: hHeap=0x1f0000) returned 1 [0232.400] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238578 | out: hHeap=0x1f0000) returned 1 [0232.400] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210390 [0232.400] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0232.400] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0232.400] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204e70 [0232.400] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x210df8 [0232.401] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2105e0 [0232.401] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238708 | out: hHeap=0x1f0000) returned 1 [0232.401] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab458 [0232.401] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2105e0 | out: hHeap=0x1f0000) returned 1 [0232.401] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385a0 | out: hHeap=0x1f0000) returned 1 [0232.401] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384d8 | out: hHeap=0x1f0000) returned 1 [0232.401] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2285a8 | out: hHeap=0x1f0000) returned 1 [0232.401] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210df8 | out: hHeap=0x1f0000) returned 1 [0232.401] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e70 | out: hHeap=0x1f0000) returned 1 [0232.401] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff70 | out: hHeap=0x1f0000) returned 1 [0232.401] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210cd0 | out: hHeap=0x1f0000) returned 1 [0232.401] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab330 [0232.401] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab330 | out: hHeap=0x1f0000) returned 1 [0232.401] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ee8 | out: hHeap=0x1f0000) returned 1 [0232.401] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210ba8 | out: hHeap=0x1f0000) returned 1 [0232.402] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210390 | out: hHeap=0x1f0000) returned 1 [0232.402] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210708 | out: hHeap=0x1f0000) returned 1 [0232.402] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211170 | out: hHeap=0x1f0000) returned 1 [0232.402] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0232.402] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210a80 | out: hHeap=0x1f0000) returned 1 [0232.402] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0232.402] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac928 [0232.402] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abd98 [0232.402] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac928 | out: hHeap=0x1f0000) returned 1 [0232.402] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abd98 | out: hHeap=0x1f0000) returned 1 [0232.402] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab458 | out: hHeap=0x1f0000) returned 1 [0232.402] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210830 | out: hHeap=0x1f0000) returned 1 [0232.402] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2859e0 | out: hHeap=0x1f0000) returned 1 [0232.402] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24ea80 | out: hHeap=0x1f0000) returned 1 [0232.402] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x237298 [0232.403] GetLastError () returned 0x0 [0232.403] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238b70 [0232.403] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389e0 [0232.404] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jfxwebkit.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfxwebkit.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2573c20, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0232.404] GetFileType (hFile=0x1c0) returned 0x1 [0232.404] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x288fa8 [0232.404] SetFilePointerEx (in: hFile=0x1c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2573ba8 | out: lpNewFilePointer=0x0) returned 1 [0232.405] GetLastError () returned 0xb7 [0232.408] CloseHandle (hObject=0x1c0) returned 1 [0232.408] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0232.409] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fb50 [0232.409] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0232.409] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x11e) returned 0x210958 [0232.409] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0232.409] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jfxwebkit.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfxwebkit.dll"), lpNewFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jfxwebkit.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfxwebkit.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwFlags=0x2) returned 1 [0232.410] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210958 | out: hHeap=0x1f0000) returned 1 [0232.410] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389e0 | out: hHeap=0x1f0000) returned 1 [0232.410] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b70 | out: hHeap=0x1f0000) returned 1 [0232.410] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2855c0 | out: hHeap=0x1f0000) returned 1 [0232.410] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285ae8 | out: hHeap=0x1f0000) returned 1 [0232.411] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0232.411] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c70 | out: hHeap=0x1f0000) returned 1 [0232.411] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d00 | out: hHeap=0x1f0000) returned 1 [0232.411] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ff28 | out: hHeap=0x1f0000) returned 1 [0232.411] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8270 | out: hHeap=0x1f0000) returned 1 [0232.411] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237298 | out: hHeap=0x1f0000) returned 1 [0232.411] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0232.411] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2104b8 | out: hHeap=0x1f0000) returned 1 [0232.412] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x251068 | out: hHeap=0x1f0000) returned 1 [0232.412] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237180 | out: hHeap=0x1f0000) returned 1 [0232.412] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c20 | out: hHeap=0x1f0000) returned 1 [0232.412] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238b90 | out: hHeap=0x1f0000) returned 1 [0232.412] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x210018 | out: hHeap=0x1f0000) returned 1 [0232.412] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0232.412] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238aa0 | out: hHeap=0x1f0000) returned 1 [0232.412] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20fef8 | out: hHeap=0x1f0000) returned 1 [0232.412] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0232.412] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ae0 | out: hHeap=0x1f0000) returned 1 [0232.413] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2854b8 | out: hHeap=0x1f0000) returned 1 [0232.413] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0232.413] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214b60 | out: hHeap=0x1f0000) returned 1 [0232.413] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228bd8 | out: hHeap=0x1f0000) returned 1 [0232.413] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0232.413] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211048 | out: hHeap=0x1f0000) returned 1 [0232.413] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228830 | out: hHeap=0x1f0000) returned 1 [0232.413] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2595a0 | out: hHeap=0x1f0000) returned 1 [0232.413] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237068 | out: hHeap=0x1f0000) returned 1 [0232.413] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206838 | out: hHeap=0x1f0000) returned 1 [0232.413] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffb8 | out: hHeap=0x1f0000) returned 1 [0232.413] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ffa0 | out: hHeap=0x1f0000) returned 1 [0232.414] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233568 | out: hHeap=0x1f0000) returned 1 [0232.414] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x255c88 | out: hHeap=0x1f0000) returned 1 [0232.414] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2376f8 | out: hHeap=0x1f0000) returned 1 [0232.414] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238d38 | out: hHeap=0x1f0000) returned 1 [0232.414] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220580 | out: hHeap=0x1f0000) returned 1 [0232.414] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22db68 | out: hHeap=0x1f0000) returned 1 [0232.414] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228c68 | out: hHeap=0x1f0000) returned 1 [0232.414] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0232.414] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa75aa64d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa75aa64d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa75aa64d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="jjs.exe", cAlternateFileName="")) returned 1 [0232.414] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a90 [0232.414] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0232.415] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jjs.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jjs.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0232.415] GetFileType (hFile=0x1c0) returned 0x1 [0232.416] CloseHandle (hObject=0x1c0) returned 1 [0232.416] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d68 [0232.416] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jjs.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jjs.exe"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa75aa64d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa75aa64d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa75aa64d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e40)) returned 1 [0232.416] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d68 | out: hHeap=0x1f0000) returned 1 [0232.416] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d00 [0232.416] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jjs.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jjs.exe"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa75aa64d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa75aa64d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa75aa64d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e40)) returned 1 [0232.417] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d00 | out: hHeap=0x1f0000) returned 1 [0232.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214b60 [0232.417] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214b60 | out: hHeap=0x1f0000) returned 1 [0232.417] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa75aa64d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa75aa64d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa75aa64d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2aa40, dwReserved0=0x0, dwReserved1=0x0, cFileName="jli.dll", cAlternateFileName="")) returned 1 [0232.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d00 [0232.417] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a90 | out: hHeap=0x1f0000) returned 1 [0232.418] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jli.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jli.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0232.418] GetFileType (hFile=0x1c0) returned 0x1 [0232.418] CloseHandle (hObject=0x1c0) returned 1 [0232.419] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a90 [0232.419] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jli.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jli.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa75aa64d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa75aa64d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa75aa64d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2aa40)) returned 1 [0232.419] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a90 | out: hHeap=0x1f0000) returned 1 [0232.419] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a90 [0232.419] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jli.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jli.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa75aa64d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa75aa64d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa75aa64d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2aa40)) returned 1 [0232.420] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a90 | out: hHeap=0x1f0000) returned 1 [0232.420] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214dd0 [0232.420] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214dd0 | out: hHeap=0x1f0000) returned 1 [0232.420] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce6c9bff, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xce6c9bff, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xce9eaf1f, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x48553, dwReserved0=0x0, dwReserved1=0x0, cFileName="jp2iexp.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="JP2IEX~1.ODV")) returned 1 [0232.420] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21aab8 [0232.420] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a90 [0232.420] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x21b460 [0232.420] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a90 | out: hHeap=0x1f0000) returned 1 [0232.421] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d00 | out: hHeap=0x1f0000) returned 1 [0232.421] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21aab8 | out: hHeap=0x1f0000) returned 1 [0232.421] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2iexp.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2iexp.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0232.422] GetFileType (hFile=0x1c0) returned 0x1 [0232.422] CloseHandle (hObject=0x1c0) returned 1 [0232.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x21be10 [0232.423] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2iexp.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2iexp.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce6c9bff, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xce6c9bff, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xce9eaf1f, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x48553)) returned 1 [0232.423] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21be10 | out: hHeap=0x1f0000) returned 1 [0232.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x21bb28 [0232.424] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2iexp.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2iexp.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce6c9bff, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xce6c9bff, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xce9eaf1f, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x48553)) returned 1 [0232.424] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21bb28 | out: hHeap=0x1f0000) returned 1 [0232.424] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x21b080 [0232.424] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21b080 | out: hHeap=0x1f0000) returned 1 [0232.424] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa897bfc2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa897bfc2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89a2223, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1b640, dwReserved0=0x0, dwReserved1=0x0, cFileName="jp2launcher.exe", cAlternateFileName="JP2LAU~1.EXE")) returned 1 [0232.425] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0232.425] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214b60 [0232.425] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2218d0 [0232.426] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214b60 | out: hHeap=0x1f0000) returned 1 [0232.426] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21b460 | out: hHeap=0x1f0000) returned 1 [0232.426] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0232.426] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2launcher.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2launcher.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0232.842] GetFileType (hFile=0x1f4) returned 0x1 [0232.842] CloseHandle (hObject=0x1f4) returned 1 [0232.843] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd88 [0232.843] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2launcher.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2launcher.exe"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa897bfc2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa897bfc2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89a2223, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1b640)) returned 1 [0232.844] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd88 | out: hHeap=0x1f0000) returned 1 [0232.844] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0232.844] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2launcher.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2launcher.exe"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa897bfc2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa897bfc2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89a2223, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1b640)) returned 1 [0232.844] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0232.844] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0232.844] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0232.844] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89a2223, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89a2223, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89a2223, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="jp2native.dll", cAlternateFileName="JP2NAT~1.DLL")) returned 1 [0232.844] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238528 [0232.845] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214dd0 [0232.845] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221708 [0232.845] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214dd0 | out: hHeap=0x1f0000) returned 1 [0232.845] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0232.845] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238528 | out: hHeap=0x1f0000) returned 1 [0232.846] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2native.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2native.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0232.846] GetFileType (hFile=0x1f4) returned 0x1 [0232.847] CloseHandle (hObject=0x1f4) returned 1 [0232.847] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220508 [0232.848] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2native.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2native.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89a2223, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89a2223, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89a2223, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e40)) returned 1 [0232.848] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220508 | out: hHeap=0x1f0000) returned 1 [0232.848] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220580 [0232.848] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2native.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2native.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89a2223, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89a2223, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89a2223, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e40)) returned 1 [0232.848] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220580 | out: hHeap=0x1f0000) returned 1 [0232.848] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0232.848] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0232.849] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89a2223, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89a2223, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89a2223, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39840, dwReserved0=0x0, dwReserved1=0x0, cFileName="jp2ssv.dll", cAlternateFileName="")) returned 1 [0232.849] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2386e0 [0232.849] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214dd0 [0232.849] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2212e0 [0232.849] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214dd0 | out: hHeap=0x1f0000) returned 1 [0232.849] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0232.849] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2386e0 | out: hHeap=0x1f0000) returned 1 [0232.850] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2ssv.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2ssv.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0232.851] GetFileType (hFile=0x1f4) returned 0x1 [0232.851] CloseHandle (hObject=0x1f4) returned 1 [0232.852] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2203a0 [0232.852] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2ssv.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2ssv.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89a2223, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89a2223, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89a2223, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39840)) returned 1 [0232.852] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2203a0 | out: hHeap=0x1f0000) returned 1 [0232.852] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220490 [0232.852] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2ssv.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2ssv.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89a2223, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89a2223, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89a2223, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39840)) returned 1 [0232.853] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220490 | out: hHeap=0x1f0000) returned 1 [0232.853] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0232.853] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0232.853] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89a2223, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89a2223, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2d640, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpeg.dll", cAlternateFileName="")) returned 1 [0232.853] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238500 [0232.853] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214dd0 [0232.853] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221118 [0232.853] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214dd0 | out: hHeap=0x1f0000) returned 1 [0232.853] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0232.854] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238500 | out: hHeap=0x1f0000) returned 1 [0232.854] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jpeg.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jpeg.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0232.855] GetFileType (hFile=0x1f4) returned 0x1 [0232.855] CloseHandle (hObject=0x1f4) returned 1 [0232.856] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f770 [0232.856] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jpeg.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jpeg.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89a2223, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89a2223, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2d640)) returned 1 [0232.856] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f770 | out: hHeap=0x1f0000) returned 1 [0232.856] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21ffe0 [0232.856] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jpeg.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jpeg.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89a2223, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89a2223, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2d640)) returned 1 [0232.858] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ffe0 | out: hHeap=0x1f0000) returned 1 [0232.858] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0232.858] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0232.858] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4840, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsdt.dll", cAlternateFileName="")) returned 1 [0232.858] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2386b8 [0232.858] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214dd0 [0232.858] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2214a8 [0232.859] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214dd0 | out: hHeap=0x1f0000) returned 1 [0232.859] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0232.859] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2386b8 | out: hHeap=0x1f0000) returned 1 [0232.859] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jsdt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsdt.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0232.860] GetFileType (hFile=0x1f4) returned 0x1 [0232.860] CloseHandle (hObject=0x1f4) returned 1 [0232.863] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe00 [0232.863] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jsdt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsdt.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4840)) returned 1 [0232.863] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe00 | out: hHeap=0x1f0000) returned 1 [0232.863] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0232.863] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jsdt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsdt.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4840)) returned 1 [0232.863] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0232.863] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0232.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0232.864] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsound.dll", cAlternateFileName="")) returned 1 [0232.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385a0 [0232.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214dd0 [0232.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2211b0 [0232.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214dd0 | out: hHeap=0x1f0000) returned 1 [0232.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0232.865] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385a0 | out: hHeap=0x1f0000) returned 1 [0232.865] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jsound.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsound.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0232.866] GetFileType (hFile=0x1f4) returned 0x1 [0232.866] CloseHandle (hObject=0x1f4) returned 1 [0232.867] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0232.867] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jsound.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsound.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8a40)) returned 1 [0232.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0232.867] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0232.867] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jsound.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsound.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8a40)) returned 1 [0232.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0232.868] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd88 [0232.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd88 | out: hHeap=0x1f0000) returned 1 [0232.868] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsoundds.dll", cAlternateFileName="")) returned 1 [0232.868] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238780 [0232.868] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214dd0 [0232.868] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221118 [0232.869] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214dd0 | out: hHeap=0x1f0000) returned 1 [0232.869] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0232.869] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238780 | out: hHeap=0x1f0000) returned 1 [0232.869] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jsoundds.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsoundds.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0232.870] GetFileType (hFile=0x1f4) returned 0x1 [0232.870] CloseHandle (hObject=0x1f4) returned 1 [0232.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220238 [0232.871] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jsoundds.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsoundds.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7a40)) returned 1 [0232.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220238 | out: hHeap=0x1f0000) returned 1 [0232.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220490 [0232.872] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\jsoundds.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsoundds.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7a40)) returned 1 [0232.872] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220490 | out: hHeap=0x1f0000) returned 1 [0232.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f7e8 [0232.872] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f7e8 | out: hHeap=0x1f0000) returned 1 [0232.873] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x35e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="kcms.dll", cAlternateFileName="")) returned 1 [0232.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238550 [0232.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214dd0 [0232.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221410 [0232.873] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214dd0 | out: hHeap=0x1f0000) returned 1 [0232.874] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0232.874] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238550 | out: hHeap=0x1f0000) returned 1 [0232.874] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\kcms.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\kcms.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0232.875] GetFileType (hFile=0x1f4) returned 0x1 [0232.875] CloseHandle (hObject=0x1f4) returned 1 [0232.876] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe00 [0232.876] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\kcms.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\kcms.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x35e40)) returned 1 [0232.876] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe00 | out: hHeap=0x1f0000) returned 1 [0232.876] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220580 [0232.876] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\kcms.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\kcms.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x35e40)) returned 1 [0232.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220580 | out: hHeap=0x1f0000) returned 1 [0232.877] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0232.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0232.877] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="keytool.exe", cAlternateFileName="")) returned 1 [0232.877] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2386b8 [0232.877] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214dd0 [0232.877] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2211b0 [0232.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214dd0 | out: hHeap=0x1f0000) returned 1 [0232.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0232.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2386b8 | out: hHeap=0x1f0000) returned 1 [0232.879] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\keytool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\keytool.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0232.879] GetFileType (hFile=0x1f4) returned 0x1 [0232.880] CloseHandle (hObject=0x1f4) returned 1 [0232.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0232.880] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\keytool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\keytool.exe"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1 [0232.880] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0232.881] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fb30 [0232.881] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\keytool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\keytool.exe"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1 [0232.881] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fb30 | out: hHeap=0x1f0000) returned 1 [0232.881] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2203a0 [0232.881] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2203a0 | out: hHeap=0x1f0000) returned 1 [0232.881] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="kinit.exe", cAlternateFileName="")) returned 1 [0232.881] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238528 [0232.882] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214dd0 [0232.882] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220cf0 [0232.882] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214dd0 | out: hHeap=0x1f0000) returned 1 [0232.882] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0232.882] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238528 | out: hHeap=0x1f0000) returned 1 [0232.883] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\kinit.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\kinit.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0232.884] GetFileType (hFile=0x1f4) returned 0x1 [0232.884] CloseHandle (hObject=0x1f4) returned 1 [0232.885] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220580 [0232.885] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\kinit.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\kinit.exe"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1 [0232.885] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220580 | out: hHeap=0x1f0000) returned 1 [0232.885] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fb30 [0232.885] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\kinit.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\kinit.exe"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1 [0232.886] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fb30 | out: hHeap=0x1f0000) returned 1 [0232.886] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0232.886] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0232.886] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="klist.exe", cAlternateFileName="")) returned 1 [0232.886] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2386b8 [0232.886] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214dd0 [0232.886] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2212e0 [0232.887] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214dd0 | out: hHeap=0x1f0000) returned 1 [0232.887] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0232.887] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2386b8 | out: hHeap=0x1f0000) returned 1 [0232.888] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\klist.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\klist.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0233.170] GetFileType (hFile=0x210) returned 0x1 [0233.170] CloseHandle (hObject=0x210) returned 1 [0233.171] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220238 [0233.171] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\klist.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\klist.exe"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1 [0233.171] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220238 | out: hHeap=0x1f0000) returned 1 [0233.171] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f770 [0233.172] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\klist.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\klist.exe"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1 [0233.172] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f770 | out: hHeap=0x1f0000) returned 1 [0233.172] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fb30 [0233.172] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fb30 | out: hHeap=0x1f0000) returned 1 [0233.172] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="ktab.exe", cAlternateFileName="")) returned 1 [0233.172] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0233.172] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a90 [0233.172] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221118 [0233.172] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a90 | out: hHeap=0x1f0000) returned 1 [0233.173] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0233.173] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0233.173] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\ktab.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ktab.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0233.174] GetFileType (hFile=0x210) returned 0x1 [0233.174] CloseHandle (hObject=0x210) returned 1 [0233.174] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2203a0 [0233.175] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\ktab.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ktab.exe"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1 [0233.175] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2203a0 | out: hHeap=0x1f0000) returned 1 [0233.175] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0233.175] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\ktab.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ktab.exe"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1 [0233.175] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0233.175] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220508 [0233.175] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220508 | out: hHeap=0x1f0000) returned 1 [0233.176] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39040, dwReserved0=0x0, dwReserved1=0x0, cFileName="lcms.dll", cAlternateFileName="")) returned 1 [0233.176] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0233.176] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a90 [0233.176] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2212e0 [0233.176] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a90 | out: hHeap=0x1f0000) returned 1 [0233.176] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0233.176] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0233.177] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\lcms.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\lcms.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0233.177] GetFileType (hFile=0x210) returned 0x1 [0233.178] CloseHandle (hObject=0x210) returned 1 [0233.178] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f7e8 [0233.178] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\lcms.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\lcms.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39040)) returned 1 [0233.179] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f7e8 | out: hHeap=0x1f0000) returned 1 [0233.179] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f7e8 [0233.179] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\lcms.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\lcms.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39040)) returned 1 [0233.179] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f7e8 | out: hHeap=0x1f0000) returned 1 [0233.179] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f7e8 [0233.179] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f7e8 | out: hHeap=0x1f0000) returned 1 [0233.179] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x9040, dwReserved0=0x0, dwReserved1=0x0, cFileName="management.dll", cAlternateFileName="MANAGE~1.DLL")) returned 1 [0233.179] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0233.179] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214e38 [0233.179] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221968 [0233.180] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214e38 | out: hHeap=0x1f0000) returned 1 [0233.180] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0233.180] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0233.180] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\management.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\management.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0233.180] GetFileType (hFile=0x210) returned 0x1 [0233.181] CloseHandle (hObject=0x210) returned 1 [0233.181] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2203a0 [0233.181] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\management.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\management.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x9040)) returned 1 [0233.181] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2203a0 | out: hHeap=0x1f0000) returned 1 [0233.181] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0233.182] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\management.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\management.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x9040)) returned 1 [0233.182] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0233.182] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21ffe0 [0233.182] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ffe0 | out: hHeap=0x1f0000) returned 1 [0233.182] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc41ec25, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xcc41ec25, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xcca3ad23, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x9fb53, dwReserved0=0x0, dwReserved1=0x0, cFileName="mlib_image.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="MLIB_I~1.ODV")) returned 1 [0233.182] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a8c0 [0233.182] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214e38 [0233.182] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x21ba30 [0233.182] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214e38 | out: hHeap=0x1f0000) returned 1 [0233.182] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0233.183] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a8c0 | out: hHeap=0x1f0000) returned 1 [0233.183] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\mlib_image.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\mlib_image.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0233.183] GetFileType (hFile=0x210) returned 0x1 [0233.184] CloseHandle (hObject=0x210) returned 1 [0233.184] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x21af88 [0233.184] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\mlib_image.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\mlib_image.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc41ec25, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xcc41ec25, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xcca3ad23, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x9fb53)) returned 1 [0233.184] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21af88 | out: hHeap=0x1f0000) returned 1 [0233.184] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x21b460 [0233.185] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\mlib_image.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\mlib_image.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc41ec25, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xcc41ec25, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xcca3ad23, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x9fb53)) returned 1 [0233.186] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21b460 | out: hHeap=0x1f0000) returned 1 [0233.186] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x21be10 [0233.186] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21be10 | out: hHeap=0x1f0000) returned 1 [0233.186] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcca3ad23, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xcca3ad23, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xcd48308f, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xa13b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcp120.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="MSVCP1~1.ODV")) returned 1 [0233.186] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a578 [0233.187] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214e38 [0233.187] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x21b938 [0233.187] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214e38 | out: hHeap=0x1f0000) returned 1 [0233.187] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ba30 | out: hHeap=0x1f0000) returned 1 [0233.187] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a578 | out: hHeap=0x1f0000) returned 1 [0233.188] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcp120.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcp120.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0233.188] GetFileType (hFile=0x210) returned 0x1 [0233.188] CloseHandle (hObject=0x210) returned 1 [0233.189] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x21b178 [0233.189] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcp120.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcp120.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcca3ad23, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xcca3ad23, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xcd48308f, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xa13b3)) returned 1 [0233.189] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21b178 | out: hHeap=0x1f0000) returned 1 [0233.189] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x21af88 [0233.189] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcp120.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcp120.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcca3ad23, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xcca3ad23, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xcd48308f, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xa13b3)) returned 1 [0233.189] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21af88 | out: hHeap=0x1f0000) returned 1 [0233.189] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x21ba30 [0233.189] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ba30 | out: hHeap=0x1f0000) returned 1 [0233.190] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdef13a3, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xcdef13a3, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xce6576cb, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xca863, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr100.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="MSVCR1~1.ODV")) returned 1 [0233.190] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a968 [0233.190] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a90 [0233.190] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x21ba30 [0233.190] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a90 | out: hHeap=0x1f0000) returned 1 [0233.190] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21b938 | out: hHeap=0x1f0000) returned 1 [0233.190] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a968 | out: hHeap=0x1f0000) returned 1 [0233.191] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr100.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcr100.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0233.191] GetFileType (hFile=0x210) returned 0x1 [0233.192] CloseHandle (hObject=0x210) returned 1 [0233.192] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x21be10 [0233.192] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr100.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcr100.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdef13a3, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xcdef13a3, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xce6576cb, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xca863)) returned 1 [0233.192] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21be10 | out: hHeap=0x1f0000) returned 1 [0233.193] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x21b368 [0233.193] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr100.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcr100.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdef13a3, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xcdef13a3, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xce6576cb, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xca863)) returned 1 [0233.193] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21b368 | out: hHeap=0x1f0000) returned 1 [0233.193] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x21bb28 [0233.193] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21bb28 | out: hHeap=0x1f0000) returned 1 [0233.193] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce67e24e, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xce67e24e, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xcedcad54, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xeb3b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr120.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="MSVCR1~2.ODV")) returned 1 [0233.193] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a038 [0233.193] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214dd0 [0233.194] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x21bd18 [0233.194] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214dd0 | out: hHeap=0x1f0000) returned 1 [0233.194] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ba30 | out: hHeap=0x1f0000) returned 1 [0233.194] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a038 | out: hHeap=0x1f0000) returned 1 [0233.195] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr120.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcr120.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0233.195] GetFileType (hFile=0x210) returned 0x1 [0233.195] CloseHandle (hObject=0x210) returned 1 [0233.196] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x21b178 [0233.196] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr120.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcr120.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce67e24e, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xce67e24e, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xcedcad54, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xeb3b3)) returned 1 [0233.196] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21b178 | out: hHeap=0x1f0000) returned 1 [0233.196] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x21b178 [0233.196] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr120.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcr120.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce67e24e, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xce67e24e, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xcedcad54, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xeb3b3)) returned 1 [0233.196] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21b178 | out: hHeap=0x1f0000) returned 1 [0233.197] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x21bb28 [0233.197] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21bb28 | out: hHeap=0x1f0000) returned 1 [0233.197] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x17a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="net.dll", cAlternateFileName="")) returned 1 [0233.197] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214dd0 [0233.197] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21bd18 | out: hHeap=0x1f0000) returned 1 [0233.198] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\net.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\net.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0233.198] GetFileType (hFile=0x210) returned 0x1 [0233.199] CloseHandle (hObject=0x210) returned 1 [0233.199] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214e38 [0233.199] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\net.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\net.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x17a40)) returned 1 [0233.199] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214e38 | out: hHeap=0x1f0000) returned 1 [0233.199] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a90 [0233.199] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\net.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\net.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x17a40)) returned 1 [0233.200] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a90 | out: hHeap=0x1f0000) returned 1 [0233.200] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a90 [0233.200] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a90 | out: hHeap=0x1f0000) returned 1 [0233.200] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xec40, dwReserved0=0x0, dwReserved1=0x0, cFileName="nio.dll", cAlternateFileName="")) returned 1 [0233.200] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a90 [0233.200] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214dd0 | out: hHeap=0x1f0000) returned 1 [0233.201] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\nio.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\nio.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0233.201] GetFileType (hFile=0x210) returned 0x1 [0233.202] CloseHandle (hObject=0x210) returned 1 [0233.202] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214dd0 [0233.203] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\nio.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\nio.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xec40)) returned 1 [0233.203] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214dd0 | out: hHeap=0x1f0000) returned 1 [0233.203] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214b60 [0233.203] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\nio.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\nio.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xec40)) returned 1 [0233.203] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214b60 | out: hHeap=0x1f0000) returned 1 [0233.203] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214b60 [0233.203] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214b60 | out: hHeap=0x1f0000) returned 1 [0233.203] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="npt.dll", cAlternateFileName="")) returned 1 [0233.203] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214dd0 [0233.204] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a90 | out: hHeap=0x1f0000) returned 1 [0233.204] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\npt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\npt.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0233.204] GetFileType (hFile=0x210) returned 0x1 [0233.205] CloseHandle (hObject=0x210) returned 1 [0233.205] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214e38 [0233.205] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\npt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\npt.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4a40)) returned 1 [0233.205] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214e38 | out: hHeap=0x1f0000) returned 1 [0233.205] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214e38 [0233.205] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\npt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\npt.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4a40)) returned 1 [0233.206] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214e38 | out: hHeap=0x1f0000) returned 1 [0233.206] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a90 [0233.206] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a90 | out: hHeap=0x1f0000) returned 1 [0233.206] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="orbd.exe", cAlternateFileName="")) returned 1 [0233.206] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0233.206] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214e38 [0233.206] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221708 [0233.206] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214e38 | out: hHeap=0x1f0000) returned 1 [0233.206] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214dd0 | out: hHeap=0x1f0000) returned 1 [0233.206] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0233.207] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\orbd.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\orbd.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0233.207] GetFileType (hFile=0x210) returned 0x1 [0233.208] CloseHandle (hObject=0x210) returned 1 [0233.208] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0233.208] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\orbd.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\orbd.exe"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1 [0233.209] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0233.209] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fb30 [0233.209] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\orbd.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\orbd.exe"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1 [0233.209] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fb30 | out: hHeap=0x1f0000) returned 1 [0233.209] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0233.209] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0233.209] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="pack200.exe", cAlternateFileName="")) returned 1 [0233.209] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0233.209] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214dd0 [0233.210] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221410 [0233.210] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214dd0 | out: hHeap=0x1f0000) returned 1 [0233.210] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0233.210] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0233.211] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\pack200.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\pack200.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0233.211] GetFileType (hFile=0x210) returned 0x1 [0233.212] CloseHandle (hObject=0x210) returned 1 [0233.212] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2203a0 [0233.212] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\pack200.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\pack200.exe"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1 [0233.212] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2203a0 | out: hHeap=0x1f0000) returned 1 [0233.212] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fb30 [0233.212] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\pack200.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\pack200.exe"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1 [0233.213] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fb30 | out: hHeap=0x1f0000) returned 1 [0233.213] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fb30 [0233.213] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fb30 | out: hHeap=0x1f0000) returned 1 [0233.213] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xd08a1a7b, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xd08a1a7b, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin2", cAlternateFileName="")) returned 1 [0233.213] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214dd0 [0233.213] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0233.213] lstrcmpW (lpString1="plugin2", lpString2=".") returned 1 [0233.213] lstrcmpW (lpString1="plugin2", lpString2="..") returned 1 [0233.213] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238d00 [0233.213] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a90 [0233.214] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204db0 | out: hHeap=0x1f0000) returned 1 [0233.214] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="policytool.exe", cAlternateFileName="POLICY~1.EXE")) returned 1 [0233.214] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0233.214] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214e38 [0233.214] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220f50 [0233.214] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214e38 | out: hHeap=0x1f0000) returned 1 [0233.214] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214dd0 | out: hHeap=0x1f0000) returned 1 [0233.214] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0233.215] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\policytool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\policytool.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0233.215] GetFileType (hFile=0x210) returned 0x1 [0233.216] CloseHandle (hObject=0x210) returned 1 [0233.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220580 [0233.594] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\policytool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\policytool.exe"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1 [0233.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220580 | out: hHeap=0x1f0000) returned 1 [0233.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fb30 [0233.594] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\policytool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\policytool.exe"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1 [0233.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fb30 | out: hHeap=0x1f0000) returned 1 [0233.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fef0 [0233.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fef0 | out: hHeap=0x1f0000) returned 1 [0233.594] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xe040, dwReserved0=0x0, dwReserved1=0x0, cFileName="prism_common.dll", cAlternateFileName="PRISM_~1.DLL")) returned 1 [0233.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238d38 [0233.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d00 [0233.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220fe8 [0233.595] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d00 | out: hHeap=0x1f0000) returned 1 [0233.595] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0233.595] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238d38 | out: hHeap=0x1f0000) returned 1 [0233.595] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_common.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_common.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0233.596] GetFileType (hFile=0x210) returned 0x1 [0233.596] CloseHandle (hObject=0x210) returned 1 [0233.596] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213680 [0233.596] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_common.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_common.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xe040)) returned 1 [0233.596] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213680 | out: hHeap=0x1f0000) returned 1 [0233.597] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0233.597] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_common.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_common.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xe040)) returned 1 [0233.597] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0233.597] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0233.597] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0233.597] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1fe40, dwReserved0=0x0, dwReserved1=0x0, cFileName="prism_d3d.dll", cAlternateFileName="PRISM_~2.DLL")) returned 1 [0233.597] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238528 [0233.597] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d00 [0233.597] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221968 [0233.597] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d00 | out: hHeap=0x1f0000) returned 1 [0233.597] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0233.597] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238528 | out: hHeap=0x1f0000) returned 1 [0233.598] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_d3d.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_d3d.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0233.598] GetFileType (hFile=0x210) returned 0x1 [0233.598] CloseHandle (hObject=0x210) returned 1 [0233.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0233.599] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_d3d.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_d3d.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1fe40)) returned 1 [0233.599] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0233.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f770 [0233.599] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_d3d.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_d3d.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1fe40)) returned 1 [0233.599] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f770 | out: hHeap=0x1f0000) returned 1 [0233.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0233.599] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0233.599] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x17e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="prism_sw.dll", cAlternateFileName="")) returned 1 [0233.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238640 [0233.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d00 [0233.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2212e0 [0233.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d00 | out: hHeap=0x1f0000) returned 1 [0233.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0233.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238640 | out: hHeap=0x1f0000) returned 1 [0233.600] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_sw.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_sw.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0233.600] GetFileType (hFile=0x210) returned 0x1 [0233.601] CloseHandle (hObject=0x210) returned 1 [0233.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0233.601] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_sw.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_sw.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x17e40)) returned 1 [0233.601] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0233.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0233.601] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_sw.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_sw.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x17e40)) returned 1 [0233.601] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0233.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0233.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0233.602] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.dll", cAlternateFileName="")) returned 1 [0233.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238528 [0233.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d00 [0233.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221a00 [0233.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d00 | out: hHeap=0x1f0000) returned 1 [0233.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0233.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238528 | out: hHeap=0x1f0000) returned 1 [0233.603] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\resource.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\resource.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0233.603] GetFileType (hFile=0x210) returned 0x1 [0233.603] CloseHandle (hObject=0x210) returned 1 [0233.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0233.604] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\resource.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\resource.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3c40)) returned 1 [0233.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0233.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2203a0 [0233.604] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\resource.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\resource.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3c40)) returned 1 [0233.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2203a0 | out: hHeap=0x1f0000) returned 1 [0233.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21ffe0 [0233.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ffe0 | out: hHeap=0x1f0000) returned 1 [0233.605] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="rmid.exe", cAlternateFileName="")) returned 1 [0233.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2386b8 [0233.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d00 [0233.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220f50 [0233.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d00 | out: hHeap=0x1f0000) returned 1 [0233.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0233.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2386b8 | out: hHeap=0x1f0000) returned 1 [0233.606] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\rmid.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\rmid.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0233.606] GetFileType (hFile=0x210) returned 0x1 [0233.606] CloseHandle (hObject=0x210) returned 1 [0233.606] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fef0 [0233.607] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\rmid.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\rmid.exe"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e40)) returned 1 [0233.607] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fef0 | out: hHeap=0x1f0000) returned 1 [0233.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0233.607] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\rmid.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\rmid.exe"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e40)) returned 1 [0233.607] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0233.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe00 [0233.607] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe00 | out: hHeap=0x1f0000) returned 1 [0233.607] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8af971e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="rmiregistry.exe", cAlternateFileName="RMIREG~1.EXE")) returned 1 [0233.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238640 [0233.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d00 [0233.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221118 [0233.608] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d00 | out: hHeap=0x1f0000) returned 1 [0233.608] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0233.612] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238640 | out: hHeap=0x1f0000) returned 1 [0233.614] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\rmiregistry.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\rmiregistry.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0233.614] GetFileType (hFile=0x210) returned 0x1 [0233.615] CloseHandle (hObject=0x210) returned 1 [0233.621] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe00 [0233.621] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\rmiregistry.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\rmiregistry.exe"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8af971e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1 [0233.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe00 | out: hHeap=0x1f0000) returned 1 [0233.625] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0233.625] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\rmiregistry.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\rmiregistry.exe"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8af971e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1 [0233.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0233.625] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220490 [0233.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220490 | out: hHeap=0x1f0000) returned 1 [0233.625] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8af971e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2b6c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xab35b530, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="server", cAlternateFileName="")) returned 1 [0233.625] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d00 [0233.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0233.626] lstrcmpW (lpString1="server", lpString2=".") returned 1 [0233.626] lstrcmpW (lpString1="server", lpString2="..") returned 1 [0233.626] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x48) returned 0x225c98 [0233.626] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236330 [0233.626] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238d00 | out: hHeap=0x1f0000) returned 1 [0233.626] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="servertool.exe", cAlternateFileName="SERVER~1.EXE")) returned 1 [0233.626] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2386b8 [0233.626] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235e50 [0233.626] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221a00 [0233.626] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235e50 | out: hHeap=0x1f0000) returned 1 [0233.626] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d00 | out: hHeap=0x1f0000) returned 1 [0233.627] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2386b8 | out: hHeap=0x1f0000) returned 1 [0233.627] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\servertool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\servertool.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0233.628] GetFileType (hFile=0x210) returned 0x1 [0233.628] CloseHandle (hObject=0x210) returned 1 [0233.629] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220580 [0233.629] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\servertool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\servertool.exe"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1 [0233.629] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220580 | out: hHeap=0x1f0000) returned 1 [0233.629] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0233.629] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\servertool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\servertool.exe"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1 [0233.630] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0233.630] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0233.630] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0233.630] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x32040, dwReserved0=0x0, dwReserved1=0x0, cFileName="splashscreen.dll", cAlternateFileName="SPLASH~1.DLL")) returned 1 [0233.630] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238ec0 [0233.630] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235e50 [0233.630] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2217a0 [0233.630] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235e50 | out: hHeap=0x1f0000) returned 1 [0233.631] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0233.631] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ec0 | out: hHeap=0x1f0000) returned 1 [0233.632] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\splashscreen.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\splashscreen.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0233.632] GetFileType (hFile=0x210) returned 0x1 [0233.635] CloseHandle (hObject=0x210) returned 1 [0233.635] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213680 [0233.635] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\splashscreen.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\splashscreen.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x32040)) returned 1 [0233.635] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213680 | out: hHeap=0x1f0000) returned 1 [0233.635] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213818 [0233.635] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\splashscreen.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\splashscreen.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x32040)) returned 1 [0233.635] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213818 | out: hHeap=0x1f0000) returned 1 [0233.636] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e88 [0233.636] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e88 | out: hHeap=0x1f0000) returned 1 [0233.636] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdef13a3, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xcdef13a3, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xce60b224, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x8bb53, dwReserved0=0x0, dwReserved1=0x0, cFileName="ssv.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="SSVDLL~1.ODV")) returned 1 [0233.636] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0233.636] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235e50 [0233.636] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x229508 [0233.636] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235e50 | out: hHeap=0x1f0000) returned 1 [0233.636] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0233.636] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0233.637] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\ssv.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ssv.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0233.637] GetFileType (hFile=0x210) returned 0x1 [0233.637] CloseHandle (hObject=0x210) returned 1 [0233.638] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x20c2c0 [0233.638] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\ssv.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ssv.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdef13a3, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xcdef13a3, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xce60b224, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x8bb53)) returned 1 [0233.638] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20c2c0 | out: hHeap=0x1f0000) returned 1 [0233.638] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x20c2c0 [0233.638] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\ssv.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ssv.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdef13a3, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xcdef13a3, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xce60b224, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x8bb53)) returned 1 [0233.638] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20c2c0 | out: hHeap=0x1f0000) returned 1 [0233.638] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x20c2c0 [0233.638] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20c2c0 | out: hHeap=0x1f0000) returned 1 [0233.639] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x11240, dwReserved0=0x0, dwReserved1=0x0, cFileName="ssvagent.exe", cAlternateFileName="")) returned 1 [0233.639] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384d8 [0233.639] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235e50 [0233.639] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221410 [0233.639] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235e50 | out: hHeap=0x1f0000) returned 1 [0233.639] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229508 | out: hHeap=0x1f0000) returned 1 [0233.639] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384d8 | out: hHeap=0x1f0000) returned 1 [0233.639] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\ssvagent.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ssvagent.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0233.640] GetFileType (hFile=0x210) returned 0x1 [0233.640] CloseHandle (hObject=0x210) returned 1 [0233.640] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0233.641] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\ssvagent.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ssvagent.exe"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x11240)) returned 1 [0233.641] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0233.641] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0233.641] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\ssvagent.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ssvagent.exe"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x11240)) returned 1 [0233.641] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0233.641] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0233.641] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0233.641] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x21240, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunec.dll", cAlternateFileName="")) returned 1 [0233.642] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238640 [0233.642] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235700 [0233.642] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221378 [0233.642] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0233.642] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0233.642] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238640 | out: hHeap=0x1f0000) returned 1 [0233.643] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\sunec.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\sunec.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0233.917] GetFileType (hFile=0x210) returned 0x1 [0233.918] CloseHandle (hObject=0x210) returned 1 [0233.918] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0233.918] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\sunec.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\sunec.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x21240)) returned 1 [0233.918] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0233.918] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0233.919] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\sunec.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\sunec.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x21240)) returned 1 [0233.919] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0233.919] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0233.919] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0233.919] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunmscapi.dll", cAlternateFileName="SUNMSC~1.DLL")) returned 1 [0233.919] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260658 [0233.919] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d00 [0233.919] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2215d8 [0233.919] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d00 | out: hHeap=0x1f0000) returned 1 [0233.919] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0233.920] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260658 | out: hHeap=0x1f0000) returned 1 [0233.920] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\sunmscapi.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\sunmscapi.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0233.920] GetFileType (hFile=0x210) returned 0x1 [0233.921] CloseHandle (hObject=0x210) returned 1 [0233.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe00 [0233.921] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\sunmscapi.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\sunmscapi.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7c40)) returned 1 [0233.921] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe00 | out: hHeap=0x1f0000) returned 1 [0233.922] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fb30 [0233.922] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\sunmscapi.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\sunmscapi.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7c40)) returned 1 [0233.922] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fb30 | out: hHeap=0x1f0000) returned 1 [0233.922] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0233.922] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0233.922] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e440, dwReserved0=0x0, dwReserved1=0x0, cFileName="t2k.dll", cAlternateFileName="")) returned 1 [0233.922] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d00 [0233.922] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0233.923] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\t2k.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\t2k.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0233.923] GetFileType (hFile=0x210) returned 0x1 [0233.924] CloseHandle (hObject=0x210) returned 1 [0233.924] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0450 [0233.924] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\t2k.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\t2k.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e440)) returned 1 [0233.924] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0450 | out: hHeap=0x1f0000) returned 1 [0233.924] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0040 [0233.925] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\t2k.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\t2k.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e440)) returned 1 [0233.925] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0040 | out: hHeap=0x1f0000) returned 1 [0233.925] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0c08 [0233.925] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0c08 | out: hHeap=0x1f0000) returned 1 [0233.925] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="tnameserv.exe", cAlternateFileName="TNAMES~1.EXE")) returned 1 [0233.925] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260838 [0233.925] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b07f8 [0233.925] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2212e0 [0233.925] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b07f8 | out: hHeap=0x1f0000) returned 1 [0233.926] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d00 | out: hHeap=0x1f0000) returned 1 [0233.926] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260838 | out: hHeap=0x1f0000) returned 1 [0233.926] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\tnameserv.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\tnameserv.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0233.927] GetFileType (hFile=0x210) returned 0x1 [0233.927] CloseHandle (hObject=0x210) returned 1 [0233.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0233.928] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\tnameserv.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\tnameserv.exe"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1 [0233.928] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0233.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2201c0 [0233.928] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\tnameserv.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\tnameserv.exe"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1 [0233.928] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2201c0 | out: hHeap=0x1f0000) returned 1 [0233.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fb30 [0233.929] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fb30 | out: hHeap=0x1f0000) returned 1 [0233.929] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13840, dwReserved0=0x0, dwReserved1=0x0, cFileName="unpack.dll", cAlternateFileName="")) returned 1 [0233.929] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0233.929] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d00 [0233.929] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220e20 [0233.929] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d00 | out: hHeap=0x1f0000) returned 1 [0233.929] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0233.929] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0233.930] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\unpack.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0233.931] GetFileType (hFile=0x210) returned 0x1 [0233.931] CloseHandle (hObject=0x210) returned 1 [0233.931] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0233.932] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\unpack.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13840)) returned 1 [0233.932] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0233.932] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21ffe0 [0233.932] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\unpack.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13840)) returned 1 [0233.932] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ffe0 | out: hHeap=0x1f0000) returned 1 [0233.932] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0233.932] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0233.932] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x30240, dwReserved0=0x0, dwReserved1=0x0, cFileName="unpack200.exe", cAlternateFileName="UNPACK~1.EXE")) returned 1 [0233.933] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0233.933] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d00 [0233.933] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2212e0 [0233.933] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d00 | out: hHeap=0x1f0000) returned 1 [0233.933] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0233.933] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0233.934] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack200.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\unpack200.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0233.934] GetFileType (hFile=0x210) returned 0x1 [0233.934] CloseHandle (hObject=0x210) returned 1 [0233.935] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0233.935] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack200.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\unpack200.exe"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x30240)) returned 1 [0233.935] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0233.935] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220490 [0233.935] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack200.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\unpack200.exe"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x30240)) returned 1 [0233.935] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220490 | out: hHeap=0x1f0000) returned 1 [0233.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0233.936] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0233.936] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc040, dwReserved0=0x0, dwReserved1=0x0, cFileName="verify.dll", cAlternateFileName="")) returned 1 [0233.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0233.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d00 [0233.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221540 [0233.936] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d00 | out: hHeap=0x1f0000) returned 1 [0233.936] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0233.936] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0233.937] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\verify.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\verify.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0233.937] GetFileType (hFile=0x210) returned 0x1 [0233.938] CloseHandle (hObject=0x210) returned 1 [0233.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0233.938] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\verify.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\verify.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc040)) returned 1 [0233.938] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0233.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0233.939] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\verify.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\verify.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc040)) returned 1 [0233.939] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0233.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f770 [0233.939] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f770 | out: hHeap=0x1f0000) returned 1 [0233.939] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="w2k_lsa_auth.dll", cAlternateFileName="W2K_LS~1.DLL")) returned 1 [0233.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239278 [0233.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d00 [0233.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221968 [0233.940] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d00 | out: hHeap=0x1f0000) returned 1 [0233.940] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0233.940] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239278 | out: hHeap=0x1f0000) returned 1 [0233.940] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\w2k_lsa_auth.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\w2k_lsa_auth.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0233.940] GetFileType (hFile=0x210) returned 0x1 [0233.941] CloseHandle (hObject=0x210) returned 1 [0233.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2132c8 [0233.941] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\w2k_lsa_auth.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\w2k_lsa_auth.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5e40)) returned 1 [0233.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2132c8 | out: hHeap=0x1f0000) returned 1 [0233.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0233.941] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\w2k_lsa_auth.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\w2k_lsa_auth.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5e40)) returned 1 [0233.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0233.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0233.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0233.941] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1ae40, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsAccessBridge-64.dll", cAlternateFileName="WINDOW~1.DLL")) returned 1 [0233.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2284d0 [0233.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d00 [0233.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0233.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d00 | out: hHeap=0x1f0000) returned 1 [0233.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0233.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2284d0 | out: hHeap=0x1f0000) returned 1 [0233.942] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\WindowsAccessBridge-64.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\windowsaccessbridge-64.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0233.942] GetFileType (hFile=0x210) returned 0x1 [0233.943] CloseHandle (hObject=0x210) returned 1 [0233.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0233.943] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\WindowsAccessBridge-64.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\windowsaccessbridge-64.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1ae40)) returned 1 [0233.943] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0233.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0233.943] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\WindowsAccessBridge-64.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\windowsaccessbridge-64.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1ae40)) returned 1 [0233.943] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0233.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0233.943] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0233.943] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2f040, dwReserved0=0x0, dwReserved1=0x0, cFileName="wsdetect.dll", cAlternateFileName="")) returned 1 [0233.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0233.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d00 [0233.944] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220d88 [0233.944] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d00 | out: hHeap=0x1f0000) returned 1 [0233.944] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0233.944] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0233.944] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\wsdetect.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\wsdetect.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0233.944] GetFileType (hFile=0x210) returned 0x1 [0233.945] CloseHandle (hObject=0x210) returned 1 [0233.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0233.945] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\wsdetect.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\wsdetect.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2f040)) returned 1 [0233.945] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0233.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fef0 [0233.945] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\wsdetect.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\wsdetect.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2f040)) returned 1 [0233.945] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fef0 | out: hHeap=0x1f0000) returned 1 [0233.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0233.946] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0233.946] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13040, dwReserved0=0x0, dwReserved1=0x0, cFileName="zip.dll", cAlternateFileName="")) returned 1 [0233.947] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d00 [0233.947] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0233.947] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\zip.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\zip.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0233.947] GetFileType (hFile=0x210) returned 0x1 [0233.948] CloseHandle (hObject=0x210) returned 1 [0233.948] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b05f0 [0233.948] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\zip.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\zip.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13040)) returned 1 [0233.948] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b05f0 | out: hHeap=0x1f0000) returned 1 [0233.948] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0998 [0233.948] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\zip.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\zip.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13040)) returned 1 [0233.948] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0998 | out: hHeap=0x1f0000) returned 1 [0233.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0248 [0233.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0248 | out: hHeap=0x1f0000) returned 1 [0233.949] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13040, dwReserved0=0x0, dwReserved1=0x0, cFileName="zip.dll", cAlternateFileName="")) returned 0 [0233.949] FindClose (in: hFindFile=0x24e7c0 | out: hFindFile=0x24e7c0) returned 1 [0233.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2287a0 [0233.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260888 [0233.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262e48 [0233.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fa40 [0233.949] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\*", lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xcfd4e910, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xcfd4e910, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24ed00 [0233.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f770 [0233.950] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fa40 | out: hHeap=0x1f0000) returned 1 [0233.950] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0233.950] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xcfd4e910, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xcfd4e910, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0233.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fb30 [0233.950] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f770 | out: hHeap=0x1f0000) returned 1 [0233.950] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0233.950] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0233.950] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf5b4f0e, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xcf5b4f0e, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xcfd4e910, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xfa953, dwReserved0=0x0, dwReserved1=0x3, cFileName="deployJava1.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="DEPLOY~1.ODV")) returned 1 [0233.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a818 [0233.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fef0 [0233.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x2ae310 [0233.950] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fef0 | out: hHeap=0x1f0000) returned 1 [0233.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fb30 | out: hHeap=0x1f0000) returned 1 [0233.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a818 | out: hHeap=0x1f0000) returned 1 [0233.951] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\deployJava1.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\deployjava1.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0233.951] GetFileType (hFile=0x210) returned 0x1 [0233.951] CloseHandle (hObject=0x210) returned 1 [0233.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x2ae770 [0233.952] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\deployJava1.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\deployjava1.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf5b4f0e, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xcf5b4f0e, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xcfd4e910, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xfa953)) returned 1 [0233.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae770 | out: hHeap=0x1f0000) returned 1 [0233.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x2af6c0 [0233.952] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\deployJava1.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\deployjava1.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf5b4f0e, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xcf5b4f0e, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xcfd4e910, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xfa953)) returned 1 [0233.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2af6c0 | out: hHeap=0x1f0000) returned 1 [0233.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x2ae658 [0233.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae658 | out: hHeap=0x1f0000) returned 1 [0233.952] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xcec73804, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x11a743, dwReserved0=0x0, dwReserved1=0x3, cFileName="npdeployJava1.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="NPDEPL~1.ODV")) returned 1 [0233.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ade20 [0233.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0233.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x2ae9a0 [0233.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0233.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae310 | out: hHeap=0x1f0000) returned 1 [0233.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ade20 | out: hHeap=0x1f0000) returned 1 [0233.953] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\npdeployJava1.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\npdeployjava1.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0233.953] GetFileType (hFile=0x210) returned 0x1 [0233.953] CloseHandle (hObject=0x210) returned 1 [0233.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x2ae1f8 [0233.954] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\npdeployJava1.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\npdeployjava1.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xcec73804, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x11a743)) returned 1 [0233.954] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae1f8 | out: hHeap=0x1f0000) returned 1 [0233.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x2aeab8 [0233.954] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\npdeployJava1.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\npdeployjava1.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xcec73804, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x11a743)) returned 1 [0233.954] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aeab8 | out: hHeap=0x1f0000) returned 1 [0233.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x2aef18 [0233.954] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aef18 | out: hHeap=0x1f0000) returned 1 [0233.954] FindNextFileW (in: hFindFile=0x24ed00, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xcec73804, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x11a743, dwReserved0=0x0, dwReserved1=0x3, cFileName="npdeployJava1.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="NPDEPL~1.ODV")) returned 0 [0233.954] FindClose (in: hFindFile=0x24ed00 | out: hFindFile=0x24ed00) returned 1 [0233.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae9a0 | out: hHeap=0x1f0000) returned 1 [0233.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262e48 | out: hHeap=0x1f0000) returned 1 [0233.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0233.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2287a0 | out: hHeap=0x1f0000) returned 1 [0233.955] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228440 [0233.955] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0233.955] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x261cc0 [0233.955] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fb30 [0233.955] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\*", lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xd08a1a7b, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xd08a1a7b, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24ea00 [0233.955] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0233.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fb30 | out: hHeap=0x1f0000) returned 1 [0233.955] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0233.955] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xd08a1a7b, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xd08a1a7b, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0233.956] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fb30 [0233.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0233.956] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0233.956] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0233.956] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd010822b, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xd010822b, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xd087b82a, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xca863, dwReserved0=0x0, dwReserved1=0x3, cFileName="msvcr100.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="MSVCR1~1.ODV")) returned 1 [0233.956] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a818 [0233.956] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0233.956] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285ae8 [0233.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0233.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fb30 | out: hHeap=0x1f0000) returned 1 [0233.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a818 | out: hHeap=0x1f0000) returned 1 [0233.956] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\msvcr100.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\plugin2\\msvcr100.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0233.957] GetFileType (hFile=0x210) returned 0x1 [0233.957] CloseHandle (hObject=0x210) returned 1 [0233.957] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285bf0 [0233.957] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\msvcr100.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\plugin2\\msvcr100.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd010822b, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xd010822b, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xd087b82a, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xca863)) returned 1 [0233.957] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285bf0 | out: hHeap=0x1f0000) returned 1 [0233.957] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285bf0 [0233.957] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\msvcr100.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\plugin2\\msvcr100.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd010822b, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xd010822b, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xd087b82a, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xca863)) returned 1 [0233.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285bf0 | out: hHeap=0x1f0000) returned 1 [0233.958] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285bf0 [0233.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285bf0 | out: hHeap=0x1f0000) returned 1 [0233.958] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39440, dwReserved0=0x0, dwReserved1=0x3, cFileName="npjp2.dll", cAlternateFileName="")) returned 1 [0233.958] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0233.958] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fb30 [0233.958] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219478 [0233.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fb30 | out: hHeap=0x1f0000) returned 1 [0233.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285ae8 | out: hHeap=0x1f0000) returned 1 [0233.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0233.959] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\npjp2.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\plugin2\\npjp2.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0233.959] GetFileType (hFile=0x210) returned 0x1 [0233.959] CloseHandle (hObject=0x210) returned 1 [0233.960] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0233.960] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\npjp2.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\plugin2\\npjp2.dll"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39440)) returned 1 [0233.960] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0233.960] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212a48 [0233.960] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\npjp2.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\plugin2\\npjp2.dll"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39440)) returned 1 [0233.960] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212a48 | out: hHeap=0x1f0000) returned 1 [0233.960] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212be0 [0233.960] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212be0 | out: hHeap=0x1f0000) returned 1 [0233.960] FindNextFileW (in: hFindFile=0x24ea00, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39440, dwReserved0=0x0, dwReserved1=0x3, cFileName="npjp2.dll", cAlternateFileName="")) returned 0 [0233.960] FindClose (in: hFindFile=0x24ea00 | out: hFindFile=0x24ea00) returned 1 [0233.961] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219478 | out: hHeap=0x1f0000) returned 1 [0233.961] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261cc0 | out: hHeap=0x1f0000) returned 1 [0233.961] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0233.961] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228440 | out: hHeap=0x1f0000) returned 1 [0233.961] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228440 [0233.961] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260658 [0233.961] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262188 [0233.961] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fb30 [0234.263] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\*", lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8af971e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2b6c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xab35b530, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24ec80 [0234.263] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214e38 [0234.263] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2215d8 [0234.264] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214e38 | out: hHeap=0x1f0000) returned 1 [0234.264] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fb30 | out: hHeap=0x1f0000) returned 1 [0234.264] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0234.264] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8af971e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2b6c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xab35b530, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0234.264] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214e38 [0234.264] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220e20 [0234.264] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214e38 | out: hHeap=0x1f0000) returned 1 [0234.264] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0234.265] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0234.265] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0234.265] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xab35b530, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xab35b530, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xabaa88bc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x11d0000, dwReserved0=0x0, dwReserved1=0x3, cFileName="classes.jsa", cAlternateFileName="")) returned 1 [0234.265] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0234.265] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214e38 [0234.265] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221118 [0234.265] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214e38 | out: hHeap=0x1f0000) returned 1 [0234.265] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0234.265] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0234.266] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\classes.jsa" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\classes.jsa"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0234.266] GetLastError () returned 0x5 [0234.266] GetLastError () returned 0x5 [0234.268] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b1f9e6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b1f9e6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xd0a6b53b, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x866d43, dwReserved0=0x0, dwReserved1=0x3, cFileName="jvm.dll", cAlternateFileName="")) returned 1 [0234.268] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214e38 [0234.268] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221708 [0234.268] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214e38 | out: hHeap=0x1f0000) returned 1 [0234.268] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0234.268] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\jvm.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\jvm.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0234.269] GetFileType (hFile=0x1b0) returned 0x1 [0234.269] CloseHandle (hObject=0x1b0) returned 1 [0234.270] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220490 [0234.270] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\jvm.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\jvm.dll"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b1f9e6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b1f9e6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xd0a6b53b, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x866d43)) returned 1 [0234.270] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220490 | out: hHeap=0x1f0000) returned 1 [0234.270] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0234.270] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\jvm.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\jvm.dll"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b1f9e6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b1f9e6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xd0a6b53b, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x866d43)) returned 1 [0234.271] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0234.271] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0234.271] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0234.271] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b1f9e6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b1f9e6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b1f9e6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x58f, dwReserved0=0x0, dwReserved1=0x3, cFileName="Xusage.txt", cAlternateFileName="")) returned 1 [0234.271] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0234.271] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214e38 [0234.271] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220d88 [0234.271] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214e38 | out: hHeap=0x1f0000) returned 1 [0234.271] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0234.272] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0234.272] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\xusage.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0234.272] GetFileType (hFile=0x1b0) returned 0x1 [0234.273] CloseHandle (hObject=0x1b0) returned 1 [0234.273] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0234.273] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\xusage.txt"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b1f9e6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b1f9e6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b1f9e6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x58f)) returned 1 [0234.274] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0234.274] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0234.274] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\xusage.txt"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b1f9e6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b1f9e6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b1f9e6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x58f)) returned 1 [0234.275] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0234.275] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0234.275] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0234.275] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b1f9e6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b1f9e6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b1f9e6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x58f, dwReserved0=0x0, dwReserved1=0x3, cFileName="Xusage.txt", cAlternateFileName="")) returned 0 [0234.275] FindClose (in: hFindFile=0x24ec80 | out: hFindFile=0x24ec80) returned 1 [0234.275] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0234.275] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262188 | out: hHeap=0x1f0000) returned 1 [0234.276] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260658 | out: hHeap=0x1f0000) returned 1 [0234.276] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228440 | out: hHeap=0x1f0000) returned 1 [0234.276] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d00 | out: hHeap=0x1f0000) returned 1 [0234.276] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2202b0 | out: hHeap=0x1f0000) returned 1 [0234.276] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a90 | out: hHeap=0x1f0000) returned 1 [0234.276] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236330 | out: hHeap=0x1f0000) returned 1 [0234.276] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225c98 | out: hHeap=0x1f0000) returned 1 [0234.276] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e360 | out: hHeap=0x1f0000) returned 1 [0234.276] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238208 | out: hHeap=0x1f0000) returned 1 [0234.276] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228cb0 | out: hHeap=0x1f0000) returned 1 [0234.276] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228c68 [0234.277] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0234.277] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262188 [0234.277] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a90 [0234.277] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\*", lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xd3e01bf8, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xd535886a, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24eac0 [0234.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236330 [0234.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a90 | out: hHeap=0x1f0000) returned 1 [0234.373] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0234.373] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xd3e01bf8, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xd535886a, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0234.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235700 [0234.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236330 | out: hHeap=0x1f0000) returned 1 [0234.373] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0234.374] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0234.374] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x95, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.properties", cAlternateFileName="ACCESS~1.PRO")) returned 1 [0234.374] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228440 [0234.374] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236330 [0234.374] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0234.374] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236330 | out: hHeap=0x1f0000) returned 1 [0234.374] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0234.374] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228440 | out: hHeap=0x1f0000) returned 1 [0234.375] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\accessibility.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\accessibility.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x238 [0234.375] GetFileType (hFile=0x238) returned 0x1 [0234.375] CloseHandle (hObject=0x238) returned 1 [0234.376] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0234.376] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\accessibility.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\accessibility.properties"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x95)) returned 1 [0234.376] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0234.376] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0234.376] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\accessibility.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\accessibility.properties"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x95)) returned 1 [0234.376] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0234.376] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0234.376] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606f8 [0234.377] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0234.377] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606f8 | out: hHeap=0x1f0000) returned 1 [0234.377] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe451d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64", cAlternateFileName="")) returned 1 [0234.377] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235700 [0234.377] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0234.377] lstrcmpW (lpString1="amd64", lpString2=".") returned 1 [0234.377] lstrcmpW (lpString1="amd64", lpString2="..") returned 1 [0234.377] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204c10 [0234.377] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236330 [0234.377] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105ca28, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="applet", cAlternateFileName="")) returned 1 [0234.377] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236538 [0234.377] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0234.377] lstrcmpW (lpString1="applet", lpString2=".") returned 1 [0234.378] lstrcmpW (lpString1="applet", lpString2="..") returned 1 [0234.378] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c90 [0234.378] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x235700 [0234.378] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c10 | out: hHeap=0x1f0000) returned 1 [0234.378] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x562, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendars.properties", cAlternateFileName="CALEND~1.PRO")) returned 1 [0234.378] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2391d0 [0234.378] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a90 [0234.378] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2211b0 [0234.378] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a90 | out: hHeap=0x1f0000) returned 1 [0234.378] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236538 | out: hHeap=0x1f0000) returned 1 [0234.378] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2391d0 | out: hHeap=0x1f0000) returned 1 [0234.379] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\calendars.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\calendars.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x238 [0234.379] GetFileType (hFile=0x238) returned 0x1 [0234.379] CloseHandle (hObject=0x238) returned 1 [0234.380] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213570 [0234.380] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\calendars.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\calendars.properties"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x562)) returned 1 [0234.380] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213570 | out: hHeap=0x1f0000) returned 1 [0234.380] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212c68 [0234.380] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\calendars.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\calendars.properties"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x562)) returned 1 [0234.380] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212c68 | out: hHeap=0x1f0000) returned 1 [0234.380] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2134e8 [0234.380] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260658 [0234.381] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2134e8 | out: hHeap=0x1f0000) returned 1 [0234.381] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260658 | out: hHeap=0x1f0000) returned 1 [0234.381] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa7bbd53, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xaa7bbd53, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xd1b9affd, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x2e57fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="charsets.jar", cAlternateFileName="")) returned 1 [0234.381] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606f8 [0234.381] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a90 [0234.381] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2217a0 [0234.381] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a90 | out: hHeap=0x1f0000) returned 1 [0234.381] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0234.381] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606f8 | out: hHeap=0x1f0000) returned 1 [0234.382] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\charsets.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\charsets.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x238 [0234.382] GetFileType (hFile=0x238) returned 0x1 [0234.382] CloseHandle (hObject=0x238) returned 1 [0234.383] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220490 [0234.383] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\charsets.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\charsets.jar"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa7bbd53, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xaa7bbd53, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xd1b9affd, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x2e57fd)) returned 1 [0234.383] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220490 | out: hHeap=0x1f0000) returned 1 [0234.383] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0234.383] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\charsets.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\charsets.jar"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa7bbd53, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xaa7bbd53, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xd1b9affd, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x2e57fd)) returned 1 [0234.384] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0234.384] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0234.384] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0234.384] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x14983, dwReserved0=0x0, dwReserved1=0x0, cFileName="classlist", cAlternateFileName="CLASSL~1")) returned 1 [0234.384] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260658 [0234.384] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a90 [0234.384] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220c58 [0234.384] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a90 | out: hHeap=0x1f0000) returned 1 [0234.384] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0234.384] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260658 | out: hHeap=0x1f0000) returned 1 [0234.385] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\classlist" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\classlist"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x238 [0234.385] GetFileType (hFile=0x238) returned 0x1 [0234.385] CloseHandle (hObject=0x238) returned 1 [0234.385] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21ffe0 [0234.386] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\classlist" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\classlist"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x14983)) returned 1 [0234.386] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ffe0 | out: hHeap=0x1f0000) returned 1 [0234.386] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0234.386] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\classlist" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\classlist"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x14983)) returned 1 [0234.386] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0234.386] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0234.386] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0234.386] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xd5037ad5, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xd5037ad5, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cmm", cAlternateFileName="")) returned 1 [0234.386] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a90 [0234.386] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0234.386] lstrcmpW (lpString1="cmm", lpString2=".") returned 1 [0234.387] lstrcmpW (lpString1="cmm", lpString2="..") returned 1 [0234.387] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x48) returned 0x226238 [0234.387] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214d00 [0234.387] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c90 | out: hHeap=0x1f0000) returned 1 [0234.387] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x15ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="content-types.properties", cAlternateFileName="CONTEN~1.PRO")) returned 1 [0234.387] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228440 [0234.387] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236538 [0234.387] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0234.387] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236538 | out: hHeap=0x1f0000) returned 1 [0234.387] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a90 | out: hHeap=0x1f0000) returned 1 [0234.387] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228440 | out: hHeap=0x1f0000) returned 1 [0234.388] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\content-types.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\content-types.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x238 [0234.388] GetFileType (hFile=0x238) returned 0x1 [0234.388] CloseHandle (hObject=0x238) returned 1 [0234.388] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0234.389] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\content-types.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\content-types.properties"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x15ac)) returned 1 [0234.389] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0234.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0234.389] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\content-types.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\content-types.properties"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x15ac)) returned 1 [0234.389] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0234.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0234.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606f8 [0234.389] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0234.389] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606f8 | out: hHeap=0x1f0000) returned 1 [0234.389] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x101a, dwReserved0=0x0, dwReserved1=0x0, cFileName="currency.data", cAlternateFileName="CURREN~1.DAT")) returned 1 [0234.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2607e8 [0234.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236538 [0234.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2212e0 [0234.390] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236538 | out: hHeap=0x1f0000) returned 1 [0234.390] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0234.390] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607e8 | out: hHeap=0x1f0000) returned 1 [0234.390] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\currency.data" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\currency.data"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x238 [0234.390] GetFileType (hFile=0x238) returned 0x1 [0234.391] CloseHandle (hObject=0x238) returned 1 [0234.391] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fb30 [0234.391] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\currency.data" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\currency.data"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x101a)) returned 1 [0234.391] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fb30 | out: hHeap=0x1f0000) returned 1 [0234.392] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0234.392] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\currency.data" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\currency.data"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x101a)) returned 1 [0234.392] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0234.392] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0234.392] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0234.392] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa10e432c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="deploy", cAlternateFileName="")) returned 1 [0234.392] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x236538 [0234.392] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0234.392] lstrcmpW (lpString1="deploy", lpString2=".") returned 1 [0234.393] lstrcmpW (lpString1="deploy", lpString2="..") returned 1 [0234.393] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a90 [0234.393] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2affd8 [0234.393] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226238 | out: hHeap=0x1f0000) returned 1 [0234.393] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ed9405, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8ed9405, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xd3e01bf8, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x4ce8e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="deploy.jar.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="DEPLOY~1.ODV")) returned 1 [0234.393] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219c48 [0234.393] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b00a8 [0234.393] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x21b558 [0234.393] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b00a8 | out: hHeap=0x1f0000) returned 1 [0234.394] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236538 | out: hHeap=0x1f0000) returned 1 [0234.394] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219c48 | out: hHeap=0x1f0000) returned 1 [0234.394] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy.jar.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy.jar.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x238 [0234.395] GetFileType (hFile=0x238) returned 0x1 [0234.395] CloseHandle (hObject=0x238) returned 1 [0234.396] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x21b178 [0234.396] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy.jar.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy.jar.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ed9405, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8ed9405, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xd3e01bf8, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x4ce8e1)) returned 1 [0234.396] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21b178 | out: hHeap=0x1f0000) returned 1 [0234.396] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x21b270 [0234.396] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy.jar.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy.jar.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ed9405, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8ed9405, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xd3e01bf8, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x4ce8e1)) returned 1 [0234.397] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21b270 | out: hHeap=0x1f0000) returned 1 [0234.397] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x21b270 [0234.397] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21b270 | out: hHeap=0x1f0000) returned 1 [0234.397] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa11bdb26, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xaa8ed01b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ext", cAlternateFileName="")) returned 1 [0234.397] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b07f8 [0234.397] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21b558 | out: hHeap=0x1f0000) returned 1 [0234.397] lstrcmpW (lpString1="ext", lpString2=".") returned 1 [0234.397] lstrcmpW (lpString1="ext", lpString2="..") returned 1 [0234.397] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0234.398] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b05f0 [0234.398] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a90 | out: hHeap=0x1f0000) returned 1 [0234.398] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf58, dwReserved0=0x0, dwReserved1=0x0, cFileName="flavormap.properties", cAlternateFileName="FLAVOR~1.PRO")) returned 1 [0234.398] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239080 [0234.398] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0a68 [0234.398] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221708 [0234.398] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0a68 | out: hHeap=0x1f0000) returned 1 [0234.398] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b07f8 | out: hHeap=0x1f0000) returned 1 [0234.399] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239080 | out: hHeap=0x1f0000) returned 1 [0234.400] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\flavormap.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x238 [0234.400] GetFileType (hFile=0x238) returned 0x1 [0234.400] CloseHandle (hObject=0x238) returned 1 [0234.400] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0234.401] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\flavormap.properties"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf58)) returned 1 [0234.401] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0234.401] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212a48 [0234.401] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\flavormap.properties"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf58)) returned 1 [0234.401] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212a48 | out: hHeap=0x1f0000) returned 1 [0234.401] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0234.401] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606f8 [0234.401] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0234.402] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606f8 | out: hHeap=0x1f0000) returned 1 [0234.402] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xeba, dwReserved0=0x0, dwReserved1=0x0, cFileName="fontconfig.bfc", cAlternateFileName="FONTCO~1.BFC")) returned 1 [0234.402] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0234.402] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b06c0 [0234.402] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220d88 [0234.402] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b06c0 | out: hHeap=0x1f0000) returned 1 [0234.402] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0234.402] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0234.403] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.bfc"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x238 [0234.403] GetFileType (hFile=0x238) returned 0x1 [0234.404] CloseHandle (hObject=0x238) returned 1 [0234.404] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe00 [0234.404] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.bfc"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xeba)) returned 1 [0234.405] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe00 | out: hHeap=0x1f0000) returned 1 [0234.405] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe00 [0234.405] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.bfc"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xeba)) returned 1 [0234.405] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe00 | out: hHeap=0x1f0000) returned 1 [0234.405] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0234.405] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0234.405] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2948, dwReserved0=0x0, dwReserved1=0x0, cFileName="fontconfig.properties.src", cAlternateFileName="FONTCO~1.SRC")) returned 1 [0234.405] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228440 [0234.405] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0b38 [0234.406] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0234.406] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0b38 | out: hHeap=0x1f0000) returned 1 [0234.406] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0234.406] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228440 | out: hHeap=0x1f0000) returned 1 [0234.406] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.properties.src"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x238 [0234.407] GetFileType (hFile=0x238) returned 0x1 [0234.407] CloseHandle (hObject=0x238) returned 1 [0234.408] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0234.408] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.properties.src"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2948)) returned 1 [0234.408] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0234.408] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0234.408] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.properties.src"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2948)) returned 1 [0234.408] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0234.408] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0234.408] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0234.409] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa122f229, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fonts", cAlternateFileName="")) returned 1 [0234.409] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b03e8 [0234.409] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0234.409] lstrcmpW (lpString1="fonts", lpString2=".") returned 1 [0234.409] lstrcmpW (lpString1="fonts", lpString2="..") returned 1 [0234.409] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b07f8 [0234.409] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x368a, dwReserved0=0x0, dwReserved1=0x0, cFileName="hijrah-config-umalqura.properties", cAlternateFileName="HIJRAH~1.PRO")) returned 1 [0234.409] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8a58 [0234.409] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0040 [0234.409] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a8c0 [0234.409] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0040 | out: hHeap=0x1f0000) returned 1 [0234.410] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b03e8 | out: hHeap=0x1f0000) returned 1 [0234.410] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8a58 | out: hHeap=0x1f0000) returned 1 [0234.410] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x238 [0234.410] GetFileType (hFile=0x238) returned 0x1 [0234.411] CloseHandle (hObject=0x238) returned 1 [0234.411] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a968 [0234.411] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x368a)) returned 1 [0234.411] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a968 | out: hHeap=0x1f0000) returned 1 [0234.411] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a578 [0234.411] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x368a)) returned 1 [0234.411] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a578 | out: hHeap=0x1f0000) returned 1 [0234.411] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a2d8 [0234.412] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0234.412] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a2d8 | out: hHeap=0x1f0000) returned 1 [0234.412] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0234.412] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa12313ee, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0234.412] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0658 [0234.412] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a8c0 | out: hHeap=0x1f0000) returned 1 [0234.412] lstrcmpW (lpString1="images", lpString2=".") returned 1 [0234.412] lstrcmpW (lpString1="images", lpString2="..") returned 1 [0234.412] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd8) returned 0x236818 [0234.412] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0040 [0234.412] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0234.412] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x38, dwReserved0=0x0, dwReserved1=0x0, cFileName="javafx.properties", cAlternateFileName="JAVAFX~1.PRO")) returned 1 [0234.412] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239048 [0234.412] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b00a8 [0234.413] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2214a8 [0234.413] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b00a8 | out: hHeap=0x1f0000) returned 1 [0234.413] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0658 | out: hHeap=0x1f0000) returned 1 [0234.413] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239048 | out: hHeap=0x1f0000) returned 1 [0234.413] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\javafx.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javafx.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x238 [0234.413] GetFileType (hFile=0x238) returned 0x1 [0234.414] CloseHandle (hObject=0x238) returned 1 [0234.414] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213790 [0234.414] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\javafx.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javafx.properties"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x38)) returned 1 [0234.414] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213790 | out: hHeap=0x1f0000) returned 1 [0234.414] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212be0 [0234.414] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\javafx.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javafx.properties"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x38)) returned 1 [0234.414] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212be0 | out: hHeap=0x1f0000) returned 1 [0234.414] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0234.414] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260838 [0234.415] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0234.415] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260838 | out: hHeap=0x1f0000) returned 1 [0234.415] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd10f9c74, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xd10f9c74, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xd1edcd99, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xe693a, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaws.jar.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="JAVAWS~1.ODV")) returned 1 [0234.415] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219cf0 [0234.415] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0450 [0234.415] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x21be10 [0234.415] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0450 | out: hHeap=0x1f0000) returned 1 [0234.415] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0234.718] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219cf0 | out: hHeap=0x1f0000) returned 1 [0234.719] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javaws.jar.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0234.719] GetFileType (hFile=0x230) returned 0x1 [0234.719] CloseHandle (hObject=0x230) returned 1 [0234.719] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x21b748 [0234.719] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javaws.jar.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd10f9c74, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xd10f9c74, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xd1edcd99, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xe693a)) returned 1 [0234.720] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21b748 | out: hHeap=0x1f0000) returned 1 [0234.720] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x21af88 [0234.720] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javaws.jar.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd10f9c74, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xd10f9c74, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xd1edcd99, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xe693a)) returned 1 [0234.720] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21af88 | out: hHeap=0x1f0000) returned 1 [0234.720] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x21af88 [0234.720] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21af88 | out: hHeap=0x1f0000) returned 1 [0234.720] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1c6de, dwReserved0=0x0, dwReserved1=0x0, cFileName="jce.jar", cAlternateFileName="")) returned 1 [0234.720] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b01e0 [0234.720] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21be10 | out: hHeap=0x1f0000) returned 1 [0234.721] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jce.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0234.721] GetFileType (hFile=0x230) returned 0x1 [0234.721] CloseHandle (hObject=0x230) returned 1 [0234.721] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0658 [0234.721] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jce.jar"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1c6de)) returned 1 [0234.722] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0658 | out: hHeap=0x1f0000) returned 1 [0234.722] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0790 [0234.722] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jce.jar"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1c6de)) returned 1 [0234.722] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0790 | out: hHeap=0x1f0000) returned 1 [0234.722] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0c70 [0234.722] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0c70 | out: hHeap=0x1f0000) returned 1 [0234.722] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1295634, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfr", cAlternateFileName="")) returned 1 [0234.722] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0b38 [0234.722] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b01e0 | out: hHeap=0x1f0000) returned 1 [0234.722] lstrcmpW (lpString1="jfr", lpString2=".") returned 1 [0234.723] lstrcmpW (lpString1="jfr", lpString2="..") returned 1 [0234.723] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0998 [0234.723] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xd4ac2634, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x1, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfr.jar", cAlternateFileName="")) returned 1 [0234.723] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0450 [0234.723] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0b38 | out: hHeap=0x1f0000) returned 1 [0234.724] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0234.724] GetLastError () returned 0x2 [0234.724] GetLastError () returned 0x2 [0234.724] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3cf690d, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xd3cf690d, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xd4e94062, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x88ed8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfr.jar.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="JFRJAR~1.ODV")) returned 1 [0234.724] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0234.724] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b04b8 [0234.725] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x229418 [0234.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b04b8 | out: hHeap=0x1f0000) returned 1 [0234.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0450 | out: hHeap=0x1f0000) returned 1 [0234.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0234.725] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr.jar.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0234.726] GetFileType (hFile=0x230) returned 0x1 [0234.726] CloseHandle (hObject=0x230) returned 1 [0234.727] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x229500 [0234.728] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr.jar.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3cf690d, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xd3cf690d, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xd554e178, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x88ed8)) returned 1 [0234.728] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229500 | out: hHeap=0x1f0000) returned 1 [0234.728] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x229500 [0234.728] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr.jar.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3cf690d, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xd3cf690d, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xd554e178, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x88ed8)) returned 1 [0234.728] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229500 | out: hHeap=0x1f0000) returned 1 [0234.728] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x229500 [0234.729] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229500 | out: hHeap=0x1f0000) returned 1 [0234.729] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x848c, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfxswt.jar", cAlternateFileName="")) returned 1 [0234.729] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0234.729] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0658 [0234.729] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221080 [0234.729] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0658 | out: hHeap=0x1f0000) returned 1 [0234.729] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0234.729] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0234.730] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfxswt.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0234.730] GetFileType (hFile=0x230) returned 0x1 [0234.731] CloseHandle (hObject=0x230) returned 1 [0234.731] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0234.731] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfxswt.jar"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x848c)) returned 1 [0234.732] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0234.732] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f7e8 [0234.732] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfxswt.jar"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x848c)) returned 1 [0234.732] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f7e8 | out: hHeap=0x1f0000) returned 1 [0234.732] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fb30 [0234.732] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fb30 | out: hHeap=0x1f0000) returned 1 [0234.733] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa76f896, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xaa76f896, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xaa76f896, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8eb80, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsse.jar", cAlternateFileName="")) returned 1 [0234.733] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260888 [0234.733] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0658 [0234.733] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220d88 [0234.733] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0658 | out: hHeap=0x1f0000) returned 1 [0234.733] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0234.733] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0234.734] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jsse.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0234.734] GetFileType (hFile=0x230) returned 0x1 [0234.735] CloseHandle (hObject=0x230) returned 1 [0234.931] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fb30 [0234.931] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jsse.jar"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa76f896, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xaa76f896, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xaa76f896, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8eb80)) returned 1 [0234.932] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fb30 | out: hHeap=0x1f0000) returned 1 [0234.932] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fef0 [0234.932] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jsse.jar"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa76f896, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xaa76f896, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xaa76f896, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8eb80)) returned 1 [0234.933] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fef0 | out: hHeap=0x1f0000) returned 1 [0234.933] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe00 [0234.933] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe00 | out: hHeap=0x1f0000) returned 1 [0234.933] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1082, dwReserved0=0x0, dwReserved1=0x0, cFileName="jvm.hprof.txt", cAlternateFileName="JVMHPR~1.TXT")) returned 1 [0234.933] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606f8 [0234.933] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0a00 [0234.933] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2218d0 [0234.933] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0a00 | out: hHeap=0x1f0000) returned 1 [0234.933] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0234.934] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606f8 | out: hHeap=0x1f0000) returned 1 [0234.934] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jvm.hprof.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0234.934] GetFileType (hFile=0x200) returned 0x1 [0234.935] CloseHandle (hObject=0x200) returned 1 [0234.935] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0234.935] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jvm.hprof.txt"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1082)) returned 1 [0234.935] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0234.935] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0234.935] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jvm.hprof.txt"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1082)) returned 1 [0234.935] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0234.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fef0 [0234.936] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fef0 | out: hHeap=0x1f0000) returned 1 [0234.936] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x997, dwReserved0=0x0, dwReserved1=0x0, cFileName="logging.properties", cAlternateFileName="LOGGIN~1.PRO")) returned 1 [0234.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2390b8 [0234.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0930 [0234.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221b30 [0234.936] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0930 | out: hHeap=0x1f0000) returned 1 [0234.936] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0234.936] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2390b8 | out: hHeap=0x1f0000) returned 1 [0234.936] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\logging.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\logging.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0234.937] GetFileType (hFile=0x200) returned 0x1 [0234.937] CloseHandle (hObject=0x200) returned 1 [0234.937] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0234.938] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\logging.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\logging.properties"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x997)) returned 1 [0234.938] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0234.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213680 [0234.938] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\logging.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\logging.properties"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x997)) returned 1 [0234.938] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213680 | out: hHeap=0x1f0000) returned 1 [0234.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0234.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608b0 [0234.938] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0234.938] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608b0 | out: hHeap=0x1f0000) returned 1 [0234.938] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1389711, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="management", cAlternateFileName="MANAGE~1")) returned 1 [0234.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606f8 [0234.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0860 [0234.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2215d8 [0234.939] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0860 | out: hHeap=0x1f0000) returned 1 [0234.939] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0234.939] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606f8 | out: hHeap=0x1f0000) returned 1 [0234.939] lstrcmpW (lpString1="management", lpString2=".") returned 1 [0234.939] lstrcmpW (lpString1="management", lpString2="..") returned 1 [0234.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fb30 [0234.939] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x17d, dwReserved0=0x0, dwReserved1=0x0, cFileName="management-agent.jar", cAlternateFileName="MANAGE~1.JAR")) returned 1 [0234.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238e88 [0234.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b01e0 [0234.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220cf0 [0234.940] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b01e0 | out: hHeap=0x1f0000) returned 1 [0234.940] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0234.940] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238e88 | out: hHeap=0x1f0000) returned 1 [0234.940] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\management-agent.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management-agent.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0234.940] GetFileType (hFile=0x200) returned 0x1 [0234.941] CloseHandle (hObject=0x200) returned 1 [0234.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0234.941] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\management-agent.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management-agent.jar"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x17d)) returned 1 [0234.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0234.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0234.942] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\management-agent.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management-agent.jar"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x17d)) returned 1 [0234.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0234.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0234.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0234.942] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x84e, dwReserved0=0x0, dwReserved1=0x0, cFileName="meta-index", cAlternateFileName="META-I~1")) returned 1 [0234.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606f8 [0234.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0c08 [0234.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221540 [0234.943] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0c08 | out: hHeap=0x1f0000) returned 1 [0234.943] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0234.943] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606f8 | out: hHeap=0x1f0000) returned 1 [0234.943] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\meta-index" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\meta-index"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0234.943] GetFileType (hFile=0x200) returned 0x1 [0234.944] CloseHandle (hObject=0x200) returned 1 [0234.944] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220490 [0234.944] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\meta-index" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\meta-index"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x84e)) returned 1 [0234.945] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220490 | out: hHeap=0x1f0000) returned 1 [0234.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0234.945] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\meta-index" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\meta-index"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x84e)) returned 1 [0234.945] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0234.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fef0 [0234.945] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fef0 | out: hHeap=0x1f0000) returned 1 [0234.945] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1170, dwReserved0=0x0, dwReserved1=0x0, cFileName="net.properties", cAlternateFileName="NET~1.PRO")) returned 1 [0234.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606f8 [0234.946] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b01e0 [0234.946] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221080 [0234.946] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b01e0 | out: hHeap=0x1f0000) returned 1 [0234.946] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0234.946] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606f8 | out: hHeap=0x1f0000) returned 1 [0234.947] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\net.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\net.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0234.947] GetFileType (hFile=0x200) returned 0x1 [0234.947] CloseHandle (hObject=0x200) returned 1 [0234.948] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220490 [0234.948] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\net.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\net.properties"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1170)) returned 1 [0234.948] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220490 | out: hHeap=0x1f0000) returned 1 [0234.948] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0234.948] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\net.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\net.properties"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1170)) returned 1 [0234.948] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0234.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220238 [0234.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606f8 [0234.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220238 | out: hHeap=0x1f0000) returned 1 [0234.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606f8 | out: hHeap=0x1f0000) returned 1 [0234.949] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8d81efe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8d81efe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xd4778648, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x1d598e, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin.jar.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="PLUGIN~1.ODV")) returned 1 [0234.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219e40 [0234.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0ad0 [0234.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x21b368 [0234.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0ad0 | out: hHeap=0x1f0000) returned 1 [0234.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0234.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219e40 | out: hHeap=0x1f0000) returned 1 [0234.950] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\plugin.jar.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\plugin.jar.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0234.950] GetFileType (hFile=0x200) returned 0x1 [0234.950] CloseHandle (hObject=0x200) returned 1 [0234.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x21bb28 [0234.951] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\plugin.jar.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\plugin.jar.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8d81efe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8d81efe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xd4778648, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x1d598e)) returned 1 [0234.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21bb28 | out: hHeap=0x1f0000) returned 1 [0234.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x21be10 [0234.951] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\plugin.jar.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\plugin.jar.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8d81efe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8d81efe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xd4778648, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x1d598e)) returned 1 [0234.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21be10 | out: hHeap=0x1f0000) returned 1 [0234.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x21b080 [0234.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21b080 | out: hHeap=0x1f0000) returned 1 [0234.952] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xaec, dwReserved0=0x0, dwReserved1=0x0, cFileName="psfont.properties.ja", cAlternateFileName="PSFONT~1.JA")) returned 1 [0234.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238f30 [0234.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0588 [0234.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220eb8 [0234.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0588 | out: hHeap=0x1f0000) returned 1 [0234.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21b368 | out: hHeap=0x1f0000) returned 1 [0234.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238f30 | out: hHeap=0x1f0000) returned 1 [0234.953] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\psfont.properties.ja" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfont.properties.ja"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0234.953] GetFileType (hFile=0x200) returned 0x1 [0234.954] CloseHandle (hObject=0x200) returned 1 [0234.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0234.954] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\psfont.properties.ja" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfont.properties.ja"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xaec)) returned 1 [0234.954] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0234.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0234.954] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\psfont.properties.ja" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfont.properties.ja"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xaec)) returned 1 [0234.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0234.955] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0234.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0234.955] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2899, dwReserved0=0x0, dwReserved1=0x0, cFileName="psfontj2d.properties", cAlternateFileName="PSFONT~1.PRO")) returned 1 [0234.955] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c90 [0234.955] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0b38 [0234.955] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221080 [0234.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0b38 | out: hHeap=0x1f0000) returned 1 [0234.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0234.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c90 | out: hHeap=0x1f0000) returned 1 [0234.956] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\psfontj2d.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfontj2d.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0234.956] GetFileType (hFile=0x200) returned 0x1 [0234.956] CloseHandle (hObject=0x200) returned 1 [0234.957] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213790 [0234.957] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\psfontj2d.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfontj2d.properties"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2899)) returned 1 [0234.957] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213790 | out: hHeap=0x1f0000) returned 1 [0234.957] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0234.957] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\psfontj2d.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfontj2d.properties"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2899)) returned 1 [0234.957] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0234.957] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0234.957] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606f8 [0234.957] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0234.957] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606f8 | out: hHeap=0x1f0000) returned 1 [0234.957] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xd586994a, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x354add, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.jar", cAlternateFileName="RESOUR~1.JAR")) returned 1 [0234.957] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606f8 [0234.957] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0520 [0234.958] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221410 [0234.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0520 | out: hHeap=0x1f0000) returned 1 [0234.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0234.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606f8 | out: hHeap=0x1f0000) returned 1 [0234.958] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\resources.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\resources.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0234.958] GetFileType (hFile=0x200) returned 0x1 [0234.959] CloseHandle (hObject=0x200) returned 1 [0234.960] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0234.960] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\resources.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\resources.jar"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xd586994a, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x354be0)) returned 1 [0234.960] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0234.960] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe00 [0234.960] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\resources.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\resources.jar"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xd586994a, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x354be0)) returned 1 [0234.960] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe00 | out: hHeap=0x1f0000) returned 1 [0234.960] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0234.960] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0234.960] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa90a30aa, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa90a30aa, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xaa7233eb, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x340865b, dwReserved0=0x0, dwReserved1=0x0, cFileName="rt.jar", cAlternateFileName="")) returned 1 [0234.961] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0520 [0234.961] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0234.961] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\rt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\rt.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0234.961] GetFileType (hFile=0x200) returned 0x1 [0234.962] CloseHandle (hObject=0x200) returned 1 [0234.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0588 [0234.962] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\rt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\rt.jar"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa90a30aa, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa90a30aa, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xaa7233eb, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x340865b)) returned 1 [0234.962] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0588 | out: hHeap=0x1f0000) returned 1 [0234.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b01e0 [0234.962] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\rt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\rt.jar"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa90a30aa, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa90a30aa, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xaa7233eb, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x340865b)) returned 1 [0234.963] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b01e0 | out: hHeap=0x1f0000) returned 1 [0234.963] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0b38 [0234.963] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0b38 | out: hHeap=0x1f0000) returned 1 [0234.963] GetLastError () returned 0x0 [0234.963] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606f8 [0234.963] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228680 [0234.963] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262e48 [0234.963] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b08c8 [0234.964] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238e50 [0234.964] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0234.964] CryptAcquireContextA (in: phProv=0x2573d20, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2573d20*=0x2132c8) returned 1 [0234.965] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x260748 | out: pbBuffer=0x260748) returned 1 [0234.965] CryptReleaseContext (hProv=0x2132c8, dwFlags=0x0) returned 1 [0234.965] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0234.965] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x25ceb8 [0234.965] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2af378 [0234.965] QueryPerformanceCounter (in: lpPerformanceCount=0x2573cb4 | out: lpPerformanceCount=0x2573cb4*=39233413564) returned 1 [0234.965] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x2573cf4 | out: lpSystemTimeAsFileTime=0x2573cf4) [0234.965] QueryPerformanceCounter (in: lpPerformanceCount=0x2573cb4 | out: lpPerformanceCount=0x2573cb4*=39233442966) returned 1 [0234.966] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x2573cf4 | out: lpSystemTimeAsFileTime=0x2573cf4) [0234.966] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x239208 [0234.966] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x25e1c0 [0234.966] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2afd50 [0234.966] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x232ee8 [0234.966] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f6e0 [0234.966] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206808 [0234.966] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f830 [0234.966] GetLastError () returned 0x0 [0234.966] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\rt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\rt.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x2573c84, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0234.967] GetFileType (hFile=0x200) returned 0x1 [0234.967] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2573cf0 | out: lpNewFilePointer=0x0) returned 1 [0234.967] ReadFile (in: hFile=0x200, lpBuffer=0x25891f0, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x2573cc8, lpOverlapped=0x0 | out: lpBuffer=0x25891f0*, lpNumberOfBytesRead=0x2573cc8*=0x14000, lpOverlapped=0x0) returned 1 [0235.446] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x287fa0 [0235.447] ReadFile (in: hFile=0x200, lpBuffer=0x287fa0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2573c6c, lpOverlapped=0x0 | out: lpBuffer=0x287fa0*, lpNumberOfBytesRead=0x2573c6c*=0x1000, lpOverlapped=0x0) returned 1 [0235.448] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2573cf8 | out: lpNewFilePointer=0x0) returned 1 [0235.449] WriteFile (in: hFile=0x200, lpBuffer=0x2574200*, nNumberOfBytesToWrite=0x14000, lpNumberOfBytesWritten=0x2573c64, lpOverlapped=0x0 | out: lpBuffer=0x2574200*, lpNumberOfBytesWritten=0x2573c64*=0x14000, lpOverlapped=0x0) returned 1 [0235.588] WriteFile (in: hFile=0x200, lpBuffer=0x287fa0*, nNumberOfBytesToWrite=0xff0, lpNumberOfBytesWritten=0x2573c90, lpOverlapped=0x0 | out: lpBuffer=0x287fa0*, lpNumberOfBytesWritten=0x2573c90*=0xff0, lpOverlapped=0x0) returned 1 [0235.588] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x15f90, lpNewFilePointer=0x0, dwMoveMethod=0x2573cd8 | out: lpNewFilePointer=0x0) returned 1 [0235.588] ReadFile (in: hFile=0x200, lpBuffer=0x25891f0, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x2573cb0, lpOverlapped=0x0 | out: lpBuffer=0x25891f0*, lpNumberOfBytesRead=0x2573cb0*=0x14000, lpOverlapped=0x0) returned 1 [0235.589] ReadFile (in: hFile=0x200, lpBuffer=0x287fa0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2573c54, lpOverlapped=0x0 | out: lpBuffer=0x287fa0*, lpNumberOfBytesRead=0x2573c54*=0x1000, lpOverlapped=0x0) returned 1 [0235.589] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x15f90, lpNewFilePointer=0x0, dwMoveMethod=0x2573cf8 | out: lpNewFilePointer=0x0) returned 1 [0235.590] WriteFile (in: hFile=0x200, lpBuffer=0x2574200*, nNumberOfBytesToWrite=0x14000, lpNumberOfBytesWritten=0x2573c64, lpOverlapped=0x0 | out: lpBuffer=0x2574200*, lpNumberOfBytesWritten=0x2573c64*=0x14000, lpOverlapped=0x0) returned 1 [0235.591] WriteFile (in: hFile=0x200, lpBuffer=0x287fa0*, nNumberOfBytesToWrite=0xff0, lpNumberOfBytesWritten=0x2573c90, lpOverlapped=0x0 | out: lpBuffer=0x287fa0*, lpNumberOfBytesWritten=0x2573c90*=0xff0, lpOverlapped=0x0) returned 1 [0235.591] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0xdbba0, lpNewFilePointer=0x0, dwMoveMethod=0x2573cd8 | out: lpNewFilePointer=0x0) returned 1 [0235.591] ReadFile (in: hFile=0x200, lpBuffer=0x25891f0, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x2573cb0, lpOverlapped=0x0 | out: lpBuffer=0x25891f0*, lpNumberOfBytesRead=0x2573cb0*=0x14000, lpOverlapped=0x0) returned 1 [0235.594] ReadFile (in: hFile=0x200, lpBuffer=0x287fa0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2573c54, lpOverlapped=0x0 | out: lpBuffer=0x287fa0*, lpNumberOfBytesRead=0x2573c54*=0x1000, lpOverlapped=0x0) returned 1 [0235.596] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0xdbba0, lpNewFilePointer=0x0, dwMoveMethod=0x2573cf8 | out: lpNewFilePointer=0x0) returned 1 [0235.596] WriteFile (in: hFile=0x200, lpBuffer=0x2574200*, nNumberOfBytesToWrite=0x14000, lpNumberOfBytesWritten=0x2573c64, lpOverlapped=0x0 | out: lpBuffer=0x2574200*, lpNumberOfBytesWritten=0x2573c64*=0x14000, lpOverlapped=0x0) returned 1 [0235.597] WriteFile (in: hFile=0x200, lpBuffer=0x287fa0*, nNumberOfBytesToWrite=0xff0, lpNumberOfBytesWritten=0x2573cb0, lpOverlapped=0x0 | out: lpBuffer=0x287fa0*, lpNumberOfBytesWritten=0x2573cb0*=0xff0, lpOverlapped=0x0) returned 1 [0235.597] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x3197500, lpNewFilePointer=0x0, dwMoveMethod=0x2573cf8 | out: lpNewFilePointer=0x0) returned 1 [0235.598] ReadFile (in: hFile=0x200, lpBuffer=0x25891f0, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x2573cd0, lpOverlapped=0x0 | out: lpBuffer=0x25891f0*, lpNumberOfBytesRead=0x2573cd0*=0x14000, lpOverlapped=0x0) returned 1 [0235.600] ReadFile (in: hFile=0x200, lpBuffer=0x287fa0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2573c74, lpOverlapped=0x0 | out: lpBuffer=0x287fa0*, lpNumberOfBytesRead=0x2573c74*=0x1000, lpOverlapped=0x0) returned 1 [0235.602] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x3197500, lpNewFilePointer=0x0, dwMoveMethod=0x2573cf8 | out: lpNewFilePointer=0x0) returned 1 [0235.603] WriteFile (in: hFile=0x200, lpBuffer=0x2574200*, nNumberOfBytesToWrite=0x14000, lpNumberOfBytesWritten=0x2573c64, lpOverlapped=0x0 | out: lpBuffer=0x2574200*, lpNumberOfBytesWritten=0x2573c64*=0x14000, lpOverlapped=0x0) returned 1 [0235.604] WriteFile (in: hFile=0x200, lpBuffer=0x287fa0*, nNumberOfBytesToWrite=0xff0, lpNumberOfBytesWritten=0x2573ce0, lpOverlapped=0x0 | out: lpBuffer=0x287fa0*, lpNumberOfBytesWritten=0x2573ce0*=0xff0, lpOverlapped=0x0) returned 1 [0235.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x287fa0 | out: hHeap=0x1f0000) returned 1 [0235.604] CloseHandle (hObject=0x200) returned 1 [0235.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228638 [0235.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260838 [0235.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2608b0 [0235.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x2284d0 [0235.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204b90 [0235.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bd0 [0235.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x238840 [0235.606] GetLastError () returned 0x0 [0235.606] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238de0 [0235.606] GetLastError () returned 0x0 [0235.606] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238d00 [0235.606] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0380 [0235.606] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2607e8 [0235.606] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2858d8 [0235.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238860 [0235.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0235.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f758 [0235.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238870 [0235.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260888 [0235.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f878 [0235.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2608d8 [0235.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2853b0 [0235.607] GetLastError () returned 0x0 [0235.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238880 [0235.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238890 [0235.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389f0 [0235.608] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238890 | out: hHeap=0x1f0000) returned 1 [0235.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238890 [0235.608] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389f0 | out: hHeap=0x1f0000) returned 1 [0235.608] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238880 | out: hHeap=0x1f0000) returned 1 [0235.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238880 [0235.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f710 [0235.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238880 | out: hHeap=0x1f0000) returned 1 [0235.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f6f8 [0235.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f710 | out: hHeap=0x1f0000) returned 1 [0235.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238890 | out: hHeap=0x1f0000) returned 1 [0235.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f7b8 [0235.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f650 [0235.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f7b8 | out: hHeap=0x1f0000) returned 1 [0235.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f7d0 [0235.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f650 | out: hHeap=0x1f0000) returned 1 [0235.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f6f8 | out: hHeap=0x1f0000) returned 1 [0235.610] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f740 [0235.610] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204d30 [0235.610] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f740 | out: hHeap=0x1f0000) returned 1 [0235.610] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d70 [0235.610] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d30 | out: hHeap=0x1f0000) returned 1 [0235.610] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f7d0 | out: hHeap=0x1f0000) returned 1 [0235.610] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e70 [0235.610] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260568 [0235.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e70 | out: hHeap=0x1f0000) returned 1 [0235.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204b90 [0235.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0235.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d70 | out: hHeap=0x1f0000) returned 1 [0235.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204f10 [0235.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x2067d8 [0235.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f10 | out: hHeap=0x1f0000) returned 1 [0235.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260568 [0235.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2067d8 | out: hHeap=0x1f0000) returned 1 [0235.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204b90 | out: hHeap=0x1f0000) returned 1 [0235.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238880 [0235.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f6f8 [0235.612] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238880 | out: hHeap=0x1f0000) returned 1 [0235.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f7d0 [0235.612] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f6f8 | out: hHeap=0x1f0000) returned 1 [0235.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204f10 [0235.612] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f7d0 | out: hHeap=0x1f0000) returned 1 [0235.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x2067d8 [0235.612] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f10 | out: hHeap=0x1f0000) returned 1 [0235.613] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2067d8 | out: hHeap=0x1f0000) returned 1 [0235.613] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0235.613] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260838 | out: hHeap=0x1f0000) returned 1 [0235.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aba20 [0235.613] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2858d8 | out: hHeap=0x1f0000) returned 1 [0235.613] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607e8 | out: hHeap=0x1f0000) returned 1 [0235.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239080 [0235.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0235.613] CryptAcquireContextA (in: phProv=0x2573d20, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2573d20*=0x212f10) returned 1 [0235.614] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x260568 | out: pbBuffer=0x260568) returned 1 [0235.615] CryptReleaseContext (hProv=0x212f10, dwFlags=0x0) returned 1 [0235.615] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0235.615] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260568 [0235.615] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2607e8 [0235.615] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239208 [0235.615] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0235.615] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abb48 [0235.616] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239208 | out: hHeap=0x1f0000) returned 1 [0235.616] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a80b8 [0235.616] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f818 [0235.616] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x2b0588 [0235.616] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260838 [0235.616] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2858d8 [0235.616] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204c90 [0235.616] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0790 [0235.616] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260900 [0235.617] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285e00 [0235.617] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238880 [0235.617] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0235.617] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f6b0 [0235.617] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238890 [0235.617] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b58 [0235.617] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f650 [0235.617] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f650 | out: hHeap=0x1f0000) returned 1 [0235.617] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b58 | out: hHeap=0x1f0000) returned 1 [0235.619] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238890 | out: hHeap=0x1f0000) returned 1 [0235.619] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f6b0 | out: hHeap=0x1f0000) returned 1 [0235.619] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0235.619] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238880 | out: hHeap=0x1f0000) returned 1 [0235.619] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285e00 | out: hHeap=0x1f0000) returned 1 [0235.619] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260900 | out: hHeap=0x1f0000) returned 1 [0235.619] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0790 | out: hHeap=0x1f0000) returned 1 [0235.620] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x2392b0 [0235.620] GetLastError () returned 0x0 [0235.620] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238d70 [0235.620] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2acca0 [0235.620] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2acca0 | out: hHeap=0x1f0000) returned 1 [0235.620] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abfe8 [0235.621] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac110 [0235.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abfe8 | out: hHeap=0x1f0000) returned 1 [0235.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac110 | out: hHeap=0x1f0000) returned 1 [0235.621] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x24e980 [0235.621] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2859e0 [0235.621] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac800 [0235.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac800 | out: hHeap=0x1f0000) returned 1 [0235.621] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac800 [0235.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac800 | out: hHeap=0x1f0000) returned 1 [0235.622] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285bf0 [0235.622] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2acca0 [0235.622] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2acca0 | out: hHeap=0x1f0000) returned 1 [0235.622] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fda8 [0235.622] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x251068 [0235.622] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2afa08 [0235.622] QueryPerformanceCounter (in: lpPerformanceCount=0x2573870 | out: lpPerformanceCount=0x2573870*=39299128621) returned 1 [0235.623] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x25738b0 | out: lpSystemTimeAsFileTime=0x25738b0) [0235.623] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x238880 [0235.623] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260900 [0235.623] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e70 [0235.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e70 | out: hHeap=0x1f0000) returned 1 [0235.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260900 | out: hHeap=0x1f0000) returned 1 [0235.623] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0235.623] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d10 [0235.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d10 | out: hHeap=0x1f0000) returned 1 [0235.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0235.624] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238880 | out: hHeap=0x1f0000) returned 1 [0235.624] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0235.624] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x2390f0 [0235.624] GetLastError () returned 0x0 [0235.624] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac110 [0235.624] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2acca0 [0235.624] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abec0 [0235.624] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260900 [0235.624] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260568 [0235.625] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab208 [0235.625] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac488 [0235.625] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260ba8 [0235.625] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab7d0 [0235.625] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x222ee8 [0235.625] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abc70 [0235.625] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x22b018 [0235.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abc70 | out: hHeap=0x1f0000) returned 1 [0235.625] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x20d888 [0235.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b018 | out: hHeap=0x1f0000) returned 1 [0235.626] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2609f0 [0235.626] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260a40 [0235.626] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609f0 | out: hHeap=0x1f0000) returned 1 [0235.626] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abc70 [0235.626] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0235.626] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x22b018 [0235.626] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x234b90 [0235.626] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x234b90 | out: hHeap=0x1f0000) returned 1 [0235.627] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b018 | out: hHeap=0x1f0000) returned 1 [0235.627] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20d888 | out: hHeap=0x1f0000) returned 1 [0235.627] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f638 [0235.627] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228878 [0235.627] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260b08 [0235.627] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260bd0 [0235.627] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260b30 [0235.627] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260b58 [0235.627] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bd0 | out: hHeap=0x1f0000) returned 1 [0235.627] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b08 | out: hHeap=0x1f0000) returned 1 [0235.628] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x20d888 [0235.628] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260c70 [0235.628] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260bd0 [0235.628] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c70 | out: hHeap=0x1f0000) returned 1 [0235.628] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abd98 [0235.628] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bd0 | out: hHeap=0x1f0000) returned 1 [0235.628] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206658 [0235.628] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x2a8fb0 [0235.628] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8fb0 | out: hHeap=0x1f0000) returned 1 [0235.628] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206658 | out: hHeap=0x1f0000) returned 1 [0235.629] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ba8 | out: hHeap=0x1f0000) returned 1 [0235.629] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abfe8 [0235.629] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abd98 | out: hHeap=0x1f0000) returned 1 [0235.629] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20d888 | out: hHeap=0x1f0000) returned 1 [0235.629] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204c10 [0235.629] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac238 [0235.629] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab580 [0235.629] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0235.629] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab458 [0235.629] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab580 | out: hHeap=0x1f0000) returned 1 [0235.630] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b58 | out: hHeap=0x1f0000) returned 1 [0235.630] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b30 | out: hHeap=0x1f0000) returned 1 [0235.630] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228878 | out: hHeap=0x1f0000) returned 1 [0235.630] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac238 | out: hHeap=0x1f0000) returned 1 [0235.630] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c10 | out: hHeap=0x1f0000) returned 1 [0235.630] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f638 | out: hHeap=0x1f0000) returned 1 [0235.630] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abc70 | out: hHeap=0x1f0000) returned 1 [0235.630] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abc70 [0235.630] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abc70 | out: hHeap=0x1f0000) returned 1 [0235.630] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ee8 | out: hHeap=0x1f0000) returned 1 [0235.631] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab7d0 | out: hHeap=0x1f0000) returned 1 [0235.631] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abfe8 | out: hHeap=0x1f0000) returned 1 [0235.631] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac488 | out: hHeap=0x1f0000) returned 1 [0235.631] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab208 | out: hHeap=0x1f0000) returned 1 [0235.631] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260900 | out: hHeap=0x1f0000) returned 1 [0235.631] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abec0 | out: hHeap=0x1f0000) returned 1 [0235.631] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2acca0 | out: hHeap=0x1f0000) returned 1 [0235.631] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2acdc8 [0235.631] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2acca0 [0235.631] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2acdc8 | out: hHeap=0x1f0000) returned 1 [0235.631] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2acca0 | out: hHeap=0x1f0000) returned 1 [0235.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab458 | out: hHeap=0x1f0000) returned 1 [0235.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac110 | out: hHeap=0x1f0000) returned 1 [0235.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285bf0 | out: hHeap=0x1f0000) returned 1 [0235.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24e980 | out: hHeap=0x1f0000) returned 1 [0235.632] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x2aebd0 [0235.632] GetLastError () returned 0x0 [0235.632] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238880 [0235.633] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238890 [0235.978] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\rt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\rt.jar"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2573c20, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0235.979] GetFileType (hFile=0x1f4) returned 0x1 [0235.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x291ff0 [0235.979] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2573ba8 | out: lpNewFilePointer=0x0) returned 1 [0235.980] GetLastError () returned 0xb7 [0235.986] CloseHandle (hObject=0x1f4) returned 1 [0235.986] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0235.986] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2adcb0 [0235.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0235.986] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x106) returned 0x2ae888 [0235.987] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2adcb0 | out: hHeap=0x1f0000) returned 1 [0235.987] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\rt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\rt.jar"), lpNewFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\rt.jar.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\rt.jar.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwFlags=0x2) returned 1 [0235.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae888 | out: hHeap=0x1f0000) returned 1 [0235.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238890 | out: hHeap=0x1f0000) returned 1 [0235.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238880 | out: hHeap=0x1f0000) returned 1 [0235.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2859e0 | out: hHeap=0x1f0000) returned 1 [0235.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2858d8 | out: hHeap=0x1f0000) returned 1 [0235.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260838 | out: hHeap=0x1f0000) returned 1 [0235.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204c90 | out: hHeap=0x1f0000) returned 1 [0235.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0588 | out: hHeap=0x1f0000) returned 1 [0235.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f818 | out: hHeap=0x1f0000) returned 1 [0235.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a80b8 | out: hHeap=0x1f0000) returned 1 [0235.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aebd0 | out: hHeap=0x1f0000) returned 1 [0235.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607e8 | out: hHeap=0x1f0000) returned 1 [0235.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abb48 | out: hHeap=0x1f0000) returned 1 [0235.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x251068 | out: hHeap=0x1f0000) returned 1 [0235.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2afa08 | out: hHeap=0x1f0000) returned 1 [0235.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239080 | out: hHeap=0x1f0000) returned 1 [0235.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238840 | out: hHeap=0x1f0000) returned 1 [0235.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f878 | out: hHeap=0x1f0000) returned 1 [0235.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0235.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238870 | out: hHeap=0x1f0000) returned 1 [0235.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f758 | out: hHeap=0x1f0000) returned 1 [0235.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0235.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238860 | out: hHeap=0x1f0000) returned 1 [0235.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2853b0 | out: hHeap=0x1f0000) returned 1 [0235.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0235.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0380 | out: hHeap=0x1f0000) returned 1 [0235.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2284d0 | out: hHeap=0x1f0000) returned 1 [0235.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608b0 | out: hHeap=0x1f0000) returned 1 [0235.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aba20 | out: hHeap=0x1f0000) returned 1 [0235.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228638 | out: hHeap=0x1f0000) returned 1 [0235.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25e1c0 | out: hHeap=0x1f0000) returned 1 [0235.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2afd50 | out: hHeap=0x1f0000) returned 1 [0235.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206808 | out: hHeap=0x1f0000) returned 1 [0235.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f830 | out: hHeap=0x1f0000) returned 1 [0235.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f6e0 | out: hHeap=0x1f0000) returned 1 [0235.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x232ee8 | out: hHeap=0x1f0000) returned 1 [0235.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x25ceb8 | out: hHeap=0x1f0000) returned 1 [0235.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2af378 | out: hHeap=0x1f0000) returned 1 [0235.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238e50 | out: hHeap=0x1f0000) returned 1 [0235.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b08c8 | out: hHeap=0x1f0000) returned 1 [0235.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262e48 | out: hHeap=0x1f0000) returned 1 [0235.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228680 | out: hHeap=0x1f0000) returned 1 [0235.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606f8 | out: hHeap=0x1f0000) returned 1 [0235.992] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1418338, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="security", cAlternateFileName="")) returned 1 [0235.992] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260888 [0235.992] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b08c8 [0235.992] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221a98 [0235.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b08c8 | out: hHeap=0x1f0000) returned 1 [0235.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0520 | out: hHeap=0x1f0000) returned 1 [0235.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0235.993] lstrcmpW (lpString1="security", lpString2=".") returned 1 [0235.994] lstrcmpW (lpString1="security", lpString2="..") returned 1 [0235.994] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x138) returned 0x20d888 [0235.994] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220490 [0235.994] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236818 | out: hHeap=0x1f0000) returned 1 [0235.994] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="sound.properties", cAlternateFileName="SOUND~1.PRO")) returned 1 [0235.994] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c58 [0235.994] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b06c0 [0235.994] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221378 [0235.994] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b06c0 | out: hHeap=0x1f0000) returned 1 [0235.994] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0235.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c58 | out: hHeap=0x1f0000) returned 1 [0235.995] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\sound.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\sound.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0235.995] GetFileType (hFile=0x1f4) returned 0x1 [0235.996] CloseHandle (hObject=0x1f4) returned 1 [0235.996] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0235.996] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\sound.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\sound.properties"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4ba)) returned 1 [0235.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0235.996] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2132c8 [0235.996] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\sound.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\sound.properties"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4ba)) returned 1 [0235.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2132c8 | out: hHeap=0x1f0000) returned 1 [0235.996] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f10 [0235.996] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606f8 [0235.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f10 | out: hHeap=0x1f0000) returned 1 [0235.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606f8 | out: hHeap=0x1f0000) returned 1 [0235.997] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x19c1c, dwReserved0=0x0, dwReserved1=0x0, cFileName="tzdb.dat", cAlternateFileName="")) returned 1 [0235.997] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260540 [0235.997] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0b38 [0235.997] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220fe8 [0235.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0b38 | out: hHeap=0x1f0000) returned 1 [0235.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0235.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0235.997] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\tzdb.dat" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzdb.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0235.998] GetFileType (hFile=0x1f4) returned 0x1 [0235.998] CloseHandle (hObject=0x1f4) returned 1 [0235.998] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220508 [0235.998] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\tzdb.dat" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzdb.dat"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x19c1c)) returned 1 [0235.998] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220508 | out: hHeap=0x1f0000) returned 1 [0235.998] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2201c0 [0235.999] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\tzdb.dat" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzdb.dat"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x19c1c)) returned 1 [0235.999] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2201c0 | out: hHeap=0x1f0000) returned 1 [0235.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0235.999] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0235.999] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x20d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tzmappings", cAlternateFileName="TZMAPP~1")) returned 1 [0235.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604c8 [0235.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0248 [0235.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221378 [0235.999] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0248 | out: hHeap=0x1f0000) returned 1 [0235.999] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0235.999] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604c8 | out: hHeap=0x1f0000) returned 1 [0236.000] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\tzmappings" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzmappings"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0236.000] GetFileType (hFile=0x1f4) returned 0x1 [0236.000] CloseHandle (hObject=0x1f4) returned 1 [0236.000] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0236.000] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\tzmappings" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzmappings"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x20d0)) returned 1 [0236.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0236.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21ffe0 [0236.001] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\tzmappings" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzmappings"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x20d0)) returned 1 [0236.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ffe0 | out: hHeap=0x1f0000) returned 1 [0236.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21ffe0 [0236.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ffe0 | out: hHeap=0x1f0000) returned 1 [0236.001] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x20d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tzmappings", cAlternateFileName="TZMAPP~1")) returned 0 [0236.001] FindClose (in: hFindFile=0x24eac0 | out: hFindFile=0x24eac0) returned 1 [0236.002] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2287a0 [0236.002] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606f8 [0236.002] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262e48 [0236.002] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0588 [0236.002] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\*", lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe451d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24e780 [0236.002] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0860 [0236.002] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0588 | out: hHeap=0x1f0000) returned 1 [0236.002] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0236.002] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe451d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0236.002] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0110 [0236.003] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220e20 [0236.003] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0110 | out: hHeap=0x1f0000) returned 1 [0236.003] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0860 | out: hHeap=0x1f0000) returned 1 [0236.003] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0236.003] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0236.003] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x27a, dwReserved0=0x0, dwReserved1=0x3, cFileName="jvm.cfg", cAlternateFileName="")) returned 1 [0236.003] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0ad0 [0236.003] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221708 [0236.003] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0ad0 | out: hHeap=0x1f0000) returned 1 [0236.003] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0236.004] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0236.004] GetFileType (hFile=0x1f4) returned 0x1 [0236.004] CloseHandle (hObject=0x1f4) returned 1 [0236.004] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220508 [0236.004] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x27a)) returned 1 [0236.005] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220508 | out: hHeap=0x1f0000) returned 1 [0236.005] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220580 [0236.005] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x27a)) returned 1 [0236.005] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220580 | out: hHeap=0x1f0000) returned 1 [0236.005] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0236.005] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0236.005] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x27a, dwReserved0=0x0, dwReserved1=0x3, cFileName="jvm.cfg", cAlternateFileName="")) returned 0 [0236.005] FindClose (in: hFindFile=0x24e780 | out: hFindFile=0x24e780) returned 1 [0236.005] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0236.006] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262e48 | out: hHeap=0x1f0000) returned 1 [0236.006] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606f8 | out: hHeap=0x1f0000) returned 1 [0236.006] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2287a0 | out: hHeap=0x1f0000) returned 1 [0236.006] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228b48 [0236.006] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260658 [0236.006] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262e48 [0236.006] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe00 [0236.006] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\applet\\*", lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105ca28, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24ec80 [0236.006] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0b38 [0236.006] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221a98 [0236.006] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0b38 | out: hHeap=0x1f0000) returned 1 [0236.007] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe00 | out: hHeap=0x1f0000) returned 1 [0236.007] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0236.007] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105ca28, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0236.007] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0110 [0236.007] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221118 [0236.007] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0110 | out: hHeap=0x1f0000) returned 1 [0236.007] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0236.007] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0236.007] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0236.007] FindNextFileW (in: hFindFile=0x24ec80, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105ca28, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 0 [0236.007] FindClose (in: hFindFile=0x24ec80 | out: hFindFile=0x24ec80) returned 1 [0236.008] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0236.008] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262e48 | out: hHeap=0x1f0000) returned 1 [0236.008] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260658 | out: hHeap=0x1f0000) returned 1 [0236.008] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228b48 | out: hHeap=0x1f0000) returned 1 [0236.008] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228710 [0236.008] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2607e8 [0236.008] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x261b28 [0236.008] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0110 [0236.009] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\*", lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xd5037ad5, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xd5037ad5, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24ed40 [0236.009] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0178 [0236.009] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0110 | out: hHeap=0x1f0000) returned 1 [0236.009] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0236.009] FindNextFileW (in: hFindFile=0x24ed40, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xd5037ad5, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xd5037ad5, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0236.009] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b03e8 [0236.009] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0178 | out: hHeap=0x1f0000) returned 1 [0236.009] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0236.010] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0236.010] FindNextFileW (in: hFindFile=0x24ed40, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc824, dwReserved0=0x0, dwReserved1=0x3, cFileName="CIEXYZ.pf", cAlternateFileName="")) returned 1 [0236.010] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260838 [0236.010] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0ad0 [0236.010] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221410 [0236.010] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0ad0 | out: hHeap=0x1f0000) returned 1 [0236.010] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b03e8 | out: hHeap=0x1f0000) returned 1 [0236.010] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260838 | out: hHeap=0x1f0000) returned 1 [0236.010] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\CIEXYZ.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\ciexyz.pf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0236.011] GetFileType (hFile=0x1f4) returned 0x1 [0236.011] CloseHandle (hObject=0x1f4) returned 1 [0236.011] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21ffe0 [0236.011] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\CIEXYZ.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\ciexyz.pf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc824)) returned 1 [0236.011] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ffe0 | out: hHeap=0x1f0000) returned 1 [0236.011] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0236.011] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\CIEXYZ.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\ciexyz.pf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc824)) returned 1 [0236.012] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0236.012] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0236.012] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0236.012] FindNextFileW (in: hFindFile=0x24ed40, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x278, dwReserved0=0x0, dwReserved1=0x3, cFileName="GRAY.pf", cAlternateFileName="")) returned 1 [0236.012] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0450 [0236.012] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2214a8 [0236.012] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0450 | out: hHeap=0x1f0000) returned 1 [0236.012] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0236.012] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\GRAY.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\gray.pf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0236.013] GetFileType (hFile=0x1f4) returned 0x1 [0236.013] CloseHandle (hObject=0x1f4) returned 1 [0236.013] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0236.013] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\GRAY.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\gray.pf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x278)) returned 1 [0236.013] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0236.013] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0236.013] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\GRAY.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\gray.pf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x278)) returned 1 [0236.014] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0236.014] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0236.014] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0236.014] FindNextFileW (in: hFindFile=0x24ed40, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x0, dwReserved1=0x3, cFileName="LINEAR_RGB.pf", cAlternateFileName="LINEAR~1.PF")) returned 1 [0236.014] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608b0 [0236.014] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b01e0 [0236.014] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220e20 [0236.014] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b01e0 | out: hHeap=0x1f0000) returned 1 [0236.014] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0236.014] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608b0 | out: hHeap=0x1f0000) returned 1 [0236.015] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\LINEAR_RGB.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\linear_rgb.pf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0236.015] GetFileType (hFile=0x1f4) returned 0x1 [0236.015] CloseHandle (hObject=0x1f4) returned 1 [0236.015] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212a48 [0236.015] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\LINEAR_RGB.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\linear_rgb.pf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x414)) returned 1 [0236.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212a48 | out: hHeap=0x1f0000) returned 1 [0236.016] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213680 [0236.016] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\LINEAR_RGB.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\linear_rgb.pf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x414)) returned 1 [0236.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213680 | out: hHeap=0x1f0000) returned 1 [0236.016] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213570 [0236.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213570 | out: hHeap=0x1f0000) returned 1 [0236.016] FindNextFileW (in: hFindFile=0x24ed40, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd430017b, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xd430017b, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xd501160f, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x4313d, dwReserved0=0x0, dwReserved1=0x3, cFileName="PYCC.pf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="PYCCPF~1.ODV")) returned 1 [0236.016] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0236.016] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0110 [0236.016] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x21b080 [0236.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0110 | out: hHeap=0x1f0000) returned 1 [0236.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0236.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0236.017] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\pycc.pf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0236.017] GetFileType (hFile=0x1f4) returned 0x1 [0236.017] CloseHandle (hObject=0x1f4) returned 1 [0236.018] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x21b368 [0236.018] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\pycc.pf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd430017b, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xd430017b, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xd501160f, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x4313d)) returned 1 [0236.018] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21b368 | out: hHeap=0x1f0000) returned 1 [0236.018] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x21b368 [0236.018] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\pycc.pf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd430017b, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xd430017b, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xd501160f, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x4313d)) returned 1 [0236.018] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21b368 | out: hHeap=0x1f0000) returned 1 [0236.018] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x21b558 [0236.018] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21b558 | out: hHeap=0x1f0000) returned 1 [0236.018] FindNextFileW (in: hFindFile=0x24ed40, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc48, dwReserved0=0x0, dwReserved1=0x3, cFileName="sRGB.pf", cAlternateFileName="")) returned 1 [0236.019] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b02b0 [0236.019] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2215d8 [0236.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b02b0 | out: hHeap=0x1f0000) returned 1 [0236.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21b080 | out: hHeap=0x1f0000) returned 1 [0236.019] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\sRGB.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\srgb.pf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0236.019] GetFileType (hFile=0x1f4) returned 0x1 [0236.020] CloseHandle (hObject=0x1f4) returned 1 [0236.020] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21ffe0 [0236.020] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\sRGB.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\srgb.pf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc48)) returned 1 [0236.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ffe0 | out: hHeap=0x1f0000) returned 1 [0236.020] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2203a0 [0236.020] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\sRGB.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\srgb.pf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc48)) returned 1 [0236.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2203a0 | out: hHeap=0x1f0000) returned 1 [0236.020] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0236.021] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0236.021] FindNextFileW (in: hFindFile=0x24ed40, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc48, dwReserved0=0x0, dwReserved1=0x3, cFileName="sRGB.pf", cAlternateFileName="")) returned 0 [0236.021] FindClose (in: hFindFile=0x24ed40 | out: hFindFile=0x24ed40) returned 1 [0236.021] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0236.021] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261b28 | out: hHeap=0x1f0000) returned 1 [0236.021] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607e8 | out: hHeap=0x1f0000) returned 1 [0236.021] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228710 | out: hHeap=0x1f0000) returned 1 [0236.021] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228680 [0236.021] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606f8 [0236.021] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x261b28 [0236.022] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0236.022] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\*", lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa10e432c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24e900 [0236.022] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0318 [0236.022] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2214a8 [0236.022] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0318 | out: hHeap=0x1f0000) returned 1 [0236.022] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0236.022] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0236.022] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa10e432c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0236.022] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0790 [0236.022] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221410 [0236.022] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0790 | out: hHeap=0x1f0000) returned 1 [0236.023] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0236.023] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0236.023] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0236.023] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x374c, dwReserved0=0x0, dwReserved1=0x3, cFileName="ffjcext.zip", cAlternateFileName="")) returned 1 [0236.023] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2607e8 [0236.023] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0588 [0236.023] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221708 [0236.023] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0588 | out: hHeap=0x1f0000) returned 1 [0236.023] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0236.023] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607e8 | out: hHeap=0x1f0000) returned 1 [0236.024] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0236.364] GetFileType (hFile=0x1f4) returned 0x1 [0236.364] CloseHandle (hObject=0x1f4) returned 1 [0236.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212a48 [0236.365] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x374c)) returned 1 [0236.365] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212a48 | out: hHeap=0x1f0000) returned 1 [0236.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0236.365] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x374c)) returned 1 [0236.366] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0236.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0236.366] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0236.366] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xb2c, dwReserved0=0x0, dwReserved1=0x3, cFileName="messages.properties", cAlternateFileName="MESSAG~1.PRO")) returned 1 [0236.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238e18 [0236.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b08c8 [0236.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0236.366] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b08c8 | out: hHeap=0x1f0000) returned 1 [0236.367] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0236.367] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238e18 | out: hHeap=0x1f0000) returned 1 [0236.367] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0236.368] GetFileType (hFile=0x1f4) returned 0x1 [0236.369] CloseHandle (hObject=0x1f4) returned 1 [0236.370] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0236.370] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages.properties"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xb2c)) returned 1 [0236.384] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0236.384] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0236.384] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages.properties"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xb2c)) returned 1 [0236.384] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0236.384] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0236.384] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0236.384] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0236.384] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0236.385] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xcea, dwReserved0=0x0, dwReserved1=0x3, cFileName="messages_de.properties", cAlternateFileName="MESSAG~2.PRO")) returned 1 [0236.385] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2391d0 [0236.385] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b00a8 [0236.385] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0236.385] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b00a8 | out: hHeap=0x1f0000) returned 1 [0236.385] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0236.385] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2391d0 | out: hHeap=0x1f0000) returned 1 [0236.385] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0236.386] GetFileType (hFile=0x174) returned 0x1 [0236.386] CloseHandle (hObject=0x174) returned 1 [0236.387] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0236.387] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xcea)) returned 1 [0236.387] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0236.387] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0236.387] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xcea)) returned 1 [0236.387] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0236.387] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0236.387] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605b8 [0236.388] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0236.388] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0236.388] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xe10, dwReserved0=0x0, dwReserved1=0x3, cFileName="messages_es.properties", cAlternateFileName="MESSAG~3.PRO")) returned 1 [0236.388] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238fa0 [0236.388] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0658 [0236.388] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0236.388] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0658 | out: hHeap=0x1f0000) returned 1 [0236.388] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0236.388] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238fa0 | out: hHeap=0x1f0000) returned 1 [0236.389] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0236.389] GetFileType (hFile=0x174) returned 0x1 [0236.389] CloseHandle (hObject=0x174) returned 1 [0236.390] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0236.390] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xe10)) returned 1 [0236.390] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0236.390] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0236.390] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xe10)) returned 1 [0236.390] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0236.391] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0236.391] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0236.391] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0236.391] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0236.391] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xd51, dwReserved0=0x0, dwReserved1=0x3, cFileName="messages_fr.properties", cAlternateFileName="MESSAG~4.PRO")) returned 1 [0236.391] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2392b0 [0236.391] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0728 [0236.391] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0236.392] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0728 | out: hHeap=0x1f0000) returned 1 [0236.392] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0236.392] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2392b0 | out: hHeap=0x1f0000) returned 1 [0236.392] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0236.393] GetFileType (hFile=0x174) returned 0x1 [0236.393] CloseHandle (hObject=0x174) returned 1 [0236.394] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0236.394] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xd51)) returned 1 [0236.394] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0236.394] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0236.394] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xd51)) returned 1 [0236.394] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0236.394] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0236.395] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0236.395] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0236.395] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0236.395] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc97, dwReserved0=0x0, dwReserved1=0x3, cFileName="messages_it.properties", cAlternateFileName="MEC9EA~1.PRO")) returned 1 [0236.395] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2392b0 [0236.395] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b08c8 [0236.395] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0236.395] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b08c8 | out: hHeap=0x1f0000) returned 1 [0236.395] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0236.395] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2392b0 | out: hHeap=0x1f0000) returned 1 [0236.396] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0236.396] GetFileType (hFile=0x174) returned 0x1 [0236.396] CloseHandle (hObject=0x174) returned 1 [0236.397] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0236.397] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc97)) returned 1 [0236.397] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0236.397] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0236.397] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc97)) returned 1 [0236.397] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0236.397] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0236.397] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0236.397] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0236.397] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0236.397] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x18cd, dwReserved0=0x0, dwReserved1=0x3, cFileName="messages_ja.properties", cAlternateFileName="ME4AF1~1.PRO")) returned 1 [0236.398] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238f30 [0236.398] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0658 [0236.398] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0236.398] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0658 | out: hHeap=0x1f0000) returned 1 [0236.398] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0236.398] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238f30 | out: hHeap=0x1f0000) returned 1 [0236.398] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0236.399] GetFileType (hFile=0x174) returned 0x1 [0236.400] CloseHandle (hObject=0x174) returned 1 [0236.400] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0236.400] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x18cd)) returned 1 [0236.400] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0236.401] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0236.401] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x18cd)) returned 1 [0236.401] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0236.401] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0236.401] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260888 [0236.401] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0236.401] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0236.401] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1650, dwReserved0=0x0, dwReserved1=0x3, cFileName="messages_ko.properties", cAlternateFileName="ME1706~1.PRO")) returned 1 [0236.401] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238f68 [0236.401] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0110 [0236.401] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0236.401] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0110 | out: hHeap=0x1f0000) returned 1 [0236.401] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0236.402] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238f68 | out: hHeap=0x1f0000) returned 1 [0236.402] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0236.402] GetFileType (hFile=0x174) returned 0x1 [0236.402] CloseHandle (hObject=0x174) returned 1 [0236.403] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0236.403] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1650)) returned 1 [0236.403] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0236.403] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0236.403] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1650)) returned 1 [0236.403] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0236.403] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0236.404] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608b0 [0236.404] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0236.404] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608b0 | out: hHeap=0x1f0000) returned 1 [0236.404] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xcd5, dwReserved0=0x0, dwReserved1=0x3, cFileName="messages_pt_BR.properties", cAlternateFileName="MED1E1~1.PRO")) returned 1 [0236.404] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228b48 [0236.404] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0a68 [0236.404] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a968 [0236.404] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0a68 | out: hHeap=0x1f0000) returned 1 [0236.404] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0236.404] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228b48 | out: hHeap=0x1f0000) returned 1 [0236.405] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_pt_BR.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_pt_br.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0236.405] GetFileType (hFile=0x174) returned 0x1 [0236.405] CloseHandle (hObject=0x174) returned 1 [0236.405] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a188 [0236.405] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_pt_BR.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_pt_br.properties"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xcd5)) returned 1 [0236.405] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a188 | out: hHeap=0x1f0000) returned 1 [0236.405] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a4d0 [0236.406] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_pt_BR.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_pt_br.properties"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xcd5)) returned 1 [0236.406] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a4d0 | out: hHeap=0x1f0000) returned 1 [0236.406] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a770 [0236.406] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605b8 [0236.406] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a770 | out: hHeap=0x1f0000) returned 1 [0236.406] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0236.406] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xd51, dwReserved0=0x0, dwReserved1=0x3, cFileName="messages_sv.properties", cAlternateFileName="ME0541~1.PRO")) returned 1 [0236.406] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238d70 [0236.406] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0930 [0236.406] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0236.406] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0930 | out: hHeap=0x1f0000) returned 1 [0236.408] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a968 | out: hHeap=0x1f0000) returned 1 [0236.408] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238d70 | out: hHeap=0x1f0000) returned 1 [0236.408] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0236.409] GetFileType (hFile=0x174) returned 0x1 [0236.409] CloseHandle (hObject=0x174) returned 1 [0236.409] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0236.409] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xd51)) returned 1 [0236.409] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0236.409] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0236.409] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xd51)) returned 1 [0236.410] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0236.410] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0236.410] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0236.410] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0236.410] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0236.410] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xfe8, dwReserved0=0x0, dwReserved1=0x3, cFileName="messages_zh_CN.properties", cAlternateFileName="ME40CD~1.PRO")) returned 1 [0236.410] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2286c8 [0236.410] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0520 [0236.410] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219cf0 [0236.410] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0520 | out: hHeap=0x1f0000) returned 1 [0236.410] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0236.410] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2286c8 | out: hHeap=0x1f0000) returned 1 [0236.411] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_CN.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_cn.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0236.411] GetFileType (hFile=0x174) returned 0x1 [0236.411] CloseHandle (hObject=0x174) returned 1 [0236.411] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a0e0 [0236.411] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_CN.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_cn.properties"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xfe8)) returned 1 [0236.412] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a0e0 | out: hHeap=0x1f0000) returned 1 [0236.412] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a380 [0236.412] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_CN.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_cn.properties"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xfe8)) returned 1 [0236.412] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a380 | out: hHeap=0x1f0000) returned 1 [0236.412] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a578 [0236.412] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0236.412] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a578 | out: hHeap=0x1f0000) returned 1 [0236.412] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0236.412] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xea8, dwReserved0=0x0, dwReserved1=0x3, cFileName="messages_zh_HK.properties", cAlternateFileName="MEB8B5~1.PRO")) returned 1 [0236.412] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2286c8 [0236.412] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0c70 [0236.413] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a578 [0236.413] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0c70 | out: hHeap=0x1f0000) returned 1 [0236.413] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219cf0 | out: hHeap=0x1f0000) returned 1 [0236.413] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2286c8 | out: hHeap=0x1f0000) returned 1 [0236.413] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_HK.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_hk.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0236.413] GetFileType (hFile=0x174) returned 0x1 [0236.414] CloseHandle (hObject=0x174) returned 1 [0236.414] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21aa10 [0236.414] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_HK.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_hk.properties"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xea8)) returned 1 [0236.414] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21aa10 | out: hHeap=0x1f0000) returned 1 [0236.414] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219f90 [0236.414] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_HK.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_hk.properties"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xea8)) returned 1 [0236.709] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219f90 | out: hHeap=0x1f0000) returned 1 [0236.743] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a4d0 [0236.743] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b08 [0236.743] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a4d0 | out: hHeap=0x1f0000) returned 1 [0236.744] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b08 | out: hHeap=0x1f0000) returned 1 [0236.744] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xea8, dwReserved0=0x0, dwReserved1=0x3, cFileName="messages_zh_TW.properties", cAlternateFileName="MECC18~1.PRO")) returned 1 [0236.744] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228638 [0236.744] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0318 [0236.744] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21ab60 [0236.744] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0318 | out: hHeap=0x1f0000) returned 1 [0236.744] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a578 | out: hHeap=0x1f0000) returned 1 [0236.744] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228638 | out: hHeap=0x1f0000) returned 1 [0236.745] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_TW.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_tw.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0236.745] GetFileType (hFile=0x230) returned 0x1 [0236.746] CloseHandle (hObject=0x230) returned 1 [0236.746] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a0e0 [0236.746] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_TW.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_tw.properties"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xea8)) returned 1 [0236.747] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a0e0 | out: hHeap=0x1f0000) returned 1 [0236.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21aab8 [0236.747] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_TW.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_tw.properties"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xea8)) returned 1 [0236.747] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21aab8 | out: hHeap=0x1f0000) returned 1 [0236.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219e40 [0236.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a68 [0236.747] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219e40 | out: hHeap=0x1f0000) returned 1 [0236.747] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a68 | out: hHeap=0x1f0000) returned 1 [0236.747] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x218e, dwReserved0=0x0, dwReserved1=0x3, cFileName="splash.gif", cAlternateFileName="")) returned 1 [0236.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c70 [0236.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0380 [0236.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221540 [0236.748] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0380 | out: hHeap=0x1f0000) returned 1 [0236.748] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ab60 | out: hHeap=0x1f0000) returned 1 [0236.748] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c70 | out: hHeap=0x1f0000) returned 1 [0236.748] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0236.748] GetFileType (hFile=0x230) returned 0x1 [0236.749] CloseHandle (hObject=0x230) returned 1 [0236.749] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2133d8 [0236.749] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash.gif"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x218e)) returned 1 [0236.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2133d8 | out: hHeap=0x1f0000) returned 1 [0236.749] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0236.749] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash.gif"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x218e)) returned 1 [0236.750] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0236.750] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0236.750] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0236.750] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3bac, dwReserved0=0x0, dwReserved1=0x3, cFileName="splash@2x.gif", cAlternateFileName="SPLASH~1.GIF")) returned 1 [0236.750] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b58 [0236.750] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0248 [0236.750] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2212e0 [0236.750] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0248 | out: hHeap=0x1f0000) returned 1 [0236.750] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0236.750] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b58 | out: hHeap=0x1f0000) returned 1 [0236.751] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0236.751] GetFileType (hFile=0x230) returned 0x1 [0236.752] CloseHandle (hObject=0x230) returned 1 [0236.752] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2132c8 [0236.752] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3bac)) returned 1 [0236.752] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2132c8 | out: hHeap=0x1f0000) returned 1 [0236.752] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e88 [0236.752] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3bac)) returned 1 [0236.752] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e88 | out: hHeap=0x1f0000) returned 1 [0236.753] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0236.753] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0236.753] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1e7d, dwReserved0=0x0, dwReserved1=0x3, cFileName="splash_11-lic.gif", cAlternateFileName="SPLASH~2.GIF")) returned 1 [0236.753] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239208 [0236.753] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b02b0 [0236.753] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0236.753] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b02b0 | out: hHeap=0x1f0000) returned 1 [0236.753] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0236.753] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239208 | out: hHeap=0x1f0000) returned 1 [0236.754] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0236.754] GetFileType (hFile=0x230) returned 0x1 [0236.755] CloseHandle (hObject=0x230) returned 1 [0236.755] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0236.755] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1e7d)) returned 1 [0236.755] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0236.755] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0236.755] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1e7d)) returned 1 [0236.756] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0236.756] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0236.756] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0236.756] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2fda, dwReserved0=0x0, dwReserved1=0x3, cFileName="splash_11@2x-lic.gif", cAlternateFileName="SPLASH~3.GIF")) returned 1 [0236.756] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238d38 [0236.756] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0520 [0236.756] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0236.756] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0520 | out: hHeap=0x1f0000) returned 1 [0236.756] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0236.756] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238d38 | out: hHeap=0x1f0000) returned 1 [0236.757] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0236.757] GetFileType (hFile=0x230) returned 0x1 [0236.758] CloseHandle (hObject=0x230) returned 1 [0236.758] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0236.758] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2fda)) returned 1 [0236.760] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0236.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0236.760] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2fda)) returned 1 [0236.760] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0236.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0236.760] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0236.761] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2fda, dwReserved0=0x0, dwReserved1=0x3, cFileName="splash_11@2x-lic.gif", cAlternateFileName="SPLASH~3.GIF")) returned 0 [0236.761] FindClose (in: hFindFile=0x24e900 | out: hFindFile=0x24e900) returned 1 [0236.761] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0236.761] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261b28 | out: hHeap=0x1f0000) returned 1 [0236.762] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606f8 | out: hHeap=0x1f0000) returned 1 [0236.762] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228680 | out: hHeap=0x1f0000) returned 1 [0236.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228830 [0236.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606f8 [0236.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2627e8 [0236.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0110 [0236.762] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\*", lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xd6514491, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xd6514491, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24eac0 [0236.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0b38 [0236.763] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0110 | out: hHeap=0x1f0000) returned 1 [0236.763] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0236.763] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xd6514491, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xd6514491, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0236.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0248 [0236.763] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0b38 | out: hHeap=0x1f0000) returned 1 [0236.763] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0236.763] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0236.763] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2de78, dwReserved0=0x0, dwReserved1=0x3, cFileName="access-bridge-64.jar", cAlternateFileName="ACCESS~1.JAR")) returned 1 [0236.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239208 [0236.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b08c8 [0236.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0236.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b08c8 | out: hHeap=0x1f0000) returned 1 [0236.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0248 | out: hHeap=0x1f0000) returned 1 [0236.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239208 | out: hHeap=0x1f0000) returned 1 [0236.765] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0236.765] GetFileType (hFile=0x230) returned 0x1 [0236.765] CloseHandle (hObject=0x230) returned 1 [0236.766] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0236.766] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2de78)) returned 1 [0236.766] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0236.766] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0236.766] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2de78)) returned 1 [0236.767] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0236.767] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0236.767] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0236.767] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xd677698d, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x3ae816, dwReserved0=0x0, dwReserved1=0x3, cFileName="cldrdata.jar", cAlternateFileName="")) returned 1 [0236.767] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b08 [0236.767] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0520 [0236.767] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2212e0 [0236.767] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0520 | out: hHeap=0x1f0000) returned 1 [0236.768] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0236.768] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b08 | out: hHeap=0x1f0000) returned 1 [0236.768] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0236.769] GetFileType (hFile=0x230) returned 0x1 [0236.769] CloseHandle (hObject=0x230) returned 1 [0236.770] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213680 [0236.770] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xd677698d, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x3ae816)) returned 1 [0236.770] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213680 | out: hHeap=0x1f0000) returned 1 [0236.770] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213680 [0236.770] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xd677698d, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x3ae816)) returned 1 [0236.771] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213680 | out: hHeap=0x1f0000) returned 1 [0236.771] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0236.771] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0236.771] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bb82c9, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8bb82c9, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8bb82c9, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x205e, dwReserved0=0x0, dwReserved1=0x3, cFileName="dnsns.jar", cAlternateFileName="")) returned 1 [0236.771] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b08 [0236.771] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b03e8 [0236.771] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221410 [0236.771] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b03e8 | out: hHeap=0x1f0000) returned 1 [0236.771] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0236.772] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b08 | out: hHeap=0x1f0000) returned 1 [0236.772] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\dnsns.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0236.773] GetFileType (hFile=0x230) returned 0x1 [0236.773] CloseHandle (hObject=0x230) returned 1 [0236.774] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0236.774] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\dnsns.jar"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bb82c9, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8bb82c9, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8bb82c9, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x205e)) returned 1 [0236.774] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0236.774] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220580 [0236.774] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\dnsns.jar"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bb82c9, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8bb82c9, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8bb82c9, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x205e)) returned 1 [0236.774] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220580 | out: hHeap=0x1f0000) returned 1 [0236.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21ffe0 [0236.775] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ffe0 | out: hHeap=0x1f0000) returned 1 [0236.775] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bb82c9, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8bb82c9, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8bb82c9, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xade4, dwReserved0=0x0, dwReserved1=0x3, cFileName="jaccess.jar", cAlternateFileName="")) returned 1 [0236.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b08 [0236.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0728 [0236.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221a00 [0236.776] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0728 | out: hHeap=0x1f0000) returned 1 [0236.776] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0236.776] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b08 | out: hHeap=0x1f0000) returned 1 [0236.776] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jaccess.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0236.777] GetFileType (hFile=0x230) returned 0x1 [0236.777] CloseHandle (hObject=0x230) returned 1 [0236.778] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f770 [0236.778] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jaccess.jar"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bb82c9, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8bb82c9, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8bb82c9, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xade4)) returned 1 [0236.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f770 | out: hHeap=0x1f0000) returned 1 [0236.778] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fa40 [0236.778] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jaccess.jar"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bb82c9, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8bb82c9, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8bb82c9, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xade4)) returned 1 [0236.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fa40 | out: hHeap=0x1f0000) returned 1 [0236.778] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0236.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0236.779] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bb82c9, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8bb82c9, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1166a99, dwReserved0=0x0, dwReserved1=0x3, cFileName="jfxrt.jar", cAlternateFileName="")) returned 1 [0236.779] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b08 [0236.779] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0450 [0236.779] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221410 [0236.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0450 | out: hHeap=0x1f0000) returned 1 [0236.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0236.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b08 | out: hHeap=0x1f0000) returned 1 [0236.780] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0236.780] GetFileType (hFile=0x230) returned 0x1 [0236.780] CloseHandle (hObject=0x230) returned 1 [0236.781] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0236.781] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bb82c9, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8bb82c9, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1166a99)) returned 1 [0236.781] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0236.781] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0236.781] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bb82c9, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8bb82c9, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1166a99)) returned 1 [0236.781] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0236.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0236.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0236.782] GetLastError () returned 0x0 [0236.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c48 [0236.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228638 [0236.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262cb0 [0236.783] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0236.783] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c20 [0236.783] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c70 [0236.783] CryptAcquireContextA (in: phProv=0x2573860, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2573860*=0x212a48) returned 1 [0236.784] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x260c70 | out: pbBuffer=0x260c70) returned 1 [0236.784] CryptReleaseContext (hProv=0x212a48, dwFlags=0x0) returned 1 [0236.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c70 | out: hHeap=0x1f0000) returned 1 [0236.785] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x266290 [0236.785] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2ae888 [0236.785] QueryPerformanceCounter (in: lpPerformanceCount=0x25737f4 | out: lpPerformanceCount=0x25737f4*=39415381494) returned 1 [0236.785] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x2573834 | out: lpSystemTimeAsFileTime=0x2573834) [0236.785] QueryPerformanceCounter (in: lpPerformanceCount=0x25737f4 | out: lpPerformanceCount=0x25737f4*=39415418969) returned 1 [0236.785] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x2573834 | out: lpSystemTimeAsFileTime=0x2573834) [0236.786] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x2392b0 [0236.786] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x2733e8 [0236.786] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2aeab8 [0236.786] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x233638 [0236.786] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f878 [0236.786] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206808 [0236.786] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f6f8 [0236.786] GetLastError () returned 0x0 [0236.787] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x25737c4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0236.787] GetFileType (hFile=0x230) returned 0x1 [0236.788] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2573830 | out: lpNewFilePointer=0x0) returned 1 [0236.788] ReadFile (in: hFile=0x230, lpBuffer=0x2588d30, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x2573808, lpOverlapped=0x0 | out: lpBuffer=0x2588d30*, lpNumberOfBytesRead=0x2573808*=0x14000, lpOverlapped=0x0) returned 1 [0236.896] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x292ff8 [0236.896] ReadFile (in: hFile=0x230, lpBuffer=0x292ff8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x25737ac, lpOverlapped=0x0 | out: lpBuffer=0x292ff8*, lpNumberOfBytesRead=0x25737ac*=0x1000, lpOverlapped=0x0) returned 1 [0236.897] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2573838 | out: lpNewFilePointer=0x0) returned 1 [0236.897] WriteFile (in: hFile=0x230, lpBuffer=0x2573d40*, nNumberOfBytesToWrite=0x14000, lpNumberOfBytesWritten=0x25737a4, lpOverlapped=0x0 | out: lpBuffer=0x2573d40*, lpNumberOfBytesWritten=0x25737a4*=0x14000, lpOverlapped=0x0) returned 1 [0236.898] WriteFile (in: hFile=0x230, lpBuffer=0x292ff8*, nNumberOfBytesToWrite=0xff0, lpNumberOfBytesWritten=0x25737d0, lpOverlapped=0x0 | out: lpBuffer=0x292ff8*, lpNumberOfBytesWritten=0x25737d0*=0xff0, lpOverlapped=0x0) returned 1 [0236.898] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x15f90, lpNewFilePointer=0x0, dwMoveMethod=0x2573818 | out: lpNewFilePointer=0x0) returned 1 [0236.898] ReadFile (in: hFile=0x230, lpBuffer=0x2588d30, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x25737f0, lpOverlapped=0x0 | out: lpBuffer=0x2588d30*, lpNumberOfBytesRead=0x25737f0*=0x14000, lpOverlapped=0x0) returned 1 [0236.900] ReadFile (in: hFile=0x230, lpBuffer=0x292ff8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2573794, lpOverlapped=0x0 | out: lpBuffer=0x292ff8*, lpNumberOfBytesRead=0x2573794*=0x1000, lpOverlapped=0x0) returned 1 [0236.901] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x15f90, lpNewFilePointer=0x0, dwMoveMethod=0x2573838 | out: lpNewFilePointer=0x0) returned 1 [0236.901] WriteFile (in: hFile=0x230, lpBuffer=0x2573d40*, nNumberOfBytesToWrite=0x14000, lpNumberOfBytesWritten=0x25737a4, lpOverlapped=0x0 | out: lpBuffer=0x2573d40*, lpNumberOfBytesWritten=0x25737a4*=0x14000, lpOverlapped=0x0) returned 1 [0236.902] WriteFile (in: hFile=0x230, lpBuffer=0x292ff8*, nNumberOfBytesToWrite=0xff0, lpNumberOfBytesWritten=0x25737d0, lpOverlapped=0x0 | out: lpBuffer=0x292ff8*, lpNumberOfBytesWritten=0x25737d0*=0xff0, lpOverlapped=0x0) returned 1 [0236.902] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0xdbba0, lpNewFilePointer=0x0, dwMoveMethod=0x2573818 | out: lpNewFilePointer=0x0) returned 1 [0236.902] ReadFile (in: hFile=0x230, lpBuffer=0x2588d30, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x25737f0, lpOverlapped=0x0 | out: lpBuffer=0x2588d30*, lpNumberOfBytesRead=0x25737f0*=0x14000, lpOverlapped=0x0) returned 1 [0236.907] ReadFile (in: hFile=0x230, lpBuffer=0x292ff8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2573794, lpOverlapped=0x0 | out: lpBuffer=0x292ff8*, lpNumberOfBytesRead=0x2573794*=0x1000, lpOverlapped=0x0) returned 1 [0236.908] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0xdbba0, lpNewFilePointer=0x0, dwMoveMethod=0x2573838 | out: lpNewFilePointer=0x0) returned 1 [0236.908] WriteFile (in: hFile=0x230, lpBuffer=0x2573d40*, nNumberOfBytesToWrite=0x14000, lpNumberOfBytesWritten=0x25737a4, lpOverlapped=0x0 | out: lpBuffer=0x2573d40*, lpNumberOfBytesWritten=0x25737a4*=0x14000, lpOverlapped=0x0) returned 1 [0236.909] WriteFile (in: hFile=0x230, lpBuffer=0x292ff8*, nNumberOfBytesToWrite=0xff0, lpNumberOfBytesWritten=0x2573820, lpOverlapped=0x0 | out: lpBuffer=0x292ff8*, lpNumberOfBytesWritten=0x2573820*=0xff0, lpOverlapped=0x0) returned 1 [0236.910] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x292ff8 | out: hHeap=0x1f0000) returned 1 [0236.910] CloseHandle (hObject=0x230) returned 1 [0236.910] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2284d0 [0236.910] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2605b8 [0236.911] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2606d0 [0236.911] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3c) returned 0x228cb0 [0236.911] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bb0 [0236.911] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204dd0 [0236.911] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x3) returned 0x238880 [0236.911] GetLastError () returned 0x0 [0236.911] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238ef8 [0236.911] GetLastError () returned 0x0 [0236.911] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238c58 [0236.912] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b06c0 [0236.912] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260608 [0236.912] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2859e0 [0236.912] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388b0 [0236.912] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260770 [0236.912] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f998 [0236.912] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389c0 [0236.912] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260630 [0236.912] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f9b0 [0236.912] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260658 [0236.912] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2858d8 [0236.912] GetLastError () returned 0x0 [0236.913] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x2389b0 [0236.913] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x2388c0 [0236.913] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238a80 [0236.913] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388c0 | out: hHeap=0x1f0000) returned 1 [0236.913] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388c0 [0236.913] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238a80 | out: hHeap=0x1f0000) returned 1 [0236.913] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389b0 | out: hHeap=0x1f0000) returned 1 [0236.913] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389b0 [0236.913] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f788 [0236.913] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389b0 | out: hHeap=0x1f0000) returned 1 [0236.913] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f728 [0236.913] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f788 | out: hHeap=0x1f0000) returned 1 [0236.913] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388c0 | out: hHeap=0x1f0000) returned 1 [0236.913] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f8d8 [0236.913] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f8a8 [0236.914] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f8d8 | out: hHeap=0x1f0000) returned 1 [0236.914] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f620 [0236.914] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f8a8 | out: hHeap=0x1f0000) returned 1 [0236.914] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f728 | out: hHeap=0x1f0000) returned 1 [0236.914] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f6b0 [0236.914] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204f10 [0236.914] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f6b0 | out: hHeap=0x1f0000) returned 1 [0236.914] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d90 [0236.914] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f10 | out: hHeap=0x1f0000) returned 1 [0236.914] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f620 | out: hHeap=0x1f0000) returned 1 [0236.916] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f70 [0236.916] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2607c0 [0236.916] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f70 | out: hHeap=0x1f0000) returned 1 [0236.916] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204f10 [0236.916] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607c0 | out: hHeap=0x1f0000) returned 1 [0236.916] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d90 | out: hHeap=0x1f0000) returned 1 [0236.916] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204f70 [0236.916] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206628 [0236.916] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f70 | out: hHeap=0x1f0000) returned 1 [0236.916] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x260888 [0236.916] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206628 | out: hHeap=0x1f0000) returned 1 [0236.916] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f10 | out: hHeap=0x1f0000) returned 1 [0236.917] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388c0 [0236.917] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f638 [0236.917] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388c0 | out: hHeap=0x1f0000) returned 1 [0236.917] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f800 [0236.917] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f638 | out: hHeap=0x1f0000) returned 1 [0236.917] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204d10 [0236.917] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f800 | out: hHeap=0x1f0000) returned 1 [0236.917] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x24) returned 0x206868 [0236.917] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d10 | out: hHeap=0x1f0000) returned 1 [0236.917] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206868 | out: hHeap=0x1f0000) returned 1 [0236.917] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0236.918] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0236.918] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abec0 [0236.918] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2859e0 | out: hHeap=0x1f0000) returned 1 [0236.918] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0236.918] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238de0 [0236.918] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2607c0 [0236.918] CryptAcquireContextA (in: phProv=0x2573860, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2573860*=0x213130) returned 1 [0236.919] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2607c0 | out: pbBuffer=0x2607c0) returned 1 [0236.919] CryptReleaseContext (hProv=0x213130, dwFlags=0x0) returned 1 [0236.920] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607c0 | out: hHeap=0x1f0000) returned 1 [0236.920] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260608 [0236.920] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2606a8 [0236.920] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c58 [0236.920] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0236.920] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab208 [0236.920] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c58 | out: hHeap=0x1f0000) returned 1 [0236.920] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4c) returned 0x2a8428 [0236.920] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f620 [0236.920] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5c) returned 0x2b0728 [0236.920] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2607c0 [0236.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285ae8 [0236.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d30 [0236.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0318 [0236.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c) returned 0x2605b8 [0236.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2859e0 [0236.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2388c0 [0236.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0236.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f608 [0236.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2389b0 [0236.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0236.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x24f788 [0236.921] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f788 | out: hHeap=0x1f0000) returned 1 [0236.921] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0236.922] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389b0 | out: hHeap=0x1f0000) returned 1 [0236.922] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f608 | out: hHeap=0x1f0000) returned 1 [0236.922] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0236.922] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388c0 | out: hHeap=0x1f0000) returned 1 [0236.922] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2859e0 | out: hHeap=0x1f0000) returned 1 [0236.922] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0236.922] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0318 | out: hHeap=0x1f0000) returned 1 [0236.922] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238d38 [0236.922] GetLastError () returned 0x0 [0236.922] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238d00 [0236.923] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab6a8 [0236.923] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab6a8 | out: hHeap=0x1f0000) returned 1 [0236.923] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2acdc8 [0236.923] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aca50 [0236.923] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2acdc8 | out: hHeap=0x1f0000) returned 1 [0236.923] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aca50 | out: hHeap=0x1f0000) returned 1 [0236.923] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x31) returned 0x24e900 [0236.923] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285bf0 [0236.923] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2acca0 [0236.923] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2acca0 | out: hHeap=0x1f0000) returned 1 [0236.923] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac800 [0236.923] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac800 | out: hHeap=0x1f0000) returned 1 [0236.923] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2855c0 [0236.923] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab330 [0236.923] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab330 | out: hHeap=0x1f0000) returned 1 [0236.924] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x230258 [0236.924] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x26e7c8 [0236.924] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x2af378 [0236.924] QueryPerformanceCounter (in: lpPerformanceCount=0x25733b0 | out: lpPerformanceCount=0x25733b0*=39429270342) returned 1 [0236.924] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x25733f0 | out: lpSystemTimeAsFileTime=0x25733f0) [0236.924] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x4) returned 0x2389b0 [0236.924] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0236.924] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f70 [0236.924] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f70 | out: hHeap=0x1f0000) returned 1 [0236.924] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0236.924] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605b8 [0236.925] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204bf0 [0236.925] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204bf0 | out: hHeap=0x1f0000) returned 1 [0236.925] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0236.925] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389b0 | out: hHeap=0x1f0000) returned 1 [0236.925] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0236.925] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x238f30 [0236.925] GetLastError () returned 0x0 [0236.925] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abd98 [0236.925] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab458 [0236.926] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abc70 [0236.926] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260860 [0236.926] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260888 [0236.926] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2acb78 [0236.926] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab8f8 [0236.926] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2608b0 [0236.926] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab330 [0236.926] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x513) returned 0x222ee8 [0236.926] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2acca0 [0236.926] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x22b018 [0236.926] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2acca0 | out: hHeap=0x1f0000) returned 1 [0236.926] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x220968 [0236.926] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b018 | out: hHeap=0x1f0000) returned 1 [0236.927] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260608 [0236.927] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2605b8 [0236.927] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0236.927] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2acca0 [0236.927] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0236.927] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x22b018 [0236.927] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x52b) returned 0x2647e0 [0236.927] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2647e0 | out: hHeap=0x1f0000) returned 1 [0236.927] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b018 | out: hHeap=0x1f0000) returned 1 [0236.928] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220968 | out: hHeap=0x1f0000) returned 1 [0236.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc) returned 0x24f860 [0236.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228a70 [0236.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2605b8 [0236.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260608 [0236.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260c70 [0236.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260b08 [0236.928] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0236.928] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0236.929] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x213) returned 0x22b018 [0236.929] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x2605b8 [0236.929] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1b) returned 0x260608 [0236.929] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0236.929] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aca50 [0236.929] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0236.929] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x206688 [0236.929] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x433) returned 0x2a9c88 [0236.929] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a9c88 | out: hHeap=0x1f0000) returned 1 [0236.929] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206688 | out: hHeap=0x1f0000) returned 1 [0236.929] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608b0 | out: hHeap=0x1f0000) returned 1 [0236.930] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abfe8 [0236.930] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aca50 | out: hHeap=0x1f0000) returned 1 [0236.930] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b018 | out: hHeap=0x1f0000) returned 1 [0236.930] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204d90 [0236.930] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac110 [0236.930] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2abb48 [0237.226] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0237.226] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac238 [0237.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abb48 | out: hHeap=0x1f0000) returned 1 [0237.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b08 | out: hHeap=0x1f0000) returned 1 [0237.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c70 | out: hHeap=0x1f0000) returned 1 [0237.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228a70 | out: hHeap=0x1f0000) returned 1 [0237.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac110 | out: hHeap=0x1f0000) returned 1 [0237.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d90 | out: hHeap=0x1f0000) returned 1 [0237.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f860 | out: hHeap=0x1f0000) returned 1 [0237.228] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2acca0 | out: hHeap=0x1f0000) returned 1 [0237.228] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ac110 [0237.228] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac110 | out: hHeap=0x1f0000) returned 1 [0237.228] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222ee8 | out: hHeap=0x1f0000) returned 1 [0237.228] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab330 | out: hHeap=0x1f0000) returned 1 [0237.228] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abfe8 | out: hHeap=0x1f0000) returned 1 [0237.228] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab8f8 | out: hHeap=0x1f0000) returned 1 [0237.228] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2acb78 | out: hHeap=0x1f0000) returned 1 [0237.228] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0237.228] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abc70 | out: hHeap=0x1f0000) returned 1 [0237.228] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab458 | out: hHeap=0x1f0000) returned 1 [0237.228] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2aafb8 [0237.228] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x113) returned 0x2ab458 [0237.229] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aafb8 | out: hHeap=0x1f0000) returned 1 [0237.229] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab458 | out: hHeap=0x1f0000) returned 1 [0237.229] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ac238 | out: hHeap=0x1f0000) returned 1 [0237.229] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abd98 | out: hHeap=0x1f0000) returned 1 [0237.229] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2855c0 | out: hHeap=0x1f0000) returned 1 [0237.229] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24e900 | out: hHeap=0x1f0000) returned 1 [0237.229] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x2af5a8 [0237.229] GetLastError () returned 0x0 [0237.229] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238820 [0237.230] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x238860 [0237.230] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2573760, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0237.230] GetFileType (hFile=0x1d8) returned 0x1 [0237.231] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x290fe8 [0237.231] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x25736e8 | out: lpNewFilePointer=0x0) returned 1 [0237.231] GetLastError () returned 0xb7 [0237.234] CloseHandle (hObject=0x1d8) returned 1 [0237.235] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2133d8 [0237.235] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fa88 [0237.235] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2133d8 | out: hHeap=0x1f0000) returned 1 [0237.235] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x11e) returned 0x2acb78 [0237.235] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0237.235] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar"), lpNewFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwFlags=0x2) returned 1 [0237.237] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2acb78 | out: hHeap=0x1f0000) returned 1 [0237.237] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238860 | out: hHeap=0x1f0000) returned 1 [0237.237] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238820 | out: hHeap=0x1f0000) returned 1 [0237.237] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285bf0 | out: hHeap=0x1f0000) returned 1 [0237.237] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285ae8 | out: hHeap=0x1f0000) returned 1 [0237.237] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607c0 | out: hHeap=0x1f0000) returned 1 [0237.237] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204d30 | out: hHeap=0x1f0000) returned 1 [0237.237] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0728 | out: hHeap=0x1f0000) returned 1 [0237.237] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f620 | out: hHeap=0x1f0000) returned 1 [0237.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8428 | out: hHeap=0x1f0000) returned 1 [0237.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2af5a8 | out: hHeap=0x1f0000) returned 1 [0237.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0237.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ab208 | out: hHeap=0x1f0000) returned 1 [0237.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x26e7c8 | out: hHeap=0x1f0000) returned 1 [0237.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2af378 | out: hHeap=0x1f0000) returned 1 [0237.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238de0 | out: hHeap=0x1f0000) returned 1 [0237.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238880 | out: hHeap=0x1f0000) returned 1 [0237.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f9b0 | out: hHeap=0x1f0000) returned 1 [0237.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260630 | out: hHeap=0x1f0000) returned 1 [0237.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2389c0 | out: hHeap=0x1f0000) returned 1 [0237.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f998 | out: hHeap=0x1f0000) returned 1 [0237.239] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0237.239] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2388b0 | out: hHeap=0x1f0000) returned 1 [0237.239] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2858d8 | out: hHeap=0x1f0000) returned 1 [0237.239] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260658 | out: hHeap=0x1f0000) returned 1 [0237.239] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b06c0 | out: hHeap=0x1f0000) returned 1 [0237.239] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228cb0 | out: hHeap=0x1f0000) returned 1 [0237.239] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0237.239] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2abec0 | out: hHeap=0x1f0000) returned 1 [0237.239] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2284d0 | out: hHeap=0x1f0000) returned 1 [0237.239] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2733e8 | out: hHeap=0x1f0000) returned 1 [0237.240] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aeab8 | out: hHeap=0x1f0000) returned 1 [0237.240] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206808 | out: hHeap=0x1f0000) returned 1 [0237.240] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f6f8 | out: hHeap=0x1f0000) returned 1 [0237.240] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24f878 | out: hHeap=0x1f0000) returned 1 [0237.240] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x233638 | out: hHeap=0x1f0000) returned 1 [0237.240] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x266290 | out: hHeap=0x1f0000) returned 1 [0237.240] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae888 | out: hHeap=0x1f0000) returned 1 [0237.240] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c20 | out: hHeap=0x1f0000) returned 1 [0237.240] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0237.241] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262cb0 | out: hHeap=0x1f0000) returned 1 [0237.241] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228638 | out: hHeap=0x1f0000) returned 1 [0237.241] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0237.241] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa8546b2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xaa8546b2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xaa8ed01b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x21a46d, dwReserved0=0x0, dwReserved1=0x3, cFileName="localedata.jar", cAlternateFileName="LOCALE~1.JAR")) returned 1 [0237.241] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b08 [0237.241] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0110 [0237.241] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2218d0 [0237.241] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0110 | out: hHeap=0x1f0000) returned 1 [0237.241] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0237.241] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b08 | out: hHeap=0x1f0000) returned 1 [0237.242] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\localedata.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0237.242] GetFileType (hFile=0x1d8) returned 0x1 [0237.243] CloseHandle (hObject=0x1d8) returned 1 [0237.244] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0237.244] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\localedata.jar"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa8546b2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xaa8546b2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xd6e2b3ed, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x21a570)) returned 1 [0237.245] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0237.245] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2134e8 [0237.245] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\localedata.jar"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa8546b2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xaa8546b2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xd6e2b3ed, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x21a570)) returned 1 [0237.245] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2134e8 | out: hHeap=0x1f0000) returned 1 [0237.245] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213680 [0237.245] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213680 | out: hHeap=0x1f0000) returned 1 [0237.245] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5b5, dwReserved0=0x0, dwReserved1=0x3, cFileName="meta-index", cAlternateFileName="META-I~1")) returned 1 [0237.245] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c48 [0237.245] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0c70 [0237.245] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220d88 [0237.245] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0c70 | out: hHeap=0x1f0000) returned 1 [0237.246] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0237.246] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0237.246] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\meta-index"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0237.246] GetFileType (hFile=0x1d8) returned 0x1 [0237.247] CloseHandle (hObject=0x1d8) returned 1 [0237.247] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fc20 [0237.247] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\meta-index"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5b5)) returned 1 [0237.247] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fc20 | out: hHeap=0x1f0000) returned 1 [0237.247] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f770 [0237.247] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\meta-index"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5b5)) returned 1 [0237.248] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f770 | out: hHeap=0x1f0000) returned 1 [0237.248] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21ffe0 [0237.248] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ffe0 | out: hHeap=0x1f0000) returned 1 [0237.248] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1edd4e, dwReserved0=0x0, dwReserved1=0x3, cFileName="nashorn.jar", cAlternateFileName="")) returned 1 [0237.248] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609f0 [0237.248] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0178 [0237.248] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221540 [0237.248] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0178 | out: hHeap=0x1f0000) returned 1 [0237.248] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0237.248] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609f0 | out: hHeap=0x1f0000) returned 1 [0237.249] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\nashorn.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0237.249] GetFileType (hFile=0x1d8) returned 0x1 [0237.250] CloseHandle (hObject=0x1d8) returned 1 [0237.250] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21ffe0 [0237.250] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\nashorn.jar"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1edd4e)) returned 1 [0237.250] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ffe0 | out: hHeap=0x1f0000) returned 1 [0237.251] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe00 [0237.251] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\nashorn.jar"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1edd4e)) returned 1 [0237.251] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe00 | out: hHeap=0x1f0000) returned 1 [0237.251] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21ffe0 [0237.251] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ffe0 | out: hHeap=0x1f0000) returned 1 [0237.251] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xa4c9, dwReserved0=0x0, dwReserved1=0x3, cFileName="sunec.jar", cAlternateFileName="")) returned 1 [0237.251] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b08 [0237.251] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0520 [0237.251] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220fe8 [0237.252] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0520 | out: hHeap=0x1f0000) returned 1 [0237.252] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0237.252] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b08 | out: hHeap=0x1f0000) returned 1 [0237.252] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunec.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0237.252] GetFileType (hFile=0x1d8) returned 0x1 [0237.253] CloseHandle (hObject=0x1d8) returned 1 [0237.253] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0237.253] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunec.jar"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xa4c9)) returned 1 [0237.253] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0237.253] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0237.254] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunec.jar"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xa4c9)) returned 1 [0237.254] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0237.254] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0237.254] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2200d0 | out: hHeap=0x1f0000) returned 1 [0237.254] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5ef8416, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xd5ef8416, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xd6514491, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x44774, dwReserved0=0x0, dwReserved1=0x3, cFileName="sunjce_provider.jar.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="SUNJCE~1.ODV")) returned 1 [0237.254] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2adcb0 [0237.254] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0520 [0237.254] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2853b0 [0237.254] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0520 | out: hHeap=0x1f0000) returned 1 [0237.255] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0237.255] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2adcb0 | out: hHeap=0x1f0000) returned 1 [0237.255] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0237.255] GetFileType (hFile=0x1d8) returned 0x1 [0237.256] CloseHandle (hObject=0x1d8) returned 1 [0237.256] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2855c0 [0237.256] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5ef8416, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xd5ef8416, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xd6514491, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x44774)) returned 1 [0237.257] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2855c0 | out: hHeap=0x1f0000) returned 1 [0237.257] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285bf0 [0237.257] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5ef8416, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xd5ef8416, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xd6514491, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x44774)) returned 1 [0237.257] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285bf0 | out: hHeap=0x1f0000) returned 1 [0237.257] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285cf8 [0237.257] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285cf8 | out: hHeap=0x1f0000) returned 1 [0237.258] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7fbb, dwReserved0=0x0, dwReserved1=0x3, cFileName="sunmscapi.jar", cAlternateFileName="SUNMSC~1.JAR")) returned 1 [0237.258] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c48 [0237.258] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b08c8 [0237.258] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2218d0 [0237.258] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b08c8 | out: hHeap=0x1f0000) returned 1 [0237.259] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2853b0 | out: hHeap=0x1f0000) returned 1 [0237.259] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0237.260] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0237.260] GetFileType (hFile=0x1d8) returned 0x1 [0237.260] CloseHandle (hObject=0x1d8) returned 1 [0237.261] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212a48 [0237.261] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7fbb)) returned 1 [0237.261] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212a48 | out: hHeap=0x1f0000) returned 1 [0237.261] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0237.262] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7fbb)) returned 1 [0237.262] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0237.262] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212c68 [0237.262] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212c68 | out: hHeap=0x1f0000) returned 1 [0237.262] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3d5bf, dwReserved0=0x0, dwReserved1=0x3, cFileName="sunpkcs11.jar", cAlternateFileName="SUNPKC~1.JAR")) returned 1 [0237.262] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b08 [0237.262] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b02b0 [0237.262] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2212e0 [0237.263] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b02b0 | out: hHeap=0x1f0000) returned 1 [0237.263] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0237.263] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b08 | out: hHeap=0x1f0000) returned 1 [0237.264] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0237.264] GetFileType (hFile=0x1d8) returned 0x1 [0237.265] CloseHandle (hObject=0x1d8) returned 1 [0237.265] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2132c8 [0237.265] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3d5bf)) returned 1 [0237.266] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2132c8 | out: hHeap=0x1f0000) returned 1 [0237.266] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0237.266] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3d5bf)) returned 1 [0237.266] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0237.266] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213680 [0237.266] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213680 | out: hHeap=0x1f0000) returned 1 [0237.266] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x10d3c, dwReserved0=0x0, dwReserved1=0x3, cFileName="zipfs.jar", cAlternateFileName="")) returned 1 [0237.266] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bd0 [0237.267] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0318 [0237.267] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220fe8 [0237.267] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0318 | out: hHeap=0x1f0000) returned 1 [0237.267] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0237.267] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bd0 | out: hHeap=0x1f0000) returned 1 [0237.268] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\zipfs.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0237.268] GetFileType (hFile=0x1d8) returned 0x1 [0237.269] CloseHandle (hObject=0x1d8) returned 1 [0237.269] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f770 [0237.269] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\zipfs.jar"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x10d3c)) returned 1 [0237.270] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f770 | out: hHeap=0x1f0000) returned 1 [0237.270] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21ffe0 [0237.270] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\zipfs.jar"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x10d3c)) returned 1 [0237.270] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ffe0 | out: hHeap=0x1f0000) returned 1 [0237.270] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0237.270] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0237.270] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x10d3c, dwReserved0=0x0, dwReserved1=0x3, cFileName="zipfs.jar", cAlternateFileName="")) returned 0 [0237.271] FindClose (in: hFindFile=0x24eac0 | out: hFindFile=0x24eac0) returned 1 [0237.271] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0237.271] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2627e8 | out: hHeap=0x1f0000) returned 1 [0237.271] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606f8 | out: hHeap=0x1f0000) returned 1 [0237.271] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228830 | out: hHeap=0x1f0000) returned 1 [0237.271] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228a28 [0237.272] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0237.272] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x261b28 [0237.272] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0520 [0237.272] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\*", lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa122f229, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd68f41a4, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24e900 [0237.272] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0930 [0237.273] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0520 | out: hHeap=0x1f0000) returned 1 [0237.273] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0237.273] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa122f229, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd68f41a4, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0237.273] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b00a8 [0237.273] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221a00 [0237.273] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b00a8 | out: hHeap=0x1f0000) returned 1 [0237.273] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0930 | out: hHeap=0x1f0000) returned 1 [0237.274] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0237.633] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0237.633] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x12588, dwReserved0=0x0, dwReserved1=0x3, cFileName="LucidaBrightDemiBold.ttf", cAlternateFileName="LUCIDA~1.TTF")) returned 1 [0237.633] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228638 [0237.634] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0c70 [0237.634] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0237.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0c70 | out: hHeap=0x1f0000) returned 1 [0237.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0237.635] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228638 | out: hHeap=0x1f0000) returned 1 [0237.635] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemibold.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1bc [0237.636] GetFileType (hFile=0x1bc) returned 0x1 [0237.636] CloseHandle (hObject=0x1bc) returned 1 [0237.637] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0237.637] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemibold.ttf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x12588)) returned 1 [0237.637] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0237.637] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0237.637] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemibold.ttf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x12588)) returned 1 [0237.637] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0237.638] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0237.638] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0237.638] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x12574, dwReserved0=0x0, dwReserved1=0x3, cFileName="LucidaBrightDemiItalic.ttf", cAlternateFileName="LUCIDA~2.TTF")) returned 1 [0237.638] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2284d0 [0237.638] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b00a8 [0237.638] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a8c0 [0237.638] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b00a8 | out: hHeap=0x1f0000) returned 1 [0237.638] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0237.639] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2284d0 | out: hHeap=0x1f0000) returned 1 [0237.639] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiItalic.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemiitalic.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1bc [0237.640] GetFileType (hFile=0x1bc) returned 0x1 [0237.640] CloseHandle (hObject=0x1bc) returned 1 [0237.641] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a968 [0237.641] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiItalic.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemiitalic.ttf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x12574)) returned 1 [0237.641] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a968 | out: hHeap=0x1f0000) returned 1 [0237.641] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a578 [0237.641] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiItalic.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemiitalic.ttf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x12574)) returned 1 [0237.642] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a578 | out: hHeap=0x1f0000) returned 1 [0237.642] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a2d8 [0237.642] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a2d8 | out: hHeap=0x1f0000) returned 1 [0237.642] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13bd8, dwReserved0=0x0, dwReserved1=0x3, cFileName="LucidaBrightItalic.ttf", cAlternateFileName="LUCIDA~3.TTF")) returned 1 [0237.642] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c58 [0237.642] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b06c0 [0237.642] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0237.642] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b06c0 | out: hHeap=0x1f0000) returned 1 [0237.645] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a8c0 | out: hHeap=0x1f0000) returned 1 [0237.645] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c58 | out: hHeap=0x1f0000) returned 1 [0237.646] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightItalic.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightitalic.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1bc [0237.646] GetFileType (hFile=0x1bc) returned 0x1 [0237.647] CloseHandle (hObject=0x1bc) returned 1 [0237.647] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0237.647] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightItalic.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightitalic.ttf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13bd8)) returned 1 [0237.648] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0237.648] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0237.648] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightItalic.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightitalic.ttf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13bd8)) returned 1 [0237.648] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0237.648] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0237.648] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0237.648] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xd6c87a85, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x1, dwReserved0=0x0, dwReserved1=0x3, cFileName="LucidaBrightRegular.ttf", cAlternateFileName="LUCIDA~4.TTF")) returned 1 [0237.649] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238cc8 [0237.649] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0a68 [0237.649] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0237.649] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0a68 | out: hHeap=0x1f0000) returned 1 [0237.650] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0237.650] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238cc8 | out: hHeap=0x1f0000) returned 1 [0237.651] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightregular.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0237.651] GetLastError () returned 0x2 [0237.651] GetLastError () returned 0x2 [0237.651] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd68f41a4, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xd68f41a4, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xd691a1ea, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x5435c, dwReserved0=0x0, dwReserved1=0x3, cFileName="LucidaBrightRegular.ttf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="LUCIDA~1.ODV")) returned 1 [0237.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad078 [0237.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0520 [0237.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x2adfc8 [0237.652] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0520 | out: hHeap=0x1f0000) returned 1 [0237.652] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0237.652] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad078 | out: hHeap=0x1f0000) returned 1 [0237.653] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightregular.ttf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1bc [0237.653] GetFileType (hFile=0x1bc) returned 0x1 [0237.654] CloseHandle (hObject=0x1bc) returned 1 [0237.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x2af030 [0237.656] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightregular.ttf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd68f41a4, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xd68f41a4, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xd70b3c9c, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x5445f)) returned 1 [0237.657] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2af030 | out: hHeap=0x1f0000) returned 1 [0237.657] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x2ae0e0 [0237.657] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightregular.ttf.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd68f41a4, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xd68f41a4, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xd70b3c9c, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x5445f)) returned 1 [0237.657] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae0e0 | out: hHeap=0x1f0000) returned 1 [0237.657] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x110) returned 0x2ae0e0 [0237.657] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ae0e0 | out: hHeap=0x1f0000) returned 1 [0237.657] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4d9c8, dwReserved0=0x0, dwReserved1=0x3, cFileName="LucidaSansDemiBold.ttf", cAlternateFileName="LU38C7~1.TTF")) returned 1 [0237.657] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238d00 [0237.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0b38 [0237.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0237.658] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0b38 | out: hHeap=0x1f0000) returned 1 [0237.659] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2adfc8 | out: hHeap=0x1f0000) returned 1 [0237.659] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238d00 | out: hHeap=0x1f0000) returned 1 [0237.660] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansdemibold.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1bc [0237.660] GetFileType (hFile=0x1bc) returned 0x1 [0237.660] CloseHandle (hObject=0x1bc) returned 1 [0237.661] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0237.661] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansdemibold.ttf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4d9c8)) returned 1 [0237.661] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0237.665] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0237.665] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansdemibold.ttf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4d9c8)) returned 1 [0237.665] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0237.665] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0237.665] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0237.665] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xaa77c, dwReserved0=0x0, dwReserved1=0x3, cFileName="LucidaSansRegular.ttf", cAlternateFileName="LU761B~1.TTF")) returned 1 [0237.666] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238e88 [0237.666] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b00a8 [0237.666] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0237.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b00a8 | out: hHeap=0x1f0000) returned 1 [0237.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0237.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238e88 | out: hHeap=0x1f0000) returned 1 [0237.705] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansregular.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1bc [0237.705] GetFileType (hFile=0x1bc) returned 0x1 [0237.706] CloseHandle (hObject=0x1bc) returned 1 [0237.707] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0237.707] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansregular.ttf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xaa77c)) returned 1 [0237.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0237.707] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0237.707] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansregular.ttf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xaa77c)) returned 1 [0237.708] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0237.708] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0237.708] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0237.708] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39254, dwReserved0=0x0, dwReserved1=0x3, cFileName="LucidaTypewriterBold.ttf", cAlternateFileName="LUE73B~1.TTF")) returned 1 [0237.708] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2284d0 [0237.709] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b00a8 [0237.709] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0237.709] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b00a8 | out: hHeap=0x1f0000) returned 1 [0237.709] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0237.709] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2284d0 | out: hHeap=0x1f0000) returned 1 [0237.710] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterbold.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1bc [0237.711] GetFileType (hFile=0x1bc) returned 0x1 [0237.711] CloseHandle (hObject=0x1bc) returned 1 [0237.712] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0237.712] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterbold.ttf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39254)) returned 1 [0237.712] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0237.712] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0237.713] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterbold.ttf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39254)) returned 1 [0237.713] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0237.713] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0237.713] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0237.713] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3b40c, dwReserved0=0x0, dwReserved1=0x3, cFileName="LucidaTypewriterRegular.ttf", cAlternateFileName="LUDBAB~1.TTF")) returned 1 [0237.713] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2284d0 [0237.714] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b06c0 [0237.714] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a578 [0237.714] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b06c0 | out: hHeap=0x1f0000) returned 1 [0237.714] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0237.714] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2284d0 | out: hHeap=0x1f0000) returned 1 [0237.715] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterregular.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1bc [0237.715] GetFileType (hFile=0x1bc) returned 0x1 [0237.716] CloseHandle (hObject=0x1bc) returned 1 [0237.716] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219e40 [0237.716] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterregular.ttf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3b40c)) returned 1 [0237.717] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219e40 | out: hHeap=0x1f0000) returned 1 [0237.717] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a8c0 [0237.717] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterregular.ttf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3b40c)) returned 1 [0237.717] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a8c0 | out: hHeap=0x1f0000) returned 1 [0237.717] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a968 [0237.717] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a968 | out: hHeap=0x1f0000) returned 1 [0237.718] FindNextFileW (in: hFindFile=0x24e900, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3b40c, dwReserved0=0x0, dwReserved1=0x3, cFileName="LucidaTypewriterRegular.ttf", cAlternateFileName="LUDBAB~1.TTF")) returned 0 [0237.718] FindClose (in: hFindFile=0x24e900 | out: hFindFile=0x24e900) returned 1 [0237.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a578 | out: hHeap=0x1f0000) returned 1 [0237.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x261b28 | out: hHeap=0x1f0000) returned 1 [0237.954] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0237.954] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228a28 | out: hHeap=0x1f0000) returned 1 [0237.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228950 [0237.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0237.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2634a8 [0237.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21ffe0 [0237.954] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\*", lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa12313ee, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24eb40 [0237.955] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0c70 [0237.955] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220fe8 [0237.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0c70 | out: hHeap=0x1f0000) returned 1 [0237.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ffe0 | out: hHeap=0x1f0000) returned 1 [0237.955] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0237.955] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa12313ee, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0237.955] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0728 [0237.955] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221968 [0237.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0728 | out: hHeap=0x1f0000) returned 1 [0237.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0237.955] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0237.955] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0237.956] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa129361a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="cursors", cAlternateFileName="")) returned 1 [0237.956] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b06c0 [0237.956] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220fe8 [0237.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b06c0 | out: hHeap=0x1f0000) returned 1 [0237.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0237.956] lstrcmpW (lpString1="cursors", lpString2=".") returned 1 [0237.956] lstrcmpW (lpString1="cursors", lpString2="..") returned 1 [0237.956] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204f30 [0237.956] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0237.956] FindNextFileW (in: hFindFile=0x24eb40, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa129361a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="cursors", cAlternateFileName="")) returned 0 [0237.956] FindClose (in: hFindFile=0x24eb40 | out: hFindFile=0x24eb40) returned 1 [0237.957] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228a28 [0237.957] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2607e8 [0237.957] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262cb0 [0237.957] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0237.957] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\*", lpFindFileData=0x259db34 | out: lpFindFileData=0x259db34*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa129361a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e600 [0237.958] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fc20 [0237.958] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218558 [0237.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fc20 | out: hHeap=0x1f0000) returned 1 [0237.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0237.958] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0237.958] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x259db34 | out: lpFindFileData=0x259db34*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa129361a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0237.958] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0237.958] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218fa8 [0237.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0237.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218558 | out: hHeap=0x1f0000) returned 1 [0237.958] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0237.958] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0237.958] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x259db34 | out: lpFindFileData=0x259db34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x500, dwReserved0=0x0, dwReserved1=0x0, cFileName="cursors.properties", cAlternateFileName="CURSOR~1.PRO")) returned 1 [0237.959] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238ec0 [0237.959] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0237.959] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219478 [0237.959] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0237.959] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218fa8 | out: hHeap=0x1f0000) returned 1 [0237.959] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ec0 | out: hHeap=0x1f0000) returned 1 [0237.959] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259d844, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0237.960] GetFileType (hFile=0x1d8) returned 0x1 [0237.960] CloseHandle (hObject=0x1d8) returned 1 [0237.960] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a230 [0237.960] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties"), fInfoLevelId=0x0, lpFileInformation=0x259d8d4 | out: lpFileInformation=0x259d8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x500)) returned 1 [0237.961] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a230 | out: hHeap=0x1f0000) returned 1 [0237.961] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219c48 [0237.961] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties"), fInfoLevelId=0x0, lpFileInformation=0x259d8e4 | out: lpFileInformation=0x259d8e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x500)) returned 1 [0237.961] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219c48 | out: hHeap=0x1f0000) returned 1 [0237.961] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219e40 [0237.961] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0237.961] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219e40 | out: hHeap=0x1f0000) returned 1 [0237.961] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0237.961] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x259db34 | out: lpFindFileData=0x259db34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0x0, cFileName="invalid32x32.gif", cAlternateFileName="INVALI~1.GIF")) returned 1 [0237.961] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238d38 [0237.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0237.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x2188c8 [0237.962] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0237.962] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219478 | out: hHeap=0x1f0000) returned 1 [0237.962] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238d38 | out: hHeap=0x1f0000) returned 1 [0237.962] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259d844, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0237.963] GetFileType (hFile=0x1d8) returned 0x1 [0237.963] CloseHandle (hObject=0x1d8) returned 1 [0237.963] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0237.963] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0x259d8d4 | out: lpFileInformation=0x259d8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99)) returned 1 [0237.964] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0237.964] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0237.964] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0x259d8e4 | out: lpFileInformation=0x259d8e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99)) returned 1 [0237.964] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0237.964] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0237.964] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0237.964] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x259db34 | out: lpFindFileData=0x259db34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xa5, dwReserved0=0x0, dwReserved1=0x0, cFileName="win32_CopyDrop32x32.gif", cAlternateFileName="WIN32_~1.GIF")) returned 1 [0237.964] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238cc8 [0237.964] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0237.964] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219268 [0237.964] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0237.965] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2188c8 | out: hHeap=0x1f0000) returned 1 [0237.965] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238cc8 | out: hHeap=0x1f0000) returned 1 [0237.965] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copydrop32x32.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259d844, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0237.965] GetFileType (hFile=0x1d8) returned 0x1 [0237.966] CloseHandle (hObject=0x1d8) returned 1 [0237.966] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a578 [0237.966] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copydrop32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0x259d8d4 | out: lpFileInformation=0x259d8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xa5)) returned 1 [0237.966] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a578 | out: hHeap=0x1f0000) returned 1 [0237.967] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a6c8 [0237.967] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copydrop32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0x259d8e4 | out: lpFileInformation=0x259d8e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xa5)) returned 1 [0237.967] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a6c8 | out: hHeap=0x1f0000) returned 1 [0237.967] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21aa10 [0237.967] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21aa10 | out: hHeap=0x1f0000) returned 1 [0237.967] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x259db34 | out: lpFindFileData=0x259db34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0x0, cFileName="win32_CopyNoDrop32x32.gif", cAlternateFileName="WIN32_~2.GIF")) returned 1 [0237.967] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2284d0 [0237.967] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21ffe0 [0237.967] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad6f0 [0237.967] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ffe0 | out: hHeap=0x1f0000) returned 1 [0237.967] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219268 | out: hHeap=0x1f0000) returned 1 [0237.968] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2284d0 | out: hHeap=0x1f0000) returned 1 [0237.968] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copynodrop32x32.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259d844, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0237.969] GetFileType (hFile=0x1d8) returned 0x1 [0237.969] CloseHandle (hObject=0x1d8) returned 1 [0237.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad7a8 [0237.970] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copynodrop32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0x259d8d4 | out: lpFileInformation=0x259d8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99)) returned 1 [0237.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad7a8 | out: hHeap=0x1f0000) returned 1 [0237.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad918 [0237.970] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copynodrop32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0x259d8e4 | out: lpFileInformation=0x259d8e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99)) returned 1 [0237.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad918 | out: hHeap=0x1f0000) returned 1 [0237.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad4c8 [0237.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad4c8 | out: hHeap=0x1f0000) returned 1 [0237.970] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x259db34 | out: lpFindFileData=0x259db34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="win32_LinkDrop32x32.gif", cAlternateFileName="WIN32_~3.GIF")) returned 1 [0237.971] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238ec0 [0237.971] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0237.971] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219318 [0237.971] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0237.971] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad6f0 | out: hHeap=0x1f0000) returned 1 [0237.971] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ec0 | out: hHeap=0x1f0000) returned 1 [0237.971] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linkdrop32x32.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259d844, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0237.972] GetFileType (hFile=0x1d8) returned 0x1 [0237.972] CloseHandle (hObject=0x1d8) returned 1 [0237.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a968 [0237.973] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linkdrop32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0x259d8d4 | out: lpFileInformation=0x259d8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xa8)) returned 1 [0237.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a968 | out: hHeap=0x1f0000) returned 1 [0237.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a8c0 [0237.973] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linkdrop32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0x259d8e4 | out: lpFileInformation=0x259d8e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xa8)) returned 1 [0237.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a8c0 | out: hHeap=0x1f0000) returned 1 [0237.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a578 [0237.974] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a578 | out: hHeap=0x1f0000) returned 1 [0237.974] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x259db34 | out: lpFindFileData=0x259db34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0x0, cFileName="win32_LinkNoDrop32x32.gif", cAlternateFileName="WIN32_~4.GIF")) returned 1 [0237.974] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228a70 [0237.974] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220508 [0237.974] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad2a0 [0237.974] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220508 | out: hHeap=0x1f0000) returned 1 [0237.974] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219318 | out: hHeap=0x1f0000) returned 1 [0237.974] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228a70 | out: hHeap=0x1f0000) returned 1 [0237.975] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linknodrop32x32.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259d844, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0237.975] GetFileType (hFile=0x1d8) returned 0x1 [0237.976] CloseHandle (hObject=0x1d8) returned 1 [0237.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad7a8 [0237.976] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linknodrop32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0x259d8d4 | out: lpFileInformation=0x259d8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99)) returned 1 [0237.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad7a8 | out: hHeap=0x1f0000) returned 1 [0237.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad130 [0237.977] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linknodrop32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0x259d8e4 | out: lpFileInformation=0x259d8e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99)) returned 1 [0237.977] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad130 | out: hHeap=0x1f0000) returned 1 [0237.977] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad6f0 [0237.977] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad6f0 | out: hHeap=0x1f0000) returned 1 [0237.977] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x259db34 | out: lpFindFileData=0x259db34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x93, dwReserved0=0x0, dwReserved1=0x0, cFileName="win32_MoveDrop32x32.gif", cAlternateFileName="WI06CF~1.GIF")) returned 1 [0237.977] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238f68 [0237.977] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0237.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218a28 [0237.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0237.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad2a0 | out: hHeap=0x1f0000) returned 1 [0237.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238f68 | out: hHeap=0x1f0000) returned 1 [0237.979] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movedrop32x32.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259d844, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0237.979] GetFileType (hFile=0x1d8) returned 0x1 [0237.980] CloseHandle (hObject=0x1d8) returned 1 [0237.980] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a2d8 [0237.980] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movedrop32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0x259d8d4 | out: lpFileInformation=0x259d8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x93)) returned 1 [0237.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a2d8 | out: hHeap=0x1f0000) returned 1 [0237.981] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219e40 [0237.981] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movedrop32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0x259d8e4 | out: lpFileInformation=0x259d8e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x93)) returned 1 [0237.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219e40 | out: hHeap=0x1f0000) returned 1 [0237.981] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21aa10 [0237.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21aa10 | out: hHeap=0x1f0000) returned 1 [0237.981] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x259db34 | out: lpFindFileData=0x259db34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0x0, cFileName="win32_MoveNoDrop32x32.gif", cAlternateFileName="WIE2D6~1.GIF")) returned 1 [0237.982] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2285a8 [0237.982] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0237.982] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2adcb0 [0237.982] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0237.982] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218a28 | out: hHeap=0x1f0000) returned 1 [0237.982] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2285a8 | out: hHeap=0x1f0000) returned 1 [0237.983] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movenodrop32x32.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259d844, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0237.983] GetFileType (hFile=0x1d8) returned 0x1 [0237.985] CloseHandle (hObject=0x1d8) returned 1 [0237.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad4c8 [0237.985] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movenodrop32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0x259d8d4 | out: lpFileInformation=0x259d8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99)) returned 1 [0237.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad4c8 | out: hHeap=0x1f0000) returned 1 [0237.986] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2adbf8 [0237.986] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movenodrop32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0x259d8e4 | out: lpFileInformation=0x259d8e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99)) returned 1 [0237.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2adbf8 | out: hHeap=0x1f0000) returned 1 [0237.986] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad2a0 [0237.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad2a0 | out: hHeap=0x1f0000) returned 1 [0237.986] FindNextFileW (in: hFindFile=0x24e600, lpFindFileData=0x259db34 | out: lpFindFileData=0x259db34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0x0, cFileName="win32_MoveNoDrop32x32.gif", cAlternateFileName="WIE2D6~1.GIF")) returned 0 [0237.986] FindClose (in: hFindFile=0x24e600 | out: hFindFile=0x24e600) returned 1 [0237.987] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2adcb0 | out: hHeap=0x1f0000) returned 1 [0237.987] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262cb0 | out: hHeap=0x1f0000) returned 1 [0237.987] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607e8 | out: hHeap=0x1f0000) returned 1 [0237.987] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228a28 | out: hHeap=0x1f0000) returned 1 [0237.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0237.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0237.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f30 | out: hHeap=0x1f0000) returned 1 [0237.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2634a8 | out: hHeap=0x1f0000) returned 1 [0237.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0237.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228950 | out: hHeap=0x1f0000) returned 1 [0237.988] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2285a8 [0237.988] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260888 [0237.989] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262cb0 [0237.989] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0520 [0237.989] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\*", lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1295634, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24e780 [0237.989] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0a68 [0237.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0520 | out: hHeap=0x1f0000) returned 1 [0237.989] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0237.989] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1295634, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0237.990] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b00a8 [0237.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0a68 | out: hHeap=0x1f0000) returned 1 [0237.990] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0237.990] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0237.990] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e8d, dwReserved0=0x0, dwReserved1=0x3, cFileName="default.jfc", cAlternateFileName="")) returned 1 [0237.990] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604c8 [0237.990] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0520 [0237.991] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220c58 [0237.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0520 | out: hHeap=0x1f0000) returned 1 [0237.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b00a8 | out: hHeap=0x1f0000) returned 1 [0237.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604c8 | out: hHeap=0x1f0000) returned 1 [0237.992] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\default.jfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\default.jfc"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0237.992] GetFileType (hFile=0x1d8) returned 0x1 [0237.992] CloseHandle (hObject=0x1d8) returned 1 [0237.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21ffe0 [0237.993] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\default.jfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\default.jfc"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e8d)) returned 1 [0237.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ffe0 | out: hHeap=0x1f0000) returned 1 [0237.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f860 [0237.993] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\default.jfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\default.jfc"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e8d)) returned 1 [0237.994] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f860 | out: hHeap=0x1f0000) returned 1 [0237.994] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220580 [0237.994] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220580 | out: hHeap=0x1f0000) returned 1 [0237.994] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e61, dwReserved0=0x0, dwReserved1=0x3, cFileName="profile.jfc", cAlternateFileName="")) returned 1 [0237.994] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0237.994] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0728 [0237.994] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2211b0 [0237.994] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0728 | out: hHeap=0x1f0000) returned 1 [0237.994] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0237.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0237.995] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\profile.jfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\profile.jfc"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0237.995] GetFileType (hFile=0x1d8) returned 0x1 [0237.996] CloseHandle (hObject=0x1d8) returned 1 [0237.996] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0237.996] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\profile.jfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\profile.jfc"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e61)) returned 1 [0237.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0237.997] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f770 [0237.997] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\profile.jfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\profile.jfc"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e61)) returned 1 [0237.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f770 | out: hHeap=0x1f0000) returned 1 [0237.997] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fa40 [0237.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fa40 | out: hHeap=0x1f0000) returned 1 [0237.997] FindNextFileW (in: hFindFile=0x24e780, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e61, dwReserved0=0x0, dwReserved1=0x3, cFileName="profile.jfc", cAlternateFileName="")) returned 0 [0237.998] FindClose (in: hFindFile=0x24e780 | out: hFindFile=0x24e780) returned 1 [0237.998] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0237.998] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262cb0 | out: hHeap=0x1f0000) returned 1 [0237.998] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0237.998] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2285a8 | out: hHeap=0x1f0000) returned 1 [0237.998] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2287a0 [0237.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0237.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262cb0 [0237.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0237.999] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\*", lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1389711, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24e7c0 [0237.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd88 [0238.438] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0238.438] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0238.438] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1389711, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0238.438] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0238.438] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd88 | out: hHeap=0x1f0000) returned 1 [0238.438] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0238.438] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0238.438] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf9e, dwReserved0=0x0, dwReserved1=0x3, cFileName="jmxremote.access", cAlternateFileName="JMXREM~1.ACC")) returned 1 [0238.439] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238ec0 [0238.439] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0238.439] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x2191b8 [0238.439] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0238.439] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0238.439] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ec0 | out: hHeap=0x1f0000) returned 1 [0238.440] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.access" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.access"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0238.440] GetFileType (hFile=0x200) returned 0x1 [0238.440] CloseHandle (hObject=0x200) returned 1 [0238.441] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0238.441] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.access" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.access"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf9e)) returned 1 [0238.441] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0238.441] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0238.441] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.access" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.access"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf9e)) returned 1 [0238.441] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0238.441] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0238.442] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0238.442] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xb28, dwReserved0=0x0, dwReserved1=0x3, cFileName="jmxremote.password.template", cAlternateFileName="JMXREM~1.TEM")) returned 1 [0238.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228a70 [0238.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220328 [0238.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218558 [0238.442] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220328 | out: hHeap=0x1f0000) returned 1 [0238.442] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2191b8 | out: hHeap=0x1f0000) returned 1 [0238.442] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228a70 | out: hHeap=0x1f0000) returned 1 [0238.443] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0238.443] GetFileType (hFile=0x200) returned 0x1 [0238.444] CloseHandle (hObject=0x200) returned 1 [0238.444] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219cf0 [0238.444] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xb28)) returned 1 [0238.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219cf0 | out: hHeap=0x1f0000) returned 1 [0238.445] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a0e0 [0238.445] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xb28)) returned 1 [0238.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a0e0 | out: hHeap=0x1f0000) returned 1 [0238.445] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a038 [0238.445] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260798 [0238.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a038 | out: hHeap=0x1f0000) returned 1 [0238.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260798 | out: hHeap=0x1f0000) returned 1 [0238.445] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3926, dwReserved0=0x0, dwReserved1=0x3, cFileName="management.properties", cAlternateFileName="MANAGE~1.PRO")) returned 1 [0238.445] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238e88 [0238.445] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0238.445] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218fa8 [0238.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0238.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218558 | out: hHeap=0x1f0000) returned 1 [0238.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238e88 | out: hHeap=0x1f0000) returned 1 [0238.446] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\management.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\management.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0238.447] GetFileType (hFile=0x200) returned 0x1 [0238.447] CloseHandle (hObject=0x200) returned 1 [0238.447] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a380 [0238.447] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\management.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\management.properties"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3926)) returned 1 [0238.448] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a380 | out: hHeap=0x1f0000) returned 1 [0238.448] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a968 [0238.448] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\management.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\management.properties"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3926)) returned 1 [0238.448] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a968 | out: hHeap=0x1f0000) returned 1 [0238.448] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a038 [0238.448] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260798 [0238.448] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a038 | out: hHeap=0x1f0000) returned 1 [0238.448] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260798 | out: hHeap=0x1f0000) returned 1 [0238.448] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xd30, dwReserved0=0x0, dwReserved1=0x3, cFileName="snmp.acl.template", cAlternateFileName="SNMPAC~1.TEM")) returned 1 [0238.449] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238ef8 [0238.449] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0238.449] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218768 [0238.449] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0238.449] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218fa8 | out: hHeap=0x1f0000) returned 1 [0238.449] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ef8 | out: hHeap=0x1f0000) returned 1 [0238.450] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\snmp.acl.template" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\snmp.acl.template"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0238.450] GetFileType (hFile=0x200) returned 0x1 [0238.450] CloseHandle (hObject=0x200) returned 1 [0238.451] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0238.451] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\snmp.acl.template" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\snmp.acl.template"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xd30)) returned 1 [0238.451] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0238.451] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0238.451] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\snmp.acl.template" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\snmp.acl.template"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xd30)) returned 1 [0238.452] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0238.452] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0238.452] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260798 [0238.452] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0238.452] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260798 | out: hHeap=0x1f0000) returned 1 [0238.452] FindNextFileW (in: hFindFile=0x24e7c0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xd30, dwReserved0=0x0, dwReserved1=0x3, cFileName="snmp.acl.template", cAlternateFileName="SNMPAC~1.TEM")) returned 0 [0238.452] FindClose (in: hFindFile=0x24e7c0 | out: hFindFile=0x24e7c0) returned 1 [0238.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218768 | out: hHeap=0x1f0000) returned 1 [0238.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262cb0 | out: hHeap=0x1f0000) returned 1 [0238.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0238.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2287a0 | out: hHeap=0x1f0000) returned 1 [0238.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228950 [0238.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260798 [0238.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262cb0 [0238.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0238.455] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\*", lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1418338, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24ecc0 [0238.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0238.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0238.455] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0238.455] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1418338, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0238.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0238.456] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0238.456] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0238.456] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0238.456] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xfd6, dwReserved0=0x0, dwReserved1=0x3, cFileName="blacklist", cAlternateFileName="BLACKL~1")) returned 1 [0238.456] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2607e8 [0238.456] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2201c0 [0238.456] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x2191b8 [0238.456] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2201c0 | out: hHeap=0x1f0000) returned 1 [0238.456] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0238.456] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607e8 | out: hHeap=0x1f0000) returned 1 [0238.457] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklist" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklist"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0238.457] GetFileType (hFile=0x200) returned 0x1 [0238.457] CloseHandle (hObject=0x200) returned 1 [0238.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e88 [0238.457] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklist" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklist"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xfd6)) returned 1 [0238.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e88 | out: hHeap=0x1f0000) returned 1 [0238.458] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0238.458] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklist" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklist"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xfd6)) returned 1 [0238.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0238.458] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213570 [0238.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213570 | out: hHeap=0x1f0000) returned 1 [0238.458] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e5, dwReserved0=0x0, dwReserved1=0x3, cFileName="blacklisted.certs", cAlternateFileName="BLACKL~1.CER")) returned 1 [0238.458] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238ec0 [0238.458] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0238.458] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218608 [0238.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0238.459] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2191b8 | out: hHeap=0x1f0000) returned 1 [0238.459] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238ec0 | out: hHeap=0x1f0000) returned 1 [0238.459] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklisted.certs" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklisted.certs"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0238.459] GetFileType (hFile=0x200) returned 0x1 [0238.459] CloseHandle (hObject=0x200) returned 1 [0238.460] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0238.460] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklisted.certs" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklisted.certs"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e5)) returned 1 [0238.460] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0238.460] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0238.460] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklisted.certs" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklisted.certs"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e5)) returned 1 [0238.460] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0238.460] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0238.460] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0238.461] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1c0eb, dwReserved0=0x0, dwReserved1=0x3, cFileName="cacerts", cAlternateFileName="")) returned 1 [0238.461] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0238.461] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218558 [0238.461] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0238.461] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218608 | out: hHeap=0x1f0000) returned 1 [0238.461] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\cacerts" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\cacerts"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0238.462] GetFileType (hFile=0x200) returned 0x1 [0238.462] CloseHandle (hObject=0x200) returned 1 [0238.462] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0238.462] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\cacerts" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\cacerts"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1c0eb)) returned 1 [0238.463] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0238.463] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212c68 [0238.463] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\cacerts" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\cacerts"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1c0eb)) returned 1 [0238.463] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212c68 | out: hHeap=0x1f0000) returned 1 [0238.463] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0238.463] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0238.463] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x9a2, dwReserved0=0x0, dwReserved1=0x3, cFileName="java.policy", cAlternateFileName="JAVA~1.POL")) returned 1 [0238.463] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2607e8 [0238.463] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2201c0 [0238.463] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218768 [0238.464] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2201c0 | out: hHeap=0x1f0000) returned 1 [0238.464] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218558 | out: hHeap=0x1f0000) returned 1 [0238.464] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2607e8 | out: hHeap=0x1f0000) returned 1 [0238.464] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.policy" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\java.policy"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0238.464] GetFileType (hFile=0x200) returned 0x1 [0238.465] CloseHandle (hObject=0x200) returned 1 [0238.465] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213818 [0238.465] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.policy" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\java.policy"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x9a2)) returned 1 [0238.466] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213818 | out: hHeap=0x1f0000) returned 1 [0238.466] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0238.466] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.policy" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\java.policy"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x9a2)) returned 1 [0238.466] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0238.466] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213790 [0238.466] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213790 | out: hHeap=0x1f0000) returned 1 [0238.466] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8eac, dwReserved0=0x0, dwReserved1=0x3, cFileName="java.security", cAlternateFileName="JAVA~1.SEC")) returned 1 [0238.466] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0238.466] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0238.467] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218818 [0238.467] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0238.467] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218768 | out: hHeap=0x1f0000) returned 1 [0238.467] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0238.467] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.security" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\java.security"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0238.468] GetFileType (hFile=0x200) returned 0x1 [0238.469] CloseHandle (hObject=0x200) returned 1 [0238.469] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0238.470] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.security" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\java.security"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8eac)) returned 1 [0238.470] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0238.470] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2132c8 [0238.470] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.security" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\java.security"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8eac)) returned 1 [0238.470] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2132c8 | out: hHeap=0x1f0000) returned 1 [0238.470] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213818 [0238.471] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0238.471] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213818 | out: hHeap=0x1f0000) returned 1 [0238.471] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0238.471] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x62, dwReserved0=0x0, dwReserved1=0x3, cFileName="javaws.policy", cAlternateFileName="JAVAWS~1.POL")) returned 1 [0238.471] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260888 [0238.471] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0238.471] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218608 [0238.472] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0238.472] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218818 | out: hHeap=0x1f0000) returned 1 [0238.472] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0238.472] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\javaws.policy" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\javaws.policy"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0238.473] GetFileType (hFile=0x200) returned 0x1 [0238.473] CloseHandle (hObject=0x200) returned 1 [0238.473] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f10 [0238.474] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\javaws.policy" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\javaws.policy"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x62)) returned 1 [0238.474] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f10 | out: hHeap=0x1f0000) returned 1 [0238.474] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0238.474] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\javaws.policy" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\javaws.policy"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x62)) returned 1 [0238.474] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0238.474] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2132c8 [0238.474] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2132c8 | out: hHeap=0x1f0000) returned 1 [0238.475] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xdc7, dwReserved0=0x0, dwReserved1=0x3, cFileName="local_policy.jar", cAlternateFileName="LOCAL_~1.JAR")) returned 1 [0238.475] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238e88 [0238.475] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0238.475] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218558 [0238.475] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0238.475] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218608 | out: hHeap=0x1f0000) returned 1 [0238.475] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238e88 | out: hHeap=0x1f0000) returned 1 [0238.476] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\local_policy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\local_policy.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0238.476] GetFileType (hFile=0x200) returned 0x1 [0238.477] CloseHandle (hObject=0x200) returned 1 [0238.477] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0238.477] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\local_policy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\local_policy.jar"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xdc7)) returned 1 [0238.477] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0238.477] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0238.478] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\local_policy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\local_policy.jar"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xdc7)) returned 1 [0238.478] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0238.478] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0238.478] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0238.478] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="trusted.libraries", cAlternateFileName="TRUSTE~1.LIB")) returned 1 [0238.478] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238d70 [0238.478] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220508 [0238.478] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218ef8 [0238.478] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220508 | out: hHeap=0x1f0000) returned 1 [0238.479] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218558 | out: hHeap=0x1f0000) returned 1 [0238.479] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238d70 | out: hHeap=0x1f0000) returned 1 [0238.479] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\trusted.libraries" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\trusted.libraries"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0238.479] GetFileType (hFile=0x200) returned 0x1 [0238.480] CloseHandle (hObject=0x200) returned 1 [0238.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0238.481] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\trusted.libraries" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\trusted.libraries"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0238.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0238.481] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0238.481] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\trusted.libraries" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\trusted.libraries"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0238.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0238.481] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0238.481] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0238.482] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0238.482] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0238.482] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xbd2, dwReserved0=0x0, dwReserved1=0x3, cFileName="US_export_policy.jar", cAlternateFileName="US_EXP~1.JAR")) returned 1 [0238.482] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239010 [0238.482] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0238.482] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x219268 [0238.482] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0238.482] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218ef8 | out: hHeap=0x1f0000) returned 1 [0238.482] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239010 | out: hHeap=0x1f0000) returned 1 [0238.483] CreateFileW (lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\US_export_policy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\us_export_policy.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0238.483] GetFileType (hFile=0x200) returned 0x1 [0239.016] CloseHandle (hObject=0x200) returned 1 [0239.016] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0239.016] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\US_export_policy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\us_export_policy.jar"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xbd2)) returned 1 [0239.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0239.016] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0239.016] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\US_export_policy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\us_export_policy.jar"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xbd2)) returned 1 [0239.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0239.017] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0239.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0239.017] FindNextFileW (in: hFindFile=0x24ecc0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xbd2, dwReserved0=0x0, dwReserved1=0x3, cFileName="US_export_policy.jar", cAlternateFileName="US_EXP~1.JAR")) returned 0 [0239.017] FindClose (in: hFindFile=0x24ecc0 | out: hFindFile=0x24ecc0) returned 1 [0239.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219268 | out: hHeap=0x1f0000) returned 1 [0239.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262cb0 | out: hHeap=0x1f0000) returned 1 [0239.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260798 | out: hHeap=0x1f0000) returned 1 [0239.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228950 | out: hHeap=0x1f0000) returned 1 [0239.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0239.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x236330 | out: hHeap=0x1f0000) returned 1 [0239.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x235700 | out: hHeap=0x1f0000) returned 1 [0239.018] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d00 | out: hHeap=0x1f0000) returned 1 [0239.018] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2affd8 | out: hHeap=0x1f0000) returned 1 [0239.018] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b05f0 | out: hHeap=0x1f0000) returned 1 [0239.018] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b07f8 | out: hHeap=0x1f0000) returned 1 [0239.018] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0040 | out: hHeap=0x1f0000) returned 1 [0239.018] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0998 | out: hHeap=0x1f0000) returned 1 [0239.018] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fb30 | out: hHeap=0x1f0000) returned 1 [0239.018] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220490 | out: hHeap=0x1f0000) returned 1 [0239.018] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20d888 | out: hHeap=0x1f0000) returned 1 [0239.018] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262188 | out: hHeap=0x1f0000) returned 1 [0239.018] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0239.018] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228c68 | out: hHeap=0x1f0000) returned 1 [0239.018] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217f50 | out: hHeap=0x1f0000) returned 1 [0239.018] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8008 | out: hHeap=0x1f0000) returned 1 [0239.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a88f8 | out: hHeap=0x1f0000) returned 1 [0239.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238fd8 | out: hHeap=0x1f0000) returned 1 [0239.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e1c8 | out: hHeap=0x1f0000) returned 1 [0239.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238488 | out: hHeap=0x1f0000) returned 1 [0239.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228908 | out: hHeap=0x1f0000) returned 1 [0239.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8060 | out: hHeap=0x1f0000) returned 1 [0239.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a81c0 | out: hHeap=0x1f0000) returned 1 [0239.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204ef0 | out: hHeap=0x1f0000) returned 1 [0239.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f350 | out: hHeap=0x1f0000) returned 1 [0239.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0239.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228758 | out: hHeap=0x1f0000) returned 1 [0239.019] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228950 [0239.019] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260900 [0239.019] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x263640 [0239.020] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8270 [0239.020] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\*", lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf8a30151, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xf8a30151, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e680 [0239.020] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a86e8 [0239.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8270 | out: hHeap=0x1f0000) returned 1 [0239.020] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0239.020] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf8a30151, ftLastAccessTime.dwHighDateTime=0x1d5c65a, ftLastWriteTime.dwLowDateTime=0xf8a30151, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0239.020] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8270 [0239.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a86e8 | out: hHeap=0x1f0000) returned 1 [0239.020] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0239.021] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0239.021] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d6778e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9dfb986, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf9e9425d, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x5ab2f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.xml", cAlternateFileName="APPXMA~1.XML")) returned 1 [0239.021] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238e88 [0239.021] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8008 [0239.021] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217650 [0239.021] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8008 | out: hHeap=0x1f0000) returned 1 [0239.021] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8270 | out: hHeap=0x1f0000) returned 1 [0239.021] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238e88 | out: hHeap=0x1f0000) returned 1 [0239.022] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\AppXManifest.xml" (normalized: "c:\\program files\\microsoft office\\appxmanifest.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0239.022] GetFileType (hFile=0x200) returned 0x1 [0239.022] CloseHandle (hObject=0x200) returned 1 [0239.023] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0239.023] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\AppXManifest.xml" (normalized: "c:\\program files\\microsoft office\\appxmanifest.xml"), fInfoLevelId=0x0, lpFileInformation=0x259ebe4 | out: lpFileInformation=0x259ebe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d6778e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9dfb986, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf9e9425d, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x5ab2f7)) returned 1 [0239.023] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0239.023] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0239.023] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\AppXManifest.xml" (normalized: "c:\\program files\\microsoft office\\appxmanifest.xml"), fInfoLevelId=0x0, lpFileInformation=0x259ebf4 | out: lpFileInformation=0x259ebf4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d6778e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9dfb986, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf9e9425d, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x5ab2f7)) returned 1 [0239.023] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0239.023] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd88 [0239.023] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd88 | out: hHeap=0x1f0000) returned 1 [0239.023] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3888fc00, ftCreationTime.dwHighDateTime=0x1d5b2f9, ftLastAccessTime.dwLowDateTime=0xda731ce0, ftLastAccessTime.dwHighDateTime=0x1d58468, ftLastWriteTime.dwLowDateTime=0xda731ce0, ftLastWriteTime.dwHighDateTime=0x1d58468, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="dresses representations super.exe", cAlternateFileName="DRESSE~1.EXE")) returned 1 [0239.023] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8270 [0239.024] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8a00 [0239.024] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0239.024] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8a00 | out: hHeap=0x1f0000) returned 1 [0239.024] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217650 | out: hHeap=0x1f0000) returned 1 [0239.024] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8270 | out: hHeap=0x1f0000) returned 1 [0239.024] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\dresses representations super.exe" (normalized: "c:\\program files\\microsoft office\\dresses representations super.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0239.025] GetLastError () returned 0x20 [0239.025] GetLastError () returned 0x20 [0239.025] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83543a09, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x119, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSystemMetadata.xml", cAlternateFileName="FILESY~1.XML")) returned 1 [0239.025] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2392b0 [0239.025] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8008 [0239.025] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0239.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8008 | out: hHeap=0x1f0000) returned 1 [0239.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0239.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2392b0 | out: hHeap=0x1f0000) returned 1 [0239.026] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\FileSystemMetadata.xml" (normalized: "c:\\program files\\microsoft office\\filesystemmetadata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259eb54, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0239.026] GetFileType (hFile=0x200) returned 0x1 [0239.027] CloseHandle (hObject=0x200) returned 1 [0239.027] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0239.027] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\FileSystemMetadata.xml" (normalized: "c:\\program files\\microsoft office\\filesystemmetadata.xml"), fInfoLevelId=0x0, lpFileInformation=0x259ebe4 | out: lpFileInformation=0x259ebe4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83543a09, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x119)) returned 1 [0239.027] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0239.027] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212c68 [0239.027] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\FileSystemMetadata.xml" (normalized: "c:\\program files\\microsoft office\\filesystemmetadata.xml"), fInfoLevelId=0x0, lpFileInformation=0x259ebf4 | out: lpFileInformation=0x259ebf4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83543a09, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x119)) returned 1 [0239.028] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212c68 | out: hHeap=0x1f0000) returned 1 [0239.028] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213818 [0239.028] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213818 | out: hHeap=0x1f0000) returned 1 [0239.028] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9e7b530, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa146f18e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda9a8629, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office16", cAlternateFileName="")) returned 1 [0239.028] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0239.028] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a82c8 [0239.028] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x217f50 [0239.028] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a82c8 | out: hHeap=0x1f0000) returned 1 [0239.028] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0239.028] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0239.028] lstrcmpW (lpString1="Office16", lpString2=".") returned 1 [0239.028] lstrcmpW (lpString1="Office16", lpString2="..") returned 1 [0239.028] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204f70 [0239.028] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0930 [0239.029] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd698ca4a, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xd698ca4a, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PackageManifests", cAlternateFileName="PACKAG~1")) returned 1 [0239.029] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238cc8 [0239.029] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a81c0 [0239.029] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x76) returned 0x2182d0 [0239.029] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a81c0 | out: hHeap=0x1f0000) returned 1 [0239.029] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217f50 | out: hHeap=0x1f0000) returned 1 [0239.029] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238cc8 | out: hHeap=0x1f0000) returned 1 [0239.029] lstrcmpW (lpString1="PackageManifests", lpString2=".") returned 1 [0239.029] lstrcmpW (lpString1="PackageManifests", lpString2="..") returned 1 [0239.029] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238e18 [0239.029] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2200d0 [0239.029] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f70 | out: hHeap=0x1f0000) returned 1 [0239.029] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="root", cAlternateFileName="")) returned 1 [0239.029] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a87f0 [0239.030] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2182d0 | out: hHeap=0x1f0000) returned 1 [0239.030] lstrcmpW (lpString1="root", lpString2=".") returned 1 [0239.030] lstrcmpW (lpString1="root", lpString2="..") returned 1 [0239.030] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x48) returned 0x2260f8 [0239.030] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8a00 [0239.030] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238e18 | out: hHeap=0x1f0000) returned 1 [0239.030] FindNextFileW (in: hFindFile=0x24e680, lpFindFileData=0x259ee44 | out: lpFindFileData=0x259ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="root", cAlternateFileName="")) returned 0 [0239.030] FindClose (in: hFindFile=0x24e680 | out: hFindFile=0x24e680) returned 1 [0239.030] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228c68 [0239.031] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260518 [0239.031] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262188 [0239.031] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0588 [0239.032] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office16\\*", lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9e7b530, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa146f18e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda9a8629, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24e980 [0239.032] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b05f0 [0239.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0588 | out: hHeap=0x1f0000) returned 1 [0239.032] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0239.032] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9e7b530, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa146f18e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda9a8629, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0239.032] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0ba0 [0239.032] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b05f0 | out: hHeap=0x1f0000) returned 1 [0239.032] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0239.033] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0239.033] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd502d600, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0xd9e7b530, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd502d600, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x2a9c0, dwReserved0=0x0, dwReserved1=0x3, cFileName="OSPP.HTM", cAlternateFileName="")) returned 1 [0239.033] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0239.033] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0520 [0239.033] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220d88 [0239.033] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0520 | out: hHeap=0x1f0000) returned 1 [0239.033] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0ba0 | out: hHeap=0x1f0000) returned 1 [0239.033] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0239.034] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e690, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0239.034] GetFileType (hFile=0x200) returned 0x1 [0239.034] CloseHandle (hObject=0x200) returned 1 [0239.035] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fb30 [0239.035] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.htm"), fInfoLevelId=0x0, lpFileInformation=0x259e724 | out: lpFileInformation=0x259e724*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd502d600, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0xd9e7b530, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd502d600, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x2a9c0)) returned 1 [0239.035] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fb30 | out: hHeap=0x1f0000) returned 1 [0239.035] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0239.035] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.htm"), fInfoLevelId=0x0, lpFileInformation=0x259e72c | out: lpFileInformation=0x259e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd502d600, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0xd9e7b530, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd502d600, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x2a9c0)) returned 1 [0239.035] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0239.035] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2201c0 [0239.035] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2201c0 | out: hHeap=0x1f0000) returned 1 [0239.035] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9ea17a8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x17103, dwReserved0=0x0, dwReserved1=0x3, cFileName="OSPP.VBS", cAlternateFileName="")) returned 1 [0239.036] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260798 [0239.036] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b07f8 [0239.036] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221968 [0239.036] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b07f8 | out: hHeap=0x1f0000) returned 1 [0239.036] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0239.036] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260798 | out: hHeap=0x1f0000) returned 1 [0239.037] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.vbs"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e690, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0239.037] GetFileType (hFile=0x200) returned 0x1 [0239.037] CloseHandle (hObject=0x200) returned 1 [0239.037] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd88 [0239.038] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.vbs"), fInfoLevelId=0x0, lpFileInformation=0x259e724 | out: lpFileInformation=0x259e724*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9ea17a8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x17103)) returned 1 [0239.038] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd88 | out: hHeap=0x1f0000) returned 1 [0239.038] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0239.038] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.vbs"), fInfoLevelId=0x0, lpFileInformation=0x259e72c | out: lpFileInformation=0x259e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9ea17a8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x17103)) returned 1 [0239.038] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0239.038] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0239.038] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0239.038] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9f60362, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x6a40, dwReserved0=0x0, dwReserved1=0x3, cFileName="OSPPREARM.EXE", cAlternateFileName="OSPPRE~1.EXE")) returned 1 [0239.039] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260770 [0239.039] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b06c0 [0239.039] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2212e0 [0239.039] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b06c0 | out: hHeap=0x1f0000) returned 1 [0239.039] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0239.039] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0239.040] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\Office16\\OSPPREARM.EXE" (normalized: "c:\\program files\\microsoft office\\office16\\ospprearm.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e690, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0239.040] GetFileType (hFile=0x200) returned 0x1 [0239.040] CloseHandle (hObject=0x200) returned 1 [0239.041] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0239.041] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office16\\OSPPREARM.EXE" (normalized: "c:\\program files\\microsoft office\\office16\\ospprearm.exe"), fInfoLevelId=0x0, lpFileInformation=0x259e724 | out: lpFileInformation=0x259e724*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9f60362, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x6a40)) returned 1 [0239.041] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0239.041] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212a48 [0239.041] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office16\\OSPPREARM.EXE" (normalized: "c:\\program files\\microsoft office\\office16\\ospprearm.exe"), fInfoLevelId=0x0, lpFileInformation=0x259e72c | out: lpFileInformation=0x259e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9f60362, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x6a40)) returned 1 [0239.041] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212a48 | out: hHeap=0x1f0000) returned 1 [0239.041] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0239.042] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0239.042] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd502d600, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0xda9a8629, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd502d600, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x8df0, dwReserved0=0x0, dwReserved1=0x3, cFileName="SLERROR.XML", cAlternateFileName="")) returned 1 [0239.042] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260770 [0239.042] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0b38 [0239.042] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220eb8 [0239.042] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0b38 | out: hHeap=0x1f0000) returned 1 [0239.042] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0239.042] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0239.043] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML" (normalized: "c:\\program files\\microsoft office\\office16\\slerror.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e690, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0239.043] GetFileType (hFile=0x200) returned 0x1 [0239.044] CloseHandle (hObject=0x200) returned 1 [0239.044] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fc20 [0239.044] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML" (normalized: "c:\\program files\\microsoft office\\office16\\slerror.xml"), fInfoLevelId=0x0, lpFileInformation=0x259e724 | out: lpFileInformation=0x259e724*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd502d600, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0xda9a8629, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd502d600, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x8df0)) returned 1 [0239.044] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fc20 | out: hHeap=0x1f0000) returned 1 [0239.044] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fb30 [0239.045] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML" (normalized: "c:\\program files\\microsoft office\\office16\\slerror.xml"), fInfoLevelId=0x0, lpFileInformation=0x259e72c | out: lpFileInformation=0x259e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd502d600, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0xda9a8629, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd502d600, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x8df0)) returned 1 [0239.045] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fb30 | out: hHeap=0x1f0000) returned 1 [0239.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0239.045] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0239.045] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd502d600, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0xda9a8629, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd502d600, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x8df0, dwReserved0=0x0, dwReserved1=0x3, cFileName="SLERROR.XML", cAlternateFileName="")) returned 0 [0239.045] FindClose (in: hFindFile=0x24e980 | out: hFindFile=0x24e980) returned 1 [0239.046] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0239.046] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262188 | out: hHeap=0x1f0000) returned 1 [0239.046] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0239.046] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228c68 | out: hHeap=0x1f0000) returned 1 [0239.046] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2285f0 [0239.046] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260540 [0239.046] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262188 [0239.046] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fc20 [0239.047] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\*", lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd698ca4a, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xd698ca4a, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24e980 [0239.047] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fb30 [0239.047] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fc20 | out: hHeap=0x1f0000) returned 1 [0239.047] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0239.047] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd698ca4a, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xd698ca4a, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0239.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0239.048] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fb30 | out: hHeap=0x1f0000) returned 1 [0239.048] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0239.048] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0239.048] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834f7581, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834f7581, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5e91c, dwReserved0=0x0, dwReserved1=0x3, cFileName="AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml", cAlternateFileName="APA05A~1.XML")) returned 1 [0239.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0239.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0239.049] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x229418 [0239.049] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0239.049] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0239.049] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0239.050] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e690, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0239.050] GetFileType (hFile=0x200) returned 0x1 [0239.050] CloseHandle (hObject=0x200) returned 1 [0239.051] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0239.051] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x259e724 | out: lpFileInformation=0x259e724*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834f7581, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834f7581, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5e91c)) returned 1 [0239.051] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0239.051] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0239.051] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x259e72c | out: lpFileInformation=0x259e72c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834f7581, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834f7581, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5e91c)) returned 1 [0239.051] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0239.051] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0239.052] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0239.052] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8351d7a8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8351d7a8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e3474a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5fd, dwReserved0=0x0, dwReserved1=0x3, cFileName="AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml", cAlternateFileName="APAD0B~1.XML")) returned 1 [0239.052] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fc20 [0239.052] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0239.052] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0239.052] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0239.052] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0239.052] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fc20 | out: hHeap=0x1f0000) returned 1 [0239.053] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e690, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0239.053] GetFileType (hFile=0x200) returned 0x1 [0239.054] CloseHandle (hObject=0x200) returned 1 [0239.054] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x229418 [0239.055] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x259e724 | out: lpFileInformation=0x259e724*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8351d7a8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8351d7a8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e3474a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5fd)) returned 1 [0239.055] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0239.055] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x229418 [0239.055] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x259e72c | out: lpFileInformation=0x259e72c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8351d7a8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8351d7a8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e3474a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5fd)) returned 1 [0239.055] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0239.055] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x229418 [0239.056] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0239.056] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd61cd00b, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xd61cd00b, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xd698ca4a, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xc3976, dwReserved0=0x0, dwReserved1=0x3, cFileName="AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="APPXMA~1.ODV")) returned 1 [0239.056] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x21ba30 [0239.056] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0239.056] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x160) returned 0x22d368 [0239.056] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0239.056] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0239.057] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ba30 | out: hHeap=0x1f0000) returned 1 [0239.057] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0000-1000-0000000ff1ce.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e690, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0239.058] GetFileType (hFile=0x200) returned 0x1 [0239.058] CloseHandle (hObject=0x200) returned 1 [0239.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x160) returned 0x21bf68 [0239.059] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0000-1000-0000000ff1ce.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x259e724 | out: lpFileInformation=0x259e724*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd61cd00b, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xd61cd00b, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xd698ca4a, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xc3976)) returned 1 [0239.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21bf68 | out: hHeap=0x1f0000) returned 1 [0239.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x160) returned 0x21bf68 [0239.060] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0000-1000-0000000ff1ce.xml.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x259e72c | out: lpFileInformation=0x259e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd61cd00b, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xd61cd00b, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xd698ca4a, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xc3976)) returned 1 [0239.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21bf68 | out: hHeap=0x1f0000) returned 1 [0239.060] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x160) returned 0x21bf68 [0239.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21bf68 | out: hHeap=0x1f0000) returned 1 [0239.060] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x3, cFileName="AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP51DE~1.XML")) returned 1 [0239.060] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0239.060] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0239.061] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x229418 [0239.061] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0239.061] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22d368 | out: hHeap=0x1f0000) returned 1 [0239.061] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0239.062] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e690, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0239.391] GetFileType (hFile=0x200) returned 0x1 [0239.391] CloseHandle (hObject=0x200) returned 1 [0239.392] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0239.392] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x259e724 | out: lpFileInformation=0x259e724*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0239.392] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0239.392] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0239.392] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x259e72c | out: lpFileInformation=0x259e72c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0239.392] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0239.393] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0239.393] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0239.393] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83485006, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83485006, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x79381, dwReserved0=0x0, dwReserved1=0x3, cFileName="AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml", cAlternateFileName="APPXMA~4.XML")) returned 1 [0239.393] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0239.393] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0239.393] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0239.393] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0239.394] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229418 | out: hHeap=0x1f0000) returned 1 [0239.394] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0239.394] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e690, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0239.395] GetFileType (hFile=0x200) returned 0x1 [0239.395] CloseHandle (hObject=0x200) returned 1 [0239.396] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x20d888 [0239.396] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x259e724 | out: lpFileInformation=0x259e724*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83485006, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83485006, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x79381)) returned 1 [0239.396] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20d888 | out: hHeap=0x1f0000) returned 1 [0239.396] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x20d888 [0239.396] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x259e72c | out: lpFileInformation=0x259e72c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83485006, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83485006, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x79381)) returned 1 [0239.397] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20d888 | out: hHeap=0x1f0000) returned 1 [0239.397] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x20d888 [0239.397] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20d888 | out: hHeap=0x1f0000) returned 1 [0239.397] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ecd099, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x3, cFileName="AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml", cAlternateFileName="APCEE5~1.XML")) returned 1 [0239.397] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0239.397] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0239.397] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x20d888 [0239.397] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0239.398] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0239.398] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0239.398] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e690, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0239.399] GetFileType (hFile=0x200) returned 0x1 [0239.399] CloseHandle (hObject=0x200) returned 1 [0239.400] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0239.400] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x259e724 | out: lpFileInformation=0x259e724*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ecd099, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0239.400] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0239.400] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0239.400] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x259e72c | out: lpFileInformation=0x259e72c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ecd099, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0239.401] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0239.401] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0239.401] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0239.401] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e3474a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e3474a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3df10, dwReserved0=0x0, dwReserved1=0x3, cFileName="AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP557F~1.XML")) returned 1 [0239.401] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fc20 [0239.401] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0239.401] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0239.402] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0239.402] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20d888 | out: hHeap=0x1f0000) returned 1 [0239.402] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fc20 | out: hHeap=0x1f0000) returned 1 [0239.403] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e690, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0239.403] GetFileType (hFile=0x200) returned 0x1 [0239.404] CloseHandle (hObject=0x200) returned 1 [0239.404] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x20d888 [0239.404] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x259e724 | out: lpFileInformation=0x259e724*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e3474a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e3474a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3df10)) returned 1 [0239.405] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20d888 | out: hHeap=0x1f0000) returned 1 [0239.405] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x20d888 [0239.405] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x259e72c | out: lpFileInformation=0x259e72c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e3474a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e3474a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3df10)) returned 1 [0239.405] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20d888 | out: hHeap=0x1f0000) returned 1 [0239.405] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x20d888 [0239.405] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20d888 | out: hHeap=0x1f0000) returned 1 [0239.405] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x3, cFileName="AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml", cAlternateFileName="APE193~1.XML")) returned 1 [0239.405] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0239.406] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe00 [0239.406] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x20d888 [0239.406] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe00 | out: hHeap=0x1f0000) returned 1 [0239.406] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0239.406] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0239.407] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e690, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0239.407] GetFileType (hFile=0x200) returned 0x1 [0239.408] CloseHandle (hObject=0x200) returned 1 [0239.409] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0239.409] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x259e724 | out: lpFileInformation=0x259e724*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0239.409] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0239.409] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0239.410] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x259e72c | out: lpFileInformation=0x259e72c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0239.410] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0239.410] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0239.410] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0239.410] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e3474a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x112a4e, dwReserved0=0x0, dwReserved1=0x3, cFileName="AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml", cAlternateFileName="APC1E2~1.XML")) returned 1 [0239.410] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0239.410] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0239.410] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0239.411] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0239.411] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20d888 | out: hHeap=0x1f0000) returned 1 [0239.411] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0239.412] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e690, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0239.412] GetFileType (hFile=0x200) returned 0x1 [0239.413] CloseHandle (hObject=0x200) returned 1 [0239.413] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x20d888 [0239.413] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x259e724 | out: lpFileInformation=0x259e724*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e3474a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x112a4e)) returned 1 [0239.413] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20d888 | out: hHeap=0x1f0000) returned 1 [0239.414] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x20d888 [0239.414] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x259e72c | out: lpFileInformation=0x259e72c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e3474a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x112a4e)) returned 1 [0239.414] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20d888 | out: hHeap=0x1f0000) returned 1 [0239.414] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x20d888 [0239.414] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20d888 | out: hHeap=0x1f0000) returned 1 [0239.414] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4bfb, dwReserved0=0x0, dwReserved1=0x3, cFileName="AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml", cAlternateFileName="APC422~1.XML")) returned 1 [0239.415] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fa40 [0239.415] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0239.415] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x20d888 [0239.415] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0239.415] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0239.415] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fa40 | out: hHeap=0x1f0000) returned 1 [0239.416] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e690, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0239.416] GetFileType (hFile=0x200) returned 0x1 [0239.417] CloseHandle (hObject=0x200) returned 1 [0239.418] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0239.418] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x259e724 | out: lpFileInformation=0x259e724*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4bfb)) returned 1 [0239.418] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0239.418] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0239.418] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x259e72c | out: lpFileInformation=0x259e72c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4bfb)) returned 1 [0239.418] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0239.419] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0239.419] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0239.419] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84391d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xba5e3, dwReserved0=0x0, dwReserved1=0x3, cFileName="AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP2169~1.XML")) returned 1 [0239.419] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fb30 [0239.419] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0239.419] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0239.419] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0239.420] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20d888 | out: hHeap=0x1f0000) returned 1 [0239.420] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fb30 | out: hHeap=0x1f0000) returned 1 [0239.420] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e690, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0239.421] GetFileType (hFile=0x200) returned 0x1 [0239.421] CloseHandle (hObject=0x200) returned 1 [0239.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x20d888 [0239.422] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x259e724 | out: lpFileInformation=0x259e724*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84391d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xba5e3)) returned 1 [0239.422] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20d888 | out: hHeap=0x1f0000) returned 1 [0239.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x20d888 [0239.422] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x259e72c | out: lpFileInformation=0x259e72c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84391d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xba5e3)) returned 1 [0239.422] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20d888 | out: hHeap=0x1f0000) returned 1 [0239.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x20d888 [0239.423] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20d888 | out: hHeap=0x1f0000) returned 1 [0239.423] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x3, cFileName="AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP7BBA~1.XML")) returned 1 [0239.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0239.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0239.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x20d888 [0239.423] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0239.424] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0239.424] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0239.425] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e690, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0239.425] GetFileType (hFile=0x200) returned 0x1 [0239.425] CloseHandle (hObject=0x200) returned 1 [0239.426] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0239.426] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x259e724 | out: lpFileInformation=0x259e724*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0239.426] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0239.426] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0239.426] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x259e72c | out: lpFileInformation=0x259e72c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0239.427] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0239.427] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0239.427] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0239.427] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e0e651, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e0e651, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x3, cFileName="AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml", cAlternateFileName="APEF10~1.XML")) returned 1 [0239.427] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0239.427] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0239.427] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0239.427] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0239.428] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20d888 | out: hHeap=0x1f0000) returned 1 [0239.428] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0239.428] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e690, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0239.429] GetFileType (hFile=0x200) returned 0x1 [0239.429] CloseHandle (hObject=0x200) returned 1 [0239.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x20d888 [0239.430] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x259e724 | out: lpFileInformation=0x259e724*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e0e651, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e0e651, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0239.430] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20d888 | out: hHeap=0x1f0000) returned 1 [0239.430] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x20d888 [0239.430] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x259e72c | out: lpFileInformation=0x259e72c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e0e651, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e0e651, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0239.430] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20d888 | out: hHeap=0x1f0000) returned 1 [0239.430] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x20d888 [0239.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20d888 | out: hHeap=0x1f0000) returned 1 [0239.431] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x838fd5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x838fd5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x863, dwReserved0=0x0, dwReserved1=0x3, cFileName="AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml", cAlternateFileName="AP5F49~1.XML")) returned 1 [0239.431] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0239.431] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0239.431] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x20d888 [0239.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0239.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0239.432] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0239.432] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-040c-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e690, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0239.433] GetFileType (hFile=0x200) returned 0x1 [0239.433] CloseHandle (hObject=0x200) returned 1 [0239.434] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0239.434] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-040c-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x259e724 | out: lpFileInformation=0x259e724*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x838fd5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x838fd5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x863)) returned 1 [0239.434] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0239.434] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0239.435] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-040c-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x259e72c | out: lpFileInformation=0x259e72c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x838fd5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x838fd5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x863)) returned 1 [0239.435] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0239.435] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0239.435] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0239.435] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83ea71ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83ea71ba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x863, dwReserved0=0x0, dwReserved1=0x3, cFileName="AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml", cAlternateFileName="APB0FE~1.XML")) returned 1 [0239.435] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd88 [0239.436] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0239.436] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0239.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0239.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20d888 | out: hHeap=0x1f0000) returned 1 [0239.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd88 | out: hHeap=0x1f0000) returned 1 [0240.051] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0c0a-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e690, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0240.051] GetFileType (hFile=0x174) returned 0x1 [0240.051] CloseHandle (hObject=0x174) returned 1 [0240.052] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x21bf68 [0240.052] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0c0a-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x259e724 | out: lpFileInformation=0x259e724*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83ea71ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83ea71ba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x863)) returned 1 [0240.052] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21bf68 | out: hHeap=0x1f0000) returned 1 [0240.052] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x21bf68 [0240.052] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0c0a-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x259e72c | out: lpFileInformation=0x259e72c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83ea71ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83ea71ba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x863)) returned 1 [0240.052] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21bf68 | out: hHeap=0x1f0000) returned 1 [0240.052] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x21bf68 [0240.053] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21bf68 | out: hHeap=0x1f0000) returned 1 [0240.053] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf982bd9c, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf982bd9c, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x34b4b, dwReserved0=0x0, dwReserved1=0x3, cFileName="AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP8AF5~1.XML")) returned 1 [0240.053] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220328 [0240.053] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0240.053] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x21bf68 [0240.053] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0240.053] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0240.053] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220328 | out: hHeap=0x1f0000) returned 1 [0240.053] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0027-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e690, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0240.054] GetFileType (hFile=0x174) returned 0x1 [0240.054] CloseHandle (hObject=0x174) returned 1 [0240.054] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0240.054] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0027-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x259e724 | out: lpFileInformation=0x259e724*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf982bd9c, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf982bd9c, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x34b4b)) returned 1 [0240.055] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0240.055] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0240.055] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0027-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x259e72c | out: lpFileInformation=0x259e72c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf982bd9c, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf982bd9c, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x34b4b)) returned 1 [0240.055] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0240.055] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0240.055] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0240.055] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e3474a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x3, cFileName="AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml", cAlternateFileName="APF26A~1.XML")) returned 1 [0240.055] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0240.055] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220490 [0240.055] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0240.055] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220490 | out: hHeap=0x1f0000) returned 1 [0240.055] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21bf68 | out: hHeap=0x1f0000) returned 1 [0240.056] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0240.056] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-002c-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e690, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0240.056] GetFileType (hFile=0x174) returned 0x1 [0240.057] CloseHandle (hObject=0x174) returned 1 [0240.057] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x21bf68 [0240.057] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-002c-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x259e724 | out: lpFileInformation=0x259e724*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e3474a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0240.057] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21bf68 | out: hHeap=0x1f0000) returned 1 [0240.057] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x21bf68 [0240.057] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-002c-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x259e72c | out: lpFileInformation=0x259e72c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e3474a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0240.057] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21bf68 | out: hHeap=0x1f0000) returned 1 [0240.058] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x21bf68 [0240.058] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21bf68 | out: hHeap=0x1f0000) returned 1 [0240.058] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xbf2f172d, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0xbf2f172d, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xbf33deae, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x3, cFileName="AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml", cAlternateFileName="APC553~1.XML")) returned 1 [0240.058] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0240.058] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220490 [0240.058] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x21bf68 [0240.058] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220490 | out: hHeap=0x1f0000) returned 1 [0240.058] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0240.058] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0240.059] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0054-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e690, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0240.059] GetFileType (hFile=0x174) returned 0x1 [0240.059] CloseHandle (hObject=0x174) returned 1 [0240.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0240.059] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0054-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x259e724 | out: lpFileInformation=0x259e724*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xbf2f172d, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0xbf2f172d, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xbf33deae, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0240.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0240.060] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0240.060] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0054-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x259e72c | out: lpFileInformation=0x259e72c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xbf2f172d, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0xbf2f172d, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xbf33deae, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0240.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0240.060] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0240.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0240.060] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xbf2f172d, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0xbf2f172d, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xbf2f172d, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x53d21, dwReserved0=0x0, dwReserved1=0x3, cFileName="AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP9FA1~1.XML")) returned 1 [0240.060] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220490 [0240.060] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2201c0 [0240.060] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0240.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2201c0 | out: hHeap=0x1f0000) returned 1 [0240.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21bf68 | out: hHeap=0x1f0000) returned 1 [0240.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220490 | out: hHeap=0x1f0000) returned 1 [0240.061] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0057-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e690, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0240.061] GetFileType (hFile=0x174) returned 0x1 [0240.061] CloseHandle (hObject=0x174) returned 1 [0240.061] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x21bf68 [0240.062] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0057-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x259e724 | out: lpFileInformation=0x259e724*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xbf2f172d, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0xbf2f172d, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xbf2f172d, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x53d21)) returned 1 [0240.062] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21bf68 | out: hHeap=0x1f0000) returned 1 [0240.062] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x21bf68 [0240.062] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0057-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x259e72c | out: lpFileInformation=0x259e72c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xbf2f172d, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0xbf2f172d, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xbf2f172d, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x53d21)) returned 1 [0240.063] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21bf68 | out: hHeap=0x1f0000) returned 1 [0240.063] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x21bf68 [0240.063] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21bf68 | out: hHeap=0x1f0000) returned 1 [0240.063] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3a41, dwReserved0=0x0, dwReserved1=0x3, cFileName="AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP330B~1.XML")) returned 1 [0240.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220328 [0240.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0240.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x21bf68 [0240.064] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0240.064] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0240.064] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220328 | out: hHeap=0x1f0000) returned 1 [0240.065] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-006e-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e690, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0240.065] GetFileType (hFile=0x174) returned 0x1 [0240.065] CloseHandle (hObject=0x174) returned 1 [0240.066] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0240.066] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-006e-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x259e724 | out: lpFileInformation=0x259e724*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3a41)) returned 1 [0240.066] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0240.066] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0240.066] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-006e-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x259e72c | out: lpFileInformation=0x259e72c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3a41)) returned 1 [0240.066] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0240.066] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0240.066] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0240.066] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83543a09, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x573e5, dwReserved0=0x0, dwReserved1=0x3, cFileName="AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml", cAlternateFileName="APPXMA~1.XML")) returned 1 [0240.066] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0240.066] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0240.066] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0240.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0240.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21bf68 | out: hHeap=0x1f0000) returned 1 [0240.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0240.067] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e690, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0240.067] GetFileType (hFile=0x174) returned 0x1 [0240.068] CloseHandle (hObject=0x174) returned 1 [0240.068] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x21bf68 [0240.068] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x259e724 | out: lpFileInformation=0x259e724*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83543a09, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x573e5)) returned 1 [0240.068] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21bf68 | out: hHeap=0x1f0000) returned 1 [0240.068] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x21bf68 [0240.068] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x259e72c | out: lpFileInformation=0x259e72c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83543a09, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x573e5)) returned 1 [0240.069] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21bf68 | out: hHeap=0x1f0000) returned 1 [0240.069] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x21bf68 [0240.069] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21bf68 | out: hHeap=0x1f0000) returned 1 [0240.069] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e3474a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e3474a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x3, cFileName="AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP6206~1.XML")) returned 1 [0240.069] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd88 [0240.069] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0240.069] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x21bf68 [0240.069] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0240.069] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0240.070] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd88 | out: hHeap=0x1f0000) returned 1 [0240.070] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e690, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0240.070] GetFileType (hFile=0x174) returned 0x1 [0240.071] CloseHandle (hObject=0x174) returned 1 [0240.071] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0240.071] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x259e724 | out: lpFileInformation=0x259e724*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e3474a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e3474a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0240.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0240.072] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0240.072] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x259e72c | out: lpFileInformation=0x259e72c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e3474a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e3474a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0240.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0240.072] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0240.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0240.072] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8351d7a8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xfdea, dwReserved0=0x0, dwReserved1=0x3, cFileName="AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml", cAlternateFileName="APD1EA~1.XML")) returned 1 [0240.072] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0240.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fba8 [0240.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0240.073] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fba8 | out: hHeap=0x1f0000) returned 1 [0240.073] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21bf68 | out: hHeap=0x1f0000) returned 1 [0240.073] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0240.074] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e690, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0240.074] GetFileType (hFile=0x174) returned 0x1 [0240.074] CloseHandle (hObject=0x174) returned 1 [0240.075] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x21bf68 [0240.075] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x259e724 | out: lpFileInformation=0x259e724*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8351d7a8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xfdea)) returned 1 [0240.075] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21bf68 | out: hHeap=0x1f0000) returned 1 [0240.075] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x21bf68 [0240.075] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x259e72c | out: lpFileInformation=0x259e72c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8351d7a8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xfdea)) returned 1 [0240.075] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21bf68 | out: hHeap=0x1f0000) returned 1 [0240.075] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x21bf68 [0240.075] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21bf68 | out: hHeap=0x1f0000) returned 1 [0240.075] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83ea71ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83ea71ba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x3, cFileName="AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP6EFE~1.XML")) returned 1 [0240.076] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fa40 [0240.076] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd88 [0240.076] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x21bf68 [0240.076] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd88 | out: hHeap=0x1f0000) returned 1 [0240.076] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0240.076] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fa40 | out: hHeap=0x1f0000) returned 1 [0240.076] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e690, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0240.076] GetFileType (hFile=0x174) returned 0x1 [0240.077] CloseHandle (hObject=0x174) returned 1 [0240.077] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0240.077] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x259e724 | out: lpFileInformation=0x259e724*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83ea71ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83ea71ba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0240.077] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0240.077] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0240.077] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x259e72c | out: lpFileInformation=0x259e72c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83ea71ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83ea71ba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0240.077] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0240.077] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0240.077] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0240.078] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf982bd9c, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf98c485a, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x3, cFileName="AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml", cAlternateFileName="APB63F~1.XML")) returned 1 [0240.078] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fab8 [0240.078] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2201c0 [0240.078] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0240.078] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2201c0 | out: hHeap=0x1f0000) returned 1 [0240.078] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21bf68 | out: hHeap=0x1f0000) returned 1 [0240.078] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fab8 | out: hHeap=0x1f0000) returned 1 [0240.078] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00b4-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e690, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0240.079] GetFileType (hFile=0x174) returned 0x1 [0240.079] CloseHandle (hObject=0x174) returned 1 [0240.080] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x21bf68 [0240.080] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00b4-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x259e724 | out: lpFileInformation=0x259e724*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf982bd9c, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf98c485a, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0240.080] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21bf68 | out: hHeap=0x1f0000) returned 1 [0240.080] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x21bf68 [0240.080] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00b4-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x259e72c | out: lpFileInformation=0x259e72c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf982bd9c, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf98c485a, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0240.080] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21bf68 | out: hHeap=0x1f0000) returned 1 [0240.080] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x21bf68 [0240.080] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21bf68 | out: hHeap=0x1f0000) returned 1 [0240.080] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0x0, dwReserved1=0x3, cFileName="AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml", cAlternateFileName="APB913~1.XML")) returned 1 [0240.080] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe00 [0240.080] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0240.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x21bf68 [0240.081] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0240.081] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0240.081] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe00 | out: hHeap=0x1f0000) returned 1 [0240.081] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e690, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0240.081] GetFileType (hFile=0x174) returned 0x1 [0240.082] CloseHandle (hObject=0x174) returned 1 [0240.082] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0240.082] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x259e724 | out: lpFileInformation=0x259e724*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2400)) returned 1 [0240.082] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0240.082] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0240.083] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x259e72c | out: lpFileInformation=0x259e72c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2400)) returned 1 [0240.083] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0240.083] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0240.083] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0240.083] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x838fd5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x838fd5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x3, cFileName="AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP4637~1.XML")) returned 1 [0240.083] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2201c0 [0240.083] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2203a0 [0240.083] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0240.083] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2203a0 | out: hHeap=0x1f0000) returned 1 [0240.083] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21bf68 | out: hHeap=0x1f0000) returned 1 [0240.083] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2201c0 | out: hHeap=0x1f0000) returned 1 [0240.084] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e690, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0240.084] GetFileType (hFile=0x174) returned 0x1 [0240.084] CloseHandle (hObject=0x174) returned 1 [0240.085] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x21bf68 [0240.085] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x259e724 | out: lpFileInformation=0x259e724*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x838fd5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x838fd5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0240.085] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21bf68 | out: hHeap=0x1f0000) returned 1 [0240.085] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x21bf68 [0240.085] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x259e72c | out: lpFileInformation=0x259e72c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x838fd5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x838fd5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0240.085] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21bf68 | out: hHeap=0x1f0000) returned 1 [0240.085] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x21bf68 [0240.085] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21bf68 | out: hHeap=0x1f0000) returned 1 [0240.085] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x618a8, dwReserved0=0x0, dwReserved1=0x3, cFileName="AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP2FE2~1.XML")) returned 1 [0240.085] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2201c0 [0240.085] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fb30 [0240.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x21bf68 [0240.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fb30 | out: hHeap=0x1f0000) returned 1 [0240.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0240.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2201c0 | out: hHeap=0x1f0000) returned 1 [0240.086] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e690, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0240.086] GetFileType (hFile=0x174) returned 0x1 [0240.087] CloseHandle (hObject=0x174) returned 1 [0240.087] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0240.087] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x259e724 | out: lpFileInformation=0x259e724*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x618a8)) returned 1 [0240.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0240.087] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0240.087] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x259e72c | out: lpFileInformation=0x259e72c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x618a8)) returned 1 [0240.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0240.087] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0240.088] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0240.088] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x3, cFileName="AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP2C4B~1.XML")) returned 1 [0240.088] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fb30 [0240.088] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe00 [0240.088] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0240.088] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe00 | out: hHeap=0x1f0000) returned 1 [0240.088] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21bf68 | out: hHeap=0x1f0000) returned 1 [0240.088] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fb30 | out: hHeap=0x1f0000) returned 1 [0240.089] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e690, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0240.089] GetFileType (hFile=0x174) returned 0x1 [0240.089] CloseHandle (hObject=0x174) returned 1 [0240.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x21bf68 [0240.090] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x259e724 | out: lpFileInformation=0x259e724*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0240.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21bf68 | out: hHeap=0x1f0000) returned 1 [0240.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x21bf68 [0240.090] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x259e72c | out: lpFileInformation=0x259e72c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0240.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21bf68 | out: hHeap=0x1f0000) returned 1 [0240.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x21bf68 [0240.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21bf68 | out: hHeap=0x1f0000) returned 1 [0240.090] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x3, cFileName="AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml", cAlternateFileName="APF00A~1.XML")) returned 1 [0240.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0240.091] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0240.091] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x21bf68 [0240.091] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0240.091] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0240.091] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0240.091] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e690, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0240.092] GetFileType (hFile=0x174) returned 0x1 [0240.092] CloseHandle (hObject=0x174) returned 1 [0240.092] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0240.092] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x259e724 | out: lpFileInformation=0x259e724*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5aa)) returned 1 [0240.092] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0240.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0240.093] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x259e72c | out: lpFileInformation=0x259e72c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5aa)) returned 1 [0240.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0240.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x217038 [0240.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x217038 | out: hHeap=0x1f0000) returned 1 [0240.093] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x834ab261, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x3, cFileName="AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml", cAlternateFileName="APPXMA~2.XML")) returned 1 [0240.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2201c0 [0240.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd88 [0240.751] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x229500 [0240.751] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd88 | out: hHeap=0x1f0000) returned 1 [0240.751] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21bf68 | out: hHeap=0x1f0000) returned 1 [0240.751] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2201c0 | out: hHeap=0x1f0000) returned 1 [0240.752] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e690, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0240.752] GetFileType (hFile=0x200) returned 0x1 [0240.753] CloseHandle (hObject=0x200) returned 1 [0240.753] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x20d978 [0240.753] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x259e724 | out: lpFileInformation=0x259e724*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x834ab261, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0240.753] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20d978 | out: hHeap=0x1f0000) returned 1 [0240.753] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x20d978 [0240.753] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x259e72c | out: lpFileInformation=0x259e72c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x834ab261, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0240.753] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20d978 | out: hHeap=0x1f0000) returned 1 [0240.754] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x20d978 [0240.754] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20d978 | out: hHeap=0x1f0000) returned 1 [0240.754] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xeaa, dwReserved0=0x0, dwReserved1=0x3, cFileName="AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP202C~1.XML")) returned 1 [0240.754] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fb30 [0240.754] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21ff68 [0240.754] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x20d978 [0240.754] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ff68 | out: hHeap=0x1f0000) returned 1 [0240.754] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229500 | out: hHeap=0x1f0000) returned 1 [0240.754] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fb30 | out: hHeap=0x1f0000) returned 1 [0240.755] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e690, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0240.755] GetFileType (hFile=0x200) returned 0x1 [0240.755] CloseHandle (hObject=0x200) returned 1 [0240.756] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x229500 [0240.756] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x259e724 | out: lpFileInformation=0x259e724*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xeaa)) returned 1 [0240.756] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229500 | out: hHeap=0x1f0000) returned 1 [0240.756] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x229500 [0240.756] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x259e72c | out: lpFileInformation=0x259e72c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xeaa)) returned 1 [0240.756] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229500 | out: hHeap=0x1f0000) returned 1 [0240.756] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x229500 [0240.756] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229500 | out: hHeap=0x1f0000) returned 1 [0240.756] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84391d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x3, cFileName="AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml", cAlternateFileName="APBC30~1.XML")) returned 1 [0240.757] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0240.757] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0240.757] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x229500 [0240.757] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0240.757] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20d978 | out: hHeap=0x1f0000) returned 1 [0240.757] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0240.758] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e690, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0240.758] GetFileType (hFile=0x200) returned 0x1 [0240.758] CloseHandle (hObject=0x200) returned 1 [0240.758] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x20d978 [0240.759] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x259e724 | out: lpFileInformation=0x259e724*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84391d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0240.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20d978 | out: hHeap=0x1f0000) returned 1 [0240.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x20d978 [0240.759] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x259e72c | out: lpFileInformation=0x259e72c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84391d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0240.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20d978 | out: hHeap=0x1f0000) returned 1 [0240.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x20d978 [0240.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20d978 | out: hHeap=0x1f0000) returned 1 [0240.759] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x3, cFileName="AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml", cAlternateFileName="APCB35~1.XML")) returned 1 [0240.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd88 [0240.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0240.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x20d978 [0240.760] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0240.760] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229500 | out: hHeap=0x1f0000) returned 1 [0240.760] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd88 | out: hHeap=0x1f0000) returned 1 [0240.761] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0115-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e690, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0240.761] GetFileType (hFile=0x200) returned 0x1 [0240.761] CloseHandle (hObject=0x200) returned 1 [0240.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x229500 [0240.762] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0115-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x259e724 | out: lpFileInformation=0x259e724*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0240.762] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229500 | out: hHeap=0x1f0000) returned 1 [0240.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x229500 [0240.762] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0115-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x259e72c | out: lpFileInformation=0x259e72c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0240.762] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229500 | out: hHeap=0x1f0000) returned 1 [0240.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x229500 [0240.762] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229500 | out: hHeap=0x1f0000) returned 1 [0240.762] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x3, cFileName="AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP5E1E~1.XML")) returned 1 [0240.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0240.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2202b0 [0240.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x229500 [0240.763] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2202b0 | out: hHeap=0x1f0000) returned 1 [0240.763] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20d978 | out: hHeap=0x1f0000) returned 1 [0240.763] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0240.763] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0117-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e690, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0240.764] GetFileType (hFile=0x200) returned 0x1 [0240.764] CloseHandle (hObject=0x200) returned 1 [0240.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x20d978 [0240.764] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0117-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x259e724 | out: lpFileInformation=0x259e724*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0240.765] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20d978 | out: hHeap=0x1f0000) returned 1 [0240.765] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x20d978 [0240.765] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0117-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x259e72c | out: lpFileInformation=0x259e72c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0240.765] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20d978 | out: hHeap=0x1f0000) returned 1 [0240.765] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x20d978 [0240.766] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20d978 | out: hHeap=0x1f0000) returned 1 [0240.766] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83485006, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83485006, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x834ab261, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x80e56, dwReserved0=0x0, dwReserved1=0x3, cFileName="AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml", cAlternateFileName="APPXMA~3.XML")) returned 1 [0240.766] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0240.766] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f9c8 [0240.766] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x20d978 [0240.766] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f9c8 | out: hHeap=0x1f0000) returned 1 [0240.766] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229500 | out: hHeap=0x1f0000) returned 1 [0240.767] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0240.767] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012a-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e690, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0240.767] GetFileType (hFile=0x200) returned 0x1 [0240.768] CloseHandle (hObject=0x200) returned 1 [0240.768] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x229500 [0240.768] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012a-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x259e724 | out: lpFileInformation=0x259e724*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83485006, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83485006, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x834ab261, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x80e56)) returned 1 [0240.768] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229500 | out: hHeap=0x1f0000) returned 1 [0240.768] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x229500 [0240.768] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012a-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x259e72c | out: lpFileInformation=0x259e72c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83485006, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83485006, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x834ab261, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x80e56)) returned 1 [0240.768] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229500 | out: hHeap=0x1f0000) returned 1 [0240.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x229500 [0240.769] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229500 | out: hHeap=0x1f0000) returned 1 [0240.769] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x3, cFileName="AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml", cAlternateFileName="APE0B7~1.XML")) returned 1 [0240.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220490 [0240.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fab8 [0240.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x229500 [0240.769] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fab8 | out: hHeap=0x1f0000) returned 1 [0240.769] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20d978 | out: hHeap=0x1f0000) returned 1 [0240.769] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220490 | out: hHeap=0x1f0000) returned 1 [0240.770] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012b-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e690, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0240.770] GetFileType (hFile=0x200) returned 0x1 [0240.770] CloseHandle (hObject=0x200) returned 1 [0240.770] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x20d978 [0240.770] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012b-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x259e724 | out: lpFileInformation=0x259e724*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0240.770] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20d978 | out: hHeap=0x1f0000) returned 1 [0240.771] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x20d978 [0240.771] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012b-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x259e72c | out: lpFileInformation=0x259e72c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0240.771] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20d978 | out: hHeap=0x1f0000) returned 1 [0240.771] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x20d978 [0240.771] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20d978 | out: hHeap=0x1f0000) returned 1 [0240.771] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83ea71ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83ea71ba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd2f, dwReserved0=0x0, dwReserved1=0x3, cFileName="AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP8BF9~1.XML")) returned 1 [0240.771] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0240.771] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0240.771] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x20d978 [0240.771] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0240.771] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229500 | out: hHeap=0x1f0000) returned 1 [0240.771] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2205f8 | out: hHeap=0x1f0000) returned 1 [0240.772] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-3101-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e690, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0240.772] GetFileType (hFile=0x200) returned 0x1 [0240.772] CloseHandle (hObject=0x200) returned 1 [0240.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x229500 [0240.773] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-3101-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x259e724 | out: lpFileInformation=0x259e724*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83ea71ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83ea71ba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd2f)) returned 1 [0240.773] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229500 | out: hHeap=0x1f0000) returned 1 [0240.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x229500 [0240.773] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-3101-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x259e72c | out: lpFileInformation=0x259e72c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83ea71ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83ea71ba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd2f)) returned 1 [0240.773] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229500 | out: hHeap=0x1f0000) returned 1 [0240.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe0) returned 0x229500 [0240.773] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229500 | out: hHeap=0x1f0000) returned 1 [0240.773] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834f7581, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834f7581, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x212876, dwReserved0=0x0, dwReserved1=0x3, cFileName="AppXManifest.common.xml", cAlternateFileName="AP3FD6~1.XML")) returned 1 [0240.774] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238e18 [0240.774] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220148 [0240.774] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x2191b8 [0240.774] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220148 | out: hHeap=0x1f0000) returned 1 [0240.774] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20d978 | out: hHeap=0x1f0000) returned 1 [0240.774] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238e18 | out: hHeap=0x1f0000) returned 1 [0240.775] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.common.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e690, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0240.775] GetFileType (hFile=0x200) returned 0x1 [0240.776] CloseHandle (hObject=0x200) returned 1 [0240.776] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a0e0 [0240.776] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.common.xml"), fInfoLevelId=0x0, lpFileInformation=0x259e724 | out: lpFileInformation=0x259e724*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834f7581, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834f7581, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x212876)) returned 1 [0240.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a0e0 | out: hHeap=0x1f0000) returned 1 [0240.777] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21aab8 [0240.777] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.common.xml"), fInfoLevelId=0x0, lpFileInformation=0x259e72c | out: lpFileInformation=0x259e72c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834f7581, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834f7581, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x212876)) returned 1 [0240.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21aab8 | out: hHeap=0x1f0000) returned 1 [0240.777] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a8c0 [0240.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a8c0 | out: hHeap=0x1f0000) returned 1 [0240.777] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84391d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2667, dwReserved0=0x0, dwReserved1=0x3, cFileName="AppXManifestLoc.en-us.xml", cAlternateFileName="AP942B~1.XML")) returned 1 [0240.777] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228878 [0240.778] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220418 [0240.778] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218608 [0240.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220418 | out: hHeap=0x1f0000) returned 1 [0240.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2191b8 | out: hHeap=0x1f0000) returned 1 [0240.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228878 | out: hHeap=0x1f0000) returned 1 [0240.779] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifestloc.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e690, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0240.779] GetFileType (hFile=0x200) returned 0x1 [0240.779] CloseHandle (hObject=0x200) returned 1 [0240.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219cf0 [0240.780] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifestloc.en-us.xml"), fInfoLevelId=0x0, lpFileInformation=0x259e724 | out: lpFileInformation=0x259e724*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84391d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2667)) returned 1 [0240.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219cf0 | out: hHeap=0x1f0000) returned 1 [0240.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219c48 [0240.781] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifestloc.en-us.xml"), fInfoLevelId=0x0, lpFileInformation=0x259e72c | out: lpFileInformation=0x259e72c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84391d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2667)) returned 1 [0240.781] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219c48 | out: hHeap=0x1f0000) returned 1 [0240.781] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219c48 [0240.781] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219c48 | out: hHeap=0x1f0000) returned 1 [0240.782] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x175, dwReserved0=0x0, dwReserved1=0x3, cFileName="AuthoredExtensions.xml", cAlternateFileName="AUTHOR~1.XML")) returned 1 [0240.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238fa0 [0240.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f950 [0240.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218d98 [0240.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f950 | out: hHeap=0x1f0000) returned 1 [0240.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218608 | out: hHeap=0x1f0000) returned 1 [0240.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238fa0 | out: hHeap=0x1f0000) returned 1 [0240.783] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\authoredextensions.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e690, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0240.783] GetFileType (hFile=0x200) returned 0x1 [0240.784] CloseHandle (hObject=0x200) returned 1 [0240.784] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21aab8 [0240.784] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\authoredextensions.xml"), fInfoLevelId=0x0, lpFileInformation=0x259e724 | out: lpFileInformation=0x259e724*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x175)) returned 1 [0240.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21aab8 | out: hHeap=0x1f0000) returned 1 [0240.784] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219d98 [0240.785] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\authoredextensions.xml"), fInfoLevelId=0x0, lpFileInformation=0x259e72c | out: lpFileInformation=0x259e72c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x175)) returned 1 [0240.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219d98 | out: hHeap=0x1f0000) returned 1 [0240.785] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219f90 [0240.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219f90 | out: hHeap=0x1f0000) returned 1 [0240.785] FindNextFileW (in: hFindFile=0x24e980, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x175, dwReserved0=0x0, dwReserved1=0x3, cFileName="AuthoredExtensions.xml", cAlternateFileName="AUTHOR~1.XML")) returned 0 [0240.785] FindClose (in: hFindFile=0x24e980 | out: hFindFile=0x24e980) returned 1 [0240.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218d98 | out: hHeap=0x1f0000) returned 1 [0240.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262188 | out: hHeap=0x1f0000) returned 1 [0240.787] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260540 | out: hHeap=0x1f0000) returned 1 [0240.787] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2285f0 | out: hHeap=0x1f0000) returned 1 [0240.787] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228878 [0240.787] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2607e8 [0240.787] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x261b28 [0240.787] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b05f0 [0240.787] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\*", lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24e8c0 [0240.788] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0520 [0240.788] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b05f0 | out: hHeap=0x1f0000) returned 1 [0240.788] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0240.788] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0240.788] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0b38 [0240.788] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0520 | out: hHeap=0x1f0000) returned 1 [0240.788] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0240.788] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0240.788] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86813dc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2ca2e08, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2ca2e08, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="client", cAlternateFileName="")) returned 1 [0240.788] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0040 [0240.788] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0b38 | out: hHeap=0x1f0000) returned 1 [0240.789] lstrcmpW (lpString1="client", lpString2=".") returned 1 [0240.789] lstrcmpW (lpString1="client", lpString2="..") returned 1 [0240.789] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x205130 [0240.789] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0b38 [0240.789] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="CLIPART", cAlternateFileName="")) returned 1 [0240.789] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b05f0 [0240.789] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0040 | out: hHeap=0x1f0000) returned 1 [0240.789] lstrcmpW (lpString1="CLIPART", lpString2=".") returned 1 [0240.790] lstrcmpW (lpString1="CLIPART", lpString2="..") returned 1 [0240.790] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2392b0 [0240.790] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b07f8 [0240.790] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205130 | out: hHeap=0x1f0000) returned 1 [0240.790] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x114a91d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114a91d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="Document Themes 16", cAlternateFileName="DOCUME~1")) returned 1 [0240.790] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239198 [0240.790] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2affd8 [0240.790] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221a00 [0240.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2affd8 | out: hHeap=0x1f0000) returned 1 [0240.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b05f0 | out: hHeap=0x1f0000) returned 1 [0240.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239198 | out: hHeap=0x1f0000) returned 1 [0240.791] lstrcmpW (lpString1="Document Themes 16", lpString2=".") returned 1 [0240.791] lstrcmpW (lpString1="Document Themes 16", lpString2="..") returned 1 [0240.791] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x48) returned 0x2261e8 [0240.791] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f10 [0240.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2392b0 | out: hHeap=0x1f0000) returned 1 [0240.792] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x114f5747, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114f5747, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="Flattener", cAlternateFileName="FLATTE~1")) returned 1 [0240.792] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260518 [0240.792] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b08c8 [0240.792] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2211b0 [0240.793] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b08c8 | out: hHeap=0x1f0000) returned 1 [0240.793] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0240.793] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0240.793] lstrcmpW (lpString1="Flattener", lpString2=".") returned 1 [0240.794] lstrcmpW (lpString1="Flattener", lpString2="..") returned 1 [0240.794] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b05f0 [0240.794] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fef0 [0240.794] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2261e8 | out: hHeap=0x1f0000) returned 1 [0240.795] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x115da4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115da4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="fre", cAlternateFileName="")) returned 1 [0240.795] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0318 [0240.795] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0240.795] lstrcmpW (lpString1="fre", lpString2=".") returned 1 [0240.795] lstrcmpW (lpString1="fre", lpString2="..") returned 1 [0240.795] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0240.795] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0520 [0240.795] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b05f0 | out: hHeap=0x1f0000) returned 1 [0240.795] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1f5fb21, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b2abe77, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b2abe77, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="Integration", cAlternateFileName="INTEGR~1")) returned 1 [0240.796] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0240.796] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2affd8 [0240.796] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2217a0 [0240.796] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2affd8 | out: hHeap=0x1f0000) returned 1 [0240.796] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0318 | out: hHeap=0x1f0000) returned 1 [0240.796] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0241.040] lstrcmpW (lpString1="Integration", lpString2=".") returned 1 [0241.040] lstrcmpW (lpString1="Integration", lpString2="..") returned 1 [0241.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fab8 [0241.040] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe2687c83, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee308135, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xee308135, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="Licenses16", cAlternateFileName="LICENS~1")) returned 1 [0241.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260888 [0241.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0658 [0241.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220d88 [0241.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0658 | out: hHeap=0x1f0000) returned 1 [0241.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0241.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0241.040] lstrcmpW (lpString1="Licenses16", lpString2=".") returned 1 [0241.040] lstrcmpW (lpString1="Licenses16", lpString2="..") returned 1 [0241.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd8) returned 0x20c2c0 [0241.041] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x2205f8 [0241.041] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0241.041] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee45f66d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x983c2c8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="loc", cAlternateFileName="")) returned 1 [0241.041] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b02b0 [0241.041] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0241.041] lstrcmpW (lpString1="loc", lpString2=".") returned 1 [0241.041] lstrcmpW (lpString1="loc", lpString2="..") returned 1 [0241.041] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0c08 [0241.041] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="mcxml", cAlternateFileName="")) returned 1 [0241.041] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0658 [0241.041] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b02b0 | out: hHeap=0x1f0000) returned 1 [0241.041] lstrcmpW (lpString1="mcxml", lpString2=".") returned 1 [0241.041] lstrcmpW (lpString1="mcxml", lpString2="..") returned 1 [0241.042] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0728 [0241.042] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3c29db74, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c29db74, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="Office16", cAlternateFileName="")) returned 1 [0241.042] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260770 [0241.042] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0248 [0241.042] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221838 [0241.042] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0248 | out: hHeap=0x1f0000) returned 1 [0241.042] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0658 | out: hHeap=0x1f0000) returned 1 [0241.042] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0241.042] lstrcmpW (lpString1="Office16", lpString2=".") returned 1 [0241.042] lstrcmpW (lpString1="Office16", lpString2="..") returned 1 [0241.042] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x138) returned 0x20c3a0 [0241.042] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x220328 [0241.043] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20c2c0 | out: hHeap=0x1f0000) returned 1 [0241.043] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b1a0d3d, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b1a0d3d, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="rsod", cAlternateFileName="")) returned 1 [0241.043] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2affd8 [0241.043] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0241.043] lstrcmpW (lpString1="rsod", lpString2=".") returned 1 [0241.043] lstrcmpW (lpString1="rsod", lpString2="..") returned 1 [0241.043] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0040 [0241.043] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xb48c20e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb48c20e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="Stationery", cAlternateFileName="STATIO~1")) returned 1 [0241.043] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0241.044] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0588 [0241.044] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2218d0 [0241.044] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0588 | out: hHeap=0x1f0000) returned 1 [0241.044] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2affd8 | out: hHeap=0x1f0000) returned 1 [0241.044] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0241.044] lstrcmpW (lpString1="Stationery", lpString2=".") returned 1 [0241.044] lstrcmpW (lpString1="Stationery", lpString2="..") returned 1 [0241.044] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21ff68 [0241.044] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0241.044] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0241.044] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2affd8 [0241.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221b30 [0241.045] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2affd8 | out: hHeap=0x1f0000) returned 1 [0241.045] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0241.045] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0241.045] lstrcmpW (lpString1="Templates", lpString2=".") returned 1 [0241.045] lstrcmpW (lpString1="Templates", lpString2="..") returned 1 [0241.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fb30 [0241.045] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="VFS", cAlternateFileName="")) returned 1 [0241.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2affd8 [0241.045] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0241.045] lstrcmpW (lpString1="VFS", lpString2=".") returned 1 [0241.046] lstrcmpW (lpString1="VFS", lpString2="..") returned 1 [0241.046] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c8) returned 0x232300 [0241.046] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0248 [0241.046] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20c3a0 | out: hHeap=0x1f0000) returned 1 [0241.046] FindNextFileW (in: hFindFile=0x24e8c0, lpFindFileData=0x259e980 | out: lpFindFileData=0x259e980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3, cFileName="VFS", cAlternateFileName="")) returned 0 [0241.046] FindClose (in: hFindFile=0x24e8c0 | out: hFindFile=0x24e8c0) returned 1 [0241.047] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2289e0 [0241.047] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260630 [0241.047] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262980 [0241.047] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0241.047] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\*", lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86813dc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2ca2e08, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd890e4d1, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24eac0 [0241.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0318 [0241.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2211b0 [0241.048] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0318 | out: hHeap=0x1f0000) returned 1 [0241.048] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0241.048] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0241.048] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86813dc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2ca2e08, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd890e4d1, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b02b0 [0241.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221118 [0241.048] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b02b0 | out: hHeap=0x1f0000) returned 1 [0241.048] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0241.049] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0241.049] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0241.049] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0715cb9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0715cb9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0952017, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-file-l1-2-0.dll", cAlternateFileName="API-MS~1.DLL")) returned 1 [0241.049] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2284d0 [0241.049] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b05f0 [0241.049] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a230 [0241.049] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b05f0 | out: hHeap=0x1f0000) returned 1 [0241.049] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0241.049] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2284d0 | out: hHeap=0x1f0000) returned 1 [0241.050] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-file-l1-2-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0241.050] GetFileType (hFile=0x220) returned 0x1 [0241.050] CloseHandle (hObject=0x220) returned 1 [0241.051] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a2d8 [0241.051] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-file-l1-2-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0715cb9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0715cb9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0952017, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0)) returned 1 [0241.051] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a2d8 | out: hHeap=0x1f0000) returned 1 [0241.051] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21aab8 [0241.051] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-file-l1-2-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0715cb9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0715cb9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0952017, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0)) returned 1 [0241.051] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21aab8 | out: hHeap=0x1f0000) returned 1 [0241.051] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a2d8 [0241.051] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a2d8 | out: hHeap=0x1f0000) returned 1 [0241.051] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0952017, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0952017, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0a832cb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-file-l2-1-0.dll", cAlternateFileName="API-MS~3.DLL")) returned 1 [0241.051] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228cb0 [0241.051] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b02b0 [0241.052] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219f90 [0241.052] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b02b0 | out: hHeap=0x1f0000) returned 1 [0241.052] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a230 | out: hHeap=0x1f0000) returned 1 [0241.052] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228cb0 | out: hHeap=0x1f0000) returned 1 [0241.052] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l2-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-file-l2-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0241.052] GetFileType (hFile=0x220) returned 0x1 [0241.053] CloseHandle (hObject=0x220) returned 1 [0241.053] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a4d0 [0241.053] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l2-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-file-l2-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0952017, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0952017, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0a832cb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0)) returned 1 [0241.053] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a4d0 | out: hHeap=0x1f0000) returned 1 [0241.053] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219e40 [0241.053] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l2-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-file-l2-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0952017, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0952017, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0a832cb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0)) returned 1 [0241.053] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219e40 | out: hHeap=0x1f0000) returned 1 [0241.054] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21ab60 [0241.054] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ab60 | out: hHeap=0x1f0000) returned 1 [0241.054] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd089348e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd089348e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd09c4608, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x52c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-localization-l1-2-0.dll", cAlternateFileName="API-MS~2.DLL")) returned 1 [0241.054] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8d18 [0241.054] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0380 [0241.054] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2adb40 [0241.054] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0380 | out: hHeap=0x1f0000) returned 1 [0241.054] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219f90 | out: hHeap=0x1f0000) returned 1 [0241.054] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0241.055] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-localization-l1-2-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0241.055] GetFileType (hFile=0x220) returned 0x1 [0241.055] CloseHandle (hObject=0x220) returned 1 [0241.055] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2adcb0 [0241.056] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-localization-l1-2-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd089348e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd089348e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd09c4608, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x52c0)) returned 1 [0241.056] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2adcb0 | out: hHeap=0x1f0000) returned 1 [0241.056] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad410 [0241.056] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-localization-l1-2-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd089348e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd089348e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd09c4608, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x52c0)) returned 1 [0241.056] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad410 | out: hHeap=0x1f0000) returned 1 [0241.056] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad580 [0241.056] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad580 | out: hHeap=0x1f0000) returned 1 [0241.056] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd115de42, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd115de42, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd158a009, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-processthreads-l1-1-1.dll", cAlternateFileName="AP750A~1.DLL")) returned 1 [0241.056] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b02b0 [0241.056] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0318 [0241.056] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x230000 [0241.056] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0318 | out: hHeap=0x1f0000) returned 1 [0241.057] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2adb40 | out: hHeap=0x1f0000) returned 1 [0241.057] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b02b0 | out: hHeap=0x1f0000) returned 1 [0241.057] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-processthreads-l1-1-1.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0241.057] GetFileType (hFile=0x220) returned 0x1 [0241.058] CloseHandle (hObject=0x220) returned 1 [0241.058] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x230258 [0241.058] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-processthreads-l1-1-1.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd115de42, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd115de42, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd158a009, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0)) returned 1 [0241.058] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0241.058] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22fc18 [0241.058] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-processthreads-l1-1-1.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd115de42, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd115de42, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd158a009, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0)) returned 1 [0241.058] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0241.058] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc0) returned 0x22f768 [0241.058] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0241.058] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0d0baf0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0d0baf0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0eaf4e3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-synch-l1-2-0.dll", cAlternateFileName="APF10C~1.DLL")) returned 1 [0241.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8d18 [0241.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b05f0 [0241.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a578 [0241.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b05f0 | out: hHeap=0x1f0000) returned 1 [0241.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0241.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0241.059] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-synch-l1-2-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0241.060] GetFileType (hFile=0x220) returned 0x1 [0241.060] CloseHandle (hObject=0x220) returned 1 [0241.060] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a0e0 [0241.060] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-synch-l1-2-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0d0baf0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0d0baf0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0eaf4e3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0)) returned 1 [0241.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a0e0 | out: hHeap=0x1f0000) returned 1 [0241.060] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219d98 [0241.061] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-synch-l1-2-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0d0baf0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0d0baf0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0eaf4e3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0)) returned 1 [0241.061] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219d98 | out: hHeap=0x1f0000) returned 1 [0241.061] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219f90 [0241.061] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219f90 | out: hHeap=0x1f0000) returned 1 [0241.061] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0c4cdf5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0c4cdf5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0df0820, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-timezone-l1-1-0.dll", cAlternateFileName="AP7902~1.DLL")) returned 1 [0241.061] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8d18 [0241.061] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b02b0 [0241.061] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2add68 [0241.061] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b02b0 | out: hHeap=0x1f0000) returned 1 [0241.061] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a578 | out: hHeap=0x1f0000) returned 1 [0241.061] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0241.062] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-timezone-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-timezone-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0241.063] GetFileType (hFile=0x220) returned 0x1 [0241.063] CloseHandle (hObject=0x220) returned 1 [0241.063] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad9d0 [0241.063] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-timezone-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-timezone-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0c4cdf5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0c4cdf5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0df0820, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0)) returned 1 [0241.064] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad9d0 | out: hHeap=0x1f0000) returned 1 [0241.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2aded8 [0241.064] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-timezone-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-timezone-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0c4cdf5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0c4cdf5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0df0820, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0)) returned 1 [0241.064] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aded8 | out: hHeap=0x1f0000) returned 1 [0241.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad7a8 [0241.064] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad7a8 | out: hHeap=0x1f0000) returned 1 [0241.064] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0c26cd1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0c26cd1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0e62fac, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-xstate-l2-1-0.dll", cAlternateFileName="APA632~1.DLL")) returned 1 [0241.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8d18 [0241.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b02b0 [0241.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad2a0 [0241.064] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b02b0 | out: hHeap=0x1f0000) returned 1 [0241.065] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2add68 | out: hHeap=0x1f0000) returned 1 [0241.065] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0241.065] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-xstate-l2-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-xstate-l2-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0241.065] GetFileType (hFile=0x220) returned 0x1 [0241.066] CloseHandle (hObject=0x220) returned 1 [0241.066] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad7a8 [0241.066] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-xstate-l2-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-xstate-l2-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0c26cd1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0c26cd1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0e62fac, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d60)) returned 1 [0241.066] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad7a8 | out: hHeap=0x1f0000) returned 1 [0241.066] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad6f0 [0241.066] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-xstate-l2-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-xstate-l2-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0c26cd1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0c26cd1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0e62fac, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d60)) returned 1 [0241.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad6f0 | out: hHeap=0x1f0000) returned 1 [0241.067] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad918 [0241.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad918 | out: hHeap=0x1f0000) returned 1 [0241.067] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd289cda7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd289cda7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2a1a592, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-conio-l1-1-0.dll", cAlternateFileName="AP5C76~1.DLL")) returned 1 [0241.067] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228b00 [0241.067] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b02b0 [0241.067] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219e40 [0241.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b02b0 | out: hHeap=0x1f0000) returned 1 [0241.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad2a0 | out: hHeap=0x1f0000) returned 1 [0241.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228b00 | out: hHeap=0x1f0000) returned 1 [0241.068] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-conio-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-conio-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0241.068] GetFileType (hFile=0x220) returned 0x1 [0241.068] CloseHandle (hObject=0x220) returned 1 [0241.069] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a4d0 [0241.069] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-conio-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-conio-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd289cda7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd289cda7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2a1a592, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0)) returned 1 [0241.069] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a4d0 | out: hHeap=0x1f0000) returned 1 [0241.069] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219ee8 [0241.069] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-conio-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-conio-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd289cda7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd289cda7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2a1a592, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0)) returned 1 [0241.069] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219ee8 | out: hHeap=0x1f0000) returned 1 [0241.069] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a188 [0241.070] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a188 | out: hHeap=0x1f0000) returned 1 [0241.070] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0b8e391, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0b8e391, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0d7e20c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x58c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-convert-l1-1-0.dll", cAlternateFileName="APFD9C~1.DLL")) returned 1 [0241.070] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8dc8 [0241.070] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0318 [0241.070] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2add68 [0241.070] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0318 | out: hHeap=0x1f0000) returned 1 [0241.070] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219e40 | out: hHeap=0x1f0000) returned 1 [0241.070] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8dc8 | out: hHeap=0x1f0000) returned 1 [0241.071] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-convert-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0241.071] GetFileType (hFile=0x220) returned 0x1 [0241.071] CloseHandle (hObject=0x220) returned 1 [0241.071] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad410 [0241.072] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-convert-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0b8e391, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0b8e391, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0d7e20c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x58c0)) returned 1 [0241.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad410 | out: hHeap=0x1f0000) returned 1 [0241.072] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2aded8 [0241.072] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-convert-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0b8e391, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0b8e391, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0d7e20c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x58c0)) returned 1 [0241.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aded8 | out: hHeap=0x1f0000) returned 1 [0241.072] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad7a8 [0241.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad7a8 | out: hHeap=0x1f0000) returned 1 [0241.072] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0aa952a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0aa952a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0bda864, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-environment-l1-1-0.dll", cAlternateFileName="APC00F~1.DLL")) returned 1 [0241.072] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8d18 [0241.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0318 [0241.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2aded8 [0241.073] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0318 | out: hHeap=0x1f0000) returned 1 [0241.073] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2add68 | out: hHeap=0x1f0000) returned 1 [0241.073] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0241.073] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-environment-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0241.074] GetFileType (hFile=0x220) returned 0x1 [0241.074] CloseHandle (hObject=0x220) returned 1 [0241.074] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad130 [0241.074] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-environment-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0aa952a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0aa952a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0bda864, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0)) returned 1 [0241.075] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad130 | out: hHeap=0x1f0000) returned 1 [0241.075] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad638 [0241.075] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-environment-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0aa952a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0aa952a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0bda864, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0)) returned 1 [0241.075] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad638 | out: hHeap=0x1f0000) returned 1 [0241.075] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2adbf8 [0241.075] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2adbf8 | out: hHeap=0x1f0000) returned 1 [0241.075] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0aa952a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0aa952a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0c99389, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x50c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-filesystem-l1-1-0.dll", cAlternateFileName="API-MS~4.DLL")) returned 1 [0241.075] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8d18 [0241.075] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b02b0 [0241.075] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad2a0 [0241.076] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b02b0 | out: hHeap=0x1f0000) returned 1 [0241.076] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aded8 | out: hHeap=0x1f0000) returned 1 [0241.076] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8d18 | out: hHeap=0x1f0000) returned 1 [0241.076] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-filesystem-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-filesystem-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0241.076] GetFileType (hFile=0x220) returned 0x1 [0241.077] CloseHandle (hObject=0x220) returned 1 [0241.077] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad130 [0241.077] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-filesystem-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-filesystem-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0aa952a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0aa952a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0c99389, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x50c0)) returned 1 [0241.077] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad130 | out: hHeap=0x1f0000) returned 1 [0241.077] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad9d0 [0241.077] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-filesystem-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-filesystem-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0aa952a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0aa952a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0c99389, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x50c0)) returned 1 [0241.439] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad9d0 | out: hHeap=0x1f0000) returned 1 [0241.439] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad410 [0241.439] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad410 | out: hHeap=0x1f0000) returned 1 [0241.439] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0af5a16, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0af5a16, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0c4cdf5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-heap-l1-1-0.dll", cAlternateFileName="AP23C9~1.DLL")) returned 1 [0241.439] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228440 [0241.439] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0318 [0241.439] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a0e0 [0241.439] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0318 | out: hHeap=0x1f0000) returned 1 [0241.439] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad2a0 | out: hHeap=0x1f0000) returned 1 [0241.439] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228440 | out: hHeap=0x1f0000) returned 1 [0241.440] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-heap-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-heap-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0241.440] GetFileType (hFile=0x1e0) returned 0x1 [0241.441] CloseHandle (hObject=0x1e0) returned 1 [0241.441] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a4d0 [0241.441] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-heap-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-heap-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0af5a16, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0af5a16, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0c4cdf5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0)) returned 1 [0241.442] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a4d0 | out: hHeap=0x1f0000) returned 1 [0241.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21aa10 [0241.442] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-heap-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-heap-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0af5a16, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0af5a16, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0c4cdf5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0)) returned 1 [0241.442] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21aa10 | out: hHeap=0x1f0000) returned 1 [0241.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a188 [0241.442] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a188 | out: hHeap=0x1f0000) returned 1 [0241.443] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1e086ac, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1e086ac, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2365abe, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-locale-l1-1-0.dll", cAlternateFileName="APCB40~1.DLL")) returned 1 [0241.443] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8e78 [0241.443] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0380 [0241.443] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a230 [0241.443] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0380 | out: hHeap=0x1f0000) returned 1 [0241.443] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a0e0 | out: hHeap=0x1f0000) returned 1 [0241.443] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8e78 | out: hHeap=0x1f0000) returned 1 [0241.444] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-locale-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-locale-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0241.444] GetFileType (hFile=0x1e0) returned 0x1 [0241.445] CloseHandle (hObject=0x1e0) returned 1 [0241.445] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a968 [0241.445] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-locale-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-locale-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1e086ac, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1e086ac, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2365abe, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0)) returned 1 [0241.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a968 | out: hHeap=0x1f0000) returned 1 [0241.446] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a038 [0241.446] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-locale-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-locale-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1e086ac, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1e086ac, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2365abe, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0)) returned 1 [0241.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a038 | out: hHeap=0x1f0000) returned 1 [0241.446] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219e40 [0241.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219e40 | out: hHeap=0x1f0000) returned 1 [0241.446] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1137cdf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1137cdf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1d23858, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-math-l1-1-0.dll", cAlternateFileName="APAE51~1.DLL")) returned 1 [0241.447] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2285f0 [0241.447] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0318 [0241.447] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219c48 [0241.447] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0318 | out: hHeap=0x1f0000) returned 1 [0241.447] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a230 | out: hHeap=0x1f0000) returned 1 [0241.447] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2285f0 | out: hHeap=0x1f0000) returned 1 [0241.448] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-math-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-math-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0241.449] GetFileType (hFile=0x1e0) returned 0x1 [0241.449] CloseHandle (hObject=0x1e0) returned 1 [0241.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21aab8 [0241.450] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-math-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-math-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1137cdf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1137cdf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1d23858, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6cc0)) returned 1 [0241.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21aab8 | out: hHeap=0x1f0000) returned 1 [0241.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a8c0 [0241.450] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-math-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-math-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1137cdf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1137cdf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1d23858, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6cc0)) returned 1 [0241.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a8c0 | out: hHeap=0x1f0000) returned 1 [0241.451] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219cf0 [0241.451] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219cf0 | out: hHeap=0x1f0000) returned 1 [0241.451] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1006983, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1006983, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1242d5d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x68c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-multibyte-l1-1-0.dll", cAlternateFileName="AP972F~1.DLL")) returned 1 [0241.451] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8e78 [0241.451] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0318 [0241.451] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad580 [0241.451] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0318 | out: hHeap=0x1f0000) returned 1 [0241.451] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219c48 | out: hHeap=0x1f0000) returned 1 [0241.451] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8e78 | out: hHeap=0x1f0000) returned 1 [0241.452] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-multibyte-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-multibyte-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0241.452] GetFileType (hFile=0x1e0) returned 0x1 [0241.454] CloseHandle (hObject=0x1e0) returned 1 [0241.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad638 [0241.454] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-multibyte-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-multibyte-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1006983, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1006983, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1242d5d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x68c0)) returned 1 [0241.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad638 | out: hHeap=0x1f0000) returned 1 [0241.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad6f0 [0241.455] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-multibyte-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-multibyte-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1006983, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1006983, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1242d5d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x68c0)) returned 1 [0241.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad6f0 | out: hHeap=0x1f0000) returned 1 [0241.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ada88 [0241.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ada88 | out: hHeap=0x1f0000) returned 1 [0241.455] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0f9426a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0f9426a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd121c9ea, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x114c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-private-l1-1-0.dll", cAlternateFileName="AP7D9E~1.DLL")) returned 1 [0241.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8e78 [0241.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0318 [0241.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2adb40 [0241.456] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0318 | out: hHeap=0x1f0000) returned 1 [0241.456] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad580 | out: hHeap=0x1f0000) returned 1 [0241.456] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8e78 | out: hHeap=0x1f0000) returned 1 [0241.456] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-private-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-private-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0241.456] GetFileType (hFile=0x1e0) returned 0x1 [0241.457] CloseHandle (hObject=0x1e0) returned 1 [0241.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2adbf8 [0241.457] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-private-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-private-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0f9426a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0f9426a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd121c9ea, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x114c0)) returned 1 [0241.457] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2adbf8 | out: hHeap=0x1f0000) returned 1 [0241.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad4c8 [0241.457] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-private-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-private-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0f9426a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0f9426a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd121c9ea, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x114c0)) returned 1 [0241.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad4c8 | out: hHeap=0x1f0000) returned 1 [0241.458] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad130 [0241.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad130 | out: hHeap=0x1f0000) returned 1 [0241.458] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0f9426a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0f9426a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd139a18a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-process-l1-1-0.dll", cAlternateFileName="APFCAD~1.DLL")) returned 1 [0241.458] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8e78 [0241.458] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0318 [0241.458] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad638 [0241.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0318 | out: hHeap=0x1f0000) returned 1 [0241.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2adb40 | out: hHeap=0x1f0000) returned 1 [0241.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8e78 | out: hHeap=0x1f0000) returned 1 [0241.459] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-process-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-process-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0241.459] GetFileType (hFile=0x1e0) returned 0x1 [0241.460] CloseHandle (hObject=0x1e0) returned 1 [0241.460] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad9d0 [0241.460] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-process-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-process-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0f9426a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0f9426a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd139a18a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0)) returned 1 [0241.460] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad9d0 | out: hHeap=0x1f0000) returned 1 [0241.460] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ada88 [0241.460] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-process-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-process-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0f9426a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0f9426a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd139a18a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0)) returned 1 [0241.461] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ada88 | out: hHeap=0x1f0000) returned 1 [0241.461] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad7a8 [0241.461] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad7a8 | out: hHeap=0x1f0000) returned 1 [0241.461] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0eaf4e3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0eaf4e3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd11d067c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-runtime-l1-1-0.dll", cAlternateFileName="AP8F34~1.DLL")) returned 1 [0241.461] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8e78 [0241.461] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0318 [0241.461] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad2a0 [0241.461] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0318 | out: hHeap=0x1f0000) returned 1 [0241.462] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad638 | out: hHeap=0x1f0000) returned 1 [0241.462] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8e78 | out: hHeap=0x1f0000) returned 1 [0241.462] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-runtime-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-runtime-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0241.463] GetFileType (hFile=0x1e0) returned 0x1 [0241.463] CloseHandle (hObject=0x1e0) returned 1 [0241.463] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2aded8 [0241.464] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-runtime-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-runtime-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0eaf4e3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0eaf4e3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd11d067c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5ac0)) returned 1 [0241.464] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2aded8 | out: hHeap=0x1f0000) returned 1 [0241.464] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad130 [0241.464] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-runtime-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-runtime-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0eaf4e3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0eaf4e3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd11d067c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5ac0)) returned 1 [0241.464] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad130 | out: hHeap=0x1f0000) returned 1 [0241.464] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad580 [0241.464] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad580 | out: hHeap=0x1f0000) returned 1 [0241.464] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0dca676, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0dca676, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1078ffd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x60c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-stdio-l1-1-0.dll", cAlternateFileName="APD1B7~1.DLL")) returned 1 [0241.464] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228440 [0241.464] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0318 [0241.465] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a230 [0241.465] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0318 | out: hHeap=0x1f0000) returned 1 [0241.465] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad2a0 | out: hHeap=0x1f0000) returned 1 [0241.465] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228440 | out: hHeap=0x1f0000) returned 1 [0241.466] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-stdio-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-stdio-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0241.466] GetFileType (hFile=0x1e0) returned 0x1 [0241.466] CloseHandle (hObject=0x1e0) returned 1 [0241.467] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a620 [0241.467] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-stdio-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-stdio-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0dca676, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0dca676, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1078ffd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x60c0)) returned 1 [0241.467] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a620 | out: hHeap=0x1f0000) returned 1 [0241.467] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219c48 [0241.467] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-stdio-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-stdio-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0dca676, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0dca676, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1078ffd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x60c0)) returned 1 [0241.467] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219c48 | out: hHeap=0x1f0000) returned 1 [0241.467] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a2d8 [0241.467] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a2d8 | out: hHeap=0x1f0000) returned 1 [0241.468] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0eaf4e3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0eaf4e3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd10c55e8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x60c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-string-l1-1-0.dll", cAlternateFileName="APBF0F~1.DLL")) returned 1 [0241.468] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8e78 [0241.468] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0318 [0241.468] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a578 [0241.468] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0318 | out: hHeap=0x1f0000) returned 1 [0241.468] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a230 | out: hHeap=0x1f0000) returned 1 [0241.469] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8e78 | out: hHeap=0x1f0000) returned 1 [0241.469] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-string-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-string-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0241.470] GetFileType (hFile=0x1e0) returned 0x1 [0241.470] CloseHandle (hObject=0x1e0) returned 1 [0241.470] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a2d8 [0241.470] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-string-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-string-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0eaf4e3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0eaf4e3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd10c55e8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x60c0)) returned 1 [0241.471] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a2d8 | out: hHeap=0x1f0000) returned 1 [0241.471] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a380 [0241.471] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-string-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-string-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0eaf4e3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0eaf4e3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd10c55e8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x60c0)) returned 1 [0241.471] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a380 | out: hHeap=0x1f0000) returned 1 [0241.471] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a4d0 [0241.471] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a4d0 | out: hHeap=0x1f0000) returned 1 [0241.471] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0dca676, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0dca676, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0f9426a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x52c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-time-l1-1-0.dll", cAlternateFileName="AP5E4C~1.DLL")) returned 1 [0241.471] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x228518 [0241.471] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0318 [0241.471] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a4d0 [0241.472] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0318 | out: hHeap=0x1f0000) returned 1 [0241.472] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a578 | out: hHeap=0x1f0000) returned 1 [0241.472] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228518 | out: hHeap=0x1f0000) returned 1 [0241.472] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-time-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-time-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0241.473] GetFileType (hFile=0x1e0) returned 0x1 [0241.473] CloseHandle (hObject=0x1e0) returned 1 [0241.473] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219ee8 [0241.473] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-time-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-time-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0dca676, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0dca676, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0f9426a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x52c0)) returned 1 [0241.473] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219ee8 | out: hHeap=0x1f0000) returned 1 [0241.474] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21ab60 [0241.474] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-time-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-time-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0dca676, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0dca676, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0f9426a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x52c0)) returned 1 [0241.474] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21ab60 | out: hHeap=0x1f0000) returned 1 [0241.474] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a380 [0241.474] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a380 | out: hHeap=0x1f0000) returned 1 [0241.474] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1b7fe91, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1b7fe91, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1ec71c8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-utility-l1-1-0.dll", cAlternateFileName="AP80F4~1.DLL")) returned 1 [0241.474] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2a8e78 [0241.474] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0318 [0241.474] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad918 [0241.474] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0318 | out: hHeap=0x1f0000) returned 1 [0241.474] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a4d0 | out: hHeap=0x1f0000) returned 1 [0241.474] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2a8e78 | out: hHeap=0x1f0000) returned 1 [0241.475] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-utility-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-utility-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0241.475] GetFileType (hFile=0x1e0) returned 0x1 [0241.475] CloseHandle (hObject=0x1e0) returned 1 [0241.476] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad638 [0241.476] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-utility-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-utility-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1b7fe91, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1b7fe91, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1ec71c8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0)) returned 1 [0241.476] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad638 | out: hHeap=0x1f0000) returned 1 [0241.476] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad130 [0241.476] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-utility-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-utility-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1b7fe91, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1b7fe91, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1ec71c8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0)) returned 1 [0241.476] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad130 | out: hHeap=0x1f0000) returned 1 [0241.476] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x2ad130 [0241.476] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad130 | out: hHeap=0x1f0000) returned 1 [0241.477] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1b59cda, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1b59cda, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1f1370b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x34ad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVDllSurrogate32.exe", cAlternateFileName="APPVDL~2.EXE")) returned 1 [0241.477] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238d00 [0241.477] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0318 [0241.477] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0241.477] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0318 | out: hHeap=0x1f0000) returned 1 [0241.477] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2ad918 | out: hHeap=0x1f0000) returned 1 [0241.477] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238d00 | out: hHeap=0x1f0000) returned 1 [0241.478] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate32.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvdllsurrogate32.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0241.478] GetFileType (hFile=0x1e0) returned 0x1 [0241.479] CloseHandle (hObject=0x1e0) returned 1 [0241.479] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0241.479] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate32.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvdllsurrogate32.exe"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1b59cda, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1b59cda, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1f1370b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x34ad8)) returned 1 [0241.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0241.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0241.480] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate32.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvdllsurrogate32.exe"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1b59cda, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1b59cda, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1f1370b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x34ad8)) returned 1 [0241.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0241.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0241.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0241.480] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd153dc41, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd153dc41, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1e2e85a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3e4d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVDllSurrogate64.exe", cAlternateFileName="APPVDL~1.EXE")) returned 1 [0241.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c90 [0241.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0318 [0241.481] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0241.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0318 | out: hHeap=0x1f0000) returned 1 [0241.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0241.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c90 | out: hHeap=0x1f0000) returned 1 [0241.482] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate64.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvdllsurrogate64.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0241.482] GetFileType (hFile=0x1e0) returned 0x1 [0241.482] CloseHandle (hObject=0x1e0) returned 1 [0241.483] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0241.483] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate64.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvdllsurrogate64.exe"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd153dc41, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd153dc41, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1e2e85a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3e4d8)) returned 1 [0241.483] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0241.483] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0241.483] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate64.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvdllsurrogate64.exe"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd153dc41, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd153dc41, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1e2e85a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3e4d8)) returned 1 [0241.483] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0241.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0241.862] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0241.862] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x86813dc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86813dc4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86813dc4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="AppvIsvStream32.dll", cAlternateFileName="APPVIS~1.DLL")) returned 1 [0241.862] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239160 [0241.862] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b02b0 [0241.863] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0241.863] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b02b0 | out: hHeap=0x1f0000) returned 1 [0241.863] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0241.863] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239160 | out: hHeap=0x1f0000) returned 1 [0241.863] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\AppvIsvStream32.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvisvstream32.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0241.864] GetLastError () returned 0x2 [0241.864] GetLastError () returned 0x2 [0241.864] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x86813dc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86813dc4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86813dc4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="AppvIsvStream64.dll", cAlternateFileName="APPVIS~2.DLL")) returned 1 [0241.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238c90 [0241.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b02b0 [0241.864] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0241.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b02b0 | out: hHeap=0x1f0000) returned 1 [0241.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0241.865] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238c90 | out: hHeap=0x1f0000) returned 1 [0241.865] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\AppvIsvStream64.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvisvstream64.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0241.866] GetLastError () returned 0x2 [0241.866] GetLastError () returned 0x2 [0241.866] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x86813dc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86813dc4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86813dc4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="AppvIsvSubsystems32.dll", cAlternateFileName="APPVIS~3.DLL")) returned 1 [0241.866] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238f68 [0241.866] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b06c0 [0241.866] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0241.866] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b06c0 | out: hHeap=0x1f0000) returned 1 [0241.866] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0241.866] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238f68 | out: hHeap=0x1f0000) returned 1 [0241.867] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\AppvIsvSubsystems32.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvisvsubsystems32.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0241.867] GetLastError () returned 0x2 [0241.868] GetLastError () returned 0x2 [0241.868] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x8683a0f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8683a0f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8683a0f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="AppvIsvSubsystems64.dll", cAlternateFileName="APPVIS~4.DLL")) returned 1 [0241.868] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x239160 [0241.868] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0ad0 [0241.868] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0241.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0ad0 | out: hHeap=0x1f0000) returned 1 [0241.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0241.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239160 | out: hHeap=0x1f0000) returned 1 [0241.869] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\AppvIsvSubsystems64.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvisvsubsystems64.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0241.869] GetLastError () returned 0x2 [0241.869] GetLastError () returned 0x2 [0241.869] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd153dc41, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd153dc41, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1e7acf5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x69630, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="AppVLP.exe", cAlternateFileName="")) returned 1 [0241.869] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0241.869] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0588 [0241.870] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2217a0 [0241.870] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0588 | out: hHeap=0x1f0000) returned 1 [0241.870] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0241.870] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0241.870] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\AppVLP.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvlp.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0241.870] GetFileType (hFile=0x1e8) returned 0x1 [0241.871] CloseHandle (hObject=0x1e8) returned 1 [0241.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0241.871] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\AppVLP.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvlp.exe"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd153dc41, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd153dc41, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1e7acf5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x69630)) returned 1 [0241.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0241.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212a48 [0241.871] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\AppVLP.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvlp.exe"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd153dc41, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd153dc41, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1e7acf5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x69630)) returned 1 [0241.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212a48 | out: hHeap=0x1f0000) returned 1 [0241.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0241.872] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0241.872] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x8683a0f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8683a0f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8683a0f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="C2R32.dll", cAlternateFileName="")) returned 1 [0241.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260798 [0241.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0ad0 [0241.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221410 [0241.872] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0ad0 | out: hHeap=0x1f0000) returned 1 [0241.872] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0241.872] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260798 | out: hHeap=0x1f0000) returned 1 [0241.872] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\C2R32.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\c2r32.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0241.873] GetLastError () returned 0x2 [0241.873] GetLastError () returned 0x2 [0241.873] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x8683a0f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8683a0f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8683a0f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="C2R64.dll", cAlternateFileName="")) returned 1 [0241.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0241.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b02b0 [0241.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221670 [0241.873] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b02b0 | out: hHeap=0x1f0000) returned 1 [0241.873] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0241.873] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0241.874] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\C2R64.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\c2r64.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0241.874] GetLastError () returned 0x2 [0241.874] GetLastError () returned 0x2 [0241.874] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd11f68b6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd11f68b6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd191da0e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x514a8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="concrt140.dll", cAlternateFileName="CONCRT~1.DLL")) returned 1 [0241.874] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0241.874] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0998 [0241.875] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221118 [0241.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0998 | out: hHeap=0x1f0000) returned 1 [0241.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0241.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0241.875] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\concrt140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\concrt140.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0241.876] GetFileType (hFile=0x1e8) returned 0x1 [0241.876] CloseHandle (hObject=0x1e8) returned 1 [0241.876] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212c68 [0241.876] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\concrt140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\concrt140.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd11f68b6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd11f68b6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd191da0e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x514a8)) returned 1 [0241.876] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212c68 | out: hHeap=0x1f0000) returned 1 [0241.876] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e88 [0241.876] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\concrt140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\concrt140.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd11f68b6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd11f68b6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd191da0e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x514a8)) returned 1 [0241.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e88 | out: hHeap=0x1f0000) returned 1 [0241.877] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2132c8 [0241.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2132c8 | out: hHeap=0x1f0000) returned 1 [0241.877] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1242d5d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1242d5d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1bcc41c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5644a0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="mfc140u.dll", cAlternateFileName="")) returned 1 [0241.877] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0241.877] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b03e8 [0241.877] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x2215d8 [0241.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b03e8 | out: hHeap=0x1f0000) returned 1 [0241.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0241.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0241.878] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\mfc140u.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\mfc140u.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0241.878] GetFileType (hFile=0x1e8) returned 0x1 [0241.878] CloseHandle (hObject=0x1e8) returned 1 [0241.878] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213790 [0241.878] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\mfc140u.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\mfc140u.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1242d5d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1242d5d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1bcc41c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5644a0)) returned 1 [0241.879] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213790 | out: hHeap=0x1f0000) returned 1 [0241.879] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212a48 [0241.879] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\mfc140u.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\mfc140u.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1242d5d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1242d5d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1bcc41c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5644a0)) returned 1 [0241.879] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212a48 | out: hHeap=0x1f0000) returned 1 [0241.879] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212be0 [0241.879] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212be0 | out: hHeap=0x1f0000) returned 1 [0241.879] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1f5fb21, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1f5fb21, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd244aa14, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xa12a8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="msvcp120.dll", cAlternateFileName="")) returned 1 [0241.879] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0241.879] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b02b0 [0241.879] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220eb8 [0241.879] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b02b0 | out: hHeap=0x1f0000) returned 1 [0241.879] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0241.879] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0241.880] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\msvcp120.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcp120.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0241.880] GetFileType (hFile=0x1e8) returned 0x1 [0241.880] CloseHandle (hObject=0x1e8) returned 1 [0241.881] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213818 [0241.881] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\msvcp120.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcp120.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1f5fb21, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1f5fb21, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd244aa14, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xa12a8)) returned 1 [0241.881] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213818 | out: hHeap=0x1f0000) returned 1 [0241.881] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e88 [0241.881] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\msvcp120.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcp120.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1f5fb21, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1f5fb21, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd244aa14, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xa12a8)) returned 1 [0241.881] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e88 | out: hHeap=0x1f0000) returned 1 [0241.881] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213790 [0241.881] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213790 | out: hHeap=0x1f0000) returned 1 [0241.881] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1ea0ff2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1ea0ff2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd20449b3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x9b0a0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="msvcp140.dll", cAlternateFileName="")) returned 1 [0241.881] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0241.882] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b02b0 [0241.882] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220e20 [0241.882] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b02b0 | out: hHeap=0x1f0000) returned 1 [0241.882] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0241.882] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0241.882] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\msvcp140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcp140.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0241.882] GetFileType (hFile=0x1e8) returned 0x1 [0241.883] CloseHandle (hObject=0x1e8) returned 1 [0241.883] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e88 [0241.883] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\msvcp140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcp140.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1ea0ff2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1ea0ff2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd20449b3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x9b0a0)) returned 1 [0241.883] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e88 | out: hHeap=0x1f0000) returned 1 [0241.883] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2134e8 [0241.883] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\msvcp140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcp140.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1ea0ff2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1ea0ff2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd20449b3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x9b0a0)) returned 1 [0241.883] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2134e8 | out: hHeap=0x1f0000) returned 1 [0241.883] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213790 [0241.883] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213790 | out: hHeap=0x1f0000) returned 1 [0241.883] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd890e4d1, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xd890e4d1, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xd981af3f, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xeb3bb, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="msvcr120.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="MSVCR1~1.ODV")) returned 1 [0241.883] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21aa10 [0241.883] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b02b0 [0241.884] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2856c8 [0241.884] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b02b0 | out: hHeap=0x1f0000) returned 1 [0241.884] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0241.884] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21aa10 | out: hHeap=0x1f0000) returned 1 [0241.884] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\msvcr120.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcr120.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0241.884] GetFileType (hFile=0x1e8) returned 0x1 [0241.885] CloseHandle (hObject=0x1e8) returned 1 [0241.885] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2851a0 [0241.885] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\msvcr120.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcr120.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd890e4d1, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xd890e4d1, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xd981af3f, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xeb3bb)) returned 1 [0241.885] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2851a0 | out: hHeap=0x1f0000) returned 1 [0241.885] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2857d0 [0241.885] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\msvcr120.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcr120.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd890e4d1, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xd890e4d1, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xd981af3f, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xeb3bb)) returned 1 [0241.885] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2857d0 | out: hHeap=0x1f0000) returned 1 [0241.886] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285cf8 [0241.886] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285cf8 | out: hHeap=0x1f0000) returned 1 [0241.886] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1e2e85a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1e2e85a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1f5fb21, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xefec0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ucrtbase.dll", cAlternateFileName="")) returned 1 [0241.886] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260658 [0241.886] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0588 [0241.886] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220d88 [0241.886] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0588 | out: hHeap=0x1f0000) returned 1 [0241.886] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2856c8 | out: hHeap=0x1f0000) returned 1 [0241.886] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260658 | out: hHeap=0x1f0000) returned 1 [0241.886] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\ucrtbase.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\ucrtbase.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0241.887] GetFileType (hFile=0x1e8) returned 0x1 [0241.887] CloseHandle (hObject=0x1e8) returned 1 [0241.887] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0241.887] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\ucrtbase.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\ucrtbase.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1e2e85a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1e2e85a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1f5fb21, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xefec0)) returned 1 [0241.887] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0241.887] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213790 [0241.887] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\ucrtbase.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\ucrtbase.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1e2e85a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1e2e85a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1f5fb21, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xefec0)) returned 1 [0241.887] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213790 | out: hHeap=0x1f0000) returned 1 [0241.888] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0241.888] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0241.888] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd98413d2, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xd98413d2, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xd98413d2, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ucrtbase.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="UCRTBA~1.ODV")) returned 1 [0241.888] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a578 [0241.888] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0998 [0241.888] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285cf8 [0241.888] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0998 | out: hHeap=0x1f0000) returned 1 [0241.888] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0241.888] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a578 | out: hHeap=0x1f0000) returned 1 [0241.888] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\ucrtbase.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\root\\client\\ucrtbase.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0241.888] GetFileType (hFile=0x1e8) returned 0x1 [0241.889] CloseHandle (hObject=0x1e8) returned 1 [0241.889] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2855c0 [0241.889] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\ucrtbase.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\root\\client\\ucrtbase.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd98413d2, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xd98413d2, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xd98413d2, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0241.889] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2855c0 | out: hHeap=0x1f0000) returned 1 [0241.889] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x285bf0 [0241.890] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\ucrtbase.dll.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\program files\\microsoft office\\root\\client\\ucrtbase.dll.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd98413d2, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xd98413d2, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xd98413d2, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0241.890] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285bf0 | out: hHeap=0x1f0000) returned 1 [0241.890] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x2857d0 [0241.890] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2857d0 | out: hHeap=0x1f0000) returned 1 [0241.890] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd2ca2e08, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2ca2e08, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2f0533c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5f4b0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="vccorlib140.dll", cAlternateFileName="VCCORL~1.DLL")) returned 1 [0241.890] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0241.890] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0658 [0241.891] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x221248 [0241.891] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0658 | out: hHeap=0x1f0000) returned 1 [0241.891] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x285cf8 | out: hHeap=0x1f0000) returned 1 [0241.891] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0241.892] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\vccorlib140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\vccorlib140.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0241.892] GetFileType (hFile=0x1e8) returned 0x1 [0241.893] CloseHandle (hObject=0x1e8) returned 1 [0241.893] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0241.893] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\vccorlib140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\vccorlib140.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd2ca2e08, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2ca2e08, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2f0533c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5f4b0)) returned 1 [0241.893] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0241.893] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212a48 [0241.893] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\vccorlib140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\vccorlib140.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd2ca2e08, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2ca2e08, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2f0533c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5f4b0)) returned 1 [0241.893] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212a48 | out: hHeap=0x1f0000) returned 1 [0241.893] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0241.893] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0241.894] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd2424784, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2424784, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd26acf16, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15ab0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="vcruntime140.dll", cAlternateFileName="VCRUNT~1.DLL")) returned 1 [0241.894] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238f68 [0241.894] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x2b0ad0 [0241.894] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8e) returned 0x220eb8 [0241.894] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2b0ad0 | out: hHeap=0x1f0000) returned 1 [0241.894] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0241.894] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238f68 | out: hHeap=0x1f0000) returned 1 [0241.894] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\vcruntime140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\vcruntime140.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259e1cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0241.895] GetFileType (hFile=0x1e8) returned 0x1 [0241.895] CloseHandle (hObject=0x1e8) returned 1 [0241.895] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0241.896] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\vcruntime140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\vcruntime140.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e25c | out: lpFileInformation=0x259e25c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd2424784, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2424784, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd26acf16, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15ab0)) returned 1 [0241.896] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0241.896] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0241.896] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\client\\vcruntime140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\vcruntime140.dll"), fInfoLevelId=0x0, lpFileInformation=0x259e26c | out: lpFileInformation=0x259e26c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd2424784, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2424784, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd26acf16, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15ab0)) returned 1 [0241.896] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0241.896] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213790 [0241.896] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213790 | out: hHeap=0x1f0000) returned 1 [0241.896] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd2424784, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2424784, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd26acf16, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15ab0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="vcruntime140.dll", cAlternateFileName="VCRUNT~1.DLL")) returned 0 [0241.896] FindClose (in: hFindFile=0x24eac0 | out: hFindFile=0x24eac0) returned 1 [0241.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0241.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x262980 | out: hHeap=0x1f0000) returned 1 [0241.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260630 | out: hHeap=0x1f0000) returned 1 [0241.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2289e0 | out: hHeap=0x1f0000) returned 1 [0241.897] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2285a8 [0241.897] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260540 [0241.897] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x262188 [0241.897] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fc98 [0241.897] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\*", lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x24e940 [0241.898] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fd10 [0241.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fc98 | out: hHeap=0x1f0000) returned 1 [0241.898] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0241.898] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.898] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21fe78 [0241.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fd10 | out: hHeap=0x1f0000) returned 1 [0241.898] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0241.898] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0241.898] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1113bba3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1113bba3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="PUB60COR", cAlternateFileName="")) returned 1 [0241.899] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260518 [0241.899] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0241.899] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218a28 [0241.899] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0241.899] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21fe78 | out: hHeap=0x1f0000) returned 1 [0241.899] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0241.899] lstrcmpW (lpString1="PUB60COR", lpString2=".") returned 1 [0241.899] lstrcmpW (lpString1="PUB60COR", lpString2="..") returned 1 [0241.899] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204b90 [0241.899] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2133d8 [0241.899] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x104b75c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Publisher", cAlternateFileName="PUBLIS~1")) returned 1 [0241.899] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0241.899] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x21f8d8 [0241.899] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa6) returned 0x218608 [0241.900] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21f8d8 | out: hHeap=0x1f0000) returned 1 [0241.900] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x218a28 | out: hHeap=0x1f0000) returned 1 [0241.900] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0241.900] lstrcmpW (lpString1="Publisher", lpString2=".") returned 1 [0241.900] lstrcmpW (lpString1="Publisher", lpString2="..") returned 1 [0241.900] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x238fa0 [0241.900] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213790 [0241.900] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204b90 | out: hHeap=0x1f0000) returned 1 [0241.900] FindNextFileW (in: hFindFile=0x24e940, lpFindFileData=0x259e4bc | out: lpFindFileData=0x259e4bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x104b75c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Publisher", cAlternateFileName="PUBLIS~1")) returned 0 [0241.900] FindClose (in: hFindFile=0x24e940 | out: hFindFile=0x24e940) returned 1 [0241.900] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2285f0 [0241.900] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260798 [0241.900] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x2624b8 [0241.901] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212c68 [0241.901] FindFirstFileW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\*", lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1113bba3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1113bba3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x24eac0 [0242.320] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e88 [0242.320] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212c68 | out: hHeap=0x1f0000) returned 1 [0242.320] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0242.320] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1113bba3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1113bba3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0242.340] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0242.341] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e88 | out: hHeap=0x1f0000) returned 1 [0242.341] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0242.341] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0242.341] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2340, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="AG00004_.GIF", cAlternateFileName="")) returned 1 [0242.341] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0242.341] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213818 [0242.341] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0242.341] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213818 | out: hHeap=0x1f0000) returned 1 [0242.341] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0242.341] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0242.342] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00004_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0242.346] GetFileType (hFile=0x22c) returned 0x1 [0242.346] CloseHandle (hObject=0x22c) returned 1 [0242.346] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0242.346] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00004_.gif"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2340)) returned 1 [0242.347] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0242.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0242.347] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00004_.gif"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2340)) returned 1 [0242.347] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0242.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0242.347] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0242.347] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c30, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="AG00011_.GIF", cAlternateFileName="")) returned 1 [0242.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0242.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0242.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0242.348] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0242.348] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0242.348] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0242.348] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00011_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00011_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0242.349] GetFileType (hFile=0x22c) returned 0x1 [0242.350] CloseHandle (hObject=0x22c) returned 1 [0242.350] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0242.350] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00011_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00011_.gif"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c30)) returned 1 [0242.350] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0242.350] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0242.350] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00011_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00011_.gif"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c30)) returned 1 [0242.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0242.351] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0242.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0242.351] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a19, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="AG00021_.GIF", cAlternateFileName="")) returned 1 [0242.351] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0242.351] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213570 [0242.351] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0242.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213570 | out: hHeap=0x1f0000) returned 1 [0242.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0242.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0242.352] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00021_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0242.352] GetFileType (hFile=0x22c) returned 0x1 [0242.352] CloseHandle (hObject=0x22c) returned 1 [0242.353] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0242.353] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00021_.gif"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a19)) returned 1 [0242.353] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0242.353] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0242.353] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00021_.gif"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a19)) returned 1 [0242.353] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0242.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0242.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0242.354] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a1c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="AG00037_.GIF", cAlternateFileName="")) returned 1 [0242.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0242.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0242.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0242.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0242.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0242.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0242.354] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00037_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0242.356] GetFileType (hFile=0x22c) returned 0x1 [0242.356] CloseHandle (hObject=0x22c) returned 1 [0242.356] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0242.356] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00037_.gif"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a1c)) returned 1 [0242.356] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0242.357] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0242.357] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00037_.gif"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a1c)) returned 1 [0242.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0242.357] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0242.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0242.357] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb58a9e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb58a9e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcb3, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="AG00038_.GIF", cAlternateFileName="")) returned 1 [0242.357] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0242.357] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0242.357] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0242.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0242.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0242.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0242.358] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00038_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0242.358] GetFileType (hFile=0x22c) returned 0x1 [0242.359] CloseHandle (hObject=0x22c) returned 1 [0242.359] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0242.359] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00038_.gif"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb58a9e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb58a9e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcb3)) returned 1 [0242.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0242.359] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0242.359] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00038_.gif"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb58a9e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb58a9e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcb3)) returned 1 [0242.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0242.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0242.363] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0242.363] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb58a9e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fa1, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="AG00040_.GIF", cAlternateFileName="")) returned 1 [0242.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0242.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2132c8 [0242.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0242.363] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2132c8 | out: hHeap=0x1f0000) returned 1 [0242.363] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0242.363] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0242.364] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00040_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0242.364] GetFileType (hFile=0x22c) returned 0x1 [0242.365] CloseHandle (hObject=0x22c) returned 1 [0242.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0242.365] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00040_.gif"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb58a9e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fa1)) returned 1 [0242.365] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0242.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0242.365] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00040_.gif"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb58a9e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fa1)) returned 1 [0242.365] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0242.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0242.366] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0242.366] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e06, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="AG00052_.GIF", cAlternateFileName="")) returned 1 [0242.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0242.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213818 [0242.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0242.366] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213818 | out: hHeap=0x1f0000) returned 1 [0242.366] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0242.366] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0242.367] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00052_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0242.368] GetFileType (hFile=0x22c) returned 0x1 [0242.368] CloseHandle (hObject=0x22c) returned 1 [0242.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0242.369] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00052_.gif"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e06)) returned 1 [0242.369] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0242.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0242.369] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00052_.gif"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e06)) returned 1 [0242.369] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0242.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0242.369] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0242.369] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e73, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="AG00057_.GIF", cAlternateFileName="")) returned 1 [0242.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0242.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212a48 [0242.370] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0242.370] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212a48 | out: hHeap=0x1f0000) returned 1 [0242.370] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0242.370] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0242.370] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00057_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0242.372] GetFileType (hFile=0x22c) returned 0x1 [0242.372] CloseHandle (hObject=0x22c) returned 1 [0242.372] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0242.372] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00057_.gif"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e73)) returned 1 [0242.372] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0242.372] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0242.373] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00057_.gif"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e73)) returned 1 [0242.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0242.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0242.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0242.373] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x205, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="AG00090_.GIF", cAlternateFileName="")) returned 1 [0242.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260518 [0242.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0242.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0242.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0242.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0242.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0242.374] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00090_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0242.377] GetFileType (hFile=0x22c) returned 0x1 [0242.377] CloseHandle (hObject=0x22c) returned 1 [0242.377] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0242.377] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00090_.gif"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x205)) returned 1 [0242.378] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0242.378] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0242.378] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00090_.gif"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x205)) returned 1 [0242.378] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0242.378] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0242.378] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0242.378] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f6, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="AG00092_.GIF", cAlternateFileName="")) returned 1 [0242.378] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0242.378] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213570 [0242.378] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0242.379] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213570 | out: hHeap=0x1f0000) returned 1 [0242.379] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0242.379] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0242.379] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00092_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0242.379] GetFileType (hFile=0x22c) returned 0x1 [0242.380] CloseHandle (hObject=0x22c) returned 1 [0242.380] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0242.380] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00092_.gif"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f6)) returned 1 [0242.380] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0242.380] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0242.380] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00092_.gif"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f6)) returned 1 [0242.381] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0242.381] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0242.381] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0242.381] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x319e, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="AG00103_.GIF", cAlternateFileName="")) returned 1 [0242.381] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0242.381] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213818 [0242.381] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0242.381] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213818 | out: hHeap=0x1f0000) returned 1 [0242.381] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0242.381] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0242.382] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00103_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0242.382] GetFileType (hFile=0x22c) returned 0x1 [0242.382] CloseHandle (hObject=0x22c) returned 1 [0242.383] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0242.383] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00103_.gif"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x319e)) returned 1 [0242.383] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0242.383] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0242.383] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00103_.gif"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x319e)) returned 1 [0242.383] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0242.384] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0242.384] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0242.384] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd9c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="AG00120_.GIF", cAlternateFileName="")) returned 1 [0242.384] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0242.384] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0242.384] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0242.384] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0242.384] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0242.384] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0242.385] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00120_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0242.386] GetFileType (hFile=0x22c) returned 0x1 [0242.386] CloseHandle (hObject=0x22c) returned 1 [0242.387] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0242.387] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00120_.gif"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd9c)) returned 1 [0242.387] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0242.387] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0242.387] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00120_.gif"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd9c)) returned 1 [0242.388] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0242.388] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0242.388] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0242.388] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc44, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="AG00126_.GIF", cAlternateFileName="")) returned 1 [0242.388] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0242.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0242.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0242.389] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0242.389] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0242.389] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0242.768] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00126_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0242.769] GetFileType (hFile=0x224) returned 0x1 [0242.770] CloseHandle (hObject=0x224) returned 1 [0242.770] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0242.770] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00126_.gif"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc44)) returned 1 [0242.770] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0242.770] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0242.770] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00126_.gif"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc44)) returned 1 [0242.771] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0242.771] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0242.771] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0242.771] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30c2, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="AG00129_.GIF", cAlternateFileName="")) returned 1 [0242.771] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ba8 [0242.771] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0242.771] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0242.771] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0242.772] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0242.772] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ba8 | out: hHeap=0x1f0000) returned 1 [0242.773] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00129_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0242.773] GetFileType (hFile=0x224) returned 0x1 [0242.774] CloseHandle (hObject=0x224) returned 1 [0242.774] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0242.775] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00129_.gif"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30c2)) returned 1 [0242.775] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0242.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0242.775] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00129_.gif"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30c2)) returned 1 [0242.775] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0242.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0242.775] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0242.775] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1485, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="AG00130_.GIF", cAlternateFileName="")) returned 1 [0242.776] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0242.776] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213570 [0242.776] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0242.776] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213570 | out: hHeap=0x1f0000) returned 1 [0242.776] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0242.776] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0242.777] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00130_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0242.778] GetFileType (hFile=0x224) returned 0x1 [0242.778] CloseHandle (hObject=0x224) returned 1 [0242.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0242.782] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00130_.gif"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1485)) returned 1 [0242.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0242.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0242.782] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00130_.gif"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1485)) returned 1 [0242.783] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0242.783] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0242.783] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0242.783] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa24, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="AG00135_.GIF", cAlternateFileName="")) returned 1 [0242.783] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0242.783] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2132c8 [0242.783] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0242.783] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2132c8 | out: hHeap=0x1f0000) returned 1 [0242.783] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0242.783] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0242.784] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00135_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0242.785] GetFileType (hFile=0x224) returned 0x1 [0242.785] CloseHandle (hObject=0x224) returned 1 [0242.786] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0242.786] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00135_.gif"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa24)) returned 1 [0242.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0242.786] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0242.786] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00135_.gif"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa24)) returned 1 [0242.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0242.786] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0242.787] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0242.787] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x296f, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="AG00139_.GIF", cAlternateFileName="")) returned 1 [0242.787] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a68 [0242.787] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0242.787] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0242.787] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0242.787] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0242.787] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a68 | out: hHeap=0x1f0000) returned 1 [0242.788] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00139_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0242.789] GetFileType (hFile=0x224) returned 0x1 [0242.789] CloseHandle (hObject=0x224) returned 1 [0242.790] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0242.790] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00139_.gif"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x296f)) returned 1 [0242.790] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0242.790] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0242.791] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00139_.gif"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x296f)) returned 1 [0242.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0242.791] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0242.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0242.791] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3bcc, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="AG00142_.GIF", cAlternateFileName="")) returned 1 [0242.791] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b30 [0242.791] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213818 [0242.792] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0242.792] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213818 | out: hHeap=0x1f0000) returned 1 [0242.792] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0242.792] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b30 | out: hHeap=0x1f0000) returned 1 [0242.793] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00142_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0242.794] GetFileType (hFile=0x224) returned 0x1 [0242.795] CloseHandle (hObject=0x224) returned 1 [0242.795] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0242.795] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00142_.gif"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3bcc)) returned 1 [0242.795] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0242.797] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0242.797] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00142_.gif"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3bcc)) returned 1 [0242.797] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0242.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0242.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0242.798] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14c3, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="AG00154_.GIF", cAlternateFileName="")) returned 1 [0242.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0242.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0242.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0242.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0242.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0242.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0242.799] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00154_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0242.800] GetFileType (hFile=0x224) returned 0x1 [0242.800] CloseHandle (hObject=0x224) returned 1 [0242.801] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0242.801] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00154_.gif"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14c3)) returned 1 [0242.801] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0242.801] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0242.801] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00154_.gif"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14c3)) returned 1 [0242.802] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0242.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0242.802] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0242.802] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="AG00157_.GIF", cAlternateFileName="")) returned 1 [0242.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b30 [0242.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0242.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0242.802] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0242.802] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0242.803] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b30 | out: hHeap=0x1f0000) returned 1 [0242.803] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00157_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0242.804] GetFileType (hFile=0x224) returned 0x1 [0242.805] CloseHandle (hObject=0x224) returned 1 [0242.805] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0242.805] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00157_.gif"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x135b)) returned 1 [0242.806] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0242.806] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0242.806] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00157_.gif"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x135b)) returned 1 [0242.806] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0242.806] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0242.806] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0242.807] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13a6, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="AG00158_.GIF", cAlternateFileName="")) returned 1 [0242.807] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a40 [0242.807] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0242.807] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0242.807] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0242.807] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0242.808] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a40 | out: hHeap=0x1f0000) returned 1 [0242.808] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00158_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0242.809] GetFileType (hFile=0x224) returned 0x1 [0242.809] CloseHandle (hObject=0x224) returned 1 [0242.810] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0242.810] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00158_.gif"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13a6)) returned 1 [0242.810] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0242.810] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0242.810] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00158_.gif"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13a6)) returned 1 [0242.810] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0242.810] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0242.811] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0242.811] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x47a, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="AG00160_.GIF", cAlternateFileName="")) returned 1 [0242.811] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260ba8 [0242.811] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2132c8 [0242.811] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0242.811] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2132c8 | out: hHeap=0x1f0000) returned 1 [0242.811] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0242.811] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260ba8 | out: hHeap=0x1f0000) returned 1 [0242.812] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00160_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0242.813] GetFileType (hFile=0x224) returned 0x1 [0242.813] CloseHandle (hObject=0x224) returned 1 [0242.814] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0242.814] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00160_.gif"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x47a)) returned 1 [0242.814] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0242.814] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0243.050] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00160_.gif"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x47a)) returned 1 [0243.050] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0243.050] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0243.050] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0243.050] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d9f, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="AG00161_.GIF", cAlternateFileName="")) returned 1 [0243.050] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0243.051] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213570 [0243.051] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0243.051] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213570 | out: hHeap=0x1f0000) returned 1 [0243.051] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0243.051] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0243.051] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00161_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0243.053] GetFileType (hFile=0x1d8) returned 0x1 [0243.053] CloseHandle (hObject=0x1d8) returned 1 [0243.053] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0243.054] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00161_.gif"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d9f)) returned 1 [0243.054] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0243.054] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0243.054] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00161_.gif"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d9f)) returned 1 [0243.054] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0243.054] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0243.054] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0243.054] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b48, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="AG00163_.GIF", cAlternateFileName="")) returned 1 [0243.054] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0243.054] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0243.054] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0243.054] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0243.055] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0243.055] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0243.055] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00163_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0243.056] GetFileType (hFile=0x1d8) returned 0x1 [0243.056] CloseHandle (hObject=0x1d8) returned 1 [0243.056] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0243.056] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00163_.gif"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b48)) returned 1 [0243.056] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0243.056] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0243.056] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00163_.gif"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b48)) returned 1 [0243.057] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0243.057] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0243.057] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0243.057] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x33c6, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="AG00164_.GIF", cAlternateFileName="")) returned 1 [0243.057] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0243.057] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0243.057] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0243.057] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0243.057] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0243.057] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0243.058] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00164_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0243.058] GetFileType (hFile=0x1d8) returned 0x1 [0243.058] CloseHandle (hObject=0x1d8) returned 1 [0243.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0243.059] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00164_.gif"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x33c6)) returned 1 [0243.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0243.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0243.059] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00164_.gif"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x33c6)) returned 1 [0243.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0243.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0243.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0243.059] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2186, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="AG00165_.GIF", cAlternateFileName="")) returned 1 [0243.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260630 [0243.060] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213570 [0243.060] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0243.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213570 | out: hHeap=0x1f0000) returned 1 [0243.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0243.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260630 | out: hHeap=0x1f0000) returned 1 [0243.060] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00165_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0243.062] GetFileType (hFile=0x1d8) returned 0x1 [0243.062] CloseHandle (hObject=0x1d8) returned 1 [0243.063] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0243.063] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00165_.gif"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2186)) returned 1 [0243.063] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0243.063] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0243.063] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00165_.gif"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2186)) returned 1 [0243.063] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0243.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0243.064] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0243.064] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x131e, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="AG00167_.GIF", cAlternateFileName="")) returned 1 [0243.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260630 [0243.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0243.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0243.064] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0243.064] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0243.064] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260630 | out: hHeap=0x1f0000) returned 1 [0243.065] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00167_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0243.065] GetFileType (hFile=0x1d8) returned 0x1 [0243.066] CloseHandle (hObject=0x1d8) returned 1 [0243.066] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0243.066] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00167_.gif"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x131e)) returned 1 [0243.066] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0243.066] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0243.066] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00167_.gif"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x131e)) returned 1 [0243.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0243.067] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0243.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0243.067] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14ff, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="AG00169_.GIF", cAlternateFileName="")) returned 1 [0243.067] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260518 [0243.067] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0243.067] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0243.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0243.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0243.068] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0243.068] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00169_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0243.070] GetFileType (hFile=0x1d8) returned 0x1 [0243.070] CloseHandle (hObject=0x1d8) returned 1 [0243.071] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0243.071] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00169_.gif"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14ff)) returned 1 [0243.071] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0243.071] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0243.071] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00169_.gif"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14ff)) returned 1 [0243.071] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0243.071] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0243.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0243.072] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2420, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="AG00170_.GIF", cAlternateFileName="")) returned 1 [0243.072] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0243.072] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e88 [0243.072] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0243.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e88 | out: hHeap=0x1f0000) returned 1 [0243.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0243.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0243.073] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00170_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0243.073] GetFileType (hFile=0x1d8) returned 0x1 [0243.074] CloseHandle (hObject=0x1d8) returned 1 [0243.074] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0243.074] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00170_.gif"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2420)) returned 1 [0243.074] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0243.074] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0243.074] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00170_.gif"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2420)) returned 1 [0243.075] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0243.075] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0243.075] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0243.075] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1398, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="AG00171_.GIF", cAlternateFileName="")) returned 1 [0243.075] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260518 [0243.075] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212a48 [0243.075] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0243.075] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212a48 | out: hHeap=0x1f0000) returned 1 [0243.076] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0243.076] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0243.076] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00171_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0243.077] GetFileType (hFile=0x1d8) returned 0x1 [0243.078] CloseHandle (hObject=0x1d8) returned 1 [0243.078] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0243.078] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00171_.gif"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1398)) returned 1 [0243.079] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0243.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0243.079] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00171_.gif"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1398)) returned 1 [0243.079] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0243.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0243.079] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0243.079] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1126, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="AG00172_.GIF", cAlternateFileName="")) returned 1 [0243.080] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0243.080] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212a48 [0243.080] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0243.080] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212a48 | out: hHeap=0x1f0000) returned 1 [0243.080] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0243.080] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0243.081] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00172_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0243.081] GetFileType (hFile=0x1d8) returned 0x1 [0243.084] CloseHandle (hObject=0x1d8) returned 1 [0243.084] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0243.084] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00172_.gif"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1126)) returned 1 [0243.084] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0243.085] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0243.085] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00172_.gif"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1126)) returned 1 [0243.085] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0243.085] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0243.085] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0243.085] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf7e, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="AG00174_.GIF", cAlternateFileName="")) returned 1 [0243.085] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260518 [0243.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0243.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0243.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0243.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0243.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0243.087] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00174_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0243.338] GetFileType (hFile=0x200) returned 0x1 [0243.338] CloseHandle (hObject=0x200) returned 1 [0243.339] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0243.340] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00174_.gif"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf7e)) returned 1 [0243.341] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0243.341] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0243.341] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00174_.gif"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf7e)) returned 1 [0243.341] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0243.341] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0243.341] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0243.374] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd32, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="AG00175_.GIF", cAlternateFileName="")) returned 1 [0243.374] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0243.374] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0243.374] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0243.375] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0243.375] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0243.375] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0243.376] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00175_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0243.377] GetFileType (hFile=0x1e0) returned 0x1 [0243.377] CloseHandle (hObject=0x1e0) returned 1 [0243.378] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0243.378] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00175_.gif"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd32)) returned 1 [0243.378] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0243.378] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0243.378] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00175_.gif"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd32)) returned 1 [0243.379] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0243.379] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0243.379] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0243.379] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc30, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="AG00176_.GIF", cAlternateFileName="")) returned 1 [0243.380] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0243.380] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0243.380] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0243.381] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0243.381] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0243.381] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0243.381] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00176_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0243.383] GetFileType (hFile=0x1e0) returned 0x1 [0243.384] CloseHandle (hObject=0x1e0) returned 1 [0243.384] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0243.384] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00176_.gif"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc30)) returned 1 [0243.384] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0243.384] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0243.384] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00176_.gif"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc30)) returned 1 [0243.385] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0243.385] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0243.385] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0243.385] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbd2, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="AN00010_.WMF", cAlternateFileName="")) returned 1 [0243.385] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0243.385] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0243.385] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0243.386] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0243.386] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0243.386] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0243.386] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00010_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00010_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0243.387] GetFileType (hFile=0x1e0) returned 0x1 [0243.388] CloseHandle (hObject=0x1e0) returned 1 [0243.388] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0243.388] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00010_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00010_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbd2)) returned 1 [0243.388] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0243.388] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0243.388] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00010_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00010_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbd2)) returned 1 [0243.388] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0243.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0243.389] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0243.389] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x127e, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="AN00015_.WMF", cAlternateFileName="")) returned 1 [0243.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0243.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0243.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0243.389] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0243.389] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0243.390] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0243.390] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00015_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0243.391] GetFileType (hFile=0x1e0) returned 0x1 [0243.391] CloseHandle (hObject=0x1e0) returned 1 [0243.392] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0243.392] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00015_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x127e)) returned 1 [0243.392] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0243.392] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0243.392] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00015_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x127e)) returned 1 [0243.392] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0243.392] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0243.393] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0243.393] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1634, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="AN00790_.WMF", cAlternateFileName="")) returned 1 [0243.393] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260518 [0243.393] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2132c8 [0243.393] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0243.393] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2132c8 | out: hHeap=0x1f0000) returned 1 [0243.393] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0243.393] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0243.394] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00790_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00790_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0243.395] GetFileType (hFile=0x1e0) returned 0x1 [0243.396] CloseHandle (hObject=0x1e0) returned 1 [0243.396] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0243.396] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00790_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00790_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1634)) returned 1 [0243.396] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0243.396] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0243.396] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00790_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00790_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1634)) returned 1 [0243.396] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0243.396] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0243.396] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0243.396] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5062, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="AN00853_.WMF", cAlternateFileName="")) returned 1 [0243.397] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0243.397] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0243.397] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0243.397] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0243.397] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0243.397] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0243.397] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00853_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00853_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0243.398] GetFileType (hFile=0x1e0) returned 0x1 [0243.398] CloseHandle (hObject=0x1e0) returned 1 [0243.398] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0243.399] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00853_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00853_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5062)) returned 1 [0243.399] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0243.399] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0243.399] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00853_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00853_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5062)) returned 1 [0243.399] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0243.399] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0243.399] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0243.400] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a50, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="AN00914_.WMF", cAlternateFileName="")) returned 1 [0243.400] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0243.400] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e88 [0243.400] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0243.400] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e88 | out: hHeap=0x1f0000) returned 1 [0243.400] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0243.400] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0243.401] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00914_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00914_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0243.401] GetFileType (hFile=0x1e0) returned 0x1 [0243.401] CloseHandle (hObject=0x1e0) returned 1 [0243.402] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0243.402] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00914_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00914_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a50)) returned 1 [0243.402] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0243.402] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0243.402] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00914_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00914_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a50)) returned 1 [0243.402] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0243.402] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0243.402] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0243.403] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x385c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="AN00932_.WMF", cAlternateFileName="")) returned 1 [0243.403] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0243.403] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0243.403] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0243.403] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0243.403] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0243.403] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0243.404] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00932_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00932_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0243.404] GetFileType (hFile=0x1e0) returned 0x1 [0243.404] CloseHandle (hObject=0x1e0) returned 1 [0243.405] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0243.405] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00932_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00932_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x385c)) returned 1 [0243.592] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0243.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0243.592] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00932_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00932_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x385c)) returned 1 [0243.593] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0243.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0243.593] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0243.593] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ba0, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="AN00965_.WMF", cAlternateFileName="")) returned 1 [0243.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0243.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212a48 [0243.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0243.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212a48 | out: hHeap=0x1f0000) returned 1 [0243.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0243.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0243.719] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00965_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00965_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0243.719] GetFileType (hFile=0x230) returned 0x1 [0243.719] CloseHandle (hObject=0x230) returned 1 [0243.720] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0243.720] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00965_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00965_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ba0)) returned 1 [0243.720] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0243.720] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0243.720] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00965_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00965_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ba0)) returned 1 [0243.720] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0243.721] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0243.721] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0243.721] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd10, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="AN01039_.WMF", cAlternateFileName="")) returned 1 [0243.721] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260518 [0243.721] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2134e8 [0243.721] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0243.721] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2134e8 | out: hHeap=0x1f0000) returned 1 [0243.721] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0243.721] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0243.722] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01039_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01039_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0243.722] GetFileType (hFile=0x230) returned 0x1 [0243.723] CloseHandle (hObject=0x230) returned 1 [0243.723] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0243.724] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01039_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01039_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd10)) returned 1 [0243.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0243.724] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0243.724] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01039_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01039_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd10)) returned 1 [0243.724] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0243.724] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0243.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0243.725] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x63c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="AN01044_.WMF", cAlternateFileName="")) returned 1 [0243.725] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0243.725] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0243.725] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0243.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0243.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0243.725] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0243.726] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01044_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01044_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0243.728] GetFileType (hFile=0x230) returned 0x1 [0243.728] CloseHandle (hObject=0x230) returned 1 [0243.728] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0243.729] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01044_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01044_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x63c)) returned 1 [0243.729] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0243.729] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0243.729] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01044_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01044_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x63c)) returned 1 [0243.729] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0243.729] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0243.729] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0243.729] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f20, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="AN01060_.WMF", cAlternateFileName="")) returned 1 [0243.730] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0243.730] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0243.730] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0243.730] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0243.730] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0243.730] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0243.731] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01060_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01060_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0243.731] GetFileType (hFile=0x230) returned 0x1 [0243.732] CloseHandle (hObject=0x230) returned 1 [0243.732] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0243.732] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01060_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01060_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f20)) returned 1 [0243.733] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0243.733] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0243.733] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01060_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01060_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f20)) returned 1 [0243.733] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0243.734] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0243.734] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0243.734] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x728, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="AN01084_.WMF", cAlternateFileName="")) returned 1 [0243.734] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609a0 [0243.734] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0243.734] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0243.734] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0243.735] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0243.735] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0243.735] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01084_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01084_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0243.736] GetFileType (hFile=0x230) returned 0x1 [0243.736] CloseHandle (hObject=0x230) returned 1 [0243.737] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0243.737] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01084_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01084_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x728)) returned 1 [0243.737] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0243.737] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0243.737] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01084_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01084_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x728)) returned 1 [0243.737] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0243.737] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0243.737] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0243.738] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x66dc, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="AN01173_.WMF", cAlternateFileName="")) returned 1 [0243.738] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0243.738] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212a48 [0243.738] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0243.738] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212a48 | out: hHeap=0x1f0000) returned 1 [0243.738] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0243.738] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0243.739] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01173_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0243.740] GetFileType (hFile=0x230) returned 0x1 [0243.741] CloseHandle (hObject=0x230) returned 1 [0243.742] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0243.742] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01173_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x66dc)) returned 1 [0243.742] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0243.742] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0243.742] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01173_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x66dc)) returned 1 [0243.743] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0243.743] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0243.743] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0243.743] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6cd2, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="AN01174_.WMF", cAlternateFileName="")) returned 1 [0243.743] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0243.743] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2134e8 [0243.743] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0243.744] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2134e8 | out: hHeap=0x1f0000) returned 1 [0243.744] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0243.744] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0243.745] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01174_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0243.745] GetFileType (hFile=0x230) returned 0x1 [0243.746] CloseHandle (hObject=0x230) returned 1 [0243.746] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0243.746] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01174_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6cd2)) returned 1 [0243.746] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0243.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0243.747] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01174_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6cd2)) returned 1 [0243.747] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0243.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0243.747] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0243.747] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xea2, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="AN01184_.WMF", cAlternateFileName="")) returned 1 [0243.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0243.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0243.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0243.748] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0243.748] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0243.748] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0243.748] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01184_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0243.749] GetFileType (hFile=0x230) returned 0x1 [0243.750] CloseHandle (hObject=0x230) returned 1 [0243.751] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0243.751] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01184_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xea2)) returned 1 [0243.751] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0243.751] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0243.751] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01184_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xea2)) returned 1 [0243.751] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0243.752] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0243.752] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0243.752] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16cc, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="AN01216_.WMF", cAlternateFileName="")) returned 1 [0243.752] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0243.752] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0243.752] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0243.752] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0243.752] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0243.752] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0243.753] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01216_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01216_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0243.754] GetFileType (hFile=0x230) returned 0x1 [0243.754] CloseHandle (hObject=0x230) returned 1 [0243.755] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0243.755] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01216_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01216_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16cc)) returned 1 [0243.755] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0243.755] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0243.755] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01216_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01216_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16cc)) returned 1 [0243.755] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0243.756] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0243.756] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0243.756] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc4, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="AN01218_.WMF", cAlternateFileName="")) returned 1 [0243.756] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0243.756] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0243.756] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0243.756] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0243.756] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0243.757] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0243.757] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01218_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01218_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0243.757] GetFileType (hFile=0x230) returned 0x1 [0243.758] CloseHandle (hObject=0x230) returned 1 [0243.758] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0243.759] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01218_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01218_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc4)) returned 1 [0243.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0243.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0243.759] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01218_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01218_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc4)) returned 1 [0243.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0243.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0243.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0243.759] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xac4, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="AN01251_.WMF", cAlternateFileName="")) returned 1 [0243.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0243.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0243.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0243.760] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0243.760] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0243.760] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0243.761] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01251_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01251_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230 [0243.761] GetFileType (hFile=0x230) returned 0x1 [0243.762] CloseHandle (hObject=0x230) returned 1 [0243.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0243.762] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01251_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01251_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xac4)) returned 1 [0243.763] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0243.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0243.763] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01251_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01251_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xac4)) returned 1 [0243.763] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0243.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0243.763] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0243.764] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ccc, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="AN01545_.WMF", cAlternateFileName="")) returned 1 [0243.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260518 [0243.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0243.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0243.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0244.151] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0244.151] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0244.152] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01545_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01545_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0244.152] GetFileType (hFile=0x1b0) returned 0x1 [0244.152] CloseHandle (hObject=0x1b0) returned 1 [0244.153] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0244.153] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01545_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01545_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ccc)) returned 1 [0244.153] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0244.153] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0244.153] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01545_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01545_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ccc)) returned 1 [0244.153] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0244.154] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0244.154] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0244.154] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d74, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="AN02122_.WMF", cAlternateFileName="")) returned 1 [0244.154] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0244.154] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0244.154] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0244.154] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0244.154] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0244.154] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0244.155] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02122_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02122_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0244.156] GetFileType (hFile=0x1b0) returned 0x1 [0244.157] CloseHandle (hObject=0x1b0) returned 1 [0244.157] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0244.157] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02122_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02122_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d74)) returned 1 [0244.157] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0244.157] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0244.157] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02122_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02122_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d74)) returned 1 [0244.157] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0244.157] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0244.158] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0244.158] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19e8, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="AN02559_.WMF", cAlternateFileName="")) returned 1 [0244.158] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260630 [0244.158] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0244.158] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0244.158] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0244.158] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0244.158] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260630 | out: hHeap=0x1f0000) returned 1 [0244.159] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02559_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02559_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0244.160] GetFileType (hFile=0x1b0) returned 0x1 [0244.161] CloseHandle (hObject=0x1b0) returned 1 [0244.161] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0244.161] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02559_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02559_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19e8)) returned 1 [0244.161] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0244.161] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0244.161] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02559_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02559_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19e8)) returned 1 [0244.162] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0244.162] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0244.162] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0244.162] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc89dc9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x83c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="AN02724_.WMF", cAlternateFileName="")) returned 1 [0244.162] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0244.162] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0244.162] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0244.162] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0244.163] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0244.163] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0244.163] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02724_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02724_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0244.164] GetFileType (hFile=0x1b0) returned 0x1 [0244.164] CloseHandle (hObject=0x1b0) returned 1 [0244.165] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0244.165] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02724_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02724_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc89dc9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x83c)) returned 1 [0244.165] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0244.165] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0244.165] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02724_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02724_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc89dc9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x83c)) returned 1 [0244.165] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0244.165] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0244.165] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0244.165] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2418, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="AN03500_.WMF", cAlternateFileName="")) returned 1 [0244.165] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260770 [0244.166] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0244.166] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0244.166] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0244.166] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0244.166] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0244.166] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN03500_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an03500_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0244.167] GetFileType (hFile=0x1b0) returned 0x1 [0244.167] CloseHandle (hObject=0x1b0) returned 1 [0244.167] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0244.167] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN03500_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an03500_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2418)) returned 1 [0244.168] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0244.168] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0244.168] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN03500_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an03500_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2418)) returned 1 [0244.168] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0244.168] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0244.168] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0244.168] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x928, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="AN04108_.WMF", cAlternateFileName="")) returned 1 [0244.168] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0244.168] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0244.168] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0244.168] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0244.168] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0244.168] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0244.169] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04108_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04108_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0244.170] GetFileType (hFile=0x1b0) returned 0x1 [0244.171] CloseHandle (hObject=0x1b0) returned 1 [0244.171] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0244.171] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04108_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04108_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x928)) returned 1 [0244.171] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0244.171] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0244.171] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04108_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04108_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x928)) returned 1 [0244.171] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0244.172] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0244.172] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0244.172] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17ac, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="AN04117_.WMF", cAlternateFileName="")) returned 1 [0244.172] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0244.172] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0244.172] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0244.172] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0244.172] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0244.172] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0244.173] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04117_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04117_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0244.173] GetFileType (hFile=0x1b0) returned 0x1 [0244.173] CloseHandle (hObject=0x1b0) returned 1 [0244.174] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0244.174] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04117_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04117_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17ac)) returned 1 [0244.174] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0244.174] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0244.174] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04117_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04117_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17ac)) returned 1 [0244.174] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0244.174] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0244.174] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0244.174] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd58, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="AN04134_.WMF", cAlternateFileName="")) returned 1 [0244.175] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260630 [0244.175] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0244.175] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0244.175] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0244.175] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0244.175] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260630 | out: hHeap=0x1f0000) returned 1 [0244.175] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04134_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04134_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0244.176] GetFileType (hFile=0x1b0) returned 0x1 [0244.176] CloseHandle (hObject=0x1b0) returned 1 [0244.176] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0244.176] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04134_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04134_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd58)) returned 1 [0244.177] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0244.177] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0244.177] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04134_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04134_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd58)) returned 1 [0244.177] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0244.177] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0244.177] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0244.177] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa4c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="AN04174_.WMF", cAlternateFileName="")) returned 1 [0244.177] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0244.177] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0244.177] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0244.177] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0244.178] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0244.178] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0244.179] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04174_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0244.179] GetFileType (hFile=0x1b0) returned 0x1 [0244.180] CloseHandle (hObject=0x1b0) returned 1 [0244.180] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0244.180] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04174_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa4c)) returned 1 [0244.180] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0244.180] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0244.180] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04174_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa4c)) returned 1 [0244.181] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0244.181] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0244.181] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0244.181] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19ec, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="AN04191_.WMF", cAlternateFileName="")) returned 1 [0244.181] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260518 [0244.181] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0244.181] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0244.181] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0244.181] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0244.181] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0244.182] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04191_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04191_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0244.182] GetFileType (hFile=0x1b0) returned 0x1 [0244.182] CloseHandle (hObject=0x1b0) returned 1 [0244.183] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0244.183] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04191_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04191_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19ec)) returned 1 [0244.183] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0244.183] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0244.183] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04191_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04191_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19ec)) returned 1 [0244.183] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0244.183] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0244.183] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0244.184] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1204, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="AN04195_.WMF", cAlternateFileName="")) returned 1 [0244.184] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260630 [0244.184] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0244.184] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0244.184] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0244.184] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0244.184] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260630 | out: hHeap=0x1f0000) returned 1 [0244.184] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04195_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04195_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0244.185] GetFileType (hFile=0x1b0) returned 0x1 [0244.185] CloseHandle (hObject=0x1b0) returned 1 [0244.185] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0244.185] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04195_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04195_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1204)) returned 1 [0244.186] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0244.186] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0244.186] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04195_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04195_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1204)) returned 1 [0244.186] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0244.186] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0244.186] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0244.186] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc48, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="AN04196_.WMF", cAlternateFileName="")) returned 1 [0244.186] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0244.186] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0244.186] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0244.187] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0244.187] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0244.187] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0244.187] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04196_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04196_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0244.532] GetFileType (hFile=0x200) returned 0x1 [0244.533] CloseHandle (hObject=0x200) returned 1 [0244.533] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0244.533] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04196_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04196_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc48)) returned 1 [0244.534] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0244.534] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0244.534] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04196_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04196_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc48)) returned 1 [0244.534] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0244.534] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0244.534] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0244.534] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1df4, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="AN04206_.WMF", cAlternateFileName="")) returned 1 [0244.534] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609f0 [0244.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0244.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0244.535] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0244.535] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0244.535] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609f0 | out: hHeap=0x1f0000) returned 1 [0244.536] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04206_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04206_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0244.537] GetFileType (hFile=0x200) returned 0x1 [0244.538] CloseHandle (hObject=0x200) returned 1 [0244.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0244.539] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04206_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04206_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1df4)) returned 1 [0244.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0244.540] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0244.540] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04206_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04206_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1df4)) returned 1 [0244.540] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0244.540] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0244.540] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0244.540] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x212c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="AN04225_.WMF", cAlternateFileName="")) returned 1 [0244.541] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609f0 [0244.541] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0244.541] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0244.541] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0244.541] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0244.541] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609f0 | out: hHeap=0x1f0000) returned 1 [0244.542] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04225_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04225_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0244.543] GetFileType (hFile=0x200) returned 0x1 [0244.543] CloseHandle (hObject=0x200) returned 1 [0244.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0244.548] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04225_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04225_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x212c)) returned 1 [0244.548] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0244.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0244.548] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04225_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04225_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x212c)) returned 1 [0244.549] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0244.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0244.549] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0244.549] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e7c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="AN04235_.WMF", cAlternateFileName="")) returned 1 [0244.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b30 [0244.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0244.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0244.549] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0244.550] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0244.550] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b30 | out: hHeap=0x1f0000) returned 1 [0244.550] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04235_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04235_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0244.552] GetFileType (hFile=0x200) returned 0x1 [0244.552] CloseHandle (hObject=0x200) returned 1 [0244.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0244.554] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04235_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04235_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e7c)) returned 1 [0244.554] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0244.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0244.554] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04235_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04235_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e7c)) returned 1 [0244.554] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0244.555] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0244.555] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0244.555] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc89dc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc89dc9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e7c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="AN04267_.WMF", cAlternateFileName="")) returned 1 [0244.555] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c70 [0244.555] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0244.555] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0244.555] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0244.556] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0244.556] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c70 | out: hHeap=0x1f0000) returned 1 [0244.556] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04267_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04267_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0244.557] GetFileType (hFile=0x200) returned 0x1 [0244.557] CloseHandle (hObject=0x200) returned 1 [0244.558] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0244.558] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04267_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04267_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc89dc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc89dc9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e7c)) returned 1 [0244.558] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0244.558] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0244.558] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04267_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04267_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc89dc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc89dc9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e7c)) returned 1 [0244.559] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0244.559] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0244.559] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0244.559] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e0, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="AN04269_.WMF", cAlternateFileName="")) returned 1 [0244.561] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c48 [0244.561] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0244.561] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0244.561] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0244.561] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0244.561] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0244.562] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04269_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04269_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0244.563] GetFileType (hFile=0x200) returned 0x1 [0244.563] CloseHandle (hObject=0x200) returned 1 [0244.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0244.564] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04269_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04269_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e0)) returned 1 [0244.564] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0244.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0244.564] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04269_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04269_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e0)) returned 1 [0244.564] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0244.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0244.564] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0244.564] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9bc, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="AN04323_.WMF", cAlternateFileName="")) returned 1 [0244.565] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b08 [0244.565] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2132c8 [0244.565] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0244.565] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2132c8 | out: hHeap=0x1f0000) returned 1 [0244.565] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0244.565] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b08 | out: hHeap=0x1f0000) returned 1 [0244.566] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04323_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04323_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0244.566] GetFileType (hFile=0x200) returned 0x1 [0244.567] CloseHandle (hObject=0x200) returned 1 [0244.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0244.567] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04323_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04323_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9bc)) returned 1 [0244.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0244.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0244.568] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04323_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04323_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9bc)) returned 1 [0244.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0244.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0244.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0244.568] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc89dc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc89dc9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd14, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="AN04326_.WMF", cAlternateFileName="")) returned 1 [0244.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b08 [0244.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0244.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0244.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0244.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0244.892] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b08 | out: hHeap=0x1f0000) returned 1 [0244.944] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04326_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04326_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0244.945] GetFileType (hFile=0x1d8) returned 0x1 [0244.946] CloseHandle (hObject=0x1d8) returned 1 [0244.946] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0244.946] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04326_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04326_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc89dc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc89dc9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd14)) returned 1 [0244.946] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0244.946] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0244.947] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04326_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04326_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc89dc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc89dc9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd14)) returned 1 [0244.947] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0244.947] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0244.947] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0244.947] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10c8, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="AN04332_.WMF", cAlternateFileName="")) returned 1 [0244.947] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0244.947] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0244.948] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0244.948] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0244.948] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0244.948] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0244.949] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04332_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04332_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0244.949] GetFileType (hFile=0x1d8) returned 0x1 [0244.950] CloseHandle (hObject=0x1d8) returned 1 [0244.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0244.951] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04332_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04332_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10c8)) returned 1 [0244.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0244.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0244.951] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04332_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04332_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10c8)) returned 1 [0244.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0244.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0244.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0244.952] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc9c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="AN04355_.WMF", cAlternateFileName="")) returned 1 [0244.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0244.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0244.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0244.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0244.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0244.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0244.953] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04355_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04355_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0244.954] GetFileType (hFile=0x1d8) returned 0x1 [0244.954] CloseHandle (hObject=0x1d8) returned 1 [0244.955] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0244.955] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04355_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04355_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc9c)) returned 1 [0244.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0244.956] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0244.956] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04355_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04355_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc9c)) returned 1 [0244.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0244.956] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0244.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0244.956] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12c8, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="AN04369_.WMF", cAlternateFileName="")) returned 1 [0244.957] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238258 [0244.957] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213570 [0244.957] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0244.957] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213570 | out: hHeap=0x1f0000) returned 1 [0244.957] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0244.957] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238258 | out: hHeap=0x1f0000) returned 1 [0244.958] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04369_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04369_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0244.960] GetFileType (hFile=0x1d8) returned 0x1 [0244.961] CloseHandle (hObject=0x1d8) returned 1 [0244.961] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0244.961] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04369_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04369_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12c8)) returned 1 [0244.962] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0244.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0244.962] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04369_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04369_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12c8)) returned 1 [0244.962] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0244.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0244.962] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0244.962] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1384, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="AN04384_.WMF", cAlternateFileName="")) returned 1 [0244.963] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0244.963] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2132c8 [0244.963] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0244.963] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2132c8 | out: hHeap=0x1f0000) returned 1 [0244.963] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0244.963] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0244.964] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04384_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04384_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0244.965] GetFileType (hFile=0x1d8) returned 0x1 [0244.965] CloseHandle (hObject=0x1d8) returned 1 [0244.966] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0244.966] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04384_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04384_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1384)) returned 1 [0244.966] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0244.966] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0244.966] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04384_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04384_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1384)) returned 1 [0244.966] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0244.967] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0244.967] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0244.967] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x138c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="AN04385_.WMF", cAlternateFileName="")) returned 1 [0244.967] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0244.967] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212cf0 [0244.967] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0244.967] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212cf0 | out: hHeap=0x1f0000) returned 1 [0244.967] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0244.968] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0244.968] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04385_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04385_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0244.969] GetFileType (hFile=0x1d8) returned 0x1 [0244.969] CloseHandle (hObject=0x1d8) returned 1 [0244.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0244.969] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04385_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04385_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x138c)) returned 1 [0244.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0244.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0244.970] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04385_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04385_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x138c)) returned 1 [0244.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0244.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0244.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0244.970] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1cd8, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="BABY_01.MID", cAlternateFileName="")) returned 1 [0244.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0244.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0244.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0244.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0244.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0244.971] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0244.971] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BABY_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\baby_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0244.971] GetFileType (hFile=0x1d8) returned 0x1 [0244.972] CloseHandle (hObject=0x1d8) returned 1 [0244.972] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0244.972] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BABY_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\baby_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1cd8)) returned 1 [0244.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0244.972] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0244.973] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BABY_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\baby_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1cd8)) returned 1 [0244.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0244.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0244.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0244.973] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1306, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="BD00116_.WMF", cAlternateFileName="")) returned 1 [0244.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0244.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0244.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0244.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0244.973] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0244.974] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0244.974] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00116_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00116_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0244.975] GetFileType (hFile=0x1d8) returned 0x1 [0244.976] CloseHandle (hObject=0x1d8) returned 1 [0244.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0244.976] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00116_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00116_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1306)) returned 1 [0244.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0244.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0244.977] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00116_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00116_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1306)) returned 1 [0244.977] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0244.977] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0244.977] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0244.977] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6906, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="BD00141_.WMF", cAlternateFileName="")) returned 1 [0244.977] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238348 [0244.977] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0244.977] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0244.977] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0244.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0244.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238348 | out: hHeap=0x1f0000) returned 1 [0244.978] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00141_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00141_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0244.979] GetFileType (hFile=0x1d8) returned 0x1 [0244.979] CloseHandle (hObject=0x1d8) returned 1 [0244.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0244.979] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00141_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00141_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6906)) returned 1 [0244.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0244.980] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0244.980] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00141_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00141_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6906)) returned 1 [0244.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0244.980] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0244.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0244.980] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7114, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="BD00146_.WMF", cAlternateFileName="")) returned 1 [0244.981] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0244.981] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0244.981] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0244.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0244.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0244.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0244.982] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00146_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00146_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0244.982] GetFileType (hFile=0x1d8) returned 0x1 [0244.983] CloseHandle (hObject=0x1d8) returned 1 [0244.983] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0244.983] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00146_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00146_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7114)) returned 1 [0244.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0244.983] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0244.984] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00146_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00146_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7114)) returned 1 [0244.984] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0244.984] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0244.984] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0244.984] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d74, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="BD00155_.WMF", cAlternateFileName="")) returned 1 [0244.984] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0244.984] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2134e8 [0244.984] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0244.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2134e8 | out: hHeap=0x1f0000) returned 1 [0244.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0244.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0244.985] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00155_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00155_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0244.986] GetFileType (hFile=0x1d8) returned 0x1 [0244.986] CloseHandle (hObject=0x1d8) returned 1 [0244.987] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0244.987] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00155_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00155_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d74)) returned 1 [0244.987] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0244.987] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0244.987] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00155_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00155_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d74)) returned 1 [0244.987] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0244.988] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0244.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0244.988] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x57f4, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="BD00160_.WMF", cAlternateFileName="")) returned 1 [0244.988] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0244.988] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0244.988] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0244.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0244.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0244.989] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0244.990] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00160_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00160_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0244.990] GetFileType (hFile=0x1d8) returned 0x1 [0245.366] CloseHandle (hObject=0x1d8) returned 1 [0245.367] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0245.367] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00160_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00160_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x57f4)) returned 1 [0245.367] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0245.367] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0245.367] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00160_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00160_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x57f4)) returned 1 [0245.368] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0245.368] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0245.368] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0245.368] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3f34, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="BD00173_.WMF", cAlternateFileName="")) returned 1 [0245.368] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0245.368] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0245.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0245.369] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0245.369] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0245.369] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0245.370] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00173_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0245.371] GetFileType (hFile=0x1d8) returned 0x1 [0245.371] CloseHandle (hObject=0x1d8) returned 1 [0245.372] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0245.372] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00173_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3f34)) returned 1 [0245.372] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0245.372] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0245.373] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00173_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3f34)) returned 1 [0245.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0245.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0245.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0245.373] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4354, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="BD05119_.WMF", cAlternateFileName="")) returned 1 [0245.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0245.374] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0245.374] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0245.374] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0245.374] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0245.374] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0245.375] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD05119_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd05119_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0245.376] GetFileType (hFile=0x1d8) returned 0x1 [0245.377] CloseHandle (hObject=0x1d8) returned 1 [0245.378] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0245.378] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD05119_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd05119_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4354)) returned 1 [0245.378] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0245.378] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0245.378] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD05119_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd05119_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4354)) returned 1 [0245.379] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0245.379] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0245.379] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0245.379] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ef0, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="BD06102_.WMF", cAlternateFileName="")) returned 1 [0245.379] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0245.380] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0245.380] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0245.380] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0245.380] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0245.380] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0245.382] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06102_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06102_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0245.383] GetFileType (hFile=0x1d8) returned 0x1 [0245.384] CloseHandle (hObject=0x1d8) returned 1 [0245.384] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0245.384] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06102_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06102_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ef0)) returned 1 [0245.385] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0245.385] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0245.385] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06102_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06102_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ef0)) returned 1 [0245.385] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0245.385] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0245.386] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0245.386] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4124, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="BD06200_.WMF", cAlternateFileName="")) returned 1 [0245.386] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0245.386] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0245.386] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0245.386] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0245.386] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0245.387] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0245.387] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06200_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06200_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0245.388] GetFileType (hFile=0x1d8) returned 0x1 [0245.389] CloseHandle (hObject=0x1d8) returned 1 [0245.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0245.390] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06200_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06200_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4124)) returned 1 [0245.390] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0245.390] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0245.390] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06200_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06200_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4124)) returned 1 [0245.390] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0245.390] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0245.391] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0245.391] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x687c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="BD07761_.WMF", cAlternateFileName="")) returned 1 [0245.391] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0245.391] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0245.391] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0245.391] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0245.391] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0245.392] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0245.393] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07761_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07761_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0245.394] GetFileType (hFile=0x1d8) returned 0x1 [0245.395] CloseHandle (hObject=0x1d8) returned 1 [0245.395] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0245.395] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07761_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07761_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x687c)) returned 1 [0245.396] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0245.396] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0245.396] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07761_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07761_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x687c)) returned 1 [0245.396] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0245.396] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0245.396] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0245.396] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x133c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="BD07804_.WMF", cAlternateFileName="")) returned 1 [0245.397] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0245.397] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0245.397] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0245.397] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0245.398] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0245.398] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0245.399] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07804_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07804_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0245.399] GetFileType (hFile=0x1d8) returned 0x1 [0245.400] CloseHandle (hObject=0x1d8) returned 1 [0245.400] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0245.401] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07804_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07804_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x133c)) returned 1 [0245.401] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0245.401] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0245.401] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07804_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07804_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x133c)) returned 1 [0245.401] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0245.401] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0245.402] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0245.402] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfe2, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="BD07831_.WMF", cAlternateFileName="")) returned 1 [0245.402] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0245.402] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0245.402] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0245.402] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0245.402] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0245.402] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0245.403] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07831_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07831_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0245.404] GetFileType (hFile=0x1d8) returned 0x1 [0245.404] CloseHandle (hObject=0x1d8) returned 1 [0245.405] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0245.405] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07831_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07831_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfe2)) returned 1 [0245.405] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0245.405] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0245.405] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07831_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07831_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfe2)) returned 1 [0245.406] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0245.406] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0245.406] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0245.406] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5f00, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="BD08758_.WMF", cAlternateFileName="")) returned 1 [0245.406] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380f0 [0245.406] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0245.406] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0245.407] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0245.407] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0245.407] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380f0 | out: hHeap=0x1f0000) returned 1 [0245.408] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08758_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08758_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0245.408] GetFileType (hFile=0x1d8) returned 0x1 [0245.409] CloseHandle (hObject=0x1d8) returned 1 [0245.409] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0245.410] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08758_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08758_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5f00)) returned 1 [0245.410] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0245.410] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0245.410] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08758_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08758_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5f00)) returned 1 [0245.410] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0245.410] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0245.411] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0245.411] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x60ca, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="BD08773_.WMF", cAlternateFileName="")) returned 1 [0245.411] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0245.411] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0245.411] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0245.411] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0245.411] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0245.411] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0245.670] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08773_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08773_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0245.771] GetFileType (hFile=0x220) returned 0x1 [0245.771] CloseHandle (hObject=0x220) returned 1 [0245.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0245.773] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08773_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08773_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x60ca)) returned 1 [0245.773] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0245.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0245.773] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08773_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08773_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x60ca)) returned 1 [0245.773] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0245.774] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0245.774] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0245.774] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbb7c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="BD08808_.WMF", cAlternateFileName="")) returned 1 [0245.774] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0245.774] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0245.774] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0245.774] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0245.774] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0245.774] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0245.870] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08808_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08808_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0245.871] GetFileType (hFile=0x224) returned 0x1 [0245.871] CloseHandle (hObject=0x224) returned 1 [0245.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0245.872] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08808_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08808_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbb7c)) returned 1 [0245.872] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0245.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0245.873] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08808_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08808_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbb7c)) returned 1 [0245.873] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0245.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0245.873] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0245.874] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9d0e, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="BD08868_.WMF", cAlternateFileName="")) returned 1 [0245.874] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0245.874] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0245.874] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0245.874] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0245.874] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0245.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0245.876] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08868_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08868_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0245.876] GetFileType (hFile=0x224) returned 0x1 [0245.877] CloseHandle (hObject=0x224) returned 1 [0245.878] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0245.878] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08868_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08868_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9d0e)) returned 1 [0245.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0245.878] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0245.879] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08868_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08868_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9d0e)) returned 1 [0245.879] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0245.879] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0245.879] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0245.879] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd4897d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd4897d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbaaa, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="BD09031_.WMF", cAlternateFileName="")) returned 1 [0245.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0245.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0245.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0245.880] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0245.880] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0245.880] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0245.883] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09031_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09031_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0245.884] GetFileType (hFile=0x224) returned 0x1 [0245.885] CloseHandle (hObject=0x224) returned 1 [0245.886] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0245.886] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09031_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09031_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd4897d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd4897d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbaaa)) returned 1 [0245.886] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0245.886] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0245.887] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09031_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09031_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd4897d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd4897d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbaaa)) returned 1 [0245.887] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0245.887] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0245.887] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0245.887] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x38cc, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="BD09194_.WMF", cAlternateFileName="")) returned 1 [0245.887] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0245.888] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0245.888] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0245.888] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0245.888] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0245.888] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0245.889] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09194_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09194_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0245.891] GetFileType (hFile=0x224) returned 0x1 [0245.891] CloseHandle (hObject=0x224) returned 1 [0245.892] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0245.892] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09194_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09194_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x38cc)) returned 1 [0245.892] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0245.892] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0245.893] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09194_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09194_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x38cc)) returned 1 [0245.893] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0245.893] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0245.893] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0245.893] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x504a, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="BD09662_.WMF", cAlternateFileName="")) returned 1 [0245.893] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0245.893] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0245.894] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0245.894] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0245.894] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0245.894] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0245.895] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09662_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09662_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0245.895] GetFileType (hFile=0x224) returned 0x1 [0245.896] CloseHandle (hObject=0x224) returned 1 [0245.896] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0245.896] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09662_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09662_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x504a)) returned 1 [0245.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0245.898] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0245.898] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09662_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09662_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x504a)) returned 1 [0245.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0245.898] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0245.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0245.898] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f1e, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="BD09664_.WMF", cAlternateFileName="")) returned 1 [0245.898] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0245.898] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2134e8 [0245.898] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0245.899] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2134e8 | out: hHeap=0x1f0000) returned 1 [0245.899] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0245.899] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0245.899] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09664_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09664_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0245.900] GetFileType (hFile=0x224) returned 0x1 [0245.900] CloseHandle (hObject=0x224) returned 1 [0245.900] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0245.901] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09664_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09664_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f1e)) returned 1 [0245.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0245.901] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0245.901] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09664_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09664_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f1e)) returned 1 [0245.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0245.901] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0245.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0245.901] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x34cb, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="BD10890_.GIF", cAlternateFileName="")) returned 1 [0245.901] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0245.902] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0245.902] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0245.902] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0245.902] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0245.902] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0245.902] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10890_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0246.383] GetFileType (hFile=0x220) returned 0x1 [0246.383] CloseHandle (hObject=0x220) returned 1 [0246.384] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0246.384] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10890_.gif"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x34cb)) returned 1 [0246.384] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0246.384] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0246.384] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10890_.gif"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x34cb)) returned 1 [0246.384] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0246.384] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0246.385] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0246.385] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4edd, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="BD10972_.GIF", cAlternateFileName="")) returned 1 [0246.385] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0246.385] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0246.385] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0246.385] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0246.385] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0246.385] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0246.386] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10972_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0246.386] GetFileType (hFile=0x220) returned 0x1 [0246.387] CloseHandle (hObject=0x220) returned 1 [0246.387] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0246.387] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10972_.gif"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4edd)) returned 1 [0246.387] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0246.387] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0246.388] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10972_.gif"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4edd)) returned 1 [0246.388] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0246.388] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0246.388] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0246.388] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4fe6, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="BD19563_.GIF", cAlternateFileName="")) returned 1 [0246.388] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0246.388] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0246.388] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0246.388] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0246.388] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0246.388] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0246.389] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19563_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0246.389] GetFileType (hFile=0x220) returned 0x1 [0246.390] CloseHandle (hObject=0x220) returned 1 [0246.390] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0246.390] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19563_.gif"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4fe6)) returned 1 [0246.390] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0246.390] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0246.390] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19563_.gif"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4fe6)) returned 1 [0246.391] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0246.391] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0246.391] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0246.391] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d75, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="BD19582_.GIF", cAlternateFileName="")) returned 1 [0246.391] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0246.391] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0246.391] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0246.391] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0246.391] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0246.392] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0246.392] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19582_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0246.393] GetFileType (hFile=0x220) returned 0x1 [0246.393] CloseHandle (hObject=0x220) returned 1 [0246.393] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0246.393] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19582_.gif"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d75)) returned 1 [0246.394] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0246.394] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0246.394] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19582_.gif"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d75)) returned 1 [0246.394] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0246.394] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0246.394] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0246.394] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32b6, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="BD19695_.WMF", cAlternateFileName="")) returned 1 [0246.394] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0246.394] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0246.394] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0246.395] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0246.395] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0246.395] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0246.395] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19695_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19695_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0246.396] GetFileType (hFile=0x220) returned 0x1 [0246.396] CloseHandle (hObject=0x220) returned 1 [0246.396] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0246.396] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19695_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19695_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32b6)) returned 1 [0246.396] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0246.398] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0246.398] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19695_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19695_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32b6)) returned 1 [0246.398] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0246.398] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0246.398] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0246.398] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x25ee, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="BD19827_.WMF", cAlternateFileName="")) returned 1 [0246.399] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0246.400] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0246.400] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0246.400] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0246.400] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0246.400] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0246.400] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19827_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19827_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0246.401] GetFileType (hFile=0x220) returned 0x1 [0246.401] CloseHandle (hObject=0x220) returned 1 [0246.401] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0246.401] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19827_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19827_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x25ee)) returned 1 [0246.401] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0246.402] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0246.402] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19827_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19827_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x25ee)) returned 1 [0246.402] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0246.402] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0246.402] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0246.402] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2244, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="BD19828_.WMF", cAlternateFileName="")) returned 1 [0246.402] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0246.402] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0246.402] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0246.402] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0246.403] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0246.403] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0246.403] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19828_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19828_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0246.404] GetFileType (hFile=0x220) returned 0x1 [0246.405] CloseHandle (hObject=0x220) returned 1 [0246.405] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0246.405] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19828_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19828_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2244)) returned 1 [0246.405] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0246.405] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0246.405] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19828_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19828_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2244)) returned 1 [0246.406] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0246.406] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0246.406] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0246.406] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3896, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="BD19986_.WMF", cAlternateFileName="")) returned 1 [0246.406] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0246.406] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0246.406] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0246.406] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0246.406] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0246.406] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0246.407] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19986_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19986_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0246.408] GetFileType (hFile=0x220) returned 0x1 [0246.408] CloseHandle (hObject=0x220) returned 1 [0246.408] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0246.408] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19986_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19986_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3896)) returned 1 [0246.409] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0246.409] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0246.409] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19986_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19986_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3896)) returned 1 [0246.409] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0246.409] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0246.409] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0246.409] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4780, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="BD19988_.WMF", cAlternateFileName="")) returned 1 [0246.409] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0246.409] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0246.409] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0246.410] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0246.410] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0246.410] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0246.410] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19988_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19988_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0246.411] GetFileType (hFile=0x220) returned 0x1 [0246.411] CloseHandle (hObject=0x220) returned 1 [0246.411] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0246.412] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19988_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19988_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4780)) returned 1 [0246.412] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0246.412] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0246.412] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19988_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19988_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4780)) returned 1 [0246.412] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0246.413] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0246.413] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0246.413] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b32, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="BD20013_.WMF", cAlternateFileName="")) returned 1 [0246.413] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0246.413] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0246.413] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0246.413] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0246.413] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0246.414] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0246.414] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD20013_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd20013_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0246.415] GetFileType (hFile=0x220) returned 0x1 [0246.416] CloseHandle (hObject=0x220) returned 1 [0246.416] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0246.416] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD20013_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd20013_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b32)) returned 1 [0246.416] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0246.416] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0246.416] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD20013_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd20013_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b32)) returned 1 [0246.417] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0246.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0246.417] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0246.417] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30e8, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="BL00008_.WMF", cAlternateFileName="")) returned 1 [0246.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0246.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0246.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0246.417] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0246.417] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0246.417] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0246.418] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00008_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00008_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0246.418] GetFileType (hFile=0x220) returned 0x1 [0246.419] CloseHandle (hObject=0x220) returned 1 [0246.419] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0246.419] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00008_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00008_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30e8)) returned 1 [0246.419] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0246.420] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0246.420] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00008_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00008_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30e8)) returned 1 [0246.420] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0246.420] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0246.420] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0246.420] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd4897d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd4897d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x265a, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="BL00012_.WMF", cAlternateFileName="")) returned 1 [0246.420] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0246.420] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0246.420] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0246.421] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0246.421] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0246.421] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0246.422] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00012_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00012_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0246.422] GetFileType (hFile=0x220) returned 0x1 [0246.423] CloseHandle (hObject=0x220) returned 1 [0246.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0246.423] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00012_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00012_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd4897d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd4897d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x265a)) returned 1 [0246.423] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0246.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0246.424] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00012_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00012_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd4897d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd4897d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x265a)) returned 1 [0246.424] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0246.424] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0246.424] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0246.424] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1eb6, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="BL00045_.WMF", cAlternateFileName="")) returned 1 [0246.424] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0246.424] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0246.425] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0246.425] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0246.425] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0246.425] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0246.426] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00045_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00045_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0246.426] GetFileType (hFile=0x220) returned 0x1 [0246.427] CloseHandle (hObject=0x220) returned 1 [0246.427] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0246.428] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00045_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00045_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1eb6)) returned 1 [0246.428] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0246.428] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0246.428] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00045_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00045_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1eb6)) returned 1 [0246.428] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0246.428] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0246.429] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0246.429] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3f4, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="BL00098_.WMF", cAlternateFileName="")) returned 1 [0246.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0246.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0246.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0246.429] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0246.429] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0246.430] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0246.430] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00098_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00098_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0246.746] GetFileType (hFile=0x1e8) returned 0x1 [0246.747] CloseHandle (hObject=0x1e8) returned 1 [0246.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0246.747] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00098_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00098_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3f4)) returned 1 [0246.747] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0246.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0246.748] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00098_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00098_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3f4)) returned 1 [0246.748] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0246.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0246.748] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0246.748] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd4897d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd4897d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x370, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="BL00105_.WMF", cAlternateFileName="")) returned 1 [0246.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380f0 [0246.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0246.749] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0246.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0246.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0246.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380f0 | out: hHeap=0x1f0000) returned 1 [0247.007] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00105_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00105_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0247.008] GetFileType (hFile=0x1e8) returned 0x1 [0247.008] CloseHandle (hObject=0x1e8) returned 1 [0247.009] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0247.009] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00105_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00105_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd4897d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd4897d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x370)) returned 1 [0247.009] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0247.009] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0247.009] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00105_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00105_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd4897d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd4897d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x370)) returned 1 [0247.010] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0247.010] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0247.010] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0247.010] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd4897d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd4897d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27a2, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="BL00122_.WMF", cAlternateFileName="")) returned 1 [0247.010] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0247.010] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2134e8 [0247.010] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0247.011] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2134e8 | out: hHeap=0x1f0000) returned 1 [0247.011] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0247.011] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0247.012] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00122_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00122_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0247.012] GetFileType (hFile=0x1e8) returned 0x1 [0247.013] CloseHandle (hObject=0x1e8) returned 1 [0247.013] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0247.014] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00122_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00122_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd4897d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd4897d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27a2)) returned 1 [0247.014] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0247.014] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0247.014] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00122_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00122_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd4897d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd4897d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27a2)) returned 1 [0247.014] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0247.014] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0247.014] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0247.015] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd5c704c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd5c704c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5b8, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="BL00130_.WMF", cAlternateFileName="")) returned 1 [0247.015] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0247.015] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0247.015] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0247.015] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0247.015] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0247.015] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0247.016] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00130_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00130_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0247.017] GetFileType (hFile=0x1e8) returned 0x1 [0247.018] CloseHandle (hObject=0x1e8) returned 1 [0247.018] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0247.018] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00130_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00130_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd5c704c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd5c704c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5b8)) returned 1 [0247.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0247.019] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0247.019] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00130_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00130_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd5c704c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd5c704c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5b8)) returned 1 [0247.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0247.019] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0247.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0247.019] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcdbb058, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcdbb058, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd5c704c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6a0, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="BL00148_.WMF", cAlternateFileName="")) returned 1 [0247.020] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0247.020] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0247.020] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0247.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0247.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0247.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0247.021] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00148_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00148_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0247.023] GetFileType (hFile=0x1e8) returned 0x1 [0247.023] CloseHandle (hObject=0x1e8) returned 1 [0247.023] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0247.024] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00148_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00148_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcdbb058, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcdbb058, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd5c704c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6a0)) returned 1 [0247.024] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0247.024] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0247.024] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00148_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00148_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcdbb058, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcdbb058, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd5c704c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6a0)) returned 1 [0247.024] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0247.024] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0247.025] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0247.025] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcdbb058, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcdbb058, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd5c704c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5ec, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="BL00152_.WMF", cAlternateFileName="")) returned 1 [0247.025] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0247.025] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0247.025] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0247.025] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0247.025] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0247.025] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0247.026] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00152_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00152_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0247.027] GetFileType (hFile=0x1e8) returned 0x1 [0247.027] CloseHandle (hObject=0x1e8) returned 1 [0247.028] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0247.028] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00152_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00152_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcdbb058, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcdbb058, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd5c704c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5ec)) returned 1 [0247.028] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0247.028] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0247.028] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00152_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00152_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcdbb058, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcdbb058, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd5c704c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5ec)) returned 1 [0247.028] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0247.029] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0247.029] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0247.029] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcdbb058, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf92, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="BL00194_.WMF", cAlternateFileName="")) returned 1 [0247.029] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0247.029] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0247.029] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0247.029] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0247.030] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0247.030] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0247.030] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00194_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00194_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0247.031] GetFileType (hFile=0x1e8) returned 0x1 [0247.032] CloseHandle (hObject=0x1e8) returned 1 [0247.038] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0247.038] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00194_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00194_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcdbb058, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf92)) returned 1 [0247.039] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0247.039] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0247.039] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00194_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00194_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcdbb058, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf92)) returned 1 [0247.039] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0247.039] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0247.039] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0247.039] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcdbb058, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f86, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="BL00195_.WMF", cAlternateFileName="")) returned 1 [0247.039] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0247.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0247.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0247.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0247.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0247.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0247.041] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00195_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00195_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0247.042] GetFileType (hFile=0x1e8) returned 0x1 [0247.043] CloseHandle (hObject=0x1e8) returned 1 [0247.043] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0247.043] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00195_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00195_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcdbb058, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f86)) returned 1 [0247.044] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0247.044] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0247.044] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00195_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00195_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcdbb058, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f86)) returned 1 [0247.044] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0247.044] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0247.044] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0247.045] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2458, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="BL00234_.WMF", cAlternateFileName="")) returned 1 [0247.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0247.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0247.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0247.045] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0247.045] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0247.045] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0247.046] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00234_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00234_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0247.047] GetFileType (hFile=0x1e8) returned 0x1 [0247.048] CloseHandle (hObject=0x1e8) returned 1 [0247.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0247.048] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00234_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00234_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2458)) returned 1 [0247.048] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0247.049] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0247.049] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00234_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00234_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2458)) returned 1 [0247.049] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0247.049] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0247.049] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0247.049] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd5c704c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfb8, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="BL00242_.WMF", cAlternateFileName="")) returned 1 [0247.049] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0247.050] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0247.050] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0247.050] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0247.050] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0247.050] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0247.051] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00242_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00242_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0247.051] GetFileType (hFile=0x1e8) returned 0x1 [0247.052] CloseHandle (hObject=0x1e8) returned 1 [0247.053] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0247.479] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00242_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00242_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd5c704c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfb8)) returned 1 [0247.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0247.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0247.480] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00242_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00242_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd5c704c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfb8)) returned 1 [0247.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0247.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0247.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0247.480] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcdbb058, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x386c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="BL00247_.WMF", cAlternateFileName="")) returned 1 [0247.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0247.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0247.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0247.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0247.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0247.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0247.481] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00247_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00247_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0247.481] GetFileType (hFile=0x224) returned 0x1 [0247.481] CloseHandle (hObject=0x224) returned 1 [0247.482] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0247.482] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00247_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00247_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcdbb058, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x386c)) returned 1 [0247.482] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0247.482] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0247.482] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00247_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00247_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcdbb058, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x386c)) returned 1 [0247.482] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0247.482] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0247.482] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0247.488] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x600, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="BL00248_.WMF", cAlternateFileName="")) returned 1 [0247.488] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0247.488] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0247.488] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0247.488] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0247.488] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0247.488] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0247.489] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00248_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00248_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0247.489] GetFileType (hFile=0x224) returned 0x1 [0247.490] CloseHandle (hObject=0x224) returned 1 [0247.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0247.490] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00248_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00248_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x600)) returned 1 [0247.490] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0247.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0247.490] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00248_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00248_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x600)) returned 1 [0247.490] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0247.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0247.490] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0247.491] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcdbb058, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1264, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="BL00252_.WMF", cAlternateFileName="")) returned 1 [0247.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0247.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0247.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0247.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0247.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0247.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0247.491] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00252_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00252_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0247.492] GetFileType (hFile=0x224) returned 0x1 [0247.492] CloseHandle (hObject=0x224) returned 1 [0247.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0247.492] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00252_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00252_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcdbb058, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1264)) returned 1 [0247.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0247.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0247.493] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00252_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00252_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcdbb058, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1264)) returned 1 [0247.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0247.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0247.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0247.493] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd685b3d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6c8, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="BL00254_.WMF", cAlternateFileName="")) returned 1 [0247.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0247.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0247.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0247.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0247.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0247.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0247.494] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00254_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00254_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0247.495] GetFileType (hFile=0x224) returned 0x1 [0247.495] CloseHandle (hObject=0x224) returned 1 [0247.495] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0247.495] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00254_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00254_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd685b3d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6c8)) returned 1 [0247.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0247.495] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0247.495] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00254_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00254_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd685b3d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6c8)) returned 1 [0247.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0247.495] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0247.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0247.496] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30c2, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="BL00261_.WMF", cAlternateFileName="")) returned 1 [0247.496] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0247.496] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0247.496] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0247.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0247.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0247.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0247.496] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00261_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00261_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0247.497] GetFileType (hFile=0x224) returned 0x1 [0247.497] CloseHandle (hObject=0x224) returned 1 [0247.498] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0247.498] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00261_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00261_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30c2)) returned 1 [0247.498] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0247.498] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0247.498] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00261_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00261_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30c2)) returned 1 [0247.498] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0247.498] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0247.499] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0247.499] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9fc, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="BL00262_.WMF", cAlternateFileName="")) returned 1 [0247.499] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0247.499] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0247.499] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0247.499] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0247.499] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0247.499] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0247.500] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00262_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00262_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0247.500] GetFileType (hFile=0x224) returned 0x1 [0247.500] CloseHandle (hObject=0x224) returned 1 [0247.501] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0247.501] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00262_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00262_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9fc)) returned 1 [0247.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0247.501] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0247.501] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00262_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00262_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9fc)) returned 1 [0247.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0247.501] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0247.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0247.501] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1678, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="BL00265_.WMF", cAlternateFileName="")) returned 1 [0247.502] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0247.502] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0247.502] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0247.502] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0247.502] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0247.502] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0247.502] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00265_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00265_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0247.503] GetFileType (hFile=0x224) returned 0x1 [0247.504] CloseHandle (hObject=0x224) returned 1 [0247.504] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0247.504] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00265_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00265_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1678)) returned 1 [0247.504] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0247.505] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0247.505] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00265_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00265_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1678)) returned 1 [0247.505] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0247.505] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0247.505] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0247.505] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa54, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="BL00267_.WMF", cAlternateFileName="")) returned 1 [0247.505] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0247.505] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0247.505] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0247.505] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0247.505] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0247.505] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0247.506] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00267_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00267_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0247.506] GetFileType (hFile=0x224) returned 0x1 [0247.507] CloseHandle (hObject=0x224) returned 1 [0247.507] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0247.507] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00267_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00267_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa54)) returned 1 [0247.507] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0247.507] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0247.507] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00267_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00267_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa54)) returned 1 [0247.508] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0247.508] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0247.508] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0247.508] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd5c704c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd5c704c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd5c704c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1498, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="BL00269_.WMF", cAlternateFileName="")) returned 1 [0247.508] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0247.508] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0247.508] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0247.508] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0247.508] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0247.508] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0247.509] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00269_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00269_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0247.509] GetFileType (hFile=0x224) returned 0x1 [0247.510] CloseHandle (hObject=0x224) returned 1 [0247.510] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0247.510] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00269_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00269_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd5c704c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd5c704c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd5c704c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1498)) returned 1 [0247.510] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0247.510] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0247.510] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00269_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00269_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd5c704c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd5c704c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd5c704c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1498)) returned 1 [0247.510] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0247.511] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0247.511] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0247.511] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc8, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="BL00270_.WMF", cAlternateFileName="")) returned 1 [0247.511] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0247.511] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0247.511] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0247.511] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0247.511] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0247.511] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0247.512] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00270_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00270_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0247.512] GetFileType (hFile=0x224) returned 0x1 [0247.512] CloseHandle (hObject=0x224) returned 1 [0247.513] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0247.513] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00270_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00270_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc8)) returned 1 [0247.513] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0247.513] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0247.513] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00270_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00270_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc8)) returned 1 [0247.513] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0247.513] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0247.514] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0247.514] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xec4, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="BL00273_.WMF", cAlternateFileName="")) returned 1 [0247.514] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0247.514] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2134e8 [0247.514] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0247.514] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2134e8 | out: hHeap=0x1f0000) returned 1 [0247.514] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0247.514] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0247.515] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00273_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00273_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0247.515] GetFileType (hFile=0x224) returned 0x1 [0247.515] CloseHandle (hObject=0x224) returned 1 [0247.516] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0247.516] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00273_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00273_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xec4)) returned 1 [0247.516] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0247.516] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0247.516] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00273_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00273_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xec4)) returned 1 [0247.516] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0247.516] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0247.517] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0247.517] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd5c704c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd5c704c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1044, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="BL00274_.WMF", cAlternateFileName="")) returned 1 [0247.517] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0247.517] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0247.517] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0247.517] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0247.517] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0247.517] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0247.518] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00274_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00274_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0247.518] GetFileType (hFile=0x224) returned 0x1 [0247.519] CloseHandle (hObject=0x224) returned 1 [0247.519] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0247.519] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00274_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00274_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd5c704c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd5c704c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1044)) returned 1 [0247.519] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0247.519] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0247.519] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00274_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00274_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd5c704c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd5c704c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1044)) returned 1 [0247.519] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0247.520] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0247.520] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0247.520] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd5c704c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd5c704c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="BL00296_.WMF", cAlternateFileName="")) returned 1 [0247.520] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0247.520] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0247.520] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0247.520] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0247.520] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0247.520] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0247.520] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00296_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00296_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0247.521] GetFileType (hFile=0x224) returned 0x1 [0247.521] CloseHandle (hObject=0x224) returned 1 [0247.521] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0247.521] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00296_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00296_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd5c704c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd5c704c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32c)) returned 1 [0247.521] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0247.521] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0247.994] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00296_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00296_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd5c704c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd5c704c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32c)) returned 1 [0247.994] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0247.994] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0247.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0247.995] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x332e, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="BL00390_.WMF", cAlternateFileName="")) returned 1 [0247.995] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0247.995] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0247.995] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0247.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0247.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0247.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0247.997] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00390_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00390_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0247.998] GetFileType (hFile=0x1b0) returned 0x1 [0247.998] CloseHandle (hObject=0x1b0) returned 1 [0247.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0247.999] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00390_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00390_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x332e)) returned 1 [0247.999] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0248.000] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0248.000] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00390_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00390_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x332e)) returned 1 [0248.000] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0248.000] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0248.000] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0248.000] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd685b3d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd685b3d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x69aa, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="BL00392_.WMF", cAlternateFileName="")) returned 1 [0248.000] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0248.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2134e8 [0248.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0248.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2134e8 | out: hHeap=0x1f0000) returned 1 [0248.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0248.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0248.002] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00392_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00392_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0248.003] GetFileType (hFile=0x1b0) returned 0x1 [0248.004] CloseHandle (hObject=0x1b0) returned 1 [0248.004] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0248.004] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00392_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00392_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd685b3d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd685b3d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x69aa)) returned 1 [0248.005] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0248.005] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0248.005] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00392_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00392_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd685b3d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd685b3d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x69aa)) returned 1 [0248.005] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0248.005] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0248.005] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0248.005] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd685b3d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd685b3d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b54, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="BL00524_.WMF", cAlternateFileName="")) returned 1 [0248.006] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0248.006] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0248.006] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0248.006] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0248.006] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0248.006] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0248.007] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00524_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00524_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0248.008] GetFileType (hFile=0x1b0) returned 0x1 [0248.008] CloseHandle (hObject=0x1b0) returned 1 [0248.009] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0248.009] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00524_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00524_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd685b3d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd685b3d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b54)) returned 1 [0248.009] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0248.009] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0248.009] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00524_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00524_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd685b3d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd685b3d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b54)) returned 1 [0248.010] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0248.010] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0248.010] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0248.010] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd685b3d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd685b3d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2576, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="BL00525_.WMF", cAlternateFileName="")) returned 1 [0248.016] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238348 [0248.016] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2134e8 [0248.016] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0248.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2134e8 | out: hHeap=0x1f0000) returned 1 [0248.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0248.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238348 | out: hHeap=0x1f0000) returned 1 [0248.018] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00525_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00525_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0248.019] GetFileType (hFile=0x224) returned 0x1 [0248.019] CloseHandle (hObject=0x224) returned 1 [0248.020] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0248.020] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00525_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00525_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd685b3d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd685b3d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2576)) returned 1 [0248.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0248.020] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0248.020] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00525_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00525_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd685b3d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd685b3d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2576)) returned 1 [0248.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0248.021] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0248.021] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0248.021] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd65f8ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd65f8ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd685b3d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6ba0, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="BL00526_.WMF", cAlternateFileName="")) returned 1 [0248.021] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380f0 [0248.021] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0248.021] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0248.021] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0248.021] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0248.021] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380f0 | out: hHeap=0x1f0000) returned 1 [0248.022] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00526_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00526_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0248.023] GetFileType (hFile=0x224) returned 0x1 [0248.024] CloseHandle (hObject=0x224) returned 1 [0248.024] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0248.024] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00526_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00526_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd65f8ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd65f8ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd685b3d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6ba0)) returned 1 [0248.025] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0248.025] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0248.025] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00526_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00526_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd65f8ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd65f8ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd685b3d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6ba0)) returned 1 [0248.025] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0248.025] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0248.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0248.026] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2cec, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="BL00648_.WMF", cAlternateFileName="")) returned 1 [0248.026] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0248.026] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2134e8 [0248.026] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0248.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2134e8 | out: hHeap=0x1f0000) returned 1 [0248.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0248.026] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0248.027] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00648_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00648_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0248.028] GetFileType (hFile=0x224) returned 0x1 [0248.028] CloseHandle (hObject=0x224) returned 1 [0248.029] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0248.029] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00648_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00648_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2cec)) returned 1 [0248.029] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0248.029] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0248.029] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00648_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00648_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2cec)) returned 1 [0248.030] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0248.030] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0248.030] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0248.030] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd685b3d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd685b3d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1138, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="BL00921_.WMF", cAlternateFileName="")) returned 1 [0248.030] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0248.030] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e88 [0248.030] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0248.030] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e88 | out: hHeap=0x1f0000) returned 1 [0248.031] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0248.031] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0248.031] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00921_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00921_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0248.032] GetFileType (hFile=0x224) returned 0x1 [0248.032] CloseHandle (hObject=0x224) returned 1 [0248.033] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0248.033] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00921_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00921_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd685b3d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd685b3d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1138)) returned 1 [0248.033] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0248.033] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0248.033] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00921_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00921_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd685b3d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd685b3d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1138)) returned 1 [0248.034] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0248.034] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0248.034] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0248.034] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd65f8ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd65f8ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1870, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="BL00923_.WMF", cAlternateFileName="")) returned 1 [0248.034] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0248.034] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0248.034] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0248.035] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0248.035] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0248.035] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0248.035] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00923_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00923_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0248.036] GetFileType (hFile=0x224) returned 0x1 [0248.036] CloseHandle (hObject=0x224) returned 1 [0248.037] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0248.037] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00923_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00923_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd65f8ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd65f8ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1870)) returned 1 [0248.037] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0248.037] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0248.038] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00923_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00923_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd65f8ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd65f8ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1870)) returned 1 [0248.038] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0248.038] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0248.038] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0248.038] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd65f8ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd65f8ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd685b3d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c14, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="BL00932_.WMF", cAlternateFileName="")) returned 1 [0248.038] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0248.038] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0248.039] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0248.039] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0248.039] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0248.039] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0248.040] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00932_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00932_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0248.040] GetFileType (hFile=0x224) returned 0x1 [0248.041] CloseHandle (hObject=0x224) returned 1 [0248.041] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0248.042] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00932_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00932_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd65f8ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd65f8ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd685b3d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c14)) returned 1 [0248.042] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0248.042] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0248.042] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00932_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00932_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd65f8ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd65f8ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd685b3d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c14)) returned 1 [0248.042] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0248.042] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0248.043] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0248.043] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd65f8ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd65f8ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd685b3d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xeb8, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="BL00985_.WMF", cAlternateFileName="")) returned 1 [0248.043] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0248.043] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0248.043] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0248.043] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0248.043] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0248.043] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0248.044] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00985_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00985_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0248.045] GetFileType (hFile=0x224) returned 0x1 [0248.046] CloseHandle (hObject=0x224) returned 1 [0248.046] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0248.046] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00985_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00985_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd65f8ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd65f8ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd685b3d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xeb8)) returned 1 [0248.047] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0248.047] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0248.047] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00985_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00985_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd65f8ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd65f8ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd685b3d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xeb8)) returned 1 [0248.047] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0248.047] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0248.047] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0248.048] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd16, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="BOAT.WMF", cAlternateFileName="")) returned 1 [0248.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0248.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0248.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0248.048] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0248.048] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0248.048] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0248.049] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOAT.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\boat.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0248.510] GetFileType (hFile=0x210) returned 0x1 [0248.511] CloseHandle (hObject=0x210) returned 1 [0248.511] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0248.511] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOAT.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\boat.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd16)) returned 1 [0248.511] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0248.512] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0248.512] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOAT.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\boat.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd16)) returned 1 [0248.512] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0248.512] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0248.512] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0248.512] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x714c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="BOATINST.WMF", cAlternateFileName="")) returned 1 [0248.512] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0248.512] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0248.513] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0248.513] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0248.513] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0248.513] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0248.514] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOATINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\boatinst.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0248.514] GetFileType (hFile=0x210) returned 0x1 [0248.515] CloseHandle (hObject=0x210) returned 1 [0248.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0248.515] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOATINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\boatinst.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x714c)) returned 1 [0248.515] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0248.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0248.515] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOATINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\boatinst.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x714c)) returned 1 [0248.516] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0248.516] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0248.516] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0248.516] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x532, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="BS00076_.WMF", cAlternateFileName="")) returned 1 [0248.516] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0248.516] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0248.516] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0248.516] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0248.516] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0248.517] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0248.517] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00076_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00076_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0248.518] GetFileType (hFile=0x210) returned 0x1 [0248.518] CloseHandle (hObject=0x210) returned 1 [0248.519] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0248.519] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00076_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00076_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x532)) returned 1 [0248.519] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0248.519] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0248.519] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00076_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00076_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x532)) returned 1 [0248.519] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0248.519] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0248.519] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0248.519] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5a4, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="BS00078_.WMF", cAlternateFileName="")) returned 1 [0248.520] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0248.520] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0248.520] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0248.520] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0248.520] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0248.520] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0248.521] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00078_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00078_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0248.522] GetFileType (hFile=0x210) returned 0x1 [0248.522] CloseHandle (hObject=0x210) returned 1 [0248.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0248.523] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00078_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00078_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5a4)) returned 1 [0248.523] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0248.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0248.523] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00078_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00078_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5a4)) returned 1 [0248.523] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0248.524] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0248.524] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0248.524] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f26, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="BS00092_.WMF", cAlternateFileName="")) returned 1 [0248.524] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0248.524] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213570 [0248.524] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0248.524] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213570 | out: hHeap=0x1f0000) returned 1 [0248.524] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0248.525] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0248.526] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00092_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00092_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0248.526] GetFileType (hFile=0x210) returned 0x1 [0248.527] CloseHandle (hObject=0x210) returned 1 [0248.527] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0248.527] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00092_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00092_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f26)) returned 1 [0248.527] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0248.527] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0248.527] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00092_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00092_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f26)) returned 1 [0248.527] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0248.528] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0248.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0248.528] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x94a, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="BS00100_.WMF", cAlternateFileName="")) returned 1 [0248.528] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0248.528] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0248.528] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0248.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0248.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0248.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0248.529] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00100_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00100_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0248.529] GetFileType (hFile=0x210) returned 0x1 [0248.530] CloseHandle (hObject=0x210) returned 1 [0248.530] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0248.530] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00100_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00100_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x94a)) returned 1 [0248.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0248.530] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0248.530] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00100_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00100_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x94a)) returned 1 [0248.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0248.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0248.531] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0248.531] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="BS00135_.WMF", cAlternateFileName="")) returned 1 [0248.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0248.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e88 [0248.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0248.531] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e88 | out: hHeap=0x1f0000) returned 1 [0248.531] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0248.531] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0248.531] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00135_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00135_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0248.532] GetFileType (hFile=0x210) returned 0x1 [0248.532] CloseHandle (hObject=0x210) returned 1 [0248.533] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0248.533] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00135_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00135_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x414)) returned 1 [0248.533] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0248.533] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0248.533] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00135_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00135_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x414)) returned 1 [0248.533] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0248.533] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0248.533] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0248.533] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x876, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="BS00136_.WMF", cAlternateFileName="")) returned 1 [0248.533] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0248.534] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213570 [0248.534] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0248.534] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213570 | out: hHeap=0x1f0000) returned 1 [0248.534] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0248.534] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0248.534] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00136_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00136_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0248.535] GetFileType (hFile=0x210) returned 0x1 [0248.535] CloseHandle (hObject=0x210) returned 1 [0248.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0248.535] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00136_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00136_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x876)) returned 1 [0248.536] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0248.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0248.536] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00136_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00136_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x876)) returned 1 [0248.536] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0248.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0248.536] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0248.536] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6b0, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="BS00145_.WMF", cAlternateFileName="")) returned 1 [0248.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0248.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0248.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0248.536] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0248.536] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0248.536] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0248.537] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00145_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00145_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0248.537] GetFileType (hFile=0x210) returned 0x1 [0248.538] CloseHandle (hObject=0x210) returned 1 [0248.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0248.538] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00145_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00145_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6b0)) returned 1 [0248.538] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0248.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0248.538] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00145_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00145_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6b0)) returned 1 [0248.538] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0248.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0248.538] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0248.538] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20ae, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="BS00174_.WMF", cAlternateFileName="")) returned 1 [0248.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0248.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0248.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0248.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0248.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0248.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0248.539] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00174_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0248.539] GetFileType (hFile=0x210) returned 0x1 [0248.540] CloseHandle (hObject=0x210) returned 1 [0248.540] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0248.540] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00174_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20ae)) returned 1 [0248.540] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0248.540] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0248.540] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00174_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20ae)) returned 1 [0248.540] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0248.541] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0248.541] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0248.541] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1370, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="BS00184_.WMF", cAlternateFileName="")) returned 1 [0248.541] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0248.541] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0248.541] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0248.541] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0248.541] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0248.541] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0248.541] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00184_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0249.103] GetFileType (hFile=0x1c0) returned 0x1 [0249.104] CloseHandle (hObject=0x1c0) returned 1 [0249.104] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0249.104] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00184_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1370)) returned 1 [0249.104] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0249.104] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0249.104] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00184_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1370)) returned 1 [0249.104] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0249.104] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0249.104] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0249.104] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31f4, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="BS00186_.WMF", cAlternateFileName="")) returned 1 [0249.105] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0249.105] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0249.105] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0249.105] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0249.105] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0249.105] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0249.105] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00186_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00186_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0249.106] GetFileType (hFile=0x1c0) returned 0x1 [0249.106] CloseHandle (hObject=0x1c0) returned 1 [0249.106] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0249.106] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00186_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00186_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31f4)) returned 1 [0249.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0249.107] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0249.107] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00186_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00186_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31f4)) returned 1 [0249.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0249.107] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0249.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0249.107] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc20, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="BS00200_.WMF", cAlternateFileName="")) returned 1 [0249.107] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0249.107] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0249.107] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0249.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0249.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0249.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0249.108] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00200_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00200_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0249.108] GetFileType (hFile=0x1c0) returned 0x1 [0249.108] CloseHandle (hObject=0x1c0) returned 1 [0249.109] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0249.109] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00200_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00200_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc20)) returned 1 [0249.109] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0249.109] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0249.109] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00200_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00200_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc20)) returned 1 [0249.109] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0249.109] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0249.109] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0249.110] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x634, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="BS00224_.WMF", cAlternateFileName="")) returned 1 [0249.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0249.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213570 [0249.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0249.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213570 | out: hHeap=0x1f0000) returned 1 [0249.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0249.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0249.111] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00224_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00224_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0249.111] GetFileType (hFile=0x1c0) returned 0x1 [0249.111] CloseHandle (hObject=0x1c0) returned 1 [0249.112] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0249.112] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00224_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00224_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x634)) returned 1 [0249.112] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0249.112] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0249.112] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00224_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00224_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x634)) returned 1 [0249.113] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0249.113] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0249.113] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0249.113] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4bc, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="BS00438_.WMF", cAlternateFileName="")) returned 1 [0249.113] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0249.113] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0249.113] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0249.113] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0249.113] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0249.114] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0249.114] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00438_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00438_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0249.116] GetFileType (hFile=0x1c0) returned 0x1 [0249.116] CloseHandle (hObject=0x1c0) returned 1 [0249.117] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0249.117] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00438_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00438_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4bc)) returned 1 [0249.117] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0249.117] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0249.117] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00438_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00438_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4bc)) returned 1 [0249.117] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0249.117] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0249.118] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0249.118] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x804, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="BS00439_.WMF", cAlternateFileName="")) returned 1 [0249.118] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0249.118] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0249.118] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0249.118] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0249.118] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0249.118] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0249.120] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00439_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00439_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0249.120] GetFileType (hFile=0x1c0) returned 0x1 [0249.120] CloseHandle (hObject=0x1c0) returned 1 [0249.121] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0249.121] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00439_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00439_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x804)) returned 1 [0249.121] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0249.121] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0249.121] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00439_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00439_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x804)) returned 1 [0249.122] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0249.122] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0249.122] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0249.122] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15cc, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="BS00440_.WMF", cAlternateFileName="")) returned 1 [0249.122] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0249.122] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0249.122] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0249.122] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0249.123] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0249.123] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0249.123] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00440_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00440_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0249.124] GetFileType (hFile=0x1c0) returned 0x1 [0249.124] CloseHandle (hObject=0x1c0) returned 1 [0249.125] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0249.125] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00440_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00440_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15cc)) returned 1 [0249.125] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0249.125] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0249.125] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00440_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00440_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15cc)) returned 1 [0249.126] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0249.126] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0249.126] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0249.126] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdc4, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="BS00441_.WMF", cAlternateFileName="")) returned 1 [0249.126] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0249.126] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0249.126] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0249.127] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0249.127] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0249.127] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0249.128] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00441_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00441_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0249.128] GetFileType (hFile=0x1c0) returned 0x1 [0249.128] CloseHandle (hObject=0x1c0) returned 1 [0249.129] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0249.129] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00441_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00441_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdc4)) returned 1 [0249.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0249.129] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0249.129] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00441_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00441_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdc4)) returned 1 [0249.130] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0249.130] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0249.130] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0249.130] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9b8, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="BS00442_.WMF", cAlternateFileName="")) returned 1 [0249.130] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0249.130] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0249.130] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0249.130] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0249.131] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0249.131] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0249.131] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00442_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00442_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0249.132] GetFileType (hFile=0x1c0) returned 0x1 [0249.132] CloseHandle (hObject=0x1c0) returned 1 [0249.133] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0249.133] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00442_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00442_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9b8)) returned 1 [0249.133] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0249.133] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0249.134] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00442_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00442_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9b8)) returned 1 [0249.134] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0249.134] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0249.134] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0249.135] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x68c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="BS00443_.WMF", cAlternateFileName="")) returned 1 [0249.135] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0249.135] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0249.135] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0249.135] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0249.135] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0249.135] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0249.136] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00443_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00443_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0249.136] GetFileType (hFile=0x1c0) returned 0x1 [0249.137] CloseHandle (hObject=0x1c0) returned 1 [0249.138] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0249.138] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00443_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00443_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x68c)) returned 1 [0249.138] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0249.138] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0249.138] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00443_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00443_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x68c)) returned 1 [0249.138] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0249.139] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0249.139] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0249.139] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf38, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="BS00444_.WMF", cAlternateFileName="")) returned 1 [0249.139] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0249.139] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0249.139] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0249.139] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0249.139] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0249.140] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0249.140] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00444_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00444_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0249.141] GetFileType (hFile=0x1c0) returned 0x1 [0249.141] CloseHandle (hObject=0x1c0) returned 1 [0249.142] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0249.142] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00444_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00444_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf38)) returned 1 [0249.142] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0249.142] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0249.143] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00444_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00444_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf38)) returned 1 [0249.143] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0249.143] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0249.143] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0249.143] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xed4, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="BS00445_.WMF", cAlternateFileName="")) returned 1 [0249.143] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0249.143] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0249.144] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0249.144] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0249.144] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0249.144] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0249.145] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00445_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00445_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0249.448] GetFileType (hFile=0x1fc) returned 0x1 [0249.449] CloseHandle (hObject=0x1fc) returned 1 [0249.449] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0249.449] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00445_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00445_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xed4)) returned 1 [0249.449] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0249.449] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0249.450] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00445_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00445_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xed4)) returned 1 [0249.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0249.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0249.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0249.450] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x984, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="BS00453_.WMF", cAlternateFileName="")) returned 1 [0249.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0249.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0249.451] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0249.451] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0249.451] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0249.451] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0249.451] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00453_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00453_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0249.453] GetFileType (hFile=0x1fc) returned 0x1 [0249.453] CloseHandle (hObject=0x1fc) returned 1 [0249.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0249.454] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00453_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00453_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x984)) returned 1 [0249.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0249.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0249.454] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00453_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00453_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x984)) returned 1 [0249.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0249.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0249.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0249.455] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaac, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="BS01080_.WMF", cAlternateFileName="")) returned 1 [0249.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0249.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213570 [0249.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0249.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213570 | out: hHeap=0x1f0000) returned 1 [0249.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0249.456] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0249.456] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01080_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01080_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0249.457] GetFileType (hFile=0x1fc) returned 0x1 [0249.457] CloseHandle (hObject=0x1fc) returned 1 [0249.458] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0249.458] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01080_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01080_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaac)) returned 1 [0249.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0249.458] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0249.459] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01080_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01080_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaac)) returned 1 [0249.459] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0249.459] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0249.459] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0249.459] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c08, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="BS01603_.WMF", cAlternateFileName="")) returned 1 [0249.459] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0249.459] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0249.460] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0249.460] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0249.460] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0249.460] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0249.461] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01603_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01603_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0249.462] GetFileType (hFile=0x1fc) returned 0x1 [0249.463] CloseHandle (hObject=0x1fc) returned 1 [0249.465] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0249.465] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01603_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01603_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c08)) returned 1 [0249.465] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0249.465] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0249.465] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01603_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01603_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c08)) returned 1 [0249.465] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0249.466] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0249.466] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0249.466] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xda6, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="BS01634_.WMF", cAlternateFileName="")) returned 1 [0249.466] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238348 [0249.466] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0249.466] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0249.466] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0249.467] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0249.467] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238348 | out: hHeap=0x1f0000) returned 1 [0249.467] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01634_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01634_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0249.468] GetFileType (hFile=0x1fc) returned 0x1 [0249.469] CloseHandle (hObject=0x1fc) returned 1 [0249.469] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0249.469] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01634_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01634_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xda6)) returned 1 [0249.469] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0249.470] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0249.470] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01634_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01634_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xda6)) returned 1 [0249.470] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0249.470] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0249.470] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0249.470] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a94, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="BS01635_.WMF", cAlternateFileName="")) returned 1 [0249.470] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0249.471] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0249.471] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0249.471] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0249.471] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0249.471] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0249.472] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01635_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01635_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0249.473] GetFileType (hFile=0x1fc) returned 0x1 [0249.473] CloseHandle (hObject=0x1fc) returned 1 [0249.474] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0249.474] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01635_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01635_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a94)) returned 1 [0249.474] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0249.474] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0249.475] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01635_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01635_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a94)) returned 1 [0249.475] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0249.475] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0249.475] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0249.475] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x752, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="BS01636_.WMF", cAlternateFileName="")) returned 1 [0249.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0249.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0249.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0249.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0249.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0249.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0249.481] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01636_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01636_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0249.482] GetFileType (hFile=0x1fc) returned 0x1 [0249.482] CloseHandle (hObject=0x1fc) returned 1 [0249.483] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0249.483] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01636_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01636_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x752)) returned 1 [0249.483] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0249.483] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0249.483] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01636_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01636_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x752)) returned 1 [0249.484] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0249.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0249.484] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0249.484] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf6c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="BS01637_.WMF", cAlternateFileName="")) returned 1 [0249.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0249.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0249.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0249.484] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0249.484] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0249.485] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0249.485] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01637_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01637_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0249.732] GetFileType (hFile=0x22c) returned 0x1 [0249.732] CloseHandle (hObject=0x22c) returned 1 [0249.733] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0249.733] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01637_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01637_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf6c)) returned 1 [0249.733] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0249.733] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0249.733] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01637_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01637_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf6c)) returned 1 [0249.734] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0249.734] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0249.734] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0249.734] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x292a, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="BS01638_.WMF", cAlternateFileName="")) returned 1 [0249.734] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0249.734] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0249.735] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0249.735] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0249.735] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0249.735] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0249.736] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01638_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01638_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0249.736] GetFileType (hFile=0x22c) returned 0x1 [0249.737] CloseHandle (hObject=0x22c) returned 1 [0249.738] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0249.738] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01638_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01638_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x292a)) returned 1 [0249.738] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0249.738] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0249.738] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01638_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01638_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x292a)) returned 1 [0249.738] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0249.739] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0249.739] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0249.739] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd744774, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x108c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="BS01639_.WMF", cAlternateFileName="")) returned 1 [0249.739] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0249.739] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0249.739] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0249.739] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0249.740] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0249.740] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0249.740] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01639_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01639_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0249.741] GetFileType (hFile=0x22c) returned 0x1 [0249.742] CloseHandle (hObject=0x22c) returned 1 [0249.742] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0249.742] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01639_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01639_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd744774, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x108c)) returned 1 [0249.742] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0249.742] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0249.743] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01639_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01639_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd744774, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x108c)) returned 1 [0249.743] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0249.743] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0249.743] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0249.743] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x246a, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="CARBN_01.MID", cAlternateFileName="")) returned 1 [0249.743] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0249.743] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0249.743] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0249.744] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0249.744] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0249.744] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0249.745] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CARBN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\carbn_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0249.746] GetFileType (hFile=0x22c) returned 0x1 [0249.747] CloseHandle (hObject=0x22c) returned 1 [0249.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0249.748] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CARBN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\carbn_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x246a)) returned 1 [0249.748] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0249.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0249.748] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CARBN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\carbn_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x246a)) returned 1 [0249.748] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0249.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0249.748] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0249.749] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd744774, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdec, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="CG1606.WMF", cAlternateFileName="")) returned 1 [0249.749] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0249.749] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0249.749] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0249.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0249.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0249.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0249.750] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CG1606.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cg1606.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0249.751] GetFileType (hFile=0x22c) returned 0x1 [0249.752] CloseHandle (hObject=0x22c) returned 1 [0249.752] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0249.752] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CG1606.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cg1606.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd744774, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdec)) returned 1 [0249.753] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0249.753] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0249.753] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CG1606.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cg1606.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd744774, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdec)) returned 1 [0249.753] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0249.753] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0249.753] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0249.754] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x976, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="CLASSIC1.WMF", cAlternateFileName="")) returned 1 [0249.754] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0249.754] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0249.754] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0249.754] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0249.754] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0249.755] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0249.756] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC1.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\classic1.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0249.756] GetFileType (hFile=0x22c) returned 0x1 [0249.757] CloseHandle (hObject=0x22c) returned 1 [0249.757] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0249.758] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC1.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\classic1.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x976)) returned 1 [0249.758] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0249.758] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0249.758] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC1.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\classic1.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x976)) returned 1 [0249.758] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0249.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0249.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0249.759] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8d6, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="CLASSIC2.WMF", cAlternateFileName="")) returned 1 [0249.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0249.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0249.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0249.760] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0249.760] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0249.760] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0249.761] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC2.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\classic2.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0249.762] GetFileType (hFile=0x22c) returned 0x1 [0249.762] CloseHandle (hObject=0x22c) returned 1 [0249.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0249.763] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC2.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\classic2.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8d6)) returned 1 [0249.763] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0249.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0249.763] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC2.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\classic2.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8d6)) returned 1 [0249.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0249.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0249.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0249.764] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8d6, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="CLIP.WMF", cAlternateFileName="")) returned 1 [0249.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0249.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0249.765] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0249.765] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0249.765] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0249.765] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0249.766] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLIP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\clip.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0249.766] GetFileType (hFile=0x22c) returned 0x1 [0249.767] CloseHandle (hObject=0x22c) returned 1 [0249.767] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0249.767] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLIP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\clip.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8d6)) returned 1 [0249.768] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0249.768] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0249.768] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLIP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\clip.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8d6)) returned 1 [0249.768] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0249.768] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0249.768] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0249.768] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b3a, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="CMNTY_01.MID", cAlternateFileName="")) returned 1 [0249.768] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0249.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0249.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0249.769] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0249.769] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0249.769] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0249.770] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CMNTY_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cmnty_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0249.770] GetFileType (hFile=0x22c) returned 0x1 [0249.771] CloseHandle (hObject=0x22c) returned 1 [0249.771] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0249.771] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CMNTY_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cmnty_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b3a)) returned 1 [0249.771] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0249.771] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0249.771] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CMNTY_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cmnty_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b3a)) returned 1 [0249.772] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0249.772] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0249.772] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0249.772] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1496, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="CRANE.WMF", cAlternateFileName="")) returned 1 [0249.772] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0249.772] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213570 [0249.772] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0249.772] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213570 | out: hHeap=0x1f0000) returned 1 [0249.772] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0249.772] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0249.773] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANE.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\crane.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0249.774] GetFileType (hFile=0x22c) returned 0x1 [0249.774] CloseHandle (hObject=0x22c) returned 1 [0249.774] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0249.774] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANE.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\crane.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1496)) returned 1 [0249.775] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0250.198] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0250.198] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANE.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\crane.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1496)) returned 1 [0250.199] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0250.199] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0250.199] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0250.199] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc18a, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="CRANINST.WMF", cAlternateFileName="")) returned 1 [0250.199] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0250.199] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0250.199] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0250.199] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0250.200] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0250.200] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0250.200] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\craninst.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0250.201] GetFileType (hFile=0x1b0) returned 0x1 [0250.202] CloseHandle (hObject=0x1b0) returned 1 [0250.202] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0250.202] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\craninst.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc18a)) returned 1 [0250.203] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0250.203] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0250.203] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\craninst.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc18a)) returned 1 [0250.203] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0250.203] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0250.203] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0250.204] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb96, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="CUP.WMF", cAlternateFileName="")) returned 1 [0250.204] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0250.204] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0250.204] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0250.204] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0250.205] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cup.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0250.205] GetFileType (hFile=0x1b0) returned 0x1 [0250.206] CloseHandle (hObject=0x1b0) returned 1 [0250.206] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0250.206] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cup.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb96)) returned 1 [0250.207] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0250.207] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0250.207] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cup.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb96)) returned 1 [0250.207] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0250.207] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0250.207] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0250.207] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2856, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="CUPINST.WMF", cAlternateFileName="")) returned 1 [0250.208] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0250.208] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0250.208] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0250.208] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0250.208] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0250.208] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0250.209] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUPINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cupinst.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0250.210] GetFileType (hFile=0x1b0) returned 0x1 [0250.210] CloseHandle (hObject=0x1b0) returned 1 [0250.212] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0250.212] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUPINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cupinst.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2856)) returned 1 [0250.213] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0250.213] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0250.213] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUPINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cupinst.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2856)) returned 1 [0250.213] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0250.213] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0250.214] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0250.214] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7992, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="DD00117_.WMF", cAlternateFileName="")) returned 1 [0250.214] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0250.214] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0250.214] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0250.214] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0250.215] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0250.215] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0250.215] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00117_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00117_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0250.216] GetFileType (hFile=0x1b0) returned 0x1 [0250.216] CloseHandle (hObject=0x1b0) returned 1 [0250.217] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0250.217] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00117_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00117_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7992)) returned 1 [0250.217] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0250.217] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0250.217] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00117_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00117_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7992)) returned 1 [0250.218] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0250.218] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0250.218] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0250.218] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2040, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="DD00121_.WMF", cAlternateFileName="")) returned 1 [0250.218] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0250.218] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0250.218] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0250.218] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0250.218] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0250.219] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0250.219] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00121_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00121_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0250.221] GetFileType (hFile=0x1b0) returned 0x1 [0250.221] CloseHandle (hObject=0x1b0) returned 1 [0250.222] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0250.222] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00121_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00121_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2040)) returned 1 [0250.222] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0250.222] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0250.222] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00121_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00121_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2040)) returned 1 [0250.223] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0250.223] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0250.223] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0250.223] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x73bc, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="DD00234_.WMF", cAlternateFileName="")) returned 1 [0250.223] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0250.223] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0250.223] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0250.223] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0250.223] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0250.224] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0250.224] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00234_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00234_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0250.225] GetFileType (hFile=0x1b0) returned 0x1 [0250.226] CloseHandle (hObject=0x1b0) returned 1 [0250.226] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0250.227] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00234_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00234_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x73bc)) returned 1 [0250.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0250.227] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0250.227] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00234_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00234_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x73bc)) returned 1 [0250.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0250.227] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0250.228] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0250.228] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa82, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="DD00255_.WMF", cAlternateFileName="")) returned 1 [0250.228] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0250.229] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213570 [0250.229] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0250.229] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213570 | out: hHeap=0x1f0000) returned 1 [0250.229] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0250.229] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0250.230] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00255_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00255_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0250.231] GetFileType (hFile=0x1b0) returned 0x1 [0250.232] CloseHandle (hObject=0x1b0) returned 1 [0250.232] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0250.232] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00255_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00255_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa82)) returned 1 [0250.233] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0250.233] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0250.233] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00255_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00255_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa82)) returned 1 [0250.233] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0250.233] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0250.234] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0250.234] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd744774, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb10, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="DD00256_.WMF", cAlternateFileName="")) returned 1 [0250.234] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0250.234] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0250.234] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0250.234] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0250.235] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0250.235] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0250.236] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00256_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00256_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0250.236] GetFileType (hFile=0x1b0) returned 0x1 [0250.237] CloseHandle (hObject=0x1b0) returned 1 [0250.237] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0250.238] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00256_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00256_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd744774, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb10)) returned 1 [0250.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0250.238] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0250.238] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00256_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00256_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd744774, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb10)) returned 1 [0250.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0250.238] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0250.239] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0250.239] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9456, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="DD00261_.WMF", cAlternateFileName="")) returned 1 [0250.239] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0250.239] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0250.239] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0250.239] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0250.239] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0250.239] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0250.240] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00261_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00261_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0250.241] GetFileType (hFile=0x1b0) returned 0x1 [0250.241] CloseHandle (hObject=0x1b0) returned 1 [0250.242] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0250.242] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00261_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00261_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9456)) returned 1 [0250.242] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0250.243] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0250.243] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00261_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00261_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9456)) returned 1 [0250.243] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0250.243] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0250.243] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0250.243] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9c5e, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="DD00297_.WMF", cAlternateFileName="")) returned 1 [0250.401] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0250.401] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0250.401] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0250.402] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0250.402] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0250.402] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0250.403] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00297_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00297_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0250.404] GetFileType (hFile=0x21c) returned 0x1 [0250.405] CloseHandle (hObject=0x21c) returned 1 [0250.405] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0250.405] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00297_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00297_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9c5e)) returned 1 [0250.405] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0250.406] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0250.406] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00297_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00297_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9c5e)) returned 1 [0250.406] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0250.406] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0250.406] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0250.406] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x318, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="DD00372_.WMF", cAlternateFileName="")) returned 1 [0250.407] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0250.407] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0250.407] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0250.407] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0250.407] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0250.407] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0250.408] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00372_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00372_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0250.409] GetFileType (hFile=0x21c) returned 0x1 [0250.410] CloseHandle (hObject=0x21c) returned 1 [0250.410] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0250.410] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00372_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00372_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x318)) returned 1 [0250.411] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0250.411] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0250.411] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00372_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00372_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x318)) returned 1 [0250.411] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0250.411] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0250.411] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0250.412] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x44b0, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="DD00405_.WMF", cAlternateFileName="")) returned 1 [0250.412] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0250.412] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0250.412] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0250.412] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0250.412] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0250.413] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0250.413] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00405_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00405_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0250.414] GetFileType (hFile=0x21c) returned 0x1 [0250.415] CloseHandle (hObject=0x21c) returned 1 [0250.415] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0250.415] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00405_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00405_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x44b0)) returned 1 [0250.416] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0250.416] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0250.416] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00405_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00405_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x44b0)) returned 1 [0250.416] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0250.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0250.417] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0250.417] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e94, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="DD00407_.WMF", cAlternateFileName="")) returned 1 [0250.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238348 [0250.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213570 [0250.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0250.417] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213570 | out: hHeap=0x1f0000) returned 1 [0250.418] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0250.418] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238348 | out: hHeap=0x1f0000) returned 1 [0250.419] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00407_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00407_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0250.420] GetFileType (hFile=0x21c) returned 0x1 [0250.421] CloseHandle (hObject=0x21c) returned 1 [0250.421] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0250.421] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00407_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00407_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e94)) returned 1 [0250.421] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0250.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0250.422] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00407_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00407_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e94)) returned 1 [0250.422] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0250.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0250.422] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0250.422] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa7f0, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="DD00413_.WMF", cAlternateFileName="")) returned 1 [0250.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0250.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0250.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0250.423] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0250.423] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0250.423] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0250.424] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00413_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00413_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0250.425] GetFileType (hFile=0x21c) returned 0x1 [0250.425] CloseHandle (hObject=0x21c) returned 1 [0250.426] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0250.426] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00413_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00413_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa7f0)) returned 1 [0250.426] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0250.426] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0250.426] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00413_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00413_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa7f0)) returned 1 [0250.427] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0250.427] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0250.427] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0250.427] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa79c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="DD00414_.WMF", cAlternateFileName="")) returned 1 [0250.427] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0250.427] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0250.427] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0250.427] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0250.428] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0250.428] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0250.429] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00414_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00414_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0250.429] GetFileType (hFile=0x21c) returned 0x1 [0250.430] CloseHandle (hObject=0x21c) returned 1 [0250.430] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0250.430] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00414_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00414_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa79c)) returned 1 [0250.430] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0250.431] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0250.431] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00414_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00414_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa79c)) returned 1 [0250.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0250.431] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0250.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0250.431] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c8, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="DD00419_.WMF", cAlternateFileName="")) returned 1 [0250.432] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238118 [0250.432] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e88 [0250.432] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0250.432] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e88 | out: hHeap=0x1f0000) returned 1 [0250.432] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0250.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238118 | out: hHeap=0x1f0000) returned 1 [0250.433] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00419_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00419_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0250.435] GetFileType (hFile=0x21c) returned 0x1 [0250.435] CloseHandle (hObject=0x21c) returned 1 [0250.436] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0250.436] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00419_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00419_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c8)) returned 1 [0250.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0250.436] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0250.436] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00419_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00419_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c8)) returned 1 [0250.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0250.437] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0250.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0250.437] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x78c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="DD00437_.WMF", cAlternateFileName="")) returned 1 [0250.437] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2383e8 [0250.437] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0250.437] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0250.438] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0250.438] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0250.438] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2383e8 | out: hHeap=0x1f0000) returned 1 [0250.439] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00437_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00437_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0250.439] GetFileType (hFile=0x21c) returned 0x1 [0250.440] CloseHandle (hObject=0x21c) returned 1 [0250.440] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0250.440] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00437_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00437_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x78c)) returned 1 [0250.440] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0250.440] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0250.440] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00437_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00437_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x78c)) returned 1 [0250.441] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0250.441] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0250.441] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0250.441] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb88, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="DD00448_.WMF", cAlternateFileName="")) returned 1 [0250.441] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0250.441] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0250.441] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0250.441] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0250.442] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0250.442] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0250.443] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00448_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00448_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0250.443] GetFileType (hFile=0x21c) returned 0x1 [0250.444] CloseHandle (hObject=0x21c) returned 1 [0250.444] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0250.444] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00448_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00448_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb88)) returned 1 [0250.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0250.444] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0250.445] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00448_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00448_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb88)) returned 1 [0250.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0250.445] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0250.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0250.445] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2708, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="DD00449_.WMF", cAlternateFileName="")) returned 1 [0250.445] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382a8 [0250.445] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0250.445] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0250.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0250.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0250.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382a8 | out: hHeap=0x1f0000) returned 1 [0250.447] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00449_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00449_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0250.714] GetFileType (hFile=0x210) returned 0x1 [0250.714] CloseHandle (hObject=0x210) returned 1 [0250.715] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0250.715] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00449_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00449_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2708)) returned 1 [0250.715] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0250.715] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0250.716] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00449_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00449_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2708)) returned 1 [0250.716] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0250.716] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0250.716] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0250.716] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5130, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="DD00687_.WMF", cAlternateFileName="")) returned 1 [0250.716] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0250.717] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0250.717] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0250.717] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0250.717] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0250.717] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0250.718] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00687_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00687_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0250.720] GetFileType (hFile=0x210) returned 0x1 [0250.720] CloseHandle (hObject=0x210) returned 1 [0250.721] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0250.721] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00687_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00687_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5130)) returned 1 [0250.721] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0250.721] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0250.721] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00687_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00687_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5130)) returned 1 [0250.722] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0250.722] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0250.722] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0250.722] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x600c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="DD00705_.WMF", cAlternateFileName="")) returned 1 [0250.722] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0250.722] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0250.723] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0250.723] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0250.723] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0250.723] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0250.724] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00705_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00705_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0250.725] GetFileType (hFile=0x210) returned 0x1 [0250.725] CloseHandle (hObject=0x210) returned 1 [0250.726] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0250.726] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00705_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00705_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x600c)) returned 1 [0250.726] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0250.727] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0250.727] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00705_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00705_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x600c)) returned 1 [0250.727] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0250.727] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0250.727] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0250.727] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b2, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="DD01015_.WMF", cAlternateFileName="")) returned 1 [0250.728] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0250.728] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0250.728] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0250.729] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0250.729] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0250.729] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0250.730] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01015_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0250.731] GetFileType (hFile=0x210) returned 0x1 [0250.731] CloseHandle (hObject=0x210) returned 1 [0250.732] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0250.732] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01015_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b2)) returned 1 [0250.732] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0250.732] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0250.733] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01015_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b2)) returned 1 [0250.733] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0250.733] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0250.733] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0250.733] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x39e4, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="DD01039_.WMF", cAlternateFileName="")) returned 1 [0250.734] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0250.734] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0250.734] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0250.734] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0250.734] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0250.735] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0250.736] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01039_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01039_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0250.736] GetFileType (hFile=0x210) returned 0x1 [0250.737] CloseHandle (hObject=0x210) returned 1 [0250.738] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0250.738] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01039_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01039_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x39e4)) returned 1 [0250.738] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0250.738] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0250.738] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01039_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01039_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x39e4)) returned 1 [0250.739] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0250.739] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0250.739] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0250.739] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb709c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe6c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="DD01138_.WMF", cAlternateFileName="")) returned 1 [0250.740] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0250.741] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0250.741] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0250.741] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0250.741] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0250.741] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0250.742] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01138_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01138_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0250.743] GetFileType (hFile=0x210) returned 0x1 [0250.743] CloseHandle (hObject=0x210) returned 1 [0250.744] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0250.745] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01138_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01138_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb709c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe6c)) returned 1 [0250.745] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0250.745] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0250.745] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01138_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01138_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb709c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe6c)) returned 1 [0250.745] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0250.745] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0250.746] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0250.746] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe30, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="DD01139_.WMF", cAlternateFileName="")) returned 1 [0250.746] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0250.746] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0250.746] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0250.746] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0250.746] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0250.747] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0250.747] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01139_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01139_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0250.748] GetFileType (hFile=0x210) returned 0x1 [0250.749] CloseHandle (hObject=0x210) returned 1 [0250.749] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0250.749] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01139_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01139_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe30)) returned 1 [0250.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0250.750] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0250.750] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01139_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01139_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe30)) returned 1 [0250.750] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0250.750] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0250.750] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0250.750] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb709c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe20, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="DD01140_.WMF", cAlternateFileName="")) returned 1 [0250.751] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0250.751] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0250.751] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0250.751] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0250.751] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0250.751] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0250.752] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01140_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01140_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0250.753] GetFileType (hFile=0x210) returned 0x1 [0250.754] CloseHandle (hObject=0x210) returned 1 [0250.754] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0250.754] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01140_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01140_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb709c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe20)) returned 1 [0250.756] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0250.757] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0250.757] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01140_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01140_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb709c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe20)) returned 1 [0250.757] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0250.757] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0250.757] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0250.757] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb709c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x85c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="DD01143_.WMF", cAlternateFileName="")) returned 1 [0250.757] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0250.757] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0250.758] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0250.758] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0250.758] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0250.758] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0250.759] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01143_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01143_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0250.992] GetFileType (hFile=0x210) returned 0x1 [0250.992] CloseHandle (hObject=0x210) returned 1 [0250.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0250.993] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01143_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01143_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb709c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x85c)) returned 1 [0250.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0250.993] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0250.994] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01143_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01143_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb709c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x85c)) returned 1 [0250.994] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0250.994] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0250.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0250.995] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xadc, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="DD01145_.WMF", cAlternateFileName="")) returned 1 [0250.995] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0250.995] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0250.995] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0250.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0250.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0250.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0251.182] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01145_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01145_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0251.182] GetFileType (hFile=0x1e0) returned 0x1 [0251.182] CloseHandle (hObject=0x1e0) returned 1 [0251.183] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0251.183] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01145_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01145_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xadc)) returned 1 [0251.183] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0251.183] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0251.183] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01145_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01145_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xadc)) returned 1 [0251.184] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0251.184] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0251.184] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0251.184] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb709c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaec, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="DD01146_.WMF", cAlternateFileName="")) returned 1 [0251.184] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238410 [0251.184] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0251.184] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0251.184] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0251.184] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0251.184] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238410 | out: hHeap=0x1f0000) returned 1 [0251.185] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01146_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01146_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0251.185] GetFileType (hFile=0x1e0) returned 0x1 [0251.186] CloseHandle (hObject=0x1e0) returned 1 [0251.186] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0251.186] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01146_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01146_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb709c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaec)) returned 1 [0251.186] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0251.186] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0251.187] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01146_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01146_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb709c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaec)) returned 1 [0251.187] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0251.187] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0251.187] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0251.187] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb90, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="DD01151_.WMF", cAlternateFileName="")) returned 1 [0251.187] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238320 [0251.187] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0251.187] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0251.187] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0251.187] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0251.187] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238320 | out: hHeap=0x1f0000) returned 1 [0251.188] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01151_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01151_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0251.188] GetFileType (hFile=0x1e0) returned 0x1 [0251.189] CloseHandle (hObject=0x1e0) returned 1 [0251.189] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0251.189] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01151_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01151_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb90)) returned 1 [0251.189] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0251.189] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0251.189] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01151_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01151_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb90)) returned 1 [0251.190] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0251.190] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0251.190] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0251.190] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb90, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="DD01152_.WMF", cAlternateFileName="")) returned 1 [0251.190] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0251.190] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0251.190] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0251.190] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0251.190] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0251.190] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0251.191] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01152_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01152_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0251.192] GetFileType (hFile=0x1e0) returned 0x1 [0251.192] CloseHandle (hObject=0x1e0) returned 1 [0251.192] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0251.193] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01152_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01152_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb90)) returned 1 [0251.193] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0251.193] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0251.193] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01152_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01152_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb90)) returned 1 [0251.193] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0251.193] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0251.193] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0251.194] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe04, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="DD01157_.WMF", cAlternateFileName="")) returned 1 [0251.194] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0251.194] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0251.194] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0251.194] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0251.194] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0251.194] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0251.195] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01157_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01157_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0251.196] GetFileType (hFile=0x1e0) returned 0x1 [0251.196] CloseHandle (hObject=0x1e0) returned 1 [0251.196] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0251.198] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01157_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01157_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe04)) returned 1 [0251.198] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0251.198] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0251.198] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01157_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01157_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe04)) returned 1 [0251.198] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0251.199] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0251.199] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0251.199] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b4, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="DD01160_.WMF", cAlternateFileName="")) returned 1 [0251.199] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0251.199] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0251.199] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0251.199] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0251.199] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0251.199] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0251.200] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01160_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01160_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0251.261] GetFileType (hFile=0x224) returned 0x1 [0251.261] CloseHandle (hObject=0x224) returned 1 [0251.262] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0251.262] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01160_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01160_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b4)) returned 1 [0251.262] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0251.263] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0251.263] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01160_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01160_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b4)) returned 1 [0251.274] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0251.275] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0251.275] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0251.275] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8fc, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="DD01162_.WMF", cAlternateFileName="")) returned 1 [0251.275] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0251.275] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212d78 [0251.275] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0251.275] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212d78 | out: hHeap=0x1f0000) returned 1 [0251.276] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0251.276] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0251.276] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01162_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01162_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0251.276] GetFileType (hFile=0x224) returned 0x1 [0251.276] CloseHandle (hObject=0x224) returned 1 [0251.277] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0251.277] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01162_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01162_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8fc)) returned 1 [0251.277] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0251.277] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0251.277] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01162_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01162_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8fc)) returned 1 [0251.277] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0251.277] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0251.277] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0251.277] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8fc, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="DD01163_.WMF", cAlternateFileName="")) returned 1 [0251.277] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0251.277] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0251.277] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0251.278] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0251.278] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0251.278] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0251.278] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01163_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01163_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0251.278] GetFileType (hFile=0x224) returned 0x1 [0251.278] CloseHandle (hObject=0x224) returned 1 [0251.279] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0251.279] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01163_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01163_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8fc)) returned 1 [0251.279] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0251.279] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0251.279] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01163_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01163_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8fc)) returned 1 [0251.279] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0251.279] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0251.279] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0251.279] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x820, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="DD01166_.WMF", cAlternateFileName="")) returned 1 [0251.280] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0251.280] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0251.280] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0251.280] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0251.280] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0251.280] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0251.280] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01166_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01166_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0251.280] GetFileType (hFile=0x224) returned 0x1 [0251.281] CloseHandle (hObject=0x224) returned 1 [0251.281] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0251.281] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01166_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01166_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x820)) returned 1 [0251.281] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0251.281] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0251.281] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01166_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01166_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x820)) returned 1 [0251.281] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0251.281] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0251.281] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0251.281] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x820, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="DD01167_.WMF", cAlternateFileName="")) returned 1 [0251.282] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0251.282] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0251.282] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0251.282] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0251.282] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0251.282] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0251.282] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01167_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01167_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0251.282] GetFileType (hFile=0x224) returned 0x1 [0251.283] CloseHandle (hObject=0x224) returned 1 [0251.283] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0251.283] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01167_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01167_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x820)) returned 1 [0251.283] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0251.283] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0251.283] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01167_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01167_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x820)) returned 1 [0251.284] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0251.284] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0251.284] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0251.284] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7d4, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="DD01168_.WMF", cAlternateFileName="")) returned 1 [0251.284] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0251.284] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0251.284] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0251.284] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0251.284] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0251.284] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0251.285] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01168_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01168_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0251.286] GetFileType (hFile=0x224) returned 0x1 [0251.286] CloseHandle (hObject=0x224) returned 1 [0251.287] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0251.287] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01168_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01168_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7d4)) returned 1 [0251.288] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0251.288] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0251.288] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01168_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01168_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7d4)) returned 1 [0251.576] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0251.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0251.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0251.577] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e4, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="DD01169_.WMF", cAlternateFileName="")) returned 1 [0251.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0251.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0251.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0251.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0251.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0251.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0251.578] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01169_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01169_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0251.578] GetFileType (hFile=0x23c) returned 0x1 [0251.578] CloseHandle (hObject=0x23c) returned 1 [0251.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0251.579] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01169_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01169_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e4)) returned 1 [0251.579] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0251.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0251.579] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01169_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01169_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e4)) returned 1 [0251.579] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0251.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0251.579] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0251.579] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x964, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="DD01170_.WMF", cAlternateFileName="")) returned 1 [0251.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0251.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0251.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0251.580] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0251.580] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0251.580] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0251.580] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01170_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01170_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0251.581] GetFileType (hFile=0x23c) returned 0x1 [0251.581] CloseHandle (hObject=0x23c) returned 1 [0251.581] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0251.582] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01170_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01170_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x964)) returned 1 [0251.582] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0251.582] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0251.582] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01170_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01170_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x964)) returned 1 [0251.582] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0251.582] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0251.582] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0251.582] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x804, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="DD01171_.WMF", cAlternateFileName="")) returned 1 [0251.582] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0251.583] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0251.583] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0251.583] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0251.583] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0251.583] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0251.584] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01171_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01171_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0251.584] GetFileType (hFile=0x23c) returned 0x1 [0251.584] CloseHandle (hObject=0x23c) returned 1 [0251.585] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0251.585] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01171_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01171_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x804)) returned 1 [0251.585] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0251.585] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0251.585] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01171_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01171_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x804)) returned 1 [0251.585] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0251.585] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0251.585] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0251.586] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b8, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="DD01172_.WMF", cAlternateFileName="")) returned 1 [0251.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0251.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0251.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0251.586] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0251.586] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0251.586] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0251.587] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01172_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0251.587] GetFileType (hFile=0x23c) returned 0x1 [0251.587] CloseHandle (hObject=0x23c) returned 1 [0251.588] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0251.588] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01172_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b8)) returned 1 [0251.588] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0251.589] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0251.589] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01172_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b8)) returned 1 [0251.589] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0251.589] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0251.589] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0251.589] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x70c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="DD01173_.WMF", cAlternateFileName="")) returned 1 [0251.589] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0251.589] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213708 [0251.589] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0251.590] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213708 | out: hHeap=0x1f0000) returned 1 [0251.590] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0251.590] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0251.590] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01173_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0251.590] GetFileType (hFile=0x23c) returned 0x1 [0251.591] CloseHandle (hObject=0x23c) returned 1 [0251.591] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0251.591] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01173_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x70c)) returned 1 [0251.591] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0251.591] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0251.592] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01173_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x70c)) returned 1 [0251.592] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0251.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0251.592] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0251.592] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x760, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="DD01176_.WMF", cAlternateFileName="")) returned 1 [0251.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0251.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0251.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0251.592] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0251.592] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0251.593] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0251.593] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01176_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01176_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0251.593] GetFileType (hFile=0x23c) returned 0x1 [0251.594] CloseHandle (hObject=0x23c) returned 1 [0251.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0251.594] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01176_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01176_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x760)) returned 1 [0251.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0251.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0251.594] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01176_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01176_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x760)) returned 1 [0251.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0251.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0251.595] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0251.595] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xed4, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="DD01178_.WMF", cAlternateFileName="")) returned 1 [0251.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0251.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0251.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0251.595] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0251.595] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0251.595] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0251.596] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01178_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01178_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0251.596] GetFileType (hFile=0x23c) returned 0x1 [0251.596] CloseHandle (hObject=0x23c) returned 1 [0251.597] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0251.597] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01178_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01178_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xed4)) returned 1 [0251.597] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0251.597] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0251.597] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01178_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01178_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xed4)) returned 1 [0251.597] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0251.597] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0251.597] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0251.597] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e8, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="DD01179_.WMF", cAlternateFileName="")) returned 1 [0251.597] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0251.598] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0251.598] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0251.598] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0251.598] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0251.598] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0251.599] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01179_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01179_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0251.599] GetFileType (hFile=0x23c) returned 0x1 [0251.599] CloseHandle (hObject=0x23c) returned 1 [0251.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0251.600] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01179_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01179_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e8)) returned 1 [0251.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0251.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0251.600] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01179_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01179_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e8)) returned 1 [0251.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0251.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0251.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0251.601] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x824, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="DD01180_.WMF", cAlternateFileName="")) returned 1 [0251.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0251.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0251.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0251.601] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0251.601] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0251.601] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0251.602] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01180_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01180_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0251.886] GetFileType (hFile=0x1e0) returned 0x1 [0251.887] CloseHandle (hObject=0x1e0) returned 1 [0251.887] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0251.887] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01180_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01180_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x824)) returned 1 [0251.888] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0251.888] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0251.888] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01180_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01180_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x824)) returned 1 [0251.888] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0251.888] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0251.888] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0251.888] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5a8, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="DD01181_.WMF", cAlternateFileName="")) returned 1 [0251.889] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0251.889] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0251.889] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0251.889] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0251.889] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0251.889] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0251.890] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01181_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01181_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0251.890] GetFileType (hFile=0x1e0) returned 0x1 [0251.891] CloseHandle (hObject=0x1e0) returned 1 [0251.891] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0251.891] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01181_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01181_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5a8)) returned 1 [0251.891] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0251.891] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0251.892] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01181_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01181_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5a8)) returned 1 [0251.892] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0251.892] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0251.892] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0251.892] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbb4, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="DD01182_.WMF", cAlternateFileName="")) returned 1 [0251.892] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0251.892] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0251.892] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0251.893] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0251.893] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0251.893] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0251.893] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01182_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01182_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0251.894] GetFileType (hFile=0x1e0) returned 0x1 [0251.895] CloseHandle (hObject=0x1e0) returned 1 [0251.895] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0251.895] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01182_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01182_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbb4)) returned 1 [0251.895] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0251.896] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0251.896] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01182_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01182_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbb4)) returned 1 [0251.896] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0251.896] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0251.896] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0251.896] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="DD01183_.WMF", cAlternateFileName="")) returned 1 [0251.896] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0251.896] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0251.897] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0251.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0251.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0251.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0251.897] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01183_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01183_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0251.898] GetFileType (hFile=0x1e0) returned 0x1 [0251.899] CloseHandle (hObject=0x1e0) returned 1 [0251.899] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0251.899] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01183_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01183_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8f8)) returned 1 [0251.899] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0251.899] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0251.900] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01183_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01183_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8f8)) returned 1 [0251.900] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0251.900] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0251.900] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0251.900] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2174, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="DD01186_.WMF", cAlternateFileName="")) returned 1 [0251.901] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238348 [0251.901] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0251.901] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0251.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0251.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0251.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238348 | out: hHeap=0x1f0000) returned 1 [0251.902] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01186_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01186_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0251.903] GetFileType (hFile=0x1e0) returned 0x1 [0251.903] CloseHandle (hObject=0x1e0) returned 1 [0251.904] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0251.904] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01186_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01186_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2174)) returned 1 [0251.904] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0251.904] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0251.904] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01186_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01186_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2174)) returned 1 [0251.905] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0251.905] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0251.905] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0251.905] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6e8, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="DD01366_.WMF", cAlternateFileName="")) returned 1 [0251.905] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0251.905] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0251.905] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0251.906] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0251.906] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0251.906] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0251.906] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01366_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01366_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0251.907] GetFileType (hFile=0x1e0) returned 0x1 [0251.907] CloseHandle (hObject=0x1e0) returned 1 [0251.908] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0251.908] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01366_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01366_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6e8)) returned 1 [0251.908] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0251.908] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0251.909] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01366_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01366_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6e8)) returned 1 [0251.909] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0251.909] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0251.909] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0251.909] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="DD01434_.WMF", cAlternateFileName="")) returned 1 [0251.909] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0251.909] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0251.910] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0251.910] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0251.910] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0251.910] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0251.911] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01434_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01434_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0251.912] GetFileType (hFile=0x1e0) returned 0x1 [0251.913] CloseHandle (hObject=0x1e0) returned 1 [0251.913] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0251.913] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01434_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01434_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x384)) returned 1 [0251.914] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0251.914] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0251.914] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01434_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01434_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x384)) returned 1 [0251.914] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0251.914] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0251.915] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0251.915] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9dc, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="DD01585_.WMF", cAlternateFileName="")) returned 1 [0251.915] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238348 [0251.915] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0251.915] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0251.915] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0251.916] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0251.916] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238348 | out: hHeap=0x1f0000) returned 1 [0251.917] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01585_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01585_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0251.917] GetFileType (hFile=0x1e0) returned 0x1 [0251.918] CloseHandle (hObject=0x1e0) returned 1 [0251.918] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0251.919] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01585_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01585_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9dc)) returned 1 [0251.919] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0251.919] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0251.919] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01585_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01585_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9dc)) returned 1 [0251.919] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0251.919] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0251.919] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0251.919] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x914, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="DD01586_.WMF", cAlternateFileName="")) returned 1 [0251.920] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0251.920] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0251.920] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0251.920] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0251.920] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0251.920] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0251.921] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01586_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01586_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0251.921] GetFileType (hFile=0x1e0) returned 0x1 [0251.922] CloseHandle (hObject=0x1e0) returned 1 [0251.922] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0251.922] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01586_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01586_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x914)) returned 1 [0251.922] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0251.922] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0251.923] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01586_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01586_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x914)) returned 1 [0251.923] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0251.923] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0251.923] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0251.923] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4a7c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="DD01628_.WMF", cAlternateFileName="")) returned 1 [0251.923] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238348 [0251.923] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0251.923] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0251.923] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0251.924] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0251.924] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238348 | out: hHeap=0x1f0000) returned 1 [0251.924] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01628_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01628_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0252.225] GetFileType (hFile=0x1e0) returned 0x1 [0252.225] CloseHandle (hObject=0x1e0) returned 1 [0252.225] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0252.226] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01628_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01628_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4a7c)) returned 1 [0252.226] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0252.226] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0252.226] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01628_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01628_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4a7c)) returned 1 [0252.226] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0252.226] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0252.226] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0252.226] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="DD01629_.WMF", cAlternateFileName="")) returned 1 [0252.227] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0252.227] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0252.227] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0252.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0252.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0252.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0252.350] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01629_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01629_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0252.350] GetFileType (hFile=0x198) returned 0x1 [0252.350] CloseHandle (hObject=0x198) returned 1 [0252.351] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0252.351] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01629_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01629_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x244)) returned 1 [0252.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0252.351] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0252.351] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01629_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01629_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x244)) returned 1 [0252.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0252.351] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0252.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0252.352] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x128, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="DD01630_.WMF", cAlternateFileName="")) returned 1 [0252.356] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0252.356] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0252.357] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0252.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0252.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0252.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0252.358] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01630_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01630_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0252.365] GetFileType (hFile=0x198) returned 0x1 [0252.365] CloseHandle (hObject=0x198) returned 1 [0252.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0252.365] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01630_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01630_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x128)) returned 1 [0252.366] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0252.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0252.366] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01630_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01630_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x128)) returned 1 [0252.366] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0252.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0252.366] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0252.366] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x228, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="DD01631_.WMF", cAlternateFileName="")) returned 1 [0252.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0252.367] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0252.367] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0252.367] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0252.367] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0252.367] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0252.367] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01631_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01631_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0252.368] GetFileType (hFile=0x198) returned 0x1 [0252.368] CloseHandle (hObject=0x198) returned 1 [0252.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0252.369] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01631_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01631_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x228)) returned 1 [0252.369] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0252.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0252.370] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01631_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01631_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x228)) returned 1 [0252.370] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0252.370] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0252.370] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0252.370] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1034, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="DD01761_.WMF", cAlternateFileName="")) returned 1 [0252.370] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0252.370] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0252.370] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0252.370] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0252.370] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0252.371] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0252.371] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01761_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01761_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0252.379] GetFileType (hFile=0x198) returned 0x1 [0252.379] CloseHandle (hObject=0x198) returned 1 [0252.380] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0252.380] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01761_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01761_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1034)) returned 1 [0252.380] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0252.380] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0252.380] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01761_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01761_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1034)) returned 1 [0252.380] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0252.381] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0252.381] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0252.381] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8fc, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="DD01772_.WMF", cAlternateFileName="")) returned 1 [0252.381] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0252.381] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0252.381] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0252.381] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0252.381] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0252.381] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0252.382] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01772_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01772_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0252.387] GetFileType (hFile=0x198) returned 0x1 [0252.388] CloseHandle (hObject=0x198) returned 1 [0252.388] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0252.388] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01772_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01772_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8fc)) returned 1 [0252.388] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0252.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0252.389] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01772_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01772_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8fc)) returned 1 [0252.389] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0252.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0252.389] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0252.389] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcb4, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="DD01793_.WMF", cAlternateFileName="")) returned 1 [0252.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0252.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0252.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0252.390] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0252.390] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0252.390] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0252.390] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01793_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01793_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0252.393] GetFileType (hFile=0x198) returned 0x1 [0252.393] CloseHandle (hObject=0x198) returned 1 [0252.394] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0252.394] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01793_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01793_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcb4)) returned 1 [0252.394] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0252.394] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0252.394] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01793_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01793_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcb4)) returned 1 [0252.394] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0252.394] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0252.395] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0252.395] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1815, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="EAST_01.MID", cAlternateFileName="")) returned 1 [0252.395] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0252.395] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0252.395] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0252.395] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0252.395] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0252.395] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0252.396] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EAST_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\east_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0252.404] GetFileType (hFile=0x198) returned 0x1 [0252.405] CloseHandle (hObject=0x198) returned 1 [0252.405] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0252.406] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EAST_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\east_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1815)) returned 1 [0252.406] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0252.406] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0252.406] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EAST_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\east_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1815)) returned 1 [0252.406] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0252.406] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0252.406] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0252.407] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x566, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="ED00010_.WMF", cAlternateFileName="")) returned 1 [0252.407] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0252.407] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0252.407] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0252.407] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0252.407] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0252.407] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0252.408] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00010_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00010_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0252.413] GetFileType (hFile=0x198) returned 0x1 [0252.414] CloseHandle (hObject=0x198) returned 1 [0252.414] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0252.414] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00010_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00010_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x566)) returned 1 [0252.414] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0252.415] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0252.415] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00010_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00010_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x566)) returned 1 [0252.415] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0252.415] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0252.415] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0252.415] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32f2, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="ED00019_.WMF", cAlternateFileName="")) returned 1 [0252.415] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0252.416] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0252.416] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0252.416] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0252.416] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0252.416] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0252.417] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00019_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00019_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0252.418] GetFileType (hFile=0x198) returned 0x1 [0252.418] CloseHandle (hObject=0x198) returned 1 [0252.419] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0252.419] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00019_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00019_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32f2)) returned 1 [0252.419] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0252.419] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0252.419] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00019_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00019_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32f2)) returned 1 [0252.419] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0252.419] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0252.420] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0252.420] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa8c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="ED00172_.WMF", cAlternateFileName="")) returned 1 [0252.420] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0252.420] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0252.420] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0252.420] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0252.420] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0252.420] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0252.421] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00172_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0252.421] GetFileType (hFile=0x198) returned 0x1 [0252.421] CloseHandle (hObject=0x198) returned 1 [0252.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0252.422] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00172_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa8c)) returned 1 [0252.422] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0252.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0252.422] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00172_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa8c)) returned 1 [0252.422] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0252.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0252.422] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0252.422] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b2e, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="ED00184_.WMF", cAlternateFileName="")) returned 1 [0252.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0252.422] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0252.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0252.423] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0252.423] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0252.423] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0252.423] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00184_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0252.424] GetFileType (hFile=0x198) returned 0x1 [0252.424] CloseHandle (hObject=0x198) returned 1 [0252.424] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0252.424] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00184_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b2e)) returned 1 [0252.424] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0252.424] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0252.424] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00184_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b2e)) returned 1 [0252.425] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0252.425] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0252.425] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0252.425] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3670, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="EN00006_.WMF", cAlternateFileName="")) returned 1 [0252.425] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0252.425] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0252.425] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0252.425] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0252.425] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0252.425] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0252.426] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00006_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00006_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0253.078] GetFileType (hFile=0x174) returned 0x1 [0253.079] CloseHandle (hObject=0x174) returned 1 [0253.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0253.080] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00006_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00006_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3670)) returned 1 [0253.080] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0253.080] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0253.080] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00006_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00006_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3670)) returned 1 [0253.080] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0253.080] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0253.080] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0253.081] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b1a, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="EN00202_.WMF", cAlternateFileName="")) returned 1 [0253.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0253.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0253.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0253.081] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0253.081] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0253.081] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0253.082] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00202_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00202_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0253.082] GetFileType (hFile=0x174) returned 0x1 [0253.082] CloseHandle (hObject=0x174) returned 1 [0253.083] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0253.083] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00202_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00202_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b1a)) returned 1 [0253.083] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0253.083] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0253.083] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00202_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00202_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b1a)) returned 1 [0253.083] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0253.083] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0253.084] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0253.084] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3044, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="EN00222_.WMF", cAlternateFileName="")) returned 1 [0253.084] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0253.084] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0253.084] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0253.084] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0253.084] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0253.084] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0253.085] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00222_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00222_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0253.085] GetFileType (hFile=0x174) returned 0x1 [0253.086] CloseHandle (hObject=0x174) returned 1 [0253.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0253.086] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00222_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00222_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3044)) returned 1 [0253.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0253.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0253.086] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00222_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00222_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3044)) returned 1 [0253.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0253.087] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0253.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0253.087] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a7c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="EN00242_.WMF", cAlternateFileName="")) returned 1 [0253.087] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0253.087] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0253.087] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0253.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0253.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0253.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0253.088] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00242_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00242_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0253.088] GetFileType (hFile=0x174) returned 0x1 [0253.089] CloseHandle (hObject=0x174) returned 1 [0253.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0253.089] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00242_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00242_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a7c)) returned 1 [0253.089] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0253.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0253.090] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00242_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00242_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a7c)) returned 1 [0253.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0253.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0253.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0253.090] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8e8, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="EN00319_.WMF", cAlternateFileName="")) returned 1 [0253.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0253.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0253.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0253.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0253.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0253.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0253.091] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00319_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00319_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0253.091] GetFileType (hFile=0x174) returned 0x1 [0253.092] CloseHandle (hObject=0x174) returned 1 [0253.092] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0253.092] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00319_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00319_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8e8)) returned 1 [0253.092] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0253.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0253.093] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00319_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00319_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8e8)) returned 1 [0253.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0253.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0253.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0253.093] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="EN00320_.WMF", cAlternateFileName="")) returned 1 [0253.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0253.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0253.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0253.094] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0253.094] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0253.094] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0253.094] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00320_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00320_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0253.096] GetFileType (hFile=0x174) returned 0x1 [0253.096] CloseHandle (hObject=0x174) returned 1 [0253.096] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0253.096] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00320_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00320_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e0)) returned 1 [0253.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0253.096] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0253.097] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00320_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00320_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e0)) returned 1 [0253.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0253.097] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0253.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0253.097] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x439c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="EN00397_.WMF", cAlternateFileName="")) returned 1 [0253.097] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0253.097] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0253.097] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0253.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0253.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0253.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0253.098] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00397_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00397_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0253.098] GetFileType (hFile=0x174) returned 0x1 [0253.098] CloseHandle (hObject=0x174) returned 1 [0253.099] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0253.099] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00397_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00397_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x439c)) returned 1 [0253.099] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0253.099] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0253.099] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00397_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00397_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x439c)) returned 1 [0253.099] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0253.099] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0253.099] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0253.099] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f08, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="EN00902_.WMF", cAlternateFileName="")) returned 1 [0253.099] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0253.099] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0253.099] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0253.100] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0253.100] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0253.100] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0253.100] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00902_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00902_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0253.101] GetFileType (hFile=0x174) returned 0x1 [0253.102] CloseHandle (hObject=0x174) returned 1 [0253.102] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0253.102] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00902_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00902_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f08)) returned 1 [0253.102] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0253.102] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0253.102] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00902_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00902_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f08)) returned 1 [0253.102] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0253.102] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0253.103] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0253.103] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2942, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="EXPLR_01.MID", cAlternateFileName="")) returned 1 [0253.103] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0253.103] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0253.103] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0253.103] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0253.103] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0253.103] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0253.104] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EXPLR_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\explr_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0253.104] GetFileType (hFile=0x174) returned 0x1 [0253.104] CloseHandle (hObject=0x174) returned 1 [0253.105] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0253.105] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EXPLR_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\explr_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2942)) returned 1 [0253.106] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0253.106] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0253.106] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EXPLR_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\explr_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2942)) returned 1 [0253.106] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0253.106] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0253.106] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0253.106] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12ee, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="FALL_01.MID", cAlternateFileName="")) returned 1 [0253.106] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0253.106] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0253.106] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0253.106] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0253.106] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0253.106] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0253.107] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FALL_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fall_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0253.107] GetFileType (hFile=0x174) returned 0x1 [0253.108] CloseHandle (hObject=0x174) returned 1 [0253.109] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0253.109] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FALL_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fall_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12ee)) returned 1 [0253.109] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0253.109] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0253.109] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FALL_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fall_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12ee)) returned 1 [0253.109] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0253.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0253.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0253.110] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45ba, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="FD00074_.WMF", cAlternateFileName="")) returned 1 [0253.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0253.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0253.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0253.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0253.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0253.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0253.111] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00074_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00074_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0253.112] GetFileType (hFile=0x174) returned 0x1 [0253.112] CloseHandle (hObject=0x174) returned 1 [0253.113] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0253.113] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00074_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00074_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45ba)) returned 1 [0253.113] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0253.113] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0253.113] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00074_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00074_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45ba)) returned 1 [0253.113] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0253.113] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0253.113] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0253.113] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2eda, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="FD00076_.WMF", cAlternateFileName="")) returned 1 [0253.114] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0253.114] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0253.114] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0253.114] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0253.114] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0253.114] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0253.114] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00076_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00076_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0253.115] GetFileType (hFile=0x174) returned 0x1 [0253.115] CloseHandle (hObject=0x174) returned 1 [0253.115] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0253.115] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00076_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00076_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2eda)) returned 1 [0253.115] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0253.115] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0253.116] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00076_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00076_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2eda)) returned 1 [0253.116] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0253.116] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0253.116] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0253.116] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7620, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="FD00077_.WMF", cAlternateFileName="")) returned 1 [0253.116] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0253.116] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0253.116] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0253.116] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0253.116] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0253.117] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0253.117] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00077_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00077_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0253.117] GetFileType (hFile=0x174) returned 0x1 [0253.118] CloseHandle (hObject=0x174) returned 1 [0253.118] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0253.118] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00077_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00077_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7620)) returned 1 [0253.118] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0253.118] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0253.118] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00077_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00077_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7620)) returned 1 [0253.119] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0253.119] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0253.119] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0253.119] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x721c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="FD00086_.WMF", cAlternateFileName="")) returned 1 [0253.119] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0253.119] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0253.119] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0253.119] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0253.119] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0253.119] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0253.120] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00086_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00086_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0253.120] GetFileType (hFile=0x174) returned 0x1 [0253.121] CloseHandle (hObject=0x174) returned 1 [0253.121] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0253.121] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00086_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00086_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x721c)) returned 1 [0253.121] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0253.121] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0253.121] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00086_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00086_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x721c)) returned 1 [0253.122] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0253.122] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0253.122] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0253.122] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3772, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="FD00090_.WMF", cAlternateFileName="")) returned 1 [0253.122] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0253.122] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0253.122] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0253.122] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0253.122] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0253.122] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0253.123] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00090_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00090_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0253.547] GetFileType (hFile=0x174) returned 0x1 [0253.547] CloseHandle (hObject=0x174) returned 1 [0253.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0253.548] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00090_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00090_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3772)) returned 1 [0253.548] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0253.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0253.548] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00090_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00090_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3772)) returned 1 [0253.549] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0253.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0253.549] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0253.549] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc55757, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc55757, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x920e, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="FD00096_.WMF", cAlternateFileName="")) returned 1 [0253.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0253.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0253.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0253.550] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0253.550] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0253.550] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0253.550] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00096_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00096_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0253.552] GetFileType (hFile=0x174) returned 0x1 [0253.552] CloseHandle (hObject=0x174) returned 1 [0253.553] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0253.553] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00096_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00096_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc55757, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc55757, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x920e)) returned 1 [0253.553] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0253.553] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0253.553] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00096_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00096_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc55757, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc55757, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x920e)) returned 1 [0253.553] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0253.553] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0253.553] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0253.553] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc55757, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc55757, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3df0, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="FD00296_.WMF", cAlternateFileName="")) returned 1 [0253.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0253.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0253.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0253.554] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0253.554] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0253.554] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0253.554] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00296_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00296_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0253.555] GetFileType (hFile=0x174) returned 0x1 [0253.555] CloseHandle (hObject=0x174) returned 1 [0253.556] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0253.556] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00296_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00296_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc55757, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc55757, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3df0)) returned 1 [0253.556] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0253.556] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0253.556] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00296_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00296_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc55757, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc55757, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3df0)) returned 1 [0253.557] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0253.557] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0253.557] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0253.557] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc7b993, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4712, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="FD00297_.WMF", cAlternateFileName="")) returned 1 [0253.557] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0253.557] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0253.557] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0253.557] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0253.557] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0253.558] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0253.558] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00297_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00297_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0253.559] GetFileType (hFile=0x174) returned 0x1 [0253.559] CloseHandle (hObject=0x174) returned 1 [0253.559] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0253.559] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00297_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00297_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc7b993, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4712)) returned 1 [0253.559] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0253.559] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0253.560] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00297_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00297_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc7b993, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4712)) returned 1 [0253.560] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0253.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0253.560] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0253.560] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb6de, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="FD00306_.WMF", cAlternateFileName="")) returned 1 [0253.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0253.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0253.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0253.560] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0253.560] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0253.560] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0253.561] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00306_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00306_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0253.561] GetFileType (hFile=0x174) returned 0x1 [0253.561] CloseHandle (hObject=0x174) returned 1 [0253.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0253.563] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00306_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00306_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb6de)) returned 1 [0253.564] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0253.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0253.564] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00306_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00306_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb6de)) returned 1 [0253.564] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0253.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0253.564] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0253.564] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc55757, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17b4, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="FD00336_.WMF", cAlternateFileName="")) returned 1 [0253.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0253.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0253.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0253.564] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0253.564] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0253.565] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0253.565] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00336_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00336_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0253.567] GetFileType (hFile=0x174) returned 0x1 [0253.567] CloseHandle (hObject=0x174) returned 1 [0253.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0253.567] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00336_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00336_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc55757, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17b4)) returned 1 [0253.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0253.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0253.568] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00336_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00336_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc55757, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17b4)) returned 1 [0253.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0253.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0253.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0253.568] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfea, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="FD00361_.WMF", cAlternateFileName="")) returned 1 [0253.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0253.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0253.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0253.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0253.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0253.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0253.569] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00361_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00361_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0253.569] GetFileType (hFile=0x174) returned 0x1 [0253.570] CloseHandle (hObject=0x174) returned 1 [0253.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0253.570] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00361_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00361_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfea)) returned 1 [0253.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0253.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0253.570] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00361_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00361_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfea)) returned 1 [0253.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0253.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0253.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0253.571] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc55757, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2168, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="FD00369_.WMF", cAlternateFileName="")) returned 1 [0253.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0253.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0253.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0253.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0253.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0253.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0253.571] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00369_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00369_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0253.572] GetFileType (hFile=0x174) returned 0x1 [0253.572] CloseHandle (hObject=0x174) returned 1 [0253.572] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0253.572] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00369_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00369_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc55757, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2168)) returned 1 [0253.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0253.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0253.573] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00369_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00369_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc55757, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2168)) returned 1 [0253.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0253.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0253.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0253.573] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20e8, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="FD00382_.WMF", cAlternateFileName="")) returned 1 [0253.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0253.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0253.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0253.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0253.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0253.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0253.574] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00382_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00382_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0253.575] GetFileType (hFile=0x174) returned 0x1 [0253.575] CloseHandle (hObject=0x174) returned 1 [0253.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0253.575] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00382_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00382_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20e8)) returned 1 [0253.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0253.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0253.576] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00382_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00382_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20e8)) returned 1 [0253.576] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0253.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0253.576] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0253.576] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a40, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="FD00397_.WMF", cAlternateFileName="")) returned 1 [0253.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0253.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0253.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0253.576] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0253.576] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0253.576] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0253.577] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00397_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00397_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0253.577] GetFileType (hFile=0x174) returned 0x1 [0253.578] CloseHandle (hObject=0x174) returned 1 [0253.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0253.579] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00397_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00397_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a40)) returned 1 [0253.579] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0253.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0253.579] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00397_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00397_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a40)) returned 1 [0253.579] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0253.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0253.579] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0253.580] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ec6, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="FD00403_.WMF", cAlternateFileName="")) returned 1 [0253.581] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0253.581] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0253.581] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0253.582] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0253.582] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0253.582] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0253.582] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00403_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00403_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0253.583] GetFileType (hFile=0x174) returned 0x1 [0253.583] CloseHandle (hObject=0x174) returned 1 [0253.583] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0253.583] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00403_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00403_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ec6)) returned 1 [0253.583] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0253.583] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0253.584] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00403_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00403_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ec6)) returned 1 [0253.584] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0253.584] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0253.584] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0253.584] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2afa, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="FD00414_.WMF", cAlternateFileName="")) returned 1 [0253.584] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0253.584] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0253.584] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0253.584] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0253.584] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0253.584] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0253.585] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00414_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00414_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0254.233] GetFileType (hFile=0x1e8) returned 0x1 [0254.233] CloseHandle (hObject=0x1e8) returned 1 [0254.234] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0254.234] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00414_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00414_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2afa)) returned 1 [0254.235] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0254.235] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0254.235] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00414_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00414_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2afa)) returned 1 [0254.235] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0254.235] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0254.235] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0254.236] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x400c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="FD00419_.WMF", cAlternateFileName="")) returned 1 [0254.236] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0254.236] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0254.236] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0254.236] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0254.236] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0254.236] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0254.662] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00419_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00419_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0254.663] GetFileType (hFile=0x174) returned 0x1 [0254.663] CloseHandle (hObject=0x174) returned 1 [0254.663] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0254.664] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00419_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00419_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x400c)) returned 1 [0254.664] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0254.664] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0254.664] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00419_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00419_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x400c)) returned 1 [0254.664] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0254.664] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0254.664] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0254.664] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12bc, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="FD00428_.WMF", cAlternateFileName="")) returned 1 [0254.664] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0254.664] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0254.664] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0254.664] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0254.665] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0254.665] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0254.665] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00428_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00428_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0254.665] GetFileType (hFile=0x174) returned 0x1 [0254.665] CloseHandle (hObject=0x174) returned 1 [0254.666] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0254.666] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00428_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00428_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12bc)) returned 1 [0254.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0254.666] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0254.666] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00428_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00428_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12bc)) returned 1 [0254.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0254.666] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0254.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0254.666] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x83c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="FD00435_.WMF", cAlternateFileName="")) returned 1 [0254.666] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0254.666] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0254.666] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0254.667] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0254.667] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0254.667] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0254.667] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00435_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00435_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0254.667] GetFileType (hFile=0x174) returned 0x1 [0254.667] CloseHandle (hObject=0x174) returned 1 [0254.668] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0254.668] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00435_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00435_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x83c)) returned 1 [0254.668] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0254.668] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0254.668] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00435_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00435_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x83c)) returned 1 [0254.668] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0254.668] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0254.668] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0254.668] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13ea, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="FD00438_.WMF", cAlternateFileName="")) returned 1 [0254.668] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0254.668] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0254.669] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0254.669] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0254.669] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0254.669] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0254.669] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00438_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00438_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0254.669] GetFileType (hFile=0x174) returned 0x1 [0254.670] CloseHandle (hObject=0x174) returned 1 [0254.670] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0254.670] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00438_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00438_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13ea)) returned 1 [0254.670] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0254.670] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0254.670] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00438_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00438_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13ea)) returned 1 [0254.670] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0254.670] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0254.670] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0254.670] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x22de, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="FD00455_.WMF", cAlternateFileName="")) returned 1 [0254.671] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0254.671] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0254.671] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0254.671] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0254.671] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0254.671] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0254.671] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00455_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00455_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0254.671] GetFileType (hFile=0x174) returned 0x1 [0254.672] CloseHandle (hObject=0x174) returned 1 [0254.672] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0254.672] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00455_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00455_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x22de)) returned 1 [0254.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0254.672] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0254.673] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00455_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00455_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x22de)) returned 1 [0254.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0254.673] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0254.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0254.673] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43fe, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="FD00459_.WMF", cAlternateFileName="")) returned 1 [0254.673] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0254.673] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0254.673] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0254.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0254.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0254.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0254.674] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00459_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00459_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0254.674] GetFileType (hFile=0x174) returned 0x1 [0254.674] CloseHandle (hObject=0x174) returned 1 [0254.675] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0254.675] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00459_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00459_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43fe)) returned 1 [0254.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0254.675] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0254.675] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00459_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00459_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43fe)) returned 1 [0254.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0254.675] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0254.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0254.675] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5c0, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="FD00543_.WMF", cAlternateFileName="")) returned 1 [0254.675] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0254.675] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0254.676] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0254.676] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0254.676] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0254.676] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0254.676] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00543_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00543_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0254.676] GetFileType (hFile=0x174) returned 0x1 [0254.677] CloseHandle (hObject=0x174) returned 1 [0254.677] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0254.677] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00543_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00543_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5c0)) returned 1 [0254.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0254.678] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0254.678] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00543_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00543_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5c0)) returned 1 [0254.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0254.678] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0254.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0254.678] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x148c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="FD00544_.WMF", cAlternateFileName="")) returned 1 [0254.678] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0254.678] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0254.679] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0254.679] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0254.679] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0254.679] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0254.679] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00544_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00544_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0254.680] GetFileType (hFile=0x174) returned 0x1 [0254.680] CloseHandle (hObject=0x174) returned 1 [0254.680] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0254.680] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00544_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00544_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x148c)) returned 1 [0254.681] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0254.681] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0254.681] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00544_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00544_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x148c)) returned 1 [0254.681] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0254.681] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0254.681] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0254.681] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x380, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="FD00564_.WMF", cAlternateFileName="")) returned 1 [0254.681] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0254.681] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0254.681] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0254.682] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0254.682] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0254.682] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0254.682] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00564_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00564_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0254.683] GetFileType (hFile=0x174) returned 0x1 [0254.683] CloseHandle (hObject=0x174) returned 1 [0254.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0254.683] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00564_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00564_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x380)) returned 1 [0254.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0254.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0254.684] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00564_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00564_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x380)) returned 1 [0254.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0254.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0254.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0254.684] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2f0, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="FD00586_.WMF", cAlternateFileName="")) returned 1 [0254.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0254.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0254.685] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0254.685] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0254.685] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0254.685] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0254.685] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00586_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00586_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0254.688] GetFileType (hFile=0x174) returned 0x1 [0254.688] CloseHandle (hObject=0x174) returned 1 [0254.690] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0254.690] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00586_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00586_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2f0)) returned 1 [0254.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0254.691] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0254.691] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00586_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00586_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2f0)) returned 1 [0254.692] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0254.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0254.692] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0254.692] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b90, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="FD00775_.WMF", cAlternateFileName="")) returned 1 [0254.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0254.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0254.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0254.692] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0254.692] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0254.693] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0254.695] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00775_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00775_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0254.695] GetFileType (hFile=0x174) returned 0x1 [0254.696] CloseHandle (hObject=0x174) returned 1 [0254.696] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0254.696] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00775_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00775_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b90)) returned 1 [0254.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0254.697] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0254.697] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00775_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00775_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b90)) returned 1 [0254.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0254.697] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0254.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0254.697] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2332, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="FD00779_.WMF", cAlternateFileName="")) returned 1 [0254.697] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0254.697] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0254.697] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0254.698] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0254.698] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0254.698] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0254.698] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00779_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00779_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0254.699] GetFileType (hFile=0x174) returned 0x1 [0254.699] CloseHandle (hObject=0x174) returned 1 [0254.699] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0254.699] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00779_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00779_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2332)) returned 1 [0254.700] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0254.700] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0254.700] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00779_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00779_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2332)) returned 1 [0254.700] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0254.700] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0254.700] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0254.700] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3690, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="FD00799_.WMF", cAlternateFileName="")) returned 1 [0254.700] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0254.700] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0254.700] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0254.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0254.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0254.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0254.701] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00799_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00799_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0254.702] GetFileType (hFile=0x174) returned 0x1 [0254.702] CloseHandle (hObject=0x174) returned 1 [0254.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0254.703] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00799_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00799_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3690)) returned 1 [0254.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0254.703] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0254.703] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00799_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00799_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3690)) returned 1 [0254.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0254.703] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0254.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0254.703] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa6d0, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="FD00814_.WMF", cAlternateFileName="")) returned 1 [0254.703] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0254.703] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0254.703] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0254.704] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0254.704] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0254.704] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0254.704] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00814_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00814_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0255.261] GetFileType (hFile=0x198) returned 0x1 [0255.261] CloseHandle (hObject=0x198) returned 1 [0255.261] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0255.262] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00814_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00814_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa6d0)) returned 1 [0255.262] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0255.262] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0255.262] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00814_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00814_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa6d0)) returned 1 [0255.262] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0255.262] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0255.262] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0255.263] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b3c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="FD00965_.WMF", cAlternateFileName="")) returned 1 [0255.263] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0255.263] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0255.263] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0255.263] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0255.263] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0255.263] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0255.263] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00965_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00965_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0255.264] GetFileType (hFile=0x198) returned 0x1 [0255.264] CloseHandle (hObject=0x198) returned 1 [0255.264] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0255.264] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00965_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00965_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b3c)) returned 1 [0255.265] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0255.265] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0255.265] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00965_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00965_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b3c)) returned 1 [0255.265] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0255.265] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0255.265] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0255.265] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x121a, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="FD01074_.WMF", cAlternateFileName="")) returned 1 [0255.265] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0255.265] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0255.265] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0255.266] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0255.266] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0255.266] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0255.266] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01074_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01074_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0255.267] GetFileType (hFile=0x198) returned 0x1 [0255.267] CloseHandle (hObject=0x198) returned 1 [0255.267] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0255.268] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01074_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01074_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x121a)) returned 1 [0255.268] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0255.268] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0255.268] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01074_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01074_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x121a)) returned 1 [0255.268] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0255.268] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0255.268] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0255.268] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x96c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="FD01084_.WMF", cAlternateFileName="")) returned 1 [0255.269] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0255.269] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0255.269] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0255.269] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0255.269] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0255.269] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0255.269] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01084_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01084_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0255.270] GetFileType (hFile=0x198) returned 0x1 [0255.270] CloseHandle (hObject=0x198) returned 1 [0255.271] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0255.271] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01084_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01084_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x96c)) returned 1 [0255.271] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0255.272] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0255.272] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01084_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01084_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x96c)) returned 1 [0255.272] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0255.272] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0255.272] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0255.272] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1378, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="FD01176_.WMF", cAlternateFileName="")) returned 1 [0255.272] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0255.272] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0255.273] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0255.273] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0255.273] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0255.273] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0255.273] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01176_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01176_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0255.274] GetFileType (hFile=0x198) returned 0x1 [0255.274] CloseHandle (hObject=0x198) returned 1 [0255.275] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0255.275] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01176_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01176_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1378)) returned 1 [0255.275] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0255.275] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0255.275] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01176_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01176_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1378)) returned 1 [0255.275] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0255.275] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0255.275] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0255.275] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf7c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="FD01191_.WMF", cAlternateFileName="")) returned 1 [0255.276] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0255.276] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0255.276] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0255.276] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0255.276] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0255.276] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0255.277] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01191_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01191_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0255.277] GetFileType (hFile=0x198) returned 0x1 [0255.277] CloseHandle (hObject=0x198) returned 1 [0255.277] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0255.277] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01191_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01191_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf7c)) returned 1 [0255.278] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0255.278] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0255.278] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01191_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01191_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf7c)) returned 1 [0255.278] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0255.278] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0255.278] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0255.278] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf2a4e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x488, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="FD01193_.WMF", cAlternateFileName="")) returned 1 [0255.278] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0255.278] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0255.279] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0255.279] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0255.279] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0255.279] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0255.279] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01193_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01193_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0255.280] GetFileType (hFile=0x198) returned 0x1 [0255.280] CloseHandle (hObject=0x198) returned 1 [0255.280] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0255.280] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01193_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01193_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf2a4e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x488)) returned 1 [0255.281] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0255.281] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0255.281] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01193_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01193_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf2a4e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x488)) returned 1 [0255.281] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0255.281] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0255.281] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0255.281] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf2a4e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x91c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="FD01196_.WMF", cAlternateFileName="")) returned 1 [0255.281] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0255.281] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0255.281] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0255.281] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0255.282] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0255.282] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0255.282] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01196_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01196_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0255.282] GetFileType (hFile=0x198) returned 0x1 [0255.283] CloseHandle (hObject=0x198) returned 1 [0255.283] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0255.283] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01196_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01196_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf2a4e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x91c)) returned 1 [0255.283] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0255.283] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0255.284] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01196_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01196_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf2a4e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x91c)) returned 1 [0255.284] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0255.284] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0255.284] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0255.284] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x284c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="FD01548_.WMF", cAlternateFileName="")) returned 1 [0255.284] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0255.284] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0255.284] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0255.284] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0255.284] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0255.284] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0255.285] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01548_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01548_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0255.285] GetFileType (hFile=0x198) returned 0x1 [0255.285] CloseHandle (hObject=0x198) returned 1 [0255.286] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0255.286] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01548_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01548_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x284c)) returned 1 [0255.286] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0255.286] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0255.286] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01548_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01548_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x284c)) returned 1 [0255.288] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0255.288] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0255.288] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0255.288] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf2a4e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x76ce, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="FD01657_.WMF", cAlternateFileName="")) returned 1 [0255.288] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0255.288] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0255.288] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0255.288] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0255.289] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0255.289] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0255.289] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01657_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01657_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0255.289] GetFileType (hFile=0x198) returned 0x1 [0255.290] CloseHandle (hObject=0x198) returned 1 [0255.290] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0255.290] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01657_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01657_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf2a4e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x76ce)) returned 1 [0255.291] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0255.291] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0255.291] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01657_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01657_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf2a4e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x76ce)) returned 1 [0255.291] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0255.291] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0255.291] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0255.291] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4604, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="FD01658_.WMF", cAlternateFileName="")) returned 1 [0255.291] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0255.292] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0255.292] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0255.292] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0255.292] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0255.292] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0255.293] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01658_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01658_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0255.293] GetFileType (hFile=0x198) returned 0x1 [0255.294] CloseHandle (hObject=0x198) returned 1 [0255.294] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0255.294] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01658_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01658_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4604)) returned 1 [0255.294] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0255.295] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0255.295] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01658_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01658_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4604)) returned 1 [0255.295] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0255.295] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0255.295] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0255.295] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x79cc, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="FD01659_.WMF", cAlternateFileName="")) returned 1 [0255.295] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0255.295] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0255.296] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0255.296] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0255.296] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0255.296] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0255.297] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01659_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01659_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0255.532] GetFileType (hFile=0x1e0) returned 0x1 [0255.533] CloseHandle (hObject=0x1e0) returned 1 [0255.533] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0255.533] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01659_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01659_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x79cc)) returned 1 [0255.533] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0255.533] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0255.533] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01659_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01659_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x79cc)) returned 1 [0255.534] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0255.534] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0255.534] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0255.534] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x329e, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="FD01660_.WMF", cAlternateFileName="")) returned 1 [0255.534] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0255.534] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0255.534] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0255.535] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0255.535] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0255.535] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0255.536] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01660_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01660_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0255.537] GetFileType (hFile=0x1e0) returned 0x1 [0255.538] CloseHandle (hObject=0x1e0) returned 1 [0255.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0255.538] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01660_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01660_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x329e)) returned 1 [0255.538] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0255.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0255.538] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01660_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01660_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x329e)) returned 1 [0255.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0255.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0255.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0255.539] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9b8, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="FD02068_.WMF", cAlternateFileName="")) returned 1 [0255.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0255.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0255.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0255.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0255.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0255.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0255.540] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02068_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02068_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0255.540] GetFileType (hFile=0x1e0) returned 0x1 [0255.540] CloseHandle (hObject=0x1e0) returned 1 [0255.541] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0255.541] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02068_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02068_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9b8)) returned 1 [0255.541] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0255.541] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0255.541] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02068_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02068_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9b8)) returned 1 [0255.541] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0255.541] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0255.541] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0255.541] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x88c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="FD02071_.WMF", cAlternateFileName="")) returned 1 [0255.541] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0255.542] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0255.542] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0255.542] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0255.542] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0255.542] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0255.542] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02071_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02071_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0255.543] GetFileType (hFile=0x1e0) returned 0x1 [0255.543] CloseHandle (hObject=0x1e0) returned 1 [0255.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0255.543] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02071_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02071_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x88c)) returned 1 [0255.544] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0255.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0255.544] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02071_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02071_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x88c)) returned 1 [0255.544] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0255.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0255.544] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0255.544] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x112c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="FD02075_.WMF", cAlternateFileName="")) returned 1 [0255.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0255.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0255.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0255.544] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0255.544] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0255.544] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0255.545] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02075_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02075_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0255.545] GetFileType (hFile=0x1e0) returned 0x1 [0255.545] CloseHandle (hObject=0x1e0) returned 1 [0255.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0255.546] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02075_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02075_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x112c)) returned 1 [0255.546] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0255.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0255.546] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02075_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02075_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x112c)) returned 1 [0255.546] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0255.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0255.546] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0255.546] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe70, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="FD02088_.WMF", cAlternateFileName="")) returned 1 [0255.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0255.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0255.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0255.546] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0255.547] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0255.547] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0255.547] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02088_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02088_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0255.548] GetFileType (hFile=0x1e0) returned 0x1 [0255.548] CloseHandle (hObject=0x1e0) returned 1 [0255.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0255.549] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02088_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02088_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe70)) returned 1 [0255.549] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0255.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0255.549] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02088_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02088_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe70)) returned 1 [0255.549] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0255.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0255.549] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0255.549] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x61c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="FD02097_.WMF", cAlternateFileName="")) returned 1 [0255.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0255.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0255.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0255.549] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0255.549] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0255.550] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0255.550] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02097_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02097_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0255.550] GetFileType (hFile=0x1e0) returned 0x1 [0255.551] CloseHandle (hObject=0x1e0) returned 1 [0255.551] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0255.551] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02097_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02097_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x61c)) returned 1 [0255.551] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0255.551] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0255.551] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02097_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02097_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x61c)) returned 1 [0255.551] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0255.551] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0255.551] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0255.552] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1234, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="FD02115_.WMF", cAlternateFileName="")) returned 1 [0255.552] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0255.552] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0255.552] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0255.552] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0255.552] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0255.552] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0255.553] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02115_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02115_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0255.553] GetFileType (hFile=0x1e0) returned 0x1 [0255.554] CloseHandle (hObject=0x1e0) returned 1 [0255.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0255.554] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02115_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02115_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1234)) returned 1 [0255.554] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0255.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0255.554] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02115_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02115_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1234)) returned 1 [0255.555] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0255.555] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0255.555] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0255.555] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf94, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="FD02116_.WMF", cAlternateFileName="")) returned 1 [0255.556] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0255.557] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0255.557] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0255.557] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0255.557] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0255.557] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0255.558] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02116_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02116_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0255.558] GetFileType (hFile=0x1e0) returned 0x1 [0255.559] CloseHandle (hObject=0x1e0) returned 1 [0255.559] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0255.559] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02116_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02116_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf94)) returned 1 [0255.560] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0255.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0255.560] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02116_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02116_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf94)) returned 1 [0255.560] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0255.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0255.560] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0255.560] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa4c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="FD02141_.WMF", cAlternateFileName="")) returned 1 [0255.561] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0255.561] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0255.561] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0255.561] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0255.561] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0255.561] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0255.562] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02141_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02141_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0255.563] GetFileType (hFile=0x1e0) returned 0x1 [0255.563] CloseHandle (hObject=0x1e0) returned 1 [0255.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0255.564] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02141_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02141_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa4c)) returned 1 [0255.564] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0255.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0255.565] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02141_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02141_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa4c)) returned 1 [0255.565] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0255.565] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0255.565] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0255.565] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf2a4e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1510, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="FD02153_.WMF", cAlternateFileName="")) returned 1 [0255.565] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0255.565] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0255.565] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0255.566] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0255.566] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0255.566] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0255.567] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02153_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02153_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0255.567] GetFileType (hFile=0x1e0) returned 0x1 [0255.568] CloseHandle (hObject=0x1e0) returned 1 [0255.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0255.568] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02153_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02153_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf2a4e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1510)) returned 1 [0255.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0255.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0255.569] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02153_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02153_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf2a4e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1510)) returned 1 [0255.569] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0255.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0255.569] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0255.569] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x670, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="FD02158_.WMF", cAlternateFileName="")) returned 1 [0255.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0255.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0256.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0256.048] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0256.048] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0256.049] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0256.049] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02158_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02158_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0256.050] GetFileType (hFile=0x21c) returned 0x1 [0256.050] CloseHandle (hObject=0x21c) returned 1 [0256.050] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0256.051] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02158_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02158_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x670)) returned 1 [0256.051] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0256.051] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0256.051] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02158_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02158_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x670)) returned 1 [0256.051] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0256.051] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0256.052] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0256.052] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc38, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="FD02161_.WMF", cAlternateFileName="")) returned 1 [0256.052] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0256.052] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0256.052] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0256.053] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0256.053] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0256.053] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0256.053] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02161_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02161_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0256.054] GetFileType (hFile=0x21c) returned 0x1 [0256.054] CloseHandle (hObject=0x21c) returned 1 [0256.055] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0256.055] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02161_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02161_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc38)) returned 1 [0256.055] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0256.055] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0256.055] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02161_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02161_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc38)) returned 1 [0256.056] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0256.056] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0256.056] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0256.056] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32b5, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="FINCL_01.MID", cAlternateFileName="")) returned 1 [0256.056] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0256.056] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0256.056] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0256.056] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0256.056] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0256.057] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0256.057] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fincl_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0256.057] GetFileType (hFile=0x21c) returned 0x1 [0256.058] CloseHandle (hObject=0x21c) returned 1 [0256.058] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0256.058] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fincl_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32b5)) returned 1 [0256.058] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0256.058] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0256.058] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fincl_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32b5)) returned 1 [0256.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0256.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0256.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0256.059] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf2a4e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2466, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="FINCL_02.MID", cAlternateFileName="")) returned 1 [0256.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0256.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0256.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0256.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0256.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0256.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0256.060] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_02.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fincl_02.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0256.060] GetFileType (hFile=0x21c) returned 0x1 [0256.060] CloseHandle (hObject=0x21c) returned 1 [0256.060] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0256.060] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_02.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fincl_02.mid"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf2a4e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2466)) returned 1 [0256.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0256.060] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0256.060] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_02.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fincl_02.mid"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf2a4e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2466)) returned 1 [0256.061] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0256.061] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0256.061] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0256.061] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x816, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="FLAP.WMF", cAlternateFileName="")) returned 1 [0256.061] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0256.061] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0256.061] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0256.061] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0256.061] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0256.061] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0256.062] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FLAP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\flap.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0256.062] GetFileType (hFile=0x21c) returned 0x1 [0256.062] CloseHandle (hObject=0x21c) returned 1 [0256.062] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0256.062] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FLAP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\flap.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x816)) returned 1 [0256.063] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0256.063] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0256.063] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FLAP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\flap.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x816)) returned 1 [0256.063] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0256.063] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0256.063] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0256.063] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d8f, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="GRDEN_01.MID", cAlternateFileName="")) returned 1 [0256.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0256.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0256.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0256.064] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0256.064] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0256.064] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0256.065] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRDEN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\grden_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0256.065] GetFileType (hFile=0x21c) returned 0x1 [0256.065] CloseHandle (hObject=0x21c) returned 1 [0256.065] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0256.065] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRDEN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\grden_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d8f)) returned 1 [0256.066] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0256.066] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0256.066] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRDEN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\grden_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d8f)) returned 1 [0256.066] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0256.066] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0256.066] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0256.066] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18bb, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="GRID_01.MID", cAlternateFileName="")) returned 1 [0256.066] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0256.066] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0256.066] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0256.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0256.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0256.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0256.067] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRID_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\grid_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0256.068] GetFileType (hFile=0x21c) returned 0x1 [0256.069] CloseHandle (hObject=0x21c) returned 1 [0256.069] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0256.069] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRID_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\grid_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18bb)) returned 1 [0256.069] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0256.069] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0256.069] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRID_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\grid_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18bb)) returned 1 [0256.069] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0256.069] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0256.069] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0256.069] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xeb4, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="HH00057_.WMF", cAlternateFileName="")) returned 1 [0256.069] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0256.070] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0256.070] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0256.070] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0256.070] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0256.070] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0256.070] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00057_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00057_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0256.071] GetFileType (hFile=0x21c) returned 0x1 [0256.071] CloseHandle (hObject=0x21c) returned 1 [0256.071] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0256.071] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00057_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00057_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xeb4)) returned 1 [0256.071] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0256.071] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0256.071] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00057_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00057_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xeb4)) returned 1 [0256.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0256.072] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0256.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0256.072] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9a8, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="HH00084_.WMF", cAlternateFileName="")) returned 1 [0256.072] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0256.072] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0256.072] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0256.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0256.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0256.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0256.072] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00084_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00084_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0256.073] GetFileType (hFile=0x21c) returned 0x1 [0256.073] CloseHandle (hObject=0x21c) returned 1 [0256.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0256.073] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00084_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00084_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9a8)) returned 1 [0256.073] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0256.074] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0256.074] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00084_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00084_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9a8)) returned 1 [0256.074] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0256.074] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0256.074] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0256.074] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b8, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="HH00231_.WMF", cAlternateFileName="")) returned 1 [0256.074] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0256.074] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0256.074] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0256.074] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0256.074] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0256.074] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0256.075] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00231_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00231_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0256.076] GetFileType (hFile=0x21c) returned 0x1 [0256.076] CloseHandle (hObject=0x21c) returned 1 [0256.077] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0256.077] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00231_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00231_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b8)) returned 1 [0256.077] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0256.077] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0256.077] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00231_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00231_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b8)) returned 1 [0256.077] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0256.077] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0256.077] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0256.077] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x402, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="HH00235_.WMF", cAlternateFileName="")) returned 1 [0256.077] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0256.077] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0256.077] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0256.077] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0256.078] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0256.078] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0256.078] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00235_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00235_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0256.078] GetFileType (hFile=0x21c) returned 0x1 [0256.079] CloseHandle (hObject=0x21c) returned 1 [0256.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0256.079] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00235_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00235_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x402)) returned 1 [0256.079] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0256.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0256.079] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00235_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00235_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x402)) returned 1 [0256.079] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0256.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0256.080] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0256.080] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcd6, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="HH00236_.WMF", cAlternateFileName="")) returned 1 [0256.080] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0256.080] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0256.080] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0256.080] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0256.080] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0256.080] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0256.080] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00236_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00236_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0256.081] GetFileType (hFile=0x21c) returned 0x1 [0256.081] CloseHandle (hObject=0x21c) returned 1 [0256.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0256.081] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00236_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00236_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcd6)) returned 1 [0256.081] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0256.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0256.081] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00236_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00236_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcd6)) returned 1 [0256.081] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0256.082] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0256.082] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0256.082] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7a8, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="HH00241_.WMF", cAlternateFileName="")) returned 1 [0256.082] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0256.082] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0256.082] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0256.082] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0256.082] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0256.082] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0256.082] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00241_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00241_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0256.083] GetFileType (hFile=0x21c) returned 0x1 [0256.083] CloseHandle (hObject=0x21c) returned 1 [0256.083] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0256.083] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00241_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00241_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7a8)) returned 1 [0256.083] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0256.083] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0256.083] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00241_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00241_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7a8)) returned 1 [0256.083] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0256.476] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0256.477] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0256.477] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe4e, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="HH00260_.WMF", cAlternateFileName="")) returned 1 [0256.477] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0256.477] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0256.477] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0256.477] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0256.477] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0256.478] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0256.478] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00260_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00260_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0256.479] GetFileType (hFile=0x19c) returned 0x1 [0256.479] CloseHandle (hObject=0x19c) returned 1 [0256.479] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0256.480] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00260_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00260_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe4e)) returned 1 [0256.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0256.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0256.480] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00260_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00260_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe4e)) returned 1 [0256.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0256.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0256.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0256.480] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc8, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="HH00276_.WMF", cAlternateFileName="")) returned 1 [0256.481] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0256.481] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0256.481] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0256.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0256.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0256.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0256.482] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00276_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00276_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0256.482] GetFileType (hFile=0x19c) returned 0x1 [0256.482] CloseHandle (hObject=0x19c) returned 1 [0256.482] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0256.482] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00276_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00276_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc8)) returned 1 [0256.483] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0256.483] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0256.483] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00276_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00276_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc8)) returned 1 [0256.483] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0256.483] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0256.483] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0256.483] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5f8, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="HH00334_.WMF", cAlternateFileName="")) returned 1 [0256.483] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0256.483] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0256.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0256.484] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0256.484] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0256.484] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0256.484] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00334_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00334_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0256.485] GetFileType (hFile=0x19c) returned 0x1 [0256.485] CloseHandle (hObject=0x19c) returned 1 [0256.486] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0256.486] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00334_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00334_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5f8)) returned 1 [0256.486] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0256.486] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0256.486] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00334_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00334_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5f8)) returned 1 [0256.486] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0256.486] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0256.486] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0256.487] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xce2, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="HH00443_.WMF", cAlternateFileName="")) returned 1 [0256.487] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0256.487] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0256.487] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0256.487] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0256.487] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0256.487] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0256.488] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00443_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00443_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0256.488] GetFileType (hFile=0x19c) returned 0x1 [0256.489] CloseHandle (hObject=0x19c) returned 1 [0256.489] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0256.489] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00443_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00443_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xce2)) returned 1 [0256.489] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0256.489] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0256.489] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00443_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00443_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xce2)) returned 1 [0256.489] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0256.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0256.490] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0256.490] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x332, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="HH00513_.WMF", cAlternateFileName="")) returned 1 [0256.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0256.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0256.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0256.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0256.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0256.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0256.491] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00513_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00513_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0256.492] GetFileType (hFile=0x19c) returned 0x1 [0256.492] CloseHandle (hObject=0x19c) returned 1 [0256.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0256.493] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00513_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00513_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x332)) returned 1 [0256.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0256.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0256.493] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00513_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00513_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x332)) returned 1 [0256.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0256.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0256.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0256.493] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3960, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="HH00524_.WMF", cAlternateFileName="")) returned 1 [0256.494] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0256.494] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0256.494] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0256.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0256.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0256.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0256.495] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00524_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00524_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0256.495] GetFileType (hFile=0x19c) returned 0x1 [0256.495] CloseHandle (hObject=0x19c) returned 1 [0256.496] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0256.496] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00524_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00524_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3960)) returned 1 [0256.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0256.496] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0256.496] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00524_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00524_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3960)) returned 1 [0256.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0256.496] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0256.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0256.497] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x34e2, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="HH00526_.WMF", cAlternateFileName="")) returned 1 [0256.497] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0256.497] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0256.497] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0256.497] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0256.497] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0256.497] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0256.497] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00526_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00526_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0256.507] GetFileType (hFile=0x21c) returned 0x1 [0256.507] CloseHandle (hObject=0x21c) returned 1 [0256.507] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0256.507] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00526_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00526_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x34e2)) returned 1 [0256.507] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0256.507] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0256.507] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00526_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00526_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x34e2)) returned 1 [0256.508] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0256.508] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0256.508] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0256.508] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16a6, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="HH00527_.WMF", cAlternateFileName="")) returned 1 [0256.508] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0256.508] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0256.508] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0256.508] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0256.508] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0256.508] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0256.509] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00527_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00527_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0256.509] GetFileType (hFile=0x21c) returned 0x1 [0256.510] CloseHandle (hObject=0x21c) returned 1 [0256.510] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0256.510] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00527_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00527_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16a6)) returned 1 [0256.510] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0256.510] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0256.510] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00527_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00527_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16a6)) returned 1 [0256.510] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0256.510] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0256.511] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0256.511] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe86, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="HH00546_.WMF", cAlternateFileName="")) returned 1 [0256.511] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0256.511] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0256.511] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0256.511] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0256.511] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0256.511] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0256.512] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00546_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00546_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0256.512] GetFileType (hFile=0x21c) returned 0x1 [0256.512] CloseHandle (hObject=0x21c) returned 1 [0256.513] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0256.513] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00546_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00546_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe86)) returned 1 [0256.513] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0256.513] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0256.513] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00546_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00546_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe86)) returned 1 [0256.513] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0256.513] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0256.513] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0256.513] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5bc, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="HH00601_.WMF", cAlternateFileName="")) returned 1 [0256.513] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0256.514] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0256.514] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0256.514] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0256.514] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0256.514] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0256.514] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00601_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00601_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0256.515] GetFileType (hFile=0x21c) returned 0x1 [0256.515] CloseHandle (hObject=0x21c) returned 1 [0256.516] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0256.516] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00601_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00601_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5bc)) returned 1 [0256.516] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0256.516] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0256.516] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00601_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00601_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5bc)) returned 1 [0256.516] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0256.516] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0256.516] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0256.516] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x578, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="HH00602_.WMF", cAlternateFileName="")) returned 1 [0256.516] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0256.517] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0256.517] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0256.517] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0256.517] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0256.517] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0256.518] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00602_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00602_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0256.518] GetFileType (hFile=0x21c) returned 0x1 [0256.518] CloseHandle (hObject=0x21c) returned 1 [0256.519] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0256.519] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00602_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00602_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x578)) returned 1 [0256.519] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0256.519] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0256.519] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00602_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00602_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x578)) returned 1 [0256.519] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0256.520] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0256.520] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0256.520] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3158, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="HH00612_.WMF", cAlternateFileName="")) returned 1 [0256.520] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0256.520] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0256.520] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0256.520] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0256.520] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0256.520] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0256.521] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00612_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00612_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0256.692] GetFileType (hFile=0x174) returned 0x1 [0256.696] CloseHandle (hObject=0x174) returned 1 [0256.697] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0256.697] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00612_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00612_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3158)) returned 1 [0256.697] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0256.697] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0256.698] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00612_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00612_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3158)) returned 1 [0256.698] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0256.698] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0256.698] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0256.698] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2994, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="HH00623_.WMF", cAlternateFileName="")) returned 1 [0256.698] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0256.698] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0256.699] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0256.699] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0256.699] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0256.699] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0256.740] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00623_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00623_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0256.741] GetFileType (hFile=0x174) returned 0x1 [0256.742] CloseHandle (hObject=0x174) returned 1 [0256.742] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0256.742] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00623_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00623_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2994)) returned 1 [0256.743] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0256.743] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0256.743] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00623_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00623_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2994)) returned 1 [0256.743] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0256.743] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0256.743] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0256.743] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x844, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="HH00625_.WMF", cAlternateFileName="")) returned 1 [0256.744] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0256.744] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0256.744] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0256.744] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0256.744] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0256.744] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0256.745] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00625_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00625_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0256.745] GetFileType (hFile=0x174) returned 0x1 [0256.746] CloseHandle (hObject=0x174) returned 1 [0256.746] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0256.746] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00625_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00625_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x844)) returned 1 [0256.747] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0256.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0256.747] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00625_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00625_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x844)) returned 1 [0256.747] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0256.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0256.747] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0256.747] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x620, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="HH00636_.WMF", cAlternateFileName="")) returned 1 [0256.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0256.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0256.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0256.748] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0256.748] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0256.748] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0256.749] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00636_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00636_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0256.750] GetFileType (hFile=0x174) returned 0x1 [0256.750] CloseHandle (hObject=0x174) returned 1 [0256.751] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0256.751] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00636_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00636_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x620)) returned 1 [0256.751] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0256.751] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0256.751] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00636_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00636_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x620)) returned 1 [0256.752] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0256.752] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0256.752] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0256.752] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ce2, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="HH00669_.WMF", cAlternateFileName="")) returned 1 [0256.752] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0256.752] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0256.752] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0256.752] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0256.752] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0256.753] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0256.753] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00669_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00669_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0256.754] GetFileType (hFile=0x174) returned 0x1 [0256.755] CloseHandle (hObject=0x174) returned 1 [0256.756] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0256.756] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00669_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00669_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ce2)) returned 1 [0256.756] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0256.756] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0256.756] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00669_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00669_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ce2)) returned 1 [0256.756] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0256.756] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0256.757] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0256.757] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2454, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="HH00681_.WMF", cAlternateFileName="")) returned 1 [0256.757] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0256.757] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0256.757] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0256.757] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0256.757] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0256.757] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0256.758] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00681_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00681_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0256.758] GetFileType (hFile=0x174) returned 0x1 [0256.759] CloseHandle (hObject=0x174) returned 1 [0256.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0256.760] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00681_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00681_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2454)) returned 1 [0256.760] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0256.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0256.760] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00681_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00681_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2454)) returned 1 [0256.760] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0256.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0256.761] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0256.761] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfc0, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="HH00685_.WMF", cAlternateFileName="")) returned 1 [0256.761] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0256.761] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0256.761] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0256.761] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0256.761] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0256.762] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0256.762] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00685_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00685_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0256.763] GetFileType (hFile=0x174) returned 0x1 [0256.763] CloseHandle (hObject=0x174) returned 1 [0256.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0256.764] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00685_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00685_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfc0)) returned 1 [0256.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0256.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0256.765] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00685_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00685_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfc0)) returned 1 [0256.765] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0256.765] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0256.765] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0256.765] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10f4, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="HH00687_.WMF", cAlternateFileName="")) returned 1 [0256.767] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0256.767] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0256.767] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0256.767] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0256.768] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0256.768] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0256.768] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00687_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00687_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0256.769] GetFileType (hFile=0x174) returned 0x1 [0256.769] CloseHandle (hObject=0x174) returned 1 [0256.770] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0256.770] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00687_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00687_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10f4)) returned 1 [0256.770] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0256.770] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0256.770] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00687_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00687_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10f4)) returned 1 [0256.770] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0256.771] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0256.771] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0256.771] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bac, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="HH00688_.WMF", cAlternateFileName="")) returned 1 [0256.771] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0256.772] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0256.772] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0256.772] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0256.772] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0256.772] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0256.773] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00688_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00688_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0256.773] GetFileType (hFile=0x174) returned 0x1 [0256.774] CloseHandle (hObject=0x174) returned 1 [0256.774] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0256.775] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00688_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00688_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bac)) returned 1 [0256.775] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0256.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0256.775] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00688_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00688_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bac)) returned 1 [0256.775] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0256.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0256.776] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0256.776] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bba, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="HH00693_.WMF", cAlternateFileName="")) returned 1 [0256.776] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0256.776] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0256.776] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0256.776] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0256.776] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0256.776] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0256.777] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00693_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00693_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0256.778] GetFileType (hFile=0x174) returned 0x1 [0256.778] CloseHandle (hObject=0x174) returned 1 [0256.779] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0256.779] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00693_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00693_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bba)) returned 1 [0256.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0256.779] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0256.779] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00693_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00693_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bba)) returned 1 [0256.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0256.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0256.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0256.780] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb20, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="HH01013_.WMF", cAlternateFileName="")) returned 1 [0256.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0256.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0256.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0256.781] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0256.781] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0256.781] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0256.781] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01013_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01013_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0257.044] GetFileType (hFile=0x1ac) returned 0x1 [0257.045] CloseHandle (hObject=0x1ac) returned 1 [0257.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0257.046] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01013_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01013_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb20)) returned 1 [0257.046] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0257.046] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0257.046] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01013_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01013_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb20)) returned 1 [0257.046] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0257.047] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0257.047] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0257.047] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x47c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="HH01015_.WMF", cAlternateFileName="")) returned 1 [0257.047] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0257.047] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0257.047] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0257.047] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0257.048] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0257.048] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0257.147] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01015_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0257.148] GetFileType (hFile=0x198) returned 0x1 [0257.148] CloseHandle (hObject=0x198) returned 1 [0257.149] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0257.149] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01015_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x47c)) returned 1 [0257.149] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0257.149] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0257.149] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01015_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x47c)) returned 1 [0257.150] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0257.150] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0257.150] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0257.150] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xac4, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="HH01058_.WMF", cAlternateFileName="")) returned 1 [0257.150] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0257.150] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0257.150] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0257.151] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0257.151] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0257.151] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0257.151] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01058_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01058_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0257.153] GetFileType (hFile=0x198) returned 0x1 [0257.153] CloseHandle (hObject=0x198) returned 1 [0257.157] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0257.157] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01058_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01058_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xac4)) returned 1 [0257.157] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0257.158] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0257.158] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01058_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01058_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xac4)) returned 1 [0257.158] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0257.158] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0257.158] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0257.158] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f4, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="HH01065_.WMF", cAlternateFileName="")) returned 1 [0257.158] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0257.158] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0257.159] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0257.159] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0257.159] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0257.159] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0257.160] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01065_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01065_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0257.160] GetFileType (hFile=0x198) returned 0x1 [0257.161] CloseHandle (hObject=0x198) returned 1 [0257.161] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0257.162] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01065_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01065_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f4)) returned 1 [0257.162] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0257.162] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0257.162] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01065_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01065_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f4)) returned 1 [0257.162] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0257.163] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0257.163] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0257.163] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1388, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="HH01080_.WMF", cAlternateFileName="")) returned 1 [0257.163] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0257.163] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0257.163] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0257.163] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0257.163] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0257.164] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0257.164] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01080_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01080_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0257.165] GetFileType (hFile=0x198) returned 0x1 [0257.165] CloseHandle (hObject=0x198) returned 1 [0257.165] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0257.166] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01080_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01080_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1388)) returned 1 [0257.166] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0257.166] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0257.166] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01080_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01080_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1388)) returned 1 [0257.166] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0257.166] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0257.166] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0257.166] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1cac, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="HH01242_.WMF", cAlternateFileName="")) returned 1 [0257.167] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0257.167] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0257.167] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0257.167] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0257.167] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0257.167] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0257.168] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01242_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01242_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0257.169] GetFileType (hFile=0x198) returned 0x1 [0257.169] CloseHandle (hObject=0x198) returned 1 [0257.169] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0257.170] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01242_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01242_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1cac)) returned 1 [0257.170] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0257.170] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0257.170] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01242_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01242_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1cac)) returned 1 [0257.170] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0257.170] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0257.170] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0257.170] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3dbe, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="HH01291_.WMF", cAlternateFileName="")) returned 1 [0257.171] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0257.171] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0257.171] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0257.171] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0257.171] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0257.171] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0257.172] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01291_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01291_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0257.172] GetFileType (hFile=0x198) returned 0x1 [0257.173] CloseHandle (hObject=0x198) returned 1 [0257.173] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0257.173] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01291_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01291_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3dbe)) returned 1 [0257.173] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0257.173] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0257.174] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01291_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01291_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3dbe)) returned 1 [0257.174] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0257.174] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0257.174] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0257.174] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1780, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="HH01329_.WMF", cAlternateFileName="")) returned 1 [0257.174] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0257.174] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0257.174] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0257.175] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0257.175] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0257.175] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0257.175] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01329_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01329_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0257.176] GetFileType (hFile=0x198) returned 0x1 [0257.177] CloseHandle (hObject=0x198) returned 1 [0257.178] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0257.178] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01329_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01329_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1780)) returned 1 [0257.178] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0257.178] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0257.178] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01329_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01329_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1780)) returned 1 [0257.178] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0257.178] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0257.179] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0257.179] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1746, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="HH01461_.WMF", cAlternateFileName="")) returned 1 [0257.179] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0257.179] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0257.179] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0257.179] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0257.179] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0257.179] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0257.180] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01461_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01461_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0257.180] GetFileType (hFile=0x198) returned 0x1 [0257.180] CloseHandle (hObject=0x198) returned 1 [0257.181] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0257.181] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01461_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01461_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1746)) returned 1 [0257.181] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0257.181] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0257.181] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01461_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01461_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1746)) returned 1 [0257.181] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0257.181] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0257.182] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0257.182] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c80, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="HH01618_.WMF", cAlternateFileName="")) returned 1 [0257.182] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0257.182] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0257.182] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0257.182] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0257.182] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0257.182] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0257.183] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01618_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01618_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0257.183] GetFileType (hFile=0x198) returned 0x1 [0257.184] CloseHandle (hObject=0x198) returned 1 [0257.184] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0257.184] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01618_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01618_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c80)) returned 1 [0257.184] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0257.184] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0257.184] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01618_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01618_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c80)) returned 1 [0257.185] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0257.185] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0257.185] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0257.185] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1526, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="HH01759_.WMF", cAlternateFileName="")) returned 1 [0257.185] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0257.185] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0257.185] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0257.185] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0257.185] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0257.185] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0257.186] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01759_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01759_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0257.187] GetFileType (hFile=0x198) returned 0x1 [0257.187] CloseHandle (hObject=0x198) returned 1 [0257.188] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0257.188] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01759_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01759_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1526)) returned 1 [0257.188] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0257.188] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0257.188] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01759_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01759_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1526)) returned 1 [0257.188] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0257.188] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0257.189] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0257.189] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa38, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="HH01875_.WMF", cAlternateFileName="")) returned 1 [0257.189] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0257.189] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0257.189] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0257.189] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0257.189] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0257.189] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0257.190] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01875_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01875_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0257.190] GetFileType (hFile=0x198) returned 0x1 [0257.191] CloseHandle (hObject=0x198) returned 1 [0257.191] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0257.191] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01875_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01875_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa38)) returned 1 [0257.192] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0257.192] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0257.192] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01875_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01875_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa38)) returned 1 [0257.192] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0257.192] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0257.192] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0257.192] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6852, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="HH01923_.WMF", cAlternateFileName="")) returned 1 [0257.192] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0257.193] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0257.524] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0257.525] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0257.525] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0257.525] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0257.526] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01923_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01923_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0257.527] GetFileType (hFile=0x1e0) returned 0x1 [0257.527] CloseHandle (hObject=0x1e0) returned 1 [0257.527] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0257.528] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01923_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01923_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6852)) returned 1 [0257.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0257.528] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0257.528] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01923_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01923_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6852)) returned 1 [0257.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0257.528] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0257.529] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0257.529] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa90, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="HH02155_.WMF", cAlternateFileName="")) returned 1 [0257.529] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0257.529] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0257.529] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0257.529] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0257.529] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0257.529] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0257.530] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02155_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02155_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0257.531] GetFileType (hFile=0x1e0) returned 0x1 [0257.531] CloseHandle (hObject=0x1e0) returned 1 [0257.532] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0257.532] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02155_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02155_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa90)) returned 1 [0257.532] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0257.532] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0257.532] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02155_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02155_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa90)) returned 1 [0257.533] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0257.533] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0257.533] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0257.533] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x52c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="HH02166_.WMF", cAlternateFileName="")) returned 1 [0257.533] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0257.533] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0257.533] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0257.533] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0257.534] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0257.534] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0257.535] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02166_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02166_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0257.536] GetFileType (hFile=0x1e0) returned 0x1 [0257.537] CloseHandle (hObject=0x1e0) returned 1 [0257.537] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0257.538] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02166_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02166_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x52c)) returned 1 [0257.538] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0257.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0257.538] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02166_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02166_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x52c)) returned 1 [0257.538] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0257.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0257.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0257.539] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1efc, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="HH02282_.WMF", cAlternateFileName="")) returned 1 [0257.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0257.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0257.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0257.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0257.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0257.540] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0257.540] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02282_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02282_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0257.541] GetFileType (hFile=0x1e0) returned 0x1 [0257.542] CloseHandle (hObject=0x1e0) returned 1 [0257.542] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0257.542] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02282_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02282_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1efc)) returned 1 [0257.542] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0257.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0257.543] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02282_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02282_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1efc)) returned 1 [0257.543] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0257.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0257.543] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0257.543] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15b0, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="HH02298_.WMF", cAlternateFileName="")) returned 1 [0257.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0257.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0257.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0257.544] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0257.544] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0257.544] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0257.545] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02298_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02298_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0257.545] GetFileType (hFile=0x1e0) returned 0x1 [0257.546] CloseHandle (hObject=0x1e0) returned 1 [0257.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0257.546] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02298_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02298_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15b0)) returned 1 [0257.547] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0257.547] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0257.547] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02298_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02298_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15b0)) returned 1 [0257.547] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0257.547] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0257.547] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0257.547] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x136a, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="HH02312_.WMF", cAlternateFileName="")) returned 1 [0257.547] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0257.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0257.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0257.548] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0257.548] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0257.548] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0257.549] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02312_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02312_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0257.549] GetFileType (hFile=0x1e0) returned 0x1 [0257.549] CloseHandle (hObject=0x1e0) returned 1 [0257.550] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0257.550] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02312_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02312_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x136a)) returned 1 [0257.550] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0257.550] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0257.550] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02312_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02312_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x136a)) returned 1 [0257.551] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0257.551] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0257.551] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0257.551] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc0a, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="HH02313_.WMF", cAlternateFileName="")) returned 1 [0257.551] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0257.551] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0257.551] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0257.551] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0257.551] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0257.552] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0257.553] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02313_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02313_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0257.554] GetFileType (hFile=0x1e0) returned 0x1 [0257.554] CloseHandle (hObject=0x1e0) returned 1 [0257.555] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0257.555] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02313_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02313_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc0a)) returned 1 [0257.555] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0257.555] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0257.555] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02313_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02313_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc0a)) returned 1 [0257.555] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0257.556] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0257.556] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0257.556] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5b04, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="HM00005_.WMF", cAlternateFileName="")) returned 1 [0257.556] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0257.556] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0257.556] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0257.556] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0257.557] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0257.557] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0257.557] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00005_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00005_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0257.558] GetFileType (hFile=0x1e0) returned 0x1 [0257.558] CloseHandle (hObject=0x1e0) returned 1 [0257.559] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0257.559] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00005_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00005_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5b04)) returned 1 [0257.559] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0257.559] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0257.559] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00005_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00005_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5b04)) returned 1 [0257.559] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0257.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0257.560] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0257.560] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5664, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="HM00114_.WMF", cAlternateFileName="")) returned 1 [0257.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0257.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0257.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0257.560] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0257.560] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0257.561] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0257.561] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00114_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00114_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0258.357] GetFileType (hFile=0x1ac) returned 0x1 [0258.357] CloseHandle (hObject=0x1ac) returned 1 [0258.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0258.358] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00114_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00114_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5664)) returned 1 [0258.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0258.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0258.358] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00114_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00114_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5664)) returned 1 [0258.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0258.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0258.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0258.358] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3dec, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="HM00116_.WMF", cAlternateFileName="")) returned 1 [0258.359] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0258.359] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0258.359] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0258.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0258.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0258.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0258.359] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00116_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00116_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0258.359] GetFileType (hFile=0x1ac) returned 0x1 [0258.360] CloseHandle (hObject=0x1ac) returned 1 [0258.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0258.360] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00116_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00116_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3dec)) returned 1 [0258.360] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0258.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0258.361] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00116_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00116_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3dec)) returned 1 [0258.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0258.361] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0258.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0258.361] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb10, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="HM00172_.WMF", cAlternateFileName="")) returned 1 [0258.361] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0258.361] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0258.361] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0258.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0258.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0258.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0258.362] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00172_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0258.362] GetFileType (hFile=0x1ac) returned 0x1 [0258.363] CloseHandle (hObject=0x1ac) returned 1 [0258.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0258.363] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00172_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb10)) returned 1 [0258.363] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0258.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0258.363] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00172_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb10)) returned 1 [0258.363] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0258.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0258.364] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0258.364] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10ca8, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="HM00426_.WMF", cAlternateFileName="")) returned 1 [0258.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0258.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0258.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0258.364] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0258.364] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0258.364] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0258.364] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00426_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00426_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0258.365] GetFileType (hFile=0x1ac) returned 0x1 [0258.365] CloseHandle (hObject=0x1ac) returned 1 [0258.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0258.365] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00426_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00426_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10ca8)) returned 1 [0258.365] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0258.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0258.366] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00426_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00426_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10ca8)) returned 1 [0258.366] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0258.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0258.366] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0258.366] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c0a, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="HTECH_01.MID", cAlternateFileName="")) returned 1 [0258.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0258.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0258.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0258.366] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0258.366] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0258.366] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0258.367] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HTECH_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\htech_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0258.367] GetFileType (hFile=0x1ac) returned 0x1 [0258.367] CloseHandle (hObject=0x1ac) returned 1 [0258.368] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0258.368] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HTECH_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\htech_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c0a)) returned 1 [0258.368] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0258.368] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0258.368] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HTECH_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\htech_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c0a)) returned 1 [0258.368] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0258.368] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0258.368] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0258.368] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x486, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="IN00046_.WMF", cAlternateFileName="")) returned 1 [0258.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0258.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0258.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0258.369] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0258.369] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0258.369] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0258.370] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00046_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00046_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0258.644] GetFileType (hFile=0x174) returned 0x1 [0258.645] CloseHandle (hObject=0x174) returned 1 [0258.645] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0258.645] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00046_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00046_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x486)) returned 1 [0258.645] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0258.645] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0258.645] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00046_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00046_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x486)) returned 1 [0258.646] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0258.646] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0258.646] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0258.646] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x318, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="IN00118_.WMF", cAlternateFileName="")) returned 1 [0258.646] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0258.646] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0258.646] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0258.646] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0258.647] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0258.647] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0258.647] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00118_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00118_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0258.648] GetFileType (hFile=0x174) returned 0x1 [0258.648] CloseHandle (hObject=0x174) returned 1 [0258.649] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0258.649] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00118_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00118_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x318)) returned 1 [0258.649] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0258.649] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0258.649] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00118_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00118_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x318)) returned 1 [0258.649] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0258.649] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0258.649] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0258.650] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x432, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="IN00177_.WMF", cAlternateFileName="")) returned 1 [0258.650] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0258.650] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0258.650] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0258.650] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0258.650] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0258.650] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0258.650] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00177_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00177_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0258.651] GetFileType (hFile=0x174) returned 0x1 [0258.651] CloseHandle (hObject=0x174) returned 1 [0258.651] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0258.652] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00177_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00177_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x432)) returned 1 [0258.652] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0258.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0258.652] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00177_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00177_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x432)) returned 1 [0258.652] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0258.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0258.652] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0258.652] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x738, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="IN00204_.WMF", cAlternateFileName="")) returned 1 [0258.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0258.653] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0258.653] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0258.653] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0258.653] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0258.653] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0258.653] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00204_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00204_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0258.654] GetFileType (hFile=0x174) returned 0x1 [0258.654] CloseHandle (hObject=0x174) returned 1 [0258.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0258.655] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00204_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00204_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x738)) returned 1 [0258.655] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0258.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0258.655] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00204_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00204_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x738)) returned 1 [0258.655] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0258.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0258.655] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0258.656] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2bb6, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="IN00233_.WMF", cAlternateFileName="")) returned 1 [0258.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0258.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0258.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0258.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0258.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0258.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0258.657] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00233_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00233_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0258.657] GetFileType (hFile=0x174) returned 0x1 [0258.658] CloseHandle (hObject=0x174) returned 1 [0258.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0258.658] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00233_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00233_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2bb6)) returned 1 [0258.658] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0258.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0258.659] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00233_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00233_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2bb6)) returned 1 [0258.659] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0258.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0258.659] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0258.659] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x764, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="IN00343_.WMF", cAlternateFileName="")) returned 1 [0258.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0258.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0258.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0258.660] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0258.660] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0258.660] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0258.661] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00343_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00343_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0258.662] GetFileType (hFile=0x174) returned 0x1 [0258.662] CloseHandle (hObject=0x174) returned 1 [0258.663] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0258.663] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00343_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00343_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x764)) returned 1 [0258.663] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0258.663] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0258.663] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00343_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00343_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x764)) returned 1 [0258.663] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0258.663] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0258.664] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0258.664] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b8, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="IN00346_.WMF", cAlternateFileName="")) returned 1 [0258.665] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0258.665] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0258.665] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0258.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0258.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0258.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0258.666] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00346_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00346_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0258.667] GetFileType (hFile=0x174) returned 0x1 [0258.667] CloseHandle (hObject=0x174) returned 1 [0258.668] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0258.668] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00346_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00346_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b8)) returned 1 [0258.668] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0258.668] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0258.668] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00346_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00346_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b8)) returned 1 [0258.669] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0258.669] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0258.669] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0258.669] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x788, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="IN00351_.WMF", cAlternateFileName="")) returned 1 [0258.669] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0258.669] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0258.669] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0258.669] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0258.670] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0258.670] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0258.671] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00351_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00351_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0258.671] GetFileType (hFile=0x174) returned 0x1 [0258.671] CloseHandle (hObject=0x174) returned 1 [0258.672] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0258.672] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00351_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00351_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x788)) returned 1 [0258.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0258.672] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0258.672] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00351_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00351_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x788)) returned 1 [0258.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0258.673] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0258.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0258.673] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x23d4, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="IN00557_.WMF", cAlternateFileName="")) returned 1 [0258.673] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382d0 [0258.673] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0258.673] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0258.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0258.674] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0258.674] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382d0 | out: hHeap=0x1f0000) returned 1 [0258.675] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00557_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00557_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0258.675] GetFileType (hFile=0x174) returned 0x1 [0258.676] CloseHandle (hObject=0x174) returned 1 [0258.676] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0258.676] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00557_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00557_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x23d4)) returned 1 [0258.677] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0258.677] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0258.677] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00557_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00557_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x23d4)) returned 1 [0258.677] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0258.677] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0258.677] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0258.677] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe00f20a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31cc, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="IN00915_.WMF", cAlternateFileName="")) returned 1 [0258.677] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0258.678] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0258.678] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0258.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0258.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0258.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0258.678] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00915_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00915_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0259.138] GetFileType (hFile=0x21c) returned 0x1 [0259.139] CloseHandle (hObject=0x21c) returned 1 [0259.139] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0259.140] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00915_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00915_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe00f20a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31cc)) returned 1 [0259.140] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0259.140] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0259.140] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00915_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00915_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe00f20a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31cc)) returned 1 [0259.140] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0259.140] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0259.140] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0259.141] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe00f20a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b08, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="IN00919_.WMF", cAlternateFileName="")) returned 1 [0259.141] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0259.141] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0259.141] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0259.141] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0259.141] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0259.141] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0259.142] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00919_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00919_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0259.143] GetFileType (hFile=0x21c) returned 0x1 [0259.144] CloseHandle (hObject=0x21c) returned 1 [0259.144] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0259.144] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00919_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00919_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe00f20a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b08)) returned 1 [0259.144] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0259.144] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0259.145] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00919_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00919_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe00f20a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b08)) returned 1 [0259.145] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0259.145] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0259.145] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0259.145] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e8, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="IN00956_.WMF", cAlternateFileName="")) returned 1 [0259.145] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0259.145] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0259.145] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0259.145] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0259.146] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0259.146] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0259.146] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00956_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00956_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0259.147] GetFileType (hFile=0x21c) returned 0x1 [0259.147] CloseHandle (hObject=0x21c) returned 1 [0259.147] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0259.147] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00956_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00956_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e8)) returned 1 [0259.148] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0259.148] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0259.148] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00956_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00956_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e8)) returned 1 [0259.148] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0259.148] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0259.148] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0259.148] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe00f20a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb80, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="IN00957_.WMF", cAlternateFileName="")) returned 1 [0259.148] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0259.148] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0259.149] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0259.149] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0259.149] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0259.149] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0259.149] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00957_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00957_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0259.150] GetFileType (hFile=0x21c) returned 0x1 [0259.150] CloseHandle (hObject=0x21c) returned 1 [0259.150] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0259.150] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00957_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00957_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe00f20a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb80)) returned 1 [0259.150] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0259.151] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0259.151] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00957_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00957_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe00f20a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb80)) returned 1 [0259.151] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0259.151] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0259.151] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0259.151] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe00f20a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2178, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="INDST_01.MID", cAlternateFileName="")) returned 1 [0259.151] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0259.151] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0259.151] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0259.151] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0259.152] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0259.152] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0259.152] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\INDST_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\indst_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0259.152] GetFileType (hFile=0x21c) returned 0x1 [0259.153] CloseHandle (hObject=0x21c) returned 1 [0259.153] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0259.153] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\INDST_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\indst_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe00f20a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2178)) returned 1 [0259.153] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0259.153] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0259.153] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\INDST_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\indst_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe00f20a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2178)) returned 1 [0259.154] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0259.154] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0259.154] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0259.154] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe00f20a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c4, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0075478.GIF", cAlternateFileName="")) returned 1 [0259.154] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0259.154] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0259.154] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0259.154] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0259.154] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0259.154] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0259.155] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0075478.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0075478.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0259.155] GetFileType (hFile=0x21c) returned 0x1 [0259.156] CloseHandle (hObject=0x21c) returned 1 [0259.156] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0259.156] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0075478.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0075478.gif"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe00f20a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c4)) returned 1 [0259.156] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0259.156] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0259.156] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0075478.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0075478.gif"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe00f20a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c4)) returned 1 [0259.157] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0259.157] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0259.157] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0259.157] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2606, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0086384.WMF", cAlternateFileName="")) returned 1 [0259.157] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0259.157] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0259.157] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0259.157] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0259.157] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0259.158] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0259.158] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086384.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086384.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0259.159] GetFileType (hFile=0x21c) returned 0x1 [0259.159] CloseHandle (hObject=0x21c) returned 1 [0259.160] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0259.160] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086384.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086384.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2606)) returned 1 [0259.160] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0259.160] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0259.160] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086384.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086384.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2606)) returned 1 [0259.160] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0259.160] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0259.161] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0259.161] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x257c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0086420.WMF", cAlternateFileName="")) returned 1 [0259.161] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0259.161] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0259.161] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0259.161] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0259.161] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0259.161] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0259.162] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086420.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086420.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0259.162] GetFileType (hFile=0x21c) returned 0x1 [0259.163] CloseHandle (hObject=0x21c) returned 1 [0259.163] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0259.163] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086420.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086420.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x257c)) returned 1 [0259.163] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0259.163] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0259.164] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086420.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086420.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x257c)) returned 1 [0259.164] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0259.164] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0259.164] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0259.164] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4278, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0086424.WMF", cAlternateFileName="")) returned 1 [0259.164] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0259.164] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0259.164] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0259.164] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0259.164] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0259.165] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0259.165] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086424.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086424.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0259.165] GetFileType (hFile=0x21c) returned 0x1 [0259.166] CloseHandle (hObject=0x21c) returned 1 [0259.166] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0259.166] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086424.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086424.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4278)) returned 1 [0259.166] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0259.166] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0259.167] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086424.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086424.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4278)) returned 1 [0259.167] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0259.167] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0259.167] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0259.167] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5516, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0086426.WMF", cAlternateFileName="")) returned 1 [0259.167] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0259.167] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0259.167] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0259.168] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0259.168] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0259.168] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0259.168] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086426.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086426.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0259.169] GetFileType (hFile=0x21c) returned 0x1 [0259.169] CloseHandle (hObject=0x21c) returned 1 [0259.169] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0259.169] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086426.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086426.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5516)) returned 1 [0259.170] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0259.170] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0259.170] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086426.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086426.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5516)) returned 1 [0259.170] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0259.170] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0259.170] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0259.170] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8a12, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0086428.WMF", cAlternateFileName="")) returned 1 [0259.170] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0259.170] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0259.170] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0259.171] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0259.171] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0259.171] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0259.171] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086428.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086428.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0259.171] GetFileType (hFile=0x21c) returned 0x1 [0259.172] CloseHandle (hObject=0x21c) returned 1 [0259.172] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0259.172] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086428.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086428.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8a12)) returned 1 [0259.172] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0259.173] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0259.173] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086428.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086428.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8a12)) returned 1 [0259.173] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0259.173] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0259.173] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0259.173] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x829a, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0086432.WMF", cAlternateFileName="")) returned 1 [0259.173] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0259.173] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0259.174] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0259.174] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0259.174] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0259.174] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0259.175] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086432.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086432.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0259.490] GetFileType (hFile=0x1c0) returned 0x1 [0259.491] CloseHandle (hObject=0x1c0) returned 1 [0259.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0259.491] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086432.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086432.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x829a)) returned 1 [0259.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0259.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0259.492] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086432.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086432.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x829a)) returned 1 [0259.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0259.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0259.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0259.492] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x375e, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0086478.WMF", cAlternateFileName="")) returned 1 [0259.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0259.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0259.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0259.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0259.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0259.493] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0259.831] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086478.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086478.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0259.831] GetFileType (hFile=0x19c) returned 0x1 [0259.832] CloseHandle (hObject=0x19c) returned 1 [0259.832] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0259.832] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086478.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086478.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x375e)) returned 1 [0259.832] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0259.833] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0259.833] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086478.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086478.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x375e)) returned 1 [0259.833] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0259.833] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0259.833] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0259.833] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4dba, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0089945.WMF", cAlternateFileName="")) returned 1 [0259.833] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0259.833] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0259.833] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0259.834] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0259.834] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0259.834] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0259.834] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089945.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0089945.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0259.835] GetFileType (hFile=0x19c) returned 0x1 [0259.835] CloseHandle (hObject=0x19c) returned 1 [0259.836] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0259.836] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089945.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0089945.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4dba)) returned 1 [0259.836] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0259.836] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0259.836] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089945.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0089945.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4dba)) returned 1 [0259.836] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0259.836] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0259.836] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0259.837] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d40, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0089992.WMF", cAlternateFileName="")) returned 1 [0259.837] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0259.837] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0259.837] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0259.837] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0259.837] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0259.837] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0259.838] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089992.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0089992.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0259.838] GetFileType (hFile=0x19c) returned 0x1 [0259.839] CloseHandle (hObject=0x19c) returned 1 [0259.839] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0259.839] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089992.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0089992.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d40)) returned 1 [0259.839] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0259.839] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0259.840] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089992.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0089992.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d40)) returned 1 [0259.840] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0259.840] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0259.840] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0259.840] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5314, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0090027.WMF", cAlternateFileName="")) returned 1 [0259.840] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0259.840] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0259.841] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0259.841] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0259.841] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0259.841] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0259.842] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090027.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090027.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0259.842] GetFileType (hFile=0x19c) returned 0x1 [0259.842] CloseHandle (hObject=0x19c) returned 1 [0259.843] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0259.843] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090027.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090027.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5314)) returned 1 [0259.843] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0259.843] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0259.843] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090027.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090027.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5314)) returned 1 [0259.844] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0259.844] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0259.844] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0259.844] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb758, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0090087.WMF", cAlternateFileName="")) returned 1 [0259.844] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0259.844] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0259.844] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0259.845] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0259.845] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0259.845] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0259.846] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090087.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090087.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0259.846] GetFileType (hFile=0x19c) returned 0x1 [0259.846] CloseHandle (hObject=0x19c) returned 1 [0259.848] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0259.848] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090087.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090087.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb758)) returned 1 [0259.848] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0259.848] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0259.848] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090087.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090087.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb758)) returned 1 [0259.848] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0259.849] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0259.849] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0259.849] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d90, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0090089.WMF", cAlternateFileName="")) returned 1 [0259.849] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0259.849] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0259.849] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0259.849] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0259.849] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0259.850] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0259.850] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090089.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090089.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0259.851] GetFileType (hFile=0x19c) returned 0x1 [0259.851] CloseHandle (hObject=0x19c) returned 1 [0259.852] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0259.852] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090089.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090089.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d90)) returned 1 [0259.852] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0259.852] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0259.852] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090089.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090089.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d90)) returned 1 [0259.852] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0259.853] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0259.853] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0259.853] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6e34, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0090149.WMF", cAlternateFileName="")) returned 1 [0259.853] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0259.853] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0259.853] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0259.853] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0259.853] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0259.853] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0259.854] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090149.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090149.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0259.854] GetFileType (hFile=0x19c) returned 0x1 [0259.855] CloseHandle (hObject=0x19c) returned 1 [0259.855] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0259.856] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090149.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090149.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6e34)) returned 1 [0259.856] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0259.856] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0259.856] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090149.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090149.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6e34)) returned 1 [0259.856] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0259.856] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0259.856] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0259.857] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x44e6, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0090390.WMF", cAlternateFileName="")) returned 1 [0259.857] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0259.857] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0259.857] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0259.857] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0259.857] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0259.857] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0259.858] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090390.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090390.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0259.858] GetFileType (hFile=0x19c) returned 0x1 [0259.858] CloseHandle (hObject=0x19c) returned 1 [0259.859] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0259.859] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090390.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090390.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x44e6)) returned 1 [0259.859] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0259.859] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0259.859] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090390.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090390.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x44e6)) returned 1 [0259.859] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0259.859] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0259.860] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0259.860] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd04, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0090777.WMF", cAlternateFileName="")) returned 1 [0259.860] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0259.860] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0259.860] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0259.860] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0259.860] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0259.860] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0259.861] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090777.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090777.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0259.861] GetFileType (hFile=0x19c) returned 0x1 [0259.861] CloseHandle (hObject=0x19c) returned 1 [0259.862] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0259.862] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090777.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090777.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd04)) returned 1 [0259.862] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0259.862] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0259.862] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090777.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090777.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd04)) returned 1 [0259.862] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0259.863] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0259.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0259.865] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5b0, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0090779.WMF", cAlternateFileName="")) returned 1 [0259.865] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0259.865] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0259.996] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0259.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0259.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0259.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0260.080] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090779.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090779.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0260.081] GetFileType (hFile=0x1c0) returned 0x1 [0260.081] CloseHandle (hObject=0x1c0) returned 1 [0260.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0260.082] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090779.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090779.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5b0)) returned 1 [0260.082] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0260.082] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0260.082] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090779.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090779.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5b0)) returned 1 [0260.082] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0260.082] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0260.083] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0260.083] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14c2, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0090781.WMF", cAlternateFileName="")) returned 1 [0260.083] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0260.083] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0260.083] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0260.083] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0260.083] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0260.083] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0260.084] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090781.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090781.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0260.084] GetFileType (hFile=0x1c0) returned 0x1 [0260.085] CloseHandle (hObject=0x1c0) returned 1 [0260.085] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0260.085] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090781.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090781.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14c2)) returned 1 [0260.085] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0260.085] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0260.085] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090781.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090781.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14c2)) returned 1 [0260.085] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0260.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0260.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0260.086] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b16, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0090783.WMF", cAlternateFileName="")) returned 1 [0260.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0260.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0260.086] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0260.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0260.086] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0260.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0260.087] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090783.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090783.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0260.088] GetFileType (hFile=0x1c0) returned 0x1 [0260.088] CloseHandle (hObject=0x1c0) returned 1 [0260.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0260.089] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090783.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090783.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b16)) returned 1 [0260.089] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0260.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0260.089] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090783.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090783.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b16)) returned 1 [0260.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0260.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0260.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0260.090] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa442, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0093905.WMF", cAlternateFileName="")) returned 1 [0260.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0260.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0260.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0260.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0260.091] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0260.091] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0260.091] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0093905.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0093905.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0260.092] GetFileType (hFile=0x1c0) returned 0x1 [0260.092] CloseHandle (hObject=0x1c0) returned 1 [0260.092] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0260.093] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0093905.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0093905.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa442)) returned 1 [0260.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0260.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0260.093] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0093905.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0093905.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa442)) returned 1 [0260.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0260.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0260.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0260.093] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x136a, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0098497.WMF", cAlternateFileName="")) returned 1 [0260.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0260.094] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0260.094] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0260.094] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0260.094] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0260.094] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0260.094] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0098497.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0098497.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0260.095] GetFileType (hFile=0x1c0) returned 0x1 [0260.096] CloseHandle (hObject=0x1c0) returned 1 [0260.096] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0260.097] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0098497.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0098497.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x136a)) returned 1 [0260.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0260.097] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0260.097] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0098497.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0098497.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x136a)) returned 1 [0260.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0260.097] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0260.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0260.098] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x60b7, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0099145.JPG", cAlternateFileName="")) returned 1 [0260.098] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0260.098] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0260.098] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0260.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0260.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0260.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0260.099] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099145.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099145.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0260.100] GetFileType (hFile=0x1c0) returned 0x1 [0260.101] CloseHandle (hObject=0x1c0) returned 1 [0260.101] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0260.101] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099145.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099145.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x60b7)) returned 1 [0260.101] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0260.102] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0260.102] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099145.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099145.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x60b7)) returned 1 [0260.102] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0260.102] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0260.102] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0260.102] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x40d4, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0099146.WMF", cAlternateFileName="")) returned 1 [0260.103] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0260.103] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0260.103] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0260.103] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0260.103] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0260.103] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0260.104] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099146.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0260.105] GetFileType (hFile=0x1c0) returned 0x1 [0260.105] CloseHandle (hObject=0x1c0) returned 1 [0260.106] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0260.106] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099146.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x40d4)) returned 1 [0260.106] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0260.107] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0260.107] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099146.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x40d4)) returned 1 [0260.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0260.107] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0260.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0260.107] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5f39, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0099147.JPG", cAlternateFileName="")) returned 1 [0260.108] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0260.108] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0260.108] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0260.108] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0260.108] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0260.108] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0260.109] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099147.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099147.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0260.111] GetFileType (hFile=0x1c0) returned 0x1 [0260.112] CloseHandle (hObject=0x1c0) returned 1 [0260.113] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0260.113] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099147.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099147.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5f39)) returned 1 [0260.113] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0260.113] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0260.113] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099147.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099147.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5f39)) returned 1 [0260.114] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0260.114] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0260.114] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0260.114] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4752, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0099148.JPG", cAlternateFileName="")) returned 1 [0260.114] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0260.114] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0260.115] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0260.115] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0260.115] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0260.115] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0260.116] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099148.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099148.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0260.117] GetFileType (hFile=0x1c0) returned 0x1 [0260.117] CloseHandle (hObject=0x1c0) returned 1 [0260.118] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0260.118] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099148.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099148.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4752)) returned 1 [0260.118] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0260.118] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0260.118] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099148.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099148.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4752)) returned 1 [0260.119] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0260.119] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0260.119] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0260.119] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11dfe, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0099149.WMF", cAlternateFileName="")) returned 1 [0260.119] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0260.119] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0260.120] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0260.120] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0260.120] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0260.120] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0260.121] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099149.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099149.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0260.121] GetFileType (hFile=0x1c0) returned 0x1 [0260.122] CloseHandle (hObject=0x1c0) returned 1 [0260.123] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0260.123] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099149.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099149.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11dfe)) returned 1 [0260.123] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0260.123] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0260.123] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099149.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099149.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11dfe)) returned 1 [0260.124] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0260.124] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0260.124] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0260.124] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x559a, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0099150.JPG", cAlternateFileName="")) returned 1 [0260.175] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0260.175] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0260.175] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0260.175] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0260.175] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0260.175] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0260.176] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099150.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0260.176] GetFileType (hFile=0x19c) returned 0x1 [0260.177] CloseHandle (hObject=0x19c) returned 1 [0260.177] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0260.178] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099150.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x559a)) returned 1 [0260.178] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0260.178] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0260.178] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099150.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x559a)) returned 1 [0260.178] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0260.178] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0260.178] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0260.179] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x65e6, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0099151.WMF", cAlternateFileName="")) returned 1 [0260.179] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0260.179] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0260.179] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0260.179] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0260.179] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0260.179] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0260.180] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099151.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0260.180] GetFileType (hFile=0x19c) returned 0x1 [0260.181] CloseHandle (hObject=0x19c) returned 1 [0260.181] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0260.181] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099151.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x65e6)) returned 1 [0260.182] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0260.182] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0260.182] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099151.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x65e6)) returned 1 [0260.182] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0260.182] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0260.182] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0260.182] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2dae, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0099152.JPG", cAlternateFileName="")) returned 1 [0260.182] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0260.183] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0260.183] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0260.183] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0260.183] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0260.183] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0260.185] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099152.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0260.185] GetFileType (hFile=0x19c) returned 0x1 [0260.186] CloseHandle (hObject=0x19c) returned 1 [0260.186] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0260.186] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099152.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2dae)) returned 1 [0260.187] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0260.187] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0260.187] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099152.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2dae)) returned 1 [0260.187] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0260.187] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0260.187] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0260.187] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3632, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0099153.WMF", cAlternateFileName="")) returned 1 [0260.187] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0260.187] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0260.187] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0260.188] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0260.188] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0260.188] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0260.188] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099153.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0260.189] GetFileType (hFile=0x19c) returned 0x1 [0260.189] CloseHandle (hObject=0x19c) returned 1 [0260.190] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0260.190] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099153.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3632)) returned 1 [0260.190] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0260.190] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0260.191] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099153.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3632)) returned 1 [0260.191] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0260.191] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0260.191] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0260.191] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b11, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0099154.JPG", cAlternateFileName="")) returned 1 [0260.191] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0260.191] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0260.191] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0260.192] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0260.192] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0260.192] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0260.192] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099154.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0260.193] GetFileType (hFile=0x19c) returned 0x1 [0260.194] CloseHandle (hObject=0x19c) returned 1 [0260.194] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0260.194] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099154.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b11)) returned 1 [0260.194] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0260.195] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0260.195] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099154.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b11)) returned 1 [0260.195] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0260.195] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0260.195] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0260.195] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x227a, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0099155.JPG", cAlternateFileName="")) returned 1 [0260.195] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0260.196] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0260.196] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0260.196] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0260.196] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0260.196] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0260.197] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099155.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0260.198] GetFileType (hFile=0x19c) returned 0x1 [0260.198] CloseHandle (hObject=0x19c) returned 1 [0260.199] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0260.199] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099155.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x227a)) returned 1 [0260.199] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0260.199] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0260.200] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099155.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x227a)) returned 1 [0260.200] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0260.200] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0260.200] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0260.200] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3682, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0099156.JPG", cAlternateFileName="")) returned 1 [0260.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0260.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0260.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0260.201] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0260.201] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0260.201] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0260.202] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099156.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0260.203] GetFileType (hFile=0x19c) returned 0x1 [0260.203] CloseHandle (hObject=0x19c) returned 1 [0260.204] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0260.204] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099156.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3682)) returned 1 [0260.204] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0260.204] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0260.204] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099156.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3682)) returned 1 [0260.205] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0260.205] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0260.205] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0260.205] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x25c7, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0099157.JPG", cAlternateFileName="")) returned 1 [0260.205] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0260.206] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0260.206] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0260.206] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0260.206] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0260.206] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0260.207] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099157.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0260.208] GetFileType (hFile=0x19c) returned 0x1 [0260.208] CloseHandle (hObject=0x19c) returned 1 [0260.209] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0260.209] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099157.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x25c7)) returned 1 [0260.209] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0260.209] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0260.210] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099157.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x25c7)) returned 1 [0260.210] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0260.210] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0260.211] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0260.211] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6630, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0099158.WMF", cAlternateFileName="")) returned 1 [0260.211] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0260.212] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0260.212] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0260.212] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0260.212] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0260.212] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0260.213] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099158.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0260.213] GetFileType (hFile=0x19c) returned 0x1 [0260.214] CloseHandle (hObject=0x19c) returned 1 [0260.214] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0260.215] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099158.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6630)) returned 1 [0260.215] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0260.215] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0260.215] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099158.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6630)) returned 1 [0260.215] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0260.215] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0260.216] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0260.216] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6b9a, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0099159.WMF", cAlternateFileName="")) returned 1 [0260.216] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0260.216] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0260.216] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0260.216] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0260.216] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0260.217] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0260.217] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099159.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0260.219] GetFileType (hFile=0x19c) returned 0x1 [0260.219] CloseHandle (hObject=0x19c) returned 1 [0260.220] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0260.220] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099159.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6b9a)) returned 1 [0260.220] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0260.220] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0260.220] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099159.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6b9a)) returned 1 [0260.220] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0260.221] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0260.549] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0260.550] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b29, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0099160.JPG", cAlternateFileName="")) returned 1 [0260.550] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0260.550] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0260.550] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0260.550] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0260.550] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0260.550] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0260.551] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099160.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0260.551] GetFileType (hFile=0x1c0) returned 0x1 [0260.551] CloseHandle (hObject=0x1c0) returned 1 [0260.552] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0260.552] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099160.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b29)) returned 1 [0260.552] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0260.552] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0260.552] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099160.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b29)) returned 1 [0260.553] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0260.553] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0260.553] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0260.553] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bf2, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0099161.JPG", cAlternateFileName="")) returned 1 [0260.553] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0260.553] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0260.553] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0260.553] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0260.553] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0260.553] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0260.554] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099161.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0260.555] GetFileType (hFile=0x1c0) returned 0x1 [0260.555] CloseHandle (hObject=0x1c0) returned 1 [0260.555] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0260.556] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099161.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bf2)) returned 1 [0260.556] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0260.556] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0260.556] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099161.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bf2)) returned 1 [0260.556] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0260.556] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0260.556] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0260.556] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4cc8, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0099162.JPG", cAlternateFileName="")) returned 1 [0260.557] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0260.557] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0260.557] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0260.557] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0260.557] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0260.557] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0260.558] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099162.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0260.558] GetFileType (hFile=0x1c0) returned 0x1 [0260.559] CloseHandle (hObject=0x1c0) returned 1 [0260.559] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0260.560] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099162.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4cc8)) returned 1 [0260.560] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0260.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0260.560] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099162.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4cc8)) returned 1 [0260.560] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0260.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0260.560] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0260.560] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5754, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0099163.WMF", cAlternateFileName="")) returned 1 [0260.561] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0260.561] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0260.561] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0260.561] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0260.561] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0260.561] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0260.562] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099163.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0260.562] GetFileType (hFile=0x1c0) returned 0x1 [0260.563] CloseHandle (hObject=0x1c0) returned 1 [0260.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0260.563] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099163.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5754)) returned 1 [0260.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0260.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0260.563] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099163.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5754)) returned 1 [0260.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0260.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0260.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0260.564] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x55ba, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0099164.WMF", cAlternateFileName="")) returned 1 [0260.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0260.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0260.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0260.564] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0260.564] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0260.564] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0260.564] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099164.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0260.565] GetFileType (hFile=0x1c0) returned 0x1 [0260.566] CloseHandle (hObject=0x1c0) returned 1 [0260.566] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0260.566] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099164.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x55ba)) returned 1 [0260.566] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0260.566] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0260.566] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099164.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x55ba)) returned 1 [0260.566] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0260.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0260.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0260.567] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc53a, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0099165.JPG", cAlternateFileName="")) returned 1 [0260.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0260.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0260.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0260.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0260.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0260.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0260.568] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099165.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0260.569] GetFileType (hFile=0x1c0) returned 0x1 [0260.569] CloseHandle (hObject=0x1c0) returned 1 [0260.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0260.570] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099165.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc53a)) returned 1 [0260.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0260.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0260.570] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099165.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc53a)) returned 1 [0260.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0260.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0260.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0260.570] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfcff, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0099166.JPG", cAlternateFileName="")) returned 1 [0260.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0260.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0260.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0260.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0260.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0260.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0260.571] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099166.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0260.571] GetFileType (hFile=0x1c0) returned 0x1 [0260.572] CloseHandle (hObject=0x1c0) returned 1 [0260.572] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0260.572] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099166.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfcff)) returned 1 [0260.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0260.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0260.573] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099166.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfcff)) returned 1 [0260.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0260.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0260.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0260.573] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xabad, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0099167.JPG", cAlternateFileName="")) returned 1 [0260.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0260.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0260.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0260.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0260.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0260.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0260.574] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099167.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0260.575] GetFileType (hFile=0x1c0) returned 0x1 [0260.576] CloseHandle (hObject=0x1c0) returned 1 [0260.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0260.576] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099167.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xabad)) returned 1 [0260.576] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0260.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0260.576] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099167.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xabad)) returned 1 [0260.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0260.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0260.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0260.577] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ed3, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0099168.JPG", cAlternateFileName="")) returned 1 [0260.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0260.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0260.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0260.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0260.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0260.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0260.578] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099168.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0260.578] GetFileType (hFile=0x1c0) returned 0x1 [0260.579] CloseHandle (hObject=0x1c0) returned 1 [0260.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0260.579] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099168.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ed3)) returned 1 [0260.579] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0260.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0260.579] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099168.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ed3)) returned 1 [0260.580] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0260.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0260.580] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0260.580] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27d0, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0099169.WMF", cAlternateFileName="")) returned 1 [0260.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0260.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0260.581] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0260.581] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0260.581] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0260.581] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0260.582] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099169.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099169.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0260.582] GetFileType (hFile=0x1c0) returned 0x1 [0260.582] CloseHandle (hObject=0x1c0) returned 1 [0260.583] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0260.583] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099169.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099169.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27d0)) returned 1 [0260.583] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0260.583] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0260.583] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099169.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099169.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27d0)) returned 1 [0260.583] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0260.583] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0260.584] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0260.584] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5ee4, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0099170.WMF", cAlternateFileName="")) returned 1 [0260.584] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0260.584] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0260.584] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0260.584] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0260.584] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0260.584] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0260.585] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099170.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0260.586] GetFileType (hFile=0x1c0) returned 0x1 [0260.586] CloseHandle (hObject=0x1c0) returned 1 [0260.587] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0260.587] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099170.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5ee4)) returned 1 [0260.587] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0260.587] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0260.587] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099170.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5ee4)) returned 1 [0260.588] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0260.588] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0260.588] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0260.588] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2232, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0099171.WMF", cAlternateFileName="")) returned 1 [0260.588] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0260.588] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0260.588] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0260.588] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0260.589] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0260.589] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0260.589] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099171.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099171.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0260.590] GetFileType (hFile=0x1c0) returned 0x1 [0260.591] CloseHandle (hObject=0x1c0) returned 1 [0260.591] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0260.591] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099171.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099171.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2232)) returned 1 [0260.591] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0260.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0260.592] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099171.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099171.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2232)) returned 1 [0260.592] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0260.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0260.592] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0260.592] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe392, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0099172.WMF", cAlternateFileName="")) returned 1 [0260.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0260.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0260.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0260.593] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0260.593] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0260.593] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0260.594] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099172.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099172.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0260.594] GetFileType (hFile=0x1c0) returned 0x1 [0260.595] CloseHandle (hObject=0x1c0) returned 1 [0260.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0260.595] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099172.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099172.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe392)) returned 1 [0260.595] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0260.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0260.596] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099172.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099172.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe392)) returned 1 [0260.925] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0260.925] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0260.925] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0260.925] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9114, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0099173.WMF", cAlternateFileName="")) returned 1 [0260.925] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0260.925] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0260.925] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0260.925] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0260.925] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0260.926] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0260.926] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099173.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099173.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0260.926] GetFileType (hFile=0x174) returned 0x1 [0260.927] CloseHandle (hObject=0x174) returned 1 [0260.927] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0260.927] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099173.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099173.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9114)) returned 1 [0260.928] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0260.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0260.928] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099173.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099173.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9114)) returned 1 [0260.928] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0260.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0260.928] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0260.928] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1846, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0099174.WMF", cAlternateFileName="")) returned 1 [0260.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0260.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0260.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0260.929] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0260.929] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0260.929] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0260.929] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099174.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099174.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0260.930] GetFileType (hFile=0x174) returned 0x1 [0260.930] CloseHandle (hObject=0x174) returned 1 [0260.930] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0260.931] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099174.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099174.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1846)) returned 1 [0260.931] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0260.931] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0260.931] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099174.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099174.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1846)) returned 1 [0260.931] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0260.931] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0260.931] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0260.932] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2610, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0099175.WMF", cAlternateFileName="")) returned 1 [0260.932] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0260.932] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0260.932] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0260.932] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0260.932] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0260.932] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0260.933] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099175.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099175.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0260.935] GetFileType (hFile=0x174) returned 0x1 [0260.935] CloseHandle (hObject=0x174) returned 1 [0260.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0260.936] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099175.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099175.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2610)) returned 1 [0260.936] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0260.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0260.936] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099175.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099175.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2610)) returned 1 [0260.936] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0260.937] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0260.937] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0260.937] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9b8, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0099176.WMF", cAlternateFileName="")) returned 1 [0260.937] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0260.937] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0260.937] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0260.937] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0260.937] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0260.938] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0260.938] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099176.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099176.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0260.939] GetFileType (hFile=0x174) returned 0x1 [0260.939] CloseHandle (hObject=0x174) returned 1 [0260.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0260.940] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099176.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099176.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9b8)) returned 1 [0260.940] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0260.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0260.941] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099176.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099176.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9b8)) returned 1 [0260.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0260.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0260.941] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0260.941] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x150a, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0099177.WMF", cAlternateFileName="")) returned 1 [0260.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0260.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0260.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0260.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0260.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0260.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0260.943] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099177.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099177.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0260.944] GetFileType (hFile=0x174) returned 0x1 [0260.944] CloseHandle (hObject=0x174) returned 1 [0260.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0260.945] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099177.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099177.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x150a)) returned 1 [0260.945] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0260.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0260.945] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099177.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099177.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x150a)) returned 1 [0260.946] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0260.946] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0260.946] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0260.946] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe16, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0099178.WMF", cAlternateFileName="")) returned 1 [0260.946] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0260.946] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0260.946] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0260.947] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0260.947] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0260.947] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0260.947] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099178.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099178.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0260.948] GetFileType (hFile=0x174) returned 0x1 [0260.949] CloseHandle (hObject=0x174) returned 1 [0260.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0260.949] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099178.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099178.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe16)) returned 1 [0260.950] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0260.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0260.950] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099178.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099178.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe16)) returned 1 [0260.950] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0260.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0260.950] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0260.950] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x23c2, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0099179.WMF", cAlternateFileName="")) returned 1 [0260.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0260.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0260.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0260.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0260.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0260.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0260.952] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099179.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099179.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0260.953] GetFileType (hFile=0x174) returned 0x1 [0260.954] CloseHandle (hObject=0x174) returned 1 [0260.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0260.954] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099179.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099179.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x23c2)) returned 1 [0260.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0260.955] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0260.955] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099179.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099179.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x23c2)) returned 1 [0260.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0260.956] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0260.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0260.956] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd42, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0099180.WMF", cAlternateFileName="")) returned 1 [0260.956] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0260.956] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0260.956] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0260.957] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0260.957] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0260.957] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0260.957] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099180.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099180.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0260.958] GetFileType (hFile=0x174) returned 0x1 [0260.958] CloseHandle (hObject=0x174) returned 1 [0260.959] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0260.959] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099180.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099180.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd42)) returned 1 [0260.959] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0260.959] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0260.959] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099180.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099180.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd42)) returned 1 [0260.960] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0260.960] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0260.960] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0260.960] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ae, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0099181.WMF", cAlternateFileName="")) returned 1 [0260.960] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0260.960] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0260.960] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0260.960] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0260.961] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0260.961] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0260.961] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099181.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099181.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0260.962] GetFileType (hFile=0x174) returned 0x1 [0260.963] CloseHandle (hObject=0x174) returned 1 [0260.963] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0260.963] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099181.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099181.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ae)) returned 1 [0260.963] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0260.963] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0260.964] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099181.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099181.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ae)) returned 1 [0260.964] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0260.964] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0260.964] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0260.964] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf00, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0099182.WMF", cAlternateFileName="")) returned 1 [0260.964] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0260.964] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0260.965] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0260.965] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0260.965] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0260.965] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0260.966] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099182.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099182.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0260.966] GetFileType (hFile=0x174) returned 0x1 [0260.967] CloseHandle (hObject=0x174) returned 1 [0260.967] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0260.967] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099182.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099182.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf00)) returned 1 [0260.968] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0260.968] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0260.968] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099182.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099182.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf00)) returned 1 [0260.968] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0260.968] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0260.968] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0260.968] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1352, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0099183.WMF", cAlternateFileName="")) returned 1 [0260.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0260.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0260.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0260.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0260.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0260.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0260.970] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099183.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099183.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0260.970] GetFileType (hFile=0x174) returned 0x1 [0261.304] CloseHandle (hObject=0x174) returned 1 [0261.305] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0261.305] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099183.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099183.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1352)) returned 1 [0261.305] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0261.305] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0261.306] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099183.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099183.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1352)) returned 1 [0261.306] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0261.306] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0261.306] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0261.306] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1016, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0099184.WMF", cAlternateFileName="")) returned 1 [0261.308] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0261.308] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0261.308] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0261.308] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0261.308] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0261.308] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0261.628] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099184.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099184.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0261.628] GetFileType (hFile=0x21c) returned 0x1 [0261.629] CloseHandle (hObject=0x21c) returned 1 [0261.629] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0261.629] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099184.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099184.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1016)) returned 1 [0261.630] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0261.630] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0261.630] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099184.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099184.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1016)) returned 1 [0261.630] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0261.630] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0261.630] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0261.633] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe56c811, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe56c811, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcd2, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0099185.JPG", cAlternateFileName="")) returned 1 [0261.633] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0261.633] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0261.633] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0261.633] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0261.633] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0261.633] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0261.634] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099185.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099185.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0261.635] GetFileType (hFile=0x21c) returned 0x1 [0261.636] CloseHandle (hObject=0x21c) returned 1 [0261.636] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0261.636] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099185.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099185.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe56c811, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe56c811, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcd2)) returned 1 [0261.636] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0261.636] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0261.636] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099185.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099185.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe56c811, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe56c811, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcd2)) returned 1 [0261.637] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0261.637] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0261.637] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0261.637] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe56c811, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe56c811, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe56c811, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4162, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0099186.JPG", cAlternateFileName="")) returned 1 [0261.637] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0261.637] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0261.637] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0261.637] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0261.637] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0261.638] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0261.638] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099186.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099186.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0261.639] GetFileType (hFile=0x21c) returned 0x1 [0261.639] CloseHandle (hObject=0x21c) returned 1 [0261.640] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0261.640] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099186.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099186.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe56c811, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe56c811, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe56c811, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4162)) returned 1 [0261.640] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0261.640] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0261.640] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099186.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099186.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe56c811, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe56c811, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe56c811, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4162)) returned 1 [0261.640] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0261.641] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0261.641] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0261.641] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe18c9a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe18c9a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe56c811, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5fd0, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0099187.JPG", cAlternateFileName="")) returned 1 [0261.641] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0261.641] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0261.641] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0261.641] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0261.641] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0261.642] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0261.642] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099187.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099187.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0261.644] GetFileType (hFile=0x21c) returned 0x1 [0261.645] CloseHandle (hObject=0x21c) returned 1 [0261.645] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0261.645] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099187.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099187.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe18c9a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe18c9a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe56c811, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5fd0)) returned 1 [0261.645] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0261.645] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0261.646] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099187.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099187.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe18c9a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe18c9a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe56c811, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5fd0)) returned 1 [0261.646] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0261.646] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0261.646] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0261.646] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe18c9a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe18c9a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe56c811, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2378, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0099188.JPG", cAlternateFileName="")) returned 1 [0261.646] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0261.646] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0261.646] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0261.647] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0261.647] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0261.647] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0261.647] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099188.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099188.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0261.648] GetFileType (hFile=0x21c) returned 0x1 [0261.648] CloseHandle (hObject=0x21c) returned 1 [0261.649] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0261.649] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099188.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099188.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe18c9a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe18c9a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe56c811, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2378)) returned 1 [0261.649] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0261.649] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0261.649] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099188.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099188.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe18c9a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe18c9a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe56c811, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2378)) returned 1 [0261.650] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0261.650] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0261.650] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0261.650] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe18c9a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f8c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0099189.JPG", cAlternateFileName="")) returned 1 [0261.650] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0261.650] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0261.650] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0261.650] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0261.650] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0261.650] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0261.651] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099189.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099189.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0261.652] GetFileType (hFile=0x21c) returned 0x1 [0261.652] CloseHandle (hObject=0x21c) returned 1 [0261.653] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0261.653] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099189.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099189.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe18c9a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f8c)) returned 1 [0261.653] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0261.653] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0261.653] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099189.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099189.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe18c9a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f8c)) returned 1 [0261.653] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0261.653] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0261.654] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0261.654] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xab74, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0099190.JPG", cAlternateFileName="")) returned 1 [0261.654] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0261.654] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0261.654] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0261.654] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0261.654] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0261.654] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0261.655] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099190.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099190.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0261.656] GetFileType (hFile=0x21c) returned 0x1 [0261.657] CloseHandle (hObject=0x21c) returned 1 [0261.657] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0261.657] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099190.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099190.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xab74)) returned 1 [0261.658] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0261.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0261.658] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099190.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099190.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xab74)) returned 1 [0261.658] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0261.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0261.659] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0261.659] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe56c811, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf39f, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0099191.JPG", cAlternateFileName="")) returned 1 [0261.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0261.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0261.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0261.659] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0261.660] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0261.660] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0261.660] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099191.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099191.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0261.661] GetFileType (hFile=0x21c) returned 0x1 [0261.661] CloseHandle (hObject=0x21c) returned 1 [0261.662] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0261.662] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099191.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099191.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe56c811, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf39f)) returned 1 [0261.662] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0261.662] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0261.662] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099191.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099191.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe56c811, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf39f)) returned 1 [0261.662] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0261.663] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0261.663] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0261.663] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe56c811, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x462c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0099192.GIF", cAlternateFileName="")) returned 1 [0261.663] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0261.663] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0261.663] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0261.663] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0261.663] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0261.664] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0261.664] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099192.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099192.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0261.665] GetFileType (hFile=0x21c) returned 0x1 [0261.665] CloseHandle (hObject=0x21c) returned 1 [0261.666] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0261.666] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099192.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099192.gif"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe56c811, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x462c)) returned 1 [0261.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0261.666] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0261.666] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099192.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099192.gif"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe56c811, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x462c)) returned 1 [0261.667] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0261.667] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0261.667] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0261.667] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8ada, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0099193.GIF", cAlternateFileName="")) returned 1 [0261.667] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0261.667] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0261.667] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0261.667] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0261.667] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0261.668] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0261.668] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099193.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099193.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0261.669] GetFileType (hFile=0x21c) returned 0x1 [0261.669] CloseHandle (hObject=0x21c) returned 1 [0262.019] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0262.019] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099193.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099193.gif"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8ada)) returned 1 [0262.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0262.020] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0262.020] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099193.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099193.gif"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8ada)) returned 1 [0262.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0262.020] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0262.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0262.020] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe18c9a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x62b1, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0099194.GIF", cAlternateFileName="")) returned 1 [0262.020] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0262.021] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0262.021] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0262.021] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0262.021] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0262.021] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0262.022] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099194.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099194.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0262.022] GetFileType (hFile=0x1ac) returned 0x1 [0262.023] CloseHandle (hObject=0x1ac) returned 1 [0262.023] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0262.023] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099194.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099194.gif"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe18c9a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x62b1)) returned 1 [0262.023] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0262.023] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0262.024] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099194.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099194.gif"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe18c9a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x62b1)) returned 1 [0262.024] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0262.024] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0262.024] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0262.024] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4dd3, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0099195.GIF", cAlternateFileName="")) returned 1 [0262.024] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0262.024] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0262.025] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0262.025] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0262.025] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0262.025] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0262.026] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099195.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099195.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0262.026] GetFileType (hFile=0x1ac) returned 0x1 [0262.026] CloseHandle (hObject=0x1ac) returned 1 [0262.027] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0262.027] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099195.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099195.gif"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4dd3)) returned 1 [0262.027] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0262.027] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0262.027] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099195.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099195.gif"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4dd3)) returned 1 [0262.028] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0262.028] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0262.028] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0262.028] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3801, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0099196.GIF", cAlternateFileName="")) returned 1 [0262.028] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0262.028] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0262.028] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0262.028] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0262.028] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0262.029] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0262.029] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099196.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099196.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0262.029] GetFileType (hFile=0x1ac) returned 0x1 [0262.029] CloseHandle (hObject=0x1ac) returned 1 [0262.030] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0262.030] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099196.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099196.gif"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3801)) returned 1 [0262.030] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0262.030] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0262.030] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099196.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099196.gif"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3801)) returned 1 [0262.030] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0262.030] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0262.031] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0262.031] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a92, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0099197.GIF", cAlternateFileName="")) returned 1 [0262.031] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0262.031] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0262.031] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0262.031] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0262.031] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0262.031] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0262.032] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099197.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099197.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0262.032] GetFileType (hFile=0x1ac) returned 0x1 [0262.032] CloseHandle (hObject=0x1ac) returned 1 [0262.033] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0262.033] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099197.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099197.gif"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a92)) returned 1 [0262.033] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0262.033] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0262.033] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099197.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099197.gif"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a92)) returned 1 [0262.033] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0262.035] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0262.035] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0262.035] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x148b, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0099198.GIF", cAlternateFileName="")) returned 1 [0262.035] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0262.035] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0262.035] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0262.035] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0262.035] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0262.036] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0262.036] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099198.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099198.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0262.037] GetFileType (hFile=0x1ac) returned 0x1 [0262.038] CloseHandle (hObject=0x1ac) returned 1 [0262.038] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0262.038] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099198.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099198.gif"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x148b)) returned 1 [0262.039] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0262.039] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0262.039] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099198.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099198.gif"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x148b)) returned 1 [0262.039] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0262.039] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0262.039] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0262.039] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x84b7, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0099199.GIF", cAlternateFileName="")) returned 1 [0262.039] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0262.039] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0262.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0262.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0262.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0262.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0262.041] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099199.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099199.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0262.042] GetFileType (hFile=0x1ac) returned 0x1 [0262.043] CloseHandle (hObject=0x1ac) returned 1 [0262.043] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0262.043] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099199.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099199.gif"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x84b7)) returned 1 [0262.043] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0262.043] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0262.044] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099199.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099199.gif"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x84b7)) returned 1 [0262.044] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0262.044] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0262.044] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0262.044] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe56c811, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe56c811, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x409f, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0099200.GIF", cAlternateFileName="")) returned 1 [0262.044] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0262.044] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0262.044] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0262.044] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0262.044] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0262.045] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0262.045] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099200.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099200.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0262.046] GetFileType (hFile=0x1ac) returned 0x1 [0262.046] CloseHandle (hObject=0x1ac) returned 1 [0262.047] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0262.047] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099200.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099200.gif"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe56c811, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe56c811, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x409f)) returned 1 [0262.047] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0262.047] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0262.047] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099200.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099200.gif"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe56c811, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe56c811, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x409f)) returned 1 [0262.047] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0262.047] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0262.048] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0262.048] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc8c9, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0099201.GIF", cAlternateFileName="")) returned 1 [0262.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0262.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0262.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0262.048] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0262.048] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0262.048] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0262.049] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099201.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099201.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0262.050] GetFileType (hFile=0x1ac) returned 0x1 [0262.050] CloseHandle (hObject=0x1ac) returned 1 [0262.050] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0262.050] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099201.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099201.gif"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc8c9)) returned 1 [0262.050] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0262.050] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0262.051] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099201.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099201.gif"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc8c9)) returned 1 [0262.051] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0262.051] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0262.051] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0262.051] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1367, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0099202.GIF", cAlternateFileName="")) returned 1 [0262.051] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0262.051] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0262.051] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0262.051] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0262.051] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0262.051] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0262.052] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099202.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099202.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0262.052] GetFileType (hFile=0x1ac) returned 0x1 [0262.053] CloseHandle (hObject=0x1ac) returned 1 [0262.053] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0262.053] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099202.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099202.gif"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1367)) returned 1 [0262.053] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0262.053] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0262.053] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099202.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099202.gif"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1367)) returned 1 [0262.053] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0262.053] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0262.053] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0262.054] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe56c811, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe56c811, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf40, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0099203.GIF", cAlternateFileName="")) returned 1 [0262.054] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0262.054] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0262.054] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0262.054] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0262.054] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0262.054] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0262.054] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099203.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099203.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0262.055] GetFileType (hFile=0x1ac) returned 0x1 [0262.055] CloseHandle (hObject=0x1ac) returned 1 [0262.056] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0262.056] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099203.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099203.gif"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe56c811, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe56c811, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf40)) returned 1 [0262.056] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0262.057] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0262.057] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099203.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099203.gif"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe56c811, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe56c811, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf40)) returned 1 [0262.057] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0262.057] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0262.058] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0262.058] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe56c811, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe56c811, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45be, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0099204.WMF", cAlternateFileName="")) returned 1 [0262.058] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0262.058] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0262.058] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0262.058] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0262.058] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0262.058] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0262.059] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099204.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099204.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0262.060] GetFileType (hFile=0x1ac) returned 0x1 [0262.060] CloseHandle (hObject=0x1ac) returned 1 [0262.060] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0262.060] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099204.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099204.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe56c811, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe56c811, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45be)) returned 1 [0262.061] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0262.061] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0262.061] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099204.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099204.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe56c811, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe56c811, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45be)) returned 1 [0262.061] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0262.061] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0262.061] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0262.061] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45be, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0099205.WMF", cAlternateFileName="")) returned 1 [0262.061] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0262.061] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0262.061] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0262.062] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0262.062] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0262.062] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0262.062] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099205.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099205.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0262.632] GetFileType (hFile=0x174) returned 0x1 [0262.632] CloseHandle (hObject=0x174) returned 1 [0262.633] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0262.633] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099205.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099205.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45be)) returned 1 [0262.633] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0262.633] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0262.633] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099205.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099205.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45be)) returned 1 [0262.633] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0262.634] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0262.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0262.634] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x133f8, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0101856.BMP", cAlternateFileName="")) returned 1 [0262.634] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0262.634] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0262.634] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0262.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0262.635] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0262.635] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0262.635] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101856.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101856.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0262.636] GetFileType (hFile=0x174) returned 0x1 [0262.636] CloseHandle (hObject=0x174) returned 1 [0262.637] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0262.637] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101856.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101856.bmp"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x133f8)) returned 1 [0262.637] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0262.637] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0262.637] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101856.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101856.bmp"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x133f8)) returned 1 [0262.638] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0262.638] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0262.638] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0262.638] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0101857.BMP", cAlternateFileName="")) returned 1 [0262.638] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0262.638] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0262.638] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0262.639] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0262.639] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0262.639] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0262.640] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101857.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101857.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0262.640] GetFileType (hFile=0x174) returned 0x1 [0262.641] CloseHandle (hObject=0x174) returned 1 [0262.641] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0262.641] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101857.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101857.bmp"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8)) returned 1 [0262.641] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0262.642] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0262.642] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101857.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101857.bmp"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8)) returned 1 [0262.642] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0262.642] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0262.642] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0262.642] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0101858.BMP", cAlternateFileName="")) returned 1 [0262.642] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2382f8 [0262.643] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0262.646] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0262.646] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0262.646] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0262.646] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2382f8 | out: hHeap=0x1f0000) returned 1 [0262.647] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101858.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101858.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0262.647] GetFileType (hFile=0x174) returned 0x1 [0262.648] CloseHandle (hObject=0x174) returned 1 [0262.648] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0262.648] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101858.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101858.bmp"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8)) returned 1 [0262.649] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0262.649] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0262.649] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101858.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101858.bmp"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8)) returned 1 [0262.649] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0262.649] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0262.649] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0262.649] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0101859.BMP", cAlternateFileName="")) returned 1 [0262.650] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0262.650] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0262.650] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0262.650] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0262.650] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0262.650] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0262.651] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101859.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101859.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0262.651] GetFileType (hFile=0x174) returned 0x1 [0262.651] CloseHandle (hObject=0x174) returned 1 [0262.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0262.652] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101859.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101859.bmp"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0)) returned 1 [0262.652] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0262.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0262.652] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101859.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101859.bmp"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0)) returned 1 [0262.652] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0262.653] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0262.653] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0262.653] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0101860.BMP", cAlternateFileName="")) returned 1 [0262.653] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0262.653] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0262.653] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0262.653] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0262.653] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0262.653] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0262.654] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101860.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101860.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0262.654] GetFileType (hFile=0x174) returned 0x1 [0262.655] CloseHandle (hObject=0x174) returned 1 [0262.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0262.656] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101860.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101860.bmp"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8)) returned 1 [0262.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0262.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0262.656] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101860.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101860.bmp"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8)) returned 1 [0262.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0262.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0262.657] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0262.657] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0101861.BMP", cAlternateFileName="")) returned 1 [0262.657] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0262.657] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0262.657] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0262.657] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0262.657] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0262.657] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0262.658] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101861.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101861.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0262.660] GetFileType (hFile=0x174) returned 0x1 [0262.661] CloseHandle (hObject=0x174) returned 1 [0262.661] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0262.661] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101861.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101861.bmp"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8)) returned 1 [0262.661] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0262.662] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0262.662] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101861.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101861.bmp"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8)) returned 1 [0262.662] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0262.662] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0262.662] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0262.662] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0101862.BMP", cAlternateFileName="")) returned 1 [0262.662] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0262.662] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0262.662] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0262.663] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0262.663] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0262.663] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0262.663] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101862.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101862.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0262.664] GetFileType (hFile=0x174) returned 0x1 [0262.664] CloseHandle (hObject=0x174) returned 1 [0262.664] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0262.664] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101862.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101862.bmp"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8)) returned 1 [0262.665] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0262.665] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0262.665] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101862.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101862.bmp"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8)) returned 1 [0262.665] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0262.665] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0262.665] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0262.665] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0101863.BMP", cAlternateFileName="")) returned 1 [0262.665] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0262.665] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0262.666] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0262.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0262.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0262.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0262.667] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101863.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101863.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0262.667] GetFileType (hFile=0x174) returned 0x1 [0262.667] CloseHandle (hObject=0x174) returned 1 [0262.668] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0262.668] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101863.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101863.bmp"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8)) returned 1 [0262.668] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0262.668] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0262.668] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101863.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101863.bmp"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8)) returned 1 [0262.668] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0262.669] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0262.669] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0262.669] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0101864.BMP", cAlternateFileName="")) returned 1 [0262.669] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0262.669] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0262.669] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0262.669] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0262.669] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0262.669] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0262.670] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101864.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101864.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0262.670] GetFileType (hFile=0x174) returned 0x1 [0262.671] CloseHandle (hObject=0x174) returned 1 [0262.671] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0262.671] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101864.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101864.bmp"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0)) returned 1 [0262.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0262.672] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0262.672] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101864.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101864.bmp"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0)) returned 1 [0262.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0262.672] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0262.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0262.672] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0101865.BMP", cAlternateFileName="")) returned 1 [0262.672] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0262.673] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0262.673] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0262.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0262.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0262.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0262.674] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101865.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101865.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0263.147] GetFileType (hFile=0x174) returned 0x1 [0263.148] CloseHandle (hObject=0x174) returned 1 [0263.148] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0263.149] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101865.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101865.bmp"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8)) returned 1 [0263.149] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0263.149] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0263.150] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101865.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101865.bmp"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8)) returned 1 [0263.150] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0263.150] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0263.150] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0263.150] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0101866.BMP", cAlternateFileName="")) returned 1 [0263.151] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0263.151] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0263.151] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0263.151] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0263.151] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0263.151] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0263.153] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101866.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101866.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0263.153] GetFileType (hFile=0x174) returned 0x1 [0263.154] CloseHandle (hObject=0x174) returned 1 [0263.154] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0263.154] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101866.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101866.bmp"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8)) returned 1 [0263.155] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0263.155] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0263.155] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101866.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101866.bmp"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8)) returned 1 [0263.155] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0263.155] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0263.155] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0263.155] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7f68, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0101867.BMP", cAlternateFileName="")) returned 1 [0263.156] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0263.156] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0263.156] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0263.156] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0263.156] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0263.156] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0263.157] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101867.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101867.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0263.158] GetFileType (hFile=0x174) returned 0x1 [0263.158] CloseHandle (hObject=0x174) returned 1 [0263.159] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0263.159] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101867.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101867.bmp"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7f68)) returned 1 [0263.160] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0263.160] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0263.161] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101867.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101867.bmp"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7f68)) returned 1 [0263.161] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0263.161] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0263.161] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0263.161] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ee8, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0101980.WMF", cAlternateFileName="")) returned 1 [0263.738] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0263.739] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0263.739] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0263.739] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0263.739] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0263.739] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0263.740] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101980.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101980.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0263.740] GetFileType (hFile=0x1ac) returned 0x1 [0263.741] CloseHandle (hObject=0x1ac) returned 1 [0263.741] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0263.741] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101980.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101980.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ee8)) returned 1 [0263.741] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0263.741] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0263.742] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101980.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101980.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ee8)) returned 1 [0263.742] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0263.742] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0263.742] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0263.742] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3e74, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0102002.WMF", cAlternateFileName="")) returned 1 [0263.742] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0263.742] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0263.742] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0263.743] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0263.743] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0263.743] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0263.744] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102002.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102002.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0263.744] GetFileType (hFile=0x1ac) returned 0x1 [0263.744] CloseHandle (hObject=0x1ac) returned 1 [0263.744] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0263.745] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102002.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102002.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3e74)) returned 1 [0263.745] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0263.745] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0263.745] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102002.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102002.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3e74)) returned 1 [0263.745] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0263.745] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0263.745] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0263.745] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6978, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0102594.WMF", cAlternateFileName="")) returned 1 [0263.745] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0263.745] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0263.745] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0263.745] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0263.746] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0263.746] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0263.746] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102594.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102594.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0263.746] GetFileType (hFile=0x1ac) returned 0x1 [0263.747] CloseHandle (hObject=0x1ac) returned 1 [0263.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0263.747] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102594.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102594.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6978)) returned 1 [0263.747] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0263.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0263.747] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102594.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102594.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6978)) returned 1 [0263.747] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0263.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0263.748] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0263.748] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2bd0, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0102762.WMF", cAlternateFileName="")) returned 1 [0263.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0263.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0263.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0263.748] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0263.748] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0263.748] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0263.748] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102762.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102762.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0263.749] GetFileType (hFile=0x1ac) returned 0x1 [0263.749] CloseHandle (hObject=0x1ac) returned 1 [0263.749] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0263.749] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102762.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102762.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2bd0)) returned 1 [0263.750] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0263.750] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0263.750] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102762.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102762.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2bd0)) returned 1 [0263.750] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0263.750] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0263.750] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0263.750] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4290, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0102984.WMF", cAlternateFileName="")) returned 1 [0263.750] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0263.750] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0263.750] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0263.750] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0263.750] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0263.750] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0263.751] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102984.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102984.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0263.751] GetFileType (hFile=0x1ac) returned 0x1 [0263.751] CloseHandle (hObject=0x1ac) returned 1 [0263.752] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0263.752] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102984.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102984.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4290)) returned 1 [0263.752] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0263.752] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0263.752] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102984.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102984.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4290)) returned 1 [0263.752] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0263.752] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0263.752] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0263.752] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43c0, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0103058.WMF", cAlternateFileName="")) returned 1 [0263.753] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0263.753] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0263.753] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0263.753] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0263.753] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0263.753] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0263.754] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103058.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103058.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0263.754] GetFileType (hFile=0x1ac) returned 0x1 [0263.755] CloseHandle (hObject=0x1ac) returned 1 [0263.755] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0263.755] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103058.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103058.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43c0)) returned 1 [0263.755] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0263.755] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0263.755] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103058.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103058.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43c0)) returned 1 [0263.755] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0263.755] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0263.755] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0263.756] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3264, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0103262.WMF", cAlternateFileName="")) returned 1 [0263.756] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0263.756] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0263.756] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0263.756] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0263.756] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0263.756] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0263.756] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103262.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103262.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0263.757] GetFileType (hFile=0x1ac) returned 0x1 [0263.757] CloseHandle (hObject=0x1ac) returned 1 [0263.757] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0263.757] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103262.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103262.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3264)) returned 1 [0263.757] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0263.758] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0263.758] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103262.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103262.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3264)) returned 1 [0263.758] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0263.758] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0263.758] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0263.758] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaf94, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0103402.WMF", cAlternateFileName="")) returned 1 [0263.758] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0263.758] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0263.758] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0263.758] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0263.758] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0263.758] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0263.759] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103402.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103402.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0263.759] GetFileType (hFile=0x1ac) returned 0x1 [0263.759] CloseHandle (hObject=0x1ac) returned 1 [0263.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0263.760] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103402.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103402.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaf94)) returned 1 [0263.760] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0263.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0263.760] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103402.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103402.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaf94)) returned 1 [0263.760] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0263.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0263.760] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0263.760] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1714, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0103812.WMF", cAlternateFileName="")) returned 1 [0263.761] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0263.761] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0263.761] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0263.761] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0263.761] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0263.761] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0263.762] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103812.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103812.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0263.762] GetFileType (hFile=0x1ac) returned 0x1 [0263.762] CloseHandle (hObject=0x1ac) returned 1 [0263.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0263.763] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103812.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103812.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1714)) returned 1 [0263.763] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0263.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0263.763] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103812.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103812.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1714)) returned 1 [0263.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0263.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0263.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0263.764] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5c2c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0103850.WMF", cAlternateFileName="")) returned 1 [0263.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0263.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0263.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0263.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0263.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0263.765] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0263.765] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103850.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103850.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0263.766] GetFileType (hFile=0x1ac) returned 0x1 [0263.766] CloseHandle (hObject=0x1ac) returned 1 [0263.766] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0263.766] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103850.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103850.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5c2c)) returned 1 [0263.767] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0263.767] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0263.767] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103850.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103850.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5c2c)) returned 1 [0263.767] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0263.767] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0263.767] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0263.767] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1434, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0105230.WMF", cAlternateFileName="")) returned 1 [0263.767] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0263.767] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0263.768] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0263.768] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0263.768] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0263.768] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0263.768] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105230.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105230.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0263.769] GetFileType (hFile=0x1ac) returned 0x1 [0263.770] CloseHandle (hObject=0x1ac) returned 1 [0263.770] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0263.770] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105230.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105230.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1434)) returned 1 [0263.771] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0263.771] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0263.771] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105230.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105230.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1434)) returned 1 [0263.771] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0263.771] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0263.771] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0263.771] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0105232.WMF", cAlternateFileName="")) returned 1 [0263.772] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0263.772] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0263.772] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0263.772] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0263.772] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0263.772] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0263.773] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105232.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105232.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0263.773] GetFileType (hFile=0x1ac) returned 0x1 [0263.774] CloseHandle (hObject=0x1ac) returned 1 [0263.774] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0263.775] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105232.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105232.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1600)) returned 1 [0263.775] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0263.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0263.775] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105232.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105232.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1600)) returned 1 [0263.775] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0263.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0263.776] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0263.776] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd74, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0105234.WMF", cAlternateFileName="")) returned 1 [0263.776] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0263.776] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0263.776] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0263.776] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0263.776] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0263.776] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0263.777] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105234.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105234.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0263.974] GetFileType (hFile=0x198) returned 0x1 [0263.975] CloseHandle (hObject=0x198) returned 1 [0263.975] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0263.975] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105234.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105234.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd74)) returned 1 [0263.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0263.975] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0263.976] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105234.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105234.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd74)) returned 1 [0263.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0263.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0263.976] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0263.976] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4314, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0105238.WMF", cAlternateFileName="")) returned 1 [0263.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0263.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0263.976] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0263.977] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0263.977] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0263.977] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0263.978] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105238.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105238.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0263.978] GetFileType (hFile=0x198) returned 0x1 [0263.979] CloseHandle (hObject=0x198) returned 1 [0263.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0263.979] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105238.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105238.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4314)) returned 1 [0263.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0263.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0263.979] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105238.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105238.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4314)) returned 1 [0263.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0263.980] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0263.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0263.980] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d0c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0105240.WMF", cAlternateFileName="")) returned 1 [0263.980] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0263.980] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0263.980] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0263.980] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0263.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0263.981] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0263.981] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105240.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105240.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0263.982] GetFileType (hFile=0x198) returned 0x1 [0263.982] CloseHandle (hObject=0x198) returned 1 [0263.983] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0263.983] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105240.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105240.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d0c)) returned 1 [0263.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0263.983] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0263.983] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105240.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105240.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d0c)) returned 1 [0263.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0263.983] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0263.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0263.984] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2bdc, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0105244.WMF", cAlternateFileName="")) returned 1 [0263.984] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0263.984] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0263.984] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0263.984] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0263.984] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0263.984] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0263.985] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105244.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105244.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0263.985] GetFileType (hFile=0x198) returned 0x1 [0263.985] CloseHandle (hObject=0x198) returned 1 [0263.986] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0263.986] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105244.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105244.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2bdc)) returned 1 [0263.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0263.986] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0263.986] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105244.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105244.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2bdc)) returned 1 [0263.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0263.986] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0263.986] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0263.986] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b80, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0105246.WMF", cAlternateFileName="")) returned 1 [0263.986] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0263.986] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0263.987] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0263.987] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0263.987] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0263.987] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0263.987] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105246.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105246.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0263.989] GetFileType (hFile=0x198) returned 0x1 [0263.990] CloseHandle (hObject=0x198) returned 1 [0263.990] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0263.990] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105246.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105246.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b80)) returned 1 [0263.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0263.991] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0263.991] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105246.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105246.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b80)) returned 1 [0263.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0263.991] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0263.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0263.991] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1214, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0105250.WMF", cAlternateFileName="")) returned 1 [0263.991] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0263.992] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0263.992] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0263.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0263.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0263.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0263.993] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105250.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105250.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0263.994] GetFileType (hFile=0x198) returned 0x1 [0263.995] CloseHandle (hObject=0x198) returned 1 [0263.995] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0263.995] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105250.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105250.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1214)) returned 1 [0263.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0263.996] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0263.996] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105250.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105250.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1214)) returned 1 [0263.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0263.996] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0263.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0263.996] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1714, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0105266.WMF", cAlternateFileName="")) returned 1 [0263.997] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0263.997] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0263.997] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0263.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0263.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0263.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0263.998] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105266.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105266.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0263.999] GetFileType (hFile=0x198) returned 0x1 [0264.000] CloseHandle (hObject=0x198) returned 1 [0264.000] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0264.001] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105266.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105266.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1714)) returned 1 [0264.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0264.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0264.001] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105266.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105266.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1714)) returned 1 [0264.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0264.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0264.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0264.002] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4540, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0105272.WMF", cAlternateFileName="")) returned 1 [0264.002] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0264.002] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0264.002] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0264.002] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0264.002] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0264.002] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0264.003] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105272.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105272.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0264.004] GetFileType (hFile=0x198) returned 0x1 [0264.004] CloseHandle (hObject=0x198) returned 1 [0264.005] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0264.005] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105272.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105272.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4540)) returned 1 [0264.005] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0264.005] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0264.005] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105272.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105272.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4540)) returned 1 [0264.006] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0264.006] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0264.006] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0264.006] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b28, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0105276.WMF", cAlternateFileName="")) returned 1 [0264.006] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0264.006] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0264.006] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0264.006] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0264.007] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0264.007] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0264.007] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105276.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105276.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0264.008] GetFileType (hFile=0x198) returned 0x1 [0264.008] CloseHandle (hObject=0x198) returned 1 [0264.009] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0264.009] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105276.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105276.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b28)) returned 1 [0264.009] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0264.009] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0264.009] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105276.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105276.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b28)) returned 1 [0264.010] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0264.010] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0264.010] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0264.010] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d14, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0105280.WMF", cAlternateFileName="")) returned 1 [0264.010] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0264.010] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0264.010] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0264.010] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0264.011] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0264.011] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0264.011] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105280.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105280.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0264.444] GetFileType (hFile=0x174) returned 0x1 [0264.445] CloseHandle (hObject=0x174) returned 1 [0264.445] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0264.445] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105280.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105280.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d14)) returned 1 [0264.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0264.446] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0264.446] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105280.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105280.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d14)) returned 1 [0264.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0264.446] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0264.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0264.447] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12bc, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0105282.WMF", cAlternateFileName="")) returned 1 [0264.447] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0264.447] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0264.447] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0264.447] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0264.447] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0264.447] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0265.004] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105282.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105282.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0265.004] GetFileType (hFile=0x198) returned 0x1 [0265.005] CloseHandle (hObject=0x198) returned 1 [0265.005] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0265.005] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105282.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105282.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12bc)) returned 1 [0265.005] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0265.005] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0265.005] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105282.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105282.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12bc)) returned 1 [0265.006] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0265.006] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0265.006] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0265.006] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19a8, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0105286.WMF", cAlternateFileName="")) returned 1 [0265.006] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0265.006] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0265.006] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0265.006] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0265.006] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0265.006] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0265.007] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105286.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105286.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0265.007] GetFileType (hFile=0x198) returned 0x1 [0265.007] CloseHandle (hObject=0x198) returned 1 [0265.008] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0265.008] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105286.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105286.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19a8)) returned 1 [0265.008] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0265.008] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0265.008] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105286.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105286.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19a8)) returned 1 [0265.008] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0265.008] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0265.008] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0265.008] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3dd8, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0105288.WMF", cAlternateFileName="")) returned 1 [0265.008] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0265.008] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0265.008] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0265.009] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0265.009] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0265.009] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0265.009] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105288.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105288.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0265.009] GetFileType (hFile=0x198) returned 0x1 [0265.010] CloseHandle (hObject=0x198) returned 1 [0265.010] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0265.010] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105288.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105288.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3dd8)) returned 1 [0265.010] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0265.010] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0265.010] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105288.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105288.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3dd8)) returned 1 [0265.010] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0265.010] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0265.010] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0265.011] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a14, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0105292.WMF", cAlternateFileName="")) returned 1 [0265.011] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0265.011] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0265.011] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0265.011] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0265.011] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0265.011] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0265.011] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105292.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105292.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0265.011] GetFileType (hFile=0x198) returned 0x1 [0265.012] CloseHandle (hObject=0x198) returned 1 [0265.012] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0265.012] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105292.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105292.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a14)) returned 1 [0265.012] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0265.012] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0265.012] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105292.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105292.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a14)) returned 1 [0265.012] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0265.012] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0265.013] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0265.013] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1580, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0105294.WMF", cAlternateFileName="")) returned 1 [0265.013] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0265.013] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0265.013] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0265.013] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0265.013] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0265.013] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0265.013] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105294.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105294.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0265.014] GetFileType (hFile=0x198) returned 0x1 [0265.014] CloseHandle (hObject=0x198) returned 1 [0265.014] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0265.014] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105294.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105294.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1580)) returned 1 [0265.014] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0265.015] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0265.015] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105294.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105294.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1580)) returned 1 [0265.015] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0265.015] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0265.015] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0265.015] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18b0, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0105298.WMF", cAlternateFileName="")) returned 1 [0265.015] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0265.015] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0265.015] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0265.015] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0265.015] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0265.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0265.016] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105298.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105298.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0265.016] GetFileType (hFile=0x198) returned 0x1 [0265.016] CloseHandle (hObject=0x198) returned 1 [0265.017] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0265.017] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105298.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105298.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18b0)) returned 1 [0265.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0265.017] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0265.017] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105298.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105298.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18b0)) returned 1 [0265.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0265.017] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0265.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0265.017] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10e0, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0105306.WMF", cAlternateFileName="")) returned 1 [0265.017] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0265.018] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0265.018] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0265.018] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0265.018] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0265.018] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0265.018] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105306.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105306.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0265.504] GetFileType (hFile=0x198) returned 0x1 [0265.505] CloseHandle (hObject=0x198) returned 1 [0265.505] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0265.505] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105306.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105306.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10e0)) returned 1 [0265.505] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0265.506] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0265.506] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105306.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105306.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10e0)) returned 1 [0265.506] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0265.506] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0265.506] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0265.506] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e4, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0105320.WMF", cAlternateFileName="")) returned 1 [0265.506] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0265.506] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0265.507] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0265.507] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0265.507] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0265.507] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0265.508] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105320.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105320.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0265.508] GetFileType (hFile=0x198) returned 0x1 [0265.508] CloseHandle (hObject=0x198) returned 1 [0265.509] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0265.509] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105320.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105320.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e4)) returned 1 [0265.509] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0265.509] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0265.510] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105320.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105320.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e4)) returned 1 [0265.510] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0265.510] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0265.510] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0265.510] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f38, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0105328.WMF", cAlternateFileName="")) returned 1 [0265.510] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0265.510] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0265.510] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0265.510] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0265.511] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0265.511] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0265.511] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105328.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105328.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0265.512] GetFileType (hFile=0x198) returned 0x1 [0265.512] CloseHandle (hObject=0x198) returned 1 [0265.512] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0265.513] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105328.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105328.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f38)) returned 1 [0265.513] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0265.513] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0265.513] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105328.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105328.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f38)) returned 1 [0265.513] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0265.513] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0265.513] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0265.514] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x290c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0105332.WMF", cAlternateFileName="")) returned 1 [0265.514] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0265.514] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0265.514] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0265.514] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0265.514] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0265.514] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0265.515] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105332.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105332.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0265.515] GetFileType (hFile=0x198) returned 0x1 [0265.516] CloseHandle (hObject=0x198) returned 1 [0265.516] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0265.516] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105332.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105332.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x290c)) returned 1 [0265.517] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0265.517] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0265.517] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105332.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105332.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x290c)) returned 1 [0265.517] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0265.517] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0265.517] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0265.517] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb54, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0105336.WMF", cAlternateFileName="")) returned 1 [0265.517] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0265.518] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0265.518] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0265.518] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0265.518] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0265.518] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0265.519] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105336.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105336.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0265.520] GetFileType (hFile=0x198) returned 0x1 [0265.520] CloseHandle (hObject=0x198) returned 1 [0265.521] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0265.521] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105336.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105336.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb54)) returned 1 [0265.521] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0265.521] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0265.521] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105336.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105336.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb54)) returned 1 [0265.522] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0265.522] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0265.522] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0265.522] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d40, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0105338.WMF", cAlternateFileName="")) returned 1 [0265.522] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0265.522] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0265.522] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0265.522] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0265.523] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0265.523] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0265.523] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105338.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105338.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0265.523] GetFileType (hFile=0x198) returned 0x1 [0265.524] CloseHandle (hObject=0x198) returned 1 [0265.524] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0265.524] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105338.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105338.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d40)) returned 1 [0265.525] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0265.525] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0265.525] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105338.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105338.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d40)) returned 1 [0265.525] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0265.525] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0265.525] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0265.525] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x42a4, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0105348.WMF", cAlternateFileName="")) returned 1 [0265.526] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0265.526] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0265.526] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0265.526] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0265.526] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0265.526] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0265.527] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105348.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105348.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0265.527] GetFileType (hFile=0x198) returned 0x1 [0265.527] CloseHandle (hObject=0x198) returned 1 [0265.528] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0265.528] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105348.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105348.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x42a4)) returned 1 [0265.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0265.528] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0265.528] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105348.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105348.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x42a4)) returned 1 [0265.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0265.528] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0265.529] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0265.529] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x229c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0105360.WMF", cAlternateFileName="")) returned 1 [0265.529] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0265.529] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0265.529] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0265.529] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0265.529] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0265.529] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0265.530] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105360.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105360.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0265.530] GetFileType (hFile=0x198) returned 0x1 [0265.530] CloseHandle (hObject=0x198) returned 1 [0265.530] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0265.530] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105360.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105360.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x229c)) returned 1 [0265.531] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0265.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0265.531] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105360.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105360.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x229c)) returned 1 [0265.531] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0265.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0265.531] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0265.531] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x305c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0105368.WMF", cAlternateFileName="")) returned 1 [0265.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0265.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0265.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0265.531] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0265.532] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0265.532] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0265.532] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105368.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105368.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0265.532] GetFileType (hFile=0x198) returned 0x1 [0265.532] CloseHandle (hObject=0x198) returned 1 [0265.533] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0265.533] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105368.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105368.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x305c)) returned 1 [0265.533] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0265.533] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0265.533] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105368.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105368.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x305c)) returned 1 [0265.533] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0265.533] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0265.533] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0265.533] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1364, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0105376.WMF", cAlternateFileName="")) returned 1 [0265.533] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0265.534] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0265.534] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0265.534] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0265.534] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0265.534] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0265.534] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105376.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105376.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0265.534] GetFileType (hFile=0x198) returned 0x1 [0265.552] CloseHandle (hObject=0x198) returned 1 [0265.553] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0265.553] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105376.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105376.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1364)) returned 1 [0265.553] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0265.553] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0265.553] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105376.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105376.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1364)) returned 1 [0265.553] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0265.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0265.554] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0265.554] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1364, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0105378.WMF", cAlternateFileName="")) returned 1 [0265.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0265.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0265.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0265.554] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0265.554] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0265.554] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0265.555] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105378.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105378.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0265.555] GetFileType (hFile=0x198) returned 0x1 [0265.555] CloseHandle (hObject=0x198) returned 1 [0265.555] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0265.555] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105378.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105378.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1364)) returned 1 [0265.556] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0265.556] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0265.556] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105378.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105378.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1364)) returned 1 [0265.556] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0265.556] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0265.556] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0265.556] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1210, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0105380.WMF", cAlternateFileName="")) returned 1 [0265.556] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0265.556] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0265.556] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0265.556] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0265.557] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0265.557] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0265.557] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105380.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105380.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0265.557] GetFileType (hFile=0x198) returned 0x1 [0265.558] CloseHandle (hObject=0x198) returned 1 [0265.558] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0265.558] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105380.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105380.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1210)) returned 1 [0265.558] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0265.558] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0265.558] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105380.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105380.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1210)) returned 1 [0265.558] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0265.558] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0265.559] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0265.559] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16f8, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0105384.WMF", cAlternateFileName="")) returned 1 [0265.559] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0265.559] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0265.559] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0265.559] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0265.559] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0265.559] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0265.560] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105384.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105384.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0265.560] GetFileType (hFile=0x198) returned 0x1 [0265.560] CloseHandle (hObject=0x198) returned 1 [0265.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0265.560] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105384.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105384.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16f8)) returned 1 [0265.561] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0265.561] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0265.561] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105384.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105384.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16f8)) returned 1 [0265.561] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0265.561] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0265.561] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0265.561] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x175c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0105386.WMF", cAlternateFileName="")) returned 1 [0265.561] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0265.561] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0265.561] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0265.561] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0265.562] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0265.562] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0265.562] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105386.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105386.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0265.562] GetFileType (hFile=0x198) returned 0x1 [0265.563] CloseHandle (hObject=0x198) returned 1 [0265.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0265.563] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105386.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105386.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x175c)) returned 1 [0265.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0265.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0265.563] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105386.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105386.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x175c)) returned 1 [0265.564] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0265.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0265.564] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0265.564] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x203c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0105388.WMF", cAlternateFileName="")) returned 1 [0265.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0265.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0265.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0265.564] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0265.564] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0265.565] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0265.565] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105388.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105388.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0265.565] GetFileType (hFile=0x198) returned 0x1 [0265.566] CloseHandle (hObject=0x198) returned 1 [0265.758] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0265.759] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105388.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105388.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x203c)) returned 1 [0265.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0265.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0265.759] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105388.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105388.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x203c)) returned 1 [0265.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0265.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0265.760] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0265.760] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1350, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0105390.WMF", cAlternateFileName="")) returned 1 [0265.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0265.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0265.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0265.760] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0265.760] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0265.760] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0265.801] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105390.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105390.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0265.801] GetFileType (hFile=0x198) returned 0x1 [0265.802] CloseHandle (hObject=0x198) returned 1 [0265.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0265.802] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105390.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105390.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1350)) returned 1 [0265.802] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0265.803] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0265.803] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105390.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105390.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1350)) returned 1 [0265.803] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0265.803] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0265.803] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0265.803] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b04, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0105396.WMF", cAlternateFileName="")) returned 1 [0265.803] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0265.803] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0265.803] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0265.803] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0265.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0265.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0265.804] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105396.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105396.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0265.804] GetFileType (hFile=0x198) returned 0x1 [0265.805] CloseHandle (hObject=0x198) returned 1 [0265.805] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0265.805] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105396.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105396.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b04)) returned 1 [0265.805] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0265.806] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0265.806] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105396.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105396.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b04)) returned 1 [0265.806] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0265.806] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0265.806] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0265.806] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd00, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0105398.WMF", cAlternateFileName="")) returned 1 [0265.806] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0265.806] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0265.806] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0265.807] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0265.807] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0265.807] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0265.807] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105398.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105398.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0265.808] GetFileType (hFile=0x198) returned 0x1 [0265.808] CloseHandle (hObject=0x198) returned 1 [0265.808] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0265.808] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105398.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105398.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd00)) returned 1 [0265.809] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0265.809] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0265.809] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105398.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105398.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd00)) returned 1 [0265.809] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0265.809] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0265.809] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0265.809] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4fdc, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0105410.WMF", cAlternateFileName="")) returned 1 [0265.809] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0265.809] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0265.809] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0265.810] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0265.810] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0265.810] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0265.810] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105410.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105410.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0265.811] GetFileType (hFile=0x198) returned 0x1 [0265.811] CloseHandle (hObject=0x198) returned 1 [0265.812] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0265.812] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105410.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105410.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4fdc)) returned 1 [0265.812] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0265.812] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0265.812] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105410.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105410.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4fdc)) returned 1 [0265.812] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0265.812] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0265.813] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0265.813] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x24b8, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0105412.WMF", cAlternateFileName="")) returned 1 [0265.813] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0265.813] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0265.813] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0265.813] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0265.813] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0265.813] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0265.814] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105412.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105412.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0265.814] GetFileType (hFile=0x198) returned 0x1 [0265.815] CloseHandle (hObject=0x198) returned 1 [0265.815] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0265.816] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105412.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105412.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x24b8)) returned 1 [0265.816] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0265.816] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0265.816] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105412.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105412.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x24b8)) returned 1 [0265.817] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0265.817] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0265.817] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0265.817] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1864, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0105414.WMF", cAlternateFileName="")) returned 1 [0265.817] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0265.817] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0265.817] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0265.818] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0265.818] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0265.818] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0265.819] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105414.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105414.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0265.819] GetFileType (hFile=0x198) returned 0x1 [0265.819] CloseHandle (hObject=0x198) returned 1 [0265.820] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0265.820] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105414.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105414.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1864)) returned 1 [0265.820] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0265.820] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0265.820] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105414.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105414.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1864)) returned 1 [0265.820] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0265.820] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0265.821] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0265.821] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4928, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0105490.WMF", cAlternateFileName="")) returned 1 [0265.821] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0265.821] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0265.821] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0265.821] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0265.821] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0265.821] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0265.822] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105490.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105490.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0265.822] GetFileType (hFile=0x198) returned 0x1 [0265.823] CloseHandle (hObject=0x198) returned 1 [0265.823] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0265.823] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105490.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105490.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4928)) returned 1 [0265.824] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0265.824] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0265.824] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105490.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105490.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4928)) returned 1 [0265.824] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0265.824] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0265.824] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0265.824] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1424, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0105496.WMF", cAlternateFileName="")) returned 1 [0265.824] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0265.824] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0265.825] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0265.825] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0265.825] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0265.825] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0265.826] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105496.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105496.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0265.826] GetFileType (hFile=0x198) returned 0x1 [0265.826] CloseHandle (hObject=0x198) returned 1 [0265.827] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0265.827] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105496.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105496.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1424)) returned 1 [0265.827] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0265.827] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0265.827] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105496.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105496.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1424)) returned 1 [0265.828] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0265.828] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0265.828] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0265.828] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1560, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0105502.WMF", cAlternateFileName="")) returned 1 [0265.828] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0265.828] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0265.828] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0265.828] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0265.829] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0265.829] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0265.829] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105502.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105502.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0265.830] GetFileType (hFile=0x198) returned 0x1 [0265.830] CloseHandle (hObject=0x198) returned 1 [0265.830] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0265.830] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105502.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105502.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1560)) returned 1 [0265.831] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0265.831] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0265.831] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105502.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105502.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1560)) returned 1 [0265.831] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0265.831] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0265.831] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0265.831] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1034, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0105504.WMF", cAlternateFileName="")) returned 1 [0265.831] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0265.832] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0265.832] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0265.832] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0265.832] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0265.833] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0265.833] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105504.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105504.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0265.833] GetFileType (hFile=0x198) returned 0x1 [0265.834] CloseHandle (hObject=0x198) returned 1 [0265.834] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0265.834] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105504.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105504.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1034)) returned 1 [0265.835] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0265.835] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0265.835] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105504.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105504.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1034)) returned 1 [0265.835] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0265.835] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0265.835] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0265.835] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb60, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0105506.WMF", cAlternateFileName="")) returned 1 [0265.835] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0265.835] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0265.835] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0265.835] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0265.836] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0265.836] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0265.836] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105506.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105506.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0265.836] GetFileType (hFile=0x198) returned 0x1 [0265.837] CloseHandle (hObject=0x198) returned 1 [0265.837] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0265.837] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105506.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105506.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb60)) returned 1 [0265.837] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0265.837] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0265.838] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105506.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105506.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb60)) returned 1 [0265.838] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0265.838] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0265.838] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0265.838] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7c44, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0105520.WMF", cAlternateFileName="")) returned 1 [0265.838] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0265.838] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0265.838] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0265.839] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0265.839] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0265.839] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0265.839] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105520.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105520.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0265.840] GetFileType (hFile=0x198) returned 0x1 [0265.840] CloseHandle (hObject=0x198) returned 1 [0265.841] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0265.841] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105520.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105520.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7c44)) returned 1 [0265.841] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0265.841] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0265.841] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105520.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105520.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7c44)) returned 1 [0265.841] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0265.842] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0265.842] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0265.842] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43b4, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0105526.WMF", cAlternateFileName="")) returned 1 [0265.842] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0265.842] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0265.842] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0265.842] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0265.842] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0265.843] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0265.843] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105526.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105526.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0265.844] GetFileType (hFile=0x198) returned 0x1 [0265.844] CloseHandle (hObject=0x198) returned 1 [0265.844] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0265.845] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105526.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105526.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43b4)) returned 1 [0265.845] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0265.845] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0265.845] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105526.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105526.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43b4)) returned 1 [0265.845] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0265.845] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0265.845] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0265.846] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1cd8, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0105530.WMF", cAlternateFileName="")) returned 1 [0265.846] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0265.846] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0265.846] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0265.846] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0265.846] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0265.846] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0265.847] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105530.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105530.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0265.999] GetFileType (hFile=0x198) returned 0x1 [0266.000] CloseHandle (hObject=0x198) returned 1 [0266.000] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0266.000] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105530.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105530.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1cd8)) returned 1 [0266.000] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0266.000] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0266.001] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105530.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105530.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1cd8)) returned 1 [0266.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0266.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0266.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0266.001] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x542c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0105588.WMF", cAlternateFileName="")) returned 1 [0266.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0266.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0266.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0266.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0266.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0266.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0266.035] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105588.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105588.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0266.036] GetFileType (hFile=0x198) returned 0x1 [0266.036] CloseHandle (hObject=0x198) returned 1 [0266.037] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0266.037] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105588.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105588.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x542c)) returned 1 [0266.037] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0266.037] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0266.037] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105588.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105588.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x542c)) returned 1 [0266.038] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0266.038] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0266.038] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0266.038] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21e8, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0105600.WMF", cAlternateFileName="")) returned 1 [0266.038] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0266.038] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0266.038] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0266.039] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0266.039] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0266.039] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0266.040] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105600.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105600.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0266.040] GetFileType (hFile=0x198) returned 0x1 [0266.040] CloseHandle (hObject=0x198) returned 1 [0266.041] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0266.041] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105600.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105600.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21e8)) returned 1 [0266.041] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0266.041] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0266.041] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105600.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105600.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21e8)) returned 1 [0266.042] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0266.042] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0266.042] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0266.042] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x287c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0105638.WMF", cAlternateFileName="")) returned 1 [0266.042] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0266.042] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0266.042] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0266.042] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0266.042] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0266.043] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0266.043] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105638.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105638.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0266.043] GetFileType (hFile=0x198) returned 0x1 [0266.044] CloseHandle (hObject=0x198) returned 1 [0266.044] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0266.044] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105638.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105638.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x287c)) returned 1 [0266.045] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0266.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0266.045] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105638.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105638.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x287c)) returned 1 [0266.045] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0266.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0266.045] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0266.045] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x35f0, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0105710.WMF", cAlternateFileName="")) returned 1 [0266.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0266.046] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0266.046] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0266.046] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0266.046] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0266.046] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0266.046] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105710.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105710.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0266.047] GetFileType (hFile=0x198) returned 0x1 [0266.047] CloseHandle (hObject=0x198) returned 1 [0266.047] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0266.047] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105710.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105710.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x35f0)) returned 1 [0266.048] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0266.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0266.048] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105710.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105710.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x35f0)) returned 1 [0266.048] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0266.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0266.048] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0266.048] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2030, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0105846.WMF", cAlternateFileName="")) returned 1 [0266.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0266.049] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0266.049] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0266.049] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0266.049] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0266.049] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0266.050] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105846.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105846.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0266.050] GetFileType (hFile=0x198) returned 0x1 [0266.051] CloseHandle (hObject=0x198) returned 1 [0266.051] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0266.052] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105846.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105846.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2030)) returned 1 [0266.052] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0266.052] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0266.052] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105846.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105846.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2030)) returned 1 [0266.052] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0266.052] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0266.052] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0266.052] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2dc8, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0105912.WMF", cAlternateFileName="")) returned 1 [0266.052] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0266.052] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0266.052] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0266.053] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0266.053] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0266.053] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0266.053] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105912.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105912.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0266.053] GetFileType (hFile=0x198) returned 0x1 [0266.054] CloseHandle (hObject=0x198) returned 1 [0266.054] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0266.054] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105912.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105912.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2dc8)) returned 1 [0266.054] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0266.054] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0266.054] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105912.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105912.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2dc8)) returned 1 [0266.054] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0266.054] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0266.054] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0266.054] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1204, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0105974.WMF", cAlternateFileName="")) returned 1 [0266.055] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0266.055] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0266.055] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0266.055] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0266.055] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0266.055] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0266.055] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105974.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105974.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0266.056] GetFileType (hFile=0x198) returned 0x1 [0266.056] CloseHandle (hObject=0x198) returned 1 [0266.056] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0266.056] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105974.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105974.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1204)) returned 1 [0266.056] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0266.056] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0266.057] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105974.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105974.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1204)) returned 1 [0266.057] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0266.057] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0266.057] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0266.057] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x274c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0106020.WMF", cAlternateFileName="")) returned 1 [0266.057] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0266.057] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0266.057] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0266.057] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0266.057] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0266.057] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0266.058] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106020.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106020.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0266.058] GetFileType (hFile=0x198) returned 0x1 [0266.058] CloseHandle (hObject=0x198) returned 1 [0266.058] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0266.058] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106020.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106020.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x274c)) returned 1 [0266.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0266.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0266.059] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106020.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106020.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x274c)) returned 1 [0266.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0266.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0266.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0266.059] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16b4, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0106124.WMF", cAlternateFileName="")) returned 1 [0266.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0266.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0266.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0266.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0266.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0266.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0266.060] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106124.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106124.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0266.061] GetFileType (hFile=0x198) returned 0x1 [0266.061] CloseHandle (hObject=0x198) returned 1 [0266.061] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0266.061] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106124.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106124.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16b4)) returned 1 [0266.062] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0266.062] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0266.062] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106124.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106124.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16b4)) returned 1 [0266.062] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0266.062] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0266.062] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0266.062] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5bfc, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0106146.WMF", cAlternateFileName="")) returned 1 [0266.062] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0266.062] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0266.062] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0266.062] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0266.062] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0266.063] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0266.063] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106146.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106146.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0266.064] GetFileType (hFile=0x198) returned 0x1 [0266.064] CloseHandle (hObject=0x198) returned 1 [0266.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0266.064] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106146.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106146.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5bfc)) returned 1 [0266.064] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0266.065] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0266.065] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106146.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106146.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5bfc)) returned 1 [0266.065] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0266.065] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0266.065] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0266.065] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e7c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0106208.WMF", cAlternateFileName="")) returned 1 [0266.065] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0266.065] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0266.065] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0266.065] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0266.065] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0266.065] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0266.066] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106208.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106208.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0266.068] GetFileType (hFile=0x198) returned 0x1 [0266.069] CloseHandle (hObject=0x198) returned 1 [0266.069] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0266.069] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106208.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106208.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e7c)) returned 1 [0266.069] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0266.069] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0266.069] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106208.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106208.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e7c)) returned 1 [0266.070] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0266.070] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0266.070] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0266.070] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c90, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0106222.WMF", cAlternateFileName="")) returned 1 [0266.265] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0266.265] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0266.265] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0266.265] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0266.265] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0266.265] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0266.384] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106222.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106222.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0266.384] GetFileType (hFile=0x1c0) returned 0x1 [0266.385] CloseHandle (hObject=0x1c0) returned 1 [0266.385] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0266.386] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106222.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106222.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c90)) returned 1 [0266.386] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0266.386] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0266.386] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106222.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106222.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c90)) returned 1 [0266.387] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0266.387] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0266.387] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0266.387] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x864, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0106572.WMF", cAlternateFileName="")) returned 1 [0266.387] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0266.388] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0266.388] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0266.388] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0266.388] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0266.388] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0266.389] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106572.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106572.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0266.427] GetFileType (hFile=0x1c0) returned 0x1 [0266.427] CloseHandle (hObject=0x1c0) returned 1 [0266.428] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0266.428] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106572.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106572.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x864)) returned 1 [0266.428] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0266.428] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0266.428] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106572.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106572.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x864)) returned 1 [0266.429] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0266.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0266.429] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0266.429] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd04, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0106816.WMF", cAlternateFileName="")) returned 1 [0266.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0266.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0266.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0266.429] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0266.429] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0266.430] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0266.430] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106816.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106816.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0266.431] GetFileType (hFile=0x1c0) returned 0x1 [0266.431] CloseHandle (hObject=0x1c0) returned 1 [0266.432] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0266.432] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106816.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106816.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd04)) returned 1 [0266.432] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0266.432] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0266.432] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106816.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106816.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd04)) returned 1 [0266.432] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0266.432] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0266.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0266.433] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x35d8, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0106958.WMF", cAlternateFileName="")) returned 1 [0266.433] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0266.433] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0266.433] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0266.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0266.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0266.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0266.434] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106958.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106958.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0266.434] GetFileType (hFile=0x1c0) returned 0x1 [0266.435] CloseHandle (hObject=0x1c0) returned 1 [0266.435] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0266.435] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106958.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106958.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x35d8)) returned 1 [0266.435] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0266.435] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0266.435] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106958.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106958.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x35d8)) returned 1 [0266.435] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0266.435] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0266.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0266.436] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbcc, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0107024.WMF", cAlternateFileName="")) returned 1 [0266.436] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0266.436] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0266.436] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0266.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0266.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0266.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0266.437] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107024.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107024.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0266.438] GetFileType (hFile=0x1c0) returned 0x1 [0266.439] CloseHandle (hObject=0x1c0) returned 1 [0266.444] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0266.444] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107024.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107024.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbcc)) returned 1 [0266.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0266.444] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0266.444] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107024.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107024.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbcc)) returned 1 [0266.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0266.445] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0266.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0266.445] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1dd0, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0107026.WMF", cAlternateFileName="")) returned 1 [0266.445] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0266.445] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0266.445] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0266.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0266.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0266.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0266.446] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107026.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107026.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0266.447] GetFileType (hFile=0x1c0) returned 0x1 [0266.447] CloseHandle (hObject=0x1c0) returned 1 [0266.448] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0266.448] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107026.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107026.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1dd0)) returned 1 [0266.448] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0266.448] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0266.448] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107026.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107026.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1dd0)) returned 1 [0266.448] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0266.449] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0266.449] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0266.449] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2358, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0107042.WMF", cAlternateFileName="")) returned 1 [0266.449] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0266.449] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0266.449] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0266.449] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0266.449] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0266.449] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0266.450] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107042.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107042.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0266.451] GetFileType (hFile=0x1c0) returned 0x1 [0266.451] CloseHandle (hObject=0x1c0) returned 1 [0266.452] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0266.452] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107042.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107042.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2358)) returned 1 [0266.452] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0266.452] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0266.452] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107042.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107042.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2358)) returned 1 [0266.452] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0266.452] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0266.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0266.453] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3734, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0107090.WMF", cAlternateFileName="")) returned 1 [0266.453] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0266.453] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0266.453] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0266.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0266.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0266.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0266.454] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107090.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107090.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0266.455] GetFileType (hFile=0x1c0) returned 0x1 [0266.455] CloseHandle (hObject=0x1c0) returned 1 [0266.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0266.456] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107090.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107090.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3734)) returned 1 [0266.456] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0266.456] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0266.456] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107090.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107090.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3734)) returned 1 [0266.456] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0266.456] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0266.456] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0266.456] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x69cc, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0107130.WMF", cAlternateFileName="")) returned 1 [0266.456] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0266.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0266.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0266.457] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0266.457] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0266.457] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0266.458] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107130.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107130.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0266.458] GetFileType (hFile=0x1c0) returned 0x1 [0266.459] CloseHandle (hObject=0x1c0) returned 1 [0266.459] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0266.459] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107130.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107130.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x69cc)) returned 1 [0266.460] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0266.460] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0266.460] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107130.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107130.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x69cc)) returned 1 [0266.460] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0266.460] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0266.460] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0266.460] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbcfc, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0107132.WMF", cAlternateFileName="")) returned 1 [0266.460] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0266.460] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0266.461] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0266.461] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0266.461] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0266.461] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0266.461] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107132.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107132.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0266.463] GetFileType (hFile=0x1c0) returned 0x1 [0266.463] CloseHandle (hObject=0x1c0) returned 1 [0266.463] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0266.464] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107132.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107132.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbcfc)) returned 1 [0266.464] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0266.464] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0266.464] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107132.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107132.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbcfc)) returned 1 [0266.464] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0266.464] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0266.464] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0266.464] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbd04, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0107134.WMF", cAlternateFileName="")) returned 1 [0266.464] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0266.465] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0266.465] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0266.465] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0266.465] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0266.465] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0266.466] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107134.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107134.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0266.466] GetFileType (hFile=0x1c0) returned 0x1 [0266.467] CloseHandle (hObject=0x1c0) returned 1 [0266.467] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0266.467] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107134.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107134.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbd04)) returned 1 [0266.468] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0266.468] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0266.468] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107134.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107134.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbd04)) returned 1 [0266.468] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0266.468] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0266.468] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0266.468] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4330, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0107138.WMF", cAlternateFileName="")) returned 1 [0266.469] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0266.469] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0266.469] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0266.469] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0266.469] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0266.469] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0266.470] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107138.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107138.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0266.471] GetFileType (hFile=0x1c0) returned 0x1 [0266.471] CloseHandle (hObject=0x1c0) returned 1 [0266.472] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0266.472] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107138.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107138.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4330)) returned 1 [0266.472] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0266.741] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0266.742] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107138.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107138.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4330)) returned 1 [0266.742] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0266.742] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0266.742] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0266.742] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a94, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0107146.WMF", cAlternateFileName="")) returned 1 [0266.742] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0266.742] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0266.743] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0266.743] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0266.743] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0266.743] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0266.744] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107146.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107146.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0266.744] GetFileType (hFile=0x174) returned 0x1 [0266.744] CloseHandle (hObject=0x174) returned 1 [0266.745] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0266.745] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107146.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107146.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a94)) returned 1 [0266.745] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0266.745] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0266.746] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107146.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107146.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a94)) returned 1 [0266.746] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0266.746] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0266.746] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0266.746] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ea8, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0107148.WMF", cAlternateFileName="")) returned 1 [0266.746] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0266.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0266.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0266.747] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0266.747] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0266.747] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0266.748] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107148.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107148.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0267.114] GetFileType (hFile=0x174) returned 0x1 [0267.115] CloseHandle (hObject=0x174) returned 1 [0267.115] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0267.115] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107148.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107148.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ea8)) returned 1 [0267.115] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0267.115] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0267.116] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107148.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107148.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ea8)) returned 1 [0267.116] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0267.116] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0267.116] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0267.116] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3490, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0107150.WMF", cAlternateFileName="")) returned 1 [0267.116] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0267.116] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0267.116] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0267.117] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0267.117] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0267.117] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0267.118] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107150.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107150.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0267.118] GetFileType (hFile=0x174) returned 0x1 [0267.118] CloseHandle (hObject=0x174) returned 1 [0267.120] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0267.120] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107150.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107150.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3490)) returned 1 [0267.120] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0267.120] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0267.120] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107150.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107150.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3490)) returned 1 [0267.120] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0267.120] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0267.120] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0267.121] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5804, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0107152.WMF", cAlternateFileName="")) returned 1 [0267.121] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0267.121] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0267.121] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0267.121] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0267.121] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0267.121] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0267.121] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107152.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107152.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0267.122] GetFileType (hFile=0x174) returned 0x1 [0267.122] CloseHandle (hObject=0x174) returned 1 [0267.123] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0267.123] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107152.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107152.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5804)) returned 1 [0267.123] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0267.124] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0267.124] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107152.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107152.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5804)) returned 1 [0267.124] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0267.124] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0267.124] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0267.124] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x571c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0107154.WMF", cAlternateFileName="")) returned 1 [0267.124] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0267.124] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0267.125] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0267.125] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0267.125] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0267.125] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0267.126] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107154.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107154.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0267.126] GetFileType (hFile=0x174) returned 0x1 [0267.127] CloseHandle (hObject=0x174) returned 1 [0267.127] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0267.127] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107154.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107154.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x571c)) returned 1 [0267.127] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0267.128] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0267.128] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107154.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107154.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x571c)) returned 1 [0267.128] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0267.128] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0267.128] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0267.129] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x614c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0107158.WMF", cAlternateFileName="")) returned 1 [0267.129] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0267.129] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0267.129] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0267.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0267.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0267.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0267.130] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107158.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107158.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0267.130] GetFileType (hFile=0x174) returned 0x1 [0267.131] CloseHandle (hObject=0x174) returned 1 [0267.131] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0267.131] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107158.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107158.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x614c)) returned 1 [0267.132] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0267.132] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0267.132] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107158.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107158.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x614c)) returned 1 [0267.132] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0267.132] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0267.132] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0267.132] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ee4, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0107182.WMF", cAlternateFileName="")) returned 1 [0267.132] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0267.133] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0267.133] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0267.133] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0267.133] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0267.133] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0267.134] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107182.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107182.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0267.134] GetFileType (hFile=0x174) returned 0x1 [0267.135] CloseHandle (hObject=0x174) returned 1 [0267.135] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0267.135] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107182.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107182.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ee4)) returned 1 [0267.136] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0267.136] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0267.136] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107182.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107182.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ee4)) returned 1 [0267.136] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0267.136] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0267.136] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0267.136] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11b8, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0107188.WMF", cAlternateFileName="")) returned 1 [0267.136] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0267.137] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0267.137] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0267.137] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0267.137] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0267.137] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0267.138] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107188.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107188.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0267.138] GetFileType (hFile=0x174) returned 0x1 [0267.139] CloseHandle (hObject=0x174) returned 1 [0267.139] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0267.139] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107188.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107188.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11b8)) returned 1 [0267.139] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0267.140] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0267.140] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107188.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107188.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11b8)) returned 1 [0267.140] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0267.140] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0267.140] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0267.140] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x26f0, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0107192.WMF", cAlternateFileName="")) returned 1 [0267.141] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0267.141] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0267.141] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0267.141] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0267.141] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0267.141] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0267.142] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107192.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107192.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0267.143] GetFileType (hFile=0x174) returned 0x1 [0267.143] CloseHandle (hObject=0x174) returned 1 [0267.144] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0267.144] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107192.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107192.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x26f0)) returned 1 [0267.144] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0267.396] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0267.396] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107192.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107192.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x26f0)) returned 1 [0267.396] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0267.396] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0267.396] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0267.396] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ef4, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0107254.WMF", cAlternateFileName="")) returned 1 [0267.396] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0267.397] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0267.397] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0267.397] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0267.397] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0267.397] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0267.398] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107254.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107254.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0267.536] GetFileType (hFile=0x19c) returned 0x1 [0267.537] CloseHandle (hObject=0x19c) returned 1 [0267.537] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0267.537] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107254.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107254.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ef4)) returned 1 [0267.538] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0267.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0267.538] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107254.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107254.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ef4)) returned 1 [0267.538] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0267.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0267.538] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0267.539] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2168, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0107258.WMF", cAlternateFileName="")) returned 1 [0267.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0267.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0267.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0267.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0267.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0267.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0267.540] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107258.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107258.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0267.541] GetFileType (hFile=0x19c) returned 0x1 [0267.542] CloseHandle (hObject=0x19c) returned 1 [0267.542] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0267.542] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107258.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107258.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2168)) returned 1 [0267.543] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0267.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0267.543] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107258.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107258.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2168)) returned 1 [0267.543] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0267.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0267.543] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0267.544] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f3c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0107262.WMF", cAlternateFileName="")) returned 1 [0267.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0267.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0267.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0267.544] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0267.544] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0267.545] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0267.545] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107262.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107262.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0267.546] GetFileType (hFile=0x19c) returned 0x1 [0267.547] CloseHandle (hObject=0x19c) returned 1 [0267.547] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0267.547] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107262.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107262.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f3c)) returned 1 [0267.548] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0267.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0267.548] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107262.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107262.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f3c)) returned 1 [0267.548] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0267.548] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0267.549] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0267.549] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1498, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0107264.WMF", cAlternateFileName="")) returned 1 [0267.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0267.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0267.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0267.550] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0267.550] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0267.550] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0267.551] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107264.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107264.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0267.552] GetFileType (hFile=0x19c) returned 0x1 [0267.553] CloseHandle (hObject=0x19c) returned 1 [0267.553] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0267.553] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107264.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107264.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1498)) returned 1 [0267.554] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0267.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0267.554] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107264.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107264.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1498)) returned 1 [0267.554] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0267.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0267.554] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0267.554] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16ec, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0107266.WMF", cAlternateFileName="")) returned 1 [0267.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0267.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0267.555] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0267.555] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0267.555] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0267.555] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0267.555] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107266.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107266.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0267.556] GetFileType (hFile=0x19c) returned 0x1 [0267.556] CloseHandle (hObject=0x19c) returned 1 [0267.557] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0267.557] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107266.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107266.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16ec)) returned 1 [0267.557] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0267.557] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0267.557] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107266.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107266.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16ec)) returned 1 [0267.557] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0267.558] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0267.558] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0267.558] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b64, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0107280.WMF", cAlternateFileName="")) returned 1 [0267.558] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0267.558] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0267.558] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0267.558] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0267.558] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0267.558] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0267.559] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107280.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107280.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0267.560] GetFileType (hFile=0x19c) returned 0x1 [0267.560] CloseHandle (hObject=0x19c) returned 1 [0267.561] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0267.561] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107280.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107280.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b64)) returned 1 [0267.561] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0267.561] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0267.561] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107280.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107280.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b64)) returned 1 [0267.562] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0267.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0267.562] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0267.562] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3734, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0107282.WMF", cAlternateFileName="")) returned 1 [0267.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0267.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0267.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0267.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0267.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0267.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0267.564] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107282.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107282.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0267.564] GetFileType (hFile=0x19c) returned 0x1 [0267.565] CloseHandle (hObject=0x19c) returned 1 [0267.565] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0267.566] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107282.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107282.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3734)) returned 1 [0267.566] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0267.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0267.567] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107282.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107282.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3734)) returned 1 [0267.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0267.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0267.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0267.567] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x347c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0107288.WMF", cAlternateFileName="")) returned 1 [0267.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0267.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0267.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0267.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0267.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0267.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0267.569] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107288.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107288.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0267.570] GetFileType (hFile=0x19c) returned 0x1 [0267.570] CloseHandle (hObject=0x19c) returned 1 [0267.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0267.571] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107288.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107288.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x347c)) returned 1 [0267.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0267.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0267.571] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107288.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107288.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x347c)) returned 1 [0267.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0267.572] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0267.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0267.572] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3014, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0107290.WMF", cAlternateFileName="")) returned 1 [0267.572] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0267.572] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0267.572] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0267.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0267.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0267.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0267.573] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107290.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107290.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0267.575] GetFileType (hFile=0x19c) returned 0x1 [0267.575] CloseHandle (hObject=0x19c) returned 1 [0267.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0267.576] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107290.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107290.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3014)) returned 1 [0267.576] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0267.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0267.576] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107290.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107290.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3014)) returned 1 [0267.576] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0267.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0267.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0267.577] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x99c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0107300.WMF", cAlternateFileName="")) returned 1 [0267.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0267.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0267.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0267.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0267.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0267.578] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0267.578] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107300.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107300.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0267.579] GetFileType (hFile=0x19c) returned 0x1 [0267.579] CloseHandle (hObject=0x19c) returned 1 [0267.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0267.580] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107300.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107300.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x99c)) returned 1 [0267.580] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0267.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0267.580] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107300.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107300.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x99c)) returned 1 [0267.581] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0267.581] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0267.581] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0267.581] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1028, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0107302.WMF", cAlternateFileName="")) returned 1 [0267.581] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0267.581] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0267.581] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0267.581] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0267.581] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0267.880] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0268.142] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107302.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107302.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0268.142] GetFileType (hFile=0x19c) returned 0x1 [0268.143] CloseHandle (hObject=0x19c) returned 1 [0268.143] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0268.144] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107302.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107302.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1028)) returned 1 [0268.144] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0268.144] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0268.144] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107302.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107302.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1028)) returned 1 [0268.144] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0268.144] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0268.144] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0268.145] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3e10, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0107308.WMF", cAlternateFileName="")) returned 1 [0268.145] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0268.145] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0268.145] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0268.145] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0268.145] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0268.145] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0268.146] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107308.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107308.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0268.146] GetFileType (hFile=0x19c) returned 0x1 [0268.147] CloseHandle (hObject=0x19c) returned 1 [0268.147] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0268.148] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107308.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107308.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3e10)) returned 1 [0268.148] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0268.148] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0268.148] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107308.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107308.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3e10)) returned 1 [0268.148] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0268.149] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0268.149] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0268.149] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a64, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0107314.WMF", cAlternateFileName="")) returned 1 [0268.150] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0268.150] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0268.150] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0268.150] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0268.150] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0268.150] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0268.151] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107314.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107314.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0268.151] GetFileType (hFile=0x19c) returned 0x1 [0268.152] CloseHandle (hObject=0x19c) returned 1 [0268.152] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0268.152] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107314.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107314.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a64)) returned 1 [0268.153] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0268.153] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0268.153] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107314.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107314.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a64)) returned 1 [0268.153] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0268.153] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0268.153] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0268.153] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c18, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0107316.WMF", cAlternateFileName="")) returned 1 [0268.154] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0268.154] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0268.154] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0268.154] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0268.154] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0268.154] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0268.155] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107316.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107316.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0268.156] GetFileType (hFile=0x19c) returned 0x1 [0268.156] CloseHandle (hObject=0x19c) returned 1 [0268.156] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0268.157] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107316.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107316.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c18)) returned 1 [0268.157] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0268.157] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0268.157] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107316.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107316.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c18)) returned 1 [0268.157] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0268.157] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0268.158] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0268.158] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1984, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0107328.WMF", cAlternateFileName="")) returned 1 [0268.158] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0268.158] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0268.158] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0268.158] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0268.158] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0268.159] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0268.159] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107328.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107328.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0268.160] GetFileType (hFile=0x19c) returned 0x1 [0268.160] CloseHandle (hObject=0x19c) returned 1 [0268.161] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0268.161] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107328.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107328.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1984)) returned 1 [0268.161] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0268.161] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0268.161] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107328.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107328.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1984)) returned 1 [0268.162] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0268.162] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0268.162] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0268.162] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1094, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0107342.WMF", cAlternateFileName="")) returned 1 [0268.162] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0268.162] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0268.162] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0268.163] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0268.163] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0268.163] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0268.164] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107342.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107342.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0268.164] GetFileType (hFile=0x19c) returned 0x1 [0268.165] CloseHandle (hObject=0x19c) returned 1 [0268.166] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0268.166] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107342.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107342.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1094)) returned 1 [0268.166] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0268.167] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0268.167] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107342.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107342.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1094)) returned 1 [0268.167] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0268.167] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0268.167] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0268.167] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13d4, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0107344.WMF", cAlternateFileName="")) returned 1 [0268.167] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0268.168] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0268.168] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0268.168] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0268.168] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0268.168] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0268.169] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107344.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107344.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0268.169] GetFileType (hFile=0x19c) returned 0x1 [0268.170] CloseHandle (hObject=0x19c) returned 1 [0268.171] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0268.171] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107344.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107344.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13d4)) returned 1 [0268.171] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0268.171] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0268.171] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107344.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107344.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13d4)) returned 1 [0268.171] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0268.172] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0268.172] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0268.172] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5c78, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0107350.WMF", cAlternateFileName="")) returned 1 [0268.172] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0268.172] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0268.172] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0268.172] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0268.173] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0268.173] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0268.173] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107350.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107350.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0268.174] GetFileType (hFile=0x19c) returned 0x1 [0268.174] CloseHandle (hObject=0x19c) returned 1 [0268.175] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0268.175] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107350.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107350.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5c78)) returned 1 [0268.175] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0268.175] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0268.176] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107350.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107350.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5c78)) returned 1 [0268.176] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0268.176] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0268.176] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0268.176] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f1c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0107358.WMF", cAlternateFileName="")) returned 1 [0268.176] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0268.177] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0268.177] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0268.177] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0268.177] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0268.177] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0268.178] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107358.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107358.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0268.178] GetFileType (hFile=0x19c) returned 0x1 [0268.179] CloseHandle (hObject=0x19c) returned 1 [0268.180] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0268.471] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107358.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107358.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f1c)) returned 1 [0268.472] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0268.472] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0268.472] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107358.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107358.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f1c)) returned 1 [0268.472] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0268.472] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0268.472] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0268.472] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x40cc, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0107364.WMF", cAlternateFileName="")) returned 1 [0268.473] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0268.473] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0268.473] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0268.473] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0268.473] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0268.473] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0268.773] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107364.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107364.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0268.774] GetFileType (hFile=0x198) returned 0x1 [0268.775] CloseHandle (hObject=0x198) returned 1 [0268.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0268.775] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107364.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107364.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x40cc)) returned 1 [0268.776] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0268.776] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0268.776] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107364.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107364.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x40cc)) returned 1 [0268.776] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0268.776] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0268.776] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0268.776] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ce4, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0107426.WMF", cAlternateFileName="")) returned 1 [0268.777] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0268.777] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0268.777] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0268.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0268.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0268.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0268.778] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107426.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107426.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0268.779] GetFileType (hFile=0x198) returned 0x1 [0268.779] CloseHandle (hObject=0x198) returned 1 [0268.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0268.780] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107426.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107426.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ce4)) returned 1 [0268.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0268.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0268.780] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107426.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107426.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ce4)) returned 1 [0268.781] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0268.781] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0268.781] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0268.781] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7680, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0107446.WMF", cAlternateFileName="")) returned 1 [0268.781] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0268.781] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0268.781] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0268.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0268.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0268.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0268.783] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107446.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107446.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0268.783] GetFileType (hFile=0x198) returned 0x1 [0268.784] CloseHandle (hObject=0x198) returned 1 [0268.784] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0268.785] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107446.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107446.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7680)) returned 1 [0268.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0268.785] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0268.785] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107446.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107446.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7680)) returned 1 [0268.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0268.785] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0268.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0268.786] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1338, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0107450.WMF", cAlternateFileName="")) returned 1 [0268.786] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0268.786] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0268.786] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0268.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0268.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0268.787] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0268.787] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107450.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107450.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0268.788] GetFileType (hFile=0x198) returned 0x1 [0268.788] CloseHandle (hObject=0x198) returned 1 [0268.789] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0268.789] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107450.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107450.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1338)) returned 1 [0268.789] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0268.790] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0268.790] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107450.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107450.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1338)) returned 1 [0268.790] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0268.790] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0268.790] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0268.790] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x52e0, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0107452.WMF", cAlternateFileName="")) returned 1 [0268.790] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0268.791] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0268.791] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0268.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0268.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0268.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0268.792] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107452.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107452.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0268.792] GetFileType (hFile=0x198) returned 0x1 [0268.793] CloseHandle (hObject=0x198) returned 1 [0268.793] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0268.793] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107452.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107452.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x52e0)) returned 1 [0268.794] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0268.794] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0268.794] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107452.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107452.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x52e0)) returned 1 [0268.794] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0268.794] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0268.794] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0268.795] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe8c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0107456.WMF", cAlternateFileName="")) returned 1 [0268.795] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0268.795] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0268.795] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0268.795] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0268.795] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0268.795] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0268.796] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107456.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107456.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0268.796] GetFileType (hFile=0x198) returned 0x1 [0268.797] CloseHandle (hObject=0x198) returned 1 [0268.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0268.798] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107456.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107456.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe8c)) returned 1 [0268.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0268.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0268.798] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107456.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107456.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe8c)) returned 1 [0268.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0268.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0268.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0268.799] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdf0, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0107458.WMF", cAlternateFileName="")) returned 1 [0268.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0268.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0268.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0268.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0268.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0268.800] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0268.800] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107458.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107458.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0268.801] GetFileType (hFile=0x198) returned 0x1 [0268.801] CloseHandle (hObject=0x198) returned 1 [0268.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0268.802] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107458.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107458.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdf0)) returned 1 [0268.802] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0268.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0268.802] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107458.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107458.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdf0)) returned 1 [0268.802] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0268.803] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0268.803] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0268.803] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x258c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0107468.WMF", cAlternateFileName="")) returned 1 [0268.803] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0268.803] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0268.803] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0268.803] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0268.803] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0268.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0268.804] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107468.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107468.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0268.805] GetFileType (hFile=0x198) returned 0x1 [0268.806] CloseHandle (hObject=0x198) returned 1 [0268.808] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0268.808] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107468.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107468.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x258c)) returned 1 [0268.808] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0268.809] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0268.809] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107468.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107468.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x258c)) returned 1 [0268.809] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0268.809] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0268.809] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0268.809] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1788, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0107480.WMF", cAlternateFileName="")) returned 1 [0268.809] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0268.810] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0268.810] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0268.810] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0268.810] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0268.810] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0268.811] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107480.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107480.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0268.812] GetFileType (hFile=0x198) returned 0x1 [0268.813] CloseHandle (hObject=0x198) returned 1 [0268.813] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0268.813] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107480.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107480.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1788)) returned 1 [0268.813] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0268.814] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0268.814] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107480.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107480.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1788)) returned 1 [0268.814] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0268.814] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0268.814] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0268.814] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe736331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe736331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1374, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0107482.WMF", cAlternateFileName="")) returned 1 [0268.815] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0268.815] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0268.815] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0268.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0268.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0268.815] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0268.816] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107482.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107482.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0268.988] GetFileType (hFile=0x174) returned 0x1 [0268.989] CloseHandle (hObject=0x174) returned 1 [0268.989] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0268.989] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107482.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107482.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe736331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe736331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1374)) returned 1 [0268.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0268.990] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0268.990] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107482.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107482.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe736331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe736331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1374)) returned 1 [0268.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0268.990] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0268.990] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0268.990] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbe0, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0107484.WMF", cAlternateFileName="")) returned 1 [0268.991] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0268.991] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0268.991] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0268.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0268.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0268.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0268.992] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107484.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107484.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0268.993] GetFileType (hFile=0x174) returned 0x1 [0268.993] CloseHandle (hObject=0x174) returned 1 [0268.994] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0268.994] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107484.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107484.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbe0)) returned 1 [0268.994] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0268.994] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0268.994] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107484.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107484.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbe0)) returned 1 [0268.994] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0268.995] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0268.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0268.995] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f40, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0107488.WMF", cAlternateFileName="")) returned 1 [0268.995] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0268.995] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0268.995] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0268.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0268.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0268.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0268.996] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107488.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107488.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0268.997] GetFileType (hFile=0x174) returned 0x1 [0268.997] CloseHandle (hObject=0x174) returned 1 [0268.998] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0268.998] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107488.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107488.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f40)) returned 1 [0268.998] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0268.998] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0268.998] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107488.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107488.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f40)) returned 1 [0268.999] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0268.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0268.999] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0268.999] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4054, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0107490.WMF", cAlternateFileName="")) returned 1 [0268.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0268.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0268.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0268.999] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0269.000] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0269.000] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0269.000] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107490.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107490.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0269.001] GetFileType (hFile=0x174) returned 0x1 [0269.001] CloseHandle (hObject=0x174) returned 1 [0269.002] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0269.002] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107490.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107490.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4054)) returned 1 [0269.002] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0269.002] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0269.002] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107490.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107490.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4054)) returned 1 [0269.002] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0269.003] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0269.003] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0269.003] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1acc, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0107492.WMF", cAlternateFileName="")) returned 1 [0269.003] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0269.003] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0269.003] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0269.003] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0269.004] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0269.004] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0269.004] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107492.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107492.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0269.005] GetFileType (hFile=0x174) returned 0x1 [0269.005] CloseHandle (hObject=0x174) returned 1 [0269.006] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0269.006] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107492.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107492.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1acc)) returned 1 [0269.006] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0269.006] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0269.006] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107492.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107492.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1acc)) returned 1 [0269.006] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0269.006] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0269.007] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0269.007] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1918, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0107494.WMF", cAlternateFileName="")) returned 1 [0269.007] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0269.007] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0269.007] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0269.007] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0269.007] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0269.007] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0269.009] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107494.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107494.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0269.009] GetFileType (hFile=0x174) returned 0x1 [0269.009] CloseHandle (hObject=0x174) returned 1 [0269.010] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0269.010] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107494.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107494.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1918)) returned 1 [0269.010] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0269.010] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0269.010] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107494.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107494.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1918)) returned 1 [0269.011] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0269.011] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0269.011] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0269.011] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x22a0, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0107496.WMF", cAlternateFileName="")) returned 1 [0269.011] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0269.011] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0269.011] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0269.011] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0269.012] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0269.012] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0269.012] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107496.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107496.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0269.013] GetFileType (hFile=0x174) returned 0x1 [0269.013] CloseHandle (hObject=0x174) returned 1 [0269.014] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0269.014] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107496.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107496.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x22a0)) returned 1 [0269.014] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0269.014] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0269.014] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107496.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107496.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x22a0)) returned 1 [0269.015] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0269.015] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0269.015] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0269.015] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1068, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0107500.WMF", cAlternateFileName="")) returned 1 [0269.015] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0269.015] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0269.015] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0269.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0269.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0269.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0269.017] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107500.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107500.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0269.017] GetFileType (hFile=0x174) returned 0x1 [0269.018] CloseHandle (hObject=0x174) returned 1 [0269.018] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0269.018] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107500.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107500.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1068)) returned 1 [0269.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0269.019] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0269.019] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107500.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107500.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1068)) returned 1 [0269.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0269.019] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0269.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0269.019] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a54, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0107502.WMF", cAlternateFileName="")) returned 1 [0269.020] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0269.020] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0269.020] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0269.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0269.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0269.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0269.021] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107502.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107502.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0269.021] GetFileType (hFile=0x174) returned 0x1 [0269.022] CloseHandle (hObject=0x174) returned 1 [0269.022] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0269.022] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107502.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107502.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a54)) returned 1 [0269.022] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0269.022] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0269.022] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107502.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107502.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a54)) returned 1 [0269.023] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0269.023] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0269.023] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0269.023] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c8c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0107512.WMF", cAlternateFileName="")) returned 1 [0269.023] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0269.023] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0269.023] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0269.023] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0269.023] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0269.503] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0269.503] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107512.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107512.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0269.504] GetFileType (hFile=0x1e8) returned 0x1 [0269.504] CloseHandle (hObject=0x1e8) returned 1 [0269.505] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0269.505] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107512.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107512.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c8c)) returned 1 [0269.505] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0269.505] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0269.505] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107512.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107512.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c8c)) returned 1 [0269.506] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0269.506] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0269.506] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0269.506] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe78281d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe78281d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2fac, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0107514.WMF", cAlternateFileName="")) returned 1 [0269.506] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0269.506] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0269.506] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0269.506] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0269.507] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0269.507] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0269.507] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107514.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107514.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0269.508] GetFileType (hFile=0x1e8) returned 0x1 [0269.509] CloseHandle (hObject=0x1e8) returned 1 [0269.509] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0269.509] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107514.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107514.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe78281d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe78281d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2fac)) returned 1 [0269.509] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0269.509] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0269.510] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107514.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107514.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe78281d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe78281d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2fac)) returned 1 [0269.510] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0269.510] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0269.510] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0269.510] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe78281d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe78281d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x36b8, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0107516.WMF", cAlternateFileName="")) returned 1 [0269.510] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0269.510] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0269.510] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0269.511] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0269.511] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0269.511] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0269.512] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107516.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107516.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0269.512] GetFileType (hFile=0x1e8) returned 0x1 [0269.513] CloseHandle (hObject=0x1e8) returned 1 [0269.513] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0269.513] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107516.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107516.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe78281d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe78281d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x36b8)) returned 1 [0269.513] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0269.514] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0269.514] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107516.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107516.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe78281d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe78281d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x36b8)) returned 1 [0269.514] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0269.514] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0269.514] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0269.514] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe78281d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe78281d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe78281d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f0c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0107526.WMF", cAlternateFileName="")) returned 1 [0269.514] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0269.514] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0269.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0269.515] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0269.515] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0269.515] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0269.516] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107526.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107526.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0269.516] GetFileType (hFile=0x1e8) returned 0x1 [0269.516] CloseHandle (hObject=0x1e8) returned 1 [0269.517] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0269.517] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107526.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107526.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe78281d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe78281d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe78281d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f0c)) returned 1 [0269.517] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0269.517] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0269.517] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107526.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107526.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe78281d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe78281d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe78281d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f0c)) returned 1 [0269.517] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0269.518] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0269.518] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0269.518] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe78281d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe78281d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe78281d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a88, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0107528.WMF", cAlternateFileName="")) returned 1 [0269.518] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0269.518] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0269.518] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0269.519] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0269.519] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0269.519] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0269.520] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107528.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107528.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0269.520] GetFileType (hFile=0x1e8) returned 0x1 [0269.521] CloseHandle (hObject=0x1e8) returned 1 [0269.521] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0269.521] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107528.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107528.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe78281d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe78281d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe78281d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a88)) returned 1 [0269.521] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0269.521] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0269.522] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107528.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107528.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe78281d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe78281d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe78281d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a88)) returned 1 [0269.522] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0269.522] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0269.522] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0269.522] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe736331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe736331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe78281d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6890, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0107544.WMF", cAlternateFileName="")) returned 1 [0269.522] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0269.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0269.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0269.523] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0269.523] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0269.523] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0269.525] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107544.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107544.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0269.525] GetFileType (hFile=0x1e8) returned 0x1 [0269.526] CloseHandle (hObject=0x1e8) returned 1 [0269.526] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0269.526] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107544.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107544.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe736331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe736331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe78281d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6890)) returned 1 [0269.526] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0269.527] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0269.527] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107544.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107544.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe736331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe736331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe78281d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6890)) returned 1 [0269.527] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0269.527] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0269.527] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0269.527] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe736331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe736331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe75c571, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ba0, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0107658.WMF", cAlternateFileName="")) returned 1 [0269.527] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0269.528] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0269.528] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0269.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0269.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0269.528] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0269.529] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107658.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107658.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0269.529] GetFileType (hFile=0x1e8) returned 0x1 [0269.530] CloseHandle (hObject=0x1e8) returned 1 [0269.530] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0269.531] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107658.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107658.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe736331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe736331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe75c571, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ba0)) returned 1 [0269.531] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0269.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0269.531] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107658.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107658.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe736331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe736331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe75c571, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ba0)) returned 1 [0269.531] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0269.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0269.531] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0269.532] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe75c571, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe75c571, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe78281d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12c8, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0107708.WMF", cAlternateFileName="")) returned 1 [0269.532] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0269.532] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0269.532] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0269.532] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0269.532] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0269.532] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0269.533] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107708.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107708.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0269.533] GetFileType (hFile=0x1e8) returned 0x1 [0269.534] CloseHandle (hObject=0x1e8) returned 1 [0269.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0269.535] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107708.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107708.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe75c571, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe75c571, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe78281d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12c8)) returned 1 [0269.535] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0269.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0269.535] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107708.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107708.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe75c571, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe75c571, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe78281d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12c8)) returned 1 [0269.536] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0269.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0269.536] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0269.536] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe736331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe736331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe75c571, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x121c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0107712.WMF", cAlternateFileName="")) returned 1 [0269.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0269.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0269.536] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0269.536] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0269.537] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0269.537] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0269.537] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107712.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107712.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0269.538] GetFileType (hFile=0x1e8) returned 0x1 [0269.538] CloseHandle (hObject=0x1e8) returned 1 [0269.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0269.539] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107712.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107712.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe736331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe736331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe75c571, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x121c)) returned 1 [0269.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0269.708] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0269.709] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107712.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107712.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe736331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe736331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe75c571, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x121c)) returned 1 [0269.709] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0269.709] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0269.709] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0269.709] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe736331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe736331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe78281d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xed8, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0107718.WMF", cAlternateFileName="")) returned 1 [0269.709] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0269.709] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0269.709] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0269.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0269.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0269.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0269.858] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107718.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107718.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0269.858] GetFileType (hFile=0x198) returned 0x1 [0269.858] CloseHandle (hObject=0x198) returned 1 [0269.859] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0269.859] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107718.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107718.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe736331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe736331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe78281d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xed8)) returned 1 [0269.859] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0269.859] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0269.859] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107718.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107718.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe736331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe736331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe78281d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xed8)) returned 1 [0269.860] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0269.860] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0269.860] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0269.860] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe736331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe736331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2044, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0107722.WMF", cAlternateFileName="")) returned 1 [0269.860] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0269.860] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0269.860] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0269.860] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0269.860] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0269.860] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0269.861] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107722.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107722.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0269.861] GetFileType (hFile=0x198) returned 0x1 [0269.862] CloseHandle (hObject=0x198) returned 1 [0269.862] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0269.862] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107722.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107722.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe736331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe736331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2044)) returned 1 [0269.862] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0269.863] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0269.863] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107722.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107722.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe736331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe736331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2044)) returned 1 [0269.863] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0269.863] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0269.863] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0269.863] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b68, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0107724.WMF", cAlternateFileName="")) returned 1 [0269.863] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0269.863] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0269.863] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0269.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0269.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0269.864] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0269.864] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107724.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107724.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0269.865] GetFileType (hFile=0x198) returned 0x1 [0269.865] CloseHandle (hObject=0x198) returned 1 [0269.865] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0269.866] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107724.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107724.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b68)) returned 1 [0269.866] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0269.866] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0269.866] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107724.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107724.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b68)) returned 1 [0269.866] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0269.866] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0269.866] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0269.866] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1574, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0107728.WMF", cAlternateFileName="")) returned 1 [0269.866] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0269.867] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0269.867] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0269.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0269.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0269.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0269.869] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107728.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107728.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0269.869] GetFileType (hFile=0x198) returned 0x1 [0269.869] CloseHandle (hObject=0x198) returned 1 [0269.870] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0269.870] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107728.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107728.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1574)) returned 1 [0269.870] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0269.870] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0269.870] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107728.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107728.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1574)) returned 1 [0269.870] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0269.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0269.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0269.871] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbf4, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0107730.WMF", cAlternateFileName="")) returned 1 [0269.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0269.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0269.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0269.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0269.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0269.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0269.872] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107730.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107730.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0269.872] GetFileType (hFile=0x198) returned 0x1 [0269.872] CloseHandle (hObject=0x198) returned 1 [0269.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0269.873] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107730.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107730.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbf4)) returned 1 [0269.873] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0269.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0269.873] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107730.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107730.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbf4)) returned 1 [0269.873] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0269.874] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0269.874] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0269.874] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc44, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0107734.WMF", cAlternateFileName="")) returned 1 [0269.874] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0269.874] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0269.874] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0269.874] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0269.874] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0269.874] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0269.875] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107734.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107734.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0269.875] GetFileType (hFile=0x198) returned 0x1 [0269.876] CloseHandle (hObject=0x198) returned 1 [0269.876] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0269.876] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107734.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107734.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc44)) returned 1 [0269.876] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0269.876] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0269.876] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107734.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107734.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc44)) returned 1 [0269.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0269.877] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0269.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0269.877] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe3c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0107742.WMF", cAlternateFileName="")) returned 1 [0269.877] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0269.877] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0269.877] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0269.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0269.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0269.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0269.878] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107742.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107742.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0269.878] GetFileType (hFile=0x198) returned 0x1 [0269.879] CloseHandle (hObject=0x198) returned 1 [0269.879] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0269.879] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107742.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107742.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe3c)) returned 1 [0269.879] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0269.879] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0269.880] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107742.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107742.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe3c)) returned 1 [0269.880] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0269.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0269.880] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0269.880] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe78281d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe78281d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x138c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0107744.WMF", cAlternateFileName="")) returned 1 [0269.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0269.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0269.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0269.880] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0269.880] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0269.881] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0269.881] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107744.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107744.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0269.881] GetFileType (hFile=0x198) returned 0x1 [0269.882] CloseHandle (hObject=0x198) returned 1 [0269.882] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0269.883] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107744.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107744.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe78281d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe78281d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x138c)) returned 1 [0269.883] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0269.883] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0269.884] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107744.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107744.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe78281d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe78281d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x138c)) returned 1 [0269.884] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0269.884] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0269.884] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0269.884] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12b4, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0107746.WMF", cAlternateFileName="")) returned 1 [0269.884] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0269.884] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0269.884] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0269.885] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0269.885] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0269.885] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0269.886] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107746.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107746.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0269.886] GetFileType (hFile=0x198) returned 0x1 [0269.886] CloseHandle (hObject=0x198) returned 1 [0269.887] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0269.887] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107746.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107746.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12b4)) returned 1 [0269.887] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0269.887] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0269.887] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107746.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107746.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12b4)) returned 1 [0269.888] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0269.888] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0269.888] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0269.888] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2020, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0107748.WMF", cAlternateFileName="")) returned 1 [0269.888] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0269.888] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0269.888] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0269.888] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0269.888] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0269.889] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0269.889] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107748.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107748.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0269.890] GetFileType (hFile=0x198) returned 0x1 [0269.890] CloseHandle (hObject=0x198) returned 1 [0269.890] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0269.890] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107748.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107748.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2020)) returned 1 [0269.890] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0269.891] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0269.891] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107748.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107748.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2020)) returned 1 [0269.891] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0269.891] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0269.891] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0269.891] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x126c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0107750.WMF", cAlternateFileName="")) returned 1 [0269.891] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0269.891] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0269.891] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0269.892] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0269.892] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0269.892] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0269.892] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107750.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107750.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0269.893] GetFileType (hFile=0x198) returned 0x1 [0269.893] CloseHandle (hObject=0x198) returned 1 [0269.894] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0269.894] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107750.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107750.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x126c)) returned 1 [0269.894] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0269.894] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0269.894] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107750.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107750.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x126c)) returned 1 [0269.895] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0269.895] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0269.895] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0269.895] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe78281d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe78281d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4146, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0136865.WMF", cAlternateFileName="")) returned 1 [0269.895] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0269.895] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0269.895] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0269.895] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0269.896] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0269.896] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0269.896] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0136865.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0136865.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0269.897] GetFileType (hFile=0x198) returned 0x1 [0269.897] CloseHandle (hObject=0x198) returned 1 [0269.898] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0269.898] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0136865.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0136865.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe78281d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe78281d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4146)) returned 1 [0269.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0269.898] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0269.898] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0136865.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0136865.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe78281d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe78281d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4146)) returned 1 [0269.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0269.898] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0270.384] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0270.384] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9d27, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0144773.JPG", cAlternateFileName="")) returned 1 [0270.384] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0270.385] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0270.385] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0270.385] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0270.385] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0270.385] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0270.386] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0144773.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0144773.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0270.386] GetFileType (hFile=0x19c) returned 0x1 [0270.387] CloseHandle (hObject=0x19c) returned 1 [0270.388] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0270.388] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0144773.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0144773.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9d27)) returned 1 [0270.388] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0270.388] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0270.388] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0144773.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0144773.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9d27)) returned 1 [0270.388] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0270.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0270.389] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0270.389] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8379, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0145168.JPG", cAlternateFileName="")) returned 1 [0270.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0270.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0270.389] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0270.389] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0270.389] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0270.390] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0270.390] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145168.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145168.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0270.391] GetFileType (hFile=0x19c) returned 0x1 [0270.391] CloseHandle (hObject=0x19c) returned 1 [0270.392] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0270.392] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145168.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145168.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8379)) returned 1 [0270.392] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0270.392] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0270.392] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145168.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145168.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8379)) returned 1 [0270.393] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0270.393] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0270.393] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0270.393] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf0c1, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0145212.JPG", cAlternateFileName="")) returned 1 [0270.393] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0270.393] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0270.393] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0270.394] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0270.394] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0270.394] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0270.395] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145212.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145212.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0270.395] GetFileType (hFile=0x19c) returned 0x1 [0270.395] CloseHandle (hObject=0x19c) returned 1 [0270.396] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0270.396] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145212.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145212.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf0c1)) returned 1 [0270.396] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0270.396] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0270.396] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145212.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145212.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf0c1)) returned 1 [0270.397] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0270.397] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0270.397] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0270.397] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc056, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0145272.JPG", cAlternateFileName="")) returned 1 [0270.397] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0270.397] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0270.398] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0270.398] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0270.398] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0270.398] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0270.400] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145272.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145272.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0270.400] GetFileType (hFile=0x19c) returned 0x1 [0270.401] CloseHandle (hObject=0x19c) returned 1 [0270.401] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0270.401] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145272.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145272.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc056)) returned 1 [0270.402] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0270.402] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0270.402] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145272.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145272.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc056)) returned 1 [0270.402] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0270.402] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0270.402] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0270.402] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5285, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0145361.JPG", cAlternateFileName="")) returned 1 [0270.403] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0270.403] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0270.403] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0270.403] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0270.403] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0270.403] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0270.404] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145361.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145361.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0270.404] GetFileType (hFile=0x19c) returned 0x1 [0270.405] CloseHandle (hObject=0x19c) returned 1 [0270.406] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0270.406] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145361.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145361.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5285)) returned 1 [0270.406] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0270.406] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0270.406] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145361.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145361.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5285)) returned 1 [0270.406] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0270.407] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0270.407] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0270.407] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45cb, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0145373.JPG", cAlternateFileName="")) returned 1 [0270.407] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0270.407] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0270.407] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0270.407] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0270.407] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0270.408] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0270.408] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145373.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145373.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0270.409] GetFileType (hFile=0x19c) returned 0x1 [0270.409] CloseHandle (hObject=0x19c) returned 1 [0270.410] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0270.410] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145373.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145373.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45cb)) returned 1 [0270.410] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0270.410] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0270.410] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145373.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145373.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45cb)) returned 1 [0270.410] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0270.410] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0270.411] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0270.411] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7c6a, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0145669.JPG", cAlternateFileName="")) returned 1 [0270.411] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0270.411] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0270.411] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0270.411] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0270.411] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0270.411] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0270.412] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145669.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145669.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0270.412] GetFileType (hFile=0x19c) returned 0x1 [0270.412] CloseHandle (hObject=0x19c) returned 1 [0270.412] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0270.413] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145669.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145669.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7c6a)) returned 1 [0270.413] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0270.413] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0270.413] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145669.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145669.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7c6a)) returned 1 [0270.413] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0270.413] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0270.413] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0270.413] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8fd4, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0145707.JPG", cAlternateFileName="")) returned 1 [0270.413] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0270.414] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0270.414] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0270.414] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0270.414] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0270.414] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0270.416] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145707.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145707.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0270.416] GetFileType (hFile=0x19c) returned 0x1 [0270.416] CloseHandle (hObject=0x19c) returned 1 [0270.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0270.417] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145707.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145707.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8fd4)) returned 1 [0270.417] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0270.417] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0270.417] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145707.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145707.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8fd4)) returned 1 [0270.417] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0270.418] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0270.418] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0270.418] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8fb8, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0145810.JPG", cAlternateFileName="")) returned 1 [0270.418] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0270.418] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0270.418] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0270.418] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0270.418] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0270.419] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0270.419] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145810.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145810.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0270.419] GetFileType (hFile=0x19c) returned 0x1 [0270.420] CloseHandle (hObject=0x19c) returned 1 [0270.420] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0270.420] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145810.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145810.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8fb8)) returned 1 [0270.420] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0270.420] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0270.420] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145810.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145810.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8fb8)) returned 1 [0270.421] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0270.421] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0270.421] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0270.421] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8a5b, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0145879.JPG", cAlternateFileName="")) returned 1 [0270.421] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0270.421] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0270.421] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0270.421] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0270.421] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0270.421] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0270.422] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145879.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145879.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0270.422] GetFileType (hFile=0x19c) returned 0x1 [0270.422] CloseHandle (hObject=0x19c) returned 1 [0270.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0270.423] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145879.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145879.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8a5b)) returned 1 [0270.423] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0270.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0270.423] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145879.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145879.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8a5b)) returned 1 [0270.423] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0270.423] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0270.423] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0270.423] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x84a6, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0145895.JPG", cAlternateFileName="")) returned 1 [0270.424] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0270.424] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0270.424] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0270.424] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0270.424] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0270.424] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0270.424] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145895.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145895.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0270.425] GetFileType (hFile=0x19c) returned 0x1 [0270.425] CloseHandle (hObject=0x19c) returned 1 [0270.426] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0270.426] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145895.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145895.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x84a6)) returned 1 [0270.426] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0270.426] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0270.426] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145895.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145895.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x84a6)) returned 1 [0270.426] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0270.427] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0270.427] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0270.427] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9a76, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0145904.JPG", cAlternateFileName="")) returned 1 [0270.427] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x237fd8 [0270.427] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0270.427] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0270.427] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0270.427] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0270.428] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x237fd8 | out: hHeap=0x1f0000) returned 1 [0270.428] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145904.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145904.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0270.429] GetFileType (hFile=0x19c) returned 0x1 [0270.429] CloseHandle (hObject=0x19c) returned 1 [0270.766] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0270.766] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145904.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145904.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9a76)) returned 1 [0270.766] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0270.767] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0270.767] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145904.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145904.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9a76)) returned 1 [0270.767] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0270.767] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0270.767] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0270.767] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb5ac, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0146142.JPG", cAlternateFileName="")) returned 1 [0270.768] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0270.768] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0270.768] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0270.768] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0270.768] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0270.768] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0270.769] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0146142.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0146142.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0270.769] GetFileType (hFile=0x21c) returned 0x1 [0270.770] CloseHandle (hObject=0x21c) returned 1 [0270.770] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0270.770] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0146142.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0146142.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb5ac)) returned 1 [0270.771] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0270.771] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0270.771] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0146142.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0146142.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb5ac)) returned 1 [0270.771] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0270.771] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0270.771] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0270.771] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe81b154, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe81b154, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaa9a, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0148309.JPG", cAlternateFileName="")) returned 1 [0270.771] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0270.771] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0270.772] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0270.772] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0270.772] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0270.772] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0270.772] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148309.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148309.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0270.773] GetFileType (hFile=0x21c) returned 0x1 [0270.773] CloseHandle (hObject=0x21c) returned 1 [0270.774] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0270.774] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148309.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148309.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe81b154, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe81b154, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaa9a)) returned 1 [0270.774] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0270.774] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0270.774] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148309.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148309.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe81b154, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe81b154, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaa9a)) returned 1 [0270.775] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0270.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0270.775] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0270.775] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x107d4, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0148757.JPG", cAlternateFileName="")) returned 1 [0270.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0270.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0270.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0270.775] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0270.776] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0270.776] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0270.776] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148757.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148757.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0270.777] GetFileType (hFile=0x21c) returned 0x1 [0270.777] CloseHandle (hObject=0x21c) returned 1 [0270.778] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0270.778] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148757.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148757.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x107d4)) returned 1 [0270.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0270.778] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0270.778] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148757.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148757.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x107d4)) returned 1 [0270.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0270.779] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0270.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0270.779] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe81b154, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x955d, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0148798.JPG", cAlternateFileName="")) returned 1 [0270.779] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0270.779] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0270.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0270.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0270.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0270.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0270.781] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148798.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148798.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0270.781] GetFileType (hFile=0x21c) returned 0x1 [0270.781] CloseHandle (hObject=0x21c) returned 1 [0270.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0270.782] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148798.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148798.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe81b154, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x955d)) returned 1 [0270.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0270.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0270.782] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148798.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148798.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe81b154, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x955d)) returned 1 [0270.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0270.783] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0270.783] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0270.783] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7f4eef, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7f4eef, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6b01, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0149018.JPG", cAlternateFileName="")) returned 1 [0270.783] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0270.783] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0270.783] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0270.783] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0270.783] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0270.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0270.784] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149018.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0149018.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0270.785] GetFileType (hFile=0x21c) returned 0x1 [0270.785] CloseHandle (hObject=0x21c) returned 1 [0270.786] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0270.786] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149018.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0149018.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7f4eef, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7f4eef, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6b01)) returned 1 [0270.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0270.786] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0270.786] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149018.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0149018.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7f4eef, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7f4eef, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6b01)) returned 1 [0270.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0270.787] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0270.787] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0270.787] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe81b154, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfd22, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0149118.JPG", cAlternateFileName="")) returned 1 [0270.787] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0270.787] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0270.787] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0270.787] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0270.787] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0270.788] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0270.788] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149118.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0149118.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0270.789] GetFileType (hFile=0x21c) returned 0x1 [0270.790] CloseHandle (hObject=0x21c) returned 1 [0270.790] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0270.790] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149118.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0149118.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe81b154, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfd22)) returned 1 [0270.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0270.791] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0270.791] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149118.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0149118.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe81b154, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfd22)) returned 1 [0270.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0270.791] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0270.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0270.791] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe81b154, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb544, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0150150.WMF", cAlternateFileName="")) returned 1 [0270.792] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0270.792] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0270.792] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0270.793] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0270.793] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0270.793] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0270.794] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150150.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0150150.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0270.794] GetFileType (hFile=0x21c) returned 0x1 [0270.795] CloseHandle (hObject=0x21c) returned 1 [0270.795] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0270.795] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150150.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0150150.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe81b154, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb544)) returned 1 [0270.795] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0270.796] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0270.796] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150150.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0150150.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe81b154, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb544)) returned 1 [0270.796] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0270.796] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0270.796] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0270.796] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7f4eef, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x212e, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0150861.WMF", cAlternateFileName="")) returned 1 [0270.796] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0270.797] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0270.797] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0270.797] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0270.797] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0270.797] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0270.798] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150861.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0150861.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0270.798] GetFileType (hFile=0x21c) returned 0x1 [0270.799] CloseHandle (hObject=0x21c) returned 1 [0270.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0270.799] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150861.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0150861.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7f4eef, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x212e)) returned 1 [0270.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0270.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0270.800] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150861.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0150861.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7f4eef, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x212e)) returned 1 [0270.800] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0270.800] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0270.800] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0270.800] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe867602, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1104, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0151041.WMF", cAlternateFileName="")) returned 1 [0270.800] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0270.800] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0270.800] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0270.801] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0270.801] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0270.801] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0270.802] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151041.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151041.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0270.802] GetFileType (hFile=0x21c) returned 0x1 [0270.802] CloseHandle (hObject=0x21c) returned 1 [0270.803] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0270.803] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151041.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151041.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe867602, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1104)) returned 1 [0270.803] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0270.803] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0270.803] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151041.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151041.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe867602, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1104)) returned 1 [0270.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0270.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0270.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0270.804] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3c68, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0151045.WMF", cAlternateFileName="")) returned 1 [0270.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0270.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0270.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0270.805] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0270.805] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0270.805] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0271.078] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151045.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151045.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0271.078] GetFileType (hFile=0x1c0) returned 0x1 [0271.079] CloseHandle (hObject=0x1c0) returned 1 [0271.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0271.080] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151045.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151045.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3c68)) returned 1 [0271.080] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0271.080] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0271.080] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151045.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151045.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3c68)) returned 1 [0271.080] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0271.080] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0271.081] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0271.081] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4844, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0151047.WMF", cAlternateFileName="")) returned 1 [0271.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0271.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0271.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0271.081] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0271.081] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0271.081] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0271.082] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151047.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151047.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0271.082] GetFileType (hFile=0x1c0) returned 0x1 [0271.083] CloseHandle (hObject=0x1c0) returned 1 [0271.083] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0271.083] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151047.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151047.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4844)) returned 1 [0271.083] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0271.083] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0271.084] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151047.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151047.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4844)) returned 1 [0271.084] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0271.084] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0271.084] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0271.084] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3928, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0151055.WMF", cAlternateFileName="")) returned 1 [0271.084] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0271.084] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0271.085] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0271.085] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0271.085] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0271.085] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0271.086] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151055.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151055.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0271.087] GetFileType (hFile=0x1c0) returned 0x1 [0271.087] CloseHandle (hObject=0x1c0) returned 1 [0271.088] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0271.088] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151055.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151055.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3928)) returned 1 [0271.088] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0271.088] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0271.088] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151055.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151055.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3928)) returned 1 [0271.088] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0271.088] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0271.088] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0271.089] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a60, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0151061.WMF", cAlternateFileName="")) returned 1 [0271.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0271.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0271.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0271.089] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0271.089] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0271.089] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0271.090] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151061.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151061.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0271.090] GetFileType (hFile=0x1c0) returned 0x1 [0271.091] CloseHandle (hObject=0x1c0) returned 1 [0271.091] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0271.091] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151061.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151061.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a60)) returned 1 [0271.091] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0271.091] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0271.092] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151061.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151061.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a60)) returned 1 [0271.092] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0271.092] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0271.092] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0271.092] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2988, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0151063.WMF", cAlternateFileName="")) returned 1 [0271.092] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0271.092] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0271.092] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0271.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0271.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0271.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0271.093] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151063.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151063.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0271.093] GetFileType (hFile=0x1c0) returned 0x1 [0271.094] CloseHandle (hObject=0x1c0) returned 1 [0271.094] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0271.094] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151063.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151063.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2988)) returned 1 [0271.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0271.095] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0271.095] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151063.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151063.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2988)) returned 1 [0271.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0271.095] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0271.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0271.095] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3394, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0151067.WMF", cAlternateFileName="")) returned 1 [0271.095] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0271.096] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0271.096] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0271.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0271.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0271.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0271.097] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151067.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151067.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0271.097] GetFileType (hFile=0x1c0) returned 0x1 [0271.097] CloseHandle (hObject=0x1c0) returned 1 [0271.098] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0271.098] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151067.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151067.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3394)) returned 1 [0271.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0271.098] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0271.098] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151067.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151067.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3394)) returned 1 [0271.099] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0271.099] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0271.099] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0271.099] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3418, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0151073.WMF", cAlternateFileName="")) returned 1 [0271.099] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0271.099] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0271.099] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0271.100] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0271.100] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0271.100] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0271.100] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151073.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151073.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0271.101] GetFileType (hFile=0x1c0) returned 0x1 [0271.101] CloseHandle (hObject=0x1c0) returned 1 [0271.102] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0271.103] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151073.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151073.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3418)) returned 1 [0271.103] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0271.103] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0271.103] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151073.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151073.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3418)) returned 1 [0271.103] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0271.103] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0271.104] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0271.104] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0151581.WMF", cAlternateFileName="")) returned 1 [0271.104] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0271.104] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0271.104] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0271.104] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0271.104] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0271.105] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0271.105] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151581.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151581.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0271.106] GetFileType (hFile=0x1c0) returned 0x1 [0271.106] CloseHandle (hObject=0x1c0) returned 1 [0271.107] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0271.107] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151581.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151581.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a00)) returned 1 [0271.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0271.107] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0271.107] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151581.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151581.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a00)) returned 1 [0271.108] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0271.108] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0271.108] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0271.108] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x610c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0152414.WMF", cAlternateFileName="")) returned 1 [0271.108] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0271.108] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0271.108] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0271.108] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0271.109] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0271.109] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0271.109] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152414.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152414.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0271.110] GetFileType (hFile=0x1c0) returned 0x1 [0271.110] CloseHandle (hObject=0x1c0) returned 1 [0271.111] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0271.111] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152414.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152414.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x610c)) returned 1 [0271.111] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0271.111] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0271.111] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152414.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152414.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x610c)) returned 1 [0271.111] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0271.112] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0271.112] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0271.112] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe867602, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe867602, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe8d9e20, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3734, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0152430.WMF", cAlternateFileName="")) returned 1 [0271.112] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0271.112] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0271.112] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0271.112] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0271.113] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0271.113] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0271.114] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152430.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152430.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0271.493] GetFileType (hFile=0x19c) returned 0x1 [0271.494] CloseHandle (hObject=0x19c) returned 1 [0271.494] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0271.494] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152430.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152430.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe867602, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe867602, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe8d9e20, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3734)) returned 1 [0271.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0271.495] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0271.495] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152430.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152430.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe867602, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe867602, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe8d9e20, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3734)) returned 1 [0271.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0271.495] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0271.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0271.495] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe867602, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe867602, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe88d87c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x406c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0152432.WMF", cAlternateFileName="")) returned 1 [0271.496] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0271.496] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0271.496] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0271.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0271.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0271.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0271.497] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152432.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152432.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0271.498] GetFileType (hFile=0x19c) returned 0x1 [0271.498] CloseHandle (hObject=0x19c) returned 1 [0271.499] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0271.499] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152432.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152432.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe867602, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe867602, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe88d87c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x406c)) returned 1 [0271.499] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0271.499] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0271.499] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152432.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152432.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe867602, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe867602, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe88d87c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x406c)) returned 1 [0271.500] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0271.500] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0271.500] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0271.500] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe867602, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe867602, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe8b3ab6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c4c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0152436.WMF", cAlternateFileName="")) returned 1 [0271.500] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0271.500] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0271.500] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0271.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0271.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0271.501] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0271.502] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152436.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152436.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0271.502] GetFileType (hFile=0x19c) returned 0x1 [0271.502] CloseHandle (hObject=0x19c) returned 1 [0271.503] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0271.503] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152436.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152436.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe867602, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe867602, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe8b3ab6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c4c)) returned 1 [0271.503] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0271.503] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0271.503] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152436.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152436.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe867602, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe867602, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe8b3ab6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c4c)) returned 1 [0271.503] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0271.504] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0271.504] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0271.504] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe867602, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe867602, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe867602, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4030, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0152556.WMF", cAlternateFileName="")) returned 1 [0271.504] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0271.504] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0271.504] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0271.504] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0271.504] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0271.504] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0271.505] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152556.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152556.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0271.505] GetFileType (hFile=0x19c) returned 0x1 [0271.506] CloseHandle (hObject=0x19c) returned 1 [0271.506] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0271.506] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152556.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152556.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe867602, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe867602, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe867602, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4030)) returned 1 [0271.506] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0271.507] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0271.507] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152556.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152556.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe867602, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe867602, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe867602, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4030)) returned 1 [0271.507] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0271.507] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0271.507] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0271.507] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe867602, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3eb4, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0152558.WMF", cAlternateFileName="")) returned 1 [0271.507] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0271.507] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0271.507] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0271.508] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0271.508] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0271.508] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0271.509] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152558.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152558.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0271.510] GetFileType (hFile=0x19c) returned 0x1 [0271.510] CloseHandle (hObject=0x19c) returned 1 [0271.511] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0271.511] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152558.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152558.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe867602, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3eb4)) returned 1 [0271.511] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0271.511] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0271.511] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152558.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152558.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe867602, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3eb4)) returned 1 [0271.511] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0271.512] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0271.512] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0271.512] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a80, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0152560.WMF", cAlternateFileName="")) returned 1 [0271.512] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0271.512] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0271.512] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0271.512] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0271.512] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0271.513] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0271.513] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152560.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152560.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0271.513] GetFileType (hFile=0x19c) returned 0x1 [0271.514] CloseHandle (hObject=0x19c) returned 1 [0271.514] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0271.514] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152560.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152560.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a80)) returned 1 [0271.515] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0271.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0271.515] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152560.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152560.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a80)) returned 1 [0271.515] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0271.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0271.515] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0271.515] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe867602, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe867602, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe88d87c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe70, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0152568.WMF", cAlternateFileName="")) returned 1 [0271.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0271.516] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0271.516] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0271.516] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0271.516] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0271.516] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0271.517] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152568.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152568.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0271.517] GetFileType (hFile=0x19c) returned 0x1 [0271.517] CloseHandle (hObject=0x19c) returned 1 [0271.518] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0271.518] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152568.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152568.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe867602, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe867602, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe88d87c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe70)) returned 1 [0271.518] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0271.518] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0271.518] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152568.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152568.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe867602, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe867602, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe88d87c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe70)) returned 1 [0271.518] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0271.519] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0271.519] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0271.519] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe867602, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd28, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0152570.WMF", cAlternateFileName="")) returned 1 [0271.519] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0271.519] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0271.519] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0271.519] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0271.519] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0271.519] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0271.520] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152570.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152570.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0271.520] GetFileType (hFile=0x19c) returned 0x1 [0271.521] CloseHandle (hObject=0x19c) returned 1 [0271.521] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0271.521] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152570.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152570.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe867602, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd28)) returned 1 [0271.522] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0271.522] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0271.522] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152570.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152570.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe867602, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd28)) returned 1 [0271.522] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0271.522] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0271.522] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0271.522] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe867602, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ab4, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0152590.WMF", cAlternateFileName="")) returned 1 [0271.522] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0271.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0271.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0271.523] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0271.523] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0271.523] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0271.524] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152590.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152590.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0271.524] GetFileType (hFile=0x19c) returned 0x1 [0271.525] CloseHandle (hObject=0x19c) returned 1 [0271.525] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0271.526] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152590.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152590.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe867602, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ab4)) returned 1 [0271.526] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0271.526] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0271.526] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152590.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152590.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe867602, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ab4)) returned 1 [0271.526] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0271.526] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0271.526] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0271.526] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe867602, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18c4, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0152594.WMF", cAlternateFileName="")) returned 1 [0271.527] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0271.527] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0271.527] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0271.527] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0271.527] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0271.527] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0271.528] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152594.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152594.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0271.528] GetFileType (hFile=0x19c) returned 0x1 [0271.529] CloseHandle (hObject=0x19c) returned 1 [0271.529] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0271.529] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152594.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152594.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe867602, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18c4)) returned 1 [0271.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0271.530] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0271.530] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152594.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152594.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe867602, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18c4)) returned 1 [0271.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0271.530] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0271.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0271.530] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9261f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9261f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9261f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2628, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0152600.WMF", cAlternateFileName="")) returned 1 [0271.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0271.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0271.531] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0271.531] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0271.531] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0271.531] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0271.532] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152600.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152600.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0271.532] GetFileType (hFile=0x19c) returned 0x1 [0271.533] CloseHandle (hObject=0x19c) returned 1 [0271.533] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0271.533] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152600.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152600.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9261f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9261f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9261f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2628)) returned 1 [0271.534] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0271.534] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0271.534] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152600.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152600.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9261f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9261f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9261f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2628)) returned 1 [0271.534] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0271.534] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0271.534] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0271.534] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9261f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9261f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe94c4b9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1884, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0152602.WMF", cAlternateFileName="")) returned 1 [0271.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0271.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0271.535] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0271.535] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0271.535] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0271.535] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0271.536] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152602.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152602.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0271.858] GetFileType (hFile=0x1c0) returned 0x1 [0271.859] CloseHandle (hObject=0x1c0) returned 1 [0271.859] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0271.859] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152602.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152602.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9261f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9261f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe94c4b9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1884)) returned 1 [0271.859] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0271.859] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0271.860] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152602.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152602.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9261f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9261f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe94c4b9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1884)) returned 1 [0271.860] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0271.860] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0271.860] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0271.860] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9261f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9261f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9261f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x40f8, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0152606.WMF", cAlternateFileName="")) returned 1 [0271.860] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0271.860] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0271.860] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0271.860] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0271.861] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0271.861] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0272.465] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152606.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152606.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0272.466] GetFileType (hFile=0x174) returned 0x1 [0272.466] CloseHandle (hObject=0x174) returned 1 [0272.467] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0272.467] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152606.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152606.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9261f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9261f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9261f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x40f8)) returned 1 [0272.467] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0272.467] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0272.467] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152606.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152606.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9261f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9261f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9261f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x40f8)) returned 1 [0272.468] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0272.468] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0272.468] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0272.468] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9261f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9261f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9261f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3094, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0152608.WMF", cAlternateFileName="")) returned 1 [0272.468] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0272.468] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0272.468] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0272.468] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0272.469] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0272.469] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0272.469] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152608.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152608.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0272.470] GetFileType (hFile=0x174) returned 0x1 [0272.470] CloseHandle (hObject=0x174) returned 1 [0272.470] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0272.471] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152608.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152608.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9261f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9261f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9261f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3094)) returned 1 [0272.471] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0272.471] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0272.471] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152608.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152608.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9261f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9261f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9261f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3094)) returned 1 [0272.471] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0272.471] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0272.471] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0272.472] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe8fff80, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe8fff80, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9261f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1748, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0152610.WMF", cAlternateFileName="")) returned 1 [0272.472] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0272.472] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0272.472] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0272.472] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0272.472] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0272.472] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0272.473] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152610.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152610.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0272.473] GetFileType (hFile=0x174) returned 0x1 [0272.474] CloseHandle (hObject=0x174) returned 1 [0272.474] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0272.474] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152610.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152610.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe8fff80, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe8fff80, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9261f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1748)) returned 1 [0272.474] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0272.475] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0272.475] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152610.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152610.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe8fff80, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe8fff80, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9261f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1748)) returned 1 [0272.475] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0272.475] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0272.475] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0272.475] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe88d87c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe88d87c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe8b3ab6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2584, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0152622.WMF", cAlternateFileName="")) returned 1 [0272.475] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0272.475] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0272.476] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0272.476] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0272.476] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0272.476] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0272.477] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152622.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152622.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0272.478] GetFileType (hFile=0x174) returned 0x1 [0272.478] CloseHandle (hObject=0x174) returned 1 [0272.479] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0272.479] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152622.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152622.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe88d87c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe88d87c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe8b3ab6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2584)) returned 1 [0272.479] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0272.479] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0272.479] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152622.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152622.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe88d87c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe88d87c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe8b3ab6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2584)) returned 1 [0272.479] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0272.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0272.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0272.480] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe8fff80, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe8fff80, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9261f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6688, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0152626.WMF", cAlternateFileName="")) returned 1 [0272.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0272.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0272.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0272.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0272.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0272.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0272.481] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152626.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152626.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0272.482] GetFileType (hFile=0x174) returned 0x1 [0272.482] CloseHandle (hObject=0x174) returned 1 [0272.483] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0272.483] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152626.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152626.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe8fff80, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe8fff80, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9261f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6688)) returned 1 [0272.483] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0272.483] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0272.483] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152626.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152626.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe8fff80, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe8fff80, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9261f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6688)) returned 1 [0272.483] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0272.483] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0272.484] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0272.484] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe8d9e20, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe8d9e20, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9261f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x785c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0152628.WMF", cAlternateFileName="")) returned 1 [0272.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0272.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0272.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0272.484] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0272.484] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0272.484] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0272.485] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152628.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152628.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0272.485] GetFileType (hFile=0x174) returned 0x1 [0272.486] CloseHandle (hObject=0x174) returned 1 [0272.486] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0272.486] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152628.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152628.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe8d9e20, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe8d9e20, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9261f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x785c)) returned 1 [0272.487] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0272.487] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0272.487] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152628.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152628.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe8d9e20, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe8d9e20, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9261f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x785c)) returned 1 [0272.487] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0272.487] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0272.487] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0272.487] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe8b3ab6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe8b3ab6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe8fff80, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8774, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0152688.WMF", cAlternateFileName="")) returned 1 [0272.487] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0272.488] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0272.488] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0272.488] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0272.488] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0272.488] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0272.489] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152688.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152688.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0272.489] GetFileType (hFile=0x174) returned 0x1 [0272.489] CloseHandle (hObject=0x174) returned 1 [0272.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0272.490] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152688.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152688.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe8b3ab6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe8b3ab6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe8fff80, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8774)) returned 1 [0272.490] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0272.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0272.490] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152688.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152688.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe8b3ab6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe8b3ab6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe8fff80, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8774)) returned 1 [0272.490] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0272.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0272.490] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0272.491] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe88d87c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe88d87c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe8fff80, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f4, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0152690.WMF", cAlternateFileName="")) returned 1 [0272.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0272.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0272.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0272.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0272.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0272.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0272.492] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152690.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152690.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0272.492] GetFileType (hFile=0x174) returned 0x1 [0272.493] CloseHandle (hObject=0x174) returned 1 [0272.493] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0272.494] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152690.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152690.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe88d87c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe88d87c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe8fff80, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f4)) returned 1 [0272.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0272.494] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0272.494] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152690.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152690.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe88d87c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe88d87c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe8fff80, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f4)) returned 1 [0272.494] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0272.494] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0272.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0272.495] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x544, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0152694.WMF", cAlternateFileName="")) returned 1 [0272.495] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0272.495] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0272.495] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0272.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0272.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0272.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0272.496] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152694.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152694.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0272.497] GetFileType (hFile=0x174) returned 0x1 [0272.498] CloseHandle (hObject=0x174) returned 1 [0272.498] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0272.498] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152694.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152694.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x544)) returned 1 [0272.499] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0272.499] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0272.499] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152694.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152694.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x544)) returned 1 [0272.499] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0272.499] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0272.499] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0272.500] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c98, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0152696.WMF", cAlternateFileName="")) returned 1 [0272.500] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0272.500] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0272.500] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0272.500] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0272.500] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0272.500] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0272.501] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152696.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152696.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0272.501] GetFileType (hFile=0x174) returned 0x1 [0272.502] CloseHandle (hObject=0x174) returned 1 [0272.690] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0272.690] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152696.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152696.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c98)) returned 1 [0272.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0272.691] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0272.691] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152696.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152696.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c98)) returned 1 [0272.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0272.691] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0272.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0272.691] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea312e2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea312e2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b8, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0152698.WMF", cAlternateFileName="")) returned 1 [0272.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0272.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0272.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0272.692] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0272.692] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0272.692] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0272.743] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152698.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152698.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0272.744] GetFileType (hFile=0x174) returned 0x1 [0272.744] CloseHandle (hObject=0x174) returned 1 [0272.745] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0272.745] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152698.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152698.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea312e2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea312e2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b8)) returned 1 [0272.745] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0272.745] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0272.745] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152698.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152698.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea312e2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea312e2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b8)) returned 1 [0272.745] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0272.745] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0272.746] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0272.746] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9e4dce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9e4dce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b8, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0152702.WMF", cAlternateFileName="")) returned 1 [0272.746] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0272.746] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0272.746] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0272.746] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0272.746] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0272.747] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0272.747] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152702.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152702.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0272.747] GetFileType (hFile=0x174) returned 0x1 [0272.748] CloseHandle (hObject=0x174) returned 1 [0272.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0272.748] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152702.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152702.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9e4dce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9e4dce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b8)) returned 1 [0272.748] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0272.749] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0272.749] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152702.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152702.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9e4dce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9e4dce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b8)) returned 1 [0272.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0272.749] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0272.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0272.749] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9726d1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9726d1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x674, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0152704.WMF", cAlternateFileName="")) returned 1 [0272.749] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0272.749] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0272.750] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0272.750] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0272.750] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0272.750] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0272.750] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152704.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152704.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0272.751] GetFileType (hFile=0x174) returned 0x1 [0272.751] CloseHandle (hObject=0x174) returned 1 [0272.751] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0272.752] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152704.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152704.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9726d1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9726d1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x674)) returned 1 [0272.752] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0272.752] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0272.752] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152704.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152704.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9726d1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9726d1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x674)) returned 1 [0272.752] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0272.752] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0272.753] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0272.753] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9261f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9261f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9726d1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x132c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0152708.WMF", cAlternateFileName="")) returned 1 [0272.753] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238370 [0272.753] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0272.753] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0272.753] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0272.753] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0272.753] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238370 | out: hHeap=0x1f0000) returned 1 [0272.754] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152708.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152708.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0272.754] GetFileType (hFile=0x174) returned 0x1 [0272.755] CloseHandle (hObject=0x174) returned 1 [0272.755] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0272.755] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152708.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152708.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9261f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9261f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9726d1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x132c)) returned 1 [0272.756] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0272.756] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0272.756] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152708.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152708.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9261f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9261f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9726d1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x132c)) returned 1 [0272.756] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0272.756] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0272.756] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0272.756] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe998993, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe998993, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11e4, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0152716.WMF", cAlternateFileName="")) returned 1 [0272.756] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0272.756] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0272.756] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0272.757] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0272.757] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0272.757] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0272.757] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152716.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152716.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0272.758] GetFileType (hFile=0x174) returned 0x1 [0272.759] CloseHandle (hObject=0x174) returned 1 [0272.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0272.760] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152716.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152716.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe998993, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe998993, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11e4)) returned 1 [0272.760] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0272.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0272.760] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152716.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152716.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe998993, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe998993, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11e4)) returned 1 [0272.760] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0272.760] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0272.761] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0272.761] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe94c4b9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe94c4b9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe998993, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b6c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0152722.WMF", cAlternateFileName="")) returned 1 [0272.761] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0272.761] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0272.761] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0272.761] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0272.761] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0272.761] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0272.762] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152722.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152722.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0272.762] GetFileType (hFile=0x174) returned 0x1 [0272.763] CloseHandle (hObject=0x174) returned 1 [0272.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0272.763] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152722.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152722.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe94c4b9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe94c4b9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe998993, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b6c)) returned 1 [0272.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0272.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0272.764] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152722.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152722.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe94c4b9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe94c4b9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe998993, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b6c)) returned 1 [0272.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0272.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0272.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0272.764] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9261f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9261f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9e4dce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ec4, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0152876.WMF", cAlternateFileName="")) returned 1 [0272.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0272.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0272.765] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0272.765] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0272.765] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0272.765] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0272.765] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152876.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152876.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0272.766] GetFileType (hFile=0x174) returned 0x1 [0272.766] CloseHandle (hObject=0x174) returned 1 [0272.767] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0272.767] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152876.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152876.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9261f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9261f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9e4dce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ec4)) returned 1 [0272.767] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0272.767] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0272.767] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152876.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152876.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9261f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9261f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9e4dce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ec4)) returned 1 [0272.767] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0272.768] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0272.768] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0272.768] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9261f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9261f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe94c4b9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a28, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0152878.WMF", cAlternateFileName="")) returned 1 [0272.768] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0272.768] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0272.768] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0272.768] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0272.768] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0272.769] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0272.769] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152878.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152878.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0272.770] GetFileType (hFile=0x174) returned 0x1 [0272.771] CloseHandle (hObject=0x174) returned 1 [0272.771] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0272.771] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152878.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152878.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9261f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9261f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe94c4b9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a28)) returned 1 [0272.771] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0272.771] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0272.772] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152878.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152878.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9261f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9261f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe94c4b9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a28)) returned 1 [0272.772] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0272.772] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0272.772] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0272.772] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2370, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0152882.WMF", cAlternateFileName="")) returned 1 [0272.772] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0272.772] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0272.772] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0272.773] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0272.773] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0272.773] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0272.773] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152882.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152882.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0272.775] GetFileType (hFile=0x174) returned 0x1 [0272.775] CloseHandle (hObject=0x174) returned 1 [0272.776] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0272.776] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152882.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152882.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2370)) returned 1 [0272.776] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0272.776] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0272.776] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152882.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152882.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2370)) returned 1 [0272.776] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0272.777] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0272.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0272.777] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b2c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0152884.WMF", cAlternateFileName="")) returned 1 [0272.777] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0272.777] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0272.777] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0272.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0272.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0272.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0272.778] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152884.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152884.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0272.869] GetFileType (hFile=0x1e8) returned 0x1 [0272.869] CloseHandle (hObject=0x1e8) returned 1 [0272.869] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0272.870] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152884.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152884.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b2c)) returned 1 [0272.870] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0272.870] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0272.870] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152884.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152884.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b2c)) returned 1 [0272.870] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0272.870] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0272.870] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0272.870] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x794, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0152890.WMF", cAlternateFileName="")) returned 1 [0272.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0272.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0272.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0272.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0272.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0272.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0272.872] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152890.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152890.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0272.872] GetFileType (hFile=0x1e8) returned 0x1 [0272.873] CloseHandle (hObject=0x1e8) returned 1 [0272.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0272.873] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152890.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152890.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x794)) returned 1 [0272.874] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0272.874] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0272.874] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152890.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152890.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x794)) returned 1 [0272.874] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0272.874] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0272.874] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0272.874] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x29ac, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0152892.WMF", cAlternateFileName="")) returned 1 [0272.875] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0272.875] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0272.875] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0272.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0272.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0272.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0272.876] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152892.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152892.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0272.877] GetFileType (hFile=0x1e8) returned 0x1 [0272.878] CloseHandle (hObject=0x1e8) returned 1 [0272.878] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0272.879] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152892.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152892.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x29ac)) returned 1 [0272.879] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0272.879] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0272.879] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152892.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152892.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x29ac)) returned 1 [0272.879] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0272.879] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0272.880] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0272.880] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c54, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0152894.WMF", cAlternateFileName="")) returned 1 [0272.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0272.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0272.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0272.880] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0272.880] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0272.880] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0272.881] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152894.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152894.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0272.882] GetFileType (hFile=0x1e8) returned 0x1 [0272.882] CloseHandle (hObject=0x1e8) returned 1 [0272.884] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0272.884] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152894.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152894.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c54)) returned 1 [0272.884] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0272.884] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0272.884] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152894.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152894.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c54)) returned 1 [0272.884] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0272.884] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0272.885] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0272.885] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1190, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0152898.WMF", cAlternateFileName="")) returned 1 [0272.885] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0272.885] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0272.885] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0272.885] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0272.885] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0272.885] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0272.886] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152898.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152898.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0272.887] GetFileType (hFile=0x1e8) returned 0x1 [0272.887] CloseHandle (hObject=0x1e8) returned 1 [0272.888] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0272.888] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152898.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152898.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1190)) returned 1 [0272.888] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0272.888] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0272.888] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152898.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152898.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1190)) returned 1 [0272.888] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0272.889] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0272.889] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0272.889] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x812c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0153047.WMF", cAlternateFileName="")) returned 1 [0272.889] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0272.889] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0272.889] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0272.889] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0272.889] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0272.889] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0272.890] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153047.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153047.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0272.890] GetFileType (hFile=0x1e8) returned 0x1 [0272.891] CloseHandle (hObject=0x1e8) returned 1 [0272.891] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0272.891] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153047.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153047.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x812c)) returned 1 [0272.892] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0272.892] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0272.892] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153047.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153047.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x812c)) returned 1 [0272.892] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0272.892] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0272.892] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0272.892] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x778, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0153087.WMF", cAlternateFileName="")) returned 1 [0272.892] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0272.893] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0272.893] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0272.893] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0272.893] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0272.893] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0272.894] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153087.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153087.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0272.895] GetFileType (hFile=0x1e8) returned 0x1 [0272.895] CloseHandle (hObject=0x1e8) returned 1 [0272.896] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0272.896] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153087.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153087.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x778)) returned 1 [0272.896] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0272.896] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0272.896] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153087.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153087.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x778)) returned 1 [0272.896] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0272.896] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0272.896] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0272.897] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ea8, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0153089.WMF", cAlternateFileName="")) returned 1 [0272.897] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0272.897] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0272.897] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0272.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0272.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0272.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0272.898] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153089.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153089.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0272.898] GetFileType (hFile=0x1e8) returned 0x1 [0272.902] CloseHandle (hObject=0x1e8) returned 1 [0272.903] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0272.903] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153089.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153089.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ea8)) returned 1 [0272.903] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0272.903] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0272.903] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153089.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153089.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ea8)) returned 1 [0272.903] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0272.903] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0272.903] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0272.904] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fc8, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0153091.WMF", cAlternateFileName="")) returned 1 [0272.904] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0272.904] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0272.904] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0272.904] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0272.904] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0272.904] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0272.905] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153091.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153091.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0272.905] GetFileType (hFile=0x1e8) returned 0x1 [0272.906] CloseHandle (hObject=0x1e8) returned 1 [0272.906] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0272.906] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153091.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153091.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fc8)) returned 1 [0272.907] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0272.907] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0272.907] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153091.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153091.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fc8)) returned 1 [0272.907] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0272.907] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0272.907] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0272.907] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x22b0, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0153093.WMF", cAlternateFileName="")) returned 1 [0272.908] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0272.908] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0272.908] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0272.908] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0272.908] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0272.908] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0272.909] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153093.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153093.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0273.105] GetFileType (hFile=0x19c) returned 0x1 [0273.106] CloseHandle (hObject=0x19c) returned 1 [0273.106] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0273.106] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153093.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153093.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x22b0)) returned 1 [0273.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0273.107] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0273.107] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153093.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153093.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x22b0)) returned 1 [0273.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0273.107] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0273.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0273.107] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe78, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0153095.WMF", cAlternateFileName="")) returned 1 [0273.107] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0273.107] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0273.107] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0273.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0273.108] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0273.108] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0273.143] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153095.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153095.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0273.145] GetFileType (hFile=0x19c) returned 0x1 [0273.145] CloseHandle (hObject=0x19c) returned 1 [0273.145] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0273.146] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153095.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153095.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe78)) returned 1 [0273.146] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0273.146] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0273.146] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153095.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153095.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe78)) returned 1 [0273.146] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0273.146] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0273.147] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0273.147] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc0, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0153265.WMF", cAlternateFileName="")) returned 1 [0273.147] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0273.147] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0273.147] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0273.147] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0273.147] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0273.147] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0273.148] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153265.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153265.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0273.149] GetFileType (hFile=0x19c) returned 0x1 [0273.150] CloseHandle (hObject=0x19c) returned 1 [0273.150] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0273.151] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153265.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153265.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc0)) returned 1 [0273.151] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0273.151] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0273.152] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153265.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153265.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc0)) returned 1 [0273.152] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0273.152] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0273.152] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0273.152] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e80, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0153273.WMF", cAlternateFileName="")) returned 1 [0273.152] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0273.152] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0273.152] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0273.153] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0273.153] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0273.153] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0273.154] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153273.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153273.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0273.155] GetFileType (hFile=0x19c) returned 0x1 [0273.155] CloseHandle (hObject=0x19c) returned 1 [0273.156] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0273.156] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153273.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153273.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e80)) returned 1 [0273.156] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0273.156] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0273.156] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153273.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153273.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e80)) returned 1 [0273.156] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0273.157] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0273.157] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0273.157] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8f0c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0153299.WMF", cAlternateFileName="")) returned 1 [0273.157] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0273.157] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0273.157] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0273.157] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0273.157] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0273.158] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0273.158] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153299.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153299.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0273.159] GetFileType (hFile=0x19c) returned 0x1 [0273.160] CloseHandle (hObject=0x19c) returned 1 [0273.161] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0273.161] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153299.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153299.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8f0c)) returned 1 [0273.161] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0273.161] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0273.161] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153299.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153299.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8f0c)) returned 1 [0273.161] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0273.161] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0273.162] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0273.162] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7850, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0153302.WMF", cAlternateFileName="")) returned 1 [0273.162] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0273.162] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0273.162] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0273.162] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0273.162] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0273.162] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0273.163] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153302.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153302.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0273.164] GetFileType (hFile=0x19c) returned 0x1 [0273.164] CloseHandle (hObject=0x19c) returned 1 [0273.165] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0273.165] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153302.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153302.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7850)) returned 1 [0273.165] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0273.165] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0273.165] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153302.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153302.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7850)) returned 1 [0273.166] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0273.166] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0273.166] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0273.166] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9658, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0153305.WMF", cAlternateFileName="")) returned 1 [0273.166] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0273.166] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0273.166] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0273.167] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0273.167] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0273.167] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0273.168] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153305.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153305.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0273.168] GetFileType (hFile=0x19c) returned 0x1 [0273.169] CloseHandle (hObject=0x19c) returned 1 [0273.169] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0273.169] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153305.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153305.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9658)) returned 1 [0273.169] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0273.169] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0273.169] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153305.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153305.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9658)) returned 1 [0273.170] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0273.170] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0273.170] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0273.170] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3c58, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0153307.WMF", cAlternateFileName="")) returned 1 [0273.170] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0273.170] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0273.170] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0273.170] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0273.170] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0273.171] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0273.171] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153307.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153307.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0273.172] GetFileType (hFile=0x19c) returned 0x1 [0273.172] CloseHandle (hObject=0x19c) returned 1 [0273.173] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0273.173] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153307.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153307.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3c58)) returned 1 [0273.173] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0273.173] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0273.173] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153307.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153307.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3c58)) returned 1 [0273.173] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0273.173] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0273.174] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0273.174] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4238, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0153313.WMF", cAlternateFileName="")) returned 1 [0273.174] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0273.174] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0273.174] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0273.174] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0273.174] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0273.174] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0273.175] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153313.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153313.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0273.177] GetFileType (hFile=0x19c) returned 0x1 [0273.177] CloseHandle (hObject=0x19c) returned 1 [0273.178] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0273.178] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153313.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153313.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4238)) returned 1 [0273.178] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0273.178] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0273.178] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153313.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153313.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4238)) returned 1 [0273.178] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0273.179] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0273.179] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0273.179] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4464, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0153398.WMF", cAlternateFileName="")) returned 1 [0273.179] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0273.179] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0273.179] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0273.179] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0273.179] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0273.179] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0273.180] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153398.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153398.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0273.181] GetFileType (hFile=0x19c) returned 0x1 [0273.181] CloseHandle (hObject=0x19c) returned 1 [0273.181] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0273.182] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153398.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153398.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4464)) returned 1 [0273.182] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0273.182] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0273.182] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153398.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153398.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4464)) returned 1 [0273.590] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0273.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0273.591] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0273.591] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaa396f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x85d0, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0153508.WMF", cAlternateFileName="")) returned 1 [0273.591] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385f0 [0273.591] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0273.591] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0273.591] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0273.591] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0273.592] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385f0 | out: hHeap=0x1f0000) returned 1 [0273.592] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153508.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153508.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0273.594] GetFileType (hFile=0x1c0) returned 0x1 [0273.595] CloseHandle (hObject=0x1c0) returned 1 [0273.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0273.595] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153508.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153508.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaa396f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x85d0)) returned 1 [0273.596] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0273.596] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0273.596] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153508.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153508.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaa396f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x85d0)) returned 1 [0273.596] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0273.596] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0273.596] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0273.596] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31d0, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0153514.WMF", cAlternateFileName="")) returned 1 [0273.596] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238690 [0273.597] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0273.597] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0273.597] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0273.597] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0273.597] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238690 | out: hHeap=0x1f0000) returned 1 [0273.598] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153514.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153514.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0273.599] GetFileType (hFile=0x1c0) returned 0x1 [0273.599] CloseHandle (hObject=0x1c0) returned 1 [0273.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0273.600] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153514.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153514.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31d0)) returned 1 [0273.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0273.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0273.601] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153514.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153514.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31d0)) returned 1 [0273.601] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0273.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0273.601] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0273.601] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d08, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0153516.WMF", cAlternateFileName="")) returned 1 [0273.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385f0 [0273.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0273.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0273.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0273.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0273.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385f0 | out: hHeap=0x1f0000) returned 1 [0273.603] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153516.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153516.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0273.605] GetFileType (hFile=0x1c0) returned 0x1 [0273.605] CloseHandle (hObject=0x1c0) returned 1 [0273.606] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0273.606] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153516.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153516.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d08)) returned 1 [0273.606] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0273.606] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0273.606] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153516.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153516.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d08)) returned 1 [0273.606] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0273.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0273.607] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0273.607] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30f0, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0153518.WMF", cAlternateFileName="")) returned 1 [0273.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238730 [0273.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0273.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0273.607] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0273.608] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0273.608] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238730 | out: hHeap=0x1f0000) returned 1 [0273.609] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153518.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153518.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0273.609] GetFileType (hFile=0x1c0) returned 0x1 [0273.610] CloseHandle (hObject=0x1c0) returned 1 [0273.610] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0273.610] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153518.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153518.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30f0)) returned 1 [0273.610] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0273.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0273.611] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153518.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153518.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30f0)) returned 1 [0273.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0273.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0273.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0273.611] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x560, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0156537.WMF", cAlternateFileName="")) returned 1 [0273.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238690 [0273.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0273.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0273.612] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0273.612] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0273.612] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238690 | out: hHeap=0x1f0000) returned 1 [0273.613] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0156537.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0156537.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0273.614] GetFileType (hFile=0x1c0) returned 0x1 [0273.615] CloseHandle (hObject=0x1c0) returned 1 [0273.615] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0273.615] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0156537.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0156537.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x560)) returned 1 [0273.615] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0273.615] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0273.615] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0156537.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0156537.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x560)) returned 1 [0273.616] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0273.616] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0273.616] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0273.616] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb66e, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0157167.WMF", cAlternateFileName="")) returned 1 [0273.616] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385c8 [0273.616] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0273.616] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0273.616] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0273.616] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0273.617] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385c8 | out: hHeap=0x1f0000) returned 1 [0273.617] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157167.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157167.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0273.618] GetFileType (hFile=0x1c0) returned 0x1 [0273.619] CloseHandle (hObject=0x1c0) returned 1 [0273.619] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0273.619] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157167.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157167.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb66e)) returned 1 [0273.620] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0273.620] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0273.620] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157167.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157167.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb66e)) returned 1 [0273.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0273.621] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0273.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0273.621] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x54d4, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0157177.WMF", cAlternateFileName="")) returned 1 [0273.621] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2386e0 [0273.621] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0273.621] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0273.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0273.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0273.622] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2386e0 | out: hHeap=0x1f0000) returned 1 [0273.622] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157177.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157177.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0273.623] GetFileType (hFile=0x1c0) returned 0x1 [0273.623] CloseHandle (hObject=0x1c0) returned 1 [0273.624] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0273.624] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157177.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157177.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x54d4)) returned 1 [0273.624] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0273.624] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0273.624] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157177.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157177.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x54d4)) returned 1 [0273.624] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0273.624] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0273.624] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0273.624] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45f8, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0157191.WMF", cAlternateFileName="")) returned 1 [0273.624] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238618 [0273.625] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0273.625] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0273.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0273.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0273.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238618 | out: hHeap=0x1f0000) returned 1 [0273.625] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157191.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157191.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0273.797] GetFileType (hFile=0x198) returned 0x1 [0273.797] CloseHandle (hObject=0x198) returned 1 [0273.797] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0273.798] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157191.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157191.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45f8)) returned 1 [0273.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0273.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0273.798] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157191.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157191.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45f8)) returned 1 [0273.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0273.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0273.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0273.798] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c84, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0157831.WMF", cAlternateFileName="")) returned 1 [0273.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238690 [0273.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0273.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0273.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0273.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0273.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238690 | out: hHeap=0x1f0000) returned 1 [0273.841] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157831.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157831.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0273.842] GetFileType (hFile=0x198) returned 0x1 [0273.843] CloseHandle (hObject=0x198) returned 1 [0273.843] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0273.843] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157831.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157831.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c84)) returned 1 [0273.843] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0273.843] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0273.843] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157831.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157831.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c84)) returned 1 [0273.844] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0273.844] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0273.844] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0273.844] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x48dc, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0158071.WMF", cAlternateFileName="")) returned 1 [0273.844] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2385f0 [0273.844] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0273.844] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0273.844] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0273.845] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0273.845] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2385f0 | out: hHeap=0x1f0000) returned 1 [0273.845] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0158071.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0158071.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0273.846] GetFileType (hFile=0x198) returned 0x1 [0273.847] CloseHandle (hObject=0x198) returned 1 [0273.847] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0273.847] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0158071.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0158071.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x48dc)) returned 1 [0273.848] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0273.848] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0273.848] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0158071.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0158071.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x48dc)) returned 1 [0273.848] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0273.848] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0273.848] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0273.849] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x462e, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0158477.WMF", cAlternateFileName="")) returned 1 [0273.849] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238578 [0273.849] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0273.849] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0273.849] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0273.849] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0273.850] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238578 | out: hHeap=0x1f0000) returned 1 [0273.850] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0158477.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0158477.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0273.858] GetFileType (hFile=0x198) returned 0x1 [0273.859] CloseHandle (hObject=0x198) returned 1 [0273.859] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0273.859] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0158477.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0158477.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x462e)) returned 1 [0273.859] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0273.860] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0273.860] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0158477.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0158477.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x462e)) returned 1 [0273.860] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0273.860] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0273.860] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0273.860] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x72de, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0160590.WMF", cAlternateFileName="")) returned 1 [0273.862] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238690 [0273.862] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0273.862] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0273.862] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0273.862] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0273.862] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238690 | out: hHeap=0x1f0000) returned 1 [0273.863] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0160590.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0160590.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0273.866] GetFileType (hFile=0x198) returned 0x1 [0273.866] CloseHandle (hObject=0x198) returned 1 [0273.867] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0273.867] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0160590.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0160590.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x72de)) returned 1 [0273.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0273.867] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0273.868] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0160590.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0160590.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x72de)) returned 1 [0273.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0273.868] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0273.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0273.868] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb594, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0164153.JPG", cAlternateFileName="")) returned 1 [0273.868] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2386b8 [0273.868] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0273.868] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0273.869] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0273.869] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0273.869] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2386b8 | out: hHeap=0x1f0000) returned 1 [0273.871] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0164153.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0164153.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0273.874] GetFileType (hFile=0x198) returned 0x1 [0273.875] CloseHandle (hObject=0x198) returned 1 [0273.875] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0273.875] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0164153.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0164153.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb594)) returned 1 [0274.192] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0274.192] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0274.192] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0164153.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0164153.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb594)) returned 1 [0274.192] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0274.192] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0274.192] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0274.192] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaa396f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaa396f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x51aa, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0168644.WMF", cAlternateFileName="")) returned 1 [0274.193] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238690 [0274.193] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0274.193] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0274.193] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0274.193] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0274.193] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238690 | out: hHeap=0x1f0000) returned 1 [0274.194] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0168644.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0168644.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0274.194] GetFileType (hFile=0x174) returned 0x1 [0274.194] CloseHandle (hObject=0x174) returned 1 [0274.195] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0274.195] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0168644.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0168644.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaa396f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaa396f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x51aa)) returned 1 [0274.195] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0274.195] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0274.195] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0168644.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0168644.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaa396f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaa396f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x51aa)) returned 1 [0274.195] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0274.195] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0274.196] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0274.196] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3888, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0171685.WMF", cAlternateFileName="")) returned 1 [0274.196] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238780 [0274.196] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0274.196] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0274.196] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0274.196] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0274.196] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238780 | out: hHeap=0x1f0000) returned 1 [0274.197] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0171685.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0171685.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0274.197] GetFileType (hFile=0x174) returned 0x1 [0274.198] CloseHandle (hObject=0x174) returned 1 [0274.198] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0274.198] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0171685.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0171685.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3888)) returned 1 [0274.198] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0274.198] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0274.198] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0171685.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0171685.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3888)) returned 1 [0274.198] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0274.198] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0274.198] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0274.198] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaa396f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ae8, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0171847.WMF", cAlternateFileName="")) returned 1 [0274.199] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238690 [0274.199] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0274.199] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0274.199] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0274.199] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0274.199] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238690 | out: hHeap=0x1f0000) returned 1 [0274.200] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0171847.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0171847.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0274.200] GetFileType (hFile=0x174) returned 0x1 [0274.200] CloseHandle (hObject=0x174) returned 1 [0274.200] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0274.201] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0171847.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0171847.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaa396f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ae8)) returned 1 [0274.201] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0274.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0274.201] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0171847.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0171847.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaa396f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ae8)) returned 1 [0274.201] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0274.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0274.201] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0274.201] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaa396f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaa396f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d18, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0172035.WMF", cAlternateFileName="")) returned 1 [0274.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238690 [0274.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0274.202] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0274.202] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0274.202] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0274.202] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238690 | out: hHeap=0x1f0000) returned 1 [0274.203] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172035.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0172035.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0274.203] GetFileType (hFile=0x174) returned 0x1 [0274.203] CloseHandle (hObject=0x174) returned 1 [0274.204] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0274.204] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172035.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0172035.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaa396f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaa396f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d18)) returned 1 [0274.204] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0274.204] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0274.204] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172035.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0172035.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaa396f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaa396f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d18)) returned 1 [0274.204] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0274.204] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0274.204] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0274.204] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b74, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0172067.WMF", cAlternateFileName="")) returned 1 [0274.204] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238780 [0274.205] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0274.205] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0274.205] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0274.205] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0274.205] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238780 | out: hHeap=0x1f0000) returned 1 [0274.206] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172067.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0172067.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0274.208] GetFileType (hFile=0x174) returned 0x1 [0274.208] CloseHandle (hObject=0x174) returned 1 [0274.208] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0274.209] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172067.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0172067.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b74)) returned 1 [0274.209] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0274.209] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0274.209] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172067.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0172067.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b74)) returned 1 [0274.209] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0274.209] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0274.209] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0274.210] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaa396f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3198, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0172193.WMF", cAlternateFileName="")) returned 1 [0274.210] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238780 [0274.210] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0274.210] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0274.211] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0274.211] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0274.211] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238780 | out: hHeap=0x1f0000) returned 1 [0274.213] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172193.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0172193.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0274.214] GetFileType (hFile=0x174) returned 0x1 [0274.214] CloseHandle (hObject=0x174) returned 1 [0274.214] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0274.215] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172193.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0172193.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaa396f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3198)) returned 1 [0274.215] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0274.215] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0274.215] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172193.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0172193.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaa396f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3198)) returned 1 [0274.215] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0274.215] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0274.215] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0274.215] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16e8, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0174315.WMF", cAlternateFileName="")) returned 1 [0274.216] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238780 [0274.216] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0274.216] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0274.216] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0274.216] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0274.216] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238780 | out: hHeap=0x1f0000) returned 1 [0274.217] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174315.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174315.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0274.218] GetFileType (hFile=0x174) returned 0x1 [0274.219] CloseHandle (hObject=0x174) returned 1 [0274.219] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0274.219] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174315.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174315.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16e8)) returned 1 [0274.219] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0274.219] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0274.219] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174315.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174315.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16e8)) returned 1 [0274.220] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0274.220] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0274.220] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0274.220] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2608, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0174635.WMF", cAlternateFileName="")) returned 1 [0274.220] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238578 [0274.220] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0274.220] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0274.220] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0274.221] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0274.221] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238578 | out: hHeap=0x1f0000) returned 1 [0274.221] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174635.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174635.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0274.222] GetFileType (hFile=0x174) returned 0x1 [0274.223] CloseHandle (hObject=0x174) returned 1 [0274.223] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0274.223] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174635.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174635.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2608)) returned 1 [0274.224] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0274.224] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0274.224] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174635.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174635.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2608)) returned 1 [0274.224] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0274.224] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0274.224] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0274.224] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13ec, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0174639.WMF", cAlternateFileName="")) returned 1 [0274.224] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384d8 [0274.225] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0274.225] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0274.225] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0274.225] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0274.225] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384d8 | out: hHeap=0x1f0000) returned 1 [0274.226] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174639.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174639.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0274.226] GetFileType (hFile=0x174) returned 0x1 [0274.227] CloseHandle (hObject=0x174) returned 1 [0274.227] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0274.227] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174639.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174639.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13ec)) returned 1 [0274.228] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0274.228] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0274.228] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174639.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174639.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13ec)) returned 1 [0274.228] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0274.228] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0274.228] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0274.229] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6196, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0174952.JPG", cAlternateFileName="")) returned 1 [0274.229] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238690 [0274.229] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0274.229] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0274.229] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0274.229] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0274.229] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238690 | out: hHeap=0x1f0000) returned 1 [0274.230] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174952.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174952.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0274.460] GetFileType (hFile=0x198) returned 0x1 [0274.461] CloseHandle (hObject=0x198) returned 1 [0274.461] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0274.461] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174952.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174952.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6196)) returned 1 [0274.461] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0274.461] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0274.461] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174952.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174952.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6196)) returned 1 [0274.461] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0274.461] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0274.461] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0274.461] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb57d, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0175361.JPG", cAlternateFileName="")) returned 1 [0274.461] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238780 [0274.461] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0274.461] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0274.462] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0274.462] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0274.462] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238780 | out: hHeap=0x1f0000) returned 1 [0274.505] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175361.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0175361.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0274.506] GetFileType (hFile=0x174) returned 0x1 [0274.507] CloseHandle (hObject=0x174) returned 1 [0274.507] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0274.507] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175361.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0175361.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb57d)) returned 1 [0274.508] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0274.508] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0274.508] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175361.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0175361.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb57d)) returned 1 [0274.508] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0274.508] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0274.508] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0274.508] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x38d8, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0175428.JPG", cAlternateFileName="")) returned 1 [0274.509] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0274.509] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0274.509] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0274.509] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0274.509] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0274.509] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0274.510] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175428.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0175428.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0274.511] GetFileType (hFile=0x174) returned 0x1 [0274.512] CloseHandle (hObject=0x174) returned 1 [0274.512] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0274.512] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175428.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0175428.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x38d8)) returned 1 [0274.512] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0274.513] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0274.513] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175428.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0175428.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x38d8)) returned 1 [0274.513] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0274.513] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0274.513] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0274.513] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb12e, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0177257.JPG", cAlternateFileName="")) returned 1 [0274.514] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0274.514] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0274.514] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0274.514] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0274.514] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0274.514] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0274.515] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177257.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0177257.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0274.516] GetFileType (hFile=0x174) returned 0x1 [0274.516] CloseHandle (hObject=0x174) returned 1 [0274.516] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0274.517] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177257.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0177257.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb12e)) returned 1 [0274.517] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0274.517] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0274.517] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177257.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0177257.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb12e)) returned 1 [0274.517] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0274.517] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0274.517] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0274.517] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd902, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0177806.JPG", cAlternateFileName="")) returned 1 [0274.518] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0274.518] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0274.518] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0274.518] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0274.518] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0274.518] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0274.519] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177806.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0177806.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0274.520] GetFileType (hFile=0x174) returned 0x1 [0274.520] CloseHandle (hObject=0x174) returned 1 [0274.521] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0274.521] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177806.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0177806.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd902)) returned 1 [0274.521] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0274.521] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0274.521] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177806.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0177806.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd902)) returned 1 [0274.521] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0274.522] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0274.522] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0274.522] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x907d, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0178348.JPG", cAlternateFileName="")) returned 1 [0274.522] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0274.522] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0274.522] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0274.522] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0274.522] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0274.522] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0274.523] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178348.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178348.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0274.523] GetFileType (hFile=0x174) returned 0x1 [0274.524] CloseHandle (hObject=0x174) returned 1 [0274.524] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0274.524] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178348.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178348.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x907d)) returned 1 [0274.525] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0274.525] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0274.525] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178348.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178348.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x907d)) returned 1 [0274.525] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0274.525] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0274.525] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0274.525] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7214, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0178459.JPG", cAlternateFileName="")) returned 1 [0274.525] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0274.526] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0274.526] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0274.526] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0274.526] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0274.526] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0274.527] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178459.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178459.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0274.528] GetFileType (hFile=0x174) returned 0x1 [0274.528] CloseHandle (hObject=0x174) returned 1 [0274.529] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0274.529] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178459.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178459.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7214)) returned 1 [0274.529] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0274.529] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0274.529] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178459.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178459.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7214)) returned 1 [0274.529] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0274.529] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0274.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0274.530] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x67a3, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0178460.JPG", cAlternateFileName="")) returned 1 [0274.530] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0274.530] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0274.530] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0274.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0274.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0274.530] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0274.531] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178460.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178460.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0274.531] GetFileType (hFile=0x174) returned 0x1 [0274.532] CloseHandle (hObject=0x174) returned 1 [0274.533] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0274.533] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178460.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178460.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x67a3)) returned 1 [0274.533] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0274.533] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0274.533] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178460.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178460.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x67a3)) returned 1 [0274.533] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0274.533] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0274.533] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0274.534] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5de2, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0178523.JPG", cAlternateFileName="")) returned 1 [0274.534] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0274.534] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0274.534] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0274.534] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0274.534] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0274.534] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0274.535] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178523.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178523.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0274.536] GetFileType (hFile=0x174) returned 0x1 [0274.537] CloseHandle (hObject=0x174) returned 1 [0274.537] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0274.538] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178523.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178523.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5de2)) returned 1 [0274.538] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0274.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0274.538] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178523.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178523.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5de2)) returned 1 [0274.538] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0274.538] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0274.538] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0274.539] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5b2a, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0178632.JPG", cAlternateFileName="")) returned 1 [0274.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0274.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0274.539] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0274.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0274.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0274.539] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0274.540] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178632.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178632.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0274.597] GetFileType (hFile=0x174) returned 0x1 [0274.597] CloseHandle (hObject=0x174) returned 1 [0274.598] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0274.598] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178632.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178632.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5b2a)) returned 1 [0274.598] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0274.598] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0274.598] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178632.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178632.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5b2a)) returned 1 [0274.599] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0274.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0274.599] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0274.599] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7d26, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0178639.JPG", cAlternateFileName="")) returned 1 [0274.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0274.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0274.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0274.599] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0274.599] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0274.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0274.600] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178639.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178639.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0274.600] GetFileType (hFile=0x174) returned 0x1 [0274.601] CloseHandle (hObject=0x174) returned 1 [0274.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0274.601] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178639.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178639.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7d26)) returned 1 [0274.601] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0274.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0274.602] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178639.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178639.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7d26)) returned 1 [0274.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0274.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0274.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0274.602] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8a0c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0178932.JPG", cAlternateFileName="")) returned 1 [0274.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0274.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0274.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0274.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0274.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0274.603] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0274.603] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178932.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178932.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0274.603] GetFileType (hFile=0x174) returned 0x1 [0274.604] CloseHandle (hObject=0x174) returned 1 [0274.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0274.604] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178932.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178932.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8a0c)) returned 1 [0274.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0274.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0274.605] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178932.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178932.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8a0c)) returned 1 [0274.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0274.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0274.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0274.605] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7d6e, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0179963.JPG", cAlternateFileName="")) returned 1 [0274.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0274.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0274.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0274.606] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0274.606] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0274.606] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0274.606] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0179963.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0179963.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0274.645] GetFileType (hFile=0x174) returned 0x1 [0274.646] CloseHandle (hObject=0x174) returned 1 [0274.646] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0274.646] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0179963.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0179963.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7d6e)) returned 1 [0274.646] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0274.646] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0274.646] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0179963.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0179963.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7d6e)) returned 1 [0274.646] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0274.646] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0274.647] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0274.647] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x40e7, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0182689.JPG", cAlternateFileName="")) returned 1 [0274.647] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0274.647] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0274.647] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0274.647] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0274.647] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0274.647] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0274.647] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182689.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182689.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0274.649] GetFileType (hFile=0x174) returned 0x1 [0274.649] CloseHandle (hObject=0x174) returned 1 [0274.649] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0274.649] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182689.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182689.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x40e7)) returned 1 [0274.650] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0274.650] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0274.650] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182689.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182689.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x40e7)) returned 1 [0274.650] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0274.650] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0274.650] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0274.650] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5f48, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0182888.WMF", cAlternateFileName="")) returned 1 [0274.650] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0274.650] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0274.650] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0274.650] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0274.650] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0274.650] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0274.651] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182888.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182888.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0274.651] GetFileType (hFile=0x174) returned 0x1 [0274.651] CloseHandle (hObject=0x174) returned 1 [0274.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0274.652] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182888.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182888.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5f48)) returned 1 [0274.652] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0274.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0274.652] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182888.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182888.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5f48)) returned 1 [0274.652] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0274.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0274.652] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0274.652] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b2e, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0182898.WMF", cAlternateFileName="")) returned 1 [0274.653] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0274.653] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0274.653] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0274.653] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0274.653] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0274.653] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0274.654] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182898.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182898.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0274.655] GetFileType (hFile=0x174) returned 0x1 [0274.655] CloseHandle (hObject=0x174) returned 1 [0274.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0274.655] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182898.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182898.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b2e)) returned 1 [0274.655] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0274.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0274.656] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182898.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182898.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b2e)) returned 1 [0274.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0274.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0274.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0274.656] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e8e, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0182902.WMF", cAlternateFileName="")) returned 1 [0274.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0274.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0274.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0274.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0274.657] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0274.657] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0274.657] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182902.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182902.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0274.658] GetFileType (hFile=0x174) returned 0x1 [0274.658] CloseHandle (hObject=0x174) returned 1 [0274.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0274.658] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182902.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182902.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e8e)) returned 1 [0274.659] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0274.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0274.659] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182902.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182902.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e8e)) returned 1 [0274.659] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0274.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0274.659] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0274.659] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ed2, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0182946.WMF", cAlternateFileName="")) returned 1 [0274.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0274.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0274.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0274.660] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0274.661] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0274.661] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0274.662] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182946.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182946.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0274.662] GetFileType (hFile=0x174) returned 0x1 [0274.663] CloseHandle (hObject=0x174) returned 1 [0274.663] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0274.663] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182946.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182946.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ed2)) returned 1 [0274.664] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0274.664] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0274.664] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182946.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182946.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ed2)) returned 1 [0274.664] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0274.664] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0274.664] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0274.664] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x745c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0183172.WMF", cAlternateFileName="")) returned 1 [0274.665] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0274.665] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0274.665] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0274.665] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0274.665] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0274.665] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0274.666] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183172.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183172.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0274.667] GetFileType (hFile=0x174) returned 0x1 [0274.667] CloseHandle (hObject=0x174) returned 1 [0274.668] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0274.668] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183172.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183172.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x745c)) returned 1 [0274.668] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0274.668] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0274.668] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183172.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183172.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x745c)) returned 1 [0274.668] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0274.668] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0274.669] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0274.669] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6fd2, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0183174.WMF", cAlternateFileName="")) returned 1 [0274.669] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0274.669] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0274.669] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0274.669] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0274.669] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0274.669] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0274.670] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183174.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183174.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0274.671] GetFileType (hFile=0x174) returned 0x1 [0274.672] CloseHandle (hObject=0x174) returned 1 [0274.672] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0274.672] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183174.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183174.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6fd2)) returned 1 [0274.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0274.672] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0274.672] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183174.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183174.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6fd2)) returned 1 [0274.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0274.673] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0274.673] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0274.673] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5f6e, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0183198.WMF", cAlternateFileName="")) returned 1 [0274.673] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0274.673] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0274.673] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0274.674] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0274.674] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0274.674] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0274.674] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183198.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183198.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0274.675] GetFileType (hFile=0x174) returned 0x1 [0274.675] CloseHandle (hObject=0x174) returned 1 [0274.676] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0274.676] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183198.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183198.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5f6e)) returned 1 [0274.677] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0274.677] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0274.677] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183198.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183198.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5f6e)) returned 1 [0274.677] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0274.677] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0274.677] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0274.677] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b4a, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0183574.WMF", cAlternateFileName="")) returned 1 [0274.678] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0274.678] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0274.678] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0274.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0274.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0274.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0274.679] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183574.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183574.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0275.103] GetFileType (hFile=0x1c0) returned 0x1 [0275.104] CloseHandle (hObject=0x1c0) returned 1 [0275.104] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0275.104] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183574.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183574.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b4a)) returned 1 [0275.105] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0275.105] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0275.105] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183574.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183574.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b4a)) returned 1 [0275.105] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0275.105] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0275.105] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0275.105] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c88, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0185670.WMF", cAlternateFileName="")) returned 1 [0275.105] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0275.106] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0275.106] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0275.106] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0275.106] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0275.106] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0275.107] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185670.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185670.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0275.107] GetFileType (hFile=0x1c0) returned 0x1 [0275.108] CloseHandle (hObject=0x1c0) returned 1 [0275.108] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0275.108] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185670.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185670.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c88)) returned 1 [0275.108] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0275.109] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0275.109] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185670.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185670.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c88)) returned 1 [0275.109] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0275.109] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0275.109] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0275.109] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e46, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0185774.WMF", cAlternateFileName="")) returned 1 [0275.109] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0275.109] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0275.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0275.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0275.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0275.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0275.111] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185774.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185774.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0275.111] GetFileType (hFile=0x1c0) returned 0x1 [0275.111] CloseHandle (hObject=0x1c0) returned 1 [0275.112] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0275.112] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185774.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185774.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e46)) returned 1 [0275.112] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0275.112] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0275.113] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185774.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185774.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e46)) returned 1 [0275.113] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0275.113] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0275.113] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0275.113] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x69d8, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0185776.WMF", cAlternateFileName="")) returned 1 [0275.114] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0275.114] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0275.114] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0275.114] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0275.114] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0275.114] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0275.115] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185776.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185776.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0275.116] GetFileType (hFile=0x1c0) returned 0x1 [0275.116] CloseHandle (hObject=0x1c0) returned 1 [0275.117] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0275.117] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185776.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185776.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x69d8)) returned 1 [0275.117] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0275.117] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0275.117] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185776.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185776.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x69d8)) returned 1 [0275.117] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0275.118] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0275.118] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0275.118] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x62e0, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0185778.WMF", cAlternateFileName="")) returned 1 [0275.118] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0275.118] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0275.118] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0275.118] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0275.118] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0275.119] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0275.119] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185778.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185778.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0275.120] GetFileType (hFile=0x1c0) returned 0x1 [0275.120] CloseHandle (hObject=0x1c0) returned 1 [0275.121] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0275.121] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185778.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185778.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x62e0)) returned 1 [0275.121] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0275.121] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0275.121] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185778.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185778.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x62e0)) returned 1 [0275.122] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0275.122] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0275.122] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0275.122] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe956, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0185780.WMF", cAlternateFileName="")) returned 1 [0275.122] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0275.122] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0275.122] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0275.123] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0275.123] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0275.123] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0275.124] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185780.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185780.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0275.124] GetFileType (hFile=0x1c0) returned 0x1 [0275.125] CloseHandle (hObject=0x1c0) returned 1 [0275.125] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0275.125] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185780.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185780.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe956)) returned 1 [0275.125] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0275.125] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0275.126] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185780.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185780.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe956)) returned 1 [0275.126] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0275.126] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0275.126] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0275.126] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x99a2, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0185786.WMF", cAlternateFileName="")) returned 1 [0275.126] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0275.127] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0275.127] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0275.127] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0275.127] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0275.127] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0275.128] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185786.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185786.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0275.128] GetFileType (hFile=0x1c0) returned 0x1 [0275.130] CloseHandle (hObject=0x1c0) returned 1 [0275.130] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0275.130] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185786.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185786.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x99a2)) returned 1 [0275.131] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0275.131] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0275.131] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185786.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185786.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x99a2)) returned 1 [0275.131] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0275.131] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0275.131] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0275.132] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x50b6, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0185790.WMF", cAlternateFileName="")) returned 1 [0275.132] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0275.132] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0275.132] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0275.132] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0275.132] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0275.132] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0275.133] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185790.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185790.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0275.133] GetFileType (hFile=0x1c0) returned 0x1 [0275.134] CloseHandle (hObject=0x1c0) returned 1 [0275.134] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0275.134] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185790.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185790.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x50b6)) returned 1 [0275.135] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0275.135] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0275.135] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185790.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185790.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x50b6)) returned 1 [0275.135] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0275.135] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0275.135] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0275.136] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x650c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0185796.WMF", cAlternateFileName="")) returned 1 [0275.136] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0275.136] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0275.136] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0275.136] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0275.136] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0275.136] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0275.137] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185796.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185796.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0275.382] GetFileType (hFile=0x21c) returned 0x1 [0275.383] CloseHandle (hObject=0x21c) returned 1 [0275.383] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0275.383] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185796.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185796.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x650c)) returned 1 [0275.384] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0275.384] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0275.384] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185796.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185796.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x650c)) returned 1 [0275.384] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0275.384] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0275.384] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0275.384] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8420, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0185798.WMF", cAlternateFileName="")) returned 1 [0275.384] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0275.384] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0275.385] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0275.385] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0275.385] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0275.385] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0275.473] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185798.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185798.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0275.474] GetFileType (hFile=0x19c) returned 0x1 [0275.474] CloseHandle (hObject=0x19c) returned 1 [0275.475] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0275.475] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185798.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185798.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8420)) returned 1 [0275.475] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0275.475] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0275.475] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185798.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185798.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8420)) returned 1 [0275.475] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0275.476] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0275.476] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0275.476] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5eae, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0185800.WMF", cAlternateFileName="")) returned 1 [0275.476] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0275.476] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0275.476] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0275.476] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0275.476] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0275.476] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0275.477] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185800.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185800.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0275.477] GetFileType (hFile=0x19c) returned 0x1 [0275.478] CloseHandle (hObject=0x19c) returned 1 [0275.478] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0275.479] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185800.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185800.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5eae)) returned 1 [0275.479] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0275.479] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0275.479] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185800.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185800.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5eae)) returned 1 [0275.479] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0275.479] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0275.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0275.480] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x773a, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0185806.WMF", cAlternateFileName="")) returned 1 [0275.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0275.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0275.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0275.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0275.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0275.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0275.481] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185806.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185806.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0275.482] GetFileType (hFile=0x19c) returned 0x1 [0275.482] CloseHandle (hObject=0x19c) returned 1 [0275.483] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0275.483] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185806.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185806.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x773a)) returned 1 [0275.483] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0275.483] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0275.483] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185806.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185806.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x773a)) returned 1 [0275.483] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0275.483] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0275.484] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0275.484] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b8e, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0185818.WMF", cAlternateFileName="")) returned 1 [0275.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0275.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0275.484] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0275.484] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0275.484] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0275.484] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0275.485] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185818.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185818.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0275.485] GetFileType (hFile=0x19c) returned 0x1 [0275.486] CloseHandle (hObject=0x19c) returned 1 [0275.486] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0275.486] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185818.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185818.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b8e)) returned 1 [0275.486] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0275.486] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0275.486] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185818.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185818.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b8e)) returned 1 [0275.487] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0275.487] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0275.487] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0275.487] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e74, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0185828.WMF", cAlternateFileName="")) returned 1 [0275.487] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0275.487] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0275.487] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0275.487] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0275.488] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0275.488] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0275.489] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185828.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185828.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0275.489] GetFileType (hFile=0x19c) returned 0x1 [0275.490] CloseHandle (hObject=0x19c) returned 1 [0275.490] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0275.491] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185828.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185828.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e74)) returned 1 [0275.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0275.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0275.491] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185828.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185828.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e74)) returned 1 [0275.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0275.491] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0275.491] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0275.492] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2182, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0185834.WMF", cAlternateFileName="")) returned 1 [0275.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0275.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0275.492] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0275.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0275.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0275.492] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0275.493] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185834.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185834.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0275.493] GetFileType (hFile=0x19c) returned 0x1 [0275.494] CloseHandle (hObject=0x19c) returned 1 [0275.494] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0275.494] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185834.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185834.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2182)) returned 1 [0275.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0275.495] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0275.495] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185834.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185834.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2182)) returned 1 [0275.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0275.495] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0275.495] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0275.495] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x37e4, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0185842.WMF", cAlternateFileName="")) returned 1 [0275.496] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0275.496] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0275.496] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0275.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0275.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0275.496] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0275.497] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185842.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185842.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0275.497] GetFileType (hFile=0x19c) returned 0x1 [0275.498] CloseHandle (hObject=0x19c) returned 1 [0275.498] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0275.498] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185842.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185842.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x37e4)) returned 1 [0275.499] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0275.499] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0275.499] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185842.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185842.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x37e4)) returned 1 [0275.499] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0275.499] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0275.499] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0275.499] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21da, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0186346.WMF", cAlternateFileName="")) returned 1 [0275.500] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0275.500] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0275.500] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0275.500] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0275.500] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0275.500] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0275.501] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186346.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186346.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0275.501] GetFileType (hFile=0x19c) returned 0x1 [0275.502] CloseHandle (hObject=0x19c) returned 1 [0275.502] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0275.502] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186346.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186346.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21da)) returned 1 [0275.502] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0275.502] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0275.503] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186346.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186346.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21da)) returned 1 [0275.503] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0275.503] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0275.503] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0275.503] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x843a, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0186360.WMF", cAlternateFileName="")) returned 1 [0275.503] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0275.503] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0275.503] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0275.504] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0275.514] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0275.514] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0275.515] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186360.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186360.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0275.516] GetFileType (hFile=0x19c) returned 0x1 [0275.516] CloseHandle (hObject=0x19c) returned 1 [0275.516] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0275.516] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186360.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186360.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x843a)) returned 1 [0275.517] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0275.517] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0275.517] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186360.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186360.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x843a)) returned 1 [0275.517] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0275.517] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0275.517] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0275.517] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x44fe, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0186362.WMF", cAlternateFileName="")) returned 1 [0275.518] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0275.518] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0275.518] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0275.518] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0275.518] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0275.518] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0275.519] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186362.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186362.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0275.519] GetFileType (hFile=0x19c) returned 0x1 [0275.519] CloseHandle (hObject=0x19c) returned 1 [0275.911] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0275.911] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186362.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186362.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x44fe)) returned 1 [0275.911] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0275.911] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0275.911] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186362.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186362.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x44fe)) returned 1 [0275.911] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0275.911] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0275.911] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0275.911] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4724, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0186364.WMF", cAlternateFileName="")) returned 1 [0275.912] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0275.912] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0275.912] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0275.912] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0275.912] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0275.912] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0275.913] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186364.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186364.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0275.913] GetFileType (hFile=0x19c) returned 0x1 [0275.914] CloseHandle (hObject=0x19c) returned 1 [0275.914] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0275.914] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186364.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186364.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4724)) returned 1 [0275.914] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0275.915] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0275.915] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186364.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186364.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4724)) returned 1 [0275.915] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0275.915] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0275.915] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0275.915] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19c4, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0187647.WMF", cAlternateFileName="")) returned 1 [0275.915] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0275.915] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0275.916] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0275.916] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0275.916] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0275.916] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0275.916] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187647.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187647.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0275.917] GetFileType (hFile=0x19c) returned 0x1 [0275.917] CloseHandle (hObject=0x19c) returned 1 [0275.917] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0275.918] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187647.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187647.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19c4)) returned 1 [0275.918] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0275.918] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0275.918] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187647.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187647.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19c4)) returned 1 [0275.918] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0275.918] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0275.918] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0275.918] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1500, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0187815.WMF", cAlternateFileName="")) returned 1 [0275.919] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0275.919] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0275.919] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0275.919] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0275.919] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0275.919] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0275.920] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187815.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187815.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0275.920] GetFileType (hFile=0x19c) returned 0x1 [0275.920] CloseHandle (hObject=0x19c) returned 1 [0275.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0275.921] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187815.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187815.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1500)) returned 1 [0275.921] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0275.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0275.921] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187815.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187815.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1500)) returned 1 [0275.921] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0275.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0275.921] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0275.922] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d7c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0187817.WMF", cAlternateFileName="")) returned 1 [0275.922] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0275.922] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0275.922] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0275.922] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0275.922] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0275.922] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0275.923] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187817.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187817.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0275.923] GetFileType (hFile=0x19c) returned 0x1 [0275.924] CloseHandle (hObject=0x19c) returned 1 [0275.924] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0275.924] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187817.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187817.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d7c)) returned 1 [0275.924] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0275.925] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0275.925] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187817.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187817.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d7c)) returned 1 [0275.925] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0275.925] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0275.925] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0275.925] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2870, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0187819.WMF", cAlternateFileName="")) returned 1 [0275.925] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0275.925] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0275.926] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0275.927] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0275.927] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0275.927] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0275.928] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187819.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187819.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0275.928] GetFileType (hFile=0x19c) returned 0x1 [0275.929] CloseHandle (hObject=0x19c) returned 1 [0275.929] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0275.929] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187819.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187819.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2870)) returned 1 [0275.929] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0275.929] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0275.930] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187819.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187819.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2870)) returned 1 [0275.930] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0275.930] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0275.930] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0275.930] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d4c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0187825.WMF", cAlternateFileName="")) returned 1 [0275.930] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0275.930] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0275.931] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0275.931] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0275.931] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0275.931] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0275.932] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187825.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187825.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0275.932] GetFileType (hFile=0x19c) returned 0x1 [0275.933] CloseHandle (hObject=0x19c) returned 1 [0275.933] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0275.933] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187825.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187825.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d4c)) returned 1 [0275.934] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0275.934] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0275.934] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187825.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187825.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d4c)) returned 1 [0275.934] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0275.934] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0275.934] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0275.935] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3040, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0187829.WMF", cAlternateFileName="")) returned 1 [0275.935] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0275.935] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0275.935] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0275.935] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0275.935] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0275.936] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0275.937] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187829.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187829.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0275.937] GetFileType (hFile=0x19c) returned 0x1 [0275.938] CloseHandle (hObject=0x19c) returned 1 [0275.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0275.938] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187829.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187829.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3040)) returned 1 [0275.939] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0275.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0275.939] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187829.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187829.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3040)) returned 1 [0275.939] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0275.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0275.939] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0275.939] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2480, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0187835.WMF", cAlternateFileName="")) returned 1 [0275.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0275.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0275.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0275.940] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0275.940] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0275.940] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0275.941] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187835.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187835.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0275.942] GetFileType (hFile=0x19c) returned 0x1 [0275.943] CloseHandle (hObject=0x19c) returned 1 [0275.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0275.943] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187835.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187835.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2480)) returned 1 [0275.943] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0275.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0275.944] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187835.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187835.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2480)) returned 1 [0275.944] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0275.944] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0275.944] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0275.944] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3fe2, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0187837.WMF", cAlternateFileName="")) returned 1 [0275.944] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0275.944] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0275.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0275.945] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0275.945] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0275.945] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0275.946] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187837.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187837.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0275.946] GetFileType (hFile=0x19c) returned 0x1 [0275.947] CloseHandle (hObject=0x19c) returned 1 [0275.947] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0275.947] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187837.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187837.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3fe2)) returned 1 [0275.947] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0275.947] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0275.948] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187837.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187837.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3fe2)) returned 1 [0275.948] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0275.948] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0275.948] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0275.948] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14fc, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0187839.WMF", cAlternateFileName="")) returned 1 [0275.948] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0275.948] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0275.948] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0275.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0275.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0275.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0275.950] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187839.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187839.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0275.950] GetFileType (hFile=0x19c) returned 0x1 [0275.951] CloseHandle (hObject=0x19c) returned 1 [0275.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0275.951] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187839.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187839.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14fc)) returned 1 [0275.951] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0275.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0275.952] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187839.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187839.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14fc)) returned 1 [0275.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0275.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0275.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0275.952] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bcc, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0187847.WMF", cAlternateFileName="")) returned 1 [0275.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0275.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0275.953] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0275.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0275.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0275.953] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0275.954] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187847.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187847.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0275.954] GetFileType (hFile=0x19c) returned 0x1 [0275.955] CloseHandle (hObject=0x19c) returned 1 [0275.955] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0275.955] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187847.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187847.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bcc)) returned 1 [0275.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0275.956] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0275.956] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187847.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187847.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bcc)) returned 1 [0275.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0275.956] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0275.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0275.957] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d94, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0187849.WMF", cAlternateFileName="")) returned 1 [0275.957] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0276.213] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0276.213] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0276.213] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0276.213] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0276.213] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0276.302] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187849.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187849.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0276.302] GetFileType (hFile=0x21c) returned 0x1 [0276.302] CloseHandle (hObject=0x21c) returned 1 [0276.303] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0276.303] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187849.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187849.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d94)) returned 1 [0276.303] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0276.303] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0276.304] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187849.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187849.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d94)) returned 1 [0276.304] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0276.304] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0276.304] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0276.304] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x221c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0187851.WMF", cAlternateFileName="")) returned 1 [0276.304] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0276.304] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0276.305] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0276.305] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0276.305] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0276.305] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0276.306] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187851.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187851.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0276.306] GetFileType (hFile=0x21c) returned 0x1 [0276.307] CloseHandle (hObject=0x21c) returned 1 [0276.307] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0276.308] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187851.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187851.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x221c)) returned 1 [0276.308] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0276.308] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0276.308] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187851.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187851.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x221c)) returned 1 [0276.308] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0276.308] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0276.309] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0276.309] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaac, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0187859.WMF", cAlternateFileName="")) returned 1 [0276.309] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0276.309] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0276.309] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0276.309] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0276.309] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0276.310] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0276.310] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187859.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187859.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0276.311] GetFileType (hFile=0x21c) returned 0x1 [0276.312] CloseHandle (hObject=0x21c) returned 1 [0276.316] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0276.316] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187859.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187859.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaac)) returned 1 [0276.316] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0276.317] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0276.317] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187859.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187859.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaac)) returned 1 [0276.317] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0276.317] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0276.317] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0276.317] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2394, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0187861.WMF", cAlternateFileName="")) returned 1 [0276.318] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0276.318] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0276.318] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0276.318] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0276.318] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0276.318] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0276.319] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187861.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187861.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0276.320] GetFileType (hFile=0x21c) returned 0x1 [0276.320] CloseHandle (hObject=0x21c) returned 1 [0276.321] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0276.321] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187861.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187861.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2394)) returned 1 [0276.321] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0276.321] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0276.321] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187861.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187861.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2394)) returned 1 [0276.321] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0276.321] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0276.322] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0276.322] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a44, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0187863.WMF", cAlternateFileName="")) returned 1 [0276.322] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0276.322] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0276.322] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0276.322] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0276.322] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0276.322] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0276.323] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187863.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187863.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0276.324] GetFileType (hFile=0x21c) returned 0x1 [0276.324] CloseHandle (hObject=0x21c) returned 1 [0276.325] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0276.325] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187863.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187863.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a44)) returned 1 [0276.325] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0276.325] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0276.325] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187863.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187863.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a44)) returned 1 [0276.325] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0276.326] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0276.326] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0276.326] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1258, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0187881.WMF", cAlternateFileName="")) returned 1 [0276.326] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0276.326] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0276.326] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0276.326] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0276.326] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0276.327] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0276.327] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187881.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187881.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0276.328] GetFileType (hFile=0x21c) returned 0x1 [0276.328] CloseHandle (hObject=0x21c) returned 1 [0276.328] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0276.329] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187881.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187881.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1258)) returned 1 [0276.329] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0276.329] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0276.329] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187881.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187881.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1258)) returned 1 [0276.329] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0276.329] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0276.329] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0276.330] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x834, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0187883.WMF", cAlternateFileName="")) returned 1 [0276.331] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0276.331] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0276.331] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0276.331] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0276.331] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0276.331] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0276.374] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187883.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187883.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0276.375] GetFileType (hFile=0x21c) returned 0x1 [0276.375] CloseHandle (hObject=0x21c) returned 1 [0276.376] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0276.376] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187883.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187883.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x834)) returned 1 [0276.376] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0276.376] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0276.376] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187883.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187883.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x834)) returned 1 [0276.377] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0276.377] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0276.377] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0276.377] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15f4, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0187893.WMF", cAlternateFileName="")) returned 1 [0276.377] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0276.377] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0276.378] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0276.378] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0276.378] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0276.378] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0276.739] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187893.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187893.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0276.739] GetFileType (hFile=0x1e0) returned 0x1 [0276.740] CloseHandle (hObject=0x1e0) returned 1 [0276.740] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0276.740] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187893.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187893.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15f4)) returned 1 [0276.740] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0276.740] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0276.741] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187893.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187893.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15f4)) returned 1 [0276.741] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0276.741] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0276.741] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0276.741] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd90, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0187895.WMF", cAlternateFileName="")) returned 1 [0276.741] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0276.741] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0276.741] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0276.742] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0276.742] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0276.742] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0276.743] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187895.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187895.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0276.743] GetFileType (hFile=0x1e0) returned 0x1 [0276.743] CloseHandle (hObject=0x1e0) returned 1 [0276.744] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0276.744] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187895.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187895.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd90)) returned 1 [0276.744] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0276.744] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0276.744] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187895.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187895.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd90)) returned 1 [0276.744] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0276.745] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0276.745] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0276.745] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1388, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0187921.WMF", cAlternateFileName="")) returned 1 [0276.745] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0276.745] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0276.745] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0276.745] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0276.745] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0276.745] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0276.746] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187921.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187921.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0276.747] GetFileType (hFile=0x1e0) returned 0x1 [0276.747] CloseHandle (hObject=0x1e0) returned 1 [0276.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0276.748] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187921.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187921.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1388)) returned 1 [0276.748] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0276.749] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0276.749] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187921.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187921.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1388)) returned 1 [0276.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0276.749] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0276.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0276.749] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x29dc, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0188511.WMF", cAlternateFileName="")) returned 1 [0276.750] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0276.750] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0276.750] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0276.750] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0276.750] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0276.750] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0276.751] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188511.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188511.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0276.752] GetFileType (hFile=0x1e0) returned 0x1 [0276.752] CloseHandle (hObject=0x1e0) returned 1 [0276.753] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0276.753] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188511.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188511.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x29dc)) returned 1 [0276.753] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0276.753] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0276.753] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188511.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188511.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x29dc)) returned 1 [0276.754] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0276.754] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0276.754] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0276.754] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3004, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0188513.WMF", cAlternateFileName="")) returned 1 [0276.755] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0276.755] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0276.755] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0276.755] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0276.755] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0276.755] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0276.756] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188513.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188513.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0276.756] GetFileType (hFile=0x1e0) returned 0x1 [0276.757] CloseHandle (hObject=0x1e0) returned 1 [0276.757] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0276.758] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188513.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188513.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3004)) returned 1 [0276.758] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0276.758] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0276.758] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188513.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188513.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3004)) returned 1 [0276.758] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0276.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0276.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0276.759] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16c0, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0188519.WMF", cAlternateFileName="")) returned 1 [0276.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0276.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0276.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0276.760] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0276.760] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0276.760] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0276.761] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188519.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188519.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0276.761] GetFileType (hFile=0x1e0) returned 0x1 [0276.762] CloseHandle (hObject=0x1e0) returned 1 [0276.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0276.762] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188519.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188519.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16c0)) returned 1 [0276.763] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0276.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0276.763] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188519.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188519.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16c0)) returned 1 [0276.763] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0276.763] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0276.763] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0276.763] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b5c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0188587.WMF", cAlternateFileName="")) returned 1 [0276.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0276.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0276.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0276.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0276.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0276.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0276.765] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188587.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188587.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0276.766] GetFileType (hFile=0x1e0) returned 0x1 [0276.766] CloseHandle (hObject=0x1e0) returned 1 [0276.767] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0276.767] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188587.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188587.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b5c)) returned 1 [0276.767] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0276.767] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0276.768] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188587.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188587.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b5c)) returned 1 [0276.768] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0276.768] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0276.768] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0276.768] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3e9e, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0188667.WMF", cAlternateFileName="")) returned 1 [0276.768] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0276.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0276.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0276.769] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0276.769] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0276.769] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0276.771] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188667.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188667.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0276.772] GetFileType (hFile=0x1e0) returned 0x1 [0276.772] CloseHandle (hObject=0x1e0) returned 1 [0276.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0276.773] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188667.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188667.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3e9e)) returned 1 [0276.773] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0276.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0276.773] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188667.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188667.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3e9e)) returned 1 [0276.773] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0276.774] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0276.774] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0276.774] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x73a2, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0188669.WMF", cAlternateFileName="")) returned 1 [0276.774] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0276.774] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0276.774] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0276.775] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0276.775] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0276.775] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0276.776] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188669.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188669.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0276.777] GetFileType (hFile=0x1e0) returned 0x1 [0276.777] CloseHandle (hObject=0x1e0) returned 1 [0276.778] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0276.778] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188669.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188669.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x73a2)) returned 1 [0276.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0276.778] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0276.778] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188669.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188669.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x73a2)) returned 1 [0276.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0276.779] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0276.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0276.779] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x336a, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0188679.WMF", cAlternateFileName="")) returned 1 [0276.779] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0276.779] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0276.779] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0276.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0276.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0276.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0276.780] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188679.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188679.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0276.781] GetFileType (hFile=0x1e0) returned 0x1 [0276.782] CloseHandle (hObject=0x1e0) returned 1 [0276.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0276.782] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188679.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188679.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x336a)) returned 1 [0276.783] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0276.783] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0276.783] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188679.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188679.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x336a)) returned 1 [0276.783] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0276.783] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0276.783] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0276.783] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ca4, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0195248.WMF", cAlternateFileName="")) returned 1 [0276.783] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0276.784] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0276.784] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0276.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0276.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0276.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0276.785] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195248.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195248.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0277.051] GetFileType (hFile=0x1e0) returned 0x1 [0277.052] CloseHandle (hObject=0x1e0) returned 1 [0277.052] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0277.052] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195248.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195248.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ca4)) returned 1 [0277.052] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0277.052] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0277.053] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195248.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195248.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ca4)) returned 1 [0277.053] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0277.053] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0277.053] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0277.053] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11b6, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0195254.WMF", cAlternateFileName="")) returned 1 [0277.053] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0277.053] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0277.053] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0277.053] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0277.053] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0277.054] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0277.054] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195254.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195254.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0277.054] GetFileType (hFile=0x1e0) returned 0x1 [0277.055] CloseHandle (hObject=0x1e0) returned 1 [0277.055] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0277.055] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195254.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195254.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11b6)) returned 1 [0277.055] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0277.055] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0277.055] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195254.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195254.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11b6)) returned 1 [0277.056] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0277.056] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0277.056] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0277.056] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x207a, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0195260.WMF", cAlternateFileName="")) returned 1 [0277.056] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0277.056] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0277.056] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0277.056] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0277.056] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0277.056] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0277.057] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195260.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195260.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0277.057] GetFileType (hFile=0x1e0) returned 0x1 [0277.058] CloseHandle (hObject=0x1e0) returned 1 [0277.058] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0277.058] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195260.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195260.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x207a)) returned 1 [0277.058] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0277.058] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0277.058] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195260.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195260.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x207a)) returned 1 [0277.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0277.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0277.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0277.059] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x72f8, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0195320.WMF", cAlternateFileName="")) returned 1 [0277.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0277.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0277.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0277.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0277.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0277.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0277.060] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195320.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195320.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0277.061] GetFileType (hFile=0x1e0) returned 0x1 [0277.061] CloseHandle (hObject=0x1e0) returned 1 [0277.062] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0277.062] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195320.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195320.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x72f8)) returned 1 [0277.062] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0277.062] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0277.062] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195320.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195320.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x72f8)) returned 1 [0277.062] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0277.062] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0277.062] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0277.063] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5350, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0195342.WMF", cAlternateFileName="")) returned 1 [0277.063] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0277.063] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0277.063] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0277.063] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0277.063] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0277.063] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0277.064] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195342.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195342.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0277.551] GetFileType (hFile=0x21c) returned 0x1 [0277.552] CloseHandle (hObject=0x21c) returned 1 [0277.552] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0277.552] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195342.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195342.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5350)) returned 1 [0277.553] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0277.553] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0277.553] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195342.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195342.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5350)) returned 1 [0277.553] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0277.553] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0277.553] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0277.553] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x48be, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0195428.WMF", cAlternateFileName="")) returned 1 [0277.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0277.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0277.554] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0277.554] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0277.554] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0277.554] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0277.555] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195428.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195428.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0277.555] GetFileType (hFile=0x21c) returned 0x1 [0277.556] CloseHandle (hObject=0x21c) returned 1 [0277.556] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0277.556] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195428.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195428.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x48be)) returned 1 [0277.557] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0277.557] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0277.557] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195428.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195428.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x48be)) returned 1 [0277.557] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0277.557] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0277.557] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0277.557] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe60, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0195772.WMF", cAlternateFileName="")) returned 1 [0277.557] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0277.558] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0277.558] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0277.558] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0277.558] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0277.558] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0277.559] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195772.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195772.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0277.559] GetFileType (hFile=0x21c) returned 0x1 [0277.560] CloseHandle (hObject=0x21c) returned 1 [0277.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0277.560] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195772.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195772.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe60)) returned 1 [0277.561] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0277.561] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0277.561] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195772.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195772.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe60)) returned 1 [0277.561] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0277.561] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0277.561] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0277.561] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbbc, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0195788.WMF", cAlternateFileName="")) returned 1 [0277.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0277.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0277.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0277.562] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0277.562] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0277.562] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0277.563] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195788.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195788.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0277.563] GetFileType (hFile=0x21c) returned 0x1 [0277.564] CloseHandle (hObject=0x21c) returned 1 [0277.565] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0277.565] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195788.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195788.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbbc)) returned 1 [0277.565] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0277.565] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0277.565] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195788.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195788.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbbc)) returned 1 [0277.565] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0277.566] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0277.566] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0277.566] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x128e, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0196060.WMF", cAlternateFileName="")) returned 1 [0277.566] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0277.566] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0277.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0277.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0277.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0277.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0277.568] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196060.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196060.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0277.568] GetFileType (hFile=0x21c) returned 0x1 [0277.569] CloseHandle (hObject=0x21c) returned 1 [0277.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0277.569] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196060.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196060.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x128e)) returned 1 [0277.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0277.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0277.570] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196060.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196060.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x128e)) returned 1 [0277.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0277.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0277.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0277.570] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14ce, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0196110.WMF", cAlternateFileName="")) returned 1 [0277.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0277.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0277.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0277.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0277.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0277.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0277.572] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196110.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196110.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0277.572] GetFileType (hFile=0x21c) returned 0x1 [0277.573] CloseHandle (hObject=0x21c) returned 1 [0277.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0277.574] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196110.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196110.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14ce)) returned 1 [0277.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0277.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0277.574] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196110.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196110.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14ce)) returned 1 [0277.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0277.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0277.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0277.575] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xef2, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0196142.WMF", cAlternateFileName="")) returned 1 [0277.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0277.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0277.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0277.576] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0277.576] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0277.576] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0277.577] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196142.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196142.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0277.577] GetFileType (hFile=0x21c) returned 0x1 [0277.578] CloseHandle (hObject=0x21c) returned 1 [0277.578] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0277.578] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196142.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196142.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xef2)) returned 1 [0277.579] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0277.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0277.579] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196142.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196142.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xef2)) returned 1 [0277.579] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0277.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0277.579] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0277.579] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3586, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0196354.WMF", cAlternateFileName="")) returned 1 [0277.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0277.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0277.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0277.580] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0277.580] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0277.580] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0277.581] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196354.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196354.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0277.581] GetFileType (hFile=0x21c) returned 0x1 [0277.583] CloseHandle (hObject=0x21c) returned 1 [0277.583] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0277.583] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196354.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196354.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3586)) returned 1 [0277.583] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0277.584] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0277.584] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196354.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196354.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3586)) returned 1 [0277.584] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0277.584] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0277.584] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0277.584] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b00, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0196358.WMF", cAlternateFileName="")) returned 1 [0277.584] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0277.585] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0277.585] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0277.585] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0277.585] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0277.585] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0277.586] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196358.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196358.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0277.586] GetFileType (hFile=0x21c) returned 0x1 [0277.587] CloseHandle (hObject=0x21c) returned 1 [0277.587] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0277.587] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196358.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196358.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b00)) returned 1 [0277.588] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0277.588] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0277.588] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196358.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196358.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b00)) returned 1 [0277.588] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0277.588] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0277.589] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0277.589] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x164c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0196364.WMF", cAlternateFileName="")) returned 1 [0277.589] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0277.589] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0277.589] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0277.589] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0277.589] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0277.589] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0277.590] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196364.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196364.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0277.591] GetFileType (hFile=0x21c) returned 0x1 [0277.591] CloseHandle (hObject=0x21c) returned 1 [0277.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0277.592] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196364.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196364.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x164c)) returned 1 [0277.592] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0277.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0277.592] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196364.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196364.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x164c)) returned 1 [0277.592] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0277.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0277.593] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0277.593] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9d26, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0197979.WMF", cAlternateFileName="")) returned 1 [0277.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0277.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0277.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0277.593] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0277.593] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0277.593] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0277.594] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0197979.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0197979.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0277.594] GetFileType (hFile=0x21c) returned 0x1 [0277.594] CloseHandle (hObject=0x21c) returned 1 [0277.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0277.595] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0197979.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0197979.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9d26)) returned 1 [0277.595] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0277.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0277.595] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0197979.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0197979.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9d26)) returned 1 [0277.595] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0277.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0277.595] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0277.595] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x668c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0197983.WMF", cAlternateFileName="")) returned 1 [0277.596] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0277.596] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0277.596] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0277.596] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0277.596] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0277.596] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0277.597] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0197983.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0197983.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0277.597] GetFileType (hFile=0x21c) returned 0x1 [0277.597] CloseHandle (hObject=0x21c) returned 1 [0277.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0277.970] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0197983.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0197983.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x668c)) returned 1 [0277.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0277.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0277.971] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0197983.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0197983.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x668c)) returned 1 [0277.971] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0277.971] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0277.971] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0277.971] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x849c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0198016.WMF", cAlternateFileName="")) returned 1 [0277.971] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0277.971] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0277.971] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0277.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0277.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0277.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0278.118] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198016.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198016.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0278.119] GetFileType (hFile=0x19c) returned 0x1 [0278.119] CloseHandle (hObject=0x19c) returned 1 [0278.120] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0278.120] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198016.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198016.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x849c)) returned 1 [0278.120] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0278.120] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0278.120] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198016.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198016.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x849c)) returned 1 [0278.120] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0278.120] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0278.121] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0278.121] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5cae, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0198020.WMF", cAlternateFileName="")) returned 1 [0278.121] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0278.121] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0278.121] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0278.121] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0278.121] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0278.121] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0278.122] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198020.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198020.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0278.122] GetFileType (hFile=0x19c) returned 0x1 [0278.123] CloseHandle (hObject=0x19c) returned 1 [0278.123] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0278.123] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198020.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198020.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5cae)) returned 1 [0278.123] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0278.124] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0278.124] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198020.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198020.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5cae)) returned 1 [0278.124] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0278.124] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0278.124] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0278.124] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8860, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0198021.WMF", cAlternateFileName="")) returned 1 [0278.124] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0278.124] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0278.125] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0278.125] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0278.125] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0278.125] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0278.126] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198021.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198021.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0278.126] GetFileType (hFile=0x19c) returned 0x1 [0278.126] CloseHandle (hObject=0x19c) returned 1 [0278.127] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0278.127] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198021.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198021.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8860)) returned 1 [0278.127] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0278.127] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0278.127] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198021.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198021.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8860)) returned 1 [0278.128] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0278.128] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0278.128] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0278.128] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6624, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0198022.WMF", cAlternateFileName="")) returned 1 [0278.128] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0278.128] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0278.128] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0278.128] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0278.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0278.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0278.129] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198022.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198022.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0278.130] GetFileType (hFile=0x19c) returned 0x1 [0278.130] CloseHandle (hObject=0x19c) returned 1 [0278.131] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0278.131] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198022.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198022.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6624)) returned 1 [0278.131] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0278.131] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0278.131] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198022.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198022.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6624)) returned 1 [0278.132] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0278.132] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0278.133] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0278.133] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3cce, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0198025.WMF", cAlternateFileName="")) returned 1 [0278.133] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0278.133] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0278.133] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0278.133] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0278.133] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0278.134] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0278.135] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198025.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198025.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0278.135] GetFileType (hFile=0x19c) returned 0x1 [0278.135] CloseHandle (hObject=0x19c) returned 1 [0278.136] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0278.136] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198025.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198025.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3cce)) returned 1 [0278.137] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0278.137] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0278.137] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198025.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198025.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3cce)) returned 1 [0278.137] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0278.137] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0278.137] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0278.137] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd6b4, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0198102.WMF", cAlternateFileName="")) returned 1 [0278.138] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0278.138] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0278.138] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0278.138] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0278.138] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0278.138] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0278.139] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198102.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198102.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0278.140] GetFileType (hFile=0x19c) returned 0x1 [0278.140] CloseHandle (hObject=0x19c) returned 1 [0278.141] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0278.141] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198102.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198102.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd6b4)) returned 1 [0278.141] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0278.141] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0278.142] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198102.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198102.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd6b4)) returned 1 [0278.142] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0278.142] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0278.142] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0278.142] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa520, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0198113.WMF", cAlternateFileName="")) returned 1 [0278.142] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0278.143] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0278.143] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0278.143] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0278.143] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0278.143] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0278.144] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198113.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198113.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0278.144] GetFileType (hFile=0x19c) returned 0x1 [0278.145] CloseHandle (hObject=0x19c) returned 1 [0278.145] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0278.145] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198113.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198113.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa520)) returned 1 [0278.146] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0278.146] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0278.146] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198113.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198113.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa520)) returned 1 [0278.146] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0278.146] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0278.146] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0278.147] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa3b2, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0198226.WMF", cAlternateFileName="")) returned 1 [0278.147] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0278.147] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0278.147] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0278.147] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0278.148] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0278.148] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0278.149] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198226.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198226.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0278.149] GetFileType (hFile=0x19c) returned 0x1 [0278.149] CloseHandle (hObject=0x19c) returned 1 [0278.150] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0278.150] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198226.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198226.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa3b2)) returned 1 [0278.150] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0278.150] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0278.151] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198226.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198226.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa3b2)) returned 1 [0278.151] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0278.151] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0278.151] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0278.151] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa69e, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0198234.WMF", cAlternateFileName="")) returned 1 [0278.151] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0278.151] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0278.152] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0278.152] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0278.152] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0278.152] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0278.153] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198234.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198234.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0278.153] GetFileType (hFile=0x19c) returned 0x1 [0278.154] CloseHandle (hObject=0x19c) returned 1 [0278.154] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0278.154] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198234.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198234.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa69e)) returned 1 [0278.155] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0278.155] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0278.155] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198234.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198234.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa69e)) returned 1 [0278.155] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0278.155] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0278.155] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0278.155] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6f9c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0198372.WMF", cAlternateFileName="")) returned 1 [0278.156] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0278.156] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0278.156] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0278.156] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0278.156] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0278.156] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0278.157] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198372.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198372.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0278.157] GetFileType (hFile=0x19c) returned 0x1 [0278.158] CloseHandle (hObject=0x19c) returned 1 [0278.158] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0278.158] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198372.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198372.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6f9c)) returned 1 [0278.159] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0278.159] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0278.159] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198372.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198372.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6f9c)) returned 1 [0278.159] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0278.159] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0278.159] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0278.160] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9d6c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0198377.WMF", cAlternateFileName="")) returned 1 [0278.160] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0278.160] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0278.160] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0278.160] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0278.160] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0278.160] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0278.161] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198377.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198377.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0278.161] GetFileType (hFile=0x19c) returned 0x1 [0278.162] CloseHandle (hObject=0x19c) returned 1 [0278.163] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0278.163] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198377.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198377.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9d6c)) returned 1 [0278.464] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0278.464] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0278.465] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198377.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198377.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9d6c)) returned 1 [0278.465] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0278.465] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0278.465] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0278.465] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc20c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0198447.WMF", cAlternateFileName="")) returned 1 [0278.465] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0278.465] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0278.466] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0278.466] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0278.466] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0278.466] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0278.467] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198447.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198447.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0278.603] GetFileType (hFile=0x1ac) returned 0x1 [0278.603] CloseHandle (hObject=0x1ac) returned 1 [0278.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0278.605] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198447.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198447.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc20c)) returned 1 [0278.618] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0278.618] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0278.618] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198447.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198447.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc20c)) returned 1 [0278.618] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0278.619] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0278.619] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0278.619] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xae08, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0198494.WMF", cAlternateFileName="")) returned 1 [0278.619] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0278.619] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0278.619] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0278.619] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0278.620] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0278.620] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0278.620] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198494.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198494.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0278.621] GetFileType (hFile=0x1ac) returned 0x1 [0278.621] CloseHandle (hObject=0x1ac) returned 1 [0278.622] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0278.622] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198494.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198494.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xae08)) returned 1 [0278.622] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0278.622] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0278.622] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198494.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198494.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xae08)) returned 1 [0278.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0278.623] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0278.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0278.623] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe17a, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0198712.WMF", cAlternateFileName="")) returned 1 [0278.623] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0278.623] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0278.623] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0278.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0278.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0278.624] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0278.624] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198712.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198712.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0278.625] GetFileType (hFile=0x1ac) returned 0x1 [0278.625] CloseHandle (hObject=0x1ac) returned 1 [0278.625] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0278.626] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198712.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198712.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe17a)) returned 1 [0278.626] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0278.626] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0278.626] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198712.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198712.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe17a)) returned 1 [0278.626] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0278.626] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0278.627] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0278.627] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x714e, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0199279.WMF", cAlternateFileName="")) returned 1 [0278.627] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0278.627] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0278.627] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0278.627] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0278.627] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0278.627] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0278.628] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199279.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199279.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0278.629] GetFileType (hFile=0x1ac) returned 0x1 [0278.629] CloseHandle (hObject=0x1ac) returned 1 [0278.630] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0278.630] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199279.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199279.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x714e)) returned 1 [0278.631] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0278.631] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0278.631] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199279.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199279.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x714e)) returned 1 [0278.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0278.634] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0278.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0278.634] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7c4e, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0199303.WMF", cAlternateFileName="")) returned 1 [0278.634] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0278.634] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0278.634] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0278.635] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0278.635] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0278.635] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0278.635] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199303.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199303.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0278.636] GetFileType (hFile=0x1ac) returned 0x1 [0278.637] CloseHandle (hObject=0x1ac) returned 1 [0278.638] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0278.638] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199303.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199303.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7c4e)) returned 1 [0278.638] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0278.638] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0278.638] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199303.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199303.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7c4e)) returned 1 [0278.652] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0278.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0278.652] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0278.652] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc37e, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0199307.WMF", cAlternateFileName="")) returned 1 [0278.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0278.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0278.652] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0278.652] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0278.652] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0278.653] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0278.653] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199307.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199307.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0278.653] GetFileType (hFile=0x1ac) returned 0x1 [0278.654] CloseHandle (hObject=0x1ac) returned 1 [0278.654] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0278.654] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199307.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199307.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc37e)) returned 1 [0278.654] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0278.654] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0278.655] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199307.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199307.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc37e)) returned 1 [0278.655] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0278.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0278.655] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0278.655] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x662a, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0199423.WMF", cAlternateFileName="")) returned 1 [0278.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0278.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0278.655] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0278.655] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0278.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0278.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0278.656] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199423.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199423.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0278.656] GetFileType (hFile=0x1ac) returned 0x1 [0278.657] CloseHandle (hObject=0x1ac) returned 1 [0278.657] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0278.657] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199423.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199423.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x662a)) returned 1 [0278.657] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0278.657] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0278.658] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199423.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199423.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x662a)) returned 1 [0278.658] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0278.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0278.658] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0278.658] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4124, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0199429.WMF", cAlternateFileName="")) returned 1 [0278.658] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0278.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0278.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0278.659] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0278.659] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0278.659] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0278.660] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199429.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199429.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0278.660] GetFileType (hFile=0x1ac) returned 0x1 [0278.661] CloseHandle (hObject=0x1ac) returned 1 [0278.661] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0278.661] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199429.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199429.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4124)) returned 1 [0278.661] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0278.661] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0278.662] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199429.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199429.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4124)) returned 1 [0278.662] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0278.662] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0278.662] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0278.662] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13c4, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0199465.WMF", cAlternateFileName="")) returned 1 [0278.662] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0278.662] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0278.662] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0278.662] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0278.663] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0278.663] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0279.114] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199465.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199465.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0279.114] GetFileType (hFile=0x19c) returned 0x1 [0279.115] CloseHandle (hObject=0x19c) returned 1 [0279.115] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0279.115] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199465.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199465.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13c4)) returned 1 [0279.116] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0279.116] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0279.116] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199465.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199465.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13c4)) returned 1 [0279.116] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0279.117] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0279.117] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0279.117] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x35bc, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0199469.WMF", cAlternateFileName="")) returned 1 [0279.117] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0279.117] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0279.117] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0279.117] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0279.117] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0279.118] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0279.118] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199469.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199469.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0279.119] GetFileType (hFile=0x19c) returned 0x1 [0279.119] CloseHandle (hObject=0x19c) returned 1 [0279.120] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0279.120] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199469.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199469.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x35bc)) returned 1 [0279.120] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0279.120] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0279.120] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199469.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199469.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x35bc)) returned 1 [0279.120] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0279.121] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0279.121] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0279.121] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a18, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0199473.WMF", cAlternateFileName="")) returned 1 [0279.121] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0279.121] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0279.121] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0279.121] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0279.121] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0279.122] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0279.122] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199473.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199473.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0279.123] GetFileType (hFile=0x19c) returned 0x1 [0279.123] CloseHandle (hObject=0x19c) returned 1 [0279.124] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0279.124] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199473.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199473.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a18)) returned 1 [0279.124] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0279.124] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0279.124] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199473.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199473.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a18)) returned 1 [0279.124] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0279.125] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0279.125] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0279.125] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1484, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0199475.WMF", cAlternateFileName="")) returned 1 [0279.125] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0279.125] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0279.125] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0279.125] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0279.125] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0279.126] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0279.126] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199475.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199475.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0279.127] GetFileType (hFile=0x19c) returned 0x1 [0279.127] CloseHandle (hObject=0x19c) returned 1 [0279.128] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0279.128] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199475.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199475.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1484)) returned 1 [0279.128] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0279.128] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0279.128] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199475.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199475.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1484)) returned 1 [0279.128] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0279.128] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0279.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0279.129] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27b4, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0199483.WMF", cAlternateFileName="")) returned 1 [0279.129] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0279.129] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0279.129] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0279.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0279.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0279.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0279.130] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199483.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199483.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0279.130] GetFileType (hFile=0x19c) returned 0x1 [0279.131] CloseHandle (hObject=0x19c) returned 1 [0279.131] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0279.132] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199483.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199483.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27b4)) returned 1 [0279.132] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0279.132] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0279.133] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199483.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199483.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27b4)) returned 1 [0279.133] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0279.133] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0279.133] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0279.133] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x302c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0199609.WMF", cAlternateFileName="")) returned 1 [0279.133] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0279.133] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0279.133] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0279.134] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0279.134] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0279.134] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0279.134] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199609.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199609.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0279.135] GetFileType (hFile=0x19c) returned 0x1 [0279.135] CloseHandle (hObject=0x19c) returned 1 [0279.136] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0279.136] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199609.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199609.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x302c)) returned 1 [0279.136] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0279.136] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0279.136] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199609.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199609.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x302c)) returned 1 [0279.136] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0279.137] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0279.137] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0279.137] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2004, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0200151.WMF", cAlternateFileName="")) returned 1 [0279.137] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0279.137] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0279.137] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0279.137] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0279.137] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0279.138] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0279.138] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200151.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200151.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0279.138] GetFileType (hFile=0x19c) returned 0x1 [0279.139] CloseHandle (hObject=0x19c) returned 1 [0279.139] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0279.139] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200151.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200151.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2004)) returned 1 [0279.139] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0279.140] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0279.140] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200151.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200151.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2004)) returned 1 [0279.140] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0279.140] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0279.140] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0279.140] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c0c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0200163.WMF", cAlternateFileName="")) returned 1 [0279.140] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0279.140] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0279.140] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0279.141] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0279.141] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0279.141] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0279.141] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200163.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200163.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0279.142] GetFileType (hFile=0x19c) returned 0x1 [0279.142] CloseHandle (hObject=0x19c) returned 1 [0279.143] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0279.143] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200163.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200163.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c0c)) returned 1 [0279.143] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0279.143] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0279.143] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200163.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200163.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c0c)) returned 1 [0279.143] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0279.143] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0279.144] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0279.144] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14c0, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0200183.WMF", cAlternateFileName="")) returned 1 [0279.144] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0279.144] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0279.144] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0279.144] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0279.144] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0279.145] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0279.145] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200183.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200183.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0279.146] GetFileType (hFile=0x19c) returned 0x1 [0279.146] CloseHandle (hObject=0x19c) returned 1 [0279.147] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0279.147] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200183.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200183.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14c0)) returned 1 [0279.147] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0279.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0279.656] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200183.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200183.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14c0)) returned 1 [0279.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0279.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0279.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0279.656] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f7c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0200189.WMF", cAlternateFileName="")) returned 1 [0279.657] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0279.657] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0279.657] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0279.657] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0279.657] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0279.657] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0279.658] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200189.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200189.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0279.658] GetFileType (hFile=0x1e0) returned 0x1 [0279.659] CloseHandle (hObject=0x1e0) returned 1 [0279.659] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0279.660] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200189.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200189.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f7c)) returned 1 [0279.660] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0279.660] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0279.660] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200189.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200189.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f7c)) returned 1 [0279.660] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0279.661] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0279.661] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0279.661] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7a46, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0200273.WMF", cAlternateFileName="")) returned 1 [0279.661] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0279.661] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0279.661] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0279.661] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0279.661] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0279.662] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0279.663] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200273.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200273.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0279.663] GetFileType (hFile=0x1e0) returned 0x1 [0279.663] CloseHandle (hObject=0x1e0) returned 1 [0279.664] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0279.664] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200273.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200273.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7a46)) returned 1 [0279.664] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0279.665] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0279.665] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200273.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200273.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7a46)) returned 1 [0279.665] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0279.665] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0279.665] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0279.666] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c0a, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0200279.WMF", cAlternateFileName="")) returned 1 [0279.666] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0279.666] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0279.666] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0279.667] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0279.667] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0279.667] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0279.668] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200279.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200279.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0279.668] GetFileType (hFile=0x1e0) returned 0x1 [0279.669] CloseHandle (hObject=0x1e0) returned 1 [0279.669] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0279.669] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200279.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200279.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c0a)) returned 1 [0279.670] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0279.670] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0279.670] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200279.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200279.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c0a)) returned 1 [0279.670] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0279.670] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0279.671] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0279.671] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa0b0, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0200289.WMF", cAlternateFileName="")) returned 1 [0279.671] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0279.671] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0279.671] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0279.671] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0279.671] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0279.672] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0279.673] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200289.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200289.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0279.673] GetFileType (hFile=0x1e0) returned 0x1 [0279.674] CloseHandle (hObject=0x1e0) returned 1 [0279.674] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0279.674] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200289.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200289.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa0b0)) returned 1 [0279.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0279.675] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0279.675] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200289.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200289.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa0b0)) returned 1 [0279.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0279.675] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0279.675] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0279.676] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f08, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0200377.WMF", cAlternateFileName="")) returned 1 [0279.676] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0279.676] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0279.676] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0279.676] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0279.676] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0279.676] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0279.677] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200377.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200377.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0279.678] GetFileType (hFile=0x1e0) returned 0x1 [0279.678] CloseHandle (hObject=0x1e0) returned 1 [0279.679] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0279.679] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200377.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200377.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f08)) returned 1 [0279.679] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0279.679] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0279.679] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200377.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200377.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f08)) returned 1 [0279.680] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0279.680] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0279.680] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0279.680] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5398, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0200383.WMF", cAlternateFileName="")) returned 1 [0279.680] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0279.680] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0279.681] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0279.681] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0279.681] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0279.681] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0279.682] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200383.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200383.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0279.682] GetFileType (hFile=0x1e0) returned 0x1 [0279.683] CloseHandle (hObject=0x1e0) returned 1 [0279.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0279.683] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200383.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200383.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5398)) returned 1 [0279.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0279.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0279.684] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200383.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200383.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5398)) returned 1 [0279.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0279.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0279.685] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0279.685] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x366e, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0200467.WMF", cAlternateFileName="")) returned 1 [0279.685] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0279.685] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0279.685] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0279.685] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0279.685] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0279.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0279.686] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200467.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200467.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0279.687] GetFileType (hFile=0x1e0) returned 0x1 [0279.687] CloseHandle (hObject=0x1e0) returned 1 [0279.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0279.688] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200467.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200467.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x366e)) returned 1 [0279.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0279.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0279.689] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200467.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200467.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x366e)) returned 1 [0279.689] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0279.689] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0279.689] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0279.689] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x273e, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0200521.WMF", cAlternateFileName="")) returned 1 [0279.689] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0279.689] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0279.690] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0279.690] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0279.690] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0279.690] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0279.691] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200521.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200521.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0279.691] GetFileType (hFile=0x1e0) returned 0x1 [0279.692] CloseHandle (hObject=0x1e0) returned 1 [0279.692] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0279.692] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200521.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200521.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x273e)) returned 1 [0279.692] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0279.693] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0279.693] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200521.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200521.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x273e)) returned 1 [0279.693] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0279.693] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0279.693] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0279.693] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf36, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0200611.WMF", cAlternateFileName="")) returned 1 [0279.693] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0279.693] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0279.694] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0279.694] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0279.694] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0279.694] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0280.273] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200611.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200611.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0280.273] GetFileType (hFile=0x198) returned 0x1 [0280.274] CloseHandle (hObject=0x198) returned 1 [0280.275] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0280.275] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200611.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200611.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf36)) returned 1 [0280.275] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0280.275] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0280.275] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200611.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200611.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf36)) returned 1 [0280.275] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0280.276] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0280.276] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0280.276] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa50e, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0202045.JPG", cAlternateFileName="")) returned 1 [0280.276] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0280.276] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0280.276] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0280.276] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0280.277] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0280.277] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0280.277] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0202045.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0202045.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0280.278] GetFileType (hFile=0x198) returned 0x1 [0280.278] CloseHandle (hObject=0x198) returned 1 [0280.279] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0280.279] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0202045.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0202045.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa50e)) returned 1 [0280.279] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0280.279] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0280.280] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0202045.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0202045.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa50e)) returned 1 [0280.280] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0280.280] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0280.280] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0280.280] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6e74, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0211981.WMF", cAlternateFileName="")) returned 1 [0280.280] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0280.281] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0280.281] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0280.281] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0280.281] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0280.281] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0280.282] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0211981.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0211981.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0280.282] GetFileType (hFile=0x198) returned 0x1 [0280.283] CloseHandle (hObject=0x198) returned 1 [0280.283] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0280.284] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0211981.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0211981.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6e74)) returned 1 [0280.284] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0280.284] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0280.284] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0211981.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0211981.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6e74)) returned 1 [0280.284] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0280.284] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0280.285] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0280.285] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x180e, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0212299.WMF", cAlternateFileName="")) returned 1 [0280.285] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0280.285] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0280.285] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0280.285] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0280.285] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0280.286] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0280.286] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212299.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212299.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0280.287] GetFileType (hFile=0x198) returned 0x1 [0280.287] CloseHandle (hObject=0x198) returned 1 [0280.288] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0280.288] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212299.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212299.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x180e)) returned 1 [0280.289] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0280.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0280.289] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212299.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212299.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x180e)) returned 1 [0280.289] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0280.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0280.289] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0280.289] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x25cc, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0212601.WMF", cAlternateFileName="")) returned 1 [0280.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0280.290] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0280.290] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0280.290] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0280.290] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0280.290] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0280.291] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212601.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212601.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0280.291] GetFileType (hFile=0x198) returned 0x1 [0280.292] CloseHandle (hObject=0x198) returned 1 [0280.292] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0280.292] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212601.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212601.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x25cc)) returned 1 [0280.293] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0280.293] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0280.293] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212601.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212601.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x25cc)) returned 1 [0280.293] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0280.293] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0280.293] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0280.293] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x199a, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0212685.WMF", cAlternateFileName="")) returned 1 [0280.294] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0280.294] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0280.294] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0280.294] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0280.294] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0280.295] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0280.295] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212685.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212685.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0280.296] GetFileType (hFile=0x198) returned 0x1 [0280.296] CloseHandle (hObject=0x198) returned 1 [0280.297] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0280.297] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212685.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212685.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x199a)) returned 1 [0280.297] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0280.297] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0280.297] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212685.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212685.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x199a)) returned 1 [0280.298] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0280.298] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0280.298] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0280.298] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x80c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0212751.WMF", cAlternateFileName="")) returned 1 [0280.298] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0280.298] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0280.298] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0280.298] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0280.299] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0280.299] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0280.299] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212751.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212751.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0280.300] GetFileType (hFile=0x198) returned 0x1 [0280.300] CloseHandle (hObject=0x198) returned 1 [0280.301] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0280.301] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212751.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212751.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x80c)) returned 1 [0280.301] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0280.301] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0280.301] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212751.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212751.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x80c)) returned 1 [0280.301] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0280.301] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0280.302] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0280.302] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d4a, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0212953.WMF", cAlternateFileName="")) returned 1 [0280.302] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0280.302] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0280.302] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0280.302] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0280.302] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0280.302] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0280.303] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212953.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212953.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0280.303] GetFileType (hFile=0x198) returned 0x1 [0280.304] CloseHandle (hObject=0x198) returned 1 [0280.305] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0280.305] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212953.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212953.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d4a)) returned 1 [0280.305] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0280.305] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0280.305] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212953.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212953.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d4a)) returned 1 [0280.305] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0280.306] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0280.306] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0280.306] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa5c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0213243.WMF", cAlternateFileName="")) returned 1 [0280.306] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0280.306] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0280.306] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0280.306] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0280.306] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0280.307] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0280.307] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0213243.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0213243.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0280.308] GetFileType (hFile=0x198) returned 0x1 [0280.308] CloseHandle (hObject=0x198) returned 1 [0280.309] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0280.309] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0213243.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0213243.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa5c)) returned 1 [0280.309] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0280.309] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0280.309] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0213243.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0213243.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa5c)) returned 1 [0280.310] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0280.310] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0280.310] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0280.310] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf00, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0213449.WMF", cAlternateFileName="")) returned 1 [0280.310] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0280.310] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0280.310] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0280.311] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0280.311] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0280.311] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0280.312] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0213449.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0213449.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0280.312] GetFileType (hFile=0x198) returned 0x1 [0280.312] CloseHandle (hObject=0x198) returned 1 [0280.313] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0280.313] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0213449.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0213449.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf00)) returned 1 [0280.313] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0280.313] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0280.314] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0213449.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0213449.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf00)) returned 1 [0280.314] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0280.314] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0280.314] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0280.314] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7cb6, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0214934.WMF", cAlternateFileName="")) returned 1 [0280.314] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0280.315] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0280.315] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0280.315] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0280.315] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0280.315] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0280.316] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0214934.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0214934.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0280.316] GetFileType (hFile=0x198) returned 0x1 [0280.317] CloseHandle (hObject=0x198) returned 1 [0280.317] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0280.317] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0214934.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0214934.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7cb6)) returned 1 [0280.318] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0280.318] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0280.318] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0214934.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0214934.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7cb6)) returned 1 [0280.318] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0280.318] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0280.318] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0280.318] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaefa, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0214948.WMF", cAlternateFileName="")) returned 1 [0280.319] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0280.319] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0280.319] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0280.319] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0280.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0280.666] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0280.869] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0214948.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0214948.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0280.869] GetFileType (hFile=0x174) returned 0x1 [0280.870] CloseHandle (hObject=0x174) returned 1 [0280.870] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0280.870] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0214948.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0214948.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaefa)) returned 1 [0280.870] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0280.870] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0280.871] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0214948.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0214948.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaefa)) returned 1 [0280.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0280.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0280.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0280.871] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d6c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0215070.WMF", cAlternateFileName="")) returned 1 [0280.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0280.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0280.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0280.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0280.872] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0280.872] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0280.872] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215070.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215070.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0280.872] GetFileType (hFile=0x174) returned 0x1 [0280.873] CloseHandle (hObject=0x174) returned 1 [0280.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0280.873] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215070.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215070.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d6c)) returned 1 [0280.873] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0280.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0280.874] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215070.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215070.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d6c)) returned 1 [0280.874] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0280.874] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0280.874] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0280.874] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f50, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0215076.WMF", cAlternateFileName="")) returned 1 [0280.874] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0280.874] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0280.874] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0280.874] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0280.874] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0280.874] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0280.875] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215076.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215076.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0280.875] GetFileType (hFile=0x174) returned 0x1 [0280.876] CloseHandle (hObject=0x174) returned 1 [0280.876] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0280.876] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215076.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215076.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f50)) returned 1 [0280.876] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0280.876] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0280.876] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215076.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215076.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f50)) returned 1 [0280.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0280.877] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0280.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0280.877] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x81ce, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0215210.WMF", cAlternateFileName="")) returned 1 [0280.877] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0280.877] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0280.877] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0280.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0280.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0280.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0280.878] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215210.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215210.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0280.878] GetFileType (hFile=0x174) returned 0x1 [0280.879] CloseHandle (hObject=0x174) returned 1 [0280.879] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0280.879] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215210.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215210.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x81ce)) returned 1 [0280.879] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0280.879] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0280.880] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215210.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215210.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x81ce)) returned 1 [0280.880] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0280.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0280.880] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0280.880] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x244a, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0215709.WMF", cAlternateFileName="")) returned 1 [0280.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0280.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0280.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0280.880] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0280.880] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0280.880] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0280.881] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215709.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215709.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0280.881] GetFileType (hFile=0x174) returned 0x1 [0280.881] CloseHandle (hObject=0x174) returned 1 [0280.881] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0280.882] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215709.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215709.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x244a)) returned 1 [0280.882] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0280.882] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0280.883] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215709.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215709.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x244a)) returned 1 [0280.883] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0280.883] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0280.883] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0280.883] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45a2, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0215710.WMF", cAlternateFileName="")) returned 1 [0280.883] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0280.883] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0280.883] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0280.884] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0280.884] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0280.884] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0280.884] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215710.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215710.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0280.884] GetFileType (hFile=0x174) returned 0x1 [0280.887] CloseHandle (hObject=0x174) returned 1 [0280.888] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0280.888] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215710.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215710.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45a2)) returned 1 [0280.888] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0280.888] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0280.888] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215710.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215710.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45a2)) returned 1 [0280.888] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0280.888] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0280.888] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0280.888] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15f2, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0215718.WMF", cAlternateFileName="")) returned 1 [0280.889] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0280.889] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0280.889] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0280.889] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0280.889] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0280.889] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0280.889] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215718.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215718.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0280.890] GetFileType (hFile=0x174) returned 0x1 [0280.890] CloseHandle (hObject=0x174) returned 1 [0280.891] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0280.891] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215718.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215718.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15f2)) returned 1 [0280.891] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0280.891] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0280.891] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215718.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215718.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15f2)) returned 1 [0280.891] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0280.891] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0280.892] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0280.892] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa783, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0216112.JPG", cAlternateFileName="")) returned 1 [0280.892] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0280.892] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0280.892] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0280.892] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0280.892] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0280.892] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0280.893] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216112.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216112.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0280.893] GetFileType (hFile=0x174) returned 0x1 [0280.893] CloseHandle (hObject=0x174) returned 1 [0280.894] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0280.894] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216112.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216112.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa783)) returned 1 [0280.894] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0280.894] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0280.894] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216112.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216112.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa783)) returned 1 [0280.894] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0280.894] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0280.894] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0280.895] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec9380a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5474, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0216153.JPG", cAlternateFileName="")) returned 1 [0280.895] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0280.895] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0280.895] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0280.895] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0280.895] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0280.895] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0280.896] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216153.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216153.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0280.896] GetFileType (hFile=0x174) returned 0x1 [0280.896] CloseHandle (hObject=0x174) returned 1 [0280.897] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0280.897] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216153.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216153.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec9380a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5474)) returned 1 [0280.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0280.897] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0280.897] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216153.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216153.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec9380a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5474)) returned 1 [0280.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0280.898] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0280.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0280.898] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa488, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0216540.WMF", cAlternateFileName="")) returned 1 [0280.898] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0280.898] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0280.898] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0280.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0280.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0280.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0280.899] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216540.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216540.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0280.899] GetFileType (hFile=0x174) returned 0x1 [0280.900] CloseHandle (hObject=0x174) returned 1 [0280.900] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0280.900] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216540.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216540.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa488)) returned 1 [0280.900] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0280.900] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0280.900] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216540.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216540.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa488)) returned 1 [0280.900] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0280.901] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0280.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0280.901] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec9380a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x60dc, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0216570.WMF", cAlternateFileName="")) returned 1 [0280.901] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0280.901] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0280.901] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0280.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0280.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0280.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0280.902] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216570.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216570.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0280.902] GetFileType (hFile=0x174) returned 0x1 [0280.903] CloseHandle (hObject=0x174) returned 1 [0280.903] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0280.903] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216570.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216570.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec9380a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x60dc)) returned 1 [0280.903] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0280.903] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0280.904] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216570.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216570.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec9380a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x60dc)) returned 1 [0280.904] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0280.904] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0280.904] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0280.904] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec9380a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f46, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0216600.WMF", cAlternateFileName="")) returned 1 [0280.904] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0280.904] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0280.904] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0280.905] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0280.905] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0280.905] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0280.905] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216600.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216600.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0280.906] GetFileType (hFile=0x174) returned 0x1 [0280.906] CloseHandle (hObject=0x174) returned 1 [0280.907] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0280.907] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216600.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216600.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec9380a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f46)) returned 1 [0280.907] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0280.907] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0280.907] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216600.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216600.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec9380a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f46)) returned 1 [0280.907] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0280.907] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0280.907] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0280.908] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x24e2, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0216612.WMF", cAlternateFileName="")) returned 1 [0280.908] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0280.908] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0280.908] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0280.908] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0280.908] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0280.908] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0280.909] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216612.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216612.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0280.909] GetFileType (hFile=0x174) returned 0x1 [0280.910] CloseHandle (hObject=0x174) returned 1 [0280.910] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0280.910] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216612.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216612.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x24e2)) returned 1 [0280.910] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0280.911] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0280.911] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216612.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216612.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x24e2)) returned 1 [0280.911] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0280.911] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0280.911] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0280.911] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9b3a, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0216874.WMF", cAlternateFileName="")) returned 1 [0280.911] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0280.911] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0280.912] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0280.912] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0280.912] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0280.912] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0280.913] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216874.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216874.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0281.319] GetFileType (hFile=0x174) returned 0x1 [0281.320] CloseHandle (hObject=0x174) returned 1 [0281.320] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0281.320] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216874.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216874.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9b3a)) returned 1 [0281.321] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0281.321] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0281.321] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216874.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216874.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9b3a)) returned 1 [0281.323] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0281.323] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0281.323] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0281.323] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1484, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0217262.WMF", cAlternateFileName="")) returned 1 [0281.323] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0281.323] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0281.323] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0281.323] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0281.323] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0281.324] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0281.324] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0217262.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0217262.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0281.325] GetFileType (hFile=0x174) returned 0x1 [0281.331] CloseHandle (hObject=0x174) returned 1 [0281.331] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0281.331] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0217262.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0217262.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1484)) returned 1 [0281.331] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0281.332] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0281.332] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0217262.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0217262.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1484)) returned 1 [0281.332] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0281.332] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0281.332] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0281.332] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd9a, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0217302.WMF", cAlternateFileName="")) returned 1 [0281.332] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0281.332] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0281.332] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0281.333] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0281.333] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0281.333] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0281.333] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0217302.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0217302.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0281.334] GetFileType (hFile=0x174) returned 0x1 [0281.334] CloseHandle (hObject=0x174) returned 1 [0281.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0281.335] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0217302.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0217302.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd9a)) returned 1 [0281.335] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0281.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0281.335] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0217302.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0217302.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd9a)) returned 1 [0281.335] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0281.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0281.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0281.336] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ca8, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0217872.WMF", cAlternateFileName="")) returned 1 [0281.336] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0281.336] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0281.336] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0281.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0281.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0281.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0281.337] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0217872.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0217872.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0281.337] GetFileType (hFile=0x174) returned 0x1 [0281.338] CloseHandle (hObject=0x174) returned 1 [0281.338] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0281.338] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0217872.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0217872.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ca8)) returned 1 [0281.339] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0281.339] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0281.339] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0217872.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0217872.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ca8)) returned 1 [0281.339] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0281.339] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0281.339] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0281.339] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8ad6, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0227419.JPG", cAlternateFileName="")) returned 1 [0281.339] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0281.339] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0281.340] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0281.340] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0281.340] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0281.340] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0281.341] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0227419.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0227419.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0281.341] GetFileType (hFile=0x174) returned 0x1 [0281.341] CloseHandle (hObject=0x174) returned 1 [0281.342] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0281.342] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0227419.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0227419.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8ad6)) returned 1 [0281.342] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0281.342] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0281.342] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0227419.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0227419.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8ad6)) returned 1 [0281.342] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0281.343] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0281.343] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0281.343] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe2e9, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0227558.JPG", cAlternateFileName="")) returned 1 [0281.343] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0281.343] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0281.343] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0281.343] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0281.343] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0281.343] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0281.344] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0227558.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0227558.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0281.344] GetFileType (hFile=0x174) returned 0x1 [0281.344] CloseHandle (hObject=0x174) returned 1 [0281.345] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0281.345] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0227558.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0227558.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe2e9)) returned 1 [0281.345] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0281.345] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0281.345] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0227558.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0227558.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe2e9)) returned 1 [0281.345] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0281.346] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0281.346] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0281.346] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x65a6, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0228823.WMF", cAlternateFileName="")) returned 1 [0281.346] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0281.346] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0281.346] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0281.346] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0281.346] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0281.346] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0281.347] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0228823.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0228823.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0281.347] GetFileType (hFile=0x174) returned 0x1 [0281.348] CloseHandle (hObject=0x174) returned 1 [0281.348] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0281.348] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0228823.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0228823.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x65a6)) returned 1 [0281.348] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0281.348] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0281.348] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0228823.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0228823.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x65a6)) returned 1 [0281.349] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0281.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0281.349] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0281.349] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec9380a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x918c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0228959.WMF", cAlternateFileName="")) returned 1 [0281.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0281.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0281.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0281.349] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0281.349] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0281.349] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0281.350] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0228959.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0228959.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0281.350] GetFileType (hFile=0x174) returned 0x1 [0281.351] CloseHandle (hObject=0x174) returned 1 [0281.351] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0281.352] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0228959.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0228959.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec9380a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x918c)) returned 1 [0281.352] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0281.352] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0281.352] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0228959.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0228959.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec9380a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x918c)) returned 1 [0281.352] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0281.352] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0281.352] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0281.353] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1daa, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0230553.WMF", cAlternateFileName="")) returned 1 [0281.353] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0281.353] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0281.353] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0281.353] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0281.353] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0281.353] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0281.354] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0230553.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0230553.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0281.354] GetFileType (hFile=0x174) returned 0x1 [0281.355] CloseHandle (hObject=0x174) returned 1 [0281.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0281.355] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0230553.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0230553.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1daa)) returned 1 [0281.355] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0281.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0281.356] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0230553.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0230553.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1daa)) returned 1 [0281.356] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0281.356] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0281.356] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0281.356] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec9380a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1066, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0230558.WMF", cAlternateFileName="")) returned 1 [0281.356] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0281.356] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0281.356] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0281.356] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0281.356] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0281.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0281.357] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0230558.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0230558.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0281.357] GetFileType (hFile=0x174) returned 0x1 [0281.358] CloseHandle (hObject=0x174) returned 1 [0281.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0281.358] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0230558.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0230558.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec9380a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1066)) returned 1 [0281.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0281.359] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0281.359] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0230558.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0230558.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec9380a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1066)) returned 1 [0281.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0281.359] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0281.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0281.359] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x332a, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0232171.WMF", cAlternateFileName="")) returned 1 [0281.359] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0281.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0281.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0281.360] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0281.360] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0281.360] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0281.361] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232171.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232171.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0281.361] GetFileType (hFile=0x174) returned 0x1 [0281.361] CloseHandle (hObject=0x174) returned 1 [0281.362] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0281.362] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232171.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232171.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x332a)) returned 1 [0281.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0281.362] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0281.362] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232171.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232171.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x332a)) returned 1 [0281.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0281.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0281.363] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0281.363] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec9380a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6bc2, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0232393.WMF", cAlternateFileName="")) returned 1 [0281.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0281.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0281.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0281.363] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0281.363] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0281.363] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0281.364] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232393.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232393.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0281.364] GetFileType (hFile=0x174) returned 0x1 [0281.365] CloseHandle (hObject=0x174) returned 1 [0281.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0281.365] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232393.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232393.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec9380a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6bc2)) returned 1 [0281.365] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0281.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0281.365] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232393.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232393.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec9380a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6bc2)) returned 1 [0281.366] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0281.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0281.366] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0281.366] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa086, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0232395.WMF", cAlternateFileName="")) returned 1 [0281.717] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0281.717] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0281.717] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0281.717] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0281.717] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0281.717] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0281.768] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232395.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232395.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0281.768] GetFileType (hFile=0x1ac) returned 0x1 [0281.768] CloseHandle (hObject=0x1ac) returned 1 [0281.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0281.769] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232395.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232395.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa086)) returned 1 [0281.769] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0281.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0281.769] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232395.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232395.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa086)) returned 1 [0281.769] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0281.769] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0281.769] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0281.769] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec9380a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x380a, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0232795.WMF", cAlternateFileName="")) returned 1 [0281.770] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0281.770] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0281.770] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0281.770] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0281.770] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0281.770] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0281.770] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232795.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232795.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0281.771] GetFileType (hFile=0x1ac) returned 0x1 [0281.771] CloseHandle (hObject=0x1ac) returned 1 [0281.771] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0281.771] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232795.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232795.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec9380a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x380a)) returned 1 [0281.772] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0281.772] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0281.772] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232795.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232795.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec9380a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x380a)) returned 1 [0281.772] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0281.772] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0281.772] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0281.773] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x899c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0232797.WMF", cAlternateFileName="")) returned 1 [0281.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0281.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0281.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0281.773] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0281.773] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0281.773] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0281.774] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232797.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232797.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0281.774] GetFileType (hFile=0x1ac) returned 0x1 [0281.775] CloseHandle (hObject=0x1ac) returned 1 [0281.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0281.775] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232797.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232797.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x899c)) returned 1 [0281.776] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0281.776] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0281.776] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232797.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232797.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x899c)) returned 1 [0281.776] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0281.776] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0281.776] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0281.776] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4de6, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0232803.WMF", cAlternateFileName="")) returned 1 [0281.776] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0281.777] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0281.777] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0281.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0281.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0281.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0281.778] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232803.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232803.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0281.778] GetFileType (hFile=0x1ac) returned 0x1 [0281.778] CloseHandle (hObject=0x1ac) returned 1 [0281.779] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0281.779] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232803.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232803.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4de6)) returned 1 [0281.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0281.779] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0281.779] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232803.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232803.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4de6)) returned 1 [0281.779] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0281.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0281.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0281.780] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x26e8, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0233512.WMF", cAlternateFileName="")) returned 1 [0281.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0281.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0281.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0281.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0281.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0281.781] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0281.781] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0233512.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0233512.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0281.781] GetFileType (hFile=0x1ac) returned 0x1 [0281.782] CloseHandle (hObject=0x1ac) returned 1 [0281.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0281.782] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0233512.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0233512.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x26e8)) returned 1 [0281.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0281.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0281.783] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0233512.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0233512.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x26e8)) returned 1 [0281.783] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0281.783] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0281.783] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0281.783] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x312c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0233665.WMF", cAlternateFileName="")) returned 1 [0281.783] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0281.783] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0281.784] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0281.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0281.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0281.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0281.785] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0233665.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0233665.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0281.785] GetFileType (hFile=0x1ac) returned 0x1 [0281.786] CloseHandle (hObject=0x1ac) returned 1 [0281.786] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0281.786] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0233665.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0233665.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x312c)) returned 1 [0281.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0281.786] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0281.787] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0233665.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0233665.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x312c)) returned 1 [0281.787] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0281.787] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0281.787] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0281.787] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x975e, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0233992.WMF", cAlternateFileName="")) returned 1 [0281.787] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0281.787] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0281.787] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0281.788] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0281.788] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0281.788] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0281.789] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0233992.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0233992.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0281.790] GetFileType (hFile=0x1ac) returned 0x1 [0281.790] CloseHandle (hObject=0x1ac) returned 1 [0281.791] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0281.791] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0233992.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0233992.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x975e)) returned 1 [0281.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0281.791] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0281.791] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0233992.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0233992.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x975e)) returned 1 [0281.791] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0281.792] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0281.792] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0281.792] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcec6, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0234000.WMF", cAlternateFileName="")) returned 1 [0281.792] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0281.792] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0281.792] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0281.792] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0281.792] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0281.792] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0281.793] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0234000.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0234000.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0281.794] GetFileType (hFile=0x1ac) returned 0x1 [0281.794] CloseHandle (hObject=0x1ac) returned 1 [0281.795] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0281.795] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0234000.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0234000.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcec6)) returned 1 [0281.795] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0281.795] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0281.795] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0234000.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0234000.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcec6)) returned 1 [0281.795] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0281.796] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0281.796] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0281.796] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b40, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0234001.WMF", cAlternateFileName="")) returned 1 [0281.796] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0281.796] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0281.796] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0281.796] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0281.796] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0281.796] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0281.797] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0234001.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0234001.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0281.798] GetFileType (hFile=0x1ac) returned 0x1 [0281.798] CloseHandle (hObject=0x1ac) returned 1 [0281.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0281.799] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0234001.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0234001.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b40)) returned 1 [0281.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0281.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0281.799] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0234001.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0234001.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b40)) returned 1 [0281.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0281.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0281.800] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0281.800] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x80d4, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0234376.WMF", cAlternateFileName="")) returned 1 [0281.800] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0281.800] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0281.800] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0281.800] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0281.800] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0281.800] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0281.801] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0234376.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0234376.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0281.801] GetFileType (hFile=0x1ac) returned 0x1 [0281.802] CloseHandle (hObject=0x1ac) returned 1 [0281.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0281.802] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0234376.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0234376.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x80d4)) returned 1 [0281.802] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0281.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0281.802] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0234376.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0234376.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x80d4)) returned 1 [0281.803] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0281.803] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0281.803] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0281.803] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcba0, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0237225.WMF", cAlternateFileName="")) returned 1 [0281.803] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0281.803] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0281.803] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0281.803] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0281.803] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0281.803] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0282.172] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237225.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0237225.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0282.172] GetFileType (hFile=0x1c0) returned 0x1 [0282.172] CloseHandle (hObject=0x1c0) returned 1 [0282.172] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0282.172] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237225.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0237225.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcba0)) returned 1 [0282.173] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0282.173] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0282.173] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237225.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0237225.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcba0)) returned 1 [0282.173] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0282.173] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0282.173] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0282.173] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5700, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0237228.WMF", cAlternateFileName="")) returned 1 [0282.173] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0282.173] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0282.173] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0282.173] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0282.174] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0282.174] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0282.174] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237228.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0237228.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0282.174] GetFileType (hFile=0x1c0) returned 0x1 [0282.175] CloseHandle (hObject=0x1c0) returned 1 [0282.175] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0282.175] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237228.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0237228.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5700)) returned 1 [0282.175] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0282.175] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0282.175] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237228.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0237228.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5700)) returned 1 [0282.175] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0282.176] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0282.176] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0282.176] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x60c2, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0237336.WMF", cAlternateFileName="")) returned 1 [0282.176] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0282.176] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0282.176] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0282.176] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0282.176] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0282.176] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0282.177] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237336.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0237336.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0282.177] GetFileType (hFile=0x1c0) returned 0x1 [0282.177] CloseHandle (hObject=0x1c0) returned 1 [0282.177] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0282.178] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237336.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0237336.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x60c2)) returned 1 [0282.178] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0282.178] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0282.178] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237336.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0237336.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x60c2)) returned 1 [0282.178] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0282.178] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0282.178] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0282.178] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x51be, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0237759.WMF", cAlternateFileName="")) returned 1 [0282.179] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0282.179] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0282.179] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0282.180] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0282.180] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0282.180] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0282.180] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237759.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0237759.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0282.181] GetFileType (hFile=0x1c0) returned 0x1 [0282.181] CloseHandle (hObject=0x1c0) returned 1 [0282.181] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0282.181] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237759.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0237759.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x51be)) returned 1 [0282.182] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0282.182] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0282.182] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237759.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0237759.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x51be)) returned 1 [0282.182] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0282.182] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0282.182] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0282.182] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x59a0, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0238333.WMF", cAlternateFileName="")) returned 1 [0282.183] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0282.183] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0282.183] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0282.183] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0282.183] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0282.183] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0282.184] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238333.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0238333.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0282.184] GetFileType (hFile=0x1c0) returned 0x1 [0282.185] CloseHandle (hObject=0x1c0) returned 1 [0282.185] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0282.185] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238333.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0238333.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x59a0)) returned 1 [0282.185] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0282.185] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0282.186] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238333.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0238333.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x59a0)) returned 1 [0282.186] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0282.186] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0282.186] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0282.186] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1334, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0238927.WMF", cAlternateFileName="")) returned 1 [0282.186] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0282.186] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0282.187] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0282.187] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0282.187] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0282.187] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0282.187] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238927.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0238927.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0282.188] GetFileType (hFile=0x1c0) returned 0x1 [0282.188] CloseHandle (hObject=0x1c0) returned 1 [0282.188] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0282.188] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238927.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0238927.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1334)) returned 1 [0282.189] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0282.189] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0282.189] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238927.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0238927.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1334)) returned 1 [0282.189] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0282.189] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0282.189] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0282.189] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d3c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0238959.WMF", cAlternateFileName="")) returned 1 [0282.189] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0282.190] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0282.190] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0282.190] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0282.190] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0282.190] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0282.190] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238959.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0238959.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0282.191] GetFileType (hFile=0x1c0) returned 0x1 [0282.191] CloseHandle (hObject=0x1c0) returned 1 [0282.191] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0282.191] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238959.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0238959.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d3c)) returned 1 [0282.192] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0282.192] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0282.192] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238959.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0238959.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d3c)) returned 1 [0282.192] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0282.192] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0282.192] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0282.192] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13b8, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0238983.WMF", cAlternateFileName="")) returned 1 [0282.192] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0282.192] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0282.193] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0282.193] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0282.193] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0282.193] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0282.193] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238983.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0238983.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0282.193] GetFileType (hFile=0x1c0) returned 0x1 [0282.194] CloseHandle (hObject=0x1c0) returned 1 [0282.195] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0282.195] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238983.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0238983.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13b8)) returned 1 [0282.195] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0282.195] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0282.195] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238983.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0238983.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13b8)) returned 1 [0282.195] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0282.195] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0282.195] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0282.195] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1284, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0239057.WMF", cAlternateFileName="")) returned 1 [0282.196] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0282.196] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0282.196] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0282.196] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0282.196] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0282.196] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0282.197] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239057.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239057.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0282.197] GetFileType (hFile=0x1c0) returned 0x1 [0282.197] CloseHandle (hObject=0x1c0) returned 1 [0282.197] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0282.198] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239057.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239057.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1284)) returned 1 [0282.198] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0282.198] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0282.198] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239057.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239057.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1284)) returned 1 [0282.198] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0282.198] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0282.198] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0282.198] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16fc, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0239063.WMF", cAlternateFileName="")) returned 1 [0282.199] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0282.199] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0282.199] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0282.199] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0282.199] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0282.199] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0282.199] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239063.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239063.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0282.200] GetFileType (hFile=0x1c0) returned 0x1 [0282.200] CloseHandle (hObject=0x1c0) returned 1 [0282.200] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0282.200] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239063.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239063.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16fc)) returned 1 [0282.201] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0282.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0282.201] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239063.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239063.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16fc)) returned 1 [0282.201] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0282.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0282.201] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0282.201] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1294, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0239079.WMF", cAlternateFileName="")) returned 1 [0282.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0282.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0282.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0282.201] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0282.201] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0282.202] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0282.202] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239079.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239079.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0282.202] GetFileType (hFile=0x1c0) returned 0x1 [0282.203] CloseHandle (hObject=0x1c0) returned 1 [0282.203] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0282.203] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239079.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239079.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1294)) returned 1 [0282.203] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0282.203] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0282.203] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239079.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239079.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1294)) returned 1 [0282.203] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0282.203] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0282.204] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0282.204] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1464, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0239191.WMF", cAlternateFileName="")) returned 1 [0282.204] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0282.204] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0282.204] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0282.204] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0282.204] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0282.204] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0282.205] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239191.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239191.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0282.205] GetFileType (hFile=0x1c0) returned 0x1 [0282.205] CloseHandle (hObject=0x1c0) returned 1 [0282.205] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0282.205] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239191.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239191.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1464)) returned 1 [0282.206] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0282.206] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0282.206] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239191.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239191.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1464)) returned 1 [0282.206] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0282.206] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0282.206] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0282.206] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8424, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0239611.WMF", cAlternateFileName="")) returned 1 [0282.206] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0282.206] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0282.206] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0282.206] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0282.206] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0282.206] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0282.207] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239611.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239611.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0282.207] GetFileType (hFile=0x1c0) returned 0x1 [0282.207] CloseHandle (hObject=0x1c0) returned 1 [0282.207] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0282.208] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239611.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239611.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8424)) returned 1 [0282.208] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0282.208] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0282.208] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239611.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239611.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8424)) returned 1 [0282.208] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0282.208] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0282.208] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0282.208] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1314, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0239935.WMF", cAlternateFileName="")) returned 1 [0282.208] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0282.208] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0282.208] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0282.208] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0282.209] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0282.209] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0282.209] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239935.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239935.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0282.209] GetFileType (hFile=0x1c0) returned 0x1 [0282.210] CloseHandle (hObject=0x1c0) returned 1 [0282.558] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0282.558] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239935.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239935.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1314)) returned 1 [0282.559] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0282.559] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0282.559] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239935.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239935.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1314)) returned 1 [0282.559] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0282.559] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0282.559] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0282.559] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1418, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0239941.WMF", cAlternateFileName="")) returned 1 [0282.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0282.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0282.560] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0282.560] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0282.560] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0282.560] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0282.561] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239941.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239941.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0282.561] GetFileType (hFile=0x1c0) returned 0x1 [0282.562] CloseHandle (hObject=0x1c0) returned 1 [0282.562] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0282.562] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239941.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239941.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1418)) returned 1 [0282.562] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0282.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0282.563] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239941.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239941.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1418)) returned 1 [0282.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0282.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0282.563] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0282.563] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1998, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0239943.WMF", cAlternateFileName="")) returned 1 [0282.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0282.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0282.563] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0282.564] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0282.564] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0282.564] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0282.564] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239943.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239943.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0282.565] GetFileType (hFile=0x1c0) returned 0x1 [0282.565] CloseHandle (hObject=0x1c0) returned 1 [0282.566] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0282.566] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239943.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239943.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1998)) returned 1 [0282.566] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0282.566] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0282.566] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239943.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239943.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1998)) returned 1 [0282.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0282.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0282.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0282.567] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c40, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0239951.WMF", cAlternateFileName="")) returned 1 [0282.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0282.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0282.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0282.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0282.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0282.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0282.568] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239951.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239951.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0282.569] GetFileType (hFile=0x1c0) returned 0x1 [0282.570] CloseHandle (hObject=0x1c0) returned 1 [0282.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0282.570] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239951.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239951.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c40)) returned 1 [0282.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0282.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0282.571] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239951.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239951.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c40)) returned 1 [0282.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0282.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0282.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0282.571] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bc8, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0239953.WMF", cAlternateFileName="")) returned 1 [0282.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0282.572] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0282.572] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0282.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0282.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0282.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0282.573] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239953.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239953.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0282.573] GetFileType (hFile=0x1c0) returned 0x1 [0282.574] CloseHandle (hObject=0x1c0) returned 1 [0282.574] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0282.574] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239953.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239953.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bc8)) returned 1 [0282.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0282.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0282.575] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239953.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239953.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bc8)) returned 1 [0282.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0282.575] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0282.575] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0282.576] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1348, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0239955.WMF", cAlternateFileName="")) returned 1 [0282.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0282.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0282.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0282.576] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0282.576] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0282.576] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0282.577] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239955.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239955.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0282.577] GetFileType (hFile=0x1c0) returned 0x1 [0282.578] CloseHandle (hObject=0x1c0) returned 1 [0282.578] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0282.578] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239955.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239955.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1348)) returned 1 [0282.579] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0282.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0282.579] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239955.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239955.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1348)) returned 1 [0282.579] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0282.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0282.579] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0282.579] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1720, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0239965.WMF", cAlternateFileName="")) returned 1 [0282.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0282.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0282.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0282.580] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0282.580] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0282.580] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0282.581] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239965.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239965.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0282.581] GetFileType (hFile=0x1c0) returned 0x1 [0282.582] CloseHandle (hObject=0x1c0) returned 1 [0282.582] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0282.582] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239965.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239965.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1720)) returned 1 [0282.583] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0282.583] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0282.583] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239965.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239965.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1720)) returned 1 [0282.583] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0282.583] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0282.583] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0282.583] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x154c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0239967.WMF", cAlternateFileName="")) returned 1 [0282.584] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0282.584] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0282.584] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0282.584] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0282.584] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0282.584] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0282.586] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239967.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239967.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0282.586] GetFileType (hFile=0x1c0) returned 0x1 [0282.587] CloseHandle (hObject=0x1c0) returned 1 [0282.587] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0282.587] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239967.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239967.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x154c)) returned 1 [0282.588] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0282.588] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0282.588] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239967.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239967.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x154c)) returned 1 [0282.588] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0282.588] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0282.588] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0282.588] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13e8, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0239973.WMF", cAlternateFileName="")) returned 1 [0282.588] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0282.589] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0282.589] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0282.589] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0282.589] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0282.589] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0282.590] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239973.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239973.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0282.590] GetFileType (hFile=0x1c0) returned 0x1 [0282.591] CloseHandle (hObject=0x1c0) returned 1 [0282.591] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0282.591] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239973.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239973.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13e8)) returned 1 [0282.591] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0282.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0282.592] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239973.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239973.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13e8)) returned 1 [0282.592] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0282.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0282.592] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0282.592] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xed05f07, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xed05f07, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xed05f07, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xda0, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0239975.WMF", cAlternateFileName="")) returned 1 [0282.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0282.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0282.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0282.593] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0282.593] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0282.593] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0282.594] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239975.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239975.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0282.594] GetFileType (hFile=0x1c0) returned 0x1 [0282.595] CloseHandle (hObject=0x1c0) returned 1 [0282.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0282.595] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239975.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239975.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xed05f07, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xed05f07, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xed05f07, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xda0)) returned 1 [0282.595] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0282.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0282.596] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239975.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239975.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xed05f07, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xed05f07, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xed05f07, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xda0)) returned 1 [0282.596] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0282.596] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0282.596] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0282.596] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xed05f07, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xed05f07, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf2fbd2e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcd8, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0239997.WMF", cAlternateFileName="")) returned 1 [0282.596] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0282.596] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0282.597] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0282.597] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0282.597] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0282.597] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0282.598] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239997.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239997.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0282.598] GetFileType (hFile=0x1c0) returned 0x1 [0282.599] CloseHandle (hObject=0x1c0) returned 1 [0282.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0282.599] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239997.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239997.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xed05f07, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xed05f07, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf2fbd2e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcd8)) returned 1 [0282.599] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0282.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0282.600] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239997.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239997.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xed05f07, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xed05f07, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf2fbd2e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcd8)) returned 1 [0282.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0282.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0282.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0282.600] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xed05f07, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1df8, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0240157.WMF", cAlternateFileName="")) returned 1 [0282.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0282.826] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0282.826] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0282.826] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0282.826] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0282.826] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0282.932] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240157.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0240157.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0282.932] GetFileType (hFile=0x198) returned 0x1 [0282.932] CloseHandle (hObject=0x198) returned 1 [0282.933] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0282.933] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240157.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0240157.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xed05f07, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1df8)) returned 1 [0282.933] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0282.933] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0282.933] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240157.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0240157.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xed05f07, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1df8)) returned 1 [0282.933] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0282.933] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0282.933] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0282.933] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xed05f07, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa410, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0240175.WMF", cAlternateFileName="")) returned 1 [0282.933] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0282.934] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0282.934] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0282.934] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0282.934] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0282.934] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0282.934] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240175.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0240175.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0282.934] GetFileType (hFile=0x198) returned 0x1 [0282.934] CloseHandle (hObject=0x198) returned 1 [0282.935] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0282.935] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240175.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0240175.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xed05f07, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa410)) returned 1 [0282.935] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0282.935] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0282.935] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240175.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0240175.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xed05f07, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa410)) returned 1 [0282.935] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0282.935] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0282.935] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0282.935] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xed05f07, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdc4, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0240189.WMF", cAlternateFileName="")) returned 1 [0282.935] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0282.935] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0282.936] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0282.936] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0282.936] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0282.936] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0282.936] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240189.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0240189.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0282.936] GetFileType (hFile=0x198) returned 0x1 [0282.936] CloseHandle (hObject=0x198) returned 1 [0282.937] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0282.937] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240189.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0240189.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xed05f07, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdc4)) returned 1 [0282.937] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0282.937] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0282.937] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240189.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0240189.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xed05f07, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdc4)) returned 1 [0282.937] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0282.937] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0282.937] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0282.937] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1476, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0240291.WMF", cAlternateFileName="")) returned 1 [0282.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0282.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0282.938] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0282.938] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0282.938] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0282.938] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0282.938] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240291.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0240291.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0282.938] GetFileType (hFile=0x198) returned 0x1 [0282.939] CloseHandle (hObject=0x198) returned 1 [0282.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0282.939] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240291.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0240291.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1476)) returned 1 [0282.939] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0282.939] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0282.939] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240291.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0240291.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1476)) returned 1 [0282.940] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0282.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0282.940] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0282.940] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xed05f07, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x92e, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0241019.WMF", cAlternateFileName="")) returned 1 [0282.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0282.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0282.940] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0282.940] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0282.940] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0282.940] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0282.941] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241019.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241019.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0282.941] GetFileType (hFile=0x198) returned 0x1 [0282.941] CloseHandle (hObject=0x198) returned 1 [0282.941] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0282.942] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241019.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241019.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xed05f07, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x92e)) returned 1 [0282.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0282.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0282.942] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241019.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241019.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xed05f07, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x92e)) returned 1 [0282.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0282.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0282.942] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0282.942] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa4e, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0241037.WMF", cAlternateFileName="")) returned 1 [0282.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0282.942] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0282.943] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0282.943] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0282.943] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0282.943] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0282.943] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241037.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241037.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0282.944] GetFileType (hFile=0x198) returned 0x1 [0282.944] CloseHandle (hObject=0x198) returned 1 [0282.944] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0282.945] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241037.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241037.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa4e)) returned 1 [0282.945] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0282.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0282.945] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241037.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241037.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa4e)) returned 1 [0282.945] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0282.945] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0282.945] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0282.945] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x926, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0241041.WMF", cAlternateFileName="")) returned 1 [0282.946] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0282.946] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0282.946] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0282.946] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0282.946] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0282.946] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0282.946] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241041.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241041.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0282.947] GetFileType (hFile=0x198) returned 0x1 [0282.947] CloseHandle (hObject=0x198) returned 1 [0282.947] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0282.947] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241041.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241041.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x926)) returned 1 [0282.947] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0282.947] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0282.947] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241041.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241041.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x926)) returned 1 [0282.948] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0282.948] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0282.948] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0282.948] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xab2, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0241043.WMF", cAlternateFileName="")) returned 1 [0282.948] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0282.948] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0282.948] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0282.948] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0282.948] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0282.948] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0282.949] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241043.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241043.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0282.949] GetFileType (hFile=0x198) returned 0x1 [0282.949] CloseHandle (hObject=0x198) returned 1 [0282.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0282.949] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241043.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241043.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xab2)) returned 1 [0282.949] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0282.949] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0282.950] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241043.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241043.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xab2)) returned 1 [0282.950] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0282.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0282.950] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0282.950] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34834b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf34834b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x82a, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0241077.WMF", cAlternateFileName="")) returned 1 [0282.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0282.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0282.950] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0282.950] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0282.950] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0282.950] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0282.951] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241077.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241077.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0282.951] GetFileType (hFile=0x198) returned 0x1 [0282.951] CloseHandle (hObject=0x198) returned 1 [0282.951] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0282.951] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241077.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241077.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34834b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf34834b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x82a)) returned 1 [0282.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0282.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0282.952] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241077.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241077.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34834b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf34834b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x82a)) returned 1 [0282.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0282.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0282.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0282.952] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34834b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf34834b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcbe, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0241773.WMF", cAlternateFileName="")) returned 1 [0282.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0282.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0282.952] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0282.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0282.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0282.952] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0282.953] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241773.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241773.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0282.953] GetFileType (hFile=0x198) returned 0x1 [0282.953] CloseHandle (hObject=0x198) returned 1 [0282.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0282.954] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241773.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241773.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34834b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf34834b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcbe)) returned 1 [0282.954] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0282.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0282.954] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241773.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241773.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34834b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf34834b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcbe)) returned 1 [0282.954] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0282.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0282.954] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0282.954] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34834b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf34834b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7b2, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0241781.WMF", cAlternateFileName="")) returned 1 [0282.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0282.954] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0282.955] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0282.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0282.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0282.955] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0282.955] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241781.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241781.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0282.955] GetFileType (hFile=0x198) returned 0x1 [0282.955] CloseHandle (hObject=0x198) returned 1 [0282.956] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0282.956] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241781.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241781.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34834b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf34834b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7b2)) returned 1 [0282.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0282.956] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0282.956] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241781.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241781.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34834b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf34834b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7b2)) returned 1 [0282.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0282.956] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0282.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0282.956] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34834b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf34834b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7938, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0250504.WMF", cAlternateFileName="")) returned 1 [0282.956] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0282.956] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0282.956] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0282.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0282.956] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0282.957] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0282.957] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0250504.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0250504.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0282.957] GetFileType (hFile=0x198) returned 0x1 [0282.957] CloseHandle (hObject=0x198) returned 1 [0282.957] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0282.958] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0250504.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0250504.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34834b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf34834b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7938)) returned 1 [0282.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0282.958] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0282.958] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0250504.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0250504.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34834b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf34834b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7938)) returned 1 [0282.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0282.958] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0282.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0282.958] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf2fbd2e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf2fbd2e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf34834b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6958, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0250997.WMF", cAlternateFileName="")) returned 1 [0282.958] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0282.958] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0282.958] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0282.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0282.958] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0282.959] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0282.959] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0250997.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0250997.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0282.959] GetFileType (hFile=0x198) returned 0x1 [0282.959] CloseHandle (hObject=0x198) returned 1 [0282.960] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0282.960] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0250997.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0250997.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf2fbd2e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf2fbd2e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf34834b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6958)) returned 1 [0282.960] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0282.960] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0282.960] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0250997.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0250997.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf2fbd2e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf2fbd2e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf34834b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6958)) returned 1 [0282.960] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0282.960] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0282.960] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0282.961] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xed05f07, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xed05f07, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf34834b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1100c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0251007.WMF", cAlternateFileName="")) returned 1 [0282.961] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0282.961] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0282.961] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0282.961] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0282.961] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0282.961] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0282.961] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0251007.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0251007.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0282.961] GetFileType (hFile=0x198) returned 0x1 [0282.962] CloseHandle (hObject=0x198) returned 1 [0282.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0282.962] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0251007.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0251007.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xed05f07, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xed05f07, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf34834b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1100c)) returned 1 [0282.962] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0282.962] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0282.962] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0251007.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0251007.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xed05f07, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xed05f07, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf34834b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1100c)) returned 1 [0282.963] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0282.963] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0282.963] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0282.963] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34834b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf34834b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf34834b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xae2, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0252629.WMF", cAlternateFileName="")) returned 1 [0282.963] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238190 [0282.963] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0282.963] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0282.963] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0282.963] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0282.963] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238190 | out: hHeap=0x1f0000) returned 1 [0282.963] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0252629.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0252629.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0282.964] GetFileType (hFile=0x198) returned 0x1 [0282.964] CloseHandle (hObject=0x198) returned 1 [0282.964] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0282.964] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0252629.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0252629.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34834b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf34834b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf34834b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xae2)) returned 1 [0282.964] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0282.964] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0282.965] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0252629.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0252629.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34834b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf34834b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf34834b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xae2)) returned 1 [0282.965] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0282.965] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0282.965] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0282.965] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf2fbd2e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf2fbd2e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf34834b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf56, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0252669.WMF", cAlternateFileName="")) returned 1 [0282.965] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0282.965] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0282.965] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0282.965] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0282.965] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0282.965] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0282.966] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0252669.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0252669.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0282.966] GetFileType (hFile=0x198) returned 0x1 [0282.966] CloseHandle (hObject=0x198) returned 1 [0282.967] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0282.967] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0252669.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0252669.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf2fbd2e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf2fbd2e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf34834b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf56)) returned 1 [0282.967] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0282.967] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0282.967] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0252669.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0252669.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf2fbd2e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf2fbd2e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf34834b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf56)) returned 1 [0282.967] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0282.967] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0282.967] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0282.967] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xed05f07, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xed05f07, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf34834b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf6a, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0278702.WMF", cAlternateFileName="")) returned 1 [0282.967] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0282.968] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0282.968] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0282.968] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0282.968] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0282.968] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0282.968] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0278702.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0278702.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0282.968] GetFileType (hFile=0x198) returned 0x1 [0282.969] CloseHandle (hObject=0x198) returned 1 [0282.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0282.969] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0278702.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0278702.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xed05f07, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xed05f07, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf34834b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf6a)) returned 1 [0282.969] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0282.969] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0282.970] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0278702.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0278702.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xed05f07, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xed05f07, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf34834b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf6a)) returned 1 [0282.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0282.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0282.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0282.970] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xed05f07, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xed05f07, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf2fbd2e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4330, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0279644.WMF", cAlternateFileName="")) returned 1 [0282.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0282.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0282.970] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0282.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0282.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0282.970] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0282.971] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0279644.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0279644.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0282.971] GetFileType (hFile=0x198) returned 0x1 [0282.971] CloseHandle (hObject=0x198) returned 1 [0282.971] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0282.971] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0279644.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0279644.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xed05f07, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xed05f07, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf2fbd2e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4330)) returned 1 [0282.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0282.972] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0282.972] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0279644.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0279644.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xed05f07, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xed05f07, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf2fbd2e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4330)) returned 1 [0282.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0282.972] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0282.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0282.972] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11dee, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0280468.WMF", cAlternateFileName="")) returned 1 [0282.972] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0282.972] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212b58 [0282.972] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0282.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212b58 | out: hHeap=0x1f0000) returned 1 [0282.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0282.972] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0282.973] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0280468.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0280468.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0282.973] GetFileType (hFile=0x198) returned 0x1 [0282.973] CloseHandle (hObject=0x198) returned 1 [0282.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0282.974] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0280468.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0280468.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11dee)) returned 1 [0282.974] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0282.974] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0282.974] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0280468.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0280468.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11dee)) returned 1 [0282.974] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0282.974] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0282.974] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0282.974] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x94c4, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0281008.WMF", cAlternateFileName="")) returned 1 [0282.974] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0282.974] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0282.974] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0282.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0282.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0282.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0282.975] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281008.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281008.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0283.320] GetFileType (hFile=0x198) returned 0x1 [0283.321] CloseHandle (hObject=0x198) returned 1 [0283.321] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0283.321] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281008.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281008.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x94c4)) returned 1 [0283.321] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0283.321] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0283.321] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281008.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281008.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x94c4)) returned 1 [0283.322] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0283.322] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0283.322] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0283.322] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb5b4, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0281243.WMF", cAlternateFileName="")) returned 1 [0283.322] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0283.322] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0283.322] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0283.322] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0283.322] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0283.322] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0283.323] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281243.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281243.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0283.323] GetFileType (hFile=0x198) returned 0x1 [0283.323] CloseHandle (hObject=0x198) returned 1 [0283.324] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0283.324] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281243.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281243.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb5b4)) returned 1 [0283.324] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0283.324] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0283.324] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281243.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281243.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb5b4)) returned 1 [0283.324] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0283.325] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0283.325] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0283.325] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31dc, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0281630.WMF", cAlternateFileName="")) returned 1 [0283.325] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0283.325] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0283.325] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0283.325] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0283.325] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0283.325] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0283.326] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281630.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281630.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0283.326] GetFileType (hFile=0x198) returned 0x1 [0283.326] CloseHandle (hObject=0x198) returned 1 [0283.326] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0283.327] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281630.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281630.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31dc)) returned 1 [0283.327] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0283.327] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0283.327] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281630.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281630.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31dc)) returned 1 [0283.327] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0283.327] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0283.327] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0283.327] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3854, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0281632.WMF", cAlternateFileName="")) returned 1 [0283.327] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0283.328] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0283.328] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0283.328] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0283.328] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0283.328] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0283.328] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281632.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281632.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0283.328] GetFileType (hFile=0x198) returned 0x1 [0283.329] CloseHandle (hObject=0x198) returned 1 [0283.329] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0283.329] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281632.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281632.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3854)) returned 1 [0283.329] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0283.329] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0283.329] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281632.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281632.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3854)) returned 1 [0283.330] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0283.330] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0283.330] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0283.330] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34834b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf34834b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e88, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0281638.WMF", cAlternateFileName="")) returned 1 [0283.330] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0283.330] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0283.330] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0283.330] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0283.330] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0283.330] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0283.331] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281638.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281638.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0283.331] GetFileType (hFile=0x198) returned 0x1 [0283.331] CloseHandle (hObject=0x198) returned 1 [0283.331] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0283.332] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281638.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281638.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34834b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf34834b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e88)) returned 1 [0283.332] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0283.332] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0283.332] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281638.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281638.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34834b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf34834b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e88)) returned 1 [0283.332] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0283.332] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0283.332] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0283.332] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30f2, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0281640.WMF", cAlternateFileName="")) returned 1 [0283.332] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0283.332] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0283.332] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0283.333] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0283.333] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0283.333] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0283.333] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281640.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281640.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0283.333] GetFileType (hFile=0x198) returned 0x1 [0283.334] CloseHandle (hObject=0x198) returned 1 [0283.334] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0283.334] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281640.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281640.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30f2)) returned 1 [0283.334] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0283.334] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0283.334] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281640.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281640.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30f2)) returned 1 [0283.335] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0283.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0283.335] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0283.335] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3c9e, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0282126.WMF", cAlternateFileName="")) returned 1 [0283.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0283.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0283.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0283.335] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0283.335] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0283.335] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0283.336] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0282126.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0282126.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0283.336] GetFileType (hFile=0x198) returned 0x1 [0283.336] CloseHandle (hObject=0x198) returned 1 [0283.336] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0283.336] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0282126.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0282126.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3c9e)) returned 1 [0283.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0283.337] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0283.337] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0282126.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0282126.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3c9e)) returned 1 [0283.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0283.337] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0283.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0283.337] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8166, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0282928.WMF", cAlternateFileName="")) returned 1 [0283.337] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0283.337] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0283.337] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0283.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0283.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0283.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0283.338] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0282928.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0282928.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0283.338] GetFileType (hFile=0x198) returned 0x1 [0283.338] CloseHandle (hObject=0x198) returned 1 [0283.339] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0283.339] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0282928.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0282928.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8166)) returned 1 [0283.339] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0283.339] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0283.339] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0282928.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0282928.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8166)) returned 1 [0283.339] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0283.339] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0283.340] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0283.340] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34834b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf34834b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3700, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0282932.WMF", cAlternateFileName="")) returned 1 [0283.340] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0283.340] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0283.340] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0283.341] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0283.341] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0283.341] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0283.341] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0282932.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0282932.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0283.341] GetFileType (hFile=0x198) returned 0x1 [0283.342] CloseHandle (hObject=0x198) returned 1 [0283.342] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0283.342] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0282932.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0282932.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34834b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf34834b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3700)) returned 1 [0283.342] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0283.342] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0283.342] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0282932.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0282932.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34834b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf34834b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3700)) returned 1 [0283.342] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0283.342] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0283.343] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0283.343] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x388a, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0285462.WMF", cAlternateFileName="")) returned 1 [0283.343] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0283.343] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0283.343] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0283.343] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0283.343] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0283.343] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0283.344] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285462.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285462.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0283.344] GetFileType (hFile=0x198) returned 0x1 [0283.344] CloseHandle (hObject=0x198) returned 1 [0283.345] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0283.345] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285462.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285462.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x388a)) returned 1 [0283.345] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0283.345] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0283.345] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285462.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285462.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x388a)) returned 1 [0283.345] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0283.345] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0283.345] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0283.345] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2440, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0285484.WMF", cAlternateFileName="")) returned 1 [0283.345] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0283.346] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0283.346] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0283.346] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0283.346] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0283.346] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0283.346] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285484.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285484.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0283.682] GetFileType (hFile=0x174) returned 0x1 [0283.682] CloseHandle (hObject=0x174) returned 1 [0283.682] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0283.683] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285484.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285484.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2440)) returned 1 [0283.683] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0283.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0283.683] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285484.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285484.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2440)) returned 1 [0283.683] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0283.683] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0283.683] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0283.684] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x795c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0285780.WMF", cAlternateFileName="")) returned 1 [0283.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0283.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0283.684] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0283.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0283.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0283.684] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0283.685] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285780.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285780.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0283.685] GetFileType (hFile=0x174) returned 0x1 [0283.686] CloseHandle (hObject=0x174) returned 1 [0283.686] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0283.686] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285780.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285780.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x795c)) returned 1 [0283.686] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0283.686] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0283.686] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285780.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285780.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x795c)) returned 1 [0283.687] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0283.687] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0283.687] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0283.687] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x523e, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0285782.WMF", cAlternateFileName="")) returned 1 [0283.687] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0283.687] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0283.687] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0283.687] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0283.687] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0283.687] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0283.688] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285782.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285782.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0283.688] GetFileType (hFile=0x174) returned 0x1 [0283.688] CloseHandle (hObject=0x174) returned 1 [0283.688] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0283.688] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285782.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285782.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x523e)) returned 1 [0283.688] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0283.689] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0283.689] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285782.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285782.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x523e)) returned 1 [0283.689] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0283.689] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0283.689] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0283.689] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2eb4, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0285792.WMF", cAlternateFileName="")) returned 1 [0283.689] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0283.689] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0283.689] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0283.689] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0283.689] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0283.689] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0283.690] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285792.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285792.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0283.690] GetFileType (hFile=0x174) returned 0x1 [0283.690] CloseHandle (hObject=0x174) returned 1 [0283.690] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0283.691] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285792.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285792.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2eb4)) returned 1 [0283.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0283.691] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0283.691] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285792.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285792.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2eb4)) returned 1 [0283.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0283.691] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0283.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0283.691] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3550, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0285796.WMF", cAlternateFileName="")) returned 1 [0283.691] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0283.691] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0283.691] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0283.691] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0283.692] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0283.692] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0283.692] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285796.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285796.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0283.692] GetFileType (hFile=0x174) returned 0x1 [0283.693] CloseHandle (hObject=0x174) returned 1 [0283.693] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0283.693] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285796.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285796.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3550)) returned 1 [0283.693] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0283.693] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0283.693] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285796.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285796.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3550)) returned 1 [0283.693] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0283.693] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0283.693] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0283.693] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x23f4, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0285808.WMF", cAlternateFileName="")) returned 1 [0283.694] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0283.694] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0283.694] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0283.694] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0283.694] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0283.694] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0283.694] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285808.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285808.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0283.695] GetFileType (hFile=0x174) returned 0x1 [0283.695] CloseHandle (hObject=0x174) returned 1 [0283.695] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0283.695] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285808.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285808.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x23f4)) returned 1 [0283.695] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0283.695] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0283.696] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285808.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285808.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x23f4)) returned 1 [0283.696] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0283.696] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0283.696] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0283.696] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2210, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0285820.WMF", cAlternateFileName="")) returned 1 [0283.696] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0283.696] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0283.696] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0283.696] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0283.696] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0283.696] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0283.697] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285820.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285820.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0283.697] GetFileType (hFile=0x174) returned 0x1 [0283.697] CloseHandle (hObject=0x174) returned 1 [0283.698] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0283.698] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285820.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285820.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2210)) returned 1 [0283.698] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0283.698] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0283.698] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285820.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285820.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2210)) returned 1 [0283.698] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0283.698] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0283.698] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0283.699] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21a0, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0285822.WMF", cAlternateFileName="")) returned 1 [0283.699] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0283.699] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0283.699] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0283.699] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0283.699] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0283.699] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0283.700] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285822.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285822.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0283.700] GetFileType (hFile=0x174) returned 0x1 [0283.701] CloseHandle (hObject=0x174) returned 1 [0283.701] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0283.701] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285822.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285822.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21a0)) returned 1 [0283.701] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0283.701] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0283.702] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285822.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285822.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21a0)) returned 1 [0283.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0283.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0283.702] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0283.702] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7898, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0287018.WMF", cAlternateFileName="")) returned 1 [0283.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0283.702] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0283.703] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0283.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0283.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0283.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0283.703] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287018.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287018.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0283.704] GetFileType (hFile=0x174) returned 0x1 [0283.704] CloseHandle (hObject=0x174) returned 1 [0283.705] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0283.705] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287018.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287018.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7898)) returned 1 [0283.705] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0283.705] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0283.705] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287018.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287018.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7898)) returned 1 [0283.705] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0283.705] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0283.705] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0283.706] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x931a, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0287019.WMF", cAlternateFileName="")) returned 1 [0283.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0283.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0283.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0283.706] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0283.706] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0283.706] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0283.707] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287019.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287019.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0283.707] GetFileType (hFile=0x174) returned 0x1 [0283.708] CloseHandle (hObject=0x174) returned 1 [0283.708] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0283.709] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287019.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287019.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x931a)) returned 1 [0283.709] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0283.709] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0283.709] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287019.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287019.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x931a)) returned 1 [0283.709] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0283.709] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0283.709] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0283.709] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x80d8, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0287020.WMF", cAlternateFileName="")) returned 1 [0283.710] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0283.710] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0283.710] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0283.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0283.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0283.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0283.711] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287020.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287020.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0283.711] GetFileType (hFile=0x174) returned 0x1 [0283.712] CloseHandle (hObject=0x174) returned 1 [0283.712] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0283.712] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287020.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287020.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x80d8)) returned 1 [0283.713] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0283.713] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0283.713] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287020.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287020.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x80d8)) returned 1 [0283.713] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0283.713] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0283.713] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0283.713] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc6d2, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0287024.WMF", cAlternateFileName="")) returned 1 [0283.714] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0283.714] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0283.714] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0283.714] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0283.714] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0283.714] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0283.715] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287024.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287024.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0284.047] GetFileType (hFile=0x1e0) returned 0x1 [0284.048] CloseHandle (hObject=0x1e0) returned 1 [0284.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0284.048] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287024.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287024.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc6d2)) returned 1 [0284.048] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0284.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0284.049] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287024.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287024.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc6d2)) returned 1 [0284.049] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0284.049] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0284.049] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0284.049] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcd10, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0287408.WMF", cAlternateFileName="")) returned 1 [0284.049] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0284.049] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0284.049] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0284.049] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0284.050] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0284.050] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0284.050] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287408.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287408.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0284.051] GetFileType (hFile=0x1e0) returned 0x1 [0284.051] CloseHandle (hObject=0x1e0) returned 1 [0284.051] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0284.051] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287408.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287408.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcd10)) returned 1 [0284.052] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0284.052] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0284.052] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287408.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287408.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcd10)) returned 1 [0284.052] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0284.052] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0284.052] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0284.052] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa80c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0287415.WMF", cAlternateFileName="")) returned 1 [0284.052] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0284.052] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0284.053] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0284.053] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0284.053] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0284.053] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0284.053] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287415.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287415.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0284.054] GetFileType (hFile=0x1e0) returned 0x1 [0284.054] CloseHandle (hObject=0x1e0) returned 1 [0284.054] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0284.054] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287415.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287415.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa80c)) returned 1 [0284.054] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0284.055] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0284.055] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287415.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287415.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa80c)) returned 1 [0284.055] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0284.055] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0284.055] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0284.055] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd6bc, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0287417.WMF", cAlternateFileName="")) returned 1 [0284.055] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0284.055] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0284.055] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0284.055] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0284.056] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0284.056] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0284.056] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287417.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287417.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0284.056] GetFileType (hFile=0x1e0) returned 0x1 [0284.057] CloseHandle (hObject=0x1e0) returned 1 [0284.057] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0284.057] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287417.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287417.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd6bc)) returned 1 [0284.057] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0284.057] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0284.058] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287417.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287417.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd6bc)) returned 1 [0284.058] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0284.058] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0284.058] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0284.058] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x89a4, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0287641.JPG", cAlternateFileName="")) returned 1 [0284.058] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0284.058] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0284.058] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0284.058] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0284.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0284.060] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0284.060] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287641.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287641.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0284.061] GetFileType (hFile=0x1e0) returned 0x1 [0284.061] CloseHandle (hObject=0x1e0) returned 1 [0284.062] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0284.062] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287641.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287641.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x89a4)) returned 1 [0284.062] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0284.062] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0284.062] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287641.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287641.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x89a4)) returned 1 [0284.062] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0284.063] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0284.063] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0284.063] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x42d1, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0287642.JPG", cAlternateFileName="")) returned 1 [0284.063] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0284.063] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0284.063] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0284.063] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0284.063] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0284.064] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0284.064] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287642.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287642.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0284.064] GetFileType (hFile=0x1e0) returned 0x1 [0284.065] CloseHandle (hObject=0x1e0) returned 1 [0284.065] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0284.066] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287642.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287642.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x42d1)) returned 1 [0284.066] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0284.066] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0284.066] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287642.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287642.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x42d1)) returned 1 [0284.066] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0284.066] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0284.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0284.067] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3e91, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0287643.JPG", cAlternateFileName="")) returned 1 [0284.067] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0284.067] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0284.067] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0284.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0284.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0284.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0284.068] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287643.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287643.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0284.068] GetFileType (hFile=0x1e0) returned 0x1 [0284.069] CloseHandle (hObject=0x1e0) returned 1 [0284.069] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0284.069] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287643.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287643.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3e91)) returned 1 [0284.069] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0284.069] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0284.070] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287643.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287643.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3e91)) returned 1 [0284.070] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0284.070] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0284.070] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0284.070] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43c5, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0287644.JPG", cAlternateFileName="")) returned 1 [0284.070] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0284.070] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0284.070] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0284.071] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0284.071] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0284.071] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0284.071] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287644.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287644.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0284.071] GetFileType (hFile=0x1e0) returned 0x1 [0284.072] CloseHandle (hObject=0x1e0) returned 1 [0284.072] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0284.072] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287644.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287644.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43c5)) returned 1 [0284.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0284.072] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0284.072] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287644.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287644.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43c5)) returned 1 [0284.073] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0284.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0284.073] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0284.073] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8d86, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0287645.JPG", cAlternateFileName="")) returned 1 [0284.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0284.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0284.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0284.073] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0284.073] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0284.073] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0284.074] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287645.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287645.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0284.074] GetFileType (hFile=0x1e0) returned 0x1 [0284.075] CloseHandle (hObject=0x1e0) returned 1 [0284.075] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0284.075] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287645.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287645.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8d86)) returned 1 [0284.075] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0284.075] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0284.075] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287645.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287645.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8d86)) returned 1 [0284.076] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0284.076] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0284.076] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0284.076] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d21, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0289430.JPG", cAlternateFileName="")) returned 1 [0284.076] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0284.076] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0284.076] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0284.076] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0284.076] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0284.076] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0284.077] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0289430.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0289430.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0284.419] GetFileType (hFile=0x198) returned 0x1 [0284.420] CloseHandle (hObject=0x198) returned 1 [0284.420] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0284.420] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0289430.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0289430.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d21)) returned 1 [0284.420] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0284.420] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0284.420] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0289430.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0289430.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d21)) returned 1 [0284.421] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0284.421] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0284.421] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0284.421] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9e8a, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0290548.WMF", cAlternateFileName="")) returned 1 [0284.421] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0284.421] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0284.421] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0284.421] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0284.422] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0284.422] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0284.422] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0290548.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0290548.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0284.423] GetFileType (hFile=0x198) returned 0x1 [0284.423] CloseHandle (hObject=0x198) returned 1 [0284.424] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0284.424] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0290548.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0290548.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9e8a)) returned 1 [0284.424] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0284.424] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0284.424] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0290548.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0290548.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9e8a)) returned 1 [0284.424] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0284.425] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0284.425] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0284.425] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2590, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0291794.WMF", cAlternateFileName="")) returned 1 [0284.425] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0284.425] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0284.425] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0284.425] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0284.425] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0284.426] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0284.426] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0291794.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0291794.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0284.427] GetFileType (hFile=0x198) returned 0x1 [0284.428] CloseHandle (hObject=0x198) returned 1 [0284.428] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0284.428] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0291794.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0291794.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2590)) returned 1 [0284.428] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0284.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0284.429] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0291794.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0291794.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2590)) returned 1 [0284.429] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0284.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0284.429] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0284.429] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20e4, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0292248.WMF", cAlternateFileName="")) returned 1 [0284.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0284.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0284.429] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0284.429] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0284.429] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0284.429] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0284.430] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292248.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292248.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0284.432] GetFileType (hFile=0x198) returned 0x1 [0284.432] CloseHandle (hObject=0x198) returned 1 [0284.432] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0284.433] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292248.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292248.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20e4)) returned 1 [0284.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0284.433] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0284.433] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292248.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292248.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20e4)) returned 1 [0284.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0284.433] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0284.434] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0284.434] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7aa6, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0292270.WMF", cAlternateFileName="")) returned 1 [0284.434] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0284.435] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0284.435] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0284.435] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0284.435] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0284.435] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0284.436] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292270.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292270.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0284.437] GetFileType (hFile=0x198) returned 0x1 [0284.437] CloseHandle (hObject=0x198) returned 1 [0284.438] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0284.438] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292270.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292270.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7aa6)) returned 1 [0284.438] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0284.438] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0284.438] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292270.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292270.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7aa6)) returned 1 [0284.438] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0284.438] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0284.438] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0284.438] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b64, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0292272.WMF", cAlternateFileName="")) returned 1 [0284.439] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0284.439] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0284.439] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0284.439] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0284.439] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0284.439] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0284.440] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292272.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292272.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0284.440] GetFileType (hFile=0x198) returned 0x1 [0284.440] CloseHandle (hObject=0x198) returned 1 [0284.441] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0284.441] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292272.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292272.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b64)) returned 1 [0284.441] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0284.441] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0284.441] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292272.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292272.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b64)) returned 1 [0284.442] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0284.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0284.442] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0284.442] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3658, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0292278.WMF", cAlternateFileName="")) returned 1 [0284.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0284.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0284.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0284.442] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0284.442] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0284.442] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0284.443] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292278.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292278.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0284.443] GetFileType (hFile=0x198) returned 0x1 [0284.444] CloseHandle (hObject=0x198) returned 1 [0284.447] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0284.447] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292278.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292278.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3658)) returned 1 [0284.447] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0284.447] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0284.447] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292278.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292278.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3658)) returned 1 [0284.447] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0284.447] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0284.447] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0284.447] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b56, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0292286.WMF", cAlternateFileName="")) returned 1 [0284.447] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0284.447] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0284.447] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0284.448] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0284.448] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0284.448] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0284.448] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292286.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292286.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0284.449] GetFileType (hFile=0x198) returned 0x1 [0284.449] CloseHandle (hObject=0x198) returned 1 [0284.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0284.450] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292286.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292286.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b56)) returned 1 [0284.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0284.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0284.450] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292286.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292286.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b56)) returned 1 [0284.451] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0284.451] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0284.451] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0284.451] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12a6, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0293800.WMF", cAlternateFileName="")) returned 1 [0284.451] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0284.451] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0284.451] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0284.451] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0284.451] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0284.451] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0284.452] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0293800.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0293800.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0284.452] GetFileType (hFile=0x198) returned 0x1 [0284.452] CloseHandle (hObject=0x198) returned 1 [0284.453] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0284.453] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0293800.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0293800.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12a6)) returned 1 [0284.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0284.453] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0284.453] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0293800.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0293800.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12a6)) returned 1 [0284.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0284.453] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0284.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0284.453] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17be, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0293832.WMF", cAlternateFileName="")) returned 1 [0284.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0284.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0284.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0284.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0284.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0284.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0284.455] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0293832.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0293832.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0284.865] GetFileType (hFile=0x1c0) returned 0x1 [0284.865] CloseHandle (hObject=0x1c0) returned 1 [0284.865] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0284.865] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0293832.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0293832.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17be)) returned 1 [0284.865] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0284.866] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0284.866] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0293832.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0293832.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17be)) returned 1 [0284.866] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0284.866] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0284.866] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0284.866] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x37de, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0294989.WMF", cAlternateFileName="")) returned 1 [0284.866] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0284.866] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0284.866] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0284.866] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0284.866] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0284.866] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0284.867] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0294989.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0294989.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0284.867] GetFileType (hFile=0x1c0) returned 0x1 [0284.867] CloseHandle (hObject=0x1c0) returned 1 [0284.867] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0284.867] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0294989.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0294989.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x37de)) returned 1 [0284.867] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0284.867] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0284.867] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0294989.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0294989.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x37de)) returned 1 [0284.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0284.868] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0284.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0284.868] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6180, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0294991.WMF", cAlternateFileName="")) returned 1 [0284.868] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0284.868] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0284.868] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0284.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0284.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0284.868] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0284.869] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0294991.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0294991.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0284.869] GetFileType (hFile=0x1c0) returned 0x1 [0284.869] CloseHandle (hObject=0x1c0) returned 1 [0284.869] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0284.869] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0294991.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0294991.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6180)) returned 1 [0284.870] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0284.870] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0284.870] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0294991.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0294991.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6180)) returned 1 [0284.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0284.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0284.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0284.871] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21b2, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0295069.WMF", cAlternateFileName="")) returned 1 [0284.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0284.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213020 [0284.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0284.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213020 | out: hHeap=0x1f0000) returned 1 [0284.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0284.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0284.871] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0295069.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0295069.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0284.872] GetFileType (hFile=0x1c0) returned 0x1 [0284.872] CloseHandle (hObject=0x1c0) returned 1 [0284.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0284.872] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0295069.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0295069.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21b2)) returned 1 [0284.872] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0284.872] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0284.872] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0295069.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0295069.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21b2)) returned 1 [0284.873] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0284.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0284.873] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0284.873] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe42c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0296277.WMF", cAlternateFileName="")) returned 1 [0284.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0284.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0284.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0284.873] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0284.873] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0284.873] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0284.873] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0296277.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0296277.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0284.873] GetFileType (hFile=0x1c0) returned 0x1 [0284.874] CloseHandle (hObject=0x1c0) returned 1 [0284.874] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0284.874] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0296277.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0296277.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe42c)) returned 1 [0284.874] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0284.874] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0284.874] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0296277.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0296277.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe42c)) returned 1 [0284.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0284.875] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0284.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0284.875] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1088e, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0296279.WMF", cAlternateFileName="")) returned 1 [0284.875] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0284.875] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0284.875] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0284.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0284.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0284.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0284.876] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0296279.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0296279.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0284.876] GetFileType (hFile=0x1c0) returned 0x1 [0284.876] CloseHandle (hObject=0x1c0) returned 1 [0284.877] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0284.877] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0296279.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0296279.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1088e)) returned 1 [0284.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0284.877] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0284.877] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0296279.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0296279.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1088e)) returned 1 [0284.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0284.877] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0284.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0284.878] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x107ec, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0296288.WMF", cAlternateFileName="")) returned 1 [0284.878] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0284.878] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0284.878] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0284.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0284.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0284.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0284.879] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0296288.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0296288.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0284.879] GetFileType (hFile=0x1c0) returned 0x1 [0284.879] CloseHandle (hObject=0x1c0) returned 1 [0284.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0284.880] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0296288.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0296288.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x107ec)) returned 1 [0284.880] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0284.880] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0284.880] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0296288.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0296288.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x107ec)) returned 1 [0284.880] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0284.881] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0284.881] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0284.881] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x59ce, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0297229.WMF", cAlternateFileName="")) returned 1 [0284.881] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0284.881] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0284.881] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0284.881] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0284.881] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0284.881] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0284.882] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297229.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297229.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0284.882] GetFileType (hFile=0x1c0) returned 0x1 [0284.883] CloseHandle (hObject=0x1c0) returned 1 [0284.883] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0284.883] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297229.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297229.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x59ce)) returned 1 [0284.883] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0284.883] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0284.883] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297229.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297229.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x59ce)) returned 1 [0284.883] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0284.884] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0284.884] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0284.884] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d24, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0297269.WMF", cAlternateFileName="")) returned 1 [0284.884] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0284.884] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0284.884] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0284.884] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0284.884] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0284.884] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0284.885] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297269.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297269.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0285.152] GetFileType (hFile=0x21c) returned 0x1 [0285.153] CloseHandle (hObject=0x21c) returned 1 [0285.153] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0285.153] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297269.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297269.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d24)) returned 1 [0285.153] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0285.153] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0285.153] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297269.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297269.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d24)) returned 1 [0285.153] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0285.153] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0285.154] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0285.154] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4236, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0297725.WMF", cAlternateFileName="")) returned 1 [0285.154] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0285.154] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0285.154] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0285.154] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0285.154] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0285.154] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0285.154] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297725.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297725.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0285.155] GetFileType (hFile=0x21c) returned 0x1 [0285.155] CloseHandle (hObject=0x21c) returned 1 [0285.155] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0285.155] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297725.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297725.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4236)) returned 1 [0285.155] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0285.156] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0285.156] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297725.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297725.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4236)) returned 1 [0285.156] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0285.156] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0285.156] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0285.156] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf406dcf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3c9c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0297727.WMF", cAlternateFileName="")) returned 1 [0285.156] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0285.156] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0285.156] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0285.156] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0285.156] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0285.156] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0285.157] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297727.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297727.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0285.158] GetFileType (hFile=0x21c) returned 0x1 [0285.158] CloseHandle (hObject=0x21c) returned 1 [0285.158] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0285.158] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297727.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297727.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf406dcf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3c9c)) returned 1 [0285.158] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0285.159] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0285.159] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297727.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297727.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf406dcf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3c9c)) returned 1 [0285.159] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0285.159] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0285.159] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0285.159] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf406dcf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x493e, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0297757.WMF", cAlternateFileName="")) returned 1 [0285.159] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238168 [0285.159] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0285.159] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0285.159] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0285.159] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0285.159] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238168 | out: hHeap=0x1f0000) returned 1 [0285.160] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297757.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297757.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0285.161] GetFileType (hFile=0x21c) returned 0x1 [0285.162] CloseHandle (hObject=0x21c) returned 1 [0285.162] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0285.162] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297757.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297757.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf406dcf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x493e)) returned 1 [0285.162] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0285.162] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0285.163] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297757.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297757.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf406dcf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x493e)) returned 1 [0285.163] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0285.163] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0285.163] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0285.163] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4960, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0297759.WMF", cAlternateFileName="")) returned 1 [0285.163] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0285.163] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212f98 [0285.163] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0285.164] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212f98 | out: hHeap=0x1f0000) returned 1 [0285.164] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0285.164] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0285.164] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297759.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297759.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0285.165] GetFileType (hFile=0x21c) returned 0x1 [0285.166] CloseHandle (hObject=0x21c) returned 1 [0285.166] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0285.166] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297759.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297759.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4960)) returned 1 [0285.167] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0285.167] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0285.167] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297759.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297759.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4960)) returned 1 [0285.167] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0285.167] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0285.168] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0285.168] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4584, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0300862.WMF", cAlternateFileName="")) returned 1 [0285.169] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0285.169] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212e00 [0285.169] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0285.169] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212e00 | out: hHeap=0x1f0000) returned 1 [0285.169] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0285.169] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0285.170] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0300862.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0300862.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0285.171] GetFileType (hFile=0x21c) returned 0x1 [0285.172] CloseHandle (hObject=0x21c) returned 1 [0285.172] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0285.172] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0300862.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0300862.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4584)) returned 1 [0285.172] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0285.172] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0285.173] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0300862.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0300862.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4584)) returned 1 [0285.173] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0285.173] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0285.173] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0285.173] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b0e, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0301044.WMF", cAlternateFileName="")) returned 1 [0285.173] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0285.173] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0285.173] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0285.173] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0285.174] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0285.174] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0285.174] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301044.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0301044.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0285.175] GetFileType (hFile=0x21c) returned 0x1 [0285.176] CloseHandle (hObject=0x21c) returned 1 [0285.176] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0285.176] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301044.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0301044.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b0e)) returned 1 [0285.176] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0285.176] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0285.176] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301044.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0301044.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b0e)) returned 1 [0285.177] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0285.177] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0285.177] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0285.177] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ae8, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0301052.WMF", cAlternateFileName="")) returned 1 [0285.177] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0285.177] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0285.177] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0285.177] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0285.177] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0285.178] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0285.178] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301052.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0301052.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0285.179] GetFileType (hFile=0x21c) returned 0x1 [0285.179] CloseHandle (hObject=0x21c) returned 1 [0285.179] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0285.179] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301052.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0301052.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ae8)) returned 1 [0285.180] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0285.180] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0285.180] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301052.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0301052.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ae8)) returned 1 [0285.180] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0285.180] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0285.180] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0285.180] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4a5a, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0301418.WMF", cAlternateFileName="")) returned 1 [0285.180] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0285.180] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0285.181] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0285.181] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0285.181] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0285.181] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0285.181] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301418.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0301418.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0285.182] GetFileType (hFile=0x21c) returned 0x1 [0285.182] CloseHandle (hObject=0x21c) returned 1 [0285.183] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0285.183] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301418.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0301418.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4a5a)) returned 1 [0285.183] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0285.183] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0285.183] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301418.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0301418.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4a5a)) returned 1 [0285.184] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0285.184] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0285.184] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0285.184] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4dfa, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0301432.WMF", cAlternateFileName="")) returned 1 [0285.184] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238078 [0285.184] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0285.184] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0285.184] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0285.184] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0285.184] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238078 | out: hHeap=0x1f0000) returned 1 [0285.185] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301432.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0301432.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0285.185] GetFileType (hFile=0x21c) returned 0x1 [0285.186] CloseHandle (hObject=0x21c) returned 1 [0285.186] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0285.186] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301432.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0301432.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4dfa)) returned 1 [0285.186] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0285.186] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0285.186] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301432.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0301432.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4dfa)) returned 1 [0285.186] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0285.187] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0285.187] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0285.187] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe20, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0304371.WMF", cAlternateFileName="")) returned 1 [0285.187] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0285.187] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0285.187] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0285.187] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0285.187] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0285.187] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0285.188] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304371.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304371.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0285.189] GetFileType (hFile=0x21c) returned 0x1 [0285.189] CloseHandle (hObject=0x21c) returned 1 [0285.190] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0285.190] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304371.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304371.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe20)) returned 1 [0285.190] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0285.190] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0285.190] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304371.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304371.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe20)) returned 1 [0285.190] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0285.190] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0285.190] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0285.190] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x103e, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0304405.WMF", cAlternateFileName="")) returned 1 [0285.190] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0285.191] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0285.191] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0285.191] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0285.191] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0285.191] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0285.191] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304405.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304405.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0285.192] GetFileType (hFile=0x21c) returned 0x1 [0285.192] CloseHandle (hObject=0x21c) returned 1 [0285.192] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0285.192] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304405.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304405.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x103e)) returned 1 [0285.192] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0285.192] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0285.192] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304405.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304405.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x103e)) returned 1 [0285.193] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0285.193] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0285.193] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0285.193] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4a0e, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0304853.WMF", cAlternateFileName="")) returned 1 [0285.193] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0285.193] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2131b8 [0285.193] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0285.193] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2131b8 | out: hHeap=0x1f0000) returned 1 [0285.193] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0285.193] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0285.193] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304853.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304853.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0285.739] GetFileType (hFile=0x1ac) returned 0x1 [0285.739] CloseHandle (hObject=0x1ac) returned 1 [0285.739] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0285.739] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304853.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304853.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4a0e)) returned 1 [0285.739] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0285.739] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0285.739] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304853.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304853.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4a0e)) returned 1 [0285.740] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0285.740] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0285.740] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0285.740] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2cf8, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0304861.WMF", cAlternateFileName="")) returned 1 [0285.740] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0285.740] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0285.740] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0285.740] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0285.740] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0285.740] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0285.741] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304861.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304861.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0285.741] GetFileType (hFile=0x1ac) returned 0x1 [0285.741] CloseHandle (hObject=0x1ac) returned 1 [0285.741] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0285.741] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304861.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304861.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2cf8)) returned 1 [0285.742] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0285.742] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0285.742] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304861.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304861.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2cf8)) returned 1 [0285.742] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0285.742] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0285.742] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0285.742] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f8e, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0304875.WMF", cAlternateFileName="")) returned 1 [0285.742] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0285.742] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0285.742] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0285.742] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0285.742] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0285.742] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0285.743] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304875.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304875.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0285.743] GetFileType (hFile=0x1ac) returned 0x1 [0285.743] CloseHandle (hObject=0x1ac) returned 1 [0285.744] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0285.744] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304875.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304875.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f8e)) returned 1 [0285.744] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0285.744] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0285.744] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304875.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304875.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f8e)) returned 1 [0285.744] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0285.744] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0285.744] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0285.744] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x29c4, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0309480.JPG", cAlternateFileName="")) returned 1 [0285.744] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0285.745] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213350 [0285.745] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0285.745] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213350 | out: hHeap=0x1f0000) returned 1 [0285.745] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0285.745] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0285.746] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309480.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309480.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0285.746] GetFileType (hFile=0x1ac) returned 0x1 [0285.746] CloseHandle (hObject=0x1ac) returned 1 [0285.746] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0285.746] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309480.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309480.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x29c4)) returned 1 [0285.746] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0285.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0285.747] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309480.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309480.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x29c4)) returned 1 [0285.747] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0285.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0285.747] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0285.747] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf406dcf, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf406dcf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x544c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0309567.JPG", cAlternateFileName="")) returned 1 [0285.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0285.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0285.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0285.747] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0285.747] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0285.747] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0285.748] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309567.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309567.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0285.748] GetFileType (hFile=0x1ac) returned 0x1 [0285.748] CloseHandle (hObject=0x1ac) returned 1 [0285.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0285.749] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309567.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309567.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf406dcf, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf406dcf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x544c)) returned 1 [0285.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0285.749] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0285.749] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309567.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309567.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf406dcf, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf406dcf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x544c)) returned 1 [0285.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0285.749] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0285.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0285.749] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf406dcf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9a8b, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0309585.JPG", cAlternateFileName="")) returned 1 [0285.749] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0285.749] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0285.749] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0285.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0285.749] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0285.750] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0285.750] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309585.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309585.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0285.750] GetFileType (hFile=0x1ac) returned 0x1 [0285.750] CloseHandle (hObject=0x1ac) returned 1 [0285.751] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0285.751] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309585.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309585.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf406dcf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9a8b)) returned 1 [0285.751] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0285.751] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0285.751] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309585.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309585.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf406dcf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9a8b)) returned 1 [0285.751] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0285.751] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0285.751] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0285.751] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf406dcf, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf406dcf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x81f0, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0309598.JPG", cAlternateFileName="")) returned 1 [0285.751] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0285.751] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0285.752] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0285.752] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0285.752] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0285.752] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0285.752] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309598.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309598.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0285.752] GetFileType (hFile=0x1ac) returned 0x1 [0285.753] CloseHandle (hObject=0x1ac) returned 1 [0285.753] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0285.753] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309598.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309598.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf406dcf, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf406dcf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x81f0)) returned 1 [0285.753] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0285.753] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0285.753] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309598.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309598.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf406dcf, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf406dcf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x81f0)) returned 1 [0285.753] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0285.754] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0285.754] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0285.754] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf406dcf, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf406dcf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaabb, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0309664.JPG", cAlternateFileName="")) returned 1 [0285.754] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0285.754] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0285.754] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0285.754] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0285.754] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0285.754] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0285.754] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309664.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309664.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0285.755] GetFileType (hFile=0x1ac) returned 0x1 [0285.755] CloseHandle (hObject=0x1ac) returned 1 [0285.755] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0285.755] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309664.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309664.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf406dcf, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf406dcf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaabb)) returned 1 [0285.755] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0285.755] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0285.755] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309664.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309664.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf406dcf, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf406dcf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaabb)) returned 1 [0285.756] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0285.756] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0285.756] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0285.756] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf406dcf, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf406dcf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ada, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0309705.JPG", cAlternateFileName="")) returned 1 [0285.756] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0285.756] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0285.756] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0285.756] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0285.756] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0285.756] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0285.757] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309705.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309705.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0285.757] GetFileType (hFile=0x1ac) returned 0x1 [0285.757] CloseHandle (hObject=0x1ac) returned 1 [0285.757] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0285.758] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309705.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309705.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf406dcf, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf406dcf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ada)) returned 1 [0285.758] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0285.758] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0285.758] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309705.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309705.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf406dcf, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf406dcf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ada)) returned 1 [0285.758] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0285.758] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0285.758] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0285.758] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf406dcf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0309902.WMF", cAlternateFileName="")) returned 1 [0285.758] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0285.758] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0285.759] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0285.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0285.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0285.759] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0285.760] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309902.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309902.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0285.760] GetFileType (hFile=0x1ac) returned 0x1 [0285.760] CloseHandle (hObject=0x1ac) returned 1 [0285.761] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0285.761] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309902.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309902.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf406dcf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a00)) returned 1 [0285.761] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0285.761] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0285.761] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309902.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309902.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf406dcf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a00)) returned 1 [0285.762] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0285.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0285.762] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0285.762] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20e4, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0309904.WMF", cAlternateFileName="")) returned 1 [0285.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0285.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0285.762] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0285.762] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0285.762] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0285.763] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0285.763] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309904.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309904.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0285.763] GetFileType (hFile=0x1ac) returned 0x1 [0285.764] CloseHandle (hObject=0x1ac) returned 1 [0285.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0285.764] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309904.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309904.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20e4)) returned 1 [0285.764] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0285.764] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0285.764] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309904.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309904.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20e4)) returned 1 [0285.765] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0285.765] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0285.765] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0285.765] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b38, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0309920.WMF", cAlternateFileName="")) returned 1 [0285.765] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0285.765] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2130a8 [0285.765] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0285.765] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2130a8 | out: hHeap=0x1f0000) returned 1 [0285.765] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0285.765] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0285.766] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309920.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309920.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0285.766] GetFileType (hFile=0x1ac) returned 0x1 [0285.767] CloseHandle (hObject=0x1ac) returned 1 [0285.767] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0285.767] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309920.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309920.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b38)) returned 1 [0285.767] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0285.768] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0285.768] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309920.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309920.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b38)) returned 1 [0285.768] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0285.768] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0285.768] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0285.768] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x911a, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0313896.JPG", cAlternateFileName="")) returned 1 [0285.768] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0285.768] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213460 [0285.768] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0285.768] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213460 | out: hHeap=0x1f0000) returned 1 [0285.769] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0285.769] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0285.769] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313896.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313896.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0285.769] GetFileType (hFile=0x1ac) returned 0x1 [0285.770] CloseHandle (hObject=0x1ac) returned 1 [0285.770] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0285.770] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313896.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313896.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x911a)) returned 1 [0285.770] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0285.770] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0285.770] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313896.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313896.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x911a)) returned 1 [0285.770] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0285.770] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0285.770] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0285.770] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa75a, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0313965.JPG", cAlternateFileName="")) returned 1 [0285.770] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0285.771] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0285.771] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0285.771] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0285.771] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0285.771] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0285.771] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313965.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313965.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0285.771] GetFileType (hFile=0x1ac) returned 0x1 [0285.771] CloseHandle (hObject=0x1ac) returned 1 [0285.772] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0285.772] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313965.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313965.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa75a)) returned 1 [0285.772] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0285.772] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0285.772] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313965.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313965.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa75a)) returned 1 [0285.772] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0285.772] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0285.772] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0285.772] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x81ab, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0313970.JPG", cAlternateFileName="")) returned 1 [0285.772] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0285.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x213130 [0285.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0285.773] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x213130 | out: hHeap=0x1f0000) returned 1 [0285.773] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0285.773] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0285.773] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313970.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313970.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0285.773] GetFileType (hFile=0x1ac) returned 0x1 [0285.774] CloseHandle (hObject=0x1ac) returned 1 [0285.774] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0285.774] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313970.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313970.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x81ab)) returned 1 [0285.774] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0285.774] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0285.774] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313970.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313970.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x81ab)) returned 1 [0285.774] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0285.774] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0285.774] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0285.774] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb9d1, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0313974.JPG", cAlternateFileName="")) returned 1 [0285.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0285.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212ad0 [0285.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0285.775] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212ad0 | out: hHeap=0x1f0000) returned 1 [0285.775] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0285.775] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0285.775] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313974.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313974.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0285.776] GetFileType (hFile=0x1ac) returned 0x1 [0286.107] CloseHandle (hObject=0x1ac) returned 1 [0286.108] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0286.108] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313974.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313974.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb9d1)) returned 1 [0286.108] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0286.108] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0286.108] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313974.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313974.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb9d1)) returned 1 [0286.108] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0286.108] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0286.108] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0286.108] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x40f2, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0314068.JPG", cAlternateFileName="")) returned 1 [0286.108] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0286.108] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211bf0 [0286.108] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0286.109] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211bf0 | out: hHeap=0x1f0000) returned 1 [0286.109] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0286.109] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0286.434] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0314068.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0314068.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0286.434] GetFileType (hFile=0x1c0) returned 0x1 [0286.434] CloseHandle (hObject=0x1c0) returned 1 [0286.435] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0286.435] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0314068.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0314068.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x40f2)) returned 1 [0286.435] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0286.435] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0286.435] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0314068.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0314068.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x40f2)) returned 1 [0286.435] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0286.435] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0286.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0286.436] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b02, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0315580.JPG", cAlternateFileName="")) returned 1 [0286.436] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0286.436] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211e10 [0286.436] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0286.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e10 | out: hHeap=0x1f0000) returned 1 [0286.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0286.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0286.436] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0315580.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0315580.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0286.437] GetFileType (hFile=0x1c0) returned 0x1 [0286.437] CloseHandle (hObject=0x1c0) returned 1 [0286.437] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0286.437] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0315580.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0315580.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b02)) returned 1 [0286.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0286.437] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0286.438] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0315580.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0315580.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b02)) returned 1 [0286.438] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0286.438] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0286.438] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0286.438] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x423a, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0315612.JPG", cAlternateFileName="")) returned 1 [0286.438] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0286.438] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212580 [0286.438] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0286.438] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212580 | out: hHeap=0x1f0000) returned 1 [0286.438] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0286.439] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0286.439] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0315612.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0315612.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0286.439] GetFileType (hFile=0x1c0) returned 0x1 [0286.440] CloseHandle (hObject=0x1c0) returned 1 [0286.440] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0286.440] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0315612.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0315612.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x423a)) returned 1 [0286.440] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0286.440] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0286.441] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0315612.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0315612.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x423a)) returned 1 [0286.441] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0286.441] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0286.441] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0286.441] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4180, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0318448.WMF", cAlternateFileName="")) returned 1 [0286.441] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0286.441] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2119d0 [0286.441] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0286.441] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2119d0 | out: hHeap=0x1f0000) returned 1 [0286.441] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0286.442] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0286.442] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0318448.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0318448.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0286.442] GetFileType (hFile=0x1c0) returned 0x1 [0286.443] CloseHandle (hObject=0x1c0) returned 1 [0286.443] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0286.443] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0318448.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0318448.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4180)) returned 1 [0286.443] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0286.443] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0286.444] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0318448.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0318448.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4180)) returned 1 [0286.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0286.444] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0286.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0286.444] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2dfa, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0318804.WMF", cAlternateFileName="")) returned 1 [0286.444] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0286.444] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0286.444] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0286.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0286.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0286.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0286.445] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0318804.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0318804.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0286.445] GetFileType (hFile=0x1c0) returned 0x1 [0286.446] CloseHandle (hObject=0x1c0) returned 1 [0286.446] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0286.447] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0318804.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0318804.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2dfa)) returned 1 [0286.447] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0286.447] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0286.447] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0318804.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0318804.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2dfa)) returned 1 [0286.447] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0286.447] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0286.447] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0286.448] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x28be, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0318810.WMF", cAlternateFileName="")) returned 1 [0286.448] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0286.448] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2122d8 [0286.448] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0286.448] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2122d8 | out: hHeap=0x1f0000) returned 1 [0286.449] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0286.449] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0286.449] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0318810.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0318810.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0286.450] GetFileType (hFile=0x1c0) returned 0x1 [0286.450] CloseHandle (hObject=0x1c0) returned 1 [0286.451] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0286.451] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0318810.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0318810.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x28be)) returned 1 [0286.451] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0286.451] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0286.451] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0318810.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0318810.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x28be)) returned 1 [0286.451] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0286.451] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0286.451] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0286.452] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x24d7, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0321179.JPG", cAlternateFileName="")) returned 1 [0286.452] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0286.452] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2129c0 [0286.452] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0286.452] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2129c0 | out: hHeap=0x1f0000) returned 1 [0286.452] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0286.452] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0286.453] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0321179.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0321179.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0286.453] GetFileType (hFile=0x1c0) returned 0x1 [0286.453] CloseHandle (hObject=0x1c0) returned 1 [0286.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0286.454] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0321179.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0321179.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x24d7)) returned 1 [0286.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0286.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0286.454] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0321179.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0321179.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x24d7)) returned 1 [0286.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0286.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0286.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0286.454] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ff8, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0324694.WMF", cAlternateFileName="")) returned 1 [0286.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0286.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211b68 [0286.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0286.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b68 | out: hHeap=0x1f0000) returned 1 [0286.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0286.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0286.456] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0324694.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0324694.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0286.456] GetFileType (hFile=0x1c0) returned 0x1 [0286.456] CloseHandle (hObject=0x1c0) returned 1 [0286.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0286.457] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0324694.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0324694.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ff8)) returned 1 [0286.457] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0286.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0286.457] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0324694.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0324694.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ff8)) returned 1 [0286.457] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0286.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0286.457] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0286.458] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e7e, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0324704.WMF", cAlternateFileName="")) returned 1 [0286.458] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0286.458] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211ae0 [0286.458] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0286.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211ae0 | out: hHeap=0x1f0000) returned 1 [0286.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0286.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0286.459] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0324704.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0324704.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0286.459] GetFileType (hFile=0x1c0) returned 0x1 [0286.459] CloseHandle (hObject=0x1c0) returned 1 [0286.459] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0286.460] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0324704.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0324704.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e7e)) returned 1 [0286.460] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0286.460] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0286.460] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0324704.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0324704.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e7e)) returned 1 [0286.460] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0286.460] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0286.460] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0286.460] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3260, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0337280.JPG", cAlternateFileName="")) returned 1 [0286.460] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0286.460] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212828 [0286.461] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0286.461] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212828 | out: hHeap=0x1f0000) returned 1 [0286.461] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0286.461] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0286.461] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0337280.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0337280.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0286.461] GetFileType (hFile=0x1c0) returned 0x1 [0286.462] CloseHandle (hObject=0x1c0) returned 1 [0286.462] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0286.462] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0337280.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0337280.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3260)) returned 1 [0286.462] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0286.463] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0286.463] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0337280.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0337280.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3260)) returned 1 [0286.463] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0286.463] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0286.463] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0286.463] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27d4, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0341328.JPG", cAlternateFileName="")) returned 1 [0286.463] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0286.463] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211bf0 [0286.463] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0286.463] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211bf0 | out: hHeap=0x1f0000) returned 1 [0286.464] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0286.464] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0286.465] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341328.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341328.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0286.465] GetFileType (hFile=0x1c0) returned 0x1 [0286.466] CloseHandle (hObject=0x1c0) returned 1 [0286.466] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0286.466] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341328.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341328.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27d4)) returned 1 [0286.466] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0286.466] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0286.466] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341328.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341328.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27d4)) returned 1 [0286.467] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0286.467] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0286.467] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0286.467] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2cdd, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0341344.JPG", cAlternateFileName="")) returned 1 [0286.467] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0286.467] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211a58 [0286.467] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0286.467] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211a58 | out: hHeap=0x1f0000) returned 1 [0286.467] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0286.467] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0286.468] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341344.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341344.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0286.468] GetFileType (hFile=0x1c0) returned 0x1 [0286.468] CloseHandle (hObject=0x1c0) returned 1 [0286.469] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0286.469] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341344.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341344.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2cdd)) returned 1 [0286.469] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0286.469] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0286.469] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341344.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341344.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2cdd)) returned 1 [0286.469] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0286.469] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0286.469] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0286.469] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c6d, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0341439.JPG", cAlternateFileName="")) returned 1 [0286.470] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0286.470] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211a58 [0286.470] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0286.470] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211a58 | out: hHeap=0x1f0000) returned 1 [0286.470] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0286.470] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0286.470] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341439.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341439.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0286.471] GetFileType (hFile=0x1c0) returned 0x1 [0286.471] CloseHandle (hObject=0x1c0) returned 1 [0286.471] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0286.472] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341439.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341439.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c6d)) returned 1 [0286.472] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0286.472] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0286.472] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341439.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341439.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c6d)) returned 1 [0286.472] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0286.472] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0286.472] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0286.472] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ad8, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0341447.JPG", cAlternateFileName="")) returned 1 [0286.473] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0286.473] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212030 [0286.473] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0286.473] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212030 | out: hHeap=0x1f0000) returned 1 [0286.473] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0286.473] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0286.474] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341447.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341447.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0286.474] GetFileType (hFile=0x1c0) returned 0x1 [0286.474] CloseHandle (hObject=0x1c0) returned 1 [0286.475] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0286.475] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341447.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341447.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ad8)) returned 1 [0286.475] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0286.475] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0286.475] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341447.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341447.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ad8)) returned 1 [0286.475] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0286.475] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0286.476] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0286.476] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x52c3, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0341448.JPG", cAlternateFileName="")) returned 1 [0286.476] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0286.476] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211b68 [0286.476] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0286.476] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b68 | out: hHeap=0x1f0000) returned 1 [0286.476] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0286.476] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0286.477] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341448.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341448.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0286.477] GetFileType (hFile=0x1c0) returned 0x1 [0286.477] CloseHandle (hObject=0x1c0) returned 1 [0286.478] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0286.478] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341448.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341448.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x52c3)) returned 1 [0286.478] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0286.478] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0286.478] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341448.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341448.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x52c3)) returned 1 [0286.478] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0286.478] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0286.478] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0286.478] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7457, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0341455.JPG", cAlternateFileName="")) returned 1 [0286.479] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381e0 [0286.479] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d00 [0286.479] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0286.479] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d00 | out: hHeap=0x1f0000) returned 1 [0286.479] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0286.479] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381e0 | out: hHeap=0x1f0000) returned 1 [0286.887] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341455.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341455.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0286.888] GetFileType (hFile=0x1e0) returned 0x1 [0286.888] CloseHandle (hObject=0x1e0) returned 1 [0286.889] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0286.889] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341455.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341455.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7457)) returned 1 [0286.889] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0286.889] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0286.889] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341455.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341455.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7457)) returned 1 [0286.889] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0286.889] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0286.889] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0286.890] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa9e2, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0341475.JPG", cAlternateFileName="")) returned 1 [0286.890] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0286.890] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212828 [0286.890] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0286.890] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212828 | out: hHeap=0x1f0000) returned 1 [0286.890] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0286.890] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0286.891] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341475.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341475.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0286.891] GetFileType (hFile=0x1e0) returned 0x1 [0286.892] CloseHandle (hObject=0x1e0) returned 1 [0286.892] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0286.892] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341475.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341475.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa9e2)) returned 1 [0286.893] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0286.893] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0286.893] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341475.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341475.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa9e2)) returned 1 [0286.893] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0286.893] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0286.893] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0286.893] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ee3, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0341499.JPG", cAlternateFileName="")) returned 1 [0286.893] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0286.894] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0286.894] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0286.894] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0286.894] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0286.894] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0286.895] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341499.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341499.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0286.895] GetFileType (hFile=0x1e0) returned 0x1 [0286.896] CloseHandle (hObject=0x1e0) returned 1 [0286.896] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0286.896] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341499.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341499.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ee3)) returned 1 [0286.896] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0286.896] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0286.897] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341499.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341499.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ee3)) returned 1 [0286.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0286.897] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0286.897] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0286.897] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f8a, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0341534.JPG", cAlternateFileName="")) returned 1 [0286.897] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238398 [0286.897] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211948 [0286.897] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0286.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211948 | out: hHeap=0x1f0000) returned 1 [0286.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0286.898] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238398 | out: hHeap=0x1f0000) returned 1 [0286.899] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341534.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341534.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0286.899] GetFileType (hFile=0x1e0) returned 0x1 [0286.899] CloseHandle (hObject=0x1e0) returned 1 [0286.900] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0286.900] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341534.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341534.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f8a)) returned 1 [0286.900] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0286.900] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0286.900] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341534.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341534.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f8a)) returned 1 [0286.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0286.901] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0286.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0286.901] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5a56, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0341551.JPG", cAlternateFileName="")) returned 1 [0286.901] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238140 [0286.901] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2129c0 [0286.901] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0286.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2129c0 | out: hHeap=0x1f0000) returned 1 [0286.901] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0286.902] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238140 | out: hHeap=0x1f0000) returned 1 [0286.902] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341551.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341551.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0286.903] GetFileType (hFile=0x1e0) returned 0x1 [0286.903] CloseHandle (hObject=0x1e0) returned 1 [0286.904] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0286.904] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341551.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341551.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5a56)) returned 1 [0286.904] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0286.904] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0286.904] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341551.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341551.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5a56)) returned 1 [0286.905] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0286.905] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0286.905] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0286.905] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6f43, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0341554.JPG", cAlternateFileName="")) returned 1 [0286.905] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0286.905] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2122d8 [0286.905] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0286.905] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2122d8 | out: hHeap=0x1f0000) returned 1 [0286.906] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0286.906] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0286.906] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341554.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341554.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0286.907] GetFileType (hFile=0x1e0) returned 0x1 [0286.907] CloseHandle (hObject=0x1e0) returned 1 [0286.907] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0286.908] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341554.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341554.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6f43)) returned 1 [0286.908] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0286.908] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0286.908] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341554.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341554.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6f43)) returned 1 [0286.908] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0286.908] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0286.908] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0286.908] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6aa8, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0341557.JPG", cAlternateFileName="")) returned 1 [0286.909] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0286.909] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2119d0 [0286.909] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0286.909] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2119d0 | out: hHeap=0x1f0000) returned 1 [0286.909] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0286.909] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0286.910] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341557.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341557.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0286.910] GetFileType (hFile=0x1e0) returned 0x1 [0286.911] CloseHandle (hObject=0x1e0) returned 1 [0286.911] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0286.912] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341557.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341557.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6aa8)) returned 1 [0286.912] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0286.912] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0286.912] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341557.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341557.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6aa8)) returned 1 [0286.912] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0286.912] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0286.912] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0286.913] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6873, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0341559.JPG", cAlternateFileName="")) returned 1 [0286.913] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0286.913] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211c78 [0286.913] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0286.913] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211c78 | out: hHeap=0x1f0000) returned 1 [0286.913] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0286.913] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0286.914] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341559.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341559.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0286.914] GetFileType (hFile=0x1e0) returned 0x1 [0286.915] CloseHandle (hObject=0x1e0) returned 1 [0286.915] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0286.915] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341559.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341559.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6873)) returned 1 [0286.916] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0286.916] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0286.916] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341559.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341559.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6873)) returned 1 [0286.916] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0286.916] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0286.916] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0286.916] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa497, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0341561.JPG", cAlternateFileName="")) returned 1 [0286.916] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2384b0 [0286.917] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212718 [0286.917] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0286.917] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212718 | out: hHeap=0x1f0000) returned 1 [0286.917] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0286.917] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2384b0 | out: hHeap=0x1f0000) returned 1 [0286.918] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341561.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341561.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0286.918] GetFileType (hFile=0x1e0) returned 0x1 [0286.919] CloseHandle (hObject=0x1e0) returned 1 [0286.919] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0286.919] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341561.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341561.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa497)) returned 1 [0286.920] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0286.920] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0286.920] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341561.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341561.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa497)) returned 1 [0286.920] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0286.920] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0286.920] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0286.920] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e7b, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0341634.JPG", cAlternateFileName="")) returned 1 [0286.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2381b8 [0286.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212470 [0286.921] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0286.921] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212470 | out: hHeap=0x1f0000) returned 1 [0286.921] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0286.921] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2381b8 | out: hHeap=0x1f0000) returned 1 [0286.922] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341634.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341634.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0286.922] GetFileType (hFile=0x1e0) returned 0x1 [0286.923] CloseHandle (hObject=0x1e0) returned 1 [0286.923] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0286.923] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341634.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341634.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e7b)) returned 1 [0286.924] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0286.924] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0286.924] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341634.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341634.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e7b)) returned 1 [0286.924] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0286.924] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0286.924] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0286.924] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3615, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0341636.JPG", cAlternateFileName="")) returned 1 [0286.925] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238280 [0286.925] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d00 [0286.925] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0286.925] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d00 | out: hHeap=0x1f0000) returned 1 [0286.925] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0286.925] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238280 | out: hHeap=0x1f0000) returned 1 [0286.926] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341636.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341636.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0286.926] GetFileType (hFile=0x1e0) returned 0x1 [0286.927] CloseHandle (hObject=0x1e0) returned 1 [0286.927] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0286.927] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341636.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341636.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3615)) returned 1 [0286.927] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0286.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0286.928] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341636.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341636.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3615)) returned 1 [0286.928] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0286.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0286.928] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0286.928] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2026, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0341645.JPG", cAlternateFileName="")) returned 1 [0286.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238000 [0286.928] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2120b8 [0286.929] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0286.929] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2120b8 | out: hHeap=0x1f0000) returned 1 [0286.929] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0286.929] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x238000 | out: hHeap=0x1f0000) returned 1 [0286.930] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341645.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341645.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0286.930] GetFileType (hFile=0x1e0) returned 0x1 [0286.930] CloseHandle (hObject=0x1e0) returned 1 [0286.931] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0286.931] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341645.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341645.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2026)) returned 1 [0286.931] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0286.931] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0286.931] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341645.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341645.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2026)) returned 1 [0286.931] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0286.931] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0286.931] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0286.932] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3df7, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0341653.JPG", cAlternateFileName="")) returned 1 [0286.932] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0286.932] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2119d0 [0286.932] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0286.932] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2119d0 | out: hHeap=0x1f0000) returned 1 [0286.932] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0287.246] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0287.247] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341653.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341653.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0287.247] GetFileType (hFile=0x21c) returned 0x1 [0287.248] CloseHandle (hObject=0x21c) returned 1 [0287.248] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0287.248] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341653.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341653.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3df7)) returned 1 [0287.249] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0287.249] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0287.249] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341653.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341653.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3df7)) returned 1 [0287.249] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0287.249] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0287.249] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0287.249] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d7f, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0341654.JPG", cAlternateFileName="")) returned 1 [0287.249] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0287.250] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211ae0 [0287.250] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0287.250] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211ae0 | out: hHeap=0x1f0000) returned 1 [0287.250] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0287.250] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0287.251] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341654.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341654.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0287.251] GetFileType (hFile=0x21c) returned 0x1 [0287.252] CloseHandle (hObject=0x21c) returned 1 [0287.252] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0287.252] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341654.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341654.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d7f)) returned 1 [0287.252] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0287.252] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0287.253] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341654.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341654.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d7f)) returned 1 [0287.253] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0287.253] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0287.253] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0287.253] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ec6, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0341738.JPG", cAlternateFileName="")) returned 1 [0287.253] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0287.253] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212938 [0287.253] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0287.254] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212938 | out: hHeap=0x1f0000) returned 1 [0287.254] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0287.254] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0287.254] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341738.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341738.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0287.255] GetFileType (hFile=0x21c) returned 0x1 [0287.255] CloseHandle (hObject=0x21c) returned 1 [0287.256] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0287.256] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341738.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341738.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ec6)) returned 1 [0287.256] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0287.256] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0287.256] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341738.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341738.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ec6)) returned 1 [0287.256] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0287.256] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0287.257] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0287.257] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x49ba, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0341742.JPG", cAlternateFileName="")) returned 1 [0287.257] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609a0 [0287.257] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212250 [0287.257] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0287.257] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212250 | out: hHeap=0x1f0000) returned 1 [0287.257] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0287.257] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0287.258] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341742.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341742.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0287.258] GetFileType (hFile=0x21c) returned 0x1 [0287.258] CloseHandle (hObject=0x21c) returned 1 [0287.259] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0287.259] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341742.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341742.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x49ba)) returned 1 [0287.259] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0287.259] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0287.259] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341742.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341742.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x49ba)) returned 1 [0287.259] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0287.260] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0287.260] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0287.260] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10bdc, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0382836.JPG", cAlternateFileName="")) returned 1 [0287.260] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0287.260] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212580 [0287.260] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0287.260] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212580 | out: hHeap=0x1f0000) returned 1 [0287.260] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0287.260] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0287.261] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382836.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382836.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0287.261] GetFileType (hFile=0x21c) returned 0x1 [0287.262] CloseHandle (hObject=0x21c) returned 1 [0287.262] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0287.262] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382836.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382836.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10bdc)) returned 1 [0287.262] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0287.262] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0287.262] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382836.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382836.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10bdc)) returned 1 [0287.262] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0287.262] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0287.262] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0287.262] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ce5a, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0382925.JPG", cAlternateFileName="")) returned 1 [0287.262] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0287.262] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0287.262] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0287.263] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0287.263] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0287.263] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0287.263] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382925.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382925.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0287.263] GetFileType (hFile=0x21c) returned 0x1 [0287.263] CloseHandle (hObject=0x21c) returned 1 [0287.264] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0287.264] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382925.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382925.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ce5a)) returned 1 [0287.264] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0287.264] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0287.264] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382925.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382925.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ce5a)) returned 1 [0287.264] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0287.264] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0287.265] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0287.265] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1672c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0382926.JPG", cAlternateFileName="")) returned 1 [0287.265] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0287.265] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212828 [0287.265] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0287.265] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212828 | out: hHeap=0x1f0000) returned 1 [0287.265] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0287.265] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0287.266] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382926.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382926.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0287.266] GetFileType (hFile=0x21c) returned 0x1 [0287.266] CloseHandle (hObject=0x21c) returned 1 [0287.267] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0287.267] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382926.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382926.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1672c)) returned 1 [0287.267] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0287.267] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0287.267] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382926.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382926.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1672c)) returned 1 [0287.267] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0287.268] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0287.268] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0287.268] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf49f727, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf49f727, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f86c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0382927.JPG", cAlternateFileName="")) returned 1 [0287.268] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0287.268] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212718 [0287.268] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0287.268] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212718 | out: hHeap=0x1f0000) returned 1 [0287.268] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0287.269] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0287.269] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382927.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382927.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0287.269] GetFileType (hFile=0x21c) returned 0x1 [0287.270] CloseHandle (hObject=0x21c) returned 1 [0287.270] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0287.270] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382927.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382927.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf49f727, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf49f727, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f86c)) returned 1 [0287.271] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0287.271] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0287.271] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382927.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382927.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf49f727, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf49f727, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f86c)) returned 1 [0287.271] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0287.271] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0287.271] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0287.271] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b83a, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0382930.JPG", cAlternateFileName="")) returned 1 [0287.271] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260888 [0287.271] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212828 [0287.272] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0287.272] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212828 | out: hHeap=0x1f0000) returned 1 [0287.272] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0287.272] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0287.273] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382930.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382930.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0287.273] GetFileType (hFile=0x21c) returned 0x1 [0287.273] CloseHandle (hObject=0x21c) returned 1 [0287.274] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0287.274] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382930.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382930.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b83a)) returned 1 [0287.274] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0287.274] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0287.274] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382930.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382930.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b83a)) returned 1 [0287.274] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0287.274] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0287.275] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0287.275] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1df43, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0382931.JPG", cAlternateFileName="")) returned 1 [0287.275] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260770 [0287.275] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d00 [0287.275] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0287.275] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d00 | out: hHeap=0x1f0000) returned 1 [0287.275] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0287.275] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0287.276] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382931.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382931.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0287.277] GetFileType (hFile=0x21c) returned 0x1 [0287.277] CloseHandle (hObject=0x21c) returned 1 [0287.277] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0287.278] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382931.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382931.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1df43)) returned 1 [0287.278] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0287.278] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0287.278] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382931.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382931.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1df43)) returned 1 [0287.278] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0287.278] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0287.278] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0287.278] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x184d3, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0382938.JPG", cAlternateFileName="")) returned 1 [0287.279] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0287.279] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211ae0 [0287.279] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0287.279] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211ae0 | out: hHeap=0x1f0000) returned 1 [0287.279] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0287.279] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0287.280] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382938.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382938.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0287.280] GetFileType (hFile=0x21c) returned 0x1 [0287.280] CloseHandle (hObject=0x21c) returned 1 [0287.281] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0287.281] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382938.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382938.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x184d3)) returned 1 [0287.281] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0287.281] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0287.281] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382938.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382938.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x184d3)) returned 1 [0287.282] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0287.282] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0287.282] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0287.282] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1aba5, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0382939.JPG", cAlternateFileName="")) returned 1 [0287.282] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0287.282] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d00 [0287.282] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0287.282] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d00 | out: hHeap=0x1f0000) returned 1 [0287.282] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0287.283] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0287.283] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382939.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382939.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0287.284] GetFileType (hFile=0x21c) returned 0x1 [0287.284] CloseHandle (hObject=0x21c) returned 1 [0287.284] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0287.284] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382939.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382939.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1aba5)) returned 1 [0287.285] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0287.285] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0287.285] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382939.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382939.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1aba5)) returned 1 [0287.285] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0287.285] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0287.285] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0287.285] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1653a, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0382942.JPG", cAlternateFileName="")) returned 1 [0287.286] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609a0 [0287.286] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212608 [0287.286] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0287.286] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212608 | out: hHeap=0x1f0000) returned 1 [0287.286] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0287.286] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0287.287] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382942.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382942.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0287.287] GetFileType (hFile=0x21c) returned 0x1 [0287.288] CloseHandle (hObject=0x21c) returned 1 [0287.288] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0287.288] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382942.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382942.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1653a)) returned 1 [0287.288] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0287.288] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0287.289] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382942.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382942.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1653a)) returned 1 [0287.289] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0287.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0287.289] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0287.289] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf49f727, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf49f727, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13e1d, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0382944.JPG", cAlternateFileName="")) returned 1 [0287.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0287.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211b68 [0287.289] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0287.290] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b68 | out: hHeap=0x1f0000) returned 1 [0287.290] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0287.290] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0287.291] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382944.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382944.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0287.291] GetFileType (hFile=0x21c) returned 0x1 [0287.291] CloseHandle (hObject=0x21c) returned 1 [0287.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0287.593] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382944.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382944.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf49f727, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf49f727, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13e1d)) returned 1 [0287.593] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0287.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0287.593] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382944.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382944.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf49f727, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf49f727, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13e1d)) returned 1 [0287.593] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0287.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0287.593] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0287.594] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1531c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0382947.JPG", cAlternateFileName="")) returned 1 [0287.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0287.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211f20 [0287.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0287.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211f20 | out: hHeap=0x1f0000) returned 1 [0287.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0287.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0287.771] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382947.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382947.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0287.771] GetFileType (hFile=0x198) returned 0x1 [0287.772] CloseHandle (hObject=0x198) returned 1 [0287.772] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0287.772] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382947.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382947.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1531c)) returned 1 [0287.773] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0287.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0287.773] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382947.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382947.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1531c)) returned 1 [0287.773] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0287.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0287.773] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0287.773] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ad37, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0382948.JPG", cAlternateFileName="")) returned 1 [0287.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0287.773] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2129c0 [0287.774] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0287.774] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2129c0 | out: hHeap=0x1f0000) returned 1 [0287.774] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0287.774] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0287.775] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382948.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382948.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0287.775] GetFileType (hFile=0x198) returned 0x1 [0287.775] CloseHandle (hObject=0x198) returned 1 [0287.776] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0287.776] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382948.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382948.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ad37)) returned 1 [0287.776] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0287.776] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0287.777] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382948.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382948.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ad37)) returned 1 [0287.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0287.777] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0287.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0287.777] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x178d2, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0382950.JPG", cAlternateFileName="")) returned 1 [0287.777] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0287.777] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212828 [0287.777] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0287.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212828 | out: hHeap=0x1f0000) returned 1 [0287.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0287.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0287.778] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382950.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382950.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0287.778] GetFileType (hFile=0x198) returned 0x1 [0287.779] CloseHandle (hObject=0x198) returned 1 [0287.779] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0287.779] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382950.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382950.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x178d2)) returned 1 [0287.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0287.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0287.780] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382950.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382950.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x178d2)) returned 1 [0287.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0287.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0287.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0287.780] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17749, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0382952.JPG", cAlternateFileName="")) returned 1 [0287.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0287.781] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211e10 [0287.781] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0287.781] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e10 | out: hHeap=0x1f0000) returned 1 [0287.781] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0287.781] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0287.782] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382952.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382952.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0287.782] GetFileType (hFile=0x198) returned 0x1 [0287.783] CloseHandle (hObject=0x198) returned 1 [0287.783] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0287.783] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382952.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382952.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17749)) returned 1 [0287.783] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0287.783] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0287.784] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382952.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382952.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17749)) returned 1 [0287.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0287.784] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0287.784] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0287.784] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x110c9494, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x110c9494, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110ef705, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15a7f, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0382954.JPG", cAlternateFileName="")) returned 1 [0287.784] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0287.784] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212828 [0287.784] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0287.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212828 | out: hHeap=0x1f0000) returned 1 [0287.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0287.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0287.786] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382954.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382954.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0287.786] GetFileType (hFile=0x198) returned 0x1 [0287.786] CloseHandle (hObject=0x198) returned 1 [0287.787] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0287.787] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382954.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382954.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x110c9494, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x110c9494, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110ef705, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15a7f)) returned 1 [0287.787] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0287.787] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0287.787] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382954.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382954.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x110c9494, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x110c9494, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110ef705, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15a7f)) returned 1 [0287.787] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0287.787] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0287.787] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0287.787] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15fef, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0382955.JPG", cAlternateFileName="")) returned 1 [0287.787] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0287.787] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2127a0 [0287.788] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0287.788] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2127a0 | out: hHeap=0x1f0000) returned 1 [0287.788] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0287.788] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0287.788] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382955.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382955.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0287.788] GetFileType (hFile=0x198) returned 0x1 [0287.789] CloseHandle (hObject=0x198) returned 1 [0287.789] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0287.789] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382955.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382955.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15fef)) returned 1 [0287.789] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0287.789] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0287.789] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382955.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382955.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15fef)) returned 1 [0287.789] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0287.790] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0287.790] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0287.790] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a9ed, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0382957.JPG", cAlternateFileName="")) returned 1 [0287.790] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0287.790] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211fa8 [0287.790] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0287.790] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211fa8 | out: hHeap=0x1f0000) returned 1 [0287.790] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0287.790] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0287.791] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382957.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382957.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0287.791] GetFileType (hFile=0x198) returned 0x1 [0287.791] CloseHandle (hObject=0x198) returned 1 [0287.791] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0287.792] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382957.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382957.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a9ed)) returned 1 [0287.792] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0287.792] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0287.792] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382957.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382957.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a9ed)) returned 1 [0287.792] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0287.793] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0287.793] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0287.793] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x193e7, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0382958.JPG", cAlternateFileName="")) returned 1 [0287.793] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0287.793] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211948 [0287.793] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0287.793] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211948 | out: hHeap=0x1f0000) returned 1 [0287.793] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0287.793] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0287.794] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382958.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382958.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0287.794] GetFileType (hFile=0x198) returned 0x1 [0287.794] CloseHandle (hObject=0x198) returned 1 [0287.794] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0287.794] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382958.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382958.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x193e7)) returned 1 [0287.794] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0287.794] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0287.795] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382958.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382958.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x193e7)) returned 1 [0287.795] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0287.795] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0287.795] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0287.795] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14f8a, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0382959.JPG", cAlternateFileName="")) returned 1 [0287.795] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0287.795] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211b68 [0287.795] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0287.795] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b68 | out: hHeap=0x1f0000) returned 1 [0287.795] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0287.795] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0287.796] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382959.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382959.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0287.796] GetFileType (hFile=0x198) returned 0x1 [0287.796] CloseHandle (hObject=0x198) returned 1 [0287.796] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0287.796] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382959.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382959.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14f8a)) returned 1 [0287.796] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0287.796] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0287.796] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382959.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382959.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14f8a)) returned 1 [0287.796] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0287.797] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0287.797] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0287.797] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a3f4, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0382960.JPG", cAlternateFileName="")) returned 1 [0287.797] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0287.797] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2127a0 [0287.797] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0287.797] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2127a0 | out: hHeap=0x1f0000) returned 1 [0287.797] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0287.797] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0287.797] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382960.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382960.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0287.797] GetFileType (hFile=0x198) returned 0x1 [0287.798] CloseHandle (hObject=0x198) returned 1 [0287.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0287.798] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382960.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382960.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a3f4)) returned 1 [0287.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0287.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0287.798] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382960.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382960.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a3f4)) returned 1 [0287.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0287.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0287.798] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0287.798] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18ac4, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0382961.JPG", cAlternateFileName="")) returned 1 [0287.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0287.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211ae0 [0287.798] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0287.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211ae0 | out: hHeap=0x1f0000) returned 1 [0287.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0287.799] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0287.799] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382961.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382961.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0287.799] GetFileType (hFile=0x198) returned 0x1 [0287.799] CloseHandle (hObject=0x198) returned 1 [0287.799] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0287.799] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382961.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382961.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18ac4)) returned 1 [0287.800] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0287.800] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0287.800] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382961.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382961.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18ac4)) returned 1 [0287.800] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0287.800] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0287.800] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0287.800] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bef7, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0382962.JPG", cAlternateFileName="")) returned 1 [0287.800] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0287.800] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211b68 [0287.800] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0287.800] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b68 | out: hHeap=0x1f0000) returned 1 [0287.800] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0287.800] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0287.800] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382962.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382962.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0287.801] GetFileType (hFile=0x198) returned 0x1 [0287.801] CloseHandle (hObject=0x198) returned 1 [0287.801] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0287.801] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382962.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382962.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bef7)) returned 1 [0287.801] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0287.801] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0287.801] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382962.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382962.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bef7)) returned 1 [0287.802] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0287.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0287.802] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0287.802] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17dee, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0382963.JPG", cAlternateFileName="")) returned 1 [0287.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0287.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212470 [0287.802] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0287.802] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212470 | out: hHeap=0x1f0000) returned 1 [0287.802] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0287.802] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0287.803] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382963.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382963.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0287.803] GetFileType (hFile=0x198) returned 0x1 [0287.803] CloseHandle (hObject=0x198) returned 1 [0287.803] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0287.803] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382963.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382963.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17dee)) returned 1 [0287.803] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0287.803] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0287.803] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382963.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382963.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17dee)) returned 1 [0287.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0287.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0287.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0287.804] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bb02, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0382965.JPG", cAlternateFileName="")) returned 1 [0287.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0287.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211e98 [0287.804] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0287.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e98 | out: hHeap=0x1f0000) returned 1 [0287.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0287.804] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0287.805] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382965.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382965.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0287.805] GetFileType (hFile=0x198) returned 0x1 [0287.805] CloseHandle (hObject=0x198) returned 1 [0287.806] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0287.806] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382965.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382965.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bb02)) returned 1 [0287.806] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0287.806] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0287.806] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382965.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382965.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bb02)) returned 1 [0287.806] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0287.806] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0287.806] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0287.806] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18888, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0382966.JPG", cAlternateFileName="")) returned 1 [0287.806] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0287.806] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212360 [0287.806] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0287.807] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212360 | out: hHeap=0x1f0000) returned 1 [0287.807] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0287.807] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0288.331] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382966.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382966.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0288.331] GetFileType (hFile=0x21c) returned 0x1 [0288.332] CloseHandle (hObject=0x21c) returned 1 [0288.332] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0288.332] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382966.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382966.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18888)) returned 1 [0288.332] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0288.332] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0288.332] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382966.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382966.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18888)) returned 1 [0288.332] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0288.332] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0288.333] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0288.333] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16d08, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0382967.JPG", cAlternateFileName="")) returned 1 [0288.333] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605b8 [0288.333] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212938 [0288.333] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0288.333] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212938 | out: hHeap=0x1f0000) returned 1 [0288.333] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0288.333] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0288.333] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382967.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382967.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0288.333] GetFileType (hFile=0x21c) returned 0x1 [0288.333] CloseHandle (hObject=0x21c) returned 1 [0288.334] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0288.334] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382967.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382967.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16d08)) returned 1 [0288.334] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0288.334] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0288.334] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382967.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382967.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16d08)) returned 1 [0288.334] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0288.334] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0288.334] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0288.334] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b75f, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0382968.JPG", cAlternateFileName="")) returned 1 [0288.334] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605b8 [0288.334] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212608 [0288.334] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0288.334] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212608 | out: hHeap=0x1f0000) returned 1 [0288.334] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0288.335] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0288.335] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382968.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382968.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0288.335] GetFileType (hFile=0x21c) returned 0x1 [0288.335] CloseHandle (hObject=0x21c) returned 1 [0288.335] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0288.335] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382968.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382968.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b75f)) returned 1 [0288.335] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0288.336] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0288.336] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382968.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382968.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b75f)) returned 1 [0288.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0288.336] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0288.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0288.336] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1779f, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0382969.JPG", cAlternateFileName="")) returned 1 [0288.336] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260630 [0288.336] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211fa8 [0288.336] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0288.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211fa8 | out: hHeap=0x1f0000) returned 1 [0288.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0288.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260630 | out: hHeap=0x1f0000) returned 1 [0288.337] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382969.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382969.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0288.337] GetFileType (hFile=0x21c) returned 0x1 [0288.337] CloseHandle (hObject=0x21c) returned 1 [0288.337] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0288.337] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382969.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382969.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1779f)) returned 1 [0288.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0288.338] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0288.338] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382969.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382969.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1779f)) returned 1 [0288.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0288.338] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0288.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0288.338] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15b94, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0382970.JPG", cAlternateFileName="")) returned 1 [0288.338] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0288.338] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0288.338] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0288.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0288.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0288.338] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0288.339] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382970.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382970.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0288.339] GetFileType (hFile=0x21c) returned 0x1 [0288.339] CloseHandle (hObject=0x21c) returned 1 [0288.339] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0288.339] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382970.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382970.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15b94)) returned 1 [0288.340] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0288.340] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0288.340] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382970.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382970.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15b94)) returned 1 [0288.340] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0288.340] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0288.340] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0288.340] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x190e9, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0384862.JPG", cAlternateFileName="")) returned 1 [0288.340] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605b8 [0288.340] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211f20 [0288.340] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0288.340] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211f20 | out: hHeap=0x1f0000) returned 1 [0288.341] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0288.341] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0288.341] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384862.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384862.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0288.341] GetFileType (hFile=0x21c) returned 0x1 [0288.342] CloseHandle (hObject=0x21c) returned 1 [0288.342] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0288.342] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384862.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384862.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x190e9)) returned 1 [0288.342] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0288.342] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0288.342] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384862.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384862.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x190e9)) returned 1 [0288.342] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0288.342] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0288.343] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0288.343] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17b79, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0384885.JPG", cAlternateFileName="")) returned 1 [0288.343] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0288.343] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d88 [0288.343] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0288.343] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d88 | out: hHeap=0x1f0000) returned 1 [0288.343] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0288.343] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0288.344] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384885.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384885.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0288.344] GetFileType (hFile=0x21c) returned 0x1 [0288.344] CloseHandle (hObject=0x21c) returned 1 [0288.345] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0288.345] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384885.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384885.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17b79)) returned 1 [0288.345] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0288.345] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0288.345] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384885.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384885.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17b79)) returned 1 [0288.345] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0288.345] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0288.345] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0288.345] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14033, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0384888.JPG", cAlternateFileName="")) returned 1 [0288.346] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0288.346] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211fa8 [0288.346] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0288.346] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211fa8 | out: hHeap=0x1f0000) returned 1 [0288.346] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0288.346] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0288.347] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384888.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384888.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0288.347] GetFileType (hFile=0x21c) returned 0x1 [0288.347] CloseHandle (hObject=0x21c) returned 1 [0288.348] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0288.348] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384888.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384888.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14033)) returned 1 [0288.348] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0288.348] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0288.348] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384888.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384888.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14033)) returned 1 [0288.348] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0288.348] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0288.348] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0288.349] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd8f6, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0384895.JPG", cAlternateFileName="")) returned 1 [0288.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605b8 [0288.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212828 [0288.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0288.349] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212828 | out: hHeap=0x1f0000) returned 1 [0288.349] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0288.349] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0288.350] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384895.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384895.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0288.350] GetFileType (hFile=0x21c) returned 0x1 [0288.350] CloseHandle (hObject=0x21c) returned 1 [0288.351] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0288.351] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384895.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384895.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd8f6)) returned 1 [0288.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0288.351] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0288.351] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384895.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384895.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd8f6)) returned 1 [0288.351] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0288.351] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0288.352] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0288.352] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11780, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0384900.JPG", cAlternateFileName="")) returned 1 [0288.352] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605b8 [0288.352] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211f20 [0288.352] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0288.352] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211f20 | out: hHeap=0x1f0000) returned 1 [0288.353] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0288.353] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0288.353] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384900.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384900.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0288.353] GetFileType (hFile=0x21c) returned 0x1 [0288.354] CloseHandle (hObject=0x21c) returned 1 [0288.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0288.354] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384900.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384900.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11780)) returned 1 [0288.355] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0288.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0288.355] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384900.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384900.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11780)) returned 1 [0288.355] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0288.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0288.355] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0288.355] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x787a, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0386120.JPG", cAlternateFileName="")) returned 1 [0288.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605b8 [0288.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211948 [0288.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0288.355] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211948 | out: hHeap=0x1f0000) returned 1 [0288.355] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0288.355] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0288.356] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386120.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386120.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0288.356] GetFileType (hFile=0x21c) returned 0x1 [0288.356] CloseHandle (hObject=0x21c) returned 1 [0288.357] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0288.357] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386120.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386120.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x787a)) returned 1 [0288.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0288.357] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0288.357] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386120.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386120.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x787a)) returned 1 [0288.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0288.357] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0288.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0288.357] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa91e, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0386267.JPG", cAlternateFileName="")) returned 1 [0288.357] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0288.357] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d88 [0288.357] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0288.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d88 | out: hHeap=0x1f0000) returned 1 [0288.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0288.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0288.358] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386267.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386267.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0288.358] GetFileType (hFile=0x21c) returned 0x1 [0288.358] CloseHandle (hObject=0x21c) returned 1 [0288.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0288.358] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386267.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386267.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa91e)) returned 1 [0288.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0288.359] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0288.359] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386267.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386267.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa91e)) returned 1 [0288.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0288.359] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0288.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0288.359] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b43, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0386270.JPG", cAlternateFileName="")) returned 1 [0288.359] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605b8 [0288.359] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2123e8 [0288.359] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0288.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2123e8 | out: hHeap=0x1f0000) returned 1 [0288.360] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0288.360] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0288.360] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386270.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386270.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0288.360] GetFileType (hFile=0x21c) returned 0x1 [0288.360] CloseHandle (hObject=0x21c) returned 1 [0288.361] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0288.361] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386270.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386270.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b43)) returned 1 [0288.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0288.361] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0288.361] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386270.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386270.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b43)) returned 1 [0288.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0288.361] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0288.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0288.361] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x396a, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0386485.JPG", cAlternateFileName="")) returned 1 [0288.361] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0288.361] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212828 [0288.361] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0288.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212828 | out: hHeap=0x1f0000) returned 1 [0288.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0288.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0288.362] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386485.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386485.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0288.362] GetFileType (hFile=0x21c) returned 0x1 [0288.363] CloseHandle (hObject=0x21c) returned 1 [0288.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0288.363] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386485.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386485.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x396a)) returned 1 [0288.363] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0288.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0288.363] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386485.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386485.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x396a)) returned 1 [0288.363] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0288.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0288.363] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0288.363] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x693e, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0386764.JPG", cAlternateFileName="")) returned 1 [0288.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605b8 [0288.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0288.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0288.364] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0288.364] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0288.364] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0288.364] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386764.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386764.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0288.364] GetFileType (hFile=0x21c) returned 0x1 [0288.364] CloseHandle (hObject=0x21c) returned 1 [0288.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0288.365] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386764.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386764.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x693e)) returned 1 [0288.365] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0288.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0288.365] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386764.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386764.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x693e)) returned 1 [0288.365] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0288.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0288.365] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0288.365] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcb0a, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0387337.JPG", cAlternateFileName="")) returned 1 [0288.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0288.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212140 [0288.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0288.366] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212140 | out: hHeap=0x1f0000) returned 1 [0288.366] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0288.366] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0288.366] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387337.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387337.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0288.366] GetFileType (hFile=0x21c) returned 0x1 [0288.366] CloseHandle (hObject=0x21c) returned 1 [0288.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0288.367] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387337.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387337.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcb0a)) returned 1 [0288.367] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0288.367] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0288.367] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387337.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387337.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcb0a)) returned 1 [0288.367] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0288.367] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0288.367] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0288.367] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6cec, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0387578.JPG", cAlternateFileName="")) returned 1 [0288.367] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605b8 [0288.367] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2120b8 [0288.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0288.590] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2120b8 | out: hHeap=0x1f0000) returned 1 [0288.590] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0288.590] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0288.591] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387578.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387578.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0288.591] GetFileType (hFile=0x198) returned 0x1 [0288.591] CloseHandle (hObject=0x198) returned 1 [0288.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0288.592] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387578.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387578.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6cec)) returned 1 [0288.592] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0288.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0288.592] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387578.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387578.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6cec)) returned 1 [0288.592] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0288.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0288.593] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0288.593] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x98c7, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0387591.JPG", cAlternateFileName="")) returned 1 [0288.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0288.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d00 [0288.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0288.593] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d00 | out: hHeap=0x1f0000) returned 1 [0288.593] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0288.593] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0288.594] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387591.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387591.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0288.594] GetFileType (hFile=0x198) returned 0x1 [0288.594] CloseHandle (hObject=0x198) returned 1 [0288.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0288.595] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387591.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387591.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x98c7)) returned 1 [0288.595] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0288.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0288.595] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387591.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387591.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x98c7)) returned 1 [0288.595] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0288.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0288.595] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0288.596] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb9bf, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0387604.JPG", cAlternateFileName="")) returned 1 [0288.596] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0288.596] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212360 [0288.596] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0288.596] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212360 | out: hHeap=0x1f0000) returned 1 [0288.596] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0288.596] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0288.597] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387604.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387604.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0288.597] GetFileType (hFile=0x198) returned 0x1 [0288.597] CloseHandle (hObject=0x198) returned 1 [0288.597] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0288.598] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387604.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387604.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb9bf)) returned 1 [0288.598] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0288.598] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0288.598] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387604.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387604.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb9bf)) returned 1 [0288.598] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0288.598] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0288.598] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0288.598] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x98ec, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0387882.JPG", cAlternateFileName="")) returned 1 [0288.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0288.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211bf0 [0288.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0288.599] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211bf0 | out: hHeap=0x1f0000) returned 1 [0288.599] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0288.599] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0288.600] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387882.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387882.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0288.600] GetFileType (hFile=0x198) returned 0x1 [0288.600] CloseHandle (hObject=0x198) returned 1 [0288.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0288.601] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387882.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387882.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x98ec)) returned 1 [0288.601] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0288.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0288.601] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387882.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387882.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x98ec)) returned 1 [0288.601] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0288.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0288.601] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0288.601] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7df3, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0387895.JPG", cAlternateFileName="")) returned 1 [0288.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0288.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211ae0 [0288.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0288.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211ae0 | out: hHeap=0x1f0000) returned 1 [0288.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0288.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0288.604] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387895.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387895.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0288.605] GetFileType (hFile=0x198) returned 0x1 [0288.605] CloseHandle (hObject=0x198) returned 1 [0288.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0288.605] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387895.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387895.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7df3)) returned 1 [0288.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0288.606] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0288.606] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387895.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387895.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7df3)) returned 1 [0288.606] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0288.606] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0288.606] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0288.606] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x351c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0390072.JPG", cAlternateFileName="")) returned 1 [0288.606] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0288.606] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212030 [0288.606] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0288.606] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212030 | out: hHeap=0x1f0000) returned 1 [0288.607] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0288.607] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0288.607] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0390072.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0390072.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0288.607] GetFileType (hFile=0x198) returned 0x1 [0288.608] CloseHandle (hObject=0x198) returned 1 [0288.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0288.608] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0390072.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0390072.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x351c)) returned 1 [0288.608] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0288.608] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0288.608] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0390072.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0390072.jpg"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x351c)) returned 1 [0288.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0288.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0288.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0288.609] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31883, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0400001.PNG", cAlternateFileName="")) returned 1 [0288.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0288.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211f20 [0288.609] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0288.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211f20 | out: hHeap=0x1f0000) returned 1 [0288.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0288.609] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0288.610] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400001.PNG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400001.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0288.610] GetFileType (hFile=0x198) returned 0x1 [0288.611] CloseHandle (hObject=0x198) returned 1 [0288.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0288.611] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400001.PNG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400001.png"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31883)) returned 1 [0288.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0288.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0288.611] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400001.PNG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400001.png"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31883)) returned 1 [0288.612] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0288.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0288.612] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0288.612] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15d49, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0400002.PNG", cAlternateFileName="")) returned 1 [0288.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0288.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0288.612] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0288.612] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0288.612] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0288.612] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0288.613] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400002.PNG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400002.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0288.613] GetFileType (hFile=0x198) returned 0x1 [0288.613] CloseHandle (hObject=0x198) returned 1 [0288.614] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0288.614] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400002.PNG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400002.png"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15d49)) returned 1 [0288.614] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0288.614] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0288.614] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400002.PNG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400002.png"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15d49)) returned 1 [0288.614] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0288.614] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0288.615] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0288.615] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e836, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0400003.PNG", cAlternateFileName="")) returned 1 [0288.772] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605b8 [0288.772] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2120b8 [0288.772] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0288.773] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2120b8 | out: hHeap=0x1f0000) returned 1 [0288.773] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0288.773] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0288.773] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400003.PNG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400003.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0288.773] GetFileType (hFile=0x21c) returned 0x1 [0288.774] CloseHandle (hObject=0x21c) returned 1 [0288.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0288.775] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400003.PNG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400003.png"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e836)) returned 1 [0288.775] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0288.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0288.775] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400003.PNG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400003.png"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e836)) returned 1 [0288.775] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0288.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0288.775] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0288.775] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19a5d, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0400004.PNG", cAlternateFileName="")) returned 1 [0288.775] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0288.776] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211a58 [0288.776] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0288.776] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211a58 | out: hHeap=0x1f0000) returned 1 [0288.776] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0288.776] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0288.776] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400004.PNG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400004.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0288.776] GetFileType (hFile=0x21c) returned 0x1 [0288.777] CloseHandle (hObject=0x21c) returned 1 [0288.777] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0288.777] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400004.PNG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400004.png"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19a5d)) returned 1 [0288.777] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0288.777] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0288.777] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400004.PNG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400004.png"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19a5d)) returned 1 [0288.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0288.778] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0288.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0288.778] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17742, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="J0400005.PNG", cAlternateFileName="")) returned 1 [0288.778] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0288.778] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212828 [0288.778] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0288.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212828 | out: hHeap=0x1f0000) returned 1 [0288.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0288.778] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0288.779] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400005.PNG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400005.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0288.779] GetFileType (hFile=0x21c) returned 0x1 [0288.779] CloseHandle (hObject=0x21c) returned 1 [0288.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0288.780] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400005.PNG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400005.png"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17742)) returned 1 [0288.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0288.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0288.780] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400005.PNG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400005.png"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17742)) returned 1 [0288.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0288.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0288.780] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0288.780] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2645, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="JAVA_01.MID", cAlternateFileName="")) returned 1 [0288.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0288.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2129c0 [0288.780] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0288.781] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2129c0 | out: hHeap=0x1f0000) returned 1 [0288.781] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0288.781] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0288.781] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JAVA_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\java_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0288.781] GetFileType (hFile=0x21c) returned 0x1 [0288.782] CloseHandle (hObject=0x21c) returned 1 [0288.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0288.782] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JAVA_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\java_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2645)) returned 1 [0288.782] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0288.782] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0288.782] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JAVA_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\java_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2645)) returned 1 [0288.783] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0288.783] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0288.783] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0288.783] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16d3, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="JNGLE_01.MID", cAlternateFileName="")) returned 1 [0288.783] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0288.783] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211a58 [0288.783] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0288.783] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211a58 | out: hHeap=0x1f0000) returned 1 [0288.783] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0288.783] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0288.784] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JNGLE_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\jngle_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0288.784] GetFileType (hFile=0x21c) returned 0x1 [0288.784] CloseHandle (hObject=0x21c) returned 1 [0288.785] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0288.785] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JNGLE_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\jngle_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16d3)) returned 1 [0288.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0288.785] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0288.785] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JNGLE_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\jngle_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16d3)) returned 1 [0288.785] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0288.785] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0288.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0288.786] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15f6, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="MP00021_.WMF", cAlternateFileName="")) returned 1 [0288.786] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0288.786] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212718 [0288.786] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0288.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212718 | out: hHeap=0x1f0000) returned 1 [0288.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0288.786] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0288.787] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MP00021_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\mp00021_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0288.787] GetFileType (hFile=0x21c) returned 0x1 [0288.787] CloseHandle (hObject=0x21c) returned 1 [0288.787] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0288.788] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MP00021_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\mp00021_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15f6)) returned 1 [0288.788] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0288.788] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0288.788] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MP00021_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\mp00021_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15f6)) returned 1 [0288.788] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0288.788] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0288.788] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0288.788] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1090, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="MP00132_.WMF", cAlternateFileName="")) returned 1 [0288.788] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0288.788] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211ae0 [0288.788] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0288.789] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211ae0 | out: hHeap=0x1f0000) returned 1 [0288.789] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0288.789] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0288.789] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MP00132_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\mp00132_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0288.984] GetFileType (hFile=0x198) returned 0x1 [0288.984] CloseHandle (hObject=0x198) returned 1 [0288.984] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0288.984] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MP00132_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\mp00132_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1090)) returned 1 [0288.984] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0288.984] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0288.984] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MP00132_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\mp00132_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1090)) returned 1 [0288.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0288.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0288.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0288.985] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31e2, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="MP00646_.WMF", cAlternateFileName="")) returned 1 [0288.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0288.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2129c0 [0288.985] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0288.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2129c0 | out: hHeap=0x1f0000) returned 1 [0288.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0288.985] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0289.073] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MP00646_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\mp00646_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.073] GetFileType (hFile=0x198) returned 0x1 [0289.073] CloseHandle (hObject=0x198) returned 1 [0289.074] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0289.074] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MP00646_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\mp00646_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31e2)) returned 1 [0289.074] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0289.074] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0289.074] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MP00646_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\mp00646_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31e2)) returned 1 [0289.074] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0289.074] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0289.074] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0289.074] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ae0, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="MUSIC_01.MID", cAlternateFileName="")) returned 1 [0289.075] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0289.075] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212250 [0289.075] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0289.075] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212250 | out: hHeap=0x1f0000) returned 1 [0289.075] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0289.075] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0289.075] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MUSIC_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\music_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.075] GetFileType (hFile=0x198) returned 0x1 [0289.076] CloseHandle (hObject=0x198) returned 1 [0289.076] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0289.076] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MUSIC_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\music_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ae0)) returned 1 [0289.076] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0289.076] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0289.076] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MUSIC_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\music_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ae0)) returned 1 [0289.076] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0289.076] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0289.076] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0289.076] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5044, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA00042_.WMF", cAlternateFileName="")) returned 1 [0289.076] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0289.076] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211fa8 [0289.077] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0289.077] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211fa8 | out: hHeap=0x1f0000) returned 1 [0289.077] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0289.077] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0289.077] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00042_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00042_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.077] GetFileType (hFile=0x198) returned 0x1 [0289.078] CloseHandle (hObject=0x198) returned 1 [0289.078] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0289.078] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00042_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00042_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5044)) returned 1 [0289.078] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0289.078] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0289.078] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00042_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00042_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5044)) returned 1 [0289.078] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0289.078] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0289.079] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0289.079] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a42, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA00057_.WMF", cAlternateFileName="")) returned 1 [0289.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0289.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2128b0 [0289.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0289.079] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2128b0 | out: hHeap=0x1f0000) returned 1 [0289.079] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0289.079] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0289.079] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00057_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00057_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.080] GetFileType (hFile=0x198) returned 0x1 [0289.080] CloseHandle (hObject=0x198) returned 1 [0289.080] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0289.080] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00057_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00057_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a42)) returned 1 [0289.081] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0289.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0289.081] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00057_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00057_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a42)) returned 1 [0289.081] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0289.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0289.081] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0289.081] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xeaa, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA00058_.WMF", cAlternateFileName="")) returned 1 [0289.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0289.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211c78 [0289.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0289.082] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211c78 | out: hHeap=0x1f0000) returned 1 [0289.082] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0289.082] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0289.082] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00058_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00058_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.083] GetFileType (hFile=0x198) returned 0x1 [0289.083] CloseHandle (hObject=0x198) returned 1 [0289.083] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0289.084] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00058_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00058_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xeaa)) returned 1 [0289.084] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0289.084] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0289.084] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00058_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00058_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xeaa)) returned 1 [0289.084] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0289.084] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0289.084] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0289.084] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1324, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA00068_.WMF", cAlternateFileName="")) returned 1 [0289.084] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0289.085] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211f20 [0289.085] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0289.085] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211f20 | out: hHeap=0x1f0000) returned 1 [0289.085] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0289.085] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0289.085] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00068_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00068_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.086] GetFileType (hFile=0x198) returned 0x1 [0289.086] CloseHandle (hObject=0x198) returned 1 [0289.087] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0289.087] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00068_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00068_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1324)) returned 1 [0289.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0289.087] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0289.087] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00068_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00068_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1324)) returned 1 [0289.087] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0289.087] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0289.088] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0289.088] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1384, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA00238_.WMF", cAlternateFileName="")) returned 1 [0289.088] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0289.088] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2119d0 [0289.088] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0289.088] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2119d0 | out: hHeap=0x1f0000) returned 1 [0289.088] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0289.088] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0289.089] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00238_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00238_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.089] GetFileType (hFile=0x198) returned 0x1 [0289.089] CloseHandle (hObject=0x198) returned 1 [0289.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0289.090] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00238_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00238_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1384)) returned 1 [0289.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0289.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0289.090] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00238_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00238_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1384)) returned 1 [0289.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0289.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0289.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0289.090] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x864, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA00330_.WMF", cAlternateFileName="")) returned 1 [0289.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0289.090] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d00 [0289.091] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0289.091] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d00 | out: hHeap=0x1f0000) returned 1 [0289.091] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0289.091] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0289.091] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00330_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00330_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.091] GetFileType (hFile=0x198) returned 0x1 [0289.092] CloseHandle (hObject=0x198) returned 1 [0289.092] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0289.092] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00330_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00330_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x864)) returned 1 [0289.092] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0289.092] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0289.093] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00330_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00330_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x864)) returned 1 [0289.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0289.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0289.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0289.093] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1172, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA00388_.WMF", cAlternateFileName="")) returned 1 [0289.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0289.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2129c0 [0289.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0289.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2129c0 | out: hHeap=0x1f0000) returned 1 [0289.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0289.094] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0289.094] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00388_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00388_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.094] GetFileType (hFile=0x198) returned 0x1 [0289.095] CloseHandle (hObject=0x198) returned 1 [0289.095] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0289.095] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00388_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00388_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1172)) returned 1 [0289.095] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0289.096] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0289.096] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00388_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00388_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1172)) returned 1 [0289.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0289.096] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0289.096] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0289.096] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20ca, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA00389_.WMF", cAlternateFileName="")) returned 1 [0289.096] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0289.096] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212828 [0289.096] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0289.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212828 | out: hHeap=0x1f0000) returned 1 [0289.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0289.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0289.097] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00389_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00389_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.098] GetFileType (hFile=0x198) returned 0x1 [0289.098] CloseHandle (hObject=0x198) returned 1 [0289.098] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0289.099] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00389_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00389_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20ca)) returned 1 [0289.099] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0289.099] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0289.099] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00389_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00389_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20ca)) returned 1 [0289.099] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0289.099] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0289.099] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0289.099] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21c2, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA00390_.WMF", cAlternateFileName="")) returned 1 [0289.099] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0289.100] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211bf0 [0289.100] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0289.100] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211bf0 | out: hHeap=0x1f0000) returned 1 [0289.100] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0289.100] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0289.100] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00390_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00390_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.322] GetFileType (hFile=0x198) returned 0x1 [0289.322] CloseHandle (hObject=0x198) returned 1 [0289.323] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0289.323] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00390_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00390_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21c2)) returned 1 [0289.323] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0289.323] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0289.323] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00390_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00390_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21c2)) returned 1 [0289.323] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0289.323] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0289.323] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0289.324] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21ec, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA00391_.WMF", cAlternateFileName="")) returned 1 [0289.324] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0289.324] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212140 [0289.324] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0289.324] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212140 | out: hHeap=0x1f0000) returned 1 [0289.324] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0289.324] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0289.325] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00391_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00391_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.326] GetFileType (hFile=0x198) returned 0x1 [0289.326] CloseHandle (hObject=0x198) returned 1 [0289.327] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0289.327] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00391_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00391_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21ec)) returned 1 [0289.327] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0289.327] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0289.327] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00391_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00391_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21ec)) returned 1 [0289.327] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0289.327] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0289.327] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0289.327] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ad4, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA00394_.WMF", cAlternateFileName="")) returned 1 [0289.327] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0289.328] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212140 [0289.328] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0289.328] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212140 | out: hHeap=0x1f0000) returned 1 [0289.328] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0289.328] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0289.328] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00394_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00394_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.329] GetFileType (hFile=0x198) returned 0x1 [0289.329] CloseHandle (hObject=0x198) returned 1 [0289.329] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0289.330] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00394_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00394_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ad4)) returned 1 [0289.330] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0289.330] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0289.330] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00394_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00394_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ad4)) returned 1 [0289.330] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0289.330] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0289.330] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0289.330] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x194a, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA00395_.WMF", cAlternateFileName="")) returned 1 [0289.330] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0289.330] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2120b8 [0289.330] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0289.331] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2120b8 | out: hHeap=0x1f0000) returned 1 [0289.331] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0289.331] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0289.331] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00395_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00395_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.332] GetFileType (hFile=0x198) returned 0x1 [0289.333] CloseHandle (hObject=0x198) returned 1 [0289.333] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0289.333] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00395_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00395_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x194a)) returned 1 [0289.333] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0289.333] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0289.333] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00395_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00395_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x194a)) returned 1 [0289.333] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0289.333] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0289.333] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0289.333] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x38c6, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA00396_.WMF", cAlternateFileName="")) returned 1 [0289.334] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0289.334] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212030 [0289.334] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0289.334] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212030 | out: hHeap=0x1f0000) returned 1 [0289.334] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0289.334] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0289.334] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00396_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00396_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.335] GetFileType (hFile=0x198) returned 0x1 [0289.336] CloseHandle (hObject=0x198) returned 1 [0289.336] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0289.336] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00396_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00396_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x38c6)) returned 1 [0289.336] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0289.336] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0289.337] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00396_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00396_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x38c6)) returned 1 [0289.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0289.337] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0289.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0289.337] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x173e, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA00417_.WMF", cAlternateFileName="")) returned 1 [0289.337] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260630 [0289.337] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211ae0 [0289.337] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0289.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211ae0 | out: hHeap=0x1f0000) returned 1 [0289.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0289.337] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260630 | out: hHeap=0x1f0000) returned 1 [0289.338] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00417_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00417_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.338] GetFileType (hFile=0x198) returned 0x1 [0289.338] CloseHandle (hObject=0x198) returned 1 [0289.339] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0289.339] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00417_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00417_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x173e)) returned 1 [0289.339] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0289.339] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0289.339] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00417_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00417_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x173e)) returned 1 [0289.339] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0289.339] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0289.339] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0289.339] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4696, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA00433_.WMF", cAlternateFileName="")) returned 1 [0289.340] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0289.340] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d00 [0289.340] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0289.340] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d00 | out: hHeap=0x1f0000) returned 1 [0289.340] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0289.340] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0289.340] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00433_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00433_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.341] GetFileType (hFile=0x198) returned 0x1 [0289.341] CloseHandle (hObject=0x198) returned 1 [0289.341] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0289.341] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00433_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00433_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4696)) returned 1 [0289.341] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0289.341] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0289.342] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00433_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00433_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4696)) returned 1 [0289.342] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0289.342] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0289.342] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0289.342] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2f38, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA00438_.WMF", cAlternateFileName="")) returned 1 [0289.342] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0289.342] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212828 [0289.342] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0289.342] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212828 | out: hHeap=0x1f0000) returned 1 [0289.342] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0289.342] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0289.343] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00438_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00438_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.343] GetFileType (hFile=0x198) returned 0x1 [0289.343] CloseHandle (hObject=0x198) returned 1 [0289.343] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0289.344] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00438_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00438_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2f38)) returned 1 [0289.344] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0289.344] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0289.344] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00438_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00438_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2f38)) returned 1 [0289.344] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0289.344] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0289.344] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0289.344] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14bc, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA00452_.WMF", cAlternateFileName="")) returned 1 [0289.344] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0289.344] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212360 [0289.344] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0289.344] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212360 | out: hHeap=0x1f0000) returned 1 [0289.344] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0289.344] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0289.345] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00452_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00452_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.346] GetFileType (hFile=0x198) returned 0x1 [0289.346] CloseHandle (hObject=0x198) returned 1 [0289.346] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0289.346] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00452_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00452_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14bc)) returned 1 [0289.347] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0289.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0289.347] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00452_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00452_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14bc)) returned 1 [0289.347] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0289.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0289.347] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0289.347] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1580, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA00454_.WMF", cAlternateFileName="")) returned 1 [0289.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0289.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211e98 [0289.347] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0289.347] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e98 | out: hHeap=0x1f0000) returned 1 [0289.347] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0289.347] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0289.348] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00454_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00454_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.349] GetFileType (hFile=0x198) returned 0x1 [0289.349] CloseHandle (hObject=0x198) returned 1 [0289.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0289.349] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00454_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00454_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1580)) returned 1 [0289.349] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0289.349] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0289.349] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00454_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00454_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1580)) returned 1 [0289.350] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0289.350] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0289.350] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0289.350] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27a4, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA00458_.WMF", cAlternateFileName="")) returned 1 [0289.350] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0289.350] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211b68 [0289.350] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0289.350] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b68 | out: hHeap=0x1f0000) returned 1 [0289.350] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0289.350] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0289.350] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00458_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00458_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.353] GetFileType (hFile=0x198) returned 0x1 [0289.353] CloseHandle (hObject=0x198) returned 1 [0289.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0289.354] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00458_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00458_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27a4)) returned 1 [0289.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0289.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0289.354] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00458_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00458_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27a4)) returned 1 [0289.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0289.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0289.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0289.354] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f6c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA00462_.WMF", cAlternateFileName="")) returned 1 [0289.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0289.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2123e8 [0289.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0289.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2123e8 | out: hHeap=0x1f0000) returned 1 [0289.355] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0289.355] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0289.355] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00462_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00462_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.355] GetFileType (hFile=0x198) returned 0x1 [0289.356] CloseHandle (hObject=0x198) returned 1 [0289.356] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0289.356] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00462_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00462_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f6c)) returned 1 [0289.356] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0289.356] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0289.356] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00462_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00462_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f6c)) returned 1 [0289.356] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0289.356] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0289.356] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0289.356] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc10, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA00487_.WMF", cAlternateFileName="")) returned 1 [0289.356] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0289.357] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212470 [0289.357] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0289.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212470 | out: hHeap=0x1f0000) returned 1 [0289.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0289.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0289.357] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00487_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00487_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0289.731] GetFileType (hFile=0x198) returned 0x1 [0289.732] CloseHandle (hObject=0x198) returned 1 [0289.732] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0289.732] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00487_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00487_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc10)) returned 1 [0289.733] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0289.733] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0289.733] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00487_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00487_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc10)) returned 1 [0289.733] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0289.733] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0289.733] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0289.733] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x938, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA00494_.WMF", cAlternateFileName="")) returned 1 [0289.734] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0289.734] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212030 [0289.734] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0289.734] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212030 | out: hHeap=0x1f0000) returned 1 [0289.734] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0289.734] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0290.067] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00494_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00494_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0290.067] GetFileType (hFile=0x21c) returned 0x1 [0290.068] CloseHandle (hObject=0x21c) returned 1 [0290.068] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0290.068] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00494_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00494_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x938)) returned 1 [0290.068] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0290.068] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0290.068] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00494_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00494_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x938)) returned 1 [0290.068] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0290.069] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0290.069] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0290.069] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb60, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA00512_.WMF", cAlternateFileName="")) returned 1 [0290.069] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0290.069] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0290.069] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0290.069] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0290.069] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0290.069] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0290.070] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00512_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00512_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0290.070] GetFileType (hFile=0x21c) returned 0x1 [0290.070] CloseHandle (hObject=0x21c) returned 1 [0290.071] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0290.072] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00512_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00512_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb60)) returned 1 [0290.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0290.072] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0290.072] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00512_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00512_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb60)) returned 1 [0290.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0290.072] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0290.072] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0290.072] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6efa, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA00523_.WMF", cAlternateFileName="")) returned 1 [0290.072] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0290.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212250 [0290.073] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0290.073] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212250 | out: hHeap=0x1f0000) returned 1 [0290.073] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0290.073] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0290.074] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00523_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00523_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0290.074] GetFileType (hFile=0x21c) returned 0x1 [0290.074] CloseHandle (hObject=0x21c) returned 1 [0290.075] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0290.075] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00523_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00523_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6efa)) returned 1 [0290.075] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0290.075] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0290.075] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00523_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00523_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6efa)) returned 1 [0290.075] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0290.075] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0290.075] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0290.075] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5880, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA00525_.WMF", cAlternateFileName="")) returned 1 [0290.076] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0290.076] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2120b8 [0290.076] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0290.076] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2120b8 | out: hHeap=0x1f0000) returned 1 [0290.076] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0290.076] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0290.076] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00525_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00525_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0290.077] GetFileType (hFile=0x21c) returned 0x1 [0290.077] CloseHandle (hObject=0x21c) returned 1 [0290.077] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0290.078] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00525_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00525_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5880)) returned 1 [0290.078] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0290.078] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0290.078] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00525_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00525_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5880)) returned 1 [0290.078] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0290.078] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0290.078] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0290.078] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x477c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA00530_.WMF", cAlternateFileName="")) returned 1 [0290.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0290.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0290.079] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0290.079] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0290.079] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0290.079] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0290.080] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00530_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00530_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0290.080] GetFileType (hFile=0x21c) returned 0x1 [0290.080] CloseHandle (hObject=0x21c) returned 1 [0290.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0290.081] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00530_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00530_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x477c)) returned 1 [0290.081] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0290.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0290.081] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00530_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00530_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x477c)) returned 1 [0290.081] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0290.081] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0290.082] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0290.082] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x530, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA00532_.WMF", cAlternateFileName="")) returned 1 [0290.082] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0290.082] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211bf0 [0290.082] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0290.082] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211bf0 | out: hHeap=0x1f0000) returned 1 [0290.082] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0290.082] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0290.083] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00532_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00532_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0290.083] GetFileType (hFile=0x21c) returned 0x1 [0290.084] CloseHandle (hObject=0x21c) returned 1 [0290.084] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0290.084] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00532_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00532_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x530)) returned 1 [0290.084] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0290.084] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0290.084] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00532_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00532_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x530)) returned 1 [0290.085] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0290.085] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0290.085] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0290.085] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7d14, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA00538_.WMF", cAlternateFileName="")) returned 1 [0290.085] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0290.085] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d88 [0290.085] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0290.085] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d88 | out: hHeap=0x1f0000) returned 1 [0290.085] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0290.085] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0290.086] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00538_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00538_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0290.087] GetFileType (hFile=0x21c) returned 0x1 [0290.087] CloseHandle (hObject=0x21c) returned 1 [0290.088] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0290.088] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00538_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00538_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7d14)) returned 1 [0290.088] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0290.088] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0290.088] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00538_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00538_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7d14)) returned 1 [0290.089] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0290.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0290.089] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0290.089] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x64c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA00641_.WMF", cAlternateFileName="")) returned 1 [0290.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0290.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d88 [0290.089] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0290.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d88 | out: hHeap=0x1f0000) returned 1 [0290.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0290.090] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0290.091] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00641_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00641_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0290.091] GetFileType (hFile=0x21c) returned 0x1 [0290.091] CloseHandle (hObject=0x21c) returned 1 [0290.092] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0290.092] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00641_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00641_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x64c)) returned 1 [0290.092] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0290.092] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0290.093] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00641_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00641_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x64c)) returned 1 [0290.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0290.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0290.093] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0290.093] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7658, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA00784_.WMF", cAlternateFileName="")) returned 1 [0290.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0290.093] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d88 [0290.094] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0290.094] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d88 | out: hHeap=0x1f0000) returned 1 [0290.094] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0290.094] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0290.095] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00784_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00784_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0290.095] GetFileType (hFile=0x21c) returned 0x1 [0290.096] CloseHandle (hObject=0x21c) returned 1 [0290.096] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0290.096] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00784_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00784_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7658)) returned 1 [0290.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0290.097] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0290.097] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00784_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00784_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7658)) returned 1 [0290.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0290.097] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0290.097] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0290.098] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x23f8, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA00798_.WMF", cAlternateFileName="")) returned 1 [0290.098] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0290.098] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212140 [0290.098] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0290.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212140 | out: hHeap=0x1f0000) returned 1 [0290.098] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0290.099] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0290.099] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00798_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00798_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0290.099] GetFileType (hFile=0x21c) returned 0x1 [0290.100] CloseHandle (hObject=0x21c) returned 1 [0290.100] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0290.101] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00798_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00798_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x23f8)) returned 1 [0290.101] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0290.101] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0290.101] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00798_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00798_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x23f8)) returned 1 [0290.101] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0290.101] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0290.102] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0290.102] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x788, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA00806_.WMF", cAlternateFileName="")) returned 1 [0290.296] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0290.297] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211ae0 [0290.297] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0290.297] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211ae0 | out: hHeap=0x1f0000) returned 1 [0290.297] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0290.297] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0290.298] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00806_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00806_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0290.298] GetFileType (hFile=0x198) returned 0x1 [0290.298] CloseHandle (hObject=0x198) returned 1 [0290.299] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0290.299] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00806_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00806_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x788)) returned 1 [0290.299] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0290.299] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0290.299] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00806_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00806_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x788)) returned 1 [0290.300] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0290.300] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0290.300] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0290.300] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xba4, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA00807_.WMF", cAlternateFileName="")) returned 1 [0290.300] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0290.300] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211b68 [0290.300] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0290.300] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b68 | out: hHeap=0x1f0000) returned 1 [0290.300] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0290.301] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0290.301] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00807_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00807_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0290.301] GetFileType (hFile=0x198) returned 0x1 [0290.302] CloseHandle (hObject=0x198) returned 1 [0290.302] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0290.302] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00807_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00807_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xba4)) returned 1 [0290.302] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0290.302] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0290.302] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00807_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00807_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xba4)) returned 1 [0290.303] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0290.303] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0290.303] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0290.303] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x514, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA00808_.WMF", cAlternateFileName="")) returned 1 [0290.303] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0290.303] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2124f8 [0290.303] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0290.303] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2124f8 | out: hHeap=0x1f0000) returned 1 [0290.303] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0290.303] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0290.303] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00808_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00808_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0290.304] GetFileType (hFile=0x198) returned 0x1 [0290.304] CloseHandle (hObject=0x198) returned 1 [0290.304] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0290.304] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00808_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00808_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x514)) returned 1 [0290.304] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0290.304] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0290.304] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00808_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00808_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x514)) returned 1 [0290.305] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0290.305] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0290.305] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0290.305] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x608, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA00809_.WMF", cAlternateFileName="")) returned 1 [0290.305] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0290.305] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211e98 [0290.305] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0290.306] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e98 | out: hHeap=0x1f0000) returned 1 [0290.306] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0290.306] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0290.306] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00809_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00809_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0290.306] GetFileType (hFile=0x198) returned 0x1 [0290.307] CloseHandle (hObject=0x198) returned 1 [0290.307] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0290.307] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00809_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00809_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x608)) returned 1 [0290.307] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0290.307] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0290.307] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00809_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00809_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x608)) returned 1 [0290.308] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0290.308] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0290.308] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0290.308] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd58, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA00810_.WMF", cAlternateFileName="")) returned 1 [0290.308] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0290.308] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212938 [0290.308] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0290.308] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212938 | out: hHeap=0x1f0000) returned 1 [0290.308] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0290.308] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0290.309] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00810_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00810_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0290.309] GetFileType (hFile=0x198) returned 0x1 [0290.309] CloseHandle (hObject=0x198) returned 1 [0290.310] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0290.310] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00810_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00810_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd58)) returned 1 [0290.310] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0290.310] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0290.310] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00810_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00810_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd58)) returned 1 [0290.310] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0290.310] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0290.310] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0290.310] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3210, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA00932_.WMF", cAlternateFileName="")) returned 1 [0290.311] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260838 [0290.311] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212360 [0290.311] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0290.311] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212360 | out: hHeap=0x1f0000) returned 1 [0290.311] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0290.311] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260838 | out: hHeap=0x1f0000) returned 1 [0290.311] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00932_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00932_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0290.312] GetFileType (hFile=0x198) returned 0x1 [0290.312] CloseHandle (hObject=0x198) returned 1 [0290.312] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0290.312] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00932_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00932_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3210)) returned 1 [0290.312] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0290.312] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0290.313] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00932_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00932_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3210)) returned 1 [0290.313] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0290.313] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0290.313] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0290.313] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x110c9494, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x110c9494, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110ef705, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7c46, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA01064_.WMF", cAlternateFileName="")) returned 1 [0290.313] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0290.313] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0290.313] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0290.313] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0290.313] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0290.313] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0290.314] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01064_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01064_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0290.314] GetFileType (hFile=0x198) returned 0x1 [0290.314] CloseHandle (hObject=0x198) returned 1 [0290.315] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0290.315] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01064_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01064_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x110c9494, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x110c9494, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110ef705, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7c46)) returned 1 [0290.315] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0290.315] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0290.315] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01064_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01064_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x110c9494, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x110c9494, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110ef705, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7c46)) returned 1 [0290.315] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0290.315] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0290.315] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0290.315] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x54a8, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA01066_.WMF", cAlternateFileName="")) returned 1 [0290.315] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0290.315] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211fa8 [0290.315] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0290.316] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211fa8 | out: hHeap=0x1f0000) returned 1 [0290.316] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0290.316] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0290.316] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01066_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01066_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0290.316] GetFileType (hFile=0x198) returned 0x1 [0290.316] CloseHandle (hObject=0x198) returned 1 [0290.317] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0290.317] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01066_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01066_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x54a8)) returned 1 [0290.317] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0290.317] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0290.317] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01066_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01066_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x54a8)) returned 1 [0290.317] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0290.317] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0290.317] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0290.317] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a7e, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA01069_.WMF", cAlternateFileName="")) returned 1 [0290.317] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0290.317] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211b68 [0290.317] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0290.318] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b68 | out: hHeap=0x1f0000) returned 1 [0290.318] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0290.318] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0290.318] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01069_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01069_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0290.318] GetFileType (hFile=0x198) returned 0x1 [0290.318] CloseHandle (hObject=0x198) returned 1 [0290.318] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0290.318] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01069_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01069_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a7e)) returned 1 [0290.318] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0290.318] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0290.318] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01069_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01069_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a7e)) returned 1 [0290.319] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0290.319] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0290.319] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0290.319] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA01123_.WMF", cAlternateFileName="")) returned 1 [0290.319] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0290.319] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2119d0 [0290.319] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0290.319] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2119d0 | out: hHeap=0x1f0000) returned 1 [0290.319] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0290.319] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0290.319] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01123_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01123_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0290.319] GetFileType (hFile=0x198) returned 0x1 [0290.319] CloseHandle (hObject=0x198) returned 1 [0290.320] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0290.320] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01123_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01123_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e00)) returned 1 [0290.320] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0290.320] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0290.320] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01123_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01123_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e00)) returned 1 [0290.320] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0290.320] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0290.320] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0290.320] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb70, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA01126_.WMF", cAlternateFileName="")) returned 1 [0290.320] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0290.320] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212140 [0290.321] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0290.321] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212140 | out: hHeap=0x1f0000) returned 1 [0290.321] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0290.321] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0290.322] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01126_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01126_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0290.322] GetFileType (hFile=0x198) returned 0x1 [0290.322] CloseHandle (hObject=0x198) returned 1 [0290.322] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0290.322] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01126_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01126_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb70)) returned 1 [0290.322] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0290.322] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0290.322] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01126_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01126_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb70)) returned 1 [0290.323] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0290.323] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0290.323] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0290.323] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16a0, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA01130_.WMF", cAlternateFileName="")) returned 1 [0290.323] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260838 [0290.323] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211948 [0290.323] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0290.323] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211948 | out: hHeap=0x1f0000) returned 1 [0290.323] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0290.323] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260838 | out: hHeap=0x1f0000) returned 1 [0290.323] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01130_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01130_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0290.324] GetFileType (hFile=0x198) returned 0x1 [0290.324] CloseHandle (hObject=0x198) returned 1 [0290.324] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0290.324] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01130_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01130_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16a0)) returned 1 [0290.324] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0290.324] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0290.324] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01130_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01130_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16a0)) returned 1 [0290.324] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0290.324] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0290.325] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0290.325] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16d8, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA01141_.WMF", cAlternateFileName="")) returned 1 [0290.325] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0290.325] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211b68 [0290.325] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0290.325] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b68 | out: hHeap=0x1f0000) returned 1 [0290.325] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0290.325] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0290.325] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01141_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01141_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0290.582] GetFileType (hFile=0x198) returned 0x1 [0290.583] CloseHandle (hObject=0x198) returned 1 [0290.583] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0290.583] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01141_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01141_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16d8)) returned 1 [0290.615] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0290.615] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0290.615] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01141_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01141_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16d8)) returned 1 [0290.615] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0290.616] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0290.616] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0290.616] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f38, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA01148_.WMF", cAlternateFileName="")) returned 1 [0290.616] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0290.616] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211b68 [0290.616] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0290.616] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b68 | out: hHeap=0x1f0000) returned 1 [0290.616] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0290.616] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0290.617] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01148_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01148_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0290.617] GetFileType (hFile=0x1b0) returned 0x1 [0290.617] CloseHandle (hObject=0x1b0) returned 1 [0290.617] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0290.618] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01148_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01148_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f38)) returned 1 [0290.618] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0290.618] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0290.618] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01148_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01148_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f38)) returned 1 [0290.618] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0290.618] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0290.618] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0290.618] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1248, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA01149_.WMF", cAlternateFileName="")) returned 1 [0290.618] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0290.618] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211b68 [0290.619] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0290.619] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b68 | out: hHeap=0x1f0000) returned 1 [0290.619] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0290.619] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0290.619] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01149_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01149_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0290.619] GetFileType (hFile=0x1b0) returned 0x1 [0290.620] CloseHandle (hObject=0x1b0) returned 1 [0290.620] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0290.620] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01149_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01149_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1248)) returned 1 [0290.620] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0290.620] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0290.620] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01149_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01149_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1248)) returned 1 [0290.620] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0290.620] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0290.620] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0290.620] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x110c9494, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x110c9494, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110ef705, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2230, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA01152_.WMF", cAlternateFileName="")) returned 1 [0290.621] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0290.621] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212140 [0290.621] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0290.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212140 | out: hHeap=0x1f0000) returned 1 [0290.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0290.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0290.621] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01152_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01152_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0290.621] GetFileType (hFile=0x1b0) returned 0x1 [0290.621] CloseHandle (hObject=0x1b0) returned 1 [0290.622] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0290.622] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01152_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01152_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x110c9494, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x110c9494, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110ef705, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2230)) returned 1 [0290.622] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0290.622] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0290.622] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01152_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01152_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x110c9494, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x110c9494, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110ef705, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2230)) returned 1 [0290.622] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0290.622] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0290.622] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0290.622] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10386305, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10386305, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103ac532, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15b0, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA01154_.WMF", cAlternateFileName="")) returned 1 [0290.622] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0290.622] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0290.634] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0290.638] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0290.638] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0290.638] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0290.638] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01154_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01154_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0290.639] GetFileType (hFile=0x1b0) returned 0x1 [0290.639] CloseHandle (hObject=0x1b0) returned 1 [0290.639] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0290.639] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01154_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01154_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10386305, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10386305, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103ac532, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15b0)) returned 1 [0290.639] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0290.639] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0290.639] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01154_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01154_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10386305, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10386305, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103ac532, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15b0)) returned 1 [0290.640] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0290.640] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0290.640] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0290.640] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1858, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA01157_.WMF", cAlternateFileName="")) returned 1 [0290.640] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0290.640] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0290.640] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0290.640] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0290.640] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0290.640] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0290.640] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01157_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01157_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0290.641] GetFileType (hFile=0x1b0) returned 0x1 [0290.641] CloseHandle (hObject=0x1b0) returned 1 [0290.641] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0290.641] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01157_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01157_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1858)) returned 1 [0290.641] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0290.641] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0290.642] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01157_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01157_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1858)) returned 1 [0290.642] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0290.642] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0290.642] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0290.642] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101e2909, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101e2909, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101e2909, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c74, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA01158_.WMF", cAlternateFileName="")) returned 1 [0290.642] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0290.642] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2129c0 [0290.642] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0290.642] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2129c0 | out: hHeap=0x1f0000) returned 1 [0290.643] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0290.643] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0290.643] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01158_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01158_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0290.649] GetFileType (hFile=0x1b0) returned 0x1 [0290.649] CloseHandle (hObject=0x1b0) returned 1 [0290.649] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0290.649] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01158_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01158_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101e2909, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101e2909, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101e2909, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c74)) returned 1 [0290.650] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0290.650] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0290.650] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01158_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01158_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101e2909, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101e2909, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101e2909, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c74)) returned 1 [0290.650] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0290.650] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0290.650] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0290.650] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102a14ae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102a14ae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102a14ae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1694, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA01161_.WMF", cAlternateFileName="")) returned 1 [0290.650] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0290.650] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2120b8 [0290.650] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0290.651] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2120b8 | out: hHeap=0x1f0000) returned 1 [0290.651] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0290.651] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0290.651] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01161_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01161_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0290.656] GetFileType (hFile=0x1b0) returned 0x1 [0290.656] CloseHandle (hObject=0x1b0) returned 1 [0290.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0290.656] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01161_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01161_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102a14ae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102a14ae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102a14ae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1694)) returned 1 [0290.656] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0290.656] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0290.656] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01161_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01161_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102a14ae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102a14ae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102a14ae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1694)) returned 1 [0290.657] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0290.657] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0290.657] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0290.657] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5d0a20, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5d0a20, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5f6d6e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa04, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA01164_.WMF", cAlternateFileName="")) returned 1 [0290.657] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0290.657] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212718 [0290.657] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0290.657] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212718 | out: hHeap=0x1f0000) returned 1 [0290.657] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0290.657] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0290.657] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01164_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01164_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0290.706] GetFileType (hFile=0x1b0) returned 0x1 [0290.706] CloseHandle (hObject=0x1b0) returned 1 [0290.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0290.706] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01164_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01164_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5d0a20, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5d0a20, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5f6d6e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa04)) returned 1 [0290.706] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0290.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0290.707] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01164_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01164_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5d0a20, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5d0a20, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5f6d6e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa04)) returned 1 [0290.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0290.707] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0290.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0290.707] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5d0a20, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x70f0, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA01293_.WMF", cAlternateFileName="")) returned 1 [0290.707] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a18 [0290.707] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211a58 [0290.707] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0290.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211a58 | out: hHeap=0x1f0000) returned 1 [0290.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0290.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a18 | out: hHeap=0x1f0000) returned 1 [0290.707] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01293_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01293_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0290.709] GetFileType (hFile=0x1b0) returned 0x1 [0290.709] CloseHandle (hObject=0x1b0) returned 1 [0290.709] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0290.709] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01293_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01293_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5d0a20, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x70f0)) returned 1 [0290.709] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0290.709] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0290.710] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01293_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01293_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5d0a20, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x70f0)) returned 1 [0290.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0290.710] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0290.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0290.710] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16ae, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA01354_.WMF", cAlternateFileName="")) returned 1 [0290.710] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c48 [0290.710] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212828 [0290.710] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0290.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212828 | out: hHeap=0x1f0000) returned 1 [0290.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0290.710] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0290.711] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01354_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01354_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0290.711] GetFileType (hFile=0x1b0) returned 0x1 [0290.711] CloseHandle (hObject=0x1b0) returned 1 [0290.712] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0290.712] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01354_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01354_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16ae)) returned 1 [0290.712] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0290.712] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0290.712] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01354_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01354_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16ae)) returned 1 [0290.712] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0290.712] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0290.712] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0290.712] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4732, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA01356_.WMF", cAlternateFileName="")) returned 1 [0290.712] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a18 [0290.712] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211ae0 [0290.713] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0290.713] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211ae0 | out: hHeap=0x1f0000) returned 1 [0290.713] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0290.713] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a18 | out: hHeap=0x1f0000) returned 1 [0290.723] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01356_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01356_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0290.725] GetFileType (hFile=0x1b0) returned 0x1 [0290.725] CloseHandle (hObject=0x1b0) returned 1 [0290.725] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0290.726] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01356_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01356_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4732)) returned 1 [0290.726] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0290.726] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0290.726] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01356_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01356_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4732)) returned 1 [0290.726] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0290.726] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0290.726] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0290.726] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6bf6, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA01357_.WMF", cAlternateFileName="")) returned 1 [0290.726] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609f0 [0290.726] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211ae0 [0290.726] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0290.727] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211ae0 | out: hHeap=0x1f0000) returned 1 [0290.727] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0290.727] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609f0 | out: hHeap=0x1f0000) returned 1 [0290.728] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01357_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01357_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0290.729] GetFileType (hFile=0x1b0) returned 0x1 [0290.729] CloseHandle (hObject=0x1b0) returned 1 [0290.729] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0290.730] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01357_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01357_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6bf6)) returned 1 [0290.730] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0290.730] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0290.730] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01357_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01357_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6bf6)) returned 1 [0290.730] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0290.730] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0290.730] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0290.730] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf61cf5d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf61cf5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf61cf5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd6e, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA01358_.WMF", cAlternateFileName="")) returned 1 [0290.730] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b58 [0290.730] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2127a0 [0290.730] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0290.731] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2127a0 | out: hHeap=0x1f0000) returned 1 [0290.731] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0290.731] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b58 | out: hHeap=0x1f0000) returned 1 [0290.731] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01358_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01358_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0290.732] GetFileType (hFile=0x1b0) returned 0x1 [0290.733] CloseHandle (hObject=0x1b0) returned 1 [0290.733] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0290.733] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01358_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01358_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf61cf5d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf61cf5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf61cf5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd6e)) returned 1 [0290.733] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0290.733] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0290.734] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01358_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01358_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf61cf5d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf61cf5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf61cf5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd6e)) returned 1 [0290.734] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0290.734] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0290.734] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0290.734] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5f6d6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5f6d6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5f6d6e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b74, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA01361_.WMF", cAlternateFileName="")) returned 1 [0290.734] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260b08 [0290.734] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211a58 [0290.734] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0291.108] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211a58 | out: hHeap=0x1f0000) returned 1 [0291.108] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0291.108] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260b08 | out: hHeap=0x1f0000) returned 1 [0291.108] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01361_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01361_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0291.109] GetFileType (hFile=0x198) returned 0x1 [0291.109] CloseHandle (hObject=0x198) returned 1 [0291.109] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0291.109] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01361_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01361_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5f6d6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5f6d6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5f6d6e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b74)) returned 1 [0291.109] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0291.109] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0291.109] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01361_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01361_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5f6d6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5f6d6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5f6d6e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b74)) returned 1 [0291.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0291.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0291.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0291.110] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5f6d6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5f6d6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5f6d6e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x40412, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA01368_.WMF", cAlternateFileName="")) returned 1 [0291.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c70 [0291.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211b68 [0291.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0291.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b68 | out: hHeap=0x1f0000) returned 1 [0291.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0291.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c70 | out: hHeap=0x1f0000) returned 1 [0291.111] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01368_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01368_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0291.111] GetFileType (hFile=0x198) returned 0x1 [0291.111] CloseHandle (hObject=0x198) returned 1 [0291.111] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0291.111] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01368_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01368_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5f6d6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5f6d6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5f6d6e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x40412)) returned 1 [0291.112] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0291.112] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0291.112] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01368_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01368_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5f6d6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5f6d6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5f6d6e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x40412)) returned 1 [0291.112] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0291.112] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0291.112] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0291.112] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5f6d6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5f6d6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5f6d6e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b16e, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA01421_.WMF", cAlternateFileName="")) returned 1 [0291.462] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0291.462] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2124f8 [0291.462] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0291.462] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2124f8 | out: hHeap=0x1f0000) returned 1 [0291.462] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0291.462] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0291.565] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01421_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01421_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0291.566] GetFileType (hFile=0x198) returned 0x1 [0291.566] CloseHandle (hObject=0x198) returned 1 [0291.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0291.567] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01421_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01421_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5f6d6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5f6d6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5f6d6e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b16e)) returned 1 [0291.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0291.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0291.567] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01421_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01421_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5f6d6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5f6d6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5f6d6e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b16e)) returned 1 [0291.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0291.567] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0291.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0291.567] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x100fdad1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x100fdad1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e82, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA01468_.WMF", cAlternateFileName="")) returned 1 [0291.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0291.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d00 [0291.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0291.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d00 | out: hHeap=0x1f0000) returned 1 [0291.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0291.568] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0291.569] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01468_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01468_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0291.569] GetFileType (hFile=0x198) returned 0x1 [0291.569] CloseHandle (hObject=0x198) returned 1 [0291.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0291.569] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01468_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01468_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x100fdad1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x100fdad1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e82)) returned 1 [0291.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0291.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0291.570] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01468_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01468_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x100fdad1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x100fdad1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e82)) returned 1 [0291.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0291.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0291.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0291.570] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5d0a20, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5d0a20, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5f6d6e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ada, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA01470_.WMF", cAlternateFileName="")) returned 1 [0291.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609f0 [0291.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212030 [0291.571] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0291.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212030 | out: hHeap=0x1f0000) returned 1 [0291.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0291.571] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609f0 | out: hHeap=0x1f0000) returned 1 [0291.571] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01470_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01470_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0291.572] GetFileType (hFile=0x198) returned 0x1 [0291.572] CloseHandle (hObject=0x198) returned 1 [0291.572] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0291.572] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01470_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01470_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5d0a20, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5d0a20, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5f6d6e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ada)) returned 1 [0291.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0291.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0291.573] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01470_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01470_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5d0a20, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5d0a20, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5f6d6e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ada)) returned 1 [0291.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0291.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0291.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0291.573] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5f6d6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5f6d6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5f6d6e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2028, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA01472_.WMF", cAlternateFileName="")) returned 1 [0291.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a68 [0291.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212360 [0291.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0291.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212360 | out: hHeap=0x1f0000) returned 1 [0291.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0291.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a68 | out: hHeap=0x1f0000) returned 1 [0291.575] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01472_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01472_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0291.575] GetFileType (hFile=0x198) returned 0x1 [0291.576] CloseHandle (hObject=0x198) returned 1 [0291.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0291.576] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01472_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01472_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5f6d6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5f6d6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5f6d6e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2028)) returned 1 [0291.576] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0291.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0291.576] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01472_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01472_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5f6d6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5f6d6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5f6d6e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2028)) returned 1 [0291.576] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0291.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0291.576] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0291.576] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1027b233, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1027b233, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102a14ae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x28ae, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA01473_.WMF", cAlternateFileName="")) returned 1 [0291.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609f0 [0291.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211fa8 [0291.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0291.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211fa8 | out: hHeap=0x1f0000) returned 1 [0291.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0291.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609f0 | out: hHeap=0x1f0000) returned 1 [0291.577] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01473_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01473_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0291.578] GetFileType (hFile=0x198) returned 0x1 [0291.578] CloseHandle (hObject=0x198) returned 1 [0291.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0291.579] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01473_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01473_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1027b233, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1027b233, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102a14ae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x28ae)) returned 1 [0291.579] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0291.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0291.579] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01473_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01473_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1027b233, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1027b233, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102a14ae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x28ae)) returned 1 [0291.579] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0291.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0291.579] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0291.579] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102a14ae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102a14ae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102a14ae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x349c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA01474_.WMF", cAlternateFileName="")) returned 1 [0291.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260c48 [0291.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212030 [0291.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0291.580] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212030 | out: hHeap=0x1f0000) returned 1 [0291.580] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0291.580] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260c48 | out: hHeap=0x1f0000) returned 1 [0291.580] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01474_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01474_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0291.581] GetFileType (hFile=0x198) returned 0x1 [0291.581] CloseHandle (hObject=0x198) returned 1 [0291.581] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0291.581] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01474_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01474_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102a14ae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102a14ae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102a14ae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x349c)) returned 1 [0291.582] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0291.582] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0291.582] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01474_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01474_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102a14ae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102a14ae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102a14ae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x349c)) returned 1 [0291.582] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0291.582] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0291.582] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0291.582] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xce0, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA01627_.WMF", cAlternateFileName="")) returned 1 [0291.582] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260a68 [0291.582] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2120b8 [0291.582] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0291.582] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2120b8 | out: hHeap=0x1f0000) returned 1 [0291.582] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0291.582] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260a68 | out: hHeap=0x1f0000) returned 1 [0291.583] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01627_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01627_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0291.584] GetFileType (hFile=0x198) returned 0x1 [0291.584] CloseHandle (hObject=0x198) returned 1 [0291.585] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0291.585] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01627_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01627_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xce0)) returned 1 [0291.585] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0291.585] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0291.585] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01627_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01627_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xce0)) returned 1 [0291.585] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0291.585] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0291.585] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0291.585] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf61cf5d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf61cf5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf61cf5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb9e, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA01680_.WMF", cAlternateFileName="")) returned 1 [0291.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0291.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211f20 [0291.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0291.586] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211f20 | out: hHeap=0x1f0000) returned 1 [0291.586] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0291.586] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0291.586] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01680_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01680_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0291.588] GetFileType (hFile=0x198) returned 0x1 [0291.588] CloseHandle (hObject=0x198) returned 1 [0291.588] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0291.588] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01680_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01680_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf61cf5d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf61cf5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf61cf5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb9e)) returned 1 [0291.588] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0291.588] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0291.589] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01680_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01680_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf61cf5d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf61cf5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf61cf5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb9e)) returned 1 [0291.589] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0291.589] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0291.589] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0291.589] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf61cf5d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf61cf5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf61cf5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc88, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA01682_.WMF", cAlternateFileName="")) returned 1 [0291.589] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0291.589] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212360 [0291.589] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0291.589] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212360 | out: hHeap=0x1f0000) returned 1 [0291.589] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0291.589] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0291.590] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01682_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01682_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0291.590] GetFileType (hFile=0x198) returned 0x1 [0291.590] CloseHandle (hObject=0x198) returned 1 [0291.591] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0291.591] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01682_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01682_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf61cf5d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf61cf5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf61cf5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc88)) returned 1 [0291.591] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0291.591] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0291.591] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01682_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01682_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf61cf5d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf61cf5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf61cf5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc88)) returned 1 [0291.591] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0291.591] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0291.591] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0291.591] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5f6d6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5f6d6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf61cf5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14c4, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA01701_.WMF", cAlternateFileName="")) returned 1 [0291.591] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0291.591] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211bf0 [0291.591] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0291.591] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211bf0 | out: hHeap=0x1f0000) returned 1 [0291.592] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0291.592] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0291.592] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01701_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01701_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0291.592] GetFileType (hFile=0x198) returned 0x1 [0291.593] CloseHandle (hObject=0x198) returned 1 [0291.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0291.593] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01701_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01701_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5f6d6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5f6d6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf61cf5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14c4)) returned 1 [0291.593] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0291.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0291.593] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01701_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01701_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5f6d6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5f6d6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf61cf5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14c4)) returned 1 [0291.593] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0291.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0291.593] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0291.593] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5f6d6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5f6d6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5f6d6e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x460, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA01848_.WMF", cAlternateFileName="")) returned 1 [0291.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260bf8 [0291.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2123e8 [0291.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0291.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2123e8 | out: hHeap=0x1f0000) returned 1 [0291.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0291.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260bf8 | out: hHeap=0x1f0000) returned 1 [0291.594] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01848_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01848_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0291.626] GetFileType (hFile=0x1c0) returned 0x1 [0291.626] CloseHandle (hObject=0x1c0) returned 1 [0291.627] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0291.627] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01848_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01848_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5f6d6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5f6d6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5f6d6e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x460)) returned 1 [0291.627] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0291.627] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0291.627] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01848_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01848_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5f6d6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5f6d6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5f6d6e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x460)) returned 1 [0291.627] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0291.627] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0291.628] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0291.628] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf61cf5d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf61cf5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf61cf5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x270, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA01849_.WMF", cAlternateFileName="")) returned 1 [0291.628] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0291.628] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211fa8 [0291.628] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0291.628] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211fa8 | out: hHeap=0x1f0000) returned 1 [0291.628] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0291.628] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0291.629] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01849_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01849_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0291.630] GetFileType (hFile=0x1c0) returned 0x1 [0291.630] CloseHandle (hObject=0x1c0) returned 1 [0291.631] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0291.631] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01849_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01849_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf61cf5d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf61cf5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf61cf5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x270)) returned 1 [0291.631] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0291.631] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0291.631] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01849_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01849_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf61cf5d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf61cf5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf61cf5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x270)) returned 1 [0291.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0291.632] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0291.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0291.632] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5f6d6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5f6d6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf61cf5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1138, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA01852_.WMF", cAlternateFileName="")) returned 1 [0291.632] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0291.632] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211fa8 [0291.632] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0291.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211fa8 | out: hHeap=0x1f0000) returned 1 [0291.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0291.633] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0291.902] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01852_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01852_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0291.903] GetFileType (hFile=0x19c) returned 0x1 [0291.903] CloseHandle (hObject=0x19c) returned 1 [0291.903] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0291.904] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01852_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01852_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5f6d6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5f6d6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf61cf5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1138)) returned 1 [0291.904] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0291.904] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0291.904] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01852_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01852_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5f6d6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5f6d6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf61cf5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1138)) returned 1 [0291.904] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0291.904] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0291.905] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0291.905] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5f6d6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5f6d6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf61cf5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10c8, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA01858_.WMF", cAlternateFileName="")) returned 1 [0291.905] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0291.905] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2123e8 [0291.905] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0291.905] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2123e8 | out: hHeap=0x1f0000) returned 1 [0291.905] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0291.905] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0291.906] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01858_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01858_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0291.906] GetFileType (hFile=0x19c) returned 0x1 [0291.906] CloseHandle (hObject=0x19c) returned 1 [0291.906] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0291.907] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01858_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01858_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5f6d6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5f6d6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf61cf5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10c8)) returned 1 [0291.907] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0291.907] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0291.907] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01858_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01858_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5f6d6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5f6d6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf61cf5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10c8)) returned 1 [0291.907] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0291.907] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0291.907] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0291.907] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5f6d6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5f6d6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5f6d6e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdb8, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA01866_.WMF", cAlternateFileName="")) returned 1 [0291.907] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0291.908] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2124f8 [0291.908] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0291.908] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2124f8 | out: hHeap=0x1f0000) returned 1 [0291.908] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0291.908] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0291.909] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01866_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01866_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0291.909] GetFileType (hFile=0x19c) returned 0x1 [0291.909] CloseHandle (hObject=0x19c) returned 1 [0291.909] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0291.910] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01866_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01866_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5f6d6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5f6d6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5f6d6e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdb8)) returned 1 [0291.910] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0291.910] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0291.910] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01866_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01866_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5f6d6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5f6d6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5f6d6e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdb8)) returned 1 [0291.910] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0291.910] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0291.910] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0291.910] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5f6d6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5f6d6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf61cf5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27e0, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA02009_.WMF", cAlternateFileName="")) returned 1 [0291.910] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0291.911] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212360 [0291.911] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0291.911] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212360 | out: hHeap=0x1f0000) returned 1 [0291.911] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0291.911] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0291.912] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02009_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02009_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0291.912] GetFileType (hFile=0x19c) returned 0x1 [0291.912] CloseHandle (hObject=0x19c) returned 1 [0291.913] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0291.913] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02009_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02009_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5f6d6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5f6d6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf61cf5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27e0)) returned 1 [0291.913] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0291.913] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0291.913] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02009_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02009_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5f6d6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5f6d6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf61cf5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27e0)) returned 1 [0291.913] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0291.913] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0291.913] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0291.913] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf68f613, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf68f613, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf68f613, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x918, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA02041_.WMF", cAlternateFileName="")) returned 1 [0291.914] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0291.914] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212608 [0291.914] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0291.914] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212608 | out: hHeap=0x1f0000) returned 1 [0291.914] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0291.914] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0291.915] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02041_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02041_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0291.915] GetFileType (hFile=0x19c) returned 0x1 [0291.916] CloseHandle (hObject=0x19c) returned 1 [0291.916] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0291.916] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02041_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02041_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf68f613, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf68f613, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf68f613, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x918)) returned 1 [0291.916] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0291.916] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0291.917] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02041_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02041_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf68f613, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf68f613, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf68f613, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x918)) returned 1 [0291.917] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0291.917] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0291.917] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0291.917] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf68f613, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf68f613, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf68f613, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA02066_.WMF", cAlternateFileName="")) returned 1 [0291.917] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0291.917] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0291.917] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0291.917] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0291.917] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0291.917] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0291.918] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02066_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02066_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0292.076] GetFileType (hFile=0x1c0) returned 0x1 [0292.077] CloseHandle (hObject=0x1c0) returned 1 [0292.077] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0292.077] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02066_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02066_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf68f613, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf68f613, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf68f613, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43c)) returned 1 [0292.077] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0292.077] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0292.078] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02066_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02066_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf68f613, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf68f613, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf68f613, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43c)) returned 1 [0292.078] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0292.078] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0292.078] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0292.078] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf66941e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf66941e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf66941e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x474, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA02091_.WMF", cAlternateFileName="")) returned 1 [0292.078] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0292.078] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212470 [0292.078] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0292.078] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212470 | out: hHeap=0x1f0000) returned 1 [0292.079] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0292.079] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0292.150] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02091_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02091_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0292.153] GetFileType (hFile=0x1c0) returned 0x1 [0292.153] CloseHandle (hObject=0x1c0) returned 1 [0292.156] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0292.156] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02091_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02091_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf66941e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf66941e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf66941e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x474)) returned 1 [0292.181] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0292.181] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0292.182] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02091_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02091_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf66941e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf66941e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf66941e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x474)) returned 1 [0292.222] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0292.222] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0292.222] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0292.222] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf66941e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf66941e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf66941e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x66c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA02092_.WMF", cAlternateFileName="")) returned 1 [0292.223] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0292.223] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0292.223] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0292.223] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0292.223] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0292.223] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0292.224] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02092_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02092_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0292.224] GetFileType (hFile=0x1c0) returned 0x1 [0292.224] CloseHandle (hObject=0x1c0) returned 1 [0292.225] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0292.225] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02092_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02092_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf66941e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf66941e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf66941e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x66c)) returned 1 [0292.225] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0292.225] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0292.225] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02092_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02092_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf66941e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf66941e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf66941e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x66c)) returned 1 [0292.226] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0292.226] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0292.226] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0292.226] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf643165, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf643165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf643165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a0, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA02093_.WMF", cAlternateFileName="")) returned 1 [0292.226] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0292.226] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212828 [0292.226] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0292.226] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212828 | out: hHeap=0x1f0000) returned 1 [0292.227] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0292.228] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0292.228] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02093_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02093_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0292.229] GetFileType (hFile=0x1c0) returned 0x1 [0292.229] CloseHandle (hObject=0x1c0) returned 1 [0292.229] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0292.230] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02093_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02093_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf643165, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf643165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf643165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a0)) returned 1 [0292.230] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0292.230] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0292.230] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02093_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02093_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf643165, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf643165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf643165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a0)) returned 1 [0292.230] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0292.230] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0292.230] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0292.230] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf61cf5d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf61cf5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf61cf5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fe8, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA02124_.WMF", cAlternateFileName="")) returned 1 [0292.231] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260770 [0292.231] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0292.231] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0292.231] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0292.231] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0292.231] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0292.232] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02124_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02124_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0292.232] GetFileType (hFile=0x1c0) returned 0x1 [0292.233] CloseHandle (hObject=0x1c0) returned 1 [0292.233] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0292.233] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02124_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02124_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf61cf5d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf61cf5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf61cf5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fe8)) returned 1 [0292.233] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0292.233] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0292.234] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02124_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02124_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf61cf5d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf61cf5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf61cf5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fe8)) returned 1 [0292.234] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0292.234] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0292.234] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0292.234] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf643165, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf643165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf643165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4816, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA02125_.WMF", cAlternateFileName="")) returned 1 [0292.234] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0292.234] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2122d8 [0292.234] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0292.234] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2122d8 | out: hHeap=0x1f0000) returned 1 [0292.234] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0292.235] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0292.235] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02125_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02125_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0292.235] GetFileType (hFile=0x1c0) returned 0x1 [0292.236] CloseHandle (hObject=0x1c0) returned 1 [0292.236] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0292.236] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02125_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02125_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf643165, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf643165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf643165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4816)) returned 1 [0292.236] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0292.237] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0292.237] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02125_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02125_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf643165, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf643165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf643165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4816)) returned 1 [0292.237] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0292.237] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0292.237] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0292.237] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7c50, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA02126_.WMF", cAlternateFileName="")) returned 1 [0292.237] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0292.237] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211e10 [0292.237] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0292.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e10 | out: hHeap=0x1f0000) returned 1 [0292.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0292.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0292.238] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02126_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02126_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0292.239] GetFileType (hFile=0x1c0) returned 0x1 [0292.239] CloseHandle (hObject=0x1c0) returned 1 [0292.239] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0292.239] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02126_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02126_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7c50)) returned 1 [0292.240] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0292.240] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0292.240] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02126_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02126_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7c50)) returned 1 [0292.240] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0292.240] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0292.240] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0292.240] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf61cf5d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf61cf5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf61cf5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfe4, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA02127_.WMF", cAlternateFileName="")) returned 1 [0292.241] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0292.241] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212718 [0292.241] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0292.241] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212718 | out: hHeap=0x1f0000) returned 1 [0292.241] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0292.241] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0292.242] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02127_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02127_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0292.242] GetFileType (hFile=0x1c0) returned 0x1 [0292.243] CloseHandle (hObject=0x1c0) returned 1 [0292.244] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0292.244] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02127_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02127_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf61cf5d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf61cf5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf61cf5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfe4)) returned 1 [0292.244] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0292.244] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0292.244] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02127_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02127_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf61cf5d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf61cf5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf61cf5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfe4)) returned 1 [0292.244] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0292.245] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0292.245] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0292.245] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf61cf5d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf61cf5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf61cf5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd00, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA02262_.WMF", cAlternateFileName="")) returned 1 [0292.245] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0292.245] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212470 [0292.245] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0292.245] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212470 | out: hHeap=0x1f0000) returned 1 [0292.245] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0292.245] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0292.246] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02262_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02262_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0292.246] GetFileType (hFile=0x1c0) returned 0x1 [0292.247] CloseHandle (hObject=0x1c0) returned 1 [0292.247] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0292.247] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02262_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02262_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf61cf5d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf61cf5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf61cf5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd00)) returned 1 [0292.248] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0292.248] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0292.248] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02262_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02262_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf61cf5d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf61cf5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf61cf5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd00)) returned 1 [0292.248] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0292.248] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0292.248] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0292.248] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x100fdad1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x100fdad1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x100fdad1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8e0, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA02264_.WMF", cAlternateFileName="")) returned 1 [0292.248] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0292.249] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0292.249] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0292.249] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0292.249] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0292.249] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0292.250] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02264_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02264_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0292.252] GetFileType (hFile=0x1c0) returned 0x1 [0292.252] CloseHandle (hObject=0x1c0) returned 1 [0292.564] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0292.564] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02264_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02264_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x100fdad1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x100fdad1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x100fdad1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8e0)) returned 1 [0292.747] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0292.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0292.747] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02264_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02264_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x100fdad1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x100fdad1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x100fdad1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8e0)) returned 1 [0292.747] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0292.747] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0292.748] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0292.748] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe14, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA02356_.WMF", cAlternateFileName="")) returned 1 [0292.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0292.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0292.748] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0292.748] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0292.748] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0292.748] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0293.100] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02356_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02356_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0293.100] GetFileType (hFile=0x1c0) returned 0x1 [0293.100] CloseHandle (hObject=0x1c0) returned 1 [0293.101] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0293.101] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02356_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02356_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe14)) returned 1 [0293.101] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0293.101] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0293.101] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02356_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02356_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe14)) returned 1 [0293.101] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0293.102] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0293.102] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0293.102] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17c4, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA02361_.WMF", cAlternateFileName="")) returned 1 [0293.102] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0293.102] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212828 [0293.102] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0293.102] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212828 | out: hHeap=0x1f0000) returned 1 [0293.102] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0293.103] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0293.103] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02361_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02361_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0293.103] GetFileType (hFile=0x1c0) returned 0x1 [0293.104] CloseHandle (hObject=0x1c0) returned 1 [0293.104] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0293.105] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02361_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02361_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17c4)) returned 1 [0293.105] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0293.105] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0293.105] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02361_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02361_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17c4)) returned 1 [0293.106] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0293.106] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0293.106] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0293.106] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd28, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA02368_.WMF", cAlternateFileName="")) returned 1 [0293.106] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0293.106] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212718 [0293.106] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0293.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212718 | out: hHeap=0x1f0000) returned 1 [0293.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0293.107] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0293.108] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02368_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02368_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0293.108] GetFileType (hFile=0x1c0) returned 0x1 [0293.108] CloseHandle (hObject=0x1c0) returned 1 [0293.109] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0293.109] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02368_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02368_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd28)) returned 1 [0293.109] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0293.109] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0293.110] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02368_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02368_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd28)) returned 1 [0293.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0293.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0293.110] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0293.110] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf68f613, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf68f613, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc74, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA02371_.WMF", cAlternateFileName="")) returned 1 [0293.110] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260888 [0293.111] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212828 [0293.111] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0293.111] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212828 | out: hHeap=0x1f0000) returned 1 [0293.111] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0293.111] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0293.112] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02371_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02371_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0293.112] GetFileType (hFile=0x1c0) returned 0x1 [0293.113] CloseHandle (hObject=0x1c0) returned 1 [0293.113] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0293.113] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02371_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02371_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf68f613, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf68f613, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc74)) returned 1 [0293.114] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0293.114] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0293.114] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02371_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02371_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf68f613, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf68f613, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc74)) returned 1 [0293.114] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0293.114] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0293.114] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0293.114] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf68f613, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf68f613, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf68f613, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcec, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA02373_.WMF", cAlternateFileName="")) returned 1 [0293.114] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260770 [0293.115] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d00 [0293.115] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0293.115] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d00 | out: hHeap=0x1f0000) returned 1 [0293.115] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0293.115] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0293.116] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02373_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02373_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0293.116] GetFileType (hFile=0x1c0) returned 0x1 [0293.117] CloseHandle (hObject=0x1c0) returned 1 [0293.117] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0293.117] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02373_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02373_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf68f613, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf68f613, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf68f613, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcec)) returned 1 [0293.118] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0293.118] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0293.118] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02373_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02373_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf68f613, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf68f613, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf68f613, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcec)) returned 1 [0293.118] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0293.118] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0293.118] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0293.118] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbd8, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA02384_.WMF", cAlternateFileName="")) returned 1 [0293.118] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0293.119] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211ae0 [0293.119] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0293.119] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211ae0 | out: hHeap=0x1f0000) returned 1 [0293.119] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0293.119] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0293.120] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02384_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02384_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0293.120] GetFileType (hFile=0x1c0) returned 0x1 [0293.121] CloseHandle (hObject=0x1c0) returned 1 [0293.122] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0293.122] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02384_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02384_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbd8)) returned 1 [0293.122] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0293.122] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0293.122] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02384_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02384_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbd8)) returned 1 [0293.122] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0293.123] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0293.123] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0293.123] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf68f613, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf68f613, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf68f613, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x948, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA02386_.WMF", cAlternateFileName="")) returned 1 [0293.123] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0293.123] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d00 [0293.123] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0293.123] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d00 | out: hHeap=0x1f0000) returned 1 [0293.123] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0293.124] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0293.124] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02386_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02386_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0293.124] GetFileType (hFile=0x1c0) returned 0x1 [0293.125] CloseHandle (hObject=0x1c0) returned 1 [0293.125] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0293.125] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02386_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02386_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf68f613, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf68f613, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf68f613, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x948)) returned 1 [0293.126] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0293.126] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0293.126] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02386_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02386_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf68f613, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf68f613, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf68f613, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x948)) returned 1 [0293.126] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0293.126] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0293.126] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0293.126] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc84, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA02388_.WMF", cAlternateFileName="")) returned 1 [0293.126] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0293.126] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212608 [0293.127] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0293.127] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212608 | out: hHeap=0x1f0000) returned 1 [0293.127] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0293.127] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0293.128] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02388_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02388_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0293.128] GetFileType (hFile=0x1c0) returned 0x1 [0293.128] CloseHandle (hObject=0x1c0) returned 1 [0293.129] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0293.129] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02388_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02388_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc84)) returned 1 [0293.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0293.129] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0293.129] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02388_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02388_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc84)) returned 1 [0293.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0293.129] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0293.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0293.130] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf68f613, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf68f613, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf68f613, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb2c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA02389_.WMF", cAlternateFileName="")) returned 1 [0293.130] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0293.130] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211b68 [0293.130] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0293.130] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b68 | out: hHeap=0x1f0000) returned 1 [0293.130] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0293.130] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0293.131] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02389_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02389_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0293.131] GetFileType (hFile=0x1c0) returned 0x1 [0293.131] CloseHandle (hObject=0x1c0) returned 1 [0293.132] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0293.132] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02389_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02389_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf68f613, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf68f613, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf68f613, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb2c)) returned 1 [0293.132] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0293.132] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0293.132] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02389_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02389_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf68f613, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf68f613, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf68f613, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb2c)) returned 1 [0293.132] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0293.133] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0293.133] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0293.133] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe64, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA02390_.WMF", cAlternateFileName="")) returned 1 [0293.133] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0293.133] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211f20 [0293.133] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0293.133] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211f20 | out: hHeap=0x1f0000) returned 1 [0293.133] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0293.133] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0293.134] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02390_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02390_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0293.134] GetFileType (hFile=0x1c0) returned 0x1 [0293.135] CloseHandle (hObject=0x1c0) returned 1 [0293.135] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0293.135] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02390_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02390_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe64)) returned 1 [0293.135] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0293.135] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0293.136] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02390_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02390_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe64)) returned 1 [0293.136] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0293.136] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0293.136] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0293.136] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e98, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA02398_.WMF", cAlternateFileName="")) returned 1 [0293.136] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0293.352] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211bf0 [0293.352] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0293.352] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211bf0 | out: hHeap=0x1f0000) returned 1 [0293.352] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0293.352] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0293.353] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02398_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02398_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0293.353] GetFileType (hFile=0x1e0) returned 0x1 [0293.353] CloseHandle (hObject=0x1e0) returned 1 [0293.353] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0293.353] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02398_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02398_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e98)) returned 1 [0293.353] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0293.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0293.354] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02398_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02398_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e98)) returned 1 [0293.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0293.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0293.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0293.354] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd24, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA02400_.WMF", cAlternateFileName="")) returned 1 [0293.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0293.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212828 [0293.354] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0293.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212828 | out: hHeap=0x1f0000) returned 1 [0293.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0293.354] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0293.354] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02400_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02400_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0293.354] GetFileType (hFile=0x1e0) returned 0x1 [0293.355] CloseHandle (hObject=0x1e0) returned 1 [0293.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0293.355] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02400_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02400_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd24)) returned 1 [0293.355] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0293.355] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0293.356] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02400_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02400_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd24)) returned 1 [0293.356] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0293.356] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0293.356] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0293.356] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2120, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA02404_.WMF", cAlternateFileName="")) returned 1 [0293.356] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0293.356] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211e10 [0293.356] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0293.356] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e10 | out: hHeap=0x1f0000) returned 1 [0293.356] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0293.356] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0293.356] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02404_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02404_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0293.357] GetFileType (hFile=0x1e0) returned 0x1 [0293.357] CloseHandle (hObject=0x1e0) returned 1 [0293.357] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0293.357] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02404_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02404_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2120)) returned 1 [0293.357] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0293.357] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0293.357] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02404_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02404_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2120)) returned 1 [0293.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0293.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0293.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0293.358] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5080, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA02405_.WMF", cAlternateFileName="")) returned 1 [0293.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0293.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211948 [0293.358] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0293.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211948 | out: hHeap=0x1f0000) returned 1 [0293.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0293.358] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0293.358] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02405_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02405_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0293.359] GetFileType (hFile=0x1e0) returned 0x1 [0293.359] CloseHandle (hObject=0x1e0) returned 1 [0293.359] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0293.359] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02405_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02405_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5080)) returned 1 [0293.359] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0293.359] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0293.359] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02405_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02405_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5080)) returned 1 [0293.360] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0293.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0293.360] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0293.360] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fc8, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA02407_.WMF", cAlternateFileName="")) returned 1 [0293.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0293.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211fa8 [0293.360] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0293.360] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211fa8 | out: hHeap=0x1f0000) returned 1 [0293.360] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0293.360] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0293.360] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02407_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02407_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0293.361] GetFileType (hFile=0x1e0) returned 0x1 [0293.361] CloseHandle (hObject=0x1e0) returned 1 [0293.361] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0293.361] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02407_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02407_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fc8)) returned 1 [0293.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0293.361] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0293.361] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02407_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02407_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fc8)) returned 1 [0293.361] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0293.362] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0293.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0293.362] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x28ec, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA02413_.WMF", cAlternateFileName="")) returned 1 [0293.362] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260888 [0293.362] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211fa8 [0293.362] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0293.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211fa8 | out: hHeap=0x1f0000) returned 1 [0293.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0293.362] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0293.362] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02413_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02413_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0293.363] GetFileType (hFile=0x1e0) returned 0x1 [0293.363] CloseHandle (hObject=0x1e0) returned 1 [0293.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0293.363] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02413_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02413_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x28ec)) returned 1 [0293.363] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0293.363] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0293.363] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02413_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02413_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x28ec)) returned 1 [0293.363] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0293.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0293.364] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0293.364] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb24, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA02417_.WMF", cAlternateFileName="")) returned 1 [0293.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0293.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211948 [0293.364] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0293.364] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211948 | out: hHeap=0x1f0000) returned 1 [0293.364] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0293.364] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0293.364] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02417_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02417_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0293.364] GetFileType (hFile=0x1e0) returned 0x1 [0293.364] CloseHandle (hObject=0x1e0) returned 1 [0293.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0293.365] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02417_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02417_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb24)) returned 1 [0293.365] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0293.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0293.365] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02417_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02417_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb24)) returned 1 [0293.365] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0293.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0293.365] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0293.365] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2fb8, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA02423_.WMF", cAlternateFileName="")) returned 1 [0293.365] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0293.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211b68 [0293.366] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0293.366] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b68 | out: hHeap=0x1f0000) returned 1 [0293.366] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0293.366] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0293.366] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02423_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02423_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0293.367] GetFileType (hFile=0x1e0) returned 0x1 [0293.367] CloseHandle (hObject=0x1e0) returned 1 [0293.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0293.369] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02423_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02423_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2fb8)) returned 1 [0293.369] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0293.369] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0293.369] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02423_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02423_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2fb8)) returned 1 [0293.370] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0293.370] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0293.370] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0293.370] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x53c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA02424_.WMF", cAlternateFileName="")) returned 1 [0293.370] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0293.370] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2127a0 [0293.370] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0293.370] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2127a0 | out: hHeap=0x1f0000) returned 1 [0293.370] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0293.370] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0293.371] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02424_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02424_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0293.371] GetFileType (hFile=0x1e0) returned 0x1 [0293.372] CloseHandle (hObject=0x1e0) returned 1 [0293.372] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0293.372] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02424_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02424_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x53c)) returned 1 [0293.372] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0293.372] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0293.372] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02424_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02424_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x53c)) returned 1 [0293.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0293.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0293.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0293.373] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1948, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA02426_.WMF", cAlternateFileName="")) returned 1 [0293.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0293.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211ae0 [0293.373] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0293.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211ae0 | out: hHeap=0x1f0000) returned 1 [0293.373] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0293.374] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0293.374] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02426_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02426_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0293.564] GetFileType (hFile=0x198) returned 0x1 [0293.564] CloseHandle (hObject=0x198) returned 1 [0293.565] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0293.565] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02426_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02426_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1948)) returned 1 [0293.565] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0293.565] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0293.565] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02426_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02426_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1948)) returned 1 [0293.566] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0293.566] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0293.566] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0293.566] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c2c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA02431_.WMF", cAlternateFileName="")) returned 1 [0293.566] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0293.566] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211b68 [0293.566] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0293.566] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b68 | out: hHeap=0x1f0000) returned 1 [0293.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0293.567] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0293.567] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02431_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02431_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0293.568] GetFileType (hFile=0x198) returned 0x1 [0293.568] CloseHandle (hObject=0x198) returned 1 [0293.568] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0293.569] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02431_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02431_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c2c)) returned 1 [0293.569] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0293.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0293.569] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02431_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02431_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c2c)) returned 1 [0293.569] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0293.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0293.569] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0293.569] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xff8, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA02435_.WMF", cAlternateFileName="")) returned 1 [0293.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0293.569] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212470 [0293.570] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0293.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212470 | out: hHeap=0x1f0000) returned 1 [0293.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0293.570] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0293.571] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02435_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02435_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0293.571] GetFileType (hFile=0x198) returned 0x1 [0293.571] CloseHandle (hObject=0x198) returned 1 [0293.572] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0293.572] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02435_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02435_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xff8)) returned 1 [0293.572] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0293.572] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0293.572] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02435_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02435_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xff8)) returned 1 [0293.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0293.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0293.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0293.573] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1434, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA02439_.WMF", cAlternateFileName="")) returned 1 [0293.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0293.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2128b0 [0293.573] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0293.573] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2128b0 | out: hHeap=0x1f0000) returned 1 [0293.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0293.574] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0293.575] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02439_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02439_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0293.575] GetFileType (hFile=0x198) returned 0x1 [0293.576] CloseHandle (hObject=0x198) returned 1 [0293.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0293.576] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02439_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02439_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1434)) returned 1 [0293.576] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0293.576] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0293.577] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02439_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02439_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1434)) returned 1 [0293.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0293.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0293.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0293.577] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3218, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA02441_.WMF", cAlternateFileName="")) returned 1 [0293.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260518 [0293.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211fa8 [0293.577] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0293.577] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211fa8 | out: hHeap=0x1f0000) returned 1 [0293.578] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0293.578] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0293.578] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02441_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02441_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0293.578] GetFileType (hFile=0x198) returned 0x1 [0293.579] CloseHandle (hObject=0x198) returned 1 [0293.579] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0293.579] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02441_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02441_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3218)) returned 1 [0293.580] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0293.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0293.580] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02441_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02441_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3218)) returned 1 [0293.580] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0293.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0293.580] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0293.580] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x55c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA02443_.WMF", cAlternateFileName="")) returned 1 [0293.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0293.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212938 [0293.580] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0293.581] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212938 | out: hHeap=0x1f0000) returned 1 [0293.581] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0293.581] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0293.581] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02443_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02443_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0293.582] GetFileType (hFile=0x198) returned 0x1 [0293.582] CloseHandle (hObject=0x198) returned 1 [0293.582] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0293.583] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02443_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02443_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x55c)) returned 1 [0293.583] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0293.583] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0293.583] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02443_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02443_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x55c)) returned 1 [0293.583] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0293.583] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0293.583] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0293.583] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x88c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA02444_.WMF", cAlternateFileName="")) returned 1 [0293.584] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605b8 [0293.584] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212608 [0293.584] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0293.584] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212608 | out: hHeap=0x1f0000) returned 1 [0293.584] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0293.584] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0293.585] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02444_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02444_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0293.585] GetFileType (hFile=0x198) returned 0x1 [0293.585] CloseHandle (hObject=0x198) returned 1 [0293.585] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0293.586] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02444_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02444_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x88c)) returned 1 [0293.586] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0293.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0293.586] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02444_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02444_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x88c)) returned 1 [0293.586] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0293.586] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0293.586] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0293.587] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa34, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA02446_.WMF", cAlternateFileName="")) returned 1 [0293.587] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0293.587] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211fa8 [0293.587] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0293.587] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211fa8 | out: hHeap=0x1f0000) returned 1 [0293.587] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0293.587] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0293.588] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02446_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02446_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0293.588] GetFileType (hFile=0x198) returned 0x1 [0293.588] CloseHandle (hObject=0x198) returned 1 [0293.589] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0293.589] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02446_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02446_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa34)) returned 1 [0293.589] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0293.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0293.590] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02446_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02446_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa34)) returned 1 [0293.590] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0293.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0293.590] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0293.591] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8a0, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA02448_.WMF", cAlternateFileName="")) returned 1 [0293.591] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0293.591] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0293.591] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0293.591] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0293.591] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0293.591] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0293.592] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02448_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02448_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0293.592] GetFileType (hFile=0x198) returned 0x1 [0293.593] CloseHandle (hObject=0x198) returned 1 [0293.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0293.593] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02448_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02448_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8a0)) returned 1 [0293.593] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0293.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0293.593] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02448_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02448_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8a0)) returned 1 [0293.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0293.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0293.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0293.594] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc28, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA02450_.WMF", cAlternateFileName="")) returned 1 [0293.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260518 [0293.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212828 [0293.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0293.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212828 | out: hHeap=0x1f0000) returned 1 [0293.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0293.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0293.595] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02450_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02450_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0293.595] GetFileType (hFile=0x198) returned 0x1 [0293.595] CloseHandle (hObject=0x198) returned 1 [0293.596] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0293.596] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02450_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02450_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc28)) returned 1 [0293.596] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0293.596] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0293.596] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02450_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02450_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc28)) returned 1 [0293.596] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0293.596] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0293.596] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0293.596] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf74e1ae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf74e1ae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf74e1ae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd70, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA02451_.WMF", cAlternateFileName="")) returned 1 [0293.597] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0293.597] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d88 [0293.597] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0293.597] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d88 | out: hHeap=0x1f0000) returned 1 [0293.597] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0293.597] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0293.597] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02451_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02451_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0293.597] GetFileType (hFile=0x198) returned 0x1 [0293.598] CloseHandle (hObject=0x198) returned 1 [0293.598] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0293.598] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02451_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02451_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf74e1ae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf74e1ae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf74e1ae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd70)) returned 1 [0293.598] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0293.598] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0293.598] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02451_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02451_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf74e1ae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf74e1ae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf74e1ae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd70)) returned 1 [0293.598] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0293.598] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0293.599] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0293.599] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf701d25, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf701d25, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf701d25, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd3c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NA02453_.WMF", cAlternateFileName="")) returned 1 [0293.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0293.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211fa8 [0293.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0293.599] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211fa8 | out: hHeap=0x1f0000) returned 1 [0293.599] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0293.599] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0293.600] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02453_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02453_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0293.600] GetFileType (hFile=0x198) returned 0x1 [0293.600] CloseHandle (hObject=0x198) returned 1 [0293.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0293.600] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02453_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02453_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf701d25, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf701d25, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf701d25, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd3c)) returned 1 [0293.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0293.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0293.600] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02453_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02453_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf701d25, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf701d25, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf701d25, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd3c)) returned 1 [0293.601] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0293.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0293.601] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0293.601] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf701d25, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf701d25, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf701d25, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1750, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="NBOOK_01.MID", cAlternateFileName="")) returned 1 [0293.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609a0 [0293.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212828 [0293.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0293.601] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212828 | out: hHeap=0x1f0000) returned 1 [0293.601] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0293.601] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0293.602] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NBOOK_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\nbook_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0293.996] GetFileType (hFile=0x1b0) returned 0x1 [0293.997] CloseHandle (hObject=0x1b0) returned 1 [0293.997] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0293.997] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NBOOK_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\nbook_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf701d25, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf701d25, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf701d25, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1750)) returned 1 [0293.997] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0293.997] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0293.997] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NBOOK_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\nbook_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf701d25, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf701d25, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf701d25, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1750)) returned 1 [0293.998] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0293.998] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0293.998] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0293.998] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf701d25, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1540, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="OCEAN_01.MID", cAlternateFileName="")) returned 1 [0293.998] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0293.998] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211f20 [0293.998] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0293.998] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211f20 | out: hHeap=0x1f0000) returned 1 [0293.998] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0293.999] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0293.999] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OCEAN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ocean_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0293.999] GetFileType (hFile=0x1b0) returned 0x1 [0293.999] CloseHandle (hObject=0x1b0) returned 1 [0294.000] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0294.000] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OCEAN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ocean_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf701d25, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1540)) returned 1 [0294.000] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0294.000] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0294.000] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OCEAN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ocean_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf701d25, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1540)) returned 1 [0294.000] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0294.000] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0294.000] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0294.000] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19f4, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="OUTDR_01.MID", cAlternateFileName="")) returned 1 [0294.000] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0294.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2119d0 [0294.001] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0294.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2119d0 | out: hHeap=0x1f0000) returned 1 [0294.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0294.001] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0294.001] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OUTDR_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\outdr_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0294.001] GetFileType (hFile=0x1b0) returned 0x1 [0294.002] CloseHandle (hObject=0x1b0) returned 1 [0294.002] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0294.002] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OUTDR_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\outdr_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19f4)) returned 1 [0294.002] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0294.002] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0294.002] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OUTDR_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\outdr_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19f4)) returned 1 [0294.002] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0294.002] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0294.002] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0294.002] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a6b, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="PAPER_01.MID", cAlternateFileName="")) returned 1 [0294.003] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0294.003] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d88 [0294.003] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0294.003] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d88 | out: hHeap=0x1f0000) returned 1 [0294.003] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0294.003] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0294.003] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PAPER_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\paper_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0294.004] GetFileType (hFile=0x1b0) returned 0x1 [0294.004] CloseHandle (hObject=0x1b0) returned 1 [0294.004] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0294.004] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PAPER_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\paper_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a6b)) returned 1 [0294.004] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0294.004] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0294.005] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PAPER_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\paper_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a6b)) returned 1 [0294.005] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0294.005] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0294.005] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0294.005] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x195b, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="PARNT_01.MID", cAlternateFileName="")) returned 1 [0294.005] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0294.005] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2123e8 [0294.005] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0294.005] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2123e8 | out: hHeap=0x1f0000) returned 1 [0294.006] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0294.006] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0294.006] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0294.007] GetFileType (hFile=0x1b0) returned 0x1 [0294.007] CloseHandle (hObject=0x1b0) returned 1 [0294.007] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0294.008] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x195b)) returned 1 [0294.008] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0294.008] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0294.008] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x195b)) returned 1 [0294.008] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0294.008] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0294.008] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0294.008] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1652, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="PARNT_02.MID", cAlternateFileName="")) returned 1 [0294.009] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0294.009] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212828 [0294.009] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0294.009] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212828 | out: hHeap=0x1f0000) returned 1 [0294.009] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0294.009] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0294.010] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_02.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_02.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0294.010] GetFileType (hFile=0x1b0) returned 0x1 [0294.011] CloseHandle (hObject=0x1b0) returned 1 [0294.011] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0294.011] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_02.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_02.mid"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1652)) returned 1 [0294.011] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0294.011] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0294.012] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_02.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_02.mid"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1652)) returned 1 [0294.012] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0294.012] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0294.012] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0294.012] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x215a, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="PARNT_03.MID", cAlternateFileName="")) returned 1 [0294.012] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260518 [0294.012] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0294.012] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0294.013] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0294.013] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0294.013] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0294.014] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_03.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_03.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0294.014] GetFileType (hFile=0x1b0) returned 0x1 [0294.015] CloseHandle (hObject=0x1b0) returned 1 [0294.015] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0294.015] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_03.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_03.mid"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x215a)) returned 1 [0294.015] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0294.015] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0294.016] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_03.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_03.mid"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x215a)) returned 1 [0294.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0294.016] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0294.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0294.016] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17b6, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="PARNT_04.MID", cAlternateFileName="")) returned 1 [0294.016] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0294.016] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212140 [0294.016] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0294.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212140 | out: hHeap=0x1f0000) returned 1 [0294.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0294.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0294.017] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_04.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_04.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0294.018] GetFileType (hFile=0x1b0) returned 0x1 [0294.018] CloseHandle (hObject=0x1b0) returned 1 [0294.019] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0294.019] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_04.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_04.mid"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17b6)) returned 1 [0294.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0294.019] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0294.019] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_04.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_04.mid"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17b6)) returned 1 [0294.019] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0294.019] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0294.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0294.020] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x100fdad1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x100fdad1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10149fbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1784, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="PARNT_05.MID", cAlternateFileName="")) returned 1 [0294.020] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260770 [0294.020] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2127a0 [0294.020] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0294.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2127a0 | out: hHeap=0x1f0000) returned 1 [0294.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0294.020] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0294.021] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_05.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_05.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0294.181] GetFileType (hFile=0x1c0) returned 0x1 [0294.182] CloseHandle (hObject=0x1c0) returned 1 [0294.182] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0294.182] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_05.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_05.mid"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x100fdad1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x100fdad1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10149fbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1784)) returned 1 [0294.183] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0294.183] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0294.184] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_05.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_05.mid"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x100fdad1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x100fdad1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10149fbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1784)) returned 1 [0294.184] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0294.184] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0294.184] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0294.184] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x100fdad1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x100fdad1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e58, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="PARNT_06.MID", cAlternateFileName="")) returned 1 [0294.184] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0294.185] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d00 [0294.185] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0294.185] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d00 | out: hHeap=0x1f0000) returned 1 [0294.185] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0294.185] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0294.186] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_06.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_06.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0294.187] GetFileType (hFile=0x1c0) returned 0x1 [0294.187] CloseHandle (hObject=0x1c0) returned 1 [0294.189] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0294.189] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_06.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_06.mid"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x100fdad1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x100fdad1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e58)) returned 1 [0294.190] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0294.190] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0294.190] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_06.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_06.mid"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x100fdad1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x100fdad1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e58)) returned 1 [0294.190] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0294.190] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0294.190] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0294.191] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x100fdad1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x100fdad1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19a4, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="PARNT_07.MID", cAlternateFileName="")) returned 1 [0294.192] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0294.192] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212938 [0294.192] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0294.192] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212938 | out: hHeap=0x1f0000) returned 1 [0294.192] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0294.193] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0294.193] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_07.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_07.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0294.194] GetFileType (hFile=0x1c0) returned 0x1 [0294.195] CloseHandle (hObject=0x1c0) returned 1 [0294.195] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0294.195] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_07.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_07.mid"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x100fdad1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x100fdad1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19a4)) returned 1 [0294.196] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0294.196] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0294.196] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_07.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_07.mid"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x100fdad1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x100fdad1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19a4)) returned 1 [0294.196] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0294.196] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0294.196] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0294.196] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x100fdad1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x100fdad1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x100fdad1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1cb3, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="PARNT_08.MID", cAlternateFileName="")) returned 1 [0294.196] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0294.197] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0294.197] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0294.197] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0294.197] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0294.197] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0294.198] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_08.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_08.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0294.199] GetFileType (hFile=0x1c0) returned 0x1 [0294.199] CloseHandle (hObject=0x1c0) returned 1 [0294.200] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0294.200] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_08.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_08.mid"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x100fdad1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x100fdad1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x100fdad1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1cb3)) returned 1 [0294.200] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0294.200] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0294.200] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_08.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_08.mid"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x100fdad1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x100fdad1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x100fdad1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1cb3)) returned 1 [0294.200] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0294.200] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0294.201] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0294.201] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x100fdad1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x100fdad1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10149fbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a6c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="PARNT_09.MID", cAlternateFileName="")) returned 1 [0294.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0294.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2124f8 [0294.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0294.201] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2124f8 | out: hHeap=0x1f0000) returned 1 [0294.201] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0294.201] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0294.202] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_09.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_09.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0294.202] GetFileType (hFile=0x1c0) returned 0x1 [0294.203] CloseHandle (hObject=0x1c0) returned 1 [0294.203] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0294.203] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_09.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_09.mid"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x100fdad1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x100fdad1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10149fbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a6c)) returned 1 [0294.203] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0294.203] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0294.203] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_09.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_09.mid"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x100fdad1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x100fdad1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10149fbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a6c)) returned 1 [0294.203] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0294.204] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0294.204] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0294.204] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf74e1ae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf74e1ae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x100fdad1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1511, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="PARNT_10.MID", cAlternateFileName="")) returned 1 [0294.204] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0294.204] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212030 [0294.204] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0294.204] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212030 | out: hHeap=0x1f0000) returned 1 [0294.204] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0294.204] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0294.205] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_10.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_10.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0294.205] GetFileType (hFile=0x1c0) returned 0x1 [0294.205] CloseHandle (hObject=0x1c0) returned 1 [0294.205] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0294.206] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_10.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_10.mid"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf74e1ae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf74e1ae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x100fdad1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1511)) returned 1 [0294.206] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0294.206] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0294.206] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_10.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_10.mid"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf74e1ae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf74e1ae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x100fdad1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1511)) returned 1 [0294.206] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0294.206] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0294.206] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0294.206] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x100fdad1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x100fdad1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x100fdad1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6140, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="PE00013_.WMF", cAlternateFileName="")) returned 1 [0294.206] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0294.206] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211f20 [0294.206] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0294.207] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211f20 | out: hHeap=0x1f0000) returned 1 [0294.207] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0294.207] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0294.207] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00013_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00013_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0294.208] GetFileType (hFile=0x1c0) returned 0x1 [0294.208] CloseHandle (hObject=0x1c0) returned 1 [0294.209] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0294.209] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00013_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00013_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x100fdad1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x100fdad1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x100fdad1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6140)) returned 1 [0294.209] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0294.209] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0294.209] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00013_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00013_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x100fdad1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x100fdad1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x100fdad1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6140)) returned 1 [0294.209] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0294.209] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0294.209] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0294.209] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x100fdad1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x100fdad1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x100fdad1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x411a, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="PE00014_.WMF", cAlternateFileName="")) returned 1 [0294.210] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0294.210] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0294.210] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0294.210] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0294.211] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0294.211] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0294.211] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00014_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00014_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0294.213] GetFileType (hFile=0x174) returned 0x1 [0294.213] CloseHandle (hObject=0x174) returned 1 [0294.214] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0294.214] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00014_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00014_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x100fdad1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x100fdad1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x100fdad1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x411a)) returned 1 [0294.214] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0294.214] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0294.214] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00014_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00014_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x100fdad1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x100fdad1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x100fdad1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x411a)) returned 1 [0294.214] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0294.215] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0294.216] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0294.216] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x100fdad1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x100fdad1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x100fdad1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d5c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="PE00034_.WMF", cAlternateFileName="")) returned 1 [0294.540] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2605b8 [0294.540] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2120b8 [0294.540] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0294.540] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2120b8 | out: hHeap=0x1f0000) returned 1 [0294.540] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0294.540] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2605b8 | out: hHeap=0x1f0000) returned 1 [0294.541] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00034_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00034_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0294.541] GetFileType (hFile=0x1ac) returned 0x1 [0294.542] CloseHandle (hObject=0x1ac) returned 1 [0294.542] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0294.542] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00034_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00034_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x100fdad1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x100fdad1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x100fdad1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d5c)) returned 1 [0294.543] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0294.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0294.543] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00034_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00034_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x100fdad1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x100fdad1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x100fdad1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d5c)) returned 1 [0294.543] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0294.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0294.543] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0294.543] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1003f0d3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1003f0d3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x100fdad1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="PE00049_.WMF", cAlternateFileName="")) returned 1 [0294.543] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0294.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211a58 [0294.544] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0294.544] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211a58 | out: hHeap=0x1f0000) returned 1 [0294.544] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0294.544] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0294.545] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00049_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00049_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0294.545] GetFileType (hFile=0x1ac) returned 0x1 [0294.545] CloseHandle (hObject=0x1ac) returned 1 [0294.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0294.546] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00049_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00049_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1003f0d3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1003f0d3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x100fdad1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1 [0294.546] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0294.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0294.546] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00049_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00049_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1003f0d3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1003f0d3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x100fdad1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1 [0294.546] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0294.546] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0294.546] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0294.547] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4d18, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="PE00050_.WMF", cAlternateFileName="")) returned 1 [0294.547] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0294.547] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212828 [0294.547] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0294.547] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212828 | out: hHeap=0x1f0000) returned 1 [0294.547] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0294.547] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0294.548] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00050_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00050_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0294.548] GetFileType (hFile=0x1ac) returned 0x1 [0294.549] CloseHandle (hObject=0x1ac) returned 1 [0294.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0294.549] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00050_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00050_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4d18)) returned 1 [0294.549] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0294.549] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0294.550] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00050_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00050_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4d18)) returned 1 [0294.550] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0294.550] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0294.550] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0294.550] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x47ec, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="PE00052_.WMF", cAlternateFileName="")) returned 1 [0294.550] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0294.550] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212470 [0294.550] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0294.550] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212470 | out: hHeap=0x1f0000) returned 1 [0294.550] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0294.551] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0294.551] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00052_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00052_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0294.551] GetFileType (hFile=0x1ac) returned 0x1 [0294.552] CloseHandle (hObject=0x1ac) returned 1 [0294.552] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0294.552] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00052_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00052_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x47ec)) returned 1 [0294.552] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0294.552] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0294.552] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00052_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00052_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x47ec)) returned 1 [0294.552] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0294.552] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0294.552] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0294.552] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b4, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="PE00231_.WMF", cAlternateFileName="")) returned 1 [0294.553] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0294.553] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2128b0 [0294.553] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0294.553] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2128b0 | out: hHeap=0x1f0000) returned 1 [0294.553] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0294.553] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0294.554] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00231_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00231_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0294.612] GetFileType (hFile=0x198) returned 0x1 [0294.612] CloseHandle (hObject=0x198) returned 1 [0294.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0294.613] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00231_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00231_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b4)) returned 1 [0294.613] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0294.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0294.613] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00231_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00231_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b4)) returned 1 [0294.613] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0294.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0294.613] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0294.613] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaf4, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="PE00272_.WMF", cAlternateFileName="")) returned 1 [0294.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260770 [0294.614] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211e10 [0294.614] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0294.614] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e10 | out: hHeap=0x1f0000) returned 1 [0294.614] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0294.614] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0294.614] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00272_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00272_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0294.616] GetFileType (hFile=0x198) returned 0x1 [0294.616] CloseHandle (hObject=0x198) returned 1 [0294.616] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0294.616] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00272_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00272_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaf4)) returned 1 [0294.617] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0294.617] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0294.617] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00272_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00272_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaf4)) returned 1 [0294.617] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0294.617] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0294.617] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0294.617] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5aa4, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="PE00468_.WMF", cAlternateFileName="")) returned 1 [0294.617] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0294.617] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211ae0 [0294.617] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0294.618] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211ae0 | out: hHeap=0x1f0000) returned 1 [0294.618] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0294.618] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0294.618] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00468_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00468_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0294.619] GetFileType (hFile=0x198) returned 0x1 [0294.619] CloseHandle (hObject=0x198) returned 1 [0294.620] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0294.620] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00468_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00468_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5aa4)) returned 1 [0294.620] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0294.620] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0294.620] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00468_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00468_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5aa4)) returned 1 [0294.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0294.621] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0294.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0294.621] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10149fbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1cf8, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="PE00478_.WMF", cAlternateFileName="")) returned 1 [0294.621] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0294.621] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2129c0 [0294.621] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0294.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2129c0 | out: hHeap=0x1f0000) returned 1 [0294.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0294.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0294.622] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00478_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00478_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0294.623] GetFileType (hFile=0x198) returned 0x1 [0294.624] CloseHandle (hObject=0x198) returned 1 [0294.624] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0294.624] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00478_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00478_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10149fbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1cf8)) returned 1 [0294.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0294.625] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0294.625] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00478_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00478_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10149fbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1cf8)) returned 1 [0294.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0294.625] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0294.625] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0294.625] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4124, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="PE00485_.WMF", cAlternateFileName="")) returned 1 [0294.625] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260770 [0294.625] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212250 [0294.626] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0294.626] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212250 | out: hHeap=0x1f0000) returned 1 [0294.626] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0294.626] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0294.627] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00485_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00485_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0294.628] GetFileType (hFile=0x198) returned 0x1 [0294.629] CloseHandle (hObject=0x198) returned 1 [0294.629] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0294.629] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00485_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00485_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4124)) returned 1 [0294.630] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0294.630] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0294.630] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00485_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00485_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4124)) returned 1 [0294.630] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0294.630] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0294.630] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0294.630] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1402c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="PE00489_.WMF", cAlternateFileName="")) returned 1 [0294.630] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260860 [0294.631] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d00 [0294.631] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0294.631] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d00 | out: hHeap=0x1f0000) returned 1 [0294.631] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0294.631] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260860 | out: hHeap=0x1f0000) returned 1 [0294.632] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00489_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00489_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0294.632] GetFileType (hFile=0x198) returned 0x1 [0294.633] CloseHandle (hObject=0x198) returned 1 [0294.633] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0294.633] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00489_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00489_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1402c)) returned 1 [0294.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0294.634] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0294.634] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00489_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00489_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1402c)) returned 1 [0294.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0294.634] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0294.634] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0294.635] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ee4, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="PE00531_.WMF", cAlternateFileName="")) returned 1 [0294.635] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0294.635] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2128b0 [0294.635] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0294.635] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2128b0 | out: hHeap=0x1f0000) returned 1 [0294.635] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0294.635] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0294.636] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00531_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00531_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0294.637] GetFileType (hFile=0x198) returned 0x1 [0294.637] CloseHandle (hObject=0x198) returned 1 [0294.638] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0294.638] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00531_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00531_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ee4)) returned 1 [0294.638] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0294.638] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0294.639] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00531_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00531_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ee4)) returned 1 [0294.639] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0294.639] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0294.639] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0294.639] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8da8, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="PE00542_.WMF", cAlternateFileName="")) returned 1 [0294.639] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0294.639] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211c78 [0294.640] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0294.640] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211c78 | out: hHeap=0x1f0000) returned 1 [0294.640] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0294.640] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0294.641] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00542_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00542_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0294.641] GetFileType (hFile=0x198) returned 0x1 [0294.642] CloseHandle (hObject=0x198) returned 1 [0294.643] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0294.643] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00542_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00542_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8da8)) returned 1 [0294.643] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0294.643] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0294.643] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00542_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00542_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8da8)) returned 1 [0294.644] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0294.644] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0294.644] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0294.644] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10149fbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x140c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="PE00555_.WMF", cAlternateFileName="")) returned 1 [0294.644] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0294.644] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211f20 [0294.644] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0294.644] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211f20 | out: hHeap=0x1f0000) returned 1 [0294.644] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0294.645] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0294.645] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00555_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00555_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0295.127] GetFileType (hFile=0x1e0) returned 0x1 [0295.128] CloseHandle (hObject=0x1e0) returned 1 [0295.128] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0295.128] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00555_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00555_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10149fbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x140c)) returned 1 [0295.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0295.129] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0295.129] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00555_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00555_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10149fbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x140c)) returned 1 [0295.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0295.129] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0295.129] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0295.129] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x26b0, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="PE00559_.WMF", cAlternateFileName="")) returned 1 [0295.130] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0295.130] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2119d0 [0295.130] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0295.130] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2119d0 | out: hHeap=0x1f0000) returned 1 [0295.130] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0295.130] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0295.131] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00559_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00559_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0295.131] GetFileType (hFile=0x1e0) returned 0x1 [0295.132] CloseHandle (hObject=0x1e0) returned 1 [0295.132] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0295.132] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00559_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00559_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x26b0)) returned 1 [0295.133] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0295.133] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0295.133] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00559_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00559_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x26b0)) returned 1 [0295.133] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0295.133] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0295.133] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0295.133] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5670, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="PE00563_.WMF", cAlternateFileName="")) returned 1 [0295.134] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0295.134] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d00 [0295.134] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0295.134] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d00 | out: hHeap=0x1f0000) returned 1 [0295.134] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0295.134] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0295.135] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00563_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00563_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0295.135] GetFileType (hFile=0x1e0) returned 0x1 [0295.136] CloseHandle (hObject=0x1e0) returned 1 [0295.136] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0295.136] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00563_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00563_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5670)) returned 1 [0295.137] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0295.137] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0295.137] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00563_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00563_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5670)) returned 1 [0295.137] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0295.137] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0295.137] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0295.138] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ae6, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="PE00578_.WMF", cAlternateFileName="")) returned 1 [0295.138] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0295.138] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2129c0 [0295.138] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0295.138] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2129c0 | out: hHeap=0x1f0000) returned 1 [0295.138] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0295.138] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0295.139] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00578_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00578_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0295.139] GetFileType (hFile=0x1e0) returned 0x1 [0295.140] CloseHandle (hObject=0x1e0) returned 1 [0295.140] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0295.141] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00578_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00578_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ae6)) returned 1 [0295.141] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0295.141] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0295.141] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00578_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00578_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ae6)) returned 1 [0295.141] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0295.141] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0295.142] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0295.142] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1928, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="PE00608_.WMF", cAlternateFileName="")) returned 1 [0295.142] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0295.142] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212828 [0295.142] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0295.143] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212828 | out: hHeap=0x1f0000) returned 1 [0295.143] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0295.143] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0295.144] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00608_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00608_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0295.144] GetFileType (hFile=0x1e0) returned 0x1 [0295.145] CloseHandle (hObject=0x1e0) returned 1 [0295.145] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0295.145] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00608_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00608_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1928)) returned 1 [0295.145] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0295.146] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0295.146] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00608_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00608_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1928)) returned 1 [0295.146] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0295.146] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0295.146] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0295.146] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4cea, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="PE00633_.WMF", cAlternateFileName="")) returned 1 [0295.146] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260888 [0295.147] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211bf0 [0295.147] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0295.147] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211bf0 | out: hHeap=0x1f0000) returned 1 [0295.147] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0295.147] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0295.148] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00633_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00633_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0295.148] GetFileType (hFile=0x1e0) returned 0x1 [0295.149] CloseHandle (hObject=0x1e0) returned 1 [0295.149] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0295.149] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00633_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00633_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4cea)) returned 1 [0295.150] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0295.150] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0295.150] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00633_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00633_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4cea)) returned 1 [0295.150] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0295.150] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0295.150] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0295.151] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb12c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="PE00640_.WMF", cAlternateFileName="")) returned 1 [0295.151] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0295.151] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212140 [0295.151] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0295.151] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212140 | out: hHeap=0x1f0000) returned 1 [0295.151] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0295.151] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0295.152] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00640_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00640_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0295.152] GetFileType (hFile=0x1e0) returned 0x1 [0295.153] CloseHandle (hObject=0x1e0) returned 1 [0295.153] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0295.154] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00640_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00640_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb12c)) returned 1 [0295.154] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0295.154] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0295.154] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00640_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00640_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb12c)) returned 1 [0295.154] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0295.154] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0295.154] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0295.155] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10149fbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6028, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="PE00668_.WMF", cAlternateFileName="")) returned 1 [0295.155] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0295.155] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212140 [0295.155] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0295.155] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212140 | out: hHeap=0x1f0000) returned 1 [0295.155] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0295.155] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0295.156] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00668_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00668_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0295.156] GetFileType (hFile=0x1e0) returned 0x1 [0295.157] CloseHandle (hObject=0x1e0) returned 1 [0295.157] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0295.157] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00668_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00668_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10149fbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6028)) returned 1 [0295.157] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0295.157] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0295.158] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00668_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00668_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10149fbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6028)) returned 1 [0295.158] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0295.158] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0295.158] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0295.158] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x108a, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="PE00685_.WMF", cAlternateFileName="")) returned 1 [0295.159] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0295.159] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2120b8 [0295.159] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0295.159] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2120b8 | out: hHeap=0x1f0000) returned 1 [0295.159] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0295.159] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0295.160] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00685_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00685_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0295.160] GetFileType (hFile=0x1e0) returned 0x1 [0295.160] CloseHandle (hObject=0x1e0) returned 1 [0295.161] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0295.161] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00685_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00685_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x108a)) returned 1 [0295.161] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0295.161] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0295.161] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00685_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00685_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x108a)) returned 1 [0295.161] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0295.162] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0295.162] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0295.162] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x112e, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="PE00686_.WMF", cAlternateFileName="")) returned 1 [0295.162] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0295.162] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212030 [0295.162] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0295.162] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212030 | out: hHeap=0x1f0000) returned 1 [0295.162] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0295.162] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0295.163] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00686_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00686_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0295.163] GetFileType (hFile=0x1e0) returned 0x1 [0295.164] CloseHandle (hObject=0x1e0) returned 1 [0295.164] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0295.164] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00686_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00686_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x112e)) returned 1 [0295.165] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0295.165] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0295.165] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00686_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00686_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x112e)) returned 1 [0295.165] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0295.165] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0295.165] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0295.165] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1138, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="PE00693_.WMF", cAlternateFileName="")) returned 1 [0295.165] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0295.166] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211ae0 [0295.166] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0295.166] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211ae0 | out: hHeap=0x1f0000) returned 1 [0295.166] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0295.166] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0295.167] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00693_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00693_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0296.038] GetFileType (hFile=0x1c0) returned 0x1 [0296.038] CloseHandle (hObject=0x1c0) returned 1 [0296.038] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0296.039] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00693_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00693_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1138)) returned 1 [0296.039] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0296.039] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0296.039] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00693_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00693_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1138)) returned 1 [0296.039] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0296.039] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0296.039] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0296.039] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3926, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="PE00720_.WMF", cAlternateFileName="")) returned 1 [0296.039] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0296.039] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212470 [0296.040] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0296.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212470 | out: hHeap=0x1f0000) returned 1 [0296.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0296.040] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0296.040] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00720_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00720_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0296.041] GetFileType (hFile=0x1c0) returned 0x1 [0296.041] CloseHandle (hObject=0x1c0) returned 1 [0296.041] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0296.041] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00720_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00720_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3926)) returned 1 [0296.042] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0296.042] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0296.042] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00720_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00720_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3926)) returned 1 [0296.042] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0296.042] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0296.042] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0296.042] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10149fbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1afc, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="PE00723_.WMF", cAlternateFileName="")) returned 1 [0296.042] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0296.042] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0296.042] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0296.043] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0296.043] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0296.043] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0296.043] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00723_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00723_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0296.043] GetFileType (hFile=0x1c0) returned 0x1 [0296.044] CloseHandle (hObject=0x1c0) returned 1 [0296.044] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0296.044] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00723_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00723_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10149fbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1afc)) returned 1 [0296.044] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0296.044] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0296.044] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00723_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00723_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10149fbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1afc)) returned 1 [0296.045] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0296.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0296.045] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0296.045] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10149fbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb1a4, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="PE00726_.WMF", cAlternateFileName="")) returned 1 [0296.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0296.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212360 [0296.045] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0296.045] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212360 | out: hHeap=0x1f0000) returned 1 [0296.045] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0296.045] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0296.046] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00726_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00726_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0296.046] GetFileType (hFile=0x1c0) returned 0x1 [0296.047] CloseHandle (hObject=0x1c0) returned 1 [0296.047] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0296.047] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00726_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00726_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10149fbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb1a4)) returned 1 [0296.047] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0296.047] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0296.047] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00726_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00726_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10149fbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb1a4)) returned 1 [0296.048] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0296.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0296.048] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0296.048] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10149fbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9e2c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="PE00737_.WMF", cAlternateFileName="")) returned 1 [0296.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0296.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211e98 [0296.048] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0296.048] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e98 | out: hHeap=0x1f0000) returned 1 [0296.048] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0296.048] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0296.049] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00737_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00737_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0296.049] GetFileType (hFile=0x1c0) returned 0x1 [0296.049] CloseHandle (hObject=0x1c0) returned 1 [0296.050] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0296.050] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00737_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00737_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10149fbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9e2c)) returned 1 [0296.050] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0296.050] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0296.050] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00737_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00737_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10149fbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9e2c)) returned 1 [0296.050] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0296.050] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0296.050] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0296.050] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10149fbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ca0, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="PE00833_.WMF", cAlternateFileName="")) returned 1 [0296.050] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0296.051] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211b68 [0296.051] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0296.051] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b68 | out: hHeap=0x1f0000) returned 1 [0296.051] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0296.051] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0296.051] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00833_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00833_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0296.052] GetFileType (hFile=0x1c0) returned 0x1 [0296.052] CloseHandle (hObject=0x1c0) returned 1 [0296.052] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0296.052] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00833_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00833_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10149fbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ca0)) returned 1 [0296.052] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0296.052] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0296.052] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00833_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00833_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10149fbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ca0)) returned 1 [0296.053] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0296.053] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0296.053] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0296.053] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1908, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="PE00898_.WMF", cAlternateFileName="")) returned 1 [0296.053] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0296.053] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2123e8 [0296.053] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0296.053] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2123e8 | out: hHeap=0x1f0000) returned 1 [0296.053] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0296.053] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0296.054] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00898_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00898_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0296.054] GetFileType (hFile=0x1c0) returned 0x1 [0296.054] CloseHandle (hObject=0x1c0) returned 1 [0296.054] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0296.054] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00898_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00898_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1908)) returned 1 [0296.054] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0296.054] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0296.055] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00898_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00898_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1908)) returned 1 [0296.055] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0296.055] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0296.055] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0296.055] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3100, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="PE00934_.WMF", cAlternateFileName="")) returned 1 [0296.055] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0296.055] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212470 [0296.055] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0296.055] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212470 | out: hHeap=0x1f0000) returned 1 [0296.055] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0296.055] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0296.056] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00934_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00934_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0296.056] GetFileType (hFile=0x1c0) returned 0x1 [0296.056] CloseHandle (hObject=0x1c0) returned 1 [0296.056] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0296.056] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00934_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00934_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3100)) returned 1 [0296.056] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0296.056] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0296.057] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00934_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00934_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3100)) returned 1 [0296.057] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0296.057] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0296.057] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0296.057] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10149fbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2904, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="PE00998_.WMF", cAlternateFileName="")) returned 1 [0296.057] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0296.057] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212030 [0296.057] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0296.057] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212030 | out: hHeap=0x1f0000) returned 1 [0296.057] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0296.057] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0296.058] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00998_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00998_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0296.058] GetFileType (hFile=0x1c0) returned 0x1 [0296.058] CloseHandle (hObject=0x1c0) returned 1 [0296.058] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0296.058] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00998_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00998_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10149fbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2904)) returned 1 [0296.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0296.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0296.059] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00998_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00998_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10149fbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2904)) returned 1 [0296.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0296.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0296.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0296.059] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10149fbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x984, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="PE01160_.WMF", cAlternateFileName="")) returned 1 [0296.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0296.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0296.059] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230258 [0296.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0296.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0296.059] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0296.060] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01160_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe01160_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0296.060] GetFileType (hFile=0x1c0) returned 0x1 [0296.060] CloseHandle (hObject=0x1c0) returned 1 [0296.060] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0296.060] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01160_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe01160_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10149fbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x984)) returned 1 [0296.061] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0296.061] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0296.061] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01160_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe01160_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10149fbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x984)) returned 1 [0296.061] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0296.061] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0296.061] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0296.061] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x59c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="PE01172_.WMF", cAlternateFileName="")) returned 1 [0296.061] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0296.061] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211ae0 [0296.061] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0296.061] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211ae0 | out: hHeap=0x1f0000) returned 1 [0296.061] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230258 | out: hHeap=0x1f0000) returned 1 [0296.062] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0296.062] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe01172_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0296.062] GetFileType (hFile=0x1c0) returned 0x1 [0296.063] CloseHandle (hObject=0x1c0) returned 1 [0296.063] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0296.063] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe01172_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x59c)) returned 1 [0296.063] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0296.063] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0296.063] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe01172_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x59c)) returned 1 [0296.064] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0296.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0296.064] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0296.064] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3f9c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="PE01191_.WMF", cAlternateFileName="")) returned 1 [0296.064] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0296.065] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d00 [0296.065] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0296.065] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d00 | out: hHeap=0x1f0000) returned 1 [0296.065] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0296.065] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0296.065] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01191_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe01191_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0296.066] GetFileType (hFile=0x1c0) returned 0x1 [0296.066] CloseHandle (hObject=0x1c0) returned 1 [0296.066] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0296.066] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01191_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe01191_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3f9c)) returned 1 [0296.066] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0296.066] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0296.067] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01191_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe01191_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3f9c)) returned 1 [0296.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0296.067] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0296.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0296.067] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1418, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="PE01661_.WMF", cAlternateFileName="")) returned 1 [0296.067] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0296.067] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0296.067] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0296.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0296.067] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0296.068] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0296.068] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01661_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe01661_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0296.426] GetFileType (hFile=0x198) returned 0x1 [0296.426] CloseHandle (hObject=0x198) returned 1 [0296.427] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0296.427] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01661_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe01661_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1418)) returned 1 [0296.427] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0296.427] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0296.427] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01661_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe01661_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1418)) returned 1 [0296.428] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0296.428] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0296.428] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0296.428] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdda, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="PE01797_.WMF", cAlternateFileName="")) returned 1 [0296.428] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260888 [0296.428] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211bf0 [0296.428] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0296.428] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211bf0 | out: hHeap=0x1f0000) returned 1 [0296.428] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0296.429] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260888 | out: hHeap=0x1f0000) returned 1 [0296.429] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01797_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe01797_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0296.429] GetFileType (hFile=0x198) returned 0x1 [0296.430] CloseHandle (hObject=0x198) returned 1 [0296.430] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0296.430] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01797_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe01797_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdda)) returned 1 [0296.430] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0296.431] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0296.431] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01797_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe01797_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdda)) returned 1 [0296.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0296.431] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0296.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0296.431] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x23d4, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="PE02120_.WMF", cAlternateFileName="")) returned 1 [0296.431] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0296.431] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d88 [0296.431] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0296.431] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d88 | out: hHeap=0x1f0000) returned 1 [0296.432] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0296.432] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0296.432] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02120_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02120_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0296.432] GetFileType (hFile=0x198) returned 0x1 [0296.433] CloseHandle (hObject=0x198) returned 1 [0296.433] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0296.433] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02120_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02120_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x23d4)) returned 1 [0296.433] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0296.434] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0296.434] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02120_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02120_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x23d4)) returned 1 [0296.434] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0296.434] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0296.434] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0296.434] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fc4, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="PE02169_.WMF", cAlternateFileName="")) returned 1 [0296.434] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2608d8 [0296.434] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d88 [0296.434] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0296.434] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d88 | out: hHeap=0x1f0000) returned 1 [0296.435] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0296.435] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2608d8 | out: hHeap=0x1f0000) returned 1 [0296.435] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02169_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02169_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0296.435] GetFileType (hFile=0x198) returned 0x1 [0296.435] CloseHandle (hObject=0x198) returned 1 [0296.436] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0296.436] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02169_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02169_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fc4)) returned 1 [0296.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0296.436] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0296.436] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02169_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02169_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fc4)) returned 1 [0296.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0296.436] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0296.436] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0296.437] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x75e2, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="PE02262_.WMF", cAlternateFileName="")) returned 1 [0296.437] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0296.437] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2119d0 [0296.437] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0296.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2119d0 | out: hHeap=0x1f0000) returned 1 [0296.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0296.437] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0296.438] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02262_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02262_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0296.438] GetFileType (hFile=0x198) returned 0x1 [0296.439] CloseHandle (hObject=0x198) returned 1 [0296.439] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0296.439] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02262_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02262_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x75e2)) returned 1 [0296.439] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0296.439] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0296.440] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02262_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02262_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x75e2)) returned 1 [0296.440] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0296.440] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0296.440] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0296.440] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x824e, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="PE02263_.WMF", cAlternateFileName="")) returned 1 [0296.440] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0296.440] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212140 [0296.440] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0296.440] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212140 | out: hHeap=0x1f0000) returned 1 [0296.441] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0296.441] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0296.441] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02263_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02263_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0296.441] GetFileType (hFile=0x198) returned 0x1 [0296.442] CloseHandle (hObject=0x198) returned 1 [0296.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0296.442] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02263_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02263_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x824e)) returned 1 [0296.442] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0296.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0296.443] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02263_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02263_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x824e)) returned 1 [0296.443] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0296.443] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0296.443] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0296.443] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x62b2, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="PE02265_.WMF", cAlternateFileName="")) returned 1 [0296.443] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0296.443] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211ae0 [0296.443] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230320 [0296.443] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211ae0 | out: hHeap=0x1f0000) returned 1 [0296.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0296.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0296.444] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02265_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02265_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0296.444] GetFileType (hFile=0x198) returned 0x1 [0296.445] CloseHandle (hObject=0x198) returned 1 [0296.445] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0296.445] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02265_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02265_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x62b2)) returned 1 [0296.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0296.445] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0296.445] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02265_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02265_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x62b2)) returned 1 [0296.445] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0296.446] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0296.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0296.446] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x78e0, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="PE02267_.WMF", cAlternateFileName="")) returned 1 [0296.446] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0296.446] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211b68 [0296.446] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0296.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b68 | out: hHeap=0x1f0000) returned 1 [0296.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230320 | out: hHeap=0x1f0000) returned 1 [0296.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0296.447] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02267_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02267_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0296.447] GetFileType (hFile=0x198) returned 0x1 [0296.448] CloseHandle (hObject=0x198) returned 1 [0296.448] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0296.448] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02267_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02267_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x78e0)) returned 1 [0296.448] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0296.448] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0296.449] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02267_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02267_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x78e0)) returned 1 [0296.449] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0296.449] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0296.449] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0296.449] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6f26, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="PE02270_.WMF", cAlternateFileName="")) returned 1 [0296.449] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0296.449] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2124f8 [0296.449] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0296.449] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2124f8 | out: hHeap=0x1f0000) returned 1 [0296.449] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230190 | out: hHeap=0x1f0000) returned 1 [0296.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0296.450] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02270_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02270_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0296.450] GetFileType (hFile=0x198) returned 0x1 [0296.450] CloseHandle (hObject=0x198) returned 1 [0296.451] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0296.451] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02270_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02270_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6f26)) returned 1 [0296.451] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0296.451] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0296.451] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02270_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02270_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6f26)) returned 1 [0296.451] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0296.451] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0296.451] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0296.451] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb9c4, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="PE02278_.WMF", cAlternateFileName="")) returned 1 [0296.451] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2604f0 [0296.451] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211e98 [0296.451] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0296.452] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e98 | out: hHeap=0x1f0000) returned 1 [0296.452] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0296.452] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2604f0 | out: hHeap=0x1f0000) returned 1 [0296.452] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02278_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02278_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0296.452] GetFileType (hFile=0x198) returned 0x1 [0296.452] CloseHandle (hObject=0x198) returned 1 [0296.453] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0296.453] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02278_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02278_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb9c4)) returned 1 [0296.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0296.453] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0296.453] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02278_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02278_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb9c4)) returned 1 [0296.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0296.453] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0296.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0296.453] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6928, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="PE02280_.WMF", cAlternateFileName="")) returned 1 [0296.453] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0296.453] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212938 [0296.453] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0296.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212938 | out: hHeap=0x1f0000) returned 1 [0296.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0296.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0296.454] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02280_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02280_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0296.454] GetFileType (hFile=0x198) returned 0x1 [0296.454] CloseHandle (hObject=0x198) returned 1 [0296.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0296.454] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02280_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02280_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6928)) returned 1 [0296.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0296.455] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0296.456] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02280_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02280_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6928)) returned 1 [0296.456] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0296.456] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0296.456] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0296.456] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7400, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="PE02282_.WMF", cAlternateFileName="")) returned 1 [0296.456] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0296.456] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212360 [0296.456] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0296.456] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212360 | out: hHeap=0x1f0000) returned 1 [0296.456] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0296.456] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0296.457] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02282_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02282_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0296.457] GetFileType (hFile=0x198) returned 0x1 [0296.457] CloseHandle (hObject=0x198) returned 1 [0296.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0296.457] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02282_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02282_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7400)) returned 1 [0296.457] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0296.457] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0296.457] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02282_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02282_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7400)) returned 1 [0296.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0296.458] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0296.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0296.458] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4090, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="PE02285_.WMF", cAlternateFileName="")) returned 1 [0296.458] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0296.458] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0296.458] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0296.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0296.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0296.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0296.458] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02285_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02285_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0296.459] GetFileType (hFile=0x198) returned 0x1 [0296.459] CloseHandle (hObject=0x198) returned 1 [0296.459] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0296.459] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02285_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02285_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4090)) returned 1 [0296.459] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0296.459] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0296.459] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02285_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02285_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4090)) returned 1 [0296.459] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0296.460] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0296.460] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0296.460] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4584, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="PE02287_.WMF", cAlternateFileName="")) returned 1 [0296.460] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0296.460] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211fa8 [0296.460] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fce0 [0296.460] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211fa8 | out: hHeap=0x1f0000) returned 1 [0296.460] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0296.460] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0296.460] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02287_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02287_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0296.460] GetFileType (hFile=0x198) returned 0x1 [0296.461] CloseHandle (hObject=0x198) returned 1 [0296.461] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0296.461] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02287_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02287_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4584)) returned 1 [0296.461] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0296.461] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0296.461] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02287_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02287_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4584)) returned 1 [0296.461] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0296.461] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0296.461] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0296.462] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x76e0, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="PE02288_.WMF", cAlternateFileName="")) returned 1 [0296.462] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0296.462] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211b68 [0296.462] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0296.462] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b68 | out: hHeap=0x1f0000) returned 1 [0296.462] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fce0 | out: hHeap=0x1f0000) returned 1 [0296.462] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0296.463] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02288_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02288_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0296.463] GetFileType (hFile=0x198) returned 0x1 [0296.463] CloseHandle (hObject=0x198) returned 1 [0296.463] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0296.463] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02288_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02288_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x76e0)) returned 1 [0296.463] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0296.464] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0296.464] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02288_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02288_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x76e0)) returned 1 [0296.464] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0296.464] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0296.464] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0296.464] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5850, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="PE02293_.WMF", cAlternateFileName="")) returned 1 [0296.464] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0296.464] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2119d0 [0296.464] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0296.464] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2119d0 | out: hHeap=0x1f0000) returned 1 [0296.465] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0296.465] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0296.465] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02293_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02293_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0296.466] GetFileType (hFile=0x198) returned 0x1 [0296.466] CloseHandle (hObject=0x198) returned 1 [0296.467] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0296.467] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02293_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02293_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5850)) returned 1 [0296.467] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0296.467] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0296.467] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02293_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02293_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5850)) returned 1 [0296.467] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0296.467] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0296.467] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0296.467] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5328, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="PE02296_.WMF", cAlternateFileName="")) returned 1 [0296.468] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0296.468] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212140 [0296.468] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0296.468] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212140 | out: hHeap=0x1f0000) returned 1 [0296.468] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0296.468] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0296.468] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02296_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02296_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0296.469] GetFileType (hFile=0x198) returned 0x1 [0296.469] CloseHandle (hObject=0x198) returned 1 [0296.470] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221080 [0296.470] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02296_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02296_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5328)) returned 1 [0296.470] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221080 | out: hHeap=0x1f0000) returned 1 [0296.470] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0296.470] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02296_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02296_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5328)) returned 1 [0296.470] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0296.703] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0296.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0296.703] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8c0, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="PE02369_.WMF", cAlternateFileName="")) returned 1 [0296.703] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0296.703] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212140 [0296.703] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fda8 [0296.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212140 | out: hHeap=0x1f0000) returned 1 [0296.703] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0296.704] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 [0296.704] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02369_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02369_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0296.704] GetFileType (hFile=0x1ac) returned 0x1 [0296.705] CloseHandle (hObject=0x1ac) returned 1 [0296.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0296.706] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02369_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02369_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8c0)) returned 1 [0296.706] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0296.706] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0296.706] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02369_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02369_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8c0)) returned 1 [0296.706] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0296.707] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0296.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0296.707] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101e2909, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101e2909, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101e2909, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x39f8, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="PE02522_.WMF", cAlternateFileName="")) returned 1 [0296.707] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0296.707] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211fa8 [0296.707] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0296.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211fa8 | out: hHeap=0x1f0000) returned 1 [0296.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fda8 | out: hHeap=0x1f0000) returned 1 [0296.707] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0296.708] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02522_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02522_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0296.887] GetFileType (hFile=0x1ac) returned 0x1 [0296.888] CloseHandle (hObject=0x1ac) returned 1 [0296.888] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0296.888] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02522_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02522_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101e2909, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101e2909, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101e2909, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x39f8)) returned 1 [0296.888] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0296.888] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0296.888] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02522_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02522_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101e2909, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101e2909, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101e2909, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x39f8)) returned 1 [0296.889] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0296.889] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0296.889] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0296.889] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d2a, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="PE02950_.WMF", cAlternateFileName="")) returned 1 [0296.889] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260838 [0296.889] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212030 [0296.889] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0296.889] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212030 | out: hHeap=0x1f0000) returned 1 [0296.889] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0296.889] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260838 | out: hHeap=0x1f0000) returned 1 [0296.971] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02950_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02950_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0296.972] GetFileType (hFile=0x1ac) returned 0x1 [0296.973] CloseHandle (hObject=0x1ac) returned 1 [0296.973] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0296.974] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02950_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02950_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d2a)) returned 1 [0296.974] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0296.974] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0296.974] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02950_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02950_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d2a)) returned 1 [0296.974] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0296.974] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0296.974] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0296.975] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc70, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="PE02957_.WMF", cAlternateFileName="")) returned 1 [0296.975] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606d0 [0296.975] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211b68 [0296.975] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0296.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211b68 | out: hHeap=0x1f0000) returned 1 [0296.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0296.975] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606d0 | out: hHeap=0x1f0000) returned 1 [0296.976] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02957_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02957_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0296.977] GetFileType (hFile=0x1ac) returned 0x1 [0296.977] CloseHandle (hObject=0x1ac) returned 1 [0296.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0296.978] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02957_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02957_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc70)) returned 1 [0296.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0296.978] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0296.978] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02957_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02957_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc70)) returned 1 [0296.978] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0296.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0296.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0296.979] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x614, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="PE03236_.WMF", cAlternateFileName="")) returned 1 [0296.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0296.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212140 [0296.979] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22ff38 [0296.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212140 | out: hHeap=0x1f0000) returned 1 [0296.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0296.979] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0296.980] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03236_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03236_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0296.981] GetFileType (hFile=0x1ac) returned 0x1 [0296.981] CloseHandle (hObject=0x1ac) returned 1 [0296.982] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0296.982] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03236_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03236_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x614)) returned 1 [0296.982] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0296.982] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0296.982] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03236_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03236_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x614)) returned 1 [0296.982] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0296.983] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0296.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0296.983] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b4, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="PE03241_.WMF", cAlternateFileName="")) returned 1 [0296.983] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0296.983] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0296.983] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0296.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0296.983] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ff38 | out: hHeap=0x1f0000) returned 1 [0296.984] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0296.984] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03241_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03241_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0296.985] GetFileType (hFile=0x1ac) returned 0x1 [0296.985] CloseHandle (hObject=0x1ac) returned 1 [0296.986] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0296.986] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03241_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03241_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b4)) returned 1 [0296.987] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0296.987] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0296.987] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03241_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03241_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b4)) returned 1 [0296.987] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0296.987] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0296.987] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0296.987] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101bc6d0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3380, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="PE03257_.WMF", cAlternateFileName="")) returned 1 [0296.988] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260748 [0296.988] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0296.988] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0296.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0296.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0296.988] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260748 | out: hHeap=0x1f0000) returned 1 [0296.989] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03257_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03257_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0296.990] GetFileType (hFile=0x1ac) returned 0x1 [0296.991] CloseHandle (hObject=0x1ac) returned 1 [0296.991] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0296.991] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03257_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03257_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101bc6d0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3380)) returned 1 [0296.991] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0296.991] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0296.992] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03257_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03257_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101bc6d0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3380)) returned 1 [0296.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0296.992] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0296.992] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0296.992] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x692, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="PE03331_.WMF", cAlternateFileName="")) returned 1 [0296.992] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260518 [0296.992] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2129c0 [0296.992] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0296.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2129c0 | out: hHeap=0x1f0000) returned 1 [0296.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0296.993] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260518 | out: hHeap=0x1f0000) returned 1 [0296.993] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03331_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03331_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0296.994] GetFileType (hFile=0x1ac) returned 0x1 [0296.994] CloseHandle (hObject=0x1ac) returned 1 [0296.995] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0296.995] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03331_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03331_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x692)) returned 1 [0296.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0296.995] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0296.995] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03331_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03331_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x692)) returned 1 [0296.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0296.995] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0296.995] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0296.996] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x282c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="PE03339_.WMF", cAlternateFileName="")) returned 1 [0296.996] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260928 [0296.996] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2120b8 [0296.996] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f6a0 [0296.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2120b8 | out: hHeap=0x1f0000) returned 1 [0296.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0296.996] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260928 | out: hHeap=0x1f0000) returned 1 [0296.997] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03339_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03339_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0296.997] GetFileType (hFile=0x1ac) returned 0x1 [0296.998] CloseHandle (hObject=0x1ac) returned 1 [0296.998] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0296.998] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03339_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03339_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x282c)) returned 1 [0296.999] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0296.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0296.999] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03339_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03339_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x282c)) returned 1 [0296.999] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0296.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2218d0 [0296.999] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2218d0 | out: hHeap=0x1f0000) returned 1 [0296.999] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2108, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="PE03451_.WMF", cAlternateFileName="")) returned 1 [0296.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0296.999] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2123e8 [0297.000] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f510 [0297.000] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2123e8 | out: hHeap=0x1f0000) returned 1 [0297.000] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f6a0 | out: hHeap=0x1f0000) returned 1 [0297.000] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0297.000] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03451_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03451_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0297.001] GetFileType (hFile=0x1ac) returned 0x1 [0297.001] CloseHandle (hObject=0x1ac) returned 1 [0297.002] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0297.003] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03451_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03451_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2108)) returned 1 [0297.003] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0297.003] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0297.003] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03451_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03451_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2108)) returned 1 [0297.003] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0297.003] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0297.003] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0297.003] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f24, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="PE03453_.WMF", cAlternateFileName="")) returned 1 [0297.003] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260950 [0297.004] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2121c8 [0297.004] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0297.004] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2121c8 | out: hHeap=0x1f0000) returned 1 [0297.004] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f510 | out: hHeap=0x1f0000) returned 1 [0297.004] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260950 | out: hHeap=0x1f0000) returned 1 [0297.005] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03453_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03453_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0297.005] GetFileType (hFile=0x1ac) returned 0x1 [0297.006] CloseHandle (hObject=0x1ac) returned 1 [0297.006] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0297.006] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03453_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03453_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f24)) returned 1 [0297.006] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0297.006] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0297.006] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03453_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03453_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f24)) returned 1 [0297.007] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0297.007] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0297.007] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0297.007] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101bc6d0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2178, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="PE03459_.WMF", cAlternateFileName="")) returned 1 [0297.008] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2606a8 [0297.008] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2123e8 [0297.008] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0297.008] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2123e8 | out: hHeap=0x1f0000) returned 1 [0297.008] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0297.009] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2606a8 | out: hHeap=0x1f0000) returned 1 [0297.009] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03459_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03459_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0297.010] GetFileType (hFile=0x1ac) returned 0x1 [0297.011] CloseHandle (hObject=0x1ac) returned 1 [0297.011] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0297.011] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03459_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03459_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101bc6d0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2178)) returned 1 [0297.012] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0297.012] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0297.012] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03459_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03459_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101bc6d0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2178)) returned 1 [0297.012] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0297.012] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0297.012] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0297.012] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101bc6d0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1664, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="PE03464_.WMF", cAlternateFileName="")) returned 1 [0297.012] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260568 [0297.013] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211ae0 [0297.013] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fc18 [0297.013] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211ae0 | out: hHeap=0x1f0000) returned 1 [0297.013] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0297.013] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260568 | out: hHeap=0x1f0000) returned 1 [0297.014] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03464_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03464_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0297.014] GetFileType (hFile=0x1ac) returned 0x1 [0297.014] CloseHandle (hObject=0x1ac) returned 1 [0297.015] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0297.015] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03464_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03464_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101bc6d0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1664)) returned 1 [0297.015] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0297.015] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0297.015] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03464_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03464_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101bc6d0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1664)) returned 1 [0297.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0297.016] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0297.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0297.016] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101bc6d0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x41a0, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="PE03466_.WMF", cAlternateFileName="")) returned 1 [0297.016] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2609a0 [0297.016] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211ae0 [0297.016] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0297.016] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211ae0 | out: hHeap=0x1f0000) returned 1 [0297.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fc18 | out: hHeap=0x1f0000) returned 1 [0297.017] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2609a0 | out: hHeap=0x1f0000) returned 1 [0297.330] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03466_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03466_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0297.331] GetFileType (hFile=0x1e0) returned 0x1 [0297.331] CloseHandle (hObject=0x1e0) returned 1 [0297.331] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0297.331] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03466_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03466_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101bc6d0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x41a0)) returned 1 [0297.331] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0297.331] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0297.332] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03466_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03466_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101bc6d0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x41a0)) returned 1 [0297.332] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0297.332] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0297.332] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0297.332] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101bc6d0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3998, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="PE03470_.WMF", cAlternateFileName="")) returned 1 [0297.332] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260770 [0297.332] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2127a0 [0297.332] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0297.332] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2127a0 | out: hHeap=0x1f0000) returned 1 [0297.333] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0297.333] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0297.442] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03470_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03470_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0297.442] GetFileType (hFile=0x1e0) returned 0x1 [0297.442] CloseHandle (hObject=0x1e0) returned 1 [0297.442] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220fe8 [0297.443] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03470_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03470_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101bc6d0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3998)) returned 1 [0297.443] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220fe8 | out: hHeap=0x1f0000) returned 1 [0297.443] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0297.443] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03470_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03470_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101bc6d0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3998)) returned 1 [0297.443] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0297.443] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0297.443] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0297.443] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101bc6d0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xec4, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="PE03513_.WMF", cAlternateFileName="")) returned 1 [0297.443] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260770 [0297.443] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211bf0 [0297.443] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0297.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211bf0 | out: hHeap=0x1f0000) returned 1 [0297.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0297.444] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0297.444] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03513_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03513_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0297.444] GetFileType (hFile=0x1e0) returned 0x1 [0297.445] CloseHandle (hObject=0x1e0) returned 1 [0297.445] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0297.445] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03513_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03513_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101bc6d0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xec4)) returned 1 [0297.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0297.446] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0297.446] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03513_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03513_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101bc6d0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xec4)) returned 1 [0297.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0297.446] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a00 [0297.446] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a00 | out: hHeap=0x1f0000) returned 1 [0297.446] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1027b233, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1027b233, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1027b233, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1868, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="PE03668_.WMF", cAlternateFileName="")) returned 1 [0297.446] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260590 [0297.446] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211f20 [0297.447] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0297.447] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211f20 | out: hHeap=0x1f0000) returned 1 [0297.447] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0297.447] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260590 | out: hHeap=0x1f0000) returned 1 [0297.448] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03668_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03668_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0297.448] GetFileType (hFile=0x1e0) returned 0x1 [0297.448] CloseHandle (hObject=0x1e0) returned 1 [0297.449] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0297.449] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03668_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03668_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1027b233, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1027b233, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1027b233, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1868)) returned 1 [0297.449] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0297.449] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0297.449] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03668_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03668_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1027b233, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1027b233, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1027b233, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1868)) returned 1 [0297.449] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0297.449] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0297.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0297.450] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101e2909, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9fc, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="PE03731_.WMF", cAlternateFileName="")) returned 1 [0297.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260838 [0297.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211a58 [0297.450] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2300c8 [0297.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211a58 | out: hHeap=0x1f0000) returned 1 [0297.450] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0297.451] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260838 | out: hHeap=0x1f0000) returned 1 [0297.451] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03731_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03731_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0297.452] GetFileType (hFile=0x1e0) returned 0x1 [0297.453] CloseHandle (hObject=0x1e0) returned 1 [0297.453] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220d88 [0297.453] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03731_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03731_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101e2909, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9fc)) returned 1 [0297.453] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220d88 | out: hHeap=0x1f0000) returned 1 [0297.453] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0297.453] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03731_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03731_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101e2909, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9fc)) returned 1 [0297.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0297.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2211b0 [0297.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2211b0 | out: hHeap=0x1f0000) returned 1 [0297.454] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101e2909, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x78a, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="PE03795_.WMF", cAlternateFileName="")) returned 1 [0297.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260608 [0297.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212250 [0297.454] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0297.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212250 | out: hHeap=0x1f0000) returned 1 [0297.454] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2300c8 | out: hHeap=0x1f0000) returned 1 [0297.455] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260608 | out: hHeap=0x1f0000) returned 1 [0297.456] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03795_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03795_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0297.457] GetFileType (hFile=0x1e0) returned 0x1 [0297.457] CloseHandle (hObject=0x1e0) returned 1 [0297.458] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0297.458] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03795_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03795_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101e2909, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x78a)) returned 1 [0297.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0297.458] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2217a0 [0297.458] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03795_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03795_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101e2909, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x78a)) returned 1 [0297.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2217a0 | out: hHeap=0x1f0000) returned 1 [0297.458] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220c58 [0297.458] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220c58 | out: hHeap=0x1f0000) returned 1 [0297.459] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101bc6d0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1020, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="PE04050_.WMF", cAlternateFileName="")) returned 1 [0297.459] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260770 [0297.459] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212690 [0297.459] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fa88 [0297.459] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212690 | out: hHeap=0x1f0000) returned 1 [0297.459] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0297.459] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0297.460] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE04050_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe04050_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0297.460] GetFileType (hFile=0x1e0) returned 0x1 [0297.461] CloseHandle (hObject=0x1e0) returned 1 [0297.461] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221708 [0297.461] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE04050_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe04050_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101bc6d0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1020)) returned 1 [0297.462] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221708 | out: hHeap=0x1f0000) returned 1 [0297.462] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2214a8 [0297.462] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE04050_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe04050_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101bc6d0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1020)) returned 1 [0297.462] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2214a8 | out: hHeap=0x1f0000) returned 1 [0297.462] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220f50 [0297.462] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220f50 | out: hHeap=0x1f0000) returned 1 [0297.462] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101bc6d0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x37f8, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="PE05665_.WMF", cAlternateFileName="")) returned 1 [0297.462] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0297.462] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2129c0 [0297.462] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f9c0 [0297.462] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2129c0 | out: hHeap=0x1f0000) returned 1 [0297.462] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fa88 | out: hHeap=0x1f0000) returned 1 [0297.463] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0297.463] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05665_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe05665_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0297.464] GetFileType (hFile=0x1e0) returned 0x1 [0297.464] CloseHandle (hObject=0x1e0) returned 1 [0297.464] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221118 [0297.465] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05665_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe05665_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101bc6d0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x37f8)) returned 1 [0297.465] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221118 | out: hHeap=0x1f0000) returned 1 [0297.465] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2215d8 [0297.465] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05665_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe05665_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101bc6d0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x37f8)) returned 1 [0297.465] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2215d8 | out: hHeap=0x1f0000) returned 1 [0297.465] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221b30 [0297.465] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221b30 | out: hHeap=0x1f0000) returned 1 [0297.465] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101e2909, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x167c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="PE05710_.WMF", cAlternateFileName="")) returned 1 [0297.465] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260770 [0297.466] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211bf0 [0297.466] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f830 [0297.466] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211bf0 | out: hHeap=0x1f0000) returned 1 [0297.466] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f9c0 | out: hHeap=0x1f0000) returned 1 [0297.466] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0297.466] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05710_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe05710_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0297.467] GetFileType (hFile=0x1e0) returned 0x1 [0297.467] CloseHandle (hObject=0x1e0) returned 1 [0297.468] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0297.468] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05710_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe05710_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101e2909, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x167c)) returned 1 [0297.468] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0297.468] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221670 [0297.468] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05710_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe05710_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101e2909, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x167c)) returned 1 [0297.468] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221670 | out: hHeap=0x1f0000) returned 1 [0297.468] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221968 [0297.469] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221968 | out: hHeap=0x1f0000) returned 1 [0297.469] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101e2909, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x608, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="PE05869_.WMF", cAlternateFileName="")) returned 1 [0297.469] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260770 [0297.469] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2129c0 [0297.469] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fb50 [0297.469] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2129c0 | out: hHeap=0x1f0000) returned 1 [0297.469] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f830 | out: hHeap=0x1f0000) returned 1 [0297.469] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0297.470] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05869_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe05869_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0297.471] GetFileType (hFile=0x1e0) returned 0x1 [0297.472] CloseHandle (hObject=0x1e0) returned 1 [0297.472] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0297.472] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05869_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe05869_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101e2909, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x608)) returned 1 [0297.472] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0297.472] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221a98 [0297.473] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05869_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe05869_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101e2909, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x608)) returned 1 [0297.473] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221a98 | out: hHeap=0x1f0000) returned 1 [0297.473] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220eb8 [0297.473] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220eb8 | out: hHeap=0x1f0000) returned 1 [0297.473] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101e2909, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101e2909, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101e2909, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x634, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="PE05870_.WMF", cAlternateFileName="")) returned 1 [0297.473] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260770 [0297.473] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x2120b8 [0297.473] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x2303e8 [0297.473] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2120b8 | out: hHeap=0x1f0000) returned 1 [0297.473] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fb50 | out: hHeap=0x1f0000) returned 1 [0297.473] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0297.474] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05870_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe05870_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0297.474] GetFileType (hFile=0x1e0) returned 0x1 [0297.475] CloseHandle (hObject=0x1e0) returned 1 [0297.475] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221838 [0297.475] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05870_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe05870_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101e2909, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101e2909, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101e2909, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x634)) returned 1 [0297.476] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221838 | out: hHeap=0x1f0000) returned 1 [0297.476] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221540 [0297.476] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05870_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe05870_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101e2909, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101e2909, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101e2909, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x634)) returned 1 [0297.476] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221540 | out: hHeap=0x1f0000) returned 1 [0297.476] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0297.476] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0297.476] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101e2909, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101e2909, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101e2909, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7fce, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="PE05930_.WMF", cAlternateFileName="")) returned 1 [0297.476] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260770 [0297.476] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211e10 [0297.476] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f8f8 [0297.477] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e10 | out: hHeap=0x1f0000) returned 1 [0297.477] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2303e8 | out: hHeap=0x1f0000) returned 1 [0297.477] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260770 | out: hHeap=0x1f0000) returned 1 [0297.477] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05930_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe05930_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0297.478] GetFileType (hFile=0x1e0) returned 0x1 [0297.479] CloseHandle (hObject=0x1e0) returned 1 [0297.479] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221248 [0297.479] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05930_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe05930_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101e2909, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101e2909, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101e2909, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7fce)) returned 1 [0297.479] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221248 | out: hHeap=0x1f0000) returned 1 [0297.479] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221410 [0297.479] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05930_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe05930_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101e2909, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101e2909, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101e2909, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7fce)) returned 1 [0297.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221410 | out: hHeap=0x1f0000) returned 1 [0297.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x221378 [0297.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221378 | out: hHeap=0x1f0000) returned 1 [0297.480] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101bc6d0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x121c, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="PE06049_.WMF", cAlternateFileName="")) returned 1 [0297.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260810 [0297.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x212938 [0297.480] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22fe70 [0297.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x212938 | out: hHeap=0x1f0000) returned 1 [0297.480] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f8f8 | out: hHeap=0x1f0000) returned 1 [0297.481] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260810 | out: hHeap=0x1f0000) returned 1 [0297.481] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE06049_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe06049_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x259dd08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0297.676] GetFileType (hFile=0x1c0) returned 0x1 [0297.677] CloseHandle (hObject=0x1c0) returned 1 [0297.677] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220e20 [0297.677] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE06049_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe06049_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dd9c | out: lpFileInformation=0x259dd9c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101bc6d0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x121c)) returned 1 [0297.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220e20 | out: hHeap=0x1f0000) returned 1 [0297.678] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x220cf0 [0297.678] GetFileAttributesExW (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE06049_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe06049_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x259dda4 | out: lpFileInformation=0x259dda4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101bc6d0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x121c)) returned 1 [0297.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x220cf0 | out: hHeap=0x1f0000) returned 1 [0297.678] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x2212e0 [0297.678] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2212e0 | out: hHeap=0x1f0000) returned 1 [0297.678] FindNextFileW (in: hFindFile=0x24eac0, lpFindFileData=0x259dff8 | out: lpFindFileData=0x259dff8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101e2909, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4048, dwReserved0=0x259e4bc, dwReserved1=0x3, cFileName="PE06450_.WMF", cAlternateFileName="")) returned 1 [0297.678] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x260978 [0297.678] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x211d00 [0297.679] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230190 [0297.679] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d00 | out: hHeap=0x1f0000) returned 1 [0297.679] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22fe70 | out: hHeap=0x1f0000) returned 1 [0297.679] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260978 | out: hHeap=0x1f0000) returned 1 Thread: id = 152 os_tid = 0x1314 [0193.237] GetLastError () returned 0x57 [0193.237] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x364) returned 0x24f000 [0193.237] SetLastError (dwErrCode=0x57) [0193.237] GetCurrentThreadId () returned 0x1314 [0193.237] GetCurrentThreadId () returned 0x1314 [0193.237] RtlWakeConditionVariable (in: ConditionVariable=0x2067dc | out: ConditionVariable=0x2067dc) [0193.237] FindFirstFileW (in: lpFileName="C:\\\\*", lpFindFileData=0x287fb98 | out: lpFindFileData=0x287fb98*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffffff, dwReserved1=0x773e8939, cFileName="$GetCurrent", cAlternateFileName="$GETCU~1")) returned 0x214690 [0193.238] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b638 [0193.238] lstrcmpW (lpString1="$GetCurrent", lpString2=".") returned -1 [0193.238] lstrcmpW (lpString1="$GetCurrent", lpString2="..") returned -1 [0193.238] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x204cd0 [0193.238] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b4a8 [0193.238] FindNextFileW (in: hFindFile=0x214690, lpFindFileData=0x287fb98 | out: lpFindFileData=0x287fb98*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffffff, dwReserved1=0x773e8939, cFileName="$Recycle.Bin", cAlternateFileName="")) returned 1 [0193.238] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b4d0 [0193.238] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0193.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b638 | out: hHeap=0x1f0000) returned 1 [0193.238] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b4d0 | out: hHeap=0x1f0000) returned 1 [0193.238] lstrcmpW (lpString1="$Recycle.Bin", lpString2=".") returned -1 [0193.239] lstrcmpW (lpString1="$Recycle.Bin", lpString2="..") returned -1 [0193.239] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228188 [0193.239] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2281c0 [0193.239] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204cd0 | out: hHeap=0x1f0000) returned 1 [0193.239] FindNextFileW (in: hFindFile=0x214690, lpFindFileData=0x287fb98 | out: lpFindFileData=0x287fb98*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x85776261, ftCreationTime.dwHighDateTime=0x1d3276f, ftLastAccessTime.dwLowDateTime=0x85776261, ftLastAccessTime.dwHighDateTime=0x1d3276f, ftLastWriteTime.dwLowDateTime=0x85776261, ftLastWriteTime.dwHighDateTime=0x1d3276f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffffff, dwReserved1=0x773e8939, cFileName="$WINRE_BACKUP_PARTITION.MARKER", cAlternateFileName="$WINRE~1.MAR")) returned 1 [0193.239] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2223b8 [0193.239] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239458 [0193.239] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0193.239] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2223b8 | out: hHeap=0x1f0000) returned 1 [0193.239] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x38) returned 0x214510 [0193.239] CreateFileW (lpFileName="C:\\\\$WINRE_BACKUP_PARTITION.MARKER" (normalized: "c:\\$winre_backup_partition.marker"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x287f8a8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0193.240] GetFileType (hFile=0x218) returned 0x1 [0193.240] CloseHandle (hObject=0x218) returned 1 [0193.240] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239980 [0193.240] GetFileAttributesExW (in: lpFileName="C:\\\\$WINRE_BACKUP_PARTITION.MARKER" (normalized: "c:\\$winre_backup_partition.marker"), fInfoLevelId=0x0, lpFileInformation=0x287f93c | out: lpFileInformation=0x287f93c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x85776261, ftCreationTime.dwHighDateTime=0x1d3276f, ftLastAccessTime.dwLowDateTime=0x85776261, ftLastAccessTime.dwHighDateTime=0x1d3276f, ftLastWriteTime.dwLowDateTime=0x85776261, ftLastWriteTime.dwHighDateTime=0x1d3276f, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0193.240] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239980 | out: hHeap=0x1f0000) returned 1 [0193.240] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2394b0 [0193.240] GetFileAttributesExW (in: lpFileName="C:\\\\$WINRE_BACKUP_PARTITION.MARKER" (normalized: "c:\\$winre_backup_partition.marker"), fInfoLevelId=0x0, lpFileInformation=0x287f944 | out: lpFileInformation=0x287f944*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x85776261, ftCreationTime.dwHighDateTime=0x1d3276f, ftLastAccessTime.dwLowDateTime=0x85776261, ftLastAccessTime.dwHighDateTime=0x1d3276f, ftLastWriteTime.dwLowDateTime=0x85776261, ftLastWriteTime.dwHighDateTime=0x1d3276f, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0193.241] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2394b0 | out: hHeap=0x1f0000) returned 1 [0193.241] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239820 [0193.241] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239820 | out: hHeap=0x1f0000) returned 1 [0193.241] GetLastError () returned 0x0 [0193.241] SetLastError (dwErrCode=0x0) [0193.241] AreFileApisANSI () returned 1 [0193.241] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe5843c, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0193.241] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe5843c, cbMultiByte=4, lpWideCharStr=0x287faa4, cchWideChar=4 | out: lpWideCharStr=".mdf") returned 4 [0193.241] GetLastError () returned 0x0 [0193.241] SetLastError (dwErrCode=0x0) [0193.241] AreFileApisANSI () returned 1 [0193.241] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58444, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0193.241] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58444, cbMultiByte=4, lpWideCharStr=0x287fabc, cchWideChar=4 | out: lpWideCharStr=".pst") returned 4 [0193.241] GetLastError () returned 0x0 [0193.241] SetLastError (dwErrCode=0x0) [0193.241] AreFileApisANSI () returned 1 [0193.241] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe5844c, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0193.241] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe5844c, cbMultiByte=4, lpWideCharStr=0x287fad4, cchWideChar=4 | out: lpWideCharStr=".bak") returned 4 [0193.241] GetLastError () returned 0x0 [0193.241] SetLastError (dwErrCode=0x0) [0193.241] AreFileApisANSI () returned 1 [0193.242] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58454, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0193.242] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58454, cbMultiByte=4, lpWideCharStr=0x287faec, cchWideChar=4 | out: lpWideCharStr=".tib") returned 4 [0193.242] GetLastError () returned 0x0 [0193.242] SetLastError (dwErrCode=0x0) [0193.242] AreFileApisANSI () returned 1 [0193.242] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58444, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0193.242] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58444, cbMultiByte=4, lpWideCharStr=0x287fb04, cchWideChar=4 | out: lpWideCharStr=".pst") returned 4 [0193.242] GetLastError () returned 0x0 [0193.242] SetLastError (dwErrCode=0x0) [0193.242] AreFileApisANSI () returned 1 [0193.242] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe5845c, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0193.242] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe5845c, cbMultiByte=4, lpWideCharStr=0x287fb1c, cchWideChar=4 | out: lpWideCharStr=".DBF") returned 4 [0193.242] FindNextFileW (in: hFindFile=0x214690, lpFindFileData=0x287fb98 | out: lpFindFileData=0x287fb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf39a4e7e, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf74cd515, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffffff, dwReserved1=0x773e8939, cFileName="588bce7c90097ed212", cAlternateFileName="588BCE~1")) returned 1 [0193.242] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ee8 [0193.242] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239458 | out: hHeap=0x1f0000) returned 1 [0193.243] lstrcmpW (lpString1="588bce7c90097ed212", lpString2=".") returned 1 [0193.243] lstrcmpW (lpString1="588bce7c90097ed212", lpString2="..") returned 1 [0193.243] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x48) returned 0x226238 [0193.243] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2281f8 [0193.243] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228188 | out: hHeap=0x1f0000) returned 1 [0193.243] FindNextFileW (in: hFindFile=0x214690, lpFindFileData=0x287fb98 | out: lpFindFileData=0x287fb98*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6fa258, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6fa258, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffffff, dwReserved1=0x773e8939, cFileName="Boot", cAlternateFileName="")) returned 1 [0193.243] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b548 [0193.243] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ee8 | out: hHeap=0x1f0000) returned 1 [0193.243] lstrcmpW (lpString1="Boot", lpString2=".") returned 1 [0193.243] lstrcmpW (lpString1="Boot", lpString2="..") returned 1 [0193.243] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a9d8 [0193.243] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b700 [0193.243] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226238 | out: hHeap=0x1f0000) returned 1 [0193.243] FindNextFileW (in: hFindFile=0x214690, lpFindFileData=0x287fb98 | out: lpFindFileData=0x287fb98*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xe47a48a8, ftCreationTime.dwHighDateTime=0x1d112ea, ftLastAccessTime.dwLowDateTime=0xef6fa258, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfb90936b, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0x607da, dwReserved0=0xffffffff, dwReserved1=0x773e8939, cFileName="bootmgr", cAlternateFileName="")) returned 1 [0193.244] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b5e8 [0193.244] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b548 | out: hHeap=0x1f0000) returned 1 [0193.244] CreateFileW (lpFileName="C:\\\\bootmgr" (normalized: "c:\\bootmgr"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x287f8a8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0193.244] GetLastError () returned 0x5 [0193.244] GetLastError () returned 0x5 [0193.244] SetLastError (dwErrCode=0x5) [0193.245] GetLastError () returned 0x5 [0193.245] SetLastError (dwErrCode=0x5) [0193.245] GetLastError () returned 0x5 [0193.245] SetLastError (dwErrCode=0x5) [0193.245] FindNextFileW (in: hFindFile=0x214690, lpFindFileData=0x287fb98 | out: lpFindFileData=0x287fb98*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xe5533ee0, ftCreationTime.dwHighDateTime=0x1d112ea, ftLastAccessTime.dwLowDateTime=0xef9d0a0c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x1, dwReserved0=0xffffffff, dwReserved1=0x773e8939, cFileName="BOOTNXT", cAlternateFileName="")) returned 1 [0193.245] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b6b0 [0193.245] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b5e8 | out: hHeap=0x1f0000) returned 1 [0193.245] CreateFileW (lpFileName="C:\\\\BOOTNXT" (normalized: "c:\\bootnxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x287f8a8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0193.246] GetFileType (hFile=0x218) returned 0x1 [0193.246] CloseHandle (hObject=0x218) returned 1 [0193.246] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b6d8 [0193.246] GetFileAttributesExW (in: lpFileName="C:\\\\BOOTNXT" (normalized: "c:\\bootnxt"), fInfoLevelId=0x0, lpFileInformation=0x287f93c | out: lpFileInformation=0x287f93c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xe5533ee0, ftCreationTime.dwHighDateTime=0x1d112ea, ftLastAccessTime.dwLowDateTime=0xef9d0a0c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x1)) returned 1 [0193.246] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b6d8 | out: hHeap=0x1f0000) returned 1 [0193.246] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b728 [0193.246] GetFileAttributesExW (in: lpFileName="C:\\\\BOOTNXT" (normalized: "c:\\bootnxt"), fInfoLevelId=0x0, lpFileInformation=0x287f944 | out: lpFileInformation=0x287f944*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xe5533ee0, ftCreationTime.dwHighDateTime=0x1d112ea, ftLastAccessTime.dwLowDateTime=0xef9d0a0c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x1)) returned 1 [0193.247] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b728 | out: hHeap=0x1f0000) returned 1 [0193.247] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b750 [0193.247] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b750 | out: hHeap=0x1f0000) returned 1 [0193.247] GetLastError () returned 0x0 [0193.247] SetLastError (dwErrCode=0x0) [0193.247] AreFileApisANSI () returned 1 [0193.247] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe5843c, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0193.247] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe5843c, cbMultiByte=4, lpWideCharStr=0x287faa4, cchWideChar=4 | out: lpWideCharStr=".mdf") returned 4 [0193.247] GetLastError () returned 0x0 [0193.247] SetLastError (dwErrCode=0x0) [0193.247] AreFileApisANSI () returned 1 [0193.247] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58444, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0193.247] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58444, cbMultiByte=4, lpWideCharStr=0x287fabc, cchWideChar=4 | out: lpWideCharStr=".pst") returned 4 [0193.248] GetLastError () returned 0x0 [0193.248] SetLastError (dwErrCode=0x0) [0193.248] AreFileApisANSI () returned 1 [0193.248] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe5844c, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0193.248] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe5844c, cbMultiByte=4, lpWideCharStr=0x287fad4, cchWideChar=4 | out: lpWideCharStr=".bak") returned 4 [0193.248] GetLastError () returned 0x0 [0193.248] SetLastError (dwErrCode=0x0) [0193.248] AreFileApisANSI () returned 1 [0193.248] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58454, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0193.248] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58454, cbMultiByte=4, lpWideCharStr=0x287faec, cchWideChar=4 | out: lpWideCharStr=".tib") returned 4 [0193.248] GetLastError () returned 0x0 [0193.248] SetLastError (dwErrCode=0x0) [0193.248] AreFileApisANSI () returned 1 [0193.248] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58444, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0193.248] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58444, cbMultiByte=4, lpWideCharStr=0x287fb04, cchWideChar=4 | out: lpWideCharStr=".pst") returned 4 [0193.248] GetLastError () returned 0x0 [0193.248] SetLastError (dwErrCode=0x0) [0193.249] AreFileApisANSI () returned 1 [0193.249] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe5845c, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0193.249] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe5845c, cbMultiByte=4, lpWideCharStr=0x287fb1c, cchWideChar=4 | out: lpWideCharStr=".DBF") returned 4 [0193.249] FindNextFileW (in: hFindFile=0x214690, lpFindFileData=0x287fb98 | out: lpFindFileData=0x287fb98*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xc4ee267e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4ee267e, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xf1c63cdd, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0xffffffff, dwReserved1=0x773e8939, cFileName="BOOTSECT.BAK", cAlternateFileName="")) returned 1 [0193.249] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b6d8 [0193.249] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228188 [0193.249] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b6b0 | out: hHeap=0x1f0000) returned 1 [0193.249] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b6d8 | out: hHeap=0x1f0000) returned 1 [0193.561] CreateFileW (lpFileName="C:\\\\BOOTSECT.BAK" (normalized: "c:\\bootsect.bak"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x287f8a8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0193.593] GetLastError () returned 0x5 [0193.593] GetLastError () returned 0x5 [0193.593] SetLastError (dwErrCode=0x5) [0193.593] GetLastError () returned 0x5 [0193.593] SetLastError (dwErrCode=0x5) [0193.593] GetLastError () returned 0x5 [0193.593] SetLastError (dwErrCode=0x5) [0193.593] FindNextFileW (in: hFindFile=0x214690, lpFindFileData=0x287fb98 | out: lpFindFileData=0x287fb98*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xe99f01ae, ftCreationTime.dwHighDateTime=0x1d32708, ftLastAccessTime.dwLowDateTime=0xe99f01ae, ftLastAccessTime.dwHighDateTime=0x1d32708, ftLastWriteTime.dwLowDateTime=0xe99f01ae, ftLastWriteTime.dwHighDateTime=0x1d32708, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x773e8939, cFileName="Documents and Settings", cAlternateFileName="DOCUME~1")) returned 1 [0193.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2280e0 [0193.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221ea8 [0193.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228188 | out: hHeap=0x1f0000) returned 1 [0193.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2280e0 | out: hHeap=0x1f0000) returned 1 [0193.594] lstrcmpW (lpString1="Documents and Settings", lpString2=".") returned 1 [0193.594] lstrcmpW (lpString1="Documents and Settings", lpString2="..") returned 1 [0193.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x24a990 [0193.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221c68 [0193.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a9d8 | out: hHeap=0x1f0000) returned 1 [0193.594] FindNextFileW (in: hFindFile=0x214690, lpFindFileData=0x287fb98 | out: lpFindFileData=0x287fb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc1969407, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x773e8939, cFileName="ESD", cAlternateFileName="")) returned 1 [0193.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221ea8 | out: hHeap=0x1f0000) returned 1 [0193.594] lstrcmpW (lpString1="ESD", lpString2=".") returned 1 [0193.594] lstrcmpW (lpString1="ESD", lpString2="..") returned 1 [0193.594] FindNextFileW (in: hFindFile=0x214690, lpFindFileData=0x287fb98 | out: lpFindFileData=0x287fb98*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x7ef2dddf, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x7ef2dddf, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x96715303, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x332fe000, dwReserved0=0xa0000003, dwReserved1=0x773e8939, cFileName="hiberfil.sys", cAlternateFileName="")) returned 1 [0193.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b6d8 [0193.594] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2280e0 [0193.594] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b6d8 | out: hHeap=0x1f0000) returned 1 [0193.594] CreateFileW (lpFileName="C:\\\\hiberfil.sys" (normalized: "c:\\hiberfil.sys"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x287f8a8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0193.595] GetLastError () returned 0x20 [0193.595] GetLastError () returned 0x20 [0193.595] SetLastError (dwErrCode=0x20) [0193.595] GetLastError () returned 0x20 [0193.595] SetLastError (dwErrCode=0x20) [0193.595] GetLastError () returned 0x20 [0193.595] SetLastError (dwErrCode=0x20) [0193.595] FindNextFileW (in: hFindFile=0x214690, lpFindFileData=0x287fb98 | out: lpFindFileData=0x287fb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf1d773, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xa03727f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xfd9ec80, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x773e8939, cFileName="Logs", cAlternateFileName="")) returned 1 [0193.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b548 [0193.595] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2280e0 | out: hHeap=0x1f0000) returned 1 [0193.595] lstrcmpW (lpString1="Logs", lpString2=".") returned 1 [0193.595] lstrcmpW (lpString1="Logs", lpString2="..") returned 1 [0193.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd8) returned 0x24fc30 [0193.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b6d8 [0193.595] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24a990 | out: hHeap=0x1f0000) returned 1 [0193.595] FindNextFileW (in: hFindFile=0x214690, lpFindFileData=0x287fb98 | out: lpFindFileData=0x287fb98*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6e97b025, ftCreationTime.dwHighDateTime=0x1d3275c, ftLastAccessTime.dwLowDateTime=0x6e97b025, ftLastAccessTime.dwHighDateTime=0x1d3275c, ftLastWriteTime.dwLowDateTime=0x98f4eb01, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x28000000, dwReserved0=0xa0000003, dwReserved1=0x773e8939, cFileName="pagefile.sys", cAlternateFileName="")) returned 1 [0193.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b778 [0193.595] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2280e0 [0193.596] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b548 | out: hHeap=0x1f0000) returned 1 [0193.596] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b778 | out: hHeap=0x1f0000) returned 1 [0193.596] CreateFileW (lpFileName="C:\\\\pagefile.sys" (normalized: "c:\\pagefile.sys"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x287f8a8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0193.596] GetLastError () returned 0x20 [0193.596] GetLastError () returned 0x20 [0193.596] SetLastError (dwErrCode=0x20) [0193.597] GetLastError () returned 0x20 [0193.597] SetLastError (dwErrCode=0x20) [0193.597] GetLastError () returned 0x20 [0193.597] SetLastError (dwErrCode=0x20) [0193.597] FindNextFileW (in: hFindFile=0x214690, lpFindFileData=0x287fb98 | out: lpFindFileData=0x287fb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa03748ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17b3dd09, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x773e8939, cFileName="PerfLogs", cAlternateFileName="")) returned 1 [0193.597] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b728 [0193.597] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2280e0 | out: hHeap=0x1f0000) returned 1 [0193.597] lstrcmpW (lpString1="PerfLogs", lpString2=".") returned 1 [0193.597] lstrcmpW (lpString1="PerfLogs", lpString2="..") returned 1 [0193.597] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b390 [0193.597] FindNextFileW (in: hFindFile=0x214690, lpFindFileData=0x287fb98 | out: lpFindFileData=0x287fb98*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3ac6234, ftLastAccessTime.dwHighDateTime=0x1d5c65b, ftLastWriteTime.dwLowDateTime=0x3ac6234, ftLastWriteTime.dwHighDateTime=0x1d5c65b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x773e8939, cFileName="Program Files", cAlternateFileName="PROGRA~1")) returned 1 [0193.597] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b750 [0193.597] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2280e0 [0193.598] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b728 | out: hHeap=0x1f0000) returned 1 [0193.598] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b750 | out: hHeap=0x1f0000) returned 1 [0193.598] lstrcmpW (lpString1="Program Files", lpString2=".") returned 1 [0193.598] lstrcmpW (lpString1="Program Files", lpString2="..") returned 1 [0193.598] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228188 [0193.598] FindNextFileW (in: hFindFile=0x214690, lpFindFileData=0x287fb98 | out: lpFindFileData=0x287fb98*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe7511354, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe7511354, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x773e8939, cFileName="Program Files (x86)", cAlternateFileName="PROGRA~2")) returned 1 [0193.598] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ba0 [0193.598] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2280e0 | out: hHeap=0x1f0000) returned 1 [0193.598] lstrcmpW (lpString1="Program Files (x86)", lpString2=".") returned 1 [0193.598] lstrcmpW (lpString1="Program Files (x86)", lpString2="..") returned 1 [0193.598] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x138) returned 0x260188 [0193.598] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2280e0 [0193.598] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24fc30 | out: hHeap=0x1f0000) returned 1 [0193.598] FindNextFileW (in: hFindFile=0x214690, lpFindFileData=0x287fb98 | out: lpFindFileData=0x287fb98*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x450f4738, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x450f4738, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x773e8939, cFileName="ProgramData", cAlternateFileName="PROGRA~3")) returned 1 [0193.598] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b728 [0193.598] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ba0 | out: hHeap=0x1f0000) returned 1 [0193.598] lstrcmpW (lpString1="ProgramData", lpString2=".") returned 1 [0193.598] lstrcmpW (lpString1="ProgramData", lpString2="..") returned 1 [0193.598] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b548 [0193.598] FindNextFileW (in: hFindFile=0x214690, lpFindFileData=0x287fb98 | out: lpFindFileData=0x287fb98*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28e9c3a2, ftCreationTime.dwHighDateTime=0x1d32795, ftLastAccessTime.dwLowDateTime=0x1044dfc5, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x1044dfc5, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x773e8939, cFileName="Recovery", cAlternateFileName="")) returned 1 [0193.598] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b750 [0193.598] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b728 | out: hHeap=0x1f0000) returned 1 [0193.598] lstrcmpW (lpString1="Recovery", lpString2=".") returned 1 [0193.599] lstrcmpW (lpString1="Recovery", lpString2="..") returned 1 [0193.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b3b8 [0193.599] FindNextFileW (in: hFindFile=0x214690, lpFindFileData=0x287fb98 | out: lpFindFileData=0x287fb98*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6ead2556, ftCreationTime.dwHighDateTime=0x1d3275c, ftLastAccessTime.dwLowDateTime=0x6ead2556, ftLastAccessTime.dwHighDateTime=0x1d3275c, ftLastWriteTime.dwLowDateTime=0x98f74cd7, ftLastWriteTime.dwHighDateTime=0x1d5c65a, nFileSizeHigh=0x0, nFileSizeLow=0x10000000, dwReserved0=0xa0000003, dwReserved1=0x773e8939, cFileName="swapfile.sys", cAlternateFileName="")) returned 1 [0193.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b3e0 [0193.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ba0 [0193.599] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b750 | out: hHeap=0x1f0000) returned 1 [0193.599] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b3e0 | out: hHeap=0x1f0000) returned 1 [0193.599] CreateFileW (lpFileName="C:\\\\swapfile.sys" (normalized: "c:\\swapfile.sys"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x287f8a8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0193.599] GetLastError () returned 0x20 [0193.599] GetLastError () returned 0x20 [0193.599] SetLastError (dwErrCode=0x20) [0193.600] GetLastError () returned 0x20 [0193.600] SetLastError (dwErrCode=0x20) [0193.600] GetLastError () returned 0x20 [0193.600] SetLastError (dwErrCode=0x20) [0193.600] FindNextFileW (in: hFindFile=0x214690, lpFindFileData=0x287fb98 | out: lpFindFileData=0x287fb98*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x6e16f135, ftCreationTime.dwHighDateTime=0x1d3275c, ftLastAccessTime.dwLowDateTime=0xb1ff7ba5, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xb1ff7ba5, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x773e8939, cFileName="System Volume Information", cAlternateFileName="SYSTEM~1")) returned 1 [0193.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221cb0 [0193.600] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x227ba0 | out: hHeap=0x1f0000) returned 1 [0193.600] lstrcmpW (lpString1="System Volume Information", lpString2=".") returned 1 [0193.600] lstrcmpW (lpString1="System Volume Information", lpString2="..") returned 1 [0193.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221cf8 [0193.600] FindNextFileW (in: hFindFile=0x214690, lpFindFileData=0x287fb98 | out: lpFindFileData=0x287fb98*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x475bb883, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x475bb883, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x773e8939, cFileName="Users", cAlternateFileName="")) returned 1 [0193.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b2f0 [0193.601] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221cb0 | out: hHeap=0x1f0000) returned 1 [0193.601] lstrcmpW (lpString1="Users", lpString2=".") returned 1 [0193.601] lstrcmpW (lpString1="Users", lpString2="..") returned 1 [0193.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c8) returned 0x2602c8 [0193.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b728 [0193.601] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260188 | out: hHeap=0x1f0000) returned 1 [0193.601] FindNextFileW (in: hFindFile=0x214690, lpFindFileData=0x287fb98 | out: lpFindFileData=0x287fb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0xc838b81d, ftLastAccessTime.dwHighDateTime=0x1d41dc3, ftLastWriteTime.dwLowDateTime=0xc838b81d, ftLastWriteTime.dwHighDateTime=0x1d41dc3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x773e8939, cFileName="Windows", cAlternateFileName="")) returned 1 [0193.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b3e0 [0193.601] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b2f0 | out: hHeap=0x1f0000) returned 1 [0193.601] lstrcmpW (lpString1="Windows", lpString2=".") returned 1 [0193.601] lstrcmpW (lpString1="Windows", lpString2="..") returned 1 [0193.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b430 [0193.601] FindNextFileW (in: hFindFile=0x214690, lpFindFileData=0x287fb98 | out: lpFindFileData=0x287fb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea34fa37, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xccdc86a8, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xccdc86a8, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x773e8939, cFileName="Windows10Upgrade", cAlternateFileName="WINDOW~1")) returned 1 [0193.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227ba0 [0193.601] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b3e0 | out: hHeap=0x1f0000) returned 1 [0193.601] lstrcmpW (lpString1="Windows10Upgrade", lpString2=".") returned 1 [0193.601] lstrcmpW (lpString1="Windows10Upgrade", lpString2="..") returned 1 [0193.601] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x227bd8 [0193.601] FindNextFileW (in: hFindFile=0x214690, lpFindFileData=0x287fb98 | out: lpFindFileData=0x287fb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea34fa37, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xccdc86a8, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xccdc86a8, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x773e8939, cFileName="Windows10Upgrade", cAlternateFileName="WINDOW~1")) returned 0 [0193.602] FindClose (in: hFindFile=0x214690 | out: hFindFile=0x214690) returned 1 [0193.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221d40 [0193.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b750 [0193.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e9c0 [0193.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282d8 [0193.602] FindFirstFileW (in: lpFileName="C:\\\\$GetCurrent\\*", lpFindFileData=0x287f6d4 | out: lpFindFileData=0x287f6d4*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000043, cFileName=".", cAlternateFileName="")) returned 0x214550 [0193.602] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228310 [0193.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282d8 | out: hHeap=0x1f0000) returned 1 [0193.602] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0193.603] FindNextFileW (in: hFindFile=0x214550, lpFindFileData=0x287f6d4 | out: lpFindFileData=0x287f6d4*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000043, cFileName="..", cAlternateFileName="")) returned 1 [0193.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282d8 [0193.603] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228310 | out: hHeap=0x1f0000) returned 1 [0193.603] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0193.603] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0193.603] FindNextFileW (in: hFindFile=0x214550, lpFindFileData=0x287f6d4 | out: lpFindFileData=0x287f6d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0xbc67f530, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xbc67f530, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000043, cFileName="Logs", cAlternateFileName="")) returned 1 [0193.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282a0 [0193.603] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282d8 | out: hHeap=0x1f0000) returned 1 [0193.603] lstrcmpW (lpString1="Logs", lpString2=".") returned 1 [0193.603] lstrcmpW (lpString1="Logs", lpString2="..") returned 1 [0193.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x2052f0 [0193.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282d8 [0193.603] FindNextFileW (in: hFindFile=0x214550, lpFindFileData=0x287f6d4 | out: lpFindFileData=0x287f6d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000043, cFileName="SafeOS", cAlternateFileName="")) returned 1 [0193.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x228310 [0193.603] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0193.603] lstrcmpW (lpString1="SafeOS", lpString2=".") returned 1 [0193.603] lstrcmpW (lpString1="SafeOS", lpString2="..") returned 1 [0193.603] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x2282a0 [0193.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cf38 [0193.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2052f0 | out: hHeap=0x1f0000) returned 1 [0193.604] FindNextFileW (in: hFindFile=0x214550, lpFindFileData=0x287f6d4 | out: lpFindFileData=0x287f6d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000043, cFileName="SafeOS", cAlternateFileName="")) returned 0 [0193.604] FindClose (in: hFindFile=0x214550 | out: hFindFile=0x214550) returned 1 [0193.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221cb0 [0193.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b3e0 [0193.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f020 [0193.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d248 [0193.604] FindFirstFileW (in: lpFileName="C:\\\\$GetCurrent\\Logs\\*", lpFindFileData=0x287f210 | out: lpFindFileData=0x287f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0xbc67f530, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xbc84f202, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x287f6d4, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x214150 [0193.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cfa8 [0193.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d248 | out: hHeap=0x1f0000) returned 1 [0193.604] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0193.604] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x287f210 | out: lpFindFileData=0x287f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0xbc67f530, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xbc84f202, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x287f6d4, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0193.604] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d248 [0193.604] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cfa8 | out: hHeap=0x1f0000) returned 1 [0193.605] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0193.605] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0193.605] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x287f210 | out: lpFindFileData=0x287f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc17291e, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xbc17291e, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xbc677ee9, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xa7c5, dwReserved0=0x287f6d4, dwReserved1=0x0, cFileName="downlevel_2017_09_07_02_02_39_766.log.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="DOWNLE~1.ODV")) returned 1 [0193.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x2007c8 [0193.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cfa8 [0193.605] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x24fc30 [0193.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cfa8 | out: hHeap=0x1f0000) returned 1 [0193.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d248 | out: hHeap=0x1f0000) returned 1 [0193.605] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2007c8 | out: hHeap=0x1f0000) returned 1 [0193.605] CreateFileW (lpFileName="C:\\\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\$getcurrent\\logs\\downlevel_2017_09_07_02_02_39_766.log.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x287ef20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8 [0193.606] GetFileType (hFile=0x1c8) returned 0x1 [0193.606] CloseHandle (hObject=0x1c8) returned 1 [0193.606] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x260188 [0193.607] GetFileAttributesExW (in: lpFileName="C:\\\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\$getcurrent\\logs\\downlevel_2017_09_07_02_02_39_766.log.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x287efb4 | out: lpFileInformation=0x287efb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc17291e, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xbc17291e, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xbc677ee9, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xa7c5)) returned 1 [0193.607] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260188 | out: hHeap=0x1f0000) returned 1 [0193.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x260188 [0193.607] GetFileAttributesExW (in: lpFileName="C:\\\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\$getcurrent\\logs\\downlevel_2017_09_07_02_02_39_766.log.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x287efbc | out: lpFileInformation=0x287efbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc17291e, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xbc17291e, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xbc677ee9, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0xa7c5)) returned 1 [0193.607] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260188 | out: hHeap=0x1f0000) returned 1 [0193.607] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x100) returned 0x260188 [0193.607] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260188 | out: hHeap=0x1f0000) returned 1 [0193.607] GetLastError () returned 0x0 [0193.608] SetLastError (dwErrCode=0x0) [0193.608] AreFileApisANSI () returned 1 [0193.608] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe5843c, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0193.608] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe5843c, cbMultiByte=4, lpWideCharStr=0x287f11c, cchWideChar=4 | out: lpWideCharStr=".mdf") returned 4 [0193.608] GetLastError () returned 0x0 [0193.608] SetLastError (dwErrCode=0x0) [0193.608] AreFileApisANSI () returned 1 [0193.608] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58444, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0193.608] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58444, cbMultiByte=4, lpWideCharStr=0x287f134, cchWideChar=4 | out: lpWideCharStr=".pst") returned 4 [0193.609] GetLastError () returned 0x0 [0193.609] SetLastError (dwErrCode=0x0) [0193.609] AreFileApisANSI () returned 1 [0193.609] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe5844c, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0193.609] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe5844c, cbMultiByte=4, lpWideCharStr=0x287f14c, cchWideChar=4 | out: lpWideCharStr=".bak") returned 4 [0193.609] GetLastError () returned 0x0 [0193.609] SetLastError (dwErrCode=0x0) [0193.609] AreFileApisANSI () returned 1 [0193.609] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58454, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0193.609] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58454, cbMultiByte=4, lpWideCharStr=0x287f164, cchWideChar=4 | out: lpWideCharStr=".tib") returned 4 [0193.609] GetLastError () returned 0x0 [0193.610] SetLastError (dwErrCode=0x0) [0193.610] AreFileApisANSI () returned 1 [0193.610] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58444, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0193.611] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58444, cbMultiByte=4, lpWideCharStr=0x287f17c, cchWideChar=4 | out: lpWideCharStr=".pst") returned 4 [0193.611] GetLastError () returned 0x0 [0193.611] SetLastError (dwErrCode=0x0) [0193.611] AreFileApisANSI () returned 1 [0193.611] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe5845c, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0193.611] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe5845c, cbMultiByte=4, lpWideCharStr=0x287f194, cchWideChar=4 | out: lpWideCharStr=".DBF") returned 4 [0193.611] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x287f210 | out: lpFindFileData=0x287f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x973abb0f, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xbccff7c7, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x1, dwReserved0=0x287f6d4, dwReserved1=0x0, cFileName="oobe_2017_09_07_03_08_57_737.log", cAlternateFileName="OOBE_2~1.LOG")) returned 1 [0193.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239668 [0193.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cfa8 [0193.611] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x214ca0 [0193.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cfa8 | out: hHeap=0x1f0000) returned 1 [0193.611] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24fc30 | out: hHeap=0x1f0000) returned 1 [0193.612] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239668 | out: hHeap=0x1f0000) returned 1 [0193.612] CreateFileW (lpFileName="C:\\\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log" (normalized: "c:\\$getcurrent\\logs\\oobe_2017_09_07_03_08_57_737.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x287ef20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8 [0193.612] GetFileType (hFile=0x1c8) returned 0x1 [0193.614] CloseHandle (hObject=0x1c8) returned 1 [0193.614] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x214e80 [0193.614] GetFileAttributesExW (in: lpFileName="C:\\\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log" (normalized: "c:\\$getcurrent\\logs\\oobe_2017_09_07_03_08_57_737.log"), fInfoLevelId=0x0, lpFileInformation=0x287efb4 | out: lpFileInformation=0x287efb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x973abb0f, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xbccff7c7, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x1)) returned 1 [0193.614] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214e80 | out: hHeap=0x1f0000) returned 1 [0193.615] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x214d90 [0193.615] GetFileAttributesExW (in: lpFileName="C:\\\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log" (normalized: "c:\\$getcurrent\\logs\\oobe_2017_09_07_03_08_57_737.log"), fInfoLevelId=0x0, lpFileInformation=0x287efbc | out: lpFileInformation=0x287efbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x973abb0f, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xbccff7c7, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x1)) returned 1 [0193.615] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d90 | out: hHeap=0x1f0000) returned 1 [0193.615] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x214e80 [0193.615] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214e80 | out: hHeap=0x1f0000) returned 1 [0193.615] GetLastError () returned 0x0 [0193.615] SetLastError (dwErrCode=0x0) [0193.615] AreFileApisANSI () returned 1 [0193.615] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe5843c, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0193.615] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe5843c, cbMultiByte=4, lpWideCharStr=0x287f11c, cchWideChar=4 | out: lpWideCharStr=".mdf") returned 4 [0193.615] GetLastError () returned 0x0 [0193.615] SetLastError (dwErrCode=0x0) [0193.615] AreFileApisANSI () returned 1 [0193.615] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58444, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0193.615] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58444, cbMultiByte=4, lpWideCharStr=0x287f134, cchWideChar=4 | out: lpWideCharStr=".pst") returned 4 [0193.615] GetLastError () returned 0x0 [0193.616] SetLastError (dwErrCode=0x0) [0193.616] AreFileApisANSI () returned 1 [0193.616] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe5844c, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0193.616] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe5844c, cbMultiByte=4, lpWideCharStr=0x287f14c, cchWideChar=4 | out: lpWideCharStr=".bak") returned 4 [0193.616] GetLastError () returned 0x0 [0193.616] SetLastError (dwErrCode=0x0) [0193.616] AreFileApisANSI () returned 1 [0193.616] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58454, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0193.616] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58454, cbMultiByte=4, lpWideCharStr=0x287f164, cchWideChar=4 | out: lpWideCharStr=".tib") returned 4 [0193.616] GetLastError () returned 0x0 [0193.616] SetLastError (dwErrCode=0x0) [0193.616] AreFileApisANSI () returned 1 [0193.616] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58444, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0193.616] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58444, cbMultiByte=4, lpWideCharStr=0x287f17c, cchWideChar=4 | out: lpWideCharStr=".pst") returned 4 [0193.616] GetLastError () returned 0x0 [0193.616] SetLastError (dwErrCode=0x0) [0193.616] AreFileApisANSI () returned 1 [0193.616] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe5845c, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0193.616] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe5845c, cbMultiByte=4, lpWideCharStr=0x287f194, cchWideChar=4 | out: lpWideCharStr=".DBF") returned 4 [0193.616] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x287f210 | out: lpFindFileData=0x287f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc84f202, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xbc84f202, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xbc882799, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x1784, dwReserved0=0x287f6d4, dwReserved1=0x0, cFileName="oobe_2017_09_07_03_08_57_737.log.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta", cAlternateFileName="OOBE_2~1.ODV")) returned 1 [0193.616] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd0) returned 0x2007c8 [0193.616] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d248 [0193.616] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x24fc30 [0193.616] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d248 | out: hHeap=0x1f0000) returned 1 [0193.617] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214ca0 | out: hHeap=0x1f0000) returned 1 [0193.617] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2007c8 | out: hHeap=0x1f0000) returned 1 [0193.617] CreateFileW (lpFileName="C:\\\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\$getcurrent\\logs\\oobe_2017_09_07_03_08_57_737.log.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x287ef20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8 [0193.617] GetFileType (hFile=0x1c8) returned 0x1 [0193.617] CloseHandle (hObject=0x1c8) returned 1 [0193.618] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x260188 [0193.618] GetFileAttributesExW (in: lpFileName="C:\\\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\$getcurrent\\logs\\oobe_2017_09_07_03_08_57_737.log.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x287efb4 | out: lpFileInformation=0x287efb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc84f202, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xbc84f202, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xbc882799, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x1887)) returned 1 [0193.618] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260188 | out: hHeap=0x1f0000) returned 1 [0193.618] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x260188 [0193.618] GetFileAttributesExW (in: lpFileName="C:\\\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\$getcurrent\\logs\\oobe_2017_09_07_03_08_57_737.log.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), fInfoLevelId=0x0, lpFileInformation=0x287efbc | out: lpFileInformation=0x287efbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc84f202, ftCreationTime.dwHighDateTime=0x1d5d789, ftLastAccessTime.dwLowDateTime=0xbc84f202, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xbc882799, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x1887)) returned 1 [0193.618] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260188 | out: hHeap=0x1f0000) returned 1 [0193.618] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xf0) returned 0x260188 [0193.618] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x260188 | out: hHeap=0x1f0000) returned 1 [0193.618] GetLastError () returned 0x0 [0193.618] SetLastError (dwErrCode=0x0) [0193.618] AreFileApisANSI () returned 1 [0193.618] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe5843c, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0193.618] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe5843c, cbMultiByte=4, lpWideCharStr=0x287f11c, cchWideChar=4 | out: lpWideCharStr=".mdf") returned 4 [0193.618] GetLastError () returned 0x0 [0193.619] SetLastError (dwErrCode=0x0) [0193.619] AreFileApisANSI () returned 1 [0193.619] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58444, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0193.619] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58444, cbMultiByte=4, lpWideCharStr=0x287f134, cchWideChar=4 | out: lpWideCharStr=".pst") returned 4 [0193.619] GetLastError () returned 0x0 [0193.619] SetLastError (dwErrCode=0x0) [0193.619] AreFileApisANSI () returned 1 [0193.619] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe5844c, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0193.619] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe5844c, cbMultiByte=4, lpWideCharStr=0x287f14c, cchWideChar=4 | out: lpWideCharStr=".bak") returned 4 [0193.619] GetLastError () returned 0x0 [0193.619] SetLastError (dwErrCode=0x0) [0193.619] AreFileApisANSI () returned 1 [0193.619] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58454, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0193.619] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58454, cbMultiByte=4, lpWideCharStr=0x287f164, cchWideChar=4 | out: lpWideCharStr=".tib") returned 4 [0193.619] GetLastError () returned 0x0 [0193.619] SetLastError (dwErrCode=0x0) [0193.619] AreFileApisANSI () returned 1 [0193.620] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58444, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0193.620] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58444, cbMultiByte=4, lpWideCharStr=0x287f17c, cchWideChar=4 | out: lpWideCharStr=".pst") returned 4 [0193.620] GetLastError () returned 0x0 [0193.620] SetLastError (dwErrCode=0x0) [0193.620] AreFileApisANSI () returned 1 [0193.620] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe5845c, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0193.620] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe5845c, cbMultiByte=4, lpWideCharStr=0x287f194, cchWideChar=4 | out: lpWideCharStr=".DBF") returned 4 [0193.620] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x287f210 | out: lpFindFileData=0x287f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c5a0a89, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x9c5a0a89, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xbb3747bd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x287f6d4, dwReserved1=0x0, cFileName="PartnerSetupCompleteResult.log", cAlternateFileName="PARTNE~1.LOG")) returned 1 [0193.620] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221fc8 [0193.620] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d248 [0193.620] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x214e08 [0193.620] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d248 | out: hHeap=0x1f0000) returned 1 [0193.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24fc30 | out: hHeap=0x1f0000) returned 1 [0193.621] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221fc8 | out: hHeap=0x1f0000) returned 1 [0193.621] CreateFileW (lpFileName="C:\\\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log" (normalized: "c:\\$getcurrent\\logs\\partnersetupcompleteresult.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x287ef20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8 [0193.621] GetFileType (hFile=0x1c8) returned 0x1 [0193.622] CloseHandle (hObject=0x1c8) returned 1 [0193.622] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x214d90 [0193.622] GetFileAttributesExW (in: lpFileName="C:\\\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log" (normalized: "c:\\$getcurrent\\logs\\partnersetupcompleteresult.log"), fInfoLevelId=0x0, lpFileInformation=0x287efb4 | out: lpFileInformation=0x287efb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c5a0a89, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x9c5a0a89, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xbb3747bd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x28)) returned 1 [0193.622] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d90 | out: hHeap=0x1f0000) returned 1 [0193.622] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x214d90 [0193.623] GetFileAttributesExW (in: lpFileName="C:\\\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log" (normalized: "c:\\$getcurrent\\logs\\partnersetupcompleteresult.log"), fInfoLevelId=0x0, lpFileInformation=0x287efbc | out: lpFileInformation=0x287efbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c5a0a89, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x9c5a0a89, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xbb3747bd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x28)) returned 1 [0193.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d90 | out: hHeap=0x1f0000) returned 1 [0193.623] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x70) returned 0x214d90 [0193.623] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214d90 | out: hHeap=0x1f0000) returned 1 [0193.623] GetLastError () returned 0x0 [0193.623] SetLastError (dwErrCode=0x0) [0193.623] AreFileApisANSI () returned 1 [0193.624] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe5843c, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0193.624] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe5843c, cbMultiByte=4, lpWideCharStr=0x287f11c, cchWideChar=4 | out: lpWideCharStr=".mdf") returned 4 [0193.624] GetLastError () returned 0x0 [0193.624] SetLastError (dwErrCode=0x0) [0193.624] AreFileApisANSI () returned 1 [0193.624] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58444, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0193.624] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58444, cbMultiByte=4, lpWideCharStr=0x287f134, cchWideChar=4 | out: lpWideCharStr=".pst") returned 4 [0193.624] GetLastError () returned 0x0 [0193.625] SetLastError (dwErrCode=0x0) [0193.625] AreFileApisANSI () returned 1 [0193.625] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe5844c, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0193.625] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe5844c, cbMultiByte=4, lpWideCharStr=0x287f14c, cchWideChar=4 | out: lpWideCharStr=".bak") returned 4 [0193.625] GetLastError () returned 0x0 [0193.625] SetLastError (dwErrCode=0x0) [0193.625] AreFileApisANSI () returned 1 [0193.625] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58454, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0193.625] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58454, cbMultiByte=4, lpWideCharStr=0x287f164, cchWideChar=4 | out: lpWideCharStr=".tib") returned 4 [0193.625] GetLastError () returned 0x0 [0193.626] SetLastError (dwErrCode=0x0) [0193.626] AreFileApisANSI () returned 1 [0193.626] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58444, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0193.626] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58444, cbMultiByte=4, lpWideCharStr=0x287f17c, cchWideChar=4 | out: lpWideCharStr=".pst") returned 4 [0193.626] GetLastError () returned 0x0 [0193.626] SetLastError (dwErrCode=0x0) [0193.626] AreFileApisANSI () returned 1 [0193.626] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe5845c, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0193.626] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe5845c, cbMultiByte=4, lpWideCharStr=0x287f194, cchWideChar=4 | out: lpWideCharStr=".DBF") returned 4 [0193.626] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x287f210 | out: lpFindFileData=0x287f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c5a0a89, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x9c5a0a89, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xbb3747bd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x287f6d4, dwReserved1=0x0, cFileName="PartnerSetupCompleteResult.log", cAlternateFileName="PARTNE~1.LOG")) returned 0 [0193.626] FindClose (in: hFindFile=0x214150 | out: hFindFile=0x214150) returned 1 [0193.627] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214e08 | out: hHeap=0x1f0000) returned 1 [0193.627] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f020 | out: hHeap=0x1f0000) returned 1 [0193.627] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b3e0 | out: hHeap=0x1f0000) returned 1 [0193.627] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221cb0 | out: hHeap=0x1f0000) returned 1 [0193.627] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221cb0 [0193.627] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b778 [0193.627] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f1b8 [0193.627] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221e18 [0193.627] FindFirstFileW (in: lpFileName="C:\\\\$GetCurrent\\SafeOS\\*", lpFindFileData=0x287f210 | out: lpFindFileData=0x287f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x287f6d4, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x214550 [0193.628] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cfa8 [0193.628] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225e28 [0193.628] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cfa8 | out: hHeap=0x1f0000) returned 1 [0193.628] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221e18 | out: hHeap=0x1f0000) returned 1 [0193.628] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0193.628] FindNextFileW (in: hFindFile=0x214550, lpFindFileData=0x287f210 | out: lpFindFileData=0x287f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x287f6d4, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0193.628] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cfa8 [0193.629] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225d88 [0193.629] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cfa8 | out: hHeap=0x1f0000) returned 1 [0193.629] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225e28 | out: hHeap=0x1f0000) returned 1 [0193.629] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0193.629] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0193.629] FindNextFileW (in: hFindFile=0x214550, lpFindFileData=0x287f210 | out: lpFindFileData=0x287f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9568f13f, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x9568f13f, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0xfb529700, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x232c8, dwReserved0=0x287f6d4, dwReserved1=0x0, cFileName="GetCurrentOOBE.dll", cAlternateFileName="GETCUR~1.DLL")) returned 1 [0193.629] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cfa8 [0193.629] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0193.629] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a838 [0193.629] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0193.630] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225d88 | out: hHeap=0x1f0000) returned 1 [0193.630] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cfa8 | out: hHeap=0x1f0000) returned 1 [0193.630] CreateFileW (lpFileName="C:\\\\$GetCurrent\\SafeOS\\GetCurrentOOBE.dll" (normalized: "c:\\$getcurrent\\safeos\\getcurrentoobe.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x287ef20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8 [0193.631] GetFileType (hFile=0x1c8) returned 0x1 [0193.631] CloseHandle (hObject=0x1c8) returned 1 [0193.631] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ac48 [0193.632] GetFileAttributesExW (in: lpFileName="C:\\\\$GetCurrent\\SafeOS\\GetCurrentOOBE.dll" (normalized: "c:\\$getcurrent\\safeos\\getcurrentoobe.dll"), fInfoLevelId=0x0, lpFileInformation=0x287efb4 | out: lpFileInformation=0x287efb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9568f13f, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x9568f13f, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0xfb529700, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x232c8)) returned 1 [0193.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ac48 | out: hHeap=0x1f0000) returned 1 [0193.632] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a8a0 [0193.632] GetFileAttributesExW (in: lpFileName="C:\\\\$GetCurrent\\SafeOS\\GetCurrentOOBE.dll" (normalized: "c:\\$getcurrent\\safeos\\getcurrentoobe.dll"), fInfoLevelId=0x0, lpFileInformation=0x287efbc | out: lpFileInformation=0x287efbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9568f13f, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x9568f13f, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0xfb529700, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x232c8)) returned 1 [0193.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a8a0 | out: hHeap=0x1f0000) returned 1 [0193.632] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ae50 [0193.632] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ae50 | out: hHeap=0x1f0000) returned 1 [0193.632] GetLastError () returned 0x0 [0193.633] SetLastError (dwErrCode=0x0) [0193.633] AreFileApisANSI () returned 1 [0193.633] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe5843c, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0193.633] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe5843c, cbMultiByte=4, lpWideCharStr=0x287f11c, cchWideChar=4 | out: lpWideCharStr=".mdf") returned 4 [0193.633] GetLastError () returned 0x0 [0193.633] SetLastError (dwErrCode=0x0) [0193.633] AreFileApisANSI () returned 1 [0193.633] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58444, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0193.633] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58444, cbMultiByte=4, lpWideCharStr=0x287f134, cchWideChar=4 | out: lpWideCharStr=".pst") returned 4 [0193.633] GetLastError () returned 0x0 [0193.634] SetLastError (dwErrCode=0x0) [0193.634] AreFileApisANSI () returned 1 [0193.634] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe5844c, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0193.634] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe5844c, cbMultiByte=4, lpWideCharStr=0x287f14c, cchWideChar=4 | out: lpWideCharStr=".bak") returned 4 [0193.634] GetLastError () returned 0x0 [0193.634] SetLastError (dwErrCode=0x0) [0193.634] AreFileApisANSI () returned 1 [0193.634] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58454, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0193.634] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58454, cbMultiByte=4, lpWideCharStr=0x287f164, cchWideChar=4 | out: lpWideCharStr=".tib") returned 4 [0193.634] GetLastError () returned 0x0 [0193.635] SetLastError (dwErrCode=0x0) [0193.635] AreFileApisANSI () returned 1 [0193.635] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58444, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0193.635] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58444, cbMultiByte=4, lpWideCharStr=0x287f17c, cchWideChar=4 | out: lpWideCharStr=".pst") returned 4 [0193.635] GetLastError () returned 0x0 [0193.635] SetLastError (dwErrCode=0x0) [0193.635] AreFileApisANSI () returned 1 [0193.635] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe5845c, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0193.635] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe5845c, cbMultiByte=4, lpWideCharStr=0x287f194, cchWideChar=4 | out: lpWideCharStr=".DBF") returned 4 [0193.635] FindNextFileW (in: hFindFile=0x214550, lpFindFileData=0x287f210 | out: lpFindFileData=0x287f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956819aa, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x956819aa, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x980eecb6, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x9c, dwReserved0=0x287f6d4, dwReserved1=0x0, cFileName="GetCurrentRollback.ini", cAlternateFileName="GETCUR~1.INI")) returned 1 [0193.635] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cfa8 [0193.635] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d050 [0193.636] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ad18 [0193.636] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d050 | out: hHeap=0x1f0000) returned 1 [0193.636] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a838 | out: hHeap=0x1f0000) returned 1 [0193.636] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cfa8 | out: hHeap=0x1f0000) returned 1 [0193.636] CreateFileW (lpFileName="C:\\\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini" (normalized: "c:\\$getcurrent\\safeos\\getcurrentrollback.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x287ef20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8 [0193.636] GetFileType (hFile=0x1c8) returned 0x1 [0193.637] CloseHandle (hObject=0x1c8) returned 1 [0193.637] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ac48 [0193.637] GetFileAttributesExW (in: lpFileName="C:\\\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini" (normalized: "c:\\$getcurrent\\safeos\\getcurrentrollback.ini"), fInfoLevelId=0x0, lpFileInformation=0x287efb4 | out: lpFileInformation=0x287efb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956819aa, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x956819aa, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x980eecb6, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x9c)) returned 1 [0193.637] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ac48 | out: hHeap=0x1f0000) returned 1 [0193.637] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ac48 [0193.637] GetFileAttributesExW (in: lpFileName="C:\\\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini" (normalized: "c:\\$getcurrent\\safeos\\getcurrentrollback.ini"), fInfoLevelId=0x0, lpFileInformation=0x287efbc | out: lpFileInformation=0x287efbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956819aa, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x956819aa, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x980eecb6, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x9c)) returned 1 [0193.637] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ac48 | out: hHeap=0x1f0000) returned 1 [0193.637] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ae50 [0193.637] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ae50 | out: hHeap=0x1f0000) returned 1 [0193.637] GetLastError () returned 0x0 [0193.637] SetLastError (dwErrCode=0x0) [0193.637] AreFileApisANSI () returned 1 [0193.638] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe5843c, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0193.638] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe5843c, cbMultiByte=4, lpWideCharStr=0x287f11c, cchWideChar=4 | out: lpWideCharStr=".mdf") returned 4 [0193.638] GetLastError () returned 0x0 [0193.638] SetLastError (dwErrCode=0x0) [0193.638] AreFileApisANSI () returned 1 [0193.638] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58444, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0193.638] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58444, cbMultiByte=4, lpWideCharStr=0x287f134, cchWideChar=4 | out: lpWideCharStr=".pst") returned 4 [0193.638] GetLastError () returned 0x0 [0193.638] SetLastError (dwErrCode=0x0) [0193.638] AreFileApisANSI () returned 1 [0193.638] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe5844c, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0193.638] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe5844c, cbMultiByte=4, lpWideCharStr=0x287f14c, cchWideChar=4 | out: lpWideCharStr=".bak") returned 4 [0193.638] GetLastError () returned 0x0 [0193.638] SetLastError (dwErrCode=0x0) [0193.638] AreFileApisANSI () returned 1 [0193.638] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58454, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0193.638] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58454, cbMultiByte=4, lpWideCharStr=0x287f164, cchWideChar=4 | out: lpWideCharStr=".tib") returned 4 [0193.638] GetLastError () returned 0x0 [0193.638] SetLastError (dwErrCode=0x0) [0193.638] AreFileApisANSI () returned 1 [0193.638] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58444, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0193.638] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58444, cbMultiByte=4, lpWideCharStr=0x287f17c, cchWideChar=4 | out: lpWideCharStr=".pst") returned 4 [0193.639] GetLastError () returned 0x0 [0193.639] SetLastError (dwErrCode=0x0) [0193.639] AreFileApisANSI () returned 1 [0193.639] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe5845c, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0193.639] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe5845c, cbMultiByte=4, lpWideCharStr=0x287f194, cchWideChar=4 | out: lpWideCharStr=".DBF") returned 4 [0193.639] FindNextFileW (in: hFindFile=0x214550, lpFindFileData=0x287f210 | out: lpFindFileData=0x287f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x54acc791, ftLastAccessTime.dwHighDateTime=0x1d3273a, ftLastWriteTime.dwLowDateTime=0x54acc791, ftLastWriteTime.dwHighDateTime=0x1d3273a, nFileSizeHigh=0x0, nFileSizeLow=0x241, dwReserved0=0x287f6d4, dwReserved1=0x0, cFileName="PartnerSetupComplete.cmd", cAlternateFileName="PARTNE~1.CMD")) returned 1 [0193.639] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221d88 [0193.639] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21cfa8 [0193.639] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ae50 [0193.639] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cfa8 | out: hHeap=0x1f0000) returned 1 [0193.639] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ad18 | out: hHeap=0x1f0000) returned 1 [0193.639] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221d88 | out: hHeap=0x1f0000) returned 1 [0193.639] CreateFileW (lpFileName="C:\\\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\partnersetupcomplete.cmd"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x287ef20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8 [0193.639] GetFileType (hFile=0x1c8) returned 0x1 [0193.640] CloseHandle (hObject=0x1c8) returned 1 [0193.870] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22acb0 [0193.870] GetFileAttributesExW (in: lpFileName="C:\\\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\partnersetupcomplete.cmd"), fInfoLevelId=0x0, lpFileInformation=0x287efb4 | out: lpFileInformation=0x287efb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x54acc791, ftLastAccessTime.dwHighDateTime=0x1d3273a, ftLastWriteTime.dwLowDateTime=0x54acc791, ftLastWriteTime.dwHighDateTime=0x1d3273a, nFileSizeHigh=0x0, nFileSizeLow=0x241)) returned 1 [0193.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22acb0 | out: hHeap=0x1f0000) returned 1 [0193.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ad18 [0193.871] GetFileAttributesExW (in: lpFileName="C:\\\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\partnersetupcomplete.cmd"), fInfoLevelId=0x0, lpFileInformation=0x287efbc | out: lpFileInformation=0x287efbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x54acc791, ftLastAccessTime.dwHighDateTime=0x1d3273a, ftLastWriteTime.dwLowDateTime=0x54acc791, ftLastWriteTime.dwHighDateTime=0x1d3273a, nFileSizeHigh=0x0, nFileSizeLow=0x241)) returned 1 [0193.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ad18 | out: hHeap=0x1f0000) returned 1 [0193.871] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22aeb8 [0193.871] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aeb8 | out: hHeap=0x1f0000) returned 1 [0193.871] GetLastError () returned 0x0 [0193.871] SetLastError (dwErrCode=0x0) [0193.871] AreFileApisANSI () returned 1 [0193.871] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe5843c, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0193.871] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe5843c, cbMultiByte=4, lpWideCharStr=0x287f11c, cchWideChar=4 | out: lpWideCharStr=".mdf") returned 4 [0193.871] GetLastError () returned 0x0 [0193.871] SetLastError (dwErrCode=0x0) [0193.871] AreFileApisANSI () returned 1 [0193.872] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58444, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0193.872] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58444, cbMultiByte=4, lpWideCharStr=0x287f134, cchWideChar=4 | out: lpWideCharStr=".pst") returned 4 [0193.872] GetLastError () returned 0x0 [0193.872] SetLastError (dwErrCode=0x0) [0193.872] AreFileApisANSI () returned 1 [0193.872] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe5844c, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0193.872] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe5844c, cbMultiByte=4, lpWideCharStr=0x287f14c, cchWideChar=4 | out: lpWideCharStr=".bak") returned 4 [0193.872] GetLastError () returned 0x0 [0193.872] SetLastError (dwErrCode=0x0) [0193.872] AreFileApisANSI () returned 1 [0193.872] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58454, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0193.873] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58454, cbMultiByte=4, lpWideCharStr=0x287f164, cchWideChar=4 | out: lpWideCharStr=".tib") returned 4 [0193.873] GetLastError () returned 0x0 [0193.873] SetLastError (dwErrCode=0x0) [0193.873] AreFileApisANSI () returned 1 [0193.873] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58444, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0193.873] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58444, cbMultiByte=4, lpWideCharStr=0x287f17c, cchWideChar=4 | out: lpWideCharStr=".pst") returned 4 [0193.873] GetLastError () returned 0x0 [0193.873] SetLastError (dwErrCode=0x0) [0193.873] AreFileApisANSI () returned 1 [0193.873] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe5845c, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0193.874] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe5845c, cbMultiByte=4, lpWideCharStr=0x287f194, cchWideChar=4 | out: lpWideCharStr=".DBF") returned 4 [0193.874] FindNextFileW (in: hFindFile=0x214550, lpFindFileData=0x287f210 | out: lpFindFileData=0x287f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9575af11, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9577d1ec, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x4a, dwReserved0=0x287f6d4, dwReserved1=0x0, cFileName="preoobe.cmd", cAlternateFileName="")) returned 1 [0193.874] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b3e0 [0193.874] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d280 [0193.874] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239718 [0193.874] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d280 | out: hHeap=0x1f0000) returned 1 [0193.874] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ae50 | out: hHeap=0x1f0000) returned 1 [0193.874] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b3e0 | out: hHeap=0x1f0000) returned 1 [0193.874] CreateFileW (lpFileName="C:\\\\$GetCurrent\\SafeOS\\preoobe.cmd" (normalized: "c:\\$getcurrent\\safeos\\preoobe.cmd"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x287ef20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0193.875] GetFileType (hFile=0x1f0) returned 0x1 [0193.875] CloseHandle (hObject=0x1f0) returned 1 [0193.875] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239b38 [0193.875] GetFileAttributesExW (in: lpFileName="C:\\\\$GetCurrent\\SafeOS\\preoobe.cmd" (normalized: "c:\\$getcurrent\\safeos\\preoobe.cmd"), fInfoLevelId=0x0, lpFileInformation=0x287efb4 | out: lpFileInformation=0x287efb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9575af11, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9577d1ec, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x4a)) returned 1 [0193.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239b38 | out: hHeap=0x1f0000) returned 1 [0193.875] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239b38 [0193.875] GetFileAttributesExW (in: lpFileName="C:\\\\$GetCurrent\\SafeOS\\preoobe.cmd" (normalized: "c:\\$getcurrent\\safeos\\preoobe.cmd"), fInfoLevelId=0x0, lpFileInformation=0x287efbc | out: lpFileInformation=0x287efbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9575af11, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9577d1ec, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x4a)) returned 1 [0193.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239b38 | out: hHeap=0x1f0000) returned 1 [0193.875] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239508 [0193.875] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239508 | out: hHeap=0x1f0000) returned 1 [0193.875] GetLastError () returned 0x0 [0193.876] SetLastError (dwErrCode=0x0) [0193.876] AreFileApisANSI () returned 1 [0193.876] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe5843c, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0193.876] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe5843c, cbMultiByte=4, lpWideCharStr=0x287f11c, cchWideChar=4 | out: lpWideCharStr=".mdf") returned 4 [0193.876] GetLastError () returned 0x0 [0193.876] SetLastError (dwErrCode=0x0) [0193.876] AreFileApisANSI () returned 1 [0193.876] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58444, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0193.876] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58444, cbMultiByte=4, lpWideCharStr=0x287f134, cchWideChar=4 | out: lpWideCharStr=".pst") returned 4 [0193.876] GetLastError () returned 0x0 [0193.876] SetLastError (dwErrCode=0x0) [0193.876] AreFileApisANSI () returned 1 [0193.876] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe5844c, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0193.876] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe5844c, cbMultiByte=4, lpWideCharStr=0x287f14c, cchWideChar=4 | out: lpWideCharStr=".bak") returned 4 [0193.876] GetLastError () returned 0x0 [0193.877] SetLastError (dwErrCode=0x0) [0193.877] AreFileApisANSI () returned 1 [0193.877] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58454, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0193.877] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58454, cbMultiByte=4, lpWideCharStr=0x287f164, cchWideChar=4 | out: lpWideCharStr=".tib") returned 4 [0193.877] GetLastError () returned 0x0 [0193.877] SetLastError (dwErrCode=0x0) [0193.877] AreFileApisANSI () returned 1 [0193.877] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58444, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0193.877] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58444, cbMultiByte=4, lpWideCharStr=0x287f17c, cchWideChar=4 | out: lpWideCharStr=".pst") returned 4 [0193.877] GetLastError () returned 0x0 [0193.877] SetLastError (dwErrCode=0x0) [0193.877] AreFileApisANSI () returned 1 [0193.877] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe5845c, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0193.877] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe5845c, cbMultiByte=4, lpWideCharStr=0x287f194, cchWideChar=4 | out: lpWideCharStr=".DBF") returned 4 [0193.877] FindNextFileW (in: hFindFile=0x214550, lpFindFileData=0x287f210 | out: lpFindFileData=0x287f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x957833a7, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x957833a7, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9578472e, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x133, dwReserved0=0x287f6d4, dwReserved1=0x0, cFileName="SetupComplete.cmd", cAlternateFileName="SETUPC~1.CMD")) returned 1 [0193.877] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d280 [0193.877] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1feed0 [0193.877] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a838 [0193.877] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1feed0 | out: hHeap=0x1f0000) returned 1 [0193.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239718 | out: hHeap=0x1f0000) returned 1 [0193.878] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21d280 | out: hHeap=0x1f0000) returned 1 [0193.878] CreateFileW (lpFileName="C:\\\\$GetCurrent\\SafeOS\\SetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\setupcomplete.cmd"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x287ef20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0193.878] GetFileType (hFile=0x1f0) returned 0x1 [0193.878] CloseHandle (hObject=0x1f0) returned 1 [0193.879] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22abe0 [0193.879] GetFileAttributesExW (in: lpFileName="C:\\\\$GetCurrent\\SafeOS\\SetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\setupcomplete.cmd"), fInfoLevelId=0x0, lpFileInformation=0x287efb4 | out: lpFileInformation=0x287efb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x957833a7, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x957833a7, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9578472e, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x133)) returned 1 [0193.879] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22abe0 | out: hHeap=0x1f0000) returned 1 [0193.879] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22abe0 [0193.879] GetFileAttributesExW (in: lpFileName="C:\\\\$GetCurrent\\SafeOS\\SetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\setupcomplete.cmd"), fInfoLevelId=0x0, lpFileInformation=0x287efbc | out: lpFileInformation=0x287efbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x957833a7, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x957833a7, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9578472e, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x133)) returned 1 [0193.879] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22abe0 | out: hHeap=0x1f0000) returned 1 [0193.879] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22ad18 [0193.879] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ad18 | out: hHeap=0x1f0000) returned 1 [0193.879] GetLastError () returned 0x0 [0193.879] SetLastError (dwErrCode=0x0) [0193.879] AreFileApisANSI () returned 1 [0193.879] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe5843c, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0193.879] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe5843c, cbMultiByte=4, lpWideCharStr=0x287f11c, cchWideChar=4 | out: lpWideCharStr=".mdf") returned 4 [0193.879] GetLastError () returned 0x0 [0193.879] SetLastError (dwErrCode=0x0) [0193.879] AreFileApisANSI () returned 1 [0193.880] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58444, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0193.880] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58444, cbMultiByte=4, lpWideCharStr=0x287f134, cchWideChar=4 | out: lpWideCharStr=".pst") returned 4 [0193.880] GetLastError () returned 0x0 [0193.880] SetLastError (dwErrCode=0x0) [0193.880] AreFileApisANSI () returned 1 [0193.880] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe5844c, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0193.880] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe5844c, cbMultiByte=4, lpWideCharStr=0x287f14c, cchWideChar=4 | out: lpWideCharStr=".bak") returned 4 [0193.880] GetLastError () returned 0x0 [0193.880] SetLastError (dwErrCode=0x0) [0193.880] AreFileApisANSI () returned 1 [0193.880] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58454, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0193.880] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58454, cbMultiByte=4, lpWideCharStr=0x287f164, cchWideChar=4 | out: lpWideCharStr=".tib") returned 4 [0193.880] GetLastError () returned 0x0 [0193.880] SetLastError (dwErrCode=0x0) [0193.880] AreFileApisANSI () returned 1 [0193.880] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58444, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0193.880] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58444, cbMultiByte=4, lpWideCharStr=0x287f17c, cchWideChar=4 | out: lpWideCharStr=".pst") returned 4 [0193.880] GetLastError () returned 0x0 [0193.880] SetLastError (dwErrCode=0x0) [0193.880] AreFileApisANSI () returned 1 [0193.880] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe5845c, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0193.880] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe5845c, cbMultiByte=4, lpWideCharStr=0x287f194, cchWideChar=4 | out: lpWideCharStr=".DBF") returned 4 [0193.881] FindNextFileW (in: hFindFile=0x214550, lpFindFileData=0x287f210 | out: lpFindFileData=0x287f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x957833a7, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x957833a7, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9578472e, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x133, dwReserved0=0x287f6d4, dwReserved1=0x0, cFileName="SetupComplete.cmd", cAlternateFileName="SETUPC~1.CMD")) returned 0 [0193.881] FindClose (in: hFindFile=0x214550 | out: hFindFile=0x214550) returned 1 [0193.881] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a838 | out: hHeap=0x1f0000) returned 1 [0193.881] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f1b8 | out: hHeap=0x1f0000) returned 1 [0193.881] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b778 | out: hHeap=0x1f0000) returned 1 [0193.881] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221cb0 | out: hHeap=0x1f0000) returned 1 [0193.881] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x228310 | out: hHeap=0x1f0000) returned 1 [0193.881] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282d8 | out: hHeap=0x1f0000) returned 1 [0193.881] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf38 | out: hHeap=0x1f0000) returned 1 [0193.881] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2282a0 | out: hHeap=0x1f0000) returned 1 [0193.881] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22e9c0 | out: hHeap=0x1f0000) returned 1 [0193.881] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b750 | out: hHeap=0x1f0000) returned 1 [0193.881] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221d40 | out: hHeap=0x1f0000) returned 1 [0193.881] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221cb0 [0193.881] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b750 [0193.881] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f020 [0193.881] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1feed0 [0193.881] FindFirstFileW (in: lpFileName="C:\\\\$Recycle.Bin\\*", lpFindFileData=0x287f6d4 | out: lpFindFileData=0x287f6d4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000043, cFileName=".", cAlternateFileName="")) returned 0x214150 [0193.882] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0193.882] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1feed0 | out: hHeap=0x1f0000) returned 1 [0193.882] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0193.882] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x287f6d4 | out: lpFindFileData=0x287f6d4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000043, cFileName="..", cAlternateFileName="")) returned 1 [0193.882] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fefe8 [0193.882] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0193.882] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0193.882] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0193.882] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x287f6d4 | out: lpFindFileData=0x287f6d4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000043, cFileName="S-1-5-18", cAlternateFileName="")) returned 1 [0193.882] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b3e0 [0193.882] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0193.882] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x2260a8 [0193.882] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0193.882] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fefe8 | out: hHeap=0x1f0000) returned 1 [0193.882] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b3e0 | out: hHeap=0x1f0000) returned 1 [0193.882] lstrcmpW (lpString1="S-1-5-18", lpString2=".") returned 1 [0193.882] lstrcmpW (lpString1="S-1-5-18", lpString2="..") returned 1 [0193.882] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x205330 [0193.883] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2220e8 [0193.883] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x287f6d4 | out: lpFindFileData=0x287f6d4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x11a5eef8, ftLastAccessTime.dwHighDateTime=0x1d3375b, ftLastWriteTime.dwLowDateTime=0x11a5eef8, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000043, cFileName="S-1-5-21-1051304884-625712362-2192934891-1000", cAlternateFileName="S-1-5-~1")) returned 1 [0193.883] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22a838 [0193.883] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1feed0 [0193.883] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a578 [0193.884] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1feed0 | out: hHeap=0x1f0000) returned 1 [0193.884] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2260a8 | out: hHeap=0x1f0000) returned 1 [0193.884] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a838 | out: hHeap=0x1f0000) returned 1 [0193.884] lstrcmpW (lpString1="S-1-5-21-1051304884-625712362-2192934891-1000", lpString2=".") returned 1 [0193.884] lstrcmpW (lpString1="S-1-5-21-1051304884-625712362-2192934891-1000", lpString2="..") returned 1 [0193.884] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fefe8 [0193.884] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a3e0 [0193.884] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205330 | out: hHeap=0x1f0000) returned 1 [0193.884] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x287f6d4 | out: lpFindFileData=0x287f6d4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x11a5eef8, ftLastAccessTime.dwHighDateTime=0x1d3375b, ftLastWriteTime.dwLowDateTime=0x11a5eef8, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000043, cFileName="S-1-5-21-1051304884-625712362-2192934891-1000", cAlternateFileName="S-1-5-~1")) returned 0 [0193.884] FindClose (in: hFindFile=0x214150 | out: hFindFile=0x214150) returned 1 [0193.885] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221d40 [0193.885] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b4f8 [0193.885] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f350 [0193.885] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221dd0 [0193.885] FindFirstFileW (in: lpFileName="C:\\\\$Recycle.Bin\\S-1-5-18\\*", lpFindFileData=0x287f210 | out: lpFindFileData=0x287f210*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x287f6d4, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x214150 [0193.885] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221e18 [0193.885] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221dd0 | out: hHeap=0x1f0000) returned 1 [0193.885] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0193.885] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x287f210 | out: lpFindFileData=0x287f210*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x287f6d4, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0193.885] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2222e0 [0193.885] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221e18 | out: hHeap=0x1f0000) returned 1 [0193.885] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0193.885] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0193.885] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x287f210 | out: lpFindFileData=0x287f210*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x287f6d4, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0193.885] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b3e0 [0193.886] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221dd0 [0193.886] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x5e) returned 0x22ac48 [0193.886] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221dd0 | out: hHeap=0x1f0000) returned 1 [0193.886] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2222e0 | out: hHeap=0x1f0000) returned 1 [0193.886] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b3e0 | out: hHeap=0x1f0000) returned 1 [0193.886] CreateFileW (lpFileName="C:\\\\$Recycle.Bin\\S-1-5-18\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-18\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x287ef20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0193.886] GetFileType (hFile=0x1f0) returned 0x1 [0193.886] CloseHandle (hObject=0x1f0) returned 1 [0193.887] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2394b0 [0193.887] GetFileAttributesExW (in: lpFileName="C:\\\\$Recycle.Bin\\S-1-5-18\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-18\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x287efb4 | out: lpFileInformation=0x287efb4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x81)) returned 1 [0193.887] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2394b0 | out: hHeap=0x1f0000) returned 1 [0193.887] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2397c8 [0193.887] GetFileAttributesExW (in: lpFileName="C:\\\\$Recycle.Bin\\S-1-5-18\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-18\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x287efbc | out: lpFileInformation=0x287efbc*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x81)) returned 1 [0193.887] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2397c8 | out: hHeap=0x1f0000) returned 1 [0193.887] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239a30 [0193.887] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239a30 | out: hHeap=0x1f0000) returned 1 [0193.887] GetLastError () returned 0x0 [0193.887] SetLastError (dwErrCode=0x0) [0193.887] AreFileApisANSI () returned 1 [0193.887] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe5843c, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0193.887] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe5843c, cbMultiByte=4, lpWideCharStr=0x287f11c, cchWideChar=4 | out: lpWideCharStr=".mdf") returned 4 [0193.887] GetLastError () returned 0x0 [0193.887] SetLastError (dwErrCode=0x0) [0193.887] AreFileApisANSI () returned 1 [0193.887] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58444, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0193.887] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58444, cbMultiByte=4, lpWideCharStr=0x287f134, cchWideChar=4 | out: lpWideCharStr=".pst") returned 4 [0193.888] GetLastError () returned 0x0 [0193.888] SetLastError (dwErrCode=0x0) [0193.888] AreFileApisANSI () returned 1 [0193.888] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe5844c, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0193.888] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe5844c, cbMultiByte=4, lpWideCharStr=0x287f14c, cchWideChar=4 | out: lpWideCharStr=".bak") returned 4 [0193.888] GetLastError () returned 0x0 [0193.888] SetLastError (dwErrCode=0x0) [0193.888] AreFileApisANSI () returned 1 [0193.888] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58454, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0193.888] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58454, cbMultiByte=4, lpWideCharStr=0x287f164, cchWideChar=4 | out: lpWideCharStr=".tib") returned 4 [0193.888] GetLastError () returned 0x0 [0193.888] SetLastError (dwErrCode=0x0) [0193.888] AreFileApisANSI () returned 1 [0193.888] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58444, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0193.888] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58444, cbMultiByte=4, lpWideCharStr=0x287f17c, cchWideChar=4 | out: lpWideCharStr=".pst") returned 4 [0193.888] GetLastError () returned 0x0 [0193.888] SetLastError (dwErrCode=0x0) [0193.888] AreFileApisANSI () returned 1 [0193.888] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe5845c, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0193.888] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe5845c, cbMultiByte=4, lpWideCharStr=0x287f194, cchWideChar=4 | out: lpWideCharStr=".DBF") returned 4 [0193.888] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x287f210 | out: lpFindFileData=0x287f210*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x287f6d4, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0193.888] FindClose (in: hFindFile=0x214150 | out: hFindFile=0x214150) returned 1 [0193.889] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22ac48 | out: hHeap=0x1f0000) returned 1 [0193.889] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f350 | out: hHeap=0x1f0000) returned 1 [0193.889] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b4f8 | out: hHeap=0x1f0000) returned 1 [0193.889] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221d40 | out: hHeap=0x1f0000) returned 1 [0193.889] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222250 [0193.889] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b778 [0193.889] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22f1b8 [0193.889] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x24a568 [0193.889] FindFirstFileW (in: lpFileName="C:\\\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\*", lpFindFileData=0x287f210 | out: lpFindFileData=0x287f210*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x11a5eef8, ftLastAccessTime.dwHighDateTime=0x1d3375b, ftLastWriteTime.dwLowDateTime=0x11a5eef8, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x287f6d4, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x214150 [0193.889] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229fa0 [0193.889] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f768 [0193.889] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229fa0 | out: hHeap=0x1f0000) returned 1 [0193.889] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24a568 | out: hHeap=0x1f0000) returned 1 [0193.889] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0193.889] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x287f210 | out: lpFindFileData=0x287f210*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x11a5eef8, ftLastAccessTime.dwHighDateTime=0x1d3375b, ftLastWriteTime.dwLowDateTime=0x11a5eef8, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x287f6d4, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0193.889] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x229b60 [0193.889] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x22f5d8 [0193.889] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x229b60 | out: hHeap=0x1f0000) returned 1 [0193.889] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f768 | out: hHeap=0x1f0000) returned 1 [0193.890] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0193.890] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0193.890] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x287f210 | out: lpFindFileData=0x287f210*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcb9438a8, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xcb9438a8, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x287f6d4, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0193.890] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b3e0 [0193.890] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x80) returned 0x22a468 [0193.890] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xbe) returned 0x230000 [0193.890] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a468 | out: hHeap=0x1f0000) returned 1 [0193.890] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f5d8 | out: hHeap=0x1f0000) returned 1 [0193.890] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b3e0 | out: hHeap=0x1f0000) returned 1 [0193.890] CreateFileW (lpFileName="C:\\\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x287ef20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0193.891] GetFileType (hFile=0x1f0) returned 0x1 [0193.891] CloseHandle (hObject=0x1f0) returned 1 [0193.891] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a380 [0193.891] GetFileAttributesExW (in: lpFileName="C:\\\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x287efb4 | out: lpFileInformation=0x287efb4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcb9438a8, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xcb9438a8, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x81)) returned 1 [0193.891] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a380 | out: hHeap=0x1f0000) returned 1 [0193.891] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x219f90 [0193.891] GetFileAttributesExW (in: lpFileName="C:\\\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x287efbc | out: lpFileInformation=0x287efbc*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcb9438a8, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xcb9438a8, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x81)) returned 1 [0193.894] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x219f90 | out: hHeap=0x1f0000) returned 1 [0193.895] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a380 [0193.895] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a380 | out: hHeap=0x1f0000) returned 1 [0193.895] GetLastError () returned 0x0 [0193.895] SetLastError (dwErrCode=0x0) [0193.895] AreFileApisANSI () returned 1 [0193.895] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe5843c, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0193.895] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe5843c, cbMultiByte=4, lpWideCharStr=0x287f11c, cchWideChar=4 | out: lpWideCharStr=".mdf") returned 4 [0193.895] GetLastError () returned 0x0 [0193.895] SetLastError (dwErrCode=0x0) [0193.895] AreFileApisANSI () returned 1 [0193.895] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58444, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0193.895] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58444, cbMultiByte=4, lpWideCharStr=0x287f134, cchWideChar=4 | out: lpWideCharStr=".pst") returned 4 [0193.895] GetLastError () returned 0x0 [0193.895] SetLastError (dwErrCode=0x0) [0193.895] AreFileApisANSI () returned 1 [0193.895] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe5844c, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0193.895] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe5844c, cbMultiByte=4, lpWideCharStr=0x287f14c, cchWideChar=4 | out: lpWideCharStr=".bak") returned 4 [0193.895] GetLastError () returned 0x0 [0193.895] SetLastError (dwErrCode=0x0) [0193.895] AreFileApisANSI () returned 1 [0193.895] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58454, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0193.895] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58454, cbMultiByte=4, lpWideCharStr=0x287f164, cchWideChar=4 | out: lpWideCharStr=".tib") returned 4 [0193.895] GetLastError () returned 0x0 [0193.895] SetLastError (dwErrCode=0x0) [0193.896] AreFileApisANSI () returned 1 [0193.896] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58444, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0193.896] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58444, cbMultiByte=4, lpWideCharStr=0x287f17c, cchWideChar=4 | out: lpWideCharStr=".pst") returned 4 [0193.896] GetLastError () returned 0x0 [0193.896] SetLastError (dwErrCode=0x0) [0193.896] AreFileApisANSI () returned 1 [0193.896] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe5845c, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0193.896] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe5845c, cbMultiByte=4, lpWideCharStr=0x287f194, cchWideChar=4 | out: lpWideCharStr=".DBF") returned 4 [0193.896] FindNextFileW (in: hFindFile=0x214150, lpFindFileData=0x287f210 | out: lpFindFileData=0x287f210*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcb9438a8, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xcb9438a8, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x287f6d4, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0193.896] FindClose (in: hFindFile=0x214150 | out: hFindFile=0x214150) returned 1 [0193.896] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x230000 | out: hHeap=0x1f0000) returned 1 [0193.896] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f1b8 | out: hHeap=0x1f0000) returned 1 [0193.896] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b778 | out: hHeap=0x1f0000) returned 1 [0193.896] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x222250 | out: hHeap=0x1f0000) returned 1 [0193.896] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a578 | out: hHeap=0x1f0000) returned 1 [0193.896] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2220e8 | out: hHeap=0x1f0000) returned 1 [0193.896] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22a3e0 | out: hHeap=0x1f0000) returned 1 [0193.896] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fefe8 | out: hHeap=0x1f0000) returned 1 [0193.896] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22f020 | out: hHeap=0x1f0000) returned 1 [0193.896] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22b750 | out: hHeap=0x1f0000) returned 1 [0193.896] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221cb0 | out: hHeap=0x1f0000) returned 1 [0193.896] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221f80 [0193.896] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x22b4f8 [0193.897] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22ecf0 [0193.897] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221cb0 [0193.897] FindFirstFileW (in: lpFileName="C:\\\\588bce7c90097ed212\\*", lpFindFileData=0x287f6d4 | out: lpFindFileData=0x287f6d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xbcaa8ec8, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xbcaa8ec8, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000043, cFileName=".", cAlternateFileName="")) returned 0x214550 [0194.182] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0194.182] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225c98 [0194.182] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0194.182] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x221cb0 | out: hHeap=0x1f0000) returned 1 [0194.182] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0194.182] FindNextFileW (in: hFindFile=0x214550, lpFindFileData=0x287f6d4 | out: lpFindFileData=0x287f6d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xbcaa8ec8, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0xbcaa8ec8, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000043, cFileName="..", cAlternateFileName="")) returned 1 [0194.182] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0194.182] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225c48 [0194.182] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0194.182] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225c98 | out: hHeap=0x1f0000) returned 1 [0194.182] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0194.183] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0194.183] FindNextFileW (in: hFindFile=0x214550, lpFindFileData=0x287f6d4 | out: lpFindFileData=0x287f6d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000043, cFileName="1025", cAlternateFileName="")) returned 1 [0194.183] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fefe8 [0194.183] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225ba8 [0194.183] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fefe8 | out: hHeap=0x1f0000) returned 1 [0194.183] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225c48 | out: hHeap=0x1f0000) returned 1 [0194.183] lstrcmpW (lpString1="1025", lpString2=".") returned 1 [0194.183] lstrcmpW (lpString1="1025", lpString2="..") returned 1 [0194.183] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x18) returned 0x2052d0 [0194.183] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221cb0 [0194.183] FindNextFileW (in: hFindFile=0x214550, lpFindFileData=0x287f6d4 | out: lpFindFileData=0x287f6d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000043, cFileName="1028", cAlternateFileName="")) returned 1 [0194.183] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0194.183] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x2262d8 [0194.183] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0194.183] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225ba8 | out: hHeap=0x1f0000) returned 1 [0194.183] lstrcmpW (lpString1="1028", lpString2=".") returned 1 [0194.183] lstrcmpW (lpString1="1028", lpString2="..") returned 1 [0194.183] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0194.183] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222208 [0194.183] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2052d0 | out: hHeap=0x1f0000) returned 1 [0194.183] FindNextFileW (in: hFindFile=0x214550, lpFindFileData=0x287f6d4 | out: lpFindFileData=0x287f6d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000043, cFileName="1029", cAlternateFileName="")) returned 1 [0194.183] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fefe8 [0194.183] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225e28 [0194.184] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fefe8 | out: hHeap=0x1f0000) returned 1 [0194.184] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2262d8 | out: hHeap=0x1f0000) returned 1 [0194.184] lstrcmpW (lpString1="1029", lpString2=".") returned 1 [0194.184] lstrcmpW (lpString1="1029", lpString2="..") returned 1 [0194.184] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x48) returned 0x226058 [0194.184] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222250 [0194.184] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0194.184] FindNextFileW (in: hFindFile=0x214550, lpFindFileData=0x287f6d4 | out: lpFindFileData=0x287f6d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000043, cFileName="1030", cAlternateFileName="")) returned 1 [0194.184] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0194.184] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225e78 [0194.184] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0194.184] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225e28 | out: hHeap=0x1f0000) returned 1 [0194.184] lstrcmpW (lpString1="1030", lpString2=".") returned 1 [0194.184] lstrcmpW (lpString1="1030", lpString2="..") returned 1 [0194.184] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x22aa40 [0194.184] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x222058 [0194.184] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226058 | out: hHeap=0x1f0000) returned 1 [0194.184] FindNextFileW (in: hFindFile=0x214550, lpFindFileData=0x287f6d4 | out: lpFindFileData=0x287f6d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000043, cFileName="1031", cAlternateFileName="")) returned 1 [0194.184] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0194.184] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x2261e8 [0194.184] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0194.184] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225e78 | out: hHeap=0x1f0000) returned 1 [0194.184] lstrcmpW (lpString1="1031", lpString2=".") returned 1 [0194.185] lstrcmpW (lpString1="1031", lpString2="..") returned 1 [0194.185] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x90) returned 0x24a438 [0194.185] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2222e0 [0194.185] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x22aa40 | out: hHeap=0x1f0000) returned 1 [0194.185] FindNextFileW (in: hFindFile=0x214550, lpFindFileData=0x287f6d4 | out: lpFindFileData=0x287f6d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000043, cFileName="1032", cAlternateFileName="")) returned 1 [0194.185] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fefe8 [0194.185] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x2260a8 [0194.185] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fefe8 | out: hHeap=0x1f0000) returned 1 [0194.185] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2261e8 | out: hHeap=0x1f0000) returned 1 [0194.185] lstrcmpW (lpString1="1032", lpString2=".") returned 1 [0194.185] lstrcmpW (lpString1="1032", lpString2="..") returned 1 [0194.185] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221fc8 [0194.185] FindNextFileW (in: hFindFile=0x214550, lpFindFileData=0x287f6d4 | out: lpFindFileData=0x287f6d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000043, cFileName="1033", cAlternateFileName="")) returned 1 [0194.185] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0194.185] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225e78 [0194.185] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0194.185] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2260a8 | out: hHeap=0x1f0000) returned 1 [0194.185] lstrcmpW (lpString1="1033", lpString2=".") returned 1 [0194.185] lstrcmpW (lpString1="1033", lpString2="..") returned 1 [0194.185] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xd8) returned 0x24fb98 [0194.185] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221dd0 [0194.186] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24a438 | out: hHeap=0x1f0000) returned 1 [0194.186] FindNextFileW (in: hFindFile=0x214550, lpFindFileData=0x287f6d4 | out: lpFindFileData=0x287f6d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000043, cFileName="1035", cAlternateFileName="")) returned 1 [0194.186] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0194.186] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225bf8 [0194.186] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0194.186] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225e78 | out: hHeap=0x1f0000) returned 1 [0194.186] lstrcmpW (lpString1="1035", lpString2=".") returned 1 [0194.186] lstrcmpW (lpString1="1035", lpString2="..") returned 1 [0194.186] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221e18 [0194.186] FindNextFileW (in: hFindFile=0x214550, lpFindFileData=0x287f6d4 | out: lpFindFileData=0x287f6d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000043, cFileName="1036", cAlternateFileName="")) returned 1 [0194.186] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0194.186] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225c98 [0194.186] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0194.186] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225bf8 | out: hHeap=0x1f0000) returned 1 [0194.186] lstrcmpW (lpString1="1036", lpString2=".") returned 1 [0194.186] lstrcmpW (lpString1="1036", lpString2="..") returned 1 [0194.186] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221e60 [0194.186] FindNextFileW (in: hFindFile=0x214550, lpFindFileData=0x287f6d4 | out: lpFindFileData=0x287f6d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000043, cFileName="1037", cAlternateFileName="")) returned 1 [0194.186] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0194.186] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x226058 [0194.186] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0194.186] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225c98 | out: hHeap=0x1f0000) returned 1 [0194.186] lstrcmpW (lpString1="1037", lpString2=".") returned 1 [0194.186] lstrcmpW (lpString1="1037", lpString2="..") returned 1 [0194.187] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x138) returned 0x225048 [0194.187] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x221ea8 [0194.187] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x24fb98 | out: hHeap=0x1f0000) returned 1 [0194.187] FindNextFileW (in: hFindFile=0x214550, lpFindFileData=0x287f6d4 | out: lpFindFileData=0x287f6d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000043, cFileName="1038", cAlternateFileName="")) returned 1 [0194.187] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0194.187] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x2260f8 [0194.187] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0194.187] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226058 | out: hHeap=0x1f0000) returned 1 [0194.187] lstrcmpW (lpString1="1038", lpString2=".") returned 1 [0194.187] lstrcmpW (lpString1="1038", lpString2="..") returned 1 [0194.187] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2220e8 [0194.187] FindNextFileW (in: hFindFile=0x214550, lpFindFileData=0x287f6d4 | out: lpFindFileData=0x287f6d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000043, cFileName="1040", cAlternateFileName="")) returned 1 [0194.187] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0194.187] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225d88 [0194.187] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0194.187] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2260f8 | out: hHeap=0x1f0000) returned 1 [0194.187] lstrcmpW (lpString1="1040", lpString2=".") returned 1 [0194.187] lstrcmpW (lpString1="1040", lpString2="..") returned 1 [0194.187] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x213d38 [0194.187] FindNextFileW (in: hFindFile=0x214550, lpFindFileData=0x287f6d4 | out: lpFindFileData=0x287f6d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000043, cFileName="1041", cAlternateFileName="")) returned 1 [0194.187] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0194.187] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x226148 [0194.187] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0194.187] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225d88 | out: hHeap=0x1f0000) returned 1 [0194.187] lstrcmpW (lpString1="1041", lpString2=".") returned 1 [0194.188] lstrcmpW (lpString1="1041", lpString2="..") returned 1 [0194.188] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215bd0 [0194.188] FindNextFileW (in: hFindFile=0x214550, lpFindFileData=0x287f6d4 | out: lpFindFileData=0x287f6d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000043, cFileName="1042", cAlternateFileName="")) returned 1 [0194.188] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0194.188] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x2261e8 [0194.188] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0194.188] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226148 | out: hHeap=0x1f0000) returned 1 [0194.188] lstrcmpW (lpString1="1042", lpString2=".") returned 1 [0194.188] lstrcmpW (lpString1="1042", lpString2="..") returned 1 [0194.188] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1c8) returned 0x225188 [0194.188] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215a20 [0194.188] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225048 | out: hHeap=0x1f0000) returned 1 [0194.188] FindNextFileW (in: hFindFile=0x214550, lpFindFileData=0x287f6d4 | out: lpFindFileData=0x287f6d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000043, cFileName="1043", cAlternateFileName="")) returned 1 [0194.188] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0194.188] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x226238 [0194.188] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0194.188] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2261e8 | out: hHeap=0x1f0000) returned 1 [0194.188] lstrcmpW (lpString1="1043", lpString2=".") returned 1 [0194.188] lstrcmpW (lpString1="1043", lpString2="..") returned 1 [0194.188] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215dc8 [0194.188] FindNextFileW (in: hFindFile=0x214550, lpFindFileData=0x287f6d4 | out: lpFindFileData=0x287f6d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000043, cFileName="1044", cAlternateFileName="")) returned 1 [0194.188] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0194.188] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x226008 [0194.189] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0194.189] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226238 | out: hHeap=0x1f0000) returned 1 [0194.189] lstrcmpW (lpString1="1044", lpString2=".") returned 1 [0194.189] lstrcmpW (lpString1="1044", lpString2="..") returned 1 [0194.189] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215b88 [0194.189] FindNextFileW (in: hFindFile=0x214550, lpFindFileData=0x287f6d4 | out: lpFindFileData=0x287f6d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000043, cFileName="1045", cAlternateFileName="")) returned 1 [0194.189] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0194.189] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x2262d8 [0194.189] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0194.189] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226008 | out: hHeap=0x1f0000) returned 1 [0194.189] lstrcmpW (lpString1="1045", lpString2=".") returned 1 [0194.189] lstrcmpW (lpString1="1045", lpString2="..") returned 1 [0194.189] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215e58 [0194.189] FindNextFileW (in: hFindFile=0x214550, lpFindFileData=0x287f6d4 | out: lpFindFileData=0x287f6d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000043, cFileName="1046", cAlternateFileName="")) returned 1 [0194.189] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0194.189] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225dd8 [0194.189] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0194.189] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2262d8 | out: hHeap=0x1f0000) returned 1 [0194.189] lstrcmpW (lpString1="1046", lpString2=".") returned 1 [0194.189] lstrcmpW (lpString1="1046", lpString2="..") returned 1 [0194.189] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215cf0 [0194.189] FindNextFileW (in: hFindFile=0x214550, lpFindFileData=0x287f6d4 | out: lpFindFileData=0x287f6d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000043, cFileName="1049", cAlternateFileName="")) returned 1 [0194.189] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0194.190] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x2262d8 [0194.190] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0194.190] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225dd8 | out: hHeap=0x1f0000) returned 1 [0194.190] lstrcmpW (lpString1="1049", lpString2=".") returned 1 [0194.190] lstrcmpW (lpString1="1049", lpString2="..") returned 1 [0194.190] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215f78 [0194.190] FindNextFileW (in: hFindFile=0x214550, lpFindFileData=0x287f6d4 | out: lpFindFileData=0x287f6d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000043, cFileName="1053", cAlternateFileName="")) returned 1 [0194.190] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0194.190] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x2260f8 [0194.190] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0194.190] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2262d8 | out: hHeap=0x1f0000) returned 1 [0194.190] lstrcmpW (lpString1="1053", lpString2=".") returned 1 [0194.190] lstrcmpW (lpString1="1053", lpString2="..") returned 1 [0194.190] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2a0) returned 0x222c40 [0194.190] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x2159d8 [0194.190] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225188 | out: hHeap=0x1f0000) returned 1 [0194.190] FindNextFileW (in: hFindFile=0x214550, lpFindFileData=0x287f6d4 | out: lpFindFileData=0x287f6d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000043, cFileName="1055", cAlternateFileName="")) returned 1 [0194.190] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0194.191] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225e78 [0194.191] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0194.191] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2260f8 | out: hHeap=0x1f0000) returned 1 [0194.191] lstrcmpW (lpString1="1055", lpString2=".") returned 1 [0194.191] lstrcmpW (lpString1="1055", lpString2="..") returned 1 [0194.191] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215c60 [0194.191] FindNextFileW (in: hFindFile=0x214550, lpFindFileData=0x287f6d4 | out: lpFindFileData=0x287f6d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000043, cFileName="2052", cAlternateFileName="")) returned 1 [0194.191] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0194.191] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225f18 [0194.191] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0194.191] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225e78 | out: hHeap=0x1f0000) returned 1 [0194.191] lstrcmpW (lpString1="2052", lpString2=".") returned 1 [0194.191] lstrcmpW (lpString1="2052", lpString2="..") returned 1 [0194.191] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215ee8 [0194.191] FindNextFileW (in: hFindFile=0x214550, lpFindFileData=0x287f6d4 | out: lpFindFileData=0x287f6d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000043, cFileName="2070", cAlternateFileName="")) returned 1 [0194.191] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0194.192] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225ec8 [0194.192] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0194.192] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225f18 | out: hHeap=0x1f0000) returned 1 [0194.192] lstrcmpW (lpString1="2070", lpString2=".") returned 1 [0194.192] lstrcmpW (lpString1="2070", lpString2="..") returned 1 [0194.192] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215a68 [0194.192] FindNextFileW (in: hFindFile=0x214550, lpFindFileData=0x287f6d4 | out: lpFindFileData=0x287f6d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000043, cFileName="3076", cAlternateFileName="")) returned 1 [0194.192] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fefe8 [0194.192] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225fb8 [0194.192] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fefe8 | out: hHeap=0x1f0000) returned 1 [0194.192] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225ec8 | out: hHeap=0x1f0000) returned 1 [0194.192] lstrcmpW (lpString1="3076", lpString2=".") returned 1 [0194.192] lstrcmpW (lpString1="3076", lpString2="..") returned 1 [0194.192] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215fc0 [0194.192] FindNextFileW (in: hFindFile=0x214550, lpFindFileData=0x287f6d4 | out: lpFindFileData=0x287f6d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000043, cFileName="3082", cAlternateFileName="")) returned 1 [0194.192] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0194.192] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x2260f8 [0194.192] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0194.192] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225fb8 | out: hHeap=0x1f0000) returned 1 [0194.192] lstrcmpW (lpString1="3082", lpString2=".") returned 1 [0194.192] lstrcmpW (lpString1="3082", lpString2="..") returned 1 [0194.192] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215948 [0194.193] FindNextFileW (in: hFindFile=0x214550, lpFindFileData=0x287f6d4 | out: lpFindFileData=0x287f6d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000043, cFileName="Client", cAlternateFileName="")) returned 1 [0194.193] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0194.193] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x225c48 [0194.193] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0194.193] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2260f8 | out: hHeap=0x1f0000) returned 1 [0194.193] lstrcmpW (lpString1="Client", lpString2=".") returned 1 [0194.193] lstrcmpW (lpString1="Client", lpString2="..") returned 1 [0194.193] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215ab0 [0194.193] FindNextFileW (in: hFindFile=0x214550, lpFindFileData=0x287f6d4 | out: lpFindFileData=0x287f6d4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbc518d00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbc518d00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbc518d00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x3ef6, dwReserved0=0x0, dwReserved1=0xc0000043, cFileName="DHtmlHeader.html", cAlternateFileName="DHTMLH~1.HTM")) returned 1 [0194.193] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0194.193] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fefe8 [0194.193] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239ae0 [0194.193] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fefe8 | out: hHeap=0x1f0000) returned 1 [0194.193] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x225c48 | out: hHeap=0x1f0000) returned 1 [0194.193] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0194.193] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\DHtmlHeader.html" (normalized: "c:\\588bce7c90097ed212\\dhtmlheader.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x287f3e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0194.194] GetFileType (hFile=0x1e4) returned 0x1 [0194.194] CloseHandle (hObject=0x1e4) returned 1 [0194.194] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2394b0 [0194.194] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\DHtmlHeader.html" (normalized: "c:\\588bce7c90097ed212\\dhtmlheader.html"), fInfoLevelId=0x0, lpFileInformation=0x287f474 | out: lpFileInformation=0x287f474*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbc518d00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbc518d00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbc518d00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x3ef6)) returned 1 [0194.194] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2394b0 | out: hHeap=0x1f0000) returned 1 [0194.194] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239770 [0194.194] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\DHtmlHeader.html" (normalized: "c:\\588bce7c90097ed212\\dhtmlheader.html"), fInfoLevelId=0x0, lpFileInformation=0x287f484 | out: lpFileInformation=0x287f484*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbc518d00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbc518d00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbc518d00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x3ef6)) returned 1 [0194.194] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239770 | out: hHeap=0x1f0000) returned 1 [0194.194] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239a30 [0194.195] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239a30 | out: hHeap=0x1f0000) returned 1 [0194.195] GetLastError () returned 0x0 [0194.195] SetLastError (dwErrCode=0x0) [0194.195] AreFileApisANSI () returned 1 [0194.195] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe5843c, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0194.195] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe5843c, cbMultiByte=4, lpWideCharStr=0x287f5e0, cchWideChar=4 | out: lpWideCharStr=".mdf") returned 4 [0194.195] GetLastError () returned 0x0 [0194.195] SetLastError (dwErrCode=0x0) [0194.195] AreFileApisANSI () returned 1 [0194.195] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58444, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0194.195] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58444, cbMultiByte=4, lpWideCharStr=0x287f5f8, cchWideChar=4 | out: lpWideCharStr=".pst") returned 4 [0194.195] GetLastError () returned 0x0 [0194.195] SetLastError (dwErrCode=0x0) [0194.195] AreFileApisANSI () returned 1 [0194.195] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe5844c, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0194.195] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe5844c, cbMultiByte=4, lpWideCharStr=0x287f610, cchWideChar=4 | out: lpWideCharStr=".bak") returned 4 [0194.195] GetLastError () returned 0x0 [0194.195] SetLastError (dwErrCode=0x0) [0194.195] AreFileApisANSI () returned 1 [0194.195] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58454, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0194.195] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58454, cbMultiByte=4, lpWideCharStr=0x287f628, cchWideChar=4 | out: lpWideCharStr=".tib") returned 4 [0194.195] GetLastError () returned 0x0 [0194.195] SetLastError (dwErrCode=0x0) [0194.196] AreFileApisANSI () returned 1 [0194.196] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58444, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0194.196] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58444, cbMultiByte=4, lpWideCharStr=0x287f640, cchWideChar=4 | out: lpWideCharStr=".pst") returned 4 [0194.196] GetLastError () returned 0x0 [0194.196] SetLastError (dwErrCode=0x0) [0194.196] AreFileApisANSI () returned 1 [0194.196] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe5845c, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0194.196] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe5845c, cbMultiByte=4, lpWideCharStr=0x287f658, cchWideChar=4 | out: lpWideCharStr=".DBF") returned 4 [0194.196] FindNextFileW (in: hFindFile=0x214550, lpFindFileData=0x287f6d4 | out: lpFindFileData=0x287f6d4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x159d5, dwReserved0=0x0, dwReserved1=0xc0000043, cFileName="DisplayIcon.ico", cAlternateFileName="DISPLA~1.ICO")) returned 1 [0194.196] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b9e0 [0194.196] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0194.196] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239508 [0194.196] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0194.196] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239ae0 | out: hHeap=0x1f0000) returned 1 [0194.196] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b9e0 | out: hHeap=0x1f0000) returned 1 [0194.196] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\DisplayIcon.ico" (normalized: "c:\\588bce7c90097ed212\\displayicon.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x287f3e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0194.197] GetFileType (hFile=0x1e4) returned 0x1 [0194.197] CloseHandle (hObject=0x1e4) returned 1 [0194.197] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239b38 [0194.197] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\DisplayIcon.ico" (normalized: "c:\\588bce7c90097ed212\\displayicon.ico"), fInfoLevelId=0x0, lpFileInformation=0x287f474 | out: lpFileInformation=0x287f474*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x159d5)) returned 1 [0194.197] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239b38 | out: hHeap=0x1f0000) returned 1 [0194.197] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2399d8 [0194.197] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\DisplayIcon.ico" (normalized: "c:\\588bce7c90097ed212\\displayicon.ico"), fInfoLevelId=0x0, lpFileInformation=0x287f484 | out: lpFileInformation=0x287f484*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x159d5)) returned 1 [0194.197] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2399d8 | out: hHeap=0x1f0000) returned 1 [0194.197] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239ae0 [0194.197] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239ae0 | out: hHeap=0x1f0000) returned 1 [0194.198] GetLastError () returned 0x0 [0194.198] SetLastError (dwErrCode=0x0) [0194.198] AreFileApisANSI () returned 1 [0194.198] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe5843c, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0194.198] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe5843c, cbMultiByte=4, lpWideCharStr=0x287f5e0, cchWideChar=4 | out: lpWideCharStr=".mdf") returned 4 [0194.198] GetLastError () returned 0x0 [0194.198] SetLastError (dwErrCode=0x0) [0194.198] AreFileApisANSI () returned 1 [0194.198] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58444, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0194.198] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58444, cbMultiByte=4, lpWideCharStr=0x287f5f8, cchWideChar=4 | out: lpWideCharStr=".pst") returned 4 [0194.198] GetLastError () returned 0x0 [0194.198] SetLastError (dwErrCode=0x0) [0194.198] AreFileApisANSI () returned 1 [0194.199] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe5844c, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0194.199] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe5844c, cbMultiByte=4, lpWideCharStr=0x287f610, cchWideChar=4 | out: lpWideCharStr=".bak") returned 4 [0194.199] GetLastError () returned 0x0 [0194.199] SetLastError (dwErrCode=0x0) [0194.199] AreFileApisANSI () returned 1 [0194.199] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58454, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0194.199] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58454, cbMultiByte=4, lpWideCharStr=0x287f628, cchWideChar=4 | out: lpWideCharStr=".tib") returned 4 [0194.199] GetLastError () returned 0x0 [0194.199] SetLastError (dwErrCode=0x0) [0194.199] AreFileApisANSI () returned 1 [0194.199] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58444, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0194.199] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58444, cbMultiByte=4, lpWideCharStr=0x287f640, cchWideChar=4 | out: lpWideCharStr=".pst") returned 4 [0194.199] GetLastError () returned 0x0 [0194.199] SetLastError (dwErrCode=0x0) [0194.199] AreFileApisANSI () returned 1 [0194.199] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe5845c, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0194.199] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe5845c, cbMultiByte=4, lpWideCharStr=0x287f658, cchWideChar=4 | out: lpWideCharStr=".DBF") returned 4 [0194.199] FindNextFileW (in: hFindFile=0x214550, lpFindFileData=0x287f6d4 | out: lpFindFileData=0x287f6d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000043, cFileName="Extended", cAlternateFileName="")) returned 1 [0194.199] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b8f0 [0194.199] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0194.199] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x226238 [0194.200] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0194.200] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239508 | out: hHeap=0x1f0000) returned 1 [0194.200] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b8f0 | out: hHeap=0x1f0000) returned 1 [0194.200] lstrcmpW (lpString1="Extended", lpString2=".") returned 1 [0194.200] lstrcmpW (lpString1="Extended", lpString2="..") returned 1 [0194.200] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215ea0 [0194.200] FindNextFileW (in: hFindFile=0x214550, lpFindFileData=0x287f6d4 | out: lpFindFileData=0x287f6d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc0000043, cFileName="Graphics", cAlternateFileName="")) returned 1 [0194.200] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b9e0 [0194.200] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1ff058 [0194.200] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x46) returned 0x2261e8 [0194.200] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1ff058 | out: hHeap=0x1f0000) returned 1 [0194.200] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x226238 | out: hHeap=0x1f0000) returned 1 [0194.200] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b9e0 | out: hHeap=0x1f0000) returned 1 [0194.200] lstrcmpW (lpString1="Graphics", lpString2=".") returned 1 [0194.200] lstrcmpW (lpString1="Graphics", lpString2="..") returned 1 [0194.200] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x216128 [0194.200] FindNextFileW (in: hFindFile=0x214550, lpFindFileData=0x287f6d4 | out: lpFindFileData=0x287f6d4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x87910600, ftCreationTime.dwHighDateTime=0x1ca2a27, ftLastAccessTime.dwLowDateTime=0x87910600, ftLastAccessTime.dwHighDateTime=0x1ca2a27, ftLastWriteTime.dwLowDateTime=0x87910600, ftLastWriteTime.dwHighDateTime=0x1ca2a27, nFileSizeHigh=0x0, nFileSizeLow=0xe2c, dwReserved0=0x0, dwReserved1=0xc0000043, cFileName="header.bmp", cAlternateFileName="")) returned 1 [0194.200] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b8f0 [0194.200] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1ff058 [0194.200] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239668 [0194.200] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1ff058 | out: hHeap=0x1f0000) returned 1 [0194.200] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2261e8 | out: hHeap=0x1f0000) returned 1 [0194.200] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b8f0 | out: hHeap=0x1f0000) returned 1 [0194.201] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\header.bmp" (normalized: "c:\\588bce7c90097ed212\\header.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x287f3e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0194.201] GetFileType (hFile=0x1e4) returned 0x1 [0194.201] CloseHandle (hObject=0x1e4) returned 1 [0194.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239718 [0194.201] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\header.bmp" (normalized: "c:\\588bce7c90097ed212\\header.bmp"), fInfoLevelId=0x0, lpFileInformation=0x287f474 | out: lpFileInformation=0x287f474*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x87910600, ftCreationTime.dwHighDateTime=0x1ca2a27, ftLastAccessTime.dwLowDateTime=0x87910600, ftLastAccessTime.dwHighDateTime=0x1ca2a27, ftLastWriteTime.dwLowDateTime=0x87910600, ftLastWriteTime.dwHighDateTime=0x1ca2a27, nFileSizeHigh=0x0, nFileSizeLow=0xe2c)) returned 1 [0194.201] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239718 | out: hHeap=0x1f0000) returned 1 [0194.201] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2399d8 [0194.202] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\header.bmp" (normalized: "c:\\588bce7c90097ed212\\header.bmp"), fInfoLevelId=0x0, lpFileInformation=0x287f484 | out: lpFileInformation=0x287f484*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x87910600, ftCreationTime.dwHighDateTime=0x1ca2a27, ftLastAccessTime.dwLowDateTime=0x87910600, ftLastAccessTime.dwHighDateTime=0x1ca2a27, ftLastWriteTime.dwLowDateTime=0x87910600, ftLastWriteTime.dwHighDateTime=0x1ca2a27, nFileSizeHigh=0x0, nFileSizeLow=0xe2c)) returned 1 [0194.202] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2399d8 | out: hHeap=0x1f0000) returned 1 [0194.202] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239770 [0194.202] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239770 | out: hHeap=0x1f0000) returned 1 [0194.202] GetLastError () returned 0x0 [0194.202] SetLastError (dwErrCode=0x0) [0194.202] AreFileApisANSI () returned 1 [0194.202] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe5843c, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0194.202] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe5843c, cbMultiByte=4, lpWideCharStr=0x287f5e0, cchWideChar=4 | out: lpWideCharStr=".mdf") returned 4 [0194.202] GetLastError () returned 0x0 [0194.202] SetLastError (dwErrCode=0x0) [0194.202] AreFileApisANSI () returned 1 [0194.202] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58444, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0194.202] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58444, cbMultiByte=4, lpWideCharStr=0x287f5f8, cchWideChar=4 | out: lpWideCharStr=".pst") returned 4 [0194.202] GetLastError () returned 0x0 [0194.202] SetLastError (dwErrCode=0x0) [0194.202] AreFileApisANSI () returned 1 [0194.202] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe5844c, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0194.202] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe5844c, cbMultiByte=4, lpWideCharStr=0x287f610, cchWideChar=4 | out: lpWideCharStr=".bak") returned 4 [0194.202] GetLastError () returned 0x0 [0194.203] SetLastError (dwErrCode=0x0) [0194.203] AreFileApisANSI () returned 1 [0194.203] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58454, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0194.203] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58454, cbMultiByte=4, lpWideCharStr=0x287f628, cchWideChar=4 | out: lpWideCharStr=".tib") returned 4 [0194.203] GetLastError () returned 0x0 [0194.203] SetLastError (dwErrCode=0x0) [0194.203] AreFileApisANSI () returned 1 [0194.203] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58444, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0194.203] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58444, cbMultiByte=4, lpWideCharStr=0x287f640, cchWideChar=4 | out: lpWideCharStr=".pst") returned 4 [0194.203] GetLastError () returned 0x0 [0194.203] SetLastError (dwErrCode=0x0) [0194.203] AreFileApisANSI () returned 1 [0194.203] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe5845c, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0194.203] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe5845c, cbMultiByte=4, lpWideCharStr=0x287f658, cchWideChar=4 | out: lpWideCharStr=".DBF") returned 4 [0194.203] FindNextFileW (in: hFindFile=0x214550, lpFindFileData=0x287f6d4 | out: lpFindFileData=0x287f6d4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x66ea7e00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0x66ea7e00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0x66ea7e00, ftLastWriteTime.dwHighDateTime=0x1cac6e3, nFileSizeHigh=0x0, nFileSizeLow=0xad1384b, dwReserved0=0x0, dwReserved1=0xc0000043, cFileName="netfx_Core.mzz", cAlternateFileName="NETFX_~1.MZZ")) returned 1 [0194.203] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x20b9e0 [0194.203] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x1fef78 [0194.203] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2398d0 [0194.203] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1fef78 | out: hHeap=0x1f0000) returned 1 [0194.203] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239668 | out: hHeap=0x1f0000) returned 1 [0194.203] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b9e0 | out: hHeap=0x1f0000) returned 1 [0194.203] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\netfx_Core.mzz" (normalized: "c:\\588bce7c90097ed212\\netfx_core.mzz"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x287f3e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0194.204] GetFileType (hFile=0x1e4) returned 0x1 [0194.204] CloseHandle (hObject=0x1e4) returned 1 [0198.375] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2396c0 [0198.375] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\netfx_Core.mzz" (normalized: "c:\\588bce7c90097ed212\\netfx_core.mzz"), fInfoLevelId=0x0, lpFileInformation=0x287f474 | out: lpFileInformation=0x287f474*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x66ea7e00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0x66ea7e00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0x66ea7e00, ftLastWriteTime.dwHighDateTime=0x1cac6e3, nFileSizeHigh=0x0, nFileSizeLow=0xad1384b)) returned 1 [0198.375] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2396c0 | out: hHeap=0x1f0000) returned 1 [0198.375] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239928 [0198.375] GetFileAttributesExW (in: lpFileName="C:\\\\588bce7c90097ed212\\netfx_Core.mzz" (normalized: "c:\\588bce7c90097ed212\\netfx_core.mzz"), fInfoLevelId=0x0, lpFileInformation=0x287f484 | out: lpFileInformation=0x287f484*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x66ea7e00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0x66ea7e00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0x66ea7e00, ftLastWriteTime.dwHighDateTime=0x1cac6e3, nFileSizeHigh=0x0, nFileSizeLow=0xad1384b)) returned 1 [0198.375] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x239928 | out: hHeap=0x1f0000) returned 1 [0198.375] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x2397c8 [0198.376] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2397c8 | out: hHeap=0x1f0000) returned 1 [0198.376] GetLastError () returned 0x0 [0198.376] SetLastError (dwErrCode=0x0) [0198.376] AreFileApisANSI () returned 1 [0198.376] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58420, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0198.376] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0xe58420, cbMultiByte=4, lpWideCharStr=0x287f5b0, cchWideChar=4 | out: lpWideCharStr=".exe") returned 4 [0198.376] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x238028 [0198.376] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x40) returned 0x215ca8 [0198.376] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x190) returned 0x22e690 [0198.376] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x50) returned 0x239820 [0198.376] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x30) returned 0x21d248 [0198.376] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20) returned 0x2380a0 [0198.376] CryptAcquireContextA (in: phProv=0x287ec98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x287ec98*=0x229f18) returned 1 [0198.379] CryptGenRandom (in: hProv=0x20c500, dwLen=0x20, pbBuffer=0x2380a0 | out: pbBuffer=0x2380a0) returned 1 [0198.379] CryptReleaseContext (hProv=0x229f18, dwFlags=0x0) returned 1 [0198.379] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x2380a0 | out: hHeap=0x1f0000) returned 1 [0198.379] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x253678 [0198.379] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x225048 [0198.379] QueryPerformanceCounter (in: lpPerformanceCount=0x287ec2c | out: lpPerformanceCount=0x287ec2c*=35574782901) returned 1 [0198.379] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x287ec6c | out: lpSystemTimeAsFileTime=0x287ec6c) [0198.379] QueryPerformanceCounter (in: lpPerformanceCount=0x287ec2c | out: lpPerformanceCount=0x287ec2c*=35574802225) returned 1 [0198.379] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x287ec6c | out: lpSystemTimeAsFileTime=0x287ec6c) [0198.379] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x2c) returned 0x21cf70 [0198.379] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x120c) returned 0x256f90 [0198.379] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x103) returned 0x225158 [0198.379] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xc3) returned 0x2310b8 [0198.380] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x210228 [0198.380] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x23) returned 0x2068f8 [0198.380] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x10) returned 0x2101f8 [0198.380] GetLastError () returned 0x0 [0198.380] SetLastError (dwErrCode=0x0) [0198.380] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21cf70 | out: hHeap=0x1f0000) returned 1 [0198.380] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x60) returned 0x214a28 [0198.380] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xa0) returned 0x21a770 [0198.380] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x214a28 | out: hHeap=0x1f0000) returned 1 [0198.380] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xee) returned 0x2351d8 [0198.380] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x21a770 | out: hHeap=0x1f0000) returned 1 [0198.380] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x206560 [0198.380] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x206500 [0198.381] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\netfx_Core.mzz.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\netfx_core.mzz.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x287eb38, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0198.381] GetFileType (hFile=0x1e4) returned 0x1 [0198.381] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x206510 [0198.381] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x206430 [0198.382] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\netfx_Core.mzz" (normalized: "c:\\588bce7c90097ed212\\netfx_core.mzz"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x287eb68, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0198.382] GetFileType (hFile=0x1f0) returned 0x1 [0198.382] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x205290 [0198.382] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f70 [0198.382] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x225268 [0198.382] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x206520 [0198.382] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x206440 [0198.383] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\netfx_Core.mzz.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\netfx_core.mzz.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x287eab4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x20c [0198.383] GetFileType (hFile=0x20c) returned 0x1 [0198.383] GetLastError () returned 0xb7 [0198.383] SetLastError (dwErrCode=0xb7) [0198.383] GetLastError () returned 0xb7 [0198.383] SetLastError (dwErrCode=0xb7) [0198.383] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x205290 | out: hHeap=0x1f0000) returned 1 [0198.384] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f70 | out: hHeap=0x1f0000) returned 1 [0198.384] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xe4) returned 0x24f370 [0198.384] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204d50 [0198.384] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e30 [0198.384] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204df0 [0198.384] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb0) returned 0x24f460 [0198.384] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x2063f0 [0198.384] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x206400 [0198.384] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\netfx_Core.mzz.Email=[Mr.TeslaBrain@protonmail.com]ID=[20ZXEV9TMHPKLQY].odveta" (normalized: "c:\\588bce7c90097ed212\\netfx_core.mzz.email=[mr.teslabrain@protonmail.com]id=[20zxev9tmhpklqy].odveta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x287eab4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0198.385] GetFileType (hFile=0x208) returned 0x1 [0198.385] GetLastError () returned 0xb7 [0198.385] SetLastError (dwErrCode=0xb7) [0198.385] GetLastError () returned 0xb7 [0198.385] SetLastError (dwErrCode=0xb7) [0198.385] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204e30 | out: hHeap=0x1f0000) returned 1 [0198.385] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204df0 | out: hHeap=0x1f0000) returned 1 [0198.385] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204f30 [0198.385] GetLastError () returned 0xb7 [0198.386] SetLastError (dwErrCode=0xb7) [0198.386] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204f30 | out: hHeap=0x1f0000) returned 1 [0198.386] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204eb0 [0198.386] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204ed0 [0198.386] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x14) returned 0x204e10 [0198.386] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0xb8) returned 0x24f518 [0198.386] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x206530 [0198.386] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x8) returned 0x206410 [0198.387] CreateFileW (lpFileName="C:\\\\588bce7c90097ed212\\netfx_Core.mzz" (normalized: "c:\\588bce7c90097ed212\\netfx_core.mzz"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x287eaac, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0198.387] GetFileType (hFile=0x1f8) returned 0x1 [0198.387] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x244e00 [0198.387] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea08, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea08*=0x1000, lpOverlapped=0x0) returned 1 [0198.390] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x400) returned 0x24c1f8 [0198.390] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x1000) returned 0x246e10 [0198.390] GetLastError () returned 0x0 [0198.390] SetLastError (dwErrCode=0x0) [0198.390] GetLastError () returned 0x0 [0198.390] SetLastError (dwErrCode=0x0) [0198.391] GetLastError () returned 0x0 [0198.391] SetLastError (dwErrCode=0x0) [0198.391] GetLastError () returned 0x0 [0198.391] SetLastError (dwErrCode=0x0) [0198.391] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0198.392] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0198.394] GetLastError () returned 0x0 [0198.394] SetLastError (dwErrCode=0x0) [0198.394] GetLastError () returned 0x0 [0198.394] SetLastError (dwErrCode=0x0) [0198.394] GetLastError () returned 0x0 [0198.394] SetLastError (dwErrCode=0x0) [0198.395] GetLastError () returned 0x0 [0198.395] SetLastError (dwErrCode=0x0) [0198.395] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0198.396] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0198.396] GetLastError () returned 0x0 [0198.396] SetLastError (dwErrCode=0x0) [0198.397] GetLastError () returned 0x0 [0198.397] SetLastError (dwErrCode=0x0) [0198.397] GetLastError () returned 0x0 [0198.397] SetLastError (dwErrCode=0x0) [0198.397] GetLastError () returned 0x0 [0198.398] SetLastError (dwErrCode=0x0) [0198.398] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0198.399] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0198.399] GetLastError () returned 0x0 [0198.399] SetLastError (dwErrCode=0x0) [0198.400] GetLastError () returned 0x0 [0198.400] SetLastError (dwErrCode=0x0) [0198.400] GetLastError () returned 0x0 [0198.400] SetLastError (dwErrCode=0x0) [0198.401] GetLastError () returned 0x0 [0198.401] SetLastError (dwErrCode=0x0) [0198.401] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0198.402] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0198.402] GetLastError () returned 0x0 [0198.402] SetLastError (dwErrCode=0x0) [0198.403] GetLastError () returned 0x0 [0198.403] SetLastError (dwErrCode=0x0) [0198.403] GetLastError () returned 0x0 [0198.403] SetLastError (dwErrCode=0x0) [0198.404] GetLastError () returned 0x0 [0198.404] SetLastError (dwErrCode=0x0) [0198.404] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0198.405] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0198.405] GetLastError () returned 0x0 [0198.405] SetLastError (dwErrCode=0x0) [0198.406] GetLastError () returned 0x0 [0198.406] SetLastError (dwErrCode=0x0) [0198.406] GetLastError () returned 0x0 [0198.406] SetLastError (dwErrCode=0x0) [0198.406] GetLastError () returned 0x0 [0198.406] SetLastError (dwErrCode=0x0) [0198.407] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0198.407] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0198.408] GetLastError () returned 0x0 [0198.408] SetLastError (dwErrCode=0x0) [0198.408] GetLastError () returned 0x0 [0198.408] SetLastError (dwErrCode=0x0) [0198.409] GetLastError () returned 0x0 [0198.409] SetLastError (dwErrCode=0x0) [0198.409] GetLastError () returned 0x0 [0198.409] SetLastError (dwErrCode=0x0) [0198.410] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0198.410] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0198.410] GetLastError () returned 0x0 [0198.411] SetLastError (dwErrCode=0x0) [0198.411] GetLastError () returned 0x0 [0198.411] SetLastError (dwErrCode=0x0) [0198.411] GetLastError () returned 0x0 [0198.411] SetLastError (dwErrCode=0x0) [0198.412] GetLastError () returned 0x0 [0198.412] SetLastError (dwErrCode=0x0) [0198.412] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0198.413] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0198.413] GetLastError () returned 0x0 [0198.413] SetLastError (dwErrCode=0x0) [0198.413] GetLastError () returned 0x0 [0198.413] SetLastError (dwErrCode=0x0) [0198.414] GetLastError () returned 0x0 [0198.414] SetLastError (dwErrCode=0x0) [0198.414] GetLastError () returned 0x0 [0198.414] SetLastError (dwErrCode=0x0) [0198.414] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0198.415] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0198.415] GetLastError () returned 0x0 [0198.416] SetLastError (dwErrCode=0x0) [0198.416] GetLastError () returned 0x0 [0198.416] SetLastError (dwErrCode=0x0) [0198.416] GetLastError () returned 0x0 [0198.416] SetLastError (dwErrCode=0x0) [0198.417] GetLastError () returned 0x0 [0198.417] SetLastError (dwErrCode=0x0) [0198.417] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0198.417] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0198.418] GetLastError () returned 0x0 [0198.418] SetLastError (dwErrCode=0x0) [0198.418] GetLastError () returned 0x0 [0198.418] SetLastError (dwErrCode=0x0) [0198.418] GetLastError () returned 0x0 [0198.419] SetLastError (dwErrCode=0x0) [0198.419] GetLastError () returned 0x0 [0198.419] SetLastError (dwErrCode=0x0) [0198.419] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0198.844] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0198.845] GetLastError () returned 0x0 [0198.845] SetLastError (dwErrCode=0x0) [0198.845] GetLastError () returned 0x0 [0198.845] SetLastError (dwErrCode=0x0) [0198.845] GetLastError () returned 0x0 [0198.845] SetLastError (dwErrCode=0x0) [0198.845] GetLastError () returned 0x0 [0198.845] SetLastError (dwErrCode=0x0) [0198.845] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0198.846] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0198.846] GetLastError () returned 0x0 [0198.846] SetLastError (dwErrCode=0x0) [0198.846] GetLastError () returned 0x0 [0198.847] SetLastError (dwErrCode=0x0) [0198.847] GetLastError () returned 0x0 [0198.847] SetLastError (dwErrCode=0x0) [0198.847] GetLastError () returned 0x0 [0198.847] SetLastError (dwErrCode=0x0) [0198.847] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0198.848] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0198.848] GetLastError () returned 0x0 [0198.848] SetLastError (dwErrCode=0x0) [0198.848] GetLastError () returned 0x0 [0198.848] SetLastError (dwErrCode=0x0) [0198.849] GetLastError () returned 0x0 [0198.849] SetLastError (dwErrCode=0x0) [0198.849] GetLastError () returned 0x0 [0198.849] SetLastError (dwErrCode=0x0) [0198.849] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0198.849] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0198.849] GetLastError () returned 0x0 [0198.850] SetLastError (dwErrCode=0x0) [0198.850] GetLastError () returned 0x0 [0198.850] SetLastError (dwErrCode=0x0) [0198.850] GetLastError () returned 0x0 [0198.850] SetLastError (dwErrCode=0x0) [0198.851] GetLastError () returned 0x0 [0198.851] SetLastError (dwErrCode=0x0) [0198.851] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0198.851] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0198.851] GetLastError () returned 0x0 [0198.851] SetLastError (dwErrCode=0x0) [0198.851] GetLastError () returned 0x0 [0198.852] SetLastError (dwErrCode=0x0) [0198.852] GetLastError () returned 0x0 [0198.852] SetLastError (dwErrCode=0x0) [0198.852] GetLastError () returned 0x0 [0198.852] SetLastError (dwErrCode=0x0) [0198.852] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0198.852] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0198.853] GetLastError () returned 0x0 [0198.853] SetLastError (dwErrCode=0x0) [0198.853] GetLastError () returned 0x0 [0198.853] SetLastError (dwErrCode=0x0) [0198.853] GetLastError () returned 0x0 [0198.853] SetLastError (dwErrCode=0x0) [0198.853] GetLastError () returned 0x0 [0198.853] SetLastError (dwErrCode=0x0) [0198.853] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0198.854] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0198.854] GetLastError () returned 0x0 [0198.854] SetLastError (dwErrCode=0x0) [0198.854] GetLastError () returned 0x0 [0198.854] SetLastError (dwErrCode=0x0) [0198.854] GetLastError () returned 0x0 [0198.855] SetLastError (dwErrCode=0x0) [0198.855] GetLastError () returned 0x0 [0198.855] SetLastError (dwErrCode=0x0) [0198.855] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0198.855] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0198.855] GetLastError () returned 0x0 [0198.856] SetLastError (dwErrCode=0x0) [0198.856] GetLastError () returned 0x0 [0198.856] SetLastError (dwErrCode=0x0) [0198.856] GetLastError () returned 0x0 [0198.856] SetLastError (dwErrCode=0x0) [0198.856] GetLastError () returned 0x0 [0198.856] SetLastError (dwErrCode=0x0) [0198.856] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0198.857] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0198.857] GetLastError () returned 0x0 [0198.857] SetLastError (dwErrCode=0x0) [0198.857] GetLastError () returned 0x0 [0198.857] SetLastError (dwErrCode=0x0) [0198.858] GetLastError () returned 0x0 [0198.858] SetLastError (dwErrCode=0x0) [0198.858] GetLastError () returned 0x0 [0198.858] SetLastError (dwErrCode=0x0) [0198.858] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0198.858] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0198.859] GetLastError () returned 0x0 [0198.859] SetLastError (dwErrCode=0x0) [0198.859] GetLastError () returned 0x0 [0198.859] SetLastError (dwErrCode=0x0) [0198.859] GetLastError () returned 0x0 [0198.859] SetLastError (dwErrCode=0x0) [0198.859] GetLastError () returned 0x0 [0198.859] SetLastError (dwErrCode=0x0) [0198.860] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0198.860] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0198.860] GetLastError () returned 0x0 [0198.860] SetLastError (dwErrCode=0x0) [0198.860] GetLastError () returned 0x0 [0198.861] SetLastError (dwErrCode=0x0) [0198.861] GetLastError () returned 0x0 [0198.861] SetLastError (dwErrCode=0x0) [0198.861] GetLastError () returned 0x0 [0198.861] SetLastError (dwErrCode=0x0) [0198.861] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0198.861] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0198.862] GetLastError () returned 0x0 [0198.862] SetLastError (dwErrCode=0x0) [0198.862] GetLastError () returned 0x0 [0198.862] SetLastError (dwErrCode=0x0) [0198.862] GetLastError () returned 0x0 [0198.862] SetLastError (dwErrCode=0x0) [0198.862] GetLastError () returned 0x0 [0198.862] SetLastError (dwErrCode=0x0) [0198.863] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0198.863] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0198.863] GetLastError () returned 0x0 [0198.863] SetLastError (dwErrCode=0x0) [0198.864] GetLastError () returned 0x0 [0198.864] SetLastError (dwErrCode=0x0) [0198.864] GetLastError () returned 0x0 [0198.864] SetLastError (dwErrCode=0x0) [0198.864] GetLastError () returned 0x0 [0198.864] SetLastError (dwErrCode=0x0) [0198.865] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0198.865] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0198.865] GetLastError () returned 0x0 [0198.866] SetLastError (dwErrCode=0x0) [0198.866] GetLastError () returned 0x0 [0198.866] SetLastError (dwErrCode=0x0) [0198.866] GetLastError () returned 0x0 [0198.866] SetLastError (dwErrCode=0x0) [0198.866] GetLastError () returned 0x0 [0198.866] SetLastError (dwErrCode=0x0) [0198.866] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0198.867] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0198.867] GetLastError () returned 0x0 [0198.867] SetLastError (dwErrCode=0x0) [0198.867] GetLastError () returned 0x0 [0198.867] SetLastError (dwErrCode=0x0) [0198.867] GetLastError () returned 0x0 [0198.867] SetLastError (dwErrCode=0x0) [0198.868] GetLastError () returned 0x0 [0198.868] SetLastError (dwErrCode=0x0) [0198.868] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0198.868] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0198.868] GetLastError () returned 0x0 [0198.868] SetLastError (dwErrCode=0x0) [0198.868] GetLastError () returned 0x0 [0198.869] SetLastError (dwErrCode=0x0) [0198.869] GetLastError () returned 0x0 [0198.869] SetLastError (dwErrCode=0x0) [0198.869] GetLastError () returned 0x0 [0198.869] SetLastError (dwErrCode=0x0) [0198.869] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0198.869] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0198.870] GetLastError () returned 0x0 [0198.870] SetLastError (dwErrCode=0x0) [0198.870] GetLastError () returned 0x0 [0198.870] SetLastError (dwErrCode=0x0) [0198.870] GetLastError () returned 0x0 [0198.870] SetLastError (dwErrCode=0x0) [0198.870] GetLastError () returned 0x0 [0198.870] SetLastError (dwErrCode=0x0) [0198.871] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0198.871] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0198.871] GetLastError () returned 0x0 [0198.871] SetLastError (dwErrCode=0x0) [0198.871] GetLastError () returned 0x0 [0198.871] SetLastError (dwErrCode=0x0) [0198.871] GetLastError () returned 0x0 [0198.871] SetLastError (dwErrCode=0x0) [0198.871] GetLastError () returned 0x0 [0198.872] SetLastError (dwErrCode=0x0) [0198.872] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0198.872] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0198.872] GetLastError () returned 0x0 [0198.872] SetLastError (dwErrCode=0x0) [0198.872] GetLastError () returned 0x0 [0198.872] SetLastError (dwErrCode=0x0) [0198.872] GetLastError () returned 0x0 [0198.873] SetLastError (dwErrCode=0x0) [0198.873] GetLastError () returned 0x0 [0198.873] SetLastError (dwErrCode=0x0) [0198.873] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0198.873] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0198.873] GetLastError () returned 0x0 [0198.874] SetLastError (dwErrCode=0x0) [0198.874] GetLastError () returned 0x0 [0198.874] SetLastError (dwErrCode=0x0) [0198.874] GetLastError () returned 0x0 [0198.874] SetLastError (dwErrCode=0x0) [0198.874] GetLastError () returned 0x0 [0198.874] SetLastError (dwErrCode=0x0) [0198.874] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0198.874] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0198.875] GetLastError () returned 0x0 [0198.875] SetLastError (dwErrCode=0x0) [0198.875] GetLastError () returned 0x0 [0198.875] SetLastError (dwErrCode=0x0) [0198.875] GetLastError () returned 0x0 [0198.875] SetLastError (dwErrCode=0x0) [0198.875] GetLastError () returned 0x0 [0198.875] SetLastError (dwErrCode=0x0) [0198.875] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0198.876] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0198.876] GetLastError () returned 0x0 [0198.876] SetLastError (dwErrCode=0x0) [0198.876] GetLastError () returned 0x0 [0198.876] SetLastError (dwErrCode=0x0) [0198.876] GetLastError () returned 0x0 [0198.876] SetLastError (dwErrCode=0x0) [0198.877] GetLastError () returned 0x0 [0198.877] SetLastError (dwErrCode=0x0) [0198.877] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0198.877] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0198.877] GetLastError () returned 0x0 [0198.877] SetLastError (dwErrCode=0x0) [0198.878] GetLastError () returned 0x0 [0198.878] SetLastError (dwErrCode=0x0) [0198.878] GetLastError () returned 0x0 [0198.878] SetLastError (dwErrCode=0x0) [0198.878] GetLastError () returned 0x0 [0198.878] SetLastError (dwErrCode=0x0) [0198.878] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.222] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.223] GetLastError () returned 0x0 [0199.223] SetLastError (dwErrCode=0x0) [0199.223] GetLastError () returned 0x0 [0199.223] SetLastError (dwErrCode=0x0) [0199.223] GetLastError () returned 0x0 [0199.223] SetLastError (dwErrCode=0x0) [0199.223] GetLastError () returned 0x0 [0199.223] SetLastError (dwErrCode=0x0) [0199.223] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.223] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.224] GetLastError () returned 0x0 [0199.224] SetLastError (dwErrCode=0x0) [0199.224] GetLastError () returned 0x0 [0199.224] SetLastError (dwErrCode=0x0) [0199.224] GetLastError () returned 0x0 [0199.224] SetLastError (dwErrCode=0x0) [0199.224] GetLastError () returned 0x0 [0199.224] SetLastError (dwErrCode=0x0) [0199.224] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.224] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.225] GetLastError () returned 0x0 [0199.225] SetLastError (dwErrCode=0x0) [0199.225] GetLastError () returned 0x0 [0199.225] SetLastError (dwErrCode=0x0) [0199.225] GetLastError () returned 0x0 [0199.225] SetLastError (dwErrCode=0x0) [0199.225] GetLastError () returned 0x0 [0199.225] SetLastError (dwErrCode=0x0) [0199.225] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.225] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.226] GetLastError () returned 0x0 [0199.226] SetLastError (dwErrCode=0x0) [0199.226] GetLastError () returned 0x0 [0199.226] SetLastError (dwErrCode=0x0) [0199.226] GetLastError () returned 0x0 [0199.226] SetLastError (dwErrCode=0x0) [0199.226] GetLastError () returned 0x0 [0199.226] SetLastError (dwErrCode=0x0) [0199.226] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.226] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.227] GetLastError () returned 0x0 [0199.227] SetLastError (dwErrCode=0x0) [0199.227] GetLastError () returned 0x0 [0199.227] SetLastError (dwErrCode=0x0) [0199.227] GetLastError () returned 0x0 [0199.227] SetLastError (dwErrCode=0x0) [0199.227] GetLastError () returned 0x0 [0199.227] SetLastError (dwErrCode=0x0) [0199.227] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.227] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.227] GetLastError () returned 0x0 [0199.228] SetLastError (dwErrCode=0x0) [0199.228] GetLastError () returned 0x0 [0199.228] SetLastError (dwErrCode=0x0) [0199.228] GetLastError () returned 0x0 [0199.228] SetLastError (dwErrCode=0x0) [0199.228] GetLastError () returned 0x0 [0199.228] SetLastError (dwErrCode=0x0) [0199.228] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.228] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.229] GetLastError () returned 0x0 [0199.229] SetLastError (dwErrCode=0x0) [0199.229] GetLastError () returned 0x0 [0199.229] SetLastError (dwErrCode=0x0) [0199.229] GetLastError () returned 0x0 [0199.229] SetLastError (dwErrCode=0x0) [0199.229] GetLastError () returned 0x0 [0199.229] SetLastError (dwErrCode=0x0) [0199.229] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.229] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.230] GetLastError () returned 0x0 [0199.230] SetLastError (dwErrCode=0x0) [0199.230] GetLastError () returned 0x0 [0199.230] SetLastError (dwErrCode=0x0) [0199.230] GetLastError () returned 0x0 [0199.230] SetLastError (dwErrCode=0x0) [0199.230] GetLastError () returned 0x0 [0199.230] SetLastError (dwErrCode=0x0) [0199.230] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.230] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.231] GetLastError () returned 0x0 [0199.231] SetLastError (dwErrCode=0x0) [0199.231] GetLastError () returned 0x0 [0199.231] SetLastError (dwErrCode=0x0) [0199.231] GetLastError () returned 0x0 [0199.231] SetLastError (dwErrCode=0x0) [0199.231] GetLastError () returned 0x0 [0199.231] SetLastError (dwErrCode=0x0) [0199.231] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.231] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.232] GetLastError () returned 0x0 [0199.232] SetLastError (dwErrCode=0x0) [0199.232] GetLastError () returned 0x0 [0199.232] SetLastError (dwErrCode=0x0) [0199.232] GetLastError () returned 0x0 [0199.232] SetLastError (dwErrCode=0x0) [0199.232] GetLastError () returned 0x0 [0199.232] SetLastError (dwErrCode=0x0) [0199.232] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.232] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.233] GetLastError () returned 0x0 [0199.233] SetLastError (dwErrCode=0x0) [0199.233] GetLastError () returned 0x0 [0199.233] SetLastError (dwErrCode=0x0) [0199.233] GetLastError () returned 0x0 [0199.233] SetLastError (dwErrCode=0x0) [0199.233] GetLastError () returned 0x0 [0199.233] SetLastError (dwErrCode=0x0) [0199.233] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.233] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.233] GetLastError () returned 0x0 [0199.233] SetLastError (dwErrCode=0x0) [0199.234] GetLastError () returned 0x0 [0199.234] SetLastError (dwErrCode=0x0) [0199.234] GetLastError () returned 0x0 [0199.234] SetLastError (dwErrCode=0x0) [0199.234] GetLastError () returned 0x0 [0199.234] SetLastError (dwErrCode=0x0) [0199.234] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.234] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.234] GetLastError () returned 0x0 [0199.234] SetLastError (dwErrCode=0x0) [0199.234] GetLastError () returned 0x0 [0199.234] SetLastError (dwErrCode=0x0) [0199.234] GetLastError () returned 0x0 [0199.235] SetLastError (dwErrCode=0x0) [0199.235] GetLastError () returned 0x0 [0199.235] SetLastError (dwErrCode=0x0) [0199.235] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.235] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.235] GetLastError () returned 0x0 [0199.235] SetLastError (dwErrCode=0x0) [0199.235] GetLastError () returned 0x0 [0199.235] SetLastError (dwErrCode=0x0) [0199.235] GetLastError () returned 0x0 [0199.235] SetLastError (dwErrCode=0x0) [0199.236] GetLastError () returned 0x0 [0199.236] SetLastError (dwErrCode=0x0) [0199.236] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.236] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.236] GetLastError () returned 0x0 [0199.236] SetLastError (dwErrCode=0x0) [0199.236] GetLastError () returned 0x0 [0199.237] SetLastError (dwErrCode=0x0) [0199.237] GetLastError () returned 0x0 [0199.237] SetLastError (dwErrCode=0x0) [0199.237] GetLastError () returned 0x0 [0199.237] SetLastError (dwErrCode=0x0) [0199.237] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.237] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.237] GetLastError () returned 0x0 [0199.238] SetLastError (dwErrCode=0x0) [0199.238] GetLastError () returned 0x0 [0199.238] SetLastError (dwErrCode=0x0) [0199.238] GetLastError () returned 0x0 [0199.238] SetLastError (dwErrCode=0x0) [0199.238] GetLastError () returned 0x0 [0199.238] SetLastError (dwErrCode=0x0) [0199.238] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.238] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.239] GetLastError () returned 0x0 [0199.239] SetLastError (dwErrCode=0x0) [0199.239] GetLastError () returned 0x0 [0199.239] SetLastError (dwErrCode=0x0) [0199.239] GetLastError () returned 0x0 [0199.239] SetLastError (dwErrCode=0x0) [0199.239] GetLastError () returned 0x0 [0199.239] SetLastError (dwErrCode=0x0) [0199.239] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.240] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.240] GetLastError () returned 0x0 [0199.240] SetLastError (dwErrCode=0x0) [0199.240] GetLastError () returned 0x0 [0199.240] SetLastError (dwErrCode=0x0) [0199.240] GetLastError () returned 0x0 [0199.240] SetLastError (dwErrCode=0x0) [0199.240] GetLastError () returned 0x0 [0199.240] SetLastError (dwErrCode=0x0) [0199.240] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.241] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.241] GetLastError () returned 0x0 [0199.241] SetLastError (dwErrCode=0x0) [0199.241] GetLastError () returned 0x0 [0199.241] SetLastError (dwErrCode=0x0) [0199.241] GetLastError () returned 0x0 [0199.241] SetLastError (dwErrCode=0x0) [0199.241] GetLastError () returned 0x0 [0199.241] SetLastError (dwErrCode=0x0) [0199.241] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.241] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.242] GetLastError () returned 0x0 [0199.242] SetLastError (dwErrCode=0x0) [0199.242] GetLastError () returned 0x0 [0199.242] SetLastError (dwErrCode=0x0) [0199.242] GetLastError () returned 0x0 [0199.242] SetLastError (dwErrCode=0x0) [0199.242] GetLastError () returned 0x0 [0199.242] SetLastError (dwErrCode=0x0) [0199.242] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.243] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.243] GetLastError () returned 0x0 [0199.243] SetLastError (dwErrCode=0x0) [0199.243] GetLastError () returned 0x0 [0199.243] SetLastError (dwErrCode=0x0) [0199.243] GetLastError () returned 0x0 [0199.243] SetLastError (dwErrCode=0x0) [0199.243] GetLastError () returned 0x0 [0199.243] SetLastError (dwErrCode=0x0) [0199.243] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.244] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.244] GetLastError () returned 0x0 [0199.244] SetLastError (dwErrCode=0x0) [0199.244] GetLastError () returned 0x0 [0199.244] SetLastError (dwErrCode=0x0) [0199.244] GetLastError () returned 0x0 [0199.244] SetLastError (dwErrCode=0x0) [0199.244] GetLastError () returned 0x0 [0199.244] SetLastError (dwErrCode=0x0) [0199.244] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.245] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.245] GetLastError () returned 0x0 [0199.245] SetLastError (dwErrCode=0x0) [0199.245] GetLastError () returned 0x0 [0199.245] SetLastError (dwErrCode=0x0) [0199.245] GetLastError () returned 0x0 [0199.245] SetLastError (dwErrCode=0x0) [0199.245] GetLastError () returned 0x0 [0199.245] SetLastError (dwErrCode=0x0) [0199.246] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.246] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.246] GetLastError () returned 0x0 [0199.246] SetLastError (dwErrCode=0x0) [0199.246] GetLastError () returned 0x0 [0199.246] SetLastError (dwErrCode=0x0) [0199.246] GetLastError () returned 0x0 [0199.246] SetLastError (dwErrCode=0x0) [0199.247] GetLastError () returned 0x0 [0199.247] SetLastError (dwErrCode=0x0) [0199.247] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.247] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.247] GetLastError () returned 0x0 [0199.247] SetLastError (dwErrCode=0x0) [0199.247] GetLastError () returned 0x0 [0199.247] SetLastError (dwErrCode=0x0) [0199.247] GetLastError () returned 0x0 [0199.247] SetLastError (dwErrCode=0x0) [0199.248] GetLastError () returned 0x0 [0199.248] SetLastError (dwErrCode=0x0) [0199.248] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.248] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.248] GetLastError () returned 0x0 [0199.248] SetLastError (dwErrCode=0x0) [0199.248] GetLastError () returned 0x0 [0199.248] SetLastError (dwErrCode=0x0) [0199.249] GetLastError () returned 0x0 [0199.249] SetLastError (dwErrCode=0x0) [0199.249] GetLastError () returned 0x0 [0199.249] SetLastError (dwErrCode=0x0) [0199.249] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.249] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.249] GetLastError () returned 0x0 [0199.249] SetLastError (dwErrCode=0x0) [0199.249] GetLastError () returned 0x0 [0199.250] SetLastError (dwErrCode=0x0) [0199.250] GetLastError () returned 0x0 [0199.250] SetLastError (dwErrCode=0x0) [0199.250] GetLastError () returned 0x0 [0199.250] SetLastError (dwErrCode=0x0) [0199.250] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.250] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.250] GetLastError () returned 0x0 [0199.250] SetLastError (dwErrCode=0x0) [0199.250] GetLastError () returned 0x0 [0199.251] SetLastError (dwErrCode=0x0) [0199.251] GetLastError () returned 0x0 [0199.251] SetLastError (dwErrCode=0x0) [0199.251] GetLastError () returned 0x0 [0199.251] SetLastError (dwErrCode=0x0) [0199.251] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.251] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.252] GetLastError () returned 0x0 [0199.252] SetLastError (dwErrCode=0x0) [0199.252] GetLastError () returned 0x0 [0199.252] SetLastError (dwErrCode=0x0) [0199.252] GetLastError () returned 0x0 [0199.252] SetLastError (dwErrCode=0x0) [0199.252] GetLastError () returned 0x0 [0199.252] SetLastError (dwErrCode=0x0) [0199.252] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.252] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.253] GetLastError () returned 0x0 [0199.253] SetLastError (dwErrCode=0x0) [0199.253] GetLastError () returned 0x0 [0199.253] SetLastError (dwErrCode=0x0) [0199.253] GetLastError () returned 0x0 [0199.253] SetLastError (dwErrCode=0x0) [0199.253] GetLastError () returned 0x0 [0199.253] SetLastError (dwErrCode=0x0) [0199.254] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.255] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.255] GetLastError () returned 0x0 [0199.255] SetLastError (dwErrCode=0x0) [0199.255] GetLastError () returned 0x0 [0199.255] SetLastError (dwErrCode=0x0) [0199.255] GetLastError () returned 0x0 [0199.255] SetLastError (dwErrCode=0x0) [0199.255] GetLastError () returned 0x0 [0199.256] SetLastError (dwErrCode=0x0) [0199.256] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.256] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.257] GetLastError () returned 0x0 [0199.257] SetLastError (dwErrCode=0x0) [0199.257] GetLastError () returned 0x0 [0199.257] SetLastError (dwErrCode=0x0) [0199.257] GetLastError () returned 0x0 [0199.257] SetLastError (dwErrCode=0x0) [0199.258] GetLastError () returned 0x0 [0199.258] SetLastError (dwErrCode=0x0) [0199.258] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.258] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.258] GetLastError () returned 0x0 [0199.258] SetLastError (dwErrCode=0x0) [0199.258] GetLastError () returned 0x0 [0199.258] SetLastError (dwErrCode=0x0) [0199.258] GetLastError () returned 0x0 [0199.258] SetLastError (dwErrCode=0x0) [0199.258] GetLastError () returned 0x0 [0199.259] SetLastError (dwErrCode=0x0) [0199.259] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.259] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.259] GetLastError () returned 0x0 [0199.259] SetLastError (dwErrCode=0x0) [0199.259] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.260] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.260] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.260] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.260] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.261] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.261] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.261] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.261] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.262] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.262] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.262] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.262] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.263] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.263] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.500] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.500] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.501] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.502] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.502] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.502] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.502] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.502] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.502] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.503] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.503] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.503] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.503] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.503] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.504] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.504] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.504] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.504] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.504] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.505] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.505] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.505] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.505] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.505] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.506] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.506] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.506] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.506] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.506] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.507] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.507] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.507] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.507] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.507] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.508] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.508] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.508] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.508] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.509] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.509] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.509] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.509] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.510] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.510] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.510] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.511] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.511] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.511] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.512] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.512] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.512] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.512] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.512] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.513] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.513] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.513] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.513] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.514] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.514] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.514] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.514] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.514] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.515] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.515] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.515] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.515] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.515] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.515] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.516] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.516] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.516] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.516] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.516] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.517] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.517] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.517] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.517] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.517] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.517] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.518] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.518] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.518] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.518] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.518] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.518] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.519] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.519] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.519] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.519] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.519] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.520] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.520] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.520] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.521] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.521] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.521] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.521] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.521] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.522] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.522] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.522] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.522] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.522] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.522] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.523] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.523] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.524] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.524] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.524] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.525] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.525] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.525] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.526] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.526] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.526] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.526] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.526] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.527] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.527] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.527] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.527] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.527] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.527] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.528] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.528] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.528] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.528] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.528] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.528] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.529] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.529] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.529] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.529] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.530] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.530] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.530] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.530] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.530] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.530] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.530] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.531] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.531] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.531] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.531] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.531] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.531] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.532] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.532] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.532] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.532] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.532] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.532] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.533] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.533] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.533] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.533] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.533] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.534] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.534] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.534] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.534] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.534] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.534] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.535] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.535] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.535] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.535] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.535] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.535] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.536] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.536] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.536] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.536] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.537] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.537] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.537] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.537] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.538] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.538] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.538] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.538] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.538] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.538] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.539] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.539] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.539] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0199.880] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0199.880] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.314] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.315] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.315] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.315] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.315] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.316] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.316] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.316] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.316] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.316] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.316] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.317] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.317] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.317] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.317] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.318] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.318] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.318] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.318] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.319] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.319] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.319] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.319] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.320] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.320] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.320] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.320] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.321] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.321] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.321] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.321] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.321] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.322] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.322] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.322] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.322] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.323] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.323] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.323] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.323] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.323] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.324] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.324] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.324] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.324] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.325] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.326] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.326] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.326] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.327] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.327] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.327] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.328] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.328] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.328] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.328] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.328] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.329] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.329] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.329] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.329] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.330] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.330] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.330] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.330] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.330] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.330] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.331] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.331] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.331] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.332] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.332] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.332] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.332] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.332] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.332] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.332] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.333] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.333] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.333] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.333] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.333] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.333] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.334] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.334] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.334] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.334] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.334] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.334] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.335] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.335] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.335] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.335] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.335] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.335] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.336] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.336] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.336] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.336] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.336] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.336] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.337] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.337] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.337] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.337] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.337] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.337] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.337] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.338] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.338] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.338] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.338] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.338] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.339] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.339] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.339] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.339] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.340] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.340] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.340] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.340] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.340] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.340] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.341] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.341] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.341] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.341] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.341] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.341] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.342] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.342] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.342] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.342] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.342] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.342] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.343] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.343] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.343] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.343] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.343] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.343] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.344] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.344] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.344] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.344] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.344] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.345] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.345] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.345] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.345] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.345] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.346] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.346] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.346] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.346] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.346] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.346] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.347] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.347] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.347] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.347] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.347] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.347] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.348] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.348] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.348] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.348] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.349] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.349] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.349] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.349] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.349] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.350] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.350] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.355] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.355] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.356] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.601] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.603] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.603] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.603] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.603] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.603] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.604] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.604] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.604] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.604] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.605] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.605] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.605] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.605] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.605] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.605] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.606] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.606] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.606] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.606] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.607] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.607] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.607] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.607] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.608] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.608] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.608] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.608] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.608] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.609] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.609] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.609] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.609] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.609] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.610] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.610] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.610] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.611] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.611] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.611] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.612] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.612] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.612] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.612] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.613] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.613] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.613] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.613] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.613] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.614] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.614] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.614] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.614] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.615] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.615] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.615] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.615] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.616] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.616] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.616] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.616] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.616] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.617] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.617] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.617] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.617] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.617] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.617] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.618] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.618] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.618] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.618] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.618] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.618] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.619] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.619] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.619] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.619] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.619] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.620] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.620] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.620] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.620] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.620] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.621] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.621] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.621] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.621] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.621] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.622] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.622] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.622] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.622] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.622] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.623] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.623] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.623] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.623] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.624] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.624] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.624] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.624] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.624] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.625] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.625] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.625] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.625] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.626] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.626] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.626] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.626] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.626] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.627] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.627] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.627] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.627] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.627] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.628] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.628] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.628] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.628] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.629] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.629] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.629] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.629] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.631] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.631] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.631] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.632] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.633] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.633] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.633] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.633] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.633] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.634] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.634] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.634] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.634] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.634] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.634] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.635] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.635] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.635] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.635] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.635] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.636] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.636] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.636] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.636] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.636] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.637] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.637] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.637] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.637] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.637] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.638] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.638] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.638] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0200.638] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0200.638] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0201.003] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0201.718] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0201.719] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0201.719] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0201.719] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0201.719] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0201.720] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0201.720] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0201.720] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0201.720] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0201.721] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0201.721] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0201.721] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0201.721] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0201.721] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0201.722] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0201.722] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0201.722] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0201.722] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0201.723] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0201.723] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0201.723] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0201.723] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0201.723] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0201.724] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0201.724] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0201.724] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0201.724] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0201.725] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0201.725] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0201.725] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0201.725] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0201.726] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0201.726] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0201.726] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0201.726] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0201.727] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0201.727] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0201.727] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0201.728] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0201.728] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0201.728] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0201.728] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0201.728] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0201.728] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0201.729] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0201.729] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0201.729] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0201.729] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0201.729] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0201.730] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0201.730] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0201.730] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0201.730] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0201.731] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0201.731] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0201.731] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0201.731] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0201.732] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0201.732] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0201.732] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0201.732] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0201.733] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0201.733] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0201.733] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0201.733] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0201.734] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0201.734] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0201.734] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0201.734] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0201.735] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0201.735] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0201.735] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0201.735] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0201.735] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0201.736] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0201.736] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0201.736] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0201.737] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0201.737] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0201.737] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0201.737] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0201.738] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0201.738] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0201.738] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0201.738] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0201.739] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0201.739] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0201.739] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0201.739] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0201.740] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0201.740] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0201.740] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0201.741] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0201.741] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0201.742] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0201.743] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0201.743] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0201.743] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0201.744] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0201.744] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0201.744] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0201.744] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0201.744] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0201.745] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0201.745] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0201.745] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0201.745] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0201.746] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0201.746] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0201.746] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0201.746] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0201.747] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0201.747] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0201.747] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0201.747] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0201.748] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0201.748] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0201.749] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0201.749] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0201.749] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0201.749] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0201.750] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0201.750] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0201.750] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0201.750] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0201.751] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0201.751] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0201.751] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0201.751] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0201.752] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0202.117] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0202.117] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0202.817] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0202.818] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.286] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.286] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.286] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.286] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.287] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.287] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.287] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.287] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.287] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.288] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.288] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.288] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.288] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.289] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.289] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.289] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.289] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.290] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.290] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.290] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.290] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.291] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.291] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.291] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.291] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.292] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.292] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.292] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.292] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.293] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.293] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.293] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.293] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.294] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.294] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.294] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.294] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.295] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.295] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.295] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.295] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.295] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.296] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.296] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.296] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.296] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.297] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.297] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.297] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.297] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.297] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.298] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.298] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.298] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.298] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.299] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.299] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.299] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.299] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.300] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.300] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.300] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.300] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.301] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.301] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.301] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.301] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.302] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.302] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.302] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.302] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.302] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.303] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.303] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.303] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.303] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.304] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.304] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.304] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.304] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.305] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.305] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.305] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.305] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.306] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.307] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.308] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.308] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.308] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.309] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.309] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.310] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.310] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.310] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.310] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.310] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.310] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.311] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.311] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.311] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.311] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.311] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.311] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.312] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.312] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.312] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.312] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.312] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.313] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.313] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.313] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.313] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.313] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.314] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.314] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.314] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.314] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.315] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.315] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.315] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.315] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.316] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.316] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.316] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.316] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.317] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.317] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.317] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.317] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.318] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.318] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.318] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.318] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.319] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.319] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.319] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.319] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.320] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.320] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.320] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.320] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.321] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.321] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.321] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.321] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.322] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.322] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.322] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.322] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.322] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.323] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.323] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.323] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.323] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.323] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.634] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.634] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.634] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.635] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.635] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.635] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.635] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.635] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.636] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.636] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.636] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.636] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.636] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.637] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.637] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.637] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.637] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.637] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.638] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.638] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.638] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.638] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.639] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.639] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.639] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.639] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.640] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.640] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.640] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.640] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.640] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.640] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.641] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.641] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.641] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.641] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.641] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.642] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.642] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.642] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.642] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.642] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.643] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.643] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.643] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.643] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.643] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.644] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.644] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.644] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.644] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.644] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.645] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.645] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.645] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.645] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.646] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.646] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.646] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.652] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.653] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.653] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.923] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.923] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.923] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.923] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.924] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.924] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.924] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.924] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.924] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.924] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.925] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.925] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.925] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.925] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.925] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.925] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.926] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.926] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.926] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.926] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.926] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.926] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.927] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.927] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.927] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.927] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.927] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.928] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.928] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.928] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.928] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.928] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.929] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.929] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.929] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.929] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.929] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.929] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.930] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.930] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.930] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.930] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.930] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.930] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.931] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.931] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.931] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.931] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.931] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.931] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.932] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.932] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.932] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.932] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.933] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.933] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.933] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.933] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.933] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.934] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.934] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.934] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.934] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.934] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.935] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.935] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.935] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.936] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.936] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.936] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.936] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.937] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.937] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.937] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.937] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.937] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.938] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.938] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.938] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.938] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.939] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.940] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.940] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.940] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.940] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.940] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.941] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.941] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.941] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.941] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.942] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.942] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.942] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.942] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.942] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.943] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.943] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.943] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.943] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.943] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.944] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.944] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.944] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.944] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.944] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.945] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.945] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.945] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.945] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.945] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.945] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.946] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.946] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.946] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.946] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.946] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.947] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.947] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.947] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.947] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.948] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.948] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.948] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.948] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.948] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.949] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.950] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.950] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.951] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.951] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.951] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.952] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.952] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.952] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.952] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.952] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.953] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.953] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.953] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.953] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.953] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.953] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.954] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.954] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.954] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.954] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.954] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.954] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.955] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.955] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.955] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.955] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.955] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.955] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.956] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.956] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.956] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.956] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.957] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.957] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.957] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.957] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.957] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.958] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.958] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.958] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.958] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.958] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.959] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.959] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.959] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.959] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.960] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.960] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.960] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.960] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0203.960] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0203.960] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.289] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.290] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.290] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.290] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.290] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.290] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.290] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.291] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.291] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.291] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.291] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.291] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.292] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.292] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.292] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.292] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.292] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.293] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.293] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.293] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.293] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.294] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.294] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.294] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.294] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.294] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.294] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.294] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.295] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.295] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.295] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.295] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.295] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.296] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.296] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.296] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.296] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.296] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.296] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.297] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.297] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.297] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.297] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.297] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.298] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.298] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.299] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.299] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.299] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.299] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.299] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.300] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.300] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.300] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.300] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.300] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.300] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.300] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.301] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.301] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.301] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.301] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.301] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.301] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.302] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.302] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.302] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.302] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.303] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.303] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.303] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.303] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.304] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.304] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.304] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.305] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.306] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.306] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.307] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.307] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.308] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.308] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.308] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.308] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.308] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.308] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.309] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.309] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.309] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.309] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.309] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.309] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.310] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.310] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.310] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.310] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.310] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.311] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.311] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.311] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.311] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.311] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.311] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.312] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.312] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.312] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.312] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.312] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.312] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.313] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.313] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.313] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.313] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.313] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.314] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.314] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.314] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.315] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.315] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.315] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.315] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.315] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.316] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.316] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.316] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.316] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.317] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.317] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.317] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.317] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.318] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.318] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.318] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.318] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.318] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.318] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.319] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.319] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.319] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.319] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.320] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.320] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.320] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.320] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.320] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.321] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.321] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.321] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.321] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.322] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.322] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.322] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.322] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.322] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.323] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.323] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.323] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.323] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.324] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.324] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.324] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.324] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.324] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.325] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.325] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.325] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.325] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.325] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.326] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.326] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.326] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.326] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.327] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.327] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.327] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.327] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.328] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.328] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.328] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.328] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.328] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.328] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.329] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.329] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.329] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.643] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.644] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.644] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.644] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.645] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.645] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.645] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.645] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.646] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.646] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.646] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.647] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.647] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.647] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.647] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.648] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.648] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.648] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.650] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.650] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.651] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.652] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.652] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.653] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.653] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.653] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.654] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.654] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.654] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.654] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.655] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.655] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.655] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.655] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.656] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.656] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.656] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.656] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.657] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.657] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.657] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.658] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.658] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.659] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.659] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.659] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.659] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.660] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.660] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.660] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.660] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.661] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.661] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.661] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.661] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.662] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.662] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.662] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.662] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.663] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.663] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.663] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.663] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.664] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.664] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.664] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.665] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.665] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.665] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.665] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.666] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.666] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.666] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.666] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.667] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.667] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.667] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.667] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.668] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.668] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.668] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.668] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.669] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.669] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.669] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.669] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.670] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.670] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.670] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.670] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.671] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.671] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.671] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.671] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.671] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.672] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.672] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.672] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.672] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.673] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.673] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.673] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.674] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.674] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.674] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.674] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.675] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.675] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.675] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.675] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.675] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.817] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.817] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.818] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.818] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.818] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.818] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.819] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.819] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.819] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.819] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.819] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.819] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.820] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.820] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.820] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.820] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.820] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.821] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.821] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.821] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.821] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.821] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.822] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0204.822] WriteFile (in: hFile=0x208, lpBuffer=0x246e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x287e8dc, lpOverlapped=0x0 | out: lpBuffer=0x246e10*, lpNumberOfBytesWritten=0x287e8dc*=0x1000, lpOverlapped=0x0) returned 1 [0204.822] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0208.494] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 [0231.196] ReadFile (in: hFile=0x1f8, lpBuffer=0x244e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x287ea98, lpOverlapped=0x0 | out: lpBuffer=0x244e00*, lpNumberOfBytesRead=0x287ea98*=0x1000, lpOverlapped=0x0) returned 1 Thread: id = 153 os_tid = 0xecc Thread: id = 154 os_tid = 0x324 Process: id = "2" image_name = "conhost.exe" filename = "c:\\windows\\system32\\conhost.exe" page_root = "0x81d6000" os_pid = "0x12bc" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x13d4" cmd_line = "\\??\\C:\\WINDOWS\\system32\\conhost.exe 0xffffffff -ForceV1" cur_dir = "C:\\WINDOWS" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000faa5" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 2 os_tid = 0xed8 Thread: id = 3 os_tid = 0x13ec Thread: id = 4 os_tid = 0x508 Thread: id = 5 os_tid = 0x10c4 Thread: id = 6 os_tid = 0x118c Process: id = "3" image_name = "cmd.exe" filename = "c:\\windows\\syswow64\\cmd.exe" page_root = "0x12aa6000" os_pid = "0x1128" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x13d4" cmd_line = "C:\\WINDOWS\\system32\\cmd.exe /c net stop SQLWriter" cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000faa5" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 8 os_tid = 0x10c0 [0076.835] GetModuleHandleA (lpModuleName=0x0) returned 0x11d0000 [0076.835] __set_app_type (_Type=0x1) [0076.835] __p__fmode () returned 0x76953c14 [0076.835] __p__commode () returned 0x769549ec [0076.835] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x11e6fd0) returned 0x0 [0076.835] __getmainargs (in: _Argc=0x11fd1a4, _Argv=0x11fd1a8, _Env=0x11fd1ac, _DoWildCard=0, _StartInfo=0x11fd1b8 | out: _Argc=0x11fd1a4, _Argv=0x11fd1a8, _Env=0x11fd1ac) returned 0 [0076.836] _onexit (_Func=0x11e8030) returned 0x11e8030 [0076.836] _onexit (_Func=0x11e8040) returned 0x11e8040 [0076.836] _onexit (_Func=0x11e8050) returned 0x11e8050 [0076.836] _onexit (_Func=0x11e8060) returned 0x11e8060 [0076.836] _onexit (_Func=0x11e8070) returned 0x11e8070 [0076.899] _onexit (_Func=0x11e8080) returned 0x11e8080 [0076.899] GetCurrentThreadId () returned 0x10c0 [0076.899] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0x10c0) returned 0xbc [0076.899] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x74030000 [0076.899] GetProcAddress (hModule=0x74030000, lpProcName="SetThreadUILanguage") returned 0x74044f70 [0076.900] SetThreadUILanguage (LangId=0x0) returned 0x690409 [0076.908] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0076.908] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x97f95c | out: phkResult=0x97f95c*=0x0) returned 0x2 [0076.908] VirtualQuery (in: lpAddress=0x97f967, lpBuffer=0x97f914, dwLength=0x1c | out: lpBuffer=0x97f914*(BaseAddress=0x97f000, AllocationBase=0x880000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0076.908] VirtualQuery (in: lpAddress=0x880000, lpBuffer=0x97f914, dwLength=0x1c | out: lpBuffer=0x97f914*(BaseAddress=0x880000, AllocationBase=0x880000, AllocationProtect=0x4, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000)) returned 0x1c [0076.908] VirtualQuery (in: lpAddress=0x881000, lpBuffer=0x97f914, dwLength=0x1c | out: lpBuffer=0x97f914*(BaseAddress=0x881000, AllocationBase=0x880000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x104, Type=0x20000)) returned 0x1c [0076.908] VirtualQuery (in: lpAddress=0x883000, lpBuffer=0x97f914, dwLength=0x1c | out: lpBuffer=0x97f914*(BaseAddress=0x883000, AllocationBase=0x880000, AllocationProtect=0x4, RegionSize=0xfd000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0076.908] VirtualQuery (in: lpAddress=0x980000, lpBuffer=0x97f914, dwLength=0x1c | out: lpBuffer=0x97f914*(BaseAddress=0x980000, AllocationBase=0x980000, AllocationProtect=0x2, RegionSize=0x4000, State=0x1000, Protect=0x2, Type=0x40000)) returned 0x1c [0076.908] GetConsoleOutputCP () returned 0x1b5 [0076.921] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x1203850 | out: lpCPInfo=0x1203850) returned 1 [0076.922] SetConsoleCtrlHandler (HandlerRoutine=0x11f7260, Add=1) returned 1 [0076.922] _get_osfhandle (_FileHandle=1) returned 0x90 [0076.922] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x120388c | out: lpMode=0x120388c) returned 1 [0076.924] _get_osfhandle (_FileHandle=0) returned 0x8c [0076.924] GetConsoleMode (in: hConsoleHandle=0x8c, lpMode=0x1203888 | out: lpMode=0x1203888) returned 1 [0076.926] _get_osfhandle (_FileHandle=1) returned 0x90 [0076.926] SetConsoleMode (hConsoleHandle=0x90, dwMode=0x0) returned 1 [0076.926] _get_osfhandle (_FileHandle=1) returned 0x90 [0076.926] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x1203890 | out: lpMode=0x1203890) returned 1 [0076.929] _get_osfhandle (_FileHandle=1) returned 0x90 [0076.929] SetConsoleMode (hConsoleHandle=0x90, dwMode=0x7) returned 1 [0076.934] _get_osfhandle (_FileHandle=0) returned 0x8c [0076.934] GetConsoleMode (in: hConsoleHandle=0x8c, lpMode=0x1203894 | out: lpMode=0x1203894) returned 1 [0076.937] _get_osfhandle (_FileHandle=0) returned 0x8c [0076.937] SetConsoleMode (hConsoleHandle=0x8c, dwMode=0x1e7) returned 1 [0076.940] GetEnvironmentStringsW () returned 0xbe4f78* [0076.940] GetProcessHeap () returned 0xbe0000 [0076.940] RtlAllocateHeap (HeapHandle=0xbe0000, Flags=0x8, Size=0xaca) returned 0xbe5a50 [0076.940] FreeEnvironmentStringsA (penv="A") returned 1 [0076.940] GetProcessHeap () returned 0xbe0000 [0076.940] RtlAllocateHeap (HeapHandle=0xbe0000, Flags=0x8, Size=0x4) returned 0xbe48c8 [0076.940] GetEnvironmentStringsW () returned 0xbe4f78* [0076.941] GetProcessHeap () returned 0xbe0000 [0076.941] RtlAllocateHeap (HeapHandle=0xbe0000, Flags=0x8, Size=0xaca) returned 0xbe6528 [0076.941] FreeEnvironmentStringsA (penv="A") returned 1 [0076.941] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x97e8b8 | out: phkResult=0x97e8b8*=0xcc) returned 0x0 [0076.941] RegQueryValueExW (in: hKey=0xcc, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x97e8c0, lpData=0x97e8c4, lpcbData=0x97e8bc*=0x1000 | out: lpType=0x97e8c0*=0x0, lpData=0x97e8c4*=0x48, lpcbData=0x97e8bc*=0x1000) returned 0x2 [0076.941] RegQueryValueExW (in: hKey=0xcc, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x97e8c0, lpData=0x97e8c4, lpcbData=0x97e8bc*=0x1000 | out: lpType=0x97e8c0*=0x4, lpData=0x97e8c4*=0x1, lpcbData=0x97e8bc*=0x4) returned 0x0 [0076.941] RegQueryValueExW (in: hKey=0xcc, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x97e8c0, lpData=0x97e8c4, lpcbData=0x97e8bc*=0x1000 | out: lpType=0x97e8c0*=0x0, lpData=0x97e8c4*=0x1, lpcbData=0x97e8bc*=0x1000) returned 0x2 [0076.941] RegQueryValueExW (in: hKey=0xcc, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x97e8c0, lpData=0x97e8c4, lpcbData=0x97e8bc*=0x1000 | out: lpType=0x97e8c0*=0x4, lpData=0x97e8c4*=0x0, lpcbData=0x97e8bc*=0x4) returned 0x0 [0076.941] RegQueryValueExW (in: hKey=0xcc, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x97e8c0, lpData=0x97e8c4, lpcbData=0x97e8bc*=0x1000 | out: lpType=0x97e8c0*=0x4, lpData=0x97e8c4*=0x40, lpcbData=0x97e8bc*=0x4) returned 0x0 [0076.941] RegQueryValueExW (in: hKey=0xcc, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x97e8c0, lpData=0x97e8c4, lpcbData=0x97e8bc*=0x1000 | out: lpType=0x97e8c0*=0x4, lpData=0x97e8c4*=0x40, lpcbData=0x97e8bc*=0x4) returned 0x0 [0076.941] RegQueryValueExW (in: hKey=0xcc, lpValueName="AutoRun", lpReserved=0x0, lpType=0x97e8c0, lpData=0x97e8c4, lpcbData=0x97e8bc*=0x1000 | out: lpType=0x97e8c0*=0x0, lpData=0x97e8c4*=0x40, lpcbData=0x97e8bc*=0x1000) returned 0x2 [0076.941] RegCloseKey (hKey=0xcc) returned 0x0 [0076.942] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x97e8b8 | out: phkResult=0x97e8b8*=0xcc) returned 0x0 [0076.942] RegQueryValueExW (in: hKey=0xcc, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x97e8c0, lpData=0x97e8c4, lpcbData=0x97e8bc*=0x1000 | out: lpType=0x97e8c0*=0x0, lpData=0x97e8c4*=0x40, lpcbData=0x97e8bc*=0x1000) returned 0x2 [0076.942] RegQueryValueExW (in: hKey=0xcc, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x97e8c0, lpData=0x97e8c4, lpcbData=0x97e8bc*=0x1000 | out: lpType=0x97e8c0*=0x4, lpData=0x97e8c4*=0x1, lpcbData=0x97e8bc*=0x4) returned 0x0 [0076.942] RegQueryValueExW (in: hKey=0xcc, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x97e8c0, lpData=0x97e8c4, lpcbData=0x97e8bc*=0x1000 | out: lpType=0x97e8c0*=0x0, lpData=0x97e8c4*=0x1, lpcbData=0x97e8bc*=0x1000) returned 0x2 [0076.942] RegQueryValueExW (in: hKey=0xcc, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x97e8c0, lpData=0x97e8c4, lpcbData=0x97e8bc*=0x1000 | out: lpType=0x97e8c0*=0x4, lpData=0x97e8c4*=0x0, lpcbData=0x97e8bc*=0x4) returned 0x0 [0076.942] RegQueryValueExW (in: hKey=0xcc, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x97e8c0, lpData=0x97e8c4, lpcbData=0x97e8bc*=0x1000 | out: lpType=0x97e8c0*=0x4, lpData=0x97e8c4*=0x9, lpcbData=0x97e8bc*=0x4) returned 0x0 [0076.942] RegQueryValueExW (in: hKey=0xcc, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x97e8c0, lpData=0x97e8c4, lpcbData=0x97e8bc*=0x1000 | out: lpType=0x97e8c0*=0x4, lpData=0x97e8c4*=0x9, lpcbData=0x97e8bc*=0x4) returned 0x0 [0076.942] RegQueryValueExW (in: hKey=0xcc, lpValueName="AutoRun", lpReserved=0x0, lpType=0x97e8c0, lpData=0x97e8c4, lpcbData=0x97e8bc*=0x1000 | out: lpType=0x97e8c0*=0x0, lpData=0x97e8c4*=0x9, lpcbData=0x97e8bc*=0x1000) returned 0x2 [0076.942] RegCloseKey (hKey=0xcc) returned 0x0 [0076.942] time (in: timer=0x0 | out: timer=0x0) returned 0x5e3302c5 [0076.942] srand (_Seed=0x5e3302c5) [0076.942] GetCommandLineW () returned="C:\\WINDOWS\\system32\\cmd.exe /c net stop SQLWriter" [0076.942] malloc (_Size=0x4000) returned 0xfd2700 [0076.943] GetCommandLineW () returned="C:\\WINDOWS\\system32\\cmd.exe /c net stop SQLWriter" [0076.943] malloc (_Size=0xffce) returned 0xde0048 [0076.944] ??_V@YAXPAX@Z () returned 0x97f89c [0076.944] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0xde0048 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0076.945] malloc (_Size=0xffce) returned 0xdf0020 [0076.946] ??_V@YAXPAX@Z () returned 0x97f670 [0076.946] GetModuleFileNameW (in: hModule=0x0, lpFilename=0xdf0020, nSize=0x7fe7 | out: lpFilename="C:\\WINDOWS\\SysWOW64\\cmd.exe" (normalized: "c:\\windows\\syswow64\\cmd.exe")) returned 0x1b [0076.946] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x11ff840, nSize=0x2000 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath;C:\\WINDOWS\\system32;C:\\WINDOWS;C:\\WINDOWS\\System32\\Wbem;C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\;C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps") returned 0xbb [0076.946] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x11ff840, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0076.946] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x11ff840, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0076.947] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13 [0076.947] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11 [0076.947] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13 [0076.947] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13 [0076.947] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12 [0076.947] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4 [0076.947] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2 [0076.947] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8 [0076.947] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1 [0076.947] GetProcessHeap () returned 0xbe0000 [0076.947] RtlFreeHeap (HeapHandle=0xbe0000, Flags=0x0, BaseAddress=0xbe5a50) returned 1 [0076.947] GetEnvironmentStringsW () returned 0xbe4f78* [0076.947] GetProcessHeap () returned 0xbe0000 [0076.947] RtlAllocateHeap (HeapHandle=0xbe0000, Flags=0x8, Size=0xae2) returned 0xbe7af0 [0076.947] FreeEnvironmentStringsA (penv="A") returned 1 [0076.948] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x11ff840, nSize=0x2000 | out: lpBuffer="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1b [0076.948] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x11ff840, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0076.948] _wcsicmp (_String1="KEYS", _String2="CD") returned 8 [0076.948] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6 [0076.948] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8 [0076.948] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8 [0076.948] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7 [0076.948] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9 [0076.948] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7 [0076.948] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3 [0076.948] malloc (_Size=0xffce) returned 0xdffff8 [0076.948] ??_V@YAXPAX@Z () returned 0x97f408 [0076.949] GetProcessHeap () returned 0xbe0000 [0076.949] RtlAllocateHeap (HeapHandle=0xbe0000, Flags=0x8, Size=0x38) returned 0xbe48f0 [0076.949] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0xdffff8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0076.949] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x7fe7, lpBuffer=0xdffff8, lpFilePart=0x97f454 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x97f454*="Desktop") returned 0x17 [0076.950] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\Desktop" (normalized: "c:\\users\\fd1hvy\\desktop")) returned 0x11 [0076.950] FindFirstFileW (in: lpFileName="C:\\Users", lpFindFileData=0x97f1d8 | out: lpFindFileData=0x97f1d8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x475bb883, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x475bb883, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 0xbe4930 [0076.953] FindClose (in: hFindFile=0xbe4930 | out: hFindFile=0xbe4930) returned 1 [0076.953] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy", lpFindFileData=0x97f1d8 | out: lpFindFileData=0x97f1d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20fc850f, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x9de5855d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x9de5855d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD1HVy", cAlternateFileName="")) returned 0xbe4930 [0076.953] FindClose (in: hFindFile=0xbe4930 | out: hFindFile=0xbe4930) returned 1 [0076.954] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", lpFindFileData=0x97f1d8 | out: lpFindFileData=0x97f1d8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x5de49bf6, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0x5de49bf6, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 0xbe4930 [0076.954] FindClose (in: hFindFile=0xbe4930 | out: hFindFile=0xbe4930) returned 1 [0076.954] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\Desktop" (normalized: "c:\\users\\fd1hvy\\desktop")) returned 0x11 [0076.954] SetCurrentDirectoryW (lpPathName="C:\\Users\\FD1HVy\\Desktop" (normalized: "c:\\users\\fd1hvy\\desktop")) returned 1 [0076.954] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Users\\FD1HVy\\Desktop") returned 1 [0076.954] GetProcessHeap () returned 0xbe0000 [0076.954] RtlFreeHeap (HeapHandle=0xbe0000, Flags=0x0, BaseAddress=0xbe7af0) returned 1 [0076.954] GetEnvironmentStringsW () returned 0xbe7000* [0076.954] GetProcessHeap () returned 0xbe0000 [0076.954] RtlAllocateHeap (HeapHandle=0xbe0000, Flags=0x8, Size=0xb1a) returned 0xbe7b28 [0076.955] FreeEnvironmentStringsA (penv="=") returned 1 [0076.955] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0xde0048 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0076.955] GetProcessHeap () returned 0xbe0000 [0076.955] RtlFreeHeap (HeapHandle=0xbe0000, Flags=0x0, BaseAddress=0xbe48f0) returned 1 [0076.955] ??_V@YAXPAX@Z () returned 0x1 [0076.955] ??_V@YAXPAX@Z () returned 0x1 [0076.955] GetProcessHeap () returned 0xbe0000 [0076.955] RtlAllocateHeap (HeapHandle=0xbe0000, Flags=0x8, Size=0x400e) returned 0xbe8650 [0076.955] GetProcessHeap () returned 0xbe0000 [0076.955] RtlAllocateHeap (HeapHandle=0xbe0000, Flags=0x8, Size=0x32) returned 0xbe48f0 [0076.956] GetProcessHeap () returned 0xbe0000 [0076.956] RtlFreeHeap (HeapHandle=0xbe0000, Flags=0x0, BaseAddress=0xbe8650) returned 1 [0076.956] GetConsoleOutputCP () returned 0x1b5 [0076.957] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x1203850 | out: lpCPInfo=0x1203850) returned 1 [0076.958] GetUserDefaultLCID () returned 0x409 [0076.958] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x11ff82c, cchData=8 | out: lpLCData=":") returned 2 [0076.958] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x97f7c4, cchData=128 | out: lpLCData="0") returned 2 [0076.958] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x97f7c4, cchData=128 | out: lpLCData="0") returned 2 [0076.958] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x97f7c4, cchData=128 | out: lpLCData="1") returned 2 [0076.959] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x11ff81c, cchData=8 | out: lpLCData="/") returned 2 [0076.959] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x11ff7b8, cchData=32 | out: lpLCData="Mon") returned 4 [0076.959] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x11ff778, cchData=32 | out: lpLCData="Tue") returned 4 [0076.959] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x11ff738, cchData=32 | out: lpLCData="Wed") returned 4 [0076.959] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x11ff6f8, cchData=32 | out: lpLCData="Thu") returned 4 [0076.959] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x11ff6b8, cchData=32 | out: lpLCData="Fri") returned 4 [0076.959] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x11ff678, cchData=32 | out: lpLCData="Sat") returned 4 [0076.959] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x11ff638, cchData=32 | out: lpLCData="Sun") returned 4 [0076.959] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x11ff80c, cchData=8 | out: lpLCData=".") returned 2 [0076.959] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x11ff7f8, cchData=8 | out: lpLCData=",") returned 2 [0076.959] setlocale (category=0, locale=".OCP") returned="English_United States.437" [0076.962] GetProcessHeap () returned 0xbe0000 [0076.962] RtlAllocateHeap (HeapHandle=0xbe0000, Flags=0x0, Size=0x20c) returned 0xbe5aa0 [0076.962] GetConsoleTitleW (in: lpConsoleTitle=0xbe5aa0, nSize=0x104 | out: lpConsoleTitle="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1c [0076.967] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x74030000 [0076.967] GetProcAddress (hModule=0x74030000, lpProcName="CopyFileExW") returned 0x74044330 [0076.967] GetProcAddress (hModule=0x74030000, lpProcName="IsDebuggerPresent") returned 0x74045930 [0076.967] GetProcAddress (hModule=0x74030000, lpProcName="SetConsoleInputExeNameW") returned 0x772c09d0 [0076.967] ??_V@YAXPAX@Z () returned 0x1 [0076.969] GetProcessHeap () returned 0xbe0000 [0076.969] RtlAllocateHeap (HeapHandle=0xbe0000, Flags=0x8, Size=0x400a) returned 0xbe8650 [0076.969] GetProcessHeap () returned 0xbe0000 [0076.969] RtlFreeHeap (HeapHandle=0xbe0000, Flags=0x0, BaseAddress=0xbe8650) returned 1 [0076.969] _wcsicmp (_String1="net", _String2=")") returned 69 [0076.969] _wcsicmp (_String1="FOR", _String2="net") returned -8 [0076.969] _wcsicmp (_String1="FOR/?", _String2="net") returned -8 [0076.969] _wcsicmp (_String1="IF", _String2="net") returned -5 [0076.969] _wcsicmp (_String1="IF/?", _String2="net") returned -5 [0076.969] _wcsicmp (_String1="REM", _String2="net") returned 4 [0076.970] _wcsicmp (_String1="REM/?", _String2="net") returned 4 [0076.970] GetProcessHeap () returned 0xbe0000 [0076.970] RtlAllocateHeap (HeapHandle=0xbe0000, Flags=0x8, Size=0x58) returned 0xbe4978 [0076.970] GetProcessHeap () returned 0xbe0000 [0076.970] RtlAllocateHeap (HeapHandle=0xbe0000, Flags=0x8, Size=0x10) returned 0xbe49d8 [0076.970] GetProcessHeap () returned 0xbe0000 [0076.970] RtlAllocateHeap (HeapHandle=0xbe0000, Flags=0x8, Size=0x28) returned 0xbe49f0 [0076.972] GetConsoleTitleW (in: lpConsoleTitle=0x97f6b8, nSize=0x104 | out: lpConsoleTitle="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1c [0076.974] malloc (_Size=0xffce) returned 0xdf2aa0 [0076.974] ??_V@YAXPAX@Z () returned 0x97f444 [0076.975] malloc (_Size=0xffce) returned 0xe02a78 [0076.975] ??_V@YAXPAX@Z () returned 0x97f1fc [0076.976] _wcsicmp (_String1="net", _String2="DIR") returned 10 [0076.976] _wcsicmp (_String1="net", _String2="ERASE") returned 9 [0076.976] _wcsicmp (_String1="net", _String2="DEL") returned 10 [0076.976] _wcsicmp (_String1="net", _String2="TYPE") returned -6 [0076.976] _wcsicmp (_String1="net", _String2="COPY") returned 11 [0076.976] _wcsicmp (_String1="net", _String2="CD") returned 11 [0076.976] _wcsicmp (_String1="net", _String2="CHDIR") returned 11 [0076.976] _wcsicmp (_String1="net", _String2="RENAME") returned -4 [0076.977] _wcsicmp (_String1="net", _String2="REN") returned -4 [0076.977] _wcsicmp (_String1="net", _String2="ECHO") returned 9 [0076.977] _wcsicmp (_String1="net", _String2="SET") returned -5 [0076.977] _wcsicmp (_String1="net", _String2="PAUSE") returned -2 [0076.977] _wcsicmp (_String1="net", _String2="DATE") returned 10 [0076.977] _wcsicmp (_String1="net", _String2="TIME") returned -6 [0076.977] _wcsicmp (_String1="net", _String2="PROMPT") returned -2 [0076.977] _wcsicmp (_String1="net", _String2="MD") returned 1 [0076.977] _wcsicmp (_String1="net", _String2="MKDIR") returned 1 [0076.977] _wcsicmp (_String1="net", _String2="RD") returned -4 [0076.977] _wcsicmp (_String1="net", _String2="RMDIR") returned -4 [0076.977] _wcsicmp (_String1="net", _String2="PATH") returned -2 [0076.977] _wcsicmp (_String1="net", _String2="GOTO") returned 7 [0076.977] _wcsicmp (_String1="net", _String2="SHIFT") returned -5 [0076.977] _wcsicmp (_String1="net", _String2="CLS") returned 11 [0076.977] _wcsicmp (_String1="net", _String2="CALL") returned 11 [0076.977] _wcsicmp (_String1="net", _String2="VERIFY") returned -8 [0076.977] _wcsicmp (_String1="net", _String2="VER") returned -8 [0076.977] _wcsicmp (_String1="net", _String2="VOL") returned -8 [0076.977] _wcsicmp (_String1="net", _String2="EXIT") returned 9 [0076.977] _wcsicmp (_String1="net", _String2="SETLOCAL") returned -5 [0076.977] _wcsicmp (_String1="net", _String2="ENDLOCAL") returned 9 [0076.978] _wcsicmp (_String1="net", _String2="TITLE") returned -6 [0076.978] _wcsicmp (_String1="net", _String2="START") returned -5 [0076.978] _wcsicmp (_String1="net", _String2="DPATH") returned 10 [0076.978] _wcsicmp (_String1="net", _String2="KEYS") returned 3 [0076.978] _wcsicmp (_String1="net", _String2="MOVE") returned 1 [0076.978] _wcsicmp (_String1="net", _String2="PUSHD") returned -2 [0076.978] _wcsicmp (_String1="net", _String2="POPD") returned -2 [0076.978] _wcsicmp (_String1="net", _String2="ASSOC") returned 13 [0076.978] _wcsicmp (_String1="net", _String2="FTYPE") returned 8 [0076.978] _wcsicmp (_String1="net", _String2="BREAK") returned 12 [0076.978] _wcsicmp (_String1="net", _String2="COLOR") returned 11 [0076.978] _wcsicmp (_String1="net", _String2="MKLINK") returned 1 [0076.978] _wcsicmp (_String1="net", _String2="DIR") returned 10 [0076.978] _wcsicmp (_String1="net", _String2="ERASE") returned 9 [0076.978] _wcsicmp (_String1="net", _String2="DEL") returned 10 [0076.978] _wcsicmp (_String1="net", _String2="TYPE") returned -6 [0076.978] _wcsicmp (_String1="net", _String2="COPY") returned 11 [0076.979] _wcsicmp (_String1="net", _String2="CD") returned 11 [0076.979] _wcsicmp (_String1="net", _String2="CHDIR") returned 11 [0076.979] _wcsicmp (_String1="net", _String2="RENAME") returned -4 [0076.979] _wcsicmp (_String1="net", _String2="REN") returned -4 [0076.979] _wcsicmp (_String1="net", _String2="ECHO") returned 9 [0076.979] _wcsicmp (_String1="net", _String2="SET") returned -5 [0076.979] _wcsicmp (_String1="net", _String2="PAUSE") returned -2 [0076.979] _wcsicmp (_String1="net", _String2="DATE") returned 10 [0076.979] _wcsicmp (_String1="net", _String2="TIME") returned -6 [0076.979] _wcsicmp (_String1="net", _String2="PROMPT") returned -2 [0076.979] _wcsicmp (_String1="net", _String2="MD") returned 1 [0076.979] _wcsicmp (_String1="net", _String2="MKDIR") returned 1 [0076.979] _wcsicmp (_String1="net", _String2="RD") returned -4 [0076.979] _wcsicmp (_String1="net", _String2="RMDIR") returned -4 [0076.979] _wcsicmp (_String1="net", _String2="PATH") returned -2 [0076.979] _wcsicmp (_String1="net", _String2="GOTO") returned 7 [0076.979] _wcsicmp (_String1="net", _String2="SHIFT") returned -5 [0076.979] _wcsicmp (_String1="net", _String2="CLS") returned 11 [0076.979] _wcsicmp (_String1="net", _String2="CALL") returned 11 [0076.979] _wcsicmp (_String1="net", _String2="VERIFY") returned -8 [0076.979] _wcsicmp (_String1="net", _String2="VER") returned -8 [0076.980] _wcsicmp (_String1="net", _String2="VOL") returned -8 [0076.980] _wcsicmp (_String1="net", _String2="EXIT") returned 9 [0076.980] _wcsicmp (_String1="net", _String2="SETLOCAL") returned -5 [0076.980] _wcsicmp (_String1="net", _String2="ENDLOCAL") returned 9 [0076.980] _wcsicmp (_String1="net", _String2="TITLE") returned -6 [0076.980] _wcsicmp (_String1="net", _String2="START") returned -5 [0076.980] _wcsicmp (_String1="net", _String2="DPATH") returned 10 [0076.980] _wcsicmp (_String1="net", _String2="KEYS") returned 3 [0076.980] _wcsicmp (_String1="net", _String2="MOVE") returned 1 [0076.980] _wcsicmp (_String1="net", _String2="PUSHD") returned -2 [0076.980] _wcsicmp (_String1="net", _String2="POPD") returned -2 [0076.980] _wcsicmp (_String1="net", _String2="ASSOC") returned 13 [0076.980] _wcsicmp (_String1="net", _String2="FTYPE") returned 8 [0076.980] _wcsicmp (_String1="net", _String2="BREAK") returned 12 [0076.980] _wcsicmp (_String1="net", _String2="COLOR") returned 11 [0076.980] _wcsicmp (_String1="net", _String2="MKLINK") returned 1 [0076.980] _wcsicmp (_String1="net", _String2="FOR") returned 8 [0076.980] _wcsicmp (_String1="net", _String2="IF") returned 5 [0076.980] _wcsicmp (_String1="net", _String2="REM") returned -4 [0076.981] ??_V@YAXPAX@Z () returned 0x1 [0076.981] GetProcessHeap () returned 0xbe0000 [0076.981] RtlAllocateHeap (HeapHandle=0xbe0000, Flags=0x8, Size=0xffd6) returned 0xbe8650 [0076.983] GetProcessHeap () returned 0xbe0000 [0076.983] RtlAllocateHeap (HeapHandle=0xbe0000, Flags=0x8, Size=0x30) returned 0xbe4a20 [0076.983] _wcsnicmp (_String1="net", _String2="cmd ", _MaxCount=0x4) returned 11 [0076.983] malloc (_Size=0xffce) returned 0xe02a78 [0076.983] ??_V@YAXPAX@Z () returned 0x97ef7c [0076.984] GetProcessHeap () returned 0xbe0000 [0076.984] RtlAllocateHeap (HeapHandle=0xbe0000, Flags=0x8, Size=0x1ffa4) returned 0xbf8630 [0076.987] SetErrorMode (uMode=0x0) returned 0x0 [0076.987] SetErrorMode (uMode=0x1) returned 0x0 [0076.987] GetFullPathNameW (in: lpFileName=".", nBufferLength=0xffce, lpBuffer=0xbf8638, lpFilePart=0x97ef9c | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x97ef9c*="Desktop") returned 0x17 [0076.987] SetErrorMode (uMode=0x0) returned 0x1 [0076.987] GetProcessHeap () returned 0xbe0000 [0076.988] RtlReAllocateHeap (Heap=0xbe0000, Flags=0x0, Ptr=0xbf8630, Size=0x40) returned 0xbf8630 [0076.988] GetProcessHeap () returned 0xbe0000 [0076.988] RtlSizeHeap (HeapHandle=0xbe0000, Flags=0x0, MemoryPointer=0xbf8630) returned 0x40 [0076.988] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x11ff840, nSize=0x2000 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath;C:\\WINDOWS\\system32;C:\\WINDOWS;C:\\WINDOWS\\System32\\Wbem;C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\;C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps") returned 0xbb [0076.988] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1 [0076.990] GetProcessHeap () returned 0xbe0000 [0076.990] RtlAllocateHeap (HeapHandle=0xbe0000, Flags=0x8, Size=0x1b4) returned 0xbe5cb8 [0076.990] GetProcessHeap () returned 0xbe0000 [0076.990] RtlAllocateHeap (HeapHandle=0xbe0000, Flags=0x8, Size=0x360) returned 0xbe5e78 [0077.053] GetProcessHeap () returned 0xbe0000 [0077.053] RtlReAllocateHeap (Heap=0xbe0000, Flags=0x0, Ptr=0xbe5e78, Size=0x1b6) returned 0xbe5e78 [0077.054] GetProcessHeap () returned 0xbe0000 [0077.054] RtlSizeHeap (HeapHandle=0xbe0000, Flags=0x0, MemoryPointer=0xbe5e78) returned 0x1b6 [0077.054] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x11ff840, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0077.054] GetProcessHeap () returned 0xbe0000 [0077.054] RtlAllocateHeap (HeapHandle=0xbe0000, Flags=0x8, Size=0xe0) returned 0xbe6038 [0077.058] GetProcessHeap () returned 0xbe0000 [0077.058] RtlReAllocateHeap (Heap=0xbe0000, Flags=0x0, Ptr=0xbe6038, Size=0x76) returned 0xbe6038 [0077.058] GetProcessHeap () returned 0xbe0000 [0077.058] RtlSizeHeap (HeapHandle=0xbe0000, Flags=0x0, MemoryPointer=0xbe6038) returned 0x76 [0077.059] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0077.059] FindFirstFileExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\net.*", fInfoLevelId=0x1, lpFindFileData=0x97ed28, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x97ed28) returned 0xffffffff [0077.060] GetLastError () returned 0x2 [0077.060] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0077.060] FindFirstFileExW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\net.*", fInfoLevelId=0x1, lpFindFileData=0x97ed28, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x97ed28) returned 0xffffffff [0077.064] GetLastError () returned 0x2 [0077.064] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0077.064] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\system32\\net.*", fInfoLevelId=0x1, lpFindFileData=0x97ed28, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x97ed28) returned 0xbe4a58 [0077.066] GetProcessHeap () returned 0xbe0000 [0077.066] RtlAllocateHeap (HeapHandle=0xbe0000, Flags=0x0, Size=0x14) returned 0xbe4a98 [0077.066] FindClose (in: hFindFile=0xbe4a58 | out: hFindFile=0xbe4a58) returned 1 [0077.066] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\system32\\net.COM", fInfoLevelId=0x1, lpFindFileData=0x97ed28, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x97ed28) returned 0xffffffff [0077.066] GetLastError () returned 0x2 [0077.066] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\system32\\net.EXE", fInfoLevelId=0x1, lpFindFileData=0x97ed28, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x97ed28) returned 0xbe4a58 [0077.067] GetProcessHeap () returned 0xbe0000 [0077.067] RtlReAllocateHeap (Heap=0xbe0000, Flags=0x0, Ptr=0xbe4a98, Size=0x4) returned 0xbe4a98 [0077.067] FindClose (in: hFindFile=0xbe4a58 | out: hFindFile=0xbe4a58) returned 1 [0077.067] _wcsicmp (_String1=".EXE", _String2=".BAT") returned 3 [0077.067] _wcsicmp (_String1=".EXE", _String2=".CMD") returned 2 [0077.067] ??_V@YAXPAX@Z () returned 0x1 [0077.067] GetConsoleTitleW (in: lpConsoleTitle=0x97f22c, nSize=0x104 | out: lpConsoleTitle="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1c [0077.071] InitializeProcThreadAttributeList (in: lpAttributeList=0x97f158, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x97f144 | out: lpAttributeList=0x97f158, lpSize=0x97f144) returned 1 [0077.071] UpdateProcThreadAttribute (in: lpAttributeList=0x97f158, dwFlags=0x0, Attribute=0x60001, lpValue=0x97f140, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x97f158, lpPreviousValue=0x0) returned 1 [0077.071] GetStartupInfoW (in: lpStartupInfo=0x97f190 | out: lpStartupInfo=0x97f190*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\WINDOWS\\system32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x144, lpReserved2=0xbe1b5a, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) [0077.071] GetProcessHeap () returned 0xbe0000 [0077.071] RtlAllocateHeap (HeapHandle=0xbe0000, Flags=0x8, Size=0x18) returned 0xbe4a58 [0077.072] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38 [0077.072] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2 [0077.072] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2 [0077.072] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0077.072] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0077.072] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0077.072] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3 [0077.072] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3 [0077.072] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5 [0077.072] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5 [0077.072] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9 [0077.072] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9 [0077.072] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11 [0077.072] _wcsnicmp (_String1="COPYCMD", _String2="OneDriv", _MaxCount=0x7) returned -12 [0077.072] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12 [0077.072] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13 [0077.072] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13 [0077.072] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0077.072] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0077.072] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0077.072] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0077.072] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0077.073] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0077.073] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0077.073] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0077.073] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0077.073] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13 [0077.073] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13 [0077.073] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13 [0077.073] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16 [0077.073] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16 [0077.073] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17 [0077.073] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17 [0077.073] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18 [0077.073] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18 [0077.073] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18 [0077.073] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18 [0077.073] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20 [0077.073] GetProcessHeap () returned 0xbe0000 [0077.073] RtlFreeHeap (HeapHandle=0xbe0000, Flags=0x0, BaseAddress=0xbe4a58) returned 1 [0077.073] GetProcessHeap () returned 0xbe0000 [0077.073] RtlAllocateHeap (HeapHandle=0xbe0000, Flags=0x8, Size=0xa) returned 0xbe4a58 [0077.073] lstrcmpW (lpString1="\\net.exe", lpString2="\\XCOPY.EXE") returned -1 [0077.075] _get_osfhandle (_FileHandle=1) returned 0x90 [0077.075] SetConsoleMode (hConsoleHandle=0x90, dwMode=0x3) returned 1 [0077.079] _get_osfhandle (_FileHandle=0) returned 0x8c [0077.079] SetConsoleMode (hConsoleHandle=0x8c, dwMode=0x1f7) returned 1 [0077.082] CreateProcessW (in: lpApplicationName="C:\\WINDOWS\\system32\\net.exe", lpCommandLine="net stop SQLWriter", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\FD1HVy\\Desktop", lpStartupInfo=0x97f0e0*(cb=0x48, lpReserved=0x0, lpDesktop="WinSta0\\Default", lpTitle="net stop SQLWriter", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x97f12c | out: lpCommandLine="net stop SQLWriter", lpProcessInformation=0x97f12c*(hProcess=0xe0, hThread=0xdc, dwProcessId=0x88c, dwThreadId=0x5e0)) returned 1 [0077.308] CloseHandle (hObject=0xdc) returned 1 [0077.308] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1 [0077.308] GetProcessHeap () returned 0xbe0000 [0077.308] RtlFreeHeap (HeapHandle=0xbe0000, Flags=0x0, BaseAddress=0xbe7b28) returned 1 [0077.308] GetEnvironmentStringsW () returned 0xbe7000* [0077.309] GetProcessHeap () returned 0xbe0000 [0077.309] RtlAllocateHeap (HeapHandle=0xbe0000, Flags=0x8, Size=0xb1a) returned 0xbe7b28 [0077.309] FreeEnvironmentStringsA (penv="=") returned 1 [0077.309] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0xffffffff) returned 0x0 [0079.501] GetExitCodeProcess (in: hProcess=0xe0, lpExitCode=0x97f0c4 | out: lpExitCode=0x97f0c4*=0x2) returned 1 [0079.502] CloseHandle (hObject=0xe0) returned 1 [0079.502] _vsnwprintf (in: _Buffer=0x97f1ac, _BufferCount=0x13, _Format="%08X", _ArgList=0x97f0cc | out: _Buffer="00000002") returned 8 [0079.502] SetEnvironmentVariableW (lpName="=ExitCode", lpValue="00000002") returned 1 [0079.503] GetProcessHeap () returned 0xbe0000 [0079.503] RtlFreeHeap (HeapHandle=0xbe0000, Flags=0x0, BaseAddress=0xbe7b28) returned 1 [0079.503] GetEnvironmentStringsW () returned 0xbe7000* [0079.503] GetProcessHeap () returned 0xbe0000 [0079.503] RtlAllocateHeap (HeapHandle=0xbe0000, Flags=0x8, Size=0xb40) returned 0xbf91c0 [0079.504] FreeEnvironmentStringsA (penv="=") returned 1 [0079.504] SetEnvironmentVariableW (lpName="=ExitCodeAscii", lpValue=0x0) returned 1 [0079.504] GetProcessHeap () returned 0xbe0000 [0079.504] RtlFreeHeap (HeapHandle=0xbe0000, Flags=0x0, BaseAddress=0xbf91c0) returned 1 [0079.504] GetEnvironmentStringsW () returned 0xbe7000* [0079.504] GetProcessHeap () returned 0xbe0000 [0079.504] RtlAllocateHeap (HeapHandle=0xbe0000, Flags=0x8, Size=0xb40) returned 0xbf91c0 [0079.504] FreeEnvironmentStringsA (penv="=") returned 1 [0079.504] GetProcessHeap () returned 0xbe0000 [0079.504] RtlFreeHeap (HeapHandle=0xbe0000, Flags=0x0, BaseAddress=0xbe4a58) returned 1 [0079.504] DeleteProcThreadAttributeList (in: lpAttributeList=0x97f158 | out: lpAttributeList=0x97f158) [0079.504] ??_V@YAXPAX@Z () returned 0x1 [0079.504] _get_osfhandle (_FileHandle=1) returned 0x90 [0079.504] SetConsoleMode (hConsoleHandle=0x90, dwMode=0x3) returned 1 [0079.506] _get_osfhandle (_FileHandle=1) returned 0x90 [0079.506] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x1203890 | out: lpMode=0x1203890) returned 1 [0079.507] _get_osfhandle (_FileHandle=1) returned 0x90 [0079.507] SetConsoleMode (hConsoleHandle=0x90, dwMode=0x7) returned 1 [0079.508] _get_osfhandle (_FileHandle=0) returned 0x8c [0079.508] GetConsoleMode (in: hConsoleHandle=0x8c, lpMode=0x1203894 | out: lpMode=0x1203894) returned 1 [0079.509] _get_osfhandle (_FileHandle=0) returned 0x8c [0079.509] SetConsoleMode (hConsoleHandle=0x8c, dwMode=0x1e7) returned 1 [0079.510] SetConsoleInputExeNameW () returned 0x1 [0079.510] GetConsoleOutputCP () returned 0x1b5 [0079.683] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x1203850 | out: lpCPInfo=0x1203850) returned 1 [0079.683] SetThreadUILanguage (LangId=0x0) returned 0x690409 [0079.740] exit (_Code=2) [0079.740] ??_V@YAXPAX@Z () returned 0x1 Thread: id = 14 os_tid = 0xc14 Process: id = "4" image_name = "conhost.exe" filename = "c:\\windows\\system32\\conhost.exe" page_root = "0x1466d000" os_pid = "0x10ec" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "3" os_parent_pid = "0x1128" cmd_line = "\\??\\C:\\WINDOWS\\system32\\conhost.exe 0xffffffff -ForceV1" cur_dir = "C:\\WINDOWS" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000faa5" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 9 os_tid = 0x10ac Thread: id = 10 os_tid = 0xa00 Thread: id = 11 os_tid = 0x1288 Thread: id = 12 os_tid = 0xf9c Thread: id = 13 os_tid = 0xe9c Process: id = "5" image_name = "net.exe" filename = "c:\\windows\\syswow64\\net.exe" page_root = "0x642d000" os_pid = "0x88c" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "3" os_parent_pid = "0x1128" cmd_line = "net stop SQLWriter" cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000faa5" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 15 os_tid = 0x5e0 Thread: id = 16 os_tid = 0x97c Process: id = "6" image_name = "net1.exe" filename = "c:\\windows\\syswow64\\net1.exe" page_root = "0x7da6000" os_pid = "0x818" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "5" os_parent_pid = "0x88c" cmd_line = "C:\\WINDOWS\\system32\\net1 stop SQLWriter" cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000faa5" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 17 os_tid = 0xa4c [0078.653] GetModuleHandleA (lpModuleName=0x0) returned 0x230000 [0078.653] __set_app_type (_Type=0x1) [0078.654] __p__fmode () returned 0x76953c14 [0078.654] __p__commode () returned 0x769549ec [0078.654] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x236f20) returned 0x0 [0078.654] __getmainargs (in: _Argc=0x24f608, _Argv=0x24f60c, _Env=0x24f610, _DoWildCard=0, _StartInfo=0x24f61c | out: _Argc=0x24f608, _Argv=0x24f60c, _Env=0x24f610) returned 0 [0078.654] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0078.655] GetConsoleOutputCP () returned 0x1b5 [0078.685] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x256fa0 | out: lpCPInfo=0x256fa0) returned 1 [0078.685] SetThreadUILanguage (LangId=0x0) returned 0x2f40409 [0078.694] sprintf_s (in: _DstBuf=0x307f76c, _DstSize=0xc, _Format=".%u" | out: _DstBuf=".437") returned 4 [0078.695] setlocale (category=0, locale=".437") returned="English_United States.437" [0078.698] GetStdHandle (nStdHandle=0xfffffff5) returned 0x90 [0078.698] GetStdHandle (nStdHandle=0xfffffff4) returned 0x94 [0078.698] GetCommandLineW () returned="C:\\WINDOWS\\system32\\net1 stop SQLWriter" [0078.698] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x307f514, nSize=0x104 | out: lpFilename="C:\\WINDOWS\\SysWOW64\\net1.exe" (normalized: "c:\\windows\\syswow64\\net1.exe")) returned 0x1c [0078.698] RtlAllocateHeap (HeapHandle=0x3310000, Flags=0x0, Size=0x5c) returned 0x3313e50 [0078.698] NetApiBufferAllocate (in: ByteCount=0x10, Buffer=0x307f510 | out: Buffer=0x307f510*=0x33183f0) returned 0x0 [0078.698] NetApiBufferAllocate (in: ByteCount=0x10, Buffer=0x307f50c | out: Buffer=0x307f50c*=0x331dd00) returned 0x0 [0078.698] __iob_func () returned 0x76952608 [0078.698] _fileno (_File=0x76952608) returned 0 [0078.698] _setmode (_FileHandle=0, _Mode=16384) returned 16384 [0078.698] _wcsicmp (_String1="accounts", _String2="stop") returned -18 [0078.698] _wcsicmp (_String1="computer", _String2="stop") returned -16 [0078.698] _wcsicmp (_String1="config", _String2="stop") returned -16 [0078.698] _wcsicmp (_String1="continue", _String2="stop") returned -16 [0078.698] _wcsicmp (_String1="cont", _String2="stop") returned -16 [0078.698] _wcsicmp (_String1="file", _String2="stop") returned -13 [0078.699] _wcsicmp (_String1="files", _String2="stop") returned -13 [0078.699] _wcsicmp (_String1="group", _String2="stop") returned -12 [0078.699] _wcsicmp (_String1="groups", _String2="stop") returned -12 [0078.699] _wcsicmp (_String1="help", _String2="stop") returned -11 [0078.699] _wcsicmp (_String1="helpmsg", _String2="stop") returned -11 [0078.699] _wcsicmp (_String1="localgroup", _String2="stop") returned -7 [0078.699] _wcsicmp (_String1="pause", _String2="stop") returned -3 [0078.699] _wcsicmp (_String1="session", _String2="stop") returned -15 [0078.699] _wcsicmp (_String1="sessions", _String2="stop") returned -15 [0078.699] _wcsicmp (_String1=0x231ffc, _String2="stop") returned -15 [0078.699] _wcsicmp (_String1="share", _String2="stop") returned -12 [0078.699] _wcsicmp (_String1="start", _String2="stop") returned -14 [0078.699] _wcsicmp (_String1="stats", _String2="stop") returned -14 [0078.699] _wcsicmp (_String1="statistics", _String2="stop") returned -14 [0078.699] _wcsicmp (_String1="stop", _String2="stop") returned 0 [0078.699] _wcsicmp (_String1="accounts", _String2="SQLWriter") returned -18 [0078.699] _wcsicmp (_String1="computer", _String2="SQLWriter") returned -16 [0078.699] _wcsicmp (_String1="config", _String2="SQLWriter") returned -16 [0078.699] _wcsicmp (_String1="continue", _String2="SQLWriter") returned -16 [0078.699] _wcsicmp (_String1="cont", _String2="SQLWriter") returned -16 [0078.699] _wcsicmp (_String1="file", _String2="SQLWriter") returned -13 [0078.699] _wcsicmp (_String1="files", _String2="SQLWriter") returned -13 [0078.699] _wcsicmp (_String1="group", _String2="SQLWriter") returned -12 [0078.699] _wcsicmp (_String1="groups", _String2="SQLWriter") returned -12 [0078.699] _wcsicmp (_String1="help", _String2="SQLWriter") returned -11 [0078.700] _wcsicmp (_String1="helpmsg", _String2="SQLWriter") returned -11 [0078.700] _wcsicmp (_String1="localgroup", _String2="SQLWriter") returned -7 [0078.700] _wcsicmp (_String1="pause", _String2="SQLWriter") returned -3 [0078.700] _wcsicmp (_String1="session", _String2="SQLWriter") returned -12 [0078.700] _wcsicmp (_String1="sessions", _String2="SQLWriter") returned -12 [0078.700] _wcsicmp (_String1="sess", _String2="SQLWriter") returned -12 [0078.700] _wcsicmp (_String1="share", _String2="SQLWriter") returned -9 [0078.700] _wcsicmp (_String1="start", _String2="SQLWriter") returned 3 [0078.700] _wcsicmp (_String1="stats", _String2="SQLWriter") returned 3 [0078.700] _wcsicmp (_String1="statistics", _String2="SQLWriter") returned 3 [0078.700] _wcsicmp (_String1="stop", _String2="SQLWriter") returned 3 [0078.700] _wcsicmp (_String1="time", _String2="SQLWriter") returned 1 [0078.700] _wcsicmp (_String1="user", _String2="SQLWriter") returned 2 [0078.700] _wcsicmp (_String1="users", _String2="SQLWriter") returned 2 [0078.700] _wcsicmp (_String1="msg", _String2="SQLWriter") returned -6 [0078.700] _wcsicmp (_String1="messenger", _String2="SQLWriter") returned -6 [0078.700] _wcsicmp (_String1="receiver", _String2="SQLWriter") returned -1 [0078.701] _wcsicmp (_String1="rcv", _String2="SQLWriter") returned -1 [0078.701] _wcsicmp (_String1="netpopup", _String2="SQLWriter") returned -5 [0078.701] _wcsicmp (_String1="redirector", _String2="SQLWriter") returned -1 [0078.701] _wcsicmp (_String1="redir", _String2="SQLWriter") returned -1 [0078.701] _wcsicmp (_String1="rdr", _String2="SQLWriter") returned -1 [0078.701] _wcsicmp (_String1="workstation", _String2="SQLWriter") returned 4 [0078.701] _wcsicmp (_String1="work", _String2="SQLWriter") returned 4 [0078.701] _wcsicmp (_String1="wksta", _String2="SQLWriter") returned 4 [0078.701] _wcsicmp (_String1="prdr", _String2="SQLWriter") returned -3 [0078.701] _wcsicmp (_String1="devrdr", _String2="SQLWriter") returned -15 [0078.701] _wcsicmp (_String1="lanmanworkstation", _String2="SQLWriter") returned -7 [0078.701] _wcsicmp (_String1="server", _String2="SQLWriter") returned -12 [0078.701] _wcsicmp (_String1="svr", _String2="SQLWriter") returned 5 [0078.701] _wcsicmp (_String1="srv", _String2="SQLWriter") returned 1 [0078.701] _wcsicmp (_String1="lanmanserver", _String2="SQLWriter") returned -7 [0078.701] _wcsicmp (_String1="alerter", _String2="SQLWriter") returned -18 [0078.701] _wcsicmp (_String1="netlogon", _String2="SQLWriter") returned -5 [0078.701] _wcsupr (in: _String="SQLWriter" | out: _String="SQLWRITER") returned="SQLWRITER" [0078.701] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x80000000) returned 0x3320a38 [0078.708] GetServiceKeyNameW (in: hSCManager=0x3320a38, lpDisplayName="SQLWRITER", lpServiceName=0x258c28, lpcchBuffer=0x307f484 | out: lpServiceName="", lpcchBuffer=0x307f484) returned 0 [0079.404] _wcsicmp (_String1="msg", _String2="SQLWRITER") returned -6 [0079.404] _wcsicmp (_String1="messenger", _String2="SQLWRITER") returned -6 [0079.404] _wcsicmp (_String1="receiver", _String2="SQLWRITER") returned -1 [0079.404] _wcsicmp (_String1="rcv", _String2="SQLWRITER") returned -1 [0079.404] _wcsicmp (_String1="redirector", _String2="SQLWRITER") returned -1 [0079.404] _wcsicmp (_String1="redir", _String2="SQLWRITER") returned -1 [0079.404] _wcsicmp (_String1="rdr", _String2="SQLWRITER") returned -1 [0079.404] _wcsicmp (_String1="workstation", _String2="SQLWRITER") returned 4 [0079.405] _wcsicmp (_String1="work", _String2="SQLWRITER") returned 4 [0079.405] _wcsicmp (_String1="wksta", _String2="SQLWRITER") returned 4 [0079.405] _wcsicmp (_String1="prdr", _String2="SQLWRITER") returned -3 [0079.405] _wcsicmp (_String1="devrdr", _String2="SQLWRITER") returned -15 [0079.405] _wcsicmp (_String1="lanmanworkstation", _String2="SQLWRITER") returned -7 [0079.405] _wcsicmp (_String1="server", _String2="SQLWRITER") returned -12 [0079.405] _wcsicmp (_String1="svr", _String2="SQLWRITER") returned 5 [0079.405] _wcsicmp (_String1="srv", _String2="SQLWRITER") returned 1 [0079.405] _wcsicmp (_String1="lanmanserver", _String2="SQLWRITER") returned -7 [0079.405] _wcsicmp (_String1="alerter", _String2="SQLWRITER") returned -18 [0079.405] _wcsicmp (_String1="netlogon", _String2="SQLWRITER") returned -5 [0079.406] _wcsicmp (_String1="SQLWRITER", _String2="WORKSTATION") returned -4 [0079.406] _wcsicmp (_String1="SQLWRITER", _String2="LanmanWorkstation") returned 7 [0079.406] _wcsicmp (_String1="SQLWRITER", _String2="SERVER") returned 12 [0079.406] _wcsicmp (_String1="SQLWRITER", _String2="LanmanServer") returned 7 [0079.406] _wcsicmp (_String1="SQLWRITER", _String2="BROWSER") returned 17 [0079.406] _wcsicmp (_String1="SQLWRITER", _String2="BROWSER") returned 17 [0079.406] _wcsicmp (_String1="SQLWRITER", _String2="MESSENGER") returned 6 [0079.406] _wcsicmp (_String1="SQLWRITER", _String2="MESSENGER") returned 6 [0079.406] _wcsicmp (_String1="SQLWRITER", _String2="NETRUN") returned 5 [0079.406] _wcsicmp (_String1="SQLWRITER", _String2="NETRUN") returned 5 [0079.406] _wcsicmp (_String1="SQLWRITER", _String2="SPOOLER") returned 1 [0079.406] _wcsicmp (_String1="SQLWRITER", _String2="SPOOLER") returned 1 [0079.406] _wcsicmp (_String1="SQLWRITER", _String2="ALERTER") returned 18 [0079.406] _wcsicmp (_String1="SQLWRITER", _String2="ALERTER") returned 18 [0079.406] _wcsicmp (_String1="SQLWRITER", _String2="NETLOGON") returned 5 [0079.406] _wcsicmp (_String1="SQLWRITER", _String2="NETLOGON") returned 5 [0079.406] _wcsicmp (_String1="SQLWRITER", _String2="NETPOPUP") returned 5 [0079.407] _wcsicmp (_String1="SQLWRITER", _String2="NETPOPUP") returned 5 [0079.407] _wcsicmp (_String1="SQLWRITER", _String2="SQLSERVER") returned 4 [0079.407] _wcsicmp (_String1="SQLWRITER", _String2="SQLSERVER") returned 4 [0079.407] _wcsicmp (_String1="SQLWRITER", _String2="REPLICATOR") returned 1 [0079.407] _wcsicmp (_String1="SQLWRITER", _String2="REPLICATOR") returned 1 [0079.407] _wcsicmp (_String1="SQLWRITER", _String2="REMOTEBOOT") returned 1 [0079.407] _wcsicmp (_String1="SQLWRITER", _String2="REMOTEBOOT") returned 1 [0079.407] _wcsicmp (_String1="SQLWRITER", _String2="TIMESOURCE") returned -1 [0079.407] _wcsicmp (_String1="SQLWRITER", _String2="TIMESOURCE") returned -1 [0079.407] _wcsicmp (_String1="SQLWRITER", _String2="AFP") returned 18 [0079.407] _wcsicmp (_String1="SQLWRITER", _String2="AFP") returned 18 [0079.407] _wcsicmp (_String1="SQLWRITER", _String2="UPS") returned -2 [0079.407] _wcsicmp (_String1="SQLWRITER", _String2="UPS") returned -2 [0079.407] _wcsicmp (_String1="SQLWRITER", _String2="XACTSRV") returned -5 [0079.407] _wcsicmp (_String1="SQLWRITER", _String2="XACTSRV") returned -5 [0079.407] _wcsicmp (_String1="SQLWRITER", _String2="TCPIP") returned -1 [0079.408] _wcsicmp (_String1="SQLWRITER", _String2="TCPIP") returned -1 [0079.408] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x1) returned 0x3320998 [0079.408] OpenServiceW (hSCManager=0x3320998, lpServiceName="SQLWRITER", dwDesiredAccess=0x84) returned 0x0 [0079.409] GetLastError () returned 0x424 [0079.411] CloseServiceHandle (hSCObject=0x3320998) returned 1 [0079.411] wcscpy_s (in: _Destination=0x257610, _SizeInWords=0x104, _Source="NETMSG" | out: _Destination="NETMSG") returned 0x0 [0079.411] LoadLibraryExW (lpLibFileName="NETMSG", hFile=0x0, dwFlags=0x20) returned 0x3100002 [0079.423] FormatMessageW (in: dwFlags=0x2a00, lpSource=0x3100002, dwMessageId=0x889, dwLanguageId=0x0, lpBuffer=0x257c20, nSize=0x800, Arguments=0x2573d0 | out: lpBuffer="The service name is invalid.\r\n") returned 0x1e [0079.428] GetFileType (hFile=0x94) returned 0x2 [0079.428] GetConsoleMode (in: hConsoleHandle=0x94, lpMode=0x307f314 | out: lpMode=0x307f314) returned 1 [0079.430] WriteConsoleW (in: hConsoleOutput=0x94, lpBuffer=0x257c20*, nNumberOfCharsToWrite=0x1e, lpNumberOfCharsWritten=0x307f320, lpReserved=0x0 | out: lpBuffer=0x257c20*, lpNumberOfCharsWritten=0x307f320*=0x1e) returned 1 [0079.432] GetFileType (hFile=0x94) returned 0x2 [0079.432] GetConsoleMode (in: hConsoleHandle=0x94, lpMode=0x307f314 | out: lpMode=0x307f314) returned 1 [0079.433] WriteConsoleW (in: hConsoleOutput=0x94, lpBuffer=0x2312e4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x307f320, lpReserved=0x0 | out: lpBuffer=0x2312e4*, lpNumberOfCharsWritten=0x307f320*=0x2) returned 1 [0079.435] _ultow (in: _Dest=0x889, _Radix=50852712 | out: _Dest=0x889) returned="2185" [0079.435] FormatMessageW (in: dwFlags=0x2800, lpSource=0x3100002, dwMessageId=0xdba, dwLanguageId=0x0, lpBuffer=0x257c20, nSize=0x800, Arguments=0x2573d0 | out: lpBuffer="More help is available by typing NET HELPMSG 2185.\r\n") returned 0x34 [0079.435] GetFileType (hFile=0x94) returned 0x2 [0079.436] GetConsoleMode (in: hConsoleHandle=0x94, lpMode=0x307f338 | out: lpMode=0x307f338) returned 1 [0079.437] WriteConsoleW (in: hConsoleOutput=0x94, lpBuffer=0x257c20*, nNumberOfCharsToWrite=0x34, lpNumberOfCharsWritten=0x307f344, lpReserved=0x0 | out: lpBuffer=0x257c20*, lpNumberOfCharsWritten=0x307f344*=0x34) returned 1 [0079.438] GetFileType (hFile=0x94) returned 0x2 [0079.438] GetConsoleMode (in: hConsoleHandle=0x94, lpMode=0x307f338 | out: lpMode=0x307f338) returned 1 [0079.440] WriteConsoleW (in: hConsoleOutput=0x94, lpBuffer=0x2312e4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x307f344, lpReserved=0x0 | out: lpBuffer=0x2312e4*, lpNumberOfCharsWritten=0x307f344*=0x2) returned 1 [0079.441] NetApiBufferFree (Buffer=0x33183f0) returned 0x0 [0079.441] NetApiBufferFree (Buffer=0x331dd00) returned 0x0 [0079.441] GetCommandLineW () returned="C:\\WINDOWS\\system32\\net1 stop SQLWriter" [0079.441] exit (_Code=2) Thread: id = 18 os_tid = 0x7f0 Process: id = "7" image_name = "cmd.exe" filename = "c:\\windows\\syswow64\\cmd.exe" page_root = "0x175a7000" os_pid = "0xd6c" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x13d4" cmd_line = "C:\\WINDOWS\\system32\\cmd.exe /c net stop SQLBrowser" cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000faa5" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 19 os_tid = 0x500 [0081.121] GetModuleHandleA (lpModuleName=0x0) returned 0x11d0000 [0081.121] __set_app_type (_Type=0x1) [0081.121] __p__fmode () returned 0x76953c14 [0081.137] __p__commode () returned 0x769549ec [0081.137] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x11e6fd0) returned 0x0 [0081.138] __getmainargs (in: _Argc=0x11fd1a4, _Argv=0x11fd1a8, _Env=0x11fd1ac, _DoWildCard=0, _StartInfo=0x11fd1b8 | out: _Argc=0x11fd1a4, _Argv=0x11fd1a8, _Env=0x11fd1ac) returned 0 [0081.138] _onexit (_Func=0x11e8030) returned 0x11e8030 [0081.139] _onexit (_Func=0x11e8040) returned 0x11e8040 [0081.139] _onexit (_Func=0x11e8050) returned 0x11e8050 [0081.139] _onexit (_Func=0x11e8060) returned 0x11e8060 [0081.140] _onexit (_Func=0x11e8070) returned 0x11e8070 [0081.140] _onexit (_Func=0x11e8080) returned 0x11e8080 [0081.140] GetCurrentThreadId () returned 0x500 [0081.140] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0x500) returned 0xbc [0081.141] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x74030000 [0081.141] GetProcAddress (hModule=0x74030000, lpProcName="SetThreadUILanguage") returned 0x74044f70 [0081.141] SetThreadUILanguage (LangId=0x0) returned 0x2e0409 [0081.150] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0081.150] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x4ffc68 | out: phkResult=0x4ffc68*=0x0) returned 0x2 [0081.150] VirtualQuery (in: lpAddress=0x4ffc73, lpBuffer=0x4ffc20, dwLength=0x1c | out: lpBuffer=0x4ffc20*(BaseAddress=0x4ff000, AllocationBase=0x400000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0081.150] VirtualQuery (in: lpAddress=0x400000, lpBuffer=0x4ffc20, dwLength=0x1c | out: lpBuffer=0x4ffc20*(BaseAddress=0x400000, AllocationBase=0x400000, AllocationProtect=0x4, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000)) returned 0x1c [0081.151] VirtualQuery (in: lpAddress=0x401000, lpBuffer=0x4ffc20, dwLength=0x1c | out: lpBuffer=0x4ffc20*(BaseAddress=0x401000, AllocationBase=0x400000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x104, Type=0x20000)) returned 0x1c [0081.151] VirtualQuery (in: lpAddress=0x403000, lpBuffer=0x4ffc20, dwLength=0x1c | out: lpBuffer=0x4ffc20*(BaseAddress=0x403000, AllocationBase=0x400000, AllocationProtect=0x4, RegionSize=0xfd000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0081.151] VirtualQuery (in: lpAddress=0x500000, lpBuffer=0x4ffc20, dwLength=0x1c | out: lpBuffer=0x4ffc20*(BaseAddress=0x500000, AllocationBase=0x500000, AllocationProtect=0x2, RegionSize=0xc5000, State=0x1000, Protect=0x2, Type=0x40000)) returned 0x1c [0081.151] GetConsoleOutputCP () returned 0x1b5 [0081.163] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x1203850 | out: lpCPInfo=0x1203850) returned 1 [0081.163] SetConsoleCtrlHandler (HandlerRoutine=0x11f7260, Add=1) returned 1 [0081.163] _get_osfhandle (_FileHandle=1) returned 0x90 [0081.164] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x120388c | out: lpMode=0x120388c) returned 1 [0081.166] _get_osfhandle (_FileHandle=0) returned 0x8c [0081.166] GetConsoleMode (in: hConsoleHandle=0x8c, lpMode=0x1203888 | out: lpMode=0x1203888) returned 1 [0081.168] _get_osfhandle (_FileHandle=1) returned 0x90 [0081.168] SetConsoleMode (hConsoleHandle=0x90, dwMode=0x0) returned 1 [0081.268] _get_osfhandle (_FileHandle=1) returned 0x90 [0081.268] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x1203890 | out: lpMode=0x1203890) returned 1 [0081.271] _get_osfhandle (_FileHandle=1) returned 0x90 [0081.271] SetConsoleMode (hConsoleHandle=0x90, dwMode=0x7) returned 1 [0081.272] _get_osfhandle (_FileHandle=0) returned 0x8c [0081.272] GetConsoleMode (in: hConsoleHandle=0x8c, lpMode=0x1203894 | out: lpMode=0x1203894) returned 1 [0081.275] _get_osfhandle (_FileHandle=0) returned 0x8c [0081.275] SetConsoleMode (hConsoleHandle=0x8c, dwMode=0x1e7) returned 1 [0081.277] GetEnvironmentStringsW () returned 0x694dd0* [0081.277] GetProcessHeap () returned 0x690000 [0081.277] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0xaca) returned 0x6958a8 [0081.279] FreeEnvironmentStringsA (penv="A") returned 1 [0081.279] GetProcessHeap () returned 0x690000 [0081.279] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x4) returned 0x6948b0 [0081.279] GetEnvironmentStringsW () returned 0x694dd0* [0081.279] GetProcessHeap () returned 0x690000 [0081.279] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0xaca) returned 0x696380 [0081.279] FreeEnvironmentStringsA (penv="A") returned 1 [0081.279] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x4febc4 | out: phkResult=0x4febc4*=0xcc) returned 0x0 [0081.279] RegQueryValueExW (in: hKey=0xcc, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x4febcc, lpData=0x4febd0, lpcbData=0x4febc8*=0x1000 | out: lpType=0x4febcc*=0x0, lpData=0x4febd0*=0xe0, lpcbData=0x4febc8*=0x1000) returned 0x2 [0081.279] RegQueryValueExW (in: hKey=0xcc, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x4febcc, lpData=0x4febd0, lpcbData=0x4febc8*=0x1000 | out: lpType=0x4febcc*=0x4, lpData=0x4febd0*=0x1, lpcbData=0x4febc8*=0x4) returned 0x0 [0081.279] RegQueryValueExW (in: hKey=0xcc, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x4febcc, lpData=0x4febd0, lpcbData=0x4febc8*=0x1000 | out: lpType=0x4febcc*=0x0, lpData=0x4febd0*=0x1, lpcbData=0x4febc8*=0x1000) returned 0x2 [0081.279] RegQueryValueExW (in: hKey=0xcc, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x4febcc, lpData=0x4febd0, lpcbData=0x4febc8*=0x1000 | out: lpType=0x4febcc*=0x4, lpData=0x4febd0*=0x0, lpcbData=0x4febc8*=0x4) returned 0x0 [0081.279] RegQueryValueExW (in: hKey=0xcc, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x4febcc, lpData=0x4febd0, lpcbData=0x4febc8*=0x1000 | out: lpType=0x4febcc*=0x4, lpData=0x4febd0*=0x40, lpcbData=0x4febc8*=0x4) returned 0x0 [0081.279] RegQueryValueExW (in: hKey=0xcc, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x4febcc, lpData=0x4febd0, lpcbData=0x4febc8*=0x1000 | out: lpType=0x4febcc*=0x4, lpData=0x4febd0*=0x40, lpcbData=0x4febc8*=0x4) returned 0x0 [0081.279] RegQueryValueExW (in: hKey=0xcc, lpValueName="AutoRun", lpReserved=0x0, lpType=0x4febcc, lpData=0x4febd0, lpcbData=0x4febc8*=0x1000 | out: lpType=0x4febcc*=0x0, lpData=0x4febd0*=0x40, lpcbData=0x4febc8*=0x1000) returned 0x2 [0081.279] RegCloseKey (hKey=0xcc) returned 0x0 [0081.280] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x4febc4 | out: phkResult=0x4febc4*=0xcc) returned 0x0 [0081.280] RegQueryValueExW (in: hKey=0xcc, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x4febcc, lpData=0x4febd0, lpcbData=0x4febc8*=0x1000 | out: lpType=0x4febcc*=0x0, lpData=0x4febd0*=0x40, lpcbData=0x4febc8*=0x1000) returned 0x2 [0081.280] RegQueryValueExW (in: hKey=0xcc, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x4febcc, lpData=0x4febd0, lpcbData=0x4febc8*=0x1000 | out: lpType=0x4febcc*=0x4, lpData=0x4febd0*=0x1, lpcbData=0x4febc8*=0x4) returned 0x0 [0081.280] RegQueryValueExW (in: hKey=0xcc, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x4febcc, lpData=0x4febd0, lpcbData=0x4febc8*=0x1000 | out: lpType=0x4febcc*=0x0, lpData=0x4febd0*=0x1, lpcbData=0x4febc8*=0x1000) returned 0x2 [0081.280] RegQueryValueExW (in: hKey=0xcc, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x4febcc, lpData=0x4febd0, lpcbData=0x4febc8*=0x1000 | out: lpType=0x4febcc*=0x4, lpData=0x4febd0*=0x0, lpcbData=0x4febc8*=0x4) returned 0x0 [0081.280] RegQueryValueExW (in: hKey=0xcc, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x4febcc, lpData=0x4febd0, lpcbData=0x4febc8*=0x1000 | out: lpType=0x4febcc*=0x4, lpData=0x4febd0*=0x9, lpcbData=0x4febc8*=0x4) returned 0x0 [0081.280] RegQueryValueExW (in: hKey=0xcc, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x4febcc, lpData=0x4febd0, lpcbData=0x4febc8*=0x1000 | out: lpType=0x4febcc*=0x4, lpData=0x4febd0*=0x9, lpcbData=0x4febc8*=0x4) returned 0x0 [0081.280] RegQueryValueExW (in: hKey=0xcc, lpValueName="AutoRun", lpReserved=0x0, lpType=0x4febcc, lpData=0x4febd0, lpcbData=0x4febc8*=0x1000 | out: lpType=0x4febcc*=0x0, lpData=0x4febd0*=0x9, lpcbData=0x4febc8*=0x1000) returned 0x2 [0081.280] RegCloseKey (hKey=0xcc) returned 0x0 [0081.280] time (in: timer=0x0 | out: timer=0x0) returned 0x5e3302c9 [0081.280] srand (_Seed=0x5e3302c9) [0081.280] GetCommandLineW () returned="C:\\WINDOWS\\system32\\cmd.exe /c net stop SQLBrowser" [0081.280] malloc (_Size=0x4000) returned 0x642700 [0081.281] GetCommandLineW () returned="C:\\WINDOWS\\system32\\cmd.exe /c net stop SQLBrowser" [0081.281] malloc (_Size=0xffce) returned 0x890048 [0081.282] ??_V@YAXPAX@Z () returned 0x4ffba8 [0081.283] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x890048 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0081.283] malloc (_Size=0xffce) returned 0x8a0020 [0081.283] ??_V@YAXPAX@Z () returned 0x4ff97c [0081.284] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x8a0020, nSize=0x7fe7 | out: lpFilename="C:\\WINDOWS\\SysWOW64\\cmd.exe" (normalized: "c:\\windows\\syswow64\\cmd.exe")) returned 0x1b [0081.284] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x11ff840, nSize=0x2000 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath;C:\\WINDOWS\\system32;C:\\WINDOWS;C:\\WINDOWS\\System32\\Wbem;C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\;C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps") returned 0xbb [0081.284] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x11ff840, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0081.284] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x11ff840, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0081.284] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13 [0081.284] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11 [0081.284] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13 [0081.284] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13 [0081.284] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12 [0081.284] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4 [0081.284] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2 [0081.284] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8 [0081.284] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1 [0081.285] GetProcessHeap () returned 0x690000 [0081.285] RtlFreeHeap (HeapHandle=0x690000, Flags=0x0, BaseAddress=0x6958a8) returned 1 [0081.285] GetEnvironmentStringsW () returned 0x694dd0* [0081.285] GetProcessHeap () returned 0x690000 [0081.285] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0xae2) returned 0x697948 [0081.285] FreeEnvironmentStringsA (penv="A") returned 1 [0081.285] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x11ff840, nSize=0x2000 | out: lpBuffer="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1b [0081.285] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x11ff840, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0081.285] _wcsicmp (_String1="KEYS", _String2="CD") returned 8 [0081.285] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6 [0081.285] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8 [0081.285] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8 [0081.285] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7 [0081.285] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9 [0081.286] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7 [0081.286] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3 [0081.286] malloc (_Size=0xffce) returned 0x8afff8 [0081.286] ??_V@YAXPAX@Z () returned 0x4ff714 [0081.287] GetProcessHeap () returned 0x690000 [0081.287] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x38) returned 0x690ae0 [0081.287] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x8afff8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0081.287] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x7fe7, lpBuffer=0x8afff8, lpFilePart=0x4ff760 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x4ff760*="Desktop") returned 0x17 [0081.288] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\Desktop" (normalized: "c:\\users\\fd1hvy\\desktop")) returned 0x11 [0081.288] FindFirstFileW (in: lpFileName="C:\\Users", lpFindFileData=0x4ff4e0 | out: lpFindFileData=0x4ff4e0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x475bb883, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x475bb883, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 0x690b20 [0081.288] FindClose (in: hFindFile=0x690b20 | out: hFindFile=0x690b20) returned 1 [0081.288] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy", lpFindFileData=0x4ff4e0 | out: lpFindFileData=0x4ff4e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20fc850f, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x9de5855d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x9de5855d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD1HVy", cAlternateFileName="")) returned 0x690b20 [0081.288] FindClose (in: hFindFile=0x690b20 | out: hFindFile=0x690b20) returned 1 [0081.288] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", lpFindFileData=0x4ff4e0 | out: lpFindFileData=0x4ff4e0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x5de49bf6, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0x5de49bf6, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 0x690b20 [0081.289] FindClose (in: hFindFile=0x690b20 | out: hFindFile=0x690b20) returned 1 [0081.289] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\Desktop" (normalized: "c:\\users\\fd1hvy\\desktop")) returned 0x11 [0081.289] SetCurrentDirectoryW (lpPathName="C:\\Users\\FD1HVy\\Desktop" (normalized: "c:\\users\\fd1hvy\\desktop")) returned 1 [0081.289] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Users\\FD1HVy\\Desktop") returned 1 [0081.289] GetProcessHeap () returned 0x690000 [0081.289] RtlFreeHeap (HeapHandle=0x690000, Flags=0x0, BaseAddress=0x697948) returned 1 [0081.289] GetEnvironmentStringsW () returned 0x694dd0* [0081.289] GetProcessHeap () returned 0x690000 [0081.289] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0xb1a) returned 0x696e58 [0081.289] FreeEnvironmentStringsA (penv="=") returned 1 [0081.289] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x890048 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0081.289] GetProcessHeap () returned 0x690000 [0081.289] RtlFreeHeap (HeapHandle=0x690000, Flags=0x0, BaseAddress=0x690ae0) returned 1 [0081.289] ??_V@YAXPAX@Z () returned 0x1 [0081.289] ??_V@YAXPAX@Z () returned 0x1 [0081.290] GetProcessHeap () returned 0x690000 [0081.290] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x400e) returned 0x698f60 [0081.290] GetProcessHeap () returned 0x690000 [0081.290] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x34) returned 0x697980 [0081.290] GetProcessHeap () returned 0x690000 [0081.290] RtlFreeHeap (HeapHandle=0x690000, Flags=0x0, BaseAddress=0x698f60) returned 1 [0081.290] GetConsoleOutputCP () returned 0x1b5 [0081.292] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x1203850 | out: lpCPInfo=0x1203850) returned 1 [0081.292] GetUserDefaultLCID () returned 0x409 [0081.293] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x11ff82c, cchData=8 | out: lpLCData=":") returned 2 [0081.293] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x4ffad0, cchData=128 | out: lpLCData="0") returned 2 [0081.293] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x4ffad0, cchData=128 | out: lpLCData="0") returned 2 [0081.293] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x4ffad0, cchData=128 | out: lpLCData="1") returned 2 [0081.293] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x11ff81c, cchData=8 | out: lpLCData="/") returned 2 [0081.293] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x11ff7b8, cchData=32 | out: lpLCData="Mon") returned 4 [0081.293] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x11ff778, cchData=32 | out: lpLCData="Tue") returned 4 [0081.296] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x11ff738, cchData=32 | out: lpLCData="Wed") returned 4 [0081.296] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x11ff6f8, cchData=32 | out: lpLCData="Thu") returned 4 [0081.297] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x11ff6b8, cchData=32 | out: lpLCData="Fri") returned 4 [0081.297] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x11ff678, cchData=32 | out: lpLCData="Sat") returned 4 [0081.297] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x11ff638, cchData=32 | out: lpLCData="Sun") returned 4 [0081.297] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x11ff80c, cchData=8 | out: lpLCData=".") returned 2 [0081.297] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x11ff7f8, cchData=8 | out: lpLCData=",") returned 2 [0081.297] setlocale (category=0, locale=".OCP") returned="English_United States.437" [0081.300] GetProcessHeap () returned 0x690000 [0081.300] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x0, Size=0x20c) returned 0x697a08 [0081.300] GetConsoleTitleW (in: lpConsoleTitle=0x697a08, nSize=0x104 | out: lpConsoleTitle="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1c [0081.304] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x74030000 [0081.304] GetProcAddress (hModule=0x74030000, lpProcName="CopyFileExW") returned 0x74044330 [0081.304] GetProcAddress (hModule=0x74030000, lpProcName="IsDebuggerPresent") returned 0x74045930 [0081.304] GetProcAddress (hModule=0x74030000, lpProcName="SetConsoleInputExeNameW") returned 0x772c09d0 [0081.304] ??_V@YAXPAX@Z () returned 0x1 [0081.306] GetProcessHeap () returned 0x690000 [0081.306] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x400a) returned 0x698f60 [0081.306] GetProcessHeap () returned 0x690000 [0081.306] RtlFreeHeap (HeapHandle=0x690000, Flags=0x0, BaseAddress=0x698f60) returned 1 [0081.306] _wcsicmp (_String1="net", _String2=")") returned 69 [0081.307] _wcsicmp (_String1="FOR", _String2="net") returned -8 [0081.307] _wcsicmp (_String1="FOR/?", _String2="net") returned -8 [0081.307] _wcsicmp (_String1="IF", _String2="net") returned -5 [0081.307] _wcsicmp (_String1="IF/?", _String2="net") returned -5 [0081.307] _wcsicmp (_String1="REM", _String2="net") returned 4 [0081.307] _wcsicmp (_String1="REM/?", _String2="net") returned 4 [0081.307] GetProcessHeap () returned 0x690000 [0081.307] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x58) returned 0x697c20 [0081.307] GetProcessHeap () returned 0x690000 [0081.307] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x10) returned 0x697c80 [0081.308] GetProcessHeap () returned 0x690000 [0081.308] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x2a) returned 0x697c98 [0081.310] GetConsoleTitleW (in: lpConsoleTitle=0x4ff9c8, nSize=0x104 | out: lpConsoleTitle="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1c [0081.316] malloc (_Size=0xffce) returned 0x8a2aa0 [0081.316] ??_V@YAXPAX@Z () returned 0x4ff754 [0081.317] malloc (_Size=0xffce) returned 0x8b2a78 [0081.317] ??_V@YAXPAX@Z () returned 0x4ff50c [0081.318] _wcsicmp (_String1="net", _String2="DIR") returned 10 [0081.318] _wcsicmp (_String1="net", _String2="ERASE") returned 9 [0081.318] _wcsicmp (_String1="net", _String2="DEL") returned 10 [0081.319] _wcsicmp (_String1="net", _String2="TYPE") returned -6 [0081.319] _wcsicmp (_String1="net", _String2="COPY") returned 11 [0081.319] _wcsicmp (_String1="net", _String2="CD") returned 11 [0081.319] _wcsicmp (_String1="net", _String2="CHDIR") returned 11 [0081.319] _wcsicmp (_String1="net", _String2="RENAME") returned -4 [0081.319] _wcsicmp (_String1="net", _String2="REN") returned -4 [0081.319] _wcsicmp (_String1="net", _String2="ECHO") returned 9 [0081.319] _wcsicmp (_String1="net", _String2="SET") returned -5 [0081.319] _wcsicmp (_String1="net", _String2="PAUSE") returned -2 [0081.319] _wcsicmp (_String1="net", _String2="DATE") returned 10 [0081.319] _wcsicmp (_String1="net", _String2="TIME") returned -6 [0081.319] _wcsicmp (_String1="net", _String2="PROMPT") returned -2 [0081.319] _wcsicmp (_String1="net", _String2="MD") returned 1 [0081.319] _wcsicmp (_String1="net", _String2="MKDIR") returned 1 [0081.319] _wcsicmp (_String1="net", _String2="RD") returned -4 [0081.319] _wcsicmp (_String1="net", _String2="RMDIR") returned -4 [0081.319] _wcsicmp (_String1="net", _String2="PATH") returned -2 [0081.320] _wcsicmp (_String1="net", _String2="GOTO") returned 7 [0081.320] _wcsicmp (_String1="net", _String2="SHIFT") returned -5 [0081.320] _wcsicmp (_String1="net", _String2="CLS") returned 11 [0081.320] _wcsicmp (_String1="net", _String2="CALL") returned 11 [0081.320] _wcsicmp (_String1="net", _String2="VERIFY") returned -8 [0081.320] _wcsicmp (_String1="net", _String2="VER") returned -8 [0081.320] _wcsicmp (_String1="net", _String2="VOL") returned -8 [0081.320] _wcsicmp (_String1="net", _String2="EXIT") returned 9 [0081.320] _wcsicmp (_String1="net", _String2="SETLOCAL") returned -5 [0081.320] _wcsicmp (_String1="net", _String2="ENDLOCAL") returned 9 [0081.320] _wcsicmp (_String1="net", _String2="TITLE") returned -6 [0081.320] _wcsicmp (_String1="net", _String2="START") returned -5 [0081.320] _wcsicmp (_String1="net", _String2="DPATH") returned 10 [0081.320] _wcsicmp (_String1="net", _String2="KEYS") returned 3 [0081.320] _wcsicmp (_String1="net", _String2="MOVE") returned 1 [0081.320] _wcsicmp (_String1="net", _String2="PUSHD") returned -2 [0081.320] _wcsicmp (_String1="net", _String2="POPD") returned -2 [0081.320] _wcsicmp (_String1="net", _String2="ASSOC") returned 13 [0081.321] _wcsicmp (_String1="net", _String2="FTYPE") returned 8 [0081.321] _wcsicmp (_String1="net", _String2="BREAK") returned 12 [0081.321] _wcsicmp (_String1="net", _String2="COLOR") returned 11 [0081.321] _wcsicmp (_String1="net", _String2="MKLINK") returned 1 [0081.321] _wcsicmp (_String1="net", _String2="DIR") returned 10 [0081.321] _wcsicmp (_String1="net", _String2="ERASE") returned 9 [0081.321] _wcsicmp (_String1="net", _String2="DEL") returned 10 [0081.321] _wcsicmp (_String1="net", _String2="TYPE") returned -6 [0081.321] _wcsicmp (_String1="net", _String2="COPY") returned 11 [0081.321] _wcsicmp (_String1="net", _String2="CD") returned 11 [0081.321] _wcsicmp (_String1="net", _String2="CHDIR") returned 11 [0081.321] _wcsicmp (_String1="net", _String2="RENAME") returned -4 [0081.321] _wcsicmp (_String1="net", _String2="REN") returned -4 [0081.321] _wcsicmp (_String1="net", _String2="ECHO") returned 9 [0081.321] _wcsicmp (_String1="net", _String2="SET") returned -5 [0081.321] _wcsicmp (_String1="net", _String2="PAUSE") returned -2 [0081.321] _wcsicmp (_String1="net", _String2="DATE") returned 10 [0081.321] _wcsicmp (_String1="net", _String2="TIME") returned -6 [0081.321] _wcsicmp (_String1="net", _String2="PROMPT") returned -2 [0081.321] _wcsicmp (_String1="net", _String2="MD") returned 1 [0081.322] _wcsicmp (_String1="net", _String2="MKDIR") returned 1 [0081.322] _wcsicmp (_String1="net", _String2="RD") returned -4 [0081.322] _wcsicmp (_String1="net", _String2="RMDIR") returned -4 [0081.322] _wcsicmp (_String1="net", _String2="PATH") returned -2 [0081.322] _wcsicmp (_String1="net", _String2="GOTO") returned 7 [0081.322] _wcsicmp (_String1="net", _String2="SHIFT") returned -5 [0081.322] _wcsicmp (_String1="net", _String2="CLS") returned 11 [0081.322] _wcsicmp (_String1="net", _String2="CALL") returned 11 [0081.322] _wcsicmp (_String1="net", _String2="VERIFY") returned -8 [0081.322] _wcsicmp (_String1="net", _String2="VER") returned -8 [0081.322] _wcsicmp (_String1="net", _String2="VOL") returned -8 [0081.322] _wcsicmp (_String1="net", _String2="EXIT") returned 9 [0081.322] _wcsicmp (_String1="net", _String2="SETLOCAL") returned -5 [0081.322] _wcsicmp (_String1="net", _String2="ENDLOCAL") returned 9 [0081.322] _wcsicmp (_String1="net", _String2="TITLE") returned -6 [0081.322] _wcsicmp (_String1="net", _String2="START") returned -5 [0081.322] _wcsicmp (_String1="net", _String2="DPATH") returned 10 [0081.322] _wcsicmp (_String1="net", _String2="KEYS") returned 3 [0081.322] _wcsicmp (_String1="net", _String2="MOVE") returned 1 [0081.323] _wcsicmp (_String1="net", _String2="PUSHD") returned -2 [0081.323] _wcsicmp (_String1="net", _String2="POPD") returned -2 [0081.323] _wcsicmp (_String1="net", _String2="ASSOC") returned 13 [0081.323] _wcsicmp (_String1="net", _String2="FTYPE") returned 8 [0081.323] _wcsicmp (_String1="net", _String2="BREAK") returned 12 [0081.323] _wcsicmp (_String1="net", _String2="COLOR") returned 11 [0081.323] _wcsicmp (_String1="net", _String2="MKLINK") returned 1 [0081.323] _wcsicmp (_String1="net", _String2="FOR") returned 8 [0081.323] _wcsicmp (_String1="net", _String2="IF") returned 5 [0081.323] _wcsicmp (_String1="net", _String2="REM") returned -4 [0081.323] ??_V@YAXPAX@Z () returned 0x1 [0081.324] GetProcessHeap () returned 0x690000 [0081.324] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0xffd6) returned 0x698f60 [0081.326] GetProcessHeap () returned 0x690000 [0081.326] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x32) returned 0x697cd0 [0081.326] _wcsnicmp (_String1="net", _String2="cmd ", _MaxCount=0x4) returned 11 [0081.326] malloc (_Size=0xffce) returned 0x8b2a78 [0081.326] ??_V@YAXPAX@Z () returned 0x4ff28c [0081.326] GetProcessHeap () returned 0x690000 [0081.326] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x1ffa4) returned 0x6a8f40 [0081.329] SetErrorMode (uMode=0x0) returned 0x0 [0081.329] SetErrorMode (uMode=0x1) returned 0x0 [0081.329] GetFullPathNameW (in: lpFileName=".", nBufferLength=0xffce, lpBuffer=0x6a8f48, lpFilePart=0x4ff2ac | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x4ff2ac*="Desktop") returned 0x17 [0081.329] SetErrorMode (uMode=0x0) returned 0x1 [0081.329] GetProcessHeap () returned 0x690000 [0081.329] RtlReAllocateHeap (Heap=0x690000, Flags=0x0, Ptr=0x6a8f40, Size=0x40) returned 0x6a8f40 [0081.329] GetProcessHeap () returned 0x690000 [0081.330] RtlSizeHeap (HeapHandle=0x690000, Flags=0x0, MemoryPointer=0x6a8f40) returned 0x40 [0081.330] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x11ff840, nSize=0x2000 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath;C:\\WINDOWS\\system32;C:\\WINDOWS;C:\\WINDOWS\\System32\\Wbem;C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\;C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps") returned 0xbb [0081.330] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1 [0081.330] GetProcessHeap () returned 0x690000 [0081.330] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x1b4) returned 0x697d10 [0081.330] GetProcessHeap () returned 0x690000 [0081.330] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x360) returned 0x697ed0 [0081.344] GetProcessHeap () returned 0x690000 [0081.344] RtlReAllocateHeap (Heap=0x690000, Flags=0x0, Ptr=0x697ed0, Size=0x1b6) returned 0x697ed0 [0081.344] GetProcessHeap () returned 0x690000 [0081.344] RtlSizeHeap (HeapHandle=0x690000, Flags=0x0, MemoryPointer=0x697ed0) returned 0x1b6 [0081.344] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x11ff840, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0081.344] GetProcessHeap () returned 0x690000 [0081.344] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0xe0) returned 0x698090 [0081.344] GetProcessHeap () returned 0x690000 [0081.344] RtlReAllocateHeap (Heap=0x690000, Flags=0x0, Ptr=0x698090, Size=0x76) returned 0x698090 [0081.344] GetProcessHeap () returned 0x690000 [0081.344] RtlSizeHeap (HeapHandle=0x690000, Flags=0x0, MemoryPointer=0x698090) returned 0x76 [0081.344] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0081.345] FindFirstFileExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\net.*", fInfoLevelId=0x1, lpFindFileData=0x4ff038, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x4ff038) returned 0xffffffff [0081.345] GetLastError () returned 0x2 [0081.345] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0081.345] FindFirstFileExW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\net.*", fInfoLevelId=0x1, lpFindFileData=0x4ff038, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x4ff038) returned 0xffffffff [0081.348] GetLastError () returned 0x2 [0081.348] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0081.348] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\system32\\net.*", fInfoLevelId=0x1, lpFindFileData=0x4ff038, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x4ff038) returned 0x698110 [0081.348] GetProcessHeap () returned 0x690000 [0081.348] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x0, Size=0x14) returned 0x698150 [0081.349] FindClose (in: hFindFile=0x698110 | out: hFindFile=0x698110) returned 1 [0081.349] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\system32\\net.COM", fInfoLevelId=0x1, lpFindFileData=0x4ff038, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x4ff038) returned 0xffffffff [0081.349] GetLastError () returned 0x2 [0081.349] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\system32\\net.EXE", fInfoLevelId=0x1, lpFindFileData=0x4ff038, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x4ff038) returned 0x698110 [0081.349] GetProcessHeap () returned 0x690000 [0081.349] RtlReAllocateHeap (Heap=0x690000, Flags=0x0, Ptr=0x698150, Size=0x4) returned 0x698150 [0081.349] FindClose (in: hFindFile=0x698110 | out: hFindFile=0x698110) returned 1 [0081.349] _wcsicmp (_String1=".EXE", _String2=".BAT") returned 3 [0081.349] _wcsicmp (_String1=".EXE", _String2=".CMD") returned 2 [0081.349] ??_V@YAXPAX@Z () returned 0x1 [0081.349] GetConsoleTitleW (in: lpConsoleTitle=0x4ff53c, nSize=0x104 | out: lpConsoleTitle="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1c [0081.352] InitializeProcThreadAttributeList (in: lpAttributeList=0x4ff468, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x4ff454 | out: lpAttributeList=0x4ff468, lpSize=0x4ff454) returned 1 [0081.352] UpdateProcThreadAttribute (in: lpAttributeList=0x4ff468, dwFlags=0x0, Attribute=0x60001, lpValue=0x4ff450, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x4ff468, lpPreviousValue=0x0) returned 1 [0081.352] GetStartupInfoW (in: lpStartupInfo=0x4ff4a0 | out: lpStartupInfo=0x4ff4a0*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\WINDOWS\\system32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x144, lpReserved2=0x691b5c, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) [0081.352] GetProcessHeap () returned 0x690000 [0081.352] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x18) returned 0x698110 [0081.352] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38 [0081.352] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2 [0081.352] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2 [0081.352] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0081.352] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0081.352] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0081.352] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3 [0081.352] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3 [0081.353] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5 [0081.353] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5 [0081.353] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9 [0081.353] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9 [0081.353] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11 [0081.353] _wcsnicmp (_String1="COPYCMD", _String2="OneDriv", _MaxCount=0x7) returned -12 [0081.353] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12 [0081.353] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13 [0081.353] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13 [0081.353] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0081.353] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0081.353] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0081.353] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0081.353] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0081.353] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0081.353] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0081.353] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0081.353] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0081.353] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13 [0081.353] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13 [0081.353] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13 [0081.354] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16 [0081.354] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16 [0081.354] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17 [0081.354] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17 [0081.354] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18 [0081.354] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18 [0081.354] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18 [0081.354] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18 [0081.354] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20 [0081.354] GetProcessHeap () returned 0x690000 [0081.354] RtlFreeHeap (HeapHandle=0x690000, Flags=0x0, BaseAddress=0x698110) returned 1 [0081.354] GetProcessHeap () returned 0x690000 [0081.354] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0xa) returned 0x698110 [0081.354] lstrcmpW (lpString1="\\net.exe", lpString2="\\XCOPY.EXE") returned -1 [0081.356] _get_osfhandle (_FileHandle=1) returned 0x90 [0081.360] SetConsoleMode (hConsoleHandle=0x90, dwMode=0x3) returned 1 [0081.363] _get_osfhandle (_FileHandle=0) returned 0x8c [0081.363] SetConsoleMode (hConsoleHandle=0x8c, dwMode=0x1f7) returned 1 [0081.408] CreateProcessW (in: lpApplicationName="C:\\WINDOWS\\system32\\net.exe", lpCommandLine="net stop SQLBrowser", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\FD1HVy\\Desktop", lpStartupInfo=0x4ff3f0*(cb=0x48, lpReserved=0x0, lpDesktop="WinSta0\\Default", lpTitle="net stop SQLBrowser", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x4ff43c | out: lpCommandLine="net stop SQLBrowser", lpProcessInformation=0x4ff43c*(hProcess=0xe0, hThread=0xdc, dwProcessId=0xb94, dwThreadId=0x7b4)) returned 1 [0081.431] CloseHandle (hObject=0xdc) returned 1 [0081.431] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1 [0081.431] GetProcessHeap () returned 0x690000 [0081.431] RtlFreeHeap (HeapHandle=0x690000, Flags=0x0, BaseAddress=0x696e58) returned 1 [0081.431] GetEnvironmentStringsW () returned 0x696e58* [0081.431] GetProcessHeap () returned 0x690000 [0081.431] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0xb1a) returned 0x694dd0 [0081.431] FreeEnvironmentStringsA (penv="=") returned 1 [0081.431] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0xffffffff) returned 0x0 [0081.979] GetExitCodeProcess (in: hProcess=0xe0, lpExitCode=0x4ff3d4 | out: lpExitCode=0x4ff3d4*=0x2) returned 1 [0081.979] CloseHandle (hObject=0xe0) returned 1 [0081.979] _vsnwprintf (in: _Buffer=0x4ff4bc, _BufferCount=0x13, _Format="%08X", _ArgList=0x4ff3dc | out: _Buffer="00000002") returned 8 [0081.979] SetEnvironmentVariableW (lpName="=ExitCode", lpValue="00000002") returned 1 [0081.980] GetProcessHeap () returned 0x690000 [0081.980] RtlFreeHeap (HeapHandle=0x690000, Flags=0x0, BaseAddress=0x694dd0) returned 1 [0081.980] GetEnvironmentStringsW () returned 0x6983b0* [0081.980] GetProcessHeap () returned 0x690000 [0081.981] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0xb40) returned 0x694dd0 [0081.981] FreeEnvironmentStringsA (penv="=") returned 1 [0081.981] SetEnvironmentVariableW (lpName="=ExitCodeAscii", lpValue=0x0) returned 1 [0081.981] GetProcessHeap () returned 0x690000 [0081.981] RtlFreeHeap (HeapHandle=0x690000, Flags=0x0, BaseAddress=0x694dd0) returned 1 [0081.981] GetEnvironmentStringsW () returned 0x6983b0* [0081.981] GetProcessHeap () returned 0x690000 [0081.981] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0xb40) returned 0x694dd0 [0081.981] FreeEnvironmentStringsA (penv="=") returned 1 [0081.981] GetProcessHeap () returned 0x690000 [0081.981] RtlFreeHeap (HeapHandle=0x690000, Flags=0x0, BaseAddress=0x698110) returned 1 [0081.981] DeleteProcThreadAttributeList (in: lpAttributeList=0x4ff468 | out: lpAttributeList=0x4ff468) [0081.981] ??_V@YAXPAX@Z () returned 0x1 [0081.981] _get_osfhandle (_FileHandle=1) returned 0x90 [0081.981] SetConsoleMode (hConsoleHandle=0x90, dwMode=0x3) returned 1 [0081.983] _get_osfhandle (_FileHandle=1) returned 0x90 [0081.983] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x1203890 | out: lpMode=0x1203890) returned 1 [0081.988] _get_osfhandle (_FileHandle=1) returned 0x90 [0081.988] SetConsoleMode (hConsoleHandle=0x90, dwMode=0x7) returned 1 [0082.016] _get_osfhandle (_FileHandle=0) returned 0x8c [0082.016] GetConsoleMode (in: hConsoleHandle=0x8c, lpMode=0x1203894 | out: lpMode=0x1203894) returned 1 [0082.019] _get_osfhandle (_FileHandle=0) returned 0x8c [0082.019] SetConsoleMode (hConsoleHandle=0x8c, dwMode=0x1e7) returned 1 [0082.022] SetConsoleInputExeNameW () returned 0x1 [0082.022] GetConsoleOutputCP () returned 0x1b5 [0082.025] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x1203850 | out: lpCPInfo=0x1203850) returned 1 [0082.025] SetThreadUILanguage (LangId=0x0) returned 0x2e0409 [0082.047] exit (_Code=2) [0082.047] ??_V@YAXPAX@Z () returned 0x1 Thread: id = 25 os_tid = 0xdc8 Process: id = "8" image_name = "conhost.exe" filename = "c:\\windows\\system32\\conhost.exe" page_root = "0x5633000" os_pid = "0xeb4" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "7" os_parent_pid = "0xd6c" cmd_line = "\\??\\C:\\WINDOWS\\system32\\conhost.exe 0xffffffff -ForceV1" cur_dir = "C:\\WINDOWS" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000faa5" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 20 os_tid = 0xf4c Thread: id = 21 os_tid = 0xf58 Thread: id = 22 os_tid = 0x484 Thread: id = 23 os_tid = 0xfec Thread: id = 24 os_tid = 0xde4 Process: id = "9" image_name = "net.exe" filename = "c:\\windows\\syswow64\\net.exe" page_root = "0x684a000" os_pid = "0xb94" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "7" os_parent_pid = "0xd6c" cmd_line = "net stop SQLBrowser" cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000faa5" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 26 os_tid = 0x7b4 Thread: id = 27 os_tid = 0xe84 Process: id = "10" image_name = "net1.exe" filename = "c:\\windows\\syswow64\\net1.exe" page_root = "0x16a65000" os_pid = "0x650" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "9" os_parent_pid = "0xb94" cmd_line = "C:\\WINDOWS\\system32\\net1 stop SQLBrowser" cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000faa5" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 28 os_tid = 0x76c [0081.906] GetModuleHandleA (lpModuleName=0x0) returned 0x230000 [0081.909] __set_app_type (_Type=0x1) [0081.909] __p__fmode () returned 0x76953c14 [0081.910] __p__commode () returned 0x769549ec [0081.910] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x236f20) returned 0x0 [0081.910] __getmainargs (in: _Argc=0x24f608, _Argv=0x24f60c, _Env=0x24f610, _DoWildCard=0, _StartInfo=0x24f61c | out: _Argc=0x24f608, _Argv=0x24f60c, _Env=0x24f610) returned 0 [0081.910] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0081.910] GetConsoleOutputCP () returned 0x1b5 [0081.912] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x256fa0 | out: lpCPInfo=0x256fa0) returned 1 [0081.912] SetThreadUILanguage (LangId=0x0) returned 0x2b90409 [0081.917] sprintf_s (in: _DstBuf=0x2c7f8ac, _DstSize=0xc, _Format=".%u" | out: _DstBuf=".437") returned 4 [0081.917] setlocale (category=0, locale=".437") returned="English_United States.437" [0081.919] GetStdHandle (nStdHandle=0xfffffff5) returned 0x90 [0081.920] GetStdHandle (nStdHandle=0xfffffff4) returned 0x94 [0081.920] GetCommandLineW () returned="C:\\WINDOWS\\system32\\net1 stop SQLBrowser" [0081.920] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x2c7f654, nSize=0x104 | out: lpFilename="C:\\WINDOWS\\SysWOW64\\net1.exe" (normalized: "c:\\windows\\syswow64\\net1.exe")) returned 0x1c [0081.920] RtlAllocateHeap (HeapHandle=0x2f30000, Flags=0x0, Size=0x5e) returned 0x2f34150 [0081.920] NetApiBufferAllocate (in: ByteCount=0x10, Buffer=0x2c7f650 | out: Buffer=0x2c7f650*=0x2f38558) returned 0x0 [0081.920] NetApiBufferAllocate (in: ByteCount=0x10, Buffer=0x2c7f64c | out: Buffer=0x2c7f64c*=0x2f3f790) returned 0x0 [0081.920] __iob_func () returned 0x76952608 [0081.920] _fileno (_File=0x76952608) returned 0 [0081.920] _setmode (_FileHandle=0, _Mode=16384) returned 16384 [0081.920] _wcsicmp (_String1="accounts", _String2="stop") returned -18 [0081.920] _wcsicmp (_String1="computer", _String2="stop") returned -16 [0081.920] _wcsicmp (_String1="config", _String2="stop") returned -16 [0081.920] _wcsicmp (_String1="continue", _String2="stop") returned -16 [0081.920] _wcsicmp (_String1="cont", _String2="stop") returned -16 [0081.920] _wcsicmp (_String1="file", _String2="stop") returned -13 [0081.920] _wcsicmp (_String1="files", _String2="stop") returned -13 [0081.920] _wcsicmp (_String1="group", _String2="stop") returned -12 [0081.920] _wcsicmp (_String1="groups", _String2="stop") returned -12 [0081.921] _wcsicmp (_String1="help", _String2="stop") returned -11 [0081.921] _wcsicmp (_String1="helpmsg", _String2="stop") returned -11 [0081.921] _wcsicmp (_String1="localgroup", _String2="stop") returned -7 [0081.921] _wcsicmp (_String1="pause", _String2="stop") returned -3 [0081.921] _wcsicmp (_String1="session", _String2="stop") returned -15 [0081.921] _wcsicmp (_String1="sessions", _String2="stop") returned -15 [0081.921] _wcsicmp (_String1=0x231ffc, _String2="stop") returned -15 [0081.921] _wcsicmp (_String1="share", _String2="stop") returned -12 [0081.921] _wcsicmp (_String1="start", _String2="stop") returned -14 [0081.921] _wcsicmp (_String1="stats", _String2="stop") returned -14 [0081.921] _wcsicmp (_String1="statistics", _String2="stop") returned -14 [0081.921] _wcsicmp (_String1="stop", _String2="stop") returned 0 [0081.921] _wcsicmp (_String1="accounts", _String2="SQLBrowser") returned -18 [0081.921] _wcsicmp (_String1="computer", _String2="SQLBrowser") returned -16 [0081.921] _wcsicmp (_String1="config", _String2="SQLBrowser") returned -16 [0081.921] _wcsicmp (_String1="continue", _String2="SQLBrowser") returned -16 [0081.921] _wcsicmp (_String1="cont", _String2="SQLBrowser") returned -16 [0081.921] _wcsicmp (_String1="file", _String2="SQLBrowser") returned -13 [0081.921] _wcsicmp (_String1="files", _String2="SQLBrowser") returned -13 [0081.921] _wcsicmp (_String1="group", _String2="SQLBrowser") returned -12 [0081.921] _wcsicmp (_String1="groups", _String2="SQLBrowser") returned -12 [0081.921] _wcsicmp (_String1="help", _String2="SQLBrowser") returned -11 [0081.921] _wcsicmp (_String1="helpmsg", _String2="SQLBrowser") returned -11 [0081.921] _wcsicmp (_String1="localgroup", _String2="SQLBrowser") returned -7 [0081.922] _wcsicmp (_String1="pause", _String2="SQLBrowser") returned -3 [0081.922] _wcsicmp (_String1="session", _String2="SQLBrowser") returned -12 [0081.922] _wcsicmp (_String1="sessions", _String2="SQLBrowser") returned -12 [0081.922] _wcsicmp (_String1="sess", _String2="SQLBrowser") returned -12 [0081.922] _wcsicmp (_String1="share", _String2="SQLBrowser") returned -9 [0081.922] _wcsicmp (_String1="start", _String2="SQLBrowser") returned 3 [0081.922] _wcsicmp (_String1="stats", _String2="SQLBrowser") returned 3 [0081.922] _wcsicmp (_String1="statistics", _String2="SQLBrowser") returned 3 [0081.922] _wcsicmp (_String1="stop", _String2="SQLBrowser") returned 3 [0081.922] _wcsicmp (_String1="time", _String2="SQLBrowser") returned 1 [0081.922] _wcsicmp (_String1="user", _String2="SQLBrowser") returned 2 [0081.922] _wcsicmp (_String1="users", _String2="SQLBrowser") returned 2 [0081.922] _wcsicmp (_String1="msg", _String2="SQLBrowser") returned -6 [0081.922] _wcsicmp (_String1="messenger", _String2="SQLBrowser") returned -6 [0081.922] _wcsicmp (_String1="receiver", _String2="SQLBrowser") returned -1 [0081.922] _wcsicmp (_String1="rcv", _String2="SQLBrowser") returned -1 [0081.922] _wcsicmp (_String1="netpopup", _String2="SQLBrowser") returned -5 [0081.922] _wcsicmp (_String1="redirector", _String2="SQLBrowser") returned -1 [0081.922] _wcsicmp (_String1="redir", _String2="SQLBrowser") returned -1 [0081.922] _wcsicmp (_String1="rdr", _String2="SQLBrowser") returned -1 [0081.922] _wcsicmp (_String1="workstation", _String2="SQLBrowser") returned 4 [0081.922] _wcsicmp (_String1="work", _String2="SQLBrowser") returned 4 [0081.922] _wcsicmp (_String1="wksta", _String2="SQLBrowser") returned 4 [0081.922] _wcsicmp (_String1="prdr", _String2="SQLBrowser") returned -3 [0081.922] _wcsicmp (_String1="devrdr", _String2="SQLBrowser") returned -15 [0081.922] _wcsicmp (_String1="lanmanworkstation", _String2="SQLBrowser") returned -7 [0081.922] _wcsicmp (_String1="server", _String2="SQLBrowser") returned -12 [0081.923] _wcsicmp (_String1="svr", _String2="SQLBrowser") returned 5 [0081.923] _wcsicmp (_String1="srv", _String2="SQLBrowser") returned 1 [0081.923] _wcsicmp (_String1="lanmanserver", _String2="SQLBrowser") returned -7 [0081.923] _wcsicmp (_String1="alerter", _String2="SQLBrowser") returned -18 [0081.923] _wcsicmp (_String1="netlogon", _String2="SQLBrowser") returned -5 [0081.923] _wcsupr (in: _String="SQLBrowser" | out: _String="SQLBROWSER") returned="SQLBROWSER" [0081.923] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x80000000) returned 0x2f40420 [0081.927] GetServiceKeyNameW (in: hSCManager=0x2f40420, lpDisplayName="SQLBROWSER", lpServiceName=0x258c28, lpcchBuffer=0x2c7f5c4 | out: lpServiceName="", lpcchBuffer=0x2c7f5c4) returned 0 [0081.928] _wcsicmp (_String1="msg", _String2="SQLBROWSER") returned -6 [0081.928] _wcsicmp (_String1="messenger", _String2="SQLBROWSER") returned -6 [0081.928] _wcsicmp (_String1="receiver", _String2="SQLBROWSER") returned -1 [0081.928] _wcsicmp (_String1="rcv", _String2="SQLBROWSER") returned -1 [0081.928] _wcsicmp (_String1="redirector", _String2="SQLBROWSER") returned -1 [0081.928] _wcsicmp (_String1="redir", _String2="SQLBROWSER") returned -1 [0081.928] _wcsicmp (_String1="rdr", _String2="SQLBROWSER") returned -1 [0081.928] _wcsicmp (_String1="workstation", _String2="SQLBROWSER") returned 4 [0081.928] _wcsicmp (_String1="work", _String2="SQLBROWSER") returned 4 [0081.928] _wcsicmp (_String1="wksta", _String2="SQLBROWSER") returned 4 [0081.928] _wcsicmp (_String1="prdr", _String2="SQLBROWSER") returned -3 [0081.928] _wcsicmp (_String1="devrdr", _String2="SQLBROWSER") returned -15 [0081.928] _wcsicmp (_String1="lanmanworkstation", _String2="SQLBROWSER") returned -7 [0081.928] _wcsicmp (_String1="server", _String2="SQLBROWSER") returned -12 [0081.928] _wcsicmp (_String1="svr", _String2="SQLBROWSER") returned 5 [0081.928] _wcsicmp (_String1="srv", _String2="SQLBROWSER") returned 1 [0081.928] _wcsicmp (_String1="lanmanserver", _String2="SQLBROWSER") returned -7 [0081.928] _wcsicmp (_String1="alerter", _String2="SQLBROWSER") returned -18 [0081.928] _wcsicmp (_String1="netlogon", _String2="SQLBROWSER") returned -5 [0081.928] _wcsicmp (_String1="SQLBROWSER", _String2="WORKSTATION") returned -4 [0081.928] _wcsicmp (_String1="SQLBROWSER", _String2="LanmanWorkstation") returned 7 [0081.928] _wcsicmp (_String1="SQLBROWSER", _String2="SERVER") returned 12 [0081.928] _wcsicmp (_String1="SQLBROWSER", _String2="LanmanServer") returned 7 [0081.928] _wcsicmp (_String1="SQLBROWSER", _String2="BROWSER") returned 17 [0081.928] _wcsicmp (_String1="SQLBROWSER", _String2="BROWSER") returned 17 [0081.928] _wcsicmp (_String1="SQLBROWSER", _String2="MESSENGER") returned 6 [0081.929] _wcsicmp (_String1="SQLBROWSER", _String2="MESSENGER") returned 6 [0081.929] _wcsicmp (_String1="SQLBROWSER", _String2="NETRUN") returned 5 [0081.929] _wcsicmp (_String1="SQLBROWSER", _String2="NETRUN") returned 5 [0081.929] _wcsicmp (_String1="SQLBROWSER", _String2="SPOOLER") returned 1 [0081.929] _wcsicmp (_String1="SQLBROWSER", _String2="SPOOLER") returned 1 [0081.929] _wcsicmp (_String1="SQLBROWSER", _String2="ALERTER") returned 18 [0081.929] _wcsicmp (_String1="SQLBROWSER", _String2="ALERTER") returned 18 [0081.929] _wcsicmp (_String1="SQLBROWSER", _String2="NETLOGON") returned 5 [0081.929] _wcsicmp (_String1="SQLBROWSER", _String2="NETLOGON") returned 5 [0081.929] _wcsicmp (_String1="SQLBROWSER", _String2="NETPOPUP") returned 5 [0081.929] _wcsicmp (_String1="SQLBROWSER", _String2="NETPOPUP") returned 5 [0081.929] _wcsicmp (_String1="SQLBROWSER", _String2="SQLSERVER") returned -17 [0081.929] _wcsicmp (_String1="SQLBROWSER", _String2="SQLSERVER") returned -17 [0081.929] _wcsicmp (_String1="SQLBROWSER", _String2="REPLICATOR") returned 1 [0081.929] _wcsicmp (_String1="SQLBROWSER", _String2="REPLICATOR") returned 1 [0081.929] _wcsicmp (_String1="SQLBROWSER", _String2="REMOTEBOOT") returned 1 [0081.929] _wcsicmp (_String1="SQLBROWSER", _String2="REMOTEBOOT") returned 1 [0081.929] _wcsicmp (_String1="SQLBROWSER", _String2="TIMESOURCE") returned -1 [0081.929] _wcsicmp (_String1="SQLBROWSER", _String2="TIMESOURCE") returned -1 [0081.929] _wcsicmp (_String1="SQLBROWSER", _String2="AFP") returned 18 [0081.929] _wcsicmp (_String1="SQLBROWSER", _String2="AFP") returned 18 [0081.929] _wcsicmp (_String1="SQLBROWSER", _String2="UPS") returned -2 [0081.929] _wcsicmp (_String1="SQLBROWSER", _String2="UPS") returned -2 [0081.929] _wcsicmp (_String1="SQLBROWSER", _String2="XACTSRV") returned -5 [0081.929] _wcsicmp (_String1="SQLBROWSER", _String2="XACTSRV") returned -5 [0081.929] _wcsicmp (_String1="SQLBROWSER", _String2="TCPIP") returned -1 [0081.929] _wcsicmp (_String1="SQLBROWSER", _String2="TCPIP") returned -1 [0081.929] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x1) returned 0x2f40650 [0081.930] OpenServiceW (hSCManager=0x2f40650, lpServiceName="SQLBROWSER", dwDesiredAccess=0x84) returned 0x0 [0081.930] GetLastError () returned 0x424 [0081.931] CloseServiceHandle (hSCObject=0x2f40650) returned 1 [0081.931] wcscpy_s (in: _Destination=0x257610, _SizeInWords=0x104, _Source="NETMSG" | out: _Destination="NETMSG") returned 0x0 [0081.931] LoadLibraryExW (lpLibFileName="NETMSG", hFile=0x0, dwFlags=0x20) returned 0x29f0002 [0081.932] FormatMessageW (in: dwFlags=0x2a00, lpSource=0x29f0002, dwMessageId=0x889, dwLanguageId=0x0, lpBuffer=0x257c20, nSize=0x800, Arguments=0x2573d0 | out: lpBuffer="The service name is invalid.\r\n") returned 0x1e [0081.932] GetFileType (hFile=0x94) returned 0x2 [0081.932] GetConsoleMode (in: hConsoleHandle=0x94, lpMode=0x2c7f454 | out: lpMode=0x2c7f454) returned 1 [0081.933] WriteConsoleW (in: hConsoleOutput=0x94, lpBuffer=0x257c20*, nNumberOfCharsToWrite=0x1e, lpNumberOfCharsWritten=0x2c7f460, lpReserved=0x0 | out: lpBuffer=0x257c20*, lpNumberOfCharsWritten=0x2c7f460*=0x1e) returned 1 [0081.936] GetFileType (hFile=0x94) returned 0x2 [0081.936] GetConsoleMode (in: hConsoleHandle=0x94, lpMode=0x2c7f454 | out: lpMode=0x2c7f454) returned 1 [0081.938] WriteConsoleW (in: hConsoleOutput=0x94, lpBuffer=0x2312e4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x2c7f460, lpReserved=0x0 | out: lpBuffer=0x2312e4*, lpNumberOfCharsWritten=0x2c7f460*=0x2) returned 1 [0081.939] _ultow (in: _Dest=0x889, _Radix=46658728 | out: _Dest=0x889) returned="2185" [0081.939] FormatMessageW (in: dwFlags=0x2800, lpSource=0x29f0002, dwMessageId=0xdba, dwLanguageId=0x0, lpBuffer=0x257c20, nSize=0x800, Arguments=0x2573d0 | out: lpBuffer="More help is available by typing NET HELPMSG 2185.\r\n") returned 0x34 [0081.939] GetFileType (hFile=0x94) returned 0x2 [0081.939] GetConsoleMode (in: hConsoleHandle=0x94, lpMode=0x2c7f478 | out: lpMode=0x2c7f478) returned 1 [0081.941] WriteConsoleW (in: hConsoleOutput=0x94, lpBuffer=0x257c20*, nNumberOfCharsToWrite=0x34, lpNumberOfCharsWritten=0x2c7f484, lpReserved=0x0 | out: lpBuffer=0x257c20*, lpNumberOfCharsWritten=0x2c7f484*=0x34) returned 1 [0081.942] GetFileType (hFile=0x94) returned 0x2 [0081.942] GetConsoleMode (in: hConsoleHandle=0x94, lpMode=0x2c7f478 | out: lpMode=0x2c7f478) returned 1 [0081.943] WriteConsoleW (in: hConsoleOutput=0x94, lpBuffer=0x2312e4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x2c7f484, lpReserved=0x0 | out: lpBuffer=0x2312e4*, lpNumberOfCharsWritten=0x2c7f484*=0x2) returned 1 [0081.947] NetApiBufferFree (Buffer=0x2f38558) returned 0x0 [0081.947] NetApiBufferFree (Buffer=0x2f3f790) returned 0x0 [0081.947] GetCommandLineW () returned="C:\\WINDOWS\\system32\\net1 stop SQLBrowser" [0081.947] exit (_Code=2) Thread: id = 29 os_tid = 0xee4 Process: id = "11" image_name = "cmd.exe" filename = "c:\\windows\\syswow64\\cmd.exe" page_root = "0x12aa8000" os_pid = "0x884" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x13d4" cmd_line = "C:\\WINDOWS\\system32\\cmd.exe /c net stop MSSQLSERVER" cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000faa5" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 30 os_tid = 0x608 [0084.004] GetModuleHandleA (lpModuleName=0x0) returned 0x11d0000 [0084.004] __set_app_type (_Type=0x1) [0084.004] __p__fmode () returned 0x76953c14 [0084.004] __p__commode () returned 0x769549ec [0084.004] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x11e6fd0) returned 0x0 [0084.004] __getmainargs (in: _Argc=0x11fd1a4, _Argv=0x11fd1a8, _Env=0x11fd1ac, _DoWildCard=0, _StartInfo=0x11fd1b8 | out: _Argc=0x11fd1a4, _Argv=0x11fd1a8, _Env=0x11fd1ac) returned 0 [0084.005] _onexit (_Func=0x11e8030) returned 0x11e8030 [0084.005] _onexit (_Func=0x11e8040) returned 0x11e8040 [0084.005] _onexit (_Func=0x11e8050) returned 0x11e8050 [0084.005] _onexit (_Func=0x11e8060) returned 0x11e8060 [0084.006] _onexit (_Func=0x11e8070) returned 0x11e8070 [0084.006] _onexit (_Func=0x11e8080) returned 0x11e8080 [0084.006] GetCurrentThreadId () returned 0x608 [0084.006] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0x608) returned 0xbc [0084.007] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x74030000 [0084.007] GetProcAddress (hModule=0x74030000, lpProcName="SetThreadUILanguage") returned 0x74044f70 [0084.007] SetThreadUILanguage (LangId=0x0) returned 0x9c0409 [0084.048] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0084.048] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0xb3fec0 | out: phkResult=0xb3fec0*=0x0) returned 0x2 [0084.049] VirtualQuery (in: lpAddress=0xb3fecb, lpBuffer=0xb3fe78, dwLength=0x1c | out: lpBuffer=0xb3fe78*(BaseAddress=0xb3f000, AllocationBase=0xa40000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0084.049] VirtualQuery (in: lpAddress=0xa40000, lpBuffer=0xb3fe78, dwLength=0x1c | out: lpBuffer=0xb3fe78*(BaseAddress=0xa40000, AllocationBase=0xa40000, AllocationProtect=0x4, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000)) returned 0x1c [0084.049] VirtualQuery (in: lpAddress=0xa41000, lpBuffer=0xb3fe78, dwLength=0x1c | out: lpBuffer=0xb3fe78*(BaseAddress=0xa41000, AllocationBase=0xa40000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x104, Type=0x20000)) returned 0x1c [0084.049] VirtualQuery (in: lpAddress=0xa43000, lpBuffer=0xb3fe78, dwLength=0x1c | out: lpBuffer=0xb3fe78*(BaseAddress=0xa43000, AllocationBase=0xa40000, AllocationProtect=0x4, RegionSize=0xfd000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0084.049] VirtualQuery (in: lpAddress=0xb40000, lpBuffer=0xb3fe78, dwLength=0x1c | out: lpBuffer=0xb3fe78*(BaseAddress=0xb40000, AllocationBase=0xb40000, AllocationProtect=0x2, RegionSize=0xc5000, State=0x1000, Protect=0x2, Type=0x40000)) returned 0x1c [0084.049] GetConsoleOutputCP () returned 0x1b5 [0084.054] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x1203850 | out: lpCPInfo=0x1203850) returned 1 [0084.054] SetConsoleCtrlHandler (HandlerRoutine=0x11f7260, Add=1) returned 1 [0084.054] _get_osfhandle (_FileHandle=1) returned 0x90 [0084.054] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x120388c | out: lpMode=0x120388c) returned 1 [0084.056] _get_osfhandle (_FileHandle=0) returned 0x8c [0084.056] GetConsoleMode (in: hConsoleHandle=0x8c, lpMode=0x1203888 | out: lpMode=0x1203888) returned 1 [0084.057] _get_osfhandle (_FileHandle=1) returned 0x90 [0084.057] SetConsoleMode (hConsoleHandle=0x90, dwMode=0x0) returned 1 [0084.058] _get_osfhandle (_FileHandle=1) returned 0x90 [0084.058] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x1203890 | out: lpMode=0x1203890) returned 1 [0084.059] _get_osfhandle (_FileHandle=1) returned 0x90 [0084.059] SetConsoleMode (hConsoleHandle=0x90, dwMode=0x7) returned 1 [0084.061] _get_osfhandle (_FileHandle=0) returned 0x8c [0084.061] GetConsoleMode (in: hConsoleHandle=0x8c, lpMode=0x1203894 | out: lpMode=0x1203894) returned 1 [0084.062] _get_osfhandle (_FileHandle=0) returned 0x8c [0084.062] SetConsoleMode (hConsoleHandle=0x8c, dwMode=0x1e7) returned 1 [0084.063] GetEnvironmentStringsW () returned 0xf14dd0* [0084.063] GetProcessHeap () returned 0xf10000 [0084.063] RtlAllocateHeap (HeapHandle=0xf10000, Flags=0x8, Size=0xaca) returned 0xf158a8 [0084.064] FreeEnvironmentStringsA (penv="A") returned 1 [0084.064] GetProcessHeap () returned 0xf10000 [0084.064] RtlAllocateHeap (HeapHandle=0xf10000, Flags=0x8, Size=0x4) returned 0xf148b0 [0084.064] GetEnvironmentStringsW () returned 0xf14dd0* [0084.064] GetProcessHeap () returned 0xf10000 [0084.064] RtlAllocateHeap (HeapHandle=0xf10000, Flags=0x8, Size=0xaca) returned 0xf16380 [0084.064] FreeEnvironmentStringsA (penv="A") returned 1 [0084.064] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0xb3ee1c | out: phkResult=0xb3ee1c*=0xcc) returned 0x0 [0084.064] RegQueryValueExW (in: hKey=0xcc, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0xb3ee24, lpData=0xb3ee28, lpcbData=0xb3ee20*=0x1000 | out: lpType=0xb3ee24*=0x0, lpData=0xb3ee28*=0xc5, lpcbData=0xb3ee20*=0x1000) returned 0x2 [0084.064] RegQueryValueExW (in: hKey=0xcc, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0xb3ee24, lpData=0xb3ee28, lpcbData=0xb3ee20*=0x1000 | out: lpType=0xb3ee24*=0x4, lpData=0xb3ee28*=0x1, lpcbData=0xb3ee20*=0x4) returned 0x0 [0084.064] RegQueryValueExW (in: hKey=0xcc, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0xb3ee24, lpData=0xb3ee28, lpcbData=0xb3ee20*=0x1000 | out: lpType=0xb3ee24*=0x0, lpData=0xb3ee28*=0x1, lpcbData=0xb3ee20*=0x1000) returned 0x2 [0084.065] RegQueryValueExW (in: hKey=0xcc, lpValueName="DefaultColor", lpReserved=0x0, lpType=0xb3ee24, lpData=0xb3ee28, lpcbData=0xb3ee20*=0x1000 | out: lpType=0xb3ee24*=0x4, lpData=0xb3ee28*=0x0, lpcbData=0xb3ee20*=0x4) returned 0x0 [0084.065] RegQueryValueExW (in: hKey=0xcc, lpValueName="CompletionChar", lpReserved=0x0, lpType=0xb3ee24, lpData=0xb3ee28, lpcbData=0xb3ee20*=0x1000 | out: lpType=0xb3ee24*=0x4, lpData=0xb3ee28*=0x40, lpcbData=0xb3ee20*=0x4) returned 0x0 [0084.065] RegQueryValueExW (in: hKey=0xcc, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0xb3ee24, lpData=0xb3ee28, lpcbData=0xb3ee20*=0x1000 | out: lpType=0xb3ee24*=0x4, lpData=0xb3ee28*=0x40, lpcbData=0xb3ee20*=0x4) returned 0x0 [0084.065] RegQueryValueExW (in: hKey=0xcc, lpValueName="AutoRun", lpReserved=0x0, lpType=0xb3ee24, lpData=0xb3ee28, lpcbData=0xb3ee20*=0x1000 | out: lpType=0xb3ee24*=0x0, lpData=0xb3ee28*=0x40, lpcbData=0xb3ee20*=0x1000) returned 0x2 [0084.065] RegCloseKey (hKey=0xcc) returned 0x0 [0084.065] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0xb3ee1c | out: phkResult=0xb3ee1c*=0xcc) returned 0x0 [0084.065] RegQueryValueExW (in: hKey=0xcc, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0xb3ee24, lpData=0xb3ee28, lpcbData=0xb3ee20*=0x1000 | out: lpType=0xb3ee24*=0x0, lpData=0xb3ee28*=0x40, lpcbData=0xb3ee20*=0x1000) returned 0x2 [0084.065] RegQueryValueExW (in: hKey=0xcc, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0xb3ee24, lpData=0xb3ee28, lpcbData=0xb3ee20*=0x1000 | out: lpType=0xb3ee24*=0x4, lpData=0xb3ee28*=0x1, lpcbData=0xb3ee20*=0x4) returned 0x0 [0084.065] RegQueryValueExW (in: hKey=0xcc, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0xb3ee24, lpData=0xb3ee28, lpcbData=0xb3ee20*=0x1000 | out: lpType=0xb3ee24*=0x0, lpData=0xb3ee28*=0x1, lpcbData=0xb3ee20*=0x1000) returned 0x2 [0084.065] RegQueryValueExW (in: hKey=0xcc, lpValueName="DefaultColor", lpReserved=0x0, lpType=0xb3ee24, lpData=0xb3ee28, lpcbData=0xb3ee20*=0x1000 | out: lpType=0xb3ee24*=0x4, lpData=0xb3ee28*=0x0, lpcbData=0xb3ee20*=0x4) returned 0x0 [0084.065] RegQueryValueExW (in: hKey=0xcc, lpValueName="CompletionChar", lpReserved=0x0, lpType=0xb3ee24, lpData=0xb3ee28, lpcbData=0xb3ee20*=0x1000 | out: lpType=0xb3ee24*=0x4, lpData=0xb3ee28*=0x9, lpcbData=0xb3ee20*=0x4) returned 0x0 [0084.065] RegQueryValueExW (in: hKey=0xcc, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0xb3ee24, lpData=0xb3ee28, lpcbData=0xb3ee20*=0x1000 | out: lpType=0xb3ee24*=0x4, lpData=0xb3ee28*=0x9, lpcbData=0xb3ee20*=0x4) returned 0x0 [0084.065] RegQueryValueExW (in: hKey=0xcc, lpValueName="AutoRun", lpReserved=0x0, lpType=0xb3ee24, lpData=0xb3ee28, lpcbData=0xb3ee20*=0x1000 | out: lpType=0xb3ee24*=0x0, lpData=0xb3ee28*=0x9, lpcbData=0xb3ee20*=0x1000) returned 0x2 [0084.065] RegCloseKey (hKey=0xcc) returned 0x0 [0084.066] time (in: timer=0x0 | out: timer=0x0) returned 0x5e3302cc [0084.066] srand (_Seed=0x5e3302cc) [0084.066] GetCommandLineW () returned="C:\\WINDOWS\\system32\\cmd.exe /c net stop MSSQLSERVER" [0084.066] malloc (_Size=0x4000) returned 0x3412700 [0084.067] GetCommandLineW () returned="C:\\WINDOWS\\system32\\cmd.exe /c net stop MSSQLSERVER" [0084.067] malloc (_Size=0xffce) returned 0x1010048 [0084.068] ??_V@YAXPAX@Z () returned 0xb3fe00 [0084.069] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x1010048 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0084.069] malloc (_Size=0xffce) returned 0x1020020 [0084.070] ??_V@YAXPAX@Z () returned 0xb3fbd4 [0084.070] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x1020020, nSize=0x7fe7 | out: lpFilename="C:\\WINDOWS\\SysWOW64\\cmd.exe" (normalized: "c:\\windows\\syswow64\\cmd.exe")) returned 0x1b [0084.071] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x11ff840, nSize=0x2000 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath;C:\\WINDOWS\\system32;C:\\WINDOWS;C:\\WINDOWS\\System32\\Wbem;C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\;C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps") returned 0xbb [0084.071] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x11ff840, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0084.071] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x11ff840, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0084.071] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13 [0084.071] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11 [0084.071] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13 [0084.071] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13 [0084.071] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12 [0084.071] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4 [0084.071] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2 [0084.071] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8 [0084.072] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1 [0084.072] GetProcessHeap () returned 0xf10000 [0084.072] RtlFreeHeap (HeapHandle=0xf10000, Flags=0x0, BaseAddress=0xf158a8) returned 1 [0084.072] GetEnvironmentStringsW () returned 0xf14dd0* [0084.072] GetProcessHeap () returned 0xf10000 [0084.072] RtlAllocateHeap (HeapHandle=0xf10000, Flags=0x8, Size=0xae2) returned 0xf17948 [0084.072] FreeEnvironmentStringsA (penv="A") returned 1 [0084.073] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x11ff840, nSize=0x2000 | out: lpBuffer="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1b [0084.073] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x11ff840, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0084.073] _wcsicmp (_String1="KEYS", _String2="CD") returned 8 [0084.073] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6 [0084.073] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8 [0084.073] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8 [0084.073] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7 [0084.073] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9 [0084.073] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7 [0084.073] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3 [0084.073] malloc (_Size=0xffce) returned 0x102fff8 [0084.074] ??_V@YAXPAX@Z () returned 0xb3f96c [0084.075] GetProcessHeap () returned 0xf10000 [0084.075] RtlAllocateHeap (HeapHandle=0xf10000, Flags=0x8, Size=0x38) returned 0xf10ae0 [0084.077] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x102fff8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0084.077] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x7fe7, lpBuffer=0x102fff8, lpFilePart=0xb3f9b8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0xb3f9b8*="Desktop") returned 0x17 [0084.078] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\Desktop" (normalized: "c:\\users\\fd1hvy\\desktop")) returned 0x11 [0084.078] FindFirstFileW (in: lpFileName="C:\\Users", lpFindFileData=0xb3f738 | out: lpFindFileData=0xb3f738*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x475bb883, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x475bb883, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 0xf10b20 [0084.078] FindClose (in: hFindFile=0xf10b20 | out: hFindFile=0xf10b20) returned 1 [0084.078] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy", lpFindFileData=0xb3f738 | out: lpFindFileData=0xb3f738*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20fc850f, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x9de5855d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x9de5855d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD1HVy", cAlternateFileName="")) returned 0xf10b20 [0084.078] FindClose (in: hFindFile=0xf10b20 | out: hFindFile=0xf10b20) returned 1 [0084.078] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", lpFindFileData=0xb3f738 | out: lpFindFileData=0xb3f738*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x5de49bf6, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0x5de49bf6, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 0xf10b20 [0084.079] FindClose (in: hFindFile=0xf10b20 | out: hFindFile=0xf10b20) returned 1 [0084.079] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\Desktop" (normalized: "c:\\users\\fd1hvy\\desktop")) returned 0x11 [0084.079] SetCurrentDirectoryW (lpPathName="C:\\Users\\FD1HVy\\Desktop" (normalized: "c:\\users\\fd1hvy\\desktop")) returned 1 [0084.079] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Users\\FD1HVy\\Desktop") returned 1 [0084.079] GetProcessHeap () returned 0xf10000 [0084.079] RtlFreeHeap (HeapHandle=0xf10000, Flags=0x0, BaseAddress=0xf17948) returned 1 [0084.079] GetEnvironmentStringsW () returned 0xf14dd0* [0084.079] GetProcessHeap () returned 0xf10000 [0084.079] RtlAllocateHeap (HeapHandle=0xf10000, Flags=0x8, Size=0xb1a) returned 0xf16e58 [0084.079] FreeEnvironmentStringsA (penv="=") returned 1 [0084.079] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x1010048 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0084.079] GetProcessHeap () returned 0xf10000 [0084.079] RtlFreeHeap (HeapHandle=0xf10000, Flags=0x0, BaseAddress=0xf10ae0) returned 1 [0084.079] ??_V@YAXPAX@Z () returned 0x1 [0084.080] ??_V@YAXPAX@Z () returned 0x1 [0084.080] GetProcessHeap () returned 0xf10000 [0084.080] RtlAllocateHeap (HeapHandle=0xf10000, Flags=0x8, Size=0x400e) returned 0xf18f60 [0084.080] GetProcessHeap () returned 0xf10000 [0084.080] RtlAllocateHeap (HeapHandle=0xf10000, Flags=0x8, Size=0x36) returned 0xf17980 [0084.080] GetProcessHeap () returned 0xf10000 [0084.080] RtlFreeHeap (HeapHandle=0xf10000, Flags=0x0, BaseAddress=0xf18f60) returned 1 [0084.080] GetConsoleOutputCP () returned 0x1b5 [0084.081] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x1203850 | out: lpCPInfo=0x1203850) returned 1 [0084.081] GetUserDefaultLCID () returned 0x409 [0084.082] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x11ff82c, cchData=8 | out: lpLCData=":") returned 2 [0084.082] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0xb3fd28, cchData=128 | out: lpLCData="0") returned 2 [0084.082] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0xb3fd28, cchData=128 | out: lpLCData="0") returned 2 [0084.083] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0xb3fd28, cchData=128 | out: lpLCData="1") returned 2 [0084.083] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x11ff81c, cchData=8 | out: lpLCData="/") returned 2 [0084.083] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x11ff7b8, cchData=32 | out: lpLCData="Mon") returned 4 [0084.083] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x11ff778, cchData=32 | out: lpLCData="Tue") returned 4 [0084.083] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x11ff738, cchData=32 | out: lpLCData="Wed") returned 4 [0084.083] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x11ff6f8, cchData=32 | out: lpLCData="Thu") returned 4 [0084.083] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x11ff6b8, cchData=32 | out: lpLCData="Fri") returned 4 [0084.083] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x11ff678, cchData=32 | out: lpLCData="Sat") returned 4 [0084.083] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x11ff638, cchData=32 | out: lpLCData="Sun") returned 4 [0084.083] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x11ff80c, cchData=8 | out: lpLCData=".") returned 2 [0084.083] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x11ff7f8, cchData=8 | out: lpLCData=",") returned 2 [0084.083] setlocale (category=0, locale=".OCP") returned="English_United States.437" [0084.087] GetProcessHeap () returned 0xf10000 [0084.087] RtlAllocateHeap (HeapHandle=0xf10000, Flags=0x0, Size=0x20c) returned 0xf17a08 [0084.087] GetConsoleTitleW (in: lpConsoleTitle=0xf17a08, nSize=0x104 | out: lpConsoleTitle="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1c [0084.089] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x74030000 [0084.089] GetProcAddress (hModule=0x74030000, lpProcName="CopyFileExW") returned 0x74044330 [0084.089] GetProcAddress (hModule=0x74030000, lpProcName="IsDebuggerPresent") returned 0x74045930 [0084.090] GetProcAddress (hModule=0x74030000, lpProcName="SetConsoleInputExeNameW") returned 0x772c09d0 [0084.090] ??_V@YAXPAX@Z () returned 0x1 [0084.092] GetProcessHeap () returned 0xf10000 [0084.092] RtlAllocateHeap (HeapHandle=0xf10000, Flags=0x8, Size=0x400a) returned 0xf18f60 [0084.092] GetProcessHeap () returned 0xf10000 [0084.092] RtlFreeHeap (HeapHandle=0xf10000, Flags=0x0, BaseAddress=0xf18f60) returned 1 [0084.092] _wcsicmp (_String1="net", _String2=")") returned 69 [0084.093] _wcsicmp (_String1="FOR", _String2="net") returned -8 [0084.093] _wcsicmp (_String1="FOR/?", _String2="net") returned -8 [0084.093] _wcsicmp (_String1="IF", _String2="net") returned -5 [0084.093] _wcsicmp (_String1="IF/?", _String2="net") returned -5 [0084.093] _wcsicmp (_String1="REM", _String2="net") returned 4 [0084.093] _wcsicmp (_String1="REM/?", _String2="net") returned 4 [0084.093] GetProcessHeap () returned 0xf10000 [0084.093] RtlAllocateHeap (HeapHandle=0xf10000, Flags=0x8, Size=0x58) returned 0xf17c20 [0084.093] GetProcessHeap () returned 0xf10000 [0084.093] RtlAllocateHeap (HeapHandle=0xf10000, Flags=0x8, Size=0x10) returned 0xf17c80 [0084.094] GetProcessHeap () returned 0xf10000 [0084.094] RtlAllocateHeap (HeapHandle=0xf10000, Flags=0x8, Size=0x2c) returned 0xf17c98 [0084.095] GetConsoleTitleW (in: lpConsoleTitle=0xb3fc20, nSize=0x104 | out: lpConsoleTitle="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1c [0084.100] malloc (_Size=0xffce) returned 0x1022aa0 [0084.101] ??_V@YAXPAX@Z () returned 0xb3f9ac [0084.101] malloc (_Size=0xffce) returned 0x1032a78 [0084.102] ??_V@YAXPAX@Z () returned 0xb3f764 [0084.103] _wcsicmp (_String1="net", _String2="DIR") returned 10 [0084.103] _wcsicmp (_String1="net", _String2="ERASE") returned 9 [0084.103] _wcsicmp (_String1="net", _String2="DEL") returned 10 [0084.103] _wcsicmp (_String1="net", _String2="TYPE") returned -6 [0084.103] _wcsicmp (_String1="net", _String2="COPY") returned 11 [0084.104] _wcsicmp (_String1="net", _String2="CD") returned 11 [0084.104] _wcsicmp (_String1="net", _String2="CHDIR") returned 11 [0084.104] _wcsicmp (_String1="net", _String2="RENAME") returned -4 [0084.104] _wcsicmp (_String1="net", _String2="REN") returned -4 [0084.104] _wcsicmp (_String1="net", _String2="ECHO") returned 9 [0084.104] _wcsicmp (_String1="net", _String2="SET") returned -5 [0084.104] _wcsicmp (_String1="net", _String2="PAUSE") returned -2 [0084.104] _wcsicmp (_String1="net", _String2="DATE") returned 10 [0084.104] _wcsicmp (_String1="net", _String2="TIME") returned -6 [0084.104] _wcsicmp (_String1="net", _String2="PROMPT") returned -2 [0084.104] _wcsicmp (_String1="net", _String2="MD") returned 1 [0084.104] _wcsicmp (_String1="net", _String2="MKDIR") returned 1 [0084.104] _wcsicmp (_String1="net", _String2="RD") returned -4 [0084.104] _wcsicmp (_String1="net", _String2="RMDIR") returned -4 [0084.104] _wcsicmp (_String1="net", _String2="PATH") returned -2 [0084.104] _wcsicmp (_String1="net", _String2="GOTO") returned 7 [0084.105] _wcsicmp (_String1="net", _String2="SHIFT") returned -5 [0084.105] _wcsicmp (_String1="net", _String2="CLS") returned 11 [0084.105] _wcsicmp (_String1="net", _String2="CALL") returned 11 [0084.105] _wcsicmp (_String1="net", _String2="VERIFY") returned -8 [0084.105] _wcsicmp (_String1="net", _String2="VER") returned -8 [0084.105] _wcsicmp (_String1="net", _String2="VOL") returned -8 [0084.105] _wcsicmp (_String1="net", _String2="EXIT") returned 9 [0084.105] _wcsicmp (_String1="net", _String2="SETLOCAL") returned -5 [0084.105] _wcsicmp (_String1="net", _String2="ENDLOCAL") returned 9 [0084.105] _wcsicmp (_String1="net", _String2="TITLE") returned -6 [0084.105] _wcsicmp (_String1="net", _String2="START") returned -5 [0084.105] _wcsicmp (_String1="net", _String2="DPATH") returned 10 [0084.105] _wcsicmp (_String1="net", _String2="KEYS") returned 3 [0084.105] _wcsicmp (_String1="net", _String2="MOVE") returned 1 [0084.105] _wcsicmp (_String1="net", _String2="PUSHD") returned -2 [0084.105] _wcsicmp (_String1="net", _String2="POPD") returned -2 [0084.105] _wcsicmp (_String1="net", _String2="ASSOC") returned 13 [0084.105] _wcsicmp (_String1="net", _String2="FTYPE") returned 8 [0084.105] _wcsicmp (_String1="net", _String2="BREAK") returned 12 [0084.105] _wcsicmp (_String1="net", _String2="COLOR") returned 11 [0084.105] _wcsicmp (_String1="net", _String2="MKLINK") returned 1 [0084.105] _wcsicmp (_String1="net", _String2="DIR") returned 10 [0084.106] _wcsicmp (_String1="net", _String2="ERASE") returned 9 [0084.106] _wcsicmp (_String1="net", _String2="DEL") returned 10 [0084.106] _wcsicmp (_String1="net", _String2="TYPE") returned -6 [0084.106] _wcsicmp (_String1="net", _String2="COPY") returned 11 [0084.106] _wcsicmp (_String1="net", _String2="CD") returned 11 [0084.106] _wcsicmp (_String1="net", _String2="CHDIR") returned 11 [0084.106] _wcsicmp (_String1="net", _String2="RENAME") returned -4 [0084.106] _wcsicmp (_String1="net", _String2="REN") returned -4 [0084.107] _wcsicmp (_String1="net", _String2="ECHO") returned 9 [0084.107] _wcsicmp (_String1="net", _String2="SET") returned -5 [0084.107] _wcsicmp (_String1="net", _String2="PAUSE") returned -2 [0084.107] _wcsicmp (_String1="net", _String2="DATE") returned 10 [0084.107] _wcsicmp (_String1="net", _String2="TIME") returned -6 [0084.107] _wcsicmp (_String1="net", _String2="PROMPT") returned -2 [0084.107] _wcsicmp (_String1="net", _String2="MD") returned 1 [0084.107] _wcsicmp (_String1="net", _String2="MKDIR") returned 1 [0084.107] _wcsicmp (_String1="net", _String2="RD") returned -4 [0084.107] _wcsicmp (_String1="net", _String2="RMDIR") returned -4 [0084.107] _wcsicmp (_String1="net", _String2="PATH") returned -2 [0084.107] _wcsicmp (_String1="net", _String2="GOTO") returned 7 [0084.107] _wcsicmp (_String1="net", _String2="SHIFT") returned -5 [0084.107] _wcsicmp (_String1="net", _String2="CLS") returned 11 [0084.107] _wcsicmp (_String1="net", _String2="CALL") returned 11 [0084.107] _wcsicmp (_String1="net", _String2="VERIFY") returned -8 [0084.107] _wcsicmp (_String1="net", _String2="VER") returned -8 [0084.107] _wcsicmp (_String1="net", _String2="VOL") returned -8 [0084.107] _wcsicmp (_String1="net", _String2="EXIT") returned 9 [0084.108] _wcsicmp (_String1="net", _String2="SETLOCAL") returned -5 [0084.108] _wcsicmp (_String1="net", _String2="ENDLOCAL") returned 9 [0084.108] _wcsicmp (_String1="net", _String2="TITLE") returned -6 [0084.108] _wcsicmp (_String1="net", _String2="START") returned -5 [0084.108] _wcsicmp (_String1="net", _String2="DPATH") returned 10 [0084.108] _wcsicmp (_String1="net", _String2="KEYS") returned 3 [0084.108] _wcsicmp (_String1="net", _String2="MOVE") returned 1 [0084.108] _wcsicmp (_String1="net", _String2="PUSHD") returned -2 [0084.108] _wcsicmp (_String1="net", _String2="POPD") returned -2 [0084.108] _wcsicmp (_String1="net", _String2="ASSOC") returned 13 [0084.108] _wcsicmp (_String1="net", _String2="FTYPE") returned 8 [0084.108] _wcsicmp (_String1="net", _String2="BREAK") returned 12 [0084.108] _wcsicmp (_String1="net", _String2="COLOR") returned 11 [0084.108] _wcsicmp (_String1="net", _String2="MKLINK") returned 1 [0084.108] _wcsicmp (_String1="net", _String2="FOR") returned 8 [0084.108] _wcsicmp (_String1="net", _String2="IF") returned 5 [0084.108] _wcsicmp (_String1="net", _String2="REM") returned -4 [0084.109] ??_V@YAXPAX@Z () returned 0x1 [0084.109] GetProcessHeap () returned 0xf10000 [0084.109] RtlAllocateHeap (HeapHandle=0xf10000, Flags=0x8, Size=0xffd6) returned 0xf18f60 [0084.111] GetProcessHeap () returned 0xf10000 [0084.111] RtlAllocateHeap (HeapHandle=0xf10000, Flags=0x8, Size=0x34) returned 0xf17cd0 [0084.111] _wcsnicmp (_String1="net", _String2="cmd ", _MaxCount=0x4) returned 11 [0084.111] malloc (_Size=0xffce) returned 0x1032a78 [0084.111] ??_V@YAXPAX@Z () returned 0xb3f4e4 [0084.111] GetProcessHeap () returned 0xf10000 [0084.111] RtlAllocateHeap (HeapHandle=0xf10000, Flags=0x8, Size=0x1ffa4) returned 0xf28f40 [0084.114] SetErrorMode (uMode=0x0) returned 0x0 [0084.114] SetErrorMode (uMode=0x1) returned 0x0 [0084.114] GetFullPathNameW (in: lpFileName=".", nBufferLength=0xffce, lpBuffer=0xf28f48, lpFilePart=0xb3f504 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0xb3f504*="Desktop") returned 0x17 [0084.114] SetErrorMode (uMode=0x0) returned 0x1 [0084.114] GetProcessHeap () returned 0xf10000 [0084.115] RtlReAllocateHeap (Heap=0xf10000, Flags=0x0, Ptr=0xf28f40, Size=0x40) returned 0xf28f40 [0084.115] GetProcessHeap () returned 0xf10000 [0084.115] RtlSizeHeap (HeapHandle=0xf10000, Flags=0x0, MemoryPointer=0xf28f40) returned 0x40 [0084.115] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x11ff840, nSize=0x2000 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath;C:\\WINDOWS\\system32;C:\\WINDOWS;C:\\WINDOWS\\System32\\Wbem;C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\;C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps") returned 0xbb [0084.115] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1 [0084.115] GetProcessHeap () returned 0xf10000 [0084.115] RtlAllocateHeap (HeapHandle=0xf10000, Flags=0x8, Size=0x1b4) returned 0xf17d10 [0084.115] GetProcessHeap () returned 0xf10000 [0084.115] RtlAllocateHeap (HeapHandle=0xf10000, Flags=0x8, Size=0x360) returned 0xf17ed0 [0084.129] GetProcessHeap () returned 0xf10000 [0084.129] RtlReAllocateHeap (Heap=0xf10000, Flags=0x0, Ptr=0xf17ed0, Size=0x1b6) returned 0xf17ed0 [0084.129] GetProcessHeap () returned 0xf10000 [0084.129] RtlSizeHeap (HeapHandle=0xf10000, Flags=0x0, MemoryPointer=0xf17ed0) returned 0x1b6 [0084.129] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x11ff840, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0084.129] GetProcessHeap () returned 0xf10000 [0084.129] RtlAllocateHeap (HeapHandle=0xf10000, Flags=0x8, Size=0xe0) returned 0xf18090 [0084.130] GetProcessHeap () returned 0xf10000 [0084.130] RtlReAllocateHeap (Heap=0xf10000, Flags=0x0, Ptr=0xf18090, Size=0x76) returned 0xf18090 [0084.130] GetProcessHeap () returned 0xf10000 [0084.130] RtlSizeHeap (HeapHandle=0xf10000, Flags=0x0, MemoryPointer=0xf18090) returned 0x76 [0084.130] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0084.130] FindFirstFileExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\net.*", fInfoLevelId=0x1, lpFindFileData=0xb3f290, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0xb3f290) returned 0xffffffff [0084.131] GetLastError () returned 0x2 [0084.131] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0084.131] FindFirstFileExW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\net.*", fInfoLevelId=0x1, lpFindFileData=0xb3f290, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0xb3f290) returned 0xffffffff [0084.131] GetLastError () returned 0x2 [0084.131] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0084.132] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\system32\\net.*", fInfoLevelId=0x1, lpFindFileData=0xb3f290, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0xb3f290) returned 0xf18110 [0084.132] GetProcessHeap () returned 0xf10000 [0084.132] RtlAllocateHeap (HeapHandle=0xf10000, Flags=0x0, Size=0x14) returned 0xf18150 [0084.132] FindClose (in: hFindFile=0xf18110 | out: hFindFile=0xf18110) returned 1 [0084.132] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\system32\\net.COM", fInfoLevelId=0x1, lpFindFileData=0xb3f290, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0xb3f290) returned 0xffffffff [0084.132] GetLastError () returned 0x2 [0084.132] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\system32\\net.EXE", fInfoLevelId=0x1, lpFindFileData=0xb3f290, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0xb3f290) returned 0xf18110 [0084.133] GetProcessHeap () returned 0xf10000 [0084.133] RtlReAllocateHeap (Heap=0xf10000, Flags=0x0, Ptr=0xf18150, Size=0x4) returned 0xf18150 [0084.133] FindClose (in: hFindFile=0xf18110 | out: hFindFile=0xf18110) returned 1 [0084.133] _wcsicmp (_String1=".EXE", _String2=".BAT") returned 3 [0084.133] _wcsicmp (_String1=".EXE", _String2=".CMD") returned 2 [0084.133] ??_V@YAXPAX@Z () returned 0x1 [0084.133] GetConsoleTitleW (in: lpConsoleTitle=0xb3f794, nSize=0x104 | out: lpConsoleTitle="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1c [0084.135] InitializeProcThreadAttributeList (in: lpAttributeList=0xb3f6c0, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0xb3f6ac | out: lpAttributeList=0xb3f6c0, lpSize=0xb3f6ac) returned 1 [0084.135] UpdateProcThreadAttribute (in: lpAttributeList=0xb3f6c0, dwFlags=0x0, Attribute=0x60001, lpValue=0xb3f6a8, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0xb3f6c0, lpPreviousValue=0x0) returned 1 [0084.135] GetStartupInfoW (in: lpStartupInfo=0xb3f6f8 | out: lpStartupInfo=0xb3f6f8*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\WINDOWS\\system32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x144, lpReserved2=0xf11b5e, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) [0084.135] GetProcessHeap () returned 0xf10000 [0084.135] RtlAllocateHeap (HeapHandle=0xf10000, Flags=0x8, Size=0x18) returned 0xf18110 [0084.135] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38 [0084.136] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2 [0084.136] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2 [0084.136] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0084.136] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0084.136] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0084.136] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3 [0084.136] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3 [0084.136] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5 [0084.136] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5 [0084.136] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9 [0084.136] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9 [0084.136] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11 [0084.136] _wcsnicmp (_String1="COPYCMD", _String2="OneDriv", _MaxCount=0x7) returned -12 [0084.136] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12 [0084.136] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13 [0084.136] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13 [0084.136] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0084.136] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0084.136] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0084.136] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0084.136] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0084.136] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0084.137] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0084.137] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0084.137] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0084.137] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13 [0084.137] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13 [0084.137] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13 [0084.137] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16 [0084.137] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16 [0084.137] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17 [0084.137] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17 [0084.137] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18 [0084.137] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18 [0084.137] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18 [0084.137] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18 [0084.137] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20 [0084.137] GetProcessHeap () returned 0xf10000 [0084.137] RtlFreeHeap (HeapHandle=0xf10000, Flags=0x0, BaseAddress=0xf18110) returned 1 [0084.137] GetProcessHeap () returned 0xf10000 [0084.137] RtlAllocateHeap (HeapHandle=0xf10000, Flags=0x8, Size=0xa) returned 0xf18110 [0084.138] lstrcmpW (lpString1="\\net.exe", lpString2="\\XCOPY.EXE") returned -1 [0084.140] _get_osfhandle (_FileHandle=1) returned 0x90 [0084.140] SetConsoleMode (hConsoleHandle=0x90, dwMode=0x3) returned 1 [0084.142] _get_osfhandle (_FileHandle=0) returned 0x8c [0084.142] SetConsoleMode (hConsoleHandle=0x8c, dwMode=0x1f7) returned 1 [0084.143] CreateProcessW (in: lpApplicationName="C:\\WINDOWS\\system32\\net.exe", lpCommandLine="net stop MSSQLSERVER", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\FD1HVy\\Desktop", lpStartupInfo=0xb3f648*(cb=0x48, lpReserved=0x0, lpDesktop="WinSta0\\Default", lpTitle="net stop MSSQLSERVER", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0xb3f694 | out: lpCommandLine="net stop MSSQLSERVER", lpProcessInformation=0xb3f694*(hProcess=0xe0, hThread=0xdc, dwProcessId=0x1080, dwThreadId=0x1094)) returned 1 [0084.169] CloseHandle (hObject=0xdc) returned 1 [0084.169] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1 [0084.169] GetProcessHeap () returned 0xf10000 [0084.169] RtlFreeHeap (HeapHandle=0xf10000, Flags=0x0, BaseAddress=0xf16e58) returned 1 [0084.169] GetEnvironmentStringsW () returned 0xf16e58* [0084.169] GetProcessHeap () returned 0xf10000 [0084.169] RtlAllocateHeap (HeapHandle=0xf10000, Flags=0x8, Size=0xb1a) returned 0xf14dd0 [0084.170] FreeEnvironmentStringsA (penv="=") returned 1 [0084.170] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0xffffffff) returned 0x0 [0085.012] GetExitCodeProcess (in: hProcess=0xe0, lpExitCode=0xb3f62c | out: lpExitCode=0xb3f62c*=0x2) returned 1 [0085.016] CloseHandle (hObject=0xe0) returned 1 [0085.016] _vsnwprintf (in: _Buffer=0xb3f714, _BufferCount=0x13, _Format="%08X", _ArgList=0xb3f634 | out: _Buffer="00000002") returned 8 [0085.017] SetEnvironmentVariableW (lpName="=ExitCode", lpValue="00000002") returned 1 [0085.018] GetProcessHeap () returned 0xf10000 [0085.018] RtlFreeHeap (HeapHandle=0xf10000, Flags=0x0, BaseAddress=0xf14dd0) returned 1 [0085.019] GetEnvironmentStringsW () returned 0xf183b0* [0085.019] GetProcessHeap () returned 0xf10000 [0085.019] RtlAllocateHeap (HeapHandle=0xf10000, Flags=0x8, Size=0xb40) returned 0xf14dd0 [0085.019] FreeEnvironmentStringsA (penv="=") returned 1 [0085.019] SetEnvironmentVariableW (lpName="=ExitCodeAscii", lpValue=0x0) returned 1 [0085.020] GetProcessHeap () returned 0xf10000 [0085.020] RtlFreeHeap (HeapHandle=0xf10000, Flags=0x0, BaseAddress=0xf14dd0) returned 1 [0085.020] GetEnvironmentStringsW () returned 0xf183b0* [0085.020] GetProcessHeap () returned 0xf10000 [0085.020] RtlAllocateHeap (HeapHandle=0xf10000, Flags=0x8, Size=0xb40) returned 0xf14dd0 [0085.020] FreeEnvironmentStringsA (penv="=") returned 1 [0085.020] GetProcessHeap () returned 0xf10000 [0085.020] RtlFreeHeap (HeapHandle=0xf10000, Flags=0x0, BaseAddress=0xf18110) returned 1 [0085.020] DeleteProcThreadAttributeList (in: lpAttributeList=0xb3f6c0 | out: lpAttributeList=0xb3f6c0) [0085.020] ??_V@YAXPAX@Z () returned 0x1 [0085.020] _get_osfhandle (_FileHandle=1) returned 0x90 [0085.020] SetConsoleMode (hConsoleHandle=0x90, dwMode=0x3) returned 1 [0085.022] _get_osfhandle (_FileHandle=1) returned 0x90 [0085.022] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x1203890 | out: lpMode=0x1203890) returned 1 [0085.023] _get_osfhandle (_FileHandle=1) returned 0x90 [0085.023] SetConsoleMode (hConsoleHandle=0x90, dwMode=0x7) returned 1 [0085.024] _get_osfhandle (_FileHandle=0) returned 0x8c [0085.024] GetConsoleMode (in: hConsoleHandle=0x8c, lpMode=0x1203894 | out: lpMode=0x1203894) returned 1 [0085.025] _get_osfhandle (_FileHandle=0) returned 0x8c [0085.025] SetConsoleMode (hConsoleHandle=0x8c, dwMode=0x1e7) returned 1 [0085.026] SetConsoleInputExeNameW () returned 0x1 [0085.026] GetConsoleOutputCP () returned 0x1b5 [0085.029] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x1203850 | out: lpCPInfo=0x1203850) returned 1 [0085.029] SetThreadUILanguage (LangId=0x0) returned 0x9c0409 [0085.031] exit (_Code=2) [0085.031] ??_V@YAXPAX@Z () returned 0x1 Thread: id = 36 os_tid = 0x106c Process: id = "12" image_name = "conhost.exe" filename = "c:\\windows\\system32\\conhost.exe" page_root = "0x69a1000" os_pid = "0x364" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "11" os_parent_pid = "0x884" cmd_line = "\\??\\C:\\WINDOWS\\system32\\conhost.exe 0xffffffff -ForceV1" cur_dir = "C:\\WINDOWS" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000faa5" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 31 os_tid = 0xf0 Thread: id = 32 os_tid = 0x1018 Thread: id = 33 os_tid = 0x102c Thread: id = 34 os_tid = 0x1044 Thread: id = 35 os_tid = 0x1058 Process: id = "13" image_name = "net.exe" filename = "c:\\windows\\syswow64\\net.exe" page_root = "0x15db7000" os_pid = "0x1080" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "11" os_parent_pid = "0x884" cmd_line = "net stop MSSQLSERVER" cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000faa5" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 37 os_tid = 0x1094 Thread: id = 38 os_tid = 0x10a8 Process: id = "14" image_name = "net1.exe" filename = "c:\\windows\\syswow64\\net1.exe" page_root = "0x53c7b000" os_pid = "0x10bc" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "13" os_parent_pid = "0x1080" cmd_line = "C:\\WINDOWS\\system32\\net1 stop MSSQLSERVER" cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000faa5" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 39 os_tid = 0x10d4 [0084.674] GetModuleHandleA (lpModuleName=0x0) returned 0x230000 [0084.674] __set_app_type (_Type=0x1) [0084.674] __p__fmode () returned 0x76953c14 [0084.675] __p__commode () returned 0x769549ec [0084.675] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x236f20) returned 0x0 [0084.675] __getmainargs (in: _Argc=0x24f608, _Argv=0x24f60c, _Env=0x24f610, _DoWildCard=0, _StartInfo=0x24f61c | out: _Argc=0x24f608, _Argv=0x24f60c, _Env=0x24f610) returned 0 [0084.675] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0084.676] GetConsoleOutputCP () returned 0x1b5 [0084.701] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x256fa0 | out: lpCPInfo=0x256fa0) returned 1 [0084.701] SetThreadUILanguage (LangId=0x0) returned 0x2b80409 [0084.718] sprintf_s (in: _DstBuf=0x2cdf7cc, _DstSize=0xc, _Format=".%u" | out: _DstBuf=".437") returned 4 [0084.718] setlocale (category=0, locale=".437") returned="English_United States.437" [0084.721] GetStdHandle (nStdHandle=0xfffffff5) returned 0x90 [0084.721] GetStdHandle (nStdHandle=0xfffffff4) returned 0x94 [0084.722] GetCommandLineW () returned="C:\\WINDOWS\\system32\\net1 stop MSSQLSERVER" [0084.722] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x2cdf574, nSize=0x104 | out: lpFilename="C:\\WINDOWS\\SysWOW64\\net1.exe" (normalized: "c:\\windows\\syswow64\\net1.exe")) returned 0x1c [0084.722] RtlAllocateHeap (HeapHandle=0x2f10000, Flags=0x0, Size=0x60) returned 0x2f104a0 [0084.722] NetApiBufferAllocate (in: ByteCount=0x10, Buffer=0x2cdf570 | out: Buffer=0x2cdf570*=0x2f18168) returned 0x0 [0084.722] NetApiBufferAllocate (in: ByteCount=0x10, Buffer=0x2cdf56c | out: Buffer=0x2cdf56c*=0x2f181c8) returned 0x0 [0084.722] __iob_func () returned 0x76952608 [0084.722] _fileno (_File=0x76952608) returned 0 [0084.722] _setmode (_FileHandle=0, _Mode=16384) returned 16384 [0084.723] _wcsicmp (_String1="accounts", _String2="stop") returned -18 [0084.723] _wcsicmp (_String1="computer", _String2="stop") returned -16 [0084.723] _wcsicmp (_String1="config", _String2="stop") returned -16 [0084.723] _wcsicmp (_String1="continue", _String2="stop") returned -16 [0084.723] _wcsicmp (_String1="cont", _String2="stop") returned -16 [0084.723] _wcsicmp (_String1="file", _String2="stop") returned -13 [0084.723] _wcsicmp (_String1="files", _String2="stop") returned -13 [0084.723] _wcsicmp (_String1="group", _String2="stop") returned -12 [0084.723] _wcsicmp (_String1="groups", _String2="stop") returned -12 [0084.723] _wcsicmp (_String1="help", _String2="stop") returned -11 [0084.723] _wcsicmp (_String1="helpmsg", _String2="stop") returned -11 [0084.723] _wcsicmp (_String1="localgroup", _String2="stop") returned -7 [0084.723] _wcsicmp (_String1="pause", _String2="stop") returned -3 [0084.723] _wcsicmp (_String1="session", _String2="stop") returned -15 [0084.724] _wcsicmp (_String1="sessions", _String2="stop") returned -15 [0084.724] _wcsicmp (_String1=0x231ffc, _String2="stop") returned -15 [0084.724] _wcsicmp (_String1="share", _String2="stop") returned -12 [0084.724] _wcsicmp (_String1="start", _String2="stop") returned -14 [0084.724] _wcsicmp (_String1="stats", _String2="stop") returned -14 [0084.724] _wcsicmp (_String1="statistics", _String2="stop") returned -14 [0084.724] _wcsicmp (_String1="stop", _String2="stop") returned 0 [0084.724] _wcsicmp (_String1="accounts", _String2="MSSQLSERVER") returned -12 [0084.724] _wcsicmp (_String1="computer", _String2="MSSQLSERVER") returned -10 [0084.724] _wcsicmp (_String1="config", _String2="MSSQLSERVER") returned -10 [0084.724] _wcsicmp (_String1="continue", _String2="MSSQLSERVER") returned -10 [0084.724] _wcsicmp (_String1="cont", _String2="MSSQLSERVER") returned -10 [0084.724] _wcsicmp (_String1="file", _String2="MSSQLSERVER") returned -7 [0084.724] _wcsicmp (_String1="files", _String2="MSSQLSERVER") returned -7 [0084.724] _wcsicmp (_String1="group", _String2="MSSQLSERVER") returned -6 [0084.724] _wcsicmp (_String1="groups", _String2="MSSQLSERVER") returned -6 [0084.725] _wcsicmp (_String1="help", _String2="MSSQLSERVER") returned -5 [0084.725] _wcsicmp (_String1="helpmsg", _String2="MSSQLSERVER") returned -5 [0084.725] _wcsicmp (_String1="localgroup", _String2="MSSQLSERVER") returned -1 [0084.725] _wcsicmp (_String1="pause", _String2="MSSQLSERVER") returned 3 [0084.725] _wcsicmp (_String1="session", _String2="MSSQLSERVER") returned 6 [0084.725] _wcsicmp (_String1="sessions", _String2="MSSQLSERVER") returned 6 [0084.725] _wcsicmp (_String1="sess", _String2="MSSQLSERVER") returned 6 [0084.725] _wcsicmp (_String1="share", _String2="MSSQLSERVER") returned 6 [0084.725] _wcsicmp (_String1="start", _String2="MSSQLSERVER") returned 6 [0084.725] _wcsicmp (_String1="stats", _String2="MSSQLSERVER") returned 6 [0084.725] _wcsicmp (_String1="statistics", _String2="MSSQLSERVER") returned 6 [0084.725] _wcsicmp (_String1="stop", _String2="MSSQLSERVER") returned 6 [0084.725] _wcsicmp (_String1="time", _String2="MSSQLSERVER") returned 7 [0084.725] _wcsicmp (_String1="user", _String2="MSSQLSERVER") returned 8 [0084.725] _wcsicmp (_String1="users", _String2="MSSQLSERVER") returned 8 [0084.725] _wcsicmp (_String1="msg", _String2="MSSQLSERVER") returned -12 [0084.726] _wcsicmp (_String1="messenger", _String2="MSSQLSERVER") returned -14 [0084.726] _wcsicmp (_String1="receiver", _String2="MSSQLSERVER") returned 5 [0084.726] _wcsicmp (_String1="rcv", _String2="MSSQLSERVER") returned 5 [0084.726] _wcsicmp (_String1="netpopup", _String2="MSSQLSERVER") returned 1 [0084.726] _wcsicmp (_String1="redirector", _String2="MSSQLSERVER") returned 5 [0084.726] _wcsicmp (_String1="redir", _String2="MSSQLSERVER") returned 5 [0084.726] _wcsicmp (_String1="rdr", _String2="MSSQLSERVER") returned 5 [0084.726] _wcsicmp (_String1="workstation", _String2="MSSQLSERVER") returned 10 [0084.726] _wcsicmp (_String1="work", _String2="MSSQLSERVER") returned 10 [0084.726] _wcsicmp (_String1="wksta", _String2="MSSQLSERVER") returned 10 [0084.726] _wcsicmp (_String1="prdr", _String2="MSSQLSERVER") returned 3 [0084.726] _wcsicmp (_String1="devrdr", _String2="MSSQLSERVER") returned -9 [0084.726] _wcsicmp (_String1="lanmanworkstation", _String2="MSSQLSERVER") returned -1 [0084.726] _wcsicmp (_String1="server", _String2="MSSQLSERVER") returned 6 [0084.726] _wcsicmp (_String1="svr", _String2="MSSQLSERVER") returned 6 [0084.726] _wcsicmp (_String1="srv", _String2="MSSQLSERVER") returned 6 [0084.726] _wcsicmp (_String1="lanmanserver", _String2="MSSQLSERVER") returned -1 [0084.726] _wcsicmp (_String1="alerter", _String2="MSSQLSERVER") returned -12 [0084.726] _wcsicmp (_String1="netlogon", _String2="MSSQLSERVER") returned 1 [0084.727] _wcsupr (in: _String="MSSQLSERVER" | out: _String="MSSQLSERVER") returned="MSSQLSERVER" [0084.727] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x80000000) returned 0x2f20978 [0084.879] GetServiceKeyNameW (in: hSCManager=0x2f20978, lpDisplayName="MSSQLSERVER", lpServiceName=0x258c28, lpcchBuffer=0x2cdf4e4 | out: lpServiceName="", lpcchBuffer=0x2cdf4e4) returned 0 [0084.881] _wcsicmp (_String1="msg", _String2="MSSQLSERVER") returned -12 [0084.881] _wcsicmp (_String1="messenger", _String2="MSSQLSERVER") returned -14 [0084.881] _wcsicmp (_String1="receiver", _String2="MSSQLSERVER") returned 5 [0084.881] _wcsicmp (_String1="rcv", _String2="MSSQLSERVER") returned 5 [0084.881] _wcsicmp (_String1="redirector", _String2="MSSQLSERVER") returned 5 [0084.881] _wcsicmp (_String1="redir", _String2="MSSQLSERVER") returned 5 [0084.881] _wcsicmp (_String1="rdr", _String2="MSSQLSERVER") returned 5 [0084.881] _wcsicmp (_String1="workstation", _String2="MSSQLSERVER") returned 10 [0084.881] _wcsicmp (_String1="work", _String2="MSSQLSERVER") returned 10 [0084.881] _wcsicmp (_String1="wksta", _String2="MSSQLSERVER") returned 10 [0084.881] _wcsicmp (_String1="prdr", _String2="MSSQLSERVER") returned 3 [0084.881] _wcsicmp (_String1="devrdr", _String2="MSSQLSERVER") returned -9 [0084.881] _wcsicmp (_String1="lanmanworkstation", _String2="MSSQLSERVER") returned -1 [0084.881] _wcsicmp (_String1="server", _String2="MSSQLSERVER") returned 6 [0084.881] _wcsicmp (_String1="svr", _String2="MSSQLSERVER") returned 6 [0084.881] _wcsicmp (_String1="srv", _String2="MSSQLSERVER") returned 6 [0084.881] _wcsicmp (_String1="lanmanserver", _String2="MSSQLSERVER") returned -1 [0084.882] _wcsicmp (_String1="alerter", _String2="MSSQLSERVER") returned -12 [0084.882] _wcsicmp (_String1="netlogon", _String2="MSSQLSERVER") returned 1 [0084.882] _wcsicmp (_String1="MSSQLSERVER", _String2="WORKSTATION") returned -10 [0084.882] _wcsicmp (_String1="MSSQLSERVER", _String2="LanmanWorkstation") returned 1 [0084.882] _wcsicmp (_String1="MSSQLSERVER", _String2="SERVER") returned -6 [0084.882] _wcsicmp (_String1="MSSQLSERVER", _String2="LanmanServer") returned 1 [0084.882] _wcsicmp (_String1="MSSQLSERVER", _String2="BROWSER") returned 11 [0084.882] _wcsicmp (_String1="MSSQLSERVER", _String2="BROWSER") returned 11 [0084.882] _wcsicmp (_String1="MSSQLSERVER", _String2="MESSENGER") returned 14 [0084.882] _wcsicmp (_String1="MSSQLSERVER", _String2="MESSENGER") returned 14 [0084.882] _wcsicmp (_String1="MSSQLSERVER", _String2="NETRUN") returned -1 [0084.882] _wcsicmp (_String1="MSSQLSERVER", _String2="NETRUN") returned -1 [0084.882] _wcsicmp (_String1="MSSQLSERVER", _String2="SPOOLER") returned -6 [0084.883] _wcsicmp (_String1="MSSQLSERVER", _String2="SPOOLER") returned -6 [0084.883] _wcsicmp (_String1="MSSQLSERVER", _String2="ALERTER") returned 12 [0084.883] _wcsicmp (_String1="MSSQLSERVER", _String2="ALERTER") returned 12 [0084.883] _wcsicmp (_String1="MSSQLSERVER", _String2="NETLOGON") returned -1 [0084.883] _wcsicmp (_String1="MSSQLSERVER", _String2="NETLOGON") returned -1 [0084.883] _wcsicmp (_String1="MSSQLSERVER", _String2="NETPOPUP") returned -1 [0084.883] _wcsicmp (_String1="MSSQLSERVER", _String2="NETPOPUP") returned -1 [0084.883] _wcsicmp (_String1="MSSQLSERVER", _String2="SQLSERVER") returned -6 [0084.883] _wcsicmp (_String1="MSSQLSERVER", _String2="SQLSERVER") returned -6 [0084.883] _wcsicmp (_String1="MSSQLSERVER", _String2="REPLICATOR") returned -5 [0084.883] _wcsicmp (_String1="MSSQLSERVER", _String2="REPLICATOR") returned -5 [0084.883] _wcsicmp (_String1="MSSQLSERVER", _String2="REMOTEBOOT") returned -5 [0084.883] _wcsicmp (_String1="MSSQLSERVER", _String2="REMOTEBOOT") returned -5 [0084.883] _wcsicmp (_String1="MSSQLSERVER", _String2="TIMESOURCE") returned -7 [0084.884] _wcsicmp (_String1="MSSQLSERVER", _String2="TIMESOURCE") returned -7 [0084.884] _wcsicmp (_String1="MSSQLSERVER", _String2="AFP") returned 12 [0084.884] _wcsicmp (_String1="MSSQLSERVER", _String2="AFP") returned 12 [0084.884] _wcsicmp (_String1="MSSQLSERVER", _String2="UPS") returned -8 [0084.884] _wcsicmp (_String1="MSSQLSERVER", _String2="UPS") returned -8 [0084.884] _wcsicmp (_String1="MSSQLSERVER", _String2="XACTSRV") returned -11 [0084.884] _wcsicmp (_String1="MSSQLSERVER", _String2="XACTSRV") returned -11 [0084.884] _wcsicmp (_String1="MSSQLSERVER", _String2="TCPIP") returned -7 [0084.884] _wcsicmp (_String1="MSSQLSERVER", _String2="TCPIP") returned -7 [0084.884] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x1) returned 0x2f208b0 [0084.885] OpenServiceW (hSCManager=0x2f208b0, lpServiceName="MSSQLSERVER", dwDesiredAccess=0x84) returned 0x0 [0084.886] GetLastError () returned 0x424 [0084.886] CloseServiceHandle (hSCObject=0x2f208b0) returned 1 [0084.928] wcscpy_s (in: _Destination=0x257610, _SizeInWords=0x104, _Source="NETMSG" | out: _Destination="NETMSG") returned 0x0 [0084.928] LoadLibraryExW (lpLibFileName="NETMSG", hFile=0x0, dwFlags=0x20) returned 0x2ea0002 [0084.929] FormatMessageW (in: dwFlags=0x2a00, lpSource=0x2ea0002, dwMessageId=0x889, dwLanguageId=0x0, lpBuffer=0x257c20, nSize=0x800, Arguments=0x2573d0 | out: lpBuffer="The service name is invalid.\r\n") returned 0x1e [0084.931] GetFileType (hFile=0x94) returned 0x2 [0084.931] GetConsoleMode (in: hConsoleHandle=0x94, lpMode=0x2cdf374 | out: lpMode=0x2cdf374) returned 1 [0084.935] WriteConsoleW (in: hConsoleOutput=0x94, lpBuffer=0x257c20*, nNumberOfCharsToWrite=0x1e, lpNumberOfCharsWritten=0x2cdf380, lpReserved=0x0 | out: lpBuffer=0x257c20*, lpNumberOfCharsWritten=0x2cdf380*=0x1e) returned 1 [0084.939] GetFileType (hFile=0x94) returned 0x2 [0084.940] GetConsoleMode (in: hConsoleHandle=0x94, lpMode=0x2cdf374 | out: lpMode=0x2cdf374) returned 1 [0084.941] WriteConsoleW (in: hConsoleOutput=0x94, lpBuffer=0x2312e4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x2cdf380, lpReserved=0x0 | out: lpBuffer=0x2312e4*, lpNumberOfCharsWritten=0x2cdf380*=0x2) returned 1 [0084.943] _ultow (in: _Dest=0x889, _Radix=47051720 | out: _Dest=0x889) returned="2185" [0084.943] FormatMessageW (in: dwFlags=0x2800, lpSource=0x2ea0002, dwMessageId=0xdba, dwLanguageId=0x0, lpBuffer=0x257c20, nSize=0x800, Arguments=0x2573d0 | out: lpBuffer="More help is available by typing NET HELPMSG 2185.\r\n") returned 0x34 [0084.943] GetFileType (hFile=0x94) returned 0x2 [0084.943] GetConsoleMode (in: hConsoleHandle=0x94, lpMode=0x2cdf398 | out: lpMode=0x2cdf398) returned 1 [0084.946] WriteConsoleW (in: hConsoleOutput=0x94, lpBuffer=0x257c20*, nNumberOfCharsToWrite=0x34, lpNumberOfCharsWritten=0x2cdf3a4, lpReserved=0x0 | out: lpBuffer=0x257c20*, lpNumberOfCharsWritten=0x2cdf3a4*=0x34) returned 1 [0084.948] GetFileType (hFile=0x94) returned 0x2 [0084.948] GetConsoleMode (in: hConsoleHandle=0x94, lpMode=0x2cdf398 | out: lpMode=0x2cdf398) returned 1 [0084.949] WriteConsoleW (in: hConsoleOutput=0x94, lpBuffer=0x2312e4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x2cdf3a4, lpReserved=0x0 | out: lpBuffer=0x2312e4*, lpNumberOfCharsWritten=0x2cdf3a4*=0x2) returned 1 [0084.955] NetApiBufferFree (Buffer=0x2f18168) returned 0x0 [0084.955] NetApiBufferFree (Buffer=0x2f181c8) returned 0x0 [0084.955] GetCommandLineW () returned="C:\\WINDOWS\\system32\\net1 stop MSSQLSERVER" [0084.955] exit (_Code=2) Thread: id = 40 os_tid = 0x10e8 Process: id = "15" image_name = "cmd.exe" filename = "c:\\windows\\syswow64\\cmd.exe" page_root = "0x13829000" os_pid = "0x1138" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x13d4" cmd_line = "C:\\WINDOWS\\system32\\cmd.exe /c net stop MSSQL$CONTOSO1" cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000faa5" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 41 os_tid = 0x114c [0087.368] GetModuleHandleA (lpModuleName=0x0) returned 0x11d0000 [0087.368] __set_app_type (_Type=0x1) [0087.369] __p__fmode () returned 0x76953c14 [0087.369] __p__commode () returned 0x769549ec [0087.369] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x11e6fd0) returned 0x0 [0087.369] __getmainargs (in: _Argc=0x11fd1a4, _Argv=0x11fd1a8, _Env=0x11fd1ac, _DoWildCard=0, _StartInfo=0x11fd1b8 | out: _Argc=0x11fd1a4, _Argv=0x11fd1a8, _Env=0x11fd1ac) returned 0 [0087.369] _onexit (_Func=0x11e8030) returned 0x11e8030 [0087.370] _onexit (_Func=0x11e8040) returned 0x11e8040 [0087.370] _onexit (_Func=0x11e8050) returned 0x11e8050 [0087.370] _onexit (_Func=0x11e8060) returned 0x11e8060 [0087.370] _onexit (_Func=0x11e8070) returned 0x11e8070 [0087.371] _onexit (_Func=0x11e8080) returned 0x11e8080 [0087.379] GetCurrentThreadId () returned 0x114c [0087.379] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0x114c) returned 0xbc [0087.379] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x74030000 [0087.380] GetProcAddress (hModule=0x74030000, lpProcName="SetThreadUILanguage") returned 0x74044f70 [0087.380] SetThreadUILanguage (LangId=0x0) returned 0xbf0409 [0087.396] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0087.396] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0xcffb1c | out: phkResult=0xcffb1c*=0x0) returned 0x2 [0087.397] VirtualQuery (in: lpAddress=0xcffb27, lpBuffer=0xcffad4, dwLength=0x1c | out: lpBuffer=0xcffad4*(BaseAddress=0xcff000, AllocationBase=0xc00000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0087.397] VirtualQuery (in: lpAddress=0xc00000, lpBuffer=0xcffad4, dwLength=0x1c | out: lpBuffer=0xcffad4*(BaseAddress=0xc00000, AllocationBase=0xc00000, AllocationProtect=0x4, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000)) returned 0x1c [0087.397] VirtualQuery (in: lpAddress=0xc01000, lpBuffer=0xcffad4, dwLength=0x1c | out: lpBuffer=0xcffad4*(BaseAddress=0xc01000, AllocationBase=0xc00000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x104, Type=0x20000)) returned 0x1c [0087.397] VirtualQuery (in: lpAddress=0xc03000, lpBuffer=0xcffad4, dwLength=0x1c | out: lpBuffer=0xcffad4*(BaseAddress=0xc03000, AllocationBase=0xc00000, AllocationProtect=0x4, RegionSize=0xfd000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0087.397] VirtualQuery (in: lpAddress=0xd00000, lpBuffer=0xcffad4, dwLength=0x1c | out: lpBuffer=0xcffad4*(BaseAddress=0xd00000, AllocationBase=0xd00000, AllocationProtect=0x2, RegionSize=0xc5000, State=0x1000, Protect=0x2, Type=0x40000)) returned 0x1c [0087.398] GetConsoleOutputCP () returned 0x1b5 [0087.410] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x1203850 | out: lpCPInfo=0x1203850) returned 1 [0087.411] SetConsoleCtrlHandler (HandlerRoutine=0x11f7260, Add=1) returned 1 [0087.411] _get_osfhandle (_FileHandle=1) returned 0x90 [0087.411] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x120388c | out: lpMode=0x120388c) returned 1 [0087.413] _get_osfhandle (_FileHandle=0) returned 0x8c [0087.413] GetConsoleMode (in: hConsoleHandle=0x8c, lpMode=0x1203888 | out: lpMode=0x1203888) returned 1 [0087.414] _get_osfhandle (_FileHandle=1) returned 0x90 [0087.414] SetConsoleMode (hConsoleHandle=0x90, dwMode=0x0) returned 1 [0087.415] _get_osfhandle (_FileHandle=1) returned 0x90 [0087.415] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x1203890 | out: lpMode=0x1203890) returned 1 [0087.425] _get_osfhandle (_FileHandle=1) returned 0x90 [0087.425] SetConsoleMode (hConsoleHandle=0x90, dwMode=0x7) returned 1 [0087.427] _get_osfhandle (_FileHandle=0) returned 0x8c [0087.427] GetConsoleMode (in: hConsoleHandle=0x8c, lpMode=0x1203894 | out: lpMode=0x1203894) returned 1 [0087.429] _get_osfhandle (_FileHandle=0) returned 0x8c [0087.429] SetConsoleMode (hConsoleHandle=0x8c, dwMode=0x1e7) returned 1 [0087.431] GetEnvironmentStringsW () returned 0xf64f88* [0087.431] GetProcessHeap () returned 0xf60000 [0087.431] RtlAllocateHeap (HeapHandle=0xf60000, Flags=0x8, Size=0xaca) returned 0xf65a60 [0087.431] FreeEnvironmentStringsA (penv="A") returned 1 [0087.432] GetProcessHeap () returned 0xf60000 [0087.432] RtlAllocateHeap (HeapHandle=0xf60000, Flags=0x8, Size=0x4) returned 0xf648d8 [0087.432] GetEnvironmentStringsW () returned 0xf64f88* [0087.432] GetProcessHeap () returned 0xf60000 [0087.432] RtlAllocateHeap (HeapHandle=0xf60000, Flags=0x8, Size=0xaca) returned 0xf66538 [0087.432] FreeEnvironmentStringsA (penv="A") returned 1 [0087.432] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0xcfea78 | out: phkResult=0xcfea78*=0xcc) returned 0x0 [0087.433] RegQueryValueExW (in: hKey=0xcc, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0xcfea80, lpData=0xcfea84, lpcbData=0xcfea7c*=0x1000 | out: lpType=0xcfea80*=0x0, lpData=0xcfea84*=0x8, lpcbData=0xcfea7c*=0x1000) returned 0x2 [0087.433] RegQueryValueExW (in: hKey=0xcc, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0xcfea80, lpData=0xcfea84, lpcbData=0xcfea7c*=0x1000 | out: lpType=0xcfea80*=0x4, lpData=0xcfea84*=0x1, lpcbData=0xcfea7c*=0x4) returned 0x0 [0087.433] RegQueryValueExW (in: hKey=0xcc, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0xcfea80, lpData=0xcfea84, lpcbData=0xcfea7c*=0x1000 | out: lpType=0xcfea80*=0x0, lpData=0xcfea84*=0x1, lpcbData=0xcfea7c*=0x1000) returned 0x2 [0087.433] RegQueryValueExW (in: hKey=0xcc, lpValueName="DefaultColor", lpReserved=0x0, lpType=0xcfea80, lpData=0xcfea84, lpcbData=0xcfea7c*=0x1000 | out: lpType=0xcfea80*=0x4, lpData=0xcfea84*=0x0, lpcbData=0xcfea7c*=0x4) returned 0x0 [0087.433] RegQueryValueExW (in: hKey=0xcc, lpValueName="CompletionChar", lpReserved=0x0, lpType=0xcfea80, lpData=0xcfea84, lpcbData=0xcfea7c*=0x1000 | out: lpType=0xcfea80*=0x4, lpData=0xcfea84*=0x40, lpcbData=0xcfea7c*=0x4) returned 0x0 [0087.433] RegQueryValueExW (in: hKey=0xcc, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0xcfea80, lpData=0xcfea84, lpcbData=0xcfea7c*=0x1000 | out: lpType=0xcfea80*=0x4, lpData=0xcfea84*=0x40, lpcbData=0xcfea7c*=0x4) returned 0x0 [0087.433] RegQueryValueExW (in: hKey=0xcc, lpValueName="AutoRun", lpReserved=0x0, lpType=0xcfea80, lpData=0xcfea84, lpcbData=0xcfea7c*=0x1000 | out: lpType=0xcfea80*=0x0, lpData=0xcfea84*=0x40, lpcbData=0xcfea7c*=0x1000) returned 0x2 [0087.433] RegCloseKey (hKey=0xcc) returned 0x0 [0087.433] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0xcfea78 | out: phkResult=0xcfea78*=0xcc) returned 0x0 [0087.434] RegQueryValueExW (in: hKey=0xcc, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0xcfea80, lpData=0xcfea84, lpcbData=0xcfea7c*=0x1000 | out: lpType=0xcfea80*=0x0, lpData=0xcfea84*=0x40, lpcbData=0xcfea7c*=0x1000) returned 0x2 [0087.434] RegQueryValueExW (in: hKey=0xcc, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0xcfea80, lpData=0xcfea84, lpcbData=0xcfea7c*=0x1000 | out: lpType=0xcfea80*=0x4, lpData=0xcfea84*=0x1, lpcbData=0xcfea7c*=0x4) returned 0x0 [0087.434] RegQueryValueExW (in: hKey=0xcc, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0xcfea80, lpData=0xcfea84, lpcbData=0xcfea7c*=0x1000 | out: lpType=0xcfea80*=0x0, lpData=0xcfea84*=0x1, lpcbData=0xcfea7c*=0x1000) returned 0x2 [0087.434] RegQueryValueExW (in: hKey=0xcc, lpValueName="DefaultColor", lpReserved=0x0, lpType=0xcfea80, lpData=0xcfea84, lpcbData=0xcfea7c*=0x1000 | out: lpType=0xcfea80*=0x4, lpData=0xcfea84*=0x0, lpcbData=0xcfea7c*=0x4) returned 0x0 [0087.434] RegQueryValueExW (in: hKey=0xcc, lpValueName="CompletionChar", lpReserved=0x0, lpType=0xcfea80, lpData=0xcfea84, lpcbData=0xcfea7c*=0x1000 | out: lpType=0xcfea80*=0x4, lpData=0xcfea84*=0x9, lpcbData=0xcfea7c*=0x4) returned 0x0 [0087.434] RegQueryValueExW (in: hKey=0xcc, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0xcfea80, lpData=0xcfea84, lpcbData=0xcfea7c*=0x1000 | out: lpType=0xcfea80*=0x4, lpData=0xcfea84*=0x9, lpcbData=0xcfea7c*=0x4) returned 0x0 [0087.434] RegQueryValueExW (in: hKey=0xcc, lpValueName="AutoRun", lpReserved=0x0, lpType=0xcfea80, lpData=0xcfea84, lpcbData=0xcfea7c*=0x1000 | out: lpType=0xcfea80*=0x0, lpData=0xcfea84*=0x9, lpcbData=0xcfea7c*=0x1000) returned 0x2 [0087.434] RegCloseKey (hKey=0xcc) returned 0x0 [0087.434] time (in: timer=0x0 | out: timer=0x0) returned 0x5e3302cf [0087.434] srand (_Seed=0x5e3302cf) [0087.434] GetCommandLineW () returned="C:\\WINDOWS\\system32\\cmd.exe /c net stop MSSQL$CONTOSO1" [0087.435] malloc (_Size=0x4000) returned 0x3332700 [0087.435] GetCommandLineW () returned="C:\\WINDOWS\\system32\\cmd.exe /c net stop MSSQL$CONTOSO1" [0087.435] malloc (_Size=0xffce) returned 0x3230048 [0087.436] ??_V@YAXPAX@Z () returned 0xcffa5c [0087.437] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x3230048 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0087.438] malloc (_Size=0xffce) returned 0x3240020 [0087.438] ??_V@YAXPAX@Z () returned 0xcff830 [0087.439] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x3240020, nSize=0x7fe7 | out: lpFilename="C:\\WINDOWS\\SysWOW64\\cmd.exe" (normalized: "c:\\windows\\syswow64\\cmd.exe")) returned 0x1b [0087.439] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x11ff840, nSize=0x2000 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath;C:\\WINDOWS\\system32;C:\\WINDOWS;C:\\WINDOWS\\System32\\Wbem;C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\;C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps") returned 0xbb [0087.440] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x11ff840, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0087.440] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x11ff840, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0087.440] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13 [0087.440] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11 [0087.440] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13 [0087.440] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13 [0087.440] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12 [0087.440] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4 [0087.440] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2 [0087.440] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8 [0087.440] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1 [0087.440] GetProcessHeap () returned 0xf60000 [0087.440] RtlFreeHeap (HeapHandle=0xf60000, Flags=0x0, BaseAddress=0xf65a60) returned 1 [0087.441] GetEnvironmentStringsW () returned 0xf64f88* [0087.441] GetProcessHeap () returned 0xf60000 [0087.441] RtlAllocateHeap (HeapHandle=0xf60000, Flags=0x8, Size=0xae2) returned 0xf67b00 [0087.441] FreeEnvironmentStringsA (penv="A") returned 1 [0087.441] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x11ff840, nSize=0x2000 | out: lpBuffer="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1b [0087.441] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x11ff840, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0087.441] _wcsicmp (_String1="KEYS", _String2="CD") returned 8 [0087.441] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6 [0087.441] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8 [0087.441] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8 [0087.441] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7 [0087.441] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9 [0087.441] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7 [0087.441] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3 [0087.441] malloc (_Size=0xffce) returned 0x324fff8 [0087.442] ??_V@YAXPAX@Z () returned 0xcff5c8 [0087.443] GetProcessHeap () returned 0xf60000 [0087.443] RtlAllocateHeap (HeapHandle=0xf60000, Flags=0x8, Size=0x38) returned 0xf64900 [0087.443] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x324fff8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0087.443] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x7fe7, lpBuffer=0x324fff8, lpFilePart=0xcff614 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0xcff614*="Desktop") returned 0x17 [0087.444] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\Desktop" (normalized: "c:\\users\\fd1hvy\\desktop")) returned 0x11 [0087.445] FindFirstFileW (in: lpFileName="C:\\Users", lpFindFileData=0xcff398 | out: lpFindFileData=0xcff398*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x475bb883, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x475bb883, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 0xf64940 [0087.445] FindClose (in: hFindFile=0xf64940 | out: hFindFile=0xf64940) returned 1 [0087.445] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy", lpFindFileData=0xcff398 | out: lpFindFileData=0xcff398*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20fc850f, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x9de5855d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x9de5855d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD1HVy", cAlternateFileName="")) returned 0xf64940 [0087.446] FindClose (in: hFindFile=0xf64940 | out: hFindFile=0xf64940) returned 1 [0087.446] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", lpFindFileData=0xcff398 | out: lpFindFileData=0xcff398*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x5de49bf6, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0x5de49bf6, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 0xf64940 [0087.446] FindClose (in: hFindFile=0xf64940 | out: hFindFile=0xf64940) returned 1 [0087.446] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\Desktop" (normalized: "c:\\users\\fd1hvy\\desktop")) returned 0x11 [0087.447] SetCurrentDirectoryW (lpPathName="C:\\Users\\FD1HVy\\Desktop" (normalized: "c:\\users\\fd1hvy\\desktop")) returned 1 [0087.447] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Users\\FD1HVy\\Desktop") returned 1 [0087.447] GetProcessHeap () returned 0xf60000 [0087.447] RtlFreeHeap (HeapHandle=0xf60000, Flags=0x0, BaseAddress=0xf67b00) returned 1 [0087.447] GetEnvironmentStringsW () returned 0xf67010* [0087.447] GetProcessHeap () returned 0xf60000 [0087.447] RtlAllocateHeap (HeapHandle=0xf60000, Flags=0x8, Size=0xb1a) returned 0xf67b38 [0087.447] FreeEnvironmentStringsA (penv="=") returned 1 [0087.447] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x3230048 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0087.447] GetProcessHeap () returned 0xf60000 [0087.447] RtlFreeHeap (HeapHandle=0xf60000, Flags=0x0, BaseAddress=0xf64900) returned 1 [0087.447] ??_V@YAXPAX@Z () returned 0x1 [0087.447] ??_V@YAXPAX@Z () returned 0x1 [0087.447] GetProcessHeap () returned 0xf60000 [0087.447] RtlAllocateHeap (HeapHandle=0xf60000, Flags=0x8, Size=0x400e) returned 0xf68660 [0087.448] GetProcessHeap () returned 0xf60000 [0087.448] RtlAllocateHeap (HeapHandle=0xf60000, Flags=0x8, Size=0x3c) returned 0xf64900 [0087.448] GetProcessHeap () returned 0xf60000 [0087.448] RtlFreeHeap (HeapHandle=0xf60000, Flags=0x0, BaseAddress=0xf68660) returned 1 [0087.448] GetConsoleOutputCP () returned 0x1b5 [0087.457] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x1203850 | out: lpCPInfo=0x1203850) returned 1 [0087.457] GetUserDefaultLCID () returned 0x409 [0087.458] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x11ff82c, cchData=8 | out: lpLCData=":") returned 2 [0087.458] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0xcff984, cchData=128 | out: lpLCData="0") returned 2 [0087.458] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0xcff984, cchData=128 | out: lpLCData="0") returned 2 [0087.459] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0xcff984, cchData=128 | out: lpLCData="1") returned 2 [0087.459] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x11ff81c, cchData=8 | out: lpLCData="/") returned 2 [0087.459] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x11ff7b8, cchData=32 | out: lpLCData="Mon") returned 4 [0087.459] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x11ff778, cchData=32 | out: lpLCData="Tue") returned 4 [0087.459] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x11ff738, cchData=32 | out: lpLCData="Wed") returned 4 [0087.459] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x11ff6f8, cchData=32 | out: lpLCData="Thu") returned 4 [0087.459] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x11ff6b8, cchData=32 | out: lpLCData="Fri") returned 4 [0087.459] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x11ff678, cchData=32 | out: lpLCData="Sat") returned 4 [0087.459] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x11ff638, cchData=32 | out: lpLCData="Sun") returned 4 [0087.459] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x11ff80c, cchData=8 | out: lpLCData=".") returned 2 [0087.459] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x11ff7f8, cchData=8 | out: lpLCData=",") returned 2 [0087.459] setlocale (category=0, locale=".OCP") returned="English_United States.437" [0087.464] GetProcessHeap () returned 0xf60000 [0087.464] RtlAllocateHeap (HeapHandle=0xf60000, Flags=0x0, Size=0x20c) returned 0xf65ab0 [0087.464] GetConsoleTitleW (in: lpConsoleTitle=0xf65ab0, nSize=0x104 | out: lpConsoleTitle="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1c [0087.487] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x74030000 [0087.487] GetProcAddress (hModule=0x74030000, lpProcName="CopyFileExW") returned 0x74044330 [0087.488] GetProcAddress (hModule=0x74030000, lpProcName="IsDebuggerPresent") returned 0x74045930 [0087.488] GetProcAddress (hModule=0x74030000, lpProcName="SetConsoleInputExeNameW") returned 0x772c09d0 [0087.488] ??_V@YAXPAX@Z () returned 0x1 [0087.489] GetProcessHeap () returned 0xf60000 [0087.489] RtlAllocateHeap (HeapHandle=0xf60000, Flags=0x8, Size=0x400a) returned 0xf68660 [0087.489] GetProcessHeap () returned 0xf60000 [0087.490] RtlFreeHeap (HeapHandle=0xf60000, Flags=0x0, BaseAddress=0xf68660) returned 1 [0087.490] _wcsicmp (_String1="net", _String2=")") returned 69 [0087.490] _wcsicmp (_String1="FOR", _String2="net") returned -8 [0087.490] _wcsicmp (_String1="FOR/?", _String2="net") returned -8 [0087.490] _wcsicmp (_String1="IF", _String2="net") returned -5 [0087.490] _wcsicmp (_String1="IF/?", _String2="net") returned -5 [0087.491] _wcsicmp (_String1="REM", _String2="net") returned 4 [0087.491] _wcsicmp (_String1="REM/?", _String2="net") returned 4 [0087.491] GetProcessHeap () returned 0xf60000 [0087.491] RtlAllocateHeap (HeapHandle=0xf60000, Flags=0x8, Size=0x58) returned 0xf64990 [0087.491] GetProcessHeap () returned 0xf60000 [0087.491] RtlAllocateHeap (HeapHandle=0xf60000, Flags=0x8, Size=0x10) returned 0xf649f0 [0087.492] GetProcessHeap () returned 0xf60000 [0087.492] RtlAllocateHeap (HeapHandle=0xf60000, Flags=0x8, Size=0x32) returned 0xf64a08 [0087.493] GetConsoleTitleW (in: lpConsoleTitle=0xcff878, nSize=0x104 | out: lpConsoleTitle="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1c [0087.495] malloc (_Size=0xffce) returned 0x3242aa0 [0087.495] ??_V@YAXPAX@Z () returned 0xcff604 [0087.500] malloc (_Size=0xffce) returned 0x3252a78 [0087.500] ??_V@YAXPAX@Z () returned 0xcff3bc [0087.501] _wcsicmp (_String1="net", _String2="DIR") returned 10 [0087.501] _wcsicmp (_String1="net", _String2="ERASE") returned 9 [0087.501] _wcsicmp (_String1="net", _String2="DEL") returned 10 [0087.501] _wcsicmp (_String1="net", _String2="TYPE") returned -6 [0087.501] _wcsicmp (_String1="net", _String2="COPY") returned 11 [0087.501] _wcsicmp (_String1="net", _String2="CD") returned 11 [0087.501] _wcsicmp (_String1="net", _String2="CHDIR") returned 11 [0087.501] _wcsicmp (_String1="net", _String2="RENAME") returned -4 [0087.501] _wcsicmp (_String1="net", _String2="REN") returned -4 [0087.502] _wcsicmp (_String1="net", _String2="ECHO") returned 9 [0087.502] _wcsicmp (_String1="net", _String2="SET") returned -5 [0087.502] _wcsicmp (_String1="net", _String2="PAUSE") returned -2 [0087.502] _wcsicmp (_String1="net", _String2="DATE") returned 10 [0087.502] _wcsicmp (_String1="net", _String2="TIME") returned -6 [0087.502] _wcsicmp (_String1="net", _String2="PROMPT") returned -2 [0087.502] _wcsicmp (_String1="net", _String2="MD") returned 1 [0087.502] _wcsicmp (_String1="net", _String2="MKDIR") returned 1 [0087.502] _wcsicmp (_String1="net", _String2="RD") returned -4 [0087.502] _wcsicmp (_String1="net", _String2="RMDIR") returned -4 [0087.502] _wcsicmp (_String1="net", _String2="PATH") returned -2 [0087.502] _wcsicmp (_String1="net", _String2="GOTO") returned 7 [0087.502] _wcsicmp (_String1="net", _String2="SHIFT") returned -5 [0087.502] _wcsicmp (_String1="net", _String2="CLS") returned 11 [0087.502] _wcsicmp (_String1="net", _String2="CALL") returned 11 [0087.502] _wcsicmp (_String1="net", _String2="VERIFY") returned -8 [0087.502] _wcsicmp (_String1="net", _String2="VER") returned -8 [0087.502] _wcsicmp (_String1="net", _String2="VOL") returned -8 [0087.502] _wcsicmp (_String1="net", _String2="EXIT") returned 9 [0087.502] _wcsicmp (_String1="net", _String2="SETLOCAL") returned -5 [0087.502] _wcsicmp (_String1="net", _String2="ENDLOCAL") returned 9 [0087.502] _wcsicmp (_String1="net", _String2="TITLE") returned -6 [0087.502] _wcsicmp (_String1="net", _String2="START") returned -5 [0087.502] _wcsicmp (_String1="net", _String2="DPATH") returned 10 [0087.502] _wcsicmp (_String1="net", _String2="KEYS") returned 3 [0087.502] _wcsicmp (_String1="net", _String2="MOVE") returned 1 [0087.503] _wcsicmp (_String1="net", _String2="PUSHD") returned -2 [0087.503] _wcsicmp (_String1="net", _String2="POPD") returned -2 [0087.503] _wcsicmp (_String1="net", _String2="ASSOC") returned 13 [0087.503] _wcsicmp (_String1="net", _String2="FTYPE") returned 8 [0087.503] _wcsicmp (_String1="net", _String2="BREAK") returned 12 [0087.503] _wcsicmp (_String1="net", _String2="COLOR") returned 11 [0087.503] _wcsicmp (_String1="net", _String2="MKLINK") returned 1 [0087.503] _wcsicmp (_String1="net", _String2="DIR") returned 10 [0087.503] _wcsicmp (_String1="net", _String2="ERASE") returned 9 [0087.503] _wcsicmp (_String1="net", _String2="DEL") returned 10 [0087.503] _wcsicmp (_String1="net", _String2="TYPE") returned -6 [0087.503] _wcsicmp (_String1="net", _String2="COPY") returned 11 [0087.503] _wcsicmp (_String1="net", _String2="CD") returned 11 [0087.503] _wcsicmp (_String1="net", _String2="CHDIR") returned 11 [0087.503] _wcsicmp (_String1="net", _String2="RENAME") returned -4 [0087.503] _wcsicmp (_String1="net", _String2="REN") returned -4 [0087.503] _wcsicmp (_String1="net", _String2="ECHO") returned 9 [0087.503] _wcsicmp (_String1="net", _String2="SET") returned -5 [0087.503] _wcsicmp (_String1="net", _String2="PAUSE") returned -2 [0087.503] _wcsicmp (_String1="net", _String2="DATE") returned 10 [0087.503] _wcsicmp (_String1="net", _String2="TIME") returned -6 [0087.503] _wcsicmp (_String1="net", _String2="PROMPT") returned -2 [0087.503] _wcsicmp (_String1="net", _String2="MD") returned 1 [0087.503] _wcsicmp (_String1="net", _String2="MKDIR") returned 1 [0087.503] _wcsicmp (_String1="net", _String2="RD") returned -4 [0087.503] _wcsicmp (_String1="net", _String2="RMDIR") returned -4 [0087.503] _wcsicmp (_String1="net", _String2="PATH") returned -2 [0087.504] _wcsicmp (_String1="net", _String2="GOTO") returned 7 [0087.504] _wcsicmp (_String1="net", _String2="SHIFT") returned -5 [0087.504] _wcsicmp (_String1="net", _String2="CLS") returned 11 [0087.504] _wcsicmp (_String1="net", _String2="CALL") returned 11 [0087.504] _wcsicmp (_String1="net", _String2="VERIFY") returned -8 [0087.504] _wcsicmp (_String1="net", _String2="VER") returned -8 [0087.504] _wcsicmp (_String1="net", _String2="VOL") returned -8 [0087.504] _wcsicmp (_String1="net", _String2="EXIT") returned 9 [0087.504] _wcsicmp (_String1="net", _String2="SETLOCAL") returned -5 [0087.504] _wcsicmp (_String1="net", _String2="ENDLOCAL") returned 9 [0087.504] _wcsicmp (_String1="net", _String2="TITLE") returned -6 [0087.504] _wcsicmp (_String1="net", _String2="START") returned -5 [0087.504] _wcsicmp (_String1="net", _String2="DPATH") returned 10 [0087.504] _wcsicmp (_String1="net", _String2="KEYS") returned 3 [0087.504] _wcsicmp (_String1="net", _String2="MOVE") returned 1 [0087.504] _wcsicmp (_String1="net", _String2="PUSHD") returned -2 [0087.504] _wcsicmp (_String1="net", _String2="POPD") returned -2 [0087.504] _wcsicmp (_String1="net", _String2="ASSOC") returned 13 [0087.504] _wcsicmp (_String1="net", _String2="FTYPE") returned 8 [0087.504] _wcsicmp (_String1="net", _String2="BREAK") returned 12 [0087.504] _wcsicmp (_String1="net", _String2="COLOR") returned 11 [0087.504] _wcsicmp (_String1="net", _String2="MKLINK") returned 1 [0087.504] _wcsicmp (_String1="net", _String2="FOR") returned 8 [0087.504] _wcsicmp (_String1="net", _String2="IF") returned 5 [0087.504] _wcsicmp (_String1="net", _String2="REM") returned -4 [0087.505] ??_V@YAXPAX@Z () returned 0x1 [0087.505] GetProcessHeap () returned 0xf60000 [0087.505] RtlAllocateHeap (HeapHandle=0xf60000, Flags=0x8, Size=0xffd6) returned 0xf68660 [0087.506] GetProcessHeap () returned 0xf60000 [0087.506] RtlAllocateHeap (HeapHandle=0xf60000, Flags=0x8, Size=0x3a) returned 0xf64a48 [0087.506] _wcsnicmp (_String1="net", _String2="cmd ", _MaxCount=0x4) returned 11 [0087.506] malloc (_Size=0xffce) returned 0x3252a78 [0087.506] ??_V@YAXPAX@Z () returned 0xcff13c [0087.506] GetProcessHeap () returned 0xf60000 [0087.506] RtlAllocateHeap (HeapHandle=0xf60000, Flags=0x8, Size=0x1ffa4) returned 0xf78640 [0087.509] SetErrorMode (uMode=0x0) returned 0x0 [0087.509] SetErrorMode (uMode=0x1) returned 0x0 [0087.509] GetFullPathNameW (in: lpFileName=".", nBufferLength=0xffce, lpBuffer=0xf78648, lpFilePart=0xcff15c | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0xcff15c*="Desktop") returned 0x17 [0087.510] SetErrorMode (uMode=0x0) returned 0x1 [0087.510] GetProcessHeap () returned 0xf60000 [0087.510] RtlReAllocateHeap (Heap=0xf60000, Flags=0x0, Ptr=0xf78640, Size=0x40) returned 0xf78640 [0087.510] GetProcessHeap () returned 0xf60000 [0087.510] RtlSizeHeap (HeapHandle=0xf60000, Flags=0x0, MemoryPointer=0xf78640) returned 0x40 [0087.510] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x11ff840, nSize=0x2000 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath;C:\\WINDOWS\\system32;C:\\WINDOWS;C:\\WINDOWS\\System32\\Wbem;C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\;C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps") returned 0xbb [0087.510] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1 [0087.510] GetProcessHeap () returned 0xf60000 [0087.510] RtlAllocateHeap (HeapHandle=0xf60000, Flags=0x8, Size=0x1b4) returned 0xf65cc8 [0087.510] GetProcessHeap () returned 0xf60000 [0087.510] RtlAllocateHeap (HeapHandle=0xf60000, Flags=0x8, Size=0x360) returned 0xf65e88 [0087.649] GetProcessHeap () returned 0xf60000 [0087.649] RtlReAllocateHeap (Heap=0xf60000, Flags=0x0, Ptr=0xf65e88, Size=0x1b6) returned 0xf65e88 [0087.649] GetProcessHeap () returned 0xf60000 [0087.650] RtlSizeHeap (HeapHandle=0xf60000, Flags=0x0, MemoryPointer=0xf65e88) returned 0x1b6 [0087.650] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x11ff840, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0087.650] GetProcessHeap () returned 0xf60000 [0087.650] RtlAllocateHeap (HeapHandle=0xf60000, Flags=0x8, Size=0xe0) returned 0xf66048 [0087.652] GetProcessHeap () returned 0xf60000 [0087.652] RtlReAllocateHeap (Heap=0xf60000, Flags=0x0, Ptr=0xf66048, Size=0x76) returned 0xf66048 [0087.652] GetProcessHeap () returned 0xf60000 [0087.652] RtlSizeHeap (HeapHandle=0xf60000, Flags=0x0, MemoryPointer=0xf66048) returned 0x76 [0087.652] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0087.653] FindFirstFileExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\net.*", fInfoLevelId=0x1, lpFindFileData=0xcfeee8, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0xcfeee8) returned 0xffffffff [0087.653] GetLastError () returned 0x2 [0087.653] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0087.653] FindFirstFileExW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\net.*", fInfoLevelId=0x1, lpFindFileData=0xcfeee8, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0xcfeee8) returned 0xffffffff [0087.654] GetLastError () returned 0x2 [0087.654] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0087.655] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\system32\\net.*", fInfoLevelId=0x1, lpFindFileData=0xcfeee8, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0xcfeee8) returned 0xf660c8 [0087.655] GetProcessHeap () returned 0xf60000 [0087.655] RtlAllocateHeap (HeapHandle=0xf60000, Flags=0x0, Size=0x14) returned 0xf64a90 [0087.655] FindClose (in: hFindFile=0xf660c8 | out: hFindFile=0xf660c8) returned 1 [0087.655] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\system32\\net.COM", fInfoLevelId=0x1, lpFindFileData=0xcfeee8, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0xcfeee8) returned 0xffffffff [0087.655] GetLastError () returned 0x2 [0087.655] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\system32\\net.EXE", fInfoLevelId=0x1, lpFindFileData=0xcfeee8, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0xcfeee8) returned 0xf660c8 [0087.656] GetProcessHeap () returned 0xf60000 [0087.656] RtlReAllocateHeap (Heap=0xf60000, Flags=0x0, Ptr=0xf64a90, Size=0x4) returned 0xf64a90 [0087.656] FindClose (in: hFindFile=0xf660c8 | out: hFindFile=0xf660c8) returned 1 [0087.656] _wcsicmp (_String1=".EXE", _String2=".BAT") returned 3 [0087.656] _wcsicmp (_String1=".EXE", _String2=".CMD") returned 2 [0087.656] ??_V@YAXPAX@Z () returned 0x1 [0087.656] GetConsoleTitleW (in: lpConsoleTitle=0xcff3ec, nSize=0x104 | out: lpConsoleTitle="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1c [0087.659] InitializeProcThreadAttributeList (in: lpAttributeList=0xcff318, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0xcff304 | out: lpAttributeList=0xcff318, lpSize=0xcff304) returned 1 [0087.659] UpdateProcThreadAttribute (in: lpAttributeList=0xcff318, dwFlags=0x0, Attribute=0x60001, lpValue=0xcff300, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0xcff318, lpPreviousValue=0x0) returned 1 [0087.659] GetStartupInfoW (in: lpStartupInfo=0xcff350 | out: lpStartupInfo=0xcff350*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\WINDOWS\\system32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x144, lpReserved2=0xf61b64, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) [0087.659] GetProcessHeap () returned 0xf60000 [0087.659] RtlAllocateHeap (HeapHandle=0xf60000, Flags=0x8, Size=0x18) returned 0xf64aa0 [0087.659] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38 [0087.659] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2 [0087.659] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2 [0087.659] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0087.659] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0087.660] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0087.660] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3 [0087.660] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3 [0087.660] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5 [0087.660] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5 [0087.660] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9 [0087.660] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9 [0087.660] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11 [0087.660] _wcsnicmp (_String1="COPYCMD", _String2="OneDriv", _MaxCount=0x7) returned -12 [0087.660] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12 [0087.660] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13 [0087.660] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13 [0087.660] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0087.660] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0087.660] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0087.660] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0087.660] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0087.660] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0087.660] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0087.660] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0087.660] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0087.660] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13 [0087.661] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13 [0087.661] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13 [0087.661] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16 [0087.661] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16 [0087.661] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17 [0087.661] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17 [0087.661] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18 [0087.661] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18 [0087.661] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18 [0087.661] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18 [0087.661] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20 [0087.661] GetProcessHeap () returned 0xf60000 [0087.661] RtlFreeHeap (HeapHandle=0xf60000, Flags=0x0, BaseAddress=0xf64aa0) returned 1 [0087.661] GetProcessHeap () returned 0xf60000 [0087.661] RtlAllocateHeap (HeapHandle=0xf60000, Flags=0x8, Size=0xa) returned 0xf64aa0 [0087.661] lstrcmpW (lpString1="\\net.exe", lpString2="\\XCOPY.EXE") returned -1 [0087.664] _get_osfhandle (_FileHandle=1) returned 0x90 [0087.664] SetConsoleMode (hConsoleHandle=0x90, dwMode=0x3) returned 1 [0087.665] _get_osfhandle (_FileHandle=0) returned 0x8c [0087.665] SetConsoleMode (hConsoleHandle=0x8c, dwMode=0x1f7) returned 1 [0087.666] CreateProcessW (in: lpApplicationName="C:\\WINDOWS\\system32\\net.exe", lpCommandLine="net stop MSSQL$CONTOSO1", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\FD1HVy\\Desktop", lpStartupInfo=0xcff2a0*(cb=0x48, lpReserved=0x0, lpDesktop="WinSta0\\Default", lpTitle="net stop MSSQL$CONTOSO1", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0xcff2ec | out: lpCommandLine="net stop MSSQL$CONTOSO1", lpProcessInformation=0xcff2ec*(hProcess=0xe0, hThread=0xdc, dwProcessId=0x1208, dwThreadId=0x121c)) returned 1 [0087.691] CloseHandle (hObject=0xdc) returned 1 [0087.691] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1 [0087.691] GetProcessHeap () returned 0xf60000 [0087.691] RtlFreeHeap (HeapHandle=0xf60000, Flags=0x0, BaseAddress=0xf67b38) returned 1 [0087.691] GetEnvironmentStringsW () returned 0xf67010* [0087.691] GetProcessHeap () returned 0xf60000 [0087.691] RtlAllocateHeap (HeapHandle=0xf60000, Flags=0x8, Size=0xb1a) returned 0xf67b38 [0087.691] FreeEnvironmentStringsA (penv="=") returned 1 [0087.691] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0xffffffff) returned 0x0 [0088.117] GetExitCodeProcess (in: hProcess=0xe0, lpExitCode=0xcff284 | out: lpExitCode=0xcff284*=0x2) returned 1 [0088.117] CloseHandle (hObject=0xe0) returned 1 [0088.118] _vsnwprintf (in: _Buffer=0xcff36c, _BufferCount=0x13, _Format="%08X", _ArgList=0xcff28c | out: _Buffer="00000002") returned 8 [0088.118] SetEnvironmentVariableW (lpName="=ExitCode", lpValue="00000002") returned 1 [0088.119] GetProcessHeap () returned 0xf60000 [0088.119] RtlFreeHeap (HeapHandle=0xf60000, Flags=0x0, BaseAddress=0xf67b38) returned 1 [0088.119] GetEnvironmentStringsW () returned 0xf67010* [0088.119] GetProcessHeap () returned 0xf60000 [0088.119] RtlAllocateHeap (HeapHandle=0xf60000, Flags=0x8, Size=0xb40) returned 0xf791d0 [0088.119] FreeEnvironmentStringsA (penv="=") returned 1 [0088.119] SetEnvironmentVariableW (lpName="=ExitCodeAscii", lpValue=0x0) returned 1 [0088.119] GetProcessHeap () returned 0xf60000 [0088.119] RtlFreeHeap (HeapHandle=0xf60000, Flags=0x0, BaseAddress=0xf791d0) returned 1 [0088.119] GetEnvironmentStringsW () returned 0xf67010* [0088.119] GetProcessHeap () returned 0xf60000 [0088.119] RtlAllocateHeap (HeapHandle=0xf60000, Flags=0x8, Size=0xb40) returned 0xf791d0 [0088.119] FreeEnvironmentStringsA (penv="=") returned 1 [0088.119] GetProcessHeap () returned 0xf60000 [0088.119] RtlFreeHeap (HeapHandle=0xf60000, Flags=0x0, BaseAddress=0xf64aa0) returned 1 [0088.119] DeleteProcThreadAttributeList (in: lpAttributeList=0xcff318 | out: lpAttributeList=0xcff318) [0088.119] ??_V@YAXPAX@Z () returned 0x1 [0088.119] _get_osfhandle (_FileHandle=1) returned 0x90 [0088.119] SetConsoleMode (hConsoleHandle=0x90, dwMode=0x3) returned 1 [0088.120] _get_osfhandle (_FileHandle=1) returned 0x90 [0088.120] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x1203890 | out: lpMode=0x1203890) returned 1 [0088.129] _get_osfhandle (_FileHandle=1) returned 0x90 [0088.129] SetConsoleMode (hConsoleHandle=0x90, dwMode=0x7) returned 1 [0088.132] _get_osfhandle (_FileHandle=0) returned 0x8c [0088.132] GetConsoleMode (in: hConsoleHandle=0x8c, lpMode=0x1203894 | out: lpMode=0x1203894) returned 1 [0088.133] _get_osfhandle (_FileHandle=0) returned 0x8c [0088.133] SetConsoleMode (hConsoleHandle=0x8c, dwMode=0x1e7) returned 1 [0088.134] SetConsoleInputExeNameW () returned 0x1 [0088.134] GetConsoleOutputCP () returned 0x1b5 [0088.135] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x1203850 | out: lpCPInfo=0x1203850) returned 1 [0088.135] SetThreadUILanguage (LangId=0x0) returned 0xbf0409 [0088.137] exit (_Code=2) [0088.137] ??_V@YAXPAX@Z () returned 0x1 Thread: id = 47 os_tid = 0x11ec Process: id = "16" image_name = "conhost.exe" filename = "c:\\windows\\system32\\conhost.exe" page_root = "0xebcb000" os_pid = "0x1160" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "15" os_parent_pid = "0x1138" cmd_line = "\\??\\C:\\WINDOWS\\system32\\conhost.exe 0xffffffff -ForceV1" cur_dir = "C:\\WINDOWS" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000faa5" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 42 os_tid = 0x1174 Thread: id = 43 os_tid = 0x1188 Thread: id = 44 os_tid = 0x119c Thread: id = 45 os_tid = 0x11c4 Thread: id = 46 os_tid = 0x11d8 Process: id = "17" image_name = "net.exe" filename = "c:\\windows\\syswow64\\net.exe" page_root = "0x4662000" os_pid = "0x1208" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "15" os_parent_pid = "0x1138" cmd_line = "net stop MSSQL$CONTOSO1" cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000faa5" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 48 os_tid = 0x121c Thread: id = 49 os_tid = 0x1230 Process: id = "18" image_name = "net1.exe" filename = "c:\\windows\\syswow64\\net1.exe" page_root = "0x5269000" os_pid = "0x1244" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "17" os_parent_pid = "0x1208" cmd_line = "C:\\WINDOWS\\system32\\net1 stop MSSQL$CONTOSO1" cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000faa5" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 50 os_tid = 0x1258 [0087.980] GetModuleHandleA (lpModuleName=0x0) returned 0x230000 [0087.980] __set_app_type (_Type=0x1) [0087.980] __p__fmode () returned 0x76953c14 [0087.980] __p__commode () returned 0x769549ec [0087.980] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x236f20) returned 0x0 [0087.980] __getmainargs (in: _Argc=0x24f608, _Argv=0x24f60c, _Env=0x24f610, _DoWildCard=0, _StartInfo=0x24f61c | out: _Argc=0x24f608, _Argv=0x24f60c, _Env=0x24f610) returned 0 [0087.981] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0087.981] GetConsoleOutputCP () returned 0x1b5 [0087.983] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x256fa0 | out: lpCPInfo=0x256fa0) returned 1 [0087.983] SetThreadUILanguage (LangId=0x0) returned 0x3170409 [0087.987] sprintf_s (in: _DstBuf=0x32df828, _DstSize=0xc, _Format=".%u" | out: _DstBuf=".437") returned 4 [0087.988] setlocale (category=0, locale=".437") returned="English_United States.437" [0087.989] GetStdHandle (nStdHandle=0xfffffff5) returned 0x90 [0087.989] GetStdHandle (nStdHandle=0xfffffff4) returned 0x94 [0087.989] GetCommandLineW () returned="C:\\WINDOWS\\system32\\net1 stop MSSQL$CONTOSO1" [0087.989] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x32df5d0, nSize=0x104 | out: lpFilename="C:\\WINDOWS\\SysWOW64\\net1.exe" (normalized: "c:\\windows\\syswow64\\net1.exe")) returned 0x1c [0087.990] RtlAllocateHeap (HeapHandle=0x3480000, Flags=0x0, Size=0x66) returned 0x34804a0 [0087.990] NetApiBufferAllocate (in: ByteCount=0x10, Buffer=0x32df5cc | out: Buffer=0x32df5cc*=0x34880d8) returned 0x0 [0087.990] NetApiBufferAllocate (in: ByteCount=0x10, Buffer=0x32df5c8 | out: Buffer=0x32df5c8*=0x34880f0) returned 0x0 [0087.990] __iob_func () returned 0x76952608 [0087.990] _fileno (_File=0x76952608) returned 0 [0087.990] _setmode (_FileHandle=0, _Mode=16384) returned 16384 [0087.990] _wcsicmp (_String1="accounts", _String2="stop") returned -18 [0087.990] _wcsicmp (_String1="computer", _String2="stop") returned -16 [0087.990] _wcsicmp (_String1="config", _String2="stop") returned -16 [0087.990] _wcsicmp (_String1="continue", _String2="stop") returned -16 [0087.990] _wcsicmp (_String1="cont", _String2="stop") returned -16 [0087.990] _wcsicmp (_String1="file", _String2="stop") returned -13 [0087.990] _wcsicmp (_String1="files", _String2="stop") returned -13 [0087.990] _wcsicmp (_String1="group", _String2="stop") returned -12 [0087.990] _wcsicmp (_String1="groups", _String2="stop") returned -12 [0087.990] _wcsicmp (_String1="help", _String2="stop") returned -11 [0087.990] _wcsicmp (_String1="helpmsg", _String2="stop") returned -11 [0087.990] _wcsicmp (_String1="localgroup", _String2="stop") returned -7 [0087.990] _wcsicmp (_String1="pause", _String2="stop") returned -3 [0087.990] _wcsicmp (_String1="session", _String2="stop") returned -15 [0087.990] _wcsicmp (_String1="sessions", _String2="stop") returned -15 [0087.990] _wcsicmp (_String1=0x231ffc, _String2="stop") returned -15 [0087.990] _wcsicmp (_String1="share", _String2="stop") returned -12 [0087.991] _wcsicmp (_String1="start", _String2="stop") returned -14 [0087.991] _wcsicmp (_String1="stats", _String2="stop") returned -14 [0087.991] _wcsicmp (_String1="statistics", _String2="stop") returned -14 [0087.991] _wcsicmp (_String1="stop", _String2="stop") returned 0 [0087.991] _wcsicmp (_String1="accounts", _String2="MSSQL$CONTOSO1") returned -12 [0087.991] _wcsicmp (_String1="computer", _String2="MSSQL$CONTOSO1") returned -10 [0087.991] _wcsicmp (_String1="config", _String2="MSSQL$CONTOSO1") returned -10 [0087.991] _wcsicmp (_String1="continue", _String2="MSSQL$CONTOSO1") returned -10 [0087.991] _wcsicmp (_String1="cont", _String2="MSSQL$CONTOSO1") returned -10 [0087.991] _wcsicmp (_String1="file", _String2="MSSQL$CONTOSO1") returned -7 [0087.991] _wcsicmp (_String1="files", _String2="MSSQL$CONTOSO1") returned -7 [0087.991] _wcsicmp (_String1="group", _String2="MSSQL$CONTOSO1") returned -6 [0087.991] _wcsicmp (_String1="groups", _String2="MSSQL$CONTOSO1") returned -6 [0087.991] _wcsicmp (_String1="help", _String2="MSSQL$CONTOSO1") returned -5 [0087.991] _wcsicmp (_String1="helpmsg", _String2="MSSQL$CONTOSO1") returned -5 [0087.991] _wcsicmp (_String1="localgroup", _String2="MSSQL$CONTOSO1") returned -1 [0087.991] _wcsicmp (_String1="pause", _String2="MSSQL$CONTOSO1") returned 3 [0087.991] _wcsicmp (_String1="session", _String2="MSSQL$CONTOSO1") returned 6 [0087.991] _wcsicmp (_String1="sessions", _String2="MSSQL$CONTOSO1") returned 6 [0087.991] _wcsicmp (_String1="sess", _String2="MSSQL$CONTOSO1") returned 6 [0087.991] _wcsicmp (_String1="share", _String2="MSSQL$CONTOSO1") returned 6 [0087.991] _wcsicmp (_String1="start", _String2="MSSQL$CONTOSO1") returned 6 [0087.991] _wcsicmp (_String1="stats", _String2="MSSQL$CONTOSO1") returned 6 [0087.991] _wcsicmp (_String1="statistics", _String2="MSSQL$CONTOSO1") returned 6 [0087.991] _wcsicmp (_String1="stop", _String2="MSSQL$CONTOSO1") returned 6 [0087.991] _wcsicmp (_String1="time", _String2="MSSQL$CONTOSO1") returned 7 [0087.991] _wcsicmp (_String1="user", _String2="MSSQL$CONTOSO1") returned 8 [0087.991] _wcsicmp (_String1="users", _String2="MSSQL$CONTOSO1") returned 8 [0087.991] _wcsicmp (_String1="msg", _String2="MSSQL$CONTOSO1") returned -12 [0087.992] _wcsicmp (_String1="messenger", _String2="MSSQL$CONTOSO1") returned -14 [0087.992] _wcsicmp (_String1="receiver", _String2="MSSQL$CONTOSO1") returned 5 [0087.992] _wcsicmp (_String1="rcv", _String2="MSSQL$CONTOSO1") returned 5 [0087.992] _wcsicmp (_String1="netpopup", _String2="MSSQL$CONTOSO1") returned 1 [0087.992] _wcsicmp (_String1="redirector", _String2="MSSQL$CONTOSO1") returned 5 [0087.992] _wcsicmp (_String1="redir", _String2="MSSQL$CONTOSO1") returned 5 [0087.992] _wcsicmp (_String1="rdr", _String2="MSSQL$CONTOSO1") returned 5 [0087.992] _wcsicmp (_String1="workstation", _String2="MSSQL$CONTOSO1") returned 10 [0087.992] _wcsicmp (_String1="work", _String2="MSSQL$CONTOSO1") returned 10 [0087.992] _wcsicmp (_String1="wksta", _String2="MSSQL$CONTOSO1") returned 10 [0087.992] _wcsicmp (_String1="prdr", _String2="MSSQL$CONTOSO1") returned 3 [0087.992] _wcsicmp (_String1="devrdr", _String2="MSSQL$CONTOSO1") returned -9 [0087.992] _wcsicmp (_String1="lanmanworkstation", _String2="MSSQL$CONTOSO1") returned -1 [0087.992] _wcsicmp (_String1="server", _String2="MSSQL$CONTOSO1") returned 6 [0087.992] _wcsicmp (_String1="svr", _String2="MSSQL$CONTOSO1") returned 6 [0087.992] _wcsicmp (_String1="srv", _String2="MSSQL$CONTOSO1") returned 6 [0087.992] _wcsicmp (_String1="lanmanserver", _String2="MSSQL$CONTOSO1") returned -1 [0087.992] _wcsicmp (_String1="alerter", _String2="MSSQL$CONTOSO1") returned -12 [0087.992] _wcsicmp (_String1="netlogon", _String2="MSSQL$CONTOSO1") returned 1 [0087.992] _wcsupr (in: _String="MSSQL$CONTOSO1" | out: _String="MSSQL$CONTOSO1") returned="MSSQL$CONTOSO1" [0087.992] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x80000000) returned 0x3490160 [0088.000] GetServiceKeyNameW (in: hSCManager=0x3490160, lpDisplayName="MSSQL$CONTOSO1", lpServiceName=0x258c28, lpcchBuffer=0x32df53c | out: lpServiceName="", lpcchBuffer=0x32df53c) returned 0 [0088.002] _wcsicmp (_String1="msg", _String2="MSSQL$CONTOSO1") returned -12 [0088.002] _wcsicmp (_String1="messenger", _String2="MSSQL$CONTOSO1") returned -14 [0088.002] _wcsicmp (_String1="receiver", _String2="MSSQL$CONTOSO1") returned 5 [0088.002] _wcsicmp (_String1="rcv", _String2="MSSQL$CONTOSO1") returned 5 [0088.002] _wcsicmp (_String1="redirector", _String2="MSSQL$CONTOSO1") returned 5 [0088.002] _wcsicmp (_String1="redir", _String2="MSSQL$CONTOSO1") returned 5 [0088.002] _wcsicmp (_String1="rdr", _String2="MSSQL$CONTOSO1") returned 5 [0088.002] _wcsicmp (_String1="workstation", _String2="MSSQL$CONTOSO1") returned 10 [0088.002] _wcsicmp (_String1="work", _String2="MSSQL$CONTOSO1") returned 10 [0088.002] _wcsicmp (_String1="wksta", _String2="MSSQL$CONTOSO1") returned 10 [0088.002] _wcsicmp (_String1="prdr", _String2="MSSQL$CONTOSO1") returned 3 [0088.002] _wcsicmp (_String1="devrdr", _String2="MSSQL$CONTOSO1") returned -9 [0088.003] _wcsicmp (_String1="lanmanworkstation", _String2="MSSQL$CONTOSO1") returned -1 [0088.003] _wcsicmp (_String1="server", _String2="MSSQL$CONTOSO1") returned 6 [0088.003] _wcsicmp (_String1="svr", _String2="MSSQL$CONTOSO1") returned 6 [0088.003] _wcsicmp (_String1="srv", _String2="MSSQL$CONTOSO1") returned 6 [0088.003] _wcsicmp (_String1="lanmanserver", _String2="MSSQL$CONTOSO1") returned -1 [0088.003] _wcsicmp (_String1="alerter", _String2="MSSQL$CONTOSO1") returned -12 [0088.003] _wcsicmp (_String1="netlogon", _String2="MSSQL$CONTOSO1") returned 1 [0088.003] _wcsicmp (_String1="MSSQL$CONTOSO1", _String2="WORKSTATION") returned -10 [0088.003] _wcsicmp (_String1="MSSQL$CONTOSO1", _String2="LanmanWorkstation") returned 1 [0088.003] _wcsicmp (_String1="MSSQL$CONTOSO1", _String2="SERVER") returned -6 [0088.003] _wcsicmp (_String1="MSSQL$CONTOSO1", _String2="LanmanServer") returned 1 [0088.003] _wcsicmp (_String1="MSSQL$CONTOSO1", _String2="BROWSER") returned 11 [0088.003] _wcsicmp (_String1="MSSQL$CONTOSO1", _String2="BROWSER") returned 11 [0088.003] _wcsicmp (_String1="MSSQL$CONTOSO1", _String2="MESSENGER") returned 14 [0088.003] _wcsicmp (_String1="MSSQL$CONTOSO1", _String2="MESSENGER") returned 14 [0088.003] _wcsicmp (_String1="MSSQL$CONTOSO1", _String2="NETRUN") returned -1 [0088.003] _wcsicmp (_String1="MSSQL$CONTOSO1", _String2="NETRUN") returned -1 [0088.003] _wcsicmp (_String1="MSSQL$CONTOSO1", _String2="SPOOLER") returned -6 [0088.003] _wcsicmp (_String1="MSSQL$CONTOSO1", _String2="SPOOLER") returned -6 [0088.003] _wcsicmp (_String1="MSSQL$CONTOSO1", _String2="ALERTER") returned 12 [0088.003] _wcsicmp (_String1="MSSQL$CONTOSO1", _String2="ALERTER") returned 12 [0088.003] _wcsicmp (_String1="MSSQL$CONTOSO1", _String2="NETLOGON") returned -1 [0088.003] _wcsicmp (_String1="MSSQL$CONTOSO1", _String2="NETLOGON") returned -1 [0088.003] _wcsicmp (_String1="MSSQL$CONTOSO1", _String2="NETPOPUP") returned -1 [0088.003] _wcsicmp (_String1="MSSQL$CONTOSO1", _String2="NETPOPUP") returned -1 [0088.003] _wcsicmp (_String1="MSSQL$CONTOSO1", _String2="SQLSERVER") returned -6 [0088.003] _wcsicmp (_String1="MSSQL$CONTOSO1", _String2="SQLSERVER") returned -6 [0088.004] _wcsicmp (_String1="MSSQL$CONTOSO1", _String2="REPLICATOR") returned -5 [0088.004] _wcsicmp (_String1="MSSQL$CONTOSO1", _String2="REPLICATOR") returned -5 [0088.004] _wcsicmp (_String1="MSSQL$CONTOSO1", _String2="REMOTEBOOT") returned -5 [0088.004] _wcsicmp (_String1="MSSQL$CONTOSO1", _String2="REMOTEBOOT") returned -5 [0088.004] _wcsicmp (_String1="MSSQL$CONTOSO1", _String2="TIMESOURCE") returned -7 [0088.004] _wcsicmp (_String1="MSSQL$CONTOSO1", _String2="TIMESOURCE") returned -7 [0088.004] _wcsicmp (_String1="MSSQL$CONTOSO1", _String2="AFP") returned 12 [0088.004] _wcsicmp (_String1="MSSQL$CONTOSO1", _String2="AFP") returned 12 [0088.004] _wcsicmp (_String1="MSSQL$CONTOSO1", _String2="UPS") returned -8 [0088.004] _wcsicmp (_String1="MSSQL$CONTOSO1", _String2="UPS") returned -8 [0088.004] _wcsicmp (_String1="MSSQL$CONTOSO1", _String2="XACTSRV") returned -11 [0088.004] _wcsicmp (_String1="MSSQL$CONTOSO1", _String2="XACTSRV") returned -11 [0088.004] _wcsicmp (_String1="MSSQL$CONTOSO1", _String2="TCPIP") returned -7 [0088.004] _wcsicmp (_String1="MSSQL$CONTOSO1", _String2="TCPIP") returned -7 [0088.004] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x1) returned 0x348fff8 [0088.005] OpenServiceW (hSCManager=0x348fff8, lpServiceName="MSSQL$CONTOSO1", dwDesiredAccess=0x84) returned 0x0 [0088.005] GetLastError () returned 0x424 [0088.005] CloseServiceHandle (hSCObject=0x348fff8) returned 1 [0088.005] wcscpy_s (in: _Destination=0x257610, _SizeInWords=0x104, _Source="NETMSG" | out: _Destination="NETMSG") returned 0x0 [0088.006] LoadLibraryExW (lpLibFileName="NETMSG", hFile=0x0, dwFlags=0x20) returned 0x3310002 [0088.007] FormatMessageW (in: dwFlags=0x2a00, lpSource=0x3310002, dwMessageId=0x889, dwLanguageId=0x0, lpBuffer=0x257c20, nSize=0x800, Arguments=0x2573d0 | out: lpBuffer="The service name is invalid.\r\n") returned 0x1e [0088.008] GetFileType (hFile=0x94) returned 0x2 [0088.008] GetConsoleMode (in: hConsoleHandle=0x94, lpMode=0x32df3cc | out: lpMode=0x32df3cc) returned 1 [0088.009] WriteConsoleW (in: hConsoleOutput=0x94, lpBuffer=0x257c20*, nNumberOfCharsToWrite=0x1e, lpNumberOfCharsWritten=0x32df3d8, lpReserved=0x0 | out: lpBuffer=0x257c20*, lpNumberOfCharsWritten=0x32df3d8*=0x1e) returned 1 [0088.011] GetFileType (hFile=0x94) returned 0x2 [0088.011] GetConsoleMode (in: hConsoleHandle=0x94, lpMode=0x32df3cc | out: lpMode=0x32df3cc) returned 1 [0088.013] WriteConsoleW (in: hConsoleOutput=0x94, lpBuffer=0x2312e4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x32df3d8, lpReserved=0x0 | out: lpBuffer=0x2312e4*, lpNumberOfCharsWritten=0x32df3d8*=0x2) returned 1 [0088.014] _ultow (in: _Dest=0x889, _Radix=53343264 | out: _Dest=0x889) returned="2185" [0088.014] FormatMessageW (in: dwFlags=0x2800, lpSource=0x3310002, dwMessageId=0xdba, dwLanguageId=0x0, lpBuffer=0x257c20, nSize=0x800, Arguments=0x2573d0 | out: lpBuffer="More help is available by typing NET HELPMSG 2185.\r\n") returned 0x34 [0088.015] GetFileType (hFile=0x94) returned 0x2 [0088.015] GetConsoleMode (in: hConsoleHandle=0x94, lpMode=0x32df3f0 | out: lpMode=0x32df3f0) returned 1 [0088.018] WriteConsoleW (in: hConsoleOutput=0x94, lpBuffer=0x257c20*, nNumberOfCharsToWrite=0x34, lpNumberOfCharsWritten=0x32df3fc, lpReserved=0x0 | out: lpBuffer=0x257c20*, lpNumberOfCharsWritten=0x32df3fc*=0x34) returned 1 [0088.022] GetFileType (hFile=0x94) returned 0x2 [0088.022] GetConsoleMode (in: hConsoleHandle=0x94, lpMode=0x32df3f0 | out: lpMode=0x32df3f0) returned 1 [0088.023] WriteConsoleW (in: hConsoleOutput=0x94, lpBuffer=0x2312e4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x32df3fc, lpReserved=0x0 | out: lpBuffer=0x2312e4*, lpNumberOfCharsWritten=0x32df3fc*=0x2) returned 1 [0088.024] NetApiBufferFree (Buffer=0x34880d8) returned 0x0 [0088.024] NetApiBufferFree (Buffer=0x34880f0) returned 0x0 [0088.024] GetCommandLineW () returned="C:\\WINDOWS\\system32\\net1 stop MSSQL$CONTOSO1" [0088.024] exit (_Code=2) Thread: id = 51 os_tid = 0x1268 Process: id = "19" image_name = "cmd.exe" filename = "c:\\windows\\syswow64\\cmd.exe" page_root = "0x1142a000" os_pid = "0x128c" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x13d4" cmd_line = "C:\\WINDOWS\\system32\\cmd.exe /c net stop MSDTC" cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000faa5" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 52 os_tid = 0x1290 [0089.880] GetModuleHandleA (lpModuleName=0x0) returned 0x11d0000 [0089.880] __set_app_type (_Type=0x1) [0089.880] __p__fmode () returned 0x76953c14 [0089.880] __p__commode () returned 0x769549ec [0089.880] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x11e6fd0) returned 0x0 [0089.880] __getmainargs (in: _Argc=0x11fd1a4, _Argv=0x11fd1a8, _Env=0x11fd1ac, _DoWildCard=0, _StartInfo=0x11fd1b8 | out: _Argc=0x11fd1a4, _Argv=0x11fd1a8, _Env=0x11fd1ac) returned 0 [0089.880] _onexit (_Func=0x11e8030) returned 0x11e8030 [0089.881] _onexit (_Func=0x11e8040) returned 0x11e8040 [0089.881] _onexit (_Func=0x11e8050) returned 0x11e8050 [0089.881] _onexit (_Func=0x11e8060) returned 0x11e8060 [0089.881] _onexit (_Func=0x11e8070) returned 0x11e8070 [0089.882] _onexit (_Func=0x11e8080) returned 0x11e8080 [0089.882] GetCurrentThreadId () returned 0x1290 [0089.882] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0x1290) returned 0xbc [0089.883] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x74030000 [0089.883] GetProcAddress (hModule=0x74030000, lpProcName="SetThreadUILanguage") returned 0x74044f70 [0089.883] SetThreadUILanguage (LangId=0x0) returned 0x35c0409 [0089.891] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0089.891] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x10af790 | out: phkResult=0x10af790*=0x0) returned 0x2 [0089.892] VirtualQuery (in: lpAddress=0x10af79b, lpBuffer=0x10af748, dwLength=0x1c | out: lpBuffer=0x10af748*(BaseAddress=0x10af000, AllocationBase=0xfb0000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0089.892] VirtualQuery (in: lpAddress=0xfb0000, lpBuffer=0x10af748, dwLength=0x1c | out: lpBuffer=0x10af748*(BaseAddress=0xfb0000, AllocationBase=0xfb0000, AllocationProtect=0x4, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000)) returned 0x1c [0089.892] VirtualQuery (in: lpAddress=0xfb1000, lpBuffer=0x10af748, dwLength=0x1c | out: lpBuffer=0x10af748*(BaseAddress=0xfb1000, AllocationBase=0xfb0000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x104, Type=0x20000)) returned 0x1c [0089.892] VirtualQuery (in: lpAddress=0xfb3000, lpBuffer=0x10af748, dwLength=0x1c | out: lpBuffer=0x10af748*(BaseAddress=0xfb3000, AllocationBase=0xfb0000, AllocationProtect=0x4, RegionSize=0xfd000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0089.892] VirtualQuery (in: lpAddress=0x10b0000, lpBuffer=0x10af748, dwLength=0x1c | out: lpBuffer=0x10af748*(BaseAddress=0x10b0000, AllocationBase=0x10b0000, AllocationProtect=0x2, RegionSize=0x4000, State=0x1000, Protect=0x2, Type=0x40000)) returned 0x1c [0089.892] GetConsoleOutputCP () returned 0x1b5 [0089.896] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x1203850 | out: lpCPInfo=0x1203850) returned 1 [0089.897] SetConsoleCtrlHandler (HandlerRoutine=0x11f7260, Add=1) returned 1 [0089.897] _get_osfhandle (_FileHandle=1) returned 0x90 [0089.897] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x120388c | out: lpMode=0x120388c) returned 1 [0089.911] _get_osfhandle (_FileHandle=0) returned 0x8c [0089.911] GetConsoleMode (in: hConsoleHandle=0x8c, lpMode=0x1203888 | out: lpMode=0x1203888) returned 1 [0089.914] _get_osfhandle (_FileHandle=1) returned 0x90 [0089.914] SetConsoleMode (hConsoleHandle=0x90, dwMode=0x0) returned 1 [0089.916] _get_osfhandle (_FileHandle=1) returned 0x90 [0089.916] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x1203890 | out: lpMode=0x1203890) returned 1 [0089.917] _get_osfhandle (_FileHandle=1) returned 0x90 [0089.917] SetConsoleMode (hConsoleHandle=0x90, dwMode=0x7) returned 1 [0089.922] _get_osfhandle (_FileHandle=0) returned 0x8c [0089.922] GetConsoleMode (in: hConsoleHandle=0x8c, lpMode=0x1203894 | out: lpMode=0x1203894) returned 1 [0089.923] _get_osfhandle (_FileHandle=0) returned 0x8c [0089.923] SetConsoleMode (hConsoleHandle=0x8c, dwMode=0x1e7) returned 1 [0089.929] GetEnvironmentStringsW () returned 0x37d4db8* [0089.929] GetProcessHeap () returned 0x37d0000 [0089.929] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0xaca) returned 0x37d5890 [0089.929] FreeEnvironmentStringsA (penv="A") returned 1 [0089.929] GetProcessHeap () returned 0x37d0000 [0089.929] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x4) returned 0x37d4898 [0089.929] GetEnvironmentStringsW () returned 0x37d4db8* [0089.929] GetProcessHeap () returned 0x37d0000 [0089.929] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0xaca) returned 0x37d6368 [0089.929] FreeEnvironmentStringsA (penv="A") returned 1 [0089.929] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x10ae6ec | out: phkResult=0x10ae6ec*=0xcc) returned 0x0 [0089.930] RegQueryValueExW (in: hKey=0xcc, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x10ae6f4, lpData=0x10ae6f8, lpcbData=0x10ae6f0*=0x1000 | out: lpType=0x10ae6f4*=0x0, lpData=0x10ae6f8*=0xc5, lpcbData=0x10ae6f0*=0x1000) returned 0x2 [0089.930] RegQueryValueExW (in: hKey=0xcc, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x10ae6f4, lpData=0x10ae6f8, lpcbData=0x10ae6f0*=0x1000 | out: lpType=0x10ae6f4*=0x4, lpData=0x10ae6f8*=0x1, lpcbData=0x10ae6f0*=0x4) returned 0x0 [0089.930] RegQueryValueExW (in: hKey=0xcc, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x10ae6f4, lpData=0x10ae6f8, lpcbData=0x10ae6f0*=0x1000 | out: lpType=0x10ae6f4*=0x0, lpData=0x10ae6f8*=0x1, lpcbData=0x10ae6f0*=0x1000) returned 0x2 [0089.930] RegQueryValueExW (in: hKey=0xcc, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x10ae6f4, lpData=0x10ae6f8, lpcbData=0x10ae6f0*=0x1000 | out: lpType=0x10ae6f4*=0x4, lpData=0x10ae6f8*=0x0, lpcbData=0x10ae6f0*=0x4) returned 0x0 [0089.930] RegQueryValueExW (in: hKey=0xcc, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x10ae6f4, lpData=0x10ae6f8, lpcbData=0x10ae6f0*=0x1000 | out: lpType=0x10ae6f4*=0x4, lpData=0x10ae6f8*=0x40, lpcbData=0x10ae6f0*=0x4) returned 0x0 [0089.930] RegQueryValueExW (in: hKey=0xcc, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x10ae6f4, lpData=0x10ae6f8, lpcbData=0x10ae6f0*=0x1000 | out: lpType=0x10ae6f4*=0x4, lpData=0x10ae6f8*=0x40, lpcbData=0x10ae6f0*=0x4) returned 0x0 [0089.930] RegQueryValueExW (in: hKey=0xcc, lpValueName="AutoRun", lpReserved=0x0, lpType=0x10ae6f4, lpData=0x10ae6f8, lpcbData=0x10ae6f0*=0x1000 | out: lpType=0x10ae6f4*=0x0, lpData=0x10ae6f8*=0x40, lpcbData=0x10ae6f0*=0x1000) returned 0x2 [0089.930] RegCloseKey (hKey=0xcc) returned 0x0 [0089.930] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x10ae6ec | out: phkResult=0x10ae6ec*=0xcc) returned 0x0 [0089.930] RegQueryValueExW (in: hKey=0xcc, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x10ae6f4, lpData=0x10ae6f8, lpcbData=0x10ae6f0*=0x1000 | out: lpType=0x10ae6f4*=0x0, lpData=0x10ae6f8*=0x40, lpcbData=0x10ae6f0*=0x1000) returned 0x2 [0089.930] RegQueryValueExW (in: hKey=0xcc, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x10ae6f4, lpData=0x10ae6f8, lpcbData=0x10ae6f0*=0x1000 | out: lpType=0x10ae6f4*=0x4, lpData=0x10ae6f8*=0x1, lpcbData=0x10ae6f0*=0x4) returned 0x0 [0089.930] RegQueryValueExW (in: hKey=0xcc, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x10ae6f4, lpData=0x10ae6f8, lpcbData=0x10ae6f0*=0x1000 | out: lpType=0x10ae6f4*=0x0, lpData=0x10ae6f8*=0x1, lpcbData=0x10ae6f0*=0x1000) returned 0x2 [0089.931] RegQueryValueExW (in: hKey=0xcc, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x10ae6f4, lpData=0x10ae6f8, lpcbData=0x10ae6f0*=0x1000 | out: lpType=0x10ae6f4*=0x4, lpData=0x10ae6f8*=0x0, lpcbData=0x10ae6f0*=0x4) returned 0x0 [0089.931] RegQueryValueExW (in: hKey=0xcc, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x10ae6f4, lpData=0x10ae6f8, lpcbData=0x10ae6f0*=0x1000 | out: lpType=0x10ae6f4*=0x4, lpData=0x10ae6f8*=0x9, lpcbData=0x10ae6f0*=0x4) returned 0x0 [0089.931] RegQueryValueExW (in: hKey=0xcc, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x10ae6f4, lpData=0x10ae6f8, lpcbData=0x10ae6f0*=0x1000 | out: lpType=0x10ae6f4*=0x4, lpData=0x10ae6f8*=0x9, lpcbData=0x10ae6f0*=0x4) returned 0x0 [0089.931] RegQueryValueExW (in: hKey=0xcc, lpValueName="AutoRun", lpReserved=0x0, lpType=0x10ae6f4, lpData=0x10ae6f8, lpcbData=0x10ae6f0*=0x1000 | out: lpType=0x10ae6f4*=0x0, lpData=0x10ae6f8*=0x9, lpcbData=0x10ae6f0*=0x1000) returned 0x2 [0089.931] RegCloseKey (hKey=0xcc) returned 0x0 [0089.931] time (in: timer=0x0 | out: timer=0x0) returned 0x5e3302d2 [0089.931] srand (_Seed=0x5e3302d2) [0089.931] GetCommandLineW () returned="C:\\WINDOWS\\system32\\cmd.exe /c net stop MSDTC" [0089.931] malloc (_Size=0x4000) returned 0x3702700 [0089.937] GetCommandLineW () returned="C:\\WINDOWS\\system32\\cmd.exe /c net stop MSDTC" [0089.937] malloc (_Size=0xffce) returned 0x3600048 [0089.937] ??_V@YAXPAX@Z () returned 0x10af6d0 [0089.938] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x3600048 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0089.938] malloc (_Size=0xffce) returned 0x3610020 [0089.939] ??_V@YAXPAX@Z () returned 0x10af4a4 [0089.939] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x3610020, nSize=0x7fe7 | out: lpFilename="C:\\WINDOWS\\SysWOW64\\cmd.exe" (normalized: "c:\\windows\\syswow64\\cmd.exe")) returned 0x1b [0089.940] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x11ff840, nSize=0x2000 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath;C:\\WINDOWS\\system32;C:\\WINDOWS;C:\\WINDOWS\\System32\\Wbem;C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\;C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps") returned 0xbb [0089.940] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x11ff840, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0089.940] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x11ff840, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0089.940] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13 [0089.940] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11 [0089.940] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13 [0089.940] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13 [0089.940] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12 [0089.940] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4 [0089.940] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2 [0089.940] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8 [0089.940] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1 [0089.941] GetProcessHeap () returned 0x37d0000 [0089.941] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x37d5890) returned 1 [0089.941] GetEnvironmentStringsW () returned 0x37d4db8* [0089.941] GetProcessHeap () returned 0x37d0000 [0089.941] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0xae2) returned 0x37d7930 [0089.941] FreeEnvironmentStringsA (penv="A") returned 1 [0089.941] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x11ff840, nSize=0x2000 | out: lpBuffer="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1b [0089.941] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x11ff840, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0089.941] _wcsicmp (_String1="KEYS", _String2="CD") returned 8 [0089.941] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6 [0089.941] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8 [0089.941] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8 [0089.942] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7 [0089.942] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9 [0089.942] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7 [0089.942] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3 [0089.942] malloc (_Size=0xffce) returned 0x361fff8 [0089.942] ??_V@YAXPAX@Z () returned 0x10af23c [0089.943] GetProcessHeap () returned 0x37d0000 [0089.943] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x38) returned 0x37d0ae0 [0089.943] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x361fff8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0089.944] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x7fe7, lpBuffer=0x361fff8, lpFilePart=0x10af288 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x10af288*="Desktop") returned 0x17 [0089.944] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\Desktop" (normalized: "c:\\users\\fd1hvy\\desktop")) returned 0x11 [0089.944] FindFirstFileW (in: lpFileName="C:\\Users", lpFindFileData=0x10af008 | out: lpFindFileData=0x10af008*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x475bb883, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x475bb883, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 0x37d0b20 [0089.945] FindClose (in: hFindFile=0x37d0b20 | out: hFindFile=0x37d0b20) returned 1 [0089.945] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy", lpFindFileData=0x10af008 | out: lpFindFileData=0x10af008*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20fc850f, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x9de5855d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x9de5855d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD1HVy", cAlternateFileName="")) returned 0x37d0b20 [0089.945] FindClose (in: hFindFile=0x37d0b20 | out: hFindFile=0x37d0b20) returned 1 [0089.945] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", lpFindFileData=0x10af008 | out: lpFindFileData=0x10af008*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x5de49bf6, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0x5de49bf6, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 0x37d0b20 [0089.945] FindClose (in: hFindFile=0x37d0b20 | out: hFindFile=0x37d0b20) returned 1 [0089.946] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\Desktop" (normalized: "c:\\users\\fd1hvy\\desktop")) returned 0x11 [0089.946] SetCurrentDirectoryW (lpPathName="C:\\Users\\FD1HVy\\Desktop" (normalized: "c:\\users\\fd1hvy\\desktop")) returned 1 [0089.946] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Users\\FD1HVy\\Desktop") returned 1 [0089.946] GetProcessHeap () returned 0x37d0000 [0089.946] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x37d7930) returned 1 [0089.946] GetEnvironmentStringsW () returned 0x37d4db8* [0089.946] GetProcessHeap () returned 0x37d0000 [0089.946] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0xb1a) returned 0x37d6e40 [0089.946] FreeEnvironmentStringsA (penv="=") returned 1 [0089.946] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x3600048 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0089.946] GetProcessHeap () returned 0x37d0000 [0089.946] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x37d0ae0) returned 1 [0089.946] ??_V@YAXPAX@Z () returned 0x1 [0089.947] ??_V@YAXPAX@Z () returned 0x1 [0089.947] GetProcessHeap () returned 0x37d0000 [0089.947] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x400e) returned 0x37d8f48 [0089.947] GetProcessHeap () returned 0x37d0000 [0089.947] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x2a) returned 0x37d7968 [0089.948] GetProcessHeap () returned 0x37d0000 [0089.948] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x37d8f48) returned 1 [0089.948] GetConsoleOutputCP () returned 0x1b5 [0089.954] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x1203850 | out: lpCPInfo=0x1203850) returned 1 [0089.954] GetUserDefaultLCID () returned 0x409 [0089.955] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x11ff82c, cchData=8 | out: lpLCData=":") returned 2 [0089.955] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x10af5f8, cchData=128 | out: lpLCData="0") returned 2 [0089.955] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x10af5f8, cchData=128 | out: lpLCData="0") returned 2 [0089.955] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x10af5f8, cchData=128 | out: lpLCData="1") returned 2 [0089.955] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x11ff81c, cchData=8 | out: lpLCData="/") returned 2 [0089.955] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x11ff7b8, cchData=32 | out: lpLCData="Mon") returned 4 [0089.956] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x11ff778, cchData=32 | out: lpLCData="Tue") returned 4 [0089.956] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x11ff738, cchData=32 | out: lpLCData="Wed") returned 4 [0089.956] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x11ff6f8, cchData=32 | out: lpLCData="Thu") returned 4 [0089.956] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x11ff6b8, cchData=32 | out: lpLCData="Fri") returned 4 [0089.956] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x11ff678, cchData=32 | out: lpLCData="Sat") returned 4 [0089.956] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x11ff638, cchData=32 | out: lpLCData="Sun") returned 4 [0089.956] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x11ff80c, cchData=8 | out: lpLCData=".") returned 2 [0089.956] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x11ff7f8, cchData=8 | out: lpLCData=",") returned 2 [0089.956] setlocale (category=0, locale=".OCP") returned="English_United States.437" [0089.959] GetProcessHeap () returned 0x37d0000 [0089.959] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x0, Size=0x20c) returned 0x37d79e8 [0089.959] GetConsoleTitleW (in: lpConsoleTitle=0x37d79e8, nSize=0x104 | out: lpConsoleTitle="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1c [0089.963] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x74030000 [0089.964] GetProcAddress (hModule=0x74030000, lpProcName="CopyFileExW") returned 0x74044330 [0089.964] GetProcAddress (hModule=0x74030000, lpProcName="IsDebuggerPresent") returned 0x74045930 [0089.964] GetProcAddress (hModule=0x74030000, lpProcName="SetConsoleInputExeNameW") returned 0x772c09d0 [0089.964] ??_V@YAXPAX@Z () returned 0x1 [0089.966] GetProcessHeap () returned 0x37d0000 [0089.966] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x400a) returned 0x37d8f48 [0089.966] GetProcessHeap () returned 0x37d0000 [0089.966] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x37d8f48) returned 1 [0089.967] _wcsicmp (_String1="net", _String2=")") returned 69 [0089.967] _wcsicmp (_String1="FOR", _String2="net") returned -8 [0089.967] _wcsicmp (_String1="FOR/?", _String2="net") returned -8 [0089.967] _wcsicmp (_String1="IF", _String2="net") returned -5 [0089.967] _wcsicmp (_String1="IF/?", _String2="net") returned -5 [0089.967] _wcsicmp (_String1="REM", _String2="net") returned 4 [0089.967] _wcsicmp (_String1="REM/?", _String2="net") returned 4 [0089.968] GetProcessHeap () returned 0x37d0000 [0089.968] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x58) returned 0x37d7c00 [0089.968] GetProcessHeap () returned 0x37d0000 [0089.968] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x10) returned 0x37d7c60 [0089.968] GetProcessHeap () returned 0x37d0000 [0089.969] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x20) returned 0x37d7c78 [0089.970] GetConsoleTitleW (in: lpConsoleTitle=0x10af4f0, nSize=0x104 | out: lpConsoleTitle="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1c [0089.984] malloc (_Size=0xffce) returned 0x3612aa0 [0089.984] ??_V@YAXPAX@Z () returned 0x10af27c [0089.985] malloc (_Size=0xffce) returned 0x3622a78 [0089.985] ??_V@YAXPAX@Z () returned 0x10af034 [0089.986] _wcsicmp (_String1="net", _String2="DIR") returned 10 [0089.986] _wcsicmp (_String1="net", _String2="ERASE") returned 9 [0089.986] _wcsicmp (_String1="net", _String2="DEL") returned 10 [0089.986] _wcsicmp (_String1="net", _String2="TYPE") returned -6 [0089.986] _wcsicmp (_String1="net", _String2="COPY") returned 11 [0089.986] _wcsicmp (_String1="net", _String2="CD") returned 11 [0089.987] _wcsicmp (_String1="net", _String2="CHDIR") returned 11 [0089.987] _wcsicmp (_String1="net", _String2="RENAME") returned -4 [0089.987] _wcsicmp (_String1="net", _String2="REN") returned -4 [0089.987] _wcsicmp (_String1="net", _String2="ECHO") returned 9 [0089.987] _wcsicmp (_String1="net", _String2="SET") returned -5 [0089.987] _wcsicmp (_String1="net", _String2="PAUSE") returned -2 [0089.987] _wcsicmp (_String1="net", _String2="DATE") returned 10 [0089.987] _wcsicmp (_String1="net", _String2="TIME") returned -6 [0089.987] _wcsicmp (_String1="net", _String2="PROMPT") returned -2 [0089.987] _wcsicmp (_String1="net", _String2="MD") returned 1 [0089.987] _wcsicmp (_String1="net", _String2="MKDIR") returned 1 [0089.987] _wcsicmp (_String1="net", _String2="RD") returned -4 [0089.987] _wcsicmp (_String1="net", _String2="RMDIR") returned -4 [0089.987] _wcsicmp (_String1="net", _String2="PATH") returned -2 [0089.987] _wcsicmp (_String1="net", _String2="GOTO") returned 7 [0089.987] _wcsicmp (_String1="net", _String2="SHIFT") returned -5 [0089.987] _wcsicmp (_String1="net", _String2="CLS") returned 11 [0089.987] _wcsicmp (_String1="net", _String2="CALL") returned 11 [0089.987] _wcsicmp (_String1="net", _String2="VERIFY") returned -8 [0089.987] _wcsicmp (_String1="net", _String2="VER") returned -8 [0089.987] _wcsicmp (_String1="net", _String2="VOL") returned -8 [0089.987] _wcsicmp (_String1="net", _String2="EXIT") returned 9 [0089.988] _wcsicmp (_String1="net", _String2="SETLOCAL") returned -5 [0089.988] _wcsicmp (_String1="net", _String2="ENDLOCAL") returned 9 [0089.988] _wcsicmp (_String1="net", _String2="TITLE") returned -6 [0089.988] _wcsicmp (_String1="net", _String2="START") returned -5 [0089.988] _wcsicmp (_String1="net", _String2="DPATH") returned 10 [0089.988] _wcsicmp (_String1="net", _String2="KEYS") returned 3 [0089.988] _wcsicmp (_String1="net", _String2="MOVE") returned 1 [0089.988] _wcsicmp (_String1="net", _String2="PUSHD") returned -2 [0089.988] _wcsicmp (_String1="net", _String2="POPD") returned -2 [0089.988] _wcsicmp (_String1="net", _String2="ASSOC") returned 13 [0089.988] _wcsicmp (_String1="net", _String2="FTYPE") returned 8 [0089.988] _wcsicmp (_String1="net", _String2="BREAK") returned 12 [0089.988] _wcsicmp (_String1="net", _String2="COLOR") returned 11 [0089.988] _wcsicmp (_String1="net", _String2="MKLINK") returned 1 [0089.988] _wcsicmp (_String1="net", _String2="DIR") returned 10 [0089.988] _wcsicmp (_String1="net", _String2="ERASE") returned 9 [0089.988] _wcsicmp (_String1="net", _String2="DEL") returned 10 [0089.988] _wcsicmp (_String1="net", _String2="TYPE") returned -6 [0089.988] _wcsicmp (_String1="net", _String2="COPY") returned 11 [0089.988] _wcsicmp (_String1="net", _String2="CD") returned 11 [0089.988] _wcsicmp (_String1="net", _String2="CHDIR") returned 11 [0089.988] _wcsicmp (_String1="net", _String2="RENAME") returned -4 [0089.988] _wcsicmp (_String1="net", _String2="REN") returned -4 [0089.988] _wcsicmp (_String1="net", _String2="ECHO") returned 9 [0089.989] _wcsicmp (_String1="net", _String2="SET") returned -5 [0089.989] _wcsicmp (_String1="net", _String2="PAUSE") returned -2 [0089.989] _wcsicmp (_String1="net", _String2="DATE") returned 10 [0089.989] _wcsicmp (_String1="net", _String2="TIME") returned -6 [0089.989] _wcsicmp (_String1="net", _String2="PROMPT") returned -2 [0089.989] _wcsicmp (_String1="net", _String2="MD") returned 1 [0089.989] _wcsicmp (_String1="net", _String2="MKDIR") returned 1 [0089.989] _wcsicmp (_String1="net", _String2="RD") returned -4 [0089.989] _wcsicmp (_String1="net", _String2="RMDIR") returned -4 [0089.989] _wcsicmp (_String1="net", _String2="PATH") returned -2 [0089.989] _wcsicmp (_String1="net", _String2="GOTO") returned 7 [0089.989] _wcsicmp (_String1="net", _String2="SHIFT") returned -5 [0089.989] _wcsicmp (_String1="net", _String2="CLS") returned 11 [0089.989] _wcsicmp (_String1="net", _String2="CALL") returned 11 [0089.989] _wcsicmp (_String1="net", _String2="VERIFY") returned -8 [0089.989] _wcsicmp (_String1="net", _String2="VER") returned -8 [0089.989] _wcsicmp (_String1="net", _String2="VOL") returned -8 [0089.989] _wcsicmp (_String1="net", _String2="EXIT") returned 9 [0089.989] _wcsicmp (_String1="net", _String2="SETLOCAL") returned -5 [0089.989] _wcsicmp (_String1="net", _String2="ENDLOCAL") returned 9 [0089.989] _wcsicmp (_String1="net", _String2="TITLE") returned -6 [0089.989] _wcsicmp (_String1="net", _String2="START") returned -5 [0089.990] _wcsicmp (_String1="net", _String2="DPATH") returned 10 [0089.990] _wcsicmp (_String1="net", _String2="KEYS") returned 3 [0089.990] _wcsicmp (_String1="net", _String2="MOVE") returned 1 [0089.990] _wcsicmp (_String1="net", _String2="PUSHD") returned -2 [0089.990] _wcsicmp (_String1="net", _String2="POPD") returned -2 [0089.990] _wcsicmp (_String1="net", _String2="ASSOC") returned 13 [0089.990] _wcsicmp (_String1="net", _String2="FTYPE") returned 8 [0089.990] _wcsicmp (_String1="net", _String2="BREAK") returned 12 [0089.990] _wcsicmp (_String1="net", _String2="COLOR") returned 11 [0089.990] _wcsicmp (_String1="net", _String2="MKLINK") returned 1 [0089.990] _wcsicmp (_String1="net", _String2="FOR") returned 8 [0089.990] _wcsicmp (_String1="net", _String2="IF") returned 5 [0089.990] _wcsicmp (_String1="net", _String2="REM") returned -4 [0089.990] ??_V@YAXPAX@Z () returned 0x1 [0089.991] GetProcessHeap () returned 0x37d0000 [0089.991] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0xffd6) returned 0x37d8f48 [0089.992] GetProcessHeap () returned 0x37d0000 [0089.992] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x28) returned 0x37d7ca0 [0089.992] _wcsnicmp (_String1="net", _String2="cmd ", _MaxCount=0x4) returned 11 [0089.992] malloc (_Size=0xffce) returned 0x3622a78 [0089.992] ??_V@YAXPAX@Z () returned 0x10aedb4 [0089.993] GetProcessHeap () returned 0x37d0000 [0089.993] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x1ffa4) returned 0x37e8f28 [0089.996] SetErrorMode (uMode=0x0) returned 0x0 [0089.996] SetErrorMode (uMode=0x1) returned 0x0 [0089.996] GetFullPathNameW (in: lpFileName=".", nBufferLength=0xffce, lpBuffer=0x37e8f30, lpFilePart=0x10aedd4 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x10aedd4*="Desktop") returned 0x17 [0089.997] SetErrorMode (uMode=0x0) returned 0x1 [0089.997] GetProcessHeap () returned 0x37d0000 [0089.997] RtlReAllocateHeap (Heap=0x37d0000, Flags=0x0, Ptr=0x37e8f28, Size=0x40) returned 0x37e8f28 [0089.997] GetProcessHeap () returned 0x37d0000 [0089.997] RtlSizeHeap (HeapHandle=0x37d0000, Flags=0x0, MemoryPointer=0x37e8f28) returned 0x40 [0089.997] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x11ff840, nSize=0x2000 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath;C:\\WINDOWS\\system32;C:\\WINDOWS;C:\\WINDOWS\\System32\\Wbem;C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\;C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps") returned 0xbb [0089.998] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1 [0089.998] GetProcessHeap () returned 0x37d0000 [0089.998] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x1b4) returned 0x37d7cd0 [0089.998] GetProcessHeap () returned 0x37d0000 [0089.998] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x360) returned 0x37d7e90 [0090.011] GetProcessHeap () returned 0x37d0000 [0090.011] RtlReAllocateHeap (Heap=0x37d0000, Flags=0x0, Ptr=0x37d7e90, Size=0x1b6) returned 0x37d7e90 [0090.011] GetProcessHeap () returned 0x37d0000 [0090.011] RtlSizeHeap (HeapHandle=0x37d0000, Flags=0x0, MemoryPointer=0x37d7e90) returned 0x1b6 [0090.011] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x11ff840, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0090.011] GetProcessHeap () returned 0x37d0000 [0090.011] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0xe0) returned 0x37d8050 [0090.011] GetProcessHeap () returned 0x37d0000 [0090.011] RtlReAllocateHeap (Heap=0x37d0000, Flags=0x0, Ptr=0x37d8050, Size=0x76) returned 0x37d8050 [0090.011] GetProcessHeap () returned 0x37d0000 [0090.011] RtlSizeHeap (HeapHandle=0x37d0000, Flags=0x0, MemoryPointer=0x37d8050) returned 0x76 [0090.064] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0090.065] FindFirstFileExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\net.*", fInfoLevelId=0x1, lpFindFileData=0x10aeb60, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x10aeb60) returned 0xffffffff [0090.065] GetLastError () returned 0x2 [0090.065] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0090.065] FindFirstFileExW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\net.*", fInfoLevelId=0x1, lpFindFileData=0x10aeb60, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x10aeb60) returned 0xffffffff [0090.066] GetLastError () returned 0x2 [0090.066] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0090.066] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\system32\\net.*", fInfoLevelId=0x1, lpFindFileData=0x10aeb60, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x10aeb60) returned 0x37d80d0 [0090.067] GetProcessHeap () returned 0x37d0000 [0090.067] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x0, Size=0x14) returned 0x37d8110 [0090.067] FindClose (in: hFindFile=0x37d80d0 | out: hFindFile=0x37d80d0) returned 1 [0090.067] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\system32\\net.COM", fInfoLevelId=0x1, lpFindFileData=0x10aeb60, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x10aeb60) returned 0xffffffff [0090.068] GetLastError () returned 0x2 [0090.068] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\system32\\net.EXE", fInfoLevelId=0x1, lpFindFileData=0x10aeb60, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x10aeb60) returned 0x37d80d0 [0090.068] GetProcessHeap () returned 0x37d0000 [0090.068] RtlReAllocateHeap (Heap=0x37d0000, Flags=0x0, Ptr=0x37d8110, Size=0x4) returned 0x37d8110 [0090.068] FindClose (in: hFindFile=0x37d80d0 | out: hFindFile=0x37d80d0) returned 1 [0090.068] _wcsicmp (_String1=".EXE", _String2=".BAT") returned 3 [0090.068] _wcsicmp (_String1=".EXE", _String2=".CMD") returned 2 [0090.069] ??_V@YAXPAX@Z () returned 0x1 [0090.069] GetConsoleTitleW (in: lpConsoleTitle=0x10af064, nSize=0x104 | out: lpConsoleTitle="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1c [0090.079] InitializeProcThreadAttributeList (in: lpAttributeList=0x10aef90, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x10aef7c | out: lpAttributeList=0x10aef90, lpSize=0x10aef7c) returned 1 [0090.079] UpdateProcThreadAttribute (in: lpAttributeList=0x10aef90, dwFlags=0x0, Attribute=0x60001, lpValue=0x10aef78, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x10aef90, lpPreviousValue=0x0) returned 1 [0090.079] GetStartupInfoW (in: lpStartupInfo=0x10aefc8 | out: lpStartupInfo=0x10aefc8*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\WINDOWS\\system32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x144, lpReserved2=0x37d1b52, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) [0090.080] GetProcessHeap () returned 0x37d0000 [0090.080] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x18) returned 0x37d80d0 [0090.080] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38 [0090.080] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2 [0090.080] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2 [0090.080] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0090.080] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0090.080] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0090.080] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3 [0090.080] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3 [0090.080] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5 [0090.080] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5 [0090.080] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9 [0090.080] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9 [0090.080] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11 [0090.080] _wcsnicmp (_String1="COPYCMD", _String2="OneDriv", _MaxCount=0x7) returned -12 [0090.080] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12 [0090.080] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13 [0090.080] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13 [0090.080] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0090.080] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0090.080] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0090.080] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0090.080] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0090.080] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0090.080] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0090.080] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0090.080] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0090.080] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13 [0090.081] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13 [0090.081] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13 [0090.081] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16 [0090.081] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16 [0090.081] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17 [0090.081] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17 [0090.081] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18 [0090.081] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18 [0090.081] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18 [0090.081] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18 [0090.081] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20 [0090.081] GetProcessHeap () returned 0x37d0000 [0090.081] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x37d80d0) returned 1 [0090.081] GetProcessHeap () returned 0x37d0000 [0090.081] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0xa) returned 0x37d80d0 [0090.081] lstrcmpW (lpString1="\\net.exe", lpString2="\\XCOPY.EXE") returned -1 [0090.083] _get_osfhandle (_FileHandle=1) returned 0x90 [0090.083] SetConsoleMode (hConsoleHandle=0x90, dwMode=0x3) returned 1 [0090.135] _get_osfhandle (_FileHandle=0) returned 0x8c [0090.135] SetConsoleMode (hConsoleHandle=0x8c, dwMode=0x1f7) returned 1 [0090.142] CreateProcessW (in: lpApplicationName="C:\\WINDOWS\\system32\\net.exe", lpCommandLine="net stop MSDTC", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\FD1HVy\\Desktop", lpStartupInfo=0x10aef18*(cb=0x48, lpReserved=0x0, lpDesktop="WinSta0\\Default", lpTitle="net stop MSDTC", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x10aef64 | out: lpCommandLine="net stop MSDTC", lpProcessInformation=0x10aef64*(hProcess=0xe0, hThread=0xdc, dwProcessId=0xfd0, dwThreadId=0xf18)) returned 1 [0090.178] CloseHandle (hObject=0xdc) returned 1 [0090.178] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1 [0090.178] GetProcessHeap () returned 0x37d0000 [0090.178] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x37d6e40) returned 1 [0090.178] GetEnvironmentStringsW () returned 0x37d6e40* [0090.179] GetProcessHeap () returned 0x37d0000 [0090.179] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0xb1a) returned 0x37d4db8 [0090.179] FreeEnvironmentStringsA (penv="=") returned 1 [0090.179] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0xffffffff) returned 0x0 [0091.012] GetExitCodeProcess (in: hProcess=0xe0, lpExitCode=0x10aeefc | out: lpExitCode=0x10aeefc*=0x2) returned 1 [0091.014] CloseHandle (hObject=0xe0) returned 1 [0091.014] _vsnwprintf (in: _Buffer=0x10aefe4, _BufferCount=0x13, _Format="%08X", _ArgList=0x10aef04 | out: _Buffer="00000002") returned 8 [0091.014] SetEnvironmentVariableW (lpName="=ExitCode", lpValue="00000002") returned 1 [0091.024] GetProcessHeap () returned 0x37d0000 [0091.024] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x37d4db8) returned 1 [0091.024] GetEnvironmentStringsW () returned 0x37d8400* [0091.025] GetProcessHeap () returned 0x37d0000 [0091.025] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0xb40) returned 0x37d4db8 [0091.025] FreeEnvironmentStringsA (penv="=") returned 1 [0091.025] SetEnvironmentVariableW (lpName="=ExitCodeAscii", lpValue=0x0) returned 1 [0091.025] GetProcessHeap () returned 0x37d0000 [0091.025] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x37d4db8) returned 1 [0091.025] GetEnvironmentStringsW () returned 0x37d8400* [0091.025] GetProcessHeap () returned 0x37d0000 [0091.025] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0xb40) returned 0x37d4db8 [0091.025] FreeEnvironmentStringsA (penv="=") returned 1 [0091.025] GetProcessHeap () returned 0x37d0000 [0091.025] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x37d80d0) returned 1 [0091.025] DeleteProcThreadAttributeList (in: lpAttributeList=0x10aef90 | out: lpAttributeList=0x10aef90) [0091.025] ??_V@YAXPAX@Z () returned 0x1 [0091.025] _get_osfhandle (_FileHandle=1) returned 0x90 [0091.026] SetConsoleMode (hConsoleHandle=0x90, dwMode=0x3) returned 1 [0091.028] _get_osfhandle (_FileHandle=1) returned 0x90 [0091.028] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x1203890 | out: lpMode=0x1203890) returned 1 [0091.041] _get_osfhandle (_FileHandle=1) returned 0x90 [0091.041] SetConsoleMode (hConsoleHandle=0x90, dwMode=0x7) returned 1 [0091.049] _get_osfhandle (_FileHandle=0) returned 0x8c [0091.049] GetConsoleMode (in: hConsoleHandle=0x8c, lpMode=0x1203894 | out: lpMode=0x1203894) returned 1 [0091.065] _get_osfhandle (_FileHandle=0) returned 0x8c [0091.065] SetConsoleMode (hConsoleHandle=0x8c, dwMode=0x1e7) returned 1 [0091.072] SetConsoleInputExeNameW () returned 0x1 [0091.072] GetConsoleOutputCP () returned 0x1b5 [0091.075] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x1203850 | out: lpCPInfo=0x1203850) returned 1 [0091.075] SetThreadUILanguage (LangId=0x0) returned 0x35c0409 [0091.076] exit (_Code=2) [0091.077] ??_V@YAXPAX@Z () returned 0x1 Thread: id = 58 os_tid = 0xfa0 Process: id = "20" image_name = "conhost.exe" filename = "c:\\windows\\system32\\conhost.exe" page_root = "0x5498a000" os_pid = "0x1280" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "19" os_parent_pid = "0x128c" cmd_line = "\\??\\C:\\WINDOWS\\system32\\conhost.exe 0xffffffff -ForceV1" cur_dir = "C:\\WINDOWS" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000faa5" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 53 os_tid = 0xffc Thread: id = 54 os_tid = 0x814 Thread: id = 55 os_tid = 0xbb4 Thread: id = 56 os_tid = 0xf98 Thread: id = 57 os_tid = 0x13fc Process: id = "21" image_name = "net.exe" filename = "c:\\windows\\syswow64\\net.exe" page_root = "0x5521000" os_pid = "0xfd0" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "19" os_parent_pid = "0x128c" cmd_line = "net stop MSDTC" cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000faa5" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 59 os_tid = 0xf18 Thread: id = 60 os_tid = 0x12a4 Process: id = "22" image_name = "net1.exe" filename = "c:\\windows\\syswow64\\net1.exe" page_root = "0x55213000" os_pid = "0x12a0" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "21" os_parent_pid = "0xfd0" cmd_line = "C:\\WINDOWS\\system32\\net1 stop MSDTC" cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000faa5" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 61 os_tid = 0x129c [0090.516] GetModuleHandleA (lpModuleName=0x0) returned 0x230000 [0090.516] __set_app_type (_Type=0x1) [0090.516] __p__fmode () returned 0x76953c14 [0090.516] __p__commode () returned 0x769549ec [0090.516] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x236f20) returned 0x0 [0090.517] __getmainargs (in: _Argc=0x24f608, _Argv=0x24f60c, _Env=0x24f610, _DoWildCard=0, _StartInfo=0x24f61c | out: _Argc=0x24f608, _Argv=0x24f60c, _Env=0x24f610) returned 0 [0090.517] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0090.517] GetConsoleOutputCP () returned 0x1b5 [0090.519] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x256fa0 | out: lpCPInfo=0x256fa0) returned 1 [0090.519] SetThreadUILanguage (LangId=0x0) returned 0x2580409 [0090.525] sprintf_s (in: _DstBuf=0x237fe64, _DstSize=0xc, _Format=".%u" | out: _DstBuf=".437") returned 4 [0090.525] setlocale (category=0, locale=".437") returned="English_United States.437" [0090.529] GetStdHandle (nStdHandle=0xfffffff5) returned 0x90 [0090.529] GetStdHandle (nStdHandle=0xfffffff4) returned 0x94 [0090.529] GetCommandLineW () returned="C:\\WINDOWS\\system32\\net1 stop MSDTC" [0090.529] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x237fc0c, nSize=0x104 | out: lpFilename="C:\\WINDOWS\\SysWOW64\\net1.exe" (normalized: "c:\\windows\\syswow64\\net1.exe")) returned 0x1c [0090.529] RtlAllocateHeap (HeapHandle=0x2710000, Flags=0x0, Size=0x54) returned 0x27142c0 [0090.529] NetApiBufferAllocate (in: ByteCount=0x10, Buffer=0x237fc08 | out: Buffer=0x237fc08*=0x27180c0) returned 0x0 [0090.529] NetApiBufferAllocate (in: ByteCount=0x10, Buffer=0x237fc04 | out: Buffer=0x237fc04*=0x2718180) returned 0x0 [0090.529] __iob_func () returned 0x76952608 [0090.529] _fileno (_File=0x76952608) returned 0 [0090.529] _setmode (_FileHandle=0, _Mode=16384) returned 16384 [0090.530] _wcsicmp (_String1="accounts", _String2="stop") returned -18 [0090.530] _wcsicmp (_String1="computer", _String2="stop") returned -16 [0090.530] _wcsicmp (_String1="config", _String2="stop") returned -16 [0090.530] _wcsicmp (_String1="continue", _String2="stop") returned -16 [0090.530] _wcsicmp (_String1="cont", _String2="stop") returned -16 [0090.530] _wcsicmp (_String1="file", _String2="stop") returned -13 [0090.530] _wcsicmp (_String1="files", _String2="stop") returned -13 [0090.530] _wcsicmp (_String1="group", _String2="stop") returned -12 [0090.530] _wcsicmp (_String1="groups", _String2="stop") returned -12 [0090.530] _wcsicmp (_String1="help", _String2="stop") returned -11 [0090.530] _wcsicmp (_String1="helpmsg", _String2="stop") returned -11 [0090.530] _wcsicmp (_String1="localgroup", _String2="stop") returned -7 [0090.530] _wcsicmp (_String1="pause", _String2="stop") returned -3 [0090.530] _wcsicmp (_String1="session", _String2="stop") returned -15 [0090.530] _wcsicmp (_String1="sessions", _String2="stop") returned -15 [0090.530] _wcsicmp (_String1=0x231ffc, _String2="stop") returned -15 [0090.531] _wcsicmp (_String1="share", _String2="stop") returned -12 [0090.531] _wcsicmp (_String1="start", _String2="stop") returned -14 [0090.531] _wcsicmp (_String1="stats", _String2="stop") returned -14 [0090.531] _wcsicmp (_String1="statistics", _String2="stop") returned -14 [0090.531] _wcsicmp (_String1="stop", _String2="stop") returned 0 [0090.531] _wcsicmp (_String1="accounts", _String2="MSDTC") returned -12 [0090.531] _wcsicmp (_String1="computer", _String2="MSDTC") returned -10 [0090.531] _wcsicmp (_String1="config", _String2="MSDTC") returned -10 [0090.531] _wcsicmp (_String1="continue", _String2="MSDTC") returned -10 [0090.531] _wcsicmp (_String1="cont", _String2="MSDTC") returned -10 [0090.531] _wcsicmp (_String1="file", _String2="MSDTC") returned -7 [0090.531] _wcsicmp (_String1="files", _String2="MSDTC") returned -7 [0090.531] _wcsicmp (_String1="group", _String2="MSDTC") returned -6 [0090.531] _wcsicmp (_String1="groups", _String2="MSDTC") returned -6 [0090.531] _wcsicmp (_String1="help", _String2="MSDTC") returned -5 [0090.531] _wcsicmp (_String1="helpmsg", _String2="MSDTC") returned -5 [0090.531] _wcsicmp (_String1="localgroup", _String2="MSDTC") returned -1 [0090.531] _wcsicmp (_String1="pause", _String2="MSDTC") returned 3 [0090.532] _wcsicmp (_String1="session", _String2="MSDTC") returned 6 [0090.532] _wcsicmp (_String1="sessions", _String2="MSDTC") returned 6 [0090.532] _wcsicmp (_String1="sess", _String2="MSDTC") returned 6 [0090.532] _wcsicmp (_String1="share", _String2="MSDTC") returned 6 [0090.532] _wcsicmp (_String1="start", _String2="MSDTC") returned 6 [0090.532] _wcsicmp (_String1="stats", _String2="MSDTC") returned 6 [0090.532] _wcsicmp (_String1="statistics", _String2="MSDTC") returned 6 [0090.532] _wcsicmp (_String1="stop", _String2="MSDTC") returned 6 [0090.532] _wcsicmp (_String1="time", _String2="MSDTC") returned 7 [0090.532] _wcsicmp (_String1="user", _String2="MSDTC") returned 8 [0090.532] _wcsicmp (_String1="users", _String2="MSDTC") returned 8 [0090.532] _wcsicmp (_String1="msg", _String2="MSDTC") returned 3 [0090.532] _wcsicmp (_String1="messenger", _String2="MSDTC") returned -14 [0090.532] _wcsicmp (_String1="receiver", _String2="MSDTC") returned 5 [0090.532] _wcsicmp (_String1="rcv", _String2="MSDTC") returned 5 [0090.532] _wcsicmp (_String1="netpopup", _String2="MSDTC") returned 1 [0090.532] _wcsicmp (_String1="redirector", _String2="MSDTC") returned 5 [0090.532] _wcsicmp (_String1="redir", _String2="MSDTC") returned 5 [0090.533] _wcsicmp (_String1="rdr", _String2="MSDTC") returned 5 [0090.533] _wcsicmp (_String1="workstation", _String2="MSDTC") returned 10 [0090.533] _wcsicmp (_String1="work", _String2="MSDTC") returned 10 [0090.533] _wcsicmp (_String1="wksta", _String2="MSDTC") returned 10 [0090.533] _wcsicmp (_String1="prdr", _String2="MSDTC") returned 3 [0090.533] _wcsicmp (_String1="devrdr", _String2="MSDTC") returned -9 [0090.533] _wcsicmp (_String1="lanmanworkstation", _String2="MSDTC") returned -1 [0090.533] _wcsicmp (_String1="server", _String2="MSDTC") returned 6 [0090.533] _wcsicmp (_String1="svr", _String2="MSDTC") returned 6 [0090.533] _wcsicmp (_String1="srv", _String2="MSDTC") returned 6 [0090.533] _wcsicmp (_String1="lanmanserver", _String2="MSDTC") returned -1 [0090.533] _wcsicmp (_String1="alerter", _String2="MSDTC") returned -12 [0090.533] _wcsicmp (_String1="netlogon", _String2="MSDTC") returned 1 [0090.533] _wcsupr (in: _String="MSDTC" | out: _String="MSDTC") returned="MSDTC" [0090.533] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x80000000) returned 0x27205c8 [0090.539] GetServiceKeyNameW (in: hSCManager=0x27205c8, lpDisplayName="MSDTC", lpServiceName=0x258c28, lpcchBuffer=0x237fb7c | out: lpServiceName="", lpcchBuffer=0x237fb7c) returned 0 [0090.540] _wcsicmp (_String1="msg", _String2="MSDTC") returned 3 [0090.540] _wcsicmp (_String1="messenger", _String2="MSDTC") returned -14 [0090.540] _wcsicmp (_String1="receiver", _String2="MSDTC") returned 5 [0090.540] _wcsicmp (_String1="rcv", _String2="MSDTC") returned 5 [0090.540] _wcsicmp (_String1="redirector", _String2="MSDTC") returned 5 [0090.540] _wcsicmp (_String1="redir", _String2="MSDTC") returned 5 [0090.540] _wcsicmp (_String1="rdr", _String2="MSDTC") returned 5 [0090.540] _wcsicmp (_String1="workstation", _String2="MSDTC") returned 10 [0090.540] _wcsicmp (_String1="work", _String2="MSDTC") returned 10 [0090.540] _wcsicmp (_String1="wksta", _String2="MSDTC") returned 10 [0090.540] _wcsicmp (_String1="prdr", _String2="MSDTC") returned 3 [0090.540] _wcsicmp (_String1="devrdr", _String2="MSDTC") returned -9 [0090.541] _wcsicmp (_String1="lanmanworkstation", _String2="MSDTC") returned -1 [0090.541] _wcsicmp (_String1="server", _String2="MSDTC") returned 6 [0090.541] _wcsicmp (_String1="svr", _String2="MSDTC") returned 6 [0090.541] _wcsicmp (_String1="srv", _String2="MSDTC") returned 6 [0090.541] _wcsicmp (_String1="lanmanserver", _String2="MSDTC") returned -1 [0090.541] _wcsicmp (_String1="alerter", _String2="MSDTC") returned -12 [0090.541] _wcsicmp (_String1="netlogon", _String2="MSDTC") returned 1 [0090.541] _wcsicmp (_String1="MSDTC", _String2="WORKSTATION") returned -10 [0090.541] _wcsicmp (_String1="MSDTC", _String2="LanmanWorkstation") returned 1 [0090.541] _wcsicmp (_String1="MSDTC", _String2="SERVER") returned -6 [0090.541] _wcsicmp (_String1="MSDTC", _String2="LanmanServer") returned 1 [0090.541] _wcsicmp (_String1="MSDTC", _String2="BROWSER") returned 11 [0090.541] _wcsicmp (_String1="MSDTC", _String2="BROWSER") returned 11 [0090.541] _wcsicmp (_String1="MSDTC", _String2="MESSENGER") returned 14 [0090.541] _wcsicmp (_String1="MSDTC", _String2="MESSENGER") returned 14 [0090.541] _wcsicmp (_String1="MSDTC", _String2="NETRUN") returned -1 [0090.541] _wcsicmp (_String1="MSDTC", _String2="NETRUN") returned -1 [0090.541] _wcsicmp (_String1="MSDTC", _String2="SPOOLER") returned -6 [0090.541] _wcsicmp (_String1="MSDTC", _String2="SPOOLER") returned -6 [0090.541] _wcsicmp (_String1="MSDTC", _String2="ALERTER") returned 12 [0090.541] _wcsicmp (_String1="MSDTC", _String2="ALERTER") returned 12 [0090.541] _wcsicmp (_String1="MSDTC", _String2="NETLOGON") returned -1 [0090.542] _wcsicmp (_String1="MSDTC", _String2="NETLOGON") returned -1 [0090.542] _wcsicmp (_String1="MSDTC", _String2="NETPOPUP") returned -1 [0090.542] _wcsicmp (_String1="MSDTC", _String2="NETPOPUP") returned -1 [0090.542] _wcsicmp (_String1="MSDTC", _String2="SQLSERVER") returned -6 [0090.542] _wcsicmp (_String1="MSDTC", _String2="SQLSERVER") returned -6 [0090.542] _wcsicmp (_String1="MSDTC", _String2="REPLICATOR") returned -5 [0090.542] _wcsicmp (_String1="MSDTC", _String2="REPLICATOR") returned -5 [0090.542] _wcsicmp (_String1="MSDTC", _String2="REMOTEBOOT") returned -5 [0090.542] _wcsicmp (_String1="MSDTC", _String2="REMOTEBOOT") returned -5 [0090.542] _wcsicmp (_String1="MSDTC", _String2="TIMESOURCE") returned -7 [0090.542] _wcsicmp (_String1="MSDTC", _String2="TIMESOURCE") returned -7 [0090.542] _wcsicmp (_String1="MSDTC", _String2="AFP") returned 12 [0090.542] _wcsicmp (_String1="MSDTC", _String2="AFP") returned 12 [0090.542] _wcsicmp (_String1="MSDTC", _String2="UPS") returned -8 [0090.542] _wcsicmp (_String1="MSDTC", _String2="UPS") returned -8 [0090.542] _wcsicmp (_String1="MSDTC", _String2="XACTSRV") returned -11 [0090.542] _wcsicmp (_String1="MSDTC", _String2="XACTSRV") returned -11 [0090.542] _wcsicmp (_String1="MSDTC", _String2="TCPIP") returned -7 [0090.542] _wcsicmp (_String1="MSDTC", _String2="TCPIP") returned -7 [0090.542] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x1) returned 0x2720640 [0090.543] OpenServiceW (hSCManager=0x2720640, lpServiceName="MSDTC", dwDesiredAccess=0x84) returned 0x27207f8 [0090.545] ResolveDelayLoadedAPI () returned 0x73f29e60 [0090.546] ControlService (in: hService=0x27207f8, dwControl=0x4, lpServiceStatus=0x237faf8 | out: lpServiceStatus=0x237faf8*(dwServiceType=0x10, dwCurrentState=0x1, dwControlsAccepted=0x0, dwWin32ExitCode=0x435, dwServiceSpecificExitCode=0x0, dwCheckPoint=0x0, dwWaitHint=0x0)) returned 0 [0090.546] GetLastError () returned 0x426 [0090.546] QueryServiceStatus (in: hService=0x27207f8, lpServiceStatus=0x237faf8 | out: lpServiceStatus=0x237faf8*(dwServiceType=0x10, dwCurrentState=0x1, dwControlsAccepted=0x0, dwWin32ExitCode=0x435, dwServiceSpecificExitCode=0x0, dwCheckPoint=0x0, dwWaitHint=0x0)) returned 1 [0090.547] LocalAlloc (uFlags=0x40, uBytes=0x28) returned 0x2712df0 [0090.547] wcscpy_s (in: _Destination=0x2712e0c, _SizeInWords=0x6, _Source="MSDTC" | out: _Destination="MSDTC") returned 0x0 [0090.547] CloseServiceHandle (hSCObject=0x2720640) returned 1 [0090.548] CloseServiceHandle (hSCObject=0x27207f8) returned 1 [0090.548] NetApiBufferAllocate (in: ByteCount=0x1e0, Buffer=0x237fadc | out: Buffer=0x237fadc*=0x27202f0) returned 0x0 [0090.548] _wcsicmp (_String1="MSDTC", _String2="WORKSTATION") returned -10 [0090.548] _wcsicmp (_String1="MSDTC", _String2="LanmanWorkstation") returned 1 [0090.548] _wcsicmp (_String1="MSDTC", _String2="SERVER") returned -6 [0090.548] _wcsicmp (_String1="MSDTC", _String2="LanmanServer") returned 1 [0090.548] _wcsicmp (_String1="MSDTC", _String2="BROWSER") returned 11 [0090.548] _wcsicmp (_String1="MSDTC", _String2="BROWSER") returned 11 [0090.548] _wcsicmp (_String1="MSDTC", _String2="MESSENGER") returned 14 [0090.548] _wcsicmp (_String1="MSDTC", _String2="MESSENGER") returned 14 [0090.548] _wcsicmp (_String1="MSDTC", _String2="NETRUN") returned -1 [0090.548] _wcsicmp (_String1="MSDTC", _String2="NETRUN") returned -1 [0090.548] _wcsicmp (_String1="MSDTC", _String2="SPOOLER") returned -6 [0090.549] _wcsicmp (_String1="MSDTC", _String2="SPOOLER") returned -6 [0090.549] _wcsicmp (_String1="MSDTC", _String2="ALERTER") returned 12 [0090.549] _wcsicmp (_String1="MSDTC", _String2="ALERTER") returned 12 [0090.549] _wcsicmp (_String1="MSDTC", _String2="NETLOGON") returned -1 [0090.549] _wcsicmp (_String1="MSDTC", _String2="NETLOGON") returned -1 [0090.549] _wcsicmp (_String1="MSDTC", _String2="NETPOPUP") returned -1 [0090.549] _wcsicmp (_String1="MSDTC", _String2="NETPOPUP") returned -1 [0090.549] _wcsicmp (_String1="MSDTC", _String2="SQLSERVER") returned -6 [0090.549] _wcsicmp (_String1="MSDTC", _String2="SQLSERVER") returned -6 [0090.549] _wcsicmp (_String1="MSDTC", _String2="REPLICATOR") returned -5 [0090.549] _wcsicmp (_String1="MSDTC", _String2="REPLICATOR") returned -5 [0090.549] _wcsicmp (_String1="MSDTC", _String2="REMOTEBOOT") returned -5 [0090.549] _wcsicmp (_String1="MSDTC", _String2="REMOTEBOOT") returned -5 [0090.549] _wcsicmp (_String1="MSDTC", _String2="TIMESOURCE") returned -7 [0090.549] _wcsicmp (_String1="MSDTC", _String2="TIMESOURCE") returned -7 [0090.549] _wcsicmp (_String1="MSDTC", _String2="AFP") returned 12 [0090.549] _wcsicmp (_String1="MSDTC", _String2="AFP") returned 12 [0090.549] _wcsicmp (_String1="MSDTC", _String2="UPS") returned -8 [0090.549] _wcsicmp (_String1="MSDTC", _String2="UPS") returned -8 [0090.549] _wcsicmp (_String1="MSDTC", _String2="XACTSRV") returned -11 [0090.549] _wcsicmp (_String1="MSDTC", _String2="XACTSRV") returned -11 [0090.549] _wcsicmp (_String1="MSDTC", _String2="TCPIP") returned -7 [0090.549] _wcsicmp (_String1="MSDTC", _String2="TCPIP") returned -7 [0090.550] wcsncpy_s (in: _Destination=0x27204c4, _SizeInWords=0x6, _Source="MSDTC", _MaxCount=0x5 | out: _Destination="MSDTC") returned 0x0 [0090.550] wcsncpy_s (in: _Destination=0x27204b8, _SizeInWords=0x6, _Source="MSDTC", _MaxCount=0x5 | out: _Destination="MSDTC") returned 0x0 [0090.550] NetApiBufferFree (Buffer=0x2712df0) returned 0x0 [0090.550] NetApiBufferAllocate (in: ByteCount=0xfa0, Buffer=0x237f9fc | out: Buffer=0x237f9fc*=0x2722010) returned 0x0 [0090.550] OpenServiceW (hSCManager=0x27205c8, lpServiceName="MSDTC", dwDesiredAccess=0xc) returned 0x2720758 [0090.550] QueryServiceStatus (in: hService=0x2720758, lpServiceStatus=0x237fa00 | out: lpServiceStatus=0x237fa00*(dwServiceType=0x10, dwCurrentState=0x1, dwControlsAccepted=0x0, dwWin32ExitCode=0x435, dwServiceSpecificExitCode=0x0, dwCheckPoint=0x0, dwWaitHint=0x0)) returned 1 [0090.551] GetServiceDisplayNameW (in: hSCManager=0x27205c8, lpServiceName="MSDTC", lpDisplayName=0x257820, lpcchBuffer=0x237f9dc | out: lpDisplayName="Distributed Transaction Coordinator", lpcchBuffer=0x237f9dc) returned 1 [0090.551] NetApiBufferFree (Buffer=0x2722010) returned 0x0 [0090.551] CloseServiceHandle (hSCObject=0x2720758) returned 1 [0090.552] wcscpy_s (in: _Destination=0x257610, _SizeInWords=0x104, _Source="NETMSG" | out: _Destination="NETMSG") returned 0x0 [0090.552] LoadLibraryExW (lpLibFileName="NETMSG", hFile=0x0, dwFlags=0x20) returned 0x23f0002 [0090.553] FormatMessageW (in: dwFlags=0x2800, lpSource=0x23f0002, dwMessageId=0xdc1, dwLanguageId=0x0, lpBuffer=0x257c20, nSize=0x800, Arguments=0x2573d0 | out: lpBuffer="The Distributed Transaction Coordinator service is not started.\r\n") returned 0x41 [0090.554] GetFileType (hFile=0x94) returned 0x2 [0090.554] GetConsoleMode (in: hConsoleHandle=0x94, lpMode=0x237f938 | out: lpMode=0x237f938) returned 1 [0090.557] WriteConsoleW (in: hConsoleOutput=0x94, lpBuffer=0x257c20*, nNumberOfCharsToWrite=0x41, lpNumberOfCharsWritten=0x237f944, lpReserved=0x0 | out: lpBuffer=0x257c20*, lpNumberOfCharsWritten=0x237f944*=0x41) returned 1 [0090.560] GetFileType (hFile=0x94) returned 0x2 [0090.560] GetConsoleMode (in: hConsoleHandle=0x94, lpMode=0x237f938 | out: lpMode=0x237f938) returned 1 [0090.562] WriteConsoleW (in: hConsoleOutput=0x94, lpBuffer=0x2312e4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x237f944, lpReserved=0x0 | out: lpBuffer=0x2312e4*, lpNumberOfCharsWritten=0x237f944*=0x2) returned 1 [0090.564] _ultow (in: _Dest=0xdc1, _Radix=37222940 | out: _Dest=0xdc1) returned="3521" [0090.564] FormatMessageW (in: dwFlags=0x2800, lpSource=0x23f0002, dwMessageId=0xdba, dwLanguageId=0x0, lpBuffer=0x257c20, nSize=0x800, Arguments=0x2573d0 | out: lpBuffer="More help is available by typing NET HELPMSG 3521.\r\n") returned 0x34 [0090.564] GetFileType (hFile=0x94) returned 0x2 [0090.564] GetConsoleMode (in: hConsoleHandle=0x94, lpMode=0x237f9d8 | out: lpMode=0x237f9d8) returned 1 [0090.566] WriteConsoleW (in: hConsoleOutput=0x94, lpBuffer=0x257c20*, nNumberOfCharsToWrite=0x34, lpNumberOfCharsWritten=0x237f9e4, lpReserved=0x0 | out: lpBuffer=0x257c20*, lpNumberOfCharsWritten=0x237f9e4*=0x34) returned 1 [0090.567] GetFileType (hFile=0x94) returned 0x2 [0090.567] GetConsoleMode (in: hConsoleHandle=0x94, lpMode=0x237f9d8 | out: lpMode=0x237f9d8) returned 1 [0090.569] WriteConsoleW (in: hConsoleOutput=0x94, lpBuffer=0x2312e4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x237f9e4, lpReserved=0x0 | out: lpBuffer=0x2312e4*, lpNumberOfCharsWritten=0x237f9e4*=0x2) returned 1 [0090.570] NetApiBufferFree (Buffer=0x27180c0) returned 0x0 [0090.570] NetApiBufferFree (Buffer=0x2718180) returned 0x0 [0090.570] GetCommandLineW () returned="C:\\WINDOWS\\system32\\net1 stop MSDTC" [0090.570] exit (_Code=2) Thread: id = 62 os_tid = 0x10a4 Process: id = "23" image_name = "cmd.exe" filename = "c:\\windows\\syswow64\\cmd.exe" page_root = "0x5dab000" os_pid = "0x110c" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x13d4" cmd_line = "C:\\WINDOWS\\system32\\cmd.exe /c bcdedit /set {default} bootstatuspolicy ignoreallfailures" cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000faa5" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 63 os_tid = 0xaf8 [0092.513] GetModuleHandleA (lpModuleName=0x0) returned 0x11d0000 [0092.513] __set_app_type (_Type=0x1) [0092.513] __p__fmode () returned 0x76953c14 [0092.513] __p__commode () returned 0x769549ec [0092.513] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x11e6fd0) returned 0x0 [0092.514] __getmainargs (in: _Argc=0x11fd1a4, _Argv=0x11fd1a8, _Env=0x11fd1ac, _DoWildCard=0, _StartInfo=0x11fd1b8 | out: _Argc=0x11fd1a4, _Argv=0x11fd1a8, _Env=0x11fd1ac) returned 0 [0092.514] _onexit (_Func=0x11e8030) returned 0x11e8030 [0092.514] _onexit (_Func=0x11e8040) returned 0x11e8040 [0092.525] _onexit (_Func=0x11e8050) returned 0x11e8050 [0092.525] _onexit (_Func=0x11e8060) returned 0x11e8060 [0092.525] _onexit (_Func=0x11e8070) returned 0x11e8070 [0092.526] _onexit (_Func=0x11e8080) returned 0x11e8080 [0092.526] GetCurrentThreadId () returned 0xaf8 [0092.526] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0xaf8) returned 0xbc [0092.526] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x74030000 [0092.526] GetProcAddress (hModule=0x74030000, lpProcName="SetThreadUILanguage") returned 0x74044f70 [0092.526] SetThreadUILanguage (LangId=0x0) returned 0x510409 [0092.532] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0092.532] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x75fba8 | out: phkResult=0x75fba8*=0x0) returned 0x2 [0092.533] VirtualQuery (in: lpAddress=0x75fbb3, lpBuffer=0x75fb60, dwLength=0x1c | out: lpBuffer=0x75fb60*(BaseAddress=0x75f000, AllocationBase=0x660000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0092.533] VirtualQuery (in: lpAddress=0x660000, lpBuffer=0x75fb60, dwLength=0x1c | out: lpBuffer=0x75fb60*(BaseAddress=0x660000, AllocationBase=0x660000, AllocationProtect=0x4, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000)) returned 0x1c [0092.533] VirtualQuery (in: lpAddress=0x661000, lpBuffer=0x75fb60, dwLength=0x1c | out: lpBuffer=0x75fb60*(BaseAddress=0x661000, AllocationBase=0x660000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x104, Type=0x20000)) returned 0x1c [0092.533] VirtualQuery (in: lpAddress=0x663000, lpBuffer=0x75fb60, dwLength=0x1c | out: lpBuffer=0x75fb60*(BaseAddress=0x663000, AllocationBase=0x660000, AllocationProtect=0x4, RegionSize=0xfd000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0092.533] VirtualQuery (in: lpAddress=0x760000, lpBuffer=0x75fb60, dwLength=0x1c | out: lpBuffer=0x75fb60*(BaseAddress=0x760000, AllocationBase=0x760000, AllocationProtect=0x2, RegionSize=0x4000, State=0x1000, Protect=0x2, Type=0x40000)) returned 0x1c [0092.533] GetConsoleOutputCP () returned 0x1b5 [0092.536] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x1203850 | out: lpCPInfo=0x1203850) returned 1 [0092.537] SetConsoleCtrlHandler (HandlerRoutine=0x11f7260, Add=1) returned 1 [0092.537] _get_osfhandle (_FileHandle=1) returned 0x90 [0092.537] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x120388c | out: lpMode=0x120388c) returned 1 [0092.539] _get_osfhandle (_FileHandle=0) returned 0x8c [0092.539] GetConsoleMode (in: hConsoleHandle=0x8c, lpMode=0x1203888 | out: lpMode=0x1203888) returned 1 [0092.540] _get_osfhandle (_FileHandle=1) returned 0x90 [0092.541] SetConsoleMode (hConsoleHandle=0x90, dwMode=0x0) returned 1 [0092.543] _get_osfhandle (_FileHandle=1) returned 0x90 [0092.543] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x1203890 | out: lpMode=0x1203890) returned 1 [0092.564] _get_osfhandle (_FileHandle=1) returned 0x90 [0092.564] SetConsoleMode (hConsoleHandle=0x90, dwMode=0x7) returned 1 [0092.566] _get_osfhandle (_FileHandle=0) returned 0x8c [0092.566] GetConsoleMode (in: hConsoleHandle=0x8c, lpMode=0x1203894 | out: lpMode=0x1203894) returned 1 [0092.567] _get_osfhandle (_FileHandle=0) returned 0x8c [0092.567] SetConsoleMode (hConsoleHandle=0x8c, dwMode=0x1e7) returned 1 [0092.569] GetEnvironmentStringsW () returned 0x154e40* [0092.569] GetProcessHeap () returned 0x150000 [0092.569] RtlAllocateHeap (HeapHandle=0x150000, Flags=0x8, Size=0xaca) returned 0x155918 [0092.569] FreeEnvironmentStringsA (penv="A") returned 1 [0092.569] GetProcessHeap () returned 0x150000 [0092.569] RtlAllocateHeap (HeapHandle=0x150000, Flags=0x8, Size=0x4) returned 0x154920 [0092.570] GetEnvironmentStringsW () returned 0x154e40* [0092.570] GetProcessHeap () returned 0x150000 [0092.570] RtlAllocateHeap (HeapHandle=0x150000, Flags=0x8, Size=0xaca) returned 0x1563f0 [0092.570] FreeEnvironmentStringsA (penv="A") returned 1 [0092.570] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x75eb04 | out: phkResult=0x75eb04*=0xcc) returned 0x0 [0092.570] RegQueryValueExW (in: hKey=0xcc, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x75eb0c, lpData=0x75eb10, lpcbData=0x75eb08*=0x1000 | out: lpType=0x75eb0c*=0x0, lpData=0x75eb10*=0x20, lpcbData=0x75eb08*=0x1000) returned 0x2 [0092.570] RegQueryValueExW (in: hKey=0xcc, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x75eb0c, lpData=0x75eb10, lpcbData=0x75eb08*=0x1000 | out: lpType=0x75eb0c*=0x4, lpData=0x75eb10*=0x1, lpcbData=0x75eb08*=0x4) returned 0x0 [0092.570] RegQueryValueExW (in: hKey=0xcc, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x75eb0c, lpData=0x75eb10, lpcbData=0x75eb08*=0x1000 | out: lpType=0x75eb0c*=0x0, lpData=0x75eb10*=0x1, lpcbData=0x75eb08*=0x1000) returned 0x2 [0092.570] RegQueryValueExW (in: hKey=0xcc, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x75eb0c, lpData=0x75eb10, lpcbData=0x75eb08*=0x1000 | out: lpType=0x75eb0c*=0x4, lpData=0x75eb10*=0x0, lpcbData=0x75eb08*=0x4) returned 0x0 [0092.570] RegQueryValueExW (in: hKey=0xcc, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x75eb0c, lpData=0x75eb10, lpcbData=0x75eb08*=0x1000 | out: lpType=0x75eb0c*=0x4, lpData=0x75eb10*=0x40, lpcbData=0x75eb08*=0x4) returned 0x0 [0092.571] RegQueryValueExW (in: hKey=0xcc, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x75eb0c, lpData=0x75eb10, lpcbData=0x75eb08*=0x1000 | out: lpType=0x75eb0c*=0x4, lpData=0x75eb10*=0x40, lpcbData=0x75eb08*=0x4) returned 0x0 [0092.571] RegQueryValueExW (in: hKey=0xcc, lpValueName="AutoRun", lpReserved=0x0, lpType=0x75eb0c, lpData=0x75eb10, lpcbData=0x75eb08*=0x1000 | out: lpType=0x75eb0c*=0x0, lpData=0x75eb10*=0x40, lpcbData=0x75eb08*=0x1000) returned 0x2 [0092.571] RegCloseKey (hKey=0xcc) returned 0x0 [0092.571] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x75eb04 | out: phkResult=0x75eb04*=0xcc) returned 0x0 [0092.571] RegQueryValueExW (in: hKey=0xcc, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x75eb0c, lpData=0x75eb10, lpcbData=0x75eb08*=0x1000 | out: lpType=0x75eb0c*=0x0, lpData=0x75eb10*=0x40, lpcbData=0x75eb08*=0x1000) returned 0x2 [0092.571] RegQueryValueExW (in: hKey=0xcc, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x75eb0c, lpData=0x75eb10, lpcbData=0x75eb08*=0x1000 | out: lpType=0x75eb0c*=0x4, lpData=0x75eb10*=0x1, lpcbData=0x75eb08*=0x4) returned 0x0 [0092.571] RegQueryValueExW (in: hKey=0xcc, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x75eb0c, lpData=0x75eb10, lpcbData=0x75eb08*=0x1000 | out: lpType=0x75eb0c*=0x0, lpData=0x75eb10*=0x1, lpcbData=0x75eb08*=0x1000) returned 0x2 [0092.571] RegQueryValueExW (in: hKey=0xcc, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x75eb0c, lpData=0x75eb10, lpcbData=0x75eb08*=0x1000 | out: lpType=0x75eb0c*=0x4, lpData=0x75eb10*=0x0, lpcbData=0x75eb08*=0x4) returned 0x0 [0092.571] RegQueryValueExW (in: hKey=0xcc, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x75eb0c, lpData=0x75eb10, lpcbData=0x75eb08*=0x1000 | out: lpType=0x75eb0c*=0x4, lpData=0x75eb10*=0x9, lpcbData=0x75eb08*=0x4) returned 0x0 [0092.571] RegQueryValueExW (in: hKey=0xcc, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x75eb0c, lpData=0x75eb10, lpcbData=0x75eb08*=0x1000 | out: lpType=0x75eb0c*=0x4, lpData=0x75eb10*=0x9, lpcbData=0x75eb08*=0x4) returned 0x0 [0092.572] RegQueryValueExW (in: hKey=0xcc, lpValueName="AutoRun", lpReserved=0x0, lpType=0x75eb0c, lpData=0x75eb10, lpcbData=0x75eb08*=0x1000 | out: lpType=0x75eb0c*=0x0, lpData=0x75eb10*=0x9, lpcbData=0x75eb08*=0x1000) returned 0x2 [0092.572] RegCloseKey (hKey=0xcc) returned 0x0 [0092.572] time (in: timer=0x0 | out: timer=0x0) returned 0x5e3302d4 [0092.572] srand (_Seed=0x5e3302d4) [0092.572] GetCommandLineW () returned="C:\\WINDOWS\\system32\\cmd.exe /c bcdedit /set {default} bootstatuspolicy ignoreallfailures" [0092.572] malloc (_Size=0x4000) returned 0x2e2700 [0092.573] GetCommandLineW () returned="C:\\WINDOWS\\system32\\cmd.exe /c bcdedit /set {default} bootstatuspolicy ignoreallfailures" [0092.573] malloc (_Size=0xffce) returned 0x2f0048 [0092.574] ??_V@YAXPAX@Z () returned 0x75fae8 [0092.575] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x2f0048 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0092.575] malloc (_Size=0xffce) returned 0x300020 [0092.576] ??_V@YAXPAX@Z () returned 0x75f8bc [0092.577] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x300020, nSize=0x7fe7 | out: lpFilename="C:\\WINDOWS\\SysWOW64\\cmd.exe" (normalized: "c:\\windows\\syswow64\\cmd.exe")) returned 0x1b [0092.577] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x11ff840, nSize=0x2000 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath;C:\\WINDOWS\\system32;C:\\WINDOWS;C:\\WINDOWS\\System32\\Wbem;C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\;C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps") returned 0xbb [0092.577] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x11ff840, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0092.577] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x11ff840, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0092.577] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13 [0092.577] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11 [0092.577] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13 [0092.577] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13 [0092.577] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12 [0092.577] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4 [0092.577] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2 [0092.577] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8 [0092.578] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1 [0092.578] GetProcessHeap () returned 0x150000 [0092.578] RtlFreeHeap (HeapHandle=0x150000, Flags=0x0, BaseAddress=0x155918) returned 1 [0092.578] GetEnvironmentStringsW () returned 0x154e40* [0092.578] GetProcessHeap () returned 0x150000 [0092.578] RtlAllocateHeap (HeapHandle=0x150000, Flags=0x8, Size=0xae2) returned 0x1579b8 [0092.585] FreeEnvironmentStringsA (penv="A") returned 1 [0092.585] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x11ff840, nSize=0x2000 | out: lpBuffer="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1b [0092.585] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x11ff840, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0092.585] _wcsicmp (_String1="KEYS", _String2="CD") returned 8 [0092.586] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6 [0092.586] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8 [0092.586] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8 [0092.586] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7 [0092.586] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9 [0092.586] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7 [0092.586] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3 [0092.586] malloc (_Size=0xffce) returned 0x30fff8 [0092.587] ??_V@YAXPAX@Z () returned 0x75f654 [0092.587] GetProcessHeap () returned 0x150000 [0092.587] RtlAllocateHeap (HeapHandle=0x150000, Flags=0x8, Size=0x38) returned 0x150ae0 [0092.587] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x30fff8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0092.588] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x7fe7, lpBuffer=0x30fff8, lpFilePart=0x75f6a0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x75f6a0*="Desktop") returned 0x17 [0092.588] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\Desktop" (normalized: "c:\\users\\fd1hvy\\desktop")) returned 0x11 [0092.589] FindFirstFileW (in: lpFileName="C:\\Users", lpFindFileData=0x75f420 | out: lpFindFileData=0x75f420*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x475bb883, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x475bb883, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 0x150b20 [0092.589] FindClose (in: hFindFile=0x150b20 | out: hFindFile=0x150b20) returned 1 [0092.589] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy", lpFindFileData=0x75f420 | out: lpFindFileData=0x75f420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20fc850f, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x9de5855d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x9de5855d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD1HVy", cAlternateFileName="")) returned 0x150b20 [0092.589] FindClose (in: hFindFile=0x150b20 | out: hFindFile=0x150b20) returned 1 [0092.590] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", lpFindFileData=0x75f420 | out: lpFindFileData=0x75f420*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x5de49bf6, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0x5de49bf6, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 0x150b20 [0092.590] FindClose (in: hFindFile=0x150b20 | out: hFindFile=0x150b20) returned 1 [0092.590] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\Desktop" (normalized: "c:\\users\\fd1hvy\\desktop")) returned 0x11 [0092.590] SetCurrentDirectoryW (lpPathName="C:\\Users\\FD1HVy\\Desktop" (normalized: "c:\\users\\fd1hvy\\desktop")) returned 1 [0092.590] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Users\\FD1HVy\\Desktop") returned 1 [0092.590] GetProcessHeap () returned 0x150000 [0092.591] RtlFreeHeap (HeapHandle=0x150000, Flags=0x0, BaseAddress=0x1579b8) returned 1 [0092.591] GetEnvironmentStringsW () returned 0x154e40* [0092.591] GetProcessHeap () returned 0x150000 [0092.591] RtlAllocateHeap (HeapHandle=0x150000, Flags=0x8, Size=0xb1a) returned 0x156ec8 [0092.591] FreeEnvironmentStringsA (penv="=") returned 1 [0092.591] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x2f0048 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0092.591] GetProcessHeap () returned 0x150000 [0092.591] RtlFreeHeap (HeapHandle=0x150000, Flags=0x0, BaseAddress=0x150ae0) returned 1 [0092.591] ??_V@YAXPAX@Z () returned 0x1 [0092.591] ??_V@YAXPAX@Z () returned 0x1 [0092.591] GetProcessHeap () returned 0x150000 [0092.591] RtlAllocateHeap (HeapHandle=0x150000, Flags=0x8, Size=0x400e) returned 0x158fd0 [0092.592] GetProcessHeap () returned 0x150000 [0092.592] RtlAllocateHeap (HeapHandle=0x150000, Flags=0x8, Size=0x80) returned 0x1579f0 [0092.593] GetProcessHeap () returned 0x150000 [0092.593] RtlFreeHeap (HeapHandle=0x150000, Flags=0x0, BaseAddress=0x158fd0) returned 1 [0092.593] GetConsoleOutputCP () returned 0x1b5 [0092.600] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x1203850 | out: lpCPInfo=0x1203850) returned 1 [0092.600] GetUserDefaultLCID () returned 0x409 [0092.601] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x11ff82c, cchData=8 | out: lpLCData=":") returned 2 [0092.601] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x75fa10, cchData=128 | out: lpLCData="0") returned 2 [0092.601] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x75fa10, cchData=128 | out: lpLCData="0") returned 2 [0092.601] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x75fa10, cchData=128 | out: lpLCData="1") returned 2 [0092.601] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x11ff81c, cchData=8 | out: lpLCData="/") returned 2 [0092.601] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x11ff7b8, cchData=32 | out: lpLCData="Mon") returned 4 [0092.602] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x11ff778, cchData=32 | out: lpLCData="Tue") returned 4 [0092.602] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x11ff738, cchData=32 | out: lpLCData="Wed") returned 4 [0092.602] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x11ff6f8, cchData=32 | out: lpLCData="Thu") returned 4 [0092.602] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x11ff6b8, cchData=32 | out: lpLCData="Fri") returned 4 [0092.602] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x11ff678, cchData=32 | out: lpLCData="Sat") returned 4 [0092.602] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x11ff638, cchData=32 | out: lpLCData="Sun") returned 4 [0092.602] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x11ff80c, cchData=8 | out: lpLCData=".") returned 2 [0092.602] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x11ff7f8, cchData=8 | out: lpLCData=",") returned 2 [0092.602] setlocale (category=0, locale=".OCP") returned="English_United States.437" [0092.605] GetProcessHeap () returned 0x150000 [0092.605] RtlAllocateHeap (HeapHandle=0x150000, Flags=0x0, Size=0x20c) returned 0x157ac0 [0092.605] GetConsoleTitleW (in: lpConsoleTitle=0x157ac0, nSize=0x104 | out: lpConsoleTitle="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1c [0092.717] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x74030000 [0092.717] GetProcAddress (hModule=0x74030000, lpProcName="CopyFileExW") returned 0x74044330 [0092.717] GetProcAddress (hModule=0x74030000, lpProcName="IsDebuggerPresent") returned 0x74045930 [0092.717] GetProcAddress (hModule=0x74030000, lpProcName="SetConsoleInputExeNameW") returned 0x772c09d0 [0092.717] ??_V@YAXPAX@Z () returned 0x1 [0092.719] GetProcessHeap () returned 0x150000 [0092.719] RtlAllocateHeap (HeapHandle=0x150000, Flags=0x8, Size=0x400a) returned 0x158fd0 [0092.719] GetProcessHeap () returned 0x150000 [0092.719] RtlFreeHeap (HeapHandle=0x150000, Flags=0x0, BaseAddress=0x158fd0) returned 1 [0092.722] _wcsicmp (_String1="bcdedit", _String2=")") returned 57 [0092.722] _wcsicmp (_String1="FOR", _String2="bcdedit") returned 4 [0092.723] _wcsicmp (_String1="FOR/?", _String2="bcdedit") returned 4 [0092.723] _wcsicmp (_String1="IF", _String2="bcdedit") returned 7 [0092.723] _wcsicmp (_String1="IF/?", _String2="bcdedit") returned 7 [0092.723] _wcsicmp (_String1="REM", _String2="bcdedit") returned 16 [0092.723] _wcsicmp (_String1="REM/?", _String2="bcdedit") returned 16 [0092.723] GetProcessHeap () returned 0x150000 [0092.723] RtlAllocateHeap (HeapHandle=0x150000, Flags=0x8, Size=0x58) returned 0x157cd8 [0092.723] GetProcessHeap () returned 0x150000 [0092.723] RtlAllocateHeap (HeapHandle=0x150000, Flags=0x8, Size=0x18) returned 0x157d38 [0092.724] GetProcessHeap () returned 0x150000 [0092.724] RtlAllocateHeap (HeapHandle=0x150000, Flags=0x8, Size=0x6e) returned 0x157d58 [0092.725] GetConsoleTitleW (in: lpConsoleTitle=0x75f908, nSize=0x104 | out: lpConsoleTitle="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1c [0092.727] malloc (_Size=0xffce) returned 0x302ad8 [0092.728] ??_V@YAXPAX@Z () returned 0x75f694 [0092.729] malloc (_Size=0xffce) returned 0x312ab0 [0092.729] ??_V@YAXPAX@Z () returned 0x75f44c [0092.730] _wcsicmp (_String1="bcdedit", _String2="DIR") returned -2 [0092.730] _wcsicmp (_String1="bcdedit", _String2="ERASE") returned -3 [0092.730] _wcsicmp (_String1="bcdedit", _String2="DEL") returned -2 [0092.730] _wcsicmp (_String1="bcdedit", _String2="TYPE") returned -18 [0092.730] _wcsicmp (_String1="bcdedit", _String2="COPY") returned -1 [0092.730] _wcsicmp (_String1="bcdedit", _String2="CD") returned -1 [0092.730] _wcsicmp (_String1="bcdedit", _String2="CHDIR") returned -1 [0092.730] _wcsicmp (_String1="bcdedit", _String2="RENAME") returned -16 [0092.731] _wcsicmp (_String1="bcdedit", _String2="REN") returned -16 [0092.731] _wcsicmp (_String1="bcdedit", _String2="ECHO") returned -3 [0092.731] _wcsicmp (_String1="bcdedit", _String2="SET") returned -17 [0092.731] _wcsicmp (_String1="bcdedit", _String2="PAUSE") returned -14 [0092.731] _wcsicmp (_String1="bcdedit", _String2="DATE") returned -2 [0092.731] _wcsicmp (_String1="bcdedit", _String2="TIME") returned -18 [0092.731] _wcsicmp (_String1="bcdedit", _String2="PROMPT") returned -14 [0092.731] _wcsicmp (_String1="bcdedit", _String2="MD") returned -11 [0092.731] _wcsicmp (_String1="bcdedit", _String2="MKDIR") returned -11 [0092.731] _wcsicmp (_String1="bcdedit", _String2="RD") returned -16 [0092.731] _wcsicmp (_String1="bcdedit", _String2="RMDIR") returned -16 [0092.731] _wcsicmp (_String1="bcdedit", _String2="PATH") returned -14 [0092.731] _wcsicmp (_String1="bcdedit", _String2="GOTO") returned -5 [0092.731] _wcsicmp (_String1="bcdedit", _String2="SHIFT") returned -17 [0092.731] _wcsicmp (_String1="bcdedit", _String2="CLS") returned -1 [0092.731] _wcsicmp (_String1="bcdedit", _String2="CALL") returned -1 [0092.731] _wcsicmp (_String1="bcdedit", _String2="VERIFY") returned -20 [0092.731] _wcsicmp (_String1="bcdedit", _String2="VER") returned -20 [0092.731] _wcsicmp (_String1="bcdedit", _String2="VOL") returned -20 [0092.731] _wcsicmp (_String1="bcdedit", _String2="EXIT") returned -3 [0092.731] _wcsicmp (_String1="bcdedit", _String2="SETLOCAL") returned -17 [0092.732] _wcsicmp (_String1="bcdedit", _String2="ENDLOCAL") returned -3 [0092.732] _wcsicmp (_String1="bcdedit", _String2="TITLE") returned -18 [0092.732] _wcsicmp (_String1="bcdedit", _String2="START") returned -17 [0092.732] _wcsicmp (_String1="bcdedit", _String2="DPATH") returned -2 [0092.732] _wcsicmp (_String1="bcdedit", _String2="KEYS") returned -9 [0092.732] _wcsicmp (_String1="bcdedit", _String2="MOVE") returned -11 [0092.732] _wcsicmp (_String1="bcdedit", _String2="PUSHD") returned -14 [0092.732] _wcsicmp (_String1="bcdedit", _String2="POPD") returned -14 [0092.732] _wcsicmp (_String1="bcdedit", _String2="ASSOC") returned 1 [0092.732] _wcsicmp (_String1="bcdedit", _String2="FTYPE") returned -4 [0092.732] _wcsicmp (_String1="bcdedit", _String2="BREAK") returned -15 [0092.732] _wcsicmp (_String1="bcdedit", _String2="COLOR") returned -1 [0092.732] _wcsicmp (_String1="bcdedit", _String2="MKLINK") returned -11 [0092.732] _wcsicmp (_String1="bcdedit", _String2="DIR") returned -2 [0092.732] _wcsicmp (_String1="bcdedit", _String2="ERASE") returned -3 [0092.732] _wcsicmp (_String1="bcdedit", _String2="DEL") returned -2 [0092.732] _wcsicmp (_String1="bcdedit", _String2="TYPE") returned -18 [0092.732] _wcsicmp (_String1="bcdedit", _String2="COPY") returned -1 [0092.732] _wcsicmp (_String1="bcdedit", _String2="CD") returned -1 [0092.732] _wcsicmp (_String1="bcdedit", _String2="CHDIR") returned -1 [0092.732] _wcsicmp (_String1="bcdedit", _String2="RENAME") returned -16 [0092.732] _wcsicmp (_String1="bcdedit", _String2="REN") returned -16 [0092.732] _wcsicmp (_String1="bcdedit", _String2="ECHO") returned -3 [0092.732] _wcsicmp (_String1="bcdedit", _String2="SET") returned -17 [0092.733] _wcsicmp (_String1="bcdedit", _String2="PAUSE") returned -14 [0092.733] _wcsicmp (_String1="bcdedit", _String2="DATE") returned -2 [0092.733] _wcsicmp (_String1="bcdedit", _String2="TIME") returned -18 [0092.733] _wcsicmp (_String1="bcdedit", _String2="PROMPT") returned -14 [0092.733] _wcsicmp (_String1="bcdedit", _String2="MD") returned -11 [0092.733] _wcsicmp (_String1="bcdedit", _String2="MKDIR") returned -11 [0092.733] _wcsicmp (_String1="bcdedit", _String2="RD") returned -16 [0092.733] _wcsicmp (_String1="bcdedit", _String2="RMDIR") returned -16 [0092.733] _wcsicmp (_String1="bcdedit", _String2="PATH") returned -14 [0092.733] _wcsicmp (_String1="bcdedit", _String2="GOTO") returned -5 [0092.733] _wcsicmp (_String1="bcdedit", _String2="SHIFT") returned -17 [0092.733] _wcsicmp (_String1="bcdedit", _String2="CLS") returned -1 [0092.733] _wcsicmp (_String1="bcdedit", _String2="CALL") returned -1 [0092.733] _wcsicmp (_String1="bcdedit", _String2="VERIFY") returned -20 [0092.733] _wcsicmp (_String1="bcdedit", _String2="VER") returned -20 [0092.733] _wcsicmp (_String1="bcdedit", _String2="VOL") returned -20 [0092.733] _wcsicmp (_String1="bcdedit", _String2="EXIT") returned -3 [0092.733] _wcsicmp (_String1="bcdedit", _String2="SETLOCAL") returned -17 [0092.733] _wcsicmp (_String1="bcdedit", _String2="ENDLOCAL") returned -3 [0092.733] _wcsicmp (_String1="bcdedit", _String2="TITLE") returned -18 [0092.733] _wcsicmp (_String1="bcdedit", _String2="START") returned -17 [0092.733] _wcsicmp (_String1="bcdedit", _String2="DPATH") returned -2 [0092.733] _wcsicmp (_String1="bcdedit", _String2="KEYS") returned -9 [0092.734] _wcsicmp (_String1="bcdedit", _String2="MOVE") returned -11 [0092.734] _wcsicmp (_String1="bcdedit", _String2="PUSHD") returned -14 [0092.734] _wcsicmp (_String1="bcdedit", _String2="POPD") returned -14 [0092.734] _wcsicmp (_String1="bcdedit", _String2="ASSOC") returned 1 [0092.734] _wcsicmp (_String1="bcdedit", _String2="FTYPE") returned -4 [0092.734] _wcsicmp (_String1="bcdedit", _String2="BREAK") returned -15 [0092.734] _wcsicmp (_String1="bcdedit", _String2="COLOR") returned -1 [0092.734] _wcsicmp (_String1="bcdedit", _String2="MKLINK") returned -11 [0092.734] _wcsicmp (_String1="bcdedit", _String2="FOR") returned -4 [0092.734] _wcsicmp (_String1="bcdedit", _String2="IF") returned -7 [0092.734] _wcsicmp (_String1="bcdedit", _String2="REM") returned -16 [0092.734] ??_V@YAXPAX@Z () returned 0x1 [0092.734] GetProcessHeap () returned 0x150000 [0092.735] RtlAllocateHeap (HeapHandle=0x150000, Flags=0x8, Size=0xffd6) returned 0x158fd0 [0092.737] GetProcessHeap () returned 0x150000 [0092.737] RtlAllocateHeap (HeapHandle=0x150000, Flags=0x8, Size=0x7e) returned 0x157dd0 [0092.737] _wcsnicmp (_String1="bcde", _String2="cmd ", _MaxCount=0x4) returned -1 [0092.737] malloc (_Size=0xffce) returned 0x312ab0 [0092.737] ??_V@YAXPAX@Z () returned 0x75f1cc [0092.738] GetProcessHeap () returned 0x150000 [0092.738] RtlAllocateHeap (HeapHandle=0x150000, Flags=0x8, Size=0x1ffa4) returned 0x168fb0 [0092.740] SetErrorMode (uMode=0x0) returned 0x0 [0092.740] SetErrorMode (uMode=0x1) returned 0x0 [0092.741] GetFullPathNameW (in: lpFileName=".", nBufferLength=0xffce, lpBuffer=0x168fb8, lpFilePart=0x75f1ec | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x75f1ec*="Desktop") returned 0x17 [0092.741] SetErrorMode (uMode=0x0) returned 0x1 [0092.741] GetProcessHeap () returned 0x150000 [0092.741] RtlReAllocateHeap (Heap=0x150000, Flags=0x0, Ptr=0x168fb0, Size=0x48) returned 0x168fb0 [0092.741] GetProcessHeap () returned 0x150000 [0092.741] RtlSizeHeap (HeapHandle=0x150000, Flags=0x0, MemoryPointer=0x168fb0) returned 0x48 [0092.741] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x11ff840, nSize=0x2000 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath;C:\\WINDOWS\\system32;C:\\WINDOWS;C:\\WINDOWS\\System32\\Wbem;C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\;C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps") returned 0xbb [0092.741] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1 [0092.741] GetProcessHeap () returned 0x150000 [0092.741] RtlAllocateHeap (HeapHandle=0x150000, Flags=0x8, Size=0x1b4) returned 0x157e58 [0092.741] GetProcessHeap () returned 0x150000 [0092.741] RtlAllocateHeap (HeapHandle=0x150000, Flags=0x8, Size=0x360) returned 0x158018 [0092.754] GetProcessHeap () returned 0x150000 [0092.754] RtlReAllocateHeap (Heap=0x150000, Flags=0x0, Ptr=0x158018, Size=0x1b6) returned 0x158018 [0092.754] GetProcessHeap () returned 0x150000 [0092.754] RtlSizeHeap (HeapHandle=0x150000, Flags=0x0, MemoryPointer=0x158018) returned 0x1b6 [0092.754] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x11ff840, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0092.754] GetProcessHeap () returned 0x150000 [0092.754] RtlAllocateHeap (HeapHandle=0x150000, Flags=0x8, Size=0xe0) returned 0x1581d8 [0092.754] GetProcessHeap () returned 0x150000 [0092.754] RtlReAllocateHeap (Heap=0x150000, Flags=0x0, Ptr=0x1581d8, Size=0x76) returned 0x1581d8 [0092.754] GetProcessHeap () returned 0x150000 [0092.754] RtlSizeHeap (HeapHandle=0x150000, Flags=0x0, MemoryPointer=0x1581d8) returned 0x76 [0092.755] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0092.755] FindFirstFileExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\bcdedit.*", fInfoLevelId=0x1, lpFindFileData=0x75ef78, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x75ef78) returned 0xffffffff [0092.755] GetLastError () returned 0x2 [0092.755] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0092.756] FindFirstFileExW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\bcdedit.*", fInfoLevelId=0x1, lpFindFileData=0x75ef78, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x75ef78) returned 0xffffffff [0092.756] GetLastError () returned 0x2 [0092.756] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0092.756] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\system32\\bcdedit.*", fInfoLevelId=0x1, lpFindFileData=0x75ef78, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x75ef78) returned 0xffffffff [0092.756] GetLastError () returned 0x2 [0092.757] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0092.757] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\bcdedit.*", fInfoLevelId=0x1, lpFindFileData=0x75ef78, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x75ef78) returned 0xffffffff [0092.757] GetLastError () returned 0x2 [0092.757] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0092.757] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\System32\\Wbem\\bcdedit.*", fInfoLevelId=0x1, lpFindFileData=0x75ef78, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x75ef78) returned 0xffffffff [0092.761] GetLastError () returned 0x2 [0092.761] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0092.761] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\bcdedit.*", fInfoLevelId=0x1, lpFindFileData=0x75ef78, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x75ef78) returned 0xffffffff [0092.765] GetLastError () returned 0x2 [0092.765] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0092.765] FindFirstFileExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps\\bcdedit.*", fInfoLevelId=0x1, lpFindFileData=0x75ef78, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x75ef78) returned 0xffffffff [0092.766] GetLastError () returned 0x2 [0092.766] ??_V@YAXPAX@Z () returned 0x1 [0092.766] _get_osfhandle (_FileHandle=2) returned 0x94 [0092.766] GetFileType (hFile=0x94) returned 0x2 [0092.766] GetStdHandle (nStdHandle=0xfffffff4) returned 0x94 [0092.767] GetConsoleMode (in: hConsoleHandle=0x94, lpMode=0x75f3c4 | out: lpMode=0x75f3c4) returned 1 [0092.771] _get_osfhandle (_FileHandle=2) returned 0x94 [0092.771] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x94, lpConsoleScreenBufferInfo=0x75f414 | out: lpConsoleScreenBufferInfo=0x75f414) returned 1 [0092.775] FormatMessageW (in: dwFlags=0x1a00, lpSource=0x0, dwMessageId=0x2331, dwLanguageId=0x0, lpBuffer=0x120b990, nSize=0x2000, Arguments=0x0 | out: lpBuffer="'%1' is not recognized as an internal or external command,\r\noperable program or batch file.\r\n") returned 0x5d [0092.868] FormatMessageW (in: dwFlags=0x1800, lpSource=0x0, dwMessageId=0x2331, dwLanguageId=0x0, lpBuffer=0x120b990, nSize=0x2000, Arguments=0x75f444 | out: lpBuffer="'bcdedit' is not recognized as an internal or external command,\r\noperable program or batch file.\r\n") returned 0x62 [0092.868] WriteConsoleW (in: hConsoleOutput=0x94, lpBuffer=0x120b990*, nNumberOfCharsToWrite=0x62, lpNumberOfCharsWritten=0x75f3f8, lpReserved=0x0 | out: lpBuffer=0x120b990*, lpNumberOfCharsWritten=0x75f3f8*=0x62) returned 1 [0092.873] ??_V@YAXPAX@Z () returned 0x1 [0092.873] _get_osfhandle (_FileHandle=1) returned 0x90 [0092.873] SetConsoleMode (hConsoleHandle=0x90, dwMode=0x7) returned 1 [0092.875] _get_osfhandle (_FileHandle=1) returned 0x90 [0092.875] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x1203890 | out: lpMode=0x1203890) returned 1 [0092.882] _get_osfhandle (_FileHandle=0) returned 0x8c [0092.882] GetConsoleMode (in: hConsoleHandle=0x8c, lpMode=0x1203894 | out: lpMode=0x1203894) returned 1 [0092.884] SetConsoleInputExeNameW () returned 0x1 [0092.884] GetConsoleOutputCP () returned 0x1b5 [0092.890] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x1203850 | out: lpCPInfo=0x1203850) returned 1 [0092.890] SetThreadUILanguage (LangId=0x0) returned 0x510409 [0092.893] exit (_Code=1) [0092.893] ??_V@YAXPAX@Z () returned 0x1 Thread: id = 69 os_tid = 0xec8 Process: id = "24" image_name = "conhost.exe" filename = "c:\\windows\\system32\\conhost.exe" page_root = "0x956c000" os_pid = "0x1170" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "23" os_parent_pid = "0x110c" cmd_line = "\\??\\C:\\WINDOWS\\system32\\conhost.exe 0xffffffff -ForceV1" cur_dir = "C:\\WINDOWS" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000faa5" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 64 os_tid = 0x1184 Thread: id = 65 os_tid = 0x11c0 Thread: id = 66 os_tid = 0x8d4 Thread: id = 67 os_tid = 0x1218 Thread: id = 68 os_tid = 0x1254 Process: id = "25" image_name = "cmd.exe" filename = "c:\\windows\\syswow64\\cmd.exe" page_root = "0x163ac000" os_pid = "0xecc" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x13d4" cmd_line = "C:\\WINDOWS\\system32\\cmd.exe /c bcdedit /set {default} recoveryenabled no" cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000faa5" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 70 os_tid = 0x12d4 [0095.346] GetModuleHandleA (lpModuleName=0x0) returned 0x11d0000 [0095.349] __set_app_type (_Type=0x1) [0095.349] __p__fmode () returned 0x76953c14 [0095.349] __p__commode () returned 0x769549ec [0095.350] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x11e6fd0) returned 0x0 [0095.350] __getmainargs (in: _Argc=0x11fd1a4, _Argv=0x11fd1a8, _Env=0x11fd1ac, _DoWildCard=0, _StartInfo=0x11fd1b8 | out: _Argc=0x11fd1a4, _Argv=0x11fd1a8, _Env=0x11fd1ac) returned 0 [0095.350] _onexit (_Func=0x11e8030) returned 0x11e8030 [0095.351] _onexit (_Func=0x11e8040) returned 0x11e8040 [0095.352] _onexit (_Func=0x11e8050) returned 0x11e8050 [0095.352] _onexit (_Func=0x11e8060) returned 0x11e8060 [0095.353] _onexit (_Func=0x11e8070) returned 0x11e8070 [0095.354] _onexit (_Func=0x11e8080) returned 0x11e8080 [0095.354] GetCurrentThreadId () returned 0x12d4 [0095.355] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0x12d4) returned 0xbc [0095.355] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x74030000 [0095.355] GetProcAddress (hModule=0x74030000, lpProcName="SetThreadUILanguage") returned 0x74044f70 [0095.356] SetThreadUILanguage (LangId=0x0) returned 0xf70409 [0095.543] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0095.543] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x115f9f4 | out: phkResult=0x115f9f4*=0x0) returned 0x2 [0095.544] VirtualQuery (in: lpAddress=0x115f9ff, lpBuffer=0x115f9ac, dwLength=0x1c | out: lpBuffer=0x115f9ac*(BaseAddress=0x115f000, AllocationBase=0x1060000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0095.544] VirtualQuery (in: lpAddress=0x1060000, lpBuffer=0x115f9ac, dwLength=0x1c | out: lpBuffer=0x115f9ac*(BaseAddress=0x1060000, AllocationBase=0x1060000, AllocationProtect=0x4, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000)) returned 0x1c [0095.544] VirtualQuery (in: lpAddress=0x1061000, lpBuffer=0x115f9ac, dwLength=0x1c | out: lpBuffer=0x115f9ac*(BaseAddress=0x1061000, AllocationBase=0x1060000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x104, Type=0x20000)) returned 0x1c [0095.544] VirtualQuery (in: lpAddress=0x1063000, lpBuffer=0x115f9ac, dwLength=0x1c | out: lpBuffer=0x115f9ac*(BaseAddress=0x1063000, AllocationBase=0x1060000, AllocationProtect=0x4, RegionSize=0xfd000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0095.544] VirtualQuery (in: lpAddress=0x1160000, lpBuffer=0x115f9ac, dwLength=0x1c | out: lpBuffer=0x115f9ac*(BaseAddress=0x1160000, AllocationBase=0x1160000, AllocationProtect=0x2, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x40000)) returned 0x1c [0095.544] GetConsoleOutputCP () returned 0x1b5 [0095.583] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x1203850 | out: lpCPInfo=0x1203850) returned 1 [0095.584] SetConsoleCtrlHandler (HandlerRoutine=0x11f7260, Add=1) returned 1 [0095.584] _get_osfhandle (_FileHandle=1) returned 0x90 [0095.584] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x120388c | out: lpMode=0x120388c) returned 1 [0095.729] _get_osfhandle (_FileHandle=0) returned 0x8c [0095.729] GetConsoleMode (in: hConsoleHandle=0x8c, lpMode=0x1203888 | out: lpMode=0x1203888) returned 1 [0095.770] _get_osfhandle (_FileHandle=1) returned 0x90 [0095.770] SetConsoleMode (hConsoleHandle=0x90, dwMode=0x0) returned 1 [0095.819] _get_osfhandle (_FileHandle=1) returned 0x90 [0095.819] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x1203890 | out: lpMode=0x1203890) returned 1 [0095.867] _get_osfhandle (_FileHandle=1) returned 0x90 [0095.867] SetConsoleMode (hConsoleHandle=0x90, dwMode=0x7) returned 1 [0095.909] _get_osfhandle (_FileHandle=0) returned 0x8c [0095.909] GetConsoleMode (in: hConsoleHandle=0x8c, lpMode=0x1203894 | out: lpMode=0x1203894) returned 1 [0095.957] _get_osfhandle (_FileHandle=0) returned 0x8c [0095.957] SetConsoleMode (hConsoleHandle=0x8c, dwMode=0x1e7) returned 1 [0096.015] GetEnvironmentStringsW () returned 0x3374e10* [0096.015] GetProcessHeap () returned 0x3370000 [0096.015] RtlAllocateHeap (HeapHandle=0x3370000, Flags=0x8, Size=0xaca) returned 0x33758e8 [0096.016] FreeEnvironmentStringsA (penv="A") returned 1 [0096.016] GetProcessHeap () returned 0x3370000 [0096.016] RtlAllocateHeap (HeapHandle=0x3370000, Flags=0x8, Size=0x4) returned 0x33748f0 [0096.016] GetEnvironmentStringsW () returned 0x3374e10* [0096.016] GetProcessHeap () returned 0x3370000 [0096.016] RtlAllocateHeap (HeapHandle=0x3370000, Flags=0x8, Size=0xaca) returned 0x33763c0 [0096.016] FreeEnvironmentStringsA (penv="A") returned 1 [0096.016] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x115e950 | out: phkResult=0x115e950*=0xcc) returned 0x0 [0096.016] RegQueryValueExW (in: hKey=0xcc, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x115e958, lpData=0x115e95c, lpcbData=0x115e954*=0x1000 | out: lpType=0x115e958*=0x0, lpData=0x115e95c*=0x0, lpcbData=0x115e954*=0x1000) returned 0x2 [0096.017] RegQueryValueExW (in: hKey=0xcc, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x115e958, lpData=0x115e95c, lpcbData=0x115e954*=0x1000 | out: lpType=0x115e958*=0x4, lpData=0x115e95c*=0x1, lpcbData=0x115e954*=0x4) returned 0x0 [0096.017] RegQueryValueExW (in: hKey=0xcc, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x115e958, lpData=0x115e95c, lpcbData=0x115e954*=0x1000 | out: lpType=0x115e958*=0x0, lpData=0x115e95c*=0x1, lpcbData=0x115e954*=0x1000) returned 0x2 [0096.017] RegQueryValueExW (in: hKey=0xcc, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x115e958, lpData=0x115e95c, lpcbData=0x115e954*=0x1000 | out: lpType=0x115e958*=0x4, lpData=0x115e95c*=0x0, lpcbData=0x115e954*=0x4) returned 0x0 [0096.017] RegQueryValueExW (in: hKey=0xcc, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x115e958, lpData=0x115e95c, lpcbData=0x115e954*=0x1000 | out: lpType=0x115e958*=0x4, lpData=0x115e95c*=0x40, lpcbData=0x115e954*=0x4) returned 0x0 [0096.017] RegQueryValueExW (in: hKey=0xcc, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x115e958, lpData=0x115e95c, lpcbData=0x115e954*=0x1000 | out: lpType=0x115e958*=0x4, lpData=0x115e95c*=0x40, lpcbData=0x115e954*=0x4) returned 0x0 [0096.017] RegQueryValueExW (in: hKey=0xcc, lpValueName="AutoRun", lpReserved=0x0, lpType=0x115e958, lpData=0x115e95c, lpcbData=0x115e954*=0x1000 | out: lpType=0x115e958*=0x0, lpData=0x115e95c*=0x40, lpcbData=0x115e954*=0x1000) returned 0x2 [0096.017] RegCloseKey (hKey=0xcc) returned 0x0 [0096.017] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x115e950 | out: phkResult=0x115e950*=0xcc) returned 0x0 [0096.017] RegQueryValueExW (in: hKey=0xcc, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x115e958, lpData=0x115e95c, lpcbData=0x115e954*=0x1000 | out: lpType=0x115e958*=0x0, lpData=0x115e95c*=0x40, lpcbData=0x115e954*=0x1000) returned 0x2 [0096.017] RegQueryValueExW (in: hKey=0xcc, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x115e958, lpData=0x115e95c, lpcbData=0x115e954*=0x1000 | out: lpType=0x115e958*=0x4, lpData=0x115e95c*=0x1, lpcbData=0x115e954*=0x4) returned 0x0 [0096.017] RegQueryValueExW (in: hKey=0xcc, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x115e958, lpData=0x115e95c, lpcbData=0x115e954*=0x1000 | out: lpType=0x115e958*=0x0, lpData=0x115e95c*=0x1, lpcbData=0x115e954*=0x1000) returned 0x2 [0096.017] RegQueryValueExW (in: hKey=0xcc, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x115e958, lpData=0x115e95c, lpcbData=0x115e954*=0x1000 | out: lpType=0x115e958*=0x4, lpData=0x115e95c*=0x0, lpcbData=0x115e954*=0x4) returned 0x0 [0096.017] RegQueryValueExW (in: hKey=0xcc, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x115e958, lpData=0x115e95c, lpcbData=0x115e954*=0x1000 | out: lpType=0x115e958*=0x4, lpData=0x115e95c*=0x9, lpcbData=0x115e954*=0x4) returned 0x0 [0096.017] RegQueryValueExW (in: hKey=0xcc, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x115e958, lpData=0x115e95c, lpcbData=0x115e954*=0x1000 | out: lpType=0x115e958*=0x4, lpData=0x115e95c*=0x9, lpcbData=0x115e954*=0x4) returned 0x0 [0096.018] RegQueryValueExW (in: hKey=0xcc, lpValueName="AutoRun", lpReserved=0x0, lpType=0x115e958, lpData=0x115e95c, lpcbData=0x115e954*=0x1000 | out: lpType=0x115e958*=0x0, lpData=0x115e95c*=0x9, lpcbData=0x115e954*=0x1000) returned 0x2 [0096.018] RegCloseKey (hKey=0xcc) returned 0x0 [0096.018] time (in: timer=0x0 | out: timer=0x0) returned 0x5e3302d8 [0096.018] srand (_Seed=0x5e3302d8) [0096.018] GetCommandLineW () returned="C:\\WINDOWS\\system32\\cmd.exe /c bcdedit /set {default} recoveryenabled no" [0096.018] malloc (_Size=0x4000) returned 0x3282700 [0096.019] GetCommandLineW () returned="C:\\WINDOWS\\system32\\cmd.exe /c bcdedit /set {default} recoveryenabled no" [0096.019] malloc (_Size=0xffce) returned 0x3640048 [0096.020] ??_V@YAXPAX@Z () returned 0x115f934 [0096.021] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x3640048 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0096.021] malloc (_Size=0xffce) returned 0x3650020 [0096.022] ??_V@YAXPAX@Z () returned 0x115f708 [0096.022] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x3650020, nSize=0x7fe7 | out: lpFilename="C:\\WINDOWS\\SysWOW64\\cmd.exe" (normalized: "c:\\windows\\syswow64\\cmd.exe")) returned 0x1b [0096.023] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x11ff840, nSize=0x2000 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath;C:\\WINDOWS\\system32;C:\\WINDOWS;C:\\WINDOWS\\System32\\Wbem;C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\;C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps") returned 0xbb [0096.023] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x11ff840, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0096.023] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x11ff840, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0096.023] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13 [0096.023] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11 [0096.023] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13 [0096.023] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13 [0096.023] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12 [0096.023] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4 [0096.023] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2 [0096.023] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8 [0096.023] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1 [0096.024] GetProcessHeap () returned 0x3370000 [0096.024] RtlFreeHeap (HeapHandle=0x3370000, Flags=0x0, BaseAddress=0x33758e8) returned 1 [0096.024] GetEnvironmentStringsW () returned 0x3374e10* [0096.024] GetProcessHeap () returned 0x3370000 [0096.024] RtlAllocateHeap (HeapHandle=0x3370000, Flags=0x8, Size=0xae2) returned 0x3377988 [0096.024] FreeEnvironmentStringsA (penv="A") returned 1 [0096.024] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x11ff840, nSize=0x2000 | out: lpBuffer="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1b [0096.024] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x11ff840, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0096.024] _wcsicmp (_String1="KEYS", _String2="CD") returned 8 [0096.024] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6 [0096.024] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8 [0096.024] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8 [0096.024] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7 [0096.024] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9 [0096.024] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7 [0096.024] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3 [0096.024] malloc (_Size=0xffce) returned 0x365fff8 [0096.025] ??_V@YAXPAX@Z () returned 0x115f4a0 [0096.025] GetProcessHeap () returned 0x3370000 [0096.026] RtlAllocateHeap (HeapHandle=0x3370000, Flags=0x8, Size=0x38) returned 0x3370ae0 [0096.026] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x365fff8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0096.026] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x7fe7, lpBuffer=0x365fff8, lpFilePart=0x115f4ec | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x115f4ec*="Desktop") returned 0x17 [0096.026] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\Desktop" (normalized: "c:\\users\\fd1hvy\\desktop")) returned 0x11 [0096.027] FindFirstFileW (in: lpFileName="C:\\Users", lpFindFileData=0x115f270 | out: lpFindFileData=0x115f270*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x475bb883, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x475bb883, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 0x3370b20 [0096.027] FindClose (in: hFindFile=0x3370b20 | out: hFindFile=0x3370b20) returned 1 [0096.027] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy", lpFindFileData=0x115f270 | out: lpFindFileData=0x115f270*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20fc850f, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x9de5855d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x9de5855d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD1HVy", cAlternateFileName="")) returned 0x3370b20 [0096.027] FindClose (in: hFindFile=0x3370b20 | out: hFindFile=0x3370b20) returned 1 [0096.027] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", lpFindFileData=0x115f270 | out: lpFindFileData=0x115f270*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x5de49bf6, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0x5de49bf6, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 0x3370b20 [0096.028] FindClose (in: hFindFile=0x3370b20 | out: hFindFile=0x3370b20) returned 1 [0096.028] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\Desktop" (normalized: "c:\\users\\fd1hvy\\desktop")) returned 0x11 [0096.028] SetCurrentDirectoryW (lpPathName="C:\\Users\\FD1HVy\\Desktop" (normalized: "c:\\users\\fd1hvy\\desktop")) returned 1 [0096.028] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Users\\FD1HVy\\Desktop") returned 1 [0096.028] GetProcessHeap () returned 0x3370000 [0096.028] RtlFreeHeap (HeapHandle=0x3370000, Flags=0x0, BaseAddress=0x3377988) returned 1 [0096.028] GetEnvironmentStringsW () returned 0x3374e10* [0096.028] GetProcessHeap () returned 0x3370000 [0096.028] RtlAllocateHeap (HeapHandle=0x3370000, Flags=0x8, Size=0xb1a) returned 0x3376e98 [0096.028] FreeEnvironmentStringsA (penv="=") returned 1 [0096.028] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x3640048 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0096.029] GetProcessHeap () returned 0x3370000 [0096.029] RtlFreeHeap (HeapHandle=0x3370000, Flags=0x0, BaseAddress=0x3370ae0) returned 1 [0096.029] ??_V@YAXPAX@Z () returned 0x1 [0096.029] ??_V@YAXPAX@Z () returned 0x1 [0096.029] GetProcessHeap () returned 0x3370000 [0096.029] RtlAllocateHeap (HeapHandle=0x3370000, Flags=0x8, Size=0x400e) returned 0x3378fa0 [0096.030] GetProcessHeap () returned 0x3370000 [0096.030] RtlAllocateHeap (HeapHandle=0x3370000, Flags=0x8, Size=0x60) returned 0x33779c0 [0096.030] GetProcessHeap () returned 0x3370000 [0096.030] RtlFreeHeap (HeapHandle=0x3370000, Flags=0x0, BaseAddress=0x3378fa0) returned 1 [0096.030] GetConsoleOutputCP () returned 0x1b5 [0096.073] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x1203850 | out: lpCPInfo=0x1203850) returned 1 [0096.073] GetUserDefaultLCID () returned 0x409 [0096.074] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x11ff82c, cchData=8 | out: lpLCData=":") returned 2 [0096.074] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x115f85c, cchData=128 | out: lpLCData="0") returned 2 [0096.074] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x115f85c, cchData=128 | out: lpLCData="0") returned 2 [0096.075] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x115f85c, cchData=128 | out: lpLCData="1") returned 2 [0096.075] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x11ff81c, cchData=8 | out: lpLCData="/") returned 2 [0096.075] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x11ff7b8, cchData=32 | out: lpLCData="Mon") returned 4 [0096.075] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x11ff778, cchData=32 | out: lpLCData="Tue") returned 4 [0096.075] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x11ff738, cchData=32 | out: lpLCData="Wed") returned 4 [0096.075] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x11ff6f8, cchData=32 | out: lpLCData="Thu") returned 4 [0096.075] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x11ff6b8, cchData=32 | out: lpLCData="Fri") returned 4 [0096.075] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x11ff678, cchData=32 | out: lpLCData="Sat") returned 4 [0096.075] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x11ff638, cchData=32 | out: lpLCData="Sun") returned 4 [0096.075] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x11ff80c, cchData=8 | out: lpLCData=".") returned 2 [0096.075] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x11ff7f8, cchData=8 | out: lpLCData=",") returned 2 [0096.075] setlocale (category=0, locale=".OCP") returned="English_United States.437" [0096.078] GetProcessHeap () returned 0x3370000 [0096.078] RtlAllocateHeap (HeapHandle=0x3370000, Flags=0x0, Size=0x20c) returned 0x3377a70 [0096.078] GetConsoleTitleW (in: lpConsoleTitle=0x3377a70, nSize=0x104 | out: lpConsoleTitle="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1c [0096.096] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x74030000 [0096.096] GetProcAddress (hModule=0x74030000, lpProcName="CopyFileExW") returned 0x74044330 [0096.097] GetProcAddress (hModule=0x74030000, lpProcName="IsDebuggerPresent") returned 0x74045930 [0096.097] GetProcAddress (hModule=0x74030000, lpProcName="SetConsoleInputExeNameW") returned 0x772c09d0 [0096.097] ??_V@YAXPAX@Z () returned 0x1 [0096.098] GetProcessHeap () returned 0x3370000 [0096.098] RtlAllocateHeap (HeapHandle=0x3370000, Flags=0x8, Size=0x400a) returned 0x3378fa0 [0096.098] GetProcessHeap () returned 0x3370000 [0096.098] RtlFreeHeap (HeapHandle=0x3370000, Flags=0x0, BaseAddress=0x3378fa0) returned 1 [0096.099] _wcsicmp (_String1="bcdedit", _String2=")") returned 57 [0096.099] _wcsicmp (_String1="FOR", _String2="bcdedit") returned 4 [0096.099] _wcsicmp (_String1="FOR/?", _String2="bcdedit") returned 4 [0096.099] _wcsicmp (_String1="IF", _String2="bcdedit") returned 7 [0096.099] _wcsicmp (_String1="IF/?", _String2="bcdedit") returned 7 [0096.099] _wcsicmp (_String1="REM", _String2="bcdedit") returned 16 [0096.099] _wcsicmp (_String1="REM/?", _String2="bcdedit") returned 16 [0096.099] GetProcessHeap () returned 0x3370000 [0096.100] RtlAllocateHeap (HeapHandle=0x3370000, Flags=0x8, Size=0x58) returned 0x3377c88 [0096.100] GetProcessHeap () returned 0x3370000 [0096.100] RtlAllocateHeap (HeapHandle=0x3370000, Flags=0x8, Size=0x18) returned 0x3377ce8 [0096.101] GetProcessHeap () returned 0x3370000 [0096.101] RtlAllocateHeap (HeapHandle=0x3370000, Flags=0x8, Size=0x4e) returned 0x3377d08 [0096.102] GetConsoleTitleW (in: lpConsoleTitle=0x115f750, nSize=0x104 | out: lpConsoleTitle="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1c [0096.110] malloc (_Size=0xffce) returned 0x3652ad8 [0096.110] ??_V@YAXPAX@Z () returned 0x115f4dc [0096.111] malloc (_Size=0xffce) returned 0x3662ab0 [0096.112] ??_V@YAXPAX@Z () returned 0x115f294 [0096.114] _wcsicmp (_String1="bcdedit", _String2="DIR") returned -2 [0096.114] _wcsicmp (_String1="bcdedit", _String2="ERASE") returned -3 [0096.114] _wcsicmp (_String1="bcdedit", _String2="DEL") returned -2 [0096.114] _wcsicmp (_String1="bcdedit", _String2="TYPE") returned -18 [0096.114] _wcsicmp (_String1="bcdedit", _String2="COPY") returned -1 [0096.114] _wcsicmp (_String1="bcdedit", _String2="CD") returned -1 [0096.114] _wcsicmp (_String1="bcdedit", _String2="CHDIR") returned -1 [0096.114] _wcsicmp (_String1="bcdedit", _String2="RENAME") returned -16 [0096.114] _wcsicmp (_String1="bcdedit", _String2="REN") returned -16 [0096.114] _wcsicmp (_String1="bcdedit", _String2="ECHO") returned -3 [0096.114] _wcsicmp (_String1="bcdedit", _String2="SET") returned -17 [0096.114] _wcsicmp (_String1="bcdedit", _String2="PAUSE") returned -14 [0096.114] _wcsicmp (_String1="bcdedit", _String2="DATE") returned -2 [0096.114] _wcsicmp (_String1="bcdedit", _String2="TIME") returned -18 [0096.114] _wcsicmp (_String1="bcdedit", _String2="PROMPT") returned -14 [0096.115] _wcsicmp (_String1="bcdedit", _String2="MD") returned -11 [0096.115] _wcsicmp (_String1="bcdedit", _String2="MKDIR") returned -11 [0096.115] _wcsicmp (_String1="bcdedit", _String2="RD") returned -16 [0096.115] _wcsicmp (_String1="bcdedit", _String2="RMDIR") returned -16 [0096.115] _wcsicmp (_String1="bcdedit", _String2="PATH") returned -14 [0096.115] _wcsicmp (_String1="bcdedit", _String2="GOTO") returned -5 [0096.115] _wcsicmp (_String1="bcdedit", _String2="SHIFT") returned -17 [0096.115] _wcsicmp (_String1="bcdedit", _String2="CLS") returned -1 [0096.115] _wcsicmp (_String1="bcdedit", _String2="CALL") returned -1 [0096.115] _wcsicmp (_String1="bcdedit", _String2="VERIFY") returned -20 [0096.115] _wcsicmp (_String1="bcdedit", _String2="VER") returned -20 [0096.115] _wcsicmp (_String1="bcdedit", _String2="VOL") returned -20 [0096.115] _wcsicmp (_String1="bcdedit", _String2="EXIT") returned -3 [0096.115] _wcsicmp (_String1="bcdedit", _String2="SETLOCAL") returned -17 [0096.115] _wcsicmp (_String1="bcdedit", _String2="ENDLOCAL") returned -3 [0096.115] _wcsicmp (_String1="bcdedit", _String2="TITLE") returned -18 [0096.115] _wcsicmp (_String1="bcdedit", _String2="START") returned -17 [0096.115] _wcsicmp (_String1="bcdedit", _String2="DPATH") returned -2 [0096.115] _wcsicmp (_String1="bcdedit", _String2="KEYS") returned -9 [0096.115] _wcsicmp (_String1="bcdedit", _String2="MOVE") returned -11 [0096.115] _wcsicmp (_String1="bcdedit", _String2="PUSHD") returned -14 [0096.115] _wcsicmp (_String1="bcdedit", _String2="POPD") returned -14 [0096.115] _wcsicmp (_String1="bcdedit", _String2="ASSOC") returned 1 [0096.115] _wcsicmp (_String1="bcdedit", _String2="FTYPE") returned -4 [0096.115] _wcsicmp (_String1="bcdedit", _String2="BREAK") returned -15 [0096.115] _wcsicmp (_String1="bcdedit", _String2="COLOR") returned -1 [0096.115] _wcsicmp (_String1="bcdedit", _String2="MKLINK") returned -11 [0096.116] _wcsicmp (_String1="bcdedit", _String2="DIR") returned -2 [0096.116] _wcsicmp (_String1="bcdedit", _String2="ERASE") returned -3 [0096.116] _wcsicmp (_String1="bcdedit", _String2="DEL") returned -2 [0096.116] _wcsicmp (_String1="bcdedit", _String2="TYPE") returned -18 [0096.116] _wcsicmp (_String1="bcdedit", _String2="COPY") returned -1 [0096.116] _wcsicmp (_String1="bcdedit", _String2="CD") returned -1 [0096.116] _wcsicmp (_String1="bcdedit", _String2="CHDIR") returned -1 [0096.116] _wcsicmp (_String1="bcdedit", _String2="RENAME") returned -16 [0096.116] _wcsicmp (_String1="bcdedit", _String2="REN") returned -16 [0096.116] _wcsicmp (_String1="bcdedit", _String2="ECHO") returned -3 [0096.116] _wcsicmp (_String1="bcdedit", _String2="SET") returned -17 [0096.116] _wcsicmp (_String1="bcdedit", _String2="PAUSE") returned -14 [0096.116] _wcsicmp (_String1="bcdedit", _String2="DATE") returned -2 [0096.116] _wcsicmp (_String1="bcdedit", _String2="TIME") returned -18 [0096.116] _wcsicmp (_String1="bcdedit", _String2="PROMPT") returned -14 [0096.116] _wcsicmp (_String1="bcdedit", _String2="MD") returned -11 [0096.116] _wcsicmp (_String1="bcdedit", _String2="MKDIR") returned -11 [0096.116] _wcsicmp (_String1="bcdedit", _String2="RD") returned -16 [0096.116] _wcsicmp (_String1="bcdedit", _String2="RMDIR") returned -16 [0096.116] _wcsicmp (_String1="bcdedit", _String2="PATH") returned -14 [0096.116] _wcsicmp (_String1="bcdedit", _String2="GOTO") returned -5 [0096.116] _wcsicmp (_String1="bcdedit", _String2="SHIFT") returned -17 [0096.116] _wcsicmp (_String1="bcdedit", _String2="CLS") returned -1 [0096.116] _wcsicmp (_String1="bcdedit", _String2="CALL") returned -1 [0096.116] _wcsicmp (_String1="bcdedit", _String2="VERIFY") returned -20 [0096.116] _wcsicmp (_String1="bcdedit", _String2="VER") returned -20 [0096.116] _wcsicmp (_String1="bcdedit", _String2="VOL") returned -20 [0096.116] _wcsicmp (_String1="bcdedit", _String2="EXIT") returned -3 [0096.117] _wcsicmp (_String1="bcdedit", _String2="SETLOCAL") returned -17 [0096.117] _wcsicmp (_String1="bcdedit", _String2="ENDLOCAL") returned -3 [0096.117] _wcsicmp (_String1="bcdedit", _String2="TITLE") returned -18 [0096.117] _wcsicmp (_String1="bcdedit", _String2="START") returned -17 [0096.117] _wcsicmp (_String1="bcdedit", _String2="DPATH") returned -2 [0096.117] _wcsicmp (_String1="bcdedit", _String2="KEYS") returned -9 [0096.117] _wcsicmp (_String1="bcdedit", _String2="MOVE") returned -11 [0096.117] _wcsicmp (_String1="bcdedit", _String2="PUSHD") returned -14 [0096.117] _wcsicmp (_String1="bcdedit", _String2="POPD") returned -14 [0096.117] _wcsicmp (_String1="bcdedit", _String2="ASSOC") returned 1 [0096.117] _wcsicmp (_String1="bcdedit", _String2="FTYPE") returned -4 [0096.117] _wcsicmp (_String1="bcdedit", _String2="BREAK") returned -15 [0096.117] _wcsicmp (_String1="bcdedit", _String2="COLOR") returned -1 [0096.117] _wcsicmp (_String1="bcdedit", _String2="MKLINK") returned -11 [0096.117] _wcsicmp (_String1="bcdedit", _String2="FOR") returned -4 [0096.117] _wcsicmp (_String1="bcdedit", _String2="IF") returned -7 [0096.117] _wcsicmp (_String1="bcdedit", _String2="REM") returned -16 [0096.118] ??_V@YAXPAX@Z () returned 0x1 [0096.118] GetProcessHeap () returned 0x3370000 [0096.118] RtlAllocateHeap (HeapHandle=0x3370000, Flags=0x8, Size=0xffd6) returned 0x3378fa0 [0096.119] GetProcessHeap () returned 0x3370000 [0096.119] RtlAllocateHeap (HeapHandle=0x3370000, Flags=0x8, Size=0x5e) returned 0x3377d60 [0096.119] _wcsnicmp (_String1="bcde", _String2="cmd ", _MaxCount=0x4) returned -1 [0096.119] malloc (_Size=0xffce) returned 0x3662ab0 [0096.119] ??_V@YAXPAX@Z () returned 0x115f014 [0096.120] GetProcessHeap () returned 0x3370000 [0096.120] RtlAllocateHeap (HeapHandle=0x3370000, Flags=0x8, Size=0x1ffa4) returned 0x3388f80 [0096.124] SetErrorMode (uMode=0x0) returned 0x0 [0096.124] SetErrorMode (uMode=0x1) returned 0x0 [0096.124] GetFullPathNameW (in: lpFileName=".", nBufferLength=0xffce, lpBuffer=0x3388f88, lpFilePart=0x115f034 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x115f034*="Desktop") returned 0x17 [0096.124] SetErrorMode (uMode=0x0) returned 0x1 [0096.124] GetProcessHeap () returned 0x3370000 [0096.124] RtlReAllocateHeap (Heap=0x3370000, Flags=0x0, Ptr=0x3388f80, Size=0x48) returned 0x3388f80 [0096.125] GetProcessHeap () returned 0x3370000 [0096.125] RtlSizeHeap (HeapHandle=0x3370000, Flags=0x0, MemoryPointer=0x3388f80) returned 0x48 [0096.125] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x11ff840, nSize=0x2000 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath;C:\\WINDOWS\\system32;C:\\WINDOWS;C:\\WINDOWS\\System32\\Wbem;C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\;C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps") returned 0xbb [0096.125] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1 [0096.125] GetProcessHeap () returned 0x3370000 [0096.125] RtlAllocateHeap (HeapHandle=0x3370000, Flags=0x8, Size=0x1b4) returned 0x3377dc8 [0096.125] GetProcessHeap () returned 0x3370000 [0096.125] RtlAllocateHeap (HeapHandle=0x3370000, Flags=0x8, Size=0x360) returned 0x3377f88 [0096.135] GetProcessHeap () returned 0x3370000 [0096.135] RtlReAllocateHeap (Heap=0x3370000, Flags=0x0, Ptr=0x3377f88, Size=0x1b6) returned 0x3377f88 [0096.135] GetProcessHeap () returned 0x3370000 [0096.135] RtlSizeHeap (HeapHandle=0x3370000, Flags=0x0, MemoryPointer=0x3377f88) returned 0x1b6 [0096.135] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x11ff840, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0096.135] GetProcessHeap () returned 0x3370000 [0096.135] RtlAllocateHeap (HeapHandle=0x3370000, Flags=0x8, Size=0xe0) returned 0x3378148 [0096.135] GetProcessHeap () returned 0x3370000 [0096.135] RtlReAllocateHeap (Heap=0x3370000, Flags=0x0, Ptr=0x3378148, Size=0x76) returned 0x3378148 [0096.135] GetProcessHeap () returned 0x3370000 [0096.135] RtlSizeHeap (HeapHandle=0x3370000, Flags=0x0, MemoryPointer=0x3378148) returned 0x76 [0096.136] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0096.136] FindFirstFileExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\bcdedit.*", fInfoLevelId=0x1, lpFindFileData=0x115edc0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x115edc0) returned 0xffffffff [0096.136] GetLastError () returned 0x2 [0096.136] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0096.137] FindFirstFileExW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\bcdedit.*", fInfoLevelId=0x1, lpFindFileData=0x115edc0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x115edc0) returned 0xffffffff [0096.137] GetLastError () returned 0x2 [0096.137] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0096.137] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\system32\\bcdedit.*", fInfoLevelId=0x1, lpFindFileData=0x115edc0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x115edc0) returned 0xffffffff [0096.137] GetLastError () returned 0x2 [0096.137] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0096.137] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\bcdedit.*", fInfoLevelId=0x1, lpFindFileData=0x115edc0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x115edc0) returned 0xffffffff [0096.138] GetLastError () returned 0x2 [0096.138] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0096.138] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\System32\\Wbem\\bcdedit.*", fInfoLevelId=0x1, lpFindFileData=0x115edc0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x115edc0) returned 0xffffffff [0096.180] GetLastError () returned 0x2 [0096.180] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0096.181] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\bcdedit.*", fInfoLevelId=0x1, lpFindFileData=0x115edc0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x115edc0) returned 0xffffffff [0096.183] GetLastError () returned 0x2 [0096.183] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0096.184] FindFirstFileExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps\\bcdedit.*", fInfoLevelId=0x1, lpFindFileData=0x115edc0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x115edc0) returned 0xffffffff [0096.184] GetLastError () returned 0x2 [0096.184] ??_V@YAXPAX@Z () returned 0x1 [0096.184] _get_osfhandle (_FileHandle=2) returned 0x94 [0096.184] GetFileType (hFile=0x94) returned 0x2 [0096.184] GetStdHandle (nStdHandle=0xfffffff4) returned 0x94 [0096.185] GetConsoleMode (in: hConsoleHandle=0x94, lpMode=0x115f20c | out: lpMode=0x115f20c) returned 1 [0096.226] _get_osfhandle (_FileHandle=2) returned 0x94 [0096.226] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x94, lpConsoleScreenBufferInfo=0x115f25c | out: lpConsoleScreenBufferInfo=0x115f25c) returned 1 [0096.248] FormatMessageW (in: dwFlags=0x1a00, lpSource=0x0, dwMessageId=0x2331, dwLanguageId=0x0, lpBuffer=0x120b990, nSize=0x2000, Arguments=0x0 | out: lpBuffer="'%1' is not recognized as an internal or external command,\r\noperable program or batch file.\r\n") returned 0x5d [0096.249] FormatMessageW (in: dwFlags=0x1800, lpSource=0x0, dwMessageId=0x2331, dwLanguageId=0x0, lpBuffer=0x120b990, nSize=0x2000, Arguments=0x115f28c | out: lpBuffer="'bcdedit' is not recognized as an internal or external command,\r\noperable program or batch file.\r\n") returned 0x62 [0096.249] WriteConsoleW (in: hConsoleOutput=0x94, lpBuffer=0x120b990*, nNumberOfCharsToWrite=0x62, lpNumberOfCharsWritten=0x115f240, lpReserved=0x0 | out: lpBuffer=0x120b990*, lpNumberOfCharsWritten=0x115f240*=0x62) returned 1 [0096.267] ??_V@YAXPAX@Z () returned 0x1 [0096.267] _get_osfhandle (_FileHandle=1) returned 0x90 [0096.267] SetConsoleMode (hConsoleHandle=0x90, dwMode=0x7) returned 1 [0096.290] _get_osfhandle (_FileHandle=1) returned 0x90 [0096.291] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x1203890 | out: lpMode=0x1203890) returned 1 [0096.334] _get_osfhandle (_FileHandle=0) returned 0x8c [0096.334] GetConsoleMode (in: hConsoleHandle=0x8c, lpMode=0x1203894 | out: lpMode=0x1203894) returned 1 [0096.346] SetConsoleInputExeNameW () returned 0x1 [0096.346] GetConsoleOutputCP () returned 0x1b5 [0096.365] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x1203850 | out: lpCPInfo=0x1203850) returned 1 [0096.365] SetThreadUILanguage (LangId=0x0) returned 0xf70409 [0096.387] exit (_Code=1) [0096.388] ??_V@YAXPAX@Z () returned 0x1 Thread: id = 76 os_tid = 0x7c4 Process: id = "26" image_name = "conhost.exe" filename = "c:\\windows\\system32\\conhost.exe" page_root = "0xf664000" os_pid = "0x1310" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "25" os_parent_pid = "0xecc" cmd_line = "\\??\\C:\\WINDOWS\\system32\\conhost.exe 0xffffffff -ForceV1" cur_dir = "C:\\WINDOWS" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000faa5" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 71 os_tid = 0x1314 Thread: id = 72 os_tid = 0x12e4 Thread: id = 73 os_tid = 0x6b4 Thread: id = 74 os_tid = 0xda8 Thread: id = 75 os_tid = 0xd3c Process: id = "27" image_name = "cmd.exe" filename = "c:\\windows\\syswow64\\cmd.exe" page_root = "0xb2d000" os_pid = "0x1308" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x13d4" cmd_line = "C:\\WINDOWS\\system32\\cmd.exe /c wbadmin delete catalog -quiet" cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000faa5" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 77 os_tid = 0x12dc [0098.335] GetModuleHandleA (lpModuleName=0x0) returned 0x11d0000 [0098.335] __set_app_type (_Type=0x1) [0098.335] __p__fmode () returned 0x76953c14 [0098.335] __p__commode () returned 0x769549ec [0098.336] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x11e6fd0) returned 0x0 [0098.336] __getmainargs (in: _Argc=0x11fd1a4, _Argv=0x11fd1a8, _Env=0x11fd1ac, _DoWildCard=0, _StartInfo=0x11fd1b8 | out: _Argc=0x11fd1a4, _Argv=0x11fd1a8, _Env=0x11fd1ac) returned 0 [0098.336] _onexit (_Func=0x11e8030) returned 0x11e8030 [0098.337] _onexit (_Func=0x11e8040) returned 0x11e8040 [0098.337] _onexit (_Func=0x11e8050) returned 0x11e8050 [0098.337] _onexit (_Func=0x11e8060) returned 0x11e8060 [0098.338] _onexit (_Func=0x11e8070) returned 0x11e8070 [0098.339] _onexit (_Func=0x11e8080) returned 0x11e8080 [0098.339] GetCurrentThreadId () returned 0x12dc [0098.339] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0x12dc) returned 0xbc [0098.340] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x74030000 [0098.340] GetProcAddress (hModule=0x74030000, lpProcName="SetThreadUILanguage") returned 0x74044f70 [0098.340] SetThreadUILanguage (LangId=0x0) returned 0x360409 [0098.375] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0098.375] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x1afd3c | out: phkResult=0x1afd3c*=0x0) returned 0x2 [0098.376] VirtualQuery (in: lpAddress=0x1afd47, lpBuffer=0x1afcf4, dwLength=0x1c | out: lpBuffer=0x1afcf4*(BaseAddress=0x1af000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0098.376] VirtualQuery (in: lpAddress=0xb0000, lpBuffer=0x1afcf4, dwLength=0x1c | out: lpBuffer=0x1afcf4*(BaseAddress=0xb0000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000)) returned 0x1c [0098.376] VirtualQuery (in: lpAddress=0xb1000, lpBuffer=0x1afcf4, dwLength=0x1c | out: lpBuffer=0x1afcf4*(BaseAddress=0xb1000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x104, Type=0x20000)) returned 0x1c [0098.376] VirtualQuery (in: lpAddress=0xb3000, lpBuffer=0x1afcf4, dwLength=0x1c | out: lpBuffer=0x1afcf4*(BaseAddress=0xb3000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0xfd000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0098.376] VirtualQuery (in: lpAddress=0x1b0000, lpBuffer=0x1afcf4, dwLength=0x1c | out: lpBuffer=0x1afcf4*(BaseAddress=0x1b0000, AllocationBase=0x1b0000, AllocationProtect=0x2, RegionSize=0x4000, State=0x1000, Protect=0x2, Type=0x40000)) returned 0x1c [0098.377] GetConsoleOutputCP () returned 0x1b5 [0098.457] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x1203850 | out: lpCPInfo=0x1203850) returned 1 [0098.458] SetConsoleCtrlHandler (HandlerRoutine=0x11f7260, Add=1) returned 1 [0098.459] _get_osfhandle (_FileHandle=1) returned 0x90 [0098.459] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x120388c | out: lpMode=0x120388c) returned 1 [0098.463] _get_osfhandle (_FileHandle=0) returned 0x8c [0098.463] GetConsoleMode (in: hConsoleHandle=0x8c, lpMode=0x1203888 | out: lpMode=0x1203888) returned 1 [0098.478] _get_osfhandle (_FileHandle=1) returned 0x90 [0098.478] SetConsoleMode (hConsoleHandle=0x90, dwMode=0x0) returned 1 [0098.495] _get_osfhandle (_FileHandle=1) returned 0x90 [0098.495] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x1203890 | out: lpMode=0x1203890) returned 1 [0098.497] _get_osfhandle (_FileHandle=1) returned 0x90 [0098.497] SetConsoleMode (hConsoleHandle=0x90, dwMode=0x7) returned 1 [0098.513] _get_osfhandle (_FileHandle=0) returned 0x8c [0098.513] GetConsoleMode (in: hConsoleHandle=0x8c, lpMode=0x1203894 | out: lpMode=0x1203894) returned 1 [0098.526] _get_osfhandle (_FileHandle=0) returned 0x8c [0098.526] SetConsoleMode (hConsoleHandle=0x8c, dwMode=0x1e7) returned 1 [0098.548] GetEnvironmentStringsW () returned 0x6d4de8* [0098.548] GetProcessHeap () returned 0x6d0000 [0098.548] RtlAllocateHeap (HeapHandle=0x6d0000, Flags=0x8, Size=0xaca) returned 0x6d58c0 [0098.549] FreeEnvironmentStringsA (penv="A") returned 1 [0098.549] GetProcessHeap () returned 0x6d0000 [0098.549] RtlAllocateHeap (HeapHandle=0x6d0000, Flags=0x8, Size=0x4) returned 0x6d48c8 [0098.549] GetEnvironmentStringsW () returned 0x6d4de8* [0098.549] GetProcessHeap () returned 0x6d0000 [0098.549] RtlAllocateHeap (HeapHandle=0x6d0000, Flags=0x8, Size=0xaca) returned 0x6d6398 [0098.550] FreeEnvironmentStringsA (penv="A") returned 1 [0098.550] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x1aec98 | out: phkResult=0x1aec98*=0xcc) returned 0x0 [0098.550] RegQueryValueExW (in: hKey=0xcc, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x1aeca0, lpData=0x1aeca4, lpcbData=0x1aec9c*=0x1000 | out: lpType=0x1aeca0*=0x0, lpData=0x1aeca4*=0x28, lpcbData=0x1aec9c*=0x1000) returned 0x2 [0098.550] RegQueryValueExW (in: hKey=0xcc, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x1aeca0, lpData=0x1aeca4, lpcbData=0x1aec9c*=0x1000 | out: lpType=0x1aeca0*=0x4, lpData=0x1aeca4*=0x1, lpcbData=0x1aec9c*=0x4) returned 0x0 [0098.550] RegQueryValueExW (in: hKey=0xcc, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x1aeca0, lpData=0x1aeca4, lpcbData=0x1aec9c*=0x1000 | out: lpType=0x1aeca0*=0x0, lpData=0x1aeca4*=0x1, lpcbData=0x1aec9c*=0x1000) returned 0x2 [0098.550] RegQueryValueExW (in: hKey=0xcc, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x1aeca0, lpData=0x1aeca4, lpcbData=0x1aec9c*=0x1000 | out: lpType=0x1aeca0*=0x4, lpData=0x1aeca4*=0x0, lpcbData=0x1aec9c*=0x4) returned 0x0 [0098.551] RegQueryValueExW (in: hKey=0xcc, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x1aeca0, lpData=0x1aeca4, lpcbData=0x1aec9c*=0x1000 | out: lpType=0x1aeca0*=0x4, lpData=0x1aeca4*=0x40, lpcbData=0x1aec9c*=0x4) returned 0x0 [0098.551] RegQueryValueExW (in: hKey=0xcc, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x1aeca0, lpData=0x1aeca4, lpcbData=0x1aec9c*=0x1000 | out: lpType=0x1aeca0*=0x4, lpData=0x1aeca4*=0x40, lpcbData=0x1aec9c*=0x4) returned 0x0 [0098.551] RegQueryValueExW (in: hKey=0xcc, lpValueName="AutoRun", lpReserved=0x0, lpType=0x1aeca0, lpData=0x1aeca4, lpcbData=0x1aec9c*=0x1000 | out: lpType=0x1aeca0*=0x0, lpData=0x1aeca4*=0x40, lpcbData=0x1aec9c*=0x1000) returned 0x2 [0098.551] RegCloseKey (hKey=0xcc) returned 0x0 [0098.551] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x1aec98 | out: phkResult=0x1aec98*=0xcc) returned 0x0 [0098.552] RegQueryValueExW (in: hKey=0xcc, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x1aeca0, lpData=0x1aeca4, lpcbData=0x1aec9c*=0x1000 | out: lpType=0x1aeca0*=0x0, lpData=0x1aeca4*=0x40, lpcbData=0x1aec9c*=0x1000) returned 0x2 [0098.552] RegQueryValueExW (in: hKey=0xcc, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x1aeca0, lpData=0x1aeca4, lpcbData=0x1aec9c*=0x1000 | out: lpType=0x1aeca0*=0x4, lpData=0x1aeca4*=0x1, lpcbData=0x1aec9c*=0x4) returned 0x0 [0098.552] RegQueryValueExW (in: hKey=0xcc, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x1aeca0, lpData=0x1aeca4, lpcbData=0x1aec9c*=0x1000 | out: lpType=0x1aeca0*=0x0, lpData=0x1aeca4*=0x1, lpcbData=0x1aec9c*=0x1000) returned 0x2 [0098.552] RegQueryValueExW (in: hKey=0xcc, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x1aeca0, lpData=0x1aeca4, lpcbData=0x1aec9c*=0x1000 | out: lpType=0x1aeca0*=0x4, lpData=0x1aeca4*=0x0, lpcbData=0x1aec9c*=0x4) returned 0x0 [0098.552] RegQueryValueExW (in: hKey=0xcc, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x1aeca0, lpData=0x1aeca4, lpcbData=0x1aec9c*=0x1000 | out: lpType=0x1aeca0*=0x4, lpData=0x1aeca4*=0x9, lpcbData=0x1aec9c*=0x4) returned 0x0 [0098.552] RegQueryValueExW (in: hKey=0xcc, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x1aeca0, lpData=0x1aeca4, lpcbData=0x1aec9c*=0x1000 | out: lpType=0x1aeca0*=0x4, lpData=0x1aeca4*=0x9, lpcbData=0x1aec9c*=0x4) returned 0x0 [0098.552] RegQueryValueExW (in: hKey=0xcc, lpValueName="AutoRun", lpReserved=0x0, lpType=0x1aeca0, lpData=0x1aeca4, lpcbData=0x1aec9c*=0x1000 | out: lpType=0x1aeca0*=0x0, lpData=0x1aeca4*=0x9, lpcbData=0x1aec9c*=0x1000) returned 0x2 [0098.552] RegCloseKey (hKey=0xcc) returned 0x0 [0098.553] time (in: timer=0x0 | out: timer=0x0) returned 0x5e3302da [0098.553] srand (_Seed=0x5e3302da) [0098.553] GetCommandLineW () returned="C:\\WINDOWS\\system32\\cmd.exe /c wbadmin delete catalog -quiet" [0098.553] malloc (_Size=0x4000) returned 0x8d2700 [0098.554] GetCommandLineW () returned="C:\\WINDOWS\\system32\\cmd.exe /c wbadmin delete catalog -quiet" [0098.554] malloc (_Size=0xffce) returned 0x7d0048 [0098.556] ??_V@YAXPAX@Z () returned 0x1afc7c [0098.557] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x7d0048 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0098.557] malloc (_Size=0xffce) returned 0x7e0020 [0098.558] ??_V@YAXPAX@Z () returned 0x1afa50 [0098.558] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x7e0020, nSize=0x7fe7 | out: lpFilename="C:\\WINDOWS\\SysWOW64\\cmd.exe" (normalized: "c:\\windows\\syswow64\\cmd.exe")) returned 0x1b [0098.559] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x11ff840, nSize=0x2000 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath;C:\\WINDOWS\\system32;C:\\WINDOWS;C:\\WINDOWS\\System32\\Wbem;C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\;C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps") returned 0xbb [0098.559] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x11ff840, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0098.559] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x11ff840, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0098.559] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13 [0098.559] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11 [0098.560] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13 [0098.560] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13 [0098.561] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12 [0098.561] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4 [0098.561] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2 [0098.561] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8 [0098.561] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1 [0098.562] GetProcessHeap () returned 0x6d0000 [0098.562] RtlFreeHeap (HeapHandle=0x6d0000, Flags=0x0, BaseAddress=0x6d58c0) returned 1 [0098.562] GetEnvironmentStringsW () returned 0x6d4de8* [0098.562] GetProcessHeap () returned 0x6d0000 [0098.562] RtlAllocateHeap (HeapHandle=0x6d0000, Flags=0x8, Size=0xae2) returned 0x6d7960 [0098.562] FreeEnvironmentStringsA (penv="A") returned 1 [0098.563] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x11ff840, nSize=0x2000 | out: lpBuffer="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1b [0098.563] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x11ff840, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0098.563] _wcsicmp (_String1="KEYS", _String2="CD") returned 8 [0098.563] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6 [0098.563] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8 [0098.563] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8 [0098.563] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7 [0098.563] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9 [0098.563] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7 [0098.563] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3 [0098.563] malloc (_Size=0xffce) returned 0x7efff8 [0098.566] ??_V@YAXPAX@Z () returned 0x1af7e8 [0098.567] GetProcessHeap () returned 0x6d0000 [0098.567] RtlAllocateHeap (HeapHandle=0x6d0000, Flags=0x8, Size=0x38) returned 0x6d0ae0 [0098.567] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x7efff8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0098.568] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x7fe7, lpBuffer=0x7efff8, lpFilePart=0x1af834 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x1af834*="Desktop") returned 0x17 [0098.568] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\Desktop" (normalized: "c:\\users\\fd1hvy\\desktop")) returned 0x11 [0098.569] FindFirstFileW (in: lpFileName="C:\\Users", lpFindFileData=0x1af5b8 | out: lpFindFileData=0x1af5b8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x475bb883, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x475bb883, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 0x6d0b20 [0098.570] FindClose (in: hFindFile=0x6d0b20 | out: hFindFile=0x6d0b20) returned 1 [0098.570] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy", lpFindFileData=0x1af5b8 | out: lpFindFileData=0x1af5b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20fc850f, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x9de5855d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x9de5855d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD1HVy", cAlternateFileName="")) returned 0x6d0b20 [0098.570] FindClose (in: hFindFile=0x6d0b20 | out: hFindFile=0x6d0b20) returned 1 [0098.571] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", lpFindFileData=0x1af5b8 | out: lpFindFileData=0x1af5b8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x5de49bf6, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0x5de49bf6, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 0x6d0b20 [0098.571] FindClose (in: hFindFile=0x6d0b20 | out: hFindFile=0x6d0b20) returned 1 [0098.571] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\Desktop" (normalized: "c:\\users\\fd1hvy\\desktop")) returned 0x11 [0098.571] SetCurrentDirectoryW (lpPathName="C:\\Users\\FD1HVy\\Desktop" (normalized: "c:\\users\\fd1hvy\\desktop")) returned 1 [0098.572] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Users\\FD1HVy\\Desktop") returned 1 [0098.572] GetProcessHeap () returned 0x6d0000 [0098.572] RtlFreeHeap (HeapHandle=0x6d0000, Flags=0x0, BaseAddress=0x6d7960) returned 1 [0098.572] GetEnvironmentStringsW () returned 0x6d4de8* [0098.572] GetProcessHeap () returned 0x6d0000 [0098.572] RtlAllocateHeap (HeapHandle=0x6d0000, Flags=0x8, Size=0xb1a) returned 0x6d6e70 [0098.572] FreeEnvironmentStringsA (penv="=") returned 1 [0098.572] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x7d0048 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0098.573] GetProcessHeap () returned 0x6d0000 [0098.573] RtlFreeHeap (HeapHandle=0x6d0000, Flags=0x0, BaseAddress=0x6d0ae0) returned 1 [0098.573] ??_V@YAXPAX@Z () returned 0x1 [0098.573] ??_V@YAXPAX@Z () returned 0x1 [0098.573] GetProcessHeap () returned 0x6d0000 [0098.573] RtlAllocateHeap (HeapHandle=0x6d0000, Flags=0x8, Size=0x400e) returned 0x6d8f78 [0098.574] GetProcessHeap () returned 0x6d0000 [0098.574] RtlAllocateHeap (HeapHandle=0x6d0000, Flags=0x8, Size=0x48) returned 0x6d7998 [0098.574] GetProcessHeap () returned 0x6d0000 [0098.574] RtlFreeHeap (HeapHandle=0x6d0000, Flags=0x0, BaseAddress=0x6d8f78) returned 1 [0098.574] GetConsoleOutputCP () returned 0x1b5 [0098.598] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x1203850 | out: lpCPInfo=0x1203850) returned 1 [0098.598] GetUserDefaultLCID () returned 0x409 [0098.600] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x11ff82c, cchData=8 | out: lpLCData=":") returned 2 [0098.600] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x1afba4, cchData=128 | out: lpLCData="0") returned 2 [0098.600] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x1afba4, cchData=128 | out: lpLCData="0") returned 2 [0098.600] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x1afba4, cchData=128 | out: lpLCData="1") returned 2 [0098.600] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x11ff81c, cchData=8 | out: lpLCData="/") returned 2 [0098.600] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x11ff7b8, cchData=32 | out: lpLCData="Mon") returned 4 [0098.600] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x11ff778, cchData=32 | out: lpLCData="Tue") returned 4 [0098.601] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x11ff738, cchData=32 | out: lpLCData="Wed") returned 4 [0098.601] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x11ff6f8, cchData=32 | out: lpLCData="Thu") returned 4 [0098.601] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x11ff6b8, cchData=32 | out: lpLCData="Fri") returned 4 [0098.601] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x11ff678, cchData=32 | out: lpLCData="Sat") returned 4 [0098.601] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x11ff638, cchData=32 | out: lpLCData="Sun") returned 4 [0098.601] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x11ff80c, cchData=8 | out: lpLCData=".") returned 2 [0098.601] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x11ff7f8, cchData=8 | out: lpLCData=",") returned 2 [0098.601] setlocale (category=0, locale=".OCP") returned="English_United States.437" [0098.605] GetProcessHeap () returned 0x6d0000 [0098.605] RtlAllocateHeap (HeapHandle=0x6d0000, Flags=0x0, Size=0x20c) returned 0x6d7a30 [0098.605] GetConsoleTitleW (in: lpConsoleTitle=0x6d7a30, nSize=0x104 | out: lpConsoleTitle="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1c [0098.614] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x74030000 [0098.615] GetProcAddress (hModule=0x74030000, lpProcName="CopyFileExW") returned 0x74044330 [0098.615] GetProcAddress (hModule=0x74030000, lpProcName="IsDebuggerPresent") returned 0x74045930 [0098.615] GetProcAddress (hModule=0x74030000, lpProcName="SetConsoleInputExeNameW") returned 0x772c09d0 [0098.615] ??_V@YAXPAX@Z () returned 0x1 [0098.617] GetProcessHeap () returned 0x6d0000 [0098.617] RtlAllocateHeap (HeapHandle=0x6d0000, Flags=0x8, Size=0x400a) returned 0x6d8f78 [0098.617] GetProcessHeap () returned 0x6d0000 [0098.617] RtlFreeHeap (HeapHandle=0x6d0000, Flags=0x0, BaseAddress=0x6d8f78) returned 1 [0098.618] _wcsicmp (_String1="wbadmin", _String2=")") returned 78 [0098.618] _wcsicmp (_String1="FOR", _String2="wbadmin") returned -17 [0098.618] _wcsicmp (_String1="FOR/?", _String2="wbadmin") returned -17 [0098.619] _wcsicmp (_String1="IF", _String2="wbadmin") returned -14 [0098.619] _wcsicmp (_String1="IF/?", _String2="wbadmin") returned -14 [0098.619] _wcsicmp (_String1="REM", _String2="wbadmin") returned -5 [0098.619] _wcsicmp (_String1="REM/?", _String2="wbadmin") returned -5 [0098.619] GetProcessHeap () returned 0x6d0000 [0098.619] RtlAllocateHeap (HeapHandle=0x6d0000, Flags=0x8, Size=0x58) returned 0x6d7c48 [0098.619] GetProcessHeap () returned 0x6d0000 [0098.619] RtlAllocateHeap (HeapHandle=0x6d0000, Flags=0x8, Size=0x18) returned 0x6d7ca8 [0098.620] GetProcessHeap () returned 0x6d0000 [0098.620] RtlAllocateHeap (HeapHandle=0x6d0000, Flags=0x8, Size=0x36) returned 0x6d7cc8 [0098.622] GetConsoleTitleW (in: lpConsoleTitle=0x1afa98, nSize=0x104 | out: lpConsoleTitle="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1c [0098.659] malloc (_Size=0xffce) returned 0x7e2ac0 [0098.660] ??_V@YAXPAX@Z () returned 0x1af824 [0098.661] malloc (_Size=0xffce) returned 0x7f2a98 [0098.662] ??_V@YAXPAX@Z () returned 0x1af5dc [0098.664] _wcsicmp (_String1="wbadmin", _String2="DIR") returned 19 [0098.665] _wcsicmp (_String1="wbadmin", _String2="ERASE") returned 18 [0098.665] _wcsicmp (_String1="wbadmin", _String2="DEL") returned 19 [0098.665] _wcsicmp (_String1="wbadmin", _String2="TYPE") returned 3 [0098.665] _wcsicmp (_String1="wbadmin", _String2="COPY") returned 20 [0098.665] _wcsicmp (_String1="wbadmin", _String2="CD") returned 20 [0098.665] _wcsicmp (_String1="wbadmin", _String2="CHDIR") returned 20 [0098.665] _wcsicmp (_String1="wbadmin", _String2="RENAME") returned 5 [0098.665] _wcsicmp (_String1="wbadmin", _String2="REN") returned 5 [0098.666] _wcsicmp (_String1="wbadmin", _String2="ECHO") returned 18 [0098.666] _wcsicmp (_String1="wbadmin", _String2="SET") returned 4 [0098.666] _wcsicmp (_String1="wbadmin", _String2="PAUSE") returned 7 [0098.666] _wcsicmp (_String1="wbadmin", _String2="DATE") returned 19 [0098.666] _wcsicmp (_String1="wbadmin", _String2="TIME") returned 3 [0098.666] _wcsicmp (_String1="wbadmin", _String2="PROMPT") returned 7 [0098.666] _wcsicmp (_String1="wbadmin", _String2="MD") returned 10 [0098.666] _wcsicmp (_String1="wbadmin", _String2="MKDIR") returned 10 [0098.666] _wcsicmp (_String1="wbadmin", _String2="RD") returned 5 [0098.667] _wcsicmp (_String1="wbadmin", _String2="RMDIR") returned 5 [0098.667] _wcsicmp (_String1="wbadmin", _String2="PATH") returned 7 [0098.667] _wcsicmp (_String1="wbadmin", _String2="GOTO") returned 16 [0098.667] _wcsicmp (_String1="wbadmin", _String2="SHIFT") returned 4 [0098.667] _wcsicmp (_String1="wbadmin", _String2="CLS") returned 20 [0098.667] _wcsicmp (_String1="wbadmin", _String2="CALL") returned 20 [0098.667] _wcsicmp (_String1="wbadmin", _String2="VERIFY") returned 1 [0098.667] _wcsicmp (_String1="wbadmin", _String2="VER") returned 1 [0098.667] _wcsicmp (_String1="wbadmin", _String2="VOL") returned 1 [0098.667] _wcsicmp (_String1="wbadmin", _String2="EXIT") returned 18 [0098.668] _wcsicmp (_String1="wbadmin", _String2="SETLOCAL") returned 4 [0098.668] _wcsicmp (_String1="wbadmin", _String2="ENDLOCAL") returned 18 [0098.668] _wcsicmp (_String1="wbadmin", _String2="TITLE") returned 3 [0098.668] _wcsicmp (_String1="wbadmin", _String2="START") returned 4 [0098.668] _wcsicmp (_String1="wbadmin", _String2="DPATH") returned 19 [0098.668] _wcsicmp (_String1="wbadmin", _String2="KEYS") returned 12 [0098.668] _wcsicmp (_String1="wbadmin", _String2="MOVE") returned 10 [0098.668] _wcsicmp (_String1="wbadmin", _String2="PUSHD") returned 7 [0098.668] _wcsicmp (_String1="wbadmin", _String2="POPD") returned 7 [0098.669] _wcsicmp (_String1="wbadmin", _String2="ASSOC") returned 22 [0098.669] _wcsicmp (_String1="wbadmin", _String2="FTYPE") returned 17 [0098.669] _wcsicmp (_String1="wbadmin", _String2="BREAK") returned 21 [0098.669] _wcsicmp (_String1="wbadmin", _String2="COLOR") returned 20 [0098.669] _wcsicmp (_String1="wbadmin", _String2="MKLINK") returned 10 [0098.669] _wcsicmp (_String1="wbadmin", _String2="DIR") returned 19 [0098.669] _wcsicmp (_String1="wbadmin", _String2="ERASE") returned 18 [0098.669] _wcsicmp (_String1="wbadmin", _String2="DEL") returned 19 [0098.669] _wcsicmp (_String1="wbadmin", _String2="TYPE") returned 3 [0098.669] _wcsicmp (_String1="wbadmin", _String2="COPY") returned 20 [0098.670] _wcsicmp (_String1="wbadmin", _String2="CD") returned 20 [0098.670] _wcsicmp (_String1="wbadmin", _String2="CHDIR") returned 20 [0098.670] _wcsicmp (_String1="wbadmin", _String2="RENAME") returned 5 [0098.670] _wcsicmp (_String1="wbadmin", _String2="REN") returned 5 [0098.670] _wcsicmp (_String1="wbadmin", _String2="ECHO") returned 18 [0098.670] _wcsicmp (_String1="wbadmin", _String2="SET") returned 4 [0098.670] _wcsicmp (_String1="wbadmin", _String2="PAUSE") returned 7 [0098.670] _wcsicmp (_String1="wbadmin", _String2="DATE") returned 19 [0098.670] _wcsicmp (_String1="wbadmin", _String2="TIME") returned 3 [0098.671] _wcsicmp (_String1="wbadmin", _String2="PROMPT") returned 7 [0098.671] _wcsicmp (_String1="wbadmin", _String2="MD") returned 10 [0098.671] _wcsicmp (_String1="wbadmin", _String2="MKDIR") returned 10 [0098.671] _wcsicmp (_String1="wbadmin", _String2="RD") returned 5 [0098.671] _wcsicmp (_String1="wbadmin", _String2="RMDIR") returned 5 [0098.671] _wcsicmp (_String1="wbadmin", _String2="PATH") returned 7 [0098.671] _wcsicmp (_String1="wbadmin", _String2="GOTO") returned 16 [0098.671] _wcsicmp (_String1="wbadmin", _String2="SHIFT") returned 4 [0098.671] _wcsicmp (_String1="wbadmin", _String2="CLS") returned 20 [0098.672] _wcsicmp (_String1="wbadmin", _String2="CALL") returned 20 [0098.672] _wcsicmp (_String1="wbadmin", _String2="VERIFY") returned 1 [0098.672] _wcsicmp (_String1="wbadmin", _String2="VER") returned 1 [0098.672] _wcsicmp (_String1="wbadmin", _String2="VOL") returned 1 [0098.672] _wcsicmp (_String1="wbadmin", _String2="EXIT") returned 18 [0098.672] _wcsicmp (_String1="wbadmin", _String2="SETLOCAL") returned 4 [0098.672] _wcsicmp (_String1="wbadmin", _String2="ENDLOCAL") returned 18 [0098.672] _wcsicmp (_String1="wbadmin", _String2="TITLE") returned 3 [0098.672] _wcsicmp (_String1="wbadmin", _String2="START") returned 4 [0098.672] _wcsicmp (_String1="wbadmin", _String2="DPATH") returned 19 [0098.672] _wcsicmp (_String1="wbadmin", _String2="KEYS") returned 12 [0098.673] _wcsicmp (_String1="wbadmin", _String2="MOVE") returned 10 [0098.673] _wcsicmp (_String1="wbadmin", _String2="PUSHD") returned 7 [0098.673] _wcsicmp (_String1="wbadmin", _String2="POPD") returned 7 [0098.673] _wcsicmp (_String1="wbadmin", _String2="ASSOC") returned 22 [0098.673] _wcsicmp (_String1="wbadmin", _String2="FTYPE") returned 17 [0098.673] _wcsicmp (_String1="wbadmin", _String2="BREAK") returned 21 [0098.675] _wcsicmp (_String1="wbadmin", _String2="COLOR") returned 20 [0098.675] _wcsicmp (_String1="wbadmin", _String2="MKLINK") returned 10 [0098.675] _wcsicmp (_String1="wbadmin", _String2="FOR") returned 17 [0098.675] _wcsicmp (_String1="wbadmin", _String2="IF") returned 14 [0098.676] _wcsicmp (_String1="wbadmin", _String2="REM") returned 5 [0098.677] ??_V@YAXPAX@Z () returned 0x1 [0098.677] GetProcessHeap () returned 0x6d0000 [0098.677] RtlAllocateHeap (HeapHandle=0x6d0000, Flags=0x8, Size=0xffd6) returned 0x6d8f78 [0098.679] GetProcessHeap () returned 0x6d0000 [0098.679] RtlAllocateHeap (HeapHandle=0x6d0000, Flags=0x8, Size=0x46) returned 0x6d7d08 [0098.679] _wcsnicmp (_String1="wbad", _String2="cmd ", _MaxCount=0x4) returned 20 [0098.679] malloc (_Size=0xffce) returned 0x7f2a98 [0098.680] ??_V@YAXPAX@Z () returned 0x1af35c [0098.680] GetProcessHeap () returned 0x6d0000 [0098.680] RtlAllocateHeap (HeapHandle=0x6d0000, Flags=0x8, Size=0x1ffa4) returned 0x6e8f58 [0098.683] SetErrorMode (uMode=0x0) returned 0x0 [0098.683] SetErrorMode (uMode=0x1) returned 0x0 [0098.683] GetFullPathNameW (in: lpFileName=".", nBufferLength=0xffce, lpBuffer=0x6e8f60, lpFilePart=0x1af37c | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x1af37c*="Desktop") returned 0x17 [0098.684] SetErrorMode (uMode=0x0) returned 0x1 [0098.684] GetProcessHeap () returned 0x6d0000 [0098.684] RtlReAllocateHeap (Heap=0x6d0000, Flags=0x0, Ptr=0x6e8f58, Size=0x48) returned 0x6e8f58 [0098.684] GetProcessHeap () returned 0x6d0000 [0098.684] RtlSizeHeap (HeapHandle=0x6d0000, Flags=0x0, MemoryPointer=0x6e8f58) returned 0x48 [0098.684] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x11ff840, nSize=0x2000 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath;C:\\WINDOWS\\system32;C:\\WINDOWS;C:\\WINDOWS\\System32\\Wbem;C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\;C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps") returned 0xbb [0098.684] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1 [0098.685] GetProcessHeap () returned 0x6d0000 [0098.685] RtlAllocateHeap (HeapHandle=0x6d0000, Flags=0x8, Size=0x1b4) returned 0x6d7d58 [0098.685] GetProcessHeap () returned 0x6d0000 [0098.685] RtlAllocateHeap (HeapHandle=0x6d0000, Flags=0x8, Size=0x360) returned 0x6d7f18 [0098.787] GetProcessHeap () returned 0x6d0000 [0098.787] RtlReAllocateHeap (Heap=0x6d0000, Flags=0x0, Ptr=0x6d7f18, Size=0x1b6) returned 0x6d7f18 [0098.787] GetProcessHeap () returned 0x6d0000 [0098.787] RtlSizeHeap (HeapHandle=0x6d0000, Flags=0x0, MemoryPointer=0x6d7f18) returned 0x1b6 [0098.787] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x11ff840, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0098.787] GetProcessHeap () returned 0x6d0000 [0098.787] RtlAllocateHeap (HeapHandle=0x6d0000, Flags=0x8, Size=0xe0) returned 0x6d80d8 [0098.789] GetProcessHeap () returned 0x6d0000 [0098.789] RtlReAllocateHeap (Heap=0x6d0000, Flags=0x0, Ptr=0x6d80d8, Size=0x76) returned 0x6d80d8 [0098.789] GetProcessHeap () returned 0x6d0000 [0098.789] RtlSizeHeap (HeapHandle=0x6d0000, Flags=0x0, MemoryPointer=0x6d80d8) returned 0x76 [0098.790] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0098.790] FindFirstFileExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\wbadmin.*", fInfoLevelId=0x1, lpFindFileData=0x1af108, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x1af108) returned 0xffffffff [0098.790] GetLastError () returned 0x2 [0098.790] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0098.791] FindFirstFileExW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\wbadmin.*", fInfoLevelId=0x1, lpFindFileData=0x1af108, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x1af108) returned 0xffffffff [0098.791] GetLastError () returned 0x2 [0098.791] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0098.792] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\system32\\wbadmin.*", fInfoLevelId=0x1, lpFindFileData=0x1af108, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x1af108) returned 0xffffffff [0098.792] GetLastError () returned 0x2 [0098.792] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0098.792] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\wbadmin.*", fInfoLevelId=0x1, lpFindFileData=0x1af108, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x1af108) returned 0xffffffff [0098.792] GetLastError () returned 0x2 [0098.792] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0098.793] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\System32\\Wbem\\wbadmin.*", fInfoLevelId=0x1, lpFindFileData=0x1af108, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x1af108) returned 0xffffffff [0098.796] GetLastError () returned 0x2 [0098.796] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0098.796] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\wbadmin.*", fInfoLevelId=0x1, lpFindFileData=0x1af108, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x1af108) returned 0xffffffff [0098.799] GetLastError () returned 0x2 [0098.799] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0098.799] FindFirstFileExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps\\wbadmin.*", fInfoLevelId=0x1, lpFindFileData=0x1af108, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x1af108) returned 0xffffffff [0098.799] GetLastError () returned 0x2 [0098.799] ??_V@YAXPAX@Z () returned 0x1 [0098.800] _get_osfhandle (_FileHandle=2) returned 0x94 [0098.800] GetFileType (hFile=0x94) returned 0x2 [0098.800] GetStdHandle (nStdHandle=0xfffffff4) returned 0x94 [0098.800] GetConsoleMode (in: hConsoleHandle=0x94, lpMode=0x1af554 | out: lpMode=0x1af554) returned 1 [0098.815] _get_osfhandle (_FileHandle=2) returned 0x94 [0098.815] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x94, lpConsoleScreenBufferInfo=0x1af5a4 | out: lpConsoleScreenBufferInfo=0x1af5a4) returned 1 [0098.826] FormatMessageW (in: dwFlags=0x1a00, lpSource=0x0, dwMessageId=0x2331, dwLanguageId=0x0, lpBuffer=0x120b990, nSize=0x2000, Arguments=0x0 | out: lpBuffer="'%1' is not recognized as an internal or external command,\r\noperable program or batch file.\r\n") returned 0x5d [0098.827] FormatMessageW (in: dwFlags=0x1800, lpSource=0x0, dwMessageId=0x2331, dwLanguageId=0x0, lpBuffer=0x120b990, nSize=0x2000, Arguments=0x1af5d4 | out: lpBuffer="'wbadmin' is not recognized as an internal or external command,\r\noperable program or batch file.\r\n") returned 0x62 [0098.828] WriteConsoleW (in: hConsoleOutput=0x94, lpBuffer=0x120b990*, nNumberOfCharsToWrite=0x62, lpNumberOfCharsWritten=0x1af588, lpReserved=0x0 | out: lpBuffer=0x120b990*, lpNumberOfCharsWritten=0x1af588*=0x62) returned 1 [0098.863] ??_V@YAXPAX@Z () returned 0x1 [0098.863] _get_osfhandle (_FileHandle=1) returned 0x90 [0098.863] SetConsoleMode (hConsoleHandle=0x90, dwMode=0x7) returned 1 [0098.867] _get_osfhandle (_FileHandle=1) returned 0x90 [0098.867] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x1203890 | out: lpMode=0x1203890) returned 1 [0098.882] _get_osfhandle (_FileHandle=0) returned 0x8c [0098.882] GetConsoleMode (in: hConsoleHandle=0x8c, lpMode=0x1203894 | out: lpMode=0x1203894) returned 1 [0098.886] SetConsoleInputExeNameW () returned 0x1 [0098.887] GetConsoleOutputCP () returned 0x1b5 [0098.901] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x1203850 | out: lpCPInfo=0x1203850) returned 1 [0098.901] SetThreadUILanguage (LangId=0x0) returned 0x360409 [0098.903] exit (_Code=1) [0098.903] ??_V@YAXPAX@Z () returned 0x1 Thread: id = 83 os_tid = 0x12f8 Process: id = "28" image_name = "conhost.exe" filename = "c:\\windows\\system32\\conhost.exe" page_root = "0x572f0000" os_pid = "0x78c" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "27" os_parent_pid = "0x1308" cmd_line = "\\??\\C:\\WINDOWS\\system32\\conhost.exe 0xffffffff -ForceV1" cur_dir = "C:\\WINDOWS" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000faa5" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 78 os_tid = 0x324 Thread: id = 79 os_tid = 0xb78 Thread: id = 80 os_tid = 0x2d4 Thread: id = 81 os_tid = 0x12fc Thread: id = 82 os_tid = 0x12e0 Process: id = "29" image_name = "cmd.exe" filename = "c:\\windows\\syswow64\\cmd.exe" page_root = "0x5542e000" os_pid = "0xee8" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x13d4" cmd_line = "C:\\WINDOWS\\system32\\cmd.exe /c net stop SQLSERVERAGENT" cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000faa5" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 84 os_tid = 0x3cc [0101.048] GetModuleHandleA (lpModuleName=0x0) returned 0x11d0000 [0101.048] __set_app_type (_Type=0x1) [0101.048] __p__fmode () returned 0x76953c14 [0101.048] __p__commode () returned 0x769549ec [0101.049] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x11e6fd0) returned 0x0 [0101.049] __getmainargs (in: _Argc=0x11fd1a4, _Argv=0x11fd1a8, _Env=0x11fd1ac, _DoWildCard=0, _StartInfo=0x11fd1b8 | out: _Argc=0x11fd1a4, _Argv=0x11fd1a8, _Env=0x11fd1ac) returned 0 [0101.050] _onexit (_Func=0x11e8030) returned 0x11e8030 [0101.050] _onexit (_Func=0x11e8040) returned 0x11e8040 [0101.051] _onexit (_Func=0x11e8050) returned 0x11e8050 [0101.051] _onexit (_Func=0x11e8060) returned 0x11e8060 [0101.052] _onexit (_Func=0x11e8070) returned 0x11e8070 [0101.053] _onexit (_Func=0x11e8080) returned 0x11e8080 [0101.054] GetCurrentThreadId () returned 0x3cc [0101.054] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0x3cc) returned 0xbc [0101.054] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x74030000 [0101.055] GetProcAddress (hModule=0x74030000, lpProcName="SetThreadUILanguage") returned 0x74044f70 [0101.055] SetThreadUILanguage (LangId=0x0) returned 0x330409 [0101.088] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0101.088] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x1bf8e8 | out: phkResult=0x1bf8e8*=0x0) returned 0x2 [0101.089] VirtualQuery (in: lpAddress=0x1bf8f3, lpBuffer=0x1bf8a0, dwLength=0x1c | out: lpBuffer=0x1bf8a0*(BaseAddress=0x1bf000, AllocationBase=0xc0000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0101.089] VirtualQuery (in: lpAddress=0xc0000, lpBuffer=0x1bf8a0, dwLength=0x1c | out: lpBuffer=0x1bf8a0*(BaseAddress=0xc0000, AllocationBase=0xc0000, AllocationProtect=0x4, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000)) returned 0x1c [0101.089] VirtualQuery (in: lpAddress=0xc1000, lpBuffer=0x1bf8a0, dwLength=0x1c | out: lpBuffer=0x1bf8a0*(BaseAddress=0xc1000, AllocationBase=0xc0000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x104, Type=0x20000)) returned 0x1c [0101.089] VirtualQuery (in: lpAddress=0xc3000, lpBuffer=0x1bf8a0, dwLength=0x1c | out: lpBuffer=0x1bf8a0*(BaseAddress=0xc3000, AllocationBase=0xc0000, AllocationProtect=0x4, RegionSize=0xfd000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0101.089] VirtualQuery (in: lpAddress=0x1c0000, lpBuffer=0x1bf8a0, dwLength=0x1c | out: lpBuffer=0x1bf8a0*(BaseAddress=0x1c0000, AllocationBase=0x1c0000, AllocationProtect=0x2, RegionSize=0x4000, State=0x1000, Protect=0x2, Type=0x40000)) returned 0x1c [0101.095] GetConsoleOutputCP () returned 0x1b5 [0101.112] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x1203850 | out: lpCPInfo=0x1203850) returned 1 [0101.113] SetConsoleCtrlHandler (HandlerRoutine=0x11f7260, Add=1) returned 1 [0101.113] _get_osfhandle (_FileHandle=1) returned 0x90 [0101.113] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x120388c | out: lpMode=0x120388c) returned 1 [0101.117] _get_osfhandle (_FileHandle=0) returned 0x8c [0101.117] GetConsoleMode (in: hConsoleHandle=0x8c, lpMode=0x1203888 | out: lpMode=0x1203888) returned 1 [0101.130] _get_osfhandle (_FileHandle=1) returned 0x90 [0101.130] SetConsoleMode (hConsoleHandle=0x90, dwMode=0x0) returned 1 [0101.132] _get_osfhandle (_FileHandle=1) returned 0x90 [0101.132] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x1203890 | out: lpMode=0x1203890) returned 1 [0101.133] _get_osfhandle (_FileHandle=1) returned 0x90 [0101.134] SetConsoleMode (hConsoleHandle=0x90, dwMode=0x7) returned 1 [0101.136] _get_osfhandle (_FileHandle=0) returned 0x8c [0101.136] GetConsoleMode (in: hConsoleHandle=0x8c, lpMode=0x1203894 | out: lpMode=0x1203894) returned 1 [0101.149] _get_osfhandle (_FileHandle=0) returned 0x8c [0101.149] SetConsoleMode (hConsoleHandle=0x8c, dwMode=0x1e7) returned 1 [0101.151] GetEnvironmentStringsW () returned 0x4a4dd8* [0101.151] GetProcessHeap () returned 0x4a0000 [0101.151] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0xaca) returned 0x4a58b0 [0101.152] FreeEnvironmentStringsA (penv="A") returned 1 [0101.152] GetProcessHeap () returned 0x4a0000 [0101.152] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4) returned 0x4a48b8 [0101.152] GetEnvironmentStringsW () returned 0x4a4dd8* [0101.153] GetProcessHeap () returned 0x4a0000 [0101.153] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0xaca) returned 0x4a6388 [0101.153] FreeEnvironmentStringsA (penv="A") returned 1 [0101.153] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x1be844 | out: phkResult=0x1be844*=0xcc) returned 0x0 [0101.153] RegQueryValueExW (in: hKey=0xcc, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x1be84c, lpData=0x1be850, lpcbData=0x1be848*=0x1000 | out: lpType=0x1be84c*=0x0, lpData=0x1be850*=0x60, lpcbData=0x1be848*=0x1000) returned 0x2 [0101.153] RegQueryValueExW (in: hKey=0xcc, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x1be84c, lpData=0x1be850, lpcbData=0x1be848*=0x1000 | out: lpType=0x1be84c*=0x4, lpData=0x1be850*=0x1, lpcbData=0x1be848*=0x4) returned 0x0 [0101.154] RegQueryValueExW (in: hKey=0xcc, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x1be84c, lpData=0x1be850, lpcbData=0x1be848*=0x1000 | out: lpType=0x1be84c*=0x0, lpData=0x1be850*=0x1, lpcbData=0x1be848*=0x1000) returned 0x2 [0101.154] RegQueryValueExW (in: hKey=0xcc, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x1be84c, lpData=0x1be850, lpcbData=0x1be848*=0x1000 | out: lpType=0x1be84c*=0x4, lpData=0x1be850*=0x0, lpcbData=0x1be848*=0x4) returned 0x0 [0101.154] RegQueryValueExW (in: hKey=0xcc, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x1be84c, lpData=0x1be850, lpcbData=0x1be848*=0x1000 | out: lpType=0x1be84c*=0x4, lpData=0x1be850*=0x40, lpcbData=0x1be848*=0x4) returned 0x0 [0101.154] RegQueryValueExW (in: hKey=0xcc, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x1be84c, lpData=0x1be850, lpcbData=0x1be848*=0x1000 | out: lpType=0x1be84c*=0x4, lpData=0x1be850*=0x40, lpcbData=0x1be848*=0x4) returned 0x0 [0101.154] RegQueryValueExW (in: hKey=0xcc, lpValueName="AutoRun", lpReserved=0x0, lpType=0x1be84c, lpData=0x1be850, lpcbData=0x1be848*=0x1000 | out: lpType=0x1be84c*=0x0, lpData=0x1be850*=0x40, lpcbData=0x1be848*=0x1000) returned 0x2 [0101.154] RegCloseKey (hKey=0xcc) returned 0x0 [0101.157] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x1be844 | out: phkResult=0x1be844*=0xcc) returned 0x0 [0101.157] RegQueryValueExW (in: hKey=0xcc, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x1be84c, lpData=0x1be850, lpcbData=0x1be848*=0x1000 | out: lpType=0x1be84c*=0x0, lpData=0x1be850*=0x40, lpcbData=0x1be848*=0x1000) returned 0x2 [0101.157] RegQueryValueExW (in: hKey=0xcc, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x1be84c, lpData=0x1be850, lpcbData=0x1be848*=0x1000 | out: lpType=0x1be84c*=0x4, lpData=0x1be850*=0x1, lpcbData=0x1be848*=0x4) returned 0x0 [0101.158] RegQueryValueExW (in: hKey=0xcc, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x1be84c, lpData=0x1be850, lpcbData=0x1be848*=0x1000 | out: lpType=0x1be84c*=0x0, lpData=0x1be850*=0x1, lpcbData=0x1be848*=0x1000) returned 0x2 [0101.158] RegQueryValueExW (in: hKey=0xcc, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x1be84c, lpData=0x1be850, lpcbData=0x1be848*=0x1000 | out: lpType=0x1be84c*=0x4, lpData=0x1be850*=0x0, lpcbData=0x1be848*=0x4) returned 0x0 [0101.158] RegQueryValueExW (in: hKey=0xcc, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x1be84c, lpData=0x1be850, lpcbData=0x1be848*=0x1000 | out: lpType=0x1be84c*=0x4, lpData=0x1be850*=0x9, lpcbData=0x1be848*=0x4) returned 0x0 [0101.158] RegQueryValueExW (in: hKey=0xcc, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x1be84c, lpData=0x1be850, lpcbData=0x1be848*=0x1000 | out: lpType=0x1be84c*=0x4, lpData=0x1be850*=0x9, lpcbData=0x1be848*=0x4) returned 0x0 [0101.158] RegQueryValueExW (in: hKey=0xcc, lpValueName="AutoRun", lpReserved=0x0, lpType=0x1be84c, lpData=0x1be850, lpcbData=0x1be848*=0x1000 | out: lpType=0x1be84c*=0x0, lpData=0x1be850*=0x9, lpcbData=0x1be848*=0x1000) returned 0x2 [0101.158] RegCloseKey (hKey=0xcc) returned 0x0 [0101.159] time (in: timer=0x0 | out: timer=0x0) returned 0x5e3302dd [0101.159] srand (_Seed=0x5e3302dd) [0101.159] GetCommandLineW () returned="C:\\WINDOWS\\system32\\cmd.exe /c net stop SQLSERVERAGENT" [0101.159] malloc (_Size=0x4000) returned 0x962700 [0101.160] GetCommandLineW () returned="C:\\WINDOWS\\system32\\cmd.exe /c net stop SQLSERVERAGENT" [0101.160] malloc (_Size=0xffce) returned 0x770048 [0101.162] ??_V@YAXPAX@Z () returned 0x1bf828 [0101.163] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x770048 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0101.164] malloc (_Size=0xffce) returned 0x780020 [0101.164] ??_V@YAXPAX@Z () returned 0x1bf5fc [0101.165] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x780020, nSize=0x7fe7 | out: lpFilename="C:\\WINDOWS\\SysWOW64\\cmd.exe" (normalized: "c:\\windows\\syswow64\\cmd.exe")) returned 0x1b [0101.165] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x11ff840, nSize=0x2000 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath;C:\\WINDOWS\\system32;C:\\WINDOWS;C:\\WINDOWS\\System32\\Wbem;C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\;C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps") returned 0xbb [0101.165] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x11ff840, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0101.165] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x11ff840, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0101.166] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13 [0101.166] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11 [0101.166] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13 [0101.166] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13 [0101.166] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12 [0101.166] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4 [0101.166] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2 [0101.166] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8 [0101.167] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1 [0101.167] GetProcessHeap () returned 0x4a0000 [0101.167] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4a58b0) returned 1 [0101.167] GetEnvironmentStringsW () returned 0x4a4dd8* [0101.168] GetProcessHeap () returned 0x4a0000 [0101.168] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0xae2) returned 0x4a7950 [0101.168] FreeEnvironmentStringsA (penv="A") returned 1 [0101.168] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x11ff840, nSize=0x2000 | out: lpBuffer="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1b [0101.169] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x11ff840, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0101.169] _wcsicmp (_String1="KEYS", _String2="CD") returned 8 [0101.169] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6 [0101.169] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8 [0101.169] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8 [0101.169] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7 [0101.169] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9 [0101.169] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7 [0101.169] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3 [0101.170] malloc (_Size=0xffce) returned 0x78fff8 [0101.170] ??_V@YAXPAX@Z () returned 0x1bf394 [0101.171] GetProcessHeap () returned 0x4a0000 [0101.171] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x38) returned 0x4a0ae0 [0101.171] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x78fff8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0101.172] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x7fe7, lpBuffer=0x78fff8, lpFilePart=0x1bf3e0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x1bf3e0*="Desktop") returned 0x17 [0101.172] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\Desktop" (normalized: "c:\\users\\fd1hvy\\desktop")) returned 0x11 [0101.173] FindFirstFileW (in: lpFileName="C:\\Users", lpFindFileData=0x1bf160 | out: lpFindFileData=0x1bf160*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x475bb883, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x475bb883, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 0x4a0b20 [0101.173] FindClose (in: hFindFile=0x4a0b20 | out: hFindFile=0x4a0b20) returned 1 [0101.174] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy", lpFindFileData=0x1bf160 | out: lpFindFileData=0x1bf160*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20fc850f, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x9de5855d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x9de5855d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD1HVy", cAlternateFileName="")) returned 0x4a0b20 [0101.174] FindClose (in: hFindFile=0x4a0b20 | out: hFindFile=0x4a0b20) returned 1 [0101.174] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", lpFindFileData=0x1bf160 | out: lpFindFileData=0x1bf160*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x5de49bf6, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0x5de49bf6, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 0x4a0b20 [0101.174] FindClose (in: hFindFile=0x4a0b20 | out: hFindFile=0x4a0b20) returned 1 [0101.175] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\Desktop" (normalized: "c:\\users\\fd1hvy\\desktop")) returned 0x11 [0101.175] SetCurrentDirectoryW (lpPathName="C:\\Users\\FD1HVy\\Desktop" (normalized: "c:\\users\\fd1hvy\\desktop")) returned 1 [0101.175] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Users\\FD1HVy\\Desktop") returned 1 [0101.175] GetProcessHeap () returned 0x4a0000 [0101.175] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4a7950) returned 1 [0101.176] GetEnvironmentStringsW () returned 0x4a4dd8* [0101.176] GetProcessHeap () returned 0x4a0000 [0101.176] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0xb1a) returned 0x4a6e60 [0101.176] FreeEnvironmentStringsA (penv="=") returned 1 [0101.176] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x770048 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0101.176] GetProcessHeap () returned 0x4a0000 [0101.176] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4a0ae0) returned 1 [0101.177] ??_V@YAXPAX@Z () returned 0x1 [0101.177] ??_V@YAXPAX@Z () returned 0x1 [0101.177] GetProcessHeap () returned 0x4a0000 [0101.177] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x400e) returned 0x4a8f68 [0101.178] GetProcessHeap () returned 0x4a0000 [0101.178] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x3c) returned 0x4a7988 [0101.178] GetProcessHeap () returned 0x4a0000 [0101.178] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4a8f68) returned 1 [0101.179] GetConsoleOutputCP () returned 0x1b5 [0101.194] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x1203850 | out: lpCPInfo=0x1203850) returned 1 [0101.195] GetUserDefaultLCID () returned 0x409 [0101.195] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x11ff82c, cchData=8 | out: lpLCData=":") returned 2 [0101.196] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x1bf750, cchData=128 | out: lpLCData="0") returned 2 [0101.196] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x1bf750, cchData=128 | out: lpLCData="0") returned 2 [0101.196] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x1bf750, cchData=128 | out: lpLCData="1") returned 2 [0101.196] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x11ff81c, cchData=8 | out: lpLCData="/") returned 2 [0101.196] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x11ff7b8, cchData=32 | out: lpLCData="Mon") returned 4 [0101.196] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x11ff778, cchData=32 | out: lpLCData="Tue") returned 4 [0101.196] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x11ff738, cchData=32 | out: lpLCData="Wed") returned 4 [0101.196] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x11ff6f8, cchData=32 | out: lpLCData="Thu") returned 4 [0101.196] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x11ff6b8, cchData=32 | out: lpLCData="Fri") returned 4 [0101.197] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x11ff678, cchData=32 | out: lpLCData="Sat") returned 4 [0101.197] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x11ff638, cchData=32 | out: lpLCData="Sun") returned 4 [0101.197] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x11ff80c, cchData=8 | out: lpLCData=".") returned 2 [0101.197] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x11ff7f8, cchData=8 | out: lpLCData=",") returned 2 [0101.197] setlocale (category=0, locale=".OCP") returned="English_United States.437" [0101.201] GetProcessHeap () returned 0x4a0000 [0101.201] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x0, Size=0x20c) returned 0x4a7a18 [0101.201] GetConsoleTitleW (in: lpConsoleTitle=0x4a7a18, nSize=0x104 | out: lpConsoleTitle="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1c [0101.252] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x74030000 [0101.252] GetProcAddress (hModule=0x74030000, lpProcName="CopyFileExW") returned 0x74044330 [0101.252] GetProcAddress (hModule=0x74030000, lpProcName="IsDebuggerPresent") returned 0x74045930 [0101.252] GetProcAddress (hModule=0x74030000, lpProcName="SetConsoleInputExeNameW") returned 0x772c09d0 [0101.252] ??_V@YAXPAX@Z () returned 0x1 [0101.254] GetProcessHeap () returned 0x4a0000 [0101.254] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x400a) returned 0x4a8f68 [0101.254] GetProcessHeap () returned 0x4a0000 [0101.254] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4a8f68) returned 1 [0101.255] _wcsicmp (_String1="net", _String2=")") returned 69 [0101.255] _wcsicmp (_String1="FOR", _String2="net") returned -8 [0101.255] _wcsicmp (_String1="FOR/?", _String2="net") returned -8 [0101.255] _wcsicmp (_String1="IF", _String2="net") returned -5 [0101.255] _wcsicmp (_String1="IF/?", _String2="net") returned -5 [0101.256] _wcsicmp (_String1="REM", _String2="net") returned 4 [0101.256] _wcsicmp (_String1="REM/?", _String2="net") returned 4 [0101.256] GetProcessHeap () returned 0x4a0000 [0101.256] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x58) returned 0x4a7c30 [0101.256] GetProcessHeap () returned 0x4a0000 [0101.256] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x10) returned 0x4a7c90 [0101.257] GetProcessHeap () returned 0x4a0000 [0101.257] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x32) returned 0x4a7ca8 [0101.259] GetConsoleTitleW (in: lpConsoleTitle=0x1bf648, nSize=0x104 | out: lpConsoleTitle="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1c [0101.263] malloc (_Size=0xffce) returned 0x782aa0 [0101.263] ??_V@YAXPAX@Z () returned 0x1bf3d4 [0101.264] malloc (_Size=0xffce) returned 0x792a78 [0101.264] ??_V@YAXPAX@Z () returned 0x1bf18c [0101.265] _wcsicmp (_String1="net", _String2="DIR") returned 10 [0101.265] _wcsicmp (_String1="net", _String2="ERASE") returned 9 [0101.265] _wcsicmp (_String1="net", _String2="DEL") returned 10 [0101.266] _wcsicmp (_String1="net", _String2="TYPE") returned -6 [0101.266] _wcsicmp (_String1="net", _String2="COPY") returned 11 [0101.266] _wcsicmp (_String1="net", _String2="CD") returned 11 [0101.266] _wcsicmp (_String1="net", _String2="CHDIR") returned 11 [0101.266] _wcsicmp (_String1="net", _String2="RENAME") returned -4 [0101.266] _wcsicmp (_String1="net", _String2="REN") returned -4 [0101.266] _wcsicmp (_String1="net", _String2="ECHO") returned 9 [0101.266] _wcsicmp (_String1="net", _String2="SET") returned -5 [0101.266] _wcsicmp (_String1="net", _String2="PAUSE") returned -2 [0101.266] _wcsicmp (_String1="net", _String2="DATE") returned 10 [0101.266] _wcsicmp (_String1="net", _String2="TIME") returned -6 [0101.267] _wcsicmp (_String1="net", _String2="PROMPT") returned -2 [0101.267] _wcsicmp (_String1="net", _String2="MD") returned 1 [0101.267] _wcsicmp (_String1="net", _String2="MKDIR") returned 1 [0101.267] _wcsicmp (_String1="net", _String2="RD") returned -4 [0101.267] _wcsicmp (_String1="net", _String2="RMDIR") returned -4 [0101.267] _wcsicmp (_String1="net", _String2="PATH") returned -2 [0101.267] _wcsicmp (_String1="net", _String2="GOTO") returned 7 [0101.267] _wcsicmp (_String1="net", _String2="SHIFT") returned -5 [0101.267] _wcsicmp (_String1="net", _String2="CLS") returned 11 [0101.267] _wcsicmp (_String1="net", _String2="CALL") returned 11 [0101.267] _wcsicmp (_String1="net", _String2="VERIFY") returned -8 [0101.267] _wcsicmp (_String1="net", _String2="VER") returned -8 [0101.268] _wcsicmp (_String1="net", _String2="VOL") returned -8 [0101.268] _wcsicmp (_String1="net", _String2="EXIT") returned 9 [0101.268] _wcsicmp (_String1="net", _String2="SETLOCAL") returned -5 [0101.268] _wcsicmp (_String1="net", _String2="ENDLOCAL") returned 9 [0101.268] _wcsicmp (_String1="net", _String2="TITLE") returned -6 [0101.268] _wcsicmp (_String1="net", _String2="START") returned -5 [0101.268] _wcsicmp (_String1="net", _String2="DPATH") returned 10 [0101.268] _wcsicmp (_String1="net", _String2="KEYS") returned 3 [0101.268] _wcsicmp (_String1="net", _String2="MOVE") returned 1 [0101.268] _wcsicmp (_String1="net", _String2="PUSHD") returned -2 [0101.268] _wcsicmp (_String1="net", _String2="POPD") returned -2 [0101.269] _wcsicmp (_String1="net", _String2="ASSOC") returned 13 [0101.269] _wcsicmp (_String1="net", _String2="FTYPE") returned 8 [0101.269] _wcsicmp (_String1="net", _String2="BREAK") returned 12 [0101.269] _wcsicmp (_String1="net", _String2="COLOR") returned 11 [0101.269] _wcsicmp (_String1="net", _String2="MKLINK") returned 1 [0101.269] _wcsicmp (_String1="net", _String2="DIR") returned 10 [0101.269] _wcsicmp (_String1="net", _String2="ERASE") returned 9 [0101.269] _wcsicmp (_String1="net", _String2="DEL") returned 10 [0101.269] _wcsicmp (_String1="net", _String2="TYPE") returned -6 [0101.269] _wcsicmp (_String1="net", _String2="COPY") returned 11 [0101.269] _wcsicmp (_String1="net", _String2="CD") returned 11 [0101.269] _wcsicmp (_String1="net", _String2="CHDIR") returned 11 [0101.270] _wcsicmp (_String1="net", _String2="RENAME") returned -4 [0101.270] _wcsicmp (_String1="net", _String2="REN") returned -4 [0101.270] _wcsicmp (_String1="net", _String2="ECHO") returned 9 [0101.270] _wcsicmp (_String1="net", _String2="SET") returned -5 [0101.270] _wcsicmp (_String1="net", _String2="PAUSE") returned -2 [0101.270] _wcsicmp (_String1="net", _String2="DATE") returned 10 [0101.270] _wcsicmp (_String1="net", _String2="TIME") returned -6 [0101.270] _wcsicmp (_String1="net", _String2="PROMPT") returned -2 [0101.270] _wcsicmp (_String1="net", _String2="MD") returned 1 [0101.270] _wcsicmp (_String1="net", _String2="MKDIR") returned 1 [0101.270] _wcsicmp (_String1="net", _String2="RD") returned -4 [0101.270] _wcsicmp (_String1="net", _String2="RMDIR") returned -4 [0101.271] _wcsicmp (_String1="net", _String2="PATH") returned -2 [0101.271] _wcsicmp (_String1="net", _String2="GOTO") returned 7 [0101.271] _wcsicmp (_String1="net", _String2="SHIFT") returned -5 [0101.271] _wcsicmp (_String1="net", _String2="CLS") returned 11 [0101.271] _wcsicmp (_String1="net", _String2="CALL") returned 11 [0101.271] _wcsicmp (_String1="net", _String2="VERIFY") returned -8 [0101.271] _wcsicmp (_String1="net", _String2="VER") returned -8 [0101.271] _wcsicmp (_String1="net", _String2="VOL") returned -8 [0101.271] _wcsicmp (_String1="net", _String2="EXIT") returned 9 [0101.271] _wcsicmp (_String1="net", _String2="SETLOCAL") returned -5 [0101.271] _wcsicmp (_String1="net", _String2="ENDLOCAL") returned 9 [0101.271] _wcsicmp (_String1="net", _String2="TITLE") returned -6 [0101.271] _wcsicmp (_String1="net", _String2="START") returned -5 [0101.272] _wcsicmp (_String1="net", _String2="DPATH") returned 10 [0101.272] _wcsicmp (_String1="net", _String2="KEYS") returned 3 [0101.272] _wcsicmp (_String1="net", _String2="MOVE") returned 1 [0101.272] _wcsicmp (_String1="net", _String2="PUSHD") returned -2 [0101.272] _wcsicmp (_String1="net", _String2="POPD") returned -2 [0101.272] _wcsicmp (_String1="net", _String2="ASSOC") returned 13 [0101.272] _wcsicmp (_String1="net", _String2="FTYPE") returned 8 [0101.272] _wcsicmp (_String1="net", _String2="BREAK") returned 12 [0101.272] _wcsicmp (_String1="net", _String2="COLOR") returned 11 [0101.272] _wcsicmp (_String1="net", _String2="MKLINK") returned 1 [0101.272] _wcsicmp (_String1="net", _String2="FOR") returned 8 [0101.272] _wcsicmp (_String1="net", _String2="IF") returned 5 [0101.273] _wcsicmp (_String1="net", _String2="REM") returned -4 [0101.273] ??_V@YAXPAX@Z () returned 0x1 [0101.273] GetProcessHeap () returned 0x4a0000 [0101.273] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0xffd6) returned 0x4a8f68 [0101.275] GetProcessHeap () returned 0x4a0000 [0101.275] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x3a) returned 0x4a7ce8 [0101.275] _wcsnicmp (_String1="net", _String2="cmd ", _MaxCount=0x4) returned 11 [0101.275] malloc (_Size=0xffce) returned 0x792a78 [0101.275] ??_V@YAXPAX@Z () returned 0x1bef0c [0101.276] GetProcessHeap () returned 0x4a0000 [0101.276] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x1ffa4) returned 0x4b8f48 [0101.279] SetErrorMode (uMode=0x0) returned 0x0 [0101.279] SetErrorMode (uMode=0x1) returned 0x0 [0101.279] GetFullPathNameW (in: lpFileName=".", nBufferLength=0xffce, lpBuffer=0x4b8f50, lpFilePart=0x1bef2c | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x1bef2c*="Desktop") returned 0x17 [0101.279] SetErrorMode (uMode=0x0) returned 0x1 [0101.279] GetProcessHeap () returned 0x4a0000 [0101.279] RtlReAllocateHeap (Heap=0x4a0000, Flags=0x0, Ptr=0x4b8f48, Size=0x40) returned 0x4b8f48 [0101.279] GetProcessHeap () returned 0x4a0000 [0101.279] RtlSizeHeap (HeapHandle=0x4a0000, Flags=0x0, MemoryPointer=0x4b8f48) returned 0x40 [0101.279] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x11ff840, nSize=0x2000 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath;C:\\WINDOWS\\system32;C:\\WINDOWS;C:\\WINDOWS\\System32\\Wbem;C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\;C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps") returned 0xbb [0101.279] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1 [0101.280] GetProcessHeap () returned 0x4a0000 [0101.280] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x1b4) returned 0x4a7d30 [0101.280] GetProcessHeap () returned 0x4a0000 [0101.280] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x360) returned 0x4a7ef0 [0101.310] GetProcessHeap () returned 0x4a0000 [0101.310] RtlReAllocateHeap (Heap=0x4a0000, Flags=0x0, Ptr=0x4a7ef0, Size=0x1b6) returned 0x4a7ef0 [0101.310] GetProcessHeap () returned 0x4a0000 [0101.310] RtlSizeHeap (HeapHandle=0x4a0000, Flags=0x0, MemoryPointer=0x4a7ef0) returned 0x1b6 [0101.310] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x11ff840, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0101.310] GetProcessHeap () returned 0x4a0000 [0101.310] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0xe0) returned 0x4a80b0 [0101.310] GetProcessHeap () returned 0x4a0000 [0101.310] RtlReAllocateHeap (Heap=0x4a0000, Flags=0x0, Ptr=0x4a80b0, Size=0x76) returned 0x4a80b0 [0101.311] GetProcessHeap () returned 0x4a0000 [0101.312] RtlSizeHeap (HeapHandle=0x4a0000, Flags=0x0, MemoryPointer=0x4a80b0) returned 0x76 [0101.313] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0101.313] FindFirstFileExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\net.*", fInfoLevelId=0x1, lpFindFileData=0x1becb8, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x1becb8) returned 0xffffffff [0101.314] GetLastError () returned 0x2 [0101.314] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0101.314] FindFirstFileExW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\net.*", fInfoLevelId=0x1, lpFindFileData=0x1becb8, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x1becb8) returned 0xffffffff [0101.315] GetLastError () returned 0x2 [0101.315] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0101.315] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\system32\\net.*", fInfoLevelId=0x1, lpFindFileData=0x1becb8, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x1becb8) returned 0x4a8130 [0101.315] GetProcessHeap () returned 0x4a0000 [0101.315] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x0, Size=0x14) returned 0x4a8170 [0101.315] FindClose (in: hFindFile=0x4a8130 | out: hFindFile=0x4a8130) returned 1 [0101.316] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\system32\\net.COM", fInfoLevelId=0x1, lpFindFileData=0x1becb8, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x1becb8) returned 0xffffffff [0101.316] GetLastError () returned 0x2 [0101.316] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\system32\\net.EXE", fInfoLevelId=0x1, lpFindFileData=0x1becb8, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x1becb8) returned 0x4a8130 [0101.316] GetProcessHeap () returned 0x4a0000 [0101.316] RtlReAllocateHeap (Heap=0x4a0000, Flags=0x0, Ptr=0x4a8170, Size=0x4) returned 0x4a8170 [0101.316] FindClose (in: hFindFile=0x4a8130 | out: hFindFile=0x4a8130) returned 1 [0101.317] _wcsicmp (_String1=".EXE", _String2=".BAT") returned 3 [0101.317] _wcsicmp (_String1=".EXE", _String2=".CMD") returned 2 [0101.317] ??_V@YAXPAX@Z () returned 0x1 [0101.317] GetConsoleTitleW (in: lpConsoleTitle=0x1bf1bc, nSize=0x104 | out: lpConsoleTitle="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1c [0101.319] InitializeProcThreadAttributeList (in: lpAttributeList=0x1bf0e8, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x1bf0d4 | out: lpAttributeList=0x1bf0e8, lpSize=0x1bf0d4) returned 1 [0101.319] UpdateProcThreadAttribute (in: lpAttributeList=0x1bf0e8, dwFlags=0x0, Attribute=0x60001, lpValue=0x1bf0d0, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x1bf0e8, lpPreviousValue=0x0) returned 1 [0101.319] GetStartupInfoW (in: lpStartupInfo=0x1bf120 | out: lpStartupInfo=0x1bf120*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\WINDOWS\\system32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x144, lpReserved2=0x4a1b64, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) [0101.319] GetProcessHeap () returned 0x4a0000 [0101.320] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x4a8130 [0101.320] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38 [0101.320] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2 [0101.320] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2 [0101.320] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0101.320] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0101.320] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0101.320] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3 [0101.320] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3 [0101.320] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5 [0101.320] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5 [0101.320] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9 [0101.321] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9 [0101.321] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11 [0101.321] _wcsnicmp (_String1="COPYCMD", _String2="OneDriv", _MaxCount=0x7) returned -12 [0101.321] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12 [0101.321] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13 [0101.321] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13 [0101.321] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0101.321] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0101.321] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0101.321] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0101.321] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0101.321] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0101.322] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0101.322] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0101.322] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0101.322] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13 [0101.322] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13 [0101.322] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13 [0101.322] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16 [0101.322] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16 [0101.322] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17 [0101.322] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17 [0101.323] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18 [0101.323] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18 [0101.323] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18 [0101.323] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18 [0101.323] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20 [0101.323] GetProcessHeap () returned 0x4a0000 [0101.323] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4a8130) returned 1 [0101.323] GetProcessHeap () returned 0x4a0000 [0101.323] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0xa) returned 0x4a8130 [0101.324] lstrcmpW (lpString1="\\net.exe", lpString2="\\XCOPY.EXE") returned -1 [0101.327] _get_osfhandle (_FileHandle=1) returned 0x90 [0101.327] SetConsoleMode (hConsoleHandle=0x90, dwMode=0x3) returned 1 [0101.331] _get_osfhandle (_FileHandle=0) returned 0x8c [0101.331] SetConsoleMode (hConsoleHandle=0x8c, dwMode=0x1f7) returned 1 [0101.341] CreateProcessW (in: lpApplicationName="C:\\WINDOWS\\system32\\net.exe", lpCommandLine="net stop SQLSERVERAGENT", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\FD1HVy\\Desktop", lpStartupInfo=0x1bf070*(cb=0x48, lpReserved=0x0, lpDesktop="WinSta0\\Default", lpTitle="net stop SQLSERVERAGENT", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x1bf0bc | out: lpCommandLine="net stop SQLSERVERAGENT", lpProcessInformation=0x1bf0bc*(hProcess=0xe0, hThread=0xdc, dwProcessId=0xf70, dwThreadId=0x11f8)) returned 1 [0101.413] CloseHandle (hObject=0xdc) returned 1 [0101.413] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1 [0101.413] GetProcessHeap () returned 0x4a0000 [0101.413] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4a6e60) returned 1 [0101.413] GetEnvironmentStringsW () returned 0x4a6e60* [0101.413] GetProcessHeap () returned 0x4a0000 [0101.413] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0xb1a) returned 0x4a4dd8 [0101.413] FreeEnvironmentStringsA (penv="=") returned 1 [0101.413] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0xffffffff) returned 0x0 [0102.423] GetExitCodeProcess (in: hProcess=0xe0, lpExitCode=0x1bf054 | out: lpExitCode=0x1bf054*=0x2) returned 1 [0102.423] CloseHandle (hObject=0xe0) returned 1 [0102.424] _vsnwprintf (in: _Buffer=0x1bf13c, _BufferCount=0x13, _Format="%08X", _ArgList=0x1bf05c | out: _Buffer="00000002") returned 8 [0102.425] SetEnvironmentVariableW (lpName="=ExitCode", lpValue="00000002") returned 1 [0102.426] GetProcessHeap () returned 0x4a0000 [0102.426] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4a4dd8) returned 1 [0102.427] GetEnvironmentStringsW () returned 0x4a83d0* [0102.427] GetProcessHeap () returned 0x4a0000 [0102.427] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0xb40) returned 0x4a4dd8 [0102.428] FreeEnvironmentStringsA (penv="=") returned 1 [0102.428] SetEnvironmentVariableW (lpName="=ExitCodeAscii", lpValue=0x0) returned 1 [0102.428] GetProcessHeap () returned 0x4a0000 [0102.428] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4a4dd8) returned 1 [0102.428] GetEnvironmentStringsW () returned 0x4a83d0* [0102.428] GetProcessHeap () returned 0x4a0000 [0102.428] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0xb40) returned 0x4a4dd8 [0102.429] FreeEnvironmentStringsA (penv="=") returned 1 [0102.429] GetProcessHeap () returned 0x4a0000 [0102.429] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4a8130) returned 1 [0102.429] DeleteProcThreadAttributeList (in: lpAttributeList=0x1bf0e8 | out: lpAttributeList=0x1bf0e8) [0102.429] ??_V@YAXPAX@Z () returned 0x1 [0102.429] _get_osfhandle (_FileHandle=1) returned 0x90 [0102.429] SetConsoleMode (hConsoleHandle=0x90, dwMode=0x3) returned 1 [0102.433] _get_osfhandle (_FileHandle=1) returned 0x90 [0102.433] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x1203890 | out: lpMode=0x1203890) returned 1 [0102.446] _get_osfhandle (_FileHandle=1) returned 0x90 [0102.446] SetConsoleMode (hConsoleHandle=0x90, dwMode=0x7) returned 1 [0102.448] _get_osfhandle (_FileHandle=0) returned 0x8c [0102.448] GetConsoleMode (in: hConsoleHandle=0x8c, lpMode=0x1203894 | out: lpMode=0x1203894) returned 1 [0102.461] _get_osfhandle (_FileHandle=0) returned 0x8c [0102.462] SetConsoleMode (hConsoleHandle=0x8c, dwMode=0x1e7) returned 1 [0102.473] SetConsoleInputExeNameW () returned 0x1 [0102.473] GetConsoleOutputCP () returned 0x1b5 [0102.493] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x1203850 | out: lpCPInfo=0x1203850) returned 1 [0102.493] SetThreadUILanguage (LangId=0x0) returned 0x330409 [0102.693] exit (_Code=2) [0102.693] ??_V@YAXPAX@Z () returned 0x1 Thread: id = 90 os_tid = 0x12c8 Process: id = "30" image_name = "conhost.exe" filename = "c:\\windows\\system32\\conhost.exe" page_root = "0x1041c000" os_pid = "0x60" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "29" os_parent_pid = "0xee8" cmd_line = "\\??\\C:\\WINDOWS\\system32\\conhost.exe 0xffffffff -ForceV1" cur_dir = "C:\\WINDOWS" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000faa5" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 85 os_tid = 0x58 Thread: id = 86 os_tid = 0x131c Thread: id = 87 os_tid = 0x168 Thread: id = 88 os_tid = 0x1304 Thread: id = 89 os_tid = 0xea0 Process: id = "31" image_name = "net.exe" filename = "c:\\windows\\syswow64\\net.exe" page_root = "0x4de33000" os_pid = "0xf70" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "29" os_parent_pid = "0xee8" cmd_line = "net stop SQLSERVERAGENT" cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000faa5" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 91 os_tid = 0x11f8 Thread: id = 92 os_tid = 0x12b4 Process: id = "32" image_name = "net1.exe" filename = "c:\\windows\\syswow64\\net1.exe" page_root = "0x542df000" os_pid = "0xea8" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "31" os_parent_pid = "0xf70" cmd_line = "C:\\WINDOWS\\system32\\net1 stop SQLSERVERAGENT" cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000faa5" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 93 os_tid = 0xe00 [0102.182] GetModuleHandleA (lpModuleName=0x0) returned 0x230000 [0102.182] __set_app_type (_Type=0x1) [0102.182] __p__fmode () returned 0x76953c14 [0102.182] __p__commode () returned 0x769549ec [0102.183] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x236f20) returned 0x0 [0102.183] __getmainargs (in: _Argc=0x24f608, _Argv=0x24f60c, _Env=0x24f610, _DoWildCard=0, _StartInfo=0x24f61c | out: _Argc=0x24f608, _Argv=0x24f60c, _Env=0x24f610) returned 0 [0102.184] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0102.184] GetConsoleOutputCP () returned 0x1b5 [0102.187] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x256fa0 | out: lpCPInfo=0x256fa0) returned 1 [0102.188] SetThreadUILanguage (LangId=0x0) returned 0x2810409 [0102.195] sprintf_s (in: _DstBuf=0x273f79c, _DstSize=0xc, _Format=".%u" | out: _DstBuf=".437") returned 4 [0102.195] setlocale (category=0, locale=".437") returned="English_United States.437" [0102.198] GetStdHandle (nStdHandle=0xfffffff5) returned 0x90 [0102.198] GetStdHandle (nStdHandle=0xfffffff4) returned 0x94 [0102.198] GetCommandLineW () returned="C:\\WINDOWS\\system32\\net1 stop SQLSERVERAGENT" [0102.198] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x273f544, nSize=0x104 | out: lpFilename="C:\\WINDOWS\\SysWOW64\\net1.exe" (normalized: "c:\\windows\\syswow64\\net1.exe")) returned 0x1c [0102.198] RtlAllocateHeap (HeapHandle=0x2a40000, Flags=0x0, Size=0x66) returned 0x2a442d8 [0102.199] NetApiBufferAllocate (in: ByteCount=0x10, Buffer=0x273f540 | out: Buffer=0x273f540*=0x2a48168) returned 0x0 [0102.199] NetApiBufferAllocate (in: ByteCount=0x10, Buffer=0x273f53c | out: Buffer=0x273f53c*=0x2a481f8) returned 0x0 [0102.199] __iob_func () returned 0x76952608 [0102.199] _fileno (_File=0x76952608) returned 0 [0102.199] _setmode (_FileHandle=0, _Mode=16384) returned 16384 [0102.199] _wcsicmp (_String1="accounts", _String2="stop") returned -18 [0102.199] _wcsicmp (_String1="computer", _String2="stop") returned -16 [0102.199] _wcsicmp (_String1="config", _String2="stop") returned -16 [0102.200] _wcsicmp (_String1="continue", _String2="stop") returned -16 [0102.200] _wcsicmp (_String1="cont", _String2="stop") returned -16 [0102.200] _wcsicmp (_String1="file", _String2="stop") returned -13 [0102.200] _wcsicmp (_String1="files", _String2="stop") returned -13 [0102.200] _wcsicmp (_String1="group", _String2="stop") returned -12 [0102.200] _wcsicmp (_String1="groups", _String2="stop") returned -12 [0102.200] _wcsicmp (_String1="help", _String2="stop") returned -11 [0102.200] _wcsicmp (_String1="helpmsg", _String2="stop") returned -11 [0102.200] _wcsicmp (_String1="localgroup", _String2="stop") returned -7 [0102.200] _wcsicmp (_String1="pause", _String2="stop") returned -3 [0102.200] _wcsicmp (_String1="session", _String2="stop") returned -15 [0102.200] _wcsicmp (_String1="sessions", _String2="stop") returned -15 [0102.201] _wcsicmp (_String1=0x231ffc, _String2="stop") returned -15 [0102.201] _wcsicmp (_String1="share", _String2="stop") returned -12 [0102.201] _wcsicmp (_String1="start", _String2="stop") returned -14 [0102.201] _wcsicmp (_String1="stats", _String2="stop") returned -14 [0102.201] _wcsicmp (_String1="statistics", _String2="stop") returned -14 [0102.201] _wcsicmp (_String1="stop", _String2="stop") returned 0 [0102.201] _wcsicmp (_String1="accounts", _String2="SQLSERVERAGENT") returned -18 [0102.201] _wcsicmp (_String1="computer", _String2="SQLSERVERAGENT") returned -16 [0102.201] _wcsicmp (_String1="config", _String2="SQLSERVERAGENT") returned -16 [0102.201] _wcsicmp (_String1="continue", _String2="SQLSERVERAGENT") returned -16 [0102.201] _wcsicmp (_String1="cont", _String2="SQLSERVERAGENT") returned -16 [0102.202] _wcsicmp (_String1="file", _String2="SQLSERVERAGENT") returned -13 [0102.202] _wcsicmp (_String1="files", _String2="SQLSERVERAGENT") returned -13 [0102.202] _wcsicmp (_String1="group", _String2="SQLSERVERAGENT") returned -12 [0102.202] _wcsicmp (_String1="groups", _String2="SQLSERVERAGENT") returned -12 [0102.202] _wcsicmp (_String1="help", _String2="SQLSERVERAGENT") returned -11 [0102.202] _wcsicmp (_String1="helpmsg", _String2="SQLSERVERAGENT") returned -11 [0102.202] _wcsicmp (_String1="localgroup", _String2="SQLSERVERAGENT") returned -7 [0102.202] _wcsicmp (_String1="pause", _String2="SQLSERVERAGENT") returned -3 [0102.202] _wcsicmp (_String1="session", _String2="SQLSERVERAGENT") returned -12 [0102.202] _wcsicmp (_String1="sessions", _String2="SQLSERVERAGENT") returned -12 [0102.202] _wcsicmp (_String1="sess", _String2="SQLSERVERAGENT") returned -12 [0102.202] _wcsicmp (_String1="share", _String2="SQLSERVERAGENT") returned -9 [0102.203] _wcsicmp (_String1="start", _String2="SQLSERVERAGENT") returned 3 [0102.203] _wcsicmp (_String1="stats", _String2="SQLSERVERAGENT") returned 3 [0102.203] _wcsicmp (_String1="statistics", _String2="SQLSERVERAGENT") returned 3 [0102.203] _wcsicmp (_String1="stop", _String2="SQLSERVERAGENT") returned 3 [0102.203] _wcsicmp (_String1="time", _String2="SQLSERVERAGENT") returned 1 [0102.203] _wcsicmp (_String1="user", _String2="SQLSERVERAGENT") returned 2 [0102.203] _wcsicmp (_String1="users", _String2="SQLSERVERAGENT") returned 2 [0102.203] _wcsicmp (_String1="msg", _String2="SQLSERVERAGENT") returned -6 [0102.203] _wcsicmp (_String1="messenger", _String2="SQLSERVERAGENT") returned -6 [0102.203] _wcsicmp (_String1="receiver", _String2="SQLSERVERAGENT") returned -1 [0102.203] _wcsicmp (_String1="rcv", _String2="SQLSERVERAGENT") returned -1 [0102.203] _wcsicmp (_String1="netpopup", _String2="SQLSERVERAGENT") returned -5 [0102.204] _wcsicmp (_String1="redirector", _String2="SQLSERVERAGENT") returned -1 [0102.204] _wcsicmp (_String1="redir", _String2="SQLSERVERAGENT") returned -1 [0102.204] _wcsicmp (_String1="rdr", _String2="SQLSERVERAGENT") returned -1 [0102.204] _wcsicmp (_String1="workstation", _String2="SQLSERVERAGENT") returned 4 [0102.204] _wcsicmp (_String1="work", _String2="SQLSERVERAGENT") returned 4 [0102.204] _wcsicmp (_String1="wksta", _String2="SQLSERVERAGENT") returned 4 [0102.204] _wcsicmp (_String1="prdr", _String2="SQLSERVERAGENT") returned -3 [0102.204] _wcsicmp (_String1="devrdr", _String2="SQLSERVERAGENT") returned -15 [0102.204] _wcsicmp (_String1="lanmanworkstation", _String2="SQLSERVERAGENT") returned -7 [0102.204] _wcsicmp (_String1="server", _String2="SQLSERVERAGENT") returned -12 [0102.204] _wcsicmp (_String1="svr", _String2="SQLSERVERAGENT") returned 5 [0102.204] _wcsicmp (_String1="srv", _String2="SQLSERVERAGENT") returned 1 [0102.205] _wcsicmp (_String1="lanmanserver", _String2="SQLSERVERAGENT") returned -7 [0102.205] _wcsicmp (_String1="alerter", _String2="SQLSERVERAGENT") returned -18 [0102.205] _wcsicmp (_String1="netlogon", _String2="SQLSERVERAGENT") returned -5 [0102.206] _wcsupr (in: _String="SQLSERVERAGENT" | out: _String="SQLSERVERAGENT") returned="SQLSERVERAGENT" [0102.206] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x80000000) returned 0x2a50818 [0102.213] GetServiceKeyNameW (in: hSCManager=0x2a50818, lpDisplayName="SQLSERVERAGENT", lpServiceName=0x258c28, lpcchBuffer=0x273f4b4 | out: lpServiceName="", lpcchBuffer=0x273f4b4) returned 0 [0102.216] _wcsicmp (_String1="msg", _String2="SQLSERVERAGENT") returned -6 [0102.216] _wcsicmp (_String1="messenger", _String2="SQLSERVERAGENT") returned -6 [0102.216] _wcsicmp (_String1="receiver", _String2="SQLSERVERAGENT") returned -1 [0102.216] _wcsicmp (_String1="rcv", _String2="SQLSERVERAGENT") returned -1 [0102.216] _wcsicmp (_String1="redirector", _String2="SQLSERVERAGENT") returned -1 [0102.216] _wcsicmp (_String1="redir", _String2="SQLSERVERAGENT") returned -1 [0102.216] _wcsicmp (_String1="rdr", _String2="SQLSERVERAGENT") returned -1 [0102.216] _wcsicmp (_String1="workstation", _String2="SQLSERVERAGENT") returned 4 [0102.216] _wcsicmp (_String1="work", _String2="SQLSERVERAGENT") returned 4 [0102.217] _wcsicmp (_String1="wksta", _String2="SQLSERVERAGENT") returned 4 [0102.217] _wcsicmp (_String1="prdr", _String2="SQLSERVERAGENT") returned -3 [0102.217] _wcsicmp (_String1="devrdr", _String2="SQLSERVERAGENT") returned -15 [0102.217] _wcsicmp (_String1="lanmanworkstation", _String2="SQLSERVERAGENT") returned -7 [0102.217] _wcsicmp (_String1="server", _String2="SQLSERVERAGENT") returned -12 [0102.217] _wcsicmp (_String1="svr", _String2="SQLSERVERAGENT") returned 5 [0102.217] _wcsicmp (_String1="srv", _String2="SQLSERVERAGENT") returned 1 [0102.217] _wcsicmp (_String1="lanmanserver", _String2="SQLSERVERAGENT") returned -7 [0102.217] _wcsicmp (_String1="alerter", _String2="SQLSERVERAGENT") returned -18 [0102.217] _wcsicmp (_String1="netlogon", _String2="SQLSERVERAGENT") returned -5 [0102.217] _wcsicmp (_String1="SQLSERVERAGENT", _String2="WORKSTATION") returned -4 [0102.217] _wcsicmp (_String1="SQLSERVERAGENT", _String2="LanmanWorkstation") returned 7 [0102.218] _wcsicmp (_String1="SQLSERVERAGENT", _String2="SERVER") returned 12 [0102.218] _wcsicmp (_String1="SQLSERVERAGENT", _String2="LanmanServer") returned 7 [0102.218] _wcsicmp (_String1="SQLSERVERAGENT", _String2="BROWSER") returned 17 [0102.218] _wcsicmp (_String1="SQLSERVERAGENT", _String2="BROWSER") returned 17 [0102.218] _wcsicmp (_String1="SQLSERVERAGENT", _String2="MESSENGER") returned 6 [0102.218] _wcsicmp (_String1="SQLSERVERAGENT", _String2="MESSENGER") returned 6 [0102.218] _wcsicmp (_String1="SQLSERVERAGENT", _String2="NETRUN") returned 5 [0102.218] _wcsicmp (_String1="SQLSERVERAGENT", _String2="NETRUN") returned 5 [0102.218] _wcsicmp (_String1="SQLSERVERAGENT", _String2="SPOOLER") returned 1 [0102.218] _wcsicmp (_String1="SQLSERVERAGENT", _String2="SPOOLER") returned 1 [0102.218] _wcsicmp (_String1="SQLSERVERAGENT", _String2="ALERTER") returned 18 [0102.218] _wcsicmp (_String1="SQLSERVERAGENT", _String2="ALERTER") returned 18 [0102.219] _wcsicmp (_String1="SQLSERVERAGENT", _String2="NETLOGON") returned 5 [0102.219] _wcsicmp (_String1="SQLSERVERAGENT", _String2="NETLOGON") returned 5 [0102.219] _wcsicmp (_String1="SQLSERVERAGENT", _String2="NETPOPUP") returned 5 [0102.219] _wcsicmp (_String1="SQLSERVERAGENT", _String2="NETPOPUP") returned 5 [0102.219] _wcsicmp (_String1="SQLSERVERAGENT", _String2="SQLSERVER") returned 97 [0102.219] _wcsicmp (_String1="SQLSERVERAGENT", _String2="SQLSERVER") returned 97 [0102.219] _wcsicmp (_String1="SQLSERVERAGENT", _String2="REPLICATOR") returned 1 [0102.219] _wcsicmp (_String1="SQLSERVERAGENT", _String2="REPLICATOR") returned 1 [0102.219] _wcsicmp (_String1="SQLSERVERAGENT", _String2="REMOTEBOOT") returned 1 [0102.219] _wcsicmp (_String1="SQLSERVERAGENT", _String2="REMOTEBOOT") returned 1 [0102.219] _wcsicmp (_String1="SQLSERVERAGENT", _String2="TIMESOURCE") returned -1 [0102.219] _wcsicmp (_String1="SQLSERVERAGENT", _String2="TIMESOURCE") returned -1 [0102.219] _wcsicmp (_String1="SQLSERVERAGENT", _String2="AFP") returned 18 [0102.220] _wcsicmp (_String1="SQLSERVERAGENT", _String2="AFP") returned 18 [0102.220] _wcsicmp (_String1="SQLSERVERAGENT", _String2="UPS") returned -2 [0102.220] _wcsicmp (_String1="SQLSERVERAGENT", _String2="UPS") returned -2 [0102.220] _wcsicmp (_String1="SQLSERVERAGENT", _String2="XACTSRV") returned -5 [0102.220] _wcsicmp (_String1="SQLSERVERAGENT", _String2="XACTSRV") returned -5 [0102.220] _wcsicmp (_String1="SQLSERVERAGENT", _String2="TCPIP") returned -1 [0102.220] _wcsicmp (_String1="SQLSERVERAGENT", _String2="TCPIP") returned -1 [0102.220] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x1) returned 0x2a50750 [0102.221] OpenServiceW (hSCManager=0x2a50750, lpServiceName="SQLSERVERAGENT", dwDesiredAccess=0x84) returned 0x0 [0102.222] GetLastError () returned 0x424 [0102.222] CloseServiceHandle (hSCObject=0x2a50750) returned 1 [0102.222] wcscpy_s (in: _Destination=0x257610, _SizeInWords=0x104, _Source="NETMSG" | out: _Destination="NETMSG") returned 0x0 [0102.222] LoadLibraryExW (lpLibFileName="NETMSG", hFile=0x0, dwFlags=0x20) returned 0x27c0002 [0102.224] FormatMessageW (in: dwFlags=0x2a00, lpSource=0x27c0002, dwMessageId=0x889, dwLanguageId=0x0, lpBuffer=0x257c20, nSize=0x800, Arguments=0x2573d0 | out: lpBuffer="The service name is invalid.\r\n") returned 0x1e [0102.225] GetFileType (hFile=0x94) returned 0x2 [0102.225] GetConsoleMode (in: hConsoleHandle=0x94, lpMode=0x273f344 | out: lpMode=0x273f344) returned 1 [0102.240] WriteConsoleW (in: hConsoleOutput=0x94, lpBuffer=0x257c20*, nNumberOfCharsToWrite=0x1e, lpNumberOfCharsWritten=0x273f350, lpReserved=0x0 | out: lpBuffer=0x257c20*, lpNumberOfCharsWritten=0x273f350*=0x1e) returned 1 [0102.244] GetFileType (hFile=0x94) returned 0x2 [0102.244] GetConsoleMode (in: hConsoleHandle=0x94, lpMode=0x273f344 | out: lpMode=0x273f344) returned 1 [0102.254] WriteConsoleW (in: hConsoleOutput=0x94, lpBuffer=0x2312e4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x273f350, lpReserved=0x0 | out: lpBuffer=0x2312e4*, lpNumberOfCharsWritten=0x273f350*=0x2) returned 1 [0102.307] _ultow (in: _Dest=0x889, _Radix=41153432 | out: _Dest=0x889) returned="2185" [0102.307] FormatMessageW (in: dwFlags=0x2800, lpSource=0x27c0002, dwMessageId=0xdba, dwLanguageId=0x0, lpBuffer=0x257c20, nSize=0x800, Arguments=0x2573d0 | out: lpBuffer="More help is available by typing NET HELPMSG 2185.\r\n") returned 0x34 [0102.308] GetFileType (hFile=0x94) returned 0x2 [0102.308] GetConsoleMode (in: hConsoleHandle=0x94, lpMode=0x273f368 | out: lpMode=0x273f368) returned 1 [0102.313] WriteConsoleW (in: hConsoleOutput=0x94, lpBuffer=0x257c20*, nNumberOfCharsToWrite=0x34, lpNumberOfCharsWritten=0x273f374, lpReserved=0x0 | out: lpBuffer=0x257c20*, lpNumberOfCharsWritten=0x273f374*=0x34) returned 1 [0102.316] GetFileType (hFile=0x94) returned 0x2 [0102.316] GetConsoleMode (in: hConsoleHandle=0x94, lpMode=0x273f368 | out: lpMode=0x273f368) returned 1 [0102.321] WriteConsoleW (in: hConsoleOutput=0x94, lpBuffer=0x2312e4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x273f374, lpReserved=0x0 | out: lpBuffer=0x2312e4*, lpNumberOfCharsWritten=0x273f374*=0x2) returned 1 [0102.328] NetApiBufferFree (Buffer=0x2a48168) returned 0x0 [0102.328] NetApiBufferFree (Buffer=0x2a481f8) returned 0x0 [0102.328] GetCommandLineW () returned="C:\\WINDOWS\\system32\\net1 stop SQLSERVERAGENT" [0102.328] exit (_Code=2) Thread: id = 94 os_tid = 0x158 Process: id = "33" image_name = "cmd.exe" filename = "c:\\windows\\syswow64\\cmd.exe" page_root = "0x7612f000" os_pid = "0x1294" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x13d4" cmd_line = "C:\\WINDOWS\\system32\\cmd.exe /c net stop MSSQLSERVER" cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000faa5" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 95 os_tid = 0x1298 [0104.302] GetModuleHandleA (lpModuleName=0x0) returned 0x11d0000 [0104.307] __set_app_type (_Type=0x1) [0104.307] __p__fmode () returned 0x76953c14 [0104.307] __p__commode () returned 0x769549ec [0104.307] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x11e6fd0) returned 0x0 [0104.308] __getmainargs (in: _Argc=0x11fd1a4, _Argv=0x11fd1a8, _Env=0x11fd1ac, _DoWildCard=0, _StartInfo=0x11fd1b8 | out: _Argc=0x11fd1a4, _Argv=0x11fd1a8, _Env=0x11fd1ac) returned 0 [0104.308] _onexit (_Func=0x11e8030) returned 0x11e8030 [0104.309] _onexit (_Func=0x11e8040) returned 0x11e8040 [0104.309] _onexit (_Func=0x11e8050) returned 0x11e8050 [0104.310] _onexit (_Func=0x11e8060) returned 0x11e8060 [0104.310] _onexit (_Func=0x11e8070) returned 0x11e8070 [0104.311] _onexit (_Func=0x11e8080) returned 0x11e8080 [0104.312] GetCurrentThreadId () returned 0x1298 [0104.312] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0x1298) returned 0xbc [0104.312] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x74030000 [0104.313] GetProcAddress (hModule=0x74030000, lpProcName="SetThreadUILanguage") returned 0x74044f70 [0104.313] SetThreadUILanguage (LangId=0x0) returned 0xdb0409 [0104.386] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0104.386] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0xf5fcac | out: phkResult=0xf5fcac*=0x0) returned 0x2 [0104.387] VirtualQuery (in: lpAddress=0xf5fcb7, lpBuffer=0xf5fc64, dwLength=0x1c | out: lpBuffer=0xf5fc64*(BaseAddress=0xf5f000, AllocationBase=0xe60000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0104.387] VirtualQuery (in: lpAddress=0xe60000, lpBuffer=0xf5fc64, dwLength=0x1c | out: lpBuffer=0xf5fc64*(BaseAddress=0xe60000, AllocationBase=0xe60000, AllocationProtect=0x4, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000)) returned 0x1c [0104.387] VirtualQuery (in: lpAddress=0xe61000, lpBuffer=0xf5fc64, dwLength=0x1c | out: lpBuffer=0xf5fc64*(BaseAddress=0xe61000, AllocationBase=0xe60000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x104, Type=0x20000)) returned 0x1c [0104.387] VirtualQuery (in: lpAddress=0xe63000, lpBuffer=0xf5fc64, dwLength=0x1c | out: lpBuffer=0xf5fc64*(BaseAddress=0xe63000, AllocationBase=0xe60000, AllocationProtect=0x4, RegionSize=0xfd000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0104.387] VirtualQuery (in: lpAddress=0xf60000, lpBuffer=0xf5fc64, dwLength=0x1c | out: lpBuffer=0xf5fc64*(BaseAddress=0xf60000, AllocationBase=0xf60000, AllocationProtect=0x2, RegionSize=0x4000, State=0x1000, Protect=0x2, Type=0x40000)) returned 0x1c [0104.387] GetConsoleOutputCP () returned 0x1b5 [0104.391] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x1203850 | out: lpCPInfo=0x1203850) returned 1 [0104.392] SetConsoleCtrlHandler (HandlerRoutine=0x11f7260, Add=1) returned 1 [0104.392] _get_osfhandle (_FileHandle=1) returned 0x90 [0104.392] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x120388c | out: lpMode=0x120388c) returned 1 [0104.407] _get_osfhandle (_FileHandle=0) returned 0x8c [0104.407] GetConsoleMode (in: hConsoleHandle=0x8c, lpMode=0x1203888 | out: lpMode=0x1203888) returned 1 [0104.411] _get_osfhandle (_FileHandle=1) returned 0x90 [0104.411] SetConsoleMode (hConsoleHandle=0x90, dwMode=0x0) returned 1 [0104.431] _get_osfhandle (_FileHandle=1) returned 0x90 [0104.431] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x1203890 | out: lpMode=0x1203890) returned 1 [0104.433] _get_osfhandle (_FileHandle=1) returned 0x90 [0104.433] SetConsoleMode (hConsoleHandle=0x90, dwMode=0x7) returned 1 [0104.443] _get_osfhandle (_FileHandle=0) returned 0x8c [0104.443] GetConsoleMode (in: hConsoleHandle=0x8c, lpMode=0x1203894 | out: lpMode=0x1203894) returned 1 [0104.448] _get_osfhandle (_FileHandle=0) returned 0x8c [0104.448] SetConsoleMode (hConsoleHandle=0x8c, dwMode=0x1e7) returned 1 [0104.463] GetEnvironmentStringsW () returned 0xa4dd0* [0104.463] GetProcessHeap () returned 0xa0000 [0104.463] RtlAllocateHeap (HeapHandle=0xa0000, Flags=0x8, Size=0xaca) returned 0xa58a8 [0104.464] FreeEnvironmentStringsA (penv="A") returned 1 [0104.464] GetProcessHeap () returned 0xa0000 [0104.464] RtlAllocateHeap (HeapHandle=0xa0000, Flags=0x8, Size=0x4) returned 0xa48b0 [0104.464] GetEnvironmentStringsW () returned 0xa4dd0* [0104.464] GetProcessHeap () returned 0xa0000 [0104.464] RtlAllocateHeap (HeapHandle=0xa0000, Flags=0x8, Size=0xaca) returned 0xa6380 [0104.464] FreeEnvironmentStringsA (penv="A") returned 1 [0104.464] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0xf5ec08 | out: phkResult=0xf5ec08*=0xcc) returned 0x0 [0104.465] RegQueryValueExW (in: hKey=0xcc, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0xf5ec10, lpData=0xf5ec14, lpcbData=0xf5ec0c*=0x1000 | out: lpType=0xf5ec10*=0x0, lpData=0xf5ec14*=0x98, lpcbData=0xf5ec0c*=0x1000) returned 0x2 [0104.465] RegQueryValueExW (in: hKey=0xcc, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0xf5ec10, lpData=0xf5ec14, lpcbData=0xf5ec0c*=0x1000 | out: lpType=0xf5ec10*=0x4, lpData=0xf5ec14*=0x1, lpcbData=0xf5ec0c*=0x4) returned 0x0 [0104.465] RegQueryValueExW (in: hKey=0xcc, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0xf5ec10, lpData=0xf5ec14, lpcbData=0xf5ec0c*=0x1000 | out: lpType=0xf5ec10*=0x0, lpData=0xf5ec14*=0x1, lpcbData=0xf5ec0c*=0x1000) returned 0x2 [0104.465] RegQueryValueExW (in: hKey=0xcc, lpValueName="DefaultColor", lpReserved=0x0, lpType=0xf5ec10, lpData=0xf5ec14, lpcbData=0xf5ec0c*=0x1000 | out: lpType=0xf5ec10*=0x4, lpData=0xf5ec14*=0x0, lpcbData=0xf5ec0c*=0x4) returned 0x0 [0104.465] RegQueryValueExW (in: hKey=0xcc, lpValueName="CompletionChar", lpReserved=0x0, lpType=0xf5ec10, lpData=0xf5ec14, lpcbData=0xf5ec0c*=0x1000 | out: lpType=0xf5ec10*=0x4, lpData=0xf5ec14*=0x40, lpcbData=0xf5ec0c*=0x4) returned 0x0 [0104.465] RegQueryValueExW (in: hKey=0xcc, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0xf5ec10, lpData=0xf5ec14, lpcbData=0xf5ec0c*=0x1000 | out: lpType=0xf5ec10*=0x4, lpData=0xf5ec14*=0x40, lpcbData=0xf5ec0c*=0x4) returned 0x0 [0104.465] RegQueryValueExW (in: hKey=0xcc, lpValueName="AutoRun", lpReserved=0x0, lpType=0xf5ec10, lpData=0xf5ec14, lpcbData=0xf5ec0c*=0x1000 | out: lpType=0xf5ec10*=0x0, lpData=0xf5ec14*=0x40, lpcbData=0xf5ec0c*=0x1000) returned 0x2 [0104.465] RegCloseKey (hKey=0xcc) returned 0x0 [0104.465] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0xf5ec08 | out: phkResult=0xf5ec08*=0xcc) returned 0x0 [0104.466] RegQueryValueExW (in: hKey=0xcc, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0xf5ec10, lpData=0xf5ec14, lpcbData=0xf5ec0c*=0x1000 | out: lpType=0xf5ec10*=0x0, lpData=0xf5ec14*=0x40, lpcbData=0xf5ec0c*=0x1000) returned 0x2 [0104.466] RegQueryValueExW (in: hKey=0xcc, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0xf5ec10, lpData=0xf5ec14, lpcbData=0xf5ec0c*=0x1000 | out: lpType=0xf5ec10*=0x4, lpData=0xf5ec14*=0x1, lpcbData=0xf5ec0c*=0x4) returned 0x0 [0104.466] RegQueryValueExW (in: hKey=0xcc, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0xf5ec10, lpData=0xf5ec14, lpcbData=0xf5ec0c*=0x1000 | out: lpType=0xf5ec10*=0x0, lpData=0xf5ec14*=0x1, lpcbData=0xf5ec0c*=0x1000) returned 0x2 [0104.466] RegQueryValueExW (in: hKey=0xcc, lpValueName="DefaultColor", lpReserved=0x0, lpType=0xf5ec10, lpData=0xf5ec14, lpcbData=0xf5ec0c*=0x1000 | out: lpType=0xf5ec10*=0x4, lpData=0xf5ec14*=0x0, lpcbData=0xf5ec0c*=0x4) returned 0x0 [0104.466] RegQueryValueExW (in: hKey=0xcc, lpValueName="CompletionChar", lpReserved=0x0, lpType=0xf5ec10, lpData=0xf5ec14, lpcbData=0xf5ec0c*=0x1000 | out: lpType=0xf5ec10*=0x4, lpData=0xf5ec14*=0x9, lpcbData=0xf5ec0c*=0x4) returned 0x0 [0104.466] RegQueryValueExW (in: hKey=0xcc, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0xf5ec10, lpData=0xf5ec14, lpcbData=0xf5ec0c*=0x1000 | out: lpType=0xf5ec10*=0x4, lpData=0xf5ec14*=0x9, lpcbData=0xf5ec0c*=0x4) returned 0x0 [0104.466] RegQueryValueExW (in: hKey=0xcc, lpValueName="AutoRun", lpReserved=0x0, lpType=0xf5ec10, lpData=0xf5ec14, lpcbData=0xf5ec0c*=0x1000 | out: lpType=0xf5ec10*=0x0, lpData=0xf5ec14*=0x9, lpcbData=0xf5ec0c*=0x1000) returned 0x2 [0104.466] RegCloseKey (hKey=0xcc) returned 0x0 [0104.466] time (in: timer=0x0 | out: timer=0x0) returned 0x5e3302e0 [0104.466] srand (_Seed=0x5e3302e0) [0104.466] GetCommandLineW () returned="C:\\WINDOWS\\system32\\cmd.exe /c net stop MSSQLSERVER" [0104.467] malloc (_Size=0x4000) returned 0x452700 [0104.467] GetCommandLineW () returned="C:\\WINDOWS\\system32\\cmd.exe /c net stop MSSQLSERVER" [0104.468] malloc (_Size=0xffce) returned 0x270048 [0104.469] ??_V@YAXPAX@Z () returned 0xf5fbec [0104.470] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x270048 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0104.470] malloc (_Size=0xffce) returned 0x280020 [0104.476] ??_V@YAXPAX@Z () returned 0xf5f9c0 [0104.477] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x280020, nSize=0x7fe7 | out: lpFilename="C:\\WINDOWS\\SysWOW64\\cmd.exe" (normalized: "c:\\windows\\syswow64\\cmd.exe")) returned 0x1b [0104.477] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x11ff840, nSize=0x2000 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath;C:\\WINDOWS\\system32;C:\\WINDOWS;C:\\WINDOWS\\System32\\Wbem;C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\;C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps") returned 0xbb [0104.477] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x11ff840, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0104.477] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x11ff840, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0104.477] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13 [0104.478] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11 [0104.478] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13 [0104.478] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13 [0104.478] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12 [0104.478] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4 [0104.478] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2 [0104.478] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8 [0104.478] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1 [0104.479] GetProcessHeap () returned 0xa0000 [0104.479] RtlFreeHeap (HeapHandle=0xa0000, Flags=0x0, BaseAddress=0xa58a8) returned 1 [0104.479] GetEnvironmentStringsW () returned 0xa4dd0* [0104.479] GetProcessHeap () returned 0xa0000 [0104.479] RtlAllocateHeap (HeapHandle=0xa0000, Flags=0x8, Size=0xae2) returned 0xa7948 [0104.479] FreeEnvironmentStringsA (penv="A") returned 1 [0104.480] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x11ff840, nSize=0x2000 | out: lpBuffer="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1b [0104.480] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x11ff840, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0104.480] _wcsicmp (_String1="KEYS", _String2="CD") returned 8 [0104.480] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6 [0104.480] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8 [0104.480] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8 [0104.480] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7 [0104.480] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9 [0104.480] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7 [0104.480] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3 [0104.480] malloc (_Size=0xffce) returned 0x28fff8 [0104.481] ??_V@YAXPAX@Z () returned 0xf5f758 [0104.482] GetProcessHeap () returned 0xa0000 [0104.482] RtlAllocateHeap (HeapHandle=0xa0000, Flags=0x8, Size=0x38) returned 0xa0ae0 [0104.482] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x28fff8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0104.482] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x7fe7, lpBuffer=0x28fff8, lpFilePart=0xf5f7a4 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0xf5f7a4*="Desktop") returned 0x17 [0104.483] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\Desktop" (normalized: "c:\\users\\fd1hvy\\desktop")) returned 0x11 [0104.483] FindFirstFileW (in: lpFileName="C:\\Users", lpFindFileData=0xf5f528 | out: lpFindFileData=0xf5f528*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x475bb883, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x475bb883, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 0xa0b20 [0104.484] FindClose (in: hFindFile=0xa0b20 | out: hFindFile=0xa0b20) returned 1 [0104.484] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy", lpFindFileData=0xf5f528 | out: lpFindFileData=0xf5f528*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20fc850f, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x9de5855d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x9de5855d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD1HVy", cAlternateFileName="")) returned 0xa0b20 [0104.484] FindClose (in: hFindFile=0xa0b20 | out: hFindFile=0xa0b20) returned 1 [0104.484] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", lpFindFileData=0xf5f528 | out: lpFindFileData=0xf5f528*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x5de49bf6, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0x5de49bf6, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 0xa0b20 [0104.485] FindClose (in: hFindFile=0xa0b20 | out: hFindFile=0xa0b20) returned 1 [0104.485] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\Desktop" (normalized: "c:\\users\\fd1hvy\\desktop")) returned 0x11 [0104.485] SetCurrentDirectoryW (lpPathName="C:\\Users\\FD1HVy\\Desktop" (normalized: "c:\\users\\fd1hvy\\desktop")) returned 1 [0104.485] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Users\\FD1HVy\\Desktop") returned 1 [0104.485] GetProcessHeap () returned 0xa0000 [0104.485] RtlFreeHeap (HeapHandle=0xa0000, Flags=0x0, BaseAddress=0xa7948) returned 1 [0104.485] GetEnvironmentStringsW () returned 0xa4dd0* [0104.486] GetProcessHeap () returned 0xa0000 [0104.486] RtlAllocateHeap (HeapHandle=0xa0000, Flags=0x8, Size=0xb1a) returned 0xa6e58 [0104.486] FreeEnvironmentStringsA (penv="=") returned 1 [0104.486] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x270048 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0104.486] GetProcessHeap () returned 0xa0000 [0104.486] RtlFreeHeap (HeapHandle=0xa0000, Flags=0x0, BaseAddress=0xa0ae0) returned 1 [0104.486] ??_V@YAXPAX@Z () returned 0x1 [0104.486] ??_V@YAXPAX@Z () returned 0x1 [0104.487] GetProcessHeap () returned 0xa0000 [0104.487] RtlAllocateHeap (HeapHandle=0xa0000, Flags=0x8, Size=0x400e) returned 0xa8f60 [0104.488] GetProcessHeap () returned 0xa0000 [0104.488] RtlAllocateHeap (HeapHandle=0xa0000, Flags=0x8, Size=0x36) returned 0xa7980 [0104.488] GetProcessHeap () returned 0xa0000 [0104.488] RtlFreeHeap (HeapHandle=0xa0000, Flags=0x0, BaseAddress=0xa8f60) returned 1 [0104.488] GetConsoleOutputCP () returned 0x1b5 [0104.497] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x1203850 | out: lpCPInfo=0x1203850) returned 1 [0104.497] GetUserDefaultLCID () returned 0x409 [0104.498] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x11ff82c, cchData=8 | out: lpLCData=":") returned 2 [0104.498] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0xf5fb14, cchData=128 | out: lpLCData="0") returned 2 [0104.498] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0xf5fb14, cchData=128 | out: lpLCData="0") returned 2 [0104.498] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0xf5fb14, cchData=128 | out: lpLCData="1") returned 2 [0104.498] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x11ff81c, cchData=8 | out: lpLCData="/") returned 2 [0104.499] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x11ff7b8, cchData=32 | out: lpLCData="Mon") returned 4 [0104.499] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x11ff778, cchData=32 | out: lpLCData="Tue") returned 4 [0104.499] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x11ff738, cchData=32 | out: lpLCData="Wed") returned 4 [0104.499] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x11ff6f8, cchData=32 | out: lpLCData="Thu") returned 4 [0104.499] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x11ff6b8, cchData=32 | out: lpLCData="Fri") returned 4 [0104.499] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x11ff678, cchData=32 | out: lpLCData="Sat") returned 4 [0104.499] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x11ff638, cchData=32 | out: lpLCData="Sun") returned 4 [0104.499] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x11ff80c, cchData=8 | out: lpLCData=".") returned 2 [0104.499] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x11ff7f8, cchData=8 | out: lpLCData=",") returned 2 [0104.499] setlocale (category=0, locale=".OCP") returned="English_United States.437" [0104.505] GetProcessHeap () returned 0xa0000 [0104.506] RtlAllocateHeap (HeapHandle=0xa0000, Flags=0x0, Size=0x20c) returned 0xa7a08 [0104.506] GetConsoleTitleW (in: lpConsoleTitle=0xa7a08, nSize=0x104 | out: lpConsoleTitle="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1c [0104.524] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x74030000 [0104.524] GetProcAddress (hModule=0x74030000, lpProcName="CopyFileExW") returned 0x74044330 [0104.525] GetProcAddress (hModule=0x74030000, lpProcName="IsDebuggerPresent") returned 0x74045930 [0104.525] GetProcAddress (hModule=0x74030000, lpProcName="SetConsoleInputExeNameW") returned 0x772c09d0 [0104.525] ??_V@YAXPAX@Z () returned 0x1 [0104.527] GetProcessHeap () returned 0xa0000 [0104.527] RtlAllocateHeap (HeapHandle=0xa0000, Flags=0x8, Size=0x400a) returned 0xa8f60 [0104.527] GetProcessHeap () returned 0xa0000 [0104.527] RtlFreeHeap (HeapHandle=0xa0000, Flags=0x0, BaseAddress=0xa8f60) returned 1 [0104.529] _wcsicmp (_String1="net", _String2=")") returned 69 [0104.529] _wcsicmp (_String1="FOR", _String2="net") returned -8 [0104.529] _wcsicmp (_String1="FOR/?", _String2="net") returned -8 [0104.529] _wcsicmp (_String1="IF", _String2="net") returned -5 [0104.529] _wcsicmp (_String1="IF/?", _String2="net") returned -5 [0104.529] _wcsicmp (_String1="REM", _String2="net") returned 4 [0104.529] _wcsicmp (_String1="REM/?", _String2="net") returned 4 [0104.529] GetProcessHeap () returned 0xa0000 [0104.529] RtlAllocateHeap (HeapHandle=0xa0000, Flags=0x8, Size=0x58) returned 0xa7c20 [0104.530] GetProcessHeap () returned 0xa0000 [0104.530] RtlAllocateHeap (HeapHandle=0xa0000, Flags=0x8, Size=0x10) returned 0xa7c80 [0104.531] GetProcessHeap () returned 0xa0000 [0104.531] RtlAllocateHeap (HeapHandle=0xa0000, Flags=0x8, Size=0x2c) returned 0xa7c98 [0104.535] GetConsoleTitleW (in: lpConsoleTitle=0xf5fa08, nSize=0x104 | out: lpConsoleTitle="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1c [0104.542] malloc (_Size=0xffce) returned 0x282aa0 [0104.543] ??_V@YAXPAX@Z () returned 0xf5f794 [0104.544] malloc (_Size=0xffce) returned 0x292a78 [0104.544] ??_V@YAXPAX@Z () returned 0xf5f54c [0104.545] _wcsicmp (_String1="net", _String2="DIR") returned 10 [0104.545] _wcsicmp (_String1="net", _String2="ERASE") returned 9 [0104.545] _wcsicmp (_String1="net", _String2="DEL") returned 10 [0104.546] _wcsicmp (_String1="net", _String2="TYPE") returned -6 [0104.546] _wcsicmp (_String1="net", _String2="COPY") returned 11 [0104.546] _wcsicmp (_String1="net", _String2="CD") returned 11 [0104.546] _wcsicmp (_String1="net", _String2="CHDIR") returned 11 [0104.546] _wcsicmp (_String1="net", _String2="RENAME") returned -4 [0104.546] _wcsicmp (_String1="net", _String2="REN") returned -4 [0104.546] _wcsicmp (_String1="net", _String2="ECHO") returned 9 [0104.546] _wcsicmp (_String1="net", _String2="SET") returned -5 [0104.546] _wcsicmp (_String1="net", _String2="PAUSE") returned -2 [0104.546] _wcsicmp (_String1="net", _String2="DATE") returned 10 [0104.547] _wcsicmp (_String1="net", _String2="TIME") returned -6 [0104.547] _wcsicmp (_String1="net", _String2="PROMPT") returned -2 [0104.547] _wcsicmp (_String1="net", _String2="MD") returned 1 [0104.547] _wcsicmp (_String1="net", _String2="MKDIR") returned 1 [0104.547] _wcsicmp (_String1="net", _String2="RD") returned -4 [0104.547] _wcsicmp (_String1="net", _String2="RMDIR") returned -4 [0104.547] _wcsicmp (_String1="net", _String2="PATH") returned -2 [0104.547] _wcsicmp (_String1="net", _String2="GOTO") returned 7 [0104.547] _wcsicmp (_String1="net", _String2="SHIFT") returned -5 [0104.547] _wcsicmp (_String1="net", _String2="CLS") returned 11 [0104.547] _wcsicmp (_String1="net", _String2="CALL") returned 11 [0104.547] _wcsicmp (_String1="net", _String2="VERIFY") returned -8 [0104.547] _wcsicmp (_String1="net", _String2="VER") returned -8 [0104.548] _wcsicmp (_String1="net", _String2="VOL") returned -8 [0104.548] _wcsicmp (_String1="net", _String2="EXIT") returned 9 [0104.548] _wcsicmp (_String1="net", _String2="SETLOCAL") returned -5 [0104.548] _wcsicmp (_String1="net", _String2="ENDLOCAL") returned 9 [0104.548] _wcsicmp (_String1="net", _String2="TITLE") returned -6 [0104.548] _wcsicmp (_String1="net", _String2="START") returned -5 [0104.548] _wcsicmp (_String1="net", _String2="DPATH") returned 10 [0104.548] _wcsicmp (_String1="net", _String2="KEYS") returned 3 [0104.549] _wcsicmp (_String1="net", _String2="MOVE") returned 1 [0104.549] _wcsicmp (_String1="net", _String2="PUSHD") returned -2 [0104.549] _wcsicmp (_String1="net", _String2="POPD") returned -2 [0104.549] _wcsicmp (_String1="net", _String2="ASSOC") returned 13 [0104.549] _wcsicmp (_String1="net", _String2="FTYPE") returned 8 [0104.549] _wcsicmp (_String1="net", _String2="BREAK") returned 12 [0104.549] _wcsicmp (_String1="net", _String2="COLOR") returned 11 [0104.549] _wcsicmp (_String1="net", _String2="MKLINK") returned 1 [0104.549] _wcsicmp (_String1="net", _String2="DIR") returned 10 [0104.549] _wcsicmp (_String1="net", _String2="ERASE") returned 9 [0104.549] _wcsicmp (_String1="net", _String2="DEL") returned 10 [0104.549] _wcsicmp (_String1="net", _String2="TYPE") returned -6 [0104.550] _wcsicmp (_String1="net", _String2="COPY") returned 11 [0104.550] _wcsicmp (_String1="net", _String2="CD") returned 11 [0104.550] _wcsicmp (_String1="net", _String2="CHDIR") returned 11 [0104.550] _wcsicmp (_String1="net", _String2="RENAME") returned -4 [0104.550] _wcsicmp (_String1="net", _String2="REN") returned -4 [0104.550] _wcsicmp (_String1="net", _String2="ECHO") returned 9 [0104.550] _wcsicmp (_String1="net", _String2="SET") returned -5 [0104.550] _wcsicmp (_String1="net", _String2="PAUSE") returned -2 [0104.550] _wcsicmp (_String1="net", _String2="DATE") returned 10 [0104.550] _wcsicmp (_String1="net", _String2="TIME") returned -6 [0104.550] _wcsicmp (_String1="net", _String2="PROMPT") returned -2 [0104.551] _wcsicmp (_String1="net", _String2="MD") returned 1 [0104.551] _wcsicmp (_String1="net", _String2="MKDIR") returned 1 [0104.551] _wcsicmp (_String1="net", _String2="RD") returned -4 [0104.551] _wcsicmp (_String1="net", _String2="RMDIR") returned -4 [0104.551] _wcsicmp (_String1="net", _String2="PATH") returned -2 [0104.551] _wcsicmp (_String1="net", _String2="GOTO") returned 7 [0104.551] _wcsicmp (_String1="net", _String2="SHIFT") returned -5 [0104.551] _wcsicmp (_String1="net", _String2="CLS") returned 11 [0104.551] _wcsicmp (_String1="net", _String2="CALL") returned 11 [0104.551] _wcsicmp (_String1="net", _String2="VERIFY") returned -8 [0104.551] _wcsicmp (_String1="net", _String2="VER") returned -8 [0104.551] _wcsicmp (_String1="net", _String2="VOL") returned -8 [0104.552] _wcsicmp (_String1="net", _String2="EXIT") returned 9 [0104.552] _wcsicmp (_String1="net", _String2="SETLOCAL") returned -5 [0104.552] _wcsicmp (_String1="net", _String2="ENDLOCAL") returned 9 [0104.552] _wcsicmp (_String1="net", _String2="TITLE") returned -6 [0104.552] _wcsicmp (_String1="net", _String2="START") returned -5 [0104.552] _wcsicmp (_String1="net", _String2="DPATH") returned 10 [0104.552] _wcsicmp (_String1="net", _String2="KEYS") returned 3 [0104.552] _wcsicmp (_String1="net", _String2="MOVE") returned 1 [0104.552] _wcsicmp (_String1="net", _String2="PUSHD") returned -2 [0104.552] _wcsicmp (_String1="net", _String2="POPD") returned -2 [0104.552] _wcsicmp (_String1="net", _String2="ASSOC") returned 13 [0104.553] _wcsicmp (_String1="net", _String2="FTYPE") returned 8 [0104.553] _wcsicmp (_String1="net", _String2="BREAK") returned 12 [0104.553] _wcsicmp (_String1="net", _String2="COLOR") returned 11 [0104.553] _wcsicmp (_String1="net", _String2="MKLINK") returned 1 [0104.553] _wcsicmp (_String1="net", _String2="FOR") returned 8 [0104.553] _wcsicmp (_String1="net", _String2="IF") returned 5 [0104.553] _wcsicmp (_String1="net", _String2="REM") returned -4 [0104.553] ??_V@YAXPAX@Z () returned 0x1 [0104.554] GetProcessHeap () returned 0xa0000 [0104.554] RtlAllocateHeap (HeapHandle=0xa0000, Flags=0x8, Size=0xffd6) returned 0xa8f60 [0104.555] GetProcessHeap () returned 0xa0000 [0104.555] RtlAllocateHeap (HeapHandle=0xa0000, Flags=0x8, Size=0x34) returned 0xa7cd0 [0104.555] _wcsnicmp (_String1="net", _String2="cmd ", _MaxCount=0x4) returned 11 [0104.555] malloc (_Size=0xffce) returned 0x292a78 [0104.555] ??_V@YAXPAX@Z () returned 0xf5f2cc [0104.556] GetProcessHeap () returned 0xa0000 [0104.556] RtlAllocateHeap (HeapHandle=0xa0000, Flags=0x8, Size=0x1ffa4) returned 0xb8f40 [0104.559] SetErrorMode (uMode=0x0) returned 0x0 [0104.559] SetErrorMode (uMode=0x1) returned 0x0 [0104.559] GetFullPathNameW (in: lpFileName=".", nBufferLength=0xffce, lpBuffer=0xb8f48, lpFilePart=0xf5f2ec | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0xf5f2ec*="Desktop") returned 0x17 [0104.559] SetErrorMode (uMode=0x0) returned 0x1 [0104.560] GetProcessHeap () returned 0xa0000 [0104.560] RtlReAllocateHeap (Heap=0xa0000, Flags=0x0, Ptr=0xb8f40, Size=0x40) returned 0xb8f40 [0104.560] GetProcessHeap () returned 0xa0000 [0104.560] RtlSizeHeap (HeapHandle=0xa0000, Flags=0x0, MemoryPointer=0xb8f40) returned 0x40 [0104.560] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x11ff840, nSize=0x2000 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath;C:\\WINDOWS\\system32;C:\\WINDOWS;C:\\WINDOWS\\System32\\Wbem;C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\;C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps") returned 0xbb [0104.560] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1 [0104.561] GetProcessHeap () returned 0xa0000 [0104.561] RtlAllocateHeap (HeapHandle=0xa0000, Flags=0x8, Size=0x1b4) returned 0xa7d10 [0104.561] GetProcessHeap () returned 0xa0000 [0104.561] RtlAllocateHeap (HeapHandle=0xa0000, Flags=0x8, Size=0x360) returned 0xa7ed0 [0104.590] GetProcessHeap () returned 0xa0000 [0104.590] RtlReAllocateHeap (Heap=0xa0000, Flags=0x0, Ptr=0xa7ed0, Size=0x1b6) returned 0xa7ed0 [0104.590] GetProcessHeap () returned 0xa0000 [0104.590] RtlSizeHeap (HeapHandle=0xa0000, Flags=0x0, MemoryPointer=0xa7ed0) returned 0x1b6 [0104.590] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x11ff840, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0104.590] GetProcessHeap () returned 0xa0000 [0104.590] RtlAllocateHeap (HeapHandle=0xa0000, Flags=0x8, Size=0xe0) returned 0xa8090 [0104.590] GetProcessHeap () returned 0xa0000 [0104.591] RtlReAllocateHeap (Heap=0xa0000, Flags=0x0, Ptr=0xa8090, Size=0x76) returned 0xa8090 [0104.591] GetProcessHeap () returned 0xa0000 [0104.591] RtlSizeHeap (HeapHandle=0xa0000, Flags=0x0, MemoryPointer=0xa8090) returned 0x76 [0104.591] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0104.592] FindFirstFileExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\net.*", fInfoLevelId=0x1, lpFindFileData=0xf5f078, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0xf5f078) returned 0xffffffff [0104.592] GetLastError () returned 0x2 [0104.592] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0104.593] FindFirstFileExW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\net.*", fInfoLevelId=0x1, lpFindFileData=0xf5f078, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0xf5f078) returned 0xffffffff [0104.593] GetLastError () returned 0x2 [0104.593] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0104.594] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\system32\\net.*", fInfoLevelId=0x1, lpFindFileData=0xf5f078, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0xf5f078) returned 0xa8110 [0104.594] GetProcessHeap () returned 0xa0000 [0104.594] RtlAllocateHeap (HeapHandle=0xa0000, Flags=0x0, Size=0x14) returned 0xa8150 [0104.594] FindClose (in: hFindFile=0xa8110 | out: hFindFile=0xa8110) returned 1 [0104.594] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\system32\\net.COM", fInfoLevelId=0x1, lpFindFileData=0xf5f078, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0xf5f078) returned 0xffffffff [0104.595] GetLastError () returned 0x2 [0104.595] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\system32\\net.EXE", fInfoLevelId=0x1, lpFindFileData=0xf5f078, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0xf5f078) returned 0xa8110 [0104.596] GetProcessHeap () returned 0xa0000 [0104.596] RtlReAllocateHeap (Heap=0xa0000, Flags=0x0, Ptr=0xa8150, Size=0x4) returned 0xa8150 [0104.596] FindClose (in: hFindFile=0xa8110 | out: hFindFile=0xa8110) returned 1 [0104.596] _wcsicmp (_String1=".EXE", _String2=".BAT") returned 3 [0104.596] _wcsicmp (_String1=".EXE", _String2=".CMD") returned 2 [0104.596] ??_V@YAXPAX@Z () returned 0x1 [0104.597] GetConsoleTitleW (in: lpConsoleTitle=0xf5f57c, nSize=0x104 | out: lpConsoleTitle="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1c [0104.608] InitializeProcThreadAttributeList (in: lpAttributeList=0xf5f4a8, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0xf5f494 | out: lpAttributeList=0xf5f4a8, lpSize=0xf5f494) returned 1 [0104.608] UpdateProcThreadAttribute (in: lpAttributeList=0xf5f4a8, dwFlags=0x0, Attribute=0x60001, lpValue=0xf5f490, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0xf5f4a8, lpPreviousValue=0x0) returned 1 [0104.608] GetStartupInfoW (in: lpStartupInfo=0xf5f4e0 | out: lpStartupInfo=0xf5f4e0*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\WINDOWS\\system32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x144, lpReserved2=0xa1b5e, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) [0104.608] GetProcessHeap () returned 0xa0000 [0104.608] RtlAllocateHeap (HeapHandle=0xa0000, Flags=0x8, Size=0x18) returned 0xa8110 [0104.609] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38 [0104.609] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2 [0104.609] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2 [0104.609] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0104.609] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0104.609] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0104.609] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3 [0104.609] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3 [0104.609] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5 [0104.610] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5 [0104.610] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9 [0104.610] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9 [0104.610] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11 [0104.610] _wcsnicmp (_String1="COPYCMD", _String2="OneDriv", _MaxCount=0x7) returned -12 [0104.610] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12 [0104.610] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13 [0104.610] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13 [0104.610] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0104.610] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0104.611] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0104.611] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0104.613] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0104.613] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0104.613] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0104.613] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0104.614] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0104.614] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13 [0104.614] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13 [0104.614] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13 [0104.614] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16 [0104.614] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16 [0104.614] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17 [0104.614] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17 [0104.614] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18 [0104.615] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18 [0104.615] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18 [0104.615] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18 [0104.615] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20 [0104.615] GetProcessHeap () returned 0xa0000 [0104.615] RtlFreeHeap (HeapHandle=0xa0000, Flags=0x0, BaseAddress=0xa8110) returned 1 [0104.615] GetProcessHeap () returned 0xa0000 [0104.615] RtlAllocateHeap (HeapHandle=0xa0000, Flags=0x8, Size=0xa) returned 0xa8110 [0104.616] lstrcmpW (lpString1="\\net.exe", lpString2="\\XCOPY.EXE") returned -1 [0104.618] _get_osfhandle (_FileHandle=1) returned 0x90 [0104.618] SetConsoleMode (hConsoleHandle=0x90, dwMode=0x3) returned 1 [0104.631] _get_osfhandle (_FileHandle=0) returned 0x8c [0104.631] SetConsoleMode (hConsoleHandle=0x8c, dwMode=0x1f7) returned 1 [0104.669] CreateProcessW (in: lpApplicationName="C:\\WINDOWS\\system32\\net.exe", lpCommandLine="net stop MSSQLSERVER", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\FD1HVy\\Desktop", lpStartupInfo=0xf5f430*(cb=0x48, lpReserved=0x0, lpDesktop="WinSta0\\Default", lpTitle="net stop MSSQLSERVER", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0xf5f47c | out: lpCommandLine="net stop MSSQLSERVER", lpProcessInformation=0xf5f47c*(hProcess=0xe0, hThread=0xdc, dwProcessId=0xed8, dwThreadId=0x12cc)) returned 1 [0104.700] CloseHandle (hObject=0xdc) returned 1 [0104.700] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1 [0104.700] GetProcessHeap () returned 0xa0000 [0104.700] RtlFreeHeap (HeapHandle=0xa0000, Flags=0x0, BaseAddress=0xa6e58) returned 1 [0104.700] GetEnvironmentStringsW () returned 0xa6e58* [0104.700] GetProcessHeap () returned 0xa0000 [0104.700] RtlAllocateHeap (HeapHandle=0xa0000, Flags=0x8, Size=0xb1a) returned 0xa4dd0 [0104.700] FreeEnvironmentStringsA (penv="=") returned 1 [0104.700] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0xffffffff) returned 0x0 [0105.422] GetExitCodeProcess (in: hProcess=0xe0, lpExitCode=0xf5f414 | out: lpExitCode=0xf5f414*=0x2) returned 1 [0105.422] CloseHandle (hObject=0xe0) returned 1 [0105.423] _vsnwprintf (in: _Buffer=0xf5f4fc, _BufferCount=0x13, _Format="%08X", _ArgList=0xf5f41c | out: _Buffer="00000002") returned 8 [0105.423] SetEnvironmentVariableW (lpName="=ExitCode", lpValue="00000002") returned 1 [0105.424] GetProcessHeap () returned 0xa0000 [0105.424] RtlFreeHeap (HeapHandle=0xa0000, Flags=0x0, BaseAddress=0xa4dd0) returned 1 [0105.425] GetEnvironmentStringsW () returned 0xa83b0* [0105.425] GetProcessHeap () returned 0xa0000 [0105.425] RtlAllocateHeap (HeapHandle=0xa0000, Flags=0x8, Size=0xb40) returned 0xa4dd0 [0105.426] FreeEnvironmentStringsA (penv="=") returned 1 [0105.426] SetEnvironmentVariableW (lpName="=ExitCodeAscii", lpValue=0x0) returned 1 [0105.426] GetProcessHeap () returned 0xa0000 [0105.426] RtlFreeHeap (HeapHandle=0xa0000, Flags=0x0, BaseAddress=0xa4dd0) returned 1 [0105.426] GetEnvironmentStringsW () returned 0xa83b0* [0105.426] GetProcessHeap () returned 0xa0000 [0105.426] RtlAllocateHeap (HeapHandle=0xa0000, Flags=0x8, Size=0xb40) returned 0xa4dd0 [0105.426] FreeEnvironmentStringsA (penv="=") returned 1 [0105.426] GetProcessHeap () returned 0xa0000 [0105.426] RtlFreeHeap (HeapHandle=0xa0000, Flags=0x0, BaseAddress=0xa8110) returned 1 [0105.426] DeleteProcThreadAttributeList (in: lpAttributeList=0xf5f4a8 | out: lpAttributeList=0xf5f4a8) [0105.426] ??_V@YAXPAX@Z () returned 0x1 [0105.426] _get_osfhandle (_FileHandle=1) returned 0x90 [0105.426] SetConsoleMode (hConsoleHandle=0x90, dwMode=0x3) returned 1 [0105.436] _get_osfhandle (_FileHandle=1) returned 0x90 [0105.436] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x1203890 | out: lpMode=0x1203890) returned 1 [0105.491] _get_osfhandle (_FileHandle=1) returned 0x90 [0105.491] SetConsoleMode (hConsoleHandle=0x90, dwMode=0x7) returned 1 [0105.494] _get_osfhandle (_FileHandle=0) returned 0x8c [0105.494] GetConsoleMode (in: hConsoleHandle=0x8c, lpMode=0x1203894 | out: lpMode=0x1203894) returned 1 [0105.501] _get_osfhandle (_FileHandle=0) returned 0x8c [0105.501] SetConsoleMode (hConsoleHandle=0x8c, dwMode=0x1e7) returned 1 [0105.508] SetConsoleInputExeNameW () returned 0x1 [0105.508] GetConsoleOutputCP () returned 0x1b5 [0105.520] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x1203850 | out: lpCPInfo=0x1203850) returned 1 [0105.520] SetThreadUILanguage (LangId=0x0) returned 0xdb0409 [0105.551] exit (_Code=2) [0105.551] ??_V@YAXPAX@Z () returned 0x1 Thread: id = 101 os_tid = 0x130c Process: id = "34" image_name = "conhost.exe" filename = "c:\\windows\\system32\\conhost.exe" page_root = "0x7161000" os_pid = "0xe88" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "33" os_parent_pid = "0x1294" cmd_line = "\\??\\C:\\WINDOWS\\system32\\conhost.exe 0xffffffff -ForceV1" cur_dir = "C:\\WINDOWS" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000faa5" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 96 os_tid = 0x13b8 Thread: id = 97 os_tid = 0x1048 Thread: id = 98 os_tid = 0x13f8 Thread: id = 99 os_tid = 0xb04 Thread: id = 100 os_tid = 0x5f4 Process: id = "35" image_name = "net.exe" filename = "c:\\windows\\syswow64\\net.exe" page_root = "0xbff7000" os_pid = "0xed8" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "33" os_parent_pid = "0x1294" cmd_line = "net stop MSSQLSERVER" cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000faa5" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 102 os_tid = 0x12cc Thread: id = 103 os_tid = 0x13b0 Process: id = "36" image_name = "net1.exe" filename = "c:\\windows\\syswow64\\net1.exe" page_root = "0x14bc7000" os_pid = "0x1328" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "35" os_parent_pid = "0xed8" cmd_line = "C:\\WINDOWS\\system32\\net1 stop MSSQLSERVER" cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000faa5" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 104 os_tid = 0x1320 [0105.205] GetModuleHandleA (lpModuleName=0x0) returned 0x230000 [0105.205] __set_app_type (_Type=0x1) [0105.205] __p__fmode () returned 0x76953c14 [0105.205] __p__commode () returned 0x769549ec [0105.206] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x236f20) returned 0x0 [0105.206] __getmainargs (in: _Argc=0x24f608, _Argv=0x24f60c, _Env=0x24f610, _DoWildCard=0, _StartInfo=0x24f61c | out: _Argc=0x24f608, _Argv=0x24f60c, _Env=0x24f610) returned 0 [0105.206] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0105.206] GetConsoleOutputCP () returned 0x1b5 [0105.216] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x256fa0 | out: lpCPInfo=0x256fa0) returned 1 [0105.217] SetThreadUILanguage (LangId=0x0) returned 0x2430409 [0105.223] sprintf_s (in: _DstBuf=0x22ef998, _DstSize=0xc, _Format=".%u" | out: _DstBuf=".437") returned 4 [0105.223] setlocale (category=0, locale=".437") returned="English_United States.437" [0105.226] GetStdHandle (nStdHandle=0xfffffff5) returned 0x90 [0105.226] GetStdHandle (nStdHandle=0xfffffff4) returned 0x94 [0105.226] GetCommandLineW () returned="C:\\WINDOWS\\system32\\net1 stop MSSQLSERVER" [0105.226] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x22ef740, nSize=0x104 | out: lpFilename="C:\\WINDOWS\\SysWOW64\\net1.exe" (normalized: "c:\\windows\\syswow64\\net1.exe")) returned 0x1c [0105.226] RtlAllocateHeap (HeapHandle=0x26e0000, Flags=0x0, Size=0x60) returned 0x26e04a0 [0105.226] NetApiBufferAllocate (in: ByteCount=0x10, Buffer=0x22ef73c | out: Buffer=0x22ef73c*=0x26e8120) returned 0x0 [0105.226] NetApiBufferAllocate (in: ByteCount=0x10, Buffer=0x22ef738 | out: Buffer=0x22ef738*=0x26e8150) returned 0x0 [0105.227] __iob_func () returned 0x76952608 [0105.227] _fileno (_File=0x76952608) returned 0 [0105.227] _setmode (_FileHandle=0, _Mode=16384) returned 16384 [0105.228] _wcsicmp (_String1="accounts", _String2="stop") returned -18 [0105.228] _wcsicmp (_String1="computer", _String2="stop") returned -16 [0105.228] _wcsicmp (_String1="config", _String2="stop") returned -16 [0105.228] _wcsicmp (_String1="continue", _String2="stop") returned -16 [0105.228] _wcsicmp (_String1="cont", _String2="stop") returned -16 [0105.228] _wcsicmp (_String1="file", _String2="stop") returned -13 [0105.228] _wcsicmp (_String1="files", _String2="stop") returned -13 [0105.228] _wcsicmp (_String1="group", _String2="stop") returned -12 [0105.228] _wcsicmp (_String1="groups", _String2="stop") returned -12 [0105.228] _wcsicmp (_String1="help", _String2="stop") returned -11 [0105.228] _wcsicmp (_String1="helpmsg", _String2="stop") returned -11 [0105.228] _wcsicmp (_String1="localgroup", _String2="stop") returned -7 [0105.229] _wcsicmp (_String1="pause", _String2="stop") returned -3 [0105.229] _wcsicmp (_String1="session", _String2="stop") returned -15 [0105.229] _wcsicmp (_String1="sessions", _String2="stop") returned -15 [0105.229] _wcsicmp (_String1=0x231ffc, _String2="stop") returned -15 [0105.229] _wcsicmp (_String1="share", _String2="stop") returned -12 [0105.229] _wcsicmp (_String1="start", _String2="stop") returned -14 [0105.229] _wcsicmp (_String1="stats", _String2="stop") returned -14 [0105.229] _wcsicmp (_String1="statistics", _String2="stop") returned -14 [0105.229] _wcsicmp (_String1="stop", _String2="stop") returned 0 [0105.229] _wcsicmp (_String1="accounts", _String2="MSSQLSERVER") returned -12 [0105.229] _wcsicmp (_String1="computer", _String2="MSSQLSERVER") returned -10 [0105.230] _wcsicmp (_String1="config", _String2="MSSQLSERVER") returned -10 [0105.230] _wcsicmp (_String1="continue", _String2="MSSQLSERVER") returned -10 [0105.230] _wcsicmp (_String1="cont", _String2="MSSQLSERVER") returned -10 [0105.230] _wcsicmp (_String1="file", _String2="MSSQLSERVER") returned -7 [0105.230] _wcsicmp (_String1="files", _String2="MSSQLSERVER") returned -7 [0105.230] _wcsicmp (_String1="group", _String2="MSSQLSERVER") returned -6 [0105.230] _wcsicmp (_String1="groups", _String2="MSSQLSERVER") returned -6 [0105.230] _wcsicmp (_String1="help", _String2="MSSQLSERVER") returned -5 [0105.230] _wcsicmp (_String1="helpmsg", _String2="MSSQLSERVER") returned -5 [0105.230] _wcsicmp (_String1="localgroup", _String2="MSSQLSERVER") returned -1 [0105.230] _wcsicmp (_String1="pause", _String2="MSSQLSERVER") returned 3 [0105.230] _wcsicmp (_String1="session", _String2="MSSQLSERVER") returned 6 [0105.230] _wcsicmp (_String1="sessions", _String2="MSSQLSERVER") returned 6 [0105.231] _wcsicmp (_String1="sess", _String2="MSSQLSERVER") returned 6 [0105.231] _wcsicmp (_String1="share", _String2="MSSQLSERVER") returned 6 [0105.231] _wcsicmp (_String1="start", _String2="MSSQLSERVER") returned 6 [0105.231] _wcsicmp (_String1="stats", _String2="MSSQLSERVER") returned 6 [0105.231] _wcsicmp (_String1="statistics", _String2="MSSQLSERVER") returned 6 [0105.231] _wcsicmp (_String1="stop", _String2="MSSQLSERVER") returned 6 [0105.231] _wcsicmp (_String1="time", _String2="MSSQLSERVER") returned 7 [0105.231] _wcsicmp (_String1="user", _String2="MSSQLSERVER") returned 8 [0105.231] _wcsicmp (_String1="users", _String2="MSSQLSERVER") returned 8 [0105.231] _wcsicmp (_String1="msg", _String2="MSSQLSERVER") returned -12 [0105.231] _wcsicmp (_String1="messenger", _String2="MSSQLSERVER") returned -14 [0105.231] _wcsicmp (_String1="receiver", _String2="MSSQLSERVER") returned 5 [0105.231] _wcsicmp (_String1="rcv", _String2="MSSQLSERVER") returned 5 [0105.231] _wcsicmp (_String1="netpopup", _String2="MSSQLSERVER") returned 1 [0105.231] _wcsicmp (_String1="redirector", _String2="MSSQLSERVER") returned 5 [0105.232] _wcsicmp (_String1="redir", _String2="MSSQLSERVER") returned 5 [0105.232] _wcsicmp (_String1="rdr", _String2="MSSQLSERVER") returned 5 [0105.232] _wcsicmp (_String1="workstation", _String2="MSSQLSERVER") returned 10 [0105.232] _wcsicmp (_String1="work", _String2="MSSQLSERVER") returned 10 [0105.232] _wcsicmp (_String1="wksta", _String2="MSSQLSERVER") returned 10 [0105.232] _wcsicmp (_String1="prdr", _String2="MSSQLSERVER") returned 3 [0105.232] _wcsicmp (_String1="devrdr", _String2="MSSQLSERVER") returned -9 [0105.232] _wcsicmp (_String1="lanmanworkstation", _String2="MSSQLSERVER") returned -1 [0105.232] _wcsicmp (_String1="server", _String2="MSSQLSERVER") returned 6 [0105.232] _wcsicmp (_String1="svr", _String2="MSSQLSERVER") returned 6 [0105.232] _wcsicmp (_String1="srv", _String2="MSSQLSERVER") returned 6 [0105.232] _wcsicmp (_String1="lanmanserver", _String2="MSSQLSERVER") returned -1 [0105.232] _wcsicmp (_String1="alerter", _String2="MSSQLSERVER") returned -12 [0105.233] _wcsicmp (_String1="netlogon", _String2="MSSQLSERVER") returned 1 [0105.233] _wcsupr (in: _String="MSSQLSERVER" | out: _String="MSSQLSERVER") returned="MSSQLSERVER" [0105.233] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x80000000) returned 0x26f0278 [0105.237] GetServiceKeyNameW (in: hSCManager=0x26f0278, lpDisplayName="MSSQLSERVER", lpServiceName=0x258c28, lpcchBuffer=0x22ef6ac | out: lpServiceName="", lpcchBuffer=0x22ef6ac) returned 0 [0105.239] _wcsicmp (_String1="msg", _String2="MSSQLSERVER") returned -12 [0105.239] _wcsicmp (_String1="messenger", _String2="MSSQLSERVER") returned -14 [0105.239] _wcsicmp (_String1="receiver", _String2="MSSQLSERVER") returned 5 [0105.239] _wcsicmp (_String1="rcv", _String2="MSSQLSERVER") returned 5 [0105.239] _wcsicmp (_String1="redirector", _String2="MSSQLSERVER") returned 5 [0105.239] _wcsicmp (_String1="redir", _String2="MSSQLSERVER") returned 5 [0105.239] _wcsicmp (_String1="rdr", _String2="MSSQLSERVER") returned 5 [0105.239] _wcsicmp (_String1="workstation", _String2="MSSQLSERVER") returned 10 [0105.239] _wcsicmp (_String1="work", _String2="MSSQLSERVER") returned 10 [0105.239] _wcsicmp (_String1="wksta", _String2="MSSQLSERVER") returned 10 [0105.239] _wcsicmp (_String1="prdr", _String2="MSSQLSERVER") returned 3 [0105.239] _wcsicmp (_String1="devrdr", _String2="MSSQLSERVER") returned -9 [0105.239] _wcsicmp (_String1="lanmanworkstation", _String2="MSSQLSERVER") returned -1 [0105.239] _wcsicmp (_String1="server", _String2="MSSQLSERVER") returned 6 [0105.239] _wcsicmp (_String1="svr", _String2="MSSQLSERVER") returned 6 [0105.240] _wcsicmp (_String1="srv", _String2="MSSQLSERVER") returned 6 [0105.240] _wcsicmp (_String1="lanmanserver", _String2="MSSQLSERVER") returned -1 [0105.240] _wcsicmp (_String1="alerter", _String2="MSSQLSERVER") returned -12 [0105.240] _wcsicmp (_String1="netlogon", _String2="MSSQLSERVER") returned 1 [0105.240] _wcsicmp (_String1="MSSQLSERVER", _String2="WORKSTATION") returned -10 [0105.240] _wcsicmp (_String1="MSSQLSERVER", _String2="LanmanWorkstation") returned 1 [0105.240] _wcsicmp (_String1="MSSQLSERVER", _String2="SERVER") returned -6 [0105.240] _wcsicmp (_String1="MSSQLSERVER", _String2="LanmanServer") returned 1 [0105.240] _wcsicmp (_String1="MSSQLSERVER", _String2="BROWSER") returned 11 [0105.240] _wcsicmp (_String1="MSSQLSERVER", _String2="BROWSER") returned 11 [0105.240] _wcsicmp (_String1="MSSQLSERVER", _String2="MESSENGER") returned 14 [0105.240] _wcsicmp (_String1="MSSQLSERVER", _String2="MESSENGER") returned 14 [0105.240] _wcsicmp (_String1="MSSQLSERVER", _String2="NETRUN") returned -1 [0105.240] _wcsicmp (_String1="MSSQLSERVER", _String2="NETRUN") returned -1 [0105.240] _wcsicmp (_String1="MSSQLSERVER", _String2="SPOOLER") returned -6 [0105.241] _wcsicmp (_String1="MSSQLSERVER", _String2="SPOOLER") returned -6 [0105.241] _wcsicmp (_String1="MSSQLSERVER", _String2="ALERTER") returned 12 [0105.241] _wcsicmp (_String1="MSSQLSERVER", _String2="ALERTER") returned 12 [0105.241] _wcsicmp (_String1="MSSQLSERVER", _String2="NETLOGON") returned -1 [0105.241] _wcsicmp (_String1="MSSQLSERVER", _String2="NETLOGON") returned -1 [0105.241] _wcsicmp (_String1="MSSQLSERVER", _String2="NETPOPUP") returned -1 [0105.241] _wcsicmp (_String1="MSSQLSERVER", _String2="NETPOPUP") returned -1 [0105.241] _wcsicmp (_String1="MSSQLSERVER", _String2="SQLSERVER") returned -6 [0105.241] _wcsicmp (_String1="MSSQLSERVER", _String2="SQLSERVER") returned -6 [0105.241] _wcsicmp (_String1="MSSQLSERVER", _String2="REPLICATOR") returned -5 [0105.241] _wcsicmp (_String1="MSSQLSERVER", _String2="REPLICATOR") returned -5 [0105.241] _wcsicmp (_String1="MSSQLSERVER", _String2="REMOTEBOOT") returned -5 [0105.241] _wcsicmp (_String1="MSSQLSERVER", _String2="REMOTEBOOT") returned -5 [0105.241] _wcsicmp (_String1="MSSQLSERVER", _String2="TIMESOURCE") returned -7 [0105.241] _wcsicmp (_String1="MSSQLSERVER", _String2="TIMESOURCE") returned -7 [0105.242] _wcsicmp (_String1="MSSQLSERVER", _String2="AFP") returned 12 [0105.242] _wcsicmp (_String1="MSSQLSERVER", _String2="AFP") returned 12 [0105.242] _wcsicmp (_String1="MSSQLSERVER", _String2="UPS") returned -8 [0105.242] _wcsicmp (_String1="MSSQLSERVER", _String2="UPS") returned -8 [0105.242] _wcsicmp (_String1="MSSQLSERVER", _String2="XACTSRV") returned -11 [0105.242] _wcsicmp (_String1="MSSQLSERVER", _String2="XACTSRV") returned -11 [0105.242] _wcsicmp (_String1="MSSQLSERVER", _String2="TCPIP") returned -7 [0105.242] _wcsicmp (_String1="MSSQLSERVER", _String2="TCPIP") returned -7 [0105.242] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x1) returned 0x26efff8 [0105.243] OpenServiceW (hSCManager=0x26efff8, lpServiceName="MSSQLSERVER", dwDesiredAccess=0x84) returned 0x0 [0105.243] GetLastError () returned 0x424 [0105.243] CloseServiceHandle (hSCObject=0x26efff8) returned 1 [0105.244] wcscpy_s (in: _Destination=0x257610, _SizeInWords=0x104, _Source="NETMSG" | out: _Destination="NETMSG") returned 0x0 [0105.244] LoadLibraryExW (lpLibFileName="NETMSG", hFile=0x0, dwFlags=0x20) returned 0x23f0002 [0105.245] FormatMessageW (in: dwFlags=0x2a00, lpSource=0x23f0002, dwMessageId=0x889, dwLanguageId=0x0, lpBuffer=0x257c20, nSize=0x800, Arguments=0x2573d0 | out: lpBuffer="The service name is invalid.\r\n") returned 0x1e [0105.246] GetFileType (hFile=0x94) returned 0x2 [0105.246] GetConsoleMode (in: hConsoleHandle=0x94, lpMode=0x22ef53c | out: lpMode=0x22ef53c) returned 1 [0105.255] WriteConsoleW (in: hConsoleOutput=0x94, lpBuffer=0x257c20*, nNumberOfCharsToWrite=0x1e, lpNumberOfCharsWritten=0x22ef548, lpReserved=0x0 | out: lpBuffer=0x257c20*, lpNumberOfCharsWritten=0x22ef548*=0x1e) returned 1 [0105.262] GetFileType (hFile=0x94) returned 0x2 [0105.262] GetConsoleMode (in: hConsoleHandle=0x94, lpMode=0x22ef53c | out: lpMode=0x22ef53c) returned 1 [0105.265] WriteConsoleW (in: hConsoleOutput=0x94, lpBuffer=0x2312e4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x22ef548, lpReserved=0x0 | out: lpBuffer=0x2312e4*, lpNumberOfCharsWritten=0x22ef548*=0x2) returned 1 [0105.275] _ultow (in: _Dest=0x889, _Radix=36631952 | out: _Dest=0x889) returned="2185" [0105.276] FormatMessageW (in: dwFlags=0x2800, lpSource=0x23f0002, dwMessageId=0xdba, dwLanguageId=0x0, lpBuffer=0x257c20, nSize=0x800, Arguments=0x2573d0 | out: lpBuffer="More help is available by typing NET HELPMSG 2185.\r\n") returned 0x34 [0105.276] GetFileType (hFile=0x94) returned 0x2 [0105.276] GetConsoleMode (in: hConsoleHandle=0x94, lpMode=0x22ef560 | out: lpMode=0x22ef560) returned 1 [0105.288] WriteConsoleW (in: hConsoleOutput=0x94, lpBuffer=0x257c20*, nNumberOfCharsToWrite=0x34, lpNumberOfCharsWritten=0x22ef56c, lpReserved=0x0 | out: lpBuffer=0x257c20*, lpNumberOfCharsWritten=0x22ef56c*=0x34) returned 1 [0105.297] GetFileType (hFile=0x94) returned 0x2 [0105.297] GetConsoleMode (in: hConsoleHandle=0x94, lpMode=0x22ef560 | out: lpMode=0x22ef560) returned 1 [0105.305] WriteConsoleW (in: hConsoleOutput=0x94, lpBuffer=0x2312e4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x22ef56c, lpReserved=0x0 | out: lpBuffer=0x2312e4*, lpNumberOfCharsWritten=0x22ef56c*=0x2) returned 1 [0105.319] NetApiBufferFree (Buffer=0x26e8120) returned 0x0 [0105.319] NetApiBufferFree (Buffer=0x26e8150) returned 0x0 [0105.319] GetCommandLineW () returned="C:\\WINDOWS\\system32\\net1 stop MSSQLSERVER" [0105.319] exit (_Code=2) Thread: id = 105 os_tid = 0x1150 Process: id = "37" image_name = "cmd.exe" filename = "c:\\windows\\syswow64\\cmd.exe" page_root = "0x143b0000" os_pid = "0x118c" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x13d4" cmd_line = "C:\\WINDOWS\\system32\\cmd.exe /c net stop vds" cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000faa5" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 106 os_tid = 0x10c4 [0107.040] GetModuleHandleA (lpModuleName=0x0) returned 0x11d0000 [0107.041] __set_app_type (_Type=0x1) [0107.041] __p__fmode () returned 0x76953c14 [0107.041] __p__commode () returned 0x769549ec [0107.041] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x11e6fd0) returned 0x0 [0107.041] __getmainargs (in: _Argc=0x11fd1a4, _Argv=0x11fd1a8, _Env=0x11fd1ac, _DoWildCard=0, _StartInfo=0x11fd1b8 | out: _Argc=0x11fd1a4, _Argv=0x11fd1a8, _Env=0x11fd1ac) returned 0 [0107.041] _onexit (_Func=0x11e8030) returned 0x11e8030 [0107.041] _onexit (_Func=0x11e8040) returned 0x11e8040 [0107.042] _onexit (_Func=0x11e8050) returned 0x11e8050 [0107.042] _onexit (_Func=0x11e8060) returned 0x11e8060 [0107.042] _onexit (_Func=0x11e8070) returned 0x11e8070 [0107.043] _onexit (_Func=0x11e8080) returned 0x11e8080 [0107.043] GetCurrentThreadId () returned 0x10c4 [0107.043] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0x10c4) returned 0xbc [0107.043] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x74030000 [0107.043] GetProcAddress (hModule=0x74030000, lpProcName="SetThreadUILanguage") returned 0x74044f70 [0107.044] SetThreadUILanguage (LangId=0x0) returned 0xd80409 [0107.055] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0107.055] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0xeff7d8 | out: phkResult=0xeff7d8*=0x0) returned 0x2 [0107.056] VirtualQuery (in: lpAddress=0xeff7e3, lpBuffer=0xeff790, dwLength=0x1c | out: lpBuffer=0xeff790*(BaseAddress=0xeff000, AllocationBase=0xe00000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0107.056] VirtualQuery (in: lpAddress=0xe00000, lpBuffer=0xeff790, dwLength=0x1c | out: lpBuffer=0xeff790*(BaseAddress=0xe00000, AllocationBase=0xe00000, AllocationProtect=0x4, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000)) returned 0x1c [0107.056] VirtualQuery (in: lpAddress=0xe01000, lpBuffer=0xeff790, dwLength=0x1c | out: lpBuffer=0xeff790*(BaseAddress=0xe01000, AllocationBase=0xe00000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x104, Type=0x20000)) returned 0x1c [0107.056] VirtualQuery (in: lpAddress=0xe03000, lpBuffer=0xeff790, dwLength=0x1c | out: lpBuffer=0xeff790*(BaseAddress=0xe03000, AllocationBase=0xe00000, AllocationProtect=0x4, RegionSize=0xfd000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0107.056] VirtualQuery (in: lpAddress=0xf00000, lpBuffer=0xeff790, dwLength=0x1c | out: lpBuffer=0xeff790*(BaseAddress=0xf00000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x80000, State=0x10000, Protect=0x1, Type=0x0)) returned 0x1c [0107.056] GetConsoleOutputCP () returned 0x1b5 [0107.060] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x1203850 | out: lpCPInfo=0x1203850) returned 1 [0107.060] SetConsoleCtrlHandler (HandlerRoutine=0x11f7260, Add=1) returned 1 [0107.060] _get_osfhandle (_FileHandle=1) returned 0x90 [0107.060] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x120388c | out: lpMode=0x120388c) returned 1 [0107.061] _get_osfhandle (_FileHandle=0) returned 0x8c [0107.062] GetConsoleMode (in: hConsoleHandle=0x8c, lpMode=0x1203888 | out: lpMode=0x1203888) returned 1 [0107.062] _get_osfhandle (_FileHandle=1) returned 0x90 [0107.062] SetConsoleMode (hConsoleHandle=0x90, dwMode=0x0) returned 1 [0107.065] _get_osfhandle (_FileHandle=1) returned 0x90 [0107.065] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x1203890 | out: lpMode=0x1203890) returned 1 [0107.125] _get_osfhandle (_FileHandle=1) returned 0x90 [0107.125] SetConsoleMode (hConsoleHandle=0x90, dwMode=0x7) returned 1 [0107.140] _get_osfhandle (_FileHandle=0) returned 0x8c [0107.140] GetConsoleMode (in: hConsoleHandle=0x8c, lpMode=0x1203894 | out: lpMode=0x1203894) returned 1 [0107.202] _get_osfhandle (_FileHandle=0) returned 0x8c [0107.202] SetConsoleMode (hConsoleHandle=0x8c, dwMode=0x1e7) returned 1 [0107.223] GetEnvironmentStringsW () returned 0xf84db8* [0107.223] GetProcessHeap () returned 0xf80000 [0107.223] RtlAllocateHeap (HeapHandle=0xf80000, Flags=0x8, Size=0xaca) returned 0xf85890 [0107.223] FreeEnvironmentStringsA (penv="A") returned 1 [0107.223] GetProcessHeap () returned 0xf80000 [0107.223] RtlAllocateHeap (HeapHandle=0xf80000, Flags=0x8, Size=0x4) returned 0xf84898 [0107.223] GetEnvironmentStringsW () returned 0xf84db8* [0107.223] GetProcessHeap () returned 0xf80000 [0107.223] RtlAllocateHeap (HeapHandle=0xf80000, Flags=0x8, Size=0xaca) returned 0xf86368 [0107.223] FreeEnvironmentStringsA (penv="A") returned 1 [0107.223] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0xefe734 | out: phkResult=0xefe734*=0xcc) returned 0x0 [0107.224] RegQueryValueExW (in: hKey=0xcc, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0xefe73c, lpData=0xefe740, lpcbData=0xefe738*=0x1000 | out: lpType=0xefe73c*=0x0, lpData=0xefe740*=0x50, lpcbData=0xefe738*=0x1000) returned 0x2 [0107.224] RegQueryValueExW (in: hKey=0xcc, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0xefe73c, lpData=0xefe740, lpcbData=0xefe738*=0x1000 | out: lpType=0xefe73c*=0x4, lpData=0xefe740*=0x1, lpcbData=0xefe738*=0x4) returned 0x0 [0107.224] RegQueryValueExW (in: hKey=0xcc, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0xefe73c, lpData=0xefe740, lpcbData=0xefe738*=0x1000 | out: lpType=0xefe73c*=0x0, lpData=0xefe740*=0x1, lpcbData=0xefe738*=0x1000) returned 0x2 [0107.224] RegQueryValueExW (in: hKey=0xcc, lpValueName="DefaultColor", lpReserved=0x0, lpType=0xefe73c, lpData=0xefe740, lpcbData=0xefe738*=0x1000 | out: lpType=0xefe73c*=0x4, lpData=0xefe740*=0x0, lpcbData=0xefe738*=0x4) returned 0x0 [0107.224] RegQueryValueExW (in: hKey=0xcc, lpValueName="CompletionChar", lpReserved=0x0, lpType=0xefe73c, lpData=0xefe740, lpcbData=0xefe738*=0x1000 | out: lpType=0xefe73c*=0x4, lpData=0xefe740*=0x40, lpcbData=0xefe738*=0x4) returned 0x0 [0107.224] RegQueryValueExW (in: hKey=0xcc, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0xefe73c, lpData=0xefe740, lpcbData=0xefe738*=0x1000 | out: lpType=0xefe73c*=0x4, lpData=0xefe740*=0x40, lpcbData=0xefe738*=0x4) returned 0x0 [0107.224] RegQueryValueExW (in: hKey=0xcc, lpValueName="AutoRun", lpReserved=0x0, lpType=0xefe73c, lpData=0xefe740, lpcbData=0xefe738*=0x1000 | out: lpType=0xefe73c*=0x0, lpData=0xefe740*=0x40, lpcbData=0xefe738*=0x1000) returned 0x2 [0107.224] RegCloseKey (hKey=0xcc) returned 0x0 [0107.224] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0xefe734 | out: phkResult=0xefe734*=0xcc) returned 0x0 [0107.224] RegQueryValueExW (in: hKey=0xcc, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0xefe73c, lpData=0xefe740, lpcbData=0xefe738*=0x1000 | out: lpType=0xefe73c*=0x0, lpData=0xefe740*=0x40, lpcbData=0xefe738*=0x1000) returned 0x2 [0107.224] RegQueryValueExW (in: hKey=0xcc, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0xefe73c, lpData=0xefe740, lpcbData=0xefe738*=0x1000 | out: lpType=0xefe73c*=0x4, lpData=0xefe740*=0x1, lpcbData=0xefe738*=0x4) returned 0x0 [0107.224] RegQueryValueExW (in: hKey=0xcc, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0xefe73c, lpData=0xefe740, lpcbData=0xefe738*=0x1000 | out: lpType=0xefe73c*=0x0, lpData=0xefe740*=0x1, lpcbData=0xefe738*=0x1000) returned 0x2 [0107.224] RegQueryValueExW (in: hKey=0xcc, lpValueName="DefaultColor", lpReserved=0x0, lpType=0xefe73c, lpData=0xefe740, lpcbData=0xefe738*=0x1000 | out: lpType=0xefe73c*=0x4, lpData=0xefe740*=0x0, lpcbData=0xefe738*=0x4) returned 0x0 [0107.224] RegQueryValueExW (in: hKey=0xcc, lpValueName="CompletionChar", lpReserved=0x0, lpType=0xefe73c, lpData=0xefe740, lpcbData=0xefe738*=0x1000 | out: lpType=0xefe73c*=0x4, lpData=0xefe740*=0x9, lpcbData=0xefe738*=0x4) returned 0x0 [0107.224] RegQueryValueExW (in: hKey=0xcc, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0xefe73c, lpData=0xefe740, lpcbData=0xefe738*=0x1000 | out: lpType=0xefe73c*=0x4, lpData=0xefe740*=0x9, lpcbData=0xefe738*=0x4) returned 0x0 [0107.224] RegQueryValueExW (in: hKey=0xcc, lpValueName="AutoRun", lpReserved=0x0, lpType=0xefe73c, lpData=0xefe740, lpcbData=0xefe738*=0x1000 | out: lpType=0xefe73c*=0x0, lpData=0xefe740*=0x9, lpcbData=0xefe738*=0x1000) returned 0x2 [0107.224] RegCloseKey (hKey=0xcc) returned 0x0 [0107.225] time (in: timer=0x0 | out: timer=0x0) returned 0x5e3302e3 [0107.225] srand (_Seed=0x5e3302e3) [0107.225] GetCommandLineW () returned="C:\\WINDOWS\\system32\\cmd.exe /c net stop vds" [0107.225] malloc (_Size=0x4000) returned 0x3502700 [0107.225] GetCommandLineW () returned="C:\\WINDOWS\\system32\\cmd.exe /c net stop vds" [0107.226] malloc (_Size=0xffce) returned 0x3330048 [0107.227] ??_V@YAXPAX@Z () returned 0xeff718 [0107.227] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x3330048 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0107.227] malloc (_Size=0xffce) returned 0x3340020 [0107.228] ??_V@YAXPAX@Z () returned 0xeff4ec [0107.228] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x3340020, nSize=0x7fe7 | out: lpFilename="C:\\WINDOWS\\SysWOW64\\cmd.exe" (normalized: "c:\\windows\\syswow64\\cmd.exe")) returned 0x1b [0107.229] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x11ff840, nSize=0x2000 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath;C:\\WINDOWS\\system32;C:\\WINDOWS;C:\\WINDOWS\\System32\\Wbem;C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\;C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps") returned 0xbb [0107.229] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x11ff840, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0107.229] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x11ff840, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0107.229] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13 [0107.229] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11 [0107.229] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13 [0107.229] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13 [0107.229] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12 [0107.229] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4 [0107.229] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2 [0107.229] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8 [0107.229] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1 [0107.230] GetProcessHeap () returned 0xf80000 [0107.230] RtlFreeHeap (HeapHandle=0xf80000, Flags=0x0, BaseAddress=0xf85890) returned 1 [0107.230] GetEnvironmentStringsW () returned 0xf84db8* [0107.230] GetProcessHeap () returned 0xf80000 [0107.230] RtlAllocateHeap (HeapHandle=0xf80000, Flags=0x8, Size=0xae2) returned 0xf87930 [0107.230] FreeEnvironmentStringsA (penv="A") returned 1 [0107.230] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x11ff840, nSize=0x2000 | out: lpBuffer="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1b [0107.230] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x11ff840, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0107.230] _wcsicmp (_String1="KEYS", _String2="CD") returned 8 [0107.230] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6 [0107.230] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8 [0107.230] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8 [0107.230] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7 [0107.230] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9 [0107.230] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7 [0107.231] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3 [0107.231] malloc (_Size=0xffce) returned 0x334fff8 [0107.231] ??_V@YAXPAX@Z () returned 0xeff284 [0107.231] GetProcessHeap () returned 0xf80000 [0107.231] RtlAllocateHeap (HeapHandle=0xf80000, Flags=0x8, Size=0x38) returned 0xf80ae0 [0107.232] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x334fff8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0107.232] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x7fe7, lpBuffer=0x334fff8, lpFilePart=0xeff2d0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0xeff2d0*="Desktop") returned 0x17 [0107.232] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\Desktop" (normalized: "c:\\users\\fd1hvy\\desktop")) returned 0x11 [0107.233] FindFirstFileW (in: lpFileName="C:\\Users", lpFindFileData=0xeff050 | out: lpFindFileData=0xeff050*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x475bb883, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x475bb883, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 0xf80b20 [0107.233] FindClose (in: hFindFile=0xf80b20 | out: hFindFile=0xf80b20) returned 1 [0107.233] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy", lpFindFileData=0xeff050 | out: lpFindFileData=0xeff050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20fc850f, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x9de5855d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x9de5855d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD1HVy", cAlternateFileName="")) returned 0xf80b20 [0107.233] FindClose (in: hFindFile=0xf80b20 | out: hFindFile=0xf80b20) returned 1 [0107.233] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", lpFindFileData=0xeff050 | out: lpFindFileData=0xeff050*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x5de49bf6, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0x5de49bf6, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 0xf80b20 [0107.234] FindClose (in: hFindFile=0xf80b20 | out: hFindFile=0xf80b20) returned 1 [0107.234] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\Desktop" (normalized: "c:\\users\\fd1hvy\\desktop")) returned 0x11 [0107.234] SetCurrentDirectoryW (lpPathName="C:\\Users\\FD1HVy\\Desktop" (normalized: "c:\\users\\fd1hvy\\desktop")) returned 1 [0107.234] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Users\\FD1HVy\\Desktop") returned 1 [0107.234] GetProcessHeap () returned 0xf80000 [0107.234] RtlFreeHeap (HeapHandle=0xf80000, Flags=0x0, BaseAddress=0xf87930) returned 1 [0107.234] GetEnvironmentStringsW () returned 0xf84db8* [0107.234] GetProcessHeap () returned 0xf80000 [0107.234] RtlAllocateHeap (HeapHandle=0xf80000, Flags=0x8, Size=0xb1a) returned 0xf86e40 [0107.235] FreeEnvironmentStringsA (penv="=") returned 1 [0107.235] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x3330048 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0107.235] GetProcessHeap () returned 0xf80000 [0107.235] RtlFreeHeap (HeapHandle=0xf80000, Flags=0x0, BaseAddress=0xf80ae0) returned 1 [0107.235] ??_V@YAXPAX@Z () returned 0x1 [0107.235] ??_V@YAXPAX@Z () returned 0x1 [0107.235] GetProcessHeap () returned 0xf80000 [0107.235] RtlAllocateHeap (HeapHandle=0xf80000, Flags=0x8, Size=0x400e) returned 0xf88f48 [0107.236] GetProcessHeap () returned 0xf80000 [0107.236] RtlAllocateHeap (HeapHandle=0xf80000, Flags=0x8, Size=0x26) returned 0xf87968 [0107.236] GetProcessHeap () returned 0xf80000 [0107.236] RtlFreeHeap (HeapHandle=0xf80000, Flags=0x0, BaseAddress=0xf88f48) returned 1 [0107.236] GetConsoleOutputCP () returned 0x1b5 [0107.240] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x1203850 | out: lpCPInfo=0x1203850) returned 1 [0107.240] GetUserDefaultLCID () returned 0x409 [0107.240] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x11ff82c, cchData=8 | out: lpLCData=":") returned 2 [0107.241] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0xeff640, cchData=128 | out: lpLCData="0") returned 2 [0107.241] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0xeff640, cchData=128 | out: lpLCData="0") returned 2 [0107.241] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0xeff640, cchData=128 | out: lpLCData="1") returned 2 [0107.241] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x11ff81c, cchData=8 | out: lpLCData="/") returned 2 [0107.241] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x11ff7b8, cchData=32 | out: lpLCData="Mon") returned 4 [0107.241] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x11ff778, cchData=32 | out: lpLCData="Tue") returned 4 [0107.241] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x11ff738, cchData=32 | out: lpLCData="Wed") returned 4 [0107.241] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x11ff6f8, cchData=32 | out: lpLCData="Thu") returned 4 [0107.241] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x11ff6b8, cchData=32 | out: lpLCData="Fri") returned 4 [0107.241] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x11ff678, cchData=32 | out: lpLCData="Sat") returned 4 [0107.241] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x11ff638, cchData=32 | out: lpLCData="Sun") returned 4 [0107.241] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x11ff80c, cchData=8 | out: lpLCData=".") returned 2 [0107.241] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x11ff7f8, cchData=8 | out: lpLCData=",") returned 2 [0107.241] setlocale (category=0, locale=".OCP") returned="English_United States.437" [0107.244] GetProcessHeap () returned 0xf80000 [0107.245] RtlAllocateHeap (HeapHandle=0xf80000, Flags=0x0, Size=0x20c) returned 0xf879e0 [0107.245] GetConsoleTitleW (in: lpConsoleTitle=0xf879e0, nSize=0x104 | out: lpConsoleTitle="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1c [0107.259] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x74030000 [0107.259] GetProcAddress (hModule=0x74030000, lpProcName="CopyFileExW") returned 0x74044330 [0107.259] GetProcAddress (hModule=0x74030000, lpProcName="IsDebuggerPresent") returned 0x74045930 [0107.259] GetProcAddress (hModule=0x74030000, lpProcName="SetConsoleInputExeNameW") returned 0x772c09d0 [0107.259] ??_V@YAXPAX@Z () returned 0x1 [0107.261] GetProcessHeap () returned 0xf80000 [0107.261] RtlAllocateHeap (HeapHandle=0xf80000, Flags=0x8, Size=0x400a) returned 0xf88f48 [0107.261] GetProcessHeap () returned 0xf80000 [0107.261] RtlFreeHeap (HeapHandle=0xf80000, Flags=0x0, BaseAddress=0xf88f48) returned 1 [0107.262] _wcsicmp (_String1="net", _String2=")") returned 69 [0107.262] _wcsicmp (_String1="FOR", _String2="net") returned -8 [0107.262] _wcsicmp (_String1="FOR/?", _String2="net") returned -8 [0107.262] _wcsicmp (_String1="IF", _String2="net") returned -5 [0107.262] _wcsicmp (_String1="IF/?", _String2="net") returned -5 [0107.262] _wcsicmp (_String1="REM", _String2="net") returned 4 [0107.262] _wcsicmp (_String1="REM/?", _String2="net") returned 4 [0107.262] GetProcessHeap () returned 0xf80000 [0107.262] RtlAllocateHeap (HeapHandle=0xf80000, Flags=0x8, Size=0x58) returned 0xf87bf8 [0107.263] GetProcessHeap () returned 0xf80000 [0107.263] RtlAllocateHeap (HeapHandle=0xf80000, Flags=0x8, Size=0x10) returned 0xf87c58 [0107.263] GetProcessHeap () returned 0xf80000 [0107.263] RtlAllocateHeap (HeapHandle=0xf80000, Flags=0x8, Size=0x1c) returned 0xf87c70 [0107.265] GetConsoleTitleW (in: lpConsoleTitle=0xeff538, nSize=0x104 | out: lpConsoleTitle="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1c [0107.277] malloc (_Size=0xffce) returned 0x3342aa0 [0107.278] ??_V@YAXPAX@Z () returned 0xeff2c4 [0107.278] malloc (_Size=0xffce) returned 0x3352a78 [0107.279] ??_V@YAXPAX@Z () returned 0xeff07c [0107.280] _wcsicmp (_String1="net", _String2="DIR") returned 10 [0107.280] _wcsicmp (_String1="net", _String2="ERASE") returned 9 [0107.280] _wcsicmp (_String1="net", _String2="DEL") returned 10 [0107.280] _wcsicmp (_String1="net", _String2="TYPE") returned -6 [0107.280] _wcsicmp (_String1="net", _String2="COPY") returned 11 [0107.280] _wcsicmp (_String1="net", _String2="CD") returned 11 [0107.280] _wcsicmp (_String1="net", _String2="CHDIR") returned 11 [0107.280] _wcsicmp (_String1="net", _String2="RENAME") returned -4 [0107.280] _wcsicmp (_String1="net", _String2="REN") returned -4 [0107.280] _wcsicmp (_String1="net", _String2="ECHO") returned 9 [0107.280] _wcsicmp (_String1="net", _String2="SET") returned -5 [0107.280] _wcsicmp (_String1="net", _String2="PAUSE") returned -2 [0107.280] _wcsicmp (_String1="net", _String2="DATE") returned 10 [0107.280] _wcsicmp (_String1="net", _String2="TIME") returned -6 [0107.280] _wcsicmp (_String1="net", _String2="PROMPT") returned -2 [0107.280] _wcsicmp (_String1="net", _String2="MD") returned 1 [0107.281] _wcsicmp (_String1="net", _String2="MKDIR") returned 1 [0107.281] _wcsicmp (_String1="net", _String2="RD") returned -4 [0107.281] _wcsicmp (_String1="net", _String2="RMDIR") returned -4 [0107.281] _wcsicmp (_String1="net", _String2="PATH") returned -2 [0107.281] _wcsicmp (_String1="net", _String2="GOTO") returned 7 [0107.281] _wcsicmp (_String1="net", _String2="SHIFT") returned -5 [0107.281] _wcsicmp (_String1="net", _String2="CLS") returned 11 [0107.281] _wcsicmp (_String1="net", _String2="CALL") returned 11 [0107.281] _wcsicmp (_String1="net", _String2="VERIFY") returned -8 [0107.281] _wcsicmp (_String1="net", _String2="VER") returned -8 [0107.281] _wcsicmp (_String1="net", _String2="VOL") returned -8 [0107.281] _wcsicmp (_String1="net", _String2="EXIT") returned 9 [0107.281] _wcsicmp (_String1="net", _String2="SETLOCAL") returned -5 [0107.281] _wcsicmp (_String1="net", _String2="ENDLOCAL") returned 9 [0107.281] _wcsicmp (_String1="net", _String2="TITLE") returned -6 [0107.281] _wcsicmp (_String1="net", _String2="START") returned -5 [0107.281] _wcsicmp (_String1="net", _String2="DPATH") returned 10 [0107.281] _wcsicmp (_String1="net", _String2="KEYS") returned 3 [0107.281] _wcsicmp (_String1="net", _String2="MOVE") returned 1 [0107.281] _wcsicmp (_String1="net", _String2="PUSHD") returned -2 [0107.282] _wcsicmp (_String1="net", _String2="POPD") returned -2 [0107.282] _wcsicmp (_String1="net", _String2="ASSOC") returned 13 [0107.282] _wcsicmp (_String1="net", _String2="FTYPE") returned 8 [0107.282] _wcsicmp (_String1="net", _String2="BREAK") returned 12 [0107.282] _wcsicmp (_String1="net", _String2="COLOR") returned 11 [0107.282] _wcsicmp (_String1="net", _String2="MKLINK") returned 1 [0107.282] _wcsicmp (_String1="net", _String2="DIR") returned 10 [0107.282] _wcsicmp (_String1="net", _String2="ERASE") returned 9 [0107.282] _wcsicmp (_String1="net", _String2="DEL") returned 10 [0107.282] _wcsicmp (_String1="net", _String2="TYPE") returned -6 [0107.282] _wcsicmp (_String1="net", _String2="COPY") returned 11 [0107.282] _wcsicmp (_String1="net", _String2="CD") returned 11 [0107.282] _wcsicmp (_String1="net", _String2="CHDIR") returned 11 [0107.282] _wcsicmp (_String1="net", _String2="RENAME") returned -4 [0107.282] _wcsicmp (_String1="net", _String2="REN") returned -4 [0107.282] _wcsicmp (_String1="net", _String2="ECHO") returned 9 [0107.282] _wcsicmp (_String1="net", _String2="SET") returned -5 [0107.282] _wcsicmp (_String1="net", _String2="PAUSE") returned -2 [0107.282] _wcsicmp (_String1="net", _String2="DATE") returned 10 [0107.282] _wcsicmp (_String1="net", _String2="TIME") returned -6 [0107.282] _wcsicmp (_String1="net", _String2="PROMPT") returned -2 [0107.282] _wcsicmp (_String1="net", _String2="MD") returned 1 [0107.283] _wcsicmp (_String1="net", _String2="MKDIR") returned 1 [0107.283] _wcsicmp (_String1="net", _String2="RD") returned -4 [0107.283] _wcsicmp (_String1="net", _String2="RMDIR") returned -4 [0107.283] _wcsicmp (_String1="net", _String2="PATH") returned -2 [0107.283] _wcsicmp (_String1="net", _String2="GOTO") returned 7 [0107.283] _wcsicmp (_String1="net", _String2="SHIFT") returned -5 [0107.283] _wcsicmp (_String1="net", _String2="CLS") returned 11 [0107.283] _wcsicmp (_String1="net", _String2="CALL") returned 11 [0107.283] _wcsicmp (_String1="net", _String2="VERIFY") returned -8 [0107.283] _wcsicmp (_String1="net", _String2="VER") returned -8 [0107.283] _wcsicmp (_String1="net", _String2="VOL") returned -8 [0107.283] _wcsicmp (_String1="net", _String2="EXIT") returned 9 [0107.283] _wcsicmp (_String1="net", _String2="SETLOCAL") returned -5 [0107.283] _wcsicmp (_String1="net", _String2="ENDLOCAL") returned 9 [0107.283] _wcsicmp (_String1="net", _String2="TITLE") returned -6 [0107.283] _wcsicmp (_String1="net", _String2="START") returned -5 [0107.284] _wcsicmp (_String1="net", _String2="DPATH") returned 10 [0107.284] _wcsicmp (_String1="net", _String2="KEYS") returned 3 [0107.284] _wcsicmp (_String1="net", _String2="MOVE") returned 1 [0107.284] _wcsicmp (_String1="net", _String2="PUSHD") returned -2 [0107.284] _wcsicmp (_String1="net", _String2="POPD") returned -2 [0107.284] _wcsicmp (_String1="net", _String2="ASSOC") returned 13 [0107.285] _wcsicmp (_String1="net", _String2="FTYPE") returned 8 [0107.285] _wcsicmp (_String1="net", _String2="BREAK") returned 12 [0107.285] _wcsicmp (_String1="net", _String2="COLOR") returned 11 [0107.285] _wcsicmp (_String1="net", _String2="MKLINK") returned 1 [0107.285] _wcsicmp (_String1="net", _String2="FOR") returned 8 [0107.285] _wcsicmp (_String1="net", _String2="IF") returned 5 [0107.285] _wcsicmp (_String1="net", _String2="REM") returned -4 [0107.285] ??_V@YAXPAX@Z () returned 0x1 [0107.285] GetProcessHeap () returned 0xf80000 [0107.286] RtlAllocateHeap (HeapHandle=0xf80000, Flags=0x8, Size=0xffd6) returned 0xf88f48 [0107.287] GetProcessHeap () returned 0xf80000 [0107.287] RtlAllocateHeap (HeapHandle=0xf80000, Flags=0x8, Size=0x24) returned 0xf87c98 [0107.287] _wcsnicmp (_String1="net", _String2="cmd ", _MaxCount=0x4) returned 11 [0107.287] malloc (_Size=0xffce) returned 0x3352a78 [0107.287] ??_V@YAXPAX@Z () returned 0xefedfc [0107.287] GetProcessHeap () returned 0xf80000 [0107.288] RtlAllocateHeap (HeapHandle=0xf80000, Flags=0x8, Size=0x1ffa4) returned 0xf98f28 [0107.290] SetErrorMode (uMode=0x0) returned 0x0 [0107.290] SetErrorMode (uMode=0x1) returned 0x0 [0107.290] GetFullPathNameW (in: lpFileName=".", nBufferLength=0xffce, lpBuffer=0xf98f30, lpFilePart=0xefee1c | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0xefee1c*="Desktop") returned 0x17 [0107.290] SetErrorMode (uMode=0x0) returned 0x1 [0107.290] GetProcessHeap () returned 0xf80000 [0107.290] RtlReAllocateHeap (Heap=0xf80000, Flags=0x0, Ptr=0xf98f28, Size=0x40) returned 0xf98f28 [0107.290] GetProcessHeap () returned 0xf80000 [0107.290] RtlSizeHeap (HeapHandle=0xf80000, Flags=0x0, MemoryPointer=0xf98f28) returned 0x40 [0107.290] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x11ff840, nSize=0x2000 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath;C:\\WINDOWS\\system32;C:\\WINDOWS;C:\\WINDOWS\\System32\\Wbem;C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\;C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps") returned 0xbb [0107.290] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1 [0107.291] GetProcessHeap () returned 0xf80000 [0107.291] RtlAllocateHeap (HeapHandle=0xf80000, Flags=0x8, Size=0x1b4) returned 0xf87cc8 [0107.291] GetProcessHeap () returned 0xf80000 [0107.291] RtlAllocateHeap (HeapHandle=0xf80000, Flags=0x8, Size=0x360) returned 0xf87e88 [0107.390] GetProcessHeap () returned 0xf80000 [0107.390] RtlReAllocateHeap (Heap=0xf80000, Flags=0x0, Ptr=0xf87e88, Size=0x1b6) returned 0xf87e88 [0107.390] GetProcessHeap () returned 0xf80000 [0107.390] RtlSizeHeap (HeapHandle=0xf80000, Flags=0x0, MemoryPointer=0xf87e88) returned 0x1b6 [0107.390] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x11ff840, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0107.390] GetProcessHeap () returned 0xf80000 [0107.390] RtlAllocateHeap (HeapHandle=0xf80000, Flags=0x8, Size=0xe0) returned 0xf88048 [0107.390] GetProcessHeap () returned 0xf80000 [0107.390] RtlReAllocateHeap (Heap=0xf80000, Flags=0x0, Ptr=0xf88048, Size=0x76) returned 0xf88048 [0107.390] GetProcessHeap () returned 0xf80000 [0107.390] RtlSizeHeap (HeapHandle=0xf80000, Flags=0x0, MemoryPointer=0xf88048) returned 0x76 [0107.390] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0107.391] FindFirstFileExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\net.*", fInfoLevelId=0x1, lpFindFileData=0xefeba8, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0xefeba8) returned 0xffffffff [0107.391] GetLastError () returned 0x2 [0107.391] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0107.391] FindFirstFileExW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\net.*", fInfoLevelId=0x1, lpFindFileData=0xefeba8, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0xefeba8) returned 0xffffffff [0107.391] GetLastError () returned 0x2 [0107.391] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0107.392] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\system32\\net.*", fInfoLevelId=0x1, lpFindFileData=0xefeba8, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0xefeba8) returned 0xf880c8 [0107.392] GetProcessHeap () returned 0xf80000 [0107.392] RtlAllocateHeap (HeapHandle=0xf80000, Flags=0x0, Size=0x14) returned 0xf88108 [0107.392] FindClose (in: hFindFile=0xf880c8 | out: hFindFile=0xf880c8) returned 1 [0107.392] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\system32\\net.COM", fInfoLevelId=0x1, lpFindFileData=0xefeba8, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0xefeba8) returned 0xffffffff [0107.392] GetLastError () returned 0x2 [0107.392] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\system32\\net.EXE", fInfoLevelId=0x1, lpFindFileData=0xefeba8, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0xefeba8) returned 0xf880c8 [0107.392] GetProcessHeap () returned 0xf80000 [0107.392] RtlReAllocateHeap (Heap=0xf80000, Flags=0x0, Ptr=0xf88108, Size=0x4) returned 0xf88108 [0107.393] FindClose (in: hFindFile=0xf880c8 | out: hFindFile=0xf880c8) returned 1 [0107.393] _wcsicmp (_String1=".EXE", _String2=".BAT") returned 3 [0107.393] _wcsicmp (_String1=".EXE", _String2=".CMD") returned 2 [0107.393] ??_V@YAXPAX@Z () returned 0x1 [0107.393] GetConsoleTitleW (in: lpConsoleTitle=0xeff0ac, nSize=0x104 | out: lpConsoleTitle="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1c [0107.406] InitializeProcThreadAttributeList (in: lpAttributeList=0xefefd8, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0xefefc4 | out: lpAttributeList=0xefefd8, lpSize=0xefefc4) returned 1 [0107.406] UpdateProcThreadAttribute (in: lpAttributeList=0xefefd8, dwFlags=0x0, Attribute=0x60001, lpValue=0xefefc0, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0xefefd8, lpPreviousValue=0x0) returned 1 [0107.406] GetStartupInfoW (in: lpStartupInfo=0xeff010 | out: lpStartupInfo=0xeff010*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\WINDOWS\\system32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x144, lpReserved2=0xf81b4e, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) [0107.406] GetProcessHeap () returned 0xf80000 [0107.406] RtlAllocateHeap (HeapHandle=0xf80000, Flags=0x8, Size=0x18) returned 0xf880c8 [0107.406] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38 [0107.406] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2 [0107.406] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2 [0107.406] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0107.406] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0107.406] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0107.406] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3 [0107.407] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3 [0107.407] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5 [0107.407] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5 [0107.407] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9 [0107.407] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9 [0107.407] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11 [0107.407] _wcsnicmp (_String1="COPYCMD", _String2="OneDriv", _MaxCount=0x7) returned -12 [0107.407] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12 [0107.407] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13 [0107.407] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13 [0107.407] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0107.407] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0107.407] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0107.407] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0107.407] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0107.407] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0107.407] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0107.407] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0107.407] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0107.407] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13 [0107.407] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13 [0107.408] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13 [0107.408] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16 [0107.408] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16 [0107.408] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17 [0107.408] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17 [0107.408] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18 [0107.408] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18 [0107.408] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18 [0107.408] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18 [0107.408] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20 [0107.408] GetProcessHeap () returned 0xf80000 [0107.408] RtlFreeHeap (HeapHandle=0xf80000, Flags=0x0, BaseAddress=0xf880c8) returned 1 [0107.408] GetProcessHeap () returned 0xf80000 [0107.408] RtlAllocateHeap (HeapHandle=0xf80000, Flags=0x8, Size=0xa) returned 0xf880c8 [0107.408] lstrcmpW (lpString1="\\net.exe", lpString2="\\XCOPY.EXE") returned -1 [0107.411] _get_osfhandle (_FileHandle=1) returned 0x90 [0107.411] SetConsoleMode (hConsoleHandle=0x90, dwMode=0x3) returned 1 [0107.427] _get_osfhandle (_FileHandle=0) returned 0x8c [0107.427] SetConsoleMode (hConsoleHandle=0x8c, dwMode=0x1f7) returned 1 [0107.430] CreateProcessW (in: lpApplicationName="C:\\WINDOWS\\system32\\net.exe", lpCommandLine="net stop vds", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\FD1HVy\\Desktop", lpStartupInfo=0xefef60*(cb=0x48, lpReserved=0x0, lpDesktop="WinSta0\\Default", lpTitle="net stop vds", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0xefefac | out: lpCommandLine="net stop vds", lpProcessInformation=0xefefac*(hProcess=0xe0, hThread=0xdc, dwProcessId=0xfcc, dwThreadId=0xa54)) returned 1 [0107.461] CloseHandle (hObject=0xdc) returned 1 [0107.462] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1 [0107.462] GetProcessHeap () returned 0xf80000 [0107.462] RtlFreeHeap (HeapHandle=0xf80000, Flags=0x0, BaseAddress=0xf86e40) returned 1 [0107.462] GetEnvironmentStringsW () returned 0xf86e40* [0107.462] GetProcessHeap () returned 0xf80000 [0107.462] RtlAllocateHeap (HeapHandle=0xf80000, Flags=0x8, Size=0xb1a) returned 0xf84db8 [0107.462] FreeEnvironmentStringsA (penv="=") returned 1 [0107.462] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0xffffffff) returned 0x0 [0108.663] GetExitCodeProcess (in: hProcess=0xe0, lpExitCode=0xefef44 | out: lpExitCode=0xefef44*=0x2) returned 1 [0108.664] CloseHandle (hObject=0xe0) returned 1 [0108.664] _vsnwprintf (in: _Buffer=0xeff02c, _BufferCount=0x13, _Format="%08X", _ArgList=0xefef4c | out: _Buffer="00000002") returned 8 [0108.664] SetEnvironmentVariableW (lpName="=ExitCode", lpValue="00000002") returned 1 [0108.665] GetProcessHeap () returned 0xf80000 [0108.665] RtlFreeHeap (HeapHandle=0xf80000, Flags=0x0, BaseAddress=0xf84db8) returned 1 [0108.665] GetEnvironmentStringsW () returned 0xf883f8* [0108.666] GetProcessHeap () returned 0xf80000 [0108.666] RtlAllocateHeap (HeapHandle=0xf80000, Flags=0x8, Size=0xb40) returned 0xf84db8 [0108.666] FreeEnvironmentStringsA (penv="=") returned 1 [0108.666] SetEnvironmentVariableW (lpName="=ExitCodeAscii", lpValue=0x0) returned 1 [0108.666] GetProcessHeap () returned 0xf80000 [0108.666] RtlFreeHeap (HeapHandle=0xf80000, Flags=0x0, BaseAddress=0xf84db8) returned 1 [0108.666] GetEnvironmentStringsW () returned 0xf883f8* [0108.666] GetProcessHeap () returned 0xf80000 [0108.666] RtlAllocateHeap (HeapHandle=0xf80000, Flags=0x8, Size=0xb40) returned 0xf84db8 [0108.666] FreeEnvironmentStringsA (penv="=") returned 1 [0108.666] GetProcessHeap () returned 0xf80000 [0108.666] RtlFreeHeap (HeapHandle=0xf80000, Flags=0x0, BaseAddress=0xf880c8) returned 1 [0108.666] DeleteProcThreadAttributeList (in: lpAttributeList=0xefefd8 | out: lpAttributeList=0xefefd8) [0108.666] ??_V@YAXPAX@Z () returned 0x1 [0108.666] _get_osfhandle (_FileHandle=1) returned 0x90 [0108.666] SetConsoleMode (hConsoleHandle=0x90, dwMode=0x3) returned 1 [0108.669] _get_osfhandle (_FileHandle=1) returned 0x90 [0108.669] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x1203890 | out: lpMode=0x1203890) returned 1 [0108.673] _get_osfhandle (_FileHandle=1) returned 0x90 [0108.673] SetConsoleMode (hConsoleHandle=0x90, dwMode=0x7) returned 1 [0108.680] _get_osfhandle (_FileHandle=0) returned 0x8c [0108.680] GetConsoleMode (in: hConsoleHandle=0x8c, lpMode=0x1203894 | out: lpMode=0x1203894) returned 1 [0108.685] _get_osfhandle (_FileHandle=0) returned 0x8c [0108.685] SetConsoleMode (hConsoleHandle=0x8c, dwMode=0x1e7) returned 1 [0108.690] SetConsoleInputExeNameW () returned 0x1 [0108.690] GetConsoleOutputCP () returned 0x1b5 [0108.697] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x1203850 | out: lpCPInfo=0x1203850) returned 1 [0108.697] SetThreadUILanguage (LangId=0x0) returned 0xd80409 [0108.700] exit (_Code=2) [0108.700] ??_V@YAXPAX@Z () returned 0x1 Thread: id = 112 os_tid = 0x1344 Process: id = "38" image_name = "conhost.exe" filename = "c:\\windows\\system32\\conhost.exe" page_root = "0xd268000" os_pid = "0x13ec" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "37" os_parent_pid = "0x118c" cmd_line = "\\??\\C:\\WINDOWS\\system32\\conhost.exe 0xffffffff -ForceV1" cur_dir = "C:\\WINDOWS" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000faa5" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 107 os_tid = 0x7c0 Thread: id = 108 os_tid = 0x133c Thread: id = 109 os_tid = 0x1330 Thread: id = 110 os_tid = 0x1348 Thread: id = 111 os_tid = 0x1350 Process: id = "39" image_name = "net.exe" filename = "c:\\windows\\syswow64\\net.exe" page_root = "0x10f00000" os_pid = "0xfcc" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "37" os_parent_pid = "0x118c" cmd_line = "net stop vds" cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000faa5" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 113 os_tid = 0xa54 Thread: id = 114 os_tid = 0x12ec Process: id = "40" image_name = "net1.exe" filename = "c:\\windows\\syswow64\\net1.exe" page_root = "0x6030000" os_pid = "0xb14" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "39" os_parent_pid = "0xfcc" cmd_line = "C:\\WINDOWS\\system32\\net1 stop vds" cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000faa5" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 115 os_tid = 0xaa8 [0108.222] GetModuleHandleA (lpModuleName=0x0) returned 0x230000 [0108.223] __set_app_type (_Type=0x1) [0108.223] __p__fmode () returned 0x76953c14 [0108.223] __p__commode () returned 0x769549ec [0108.223] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x236f20) returned 0x0 [0108.223] __getmainargs (in: _Argc=0x24f608, _Argv=0x24f60c, _Env=0x24f610, _DoWildCard=0, _StartInfo=0x24f61c | out: _Argc=0x24f608, _Argv=0x24f60c, _Env=0x24f610) returned 0 [0108.223] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0108.224] GetConsoleOutputCP () returned 0x1b5 [0108.229] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x256fa0 | out: lpCPInfo=0x256fa0) returned 1 [0108.229] SetThreadUILanguage (LangId=0x0) returned 0x31e0409 [0108.253] sprintf_s (in: _DstBuf=0x2f8fa2c, _DstSize=0xc, _Format=".%u" | out: _DstBuf=".437") returned 4 [0108.253] setlocale (category=0, locale=".437") returned="English_United States.437" [0108.258] GetStdHandle (nStdHandle=0xfffffff5) returned 0x90 [0108.258] GetStdHandle (nStdHandle=0xfffffff4) returned 0x94 [0108.258] GetCommandLineW () returned="C:\\WINDOWS\\system32\\net1 stop vds" [0108.258] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x2f8f7d4, nSize=0x104 | out: lpFilename="C:\\WINDOWS\\SysWOW64\\net1.exe" (normalized: "c:\\windows\\syswow64\\net1.exe")) returned 0x1c [0108.259] RtlAllocateHeap (HeapHandle=0x3560000, Flags=0x0, Size=0x50) returned 0x3563e40 [0108.259] NetApiBufferAllocate (in: ByteCount=0x10, Buffer=0x2f8f7d0 | out: Buffer=0x2f8f7d0*=0x3567dc8) returned 0x0 [0108.259] NetApiBufferAllocate (in: ByteCount=0x10, Buffer=0x2f8f7cc | out: Buffer=0x2f8f7cc*=0x356db48) returned 0x0 [0108.259] __iob_func () returned 0x76952608 [0108.259] _fileno (_File=0x76952608) returned 0 [0108.259] _setmode (_FileHandle=0, _Mode=16384) returned 16384 [0108.259] _wcsicmp (_String1="accounts", _String2="stop") returned -18 [0108.259] _wcsicmp (_String1="computer", _String2="stop") returned -16 [0108.259] _wcsicmp (_String1="config", _String2="stop") returned -16 [0108.259] _wcsicmp (_String1="continue", _String2="stop") returned -16 [0108.259] _wcsicmp (_String1="cont", _String2="stop") returned -16 [0108.259] _wcsicmp (_String1="file", _String2="stop") returned -13 [0108.260] _wcsicmp (_String1="files", _String2="stop") returned -13 [0108.260] _wcsicmp (_String1="group", _String2="stop") returned -12 [0108.260] _wcsicmp (_String1="groups", _String2="stop") returned -12 [0108.260] _wcsicmp (_String1="help", _String2="stop") returned -11 [0108.260] _wcsicmp (_String1="helpmsg", _String2="stop") returned -11 [0108.260] _wcsicmp (_String1="localgroup", _String2="stop") returned -7 [0108.260] _wcsicmp (_String1="pause", _String2="stop") returned -3 [0108.260] _wcsicmp (_String1="session", _String2="stop") returned -15 [0108.260] _wcsicmp (_String1="sessions", _String2="stop") returned -15 [0108.260] _wcsicmp (_String1=0x231ffc, _String2="stop") returned -15 [0108.260] _wcsicmp (_String1="share", _String2="stop") returned -12 [0108.260] _wcsicmp (_String1="start", _String2="stop") returned -14 [0108.260] _wcsicmp (_String1="stats", _String2="stop") returned -14 [0108.260] _wcsicmp (_String1="statistics", _String2="stop") returned -14 [0108.261] _wcsicmp (_String1="stop", _String2="stop") returned 0 [0108.261] _wcsicmp (_String1="accounts", _String2="vds") returned -21 [0108.261] _wcsicmp (_String1="computer", _String2="vds") returned -19 [0108.261] _wcsicmp (_String1="config", _String2="vds") returned -19 [0108.261] _wcsicmp (_String1="continue", _String2="vds") returned -19 [0108.261] _wcsicmp (_String1="cont", _String2="vds") returned -19 [0108.261] _wcsicmp (_String1="file", _String2="vds") returned -16 [0108.261] _wcsicmp (_String1="files", _String2="vds") returned -16 [0108.261] _wcsicmp (_String1="group", _String2="vds") returned -15 [0108.261] _wcsicmp (_String1="groups", _String2="vds") returned -15 [0108.261] _wcsicmp (_String1="help", _String2="vds") returned -14 [0108.261] _wcsicmp (_String1="helpmsg", _String2="vds") returned -14 [0108.261] _wcsicmp (_String1="localgroup", _String2="vds") returned -10 [0108.261] _wcsicmp (_String1="pause", _String2="vds") returned -6 [0108.261] _wcsicmp (_String1="session", _String2="vds") returned -3 [0108.262] _wcsicmp (_String1="sessions", _String2="vds") returned -3 [0108.262] _wcsicmp (_String1="sess", _String2="vds") returned -3 [0108.262] _wcsicmp (_String1="share", _String2="vds") returned -3 [0108.262] _wcsicmp (_String1="start", _String2="vds") returned -3 [0108.262] _wcsicmp (_String1="stats", _String2="vds") returned -3 [0108.262] _wcsicmp (_String1="statistics", _String2="vds") returned -3 [0108.262] _wcsicmp (_String1="stop", _String2="vds") returned -3 [0108.262] _wcsicmp (_String1="time", _String2="vds") returned -2 [0108.262] _wcsicmp (_String1="user", _String2="vds") returned -1 [0108.262] _wcsicmp (_String1="users", _String2="vds") returned -1 [0108.262] _wcsicmp (_String1="msg", _String2="vds") returned -9 [0108.262] _wcsicmp (_String1="messenger", _String2="vds") returned -9 [0108.262] _wcsicmp (_String1="receiver", _String2="vds") returned -4 [0108.262] _wcsicmp (_String1="rcv", _String2="vds") returned -4 [0108.262] _wcsicmp (_String1="netpopup", _String2="vds") returned -8 [0108.262] _wcsicmp (_String1="redirector", _String2="vds") returned -4 [0108.263] _wcsicmp (_String1="redir", _String2="vds") returned -4 [0108.263] _wcsicmp (_String1="rdr", _String2="vds") returned -4 [0108.263] _wcsicmp (_String1="workstation", _String2="vds") returned 1 [0108.263] _wcsicmp (_String1="work", _String2="vds") returned 1 [0108.263] _wcsicmp (_String1="wksta", _String2="vds") returned 1 [0108.263] _wcsicmp (_String1="prdr", _String2="vds") returned -6 [0108.263] _wcsicmp (_String1="devrdr", _String2="vds") returned -18 [0108.263] _wcsicmp (_String1="lanmanworkstation", _String2="vds") returned -10 [0108.263] _wcsicmp (_String1="server", _String2="vds") returned -3 [0108.263] _wcsicmp (_String1="svr", _String2="vds") returned -3 [0108.263] _wcsicmp (_String1="srv", _String2="vds") returned -3 [0108.263] _wcsicmp (_String1="lanmanserver", _String2="vds") returned -10 [0108.263] _wcsicmp (_String1="alerter", _String2="vds") returned -21 [0108.263] _wcsicmp (_String1="netlogon", _String2="vds") returned -8 [0108.264] _wcsupr (in: _String="vds" | out: _String="VDS") returned="VDS" [0108.264] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x80000000) returned 0x3562e18 [0108.270] GetServiceKeyNameW (in: hSCManager=0x3562e18, lpDisplayName="VDS", lpServiceName=0x258c28, lpcchBuffer=0x2f8f744 | out: lpServiceName="", lpcchBuffer=0x2f8f744) returned 0 [0108.271] _wcsicmp (_String1="msg", _String2="VDS") returned -9 [0108.271] _wcsicmp (_String1="messenger", _String2="VDS") returned -9 [0108.271] _wcsicmp (_String1="receiver", _String2="VDS") returned -4 [0108.271] _wcsicmp (_String1="rcv", _String2="VDS") returned -4 [0108.271] _wcsicmp (_String1="redirector", _String2="VDS") returned -4 [0108.271] _wcsicmp (_String1="redir", _String2="VDS") returned -4 [0108.271] _wcsicmp (_String1="rdr", _String2="VDS") returned -4 [0108.271] _wcsicmp (_String1="workstation", _String2="VDS") returned 1 [0108.271] _wcsicmp (_String1="work", _String2="VDS") returned 1 [0108.271] _wcsicmp (_String1="wksta", _String2="VDS") returned 1 [0108.271] _wcsicmp (_String1="prdr", _String2="VDS") returned -6 [0108.271] _wcsicmp (_String1="devrdr", _String2="VDS") returned -18 [0108.271] _wcsicmp (_String1="lanmanworkstation", _String2="VDS") returned -10 [0108.271] _wcsicmp (_String1="server", _String2="VDS") returned -3 [0108.271] _wcsicmp (_String1="svr", _String2="VDS") returned -3 [0108.272] _wcsicmp (_String1="srv", _String2="VDS") returned -3 [0108.272] _wcsicmp (_String1="lanmanserver", _String2="VDS") returned -10 [0108.272] _wcsicmp (_String1="alerter", _String2="VDS") returned -21 [0108.272] _wcsicmp (_String1="netlogon", _String2="VDS") returned -8 [0108.272] _wcsicmp (_String1="VDS", _String2="WORKSTATION") returned -1 [0108.272] _wcsicmp (_String1="VDS", _String2="LanmanWorkstation") returned 10 [0108.272] _wcsicmp (_String1="VDS", _String2="SERVER") returned 3 [0108.272] _wcsicmp (_String1="VDS", _String2="LanmanServer") returned 10 [0108.272] _wcsicmp (_String1="VDS", _String2="BROWSER") returned 20 [0108.272] _wcsicmp (_String1="VDS", _String2="BROWSER") returned 20 [0108.272] _wcsicmp (_String1="VDS", _String2="MESSENGER") returned 9 [0108.272] _wcsicmp (_String1="VDS", _String2="MESSENGER") returned 9 [0108.272] _wcsicmp (_String1="VDS", _String2="NETRUN") returned 8 [0108.272] _wcsicmp (_String1="VDS", _String2="NETRUN") returned 8 [0108.272] _wcsicmp (_String1="VDS", _String2="SPOOLER") returned 3 [0108.272] _wcsicmp (_String1="VDS", _String2="SPOOLER") returned 3 [0108.272] _wcsicmp (_String1="VDS", _String2="ALERTER") returned 21 [0108.272] _wcsicmp (_String1="VDS", _String2="ALERTER") returned 21 [0108.272] _wcsicmp (_String1="VDS", _String2="NETLOGON") returned 8 [0108.273] _wcsicmp (_String1="VDS", _String2="NETLOGON") returned 8 [0108.273] _wcsicmp (_String1="VDS", _String2="NETPOPUP") returned 8 [0108.273] _wcsicmp (_String1="VDS", _String2="NETPOPUP") returned 8 [0108.273] _wcsicmp (_String1="VDS", _String2="SQLSERVER") returned 3 [0108.273] _wcsicmp (_String1="VDS", _String2="SQLSERVER") returned 3 [0108.273] _wcsicmp (_String1="VDS", _String2="REPLICATOR") returned 4 [0108.273] _wcsicmp (_String1="VDS", _String2="REPLICATOR") returned 4 [0108.273] _wcsicmp (_String1="VDS", _String2="REMOTEBOOT") returned 4 [0108.273] _wcsicmp (_String1="VDS", _String2="REMOTEBOOT") returned 4 [0108.273] _wcsicmp (_String1="VDS", _String2="TIMESOURCE") returned 2 [0108.273] _wcsicmp (_String1="VDS", _String2="TIMESOURCE") returned 2 [0108.273] _wcsicmp (_String1="VDS", _String2="AFP") returned 21 [0108.273] _wcsicmp (_String1="VDS", _String2="AFP") returned 21 [0108.273] _wcsicmp (_String1="VDS", _String2="UPS") returned 1 [0108.273] _wcsicmp (_String1="VDS", _String2="UPS") returned 1 [0108.273] _wcsicmp (_String1="VDS", _String2="XACTSRV") returned -2 [0108.273] _wcsicmp (_String1="VDS", _String2="XACTSRV") returned -2 [0108.273] _wcsicmp (_String1="VDS", _String2="TCPIP") returned 2 [0108.274] _wcsicmp (_String1="VDS", _String2="TCPIP") returned 2 [0108.274] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x1) returned 0x3563818 [0108.274] OpenServiceW (hSCManager=0x3563818, lpServiceName="VDS", dwDesiredAccess=0x84) returned 0x3572250 [0108.276] ResolveDelayLoadedAPI () returned 0x73f29e60 [0108.276] ControlService (in: hService=0x3572250, dwControl=0x4, lpServiceStatus=0x2f8f6c0 | out: lpServiceStatus=0x2f8f6c0*(dwServiceType=0x10, dwCurrentState=0x1, dwControlsAccepted=0x0, dwWin32ExitCode=0x435, dwServiceSpecificExitCode=0x0, dwCheckPoint=0x0, dwWaitHint=0x0)) returned 0 [0108.277] GetLastError () returned 0x426 [0108.277] QueryServiceStatus (in: hService=0x3572250, lpServiceStatus=0x2f8f6c0 | out: lpServiceStatus=0x2f8f6c0*(dwServiceType=0x10, dwCurrentState=0x1, dwControlsAccepted=0x0, dwWin32ExitCode=0x435, dwServiceSpecificExitCode=0x0, dwCheckPoint=0x0, dwWaitHint=0x0)) returned 1 [0108.277] LocalAlloc (uFlags=0x40, uBytes=0x24) returned 0x3563880 [0108.277] wcscpy_s (in: _Destination=0x356389c, _SizeInWords=0x4, _Source="VDS" | out: _Destination="VDS") returned 0x0 [0108.277] CloseServiceHandle (hSCObject=0x3563818) returned 1 [0108.277] CloseServiceHandle (hSCObject=0x3572250) returned 1 [0108.278] NetApiBufferAllocate (in: ByteCount=0x1e0, Buffer=0x2f8f6a4 | out: Buffer=0x2f8f6a4*=0x3570378) returned 0x0 [0108.278] _wcsicmp (_String1="VDS", _String2="WORKSTATION") returned -1 [0108.278] _wcsicmp (_String1="VDS", _String2="LanmanWorkstation") returned 10 [0108.278] _wcsicmp (_String1="VDS", _String2="SERVER") returned 3 [0108.278] _wcsicmp (_String1="VDS", _String2="LanmanServer") returned 10 [0108.278] _wcsicmp (_String1="VDS", _String2="BROWSER") returned 20 [0108.278] _wcsicmp (_String1="VDS", _String2="BROWSER") returned 20 [0108.278] _wcsicmp (_String1="VDS", _String2="MESSENGER") returned 9 [0108.278] _wcsicmp (_String1="VDS", _String2="MESSENGER") returned 9 [0108.278] _wcsicmp (_String1="VDS", _String2="NETRUN") returned 8 [0108.278] _wcsicmp (_String1="VDS", _String2="NETRUN") returned 8 [0108.278] _wcsicmp (_String1="VDS", _String2="SPOOLER") returned 3 [0108.278] _wcsicmp (_String1="VDS", _String2="SPOOLER") returned 3 [0108.278] _wcsicmp (_String1="VDS", _String2="ALERTER") returned 21 [0108.278] _wcsicmp (_String1="VDS", _String2="ALERTER") returned 21 [0108.278] _wcsicmp (_String1="VDS", _String2="NETLOGON") returned 8 [0108.278] _wcsicmp (_String1="VDS", _String2="NETLOGON") returned 8 [0108.278] _wcsicmp (_String1="VDS", _String2="NETPOPUP") returned 8 [0108.278] _wcsicmp (_String1="VDS", _String2="NETPOPUP") returned 8 [0108.278] _wcsicmp (_String1="VDS", _String2="SQLSERVER") returned 3 [0108.278] _wcsicmp (_String1="VDS", _String2="SQLSERVER") returned 3 [0108.278] _wcsicmp (_String1="VDS", _String2="REPLICATOR") returned 4 [0108.279] _wcsicmp (_String1="VDS", _String2="REPLICATOR") returned 4 [0108.279] _wcsicmp (_String1="VDS", _String2="REMOTEBOOT") returned 4 [0108.279] _wcsicmp (_String1="VDS", _String2="REMOTEBOOT") returned 4 [0108.279] _wcsicmp (_String1="VDS", _String2="TIMESOURCE") returned 2 [0108.279] _wcsicmp (_String1="VDS", _String2="TIMESOURCE") returned 2 [0108.279] _wcsicmp (_String1="VDS", _String2="AFP") returned 21 [0108.279] _wcsicmp (_String1="VDS", _String2="AFP") returned 21 [0108.279] _wcsicmp (_String1="VDS", _String2="UPS") returned 1 [0108.279] _wcsicmp (_String1="VDS", _String2="UPS") returned 1 [0108.279] _wcsicmp (_String1="VDS", _String2="XACTSRV") returned -2 [0108.279] _wcsicmp (_String1="VDS", _String2="XACTSRV") returned -2 [0108.279] _wcsicmp (_String1="VDS", _String2="TCPIP") returned 2 [0108.279] _wcsicmp (_String1="VDS", _String2="TCPIP") returned 2 [0108.279] wcsncpy_s (in: _Destination=0x3570550, _SizeInWords=0x4, _Source="VDS", _MaxCount=0x3 | out: _Destination="VDS") returned 0x0 [0108.279] wcsncpy_s (in: _Destination=0x3570548, _SizeInWords=0x4, _Source="VDS", _MaxCount=0x3 | out: _Destination="VDS") returned 0x0 [0108.279] NetApiBufferFree (Buffer=0x3563880) returned 0x0 [0108.279] NetApiBufferAllocate (in: ByteCount=0xfa0, Buffer=0x2f8f5c4 | out: Buffer=0x2f8f5c4*=0x3572400) returned 0x0 [0108.280] OpenServiceW (hSCManager=0x3562e18, lpServiceName="VDS", dwDesiredAccess=0xc) returned 0x3572200 [0108.280] QueryServiceStatus (in: hService=0x3572200, lpServiceStatus=0x2f8f5c8 | out: lpServiceStatus=0x2f8f5c8*(dwServiceType=0x10, dwCurrentState=0x1, dwControlsAccepted=0x0, dwWin32ExitCode=0x435, dwServiceSpecificExitCode=0x0, dwCheckPoint=0x0, dwWaitHint=0x0)) returned 1 [0108.280] GetServiceDisplayNameW (in: hSCManager=0x3562e18, lpServiceName="VDS", lpDisplayName=0x257820, lpcchBuffer=0x2f8f5a4 | out: lpDisplayName="Virtual Disk", lpcchBuffer=0x2f8f5a4) returned 1 [0108.303] NetApiBufferFree (Buffer=0x3572400) returned 0x0 [0108.303] CloseServiceHandle (hSCObject=0x3572200) returned 1 [0108.303] wcscpy_s (in: _Destination=0x257610, _SizeInWords=0x104, _Source="NETMSG" | out: _Destination="NETMSG") returned 0x0 [0108.303] LoadLibraryExW (lpLibFileName="NETMSG", hFile=0x0, dwFlags=0x20) returned 0x3350002 [0108.304] FormatMessageW (in: dwFlags=0x2800, lpSource=0x3350002, dwMessageId=0xdc1, dwLanguageId=0x0, lpBuffer=0x257c20, nSize=0x800, Arguments=0x2573d0 | out: lpBuffer="The Virtual Disk service is not started.\r\n") returned 0x2a [0108.306] GetFileType (hFile=0x94) returned 0x2 [0108.306] GetConsoleMode (in: hConsoleHandle=0x94, lpMode=0x2f8f500 | out: lpMode=0x2f8f500) returned 1 [0108.329] WriteConsoleW (in: hConsoleOutput=0x94, lpBuffer=0x257c20*, nNumberOfCharsToWrite=0x2a, lpNumberOfCharsWritten=0x2f8f50c, lpReserved=0x0 | out: lpBuffer=0x257c20*, lpNumberOfCharsWritten=0x2f8f50c*=0x2a) returned 1 [0108.349] GetFileType (hFile=0x94) returned 0x2 [0108.349] GetConsoleMode (in: hConsoleHandle=0x94, lpMode=0x2f8f500 | out: lpMode=0x2f8f500) returned 1 [0108.368] WriteConsoleW (in: hConsoleOutput=0x94, lpBuffer=0x2312e4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x2f8f50c, lpReserved=0x0 | out: lpBuffer=0x2312e4*, lpNumberOfCharsWritten=0x2f8f50c*=0x2) returned 1 [0108.377] _ultow (in: _Dest=0xdc1, _Radix=49870308 | out: _Dest=0xdc1) returned="3521" [0108.377] FormatMessageW (in: dwFlags=0x2800, lpSource=0x3350002, dwMessageId=0xdba, dwLanguageId=0x0, lpBuffer=0x257c20, nSize=0x800, Arguments=0x2573d0 | out: lpBuffer="More help is available by typing NET HELPMSG 3521.\r\n") returned 0x34 [0108.378] GetFileType (hFile=0x94) returned 0x2 [0108.378] GetConsoleMode (in: hConsoleHandle=0x94, lpMode=0x2f8f5a0 | out: lpMode=0x2f8f5a0) returned 1 [0108.380] WriteConsoleW (in: hConsoleOutput=0x94, lpBuffer=0x257c20*, nNumberOfCharsToWrite=0x34, lpNumberOfCharsWritten=0x2f8f5ac, lpReserved=0x0 | out: lpBuffer=0x257c20*, lpNumberOfCharsWritten=0x2f8f5ac*=0x34) returned 1 [0108.385] GetFileType (hFile=0x94) returned 0x2 [0108.385] GetConsoleMode (in: hConsoleHandle=0x94, lpMode=0x2f8f5a0 | out: lpMode=0x2f8f5a0) returned 1 [0108.389] WriteConsoleW (in: hConsoleOutput=0x94, lpBuffer=0x2312e4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x2f8f5ac, lpReserved=0x0 | out: lpBuffer=0x2312e4*, lpNumberOfCharsWritten=0x2f8f5ac*=0x2) returned 1 [0108.391] NetApiBufferFree (Buffer=0x3567dc8) returned 0x0 [0108.391] NetApiBufferFree (Buffer=0x356db48) returned 0x0 [0108.391] GetCommandLineW () returned="C:\\WINDOWS\\system32\\net1 stop vds" [0108.391] exit (_Code=2) Thread: id = 116 os_tid = 0x10ac Process: id = "41" image_name = "cmd.exe" filename = "c:\\windows\\syswow64\\cmd.exe" page_root = "0x6531000" os_pid = "0xa58" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x13d4" cmd_line = "C:\\WINDOWS\\system32\\cmd.exe /c netsh advfirewall set currentprofile state off" cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000faa5" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 117 os_tid = 0x1364 [0110.620] GetModuleHandleA (lpModuleName=0x0) returned 0x11d0000 [0110.620] __set_app_type (_Type=0x1) [0110.620] __p__fmode () returned 0x76953c14 [0110.620] __p__commode () returned 0x769549ec [0110.621] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x11e6fd0) returned 0x0 [0110.621] __getmainargs (in: _Argc=0x11fd1a4, _Argv=0x11fd1a8, _Env=0x11fd1ac, _DoWildCard=0, _StartInfo=0x11fd1b8 | out: _Argc=0x11fd1a4, _Argv=0x11fd1a8, _Env=0x11fd1ac) returned 0 [0110.621] _onexit (_Func=0x11e8030) returned 0x11e8030 [0110.622] _onexit (_Func=0x11e8040) returned 0x11e8040 [0110.622] _onexit (_Func=0x11e8050) returned 0x11e8050 [0110.623] _onexit (_Func=0x11e8060) returned 0x11e8060 [0110.623] _onexit (_Func=0x11e8070) returned 0x11e8070 [0110.624] _onexit (_Func=0x11e8080) returned 0x11e8080 [0110.625] GetCurrentThreadId () returned 0x1364 [0110.625] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0x1364) returned 0xbc [0110.625] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x74030000 [0110.625] GetProcAddress (hModule=0x74030000, lpProcName="SetThreadUILanguage") returned 0x74044f70 [0110.626] SetThreadUILanguage (LangId=0x0) returned 0xdc0409 [0110.689] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0110.690] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0xf8f800 | out: phkResult=0xf8f800*=0x0) returned 0x2 [0110.690] VirtualQuery (in: lpAddress=0xf8f80b, lpBuffer=0xf8f7b8, dwLength=0x1c | out: lpBuffer=0xf8f7b8*(BaseAddress=0xf8f000, AllocationBase=0xe90000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0110.696] VirtualQuery (in: lpAddress=0xe90000, lpBuffer=0xf8f7b8, dwLength=0x1c | out: lpBuffer=0xf8f7b8*(BaseAddress=0xe90000, AllocationBase=0xe90000, AllocationProtect=0x4, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000)) returned 0x1c [0110.696] VirtualQuery (in: lpAddress=0xe91000, lpBuffer=0xf8f7b8, dwLength=0x1c | out: lpBuffer=0xf8f7b8*(BaseAddress=0xe91000, AllocationBase=0xe90000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x104, Type=0x20000)) returned 0x1c [0110.696] VirtualQuery (in: lpAddress=0xe93000, lpBuffer=0xf8f7b8, dwLength=0x1c | out: lpBuffer=0xf8f7b8*(BaseAddress=0xe93000, AllocationBase=0xe90000, AllocationProtect=0x4, RegionSize=0xfd000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0110.696] VirtualQuery (in: lpAddress=0xf90000, lpBuffer=0xf8f7b8, dwLength=0x1c | out: lpBuffer=0xf8f7b8*(BaseAddress=0xf90000, AllocationBase=0xf90000, AllocationProtect=0x2, RegionSize=0x4000, State=0x1000, Protect=0x2, Type=0x40000)) returned 0x1c [0110.696] GetConsoleOutputCP () returned 0x1b5 [0110.702] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x1203850 | out: lpCPInfo=0x1203850) returned 1 [0110.703] SetConsoleCtrlHandler (HandlerRoutine=0x11f7260, Add=1) returned 1 [0110.703] _get_osfhandle (_FileHandle=1) returned 0x90 [0110.703] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x120388c | out: lpMode=0x120388c) returned 1 [0110.707] _get_osfhandle (_FileHandle=0) returned 0x8c [0110.707] GetConsoleMode (in: hConsoleHandle=0x8c, lpMode=0x1203888 | out: lpMode=0x1203888) returned 1 [0110.710] _get_osfhandle (_FileHandle=1) returned 0x90 [0110.710] SetConsoleMode (hConsoleHandle=0x90, dwMode=0x0) returned 1 [0110.712] _get_osfhandle (_FileHandle=1) returned 0x90 [0110.712] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x1203890 | out: lpMode=0x1203890) returned 1 [0110.715] _get_osfhandle (_FileHandle=1) returned 0x90 [0110.715] SetConsoleMode (hConsoleHandle=0x90, dwMode=0x7) returned 1 [0110.717] _get_osfhandle (_FileHandle=0) returned 0x8c [0110.717] GetConsoleMode (in: hConsoleHandle=0x8c, lpMode=0x1203894 | out: lpMode=0x1203894) returned 1 [0110.732] _get_osfhandle (_FileHandle=0) returned 0x8c [0110.733] SetConsoleMode (hConsoleHandle=0x8c, dwMode=0x1e7) returned 1 [0110.741] GetEnvironmentStringsW () returned 0x33a4e68* [0110.741] GetProcessHeap () returned 0x33a0000 [0110.741] RtlAllocateHeap (HeapHandle=0x33a0000, Flags=0x8, Size=0xaca) returned 0x33a5940 [0110.742] FreeEnvironmentStringsA (penv="A") returned 1 [0110.742] GetProcessHeap () returned 0x33a0000 [0110.742] RtlAllocateHeap (HeapHandle=0x33a0000, Flags=0x8, Size=0x4) returned 0x33a3bb0 [0110.742] GetEnvironmentStringsW () returned 0x33a4e68* [0110.742] GetProcessHeap () returned 0x33a0000 [0110.742] RtlAllocateHeap (HeapHandle=0x33a0000, Flags=0x8, Size=0xaca) returned 0x33a6418 [0110.743] FreeEnvironmentStringsA (penv="A") returned 1 [0110.743] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0xf8e75c | out: phkResult=0xf8e75c*=0xcc) returned 0x0 [0110.743] RegQueryValueExW (in: hKey=0xcc, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0xf8e764, lpData=0xf8e768, lpcbData=0xf8e760*=0x1000 | out: lpType=0xf8e764*=0x0, lpData=0xf8e768*=0xc5, lpcbData=0xf8e760*=0x1000) returned 0x2 [0110.743] RegQueryValueExW (in: hKey=0xcc, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0xf8e764, lpData=0xf8e768, lpcbData=0xf8e760*=0x1000 | out: lpType=0xf8e764*=0x4, lpData=0xf8e768*=0x1, lpcbData=0xf8e760*=0x4) returned 0x0 [0110.743] RegQueryValueExW (in: hKey=0xcc, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0xf8e764, lpData=0xf8e768, lpcbData=0xf8e760*=0x1000 | out: lpType=0xf8e764*=0x0, lpData=0xf8e768*=0x1, lpcbData=0xf8e760*=0x1000) returned 0x2 [0110.743] RegQueryValueExW (in: hKey=0xcc, lpValueName="DefaultColor", lpReserved=0x0, lpType=0xf8e764, lpData=0xf8e768, lpcbData=0xf8e760*=0x1000 | out: lpType=0xf8e764*=0x4, lpData=0xf8e768*=0x0, lpcbData=0xf8e760*=0x4) returned 0x0 [0110.743] RegQueryValueExW (in: hKey=0xcc, lpValueName="CompletionChar", lpReserved=0x0, lpType=0xf8e764, lpData=0xf8e768, lpcbData=0xf8e760*=0x1000 | out: lpType=0xf8e764*=0x4, lpData=0xf8e768*=0x40, lpcbData=0xf8e760*=0x4) returned 0x0 [0110.744] RegQueryValueExW (in: hKey=0xcc, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0xf8e764, lpData=0xf8e768, lpcbData=0xf8e760*=0x1000 | out: lpType=0xf8e764*=0x4, lpData=0xf8e768*=0x40, lpcbData=0xf8e760*=0x4) returned 0x0 [0110.744] RegQueryValueExW (in: hKey=0xcc, lpValueName="AutoRun", lpReserved=0x0, lpType=0xf8e764, lpData=0xf8e768, lpcbData=0xf8e760*=0x1000 | out: lpType=0xf8e764*=0x0, lpData=0xf8e768*=0x40, lpcbData=0xf8e760*=0x1000) returned 0x2 [0110.744] RegCloseKey (hKey=0xcc) returned 0x0 [0110.744] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0xf8e75c | out: phkResult=0xf8e75c*=0xcc) returned 0x0 [0110.744] RegQueryValueExW (in: hKey=0xcc, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0xf8e764, lpData=0xf8e768, lpcbData=0xf8e760*=0x1000 | out: lpType=0xf8e764*=0x0, lpData=0xf8e768*=0x40, lpcbData=0xf8e760*=0x1000) returned 0x2 [0110.744] RegQueryValueExW (in: hKey=0xcc, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0xf8e764, lpData=0xf8e768, lpcbData=0xf8e760*=0x1000 | out: lpType=0xf8e764*=0x4, lpData=0xf8e768*=0x1, lpcbData=0xf8e760*=0x4) returned 0x0 [0110.745] RegQueryValueExW (in: hKey=0xcc, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0xf8e764, lpData=0xf8e768, lpcbData=0xf8e760*=0x1000 | out: lpType=0xf8e764*=0x0, lpData=0xf8e768*=0x1, lpcbData=0xf8e760*=0x1000) returned 0x2 [0110.745] RegQueryValueExW (in: hKey=0xcc, lpValueName="DefaultColor", lpReserved=0x0, lpType=0xf8e764, lpData=0xf8e768, lpcbData=0xf8e760*=0x1000 | out: lpType=0xf8e764*=0x4, lpData=0xf8e768*=0x0, lpcbData=0xf8e760*=0x4) returned 0x0 [0110.745] RegQueryValueExW (in: hKey=0xcc, lpValueName="CompletionChar", lpReserved=0x0, lpType=0xf8e764, lpData=0xf8e768, lpcbData=0xf8e760*=0x1000 | out: lpType=0xf8e764*=0x4, lpData=0xf8e768*=0x9, lpcbData=0xf8e760*=0x4) returned 0x0 [0110.745] RegQueryValueExW (in: hKey=0xcc, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0xf8e764, lpData=0xf8e768, lpcbData=0xf8e760*=0x1000 | out: lpType=0xf8e764*=0x4, lpData=0xf8e768*=0x9, lpcbData=0xf8e760*=0x4) returned 0x0 [0110.745] RegQueryValueExW (in: hKey=0xcc, lpValueName="AutoRun", lpReserved=0x0, lpType=0xf8e764, lpData=0xf8e768, lpcbData=0xf8e760*=0x1000 | out: lpType=0xf8e764*=0x0, lpData=0xf8e768*=0x9, lpcbData=0xf8e760*=0x1000) returned 0x2 [0110.745] RegCloseKey (hKey=0xcc) returned 0x0 [0110.745] time (in: timer=0x0 | out: timer=0x0) returned 0x5e3302e6 [0110.746] srand (_Seed=0x5e3302e6) [0110.746] GetCommandLineW () returned="C:\\WINDOWS\\system32\\cmd.exe /c netsh advfirewall set currentprofile state off" [0110.746] malloc (_Size=0x4000) returned 0x3642700 [0110.747] GetCommandLineW () returned="C:\\WINDOWS\\system32\\cmd.exe /c netsh advfirewall set currentprofile state off" [0110.747] malloc (_Size=0xffce) returned 0x34a0048 [0110.749] ??_V@YAXPAX@Z () returned 0xf8f740 [0110.750] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x34a0048 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0110.750] malloc (_Size=0xffce) returned 0x34b0020 [0110.751] ??_V@YAXPAX@Z () returned 0xf8f514 [0110.751] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x34b0020, nSize=0x7fe7 | out: lpFilename="C:\\WINDOWS\\SysWOW64\\cmd.exe" (normalized: "c:\\windows\\syswow64\\cmd.exe")) returned 0x1b [0110.752] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x11ff840, nSize=0x2000 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath;C:\\WINDOWS\\system32;C:\\WINDOWS;C:\\WINDOWS\\System32\\Wbem;C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\;C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps") returned 0xbb [0110.752] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x11ff840, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0110.752] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x11ff840, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0110.752] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13 [0110.752] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11 [0110.752] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13 [0110.752] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13 [0110.752] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12 [0110.752] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4 [0110.752] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2 [0110.752] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8 [0110.758] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1 [0110.758] GetProcessHeap () returned 0x33a0000 [0110.758] RtlFreeHeap (HeapHandle=0x33a0000, Flags=0x0, BaseAddress=0x33a5940) returned 1 [0110.758] GetEnvironmentStringsW () returned 0x33a4e68* [0110.758] GetProcessHeap () returned 0x33a0000 [0110.758] RtlAllocateHeap (HeapHandle=0x33a0000, Flags=0x8, Size=0xae2) returned 0x33a79e0 [0110.758] FreeEnvironmentStringsA (penv="A") returned 1 [0110.758] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x11ff840, nSize=0x2000 | out: lpBuffer="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1b [0110.759] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x11ff840, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0110.759] _wcsicmp (_String1="KEYS", _String2="CD") returned 8 [0110.759] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6 [0110.759] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8 [0110.759] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8 [0110.759] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7 [0110.759] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9 [0110.759] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7 [0110.759] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3 [0110.759] malloc (_Size=0xffce) returned 0x34bfff8 [0110.760] ??_V@YAXPAX@Z () returned 0xf8f2ac [0110.760] GetProcessHeap () returned 0x33a0000 [0110.760] RtlAllocateHeap (HeapHandle=0x33a0000, Flags=0x8, Size=0x38) returned 0x33a4cf0 [0110.760] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x34bfff8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0110.761] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x7fe7, lpBuffer=0x34bfff8, lpFilePart=0xf8f2f8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0xf8f2f8*="Desktop") returned 0x17 [0110.761] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\Desktop" (normalized: "c:\\users\\fd1hvy\\desktop")) returned 0x11 [0110.762] FindFirstFileW (in: lpFileName="C:\\Users", lpFindFileData=0xf8f078 | out: lpFindFileData=0xf8f078*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x475bb883, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x475bb883, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 0x33a0ae0 [0110.762] FindClose (in: hFindFile=0x33a0ae0 | out: hFindFile=0x33a0ae0) returned 1 [0110.762] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy", lpFindFileData=0xf8f078 | out: lpFindFileData=0xf8f078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20fc850f, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x9de5855d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x9de5855d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD1HVy", cAlternateFileName="")) returned 0x33a0ae0 [0110.762] FindClose (in: hFindFile=0x33a0ae0 | out: hFindFile=0x33a0ae0) returned 1 [0110.762] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", lpFindFileData=0xf8f078 | out: lpFindFileData=0xf8f078*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x5de49bf6, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0x5de49bf6, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 0x33a0ae0 [0110.763] FindClose (in: hFindFile=0x33a0ae0 | out: hFindFile=0x33a0ae0) returned 1 [0110.763] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\Desktop" (normalized: "c:\\users\\fd1hvy\\desktop")) returned 0x11 [0110.763] SetCurrentDirectoryW (lpPathName="C:\\Users\\FD1HVy\\Desktop" (normalized: "c:\\users\\fd1hvy\\desktop")) returned 1 [0110.763] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Users\\FD1HVy\\Desktop") returned 1 [0110.763] GetProcessHeap () returned 0x33a0000 [0110.763] RtlFreeHeap (HeapHandle=0x33a0000, Flags=0x0, BaseAddress=0x33a79e0) returned 1 [0110.763] GetEnvironmentStringsW () returned 0x33a6ef0* [0110.763] GetProcessHeap () returned 0x33a0000 [0110.763] RtlAllocateHeap (HeapHandle=0x33a0000, Flags=0x8, Size=0xb1a) returned 0x33a7a18 [0110.763] FreeEnvironmentStringsA (penv="=") returned 1 [0110.763] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x34a0048 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0110.763] GetProcessHeap () returned 0x33a0000 [0110.764] RtlFreeHeap (HeapHandle=0x33a0000, Flags=0x0, BaseAddress=0x33a4cf0) returned 1 [0110.764] ??_V@YAXPAX@Z () returned 0x1 [0110.764] ??_V@YAXPAX@Z () returned 0x1 [0110.764] GetProcessHeap () returned 0x33a0000 [0110.764] RtlAllocateHeap (HeapHandle=0x33a0000, Flags=0x8, Size=0x400e) returned 0x33a8540 [0110.764] GetProcessHeap () returned 0x33a0000 [0110.764] RtlAllocateHeap (HeapHandle=0x33a0000, Flags=0x8, Size=0x6c) returned 0x33a5990 [0110.765] GetProcessHeap () returned 0x33a0000 [0110.765] RtlFreeHeap (HeapHandle=0x33a0000, Flags=0x0, BaseAddress=0x33a8540) returned 1 [0110.765] GetConsoleOutputCP () returned 0x1b5 [0110.770] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x1203850 | out: lpCPInfo=0x1203850) returned 1 [0110.770] GetUserDefaultLCID () returned 0x409 [0110.770] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x11ff82c, cchData=8 | out: lpLCData=":") returned 2 [0110.770] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0xf8f668, cchData=128 | out: lpLCData="0") returned 2 [0110.770] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0xf8f668, cchData=128 | out: lpLCData="0") returned 2 [0110.771] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0xf8f668, cchData=128 | out: lpLCData="1") returned 2 [0110.771] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x11ff81c, cchData=8 | out: lpLCData="/") returned 2 [0110.771] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x11ff7b8, cchData=32 | out: lpLCData="Mon") returned 4 [0110.771] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x11ff778, cchData=32 | out: lpLCData="Tue") returned 4 [0110.771] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x11ff738, cchData=32 | out: lpLCData="Wed") returned 4 [0110.771] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x11ff6f8, cchData=32 | out: lpLCData="Thu") returned 4 [0110.771] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x11ff6b8, cchData=32 | out: lpLCData="Fri") returned 4 [0110.771] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x11ff678, cchData=32 | out: lpLCData="Sat") returned 4 [0110.771] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x11ff638, cchData=32 | out: lpLCData="Sun") returned 4 [0110.771] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x11ff80c, cchData=8 | out: lpLCData=".") returned 2 [0110.771] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x11ff7f8, cchData=8 | out: lpLCData=",") returned 2 [0110.771] setlocale (category=0, locale=".OCP") returned="English_United States.437" [0110.775] GetProcessHeap () returned 0x33a0000 [0110.775] RtlAllocateHeap (HeapHandle=0x33a0000, Flags=0x0, Size=0x20c) returned 0x33a5a08 [0110.775] GetConsoleTitleW (in: lpConsoleTitle=0x33a5a08, nSize=0x104 | out: lpConsoleTitle="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1c [0110.780] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x74030000 [0110.780] GetProcAddress (hModule=0x74030000, lpProcName="CopyFileExW") returned 0x74044330 [0110.780] GetProcAddress (hModule=0x74030000, lpProcName="IsDebuggerPresent") returned 0x74045930 [0110.780] GetProcAddress (hModule=0x74030000, lpProcName="SetConsoleInputExeNameW") returned 0x772c09d0 [0110.780] ??_V@YAXPAX@Z () returned 0x1 [0110.781] GetProcessHeap () returned 0x33a0000 [0110.782] RtlAllocateHeap (HeapHandle=0x33a0000, Flags=0x8, Size=0x400a) returned 0x33a8540 [0110.782] GetProcessHeap () returned 0x33a0000 [0110.782] RtlFreeHeap (HeapHandle=0x33a0000, Flags=0x0, BaseAddress=0x33a8540) returned 1 [0110.783] _wcsicmp (_String1="netsh", _String2=")") returned 69 [0110.783] _wcsicmp (_String1="FOR", _String2="netsh") returned -8 [0110.783] _wcsicmp (_String1="FOR/?", _String2="netsh") returned -8 [0110.783] _wcsicmp (_String1="IF", _String2="netsh") returned -5 [0110.783] _wcsicmp (_String1="IF/?", _String2="netsh") returned -5 [0110.783] _wcsicmp (_String1="REM", _String2="netsh") returned 4 [0110.783] _wcsicmp (_String1="REM/?", _String2="netsh") returned 4 [0110.783] GetProcessHeap () returned 0x33a0000 [0110.783] RtlAllocateHeap (HeapHandle=0x33a0000, Flags=0x8, Size=0x58) returned 0x33a5c20 [0110.783] GetProcessHeap () returned 0x33a0000 [0110.783] RtlAllocateHeap (HeapHandle=0x33a0000, Flags=0x8, Size=0x14) returned 0x33a5c80 [0110.810] GetProcessHeap () returned 0x33a0000 [0110.810] RtlAllocateHeap (HeapHandle=0x33a0000, Flags=0x8, Size=0x5e) returned 0x33a5ca0 [0110.813] GetConsoleTitleW (in: lpConsoleTitle=0xf8f560, nSize=0x104 | out: lpConsoleTitle="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1c [0110.819] malloc (_Size=0xffce) returned 0x34b2ad8 [0110.820] ??_V@YAXPAX@Z () returned 0xf8f2ec [0110.820] malloc (_Size=0xffce) returned 0x34c2ab0 [0110.821] ??_V@YAXPAX@Z () returned 0xf8f0a4 [0110.822] _wcsicmp (_String1="netsh", _String2="DIR") returned 10 [0110.822] _wcsicmp (_String1="netsh", _String2="ERASE") returned 9 [0110.822] _wcsicmp (_String1="netsh", _String2="DEL") returned 10 [0110.822] _wcsicmp (_String1="netsh", _String2="TYPE") returned -6 [0110.822] _wcsicmp (_String1="netsh", _String2="COPY") returned 11 [0110.822] _wcsicmp (_String1="netsh", _String2="CD") returned 11 [0110.822] _wcsicmp (_String1="netsh", _String2="CHDIR") returned 11 [0110.822] _wcsicmp (_String1="netsh", _String2="RENAME") returned -4 [0110.822] _wcsicmp (_String1="netsh", _String2="REN") returned -4 [0110.822] _wcsicmp (_String1="netsh", _String2="ECHO") returned 9 [0110.822] _wcsicmp (_String1="netsh", _String2="SET") returned -5 [0110.822] _wcsicmp (_String1="netsh", _String2="PAUSE") returned -2 [0110.822] _wcsicmp (_String1="netsh", _String2="DATE") returned 10 [0110.822] _wcsicmp (_String1="netsh", _String2="TIME") returned -6 [0110.822] _wcsicmp (_String1="netsh", _String2="PROMPT") returned -2 [0110.822] _wcsicmp (_String1="netsh", _String2="MD") returned 1 [0110.822] _wcsicmp (_String1="netsh", _String2="MKDIR") returned 1 [0110.823] _wcsicmp (_String1="netsh", _String2="RD") returned -4 [0110.823] _wcsicmp (_String1="netsh", _String2="RMDIR") returned -4 [0110.823] _wcsicmp (_String1="netsh", _String2="PATH") returned -2 [0110.823] _wcsicmp (_String1="netsh", _String2="GOTO") returned 7 [0110.823] _wcsicmp (_String1="netsh", _String2="SHIFT") returned -5 [0110.823] _wcsicmp (_String1="netsh", _String2="CLS") returned 11 [0110.823] _wcsicmp (_String1="netsh", _String2="CALL") returned 11 [0110.823] _wcsicmp (_String1="netsh", _String2="VERIFY") returned -8 [0110.823] _wcsicmp (_String1="netsh", _String2="VER") returned -8 [0110.823] _wcsicmp (_String1="netsh", _String2="VOL") returned -8 [0110.823] _wcsicmp (_String1="netsh", _String2="EXIT") returned 9 [0110.823] _wcsicmp (_String1="netsh", _String2="SETLOCAL") returned -5 [0110.823] _wcsicmp (_String1="netsh", _String2="ENDLOCAL") returned 9 [0110.823] _wcsicmp (_String1="netsh", _String2="TITLE") returned -6 [0110.823] _wcsicmp (_String1="netsh", _String2="START") returned -5 [0110.823] _wcsicmp (_String1="netsh", _String2="DPATH") returned 10 [0110.823] _wcsicmp (_String1="netsh", _String2="KEYS") returned 3 [0110.823] _wcsicmp (_String1="netsh", _String2="MOVE") returned 1 [0110.823] _wcsicmp (_String1="netsh", _String2="PUSHD") returned -2 [0110.823] _wcsicmp (_String1="netsh", _String2="POPD") returned -2 [0110.824] _wcsicmp (_String1="netsh", _String2="ASSOC") returned 13 [0110.824] _wcsicmp (_String1="netsh", _String2="FTYPE") returned 8 [0110.824] _wcsicmp (_String1="netsh", _String2="BREAK") returned 12 [0110.824] _wcsicmp (_String1="netsh", _String2="COLOR") returned 11 [0110.824] _wcsicmp (_String1="netsh", _String2="MKLINK") returned 1 [0110.824] _wcsicmp (_String1="netsh", _String2="DIR") returned 10 [0110.824] _wcsicmp (_String1="netsh", _String2="ERASE") returned 9 [0110.824] _wcsicmp (_String1="netsh", _String2="DEL") returned 10 [0110.824] _wcsicmp (_String1="netsh", _String2="TYPE") returned -6 [0110.824] _wcsicmp (_String1="netsh", _String2="COPY") returned 11 [0110.824] _wcsicmp (_String1="netsh", _String2="CD") returned 11 [0110.824] _wcsicmp (_String1="netsh", _String2="CHDIR") returned 11 [0110.824] _wcsicmp (_String1="netsh", _String2="RENAME") returned -4 [0110.824] _wcsicmp (_String1="netsh", _String2="REN") returned -4 [0110.824] _wcsicmp (_String1="netsh", _String2="ECHO") returned 9 [0110.825] _wcsicmp (_String1="netsh", _String2="SET") returned -5 [0110.825] _wcsicmp (_String1="netsh", _String2="PAUSE") returned -2 [0110.825] _wcsicmp (_String1="netsh", _String2="DATE") returned 10 [0110.825] _wcsicmp (_String1="netsh", _String2="TIME") returned -6 [0110.825] _wcsicmp (_String1="netsh", _String2="PROMPT") returned -2 [0110.825] _wcsicmp (_String1="netsh", _String2="MD") returned 1 [0110.825] _wcsicmp (_String1="netsh", _String2="MKDIR") returned 1 [0110.825] _wcsicmp (_String1="netsh", _String2="RD") returned -4 [0110.825] _wcsicmp (_String1="netsh", _String2="RMDIR") returned -4 [0110.825] _wcsicmp (_String1="netsh", _String2="PATH") returned -2 [0110.825] _wcsicmp (_String1="netsh", _String2="GOTO") returned 7 [0110.825] _wcsicmp (_String1="netsh", _String2="SHIFT") returned -5 [0110.825] _wcsicmp (_String1="netsh", _String2="CLS") returned 11 [0110.825] _wcsicmp (_String1="netsh", _String2="CALL") returned 11 [0110.825] _wcsicmp (_String1="netsh", _String2="VERIFY") returned -8 [0110.826] _wcsicmp (_String1="netsh", _String2="VER") returned -8 [0110.826] _wcsicmp (_String1="netsh", _String2="VOL") returned -8 [0110.826] _wcsicmp (_String1="netsh", _String2="EXIT") returned 9 [0110.826] _wcsicmp (_String1="netsh", _String2="SETLOCAL") returned -5 [0110.826] _wcsicmp (_String1="netsh", _String2="ENDLOCAL") returned 9 [0110.826] _wcsicmp (_String1="netsh", _String2="TITLE") returned -6 [0110.826] _wcsicmp (_String1="netsh", _String2="START") returned -5 [0110.826] _wcsicmp (_String1="netsh", _String2="DPATH") returned 10 [0110.826] _wcsicmp (_String1="netsh", _String2="KEYS") returned 3 [0110.826] _wcsicmp (_String1="netsh", _String2="MOVE") returned 1 [0110.826] _wcsicmp (_String1="netsh", _String2="PUSHD") returned -2 [0110.826] _wcsicmp (_String1="netsh", _String2="POPD") returned -2 [0110.826] _wcsicmp (_String1="netsh", _String2="ASSOC") returned 13 [0110.826] _wcsicmp (_String1="netsh", _String2="FTYPE") returned 8 [0110.826] _wcsicmp (_String1="netsh", _String2="BREAK") returned 12 [0110.827] _wcsicmp (_String1="netsh", _String2="COLOR") returned 11 [0110.827] _wcsicmp (_String1="netsh", _String2="MKLINK") returned 1 [0110.827] _wcsicmp (_String1="netsh", _String2="FOR") returned 8 [0110.827] _wcsicmp (_String1="netsh", _String2="IF") returned 5 [0110.827] _wcsicmp (_String1="netsh", _String2="REM") returned -4 [0110.828] ??_V@YAXPAX@Z () returned 0x1 [0110.828] GetProcessHeap () returned 0x33a0000 [0110.828] RtlAllocateHeap (HeapHandle=0x33a0000, Flags=0x8, Size=0xffd6) returned 0x33a8540 [0110.829] GetProcessHeap () returned 0x33a0000 [0110.829] RtlAllocateHeap (HeapHandle=0x33a0000, Flags=0x8, Size=0x6a) returned 0x33a5d08 [0110.829] _wcsnicmp (_String1="nets", _String2="cmd ", _MaxCount=0x4) returned 11 [0110.829] malloc (_Size=0xffce) returned 0x34c2ab0 [0110.829] ??_V@YAXPAX@Z () returned 0xf8ee24 [0110.830] GetProcessHeap () returned 0x33a0000 [0110.830] RtlAllocateHeap (HeapHandle=0x33a0000, Flags=0x8, Size=0x1ffa4) returned 0x33b8520 [0110.837] SetErrorMode (uMode=0x0) returned 0x0 [0110.837] SetErrorMode (uMode=0x1) returned 0x0 [0110.837] GetFullPathNameW (in: lpFileName=".", nBufferLength=0xffce, lpBuffer=0x33b8528, lpFilePart=0xf8ee44 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0xf8ee44*="Desktop") returned 0x17 [0110.838] SetErrorMode (uMode=0x0) returned 0x1 [0110.843] GetProcessHeap () returned 0x33a0000 [0110.961] RtlReAllocateHeap (Heap=0x33a0000, Flags=0x0, Ptr=0x33b8520, Size=0x44) returned 0x33b8520 [0110.961] GetProcessHeap () returned 0x33a0000 [0110.961] RtlSizeHeap (HeapHandle=0x33a0000, Flags=0x0, MemoryPointer=0x33b8520) returned 0x44 [0110.961] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x11ff840, nSize=0x2000 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath;C:\\WINDOWS\\system32;C:\\WINDOWS;C:\\WINDOWS\\System32\\Wbem;C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\;C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps") returned 0xbb [0110.962] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1 [0110.962] GetProcessHeap () returned 0x33a0000 [0110.962] RtlAllocateHeap (HeapHandle=0x33a0000, Flags=0x8, Size=0x1b4) returned 0x33a5d80 [0110.962] GetProcessHeap () returned 0x33a0000 [0110.962] RtlAllocateHeap (HeapHandle=0x33a0000, Flags=0x8, Size=0x360) returned 0x33a5f40 [0110.987] GetProcessHeap () returned 0x33a0000 [0110.987] RtlReAllocateHeap (Heap=0x33a0000, Flags=0x0, Ptr=0x33a5f40, Size=0x1b6) returned 0x33a5f40 [0110.987] GetProcessHeap () returned 0x33a0000 [0110.987] RtlSizeHeap (HeapHandle=0x33a0000, Flags=0x0, MemoryPointer=0x33a5f40) returned 0x1b6 [0110.987] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x11ff840, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0110.987] GetProcessHeap () returned 0x33a0000 [0110.987] RtlAllocateHeap (HeapHandle=0x33a0000, Flags=0x8, Size=0xe0) returned 0x33a6100 [0110.989] GetProcessHeap () returned 0x33a0000 [0110.989] RtlReAllocateHeap (Heap=0x33a0000, Flags=0x0, Ptr=0x33a6100, Size=0x76) returned 0x33a6100 [0110.989] GetProcessHeap () returned 0x33a0000 [0110.989] RtlSizeHeap (HeapHandle=0x33a0000, Flags=0x0, MemoryPointer=0x33a6100) returned 0x76 [0110.990] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0110.990] FindFirstFileExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\netsh.*", fInfoLevelId=0x1, lpFindFileData=0xf8ebd0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0xf8ebd0) returned 0xffffffff [0110.990] GetLastError () returned 0x2 [0110.990] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0110.990] FindFirstFileExW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\netsh.*", fInfoLevelId=0x1, lpFindFileData=0xf8ebd0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0xf8ebd0) returned 0xffffffff [0110.991] GetLastError () returned 0x2 [0110.991] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0110.991] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\system32\\netsh.*", fInfoLevelId=0x1, lpFindFileData=0xf8ebd0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0xf8ebd0) returned 0x33a6180 [0110.992] GetProcessHeap () returned 0x33a0000 [0110.992] RtlAllocateHeap (HeapHandle=0x33a0000, Flags=0x0, Size=0x14) returned 0x33a61c0 [0110.992] FindClose (in: hFindFile=0x33a6180 | out: hFindFile=0x33a6180) returned 1 [0110.992] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\system32\\netsh.COM", fInfoLevelId=0x1, lpFindFileData=0xf8ebd0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0xf8ebd0) returned 0xffffffff [0110.992] GetLastError () returned 0x2 [0110.992] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\system32\\netsh.EXE", fInfoLevelId=0x1, lpFindFileData=0xf8ebd0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0xf8ebd0) returned 0x33a6180 [0110.992] GetProcessHeap () returned 0x33a0000 [0110.992] RtlReAllocateHeap (Heap=0x33a0000, Flags=0x0, Ptr=0x33a61c0, Size=0x4) returned 0x33a61c0 [0110.992] FindClose (in: hFindFile=0x33a6180 | out: hFindFile=0x33a6180) returned 1 [0110.992] _wcsicmp (_String1=".EXE", _String2=".BAT") returned 3 [0110.992] _wcsicmp (_String1=".EXE", _String2=".CMD") returned 2 [0110.993] ??_V@YAXPAX@Z () returned 0x1 [0110.993] GetConsoleTitleW (in: lpConsoleTitle=0xf8f0d4, nSize=0x104 | out: lpConsoleTitle="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1c [0111.082] InitializeProcThreadAttributeList (in: lpAttributeList=0xf8f000, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0xf8efec | out: lpAttributeList=0xf8f000, lpSize=0xf8efec) returned 1 [0111.082] UpdateProcThreadAttribute (in: lpAttributeList=0xf8f000, dwFlags=0x0, Attribute=0x60001, lpValue=0xf8efe8, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0xf8f000, lpPreviousValue=0x0) returned 1 [0111.082] GetStartupInfoW (in: lpStartupInfo=0xf8f038 | out: lpStartupInfo=0xf8f038*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\WINDOWS\\system32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x144, lpReserved2=0x33a1b94, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) [0111.082] GetProcessHeap () returned 0x33a0000 [0111.082] RtlAllocateHeap (HeapHandle=0x33a0000, Flags=0x8, Size=0x18) returned 0x33a6180 [0111.082] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38 [0111.083] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2 [0111.083] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2 [0111.083] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0111.083] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0111.083] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0111.083] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3 [0111.083] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3 [0111.083] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5 [0111.083] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5 [0111.083] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9 [0111.083] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9 [0111.083] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11 [0111.084] _wcsnicmp (_String1="COPYCMD", _String2="OneDriv", _MaxCount=0x7) returned -12 [0111.084] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12 [0111.084] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13 [0111.084] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13 [0111.084] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0111.084] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0111.084] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0111.084] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0111.084] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0111.084] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0111.084] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0111.084] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0111.085] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0111.085] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13 [0111.085] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13 [0111.123] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13 [0111.123] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16 [0111.123] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16 [0111.123] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17 [0111.123] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17 [0111.123] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18 [0111.123] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18 [0111.123] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18 [0111.123] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18 [0111.123] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20 [0111.124] GetProcessHeap () returned 0x33a0000 [0111.124] RtlFreeHeap (HeapHandle=0x33a0000, Flags=0x0, BaseAddress=0x33a6180) returned 1 [0111.124] GetProcessHeap () returned 0x33a0000 [0111.124] RtlAllocateHeap (HeapHandle=0x33a0000, Flags=0x8, Size=0xa) returned 0x33a6180 [0111.124] lstrcmpW (lpString1="\\netsh.exe", lpString2="\\XCOPY.EXE") returned -1 [0111.127] _get_osfhandle (_FileHandle=1) returned 0x90 [0111.127] SetConsoleMode (hConsoleHandle=0x90, dwMode=0x3) returned 1 [0111.229] _get_osfhandle (_FileHandle=0) returned 0x8c [0111.229] SetConsoleMode (hConsoleHandle=0x8c, dwMode=0x1f7) returned 1 [0111.240] CreateProcessW (in: lpApplicationName="C:\\WINDOWS\\system32\\netsh.exe", lpCommandLine="netsh advfirewall set currentprofile state off", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\FD1HVy\\Desktop", lpStartupInfo=0xf8ef88*(cb=0x48, lpReserved=0x0, lpDesktop="WinSta0\\Default", lpTitle="netsh advfirewall set currentprofile state off", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0xf8efd4 | out: lpCommandLine="netsh advfirewall set currentprofile state off", lpProcessInformation=0xf8efd4*(hProcess=0xe0, hThread=0xdc, dwProcessId=0xd90, dwThreadId=0xb60)) returned 1 [0111.616] CloseHandle (hObject=0xdc) returned 1 [0111.616] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1 [0111.616] GetProcessHeap () returned 0x33a0000 [0111.616] RtlFreeHeap (HeapHandle=0x33a0000, Flags=0x0, BaseAddress=0x33a7a18) returned 1 [0111.616] GetEnvironmentStringsW () returned 0x33a6ef0* [0111.617] GetProcessHeap () returned 0x33a0000 [0111.617] RtlAllocateHeap (HeapHandle=0x33a0000, Flags=0x8, Size=0xb1a) returned 0x33a7a18 [0111.617] FreeEnvironmentStringsA (penv="=") returned 1 [0111.617] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0xffffffff) returned 0x0 [0170.553] GetExitCodeProcess (in: hProcess=0xe0, lpExitCode=0xf8ef6c | out: lpExitCode=0xf8ef6c*=0x0) returned 1 [0170.554] CloseHandle (hObject=0xe0) returned 1 [0170.554] _vsnwprintf (in: _Buffer=0xf8f054, _BufferCount=0x13, _Format="%08X", _ArgList=0xf8ef74 | out: _Buffer="00000000") returned 8 [0170.555] SetEnvironmentVariableW (lpName="=ExitCode", lpValue="00000000") returned 1 [0170.556] GetProcessHeap () returned 0x33a0000 [0170.556] RtlFreeHeap (HeapHandle=0x33a0000, Flags=0x0, BaseAddress=0x33a7a18) returned 1 [0170.557] GetEnvironmentStringsW () returned 0x33a6ef0* [0170.557] GetProcessHeap () returned 0x33a0000 [0170.557] RtlAllocateHeap (HeapHandle=0x33a0000, Flags=0x8, Size=0xb40) returned 0x33b90b8 [0170.558] FreeEnvironmentStringsA (penv="=") returned 1 [0170.558] SetEnvironmentVariableW (lpName="=ExitCodeAscii", lpValue=0x0) returned 1 [0170.558] GetProcessHeap () returned 0x33a0000 [0170.558] RtlFreeHeap (HeapHandle=0x33a0000, Flags=0x0, BaseAddress=0x33b90b8) returned 1 [0170.558] GetEnvironmentStringsW () returned 0x33a6ef0* [0170.558] GetProcessHeap () returned 0x33a0000 [0170.558] RtlAllocateHeap (HeapHandle=0x33a0000, Flags=0x8, Size=0xb40) returned 0x33b90b8 [0170.559] FreeEnvironmentStringsA (penv="=") returned 1 [0170.559] GetProcessHeap () returned 0x33a0000 [0170.559] RtlFreeHeap (HeapHandle=0x33a0000, Flags=0x0, BaseAddress=0x33a6180) returned 1 [0170.559] DeleteProcThreadAttributeList (in: lpAttributeList=0xf8f000 | out: lpAttributeList=0xf8f000) [0170.559] ??_V@YAXPAX@Z () returned 0x1 [0170.559] _get_osfhandle (_FileHandle=1) returned 0x90 [0170.559] SetConsoleMode (hConsoleHandle=0x90, dwMode=0x3) returned 1 [0170.583] _get_osfhandle (_FileHandle=1) returned 0x90 [0170.583] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x1203890 | out: lpMode=0x1203890) returned 1 [0170.630] _get_osfhandle (_FileHandle=1) returned 0x90 [0170.630] SetConsoleMode (hConsoleHandle=0x90, dwMode=0x7) returned 1 [0170.642] _get_osfhandle (_FileHandle=0) returned 0x8c [0170.642] GetConsoleMode (in: hConsoleHandle=0x8c, lpMode=0x1203894 | out: lpMode=0x1203894) returned 1 [0170.644] _get_osfhandle (_FileHandle=0) returned 0x8c [0170.644] SetConsoleMode (hConsoleHandle=0x8c, dwMode=0x1e7) returned 1 [0170.661] SetConsoleInputExeNameW () returned 0x1 [0170.661] GetConsoleOutputCP () returned 0x1b5 [0170.668] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x1203850 | out: lpCPInfo=0x1203850) returned 1 [0170.668] SetThreadUILanguage (LangId=0x0) returned 0xdc0409 [0170.674] exit (_Code=0) [0170.675] ??_V@YAXPAX@Z () returned 0x1 Thread: id = 123 os_tid = 0xfdc Process: id = "42" image_name = "conhost.exe" filename = "c:\\windows\\system32\\conhost.exe" page_root = "0xde9f000" os_pid = "0xe3c" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "41" os_parent_pid = "0xa58" cmd_line = "\\??\\C:\\WINDOWS\\system32\\conhost.exe 0xffffffff -ForceV1" cur_dir = "C:\\WINDOWS" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000faa5" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 118 os_tid = 0x2b4 Thread: id = 119 os_tid = 0x7f4 Thread: id = 120 os_tid = 0xd98 Thread: id = 121 os_tid = 0xd38 Thread: id = 122 os_tid = 0xeb8 Thread: id = 128 os_tid = 0x120c Thread: id = 129 os_tid = 0x378 Process: id = "43" image_name = "netsh.exe" filename = "c:\\windows\\syswow64\\netsh.exe" page_root = "0x794a000" os_pid = "0xd90" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "41" os_parent_pid = "0xa58" cmd_line = "netsh advfirewall set currentprofile state off" cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000faa5" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 124 os_tid = 0xb60 [0112.788] GetModuleHandleA (lpModuleName=0x0) returned 0x1630000 [0112.788] __set_app_type (_Type=0x1) [0112.788] __p__fmode () returned 0x76953c14 [0112.788] __p__commode () returned 0x769549ec [0112.789] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x1639a90) returned 0x0 [0112.789] __wgetmainargs (in: _Argc=0x16433e8, _Argv=0x16433ec, _Env=0x16433f0, _DoWildCard=0, _StartInfo=0x16433fc | out: _Argc=0x16433e8, _Argv=0x16433ec, _Env=0x16433f0) returned 0 [0112.790] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0112.790] GetModuleHandleW (lpModuleName=0x0) returned 0x1630000 [0112.791] _vsnwprintf (in: _Buffer=0x1644ae0, _BufferCount=0x1fff, _Format="%s>", _ArgList=0x1337334 | out: _Buffer="netsh>") returned 6 [0112.791] GetProcessHeap () returned 0x1400000 [0112.791] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140bd58 [0112.791] GetProcessHeap () returned 0x1400000 [0112.791] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140bd68 [0112.792] GetProcessHeap () returned 0x1400000 [0112.792] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140bd78 [0112.792] GetProcessHeap () returned 0x1400000 [0112.792] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140bd98 [0112.792] GetProcessHeap () returned 0x1400000 [0112.793] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140bbf8 [0112.793] GetProcessHeap () returned 0x1400000 [0112.793] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140bc28 [0112.793] GetProcessHeap () returned 0x1400000 [0112.794] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140bcb8 [0112.794] GetProcessHeap () returned 0x1400000 [0112.794] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140bc38 [0112.794] GetProcessHeap () returned 0x1400000 [0112.794] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140bc68 [0112.794] GetProcessHeap () returned 0x1400000 [0112.794] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140bc78 [0112.794] GetProcessHeap () returned 0x1400000 [0112.794] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d120 [0112.794] GetProcessHeap () returned 0x1400000 [0112.794] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d0d0 [0112.794] GetProcessHeap () returned 0x1400000 [0112.794] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d110 [0112.794] GetProcessHeap () returned 0x1400000 [0112.794] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d000 [0112.794] GetProcessHeap () returned 0x1400000 [0112.794] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140cfe0 [0112.794] GetProcessHeap () returned 0x1400000 [0112.794] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d0e0 [0112.795] GetProcessHeap () returned 0x1400000 [0112.795] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140cff0 [0112.795] GetProcessHeap () returned 0x1400000 [0112.795] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d010 [0112.795] GetProcessHeap () returned 0x1400000 [0112.795] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d0b0 [0112.795] GetProcessHeap () returned 0x1400000 [0112.795] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d070 [0112.795] GetProcessHeap () returned 0x1400000 [0112.795] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d0f0 [0112.795] GetProcessHeap () returned 0x1400000 [0112.795] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d130 [0112.795] GetProcessHeap () returned 0x1400000 [0112.795] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d080 [0112.795] GetProcessHeap () returned 0x1400000 [0112.795] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d090 [0112.795] GetProcessHeap () returned 0x1400000 [0112.795] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d100 [0112.795] GetProcessHeap () returned 0x1400000 [0112.795] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d050 [0112.795] GetProcessHeap () returned 0x1400000 [0112.795] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d0c0 [0112.795] GetProcessHeap () returned 0x1400000 [0112.796] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d040 [0112.796] GetProcessHeap () returned 0x1400000 [0112.796] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d060 [0112.796] GetProcessHeap () returned 0x1400000 [0112.796] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140cf70 [0112.796] GetProcessHeap () returned 0x1400000 [0112.796] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140cf80 [0112.796] GetProcessHeap () returned 0x1400000 [0112.796] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140cfc0 [0112.796] GetProcessHeap () returned 0x1400000 [0112.796] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d020 [0112.796] GetProcessHeap () returned 0x1400000 [0112.796] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d030 [0112.796] GetProcessHeap () returned 0x1400000 [0112.796] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d0a0 [0112.796] GetProcessHeap () returned 0x1400000 [0112.796] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140cf90 [0112.796] GetProcessHeap () returned 0x1400000 [0112.796] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140cfa0 [0112.796] GetProcessHeap () returned 0x1400000 [0112.796] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140cfb0 [0112.796] GetProcessHeap () returned 0x1400000 [0112.797] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140cfd0 [0112.797] GetProcessHeap () returned 0x1400000 [0112.797] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140cd80 [0112.797] GetProcessHeap () returned 0x1400000 [0112.797] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140ce20 [0112.797] GetProcessHeap () returned 0x1400000 [0112.797] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140cec0 [0112.797] GetProcessHeap () returned 0x1400000 [0112.797] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140cee0 [0112.797] GetProcessHeap () returned 0x1400000 [0112.797] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140ce00 [0112.797] GetProcessHeap () returned 0x1400000 [0112.797] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140cd90 [0112.797] GetProcessHeap () returned 0x1400000 [0112.797] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140cf30 [0112.797] GetProcessHeap () returned 0x1400000 [0112.797] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140cde0 [0112.797] GetProcessHeap () returned 0x1400000 [0112.797] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140ce70 [0112.797] GetProcessHeap () returned 0x1400000 [0112.797] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140cda0 [0112.797] GetProcessHeap () returned 0x1400000 [0112.797] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140cf50 [0112.797] GetProcessHeap () returned 0x1400000 [0112.797] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140ce40 [0112.797] GetProcessHeap () returned 0x1400000 [0112.798] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140cd70 [0112.798] GetProcessHeap () returned 0x1400000 [0112.798] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140ce60 [0112.798] GetProcessHeap () returned 0x1400000 [0112.798] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140ced0 [0112.798] GetProcessHeap () returned 0x1400000 [0112.798] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140cdb0 [0112.798] GetProcessHeap () returned 0x1400000 [0112.798] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140cdc0 [0112.798] GetProcessHeap () returned 0x1400000 [0112.798] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140cef0 [0112.798] GetProcessHeap () returned 0x1400000 [0112.798] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140ce10 [0112.798] GetProcessHeap () returned 0x1400000 [0112.798] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140cf10 [0112.798] GetProcessHeap () returned 0x1400000 [0112.798] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140cea0 [0112.798] GetProcessHeap () returned 0x1400000 [0112.798] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140cf00 [0112.798] GetProcessHeap () returned 0x1400000 [0112.798] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140cdf0 [0112.798] GetProcessHeap () returned 0x1400000 [0112.799] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140ce30 [0112.799] GetProcessHeap () returned 0x1400000 [0112.799] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140cdd0 [0112.799] GetProcessHeap () returned 0x1400000 [0112.799] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140cf20 [0112.799] GetProcessHeap () returned 0x1400000 [0112.799] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140ce50 [0112.799] GetProcessHeap () returned 0x1400000 [0112.799] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140ce80 [0112.799] GetProcessHeap () returned 0x1400000 [0112.799] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140cf40 [0112.799] GetProcessHeap () returned 0x1400000 [0112.799] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140cf60 [0112.799] GetProcessHeap () returned 0x1400000 [0112.799] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140ceb0 [0112.799] GetProcessHeap () returned 0x1400000 [0112.799] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140ce90 [0112.799] GetProcessHeap () returned 0x1400000 [0112.799] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d228 [0112.799] GetProcessHeap () returned 0x1400000 [0112.799] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d298 [0112.799] GetProcessHeap () returned 0x1400000 [0112.799] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d2c8 [0112.799] GetProcessHeap () returned 0x1400000 [0112.799] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d358 [0112.799] GetProcessHeap () returned 0x1400000 [0112.799] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d288 [0112.800] GetProcessHeap () returned 0x1400000 [0112.800] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d248 [0112.800] GetProcessHeap () returned 0x1400000 [0112.800] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d268 [0112.800] GetProcessHeap () returned 0x1400000 [0112.800] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d1a8 [0112.800] GetProcessHeap () returned 0x1400000 [0112.800] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d2a8 [0112.800] GetProcessHeap () returned 0x1400000 [0112.800] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d2b8 [0112.800] GetProcessHeap () returned 0x1400000 [0112.800] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d348 [0112.800] GetProcessHeap () returned 0x1400000 [0112.800] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d328 [0112.800] GetProcessHeap () returned 0x1400000 [0112.800] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d1e8 [0112.800] GetProcessHeap () returned 0x1400000 [0112.800] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d318 [0112.800] GetProcessHeap () returned 0x1400000 [0112.800] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d1f8 [0112.800] GetProcessHeap () returned 0x1400000 [0112.800] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d238 [0112.800] GetProcessHeap () returned 0x1400000 [0112.801] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d258 [0112.801] GetProcessHeap () returned 0x1400000 [0112.801] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d2d8 [0112.801] GetProcessHeap () returned 0x1400000 [0112.801] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d278 [0112.801] GetProcessHeap () returned 0x1400000 [0112.801] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d2e8 [0112.801] GetProcessHeap () returned 0x1400000 [0112.801] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d198 [0112.801] GetProcessHeap () returned 0x1400000 [0112.801] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d338 [0112.801] GetProcessHeap () returned 0x1400000 [0112.801] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d2f8 [0112.801] GetProcessHeap () returned 0x1400000 [0112.801] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d208 [0112.801] GetProcessHeap () returned 0x1400000 [0112.801] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d308 [0112.801] GetProcessHeap () returned 0x1400000 [0112.802] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d368 [0112.802] GetProcessHeap () returned 0x1400000 [0112.802] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d1b8 [0112.802] GetProcessHeap () returned 0x1400000 [0112.802] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d178 [0112.802] GetProcessHeap () returned 0x1400000 [0112.802] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d188 [0112.802] GetProcessHeap () returned 0x1400000 [0112.802] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d1c8 [0112.802] GetProcessHeap () returned 0x1400000 [0112.802] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d1d8 [0112.802] GetProcessHeap () returned 0x1400000 [0112.802] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d218 [0112.802] GetProcessHeap () returned 0x1400000 [0112.802] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d428 [0112.802] GetProcessHeap () returned 0x1400000 [0112.803] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d4d8 [0112.803] GetProcessHeap () returned 0x1400000 [0112.803] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d538 [0112.803] GetProcessHeap () returned 0x1400000 [0112.803] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d4f8 [0112.803] GetProcessHeap () returned 0x1400000 [0112.803] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d378 [0112.803] GetProcessHeap () returned 0x1400000 [0112.803] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d438 [0112.803] GetProcessHeap () returned 0x1400000 [0112.803] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d3d8 [0112.803] GetProcessHeap () returned 0x1400000 [0112.804] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d4a8 [0112.804] GetProcessHeap () returned 0x1400000 [0112.804] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d4e8 [0112.804] GetProcessHeap () returned 0x1400000 [0112.804] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d468 [0112.804] GetProcessHeap () returned 0x1400000 [0112.804] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d418 [0112.804] GetProcessHeap () returned 0x1400000 [0112.804] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d408 [0112.804] GetProcessHeap () returned 0x1400000 [0112.804] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d4b8 [0112.804] GetProcessHeap () returned 0x1400000 [0112.804] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d508 [0112.804] GetProcessHeap () returned 0x1400000 [0112.805] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d3e8 [0112.805] GetProcessHeap () returned 0x1400000 [0112.805] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d388 [0112.805] GetProcessHeap () returned 0x1400000 [0112.805] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d518 [0112.805] GetProcessHeap () returned 0x1400000 [0112.805] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d3c8 [0112.805] GetProcessHeap () returned 0x1400000 [0112.805] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d4c8 [0112.805] GetProcessHeap () returned 0x1400000 [0112.805] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d458 [0112.805] GetProcessHeap () returned 0x1400000 [0112.805] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d528 [0112.806] GetProcessHeap () returned 0x1400000 [0112.806] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d478 [0112.806] GetProcessHeap () returned 0x1400000 [0112.806] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d3b8 [0112.806] GetProcessHeap () returned 0x1400000 [0112.806] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d448 [0112.806] GetProcessHeap () returned 0x1400000 [0112.806] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d398 [0112.806] GetProcessHeap () returned 0x1400000 [0112.806] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d3a8 [0112.806] GetProcessHeap () returned 0x1400000 [0112.806] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d3f8 [0112.806] GetProcessHeap () returned 0x1400000 [0112.806] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d488 [0112.806] GetProcessHeap () returned 0x1400000 [0112.806] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d498 [0112.806] GetProcessHeap () returned 0x1400000 [0112.807] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d5d0 [0112.807] GetProcessHeap () returned 0x1400000 [0112.807] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d760 [0112.807] GetProcessHeap () returned 0x1400000 [0112.807] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d5e0 [0112.807] GetProcessHeap () returned 0x1400000 [0112.807] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d5f0 [0112.807] GetProcessHeap () returned 0x1400000 [0112.807] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d6d0 [0112.807] GetProcessHeap () returned 0x1400000 [0112.807] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d670 [0112.807] GetProcessHeap () returned 0x1400000 [0112.807] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d720 [0112.807] GetProcessHeap () returned 0x1400000 [0112.807] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d6e0 [0112.808] GetProcessHeap () returned 0x1400000 [0112.859] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d6b0 [0112.859] GetProcessHeap () returned 0x1400000 [0112.859] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d730 [0112.859] GetProcessHeap () returned 0x1400000 [0112.859] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d770 [0112.859] GetProcessHeap () returned 0x1400000 [0112.859] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d740 [0112.859] GetProcessHeap () returned 0x1400000 [0112.859] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d5c0 [0112.859] GetProcessHeap () returned 0x1400000 [0112.859] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d6c0 [0112.859] GetProcessHeap () returned 0x1400000 [0112.859] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d750 [0112.860] GetProcessHeap () returned 0x1400000 [0112.860] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d600 [0112.860] GetProcessHeap () returned 0x1400000 [0112.860] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d610 [0112.860] GetProcessHeap () returned 0x1400000 [0112.860] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d580 [0112.860] GetProcessHeap () returned 0x1400000 [0112.860] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d680 [0112.860] GetProcessHeap () returned 0x1400000 [0112.860] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d6f0 [0112.860] GetProcessHeap () returned 0x1400000 [0112.860] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d660 [0112.860] GetProcessHeap () returned 0x1400000 [0112.860] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d590 [0112.860] GetProcessHeap () returned 0x1400000 [0112.860] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d5a0 [0112.861] GetProcessHeap () returned 0x1400000 [0112.861] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d5b0 [0112.861] GetProcessHeap () returned 0x1400000 [0112.861] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d640 [0112.861] GetProcessHeap () returned 0x1400000 [0112.861] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d710 [0112.861] GetProcessHeap () returned 0x1400000 [0112.861] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d620 [0112.861] GetProcessHeap () returned 0x1400000 [0112.861] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d690 [0112.861] GetProcessHeap () returned 0x1400000 [0112.861] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d6a0 [0112.861] GetProcessHeap () returned 0x1400000 [0112.861] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d700 [0112.861] GetProcessHeap () returned 0x1400000 [0112.861] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d630 [0112.862] GetProcessHeap () returned 0x1400000 [0112.862] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d650 [0112.862] GetProcessHeap () returned 0x1400000 [0112.862] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d8f0 [0112.862] GetProcessHeap () returned 0x1400000 [0112.862] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d780 [0112.862] GetProcessHeap () returned 0x1400000 [0112.862] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d840 [0112.862] GetProcessHeap () returned 0x1400000 [0112.862] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d7f0 [0112.862] GetProcessHeap () returned 0x1400000 [0112.863] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d8c0 [0112.863] GetProcessHeap () returned 0x1400000 [0112.863] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d800 [0112.863] GetProcessHeap () returned 0x1400000 [0112.863] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d8d0 [0112.863] GetProcessHeap () returned 0x1400000 [0112.863] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d810 [0112.863] GetProcessHeap () returned 0x1400000 [0112.863] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d820 [0112.863] GetProcessHeap () returned 0x1400000 [0112.863] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d910 [0112.864] GetProcessHeap () returned 0x1400000 [0112.864] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d900 [0112.864] GetProcessHeap () returned 0x1400000 [0112.864] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d880 [0112.864] GetProcessHeap () returned 0x1400000 [0112.864] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d920 [0112.864] GetProcessHeap () returned 0x1400000 [0112.864] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d940 [0112.864] GetProcessHeap () returned 0x1400000 [0112.864] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d930 [0112.864] GetProcessHeap () returned 0x1400000 [0112.865] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d8a0 [0112.865] GetProcessHeap () returned 0x1400000 [0112.865] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d790 [0112.865] GetProcessHeap () returned 0x1400000 [0112.865] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d830 [0112.865] GetProcessHeap () returned 0x1400000 [0112.865] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d8e0 [0112.865] GetProcessHeap () returned 0x1400000 [0112.865] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d7a0 [0112.865] GetProcessHeap () returned 0x1400000 [0112.865] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d7b0 [0112.866] GetProcessHeap () returned 0x1400000 [0112.866] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d850 [0112.866] GetProcessHeap () returned 0x1400000 [0112.866] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d7c0 [0112.866] GetProcessHeap () returned 0x1400000 [0112.866] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d8b0 [0112.866] GetProcessHeap () returned 0x1400000 [0112.866] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d7d0 [0112.866] GetProcessHeap () returned 0x1400000 [0112.866] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d7e0 [0112.866] GetProcessHeap () returned 0x1400000 [0112.867] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d860 [0112.867] GetProcessHeap () returned 0x1400000 [0112.867] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d870 [0112.867] GetProcessHeap () returned 0x1400000 [0112.867] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d890 [0112.867] GetProcessHeap () returned 0x1400000 [0112.867] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140dd48 [0112.867] GetProcessHeap () returned 0x1400000 [0112.867] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140db88 [0112.867] GetProcessHeap () returned 0x1400000 [0112.867] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140dc98 [0112.868] GetProcessHeap () returned 0x1400000 [0112.868] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140db98 [0112.868] GetProcessHeap () returned 0x1400000 [0112.868] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140dbe8 [0112.868] GetProcessHeap () returned 0x1400000 [0112.868] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140dba8 [0112.868] GetProcessHeap () returned 0x1400000 [0112.868] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140dbd8 [0112.868] GetProcessHeap () returned 0x1400000 [0112.868] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140dbb8 [0112.868] GetProcessHeap () returned 0x1400000 [0112.868] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140dc28 [0112.869] GetProcessHeap () returned 0x1400000 [0112.869] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140dc38 [0112.869] GetProcessHeap () returned 0x1400000 [0112.869] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140dbf8 [0112.869] GetProcessHeap () returned 0x1400000 [0112.869] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140dc48 [0112.869] GetProcessHeap () returned 0x1400000 [0112.869] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140dc08 [0112.869] GetProcessHeap () returned 0x1400000 [0112.869] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140dd38 [0112.869] GetProcessHeap () returned 0x1400000 [0112.869] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140dbc8 [0112.869] GetProcessHeap () returned 0x1400000 [0112.869] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140dc58 [0112.870] GetProcessHeap () returned 0x1400000 [0112.870] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140dc18 [0112.870] GetProcessHeap () returned 0x1400000 [0112.870] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140dc68 [0112.871] _wcsicmp (_String1="netsh.exe", _String2="ipxmontr.dll") returned 5 [0112.871] _wcsicmp (_String1="netsh.exe", _String2="ipxpromn.dll") returned 5 [0112.871] GetProcessHeap () returned 0x1400000 [0112.871] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x14) returned 0x1404c70 [0112.871] GetProcessHeap () returned 0x1400000 [0112.871] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x2) returned 0x140dc78 [0112.872] GetProcessHeap () returned 0x1400000 [0112.872] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x14) returned 0x1404e88 [0112.872] _wcsupr (in: _String="netsh.exe" | out: _String="NETSH.EXE") returned="NETSH.EXE" [0112.872] GetProcessHeap () returned 0x1400000 [0112.872] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x0) returned 1 [0112.872] GetProcessHeap () returned 0x1400000 [0112.872] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x48) returned 0x14084f0 [0112.872] GetProcessHeap () returned 0x1400000 [0112.873] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x0) returned 1 [0112.873] GetProcessHeap () returned 0x1400000 [0112.873] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x90) returned 0x14004a0 [0112.873] GetProcessHeap () returned 0x1400000 [0112.873] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x14084f0) returned 1 [0112.873] LoadLibraryExW (lpLibFileName="api-ms-win-appmodel-runtime-l1-1-0.dll", hFile=0x0, dwFlags=0x8) returned 0x77380000 [0113.534] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\NetSh", ulOptions=0x0, samDesired=0x20019, phkResult=0x133732c | out: phkResult=0x133732c*=0x10c) returned 0x0 [0113.535] RegQueryInfoKeyW (in: hKey=0x10c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x1337328, lpcbMaxValueNameLen=0x1337320, lpcbMaxValueLen=0x1337324, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x1337328*=0x11, lpcbMaxValueNameLen=0x1337320, lpcbMaxValueLen=0x1337324, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0113.535] GetProcessHeap () returned 0x1400000 [0113.536] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x8, Size=0x16) returned 0x1404a28 [0113.536] GetProcessHeap () returned 0x1400000 [0113.536] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x8, Size=0x23) returned 0x1404a48 [0113.536] RegEnumValueW (in: hKey=0x10c, dwIndex=0x0, lpValueName=0x1404a28, lpcchValueName=0x1337318, lpReserved=0x0, lpType=0x0, lpData=0x1404a48, lpcbData=0x133731c | out: lpValueName="2", lpcchValueName=0x1337318, lpType=0x0, lpData=0x1404a48, lpcbData=0x133731c) returned 0x0 [0113.536] _wcsicmp (_String1="ifmon.dll", _String2="ipxmontr.dll") returned -10 [0113.536] _wcsicmp (_String1="ifmon.dll", _String2="ipxpromn.dll") returned -10 [0113.536] GetProcessHeap () returned 0x1400000 [0113.536] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x28) returned 0x1403960 [0113.536] GetProcessHeap () returned 0x1400000 [0113.537] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x4) returned 0x140dc88 [0113.537] GetProcessHeap () returned 0x1400000 [0113.537] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x14) returned 0x140dfa8 [0113.537] _wcsupr (in: _String="ifmon.dll" | out: _String="IFMON.DLL") returned="IFMON.DLL" [0113.537] GetProcessHeap () returned 0x1400000 [0113.537] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x1404c70) returned 1 [0113.537] LoadLibraryExW (lpLibFileName="IFMON.DLL", hFile=0x0, dwFlags=0x0) returned 0x73cf0000 [0114.287] GetProcAddress (hModule=0x73cf0000, lpProcName="InitHelperDll") returned 0x73cf1d30 [0114.288] InitHelperDll () returned 0x0 [0114.296] RegisterHelper () returned 0x0 [0114.296] GetProcessHeap () returned 0x1400000 [0114.296] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0xd8) returned 0x1414b88 [0114.296] GetProcessHeap () returned 0x1400000 [0114.296] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x14004a0) returned 1 [0114.994] RegEnumValueW (in: hKey=0x10c, dwIndex=0x1, lpValueName=0x1404a28, lpcchValueName=0x1337318, lpReserved=0x0, lpType=0x0, lpData=0x1404a48, lpcbData=0x133731c | out: lpValueName="4", lpcchValueName=0x1337318, lpType=0x0, lpData=0x1404a48, lpcbData=0x133731c) returned 0x0 [0114.994] _wcsicmp (_String1="rasmontr.dll", _String2="ipxmontr.dll") returned 9 [0114.994] _wcsicmp (_String1="rasmontr.dll", _String2="ipxpromn.dll") returned 9 [0114.994] GetProcessHeap () returned 0x1400000 [0114.994] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x3c) returned 0x1403ed0 [0114.996] GetProcessHeap () returned 0x1400000 [0114.996] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x4) returned 0x140dd08 [0114.996] GetProcessHeap () returned 0x1400000 [0114.996] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x1a) returned 0x1412dc8 [0114.996] _wcsupr (in: _String="rasmontr.dll" | out: _String="RASMONTR.DLL") returned="RASMONTR.DLL" [0114.996] GetProcessHeap () returned 0x1400000 [0114.996] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x1403960) returned 1 [0114.996] LoadLibraryExW (lpLibFileName="RASMONTR.DLL", hFile=0x0, dwFlags=0x0) returned 0x73bf0000 [0131.989] LoadLibraryExA (lpLibFileName="MSVCRT.DLL", hFile=0x0, dwFlags=0x800) returned 0x768a0000 [0131.989] GetVersion () returned 0x3ad7000a [0131.989] SetErrorMode (uMode=0x0) returned 0x0 [0131.989] SetErrorMode (uMode=0x8001) returned 0x0 [0131.989] LocalAlloc (uFlags=0x0, uBytes=0x2000) returned 0x1418c70 [0131.990] LocalFree (hMem=0x1418c70) returned 0x0 [0131.990] GetVersion () returned 0x3ad7000a [0132.018] GlobalLock (hMem=0x4ff0004) returned 0x1418c70 [0132.018] LocalAlloc (uFlags=0x40, uBytes=0x178) returned 0x1418d80 [0132.018] LocalAlloc (uFlags=0x40, uBytes=0x10) returned 0x14162c8 [0132.019] LocalAlloc (uFlags=0x0, uBytes=0x8) returned 0x140dad8 [0132.019] malloc (_Size=0x80) returned 0x13910a0 [0132.019] __dllonexit () returned 0x739be510 [0132.019] __dllonexit () returned 0x739be4e0 [0132.019] __dllonexit () returned 0x739be4f0 [0132.020] __dllonexit () returned 0x739be500 [0132.025] __dllonexit () returned 0x739a2bd0 [0132.025] __dllonexit () returned 0x739a2bc0 [0132.025] __dllonexit () returned 0x739a2c00 [0132.025] __dllonexit () returned 0x739a2c40 [0132.025] __dllonexit () returned 0x739a2d10 [0132.025] __dllonexit () returned 0x739a2d20 [0132.025] __dllonexit () returned 0x739a2d70 [0132.037] __dllonexit () returned 0x739a2e20 [0132.038] __dllonexit () returned 0x739a2c60 [0132.038] __dllonexit () returned 0x739be560 [0132.038] __dllonexit () returned 0x739a2c80 [0132.038] __dllonexit () returned 0x739a2dd0 [0132.038] __dllonexit () returned 0x739a2df0 [0132.038] __dllonexit () returned 0x739a2e40 [0132.038] __dllonexit () returned 0x739a2e80 [0132.038] __dllonexit () returned 0x739a2e70 [0132.038] __dllonexit () returned 0x739a2ea0 [0132.039] __dllonexit () returned 0x739a2ec0 [0132.039] __dllonexit () returned 0x739a2ef0 [0132.039] __dllonexit () returned 0x739a2f70 [0132.039] __dllonexit () returned 0x739a2ae0 [0132.039] __dllonexit () returned 0x739a2af0 [0132.039] __dllonexit () returned 0x739a2ad0 [0132.041] RegisterClipboardFormatW (lpszFormat="commctrl_DragListMsg") returned 0xc199 [0132.042] __dllonexit () returned 0x739be540 [0132.042] __dllonexit () returned 0x739be520 [0132.042] __dllonexit () returned 0x739be550 [0132.042] __dllonexit () returned 0x739be530 [0132.043] GetVersion () returned 0x3ad7000a [0132.043] GetVersion () returned 0x3ad7000a [0132.043] GetVersion () returned 0x3ad7000a [0132.043] __dllonexit () returned 0x739b3c70 [0132.044] __dllonexit () returned 0x739b3c90 [0132.044] __dllonexit () returned 0x739a2ca0 [0132.044] __dllonexit () returned 0x739a2d30 [0132.044] __dllonexit () returned 0x739a2d40 [0132.044] __dllonexit () returned 0x739b3ae0 [0132.044] GetVersion () returned 0x3ad7000a [0132.045] GetProcessVersion (ProcessId=0x0) returned 0xa0000 [0132.045] GetSystemMetrics (nIndex=11) returned 32 [0132.045] GetSystemMetrics (nIndex=12) returned 32 [0132.045] GetSystemMetrics (nIndex=2) returned 17 [0132.045] GetSystemMetrics (nIndex=3) returned 17 [0132.045] GetDC (hWnd=0x0) returned 0x10105c7 [0132.045] GetDeviceCaps (hdc=0x10105c7, index=88) returned 96 [0132.045] GetDeviceCaps (hdc=0x10105c7, index=90) returned 96 [0132.046] ReleaseDC (hWnd=0x0, hDC=0x10105c7) returned 1 [0132.046] GetSysColor (nIndex=15) returned 0xf0f0f0 [0132.046] GetSysColor (nIndex=16) returned 0xa0a0a0 [0132.046] GetSysColor (nIndex=20) returned 0xffffff [0132.046] GetSysColor (nIndex=18) returned 0x0 [0132.046] GetSysColor (nIndex=6) returned 0x646464 [0132.046] GetSysColorBrush (nIndex=15) returned 0x100072 [0132.046] GetSysColorBrush (nIndex=6) returned 0x10007a [0132.046] LoadCursorW (hInstance=0x0, lpCursorName=0x7f02) returned 0x10007 [0132.046] LoadCursorW (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0132.046] __dllonexit () returned 0x739a2da0 [0132.047] RegisterClipboardFormatW (lpszFormat="commdlg_FindReplace") returned 0xc198 [0132.047] __dllonexit () returned 0x739b3ad0 [0132.047] RegisterClipboardFormatW (lpszFormat="Native") returned 0xc004 [0132.047] RegisterClipboardFormatW (lpszFormat="OwnerLink") returned 0xc003 [0132.047] RegisterClipboardFormatW (lpszFormat="ObjectLink") returned 0xc002 [0132.047] RegisterClipboardFormatW (lpszFormat="Embedded Object") returned 0xc00a [0132.047] RegisterClipboardFormatW (lpszFormat="Embed Source") returned 0xc00b [0132.047] RegisterClipboardFormatW (lpszFormat="Link Source") returned 0xc00d [0132.047] RegisterClipboardFormatW (lpszFormat="Object Descriptor") returned 0xc00e [0132.047] RegisterClipboardFormatW (lpszFormat="Link Source Descriptor") returned 0xc00f [0132.047] RegisterClipboardFormatW (lpszFormat="FileName") returned 0xc006 [0132.048] RegisterClipboardFormatW (lpszFormat="FileNameW") returned 0xc007 [0132.048] RegisterClipboardFormatW (lpszFormat="Rich Text Format") returned 0xc0f5 [0132.048] RegisterClipboardFormatW (lpszFormat="RichEdit Text and Objects") returned 0xc0fe [0132.048] RegisterClipboardFormatW (lpszFormat="commdlg_FindReplace") returned 0xc198 [0132.048] __dllonexit () returned 0x739be570 [0132.048] __dllonexit () returned 0x739be590 [0132.049] __dllonexit () returned 0x739be5a0 [0132.049] __dllonexit () returned 0x739be5b0 [0132.049] __dllonexit () returned 0x739be5c0 [0132.050] GetCursorPos (in: lpPoint=0x73a8a298 | out: lpPoint=0x73a8a298*(x=1093, y=672)) returned 1 [0132.050] LocalAlloc (uFlags=0x40, uBytes=0x84) returned 0x1418f00 [0132.050] LocalReAlloc (hMem=0x140dad8, uBytes=0xc, uFlags=0x2) returned 0x14187c8 [0132.050] GetCurrentThread () returned 0xfffffffe [0132.050] GetCurrentThreadId () returned 0xb60 [0132.050] __dllonexit () returned 0x739a2f80 [0132.050] SetErrorMode (uMode=0x0) returned 0x8001 [0132.050] SetErrorMode (uMode=0x8001) returned 0x0 [0132.051] GetModuleFileNameW (in: hModule=0x73980000, lpFilename=0x1336b20, nSize=0x104 | out: lpFilename="C:\\WINDOWS\\System32\\MFC42u.dll" (normalized: "c:\\windows\\system32\\mfc42u.dll")) returned 0x1e [0132.051] wcscpy_s (in: _Destination=0x1336918, _SizeInWords=0x104, _Source="MFC42u" | out: _Destination="MFC42u") returned 0x0 [0132.051] FindResourceW (hModule=0x73980000, lpName=0xe01, lpType=0x6) returned 0x15f0bb0 [0132.112] LoadStringW (in: hInstance=0x73980000, uID=0xe000, lpBuffer=0x1336718, cchBufferMax=256 | out: lpBuffer="") returned 0x0 [0132.112] wcscpy_s (in: _Destination=0x1336b54, _SizeInWords=0x5, _Source=".HLP" | out: _Destination=".HLP") returned 0x0 [0132.112] wcscat_s (in: _Destination="MFC42u", _SizeInWords=0x104, _Source=".INI" | out: _Destination="MFC42u.INI") returned 0x0 [0132.163] malloc (_Size=0x40) returned 0x1393938 [0132.163] LocalAlloc (uFlags=0x40, uBytes=0x2090) returned 0x1418f90 [0132.164] GetSystemDirectoryA (in: lpBuffer=0x1336d6c, uSize=0x112 | out: lpBuffer="C:\\WINDOWS\\system32") returned 0x13 [0132.164] strcat_s (in: _Destination="C:\\WINDOWS\\system32", _SizeInBytes=0x112, _Source="\\MFC42" | out: _Destination="C:\\WINDOWS\\system32\\MFC42") returned 0x0 [0132.164] strcat_s (in: _Destination="C:\\WINDOWS\\system32\\MFC42", _SizeInBytes=0x112, _Source="LOC" | out: _Destination="C:\\WINDOWS\\system32\\MFC42LOC") returned 0x0 [0132.164] strcat_s (in: _Destination="C:\\WINDOWS\\system32\\MFC42LOC", _SizeInBytes=0x112, _Source=".DLL" | out: _Destination="C:\\WINDOWS\\system32\\MFC42LOC.DLL") returned 0x0 [0132.164] LoadLibraryExA (lpLibFileName="C:\\WINDOWS\\system32\\MFC42LOC.DLL", hFile=0x0, dwFlags=0x2) returned 0x0 [0132.298] GetProcAddress (hModule=0x73bf0000, lpProcName="InitHelperDll") returned 0x73c14150 [0132.298] InitHelperDll () returned 0x0 [0132.298] RegisterHelper () returned 0x0 [0132.298] GetProcessHeap () returned 0x1400000 [0132.298] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x120) returned 0x1417d40 [0132.299] GetProcessHeap () returned 0x1400000 [0132.299] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x1414b88) returned 1 [0132.299] RegisterHelper () returned 0x0 [0132.299] GetProcessHeap () returned 0x1400000 [0132.299] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x168) returned 0x1415d90 [0132.299] GetProcessHeap () returned 0x1400000 [0132.299] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x1417d40) returned 1 [0132.391] RegisterHelper () returned 0x0 [0132.391] GetProcessHeap () returned 0x1400000 [0132.391] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x1b0) returned 0x1417310 [0132.392] GetProcessHeap () returned 0x1400000 [0132.392] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x1415d90) returned 1 [0132.392] RegisterHelper () returned 0x0 [0132.392] GetProcessHeap () returned 0x1400000 [0132.392] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x1f8) returned 0x141b028 [0132.392] GetProcessHeap () returned 0x1400000 [0132.392] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x1417310) returned 1 [0132.392] RegisterHelper () returned 0x0 [0132.392] GetProcessHeap () returned 0x1400000 [0132.392] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x240) returned 0x141b228 [0132.392] GetProcessHeap () returned 0x1400000 [0132.392] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x141b028) returned 1 [0132.392] RegEnumValueW (in: hKey=0x10c, dwIndex=0x2, lpValueName=0x1404a28, lpcchValueName=0x1337318, lpReserved=0x0, lpType=0x0, lpData=0x1404a48, lpcbData=0x133731c | out: lpValueName="authfwcfg", lpcchValueName=0x1337318, lpType=0x0, lpData=0x1404a48, lpcbData=0x133731c) returned 0x0 [0132.392] _wcsicmp (_String1="authfwcfg.dll", _String2="ipxmontr.dll") returned -8 [0132.392] _wcsicmp (_String1="authfwcfg.dll", _String2="ipxpromn.dll") returned -8 [0132.392] GetProcessHeap () returned 0x1400000 [0132.392] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x50) returned 0x1416f80 [0132.392] GetProcessHeap () returned 0x1400000 [0132.392] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x14) returned 0x140e108 [0132.392] GetProcessHeap () returned 0x1400000 [0132.392] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x1c) returned 0x1412d50 [0132.392] _wcsupr (in: _String="authfwcfg.dll" | out: _String="AUTHFWCFG.DLL") returned="AUTHFWCFG.DLL" [0132.393] GetProcessHeap () returned 0x1400000 [0132.393] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x1403ed0) returned 1 [0132.393] LoadLibraryExW (lpLibFileName="AUTHFWCFG.DLL", hFile=0x0, dwFlags=0x0) returned 0x73900000 [0133.734] GetProcAddress (hModule=0x73900000, lpProcName="InitHelperDll") returned 0x73903d00 [0133.734] InitHelperDll () returned 0x0 [0133.764] RegisterHelper () returned 0x0 [0133.764] GetProcessHeap () returned 0x1400000 [0133.764] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x288) returned 0x141e088 [0133.765] GetProcessHeap () returned 0x1400000 [0133.765] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x141b228) returned 1 [0133.765] RegisterHelper () returned 0x0 [0133.765] GetProcessHeap () returned 0x1400000 [0133.765] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x2d0) returned 0x141b028 [0133.765] GetProcessHeap () returned 0x1400000 [0133.765] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x141e088) returned 1 [0133.765] RegisterHelper () returned 0x0 [0133.765] GetProcessHeap () returned 0x1400000 [0133.765] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x318) returned 0x141e088 [0133.765] GetProcessHeap () returned 0x1400000 [0133.765] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x141b028) returned 1 [0133.765] RegisterHelper () returned 0x0 [0133.765] GetProcessHeap () returned 0x1400000 [0133.765] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x360) returned 0x141b028 [0133.765] GetProcessHeap () returned 0x1400000 [0133.765] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x141e088) returned 1 [0133.765] RegisterHelper () returned 0x0 [0133.765] GetProcessHeap () returned 0x1400000 [0133.765] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x3a8) returned 0x141e088 [0133.765] GetProcessHeap () returned 0x1400000 [0133.765] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x141b028) returned 1 [0133.765] RegEnumValueW (in: hKey=0x10c, dwIndex=0x3, lpValueName=0x1404a28, lpcchValueName=0x1337318, lpReserved=0x0, lpType=0x0, lpData=0x1404a48, lpcbData=0x133731c | out: lpValueName="dhcpclient", lpcchValueName=0x1337318, lpType=0x0, lpData=0x1404a48, lpcbData=0x133731c) returned 0x0 [0133.765] _wcsicmp (_String1="dhcpcmonitor.dll", _String2="ipxmontr.dll") returned -5 [0133.765] _wcsicmp (_String1="dhcpcmonitor.dll", _String2="ipxpromn.dll") returned -5 [0133.765] GetProcessHeap () returned 0x1400000 [0133.765] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x64) returned 0x1416700 [0133.765] GetProcessHeap () returned 0x1400000 [0133.765] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x16) returned 0x140e148 [0133.765] GetProcessHeap () returned 0x1400000 [0133.765] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x22) returned 0x140ffe0 [0133.766] _wcsupr (in: _String="dhcpcmonitor.dll" | out: _String="DHCPCMONITOR.DLL") returned="DHCPCMONITOR.DLL" [0133.766] GetProcessHeap () returned 0x1400000 [0133.766] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x1416f80) returned 1 [0133.766] LoadLibraryExW (lpLibFileName="DHCPCMONITOR.DLL", hFile=0x0, dwFlags=0x0) returned 0x73830000 [0134.045] GetProcAddress (hModule=0x73830000, lpProcName="InitHelperDll") returned 0x73831a70 [0134.045] InitHelperDll () returned 0x0 [0134.045] RegisterHelper () returned 0x0 [0134.045] GetProcessHeap () returned 0x1400000 [0134.045] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x3f0) returned 0x141b028 [0134.045] GetProcessHeap () returned 0x1400000 [0134.045] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x141e088) returned 1 [0134.046] RegEnumValueW (in: hKey=0x10c, dwIndex=0x4, lpValueName=0x1404a28, lpcchValueName=0x1337318, lpReserved=0x0, lpType=0x0, lpData=0x1404a48, lpcbData=0x133731c | out: lpValueName="dot3cfg", lpcchValueName=0x1337318, lpType=0x0, lpData=0x1404a48, lpcbData=0x133731c) returned 0x0 [0134.046] _wcsicmp (_String1="dot3cfg.dll", _String2="ipxmontr.dll") returned -5 [0134.046] _wcsicmp (_String1="dot3cfg.dll", _String2="ipxpromn.dll") returned -5 [0134.046] GetProcessHeap () returned 0x1400000 [0134.046] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x78) returned 0x1416550 [0134.046] GetProcessHeap () returned 0x1400000 [0134.046] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x10) returned 0x141df08 [0134.046] GetProcessHeap () returned 0x1400000 [0134.046] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x18) returned 0x140dea8 [0134.046] _wcsupr (in: _String="dot3cfg.dll" | out: _String="DOT3CFG.DLL") returned="DOT3CFG.DLL" [0134.046] GetProcessHeap () returned 0x1400000 [0134.046] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x1416700) returned 1 [0134.046] LoadLibraryExW (lpLibFileName="DOT3CFG.DLL", hFile=0x0, dwFlags=0x0) returned 0x737d0000 [0139.193] GetProcAddress (hModule=0x737d0000, lpProcName="InitHelperDll") returned 0x737d3ae0 [0139.193] InitHelperDll () returned 0x0 [0139.193] RegisterHelper () returned 0x0 [0139.193] GetProcessHeap () returned 0x1400000 [0139.193] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x438) returned 0x1420c48 [0139.193] GetProcessHeap () returned 0x1400000 [0139.193] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x141b028) returned 1 [0139.193] RegEnumValueW (in: hKey=0x10c, dwIndex=0x5, lpValueName=0x1404a28, lpcchValueName=0x1337318, lpReserved=0x0, lpType=0x0, lpData=0x1404a48, lpcbData=0x133731c | out: lpValueName="fwcfg", lpcchValueName=0x1337318, lpType=0x0, lpData=0x1404a48, lpcbData=0x133731c) returned 0x0 [0139.194] _wcsicmp (_String1="fwcfg.dll", _String2="ipxmontr.dll") returned -3 [0139.194] _wcsicmp (_String1="fwcfg.dll", _String2="ipxpromn.dll") returned -3 [0139.194] GetProcessHeap () returned 0x1400000 [0139.194] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8c) returned 0x1416620 [0139.194] GetProcessHeap () returned 0x1400000 [0139.194] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0xc) returned 0x141dec0 [0139.194] GetProcessHeap () returned 0x1400000 [0139.194] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x14) returned 0x140dd88 [0139.194] _wcsupr (in: _String="fwcfg.dll" | out: _String="FWCFG.DLL") returned="FWCFG.DLL" [0139.194] GetProcessHeap () returned 0x1400000 [0139.194] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x1416550) returned 1 [0139.194] LoadLibraryExW (lpLibFileName="FWCFG.DLL", hFile=0x0, dwFlags=0x0) returned 0x73690000 [0139.522] GetProcAddress (hModule=0x73690000, lpProcName="InitHelperDll") returned 0x736922e0 [0139.522] InitHelperDll () returned 0x0 [0139.522] RegisterHelper () returned 0x0 [0139.522] GetProcessHeap () returned 0x1400000 [0139.522] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x480) returned 0x1421088 [0139.522] GetProcessHeap () returned 0x1400000 [0139.522] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x1420c48) returned 1 [0139.522] RegEnumValueW (in: hKey=0x10c, dwIndex=0x6, lpValueName=0x1404a28, lpcchValueName=0x1337318, lpReserved=0x0, lpType=0x0, lpData=0x1404a48, lpcbData=0x133731c | out: lpValueName="hnetmon", lpcchValueName=0x1337318, lpType=0x0, lpData=0x1404a48, lpcbData=0x133731c) returned 0x0 [0139.522] _wcsicmp (_String1="hnetmon.dll", _String2="ipxmontr.dll") returned -1 [0139.522] _wcsicmp (_String1="hnetmon.dll", _String2="ipxpromn.dll") returned -1 [0139.523] GetProcessHeap () returned 0x1400000 [0139.523] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0xa0) returned 0x14004a0 [0139.523] GetProcessHeap () returned 0x1400000 [0139.523] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x10) returned 0x141df68 [0139.523] GetProcessHeap () returned 0x1400000 [0139.523] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x18) returned 0x140e0e8 [0139.523] _wcsupr (in: _String="hnetmon.dll" | out: _String="HNETMON.DLL") returned="HNETMON.DLL" [0139.523] GetProcessHeap () returned 0x1400000 [0139.523] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x1416620) returned 1 [0139.523] LoadLibraryExW (lpLibFileName="HNETMON.DLL", hFile=0x0, dwFlags=0x0) returned 0x73680000 [0148.904] GetProcAddress (hModule=0x73680000, lpProcName="InitHelperDll") returned 0x736824a0 [0148.904] InitHelperDll () returned 0x0 [0148.905] RegisterHelper () returned 0x0 [0148.905] GetProcessHeap () returned 0x1400000 [0148.905] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x4c8) returned 0x1424d88 [0148.905] GetProcessHeap () returned 0x1400000 [0148.905] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x1421088) returned 1 [0148.905] RegEnumValueW (in: hKey=0x10c, dwIndex=0x7, lpValueName=0x1404a28, lpcchValueName=0x1337318, lpReserved=0x0, lpType=0x0, lpData=0x1404a48, lpcbData=0x133731c | out: lpValueName="netiohlp", lpcchValueName=0x1337318, lpType=0x0, lpData=0x1404a48, lpcbData=0x133731c) returned 0x0 [0148.905] _wcsicmp (_String1="netiohlp.dll", _String2="ipxmontr.dll") returned 5 [0148.905] _wcsicmp (_String1="netiohlp.dll", _String2="ipxpromn.dll") returned 5 [0148.905] GetProcessHeap () returned 0x1400000 [0148.906] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0xb4) returned 0x1415df8 [0148.906] GetProcessHeap () returned 0x1400000 [0148.906] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x12) returned 0x140e008 [0148.906] GetProcessHeap () returned 0x1400000 [0148.906] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x1a) returned 0x1412bc0 [0148.906] _wcsupr (in: _String="netiohlp.dll" | out: _String="NETIOHLP.DLL") returned="NETIOHLP.DLL" [0148.906] GetProcessHeap () returned 0x1400000 [0148.906] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x14004a0) returned 1 [0148.906] LoadLibraryExW (lpLibFileName="NETIOHLP.DLL", hFile=0x0, dwFlags=0x0) returned 0x733a0000 [0150.150] GetProcAddress (hModule=0x733a0000, lpProcName="InitHelperDll") returned 0x733b6c00 [0150.151] InitHelperDll () returned 0x0 [0150.151] RegisterHelper () returned 0x0 [0150.151] GetProcessHeap () returned 0x1400000 [0150.151] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x510) returned 0x1427268 [0150.151] GetProcessHeap () returned 0x1400000 [0150.151] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x1424d88) returned 1 [0150.151] RegisterHelper () returned 0x0 [0150.151] GetProcessHeap () returned 0x1400000 [0150.151] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x558) returned 0x1427780 [0150.151] GetProcessHeap () returned 0x1400000 [0150.151] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x1427268) returned 1 [0150.151] RegisterHelper () returned 0x0 [0150.151] GetProcessHeap () returned 0x1400000 [0150.151] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x5a0) returned 0x1427ce0 [0150.152] GetProcessHeap () returned 0x1400000 [0150.152] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x1427780) returned 1 [0150.152] RegisterHelper () returned 0x0 [0150.152] GetProcessHeap () returned 0x1400000 [0150.152] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x5e8) returned 0x1427268 [0150.153] GetProcessHeap () returned 0x1400000 [0150.153] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x1427ce0) returned 1 [0150.153] RegisterHelper () returned 0x0 [0150.153] GetProcessHeap () returned 0x1400000 [0150.153] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x630) returned 0x1427858 [0150.153] GetProcessHeap () returned 0x1400000 [0150.153] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x1427268) returned 1 [0150.153] RegisterHelper () returned 0x0 [0150.153] GetProcessHeap () returned 0x1400000 [0150.153] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x678) returned 0x1427e90 [0150.153] GetProcessHeap () returned 0x1400000 [0150.153] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x1427858) returned 1 [0150.153] RegisterHelper () returned 0x0 [0150.153] GetProcessHeap () returned 0x1400000 [0150.153] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x6c0) returned 0x1428510 [0150.153] GetProcessHeap () returned 0x1400000 [0150.154] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x1427e90) returned 1 [0150.154] RegisterHelper () returned 0x0 [0150.154] GetProcessHeap () returned 0x1400000 [0150.154] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x708) returned 0x1427268 [0150.154] GetProcessHeap () returned 0x1400000 [0150.154] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x1428510) returned 1 [0150.154] RegisterHelper () returned 0x0 [0150.154] GetProcessHeap () returned 0x1400000 [0150.154] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x750) returned 0x1427978 [0150.154] GetProcessHeap () returned 0x1400000 [0150.154] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x1427268) returned 1 [0150.154] RegEnumValueW (in: hKey=0x10c, dwIndex=0x8, lpValueName=0x1404a28, lpcchValueName=0x1337318, lpReserved=0x0, lpType=0x0, lpData=0x1404a48, lpcbData=0x133731c | out: lpValueName="nshhttp", lpcchValueName=0x1337318, lpType=0x0, lpData=0x1404a48, lpcbData=0x133731c) returned 0x0 [0150.154] _wcsicmp (_String1="nshhttp.dll", _String2="ipxmontr.dll") returned 5 [0150.154] _wcsicmp (_String1="nshhttp.dll", _String2="ipxpromn.dll") returned 5 [0150.154] GetProcessHeap () returned 0x1400000 [0150.154] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0xc8) returned 0x141e310 [0150.155] GetProcessHeap () returned 0x1400000 [0150.155] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x10) returned 0x141b058 [0150.155] GetProcessHeap () returned 0x1400000 [0150.155] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x18) returned 0x140dec8 [0150.155] _wcsupr (in: _String="nshhttp.dll" | out: _String="NSHHTTP.DLL") returned="NSHHTTP.DLL" [0150.155] GetProcessHeap () returned 0x1400000 [0150.155] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x1415df8) returned 1 [0150.155] LoadLibraryExW (lpLibFileName="NSHHTTP.DLL", hFile=0x0, dwFlags=0x0) returned 0x73300000 [0150.580] GetProcAddress (hModule=0x73300000, lpProcName="InitHelperDll") returned 0x73301c50 [0150.580] InitHelperDll () returned 0x0 [0150.580] RegisterHelper () returned 0x0 [0150.580] GetProcessHeap () returned 0x1400000 [0150.580] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x798) returned 0x14280d0 [0150.580] GetProcessHeap () returned 0x1400000 [0150.580] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x1427978) returned 1 [0150.580] RegEnumValueW (in: hKey=0x10c, dwIndex=0x9, lpValueName=0x1404a28, lpcchValueName=0x1337318, lpReserved=0x0, lpType=0x0, lpData=0x1404a48, lpcbData=0x133731c | out: lpValueName="nshipsec", lpcchValueName=0x1337318, lpType=0x0, lpData=0x1404a48, lpcbData=0x133731c) returned 0x0 [0150.581] _wcsicmp (_String1="nshipsec.dll", _String2="ipxmontr.dll") returned 5 [0150.581] _wcsicmp (_String1="nshipsec.dll", _String2="ipxpromn.dll") returned 5 [0150.581] GetProcessHeap () returned 0x1400000 [0150.581] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0xdc) returned 0x1415df8 [0150.581] GetProcessHeap () returned 0x1400000 [0150.581] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x12) returned 0x140de08 [0150.581] GetProcessHeap () returned 0x1400000 [0150.581] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x1a) returned 0x1412cd8 [0150.581] _wcsupr (in: _String="nshipsec.dll" | out: _String="NSHIPSEC.DLL") returned="NSHIPSEC.DLL" [0150.581] GetProcessHeap () returned 0x1400000 [0150.581] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x141e310) returned 1 [0150.581] LoadLibraryExW (lpLibFileName="NSHIPSEC.DLL", hFile=0x0, dwFlags=0x0) returned 0x73280000 [0154.274] GetProcAddress (hModule=0x73280000, lpProcName="InitHelperDll") returned 0x73283990 [0154.274] InitHelperDll () returned 0x0 [0154.274] RegisterHelper () returned 0x0 [0154.274] GetProcessHeap () returned 0x1400000 [0154.275] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x7e0) returned 0x1429078 [0154.275] GetProcessHeap () returned 0x1400000 [0154.275] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x14280d0) returned 1 [0154.275] RegisterHelper () returned 0x0 [0154.275] GetProcessHeap () returned 0x1400000 [0154.275] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x828) returned 0x1427af8 [0154.275] GetProcessHeap () returned 0x1400000 [0154.275] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x1429078) returned 1 [0154.275] RegisterHelper () returned 0x0 [0154.275] GetProcessHeap () returned 0x1400000 [0154.275] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x870) returned 0x1429078 [0154.275] GetProcessHeap () returned 0x1400000 [0154.275] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x1427af8) returned 1 [0154.298] RegEnumValueW (in: hKey=0x10c, dwIndex=0xa, lpValueName=0x1404a28, lpcchValueName=0x1337318, lpReserved=0x0, lpType=0x0, lpData=0x1404a48, lpcbData=0x133731c | out: lpValueName="nshwfp", lpcchValueName=0x1337318, lpType=0x0, lpData=0x1404a48, lpcbData=0x133731c) returned 0x0 [0154.299] _wcsicmp (_String1="nshwfp.dll", _String2="ipxmontr.dll") returned 5 [0154.299] _wcsicmp (_String1="nshwfp.dll", _String2="ipxpromn.dll") returned 5 [0154.299] GetProcessHeap () returned 0x1400000 [0154.299] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0xf0) returned 0x1429dc0 [0154.299] GetProcessHeap () returned 0x1400000 [0154.299] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0xe) returned 0x1424fb0 [0154.299] GetProcessHeap () returned 0x1400000 [0154.299] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x16) returned 0x140de28 [0154.299] _wcsupr (in: _String="nshwfp.dll" | out: _String="NSHWFP.DLL") returned="NSHWFP.DLL" [0154.299] GetProcessHeap () returned 0x1400000 [0154.299] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x1415df8) returned 1 [0154.299] LoadLibraryExW (lpLibFileName="NSHWFP.DLL", hFile=0x0, dwFlags=0x0) returned 0x730c0000 [0154.900] GetProcAddress (hModule=0x730c0000, lpProcName="InitHelperDll") returned 0x73116ab0 [0154.900] InitHelperDll () returned 0x0 [0154.901] RegisterHelper () returned 0x0 [0154.901] GetProcessHeap () returned 0x1400000 [0154.901] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8b8) returned 0x142bf58 [0154.902] GetProcessHeap () returned 0x1400000 [0154.902] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x1429078) returned 1 [0154.902] RegEnumValueW (in: hKey=0x10c, dwIndex=0xb, lpValueName=0x1404a28, lpcchValueName=0x1337318, lpReserved=0x0, lpType=0x0, lpData=0x1404a48, lpcbData=0x133731c | out: lpValueName="p2pnetsh", lpcchValueName=0x1337318, lpType=0x0, lpData=0x1404a48, lpcbData=0x133731c) returned 0x0 [0154.902] _wcsicmp (_String1="p2pnetsh.dll", _String2="ipxmontr.dll") returned 7 [0154.902] _wcsicmp (_String1="p2pnetsh.dll", _String2="ipxpromn.dll") returned 7 [0154.902] GetProcessHeap () returned 0x1400000 [0154.902] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x104) returned 0x1427af8 [0154.902] GetProcessHeap () returned 0x1400000 [0154.902] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x12) returned 0x140dee8 [0154.902] GetProcessHeap () returned 0x1400000 [0154.902] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x1a) returned 0x1428cb0 [0154.902] _wcsupr (in: _String="p2pnetsh.dll" | out: _String="P2PNETSH.DLL") returned="P2PNETSH.DLL" [0154.902] GetProcessHeap () returned 0x1400000 [0154.902] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x1429dc0) returned 1 [0154.902] LoadLibraryExW (lpLibFileName="P2PNETSH.DLL", hFile=0x0, dwFlags=0x0) returned 0x73070000 [0155.466] GetProcAddress (hModule=0x73070000, lpProcName="InitHelperDll") returned 0x73075910 [0155.467] InitHelperDll () returned 0x0 [0155.467] RegisterHelper () returned 0x0 [0155.467] GetProcessHeap () returned 0x1400000 [0155.467] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x900) returned 0x142e820 [0155.467] GetProcessHeap () returned 0x1400000 [0155.467] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x142bf58) returned 1 [0155.467] RegisterHelper () returned 0x0 [0155.467] GetProcessHeap () returned 0x1400000 [0155.467] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x948) returned 0x142f128 [0155.467] GetProcessHeap () returned 0x1400000 [0155.467] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x142e820) returned 1 [0155.467] RegisterHelper () returned 0x0 [0155.467] GetProcessHeap () returned 0x1400000 [0155.467] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x990) returned 0x142fa78 [0155.468] GetProcessHeap () returned 0x1400000 [0155.468] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x142f128) returned 1 [0155.468] RegisterHelper () returned 0x0 [0155.468] GetProcessHeap () returned 0x1400000 [0155.468] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x9d8) returned 0x1430410 [0155.468] GetProcessHeap () returned 0x1400000 [0155.468] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x142fa78) returned 1 [0155.474] RegisterHelper () returned 0x0 [0155.474] GetProcessHeap () returned 0x1400000 [0155.474] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0xa20) returned 0x142e820 [0155.474] GetProcessHeap () returned 0x1400000 [0155.474] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x1430410) returned 1 [0155.474] RegisterHelper () returned 0x0 [0155.474] GetProcessHeap () returned 0x1400000 [0155.474] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0xa68) returned 0x142f248 [0155.474] GetProcessHeap () returned 0x1400000 [0155.474] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x142e820) returned 1 [0155.474] RegisterHelper () returned 0x0 [0155.474] GetProcessHeap () returned 0x1400000 [0155.474] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0xab0) returned 0x142fcb8 [0155.475] GetProcessHeap () returned 0x1400000 [0155.475] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x142f248) returned 1 [0155.478] RegisterHelper () returned 0x0 [0155.478] GetProcessHeap () returned 0x1400000 [0155.478] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0xaf8) returned 0x142e820 [0155.478] GetProcessHeap () returned 0x1400000 [0155.478] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x142fcb8) returned 1 [0155.478] RegEnumValueW (in: hKey=0x10c, dwIndex=0xc, lpValueName=0x1404a28, lpcchValueName=0x1337318, lpReserved=0x0, lpType=0x0, lpData=0x1404a48, lpcbData=0x133731c | out: lpValueName="rpc", lpcchValueName=0x1337318, lpType=0x0, lpData=0x1404a48, lpcbData=0x133731c) returned 0x0 [0155.479] _wcsicmp (_String1="rpcnsh.dll", _String2="ipxmontr.dll") returned 9 [0155.479] _wcsicmp (_String1="rpcnsh.dll", _String2="ipxpromn.dll") returned 9 [0155.479] GetProcessHeap () returned 0x1400000 [0155.479] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x118) returned 0x1427c08 [0155.479] GetProcessHeap () returned 0x1400000 [0155.479] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140d998 [0155.479] GetProcessHeap () returned 0x1400000 [0155.479] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x16) returned 0x140e088 [0155.479] _wcsupr (in: _String="rpcnsh.dll" | out: _String="RPCNSH.DLL") returned="RPCNSH.DLL" [0155.479] GetProcessHeap () returned 0x1400000 [0155.479] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x1427af8) returned 1 [0155.479] LoadLibraryExW (lpLibFileName="RPCNSH.DLL", hFile=0x0, dwFlags=0x0) returned 0x73030000 [0155.511] GetProcAddress (hModule=0x73030000, lpProcName="InitHelperDll") returned 0x73032ae0 [0155.511] InitHelperDll () returned 0x0 [0155.511] RegisterHelper () returned 0x0 [0155.511] GetProcessHeap () returned 0x1400000 [0155.511] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0xb40) returned 0x142f320 [0155.511] GetProcessHeap () returned 0x1400000 [0155.511] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x142e820) returned 1 [0155.511] RegisterHelper () returned 0x0 [0155.511] GetProcessHeap () returned 0x1400000 [0155.511] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0xb88) returned 0x142fe68 [0155.511] GetProcessHeap () returned 0x1400000 [0155.511] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x142f320) returned 1 [0155.511] RegEnumValueW (in: hKey=0x10c, dwIndex=0xd, lpValueName=0x1404a28, lpcchValueName=0x1337318, lpReserved=0x0, lpType=0x0, lpData=0x1404a48, lpcbData=0x133731c | out: lpValueName="whhelper", lpcchValueName=0x1337318, lpType=0x0, lpData=0x1404a48, lpcbData=0x133731c) returned 0x0 [0155.512] _wcsicmp (_String1="whhelper.dll", _String2="ipxmontr.dll") returned 14 [0155.512] _wcsicmp (_String1="whhelper.dll", _String2="ipxpromn.dll") returned 14 [0155.512] GetProcessHeap () returned 0x1400000 [0155.512] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x12c) returned 0x1427d28 [0155.512] GetProcessHeap () returned 0x1400000 [0155.512] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x12) returned 0x140df08 [0155.512] GetProcessHeap () returned 0x1400000 [0155.512] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x1a) returned 0x1428ad0 [0155.512] _wcsupr (in: _String="whhelper.dll" | out: _String="WHHELPER.DLL") returned="WHHELPER.DLL" [0155.512] GetProcessHeap () returned 0x1400000 [0155.512] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x1427c08) returned 1 [0155.512] LoadLibraryExW (lpLibFileName="WHHELPER.DLL", hFile=0x0, dwFlags=0x0) returned 0x73020000 [0156.355] GetProcAddress (hModule=0x73020000, lpProcName="InitHelperDll") returned 0x730218d0 [0156.355] InitHelperDll () returned 0x0 [0156.355] RegisterHelper () returned 0x0 [0156.355] GetProcessHeap () returned 0x1400000 [0156.355] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0xbd0) returned 0x142e820 [0156.355] GetProcessHeap () returned 0x1400000 [0156.355] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x142fe68) returned 1 [0156.355] RegEnumValueW (in: hKey=0x10c, dwIndex=0xe, lpValueName=0x1404a28, lpcchValueName=0x1337318, lpReserved=0x0, lpType=0x0, lpData=0x1404a48, lpcbData=0x133731c | out: lpValueName="wlancfg", lpcchValueName=0x1337318, lpType=0x0, lpData=0x1404a48, lpcbData=0x133731c) returned 0x0 [0156.355] _wcsicmp (_String1="wlancfg.dll", _String2="ipxmontr.dll") returned 14 [0156.355] _wcsicmp (_String1="wlancfg.dll", _String2="ipxpromn.dll") returned 14 [0156.356] GetProcessHeap () returned 0x1400000 [0156.356] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x140) returned 0x1427e60 [0156.356] GetProcessHeap () returned 0x1400000 [0156.356] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x10) returned 0x14250b8 [0156.356] GetProcessHeap () returned 0x1400000 [0156.356] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x18) returned 0x140df28 [0156.356] _wcsupr (in: _String="wlancfg.dll" | out: _String="WLANCFG.DLL") returned="WLANCFG.DLL" [0156.356] GetProcessHeap () returned 0x1400000 [0156.356] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x1427d28) returned 1 [0156.356] LoadLibraryExW (lpLibFileName="WLANCFG.DLL", hFile=0x0, dwFlags=0x0) returned 0x72f30000 [0159.016] GetProcAddress (hModule=0x72f30000, lpProcName="InitHelperDll") returned 0x72f3abb0 [0159.016] InitHelperDll () returned 0x0 [0159.016] RegisterHelper () returned 0x0 [0159.016] GetProcessHeap () returned 0x1400000 [0159.016] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0xc18) returned 0x1431400 [0159.016] GetProcessHeap () returned 0x1400000 [0159.016] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x142e820) returned 1 [0159.016] RegEnumValueW (in: hKey=0x10c, dwIndex=0xf, lpValueName=0x1404a28, lpcchValueName=0x1337318, lpReserved=0x0, lpType=0x0, lpData=0x1404a48, lpcbData=0x133731c | out: lpValueName="wshelper", lpcchValueName=0x1337318, lpType=0x0, lpData=0x1404a48, lpcbData=0x133731c) returned 0x0 [0159.017] _wcsicmp (_String1="wshelper.dll", _String2="ipxmontr.dll") returned 14 [0159.017] _wcsicmp (_String1="wshelper.dll", _String2="ipxpromn.dll") returned 14 [0159.017] GetProcessHeap () returned 0x1400000 [0159.017] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x154) returned 0x1428698 [0159.017] GetProcessHeap () returned 0x1400000 [0159.017] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x12) returned 0x1429548 [0159.017] GetProcessHeap () returned 0x1400000 [0159.017] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x1a) returned 0x1428c60 [0159.017] _wcsupr (in: _String="wshelper.dll" | out: _String="WSHELPER.DLL") returned="WSHELPER.DLL" [0159.017] GetProcessHeap () returned 0x1400000 [0159.017] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x1427e60) returned 1 [0159.017] LoadLibraryExW (lpLibFileName="WSHELPER.DLL", hFile=0x0, dwFlags=0x0) returned 0x72d20000 [0159.745] GetProcAddress (hModule=0x72d20000, lpProcName="InitHelperDll") returned 0x72d21720 [0159.745] InitHelperDll () returned 0x0 [0159.746] RegisterHelper () returned 0x0 [0159.746] GetProcessHeap () returned 0x1400000 [0159.746] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0xc60) returned 0x1432c30 [0159.746] GetProcessHeap () returned 0x1400000 [0159.746] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x1431400) returned 1 [0159.746] RegEnumValueW (in: hKey=0x10c, dwIndex=0x10, lpValueName=0x1404a28, lpcchValueName=0x1337318, lpReserved=0x0, lpType=0x0, lpData=0x1404a48, lpcbData=0x133731c | out: lpValueName="peerdistsh", lpcchValueName=0x1337318, lpType=0x0, lpData=0x1404a48, lpcbData=0x133731c) returned 0x0 [0159.746] _wcsicmp (_String1="peerdistsh.dll", _String2="ipxmontr.dll") returned 7 [0159.758] _wcsicmp (_String1="peerdistsh.dll", _String2="ipxpromn.dll") returned 7 [0159.765] GetProcessHeap () returned 0x1400000 [0159.765] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x168) returned 0x1427d80 [0159.765] GetProcessHeap () returned 0x1400000 [0159.766] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x16) returned 0x14290e8 [0159.766] GetProcessHeap () returned 0x1400000 [0159.766] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x1e) returned 0x1428cd8 [0159.766] _wcsupr (in: _String="peerdistsh.dll" | out: _String="PEERDISTSH.DLL") returned="PEERDISTSH.DLL" [0159.766] GetProcessHeap () returned 0x1400000 [0159.766] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x1428698) returned 1 [0159.766] LoadLibraryExW (lpLibFileName="PEERDISTSH.DLL", hFile=0x0, dwFlags=0x0) returned 0x72c70000 [0160.738] GetProcAddress (hModule=0x72c70000, lpProcName="InitHelperDll") returned 0x72c8d390 [0160.739] InitHelperDll () returned 0x0 [0160.740] RegisterHelper () returned 0x0 [0160.740] GetProcessHeap () returned 0x1400000 [0160.740] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0xca8) returned 0x1433898 [0160.741] GetProcessHeap () returned 0x1400000 [0160.741] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x1432c30) returned 1 [0160.741] RegisterHelper () returned 0x0 [0160.741] GetProcessHeap () returned 0x1400000 [0160.741] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0xcf0) returned 0x1434548 [0160.742] GetProcessHeap () returned 0x1400000 [0160.742] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x1433898) returned 1 [0160.742] RegCloseKey (hKey=0x10c) returned 0x0 [0160.742] GetProcessHeap () returned 0x1400000 [0160.742] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x1404a28) returned 1 [0160.742] GetProcessHeap () returned 0x1400000 [0160.742] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x1404a48) returned 1 [0160.745] GetProcessHeap () returned 0x1400000 [0160.745] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x48) returned 0x1417880 [0160.746] GetProcessHeap () returned 0x1400000 [0160.746] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x0) returned 1 [0160.747] RegisterContext () returned 0x0 [0160.748] GetProcessHeap () returned 0x1400000 [0160.748] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x48) returned 0x1417970 [0160.748] GetProcessHeap () returned 0x1400000 [0160.748] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x0) returned 1 [0160.749] RegisterContext () returned 0x0 [0160.757] _wcsicmp (_String1="ras", _String2="interface") returned 9 [0160.757] _wcsicmp (_String1="ras", _String2="interface") returned 9 [0160.757] GetProcessHeap () returned 0x1400000 [0160.757] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x90) returned 0x1416620 [0160.757] GetProcessHeap () returned 0x1400000 [0160.757] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x1417970) returned 1 [0161.073] RegisterContext () returned 0x0 [0161.075] GetProcessHeap () returned 0x1400000 [0161.075] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x48) returned 0x1417970 [0161.075] GetProcessHeap () returned 0x1400000 [0161.075] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x0) returned 1 [0161.076] RegisterContext () returned 0x0 [0161.077] _wcsicmp (_String1="ipv6", _String2="ip") returned 118 [0161.077] _wcsicmp (_String1="ipv6", _String2="ip") returned 118 [0161.077] GetProcessHeap () returned 0x1400000 [0161.077] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x90) returned 0x14160a8 [0161.077] GetProcessHeap () returned 0x1400000 [0161.077] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x1417970) returned 1 [0161.078] RegisterContext () returned 0x0 [0161.080] _wcsicmp (_String1="aaaa", _String2="ip") returned -8 [0161.080] _wcsicmp (_String1="aaaa", _String2="ipv6") returned -8 [0161.080] _wcsicmp (_String1="aaaa", _String2="ip") returned -8 [0161.080] GetProcessHeap () returned 0x1400000 [0161.080] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0xd8) returned 0x1420c48 [0161.080] GetProcessHeap () returned 0x1400000 [0161.080] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x14160a8) returned 1 [0161.081] RegisterContext () returned 0x0 [0161.082] _wcsicmp (_String1="diagnostics", _String2="aaaa") returned 3 [0161.082] _wcsicmp (_String1="diagnostics", _String2="ip") returned -5 [0161.082] _wcsicmp (_String1="diagnostics", _String2="ipv6") returned -5 [0161.082] _wcsicmp (_String1="diagnostics", _String2="aaaa") returned 3 [0161.082] _wcsicmp (_String1="diagnostics", _String2="ip") returned -5 [0161.082] GetProcessHeap () returned 0x1400000 [0161.082] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x120) returned 0x1431750 [0161.082] GetProcessHeap () returned 0x1400000 [0161.082] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x1420c48) returned 1 [0161.083] RegisterContext () returned 0x0 [0161.083] _wcsicmp (_String1="advfirewall", _String2="interface") returned -8 [0161.083] _wcsicmp (_String1="advfirewall", _String2="ras") returned -17 [0161.083] _wcsicmp (_String1="advfirewall", _String2="interface") returned -8 [0161.083] GetProcessHeap () returned 0x1400000 [0161.083] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0xd8) returned 0x1420c48 [0161.083] GetProcessHeap () returned 0x1400000 [0161.083] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x1416620) returned 1 [0161.083] RegisterContext () returned 0x0 [0161.083] GetProcessHeap () returned 0x1400000 [0161.083] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x48) returned 0x1417970 [0161.083] GetProcessHeap () returned 0x1400000 [0161.083] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x0) returned 1 [0161.084] RegisterContext () returned 0x0 [0161.084] _wcsicmp (_String1="firewall", _String2="consec") returned 3 [0161.084] _wcsicmp (_String1="firewall", _String2="consec") returned 3 [0161.084] GetProcessHeap () returned 0x1400000 [0161.084] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x90) returned 0x1416620 [0161.084] GetProcessHeap () returned 0x1400000 [0161.084] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x1417970) returned 1 [0161.085] RegisterContext () returned 0x0 [0161.085] _wcsicmp (_String1="monitor", _String2="consec") returned 10 [0161.085] _wcsicmp (_String1="monitor", _String2="firewall") returned 7 [0161.085] _wcsicmp (_String1="monitor", _String2="consec") returned 10 [0161.085] _wcsicmp (_String1="monitor", _String2="firewall") returned 7 [0161.085] GetProcessHeap () returned 0x1400000 [0161.085] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0xd8) returned 0x1428538 [0161.086] GetProcessHeap () returned 0x1400000 [0161.086] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x1416620) returned 1 [0161.086] RegisterContext () returned 0x0 [0161.086] _wcsicmp (_String1="mainmode", _String2="consec") returned 10 [0161.086] _wcsicmp (_String1="mainmode", _String2="firewall") returned 7 [0161.086] _wcsicmp (_String1="mainmode", _String2="monitor") returned -14 [0161.086] _wcsicmp (_String1="mainmode", _String2="consec") returned 10 [0161.086] _wcsicmp (_String1="mainmode", _String2="firewall") returned 7 [0161.086] _wcsicmp (_String1="mainmode", _String2="monitor") returned -14 [0161.086] GetProcessHeap () returned 0x1400000 [0161.087] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x120) returned 0x1431878 [0161.087] GetProcessHeap () returned 0x1400000 [0161.087] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x1428538) returned 1 [0161.087] RegisterContext () returned 0x0 [0161.087] _wcsicmp (_String1="dhcpclient", _String2="advfirewall") returned 3 [0161.087] _wcsicmp (_String1="dhcpclient", _String2="interface") returned -5 [0161.087] _wcsicmp (_String1="dhcpclient", _String2="ras") returned -14 [0161.088] _wcsicmp (_String1="dhcpclient", _String2="advfirewall") returned 3 [0161.088] _wcsicmp (_String1="dhcpclient", _String2="interface") returned -5 [0161.088] GetProcessHeap () returned 0x1400000 [0161.088] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x120) returned 0x14319a0 [0161.088] GetProcessHeap () returned 0x1400000 [0161.088] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x1420c48) returned 1 [0161.089] RegisterContext () returned 0x0 [0161.089] _wcsicmp (_String1="lan", _String2="advfirewall") returned 11 [0161.089] _wcsicmp (_String1="lan", _String2="dhcpclient") returned 8 [0161.089] _wcsicmp (_String1="lan", _String2="interface") returned 3 [0161.089] _wcsicmp (_String1="lan", _String2="ras") returned -6 [0161.089] _wcsicmp (_String1="lan", _String2="advfirewall") returned 11 [0161.089] _wcsicmp (_String1="lan", _String2="dhcpclient") returned 8 [0161.089] _wcsicmp (_String1="lan", _String2="interface") returned 3 [0161.089] _wcsicmp (_String1="lan", _String2="ras") returned -6 [0161.089] GetProcessHeap () returned 0x1400000 [0161.089] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x168) returned 0x1431ac8 [0161.089] GetProcessHeap () returned 0x1400000 [0161.089] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x14319a0) returned 1 [0161.145] RegisterContext () returned 0x0 [0161.145] _wcsicmp (_String1="firewall", _String2="advfirewall") returned 5 [0161.145] _wcsicmp (_String1="firewall", _String2="dhcpclient") returned 2 [0161.145] _wcsicmp (_String1="firewall", _String2="interface") returned -3 [0161.145] _wcsicmp (_String1="firewall", _String2="lan") returned -6 [0161.146] _wcsicmp (_String1="firewall", _String2="ras") returned -12 [0161.146] _wcsicmp (_String1="firewall", _String2="advfirewall") returned 5 [0161.146] _wcsicmp (_String1="firewall", _String2="dhcpclient") returned 2 [0161.146] _wcsicmp (_String1="firewall", _String2="interface") returned -3 [0161.146] GetProcessHeap () returned 0x1400000 [0161.146] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x1b0) returned 0x1431c38 [0161.146] GetProcessHeap () returned 0x1400000 [0161.146] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x1431ac8) returned 1 [0161.146] RegisterContext () returned 0x0 [0161.147] _wcsicmp (_String1="bridge", _String2="advfirewall") returned 1 [0161.147] _wcsicmp (_String1="bridge", _String2="dhcpclient") returned -2 [0161.147] _wcsicmp (_String1="bridge", _String2="firewall") returned -4 [0161.147] _wcsicmp (_String1="bridge", _String2="interface") returned -7 [0161.147] _wcsicmp (_String1="bridge", _String2="lan") returned -10 [0161.147] _wcsicmp (_String1="bridge", _String2="ras") returned -16 [0161.147] _wcsicmp (_String1="bridge", _String2="advfirewall") returned 1 [0161.147] _wcsicmp (_String1="bridge", _String2="dhcpclient") returned -2 [0161.147] GetProcessHeap () returned 0x1400000 [0161.147] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x1f8) returned 0x1431df0 [0161.147] GetProcessHeap () returned 0x1400000 [0161.147] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x1431c38) returned 1 [0161.147] RegisterContext () returned 0x0 [0161.148] _wcsicmp (_String1="netio", _String2="advfirewall") returned 13 [0161.148] _wcsicmp (_String1="netio", _String2="bridge") returned 12 [0161.148] _wcsicmp (_String1="netio", _String2="dhcpclient") returned 10 [0161.148] _wcsicmp (_String1="netio", _String2="firewall") returned 8 [0161.148] _wcsicmp (_String1="netio", _String2="interface") returned 5 [0161.148] _wcsicmp (_String1="netio", _String2="lan") returned 2 [0161.148] _wcsicmp (_String1="netio", _String2="ras") returned -4 [0161.148] _wcsicmp (_String1="netio", _String2="advfirewall") returned 13 [0161.148] _wcsicmp (_String1="netio", _String2="bridge") returned 12 [0161.148] _wcsicmp (_String1="netio", _String2="dhcpclient") returned 10 [0161.148] _wcsicmp (_String1="netio", _String2="firewall") returned 8 [0161.148] _wcsicmp (_String1="netio", _String2="interface") returned 5 [0161.148] _wcsicmp (_String1="netio", _String2="lan") returned 2 [0161.148] _wcsicmp (_String1="netio", _String2="ras") returned -4 [0161.148] GetProcessHeap () returned 0x1400000 [0161.148] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x240) returned 0x14319a0 [0161.149] GetProcessHeap () returned 0x1400000 [0161.149] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x1431df0) returned 1 [0161.149] RegisterContext () returned 0x0 [0161.149] _wcsicmp (_String1="dnsclient", _String2="advfirewall") returned 3 [0161.149] _wcsicmp (_String1="dnsclient", _String2="bridge") returned 2 [0161.149] _wcsicmp (_String1="dnsclient", _String2="dhcpclient") returned 6 [0161.149] _wcsicmp (_String1="dnsclient", _String2="firewall") returned -2 [0161.149] _wcsicmp (_String1="dnsclient", _String2="interface") returned -5 [0161.149] _wcsicmp (_String1="dnsclient", _String2="lan") returned -8 [0161.149] _wcsicmp (_String1="dnsclient", _String2="netio") returned -10 [0161.149] _wcsicmp (_String1="dnsclient", _String2="ras") returned -14 [0161.149] _wcsicmp (_String1="dnsclient", _String2="advfirewall") returned 3 [0161.149] _wcsicmp (_String1="dnsclient", _String2="bridge") returned 2 [0161.149] _wcsicmp (_String1="dnsclient", _String2="dhcpclient") returned 6 [0161.150] _wcsicmp (_String1="dnsclient", _String2="firewall") returned -2 [0161.150] GetProcessHeap () returned 0x1400000 [0161.150] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x288) returned 0x1431be8 [0161.150] GetProcessHeap () returned 0x1400000 [0161.150] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x14319a0) returned 1 [0161.150] RegisterContext () returned 0x0 [0161.150] _wcsicmp (_String1="namespace", _String2="advfirewall") returned 13 [0161.150] _wcsicmp (_String1="namespace", _String2="bridge") returned 12 [0161.150] _wcsicmp (_String1="namespace", _String2="dhcpclient") returned 10 [0161.150] _wcsicmp (_String1="namespace", _String2="dnsclient") returned 10 [0161.150] _wcsicmp (_String1="namespace", _String2="firewall") returned 8 [0161.150] _wcsicmp (_String1="namespace", _String2="interface") returned 5 [0161.150] _wcsicmp (_String1="namespace", _String2="lan") returned 2 [0161.150] _wcsicmp (_String1="namespace", _String2="netio") returned -4 [0161.151] _wcsicmp (_String1="namespace", _String2="ras") returned -4 [0161.151] _wcsicmp (_String1="namespace", _String2="advfirewall") returned 13 [0161.151] _wcsicmp (_String1="namespace", _String2="bridge") returned 12 [0161.151] _wcsicmp (_String1="namespace", _String2="dhcpclient") returned 10 [0161.151] _wcsicmp (_String1="namespace", _String2="dnsclient") returned 10 [0161.151] _wcsicmp (_String1="namespace", _String2="firewall") returned 8 [0161.151] _wcsicmp (_String1="namespace", _String2="interface") returned 5 [0161.151] _wcsicmp (_String1="namespace", _String2="lan") returned 2 [0161.151] _wcsicmp (_String1="namespace", _String2="netio") returned -4 [0161.151] GetProcessHeap () returned 0x1400000 [0161.151] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x2d0) returned 0x1438bc8 [0161.151] GetProcessHeap () returned 0x1400000 [0161.151] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x1431be8) returned 1 [0161.151] RegisterContext () returned 0x0 [0161.151] GetProcessHeap () returned 0x1400000 [0161.151] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x48) returned 0x1417970 [0161.151] GetProcessHeap () returned 0x1400000 [0161.152] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x0) returned 1 [0161.152] RegisterContext () returned 0x0 [0161.152] _wcsicmp (_String1="ipv6", _String2="ipv4") returned 2 [0161.152] _wcsicmp (_String1="ipv6", _String2="ipv4") returned 2 [0161.152] GetProcessHeap () returned 0x1400000 [0161.152] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x90) returned 0x1416620 [0161.152] GetProcessHeap () returned 0x1400000 [0161.152] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x1417970) returned 1 [0161.152] RegisterContext () returned 0x0 [0161.152] _wcsicmp (_String1="6to4", _String2="ipv4") returned -51 [0161.152] _wcsicmp (_String1="6to4", _String2="ipv6") returned -51 [0161.152] _wcsicmp (_String1="6to4", _String2="ipv4") returned -51 [0161.152] GetProcessHeap () returned 0x1400000 [0161.152] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0xd8) returned 0x1420c48 [0161.153] GetProcessHeap () returned 0x1400000 [0161.153] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x1416620) returned 1 [0161.153] RegisterContext () returned 0x0 [0161.153] _wcsicmp (_String1="isatap", _String2="6to4") returned 51 [0161.153] _wcsicmp (_String1="isatap", _String2="ipv4") returned 3 [0161.153] _wcsicmp (_String1="isatap", _String2="ipv6") returned 3 [0161.153] _wcsicmp (_String1="isatap", _String2="6to4") returned 51 [0161.153] _wcsicmp (_String1="isatap", _String2="ipv4") returned 3 [0161.153] _wcsicmp (_String1="isatap", _String2="ipv6") returned 3 [0161.153] GetProcessHeap () returned 0x1400000 [0161.153] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x120) returned 0x14319a0 [0161.153] GetProcessHeap () returned 0x1400000 [0161.153] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x1420c48) returned 1 [0161.154] RegisterContext () returned 0x0 [0161.154] _wcsicmp (_String1="teredo", _String2="6to4") returned 62 [0161.154] _wcsicmp (_String1="teredo", _String2="ipv4") returned 11 [0161.154] _wcsicmp (_String1="teredo", _String2="ipv6") returned 11 [0161.154] _wcsicmp (_String1="teredo", _String2="isatap") returned 11 [0161.154] _wcsicmp (_String1="teredo", _String2="6to4") returned 62 [0161.154] _wcsicmp (_String1="teredo", _String2="ipv4") returned 11 [0161.154] _wcsicmp (_String1="teredo", _String2="ipv6") returned 11 [0161.154] _wcsicmp (_String1="teredo", _String2="isatap") returned 11 [0161.154] GetProcessHeap () returned 0x1400000 [0161.154] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x168) returned 0x1431ac8 [0161.154] GetProcessHeap () returned 0x1400000 [0161.154] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x14319a0) returned 1 [0161.155] RegisterContext () returned 0x0 [0161.155] _wcsicmp (_String1="portproxy", _String2="6to4") returned 58 [0161.155] _wcsicmp (_String1="portproxy", _String2="ipv4") returned 7 [0161.155] _wcsicmp (_String1="portproxy", _String2="ipv6") returned 7 [0161.155] _wcsicmp (_String1="portproxy", _String2="isatap") returned 7 [0161.158] _wcsicmp (_String1="portproxy", _String2="teredo") returned -4 [0161.158] _wcsicmp (_String1="portproxy", _String2="6to4") returned 58 [0161.158] _wcsicmp (_String1="portproxy", _String2="ipv4") returned 7 [0161.159] _wcsicmp (_String1="portproxy", _String2="ipv6") returned 7 [0161.159] _wcsicmp (_String1="portproxy", _String2="isatap") returned 7 [0161.159] _wcsicmp (_String1="portproxy", _String2="teredo") returned -4 [0161.159] GetProcessHeap () returned 0x1400000 [0161.159] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x1b0) returned 0x1431c38 [0161.159] GetProcessHeap () returned 0x1400000 [0161.159] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x1431ac8) returned 1 [0161.159] RegisterContext () returned 0x0 [0161.159] GetProcessHeap () returned 0x1400000 [0161.159] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x48) returned 0x1417970 [0161.159] GetProcessHeap () returned 0x1400000 [0161.159] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x0) returned 1 [0161.160] RegisterContext () returned 0x0 [0161.160] _wcsicmp (_String1="isatap", _String2="6to4") returned 51 [0161.160] _wcsicmp (_String1="isatap", _String2="6to4") returned 51 [0161.160] GetProcessHeap () returned 0x1400000 [0161.160] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x90) returned 0x1416620 [0161.160] GetProcessHeap () returned 0x1400000 [0161.160] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x1417970) returned 1 [0161.160] RegisterContext () returned 0x0 [0161.161] _wcsicmp (_String1="portproxy", _String2="6to4") returned 58 [0161.161] _wcsicmp (_String1="portproxy", _String2="ipv4") returned 7 [0161.161] _wcsicmp (_String1="portproxy", _String2="ipv6") returned 7 [0161.161] _wcsicmp (_String1="portproxy", _String2="isatap") returned 7 [0161.161] _wcsicmp (_String1="portproxy", _String2="portproxy") returned 0 [0161.161] RegisterContext () returned 0x0 [0161.161] _wcsicmp (_String1="httpstunnel", _String2="6to4") returned 50 [0161.161] _wcsicmp (_String1="httpstunnel", _String2="ipv4") returned -1 [0161.161] _wcsicmp (_String1="httpstunnel", _String2="ipv6") returned -1 [0161.161] _wcsicmp (_String1="httpstunnel", _String2="isatap") returned -1 [0161.161] _wcsicmp (_String1="httpstunnel", _String2="portproxy") returned -8 [0161.161] _wcsicmp (_String1="httpstunnel", _String2="teredo") returned -12 [0161.162] _wcsicmp (_String1="httpstunnel", _String2="6to4") returned 50 [0161.162] _wcsicmp (_String1="httpstunnel", _String2="ipv4") returned -1 [0161.162] GetProcessHeap () returned 0x1400000 [0161.162] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x1f8) returned 0x1431df0 [0161.162] GetProcessHeap () returned 0x1400000 [0161.162] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x1431c38) returned 1 [0161.162] RegisterContext () returned 0x0 [0161.162] _wcsicmp (_String1="tcp", _String2="6to4") returned 62 [0161.162] _wcsicmp (_String1="tcp", _String2="httpstunnel") returned 12 [0161.162] _wcsicmp (_String1="tcp", _String2="ipv4") returned 11 [0161.162] _wcsicmp (_String1="tcp", _String2="ipv6") returned 11 [0161.162] _wcsicmp (_String1="tcp", _String2="isatap") returned 11 [0161.162] _wcsicmp (_String1="tcp", _String2="portproxy") returned 4 [0161.162] _wcsicmp (_String1="tcp", _String2="teredo") returned -2 [0161.162] _wcsicmp (_String1="tcp", _String2="6to4") returned 62 [0161.163] _wcsicmp (_String1="tcp", _String2="httpstunnel") returned 12 [0161.163] _wcsicmp (_String1="tcp", _String2="ipv4") returned 11 [0161.163] _wcsicmp (_String1="tcp", _String2="ipv6") returned 11 [0161.163] _wcsicmp (_String1="tcp", _String2="isatap") returned 11 [0161.163] _wcsicmp (_String1="tcp", _String2="portproxy") returned 4 [0161.163] _wcsicmp (_String1="tcp", _String2="teredo") returned -2 [0161.163] GetProcessHeap () returned 0x1400000 [0161.163] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x240) returned 0x14319a0 [0161.163] GetProcessHeap () returned 0x1400000 [0161.163] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x1431df0) returned 1 [0161.163] RegisterContext () returned 0x0 [0161.163] _wcsicmp (_String1="http", _String2="advfirewall") returned 7 [0161.163] _wcsicmp (_String1="http", _String2="bridge") returned 6 [0161.163] _wcsicmp (_String1="http", _String2="dhcpclient") returned 4 [0161.163] _wcsicmp (_String1="http", _String2="dnsclient") returned 4 [0161.163] _wcsicmp (_String1="http", _String2="firewall") returned 2 [0161.164] _wcsicmp (_String1="http", _String2="interface") returned -1 [0161.164] _wcsicmp (_String1="http", _String2="lan") returned -4 [0161.164] _wcsicmp (_String1="http", _String2="namespace") returned -6 [0161.164] _wcsicmp (_String1="http", _String2="netio") returned -6 [0161.164] _wcsicmp (_String1="http", _String2="ras") returned -10 [0161.164] _wcsicmp (_String1="http", _String2="advfirewall") returned 7 [0161.164] _wcsicmp (_String1="http", _String2="bridge") returned 6 [0161.164] _wcsicmp (_String1="http", _String2="dhcpclient") returned 4 [0161.164] _wcsicmp (_String1="http", _String2="dnsclient") returned 4 [0161.164] _wcsicmp (_String1="http", _String2="firewall") returned 2 [0161.164] _wcsicmp (_String1="http", _String2="interface") returned -1 [0161.164] GetProcessHeap () returned 0x1400000 [0161.164] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x318) returned 0x1431be8 [0161.165] GetProcessHeap () returned 0x1400000 [0161.165] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x1438bc8) returned 1 [0161.166] RegisterContext () returned 0x0 [0161.166] _wcsicmp (_String1="ipsec", _String2="advfirewall") returned 8 [0161.166] _wcsicmp (_String1="ipsec", _String2="bridge") returned 7 [0161.166] _wcsicmp (_String1="ipsec", _String2="dhcpclient") returned 5 [0161.166] _wcsicmp (_String1="ipsec", _String2="dnsclient") returned 5 [0161.166] _wcsicmp (_String1="ipsec", _String2="firewall") returned 3 [0161.166] _wcsicmp (_String1="ipsec", _String2="http") returned 1 [0161.166] _wcsicmp (_String1="ipsec", _String2="interface") returned 2 [0161.166] _wcsicmp (_String1="ipsec", _String2="lan") returned -3 [0161.166] _wcsicmp (_String1="ipsec", _String2="namespace") returned -5 [0161.166] _wcsicmp (_String1="ipsec", _String2="netio") returned -5 [0161.166] _wcsicmp (_String1="ipsec", _String2="ras") returned -9 [0161.166] _wcsicmp (_String1="ipsec", _String2="advfirewall") returned 8 [0161.167] _wcsicmp (_String1="ipsec", _String2="bridge") returned 7 [0161.167] _wcsicmp (_String1="ipsec", _String2="dhcpclient") returned 5 [0161.167] _wcsicmp (_String1="ipsec", _String2="dnsclient") returned 5 [0161.167] _wcsicmp (_String1="ipsec", _String2="firewall") returned 3 [0161.167] _wcsicmp (_String1="ipsec", _String2="http") returned 1 [0161.167] _wcsicmp (_String1="ipsec", _String2="interface") returned 2 [0161.167] _wcsicmp (_String1="ipsec", _String2="lan") returned -3 [0161.167] GetProcessHeap () returned 0x1400000 [0161.167] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x360) returned 0x1438bc8 [0161.167] GetProcessHeap () returned 0x1400000 [0161.167] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x1431be8) returned 1 [0161.167] RegisterContext () returned 0x0 [0161.167] GetProcessHeap () returned 0x1400000 [0161.167] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x48) returned 0x1417970 [0161.167] GetProcessHeap () returned 0x1400000 [0161.167] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x0) returned 1 [0161.167] RegisterContext () returned 0x0 [0161.167] _wcsicmp (_String1="dynamic", _String2="static") returned -15 [0161.168] _wcsicmp (_String1="dynamic", _String2="static") returned -15 [0161.168] GetProcessHeap () returned 0x1400000 [0161.168] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x90) returned 0x14160a8 [0161.168] GetProcessHeap () returned 0x1400000 [0161.168] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x1417970) returned 1 [0161.168] RegisterContext () returned 0x0 [0161.168] _wcsicmp (_String1="static", _String2="dynamic") returned 15 [0161.168] _wcsicmp (_String1="static", _String2="static") returned 0 [0161.168] RegisterContext () returned 0x0 [0161.168] _wcsicmp (_String1="dynamic", _String2="dynamic") returned 0 [0161.169] RegisterContext () returned 0x0 [0161.177] _wcsicmp (_String1="wfp", _String2="advfirewall") returned 22 [0161.177] _wcsicmp (_String1="wfp", _String2="bridge") returned 21 [0161.177] _wcsicmp (_String1="wfp", _String2="dhcpclient") returned 19 [0161.177] _wcsicmp (_String1="wfp", _String2="dnsclient") returned 19 [0161.177] _wcsicmp (_String1="wfp", _String2="firewall") returned 17 [0161.177] _wcsicmp (_String1="wfp", _String2="http") returned 15 [0161.177] _wcsicmp (_String1="wfp", _String2="interface") returned 14 [0161.177] _wcsicmp (_String1="wfp", _String2="ipsec") returned 14 [0161.177] _wcsicmp (_String1="wfp", _String2="lan") returned 11 [0161.177] _wcsicmp (_String1="wfp", _String2="namespace") returned 9 [0161.177] _wcsicmp (_String1="wfp", _String2="netio") returned 9 [0161.177] _wcsicmp (_String1="wfp", _String2="ras") returned 5 [0161.177] _wcsicmp (_String1="wfp", _String2="advfirewall") returned 22 [0161.177] _wcsicmp (_String1="wfp", _String2="bridge") returned 21 [0161.177] _wcsicmp (_String1="wfp", _String2="dhcpclient") returned 19 [0161.177] _wcsicmp (_String1="wfp", _String2="dnsclient") returned 19 [0161.177] _wcsicmp (_String1="wfp", _String2="firewall") returned 17 [0161.178] _wcsicmp (_String1="wfp", _String2="http") returned 15 [0161.178] _wcsicmp (_String1="wfp", _String2="interface") returned 14 [0161.178] _wcsicmp (_String1="wfp", _String2="ipsec") returned 14 [0161.178] _wcsicmp (_String1="wfp", _String2="lan") returned 11 [0161.178] _wcsicmp (_String1="wfp", _String2="namespace") returned 9 [0161.178] _wcsicmp (_String1="wfp", _String2="netio") returned 9 [0161.178] _wcsicmp (_String1="wfp", _String2="ras") returned 5 [0161.178] GetProcessHeap () returned 0x1400000 [0161.178] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x3a8) returned 0x1438f30 [0161.178] GetProcessHeap () returned 0x1400000 [0161.178] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x1438bc8) returned 1 [0161.183] RegisterContext () returned 0x0 [0161.183] _wcsicmp (_String1="p2p", _String2="advfirewall") returned 15 [0161.183] _wcsicmp (_String1="p2p", _String2="bridge") returned 14 [0161.183] _wcsicmp (_String1="p2p", _String2="dhcpclient") returned 12 [0161.183] _wcsicmp (_String1="p2p", _String2="dnsclient") returned 12 [0161.183] _wcsicmp (_String1="p2p", _String2="firewall") returned 10 [0161.183] _wcsicmp (_String1="p2p", _String2="http") returned 8 [0161.183] _wcsicmp (_String1="p2p", _String2="interface") returned 7 [0161.183] _wcsicmp (_String1="p2p", _String2="ipsec") returned 7 [0161.183] _wcsicmp (_String1="p2p", _String2="lan") returned 4 [0161.183] _wcsicmp (_String1="p2p", _String2="namespace") returned 2 [0161.183] _wcsicmp (_String1="p2p", _String2="netio") returned 2 [0161.184] _wcsicmp (_String1="p2p", _String2="ras") returned -2 [0161.184] _wcsicmp (_String1="p2p", _String2="wfp") returned -7 [0161.184] _wcsicmp (_String1="p2p", _String2="advfirewall") returned 15 [0161.184] _wcsicmp (_String1="p2p", _String2="bridge") returned 14 [0161.184] _wcsicmp (_String1="p2p", _String2="dhcpclient") returned 12 [0161.184] _wcsicmp (_String1="p2p", _String2="dnsclient") returned 12 [0161.184] _wcsicmp (_String1="p2p", _String2="firewall") returned 10 [0161.184] _wcsicmp (_String1="p2p", _String2="http") returned 8 [0161.184] _wcsicmp (_String1="p2p", _String2="interface") returned 7 [0161.184] _wcsicmp (_String1="p2p", _String2="ipsec") returned 7 [0161.184] _wcsicmp (_String1="p2p", _String2="lan") returned 4 [0161.184] _wcsicmp (_String1="p2p", _String2="namespace") returned 2 [0161.184] _wcsicmp (_String1="p2p", _String2="netio") returned 2 [0161.184] _wcsicmp (_String1="p2p", _String2="ras") returned -2 [0161.184] GetProcessHeap () returned 0x1400000 [0161.184] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x3f0) returned 0x1432c30 [0161.184] GetProcessHeap () returned 0x1400000 [0161.184] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x1438f30) returned 1 [0161.185] RegisterContext () returned 0x0 [0161.185] GetProcessHeap () returned 0x1400000 [0161.185] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x48) returned 0x1417970 [0161.185] GetProcessHeap () returned 0x1400000 [0161.185] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x0) returned 1 [0161.205] RegisterContext () returned 0x0 [0161.205] _wcsicmp (_String1="group", _String2="pnrp") returned -9 [0161.205] _wcsicmp (_String1="group", _String2="pnrp") returned -9 [0161.205] GetProcessHeap () returned 0x1400000 [0161.206] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x90) returned 0x14004a0 [0161.206] GetProcessHeap () returned 0x1400000 [0161.206] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x1417970) returned 1 [0161.206] RegisterContext () returned 0x0 [0161.206] _wcsicmp (_String1="idmgr", _String2="group") returned 2 [0161.206] _wcsicmp (_String1="idmgr", _String2="pnrp") returned -7 [0161.206] _wcsicmp (_String1="idmgr", _String2="group") returned 2 [0161.206] _wcsicmp (_String1="idmgr", _String2="pnrp") returned -7 [0161.206] GetProcessHeap () returned 0x1400000 [0161.206] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0xd8) returned 0x1420c48 [0161.207] GetProcessHeap () returned 0x1400000 [0161.207] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x14004a0) returned 1 [0161.207] RegisterContext () returned 0x0 [0161.207] GetProcessHeap () returned 0x1400000 [0161.207] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x48) returned 0x1417970 [0161.207] GetProcessHeap () returned 0x1400000 [0161.207] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x0) returned 1 [0161.207] RegisterContext () returned 0x0 [0161.207] _wcsicmp (_String1="diagnostics", _String2="cloud") returned 1 [0161.207] _wcsicmp (_String1="diagnostics", _String2="cloud") returned 1 [0161.207] GetProcessHeap () returned 0x1400000 [0161.207] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x90) returned 0x14004a0 [0161.207] GetProcessHeap () returned 0x1400000 [0161.207] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x1417970) returned 1 [0161.208] RegisterContext () returned 0x0 [0161.208] _wcsicmp (_String1="peer", _String2="cloud") returned 13 [0161.208] _wcsicmp (_String1="peer", _String2="diagnostics") returned 12 [0161.208] _wcsicmp (_String1="peer", _String2="cloud") returned 13 [0161.208] _wcsicmp (_String1="peer", _String2="diagnostics") returned 12 [0161.208] GetProcessHeap () returned 0x1400000 [0161.208] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0xd8) returned 0x1428538 [0161.208] GetProcessHeap () returned 0x1400000 [0161.208] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x14004a0) returned 1 [0161.208] RegisterContext () returned 0x0 [0161.208] GetProcessHeap () returned 0x1400000 [0161.208] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x48) returned 0x1417970 [0161.209] GetProcessHeap () returned 0x1400000 [0161.209] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x0) returned 1 [0161.209] RegisterContext () returned 0x0 [0161.209] _wcsicmp (_String1="rpc", _String2="advfirewall") returned 17 [0161.209] _wcsicmp (_String1="rpc", _String2="bridge") returned 16 [0161.209] _wcsicmp (_String1="rpc", _String2="dhcpclient") returned 14 [0161.209] _wcsicmp (_String1="rpc", _String2="dnsclient") returned 14 [0161.209] _wcsicmp (_String1="rpc", _String2="firewall") returned 12 [0161.209] _wcsicmp (_String1="rpc", _String2="http") returned 10 [0161.209] _wcsicmp (_String1="rpc", _String2="interface") returned 9 [0161.209] _wcsicmp (_String1="rpc", _String2="ipsec") returned 9 [0161.209] _wcsicmp (_String1="rpc", _String2="lan") returned 6 [0161.209] _wcsicmp (_String1="rpc", _String2="namespace") returned 4 [0161.209] _wcsicmp (_String1="rpc", _String2="netio") returned 4 [0161.209] _wcsicmp (_String1="rpc", _String2="p2p") returned 2 [0161.209] _wcsicmp (_String1="rpc", _String2="ras") returned 15 [0161.210] _wcsicmp (_String1="rpc", _String2="wfp") returned -5 [0161.210] _wcsicmp (_String1="rpc", _String2="advfirewall") returned 17 [0161.210] _wcsicmp (_String1="rpc", _String2="bridge") returned 16 [0161.210] _wcsicmp (_String1="rpc", _String2="dhcpclient") returned 14 [0161.210] _wcsicmp (_String1="rpc", _String2="dnsclient") returned 14 [0161.210] _wcsicmp (_String1="rpc", _String2="firewall") returned 12 [0161.210] _wcsicmp (_String1="rpc", _String2="http") returned 10 [0161.211] _wcsicmp (_String1="rpc", _String2="interface") returned 9 [0161.211] _wcsicmp (_String1="rpc", _String2="ipsec") returned 9 [0161.211] _wcsicmp (_String1="rpc", _String2="lan") returned 6 [0161.211] _wcsicmp (_String1="rpc", _String2="namespace") returned 4 [0161.211] _wcsicmp (_String1="rpc", _String2="netio") returned 4 [0161.211] _wcsicmp (_String1="rpc", _String2="p2p") returned 2 [0161.211] _wcsicmp (_String1="rpc", _String2="ras") returned 15 [0161.211] _wcsicmp (_String1="rpc", _String2="wfp") returned -5 [0161.211] GetProcessHeap () returned 0x1400000 [0161.211] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x438) returned 0x1438bc8 [0161.212] GetProcessHeap () returned 0x1400000 [0161.212] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x1432c30) returned 1 [0161.212] RegisterContext () returned 0x0 [0161.212] GetProcessHeap () returned 0x1400000 [0161.212] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x48) returned 0x14339d0 [0161.212] GetProcessHeap () returned 0x1400000 [0161.212] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x0) returned 1 [0161.212] RegisterContext () returned 0x0 [0161.212] _wcsicmp (_String1="winhttp", _String2="advfirewall") returned 22 [0161.212] _wcsicmp (_String1="winhttp", _String2="bridge") returned 21 [0161.212] _wcsicmp (_String1="winhttp", _String2="dhcpclient") returned 19 [0161.212] _wcsicmp (_String1="winhttp", _String2="dnsclient") returned 19 [0161.213] _wcsicmp (_String1="winhttp", _String2="firewall") returned 17 [0161.213] _wcsicmp (_String1="winhttp", _String2="http") returned 15 [0161.213] _wcsicmp (_String1="winhttp", _String2="interface") returned 14 [0161.213] _wcsicmp (_String1="winhttp", _String2="ipsec") returned 14 [0161.213] _wcsicmp (_String1="winhttp", _String2="lan") returned 11 [0161.213] _wcsicmp (_String1="winhttp", _String2="namespace") returned 9 [0161.213] _wcsicmp (_String1="winhttp", _String2="netio") returned 9 [0161.213] _wcsicmp (_String1="winhttp", _String2="p2p") returned 7 [0161.213] _wcsicmp (_String1="winhttp", _String2="ras") returned 5 [0161.213] _wcsicmp (_String1="winhttp", _String2="rpc") returned 5 [0161.213] _wcsicmp (_String1="winhttp", _String2="wfp") returned 3 [0161.213] _wcsicmp (_String1="winhttp", _String2="advfirewall") returned 22 [0161.213] _wcsicmp (_String1="winhttp", _String2="bridge") returned 21 [0161.213] _wcsicmp (_String1="winhttp", _String2="dhcpclient") returned 19 [0161.213] _wcsicmp (_String1="winhttp", _String2="dnsclient") returned 19 [0161.213] _wcsicmp (_String1="winhttp", _String2="firewall") returned 17 [0161.213] _wcsicmp (_String1="winhttp", _String2="http") returned 15 [0161.213] _wcsicmp (_String1="winhttp", _String2="interface") returned 14 [0161.214] _wcsicmp (_String1="winhttp", _String2="ipsec") returned 14 [0161.214] _wcsicmp (_String1="winhttp", _String2="lan") returned 11 [0161.214] _wcsicmp (_String1="winhttp", _String2="namespace") returned 9 [0161.214] _wcsicmp (_String1="winhttp", _String2="netio") returned 9 [0161.214] _wcsicmp (_String1="winhttp", _String2="p2p") returned 7 [0161.214] _wcsicmp (_String1="winhttp", _String2="ras") returned 5 [0161.214] _wcsicmp (_String1="winhttp", _String2="rpc") returned 5 [0161.214] _wcsicmp (_String1="winhttp", _String2="wfp") returned 3 [0161.214] GetProcessHeap () returned 0x1400000 [0161.214] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x480) returned 0x1433c38 [0161.214] GetProcessHeap () returned 0x1400000 [0161.214] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x1438bc8) returned 1 [0161.295] RegisterContext () returned 0x0 [0161.295] _wcsicmp (_String1="wlan", _String2="advfirewall") returned 22 [0161.295] _wcsicmp (_String1="wlan", _String2="bridge") returned 21 [0161.295] _wcsicmp (_String1="wlan", _String2="dhcpclient") returned 19 [0161.295] _wcsicmp (_String1="wlan", _String2="dnsclient") returned 19 [0161.296] _wcsicmp (_String1="wlan", _String2="firewall") returned 17 [0161.296] _wcsicmp (_String1="wlan", _String2="http") returned 15 [0161.296] _wcsicmp (_String1="wlan", _String2="interface") returned 14 [0161.296] _wcsicmp (_String1="wlan", _String2="ipsec") returned 14 [0161.296] _wcsicmp (_String1="wlan", _String2="lan") returned 11 [0161.296] _wcsicmp (_String1="wlan", _String2="namespace") returned 9 [0161.297] _wcsicmp (_String1="wlan", _String2="netio") returned 9 [0161.297] _wcsicmp (_String1="wlan", _String2="p2p") returned 7 [0161.297] _wcsicmp (_String1="wlan", _String2="ras") returned 5 [0161.297] _wcsicmp (_String1="wlan", _String2="rpc") returned 5 [0161.297] _wcsicmp (_String1="wlan", _String2="wfp") returned 6 [0161.297] _wcsicmp (_String1="wlan", _String2="winhttp") returned 3 [0161.297] _wcsicmp (_String1="wlan", _String2="advfirewall") returned 22 [0161.297] _wcsicmp (_String1="wlan", _String2="bridge") returned 21 [0161.297] _wcsicmp (_String1="wlan", _String2="dhcpclient") returned 19 [0161.297] _wcsicmp (_String1="wlan", _String2="dnsclient") returned 19 [0161.297] _wcsicmp (_String1="wlan", _String2="firewall") returned 17 [0161.298] _wcsicmp (_String1="wlan", _String2="http") returned 15 [0161.298] _wcsicmp (_String1="wlan", _String2="interface") returned 14 [0161.298] _wcsicmp (_String1="wlan", _String2="ipsec") returned 14 [0161.298] _wcsicmp (_String1="wlan", _String2="lan") returned 11 [0161.298] _wcsicmp (_String1="wlan", _String2="namespace") returned 9 [0161.298] _wcsicmp (_String1="wlan", _String2="netio") returned 9 [0161.298] _wcsicmp (_String1="wlan", _String2="p2p") returned 7 [0161.298] _wcsicmp (_String1="wlan", _String2="ras") returned 5 [0161.298] _wcsicmp (_String1="wlan", _String2="rpc") returned 5 [0161.298] _wcsicmp (_String1="wlan", _String2="wfp") returned 6 [0161.298] _wcsicmp (_String1="wlan", _String2="winhttp") returned 3 [0161.298] GetProcessHeap () returned 0x1400000 [0161.298] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x4c8) returned 0x1438bc8 [0161.299] GetProcessHeap () returned 0x1400000 [0161.299] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x1433c38) returned 1 [0161.299] RegisterContext () returned 0x0 [0161.299] _wcsicmp (_String1="winsock", _String2="advfirewall") returned 22 [0161.299] _wcsicmp (_String1="winsock", _String2="bridge") returned 21 [0161.299] _wcsicmp (_String1="winsock", _String2="dhcpclient") returned 19 [0161.299] _wcsicmp (_String1="winsock", _String2="dnsclient") returned 19 [0161.299] _wcsicmp (_String1="winsock", _String2="firewall") returned 17 [0161.299] _wcsicmp (_String1="winsock", _String2="http") returned 15 [0161.299] _wcsicmp (_String1="winsock", _String2="interface") returned 14 [0161.299] _wcsicmp (_String1="winsock", _String2="ipsec") returned 14 [0161.299] _wcsicmp (_String1="winsock", _String2="lan") returned 11 [0161.300] _wcsicmp (_String1="winsock", _String2="namespace") returned 9 [0161.300] _wcsicmp (_String1="winsock", _String2="netio") returned 9 [0161.300] _wcsicmp (_String1="winsock", _String2="p2p") returned 7 [0161.300] _wcsicmp (_String1="winsock", _String2="ras") returned 5 [0161.300] _wcsicmp (_String1="winsock", _String2="rpc") returned 5 [0161.300] _wcsicmp (_String1="winsock", _String2="wfp") returned 3 [0161.300] _wcsicmp (_String1="winsock", _String2="winhttp") returned 11 [0161.300] _wcsicmp (_String1="winsock", _String2="wlan") returned -3 [0161.300] _wcsicmp (_String1="winsock", _String2="advfirewall") returned 22 [0161.300] _wcsicmp (_String1="winsock", _String2="bridge") returned 21 [0161.300] _wcsicmp (_String1="winsock", _String2="dhcpclient") returned 19 [0161.300] _wcsicmp (_String1="winsock", _String2="dnsclient") returned 19 [0161.300] _wcsicmp (_String1="winsock", _String2="firewall") returned 17 [0161.300] _wcsicmp (_String1="winsock", _String2="http") returned 15 [0161.301] _wcsicmp (_String1="winsock", _String2="interface") returned 14 [0161.301] _wcsicmp (_String1="winsock", _String2="ipsec") returned 14 [0161.301] _wcsicmp (_String1="winsock", _String2="lan") returned 11 [0161.301] _wcsicmp (_String1="winsock", _String2="namespace") returned 9 [0161.306] _wcsicmp (_String1="winsock", _String2="netio") returned 9 [0161.306] _wcsicmp (_String1="winsock", _String2="p2p") returned 7 [0161.306] _wcsicmp (_String1="winsock", _String2="ras") returned 5 [0161.306] _wcsicmp (_String1="winsock", _String2="rpc") returned 5 [0161.306] _wcsicmp (_String1="winsock", _String2="wfp") returned 3 [0161.306] _wcsicmp (_String1="winsock", _String2="winhttp") returned 11 [0161.306] _wcsicmp (_String1="winsock", _String2="wlan") returned -3 [0161.306] GetProcessHeap () returned 0x1400000 [0161.306] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x510) returned 0x143b2e8 [0161.307] GetProcessHeap () returned 0x1400000 [0161.307] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x1438bc8) returned 1 [0161.714] RegisterContext () returned 0x0 [0161.714] _wcsicmp (_String1="branchcache", _String2="advfirewall") returned 1 [0161.714] _wcsicmp (_String1="branchcache", _String2="bridge") returned -8 [0161.714] _wcsicmp (_String1="branchcache", _String2="dhcpclient") returned -2 [0161.714] _wcsicmp (_String1="branchcache", _String2="dnsclient") returned -2 [0161.714] _wcsicmp (_String1="branchcache", _String2="firewall") returned -4 [0161.714] _wcsicmp (_String1="branchcache", _String2="http") returned -6 [0161.714] _wcsicmp (_String1="branchcache", _String2="interface") returned -7 [0161.715] _wcsicmp (_String1="branchcache", _String2="ipsec") returned -7 [0161.715] _wcsicmp (_String1="branchcache", _String2="lan") returned -10 [0161.715] _wcsicmp (_String1="branchcache", _String2="namespace") returned -12 [0161.715] _wcsicmp (_String1="branchcache", _String2="netio") returned -12 [0161.715] _wcsicmp (_String1="branchcache", _String2="p2p") returned -14 [0161.715] _wcsicmp (_String1="branchcache", _String2="ras") returned -16 [0161.715] _wcsicmp (_String1="branchcache", _String2="rpc") returned -16 [0161.715] _wcsicmp (_String1="branchcache", _String2="wfp") returned -21 [0161.715] _wcsicmp (_String1="branchcache", _String2="winhttp") returned -21 [0161.715] _wcsicmp (_String1="branchcache", _String2="winsock") returned -21 [0161.715] _wcsicmp (_String1="branchcache", _String2="wlan") returned -21 [0161.715] _wcsicmp (_String1="branchcache", _String2="advfirewall") returned 1 [0161.715] _wcsicmp (_String1="branchcache", _String2="bridge") returned -8 [0161.715] GetProcessHeap () returned 0x1400000 [0161.715] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x558) returned 0x143dbc0 [0161.715] GetProcessHeap () returned 0x1400000 [0161.715] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x143b2e8) returned 1 [0161.716] RegisterContext () returned 0x0 [0161.716] GetProcessHeap () returned 0x1400000 [0161.716] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x48) returned 0x1433bb0 [0161.716] GetProcessHeap () returned 0x1400000 [0161.716] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x0) returned 1 [0161.716] LoadLibraryExW (lpLibFileName="mprmsg.dll", hFile=0x0, dwFlags=0x800) returned 0x72b90000 [0161.848] GetProcAddress (hModule=0x72b90000, lpProcName="MprmsgGetErrorString") returned 0x72b91370 [0161.848] SetConsoleCtrlHandler (HandlerRoutine=0x1638200, Add=1) returned 1 [0161.849] SetThreadUILanguage (LangId=0x0) returned 0x11b0409 [0161.851] _wcsicmp (_String1="advfirewall", _String2="-?") returned 52 [0161.851] _wcsicmp (_String1="advfirewall", _String2="-h") returned 52 [0161.851] _wcsicmp (_String1="advfirewall", _String2="?") returned 34 [0161.851] _wcsicmp (_String1="advfirewall", _String2="/?") returned 50 [0161.851] _wcsicmp (_String1="advfirewall", _String2="-v") returned 52 [0161.851] _wcsicmp (_String1="advfirewall", _String2="-a") returned 52 [0161.851] _wcsicmp (_String1="advfirewall", _String2="-c") returned 52 [0161.851] _wcsicmp (_String1="advfirewall", _String2="-f") returned 52 [0161.851] _wcsicmp (_String1="advfirewall", _String2="-r") returned 52 [0161.851] _wcsicmp (_String1="advfirewall", _String2="-u") returned 52 [0161.851] _wcsicmp (_String1="advfirewall", _String2="-p") returned 52 [0161.851] GetVersionExW (in: lpVersionInformation=0x1337208*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x1337208*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x3ad7, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0161.852] _vsnwprintf (in: _Buffer=0x1643780, _BufferCount=0x103, _Format="%d.%d.%d", _ArgList=0x13371f4 | out: _Buffer="10.0.15063") returned 10 [0161.852] _vsnwprintf (in: _Buffer=0x1643990, _BufferCount=0x103, _Format="%d", _ArgList=0x13371e4 | out: _Buffer="15063") returned 5 [0161.852] _vsnwprintf (in: _Buffer=0x1643ba0, _BufferCount=0x103, _Format="%d", _ArgList=0x13371d4 | out: _Buffer="0") returned 1 [0161.852] _vsnwprintf (in: _Buffer=0x1643db0, _BufferCount=0x103, _Format="%d", _ArgList=0x13371c4 | out: _Buffer="0") returned 1 [0161.852] GetProcessHeap () returned 0x1400000 [0161.852] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0xc) returned 0x143e460 [0161.852] GetProcessHeap () returned 0x1400000 [0161.852] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0xc) returned 0x143e4d8 [0161.852] GetProcessHeap () returned 0x1400000 [0161.852] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0xc) returned 0x143e688 [0161.852] GetProcessHeap () returned 0x1400000 [0161.852] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0xc) returned 0x143e5b0 [0161.852] GetProcessHeap () returned 0x1400000 [0161.853] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0xc) returned 0x143e580 [0161.853] wcscpy_s (in: _Destination=0x143e580, _SizeInWords=0x6, _Source="netsh" | out: _Destination="netsh") returned 0x0 [0161.853] GetProcessHeap () returned 0x1400000 [0161.853] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x143e688) returned 1 [0161.853] GetProcessHeap () returned 0x1400000 [0161.853] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x143e4d8) returned 1 [0161.853] GetProcessHeap () returned 0x1400000 [0161.853] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0xc) returned 0x143e640 [0161.853] GetProcessHeap () returned 0x1400000 [0161.853] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0xc) returned 0x143e4a8 [0161.853] GetProcessHeap () returned 0x1400000 [0161.853] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x52) returned 0x143b340 [0161.853] GetProcessHeap () returned 0x1400000 [0161.853] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0xc) returned 0x143e478 [0161.853] GetProcessHeap () returned 0x1400000 [0161.853] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x18) returned 0x1429348 [0161.853] wcscpy_s (in: _Destination=0x1429348, _SizeInWords=0xc, _Source="advfirewall" | out: _Destination="advfirewall") returned 0x0 [0161.853] GetProcessHeap () returned 0x1400000 [0161.853] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0xc) returned 0x143e610 [0161.853] GetProcessHeap () returned 0x1400000 [0161.854] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140db38 [0161.854] wcscpy_s (in: _Destination=0x140db38, _SizeInWords=0x4, _Source="set" | out: _Destination="set") returned 0x0 [0161.854] GetProcessHeap () returned 0x1400000 [0161.854] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0xc) returned 0x143e670 [0161.854] GetProcessHeap () returned 0x1400000 [0161.854] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x1e) returned 0x1428918 [0161.854] wcscpy_s (in: _Destination=0x1428918, _SizeInWords=0xf, _Source="currentprofile" | out: _Destination="currentprofile") returned 0x0 [0161.854] GetProcessHeap () returned 0x1400000 [0161.854] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0xc) returned 0x143e5e0 [0161.854] GetProcessHeap () returned 0x1400000 [0161.854] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0xc) returned 0x143e688 [0161.854] wcscpy_s (in: _Destination=0x143e688, _SizeInWords=0x6, _Source="state" | out: _Destination="state") returned 0x0 [0161.854] GetProcessHeap () returned 0x1400000 [0161.854] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0xc) returned 0x143e598 [0161.854] GetProcessHeap () returned 0x1400000 [0161.854] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x140db58 [0161.854] wcscpy_s (in: _Destination=0x140db58, _SizeInWords=0x4, _Source="off" | out: _Destination="off") returned 0x0 [0161.854] GetProcessHeap () returned 0x1400000 [0161.854] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x143b340) returned 1 [0161.854] GetProcessHeap () returned 0x1400000 [0161.854] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x143e4a8) returned 1 [0161.854] GetProcessHeap () returned 0x1400000 [0161.855] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0xc) returned 0x143e490 [0161.855] GetProcessHeap () returned 0x1400000 [0161.855] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x18) returned 0x14290a8 [0161.855] wcscpy_s (in: _Destination=0x14290a8, _SizeInWords=0xc, _Source="advfirewall" | out: _Destination="advfirewall") returned 0x0 [0161.855] GetProcessHeap () returned 0x1400000 [0161.855] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x1429348) returned 1 [0161.855] GetProcessHeap () returned 0x1400000 [0161.855] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x143e478) returned 1 [0161.855] GetProcessHeap () returned 0x1400000 [0161.855] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0xc) returned 0x143e5f8 [0161.855] GetProcessHeap () returned 0x1400000 [0161.855] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x18) returned 0x1429128 [0161.855] wcscpy_s (in: _Destination=0x1429128, _SizeInWords=0xc, _Source="advfirewall" | out: _Destination="advfirewall") returned 0x0 [0161.855] GetProcessHeap () returned 0x1400000 [0161.855] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x14290a8) returned 1 [0161.855] GetProcessHeap () returned 0x1400000 [0161.855] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x143e490) returned 1 [0161.855] GetProcessHeap () returned 0x1400000 [0161.855] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0xc) returned 0x143e490 [0161.855] GetProcessHeap () returned 0x1400000 [0161.855] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x1440380 [0161.855] wcscpy_s (in: _Destination=0x1440380, _SizeInWords=0x4, _Source="set" | out: _Destination="set") returned 0x0 [0161.855] GetProcessHeap () returned 0x1400000 [0161.855] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140db38) returned 1 [0161.855] GetProcessHeap () returned 0x1400000 [0161.855] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x143e610) returned 1 [0161.855] GetProcessHeap () returned 0x1400000 [0161.855] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0xc) returned 0x143e658 [0161.856] GetProcessHeap () returned 0x1400000 [0161.856] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x1e) returned 0x1428d28 [0161.856] wcscpy_s (in: _Destination=0x1428d28, _SizeInWords=0xf, _Source="currentprofile" | out: _Destination="currentprofile") returned 0x0 [0161.856] GetProcessHeap () returned 0x1400000 [0161.856] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x1428918) returned 1 [0161.856] GetProcessHeap () returned 0x1400000 [0161.856] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x143e670) returned 1 [0161.856] GetProcessHeap () returned 0x1400000 [0161.856] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0xc) returned 0x143e4f0 [0161.856] GetProcessHeap () returned 0x1400000 [0161.856] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0xc) returned 0x143e538 [0161.856] wcscpy_s (in: _Destination=0x143e538, _SizeInWords=0x6, _Source="state" | out: _Destination="state") returned 0x0 [0161.856] GetProcessHeap () returned 0x1400000 [0161.856] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x143e688) returned 1 [0161.856] GetProcessHeap () returned 0x1400000 [0161.856] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x143e5e0) returned 1 [0161.856] GetProcessHeap () returned 0x1400000 [0161.856] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0xc) returned 0x143e4d8 [0161.856] GetProcessHeap () returned 0x1400000 [0161.856] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x14402d0 [0161.856] wcscpy_s (in: _Destination=0x14402d0, _SizeInWords=0x4, _Source="off" | out: _Destination="off") returned 0x0 [0161.856] GetProcessHeap () returned 0x1400000 [0161.856] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140db58) returned 1 [0161.856] GetProcessHeap () returned 0x1400000 [0161.856] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x143e598) returned 1 [0161.856] GetProcessHeap () returned 0x1400000 [0161.856] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x18) returned 0x14292a8 [0161.857] GetProcessHeap () returned 0x1400000 [0161.857] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0xc) returned 0x143e670 [0161.857] GetProcessHeap () returned 0x1400000 [0161.857] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x18) returned 0x14291a8 [0161.857] GetProcessHeap () returned 0x1400000 [0161.857] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x1440350 [0161.857] GetProcessHeap () returned 0x1400000 [0161.857] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x1e) returned 0x1428918 [0161.857] GetProcessHeap () returned 0x1400000 [0161.857] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0xc) returned 0x143e6a0 [0161.857] GetProcessHeap () returned 0x1400000 [0161.857] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x14403a0 [0161.857] GetProcessHeap () returned 0x1400000 [0161.857] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0xc) returned 0x143e4a8 [0161.857] GetProcessHeap () returned 0x1400000 [0161.857] RtlReAllocateHeap (Heap=0x1400000, Flags=0x0, Ptr=0x143e4a8, Size=0xe) returned 0x143e5c8 [0161.857] GetProcessHeap () returned 0x1400000 [0161.857] RtlReAllocateHeap (Heap=0x1400000, Flags=0x0, Ptr=0x143e5c8, Size=0x24) returned 0x142c378 [0161.857] GetProcessHeap () returned 0x1400000 [0161.857] RtlReAllocateHeap (Heap=0x1400000, Flags=0x0, Ptr=0x142c378, Size=0x26) returned 0x142c228 [0161.857] GetProcessHeap () returned 0x1400000 [0161.857] RtlReAllocateHeap (Heap=0x1400000, Flags=0x0, Ptr=0x142c228, Size=0x2c) returned 0x1432810 [0161.857] GetProcessHeap () returned 0x1400000 [0161.857] RtlReAllocateHeap (Heap=0x1400000, Flags=0x0, Ptr=0x1432810, Size=0x2e) returned 0x1432880 [0161.857] GetProcessHeap () returned 0x1400000 [0161.857] RtlReAllocateHeap (Heap=0x1400000, Flags=0x0, Ptr=0x1432880, Size=0x4a) returned 0x143b340 [0161.857] GetProcessHeap () returned 0x1400000 [0161.858] RtlReAllocateHeap (Heap=0x1400000, Flags=0x0, Ptr=0x143b340, Size=0x4c) returned 0x143b340 [0161.858] GetProcessHeap () returned 0x1400000 [0161.858] RtlReAllocateHeap (Heap=0x1400000, Flags=0x0, Ptr=0x143b340, Size=0x56) returned 0x143b340 [0161.858] GetProcessHeap () returned 0x1400000 [0161.858] RtlReAllocateHeap (Heap=0x1400000, Flags=0x0, Ptr=0x143b340, Size=0x58) returned 0x143b340 [0161.858] GetProcessHeap () returned 0x1400000 [0161.858] RtlReAllocateHeap (Heap=0x1400000, Flags=0x0, Ptr=0x143b340, Size=0x5e) returned 0x143b340 [0161.858] GetProcessHeap () returned 0x1400000 [0161.858] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x143b340) returned 1 [0161.858] lstrcmpiW (lpString1="netsh", lpString2="namespace") returned 1 [0161.859] lstrcmpiW (lpString1="netsh", lpString2="branchcache") returned 1 [0161.859] lstrcmpiW (lpString1="netsh", lpString2="advfirewall") returned 1 [0161.859] lstrcmpiW (lpString1="netsh", lpString2="firewall") returned 1 [0161.859] lstrcmpiW (lpString1="netsh", lpString2="interface") returned 1 [0161.859] lstrcmpiW (lpString1="netsh", lpString2="dhcp") returned 1 [0161.859] lstrcmpiW (lpString1="netsh", lpString2="dnsclient") returned 1 [0161.859] lstrcmpiW (lpString1="netsh", lpString2="routing") returned -1 [0161.860] lstrcmpiW (lpString1="netsh", lpString2="ip") returned 1 [0161.860] lstrcmpiW (lpString1="netsh", lpString2="ipv6") returned 1 [0161.860] lstrcmpiW (lpString1="netsh", lpString2="aaaa") returned 1 [0161.860] lstrcmpiW (lpString1="netsh", lpString2="ras") returned -1 [0161.860] _wcsnicmp (_String1="advfirewall", _String2="dump", _MaxCount=0xb) returned -3 [0161.860] _wcsnicmp (_String1="advfirewall", _String2="help", _MaxCount=0xb) returned -7 [0161.860] _wcsnicmp (_String1="advfirewall", _String2="?", _MaxCount=0xb) returned 34 [0161.860] _wcsnicmp (_String1="advfirewall", _String2="exec", _MaxCount=0xb) returned -4 [0161.860] _wcsnicmp (_String1="advfirewall", _String2="advfirewall", _MaxCount=0xb) returned 0 [0161.860] lstrcmpiW (lpString1="advfirewall", lpString2="namespace") returned -1 [0161.860] lstrcmpiW (lpString1="advfirewall", lpString2="branchcache") returned -1 [0161.860] lstrcmpiW (lpString1="advfirewall", lpString2="advfirewall") returned 0 [0161.860] GetProcessHeap () returned 0x1400000 [0161.860] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0xc) returned 0x143e688 [0161.860] GetProcessHeap () returned 0x1400000 [0161.860] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0xc) returned 0x143e6e8 [0161.860] GetProcessHeap () returned 0x1400000 [0161.860] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x5e) returned 0x143b340 [0161.860] GetProcessHeap () returned 0x1400000 [0161.861] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0xc) returned 0x143e718 [0161.861] GetProcessHeap () returned 0x1400000 [0161.861] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0xc) returned 0x143e550 [0161.861] wcscpy_s (in: _Destination=0x143e550, _SizeInWords=0x6, _Source="netsh" | out: _Destination="netsh") returned 0x0 [0161.861] GetProcessHeap () returned 0x1400000 [0161.861] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0xc) returned 0x143e610 [0161.861] GetProcessHeap () returned 0x1400000 [0161.861] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x18) returned 0x1429168 [0161.861] wcscpy_s (in: _Destination=0x1429168, _SizeInWords=0xc, _Source="advfirewall" | out: _Destination="advfirewall") returned 0x0 [0161.861] GetProcessHeap () returned 0x1400000 [0161.861] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0xc) returned 0x143e598 [0161.861] GetProcessHeap () returned 0x1400000 [0161.861] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x14403b0 [0161.861] wcscpy_s (in: _Destination=0x14403b0, _SizeInWords=0x4, _Source="set" | out: _Destination="set") returned 0x0 [0161.861] GetProcessHeap () returned 0x1400000 [0161.861] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0xc) returned 0x143e5e0 [0161.861] GetProcessHeap () returned 0x1400000 [0161.862] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x1e) returned 0x1428b70 [0161.862] wcscpy_s (in: _Destination=0x1428b70, _SizeInWords=0xf, _Source="currentprofile" | out: _Destination="currentprofile") returned 0x0 [0161.862] GetProcessHeap () returned 0x1400000 [0161.862] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0xc) returned 0x143e700 [0161.862] GetProcessHeap () returned 0x1400000 [0161.862] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0xc) returned 0x143e478 [0161.862] wcscpy_s (in: _Destination=0x143e478, _SizeInWords=0x6, _Source="state" | out: _Destination="state") returned 0x0 [0161.862] GetProcessHeap () returned 0x1400000 [0161.862] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0xc) returned 0x143e508 [0161.862] GetProcessHeap () returned 0x1400000 [0161.862] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x8) returned 0x14402a0 [0161.862] wcscpy_s (in: _Destination=0x14402a0, _SizeInWords=0x4, _Source="off" | out: _Destination="off") returned 0x0 [0161.862] GetProcessHeap () returned 0x1400000 [0161.862] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x143b340) returned 1 [0161.862] GetProcessHeap () returned 0x1400000 [0161.862] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x143e6e8) returned 1 [0161.862] GetProcessHeap () returned 0x1400000 [0161.862] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x1429168) returned 1 [0161.862] GetProcessHeap () returned 0x1400000 [0161.862] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x18) returned 0x1429328 [0161.862] lstrcmpiW (lpString1="advfirewall", lpString2="routing") returned -1 [0161.862] lstrcmpiW (lpString1="advfirewall", lpString2="ip") returned -1 [0161.862] lstrcmpiW (lpString1="advfirewall", lpString2="ipv6") returned -1 [0161.862] lstrcmpiW (lpString1="advfirewall", lpString2="aaaa") returned 1 [0161.862] lstrcmpiW (lpString1="advfirewall", lpString2="ras") returned -1 [0161.863] _wcsnicmp (_String1="set", _String2="dum", _MaxCount=0x3) returned 15 [0161.863] _wcsnicmp (_String1="set", _String2="hel", _MaxCount=0x3) returned 11 [0161.863] _wcsnicmp (_String1="set", _String2="?", _MaxCount=0x3) returned 52 [0161.863] _wcsnicmp (_String1="set", _String2="res", _MaxCount=0x3) returned 1 [0161.863] _wcsnicmp (_String1="set", _String2="imp", _MaxCount=0x3) returned 10 [0161.863] _wcsnicmp (_String1="set", _String2="exp", _MaxCount=0x3) returned 14 [0161.863] _wcsnicmp (_String1="set", _String2="con", _MaxCount=0x3) returned 16 [0161.863] _wcsnicmp (_String1="set", _String2="fir", _MaxCount=0x3) returned 13 [0161.863] _wcsnicmp (_String1="set", _String2="mai", _MaxCount=0x3) returned 6 [0161.863] _wcsnicmp (_String1="set", _String2="mon", _MaxCount=0x3) returned 6 [0161.863] _wcsnicmp (_String1="set", _String2="set", _MaxCount=0x3) returned 0 [0161.863] _wcsnicmp (_String1="currentprofile", _String2="help", _MaxCount=0xe) returned -5 [0161.863] _wcsnicmp (_String1="currentprofile", _String2="?", _MaxCount=0xe) returned 36 [0161.863] wcstok (in: _String="domainprofile", _Delimiter=" ", _Context=0x143dbc0 | out: _String="domainprofile", _Context=0x143dbc0) returned="domainprofile" [0161.863] _wcsnicmp (_String1="currentprofile", _String2="domainprofile", _MaxCount=0xe) returned -1 [0161.863] wcstok (in: _String="privateprofile", _Delimiter=" ", _Context=0x143dbc0 | out: _String="privateprofile", _Context=0x143dbc0) returned="privateprofile" [0161.863] _wcsnicmp (_String1="currentprofile", _String2="privateprofile", _MaxCount=0xe) returned -13 [0161.863] wcstok (in: _String="publicprofile", _Delimiter=" ", _Context=0x143dbc0 | out: _String="publicprofile", _Context=0x143dbc0) returned="publicprofile" [0161.863] _wcsnicmp (_String1="currentprofile", _String2="publicprofile", _MaxCount=0xe) returned -13 [0161.863] wcstok (in: _String="currentprofile", _Delimiter=" ", _Context=0x143dbc0 | out: _String="currentprofile", _Context=0x143dbc0) returned="currentprofile" [0161.863] _wcsnicmp (_String1="currentprofile", _String2="currentprofile", _MaxCount=0xe) returned 0 [0161.863] wcstok (in: _String=0x0, _Delimiter=" ", _Context=0x143dbc0 | out: _String=0x0, _Context=0x143dbc0) returned 0x0 [0161.863] lstrcmpiW (lpString1="advfirewall", lpString2="netsh") returned -1 [0161.863] WinSqmAddToStream () returned 0x2486 [0162.560] LoadStringW (in: hInstance=0x0, uID=0x2, lpBuffer=0x132f1d4, cchBufferMax=16384 | out: lpBuffer="Ok.\n") returned 0x4 [0162.560] FormatMessageW (in: dwFlags=0x500, lpSource=0x132f1d4, dwMessageId=0x0, dwLanguageId=0x0, lpBuffer=0x132f1b8, nSize=0x0, Arguments=0x132f1d0 | out: lpBuffer="䱐Ł燜ij胃ţ玔㪧") returned 0x5 [0162.560] GetStdHandle (nStdHandle=0xfffffff5) returned 0x90 [0162.560] GetConsoleOutputCP () returned 0x1b5 [0162.652] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Ok.\r\n", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0162.652] GetProcessHeap () returned 0x1400000 [0162.653] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x6) returned 0x14403f0 [0162.655] GetConsoleOutputCP () returned 0x1b5 [0162.756] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Ok.\r\n", cchWideChar=-1, lpMultiByteStr=0x14403f0, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ok.\r\n", lpUsedDefaultChar=0x0) returned 6 [0162.757] WriteFile (in: hFile=0x90, lpBuffer=0x14403f0*, nNumberOfBytesToWrite=0x5, lpNumberOfBytesWritten=0x132f1a4, lpOverlapped=0x0 | out: lpBuffer=0x14403f0*, lpNumberOfBytesWritten=0x132f1a4*=0x5, lpOverlapped=0x0) returned 1 [0162.840] GetProcessHeap () returned 0x1400000 [0162.842] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x14403f0) returned 1 [0162.842] LocalFree (hMem=0x1414c50) returned 0x0 [0162.842] FormatMessageW (in: dwFlags=0x500, lpSource=0x1631310, dwMessageId=0x0, dwLanguageId=0x0, lpBuffer=0x13371d0, nSize=0x0, Arguments=0x13371dc | out: lpBuffer="Ń燠ij耰ţ燬ij爄ij孳ţጐţ?Ń\x03") returned 0x2 [0162.842] GetStdHandle (nStdHandle=0xfffffff5) returned 0x90 [0162.842] GetConsoleOutputCP () returned 0x1b5 [0162.947] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\r\n", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0162.947] GetProcessHeap () returned 0x1400000 [0162.947] RtlAllocateHeap (HeapHandle=0x1400000, Flags=0x0, Size=0x3) returned 0x1440460 [0162.947] GetConsoleOutputCP () returned 0x1b5 [0163.043] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\r\n", cchWideChar=-1, lpMultiByteStr=0x1440460, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\n", lpUsedDefaultChar=0x0) returned 3 [0163.043] WriteFile (in: hFile=0x90, lpBuffer=0x1440460*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x13371bc, lpOverlapped=0x0 | out: lpBuffer=0x1440460*, lpNumberOfBytesWritten=0x13371bc*=0x2, lpOverlapped=0x0) returned 1 [0163.146] GetProcessHeap () returned 0x1400000 [0163.146] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x1440460) returned 1 [0163.146] LocalFree (hMem=0x143e6e8) returned 0x0 [0163.146] GetProcessHeap () returned 0x1400000 [0163.146] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x143e670) returned 1 [0163.146] GetProcessHeap () returned 0x1400000 [0163.146] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x14291a8) returned 1 [0163.146] GetProcessHeap () returned 0x1400000 [0163.146] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x1440350) returned 1 [0163.146] GetProcessHeap () returned 0x1400000 [0163.146] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x1428918) returned 1 [0163.146] GetProcessHeap () returned 0x1400000 [0163.146] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x143e6a0) returned 1 [0163.146] GetProcessHeap () returned 0x1400000 [0163.146] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x14403a0) returned 1 [0163.146] GetProcessHeap () returned 0x1400000 [0163.146] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x14292a8) returned 1 [0163.146] GetProcessHeap () returned 0x1400000 [0163.146] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x1429128) returned 1 [0163.146] GetProcessHeap () returned 0x1400000 [0163.146] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x143e5f8) returned 1 [0163.147] GetProcessHeap () returned 0x1400000 [0163.147] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x1440380) returned 1 [0163.147] GetProcessHeap () returned 0x1400000 [0163.147] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x143e490) returned 1 [0163.147] GetProcessHeap () returned 0x1400000 [0163.147] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x1428d28) returned 1 [0163.147] GetProcessHeap () returned 0x1400000 [0163.147] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x143e658) returned 1 [0163.147] GetProcessHeap () returned 0x1400000 [0163.147] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x143e538) returned 1 [0163.147] GetProcessHeap () returned 0x1400000 [0163.147] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x143e4f0) returned 1 [0163.147] GetProcessHeap () returned 0x1400000 [0163.147] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x14402d0) returned 1 [0163.147] GetProcessHeap () returned 0x1400000 [0163.147] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x143e4d8) returned 1 [0163.147] GetProcessHeap () returned 0x1400000 [0163.147] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x143e640) returned 1 [0163.147] GetProcessHeap () returned 0x1400000 [0163.147] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x143e580) returned 1 [0163.147] GetProcessHeap () returned 0x1400000 [0163.147] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x143e5b0) returned 1 [0163.147] GetProcessHeap () returned 0x1400000 [0163.147] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x143e460) returned 1 [0163.324] GetProcessHeap () returned 0x1400000 [0163.324] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x1434548) returned 1 [0163.324] FreeLibrary (hLibModule=0x1630000) returned 1 [0163.324] FreeLibrary (hLibModule=0x73cf0000) returned 1 [0163.327] FreeLibrary (hLibModule=0x73bf0000) returned 1 [0166.155] free (_Block=0x1393938) [0166.157] LocalFree (hMem=0x1418d80) returned 0x0 [0166.157] LocalFree (hMem=0x1418f00) returned 0x0 [0166.157] LocalFree (hMem=0x14187c8) returned 0x0 [0166.157] LocalFree (hMem=0x14162c8) returned 0x0 [0166.158] LocalAlloc (uFlags=0x40, uBytes=0x178) returned 0x143e290 [0166.159] LocalAlloc (uFlags=0x40, uBytes=0x10) returned 0x143e5b0 [0166.159] LocalAlloc (uFlags=0x0, uBytes=0x10) returned 0x143e5f8 [0166.159] free (_Block=0x13911c0) [0166.159] free (_Block=0x0) [0166.159] free (_Block=0x13911a8) [0166.160] free (_Block=0x13938d0) [0166.160] free (_Block=0x1393918) [0166.161] LocalAlloc (uFlags=0x40, uBytes=0x84) returned 0x1425c10 [0166.168] LocalFree (hMem=0x1425c10) returned 0x0 [0166.168] LocalFree (hMem=0x1418f90) returned 0x0 [0166.169] LocalFree (hMem=0x143e290) returned 0x0 [0166.171] free (_Block=0x13910a0) [0166.172] GetModuleHandleA (lpModuleName="MSVCRT.DLL") returned 0x768a0000 [0166.172] FreeLibrary (hLibModule=0x768a0000) returned 1 [0166.173] LocalFree (hMem=0x143e5f8) returned 0x0 [0166.173] LocalFree (hMem=0x143e5b0) returned 0x0 [0166.174] GlobalHandle (pMem=0x1418c70) returned 0x4ff0004 [0166.174] GlobalUnlock (hMem=0x4ff0004) returned 0 [0166.186] FreeLibrary (hLibModule=0x73900000) returned 1 [0166.268] FreeLibrary (hLibModule=0x73830000) returned 1 [0166.273] FreeLibrary (hLibModule=0x737d0000) returned 1 [0166.305] FreeLibrary (hLibModule=0x73690000) returned 1 [0166.308] FreeLibrary (hLibModule=0x73680000) returned 1 [0167.086] FreeLibrary (hLibModule=0x733a0000) returned 1 [0167.091] FreeLibrary (hLibModule=0x73300000) returned 1 [0167.091] FreeLibrary (hLibModule=0x73280000) returned 1 [0167.157] FreeLibrary (hLibModule=0x730c0000) returned 1 [0167.159] FreeLibrary (hLibModule=0x73070000) returned 1 [0167.163] FreeLibrary (hLibModule=0x73030000) returned 1 [0167.166] FreeLibrary (hLibModule=0x73020000) returned 1 [0167.167] FreeLibrary (hLibModule=0x72f30000) returned 1 [0167.222] FreeLibrary (hLibModule=0x72d20000) returned 1 [0168.539] FreeLibrary (hLibModule=0x72c70000) returned 1 [0170.215] GetProcessHeap () returned 0x1400000 [0170.215] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x1427d80) returned 1 [0170.216] GetProcessHeap () returned 0x1400000 [0170.216] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140bd58) returned 1 [0170.216] GetProcessHeap () returned 0x1400000 [0170.216] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140bd68) returned 1 [0170.216] GetProcessHeap () returned 0x1400000 [0170.216] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140bd78) returned 1 [0170.216] GetProcessHeap () returned 0x1400000 [0170.216] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140bd98) returned 1 [0170.217] GetProcessHeap () returned 0x1400000 [0170.217] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140bbf8) returned 1 [0170.217] GetProcessHeap () returned 0x1400000 [0170.217] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140bc28) returned 1 [0170.217] GetProcessHeap () returned 0x1400000 [0170.217] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140bcb8) returned 1 [0170.217] GetProcessHeap () returned 0x1400000 [0170.217] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140bc38) returned 1 [0170.218] GetProcessHeap () returned 0x1400000 [0170.218] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140bc68) returned 1 [0170.218] GetProcessHeap () returned 0x1400000 [0170.218] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140bc78) returned 1 [0170.218] GetProcessHeap () returned 0x1400000 [0170.218] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d120) returned 1 [0170.218] GetProcessHeap () returned 0x1400000 [0170.218] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d0d0) returned 1 [0170.218] GetProcessHeap () returned 0x1400000 [0170.218] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d110) returned 1 [0170.218] GetProcessHeap () returned 0x1400000 [0170.219] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d000) returned 1 [0170.219] GetProcessHeap () returned 0x1400000 [0170.219] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140cfe0) returned 1 [0170.219] GetProcessHeap () returned 0x1400000 [0170.219] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d0e0) returned 1 [0170.219] GetProcessHeap () returned 0x1400000 [0170.219] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140cff0) returned 1 [0170.219] GetProcessHeap () returned 0x1400000 [0170.219] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d010) returned 1 [0170.219] GetProcessHeap () returned 0x1400000 [0170.220] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d0b0) returned 1 [0170.220] GetProcessHeap () returned 0x1400000 [0170.220] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d070) returned 1 [0170.220] GetProcessHeap () returned 0x1400000 [0170.220] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d0f0) returned 1 [0170.220] GetProcessHeap () returned 0x1400000 [0170.220] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d130) returned 1 [0170.220] GetProcessHeap () returned 0x1400000 [0170.220] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d080) returned 1 [0170.220] GetProcessHeap () returned 0x1400000 [0170.220] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d090) returned 1 [0170.221] GetProcessHeap () returned 0x1400000 [0170.221] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d100) returned 1 [0170.221] GetProcessHeap () returned 0x1400000 [0170.221] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d050) returned 1 [0170.221] GetProcessHeap () returned 0x1400000 [0170.221] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d0c0) returned 1 [0170.221] GetProcessHeap () returned 0x1400000 [0170.221] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d040) returned 1 [0170.221] GetProcessHeap () returned 0x1400000 [0170.221] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d060) returned 1 [0170.221] GetProcessHeap () returned 0x1400000 [0170.222] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140cf70) returned 1 [0170.222] GetProcessHeap () returned 0x1400000 [0170.222] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140cf80) returned 1 [0170.222] GetProcessHeap () returned 0x1400000 [0170.222] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140cfc0) returned 1 [0170.222] GetProcessHeap () returned 0x1400000 [0170.222] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d020) returned 1 [0170.222] GetProcessHeap () returned 0x1400000 [0170.222] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d030) returned 1 [0170.222] GetProcessHeap () returned 0x1400000 [0170.222] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d0a0) returned 1 [0170.223] GetProcessHeap () returned 0x1400000 [0170.223] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140cf90) returned 1 [0170.223] GetProcessHeap () returned 0x1400000 [0170.223] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140cfa0) returned 1 [0170.223] GetProcessHeap () returned 0x1400000 [0170.223] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140cfb0) returned 1 [0170.223] GetProcessHeap () returned 0x1400000 [0170.223] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140cfd0) returned 1 [0170.223] GetProcessHeap () returned 0x1400000 [0170.223] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140cd80) returned 1 [0170.223] GetProcessHeap () returned 0x1400000 [0170.223] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140ce20) returned 1 [0170.223] GetProcessHeap () returned 0x1400000 [0170.223] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140cec0) returned 1 [0170.223] GetProcessHeap () returned 0x1400000 [0170.224] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140cee0) returned 1 [0170.224] GetProcessHeap () returned 0x1400000 [0170.224] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140ce00) returned 1 [0170.224] GetProcessHeap () returned 0x1400000 [0170.224] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140cd90) returned 1 [0170.224] GetProcessHeap () returned 0x1400000 [0170.224] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140cf30) returned 1 [0170.224] GetProcessHeap () returned 0x1400000 [0170.224] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140cde0) returned 1 [0170.224] GetProcessHeap () returned 0x1400000 [0170.224] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140ce70) returned 1 [0170.225] GetProcessHeap () returned 0x1400000 [0170.225] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140cda0) returned 1 [0170.225] GetProcessHeap () returned 0x1400000 [0170.225] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140cf50) returned 1 [0170.225] GetProcessHeap () returned 0x1400000 [0170.225] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140ce40) returned 1 [0170.225] GetProcessHeap () returned 0x1400000 [0170.225] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140cd70) returned 1 [0170.225] GetProcessHeap () returned 0x1400000 [0170.225] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140ce60) returned 1 [0170.225] GetProcessHeap () returned 0x1400000 [0170.225] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140ced0) returned 1 [0170.225] GetProcessHeap () returned 0x1400000 [0170.226] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140cdb0) returned 1 [0170.226] GetProcessHeap () returned 0x1400000 [0170.226] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140cdc0) returned 1 [0170.226] GetProcessHeap () returned 0x1400000 [0170.226] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140cef0) returned 1 [0170.226] GetProcessHeap () returned 0x1400000 [0170.226] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140ce10) returned 1 [0170.226] GetProcessHeap () returned 0x1400000 [0170.226] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140cf10) returned 1 [0170.226] GetProcessHeap () returned 0x1400000 [0170.226] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140cea0) returned 1 [0170.227] GetProcessHeap () returned 0x1400000 [0170.227] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140cf00) returned 1 [0170.227] GetProcessHeap () returned 0x1400000 [0170.227] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140cdf0) returned 1 [0170.227] GetProcessHeap () returned 0x1400000 [0170.227] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140ce30) returned 1 [0170.227] GetProcessHeap () returned 0x1400000 [0170.227] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140cdd0) returned 1 [0170.227] GetProcessHeap () returned 0x1400000 [0170.227] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140cf20) returned 1 [0170.227] GetProcessHeap () returned 0x1400000 [0170.227] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140ce50) returned 1 [0170.227] GetProcessHeap () returned 0x1400000 [0170.228] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140ce80) returned 1 [0170.228] GetProcessHeap () returned 0x1400000 [0170.228] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140cf40) returned 1 [0170.228] GetProcessHeap () returned 0x1400000 [0170.228] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140cf60) returned 1 [0170.228] GetProcessHeap () returned 0x1400000 [0170.228] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140ceb0) returned 1 [0170.228] GetProcessHeap () returned 0x1400000 [0170.228] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140ce90) returned 1 [0170.228] GetProcessHeap () returned 0x1400000 [0170.228] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d228) returned 1 [0170.229] GetProcessHeap () returned 0x1400000 [0170.229] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d298) returned 1 [0170.229] GetProcessHeap () returned 0x1400000 [0170.229] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d2c8) returned 1 [0170.229] GetProcessHeap () returned 0x1400000 [0170.229] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d358) returned 1 [0170.229] GetProcessHeap () returned 0x1400000 [0170.229] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d288) returned 1 [0170.229] GetProcessHeap () returned 0x1400000 [0170.229] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d248) returned 1 [0170.229] GetProcessHeap () returned 0x1400000 [0170.230] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d268) returned 1 [0170.230] GetProcessHeap () returned 0x1400000 [0170.230] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d1a8) returned 1 [0170.230] GetProcessHeap () returned 0x1400000 [0170.230] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d2a8) returned 1 [0170.230] GetProcessHeap () returned 0x1400000 [0170.230] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d2b8) returned 1 [0170.230] GetProcessHeap () returned 0x1400000 [0170.230] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d348) returned 1 [0170.230] GetProcessHeap () returned 0x1400000 [0170.230] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d328) returned 1 [0170.231] GetProcessHeap () returned 0x1400000 [0170.231] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d1e8) returned 1 [0170.231] GetProcessHeap () returned 0x1400000 [0170.231] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d318) returned 1 [0170.231] GetProcessHeap () returned 0x1400000 [0170.231] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d1f8) returned 1 [0170.231] GetProcessHeap () returned 0x1400000 [0170.231] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d238) returned 1 [0170.231] GetProcessHeap () returned 0x1400000 [0170.231] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d258) returned 1 [0170.231] GetProcessHeap () returned 0x1400000 [0170.231] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d2d8) returned 1 [0170.232] GetProcessHeap () returned 0x1400000 [0170.232] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d278) returned 1 [0170.232] GetProcessHeap () returned 0x1400000 [0170.232] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d2e8) returned 1 [0170.232] GetProcessHeap () returned 0x1400000 [0170.232] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d198) returned 1 [0170.232] GetProcessHeap () returned 0x1400000 [0170.232] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d338) returned 1 [0170.232] GetProcessHeap () returned 0x1400000 [0170.232] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d2f8) returned 1 [0170.232] GetProcessHeap () returned 0x1400000 [0170.233] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d208) returned 1 [0170.233] GetProcessHeap () returned 0x1400000 [0170.233] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d308) returned 1 [0170.233] GetProcessHeap () returned 0x1400000 [0170.233] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d368) returned 1 [0170.323] GetProcessHeap () returned 0x1400000 [0170.323] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d1b8) returned 1 [0170.324] GetProcessHeap () returned 0x1400000 [0170.324] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d178) returned 1 [0170.324] GetProcessHeap () returned 0x1400000 [0170.324] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d188) returned 1 [0170.324] GetProcessHeap () returned 0x1400000 [0170.324] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d1c8) returned 1 [0170.324] GetProcessHeap () returned 0x1400000 [0170.324] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d1d8) returned 1 [0170.324] GetProcessHeap () returned 0x1400000 [0170.324] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d218) returned 1 [0170.325] GetProcessHeap () returned 0x1400000 [0170.325] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d428) returned 1 [0170.325] GetProcessHeap () returned 0x1400000 [0170.325] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d4d8) returned 1 [0170.325] GetProcessHeap () returned 0x1400000 [0170.325] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d538) returned 1 [0170.325] GetProcessHeap () returned 0x1400000 [0170.325] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d4f8) returned 1 [0170.325] GetProcessHeap () returned 0x1400000 [0170.325] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d378) returned 1 [0170.325] GetProcessHeap () returned 0x1400000 [0170.326] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d438) returned 1 [0170.326] GetProcessHeap () returned 0x1400000 [0170.326] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d3d8) returned 1 [0170.326] GetProcessHeap () returned 0x1400000 [0170.326] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d4a8) returned 1 [0170.326] GetProcessHeap () returned 0x1400000 [0170.326] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d4e8) returned 1 [0170.326] GetProcessHeap () returned 0x1400000 [0170.326] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d468) returned 1 [0170.327] GetProcessHeap () returned 0x1400000 [0170.327] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d418) returned 1 [0170.327] GetProcessHeap () returned 0x1400000 [0170.327] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d408) returned 1 [0170.327] GetProcessHeap () returned 0x1400000 [0170.327] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d4b8) returned 1 [0170.328] GetProcessHeap () returned 0x1400000 [0170.328] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d508) returned 1 [0170.328] GetProcessHeap () returned 0x1400000 [0170.328] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d3e8) returned 1 [0170.328] GetProcessHeap () returned 0x1400000 [0170.328] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d388) returned 1 [0170.328] GetProcessHeap () returned 0x1400000 [0170.328] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d518) returned 1 [0170.328] GetProcessHeap () returned 0x1400000 [0170.328] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d3c8) returned 1 [0170.329] GetProcessHeap () returned 0x1400000 [0170.329] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d4c8) returned 1 [0170.329] GetProcessHeap () returned 0x1400000 [0170.329] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d458) returned 1 [0170.329] GetProcessHeap () returned 0x1400000 [0170.329] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d528) returned 1 [0170.329] GetProcessHeap () returned 0x1400000 [0170.329] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d478) returned 1 [0170.329] GetProcessHeap () returned 0x1400000 [0170.329] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d3b8) returned 1 [0170.330] GetProcessHeap () returned 0x1400000 [0170.330] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d448) returned 1 [0170.330] GetProcessHeap () returned 0x1400000 [0170.330] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d398) returned 1 [0170.330] GetProcessHeap () returned 0x1400000 [0170.330] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d3a8) returned 1 [0170.330] GetProcessHeap () returned 0x1400000 [0170.330] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d3f8) returned 1 [0170.330] GetProcessHeap () returned 0x1400000 [0170.330] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d488) returned 1 [0170.331] GetProcessHeap () returned 0x1400000 [0170.331] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d498) returned 1 [0170.331] GetProcessHeap () returned 0x1400000 [0170.331] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d5d0) returned 1 [0170.331] GetProcessHeap () returned 0x1400000 [0170.331] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d760) returned 1 [0170.331] GetProcessHeap () returned 0x1400000 [0170.331] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d5e0) returned 1 [0170.331] GetProcessHeap () returned 0x1400000 [0170.331] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d5f0) returned 1 [0170.332] GetProcessHeap () returned 0x1400000 [0170.332] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d6d0) returned 1 [0170.332] GetProcessHeap () returned 0x1400000 [0170.332] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d670) returned 1 [0170.332] GetProcessHeap () returned 0x1400000 [0170.332] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d720) returned 1 [0170.332] GetProcessHeap () returned 0x1400000 [0170.332] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d6e0) returned 1 [0170.332] GetProcessHeap () returned 0x1400000 [0170.332] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d6b0) returned 1 [0170.332] GetProcessHeap () returned 0x1400000 [0170.333] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d730) returned 1 [0170.333] GetProcessHeap () returned 0x1400000 [0170.333] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d770) returned 1 [0170.333] GetProcessHeap () returned 0x1400000 [0170.333] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d740) returned 1 [0170.333] GetProcessHeap () returned 0x1400000 [0170.333] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d5c0) returned 1 [0170.333] GetProcessHeap () returned 0x1400000 [0170.333] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d6c0) returned 1 [0170.333] GetProcessHeap () returned 0x1400000 [0170.333] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d750) returned 1 [0170.333] GetProcessHeap () returned 0x1400000 [0170.334] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d600) returned 1 [0170.334] GetProcessHeap () returned 0x1400000 [0170.334] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d610) returned 1 [0170.334] GetProcessHeap () returned 0x1400000 [0170.334] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d580) returned 1 [0170.334] GetProcessHeap () returned 0x1400000 [0170.334] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d680) returned 1 [0170.334] GetProcessHeap () returned 0x1400000 [0170.334] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d6f0) returned 1 [0170.334] GetProcessHeap () returned 0x1400000 [0170.334] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d660) returned 1 [0170.334] GetProcessHeap () returned 0x1400000 [0170.335] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d590) returned 1 [0170.335] GetProcessHeap () returned 0x1400000 [0170.335] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d5a0) returned 1 [0170.335] GetProcessHeap () returned 0x1400000 [0170.335] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d5b0) returned 1 [0170.335] GetProcessHeap () returned 0x1400000 [0170.335] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d640) returned 1 [0170.335] GetProcessHeap () returned 0x1400000 [0170.335] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d710) returned 1 [0170.335] GetProcessHeap () returned 0x1400000 [0170.335] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d620) returned 1 [0170.335] GetProcessHeap () returned 0x1400000 [0170.335] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d690) returned 1 [0170.335] GetProcessHeap () returned 0x1400000 [0170.336] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d6a0) returned 1 [0170.336] GetProcessHeap () returned 0x1400000 [0170.336] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d700) returned 1 [0170.336] GetProcessHeap () returned 0x1400000 [0170.336] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d630) returned 1 [0170.336] GetProcessHeap () returned 0x1400000 [0170.336] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d650) returned 1 [0170.336] GetProcessHeap () returned 0x1400000 [0170.336] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d8f0) returned 1 [0170.336] GetProcessHeap () returned 0x1400000 [0170.336] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d780) returned 1 [0170.336] GetProcessHeap () returned 0x1400000 [0170.336] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d840) returned 1 [0170.337] GetProcessHeap () returned 0x1400000 [0170.337] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d7f0) returned 1 [0170.337] GetProcessHeap () returned 0x1400000 [0170.337] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d8c0) returned 1 [0170.337] GetProcessHeap () returned 0x1400000 [0170.337] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d800) returned 1 [0170.337] GetProcessHeap () returned 0x1400000 [0170.337] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d8d0) returned 1 [0170.337] GetProcessHeap () returned 0x1400000 [0170.337] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d810) returned 1 [0170.337] GetProcessHeap () returned 0x1400000 [0170.337] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d820) returned 1 [0170.337] GetProcessHeap () returned 0x1400000 [0170.338] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d910) returned 1 [0170.338] GetProcessHeap () returned 0x1400000 [0170.338] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d900) returned 1 [0170.338] GetProcessHeap () returned 0x1400000 [0170.338] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d880) returned 1 [0170.338] GetProcessHeap () returned 0x1400000 [0170.338] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d920) returned 1 [0170.338] GetProcessHeap () returned 0x1400000 [0170.338] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d940) returned 1 [0170.338] GetProcessHeap () returned 0x1400000 [0170.338] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d930) returned 1 [0170.338] GetProcessHeap () returned 0x1400000 [0170.339] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d8a0) returned 1 [0170.339] GetProcessHeap () returned 0x1400000 [0170.339] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d790) returned 1 [0170.339] GetProcessHeap () returned 0x1400000 [0170.339] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d830) returned 1 [0170.339] GetProcessHeap () returned 0x1400000 [0170.339] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d8e0) returned 1 [0170.339] GetProcessHeap () returned 0x1400000 [0170.339] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d7a0) returned 1 [0170.339] GetProcessHeap () returned 0x1400000 [0170.339] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d7b0) returned 1 [0170.339] GetProcessHeap () returned 0x1400000 [0170.339] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d850) returned 1 [0170.339] GetProcessHeap () returned 0x1400000 [0170.339] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d7c0) returned 1 [0170.340] GetProcessHeap () returned 0x1400000 [0170.340] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d8b0) returned 1 [0170.340] GetProcessHeap () returned 0x1400000 [0170.340] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d7d0) returned 1 [0170.340] GetProcessHeap () returned 0x1400000 [0170.340] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d7e0) returned 1 [0170.340] GetProcessHeap () returned 0x1400000 [0170.340] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d860) returned 1 [0170.340] GetProcessHeap () returned 0x1400000 [0170.340] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d870) returned 1 [0170.340] GetProcessHeap () returned 0x1400000 [0170.340] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140d890) returned 1 [0170.340] GetProcessHeap () returned 0x1400000 [0170.340] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140dd48) returned 1 [0170.340] GetProcessHeap () returned 0x1400000 [0170.341] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140db88) returned 1 [0170.341] GetProcessHeap () returned 0x1400000 [0170.341] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140dc98) returned 1 [0170.341] GetProcessHeap () returned 0x1400000 [0170.356] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140db98) returned 1 [0170.356] GetProcessHeap () returned 0x1400000 [0170.356] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140dbe8) returned 1 [0170.356] GetProcessHeap () returned 0x1400000 [0170.356] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140dba8) returned 1 [0170.356] GetProcessHeap () returned 0x1400000 [0170.356] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140dbd8) returned 1 [0170.356] GetProcessHeap () returned 0x1400000 [0170.357] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140dbb8) returned 1 [0170.357] GetProcessHeap () returned 0x1400000 [0170.357] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140dc28) returned 1 [0170.357] GetProcessHeap () returned 0x1400000 [0170.357] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140dc38) returned 1 [0170.357] GetProcessHeap () returned 0x1400000 [0170.357] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140dbf8) returned 1 [0170.357] GetProcessHeap () returned 0x1400000 [0170.357] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140dc48) returned 1 [0170.357] GetProcessHeap () returned 0x1400000 [0170.357] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140dc08) returned 1 [0170.358] GetProcessHeap () returned 0x1400000 [0170.358] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140dd38) returned 1 [0170.358] GetProcessHeap () returned 0x1400000 [0170.358] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140dbc8) returned 1 [0170.358] GetProcessHeap () returned 0x1400000 [0170.358] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140dc58) returned 1 [0170.358] GetProcessHeap () returned 0x1400000 [0170.359] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140dc18) returned 1 [0170.359] GetProcessHeap () returned 0x1400000 [0170.359] RtlFreeHeap (HeapHandle=0x1400000, Flags=0x0, BaseAddress=0x140dc68) returned 1 [0170.359] FreeLibrary (hLibModule=0x72b90000) returned 1 [0170.363] exit (_Code=0) Thread: id = 125 os_tid = 0xe9c Thread: id = 126 os_tid = 0xa1c Thread: id = 127 os_tid = 0xf3c Thread: id = 130 os_tid = 0x1090 [0163.315] LocalAlloc (uFlags=0x40, uBytes=0x178) returned 0x14413b0 [0163.315] LocalAlloc (uFlags=0x40, uBytes=0x10) returned 0x143e6b8 [0163.315] LocalAlloc (uFlags=0x0, uBytes=0xc) returned 0x143e538 [0163.315] LocalAlloc (uFlags=0x40, uBytes=0x84) returned 0x1426090 [0163.316] LocalReAlloc (hMem=0x143e538, uBytes=0x10, uFlags=0x2) returned 0x1432008 [0163.317] LocalFree (hMem=0x14413b0) returned 0x0 [0163.317] LocalFree (hMem=0x1426090) returned 0x0 [0163.317] LocalFree (hMem=0x1432008) returned 0x0 [0163.317] LocalFree (hMem=0x143e6b8) returned 0x0 Thread: id = 131 os_tid = 0x76c Thread: id = 132 os_tid = 0xee4 Process: id = "44" image_name = "cmd.exe" filename = "c:\\windows\\syswow64\\cmd.exe" page_root = "0x95b3000" os_pid = "0x11e8" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x13d4" cmd_line = "C:\\WINDOWS\\system32\\cmd.exe /c netsh firewall set opmode mode=disable" cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000faa5" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 133 os_tid = 0x1204 [0173.852] GetModuleHandleA (lpModuleName=0x0) returned 0x11d0000 [0173.852] __set_app_type (_Type=0x1) [0173.852] __p__fmode () returned 0x76953c14 [0173.852] __p__commode () returned 0x769549ec [0173.852] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x11e6fd0) returned 0x0 [0173.853] __getmainargs (in: _Argc=0x11fd1a4, _Argv=0x11fd1a8, _Env=0x11fd1ac, _DoWildCard=0, _StartInfo=0x11fd1b8 | out: _Argc=0x11fd1a4, _Argv=0x11fd1a8, _Env=0x11fd1ac) returned 0 [0173.853] _onexit (_Func=0x11e8030) returned 0x11e8030 [0173.854] _onexit (_Func=0x11e8040) returned 0x11e8040 [0173.854] _onexit (_Func=0x11e8050) returned 0x11e8050 [0173.855] _onexit (_Func=0x11e8060) returned 0x11e8060 [0173.855] _onexit (_Func=0x11e8070) returned 0x11e8070 [0173.856] _onexit (_Func=0x11e8080) returned 0x11e8080 [0173.856] GetCurrentThreadId () returned 0x1204 [0173.856] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0x1204) returned 0xbc [0173.857] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x74030000 [0173.857] GetProcAddress (hModule=0x74030000, lpProcName="SetThreadUILanguage") returned 0x74044f70 [0173.857] SetThreadUILanguage (LangId=0x0) returned 0x35f0409 [0173.910] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0173.910] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x10cf894 | out: phkResult=0x10cf894*=0x0) returned 0x2 [0173.911] VirtualQuery (in: lpAddress=0x10cf89f, lpBuffer=0x10cf84c, dwLength=0x1c | out: lpBuffer=0x10cf84c*(BaseAddress=0x10cf000, AllocationBase=0xfd0000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0173.911] VirtualQuery (in: lpAddress=0xfd0000, lpBuffer=0x10cf84c, dwLength=0x1c | out: lpBuffer=0x10cf84c*(BaseAddress=0xfd0000, AllocationBase=0xfd0000, AllocationProtect=0x4, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000)) returned 0x1c [0173.911] VirtualQuery (in: lpAddress=0xfd1000, lpBuffer=0x10cf84c, dwLength=0x1c | out: lpBuffer=0x10cf84c*(BaseAddress=0xfd1000, AllocationBase=0xfd0000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x104, Type=0x20000)) returned 0x1c [0173.911] VirtualQuery (in: lpAddress=0xfd3000, lpBuffer=0x10cf84c, dwLength=0x1c | out: lpBuffer=0x10cf84c*(BaseAddress=0xfd3000, AllocationBase=0xfd0000, AllocationProtect=0x4, RegionSize=0xfd000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0173.911] VirtualQuery (in: lpAddress=0x10d0000, lpBuffer=0x10cf84c, dwLength=0x1c | out: lpBuffer=0x10cf84c*(BaseAddress=0x10d0000, AllocationBase=0x10d0000, AllocationProtect=0x2, RegionSize=0x4000, State=0x1000, Protect=0x2, Type=0x40000)) returned 0x1c [0173.911] GetConsoleOutputCP () returned 0x1b5 [0173.937] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x1203850 | out: lpCPInfo=0x1203850) returned 1 [0173.938] SetConsoleCtrlHandler (HandlerRoutine=0x11f7260, Add=1) returned 1 [0173.938] _get_osfhandle (_FileHandle=1) returned 0x90 [0173.938] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x120388c | out: lpMode=0x120388c) returned 1 [0174.009] _get_osfhandle (_FileHandle=0) returned 0x8c [0174.009] GetConsoleMode (in: hConsoleHandle=0x8c, lpMode=0x1203888 | out: lpMode=0x1203888) returned 1 [0174.017] _get_osfhandle (_FileHandle=1) returned 0x90 [0174.017] SetConsoleMode (hConsoleHandle=0x90, dwMode=0x0) returned 1 [0174.019] _get_osfhandle (_FileHandle=1) returned 0x90 [0174.019] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x1203890 | out: lpMode=0x1203890) returned 1 [0174.026] _get_osfhandle (_FileHandle=1) returned 0x90 [0174.026] SetConsoleMode (hConsoleHandle=0x90, dwMode=0x7) returned 1 [0174.033] _get_osfhandle (_FileHandle=0) returned 0x8c [0174.033] GetConsoleMode (in: hConsoleHandle=0x8c, lpMode=0x1203894 | out: lpMode=0x1203894) returned 1 [0174.035] _get_osfhandle (_FileHandle=0) returned 0x8c [0174.035] SetConsoleMode (hConsoleHandle=0x8c, dwMode=0x1e7) returned 1 [0174.052] GetEnvironmentStringsW () returned 0x3954fe8* [0174.052] GetProcessHeap () returned 0x3950000 [0174.052] RtlAllocateHeap (HeapHandle=0x3950000, Flags=0x8, Size=0xaca) returned 0x3955ac0 [0174.052] FreeEnvironmentStringsA (penv="A") returned 1 [0174.052] GetProcessHeap () returned 0x3950000 [0174.052] RtlAllocateHeap (HeapHandle=0x3950000, Flags=0x8, Size=0x4) returned 0x3953040 [0174.052] GetEnvironmentStringsW () returned 0x3954fe8* [0174.052] GetProcessHeap () returned 0x3950000 [0174.052] RtlAllocateHeap (HeapHandle=0x3950000, Flags=0x8, Size=0xaca) returned 0x3956598 [0174.053] FreeEnvironmentStringsA (penv="A") returned 1 [0174.053] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x10ce7f0 | out: phkResult=0x10ce7f0*=0xcc) returned 0x0 [0174.053] RegQueryValueExW (in: hKey=0xcc, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x10ce7f8, lpData=0x10ce7fc, lpcbData=0x10ce7f4*=0x1000 | out: lpType=0x10ce7f8*=0x0, lpData=0x10ce7fc*=0x0, lpcbData=0x10ce7f4*=0x1000) returned 0x2 [0174.053] RegQueryValueExW (in: hKey=0xcc, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x10ce7f8, lpData=0x10ce7fc, lpcbData=0x10ce7f4*=0x1000 | out: lpType=0x10ce7f8*=0x4, lpData=0x10ce7fc*=0x1, lpcbData=0x10ce7f4*=0x4) returned 0x0 [0174.053] RegQueryValueExW (in: hKey=0xcc, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x10ce7f8, lpData=0x10ce7fc, lpcbData=0x10ce7f4*=0x1000 | out: lpType=0x10ce7f8*=0x0, lpData=0x10ce7fc*=0x1, lpcbData=0x10ce7f4*=0x1000) returned 0x2 [0174.053] RegQueryValueExW (in: hKey=0xcc, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x10ce7f8, lpData=0x10ce7fc, lpcbData=0x10ce7f4*=0x1000 | out: lpType=0x10ce7f8*=0x4, lpData=0x10ce7fc*=0x0, lpcbData=0x10ce7f4*=0x4) returned 0x0 [0174.053] RegQueryValueExW (in: hKey=0xcc, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x10ce7f8, lpData=0x10ce7fc, lpcbData=0x10ce7f4*=0x1000 | out: lpType=0x10ce7f8*=0x4, lpData=0x10ce7fc*=0x40, lpcbData=0x10ce7f4*=0x4) returned 0x0 [0174.057] RegQueryValueExW (in: hKey=0xcc, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x10ce7f8, lpData=0x10ce7fc, lpcbData=0x10ce7f4*=0x1000 | out: lpType=0x10ce7f8*=0x4, lpData=0x10ce7fc*=0x40, lpcbData=0x10ce7f4*=0x4) returned 0x0 [0174.057] RegQueryValueExW (in: hKey=0xcc, lpValueName="AutoRun", lpReserved=0x0, lpType=0x10ce7f8, lpData=0x10ce7fc, lpcbData=0x10ce7f4*=0x1000 | out: lpType=0x10ce7f8*=0x0, lpData=0x10ce7fc*=0x40, lpcbData=0x10ce7f4*=0x1000) returned 0x2 [0174.057] RegCloseKey (hKey=0xcc) returned 0x0 [0174.057] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x10ce7f0 | out: phkResult=0x10ce7f0*=0xcc) returned 0x0 [0174.058] RegQueryValueExW (in: hKey=0xcc, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x10ce7f8, lpData=0x10ce7fc, lpcbData=0x10ce7f4*=0x1000 | out: lpType=0x10ce7f8*=0x0, lpData=0x10ce7fc*=0x40, lpcbData=0x10ce7f4*=0x1000) returned 0x2 [0174.058] RegQueryValueExW (in: hKey=0xcc, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x10ce7f8, lpData=0x10ce7fc, lpcbData=0x10ce7f4*=0x1000 | out: lpType=0x10ce7f8*=0x4, lpData=0x10ce7fc*=0x1, lpcbData=0x10ce7f4*=0x4) returned 0x0 [0174.058] RegQueryValueExW (in: hKey=0xcc, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x10ce7f8, lpData=0x10ce7fc, lpcbData=0x10ce7f4*=0x1000 | out: lpType=0x10ce7f8*=0x0, lpData=0x10ce7fc*=0x1, lpcbData=0x10ce7f4*=0x1000) returned 0x2 [0174.058] RegQueryValueExW (in: hKey=0xcc, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x10ce7f8, lpData=0x10ce7fc, lpcbData=0x10ce7f4*=0x1000 | out: lpType=0x10ce7f8*=0x4, lpData=0x10ce7fc*=0x0, lpcbData=0x10ce7f4*=0x4) returned 0x0 [0174.058] RegQueryValueExW (in: hKey=0xcc, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x10ce7f8, lpData=0x10ce7fc, lpcbData=0x10ce7f4*=0x1000 | out: lpType=0x10ce7f8*=0x4, lpData=0x10ce7fc*=0x9, lpcbData=0x10ce7f4*=0x4) returned 0x0 [0174.058] RegQueryValueExW (in: hKey=0xcc, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x10ce7f8, lpData=0x10ce7fc, lpcbData=0x10ce7f4*=0x1000 | out: lpType=0x10ce7f8*=0x4, lpData=0x10ce7fc*=0x9, lpcbData=0x10ce7f4*=0x4) returned 0x0 [0174.058] RegQueryValueExW (in: hKey=0xcc, lpValueName="AutoRun", lpReserved=0x0, lpType=0x10ce7f8, lpData=0x10ce7fc, lpcbData=0x10ce7f4*=0x1000 | out: lpType=0x10ce7f8*=0x0, lpData=0x10ce7fc*=0x9, lpcbData=0x10ce7f4*=0x1000) returned 0x2 [0174.058] RegCloseKey (hKey=0xcc) returned 0x0 [0174.058] time (in: timer=0x0 | out: timer=0x0) returned 0x5e330326 [0174.058] srand (_Seed=0x5e330326) [0174.058] GetCommandLineW () returned="C:\\WINDOWS\\system32\\cmd.exe /c netsh firewall set opmode mode=disable" [0174.059] malloc (_Size=0x4000) returned 0x3732700 [0174.059] GetCommandLineW () returned="C:\\WINDOWS\\system32\\cmd.exe /c netsh firewall set opmode mode=disable" [0174.059] malloc (_Size=0xffce) returned 0x3600048 [0174.060] ??_V@YAXPAX@Z () returned 0x10cf7d4 [0174.061] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x3600048 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0174.061] malloc (_Size=0xffce) returned 0x3610020 [0174.063] ??_V@YAXPAX@Z () returned 0x10cf5a8 [0174.064] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x3610020, nSize=0x7fe7 | out: lpFilename="C:\\WINDOWS\\SysWOW64\\cmd.exe" (normalized: "c:\\windows\\syswow64\\cmd.exe")) returned 0x1b [0174.064] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x11ff840, nSize=0x2000 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath;C:\\WINDOWS\\system32;C:\\WINDOWS;C:\\WINDOWS\\System32\\Wbem;C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\;C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps") returned 0xbb [0174.064] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x11ff840, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0174.064] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x11ff840, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0174.065] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13 [0174.065] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11 [0174.065] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13 [0174.065] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13 [0174.065] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12 [0174.065] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4 [0174.065] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2 [0174.065] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8 [0174.065] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1 [0174.065] GetProcessHeap () returned 0x3950000 [0174.065] RtlFreeHeap (HeapHandle=0x3950000, Flags=0x0, BaseAddress=0x3955ac0) returned 1 [0174.065] GetEnvironmentStringsW () returned 0x3954fe8* [0174.066] GetProcessHeap () returned 0x3950000 [0174.066] RtlAllocateHeap (HeapHandle=0x3950000, Flags=0x8, Size=0xae2) returned 0x3957b60 [0174.066] FreeEnvironmentStringsA (penv="A") returned 1 [0174.066] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x11ff840, nSize=0x2000 | out: lpBuffer="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1b [0174.066] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x11ff840, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0174.066] _wcsicmp (_String1="KEYS", _String2="CD") returned 8 [0174.066] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6 [0174.066] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8 [0174.066] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8 [0174.066] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7 [0174.066] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9 [0174.066] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7 [0174.066] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3 [0174.066] malloc (_Size=0xffce) returned 0x361fff8 [0174.067] ??_V@YAXPAX@Z () returned 0x10cf340 [0174.068] GetProcessHeap () returned 0x3950000 [0174.068] RtlAllocateHeap (HeapHandle=0x3950000, Flags=0x8, Size=0x38) returned 0x39548f0 [0174.068] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x361fff8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0174.068] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x7fe7, lpBuffer=0x361fff8, lpFilePart=0x10cf38c | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x10cf38c*="Desktop") returned 0x17 [0174.069] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\Desktop" (normalized: "c:\\users\\fd1hvy\\desktop")) returned 0x11 [0174.070] FindFirstFileW (in: lpFileName="C:\\Users", lpFindFileData=0x10cf110 | out: lpFindFileData=0x10cf110*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x475bb883, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x475bb883, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 0x3954930 [0174.071] FindClose (in: hFindFile=0x3954930 | out: hFindFile=0x3954930) returned 1 [0174.071] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy", lpFindFileData=0x10cf110 | out: lpFindFileData=0x10cf110*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20fc850f, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x9de5855d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x9de5855d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD1HVy", cAlternateFileName="")) returned 0x3954930 [0174.071] FindClose (in: hFindFile=0x3954930 | out: hFindFile=0x3954930) returned 1 [0174.071] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", lpFindFileData=0x10cf110 | out: lpFindFileData=0x10cf110*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x5de49bf6, ftLastAccessTime.dwHighDateTime=0x1d5d789, ftLastWriteTime.dwLowDateTime=0x5de49bf6, ftLastWriteTime.dwHighDateTime=0x1d5d789, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 0x3954930 [0174.071] FindClose (in: hFindFile=0x3954930 | out: hFindFile=0x3954930) returned 1 [0174.072] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\Desktop" (normalized: "c:\\users\\fd1hvy\\desktop")) returned 0x11 [0174.072] SetCurrentDirectoryW (lpPathName="C:\\Users\\FD1HVy\\Desktop" (normalized: "c:\\users\\fd1hvy\\desktop")) returned 1 [0174.072] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Users\\FD1HVy\\Desktop") returned 1 [0174.072] GetProcessHeap () returned 0x3950000 [0174.072] RtlFreeHeap (HeapHandle=0x3950000, Flags=0x0, BaseAddress=0x3957b60) returned 1 [0174.072] GetEnvironmentStringsW () returned 0x3957070* [0174.072] GetProcessHeap () returned 0x3950000 [0174.072] RtlAllocateHeap (HeapHandle=0x3950000, Flags=0x8, Size=0xb1a) returned 0x3957b98 [0174.072] FreeEnvironmentStringsA (penv="=") returned 1 [0174.072] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x3600048 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0174.072] GetProcessHeap () returned 0x3950000 [0174.072] RtlFreeHeap (HeapHandle=0x3950000, Flags=0x0, BaseAddress=0x39548f0) returned 1 [0174.072] ??_V@YAXPAX@Z () returned 0x1 [0174.072] ??_V@YAXPAX@Z () returned 0x1 [0174.072] GetProcessHeap () returned 0x3950000 [0174.072] RtlAllocateHeap (HeapHandle=0x3950000, Flags=0x8, Size=0x400e) returned 0x39586c0 [0174.073] GetProcessHeap () returned 0x3950000 [0174.073] RtlAllocateHeap (HeapHandle=0x3950000, Flags=0x8, Size=0x5a) returned 0x39548f0 [0174.073] GetProcessHeap () returned 0x3950000 [0174.073] RtlFreeHeap (HeapHandle=0x3950000, Flags=0x0, BaseAddress=0x39586c0) returned 1 [0174.074] GetConsoleOutputCP () returned 0x1b5 [0174.082] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x1203850 | out: lpCPInfo=0x1203850) returned 1 [0174.082] GetUserDefaultLCID () returned 0x409 [0174.085] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x11ff82c, cchData=8 | out: lpLCData=":") returned 2 [0174.085] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x10cf6fc, cchData=128 | out: lpLCData="0") returned 2 [0174.085] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x10cf6fc, cchData=128 | out: lpLCData="0") returned 2 [0174.086] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x10cf6fc, cchData=128 | out: lpLCData="1") returned 2 [0174.086] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x11ff81c, cchData=8 | out: lpLCData="/") returned 2 [0174.086] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x11ff7b8, cchData=32 | out: lpLCData="Mon") returned 4 [0174.086] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x11ff778, cchData=32 | out: lpLCData="Tue") returned 4 [0174.086] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x11ff738, cchData=32 | out: lpLCData="Wed") returned 4 [0174.086] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x11ff6f8, cchData=32 | out: lpLCData="Thu") returned 4 [0174.086] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x11ff6b8, cchData=32 | out: lpLCData="Fri") returned 4 [0174.086] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x11ff678, cchData=32 | out: lpLCData="Sat") returned 4 [0174.087] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x11ff638, cchData=32 | out: lpLCData="Sun") returned 4 [0174.087] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x11ff80c, cchData=8 | out: lpLCData=".") returned 2 [0174.087] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x11ff7f8, cchData=8 | out: lpLCData=",") returned 2 [0174.087] setlocale (category=0, locale=".OCP") returned="English_United States.437" [0174.091] GetProcessHeap () returned 0x3950000 [0174.091] RtlAllocateHeap (HeapHandle=0x3950000, Flags=0x0, Size=0x20c) returned 0x3955b10 [0174.091] GetConsoleTitleW (in: lpConsoleTitle=0x3955b10, nSize=0x104 | out: lpConsoleTitle="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1c [0174.163] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x74030000 [0174.164] GetProcAddress (hModule=0x74030000, lpProcName="CopyFileExW") returned 0x74044330 [0174.164] GetProcAddress (hModule=0x74030000, lpProcName="IsDebuggerPresent") returned 0x74045930 [0174.164] GetProcAddress (hModule=0x74030000, lpProcName="SetConsoleInputExeNameW") returned 0x772c09d0 [0174.164] ??_V@YAXPAX@Z () returned 0x1 [0174.166] GetProcessHeap () returned 0x3950000 [0174.166] RtlAllocateHeap (HeapHandle=0x3950000, Flags=0x8, Size=0x400a) returned 0x39586c0 [0174.166] GetProcessHeap () returned 0x3950000 [0174.166] RtlFreeHeap (HeapHandle=0x3950000, Flags=0x0, BaseAddress=0x39586c0) returned 1 [0174.167] _wcsicmp (_String1="netsh", _String2=")") returned 69 [0174.167] _wcsicmp (_String1="FOR", _String2="netsh") returned -8 [0174.167] _wcsicmp (_String1="FOR/?", _String2="netsh") returned -8 [0174.167] _wcsicmp (_String1="IF", _String2="netsh") returned -5 [0174.167] _wcsicmp (_String1="IF/?", _String2="netsh") returned -5 [0174.167] _wcsicmp (_String1="REM", _String2="netsh") returned 4 [0174.167] _wcsicmp (_String1="REM/?", _String2="netsh") returned 4 [0174.167] GetProcessHeap () returned 0x3950000 [0174.167] RtlAllocateHeap (HeapHandle=0x3950000, Flags=0x8, Size=0x58) returned 0x39549a0 [0174.167] GetProcessHeap () returned 0x3950000 [0174.167] RtlAllocateHeap (HeapHandle=0x3950000, Flags=0x8, Size=0x14) returned 0x3954a00 [0174.169] GetProcessHeap () returned 0x3950000 [0174.169] RtlAllocateHeap (HeapHandle=0x3950000, Flags=0x8, Size=0x4c) returned 0x3954a20 [0174.170] GetConsoleTitleW (in: lpConsoleTitle=0x10cf5f0, nSize=0x104 | out: lpConsoleTitle="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1c [0174.181] malloc (_Size=0xffce) returned 0x3612ac0 [0174.182] ??_V@YAXPAX@Z () returned 0x10cf37c [0174.182] malloc (_Size=0xffce) returned 0x3622a98 [0174.183] ??_V@YAXPAX@Z () returned 0x10cf134 [0174.183] _wcsicmp (_String1="netsh", _String2="DIR") returned 10 [0174.183] _wcsicmp (_String1="netsh", _String2="ERASE") returned 9 [0174.184] _wcsicmp (_String1="netsh", _String2="DEL") returned 10 [0174.184] _wcsicmp (_String1="netsh", _String2="TYPE") returned -6 [0174.184] _wcsicmp (_String1="netsh", _String2="COPY") returned 11 [0174.184] _wcsicmp (_String1="netsh", _String2="CD") returned 11 [0174.184] _wcsicmp (_String1="netsh", _String2="CHDIR") returned 11 [0174.184] _wcsicmp (_String1="netsh", _String2="RENAME") returned -4 [0174.184] _wcsicmp (_String1="netsh", _String2="REN") returned -4 [0174.184] _wcsicmp (_String1="netsh", _String2="ECHO") returned 9 [0174.184] _wcsicmp (_String1="netsh", _String2="SET") returned -5 [0174.184] _wcsicmp (_String1="netsh", _String2="PAUSE") returned -2 [0174.184] _wcsicmp (_String1="netsh", _String2="DATE") returned 10 [0174.184] _wcsicmp (_String1="netsh", _String2="TIME") returned -6 [0174.184] _wcsicmp (_String1="netsh", _String2="PROMPT") returned -2 [0174.184] _wcsicmp (_String1="netsh", _String2="MD") returned 1 [0174.184] _wcsicmp (_String1="netsh", _String2="MKDIR") returned 1 [0174.184] _wcsicmp (_String1="netsh", _String2="RD") returned -4 [0174.184] _wcsicmp (_String1="netsh", _String2="RMDIR") returned -4 [0174.184] _wcsicmp (_String1="netsh", _String2="PATH") returned -2 [0174.184] _wcsicmp (_String1="netsh", _String2="GOTO") returned 7 [0174.184] _wcsicmp (_String1="netsh", _String2="SHIFT") returned -5 [0174.184] _wcsicmp (_String1="netsh", _String2="CLS") returned 11 [0174.184] _wcsicmp (_String1="netsh", _String2="CALL") returned 11 [0174.184] _wcsicmp (_String1="netsh", _String2="VERIFY") returned -8 [0174.184] _wcsicmp (_String1="netsh", _String2="VER") returned -8 [0174.184] _wcsicmp (_String1="netsh", _String2="VOL") returned -8 [0174.184] _wcsicmp (_String1="netsh", _String2="EXIT") returned 9 [0174.184] _wcsicmp (_String1="netsh", _String2="SETLOCAL") returned -5 [0174.184] _wcsicmp (_String1="netsh", _String2="ENDLOCAL") returned 9 [0174.184] _wcsicmp (_String1="netsh", _String2="TITLE") returned -6 [0174.184] _wcsicmp (_String1="netsh", _String2="START") returned -5 [0174.184] _wcsicmp (_String1="netsh", _String2="DPATH") returned 10 [0174.184] _wcsicmp (_String1="netsh", _String2="KEYS") returned 3 [0174.184] _wcsicmp (_String1="netsh", _String2="MOVE") returned 1 [0174.185] _wcsicmp (_String1="netsh", _String2="PUSHD") returned -2 [0174.185] _wcsicmp (_String1="netsh", _String2="POPD") returned -2 [0174.185] _wcsicmp (_String1="netsh", _String2="ASSOC") returned 13 [0174.185] _wcsicmp (_String1="netsh", _String2="FTYPE") returned 8 [0174.185] _wcsicmp (_String1="netsh", _String2="BREAK") returned 12 [0174.185] _wcsicmp (_String1="netsh", _String2="COLOR") returned 11 [0174.185] _wcsicmp (_String1="netsh", _String2="MKLINK") returned 1 [0174.185] _wcsicmp (_String1="netsh", _String2="DIR") returned 10 [0174.185] _wcsicmp (_String1="netsh", _String2="ERASE") returned 9 [0174.185] _wcsicmp (_String1="netsh", _String2="DEL") returned 10 [0174.185] _wcsicmp (_String1="netsh", _String2="TYPE") returned -6 [0174.185] _wcsicmp (_String1="netsh", _String2="COPY") returned 11 [0174.185] _wcsicmp (_String1="netsh", _String2="CD") returned 11 [0174.185] _wcsicmp (_String1="netsh", _String2="CHDIR") returned 11 [0174.185] _wcsicmp (_String1="netsh", _String2="RENAME") returned -4 [0174.185] _wcsicmp (_String1="netsh", _String2="REN") returned -4 [0174.185] _wcsicmp (_String1="netsh", _String2="ECHO") returned 9 [0174.185] _wcsicmp (_String1="netsh", _String2="SET") returned -5 [0174.185] _wcsicmp (_String1="netsh", _String2="PAUSE") returned -2 [0174.185] _wcsicmp (_String1="netsh", _String2="DATE") returned 10 [0174.185] _wcsicmp (_String1="netsh", _String2="TIME") returned -6 [0174.185] _wcsicmp (_String1="netsh", _String2="PROMPT") returned -2 [0174.185] _wcsicmp (_String1="netsh", _String2="MD") returned 1 [0174.185] _wcsicmp (_String1="netsh", _String2="MKDIR") returned 1 [0174.185] _wcsicmp (_String1="netsh", _String2="RD") returned -4 [0174.185] _wcsicmp (_String1="netsh", _String2="RMDIR") returned -4 [0174.185] _wcsicmp (_String1="netsh", _String2="PATH") returned -2 [0174.185] _wcsicmp (_String1="netsh", _String2="GOTO") returned 7 [0174.185] _wcsicmp (_String1="netsh", _String2="SHIFT") returned -5 [0174.185] _wcsicmp (_String1="netsh", _String2="CLS") returned 11 [0174.186] _wcsicmp (_String1="netsh", _String2="CALL") returned 11 [0174.186] _wcsicmp (_String1="netsh", _String2="VERIFY") returned -8 [0174.186] _wcsicmp (_String1="netsh", _String2="VER") returned -8 [0174.186] _wcsicmp (_String1="netsh", _String2="VOL") returned -8 [0174.186] _wcsicmp (_String1="netsh", _String2="EXIT") returned 9 [0174.186] _wcsicmp (_String1="netsh", _String2="SETLOCAL") returned -5 [0174.186] _wcsicmp (_String1="netsh", _String2="ENDLOCAL") returned 9 [0174.186] _wcsicmp (_String1="netsh", _String2="TITLE") returned -6 [0174.186] _wcsicmp (_String1="netsh", _String2="START") returned -5 [0174.186] _wcsicmp (_String1="netsh", _String2="DPATH") returned 10 [0174.186] _wcsicmp (_String1="netsh", _String2="KEYS") returned 3 [0174.186] _wcsicmp (_String1="netsh", _String2="MOVE") returned 1 [0174.186] _wcsicmp (_String1="netsh", _String2="PUSHD") returned -2 [0174.186] _wcsicmp (_String1="netsh", _String2="POPD") returned -2 [0174.186] _wcsicmp (_String1="netsh", _String2="ASSOC") returned 13 [0174.186] _wcsicmp (_String1="netsh", _String2="FTYPE") returned 8 [0174.186] _wcsicmp (_String1="netsh", _String2="BREAK") returned 12 [0174.186] _wcsicmp (_String1="netsh", _String2="COLOR") returned 11 [0174.186] _wcsicmp (_String1="netsh", _String2="MKLINK") returned 1 [0174.186] _wcsicmp (_String1="netsh", _String2="FOR") returned 8 [0174.186] _wcsicmp (_String1="netsh", _String2="IF") returned 5 [0174.186] _wcsicmp (_String1="netsh", _String2="REM") returned -4 [0174.187] ??_V@YAXPAX@Z () returned 0x1 [0174.187] GetProcessHeap () returned 0x3950000 [0174.187] RtlAllocateHeap (HeapHandle=0x3950000, Flags=0x8, Size=0xffd6) returned 0x39586c0 [0174.188] GetProcessHeap () returned 0x3950000 [0174.188] RtlAllocateHeap (HeapHandle=0x3950000, Flags=0x8, Size=0x58) returned 0x3954a78 [0174.188] _wcsnicmp (_String1="nets", _String2="cmd ", _MaxCount=0x4) returned 11 [0174.188] malloc (_Size=0xffce) returned 0x3622a98 [0174.188] ??_V@YAXPAX@Z () returned 0x10ceeb4 [0174.189] GetProcessHeap () returned 0x3950000 [0174.189] RtlAllocateHeap (HeapHandle=0x3950000, Flags=0x8, Size=0x1ffa4) returned 0x39686a0 [0174.192] SetErrorMode (uMode=0x0) returned 0x0 [0174.192] SetErrorMode (uMode=0x1) returned 0x0 [0174.192] GetFullPathNameW (in: lpFileName=".", nBufferLength=0xffce, lpBuffer=0x39686a8, lpFilePart=0x10ceed4 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x10ceed4*="Desktop") returned 0x17 [0174.192] SetErrorMode (uMode=0x0) returned 0x1 [0174.192] GetProcessHeap () returned 0x3950000 [0174.192] RtlReAllocateHeap (Heap=0x3950000, Flags=0x0, Ptr=0x39686a0, Size=0x44) returned 0x39686a0 [0174.192] GetProcessHeap () returned 0x3950000 [0174.193] RtlSizeHeap (HeapHandle=0x3950000, Flags=0x0, MemoryPointer=0x39686a0) returned 0x44 [0174.193] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x11ff840, nSize=0x2000 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath;C:\\WINDOWS\\system32;C:\\WINDOWS;C:\\WINDOWS\\System32\\Wbem;C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\;C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps") returned 0xbb [0174.193] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1 [0174.193] GetProcessHeap () returned 0x3950000 [0174.193] RtlAllocateHeap (HeapHandle=0x3950000, Flags=0x8, Size=0x1b4) returned 0x3955d28 [0174.193] GetProcessHeap () returned 0x3950000 [0174.193] RtlAllocateHeap (HeapHandle=0x3950000, Flags=0x8, Size=0x360) returned 0x3955ee8 [0174.218] GetProcessHeap () returned 0x3950000 [0174.218] RtlReAllocateHeap (Heap=0x3950000, Flags=0x0, Ptr=0x3955ee8, Size=0x1b6) returned 0x3955ee8 [0174.218] GetProcessHeap () returned 0x3950000 [0174.218] RtlSizeHeap (HeapHandle=0x3950000, Flags=0x0, MemoryPointer=0x3955ee8) returned 0x1b6 [0174.218] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x11ff840, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0174.218] GetProcessHeap () returned 0x3950000 [0174.218] RtlAllocateHeap (HeapHandle=0x3950000, Flags=0x8, Size=0xe0) returned 0x39560a8 [0174.223] GetProcessHeap () returned 0x3950000 [0174.223] RtlReAllocateHeap (Heap=0x3950000, Flags=0x0, Ptr=0x39560a8, Size=0x76) returned 0x39560a8 [0174.223] GetProcessHeap () returned 0x3950000 [0174.223] RtlSizeHeap (HeapHandle=0x3950000, Flags=0x0, MemoryPointer=0x39560a8) returned 0x76 [0174.223] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0174.224] FindFirstFileExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\netsh.*", fInfoLevelId=0x1, lpFindFileData=0x10cec60, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x10cec60) returned 0xffffffff [0174.224] GetLastError () returned 0x2 [0174.225] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0174.225] FindFirstFileExW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\netsh.*", fInfoLevelId=0x1, lpFindFileData=0x10cec60, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x10cec60) returned 0xffffffff [0174.226] GetLastError () returned 0x2 [0174.226] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0174.227] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\system32\\netsh.*", fInfoLevelId=0x1, lpFindFileData=0x10cec60, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x10cec60) returned 0x3956128 [0174.227] GetProcessHeap () returned 0x3950000 [0174.227] RtlAllocateHeap (HeapHandle=0x3950000, Flags=0x0, Size=0x14) returned 0x3956168 [0174.227] FindClose (in: hFindFile=0x3956128 | out: hFindFile=0x3956128) returned 1 [0174.227] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\system32\\netsh.COM", fInfoLevelId=0x1, lpFindFileData=0x10cec60, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x10cec60) returned 0xffffffff [0174.228] GetLastError () returned 0x2 [0174.228] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\system32\\netsh.EXE", fInfoLevelId=0x1, lpFindFileData=0x10cec60, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x10cec60) returned 0x3956128 [0174.228] GetProcessHeap () returned 0x3950000 [0174.228] RtlReAllocateHeap (Heap=0x3950000, Flags=0x0, Ptr=0x3956168, Size=0x4) returned 0x3956168 [0174.228] FindClose (in: hFindFile=0x3956128 | out: hFindFile=0x3956128) returned 1 [0174.228] _wcsicmp (_String1=".EXE", _String2=".BAT") returned 3 [0174.229] _wcsicmp (_String1=".EXE", _String2=".CMD") returned 2 [0174.229] ??_V@YAXPAX@Z () returned 0x1 [0174.229] GetConsoleTitleW (in: lpConsoleTitle=0x10cf164, nSize=0x104 | out: lpConsoleTitle="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1c [0174.242] InitializeProcThreadAttributeList (in: lpAttributeList=0x10cf090, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x10cf07c | out: lpAttributeList=0x10cf090, lpSize=0x10cf07c) returned 1 [0174.242] UpdateProcThreadAttribute (in: lpAttributeList=0x10cf090, dwFlags=0x0, Attribute=0x60001, lpValue=0x10cf078, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x10cf090, lpPreviousValue=0x0) returned 1 [0174.242] GetStartupInfoW (in: lpStartupInfo=0x10cf0c8 | out: lpStartupInfo=0x10cf0c8*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\WINDOWS\\system32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x144, lpReserved2=0x3951b82, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) [0174.243] GetProcessHeap () returned 0x3950000 [0174.243] RtlAllocateHeap (HeapHandle=0x3950000, Flags=0x8, Size=0x18) returned 0x3956128 [0174.243] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38 [0174.243] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2 [0174.243] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2 [0174.243] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0174.243] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0174.243] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0174.243] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3 [0174.243] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3 [0174.243] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5 [0174.243] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5 [0174.243] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9 [0174.244] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9 [0174.244] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11 [0174.244] _wcsnicmp (_String1="COPYCMD", _String2="OneDriv", _MaxCount=0x7) returned -12 [0174.244] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12 [0174.244] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13 [0174.244] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13 [0174.244] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0174.244] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0174.244] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0174.244] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0174.244] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0174.244] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0174.244] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0174.244] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0174.244] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0174.244] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13 [0174.245] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13 [0174.245] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13 [0174.245] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16 [0174.245] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16 [0174.245] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17 [0174.245] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17 [0174.245] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18 [0174.245] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18 [0174.245] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18 [0174.245] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18 [0174.245] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20 [0174.245] GetProcessHeap () returned 0x3950000 [0174.245] RtlFreeHeap (HeapHandle=0x3950000, Flags=0x0, BaseAddress=0x3956128) returned 1 [0174.245] GetProcessHeap () returned 0x3950000 [0174.245] RtlAllocateHeap (HeapHandle=0x3950000, Flags=0x8, Size=0xa) returned 0x3954ad8 [0174.246] lstrcmpW (lpString1="\\netsh.exe", lpString2="\\XCOPY.EXE") returned -1 [0174.248] _get_osfhandle (_FileHandle=1) returned 0x90 [0174.248] SetConsoleMode (hConsoleHandle=0x90, dwMode=0x3) returned 1 [0174.252] _get_osfhandle (_FileHandle=0) returned 0x8c [0174.252] SetConsoleMode (hConsoleHandle=0x8c, dwMode=0x1f7) returned 1 [0174.259] CreateProcessW (in: lpApplicationName="C:\\WINDOWS\\system32\\netsh.exe", lpCommandLine="netsh firewall set opmode mode=disable", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\FD1HVy\\Desktop", lpStartupInfo=0x10cf018*(cb=0x48, lpReserved=0x0, lpDesktop="WinSta0\\Default", lpTitle="netsh firewall set opmode mode=disable", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x10cf064 | out: lpCommandLine="netsh firewall set opmode mode=disable", lpProcessInformation=0x10cf064*(hProcess=0xe0, hThread=0xdc, dwProcessId=0x1124, dwThreadId=0x102c)) returned 1 [0174.492] CloseHandle (hObject=0xdc) returned 1 [0174.492] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1 [0174.492] GetProcessHeap () returned 0x3950000 [0174.492] RtlFreeHeap (HeapHandle=0x3950000, Flags=0x0, BaseAddress=0x3957b98) returned 1 [0174.493] GetEnvironmentStringsW () returned 0x3957070* [0174.493] GetProcessHeap () returned 0x3950000 [0174.493] RtlAllocateHeap (HeapHandle=0x3950000, Flags=0x8, Size=0xb1a) returned 0x3957b98 [0174.493] FreeEnvironmentStringsA (penv="=") returned 1 [0174.493] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0xffffffff) returned 0x0 [0182.761] GetExitCodeProcess (in: hProcess=0xe0, lpExitCode=0x10ceffc | out: lpExitCode=0x10ceffc*=0x0) returned 1 [0182.761] CloseHandle (hObject=0xe0) returned 1 [0182.761] _vsnwprintf (in: _Buffer=0x10cf0e4, _BufferCount=0x13, _Format="%08X", _ArgList=0x10cf004 | out: _Buffer="00000000") returned 8 [0182.761] SetEnvironmentVariableW (lpName="=ExitCode", lpValue="00000000") returned 1 [0182.762] GetProcessHeap () returned 0x3950000 [0182.762] RtlFreeHeap (HeapHandle=0x3950000, Flags=0x0, BaseAddress=0x3957b98) returned 1 [0182.762] GetEnvironmentStringsW () returned 0x3957070* [0182.763] GetProcessHeap () returned 0x3950000 [0182.763] RtlAllocateHeap (HeapHandle=0x3950000, Flags=0x8, Size=0xb40) returned 0x3969238 [0182.763] FreeEnvironmentStringsA (penv="=") returned 1 [0182.763] SetEnvironmentVariableW (lpName="=ExitCodeAscii", lpValue=0x0) returned 1 [0182.763] GetProcessHeap () returned 0x3950000 [0182.763] RtlFreeHeap (HeapHandle=0x3950000, Flags=0x0, BaseAddress=0x3969238) returned 1 [0182.763] GetEnvironmentStringsW () returned 0x3957070* [0182.763] GetProcessHeap () returned 0x3950000 [0182.774] RtlAllocateHeap (HeapHandle=0x3950000, Flags=0x8, Size=0xb40) returned 0x3969238 [0182.775] FreeEnvironmentStringsA (penv="=") returned 1 [0182.775] GetProcessHeap () returned 0x3950000 [0182.775] RtlFreeHeap (HeapHandle=0x3950000, Flags=0x0, BaseAddress=0x3954ad8) returned 1 [0182.775] DeleteProcThreadAttributeList (in: lpAttributeList=0x10cf090 | out: lpAttributeList=0x10cf090) [0182.775] ??_V@YAXPAX@Z () returned 0x1 [0182.776] _get_osfhandle (_FileHandle=1) returned 0x90 [0182.776] SetConsoleMode (hConsoleHandle=0x90, dwMode=0x3) returned 1 [0182.781] _get_osfhandle (_FileHandle=1) returned 0x90 [0182.781] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x1203890 | out: lpMode=0x1203890) returned 1 [0182.836] _get_osfhandle (_FileHandle=1) returned 0x90 [0182.836] SetConsoleMode (hConsoleHandle=0x90, dwMode=0x7) returned 1 [0182.847] _get_osfhandle (_FileHandle=0) returned 0x8c [0182.847] GetConsoleMode (in: hConsoleHandle=0x8c, lpMode=0x1203894 | out: lpMode=0x1203894) returned 1 [0182.863] _get_osfhandle (_FileHandle=0) returned 0x8c [0182.863] SetConsoleMode (hConsoleHandle=0x8c, dwMode=0x1e7) returned 1 [0182.867] SetConsoleInputExeNameW () returned 0x1 [0182.867] GetConsoleOutputCP () returned 0x1b5 [0182.898] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x1203850 | out: lpCPInfo=0x1203850) returned 1 [0182.899] SetThreadUILanguage (LangId=0x0) returned 0x35f0409 [0182.958] exit (_Code=0) [0182.959] ??_V@YAXPAX@Z () returned 0x1 Thread: id = 139 os_tid = 0x1080 Process: id = "45" image_name = "conhost.exe" filename = "c:\\windows\\system32\\conhost.exe" page_root = "0x1804a000" os_pid = "0x10ec" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "44" os_parent_pid = "0x11e8" cmd_line = "\\??\\C:\\WINDOWS\\system32\\conhost.exe 0xffffffff -ForceV1" cur_dir = "C:\\WINDOWS" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000faa5" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 134 os_tid = 0x126c Thread: id = 135 os_tid = 0x10d4 Thread: id = 136 os_tid = 0x10bc Thread: id = 137 os_tid = 0x1094 Thread: id = 138 os_tid = 0x10a8 Process: id = "46" image_name = "netsh.exe" filename = "c:\\windows\\syswow64\\netsh.exe" page_root = "0x185e1000" os_pid = "0x1124" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "44" os_parent_pid = "0x11e8" cmd_line = "netsh firewall set opmode mode=disable" cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000faa5" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 140 os_tid = 0x102c [0174.855] GetModuleHandleA (lpModuleName=0x0) returned 0x1630000 [0174.855] __set_app_type (_Type=0x1) [0174.855] __p__fmode () returned 0x76953c14 [0174.855] __p__commode () returned 0x769549ec [0174.856] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x1639a90) returned 0x0 [0174.856] __wgetmainargs (in: _Argc=0x16433e8, _Argv=0x16433ec, _Env=0x16433f0, _DoWildCard=0, _StartInfo=0x16433fc | out: _Argc=0x16433e8, _Argv=0x16433ec, _Env=0x16433f0) returned 0 [0174.860] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0174.860] GetModuleHandleW (lpModuleName=0x0) returned 0x1630000 [0174.861] _vsnwprintf (in: _Buffer=0x1644ae0, _BufferCount=0x1fff, _Format="%s>", _ArgList=0xd67430 | out: _Buffer="netsh>") returned 6 [0174.862] GetProcessHeap () returned 0x10a0000 [0174.862] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ab6e0 [0174.862] GetProcessHeap () returned 0x10a0000 [0174.862] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ab790 [0174.862] GetProcessHeap () returned 0x10a0000 [0174.862] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ab7c0 [0174.862] GetProcessHeap () returned 0x10a0000 [0174.862] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ab7d0 [0174.862] GetProcessHeap () returned 0x10a0000 [0174.862] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ab800 [0174.862] GetProcessHeap () returned 0x10a0000 [0174.862] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ab630 [0174.862] GetProcessHeap () returned 0x10a0000 [0174.863] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ab650 [0174.863] GetProcessHeap () returned 0x10a0000 [0174.863] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10acf70 [0174.863] GetProcessHeap () returned 0x10a0000 [0174.863] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad020 [0174.863] GetProcessHeap () returned 0x10a0000 [0174.863] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad080 [0174.863] GetProcessHeap () returned 0x10a0000 [0174.863] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10acf30 [0174.863] GetProcessHeap () returned 0x10a0000 [0174.863] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10acfd0 [0174.863] GetProcessHeap () returned 0x10a0000 [0174.863] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad030 [0174.864] GetProcessHeap () returned 0x10a0000 [0174.864] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad050 [0174.864] GetProcessHeap () returned 0x10a0000 [0174.864] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10acf20 [0174.864] GetProcessHeap () returned 0x10a0000 [0174.864] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10acef0 [0174.864] GetProcessHeap () returned 0x10a0000 [0174.864] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10acfb0 [0174.864] GetProcessHeap () returned 0x10a0000 [0174.864] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10acf40 [0174.864] GetProcessHeap () returned 0x10a0000 [0174.864] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10acee0 [0174.865] GetProcessHeap () returned 0x10a0000 [0174.865] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10aced0 [0174.865] GetProcessHeap () returned 0x10a0000 [0174.865] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10acfc0 [0174.865] GetProcessHeap () returned 0x10a0000 [0174.865] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10acf80 [0174.865] GetProcessHeap () returned 0x10a0000 [0174.865] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10acf90 [0174.865] GetProcessHeap () returned 0x10a0000 [0174.865] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10acf00 [0174.866] GetProcessHeap () returned 0x10a0000 [0174.866] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10acfe0 [0174.866] GetProcessHeap () returned 0x10a0000 [0174.866] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10acf10 [0174.866] GetProcessHeap () returned 0x10a0000 [0174.866] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad010 [0174.866] GetProcessHeap () returned 0x10a0000 [0174.866] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10acf50 [0174.866] GetProcessHeap () returned 0x10a0000 [0174.866] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad060 [0174.866] GetProcessHeap () returned 0x10a0000 [0174.867] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad000 [0174.867] GetProcessHeap () returned 0x10a0000 [0174.867] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10acfa0 [0174.867] GetProcessHeap () returned 0x10a0000 [0174.867] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10acf60 [0174.867] GetProcessHeap () returned 0x10a0000 [0174.867] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10acff0 [0174.867] GetProcessHeap () returned 0x10a0000 [0174.867] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad040 [0174.867] GetProcessHeap () returned 0x10a0000 [0174.868] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad070 [0174.868] GetProcessHeap () returned 0x10a0000 [0174.868] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad090 [0174.868] GetProcessHeap () returned 0x10a0000 [0174.868] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10acd60 [0174.868] GetProcessHeap () returned 0x10a0000 [0174.868] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10acd70 [0174.868] GetProcessHeap () returned 0x10a0000 [0174.868] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10acd80 [0174.868] GetProcessHeap () returned 0x10a0000 [0174.868] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10acdb0 [0174.868] GetProcessHeap () returned 0x10a0000 [0174.869] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ace70 [0174.869] GetProcessHeap () returned 0x10a0000 [0174.869] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10acdd0 [0174.869] GetProcessHeap () returned 0x10a0000 [0174.869] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ace80 [0174.869] GetProcessHeap () returned 0x10a0000 [0174.869] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ace30 [0174.869] GetProcessHeap () returned 0x10a0000 [0174.869] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ace40 [0174.869] GetProcessHeap () returned 0x10a0000 [0174.869] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ace60 [0174.869] GetProcessHeap () returned 0x10a0000 [0174.870] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10acd30 [0174.870] GetProcessHeap () returned 0x10a0000 [0174.870] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10acd90 [0174.870] GetProcessHeap () returned 0x10a0000 [0174.870] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ace50 [0174.870] GetProcessHeap () returned 0x10a0000 [0174.870] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10accd0 [0174.870] GetProcessHeap () returned 0x10a0000 [0174.870] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10acea0 [0174.870] GetProcessHeap () returned 0x10a0000 [0174.870] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10acd00 [0174.870] GetProcessHeap () returned 0x10a0000 [0174.871] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10acde0 [0174.871] GetProcessHeap () returned 0x10a0000 [0174.871] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10acd50 [0174.871] GetProcessHeap () returned 0x10a0000 [0174.871] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10acda0 [0174.871] GetProcessHeap () returned 0x10a0000 [0174.871] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10acdc0 [0174.871] GetProcessHeap () returned 0x10a0000 [0174.871] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ace20 [0174.871] GetProcessHeap () returned 0x10a0000 [0174.871] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ace90 [0174.871] GetProcessHeap () returned 0x10a0000 [0174.871] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10acec0 [0174.872] GetProcessHeap () returned 0x10a0000 [0174.872] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10aceb0 [0174.872] GetProcessHeap () returned 0x10a0000 [0174.872] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10acce0 [0174.872] GetProcessHeap () returned 0x10a0000 [0174.872] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10accf0 [0174.872] GetProcessHeap () returned 0x10a0000 [0174.872] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10acdf0 [0174.872] GetProcessHeap () returned 0x10a0000 [0174.872] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10acd10 [0174.872] GetProcessHeap () returned 0x10a0000 [0174.872] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ace00 [0174.872] GetProcessHeap () returned 0x10a0000 [0174.872] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10acd20 [0174.873] GetProcessHeap () returned 0x10a0000 [0174.873] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ace10 [0174.873] GetProcessHeap () returned 0x10a0000 [0174.873] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10acd40 [0174.873] GetProcessHeap () returned 0x10a0000 [0174.873] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad158 [0174.873] GetProcessHeap () returned 0x10a0000 [0174.873] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad138 [0174.873] GetProcessHeap () returned 0x10a0000 [0174.873] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad148 [0174.873] GetProcessHeap () returned 0x10a0000 [0174.873] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad0f8 [0174.873] GetProcessHeap () returned 0x10a0000 [0174.874] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad198 [0174.874] GetProcessHeap () returned 0x10a0000 [0174.874] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad258 [0174.874] GetProcessHeap () returned 0x10a0000 [0174.874] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad1a8 [0174.874] GetProcessHeap () returned 0x10a0000 [0174.874] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad1e8 [0174.875] GetProcessHeap () returned 0x10a0000 [0174.875] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad0d8 [0174.875] GetProcessHeap () returned 0x10a0000 [0174.875] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad268 [0174.875] GetProcessHeap () returned 0x10a0000 [0174.875] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad168 [0174.875] GetProcessHeap () returned 0x10a0000 [0174.875] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad1b8 [0174.876] GetProcessHeap () returned 0x10a0000 [0174.876] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad1c8 [0174.876] GetProcessHeap () returned 0x10a0000 [0174.876] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad2b8 [0174.876] GetProcessHeap () returned 0x10a0000 [0174.876] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad108 [0174.876] GetProcessHeap () returned 0x10a0000 [0174.876] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad1f8 [0174.876] GetProcessHeap () returned 0x10a0000 [0174.876] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad2c8 [0174.877] GetProcessHeap () returned 0x10a0000 [0174.877] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad188 [0174.877] GetProcessHeap () returned 0x10a0000 [0174.877] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad248 [0174.877] GetProcessHeap () returned 0x10a0000 [0174.877] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad278 [0174.877] GetProcessHeap () returned 0x10a0000 [0174.877] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad298 [0174.877] GetProcessHeap () returned 0x10a0000 [0174.877] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad1d8 [0174.877] GetProcessHeap () returned 0x10a0000 [0174.877] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad288 [0174.878] GetProcessHeap () returned 0x10a0000 [0174.878] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad178 [0174.878] GetProcessHeap () returned 0x10a0000 [0174.878] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad208 [0174.878] GetProcessHeap () returned 0x10a0000 [0174.878] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad2a8 [0174.878] GetProcessHeap () returned 0x10a0000 [0174.878] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad118 [0174.878] GetProcessHeap () returned 0x10a0000 [0174.878] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad218 [0174.878] GetProcessHeap () returned 0x10a0000 [0174.878] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad128 [0174.878] GetProcessHeap () returned 0x10a0000 [0174.879] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad228 [0174.879] GetProcessHeap () returned 0x10a0000 [0174.879] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad238 [0174.879] GetProcessHeap () returned 0x10a0000 [0174.879] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad0e8 [0174.879] GetProcessHeap () returned 0x10a0000 [0174.879] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad418 [0174.879] GetProcessHeap () returned 0x10a0000 [0174.879] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad428 [0174.879] GetProcessHeap () returned 0x10a0000 [0174.879] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad2d8 [0174.879] GetProcessHeap () returned 0x10a0000 [0174.879] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad3f8 [0174.879] GetProcessHeap () returned 0x10a0000 [0174.880] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad368 [0174.880] GetProcessHeap () returned 0x10a0000 [0174.880] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad2f8 [0174.880] GetProcessHeap () returned 0x10a0000 [0174.880] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad458 [0174.880] GetProcessHeap () returned 0x10a0000 [0174.880] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad478 [0174.880] GetProcessHeap () returned 0x10a0000 [0174.880] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad398 [0174.880] GetProcessHeap () returned 0x10a0000 [0174.880] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad328 [0174.880] GetProcessHeap () returned 0x10a0000 [0174.881] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad2e8 [0174.881] GetProcessHeap () returned 0x10a0000 [0174.881] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad438 [0174.881] GetProcessHeap () returned 0x10a0000 [0174.881] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad3b8 [0174.881] GetProcessHeap () returned 0x10a0000 [0174.881] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad498 [0174.881] GetProcessHeap () returned 0x10a0000 [0174.881] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad3e8 [0174.881] GetProcessHeap () returned 0x10a0000 [0174.881] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad488 [0174.882] GetProcessHeap () returned 0x10a0000 [0174.882] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad3a8 [0174.882] GetProcessHeap () returned 0x10a0000 [0174.882] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad408 [0174.882] GetProcessHeap () returned 0x10a0000 [0174.882] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad448 [0174.882] GetProcessHeap () returned 0x10a0000 [0174.882] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad388 [0174.882] GetProcessHeap () returned 0x10a0000 [0174.882] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad338 [0174.883] GetProcessHeap () returned 0x10a0000 [0174.883] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad468 [0174.883] GetProcessHeap () returned 0x10a0000 [0174.883] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad318 [0174.883] GetProcessHeap () returned 0x10a0000 [0174.883] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad308 [0174.883] GetProcessHeap () returned 0x10a0000 [0174.883] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad348 [0174.883] GetProcessHeap () returned 0x10a0000 [0174.883] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad3c8 [0174.883] GetProcessHeap () returned 0x10a0000 [0174.884] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad378 [0174.884] GetProcessHeap () returned 0x10a0000 [0174.884] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad358 [0174.884] GetProcessHeap () returned 0x10a0000 [0174.884] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad3d8 [0174.884] GetProcessHeap () returned 0x10a0000 [0174.884] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad760 [0174.884] GetProcessHeap () returned 0x10a0000 [0174.884] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad860 [0174.885] GetProcessHeap () returned 0x10a0000 [0174.885] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad730 [0174.885] GetProcessHeap () returned 0x10a0000 [0174.885] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad7c0 [0174.885] GetProcessHeap () returned 0x10a0000 [0174.885] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad6e0 [0174.885] GetProcessHeap () returned 0x10a0000 [0174.885] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad7f0 [0174.885] GetProcessHeap () returned 0x10a0000 [0174.885] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad7d0 [0174.885] GetProcessHeap () returned 0x10a0000 [0174.886] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad700 [0174.886] GetProcessHeap () returned 0x10a0000 [0174.886] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad810 [0174.886] GetProcessHeap () returned 0x10a0000 [0174.886] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad710 [0174.886] GetProcessHeap () returned 0x10a0000 [0174.886] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad840 [0174.886] GetProcessHeap () returned 0x10a0000 [0174.886] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad720 [0174.886] GetProcessHeap () returned 0x10a0000 [0174.886] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad7e0 [0174.887] GetProcessHeap () returned 0x10a0000 [0174.887] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad800 [0174.887] GetProcessHeap () returned 0x10a0000 [0174.887] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad820 [0174.887] GetProcessHeap () returned 0x10a0000 [0174.887] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad830 [0174.887] GetProcessHeap () returned 0x10a0000 [0174.887] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad790 [0174.887] GetProcessHeap () returned 0x10a0000 [0174.887] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad850 [0174.887] GetProcessHeap () returned 0x10a0000 [0174.887] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad8a0 [0174.888] GetProcessHeap () returned 0x10a0000 [0174.888] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad750 [0174.888] GetProcessHeap () returned 0x10a0000 [0174.888] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad890 [0174.888] GetProcessHeap () returned 0x10a0000 [0174.888] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad6f0 [0174.888] GetProcessHeap () returned 0x10a0000 [0174.888] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad870 [0174.888] GetProcessHeap () returned 0x10a0000 [0174.888] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad880 [0174.888] GetProcessHeap () returned 0x10a0000 [0174.888] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad740 [0174.888] GetProcessHeap () returned 0x10a0000 [0174.889] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad770 [0174.889] GetProcessHeap () returned 0x10a0000 [0174.889] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad780 [0174.889] GetProcessHeap () returned 0x10a0000 [0174.889] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad7a0 [0174.889] GetProcessHeap () returned 0x10a0000 [0174.889] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad7b0 [0174.889] GetProcessHeap () returned 0x10a0000 [0174.889] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad670 [0174.889] GetProcessHeap () returned 0x10a0000 [0174.889] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad5f0 [0174.889] GetProcessHeap () returned 0x10a0000 [0174.889] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad640 [0174.890] GetProcessHeap () returned 0x10a0000 [0174.890] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad690 [0174.890] GetProcessHeap () returned 0x10a0000 [0174.890] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad660 [0174.890] GetProcessHeap () returned 0x10a0000 [0174.890] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad6a0 [0174.890] GetProcessHeap () returned 0x10a0000 [0174.890] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad680 [0174.890] GetProcessHeap () returned 0x10a0000 [0174.890] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad520 [0174.890] GetProcessHeap () returned 0x10a0000 [0174.890] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad5a0 [0174.890] GetProcessHeap () returned 0x10a0000 [0174.890] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad6b0 [0174.890] GetProcessHeap () returned 0x10a0000 [0174.890] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad530 [0174.890] GetProcessHeap () returned 0x10a0000 [0174.890] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad510 [0174.890] GetProcessHeap () returned 0x10a0000 [0174.891] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad560 [0174.891] GetProcessHeap () returned 0x10a0000 [0174.891] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad6c0 [0174.891] GetProcessHeap () returned 0x10a0000 [0174.891] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad5d0 [0174.891] GetProcessHeap () returned 0x10a0000 [0174.891] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad570 [0174.891] GetProcessHeap () returned 0x10a0000 [0174.891] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad6d0 [0174.891] GetProcessHeap () returned 0x10a0000 [0174.891] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad4e0 [0174.891] GetProcessHeap () returned 0x10a0000 [0174.891] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad540 [0174.891] GetProcessHeap () returned 0x10a0000 [0174.891] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad550 [0174.891] GetProcessHeap () returned 0x10a0000 [0174.891] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad650 [0174.891] GetProcessHeap () returned 0x10a0000 [0174.891] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad4f0 [0174.891] GetProcessHeap () returned 0x10a0000 [0174.891] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad580 [0174.891] GetProcessHeap () returned 0x10a0000 [0174.891] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad5b0 [0174.891] GetProcessHeap () returned 0x10a0000 [0174.891] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad500 [0174.892] GetProcessHeap () returned 0x10a0000 [0174.892] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad590 [0174.892] GetProcessHeap () returned 0x10a0000 [0174.892] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad5c0 [0174.892] GetProcessHeap () returned 0x10a0000 [0174.892] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad5e0 [0174.892] GetProcessHeap () returned 0x10a0000 [0174.894] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad600 [0174.894] GetProcessHeap () returned 0x10a0000 [0174.894] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad610 [0174.895] GetProcessHeap () returned 0x10a0000 [0174.895] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad620 [0174.895] GetProcessHeap () returned 0x10a0000 [0174.895] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad630 [0174.895] GetProcessHeap () returned 0x10a0000 [0174.895] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10adb48 [0174.895] GetProcessHeap () returned 0x10a0000 [0174.895] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10adc38 [0174.895] GetProcessHeap () returned 0x10a0000 [0174.895] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10adbb8 [0174.895] GetProcessHeap () returned 0x10a0000 [0174.895] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10adc08 [0174.895] GetProcessHeap () returned 0x10a0000 [0174.895] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10adbe8 [0174.895] GetProcessHeap () returned 0x10a0000 [0174.895] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10adb58 [0174.895] GetProcessHeap () returned 0x10a0000 [0174.895] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10adc48 [0174.895] GetProcessHeap () returned 0x10a0000 [0174.895] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10adc28 [0174.895] GetProcessHeap () returned 0x10a0000 [0174.895] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10adb98 [0174.895] GetProcessHeap () returned 0x10a0000 [0174.896] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10adbd8 [0174.896] GetProcessHeap () returned 0x10a0000 [0174.896] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10adbf8 [0174.896] GetProcessHeap () returned 0x10a0000 [0174.896] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10adaf8 [0174.896] GetProcessHeap () returned 0x10a0000 [0174.896] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10adbc8 [0174.896] GetProcessHeap () returned 0x10a0000 [0174.896] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10adc58 [0174.896] GetProcessHeap () returned 0x10a0000 [0174.896] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10adc18 [0174.896] GetProcessHeap () returned 0x10a0000 [0174.896] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10adc68 [0174.896] GetProcessHeap () returned 0x10a0000 [0174.896] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10adc88 [0174.896] GetProcessHeap () returned 0x10a0000 [0174.896] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10adc98 [0174.896] GetProcessHeap () returned 0x10a0000 [0174.896] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10adc78 [0174.896] GetProcessHeap () returned 0x10a0000 [0174.896] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10adb68 [0174.897] GetProcessHeap () returned 0x10a0000 [0174.897] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10adb78 [0174.897] _wcsicmp (_String1="netsh.exe", _String2="ipxmontr.dll") returned 5 [0174.897] _wcsicmp (_String1="netsh.exe", _String2="ipxpromn.dll") returned 5 [0174.897] GetProcessHeap () returned 0x10a0000 [0174.897] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x14) returned 0x10ab380 [0174.897] GetProcessHeap () returned 0x10a0000 [0174.897] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x2) returned 0x10adca8 [0174.897] GetProcessHeap () returned 0x10a0000 [0174.897] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x14) returned 0x10a4bc8 [0174.897] _wcsupr (in: _String="netsh.exe" | out: _String="NETSH.EXE") returned="NETSH.EXE" [0174.897] GetProcessHeap () returned 0x10a0000 [0174.898] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x0) returned 1 [0174.898] GetProcessHeap () returned 0x10a0000 [0174.898] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x48) returned 0x10a5008 [0174.898] GetProcessHeap () returned 0x10a0000 [0174.898] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x0) returned 1 [0174.898] GetProcessHeap () returned 0x10a0000 [0174.898] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x90) returned 0x10a4e30 [0174.899] GetProcessHeap () returned 0x10a0000 [0174.899] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10a5008) returned 1 [0174.899] LoadLibraryExW (lpLibFileName="api-ms-win-appmodel-runtime-l1-1-0.dll", hFile=0x0, dwFlags=0x8) returned 0x77380000 [0174.902] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\NetSh", ulOptions=0x0, samDesired=0x20019, phkResult=0xd67428 | out: phkResult=0xd67428*=0x10c) returned 0x0 [0174.903] RegQueryInfoKeyW (in: hKey=0x10c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0xd67424, lpcbMaxValueNameLen=0xd6741c, lpcbMaxValueLen=0xd67420, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0xd67424*=0x11, lpcbMaxValueNameLen=0xd6741c, lpcbMaxValueLen=0xd67420, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0174.903] GetProcessHeap () returned 0x10a0000 [0174.903] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x8, Size=0x16) returned 0x10a3930 [0174.903] GetProcessHeap () returned 0x10a0000 [0174.903] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x8, Size=0x23) returned 0x10a3950 [0174.903] RegEnumValueW (in: hKey=0x10c, dwIndex=0x0, lpValueName=0x10a3930, lpcchValueName=0xd67414, lpReserved=0x0, lpType=0x0, lpData=0x10a3950, lpcbData=0xd67418 | out: lpValueName="2", lpcchValueName=0xd67414, lpType=0x0, lpData=0x10a3950, lpcbData=0xd67418) returned 0x0 [0174.903] _wcsicmp (_String1="ifmon.dll", _String2="ipxmontr.dll") returned -10 [0174.903] _wcsicmp (_String1="ifmon.dll", _String2="ipxpromn.dll") returned -10 [0174.903] GetProcessHeap () returned 0x10a0000 [0174.904] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x28) returned 0x10a4000 [0174.904] GetProcessHeap () returned 0x10a0000 [0174.904] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x4) returned 0x10adae8 [0174.904] GetProcessHeap () returned 0x10a0000 [0174.904] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x14) returned 0x10ade68 [0174.904] _wcsupr (in: _String="ifmon.dll" | out: _String="IFMON.DLL") returned="IFMON.DLL" [0174.904] GetProcessHeap () returned 0x10a0000 [0174.905] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ab380) returned 1 [0174.905] LoadLibraryExW (lpLibFileName="IFMON.DLL", hFile=0x0, dwFlags=0x0) returned 0x73cf0000 [0174.927] GetProcAddress (hModule=0x73cf0000, lpProcName="InitHelperDll") returned 0x73cf1d30 [0174.927] InitHelperDll () returned 0x0 [0174.933] RegisterHelper () returned 0x0 [0174.933] GetProcessHeap () returned 0x10a0000 [0174.933] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0xd8) returned 0x10b46e0 [0174.933] GetProcessHeap () returned 0x10a0000 [0174.933] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10a4e30) returned 1 [0174.942] RegEnumValueW (in: hKey=0x10c, dwIndex=0x1, lpValueName=0x10a3930, lpcchValueName=0xd67414, lpReserved=0x0, lpType=0x0, lpData=0x10a3950, lpcbData=0xd67418 | out: lpValueName="4", lpcchValueName=0xd67414, lpType=0x0, lpData=0x10a3950, lpcbData=0xd67418) returned 0x0 [0174.942] _wcsicmp (_String1="rasmontr.dll", _String2="ipxmontr.dll") returned 9 [0174.942] _wcsicmp (_String1="rasmontr.dll", _String2="ipxpromn.dll") returned 9 [0174.942] GetProcessHeap () returned 0x10a0000 [0174.942] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x3c) returned 0x10a40e0 [0174.942] GetProcessHeap () returned 0x10a0000 [0174.942] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x4) returned 0x10ada48 [0174.942] GetProcessHeap () returned 0x10a0000 [0174.942] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x1a) returned 0x10a2f08 [0174.942] _wcsupr (in: _String="rasmontr.dll" | out: _String="RASMONTR.DLL") returned="RASMONTR.DLL" [0174.942] GetProcessHeap () returned 0x10a0000 [0174.942] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10a4000) returned 1 [0174.942] LoadLibraryExW (lpLibFileName="RASMONTR.DLL", hFile=0x0, dwFlags=0x0) returned 0x73bf0000 [0175.154] LoadLibraryExA (lpLibFileName="MSVCRT.DLL", hFile=0x0, dwFlags=0x800) returned 0x768a0000 [0175.155] GetVersion () returned 0x3ad7000a [0175.155] SetErrorMode (uMode=0x0) returned 0x0 [0175.155] SetErrorMode (uMode=0x8001) returned 0x0 [0175.156] LocalAlloc (uFlags=0x0, uBytes=0x2000) returned 0x10b8608 [0175.156] LocalFree (hMem=0x10b8608) returned 0x0 [0175.156] GetVersion () returned 0x3ad7000a [0175.159] GlobalLock (hMem=0xef0004) returned 0x10b8608 [0175.159] LocalAlloc (uFlags=0x40, uBytes=0x178) returned 0x10b8718 [0175.159] LocalAlloc (uFlags=0x40, uBytes=0x10) returned 0x10b5fd0 [0175.159] LocalAlloc (uFlags=0x0, uBytes=0x8) returned 0x10ad9c8 [0175.160] malloc (_Size=0x80) returned 0x1391088 [0175.160] __dllonexit () returned 0x739be510 [0175.160] __dllonexit () returned 0x739be4e0 [0175.161] __dllonexit () returned 0x739be4f0 [0175.161] __dllonexit () returned 0x739be500 [0175.161] __dllonexit () returned 0x739a2bd0 [0175.161] __dllonexit () returned 0x739a2bc0 [0175.162] __dllonexit () returned 0x739a2c00 [0175.162] __dllonexit () returned 0x739a2c40 [0175.162] __dllonexit () returned 0x739a2d10 [0175.163] __dllonexit () returned 0x739a2d20 [0175.163] __dllonexit () returned 0x739a2d70 [0175.163] __dllonexit () returned 0x739a2e20 [0175.163] __dllonexit () returned 0x739a2c60 [0175.163] __dllonexit () returned 0x739be560 [0175.164] __dllonexit () returned 0x739a2c80 [0175.164] __dllonexit () returned 0x739a2dd0 [0175.164] __dllonexit () returned 0x739a2df0 [0175.164] __dllonexit () returned 0x739a2e40 [0175.164] __dllonexit () returned 0x739a2e80 [0175.165] __dllonexit () returned 0x739a2e70 [0175.165] __dllonexit () returned 0x739a2ea0 [0175.165] __dllonexit () returned 0x739a2ec0 [0175.165] __dllonexit () returned 0x739a2ef0 [0175.165] __dllonexit () returned 0x739a2f70 [0175.166] __dllonexit () returned 0x739a2ae0 [0175.166] __dllonexit () returned 0x739a2af0 [0175.166] __dllonexit () returned 0x739a2ad0 [0175.171] RegisterClipboardFormatW (lpszFormat="commctrl_DragListMsg") returned 0xc199 [0175.172] __dllonexit () returned 0x739be540 [0175.172] __dllonexit () returned 0x739be520 [0175.172] __dllonexit () returned 0x739be550 [0175.173] __dllonexit () returned 0x739be530 [0175.173] GetVersion () returned 0x3ad7000a [0175.173] GetVersion () returned 0x3ad7000a [0175.173] GetVersion () returned 0x3ad7000a [0175.173] __dllonexit () returned 0x739b3c70 [0175.174] __dllonexit () returned 0x739b3c90 [0175.174] __dllonexit () returned 0x739a2ca0 [0175.174] __dllonexit () returned 0x739a2d30 [0175.174] __dllonexit () returned 0x739a2d40 [0175.174] __dllonexit () returned 0x739b3ae0 [0175.174] GetVersion () returned 0x3ad7000a [0175.175] GetProcessVersion (ProcessId=0x0) returned 0xa0000 [0175.175] GetSystemMetrics (nIndex=11) returned 32 [0175.175] GetSystemMetrics (nIndex=12) returned 32 [0175.175] GetSystemMetrics (nIndex=2) returned 17 [0175.175] GetSystemMetrics (nIndex=3) returned 17 [0175.175] GetDC (hWnd=0x0) returned 0x60100ce [0175.175] GetDeviceCaps (hdc=0x60100ce, index=88) returned 96 [0175.175] GetDeviceCaps (hdc=0x60100ce, index=90) returned 96 [0175.176] ReleaseDC (hWnd=0x0, hDC=0x60100ce) returned 1 [0175.176] GetSysColor (nIndex=15) returned 0xf0f0f0 [0175.176] GetSysColor (nIndex=16) returned 0xa0a0a0 [0175.176] GetSysColor (nIndex=20) returned 0xffffff [0175.176] GetSysColor (nIndex=18) returned 0x0 [0175.176] GetSysColor (nIndex=6) returned 0x646464 [0175.176] GetSysColorBrush (nIndex=15) returned 0x100072 [0175.176] GetSysColorBrush (nIndex=6) returned 0x10007a [0175.176] LoadCursorW (hInstance=0x0, lpCursorName=0x7f02) returned 0x10007 [0175.177] LoadCursorW (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0175.177] __dllonexit () returned 0x739a2da0 [0175.177] RegisterClipboardFormatW (lpszFormat="commdlg_FindReplace") returned 0xc198 [0175.177] __dllonexit () returned 0x739b3ad0 [0175.177] RegisterClipboardFormatW (lpszFormat="Native") returned 0xc004 [0175.177] RegisterClipboardFormatW (lpszFormat="OwnerLink") returned 0xc003 [0175.177] RegisterClipboardFormatW (lpszFormat="ObjectLink") returned 0xc002 [0175.178] RegisterClipboardFormatW (lpszFormat="Embedded Object") returned 0xc00a [0175.178] RegisterClipboardFormatW (lpszFormat="Embed Source") returned 0xc00b [0175.178] RegisterClipboardFormatW (lpszFormat="Link Source") returned 0xc00d [0175.178] RegisterClipboardFormatW (lpszFormat="Object Descriptor") returned 0xc00e [0175.178] RegisterClipboardFormatW (lpszFormat="Link Source Descriptor") returned 0xc00f [0175.178] RegisterClipboardFormatW (lpszFormat="FileName") returned 0xc006 [0175.178] RegisterClipboardFormatW (lpszFormat="FileNameW") returned 0xc007 [0175.178] RegisterClipboardFormatW (lpszFormat="Rich Text Format") returned 0xc0f5 [0175.178] RegisterClipboardFormatW (lpszFormat="RichEdit Text and Objects") returned 0xc0fe [0175.179] RegisterClipboardFormatW (lpszFormat="commdlg_FindReplace") returned 0xc198 [0175.179] __dllonexit () returned 0x739be570 [0175.179] __dllonexit () returned 0x739be590 [0175.179] __dllonexit () returned 0x739be5a0 [0175.180] __dllonexit () returned 0x739be5b0 [0175.180] __dllonexit () returned 0x739be5c0 [0175.181] GetCursorPos (in: lpPoint=0x73a8a298 | out: lpPoint=0x73a8a298*(x=1316, y=473)) returned 1 [0175.181] LocalAlloc (uFlags=0x40, uBytes=0x84) returned 0x10b8898 [0175.181] LocalReAlloc (hMem=0x10ad9c8, uBytes=0xc, uFlags=0x2) returned 0x10b8160 [0175.181] GetCurrentThread () returned 0xfffffffe [0175.181] GetCurrentThreadId () returned 0x102c [0175.183] __dllonexit () returned 0x739a2f80 [0175.185] SetErrorMode (uMode=0x0) returned 0x8001 [0175.185] SetErrorMode (uMode=0x8001) returned 0x0 [0175.218] GetModuleFileNameW (in: hModule=0x73980000, lpFilename=0xd66c20, nSize=0x104 | out: lpFilename="C:\\WINDOWS\\System32\\MFC42u.dll" (normalized: "c:\\windows\\system32\\mfc42u.dll")) returned 0x1e [0175.219] wcscpy_s (in: _Destination=0xd66a18, _SizeInWords=0x104, _Source="MFC42u" | out: _Destination="MFC42u") returned 0x0 [0175.219] FindResourceW (hModule=0x73980000, lpName=0xe01, lpType=0x6) returned 0x1080bb0 [0175.236] LoadStringW (in: hInstance=0x73980000, uID=0xe000, lpBuffer=0xd66818, cchBufferMax=256 | out: lpBuffer="") returned 0x0 [0175.236] wcscpy_s (in: _Destination=0xd66c54, _SizeInWords=0x5, _Source=".HLP" | out: _Destination=".HLP") returned 0x0 [0175.236] wcscat_s (in: _Destination="MFC42u", _SizeInWords=0x104, _Source=".INI" | out: _Destination="MFC42u.INI") returned 0x0 [0175.238] malloc (_Size=0x40) returned 0x1393918 [0175.238] LocalAlloc (uFlags=0x40, uBytes=0x2090) returned 0x10b8928 [0175.239] GetSystemDirectoryA (in: lpBuffer=0xd66e6c, uSize=0x112 | out: lpBuffer="C:\\WINDOWS\\system32") returned 0x13 [0175.239] strcat_s (in: _Destination="C:\\WINDOWS\\system32", _SizeInBytes=0x112, _Source="\\MFC42" | out: _Destination="C:\\WINDOWS\\system32\\MFC42") returned 0x0 [0175.239] strcat_s (in: _Destination="C:\\WINDOWS\\system32\\MFC42", _SizeInBytes=0x112, _Source="LOC" | out: _Destination="C:\\WINDOWS\\system32\\MFC42LOC") returned 0x0 [0175.239] strcat_s (in: _Destination="C:\\WINDOWS\\system32\\MFC42LOC", _SizeInBytes=0x112, _Source=".DLL" | out: _Destination="C:\\WINDOWS\\system32\\MFC42LOC.DLL") returned 0x0 [0175.239] LoadLibraryExA (lpLibFileName="C:\\WINDOWS\\system32\\MFC42LOC.DLL", hFile=0x0, dwFlags=0x2) returned 0x0 [0175.241] GetProcAddress (hModule=0x73bf0000, lpProcName="InitHelperDll") returned 0x73c14150 [0175.241] InitHelperDll () returned 0x0 [0175.242] RegisterHelper () returned 0x0 [0175.242] GetProcessHeap () returned 0x10a0000 [0175.242] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x120) returned 0x10b6370 [0175.242] GetProcessHeap () returned 0x10a0000 [0175.242] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10b46e0) returned 1 [0175.242] RegisterHelper () returned 0x0 [0175.243] GetProcessHeap () returned 0x10a0000 [0175.243] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x168) returned 0x10b59b8 [0175.243] GetProcessHeap () returned 0x10a0000 [0175.243] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10b6370) returned 1 [0175.243] RegisterHelper () returned 0x0 [0175.243] GetProcessHeap () returned 0x10a0000 [0175.243] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x1b0) returned 0x10b6ca0 [0175.244] GetProcessHeap () returned 0x10a0000 [0175.244] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10b59b8) returned 1 [0175.244] RegisterHelper () returned 0x0 [0175.244] GetProcessHeap () returned 0x10a0000 [0175.244] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x1f8) returned 0x10ba9c0 [0175.244] GetProcessHeap () returned 0x10a0000 [0175.244] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10b6ca0) returned 1 [0175.244] RegisterHelper () returned 0x0 [0175.244] GetProcessHeap () returned 0x10a0000 [0175.244] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x240) returned 0x10babc0 [0175.244] GetProcessHeap () returned 0x10a0000 [0175.245] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ba9c0) returned 1 [0175.245] RegEnumValueW (in: hKey=0x10c, dwIndex=0x2, lpValueName=0x10a3930, lpcchValueName=0xd67414, lpReserved=0x0, lpType=0x0, lpData=0x10a3950, lpcbData=0xd67418 | out: lpValueName="authfwcfg", lpcchValueName=0xd67414, lpType=0x0, lpData=0x10a3950, lpcbData=0xd67418) returned 0x0 [0175.245] _wcsicmp (_String1="authfwcfg.dll", _String2="ipxmontr.dll") returned -8 [0175.245] _wcsicmp (_String1="authfwcfg.dll", _String2="ipxpromn.dll") returned -8 [0175.245] GetProcessHeap () returned 0x10a0000 [0175.245] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x50) returned 0x10b60d8 [0175.245] GetProcessHeap () returned 0x10a0000 [0175.245] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x14) returned 0x10add68 [0175.245] GetProcessHeap () returned 0x10a0000 [0175.246] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x1c) returned 0x10a49d0 [0175.246] _wcsupr (in: _String="authfwcfg.dll" | out: _String="AUTHFWCFG.DLL") returned="AUTHFWCFG.DLL" [0175.246] GetProcessHeap () returned 0x10a0000 [0175.246] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10a40e0) returned 1 [0175.246] LoadLibraryExW (lpLibFileName="AUTHFWCFG.DLL", hFile=0x0, dwFlags=0x0) returned 0x73900000 [0175.313] GetProcAddress (hModule=0x73900000, lpProcName="InitHelperDll") returned 0x73903d00 [0175.313] InitHelperDll () returned 0x0 [0175.314] RegisterHelper () returned 0x0 [0175.314] GetProcessHeap () returned 0x10a0000 [0175.314] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x288) returned 0x10bde28 [0175.314] GetProcessHeap () returned 0x10a0000 [0175.315] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10babc0) returned 1 [0175.315] RegisterHelper () returned 0x0 [0175.315] GetProcessHeap () returned 0x10a0000 [0175.315] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x2d0) returned 0x10ba9c0 [0175.315] GetProcessHeap () returned 0x10a0000 [0175.315] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10bde28) returned 1 [0175.315] RegisterHelper () returned 0x0 [0175.315] GetProcessHeap () returned 0x10a0000 [0175.315] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x318) returned 0x10bde28 [0175.315] GetProcessHeap () returned 0x10a0000 [0175.315] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ba9c0) returned 1 [0175.315] RegisterHelper () returned 0x0 [0175.315] GetProcessHeap () returned 0x10a0000 [0175.315] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x360) returned 0x10ba9c0 [0175.315] GetProcessHeap () returned 0x10a0000 [0175.315] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10bde28) returned 1 [0175.315] RegisterHelper () returned 0x0 [0175.315] GetProcessHeap () returned 0x10a0000 [0175.315] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x3a8) returned 0x10bde28 [0175.315] GetProcessHeap () returned 0x10a0000 [0175.315] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ba9c0) returned 1 [0175.316] RegEnumValueW (in: hKey=0x10c, dwIndex=0x3, lpValueName=0x10a3930, lpcchValueName=0xd67414, lpReserved=0x0, lpType=0x0, lpData=0x10a3950, lpcbData=0xd67418 | out: lpValueName="dhcpclient", lpcchValueName=0xd67414, lpType=0x0, lpData=0x10a3950, lpcbData=0xd67418) returned 0x0 [0175.316] _wcsicmp (_String1="dhcpcmonitor.dll", _String2="ipxmontr.dll") returned -5 [0175.316] _wcsicmp (_String1="dhcpcmonitor.dll", _String2="ipxpromn.dll") returned -5 [0175.316] GetProcessHeap () returned 0x10a0000 [0175.316] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x64) returned 0x10b58e8 [0175.316] GetProcessHeap () returned 0x10a0000 [0175.316] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x16) returned 0x10adee8 [0175.316] GetProcessHeap () returned 0x10a0000 [0175.316] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x22) returned 0x10afd60 [0175.316] _wcsupr (in: _String="dhcpcmonitor.dll" | out: _String="DHCPCMONITOR.DLL") returned="DHCPCMONITOR.DLL" [0175.316] GetProcessHeap () returned 0x10a0000 [0175.316] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10b60d8) returned 1 [0175.316] LoadLibraryExW (lpLibFileName="DHCPCMONITOR.DLL", hFile=0x0, dwFlags=0x0) returned 0x73830000 [0175.353] GetProcAddress (hModule=0x73830000, lpProcName="InitHelperDll") returned 0x73831a70 [0175.353] InitHelperDll () returned 0x0 [0175.353] RegisterHelper () returned 0x0 [0175.353] GetProcessHeap () returned 0x10a0000 [0175.353] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x3f0) returned 0x10ba9c0 [0175.353] GetProcessHeap () returned 0x10a0000 [0175.353] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10bde28) returned 1 [0175.354] RegEnumValueW (in: hKey=0x10c, dwIndex=0x4, lpValueName=0x10a3930, lpcchValueName=0xd67414, lpReserved=0x0, lpType=0x0, lpData=0x10a3950, lpcbData=0xd67418 | out: lpValueName="dot3cfg", lpcchValueName=0xd67414, lpType=0x0, lpData=0x10a3950, lpcbData=0xd67418) returned 0x0 [0175.354] _wcsicmp (_String1="dot3cfg.dll", _String2="ipxmontr.dll") returned -5 [0175.354] _wcsicmp (_String1="dot3cfg.dll", _String2="ipxpromn.dll") returned -5 [0175.354] GetProcessHeap () returned 0x10a0000 [0175.354] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x78) returned 0x10a4e30 [0175.354] GetProcessHeap () returned 0x10a0000 [0175.354] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x10) returned 0x10bdac8 [0175.354] GetProcessHeap () returned 0x10a0000 [0175.354] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x18) returned 0x10add08 [0175.354] _wcsupr (in: _String="dot3cfg.dll" | out: _String="DOT3CFG.DLL") returned="DOT3CFG.DLL" [0175.354] GetProcessHeap () returned 0x10a0000 [0175.355] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10b58e8) returned 1 [0175.355] LoadLibraryExW (lpLibFileName="DOT3CFG.DLL", hFile=0x0, dwFlags=0x0) returned 0x737d0000 [0175.427] GetProcAddress (hModule=0x737d0000, lpProcName="InitHelperDll") returned 0x737d3ae0 [0175.427] InitHelperDll () returned 0x0 [0175.427] RegisterHelper () returned 0x0 [0175.427] GetProcessHeap () returned 0x10a0000 [0175.427] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x438) returned 0x10c09e8 [0175.427] GetProcessHeap () returned 0x10a0000 [0175.427] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ba9c0) returned 1 [0175.427] RegEnumValueW (in: hKey=0x10c, dwIndex=0x5, lpValueName=0x10a3930, lpcchValueName=0xd67414, lpReserved=0x0, lpType=0x0, lpData=0x10a3950, lpcbData=0xd67418 | out: lpValueName="fwcfg", lpcchValueName=0xd67414, lpType=0x0, lpData=0x10a3950, lpcbData=0xd67418) returned 0x0 [0175.427] _wcsicmp (_String1="fwcfg.dll", _String2="ipxmontr.dll") returned -3 [0175.428] _wcsicmp (_String1="fwcfg.dll", _String2="ipxpromn.dll") returned -3 [0175.428] GetProcessHeap () returned 0x10a0000 [0175.428] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8c) returned 0x10b5b70 [0175.428] GetProcessHeap () returned 0x10a0000 [0175.428] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0xc) returned 0x10bdbe8 [0175.428] GetProcessHeap () returned 0x10a0000 [0175.428] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x14) returned 0x10adfc8 [0175.428] _wcsupr (in: _String="fwcfg.dll" | out: _String="FWCFG.DLL") returned="FWCFG.DLL" [0175.429] GetProcessHeap () returned 0x10a0000 [0175.429] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10a4e30) returned 1 [0175.430] LoadLibraryExW (lpLibFileName="FWCFG.DLL", hFile=0x0, dwFlags=0x0) returned 0x73690000 [0175.436] GetProcAddress (hModule=0x73690000, lpProcName="InitHelperDll") returned 0x736922e0 [0175.437] InitHelperDll () returned 0x0 [0175.437] RegisterHelper () returned 0x0 [0175.437] GetProcessHeap () returned 0x10a0000 [0175.437] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x480) returned 0x10c0e28 [0175.437] GetProcessHeap () returned 0x10a0000 [0175.437] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10c09e8) returned 1 [0175.437] RegEnumValueW (in: hKey=0x10c, dwIndex=0x6, lpValueName=0x10a3930, lpcchValueName=0xd67414, lpReserved=0x0, lpType=0x0, lpData=0x10a3950, lpcbData=0xd67418 | out: lpValueName="hnetmon", lpcchValueName=0xd67414, lpType=0x0, lpData=0x10a3950, lpcbData=0xd67418) returned 0x0 [0175.437] _wcsicmp (_String1="hnetmon.dll", _String2="ipxmontr.dll") returned -1 [0175.437] _wcsicmp (_String1="hnetmon.dll", _String2="ipxpromn.dll") returned -1 [0175.437] GetProcessHeap () returned 0x10a0000 [0175.438] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0xa0) returned 0x10b63f0 [0175.438] GetProcessHeap () returned 0x10a0000 [0175.438] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x10) returned 0x10bdd68 [0175.438] GetProcessHeap () returned 0x10a0000 [0175.438] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x18) returned 0x10ae008 [0175.438] _wcsupr (in: _String="hnetmon.dll" | out: _String="HNETMON.DLL") returned="HNETMON.DLL" [0175.438] GetProcessHeap () returned 0x10a0000 [0175.438] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10b5b70) returned 1 [0175.438] LoadLibraryExW (lpLibFileName="HNETMON.DLL", hFile=0x0, dwFlags=0x0) returned 0x73680000 [0175.612] GetProcAddress (hModule=0x73680000, lpProcName="InitHelperDll") returned 0x736824a0 [0175.612] InitHelperDll () returned 0x0 [0175.612] RegisterHelper () returned 0x0 [0175.612] GetProcessHeap () returned 0x10a0000 [0175.612] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x4c8) returned 0x10c48f8 [0175.612] GetProcessHeap () returned 0x10a0000 [0175.612] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10c0e28) returned 1 [0175.612] RegEnumValueW (in: hKey=0x10c, dwIndex=0x7, lpValueName=0x10a3930, lpcchValueName=0xd67414, lpReserved=0x0, lpType=0x0, lpData=0x10a3950, lpcbData=0xd67418 | out: lpValueName="netiohlp", lpcchValueName=0xd67414, lpType=0x0, lpData=0x10a3950, lpcbData=0xd67418) returned 0x0 [0175.613] _wcsicmp (_String1="netiohlp.dll", _String2="ipxmontr.dll") returned 5 [0175.613] _wcsicmp (_String1="netiohlp.dll", _String2="ipxpromn.dll") returned 5 [0175.613] GetProcessHeap () returned 0x10a0000 [0175.613] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0xb4) returned 0x10ba9c0 [0175.613] GetProcessHeap () returned 0x10a0000 [0175.613] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x12) returned 0x10adf08 [0175.613] GetProcessHeap () returned 0x10a0000 [0175.613] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x1a) returned 0x10bd988 [0175.613] _wcsupr (in: _String="netiohlp.dll" | out: _String="NETIOHLP.DLL") returned="NETIOHLP.DLL" [0175.613] GetProcessHeap () returned 0x10a0000 [0175.613] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10b63f0) returned 1 [0175.613] LoadLibraryExW (lpLibFileName="NETIOHLP.DLL", hFile=0x0, dwFlags=0x0) returned 0x733a0000 [0175.654] GetProcAddress (hModule=0x733a0000, lpProcName="InitHelperDll") returned 0x733b6c00 [0175.654] InitHelperDll () returned 0x0 [0175.654] RegisterHelper () returned 0x0 [0175.654] GetProcessHeap () returned 0x10a0000 [0175.654] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x510) returned 0x10c5dd0 [0175.654] GetProcessHeap () returned 0x10a0000 [0175.655] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10c48f8) returned 1 [0175.655] RegisterHelper () returned 0x0 [0175.655] GetProcessHeap () returned 0x10a0000 [0175.655] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x558) returned 0x10c62e8 [0175.655] GetProcessHeap () returned 0x10a0000 [0175.655] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10c5dd0) returned 1 [0175.655] RegisterHelper () returned 0x0 [0175.655] GetProcessHeap () returned 0x10a0000 [0175.655] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x5a0) returned 0x10c6848 [0175.655] GetProcessHeap () returned 0x10a0000 [0175.655] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10c62e8) returned 1 [0175.655] RegisterHelper () returned 0x0 [0175.655] GetProcessHeap () returned 0x10a0000 [0175.655] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x5e8) returned 0x10c5dd0 [0175.655] GetProcessHeap () returned 0x10a0000 [0175.655] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10c6848) returned 1 [0175.655] RegisterHelper () returned 0x0 [0175.655] GetProcessHeap () returned 0x10a0000 [0175.655] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x630) returned 0x10c63c0 [0175.656] GetProcessHeap () returned 0x10a0000 [0175.656] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10c5dd0) returned 1 [0175.656] RegisterHelper () returned 0x0 [0175.656] GetProcessHeap () returned 0x10a0000 [0175.656] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x678) returned 0x10c69f8 [0175.656] GetProcessHeap () returned 0x10a0000 [0175.656] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10c63c0) returned 1 [0175.656] RegisterHelper () returned 0x0 [0175.656] GetProcessHeap () returned 0x10a0000 [0175.656] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x6c0) returned 0x10c5dd0 [0175.656] GetProcessHeap () returned 0x10a0000 [0175.656] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10c69f8) returned 1 [0175.656] RegisterHelper () returned 0x0 [0175.656] GetProcessHeap () returned 0x10a0000 [0175.656] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x708) returned 0x10c6498 [0175.656] GetProcessHeap () returned 0x10a0000 [0175.657] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10c5dd0) returned 1 [0175.657] RegisterHelper () returned 0x0 [0175.657] GetProcessHeap () returned 0x10a0000 [0175.657] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x750) returned 0x10c6ba8 [0175.657] GetProcessHeap () returned 0x10a0000 [0175.657] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10c6498) returned 1 [0175.657] RegEnumValueW (in: hKey=0x10c, dwIndex=0x8, lpValueName=0x10a3930, lpcchValueName=0xd67414, lpReserved=0x0, lpType=0x0, lpData=0x10a3950, lpcbData=0xd67418 | out: lpValueName="nshhttp", lpcchValueName=0xd67414, lpType=0x0, lpData=0x10a3950, lpcbData=0xd67418) returned 0x0 [0175.657] _wcsicmp (_String1="nshhttp.dll", _String2="ipxmontr.dll") returned 5 [0175.657] _wcsicmp (_String1="nshhttp.dll", _String2="ipxpromn.dll") returned 5 [0175.657] GetProcessHeap () returned 0x10a0000 [0175.657] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0xc8) returned 0x10be0b0 [0175.657] GetProcessHeap () returned 0x10a0000 [0175.657] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x10) returned 0x10c0aa8 [0175.657] GetProcessHeap () returned 0x10a0000 [0175.657] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x18) returned 0x10adde8 [0175.657] _wcsupr (in: _String="nshhttp.dll" | out: _String="NSHHTTP.DLL") returned="NSHHTTP.DLL" [0175.657] GetProcessHeap () returned 0x10a0000 [0175.657] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ba9c0) returned 1 [0175.657] LoadLibraryExW (lpLibFileName="NSHHTTP.DLL", hFile=0x0, dwFlags=0x0) returned 0x73300000 [0175.668] GetProcAddress (hModule=0x73300000, lpProcName="InitHelperDll") returned 0x73301c50 [0175.668] InitHelperDll () returned 0x0 [0175.668] RegisterHelper () returned 0x0 [0175.668] GetProcessHeap () returned 0x10a0000 [0175.669] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x798) returned 0x10c5dd0 [0175.669] GetProcessHeap () returned 0x10a0000 [0175.669] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10c6ba8) returned 1 [0175.669] RegEnumValueW (in: hKey=0x10c, dwIndex=0x9, lpValueName=0x10a3930, lpcchValueName=0xd67414, lpReserved=0x0, lpType=0x0, lpData=0x10a3950, lpcbData=0xd67418 | out: lpValueName="nshipsec", lpcchValueName=0xd67414, lpType=0x0, lpData=0x10a3950, lpcbData=0xd67418) returned 0x0 [0175.669] _wcsicmp (_String1="nshipsec.dll", _String2="ipxmontr.dll") returned 5 [0175.669] _wcsicmp (_String1="nshipsec.dll", _String2="ipxpromn.dll") returned 5 [0175.669] GetProcessHeap () returned 0x10a0000 [0175.669] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0xdc) returned 0x10ba9c0 [0175.669] GetProcessHeap () returned 0x10a0000 [0175.669] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x12) returned 0x10ae088 [0175.669] GetProcessHeap () returned 0x10a0000 [0175.669] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x1a) returned 0x10bd708 [0175.670] _wcsupr (in: _String="nshipsec.dll" | out: _String="NSHIPSEC.DLL") returned="NSHIPSEC.DLL" [0175.670] GetProcessHeap () returned 0x10a0000 [0175.670] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10be0b0) returned 1 [0175.670] LoadLibraryExW (lpLibFileName="NSHIPSEC.DLL", hFile=0x0, dwFlags=0x0) returned 0x73280000 [0175.826] GetProcAddress (hModule=0x73280000, lpProcName="InitHelperDll") returned 0x73283990 [0175.826] InitHelperDll () returned 0x0 [0175.826] RegisterHelper () returned 0x0 [0175.826] GetProcessHeap () returned 0x10a0000 [0175.826] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x7e0) returned 0x10c8308 [0175.826] GetProcessHeap () returned 0x10a0000 [0175.826] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10c5dd0) returned 1 [0175.826] RegisterHelper () returned 0x0 [0175.826] GetProcessHeap () returned 0x10a0000 [0175.826] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x828) returned 0x10c8af0 [0175.826] GetProcessHeap () returned 0x10a0000 [0175.827] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10c8308) returned 1 [0175.827] RegisterHelper () returned 0x0 [0175.827] GetProcessHeap () returned 0x10a0000 [0175.827] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x870) returned 0x10c9320 [0175.827] GetProcessHeap () returned 0x10a0000 [0175.829] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10c8af0) returned 1 [0175.838] RegEnumValueW (in: hKey=0x10c, dwIndex=0xa, lpValueName=0x10a3930, lpcchValueName=0xd67414, lpReserved=0x0, lpType=0x0, lpData=0x10a3950, lpcbData=0xd67418 | out: lpValueName="nshwfp", lpcchValueName=0xd67414, lpType=0x0, lpData=0x10a3950, lpcbData=0xd67418) returned 0x0 [0175.838] _wcsicmp (_String1="nshwfp.dll", _String2="ipxmontr.dll") returned 5 [0175.838] _wcsicmp (_String1="nshwfp.dll", _String2="ipxpromn.dll") returned 5 [0175.838] GetProcessHeap () returned 0x10a0000 [0175.838] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0xf0) returned 0x10c9da0 [0175.838] GetProcessHeap () returned 0x10a0000 [0175.838] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0xe) returned 0x10c4b80 [0175.838] GetProcessHeap () returned 0x10a0000 [0175.838] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x16) returned 0x10ae048 [0175.838] _wcsupr (in: _String="nshwfp.dll" | out: _String="NSHWFP.DLL") returned="NSHWFP.DLL" [0175.838] GetProcessHeap () returned 0x10a0000 [0175.838] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ba9c0) returned 1 [0175.838] LoadLibraryExW (lpLibFileName="NSHWFP.DLL", hFile=0x0, dwFlags=0x0) returned 0x730c0000 [0175.886] GetProcAddress (hModule=0x730c0000, lpProcName="InitHelperDll") returned 0x73116ab0 [0175.886] InitHelperDll () returned 0x0 [0175.886] RegisterHelper () returned 0x0 [0175.886] GetProcessHeap () returned 0x10a0000 [0175.886] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8b8) returned 0x10caf30 [0175.886] GetProcessHeap () returned 0x10a0000 [0175.886] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10c9320) returned 1 [0175.886] RegEnumValueW (in: hKey=0x10c, dwIndex=0xb, lpValueName=0x10a3930, lpcchValueName=0xd67414, lpReserved=0x0, lpType=0x0, lpData=0x10a3950, lpcbData=0xd67418 | out: lpValueName="p2pnetsh", lpcchValueName=0xd67414, lpType=0x0, lpData=0x10a3950, lpcbData=0xd67418) returned 0x0 [0175.886] _wcsicmp (_String1="p2pnetsh.dll", _String2="ipxmontr.dll") returned 7 [0175.887] _wcsicmp (_String1="p2pnetsh.dll", _String2="ipxpromn.dll") returned 7 [0175.887] GetProcessHeap () returned 0x10a0000 [0175.887] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x104) returned 0x10c6e00 [0175.887] GetProcessHeap () returned 0x10a0000 [0175.887] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x12) returned 0x10ade08 [0175.887] GetProcessHeap () returned 0x10a0000 [0175.887] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x1a) returned 0x10bd910 [0175.887] _wcsupr (in: _String="p2pnetsh.dll" | out: _String="P2PNETSH.DLL") returned="P2PNETSH.DLL" [0175.887] GetProcessHeap () returned 0x10a0000 [0175.887] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10c9da0) returned 1 [0175.887] LoadLibraryExW (lpLibFileName="P2PNETSH.DLL", hFile=0x0, dwFlags=0x0) returned 0x73070000 [0175.909] GetProcAddress (hModule=0x73070000, lpProcName="InitHelperDll") returned 0x73075910 [0175.909] InitHelperDll () returned 0x0 [0175.909] RegisterHelper () returned 0x0 [0175.909] GetProcessHeap () returned 0x10a0000 [0175.909] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x900) returned 0x10c8b10 [0175.909] GetProcessHeap () returned 0x10a0000 [0175.909] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10caf30) returned 1 [0175.909] RegisterHelper () returned 0x0 [0175.910] GetProcessHeap () returned 0x10a0000 [0175.910] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x948) returned 0x10cd7f8 [0175.910] GetProcessHeap () returned 0x10a0000 [0175.910] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10c8b10) returned 1 [0175.910] RegisterHelper () returned 0x0 [0175.910] GetProcessHeap () returned 0x10a0000 [0175.910] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x990) returned 0x10ce148 [0175.910] GetProcessHeap () returned 0x10a0000 [0175.910] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10cd7f8) returned 1 [0175.910] RegisterHelper () returned 0x0 [0175.910] GetProcessHeap () returned 0x10a0000 [0175.910] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x9d8) returned 0x10c8b10 [0175.910] GetProcessHeap () returned 0x10a0000 [0175.911] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ce148) returned 1 [0175.914] RegisterHelper () returned 0x0 [0175.914] GetProcessHeap () returned 0x10a0000 [0175.914] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0xa20) returned 0x10cd7f8 [0175.915] GetProcessHeap () returned 0x10a0000 [0175.915] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10c8b10) returned 1 [0175.915] RegisterHelper () returned 0x0 [0175.915] GetProcessHeap () returned 0x10a0000 [0175.915] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0xa68) returned 0x10ce220 [0175.915] GetProcessHeap () returned 0x10a0000 [0175.915] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10cd7f8) returned 1 [0175.915] RegisterHelper () returned 0x0 [0175.915] GetProcessHeap () returned 0x10a0000 [0175.915] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0xab0) returned 0x10c8b10 [0175.915] GetProcessHeap () returned 0x10a0000 [0175.916] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ce220) returned 1 [0175.918] RegisterHelper () returned 0x0 [0175.919] GetProcessHeap () returned 0x10a0000 [0175.919] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0xaf8) returned 0x10cd7f8 [0175.919] GetProcessHeap () returned 0x10a0000 [0175.919] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10c8b10) returned 1 [0175.919] RegEnumValueW (in: hKey=0x10c, dwIndex=0xc, lpValueName=0x10a3930, lpcchValueName=0xd67414, lpReserved=0x0, lpType=0x0, lpData=0x10a3950, lpcbData=0xd67418 | out: lpValueName="rpc", lpcchValueName=0xd67414, lpType=0x0, lpData=0x10a3950, lpcbData=0xd67418) returned 0x0 [0175.919] _wcsicmp (_String1="rpcnsh.dll", _String2="ipxmontr.dll") returned 9 [0175.919] _wcsicmp (_String1="rpcnsh.dll", _String2="ipxpromn.dll") returned 9 [0175.919] GetProcessHeap () returned 0x10a0000 [0175.919] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x118) returned 0x10c6f10 [0175.919] GetProcessHeap () returned 0x10a0000 [0175.920] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad998 [0175.920] GetProcessHeap () returned 0x10a0000 [0175.920] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x16) returned 0x10addc8 [0175.920] _wcsupr (in: _String="rpcnsh.dll" | out: _String="RPCNSH.DLL") returned="RPCNSH.DLL" [0175.920] GetProcessHeap () returned 0x10a0000 [0175.920] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10c6e00) returned 1 [0175.920] LoadLibraryExW (lpLibFileName="RPCNSH.DLL", hFile=0x0, dwFlags=0x0) returned 0x73030000 [0175.929] GetProcAddress (hModule=0x73030000, lpProcName="InitHelperDll") returned 0x73032ae0 [0175.929] InitHelperDll () returned 0x0 [0175.929] RegisterHelper () returned 0x0 [0175.929] GetProcessHeap () returned 0x10a0000 [0175.929] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0xb40) returned 0x10ce2f8 [0175.929] GetProcessHeap () returned 0x10a0000 [0175.929] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10cd7f8) returned 1 [0175.930] RegisterHelper () returned 0x0 [0175.930] GetProcessHeap () returned 0x10a0000 [0175.930] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0xb88) returned 0x10c8b10 [0175.930] GetProcessHeap () returned 0x10a0000 [0175.930] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ce2f8) returned 1 [0175.930] RegEnumValueW (in: hKey=0x10c, dwIndex=0xd, lpValueName=0x10a3930, lpcchValueName=0xd67414, lpReserved=0x0, lpType=0x0, lpData=0x10a3950, lpcbData=0xd67418 | out: lpValueName="whhelper", lpcchValueName=0xd67414, lpType=0x0, lpData=0x10a3950, lpcbData=0xd67418) returned 0x0 [0175.930] _wcsicmp (_String1="whhelper.dll", _String2="ipxmontr.dll") returned 14 [0175.930] _wcsicmp (_String1="whhelper.dll", _String2="ipxpromn.dll") returned 14 [0175.931] GetProcessHeap () returned 0x10a0000 [0175.931] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x12c) returned 0x10c7030 [0175.931] GetProcessHeap () returned 0x10a0000 [0175.931] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x12) returned 0x10adfa8 [0175.931] GetProcessHeap () returned 0x10a0000 [0175.931] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x1a) returned 0x10c8720 [0175.931] _wcsupr (in: _String="whhelper.dll" | out: _String="WHHELPER.DLL") returned="WHHELPER.DLL" [0175.931] GetProcessHeap () returned 0x10a0000 [0175.932] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10c6f10) returned 1 [0175.932] LoadLibraryExW (lpLibFileName="WHHELPER.DLL", hFile=0x0, dwFlags=0x0) returned 0x73020000 [0175.955] GetProcAddress (hModule=0x73020000, lpProcName="InitHelperDll") returned 0x730218d0 [0175.956] InitHelperDll () returned 0x0 [0175.956] RegisterHelper () returned 0x0 [0175.956] GetProcessHeap () returned 0x10a0000 [0175.956] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0xbd0) returned 0x10cd7f8 [0175.956] GetProcessHeap () returned 0x10a0000 [0175.956] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10c8b10) returned 1 [0175.956] RegEnumValueW (in: hKey=0x10c, dwIndex=0xe, lpValueName=0x10a3930, lpcchValueName=0xd67414, lpReserved=0x0, lpType=0x0, lpData=0x10a3950, lpcbData=0xd67418 | out: lpValueName="wlancfg", lpcchValueName=0xd67414, lpType=0x0, lpData=0x10a3950, lpcbData=0xd67418) returned 0x0 [0175.956] _wcsicmp (_String1="wlancfg.dll", _String2="ipxmontr.dll") returned 14 [0175.956] _wcsicmp (_String1="wlancfg.dll", _String2="ipxpromn.dll") returned 14 [0175.956] GetProcessHeap () returned 0x10a0000 [0175.957] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x140) returned 0x10c7168 [0175.957] GetProcessHeap () returned 0x10a0000 [0175.957] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x10) returned 0x10c4b68 [0175.957] GetProcessHeap () returned 0x10a0000 [0175.957] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x18) returned 0x10ade28 [0175.957] _wcsupr (in: _String="wlancfg.dll" | out: _String="WLANCFG.DLL") returned="WLANCFG.DLL" [0175.957] GetProcessHeap () returned 0x10a0000 [0175.957] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10c7030) returned 1 [0175.957] LoadLibraryExW (lpLibFileName="WLANCFG.DLL", hFile=0x0, dwFlags=0x0) returned 0x72f30000 [0176.039] GetProcAddress (hModule=0x72f30000, lpProcName="InitHelperDll") returned 0x72f3abb0 [0176.040] InitHelperDll () returned 0x0 [0176.040] RegisterHelper () returned 0x0 [0176.040] GetProcessHeap () returned 0x10a0000 [0176.040] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0xc18) returned 0x10d03d8 [0176.040] GetProcessHeap () returned 0x10a0000 [0176.040] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10cd7f8) returned 1 [0176.040] RegEnumValueW (in: hKey=0x10c, dwIndex=0xf, lpValueName=0x10a3930, lpcchValueName=0xd67414, lpReserved=0x0, lpType=0x0, lpData=0x10a3950, lpcbData=0xd67418 | out: lpValueName="wshelper", lpcchValueName=0xd67414, lpType=0x0, lpData=0x10a3950, lpcbData=0xd67418) returned 0x0 [0176.041] _wcsicmp (_String1="wshelper.dll", _String2="ipxmontr.dll") returned 14 [0176.041] _wcsicmp (_String1="wshelper.dll", _String2="ipxpromn.dll") returned 14 [0176.041] GetProcessHeap () returned 0x10a0000 [0176.041] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x154) returned 0x10c6ee0 [0176.041] GetProcessHeap () returned 0x10a0000 [0176.041] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x12) returned 0x10cdd08 [0176.041] GetProcessHeap () returned 0x10a0000 [0176.041] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x1a) returned 0x10c8568 [0176.042] _wcsupr (in: _String="wshelper.dll" | out: _String="WSHELPER.DLL") returned="WSHELPER.DLL" [0176.042] GetProcessHeap () returned 0x10a0000 [0176.042] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10c7168) returned 1 [0176.042] LoadLibraryExW (lpLibFileName="WSHELPER.DLL", hFile=0x0, dwFlags=0x0) returned 0x72d20000 [0176.059] GetProcAddress (hModule=0x72d20000, lpProcName="InitHelperDll") returned 0x72d21720 [0176.059] InitHelperDll () returned 0x0 [0176.059] RegisterHelper () returned 0x0 [0176.059] GetProcessHeap () returned 0x10a0000 [0176.059] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0xc60) returned 0x10d2810 [0176.059] GetProcessHeap () returned 0x10a0000 [0176.059] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10d03d8) returned 1 [0176.059] RegEnumValueW (in: hKey=0x10c, dwIndex=0x10, lpValueName=0x10a3930, lpcchValueName=0xd67414, lpReserved=0x0, lpType=0x0, lpData=0x10a3950, lpcbData=0xd67418 | out: lpValueName="peerdistsh", lpcchValueName=0xd67414, lpType=0x0, lpData=0x10a3950, lpcbData=0xd67418) returned 0x0 [0176.060] _wcsicmp (_String1="peerdistsh.dll", _String2="ipxmontr.dll") returned 7 [0176.060] _wcsicmp (_String1="peerdistsh.dll", _String2="ipxpromn.dll") returned 7 [0176.060] GetProcessHeap () returned 0x10a0000 [0176.060] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x168) returned 0x10c63a8 [0176.060] GetProcessHeap () returned 0x10a0000 [0176.060] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x16) returned 0x10cdb88 [0176.060] GetProcessHeap () returned 0x10a0000 [0176.060] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x1e) returned 0x10c83d8 [0176.060] _wcsupr (in: _String="peerdistsh.dll" | out: _String="PEERDISTSH.DLL") returned="PEERDISTSH.DLL" [0176.060] GetProcessHeap () returned 0x10a0000 [0176.060] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10c6ee0) returned 1 [0176.060] LoadLibraryExW (lpLibFileName="PEERDISTSH.DLL", hFile=0x0, dwFlags=0x0) returned 0x72c70000 [0176.071] GetProcAddress (hModule=0x72c70000, lpProcName="InitHelperDll") returned 0x72c8d390 [0176.071] InitHelperDll () returned 0x0 [0176.072] RegisterHelper () returned 0x0 [0176.072] GetProcessHeap () returned 0x10a0000 [0176.072] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0xca8) returned 0x10d3478 [0176.072] GetProcessHeap () returned 0x10a0000 [0176.073] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10d2810) returned 1 [0176.073] RegisterHelper () returned 0x0 [0176.073] GetProcessHeap () returned 0x10a0000 [0176.073] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0xcf0) returned 0x10d4128 [0176.073] GetProcessHeap () returned 0x10a0000 [0176.073] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10d3478) returned 1 [0176.073] RegCloseKey (hKey=0x10c) returned 0x0 [0176.073] GetProcessHeap () returned 0x10a0000 [0176.074] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10a3930) returned 1 [0176.074] GetProcessHeap () returned 0x10a0000 [0176.074] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10a3950) returned 1 [0176.076] GetProcessHeap () returned 0x10a0000 [0176.076] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x48) returned 0x10b75d0 [0176.077] GetProcessHeap () returned 0x10a0000 [0176.077] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x0) returned 1 [0176.077] RegisterContext () returned 0x0 [0176.079] GetProcessHeap () returned 0x10a0000 [0176.079] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x48) returned 0x10b74e0 [0176.079] GetProcessHeap () returned 0x10a0000 [0176.079] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x0) returned 1 [0176.080] RegisterContext () returned 0x0 [0176.084] _wcsicmp (_String1="ras", _String2="interface") returned 9 [0176.084] _wcsicmp (_String1="ras", _String2="interface") returned 9 [0176.084] GetProcessHeap () returned 0x10a0000 [0176.084] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x90) returned 0x10c6ee0 [0176.084] GetProcessHeap () returned 0x10a0000 [0176.084] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10b74e0) returned 1 [0176.178] RegisterContext () returned 0x0 [0176.181] GetProcessHeap () returned 0x10a0000 [0176.181] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x48) returned 0x10b74e0 [0176.181] GetProcessHeap () returned 0x10a0000 [0176.181] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x0) returned 1 [0176.181] RegisterContext () returned 0x0 [0176.182] _wcsicmp (_String1="ipv6", _String2="ip") returned 118 [0176.182] _wcsicmp (_String1="ipv6", _String2="ip") returned 118 [0176.182] GetProcessHeap () returned 0x10a0000 [0176.182] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x90) returned 0x10c7210 [0176.182] GetProcessHeap () returned 0x10a0000 [0176.182] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10b74e0) returned 1 [0176.182] RegisterContext () returned 0x0 [0176.185] _wcsicmp (_String1="aaaa", _String2="ip") returned -8 [0176.185] _wcsicmp (_String1="aaaa", _String2="ipv6") returned -8 [0176.185] _wcsicmp (_String1="aaaa", _String2="ip") returned -8 [0176.185] GetProcessHeap () returned 0x10a0000 [0176.185] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0xd8) returned 0x10c6f78 [0176.185] GetProcessHeap () returned 0x10a0000 [0176.185] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10c7210) returned 1 [0176.186] RegisterContext () returned 0x0 [0176.192] _wcsicmp (_String1="diagnostics", _String2="aaaa") returned 3 [0176.192] _wcsicmp (_String1="diagnostics", _String2="ip") returned -5 [0176.192] _wcsicmp (_String1="diagnostics", _String2="ipv6") returned -5 [0176.192] _wcsicmp (_String1="diagnostics", _String2="aaaa") returned 3 [0176.192] _wcsicmp (_String1="diagnostics", _String2="ip") returned -5 [0176.192] GetProcessHeap () returned 0x10a0000 [0176.192] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x120) returned 0x10d8908 [0176.192] GetProcessHeap () returned 0x10a0000 [0176.192] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10c6f78) returned 1 [0176.193] RegisterContext () returned 0x0 [0176.193] _wcsicmp (_String1="advfirewall", _String2="interface") returned -8 [0176.193] _wcsicmp (_String1="advfirewall", _String2="ras") returned -17 [0176.193] _wcsicmp (_String1="advfirewall", _String2="interface") returned -8 [0176.193] GetProcessHeap () returned 0x10a0000 [0176.193] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0xd8) returned 0x10c7210 [0176.193] GetProcessHeap () returned 0x10a0000 [0176.193] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10c6ee0) returned 1 [0176.193] RegisterContext () returned 0x0 [0176.193] GetProcessHeap () returned 0x10a0000 [0176.193] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x48) returned 0x10b74e0 [0176.194] GetProcessHeap () returned 0x10a0000 [0176.194] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x0) returned 1 [0176.194] RegisterContext () returned 0x0 [0176.194] _wcsicmp (_String1="firewall", _String2="consec") returned 3 [0176.194] _wcsicmp (_String1="firewall", _String2="consec") returned 3 [0176.194] GetProcessHeap () returned 0x10a0000 [0176.194] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x90) returned 0x10c6ee0 [0176.194] GetProcessHeap () returned 0x10a0000 [0176.194] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10b74e0) returned 1 [0176.195] RegisterContext () returned 0x0 [0176.195] _wcsicmp (_String1="monitor", _String2="consec") returned 10 [0176.195] _wcsicmp (_String1="monitor", _String2="firewall") returned 7 [0176.195] _wcsicmp (_String1="monitor", _String2="consec") returned 10 [0176.195] _wcsicmp (_String1="monitor", _String2="firewall") returned 7 [0176.195] GetProcessHeap () returned 0x10a0000 [0176.195] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0xd8) returned 0x10c6f78 [0176.195] GetProcessHeap () returned 0x10a0000 [0176.195] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10c6ee0) returned 1 [0176.196] RegisterContext () returned 0x0 [0176.196] _wcsicmp (_String1="mainmode", _String2="consec") returned 10 [0176.196] _wcsicmp (_String1="mainmode", _String2="firewall") returned 7 [0176.196] _wcsicmp (_String1="mainmode", _String2="monitor") returned -14 [0176.196] _wcsicmp (_String1="mainmode", _String2="consec") returned 10 [0176.196] _wcsicmp (_String1="mainmode", _String2="firewall") returned 7 [0176.196] _wcsicmp (_String1="mainmode", _String2="monitor") returned -14 [0176.196] GetProcessHeap () returned 0x10a0000 [0176.196] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x120) returned 0x10d8a30 [0176.196] GetProcessHeap () returned 0x10a0000 [0176.197] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10c6f78) returned 1 [0176.197] RegisterContext () returned 0x0 [0176.197] _wcsicmp (_String1="dhcpclient", _String2="advfirewall") returned 3 [0176.197] _wcsicmp (_String1="dhcpclient", _String2="interface") returned -5 [0176.197] _wcsicmp (_String1="dhcpclient", _String2="ras") returned -14 [0176.197] _wcsicmp (_String1="dhcpclient", _String2="advfirewall") returned 3 [0176.197] _wcsicmp (_String1="dhcpclient", _String2="interface") returned -5 [0176.197] GetProcessHeap () returned 0x10a0000 [0176.197] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x120) returned 0x10c6ee0 [0176.197] GetProcessHeap () returned 0x10a0000 [0176.198] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10c7210) returned 1 [0176.198] RegisterContext () returned 0x0 [0176.198] _wcsicmp (_String1="lan", _String2="advfirewall") returned 11 [0176.198] _wcsicmp (_String1="lan", _String2="dhcpclient") returned 8 [0176.198] _wcsicmp (_String1="lan", _String2="interface") returned 3 [0176.198] _wcsicmp (_String1="lan", _String2="ras") returned -6 [0176.198] _wcsicmp (_String1="lan", _String2="advfirewall") returned 11 [0176.198] _wcsicmp (_String1="lan", _String2="dhcpclient") returned 8 [0176.198] _wcsicmp (_String1="lan", _String2="interface") returned 3 [0176.198] _wcsicmp (_String1="lan", _String2="ras") returned -6 [0176.198] GetProcessHeap () returned 0x10a0000 [0176.198] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x168) returned 0x10d8b58 [0176.198] GetProcessHeap () returned 0x10a0000 [0176.199] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10c6ee0) returned 1 [0176.200] RegisterContext () returned 0x0 [0176.200] _wcsicmp (_String1="firewall", _String2="advfirewall") returned 5 [0176.201] _wcsicmp (_String1="firewall", _String2="dhcpclient") returned 2 [0176.201] _wcsicmp (_String1="firewall", _String2="interface") returned -3 [0176.201] _wcsicmp (_String1="firewall", _String2="lan") returned -6 [0176.201] _wcsicmp (_String1="firewall", _String2="ras") returned -12 [0176.201] _wcsicmp (_String1="firewall", _String2="advfirewall") returned 5 [0176.201] _wcsicmp (_String1="firewall", _String2="dhcpclient") returned 2 [0176.201] _wcsicmp (_String1="firewall", _String2="interface") returned -3 [0176.201] GetProcessHeap () returned 0x10a0000 [0176.201] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x1b0) returned 0x10d8cc8 [0176.201] GetProcessHeap () returned 0x10a0000 [0176.201] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10d8b58) returned 1 [0176.201] RegisterContext () returned 0x0 [0176.202] _wcsicmp (_String1="bridge", _String2="advfirewall") returned 1 [0176.202] _wcsicmp (_String1="bridge", _String2="dhcpclient") returned -2 [0176.202] _wcsicmp (_String1="bridge", _String2="firewall") returned -4 [0176.202] _wcsicmp (_String1="bridge", _String2="interface") returned -7 [0176.202] _wcsicmp (_String1="bridge", _String2="lan") returned -10 [0176.202] _wcsicmp (_String1="bridge", _String2="ras") returned -16 [0176.202] _wcsicmp (_String1="bridge", _String2="advfirewall") returned 1 [0176.202] _wcsicmp (_String1="bridge", _String2="dhcpclient") returned -2 [0176.202] GetProcessHeap () returned 0x10a0000 [0176.202] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x1f8) returned 0x10d03d8 [0176.203] GetProcessHeap () returned 0x10a0000 [0176.203] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10d8cc8) returned 1 [0176.203] RegisterContext () returned 0x0 [0176.203] _wcsicmp (_String1="netio", _String2="advfirewall") returned 13 [0176.203] _wcsicmp (_String1="netio", _String2="bridge") returned 12 [0176.203] _wcsicmp (_String1="netio", _String2="dhcpclient") returned 10 [0176.203] _wcsicmp (_String1="netio", _String2="firewall") returned 8 [0176.203] _wcsicmp (_String1="netio", _String2="interface") returned 5 [0176.203] _wcsicmp (_String1="netio", _String2="lan") returned 2 [0176.203] _wcsicmp (_String1="netio", _String2="ras") returned -4 [0176.203] _wcsicmp (_String1="netio", _String2="advfirewall") returned 13 [0176.204] _wcsicmp (_String1="netio", _String2="bridge") returned 12 [0176.204] _wcsicmp (_String1="netio", _String2="dhcpclient") returned 10 [0176.204] _wcsicmp (_String1="netio", _String2="firewall") returned 8 [0176.204] _wcsicmp (_String1="netio", _String2="interface") returned 5 [0176.204] _wcsicmp (_String1="netio", _String2="lan") returned 2 [0176.204] _wcsicmp (_String1="netio", _String2="ras") returned -4 [0176.204] GetProcessHeap () returned 0x10a0000 [0176.204] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x240) returned 0x10d8b58 [0176.204] GetProcessHeap () returned 0x10a0000 [0176.204] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10d03d8) returned 1 [0176.204] RegisterContext () returned 0x0 [0176.204] _wcsicmp (_String1="dnsclient", _String2="advfirewall") returned 3 [0176.204] _wcsicmp (_String1="dnsclient", _String2="bridge") returned 2 [0176.204] _wcsicmp (_String1="dnsclient", _String2="dhcpclient") returned 6 [0176.205] _wcsicmp (_String1="dnsclient", _String2="firewall") returned -2 [0176.205] _wcsicmp (_String1="dnsclient", _String2="interface") returned -5 [0176.205] _wcsicmp (_String1="dnsclient", _String2="lan") returned -8 [0176.205] _wcsicmp (_String1="dnsclient", _String2="netio") returned -10 [0176.205] _wcsicmp (_String1="dnsclient", _String2="ras") returned -14 [0176.205] _wcsicmp (_String1="dnsclient", _String2="advfirewall") returned 3 [0176.205] _wcsicmp (_String1="dnsclient", _String2="bridge") returned 2 [0176.205] _wcsicmp (_String1="dnsclient", _String2="dhcpclient") returned 6 [0176.205] _wcsicmp (_String1="dnsclient", _String2="firewall") returned -2 [0176.205] GetProcessHeap () returned 0x10a0000 [0176.205] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x288) returned 0x10d03d8 [0176.205] GetProcessHeap () returned 0x10a0000 [0176.205] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10d8b58) returned 1 [0176.206] RegisterContext () returned 0x0 [0176.206] _wcsicmp (_String1="namespace", _String2="advfirewall") returned 13 [0176.206] _wcsicmp (_String1="namespace", _String2="bridge") returned 12 [0176.206] _wcsicmp (_String1="namespace", _String2="dhcpclient") returned 10 [0176.206] _wcsicmp (_String1="namespace", _String2="dnsclient") returned 10 [0176.206] _wcsicmp (_String1="namespace", _String2="firewall") returned 8 [0176.206] _wcsicmp (_String1="namespace", _String2="interface") returned 5 [0176.206] _wcsicmp (_String1="namespace", _String2="lan") returned 2 [0176.206] _wcsicmp (_String1="namespace", _String2="netio") returned -4 [0176.206] _wcsicmp (_String1="namespace", _String2="ras") returned -4 [0176.206] _wcsicmp (_String1="namespace", _String2="advfirewall") returned 13 [0176.206] _wcsicmp (_String1="namespace", _String2="bridge") returned 12 [0176.206] _wcsicmp (_String1="namespace", _String2="dhcpclient") returned 10 [0176.206] _wcsicmp (_String1="namespace", _String2="dnsclient") returned 10 [0176.206] _wcsicmp (_String1="namespace", _String2="firewall") returned 8 [0176.206] _wcsicmp (_String1="namespace", _String2="interface") returned 5 [0176.206] _wcsicmp (_String1="namespace", _String2="lan") returned 2 [0176.206] _wcsicmp (_String1="namespace", _String2="netio") returned -4 [0176.207] GetProcessHeap () returned 0x10a0000 [0176.207] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x2d0) returned 0x10d8b58 [0176.207] GetProcessHeap () returned 0x10a0000 [0176.207] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10d03d8) returned 1 [0176.207] RegisterContext () returned 0x0 [0176.207] GetProcessHeap () returned 0x10a0000 [0176.207] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x48) returned 0x10b74e0 [0176.207] GetProcessHeap () returned 0x10a0000 [0176.207] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x0) returned 1 [0176.207] RegisterContext () returned 0x0 [0176.208] _wcsicmp (_String1="ipv6", _String2="ipv4") returned 2 [0176.208] _wcsicmp (_String1="ipv6", _String2="ipv4") returned 2 [0176.208] GetProcessHeap () returned 0x10a0000 [0176.208] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x90) returned 0x10c7210 [0176.208] GetProcessHeap () returned 0x10a0000 [0176.208] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10b74e0) returned 1 [0176.208] RegisterContext () returned 0x0 [0176.208] _wcsicmp (_String1="6to4", _String2="ipv4") returned -51 [0176.208] _wcsicmp (_String1="6to4", _String2="ipv6") returned -51 [0176.208] _wcsicmp (_String1="6to4", _String2="ipv4") returned -51 [0176.209] GetProcessHeap () returned 0x10a0000 [0176.209] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0xd8) returned 0x10c6ee0 [0176.209] GetProcessHeap () returned 0x10a0000 [0176.209] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10c7210) returned 1 [0176.209] RegisterContext () returned 0x0 [0176.209] _wcsicmp (_String1="isatap", _String2="6to4") returned 51 [0176.209] _wcsicmp (_String1="isatap", _String2="ipv4") returned 3 [0176.209] _wcsicmp (_String1="isatap", _String2="ipv6") returned 3 [0176.209] _wcsicmp (_String1="isatap", _String2="6to4") returned 51 [0176.209] _wcsicmp (_String1="isatap", _String2="ipv4") returned 3 [0176.210] _wcsicmp (_String1="isatap", _String2="ipv6") returned 3 [0176.210] GetProcessHeap () returned 0x10a0000 [0176.210] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x120) returned 0x10d8e30 [0176.210] GetProcessHeap () returned 0x10a0000 [0176.210] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10c6ee0) returned 1 [0176.211] RegisterContext () returned 0x0 [0176.211] _wcsicmp (_String1="teredo", _String2="6to4") returned 62 [0176.211] _wcsicmp (_String1="teredo", _String2="ipv4") returned 11 [0176.211] _wcsicmp (_String1="teredo", _String2="ipv6") returned 11 [0176.211] _wcsicmp (_String1="teredo", _String2="isatap") returned 11 [0176.211] _wcsicmp (_String1="teredo", _String2="6to4") returned 62 [0176.211] _wcsicmp (_String1="teredo", _String2="ipv4") returned 11 [0176.212] _wcsicmp (_String1="teredo", _String2="ipv6") returned 11 [0176.212] _wcsicmp (_String1="teredo", _String2="isatap") returned 11 [0176.212] GetProcessHeap () returned 0x10a0000 [0176.212] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x168) returned 0x10c6ee0 [0176.212] GetProcessHeap () returned 0x10a0000 [0176.212] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10d8e30) returned 1 [0176.213] RegisterContext () returned 0x0 [0176.213] _wcsicmp (_String1="portproxy", _String2="6to4") returned 58 [0176.213] _wcsicmp (_String1="portproxy", _String2="ipv4") returned 7 [0176.213] _wcsicmp (_String1="portproxy", _String2="ipv6") returned 7 [0176.213] _wcsicmp (_String1="portproxy", _String2="isatap") returned 7 [0176.213] _wcsicmp (_String1="portproxy", _String2="teredo") returned -4 [0176.213] _wcsicmp (_String1="portproxy", _String2="6to4") returned 58 [0176.213] _wcsicmp (_String1="portproxy", _String2="ipv4") returned 7 [0176.214] _wcsicmp (_String1="portproxy", _String2="ipv6") returned 7 [0176.214] _wcsicmp (_String1="portproxy", _String2="isatap") returned 7 [0176.214] _wcsicmp (_String1="portproxy", _String2="teredo") returned -4 [0176.214] GetProcessHeap () returned 0x10a0000 [0176.214] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x1b0) returned 0x10d8e30 [0176.214] GetProcessHeap () returned 0x10a0000 [0176.214] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10c6ee0) returned 1 [0176.214] RegisterContext () returned 0x0 [0176.214] GetProcessHeap () returned 0x10a0000 [0176.215] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x48) returned 0x10b74e0 [0176.215] GetProcessHeap () returned 0x10a0000 [0176.215] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x0) returned 1 [0176.215] RegisterContext () returned 0x0 [0176.215] _wcsicmp (_String1="isatap", _String2="6to4") returned 51 [0176.215] _wcsicmp (_String1="isatap", _String2="6to4") returned 51 [0176.215] GetProcessHeap () returned 0x10a0000 [0176.215] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x90) returned 0x10c7210 [0176.216] GetProcessHeap () returned 0x10a0000 [0176.216] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10b74e0) returned 1 [0176.216] RegisterContext () returned 0x0 [0176.216] _wcsicmp (_String1="portproxy", _String2="6to4") returned 58 [0176.216] _wcsicmp (_String1="portproxy", _String2="ipv4") returned 7 [0176.216] _wcsicmp (_String1="portproxy", _String2="ipv6") returned 7 [0176.216] _wcsicmp (_String1="portproxy", _String2="isatap") returned 7 [0176.216] _wcsicmp (_String1="portproxy", _String2="portproxy") returned 0 [0176.217] RegisterContext () returned 0x0 [0176.217] _wcsicmp (_String1="httpstunnel", _String2="6to4") returned 50 [0176.217] _wcsicmp (_String1="httpstunnel", _String2="ipv4") returned -1 [0176.217] _wcsicmp (_String1="httpstunnel", _String2="ipv6") returned -1 [0176.217] _wcsicmp (_String1="httpstunnel", _String2="isatap") returned -1 [0176.217] _wcsicmp (_String1="httpstunnel", _String2="portproxy") returned -8 [0176.217] _wcsicmp (_String1="httpstunnel", _String2="teredo") returned -12 [0176.217] _wcsicmp (_String1="httpstunnel", _String2="6to4") returned 50 [0176.217] _wcsicmp (_String1="httpstunnel", _String2="ipv4") returned -1 [0176.217] GetProcessHeap () returned 0x10a0000 [0176.217] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x1f8) returned 0x10d03d8 [0176.266] GetProcessHeap () returned 0x10a0000 [0176.266] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10d8e30) returned 1 [0176.266] RegisterContext () returned 0x0 [0176.266] _wcsicmp (_String1="tcp", _String2="6to4") returned 62 [0176.266] _wcsicmp (_String1="tcp", _String2="httpstunnel") returned 12 [0176.267] _wcsicmp (_String1="tcp", _String2="ipv4") returned 11 [0176.267] _wcsicmp (_String1="tcp", _String2="ipv6") returned 11 [0176.267] _wcsicmp (_String1="tcp", _String2="isatap") returned 11 [0176.267] _wcsicmp (_String1="tcp", _String2="portproxy") returned 4 [0176.267] _wcsicmp (_String1="tcp", _String2="teredo") returned -2 [0176.267] _wcsicmp (_String1="tcp", _String2="6to4") returned 62 [0176.267] _wcsicmp (_String1="tcp", _String2="httpstunnel") returned 12 [0176.267] _wcsicmp (_String1="tcp", _String2="ipv4") returned 11 [0176.267] _wcsicmp (_String1="tcp", _String2="ipv6") returned 11 [0176.267] _wcsicmp (_String1="tcp", _String2="isatap") returned 11 [0176.267] _wcsicmp (_String1="tcp", _String2="portproxy") returned 4 [0176.267] _wcsicmp (_String1="tcp", _String2="teredo") returned -2 [0176.267] GetProcessHeap () returned 0x10a0000 [0176.267] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x240) returned 0x10d05d8 [0176.267] GetProcessHeap () returned 0x10a0000 [0176.267] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10d03d8) returned 1 [0176.268] RegisterContext () returned 0x0 [0176.268] _wcsicmp (_String1="http", _String2="advfirewall") returned 7 [0176.268] _wcsicmp (_String1="http", _String2="bridge") returned 6 [0176.268] _wcsicmp (_String1="http", _String2="dhcpclient") returned 4 [0176.268] _wcsicmp (_String1="http", _String2="dnsclient") returned 4 [0176.268] _wcsicmp (_String1="http", _String2="firewall") returned 2 [0176.268] _wcsicmp (_String1="http", _String2="interface") returned -1 [0176.268] _wcsicmp (_String1="http", _String2="lan") returned -4 [0176.268] _wcsicmp (_String1="http", _String2="namespace") returned -6 [0176.268] _wcsicmp (_String1="http", _String2="netio") returned -6 [0176.268] _wcsicmp (_String1="http", _String2="ras") returned -10 [0176.268] _wcsicmp (_String1="http", _String2="advfirewall") returned 7 [0176.268] _wcsicmp (_String1="http", _String2="bridge") returned 6 [0176.268] _wcsicmp (_String1="http", _String2="dhcpclient") returned 4 [0176.268] _wcsicmp (_String1="http", _String2="dnsclient") returned 4 [0176.268] _wcsicmp (_String1="http", _String2="firewall") returned 2 [0176.268] _wcsicmp (_String1="http", _String2="interface") returned -1 [0176.269] GetProcessHeap () returned 0x10a0000 [0176.269] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x318) returned 0x10d0820 [0176.269] GetProcessHeap () returned 0x10a0000 [0176.269] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10d8b58) returned 1 [0176.270] RegisterContext () returned 0x0 [0176.270] _wcsicmp (_String1="ipsec", _String2="advfirewall") returned 8 [0176.270] _wcsicmp (_String1="ipsec", _String2="bridge") returned 7 [0176.270] _wcsicmp (_String1="ipsec", _String2="dhcpclient") returned 5 [0176.270] _wcsicmp (_String1="ipsec", _String2="dnsclient") returned 5 [0176.270] _wcsicmp (_String1="ipsec", _String2="firewall") returned 3 [0176.270] _wcsicmp (_String1="ipsec", _String2="http") returned 1 [0176.270] _wcsicmp (_String1="ipsec", _String2="interface") returned 2 [0176.270] _wcsicmp (_String1="ipsec", _String2="lan") returned -3 [0176.270] _wcsicmp (_String1="ipsec", _String2="namespace") returned -5 [0176.270] _wcsicmp (_String1="ipsec", _String2="netio") returned -5 [0176.270] _wcsicmp (_String1="ipsec", _String2="ras") returned -9 [0176.270] _wcsicmp (_String1="ipsec", _String2="advfirewall") returned 8 [0176.270] _wcsicmp (_String1="ipsec", _String2="bridge") returned 7 [0176.270] _wcsicmp (_String1="ipsec", _String2="dhcpclient") returned 5 [0176.270] _wcsicmp (_String1="ipsec", _String2="dnsclient") returned 5 [0176.271] _wcsicmp (_String1="ipsec", _String2="firewall") returned 3 [0176.271] _wcsicmp (_String1="ipsec", _String2="http") returned 1 [0176.271] _wcsicmp (_String1="ipsec", _String2="interface") returned 2 [0176.271] _wcsicmp (_String1="ipsec", _String2="lan") returned -3 [0176.271] GetProcessHeap () returned 0x10a0000 [0176.271] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x360) returned 0x10d8b58 [0176.271] GetProcessHeap () returned 0x10a0000 [0176.271] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10d0820) returned 1 [0176.272] RegisterContext () returned 0x0 [0176.272] GetProcessHeap () returned 0x10a0000 [0176.272] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x48) returned 0x10b74e0 [0176.272] GetProcessHeap () returned 0x10a0000 [0176.272] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x0) returned 1 [0176.272] RegisterContext () returned 0x0 [0176.272] _wcsicmp (_String1="dynamic", _String2="static") returned -15 [0176.272] _wcsicmp (_String1="dynamic", _String2="static") returned -15 [0176.273] GetProcessHeap () returned 0x10a0000 [0176.273] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x90) returned 0x10d8ec0 [0176.273] GetProcessHeap () returned 0x10a0000 [0176.273] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10b74e0) returned 1 [0176.273] RegisterContext () returned 0x0 [0176.273] _wcsicmp (_String1="static", _String2="dynamic") returned 15 [0176.273] _wcsicmp (_String1="static", _String2="static") returned 0 [0176.274] RegisterContext () returned 0x0 [0176.274] _wcsicmp (_String1="dynamic", _String2="dynamic") returned 0 [0176.274] RegisterContext () returned 0x0 [0176.275] _wcsicmp (_String1="wfp", _String2="advfirewall") returned 22 [0176.275] _wcsicmp (_String1="wfp", _String2="bridge") returned 21 [0176.275] _wcsicmp (_String1="wfp", _String2="dhcpclient") returned 19 [0176.275] _wcsicmp (_String1="wfp", _String2="dnsclient") returned 19 [0176.275] _wcsicmp (_String1="wfp", _String2="firewall") returned 17 [0176.275] _wcsicmp (_String1="wfp", _String2="http") returned 15 [0176.275] _wcsicmp (_String1="wfp", _String2="interface") returned 14 [0176.276] _wcsicmp (_String1="wfp", _String2="ipsec") returned 14 [0176.276] _wcsicmp (_String1="wfp", _String2="lan") returned 11 [0176.276] _wcsicmp (_String1="wfp", _String2="namespace") returned 9 [0176.276] _wcsicmp (_String1="wfp", _String2="netio") returned 9 [0176.276] _wcsicmp (_String1="wfp", _String2="ras") returned 5 [0176.276] _wcsicmp (_String1="wfp", _String2="advfirewall") returned 22 [0176.276] _wcsicmp (_String1="wfp", _String2="bridge") returned 21 [0176.276] _wcsicmp (_String1="wfp", _String2="dhcpclient") returned 19 [0176.276] _wcsicmp (_String1="wfp", _String2="dnsclient") returned 19 [0176.276] _wcsicmp (_String1="wfp", _String2="firewall") returned 17 [0176.277] _wcsicmp (_String1="wfp", _String2="http") returned 15 [0176.277] _wcsicmp (_String1="wfp", _String2="interface") returned 14 [0176.277] _wcsicmp (_String1="wfp", _String2="ipsec") returned 14 [0176.277] _wcsicmp (_String1="wfp", _String2="lan") returned 11 [0176.277] _wcsicmp (_String1="wfp", _String2="namespace") returned 9 [0176.277] _wcsicmp (_String1="wfp", _String2="netio") returned 9 [0176.277] _wcsicmp (_String1="wfp", _String2="ras") returned 5 [0176.277] GetProcessHeap () returned 0x10a0000 [0176.277] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x3a8) returned 0x10d0820 [0176.278] GetProcessHeap () returned 0x10a0000 [0176.278] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10d8b58) returned 1 [0176.280] RegisterContext () returned 0x0 [0176.280] _wcsicmp (_String1="p2p", _String2="advfirewall") returned 15 [0176.280] _wcsicmp (_String1="p2p", _String2="bridge") returned 14 [0176.280] _wcsicmp (_String1="p2p", _String2="dhcpclient") returned 12 [0176.281] _wcsicmp (_String1="p2p", _String2="dnsclient") returned 12 [0176.281] _wcsicmp (_String1="p2p", _String2="firewall") returned 10 [0176.281] _wcsicmp (_String1="p2p", _String2="http") returned 8 [0176.281] _wcsicmp (_String1="p2p", _String2="interface") returned 7 [0176.281] _wcsicmp (_String1="p2p", _String2="ipsec") returned 7 [0176.281] _wcsicmp (_String1="p2p", _String2="lan") returned 4 [0176.281] _wcsicmp (_String1="p2p", _String2="namespace") returned 2 [0176.281] _wcsicmp (_String1="p2p", _String2="netio") returned 2 [0176.282] _wcsicmp (_String1="p2p", _String2="ras") returned -2 [0176.282] _wcsicmp (_String1="p2p", _String2="wfp") returned -7 [0176.282] _wcsicmp (_String1="p2p", _String2="advfirewall") returned 15 [0176.282] _wcsicmp (_String1="p2p", _String2="bridge") returned 14 [0176.282] _wcsicmp (_String1="p2p", _String2="dhcpclient") returned 12 [0176.282] _wcsicmp (_String1="p2p", _String2="dnsclient") returned 12 [0176.282] _wcsicmp (_String1="p2p", _String2="firewall") returned 10 [0176.282] _wcsicmp (_String1="p2p", _String2="http") returned 8 [0176.282] _wcsicmp (_String1="p2p", _String2="interface") returned 7 [0176.282] _wcsicmp (_String1="p2p", _String2="ipsec") returned 7 [0176.283] _wcsicmp (_String1="p2p", _String2="lan") returned 4 [0176.283] _wcsicmp (_String1="p2p", _String2="namespace") returned 2 [0176.283] _wcsicmp (_String1="p2p", _String2="netio") returned 2 [0176.283] _wcsicmp (_String1="p2p", _String2="ras") returned -2 [0176.283] GetProcessHeap () returned 0x10a0000 [0176.283] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x3f0) returned 0x10d0bd0 [0176.284] GetProcessHeap () returned 0x10a0000 [0176.284] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10d0820) returned 1 [0176.285] RegisterContext () returned 0x0 [0176.285] GetProcessHeap () returned 0x10a0000 [0176.285] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x48) returned 0x10b74e0 [0176.285] GetProcessHeap () returned 0x10a0000 [0176.285] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x0) returned 1 [0176.287] RegisterContext () returned 0x0 [0176.287] _wcsicmp (_String1="group", _String2="pnrp") returned -9 [0176.287] _wcsicmp (_String1="group", _String2="pnrp") returned -9 [0176.287] GetProcessHeap () returned 0x10a0000 [0176.287] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x90) returned 0x10d03d8 [0176.287] GetProcessHeap () returned 0x10a0000 [0176.288] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10b74e0) returned 1 [0176.288] RegisterContext () returned 0x0 [0176.288] _wcsicmp (_String1="idmgr", _String2="group") returned 2 [0176.288] _wcsicmp (_String1="idmgr", _String2="pnrp") returned -7 [0176.288] _wcsicmp (_String1="idmgr", _String2="group") returned 2 [0176.288] _wcsicmp (_String1="idmgr", _String2="pnrp") returned -7 [0176.288] GetProcessHeap () returned 0x10a0000 [0176.289] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0xd8) returned 0x10d0470 [0176.289] GetProcessHeap () returned 0x10a0000 [0176.289] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10d03d8) returned 1 [0176.289] RegisterContext () returned 0x0 [0176.289] GetProcessHeap () returned 0x10a0000 [0176.289] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x48) returned 0x10b74e0 [0176.289] GetProcessHeap () returned 0x10a0000 [0176.289] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x0) returned 1 [0176.290] RegisterContext () returned 0x0 [0176.290] _wcsicmp (_String1="diagnostics", _String2="cloud") returned 1 [0176.290] _wcsicmp (_String1="diagnostics", _String2="cloud") returned 1 [0176.290] GetProcessHeap () returned 0x10a0000 [0176.290] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x90) returned 0x10d03d8 [0176.290] GetProcessHeap () returned 0x10a0000 [0176.290] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10b74e0) returned 1 [0176.290] RegisterContext () returned 0x0 [0176.291] _wcsicmp (_String1="peer", _String2="cloud") returned 13 [0176.291] _wcsicmp (_String1="peer", _String2="diagnostics") returned 12 [0176.291] _wcsicmp (_String1="peer", _String2="cloud") returned 13 [0176.291] _wcsicmp (_String1="peer", _String2="diagnostics") returned 12 [0176.291] GetProcessHeap () returned 0x10a0000 [0176.291] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0xd8) returned 0x10d8b58 [0176.291] GetProcessHeap () returned 0x10a0000 [0176.291] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10d03d8) returned 1 [0176.291] RegisterContext () returned 0x0 [0176.292] GetProcessHeap () returned 0x10a0000 [0176.292] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x48) returned 0x10b74e0 [0176.292] GetProcessHeap () returned 0x10a0000 [0176.292] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x0) returned 1 [0176.292] RegisterContext () returned 0x0 [0176.292] _wcsicmp (_String1="rpc", _String2="advfirewall") returned 17 [0176.292] _wcsicmp (_String1="rpc", _String2="bridge") returned 16 [0176.293] _wcsicmp (_String1="rpc", _String2="dhcpclient") returned 14 [0176.293] _wcsicmp (_String1="rpc", _String2="dnsclient") returned 14 [0176.293] _wcsicmp (_String1="rpc", _String2="firewall") returned 12 [0176.293] _wcsicmp (_String1="rpc", _String2="http") returned 10 [0176.293] _wcsicmp (_String1="rpc", _String2="interface") returned 9 [0176.293] _wcsicmp (_String1="rpc", _String2="ipsec") returned 9 [0176.293] _wcsicmp (_String1="rpc", _String2="lan") returned 6 [0176.293] _wcsicmp (_String1="rpc", _String2="namespace") returned 4 [0176.293] _wcsicmp (_String1="rpc", _String2="netio") returned 4 [0176.294] _wcsicmp (_String1="rpc", _String2="p2p") returned 2 [0176.294] _wcsicmp (_String1="rpc", _String2="ras") returned 15 [0176.294] _wcsicmp (_String1="rpc", _String2="wfp") returned -5 [0176.294] _wcsicmp (_String1="rpc", _String2="advfirewall") returned 17 [0176.294] _wcsicmp (_String1="rpc", _String2="bridge") returned 16 [0176.294] _wcsicmp (_String1="rpc", _String2="dhcpclient") returned 14 [0176.294] _wcsicmp (_String1="rpc", _String2="dnsclient") returned 14 [0176.295] _wcsicmp (_String1="rpc", _String2="firewall") returned 12 [0176.295] _wcsicmp (_String1="rpc", _String2="http") returned 10 [0176.295] _wcsicmp (_String1="rpc", _String2="interface") returned 9 [0176.295] _wcsicmp (_String1="rpc", _String2="ipsec") returned 9 [0176.295] _wcsicmp (_String1="rpc", _String2="lan") returned 6 [0176.295] _wcsicmp (_String1="rpc", _String2="namespace") returned 4 [0176.295] _wcsicmp (_String1="rpc", _String2="netio") returned 4 [0176.296] _wcsicmp (_String1="rpc", _String2="p2p") returned 2 [0176.296] _wcsicmp (_String1="rpc", _String2="ras") returned 15 [0176.296] _wcsicmp (_String1="rpc", _String2="wfp") returned -5 [0176.296] GetProcessHeap () returned 0x10a0000 [0176.296] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x438) returned 0x10daf60 [0176.297] GetProcessHeap () returned 0x10a0000 [0176.297] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10d0bd0) returned 1 [0176.297] RegisterContext () returned 0x0 [0176.298] GetProcessHeap () returned 0x10a0000 [0176.298] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x48) returned 0x10d3420 [0176.298] GetProcessHeap () returned 0x10a0000 [0176.298] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x0) returned 1 [0176.298] RegisterContext () returned 0x0 [0176.298] _wcsicmp (_String1="winhttp", _String2="advfirewall") returned 22 [0176.298] _wcsicmp (_String1="winhttp", _String2="bridge") returned 21 [0176.298] _wcsicmp (_String1="winhttp", _String2="dhcpclient") returned 19 [0176.298] _wcsicmp (_String1="winhttp", _String2="dnsclient") returned 19 [0176.299] _wcsicmp (_String1="winhttp", _String2="firewall") returned 17 [0176.299] _wcsicmp (_String1="winhttp", _String2="http") returned 15 [0176.299] _wcsicmp (_String1="winhttp", _String2="interface") returned 14 [0176.299] _wcsicmp (_String1="winhttp", _String2="ipsec") returned 14 [0176.299] _wcsicmp (_String1="winhttp", _String2="lan") returned 11 [0176.299] _wcsicmp (_String1="winhttp", _String2="namespace") returned 9 [0176.299] _wcsicmp (_String1="winhttp", _String2="netio") returned 9 [0176.299] _wcsicmp (_String1="winhttp", _String2="p2p") returned 7 [0176.299] _wcsicmp (_String1="winhttp", _String2="ras") returned 5 [0176.299] _wcsicmp (_String1="winhttp", _String2="rpc") returned 5 [0176.300] _wcsicmp (_String1="winhttp", _String2="wfp") returned 3 [0176.300] _wcsicmp (_String1="winhttp", _String2="advfirewall") returned 22 [0176.300] _wcsicmp (_String1="winhttp", _String2="bridge") returned 21 [0176.300] _wcsicmp (_String1="winhttp", _String2="dhcpclient") returned 19 [0176.300] _wcsicmp (_String1="winhttp", _String2="dnsclient") returned 19 [0176.300] _wcsicmp (_String1="winhttp", _String2="firewall") returned 17 [0176.300] _wcsicmp (_String1="winhttp", _String2="http") returned 15 [0176.300] _wcsicmp (_String1="winhttp", _String2="interface") returned 14 [0176.301] _wcsicmp (_String1="winhttp", _String2="ipsec") returned 14 [0176.301] _wcsicmp (_String1="winhttp", _String2="lan") returned 11 [0176.301] _wcsicmp (_String1="winhttp", _String2="namespace") returned 9 [0176.301] _wcsicmp (_String1="winhttp", _String2="netio") returned 9 [0176.301] _wcsicmp (_String1="winhttp", _String2="p2p") returned 7 [0176.301] _wcsicmp (_String1="winhttp", _String2="ras") returned 5 [0176.301] _wcsicmp (_String1="winhttp", _String2="rpc") returned 5 [0176.301] _wcsicmp (_String1="winhttp", _String2="wfp") returned 3 [0176.301] GetProcessHeap () returned 0x10a0000 [0176.302] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x480) returned 0x10d0820 [0176.302] GetProcessHeap () returned 0x10a0000 [0176.302] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10daf60) returned 1 [0176.345] RegisterContext () returned 0x0 [0176.345] _wcsicmp (_String1="wlan", _String2="advfirewall") returned 22 [0176.345] _wcsicmp (_String1="wlan", _String2="bridge") returned 21 [0176.345] _wcsicmp (_String1="wlan", _String2="dhcpclient") returned 19 [0176.345] _wcsicmp (_String1="wlan", _String2="dnsclient") returned 19 [0176.345] _wcsicmp (_String1="wlan", _String2="firewall") returned 17 [0176.345] _wcsicmp (_String1="wlan", _String2="http") returned 15 [0176.345] _wcsicmp (_String1="wlan", _String2="interface") returned 14 [0176.346] _wcsicmp (_String1="wlan", _String2="ipsec") returned 14 [0176.346] _wcsicmp (_String1="wlan", _String2="lan") returned 11 [0176.346] _wcsicmp (_String1="wlan", _String2="namespace") returned 9 [0176.346] _wcsicmp (_String1="wlan", _String2="netio") returned 9 [0176.346] _wcsicmp (_String1="wlan", _String2="p2p") returned 7 [0176.346] _wcsicmp (_String1="wlan", _String2="ras") returned 5 [0176.346] _wcsicmp (_String1="wlan", _String2="rpc") returned 5 [0176.346] _wcsicmp (_String1="wlan", _String2="wfp") returned 6 [0176.347] _wcsicmp (_String1="wlan", _String2="winhttp") returned 3 [0176.347] _wcsicmp (_String1="wlan", _String2="advfirewall") returned 22 [0176.347] _wcsicmp (_String1="wlan", _String2="bridge") returned 21 [0176.347] _wcsicmp (_String1="wlan", _String2="dhcpclient") returned 19 [0176.347] _wcsicmp (_String1="wlan", _String2="dnsclient") returned 19 [0176.347] _wcsicmp (_String1="wlan", _String2="firewall") returned 17 [0176.347] _wcsicmp (_String1="wlan", _String2="http") returned 15 [0176.347] _wcsicmp (_String1="wlan", _String2="interface") returned 14 [0176.347] _wcsicmp (_String1="wlan", _String2="ipsec") returned 14 [0176.347] _wcsicmp (_String1="wlan", _String2="lan") returned 11 [0176.347] _wcsicmp (_String1="wlan", _String2="namespace") returned 9 [0176.348] _wcsicmp (_String1="wlan", _String2="netio") returned 9 [0176.348] _wcsicmp (_String1="wlan", _String2="p2p") returned 7 [0176.348] _wcsicmp (_String1="wlan", _String2="ras") returned 5 [0176.348] _wcsicmp (_String1="wlan", _String2="rpc") returned 5 [0176.348] _wcsicmp (_String1="wlan", _String2="wfp") returned 6 [0176.348] _wcsicmp (_String1="wlan", _String2="winhttp") returned 3 [0176.348] GetProcessHeap () returned 0x10a0000 [0176.348] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x4c8) returned 0x10d3c20 [0176.349] GetProcessHeap () returned 0x10a0000 [0176.349] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10d0820) returned 1 [0176.349] RegisterContext () returned 0x0 [0176.349] _wcsicmp (_String1="winsock", _String2="advfirewall") returned 22 [0176.350] _wcsicmp (_String1="winsock", _String2="bridge") returned 21 [0176.350] _wcsicmp (_String1="winsock", _String2="dhcpclient") returned 19 [0176.350] _wcsicmp (_String1="winsock", _String2="dnsclient") returned 19 [0176.350] _wcsicmp (_String1="winsock", _String2="firewall") returned 17 [0176.350] _wcsicmp (_String1="winsock", _String2="http") returned 15 [0176.350] _wcsicmp (_String1="winsock", _String2="interface") returned 14 [0176.350] _wcsicmp (_String1="winsock", _String2="ipsec") returned 14 [0176.350] _wcsicmp (_String1="winsock", _String2="lan") returned 11 [0176.351] _wcsicmp (_String1="winsock", _String2="namespace") returned 9 [0176.351] _wcsicmp (_String1="winsock", _String2="netio") returned 9 [0176.351] _wcsicmp (_String1="winsock", _String2="p2p") returned 7 [0176.351] _wcsicmp (_String1="winsock", _String2="ras") returned 5 [0176.351] _wcsicmp (_String1="winsock", _String2="rpc") returned 5 [0176.351] _wcsicmp (_String1="winsock", _String2="wfp") returned 3 [0176.351] _wcsicmp (_String1="winsock", _String2="winhttp") returned 11 [0176.351] _wcsicmp (_String1="winsock", _String2="wlan") returned -3 [0176.351] _wcsicmp (_String1="winsock", _String2="advfirewall") returned 22 [0176.352] _wcsicmp (_String1="winsock", _String2="bridge") returned 21 [0176.352] _wcsicmp (_String1="winsock", _String2="dhcpclient") returned 19 [0176.352] _wcsicmp (_String1="winsock", _String2="dnsclient") returned 19 [0176.352] _wcsicmp (_String1="winsock", _String2="firewall") returned 17 [0176.352] _wcsicmp (_String1="winsock", _String2="http") returned 15 [0176.352] _wcsicmp (_String1="winsock", _String2="interface") returned 14 [0176.352] _wcsicmp (_String1="winsock", _String2="ipsec") returned 14 [0176.352] _wcsicmp (_String1="winsock", _String2="lan") returned 11 [0176.352] _wcsicmp (_String1="winsock", _String2="namespace") returned 9 [0176.352] _wcsicmp (_String1="winsock", _String2="netio") returned 9 [0176.353] _wcsicmp (_String1="winsock", _String2="p2p") returned 7 [0176.353] _wcsicmp (_String1="winsock", _String2="ras") returned 5 [0176.353] _wcsicmp (_String1="winsock", _String2="rpc") returned 5 [0176.353] _wcsicmp (_String1="winsock", _String2="wfp") returned 3 [0176.353] _wcsicmp (_String1="winsock", _String2="winhttp") returned 11 [0176.353] _wcsicmp (_String1="winsock", _String2="wlan") returned -3 [0176.353] GetProcessHeap () returned 0x10a0000 [0176.353] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x510) returned 0x10d0820 [0176.354] GetProcessHeap () returned 0x10a0000 [0176.354] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10d3c20) returned 1 [0176.455] RegisterContext () returned 0x0 [0176.455] _wcsicmp (_String1="branchcache", _String2="advfirewall") returned 1 [0176.455] _wcsicmp (_String1="branchcache", _String2="bridge") returned -8 [0176.455] _wcsicmp (_String1="branchcache", _String2="dhcpclient") returned -2 [0176.455] _wcsicmp (_String1="branchcache", _String2="dnsclient") returned -2 [0176.455] _wcsicmp (_String1="branchcache", _String2="firewall") returned -4 [0176.455] _wcsicmp (_String1="branchcache", _String2="http") returned -6 [0176.456] _wcsicmp (_String1="branchcache", _String2="interface") returned -7 [0176.456] _wcsicmp (_String1="branchcache", _String2="ipsec") returned -7 [0176.456] _wcsicmp (_String1="branchcache", _String2="lan") returned -10 [0176.456] _wcsicmp (_String1="branchcache", _String2="namespace") returned -12 [0176.456] _wcsicmp (_String1="branchcache", _String2="netio") returned -12 [0176.456] _wcsicmp (_String1="branchcache", _String2="p2p") returned -14 [0176.456] _wcsicmp (_String1="branchcache", _String2="ras") returned -16 [0176.456] _wcsicmp (_String1="branchcache", _String2="rpc") returned -16 [0176.457] _wcsicmp (_String1="branchcache", _String2="wfp") returned -21 [0176.457] _wcsicmp (_String1="branchcache", _String2="winhttp") returned -21 [0176.457] _wcsicmp (_String1="branchcache", _String2="winsock") returned -21 [0176.457] _wcsicmp (_String1="branchcache", _String2="wlan") returned -21 [0176.457] _wcsicmp (_String1="branchcache", _String2="advfirewall") returned 1 [0176.457] _wcsicmp (_String1="branchcache", _String2="bridge") returned -8 [0176.457] GetProcessHeap () returned 0x10a0000 [0176.457] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x558) returned 0x10dbe38 [0176.458] GetProcessHeap () returned 0x10a0000 [0176.458] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10d0820) returned 1 [0176.458] RegisterContext () returned 0x0 [0176.458] GetProcessHeap () returned 0x10a0000 [0176.458] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x48) returned 0x10d3740 [0176.459] GetProcessHeap () returned 0x10a0000 [0176.459] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x0) returned 1 [0176.459] LoadLibraryExW (lpLibFileName="mprmsg.dll", hFile=0x0, dwFlags=0x800) returned 0x72b90000 [0176.475] GetProcAddress (hModule=0x72b90000, lpProcName="MprmsgGetErrorString") returned 0x72b91370 [0176.475] SetConsoleCtrlHandler (HandlerRoutine=0x1638200, Add=1) returned 1 [0176.475] SetThreadUILanguage (LangId=0x0) returned 0xa20409 [0176.502] _wcsicmp (_String1="firewall", _String2="-?") returned 57 [0176.502] _wcsicmp (_String1="firewall", _String2="-h") returned 57 [0176.502] _wcsicmp (_String1="firewall", _String2="?") returned 39 [0176.502] _wcsicmp (_String1="firewall", _String2="/?") returned 55 [0176.502] _wcsicmp (_String1="firewall", _String2="-v") returned 57 [0176.503] _wcsicmp (_String1="firewall", _String2="-a") returned 57 [0176.503] _wcsicmp (_String1="firewall", _String2="-c") returned 57 [0176.503] _wcsicmp (_String1="firewall", _String2="-f") returned 57 [0176.503] _wcsicmp (_String1="firewall", _String2="-r") returned 57 [0176.503] _wcsicmp (_String1="firewall", _String2="-u") returned 57 [0176.503] _wcsicmp (_String1="firewall", _String2="-p") returned 57 [0176.503] GetVersionExW (in: lpVersionInformation=0xd67304*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0xd67304*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x3ad7, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0176.503] _vsnwprintf (in: _Buffer=0x1643780, _BufferCount=0x103, _Format="%d.%d.%d", _ArgList=0xd672f0 | out: _Buffer="10.0.15063") returned 10 [0176.503] _vsnwprintf (in: _Buffer=0x1643990, _BufferCount=0x103, _Format="%d", _ArgList=0xd672e0 | out: _Buffer="15063") returned 5 [0176.503] _vsnwprintf (in: _Buffer=0x1643ba0, _BufferCount=0x103, _Format="%d", _ArgList=0xd672d0 | out: _Buffer="0") returned 1 [0176.503] _vsnwprintf (in: _Buffer=0x1643db0, _BufferCount=0x103, _Format="%d", _ArgList=0xd672c0 | out: _Buffer="0") returned 1 [0176.504] GetProcessHeap () returned 0x10a0000 [0176.504] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0xc) returned 0x10d3b90 [0176.504] GetProcessHeap () returned 0x10a0000 [0176.504] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0xc) returned 0x10d3bd8 [0176.504] GetProcessHeap () returned 0x10a0000 [0176.504] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0xc) returned 0x10d3b60 [0176.504] GetProcessHeap () returned 0x10a0000 [0176.504] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0xc) returned 0x10d3c08 [0176.504] GetProcessHeap () returned 0x10a0000 [0176.504] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0xc) returned 0x10d3ba8 [0176.504] wcscpy_s (in: _Destination=0x10d3ba8, _SizeInWords=0x6, _Source="netsh" | out: _Destination="netsh") returned 0x0 [0176.504] GetProcessHeap () returned 0x10a0000 [0176.504] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10d3b60) returned 1 [0176.504] GetProcessHeap () returned 0x10a0000 [0176.505] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10d3bd8) returned 1 [0176.505] GetProcessHeap () returned 0x10a0000 [0176.505] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0xc) returned 0x10d3b60 [0176.505] GetProcessHeap () returned 0x10a0000 [0176.505] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0xc) returned 0x10d3bd8 [0176.505] GetProcessHeap () returned 0x10a0000 [0176.505] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x42) returned 0x10d36a0 [0176.505] GetProcessHeap () returned 0x10a0000 [0176.505] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0xc) returned 0x10d3bf0 [0176.505] GetProcessHeap () returned 0x10a0000 [0176.505] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x12) returned 0x10cd908 [0176.505] wcscpy_s (in: _Destination=0x10cd908, _SizeInWords=0x9, _Source="firewall" | out: _Destination="firewall") returned 0x0 [0176.506] GetProcessHeap () returned 0x10a0000 [0176.506] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0xc) returned 0x10d3b48 [0176.506] GetProcessHeap () returned 0x10a0000 [0176.506] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ad968 [0176.506] wcscpy_s (in: _Destination=0x10ad968, _SizeInWords=0x4, _Source="set" | out: _Destination="set") returned 0x0 [0176.506] GetProcessHeap () returned 0x10a0000 [0176.506] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0xc) returned 0x10dd838 [0176.506] GetProcessHeap () returned 0x10a0000 [0176.506] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0xe) returned 0x10dda60 [0176.506] wcscpy_s (in: _Destination=0x10dda60, _SizeInWords=0x7, _Source="opmode" | out: _Destination="opmode") returned 0x0 [0176.506] GetProcessHeap () returned 0x10a0000 [0176.507] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0xc) returned 0x10dd928 [0176.507] GetProcessHeap () returned 0x10a0000 [0176.507] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0xa) returned 0x10dd9b8 [0176.507] wcscpy_s (in: _Destination=0x10dd9b8, _SizeInWords=0x5, _Source="mode" | out: _Destination="mode") returned 0x0 [0176.507] GetProcessHeap () returned 0x10a0000 [0176.507] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0xc) returned 0x10dda18 [0176.507] GetProcessHeap () returned 0x10a0000 [0176.507] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x4) returned 0x10ddca0 [0176.507] wcscpy_s (in: _Destination=0x10ddca0, _SizeInWords=0x2, _Source="=" | out: _Destination="=") returned 0x0 [0176.507] GetProcessHeap () returned 0x10a0000 [0176.507] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0xc) returned 0x10dd9a0 [0176.507] GetProcessHeap () returned 0x10a0000 [0176.508] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x10) returned 0x10dd958 [0176.508] wcscpy_s (in: _Destination=0x10dd958, _SizeInWords=0x8, _Source="disable" | out: _Destination="disable") returned 0x0 [0176.508] GetProcessHeap () returned 0x10a0000 [0176.508] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10d36a0) returned 1 [0176.508] GetProcessHeap () returned 0x10a0000 [0176.508] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10d3bd8) returned 1 [0176.508] GetProcessHeap () returned 0x10a0000 [0176.508] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0xc) returned 0x10dda48 [0176.508] GetProcessHeap () returned 0x10a0000 [0176.508] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x12) returned 0x10cda88 [0176.509] wcscpy_s (in: _Destination=0x10cda88, _SizeInWords=0x9, _Source="firewall" | out: _Destination="firewall") returned 0x0 [0176.509] GetProcessHeap () returned 0x10a0000 [0176.509] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10cd908) returned 1 [0176.509] GetProcessHeap () returned 0x10a0000 [0176.509] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10d3bf0) returned 1 [0176.509] GetProcessHeap () returned 0x10a0000 [0176.509] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0xc) returned 0x10dda78 [0176.509] GetProcessHeap () returned 0x10a0000 [0176.510] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x12) returned 0x10cdae8 [0176.510] wcscpy_s (in: _Destination=0x10cdae8, _SizeInWords=0x9, _Source="firewall" | out: _Destination="firewall") returned 0x0 [0176.510] GetProcessHeap () returned 0x10a0000 [0176.510] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10cda88) returned 1 [0176.510] GetProcessHeap () returned 0x10a0000 [0176.510] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10dda48) returned 1 [0176.510] GetProcessHeap () returned 0x10a0000 [0176.510] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0xc) returned 0x10dd9d0 [0176.510] GetProcessHeap () returned 0x10a0000 [0176.510] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ddcc0 [0176.511] wcscpy_s (in: _Destination=0x10ddcc0, _SizeInWords=0x4, _Source="set" | out: _Destination="set") returned 0x0 [0176.511] GetProcessHeap () returned 0x10a0000 [0176.511] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad968) returned 1 [0176.511] GetProcessHeap () returned 0x10a0000 [0176.511] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10d3b48) returned 1 [0176.511] GetProcessHeap () returned 0x10a0000 [0176.511] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0xc) returned 0x10dd988 [0176.511] GetProcessHeap () returned 0x10a0000 [0176.511] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0xe) returned 0x10dd940 [0176.512] wcscpy_s (in: _Destination=0x10dd940, _SizeInWords=0x7, _Source="opmode" | out: _Destination="opmode") returned 0x0 [0176.512] GetProcessHeap () returned 0x10a0000 [0176.512] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10dda60) returned 1 [0176.512] GetProcessHeap () returned 0x10a0000 [0176.512] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10dd838) returned 1 [0176.512] GetProcessHeap () returned 0x10a0000 [0176.512] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0xc) returned 0x10ddac0 [0176.512] GetProcessHeap () returned 0x10a0000 [0176.513] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0xa) returned 0x10dd838 [0176.513] wcscpy_s (in: _Destination=0x10dd838, _SizeInWords=0x5, _Source="mode" | out: _Destination="mode") returned 0x0 [0176.513] GetProcessHeap () returned 0x10a0000 [0176.513] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10dd9b8) returned 1 [0176.513] GetProcessHeap () returned 0x10a0000 [0176.513] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10dd928) returned 1 [0176.513] GetProcessHeap () returned 0x10a0000 [0176.513] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0xc) returned 0x10ddad8 [0176.513] GetProcessHeap () returned 0x10a0000 [0176.514] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x4) returned 0x10ddc90 [0176.514] wcscpy_s (in: _Destination=0x10ddc90, _SizeInWords=0x2, _Source="=" | out: _Destination="=") returned 0x0 [0176.514] GetProcessHeap () returned 0x10a0000 [0176.514] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ddca0) returned 1 [0176.514] GetProcessHeap () returned 0x10a0000 [0176.514] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10dda18) returned 1 [0176.514] GetProcessHeap () returned 0x10a0000 [0176.514] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0xc) returned 0x10dd9b8 [0176.514] GetProcessHeap () returned 0x10a0000 [0176.515] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x10) returned 0x10dda90 [0176.515] wcscpy_s (in: _Destination=0x10dda90, _SizeInWords=0x8, _Source="disable" | out: _Destination="disable") returned 0x0 [0176.516] GetProcessHeap () returned 0x10a0000 [0176.516] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10dd958) returned 1 [0176.516] GetProcessHeap () returned 0x10a0000 [0176.516] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10dd9a0) returned 1 [0176.516] GetProcessHeap () returned 0x10a0000 [0176.516] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x1c) returned 0x10c85e0 [0176.516] GetProcessHeap () returned 0x10a0000 [0176.516] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0xc) returned 0x10dd898 [0176.517] GetProcessHeap () returned 0x10a0000 [0176.517] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x12) returned 0x10cda88 [0176.517] GetProcessHeap () returned 0x10a0000 [0176.517] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ddd10 [0176.517] GetProcessHeap () returned 0x10a0000 [0176.517] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0xe) returned 0x10dda30 [0176.517] GetProcessHeap () returned 0x10a0000 [0176.517] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0xa) returned 0x10ddaf0 [0176.517] GetProcessHeap () returned 0x10a0000 [0176.517] RtlReAllocateHeap (Heap=0x10a0000, Flags=0x0, Ptr=0x10ddaf0, Size=0xc) returned 0x10dd928 [0176.517] GetProcessHeap () returned 0x10a0000 [0176.518] RtlReAllocateHeap (Heap=0x10a0000, Flags=0x0, Ptr=0x10dd928, Size=0x1a) returned 0x10c8338 [0176.518] GetProcessHeap () returned 0x10a0000 [0176.518] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0xc) returned 0x10dda48 [0176.518] GetProcessHeap () returned 0x10a0000 [0176.518] RtlReAllocateHeap (Heap=0x10a0000, Flags=0x0, Ptr=0x10dda48, Size=0xe) returned 0x10dd880 [0176.518] GetProcessHeap () returned 0x10a0000 [0176.518] RtlReAllocateHeap (Heap=0x10a0000, Flags=0x0, Ptr=0x10dd880, Size=0x1e) returned 0x10c8608 [0176.518] GetProcessHeap () returned 0x10a0000 [0176.519] RtlReAllocateHeap (Heap=0x10a0000, Flags=0x0, Ptr=0x10c8608, Size=0x20) returned 0x10c8478 [0176.519] GetProcessHeap () returned 0x10a0000 [0176.519] RtlReAllocateHeap (Heap=0x10a0000, Flags=0x0, Ptr=0x10c8478, Size=0x26) returned 0x10d1298 [0176.519] GetProcessHeap () returned 0x10a0000 [0176.519] RtlReAllocateHeap (Heap=0x10a0000, Flags=0x0, Ptr=0x10d1298, Size=0x28) returned 0x10d12f8 [0176.519] GetProcessHeap () returned 0x10a0000 [0176.519] RtlReAllocateHeap (Heap=0x10a0000, Flags=0x0, Ptr=0x10d12f8, Size=0x34) returned 0x10c7570 [0176.519] GetProcessHeap () returned 0x10a0000 [0176.519] RtlReAllocateHeap (Heap=0x10a0000, Flags=0x0, Ptr=0x10c7570, Size=0x36) returned 0x10c75f0 [0176.519] GetProcessHeap () returned 0x10a0000 [0176.520] RtlReAllocateHeap (Heap=0x10a0000, Flags=0x0, Ptr=0x10c75f0, Size=0x4e) returned 0x10b6290 [0176.520] GetProcessHeap () returned 0x10a0000 [0176.520] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10b6290) returned 1 [0176.520] lstrcmpiW (lpString1="netsh", lpString2="namespace") returned 1 [0176.521] lstrcmpiW (lpString1="netsh", lpString2="branchcache") returned 1 [0176.521] lstrcmpiW (lpString1="netsh", lpString2="advfirewall") returned 1 [0176.521] lstrcmpiW (lpString1="netsh", lpString2="firewall") returned 1 [0176.521] lstrcmpiW (lpString1="netsh", lpString2="interface") returned 1 [0176.521] lstrcmpiW (lpString1="netsh", lpString2="dhcp") returned 1 [0176.521] lstrcmpiW (lpString1="netsh", lpString2="dnsclient") returned 1 [0176.521] lstrcmpiW (lpString1="netsh", lpString2="routing") returned -1 [0176.521] lstrcmpiW (lpString1="netsh", lpString2="ip") returned 1 [0176.521] lstrcmpiW (lpString1="netsh", lpString2="ipv6") returned 1 [0176.522] lstrcmpiW (lpString1="netsh", lpString2="aaaa") returned 1 [0176.522] lstrcmpiW (lpString1="netsh", lpString2="ras") returned -1 [0176.522] _wcsnicmp (_String1="firewall", _String2="dump", _MaxCount=0x8) returned 2 [0176.522] _wcsnicmp (_String1="firewall", _String2="help", _MaxCount=0x8) returned -2 [0176.522] _wcsnicmp (_String1="firewall", _String2="?", _MaxCount=0x8) returned 39 [0176.522] _wcsnicmp (_String1="firewall", _String2="exec", _MaxCount=0x8) returned 1 [0176.522] _wcsnicmp (_String1="firewall", _String2="advfirew", _MaxCount=0x8) returned 5 [0176.522] _wcsnicmp (_String1="firewall", _String2="branchca", _MaxCount=0x8) returned 4 [0176.522] _wcsnicmp (_String1="firewall", _String2="bridge", _MaxCount=0x8) returned 4 [0176.523] _wcsnicmp (_String1="firewall", _String2="dhcpclie", _MaxCount=0x8) returned 2 [0176.523] _wcsnicmp (_String1="firewall", _String2="dnsclien", _MaxCount=0x8) returned 2 [0176.523] _wcsnicmp (_String1="firewall", _String2="firewall", _MaxCount=0x8) returned 0 [0176.523] lstrcmpiW (lpString1="firewall", lpString2="namespace") returned -1 [0176.523] lstrcmpiW (lpString1="firewall", lpString2="branchcache") returned 1 [0176.523] lstrcmpiW (lpString1="firewall", lpString2="advfirewall") returned 1 [0176.523] lstrcmpiW (lpString1="firewall", lpString2="firewall") returned 0 [0176.523] GetProcessHeap () returned 0x10a0000 [0176.523] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0xc) returned 0x10ddaf0 [0176.523] GetProcessHeap () returned 0x10a0000 [0176.524] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0xc) returned 0x10dda60 [0176.524] GetProcessHeap () returned 0x10a0000 [0176.524] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x4e) returned 0x10b6290 [0176.524] GetProcessHeap () returned 0x10a0000 [0176.524] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0xc) returned 0x10ddaa8 [0176.524] GetProcessHeap () returned 0x10a0000 [0176.524] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0xc) returned 0x10dd8f8 [0176.524] wcscpy_s (in: _Destination=0x10dd8f8, _SizeInWords=0x6, _Source="netsh" | out: _Destination="netsh") returned 0x0 [0176.524] GetProcessHeap () returned 0x10a0000 [0176.524] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0xc) returned 0x10ddb08 [0176.524] GetProcessHeap () returned 0x10a0000 [0176.525] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x12) returned 0x10cdb08 [0176.525] wcscpy_s (in: _Destination=0x10cdb08, _SizeInWords=0x9, _Source="firewall" | out: _Destination="firewall") returned 0x0 [0176.525] GetProcessHeap () returned 0x10a0000 [0176.525] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0xc) returned 0x10ddb20 [0176.525] GetProcessHeap () returned 0x10a0000 [0176.525] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x8) returned 0x10ddd70 [0176.525] wcscpy_s (in: _Destination=0x10ddd70, _SizeInWords=0x4, _Source="set" | out: _Destination="set") returned 0x0 [0176.525] GetProcessHeap () returned 0x10a0000 [0176.525] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0xc) returned 0x10dda18 [0176.525] GetProcessHeap () returned 0x10a0000 [0176.525] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0xe) returned 0x10dd850 [0176.526] wcscpy_s (in: _Destination=0x10dd850, _SizeInWords=0x7, _Source="opmode" | out: _Destination="opmode") returned 0x0 [0176.526] GetProcessHeap () returned 0x10a0000 [0176.526] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0xc) returned 0x10dd8e0 [0176.526] GetProcessHeap () returned 0x10a0000 [0176.526] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0xa) returned 0x10dd910 [0176.526] wcscpy_s (in: _Destination=0x10dd910, _SizeInWords=0x5, _Source="mode" | out: _Destination="mode") returned 0x0 [0176.526] GetProcessHeap () returned 0x10a0000 [0176.526] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0xc) returned 0x10dda48 [0176.527] GetProcessHeap () returned 0x10a0000 [0176.527] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x4) returned 0x10ddd30 [0176.527] wcscpy_s (in: _Destination=0x10ddd30, _SizeInWords=0x2, _Source="=" | out: _Destination="=") returned 0x0 [0176.527] GetProcessHeap () returned 0x10a0000 [0176.527] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0xc) returned 0x10dd9e8 [0176.527] GetProcessHeap () returned 0x10a0000 [0176.527] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x10) returned 0x10dd928 [0176.527] wcscpy_s (in: _Destination=0x10dd928, _SizeInWords=0x8, _Source="disable" | out: _Destination="disable") returned 0x0 [0176.527] GetProcessHeap () returned 0x10a0000 [0176.527] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10b6290) returned 1 [0176.527] GetProcessHeap () returned 0x10a0000 [0176.527] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10dda60) returned 1 [0176.527] GetProcessHeap () returned 0x10a0000 [0176.528] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10cdb08) returned 1 [0176.528] GetProcessHeap () returned 0x10a0000 [0176.528] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x12) returned 0x10cdb08 [0176.528] lstrcmpiW (lpString1="firewall", lpString2="routing") returned -1 [0176.528] lstrcmpiW (lpString1="firewall", lpString2="ip") returned -1 [0176.528] lstrcmpiW (lpString1="firewall", lpString2="ipv6") returned -1 [0176.528] lstrcmpiW (lpString1="firewall", lpString2="aaaa") returned 1 [0176.528] lstrcmpiW (lpString1="firewall", lpString2="ras") returned -1 [0176.528] _wcsnicmp (_String1="set", _String2="dum", _MaxCount=0x3) returned 15 [0176.529] _wcsnicmp (_String1="set", _String2="hel", _MaxCount=0x3) returned 11 [0176.529] _wcsnicmp (_String1="set", _String2="?", _MaxCount=0x3) returned 52 [0176.529] _wcsnicmp (_String1="set", _String2="res", _MaxCount=0x3) returned 1 [0176.529] _wcsnicmp (_String1="set", _String2="add", _MaxCount=0x3) returned 18 [0176.529] _wcsnicmp (_String1="set", _String2="del", _MaxCount=0x3) returned 15 [0176.529] _wcsnicmp (_String1="set", _String2="set", _MaxCount=0x3) returned 0 [0176.529] _wcsnicmp (_String1="opmode", _String2="help", _MaxCount=0x6) returned 7 [0176.529] _wcsnicmp (_String1="opmode", _String2="?", _MaxCount=0x6) returned 48 [0176.529] wcstok (in: _String="allowedprogram", _Delimiter=" ", _Context=0x10dbfa0 | out: _String="allowedprogram", _Context=0x10dbfa0) returned="allowedprogram" [0176.530] _wcsnicmp (_String1="opmode", _String2="allowe", _MaxCount=0x6) returned 14 [0176.530] wcstok (in: _String="icmpsetting", _Delimiter=" ", _Context=0x10dbfa0 | out: _String="icmpsetting", _Context=0x10dbfa0) returned="icmpsetting" [0176.530] _wcsnicmp (_String1="opmode", _String2="icmpse", _MaxCount=0x6) returned 6 [0176.530] wcstok (in: _String="logging", _Delimiter=" ", _Context=0x10dbfa0 | out: _String="logging", _Context=0x10dbfa0) returned="logging" [0176.541] _wcsnicmp (_String1="opmode", _String2="loggin", _MaxCount=0x6) returned 3 [0176.541] wcstok (in: _String="multicastbroadcastresponse", _Delimiter=" ", _Context=0x10dbfa0 | out: _String="multicastbroadcastresponse", _Context=0x10dbfa0) returned="multicastbroadcastresponse" [0176.541] _wcsnicmp (_String1="opmode", _String2="multic", _MaxCount=0x6) returned 2 [0176.541] wcstok (in: _String="notifications", _Delimiter=" ", _Context=0x10dbfa0 | out: _String="notifications", _Context=0x10dbfa0) returned="notifications" [0176.541] _wcsnicmp (_String1="opmode", _String2="notifi", _MaxCount=0x6) returned 1 [0176.541] wcstok (in: _String="opmode", _Delimiter=" ", _Context=0x10dbfa0 | out: _String="opmode", _Context=0x10dbfa0) returned="opmode" [0176.541] _wcsnicmp (_String1="opmode", _String2="opmode", _MaxCount=0x6) returned 0 [0176.541] wcstok (in: _String=0x0, _Delimiter=" ", _Context=0x10dbfa0 | out: _String=0x0, _Context=0x10dbfa0) returned 0x0 [0176.541] _wcsnicmp (_String1="mode=disable", _String2="help", _MaxCount=0xc) returned 5 [0176.541] _wcsnicmp (_String1="mode=disable", _String2="?", _MaxCount=0xc) returned 46 [0176.542] lstrcmpiW (lpString1="firewall", lpString2="netsh") returned -1 [0176.542] WinSqmAddToStream () returned 0x2487 [0176.542] MatchTagsInCmdLine () returned 0x0 [0176.542] wcspbrk (_String="mode=disable", _Control="=") returned="=disable" [0176.542] GetProcessHeap () returned 0x10a0000 [0176.542] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x1a) returned 0x10c8428 [0176.542] wcscpy_s (in: _Destination=0x10c8428, _SizeInWords=0xd, _Source="mode=disable" | out: _Destination="mode=disable") returned 0x0 [0176.542] wcstok (in: _String="mode=disable", _Delimiter="=", _Context=0x10c8428 | out: _String="mode", _Context=0x10c8428) returned="mode" [0176.542] _wcsnicmp (_String1="mode", _String2="mode", _MaxCount=0x4) returned 0 [0176.543] wcscpy_s (in: _Destination=0x10c8338, _SizeInWords=0xd, _Source="disable" | out: _Destination="disable") returned 0x0 [0176.543] GetProcessHeap () returned 0x10a0000 [0176.543] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10c8428) returned 1 [0176.543] MatchEnumTag () returned 0x0 [0176.543] _wcsnicmp (_String1="disable", _String2="enable", _MaxCount=0x7) returned -1 [0176.543] _wcsnicmp (_String1="disable", _String2="disable", _MaxCount=0x7) returned 0 [0180.904] PrintError () returned 0x132 [0180.905] LoadStringW (in: hInstance=0x73690000, uID=0x119a, lpBuffer=0xd5f230, cchBufferMax=16384 | out: lpBuffer="\nIMPORTANT: Command executed successfully.\nHowever, \"netsh firewall\" is deprecated;\nuse \"netsh advfirewall firewall\" instead.\nFor more information on using \"netsh advfirewall firewall\" commands\ninstead of \"netsh firewall\", see KB article 947709\nat https://go.microsoft.com/fwlink/?linkid=121488 .\n\n") returned 0x12a [0180.905] FormatMessageW (in: dwFlags=0x500, lpSource=0xd5f230, dwMessageId=0x0, dwLanguageId=0x0, lpBuffer=0xd5f22c, nSize=0x0, Arguments=0xd5f228 | out: lpBuffer="㘨԰\nIMPORTANT: Command executed successfully.\nHowever, \"netsh firewall\" is deprecated;\nuse \"netsh advfirewall firewall\" instead.\nFor more information on using \"netsh advfirewall firewall\" commands\ninstead of \"netsh firewall\", see KB article 947709\nat https://go.microsoft.com/fwlink/?linkid=121488 .\n\n") returned 0x132 [0180.905] GetStdHandle (nStdHandle=0xfffffff5) returned 0x90 [0180.906] GetConsoleOutputCP () returned 0x1b5 [0181.073] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\r\nIMPORTANT: Command executed successfully.\r\nHowever, \"netsh firewall\" is deprecated;\r\nuse \"netsh advfirewall firewall\" instead.\r\nFor more information on using \"netsh advfirewall firewall\" commands\r\ninstead of \"netsh firewall\", see KB article 947709\r\nat https://go.microsoft.com/fwlink/?linkid=121488 .\r\n\r\n", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 307 [0181.073] GetProcessHeap () returned 0x10a0000 [0181.073] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x133) returned 0x119a920 [0181.074] GetConsoleOutputCP () returned 0x1b5 [0181.155] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\r\nIMPORTANT: Command executed successfully.\r\nHowever, \"netsh firewall\" is deprecated;\r\nuse \"netsh advfirewall firewall\" instead.\r\nFor more information on using \"netsh advfirewall firewall\" commands\r\ninstead of \"netsh firewall\", see KB article 947709\r\nat https://go.microsoft.com/fwlink/?linkid=121488 .\r\n\r\n", cchWideChar=-1, lpMultiByteStr=0x119a920, cbMultiByte=307, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nIMPORTANT: Command executed successfully.\r\nHowever, \"netsh firewall\" is deprecated;\r\nuse \"netsh advfirewall firewall\" instead.\r\nFor more information on using \"netsh advfirewall firewall\" commands\r\ninstead of \"netsh firewall\", see KB article 947709\r\nat https://go.microsoft.com/fwlink/?linkid=121488 .\r\n\r\n", lpUsedDefaultChar=0x0) returned 307 [0181.155] WriteFile (in: hFile=0x90, lpBuffer=0x119a920*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0xd5f20c, lpOverlapped=0x0 | out: lpBuffer=0x119a920*, lpNumberOfBytesWritten=0xd5f20c*=0x132, lpOverlapped=0x0) returned 1 [0181.400] GetProcessHeap () returned 0x10a0000 [0181.400] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x119a920) returned 1 [0181.400] LocalFree (hMem=0x5303628) returned 0x0 [0181.400] LoadStringW (in: hInstance=0x0, uID=0x2, lpBuffer=0xd5f2cc, cchBufferMax=16384 | out: lpBuffer="Ok.\n") returned 0x4 [0181.400] FormatMessageW (in: dwFlags=0x500, lpSource=0xd5f2cc, dwMessageId=0x0, dwLanguageId=0x0, lpBuffer=0xd5f2b0, nSize=0x0, Arguments=0xd5f2c8 | out: lpBuffer="ಈĎ狔Ö胃ţꂰ獩㪧") returned 0x5 [0181.400] GetStdHandle (nStdHandle=0xfffffff5) returned 0x90 [0181.400] GetConsoleOutputCP () returned 0x1b5 [0181.404] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Ok.\r\n", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0181.404] GetProcessHeap () returned 0x10a0000 [0181.404] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x6) returned 0x10dde00 [0181.404] GetConsoleOutputCP () returned 0x1b5 [0181.407] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Ok.\r\n", cchWideChar=-1, lpMultiByteStr=0x10dde00, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ok.\r\n", lpUsedDefaultChar=0x0) returned 6 [0181.407] WriteFile (in: hFile=0x90, lpBuffer=0x10dde00*, nNumberOfBytesToWrite=0x5, lpNumberOfBytesWritten=0xd5f29c, lpOverlapped=0x0 | out: lpBuffer=0x10dde00*, lpNumberOfBytesWritten=0xd5f29c*=0x5, lpOverlapped=0x0) returned 1 [0181.513] GetProcessHeap () returned 0x10a0000 [0181.514] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10dde00) returned 1 [0181.514] LocalFree (hMem=0x10e0c88) returned 0x0 [0181.514] FormatMessageW (in: dwFlags=0x500, lpSource=0x1631310, dwMessageId=0x0, dwLanguageId=0x0, lpBuffer=0xd672c8, nSize=0x0, Arguments=0xd672d4 | out: lpBuffer="㨐č狘Ö耰ţ狤Ö狼Ö孳ţጐţ뾠č\x05") returned 0x2 [0181.514] GetStdHandle (nStdHandle=0xfffffff5) returned 0x90 [0181.514] GetConsoleOutputCP () returned 0x1b5 [0181.619] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\r\n", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0181.619] GetProcessHeap () returned 0x10a0000 [0181.619] RtlAllocateHeap (HeapHandle=0x10a0000, Flags=0x0, Size=0x3) returned 0x10ddc60 [0181.619] GetConsoleOutputCP () returned 0x1b5 [0181.624] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\r\n", cchWideChar=-1, lpMultiByteStr=0x10ddc60, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\n", lpUsedDefaultChar=0x0) returned 3 [0181.624] WriteFile (in: hFile=0x90, lpBuffer=0x10ddc60*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0xd672b4, lpOverlapped=0x0 | out: lpBuffer=0x10ddc60*, lpNumberOfBytesWritten=0xd672b4*=0x2, lpOverlapped=0x0) returned 1 [0181.626] GetProcessHeap () returned 0x10a0000 [0181.627] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ddc60) returned 1 [0181.627] LocalFree (hMem=0x10d3a10) returned 0x0 [0181.627] GetProcessHeap () returned 0x10a0000 [0181.627] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10dd898) returned 1 [0181.627] GetProcessHeap () returned 0x10a0000 [0181.627] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10cda88) returned 1 [0181.627] GetProcessHeap () returned 0x10a0000 [0181.627] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ddd10) returned 1 [0181.627] GetProcessHeap () returned 0x10a0000 [0181.627] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10dda30) returned 1 [0181.627] GetProcessHeap () returned 0x10a0000 [0181.627] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10c8338) returned 1 [0181.627] GetProcessHeap () returned 0x10a0000 [0181.627] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10c85e0) returned 1 [0181.627] GetProcessHeap () returned 0x10a0000 [0181.627] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10cdae8) returned 1 [0181.627] GetProcessHeap () returned 0x10a0000 [0181.628] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10dda78) returned 1 [0181.628] GetProcessHeap () returned 0x10a0000 [0181.628] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ddcc0) returned 1 [0181.628] GetProcessHeap () returned 0x10a0000 [0181.628] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10dd9d0) returned 1 [0181.628] GetProcessHeap () returned 0x10a0000 [0181.628] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10dd940) returned 1 [0181.628] GetProcessHeap () returned 0x10a0000 [0181.628] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10dd988) returned 1 [0181.628] GetProcessHeap () returned 0x10a0000 [0181.628] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10dd838) returned 1 [0181.628] GetProcessHeap () returned 0x10a0000 [0181.628] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ddac0) returned 1 [0181.628] GetProcessHeap () returned 0x10a0000 [0181.628] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ddc90) returned 1 [0181.628] GetProcessHeap () returned 0x10a0000 [0181.629] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ddad8) returned 1 [0181.629] GetProcessHeap () returned 0x10a0000 [0181.629] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10dda90) returned 1 [0181.629] GetProcessHeap () returned 0x10a0000 [0181.629] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10dd9b8) returned 1 [0181.629] GetProcessHeap () returned 0x10a0000 [0181.629] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10d3b60) returned 1 [0181.629] GetProcessHeap () returned 0x10a0000 [0181.629] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10d3ba8) returned 1 [0181.629] GetProcessHeap () returned 0x10a0000 [0181.629] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10d3c08) returned 1 [0181.629] GetProcessHeap () returned 0x10a0000 [0181.629] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10d3b90) returned 1 [0182.075] GetProcessHeap () returned 0x10a0000 [0182.075] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10d4128) returned 1 [0182.075] FreeLibrary (hLibModule=0x1630000) returned 1 [0182.075] FreeLibrary (hLibModule=0x73cf0000) returned 1 [0182.078] FreeLibrary (hLibModule=0x73bf0000) returned 1 [0182.100] free (_Block=0x1393918) [0182.102] LocalFree (hMem=0x10b8718) returned 0x0 [0182.102] LocalFree (hMem=0x10b8898) returned 0x0 [0182.103] LocalFree (hMem=0x10b8160) returned 0x0 [0182.103] LocalFree (hMem=0x10b5fd0) returned 0x0 [0182.103] LocalAlloc (uFlags=0x40, uBytes=0x178) returned 0x52e6dc0 [0182.104] LocalAlloc (uFlags=0x40, uBytes=0x10) returned 0x10d3ab8 [0182.104] LocalAlloc (uFlags=0x0, uBytes=0x10) returned 0x10d3848 [0182.104] free (_Block=0x13911a8) [0182.104] free (_Block=0x0) [0182.104] free (_Block=0x1391190) [0182.104] free (_Block=0x13938d0) [0182.104] free (_Block=0x13911c0) [0182.105] LocalAlloc (uFlags=0x40, uBytes=0x84) returned 0x10c5810 [0182.108] LocalFree (hMem=0x10c5810) returned 0x0 [0182.108] LocalFree (hMem=0x10b8928) returned 0x0 [0182.108] LocalFree (hMem=0x52e6dc0) returned 0x0 [0182.109] free (_Block=0x1391088) [0182.110] GetModuleHandleA (lpModuleName="MSVCRT.DLL") returned 0x768a0000 [0182.110] FreeLibrary (hLibModule=0x768a0000) returned 1 [0182.110] LocalFree (hMem=0x10d3848) returned 0x0 [0182.110] LocalFree (hMem=0x10d3ab8) returned 0x0 [0182.111] GlobalHandle (pMem=0x10b8608) returned 0xef0004 [0182.111] GlobalUnlock (hMem=0xef0004) returned 0 [0182.147] FreeLibrary (hLibModule=0x73900000) returned 1 [0182.157] FreeLibrary (hLibModule=0x73830000) returned 1 [0182.165] FreeLibrary (hLibModule=0x737d0000) returned 1 [0182.187] FreeLibrary (hLibModule=0x73690000) returned 1 [0182.200] FreeLibrary (hLibModule=0x73680000) returned 1 [0182.306] FreeLibrary (hLibModule=0x733a0000) returned 1 [0182.317] FreeLibrary (hLibModule=0x73300000) returned 1 [0182.327] FreeLibrary (hLibModule=0x73280000) returned 1 [0182.400] FreeLibrary (hLibModule=0x730c0000) returned 1 [0182.402] FreeLibrary (hLibModule=0x73070000) returned 1 [0182.408] FreeLibrary (hLibModule=0x73030000) returned 1 [0182.413] FreeLibrary (hLibModule=0x73020000) returned 1 [0182.414] FreeLibrary (hLibModule=0x72f30000) returned 1 [0182.503] FreeLibrary (hLibModule=0x72d20000) returned 1 [0182.521] FreeLibrary (hLibModule=0x72c70000) returned 1 [0182.605] GetProcessHeap () returned 0x10a0000 [0182.606] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10c63a8) returned 1 [0182.606] GetProcessHeap () returned 0x10a0000 [0182.606] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ab6e0) returned 1 [0182.606] GetProcessHeap () returned 0x10a0000 [0182.606] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ab790) returned 1 [0182.606] GetProcessHeap () returned 0x10a0000 [0182.606] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ab7c0) returned 1 [0182.606] GetProcessHeap () returned 0x10a0000 [0182.606] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ab7d0) returned 1 [0182.606] GetProcessHeap () returned 0x10a0000 [0182.606] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ab800) returned 1 [0182.607] GetProcessHeap () returned 0x10a0000 [0182.607] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ab630) returned 1 [0182.607] GetProcessHeap () returned 0x10a0000 [0182.607] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ab650) returned 1 [0182.607] GetProcessHeap () returned 0x10a0000 [0182.607] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10acf70) returned 1 [0182.607] GetProcessHeap () returned 0x10a0000 [0182.607] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad020) returned 1 [0182.607] GetProcessHeap () returned 0x10a0000 [0182.607] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad080) returned 1 [0182.607] GetProcessHeap () returned 0x10a0000 [0182.607] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10acf30) returned 1 [0182.607] GetProcessHeap () returned 0x10a0000 [0182.607] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10acfd0) returned 1 [0182.608] GetProcessHeap () returned 0x10a0000 [0182.608] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad030) returned 1 [0182.608] GetProcessHeap () returned 0x10a0000 [0182.608] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad050) returned 1 [0182.608] GetProcessHeap () returned 0x10a0000 [0182.608] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10acf20) returned 1 [0182.608] GetProcessHeap () returned 0x10a0000 [0182.608] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10acef0) returned 1 [0182.608] GetProcessHeap () returned 0x10a0000 [0182.608] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10acfb0) returned 1 [0182.608] GetProcessHeap () returned 0x10a0000 [0182.608] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10acf40) returned 1 [0182.608] GetProcessHeap () returned 0x10a0000 [0182.608] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10acee0) returned 1 [0182.608] GetProcessHeap () returned 0x10a0000 [0182.608] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10aced0) returned 1 [0182.609] GetProcessHeap () returned 0x10a0000 [0182.609] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10acfc0) returned 1 [0182.609] GetProcessHeap () returned 0x10a0000 [0182.609] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10acf80) returned 1 [0182.609] GetProcessHeap () returned 0x10a0000 [0182.609] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10acf90) returned 1 [0182.609] GetProcessHeap () returned 0x10a0000 [0182.609] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10acf00) returned 1 [0182.609] GetProcessHeap () returned 0x10a0000 [0182.609] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10acfe0) returned 1 [0182.609] GetProcessHeap () returned 0x10a0000 [0182.609] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10acf10) returned 1 [0182.609] GetProcessHeap () returned 0x10a0000 [0182.609] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad010) returned 1 [0182.609] GetProcessHeap () returned 0x10a0000 [0182.609] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10acf50) returned 1 [0182.609] GetProcessHeap () returned 0x10a0000 [0182.609] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad060) returned 1 [0182.610] GetProcessHeap () returned 0x10a0000 [0182.610] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad000) returned 1 [0182.610] GetProcessHeap () returned 0x10a0000 [0182.610] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10acfa0) returned 1 [0182.610] GetProcessHeap () returned 0x10a0000 [0182.610] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10acf60) returned 1 [0182.610] GetProcessHeap () returned 0x10a0000 [0182.610] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10acff0) returned 1 [0182.610] GetProcessHeap () returned 0x10a0000 [0182.610] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad040) returned 1 [0182.610] GetProcessHeap () returned 0x10a0000 [0182.610] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad070) returned 1 [0182.610] GetProcessHeap () returned 0x10a0000 [0182.610] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad090) returned 1 [0182.610] GetProcessHeap () returned 0x10a0000 [0182.610] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10acd60) returned 1 [0182.610] GetProcessHeap () returned 0x10a0000 [0182.610] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10acd70) returned 1 [0182.611] GetProcessHeap () returned 0x10a0000 [0182.611] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10acd80) returned 1 [0182.611] GetProcessHeap () returned 0x10a0000 [0182.611] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10acdb0) returned 1 [0182.611] GetProcessHeap () returned 0x10a0000 [0182.611] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ace70) returned 1 [0182.611] GetProcessHeap () returned 0x10a0000 [0182.611] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10acdd0) returned 1 [0182.611] GetProcessHeap () returned 0x10a0000 [0182.611] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ace80) returned 1 [0182.611] GetProcessHeap () returned 0x10a0000 [0182.611] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ace30) returned 1 [0182.611] GetProcessHeap () returned 0x10a0000 [0182.611] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ace40) returned 1 [0182.611] GetProcessHeap () returned 0x10a0000 [0182.612] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ace60) returned 1 [0182.612] GetProcessHeap () returned 0x10a0000 [0182.612] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10acd30) returned 1 [0182.612] GetProcessHeap () returned 0x10a0000 [0182.612] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10acd90) returned 1 [0182.612] GetProcessHeap () returned 0x10a0000 [0182.612] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ace50) returned 1 [0182.612] GetProcessHeap () returned 0x10a0000 [0182.612] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10accd0) returned 1 [0182.612] GetProcessHeap () returned 0x10a0000 [0182.612] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10acea0) returned 1 [0182.612] GetProcessHeap () returned 0x10a0000 [0182.612] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10acd00) returned 1 [0182.613] GetProcessHeap () returned 0x10a0000 [0182.613] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10acde0) returned 1 [0182.613] GetProcessHeap () returned 0x10a0000 [0182.613] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10acd50) returned 1 [0182.613] GetProcessHeap () returned 0x10a0000 [0182.613] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10acda0) returned 1 [0182.614] GetProcessHeap () returned 0x10a0000 [0182.614] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10acdc0) returned 1 [0182.614] GetProcessHeap () returned 0x10a0000 [0182.614] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ace20) returned 1 [0182.614] GetProcessHeap () returned 0x10a0000 [0182.614] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ace90) returned 1 [0182.614] GetProcessHeap () returned 0x10a0000 [0182.614] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10acec0) returned 1 [0182.614] GetProcessHeap () returned 0x10a0000 [0182.614] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10aceb0) returned 1 [0182.614] GetProcessHeap () returned 0x10a0000 [0182.615] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10acce0) returned 1 [0182.615] GetProcessHeap () returned 0x10a0000 [0182.615] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10accf0) returned 1 [0182.615] GetProcessHeap () returned 0x10a0000 [0182.615] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10acdf0) returned 1 [0182.615] GetProcessHeap () returned 0x10a0000 [0182.615] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10acd10) returned 1 [0182.615] GetProcessHeap () returned 0x10a0000 [0182.615] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ace00) returned 1 [0182.615] GetProcessHeap () returned 0x10a0000 [0182.615] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10acd20) returned 1 [0182.615] GetProcessHeap () returned 0x10a0000 [0182.615] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ace10) returned 1 [0182.616] GetProcessHeap () returned 0x10a0000 [0182.616] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10acd40) returned 1 [0182.616] GetProcessHeap () returned 0x10a0000 [0182.616] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad158) returned 1 [0182.616] GetProcessHeap () returned 0x10a0000 [0182.616] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad138) returned 1 [0182.616] GetProcessHeap () returned 0x10a0000 [0182.616] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad148) returned 1 [0182.616] GetProcessHeap () returned 0x10a0000 [0182.616] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad0f8) returned 1 [0182.616] GetProcessHeap () returned 0x10a0000 [0182.617] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad198) returned 1 [0182.617] GetProcessHeap () returned 0x10a0000 [0182.617] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad258) returned 1 [0182.617] GetProcessHeap () returned 0x10a0000 [0182.617] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad1a8) returned 1 [0182.617] GetProcessHeap () returned 0x10a0000 [0182.617] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad1e8) returned 1 [0182.617] GetProcessHeap () returned 0x10a0000 [0182.617] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad0d8) returned 1 [0182.617] GetProcessHeap () returned 0x10a0000 [0182.617] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad268) returned 1 [0182.617] GetProcessHeap () returned 0x10a0000 [0182.617] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad168) returned 1 [0182.617] GetProcessHeap () returned 0x10a0000 [0182.618] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad1b8) returned 1 [0182.618] GetProcessHeap () returned 0x10a0000 [0182.618] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad1c8) returned 1 [0182.618] GetProcessHeap () returned 0x10a0000 [0182.618] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad2b8) returned 1 [0182.618] GetProcessHeap () returned 0x10a0000 [0182.618] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad108) returned 1 [0182.618] GetProcessHeap () returned 0x10a0000 [0182.618] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad1f8) returned 1 [0182.618] GetProcessHeap () returned 0x10a0000 [0182.618] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad2c8) returned 1 [0182.618] GetProcessHeap () returned 0x10a0000 [0182.619] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad188) returned 1 [0182.619] GetProcessHeap () returned 0x10a0000 [0182.619] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad248) returned 1 [0182.619] GetProcessHeap () returned 0x10a0000 [0182.619] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad278) returned 1 [0182.619] GetProcessHeap () returned 0x10a0000 [0182.619] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad298) returned 1 [0182.619] GetProcessHeap () returned 0x10a0000 [0182.620] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad1d8) returned 1 [0182.620] GetProcessHeap () returned 0x10a0000 [0182.620] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad288) returned 1 [0182.620] GetProcessHeap () returned 0x10a0000 [0182.620] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad178) returned 1 [0182.620] GetProcessHeap () returned 0x10a0000 [0182.620] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad208) returned 1 [0182.620] GetProcessHeap () returned 0x10a0000 [0182.620] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad2a8) returned 1 [0182.620] GetProcessHeap () returned 0x10a0000 [0182.620] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad118) returned 1 [0182.620] GetProcessHeap () returned 0x10a0000 [0182.620] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad218) returned 1 [0182.653] GetProcessHeap () returned 0x10a0000 [0182.653] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad128) returned 1 [0182.653] GetProcessHeap () returned 0x10a0000 [0182.653] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad228) returned 1 [0182.653] GetProcessHeap () returned 0x10a0000 [0182.653] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad238) returned 1 [0182.653] GetProcessHeap () returned 0x10a0000 [0182.653] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad0e8) returned 1 [0182.653] GetProcessHeap () returned 0x10a0000 [0182.653] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad418) returned 1 [0182.653] GetProcessHeap () returned 0x10a0000 [0182.653] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad428) returned 1 [0182.654] GetProcessHeap () returned 0x10a0000 [0182.654] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad2d8) returned 1 [0182.654] GetProcessHeap () returned 0x10a0000 [0182.654] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad3f8) returned 1 [0182.654] GetProcessHeap () returned 0x10a0000 [0182.654] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad368) returned 1 [0182.654] GetProcessHeap () returned 0x10a0000 [0182.654] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad2f8) returned 1 [0182.654] GetProcessHeap () returned 0x10a0000 [0182.654] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad458) returned 1 [0182.654] GetProcessHeap () returned 0x10a0000 [0182.654] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad478) returned 1 [0182.654] GetProcessHeap () returned 0x10a0000 [0182.655] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad398) returned 1 [0182.655] GetProcessHeap () returned 0x10a0000 [0182.655] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad328) returned 1 [0182.655] GetProcessHeap () returned 0x10a0000 [0182.655] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad2e8) returned 1 [0182.655] GetProcessHeap () returned 0x10a0000 [0182.655] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad438) returned 1 [0182.655] GetProcessHeap () returned 0x10a0000 [0182.655] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad3b8) returned 1 [0182.655] GetProcessHeap () returned 0x10a0000 [0182.655] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad498) returned 1 [0182.655] GetProcessHeap () returned 0x10a0000 [0182.655] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad3e8) returned 1 [0182.655] GetProcessHeap () returned 0x10a0000 [0182.656] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad488) returned 1 [0182.656] GetProcessHeap () returned 0x10a0000 [0182.656] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad3a8) returned 1 [0182.656] GetProcessHeap () returned 0x10a0000 [0182.656] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad408) returned 1 [0182.656] GetProcessHeap () returned 0x10a0000 [0182.656] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad448) returned 1 [0182.656] GetProcessHeap () returned 0x10a0000 [0182.656] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad388) returned 1 [0182.656] GetProcessHeap () returned 0x10a0000 [0182.656] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad338) returned 1 [0182.656] GetProcessHeap () returned 0x10a0000 [0182.656] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad468) returned 1 [0182.656] GetProcessHeap () returned 0x10a0000 [0182.656] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad318) returned 1 [0182.657] GetProcessHeap () returned 0x10a0000 [0182.657] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad308) returned 1 [0182.657] GetProcessHeap () returned 0x10a0000 [0182.657] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad348) returned 1 [0182.657] GetProcessHeap () returned 0x10a0000 [0182.657] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad3c8) returned 1 [0182.657] GetProcessHeap () returned 0x10a0000 [0182.657] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad378) returned 1 [0182.657] GetProcessHeap () returned 0x10a0000 [0182.658] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad358) returned 1 [0182.658] GetProcessHeap () returned 0x10a0000 [0182.658] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad3d8) returned 1 [0182.658] GetProcessHeap () returned 0x10a0000 [0182.658] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad760) returned 1 [0182.658] GetProcessHeap () returned 0x10a0000 [0182.658] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad860) returned 1 [0182.658] GetProcessHeap () returned 0x10a0000 [0182.658] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad730) returned 1 [0182.658] GetProcessHeap () returned 0x10a0000 [0182.658] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad7c0) returned 1 [0182.658] GetProcessHeap () returned 0x10a0000 [0182.658] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad6e0) returned 1 [0182.658] GetProcessHeap () returned 0x10a0000 [0182.658] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad7f0) returned 1 [0182.658] GetProcessHeap () returned 0x10a0000 [0182.658] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad7d0) returned 1 [0182.659] GetProcessHeap () returned 0x10a0000 [0182.659] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad700) returned 1 [0182.659] GetProcessHeap () returned 0x10a0000 [0182.659] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad810) returned 1 [0182.659] GetProcessHeap () returned 0x10a0000 [0182.659] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad710) returned 1 [0182.659] GetProcessHeap () returned 0x10a0000 [0182.659] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad840) returned 1 [0182.660] GetProcessHeap () returned 0x10a0000 [0182.660] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad720) returned 1 [0182.660] GetProcessHeap () returned 0x10a0000 [0182.660] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad7e0) returned 1 [0182.660] GetProcessHeap () returned 0x10a0000 [0182.660] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad800) returned 1 [0182.660] GetProcessHeap () returned 0x10a0000 [0182.660] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad820) returned 1 [0182.660] GetProcessHeap () returned 0x10a0000 [0182.660] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad830) returned 1 [0182.660] GetProcessHeap () returned 0x10a0000 [0182.660] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad790) returned 1 [0182.660] GetProcessHeap () returned 0x10a0000 [0182.660] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad850) returned 1 [0182.660] GetProcessHeap () returned 0x10a0000 [0182.661] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad8a0) returned 1 [0182.661] GetProcessHeap () returned 0x10a0000 [0182.661] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad750) returned 1 [0182.661] GetProcessHeap () returned 0x10a0000 [0182.661] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad890) returned 1 [0182.661] GetProcessHeap () returned 0x10a0000 [0182.661] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad6f0) returned 1 [0182.661] GetProcessHeap () returned 0x10a0000 [0182.661] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad870) returned 1 [0182.661] GetProcessHeap () returned 0x10a0000 [0182.661] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad880) returned 1 [0182.661] GetProcessHeap () returned 0x10a0000 [0182.661] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad740) returned 1 [0182.661] GetProcessHeap () returned 0x10a0000 [0182.662] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad770) returned 1 [0182.663] GetProcessHeap () returned 0x10a0000 [0182.663] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad780) returned 1 [0182.663] GetProcessHeap () returned 0x10a0000 [0182.663] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad7a0) returned 1 [0182.663] GetProcessHeap () returned 0x10a0000 [0182.663] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad7b0) returned 1 [0182.663] GetProcessHeap () returned 0x10a0000 [0182.663] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad670) returned 1 [0182.663] GetProcessHeap () returned 0x10a0000 [0182.663] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad5f0) returned 1 [0182.663] GetProcessHeap () returned 0x10a0000 [0182.663] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad640) returned 1 [0182.663] GetProcessHeap () returned 0x10a0000 [0182.663] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad690) returned 1 [0182.663] GetProcessHeap () returned 0x10a0000 [0182.664] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad660) returned 1 [0182.664] GetProcessHeap () returned 0x10a0000 [0182.664] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad6a0) returned 1 [0182.664] GetProcessHeap () returned 0x10a0000 [0182.664] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad680) returned 1 [0182.664] GetProcessHeap () returned 0x10a0000 [0182.664] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad520) returned 1 [0182.664] GetProcessHeap () returned 0x10a0000 [0182.664] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad5a0) returned 1 [0182.664] GetProcessHeap () returned 0x10a0000 [0182.664] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad6b0) returned 1 [0182.664] GetProcessHeap () returned 0x10a0000 [0182.664] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad530) returned 1 [0182.664] GetProcessHeap () returned 0x10a0000 [0182.664] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad510) returned 1 [0182.665] GetProcessHeap () returned 0x10a0000 [0182.665] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad560) returned 1 [0182.665] GetProcessHeap () returned 0x10a0000 [0182.665] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad6c0) returned 1 [0182.665] GetProcessHeap () returned 0x10a0000 [0182.665] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad5d0) returned 1 [0182.665] GetProcessHeap () returned 0x10a0000 [0182.665] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad570) returned 1 [0182.665] GetProcessHeap () returned 0x10a0000 [0182.665] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad6d0) returned 1 [0182.665] GetProcessHeap () returned 0x10a0000 [0182.665] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad4e0) returned 1 [0182.665] GetProcessHeap () returned 0x10a0000 [0182.665] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad540) returned 1 [0182.666] GetProcessHeap () returned 0x10a0000 [0182.666] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad550) returned 1 [0182.666] GetProcessHeap () returned 0x10a0000 [0182.666] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad650) returned 1 [0182.666] GetProcessHeap () returned 0x10a0000 [0182.666] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad4f0) returned 1 [0182.666] GetProcessHeap () returned 0x10a0000 [0182.666] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad580) returned 1 [0182.666] GetProcessHeap () returned 0x10a0000 [0182.666] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad5b0) returned 1 [0182.666] GetProcessHeap () returned 0x10a0000 [0182.666] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad500) returned 1 [0182.666] GetProcessHeap () returned 0x10a0000 [0182.666] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad590) returned 1 [0182.666] GetProcessHeap () returned 0x10a0000 [0182.666] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad5c0) returned 1 [0182.666] GetProcessHeap () returned 0x10a0000 [0182.667] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad5e0) returned 1 [0182.667] GetProcessHeap () returned 0x10a0000 [0182.667] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad600) returned 1 [0182.667] GetProcessHeap () returned 0x10a0000 [0182.667] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad610) returned 1 [0182.667] GetProcessHeap () returned 0x10a0000 [0182.667] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad620) returned 1 [0182.668] GetProcessHeap () returned 0x10a0000 [0182.669] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10ad630) returned 1 [0182.669] GetProcessHeap () returned 0x10a0000 [0182.669] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10adb48) returned 1 [0182.669] GetProcessHeap () returned 0x10a0000 [0182.669] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10adc38) returned 1 [0182.669] GetProcessHeap () returned 0x10a0000 [0182.669] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10adbb8) returned 1 [0182.669] GetProcessHeap () returned 0x10a0000 [0182.669] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10adc08) returned 1 [0182.669] GetProcessHeap () returned 0x10a0000 [0182.670] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10adbe8) returned 1 [0182.670] GetProcessHeap () returned 0x10a0000 [0182.670] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10adb58) returned 1 [0182.670] GetProcessHeap () returned 0x10a0000 [0182.670] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10adc48) returned 1 [0182.670] GetProcessHeap () returned 0x10a0000 [0182.671] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10adc28) returned 1 [0182.671] GetProcessHeap () returned 0x10a0000 [0182.671] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10adb98) returned 1 [0182.671] GetProcessHeap () returned 0x10a0000 [0182.671] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10adbd8) returned 1 [0182.671] GetProcessHeap () returned 0x10a0000 [0182.671] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10adbf8) returned 1 [0182.671] GetProcessHeap () returned 0x10a0000 [0182.671] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10adaf8) returned 1 [0182.671] GetProcessHeap () returned 0x10a0000 [0182.671] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10adbc8) returned 1 [0182.672] GetProcessHeap () returned 0x10a0000 [0182.672] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10adc58) returned 1 [0182.672] GetProcessHeap () returned 0x10a0000 [0182.672] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10adc18) returned 1 [0182.672] GetProcessHeap () returned 0x10a0000 [0182.672] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10adc68) returned 1 [0182.672] GetProcessHeap () returned 0x10a0000 [0182.672] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10adc88) returned 1 [0182.672] GetProcessHeap () returned 0x10a0000 [0182.672] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10adc98) returned 1 [0182.673] GetProcessHeap () returned 0x10a0000 [0182.673] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10adc78) returned 1 [0182.673] GetProcessHeap () returned 0x10a0000 [0182.673] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10adb68) returned 1 [0182.673] GetProcessHeap () returned 0x10a0000 [0182.673] RtlFreeHeap (HeapHandle=0x10a0000, Flags=0x0, BaseAddress=0x10adb78) returned 1 [0182.673] FreeLibrary (hLibModule=0x72b90000) returned 1 [0182.675] exit (_Code=0) Thread: id = 141 os_tid = 0x1044 Thread: id = 142 os_tid = 0x12b8 [0181.944] LocalAlloc (uFlags=0x40, uBytes=0x178) returned 0x10d3f60 [0181.944] LocalAlloc (uFlags=0x40, uBytes=0x10) returned 0x10d3bd8 [0181.944] LocalAlloc (uFlags=0x0, uBytes=0xc) returned 0x10d3c08 [0181.958] LocalAlloc (uFlags=0x40, uBytes=0x84) returned 0x10c5390 [0181.959] LocalReAlloc (hMem=0x10d3c08, uBytes=0x10, uFlags=0x2) returned 0x10a4e98 [0181.961] LocalFree (hMem=0x10d3f60) returned 0x0 [0181.961] LocalFree (hMem=0x10c5390) returned 0x0 [0181.961] LocalFree (hMem=0x10a4e98) returned 0x0 [0181.961] LocalFree (hMem=0x10d3bd8) returned 0x0 Thread: id = 143 os_tid = 0x1174 Thread: id = 144 os_tid = 0x1258